From 19b82b24ede91fcc729cf3489dbfbae02a1710f1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 22:12:45 +0000
Subject: [PATCH 001/345] chore(deps-dev): bump vite from 7.3.1 to 7.3.2 in
 /frontend

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f2e0ccfd..143954c2 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -12060,9 +12060,9 @@
       }
     },
     "node_modules/vite": {
-      "version": "7.3.1",
-      "resolved": "https://registry.npmmirror.com/vite/-/vite-7.3.1.tgz",
-      "integrity": "sha512-w+N7Hifpc3gRjZ63vYBXA56dvvRlNWRczTdmCBBa+CotUzAPf5b7YMdMR/8CQoeYE5LX3W4wj6RYTgonm1b9DA==",
+      "version": "7.3.2",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.2.tgz",
+      "integrity": "sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

From ff3525e46ba95981bf0a1c4cee43cd941f562ef9 Mon Sep 17 00:00:00 2001
From: Rousseau Vincent <vincentrou@gmail.com>
Date: Wed, 8 Apr 2026 10:22:33 +0200
Subject: [PATCH 002/345] Update surrealdb user and add gpu for ollama

Added user root for surrealdb service and nvidia GPU support in ollama service.
---
 docs/0-START-HERE/quick-start-local.md | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index 3a5c9a02..07d48d05 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -32,6 +32,7 @@ services:
   surrealdb:
     image: surrealdb/surrealdb:v2
     command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    user: root
     ports:
       - "8000:8000"
     volumes:
@@ -65,10 +66,15 @@ services:
       - "11434:11434"
     volumes:
       - ./ollama_models:/root/.ollama
-    environment:
-      # Optional: set GPU support if available
-      - OLLAMA_NUM_GPU=0
     restart: always
+    # Optional: set GPU support if available
+    #deploy:
+    #  resources:
+    #    reservations:
+    #      devices:
+    #        - driver: nvidia
+    #          count: 1
+    #          capabilities: [gpu]
 
 ```
 

From 3755b1f2d4f60e736de73a4087dd35e138f4c743 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 21:55:21 +0000
Subject: [PATCH 003/345] chore(deps): bump cryptography from 46.0.6 to 46.0.7

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.6 to 46.0.7.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.6...46.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 72 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 36 insertions(+), 36 deletions(-)

diff --git a/uv.lock b/uv.lock
index 10608e2d..994ae139 100644
--- a/uv.lock
+++ b/uv.lock
@@ -464,47 +464,47 @@ wheels = [
 
 [[package]]
 name = "cryptography"
-version = "46.0.6"
+version = "46.0.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cffi", marker = "platform_python_implementation != 'PyPy'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a4/ba/04b1bd4218cbc58dc90ce967106d51582371b898690f3ae0402876cc4f34/cryptography-46.0.6.tar.gz", hash = "sha256:27550628a518c5c6c903d84f637fbecf287f6cb9ced3804838a1295dc1fd0759", size = 750542, upload-time = "2026-03-25T23:34:53.396Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/47/93/ac8f3d5ff04d54bc814e961a43ae5b0b146154c89c61b47bb07557679b18/cryptography-46.0.7.tar.gz", hash = "sha256:e4cfd68c5f3e0bfdad0d38e023239b96a2fe84146481852dffbcca442c245aa5", size = 750652, upload-time = "2026-04-08T01:57:54.692Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/47/23/9285e15e3bc57325b0a72e592921983a701efc1ee8f91c06c5f0235d86d9/cryptography-46.0.6-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:64235194bad039a10bb6d2d930ab3323baaec67e2ce36215fd0952fad0930ca8", size = 7176401, upload-time = "2026-03-25T23:33:22.096Z" },
-    { url = "https://files.pythonhosted.org/packages/60/f8/e61f8f13950ab6195b31913b42d39f0f9afc7d93f76710f299b5ec286ae6/cryptography-46.0.6-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:26031f1e5ca62fcb9d1fcb34b2b60b390d1aacaa15dc8b895a9ed00968b97b30", size = 4275275, upload-time = "2026-03-25T23:33:23.844Z" },
-    { url = "https://files.pythonhosted.org/packages/19/69/732a736d12c2631e140be2348b4ad3d226302df63ef64d30dfdb8db7ad1c/cryptography-46.0.6-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:9a693028b9cbe51b5a1136232ee8f2bc242e4e19d456ded3fa7c86e43c713b4a", size = 4425320, upload-time = "2026-03-25T23:33:25.703Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/12/123be7292674abf76b21ac1fc0e1af50661f0e5b8f0ec8285faac18eb99e/cryptography-46.0.6-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:67177e8a9f421aa2d3a170c3e56eca4e0128883cf52a071a7cbf53297f18b175", size = 4278082, upload-time = "2026-03-25T23:33:27.423Z" },
-    { url = "https://files.pythonhosted.org/packages/5b/ba/d5e27f8d68c24951b0a484924a84c7cdaed7502bac9f18601cd357f8b1d2/cryptography-46.0.6-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:d9528b535a6c4f8ff37847144b8986a9a143585f0540fbcb1a98115b543aa463", size = 4926514, upload-time = "2026-03-25T23:33:29.206Z" },
-    { url = "https://files.pythonhosted.org/packages/34/71/1ea5a7352ae516d5512d17babe7e1b87d9db5150b21f794b1377eac1edc0/cryptography-46.0.6-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:22259338084d6ae497a19bae5d4c66b7ca1387d3264d1c2c0e72d9e9b6a77b97", size = 4457766, upload-time = "2026-03-25T23:33:30.834Z" },
-    { url = "https://files.pythonhosted.org/packages/01/59/562be1e653accee4fdad92c7a2e88fced26b3fdfce144047519bbebc299e/cryptography-46.0.6-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:760997a4b950ff00d418398ad73fbc91aa2894b5c1db7ccb45b4f68b42a63b3c", size = 3986535, upload-time = "2026-03-25T23:33:33.02Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/8b/b1ebfeb788bf4624d36e45ed2662b8bd43a05ff62157093c1539c1288a18/cryptography-46.0.6-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:3dfa6567f2e9e4c5dceb8ccb5a708158a2a871052fa75c8b78cb0977063f1507", size = 4277618, upload-time = "2026-03-25T23:33:34.567Z" },
-    { url = "https://files.pythonhosted.org/packages/dd/52/a005f8eabdb28df57c20f84c44d397a755782d6ff6d455f05baa2785bd91/cryptography-46.0.6-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:cdcd3edcbc5d55757e5f5f3d330dd00007ae463a7e7aa5bf132d1f22a4b62b19", size = 4890802, upload-time = "2026-03-25T23:33:37.034Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/4d/8e7d7245c79c617d08724e2efa397737715ca0ec830ecb3c91e547302555/cryptography-46.0.6-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:d4e4aadb7fc1f88687f47ca20bb7227981b03afaae69287029da08096853b738", size = 4457425, upload-time = "2026-03-25T23:33:38.904Z" },
-    { url = "https://files.pythonhosted.org/packages/1d/5c/f6c3596a1430cec6f949085f0e1a970638d76f81c3ea56d93d564d04c340/cryptography-46.0.6-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:2b417edbe8877cda9022dde3a008e2deb50be9c407eef034aeeb3a8b11d9db3c", size = 4405530, upload-time = "2026-03-25T23:33:40.842Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/c9/9f9cea13ee2dbde070424e0c4f621c091a91ffcc504ffea5e74f0e1daeff/cryptography-46.0.6-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:380343e0653b1c9d7e1f55b52aaa2dbb2fdf2730088d48c43ca1c7c0abb7cc2f", size = 4667896, upload-time = "2026-03-25T23:33:42.781Z" },
-    { url = "https://files.pythonhosted.org/packages/ad/b5/1895bc0821226f129bc74d00eccfc6a5969e2028f8617c09790bf89c185e/cryptography-46.0.6-cp311-abi3-win32.whl", hash = "sha256:bcb87663e1f7b075e48c3be3ecb5f0b46c8fc50b50a97cf264e7f60242dca3f2", size = 3026348, upload-time = "2026-03-25T23:33:45.021Z" },
-    { url = "https://files.pythonhosted.org/packages/c3/f8/c9bcbf0d3e6ad288b9d9aa0b1dee04b063d19e8c4f871855a03ab3a297ab/cryptography-46.0.6-cp311-abi3-win_amd64.whl", hash = "sha256:6739d56300662c468fddb0e5e291f9b4d084bead381667b9e654c7dd81705124", size = 3483896, upload-time = "2026-03-25T23:33:46.649Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/cc/f330e982852403da79008552de9906804568ae9230da8432f7496ce02b71/cryptography-46.0.6-cp38-abi3-macosx_10_9_universal2.whl", hash = "sha256:12cae594e9473bca1a7aceb90536060643128bb274fcea0fc459ab90f7d1ae7a", size = 7162776, upload-time = "2026-03-25T23:34:13.308Z" },
-    { url = "https://files.pythonhosted.org/packages/49/b3/dc27efd8dcc4bff583b3f01d4a3943cd8b5821777a58b3a6a5f054d61b79/cryptography-46.0.6-cp38-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:639301950939d844a9e1c4464d7e07f902fe9a7f6b215bb0d4f28584729935d8", size = 4270529, upload-time = "2026-03-25T23:34:15.019Z" },
-    { url = "https://files.pythonhosted.org/packages/e6/05/e8d0e6eb4f0d83365b3cb0e00eb3c484f7348db0266652ccd84632a3d58d/cryptography-46.0.6-cp38-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:ed3775295fb91f70b4027aeba878d79b3e55c0b3e97eaa4de71f8f23a9f2eb77", size = 4414827, upload-time = "2026-03-25T23:34:16.604Z" },
-    { url = "https://files.pythonhosted.org/packages/2f/97/daba0f5d2dc6d855e2dcb70733c812558a7977a55dd4a6722756628c44d1/cryptography-46.0.6-cp38-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:8927ccfbe967c7df312ade694f987e7e9e22b2425976ddbf28271d7e58845290", size = 4271265, upload-time = "2026-03-25T23:34:18.586Z" },
-    { url = "https://files.pythonhosted.org/packages/89/06/fe1fce39a37ac452e58d04b43b0855261dac320a2ebf8f5260dd55b201a9/cryptography-46.0.6-cp38-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:b12c6b1e1651e42ab5de8b1e00dc3b6354fdfd778e7fa60541ddacc27cd21410", size = 4916800, upload-time = "2026-03-25T23:34:20.561Z" },
-    { url = "https://files.pythonhosted.org/packages/ff/8a/b14f3101fe9c3592603339eb5d94046c3ce5f7fc76d6512a2d40efd9724e/cryptography-46.0.6-cp38-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:063b67749f338ca9c5a0b7fe438a52c25f9526b851e24e6c9310e7195aad3b4d", size = 4448771, upload-time = "2026-03-25T23:34:22.406Z" },
-    { url = "https://files.pythonhosted.org/packages/01/b3/0796998056a66d1973fd52ee89dc1bb3b6581960a91ad4ac705f182d398f/cryptography-46.0.6-cp38-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:02fad249cb0e090b574e30b276a3da6a149e04ee2f049725b1f69e7b8351ec70", size = 3978333, upload-time = "2026-03-25T23:34:24.281Z" },
-    { url = "https://files.pythonhosted.org/packages/c5/3d/db200af5a4ffd08918cd55c08399dc6c9c50b0bc72c00a3246e099d3a849/cryptography-46.0.6-cp38-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:7e6142674f2a9291463e5e150090b95a8519b2fb6e6aaec8917dd8d094ce750d", size = 4271069, upload-time = "2026-03-25T23:34:25.895Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/18/61acfd5b414309d74ee838be321c636fe71815436f53c9f0334bf19064fa/cryptography-46.0.6-cp38-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:456b3215172aeefb9284550b162801d62f5f264a081049a3e94307fe20792cfa", size = 4878358, upload-time = "2026-03-25T23:34:27.67Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/65/5bf43286d566f8171917cae23ac6add941654ccf085d739195a4eacf1674/cryptography-46.0.6-cp38-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:341359d6c9e68834e204ceaf25936dffeafea3829ab80e9503860dcc4f4dac58", size = 4448061, upload-time = "2026-03-25T23:34:29.375Z" },
-    { url = "https://files.pythonhosted.org/packages/e0/25/7e49c0fa7205cf3597e525d156a6bce5b5c9de1fd7e8cb01120e459f205a/cryptography-46.0.6-cp38-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:9a9c42a2723999a710445bc0d974e345c32adfd8d2fac6d8a251fa829ad31cfb", size = 4399103, upload-time = "2026-03-25T23:34:32.036Z" },
-    { url = "https://files.pythonhosted.org/packages/44/46/466269e833f1c4718d6cd496ffe20c56c9c8d013486ff66b4f69c302a68d/cryptography-46.0.6-cp38-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:6617f67b1606dfd9fe4dbfa354a9508d4a6d37afe30306fe6c101b7ce3274b72", size = 4659255, upload-time = "2026-03-25T23:34:33.679Z" },
-    { url = "https://files.pythonhosted.org/packages/0a/09/ddc5f630cc32287d2c953fc5d32705e63ec73e37308e5120955316f53827/cryptography-46.0.6-cp38-abi3-win32.whl", hash = "sha256:7f6690b6c55e9c5332c0b59b9c8a3fb232ebf059094c17f9019a51e9827df91c", size = 3010660, upload-time = "2026-03-25T23:34:35.418Z" },
-    { url = "https://files.pythonhosted.org/packages/1b/82/ca4893968aeb2709aacfb57a30dec6fa2ab25b10fa9f064b8882ce33f599/cryptography-46.0.6-cp38-abi3-win_amd64.whl", hash = "sha256:79e865c642cfc5c0b3eb12af83c35c5aeff4fa5c672dc28c43721c2c9fdd2f0f", size = 3471160, upload-time = "2026-03-25T23:34:37.191Z" },
-    { url = "https://files.pythonhosted.org/packages/2e/84/7ccff00ced5bac74b775ce0beb7d1be4e8637536b522b5df9b73ada42da2/cryptography-46.0.6-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:2ea0f37e9a9cf0df2952893ad145fd9627d326a59daec9b0802480fa3bcd2ead", size = 3475444, upload-time = "2026-03-25T23:34:38.944Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/1f/4c926f50df7749f000f20eede0c896769509895e2648db5da0ed55db711d/cryptography-46.0.6-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:a3e84d5ec9ba01f8fd03802b2147ba77f0c8f2617b2aff254cedd551844209c8", size = 4218227, upload-time = "2026-03-25T23:34:40.871Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/65/707be3ffbd5f786028665c3223e86e11c4cda86023adbc56bd72b1b6bab5/cryptography-46.0.6-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:12f0fa16cc247b13c43d56d7b35287ff1569b5b1f4c5e87e92cc4fcc00cd10c0", size = 4381399, upload-time = "2026-03-25T23:34:42.609Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/6d/73557ed0ef7d73d04d9aba745d2c8e95218213687ee5e76b7d236a5030fc/cryptography-46.0.6-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:50575a76e2951fe7dbd1f56d181f8c5ceeeb075e9ff88e7ad997d2f42af06e7b", size = 4217595, upload-time = "2026-03-25T23:34:44.205Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/c5/e1594c4eec66a567c3ac4400008108a415808be2ce13dcb9a9045c92f1a0/cryptography-46.0.6-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:90e5f0a7b3be5f40c3a0a0eafb32c681d8d2c181fc2a1bdabe9b3f611d9f6b1a", size = 4380912, upload-time = "2026-03-25T23:34:46.328Z" },
-    { url = "https://files.pythonhosted.org/packages/1a/89/843b53614b47f97fe1abc13f9a86efa5ec9e275292c457af1d4a60dc80e0/cryptography-46.0.6-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:6728c49e3b2c180ef26f8e9f0a883a2c585638db64cf265b49c9ba10652d430e", size = 3409955, upload-time = "2026-03-25T23:34:48.465Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/5d/4a8f770695d73be252331e60e526291e3df0c9b27556a90a6b47bccca4c2/cryptography-46.0.7-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:ea42cbe97209df307fdc3b155f1b6fa2577c0defa8f1f7d3be7d31d189108ad4", size = 7179869, upload-time = "2026-04-08T01:56:17.157Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/45/6d80dc379b0bbc1f9d1e429f42e4cb9e1d319c7a8201beffd967c516ea01/cryptography-46.0.7-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:b36a4695e29fe69215d75960b22577197aca3f7a25b9cf9d165dcfe9d80bc325", size = 4275492, upload-time = "2026-04-08T01:56:19.36Z" },
+    { url = "https://files.pythonhosted.org/packages/4a/9a/1765afe9f572e239c3469f2cb429f3ba7b31878c893b246b4b2994ffe2fe/cryptography-46.0.7-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:5ad9ef796328c5e3c4ceed237a183f5d41d21150f972455a9d926593a1dcb308", size = 4426670, upload-time = "2026-04-08T01:56:21.415Z" },
+    { url = "https://files.pythonhosted.org/packages/8f/3e/af9246aaf23cd4ee060699adab1e47ced3f5f7e7a8ffdd339f817b446462/cryptography-46.0.7-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:73510b83623e080a2c35c62c15298096e2a5dc8d51c3b4e1740211839d0dea77", size = 4280275, upload-time = "2026-04-08T01:56:23.539Z" },
+    { url = "https://files.pythonhosted.org/packages/0f/54/6bbbfc5efe86f9d71041827b793c24811a017c6ac0fd12883e4caa86b8ed/cryptography-46.0.7-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:cbd5fb06b62bd0721e1170273d3f4d5a277044c47ca27ee257025146c34cbdd1", size = 4928402, upload-time = "2026-04-08T01:56:25.624Z" },
+    { url = "https://files.pythonhosted.org/packages/2d/cf/054b9d8220f81509939599c8bdbc0c408dbd2bdd41688616a20731371fe0/cryptography-46.0.7-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:420b1e4109cc95f0e5700eed79908cef9268265c773d3a66f7af1eef53d409ef", size = 4459985, upload-time = "2026-04-08T01:56:27.309Z" },
+    { url = "https://files.pythonhosted.org/packages/f9/46/4e4e9c6040fb01c7467d47217d2f882daddeb8828f7df800cb806d8a2288/cryptography-46.0.7-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:24402210aa54baae71d99441d15bb5a1919c195398a87b563df84468160a65de", size = 3990652, upload-time = "2026-04-08T01:56:29.095Z" },
+    { url = "https://files.pythonhosted.org/packages/36/5f/313586c3be5a2fbe87e4c9a254207b860155a8e1f3cca99f9910008e7d08/cryptography-46.0.7-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:8a469028a86f12eb7d2fe97162d0634026d92a21f3ae0ac87ed1c4a447886c83", size = 4279805, upload-time = "2026-04-08T01:56:30.928Z" },
+    { url = "https://files.pythonhosted.org/packages/69/33/60dfc4595f334a2082749673386a4d05e4f0cf4df8248e63b2c3437585f2/cryptography-46.0.7-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:9694078c5d44c157ef3162e3bf3946510b857df5a3955458381d1c7cfc143ddb", size = 4892883, upload-time = "2026-04-08T01:56:32.614Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/0b/333ddab4270c4f5b972f980adef4faa66951a4aaf646ca067af597f15563/cryptography-46.0.7-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:42a1e5f98abb6391717978baf9f90dc28a743b7d9be7f0751a6f56a75d14065b", size = 4459756, upload-time = "2026-04-08T01:56:34.306Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/14/633913398b43b75f1234834170947957c6b623d1701ffc7a9600da907e89/cryptography-46.0.7-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:91bbcb08347344f810cbe49065914fe048949648f6bd5c2519f34619142bbe85", size = 4410244, upload-time = "2026-04-08T01:56:35.977Z" },
+    { url = "https://files.pythonhosted.org/packages/10/f2/19ceb3b3dc14009373432af0c13f46aa08e3ce334ec6eff13492e1812ccd/cryptography-46.0.7-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:5d1c02a14ceb9148cc7816249f64f623fbfee39e8c03b3650d842ad3f34d637e", size = 4674868, upload-time = "2026-04-08T01:56:38.034Z" },
+    { url = "https://files.pythonhosted.org/packages/1a/bb/a5c213c19ee94b15dfccc48f363738633a493812687f5567addbcbba9f6f/cryptography-46.0.7-cp311-abi3-win32.whl", hash = "sha256:d23c8ca48e44ee015cd0a54aeccdf9f09004eba9fc96f38c911011d9ff1bd457", size = 3026504, upload-time = "2026-04-08T01:56:39.666Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/02/7788f9fefa1d060ca68717c3901ae7fffa21ee087a90b7f23c7a603c32ae/cryptography-46.0.7-cp311-abi3-win_amd64.whl", hash = "sha256:397655da831414d165029da9bc483bed2fe0e75dde6a1523ec2fe63f3c46046b", size = 3488363, upload-time = "2026-04-08T01:56:41.893Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/7f/cd42fc3614386bc0c12f0cb3c4ae1fc2bbca5c9662dfed031514911d513d/cryptography-46.0.7-cp38-abi3-macosx_10_9_universal2.whl", hash = "sha256:462ad5cb1c148a22b2e3bcc5ad52504dff325d17daf5df8d88c17dda1f75f2a4", size = 7165618, upload-time = "2026-04-08T01:57:10.645Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/d0/36a49f0262d2319139d2829f773f1b97ef8aef7f97e6e5bd21455e5a8fb5/cryptography-46.0.7-cp38-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:84d4cced91f0f159a7ddacad249cc077e63195c36aac40b4150e7a57e84fffe7", size = 4270628, upload-time = "2026-04-08T01:57:12.885Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/6c/1a42450f464dda6ffbe578a911f773e54dd48c10f9895a23a7e88b3e7db5/cryptography-46.0.7-cp38-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:128c5edfe5e5938b86b03941e94fac9ee793a94452ad1365c9fc3f4f62216832", size = 4415405, upload-time = "2026-04-08T01:57:14.923Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/92/4ed714dbe93a066dc1f4b4581a464d2d7dbec9046f7c8b7016f5286329e2/cryptography-46.0.7-cp38-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:5e51be372b26ef4ba3de3c167cd3d1022934bc838ae9eaad7e644986d2a3d163", size = 4272715, upload-time = "2026-04-08T01:57:16.638Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/e6/a26b84096eddd51494bba19111f8fffe976f6a09f132706f8f1bf03f51f7/cryptography-46.0.7-cp38-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:cdf1a610ef82abb396451862739e3fc93b071c844399e15b90726ef7470eeaf2", size = 4918400, upload-time = "2026-04-08T01:57:19.021Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/08/ffd537b605568a148543ac3c2b239708ae0bd635064bab41359252ef88ed/cryptography-46.0.7-cp38-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:1d25aee46d0c6f1a501adcddb2d2fee4b979381346a78558ed13e50aa8a59067", size = 4450634, upload-time = "2026-04-08T01:57:21.185Z" },
+    { url = "https://files.pythonhosted.org/packages/16/01/0cd51dd86ab5b9befe0d031e276510491976c3a80e9f6e31810cce46c4ad/cryptography-46.0.7-cp38-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:cdfbe22376065ffcf8be74dc9a909f032df19bc58a699456a21712d6e5eabfd0", size = 3985233, upload-time = "2026-04-08T01:57:22.862Z" },
+    { url = "https://files.pythonhosted.org/packages/92/49/819d6ed3a7d9349c2939f81b500a738cb733ab62fbecdbc1e38e83d45e12/cryptography-46.0.7-cp38-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:abad9dac36cbf55de6eb49badd4016806b3165d396f64925bf2999bcb67837ba", size = 4271955, upload-time = "2026-04-08T01:57:24.814Z" },
+    { url = "https://files.pythonhosted.org/packages/80/07/ad9b3c56ebb95ed2473d46df0847357e01583f4c52a85754d1a55e29e4d0/cryptography-46.0.7-cp38-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:935ce7e3cfdb53e3536119a542b839bb94ec1ad081013e9ab9b7cfd478b05006", size = 4879888, upload-time = "2026-04-08T01:57:26.88Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/c7/201d3d58f30c4c2bdbe9b03844c291feb77c20511cc3586daf7edc12a47b/cryptography-46.0.7-cp38-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:35719dc79d4730d30f1c2b6474bd6acda36ae2dfae1e3c16f2051f215df33ce0", size = 4449961, upload-time = "2026-04-08T01:57:29.068Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/ef/649750cbf96f3033c3c976e112265c33906f8e462291a33d77f90356548c/cryptography-46.0.7-cp38-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:7bbc6ccf49d05ac8f7d7b5e2e2c33830d4fe2061def88210a126d130d7f71a85", size = 4401696, upload-time = "2026-04-08T01:57:31.029Z" },
+    { url = "https://files.pythonhosted.org/packages/41/52/a8908dcb1a389a459a29008c29966c1d552588d4ae6d43f3a1a4512e0ebe/cryptography-46.0.7-cp38-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:a1529d614f44b863a7b480c6d000fe93b59acee9c82ffa027cfadc77521a9f5e", size = 4664256, upload-time = "2026-04-08T01:57:33.144Z" },
+    { url = "https://files.pythonhosted.org/packages/4b/fa/f0ab06238e899cc3fb332623f337a7364f36f4bb3f2534c2bb95a35b132c/cryptography-46.0.7-cp38-abi3-win32.whl", hash = "sha256:f247c8c1a1fb45e12586afbb436ef21ff1e80670b2861a90353d9b025583d246", size = 3013001, upload-time = "2026-04-08T01:57:34.933Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/f1/00ce3bde3ca542d1acd8f8cfa38e446840945aa6363f9b74746394b14127/cryptography-46.0.7-cp38-abi3-win_amd64.whl", hash = "sha256:506c4ff91eff4f82bdac7633318a526b1d1309fc07ca76a3ad182cb5b686d6d3", size = 3472985, upload-time = "2026-04-08T01:57:36.714Z" },
+    { url = "https://files.pythonhosted.org/packages/63/0c/dca8abb64e7ca4f6b2978769f6fea5ad06686a190cec381f0a796fdcaaba/cryptography-46.0.7-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:fc9ab8856ae6cf7c9358430e49b368f3108f050031442eaeb6b9d87e4dcf4e4f", size = 3476879, upload-time = "2026-04-08T01:57:38.664Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/ea/075aac6a84b7c271578d81a2f9968acb6e273002408729f2ddff517fed4a/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:d3b99c535a9de0adced13d159c5a9cf65c325601aa30f4be08afd680643e9c15", size = 4219700, upload-time = "2026-04-08T01:57:40.625Z" },
+    { url = "https://files.pythonhosted.org/packages/6c/7b/1c55db7242b5e5612b29fc7a630e91ee7a6e3c8e7bf5406d22e206875fbd/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:d02c738dacda7dc2a74d1b2b3177042009d5cab7c7079db74afc19e56ca1b455", size = 4385982, upload-time = "2026-04-08T01:57:42.725Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/da/9870eec4b69c63ef5925bf7d8342b7e13bc2ee3d47791461c4e49ca212f4/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:04959522f938493042d595a736e7dbdff6eb6cc2339c11465b3ff89343b65f65", size = 4219115, upload-time = "2026-04-08T01:57:44.939Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/72/05aa5832b82dd341969e9a734d1812a6aadb088d9eb6f0430fc337cc5a8f/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:3986ac1dee6def53797289999eabe84798ad7817f3e97779b5061a95b0ee4968", size = 4385479, upload-time = "2026-04-08T01:57:46.86Z" },
+    { url = "https://files.pythonhosted.org/packages/20/2a/1b016902351a523aa2bd446b50a5bc1175d7a7d1cf90fe2ef904f9b84ebc/cryptography-46.0.7-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:258514877e15963bd43b558917bc9f54cf7cf866c38aa576ebf47a77ddbc43a4", size = 3412829, upload-time = "2026-04-08T01:57:48.874Z" },
 ]
 
 [[package]]

From 58e9998bb8f6e3228bed938c754db60627a99156 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 8 Apr 2026 22:28:22 +0000
Subject: [PATCH 004/345] chore(deps): bump langchain-core from 1.2.22 to
 1.2.28

Bumps [langchain-core](https://github.com/langchain-ai/langchain) from 1.2.22 to 1.2.28.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-core==1.2.22...langchain-core==1.2.28)

---
updated-dependencies:
- dependency-name: langchain-core
  dependency-version: 1.2.28
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 10608e2d..ac5e5bcd 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1446,7 +1446,7 @@ wheels = [
 
 [[package]]
 name = "langchain-core"
-version = "1.2.22"
+version = "1.2.28"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jsonpatch" },
@@ -1458,9 +1458,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "uuid-utils" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/b1/a3/c4cd6827a1df46c821e7214b7f7b7a28b189e6c9b84ef15c6d629c5e3179/langchain_core-1.2.22.tar.gz", hash = "sha256:8d8f726d03d3652d403da915126626bb6250747e8ba406537d849e68b9f5d058", size = 842487, upload-time = "2026-03-24T18:48:44.9Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f8/a4/317a1a3ac1df33a64adb3670bf88bbe3b3d5baa274db6863a979db472897/langchain_core-1.2.28.tar.gz", hash = "sha256:271a3d8bd618f795fdeba112b0753980457fc90537c46a0c11998516a74dc2cb", size = 846119, upload-time = "2026-04-08T18:19:34.867Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c7/a6/2ffacf0f1a3788f250e75d0b52a24896c413be11be3a6d42bcdf46fbea48/langchain_core-1.2.22-py3-none-any.whl", hash = "sha256:7e30d586b75918e828833b9ec1efc25465723566845dd652c277baf751e9c04b", size = 506829, upload-time = "2026-03-24T18:48:43.286Z" },
+    { url = "https://files.pythonhosted.org/packages/a8/92/32f785f077c7e898da97064f113c73fbd9ad55d1e2169cf3a391b183dedb/langchain_core-1.2.28-py3-none-any.whl", hash = "sha256:80764232581eaf8057bcefa71dbf8adc1f6a28d257ebd8b95ba9b8b452e8c6ac", size = 508727, upload-time = "2026-04-08T18:19:32.823Z" },
 ]
 
 [[package]]

From 70a466a640d75de398e34cf6e492aeb576cbffcf Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 9 Apr 2026 11:58:16 -0300
Subject: [PATCH 005/345] fix: prevent RCE via SSTI, path traversal file write,
 and LFI file read

- Bump ai-prompter to >=0.4.0 which uses Jinja2 SandboxedEnvironment,
  preventing arbitrary code execution via user-provided transformation prompts
- Sanitize uploaded filenames with os.path.basename() and validate resolved
  path stays within upload directory to prevent path traversal
- Validate file_path in source creation is within UPLOADS_FOLDER to prevent
  arbitrary file read via Local File Inclusion
---
 CHANGELOG.md              | 10 ++++++++++
 api/routers/sources.py    | 27 ++++++++++++++++++++++-----
 pyproject.toml            |  4 ++--
 tests/test_sources_api.py |  6 ++++--
 uv.lock                   |  8 ++++----
 5 files changed, 42 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe263bfd..e763d5e9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.8.4] - 2026-04-09
+
+### Security
+- Fix Remote Code Execution (RCE) via Jinja2 Server-Side Template Injection in transformations (CVSS 9.2 Critical)
+- Fix arbitrary file write via path traversal in file upload (CVSS 7.0 High)
+- Fix arbitrary file read via Local File Inclusion in source creation (CVSS 8.2 High)
+
+### Dependencies
+- Bump ai-prompter to >=0.4.0 (uses Jinja2 SandboxedEnvironment to prevent SSTI)
+
 ## [1.8.3] - 2026-04-07
 
 ### Security
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 38e75a3d..e6d6eff1 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -43,21 +43,30 @@ def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
     file_path = Path(upload_folder)
     file_path.mkdir(parents=True, exist_ok=True)
 
+    # Strip directory components to prevent path traversal
+    safe_filename = os.path.basename(original_filename)
+    if not safe_filename:
+        raise ValueError("Invalid filename")
+
     # Split filename and extension
-    stem = Path(original_filename).stem
-    suffix = Path(original_filename).suffix
+    stem = Path(safe_filename).stem
+    suffix = Path(safe_filename).suffix
 
     # Check if file exists and generate unique name
     counter = 0
     while True:
         if counter == 0:
-            new_filename = original_filename
+            new_filename = safe_filename
         else:
             new_filename = f"{stem} ({counter}){suffix}"
 
         full_path = file_path / new_filename
-        if not full_path.exists():
-            return str(full_path)
+        # Verify resolved path stays within upload folder
+        resolved = full_path.resolve()
+        if not str(resolved).startswith(str(file_path.resolve())):
+            raise ValueError("Invalid filename: path traversal detected")
+        if not resolved.exists():
+            return str(resolved)
         counter += 1
 
 
@@ -325,6 +334,14 @@ async def create_source(
                     status_code=400,
                     detail="File upload or file_path is required for upload type",
                 )
+            # Validate file_path is within the uploads directory to prevent LFI
+            uploads_resolved = Path(UPLOADS_FOLDER).resolve()
+            file_resolved = Path(final_file_path).resolve()
+            if not str(file_resolved).startswith(str(uploads_resolved)):
+                raise HTTPException(
+                    status_code=400,
+                    detail="Invalid file path: must be within the uploads directory",
+                )
             content_state["file_path"] = final_file_path
             content_state["delete_source"] = source_data.delete_source
         elif source_data.type == "text":
diff --git a/pyproject.toml b/pyproject.toml
index f526a903..8814dc2c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.8.3"
+version = "1.8.4"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
@@ -33,7 +33,7 @@ dependencies = [
     "python-dotenv>=1.0.1",
     "httpx[socks]>=0.27.0",
     "content-core>=1.14.1,<2",
-    "ai-prompter>=0.3,<1",
+    "ai-prompter>=0.4,<1",
     "esperanto>=2.20.0,<3",
     "surrealdb>=1.0.4",
     "podcast-creator>=0.12.0,<1",
diff --git a/tests/test_sources_api.py b/tests/test_sources_api.py
index 06db1c46..f33cf6bd 100644
--- a/tests/test_sources_api.py
+++ b/tests/test_sources_api.py
@@ -1,10 +1,12 @@
 """Tests for the sources API endpoint."""
 
+import os
 from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
 from fastapi.testclient import TestClient
 
+from open_notebook.config import UPLOADS_FOLDER
 from open_notebook.domain.notebook import Source
 
 
@@ -71,7 +73,7 @@ class TestAsyncSourceAssetPersistence:
     ):
         """POST /sources with type=upload and async_processing=true persists Asset(file_path=...)."""
         mock_nb_get.return_value = MagicMock()
-        mock_upload.return_value = "/tmp/uploads/video.mp4"
+        mock_upload.return_value = os.path.join(os.path.abspath(UPLOADS_FOLDER), "video.mp4")
         mock_submit.return_value = "command:123"
 
         saved_sources = []
@@ -97,7 +99,7 @@ class TestAsyncSourceAssetPersistence:
 
         source = saved_sources[0]
         assert source.asset is not None
-        assert source.asset.file_path == "/tmp/uploads/video.mp4"
+        assert source.asset.file_path == os.path.join(os.path.abspath(UPLOADS_FOLDER), "video.mp4")
         assert source.asset.url is None
 
     @pytest.mark.asyncio
diff --git a/uv.lock b/uv.lock
index 10608e2d..a2235dbc 100644
--- a/uv.lock
+++ b/uv.lock
@@ -9,16 +9,16 @@ resolution-markers = [
 
 [[package]]
 name = "ai-prompter"
-version = "0.3.1"
+version = "0.4.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jinja2" },
     { name = "pip" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/52/88/cadc58aac8bbb599d8c6d25f2cd357e938ddabe3756b1eed68e8860eed22/ai_prompter-0.3.1.tar.gz", hash = "sha256:cec7fddac5edf7d836c13fe77613e16b12b23aea625133846d11ae22455ed397", size = 84837, upload-time = "2025-06-20T19:31:36.879Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/46/a6/0703f5de846d4ccdc6cdfc7e44473f2722125e95316a50d44303b80edbe6/ai_prompter-0.4.0.tar.gz", hash = "sha256:63a8f2c19f13c0313ee7cef58f07cc00e948546c83c335c42737e076ae764385", size = 86469, upload-time = "2026-04-09T14:54:32.243Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/7d/f6/490bf534d6b04755998142ec7412b78e7466dc6d9a3f31e90541506b7971/ai_prompter-0.3.1-py3-none-any.whl", hash = "sha256:ec26566f7f246f511325e1c0f260970963a6e49fb19ed0767152d30b82cd2b79", size = 13386, upload-time = "2025-06-20T19:31:34.952Z" },
+    { url = "https://files.pythonhosted.org/packages/bd/c3/881c31c26a7a131ed9e1a2c1c3838b5bb95e3822ac88c68fcda7738c5395/ai_prompter-0.4.0-py3-none-any.whl", hash = "sha256:230662484a27de34e8677ebe20a8220c78f8b605cb68005253c5dbf3e5cc254e", size = 13777, upload-time = "2026-04-09T14:54:33.017Z" },
 ]
 
 [[package]]
@@ -2126,7 +2126,7 @@ dev = [
 
 [package.metadata]
 requires-dist = [
-    { name = "ai-prompter", specifier = ">=0.3,<1" },
+    { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
     { name = "content-core", specifier = ">=1.14.1,<2" },
     { name = "esperanto", specifier = ">=2.20.0,<3" },

From 2f75c5978c93836ca4605693786667830135eea4 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 9 Apr 2026 12:05:38 -0300
Subject: [PATCH 006/345] fix: harden path validation to prevent sibling
 directory bypass

Append os.sep to the directory path before startswith() check so that
paths like /app/data/uploads_evil/ cannot bypass the uploads directory
validation.
---
 api/routers/sources.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index e6d6eff1..9c4b7452 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -63,7 +63,7 @@ def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
         full_path = file_path / new_filename
         # Verify resolved path stays within upload folder
         resolved = full_path.resolve()
-        if not str(resolved).startswith(str(file_path.resolve())):
+        if not str(resolved).startswith(str(file_path.resolve()) + os.sep):
             raise ValueError("Invalid filename: path traversal detected")
         if not resolved.exists():
             return str(resolved)
@@ -337,7 +337,7 @@ async def create_source(
             # Validate file_path is within the uploads directory to prevent LFI
             uploads_resolved = Path(UPLOADS_FOLDER).resolve()
             file_resolved = Path(final_file_path).resolve()
-            if not str(file_resolved).startswith(str(uploads_resolved)):
+            if not str(file_resolved).startswith(str(uploads_resolved) + os.sep):
                 raise HTTPException(
                     status_code=400,
                     detail="Invalid file path: must be within the uploads directory",

From 8ee18d1fb7ac625a5deec5b5abef30eec076a247 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 9 Apr 2026 12:16:09 -0300
Subject: [PATCH 007/345] docs: add security guidelines for contributors

Add security.md covering database query safety, template rendering,
file handling, secrets management, and a code review checklist.
Informed by CERT-EU coordinated vulnerability disclosures.
---
 docs/7-DEVELOPMENT/index.md    |  10 ++
 docs/7-DEVELOPMENT/security.md | 193 +++++++++++++++++++++++++++++++++
 uv.lock                        |   2 +-
 3 files changed, 204 insertions(+), 1 deletion(-)
 create mode 100644 docs/7-DEVELOPMENT/security.md

diff --git a/docs/7-DEVELOPMENT/index.md b/docs/7-DEVELOPMENT/index.md
index 81826bc8..5e5f9a95 100644
--- a/docs/7-DEVELOPMENT/index.md
+++ b/docs/7-DEVELOPMENT/index.md
@@ -14,6 +14,15 @@ Start with **[Contributing Guide](contributing.md)** for the workflow, then chec
 
 **First time?** Check out our [Contributing Guide](contributing.md) for the issue-first workflow.
 
+### 🔒 I Want to Understand Security Practices
+
+**[Security Guidelines](security.md)** covers:
+- Database query safety (preventing SurrealQL injection)
+- Template rendering safety (preventing SSTI)
+- File handling safety (preventing path traversal and LFI)
+- Secrets management and CORS configuration
+- Code review security checklist
+
 ---
 
 ### 🏗️ I Want to Understand the Architecture
@@ -50,6 +59,7 @@ For deeper dives, check `/open_notebook/` CLAUDE.md for component-specific guida
 | [Architecture](architecture.md) | Understanding system | System design, tech stack, workflows |
 | [Design Principles](design-principles.md) | All developers | What guides our decisions |
 | [API Reference](api-reference.md) | Building integrations | Complete REST API documentation |
+| [Security](security.md) | All developers | Security practices and vulnerability prevention |
 | [Maintainer Guide](maintainer-guide.md) | Maintainers | Managing issues, PRs, releases |
 
 ---
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
new file mode 100644
index 00000000..5eb394ac
--- /dev/null
+++ b/docs/7-DEVELOPMENT/security.md
@@ -0,0 +1,193 @@
+# Security Guidelines
+
+This document outlines security practices for Open Notebook development. It is informed by real vulnerabilities discovered through coordinated disclosure with [CERT-EU](https://cert.europa.eu) and should be treated as mandatory reading for all contributors.
+
+## Reporting Vulnerabilities
+
+If you discover a security vulnerability, **do not open a public GitHub issue**. Instead:
+
+1. Use [GitHub Security Advisories](https://github.com/lfnovo/open-notebook/security/advisories/new) to report privately
+2. Or email the maintainers directly
+
+We follow coordinated vulnerability disclosure and will work with you on a fix before any public announcement.
+
+---
+
+## Database Queries (SurrealQL Injection)
+
+**Rule: Never interpolate user input into SurrealQL queries via f-strings.**
+
+SurrealQL injection is the equivalent of SQL injection. User-controlled values must be passed as parameterized bind variables using `$variable` syntax.
+
+### Parameterized queries (safe)
+
+```python
+# Good: parameterized query
+result = await repo_query(
+    "SELECT * FROM source WHERE id = $id",
+    {"id": ensure_record_id(source_id)}
+)
+```
+
+### F-string interpolation (vulnerable)
+
+```python
+# Bad: user input in f-string
+result = await repo_query(f"SELECT * FROM source WHERE id = {source_id}")
+```
+
+### ORDER BY and other clauses that can't be parameterized
+
+`ORDER BY`, `LIMIT`, and similar clauses typically cannot accept bind variables in SurrealDB. Use **allowlist validation** instead:
+
+```python
+# Good: validate against allowlist, then interpolate
+allowed_fields = {"name", "created", "updated"}
+allowed_directions = {"asc", "desc"}
+
+parts = order_by.strip().lower().split()
+if parts[0] not in allowed_fields:
+    raise HTTPException(status_code=400, detail="Invalid sort field")
+if len(parts) > 1 and parts[1] not in allowed_directions:
+    raise HTTPException(status_code=400, detail="Invalid sort direction")
+
+query = f"SELECT * FROM notebook ORDER BY {validated_order_by}"
+```
+
+See `api/routers/sources.py` for the reference implementation of sort parameter validation.
+
+### Checklist
+
+- [ ] All user-provided values use `$variable` binding
+- [ ] Any f-string in a query only contains validated/hardcoded values
+- [ ] `ORDER BY`, `LIMIT`, etc. use allowlist validation
+- [ ] Database values used in subsequent queries are also parameterized (prevents second-order injection)
+
+---
+
+## Template Rendering (Server-Side Template Injection)
+
+**Rule: Always use `SandboxedEnvironment` when rendering Jinja2 templates that contain user-provided content.**
+
+The [ai-prompter](https://github.com/lfnovo/ai-prompter) library (>= 0.4.0) uses `SandboxedEnvironment` by default, which blocks access to dangerous Python attributes like `__globals__`, `__subclasses__`, and `__init__`.
+
+### What SandboxedEnvironment prevents
+
+```jinja2
+{# These are blocked and raise SecurityError #}
+{{ cycler.__init__.__globals__.os.popen('id').read() }}
+{{ ''.__class__.__mro__[1].__subclasses__() }}
+```
+
+### Guidelines
+
+- Never downgrade ai-prompter below 0.4.0
+- If using Jinja2 directly (outside ai-prompter), always use `jinja2.sandbox.SandboxedEnvironment`
+- Never pass user-provided strings to `jinja2.Environment` or `jinja2.Template` directly
+
+---
+
+## File Handling (Path Traversal and Local File Inclusion)
+
+### File uploads
+
+**Rule: Always sanitize filenames and validate resolved paths.**
+
+```python
+import os
+from pathlib import Path
+
+# 1. Strip directory components
+safe_filename = os.path.basename(original_filename)
+
+# 2. Validate resolved path stays within target directory
+resolved = (Path(upload_folder) / safe_filename).resolve()
+if not str(resolved).startswith(str(Path(upload_folder).resolve()) + os.sep):
+    raise ValueError("Path traversal detected")
+```
+
+Key points:
+
+- Use `os.path.basename()` to strip directory components from user-provided filenames
+- Use `Path.resolve()` to resolve symlinks and `..` components
+- Use `startswith()` with a **trailing `os.sep`** to prevent sibling directory bypass (e.g., `/uploads_evil/` matching `/uploads`)
+
+### File path inputs
+
+**Rule: Validate that any user-provided file path is within the expected directory.**
+
+```python
+uploads_resolved = Path(UPLOADS_FOLDER).resolve()
+file_resolved = Path(user_provided_path).resolve()
+if not str(file_resolved).startswith(str(uploads_resolved) + os.sep):
+    raise HTTPException(status_code=400, detail="Invalid file path")
+```
+
+Never pass user-provided file paths directly to file reading or content extraction functions without validation.
+
+### Checklist
+
+- [ ] Filenames from uploads are sanitized with `os.path.basename()`
+- [ ] Resolved paths are validated with `startswith(directory + os.sep)`
+- [ ] User-provided `file_path` values are validated before use
+- [ ] No directory creation from user input (`mkdir` with traversal paths)
+
+---
+
+## Authentication and CORS
+
+### Authentication
+
+Open Notebook currently uses simple password-based middleware (`PasswordAuthMiddleware`). This is suitable for single-user self-hosted deployments but should be hardened for production:
+
+- Change the default password (`OPEN_NOTEBOOK_PASSWORD`)
+- Change the default encryption key (`OPEN_NOTEBOOK_ENCRYPTION_KEY`)
+- Consider deploying behind a reverse proxy with proper authentication (OAuth, OIDC)
+
+### CORS
+
+The default CORS configuration allows all origins (`allow_origins=["*"]`). This is tracked for improvement in [#730](https://github.com/lfnovo/open-notebook/issues/730). For production deployments, restrict origins to only the frontend URL.
+
+---
+
+## Secrets Management
+
+### Encryption key
+
+`OPEN_NOTEBOOK_ENCRYPTION_KEY` is used to encrypt API keys stored in SurrealDB. In production:
+
+- Set a strong, unique key (do not use the default)
+- Use Docker secrets via `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` when possible
+- Never log or expose this value
+
+### Environment variables
+
+- Sensitive values (API keys, passwords, encryption keys) should never appear in logs
+- Use `loguru` with caution — avoid logging full request bodies or environment dumps
+- The Docker container runs as root by default; consider running as a non-root user
+
+---
+
+## Code Review Security Checklist
+
+When reviewing PRs, check for:
+
+1. **Query injection**: Any f-string containing user input in a SurrealQL query
+2. **Template injection**: User-provided strings passed to Jinja2 without sandboxing
+3. **Path traversal**: User-provided filenames or paths used without sanitization
+4. **Information disclosure**: Error messages that expose internal paths, stack traces, or configuration
+5. **SSRF**: User-provided URLs passed to server-side HTTP requests without validation
+6. **Secrets in logs**: Sensitive values logged at any level
+
+---
+
+## Past Vulnerabilities
+
+These vulnerabilities were reported by CERT-EU and are documented here as learning examples:
+
+| Version | Vulnerability | Severity | Advisory |
+|---------|--------------|----------|----------|
+| <= 1.8.2 | SurrealDB injection via `order_by` parameter | High (8.7) | [GHSA-5wj9-f8q5-8f9c](https://github.com/lfnovo/open-notebook/security/advisories/GHSA-5wj9-f8q5-8f9c) |
+| <= 1.8.3 | RCE via Jinja2 SSTI in transformations | Critical (9.2) | [GHSA-f35w-wx37-26q7](https://github.com/lfnovo/open-notebook/security/advisories/GHSA-f35w-wx37-26q7) |
+| <= 1.8.3 | Arbitrary file write via path traversal | High (7.0) | [GHSA-x4q2-89g5-594v](https://github.com/lfnovo/open-notebook/security/advisories/GHSA-x4q2-89g5-594v) |
+| <= 1.8.3 | Arbitrary file read via LFI | High (8.2) | [GHSA-842v-h4cj-r646](https://github.com/lfnovo/open-notebook/security/advisories/GHSA-842v-h4cj-r646) |
diff --git a/uv.lock b/uv.lock
index a2235dbc..f8ba6b01 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2072,7 +2072,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.3"
+version = "1.8.4"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 4222329451d1bed5a2d1df70d4d176084fe379c7 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 9 Apr 2026 13:22:00 -0300
Subject: [PATCH 008/345] fix: map base_url to endpoint for Azure credentials
 (#741)

* fix: map base_url to endpoint for Azure credentials

The Azure credential form only exposes a base_url field, but the
connection tester, key provisioner, and Esperanto config all expect
an endpoint field. This maps base_url to endpoint for Azure providers
so credentials work without requiring a dedicated endpoint form field.

Closes #727

* docs: update Azure credential docs to reflect base_url mapping
---
 docs/3-USER-GUIDE/api-configuration.md | 22 +++++++++-------------
 open_notebook/ai/connection_tester.py  |  4 +++-
 open_notebook/ai/key_provider.py       |  6 ++++--
 open_notebook/domain/credential.py     |  3 +++
 4 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index 96c3bc5f..940e0eff 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -107,7 +107,7 @@ Navigation: Settings → API Keys
 
 | Provider | Required Fields | Optional Fields |
 |----------|-----------------|-----------------|
-| Azure OpenAI | API Key, Endpoint, API Version | Service-specific endpoints (LLM, Embedding, STT, TTS) |
+| Azure OpenAI | API Key, URL Base (Azure endpoint) | Service-specific endpoints (LLM, Embedding, STT, TTS) |
 | OpenAI-Compatible | Base URL | API Key, Service-specific configs |
 | Vertex AI | Project ID, Location, Credentials Path | — |
 
@@ -208,17 +208,13 @@ Ollama allows localhost and private IPs since it runs locally.
 
 ### Azure OpenAI
 
-Azure requires multiple fields:
+1. Add credential with provider **Azure OpenAI**
+2. Enter your API key
+3. Enter your Azure endpoint in the **URL Base** field (e.g., `https://myresource.openai.azure.com`)
+4. Test connection
+5. Discover and register models
 
-| Field | Example | Required |
-|-------|---------|----------|
-| API Key | `abc123...` | Yes |
-| Endpoint | `https://myresource.openai.azure.com` | Yes |
-| API Version | `2024-02-15-preview` | Yes |
-| LLM Endpoint | `https://myresource-llm.openai.azure.com` | No |
-| Embedding Endpoint | `https://myresource-embed.openai.azure.com` | No |
-
-Service-specific endpoints override the main endpoint for that service type.
+The URL Base field is automatically mapped to the Azure endpoint. The API version defaults to `2024-10-21` if not set via environment variable.
 
 ### OpenAI-Compatible
 
@@ -377,8 +373,8 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 - Ensure Ollama server is running
 
 ### Azure OpenAI
-- Endpoint format: `https://{resource-name}.openai.azure.com`
-- API version format: `YYYY-MM-DD` or `YYYY-MM-DD-preview`
+- Enter your Azure endpoint in the **URL Base** field (format: `https://{resource-name}.openai.azure.com`)
+- API version defaults to `2024-10-21`; override via `AZURE_OPENAI_API_VERSION` environment variable if needed
 - Deployment names configured separately when registering models via the credential's Discover Models dialog
 
 ---
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 99e52d40..2825edb8 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -223,7 +223,9 @@ async def test_provider_connection(
             return await _test_openai_compatible_connection(test_base_url, test_api_key)
 
         if normalized_provider == "azure":
-            return await _test_azure_connection(endpoint, api_key, api_version)
+            # For Azure, base_url from the UI form maps to endpoint
+            azure_endpoint = endpoint or base_url
+            return await _test_azure_connection(azure_endpoint, api_key, api_version)
 
         # Get test model for provider
         if normalized_provider not in TEST_MODELS:
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index 9a54d9ed..d7a621de 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -190,8 +190,10 @@ async def _provision_azure() -> bool:
         os.environ["AZURE_OPENAI_API_VERSION"] = cred.api_version
         logger.debug("Set AZURE_OPENAI_API_VERSION from Credential")
         any_set = True
-    if cred.endpoint:
-        os.environ["AZURE_OPENAI_ENDPOINT"] = cred.endpoint
+    # For Azure, base_url from the UI form maps to endpoint
+    azure_endpoint = cred.endpoint or cred.base_url
+    if azure_endpoint:
+        os.environ["AZURE_OPENAI_ENDPOINT"] = azure_endpoint
         logger.debug("Set AZURE_OPENAI_ENDPOINT from Credential")
         any_set = True
     if cred.endpoint_llm:
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index a99cd3e2..0e442960 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -76,6 +76,9 @@ class Credential(ObjectModel):
             config["api_key"] = self.api_key.get_secret_value()
         if self.base_url:
             config["base_url"] = self.base_url
+            # For Azure, base_url from the UI form maps to endpoint
+            if self.provider and self.provider.lower() == "azure" and not self.endpoint:
+                config["endpoint"] = self.base_url
         if self.endpoint:
             config["endpoint"] = self.endpoint
         if self.api_version:

From b7788ec05a57815fd58886aa864341a5a6742357 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 9 Apr 2026 13:23:46 -0300
Subject: [PATCH 009/345] chore(deps): bump tornado from 6.5.4 to 6.5.5 (#668)

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.4 to 6.5.5.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.4...v6.5.5)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 24 +++++++++++-------------
 1 file changed, 11 insertions(+), 13 deletions(-)

diff --git a/uv.lock b/uv.lock
index 812994be..b3528780 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3441,21 +3441,19 @@ wheels = [
 
 [[package]]
 name = "tornado"
-version = "6.5.4"
+version = "6.5.5"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/37/1d/0a336abf618272d53f62ebe274f712e213f5a03c0b2339575430b8362ef2/tornado-6.5.4.tar.gz", hash = "sha256:a22fa9047405d03260b483980635f0b041989d8bcc9a313f8fe18b411d84b1d7", size = 513632, upload-time = "2025-12-15T19:21:03.836Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f8/f1/3173dfa4a18db4a9b03e5d55325559dab51ee653763bb8745a75af491286/tornado-6.5.5.tar.gz", hash = "sha256:192b8f3ea91bd7f1f50c06955416ed76c6b72f96779b962f07f911b91e8d30e9", size = 516006, upload-time = "2026-03-10T21:31:02.067Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ab/a9/e94a9d5224107d7ce3cc1fab8d5dc97f5ea351ccc6322ee4fb661da94e35/tornado-6.5.4-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:d6241c1a16b1c9e4cc28148b1cda97dd1c6cb4fb7068ac1bedc610768dff0ba9", size = 443909, upload-time = "2025-12-15T19:20:48.382Z" },
-    { url = "https://files.pythonhosted.org/packages/db/7e/f7b8d8c4453f305a51f80dbb49014257bb7d28ccb4bbb8dd328ea995ecad/tornado-6.5.4-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:2d50f63dda1d2cac3ae1fa23d254e16b5e38153758470e9956cbc3d813d40843", size = 442163, upload-time = "2025-12-15T19:20:49.791Z" },
-    { url = "https://files.pythonhosted.org/packages/ba/b5/206f82d51e1bfa940ba366a8d2f83904b15942c45a78dd978b599870ab44/tornado-6.5.4-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:d1cf66105dc6acb5af613c054955b8137e34a03698aa53272dbda4afe252be17", size = 445746, upload-time = "2025-12-15T19:20:51.491Z" },
-    { url = "https://files.pythonhosted.org/packages/8e/9d/1a3338e0bd30ada6ad4356c13a0a6c35fbc859063fa7eddb309183364ac1/tornado-6.5.4-cp39-abi3-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:50ff0a58b0dc97939d29da29cd624da010e7f804746621c78d14b80238669335", size = 445083, upload-time = "2025-12-15T19:20:52.778Z" },
-    { url = "https://files.pythonhosted.org/packages/50/d4/e51d52047e7eb9a582da59f32125d17c0482d065afd5d3bc435ff2120dc5/tornado-6.5.4-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:e5fb5e04efa54cf0baabdd10061eb4148e0be137166146fff835745f59ab9f7f", size = 445315, upload-time = "2025-12-15T19:20:53.996Z" },
-    { url = "https://files.pythonhosted.org/packages/27/07/2273972f69ca63dbc139694a3fc4684edec3ea3f9efabf77ed32483b875c/tornado-6.5.4-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:9c86b1643b33a4cd415f8d0fe53045f913bf07b4a3ef646b735a6a86047dda84", size = 446003, upload-time = "2025-12-15T19:20:56.101Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/83/41c52e47502bf7260044413b6770d1a48dda2f0246f95ee1384a3cd9c44a/tornado-6.5.4-cp39-abi3-musllinux_1_2_i686.whl", hash = "sha256:6eb82872335a53dd063a4f10917b3efd28270b56a33db69009606a0312660a6f", size = 445412, upload-time = "2025-12-15T19:20:57.398Z" },
-    { url = "https://files.pythonhosted.org/packages/10/c7/bc96917f06cbee182d44735d4ecde9c432e25b84f4c2086143013e7b9e52/tornado-6.5.4-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:6076d5dda368c9328ff41ab5d9dd3608e695e8225d1cd0fd1e006f05da3635a8", size = 445392, upload-time = "2025-12-15T19:20:58.692Z" },
-    { url = "https://files.pythonhosted.org/packages/0c/1a/d7592328d037d36f2d2462f4bc1fbb383eec9278bc786c1b111cbbd44cfa/tornado-6.5.4-cp39-abi3-win32.whl", hash = "sha256:1768110f2411d5cd281bac0a090f707223ce77fd110424361092859e089b38d1", size = 446481, upload-time = "2025-12-15T19:21:00.008Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/6d/c69be695a0a64fd37a97db12355a035a6d90f79067a3cf936ec2b1dc38cd/tornado-6.5.4-cp39-abi3-win_amd64.whl", hash = "sha256:fa07d31e0cd85c60713f2b995da613588aa03e1303d75705dca6af8babc18ddc", size = 446886, upload-time = "2025-12-15T19:21:01.287Z" },
-    { url = "https://files.pythonhosted.org/packages/50/49/8dc3fd90902f70084bd2cd059d576ddb4f8bb44c2c7c0e33a11422acb17e/tornado-6.5.4-cp39-abi3-win_arm64.whl", hash = "sha256:053e6e16701eb6cbe641f308f4c1a9541f91b6261991160391bfc342e8a551a1", size = 445910, upload-time = "2025-12-15T19:21:02.571Z" },
+    { url = "https://files.pythonhosted.org/packages/59/8c/77f5097695f4dd8255ecbd08b2a1ed8ba8b953d337804dd7080f199e12bf/tornado-6.5.5-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:487dc9cc380e29f58c7ab88f9e27cdeef04b2140862e5076a66fb6bb68bb1bfa", size = 445983, upload-time = "2026-03-10T21:30:44.28Z" },
+    { url = "https://files.pythonhosted.org/packages/ab/5e/7625b76cd10f98f1516c36ce0346de62061156352353ef2da44e5c21523c/tornado-6.5.5-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:65a7f1d46d4bb41df1ac99f5fcb685fb25c7e61613742d5108b010975a9a6521", size = 444246, upload-time = "2026-03-10T21:30:46.571Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/04/7b5705d5b3c0fab088f434f9c83edac1573830ca49ccf29fb83bf7178eec/tornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:e74c92e8e65086b338fd56333fb9a68b9f6f2fe7ad532645a290a464bcf46be5", size = 447229, upload-time = "2026-03-10T21:30:48.273Z" },
+    { url = "https://files.pythonhosted.org/packages/34/01/74e034a30ef59afb4097ef8659515e96a39d910b712a89af76f5e4e1f93c/tornado-6.5.5-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:435319e9e340276428bbdb4e7fa732c2d399386d1de5686cb331ec8eee754f07", size = 448192, upload-time = "2026-03-10T21:30:51.22Z" },
+    { url = "https://files.pythonhosted.org/packages/be/00/fe9e02c5a96429fce1a1d15a517f5d8444f9c412e0bb9eadfbe3b0fc55bf/tornado-6.5.5-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:3f54aa540bdbfee7b9eb268ead60e7d199de5021facd276819c193c0fb28ea4e", size = 448039, upload-time = "2026-03-10T21:30:53.52Z" },
+    { url = "https://files.pythonhosted.org/packages/82/9e/656ee4cec0398b1d18d0f1eb6372c41c6b889722641d84948351ae19556d/tornado-6.5.5-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:36abed1754faeb80fbd6e64db2758091e1320f6bba74a4cf8c09cd18ccce8aca", size = 447445, upload-time = "2026-03-10T21:30:55.541Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/76/4921c00511f88af86a33de770d64141170f1cfd9c00311aea689949e274e/tornado-6.5.5-cp39-abi3-win32.whl", hash = "sha256:dd3eafaaeec1c7f2f8fdcd5f964e8907ad788fe8a5a32c4426fbbdda621223b7", size = 448582, upload-time = "2026-03-10T21:30:57.142Z" },
+    { url = "https://files.pythonhosted.org/packages/2c/23/f6c6112a04d28eed765e374435fb1a9198f73e1ec4b4024184f21faeb1ad/tornado-6.5.5-cp39-abi3-win_amd64.whl", hash = "sha256:6443a794ba961a9f619b1ae926a2e900ac20c34483eea67be4ed8f1e58d3ef7b", size = 448990, upload-time = "2026-03-10T21:30:58.857Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/c8/876602cbc96469911f0939f703453c1157b0c826ecb05bdd32e023397d4e/tornado-6.5.5-cp39-abi3-win_arm64.whl", hash = "sha256:2c9a876e094109333f888539ddb2de4361743e5d21eece20688e3e351e4990a6", size = 448016, upload-time = "2026-03-10T21:31:00.43Z" },
 ]
 
 [[package]]

From 9c73299da0bccc8f8408f0d05aeadfefa874439d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 11 Apr 2026 04:20:11 +0000
Subject: [PATCH 010/345] chore(deps): bump next from 16.1.7 to 16.2.3 in
 /frontend

Bumps [next](https://github.com/vercel/next.js) from 16.1.7 to 16.2.3.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.1.7...v16.2.3)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 frontend/package-lock.json | 82 +++++++++++++++++++-------------------
 frontend/package.json      |  2 +-
 2 files changed, 42 insertions(+), 42 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f2e0ccfd..542f17b2 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -37,7 +37,7 @@
         "i18next": "^25.7.3",
         "i18next-browser-languagedetector": "^8.2.0",
         "lucide-react": "^0.525.0",
-        "next": "^16.1.7",
+        "next": "^16.2.3",
         "next-themes": "^0.4.6",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
@@ -1829,9 +1829,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.1.7.tgz",
-      "integrity": "sha512-rJJbIdJB/RQr2F1nylZr/PJzamvNNhfr3brdKP6s/GW850jbtR70QlSfFselvIBbcPUOlQwBakexjFzqLzF6pg==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.3.tgz",
+      "integrity": "sha512-ZWXyj4uNu4GCWQw9cjRxWlbD+33mcDszIo9iQxFnBX3Wmgq9ulaSJcl6VhuWx5pCWqqD+9W6Wfz7N0lM5lYPMA==",
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
@@ -1844,9 +1844,9 @@
       }
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.1.7.tgz",
-      "integrity": "sha512-b2wWIE8sABdyafc4IM8r5Y/dS6kD80JRtOGrUiKTsACFQfWWgUQ2NwoUX1yjFMXVsAwcQeNpnucF2ZrujsBBPg==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.3.tgz",
+      "integrity": "sha512-u37KDKTKQ+OQLvY+z7SNXixwo4Q2/IAJFDzU1fYe66IbCE51aDSAzkNDkWmLN0yjTUh4BKBd+hb69jYn6qqqSg==",
       "cpu": [
         "arm64"
       ],
@@ -1860,9 +1860,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.1.7.tgz",
-      "integrity": "sha512-zcnVaaZulS1WL0Ss38R5Q6D2gz7MtBu8GZLPfK+73D/hp4GFMrC2sudLky1QibfV7h6RJBJs/gOFvYP0X7UVlQ==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.3.tgz",
+      "integrity": "sha512-gHjL/qy6Q6CG3176FWbAKyKh9IfntKZTB3RY/YOJdDFpHGsUDXVH38U4mMNpHVGXmeYW4wj22dMp1lTfmu/bTQ==",
       "cpu": [
         "x64"
       ],
@@ -1876,9 +1876,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.1.7.tgz",
-      "integrity": "sha512-2ant89Lux/Q3VyC8vNVg7uBaFVP9SwoK2jJOOR0L8TQnX8CAYnh4uctAScy2Hwj2dgjVHqHLORQZJ2wH6VxhSQ==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.3.tgz",
+      "integrity": "sha512-U6vtblPtU/P14Y/b/n9ZY0GOxbbIhTFuaFR7F4/uMBidCi2nSdaOFhA0Go81L61Zd6527+yvuX44T4ksnf8T+Q==",
       "cpu": [
         "arm64"
       ],
@@ -1892,9 +1892,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.1.7.tgz",
-      "integrity": "sha512-uufcze7LYv0FQg9GnNeZ3/whYfo+1Q3HnQpm16o6Uyi0OVzLlk2ZWoY7j07KADZFY8qwDbsmFnMQP3p3+Ftprw==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.3.tgz",
+      "integrity": "sha512-/YV0LgjHUmfhQpn9bVoGc4x4nan64pkhWR5wyEV8yCOfwwrH630KpvRg86olQHTwHIn1z59uh6JwKvHq1h4QEw==",
       "cpu": [
         "arm64"
       ],
@@ -1908,9 +1908,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.1.7.tgz",
-      "integrity": "sha512-KWVf2gxYvHtvuT+c4MBOGxuse5TD7DsMFYSxVxRBnOzok/xryNeQSjXgxSv9QpIVlaGzEn/pIuI6Koosx8CGWA==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.3.tgz",
+      "integrity": "sha512-/HiWEcp+WMZ7VajuiMEFGZ6cg0+aYZPqCJD3YJEfpVWQsKYSjXQG06vJP6F1rdA03COD9Fef4aODs3YxKx+RDQ==",
       "cpu": [
         "x64"
       ],
@@ -1924,9 +1924,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.1.7.tgz",
-      "integrity": "sha512-HguhaGwsGr1YAGs68uRKc4aGWxLET+NevJskOcCAwXbwj0fYX0RgZW2gsOCzr9S11CSQPIkxmoSbuVaBp4Z3dA==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.3.tgz",
+      "integrity": "sha512-Kt44hGJfZSefebhk/7nIdivoDr3Ugp5+oNz9VvF3GUtfxutucUIHfIO0ZYO8QlOPDQloUVQn4NVC/9JvHRk9hw==",
       "cpu": [
         "x64"
       ],
@@ -1940,9 +1940,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.1.7.tgz",
-      "integrity": "sha512-S0n3KrDJokKTeFyM/vGGGR8+pCmXYrjNTk2ZozOL1C/JFdfUIL9O1ATaJOl5r2POe56iRChbsszrjMAdWSv7kQ==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.3.tgz",
+      "integrity": "sha512-O2NZ9ie3Tq6xj5Z5CSwBT3+aWAMW2PIZ4egUi9MaWLkwaehgtB7YZjPm+UpcNpKOme0IQuqDcor7BsW6QBiQBw==",
       "cpu": [
         "arm64"
       ],
@@ -1956,9 +1956,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.1.7.tgz",
-      "integrity": "sha512-mwgtg8CNZGYm06LeEd+bNnOUfwOyNem/rOiP14Lsz+AnUY92Zq/LXwtebtUiaeVkhbroRCQ0c8GlR4UT1U+0yg==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.3.tgz",
+      "integrity": "sha512-Ibm29/GgB/ab5n7XKqlStkm54qqZE8v2FnijUPBgrd67FWrac45o/RsNlaOWjme/B5UqeWt/8KM4aWBwA1D2Kw==",
       "cpu": [
         "x64"
       ],
@@ -9612,12 +9612,12 @@
       "dev": true
     },
     "node_modules/next": {
-      "version": "16.1.7",
-      "resolved": "https://registry.npmjs.org/next/-/next-16.1.7.tgz",
-      "integrity": "sha512-WM0L7WrSvKwoLegLYr6V+mz+RIofqQgVAfHhMp9a88ms0cFX8iX9ew+snpWlSBwpkURJOUdvCEt3uLl3NNzvWg==",
+      "version": "16.2.3",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.2.3.tgz",
+      "integrity": "sha512-9V3zV4oZFza3PVev5/poB9g0dEafVcgNyQ8eTRop8GvxZjV2G15FC5ARuG1eFD42QgeYkzJBJzHghNP8Ad9xtA==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "16.1.7",
+        "@next/env": "16.2.3",
         "@swc/helpers": "0.5.15",
         "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
@@ -9631,15 +9631,15 @@
         "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "16.1.7",
-        "@next/swc-darwin-x64": "16.1.7",
-        "@next/swc-linux-arm64-gnu": "16.1.7",
-        "@next/swc-linux-arm64-musl": "16.1.7",
-        "@next/swc-linux-x64-gnu": "16.1.7",
-        "@next/swc-linux-x64-musl": "16.1.7",
-        "@next/swc-win32-arm64-msvc": "16.1.7",
-        "@next/swc-win32-x64-msvc": "16.1.7",
-        "sharp": "^0.34.4"
+        "@next/swc-darwin-arm64": "16.2.3",
+        "@next/swc-darwin-x64": "16.2.3",
+        "@next/swc-linux-arm64-gnu": "16.2.3",
+        "@next/swc-linux-arm64-musl": "16.2.3",
+        "@next/swc-linux-x64-gnu": "16.2.3",
+        "@next/swc-linux-x64-musl": "16.2.3",
+        "@next/swc-win32-arm64-msvc": "16.2.3",
+        "@next/swc-win32-x64-msvc": "16.2.3",
+        "sharp": "^0.34.5"
       },
       "peerDependencies": {
         "@opentelemetry/api": "^1.1.0",
diff --git a/frontend/package.json b/frontend/package.json
index cb8b2108..004769c2 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -41,7 +41,7 @@
     "i18next": "^25.7.3",
     "i18next-browser-languagedetector": "^8.2.0",
     "lucide-react": "^0.525.0",
-    "next": "^16.1.7",
+    "next": "^16.2.3",
     "next-themes": "^0.4.6",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",

From 6b23e7cee8e0bc0893bb6e82c741f03ea42f803e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 12 Apr 2026 10:40:02 +0000
Subject: [PATCH 011/345] chore(deps): bump axios from 1.13.5 to 1.15.0 in
 /frontend

Bumps [axios](https://github.com/axios/axios) from 1.13.5 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.15.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 frontend/package-lock.json | 20 ++++++++++++--------
 frontend/package.json      |  2 +-
 2 files changed, 13 insertions(+), 9 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f2e0ccfd..d6b974a3 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -29,7 +29,7 @@
         "@tailwindcss/typography": "^0.5.16",
         "@tanstack/react-query": "^5.83.0",
         "@uiw/react-md-editor": "^4.0.8",
-        "axios": "^1.13.5",
+        "axios": "^1.15.0",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -5365,14 +5365,14 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.13.5",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.5.tgz",
-      "integrity": "sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==",
+      "version": "1.15.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.0.tgz",
+      "integrity": "sha512-wWyJDlAatxk30ZJer+GeCWS209sA42X+N5jU2jy6oHTp7ufw8uzUTVFBX9+wTfAlhiJXGS0Bq7X6efruWjuK9Q==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.11",
         "form-data": "^4.0.5",
-        "proxy-from-env": "^1.1.0"
+        "proxy-from-env": "^2.1.0"
       }
     },
     "node_modules/axobject-query": {
@@ -10131,9 +10131,13 @@
       }
     },
     "node_modules/proxy-from-env": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
-      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg=="
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
+      "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
     },
     "node_modules/punycode": {
       "version": "2.3.1",
diff --git a/frontend/package.json b/frontend/package.json
index cb8b2108..03a66114 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -33,7 +33,7 @@
     "@tailwindcss/typography": "^0.5.16",
     "@tanstack/react-query": "^5.83.0",
     "@uiw/react-md-editor": "^4.0.8",
-    "axios": "^1.13.5",
+    "axios": "^1.15.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",

From ba01f7df4e8d12acdfd032a5a52c59cba8f54d86 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Apr 2026 21:22:37 -0300
Subject: [PATCH 012/345] fix: handle credential decryption errors gracefully
 (#740)

- Credential.get_all() now uses per-row error handling instead of failing on first bad row
- Broken credentials include decryption_error field with descriptive message
- DELETE endpoint falls back to direct DB delete when credential can't be decrypted
- Frontend shows amber warning alert for broken credentials with disabled test/edit/discover
- Added i18n translation keys for decryption error warning in all 9 locales
---
 api/credentials_service.py                    |  1 +
 api/models.py                                 |  1 +
 api/routers/credentials.py                    | 46 ++++++++++++++--
 .../(dashboard)/settings/api-keys/page.tsx    | 17 +++++-
 frontend/src/lib/api/credentials.ts           |  1 +
 frontend/src/lib/locales/bn-IN/index.ts       |  2 +
 frontend/src/lib/locales/en-US/index.ts       |  2 +
 frontend/src/lib/locales/fr-FR/index.ts       |  2 +
 frontend/src/lib/locales/it-IT/index.ts       |  2 +
 frontend/src/lib/locales/ja-JP/index.ts       |  2 +
 frontend/src/lib/locales/pt-BR/index.ts       |  2 +
 frontend/src/lib/locales/ru-RU/index.ts       |  2 +
 frontend/src/lib/locales/zh-CN/index.ts       |  2 +
 frontend/src/lib/locales/zh-TW/index.ts       |  2 +
 open_notebook/domain/credential.py            | 54 +++++++++++++++----
 15 files changed, 120 insertions(+), 18 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 9ad77f3e..8f288eb7 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -223,6 +223,7 @@ def credential_to_response(cred: Credential, model_count: int = 0) -> Credential
         created=str(cred.created) if cred.created else "",
         updated=str(cred.updated) if cred.updated else "",
         model_count=model_count,
+        decryption_error=cred.decryption_error,
     )
 
 
diff --git a/api/models.py b/api/models.py
index 7ea8967e..4be00496 100644
--- a/api/models.py
+++ b/api/models.py
@@ -617,6 +617,7 @@ class CredentialResponse(BaseModel):
     created: str
     updated: str
     model_count: int = 0
+    decryption_error: Optional[str] = None
 
 
 class CredentialDeleteResponse(BaseModel):
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index b3cf86f0..38e3a2dc 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -27,16 +27,22 @@ from pydantic import SecretStr
 from api.credentials_service import (
     credential_to_response,
     discover_with_config,
-    migrate_from_env as svc_migrate_from_env,
-    migrate_from_provider_config as svc_migrate_from_provider_config,
+    get_provider_status,
     register_models,
     require_encryption_key,
-    test_credential as svc_test_credential,
     validate_url,
 )
 from api.credentials_service import (
     get_env_status as svc_get_env_status,
-    get_provider_status,
+)
+from api.credentials_service import (
+    migrate_from_env as svc_migrate_from_env,
+)
+from api.credentials_service import (
+    migrate_from_provider_config as svc_migrate_from_provider_config,
+)
+from api.credentials_service import (
+    test_credential as svc_test_credential,
 )
 from api.models import (
     CreateCredentialRequest,
@@ -48,6 +54,7 @@ from api.models import (
     RegisterModelsResponse,
     UpdateCredentialRequest,
 )
+from open_notebook.database.repository import ensure_record_id, repo_delete, repo_query
 from open_notebook.domain.credential import Credential
 
 router = APIRouter(prefix="/credentials", tags=["credentials"])
@@ -260,7 +267,36 @@ async def delete_credential(
     - Otherwise, linked models are cascade-deleted automatically
     """
     try:
-        cred = await Credential.get(credential_id)
+        try:
+            cred = await Credential.get(credential_id)
+        except Exception as decrypt_err:
+            # Credential exists but can't be decrypted (wrong encryption key).
+            # Fall back to direct DB operations for deletion.
+            logger.warning(
+                f"Cannot decrypt credential {credential_id}, "
+                f"falling back to direct delete: {decrypt_err}"
+            )
+
+            # Delete linked models directly
+            linked = await repo_query(
+                "SELECT * FROM model WHERE credential = $cred_id",
+                {"cred_id": ensure_record_id(credential_id)},
+            )
+            deleted_models = 0
+            for model_row in linked:
+                model_id = str(model_row.get("id", ""))
+                if model_id:
+                    await repo_delete(model_id)
+                    deleted_models += 1
+
+            # Delete the credential itself
+            await repo_delete(credential_id)
+
+            return CredentialDeleteResponse(
+                message="Credential deleted successfully",
+                deleted_models=deleted_models,
+            )
+
         linked_models = await cred.get_linked_models()
 
         deleted_models = 0
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 27bde0ec..086fb1a1 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -22,6 +22,7 @@ import {
   RefreshCw,
   Key,
   ShieldAlert,
+  AlertTriangle,
   Plus,
   Edit,
   Trash2,
@@ -822,7 +823,7 @@ function CredentialItem({
             <Button
               variant="ghost" size="sm"
               onClick={() => testCredential(credential.id)}
-              disabled={isTestPending}
+              disabled={isTestPending || !!credential.decryption_error}
               title={t.apiKeys.testConnection}
             >
               {isTestPending ? <Loader2 className="h-4 w-4 animate-spin" /> : <Plug className="h-4 w-4" />}
@@ -831,12 +832,13 @@ function CredentialItem({
             <Button
               variant="ghost" size="sm"
               onClick={() => setDiscoverOpen(true)}
+              disabled={!!credential.decryption_error}
               title={t.apiKeys.syncModels}
             >
               <Bot className="h-4 w-4" />
               <span className="hidden sm:inline text-xs">Models</span>
             </Button>
-            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} title={t.common.edit}>
+            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} disabled={!!credential.decryption_error} title={t.common.edit}>
               <Edit className="h-4 w-4" />
             </Button>
             <Button
@@ -850,6 +852,17 @@ function CredentialItem({
           </div>
         </div>
 
+        {/* Decryption error warning */}
+        {credential.decryption_error && (
+          <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
+            <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
+            <AlertTitle className="text-amber-800 dark:text-amber-200">{t.apiKeys.decryptionError}</AlertTitle>
+            <AlertDescription className="text-amber-700 dark:text-amber-300 text-sm">
+              {t.apiKeys.decryptionErrorDescription}
+            </AlertDescription>
+          </Alert>
+        )}
+
         {/* Linked models grouped by type */}
         {linkedModels.length > 0 && (
           <div className="space-y-1.5 pt-1">
diff --git a/frontend/src/lib/api/credentials.ts b/frontend/src/lib/api/credentials.ts
index bf5d1668..16bdf88a 100644
--- a/frontend/src/lib/api/credentials.ts
+++ b/frontend/src/lib/api/credentials.ts
@@ -20,6 +20,7 @@ export interface Credential {
   created: string
   updated: string
   model_count: number
+  decryption_error?: string | null
 }
 
 export interface CreateCredentialRequest {
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 1567d42d..9cb4a50d 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -916,6 +916,8 @@ export const bnIN = {
     configUpdateSuccess: "কনফিগারেশন সফলভাবে আপডেট",
     configDeleteSuccess: "কনফিগারেশন সফলভাবে মুছে ফেলা",
     apiKeyEditHint: "বিদ্যমান API কী রাখতে খালি রাখুন",
+    decryptionError: "ডিক্রিপশন ত্রুটি",
+    decryptionErrorDescription: "এই শংসাপত্রের API কী ডিক্রিপ্ট করা যায়নি। এনক্রিপশন কী পরিবর্তন হয়ে থাকতে পারে। এই শংসাপত্রটি মুছে সঠিক কী দিয়ে পুনরায় তৈরি করুন।",
   },
   setupBanner: {
     encryptionRequired: "এনক্রিপশন কী কনফিগার করা হয়নি",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 24a22c46..bf9df0e8 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -916,6 +916,8 @@ export const enUS = {
     configUpdateSuccess: "Configuration updated successfully",
     configDeleteSuccess: "Configuration deleted successfully",
     apiKeyEditHint: "Leave blank to keep the existing API key",
+    decryptionError: "Decryption Error",
+    decryptionErrorDescription: "This credential's API key could not be decrypted. The encryption key may have changed. Delete this credential and re-create it with the correct key.",
   },
   setupBanner: {
     encryptionRequired: "Encryption key not configured",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 752b9051..5d2cc8b9 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -915,6 +915,8 @@ export const frFR = {
     configUpdateSuccess: "Configuration mise à jour avec succès",
     configDeleteSuccess: "Configuration supprimée avec succès",
     apiKeyEditHint: "Laissez vide pour conserver la clé API existante",
+    decryptionError: "Erreur de déchiffrement",
+    decryptionErrorDescription: "La clé API de cette configuration n'a pas pu être déchiffrée. La clé de chiffrement a peut-être changé. Supprimez cette configuration et recréez-la avec la bonne clé.",
   },
   setupBanner: {
     encryptionRequired: "Clé de chiffrement non configurée",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index f3d4ea9e..971f3caf 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -915,6 +915,8 @@ export const itIT = {
     configUpdateSuccess: "Configurazione aggiornata con successo",
     configDeleteSuccess: "Configurazione eliminata con successo",
     apiKeyEditHint: "Lascia vuoto per mantenere la chiave API esistente",
+    decryptionError: "Errore di decrittazione",
+    decryptionErrorDescription: "La chiave API di questa credenziale non può essere decrittata. La chiave di crittografia potrebbe essere cambiata. Elimina questa credenziale e ricreala con la chiave corretta.",
   },
   setupBanner: {
     encryptionRequired: "Chiave di crittografia non configurata",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 82dcee71..5f4fcf34 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -915,6 +915,8 @@ export const jaJP = {
     configUpdateSuccess: "設定が正常に変更されました",
     configDeleteSuccess: "設定が正常に削除されました",
     apiKeyEditHint: "既存のAPIキーを維持するには空白のままにしてください",
+    decryptionError: "復号エラー",
+    decryptionErrorDescription: "この認証情報のAPIキーを復号できませんでした。暗号化キーが変更された可能性があります。この認証情報を削除し、正しいキーで再作成してください。",
   },
   setupBanner: {
     encryptionRequired: "暗号化キーが設定されていません",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index b5b87d5a..16acc33e 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -915,6 +915,8 @@ export const ptBR = {
     configUpdateSuccess: "Configuração atualizada com sucesso",
     configDeleteSuccess: "Configuração excluída com sucesso",
     apiKeyEditHint: "Deixe em branco para manter a chave de API existente",
+    decryptionError: "Erro de Descriptografia",
+    decryptionErrorDescription: "A chave de API desta credencial não pôde ser descriptografada. A chave de criptografia pode ter sido alterada. Exclua esta credencial e recrie-a com a chave correta.",
   },
   setupBanner: {
     encryptionRequired: "Chave de criptografia não configurada",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 73272398..c06f6b90 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -915,6 +915,8 @@ export const ruRU = {
     configUpdateSuccess: "Конфигурация успешно обновлена",
     configDeleteSuccess: "Конфигурация успешно удалена",
     apiKeyEditHint: "Оставьте пустым, чтобы сохранить текущий API-ключ",
+    decryptionError: "Ошибка расшифровки",
+    decryptionErrorDescription: "API-ключ этих учётных данных не удалось расшифровать. Возможно, ключ шифрования был изменён. Удалите эти учётные данные и создайте заново с правильным ключом.",
   },
   setupBanner: {
     encryptionRequired: "Ключ шифрования не настроен",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 08d158d7..3cedde29 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -915,6 +915,8 @@ export const zhCN = {
     configUpdateSuccess: "配置更新成功",
     configDeleteSuccess: "配置删除成功",
     apiKeyEditHint: "留空以保留现有 API 密钥",
+    decryptionError: "解密错误",
+    decryptionErrorDescription: "此凭证的 API 密钥无法解密。加密密钥可能已更改。请删除此凭证并使用正确的密钥重新创建。",
   },
   setupBanner: {
     encryptionRequired: "未配置加密密钥",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index e418d4c9..cb3e21c2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -915,6 +915,8 @@ export const zhTW = {
     configUpdateSuccess: "設定更新成功",
     configDeleteSuccess: "設定刪除成功",
     apiKeyEditHint: "留空以保留現有 API 金鑰",
+    decryptionError: "解密錯誤",
+    decryptionErrorDescription: "此憑證的 API 金鑰無法解密。加密金鑰可能已變更。請刪除此憑證並使用正確的金鑰重新建立。",
   },
   setupBanner: {
     encryptionRequired: "未設定加密金鑰",
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index a99cd3e2..26d9142f 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -53,6 +53,7 @@ class Credential(ObjectModel):
     provider: str
     modalities: List[str] = []
     api_key: Optional[SecretStr] = None
+    decryption_error: Optional[str] = None
     base_url: Optional[str] = None
     endpoint: Optional[str] = None
     api_version: Optional[str] = None
@@ -130,18 +131,47 @@ class Credential(ObjectModel):
 
     @classmethod
     async def get_all(cls, order_by=None) -> List["Credential"]:
-        """Override get_all() to handle api_key decryption."""
-        instances = await super().get_all(order_by=order_by)
-        for instance in instances:
-            if instance.api_key:
-                raw = (
-                    instance.api_key.get_secret_value()
-                    if isinstance(instance.api_key, SecretStr)
-                    else instance.api_key
+        """Override get_all() to handle api_key decryption with per-row error handling."""
+        order_clause = f" ORDER BY {order_by}" if order_by else ""
+        results = await repo_query(
+            f"SELECT * FROM {cls.table_name}{order_clause}",
+            {},
+        )
+        credentials = []
+        for row in results:
+            try:
+                cred = cls._from_db_row(row)
+                credentials.append(cred)
+            except Exception as e:
+                logger.warning(
+                    f"Failed to decrypt credential {row.get('id', 'unknown')}: {e}"
                 )
-                decrypted = decrypt_value(raw)
-                object.__setattr__(instance, "api_key", SecretStr(decrypted))
-        return instances
+                # Create a minimal credential with error info from raw DB fields
+                try:
+                    error_cred = cls(
+                        name=row.get("name", "Unknown"),
+                        provider=row.get("provider", "unknown"),
+                        modalities=row.get("modalities", []),
+                        decryption_error=f"Failed to decrypt API key. The encryption key may have changed. Error: {e}",
+                    )
+                    # Preserve the DB id, created, updated from the raw row
+                    if row.get("id"):
+                        object.__setattr__(error_cred, "id", str(row["id"]))
+                    if row.get("created"):
+                        object.__setattr__(error_cred, "created", row["created"])
+                    if row.get("updated"):
+                        object.__setattr__(error_cred, "updated", row["updated"])
+                    # Mark that it had an api_key (even though we can't decrypt it)
+                    if row.get("api_key"):
+                        object.__setattr__(
+                            error_cred, "api_key", SecretStr("UNDECRYPTABLE")
+                        )
+                    credentials.append(error_cred)
+                except Exception as inner_e:
+                    logger.error(
+                        f"Failed to create error credential for {row.get('id', 'unknown')}: {inner_e}"
+                    )
+        return credentials
 
     async def get_linked_models(self) -> list:
         """Get all models linked to this credential."""
@@ -159,6 +189,8 @@ class Credential(ObjectModel):
         """Override to encrypt api_key before storage."""
         data = {}
         for key, value in self.model_dump().items():
+            if key == "decryption_error":
+                continue
             if key == "api_key":
                 # Handle SecretStr: extract, encrypt, store
                 if self.api_key:

From 171e9d3bd3a114e3036cbcb0764d35720eda9cb4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Apr 2026 02:21:10 +0000
Subject: [PATCH 013/345] chore(deps): bump pytest from 9.0.2 to 9.0.3

Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.2 to 9.0.3.
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.0.3)

---
updated-dependencies:
- dependency-name: pytest
  dependency-version: 9.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 8814dc2c..02651321 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -55,7 +55,7 @@ dev = [
     "types-requests>=2.32.0.20241016",
     "ipywidgets>=8.1.5",
     "pre-commit>=4.0.1",
-    "pytest>=8.0.0",
+    "pytest>=9.0.3",
 ]
 
 [build-system]
diff --git a/uv.lock b/uv.lock
index b3528780..ef93ee3e 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2152,7 +2152,7 @@ requires-dist = [
     { name = "pre-commit", marker = "extra == 'dev'", specifier = ">=4.0.1" },
     { name = "pycountry", specifier = ">=26.2.16" },
     { name = "pydantic", specifier = ">=2.9.2" },
-    { name = "pytest", marker = "extra == 'dev'", specifier = ">=8.0.0" },
+    { name = "pytest", marker = "extra == 'dev'", specifier = ">=9.0.3" },
     { name = "python-dotenv", specifier = ">=1.0.1" },
     { name = "ruff", marker = "extra == 'dev'", specifier = ">=0.5.5" },
     { name = "surreal-commands", specifier = ">=1.3.1,<2" },
@@ -2782,7 +2782,7 @@ wheels = [
 
 [[package]]
 name = "pytest"
-version = "9.0.2"
+version = "9.0.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "colorama", marker = "sys_platform == 'win32'" },
@@ -2791,9 +2791,9 @@ dependencies = [
     { name = "pluggy" },
     { name = "pygments" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/d1/db/7ef3487e0fb0049ddb5ce41d3a49c235bf9ad299b6a25d5780a89f19230f/pytest-9.0.2.tar.gz", hash = "sha256:75186651a92bd89611d1d9fc20f0b4345fd827c41ccd5c299a868a05d70edf11", size = 1568901, upload-time = "2025-12-06T21:30:51.014Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/7d/0d/549bd94f1a0a402dc8cf64563a117c0f3765662e2e668477624baeec44d5/pytest-9.0.3.tar.gz", hash = "sha256:b86ada508af81d19edeb213c681b1d48246c1a91d304c6c81a427674c17eb91c", size = 1572165, upload-time = "2026-04-07T17:16:18.027Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/3b/ab/b3226f0bd7cdcf710fbede2b3548584366da3b19b5021e74f5bde2a8fa3f/pytest-9.0.2-py3-none-any.whl", hash = "sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b", size = 374801, upload-time = "2025-12-06T21:30:49.154Z" },
+    { url = "https://files.pythonhosted.org/packages/d4/24/a372aaf5c9b7208e7112038812994107bc65a84cd00e0354a88c2c77a617/pytest-9.0.3-py3-none-any.whl", hash = "sha256:2c5efc453d45394fdd706ade797c0a81091eccd1d6e4bccfcd476e2b8e0ab5d9", size = 375249, upload-time = "2026-04-07T17:16:16.13Z" },
 ]
 
 [[package]]

From 0c2522074d7b87000b2f98306363cff2bfdcaa1e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Apr 2026 10:34:32 -0300
Subject: [PATCH 014/345] fix: narrow exception handling and support migrate_to
 for broken credentials

- Catch only ValueError (decryption errors) instead of broad Exception
  so NotFoundError and other failures propagate correctly
- Support migrate_to parameter in the fallback delete path so linked
  models can be reassigned instead of always cascade-deleted
- Sanitize decryption_error message to not expose raw exception details
---
 api/routers/credentials.py         | 30 +++++++++++++++++++++++-------
 open_notebook/domain/credential.py |  2 +-
 2 files changed, 24 insertions(+), 8 deletions(-)

diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index 38e3a2dc..57bbb839 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -269,7 +269,7 @@ async def delete_credential(
     try:
         try:
             cred = await Credential.get(credential_id)
-        except Exception as decrypt_err:
+        except ValueError as decrypt_err:
             # Credential exists but can't be decrypted (wrong encryption key).
             # Fall back to direct DB operations for deletion.
             logger.warning(
@@ -277,17 +277,33 @@ async def delete_credential(
                 f"falling back to direct delete: {decrypt_err}"
             )
 
-            # Delete linked models directly
+            # Query linked models
             linked = await repo_query(
                 "SELECT * FROM model WHERE credential = $cred_id",
                 {"cred_id": ensure_record_id(credential_id)},
             )
             deleted_models = 0
-            for model_row in linked:
-                model_id = str(model_row.get("id", ""))
-                if model_id:
-                    await repo_delete(model_id)
-                    deleted_models += 1
+
+            if linked and migrate_to:
+                # Migrate models to another credential
+                target_cred = await Credential.get(migrate_to)
+                for model_row in linked:
+                    model_id = str(model_row.get("id", ""))
+                    if model_id:
+                        await repo_query(
+                            "UPDATE $model_id SET credential = $target_id",
+                            {
+                                "model_id": ensure_record_id(model_id),
+                                "target_id": ensure_record_id(target_cred.id),
+                            },
+                        )
+            elif linked:
+                # Cascade-delete linked models
+                for model_row in linked:
+                    model_id = str(model_row.get("id", ""))
+                    if model_id:
+                        await repo_delete(model_id)
+                        deleted_models += 1
 
             # Delete the credential itself
             await repo_delete(credential_id)
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index 26d9142f..da822570 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -152,7 +152,7 @@ class Credential(ObjectModel):
                         name=row.get("name", "Unknown"),
                         provider=row.get("provider", "unknown"),
                         modalities=row.get("modalities", []),
-                        decryption_error=f"Failed to decrypt API key. The encryption key may have changed. Error: {e}",
+                        decryption_error="Failed to decrypt API key. The encryption key may have changed.",
                     )
                     # Preserve the DB id, created, updated from the raw row
                     if row.get("id"):

From 621dd6c42a171291862acd33c8122348e7ad8a70 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Apr 2026 14:03:48 -0300
Subject: [PATCH 015/345] chore: bump version to 1.8.5 and update changelog

---
 CHANGELOG.md   | 7 +++++++
 pyproject.toml | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e763d5e9..5d06c9a9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.8.5] - 2026-04-14
+
+### Fixed
+- Credentials endpoint no longer crashes (500) when encryption key doesn't match stored credentials (#740)
+- Broken credentials are now shown with a decryption warning and can still be deleted
+- DELETE endpoint for broken credentials supports model migration (`migrate_to` parameter)
+
 ## [1.8.4] - 2026-04-09
 
 ### Security
diff --git a/pyproject.toml b/pyproject.toml
index 8814dc2c..d75f55ad 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}

From edf323fbc948804f8c244e5deb2f02f99a75f86f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 14 Apr 2026 17:38:52 +0000
Subject: [PATCH 016/345] chore(deps): bump follow-redirects from 1.15.11 to
 1.16.0 in /frontend

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.11 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.11...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f2e0ccfd..f10462fe 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -6908,9 +6908,9 @@
       "license": "ISC"
     },
     "node_modules/follow-redirects": {
-      "version": "1.15.11",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
-      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
+      "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
       "funding": [
         {
           "type": "individual",

From 98a528158a86219f5f05403609c1fdd9d35c7159 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Apr 2026 10:27:49 -0300
Subject: [PATCH 017/345] refactor: migrate i18n from custom Proxy pattern to
 standard react-i18next t() function

- Replace Proxy-based useTranslation hook with thin react-i18next wrapper
- Convert all t.section.key property access to t('section.key') function calls across 84 files
- Migrate TranslationKeys type parameters to TFunction from i18next
- Update test setup mock and test assertions for new pattern
- Preserve setLanguage with language change events for loading overlay

Closes #579
---
 .../advanced/components/RebuildEmbeddings.tsx |  72 +++++-----
 .../advanced/components/SystemInfo.tsx        |  24 ++--
 .../src/app/(dashboard)/advanced/page.tsx     |   4 +-
 .../app/(dashboard)/notebooks/[id]/page.tsx   |  10 +-
 .../notebooks/components/ChatColumn.tsx       |   6 +-
 .../notebooks/components/NoteEditorDialog.tsx |  18 +--
 .../notebooks/components/NotebookCard.tsx     |  12 +-
 .../components/NotebookDeleteDialog.tsx       |  28 ++--
 .../notebooks/components/NotebookHeader.tsx   |  18 +--
 .../notebooks/components/NotebookList.tsx     |   4 +-
 .../notebooks/components/NotesColumn.tsx      |  24 ++--
 .../notebooks/components/SourcesColumn.tsx    |  30 ++--
 .../src/app/(dashboard)/notebooks/page.tsx    |  22 +--
 .../src/app/(dashboard)/podcasts/page.tsx     |  16 +--
 frontend/src/app/(dashboard)/search/page.tsx  |  80 +++++------
 .../(dashboard)/settings/api-keys/page.tsx    | 122 ++++++++--------
 .../settings/components/SettingsForm.tsx      |  74 +++++-----
 .../src/app/(dashboard)/settings/page.tsx     |   2 +-
 frontend/src/app/(dashboard)/sources/page.tsx |  46 +++---
 .../components/DefaultPromptEditor.tsx        |  10 +-
 .../components/TransformationCard.tsx         |  20 +--
 .../components/TransformationEditorDialog.tsx |  34 ++---
 .../components/TransformationPlayground.tsx   |  22 +--
 .../components/TransformationsList.tsx        |  10 +-
 .../app/(dashboard)/transformations/page.tsx  |  12 +-
 frontend/src/components/auth/LoginForm.tsx    |  30 ++--
 .../src/components/common/CommandPalette.tsx  |  66 ++++-----
 .../components/common/ConfirmDialog.test.tsx  |  23 ++-
 .../src/components/common/ConfirmDialog.tsx   |   4 +-
 .../src/components/common/ContextToggle.tsx   |   8 +-
 frontend/src/components/common/InlineEdit.tsx |   2 +-
 .../src/components/common/LanguageToggle.tsx  |  20 +--
 .../src/components/common/ModelSelector.tsx   |   4 +-
 .../src/components/common/ThemeToggle.tsx     |  10 +-
 .../errors/ConnectionErrorOverlay.tsx         |  52 +++----
 .../src/components/layout/AppSidebar.test.tsx |  28 ++--
 frontend/src/components/layout/AppSidebar.tsx |  60 ++++----
 .../src/components/layout/SetupBanner.tsx     |  12 +-
 .../notebooks/CreateNotebookDialog.tsx        |  16 +--
 .../src/components/podcasts/EpisodeCard.tsx   |  78 +++++-----
 .../podcasts/EpisodeProfilesPanel.tsx         |  44 +++---
 .../src/components/podcasts/EpisodesTab.tsx   |  46 +++---
 .../podcasts/GeneratePodcastDialog.tsx        |  96 ++++++-------
 .../podcasts/SpeakerProfilesPanel.tsx         |  40 +++---
 .../src/components/podcasts/TemplatesTab.tsx  |  40 +++---
 .../forms/EpisodeProfileFormDialog.tsx        |  78 +++++-----
 .../forms/SpeakerProfileFormDialog.tsx        |  76 +++++-----
 .../search/AdvancedModelsDialog.tsx           |  20 +--
 .../search/SaveToNotebooksDialog.tsx          |  18 +--
 .../components/search/StreamingResponse.tsx   |  16 +--
 .../settings/EmbeddingModelChangeDialog.tsx   |  26 ++--
 .../components/settings/MigrationBanner.tsx   |   8 +-
 .../settings/ModelTestResultDialog.tsx        |   4 +-
 frontend/src/components/source/ChatPanel.tsx  |  24 ++--
 .../src/components/source/MessageActions.tsx  |  14 +-
 .../src/components/source/ModelSelector.tsx   |  22 +--
 .../source/NotebookAssociations.tsx           |  20 +--
 .../src/components/source/SessionManager.tsx  |  26 ++--
 .../components/source/SourceDetailContent.tsx | 128 ++++++++---------
 .../src/components/source/SourceDialog.tsx    |   2 +-
 .../components/source/SourceInsightDialog.tsx |  16 +--
 .../sources/AddExistingSourceDialog.tsx       |  24 ++--
 .../components/sources/AddSourceDialog.tsx    |  44 +++---
 .../src/components/sources/SourceCard.tsx     |  44 +++---
 .../sources/steps/NotebooksStep.tsx           |   6 +-
 .../sources/steps/ProcessingStep.tsx          |  26 ++--
 .../sources/steps/SourceTypeStep.tsx          |  70 ++++-----
 frontend/src/components/ui/dialog.tsx         |   2 +-
 frontend/src/lib/hooks/use-credentials.ts     |  92 ++++++------
 frontend/src/lib/hooks/use-models.ts          |  40 +++---
 frontend/src/lib/hooks/use-notebooks.ts       |  24 ++--
 frontend/src/lib/hooks/use-notes.ts           |  24 ++--
 frontend/src/lib/hooks/use-podcasts.ts        |  88 ++++++------
 frontend/src/lib/hooks/use-settings.ts        |   8 +-
 frontend/src/lib/hooks/use-sources.ts         |  68 ++++-----
 frontend/src/lib/hooks/use-toast.ts           |   4 +-
 frontend/src/lib/hooks/use-transformations.ts |  26 ++--
 .../src/lib/hooks/use-translation.test.ts     |  19 ++-
 frontend/src/lib/hooks/use-translation.ts     | 136 ++----------------
 frontend/src/lib/hooks/use-version-check.ts   |   6 +-
 frontend/src/lib/hooks/useNotebookChat.ts     |   6 +-
 frontend/src/lib/hooks/useSourceChat.ts       |   6 +-
 frontend/src/test/setup.ts                    |   8 +-
 83 files changed, 1265 insertions(+), 1403 deletions(-)

diff --git a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
index 729d870a..6a04596f 100644
--- a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
@@ -123,10 +123,10 @@ export function RebuildEmbeddings() {
     <Card>
       <CardHeader>
         <CardTitle className="flex items-center gap-2">
-          {t.advanced.rebuildEmbeddings}
+          {t('advanced.rebuildEmbeddings')}
         </CardTitle>
         <CardDescription>
-          {t.advanced.rebuildEmbeddingsDesc}
+          {t('advanced.rebuildEmbeddingsDesc')}
         </CardDescription>
       </CardHeader>
       <CardContent className="space-y-6">
@@ -134,25 +134,25 @@ export function RebuildEmbeddings() {
         {!isRebuildActive && (
           <div className="space-y-6">
             <div className="space-y-3">
-              <Label htmlFor="mode">{t.advanced.rebuild.mode}</Label>
+              <Label htmlFor="mode">{t('advanced.rebuild.mode')}</Label>
               <Select value={mode} onValueChange={(value) => setMode(value as 'existing' | 'all')}>
                 <SelectTrigger id="mode">
                   <SelectValue />
                 </SelectTrigger>
                 <SelectContent>
-                  <SelectItem value="existing">{t.advanced.rebuild.existing}</SelectItem>
-                  <SelectItem value="all">{t.advanced.rebuild.all}</SelectItem>
+                  <SelectItem value="existing">{t('advanced.rebuild.existing')}</SelectItem>
+                  <SelectItem value="all">{t('advanced.rebuild.all')}</SelectItem>
                 </SelectContent>
               </Select>
               <p className="text-sm text-muted-foreground">
                 {mode === 'existing'
-                  ? t.advanced.rebuild.existingDesc
-                  : t.advanced.rebuild.allDesc}
+                  ? t('advanced.rebuild.existingDesc')
+                  : t('advanced.rebuild.allDesc')}
               </p>
             </div>
 
             <div className="space-y-3" role="group" aria-labelledby="include-label">
-              <span id="include-label" className="text-sm font-medium leading-none">{t.advanced.rebuild.include}</span>
+              <span id="include-label" className="text-sm font-medium leading-none">{t('advanced.rebuild.include')}</span>
               <div className="space-y-3">
                 <div className="flex items-center space-x-2">
                   <Checkbox
@@ -161,7 +161,7 @@ export function RebuildEmbeddings() {
                     onCheckedChange={(checked) => setIncludeSources(checked === true)}
                   />
                   <Label htmlFor="sources" className="font-normal cursor-pointer">
-                    {t.navigation.sources}
+                    {t('navigation.sources')}
                   </Label>
                 </div>
                 <div className="flex items-center space-x-2">
@@ -171,7 +171,7 @@ export function RebuildEmbeddings() {
                     onCheckedChange={(checked) => setIncludeNotes(checked === true)}
                   />
                   <Label htmlFor="notes" className="font-normal cursor-pointer">
-                    {t.common.notes}
+                    {t('common.notes')}
                   </Label>
                 </div>
                 <div className="flex items-center space-x-2">
@@ -181,7 +181,7 @@ export function RebuildEmbeddings() {
                     onCheckedChange={(checked) => setIncludeInsights(checked === true)}
                   />
                   <Label htmlFor="insights" className="font-normal cursor-pointer">
-                    {t.common.insights}
+                    {t('common.insights')}
                   </Label>
                 </div>
               </div>
@@ -189,7 +189,7 @@ export function RebuildEmbeddings() {
                 <Alert variant="destructive">
                   <AlertCircle className="h-4 w-4" />
                   <AlertDescription>
-                    {t.advanced.rebuild.selectOneError}
+                    {t('advanced.rebuild.selectOneError')}
                   </AlertDescription>
                 </Alert>
               )}
@@ -203,10 +203,10 @@ export function RebuildEmbeddings() {
               {rebuildMutation.isPending ? (
                 <>
                   <Loader2 className="mr-2 h-4 w-4 animate-spin" />
-                  {t.advanced.rebuild.starting}
+                  {t('advanced.rebuild.starting')}
                 </>
               ) : (
-                t.advanced.rebuild.startBtn
+                t('advanced.rebuild.startBtn')
               )}
             </Button>
 
@@ -214,7 +214,7 @@ export function RebuildEmbeddings() {
               <Alert variant="destructive">
                 <AlertCircle className="h-4 w-4" />
                 <AlertDescription>
-                  {t.advanced.rebuild.failed}: {(rebuildMutation.error as Error)?.message || t.common.error}
+                  {t('advanced.rebuild.failed')}: {(rebuildMutation.error as Error)?.message || t('common.error')}
                 </AlertDescription>
               </Alert>
             )}
@@ -232,21 +232,21 @@ export function RebuildEmbeddings() {
                 {status.status === 'failed' && <XCircle className="h-5 w-5 text-red-500" />}
                 <div className="flex flex-col">
                   <span className="font-medium">
-                    {status.status === 'queued' && t.advanced.rebuild.queued}
-                    {status.status === 'running' && t.advanced.rebuild.running}
-                    {status.status === 'completed' && t.advanced.rebuild.completed}
-                    {status.status === 'failed' && t.advanced.rebuild.failed}
+                    {status.status === 'queued' && t('advanced.rebuild.queued')}
+                    {status.status === 'running' && t('advanced.rebuild.running')}
+                    {status.status === 'completed' && t('advanced.rebuild.completed')}
+                    {status.status === 'failed' && t('advanced.rebuild.failed')}
                   </span>
                   {status.status === 'running' && (
                     <span className="text-sm text-muted-foreground">
-                      {t.advanced.rebuild.leavePageHint}
+                      {t('advanced.rebuild.leavePageHint')}
                     </span>
                   )}
                 </div>
               </div>
               {(status.status === 'completed' || status.status === 'failed') && (
                 <Button variant="outline" size="sm" onClick={handleReset}>
-                  {t.advanced.rebuild.startNew}
+                  {t('advanced.rebuild.startNew')}
                 </Button>
               )}
             </div>
@@ -254,9 +254,9 @@ export function RebuildEmbeddings() {
             {progressData && (
               <div className="space-y-2">
                 <div className="flex justify-between text-sm">
-                  <span>{t.common.progress}</span>
+                  <span>{t('common.progress')}</span>
                   <span className="font-medium">
-                    {t.advanced.rebuild.itemsProcessed
+                    {t('advanced.rebuild.itemsProcessed')
                       .replace('{processed}', processedItems.toString())
                       .replace('{total}', totalItems.toString())
                       .replace('{percent}', progressPercent.toFixed(1))}
@@ -265,7 +265,7 @@ export function RebuildEmbeddings() {
                 <Progress value={progressPercent} className="h-2" />
                 {failedItems > 0 && (
                   <p className="text-sm text-yellow-600">
-                    ⚠️ {t.advanced.rebuild.failedItems.replace('{count}', failedItems.toString())}
+                    ⚠️ {t('advanced.rebuild.failedItems').replace('{count}', failedItems.toString())}
                   </p>
                 )}
               </div>
@@ -274,19 +274,19 @@ export function RebuildEmbeddings() {
              {stats && (
               <div className="grid grid-cols-4 gap-4">
                 <div className="space-y-1">
-                  <p className="text-sm text-muted-foreground">{t.navigation.sources}</p>
+                  <p className="text-sm text-muted-foreground">{t('navigation.sources')}</p>
                   <p className="text-2xl font-bold">{sourcesProcessed}</p>
                 </div>
                 <div className="space-y-1">
-                  <p className="text-sm text-muted-foreground">{t.common.notes}</p>
+                  <p className="text-sm text-muted-foreground">{t('common.notes')}</p>
                   <p className="text-2xl font-bold">{notesProcessed}</p>
                 </div>
                 <div className="space-y-1">
-                  <p className="text-sm text-muted-foreground">{t.common.insights}</p>
+                  <p className="text-sm text-muted-foreground">{t('common.insights')}</p>
                   <p className="text-2xl font-bold">{insightsProcessed}</p>
                 </div>
                 <div className="space-y-1">
-                  <p className="text-sm text-muted-foreground">{t.advanced.rebuild.time}</p>
+                  <p className="text-sm text-muted-foreground">{t('advanced.rebuild.time')}</p>
                   <p className="text-2xl font-bold">
                     {processingTimeSeconds !== undefined ? `${processingTimeSeconds.toFixed(1)}s` : '—'}
                   </p>
@@ -303,9 +303,9 @@ export function RebuildEmbeddings() {
 
             {status.started_at && (
               <div className="text-sm text-muted-foreground space-y-1">
-                <p>{t.common.created.replace('{time}', new Date(status.started_at).toLocaleString())}</p>
+                <p>{t('common.created').replace('{time}', new Date(status.started_at).toLocaleString())}</p>
                 {status.completed_at && (
-                  <p>{t.notebooks.updated}: {new Date(status.completed_at).toLocaleString()}</p>
+                  <p>{t('notebooks.updated')}: {new Date(status.completed_at).toLocaleString()}</p>
                 )}
               </div>
             )}
@@ -315,23 +315,23 @@ export function RebuildEmbeddings() {
         {/* Help Section */}
          <Accordion type="single" collapsible className="w-full">
           <AccordionItem value="when">
-            <AccordionTrigger>{t.advanced.rebuild.whenToRebuild}</AccordionTrigger>
+            <AccordionTrigger>{t('advanced.rebuild.whenToRebuild')}</AccordionTrigger>
             <AccordionContent className="space-y-2 text-sm">
-              <p>{t.advanced.rebuild.whenToRebuildAns}</p>
+              <p>{t('advanced.rebuild.whenToRebuildAns')}</p>
             </AccordionContent>
           </AccordionItem>
 
           <AccordionItem value="time">
-            <AccordionTrigger>{t.advanced.rebuild.howLong}</AccordionTrigger>
+            <AccordionTrigger>{t('advanced.rebuild.howLong')}</AccordionTrigger>
             <AccordionContent className="space-y-2 text-sm">
-              <p>{t.advanced.rebuild.howLongAns}</p>
+              <p>{t('advanced.rebuild.howLongAns')}</p>
             </AccordionContent>
           </AccordionItem>
 
           <AccordionItem value="safe">
-            <AccordionTrigger>{t.advanced.rebuild.isSafe}</AccordionTrigger>
+            <AccordionTrigger>{t('advanced.rebuild.isSafe')}</AccordionTrigger>
             <AccordionContent className="space-y-2 text-sm">
-              <p>{t.advanced.rebuild.isSafeAns}</p>
+              <p>{t('advanced.rebuild.isSafeAns')}</p>
             </AccordionContent>
           </AccordionItem>
         </Accordion>
diff --git a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
index 2b411d4e..1390822e 100644
--- a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
@@ -34,8 +34,8 @@ export function SystemInfo() {
     return (
       <Card className="p-6">
         <div className="space-y-4">
-          <h2 className="text-xl font-semibold">{t.advanced.systemInfo}</h2>
-          <div className="text-sm text-muted-foreground">{t.common.loading}</div>
+          <h2 className="text-xl font-semibold">{t('advanced.systemInfo')}</h2>
+          <div className="text-sm text-muted-foreground">{t('common.loading')}</div>
         </div>
       </Card>
     )
@@ -44,37 +44,37 @@ export function SystemInfo() {
   return (
     <Card className="p-6">
       <div className="space-y-4">
-        <h2 className="text-xl font-semibold">{t.advanced.systemInfo}</h2>
+        <h2 className="text-xl font-semibold">{t('advanced.systemInfo')}</h2>
 
         <div className="space-y-3">
           {/* Current Version */}
           <div className="flex items-center justify-between">
-            <span className="text-sm font-medium">{t.advanced.currentVersion}</span>
-            <Badge variant="outline">{config?.version || t.advanced.unknown}</Badge>
+            <span className="text-sm font-medium">{t('advanced.currentVersion')}</span>
+            <Badge variant="outline">{config?.version || t('advanced.unknown')}</Badge>
           </div>
 
           {/* Latest Version */}
           {config?.latestVersion && (
             <div className="flex items-center justify-between">
-              <span className="text-sm font-medium">{t.advanced.latestVersion}</span>
+              <span className="text-sm font-medium">{t('advanced.latestVersion')}</span>
               <Badge variant="outline">{config.latestVersion}</Badge>
             </div>
           )}
 
           {/* Update Status */}
           <div className="flex items-center justify-between">
-            <span className="text-sm font-medium">{t.advanced.status}</span>
+            <span className="text-sm font-medium">{t('advanced.status')}</span>
             {config?.hasUpdate ? (
               <Badge variant="destructive">
-                {t.advanced.updateAvailable.replace('{version}', config.latestVersion || '')}
+                {t('advanced.updateAvailable').replace('{version}', config.latestVersion || '')}
               </Badge>
             ) : config?.latestVersion ? (
               <Badge variant="outline" className="text-green-600 border-green-600">
-                {t.advanced.upToDate}
+                {t('advanced.upToDate')}
               </Badge>
             ) : (
               <Badge variant="outline" className="text-muted-foreground">
-                {t.advanced.unknown}
+                {t('advanced.unknown')}
               </Badge>
             )}
           </div>
@@ -88,7 +88,7 @@ export function SystemInfo() {
                 rel="noopener noreferrer"
                 className="text-sm text-primary hover:underline inline-flex items-center gap-1"
               >
-                {t.advanced.viewOnGithub}
+                {t('advanced.viewOnGithub')}
                 <svg
                   className="w-4 h-4"
                   fill="none"
@@ -109,7 +109,7 @@ export function SystemInfo() {
           {/* Version Check Failed Message */}
           {!config?.latestVersion && config?.version && (
             <div className="pt-2 text-xs text-muted-foreground">
-              {t.advanced.updateCheckFailed}
+              {t('advanced.updateCheckFailed')}
             </div>
           )}
         </div>
diff --git a/frontend/src/app/(dashboard)/advanced/page.tsx b/frontend/src/app/(dashboard)/advanced/page.tsx
index d20331d5..7eb14b22 100644
--- a/frontend/src/app/(dashboard)/advanced/page.tsx
+++ b/frontend/src/app/(dashboard)/advanced/page.tsx
@@ -13,9 +13,9 @@ export default function AdvancedPage() {
         <div className="p-6">
           <div className="max-w-4xl mx-auto space-y-6">
             <div>
-              <h1 className="text-3xl font-bold">{t.advanced.title}</h1>
+              <h1 className="text-3xl font-bold">{t('advanced.title')}</h1>
               <p className="text-muted-foreground mt-2">
-                {t.advanced.desc}
+                {t('advanced.desc')}
               </p>
             </div>
 
diff --git a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
index 16792a2d..09085fe3 100644
--- a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
@@ -119,8 +119,8 @@ export default function NotebookPage() {
     return (
       <AppShell>
         <div className="p-6">
-          <h1 className="text-2xl font-bold mb-4">{t.notebooks.notFound}</h1>
-          <p className="text-muted-foreground">{t.notebooks.notFoundDesc}</p>
+          <h1 className="text-2xl font-bold mb-4">{t('notebooks.notFound')}</h1>
+          <p className="text-muted-foreground">{t('notebooks.notFoundDesc')}</p>
         </div>
       </AppShell>
     )
@@ -142,15 +142,15 @@ export default function NotebookPage() {
                   <TabsList className="grid w-full grid-cols-3">
                     <TabsTrigger value="sources" className="gap-2">
                       <FileText className="h-4 w-4" />
-                      {t.navigation.sources}
+                      {t('navigation.sources')}
                     </TabsTrigger>
                     <TabsTrigger value="notes" className="gap-2">
                       <StickyNote className="h-4 w-4" />
-                      {t.common.notes}
+                      {t('common.notes')}
                     </TabsTrigger>
                     <TabsTrigger value="chat" className="gap-2">
                       <MessageSquare className="h-4 w-4" />
-                      {t.common.chat}
+                      {t('common.chat')}
                     </TabsTrigger>
                   </TabsList>
                 </Tabs>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
index 181e6304..befc6f96 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
@@ -83,8 +83,8 @@ export function ChatColumn({ notebookId, contextSelections, sources, sourcesLoad
         <CardContent className="flex-1 flex items-center justify-center">
           <div className="text-center text-muted-foreground">
             <AlertCircle className="h-12 w-12 mx-auto mb-4 opacity-50" />
-            <p className="text-sm">{t.chat.unableToLoadChat}</p>
-            <p className="text-xs mt-2">{t.common.refreshPage || 'Please try refreshing the page'}</p>
+            <p className="text-sm">{t('chat.unableToLoadChat')}</p>
+            <p className="text-xs mt-2">{t('common.refreshPage') || 'Please try refreshing the page'}</p>
           </div>
         </CardContent>
       </Card>
@@ -93,7 +93,7 @@ export function ChatColumn({ notebookId, contextSelections, sources, sourcesLoad
 
   return (
     <ChatPanel
-      title={t.chat.chatWithNotebook}
+      title={t('chat.chatWithNotebook')}
       contextType="notebook"
       messages={chat.messages}
       isStreaming={chat.isSending}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
index 89604e0b..f1bb01b5 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
@@ -124,12 +124,12 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
           isEditorFullscreen && "!max-w-screen !max-h-screen border-none w-screen h-screen"
       )}>
         <DialogTitle className="sr-only">
-          {isEditing ? t.sources.editNote : t.sources.createNote}
+          {isEditing ? t('sources.editNote') : t('sources.createNote')}
         </DialogTitle>
         <form onSubmit={handleSubmit(onSubmit)} className="flex h-full flex-col min-w-0">
           {isEditing && noteLoading ? (
             <div className="flex-1 flex items-center justify-center py-10">
-              <span className="text-sm text-muted-foreground">{t.common.loading}</span>
+              <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
             </div>
           ) : (
             <>
@@ -139,8 +139,8 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
                   name="title"
                   value={watchTitle ?? ''}
                   onSave={(value) => setValue('title', value || '')}
-                  placeholder={t.sources.addTitle}
-                  emptyText={t.sources.untitledNote}
+                  placeholder={t('sources.addTitle')}
+                  emptyText={t('sources.untitledNote')}
                   className="text-xl font-semibold"
                   inputClassName="text-xl font-semibold"
                 />
@@ -160,7 +160,7 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
                       value={field.value}
                       onChange={field.onChange}
                       height={420}
-                      placeholder={t.sources.writeNotePlaceholder}
+                      placeholder={t('sources.writeNotePlaceholder')}
                       className={cn(
                           "w-full h-full min-h-[420px] max-h-[500px] overflow-hidden [&_.w-md-editor]:!static [&_.w-md-editor]:!w-full [&_.w-md-editor]:!h-full [&_.w-md-editor-content]:overflow-y-auto",
                           !isEditorFullscreen && "rounded-md border"
@@ -177,17 +177,17 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
 
           <div className="border-t px-6 py-4 flex justify-end gap-2">
             <Button type="button" variant="outline" onClick={handleClose}>
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button
               type="submit"
               disabled={isSaving || (isEditing && noteLoading)}
             >
               {isSaving
-                ? isEditing ? `${t.common.saving}...` : `${t.common.creating}...`
+                ? isEditing ? `${t('common.saving')}...` : `${t('common.creating')}...`
                 : isEditing
-                  ? t.sources.saveNote
-                  : t.sources.createNoteBtn}
+                  ? t('sources.saveNote')
+                  : t('sources.createNoteBtn')}
             </Button>
           </div>
         </form>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
index aa25e2cd..a8937aeb 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
@@ -55,7 +55,7 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
                 </CardTitle>
                 {notebook.archived && (
                   <Badge variant="secondary" className="mt-1">
-                    {t.notebooks.archived}
+                    {t('notebooks.archived')}
                   </Badge>
                 )}
               </div>
@@ -76,12 +76,12 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
                     {notebook.archived ? (
                       <>
                         <ArchiveRestore className="h-4 w-4 mr-2" />
-                        {t.notebooks.unarchive}
+                        {t('notebooks.unarchive')}
                       </>
                     ) : (
                       <>
                         <Archive className="h-4 w-4 mr-2" />
-                        {t.notebooks.archive}
+                        {t('notebooks.archive')}
                       </>
                     )}
                   </DropdownMenuItem>
@@ -93,7 +93,7 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
                     className="text-red-600"
                   >
                     <Trash2 className="h-4 w-4 mr-2" />
-                    {t.common.delete}
+                    {t('common.delete')}
                   </DropdownMenuItem>
                 </DropdownMenuContent>
               </DropdownMenu>
@@ -102,11 +102,11 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
           
           <CardContent>
             <CardDescription className="line-clamp-2 text-sm">
-              {notebook.description || t.chat.noDescription}
+              {notebook.description || t('chat.noDescription')}
             </CardDescription>
 
             <div className="mt-3 text-xs text-muted-foreground">
-              {t.common.updated.replace('{time}', formatDistanceToNow(new Date(notebook.updated), { 
+              {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), { 
                 addSuffix: true,
                 locale: getDateLocale(language)
               }))}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
index 202f7ede..c99ca362 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
@@ -69,9 +69,9 @@ export function NotebookDeleteDialog({
     <AlertDialog open={open} onOpenChange={onOpenChange}>
       <AlertDialogContent>
         <AlertDialogHeader>
-          <AlertDialogTitle>{t.notebooks.deleteNotebook}</AlertDialogTitle>
+          <AlertDialogTitle>{t('notebooks.deleteNotebook')}</AlertDialogTitle>
           <AlertDialogDescription>
-            {t.notebooks.deleteNotebookDesc.replace('{name}', notebookName)}
+            {t('notebooks.deleteNotebookDesc').replace('{name}', notebookName)}
           </AlertDialogDescription>
         </AlertDialogHeader>
 
@@ -79,11 +79,11 @@ export function NotebookDeleteDialog({
           {isLoadingPreview ? (
             <div className="flex items-center gap-2 text-muted-foreground">
               <LoadingSpinner size="sm" />
-              <span>{t.notebooks.deleteNotebookLoading}</span>
+              <span>{t('notebooks.deleteNotebookLoading')}</span>
             </div>
           ) : previewError ? (
             <div className="text-sm text-destructive">
-              {t.common.error}: {previewError.message || 'Failed to load preview'}
+              {t('common.error')}: {previewError.message || 'Failed to load preview'}
             </div>
           ) : preview ? (
             <>
@@ -91,13 +91,13 @@ export function NotebookDeleteDialog({
               <div className="text-sm">
                 {preview.note_count > 0 ? (
                   <p className="text-destructive font-medium">
-                    {t.notebooks.deleteNotebookNotes.replace(
+                    {t('notebooks.deleteNotebookNotes').replace(
                       '{count}',
                       String(preview.note_count)
                     )}
                   </p>
                 ) : (
-                  <p className="text-muted-foreground">{t.notebooks.deleteNotebookNoNotes}</p>
+                  <p className="text-muted-foreground">{t('notebooks.deleteNotebookNoNotes')}</p>
                 )}
               </div>
 
@@ -105,7 +105,7 @@ export function NotebookDeleteDialog({
               {preview.shared_source_count > 0 && (
                 <div className="text-sm">
                   <p className="text-muted-foreground">
-                    {t.notebooks.deleteNotebookSharedSources.replace(
+                    {t('notebooks.deleteNotebookSharedSources').replace(
                       '{count}',
                       String(preview.shared_source_count)
                     )}
@@ -116,7 +116,7 @@ export function NotebookDeleteDialog({
               {/* No sources message */}
               {preview.exclusive_source_count === 0 && preview.shared_source_count === 0 && (
                 <div className="text-sm">
-                  <p className="text-muted-foreground">{t.notebooks.deleteNotebookNoSources}</p>
+                  <p className="text-muted-foreground">{t('notebooks.deleteNotebookNoSources')}</p>
                 </div>
               )}
 
@@ -124,7 +124,7 @@ export function NotebookDeleteDialog({
               {preview.exclusive_source_count > 0 && (
                 <div className="pt-3 border-t space-y-3">
                   <p className="text-sm text-destructive font-medium">
-                    {t.notebooks.deleteNotebookExclusiveSources.replace(
+                    {t('notebooks.deleteNotebookExclusiveSources').replace(
                       '{count}',
                       String(preview.exclusive_source_count)
                     )}
@@ -137,13 +137,13 @@ export function NotebookDeleteDialog({
                     <div className="flex items-center space-x-3">
                       <RadioGroupItem value="delete" id="delete-sources" />
                       <Label htmlFor="delete-sources" className="text-sm cursor-pointer">
-                        {t.notebooks.deleteExclusiveSourcesLabel}
+                        {t('notebooks.deleteExclusiveSourcesLabel')}
                       </Label>
                     </div>
                     <div className="flex items-center space-x-3">
                       <RadioGroupItem value="keep" id="keep-sources" />
                       <Label htmlFor="keep-sources" className="text-sm cursor-pointer">
-                        {t.notebooks.keepExclusiveSourcesLabel}
+                        {t('notebooks.keepExclusiveSourcesLabel')}
                       </Label>
                     </div>
                   </RadioGroup>
@@ -154,7 +154,7 @@ export function NotebookDeleteDialog({
         </div>
 
         <AlertDialogFooter>
-          <AlertDialogCancel disabled={isDeleting}>{t.common.cancel}</AlertDialogCancel>
+          <AlertDialogCancel disabled={isDeleting}>{t('common.cancel')}</AlertDialogCancel>
           <AlertDialogAction
             onClick={handleConfirm}
             disabled={isDeleting || isLoadingPreview}
@@ -163,10 +163,10 @@ export function NotebookDeleteDialog({
             {isDeleting ? (
               <>
                 <LoadingSpinner size="sm" className="mr-2" />
-                {t.common.deleting}
+                {t('common.deleting')}
               </>
             ) : (
-              t.common.delete
+              t('common.delete')
             )}
           </AlertDialogAction>
         </AlertDialogFooter>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
index 76e36e60..43d452cd 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
@@ -61,10 +61,10 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
                 onSave={handleUpdateName}
                 className="text-2xl font-bold"
                 inputClassName="text-2xl font-bold"
-                placeholder={t.notebooks.namePlaceholder}
+                placeholder={t('notebooks.namePlaceholder')}
               />
               {notebook.archived && (
-                <Badge variant="secondary">{t.notebooks.archived}</Badge>
+                <Badge variant="secondary">{t('notebooks.archived')}</Badge>
               )}
             </div>
             <div className="flex gap-2">
@@ -76,12 +76,12 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
                 {notebook.archived ? (
                   <>
                     <ArchiveRestore className="h-4 w-4 mr-2" />
-                    {t.notebooks.unarchive}
+                    {t('notebooks.unarchive')}
                   </>
                 ) : (
                   <>
                     <Archive className="h-4 w-4 mr-2" />
-                    {t.notebooks.archive}
+                    {t('notebooks.archive')}
                   </>
                 )}
               </Button>
@@ -92,7 +92,7 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
                 className="text-red-600 hover:text-red-700"
               >
                 <Trash2 className="h-4 w-4 mr-2" />
-                {t.common.delete}
+                {t('common.delete')}
               </Button>
             </div>
           </div>
@@ -104,14 +104,14 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
             onSave={handleUpdateDescription}
             className="text-muted-foreground"
             inputClassName="text-muted-foreground"
-            placeholder={t.notebooks.addDescription}
+            placeholder={t('notebooks.addDescription')}
             multiline
-            emptyText={t.notebooks.addDescription}
+            emptyText={t('notebooks.addDescription')}
           />
           
           <div className="text-sm text-muted-foreground">
-            {t.common.created.replace('{time}', formatDistanceToNow(new Date(notebook.created), { addSuffix: true, locale: dfLocale }))} • 
-            {t.common.updated.replace('{time}', formatDistanceToNow(new Date(notebook.updated), { addSuffix: true, locale: dfLocale }))}
+            {t('common.created').replace('{time}', formatDistanceToNow(new Date(notebook.created), { addSuffix: true, locale: dfLocale }))} • 
+            {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), { addSuffix: true, locale: dfLocale }))}
           </div>
         </div>
       </div>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
index a09efa82..c51ba4ed 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
@@ -45,8 +45,8 @@ export function NotebookList({
     return (
       <EmptyState
         icon={Book}
-        title={emptyTitle ?? t.common.noResults}
-        description={emptyDescription ?? t.chat.startByCreating}
+        title={emptyTitle ?? t('common.noResults')}
+        description={emptyDescription ?? t('chat.startByCreating')}
         action={onAction && actionLabel ? (
           <Button onClick={onAction} variant="outline" className="mt-4">
             <Plus className="h-4 w-4 mr-2" />
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index bb915f27..cda02b39 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -51,8 +51,8 @@ export function NotesColumn({
   // Collapsible column state
   const { notesCollapsed, toggleNotes } = useNotebookColumnsStore()
   const collapseButton = useMemo(
-    () => createCollapseButton(toggleNotes, t.common.notes),
-    [toggleNotes, t.common.notes]
+    () => createCollapseButton(toggleNotes, t('common.notes')),
+    [toggleNotes, t('common.notes')]
   )
 
   const handleDeleteClick = (noteId: string) => {
@@ -78,12 +78,12 @@ export function NotesColumn({
         isCollapsed={notesCollapsed}
         onToggle={toggleNotes}
         collapsedIcon={StickyNote}
-        collapsedLabel={t.common.notes}
+        collapsedLabel={t('common.notes')}
       >
         <Card className="h-full flex flex-col flex-1 overflow-hidden">
           <CardHeader className="pb-3 flex-shrink-0">
             <div className="flex items-center justify-between gap-2">
-              <CardTitle className="text-lg">{t.common.notes}</CardTitle>
+              <CardTitle className="text-lg">{t('common.notes')}</CardTitle>
               <div className="flex items-center gap-2">
                 <Button
                   size="sm"
@@ -93,7 +93,7 @@ export function NotesColumn({
                   }}
                 >
                   <Plus className="h-4 w-4 mr-2" />
-                  {t.common.writeNote}
+                  {t('common.writeNote')}
                 </Button>
                 {collapseButton}
               </div>
@@ -108,8 +108,8 @@ export function NotesColumn({
             ) : !notes || notes.length === 0 ? (
               <EmptyState
                 icon={StickyNote}
-                title={t.notebooks.noNotesYet}
-                description={t.sources.createFirstNote}
+                title={t('notebooks.noNotesYet')}
+                description={t('sources.createFirstNote')}
               />
             ) : (
               <div className="space-y-3">
@@ -127,7 +127,7 @@ export function NotesColumn({
                           <User className="h-4 w-4 text-muted-foreground" />
                         )}
                         <Badge variant="secondary" className="text-xs">
-                          {note.note_type === 'ai' ? t.common.aiGenerated : t.common.human}
+                          {note.note_type === 'ai' ? t('common.aiGenerated') : t('common.human')}
                         </Badge>
                       </div>
 
@@ -171,7 +171,7 @@ export function NotesColumn({
                               className="text-red-600 focus:text-red-600"
                             >
                               <Trash2 className="h-4 w-4 mr-2" />
-                              {t.notebooks.deleteNote}
+                              {t('notebooks.deleteNote')}
                             </DropdownMenuItem>
                           </DropdownMenuContent>
                         </DropdownMenu>
@@ -212,9 +212,9 @@ export function NotesColumn({
       <ConfirmDialog
         open={deleteDialogOpen}
         onOpenChange={setDeleteDialogOpen}
-        title={t.notebooks.deleteNote}
-        description={t.notebooks.deleteNoteConfirm}
-        confirmText={t.common.delete}
+        title={t('notebooks.deleteNote')}
+        description={t('notebooks.deleteNoteConfirm')}
+        confirmText={t('common.delete')}
         onConfirm={handleDeleteConfirm}
         isLoading={deleteNote.isPending}
         confirmVariant="destructive"
diff --git a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
index b9bdb0c2..addf1605 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
@@ -66,8 +66,8 @@ export function SourcesColumn({
   // Collapsible column state
   const { sourcesCollapsed, toggleSources } = useNotebookColumnsStore()
   const collapseButton = useMemo(
-    () => createCollapseButton(toggleSources, t.navigation.sources),
-    [toggleSources, t.navigation.sources]
+    () => createCollapseButton(toggleSources, t('navigation.sources')),
+    [toggleSources, t('navigation.sources')]
   )
 
   // Scroll container ref for infinite scroll
@@ -151,29 +151,29 @@ export function SourcesColumn({
         isCollapsed={sourcesCollapsed}
         onToggle={toggleSources}
         collapsedIcon={FileText}
-        collapsedLabel={t.navigation.sources}
+        collapsedLabel={t('navigation.sources')}
       >
         <Card className="h-full flex flex-col flex-1 overflow-hidden">
           <CardHeader className="pb-3 flex-shrink-0">
             <div className="flex items-center justify-between gap-2">
-              <CardTitle className="text-lg">{t.navigation.sources}</CardTitle>
+              <CardTitle className="text-lg">{t('navigation.sources')}</CardTitle>
               <div className="flex items-center gap-2">
                 <DropdownMenu open={dropdownOpen} onOpenChange={setDropdownOpen}>
                   <DropdownMenuTrigger asChild>
                     <Button size="sm">
                       <Plus className="h-4 w-4 mr-2" />
-                      {t.sources.addSource}
+                      {t('sources.addSource')}
                       <ChevronDown className="h-4 w-4 ml-2" />
                     </Button>
                   </DropdownMenuTrigger>
                   <DropdownMenuContent align="end">
                     <DropdownMenuItem onClick={() => { setDropdownOpen(false); setAddDialogOpen(true); }}>
                       <Plus className="h-4 w-4 mr-2" />
-                      {t.sources.addSource}
+                      {t('sources.addSource')}
                     </DropdownMenuItem>
                     <DropdownMenuItem onClick={() => { setDropdownOpen(false); setAddExistingDialogOpen(true); }}>
                       <Link2 className="h-4 w-4 mr-2" />
-                      {t.sources.addExistingTitle}
+                      {t('sources.addExistingTitle')}
                     </DropdownMenuItem>
                   </DropdownMenuContent>
                 </DropdownMenu>
@@ -190,8 +190,8 @@ export function SourcesColumn({
             ) : !sources || sources.length === 0 ? (
               <EmptyState
                 icon={FileText}
-                title={t.sources.noSourcesYet}
-                description={t.sources.createFirstSource}
+                title={t('sources.noSourcesYet')}
+                description={t('sources.createFirstSource')}
               />
             ) : (
               <div className="space-y-3">
@@ -240,9 +240,9 @@ export function SourcesColumn({
       <ConfirmDialog
         open={deleteDialogOpen}
         onOpenChange={setDeleteDialogOpen}
-        title={t.sources.delete}
-        description={t.sources.deleteConfirm}
-        confirmText={t.common.delete}
+        title={t('sources.delete')}
+        description={t('sources.deleteConfirm')}
+        confirmText={t('common.delete')}
         onConfirm={handleDeleteConfirm}
         isLoading={deleteSource.isPending}
         confirmVariant="destructive"
@@ -251,9 +251,9 @@ export function SourcesColumn({
       <ConfirmDialog
         open={removeDialogOpen}
         onOpenChange={setRemoveDialogOpen}
-        title={t.sources.removeFromNotebook}
-        description={t.sources.removeConfirm}
-        confirmText={t.common.remove}
+        title={t('sources.removeFromNotebook')}
+        description={t('sources.removeConfirm')}
+        confirmText={t('common.remove')}
         onConfirm={handleRemoveConfirm}
         isLoading={removeFromNotebook.isPending}
         confirmVariant="default"
diff --git a/frontend/src/app/(dashboard)/notebooks/page.tsx b/frontend/src/app/(dashboard)/notebooks/page.tsx
index aaa4e884..6637e2b9 100644
--- a/frontend/src/app/(dashboard)/notebooks/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/page.tsx
@@ -53,7 +53,7 @@ export default function NotebooksPage() {
         <div className="p-6 space-y-6">
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-4">
-            <h1 className="text-2xl font-bold">{t.notebooks.title}</h1>
+            <h1 className="text-2xl font-bold">{t('notebooks.title')}</h1>
             <Button variant="outline" size="sm" onClick={() => refetch()}>
               <RefreshCw className="h-4 w-4" />
             </Button>
@@ -64,14 +64,14 @@ export default function NotebooksPage() {
               name="notebook-search"
               value={searchTerm}
               onChange={(event) => setSearchTerm(event.target.value)}
-              placeholder={t.notebooks.searchPlaceholder}
+              placeholder={t('notebooks.searchPlaceholder')}
               autoComplete="off"
-              aria-label={t.common.accessibility?.searchNotebooks || "Search notebooks"}
+              aria-label={t('common.accessibility.searchNotebooks') || "Search notebooks"}
               className="w-full sm:w-64"
             />
             <Button onClick={() => setCreateDialogOpen(true)}>
               <Plus className="h-4 w-4 mr-2" />
-              {t.notebooks.newNotebook}
+              {t('notebooks.newNotebook')}
             </Button>
           </div>
         </div>
@@ -80,21 +80,21 @@ export default function NotebooksPage() {
           <NotebookList 
             notebooks={filteredActive} 
             isLoading={isLoading}
-            title={t.notebooks.activeNotebooks}
-            emptyTitle={isSearching ? t.common.noMatches : undefined}
-            emptyDescription={isSearching ? t.common.tryDifferentSearch : undefined}
+            title={t('notebooks.activeNotebooks')}
+            emptyTitle={isSearching ? t('common.noMatches') : undefined}
+            emptyDescription={isSearching ? t('common.tryDifferentSearch') : undefined}
             onAction={!isSearching ? () => setCreateDialogOpen(true) : undefined}
-            actionLabel={!isSearching ? t.notebooks.newNotebook : undefined}
+            actionLabel={!isSearching ? t('notebooks.newNotebook') : undefined}
           />
           
           {hasArchived && (
             <NotebookList 
               notebooks={filteredArchived} 
               isLoading={false}
-              title={t.notebooks.archivedNotebooks}
+              title={t('notebooks.archivedNotebooks')}
               collapsible
-              emptyTitle={isSearching ? t.common.noMatches : undefined}
-              emptyDescription={isSearching ? t.common.tryDifferentSearch : undefined}
+              emptyTitle={isSearching ? t('common.noMatches') : undefined}
+              emptyDescription={isSearching ? t('common.tryDifferentSearch') : undefined}
             />
           )}
         </div>
diff --git a/frontend/src/app/(dashboard)/podcasts/page.tsx b/frontend/src/app/(dashboard)/podcasts/page.tsx
index 8616464b..2dddabc7 100644
--- a/frontend/src/app/(dashboard)/podcasts/page.tsx
+++ b/frontend/src/app/(dashboard)/podcasts/page.tsx
@@ -29,18 +29,18 @@ export default function PodcastsPage() {
       <div className="flex-1 overflow-y-auto">
         <div className="px-6 py-6 space-y-6">
           <header className="space-y-1">
-            <h1 className="text-2xl font-semibold tracking-tight">{t.podcasts.listTitle}</h1>
+            <h1 className="text-2xl font-semibold tracking-tight">{t('podcasts.listTitle')}</h1>
             <p className="text-muted-foreground">
-              {t.podcasts.listDesc}
+              {t('podcasts.listDesc')}
             </p>
           </header>
 
           {hasUnconfiguredProfiles ? (
             <Alert className="bg-amber-50 text-amber-900 border-amber-200">
               <AlertTriangle className="h-4 w-4" />
-              <AlertTitle>{t.podcasts.setupRequired}</AlertTitle>
+              <AlertTitle>{t('podcasts.setupRequired')}</AlertTitle>
               <AlertDescription>
-                {t.podcasts.setupRequiredDesc}
+                {t('podcasts.setupRequiredDesc')}
               </AlertDescription>
             </Alert>
           ) : null}
@@ -51,15 +51,15 @@ export default function PodcastsPage() {
             className="space-y-6"
           >
             <div className="space-y-2">
-              <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t.podcasts.chooseAView}</p>
-              <TabsList aria-label={t.common.accessibility.podcastViews} className="w-full max-w-md">
+              <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t('podcasts.chooseAView')}</p>
+              <TabsList aria-label={t('common.accessibility.podcastViews')} className="w-full max-w-md">
                 <TabsTrigger value="episodes">
                   <Mic className="h-4 w-4" />
-                  {t.podcasts.episodesTab}
+                  {t('podcasts.episodesTab')}
                 </TabsTrigger>
                 <TabsTrigger value="templates">
                   <LayoutTemplate className="h-4 w-4" />
-                  {t.podcasts.templatesTab}
+                  {t('podcasts.templatesTab')}
                 </TabsTrigger>
               </TabsList>
             </div>
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index ffd3fd31..8c864299 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -72,7 +72,7 @@ export default function SearchPage() {
   }, [availableModels])
 
   const resolveModelName = (id?: string | null) => {
-    if (!id) return t.searchPage.notSet
+    if (!id) return t('searchPage.notSet')
     return modelNameById.get(id) ?? id
   }
 
@@ -159,19 +159,19 @@ export default function SearchPage() {
   return (
     <AppShell>
       <div className="p-4 md:p-6">
-        <h1 className="text-xl md:text-2xl font-bold mb-4 md:mb-6">{t.searchPage.askAndSearch}</h1>
+        <h1 className="text-xl md:text-2xl font-bold mb-4 md:mb-6">{t('searchPage.askAndSearch')}</h1>
 
         <Tabs value={activeTab} onValueChange={(v) => setActiveTab(v as 'ask' | 'search')} className="w-full space-y-6">
           <div className="space-y-2">
-            <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t.searchPage.chooseAMode}</p>
-            <TabsList aria-label={t.common.accessibility.searchKB} className="w-full max-w-xl">
+            <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t('searchPage.chooseAMode')}</p>
+            <TabsList aria-label={t('common.accessibility.searchKB')} className="w-full max-w-xl">
               <TabsTrigger value="ask">
                 <MessageCircleQuestion className="h-4 w-4" />
-                {t.searchPage.askBeta}
+                {t('searchPage.askBeta')}
               </TabsTrigger>
               <TabsTrigger value="search">
                 <Search className="h-4 w-4" />
-                {t.searchPage.search}
+                {t('searchPage.search')}
               </TabsTrigger>
             </TabsList>
           </div>
@@ -179,19 +179,19 @@ export default function SearchPage() {
           <TabsContent value="ask" className="mt-6">
             <Card>
               <CardHeader>
-                <CardTitle className="text-lg">{t.searchPage.askYourKb}</CardTitle>
+                <CardTitle className="text-lg">{t('searchPage.askYourKb')}</CardTitle>
                 <p className="text-sm text-muted-foreground">
-                  {t.searchPage.askYourKbDesc}
+                  {t('searchPage.askYourKbDesc')}
                 </p>
               </CardHeader>
               <CardContent className="space-y-4">
                 {/* Question Input */}
                 <div className="space-y-2">
-                  <Label htmlFor="ask-question">{t.searchPage.question}</Label>
+                  <Label htmlFor="ask-question">{t('searchPage.question')}</Label>
                   <Textarea
                     id="ask-question"
                     name="ask-question"
-                    placeholder={t.searchPage.enterQuestionPlaceholder}
+                    placeholder={t('searchPage.enterQuestionPlaceholder')}
                     value={askQuestion}
                     onChange={(e) => setAskQuestion(e.target.value)}
                     onKeyDown={(e) => {
@@ -203,23 +203,23 @@ export default function SearchPage() {
                     }}
                     disabled={ask.isStreaming}
                     rows={3}
-                    aria-label={t.common.accessibility.enterQuestion}
+                    aria-label={t('common.accessibility.enterQuestion')}
                   />
-                  <p className="text-xs text-muted-foreground">{t.searchPage.pressToSubmit}</p>
+                  <p className="text-xs text-muted-foreground">{t('searchPage.pressToSubmit')}</p>
                 </div>
 
                 {/* Models Display */}
                 {!hasEmbeddingModel ? (
                   <div className="flex items-center gap-2 p-3 text-sm text-amber-600 dark:text-amber-500 bg-amber-50 dark:bg-amber-950/20 rounded-md">
                     <AlertCircle className="h-4 w-4" />
-                    <span>{t.searchPage.noEmbeddingModel}</span>
+                    <span>{t('searchPage.noEmbeddingModel')}</span>
                   </div>
                 ) : (
                   <>
                     <div className="space-y-2">
                       <div className="flex items-center justify-between">
                         <Label className="text-xs text-muted-foreground">
-                          {customModels ? t.searchPage.usingCustomModels : t.searchPage.usingDefaultModels}
+                          {customModels ? t('searchPage.usingCustomModels') : t('searchPage.usingDefaultModels')}
                         </Label>
                         <Button
                           variant="ghost"
@@ -229,18 +229,18 @@ export default function SearchPage() {
                           className="h-auto py-1 px-2"
                         >
                           <Settings className="h-3 w-3 mr-1" />
-                          {t.searchPage.advanced}
+                          {t('searchPage.advanced')}
                         </Button>
                       </div>
                       <div className="flex gap-2 text-xs flex-wrap">
                         <Badge variant="secondary">
-                          {t.searchPage.strategy}: {resolveModelName(customModels?.strategy || modelDefaults?.default_chat_model)}
+                          {t('searchPage.strategy')}: {resolveModelName(customModels?.strategy || modelDefaults?.default_chat_model)}
                         </Badge>
                         <Badge variant="secondary">
-                          {t.searchPage.answer}: {resolveModelName(customModels?.answer || modelDefaults?.default_chat_model)}
+                          {t('searchPage.answer')}: {resolveModelName(customModels?.answer || modelDefaults?.default_chat_model)}
                         </Badge>
                         <Badge variant="secondary">
-                          {t.searchPage.final}: {resolveModelName(customModels?.finalAnswer || modelDefaults?.default_chat_model)}
+                          {t('searchPage.final')}: {resolveModelName(customModels?.finalAnswer || modelDefaults?.default_chat_model)}
                         </Badge>
                       </div>
                     </div>
@@ -254,10 +254,10 @@ export default function SearchPage() {
                         {ask.isStreaming ? (
                           <>
                             <LoadingSpinner size="sm" className="mr-2" />
-                            {t.searchPage.processing}
+                            {t('searchPage.processing')}
                           </>
                         ) : (
-                          t.searchPage.ask
+                          t('searchPage.ask')
                         )}
                       </Button>
 
@@ -268,7 +268,7 @@ export default function SearchPage() {
                           className="w-full"
                         >
                           <Save className="h-4 w-4 mr-2" />
-                          {t.searchPage.saveToNotebooks}
+                          {t('searchPage.saveToNotebooks')}
                         </Button>
                       )}
                     </div>
@@ -311,34 +311,34 @@ export default function SearchPage() {
           <TabsContent value="search" className="mt-6">
             <Card>
               <CardHeader>
-                <CardTitle className="text-lg">{t.searchPage.search}</CardTitle>
+                <CardTitle className="text-lg">{t('searchPage.search')}</CardTitle>
                 <p className="text-sm text-muted-foreground">
-                  {t.searchPage.searchDesc}
+                  {t('searchPage.searchDesc')}
                 </p>
               </CardHeader>
               <CardContent className="space-y-4">
                 {/* Search Input */}
                 <div className="space-y-2">
                   <Label htmlFor="search-query" className="sr-only">
-                    {t.searchPage.search}
+                    {t('searchPage.search')}
                   </Label>
                   <div className="flex flex-col sm:flex-row gap-2">
                     <Input
                       id="search-query"
                       name="search-query"
-                      placeholder={t.searchPage.enterSearchPlaceholder}
+                      placeholder={t('searchPage.enterSearchPlaceholder')}
                       value={searchQuery}
                       onChange={(e) => setSearchQuery(e.target.value)}
                       onKeyPress={handleKeyPress}
                       disabled={searchMutation.isPending}
                       className="flex-1"
-                      aria-label={t.common.accessibility.enterSearch}
+                      aria-label={t('common.accessibility.enterSearch')}
                       autoComplete="off"
                     />
                     <Button
                       onClick={handleSearch}
                       disabled={searchMutation.isPending || !searchQuery.trim()}
-                      aria-label={t.common.accessibility.searchKBBtn}
+                      aria-label={t('common.accessibility.searchKBBtn')}
                       className="w-full sm:w-auto"
                     >
                       {searchMutation.isPending ? (
@@ -346,21 +346,21 @@ export default function SearchPage() {
                       ) : (
                         <Search className="h-4 w-4 mr-2" />
                       )}
-                      {t.searchPage.search}
+                      {t('searchPage.search')}
                     </Button>
                   </div>
-                  <p className="text-xs text-muted-foreground">{t.searchPage.pressToSearch}</p>
+                  <p className="text-xs text-muted-foreground">{t('searchPage.pressToSearch')}</p>
                 </div>
 
                 {/* Search Options */}
                 <div className="space-y-4">
                   {/* Search Type */}
                   <div className="space-y-2" role="group" aria-labelledby="search-type-label">
-                    <span id="search-type-label" className="text-sm font-medium leading-none">{t.searchPage.searchType}</span>
+                    <span id="search-type-label" className="text-sm font-medium leading-none">{t('searchPage.searchType')}</span>
                     {!hasEmbeddingModel && (
                       <div className="flex items-center gap-2 text-sm text-amber-600 dark:text-amber-500">
                         <AlertCircle className="h-4 w-4" />
-                        <span>{t.searchPage.vectorSearchWarning}</span>
+                        <span>{t('searchPage.vectorSearchWarning')}</span>
                       </div>
                     )}
                     <RadioGroup
@@ -372,7 +372,7 @@ export default function SearchPage() {
                       <div className="flex items-center space-x-2">
                         <RadioGroupItem value="text" id="text" />
                         <Label htmlFor="text" className="font-normal cursor-pointer">
-                          {t.searchPage.textSearch}
+                          {t('searchPage.textSearch')}
                         </Label>
                       </div>
                       <div className="flex items-center space-x-2">
@@ -385,7 +385,7 @@ export default function SearchPage() {
                           htmlFor="vector"
                           className={`font-normal ${!hasEmbeddingModel ? 'text-muted-foreground cursor-not-allowed' : 'cursor-pointer'}`}
                         >
-                          {t.searchPage.vectorSearch}
+                          {t('searchPage.vectorSearch')}
                         </Label>
                       </div>
                     </RadioGroup>
@@ -393,7 +393,7 @@ export default function SearchPage() {
 
                   {/* Search Locations */}
                   <div className="space-y-2" role="group" aria-labelledby="search-in-label">
-                    <span id="search-in-label" className="text-sm font-medium leading-none">{t.searchPage.searchIn}</span>
+                    <span id="search-in-label" className="text-sm font-medium leading-none">{t('searchPage.searchIn')}</span>
                     <div className="space-y-2">
                       <div className="flex items-center space-x-2">
                         <Checkbox
@@ -404,7 +404,7 @@ export default function SearchPage() {
                           disabled={searchMutation.isPending}
                         />
                         <Label htmlFor="sources" className="font-normal cursor-pointer">
-                          {t.searchPage.searchSources}
+                          {t('searchPage.searchSources')}
                         </Label>
                       </div>
                       <div className="flex items-center space-x-2">
@@ -416,7 +416,7 @@ export default function SearchPage() {
                           disabled={searchMutation.isPending}
                         />
                         <Label htmlFor="notes" className="font-normal cursor-pointer">
-                          {t.searchPage.searchNotes}
+                          {t('searchPage.searchNotes')}
                         </Label>
                       </div>
                     </div>
@@ -428,15 +428,15 @@ export default function SearchPage() {
                   <div className="mt-6 space-y-3">
                     <div className="flex items-center justify-between">
                       <h3 className="text-sm font-medium">
-                        {t.searchPage.resultsFound.replace('{count}', searchMutation.data.total_count.toString())}
+                        {t('searchPage.resultsFound').replace('{count}', searchMutation.data.total_count.toString())}
                       </h3>
-                      <Badge variant="outline">{searchMutation.data.search_type === 'text' ? t.searchPage.textSearch : t.searchPage.vectorSearch}</Badge>
+                      <Badge variant="outline">{searchMutation.data.search_type === 'text' ? t('searchPage.textSearch') : t('searchPage.vectorSearch')}</Badge>
                     </div>
 
                     {searchMutation.data.results.length === 0 ? (
                       <Card>
                         <CardContent className="pt-6 text-center text-muted-foreground">
-                          {t.searchPage.noResultsFor.replace('{query}', searchQuery)}
+                          {t('searchPage.noResultsFor').replace('{query}', searchQuery)}
                         </CardContent>
                       </Card>
                     ) : (
@@ -472,7 +472,7 @@ export default function SearchPage() {
                                 <Collapsible className="mt-3">
                                   <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground">
                                     <ChevronDown className="h-4 w-4" />
-                                    {t.searchPage.matches.replace('{count}', result.matches.length.toString())}
+                                    {t('searchPage.matches').replace('{count}', result.matches.length.toString())}
                                   </CollapsibleTrigger>
                                   <CollapsibleContent className="mt-2 space-y-1">
                                     {result.matches.map((match, i) => (
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 086fb1a1..280a3033 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -255,14 +255,14 @@ function CredentialFormDialog({
         <DialogHeader>
           <DialogTitle>
             {isEditing
-              ? t.apiKeys.editConfig.replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)
-              : t.apiKeys.addConfig.replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)}
+              ? t('apiKeys.editConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)
+              : t('apiKeys.addConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)}
           </DialogTitle>
         </DialogHeader>
         <form onSubmit={handleSubmit} className="space-y-4">
           {/* Name */}
           <div className="space-y-2">
-            <Label htmlFor="cred-name">{t.apiKeys.configName}</Label>
+            <Label htmlFor="cred-name">{t('apiKeys.configName')}</Label>
             <input
               id="cred-name"
               className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
@@ -271,14 +271,14 @@ function CredentialFormDialog({
               placeholder={`${PROVIDER_DISPLAY_NAMES[provider] || provider} Production`}
               disabled={isSubmitting}
             />
-            <p className="text-xs text-muted-foreground">{t.apiKeys.configNameHint}</p>
+            <p className="text-xs text-muted-foreground">{t('apiKeys.configNameHint')}</p>
           </div>
 
           {/* Vertex fields */}
           {isVertex ? (
             <>
               <div className="space-y-2">
-                <Label htmlFor="vertex-project">{t.apiKeys.vertexProject}</Label>
+                <Label htmlFor="vertex-project">{t('apiKeys.vertexProject')}</Label>
                 <input
                   id="vertex-project"
                   className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
@@ -289,7 +289,7 @@ function CredentialFormDialog({
                 />
               </div>
               <div className="space-y-2">
-                <Label htmlFor="vertex-location">{t.apiKeys.vertexLocation}</Label>
+                <Label htmlFor="vertex-location">{t('apiKeys.vertexLocation')}</Label>
                 <input
                   id="vertex-location"
                   className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
@@ -301,8 +301,8 @@ function CredentialFormDialog({
               </div>
               <div className="space-y-2">
                 <Label htmlFor="vertex-creds">
-                  {t.apiKeys.vertexCredentials}
-                  <span className="text-muted-foreground font-normal ml-1">({t.common.optional})</span>
+                  {t('apiKeys.vertexCredentials')}
+                  <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
                 </Label>
                 <input
                   id="vertex-creds"
@@ -318,8 +318,8 @@ function CredentialFormDialog({
             /* API Key */
             <div className="space-y-2">
               <Label htmlFor="api-key">
-                {t.models.apiKey}
-                {!requiresApiKey && <span className="text-muted-foreground font-normal ml-1">({t.common.optional})</span>}
+                {t('models.apiKey')}
+                {!requiresApiKey && <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>}
               </Label>
               <div className="relative">
                 <input
@@ -341,10 +341,10 @@ function CredentialFormDialog({
                   {showApiKey ? 'Hide' : 'Show'}
                 </button>
               </div>
-              {isEditing && <p className="text-xs text-muted-foreground">{t.apiKeys.apiKeyEditHint}</p>}
+              {isEditing && <p className="text-xs text-muted-foreground">{t('apiKeys.apiKeyEditHint')}</p>}
               {docsUrl && (
                 <a href={docsUrl} target="_blank" rel="noopener noreferrer" className="text-xs text-primary hover:underline">
-                  {t.apiKeys.getApiKey} &rarr;
+                  {t('apiKeys.getApiKey')} &rarr;
                 </a>
               )}
             </div>
@@ -353,7 +353,7 @@ function CredentialFormDialog({
           {/* Base URL (non-Vertex) */}
           {!isVertex && (
             <div className="space-y-2">
-              <Label htmlFor="base-url" className="text-muted-foreground">{t.apiKeys.baseUrl}</Label>
+              <Label htmlFor="base-url" className="text-muted-foreground">{t('apiKeys.baseUrl')}</Label>
               <input
                 id="base-url"
                 type="url"
@@ -363,18 +363,18 @@ function CredentialFormDialog({
                 placeholder={isOllama ? 'http://localhost:11434' : 'https://api.example.com/v1'}
                 disabled={isSubmitting}
               />
-              <p className="text-xs text-muted-foreground">{t.apiKeys.baseUrlOverrideHint}</p>
+              <p className="text-xs text-muted-foreground">{t('apiKeys.baseUrlOverrideHint')}</p>
             </div>
           )}
 
           {/* Actions */}
           <div className="flex justify-end gap-2 pt-4 border-t">
             <Button type="button" variant="outline" onClick={() => onOpenChange(false)} disabled={isSubmitting}>
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button type="submit" disabled={!isValid || isSubmitting}>
               {isSubmitting && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-              {isEditing ? t.common.save : t.apiKeys.addConfig}
+              {isEditing ? t('common.save') : t('apiKeys.addConfig')}
             </Button>
           </div>
         </form>
@@ -518,7 +518,7 @@ function DiscoverModelsDialog({
       <DialogContent className="sm:max-w-lg max-h-[80vh] overflow-y-auto">
         <DialogHeader>
           <DialogTitle>
-            {t.models.discoverModels} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
+            {t('models.discoverModels')} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
           </DialogTitle>
           <DialogDescription>
             {credential.name}
@@ -538,7 +538,7 @@ function DiscoverModelsDialog({
           <div className="space-y-4">
             {/* Model type selector */}
             <div className="space-y-2">
-              <Label>{t.models.modelType}</Label>
+              <Label>{t('models.modelType')}</Label>
               <Select value={selectedType} onValueChange={(v) => setSelectedType(v as ModelType)}>
                 <SelectTrigger>
                   <SelectValue />
@@ -554,14 +554,14 @@ function DiscoverModelsDialog({
                   ))}
                 </SelectContent>
               </Select>
-              <p className="text-xs text-muted-foreground">{t.models.modelTypeHint}</p>
+              <p className="text-xs text-muted-foreground">{t('models.modelTypeHint')}</p>
             </div>
 
             {/* Search input */}
             <input
               type="text"
               className="flex h-9 w-full rounded-md border border-input bg-background px-3 py-1 text-sm placeholder:text-muted-foreground"
-              placeholder={t.models.searchOrAddModel}
+              placeholder={t('models.searchOrAddModel')}
               value={searchQuery}
               onChange={(e) => setSearchQuery(e.target.value)}
             />
@@ -570,7 +570,7 @@ function DiscoverModelsDialog({
             {filteredModels.length > 0 && (
               <div className="flex items-center justify-between">
                 <Button variant="outline" size="sm" onClick={toggleAll}>
-                  {filteredModels.every(m => selectedModels.has(m.name)) ? t.common.remove : t.common.addSelected}
+                  {filteredModels.every(m => selectedModels.has(m.name)) ? t('common.remove') : t('common.addSelected')}
                   {' '}({selectedModels.size}/{filteredModels.length})
                 </Button>
               </div>
@@ -607,13 +607,13 @@ function DiscoverModelsDialog({
                   />
                   <Plus className="h-3.5 w-3.5 text-muted-foreground shrink-0" />
                   <span className="truncate">
-                    {t.models.addCustomModel.replace('{name}', searchQuery.trim())}
+                    {t('models.addCustomModel').replace('{name}', searchQuery.trim())}
                   </span>
                 </label>
               )}
 
               {filteredModels.length === 0 && !showCustomOption && (
-                <p className="text-center py-4 text-muted-foreground text-sm">{t.models.noModelsFound}</p>
+                <p className="text-center py-4 text-muted-foreground text-sm">{t('models.noModelsFound')}</p>
               )}
             </div>
           </div>
@@ -621,14 +621,14 @@ function DiscoverModelsDialog({
 
         <DialogFooter>
           <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t.common.cancel}
+            {t('common.cancel')}
           </Button>
           <Button
             onClick={handleRegister}
             disabled={totalSelected === 0 || registerModels.isPending}
           >
             {registerModels.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-            {t.common.add} ({totalSelected})
+            {t('common.add')} ({totalSelected})
           </Button>
         </DialogFooter>
       </DialogContent>
@@ -685,9 +685,9 @@ function DeleteCredentialDialog({
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent>
         <DialogHeader>
-          <DialogTitle>{t.apiKeys.deleteConfig}</DialogTitle>
+          <DialogTitle>{t('apiKeys.deleteConfig')}</DialogTitle>
           <DialogDescription>
-            {t.apiKeys.deleteConfigConfirm.replace('{name}', credential.name)}
+            {t('apiKeys.deleteConfigConfirm').replace('{name}', credential.name)}
           </DialogDescription>
         </DialogHeader>
 
@@ -717,7 +717,7 @@ function DeleteCredentialDialog({
 
         <DialogFooter className="flex-col sm:flex-row gap-2">
           <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t.common.cancel}
+            {t('common.cancel')}
           </Button>
           {credential.model_count > 0 && migrateToId && (
             <Button onClick={handleMigrate} disabled={deleteCredential.isPending}>
@@ -731,7 +731,7 @@ function DeleteCredentialDialog({
             disabled={deleteCredential.isPending}
           >
             {deleteCredential.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-            {credential.model_count > 0 ? 'Delete with Models' : t.common.delete}
+            {credential.model_count > 0 ? 'Delete with Models' : t('common.delete')}
           </Button>
         </DialogFooter>
       </DialogContent>
@@ -769,8 +769,8 @@ function CredentialItem({
   const testResult = testResults[credential.id]
 
   // Extract translations used in model badge loops to avoid excessive Proxy accesses
-  const testModelLabel = t.models.testModel
-  const deleteModelLabel = t.models.deleteModel
+  const testModelLabel = t('models.testModel')
+  const deleteModelLabel = t('models.deleteModel')
 
   // Check which models are defaults
   const defaultSlots: Record<string, string> = {}
@@ -824,7 +824,7 @@ function CredentialItem({
               variant="ghost" size="sm"
               onClick={() => testCredential(credential.id)}
               disabled={isTestPending || !!credential.decryption_error}
-              title={t.apiKeys.testConnection}
+              title={t('apiKeys.testConnection')}
             >
               {isTestPending ? <Loader2 className="h-4 w-4 animate-spin" /> : <Plug className="h-4 w-4" />}
               <span className="hidden sm:inline text-xs">Test</span>
@@ -833,19 +833,19 @@ function CredentialItem({
               variant="ghost" size="sm"
               onClick={() => setDiscoverOpen(true)}
               disabled={!!credential.decryption_error}
-              title={t.apiKeys.syncModels}
+              title={t('apiKeys.syncModels')}
             >
               <Bot className="h-4 w-4" />
               <span className="hidden sm:inline text-xs">Models</span>
             </Button>
-            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} disabled={!!credential.decryption_error} title={t.common.edit}>
+            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} disabled={!!credential.decryption_error} title={t('common.edit')}>
               <Edit className="h-4 w-4" />
             </Button>
             <Button
               variant="ghost" size="sm"
               onClick={() => setDeleteOpen(true)}
               className="text-destructive hover:text-destructive hover:bg-destructive/10"
-              title={t.common.delete}
+              title={t('common.delete')}
             >
               <Trash2 className="h-4 w-4" />
             </Button>
@@ -856,9 +856,9 @@ function CredentialItem({
         {credential.decryption_error && (
           <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
             <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
-            <AlertTitle className="text-amber-800 dark:text-amber-200">{t.apiKeys.decryptionError}</AlertTitle>
+            <AlertTitle className="text-amber-800 dark:text-amber-200">{t('apiKeys.decryptionError')}</AlertTitle>
             <AlertDescription className="text-amber-700 dark:text-amber-300 text-sm">
-              {t.apiKeys.decryptionErrorDescription}
+              {t('apiKeys.decryptionErrorDescription')}
             </AlertDescription>
           </Alert>
         )}
@@ -1013,12 +1013,12 @@ function ProviderSection({
             {hasCredentials ? (
               <Badge className="bg-emerald-100 text-emerald-700 hover:bg-emerald-100 dark:bg-emerald-900/30 dark:text-emerald-300">
                 <Check className="mr-1 h-3 w-3" />
-                {t.apiKeys.configured}
+                {t('apiKeys.configured')}
               </Badge>
             ) : (
               <Badge variant="outline" className="text-muted-foreground border-dashed">
                 <X className="mr-1 h-3 w-3" />
-                {t.apiKeys.notConfigured}
+                {t('apiKeys.notConfigured')}
               </Badge>
             )}
           </div>
@@ -1043,7 +1043,7 @@ function ProviderSection({
           disabled={!encryptionReady}
         >
           <Plus className="h-4 w-4" />
-          {t.apiKeys.addConfig}
+          {t('apiKeys.addConfig')}
         </Button>
       </CardContent>
 
@@ -1098,16 +1098,16 @@ function DefaultModelSelectors({
   }
 
   const primaryConfigs: DefaultConfig[] = [
-    { key: 'default_chat_model', label: t.models.chatModelLabel, description: t.models.chatModelDesc, modelType: 'language', required: true, id: `${generatedId}-chat` },
-    { key: 'default_embedding_model', label: t.models.embeddingModelLabel, description: t.models.embeddingModelDesc, modelType: 'embedding', required: true, id: `${generatedId}-embed` },
-    { key: 'default_text_to_speech_model', label: t.models.ttsModelLabel, description: t.models.ttsModelDesc, modelType: 'text_to_speech', id: `${generatedId}-tts` },
-    { key: 'default_speech_to_text_model', label: t.models.sttModelLabel, description: t.models.sttModelDesc, modelType: 'speech_to_text', id: `${generatedId}-stt` },
+    { key: 'default_chat_model', label: t('models.chatModelLabel'), description: t('models.chatModelDesc'), modelType: 'language', required: true, id: `${generatedId}-chat` },
+    { key: 'default_embedding_model', label: t('models.embeddingModelLabel'), description: t('models.embeddingModelDesc'), modelType: 'embedding', required: true, id: `${generatedId}-embed` },
+    { key: 'default_text_to_speech_model', label: t('models.ttsModelLabel'), description: t('models.ttsModelDesc'), modelType: 'text_to_speech', id: `${generatedId}-tts` },
+    { key: 'default_speech_to_text_model', label: t('models.sttModelLabel'), description: t('models.sttModelDesc'), modelType: 'speech_to_text', id: `${generatedId}-stt` },
   ]
 
   const advancedConfigs: DefaultConfig[] = [
-    { key: 'default_transformation_model', label: t.models.transformationModelLabel, description: t.models.transformationModelDesc, modelType: 'language', required: true, id: `${generatedId}-transform` },
-    { key: 'default_tools_model', label: t.models.toolsModelLabel, description: t.models.toolsModelDesc, modelType: 'language', id: `${generatedId}-tools` },
-    { key: 'large_context_model', label: t.models.largeContextModelLabel, description: t.models.largeContextModelDesc, modelType: 'language', id: `${generatedId}-large` },
+    { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', required: true, id: `${generatedId}-transform` },
+    { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', id: `${generatedId}-tools` },
+    { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', id: `${generatedId}-large` },
   ]
 
   const defaultConfigs = [...primaryConfigs, ...advancedConfigs]
@@ -1145,15 +1145,15 @@ function DefaultModelSelectors({
   return (
     <Card>
       <CardHeader>
-        <CardTitle>{t.models.defaultAssignments}</CardTitle>
-        <CardDescription>{t.models.defaultAssignmentsDesc}</CardDescription>
+        <CardTitle>{t('models.defaultAssignments')}</CardTitle>
+        <CardDescription>{t('models.defaultAssignmentsDesc')}</CardDescription>
       </CardHeader>
       <CardContent className="space-y-6">
         {missingRequired.length > 0 && (
           <Alert>
             <AlertCircle className="h-4 w-4" />
             <AlertDescription className="flex items-center justify-between gap-4">
-              <span>{t.models.missingRequiredModels.replace('{models}', missingRequired.join(', '))}</span>
+              <span>{t('models.missingRequiredModels').replace('{models}', missingRequired.join(', '))}</span>
               <Button
                 variant="outline" size="sm"
                 onClick={() => autoAssign.mutate()}
@@ -1161,7 +1161,7 @@ function DefaultModelSelectors({
                 className="shrink-0 gap-1.5"
               >
                 {autoAssign.isPending ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <Wand2 className="h-3.5 w-3.5" />}
-                {autoAssign.isPending ? t.models.autoAssigning : t.models.autoAssign}
+                {autoAssign.isPending ? t('models.autoAssigning') : t('models.autoAssign')}
               </Button>
             </AlertDescription>
           </Alert>
@@ -1191,8 +1191,8 @@ function DefaultModelSelectors({
                     >
                       <SelectValue placeholder={
                         config.required && !isValid && available.length > 0
-                          ? t.models.requiredModelPlaceholder
-                          : t.models.selectModelPlaceholder
+                          ? t('models.requiredModelPlaceholder')
+                          : t('models.selectModelPlaceholder')
                       } />
                     </SelectTrigger>
                     <SelectContent>
@@ -1219,7 +1219,7 @@ function DefaultModelSelectors({
 
         {/* Advanced models: Transformation, Tools, Large Context */}
         <div className="border-t pt-3">
-          <p className="text-xs text-muted-foreground mb-3">{t.navigation.advanced}</p>
+          <p className="text-xs text-muted-foreground mb-3">{t('navigation.advanced')}</p>
             <div className="grid gap-3 sm:grid-cols-3">
               {advancedConfigs.map(config => {
                 const available = getModelsForType(config.modelType)
@@ -1243,8 +1243,8 @@ function DefaultModelSelectors({
                         >
                           <SelectValue placeholder={
                             config.required && !isValid && available.length > 0
-                              ? t.models.requiredModelPlaceholder
-                              : t.models.selectModelPlaceholder
+                              ? t('models.requiredModelPlaceholder')
+                              : t('models.selectModelPlaceholder')
                           } />
                         </SelectTrigger>
                         <SelectContent>
@@ -1355,19 +1355,19 @@ export default function ApiKeysPage() {
           <div>
             <h1 className="text-2xl font-bold flex items-center gap-2">
               <Key className="h-6 w-6" />
-              {t.apiKeys.title}
+              {t('apiKeys.title')}
             </h1>
-            <p className="text-muted-foreground mt-1">{t.apiKeys.description}</p>
+            <p className="text-muted-foreground mt-1">{t('apiKeys.description')}</p>
           </div>
 
           {/* Encryption warning */}
           {!encryptionReady && (
             <Alert className="border-red-500/50 bg-red-50 dark:bg-red-950/20">
               <ShieldAlert className="h-4 w-4 text-red-600 dark:text-red-400" />
-              <AlertTitle className="text-red-800 dark:text-red-200">{t.apiKeys.encryptionRequired}</AlertTitle>
+              <AlertTitle className="text-red-800 dark:text-red-200">{t('apiKeys.encryptionRequired')}</AlertTitle>
               <AlertDescription className="text-red-700 dark:text-red-300">
                 <code className="text-xs bg-red-100 dark:bg-red-900/30 px-1 py-0.5 rounded">
-                  {t.apiKeys.encryptionRequiredDescription}
+                  {t('apiKeys.encryptionRequiredDescription')}
                 </code>
               </AlertDescription>
             </Alert>
@@ -1404,7 +1404,7 @@ export default function ApiKeysPage() {
               rel="noopener noreferrer"
               className="text-sm text-primary hover:underline"
             >
-              {t.apiKeys.learnMore}
+              {t('apiKeys.learnMore')}
             </a>
           </div>
         </div>
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index 2969672e..f74f25f0 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -85,9 +85,9 @@ export function SettingsForm() {
   if (error) {
     return (
       <Alert variant="destructive">
-        <AlertTitle>{t.settings.loadFailed}</AlertTitle>
+        <AlertTitle>{t('settings.loadFailed')}</AlertTitle>
         <AlertDescription>
-          {error instanceof Error ? error.message : t.common.error}
+          {error instanceof Error ? error.message : t('common.error')}
         </AlertDescription>
       </Alert>
     )
@@ -97,14 +97,14 @@ export function SettingsForm() {
     <form onSubmit={handleSubmit(onSubmit)} className="space-y-6">
       <Card>
         <CardHeader>
-          <CardTitle>{t.settings.contentProcessing}</CardTitle>
+          <CardTitle>{t('settings.contentProcessing')}</CardTitle>
           <CardDescription>
-            {t.settings.contentProcessingDesc}
+            {t('settings.contentProcessingDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent className="space-y-6">
           <div className="space-y-3">
-            <Label htmlFor="doc_engine">{t.settings.docEngine}</Label>
+            <Label htmlFor="doc_engine">{t('settings.docEngine')}</Label>
             <Controller
               name="default_content_processing_engine_doc"
               control={control}
@@ -117,12 +117,12 @@ export function SettingsForm() {
                     disabled={field.disabled || isLoading}
                   >
                       <SelectTrigger id="doc_engine" className="w-full">
-                        <SelectValue placeholder={t.settings.docEnginePlaceholder} />
+                        <SelectValue placeholder={t('settings.docEnginePlaceholder')} />
                       </SelectTrigger>
                     <SelectContent>
-                      <SelectItem value="auto">{t.settings.autoRecommended}</SelectItem>
-                      <SelectItem value="docling">{t.settings.docling}</SelectItem>
-                      <SelectItem value="simple">{t.settings.simple}</SelectItem>
+                      <SelectItem value="auto">{t('settings.autoRecommended')}</SelectItem>
+                      <SelectItem value="docling">{t('settings.docling')}</SelectItem>
+                      <SelectItem value="simple">{t('settings.simple')}</SelectItem>
                     </SelectContent>
                   </Select>
               )}
@@ -130,16 +130,16 @@ export function SettingsForm() {
             <Collapsible open={expandedSections.doc} onOpenChange={() => toggleSection('doc')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.doc ? 'rotate-180' : ''}`} />
-                {t.settings.helpMeChoose}
+                {t('settings.helpMeChoose')}
               </CollapsibleTrigger>
               <CollapsibleContent className="mt-2 text-sm text-muted-foreground space-y-2">
-                <p>{t.settings.docHelp}</p>
+                <p>{t('settings.docHelp')}</p>
               </CollapsibleContent>
             </Collapsible>
           </div>
           
           <div className="space-y-3">
-            <Label htmlFor="url_engine">{t.settings.urlEngine}</Label>
+            <Label htmlFor="url_engine">{t('settings.urlEngine')}</Label>
             <Controller
               name="default_content_processing_engine_url"
               control={control}
@@ -152,13 +152,13 @@ export function SettingsForm() {
                   disabled={field.disabled || isLoading}
                 >
                   <SelectTrigger id="url_engine" className="w-full">
-                    <SelectValue placeholder={t.settings.urlEnginePlaceholder} />
+                    <SelectValue placeholder={t('settings.urlEnginePlaceholder')} />
                   </SelectTrigger>
                   <SelectContent>
-                    <SelectItem value="auto">{t.settings.autoRecommended}</SelectItem>
-                    <SelectItem value="firecrawl">{t.settings.firecrawl}</SelectItem>
-                    <SelectItem value="jina">{t.settings.jina}</SelectItem>
-                    <SelectItem value="simple">{t.settings.simple}</SelectItem>
+                    <SelectItem value="auto">{t('settings.autoRecommended')}</SelectItem>
+                    <SelectItem value="firecrawl">{t('settings.firecrawl')}</SelectItem>
+                    <SelectItem value="jina">{t('settings.jina')}</SelectItem>
+                    <SelectItem value="simple">{t('settings.simple')}</SelectItem>
                   </SelectContent>
                 </Select>
               )}
@@ -166,10 +166,10 @@ export function SettingsForm() {
              <Collapsible open={expandedSections.url} onOpenChange={() => toggleSection('url')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.url ? 'rotate-180' : ''}`} />
-                {t.settings.helpMeChoose}
+                {t('settings.helpMeChoose')}
               </CollapsibleTrigger>
               <CollapsibleContent className="mt-2 text-sm text-muted-foreground space-y-2">
-                <p>{t.settings.urlHelp}</p>
+                <p>{t('settings.urlHelp')}</p>
               </CollapsibleContent>
             </Collapsible>
           </div>
@@ -178,14 +178,14 @@ export function SettingsForm() {
 
        <Card>
         <CardHeader>
-          <CardTitle>{t.settings.embeddingAndSearch}</CardTitle>
+          <CardTitle>{t('settings.embeddingAndSearch')}</CardTitle>
           <CardDescription>
-            {t.settings.embeddingAndSearchDesc}
+            {t('settings.embeddingAndSearchDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent className="space-y-6">
            <div className="space-y-3">
-            <Label htmlFor="embedding">{t.settings.defaultEmbeddingOption}</Label>
+            <Label htmlFor="embedding">{t('settings.defaultEmbeddingOption')}</Label>
             <Controller
               name="default_embedding_option"
               control={control}
@@ -198,12 +198,12 @@ export function SettingsForm() {
                   disabled={field.disabled || isLoading}
                 >
                   <SelectTrigger id="embedding" className="w-full">
-                    <SelectValue placeholder={t.settings.embeddingOptionPlaceholder} />
+                    <SelectValue placeholder={t('settings.embeddingOptionPlaceholder')} />
                   </SelectTrigger>
                   <SelectContent>
-                    <SelectItem value="ask">{t.settings.ask}</SelectItem>
-                    <SelectItem value="always">{t.settings.always}</SelectItem>
-                    <SelectItem value="never">{t.settings.never}</SelectItem>
+                    <SelectItem value="ask">{t('settings.ask')}</SelectItem>
+                    <SelectItem value="always">{t('settings.always')}</SelectItem>
+                    <SelectItem value="never">{t('settings.never')}</SelectItem>
                   </SelectContent>
                 </Select>
               )}
@@ -211,10 +211,10 @@ export function SettingsForm() {
              <Collapsible open={expandedSections.embedding} onOpenChange={() => toggleSection('embedding')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.embedding ? 'rotate-180' : ''}`} />
-                {t.settings.helpMeChoose}
+                {t('settings.helpMeChoose')}
               </CollapsibleTrigger>
               <CollapsibleContent className="mt-2 text-sm text-muted-foreground space-y-2">
-                <p>{t.settings.embeddingHelp}</p>
+                <p>{t('settings.embeddingHelp')}</p>
               </CollapsibleContent>
             </Collapsible>
           </div>
@@ -223,14 +223,14 @@ export function SettingsForm() {
 
        <Card>
         <CardHeader>
-          <CardTitle>{t.settings.fileManagement}</CardTitle>
+          <CardTitle>{t('settings.fileManagement')}</CardTitle>
           <CardDescription>
-            {t.settings.fileManagementDesc}
+            {t('settings.fileManagementDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent className="space-y-6">
            <div className="space-y-3">
-            <Label htmlFor="auto_delete">{t.settings.autoDeleteFiles}</Label>
+            <Label htmlFor="auto_delete">{t('settings.autoDeleteFiles')}</Label>
             <Controller
               name="auto_delete_files"
               control={control}
@@ -243,11 +243,11 @@ export function SettingsForm() {
                   disabled={field.disabled || isLoading}
                 >
                   <SelectTrigger id="auto_delete" className="w-full">
-                    <SelectValue placeholder={t.settings.autoDeletePlaceholder} />
+                    <SelectValue placeholder={t('settings.autoDeletePlaceholder')} />
                   </SelectTrigger>
                    <SelectContent>
-                    <SelectItem value="yes">{t.common.yes}</SelectItem>
-                    <SelectItem value="no">{t.common.no}</SelectItem>
+                    <SelectItem value="yes">{t('common.yes')}</SelectItem>
+                    <SelectItem value="no">{t('common.no')}</SelectItem>
                   </SelectContent>
                 </Select>
               )}
@@ -255,10 +255,10 @@ export function SettingsForm() {
              <Collapsible open={expandedSections.files} onOpenChange={() => toggleSection('files')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.files ? 'rotate-180' : ''}`} />
-                {t.settings.helpMeChoose}
+                {t('settings.helpMeChoose')}
               </CollapsibleTrigger>
               <CollapsibleContent className="mt-2 text-sm text-muted-foreground space-y-2">
-                <p>{t.settings.filesHelp}</p>
+                <p>{t('settings.filesHelp')}</p>
               </CollapsibleContent>
             </Collapsible>
           </div>
@@ -270,7 +270,7 @@ export function SettingsForm() {
           type="submit" 
           disabled={!isDirty || updateSettings.isPending}
         >
-          {updateSettings.isPending ? t.common.saving : t.navigation.settings}
+          {updateSettings.isPending ? t('common.saving') : t('navigation.settings')}
         </Button>
       </div>
     </form>
diff --git a/frontend/src/app/(dashboard)/settings/page.tsx b/frontend/src/app/(dashboard)/settings/page.tsx
index 5f795acb..cdf3341f 100644
--- a/frontend/src/app/(dashboard)/settings/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/page.tsx
@@ -17,7 +17,7 @@ export default function SettingsPage() {
         <div className="p-6">
           <div className="max-w-4xl">
             <div className="flex items-center gap-4 mb-6">
-              <h1 className="text-2xl font-bold">{t.navigation.settings}</h1>
+              <h1 className="text-2xl font-bold">{t('navigation.settings')}</h1>
               <Button variant="outline" size="sm" onClick={() => refetch()}>
                 <RefreshCw className="h-4 w-4" />
               </Button>
diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index 648c3a7f..8669fce6 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -75,14 +75,14 @@ export default function SourcesPage() {
       offsetRef.current += data.length
     } catch (err) {
       console.error('Failed to fetch sources:', err)
-      setError(t.sources.failedToLoad)
-      toast.error(t.sources.failedToLoad)
+      setError(t('sources.failedToLoad'))
+      toast.error(t('sources.failedToLoad'))
     } finally {
       setLoading(false)
       setLoadingMore(false)
       loadingMoreRef.current = false
     }
-  }, [sortBy, sortOrder, t.sources.failedToLoad])
+  }, [sortBy, sortOrder, t('sources.failedToLoad')])
 
   // Initial load and when sort changes
   useEffect(() => {
@@ -220,9 +220,9 @@ export default function SourcesPage() {
   }
 
   const getSourceType = (source: SourceListResponse) => {
-    if (source.asset?.url) return t.sources.type.link
-    if (source.asset?.file_path) return t.sources.type.file
-    return t.sources.type.text
+    if (source.asset?.url) return t('sources.type.link')
+    if (source.asset?.file_path) return t('sources.type.file')
+    return t('sources.type.text')
   }
 
   const handleRowClick = useCallback((index: number, sourceId: string) => {
@@ -240,7 +240,7 @@ export default function SourcesPage() {
 
     try {
       await sourcesApi.delete(deleteDialog.source.id)
-      toast.success(t.sources.deleteSuccess)
+      toast.success(t('sources.deleteSuccess'))
       // Remove the deleted source from the list
       setSources(prev => prev.filter(s => s.id !== deleteDialog.source?.id))
       setDeleteDialog({ open: false, source: null })
@@ -276,8 +276,8 @@ export default function SourcesPage() {
       <AppShell>
         <EmptyState
           icon={FileText}
-          title={t.sources.noSourcesYet}
-          description={t.sources.allSourcesDescShort}
+          title={t('sources.noSourcesYet')}
+          description={t('sources.allSourcesDescShort')}
         />
       </AppShell>
     )
@@ -287,9 +287,9 @@ export default function SourcesPage() {
     <AppShell>
       <div className="flex flex-col h-full w-full max-w-none px-6 py-6">
         <div className="mb-6 flex-shrink-0">
-          <h1 className="text-3xl font-bold">{t.sources.allSources}</h1>
+          <h1 className="text-3xl font-bold">{t('sources.allSources')}</h1>
           <p className="mt-2 text-muted-foreground">
-            {t.sources.allSourcesDesc}
+            {t('sources.allSourcesDesc')}
           </p>
         </div>
 
@@ -310,10 +310,10 @@ export default function SourcesPage() {
             <thead className="sticky top-0 bg-background z-10">
               <tr className="border-b bg-muted/50">
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground">
-                  {t.common.type}
+                  {t('common.type')}
                 </th>
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground">
-                  {t.common.title}
+                  {t('common.title')}
                 </th>
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground hidden sm:table-cell">
                   <Button
@@ -322,7 +322,7 @@ export default function SourcesPage() {
                     onClick={() => toggleSort('created')}
                     className="h-8 px-2 hover:bg-muted"
                   >
-                    {t.common.created_label}
+                    {t('common.created_label')}
                     <ArrowUpDown className={cn(
                       "ml-2 h-3 w-3",
                       sortBy === 'created' ? 'opacity-100' : 'opacity-30'
@@ -335,13 +335,13 @@ export default function SourcesPage() {
                   </Button>
                 </th>
                 <th className="h-12 px-4 text-center align-middle font-medium text-muted-foreground hidden md:table-cell">
-                  {t.sources.insights}
+                  {t('sources.insights')}
                 </th>
                 <th className="h-12 px-4 text-center align-middle font-medium text-muted-foreground hidden lg:table-cell">
-                  {t.sources.embedded}
+                  {t('sources.embedded')}
                 </th>
                 <th className="h-12 px-4 text-right align-middle font-medium text-muted-foreground">
-                  {t.common.actions}
+                  {t('common.actions')}
                 </th>
               </tr>
             </thead>
@@ -369,7 +369,7 @@ export default function SourcesPage() {
                   <td className="h-12 px-4">
                     <div className="flex flex-col overflow-hidden">
                       <span className="font-medium truncate">
-                        {source.title || t.sources.untitledSource}
+                        {source.title || t('sources.untitledSource')}
                       </span>
                       {source.asset?.url && (
                         <span className="text-xs text-muted-foreground truncate">
@@ -389,7 +389,7 @@ export default function SourcesPage() {
                   </td>
                   <td className="h-12 px-4 text-center hidden lg:table-cell">
                     <Badge variant={source.embedded ? "default" : "secondary"} className="text-xs">
-                      {source.embedded ? t.sources.yes : t.sources.no}
+                      {source.embedded ? t('sources.yes') : t('sources.no')}
                     </Badge>
                   </td>
                   <td className="h-12 px-4 text-right">
@@ -409,7 +409,7 @@ export default function SourcesPage() {
                   <td colSpan={6} className="h-16 text-center">
                     <div className="flex items-center justify-center">
                       <LoadingSpinner />
-                      <span className="ml-2 text-muted-foreground">{t.sources.loadingMore}</span>
+                      <span className="ml-2 text-muted-foreground">{t('sources.loadingMore')}</span>
                     </div>
                   </td>
                 </tr>
@@ -422,9 +422,9 @@ export default function SourcesPage() {
       <ConfirmDialog
         open={deleteDialog.open}
         onOpenChange={(open) => setDeleteDialog({ open, source: deleteDialog.source })}
-        title={t.sources.delete}
-        description={t.sources.deleteConfirmWithTitle.replace('{title}', deleteDialog.source?.title || t.sources.untitledSource)}
-        confirmText={t.common.delete}
+        title={t('sources.delete')}
+        description={t('sources.deleteConfirmWithTitle').replace('{title}', deleteDialog.source?.title || t('sources.untitledSource'))}
+        confirmText={t('common.delete')}
         confirmVariant="destructive"
         onConfirm={handleDeleteConfirm}
       />
diff --git a/frontend/src/app/(dashboard)/transformations/components/DefaultPromptEditor.tsx b/frontend/src/app/(dashboard)/transformations/components/DefaultPromptEditor.tsx
index 3f90414f..94397f70 100644
--- a/frontend/src/app/(dashboard)/transformations/components/DefaultPromptEditor.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/DefaultPromptEditor.tsx
@@ -37,9 +37,9 @@ export function DefaultPromptEditor() {
               <div className="flex items-center gap-2">
                 <Settings className="h-5 w-5" />
                 <div className="text-left">
-                  <CardTitle className="text-lg">{t.transformations.defaultPrompt}</CardTitle>
+                  <CardTitle className="text-lg">{t('transformations.defaultPrompt')}</CardTitle>
                   <CardDescription>
-                    {t.transformations.defaultPromptDesc}
+                    {t('transformations.defaultPromptDesc')}
                   </CardDescription>
                 </div>
               </div>
@@ -55,14 +55,14 @@ export function DefaultPromptEditor() {
           <CardContent className="space-y-4">
             <div className="space-y-2">
               <Label htmlFor={textareaId} className="sr-only">
-                {t.transformations.defaultPrompt}
+                {t('transformations.defaultPrompt')}
               </Label>
               <Textarea
                 id={textareaId}
                 name="default-prompt"
                 value={prompt}
                 onChange={(e) => setPrompt(e.target.value)}
-                placeholder={t.transformations.defaultPromptPlaceholder}
+                placeholder={t('transformations.defaultPromptPlaceholder')}
                 className="min-h-[200px] font-mono text-sm"
                 disabled={isLoading}
               />
@@ -72,7 +72,7 @@ export function DefaultPromptEditor() {
                 onClick={handleSave}
                 disabled={isLoading || updateDefaultPrompt.isPending}
               >
-                {t.common.save}
+                {t('common.save')}
               </Button>
             </div>
           </CardContent>
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
index 4270456a..c3395666 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
@@ -49,7 +49,7 @@ export function TransformationCard({ transformation, onPlayground, onEdit }: Tra
                     )}
                   </div>
                   {transformation.apply_default && (
-                    <Badge variant="secondary">{t.common.default}</Badge>
+                    <Badge variant="secondary">{t('common.default')}</Badge>
                   )}
                 </div>
               </CollapsibleTrigger>
@@ -58,13 +58,13 @@ export function TransformationCard({ transformation, onPlayground, onEdit }: Tra
                 {onPlayground && (
                   <Button variant="outline" size="sm" onClick={onPlayground}>
                     <Wand2 className="h-4 w-4 mr-2" />
-                    {t.transformations.playground}
+                    {t('transformations.playground')}
                   </Button>
                 )}
                 {onEdit && (
                   <Button variant="outline" size="sm" onClick={onEdit}>
                     <Edit className="h-4 w-4 mr-2" />
-                    {t.common.edit}
+                    {t('common.edit')}
                   </Button>
                 )}
                 <Button
@@ -82,19 +82,19 @@ export function TransformationCard({ transformation, onPlayground, onEdit }: Tra
           <CollapsibleContent>
             <CardContent className="space-y-4">
               <div>
-                <p className="text-sm text-muted-foreground">{t.common.title}</p>
-                <p className="text-sm font-medium">{transformation.title || t.sources.untitledSource}</p>
+                <p className="text-sm text-muted-foreground">{t('common.title')}</p>
+                <p className="text-sm font-medium">{transformation.title || t('sources.untitledSource')}</p>
               </div>
 
               {transformation.description && (
                 <div>
-                  <p className="text-sm text-muted-foreground">{t.common.description}</p>
+                  <p className="text-sm text-muted-foreground">{t('common.description')}</p>
                   <p className="text-sm leading-6">{transformation.description}</p>
                 </div>
               )}
 
               <div>
-                <p className="text-sm text-muted-foreground">{t.transformations.systemPrompt}</p>
+                <p className="text-sm text-muted-foreground">{t('transformations.systemPrompt')}</p>
                 <pre className="mt-2 whitespace-pre-wrap rounded-md bg-muted p-3 text-sm font-mono">
                   {transformation.prompt}
                 </pre>
@@ -107,9 +107,9 @@ export function TransformationCard({ transformation, onPlayground, onEdit }: Tra
       <ConfirmDialog
         open={showDeleteDialog}
         onOpenChange={setShowDeleteDialog}
-        title={t.sources.delete}
-        description={t.transformations.deleteConfirm}
-        confirmText={t.common.delete}
+        title={t('sources.delete')}
+        description={t('transformations.deleteConfirm')}
+        confirmText={t('common.delete')}
         confirmVariant="destructive"
         onConfirm={handleDelete}
         isLoading={deleteTransformation.isPending}
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
index 3f1b69d2..4143270a 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
@@ -118,22 +118,22 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
     <Dialog open={open} onOpenChange={handleClose}>
       <DialogContent className="sm:max-w-4xl w-full max-h-[90vh] overflow-hidden p-0">
         <DialogTitle className="sr-only">
-          {isEditing ? t.common.edit : t.transformations.createNew}
+          {isEditing ? t('common.edit') : t('transformations.createNew')}
         </DialogTitle>
         <DialogDescription className="sr-only">
-           {isEditing ? t.common.editTransformation : t.transformations.createNew}
+           {isEditing ? t('common.editTransformation') : t('transformations.createNew')}
         </DialogDescription>
         <form onSubmit={handleSubmit(onSubmit)} className="flex h-full flex-col">
           {isEditing && isLoading ? (
             <div className="flex-1 flex items-center justify-center py-10">
-              <span className="text-sm text-muted-foreground">{t.common.loading}</span>
+              <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
             </div>
           ) : (
             <>
               <div className="border-b px-6 py-4 space-y-4">
                 <div>
                   <Label htmlFor={nameId} className="text-sm font-medium">
-                    {t.transformations.name}
+                    {t('transformations.name')}
                   </Label>
                   <Controller
                     control={control}
@@ -142,7 +142,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                         <Input
                         id={nameId}
                         {...field}
-                        placeholder={t.transformations.namePlaceholder}
+                        placeholder={t('transformations.namePlaceholder')}
                         autoComplete="off"
                       />
                     )}
@@ -155,7 +155,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                 <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
                   <div>
                     <Label htmlFor={titleId} className="text-sm font-medium">
-                      {t.common.title}
+                      {t('common.title')}
                     </Label>
                     <Controller
                       control={control}
@@ -164,7 +164,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                         <Input
                            id={titleId}
                            {...field}
-                           placeholder={t.transformations.titlePlaceholder}
+                           placeholder={t('transformations.titlePlaceholder')}
                            autoComplete="off"
                          />
                       )}
@@ -183,14 +183,14 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                       )}
                     />
                      <Label htmlFor={defaultId} className="text-sm">
-                       {t.transformations.suggestDefault}
+                       {t('transformations.suggestDefault')}
                      </Label>
                   </div>
                 </div>
 
                 <div>
                    <Label htmlFor={descriptionId} className="text-sm font-medium">
-                     {t.notebooks.addDescription.replace('...', '')}
+                     {t('notebooks.addDescription').replace('...', '')}
                    </Label>
                   <Controller
                     control={control}
@@ -199,7 +199,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                       <Textarea
                          id={descriptionId}
                          {...field}
-                         placeholder={t.transformations.descriptionPlaceholder}
+                         placeholder={t('transformations.descriptionPlaceholder')}
                          rows={2}
                          autoComplete="off"
                       />
@@ -209,7 +209,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
               </div>
 
               <div className="flex-1 overflow-y-auto px-6 py-4">
-                <Label htmlFor={promptId} className="text-sm font-medium">{t.transformations.systemPrompt}</Label>
+                <Label htmlFor={promptId} className="text-sm font-medium">{t('transformations.systemPrompt')}</Label>
                 <Controller
                   control={control}
                   name="prompt"
@@ -219,7 +219,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                       value={field.value}
                       onChange={field.onChange}
                       height={420}
-                      placeholder={t.transformations.promptPlaceholder}
+                      placeholder={t('transformations.promptPlaceholder')}
                       className="rounded-md border"
                       textareaId={promptId}
                       name={field.name}
@@ -230,7 +230,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                   <p className="text-sm text-red-600 mt-1">{errors.prompt.message}</p>
                 )}
                  <p className="text-xs text-muted-foreground mt-3">
-                   {t.transformations.promptHint}
+                   {t('transformations.promptHint')}
                  </p>
               </div>
             </>
@@ -238,14 +238,14 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
 
           <div className="border-t px-6 py-4 flex justify-end gap-2">
              <Button type="button" variant="outline" onClick={handleClose}>
-               {t.common.cancel}
+               {t('common.cancel')}
              </Button>
               <Button type="submit" disabled={isSaving || (isEditing && isLoading)}>
                 {isSaving
-                  ? isEditing ? `${t.common.saving}...` : `${t.common.creating}...`
+                  ? isEditing ? `${t('common.saving')}...` : `${t('common.creating')}...`
                   : isEditing
-                    ? t.common.editTransformation
-                    : t.transformations.createNew}
+                    ? t('common.editTransformation')
+                    : t('transformations.createNew')}
               </Button>
           </div>
         </form>
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
index 5b747a43..f907ad2a 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
@@ -49,18 +49,18 @@ export function TransformationPlayground({ transformations, selectedTransformati
     <div className="space-y-6">
       <Card>
         <CardHeader>
-          <CardTitle>{t.transformations.playground}</CardTitle>
+          <CardTitle>{t('transformations.playground')}</CardTitle>
           <CardDescription>
-            {t.transformations.desc}
+            {t('transformations.desc')}
           </CardDescription>
         </CardHeader>
         <CardContent className="space-y-6">
           <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
             <div>
-              <Label htmlFor="transformation">{t.navigation.transformation}</Label>
+              <Label htmlFor="transformation">{t('navigation.transformation')}</Label>
               <Select name="transformation" value={selectedId} onValueChange={setSelectedId}>
                 <SelectTrigger id="transformation">
-                  <SelectValue placeholder={t.transformations.selectToStart} />
+                  <SelectValue placeholder={t('transformations.selectToStart')} />
                 </SelectTrigger>
                 <SelectContent>
                   {transformations?.map((transformation) => (
@@ -74,24 +74,24 @@ export function TransformationPlayground({ transformations, selectedTransformati
 
             <div>
               <ModelSelector
-                label={t.transformations.model}
+                label={t('transformations.model')}
                 name="model"
                 modelType="language"
                 value={modelId}
                 onChange={setModelId}
-                placeholder={t.transformations.selectModel}
+                placeholder={t('transformations.selectModel')}
               />
             </div>
           </div>
 
           <div>
-            <Label htmlFor="input">{t.transformations.inputLabel}</Label>
+            <Label htmlFor="input">{t('transformations.inputLabel')}</Label>
             <Textarea
               id="input"
               name="input"
               value={inputText}
               onChange={(e) => setInputText(e.target.value)}
-              placeholder={t.transformations.inputPlaceholder}
+              placeholder={t('transformations.inputPlaceholder')}
               rows={8}
               className="font-mono text-sm"
             />
@@ -106,12 +106,12 @@ export function TransformationPlayground({ transformations, selectedTransformati
               {executeTransformation.isPending ? (
                 <>
                   <Loader2 className="h-4 w-4 mr-2 animate-spin" />
-                  {t.transformations.running}
+                  {t('transformations.running')}
                 </>
               ) : (
                 <>
                   <Play className="h-4 w-4 mr-2" />
-                  {t.transformations.runTest}
+                  {t('transformations.runTest')}
                 </>
               )}
             </Button>
@@ -119,7 +119,7 @@ export function TransformationPlayground({ transformations, selectedTransformati
 
           {output && (
             <div className="space-y-2">
-              <span className="text-sm font-medium leading-none">{t.transformations.outputLabel}</span>
+              <span className="text-sm font-medium leading-none">{t('transformations.outputLabel')}</span>
               <Card>
                 <ScrollArea className="h-[400px]">
                   <CardContent className="pt-6">
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
index 6885f43a..d3b298d1 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
@@ -39,12 +39,12 @@ export function TransformationsList({ transformations, isLoading, onPlayground }
     return (
       <EmptyState
         icon={Wand2}
-        title={t.transformations.noTransformations}
-        description={t.transformations.createOne}
+        title={t('transformations.noTransformations')}
+        description={t('transformations.createOne')}
         action={
           <Button onClick={() => handleOpenEditor()}>
             <Plus className="h-4 w-4 mr-2" />
-            {t.transformations.createNew}
+            {t('transformations.createNew')}
           </Button>
         }
       />
@@ -55,10 +55,10 @@ export function TransformationsList({ transformations, isLoading, onPlayground }
     <>
       <div className="space-y-6">
         <div className="flex justify-between items-center">
-          <h2 className="text-lg font-semibold">{t.transformations.listTitle}</h2>
+          <h2 className="text-lg font-semibold">{t('transformations.listTitle')}</h2>
           <Button onClick={() => handleOpenEditor()}>
             <Plus className="h-4 w-4 mr-2" />
-            {t.transformations.createNew}
+            {t('transformations.createNew')}
           </Button>
         </div>
 
diff --git a/frontend/src/app/(dashboard)/transformations/page.tsx b/frontend/src/app/(dashboard)/transformations/page.tsx
index 20a94934..7314a171 100644
--- a/frontend/src/app/(dashboard)/transformations/page.tsx
+++ b/frontend/src/app/(dashboard)/transformations/page.tsx
@@ -29,7 +29,7 @@ export default function TransformationsPage() {
         <div className="p-6 space-y-6">
           <div className="flex items-center justify-between">
             <div className="flex items-center gap-4">
-              <h1 className="text-2xl font-bold">{t.transformations.title}</h1>
+              <h1 className="text-2xl font-bold">{t('transformations.title')}</h1>
               <Button variant="outline" size="sm" onClick={() => refetch()}>
                 <RefreshCw className="h-4 w-4" />
             </Button>
@@ -38,21 +38,21 @@ export default function TransformationsPage() {
 
         <div className="max-w-5xl">
           <p className="text-muted-foreground">
-            {t.transformations.desc}
+            {t('transformations.desc')}
           </p>
         </div>
 
         <Tabs value={activeTab} onValueChange={setActiveTab} className="space-y-6">
           <div className="space-y-2">
-            <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t.transformations.workspace}</p>
-            <TabsList aria-label={t.common.accessibility.transformationViews} className="w-full max-w-xl">
+            <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">{t('transformations.workspace')}</p>
+            <TabsList aria-label={t('common.accessibility.transformationViews')} className="w-full max-w-xl">
               <TabsTrigger value="transformations" className="flex items-center gap-2">
                 <Wand2 className="h-4 w-4" />
-                {t.transformations.title}
+                {t('transformations.title')}
               </TabsTrigger>
               <TabsTrigger value="playground" className="flex items-center gap-2">
                 <Play className="h-4 w-4" />
-                {t.transformations.playground}
+                {t('transformations.playground')}
               </TabsTrigger>
             </TabsList>
           </div>
diff --git a/frontend/src/components/auth/LoginForm.tsx b/frontend/src/components/auth/LoginForm.tsx
index 08597d98..468d289f 100644
--- a/frontend/src/components/auth/LoginForm.tsx
+++ b/frontend/src/components/auth/LoginForm.tsx
@@ -83,9 +83,9 @@ export function LoginForm() {
       <div className="min-h-screen flex items-center justify-center bg-background p-4">
         <Card className="w-full max-w-md">
           <CardHeader className="text-center">
-            <CardTitle>{t.common.connectionError}</CardTitle>
+            <CardTitle>{t('common.connectionError')}</CardTitle>
             <CardDescription>
-              {t.common.unableToConnect}
+              {t('common.unableToConnect')}
             </CardDescription>
           </CardHeader>
           <CardContent>
@@ -93,21 +93,21 @@ export function LoginForm() {
               <div className="flex items-start gap-2 text-red-600 text-sm">
                 <AlertCircle className="h-4 w-4 mt-0.5 flex-shrink-0" />
                 <div className="flex-1">
-                  {error || t.auth.connectErrorHint}
+                  {error || t('auth.connectErrorHint')}
                 </div>
               </div>
 
               {configInfo && (
                 <div className="space-y-2 text-xs text-muted-foreground border-t pt-3">
-                  <div className="font-medium">{t.common.diagnosticInfo}:</div>
+                  <div className="font-medium">{t('common.diagnosticInfo')}:</div>
                   <div className="space-y-1 font-mono">
-                    <div>{t.common.version}: {configInfo.version}</div>
-                    <div>{t.common.built}: {new Date(configInfo.buildTime).toLocaleString(language === 'zh-CN' ? 'zh-CN' : language === 'zh-TW' ? 'zh-TW' : 'en-US')}</div>
-                    <div className="break-all">{t.common.apiUrl}: {configInfo.apiUrl}</div>
-                    <div className="break-all">{t.common.frontendUrl}: {typeof window !== 'undefined' ? window.location.href : 'N/A'}</div>
+                    <div>{t('common.version')}: {configInfo.version}</div>
+                    <div>{t('common.built')}: {new Date(configInfo.buildTime).toLocaleString(language === 'zh-CN' ? 'zh-CN' : language === 'zh-TW' ? 'zh-TW' : 'en-US')}</div>
+                    <div className="break-all">{t('common.apiUrl')}: {configInfo.apiUrl}</div>
+                    <div className="break-all">{t('common.frontendUrl')}: {typeof window !== 'undefined' ? window.location.href : 'N/A'}</div>
                   </div>
                   <div className="text-xs pt-2">
-                    {t.common.checkConsoleLogs}
+                    {t('common.checkConsoleLogs')}
                   </div>
                 </div>
               )}
@@ -116,7 +116,7 @@ export function LoginForm() {
                 onClick={() => window.location.reload()}
                 className="w-full"
               >
-                {t.common.retryConnection}
+                {t('common.retryConnection')}
               </Button>
             </div>
           </CardContent>
@@ -141,9 +141,9 @@ export function LoginForm() {
     <div className="min-h-screen flex items-center justify-center bg-background p-4">
       <Card className="w-full max-w-md">
         <CardHeader className="text-center">
-          <CardTitle>{t.auth.loginTitle}</CardTitle>
+          <CardTitle>{t('auth.loginTitle')}</CardTitle>
           <CardDescription>
-            {t.auth.loginDesc}
+            {t('auth.loginDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent>
@@ -151,7 +151,7 @@ export function LoginForm() {
             <div>
               <Input
                 type="password"
-                placeholder={t.auth.passwordPlaceholder}
+                placeholder={t('auth.passwordPlaceholder')}
                 value={password}
                 onChange={(e) => setPassword(e.target.value)}
                 disabled={isLoading}
@@ -170,12 +170,12 @@ export function LoginForm() {
               className="w-full"
               disabled={isLoading || !password.trim()}
             >
-              {isLoading ? t.auth.signingIn : t.auth.signIn}
+              {isLoading ? t('auth.signingIn') : t('auth.signIn')}
             </Button>
 
             {configInfo && (
               <div className="text-xs text-center text-muted-foreground pt-2 border-t">
-                <div>{t.common.version} {configInfo.version}</div>
+                <div>{t('common.version')} {configInfo.version}</div>
                 <div className="font-mono text-[10px]">{configInfo.apiUrl}</div>
               </div>
             )}
diff --git a/frontend/src/components/common/CommandPalette.tsx b/frontend/src/components/common/CommandPalette.tsx
index 5bac0f5b..143843bf 100644
--- a/frontend/src/components/common/CommandPalette.tsx
+++ b/frontend/src/components/common/CommandPalette.tsx
@@ -30,29 +30,29 @@ import {
   Loader2,
 } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 
-const getNavigationItems = (t: TranslationKeys) => [
-  { name: t.navigation.sources, href: '/sources', icon: FileText, keywords: ['files', 'documents', 'upload'] },
-  { name: t.navigation.notebooks, href: '/notebooks', icon: Book, keywords: ['notes', 'research', 'projects'] },
-  { name: t.navigation.askAndSearch, href: '/search', icon: Search, keywords: ['find', 'query'] },
-  { name: t.navigation.podcasts, href: '/podcasts', icon: Mic, keywords: ['audio', 'episodes', 'generate'] },
-  { name: t.navigation.models, href: '/settings/api-keys', icon: Bot, keywords: ['ai', 'llm', 'providers', 'openai', 'anthropic'] },
-  { name: t.navigation.transformations, href: '/transformations', icon: Shuffle, keywords: ['prompts', 'templates', 'actions'] },
-  { name: t.navigation.settings, href: '/settings', icon: Settings, keywords: ['preferences', 'config', 'options'] },
-  { name: t.navigation.advanced, href: '/advanced', icon: Wrench, keywords: ['debug', 'system', 'tools'] },
+const getNavigationItems = (t: TFunction) => [
+  { name: t('navigation.sources'), href: '/sources', icon: FileText, keywords: ['files', 'documents', 'upload'] },
+  { name: t('navigation.notebooks'), href: '/notebooks', icon: Book, keywords: ['notes', 'research', 'projects'] },
+  { name: t('navigation.askAndSearch'), href: '/search', icon: Search, keywords: ['find', 'query'] },
+  { name: t('navigation.podcasts'), href: '/podcasts', icon: Mic, keywords: ['audio', 'episodes', 'generate'] },
+  { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot, keywords: ['ai', 'llm', 'providers', 'openai', 'anthropic'] },
+  { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle, keywords: ['prompts', 'templates', 'actions'] },
+  { name: t('navigation.settings'), href: '/settings', icon: Settings, keywords: ['preferences', 'config', 'options'] },
+  { name: t('navigation.advanced'), href: '/advanced', icon: Wrench, keywords: ['debug', 'system', 'tools'] },
 ]
 
-const getCreateItems = (t: TranslationKeys) => [
-  { name: t.common.newSource, action: 'source', icon: FileText },
-  { name: t.common.newNotebook, action: 'notebook', icon: Book },
-  { name: t.common.newPodcast, action: 'podcast', icon: Mic },
+const getCreateItems = (t: TFunction) => [
+  { name: t('common.newSource'), action: 'source', icon: FileText },
+  { name: t('common.newNotebook'), action: 'notebook', icon: Book },
+  { name: t('common.newPodcast'), action: 'podcast', icon: Mic },
 ]
 
-const getThemeItems = (t: TranslationKeys) => [
-  { name: t.common.light, value: 'light' as const, icon: Sun, keywords: ['bright', 'day'] },
-  { name: t.common.dark, value: 'dark' as const, icon: Moon, keywords: ['night'] },
-  { name: t.common.system, value: 'system' as const, icon: Monitor, keywords: ['auto', 'default'] },
+const getThemeItems = (t: TFunction) => [
+  { name: t('common.light'), value: 'light' as const, icon: Sun, keywords: ['bright', 'day'] },
+  { name: t('common.dark'), value: 'dark' as const, icon: Moon, keywords: ['night'] },
+  { name: t('common.system'), value: 'system' as const, icon: Monitor, keywords: ['auto', 'default'] },
 ]
 
 export function CommandPalette() {
@@ -164,30 +164,30 @@ export function CommandPalette() {
     <CommandDialog
       open={open}
       onOpenChange={setOpen}
-      title={t.common.quickActions}
-      description={t.common.quickActionsDesc}
+      title={t('common.quickActions')}
+      description={t('common.quickActionsDesc')}
       className="sm:max-w-lg"
     >
       <CommandInput
         id={commandInputId}
         name="command-search"
-        placeholder={t.searchPage.enterSearchPlaceholder}
+        placeholder={t('searchPage.enterSearchPlaceholder')}
         value={query}
         onValueChange={setQuery}
-        aria-label={t.common.search}
+        aria-label={t('common.search')}
         autoComplete="off"
       />
       <CommandList>
         {/* Search/Ask - show FIRST when there's a query with no command match */}
         {showSearchFirst && (
-          <CommandGroup heading={t.searchPage.searchAndAsk} forceMount>
+          <CommandGroup heading={t('searchPage.searchAndAsk')} forceMount>
             <CommandItem
               value={`__search__ ${query}`}
               onSelect={handleSearch}
               forceMount
             >
               <Search className="h-4 w-4" />
-              <span>{t.searchPage.searchResultsFor.replace('{query}', query)}</span>
+              <span>{t('searchPage.searchResultsFor').replace('{query}', query)}</span>
             </CommandItem>
             <CommandItem
               value={`__ask__ ${query}`}
@@ -195,13 +195,13 @@ export function CommandPalette() {
               forceMount
             >
               <MessageCircleQuestion className="h-4 w-4" />
-              <span>{t.searchPage.askAbout.replace('{query}', query)}</span>
+              <span>{t('searchPage.askAbout').replace('{query}', query)}</span>
             </CommandItem>
           </CommandGroup>
         )}
 
         {/* Navigation */}
-        <CommandGroup heading={t.navigation.nav}>
+        <CommandGroup heading={t('navigation.nav')}>
           {navigationItems.map((item) => (
             <CommandItem
               key={item.href}
@@ -215,11 +215,11 @@ export function CommandPalette() {
         </CommandGroup>
 
         {/* Notebooks */}
-        <CommandGroup heading={t.notebooks.title}>
+        <CommandGroup heading={t('notebooks.title')}>
           {notebooksLoading ? (
             <CommandItem disabled>
               <Loader2 className="h-4 w-4 animate-spin" />
-              <span>{t.common.loading}</span>
+              <span>{t('common.loading')}</span>
             </CommandItem>
           ) : notebooks && notebooks.length > 0 ? (
             notebooks.map((notebook) => (
@@ -236,7 +236,7 @@ export function CommandPalette() {
         </CommandGroup>
 
         {/* Create */}
-        <CommandGroup heading={t.navigation.create}>
+        <CommandGroup heading={t('navigation.create')}>
           {createItems.map((item) => (
             <CommandItem
               key={item.action}
@@ -250,7 +250,7 @@ export function CommandPalette() {
         </CommandGroup>
 
         {/* Theme */}
-        <CommandGroup heading={t.navigation.theme}>
+        <CommandGroup heading={t('navigation.theme')}>
           {themeItems.map((item) => (
             <CommandItem
               key={item.value}
@@ -267,14 +267,14 @@ export function CommandPalette() {
         {query.trim() && hasCommandMatch && (
           <>
             <CommandSeparator />
-            <CommandGroup heading={t.searchPage.orSearchKb} forceMount>
+            <CommandGroup heading={t('searchPage.orSearchKb')} forceMount>
               <CommandItem
                 value={`__search__ ${query}`}
                 onSelect={handleSearch}
                 forceMount
               >
                 <Search className="h-4 w-4" />
-                <span>{t.searchPage.searchResultsFor.replace('{query}', query)}</span>
+                <span>{t('searchPage.searchResultsFor').replace('{query}', query)}</span>
               </CommandItem>
               <CommandItem
                 value={`__ask__ ${query}`}
@@ -282,7 +282,7 @@ export function CommandPalette() {
                 forceMount
               >
                 <MessageCircleQuestion className="h-4 w-4" />
-                <span>{t.searchPage.askAbout.replace('{query}', query)}</span>
+                <span>{t('searchPage.askAbout').replace('{query}', query)}</span>
               </CommandItem>
             </CommandGroup>
           </>
diff --git a/frontend/src/components/common/ConfirmDialog.test.tsx b/frontend/src/components/common/ConfirmDialog.test.tsx
index a73d6dee..36607e12 100644
--- a/frontend/src/components/common/ConfirmDialog.test.tsx
+++ b/frontend/src/components/common/ConfirmDialog.test.tsx
@@ -2,7 +2,7 @@ import { describe, it, expect, vi } from 'vitest'
 import { render, screen, fireEvent } from '@testing-library/react'
 import { ConfirmDialog } from './ConfirmDialog'
 
-// useTranslation is mocked globally in setup.ts
+// useTranslation is mocked globally in setup.ts (t returns the key string)
 
 describe('ConfirmDialog', () => {
   const onConfirmMock = vi.fn()
@@ -18,20 +18,19 @@ describe('ConfirmDialog', () => {
 
   it('should render correct titles and descriptions', () => {
     render(<ConfirmDialog {...defaultProps} />)
-    
+
     expect(screen.getByText('Test Title')).toBeInTheDocument()
     expect(screen.getByText('Test Description')).toBeInTheDocument()
-    // Localized text from our setup.ts mock should be visible
-    expect(screen.getByText('Confirm')).toBeInTheDocument()
-    expect(screen.getByText('Cancel')).toBeInTheDocument()
+    expect(screen.getByText('common.confirm')).toBeInTheDocument()
+    expect(screen.getByText('common.cancel')).toBeInTheDocument()
   })
 
   it('should call onConfirm when confirm button is clicked', () => {
     render(<ConfirmDialog {...defaultProps} />)
-    
-    const confirmBtn = screen.getByText('Confirm')
+
+    const confirmBtn = screen.getByText('common.confirm')
     fireEvent.click(confirmBtn)
-    
+
     expect(onConfirmMock).toHaveBeenCalledTimes(1)
   })
 
@@ -42,10 +41,10 @@ describe('ConfirmDialog', () => {
 
   it('should show loading state and disable buttons', () => {
     render(<ConfirmDialog {...defaultProps} isLoading={true} />)
-    
-    const confirmBtn = screen.getByText('Confirm').closest('button')
-    const cancelBtn = screen.getByText('Cancel').closest('button')
-    
+
+    const confirmBtn = screen.getByText('common.confirm').closest('button')
+    const cancelBtn = screen.getByText('common.cancel').closest('button')
+
     expect(confirmBtn).toBeDisabled()
     expect(cancelBtn).toBeDisabled()
   })
diff --git a/frontend/src/components/common/ConfirmDialog.tsx b/frontend/src/components/common/ConfirmDialog.tsx
index fc5d706c..d4040769 100644
--- a/frontend/src/components/common/ConfirmDialog.tsx
+++ b/frontend/src/components/common/ConfirmDialog.tsx
@@ -35,7 +35,7 @@ export function ConfirmDialog({
   isLoading = false,
 }: ConfirmDialogProps) {
   const { t } = useTranslation()
-  const finalConfirmText = confirmText || t.common.confirm
+  const finalConfirmText = confirmText || t('common.confirm')
 
   return (
     <AlertDialog open={open} onOpenChange={onOpenChange}>
@@ -45,7 +45,7 @@ export function ConfirmDialog({
           <AlertDialogDescription>{description}</AlertDialogDescription>
         </AlertDialogHeader>
         <AlertDialogFooter>
-          <AlertDialogCancel disabled={isLoading}>{t.common.cancel}</AlertDialogCancel>
+          <AlertDialogCancel disabled={isLoading}>{t('common.cancel')}</AlertDialogCancel>
           <AlertDialogAction
             onClick={onConfirm}
             disabled={isLoading}
diff --git a/frontend/src/components/common/ContextToggle.tsx b/frontend/src/components/common/ContextToggle.tsx
index 3cb0fbdc..cb7ec8b1 100644
--- a/frontend/src/components/common/ContextToggle.tsx
+++ b/frontend/src/components/common/ContextToggle.tsx
@@ -25,19 +25,19 @@ export function ContextToggle({ mode, hasInsights = false, onChange, className }
   const MODE_CONFIG = {
     off: {
       icon: EyeOff,
-      label: t.common.contextModes.off,
+      label: t('common.contextModes.off'),
       color: 'text-muted-foreground',
       bgColor: 'hover:bg-muted'
     },
     insights: {
       icon: Lightbulb,
-      label: t.common.contextModes.insights,
+      label: t('common.contextModes.insights'),
       color: 'text-amber-600',
       bgColor: 'hover:bg-amber-50'
     },
     full: {
       icon: FileText,
-      label: t.common.contextModes.full,
+      label: t('common.contextModes.full'),
       color: 'text-primary',
       bgColor: 'hover:bg-primary/10'
     }
@@ -79,7 +79,7 @@ export function ContextToggle({ mode, hasInsights = false, onChange, className }
         <TooltipContent>
           <p className="text-xs">{config.label}</p>
           <p className="text-[10px] text-muted-foreground mt-1">
-            {t.common.contextModes.clickToCycle}
+            {t('common.contextModes.clickToCycle')}
           </p>
         </TooltipContent>
       </Tooltip>
diff --git a/frontend/src/components/common/InlineEdit.tsx b/frontend/src/components/common/InlineEdit.tsx
index d1677ce7..c3b45e41 100644
--- a/frontend/src/components/common/InlineEdit.tsx
+++ b/frontend/src/components/common/InlineEdit.tsx
@@ -32,7 +32,7 @@ export function InlineEdit({
   const generatedId = useId()
   const id = providedId || generatedId
   const { t } = useTranslation()
-  const defaultEmptyText = emptyText || t.common.clickToEdit
+  const defaultEmptyText = emptyText || t('common.clickToEdit')
   const [isEditing, setIsEditing] = useState(false)
   const [editValue, setEditValue] = useState(value)
   const [isSaving, setIsSaving] = useState(false)
diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index d789061c..492d523e 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -29,8 +29,8 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
           className={iconOnly ? "h-9 w-full sidebar-menu-item" : "w-full justify-start gap-2 sidebar-menu-item"}
         >
           <Languages className="h-[1.2rem] w-[1.2rem]" />
-          {!iconOnly && <span>{t.common.language}</span>}
-          <span className="sr-only">{t.navigation.language}</span>
+          {!iconOnly && <span>{t('common.language')}</span>}
+          <span className="sr-only">{t('navigation.language')}</span>
         </Button>
       </DropdownMenuTrigger>
       <DropdownMenuContent align="end">
@@ -38,49 +38,49 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
           onClick={() => setLanguage('en-US')}
           className={currentLang === 'en-US' || currentLang.startsWith('en') ? 'bg-accent' : ''}
         >
-          <span>{t.common.english}</span>
+          <span>{t('common.english')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem 
           onClick={() => setLanguage('zh-CN')}
           className={currentLang === 'zh-CN' || currentLang.startsWith('zh-Hans') || currentLang === 'zh' ? 'bg-accent' : ''}
         >
-          <span>{t.common.chinese}</span>
+          <span>{t('common.chinese')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('zh-TW')}
           className={currentLang === 'zh-TW' || currentLang.startsWith('zh-Hant') ? 'bg-accent' : ''}
         >
-          <span>{t.common.traditionalChinese}</span>
+          <span>{t('common.traditionalChinese')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('pt-BR')}
           className={currentLang === 'pt-BR' || currentLang.startsWith('pt') ? 'bg-accent' : ''}
         >
-          <span>{t.common.portuguese}</span>
+          <span>{t('common.portuguese')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('ja-JP')}
           className={currentLang === 'ja-JP' || currentLang.startsWith('ja') ? 'bg-accent' : ''}
         >
-          <span>{t.common.japanese}</span>
+          <span>{t('common.japanese')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('fr-FR')}
           className={currentLang === 'fr-FR' || currentLang.startsWith('fr') ? 'bg-accent' : ''}
         >
-          <span>{t.common.french}</span>
+          <span>{t('common.french')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('ru-RU')}
           className={currentLang === 'ru-RU' || currentLang.startsWith('ru') ? 'bg-accent' : ''}
         >
-          <span>{t.common.russian}</span>
+          <span>{t('common.russian')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem
           onClick={() => setLanguage('bn-IN')}
           className={currentLang === 'bn-IN' || currentLang.startsWith('bn') ? 'bg-accent' : ''}
         >
-          <span>{t.common.bengali}</span>
+          <span>{t('common.bengali')}</span>
         </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
diff --git a/frontend/src/components/common/ModelSelector.tsx b/frontend/src/components/common/ModelSelector.tsx
index c757b579..7f97b3b7 100644
--- a/frontend/src/components/common/ModelSelector.tsx
+++ b/frontend/src/components/common/ModelSelector.tsx
@@ -38,7 +38,7 @@ export function ModelSelector({
       {label && <Label htmlFor={selectId}>{label}</Label>}
       <Select name={name} value={value} onValueChange={onChange} disabled={disabled || isLoading}>
         <SelectTrigger id={selectId}>
-          <SelectValue placeholder={placeholder || t.settings.embeddingOptionPlaceholder} />
+          <SelectValue placeholder={placeholder || t('settings.embeddingOptionPlaceholder')} />
         </SelectTrigger>
         <SelectContent>
           {isLoading ? (
@@ -47,7 +47,7 @@ export function ModelSelector({
             </div>
           ) : filteredModels.length === 0 ? (
             <div className="text-sm text-muted-foreground py-2 px-2">
-              {t.common.noResults}
+              {t('common.noResults')}
             </div>
           ) : (
             filteredModels.map((model) => (
diff --git a/frontend/src/components/common/ThemeToggle.tsx b/frontend/src/components/common/ThemeToggle.tsx
index 78edc854..bd602409 100644
--- a/frontend/src/components/common/ThemeToggle.tsx
+++ b/frontend/src/components/common/ThemeToggle.tsx
@@ -31,8 +31,8 @@ export function ThemeToggle({ iconOnly = false }: ThemeToggleProps) {
             <Sun className="absolute inset-0 h-[1.2rem] w-[1.2rem] rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0" />
             <Moon className="absolute inset-0 h-[1.2rem] w-[1.2rem] rotate-90 scale-0 transition-all dark:rotate-0 dark:scale-100" />
           </div>
-          {!iconOnly && <span>{t.common.theme}</span>}
-          <span className="sr-only">{t.navigation.theme}</span>
+          {!iconOnly && <span>{t('common.theme')}</span>}
+          <span className="sr-only">{t('navigation.theme')}</span>
         </Button>
       </DropdownMenuTrigger>
       <DropdownMenuContent align="end">
@@ -41,21 +41,21 @@ export function ThemeToggle({ iconOnly = false }: ThemeToggleProps) {
           className={theme === 'light' ? 'bg-accent' : ''}
         >
           <Sun className="mr-2 h-4 w-4" />
-          <span>{t.common.light}</span>
+          <span>{t('common.light')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem 
           onClick={() => setTheme('dark')}
           className={theme === 'dark' ? 'bg-accent' : ''}
         >
           <Moon className="mr-2 h-4 w-4" />
-          <span>{t.common.dark}</span>
+          <span>{t('common.dark')}</span>
         </DropdownMenuItem>
         <DropdownMenuItem 
           onClick={() => setTheme('system')}
           className={theme === 'system' ? 'bg-accent' : ''}
         >
           <Monitor className="mr-2 h-4 w-4" />
-          <span>{t.common.system}</span>
+          <span>{t('common.system')}</span>
         </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
diff --git a/frontend/src/components/errors/ConnectionErrorOverlay.tsx b/frontend/src/components/errors/ConnectionErrorOverlay.tsx
index d4a31570..efdb3517 100644
--- a/frontend/src/components/errors/ConnectionErrorOverlay.tsx
+++ b/frontend/src/components/errors/ConnectionErrorOverlay.tsx
@@ -43,56 +43,56 @@ export function ConnectionErrorOverlay({
           <div>
             <h1 className="text-2xl font-bold" id="error-title">
               {isApiError
-                ? t.connectionErrors.apiTitle
-                : t.connectionErrors.dbTitle}
+                ? t('connectionErrors.apiTitle')
+                : t('connectionErrors.dbTitle')}
             </h1>
             <p className="text-muted-foreground">
               {isApiError
-                ? t.connectionErrors.apiDesc
-                : t.connectionErrors.dbDesc}
+                ? t('connectionErrors.apiDesc')
+                : t('connectionErrors.dbDesc')}
             </p>
           </div>
         </div>
 
         {/* Troubleshooting instructions */}
         <div className="space-y-4 border-l-4 border-primary pl-4">
-          <h2 className="font-semibold">{t.connectionErrors.troubleshooting}</h2>
+          <h2 className="font-semibold">{t('connectionErrors.troubleshooting')}</h2>
           <ul className="list-disc list-inside space-y-2 text-sm">
             {isApiError ? (
               <>
-                <li>{t.connectionErrors.apiUnreachable1}</li>
-                <li>{t.connectionErrors.apiUnreachable2}</li>
-                <li>{t.connectionErrors.apiUnreachable3}</li>
+                <li>{t('connectionErrors.apiUnreachable1')}</li>
+                <li>{t('connectionErrors.apiUnreachable2')}</li>
+                <li>{t('connectionErrors.apiUnreachable3')}</li>
               </>
             ) : (
               <>
-                <li>{t.connectionErrors.dbFailed1}</li>
-                <li>{t.connectionErrors.dbFailed2}</li>
-                <li>{t.connectionErrors.dbFailed3}</li>
+                <li>{t('connectionErrors.dbFailed1')}</li>
+                <li>{t('connectionErrors.dbFailed2')}</li>
+                <li>{t('connectionErrors.dbFailed3')}</li>
               </>
             )}
           </ul>
 
-          <h2 className="font-semibold mt-4">{t.connectionErrors.quickFixes}</h2>
+          <h2 className="font-semibold mt-4">{t('connectionErrors.quickFixes')}</h2>
           {isApiError ? (
             <div className="space-y-2 text-sm bg-muted p-4 rounded">
-              <p className="font-medium">{t.connectionErrors.setApiUrl}</p>
+              <p className="font-medium">{t('connectionErrors.setApiUrl')}</p>
               <code className="block bg-background p-2 rounded text-xs">
-                # {t.connectionErrors.dockerLabel}:
+                # {t('connectionErrors.dockerLabel')}:
                 <br />
                 docker run -e API_URL=http://your-host:5055 ...
                 <br />
                 <br />
-                # {t.connectionErrors.localDevLabel}:
+                # {t('connectionErrors.localDevLabel')}:
                 <br />
                 API_URL=http://localhost:5055
               </code>
             </div>
           ) : (
             <div className="space-y-2 text-sm bg-muted p-4 rounded">
-              <p className="font-medium">{t.connectionErrors.checkSurreal}</p>
+              <p className="font-medium">{t('connectionErrors.checkSurreal')}</p>
               <code className="block bg-background p-2 rounded text-xs">
-                # {t.connectionErrors.dockerLabel}:
+                # {t('connectionErrors.dockerLabel')}:
                 <br />
                 docker compose ps | grep surrealdb
                 <br />
@@ -104,14 +104,14 @@ export function ConnectionErrorOverlay({
 
         {/* Documentation link */}
         <div className="text-sm">
-          <p>{t.connectionErrors.seeDocumentation}</p>
+          <p>{t('connectionErrors.seeDocumentation')}</p>
           <a
             href="https://github.com/lfnovo/open-notebook"
             target="_blank"
             rel="noopener noreferrer"
             className="text-primary hover:underline inline-flex items-center gap-1"
           >
-            {t.connectionErrors.docLink}
+            {t('connectionErrors.docLink')}
             <ExternalLink className="w-4 h-4" />
           </a>
         </div>
@@ -121,7 +121,7 @@ export function ConnectionErrorOverlay({
           <Collapsible open={showDetails} onOpenChange={setShowDetails}>
             <CollapsibleTrigger asChild>
               <Button variant="ghost" size="sm" className="w-full justify-between">
-                <span>{t.connectionErrors.showTechnical}</span>
+                <span>{t('connectionErrors.showTechnical')}</span>
                 <ChevronDown
                   className={`w-4 h-4 transition-transform ${
                     showDetails ? 'rotate-180' : ''
@@ -133,23 +133,23 @@ export function ConnectionErrorOverlay({
               <div className="space-y-2 text-sm bg-muted p-4 rounded font-mono">
                 {error.details.attemptedUrl && (
                   <div>
-                    <strong>{t.connectionErrors.attemptedUrl}:</strong> {error.details.attemptedUrl}
+                    <strong>{t('connectionErrors.attemptedUrl')}:</strong> {error.details.attemptedUrl}
                   </div>
                 )}
                 {error.details.message && (
                   <div>
-                    <strong>{t.connectionErrors.message}:</strong> {error.details.message}
+                    <strong>{t('connectionErrors.message')}:</strong> {error.details.message}
                   </div>
                 )}
                 {error.details.technicalMessage && (
                   <div>
-                    <strong>{t.connectionErrors.technicalDetails}:</strong>{' '}
+                    <strong>{t('connectionErrors.technicalDetails')}:</strong>{' '}
                     {error.details.technicalMessage}
                   </div>
                 )}
                 {error.details.stack && (
                   <div>
-                    <strong>{t.connectionErrors.stackTrace}:</strong>
+                    <strong>{t('connectionErrors.stackTrace')}:</strong>
                     <pre className="mt-2 overflow-x-auto text-xs">
                       {error.details.stack}
                     </pre>
@@ -163,10 +163,10 @@ export function ConnectionErrorOverlay({
         {/* Retry button */}
         <div className="pt-4 border-t">
           <Button onClick={onRetry} className="w-full" size="lg">
-            {t.connectionErrors.retryLabel}
+            {t('connectionErrors.retryLabel')}
           </Button>
           <p className="text-xs text-muted-foreground text-center mt-2">
-            {t.connectionErrors.retryHint}
+            {t('connectionErrors.retryHint')}
           </p>
         </div>
       </Card>
diff --git a/frontend/src/components/layout/AppSidebar.test.tsx b/frontend/src/components/layout/AppSidebar.test.tsx
index 00fa9212..67621f87 100644
--- a/frontend/src/components/layout/AppSidebar.test.tsx
+++ b/frontend/src/components/layout/AppSidebar.test.tsx
@@ -11,18 +11,15 @@ vi.mock('@/components/ui/tooltip', () => ({
   TooltipTrigger: ({ children }: { children: React.ReactNode }) => <>{children}</>,
   TooltipContent: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
 }))
-// But setup.ts has some basic mocks, let's see.
 
 describe('AppSidebar', () => {
   it('renders correctly when expanded', () => {
     render(<AppSidebar />)
-    
-    // Check for logo or app name (using actual locale value)
-    expect(screen.getByText(/Open Notebook/i)).toBeDefined()
-    
-    // Check for navigation items (using actual locale values)
-    expect(screen.getByText(/Sources/i)).toBeDefined()
-    expect(screen.getByText(/Notebooks/i)).toBeDefined()
+
+    // With mocked t() returning keys, check for translation key strings
+    expect(screen.getByText('common.appName')).toBeDefined()
+    expect(screen.getByText('navigation.sources')).toBeDefined()
+    expect(screen.getByText('navigation.notebooks')).toBeDefined()
   })
 
   it('toggles collapse state when clicking handle', () => {
@@ -33,16 +30,9 @@ describe('AppSidebar', () => {
     } as any)
 
     render(<AppSidebar />)
-    
-    // The collapse button has ChevronLeft icon when expanded
-    // The collapse button has ChevronLeft icon when expanded
-    // const toggleButton = screen.getAllByRole('button')[0]
-    // Let's use more specific selector if possible, but AppSidebar has many buttons
-    // Actually, line 147 has the button
-    
-    // Use data-testid for reliable selection
+
     fireEvent.click(screen.getByTestId('sidebar-toggle'))
-    
+
     expect(toggleCollapse).toHaveBeenCalled()
   })
 
@@ -53,8 +43,8 @@ describe('AppSidebar', () => {
     } as any)
 
     render(<AppSidebar />)
-    
+
     // In collapsed mode, app name shouldn't be visible (as text)
-    expect(screen.queryByText(/Open Notebook/i)).toBeNull()
+    expect(screen.queryByText('common.appName')).toBeNull()
   })
 })
diff --git a/frontend/src/components/layout/AppSidebar.tsx b/frontend/src/components/layout/AppSidebar.tsx
index 08eb938c..cabb8893 100644
--- a/frontend/src/components/layout/AppSidebar.tsx
+++ b/frontend/src/components/layout/AppSidebar.tsx
@@ -24,7 +24,7 @@ import {
 } from '@/components/ui/dropdown-menu'
 import { ThemeToggle } from '@/components/common/ThemeToggle'
 import { LanguageToggle } from '@/components/common/LanguageToggle'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { Separator } from '@/components/ui/separator'
 import {
@@ -43,33 +43,33 @@ import {
   Command,
 } from 'lucide-react'
 
-const getNavigation = (t: TranslationKeys) => [
+const getNavigation = (t: TFunction) => [
   {
-    title: t.navigation.collect,
+    title: t('navigation.collect'),
     items: [
-      { name: t.navigation.sources, href: '/sources', icon: FileText },
+      { name: t('navigation.sources'), href: '/sources', icon: FileText },
     ],
   },
   {
-    title: t.navigation.process,
+    title: t('navigation.process'),
     items: [
-      { name: t.navigation.notebooks, href: '/notebooks', icon: Book },
-      { name: t.navigation.askAndSearch, href: '/search', icon: Search },
+      { name: t('navigation.notebooks'), href: '/notebooks', icon: Book },
+      { name: t('navigation.askAndSearch'), href: '/search', icon: Search },
     ],
   },
   {
-    title: t.navigation.create,
+    title: t('navigation.create'),
     items: [
-      { name: t.navigation.podcasts, href: '/podcasts', icon: Mic },
+      { name: t('navigation.podcasts'), href: '/podcasts', icon: Mic },
     ],
   },
   {
-    title: t.navigation.manage,
+    title: t('navigation.manage'),
     items: [
-      { name: t.navigation.models, href: '/settings/api-keys', icon: Bot },
-      { name: t.navigation.transformations, href: '/transformations', icon: Shuffle },
-      { name: t.navigation.settings, href: '/settings', icon: Settings },
-      { name: t.navigation.advanced, href: '/advanced', icon: Wrench },
+      { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot },
+      { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle },
+      { name: t('navigation.settings'), href: '/settings', icon: Settings },
+      { name: t('navigation.advanced'), href: '/advanced', icon: Wrench },
     ],
   },
 ] as const
@@ -139,9 +139,9 @@ export function AppSidebar() {
           ) : (
             <>
               <div className="flex items-center gap-2">
-                <Image src="/logo.svg" alt={t.common.appName} width={32} height={32} />
+                <Image src="/logo.svg" alt={t('common.appName')} width={32} height={32} />
                 <span className="text-base font-medium text-sidebar-foreground">
-                  {t.common.appName}
+                  {t('common.appName')}
                 </span>
               </div>
               <Button
@@ -179,13 +179,13 @@ export function AppSidebar() {
                         variant="default"
                         size="sm"
                         className="w-full justify-center px-2 bg-primary hover:bg-primary/90 text-primary-foreground border-0"
-                        aria-label={t.common.create}
+                        aria-label={t('common.create')}
                       >
                         <Plus className="h-4 w-4" />
                       </Button>
                     </DropdownMenuTrigger>
                   </TooltipTrigger>
-                   <TooltipContent side="right">{t.common.create}</TooltipContent>
+                   <TooltipContent side="right">{t('common.create')}</TooltipContent>
                 </Tooltip>
               ) : (
                 <DropdownMenuTrigger asChild>
@@ -196,7 +196,7 @@ export function AppSidebar() {
                     className="w-full justify-start bg-primary hover:bg-primary/90 text-primary-foreground border-0"
                    >
                     <Plus className="h-4 w-4 mr-2" />
-                    {t.common.create}
+                    {t('common.create')}
                   </Button>
                 </DropdownMenuTrigger>
               )}
@@ -214,7 +214,7 @@ export function AppSidebar() {
                   className="gap-2"
                 >
                    <FileText className="h-4 w-4" />
-                  {t.common.source}
+                  {t('common.source')}
                 </DropdownMenuItem>
                 <DropdownMenuItem
                   onSelect={(event) => {
@@ -224,7 +224,7 @@ export function AppSidebar() {
                   className="gap-2"
                 >
                    <Book className="h-4 w-4" />
-                  {t.common.notebook}
+                  {t('common.notebook')}
                 </DropdownMenuItem>
                 <DropdownMenuItem
                   onSelect={(event) => {
@@ -234,7 +234,7 @@ export function AppSidebar() {
                   className="gap-2"
                 >
                    <Mic className="h-4 w-4" />
-                  {t.common.podcast}
+                  {t('common.podcast')}
                 </DropdownMenuItem>
               </DropdownMenuContent>
             </DropdownMenu>
@@ -304,14 +304,14 @@ export function AppSidebar() {
               <div className="flex items-center justify-between">
                  <span className="flex items-center gap-1.5">
                   <Command className="h-3 w-3" />
-                  {t.common.quickActions}
+                  {t('common.quickActions')}
                 </span>
                 <kbd className="pointer-events-none inline-flex h-5 select-none items-center gap-1 rounded border bg-muted px-1.5 font-mono text-[10px] font-medium text-muted-foreground">
                   {isMac ? <span className="text-xs">⌘</span> : <span>Ctrl+</span>}K
                 </kbd>
               </div>
                <p className="mt-1 text-[10px] text-sidebar-foreground/40">
-                {t.common.quickActionsDesc}
+                {t('common.quickActionsDesc')}
               </p>
             </div>
           )}
@@ -330,7 +330,7 @@ export function AppSidebar() {
                       <ThemeToggle iconOnly />
                     </div>
                   </TooltipTrigger>
-                  <TooltipContent side="right">{t.common.theme}</TooltipContent>
+                  <TooltipContent side="right">{t('common.theme')}</TooltipContent>
                 </Tooltip>
                 <Tooltip>
                   <TooltipTrigger asChild>
@@ -338,7 +338,7 @@ export function AppSidebar() {
                       <LanguageToggle iconOnly />
                     </div>
                   </TooltipTrigger>
-                  <TooltipContent side="right">{t.common.language}</TooltipContent>
+                  <TooltipContent side="right">{t('common.language')}</TooltipContent>
                 </Tooltip>
               </>
             ) : (
@@ -356,22 +356,22 @@ export function AppSidebar() {
                   variant="outline"
                   className="w-full justify-center sidebar-menu-item"
                   onClick={logout}
-                  aria-label={t.common.signOut}
+                  aria-label={t('common.signOut')}
                 >
                   <LogOut className="h-4 w-4" />
                 </Button>
               </TooltipTrigger>
-               <TooltipContent side="right">{t.common.signOut}</TooltipContent>
+               <TooltipContent side="right">{t('common.signOut')}</TooltipContent>
             </Tooltip>
           ) : (
             <Button
               variant="outline"
               className="w-full justify-start gap-3 sidebar-menu-item"
               onClick={logout}
-              aria-label={t.common.signOut}
+              aria-label={t('common.signOut')}
              >
               <LogOut className="h-4 w-4" />
-              {t.common.signOut}
+              {t('common.signOut')}
             </Button>
           )}
         </div>
diff --git a/frontend/src/components/layout/SetupBanner.tsx b/frontend/src/components/layout/SetupBanner.tsx
index 237ab98d..a0c041c1 100644
--- a/frontend/src/components/layout/SetupBanner.tsx
+++ b/frontend/src/components/layout/SetupBanner.tsx
@@ -36,17 +36,17 @@ export function SetupBanner() {
         <Alert className="border-red-500/50 bg-red-50 dark:bg-red-950/20">
           <ShieldAlert className="h-4 w-4 text-red-600 dark:text-red-400" />
           <AlertTitle className="text-red-800 dark:text-red-200">
-            {t.setupBanner.encryptionRequired}
+            {t('setupBanner.encryptionRequired')}
           </AlertTitle>
           <AlertDescription className="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between text-red-700 dark:text-red-300">
-            <span>{t.setupBanner.encryptionRequiredDescription}</span>
+            <span>{t('setupBanner.encryptionRequiredDescription')}</span>
             <a
               href="https://github.com/lfnovo/open-notebook/blob/main/docs/3-USER-GUIDE/api-configuration.md#encryption-setup"
               target="_blank"
               rel="noopener noreferrer"
               className="inline-flex items-center shrink-0 text-sm font-medium underline underline-offset-2 hover:text-red-900 dark:hover:text-red-100"
             >
-              {t.setupBanner.viewDocs}
+              {t('setupBanner.viewDocs')}
               <ExternalLink className="ml-1 h-3 w-3" />
             </a>
           </AlertDescription>
@@ -60,11 +60,11 @@ export function SetupBanner() {
       <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
         <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
         <AlertTitle className="text-amber-800 dark:text-amber-200">
-          {t.setupBanner.migrationAvailable}
+          {t('setupBanner.migrationAvailable')}
         </AlertTitle>
         <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
           <span className="text-amber-700 dark:text-amber-300">
-            {t.setupBanner.migrationDescription.replace('{count}', providersToMigrate.length.toString())}
+            {t('setupBanner.migrationDescription').replace('{count}', providersToMigrate.length.toString())}
           </span>
           <Button
             variant="outline"
@@ -73,7 +73,7 @@ export function SetupBanner() {
             className="shrink-0 border-amber-500 text-amber-700 hover:bg-amber-100 dark:border-amber-400 dark:text-amber-300 dark:hover:bg-amber-900/30"
           >
             <Link href="/settings/api-keys">
-              {t.setupBanner.goToSettings}
+              {t('setupBanner.goToSettings')}
               <ArrowRight className="ml-2 h-4 w-4" />
             </Link>
           </Button>
diff --git a/frontend/src/components/notebooks/CreateNotebookDialog.tsx b/frontend/src/components/notebooks/CreateNotebookDialog.tsx
index ced84c42..8610ef29 100644
--- a/frontend/src/components/notebooks/CreateNotebookDialog.tsx
+++ b/frontend/src/components/notebooks/CreateNotebookDialog.tsx
@@ -67,19 +67,19 @@ export function CreateNotebookDialog({ open, onOpenChange }: CreateNotebookDialo
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent className="sm:max-w-[480px]">
         <DialogHeader>
-          <DialogTitle>{t.notebooks.createNew}</DialogTitle>
+          <DialogTitle>{t('notebooks.createNew')}</DialogTitle>
           <DialogDescription>
-            {t.notebooks.createNewDesc}
+            {t('notebooks.createNewDesc')}
           </DialogDescription>
         </DialogHeader>
 
         <form onSubmit={handleSubmit(onSubmit)} className="space-y-4">
           <div className="space-y-2">
-            <Label htmlFor="notebook-name">{t.common.name} *</Label>
+            <Label htmlFor="notebook-name">{t('common.name')} *</Label>
             <Input
               id="notebook-name"
               {...register('name')}
-              placeholder={t.notebooks.namePlaceholder}
+              placeholder={t('notebooks.namePlaceholder')}
               autoComplete="off"
             />
             {errors.name && (
@@ -88,21 +88,21 @@ export function CreateNotebookDialog({ open, onOpenChange }: CreateNotebookDialo
           </div>
 
           <div className="space-y-2">
-            <Label htmlFor="notebook-description">{t.common.description}</Label>
+            <Label htmlFor="notebook-description">{t('common.description')}</Label>
             <Textarea
               id="notebook-description"
               {...register('description')}
-              placeholder={t.notebooks.descPlaceholder}
+              placeholder={t('notebooks.descPlaceholder')}
               rows={4}
             />
           </div>
 
           <DialogFooter className="gap-2 sm:gap-0">
             <Button type="button" variant="outline" onClick={closeDialog}>
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button type="submit" disabled={!isValid || createNotebook.isPending}>
-              {createNotebook.isPending ? t.common.creating : t.notebooks.createNew}
+              {createNotebook.isPending ? t('common.creating') : t('notebooks.createNew')}
             </Button>
           </DialogFooter>
         </form>
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index 2caea502..38f20b1b 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -33,7 +33,7 @@ import {
 import { ScrollArea } from '@/components/ui/scroll-area'
 import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/tabs'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 
 interface EpisodeCardProps {
   episode: PodcastEpisode
@@ -43,40 +43,40 @@ interface EpisodeCardProps {
   retrying?: boolean
 }
 
-const getSTATUS_META = (t: TranslationKeys): Record<
+const getSTATUS_META = (t: TFunction): Record<
   EpisodeStatus | 'unknown',
   { label: string; className: string }
 > => ({
   running: {
-    label: t.podcasts.processingLabel,
+    label: t('podcasts.processingLabel'),
     className: 'bg-amber-100 text-amber-800 border-amber-200',
   },
   processing: {
-    label: t.podcasts.processingLabel,
+    label: t('podcasts.processingLabel'),
     className: 'bg-amber-100 text-amber-800 border-amber-200',
   },
   completed: {
-    label: t.podcasts.completedLabel,
+    label: t('podcasts.completedLabel'),
     className: 'bg-emerald-100 text-emerald-800 border-emerald-200',
   },
   failed: {
-    label: t.podcasts.failedLabel,
+    label: t('podcasts.failedLabel'),
     className: 'bg-red-100 text-red-800 border-red-200',
   },
   error: {
-    label: t.podcasts.failedLabel,
+    label: t('podcasts.failedLabel'),
     className: 'bg-red-100 text-red-800 border-red-200',
   },
   pending: {
-    label: t.podcasts.pendingLabel,
+    label: t('podcasts.pendingLabel'),
     className: 'bg-sky-100 text-sky-800 border-sky-200',
   },
   submitted: {
-    label: t.podcasts.pendingLabel,
+    label: t('podcasts.pendingLabel'),
     className: 'bg-sky-100 text-sky-800 border-sky-200',
   },
   unknown: {
-    label: t.common.unknown,
+    label: t('common.unknown'),
     className: 'bg-muted text-muted-foreground border-transparent',
   },
 })
@@ -190,7 +190,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
         setAudioSrc(revokeUrl)
       } catch (error) {
         console.error('Unable to load podcast audio', error)
-        setAudioError(t.podcasts.audioUnavailable)
+        setAudioError(t('podcasts.audioUnavailable'))
         setAudioSrc(undefined)
       }
     }
@@ -212,7 +212,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
     : null
 
   const createdLabel = distance
-    ? t.podcasts.created.replace('{time}', distance)
+    ? t('podcasts.created').replace('{time}', distance)
     : null
 
   const handleDelete = () => {
@@ -239,7 +239,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
               <StatusBadge status={episode.job_status} />
             </div>
             <p className="text-xs text-muted-foreground">
-              {t.podcasts.profile}: {episode.episode_profile?.name || t.common.unknown}
+              {t('podcasts.profile')}: {episode.episode_profile?.name || t('common.unknown')}
               {createdLabel ? ` • ${createdLabel}` : ''}
             </p>
           </div>
@@ -247,14 +247,14 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
             <Dialog open={detailsOpen} onOpenChange={setDetailsOpen}>
               <DialogTrigger asChild>
                 <Button variant="outline" size="sm">
-                  <InfoIcon className="mr-2 h-4 w-4" /> {t.podcasts.details}
+                  <InfoIcon className="mr-2 h-4 w-4" /> {t('podcasts.details')}
                 </Button>
               </DialogTrigger>
               <DialogContent className="w-[min(90vw,720px)] max-h-[85vh] overflow-hidden">
                 <DialogHeader>
                   <DialogTitle>{episode.name}</DialogTitle>
                   <DialogDescription>
-                    {episode.episode_profile?.name || t.common.unknown}
+                    {episode.episode_profile?.name || t('common.unknown')}
                     {createdLabel ? ` • ${createdLabel}` : ''}
                   </DialogDescription>
                 </DialogHeader>
@@ -267,19 +267,19 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
 
                   <Tabs defaultValue="summary" className="h-[60vh] flex flex-col">
                     <TabsList className="grid w-full grid-cols-3">
-                      <TabsTrigger value="summary">{t.podcasts.summaryTab}</TabsTrigger>
-                      <TabsTrigger value="outline">{t.podcasts.outlineTab}</TabsTrigger>
-                      <TabsTrigger value="transcript">{t.podcasts.transcriptTab}</TabsTrigger>
+                      <TabsTrigger value="summary">{t('podcasts.summaryTab')}</TabsTrigger>
+                      <TabsTrigger value="outline">{t('podcasts.outlineTab')}</TabsTrigger>
+                      <TabsTrigger value="transcript">{t('podcasts.transcriptTab')}</TabsTrigger>
                     </TabsList>
 
                     <TabsContent value="summary" className="flex-1 overflow-hidden">
                       <ScrollArea className="h-full pr-4">
                         <div className="space-y-6">
                           <section className="space-y-2">
-                            <h4 className="text-sm font-semibold text-foreground">{t.podcasts.episodeProfile}</h4>
+                            <h4 className="text-sm font-semibold text-foreground">{t('podcasts.episodeProfile')}</h4>
                             <div className="grid gap-2 text-sm md:grid-cols-2">
                               <div>
-                                <p className="text-muted-foreground">{t.podcasts.outlineModel}</p>
+                                <p className="text-muted-foreground">{t('podcasts.outlineModel')}</p>
                                 <p>
                                   {episode.episode_profile?.outline_provider ?? '—'} /
                                   {' '}
@@ -287,7 +287,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                                 </p>
                               </div>
                               <div>
-                                <p className="text-muted-foreground">{t.podcasts.transcriptModel}</p>
+                                <p className="text-muted-foreground">{t('podcasts.transcriptModel')}</p>
                                 <p>
                                   {episode.episode_profile?.transcript_provider ?? '—'} /
                                   {' '}
@@ -295,7 +295,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                                 </p>
                               </div>
                               <div>
-                                <p className="text-muted-foreground">{t.podcasts.segments}</p>
+                                <p className="text-muted-foreground">{t('podcasts.segments')}</p>
                                 <p>{episode.episode_profile?.num_segments ?? '—'}</p>
                               </div>
                             </div>
@@ -307,7 +307,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                           </section>
 
                           <section className="space-y-2">
-                            <h4 className="text-sm font-semibold text-foreground">{t.podcasts.speakerProfile}</h4>
+                            <h4 className="text-sm font-semibold text-foreground">{t('podcasts.speakerProfile')}</h4>
                             <p className="text-xs text-muted-foreground">
                               {episode.speaker_profile?.tts_provider ?? '—'} /{' '}
                               {episode.speaker_profile?.tts_model ?? '—'}
@@ -318,12 +318,12 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                                 className="rounded-md border bg-muted/20 p-3 text-xs"
                               >
                                 <p className="font-semibold text-foreground">{speaker.name}</p>
-                                <p className="text-muted-foreground">{t.podcasts.voiceId}: {speaker.voice_id}</p>
+                                <p className="text-muted-foreground">{t('podcasts.voiceId')}: {speaker.voice_id}</p>
                                 <p className="mt-2 whitespace-pre-wrap text-muted-foreground">
-                                  <span className="font-semibold">{t.podcasts.backstory}:</span> {speaker.backstory}
+                                  <span className="font-semibold">{t('podcasts.backstory')}:</span> {speaker.backstory}
                                 </p>
                                 <p className="mt-2 whitespace-pre-wrap text-muted-foreground">
-                                  <span className="font-semibold">{t.podcasts.personality}:</span> {speaker.personality}
+                                  <span className="font-semibold">{t('podcasts.personality')}:</span> {speaker.personality}
                                 </p>
                               </div>
                             ))}
@@ -331,7 +331,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
 
                           {episode.briefing ? (
                             <section className="space-y-2">
-                              <h4 className="text-sm font-semibold text-foreground">{t.podcasts.briefing}</h4>
+                              <h4 className="text-sm font-semibold text-foreground">{t('podcasts.briefing')}</h4>
                               <div className="rounded border bg-muted/30 p-3 text-xs whitespace-pre-wrap">
                                 {episode.briefing}
                               </div>
@@ -348,17 +348,17 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                             {outlineSegments.map((segment, index) => (
                               <div key={index} className="rounded border bg-muted/20 p-3 text-xs space-y-1">
                                 <div className="flex items-center justify-between gap-2">
-                                  <p className="font-semibold text-foreground">{segment.name ?? `${t.podcasts.segment} ${index + 1}`}</p>
+                                  <p className="font-semibold text-foreground">{segment.name ?? `${t('podcasts.segment')} ${index + 1}`}</p>
                                   {segment.size ? (
                                     <Badge variant="outline" className="text-[10px] uppercase tracking-wide">{segment.size}</Badge>
                                   ) : null}
                                 </div>
-                                <p className="text-muted-foreground whitespace-pre-wrap">{segment.description ?? t.podcasts.noDescription}</p>
+                                <p className="text-muted-foreground whitespace-pre-wrap">{segment.description ?? t('podcasts.noDescription')}</p>
                               </div>
                             ))}
                           </div>
                         ) : (
-                          <p className="text-xs text-muted-foreground">{t.podcasts.noOutline}</p>
+                          <p className="text-xs text-muted-foreground">{t('podcasts.noOutline')}</p>
                         )}
                       </ScrollArea>
                     </TabsContent>
@@ -368,12 +368,12 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                         {transcriptEntries.length > 0 ? (
                           transcriptEntries.map((entry, index) => (
                             <div key={index} className="rounded border bg-muted/20 p-3 text-xs space-y-1">
-                              <p className="font-semibold text-foreground">{entry.speaker ?? t.podcasts.speaker}</p>
+                              <p className="font-semibold text-foreground">{entry.speaker ?? t('podcasts.speaker')}</p>
                               <p className="text-muted-foreground whitespace-pre-wrap">{entry.dialogue ?? ''}</p>
                             </div>
                           ))
                         ) : (
-                          <p className="text-xs text-muted-foreground">{t.podcasts.noTranscript}</p>
+                          <p className="text-xs text-muted-foreground">{t('podcasts.noTranscript')}</p>
                         )}
                       </ScrollArea>
                     </TabsContent>
@@ -389,27 +389,27 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                 disabled={retrying}
               >
                 <RefreshCcw className={cn('mr-2 h-4 w-4', retrying && 'animate-spin')} />
-                {retrying ? t.podcasts.retrying : t.podcasts.retry}
+                {retrying ? t('podcasts.retrying') : t('podcasts.retry')}
               </Button>
             ) : null}
             <AlertDialog>
               <AlertDialogTrigger asChild>
                 <Button variant="ghost" size="sm" className="text-destructive">
                   <Trash2 className="mr-2 h-4 w-4" />
-                  {t.podcasts.delete}
+                  {t('podcasts.delete')}
                 </Button>
               </AlertDialogTrigger>
               <AlertDialogContent>
                 <AlertDialogHeader>
-                  <AlertDialogTitle>{t.podcasts.deleteEpisodeTitle}</AlertDialogTitle>
+                  <AlertDialogTitle>{t('podcasts.deleteEpisodeTitle')}</AlertDialogTitle>
                   <AlertDialogDescription>
-                    {t.podcasts.deleteEpisodeDesc.replace('{name}', episode.name)}
+                    {t('podcasts.deleteEpisodeDesc').replace('{name}', episode.name)}
                   </AlertDialogDescription>
                 </AlertDialogHeader>
                 <AlertDialogFooter>
-                  <AlertDialogCancel>{t.common.cancel}</AlertDialogCancel>
+                  <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
                   <AlertDialogAction onClick={handleDelete} disabled={deleting}>
-                    {deleting ? t.podcasts.deleting : t.podcasts.delete}
+                    {deleting ? t('podcasts.deleting') : t('podcasts.delete')}
                   </AlertDialogAction>
                 </AlertDialogFooter>
               </AlertDialogContent>
@@ -425,7 +425,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
 
         {isFailed && episode.error_message ? (
           <div className="rounded-md border border-red-200 bg-red-50 p-3 dark:border-red-900 dark:bg-red-950/30">
-            <p className="text-xs font-medium text-red-800 dark:text-red-300">{t.podcasts.errorDetails}</p>
+            <p className="text-xs font-medium text-red-800 dark:text-red-300">{t('podcasts.errorDetails')}</p>
             <p className="mt-1 text-xs whitespace-pre-wrap text-red-700 dark:text-red-400">{episode.error_message}</p>
           </div>
         ) : null}
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 44064a51..f19efe99 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -83,25 +83,25 @@ export function EpisodeProfilesPanel({
     <div className="space-y-6">
       <div className="flex items-center justify-between">
         <div>
-          <h2 className="text-lg font-semibold">{t.podcasts.episodeProfilesTitle}</h2>
+          <h2 className="text-lg font-semibold">{t('podcasts.episodeProfilesTitle')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t.podcasts.episodeProfilesDesc}
+            {t('podcasts.episodeProfilesDesc')}
           </p>
         </div>
         <Button onClick={() => setCreateOpen(true)} disabled={disableCreate}>
-          {t.podcasts.createProfile}
+          {t('podcasts.createProfile')}
         </Button>
       </div>
 
       {disableCreate ? (
         <p className="rounded-lg border border-dashed bg-amber-50 p-4 text-sm text-amber-900">
-          {t.podcasts.createSpeakerFirst}
+          {t('podcasts.createSpeakerFirst')}
         </p>
       ) : null}
 
       {sortedProfiles.length === 0 ? (
         <div className="rounded-lg border border-dashed bg-muted/30 p-10 text-center text-sm text-muted-foreground">
-          {t.podcasts.noEpisodeProfiles}
+          {t('podcasts.noEpisodeProfiles')}
         </div>
       ) : (
         <div className="space-y-4">
@@ -123,12 +123,12 @@ export function EpisodeProfilesPanel({
                       {unconfigured ? (
                         <Badge variant="outline" className="text-amber-600 border-amber-300 text-xs">
                           <AlertTriangle className="h-3 w-3 mr-1" />
-                          {t.podcasts.setupRequired}
+                          {t('podcasts.setupRequired')}
                         </Badge>
                       ) : null}
                     </div>
                     <CardDescription className="text-sm text-muted-foreground">
-                      {profile.description || t.podcasts.noDescription}
+                      {profile.description || t('podcasts.noDescription')}
                     </CardDescription>
                   </div>
                   <div className="flex items-center gap-1">
@@ -137,7 +137,7 @@ export function EpisodeProfilesPanel({
                       size="sm"
                       onClick={() => setEditProfile(profile)}
                     >
-                      <Edit3 className="mr-2 h-4 w-4" /> {t.podcasts.edit}
+                      <Edit3 className="mr-2 h-4 w-4" /> {t('podcasts.edit')}
                     </Button>
                     <AlertDialog>
                       <DropdownMenu>
@@ -161,31 +161,31 @@ export function EpisodeProfilesPanel({
                             disabled={duplicateProfile.isPending}
                           >
                             <Copy className="h-4 w-4 mr-2" />
-                            {t.podcasts.duplicate}
+                            {t('podcasts.duplicate')}
                           </DropdownMenuItem>
                           <DropdownMenuSeparator />
                           <AlertDialogTrigger asChild>
                             <DropdownMenuItem className="text-destructive focus:text-destructive">
                               <Trash2 className="h-4 w-4 mr-2" />
-                              {t.podcasts.delete}
+                              {t('podcasts.delete')}
                             </DropdownMenuItem>
                           </AlertDialogTrigger>
                         </DropdownMenuContent>
                       </DropdownMenu>
                       <AlertDialogContent>
                         <AlertDialogHeader>
-                          <AlertDialogTitle>{t.podcasts.deleteProfileTitle}</AlertDialogTitle>
+                          <AlertDialogTitle>{t('podcasts.deleteProfileTitle')}</AlertDialogTitle>
                           <AlertDialogDescription>
-                            {t.podcasts.deleteProfileDesc.replace('{name}', profile.name)}
+                            {t('podcasts.deleteProfileDesc').replace('{name}', profile.name)}
                           </AlertDialogDescription>
                         </AlertDialogHeader>
                         <AlertDialogFooter>
-                          <AlertDialogCancel>{t.common.cancel}</AlertDialogCancel>
+                          <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
                           <AlertDialogAction
                             onClick={() => deleteProfile.mutate(profile.id)}
                             disabled={deleteProfile.isPending}
                           >
-                            {deleteProfile.isPending ? t.podcasts.deleting : t.podcasts.delete}
+                            {deleteProfile.isPending ? t('podcasts.deleting') : t('podcasts.delete')}
                           </AlertDialogAction>
                         </AlertDialogFooter>
                       </AlertDialogContent>
@@ -197,45 +197,45 @@ export function EpisodeProfilesPanel({
                   <div className="grid gap-3 md:grid-cols-2">
                     <div>
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                        {t.podcasts.outlineModel}
+                        {t('podcasts.outlineModel')}
                       </p>
                       <p className="text-foreground">
                         {profile.outline_llm
                           ? (modelNameMap[profile.outline_llm] ?? profile.outline_llm)
                           : (profile.outline_provider && profile.outline_model
                             ? `${profile.outline_provider} / ${profile.outline_model}`
-                            : t.podcasts.notConfigured)}
+                            : t('podcasts.notConfigured'))}
                       </p>
                     </div>
                     <div>
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                        {t.podcasts.transcriptModel}
+                        {t('podcasts.transcriptModel')}
                       </p>
                       <p className="text-foreground">
                         {profile.transcript_llm
                           ? (modelNameMap[profile.transcript_llm] ?? profile.transcript_llm)
                           : (profile.transcript_provider && profile.transcript_model
                             ? `${profile.transcript_provider} / ${profile.transcript_model}`
-                            : t.podcasts.notConfigured)}
+                            : t('podcasts.notConfigured'))}
                       </p>
                     </div>
                     <div>
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                        {t.podcasts.segments}
+                        {t('podcasts.segments')}
                       </p>
                       <p className="text-foreground">{profile.num_segments}</p>
                     </div>
                     {profile.language ? (
                       <div>
                         <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                          {t.podcasts.language}
+                          {t('podcasts.language')}
                         </p>
                         <p className="text-foreground">{profile.language}</p>
                       </div>
                     ) : null}
                     <div>
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                        {t.podcasts.speakerProfile}
+                        {t('podcasts.speakerProfile')}
                       </p>
                       <div className="flex items-center gap-2 text-foreground">
                         <Users className="h-4 w-4" />
@@ -256,7 +256,7 @@ export function EpisodeProfilesPanel({
                   {profile.default_briefing ? (
                     <div>
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                        {t.podcasts.defaultBriefingTitle}
+                        {t('podcasts.defaultBriefingTitle')}
                       </p>
                       <p className="mt-1 whitespace-pre-wrap text-muted-foreground">
                         {profile.default_briefing}
diff --git a/frontend/src/components/podcasts/EpisodesTab.tsx b/frontend/src/components/podcasts/EpisodesTab.tsx
index 47742ad9..2f8baf9d 100644
--- a/frontend/src/components/podcasts/EpisodesTab.tsx
+++ b/frontend/src/components/podcasts/EpisodesTab.tsx
@@ -11,32 +11,32 @@ import { Button } from '@/components/ui/button'
 import { Separator } from '@/components/ui/separator'
 import { GeneratePodcastDialog } from '@/components/podcasts/GeneratePodcastDialog'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 
-const getSTATUS_ORDER = (t: TranslationKeys): Array<{
+const getSTATUS_ORDER = (t: TFunction): Array<{
   key: 'running' | 'completed' | 'failed' | 'pending'
   title: string
   description?: string
 }> => [
   {
     key: 'running',
-    title: t.podcasts.statusRunningTitle,
-    description: t.podcasts.statusRunningDesc,
+    title: t('podcasts.statusRunningTitle'),
+    description: t('podcasts.statusRunningDesc'),
   },
   {
     key: 'pending',
-    title: t.podcasts.statusPendingTitle,
-    description: t.podcasts.statusPendingDesc,
+    title: t('podcasts.statusPendingTitle'),
+    description: t('podcasts.statusPendingDesc'),
   },
   {
     key: 'completed',
-    title: t.podcasts.statusCompletedTitle,
-    description: t.podcasts.statusCompletedDesc,
+    title: t('podcasts.statusCompletedTitle'),
+    description: t('podcasts.statusCompletedDesc'),
   },
   {
     key: 'failed',
-    title: t.podcasts.statusFailedTitle,
-    description: t.podcasts.statusFailedDesc,
+    title: t('podcasts.statusFailedTitle'),
+    description: t('podcasts.statusFailedDesc'),
   },
 ]
 
@@ -84,14 +84,14 @@ export function EpisodesTab() {
     <div className="space-y-6">
       <div className="flex flex-wrap items-center justify-between gap-3">
         <div className="space-y-1">
-          <h2 className="text-xl font-semibold">{t.podcasts.overviewTitle}</h2>
+          <h2 className="text-xl font-semibold">{t('podcasts.overviewTitle')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t.podcasts.overviewDesc}
+            {t('podcasts.overviewDesc')}
           </p>
         </div>
         <div className="flex items-center gap-2">
           <Button onClick={() => setShowGenerateDialog(true)}>
-            {t.podcasts.generateBtn}
+            {t('podcasts.generateBtn')}
           </Button>
           <Button
             variant="outline"
@@ -104,25 +104,25 @@ export function EpisodesTab() {
             ) : (
               <RefreshCcw className="mr-2 h-4 w-4" />
             )}
-            {t.common.refresh}
+            {t('common.refresh')}
           </Button>
         </div>
       </div>
 
       <div className="flex flex-wrap gap-2">
-        <SummaryBadge label={t.podcasts.total} value={statusCounts.total} />
-        <SummaryBadge label={t.podcasts.processingLabel} value={statusCounts.running} />
-        <SummaryBadge label={t.podcasts.completedLabel} value={statusCounts.completed} />
-        <SummaryBadge label={t.podcasts.failedLabel} value={statusCounts.failed} />
-        <SummaryBadge label={t.podcasts.pendingLabel} value={statusCounts.pending} />
+        <SummaryBadge label={t('podcasts.total')} value={statusCounts.total} />
+        <SummaryBadge label={t('podcasts.processingLabel')} value={statusCounts.running} />
+        <SummaryBadge label={t('podcasts.completedLabel')} value={statusCounts.completed} />
+        <SummaryBadge label={t('podcasts.failedLabel')} value={statusCounts.failed} />
+        <SummaryBadge label={t('podcasts.pendingLabel')} value={statusCounts.pending} />
       </div>
 
       {isError ? (
         <Alert variant="destructive">
           <AlertCircle className="h-4 w-4" />
-          <AlertTitle>{t.podcasts.loadErrorTitle}</AlertTitle>
+          <AlertTitle>{t('podcasts.loadErrorTitle')}</AlertTitle>
           <AlertDescription>
-            {t.podcasts.loadErrorDesc}
+            {t('podcasts.loadErrorDesc')}
           </AlertDescription>
         </Alert>
       ) : null}
@@ -130,14 +130,14 @@ export function EpisodesTab() {
       {isLoading ? (
         <div className="flex items-center gap-3 rounded-lg border border-dashed p-6 text-sm text-muted-foreground">
           <Loader2 className="h-4 w-4 animate-spin" />
-          {t.podcasts.loadingEpisodes}
+          {t('podcasts.loadingEpisodes')}
         </div>
       ) : null}
 
       {emptyState ? (
         <div className="rounded-lg border border-dashed bg-muted/30 p-10 text-center">
           <p className="text-sm text-muted-foreground">
-            {t.podcasts.noEpisodesYet}
+            {t('podcasts.noEpisodesYet')}
           </p>
         </div>
       ) : null}
diff --git a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
index 81e4fad0..0f76e743 100644
--- a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
+++ b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
@@ -117,28 +117,28 @@ function ContentSelectionPanel({
   // Cache all translation strings at render time to avoid repeated Proxy accesses in loops
   // This prevents the infinite loop detection from triggering
   const tr = {
-    content: t.podcasts.content,
-    contentDesc: t.podcasts.contentDesc,
-    itemsSelected: t.podcasts.itemsSelected,
-    tokens: t.podcasts.tokens,
-    chars: t.podcasts.chars,
-    loadingNotebooks: t.podcasts.loadingNotebooks,
-    noNotebooksFoundInPodcasts: t.podcasts.noNotebooksFoundInPodcasts,
-    sources: t.podcasts.sources,
-    notes: t.podcasts.notes,
-    noContentSelected: t.podcasts.noContentSelected,
-    noSources: t.podcasts.noSources,
-    untitledSource: t.podcasts.untitledSource,
-    link: t.podcasts.link,
-    file: t.podcasts.file,
-    embedded: t.podcasts.embedded,
-    notEmbedded: t.podcasts.notEmbedded,
-    selectMode: t.podcasts.selectMode,
-    noNotes: t.podcasts.noNotes,
-    untitledNote: t.podcasts.untitledNote,
-    commonUpdated: t.common.updated,
-    summary: t.podcasts.summary,
-    fullContent: t.podcasts.fullContent,
+    content: t('podcasts.content'),
+    contentDesc: t('podcasts.contentDesc'),
+    itemsSelected: t('podcasts.itemsSelected'),
+    tokens: t('podcasts.tokens'),
+    chars: t('podcasts.chars'),
+    loadingNotebooks: t('podcasts.loadingNotebooks'),
+    noNotebooksFoundInPodcasts: t('podcasts.noNotebooksFoundInPodcasts'),
+    sources: t('podcasts.sources'),
+    notes: t('podcasts.notes'),
+    noContentSelected: t('podcasts.noContentSelected'),
+    noSources: t('podcasts.noSources'),
+    untitledSource: t('podcasts.untitledSource'),
+    link: t('podcasts.link'),
+    file: t('podcasts.file'),
+    embedded: t('podcasts.embedded'),
+    notEmbedded: t('podcasts.notEmbedded'),
+    selectMode: t('podcasts.selectMode'),
+    noNotes: t('podcasts.noNotes'),
+    untitledNote: t('podcasts.untitledNote'),
+    commonUpdated: t('common.updated'),
+    summary: t('podcasts.summary'),
+    fullContent: t('podcasts.fullContent'),
   }
 
   // Pre-compute source modes once to avoid repeated t.podcasts access in loops
@@ -768,11 +768,11 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
         const response = await chatApi.buildContext(task.payload)
         const notebookName = notebooks.find((nb) => nb.id === task.notebookId)?.name ?? task.notebookId
         const contextString = JSON.stringify(response.context, null, 2)
-        const snippet = `${t.common.notebookLabel.replace('{name}', notebookName)}\n${contextString}`
+        const snippet = `${t('common.notebookLabel').replace('{name}', notebookName)}\n${contextString}`
         parts.push(snippet)
       } catch (error) {
         console.error('Failed to build context for notebook', task.notebookId, error)
-        throw new Error(t.podcasts.buildContextFailed)
+        throw new Error(t('podcasts.buildContextFailed'))
       }
     }
 
@@ -782,8 +782,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
   const handleSubmit = useCallback(async () => {
     if (!selectedEpisodeProfile) {
       toast({
-        title: t.podcasts.profileRequired,
-        description: t.podcasts.profileRequiredDesc,
+        title: t('podcasts.profileRequired'),
+        description: t('podcasts.profileRequiredDesc'),
         variant: 'destructive',
       })
       return
@@ -791,8 +791,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
 
     if (!episodeName.trim()) {
       toast({
-        title: t.podcasts.nameRequired,
-        description: t.podcasts.nameRequiredDesc,
+        title: t('podcasts.nameRequired'),
+        description: t('podcasts.nameRequiredDesc'),
         variant: 'destructive',
       })
       return
@@ -803,8 +803,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
       const content = await buildContentFromSelections()
       if (!content.trim()) {
         toast({
-          title: t.podcasts.addContext,
-          description: t.podcasts.addContextDesc,
+          title: t('podcasts.addContext'),
+          description: t('podcasts.addContextDesc'),
           variant: 'destructive',
         })
         return
@@ -821,8 +821,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
       await generatePodcast.mutateAsync(payload)
 
       toast({
-        title: t.common.success,
-        description: t.podcasts.podcastTaskStarted,
+        title: t('common.success'),
+        description: t('podcasts.podcastTaskStarted'),
       })
 
       // Delay closing dialog slightly to ensure refetch completes
@@ -833,8 +833,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
     } catch (error) {
       console.error('Failed to generate podcast', error)
       toast({
-        title: t.podcasts.generationFailed,
-        description: error instanceof Error ? error.message : t.common.refreshPage,
+        title: t('podcasts.generationFailed'),
+        description: error instanceof Error ? error.message : t('common.refreshPage'),
         variant: 'destructive',
       })
     } finally {
@@ -863,9 +863,9 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
     }}>
       <DialogContent className="w-[80vw] max-w-[1080px] max-h-[90vh] overflow-hidden">
         <DialogHeader>
-          <DialogTitle>{t.podcasts.generateEpisode}</DialogTitle>
+          <DialogTitle>{t('podcasts.generateEpisode')}</DialogTitle>
           <DialogDescription>
-            {t.podcasts.generateEpisodeDesc}
+            {t('podcasts.generateEpisodeDesc')}
           </DialogDescription>
         </DialogHeader>
 
@@ -891,27 +891,27 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
           <div className="space-y-6">
             <div className="space-y-3">
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.episodeSettings}
+                {t('podcasts.episodeSettings')}
               </h3>
               {episodeProfilesQuery.isLoading ? (
                 <div className="flex items-center gap-2 text-sm text-muted-foreground">
-                  <Loader2 className="h-4 w-4 animate-spin" /> {t.podcasts.loadingProfiles}
+                  <Loader2 className="h-4 w-4 animate-spin" /> {t('podcasts.loadingProfiles')}
                 </div>
               ) : episodeProfiles.length === 0 ? (
                 <div className="rounded-lg border border-dashed bg-muted/30 p-4 text-sm text-muted-foreground">
-                  {t.podcasts.noProfilesFound}
+                  {t('podcasts.noProfilesFound')}
                 </div>
               ) : (
                 <div className="space-y-4">
                   <div className="space-y-2">
-                    <Label htmlFor="episode_profile">{t.podcasts.episodeProfile}</Label>
+                    <Label htmlFor="episode_profile">{t('podcasts.episodeProfile')}</Label>
                     <Select
                       value={episodeProfileId}
                       onValueChange={setEpisodeProfileId}
                       disabled={episodeProfiles.length === 0}
                     >
                       <SelectTrigger id="episode_profile">
-                        <SelectValue placeholder={t.podcasts.episodeProfilePlaceholder} />
+                        <SelectValue placeholder={t('podcasts.episodeProfilePlaceholder')} />
                       </SelectTrigger>
                       <SelectContent>
                         {episodeProfiles.map((profile) => (
@@ -923,30 +923,30 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
                     </Select>
                     {selectedEpisodeProfile && (
                       <p className="text-xs text-muted-foreground">
-                        {t.podcasts.usesSpeakerProfile}{' '}
+                        {t('podcasts.usesSpeakerProfile')}{' '}
                         <strong>{selectedEpisodeProfile.speaker_config}</strong>
                       </p>
                     )}
                   </div>
 
                   <div className="space-y-2">
-                    <Label htmlFor="episode_name">{t.podcasts.episodeName}</Label>
+                    <Label htmlFor="episode_name">{t('podcasts.episodeName')}</Label>
                     <Input
                       id="episode_name"
                       name="episode_name"
                       value={episodeName}
                       onChange={(event) => setEpisodeName(event.target.value)}
-                      placeholder={t.podcasts.episodeNamePlaceholder}
+                      placeholder={t('podcasts.episodeNamePlaceholder')}
                       autoComplete="off"
                     />
                   </div>
 
                    <div className="space-y-2">
-                    <Label htmlFor="instructions">{t.podcasts.additionalInstructions}</Label>
+                    <Label htmlFor="instructions">{t('podcasts.additionalInstructions')}</Label>
                     <Textarea
                       id="instructions"
                       name="instructions"
-                      placeholder={t.podcasts.instructionsPlaceholder}
+                      placeholder={t('podcasts.instructionsPlaceholder')}
                       value={instructions}
                       onChange={(event) => setInstructions(event.target.value)}
                       className="min-h-[100px] text-xs"
@@ -964,7 +964,7 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
                 className="w-full"
               >
                 {isSubmitting && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
-                {isSubmitting ? t.podcasts.generating : t.podcasts.generate}
+                {isSubmitting ? t('podcasts.generating') : t('podcasts.generate')}
               </Button>
               <Button
                 variant="outline"
@@ -972,7 +972,7 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
                 disabled={isSubmitting}
                 className="w-full"
               >
-                {t.common.cancel}
+                {t('common.cancel')}
               </Button>
             </div>
           </div>
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index dd5c5042..e13ad1fa 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -74,17 +74,17 @@ export function SpeakerProfilesPanel({
     <div className="space-y-6">
       <div className="flex items-center justify-between">
         <div>
-          <h2 className="text-lg font-semibold">{t.podcasts.speakerProfilesTitle}</h2>
+          <h2 className="text-lg font-semibold">{t('podcasts.speakerProfilesTitle')}</h2>
           <p className="text-sm text-muted-foreground">
-            {t.podcasts.speakerProfilesDesc}
+            {t('podcasts.speakerProfilesDesc')}
           </p>
         </div>
-        <Button onClick={() => setCreateOpen(true)}>{t.podcasts.createSpeaker}</Button>
+        <Button onClick={() => setCreateOpen(true)}>{t('podcasts.createSpeaker')}</Button>
       </div>
 
       {sortedProfiles.length === 0 ? (
         <div className="rounded-lg border border-dashed bg-muted/30 p-8 text-center text-sm text-muted-foreground">
-          {t.podcasts.noSpeakerProfiles}
+          {t('podcasts.noSpeakerProfiles')}
         </div>
       ) : (
         <div className="space-y-4">
@@ -105,12 +105,12 @@ export function SpeakerProfilesPanel({
                         {unconfigured ? (
                           <Badge variant="outline" className="text-amber-600 border-amber-300 text-xs">
                             <AlertTriangle className="h-3 w-3 mr-1" />
-                            {t.podcasts.setupRequired}
+                            {t('podcasts.setupRequired')}
                           </Badge>
                         ) : null}
                       </div>
                       <CardDescription className="text-sm text-muted-foreground">
-                        {profile.description || t.podcasts.noDescription}
+                        {profile.description || t('podcasts.noDescription')}
                       </CardDescription>
                     </div>
                     <Badge variant="outline" className="text-xs">
@@ -118,7 +118,7 @@ export function SpeakerProfilesPanel({
                         ? (modelNameMap[profile.voice_model] ?? profile.voice_model)
                         : (profile.tts_provider
                           ? `${profile.tts_provider} / ${profile.tts_model}`
-                          : t.podcasts.notConfigured)}
+                          : t('podcasts.notConfigured'))}
                     </Badge>
                   </div>
                   <div className="flex flex-wrap gap-2">
@@ -127,8 +127,8 @@ export function SpeakerProfilesPanel({
                       className="text-xs"
                     >
                       {usageCount > 0
-                        ? (usageCount === 1 ? t.podcasts.usedByCount_one : t.podcasts.usedByCount_other.replace('{count}', usageCount.toString()))
-                        : t.podcasts.unused}
+                        ? (usageCount === 1 ? t('podcasts.usedByCount_one') : t('podcasts.usedByCount_other').replace('{count}', usageCount.toString()))
+                        : t('podcasts.unused')}
                     </Badge>
                   </div>
                 </CardHeader>
@@ -149,7 +149,7 @@ export function SpeakerProfilesPanel({
                           </div>
                           <div className="flex items-center gap-2">
                             <span className="text-xs text-muted-foreground">
-                              {t.podcasts.voiceId}: {speaker.voice_id}
+                              {t('podcasts.voiceId')}: {speaker.voice_id}
                             </span>
                             {speaker.voice_model ? (
                               <Badge variant="secondary" className="text-xs">
@@ -159,10 +159,10 @@ export function SpeakerProfilesPanel({
                           </div>
                         </div>
                         <p className="mt-2 text-xs text-muted-foreground whitespace-pre-wrap">
-                          <span className="font-semibold">{t.podcasts.backstory}:</span> {speaker.backstory}
+                          <span className="font-semibold">{t('podcasts.backstory')}:</span> {speaker.backstory}
                         </p>
                         <p className="mt-2 text-xs text-muted-foreground whitespace-pre-wrap">
-                          <span className="font-semibold">{t.podcasts.personality}:</span> {speaker.personality}
+                          <span className="font-semibold">{t('podcasts.personality')}:</span> {speaker.personality}
                         </p>
                       </div>
                     ))}
@@ -174,7 +174,7 @@ export function SpeakerProfilesPanel({
                       size="sm"
                       onClick={() => setEditProfile(profile)}
                     >
-                      <Edit3 className="mr-2 h-4 w-4" /> {t.podcasts.edit}
+                      <Edit3 className="mr-2 h-4 w-4" /> {t('podcasts.edit')}
                     </Button>
                     <AlertDialog>
                       <DropdownMenu>
@@ -198,7 +198,7 @@ export function SpeakerProfilesPanel({
                             disabled={duplicateProfile.isPending}
                           >
                             <Copy className="h-4 w-4 mr-2" />
-                            {t.podcasts.duplicate}
+                            {t('podcasts.duplicate')}
                           </DropdownMenuItem>
                           <DropdownMenuSeparator />
                           <AlertDialogTrigger asChild>
@@ -207,30 +207,30 @@ export function SpeakerProfilesPanel({
                               disabled={deleteDisabled}
                             >
                               <Trash2 className="h-4 w-4 mr-2" />
-                              {t.podcasts.delete}
+                              {t('podcasts.delete')}
                             </DropdownMenuItem>
                           </AlertDialogTrigger>
                         </DropdownMenuContent>
                       </DropdownMenu>
                       <AlertDialogContent>
                         <AlertDialogHeader>
-                          <AlertDialogTitle>{t.podcasts.deleteSpeakerProfileTitle}</AlertDialogTitle>
+                          <AlertDialogTitle>{t('podcasts.deleteSpeakerProfileTitle')}</AlertDialogTitle>
                           <AlertDialogDescription>
-                            {t.podcasts.deleteSpeakerProfileDesc.replace('{name}', profile.name)}
+                            {t('podcasts.deleteSpeakerProfileDesc').replace('{name}', profile.name)}
                           </AlertDialogDescription>
                           {deleteDisabled ? (
                             <p className="mt-2 text-sm text-muted-foreground">
-                              {t.podcasts.deleteSpeakerDisabledHint}
+                              {t('podcasts.deleteSpeakerDisabledHint')}
                             </p>
                           ) : null}
                         </AlertDialogHeader>
                         <AlertDialogFooter>
-                          <AlertDialogCancel>{t.common.cancel}</AlertDialogCancel>
+                          <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
                           <AlertDialogAction
                             onClick={() => deleteProfile.mutate(profile.id)}
                             disabled={deleteDisabled || deleteProfile.isPending}
                           >
-                            {deleteProfile.isPending ? t.podcasts.deleting : t.podcasts.delete}
+                            {deleteProfile.isPending ? t('podcasts.deleting') : t('podcasts.delete')}
                           </AlertDialogAction>
                         </AlertDialogFooter>
                       </AlertDialogContent>
diff --git a/frontend/src/components/podcasts/TemplatesTab.tsx b/frontend/src/components/podcasts/TemplatesTab.tsx
index fa1eaea2..695a3a61 100644
--- a/frontend/src/components/podcasts/TemplatesTab.tsx
+++ b/frontend/src/components/podcasts/TemplatesTab.tsx
@@ -30,9 +30,9 @@ export function TemplatesTab() {
   return (
     <div className="space-y-6">
       <div className="space-y-1">
-        <h2 className="text-xl font-semibold">{t.podcasts.templatesWorkspaceTitle}</h2>
+        <h2 className="text-xl font-semibold">{t('podcasts.templatesWorkspaceTitle')}</h2>
         <p className="text-sm text-muted-foreground">
-          {t.podcasts.templatesWorkspaceDesc}
+          {t('podcasts.templatesWorkspaceDesc')}
         </p>
       </div>
 
@@ -44,42 +44,42 @@ export function TemplatesTab() {
           <AccordionTrigger className="gap-2 py-4 text-left text-sm font-semibold">
             <div className="flex items-center gap-2">
               <Lightbulb className="h-4 w-4 text-primary" />
-              {t.podcasts.howTemplatesPowerTitle}
+              {t('podcasts.howTemplatesPowerTitle')}
             </div>
           </AccordionTrigger>
           <AccordionContent className="text-sm text-muted-foreground">
             <div className="space-y-4">
               <p className="text-muted-foreground/90">
-                {t.podcasts.howTemplatesPowerDesc}
+                {t('podcasts.howTemplatesPowerDesc')}
               </p>
 
               <div className="space-y-2">
-                <h4 className="font-medium text-foreground">{t.podcasts.episodeProfilesSetFormat}</h4>
+                <h4 className="font-medium text-foreground">{t('podcasts.episodeProfilesSetFormat')}</h4>
                 <ul className="list-disc space-y-1 pl-5">
-                  <li>{t.podcasts.episodeProfilesList1}</li>
-                  <li>{t.podcasts.episodeProfilesList2}</li>
-                  <li>{t.podcasts.episodeProfilesList3}</li>
+                  <li>{t('podcasts.episodeProfilesList1')}</li>
+                  <li>{t('podcasts.episodeProfilesList2')}</li>
+                  <li>{t('podcasts.episodeProfilesList3')}</li>
                 </ul>
               </div>
 
               <div className="space-y-2">
-                <h4 className="font-medium text-foreground">{t.podcasts.speakerProfilesBringVoices}</h4>
+                <h4 className="font-medium text-foreground">{t('podcasts.speakerProfilesBringVoices')}</h4>
                 <ul className="list-disc space-y-1 pl-5">
-                  <li>{t.podcasts.speakerProfilesList1}</li>
-                  <li>{t.podcasts.speakerProfilesList2}</li>
-                  <li>{t.podcasts.speakerProfilesList3}</li>
+                  <li>{t('podcasts.speakerProfilesList1')}</li>
+                  <li>{t('podcasts.speakerProfilesList2')}</li>
+                  <li>{t('podcasts.speakerProfilesList3')}</li>
                 </ul>
               </div>
 
               <div className="space-y-2">
-                <h4 className="font-medium text-foreground">{t.podcasts.recommendedWorkflow}</h4>
+                <h4 className="font-medium text-foreground">{t('podcasts.recommendedWorkflow')}</h4>
                 <ol className="list-decimal space-y-1 pl-5">
-                  <li>{t.podcasts.workflowStep1}</li>
-                  <li>{t.podcasts.workflowStep2}</li>
-                  <li>{t.podcasts.workflowStep3}</li>
+                  <li>{t('podcasts.workflowStep1')}</li>
+                  <li>{t('podcasts.workflowStep2')}</li>
+                  <li>{t('podcasts.workflowStep3')}</li>
                 </ol>
                 <p className="text-xs text-muted-foreground/80">
-                  {t.podcasts.workflowHint}
+                  {t('podcasts.workflowHint')}
                 </p>
               </div>
             </div>
@@ -90,9 +90,9 @@ export function TemplatesTab() {
       {hasError ? (
         <Alert variant="destructive">
           <AlertCircle className="h-4 w-4" />
-          <AlertTitle>{t.podcasts.failedToLoadTemplates}</AlertTitle>
+          <AlertTitle>{t('podcasts.failedToLoadTemplates')}</AlertTitle>
           <AlertDescription>
-            {t.podcasts.failedToLoadTemplatesDesc}
+            {t('podcasts.failedToLoadTemplatesDesc')}
           </AlertDescription>
         </Alert>
       ) : null}
@@ -100,7 +100,7 @@ export function TemplatesTab() {
       {isLoading ? (
         <div className="flex items-center gap-3 rounded-lg border border-dashed p-6 text-sm text-muted-foreground">
           <Loader2 className="h-4 w-4 animate-spin" />
-          {t.podcasts.loadingTemplates}
+          {t('podcasts.loadingTemplates')}
         </div>
       ) : (
         <div className="grid gap-6 lg:grid-cols-2">
diff --git a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
index 8df7143b..80727dd3 100644
--- a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
@@ -33,20 +33,20 @@ import {
 import { Textarea } from '@/components/ui/textarea'
 import { Separator } from '@/components/ui/separator'
 import { ModelSelector } from '@/components/common/ModelSelector'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 
-const episodeProfileSchema = (t: TranslationKeys) => z.object({
-  name: z.string().min(1, t.podcasts.nameRequired || 'Name is required'),
+const episodeProfileSchema = (t: TFunction) => z.object({
+  name: z.string().min(1, t('podcasts.nameRequired') || 'Name is required'),
   description: z.string().optional(),
-  speaker_config: z.string().min(1, t.podcasts.profileRequired || 'Speaker profile is required'),
-  outline_llm: z.string().min(1, t.podcasts.outlineModelRequired || 'Outline model is required'),
-  transcript_llm: z.string().min(1, t.podcasts.transcriptModelRequired || 'Transcript model is required'),
+  speaker_config: z.string().min(1, t('podcasts.profileRequired') || 'Speaker profile is required'),
+  outline_llm: z.string().min(1, t('podcasts.outlineModelRequired') || 'Outline model is required'),
+  transcript_llm: z.string().min(1, t('podcasts.transcriptModelRequired') || 'Transcript model is required'),
   language: z.string().nullable().optional(),
-  default_briefing: z.string().min(1, t.podcasts.defaultBriefingRequired || 'Default briefing is required'),
+  default_briefing: z.string().min(1, t('podcasts.defaultBriefingRequired') || 'Default briefing is required'),
   num_segments: z.number()
-    .int(t.podcasts.segmentsInteger || 'Must be an integer')
-    .min(3, t.podcasts.segmentsMin || 'At least 3 segments')
-    .max(20, t.podcasts.segmentsMax || 'Maximum 20 segments'),
+    .int(t('podcasts.segmentsInteger') || 'Must be an integer')
+    .min(3, t('podcasts.segmentsMin') || 'At least 3 segments')
+    .max(20, t('podcasts.segmentsMax') || 'Maximum 20 segments'),
 })
 
 export type EpisodeProfileFormValues = z.infer<ReturnType<typeof episodeProfileSchema>>
@@ -145,18 +145,18 @@ export function EpisodeProfileFormDialog({
       <DialogContent className="max-h-[90vh] overflow-y-auto sm:max-w-2xl">
         <DialogHeader>
           <DialogTitle>
-            {isEdit ? t.podcasts.editEpisodeProfile : t.podcasts.createEpisodeProfile}
+            {isEdit ? t('podcasts.editEpisodeProfile') : t('podcasts.createEpisodeProfile')}
           </DialogTitle>
           <DialogDescription>
-            {t.podcasts.episodeProfileFormDesc}
+            {t('podcasts.episodeProfileFormDesc')}
           </DialogDescription>
         </DialogHeader>
 
         {speakerProfiles.length === 0 ? (
           <Alert className="bg-amber-50 text-amber-900 border-amber-200">
-            <AlertTitle>{t.podcasts.noSpeakerProfilesAvailable}</AlertTitle>
+            <AlertTitle>{t('podcasts.noSpeakerProfilesAvailable')}</AlertTitle>
             <AlertDescription>
-              {t.podcasts.noSpeakerProfilesDesc}
+              {t('podcasts.noSpeakerProfilesDesc')}
             </AlertDescription>
           </Alert>
         ) : null}
@@ -164,15 +164,15 @@ export function EpisodeProfileFormDialog({
         <form onSubmit={handleSubmit(onSubmit)} className="space-y-6 pt-2">
           <div className="grid gap-4 md:grid-cols-2">
             <div className="space-y-2">
-              <Label htmlFor="name">{t.podcasts.profileName} *</Label>
-              <Input id="name" placeholder={t.podcasts.profileNamePlaceholder} {...register('name')} />
+              <Label htmlFor="name">{t('podcasts.profileName')} *</Label>
+              <Input id="name" placeholder={t('podcasts.profileNamePlaceholder')} {...register('name')} />
               {errors.name ? (
                 <p className="text-xs text-red-600">{errors.name.message}</p>
               ) : null}
             </div>
 
             <div className="space-y-2">
-              <Label htmlFor="num_segments">{t.podcasts.segments} *</Label>
+              <Label htmlFor="num_segments">{t('podcasts.segments')} *</Label>
               <Input
                 id="num_segments"
                 type="number"
@@ -187,11 +187,11 @@ export function EpisodeProfileFormDialog({
             </div>
 
             <div className="md:col-span-2 space-y-2">
-              <Label htmlFor="description">{t.common.description}</Label>
+              <Label htmlFor="description">{t('common.description')}</Label>
               <Textarea
                 id="description"
                 rows={3}
-                placeholder={t.podcasts.descriptionPlaceholder}
+                placeholder={t('podcasts.descriptionPlaceholder')}
                 {...register('description')}
                 autoComplete="off"
               />
@@ -201,7 +201,7 @@ export function EpisodeProfileFormDialog({
           <div className="space-y-4">
             <div>
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.speakerConfig}
+                {t('podcasts.speakerConfig')}
               </h3>
               <Separator className="mt-2" />
             </div>
@@ -210,12 +210,12 @@ export function EpisodeProfileFormDialog({
               name="speaker_config"
               render={({ field }) => (
                 <div className="space-y-2">
-                  <Label htmlFor="speaker_config">{t.podcasts.speakerProfile} *</Label>
+                  <Label htmlFor="speaker_config">{t('podcasts.speakerProfile')} *</Label>
                   <Select value={field.value} onValueChange={field.onChange}>
                     <SelectTrigger id="speaker_config">
-                      <SelectValue placeholder={t.podcasts.selectSpeakerProfile} />
+                      <SelectValue placeholder={t('podcasts.selectSpeakerProfile')} />
                     </SelectTrigger>
-                    <SelectContent title={t.podcasts.speakerProfile}>
+                    <SelectContent title={t('podcasts.speakerProfile')}>
                       {speakerProfiles.map((profile) => (
                         <SelectItem key={profile.id} value={profile.name}>
                           {profile.name}
@@ -236,7 +236,7 @@ export function EpisodeProfileFormDialog({
           <div className="space-y-4">
             <div>
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.outlineGeneration}
+                {t('podcasts.outlineGeneration')}
               </h3>
               <Separator className="mt-2" />
             </div>
@@ -246,11 +246,11 @@ export function EpisodeProfileFormDialog({
               render={({ field }) => (
                 <div>
                   <ModelSelector
-                    label={`${t.podcasts.outlineModel} *`}
+                    label={`${t('podcasts.outlineModel')} *`}
                     modelType="language"
                     value={field.value}
                     onChange={field.onChange}
-                    placeholder={t.podcasts.selectOutlineModel}
+                    placeholder={t('podcasts.selectOutlineModel')}
                   />
                   {errors.outline_llm ? (
                     <p className="text-xs text-red-600 mt-1">
@@ -265,7 +265,7 @@ export function EpisodeProfileFormDialog({
           <div className="space-y-4">
             <div>
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.transcriptGeneration}
+                {t('podcasts.transcriptGeneration')}
               </h3>
               <Separator className="mt-2" />
             </div>
@@ -275,11 +275,11 @@ export function EpisodeProfileFormDialog({
               render={({ field }) => (
                 <div>
                   <ModelSelector
-                    label={`${t.podcasts.transcriptModel} *`}
+                    label={`${t('podcasts.transcriptModel')} *`}
                     modelType="language"
                     value={field.value}
                     onChange={field.onChange}
-                    placeholder={t.podcasts.selectTranscriptModel}
+                    placeholder={t('podcasts.selectTranscriptModel')}
                   />
                   {errors.transcript_llm ? (
                     <p className="text-xs text-red-600 mt-1">
@@ -294,7 +294,7 @@ export function EpisodeProfileFormDialog({
           <div className="space-y-4">
             <div>
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.podcastLanguage}
+                {t('podcasts.podcastLanguage')}
               </h3>
               <Separator className="mt-2" />
             </div>
@@ -303,15 +303,15 @@ export function EpisodeProfileFormDialog({
               name="language"
               render={({ field }) => (
                 <div className="space-y-2">
-                  <Label htmlFor="language">{t.podcasts.language}</Label>
+                  <Label htmlFor="language">{t('podcasts.language')}</Label>
                   <Select
                     value={field.value ?? ''}
                     onValueChange={(v) => field.onChange(v || null)}
                   >
                     <SelectTrigger id="language">
-                      <SelectValue placeholder={t.podcasts.languagePlaceholder} />
+                      <SelectValue placeholder={t('podcasts.languagePlaceholder')} />
                     </SelectTrigger>
-                    <SelectContent title={t.podcasts.language}>
+                    <SelectContent title={t('podcasts.language')}>
                       {languages.map((lang) => (
                         <SelectItem key={lang.code} value={lang.code}>
                           {lang.name} ({lang.code})
@@ -325,11 +325,11 @@ export function EpisodeProfileFormDialog({
           </div>
 
           <div className="space-y-2">
-            <Label htmlFor="default_briefing">{t.podcasts.defaultBriefingTitle} *</Label>
+            <Label htmlFor="default_briefing">{t('podcasts.defaultBriefingTitle')} *</Label>
             <Textarea
               id="default_briefing"
               rows={6}
-              placeholder={t.podcasts.defaultBriefingPlaceholder}
+              placeholder={t('podcasts.defaultBriefingPlaceholder')}
               {...register('default_briefing')}
             />
             {errors.default_briefing ? (
@@ -345,14 +345,14 @@ export function EpisodeProfileFormDialog({
               variant="outline"
               onClick={() => onOpenChange(false)}
             >
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button type="submit" disabled={disableSubmit}>
               {isSubmitting
-                ? t.common.saving
+                ? t('common.saving')
                 : isEdit
-                  ? t.common.saveChanges
-                  : t.podcasts.createProfile}
+                  ? t('common.saveChanges')
+                  : t('podcasts.createProfile')}
             </Button>
           </div>
         </form>
diff --git a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
index efe6658d..0627cd8a 100644
--- a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
@@ -26,25 +26,25 @@ import { Textarea } from '@/components/ui/textarea'
 import { Separator } from '@/components/ui/separator'
 import { ModelSelector } from '@/components/common/ModelSelector'
 
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 import { useTranslation } from '@/lib/hooks/use-translation'
 
-const speakerConfigSchema = (t: TranslationKeys) => z.object({
-  name: z.string().min(1, t.common.nameRequired || 'Name is required'),
-  voice_id: z.string().min(1, t.podcasts.voiceIdRequired || 'Voice ID is required'),
-  backstory: z.string().min(1, t.podcasts.backstoryRequired || 'Backstory is required'),
-  personality: z.string().min(1, t.podcasts.personalityRequired || 'Personality is required'),
+const speakerConfigSchema = (t: TFunction) => z.object({
+  name: z.string().min(1, t('common.nameRequired') || 'Name is required'),
+  voice_id: z.string().min(1, t('podcasts.voiceIdRequired') || 'Voice ID is required'),
+  backstory: z.string().min(1, t('podcasts.backstoryRequired') || 'Backstory is required'),
+  personality: z.string().min(1, t('podcasts.personalityRequired') || 'Personality is required'),
   voice_model: z.string().nullable().optional(),
 })
 
-const speakerProfileSchema = (t: TranslationKeys) => z.object({
-  name: z.string().min(1, t.common.nameRequired || 'Name is required'),
+const speakerProfileSchema = (t: TFunction) => z.object({
+  name: z.string().min(1, t('common.nameRequired') || 'Name is required'),
   description: z.string().optional(),
-  voice_model: z.string().min(1, t.podcasts.voiceModelRequired || 'Voice model is required'),
+  voice_model: z.string().min(1, t('podcasts.voiceModelRequired') || 'Voice model is required'),
   speakers: z
     .array(speakerConfigSchema(t))
-    .min(1, t.podcasts.speakerCountMin || 'At least one speaker is required')
-    .max(4, t.podcasts.speakerCountMax || 'You can configure up to 4 speakers'),
+    .min(1, t('podcasts.speakerCountMin') || 'At least one speaker is required')
+    .max(4, t('podcasts.speakerCountMax') || 'You can configure up to 4 speakers'),
 })
 
 export type SpeakerProfileFormValues = z.infer<ReturnType<typeof speakerProfileSchema>>
@@ -157,29 +157,29 @@ export function SpeakerProfileFormDialog({
       <DialogContent className="max-h-[90vh] overflow-y-auto sm:max-w-2xl">
         <DialogHeader>
           <DialogTitle>
-            {isEdit ? t.podcasts.editSpeakerProfile : t.podcasts.createSpeakerProfile}
+            {isEdit ? t('podcasts.editSpeakerProfile') : t('podcasts.createSpeakerProfile')}
           </DialogTitle>
           <DialogDescription>
-            {t.podcasts.speakerProfileFormDesc}
+            {t('podcasts.speakerProfileFormDesc')}
           </DialogDescription>
         </DialogHeader>
 
         <form onSubmit={handleSubmit(onSubmit)} className="space-y-6 pt-2">
           <div className="grid gap-4 md:grid-cols-2">
             <div className="space-y-2">
-              <Label htmlFor="name">{t.podcasts.profileName} *</Label>
-              <Input id="name" placeholder={t.podcasts.profileNamePlaceholder} {...register('name')} />
+              <Label htmlFor="name">{t('podcasts.profileName')} *</Label>
+              <Input id="name" placeholder={t('podcasts.profileNamePlaceholder')} {...register('name')} />
               {errors.name ? (
                 <p className="text-xs text-red-600">{errors.name.message}</p>
               ) : null}
             </div>
 
             <div className="space-y-2">
-              <Label htmlFor="description">{t.common.description}</Label>
+              <Label htmlFor="description">{t('common.description')}</Label>
               <Textarea
                 id="description"
                 rows={3}
-                placeholder={t.podcasts.descriptionPlaceholder}
+                placeholder={t('podcasts.descriptionPlaceholder')}
                 {...register('description')}
               />
             </div>
@@ -188,7 +188,7 @@ export function SpeakerProfileFormDialog({
           <div className="space-y-4">
             <div>
               <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                {t.podcasts.voiceModel}
+                {t('podcasts.voiceModel')}
               </h3>
               <Separator className="mt-2" />
             </div>
@@ -198,11 +198,11 @@ export function SpeakerProfileFormDialog({
               render={({ field }) => (
                 <div>
                   <ModelSelector
-                    label={`${t.podcasts.voiceModel} *`}
+                    label={`${t('podcasts.voiceModel')} *`}
                     modelType="text_to_speech"
                     value={field.value}
                     onChange={field.onChange}
-                    placeholder={t.podcasts.selectVoiceModel}
+                    placeholder={t('podcasts.selectVoiceModel')}
                   />
                   {errors.voice_model ? (
                     <p className="text-xs text-red-600 mt-1">
@@ -218,10 +218,10 @@ export function SpeakerProfileFormDialog({
             <div className="flex items-center justify-between">
               <div>
                 <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-                  {t.podcasts.speakers}
+                  {t('podcasts.speakers')}
                 </h3>
                 <p className="text-xs text-muted-foreground">
-                  {t.podcasts.speakersDesc}
+                  {t('podcasts.speakersDesc')}
                 </p>
               </div>
               <Button
@@ -231,7 +231,7 @@ export function SpeakerProfileFormDialog({
                 onClick={() => append({ ...EMPTY_SPEAKER })}
                 disabled={fields.length >= 4}
               >
-                <Plus className="mr-2 h-4 w-4" /> {t.podcasts.addSpeaker}
+                <Plus className="mr-2 h-4 w-4" /> {t('podcasts.addSpeaker')}
               </Button>
             </div>
             <Separator />
@@ -240,7 +240,7 @@ export function SpeakerProfileFormDialog({
               <div key={field.id} className="rounded-lg border p-4 space-y-4">
                 <div className="flex items-center justify-between">
                   <p className="text-sm font-semibold">
-                    {t.podcasts.speakerNumber.replace('{number}', (index + 1).toString())}
+                    {t('podcasts.speakerNumber').replace('{number}', (index + 1).toString())}
                   </p>
                   <Button
                     type="button"
@@ -250,16 +250,16 @@ export function SpeakerProfileFormDialog({
                     disabled={fields.length <= 1}
                     className="text-destructive"
                   >
-                    <Trash2 className="mr-2 h-4 w-4" /> {t.common.remove}
+                    <Trash2 className="mr-2 h-4 w-4" /> {t('common.remove')}
                   </Button>
                 </div>
                 <div className="grid gap-4 md:grid-cols-2">
                   <div className="space-y-2">
-                    <Label htmlFor={`speaker-name-${index}`}>{t.common.name} *</Label>
+                    <Label htmlFor={`speaker-name-${index}`}>{t('common.name')} *</Label>
                     <Input
                       id={`speaker-name-${index}`}
                       {...register(`speakers.${index}.name` as const)}
-                      placeholder={t.podcasts.hostPlaceholder.replace('{number}', (index + 1).toString())}
+                      placeholder={t('podcasts.hostPlaceholder').replace('{number}', (index + 1).toString())}
                       autoComplete="off"
                     />
                     {errors.speakers?.[index]?.name ? (
@@ -269,7 +269,7 @@ export function SpeakerProfileFormDialog({
                     ) : null}
                   </div>
                   <div className="space-y-2">
-                    <Label htmlFor={`speaker-voice-${index}`}>{t.podcasts.voiceId} *</Label>
+                    <Label htmlFor={`speaker-voice-${index}`}>{t('podcasts.voiceId')} *</Label>
                     <Input
                       id={`speaker-voice-${index}`}
                       {...register(`speakers.${index}.voice_id` as const)}
@@ -284,11 +284,11 @@ export function SpeakerProfileFormDialog({
                   </div>
                 </div>
                 <div className="space-y-2">
-                  <Label htmlFor={`speaker-backstory-${index}`}>{t.podcasts.backstory} *</Label>
+                  <Label htmlFor={`speaker-backstory-${index}`}>{t('podcasts.backstory')} *</Label>
                   <Textarea
                     id={`speaker-backstory-${index}`}
                     rows={3}
-                    placeholder={t.podcasts.backstoryPlaceholder}
+                    placeholder={t('podcasts.backstoryPlaceholder')}
                     {...register(`speakers.${index}.backstory` as const)}
                     autoComplete="off"
                   />
@@ -299,11 +299,11 @@ export function SpeakerProfileFormDialog({
                   ) : null}
                 </div>
                 <div className="space-y-2">
-                  <Label htmlFor={`speaker-personality-${index}`}>{t.podcasts.personality} *</Label>
+                  <Label htmlFor={`speaker-personality-${index}`}>{t('podcasts.personality')} *</Label>
                   <Textarea
                     id={`speaker-personality-${index}`}
                     rows={3}
-                    placeholder={t.podcasts.personalityPlaceholder}
+                    placeholder={t('podcasts.personalityPlaceholder')}
                     {...register(`speakers.${index}.personality` as const)}
                     autoComplete="off"
                   />
@@ -319,11 +319,11 @@ export function SpeakerProfileFormDialog({
                   render={({ field: vmField }) => (
                     <div>
                       <ModelSelector
-                        label={t.podcasts.perSpeakerTtsOverride}
+                        label={t('podcasts.perSpeakerTtsOverride')}
                         modelType="text_to_speech"
                         value={vmField.value ?? ''}
                         onChange={(v) => vmField.onChange(v || null)}
-                        placeholder={t.podcasts.useProfileDefault}
+                        placeholder={t('podcasts.useProfileDefault')}
                       />
                     </div>
                   )}
@@ -342,14 +342,14 @@ export function SpeakerProfileFormDialog({
               variant="outline"
               onClick={() => onOpenChange(false)}
             >
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button type="submit" disabled={disableSubmit}>
               {isSubmitting
-                ? t.common.saving
+                ? t('common.saving')
                 : isEdit
-                  ? t.common.saveChanges
-                  : t.podcasts.createProfile}
+                  ? t('common.saveChanges')
+                  : t('podcasts.createProfile')}
             </Button>
           </div>
         </form>
diff --git a/frontend/src/components/search/AdvancedModelsDialog.tsx b/frontend/src/components/search/AdvancedModelsDialog.tsx
index b9ede6f6..23bc7729 100644
--- a/frontend/src/components/search/AdvancedModelsDialog.tsx
+++ b/frontend/src/components/search/AdvancedModelsDialog.tsx
@@ -59,44 +59,44 @@ export function AdvancedModelsDialog({
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent className="sm:max-w-[500px]">
         <DialogHeader>
-          <DialogTitle>{t.searchPage.advancedModelTitle}</DialogTitle>
+          <DialogTitle>{t('searchPage.advancedModelTitle')}</DialogTitle>
           <DialogDescription>
-            {t.searchPage.advancedModelDesc}
+            {t('searchPage.advancedModelDesc')}
           </DialogDescription>
         </DialogHeader>
 
         <div className="space-y-4 py-4">
           <ModelSelector
-            label={t.searchPage.strategyModel}
+            label={t('searchPage.strategyModel')}
             modelType="language"
             value={strategyModel}
             onChange={setStrategyModel}
-            placeholder={t.searchPage.selectStrategyPlaceholder}
+            placeholder={t('searchPage.selectStrategyPlaceholder')}
           />
 
           <ModelSelector
-            label={t.searchPage.answerModel}
+            label={t('searchPage.answerModel')}
             modelType="language"
             value={answerModel}
             onChange={setAnswerModel}
-            placeholder={t.searchPage.selectAnswerPlaceholder}
+            placeholder={t('searchPage.selectAnswerPlaceholder')}
           />
 
           <ModelSelector
-            label={t.searchPage.finalAnswerModel}
+            label={t('searchPage.finalAnswerModel')}
             modelType="language"
             value={finalAnswerModel}
             onChange={setFinalAnswerModel}
-            placeholder={t.searchPage.selectFinalPlaceholder}
+            placeholder={t('searchPage.selectFinalPlaceholder')}
           />
         </div>
 
         <DialogFooter>
           <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t.common.cancel}
+            {t('common.cancel')}
           </Button>
           <Button onClick={handleSave}>
-            {t.searchPage.saveChanges}
+            {t('searchPage.saveChanges')}
           </Button>
         </DialogFooter>
       </DialogContent>
diff --git a/frontend/src/components/search/SaveToNotebooksDialog.tsx b/frontend/src/components/search/SaveToNotebooksDialog.tsx
index 2fb92ca4..93de2a71 100644
--- a/frontend/src/components/search/SaveToNotebooksDialog.tsx
+++ b/frontend/src/components/search/SaveToNotebooksDialog.tsx
@@ -45,7 +45,7 @@ export function SaveToNotebooksDialog({
 
   const handleSave = async () => {
     if (selectedNotebooks.length === 0) {
-      toast.error(t.searchPage.selectNotebook)
+      toast.error(t('searchPage.selectNotebook'))
       return
     }
 
@@ -60,11 +60,11 @@ export function SaveToNotebooksDialog({
         })
       }
 
-      toast.success(t.searchPage.saveSuccess)
+      toast.success(t('searchPage.saveSuccess'))
       setSelectedNotebooks([])
       onOpenChange(false)
     } catch {
-      toast.error(t.searchPage.saveError)
+      toast.error(t('searchPage.saveError'))
     }
   }
 
@@ -78,9 +78,9 @@ export function SaveToNotebooksDialog({
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent className="sm:max-w-[500px]">
         <DialogHeader>
-          <DialogTitle>{t.searchPage.saveToNotebooks}</DialogTitle>
+          <DialogTitle>{t('searchPage.saveToNotebooks')}</DialogTitle>
           <DialogDescription>
-            {t.searchPage.selectNotebook}
+            {t('searchPage.selectNotebook')}
           </DialogDescription>
         </DialogHeader>
 
@@ -94,14 +94,14 @@ export function SaveToNotebooksDialog({
               items={notebookItems}
               selectedIds={selectedNotebooks}
               onToggle={handleToggle}
-              emptyMessage={t.sources.noNotebooksFound}
+              emptyMessage={t('sources.noNotebooksFound')}
             />
           )}
         </div>
 
         <DialogFooter>
           <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t.common.cancel}
+            {t('common.cancel')}
           </Button>
           <Button
             onClick={handleSave}
@@ -110,10 +110,10 @@ export function SaveToNotebooksDialog({
             {createNote.isPending ? (
               <>
                 <LoadingSpinner size="sm" className="mr-2" />
-                {t.searchPage.saving}
+                {t('searchPage.saving')}
               </>
             ) : (
-              t.searchPage.saveToNotebook
+              t('searchPage.saveToNotebook')
             )}
           </Button>
         </DialogFooter>
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index bc1cc35a..d53f99f5 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -46,7 +46,7 @@ export function StreamingResponse({
       // This try-catch is here for future enhancements or unexpected errors.
     } catch {
       const typeLabel = type === 'source_insight' ? 'insight' : type
-      toast.error(t.common.itemNotFound.replace('{type}', typeLabel))
+      toast.error(t('common.itemNotFound').replace('{type}', typeLabel))
     }
   }
 
@@ -58,7 +58,7 @@ export function StreamingResponse({
     <div
       className="space-y-4 mt-6 max-h-[60vh] overflow-y-auto pr-2"
       role="region"
-      aria-label={t.common.accessibility.askResponse}
+      aria-label={t('common.accessibility.askResponse')}
       aria-live="polite"
       aria-busy={isStreaming}
     >
@@ -70,7 +70,7 @@ export function StreamingResponse({
               <CollapsibleTrigger className="flex items-center justify-between w-full hover:opacity-80">
                 <CardTitle className="text-base flex items-center gap-2">
                   <Sparkles className="h-4 w-4 text-primary" />
-                  {t.common.strategy}
+                  {t('common.strategy')}
                 </CardTitle>
                 <ChevronDown className={`h-4 w-4 transition-transform ${strategyOpen ? 'rotate-180' : ''}`} />
               </CollapsibleTrigger>
@@ -78,12 +78,12 @@ export function StreamingResponse({
             <CollapsibleContent>
               <CardContent className="space-y-3 pt-0">
                 <div>
-                  <p className="text-sm text-muted-foreground mb-2">{t.common.reasoning}:</p>
+                  <p className="text-sm text-muted-foreground mb-2">{t('common.reasoning')}:</p>
                   <p className="text-sm">{strategy.reasoning}</p>
                 </div>
                 {strategy.searches.length > 0 && (
                   <div>
-                    <p className="text-sm text-muted-foreground mb-2">{t.common.searchTerms}:</p>
+                    <p className="text-sm text-muted-foreground mb-2">{t('common.searchTerms')}:</p>
                     <div className="space-y-2">
                       {strategy.searches.map((search, i) => (
                         <div key={i} className="flex items-start gap-2">
@@ -111,7 +111,7 @@ export function StreamingResponse({
               <CollapsibleTrigger className="flex items-center justify-between w-full hover:opacity-80">
                 <CardTitle className="text-base flex items-center gap-2">
                   <Lightbulb className="h-4 w-4 text-primary" />
-                  {t.common.individualAnswers.replace('{count}', answers.length.toString())}
+                  {t('common.individualAnswers').replace('{count}', answers.length.toString())}
                 </CardTitle>
                 <ChevronDown className={`h-4 w-4 transition-transform ${answersOpen ? 'rotate-180' : ''}`} />
               </CollapsibleTrigger>
@@ -135,7 +135,7 @@ export function StreamingResponse({
           <CardHeader>
             <CardTitle className="text-base flex items-center gap-2">
               <CheckCircle className="h-4 w-4 text-primary" />
-              {t.common.finalAnswer}
+              {t('common.finalAnswer')}
             </CardTitle>
           </CardHeader>
           <CardContent>
@@ -151,7 +151,7 @@ export function StreamingResponse({
       {isStreaming && !finalAnswer && (
         <div className="flex items-center gap-2 text-sm text-muted-foreground">
           <LoadingSpinner size="sm" />
-          <span>{t.searchPage.processingQuestion}</span>
+          <span>{t('searchPage.processingQuestion')}</span>
         </div>
       )}
     </div>
diff --git a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
index b13b93ab..a0969bbd 100644
--- a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
+++ b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
@@ -57,49 +57,49 @@ export function EmbeddingModelChangeDialog({
         <AlertDialogHeader>
           <div className="flex items-center gap-2 mb-2">
             <AlertTriangle className="h-5 w-5 text-yellow-500" />
-            <AlertDialogTitle>{t.models.embeddingChangeTitle}</AlertDialogTitle>
+            <AlertDialogTitle>{t('models.embeddingChangeTitle')}</AlertDialogTitle>
           </div>
           <AlertDialogDescription asChild>
             <div className="space-y-3 text-base text-muted-foreground">
               <p>
-                {t.models.embeddingChangeConfirm
+                {t('models.embeddingChangeConfirm')
                   .replace('{from}', oldModelName || '...')
                   .replace('{to}', newModelName || '...')}
               </p>
 
               <div className="bg-muted p-4 rounded-md space-y-2">
-                <p className="font-semibold text-foreground">{t.models.rebuildRequired}</p>
+                <p className="font-semibold text-foreground">{t('models.rebuildRequired')}</p>
                 <p className="text-sm">
-                  {t.models.rebuildReason}
+                  {t('models.rebuildReason')}
                 </p>
               </div>
 
               <div className="space-y-2 text-sm">
-                <p className="font-medium text-foreground">{t.models.whatHappensNext}</p>
+                <p className="font-medium text-foreground">{t('models.whatHappensNext')}</p>
                 <ul className="list-disc list-inside space-y-1 ml-2">
-                  <li>{t.models.step1}</li>
-                  <li>{t.models.step2}</li>
-                  <li>{t.models.step3}</li>
-                  <li>{t.models.step4}</li>
+                  <li>{t('models.step1')}</li>
+                  <li>{t('models.step2')}</li>
+                  <li>{t('models.step3')}</li>
+                  <li>{t('models.step4')}</li>
                 </ul>
               </div>
 
               <p className="text-sm font-medium text-foreground">
-                {t.models.proceedToRebuildPrompt}
+                {t('models.proceedToRebuildPrompt')}
               </p>
             </div>
           </AlertDialogDescription>
         </AlertDialogHeader>
         <AlertDialogFooter className="flex-col sm:flex-row gap-2">
           <AlertDialogCancel disabled={isConfirming}>
-            {t.common.cancel}
+            {t('common.cancel')}
           </AlertDialogCancel>
           <Button
             variant="outline"
             onClick={handleConfirmOnly}
             disabled={isConfirming}
           >
-            {t.models.changeModelOnly}
+            {t('models.changeModelOnly')}
           </Button>
           <AlertDialogAction
             onClick={handleConfirmAndRebuild}
@@ -107,7 +107,7 @@ export function EmbeddingModelChangeDialog({
             className="bg-primary"
           >
             <ExternalLink className="mr-2 h-4 w-4" />
-            {t.models.changeAndRebuild}
+            {t('models.changeAndRebuild')}
           </AlertDialogAction>
         </AlertDialogFooter>
       </AlertDialogContent>
diff --git a/frontend/src/components/settings/MigrationBanner.tsx b/frontend/src/components/settings/MigrationBanner.tsx
index e23bcd5a..c7bb9129 100644
--- a/frontend/src/components/settings/MigrationBanner.tsx
+++ b/frontend/src/components/settings/MigrationBanner.tsx
@@ -22,11 +22,11 @@ export function MigrationBanner({ providersToMigrate }: MigrationBannerProps) {
     <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
       <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
       <AlertTitle className="text-amber-800 dark:text-amber-200">
-        {t.apiKeys.migrationAvailable}
+        {t('apiKeys.migrationAvailable')}
       </AlertTitle>
       <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
         <span className="text-amber-700 dark:text-amber-300">
-          {t.apiKeys.migrationDescription.replace('{count}', providersToMigrate.length.toString())}
+          {t('apiKeys.migrationDescription').replace('{count}', providersToMigrate.length.toString())}
         </span>
         <Button
           variant="outline"
@@ -38,11 +38,11 @@ export function MigrationBanner({ providersToMigrate }: MigrationBannerProps) {
           {migrate.isPending ? (
             <>
               <Loader2 className="mr-2 h-4 w-4 animate-spin" />
-              {t.apiKeys.migrating}
+              {t('apiKeys.migrating')}
             </>
           ) : (
             <>
-              {t.apiKeys.migrateToDatabase}
+              {t('apiKeys.migrateToDatabase')}
               <ArrowRight className="ml-2 h-4 w-4" />
             </>
           )}
diff --git a/frontend/src/components/settings/ModelTestResultDialog.tsx b/frontend/src/components/settings/ModelTestResultDialog.tsx
index 10be66a4..153a610b 100644
--- a/frontend/src/components/settings/ModelTestResultDialog.tsx
+++ b/frontend/src/components/settings/ModelTestResultDialog.tsx
@@ -37,7 +37,7 @@ export function ModelTestResultDialog({
             ) : (
               <X className="h-5 w-5 text-destructive" />
             )}
-            {result.success ? t.models.testModelSuccess : t.models.testModelFailed}
+            {result.success ? t('models.testModelSuccess') : t('models.testModelFailed')}
           </DialogTitle>
         </DialogHeader>
 
@@ -54,7 +54,7 @@ export function ModelTestResultDialog({
 
         <DialogFooter>
           <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t.common.done}
+            {t('common.done')}
           </Button>
         </DialogFooter>
       </DialogContent>
diff --git a/frontend/src/components/source/ChatPanel.tsx b/frontend/src/components/source/ChatPanel.tsx
index 058699d9..3908082c 100644
--- a/frontend/src/components/source/ChatPanel.tsx
+++ b/frontend/src/components/source/ChatPanel.tsx
@@ -92,7 +92,7 @@ export function ChatPanel({
       // The modal component itself will handle displaying "not found" states.
       // This try-catch is here for future enhancements or unexpected errors.
     } catch {
-      toast.error(t.common.noResults)
+      toast.error(t('common.noResults'))
     }
   }
 
@@ -130,7 +130,7 @@ export function ChatPanel({
         <div className="flex items-center justify-between">
           <CardTitle className="flex items-center gap-2">
             <Bot className="h-5 w-5" />
-            {title || (contextType === 'source' ? t.chat.chatWith.replace('{name}', t.navigation.sources) : t.chat.chatWith.replace('{name}', t.common.notebook))}
+            {title || (contextType === 'source' ? t('chat.chatWith').replace('{name}', t('navigation.sources')) : t('chat.chatWith').replace('{name}', t('common.notebook')))}
           </CardTitle>
           {onSelectSession && onCreateSession && onDeleteSession && (
             <Dialog open={sessionManagerOpen} onOpenChange={setSessionManagerOpen}>
@@ -142,10 +142,10 @@ export function ChatPanel({
                 disabled={loadingSessions}
               >
                 <Clock className="h-4 w-4" />
-                <span className="text-xs">{t.chat.sessions}</span>
+                <span className="text-xs">{t('chat.sessions')}</span>
               </Button>
               <DialogContent className="sm:max-w-[420px] p-0 overflow-hidden">
-                <DialogTitle className="sr-only">{t.chat.sessionsTitle}</DialogTitle>
+                <DialogTitle className="sr-only">{t('chat.sessionsTitle')}</DialogTitle>
                 <SessionManager
                   sessions={sessions}
                   currentSessionId={currentSessionId ?? null}
@@ -170,9 +170,9 @@ export function ChatPanel({
               <div className="text-center text-muted-foreground py-8">
                 <Bot className="h-12 w-12 mx-auto mb-4 opacity-50" />
                 <p className="text-sm">
-                  {t.chat.startConversation.replace('{type}', contextType === 'source' ? t.navigation.sources : t.common.notebook)}
+                  {t('chat.startConversation').replace('{type}', contextType === 'source' ? t('navigation.sources') : t('common.notebook'))}
                 </p>
-                <p className="text-xs mt-2">{t.chat.askQuestions}</p>
+                <p className="text-xs mt-2">{t('chat.askQuestions')}</p>
               </div>
             ) : (
               messages.map((message) => (
@@ -246,19 +246,19 @@ export function ChatPanel({
               {contextIndicators.sources?.length > 0 && (
                 <Badge variant="outline" className="gap-1">
                   <FileText className="h-3 w-3" />
-                  {contextIndicators.sources.length} {t.navigation.sources}
+                  {contextIndicators.sources.length} {t('navigation.sources')}
                 </Badge>
               )}
               {contextIndicators.insights?.length > 0 && (
                 <Badge variant="outline" className="gap-1">
                   <Lightbulb className="h-3 w-3" />
-                  {contextIndicators.insights.length} {contextIndicators.insights.length === 1 ? t.common.insight : t.common.insights}
+                  {contextIndicators.insights.length} {contextIndicators.insights.length === 1 ? t('common.insight') : t('common.insights')}
                 </Badge>
               )}
               {contextIndicators.notes?.length > 0 && (
                 <Badge variant="outline" className="gap-1">
                   <StickyNote className="h-3 w-3" />
-                  {contextIndicators.notes.length} {contextIndicators.notes.length === 1 ? t.common.note : t.common.notes}
+                  {contextIndicators.notes.length} {contextIndicators.notes.length === 1 ? t('common.note') : t('common.notes')}
                 </Badge>
               )}
             </div>
@@ -281,7 +281,7 @@ export function ChatPanel({
           {/* Model selector */}
           {onModelChange && (
             <div className="flex items-center justify-between">
-              <span className="text-xs text-muted-foreground">{t.chat.model}</span>
+              <span className="text-xs text-muted-foreground">{t('chat.model')}</span>
               <ModelSelector
                 currentModel={modelOverride}
                 onModelChange={onModelChange}
@@ -298,7 +298,7 @@ export function ChatPanel({
               value={input}
               onChange={(e) => setInput(e.target.value)}
               onKeyDown={handleKeyDown}
-              placeholder={`${t.chat.sendPlaceholder} (${t.chat.pressToSend.replace('{key}', keyHint)})`}
+              placeholder={`${t('chat.sendPlaceholder')} (${t('chat.pressToSend').replace('{key}', keyHint)})`}
               disabled={isStreaming}
               className="flex-1 min-h-[40px] max-h-[100px] resize-none py-2 px-3 min-w-0"
               rows={1}
@@ -334,7 +334,7 @@ function AIMessageContent({
 }) {
   const { t } = useTranslation()
   // Convert references to compact markdown with numbered citations
-  const markdownWithCompactRefs = convertReferencesToCompactMarkdown(content, t.common.references)
+  const markdownWithCompactRefs = convertReferencesToCompactMarkdown(content, t('common.references'))
 
   // Create custom link component for compact references
   const LinkComponent = createCompactReferenceLinkComponent(onReferenceClick)
diff --git a/frontend/src/components/source/MessageActions.tsx b/frontend/src/components/source/MessageActions.tsx
index 8ccb3f68..a878f4c8 100644
--- a/frontend/src/components/source/MessageActions.tsx
+++ b/frontend/src/components/source/MessageActions.tsx
@@ -20,7 +20,7 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
 
   const handleSaveToNote = () => {
     if (!notebookId) {
-      toast.error(t.sources.cannotSaveNoteNoNotebook)
+      toast.error(t('sources.cannotSaveNoteNoNotebook'))
       return
     }
 
@@ -37,7 +37,7 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
       // Try modern clipboard API first
       if (navigator.clipboard && navigator.clipboard.writeText) {
         await navigator.clipboard.writeText(content)
-        toast.success(t.common.copyToClipboard)
+        toast.success(t('common.copyToClipboard'))
         setCopySuccess(true)
         setTimeout(() => setCopySuccess(false), 2000)
       } else {
@@ -53,18 +53,18 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
 
         try {
           document.execCommand('copy')
-          toast.success(t.common.copyToClipboard)
+          toast.success(t('common.copyToClipboard'))
           setCopySuccess(true)
           setTimeout(() => setCopySuccess(false), 2000)
         } catch {
-          toast.error(t.common.error)
+          toast.error(t('common.error'))
         }
 
         document.body.removeChild(textArea)
       }
     } catch (err) {
       console.error('Failed to copy to clipboard:', err)
-      toast.error(t.common.error)
+      toast.error(t('common.error'))
     }
   }
 
@@ -89,7 +89,7 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
               </Button>
             </TooltipTrigger>
             <TooltipContent>
-              <p>{t.common.saveToNote}</p>
+              <p>{t('common.saveToNote')}</p>
             </TooltipContent>
           </Tooltip>
         )}
@@ -110,7 +110,7 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
             </Button>
           </TooltipTrigger>
           <TooltipContent>
-            <p>{t.common.copyToClipboard}</p>
+            <p>{t('common.copyToClipboard')}</p>
           </TooltipContent>
         </Tooltip>
       </div>
diff --git a/frontend/src/components/source/ModelSelector.tsx b/frontend/src/components/source/ModelSelector.tsx
index 02824e4d..18595b6d 100644
--- a/frontend/src/components/source/ModelSelector.tsx
+++ b/frontend/src/components/source/ModelSelector.tsx
@@ -67,8 +67,8 @@ export function ModelSelector({
     if (defaultModel) {
       return defaultModel.name
     }
-    return t.common.default
-  }, [currentModel, languageModels, defaultModel, t.common.default])
+    return t('common.default')
+  }, [currentModel, languageModels, defaultModel, t('common.default')])
 
   const handleSave = () => {
     onModelChange(selectedModel === 'default' ? undefined : selectedModel)
@@ -100,26 +100,26 @@ export function ModelSelector({
         <DialogHeader>
           <DialogTitle className="flex items-center gap-2">
             <Sparkles className="h-5 w-5" />
-            {t.common.modelConfiguration}
+            {t('common.modelConfiguration')}
           </DialogTitle>
           <DialogDescription>
-            {t.transformations.overrideModelDesc}
+            {t('transformations.overrideModelDesc')}
           </DialogDescription>
         </DialogHeader>
         <div className="grid gap-4 py-4">
           <div className="grid gap-2">
-            <Label htmlFor="model">{t.common.model}</Label>
+            <Label htmlFor="model">{t('common.model')}</Label>
             <Select value={selectedModel} onValueChange={setSelectedModel}>
               <SelectTrigger id="model">
-                <SelectValue placeholder={t.models.selectModelPlaceholder} />
+                <SelectValue placeholder={t('models.selectModelPlaceholder')} />
               </SelectTrigger>
               <SelectContent>
                 <SelectItem value="default">
                   <div className="flex items-center justify-between w-full">
                     <span>
                       {defaultModel 
-                        ? `${t.common.default} (${defaultModel.name})` 
-                        : t.transformations.systemDefault}
+                        ? `${t('common.default')} (${defaultModel.name})` 
+                        : t('transformations.systemDefault')}
                     </span>
                     {defaultModel?.provider && (
                       <span className="text-xs text-muted-foreground ml-2">
@@ -150,7 +150,7 @@ export function ModelSelector({
           {selectedModel && selectedModel !== 'default' && (
             <div className="rounded-lg bg-muted p-3">
               <p className="text-sm text-muted-foreground">
-                {t.transformations.sessionUseReplacement.replace(
+                {t('transformations.sessionUseReplacement').replace(
                   '{name}', 
                   languageModels.find(m => m.id === selectedModel)?.name || selectedModel
                 )}
@@ -160,10 +160,10 @@ export function ModelSelector({
         </div>
         <DialogFooter className="flex justify-between">
           <Button variant="outline" onClick={handleReset}>
-            {t.common.resetToDefault}
+            {t('common.resetToDefault')}
           </Button>
           <Button onClick={handleSave}>
-            {t.common.saveChanges}
+            {t('common.saveChanges')}
           </Button>
         </DialogFooter>
       </DialogContent>
diff --git a/frontend/src/components/source/NotebookAssociations.tsx b/frontend/src/components/source/NotebookAssociations.tsx
index cf037d72..a9323220 100644
--- a/frontend/src/components/source/NotebookAssociations.tsx
+++ b/frontend/src/components/source/NotebookAssociations.tsx
@@ -110,10 +110,10 @@ export function NotebookAssociations({
         <CardHeader>
           <CardTitle className="flex items-center gap-2">
             <BookOpen className="h-5 w-5" />
-            {t.sources.manageNotebooks}
+            {t('sources.manageNotebooks')}
           </CardTitle>
           <CardDescription>
-            {t.sources.manageNotebooksDesc}
+            {t('sources.manageNotebooksDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent>
@@ -131,14 +131,14 @@ export function NotebookAssociations({
         <CardHeader>
           <CardTitle className="flex items-center gap-2">
             <BookOpen className="h-5 w-5" />
-            {t.sources.manageNotebooks}
+            {t('sources.manageNotebooks')}
           </CardTitle>
           <CardDescription>
-            {t.sources.manageNotebooksDesc}
+            {t('sources.manageNotebooksDesc')}
           </CardDescription>
         </CardHeader>
         <CardContent>
-          <p className="text-sm text-muted-foreground">{t.sources.noNotebooksAvailable}</p>
+          <p className="text-sm text-muted-foreground">{t('sources.noNotebooksAvailable')}</p>
         </CardContent>
       </Card>
     )
@@ -149,10 +149,10 @@ export function NotebookAssociations({
       <CardHeader>
         <CardTitle className="flex items-center gap-2">
           <BookOpen className="h-5 w-5" />
-          {t.sources.manageNotebooks}
+          {t('sources.manageNotebooks')}
         </CardTitle>
         <CardDescription>
-          {t.sources.manageNotebooksDesc}
+          {t('sources.manageNotebooksDesc')}
         </CardDescription>
       </CardHeader>
       <CardContent className="space-y-4">
@@ -205,7 +205,7 @@ export function NotebookAssociations({
               onClick={handleCancel}
               disabled={isSaving}
             >
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
             <Button
               size="sm"
@@ -215,10 +215,10 @@ export function NotebookAssociations({
               {isSaving ? (
                 <>
                   <LoaderIcon className="mr-2 h-4 w-4 animate-spin" />
-                  {t.common.saving}...
+                  {t('common.saving')}...
                 </>
               ) : (
-                t.common.saveChanges
+                t('common.saveChanges')
               )}
             </Button>
           </div>
diff --git a/frontend/src/components/source/SessionManager.tsx b/frontend/src/components/source/SessionManager.tsx
index 3a51905b..d169f5f2 100644
--- a/frontend/src/components/source/SessionManager.tsx
+++ b/frontend/src/components/source/SessionManager.tsx
@@ -60,7 +60,7 @@ export function SessionManager({
   const { data: models } = useModels()
 
   // Helper to get model name from ID
-  const customModelLabel = t.common.customModel
+  const customModelLabel = t('common.customModel')
   const getModelName = useMemo(() => {
     return (modelId: string) => {
       const model = models?.find(m => m.id === modelId)
@@ -108,7 +108,7 @@ export function SessionManager({
           <CardTitle className="flex items-center justify-between">
             <span className="flex items-center gap-2">
               <MessageSquare className="h-5 w-5" />
-              {t.chat.sessions}
+              {t('chat.sessions')}
             </span>
             <Button
               size="sm"
@@ -126,7 +126,7 @@ export function SessionManager({
                 <Input
                   value={newSessionTitle}
                   onChange={(e) => setNewSessionTitle(e.target.value)}
-                  placeholder={t.chat.sessionTitlePlaceholder}
+                  placeholder={t('chat.sessionTitlePlaceholder')}
                   className="mb-2"
                   autoFocus
                   onKeyPress={(e) => {
@@ -135,7 +135,7 @@ export function SessionManager({
                 />
                 <div className="flex gap-2">
                   <Button size="sm" onClick={handleCreateSession}>
-                    {t.common.create}
+                    {t('common.create')}
                   </Button>
                   <Button
                     size="sm"
@@ -145,7 +145,7 @@ export function SessionManager({
                       setNewSessionTitle('')
                     }}
                   >
-                    {t.common.cancel}
+                    {t('common.cancel')}
                   </Button>
                 </div>
               </div>
@@ -153,13 +153,13 @@ export function SessionManager({
 
             {loadingSessions ? (
               <div className="text-center py-8 text-muted-foreground">
-                {t.common.loading}
+                {t('common.loading')}
               </div>
             ) : sessions.length === 0 ? (
               <div className="text-center py-8 text-muted-foreground">
                 <MessageSquare className="h-12 w-12 mx-auto mb-4 opacity-50" />
-                <p className="text-sm">{t.chat.noSessions}</p>
-                <p className="text-xs mt-2">{t.chat.createToStart}</p>
+                <p className="text-sm">{t('chat.noSessions')}</p>
+                <p className="text-xs mt-2">{t('chat.createToStart')}</p>
               </div>
             ) : (
               <div className="space-y-2 pb-4">
@@ -231,7 +231,7 @@ export function SessionManager({
                         </div>
                         {session.message_count != null && session.message_count > 0 && (
                           <Badge variant="secondary" className="mt-2 text-xs">
-                            {t.chat.messagesCount.replace('{count}', session.message_count.toString())}
+                            {t('chat.messagesCount').replace('{count}', session.message_count.toString())}
                           </Badge>
                         )}
                         {session.model_override && (
@@ -252,15 +252,15 @@ export function SessionManager({
       <AlertDialog open={!!deleteConfirmId} onOpenChange={() => setDeleteConfirmId(null)}>
         <AlertDialogContent>
           <AlertDialogHeader>
-            <AlertDialogTitle>{t.chat.deleteSession}</AlertDialogTitle>
+            <AlertDialogTitle>{t('chat.deleteSession')}</AlertDialogTitle>
             <AlertDialogDescription>
-              {t.chat.deleteSessionDesc}
+              {t('chat.deleteSessionDesc')}
             </AlertDialogDescription>
           </AlertDialogHeader>
           <AlertDialogFooter>
-            <AlertDialogCancel>{t.common.cancel}</AlertDialogCancel>
+            <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
             <AlertDialogAction onClick={handleDeleteConfirm}>
-              {t.common.delete}
+              {t('common.delete')}
             </AlertDialogAction>
           </AlertDialogFooter>
         </AlertDialogContent>
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/source/SourceDetailContent.tsx
index 87ebb404..0c24d282 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/source/SourceDetailContent.tsx
@@ -113,7 +113,7 @@ export function SourceDetailContent({
       }
     } catch (err) {
       console.error('Failed to fetch source:', err)
-      setError(t.sources.loadFailed)
+      setError(t('sources.loadFailed'))
     } finally {
       setLoading(false)
     }
@@ -150,7 +150,7 @@ export function SourceDetailContent({
 
   const createInsight = async () => {
     if (!selectedTransformation) {
-      toast.error(t.sources.selectTransformation)
+      toast.error(t('sources.selectTransformation'))
       return
     }
 
@@ -160,7 +160,7 @@ export function SourceDetailContent({
         transformation_id: selectedTransformation
       })
       // Show toast for async operation
-      toast.success(t.sources.insightGenerationStarted)
+      toast.success(t('sources.insightGenerationStarted'))
       setSelectedTransformation('')
 
       // Poll for command completion if we have a command_id
@@ -188,7 +188,7 @@ export function SourceDetailContent({
       }
     } catch (err) {
       console.error('Failed to create insight:', err)
-      toast.error(t.common.error)
+      toast.error(t('common.error'))
     } finally {
       setCreatingInsight(false)
     }
@@ -201,12 +201,12 @@ export function SourceDetailContent({
     try {
       setDeletingInsight(true)
       await insightsApi.delete(insightToDelete)
-      toast.success(t.common.success)
+      toast.success(t('common.success'))
       setInsightToDelete(null)
       await fetchInsights()
     } catch (err) {
       console.error('Failed to delete insight:', err)
-      toast.error(t.common.error)
+      toast.error(t('common.error'))
     } finally {
       setDeletingInsight(false)
     }
@@ -217,11 +217,11 @@ export function SourceDetailContent({
 
     try {
       await sourcesApi.update(sourceId, { title })
-      toast.success(t.common.success)
+      toast.success(t('common.success'))
       setSource({ ...source, title })
     } catch (err) {
       console.error('Failed to update source title:', err)
-      toast.error(t.common.error)
+      toast.error(t('common.error'))
       await fetchSource()
     }
   }
@@ -232,11 +232,11 @@ export function SourceDetailContent({
     try {
       setIsEmbedding(true)
       const response = await embeddingApi.embedContent(sourceId, 'source')
-      toast.success(response.message || t.common.success)
+      toast.success(response.message || t('common.success'))
       await fetchSource()
     } catch (err) {
       console.error('Failed to embed content:', err)
-      toast.error(t.common.error)
+      toast.error(t('common.error'))
     } finally {
       setIsEmbedding(false)
     }
@@ -288,14 +288,14 @@ export function SourceDetailContent({
       document.body.removeChild(link)
       window.URL.revokeObjectURL(blobUrl)
       setFileAvailable(true)
-      toast.success(t.common.success)
+      toast.success(t('common.success'))
     } catch (err) {
       console.error('Failed to download file:', err)
       if (isAxiosError(err) && err.response?.status === 404) {
         setFileAvailable(false)
-        toast.error(t.sources.fileUnavailable)
+        toast.error(t('sources.fileUnavailable'))
       } else {
-        toast.error(t.common.error)
+        toast.error(t('common.error'))
       }
     } finally {
       setIsDownloadingFile(false)
@@ -320,7 +320,7 @@ export function SourceDetailContent({
     if (source?.asset?.url) {
       navigator.clipboard.writeText(source.asset.url)
       setCopied(true)
-      toast.success(t.sources.urlCopied)
+      toast.success(t('sources.urlCopied'))
       setTimeout(() => setCopied(false), 2000)
     }
   }, [source, t])
@@ -357,14 +357,14 @@ export function SourceDetailContent({
   const handleDelete = async () => {
     if (!source) return
 
-    if (confirm(t.sources.deleteSourceConfirm || t.common.confirm)) {
+    if (confirm(t('sources.deleteSourceConfirm') || t('common.confirm'))) {
       try {
         await sourcesApi.delete(source.id)
-        toast.success(t.common.success)
+        toast.success(t('common.success'))
         onClose?.()
       } catch (error) {
         console.error('Failed to delete source:', error)
-        toast.error(t.common.error)
+        toast.error(t('common.error'))
       }
     }
   }
@@ -380,7 +380,7 @@ export function SourceDetailContent({
   if (error || !source) {
     return (
       <div className="flex h-full flex-col items-center justify-center gap-4 p-8">
-        <p className="text-red-500">{error || t.sources.notFound}</p>
+        <p className="text-red-500">{error || t('sources.notFound')}</p>
       </div>
     )
   }
@@ -396,11 +396,11 @@ export function SourceDetailContent({
               onSave={handleUpdateTitle}
               className="text-2xl font-bold"
               inputClassName="text-2xl font-bold"
-              placeholder={t.sources.titlePlaceholder}
-              emptyText={t.sources.untitledSource}
+              placeholder={t('sources.titlePlaceholder')}
+              emptyText={t('sources.untitledSource')}
             />
             <p className="mt-1 text-sm text-muted-foreground">
-              {t.sources.id}: {source.id}
+              {t('sources.id')}: {source.id}
             </p>
           </div>
           <div className="flex items-center gap-2">
@@ -413,7 +413,7 @@ export function SourceDetailContent({
             {showChatButton && onChatClick && (
               <Button variant="outline" size="sm" onClick={onChatClick}>
                 <MessageSquare className="h-4 w-4 mr-2" />
-                {t.chat.chatWith.replace('{name}', t.navigation.sources)}
+                {t('chat.chatWith').replace('{name}', t('navigation.sources'))}
               </Button>
             )}
 
@@ -432,10 +432,10 @@ export function SourceDetailContent({
                     >
                       <Download className="mr-2 h-4 w-4" />
                       {fileAvailable === false
-                        ? t.sources.fileUnavailable
+                        ? t('sources.fileUnavailable')
                         : isDownloadingFile
-                          ? t.sources.preparing
-                          : t.sources.downloadFile}
+                          ? t('sources.preparing')
+                          : t('sources.downloadFile')}
                     </DropdownMenuItem>
                     <DropdownMenuSeparator />
                   </>
@@ -445,7 +445,7 @@ export function SourceDetailContent({
                   disabled={isEmbedding || source.embedded}
                 >
                   <Database className="mr-2 h-4 w-4" />
-                  {isEmbedding ? t.sources.embedding : source.embedded ? t.sources.alreadyEmbedded : t.sources.embedContent}
+                  {isEmbedding ? t('sources.embedding') : source.embedded ? t('sources.alreadyEmbedded') : t('sources.embedContent')}
                 </DropdownMenuItem>
                 <DropdownMenuSeparator />
                 <DropdownMenuItem
@@ -453,7 +453,7 @@ export function SourceDetailContent({
                   onClick={handleDelete}
                 >
                   <Trash2 className="mr-2 h-4 w-4" />
-                  {t.sources.deleteSource}
+                  {t('sources.deleteSource')}
                 </DropdownMenuItem>
               </DropdownMenuContent>
             </DropdownMenu>
@@ -465,11 +465,11 @@ export function SourceDetailContent({
       <div className="flex-1 overflow-y-auto px-2">
         <Tabs defaultValue="content" className="w-full">
           <TabsList className="grid w-full grid-cols-3 sticky top-0 z-10">
-            <TabsTrigger value="content">{t.sources.content}</TabsTrigger>
+            <TabsTrigger value="content">{t('sources.content')}</TabsTrigger>
             <TabsTrigger value="insights">
-              {t.common.insights} {insights.length > 0 && `(${insights.length})`}
+              {t('common.insights')} {insights.length > 0 && `(${insights.length})`}
             </TabsTrigger>
-            <TabsTrigger value="details">{t.sources.details}</TabsTrigger>
+            <TabsTrigger value="details">{t('sources.details')}</TabsTrigger>
           </TabsList>
 
           <TabsContent value="content" className="mt-6">
@@ -477,7 +477,7 @@ export function SourceDetailContent({
               <CardHeader>
                 <CardTitle className="flex items-center gap-2">
                   {isYouTubeUrl && <Youtube className="h-5 w-5" />}
-                  {t.sources.content}
+                  {t('sources.content')}
                 </CardTitle>
                 {source.asset?.url && !isYouTubeUrl && (
                   <CardDescription className="flex items-center gap-2">
@@ -499,7 +499,7 @@ export function SourceDetailContent({
                     <div className="aspect-video rounded-lg overflow-hidden bg-black">
                       <iframe
                         src={`https://www.youtube.com/embed/${youTubeVideoId}`}
-                        title={t.common.accessibility.ytVideo}
+                        title={t('common.accessibility.ytVideo')}
                         className="w-full h-full"
                         allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
                         allowFullScreen
@@ -514,7 +514,7 @@ export function SourceDetailContent({
                           className="text-sm text-muted-foreground hover:underline inline-flex items-center gap-1"
                         >
                           <ExternalLink className="h-3 w-3" />
-                          {t.sources.openOnYoutube}
+                          {t('sources.openOnYoutube')}
                         </a>
                       </div>
                     )}
@@ -543,7 +543,7 @@ export function SourceDetailContent({
                       td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
                     }}
                   >
-                    {source.full_text || t.sources.noContent}
+                    {source.full_text || t('sources.noContent')}
                   </ReactMarkdown>
                 </div>
               </CardContent>
@@ -556,12 +556,12 @@ export function SourceDetailContent({
                 <CardTitle className="flex items-center justify-between">
                   <span className="flex items-center gap-2">
                     <Lightbulb className="h-5 w-5" />
-                    {t.common.insights}
+                    {t('common.insights')}
                   </span>
                   <Badge variant="secondary">{insights.length}</Badge>
                 </CardTitle>
                 <CardDescription>
-                  {t.sources.insightsDesc}
+                  {t('sources.insightsDesc')}
                 </CardDescription>
               </CardHeader>
               <CardContent className="space-y-4">
@@ -572,7 +572,7 @@ export function SourceDetailContent({
                     className="mb-3 text-sm font-semibold flex items-center gap-2"
                   >
                     <Sparkles className="h-4 w-4" />
-                    {t.sources.generateNewInsight}
+                    {t('sources.generateNewInsight')}
                   </Label>
                   <div className="flex gap-2">
                     <Select
@@ -582,7 +582,7 @@ export function SourceDetailContent({
                       disabled={creatingInsight}
                     >
                       <SelectTrigger id="transformation-select" className="flex-1">
-                        <SelectValue placeholder={t.sources.selectTransformation} />
+                        <SelectValue placeholder={t('sources.selectTransformation')} />
                       </SelectTrigger>
                       <SelectContent>
                         {transformations.map((trans) => (
@@ -600,12 +600,12 @@ export function SourceDetailContent({
                       {creatingInsight ? (
                         <>
                           <LoadingSpinner className="mr-2 h-3 w-3" />
-                          {t.common.creating}
+                          {t('common.creating')}
                         </>
                       ) : (
                         <>
                           <Plus className="mr-2 h-4 w-4" />
-                          {t.common.create}
+                          {t('common.create')}
                         </>
                       )}
                     </Button>
@@ -620,8 +620,8 @@ export function SourceDetailContent({
                 ) : insights.length === 0 ? (
                   <div className="text-center py-8 text-muted-foreground">
                     <Lightbulb className="h-12 w-12 mx-auto mb-3 opacity-50" />
-                    <p className="text-sm">{t.sources.noInsightsYet}</p>
-                    <p className="text-xs mt-1">{t.sources.createFirstInsight}</p>
+                    <p className="text-sm">{t('sources.noInsightsYet')}</p>
+                    <p className="text-xs mt-1">{t('sources.createFirstInsight')}</p>
                   </div>
                 ) : (
                   <div className="space-y-3">
@@ -639,7 +639,7 @@ export function SourceDetailContent({
                         </p>
                         <div className="mt-3 flex justify-end gap-2">
                           <Button size="sm" variant="outline" onClick={() => setSelectedInsight(insight)}>
-                            {t.sources.viewInsight}
+                            {t('sources.viewInsight')}
                           </Button>
                           <Button
                             size="sm"
@@ -661,7 +661,7 @@ export function SourceDetailContent({
           <TabsContent value="details" className="mt-6">
             <Card>
               <CardHeader>
-                <CardTitle>{t.sources.details}</CardTitle>
+                <CardTitle>{t('sources.details')}</CardTitle>
               </CardHeader>
               <CardContent className="space-y-6">
                 {/* Embedding Alert */}
@@ -669,10 +669,10 @@ export function SourceDetailContent({
                   <Alert>
                     <AlertCircle className="h-4 w-4" />
                     <AlertTitle>
-                      {t.sources.notEmbeddedAlert}
+                      {t('sources.notEmbeddedAlert')}
                     </AlertTitle>
                     <AlertDescription>
-                      {t.sources.notEmbeddedDesc}
+                      {t('sources.notEmbeddedDesc')}
                       <div className="mt-3">
                         <Button
                           onClick={handleEmbedContent}
@@ -680,7 +680,7 @@ export function SourceDetailContent({
                           size="sm"
                         >
                           <Database className="mr-2 h-4 w-4" />
-                          {isEmbedding ? t.sources.embedding : t.sources.embedContent}
+                          {isEmbedding ? t('sources.embedding') : t('sources.embedContent')}
                         </Button>
                       </div>
                     </AlertDescription>
@@ -691,7 +691,7 @@ export function SourceDetailContent({
                 <div className="space-y-4">
                   {source.asset?.url && (
                     <div>
-                      <h3 className="mb-2 text-sm font-semibold">{t.common.url}</h3>
+                      <h3 className="mb-2 text-sm font-semibold">{t('common.url')}</h3>
                       <div className="flex items-center gap-2">
                         <code className="flex-1 rounded bg-muted px-2 py-1 text-sm">
                           {source.asset.url}
@@ -720,7 +720,7 @@ export function SourceDetailContent({
 
                   {source.asset?.file_path && (
                     <div className="space-y-2">
-                      <h3 className="text-sm font-semibold">{t.sources.uploadedFile}</h3>
+                      <h3 className="text-sm font-semibold">{t('sources.uploadedFile')}</h3>
                       <div className="flex flex-wrap items-center gap-2">
                         <code className="rounded bg-muted px-2 py-1 text-sm">
                           {source.asset.file_path}
@@ -733,15 +733,15 @@ export function SourceDetailContent({
                         >
                           <Download className="mr-2 h-4 w-4" />
                           {fileAvailable === false
-                            ? t.sources.fileUnavailable
+                            ? t('sources.fileUnavailable')
                             : isDownloadingFile
-                              ? t.sources.preparing
-                              : t.common.download}
+                              ? t('sources.preparing')
+                              : t('common.download')}
                         </Button>
                       </div>
                       {fileAvailable === false ? (
                         <p className="text-xs text-muted-foreground">
-                          {t.sources.fileUnavailableDesc}
+                          {t('sources.fileUnavailableDesc')}
                         </p>
                       ) : null}
                     </div>
@@ -749,7 +749,7 @@ export function SourceDetailContent({
 
                   {source.topics && source.topics.length > 0 && (
                     <div>
-                      <h3 className="mb-2 text-sm font-semibold">{t.sources.topics}</h3>
+                      <h3 className="mb-2 text-sm font-semibold">{t('sources.topics')}</h3>
                       <div className="flex flex-wrap gap-2">
                         {source.topics.map((topic, idx) => (
                           <Badge key={idx} variant="outline">
@@ -764,17 +764,17 @@ export function SourceDetailContent({
                 {/* Metadata */}
                 <div>
                   <div className="flex items-center justify-between mb-3">
-                    <h3 className="text-sm font-semibold">{t.sources.metadata}</h3>
+                    <h3 className="text-sm font-semibold">{t('sources.metadata')}</h3>
                     <div className="flex items-center gap-2">
                       <Database className="h-3.5 w-3.5 text-muted-foreground" />
                       <Badge variant={source.embedded ? "default" : "secondary"} className="text-xs">
-                        {source.embedded ? t.sources.embedded : t.sources.notEmbedded}
+                        {source.embedded ? t('sources.embedded') : t('sources.notEmbedded')}
                       </Badge>
                     </div>
                   </div>
                   <div className="grid gap-4 sm:grid-cols-2">
                     <div>
-                      <p className="text-xs font-medium text-muted-foreground">{t.common.created_label}</p>
+                      <p className="text-xs font-medium text-muted-foreground">{t('common.created_label')}</p>
                       <p className="text-sm">
                         {formatDistanceToNow(new Date(source.created), {
                           addSuffix: true,
@@ -786,7 +786,7 @@ export function SourceDetailContent({
                       </p>
                     </div>
                     <div>
-                      <p className="text-xs font-medium text-muted-foreground">{t.common.updated_label}</p>
+                      <p className="text-xs font-medium text-muted-foreground">{t('common.updated_label')}</p>
                       <p className="text-sm">
                         {formatDistanceToNow(new Date(source.updated), {
                           addSuffix: true,
@@ -823,12 +823,12 @@ export function SourceDetailContent({
         onDelete={async (insightId) => {
           try {
             await insightsApi.delete(insightId)
-            toast.success(t.common.success)
+            toast.success(t('common.success'))
             setSelectedInsight(null)
             await fetchInsights()
           } catch (err) {
             console.error('Failed to delete insight:', err)
-            toast.error(t.common.error)
+            toast.error(t('common.error'))
           }
         }}
       />
@@ -836,20 +836,20 @@ export function SourceDetailContent({
       <AlertDialog open={!!insightToDelete} onOpenChange={() => setInsightToDelete(null)}>
         <AlertDialogContent>
           <AlertDialogHeader>
-            <AlertDialogTitle>{t.sources.deleteInsight}</AlertDialogTitle>
+            <AlertDialogTitle>{t('sources.deleteInsight')}</AlertDialogTitle>
             <AlertDialogDescription>
-              {t.sources.deleteInsightConfirm}
+              {t('sources.deleteInsightConfirm')}
             </AlertDialogDescription>
           </AlertDialogHeader>
           <AlertDialogFooter>
-            <AlertDialogCancel disabled={deletingInsight}>{t.common.cancel}</AlertDialogCancel>
+            <AlertDialogCancel disabled={deletingInsight}>{t('common.cancel')}</AlertDialogCancel>
             <AlertDialogAction asChild>
               <Button
                 onClick={handleDeleteInsight}
                 disabled={deletingInsight}
                 variant="destructive"
               >
-                {deletingInsight ? t.common.deleting : t.common.delete}
+                {deletingInsight ? t('common.deleting') : t('common.delete')}
               </Button>
             </AlertDialogAction>
           </AlertDialogFooter>
diff --git a/frontend/src/components/source/SourceDialog.tsx b/frontend/src/components/source/SourceDialog.tsx
index d28b795d..f87bbd5e 100644
--- a/frontend/src/components/source/SourceDialog.tsx
+++ b/frontend/src/components/source/SourceDialog.tsx
@@ -42,7 +42,7 @@ export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent className="max-w-5xl max-h-[90vh] flex flex-col p-0">
         {/* Accessibility title (hidden visually but read by screen readers) */}
-        <DialogTitle className="sr-only">{t.sources.detailsTitle}</DialogTitle>
+        <DialogTitle className="sr-only">{t('sources.detailsTitle')}</DialogTitle>
 
         {/* Source detail content */}
         <div className="flex-1 overflow-y-auto min-h-0">
diff --git a/frontend/src/components/source/SourceInsightDialog.tsx b/frontend/src/components/source/SourceInsightDialog.tsx
index a82b08e4..40e45395 100644
--- a/frontend/src/components/source/SourceInsightDialog.tsx
+++ b/frontend/src/components/source/SourceInsightDialog.tsx
@@ -73,7 +73,7 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
       <DialogContent className="sm:max-w-3xl max-h-[90vh] flex flex-col">
         <DialogHeader>
           <DialogTitle className="flex items-center justify-between gap-2">
-            <span>{t.sources.sourceInsight}</span>
+            <span>{t('sources.sourceInsight')}</span>
             <div className="flex items-center gap-2">
               {displayInsight?.insight_type && (
                 <Badge variant="outline" className="text-xs uppercase">
@@ -88,7 +88,7 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
                   className="gap-1"
                 >
                   <FileText className="h-3 w-3" />
-                  {t.sources.viewSource}
+                  {t('sources.viewSource')}
                 </Button>
               )}
             </div>
@@ -98,8 +98,8 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
         {showDeleteConfirm ? (
           <div className="flex flex-col items-center justify-center py-8 gap-4">
             <p className="text-center text-muted-foreground">
-              {t.sources.deleteInsightConfirm.split(/[?？]/)[0]}?<br />
-              <span className="text-sm">{t.sources.deleteInsightConfirm.split(/[?？]/)[1]?.trim() || t.common.deleteForever}</span>
+              {t('sources.deleteInsightConfirm').split(/[?？]/)[0]}?<br />
+              <span className="text-sm">{t('sources.deleteInsightConfirm').split(/[?？]/)[1]?.trim() || t('common.deleteForever')}</span>
             </p>
             <div className="flex gap-2">
               <Button
@@ -107,14 +107,14 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
                 onClick={() => setShowDeleteConfirm(false)}
                 disabled={isDeleting}
               >
-                {t.common.cancel}
+                {t('common.cancel')}
               </Button>
               <Button
                 variant="destructive"
                 onClick={handleDelete}
                 disabled={isDeleting}
               >
-                {isDeleting ? t.common.deleting : t.common.delete}
+                {isDeleting ? t('common.deleting') : t('common.delete')}
               </Button>
             </div>
           </div>
@@ -122,7 +122,7 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
           <div className="flex-1 overflow-y-auto min-h-0">
             {isLoading ? (
               <div className="flex items-center justify-center py-10">
-                <span className="text-sm text-muted-foreground">{t.common.loading}</span>
+                <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
               </div>
             ) : displayInsight ? (
               <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none">
@@ -145,7 +145,7 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
                 </ReactMarkdown>
               </div>
             ) : (
-              <p className="text-sm text-muted-foreground">{t.sources.noInsightSelected}</p>
+              <p className="text-sm text-muted-foreground">{t('sources.noInsightSelected')}</p>
             )}
           </div>
         )}
diff --git a/frontend/src/components/sources/AddExistingSourceDialog.tsx b/frontend/src/components/sources/AddExistingSourceDialog.tsx
index 3291aabc..d05a2c01 100644
--- a/frontend/src/components/sources/AddExistingSourceDialog.tsx
+++ b/frontend/src/components/sources/AddExistingSourceDialog.tsx
@@ -186,10 +186,10 @@ export function AddExistingSourceDialog({
         <DialogHeader>
           <DialogTitle className="flex items-center gap-2">
             <Link2 className="h-5 w-5" />
-            {t.sources.addExistingTitle}
+            {t('sources.addExistingTitle')}
           </DialogTitle>
           <DialogDescription>
-            {t.sources.addExistingDesc}
+            {t('sources.addExistingDesc')}
           </DialogDescription>
         </DialogHeader>
 
@@ -198,7 +198,7 @@ export function AddExistingSourceDialog({
           <div className="relative">
             <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground" />
             <Input
-              placeholder={t.sources.searchPlaceholder}
+              placeholder={t('sources.searchPlaceholder')}
               value={searchQuery}
               onChange={(e) => setSearchQuery(e.target.value)}
               className="pl-10"
@@ -213,12 +213,12 @@ export function AddExistingSourceDialog({
             {isSearching && filteredSources.length === 0 ? (
               <div className="flex flex-col items-center justify-center h-[200px] text-muted-foreground">
                 <LoaderIcon className="h-12 w-12 mb-2 animate-spin" />
-                <p>{t.common.loading}</p>
+                <p>{t('common.loading')}</p>
               </div>
             ) : filteredSources.length === 0 ? (
               <div className="flex flex-col items-center justify-center h-[200px] text-muted-foreground">
                 <FileText className="h-12 w-12 mb-2 opacity-50" />
-                <p>{t.sources.noNotebooksFound}</p>
+                <p>{t('sources.noNotebooksFound')}</p>
               </div>
             ) : (
               <div className="space-y-2 p-4">
@@ -249,12 +249,12 @@ export function AddExistingSourceDialog({
                           </h4>
                           {isAlreadyLinked && (
                             <Badge variant="secondary" className="text-xs shrink-0">
-                              {t.common.linked}
+                              {t('common.linked')}
                             </Badge>
                           )}
                         </div>
                         <p className="text-xs text-muted-foreground truncate">
-                          {t.sources.added.replace('{date}', formatDate(source.created))}
+                          {t('sources.added').replace('{date}', formatDate(source.created))}
                         </p>
                       </div>
                     </div>
@@ -267,14 +267,14 @@ export function AddExistingSourceDialog({
           {/* Truncation Warning */}
           {allSources.length >= 100 && !debouncedSearchQuery && (
             <div className="text-xs text-muted-foreground bg-muted/50 p-2 rounded-md">
-              {t.sources.showingFirst100}
+              {t('sources.showingFirst100')}
             </div>
           )}
 
           {/* Selection Summary */}
           {selectedSourceIds.length > 0 && (
             <div className="text-sm text-muted-foreground">
-              {t.sources.selectedCount.replace('{count}', selectedSourceIds.length.toString())}
+              {t('sources.selectedCount').replace('{count}', selectedSourceIds.length.toString())}
             </div>
           )}
         </div>
@@ -285,7 +285,7 @@ export function AddExistingSourceDialog({
             onClick={() => onOpenChange(false)}
             disabled={addSources.isPending}
           >
-            {t.common.cancel}
+            {t('common.cancel')}
           </Button>
           <Button
             onClick={handleAddSelected}
@@ -294,10 +294,10 @@ export function AddExistingSourceDialog({
             {addSources.isPending ? (
               <>
                 <LoaderIcon className="mr-2 h-4 w-4 animate-spin" />
-                {t.common.adding}
+                {t('common.adding')}
               </>
             ) : (
-              <>{t.common.addSelected}</>
+              <>{t('common.addSelected')}</>
             )}
           </Button>
         </DialogFooter>
diff --git a/frontend/src/components/sources/AddSourceDialog.tsx b/frontend/src/components/sources/AddSourceDialog.tsx
index 3f31adbb..5b772417 100644
--- a/frontend/src/components/sources/AddSourceDialog.tsx
+++ b/frontend/src/components/sources/AddSourceDialog.tsx
@@ -93,9 +93,9 @@ export function AddSourceDialog({
   const { t } = useTranslation()
 
   const WIZARD_STEPS: readonly WizardStep[] = [
-    { number: 1, title: t.sources.addSource, description: t.sources.processDescription },
-    { number: 2, title: t.navigation.notebooks, description: t.notebooks.searchPlaceholder },
-    { number: 3, title: t.navigation.process, description: t.sources.processDescription },
+    { number: 1, title: t('sources.addSource'), description: t('sources.processDescription') },
+    { number: 2, title: t('navigation.notebooks'), description: t('notebooks.searchPlaceholder') },
+    { number: 3, title: t('navigation.process'), description: t('sources.processDescription') },
   ]
 
   // Simplified state management
@@ -389,29 +389,29 @@ export function AddSourceDialog({
 
       if (isBatchMode) {
         // Batch submission
-        setProcessingStatus({ message: t.sources.processingFiles })
+        setProcessingStatus({ message: t('sources.processingFiles') })
         const results = await submitBatch(data)
 
         // Show summary toast
         if (results.failed === 0) {
-          toast.success(t.sources.batchSuccess.replace('{count}', results.success.toString()))
+          toast.success(t('sources.batchSuccess').replace('{count}', results.success.toString()))
         } else if (results.success === 0) {
-          toast.error(t.sources.batchFailed.replace('{count}', results.failed.toString()))
+          toast.error(t('sources.batchFailed').replace('{count}', results.failed.toString()))
         } else {
-          toast.warning(t.sources.batchPartial.replace('{success}', results.success.toString()).replace('{failed}', results.failed.toString()))
+          toast.warning(t('sources.batchPartial').replace('{success}', results.success.toString()).replace('{failed}', results.failed.toString()))
         }
 
         handleClose()
       } else {
         // Single source submission
-        setProcessingStatus({ message: t.sources.submittingSource })
+        setProcessingStatus({ message: t('sources.submittingSource') })
         await submitSingleSource(data)
         handleClose()
       }
     } catch (error) {
       console.error('Error creating source:', error)
       setProcessingStatus({
-        message: t.common.error,
+        message: t('common.error'),
       })
       timeoutRef.current = setTimeout(() => {
         setProcessing(false)
@@ -461,12 +461,12 @@ export function AddSourceDialog({
         <DialogContent className="sm:max-w-[500px]" showCloseButton={true}>
           <DialogHeader>
             <DialogTitle>
-              {batchProgress ? t.sources.processingFiles : t.sources.statusProcessing}
+              {batchProgress ? t('sources.processingFiles') : t('sources.statusProcessing')}
             </DialogTitle>
             <DialogDescription>
               {batchProgress
-                ? t.sources.processingBatchSources.replace('{count}', batchProgress.total.toString())
-                : t.sources.processingSource
+                ? t('sources.processingBatchSources').replace('{count}', batchProgress.total.toString())
+                : t('sources.processingSource')
               }
             </DialogDescription>
           </DialogHeader>
@@ -475,7 +475,7 @@ export function AddSourceDialog({
             <div className="flex items-center gap-3">
               <LoaderIcon className="h-5 w-5 animate-spin text-primary" />
               <span className="text-sm text-muted-foreground">
-                {processingStatus?.message || t.common.processing}
+                {processingStatus?.message || t('common.processing')}
               </span>
             </div>
 
@@ -493,12 +493,12 @@ export function AddSourceDialog({
                   <div className="flex items-center gap-4">
                     <span className="flex items-center gap-1.5 text-green-600">
                       <CheckCircleIcon className="h-4 w-4" />
-                      {batchProgress.completed} {t.common.completed}
+                      {batchProgress.completed} {t('common.completed')}
                     </span>
                     {batchProgress.failed > 0 && (
                       <span className="flex items-center gap-1.5 text-destructive">
                         <XCircleIcon className="h-4 w-4" />
-                        {batchProgress.failed} {t.common.failed}
+                        {batchProgress.failed} {t('common.failed')}
                       </span>
                     )}
                   </div>
@@ -509,7 +509,7 @@ export function AddSourceDialog({
 
                 {batchProgress.currentItem && (
                   <p className="text-xs text-muted-foreground truncate">
-                    {t.common.current}: {batchProgress.currentItem}
+                    {t('common.current')}: {batchProgress.currentItem}
                   </p>
                 )}
               </>
@@ -536,9 +536,9 @@ export function AddSourceDialog({
     <Dialog open={open} onOpenChange={handleClose}>
       <DialogContent className="sm:max-w-[700px] p-0">
         <DialogHeader className="px-6 pt-6 pb-0">
-          <DialogTitle>{t.sources.addNew}</DialogTitle>
+          <DialogTitle>{t('sources.addNew')}</DialogTitle>
           <DialogDescription>
-            {t.sources.processDescription}
+            {t('sources.processDescription')}
           </DialogDescription>
         </DialogHeader>
 
@@ -591,7 +591,7 @@ export function AddSourceDialog({
               variant="outline" 
               onClick={handleClose}
             >
-              {t.common.cancel}
+              {t('common.cancel')}
             </Button>
 
             <div className="flex gap-2">
@@ -601,7 +601,7 @@ export function AddSourceDialog({
                   variant="outline"
                   onClick={handlePrevStep}
                 >
-                  {t.common.back}
+                  {t('common.back')}
                 </Button>
               )}
 
@@ -613,7 +613,7 @@ export function AddSourceDialog({
                   onClick={(e) => handleNextStep(e)}
                   disabled={!currentStepValid}
                 >
-                  {t.common.next}
+                  {t('common.next')}
                 </Button>
               )}
 
@@ -623,7 +623,7 @@ export function AddSourceDialog({
                 disabled={!currentStepValid || createSource.isPending}
                 className="min-w-[120px]"
               >
-                {createSource.isPending ? t.common.adding : t.common.done}
+                {createSource.isPending ? t('common.adding') : t('common.done')}
               </Button>
             </div>
           </div>
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 48c40133..33202203 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -27,7 +27,7 @@ import {
 } from 'lucide-react'
 import { useSourceStatus } from '@/lib/hooks/use-sources'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 import { cn } from '@/lib/utils'
 import { ContextToggle } from '@/components/common/ContextToggle'
 import { ContextMode } from '@/app/(dashboard)/notebooks/[id]/page'
@@ -51,46 +51,46 @@ const SOURCE_TYPE_ICONS = {
   text: FileText,
 } as const
 
-const getStatusConfig = (t: TranslationKeys) => ({
+const getStatusConfig = (t: TFunction) => ({
   new: {
     icon: Clock,
     color: 'text-blue-600',
     bgColor: 'bg-blue-50',
     borderColor: 'border-blue-200',
-    label: t.sources.statusProcessing,
-    description: t.sources.statusPreparingDesc
+    label: t('sources.statusProcessing'),
+    description: t('sources.statusPreparingDesc')
   },
   queued: {
     icon: Clock,
     color: 'text-blue-600',
     bgColor: 'bg-blue-50',
     borderColor: 'border-blue-200',
-    label: t.sources.statusQueued,
-    description: t.sources.statusQueuedDesc
+    label: t('sources.statusQueued'),
+    description: t('sources.statusQueuedDesc')
   },
   running: {
     icon: Loader2,
     color: 'text-blue-600',
     bgColor: 'bg-blue-50',
     borderColor: 'border-blue-200',
-    label: t.sources.statusProcessing,
-    description: t.sources.statusProcessingDesc
+    label: t('sources.statusProcessing'),
+    description: t('sources.statusProcessingDesc')
   },
   completed: {
     icon: CheckCircle,
     color: 'text-green-600',
     bgColor: 'bg-green-50',
     borderColor: 'border-green-200',
-    label: t.sources.statusCompleted,
-    description: t.sources.statusCompletedDesc
+    label: t('sources.statusCompleted'),
+    description: t('sources.statusCompletedDesc')
   },
   failed: {
     icon: AlertTriangle,
     color: 'text-red-600',
     bgColor: 'bg-red-50',
     borderColor: 'border-red-200',
-    label: t.sources.statusFailed,
-    description: t.sources.statusFailedDesc
+    label: t('sources.statusFailed'),
+    description: t('sources.statusFailedDesc')
   }
 } as const)
 
@@ -172,7 +172,7 @@ export function SourceCard({
   const sourceType = getSourceType(source)
   const SourceTypeIcon = SOURCE_TYPE_ICONS[sourceType]
   
-   const title = source.title || t.sources.untitledSource
+   const title = source.title || t('sources.untitledSource')
 
   const handleRetry = () => {
     if (onRetry) {
@@ -226,13 +226,13 @@ export function SourceCard({
                     'h-3 w-3',
                     isProcessing && 'animate-spin'
                   )} />
-                  {statusLoading && shouldFetchStatus ? t.sources.checking : statusConfig.label}
+                  {statusLoading && shouldFetchStatus ? t('sources.checking') : statusConfig.label}
                 </div>
 
                 {/* Source type indicator */}
                 <div className="flex items-center gap-1 text-gray-500">
                   <SourceTypeIcon className="h-3 w-3" />
-                  <span className="text-xs capitalize">{t.common.source}</span>
+                  <span className="text-xs capitalize">{t('common.source')}</span>
                 </div>
               </div>
             )}
@@ -259,12 +259,12 @@ export function SourceCard({
               {/* Source type badge */}
               <Badge variant="secondary" className="text-xs flex items-center gap-1">
                 <SourceTypeIcon className="h-3 w-3" />
-                {sourceType === 'link' ? t.sources.addUrl : sourceType === 'upload' ? t.sources.uploadFile : t.sources.enterText}
+                {sourceType === 'link' ? t('sources.addUrl') : sourceType === 'upload' ? t('sources.uploadFile') : t('sources.enterText')}
               </Badge>
 
               {isCompleted && source.insights_count > 0 && (
                 <Badge variant="outline" className="text-xs">
-                  {t.sources.insightsCount.replace('{count}', source.insights_count.toString())}
+                  {t('sources.insightsCount').replace('{count}', source.insights_count.toString())}
                 </Badge>
               )}
               {source.topics && source.topics.length > 0 && isCompleted && (
@@ -318,7 +318,7 @@ export function SourceCard({
                     disabled={!onRemoveFromNotebook}
                   >
                     <Unlink className="h-4 w-4 mr-2" />
-                    {t.sources.removeFromNotebook}
+                    {t('sources.removeFromNotebook')}
                   </DropdownMenuItem>
                   <DropdownMenuSeparator />
                 </>
@@ -334,7 +334,7 @@ export function SourceCard({
                     disabled={!onRetry}
                   >
                     <RefreshCw className="h-4 w-4 mr-2" />
-                    {t.sources.retryProcessing}
+                    {t('sources.retryProcessing')}
                   </DropdownMenuItem>
                   <DropdownMenuSeparator />
                 </>
@@ -349,7 +349,7 @@ export function SourceCard({
                 className="text-red-600 focus:text-red-600"
               >
                 <Trash2 className="h-4 w-4 mr-2" />
-                {t.sources.deleteSource}
+                {t('sources.deleteSource')}
               </DropdownMenuItem>
             </DropdownMenuContent>
           </DropdownMenu>
@@ -366,7 +366,7 @@ export function SourceCard({
               className="h-7 text-xs"
             >
               <RefreshCw className="h-3 w-3 mr-1" />
-              {t.sources.retry}
+              {t('sources.retry')}
             </Button>
           </div>
         )}
@@ -375,7 +375,7 @@ export function SourceCard({
         {isProcessing && statusData?.processing_info?.progress && (
           <div className="mt-3 pt-2 border-t">
             <div className="flex justify-between items-center mb-1">
-            <span className="text-xs text-gray-600">{t.common.progress}</span>
+            <span className="text-xs text-gray-600">{t('common.progress')}</span>
               <span className="text-xs text-gray-600">
                 {Math.round(statusData.processing_info.progress as number)}%
               </span>
diff --git a/frontend/src/components/sources/steps/NotebooksStep.tsx b/frontend/src/components/sources/steps/NotebooksStep.tsx
index 50c9c2d1..95bfe8a5 100644
--- a/frontend/src/components/sources/steps/NotebooksStep.tsx
+++ b/frontend/src/components/sources/steps/NotebooksStep.tsx
@@ -28,15 +28,15 @@ export function NotebooksStep({
   return (
     <div className="space-y-6">
       <FormSection
-        title={`${t.notebooks.title} (${t.common.optional})`}
-        description={t.sources.addExistingDesc}
+        title={`${t('notebooks.title')} (${t('common.optional')})`}
+        description={t('sources.addExistingDesc')}
       >
         <CheckboxList
           items={notebookItems}
           selectedIds={selectedNotebooks}
           onToggle={onToggleNotebook}
           loading={loading}
-          emptyMessage={t.sources.noNotebooksFound}
+          emptyMessage={t('sources.noNotebooksFound')}
         />
       </FormSection>
     </div>
diff --git a/frontend/src/components/sources/steps/ProcessingStep.tsx b/frontend/src/components/sources/steps/ProcessingStep.tsx
index a8cba9b7..3c3d7933 100644
--- a/frontend/src/components/sources/steps/ProcessingStep.tsx
+++ b/frontend/src/components/sources/steps/ProcessingStep.tsx
@@ -47,21 +47,21 @@ export function ProcessingStep({
   return (
     <div className="space-y-8">
       <FormSection
-        title={`${t.navigation.transformations} (${t.common.optional})`}
-        description={t.sources.processDescription}
+        title={`${t('navigation.transformations')} (${t('common.optional')})`}
+        description={t('sources.processDescription')}
       >
         <CheckboxList
           items={transformationItems}
           selectedIds={selectedTransformations}
           onToggle={onToggleTransformation}
           loading={loading}
-          emptyMessage={t.common.noMatches}
+          emptyMessage={t('common.noMatches')}
         />
       </FormSection>
 
       <FormSection
-        title={t.navigation.settings}
-        description={t.sources.processDescription}
+        title={t('navigation.settings')}
+        description={t('sources.processDescription')}
       >
         <div className="space-y-4">
           {settings?.default_embedding_option === 'ask' && (
@@ -80,9 +80,9 @@ export function ProcessingStep({
                     className="mt-0.5"
                   />
                   <div className="flex-1">
-                    <span className="text-sm font-medium block">{t.sources.enableEmbedding}</span>
+                    <span className="text-sm font-medium block">{t('sources.enableEmbedding')}</span>
                     <p className="text-xs text-muted-foreground mt-1">
-                      {t.sources.embeddingDesc}
+                      {t('sources.embeddingDesc')}
                     </p>
                   </div>
                 </label>
@@ -95,10 +95,10 @@ export function ProcessingStep({
               <div className="flex items-start gap-3">
                 <div className="w-4 h-4 bg-primary rounded-full mt-0.5 flex-shrink-0"></div>
                 <div className="flex-1">
-                  <span className="text-sm font-medium block text-primary">{t.sources.embeddingAlways}</span>
+                  <span className="text-sm font-medium block text-primary">{t('sources.embeddingAlways')}</span>
                   <p className="text-xs text-primary mt-1">
-                    {t.sources.embeddingAlwaysDesc}
-                    {t.sources.changeInSettings} <span className="font-medium">{t.navigation.settings}</span>.
+                    {t('sources.embeddingAlwaysDesc')}
+                    {t('sources.changeInSettings')} <span className="font-medium">{t('navigation.settings')}</span>.
                   </p>
                 </div>
               </div>
@@ -110,10 +110,10 @@ export function ProcessingStep({
               <div className="flex items-start gap-3">
                 <div className="w-4 h-4 bg-muted-foreground rounded-full mt-0.5 flex-shrink-0"></div>
                 <div className="flex-1">
-                  <span className="text-sm font-medium block text-foreground">{t.sources.embeddingNever}</span>
+                  <span className="text-sm font-medium block text-foreground">{t('sources.embeddingNever')}</span>
                   <p className="text-xs text-muted-foreground mt-1">
-                    {t.sources.embeddingNeverDesc}
-                    {t.sources.changeInSettings} <span className="font-medium">{t.navigation.settings}</span>.
+                    {t('sources.embeddingNeverDesc')}
+                    {t('sources.changeInSettings')} <span className="font-medium">{t('navigation.settings')}</span>.
                   </p>
                 </div>
               </div>
diff --git a/frontend/src/components/sources/steps/SourceTypeStep.tsx b/frontend/src/components/sources/steps/SourceTypeStep.tsx
index a4c47567..f706422e 100644
--- a/frontend/src/components/sources/steps/SourceTypeStep.tsx
+++ b/frontend/src/components/sources/steps/SourceTypeStep.tsx
@@ -63,26 +63,26 @@ export function parseAndValidateUrls(text: string): {
   return { valid, invalid }
 }
 
-import { TranslationKeys } from '@/lib/locales'
+import type { TFunction } from 'i18next'
 
-const getSourceTypes = (t: TranslationKeys) => [
+const getSourceTypes = (t: TFunction) => [
   {
     value: 'link' as const,
-    label: t.sources.addUrl,
+    label: t('sources.addUrl'),
     icon: LinkIcon,
-    description: t.sources.processDescription,
+    description: t('sources.processDescription'),
   },
   {
     value: 'upload' as const,
-    label: t.sources.uploadFile,
+    label: t('sources.uploadFile'),
     icon: FileIcon,
-    description: t.sources.processDescription,
+    description: t('sources.processDescription'),
   },
   {
     value: 'text' as const,
-    label: t.sources.enterText,
+    label: t('sources.enterText'),
     icon: FileTextIcon,
-    description: t.sources.processDescription,
+    description: t('sources.processDescription'),
   },
 ]
 
@@ -156,8 +156,8 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
   return (
     <div className="space-y-6">
       <FormSection
-        title={t.sources.title}
-        description={t.sources.processDescription}
+        title={t('sources.title')}
+        description={t('sources.processDescription')}
       >
         <Controller
           control={control}
@@ -188,11 +188,11 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                   {type.value === 'link' && (
                     <div>
                       <div className="flex items-center justify-between mb-2">
-                        <Label htmlFor="url">{t.sources.urlLabel}</Label>
+                        <Label htmlFor="url">{t('sources.urlLabel')}</Label>
                         {urlCount > 0 && (
                           <Badge variant={isOverLimit ? "destructive" : "secondary"}>
-                            {t.sources.urlsCount.replace('{count}', urlCount.toString())}
-                            {isOverLimit && ` (${t.sources.maxItems.replace('{count}', MAX_BATCH_SIZE.toString())})`}
+                            {t('sources.urlsCount').replace('{count}', urlCount.toString())}
+                            {isOverLimit && ` (${t('sources.maxItems').replace('{count}', MAX_BATCH_SIZE.toString())})`}
                           </Badge>
                         )}
                       </div>
@@ -201,12 +201,12 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         {...register('url', {
                           onChange: () => onClearUrlErrors?.()
                         })}
-                        placeholder={t.sources.enterUrlsPlaceholder}
+                        placeholder={t('sources.enterUrlsPlaceholder')}
                         rows={urlCount > 1 ? 6 : 2}
                         className="font-mono text-sm"
                       />
                       <p className="text-xs text-muted-foreground mt-1">
-                        {t.sources.batchUrlHint}
+                        {t('sources.batchUrlHint')}
                       </p>
                       {errors.url && (
                         <p className="text-sm text-destructive mt-1">{errors.url.message}</p>
@@ -214,20 +214,20 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                       {urlValidationErrors && urlValidationErrors.length > 0 && (
                         <div className="mt-2 p-3 bg-destructive/10 rounded-md border border-destructive/20">
                           <p className="text-sm font-medium text-destructive mb-2">
-                            {t.sources.invalidUrlsDetected}
+                            {t('sources.invalidUrlsDetected')}
                           </p>
                           <ul className="space-y-1">
                             {urlValidationErrors.map((error, idx) => (
                               <li key={idx} className="text-xs text-destructive flex items-start gap-2">
                                 <span className="font-mono bg-destructive/20 px-1 rounded">
-                                  {t.sources.lineLabel.replace('{line}', error.line.toString())}
+                                  {t('sources.lineLabel').replace('{line}', error.line.toString())}
                                 </span>
                                 <span className="truncate">{error.url}</span>
                               </li>
                             ))}
                           </ul>
                           <p className="text-xs text-muted-foreground mt-2">
-                            {t.sources.fixInvalidUrls}
+                            {t('sources.fixInvalidUrls')}
                           </p>
                         </div>
                       )}
@@ -237,11 +237,11 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                   {type.value === 'upload' && (
                     <div>
                       <div className="flex items-center justify-between mb-2">
-                        <Label htmlFor="file">{t.sources.fileLabel}</Label>
+                        <Label htmlFor="file">{t('sources.fileLabel')}</Label>
                         {fileCount > 0 && (
                           <Badge variant={isOverLimit ? "destructive" : "secondary"}>
-                            {t.sources.filesCount.replace('{count}', fileCount.toString())}
-                            {isOverLimit && ` (${t.sources.maxItems.replace('{count}', MAX_BATCH_SIZE.toString())})`}
+                            {t('sources.filesCount').replace('{count}', fileCount.toString())}
+                            {isOverLimit && ` (${t('sources.maxItems').replace('{count}', MAX_BATCH_SIZE.toString())})`}
                           </Badge>
                         )}
                       </div>
@@ -253,11 +253,11 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         accept=".pdf,.doc,.docx,.pptx,.ppt,.xlsx,.xls,.txt,.md,.epub,.mp4,.avi,.mov,.wmv,.mp3,.wav,.m4a,.aac,.jpg,.jpeg,.png,.tiff,.zip,.tar,.gz,.html"
                       />
                       <p className="text-xs text-muted-foreground mt-1">
-                        {t.sources.selectMultipleFilesHint}
+                        {t('sources.selectMultipleFilesHint')}
                       </p>
                       {fileCount > 1 && fileInput instanceof FileList && (
                         <div className="mt-2 p-3 bg-muted rounded-md">
-                          <p className="text-xs font-medium mb-2">{t.sources.selectedFiles}</p>
+                          <p className="text-xs font-medium mb-2">{t('sources.selectedFiles')}</p>
                           <ul className="space-y-1 max-h-32 overflow-y-auto">
                             {Array.from(fileInput).map((file, idx) => (
                               <li key={idx} className="text-xs text-muted-foreground flex items-center gap-2">
@@ -276,7 +276,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                       )}
                       {isOverLimit && selectedType === 'upload' && (
                         <p className="text-sm text-destructive mt-1">
-                          {t.sources.maxFilesAllowed.replace('{count}', MAX_BATCH_SIZE.toString())}
+                          {t('sources.maxFilesAllowed').replace('{count}', MAX_BATCH_SIZE.toString())}
                         </p>
                       )}
                     </div>
@@ -284,18 +284,18 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                   
                   {type.value === 'text' && (
                     <div>
-                      <Label htmlFor="content" className="mb-2 block">{t.sources.textContentLabel}</Label>
+                      <Label htmlFor="content" className="mb-2 block">{t('sources.textContentLabel')}</Label>
                       {hasHtmlContent && (
                         <div className="mb-2 p-2 bg-blue-50 dark:bg-blue-950 border border-blue-200 dark:border-blue-800 rounded-md">
                           <p className="text-sm text-blue-700 dark:text-blue-300">
-                            {t.sources.htmlDetected}
+                            {t('sources.htmlDetected')}
                           </p>
                         </div>
                       )}
                       <Textarea
                         id="content"
                         {...register('content')}
-                        placeholder={t.sources.textPlaceholder}
+                        placeholder={t('sources.textPlaceholder')}
                         rows={6}
                         onPaste={handleTextPaste}
                       />
@@ -318,16 +318,16 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
       {!isBatchMode && (
         <FormSection
           htmlFor="source-title"
-          title={selectedType === 'text' ? `${t.common.title} *` : `${t.common.title} (${t.common.optional})`}
+          title={selectedType === 'text' ? `${t('common.title')} *` : `${t('common.title')} (${t('common.optional')})`}
           description={selectedType === 'text'
-            ? t.sources.titleRequired
-            : t.sources.titleGenerated
+            ? t('sources.titleRequired')
+            : t('sources.titleGenerated')
           }
         >
           <Input
             id="source-title"
             {...register('title')}
-            placeholder={t.sources.titlePlaceholder}
+            placeholder={t('sources.titlePlaceholder')}
             autoComplete="off"
           />
           {errors.title && (
@@ -340,14 +340,14 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
       {isBatchMode && (
         <div className="p-4 bg-primary/5 border border-primary/20 rounded-lg">
           <div className="flex items-center gap-2 mb-2">
-            <Badge variant="default">{t.common.batchMode}</Badge>
+            <Badge variant="default">{t('common.batchMode')}</Badge>
             <span className="text-sm font-medium">
-              {t.sources.batchCount.replace('{count}', itemCount.toString()).replace('{type}', selectedType === 'link' ? t.sources.addUrl : t.sources.uploadFile)}
+              {t('sources.batchCount').replace('{count}', itemCount.toString()).replace('{type}', selectedType === 'link' ? t('sources.addUrl') : t('sources.uploadFile'))}
             </span>
           </div>
           <p className="text-xs text-muted-foreground">
-            {t.sources.batchTitlesAuto}
-            {t.sources.batchCommonSettings}
+            {t('sources.batchTitlesAuto')}
+            {t('sources.batchCommonSettings')}
           </p>
         </div>
       )}
diff --git a/frontend/src/components/ui/dialog.tsx b/frontend/src/components/ui/dialog.tsx
index 14bfaa7b..55bb7d5c 100644
--- a/frontend/src/components/ui/dialog.tsx
+++ b/frontend/src/components/ui/dialog.tsx
@@ -72,7 +72,7 @@ const DialogContent = ({
         {showCloseButton && (
           <DialogPrimitive.Close className="absolute right-4 top-4 rounded-sm opacity-70 ring-offset-background transition-opacity hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-ring focus:ring-offset-2 disabled:pointer-events-none data-[state=open]:bg-accent data-[state=open]:text-muted-foreground">
             <X className="h-4 w-4" />
-            <span className="sr-only">{t?.common?.close || 'Close'}</span>
+            <span className="sr-only">{t('common.close')}</span>
           </DialogPrimitive.Close>
         )}
       </DialogPrimitive.Content>
diff --git a/frontend/src/lib/hooks/use-credentials.ts b/frontend/src/lib/hooks/use-credentials.ts
index f514f374..3524ed91 100644
--- a/frontend/src/lib/hooks/use-credentials.ts
+++ b/frontend/src/lib/hooks/use-credentials.ts
@@ -87,14 +87,14 @@ export function useCreateCredential() {
       queryClient.invalidateQueries({ queryKey: CREDENTIAL_QUERY_KEYS.all })
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.providers })
       toast({
-        title: t.common.success,
-        description: t.apiKeys.configSaveSuccess,
+        title: t('common.success'),
+        description: t('apiKeys.configSaveSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -121,14 +121,14 @@ export function useUpdateCredential() {
       queryClient.invalidateQueries({ queryKey: CREDENTIAL_QUERY_KEYS.all })
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.providers })
       toast({
-        title: t.common.success,
-        description: t.apiKeys.configUpdateSuccess,
+        title: t('common.success'),
+        description: t('apiKeys.configUpdateSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -156,14 +156,14 @@ export function useDeleteCredential() {
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.models })
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.providers })
       toast({
-        title: t.common.success,
-        description: t.apiKeys.configDeleteSuccess,
+        title: t('common.success'),
+        description: t('apiKeys.configDeleteSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -184,21 +184,21 @@ export function useTestCredential() {
       setTestResults(prev => ({ ...prev, [credentialId]: result }))
       if (result.success) {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.testSuccess,
+          title: t('common.success'),
+          description: t('apiKeys.testSuccess'),
         })
       } else {
         toast({
-          title: t.common.error,
-          description: result.message || t.apiKeys.testFailed,
+          title: t('common.error'),
+          description: result.message || t('apiKeys.testFailed'),
           variant: 'destructive',
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.apiKeys.testFailed),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('apiKeys.testFailed')),
         variant: 'destructive',
       })
     },
@@ -229,8 +229,8 @@ export function useDiscoverModels() {
     mutationFn: (credentialId: string) => credentialsApi.discover(credentialId),
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.apiKeys.syncFailed),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('apiKeys.syncFailed')),
         variant: 'destructive',
       })
     },
@@ -259,22 +259,22 @@ export function useRegisterModels() {
 
       if (result.created > 0) {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.syncSuccess
+          title: t('common.success'),
+          description: t('apiKeys.syncSuccess')
             .replace('{discovered}', (result.created + result.existing).toString())
             .replace('{new}', result.created.toString()),
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.syncNoNew.replace('{count}', result.existing.toString()),
+          title: t('common.success'),
+          description: t('apiKeys.syncNoNew').replace('{count}', result.existing.toString()),
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.apiKeys.syncFailed),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('apiKeys.syncFailed')),
         variant: 'destructive',
       })
     },
@@ -303,31 +303,31 @@ export function useMigrateFromEnv() {
 
       if (errorCount > 0 && migratedCount === 0) {
         toast({
-          title: t.common.error,
-          description: t.apiKeys.migrationErrors.replace('{count}', errorCount.toString()),
+          title: t('common.error'),
+          description: t('apiKeys.migrationErrors').replace('{count}', errorCount.toString()),
           variant: 'destructive',
         })
       } else if (migratedCount > 0 && errorCount > 0) {
         toast({
-          title: t.common.success,
-          description: `${t.apiKeys.migrationSuccess.replace('{count}', migratedCount.toString())}. ${t.apiKeys.migrationErrors.replace('{count}', errorCount.toString())}`,
+          title: t('common.success'),
+          description: `${t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString())}. ${t('apiKeys.migrationErrors').replace('{count}', errorCount.toString())}`,
         })
       } else if (migratedCount > 0) {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.migrationSuccess.replace('{count}', migratedCount.toString()),
+          title: t('common.success'),
+          description: t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString()),
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.migrationNothingToMigrate,
+          title: t('common.success'),
+          description: t('apiKeys.migrationNothingToMigrate'),
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -356,31 +356,31 @@ export function useMigrateFromProviderConfig() {
 
       if (errorCount > 0 && migratedCount === 0) {
         toast({
-          title: t.common.error,
-          description: t.apiKeys.migrationErrors.replace('{count}', errorCount.toString()),
+          title: t('common.error'),
+          description: t('apiKeys.migrationErrors').replace('{count}', errorCount.toString()),
           variant: 'destructive',
         })
       } else if (migratedCount > 0 && errorCount > 0) {
         toast({
-          title: t.common.success,
-          description: `${t.apiKeys.migrationSuccess.replace('{count}', migratedCount.toString())}. ${t.apiKeys.migrationErrors.replace('{count}', errorCount.toString())}`,
+          title: t('common.success'),
+          description: `${t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString())}. ${t('apiKeys.migrationErrors').replace('{count}', errorCount.toString())}`,
         })
       } else if (migratedCount > 0) {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.migrationSuccess.replace('{count}', migratedCount.toString()),
+          title: t('common.success'),
+          description: t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString()),
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.apiKeys.migrationNothingToMigrate,
+          title: t('common.success'),
+          description: t('apiKeys.migrationNothingToMigrate'),
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-models.ts b/frontend/src/lib/hooks/use-models.ts
index ff38c0c4..3f98da51 100644
--- a/frontend/src/lib/hooks/use-models.ts
+++ b/frontend/src/lib/hooks/use-models.ts
@@ -38,14 +38,14 @@ export function useCreateModel() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.models })
       toast({
-        title: t.common.success,
-        description: t.models.saveSuccess,
+        title: t('common.success'),
+        description: t('models.saveSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -64,14 +64,14 @@ export function useDeleteModel() {
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.defaults })
       queryClient.invalidateQueries({ queryKey: ['credentials'] })
       toast({
-        title: t.common.success,
-        description: t.models.deleteSuccess,
+        title: t('common.success'),
+        description: t('models.deleteSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -95,14 +95,14 @@ export function useUpdateModelDefaults() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: MODEL_QUERY_KEYS.defaults })
       toast({
-        title: t.common.success,
-        description: t.models.saveSuccess,
+        title: t('common.success'),
+        description: t('models.saveSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -131,26 +131,26 @@ export function useAutoAssignDefaults() {
 
       if (assignedCount > 0) {
         toast({
-          title: t.common.success,
-          description: t.models.autoAssignSuccess.replace('{count}', assignedCount.toString()),
+          title: t('common.success'),
+          description: t('models.autoAssignSuccess').replace('{count}', assignedCount.toString()),
         })
       } else if (missingCount > 0) {
         toast({
-          title: t.common.warning,
-          description: t.models.autoAssignNoModels,
+          title: t('common.warning'),
+          description: t('models.autoAssignNoModels'),
           variant: 'destructive',
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.models.autoAssignAlreadySet,
+          title: t('common.success'),
+          description: t('models.autoAssignAlreadySet'),
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-notebooks.ts b/frontend/src/lib/hooks/use-notebooks.ts
index 9315c322..fa97bf20 100644
--- a/frontend/src/lib/hooks/use-notebooks.ts
+++ b/frontend/src/lib/hooks/use-notebooks.ts
@@ -31,14 +31,14 @@ export function useCreateNotebook() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.notebooks })
       toast({
-        title: t.common.success,
-        description: t.notebooks.createSuccess,
+        title: t('common.success'),
+        description: t('notebooks.createSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: t(getApiErrorKey(error, t.common.error)),
+        title: t('common.error'),
+        description: t(getApiErrorKey(error, t('common.error'))),
         variant: 'destructive',
       })
     },
@@ -57,14 +57,14 @@ export function useUpdateNotebook() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.notebooks })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.notebook(id) })
       toast({
-        title: t.common.success,
-        description: t.notebooks.updateSuccess,
+        title: t('common.success'),
+        description: t('notebooks.updateSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: t(getApiErrorKey(error, t.common.error)),
+        title: t('common.error'),
+        description: t(getApiErrorKey(error, t('common.error'))),
         variant: 'destructive',
       })
     },
@@ -97,14 +97,14 @@ export function useDeleteNotebook() {
       // Also invalidate sources since some may have been deleted
       queryClient.invalidateQueries({ queryKey: ['sources'] })
       toast({
-        title: t.common.success,
-        description: t.notebooks.deleteSuccess,
+        title: t('common.success'),
+        description: t('notebooks.deleteSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: t(getApiErrorKey(error, t.common.error)),
+        title: t('common.error'),
+        description: t(getApiErrorKey(error, t('common.error'))),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-notes.ts b/frontend/src/lib/hooks/use-notes.ts
index f3fab050..c73d8833 100644
--- a/frontend/src/lib/hooks/use-notes.ts
+++ b/frontend/src/lib/hooks/use-notes.ts
@@ -35,14 +35,14 @@ export function useCreateNote() {
         queryKey: QUERY_KEYS.notes(variables.notebook_id) 
       })
       toast({
-        title: t.common.success,
-        description: t.notebooks.noteCreatedSuccess,
+        title: t('common.success'),
+        description: t('notebooks.noteCreatedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.notebooks.failedToCreateNote),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('notebooks.failedToCreateNote')),
         variant: 'destructive',
       })
     },
@@ -61,14 +61,14 @@ export function useUpdateNote() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.notes() })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.note(id) })
       toast({
-        title: t.common.success,
-        description: t.notebooks.noteUpdatedSuccess,
+        title: t('common.success'),
+        description: t('notebooks.noteUpdatedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.notebooks.failedToUpdateNote),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('notebooks.failedToUpdateNote')),
         variant: 'destructive',
       })
     },
@@ -86,14 +86,14 @@ export function useDeleteNote() {
       // Invalidate all notes queries (with and without notebook IDs)
       queryClient.invalidateQueries({ queryKey: ['notes'] })
       toast({
-        title: t.common.success,
-        description: t.notebooks.noteDeletedSuccess,
+        title: t('common.success'),
+        description: t('notebooks.noteDeletedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.notebooks.failedToDeleteNote),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('notebooks.failedToDeleteNote')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-podcasts.ts b/frontend/src/lib/hooks/use-podcasts.ts
index 491fa538..3f24e97e 100644
--- a/frontend/src/lib/hooks/use-podcasts.ts
+++ b/frontend/src/lib/hooks/use-podcasts.ts
@@ -98,14 +98,14 @@ export function useRetryPodcastEpisode() {
     onSuccess: async () => {
       await queryClient.refetchQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.retryStarted,
-        description: t.podcasts.retryStartedDesc,
+        title: t('podcasts.retryStarted'),
+        description: t('podcasts.retryStartedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToRetry,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToRetry'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -122,14 +122,14 @@ export function useDeletePodcastEpisode() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.episodeDeleted,
-        description: t.podcasts.episodeDeletedDesc,
+        title: t('podcasts.episodeDeleted'),
+        description: t('podcasts.episodeDeletedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToDeleteEpisode,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToDeleteEpisode'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -160,14 +160,14 @@ export function useCreateEpisodeProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.profileCreated,
-        description: t.podcasts.profileCreatedDesc,
+        title: t('podcasts.profileCreated'),
+        description: t('podcasts.profileCreatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToCreateProfile,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToCreateProfile'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -191,14 +191,14 @@ export function useUpdateEpisodeProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.profileUpdated,
-        description: t.podcasts.profileUpdatedDesc,
+        title: t('podcasts.profileUpdated'),
+        description: t('podcasts.profileUpdatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToUpdateProfile,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToUpdateProfile'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -216,14 +216,14 @@ export function useDeleteEpisodeProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.profileDeleted,
-        description: t.podcasts.profileDeletedDesc,
+        title: t('podcasts.profileDeleted'),
+        description: t('podcasts.profileDeletedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToDeleteProfile,
-        description: getApiErrorKey(error, t.podcasts.failedToDeleteProfileDesc),
+        title: t('podcasts.failedToDeleteProfile'),
+        description: getApiErrorKey(error, t('podcasts.failedToDeleteProfileDesc')),
         variant: 'destructive',
       })
     },
@@ -242,14 +242,14 @@ export function useDuplicateEpisodeProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.profileDuplicated,
-        description: t.podcasts.profileDuplicatedDesc,
+        title: t('podcasts.profileDuplicated'),
+        description: t('podcasts.profileDuplicatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToDuplicateProfile,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToDuplicateProfile'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -289,14 +289,14 @@ export function useCreateSpeakerProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.speakerCreated,
-        description: t.podcasts.speakerCreatedDesc,
+        title: t('podcasts.speakerCreated'),
+        description: t('podcasts.speakerCreatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToCreateSpeaker,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToCreateSpeaker'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -321,14 +321,14 @@ export function useUpdateSpeakerProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.speakerUpdated,
-        description: t.podcasts.speakerUpdatedDesc,
+        title: t('podcasts.speakerUpdated'),
+        description: t('podcasts.speakerUpdatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToUpdateSpeaker,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToUpdateSpeaker'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -347,14 +347,14 @@ export function useDeleteSpeakerProfile() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.speakerDeleted,
-        description: t.podcasts.speakerDeletedDesc,
+        title: t('podcasts.speakerDeleted'),
+        description: t('podcasts.speakerDeletedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToDeleteSpeaker,
-        description: getApiErrorKey(error, t.podcasts.failedToDeleteSpeakerDesc),
+        title: t('podcasts.failedToDeleteSpeaker'),
+        description: getApiErrorKey(error, t('podcasts.failedToDeleteSpeakerDesc')),
         variant: 'destructive',
       })
     },
@@ -372,14 +372,14 @@ export function useDuplicateSpeakerProfile() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.speakerProfiles })
       toast({
-        title: t.podcasts.speakerDuplicated,
-        description: t.podcasts.speakerDuplicatedDesc,
+        title: t('podcasts.speakerDuplicated'),
+        description: t('podcasts.speakerDuplicatedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToDuplicateSpeaker,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('podcasts.failedToDuplicateSpeaker'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
@@ -398,14 +398,14 @@ export function useGeneratePodcast() {
       // Immediately refetch to show the new episode
       await queryClient.refetchQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
-        title: t.podcasts.generationStarted,
-        description: t.podcasts.generationStartedDesc.replace('{name}', response.episode_name),
+        title: t('podcasts.generationStarted'),
+        description: t('podcasts.generationStartedDesc').replace('{name}', response.episode_name),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.podcasts.failedToStartGeneration,
-        description: getApiErrorKey(error, t.podcasts.tryAgainMoment),
+        title: t('podcasts.failedToStartGeneration'),
+        description: getApiErrorKey(error, t('podcasts.tryAgainMoment')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-settings.ts b/frontend/src/lib/hooks/use-settings.ts
index 181b0581..f5416ccd 100644
--- a/frontend/src/lib/hooks/use-settings.ts
+++ b/frontend/src/lib/hooks/use-settings.ts
@@ -23,14 +23,14 @@ export function useUpdateSettings() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.settings })
       toast({
-        title: t.common.success,
-        description: t.common.saveSuccess,
+        title: t('common.success'),
+        description: t('common.saveSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorKey(error, t.common.error),
+        title: t('common.error'),
+        description: getApiErrorKey(error, t('common.error')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-sources.ts b/frontend/src/lib/hooks/use-sources.ts
index 97702987..4ceb3ae6 100644
--- a/frontend/src/lib/hooks/use-sources.ts
+++ b/frontend/src/lib/hooks/use-sources.ts
@@ -126,20 +126,20 @@ export function useCreateSource() {
       // Show different messages based on processing mode
       if (variables.async_processing) {
         toast({
-          title: t.sources.sourceQueued,
-          description: t.sources.sourceQueuedDesc,
+          title: t('sources.sourceQueued'),
+          description: t('sources.sourceQueuedDesc'),
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.sources.sourceAddedSuccess,
+          title: t('common.success'),
+          description: t('sources.sourceAddedSuccess'),
         })
       }
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToAddSource),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToAddSource')),
         variant: 'destructive',
       })
     },
@@ -159,14 +159,14 @@ export function useUpdateSource() {
       queryClient.invalidateQueries({ queryKey: ['sources'] })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.source(id) })
       toast({
-        title: t.common.success,
-        description: t.sources.sourceUpdatedSuccess,
+        title: t('common.success'),
+        description: t('sources.sourceUpdatedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToUpdateSource),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToUpdateSource')),
         variant: 'destructive',
       })
     },
@@ -186,14 +186,14 @@ export function useDeleteSource() {
       // Also invalidate the specific source
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.source(id) })
       toast({
-        title: t.common.success,
-        description: t.sources.sourceDeletedSuccess,
+        title: t('common.success'),
+        description: t('sources.sourceDeletedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToDeleteSource),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToDeleteSource')),
         variant: 'destructive',
       })
     },
@@ -217,14 +217,14 @@ export function useFileUpload() {
         refetchType: 'active'
       })
       toast({
-        title: t.common.success,
-        description: t.sources.fileUploadedSuccess,
+        title: t('common.success'),
+        description: t('sources.fileUploadedSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToUploadFile),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToUploadFile')),
         variant: 'destructive',
       })
     },
@@ -275,14 +275,14 @@ export function useRetrySource() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.source(sourceId) })
 
       toast({
-        title: t.sources.sourceRequeued,
-        description: t.sources.sourceRequeuedDesc,
+        title: t('sources.sourceRequeued'),
+        description: t('sources.sourceRequeuedDesc'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToRetry),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToRetry')),
         variant: 'destructive',
       })
     },
@@ -322,19 +322,19 @@ export function useAddSourcesToNotebook() {
       // Show appropriate toast based on results
       if (result.failures === 0) {
         toast({
-          title: t.common.success,
-          description: t.sources.sourcesAddedToNotebook.replace('{count}', result.successes.toString()),
+          title: t('common.success'),
+          description: t('sources.sourcesAddedToNotebook').replace('{count}', result.successes.toString()),
         })
       } else if (result.successes === 0) {
         toast({
-          title: t.common.error,
-          description: t.sources.failedToAddSourcesToNotebook,
+          title: t('common.error'),
+          description: t('sources.failedToAddSourcesToNotebook'),
           variant: 'destructive',
         })
       } else {
         toast({
-          title: t.common.success,
-          description: t.sources.partialAddSuccess
+          title: t('common.success'),
+          description: t('sources.partialAddSuccess')
             .replace('{success}', result.successes.toString())
             .replace('{failed}', result.failures.toString()),
           variant: 'default',
@@ -343,8 +343,8 @@ export function useAddSourcesToNotebook() {
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToAddSourcesToNotebook),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToAddSourcesToNotebook')),
         variant: 'destructive',
       })
     },
@@ -371,14 +371,14 @@ export function useRemoveSourceFromNotebook() {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.source(sourceId) })
 
       toast({
-        title: t.common.success,
-        description: t.sources.sourceRemovedFromNotebook,
+        title: t('common.success'),
+        description: t('sources.sourceRemovedFromNotebook'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
-        description: getApiErrorMessage(error, (key) => t(key), t.sources.failedToRemoveSourceFromNotebook),
+        title: t('common.error'),
+        description: getApiErrorMessage(error, (key) => t(key), t('sources.failedToRemoveSourceFromNotebook')),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/hooks/use-toast.ts b/frontend/src/lib/hooks/use-toast.ts
index 1677bcf1..6b177f15 100644
--- a/frontend/src/lib/hooks/use-toast.ts
+++ b/frontend/src/lib/hooks/use-toast.ts
@@ -13,11 +13,11 @@ export function useToast() {
   return {
     toast: ({ title, description, variant = 'default' }: ToastProps) => {
       if (variant === 'destructive') {
-        sonnerToast.error(title || t.common.error, {
+        sonnerToast.error(title || t('common.error'), {
           description,
         })
       } else {
-        sonnerToast.success(title || t.common.success, {
+        sonnerToast.success(title || t('common.success'), {
           description,
         })
       }
diff --git a/frontend/src/lib/hooks/use-transformations.ts b/frontend/src/lib/hooks/use-transformations.ts
index 3022bd47..abe477ed 100644
--- a/frontend/src/lib/hooks/use-transformations.ts
+++ b/frontend/src/lib/hooks/use-transformations.ts
@@ -42,13 +42,13 @@ export function useCreateTransformation() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.transformations })
       toast({
-        title: t.common.success,
-        description: t.transformations.createSuccess,
+        title: t('common.success'),
+        description: t('transformations.createSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
+        title: t('common.error'),
         description: getApiErrorMessage(error, (key) => t(key)),
         variant: 'destructive',
       })
@@ -68,13 +68,13 @@ export function useUpdateTransformation() {
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.transformations })
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.transformation(id) })
       toast({
-        title: t.common.success,
-        description: t.transformations.updateSuccess,
+        title: t('common.success'),
+        description: t('transformations.updateSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
+        title: t('common.error'),
         description: getApiErrorMessage(error, (key) => t(key)),
         variant: 'destructive',
       })
@@ -92,13 +92,13 @@ export function useDeleteTransformation() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.transformations })
       toast({
-        title: t.common.success,
-        description: t.transformations.deleteSuccess,
+        title: t('common.success'),
+        description: t('transformations.deleteSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
+        title: t('common.error'),
         description: getApiErrorMessage(error, (key) => t(key)),
         variant: 'destructive',
       })
@@ -114,7 +114,7 @@ export function useExecuteTransformation() {
     mutationFn: (data: ExecuteTransformationRequest) => transformationsApi.execute(data),
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
+        title: t('common.error'),
         description: getApiErrorMessage(error, (key) => t(key)),
         variant: 'destructive',
       })
@@ -139,13 +139,13 @@ export function useUpdateDefaultPrompt() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.defaultPrompt })
       toast({
-        title: t.common.success,
-        description: t.transformations.updateSuccess,
+        title: t('common.success'),
+        description: t('transformations.updateSuccess'),
       })
     },
     onError: (error: unknown) => {
       toast({
-        title: t.common.error,
+        title: t('common.error'),
         description: getApiErrorMessage(error, (key) => t(key)),
         variant: 'destructive',
       })
diff --git a/frontend/src/lib/hooks/use-translation.test.ts b/frontend/src/lib/hooks/use-translation.test.ts
index 0f358814..e2ded9ec 100644
--- a/frontend/src/lib/hooks/use-translation.test.ts
+++ b/frontend/src/lib/hooks/use-translation.test.ts
@@ -1,24 +1,22 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest'
 import { renderHook, act } from '@testing-library/react'
 // Ensure we are testing the real implementation
-vi.unmock('@/lib/hooks/use-translation') 
+vi.unmock('@/lib/hooks/use-translation')
 import { useTranslation } from './use-translation'
 import { useTranslation as useI18nTranslation } from 'react-i18next'
 
-// Mock react-i18next is already done in setup.ts, 
-// but we might need to control it per test
+// Mock react-i18next
 vi.mock('react-i18next', () => ({
   useTranslation: vi.fn()
 }))
 
 describe('useTranslation Hook', () => {
   const changeLanguageMock = vi.fn()
-  
+
   beforeEach(() => {
     vi.clearAllMocks()
     ;(useI18nTranslation as unknown as { mockReturnValue: (v: unknown) => void }).mockReturnValue({
       t: (key: string) => {
-        if (key === 'common') return { appName: 'Open Notebook' }
         if (key === 'common.appName') return 'Open Notebook'
         return key
       },
@@ -29,20 +27,19 @@ describe('useTranslation Hook', () => {
     })
   })
 
-  it('should return initial translations via proxy', () => {
+  it('should return standard t() function for translations', () => {
     const { result } = renderHook(() => useTranslation())
     expect(result.current.language).toBe('en-US')
-    // Test the proxy behavior t.common.appName -> t("common.appName")
-    expect(result.current.t.common.appName).toBe('Open Notebook')
+    expect(result.current.t('common.appName')).toBe('Open Notebook')
   })
 
-  it('should allow changing language via i18n.changeLanguage', () => {
+  it('should allow changing language via setLanguage', () => {
     const { result } = renderHook(() => useTranslation())
-    
+
     act(() => {
       result.current.setLanguage('zh-CN')
     })
-    
+
     expect(changeLanguageMock).toHaveBeenCalledWith('zh-CN')
   })
 })
diff --git a/frontend/src/lib/hooks/use-translation.ts b/frontend/src/lib/hooks/use-translation.ts
index 128c0448..7765b7e3 100644
--- a/frontend/src/lib/hooks/use-translation.ts
+++ b/frontend/src/lib/hooks/use-translation.ts
@@ -1,132 +1,13 @@
 import { useTranslation as useI18nTranslation } from 'react-i18next'
-import { useMemo, useCallback, useRef } from 'react'
+import { useMemo, useCallback } from 'react'
 import { emitLanguageChangeEnd, emitLanguageChangeStart } from '@/lib/i18n-events'
 
 /**
- * Custom useTranslation hook that provides a Proxy-based API for accessing translations.
- * 
- * CRITICAL: The Proxy implementation must be carefully designed to avoid infinite loops
- * during language switching. Key safeguards:
- * 1. Strict depth limit (max 4 levels)
- * 2. Blocked properties list to prevent React/JS internals from triggering recursion
- * 3. Early return for missing keys
- * 4. Memoization with stable dependencies
+ * Thin wrapper around react-i18next's useTranslation hook.
+ * Returns the standard t() function along with language utilities.
  */
 export function useTranslation() {
-  const { t: i18nTranslate, i18n } = useI18nTranslation()
-  
-  // Use a ref to track the current language to avoid unnecessary Proxy recreation
-  const languageRef = useRef(i18n.language)
-  languageRef.current = i18n.language
-  
-  // Loop detection
-  const accessCounts = useRef<Record<string, number>>({})
-  const lastResetTime = useRef(Date.now())
-
-  // High-performance Recursive Proxy with strict safety limits
-  const t = useMemo(() => {
-    const i18nTranslateCopy = i18nTranslate;
-    
-    // Set of properties to completely block from Proxy traversal
-    const BLOCKED_PROPS = new Set([
-      '__proto__', '__esModule', '$$typeof', 'toJSON', 'constructor',
-      'valueOf', 'toString', 'inspect', 'nodeType', 'tagName',
-      'then', 'catch', 'finally', // Promise methods
-      'prototype', 'caller', 'callee', 'arguments', // Function props
-      'Symbol(Symbol.toStringTag)', 'Symbol(Symbol.iterator)',
-    ]);
-    
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    const createProxy = (path: string, depth: number = 0): any => {
-      // SAFETY: Strict depth limit to prevent stack overflow
-      if (depth > 3) {
-        return path; // Return the path string as fallback
-      }
-      
-      // Base function for t('key') or t.path({ options })
-      const proxyTarget = (keyOrOptions?: string | unknown, options?: unknown) => {
-        if (typeof keyOrOptions === 'string') {
-          const fullPath = path ? `${path}.${keyOrOptions}` : keyOrOptions;
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          return i18nTranslateCopy(fullPath, options as any);
-        }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        return i18nTranslateCopy(path, keyOrOptions as any);
-      };
-
-      return new Proxy(proxyTarget, {
-        get(target, prop) {
-          // Reset counters every 1s
-          const now = Date.now()
-          if (now - lastResetTime.current > 1000) {
-            accessCounts.current = {}
-            lastResetTime.current = now
-          }
-
-          if (typeof prop === 'string') {
-             const key = path ? `${path}.${prop}` : prop;
-             accessCounts.current[key] = (accessCounts.current[key] || 0) + 1;
-             
-             if (accessCounts.current[key] > 1000) {
-               console.error(`[useTranslation] INFINITE LOOP DETECTED on key: "${key}". Breaking recursion.`);
-               return key; // Force break
-             }
-          }
-
-          // Handle Symbol properties immediately
-          if (typeof prop === 'symbol') {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            return (target as any)[prop];
-          }
-
-          if (typeof prop !== 'string') return undefined;
-
-          // Block React internals and JS built-ins
-          if (prop.startsWith('__') || prop.startsWith('@@') || BLOCKED_PROPS.has(prop)) {
-            return undefined;
-          }
-
-          const currentPath = path ? `${path}.${prop}` : prop;
-
-          // Try to get the translation first (before checking target properties,
-          // since target is a function and has built-in properties like 'name'
-          // that would shadow translation keys)
-          const result = i18nTranslateCopy(currentPath, { returnObjects: true });
-
-          // If it's a leaf string, return it directly
-          if (typeof result === 'string') {
-            return result;
-          }
-
-          // Handle String.prototype methods on the current path
-          if (prop === 'replace' || prop === 'split' || prop === 'length' ||
-              prop === 'trim' || prop === 'toLowerCase' || prop === 'toUpperCase') {
-            const translated = i18nTranslateCopy(path);
-            if (typeof translated === 'string') {
-              // eslint-disable-next-line @typescript-eslint/no-explicit-any
-              const val = (translated as any)[prop];
-              return typeof val === 'function' ? val.bind(translated) : val;
-            }
-          }
-
-          // If i18n returned the key itself (meaning not found), stop recursion
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any
-          if ((result as any) === currentPath || result === undefined || result === null) {
-            return currentPath; // Return path as fallback instead of continuing
-          }
-
-          // If it's an object (nested structure), continue with depth limit
-          if (typeof result === 'object') {
-            return createProxy(currentPath, depth + 1);
-          }
-
-          return result;
-        }
-      });
-    };
-
-    return createProxy('', 0);
-  }, [i18nTranslate])
+  const { t, i18n } = useI18nTranslation()
 
   const setLanguage = useCallback(async (lang: string) => {
     if (lang === i18n.language) {
@@ -143,11 +24,10 @@ export function useTranslation() {
     }
   }, [i18n])
 
-  return useMemo(() => ({ 
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    t: t as any,
+  return useMemo(() => ({
+    t,
     i18n,
-    language: i18n.language, 
-    setLanguage 
+    language: i18n.language,
+    setLanguage
   }), [t, i18n, setLanguage])
 }
diff --git a/frontend/src/lib/hooks/use-version-check.ts b/frontend/src/lib/hooks/use-version-check.ts
index 051d25f1..fff80148 100644
--- a/frontend/src/lib/hooks/use-version-check.ts
+++ b/frontend/src/lib/hooks/use-version-check.ts
@@ -26,12 +26,12 @@ export function useVersionCheck() {
         const dismissKey = `version_notification_dismissed_${config.latestVersion}`
         if (sessionStorage.getItem(dismissKey)) return
 
-        toast.info(t.advanced.updateAvailable.replace('{version}', config.latestVersion), {
-          description: t.advanced.updateAvailableDesc,
+        toast.info(t('advanced.updateAvailable').replace('{version}', config.latestVersion), {
+          description: t('advanced.updateAvailableDesc'),
           duration: Infinity,
           closeButton: true,
           action: {
-            label: t.advanced.viewOnGithub,
+            label: t('advanced.viewOnGithub'),
             onClick: () => window.open('https://github.com/lfnovo/open-notebook', '_blank'),
           },
           onDismiss: () => sessionStorage.setItem(dismissKey, 'true'),
diff --git a/frontend/src/lib/hooks/useNotebookChat.ts b/frontend/src/lib/hooks/useNotebookChat.ts
index 77f0f00d..92a7c891 100644
--- a/frontend/src/lib/hooks/useNotebookChat.ts
+++ b/frontend/src/lib/hooks/useNotebookChat.ts
@@ -80,7 +80,7 @@ export function useNotebookChat({ notebookId, sources, notes, contextSelections
         queryKey: QUERY_KEYS.notebookChatSessions(notebookId)
       })
       setCurrentSessionId(newSession.id)
-      toast.success(t.chat.sessionCreated)
+      toast.success(t('chat.sessionCreated'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
@@ -101,7 +101,7 @@ export function useNotebookChat({ notebookId, sources, notes, contextSelections
       queryClient.invalidateQueries({
         queryKey: QUERY_KEYS.notebookChatSession(currentSessionId!)
       })
-      toast.success(t.chat.sessionUpdated)
+      toast.success(t('chat.sessionUpdated'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
@@ -121,7 +121,7 @@ export function useNotebookChat({ notebookId, sources, notes, contextSelections
         setCurrentSessionId(null)
         setMessages([])
       }
-      toast.success(t.chat.sessionDeleted)
+      toast.success(t('chat.sessionDeleted'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
diff --git a/frontend/src/lib/hooks/useSourceChat.ts b/frontend/src/lib/hooks/useSourceChat.ts
index 4087b6bd..4b69056a 100644
--- a/frontend/src/lib/hooks/useSourceChat.ts
+++ b/frontend/src/lib/hooks/useSourceChat.ts
@@ -60,7 +60,7 @@ export function useSourceChat(sourceId: string) {
     onSuccess: (newSession) => {
       queryClient.invalidateQueries({ queryKey: ['sourceChatSessions', sourceId] })
       setCurrentSessionId(newSession.id)
-      toast.success(t.chat.sessionCreated)
+      toast.success(t('chat.sessionCreated'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
@@ -75,7 +75,7 @@ export function useSourceChat(sourceId: string) {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ['sourceChatSessions', sourceId] })
       queryClient.invalidateQueries({ queryKey: ['sourceChatSession', sourceId, currentSessionId] })
-      toast.success(t.chat.sessionUpdated)
+      toast.success(t('chat.sessionUpdated'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
@@ -93,7 +93,7 @@ export function useSourceChat(sourceId: string) {
         setCurrentSessionId(null)
         setMessages([])
       }
-      toast.success(t.chat.sessionDeleted)
+      toast.success(t('chat.sessionDeleted'))
     },
     onError: (err: unknown) => {
       const error = err as { response?: { data?: { detail?: string } }, message?: string };
diff --git a/frontend/src/test/setup.ts b/frontend/src/test/setup.ts
index 1a98dc00..7af5fe76 100644
--- a/frontend/src/test/setup.ts
+++ b/frontend/src/test/setup.ts
@@ -1,6 +1,5 @@
 import '@testing-library/jest-dom'
 import { vi } from 'vitest'
-import { enUS } from '../lib/locales/en-US'
 
 // Mock next/navigation
 vi.mock('next/navigation', () => ({
@@ -28,14 +27,11 @@ Object.defineProperty(window, 'matchMedia', {
   })),
 })
 
-// Mock @/lib/hooks/use-translation with full locale structure
+// Mock @/lib/hooks/use-translation with standard t() function
 vi.mock('../lib/hooks/use-translation', () => {
-  const t = (key: string) => key
-  Object.assign(t, enUS)
-  
   return {
     useTranslation: () => ({
-      t,
+      t: (key: string) => key,
       language: 'en-US',
       setLanguage: vi.fn(),
     }),

From e2cf35060b58d51046515d68c537d971df561f0b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Apr 2026 18:31:18 -0300
Subject: [PATCH 018/345] fix: use getApiErrorMessage in use-settings and
 update CLAUDE.md docs

- Replace getApiErrorKey with getApiErrorMessage in use-settings.ts
  so error toasts show translated messages instead of raw i18n keys
- Update CLAUDE.md files to reflect the new t('section.key') pattern
  and remove outdated Proxy-related gotchas
---
 frontend/src/CLAUDE.md                 |  4 +--
 frontend/src/lib/hooks/CLAUDE.md       |  9 +++----
 frontend/src/lib/hooks/use-settings.ts |  4 +--
 frontend/src/lib/locales/CLAUDE.md     | 37 ++++++++++++++++----------
 4 files changed, 31 insertions(+), 23 deletions(-)

diff --git a/frontend/src/CLAUDE.md b/frontend/src/CLAUDE.md
index 5959f838..5ccc9afe 100644
--- a/frontend/src/CLAUDE.md
+++ b/frontend/src/CLAUDE.md
@@ -64,8 +64,8 @@ User interactions trigger mutations/queries via hooks, which communicate with th
 #### `lib/locales/` — Internationalization (i18n)
 - **Locale files** (`en-US/`, `pt-BR/`, `zh-CN/`, `zh-TW/`, `ja-JP/`): Translation strings organized by feature
 - **`i18n.ts`**: i18next configuration with language detection
-- **`use-translation.ts`**: Custom hook with Proxy-based `t.section.key` access pattern
-- **Pattern**: Components call `useTranslation()` hook; access strings via `t.common.save`, `t.notebooks.title`
+- **`use-translation.ts`**: Thin wrapper around react-i18next's `useTranslation` with language change events
+- **Pattern**: Components call `useTranslation()` hook; access strings via `t('common.save')`, `t('notebooks.title')`
 
 ## Data & Control Flow Walkthrough
 
diff --git a/frontend/src/lib/hooks/CLAUDE.md b/frontend/src/lib/hooks/CLAUDE.md
index e2d00a85..fc56b403 100644
--- a/frontend/src/lib/hooks/CLAUDE.md
+++ b/frontend/src/lib/hooks/CLAUDE.md
@@ -10,7 +10,7 @@ React hooks for API data fetching, state management, and complex workflows (chat
 - **Streaming hooks** (`useAsk`): SSE parsing for multi-stage Ask workflows (strategy → answers → final answer)
 - **Model/config hooks** (`useModels`, `useSettings`, `useTransformations`): Application-level settings and model management
 - **Utility hooks** (`useMediaQuery`, `useToast`, `useNavigation`, `useAuth`): UI state and auth checking
-- **i18n hook** (`useTranslation`): Proxy-based translation access with `t.section.key` pattern and language switching
+- **i18n hook** (`useTranslation`): Thin wrapper around react-i18next with `t('section.key')` pattern and language switching
 
 ## Important Patterns
 
@@ -22,7 +22,7 @@ React hooks for API data fetching, state management, and complex workflows (chat
 - **SSE streaming pattern**: `useAsk` manually parses newline-delimited JSON from `/api/search/ask`; handles incomplete buffers
 - **Status polling**: `useSourceStatus` auto-refetches every 2s while `status === 'running' | 'queued' | 'new'`
 - **Context building**: `useNotebookChat.buildContext()` assembles selected sources + notes with token/char counts
-- **i18n Proxy pattern**: `useTranslation` returns `t` object with Proxy; access `t.section.key` instead of `t('section.key')`
+- **i18n pattern**: `useTranslation` returns standard react-i18next `t` function; access translations via `t('section.key')`
 
 ## Key Dependencies
 
@@ -49,8 +49,7 @@ React hooks for API data fetching, state management, and complex workflows (chat
 - **Status polling race**: `useSourceStatus` may refetch stale data before server catches up; retry logic has 3-attempt limit
 - **Keyboard trap in dialogs**: Some hooks manage modal state; ensure Dialog/Modal components handle escape key properly
 - **Form data handling**: `useFileUpload` and source creation convert JSON fields to strings in FormData
-- **useTranslation depth limit**: Proxy limits nesting to 4 levels; deeper access returns path string as fallback
-- **useTranslation loop detection**: >1000 accesses to same key in 1s triggers error and breaks recursion
+- **useTranslation**: Thin wrapper preserving `setLanguage` with language change events for `LanguageLoadingOverlay`
 
 ## Testing Patterns
 
@@ -187,7 +186,7 @@ function CredentialSettings() {
 ### Important Notes
 
 - **Toast notifications**: All mutations show success/error toasts automatically
-- **i18n integration**: Toast messages use translation keys from `t.apiKeys.*` and `t.common.*`
+- **i18n integration**: Toast messages use translation keys from `t('apiKeys.*')` and `t('common.*')`
 - **Error handling**: Uses `getApiErrorKey()` utility to extract error messages from API responses
 - **Local test results**: `useTestCredential` stores results in local state (not cached in TanStack Query)
 - **Migration feedback**: Migration hooks show different toasts based on migrated/skipped/error counts
diff --git a/frontend/src/lib/hooks/use-settings.ts b/frontend/src/lib/hooks/use-settings.ts
index f5416ccd..736a1f2b 100644
--- a/frontend/src/lib/hooks/use-settings.ts
+++ b/frontend/src/lib/hooks/use-settings.ts
@@ -3,7 +3,7 @@ import { settingsApi } from '@/lib/api/settings'
 import { QUERY_KEYS } from '@/lib/api/query-client'
 import { useToast } from '@/lib/hooks/use-toast'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { getApiErrorKey } from '@/lib/utils/error-handler'
+import { getApiErrorMessage } from '@/lib/utils/error-handler'
 import { SettingsResponse } from '@/lib/types/api'
 
 export function useSettings() {
@@ -30,7 +30,7 @@ export function useUpdateSettings() {
     onError: (error: unknown) => {
       toast({
         title: t('common.error'),
-        description: getApiErrorKey(error, t('common.error')),
+        description: getApiErrorMessage(error, (key) => t(key), 'common.error'),
         variant: 'destructive',
       })
     },
diff --git a/frontend/src/lib/locales/CLAUDE.md b/frontend/src/lib/locales/CLAUDE.md
index 6d4b9291..23b9eb8f 100644
--- a/frontend/src/lib/locales/CLAUDE.md
+++ b/frontend/src/lib/locales/CLAUDE.md
@@ -1,6 +1,6 @@
 # Locales Module (i18n)
 
-Internationalization system providing multi-language UI support using i18next with type-safe translation access.
+Internationalization system providing multi-language UI support using i18next with standard `t()` function calls.
 
 ## Architecture
 
@@ -9,7 +9,7 @@ lib/
 ├── i18n.ts              # i18next initialization and configuration
 ├── i18n-events.ts       # Language change event emitters
 ├── hooks/
-│   └── use-translation.ts  # Custom hook with Proxy-based API
+│   └── use-translation.ts  # Thin wrapper around react-i18next with language change events
 ├── utils/
 │   └── date-locale.ts   # date-fns locale mapping
 └── locales/
@@ -28,7 +28,7 @@ lib/
 - **`i18n.ts`**: i18next initialization with language detection (localStorage → browser)
 - **`i18n-events.ts`**: Event emitters for language change start/end (used by loading overlay)
 - **`locales/index.ts`**: Central registry exporting all locales and `LanguageCode` type
-- **`use-translation.ts`**: Custom hook providing `t` object with nested property access
+- **`use-translation.ts`**: Thin wrapper around react-i18next returning `{ t, i18n, language, setLanguage }`
 
 ## Translation Structure
 
@@ -67,24 +67,36 @@ import { useTranslation } from '@/lib/hooks/use-translation'
 function MyComponent() {
   const { t, language, setLanguage } = useTranslation()
 
-  // Nested property access (Proxy-based)
-  return <h1>{t.notebooks.title}</h1>
+  // Standard t() function call
+  return <h1>{t('notebooks.title')}</h1>
 
-  // With interpolation
-  return <p>{t.common.updated.replace('{time}', timeAgo)}</p>
+  // With string interpolation
+  return <p>{t('common.updated').replace('{time}', timeAgo)}</p>
 
   // Change language
   await setLanguage('zh-CN')
 }
 ```
 
+### Functions that accept t as a parameter
+
+Use `TFunction` from i18next:
+
+```typescript
+import type { TFunction } from 'i18next'
+
+const getNavigation = (t: TFunction) => [
+  { name: t('navigation.sources'), href: '/sources' },
+]
+```
+
 ## Important Patterns
 
-- **Proxy-based access**: `t.section.key` instead of `t('section.key')` for better DX
-- **Type safety**: `TranslationKeys` type derived from `enUS` locale
+- **Standard t() calls**: `t('section.key')` — standard react-i18next pattern
 - **Language persistence**: Saved to localStorage, auto-detected on load
 - **Fallback**: Falls back to `en-US` if key missing in current locale
 - **Date localization**: Use `getDateLocale(language)` from `utils/date-locale.ts`
+- **Language change events**: `setLanguage` emits start/end events for `LanguageLoadingOverlay`
 
 ## Key Dependencies
 
@@ -117,13 +129,10 @@ function MyComponent() {
 
 ## Important Quirks & Gotchas
 
-- **Proxy depth limit**: `useTranslation` limits nesting to 4 levels to prevent infinite loops
-- **Blocked properties**: React internals (`__proto__`, `$$typeof`, etc.) are blocked from Proxy traversal
-- **Loop detection**: Access counts reset every 1s; >1000 accesses triggers error and breaks recursion
-- **String methods**: `.replace()`, `.split()` work on translated strings via Proxy magic
 - **Language change events**: `emitLanguageChangeStart/End` used by `LanguageLoadingOverlay` for UX
 - **No SSR**: `useSuspense: false` disables React Suspense for i18next (avoids hydration issues)
 - **All keys required**: Missing keys in non-English locales fall back to English; keep locales in sync
+- **ErrorBoundary**: Uses raw `enUS` locale object directly (class component, can't use hooks)
 
 ## Testing Patterns
 
@@ -131,7 +140,7 @@ function MyComponent() {
 // Mock useTranslation in tests (see test/setup.ts)
 vi.mock('@/lib/hooks/use-translation', () => ({
   useTranslation: () => ({
-    t: enUS,  // Use English locale directly
+    t: (key: string) => key,  // Identity function returns the key
     language: 'en-US',
     setLanguage: vi.fn(),
   }),

From b3452582c96397b7567bb53f24a5a6f3a7932217 Mon Sep 17 00:00:00 2001
From: Rousseau Vincent <vincentrou@gmail.com>
Date: Wed, 15 Apr 2026 16:26:14 +0200
Subject: [PATCH 019/345] Remove reference to OLLAMA_NUM_GPU

---
 docs/0-START-HERE/quick-start-local.md | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index 07d48d05..dc6b34f8 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -231,8 +231,7 @@ Check if GPU is available:
 # Show available GPUs
 docker exec open-notebook-local-ollama-1 ollama ps
 
-# Enable GPU in docker-compose.yml:
-# - OLLAMA_NUM_GPU=1
+# Enable GPU in docker-compose.yml
 ```
 
 Then restart: `docker compose restart ollama`

From 2b4535413bfd8ffea4b2f125add13932a5946e37 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 15 Apr 2026 20:59:54 +0000
Subject: [PATCH 020/345] chore(deps): bump python-multipart from 0.0.22 to
 0.0.26

Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.22 to 0.0.26.
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.22...0.0.26)

---
updated-dependencies:
- dependency-name: python-multipart
  dependency-version: 0.0.26
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/uv.lock b/uv.lock
index b3528780..e8de6ec4 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2072,7 +2072,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },
@@ -2845,11 +2845,11 @@ wheels = [
 
 [[package]]
 name = "python-multipart"
-version = "0.0.22"
+version = "0.0.26"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/94/01/979e98d542a70714b0cb2b6728ed0b7c46792b695e3eaec3e20711271ca3/python_multipart-0.0.22.tar.gz", hash = "sha256:7340bef99a7e0032613f56dc36027b959fd3b30a787ed62d310e951f7c3a3a58", size = 37612, upload-time = "2026-01-25T10:15:56.219Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/88/71/b145a380824a960ebd60e1014256dbb7d2253f2316ff2d73dfd8928ec2c3/python_multipart-0.0.26.tar.gz", hash = "sha256:08fadc45918cd615e26846437f50c5d6d23304da32c341f289a617127b081f17", size = 43501, upload-time = "2026-04-10T14:09:59.473Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1b/d0/397f9626e711ff749a95d96b7af99b9c566a9bb5129b8e4c10fc4d100304/python_multipart-0.0.22-py3-none-any.whl", hash = "sha256:2b2cd894c83d21bf49d702499531c7bafd057d730c201782048f7945d82de155", size = 24579, upload-time = "2026-01-25T10:15:54.811Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/22/f1925cdda983ab66fc8ec6ec8014b959262747e58bdca26a4e3d1da29d56/python_multipart-0.0.26-py3-none-any.whl", hash = "sha256:c0b169f8c4484c13b0dcf2ef0ec3a4adb255c4b7d18d8e420477d2b1dd03f185", size = 28847, upload-time = "2026-04-10T14:09:58.131Z" },
 ]
 
 [[package]]

From 869604f824b9b6d0cecb33ef0102cbc7400aaae8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 02:36:34 +0000
Subject: [PATCH 021/345] chore(deps): bump langsmith from 0.6.4 to 0.7.31

Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.6.4 to 0.7.31.
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](https://github.com/langchain-ai/langsmith-sdk/compare/v0.6.4...v0.7.31)

---
updated-dependencies:
- dependency-name: langsmith
  dependency-version: 0.7.31
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/uv.lock b/uv.lock
index b3528780..358954d7 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1640,7 +1640,7 @@ wheels = [
 
 [[package]]
 name = "langsmith"
-version = "0.6.4"
+version = "0.7.31"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
@@ -1650,11 +1650,12 @@ dependencies = [
     { name = "requests" },
     { name = "requests-toolbelt" },
     { name = "uuid-utils" },
+    { name = "xxhash" },
     { name = "zstandard" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/e7/85/9c7933052a997da1b85bc5c774f3865e9b1da1c8d71541ea133178b13229/langsmith-0.6.4.tar.gz", hash = "sha256:36f7223a01c218079fbb17da5e536ebbaf5c1468c028abe070aa3ae59bc99ec8", size = 919964, upload-time = "2026-01-15T20:02:28.873Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e6/11/696019490992db5c87774dc20515529ef42a01e1d770fb754ed6d9b12fb0/langsmith-0.7.31.tar.gz", hash = "sha256:331ee4f7c26bb5be4022b9859b7d7b122cbf8c9d01d9f530114c1914b0349ffb", size = 1178480, upload-time = "2026-04-14T17:55:41.242Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/66/0f/09a6637a7ba777eb307b7c80852d9ee26438e2bdafbad6fcc849ff9d9192/langsmith-0.6.4-py3-none-any.whl", hash = "sha256:ac4835860160be371042c7adbba3cb267bcf8d96a5ea976c33a8a4acad6c5486", size = 283503, upload-time = "2026-01-15T20:02:26.662Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/a1/a013cf458c301cda86a213dd153ce0a01c93f1ab5833f951e6a44c9763ce/langsmith-0.7.31-py3-none-any.whl", hash = "sha256:0291d49203f6e80dda011af1afda61eb0595a4d697adb684590a8805e1d61fb6", size = 373276, upload-time = "2026-04-14T17:55:39.677Z" },
 ]
 
 [[package]]
@@ -2072,7 +2073,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 45c16e1fa167667e0516beebab3063fd02b31b89 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 23:59:26 +0000
Subject: [PATCH 022/345] chore(deps): bump authlib from 1.6.9 to 1.6.11

Bumps [authlib](https://github.com/authlib/authlib) from 1.6.9 to 1.6.11.
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/v1.6.11/docs/changelog.rst)
- [Commits](https://github.com/authlib/authlib/compare/v1.6.9...v1.6.11)

---
updated-dependencies:
- dependency-name: authlib
  dependency-version: 1.6.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/uv.lock b/uv.lock
index b3528780..76d30142 100644
--- a/uv.lock
+++ b/uv.lock
@@ -203,14 +203,14 @@ wheels = [
 
 [[package]]
 name = "authlib"
-version = "1.6.9"
+version = "1.6.11"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cryptography" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/af/98/00d3dd826d46959ad8e32af2dbb2398868fd9fd0683c26e56d0789bd0e68/authlib-1.6.9.tar.gz", hash = "sha256:d8f2421e7e5980cc1ddb4e32d3f5fa659cfaf60d8eaf3281ebed192e4ab74f04", size = 165134, upload-time = "2026-03-02T07:44:01.998Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/28/10/b325d58ffe86815b399334a101e63bc6fa4e1953921cb23703b48a0a0220/authlib-1.6.11.tar.gz", hash = "sha256:64db35b9b01aeccb4715a6c9a6613a06f2bd7be2ab9d2eb89edd1dfc7580a38f", size = 165359, upload-time = "2026-04-16T07:22:50.279Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/53/23/b65f568ed0c22f1efacb744d2db1a33c8068f384b8c9b482b52ebdbc3ef6/authlib-1.6.9-py2.py3-none-any.whl", hash = "sha256:f08b4c14e08f0861dc18a32357b33fbcfd2ea86cfe3fe149484b4d764c4a0ac3", size = 244197, upload-time = "2026-03-02T07:44:00.307Z" },
+    { url = "https://files.pythonhosted.org/packages/57/2f/55fca558f925a51db046e5b929deb317ddb05afed74b22d89f4eca578980/authlib-1.6.11-py2.py3-none-any.whl", hash = "sha256:c8687a9a26451c51a34a06fa17bb97cb15bba46a6a626755e2d7f50da8bff3e3", size = 244469, upload-time = "2026-04-16T07:22:48.413Z" },
 ]
 
 [[package]]
@@ -2072,7 +2072,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 54e626cd9e60f97ed0b6690ec573e63497342987 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Apr 2026 01:07:27 +0000
Subject: [PATCH 023/345] chore(deps): bump langchain-text-splitters from 1.1.0
 to 1.1.2

Bumps [langchain-text-splitters](https://github.com/langchain-ai/langchain) from 1.1.0 to 1.1.2.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-text-splitters==1.1.0...langchain-text-splitters==1.1.2)

---
updated-dependencies:
- dependency-name: langchain-text-splitters
  dependency-version: 1.1.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 uv.lock | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/uv.lock b/uv.lock
index b3528780..c40e422f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1446,7 +1446,7 @@ wheels = [
 
 [[package]]
 name = "langchain-core"
-version = "1.2.28"
+version = "1.2.31"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jsonpatch" },
@@ -1458,9 +1458,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "uuid-utils" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f8/a4/317a1a3ac1df33a64adb3670bf88bbe3b3d5baa274db6863a979db472897/langchain_core-1.2.28.tar.gz", hash = "sha256:271a3d8bd618f795fdeba112b0753980457fc90537c46a0c11998516a74dc2cb", size = 846119, upload-time = "2026-04-08T18:19:34.867Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a1/5a/7523ff55668a233beef7e909e8e2074a1cc3b620e0bbf0a4ec5f38549b3b/langchain_core-1.2.31.tar.gz", hash = "sha256:aad3ecc9e4dce2dd2bb79526c81b92e5322fd81db7834a031cb80359f2e3ebaa", size = 850756, upload-time = "2026-04-16T13:26:29.241Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a8/92/32f785f077c7e898da97064f113c73fbd9ad55d1e2169cf3a391b183dedb/langchain_core-1.2.28-py3-none-any.whl", hash = "sha256:80764232581eaf8057bcefa71dbf8adc1f6a28d257ebd8b95ba9b8b452e8c6ac", size = 508727, upload-time = "2026-04-08T18:19:32.823Z" },
+    { url = "https://files.pythonhosted.org/packages/52/02/668ddf4f1cf963ad691bdbea672a85244e6271eb0a4acfaf662bbd94a3b1/langchain_core-1.2.31-py3-none-any.whl", hash = "sha256:c407193edb99311cc36ec3e4d3667a065bbc4d7d72fbb6e368538b9b134d4033", size = 513264, upload-time = "2026-04-16T13:26:27.566Z" },
 ]
 
 [[package]]
@@ -1549,14 +1549,14 @@ wheels = [
 
 [[package]]
 name = "langchain-text-splitters"
-version = "1.1.0"
+version = "1.1.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/41/42/c178dcdc157b473330eb7cc30883ea69b8ec60078c7b85e2d521054c4831/langchain_text_splitters-1.1.0.tar.gz", hash = "sha256:75e58acb7585dc9508f3cd9d9809cb14751283226c2d6e21fb3a9ae57582ca22", size = 272230, upload-time = "2025-12-14T01:15:38.659Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/26/9f/6c545900fefb7b00ddfa3f16b80d61338a0ec68c31c5451eeeab99082760/langchain_text_splitters-1.1.2.tar.gz", hash = "sha256:782a723db0a4746ac91e251c7c1d57fd23636e4f38ed733074e28d7a86f41627", size = 293580, upload-time = "2026-04-16T14:20:39.162Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d8/1a/a84ed1c046deecf271356b0179c1b9fba95bfdaa6f934e1849dee26fad7b/langchain_text_splitters-1.1.0-py3-none-any.whl", hash = "sha256:f00341fe883358786104a5f881375ac830a4dd40253ecd42b4c10536c6e4693f", size = 34182, upload-time = "2025-12-14T01:15:37.382Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/26/1ef06f56198d631296d646a6223de35bcc6cf9795ceb2442816bc963b84c/langchain_text_splitters-1.1.2-py3-none-any.whl", hash = "sha256:a2de0d799ff31886429fd6e2e0032df275b60ec817c19059a7b46181cc1c2f10", size = 35903, upload-time = "2026-04-16T14:20:38.243Z" },
 ]
 
 [[package]]
@@ -2072,7 +2072,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 61684ba660e50eff0887daffd5ff222676984fde Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Apr 2026 01:11:11 +0000
Subject: [PATCH 024/345] chore(deps): bump langchain-openai from 1.1.7 to
 1.1.14

Bumps [langchain-openai](https://github.com/langchain-ai/langchain) from 1.1.7 to 1.1.14.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-openai==1.1.7...langchain-openai==1.1.14)

---
updated-dependencies:
- dependency-name: langchain-openai
  dependency-version: 1.1.14
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml |  2 +-
 uv.lock        | 22 +++++++++++-----------
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index d75f55ad..5206ed5d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ dependencies = [
     "tiktoken>=0.12.0",
     "langgraph-checkpoint-sqlite>=3.0.1",
     "langchain-community>=0.4.1",
-    "langchain-openai>=1.1.6",
+    "langchain-openai>=1.1.14",
     "langchain-anthropic>=1.3.0",
     "langchain-ollama>=1.0.1",
     "langchain-google-genai>=4.1.2",
diff --git a/uv.lock b/uv.lock
index b3528780..58ce7381 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1446,7 +1446,7 @@ wheels = [
 
 [[package]]
 name = "langchain-core"
-version = "1.2.28"
+version = "1.2.31"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jsonpatch" },
@@ -1458,9 +1458,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "uuid-utils" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f8/a4/317a1a3ac1df33a64adb3670bf88bbe3b3d5baa274db6863a979db472897/langchain_core-1.2.28.tar.gz", hash = "sha256:271a3d8bd618f795fdeba112b0753980457fc90537c46a0c11998516a74dc2cb", size = 846119, upload-time = "2026-04-08T18:19:34.867Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a1/5a/7523ff55668a233beef7e909e8e2074a1cc3b620e0bbf0a4ec5f38549b3b/langchain_core-1.2.31.tar.gz", hash = "sha256:aad3ecc9e4dce2dd2bb79526c81b92e5322fd81db7834a031cb80359f2e3ebaa", size = 850756, upload-time = "2026-04-16T13:26:29.241Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a8/92/32f785f077c7e898da97064f113c73fbd9ad55d1e2169cf3a391b183dedb/langchain_core-1.2.28-py3-none-any.whl", hash = "sha256:80764232581eaf8057bcefa71dbf8adc1f6a28d257ebd8b95ba9b8b452e8c6ac", size = 508727, upload-time = "2026-04-08T18:19:32.823Z" },
+    { url = "https://files.pythonhosted.org/packages/52/02/668ddf4f1cf963ad691bdbea672a85244e6271eb0a4acfaf662bbd94a3b1/langchain_core-1.2.31-py3-none-any.whl", hash = "sha256:c407193edb99311cc36ec3e4d3667a065bbc4d7d72fbb6e368538b9b134d4033", size = 513264, upload-time = "2026-04-16T13:26:27.566Z" },
 ]
 
 [[package]]
@@ -1535,16 +1535,16 @@ wheels = [
 
 [[package]]
 name = "langchain-openai"
-version = "1.1.7"
+version = "1.1.14"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
     { name = "openai" },
     { name = "tiktoken" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/38/b7/30bfc4d1b658a9ee524bcce3b0b2ec9c45a11c853a13c4f0c9da9882784b/langchain_openai-1.1.7.tar.gz", hash = "sha256:f5ec31961ed24777548b63a5fe313548bc6e0eb9730d6552b8c6418765254c81", size = 1039134, upload-time = "2026-01-07T19:44:59.728Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/8e/f5/b1a56f703fb90952b07ff9fb5507123a39df1267d62a7f2bb821c5dbb628/langchain_openai-1.1.14.tar.gz", hash = "sha256:71b4262932fabe506ce79c175dbc956cc48f24d81e20b27662df493147750643", size = 1115195, upload-time = "2026-04-16T14:55:24.696Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/64/a1/50e7596aca775d8c3883eceeaf47489fac26c57c1abe243c00174f715a8a/langchain_openai-1.1.7-py3-none-any.whl", hash = "sha256:34e9cd686aac1a120d6472804422792bf8080a2103b5d21ee450c9e42d053815", size = 84753, upload-time = "2026-01-07T19:44:58.629Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/fa/8c33befbc0cf81b21371cc1dab4e7bf94a80b8116194f263a5021ec02529/langchain_openai-1.1.14-py3-none-any.whl", hash = "sha256:cb525d2011f9813fc15a7dcfd4bca5b87badcbcb2c113a7fbe45d1b8a1bbb69c", size = 88705, upload-time = "2026-04-16T14:55:23.159Z" },
 ]
 
 [[package]]
@@ -2072,7 +2072,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.4"
+version = "1.8.5"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },
@@ -2142,7 +2142,7 @@ requires-dist = [
     { name = "langchain-groq", specifier = ">=1.1.1" },
     { name = "langchain-mistralai", specifier = ">=1.1.1" },
     { name = "langchain-ollama", specifier = ">=1.0.1" },
-    { name = "langchain-openai", specifier = ">=1.1.6" },
+    { name = "langchain-openai", specifier = ">=1.1.14" },
     { name = "langgraph", specifier = ">=1.0.5" },
     { name = "langgraph-checkpoint-sqlite", specifier = ">=3.0.1" },
     { name = "loguru", specifier = ">=0.7.2" },
@@ -2174,7 +2174,7 @@ dev = [
 
 [[package]]
 name = "openai"
-version = "2.15.0"
+version = "2.32.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
@@ -2186,9 +2186,9 @@ dependencies = [
     { name = "tqdm" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/94/f4/4690ecb5d70023ce6bfcfeabfe717020f654bde59a775058ec6ac4692463/openai-2.15.0.tar.gz", hash = "sha256:42eb8cbb407d84770633f31bf727d4ffb4138711c670565a41663d9439174fba", size = 627383, upload-time = "2026-01-09T22:10:08.603Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ed/59/bdcc6b759b8c42dd73afaf5bf8f902c04b37987a5514dbc1c64dba390fef/openai-2.32.0.tar.gz", hash = "sha256:c54b27a9e4cb8d51f0dd94972ffd1a04437efeb259a9e60d8922b8bd26fe55e0", size = 693286, upload-time = "2026-04-15T22:28:19.434Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/b5/df/c306f7375d42bafb379934c2df4c2fa3964656c8c782bac75ee10c102818/openai-2.15.0-py3-none-any.whl", hash = "sha256:6ae23b932cd7230f7244e52954daa6602716d6b9bf235401a107af731baea6c3", size = 1067879, upload-time = "2026-01-09T22:10:06.446Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/c1/d6e64ccd0536bf616556f0cad2b6d94a8125f508d25cfd814b1d2db4e2f1/openai-2.32.0-py3-none-any.whl", hash = "sha256:4dcc9badeb4bf54ad0d187453742f290226d30150890b7890711bda4f32f192f", size = 1162570, upload-time = "2026-04-15T22:28:17.714Z" },
 ]
 
 [[package]]

From 648f6d78083091c171a4ed176d7cae07786dc9a9 Mon Sep 17 00:00:00 2001
From: CHEMAZENER <130780827+chemazener@users.noreply.github.com>
Date: Sun, 19 Apr 2026 16:32:12 +0200
Subject: [PATCH 025/345] feat(i18n): add Spanish (es-ES) locale (#757)

* feat(i18n): add Spanish (es-ES) locale

Add complete Spanish translation covering all 930+ keys across
all UI sections: navigation, notebooks, sources, chat, search,
podcasts, transformations, settings, models, API keys, and error messages.

- Create es-ES locale file with full translation
- Register es-ES in locale index with LanguageCode type
- Add Spanish entry to LanguageToggle dropdown
- Add `spanish` key to common section in all existing locales
- Add date-fns Spanish locale for date formatting

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(i18n): use t() function accessor for Spanish dropdown item

Rebased onto main, which migrated i18n from the custom Proxy pattern to
react-i18next's t() function. Updates the new es-ES entry in
LanguageToggle to match the current accessor style so it renders the
translated label at runtime instead of undefined.

---------

Co-authored-by: chemazener <chemazener@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../src/components/common/LanguageToggle.tsx  |   6 +
 frontend/src/lib/locales/bn-IN/index.ts       |   1 +
 frontend/src/lib/locales/en-US/index.ts       |   1 +
 frontend/src/lib/locales/es-ES/index.ts       | 931 ++++++++++++++++++
 frontend/src/lib/locales/fr-FR/index.ts       |   1 +
 frontend/src/lib/locales/index.ts             |   7 +-
 frontend/src/lib/locales/it-IT/index.ts       |   1 +
 frontend/src/lib/locales/ja-JP/index.ts       |   1 +
 frontend/src/lib/locales/pt-BR/index.ts       |   1 +
 frontend/src/lib/locales/ru-RU/index.ts       |   1 +
 frontend/src/lib/locales/zh-CN/index.ts       |   1 +
 frontend/src/lib/locales/zh-TW/index.ts       |   1 +
 frontend/src/lib/utils/date-locale.ts         |   3 +-
 13 files changed, 953 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/lib/locales/es-ES/index.ts

diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 492d523e..67c01ec8 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -82,6 +82,12 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         >
           <span>{t('common.bengali')}</span>
         </DropdownMenuItem>
+        <DropdownMenuItem
+          onClick={() => setLanguage('es-ES')}
+          className={currentLang === 'es-ES' || currentLang.startsWith('es') ? 'bg-accent' : ''}
+        >
+          <span>{t('common.spanish')}</span>
+        </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 9cb4a50d..506cf751 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -26,6 +26,7 @@ export const bnIN = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "উৎস",
     notebook: "নোটবুক",
     podcast: "পডকাস্ট",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index bf9df0e8..dc698aa7 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -26,6 +26,7 @@ export const enUS = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "Source",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
new file mode 100644
index 00000000..5796a29b
--- /dev/null
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -0,0 +1,931 @@
+export const esES = {
+  common: {
+    search: "Buscar...",
+    create: "Nuevo",
+    new: "Nuevo",
+    cancel: "Cancelar",
+    delete: "Eliminar",
+    edit: "Editar",
+    theme: "Tema",
+    signOut: "Cerrar sesión",
+    noMatches: "No se encontraron coincidencias",
+    tryDifferentSearch: "Intenta usar un término de búsqueda diferente.",
+    light: "Claro",
+    dark: "Oscuro",
+    system: "Sistema",
+    loading: "Cargando...",
+    note: "Nota",
+    insight: "Análisis",
+    newSource: "Nueva fuente",
+    newNotebook: "Nuevo cuaderno",
+    newPodcast: "Nuevo podcast",
+    language: "Idioma",
+    english: "English",
+    chinese: "简体中文",
+    japanese: "日本語",
+    french: "Français",
+    russian: "Русский",
+    bengali: "বাংলা",
+    spanish: "Español",
+    source: "Fuente",
+    notebook: "Cuaderno",
+    podcast: "Podcast",
+    quickActions: "Acciones rápidas",
+    quickActionsDesc: "Navegación, búsqueda, preguntar, tema",
+    appName: "Open Notebook",
+    add: "Agregar",
+    remove: "Quitar",
+    confirm: "Confirmar",
+    warning: "Advertencia",
+    error: "Error",
+    success: "Éxito",
+    model: "Modelo",
+    back: "Atrás",
+    next: "Siguiente",
+    done: "Listo",
+    processing: "Procesando...",
+    creating: "Creando...",
+    linked: "Vinculado",
+    adding: "Agregando...",
+    addSelected: "Agregar seleccionados",
+    customModel: "Modelo personalizado",
+    failed: "fallido",
+    current: "Actual",
+    save: "Guardar",
+    writeNote: "Escribir nota",
+    batchMode: "Modo por lotes",
+    optional: "Opcional",
+    type: "Tipo",
+    title: "Título",
+    created: "Creado {time}",
+    updated: "Actualizado {time}",
+    actions: "Acciones",
+    noResults: "Sin resultados",
+    references: "Referencias",
+    refreshPage: "Por favor, intenta recargar la página",
+    refresh: "Recargar",
+    aiGenerated: "Generado por IA",
+    human: "Humano",
+    unknown: "Desconocido",
+    notes: "Notas",
+    chat: "Chat",
+    deleteForever: "Eliminar permanentemente",
+    connectionError: "Error de conexión",
+    unableToConnect: "No se puede conectar al servidor API",
+    retryConnection: "Reintentar conexión",
+    diagnosticInfo: "Información de diagnóstico",
+    version: "Versión",
+    built: "Compilación",
+    apiUrl: "URL de la API",
+    frontendUrl: "URL del frontend",
+    checkConsoleLogs: "Revisa la consola del navegador para logs detallados (busca mensajes 🔧 [Config])",
+    yes: "Sí",
+    no: "No",
+    saving: "Guardando...",
+    description: "Descripción",
+    saveToNote: "Guardar en nota",
+    copyToClipboard: "Copiar al portapapeles",
+    close: "Cerrar",
+    insights: "Análisis",
+    progress: "Progreso",
+    deleting: "Eliminando...",
+    created_label: "Creado",
+    updated_label: "Actualizado",
+    download: "Descargar",
+    saveChanges: "Guardar cambios",
+    name: "Nombre",
+    default: "Predeterminado",
+    nameRequired: "El nombre es obligatorio",
+    modelConfiguration: "Configuración del modelo",
+    resetToDefault: "Restablecer valores predeterminados",
+    reasoning: "Razonamiento",
+    searchTerms: "Términos de búsqueda",
+    strategy: "Estrategia",
+    individualAnswers: "Respuestas individuales ({count})",
+    finalAnswer: "Respuesta final",
+    notebookLabel: "Cuaderno: {name}",
+    itemNotFound: "No se pudo encontrar este {type}",
+    accessibility: {
+      transformationViews: "Vistas de transformación",
+      searchKB: "Pregunta o busca en tu base de conocimiento",
+      enterQuestion: "Escribe tu pregunta para consultar la base de conocimiento",
+      enterSearch: "Escribe tu búsqueda",
+      searchKBBtn: "Buscar en la base de conocimiento",
+      podcastViews: "Vistas de podcast",
+      ytVideo: "Video de YouTube",
+      askResponse: "Respuesta de consulta",
+      searchNotebooks: "Buscar cuadernos",
+    },
+    url: "URL",
+    errorDetails: "Detalles del error",
+    editTransformation: "Editar transformación",
+    retry: "Reintentar",
+    traditionalChinese: "繁體中文",
+    portuguese: "Português",
+    completed: "completado",
+    saveSuccess: "Guardado exitosamente",
+    contextModes: {
+      off: "No incluido en el chat",
+      insights: "Solo análisis",
+      full: "Contenido completo",
+      clickToCycle: "Clic para cambiar",
+    },
+    clickToEdit: "Clic para editar",
+  },
+  apiErrors: {
+    notebookNotFound: "Cuaderno no encontrado",
+    sourceNotFound: "Fuente no encontrada",
+    transformationNotFound: "Transformación no encontrada",
+    fileUploadFailed: "Error al subir el archivo",
+    urlRequired: "La URL es obligatoria para el tipo enlace",
+    contentRequired: "El contenido es obligatorio para el tipo texto",
+    invalidSourceType: "Tipo de fuente inválido",
+    processingFailed: "El procesamiento falló",
+    failedToQueue: "Error al poner en cola el procesamiento",
+    invalidSortBy: "El campo de ordenamiento debe ser 'created' o 'updated'",
+    invalidSortOrder: "El orden debe ser 'asc' o 'desc'",
+    accessDenied: "Acceso al archivo denegado",
+    fileNotFoundOnServer: "Archivo no encontrado en el servidor",
+    searchFailed: "La búsqueda falló",
+    askFailed: "La consulta falló",
+    pleaseEnterQuestion: "Por favor, escribe una pregunta",
+    pleaseConfigureModels: "Por favor, configura todos los modelos requeridos",
+    failedToCreateSession: "Error al crear la sesión",
+    failedToUpdateSession: "Error al actualizar la sesión",
+    failedToDeleteSession: "Error al eliminar la sesión",
+    failedToSendMessage: "Error al enviar el mensaje",
+    unauthorized: "Acceso no autorizado, por favor verifica tu contraseña",
+    invalidPassword: "Contraseña inválida",
+    embeddingModelRequired: "Esta función requiere un modelo de embedding. Por favor, configura uno en la sección de Modelos.",
+    strategyModelNotFound: "Modelo de estrategia no encontrado",
+    answerModelNotFound: "Modelo de respuesta no encontrado",
+    finalAnswerModelNotFound: "Modelo de respuesta final no encontrado",
+    noAnswerGenerated: "No se pudo generar una respuesta",
+    genericError: "Ocurrió un error inesperado",
+  },
+  connectionErrors: {
+    apiTitle: "No se puede conectar al servidor API",
+    apiDesc: "No se pudo alcanzar el servidor API de Open Notebook",
+    dbTitle: "Error de conexión a la base de datos",
+    dbDesc: "El servidor API está funcionando, pero la base de datos no es accesible",
+    troubleshooting: "Esto generalmente significa:",
+    apiUnreachable1: "El servidor API no está ejecutándose",
+    apiUnreachable2: "El servidor API está en una dirección diferente",
+    apiUnreachable3: "Problemas de conectividad de red",
+    dbFailed1: "SurrealDB no está ejecutándose",
+    dbFailed2: "La configuración de conexión a la base de datos es incorrecta",
+    dbFailed3: "Problemas de red entre la API y la base de datos",
+    quickFixes: "Soluciones rápidas:",
+    setApiUrl: "Establece la variable de entorno API_URL:",
+    checkSurreal: "Verifica si SurrealDB está funcionando:",
+    seeDocumentation: "Para instrucciones detalladas de configuración, consulta:",
+    docLink: "Documentación de Open Notebook",
+    showTechnical: "Mostrar detalles técnicos",
+    attemptedUrl: "URL intentada",
+    message: "Mensaje",
+    technicalDetails: "Detalles técnicos",
+    stackTrace: "Traza de error",
+    retryLabel: "Reintentar conexión",
+    retryHint: "Presiona R o haz clic en el botón para reintentar",
+    dockerLabel: "Para Docker",
+    localDevLabel: "Para desarrollo local",
+  },
+  auth: {
+    loginTitle: "Open Notebook",
+    loginDesc: "Ingresa tu contraseña para acceder a la aplicación",
+    passwordPlaceholder: "Contraseña",
+    signingIn: "Iniciando sesión...",
+    signIn: "Iniciar sesión",
+    connectErrorHint: "No se puede conectar al servidor. Por favor, verifica si la API está funcionando.",
+  },
+  navigation: {
+    collect: "Recopilar",
+    process: "Procesar",
+    create: "Crear",
+    manage: "Gestionar",
+    sources: "Fuentes",
+    notebooks: "Cuadernos",
+    askAndSearch: "Preguntar y buscar",
+    podcasts: "Podcasts",
+    models: "Modelos",
+    transformations: "Transformaciones",
+    transformation: "Transformación",
+    settings: "Configuración",
+    advanced: "Avanzado",
+    nav: "Navegación",
+    language: "Cambiar idioma",
+    theme: "Tema",
+    ask: "Preguntar",
+  },
+  notebooks: {
+    title: "Cuadernos",
+    newNotebook: "Nuevo cuaderno",
+    searchPlaceholder: "Buscar cuadernos...",
+    archived: "Archivado",
+    archive: "Archivar",
+    unarchive: "Desarchivar",
+    deleteNotebook: "Eliminar cuaderno",
+    deleteNotebookDesc: "¿Estás seguro de que quieres eliminar \"{name}\"? Esta acción no se puede deshacer.",
+    deleteNotebookLoading: "Cargando vista previa de eliminación...",
+    deleteNotebookNotes: "{count} nota(s) serán eliminadas permanentemente.",
+    deleteNotebookNoNotes: "No hay notas que eliminar.",
+    deleteNotebookExclusiveSources: "{count} fuente(s) existen solo en este cuaderno.",
+    deleteNotebookSharedSources: "{count} fuente(s) son compartidas con otros cuadernos y serán desvinculadas.",
+    deleteNotebookNoSources: "No hay fuentes en este cuaderno.",
+    deleteExclusiveSourcesLabel: "Eliminar fuentes exclusivas",
+    keepExclusiveSourcesLabel: "Desvincular y conservarlas",
+    activeNotebooks: "Cuadernos activos",
+    archivedNotebooks: "Cuadernos archivados",
+    notFound: "Cuaderno no encontrado",
+    notFoundDesc: "El cuaderno solicitado no existe.",
+    updated: "Actualizado",
+    namePlaceholder: "Nombre del cuaderno",
+    addDescription: "Agregar descripción...",
+    noNotesYet: "Aún no hay notas",
+    deleteNote: "Eliminar nota",
+    deleteNoteConfirm: "¿Estás seguro de que quieres eliminar esta nota? Esta acción no se puede deshacer.",
+    noteCreatedSuccess: "Nota creada exitosamente",
+    failedToCreateNote: "Error al crear la nota",
+    noteUpdatedSuccess: "Nota actualizada exitosamente",
+    failedToUpdateNote: "Error al actualizar la nota",
+    noteDeletedSuccess: "Nota eliminada exitosamente",
+    failedToDeleteNote: "Error al eliminar la nota",
+    createNew: "Crear nuevo cuaderno",
+    createNewDesc: "Ingresa un nombre y una descripción opcional para comenzar.",
+    descPlaceholder: "Agrega más información sobre este cuaderno aquí...",
+    createSuccess: "Cuaderno creado exitosamente",
+    updateSuccess: "Cuaderno actualizado exitosamente",
+    deleteSuccess: "Cuaderno eliminado exitosamente",
+  },
+  sources: {
+    title: "Fuentes",
+    add: "Agregar fuente",
+    addNew: "Agregar nueva fuente",
+    addExisting: "Agregar fuente existente",
+    delete: "Eliminar fuente",
+    statusPreparing: "Preparando",
+    statusQueued: "En cola",
+    statusProcessing: "Procesando",
+    statusCompleted: "Completado",
+    statusFailed: "Fallido",
+    statusPreparingDesc: "Preparando para procesar",
+    statusQueuedDesc: "Esperando ser procesado",
+    statusProcessingDesc: "Siendo procesado",
+    statusCompletedDesc: "Procesado exitosamente",
+    statusFailedDesc: "El procesamiento falló",
+    failedToLoad: "Error al cargar las fuentes",
+    allSourcesDesc: "Ve todas tus fuentes aquí. Puedes agregar nuevas fuentes o gestionar las existentes.",
+    allSources: "Todas las fuentes",
+    insights: "Análisis",
+    yes: "Sí",
+    no: "No",
+    loadingMore: "Cargando más...",
+    noSourcesYet: "Aún no hay fuentes",
+    allSourcesDescShort: "Ve todas tus fuentes aquí.",
+    cannotSaveNoteNoNotebook: "No se puede guardar la nota: ID de cuaderno no disponible",
+    createFirstSource: "Agrega tu primera fuente para comenzar a construir tu base de conocimiento.",
+    deleteSourceConfirm: "¿Estás seguro de que quieres eliminar esta fuente?",
+    deleteConfirm: "¿Estás seguro de que quieres eliminar esto?",
+    deleteConfirmWithTitle: "¿Estás seguro de que quieres eliminar \"{title}\"?",
+    deleteSuccess: "Fuente eliminada exitosamente. Nota: Para eliminar el archivo del almacenamiento, debes habilitar la opción \"eliminar archivo\" en la página de configuración.",
+    failedToDelete: "Error al eliminar la fuente",
+    sourceQueued: "Fuente en cola",
+    sourceQueuedDesc: "Fuente enviada para procesamiento en segundo plano. Puedes monitorear el progreso en la lista de fuentes.",
+    sourceAddedSuccess: "Fuente agregada exitosamente",
+    failedToAddSource: "Error al agregar la fuente",
+    sourceUpdatedSuccess: "Fuente actualizada exitosamente",
+    failedToUpdateSource: "Error al actualizar la fuente",
+    sourceDeletedSuccess: "Fuente eliminada exitosamente",
+    failedToDeleteSource: "Error al eliminar la fuente",
+    fileUploadedSuccess: "Archivo subido exitosamente",
+    failedToUploadFile: "Error al subir el archivo",
+    sourceRequeued: "Reintento de fuente en cola",
+    sourceRequeuedDesc: "La fuente ha sido puesta de nuevo en cola para procesamiento.",
+    failedToRetry: "Error en el reintento",
+    sourcesAddedToNotebook: "{count} fuente(s) agregadas al cuaderno",
+    failedToAddSourcesToNotebook: "Error al agregar fuentes al cuaderno",
+    partialAddSuccess: "{success} fuente(s) agregadas, {failed} fallaron",
+    sourceRemovedFromNotebook: "Fuente eliminada del cuaderno exitosamente",
+    failedToRemoveSourceFromNotebook: "Error al eliminar la fuente del cuaderno",
+    removeConfirm: "¿Estás seguro de que quieres quitar esto del cuaderno?",
+    checking: "Verificando...",
+    untitledSource: "Fuente sin título",
+    maxItems: "máx. {count}",
+    insightsCount: "{count} análisis",
+    details: "Detalles",
+    detailsTitle: "Detalles de la fuente",
+    content: "Contenido",
+    metadata: "Metadatos",
+    type: {
+      link: "Enlace",
+      file: "Archivo",
+      text: "Texto",
+    },
+    id: "ID de fuente",
+    topics: "Temas",
+    embedded: "Embebido",
+    notEmbedded: "No embebido",
+    embedContent: "Embeber contenido",
+    embedding: "Embebiendo...",
+    alreadyEmbedded: "Ya embebido",
+    downloadFile: "Descargar archivo",
+    fileUnavailable: "Archivo no disponible",
+    preparing: "Preparando...",
+    generateNewInsight: "Generar nuevo análisis",
+    selectTransformation: "Selecciona una transformación...",
+    noInsightsYet: "Aún no hay análisis",
+    createFirstInsight: "Crea tu primer análisis usando una transformación de arriba",
+    viewInsight: "Ver análisis",
+    deleteInsight: "Eliminar análisis",
+    deleteInsightConfirm: "¿Estás seguro de que quieres eliminar este análisis? Esta acción no se puede deshacer.",
+    insightGenerationStarted: "Generación de análisis iniciada. Aparecerá en breve.",
+    editNote: "Editar nota",
+    createNote: "Crear nota",
+    addTitle: "Agregar un título...",
+    untitledNote: "Nota sin título",
+    writeNotePlaceholder: "Escribe el contenido de tu nota aquí...",
+    saveNote: "Guardar nota",
+    createNoteBtn: "Crear nota",
+    createFirstNote: "Crea tu primera nota para capturar ideas y observaciones.",
+    urlLabel: "URL(s) *",
+    fileLabel: "Archivo(s) *",
+    textContentLabel: "Contenido de texto *",
+    enterUrlsPlaceholder: "Ingresa URLs, una por línea\nhttps://ejemplo.com/articulo1\nhttps://ejemplo.com/articulo2",
+    batchUrlHint: "Pega múltiples URLs (una por línea) para importar por lotes",
+    invalidUrlsDetected: "URLs inválidas detectadas:",
+    lineLabel: "Línea {line}",
+    fixInvalidUrls: "Por favor, corrige o elimina las URLs inválidas para continuar",
+    selectMultipleFilesHint: "Selecciona múltiples archivos para importar por lotes. Soportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimedia (MP4, MP3, WAV, M4A), Imágenes (JPG, PNG), Archivos comprimidos (ZIP)",
+    selectedFiles: "Archivos seleccionados:",
+    textPlaceholder: "Pega o escribe tu contenido aquí...",
+    htmlDetected: "Contenido HTML detectado. Se convertirá a Markdown después del procesamiento.",
+    titlePlaceholder: "Dale a tu fuente un título descriptivo",
+    batchTitlesAuto: "Los títulos se generarán automáticamente para cada fuente.",
+    batchCommonSettings: "Los mismos cuadernos y transformaciones se aplicarán a todos los elementos.",
+    urlsCount: "{count} URL(s)",
+    filesCount: "{count} archivo(s)",
+    addSource: "Agregar fuente",
+    notEmbeddedAlert: "Contenido no embebido",
+    notEmbeddedDesc: "Este contenido no ha sido embebido para búsqueda vectorial. El embedding permite capacidades de búsqueda avanzada y mejor descubrimiento de contenido.",
+    openOnYoutube: "Abrir en YouTube",
+    urlCopied: "URL copiada al portapapeles",
+    viewSource: "Ver fuente",
+    noInsightSelected: "Ningún análisis seleccionado",
+    sourceInsight: "Análisis de fuente",
+    manageNotebooks: "Gestionar cuadernos",
+    manageNotebooksDesc: "Gestiona qué cuadernos contienen esta fuente",
+    noNotebooksAvailable: "No hay cuadernos disponibles",
+    loadFailed: "Error al cargar los detalles de la fuente",
+    removeFromNotebook: "Quitar del cuaderno",
+    retryProcessing: "Reintentar procesamiento",
+    deleteSource: "Eliminar fuente",
+    retry: "Reintentar",
+    addExistingTitle: "Agregar fuentes existentes",
+    addExistingDesc: "Selecciona fuentes existentes de todos tus cuadernos para agregar al actual.",
+    searchPlaceholder: "Buscar fuentes por nombre o URL...",
+    noNotebooksFound: "No se encontraron cuadernos.",
+    showingFirst100: "Mostrando las primeras 100 fuentes. Usa la búsqueda para encontrar una específica.",
+    selectedCount: "{count} fuentes seleccionadas",
+    added: "Agregado el {date}",
+    addUrl: "Agregar URL",
+    uploadFile: "Subir archivo",
+    enterText: "Ingresar texto",
+    processDescription: "El contenido será procesado y analizado por IA.",
+    processingFiles: "Procesando tus archivos...",
+    titleRequired: "Se requiere un título para el contenido de texto",
+    titleGenerated: "Si se deja vacío, se generará un título a partir del contenido",
+    batchCount: "{count} {type} serán procesados",
+    enableEmbedding: "Habilitar embedding para búsqueda",
+    embeddingDesc: "Permite que esta fuente sea encontrada en búsquedas vectoriales y consultas de IA",
+    embeddingAlways: "Embedding habilitado automáticamente",
+    embeddingAlwaysDesc: "Tu configuración está establecida para siempre embeber contenido para búsqueda vectorial.",
+    embeddingNever: "Embedding deshabilitado",
+    embeddingNeverDesc: "Tu configuración está establecida para omitir el embedding. La búsqueda vectorial no estará disponible para esta fuente.",
+    changeInSettings: "Puedes cambiar esto en Configuración",
+    notFound: "Fuente no encontrada",
+    noContent: "No hay contenido disponible",
+    insightsDesc: "Análisis generados a partir del análisis del modelo",
+    uploadedFile: "Archivo subido",
+    fileUnavailableDesc: "Este archivo no está disponible actualmente por razones del sistema de almacenamiento.",
+    batchSuccess: "{count} fuente(s) creadas exitosamente",
+    batchFailed: "Error al crear las {count} fuentes",
+    batchPartial: "{success} exitosas, {failed} fallidas",
+    submittingSource: "Enviando fuente para procesamiento...",
+    processingBatchSources: "Procesando {count} fuentes. Esto puede tomar unos momentos.",
+    processingSource: "Tu fuente está siendo procesada. Esto puede tomar unos momentos.",
+    maxFilesAllowed: "Máximo {count} archivos permitidos por lote",
+  },
+  chat: {
+    sessions: "Sesiones",
+    sessionTitlePlaceholder: "Escribe un título aquí...",
+    noSessions: "Aún no hay sesiones de chat",
+    deleteSession: "Eliminar sesión",
+    deleteSessionDesc: "¿Estás seguro de que quieres eliminar esta sesión de chat? Esta acción no se puede deshacer.",
+    sendPlaceholder: "Pregunta cualquier cosa sobre tus fuentes...",
+    sessionsTitle: "Sesiones de chat",
+    chatWith: "Chat con {name}",
+    startConversation: "Inicia una conversación sobre este {type}",
+    askQuestions: "Haz preguntas para entender mejor el contenido",
+    pressToSend: "Presiona {key} para enviar",
+    model: "Modelo",
+    createToStart: "Crea una sesión para comenzar.",
+    chatWithNotebook: "Chat con cuaderno",
+    unableToLoadChat: "No se pudo cargar el chat",
+    noDescription: "Sin descripción",
+    startByCreating: "Comienza creando tu primer cuaderno para organizar tu investigación.",
+    messagesCount: "{count} mensajes",
+    sessionCreated: "Sesión de chat creada",
+    sessionUpdated: "Sesión actualizada",
+    sessionDeleted: "Sesión eliminada",
+  },
+  searchPage: {
+    askAndSearch: "Preguntar y buscar",
+    chooseAMode: "Elige un modo",
+    askBeta: "Preguntar (beta)",
+    search: "Buscar",
+    askYourKb: "Pregunta a tu base de conocimiento (beta)",
+    askYourKbDesc: "El LLM responderá tu consulta basándose en los documentos de tu base de conocimiento.",
+    question: "Pregunta",
+    enterQuestionPlaceholder: "Escribe tu pregunta...",
+    pressToSubmit: "Presiona Cmd/Ctrl+Enter para enviar",
+    noEmbeddingModel: "No puedes usar esta función porque no tienes un modelo de embedding seleccionado. Por favor, configura uno en la página de Modelos.",
+    usingCustomModels: "Usando modelos personalizados",
+    usingDefaultModels: "Usando modelos predeterminados",
+    advanced: "Avanzado",
+    strategy: "Estrategia",
+    answer: "Respuesta",
+    final: "Final",
+    ask: "Preguntar",
+    processing: "Procesando...",
+    saveToNotebooks: "Guardar en cuadernos",
+    searchDesc: "Busca en tu base de conocimiento palabras clave o conceptos específicos",
+    enterSearchPlaceholder: "Escribe tu búsqueda...",
+    pressToSearch: "Presiona Enter para buscar",
+    searchType: "Tipo de búsqueda",
+    vectorSearchWarning: "La búsqueda vectorial requiere un modelo de embedding. Solo la búsqueda de texto está disponible.",
+    textSearch: "Búsqueda de texto",
+    vectorSearch: "Búsqueda vectorial",
+    searchIn: "Buscar en",
+    searchSources: "Buscar fuentes",
+    searchNotes: "Buscar notas",
+    resultsFound: "{count} resultados encontrados",
+    matches: "Coincidencias ({count})",
+    noResultsFor: "No se encontraron resultados para \"{query}\"",
+    notSet: "No configurado",
+    saveToNotebook: "Guardar en cuaderno",
+    saveSuccess: "Guardado exitosamente en el cuaderno",
+    saveError: "Error al guardar en el cuaderno",
+    selectNotebook: "Seleccionar cuaderno",
+    searchAndAsk: "Buscar y preguntar",
+    searchResultsFor: "Resultados de búsqueda para \"{query}\"",
+    askAbout: "Preguntar sobre \"{query}\"",
+    orSearchKb: "O busca en tu base de conocimiento",
+    saving: "Guardando...",
+    advancedModelTitle: "Selección avanzada de modelos",
+    advancedModelDesc: "Elige modelos específicos para cada etapa del proceso de consulta",
+    strategyModel: "Modelo de estrategia",
+    answerModel: "Modelo de respuesta",
+    finalAnswerModel: "Modelo de respuesta final",
+    selectStrategyPlaceholder: "Seleccionar modelo de estrategia",
+    selectAnswerPlaceholder: "Seleccionar modelo de respuesta",
+    selectFinalPlaceholder: "Seleccionar modelo de respuesta final",
+    saveChanges: "Guardar cambios",
+    processingQuestion: "Procesando tu pregunta...",
+  },
+  podcasts: {
+    generateEpisode: "Generar episodio de podcast",
+    generateEpisodeDesc: "Selecciona el contenido a incluir y configura los detalles del episodio antes de generar un nuevo episodio de podcast.",
+    content: "Contenido",
+    contentDesc: "Elige cuadernos, fuentes y notas para incluir en este episodio.",
+    itemsSelected: "{count} elementos seleccionados",
+    tokens: "{count} tokens",
+    chars: "{count} caracteres",
+    loadingNotebooks: "Cargando cuadernos...",
+    noNotebooksFoundInPodcasts: "No se encontraron cuadernos. Crea un cuaderno y agrega contenido antes de generar un podcast.",
+    noContentSelected: "No se seleccionó contenido",
+    summary: "Resumen",
+    fullContent: "Contenido completo",
+    untitledSource: "Fuente sin título",
+    untitledNote: "Nota sin título",
+    episodeSettings: "Configuración del episodio",
+    episodeProfile: "Perfil del episodio",
+    episodeProfilePlaceholder: "Selecciona un perfil de episodio",
+    episodeName: "Nombre del episodio",
+    episodeNamePlaceholder: "ej., IA y el futuro del trabajo",
+    additionalInstructions: "Instrucciones adicionales",
+    instructionsPlaceholder: "Cualquier consejo adicional para agregar al briefing del episodio...",
+    generating: "Generando...",
+    generate: "Generar",
+    hostPlaceholder: "Presentador {number}",
+    profileRequired: "Perfil de episodio requerido",
+    profileRequiredDesc: "Selecciona un perfil de episodio antes de generar un podcast.",
+    nameRequired: "Nombre del episodio requerido",
+    nameRequiredDesc: "Proporciona un nombre para el episodio.",
+    addContext: "Agregar contexto",
+    addContextDesc: "Selecciona al menos una fuente o nota para incluir en el episodio.",
+    generationFailed: "La generación del podcast falló",
+    speakerProfile: "Perfil de locutor",
+    usesSpeakerProfile: "Usa perfil de locutor",
+    sources: "Fuentes",
+    notes: "Notas",
+    noSources: "No hay fuentes disponibles en este cuaderno.",
+    noNotes: "No hay notas disponibles en este cuaderno.",
+    selectMode: "Seleccionar modo",
+    buildContextFailed: "Error al construir el contexto. Por favor, revisa tus selecciones.",
+    podcastTaskStarted: "Tarea de podcast iniciada",
+    loadingProfiles: "Cargando perfiles de episodio...",
+    noProfilesFound: "No se encontraron perfiles de episodio. Crea un perfil de episodio antes de generar un podcast.",
+    listTitle: "Podcasts",
+    listDesc: "Lleva un registro de los episodios generados y gestiona perfiles reutilizables.",
+    chooseAView: "Elige una vista",
+    episodesTab: "Episodios",
+    templatesTab: "Perfiles",
+    overviewTitle: "Vista general de episodios",
+    overviewDesc: "Monitorea los trabajos de generación de podcasts y revisa los artefactos finales.",
+    generateBtn: "Generar podcast",
+    total: "Total",
+    processingLabel: "Procesando",
+    completedLabel: "Completados",
+    failedLabel: "Fallidos",
+    pendingLabel: "Pendientes",
+    loadErrorTitle: "Error al cargar episodios",
+    loadErrorDesc: "No pudimos obtener los episodios más recientes. Intenta de nuevo en un momento.",
+    loadingEpisodes: "Cargando episodios…",
+    noEpisodesYet: "Aún no hay episodios de podcast. Genera tu primero desde las interfaces de chat de cuadernos o fuentes.",
+    statusRunningTitle: "Procesando actualmente",
+    statusRunningDesc: "Episodios que están generando activos activamente.",
+    statusPendingTitle: "En cola / Pendientes",
+    statusPendingDesc: "Episodios enviados esperando a comenzar el procesamiento.",
+    statusCompletedTitle: "Episodios completados",
+    statusCompletedDesc: "Listos para revisar, descargar o publicar.",
+    statusFailedTitle: "Episodios fallidos",
+    statusFailedDesc: "Episodios que encontraron problemas durante la generación.",
+    templatesWorkspaceTitle: "Espacio de trabajo de perfiles",
+    templatesWorkspaceDesc: "Construye configuraciones reutilizables de episodios y locutores para producción rápida de podcasts.",
+    howTemplatesPowerTitle: "Cómo los perfiles impulsan la generación de podcasts",
+    howTemplatesPowerDesc: "Los perfiles dividen el flujo de trabajo del podcast en dos bloques reutilizables. Mézclalos y combínalos cuando generes un nuevo episodio.",
+    episodeProfilesSetFormat: "Los perfiles de episodio establecen el formato",
+    episodeProfilesList1: "Definen el número de segmentos y cómo fluye la historia",
+    episodeProfilesList2: "Eligen los modelos de lenguaje usados para briefing, esquema y escritura del guion",
+    episodeProfilesList3: "Almacenan briefings predeterminados para que cada episodio comience con un tono consistente",
+    speakerProfilesBringVoices: "Los perfiles de locutor dan vida a las voces",
+    speakerProfilesList1: "Eligen el proveedor y modelo de texto a voz",
+    speakerProfilesList2: "Capturan personalidad, historia y notas de pronunciación por locutor",
+    speakerProfilesList3: "Reutiliza las mismas voces de presentador o invitado en diferentes formatos de episodio",
+    recommendedWorkflow: "Flujo de trabajo recomendado",
+    workflowStep1: "Crea perfiles de locutor para cada voz que necesites",
+    workflowStep2: "Construye perfiles de episodio que referencien a esos locutores por nombre",
+    workflowStep3: "Genera podcasts seleccionando el perfil de episodio que se ajuste a la historia",
+    workflowHint: "Los perfiles de episodio referencian perfiles de locutor por nombre, así que empezar con los locutores evita asignaciones de voz faltantes después.",
+    failedToLoadTemplates: "Error al cargar los datos de perfiles",
+    failedToLoadTemplatesDesc: "Asegúrate de que la API esté funcionando e intenta de nuevo. Algunas secciones pueden estar incompletas.",
+    loadingTemplates: "Cargando perfiles…",
+    speakerProfilesTitle: "Perfiles de locutor",
+    speakerProfilesDesc: "Configura voces y personalidades para los episodios generados.",
+    createSpeaker: "Crear locutor",
+    noSpeakerProfiles: "Aún no hay perfiles de locutor. Crea uno para hacer disponibles los perfiles de episodio.",
+    noDescription: "No se proporcionó descripción.",
+    usedByCount_one: "Usado por 1 episodio",
+    usedByCount_other: "Usado por {count} episodios",
+    usedByCount: "Usado por {count} episodios",
+    unused: "Sin usar",
+    voiceId: "ID de voz",
+    backstory: "Historia",
+    personality: "Personalidad",
+    edit: "Editar",
+    duplicate: "Duplicar",
+    deleteSpeakerProfileTitle: "¿Eliminar perfil de locutor?",
+    deleteSpeakerProfileDesc: "Eliminar \"{name}\" no se puede deshacer.",
+    deleteSpeakerDisabledHint: "Quita este locutor de los perfiles de episodio antes de eliminarlo.",
+    deleting: "Eliminando…",
+    episodeProfilesTitle: "Perfiles de episodio",
+    episodeProfilesDesc: "Define configuraciones reutilizables de generación para tus programas.",
+    createProfile: "Crear perfil",
+    createSpeakerFirst: "Crea un perfil de locutor antes de agregar un perfil de episodio.",
+    noEpisodeProfiles: "Aún no hay perfiles de episodio. Crea uno para iniciar la generación de podcasts.",
+    speakerCreated: "Locutor creado",
+    speakerCreatedDesc: "El locutor \"{name}\" ha sido agregado exitosamente.",
+    failedToCreateSpeaker: "Error al crear el perfil de locutor",
+    speakerUpdated: "Locutor actualizado",
+    speakerUpdatedDesc: "El locutor \"{name}\" ha sido actualizado exitosamente.",
+    failedToUpdateSpeaker: "Error al actualizar el perfil de locutor",
+    speakerDeleted: "Locutor eliminado",
+    speakerDeletedDesc: "El locutor \"{name}\" ha sido eliminado exitosamente.",
+    failedToDeleteSpeaker: "Error al eliminar el perfil de locutor",
+    speakerDuplicated: "Locutor duplicado",
+    speakerDuplicatedDesc: "El locutor \"{name}\" ha sido duplicado exitosamente.",
+    failedToDuplicateSpeaker: "Error al duplicar el perfil de locutor",
+    generationStarted: "Generación iniciada",
+    generationStartedDesc: "La generación del podcast ha sido puesta en cola.",
+    failedToStartGeneration: "Error al iniciar la generación",
+    tryAgainMoment: "Por favor, intenta de nuevo en un momento.",
+    deleteProfileTitle: "¿Eliminar perfil?",
+    deleteProfileDesc: "Esto eliminará \"{name}\". Los episodios existentes conservan sus datos, pero los nuevos ya no usarán esta configuración.",
+    profileCreated: "Perfil creado",
+    profileCreatedDesc: "El perfil de episodio \"{name}\" ha sido creado exitosamente.",
+    failedToCreateProfile: "Error al crear el perfil",
+    profileUpdated: "Perfil actualizado",
+    profileUpdatedDesc: "El perfil de episodio \"{name}\" ha sido actualizado exitosamente.",
+    failedToUpdateProfile: "Error al actualizar el perfil",
+    profileDeleted: "Perfil eliminado",
+    profileDeletedDesc: "El perfil de episodio \"{name}\" ha sido eliminado exitosamente.",
+    failedToDeleteProfile: "Error al eliminar el perfil",
+    failedToDeleteProfileDesc: "Error al eliminar el perfil de episodio.",
+    profileDuplicated: "Perfil duplicado",
+    profileDuplicatedDesc: "El perfil de episodio \"{name}\" ha sido duplicado exitosamente.",
+    failedToDuplicateProfile: "Error al duplicar el perfil",
+    episodeDeleted: "Episodio eliminado",
+    episodeDeletedDesc: "El episodio ha sido eliminado exitosamente.",
+    failedToDeleteEpisode: "Error al eliminar el episodio",
+    failedToDeleteSpeakerDesc: "Error al eliminar el perfil de locutor.",
+    outlineModel: "Modelo de esquema",
+    transcriptModel: "Modelo de transcripción",
+    segments: "Segmentos",
+    defaultBriefingTitle: "Briefing predeterminado",
+    created: "Creado el {time}",
+    details: "Detalles",
+    summaryTab: "Resumen",
+    outlineTab: "Esquema",
+    transcriptTab: "Transcripción",
+    briefing: "Briefing",
+    noOutline: "No hay esquema disponible.",
+    noTranscript: "No hay transcripción disponible.",
+    deleteEpisodeTitle: "¿Eliminar episodio?",
+    deleteEpisodeDesc: "Esto eliminará \"{name}\" y su archivo de audio permanentemente.",
+    audioUnavailable: "Audio no disponible",
+    segment: "Segmento",
+    speaker: "Locutor",
+    profile: "Perfil",
+    link: "Enlace",
+    file: "Archivo",
+    embedded: "Embebido",
+    notEmbedded: "No embebido",
+    noSpeakerProfilesAvailable: "No hay perfiles de locutor disponibles",
+    editEpisodeProfile: "Editar perfil de episodio",
+    createEpisodeProfile: "Crear perfil de episodio",
+    episodeProfileFormDesc: "Define cómo se deben generar los episodios y qué configuración de locutor usan por defecto.",
+    noSpeakerProfilesDesc: "Crea un perfil de locutor antes de configurar un perfil de episodio.",
+    profileName: "Nombre del perfil",
+    profileNamePlaceholder: "ej., Discusión tecnológica",
+    descriptionPlaceholder: "Breve resumen de cuándo usar este perfil",
+    speakerConfig: "Configuración de locutor",
+    selectSpeakerProfile: "Seleccionar un perfil de locutor",
+    outlineGeneration: "Generación de esquema",
+    transcriptGeneration: "Generación de transcripción",
+    defaultBriefingPlaceholder: "Describe la estructura, tono y objetivos para este formato de episodio",
+    editSpeakerProfile: "Editar perfil de locutor",
+    createSpeakerProfile: "Crear perfil de locutor",
+    speakerProfileFormDesc: "Configura los ajustes de texto a voz y define hasta cuatro locutores.",
+    speakers: "Locutores",
+    speakersDesc: "Configura entre una y cuatro voces para este perfil.",
+    addSpeaker: "Agregar locutor",
+    speakerNumber: "Locutor {number}",
+    backstoryPlaceholder: "Breve biografía o contexto del locutor",
+    personalityPlaceholder: "Describe el estilo y tono",
+    outlineModelRequired: "El modelo de esquema es obligatorio",
+    transcriptModelRequired: "El modelo de transcripción es obligatorio",
+    defaultBriefingRequired: "El briefing predeterminado es obligatorio",
+    segmentsInteger: "Debe ser un número entero",
+    segmentsMin: "Al menos 3 segmentos",
+    segmentsMax: "Máximo 20 segmentos",
+    voiceIdRequired: "El ID de voz es obligatorio",
+    backstoryRequired: "La historia es obligatoria",
+    personalityRequired: "La personalidad es obligatoria",
+    speakerCountMin: "Se requiere al menos un locutor",
+    speakerCountMax: "Puedes configurar hasta 4 locutores",
+    delete: "Eliminar",
+    failedToDelete: "Error al eliminar el podcast",
+    retry: "Reintentar",
+    retrying: "Reintentando…",
+    retryStarted: "Reintento iniciado",
+    retryStartedDesc: "Se ha enviado un nuevo trabajo de generación de podcast.",
+    failedToRetry: "Error al reintentar el episodio",
+    errorDetails: "Detalles del error",
+    language: "Idioma",
+    languagePlaceholder: "Selecciona un idioma (opcional)",
+    podcastLanguage: "Idioma del podcast",
+    selectOutlineModel: "Seleccionar modelo de esquema",
+    selectTranscriptModel: "Seleccionar modelo de transcripción",
+    voiceModel: "Modelo de voz",
+    voiceModelRequired: "El modelo de voz es obligatorio",
+    selectVoiceModel: "Seleccionar modelo de voz",
+    perSpeakerTtsOverride: "Anulación de TTS por locutor (opcional)",
+    useProfileDefault: "Usar predeterminado del perfil",
+    setupRequired: "Configuración requerida",
+    setupRequiredDesc:
+      "Algunos perfiles aún no tienen modelos configurados. Edítalos para seleccionar modelos antes de generar podcasts.",
+    notConfigured: "No configurado",
+  },
+  settings: {
+    contentProcessing: "Procesamiento de contenido",
+    contentProcessingDesc: "Configura cómo se procesan los documentos y URLs",
+    docEngine: "Motor de procesamiento de documentos",
+    docEnginePlaceholder: "Selecciona motor de procesamiento de documentos",
+    urlEngine: "Motor de procesamiento de URLs",
+    urlEnginePlaceholder: "Selecciona motor de procesamiento de URLs",
+    autoRecommended: "Auto (Recomendado)",
+    simple: "Simple",
+    docling: "Docling",
+    helpMeChoose: "Ayúdame a elegir",
+    docHelp: "· Docling es un poco más lento pero más preciso, especialmente si los documentos contienen tablas e imágenes. · Simple extraerá cualquier contenido del documento sin formatearlo. · Auto (recomendado) intentará procesar con Docling y por defecto usará Simple.",
+    firecrawl: "Firecrawl",
+    jina: "Jina",
+    urlHelp: "· Firecrawl es un servicio de pago (con un nivel gratuito), y muy potente. · Jina es una buena opción también y tiene un nivel gratuito. · Simple usará extracción HTTP básica y perderá contenido en sitios web basados en JavaScript. · Auto (recomendado) intentará usar Firecrawl, luego Jina, y finalmente Simple.",
+    embeddingAndSearch: "Embedding y búsqueda",
+    embeddingAndSearchDesc: "Configura las opciones de búsqueda y embedding",
+    defaultEmbeddingOption: "Opción de embedding predeterminada",
+    embeddingOptionPlaceholder: "Selecciona opción de embedding",
+    ask: "Preguntar",
+    always: "Siempre",
+    never: "Nunca",
+    embeddingHelp: "Embeber el contenido facilitará encontrarlo por ti y por tus agentes de IA. Si estás usando un modelo de embedding local (Ollama, por ejemplo), no deberías preocuparte por el costo y simplemente embeber todo.",
+    fileManagement: "Gestión de archivos",
+    fileManagementDesc: "Configura las opciones de manejo y almacenamiento de archivos",
+    autoDeleteFiles: "Eliminar archivos automáticamente",
+    autoDeletePlaceholder: "Selecciona opción de eliminación automática",
+    filesHelp: "Una vez que tus archivos se suben y procesan, ya no son necesarios. La mayoría de los usuarios deberían permitir que Open Notebook elimine los archivos subidos de la carpeta de carga automáticamente.",
+    loadFailed: "Error al cargar la configuración",
+  },
+  advanced: {
+    title: "Herramientas avanzadas",
+    desc: "Herramientas avanzadas y utilidades para usuarios expertos",
+    systemInfo: "Información del sistema",
+    rebuildEmbeddings: "Reconstruir embeddings",
+    rebuildEmbeddingsDesc: "Reconstruir el índice de búsqueda vectorial para todas las fuentes",
+    currentVersion: "Versión actual",
+    latestVersion: "Última versión",
+    status: "Estado",
+    updateAvailable: "Versión {version} disponible",
+    updateAvailableDesc: "Una nueva versión de Open Notebook está disponible.",
+    upToDate: "Actualizado",
+    unknown: "Desconocido",
+    viewOnGithub: "Ver en GitHub",
+    updateCheckFailed: "No se pudo verificar actualizaciones. GitHub puede no ser accesible.",
+    rebuild: {
+      mode: "Modo de reconstrucción",
+      existing: "Existentes",
+      all: "Todos",
+      existingDesc: "Re-embeber solo elementos que ya tienen embeddings (más rápido, para cambio de modelo)",
+      allDesc: "Re-embeber elementos existentes + crear embeddings para elementos sin ninguno (más lento, completo)",
+      include: "Incluir en la reconstrucción",
+      selectOneError: "Por favor, selecciona al menos un tipo de elemento para reconstruir",
+      starting: "Iniciando reconstrucción...",
+      startBtn: "🚀 Iniciar reconstrucción",
+      queued: "En cola",
+      running: "Enviando trabajos...",
+      completed: "¡Trabajos enviados!",
+      failed: "Fallido",
+      leavePageHint: "Puedes salir de esta página ya que se ejecutará en segundo plano",
+      startNew: "Iniciar nueva reconstrucción",
+      itemsProcessed: "{processed}/{total} trabajos enviados ({percent}%)",
+      failedItems: "{count} trabajos fallaron al enviarse",
+      time: "Tiempo",
+      whenToRebuild: "¿Cuándo debo reconstruir los embeddings?",
+      whenToRebuildAns: "Debes reconstruir al cambiar modelos, actualizar versiones, corregir corrupción o después de importaciones masivas.",
+      howLong: "¿Cuánto tiempo tarda la reconstrucción?",
+      howLongAns: "El tiempo de procesamiento depende de la cantidad de elementos, velocidad del modelo y límites de la API. Los modelos locales suelen ser muy rápidos.",
+      isSafe: "¿Es seguro reconstruir mientras uso la aplicación?",
+      isSafeAns: "Sí, la reconstrucción es segura. No elimina contenido, solo reemplaza embeddings, y maneja errores de forma controlada.",
+    },
+  },
+  transformations: {
+    title: "Transformaciones",
+    desc: "Las transformaciones son prompts que el LLM usará para procesar una fuente y extraer análisis, resúmenes, etc.",
+    workspace: "Elige un espacio de trabajo",
+    playground: "Laboratorio",
+    defaultPrompt: "Prompt de transformación predeterminado",
+    defaultPromptDesc: "Esto se agregará a todos tus prompts de transformación",
+    defaultPromptPlaceholder: "Ingresa tus instrucciones de transformación predeterminadas...",
+    listTitle: "Transformaciones personalizadas",
+    createNew: "Crear nueva",
+    inputLabel: "Texto de entrada",
+    inputPlaceholder: "Ingresa algo de texto para transformar...",
+    outputLabel: "Resultado",
+    runTest: "Ejecutar transformación",
+    running: "Ejecutando...",
+    selectToStart: "Selecciona una transformación para comenzar",
+    name: "Nombre",
+    namePlaceholder: "Identificador único, ej. temas_clave",
+    titlePlaceholder: "Título mostrado, por defecto usa el nombre",
+    promptPlaceholder: "Escribe el prompt que impulsará esta transformación...",
+    descriptionPlaceholder: "Describe qué hace esta transformación.",
+    suggestDefault: "Sugerir por defecto en nuevas fuentes",
+    promptHint: "Los prompts deben escribirse pensando en el contenido de la fuente. Puedes pedirle al modelo que resuma, extraiga análisis o produzca resultados estructurados como tablas.",
+    createSuccess: "Transformación creada exitosamente",
+    updateSuccess: "Transformación actualizada exitosamente",
+    deleteSuccess: "Transformación eliminada exitosamente",
+    noTransformations: "Aún no hay transformaciones",
+    createOne: "Crea una transformación para comenzar",
+    selectModel: "Seleccionar un modelo",
+    deleteConfirm: "¿Estás seguro de que quieres eliminar esta transformación?",
+    model: "Modelo",
+    systemPrompt: "Prompt del sistema",
+    overrideModelDesc: "Anula el modelo predeterminado para esta sesión de chat. Déjalo vacío para usar el predeterminado del sistema.",
+    sessionUseReplacement: "Esta sesión usará {name} en lugar del modelo predeterminado.",
+    systemDefault: "Predeterminado del sistema",
+  },
+  models: {
+    embedding: "Modelos de embedding",
+    tts: "Texto a voz (TTS)",
+    stt: "Voz a texto (STT)",
+    apiKey: "Clave API",
+    deleteSuccess: "Modelo eliminado exitosamente",
+    saveSuccess: "Modelo guardado exitosamente",
+    noModels: "Sin modelos",
+    discoverModels: "Descubrir modelos",
+    noModelsFound: "No se encontraron modelos de este proveedor",
+    modelType: "Tipo de modelo",
+    modelTypeHint: "Selecciona el tipo para los modelos que quieres agregar. Si necesitas tipos diferentes, agrégalos en lotes separados.",
+    deleteModel: "Eliminar modelo",
+    defaultAssignments: "Asignaciones de modelos predeterminados",
+    defaultAssignmentsDesc: "Configura qué modelos usar para diferentes propósitos en Open Notebook",
+    missingRequiredModels: "Faltan modelos requeridos: {models}. Open Notebook puede no funcionar correctamente sin estos.",
+    selectModelPlaceholder: "Seleccionar un modelo",
+    requiredModelPlaceholder: "⚠️ Requerido - Seleccionar un modelo",
+    chatModelLabel: "Modelo de chat",
+    chatModelDesc: "Usado para conversaciones de chat",
+    transformationModelLabel: "Modelo de transformación",
+    transformationModelDesc: "Usado para resúmenes, análisis y transformaciones",
+    toolsModelLabel: "Modelo de herramientas",
+    toolsModelDesc: "Usado para llamadas a funciones - Se recomienda OpenAI o Anthropic",
+    largeContextModelLabel: "Modelo de contexto largo",
+    largeContextModelDesc: "Usado para procesar documentos grandes - Se recomienda Gemini",
+    embeddingModelLabel: "Modelo de embedding",
+    embeddingModelDesc: "Usado para búsqueda semántica y embeddings vectoriales",
+    ttsModelLabel: "Modelo de texto a voz",
+    ttsModelDesc: "Usado para generación de podcasts",
+    sttModelLabel: "Modelo de voz a texto",
+    sttModelDesc: "Usado para transcripción de audio",
+    embeddingChangeTitle: "Cambio de modelo de embedding",
+    embeddingChangeConfirm: "Estás a punto de cambiar tu modelo de embedding de {from} a {to}.",
+    rebuildRequired: "Importante: Reconstrucción requerida",
+    rebuildReason: "Cambiar tu modelo de embedding requiere reconstruir todos los embeddings existentes para mantener la consistencia. Sin reconstruir, tus búsquedas pueden devolver resultados incorrectos o incompletos.",
+    whatHappensNext: "Qué pasa después:",
+    step1: "Tu modelo de embedding predeterminado será actualizado",
+    step2: "Los embeddings existentes permanecerán sin cambios hasta la reconstrucción",
+    step3: "El nuevo contenido usará el nuevo modelo de embedding",
+    step4: "Deberías reconstruir los embeddings lo antes posible",
+    proceedToRebuildPrompt: "¿Te gustaría ir a la página Avanzado para iniciar la reconstrucción ahora?",
+    changeModelOnly: "Solo cambiar modelo",
+    changeAndRebuild: "Cambiar e ir a reconstruir",
+    autoAssign: "Auto-asignar predeterminados",
+    autoAssigning: "Asignando...",
+    autoAssignSuccess: "{count} modelos predeterminados asignados automáticamente",
+    autoAssignNoModels: "No hay modelos disponibles para asignar. Por favor, sincroniza modelos primero.",
+    autoAssignAlreadySet: "Todos los modelos predeterminados ya están configurados",
+    testModel: "Probar modelo",
+    testModelSuccess: "Prueba de modelo exitosa",
+    testModelFailed: "Prueba de modelo fallida",
+    searchOrAddModel: "Buscar o escribir nombre del modelo...",
+    addCustomModel: "Agregar \"{name}\"",
+  },
+  apiKeys: {
+    title: "Configura tu IA con tus propias claves API",
+    description: "Almacena claves API de forma segura en la base de datos para habilitar proveedores de IA en Open Notebook.",
+    encryptionRequired: "Clave de encriptación no configurada",
+    encryptionRequiredDescription: "Establece la variable de entorno OPEN_NOTEBOOK_ENCRYPTION_KEY con cualquier cadena secreta para habilitar el almacenamiento de claves API en la base de datos.",
+    configured: "Configurado",
+    notConfigured: "No configurado",
+    migrationAvailable: "Variables de entorno detectadas",
+    migrationDescription: "{count} clave(s) API están configuradas vía variables de entorno y pueden migrarse a la base de datos para una gestión más fácil.",
+    migrateToDatabase: "Migrar a la base de datos",
+    migrating: "Migrando...",
+    migrationSuccess: "{count} clave(s) API migradas exitosamente",
+    migrationErrors: "{count} clave(s) fallaron al migrar",
+    migrationNothingToMigrate: "Todas las claves ya están en la base de datos",
+    learnMore: "Aprende cómo configurar claves API →",
+    testConnection: "Probar conexión",
+    testSuccess: "Conexión exitosa",
+    testFailed: "La prueba de conexión falló",
+    syncModels: "Sincronizar modelos",
+    syncSuccess: "Se descubrieron {discovered} modelos, se agregaron {new} nuevos",
+    syncNoNew: "Se descubrieron {count} modelos, todos ya registrados",
+    syncFailed: "Error al sincronizar modelos",
+    getApiKey: "Obtener clave API",
+    vertexProject: "ID de proyecto GCP",
+    vertexLocation: "Región",
+    vertexCredentials: "Ruta del JSON de cuenta de servicio",
+    addConfig: "Agregar configuración",
+    editConfig: "Editar configuración",
+    deleteConfig: "Eliminar configuración",
+    configName: "Nombre de la configuración",
+    configNameHint: "Un nombre descriptivo para esta configuración (ej., 'Producción', 'Desarrollo')",
+    baseUrl: "URL base",
+    baseUrlOverrideHint: "Solo cambia esto si necesitas anular el endpoint API predeterminado del proveedor.",
+    deleteConfigConfirm: "¿Estás seguro de que quieres eliminar '{name}'? Esto no se puede deshacer.",
+    configSaveSuccess: "Configuración guardada exitosamente",
+    configUpdateSuccess: "Configuración actualizada exitosamente",
+    configDeleteSuccess: "Configuración eliminada exitosamente",
+    apiKeyEditHint: "Deja en blanco para mantener la clave API existente",
+    decryptionError: "Error de desencriptación",
+    decryptionErrorDescription: "La clave API de esta credencial no pudo ser desencriptada. La clave de encriptación puede haber cambiado. Elimina esta credencial y créala de nuevo con la clave correcta.",
+  },
+  setupBanner: {
+    encryptionRequired: "Clave de encriptación no configurada",
+    encryptionRequiredDescription: "Establece la variable de entorno OPEN_NOTEBOOK_ENCRYPTION_KEY para habilitar el almacenamiento seguro de credenciales.",
+    migrationAvailable: "Migración de claves API disponible",
+    migrationDescription: "{count} proveedor(es) tienen claves API configuradas vía variables de entorno. Mígralas a la base de datos para una gestión más fácil.",
+    goToSettings: "Ir a configuración",
+    viewDocs: "Ver documentación",
+  },
+}
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 5d2cc8b9..2dd641d1 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -26,6 +26,7 @@ export const frFR = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "Source",
     notebook: "Carnet",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/index.ts b/frontend/src/lib/locales/index.ts
index 0b4a6d89..0ace84ca 100644
--- a/frontend/src/lib/locales/index.ts
+++ b/frontend/src/lib/locales/index.ts
@@ -7,6 +7,7 @@ import { itIT } from './it-IT';
 import { frFR } from './fr-FR';
 import { ruRU } from './ru-RU';
 import { bnIN } from './bn-IN';
+import { esES } from './es-ES';
 
 export const resources = {
   'zh-CN': { translation: zhCN },
@@ -18,11 +19,12 @@ export const resources = {
   'fr-FR': { translation: frFR },
   'ru-RU': { translation: ruRU },
   'bn-IN': { translation: bnIN },
+  'es-ES': { translation: esES },
 } as const;
 
 export type TranslationKeys = typeof enUS;
 
-export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN';
+export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'es-ES';
 
 export type Language = {
   code: LanguageCode;
@@ -39,6 +41,7 @@ export const languages: Language[] = [
   { code: 'fr-FR', label: 'Français' },
   { code: 'ru-RU', label: 'Русский' },
   { code: 'bn-IN', label: 'বাংলা' },
+  { code: 'es-ES', label: 'Español' },
 ];
 
-export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN };
+export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, esES };
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 971f3caf..916846d9 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -26,6 +26,7 @@ export const itIT = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "Fonte",
     notebook: "Quaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 5f4fcf34..9a5dfa20 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -26,6 +26,7 @@ export const jaJP = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "ソース",
     notebook: "ノートブック",
     podcast: "ポッドキャスト",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 16acc33e..d3f66c06 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -26,6 +26,7 @@ export const ptBR = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "Fonte",
     notebook: "Caderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index c06f6b90..fece9fd6 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -26,6 +26,7 @@ export const ruRU = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "Источник",
     notebook: "Блокнот",
     podcast: "Подкаст",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 3cedde29..fa0c4e4d 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -26,6 +26,7 @@ export const zhCN = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "来源",
     notebook: "笔记本",
     podcast: "播客",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index cb3e21c2..25f26fb1 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -26,6 +26,7 @@ export const zhTW = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    spanish: "Español",
     source: "來源",
     notebook: "筆記本",
     podcast: "播客",
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index bd2e04f9..5fa2f9ba 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, es, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -13,6 +13,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'fr-FR': fr,
   'ru-RU': ru,
   'bn-IN': bn,
+  'es-ES': es,
 }
 
 /**

From 6aabacfca6ea801adc098f43c5792700dc5e5690 Mon Sep 17 00:00:00 2001
From: unendless314 <65386006+unendless314@users.noreply.github.com>
Date: Mon, 20 Apr 2026 00:49:09 +0800
Subject: [PATCH 026/345] feat: use token-based sizing for embedding chunking
 (#749)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat: make chunk sizing token-based with 512-token default

* fix: defer embedding debug token metrics

* chore: lower default chunk size to 400 tokens and document rationale

The previous 512-token default matched exactly the context window of
BERT-family embedders like mxbai-embed-large, leaving no margin for:
- tokenizer mismatch between our o200k_base measurement and the
  embedder's own WordPiece tokenizer
- occasional splitter overshoot (RecursiveCharacterTextSplitter can
  emit chunks slightly above chunk_size when separators are sparse)
- special tokens ([CLS], [SEP]) that consume context-window budget

400 tokens keeps ~20% headroom below 512 while still being a large
improvement over the old character-based default for most content.
Users with larger-context embedders can raise OPEN_NOTEBOOK_CHUNK_SIZE
via env var. Also adds a CHANGELOG entry for the full PR behavior
change.

* chore: move chunking changelog entry under 1.8.5

Target release is 1.8.5 — moving the Changed section out of Unreleased.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                     |  4 ++
 open_notebook/utils/CLAUDE.md    | 29 +++++++------
 open_notebook/utils/chunking.py  | 27 ++++++------
 open_notebook/utils/embedding.py | 39 ++++++++++++-----
 tests/test_chunking.py           | 74 ++++++++++++++++++++++++--------
 tests/test_embedding.py          | 13 +++++-
 6 files changed, 130 insertions(+), 56 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5d06c9a9..84893d84 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [1.8.5] - 2026-04-14
 
+### Changed
+- Embedding chunking is now token-based instead of character-based, improving chunk sizing consistency for CJK and mixed-language content (#542, #749)
+- `OPEN_NOTEBOOK_CHUNK_SIZE` and `OPEN_NOTEBOOK_CHUNK_OVERLAP` semantics changed from characters to tokens; default reduced from 1200 characters to 400 tokens to stay safely below the 512-token ceiling of BERT-family embedders (e.g. mxbai-embed-large) after accounting for tokenizer mismatch and splitter overshoot. Existing stored embeddings are unaffected; only new ingestions use the new chunking.
+
 ### Fixed
 - Credentials endpoint no longer crashes (500) when encryption key doesn't match stored credentials (#740)
 - Broken credentials are now shown with a decryption warning and can still be deleted
diff --git a/open_notebook/utils/CLAUDE.md b/open_notebook/utils/CLAUDE.md
index ae71ff74..ec4d0832 100644
--- a/open_notebook/utils/CLAUDE.md
+++ b/open_notebook/utils/CLAUDE.md
@@ -24,20 +24,20 @@ Each utility is stateless and can be imported independently.
 
 The chunking behavior can be configured via environment variables:
 
-- **OPEN_NOTEBOOK_CHUNK_SIZE**: Maximum chunk size in characters (default: 1200)
-  - Minimum: 100 characters
-  - Warnings: Values > 8192 characters or invalid values
-  - Use case: Smaller models (e.g., mxbai-embed-large with limited context window)
+- **OPEN_NOTEBOOK_CHUNK_SIZE**: Maximum chunk size in tokens (default: 400)
+  - Minimum: 100 tokens
+  - Warnings: Values > 8192 tokens or invalid values
+  - Use case: Conservative baseline that leaves headroom below 512-token embedders (e.g. mxbai-embed-large). Buffer accounts for tokenizer mismatch between our `o200k_base` measurement and the embedder's own tokenizer, plus occasional splitter overshoot and special tokens.
 
-- **OPEN_NOTEBOOK_CHUNK_OVERLAP**: Overlap between chunks in characters (default: 15% of CHUNK_SIZE)
+- **OPEN_NOTEBOOK_CHUNK_OVERLAP**: Overlap between chunks in tokens (default: 15% of CHUNK_SIZE)
   - Must be: >= 0 and < CHUNK_SIZE
   - Warnings: Invalid values or values >= CHUNK_SIZE
   - Use case: Control how much context is shared between adjacent chunks
 
-Example for models with small context windows:
+Example for embedders with larger context windows (e.g. OpenAI text-embedding-3 family, 8191 tokens):
 ```bash
-export OPEN_NOTEBOOK_CHUNK_SIZE=512
-export OPEN_NOTEBOOK_CHUNK_OVERLAP=50
+export OPEN_NOTEBOOK_CHUNK_SIZE=1500
+export OPEN_NOTEBOOK_CHUNK_OVERLAP=150
 ```
 
 Note: Changes require restart of the application.
@@ -63,7 +63,7 @@ Note: Changes require restart of the application.
 
 ### chunking.py
 - **ContentType**: Enum (HTML, MARKDOWN, PLAIN)
-- **CHUNK_SIZE**: Configurable via `OPEN_NOTEBOOK_CHUNK_SIZE` env var (default: 1200)
+- **CHUNK_SIZE**: Configurable via `OPEN_NOTEBOOK_CHUNK_SIZE` env var (default: 400)
 - **CHUNK_OVERLAP**: Configurable via `OPEN_NOTEBOOK_CHUNK_OVERLAP` env var (default: 15% of CHUNK_SIZE)
 - **detect_content_type_from_extension(file_path)**: Detect type from file extension
 - **detect_content_type_from_heuristics(text)**: Detect type from content patterns (returns type + confidence)
@@ -74,7 +74,7 @@ Note: Changes require restart of the application.
 - Uses LangChain splitters: HTMLHeaderTextSplitter, MarkdownHeaderTextSplitter, RecursiveCharacterTextSplitter
 - Extension-based detection is primary; heuristics can override PLAIN extensions with 0.8+ confidence
 - Secondary chunking applied when HTML/Markdown splitters produce oversized chunks
-- Returns list of strings, each ≤ CHUNK_SIZE characters
+- Returns list of strings, each approximately ≤ CHUNK_SIZE tokens
 
 ### embedding.py
 - **mean_pool_embeddings(embeddings)**: Combine multiple embeddings via normalized mean pooling
@@ -83,7 +83,7 @@ Note: Changes require restart of the application.
 
 **Key behavior**:
 - Uses model_manager.get_model("embedding") for embedding model
-- Short text (≤ CHUNK_SIZE): direct embedding
+- Short text (≤ CHUNK_SIZE tokens): direct embedding
 - Long text: chunk → embed each → mean pool results
 - Mean pooling: normalize each → mean → normalize result (using numpy)
 - Raises ValueError for empty/whitespace-only text
@@ -103,7 +103,7 @@ Note: Changes require restart of the application.
 - **token_count(text)**: Returns estimated token count for string (via tiktoken)
 - **token_cost(text, model)**: Calculate cost estimate for text with given model
 
-**Key behavior**: Uses cl100k_base encoding; may differ slightly from actual model tokenization
+**Key behavior**: Uses `o200k_base` encoding; may differ slightly from actual model tokenization. If `tiktoken` is unavailable, `token_count()` falls back to a coarse estimate; this refactor keeps that existing contract.
 
 ### version_utils.py
 - **compare_versions(v1, v2)**: Returns -1 (v1 < v2), 0 (equal), 1 (v1 > v2)
@@ -135,8 +135,9 @@ Note: Changes require restart of the application.
 
 ## Important Quirks & Gotchas
 
-- **Token count estimation**: Uses cl100k_base encoding; may differ 5-10% from actual model tokens
-- **Chunk size for Ollama**: 1500 chars chosen to fit within Ollama embedding model context limits
+- **Token count estimation**: Uses `o200k_base` encoding; may differ slightly from actual model tokens
+- **Chunk size semantics changed**: `OPEN_NOTEBOOK_CHUNK_SIZE` and `OPEN_NOTEBOOK_CHUNK_OVERLAP` are token-based, not character-based
+- **Default chunk size**: The token-based default is 400 — leaves ~20% margin below the 512-token ceiling of BERT-family embedders (e.g. mxbai-embed-large) to absorb tokenizer mismatch (we measure with `o200k_base`, they tokenize with WordPiece), splitter overshoot, and special tokens
 - **Content type detection order**: Extension checked first, then heuristics; high-confidence heuristics (≥0.8) can override PLAIN extensions
 - **Mean pooling normalization**: Each embedding normalized before mean, result normalized after
 - **Priority weights default**: If not specified, ContextConfig uses default weights (source=1, note=0.8, insight=1.2)
diff --git a/open_notebook/utils/chunking.py b/open_notebook/utils/chunking.py
index 3f33ba48..b0eb6fe2 100644
--- a/open_notebook/utils/chunking.py
+++ b/open_notebook/utils/chunking.py
@@ -9,8 +9,8 @@ Key functions:
 - chunk_text(): Splits text into chunks using appropriate splitter for content type
 
 Environment Variables:
-    OPEN_NOTEBOOK_CHUNK_SIZE: Maximum chunk size in characters (default: 1200)
-    OPEN_NOTEBOOK_CHUNK_OVERLAP: Overlap between chunks in characters (default: 15% of CHUNK_SIZE)
+    OPEN_NOTEBOOK_CHUNK_SIZE: Maximum chunk size in tokens (default: 400)
+    OPEN_NOTEBOOK_CHUNK_OVERLAP: Overlap between chunks in tokens (default: 15% of CHUNK_SIZE)
 """
 
 import os
@@ -26,6 +26,8 @@ from langchain_text_splitters import (
 )
 from loguru import logger
 
+from .token_utils import token_count
+
 
 def _get_chunk_size() -> int:
     """Get chunk size from environment variable or use default."""
@@ -44,14 +46,14 @@ def _get_chunk_size() -> int:
                     f"OPEN_NOTEBOOK_CHUNK_SIZE ({chunk_size}) is very large. "
                     f"This may cause issues with some embedding models."
                 )
-            logger.info(f"Using custom chunk size: {chunk_size} characters")
+            logger.info(f"Using custom chunk size: {chunk_size} tokens")
             return chunk_size
         except ValueError:
             logger.warning(
                 f"Invalid OPEN_NOTEBOOK_CHUNK_SIZE value: '{chunk_size_str}'. "
-                f"Using default: 1200"
+                f"Using default: 400"
             )
-    return 1200
+    return 400
 
 
 def _get_chunk_overlap(chunk_size: int) -> int:
@@ -72,7 +74,7 @@ def _get_chunk_overlap(chunk_size: int) -> int:
                     f"Using 15% of chunk size: {int(chunk_size * 0.15)}"
                 )
                 return int(chunk_size * 0.15)
-            logger.info(f"Using custom chunk overlap: {overlap} characters")
+            logger.info(f"Using custom chunk overlap: {overlap} tokens")
             return overlap
         except ValueError:
             logger.warning(
@@ -358,14 +360,14 @@ def _get_plain_splitter() -> RecursiveCharacterTextSplitter:
     return RecursiveCharacterTextSplitter(
         chunk_size=CHUNK_SIZE,
         chunk_overlap=CHUNK_OVERLAP,
-        length_function=len,
+        length_function=token_count,
         separators=["\n\n", "\n", ". ", ", ", " ", ""],
     )
 
 
 def _apply_secondary_chunking(chunks: List[str]) -> List[str]:
     """
-    Apply secondary chunking to ensure no chunk exceeds CHUNK_SIZE.
+    Apply secondary chunking to ensure no chunk exceeds CHUNK_SIZE tokens.
 
     Used when primary splitters (HTML/Markdown) produce oversized chunks.
     """
@@ -373,7 +375,7 @@ def _apply_secondary_chunking(chunks: List[str]) -> List[str]:
     secondary_splitter = _get_plain_splitter()
 
     for chunk in chunks:
-        if len(chunk) > CHUNK_SIZE:
+        if token_count(chunk) > CHUNK_SIZE:
             # Split oversized chunk
             sub_chunks = secondary_splitter.split_text(chunk)
             result.extend(sub_chunks)
@@ -397,13 +399,14 @@ def chunk_text(
         file_path: Optional file path for content type detection
 
     Returns:
-        List of text chunks, each <= CHUNK_SIZE characters
+        List of text chunks, each approximately <= CHUNK_SIZE tokens
     """
     if not text or not text.strip():
         return []
 
     # Short text doesn't need chunking
-    if len(text) <= CHUNK_SIZE:
+    text_tokens = token_count(text)
+    if text_tokens <= CHUNK_SIZE:
         return [text]
 
     # Detect content type if not provided
@@ -441,5 +444,5 @@ def chunk_text(
     # Filter out empty chunks
     chunks = [c.strip() for c in chunks if c and c.strip()]
 
-    logger.debug(f"Created {len(chunks)} chunks from {len(text)} characters")
+    logger.debug(f"Created {len(chunks)} chunks from {text_tokens} tokens")
     return chunks
diff --git a/open_notebook/utils/embedding.py b/open_notebook/utils/embedding.py
index 7c746f15..af2035ba 100644
--- a/open_notebook/utils/embedding.py
+++ b/open_notebook/utils/embedding.py
@@ -17,6 +17,7 @@ import numpy as np
 from loguru import logger
 
 from .chunking import CHUNK_SIZE, ContentType, chunk_text
+from .token_utils import token_count
 
 EMBEDDING_BATCH_SIZE = 50
 EMBEDDING_MAX_RETRIES = 3
@@ -120,11 +121,28 @@ async def generate_embeddings(
     model_name = getattr(embedding_model, "model_name", "unknown")
 
     # Log text sizes for debugging
-    text_sizes = [len(t) for t in texts]
-    logger.debug(
-        f"Generating embeddings for {len(texts)} texts "
-        f"(sizes: min={min(text_sizes)}, max={max(text_sizes)}, "
-        f"total={sum(text_sizes)} chars)"
+    metrics: tuple[int, int, int, int] | None = None
+
+    def _get_size_metrics() -> tuple[int, int, int, int]:
+        nonlocal metrics
+        if metrics is None:
+            token_sizes = [token_count(t) for t in texts]
+            metrics = (
+                min(token_sizes),
+                max(token_sizes),
+                sum(token_sizes),
+                sum(len(t) for t in texts),
+            )
+        return metrics
+
+    logger.opt(lazy=True).debug(
+        "Generating embeddings for {} texts "
+        "(tokens: min={}, max={}, total={}; chars: total={})",
+        lambda: len(texts),
+        lambda: _get_size_metrics()[0],
+        lambda: _get_size_metrics()[1],
+        lambda: _get_size_metrics()[2],
+        lambda: _get_size_metrics()[3],
     )
 
     all_embeddings: List[List[float]] = []
@@ -174,10 +192,10 @@ async def generate_embedding(
     """
     Generate a single embedding for text, handling large content via chunking and mean pooling.
 
-    For short text (<= CHUNK_SIZE):
+    For short text (<= CHUNK_SIZE tokens):
         - Embeds directly and returns the embedding
 
-    For long text (> CHUNK_SIZE):
+    For long text (> CHUNK_SIZE tokens):
         - Chunks the text using appropriate splitter for content type
         - Embeds all chunks in batches
         - Combines embeddings via mean pooling
@@ -199,16 +217,17 @@ async def generate_embedding(
         raise ValueError("Cannot generate embedding for empty text")
 
     text = text.strip()
+    text_tokens = token_count(text)
 
     # Check if chunking is needed
-    if len(text) <= CHUNK_SIZE:
+    if text_tokens <= CHUNK_SIZE:
         # Short text - embed directly
-        logger.debug(f"Embedding short text ({len(text)} chars) directly")
+        logger.debug(f"Embedding short text ({text_tokens} tokens) directly")
         embeddings = await generate_embeddings([text], command_id=command_id)
         return embeddings[0]
 
     # Long text - chunk and mean pool
-    logger.debug(f"Text exceeds chunk size ({len(text)} chars), chunking...")
+    logger.debug(f"Text exceeds chunk size ({text_tokens} tokens), chunking...")
 
     chunks = chunk_text(text, content_type=content_type, file_path=file_path)
 
diff --git a/tests/test_chunking.py b/tests/test_chunking.py
index c717c113..df7d2e63 100644
--- a/tests/test_chunking.py
+++ b/tests/test_chunking.py
@@ -14,6 +14,32 @@ from open_notebook.utils.chunking import (
     detect_content_type_from_extension,
     detect_content_type_from_heuristics,
 )
+from open_notebook.utils.token_utils import token_count
+
+
+def _build_text_with_max_tokens(fragment: str, max_tokens: int) -> str:
+    """Build text that stays within a token budget."""
+    text = ""
+    while True:
+        candidate = text + fragment
+        if token_count(candidate) > max_tokens:
+            return text
+        text = candidate
+
+
+def _build_text_exceeding_tokens(fragment: str, threshold_tokens: int) -> str:
+    """Build text that exceeds a token threshold."""
+    text = fragment
+    while token_count(text) <= threshold_tokens:
+        text += fragment
+    return text
+
+
+def _assert_chunks_within_token_limit(chunks: list[str]) -> None:
+    """Assert chunks stay within the configured token window."""
+    assert chunks
+    for chunk in chunks:
+        assert token_count(chunk) <= CHUNK_SIZE
 
 # ============================================================================
 # TEST SUITE 1: Content Type Detection from Extension
@@ -222,20 +248,33 @@ class TestChunkText:
         assert chunks[0] == text
 
     def test_text_at_chunk_limit(self):
-        """Test text at exactly chunk size limit."""
-        text = "x" * CHUNK_SIZE
+        """Test text within the token chunk size limit."""
+        text = _build_text_with_max_tokens("This is a sentence. ", CHUNK_SIZE)
+        assert token_count(text) <= CHUNK_SIZE
         chunks = chunk_text(text)
         assert len(chunks) == 1
 
     def test_long_text_is_chunked(self):
-        """Test that long text is chunked."""
-        # Create text longer than chunk size
-        text = "This is a sentence. " * 200  # ~4000 chars
+        """Test that long English text is chunked by token budget."""
+        text = _build_text_exceeding_tokens("This is a sentence. ", CHUNK_SIZE)
         chunks = chunk_text(text)
         assert len(chunks) > 1
-        # Each chunk should be <= CHUNK_SIZE
-        for chunk in chunks:
-            assert len(chunk) <= CHUNK_SIZE + 100  # Allow some flexibility for overlap
+        _assert_chunks_within_token_limit(chunks)
+
+    def test_cjk_text_is_chunked_by_tokens(self):
+        """Test that long CJK text is chunked using token measurement."""
+        text = _build_text_exceeding_tokens("這是一段中文內容，用來驗證分塊邏輯。", CHUNK_SIZE)
+        chunks = chunk_text(text, content_type=ContentType.PLAIN)
+        assert len(chunks) > 1
+        _assert_chunks_within_token_limit(chunks)
+
+    def test_mixed_language_text_is_chunked_by_tokens(self):
+        """Test that mixed-language text is chunked using token measurement."""
+        fragment = "This paragraph mixes English and 中文內容 to verify token-based chunking. "
+        text = _build_text_exceeding_tokens(fragment, CHUNK_SIZE)
+        chunks = chunk_text(text, content_type=ContentType.PLAIN)
+        assert len(chunks) > 1
+        _assert_chunks_within_token_limit(chunks)
 
     def test_explicit_content_type_html(self):
         """Test chunking with explicit HTML content type."""
@@ -269,9 +308,10 @@ Content for section 2.
 
     def test_explicit_content_type_plain(self):
         """Test chunking with explicit plain content type."""
-        plain_text = "Word " * 500  # ~2500 chars
+        plain_text = _build_text_exceeding_tokens("Word ", CHUNK_SIZE)
         chunks = chunk_text(plain_text, content_type=ContentType.PLAIN)
-        assert len(chunks) >= 1
+        assert len(chunks) > 1
+        _assert_chunks_within_token_limit(chunks)
 
     def test_file_path_detection(self):
         """Test chunking with file path for content type detection."""
@@ -280,16 +320,14 @@ Content for section 2.
         assert len(chunks) == 1
 
     def test_secondary_chunking_for_large_sections(self):
-        """Test that large sections from HTML/MD splitters are further chunked."""
-        # Create text that would produce a single large section
-        large_section = "x" * 3000  # Larger than CHUNK_SIZE
+        """Test that large Markdown sections are further chunked by tokens."""
+        large_section = _build_text_exceeding_tokens(
+            "這是一段很長的章節內容，用來測試次級分塊。", CHUNK_SIZE
+        )
         md_text = f"# Title\n\n{large_section}"
         chunks = chunk_text(md_text, content_type=ContentType.MARKDOWN)
-        # Should have multiple chunks due to secondary chunking
-        assert len(chunks) >= 1
-        for chunk in chunks:
-            # Allow some flexibility but chunks should be reasonable size
-            assert len(chunk) <= CHUNK_SIZE + 300
+        assert len(chunks) > 1
+        _assert_chunks_within_token_limit(chunks)
 
 
 if __name__ == "__main__":
diff --git a/tests/test_embedding.py b/tests/test_embedding.py
index 61da1713..86f8c21d 100644
--- a/tests/test_embedding.py
+++ b/tests/test_embedding.py
@@ -6,11 +6,21 @@ Tests embedding generation and mean pooling functionality.
 
 import pytest
 
+from open_notebook.utils.chunking import CHUNK_SIZE
 from open_notebook.utils.embedding import (
     generate_embedding,
     generate_embeddings,
     mean_pool_embeddings,
 )
+from open_notebook.utils.token_utils import token_count
+
+
+def _build_text_exceeding_tokens(fragment: str, threshold_tokens: int) -> str:
+    """Build text that exceeds a token threshold."""
+    text = fragment
+    while token_count(text) <= threshold_tokens:
+        text += fragment
+    return text
 
 # ============================================================================
 # TEST SUITE 1: Mean Pooling
@@ -184,8 +194,7 @@ class TestGenerateEmbedding:
         """Test that long text is chunked and mean pooled."""
         from unittest.mock import AsyncMock, MagicMock, patch
 
-        # Create text longer than chunk size
-        long_text = "This is a sentence. " * 200  # ~4000 chars
+        long_text = _build_text_exceeding_tokens("This is a sentence. ", CHUNK_SIZE)
 
         mock_model = MagicMock()
         # Return multiple embeddings (one per chunk)

From 4efe613f698cee13a845d616fb2cac206f6490a0 Mon Sep 17 00:00:00 2001
From: Artyom Mezin <psycho.fading@gmail.com>
Date: Sun, 19 Apr 2026 21:37:42 +0300
Subject: [PATCH 027/345] Make embedding batch size configurable (#742)

* Make embedding batch size configurable

* Address embedding batch size review nits
---
 CHANGELOG.md                                  |  3 +++
 docs/1-INSTALLATION/docker-compose.md         |  1 +
 docs/5-CONFIGURATION/environment-reference.md |  8 ++++++
 open_notebook/utils/embedding.py              | 25 ++++++++++++++++++-
 4 files changed, 36 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 84893d84..39d06ac2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` environment variable to override the embedding batch size; default remains `50`. Helps with CPU-only local embedding and stricter OpenAI-compatible endpoints (#735)
+
 ## [1.8.5] - 2026-04-14
 
 ### Changed
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index dd45dc50..8a974995 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -197,6 +197,7 @@ Configure Ollama in the Settings UI:
 | `SURREAL_NAMESPACE` | Database namespace | `open_notebook` |
 | `SURREAL_DATABASE` | Database name | `open_notebook` |
 | `API_URL` | API external URL | `http://localhost:5055` |
+| `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | Override embedding batch size for stricter/local providers (recommended: `8` for CPU-only local setups) | `50` |
 
 See [Environment Reference](../5-CONFIGURATION/environment-reference.md) for complete list.
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index ca509443..e650710f 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -61,6 +61,14 @@ Comprehensive list of all environment variables available in Open Notebook.
 
 ---
 
+## Embeddings
+
+| Variable | Required? | Default | Description |
+|----------|-----------|---------|-------------|
+| `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | No | 50 | Number of texts sent per embedding batch. Lower this for CPU-only or stricter OpenAI-compatible embedding providers. |
+
+---
+
 ## Text-to-Speech (TTS)
 
 | Variable | Required? | Default | Description |
diff --git a/open_notebook/utils/embedding.py b/open_notebook/utils/embedding.py
index af2035ba..713e8706 100644
--- a/open_notebook/utils/embedding.py
+++ b/open_notebook/utils/embedding.py
@@ -11,6 +11,7 @@ to ensure consistent behavior and proper handling of large content.
 """
 
 import asyncio
+import os
 from typing import TYPE_CHECKING, List, Optional
 
 import numpy as np
@@ -19,7 +20,29 @@ from loguru import logger
 from .chunking import CHUNK_SIZE, ContentType, chunk_text
 from .token_utils import token_count
 
-EMBEDDING_BATCH_SIZE = 50
+
+def _get_embedding_batch_size() -> int:
+    """
+    Read the embedding batch size from the environment.
+
+    This is intentionally configurable because provider limits vary widely, and
+    CPU-only local embedding endpoints often need smaller batches than cloud APIs.
+    """
+    raw = os.getenv("OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE", "50").strip()
+    try:
+        value = int(raw)
+        if value < 1:
+            raise ValueError
+        return value
+    except ValueError:
+        logger.warning(
+            "Invalid OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE='{}'; falling back to 50",
+            raw,
+        )
+        return 50
+
+
+EMBEDDING_BATCH_SIZE = _get_embedding_batch_size()
 EMBEDDING_MAX_RETRIES = 3
 EMBEDDING_RETRY_DELAY = 2  # seconds
 

From 4d4330fb3f9bddf9d646cc7a8cf3ef305c58d079 Mon Sep 17 00:00:00 2001
From: Greg G <77203234+ggrace519@users.noreply.github.com>
Date: Sun, 19 Apr 2026 14:49:11 -0400
Subject: [PATCH 028/345] fix(docker): make wait-for-api.sh POSIX and enforce
 LF line endings (#586) (#598)

* fix(docker): make wait-for-api.sh POSIX and enforce LF line endings (#586)

* fix: restore inline comment on final exit 0

Addresses review feedback: the comment on the final `exit 0` explains
a non-obvious design decision (frontend still starts when the API
never became ready, so users get a usable UI with connection errors
rather than a dead container).

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .gitattributes          | 2 ++
 scripts/wait-for-api.sh | 9 ++++++---
 2 files changed, 8 insertions(+), 3 deletions(-)
 create mode 100644 .gitattributes

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..369f4ef7
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,2 @@
+# Ensure shell scripts always use LF so they run in Linux containers (e.g. Docker)
+*.sh text eol=lf
diff --git a/scripts/wait-for-api.sh b/scripts/wait-for-api.sh
index 2848cd4d..285a4be8 100755
--- a/scripts/wait-for-api.sh
+++ b/scripts/wait-for-api.sh
@@ -1,18 +1,21 @@
-#!/bin/bash
+#!/bin/sh
 # Wait for the API to be healthy before starting the frontend
 # This prevents the "Unable to Connect to API Server" error during startup
+# POSIX-compliant so it runs with /bin/sh (dash) in slim images
 
 API_URL="${INTERNAL_API_URL:-http://localhost:5055}"
-MAX_RETRIES=60  # 60 retries * 5 seconds = 5 minutes max wait
+MAX_RETRIES=60
 RETRY_INTERVAL=5
+i=0
 
 echo "Waiting for API to be ready at ${API_URL}/health..."
 
-for i in $(seq 1 $MAX_RETRIES); do
+while [ $i -lt $MAX_RETRIES ]; do
     if curl -s -f "${API_URL}/health" > /dev/null 2>&1; then
         echo "API is ready! Starting frontend..."
         exit 0
     fi
+    i=$((i + 1))
     echo "Attempt $i/$MAX_RETRIES: API not ready yet, waiting ${RETRY_INTERVAL}s..."
     sleep $RETRY_INTERVAL
 done

From ec41ef8f2fc210cdf56e1428f87943c66dd56893 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Apr 2026 16:22:10 -0300
Subject: [PATCH 029/345] feat(api): add configurable CORS origins via
 CORS_ORIGINS (#767)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Replace hardcoded `allow_origins=["*"]` with a parsed `CORS_ORIGINS`
environment variable (comma-separated). Default remains `*` for
backward compatibility — no existing deployment breaks — but the API
now logs a startup warning prompting users to set it explicitly for
production.

Exception handlers now route their CORS headers through a shared
`_cors_headers()` helper that mirrors Starlette's CORSMiddleware
behavior: reflects the request Origin when allowed (handling the
browser-rejected `*` + credentials combination correctly), and omits
`Access-Control-Allow-Origin` for disallowed origins so error bodies
don't leak cross-origin when `CORS_ORIGINS` is configured.

Closes #585, #730.

Based on the original work by Greg Grace in #597; rewritten on top of
current main to address prior review feedback (load_dotenv kept at
top, `import os` grouped with stdlib, `_cors_headers` defined before
its exception-handler callers, origins parsed once at module load)
and to choose a non-breaking default paired with a startup warning
instead of a stricter-by-default origin.

Co-authored-by: Greg Grace <ggrace@519lab.com>
---
 CHANGELOG.md                                  |  1 +
 api/main.py                                   | 94 ++++++++++++-------
 docs/5-CONFIGURATION/environment-reference.md | 19 ++++
 docs/5-CONFIGURATION/security.md              | 25 +++++
 4 files changed, 107 insertions(+), 32 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 39d06ac2..9ded2a54 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` environment variable to override the embedding batch size; default remains `50`. Helps with CPU-only local embedding and stricter OpenAI-compatible endpoints (#735)
+- `CORS_ORIGINS` environment variable to configure the API's allowed origins (comma-separated). Default remains `*` for backward compatibility; the API now logs a startup warning prompting users to set it for production deployments. Exception responses honor the configured origins when explicitly set (#585, #597, #730)
 
 ## [1.8.5] - 2026-04-14
 
diff --git a/api/main.py b/api/main.py
index 661637e1..3fbac5ff 100644
--- a/api/main.py
+++ b/api/main.py
@@ -3,6 +3,7 @@ from dotenv import load_dotenv
 
 load_dotenv()
 
+import os
 from contextlib import asynccontextmanager
 
 from fastapi import FastAPI, Request
@@ -12,16 +13,6 @@ from loguru import logger
 from starlette.exceptions import HTTPException as StarletteHTTPException
 
 from api.auth import PasswordAuthMiddleware
-from open_notebook.exceptions import (
-    AuthenticationError,
-    ConfigurationError,
-    ExternalServiceError,
-    InvalidInputError,
-    NetworkError,
-    NotFoundError,
-    OpenNotebookError,
-    RateLimitError,
-)
 from api.routers import (
     auth,
     chat,
@@ -46,8 +37,57 @@ from api.routers import (
 )
 from api.routers import commands as commands_router
 from open_notebook.database.async_migrate import AsyncMigrationManager
+from open_notebook.exceptions import (
+    AuthenticationError,
+    ConfigurationError,
+    ExternalServiceError,
+    InvalidInputError,
+    NetworkError,
+    NotFoundError,
+    OpenNotebookError,
+    RateLimitError,
+)
 from open_notebook.utils.encryption import get_secret_from_env
 
+
+def _parse_cors_origins(raw: str) -> list[str]:
+    """Parse CORS_ORIGINS env value into a list of origins."""
+    value = raw.strip()
+    if value == "*":
+        return ["*"]
+    return [origin.strip() for origin in value.split(",") if origin.strip()]
+
+
+# Parsed once at module load; CORS_ORIGINS changes require a restart.
+_cors_origins_raw = os.getenv("CORS_ORIGINS")
+CORS_ALLOWED_ORIGINS = _parse_cors_origins(_cors_origins_raw or "*")
+CORS_IS_DEFAULT_WILDCARD = _cors_origins_raw is None
+
+
+def _cors_headers(request: Request) -> dict[str, str]:
+    """
+    Build CORS headers for error responses.
+
+    Mirrors Starlette CORSMiddleware behavior: reflects the request Origin
+    when the origin is allowed (or when wildcard is configured, since
+    browsers reject `Access-Control-Allow-Origin: *` combined with
+    credentials). Omits `Access-Control-Allow-Origin` for disallowed
+    origins so the browser blocks the error body from leaking cross-origin.
+    """
+    origin = request.headers.get("origin")
+    headers: dict[str, str] = {
+        "Access-Control-Allow-Credentials": "true",
+        "Access-Control-Allow-Methods": "*",
+        "Access-Control-Allow-Headers": "*",
+    }
+
+    if origin and ("*" in CORS_ALLOWED_ORIGINS or origin in CORS_ALLOWED_ORIGINS):
+        headers["Access-Control-Allow-Origin"] = origin
+        headers["Vary"] = "Origin"
+
+    return headers
+
+
 # Import commands to register them in the API process
 try:
     logger.info("Commands imported in API process")
@@ -61,8 +101,6 @@ async def lifespan(app: FastAPI):
     Lifespan event handler for the FastAPI application.
     Runs database migrations automatically on startup.
     """
-    import os
-
     # Startup: Security checks
     logger.info("Starting API initialization...")
 
@@ -122,6 +160,16 @@ app = FastAPI(
     lifespan=lifespan,
 )
 
+if CORS_IS_DEFAULT_WILDCARD:
+    logger.warning(
+        "CORS_ORIGINS is not set — API accepts cross-origin requests from any "
+        "origin (default: '*'). For production deployments, set CORS_ORIGINS to "
+        "your frontend origin(s), e.g. "
+        "CORS_ORIGINS=https://notebook.example.com"
+    )
+else:
+    logger.info(f"CORS allowed origins: {CORS_ALLOWED_ORIGINS}")
+
 # Add password authentication middleware first
 # Exclude /api/auth/status and /api/config from authentication
 app.add_middleware(
@@ -140,7 +188,7 @@ app.add_middleware(
 # Add CORS middleware last (so it processes first)
 app.add_middleware(
     CORSMiddleware,
-    allow_origins=["*"],  # In production, replace with specific origins
+    allow_origins=CORS_ALLOWED_ORIGINS,
     allow_credentials=True,
     allow_methods=["*"],
     allow_headers=["*"],
@@ -159,31 +207,13 @@ async def custom_http_exception_handler(request: Request, exc: StarletteHTTPExce
     FastAPI, this handler won't be called. In that case, configure your reverse proxy
     to add CORS headers to error responses.
     """
-    # Get the origin from the request
-    origin = request.headers.get("origin", "*")
-
     return JSONResponse(
         status_code=exc.status_code,
         content={"detail": exc.detail},
-        headers={
-            **(exc.headers or {}), "Access-Control-Allow-Origin": origin,
-            "Access-Control-Allow-Credentials": "true",
-            "Access-Control-Allow-Methods": "*",
-            "Access-Control-Allow-Headers": "*",
-        },
+        headers={**(exc.headers or {}), **_cors_headers(request)},
     )
 
 
-def _cors_headers(request: Request) -> dict[str, str]:
-    origin = request.headers.get("origin", "*")
-    return {
-        "Access-Control-Allow-Origin": origin,
-        "Access-Control-Allow-Credentials": "true",
-        "Access-Control-Allow-Methods": "*",
-        "Access-Control-Allow-Headers": "*",
-    }
-
-
 @app.exception_handler(NotFoundError)
 async def not_found_error_handler(request: Request, exc: NotFoundError):
     return JSONResponse(
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index e650710f..cd8977ec 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -69,6 +69,25 @@ Comprehensive list of all environment variables available in Open Notebook.
 
 ---
 
+## API / CORS
+
+| Variable | Required? | Default | Description |
+|----------|-----------|---------|-------------|
+| `CORS_ORIGINS` | No | `*` | Comma-separated list of origins allowed to call the API (e.g. `https://app.example.com,https://www.example.com`). Default `*` accepts any origin; **for production, set this explicitly to your frontend origin(s)**. Changes require an API restart. The API logs a warning on startup when unset. |
+
+**When to change this**:
+- You access the UI at a custom domain (reverse proxy, HTTPS, public deployment).
+- The frontend runs on a different port than `3000`.
+- You serve the frontend from a different host than the API (e.g. CDN).
+
+Example for a production deployment behind a reverse proxy:
+
+```bash
+CORS_ORIGINS=https://notebook.example.com
+```
+
+---
+
 ## Text-to-Speech (TTS)
 
 | Variable | Required? | Default | Description |
diff --git a/docs/5-CONFIGURATION/security.md b/docs/5-CONFIGURATION/security.md
index 283a6cbc..f3179634 100644
--- a/docs/5-CONFIGURATION/security.md
+++ b/docs/5-CONFIGURATION/security.md
@@ -287,6 +287,31 @@ iptables -A INPUT -p tcp --dport 5055 -j DROP
 
 See [Reverse Proxy Configuration](reverse-proxy.md) for complete nginx/Caddy/Traefik setup with HTTPS.
 
+### CORS Origins
+
+The API accepts cross-origin requests from any origin by default (`*`). This is convenient for development and diverse self-hosted setups, but it's not recommended for internet-facing production deployments because any website the user visits can issue authenticated cross-origin requests to your API.
+
+When `CORS_ORIGINS` is not set, the API logs a startup warning prompting you to configure it.
+
+**For production, set `CORS_ORIGINS` to your frontend's actual origin(s):**
+
+```bash
+# Single origin
+CORS_ORIGINS=https://notebook.example.com
+
+# Multiple origins (comma-separated)
+CORS_ORIGINS=https://notebook.example.com,https://admin.example.com
+```
+
+**Guidelines:**
+
+- Always use HTTPS origins in production.
+- List only the exact origins that should be allowed to call the API.
+- Include the scheme and port (if non-default): `https://example.com`, `http://192.168.1.10:3000`.
+- Changes require an API restart to take effect.
+
+**Error responses** (401, 404, 500, etc.) also respect the configured origins — they only include `Access-Control-Allow-Origin` for allowed origins, so error bodies are not leaked cross-origin when `CORS_ORIGINS` is configured.
+
 ---
 
 ## Security Limitations

From caeb9e42288242fa1eaf2fc62a8868922603a7cc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:08 -0300
Subject: [PATCH 030/345] chore(deps): bump idna from 3.11 to 3.15 (#810)

Bumps [idna](https://github.com/kjd/idna) from 3.11 to 3.15.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.11...v3.15)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.15'
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 968496ca..ff393192 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1007,11 +1007,11 @@ wheels = [
 
 [[package]]
 name = "idna"
-version = "3.11"
+version = "3.15"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/6f/6d/0703ccc57f3a7233505399edb88de3cbd678da106337b9fcde432b65ed60/idna-3.11.tar.gz", hash = "sha256:795dafcc9c04ed0c1fb032c2aa73654d8e8c5023a7df64a53f39190ada629902", size = 194582, upload-time = "2025-10-12T14:55:20.501Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/82/77/7b3966d0b9d1d31a36ddf1746926a11dface89a83409bf1483f0237aa758/idna-3.15.tar.gz", hash = "sha256:ca962446ea538f7092a95e057da437618e886f4d349216d2b1e294abfdb65fdc", size = 199245, upload-time = "2026-05-12T22:45:57.011Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0e/61/66938bbb5fc52dbdf84594873d5b51fb1f7c7794e9c0f5bd885f30bc507b/idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea", size = 71008, upload-time = "2025-10-12T14:55:18.883Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/23/408243171aa9aaba178d3e2559159c24c1171a641aa83b67bdd3394ead8e/idna-3.15-py3-none-any.whl", hash = "sha256:048adeaf8c2d788c40fee287673ccaa74c24ffd8dcf09ffa555a2fbb59f10ac8", size = 72340, upload-time = "2026-05-12T22:45:55.733Z" },
 ]
 
 [[package]]

From 9466d1398eff8815bcd61bb4e3cac2927ef3f9bf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:15 -0300
Subject: [PATCH 031/345] chore(deps): bump langchain-classic from 1.0.1 to
 1.0.7 (#800)

Bumps [langchain-classic](https://github.com/langchain-ai/langchain) from 1.0.1 to 1.0.7.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-classic==1.0.1...langchain-classic==1.0.7)

---
updated-dependencies:
- dependency-name: langchain-classic
  dependency-version: 1.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/uv.lock b/uv.lock
index ff393192..e3d2ab3e 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1405,7 +1405,7 @@ wheels = [
 
 [[package]]
 name = "langchain-classic"
-version = "1.0.1"
+version = "1.0.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
@@ -1416,9 +1416,9 @@ dependencies = [
     { name = "requests" },
     { name = "sqlalchemy" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/7c/4b/bd03518418ece4c13192a504449b58c28afee915dc4a6f4b02622458cb1b/langchain_classic-1.0.1.tar.gz", hash = "sha256:40a499684df36b005a1213735dc7f8dca8f5eb67978d6ec763e7a49780864fdc", size = 10516020, upload-time = "2025-12-23T22:55:22.615Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/9b/78/84b5065816f348c39fefa4316f209f0135e8410216340a953bec17d9e4e4/langchain_classic-1.0.7.tar.gz", hash = "sha256:debbec8065e69b95108d2652e8d5c44f4516e19aa8d716c02ed2211c3aee099d", size = 10554118, upload-time = "2026-05-07T15:46:56.8Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/83/0f/eab87f017d7fe28e8c11fff614f4cdbfae32baadb77d0f79e9f922af1df2/langchain_classic-1.0.1-py3-none-any.whl", hash = "sha256:131d83a02bb80044c68fedc1ab4ae885d5b8f8c2c742d8ab9e7534ad9cda8e80", size = 1040666, upload-time = "2025-12-23T22:55:21.025Z" },
+    { url = "https://files.pythonhosted.org/packages/f5/78/2d9980d028ff0523eea503a77c200e2ff252a3a75eb6e7842bcf5f9c979b/langchain_classic-1.0.7-py3-none-any.whl", hash = "sha256:d9d9be38f7aa534ed0259c2410432e34a1f80b1d491e686749bb55af56479be3", size = 1041386, upload-time = "2026-05-07T15:46:54.845Z" },
 ]
 
 [[package]]
@@ -1446,10 +1446,11 @@ wheels = [
 
 [[package]]
 name = "langchain-core"
-version = "1.2.31"
+version = "1.4.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jsonpatch" },
+    { name = "langchain-protocol" },
     { name = "langsmith" },
     { name = "packaging" },
     { name = "pydantic" },
@@ -1458,9 +1459,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "uuid-utils" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a1/5a/7523ff55668a233beef7e909e8e2074a1cc3b620e0bbf0a4ec5f38549b3b/langchain_core-1.2.31.tar.gz", hash = "sha256:aad3ecc9e4dce2dd2bb79526c81b92e5322fd81db7834a031cb80359f2e3ebaa", size = 850756, upload-time = "2026-04-16T13:26:29.241Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/59/de/679a53472c25860837e32c0442c962fa86e95317a36460e2c9d5c91b17c2/langchain_core-1.4.0.tar.gz", hash = "sha256:1dc341eed802ed9c117c0df3923c991e5e9e226571e5725c194eeb5bd93d1a7f", size = 920260, upload-time = "2026-05-11T18:42:35.919Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/52/02/668ddf4f1cf963ad691bdbea672a85244e6271eb0a4acfaf662bbd94a3b1/langchain_core-1.2.31-py3-none-any.whl", hash = "sha256:c407193edb99311cc36ec3e4d3667a065bbc4d7d72fbb6e368538b9b134d4033", size = 513264, upload-time = "2026-04-16T13:26:27.566Z" },
+    { url = "https://files.pythonhosted.org/packages/0f/1a/86c38c27b81913a1c6c12448cab55defb5a1097c7dc9a4cea83f55477a2d/langchain_core-1.4.0-py3-none-any.whl", hash = "sha256:23cbbdb46e38ddd1dd5247e6167e96013eae74bea4c5949c550809970a9e565c", size = 548120, upload-time = "2026-05-11T18:42:33.992Z" },
 ]
 
 [[package]]
@@ -1547,6 +1548,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/0b/fa/8c33befbc0cf81b21371cc1dab4e7bf94a80b8116194f263a5021ec02529/langchain_openai-1.1.14-py3-none-any.whl", hash = "sha256:cb525d2011f9813fc15a7dcfd4bca5b87badcbcb2c113a7fbe45d1b8a1bbb69c", size = 88705, upload-time = "2026-04-16T14:55:23.159Z" },
 ]
 
+[[package]]
+name = "langchain-protocol"
+version = "0.0.15"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/4f/24/9777489d6fbbee64af0c8f96d4f840239c408cf694f3394672807dafc490/langchain_protocol-0.0.15.tar.gz", hash = "sha256:9ab2d11ee73944754f10e037e717098d3a6796f0e58afa9cadda6154e7655ade", size = 5862, upload-time = "2026-05-01T22:30:04.748Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/1d/7a/9c97a7b9cbe4c5dc6a44cdb1545450c28f0c8ce89b9c1f0ee7fbad896263/langchain_protocol-0.0.15-py3-none-any.whl", hash = "sha256:461eb794358f83d5e42635a5797799ffec7b4702314e34edf73ac21e75d3ef79", size = 6982, upload-time = "2026-05-01T22:30:03.877Z" },
+]
+
 [[package]]
 name = "langchain-text-splitters"
 version = "1.1.2"

From f85945863e1ceb8695e1304b28e2a950d46749d7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:25 -0300
Subject: [PATCH 032/345] chore(deps): bump langsmith from 0.7.31 to 0.8.0
 (#799)

Bumps [langsmith](https://github.com/langchain-ai/langsmith-sdk) from 0.7.31 to 0.8.0.
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.31...v0.8.0)

---
updated-dependencies:
- dependency-name: langsmith
  dependency-version: 0.8.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index e3d2ab3e..7cd78a49 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1653,7 +1653,7 @@ wheels = [
 
 [[package]]
 name = "langsmith"
-version = "0.7.31"
+version = "0.8.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
@@ -1666,9 +1666,9 @@ dependencies = [
     { name = "xxhash" },
     { name = "zstandard" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/e6/11/696019490992db5c87774dc20515529ef42a01e1d770fb754ed6d9b12fb0/langsmith-0.7.31.tar.gz", hash = "sha256:331ee4f7c26bb5be4022b9859b7d7b122cbf8c9d01d9f530114c1914b0349ffb", size = 1178480, upload-time = "2026-04-14T17:55:41.242Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a8/64/95f1f013531395f4e8ed73caeee780f65c7c58fe028cb543f8937b45611b/langsmith-0.8.0.tar.gz", hash = "sha256:59fe5b2a56bbbe14a08aa76691f84b49e8675dd21e11b57d80c6db8c08bac2e3", size = 4432996, upload-time = "2026-04-30T22:13:07.341Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1d/a1/a013cf458c301cda86a213dd153ce0a01c93f1ab5833f951e6a44c9763ce/langsmith-0.7.31-py3-none-any.whl", hash = "sha256:0291d49203f6e80dda011af1afda61eb0595a4d697adb684590a8805e1d61fb6", size = 373276, upload-time = "2026-04-14T17:55:39.677Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/e1/a4be2e696c9473bb53298df398237da5674704d781d4b748ed35aeef592a/langsmith-0.8.0-py3-none-any.whl", hash = "sha256:12cc4bc5622b835a6d841964d6034df3617bdb912dae0c1381fd0a68a9b3a3ef", size = 393268, upload-time = "2026-04-30T22:13:05.56Z" },
 ]
 
 [[package]]

From d7a80aa37894d60d52859b77474009990f559a9d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:31 -0300
Subject: [PATCH 033/345] chore(deps): bump authlib from 1.6.11 to 1.6.12
 (#798)

Bumps [authlib](https://github.com/authlib/authlib) from 1.6.11 to 1.6.12.
- [Release notes](https://github.com/authlib/authlib/releases)
- [Changelog](https://github.com/authlib/authlib/blob/1.6.12/docs/changelog.rst)
- [Commits](https://github.com/authlib/authlib/compare/v1.6.11...1.6.12)

---
updated-dependencies:
- dependency-name: authlib
  dependency-version: 1.6.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 7cd78a49..8ee58bd2 100644
--- a/uv.lock
+++ b/uv.lock
@@ -203,14 +203,14 @@ wheels = [
 
 [[package]]
 name = "authlib"
-version = "1.6.11"
+version = "1.6.12"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cryptography" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/28/10/b325d58ffe86815b399334a101e63bc6fa4e1953921cb23703b48a0a0220/authlib-1.6.11.tar.gz", hash = "sha256:64db35b9b01aeccb4715a6c9a6613a06f2bd7be2ab9d2eb89edd1dfc7580a38f", size = 165359, upload-time = "2026-04-16T07:22:50.279Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d3/30/6691fdc63b35f54a5a65e04fa1e59d827f4d4e8f4a39678ba7d3088ce0c8/authlib-1.6.12.tar.gz", hash = "sha256:0656d8482f28fc8221929d5f35b2bde5d13e10555ebc06b4561b0d622e83b1bd", size = 165368, upload-time = "2026-05-04T08:11:31.826Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/57/2f/55fca558f925a51db046e5b929deb317ddb05afed74b22d89f4eca578980/authlib-1.6.11-py2.py3-none-any.whl", hash = "sha256:c8687a9a26451c51a34a06fa17bb97cb15bba46a6a626755e2d7f50da8bff3e3", size = 244469, upload-time = "2026-04-16T07:22:48.413Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/51/9b0b5cd4cf683a02db937a6f9bbebcdc9c56558a7bb3763ce7d3512103c3/authlib-1.6.12-py2.py3-none-any.whl", hash = "sha256:e9229ad7fde610b139dd12f5edbe97eab9ee78bfb85691247e767727850b99ab", size = 244473, upload-time = "2026-05-04T08:11:30.354Z" },
 ]
 
 [[package]]

From 06206920f70dea40c5c044977bf14ab5c6539f18 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:37 -0300
Subject: [PATCH 034/345] chore(deps): bump next from 16.2.3 to 16.2.6 in
 /frontend (#797)

Bumps [next](https://github.com/vercel/next.js) from 16.2.3 to 16.2.6.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.2.3...v16.2.6)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 80 +++++++++++++++++++-------------------
 frontend/package.json      |  2 +-
 2 files changed, 41 insertions(+), 41 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 9035ff7c..5ec5c0c0 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -37,7 +37,7 @@
         "i18next": "^25.7.3",
         "i18next-browser-languagedetector": "^8.2.0",
         "lucide-react": "^0.525.0",
-        "next": "^16.2.3",
+        "next": "^16.2.6",
         "next-themes": "^0.4.6",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
@@ -1829,9 +1829,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.3.tgz",
-      "integrity": "sha512-ZWXyj4uNu4GCWQw9cjRxWlbD+33mcDszIo9iQxFnBX3Wmgq9ulaSJcl6VhuWx5pCWqqD+9W6Wfz7N0lM5lYPMA==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.6.tgz",
+      "integrity": "sha512-gd8HoHN4ufj73WmR3JmVolrpJR47ILK6LouP5xElPglaVxir6e1a7VzvTvDWkOoPXT9rkkTzyCxBu4yeZfZwcw==",
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
@@ -1844,9 +1844,9 @@
       }
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.3.tgz",
-      "integrity": "sha512-u37KDKTKQ+OQLvY+z7SNXixwo4Q2/IAJFDzU1fYe66IbCE51aDSAzkNDkWmLN0yjTUh4BKBd+hb69jYn6qqqSg==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.6.tgz",
+      "integrity": "sha512-ZJGkkcNfYgrrMkqOdZ7zoLa1TOy0qpcMfk/z4Mh/FKUz40gVO+HNQWqmLxf67Z5WB64DRp0dhEbyHfel+6sJUg==",
       "cpu": [
         "arm64"
       ],
@@ -1860,9 +1860,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.3.tgz",
-      "integrity": "sha512-gHjL/qy6Q6CG3176FWbAKyKh9IfntKZTB3RY/YOJdDFpHGsUDXVH38U4mMNpHVGXmeYW4wj22dMp1lTfmu/bTQ==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.6.tgz",
+      "integrity": "sha512-v/YLBHIY132Ced3puBJ7YJKw1lqsCrgcNo2aRJlCEyQrrCeRJlvGlnmxhPxNQI3KE3N1DN5r9TPNPvka3nq5RQ==",
       "cpu": [
         "x64"
       ],
@@ -1876,9 +1876,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.3.tgz",
-      "integrity": "sha512-U6vtblPtU/P14Y/b/n9ZY0GOxbbIhTFuaFR7F4/uMBidCi2nSdaOFhA0Go81L61Zd6527+yvuX44T4ksnf8T+Q==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.6.tgz",
+      "integrity": "sha512-RPOvqlYBbcQjkz9VQQDZ2T2bARIjXZV1KFlt+V2Mr6SW/e4I9fcKsaA0hdyf2FHoTlsV2xnBd5Y912rP/1Ce6w==",
       "cpu": [
         "arm64"
       ],
@@ -1892,9 +1892,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.3.tgz",
-      "integrity": "sha512-/YV0LgjHUmfhQpn9bVoGc4x4nan64pkhWR5wyEV8yCOfwwrH630KpvRg86olQHTwHIn1z59uh6JwKvHq1h4QEw==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.6.tgz",
+      "integrity": "sha512-URUTu1+dMkxJsPFgm+OeEvq9wf5sujw0EvgYy80TDGHTSLTnIHeqb0Eu8A3sC95IRgjejQL+kC4mw+4yPxiAXA==",
       "cpu": [
         "arm64"
       ],
@@ -1908,9 +1908,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.3.tgz",
-      "integrity": "sha512-/HiWEcp+WMZ7VajuiMEFGZ6cg0+aYZPqCJD3YJEfpVWQsKYSjXQG06vJP6F1rdA03COD9Fef4aODs3YxKx+RDQ==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.6.tgz",
+      "integrity": "sha512-DOj182mPV8G3UkrayLoREM5YEYI+Dk5wv7Ox9xl1fFibAELEsFD0lDPfHIeILlutMMfdyhlzYPELG3peuKaurw==",
       "cpu": [
         "x64"
       ],
@@ -1924,9 +1924,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.3.tgz",
-      "integrity": "sha512-Kt44hGJfZSefebhk/7nIdivoDr3Ugp5+oNz9VvF3GUtfxutucUIHfIO0ZYO8QlOPDQloUVQn4NVC/9JvHRk9hw==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.6.tgz",
+      "integrity": "sha512-HKQ5SP/V/ub73UvF7n/zeJlxk2kLmtL7Wzrg4WfmkjmNos5onJ2tKu7yZOPdL18A6Svfn3max29ym+ry7NkK4g==",
       "cpu": [
         "x64"
       ],
@@ -1940,9 +1940,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.3.tgz",
-      "integrity": "sha512-O2NZ9ie3Tq6xj5Z5CSwBT3+aWAMW2PIZ4egUi9MaWLkwaehgtB7YZjPm+UpcNpKOme0IQuqDcor7BsW6QBiQBw==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.6.tgz",
+      "integrity": "sha512-LZXpTlPyS5v7HhSmnvsLGP3iIYgYOBnc8r8ArlT55sGHV89bR2HlDdBjWQ+PY6SJMmk8TuVGFuxalnP3k/0Dwg==",
       "cpu": [
         "arm64"
       ],
@@ -1956,9 +1956,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.3.tgz",
-      "integrity": "sha512-Ibm29/GgB/ab5n7XKqlStkm54qqZE8v2FnijUPBgrd67FWrac45o/RsNlaOWjme/B5UqeWt/8KM4aWBwA1D2Kw==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.6.tgz",
+      "integrity": "sha512-F0+4i0h9J6C4eE3EAPWsoCk7UW/dbzOjyzxY0qnDUOYFu6FFmdZ6l97/XdV3/Nz3VYyO7UWjyEJUXkGqcoXfMA==",
       "cpu": [
         "x64"
       ],
@@ -9612,12 +9612,12 @@
       "dev": true
     },
     "node_modules/next": {
-      "version": "16.2.3",
-      "resolved": "https://registry.npmjs.org/next/-/next-16.2.3.tgz",
-      "integrity": "sha512-9V3zV4oZFza3PVev5/poB9g0dEafVcgNyQ8eTRop8GvxZjV2G15FC5ARuG1eFD42QgeYkzJBJzHghNP8Ad9xtA==",
+      "version": "16.2.6",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.2.6.tgz",
+      "integrity": "sha512-qOVgKJg1+At15NpeUP+eJgCHvTCgXsogweq87Ri/Ix7PkqQHg4sdaXmSFqKlgaIXE4kW0g25LE68W87UANlHtw==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "16.2.3",
+        "@next/env": "16.2.6",
         "@swc/helpers": "0.5.15",
         "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
@@ -9631,14 +9631,14 @@
         "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "16.2.3",
-        "@next/swc-darwin-x64": "16.2.3",
-        "@next/swc-linux-arm64-gnu": "16.2.3",
-        "@next/swc-linux-arm64-musl": "16.2.3",
-        "@next/swc-linux-x64-gnu": "16.2.3",
-        "@next/swc-linux-x64-musl": "16.2.3",
-        "@next/swc-win32-arm64-msvc": "16.2.3",
-        "@next/swc-win32-x64-msvc": "16.2.3",
+        "@next/swc-darwin-arm64": "16.2.6",
+        "@next/swc-darwin-x64": "16.2.6",
+        "@next/swc-linux-arm64-gnu": "16.2.6",
+        "@next/swc-linux-arm64-musl": "16.2.6",
+        "@next/swc-linux-x64-gnu": "16.2.6",
+        "@next/swc-linux-x64-musl": "16.2.6",
+        "@next/swc-win32-arm64-msvc": "16.2.6",
+        "@next/swc-win32-x64-msvc": "16.2.6",
         "sharp": "^0.34.5"
       },
       "peerDependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index fcea7970..ab000f5e 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -41,7 +41,7 @@
     "i18next": "^25.7.3",
     "i18next-browser-languagedetector": "^8.2.0",
     "lucide-react": "^0.525.0",
-    "next": "^16.2.3",
+    "next": "^16.2.6",
     "next-themes": "^0.4.6",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",

From 8469b29d5eda9fc4ab08041a894d56ceeb779098 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:47 -0300
Subject: [PATCH 035/345] chore(deps): bump urllib3 from 2.6.3 to 2.7.0 (#795)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.7.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 8ee58bd2..5cdd0bfa 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3585,11 +3585,11 @@ wheels = [
 
 [[package]]
 name = "urllib3"
-version = "2.6.3"
+version = "2.7.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c7/24/5f1b3bdffd70275f6661c76461e25f024d5a38a46f04aaca912426a2b1d3/urllib3-2.6.3.tar.gz", hash = "sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed", size = 435556, upload-time = "2026-01-07T16:24:43.925Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/39/08/aaaad47bc4e9dc8c725e68f9d04865dbcb2052843ff09c97b08904852d84/urllib3-2.6.3-py3-none-any.whl", hash = "sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4", size = 131584, upload-time = "2026-01-07T16:24:42.685Z" },
+    { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
 ]
 
 [[package]]

From 71f651e002905e21b01780fad6e9e76b4e6ed663 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:16:58 -0300
Subject: [PATCH 036/345] chore(deps): bump python-multipart from 0.0.26 to
 0.0.27 (#789)

Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.26 to 0.0.27.
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.26...0.0.27)

---
updated-dependencies:
- dependency-name: python-multipart
  dependency-version: 0.0.27
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 5cdd0bfa..53fcaa28 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2859,11 +2859,11 @@ wheels = [
 
 [[package]]
 name = "python-multipart"
-version = "0.0.26"
+version = "0.0.27"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/88/71/b145a380824a960ebd60e1014256dbb7d2253f2316ff2d73dfd8928ec2c3/python_multipart-0.0.26.tar.gz", hash = "sha256:08fadc45918cd615e26846437f50c5d6d23304da32c341f289a617127b081f17", size = 43501, upload-time = "2026-04-10T14:09:59.473Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/69/9b/f23807317a113dc36e74e75eb265a02dd1a4d9082abc3c1064acd22997c4/python_multipart-0.0.27.tar.gz", hash = "sha256:9870a6a8c5a20a5bf4f07c017bd1489006ff8836cff097b6933355ee2b49b602", size = 44043, upload-time = "2026-04-27T10:51:26.649Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/22/f1925cdda983ab66fc8ec6ec8014b959262747e58bdca26a4e3d1da29d56/python_multipart-0.0.26-py3-none-any.whl", hash = "sha256:c0b169f8c4484c13b0dcf2ef0ec3a4adb255c4b7d18d8e420477d2b1dd03f185", size = 28847, upload-time = "2026-04-10T14:09:58.131Z" },
+    { url = "https://files.pythonhosted.org/packages/99/78/4126abcbdbd3c559d43e0db7f7b9173fc6befe45d39a2856cc0b8ec2a5a6/python_multipart-0.0.27-py3-none-any.whl", hash = "sha256:6fccfad17a27334bd0193681b369f476eda3409f17381a2d65aa7df3f7275645", size = 29254, upload-time = "2026-04-27T10:51:24.997Z" },
 ]
 
 [[package]]

From fcf95e6794e6913eef8cb14fbc3b5b107eba0bad Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:17:05 -0300
Subject: [PATCH 037/345] chore(deps): bump axios from 1.15.0 to 1.15.2 in
 /frontend (#788)

Bumps [axios](https://github.com/axios/axios) from 1.15.0 to 1.15.2.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.15.0...v1.15.2)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 8 ++++----
 frontend/package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 5ec5c0c0..586df766 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -29,7 +29,7 @@
         "@tailwindcss/typography": "^0.5.16",
         "@tanstack/react-query": "^5.83.0",
         "@uiw/react-md-editor": "^4.0.8",
-        "axios": "^1.15.0",
+        "axios": "^1.15.2",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -5365,9 +5365,9 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.0.tgz",
-      "integrity": "sha512-wWyJDlAatxk30ZJer+GeCWS209sA42X+N5jU2jy6oHTp7ufw8uzUTVFBX9+wTfAlhiJXGS0Bq7X6efruWjuK9Q==",
+      "version": "1.15.2",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz",
+      "integrity": "sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.11",
diff --git a/frontend/package.json b/frontend/package.json
index ab000f5e..bd3ecc9b 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -33,7 +33,7 @@
     "@tailwindcss/typography": "^0.5.16",
     "@tanstack/react-query": "^5.83.0",
     "@uiw/react-md-editor": "^4.0.8",
-    "axios": "^1.15.0",
+    "axios": "^1.15.2",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",

From 8ae58a23cf5006c7f3a2e731910fd3f274f945d5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:17:11 -0300
Subject: [PATCH 038/345] chore(deps): bump pip from 26.0 to 26.1 (#785)

Bumps [pip](https://github.com/pypa/pip) from 26.0 to 26.1.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](https://github.com/pypa/pip/compare/26.0...26.1)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '26.1'
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 53fcaa28..f3f85119 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2422,11 +2422,11 @@ wheels = [
 
 [[package]]
 name = "pip"
-version = "26.0"
+version = "26.1"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/44/c2/65686a7783a7c27a329706207147e82f23c41221ee9ae33128fc331670a0/pip-26.0.tar.gz", hash = "sha256:3ce220a0a17915972fbf1ab451baae1521c4539e778b28127efa79b974aff0fa", size = 1812654, upload-time = "2026-01-31T01:40:54.361Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/73/7e/d2b04004e1068ad4fdfa2f227b839b5d03e602e47cdbbf49de71137c9546/pip-26.1.tar.gz", hash = "sha256:81e13ebcca3ffa8cc85e4deff5c27e1ee26dea0aa7fc2f294a073ac208806ff3", size = 1840316, upload-time = "2026-04-26T21:00:05.406Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/69/00/5ac7aa77688ec4d34148b423d34dc0c9bc4febe0d872a9a1ad9860b2f6f1/pip-26.0-py3-none-any.whl", hash = "sha256:98436feffb9e31bc9339cf369fd55d3331b1580b6a6f1173bacacddcf9c34754", size = 1787564, upload-time = "2026-01-31T01:40:52.252Z" },
+    { url = "https://files.pythonhosted.org/packages/70/7a/be4bd8bcbb24ea475856dd68159d78b03b2bb53dae369f69c9606b8888f5/pip-26.1-py3-none-any.whl", hash = "sha256:4e8486d821d814b77319acb7b9e8bf5a4ee7590a643e7cb21029f209be8573c1", size = 1812804, upload-time = "2026-04-26T21:00:03.194Z" },
 ]
 
 [[package]]

From 42321b72231ae4d5f12f0f50a5977a1f665e72f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:17:19 -0300
Subject: [PATCH 039/345] chore(deps): bump lxml from 6.0.2 to 6.1.0 (#774)

Bumps [lxml](https://github.com/lxml/lxml) from 6.0.2 to 6.1.0.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.0.2...lxml-6.1.0)

---
updated-dependencies:
- dependency-name: lxml
  dependency-version: 6.1.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 84 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 42 insertions(+), 42 deletions(-)

diff --git a/uv.lock b/uv.lock
index f3f85119..9dd899d2 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1716,50 +1716,50 @@ wheels = [
 
 [[package]]
 name = "lxml"
-version = "6.0.2"
+version = "6.1.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/aa/88/262177de60548e5a2bfc46ad28232c9e9cbde697bd94132aeb80364675cb/lxml-6.0.2.tar.gz", hash = "sha256:cd79f3367bd74b317dda655dc8fcfa304d9eb6e4fb06b7168c5cf27f96e0cd62", size = 4073426, upload-time = "2025-09-22T04:04:59.287Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/28/30/9abc9e34c657c33834eaf6cd02124c61bdf5944d802aa48e69be8da3585d/lxml-6.1.0.tar.gz", hash = "sha256:bfd57d8008c4965709a919c3e9a98f76c2c7cb319086b3d26858250620023b13", size = 4197006, upload-time = "2026-04-18T04:32:51.613Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/77/d5/becbe1e2569b474a23f0c672ead8a29ac50b2dc1d5b9de184831bda8d14c/lxml-6.0.2-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:13e35cbc684aadf05d8711a5d1b5857c92e5e580efa9a0d2be197199c8def607", size = 8634365, upload-time = "2025-09-22T04:00:45.672Z" },
-    { url = "https://files.pythonhosted.org/packages/28/66/1ced58f12e804644426b85d0bb8a4478ca77bc1761455da310505f1a3526/lxml-6.0.2-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:3b1675e096e17c6fe9c0e8c81434f5736c0739ff9ac6123c87c2d452f48fc938", size = 4650793, upload-time = "2025-09-22T04:00:47.783Z" },
-    { url = "https://files.pythonhosted.org/packages/11/84/549098ffea39dfd167e3f174b4ce983d0eed61f9d8d25b7bf2a57c3247fc/lxml-6.0.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:8ac6e5811ae2870953390452e3476694196f98d447573234592d30488147404d", size = 4944362, upload-time = "2025-09-22T04:00:49.845Z" },
-    { url = "https://files.pythonhosted.org/packages/ac/bd/f207f16abf9749d2037453d56b643a7471d8fde855a231a12d1e095c4f01/lxml-6.0.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:5aa0fc67ae19d7a64c3fe725dc9a1bb11f80e01f78289d05c6f62545affec438", size = 5083152, upload-time = "2025-09-22T04:00:51.709Z" },
-    { url = "https://files.pythonhosted.org/packages/15/ae/bd813e87d8941d52ad5b65071b1affb48da01c4ed3c9c99e40abb266fbff/lxml-6.0.2-cp311-cp311-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:de496365750cc472b4e7902a485d3f152ecf57bd3ba03ddd5578ed8ceb4c5964", size = 5023539, upload-time = "2025-09-22T04:00:53.593Z" },
-    { url = "https://files.pythonhosted.org/packages/02/cd/9bfef16bd1d874fbe0cb51afb00329540f30a3283beb9f0780adbb7eec03/lxml-6.0.2-cp311-cp311-manylinux_2_26_i686.manylinux_2_28_i686.whl", hash = "sha256:200069a593c5e40b8f6fc0d84d86d970ba43138c3e68619ffa234bc9bb806a4d", size = 5344853, upload-time = "2025-09-22T04:00:55.524Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/89/ea8f91594bc5dbb879734d35a6f2b0ad50605d7fb419de2b63d4211765cc/lxml-6.0.2-cp311-cp311-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:7d2de809c2ee3b888b59f995625385f74629707c9355e0ff856445cdcae682b7", size = 5225133, upload-time = "2025-09-22T04:00:57.269Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/37/9c735274f5dbec726b2db99b98a43950395ba3d4a1043083dba2ad814170/lxml-6.0.2-cp311-cp311-manylinux_2_31_armv7l.whl", hash = "sha256:b2c3da8d93cf5db60e8858c17684c47d01fee6405e554fb55018dd85fc23b178", size = 4677944, upload-time = "2025-09-22T04:00:59.052Z" },
-    { url = "https://files.pythonhosted.org/packages/20/28/7dfe1ba3475d8bfca3878365075abe002e05d40dfaaeb7ec01b4c587d533/lxml-6.0.2-cp311-cp311-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:442de7530296ef5e188373a1ea5789a46ce90c4847e597856570439621d9c553", size = 5284535, upload-time = "2025-09-22T04:01:01.335Z" },
-    { url = "https://files.pythonhosted.org/packages/e7/cf/5f14bc0de763498fc29510e3532bf2b4b3a1c1d5d0dff2e900c16ba021ef/lxml-6.0.2-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:2593c77efde7bfea7f6389f1ab249b15ed4aa5bc5cb5131faa3b843c429fbedb", size = 5067343, upload-time = "2025-09-22T04:01:03.13Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/b0/bb8275ab5472f32b28cfbbcc6db7c9d092482d3439ca279d8d6fa02f7025/lxml-6.0.2-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:3e3cb08855967a20f553ff32d147e14329b3ae70ced6edc2f282b94afbc74b2a", size = 4725419, upload-time = "2025-09-22T04:01:05.013Z" },
-    { url = "https://files.pythonhosted.org/packages/25/4c/7c222753bc72edca3b99dbadba1b064209bc8ed4ad448af990e60dcce462/lxml-6.0.2-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:2ed6c667fcbb8c19c6791bbf40b7268ef8ddf5a96940ba9404b9f9a304832f6c", size = 5275008, upload-time = "2025-09-22T04:01:07.327Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/8c/478a0dc6b6ed661451379447cdbec77c05741a75736d97e5b2b729687828/lxml-6.0.2-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:b8f18914faec94132e5b91e69d76a5c1d7b0c73e2489ea8929c4aaa10b76bbf7", size = 5248906, upload-time = "2025-09-22T04:01:09.452Z" },
-    { url = "https://files.pythonhosted.org/packages/2d/d9/5be3a6ab2784cdf9accb0703b65e1b64fcdd9311c9f007630c7db0cfcce1/lxml-6.0.2-cp311-cp311-win32.whl", hash = "sha256:6605c604e6daa9e0d7f0a2137bdc47a2e93b59c60a65466353e37f8272f47c46", size = 3610357, upload-time = "2025-09-22T04:01:11.102Z" },
-    { url = "https://files.pythonhosted.org/packages/e2/7d/ca6fb13349b473d5732fb0ee3eec8f6c80fc0688e76b7d79c1008481bf1f/lxml-6.0.2-cp311-cp311-win_amd64.whl", hash = "sha256:e5867f2651016a3afd8dd2c8238baa66f1e2802f44bc17e236f547ace6647078", size = 4036583, upload-time = "2025-09-22T04:01:12.766Z" },
-    { url = "https://files.pythonhosted.org/packages/ab/a2/51363b5ecd3eab46563645f3a2c3836a2fc67d01a1b87c5017040f39f567/lxml-6.0.2-cp311-cp311-win_arm64.whl", hash = "sha256:4197fb2534ee05fd3e7afaab5d8bfd6c2e186f65ea7f9cd6a82809c887bd1285", size = 3680591, upload-time = "2025-09-22T04:01:14.874Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/c8/8ff2bc6b920c84355146cd1ab7d181bc543b89241cfb1ebee824a7c81457/lxml-6.0.2-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:a59f5448ba2ceccd06995c95ea59a7674a10de0810f2ce90c9006f3cbc044456", size = 8661887, upload-time = "2025-09-22T04:01:17.265Z" },
-    { url = "https://files.pythonhosted.org/packages/37/6f/9aae1008083bb501ef63284220ce81638332f9ccbfa53765b2b7502203cf/lxml-6.0.2-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:e8113639f3296706fbac34a30813929e29247718e88173ad849f57ca59754924", size = 4667818, upload-time = "2025-09-22T04:01:19.688Z" },
-    { url = "https://files.pythonhosted.org/packages/f1/ca/31fb37f99f37f1536c133476674c10b577e409c0a624384147653e38baf2/lxml-6.0.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:a8bef9b9825fa8bc816a6e641bb67219489229ebc648be422af695f6e7a4fa7f", size = 4950807, upload-time = "2025-09-22T04:01:21.487Z" },
-    { url = "https://files.pythonhosted.org/packages/da/87/f6cb9442e4bada8aab5ae7e1046264f62fdbeaa6e3f6211b93f4c0dd97f1/lxml-6.0.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:65ea18d710fd14e0186c2f973dc60bb52039a275f82d3c44a0e42b43440ea534", size = 5109179, upload-time = "2025-09-22T04:01:23.32Z" },
-    { url = "https://files.pythonhosted.org/packages/c8/20/a7760713e65888db79bbae4f6146a6ae5c04e4a204a3c48896c408cd6ed2/lxml-6.0.2-cp312-cp312-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:c371aa98126a0d4c739ca93ceffa0fd7a5d732e3ac66a46e74339acd4d334564", size = 5023044, upload-time = "2025-09-22T04:01:25.118Z" },
-    { url = "https://files.pythonhosted.org/packages/a2/b0/7e64e0460fcb36471899f75831509098f3fd7cd02a3833ac517433cb4f8f/lxml-6.0.2-cp312-cp312-manylinux_2_26_i686.manylinux_2_28_i686.whl", hash = "sha256:700efd30c0fa1a3581d80a748157397559396090a51d306ea59a70020223d16f", size = 5359685, upload-time = "2025-09-22T04:01:27.398Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/e1/e5df362e9ca4e2f48ed6411bd4b3a0ae737cc842e96877f5bf9428055ab4/lxml-6.0.2-cp312-cp312-manylinux_2_26_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:c33e66d44fe60e72397b487ee92e01da0d09ba2d66df8eae42d77b6d06e5eba0", size = 5654127, upload-time = "2025-09-22T04:01:29.629Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/d1/232b3309a02d60f11e71857778bfcd4acbdb86c07db8260caf7d008b08f8/lxml-6.0.2-cp312-cp312-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:90a345bbeaf9d0587a3aaffb7006aa39ccb6ff0e96a57286c0cb2fd1520ea192", size = 5253958, upload-time = "2025-09-22T04:01:31.535Z" },
-    { url = "https://files.pythonhosted.org/packages/35/35/d955a070994725c4f7d80583a96cab9c107c57a125b20bb5f708fe941011/lxml-6.0.2-cp312-cp312-manylinux_2_31_armv7l.whl", hash = "sha256:064fdadaf7a21af3ed1dcaa106b854077fbeada827c18f72aec9346847cd65d0", size = 4711541, upload-time = "2025-09-22T04:01:33.801Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/be/667d17363b38a78c4bd63cfd4b4632029fd68d2c2dc81f25ce9eb5224dd5/lxml-6.0.2-cp312-cp312-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:fbc74f42c3525ac4ffa4b89cbdd00057b6196bcefe8bce794abd42d33a018092", size = 5267426, upload-time = "2025-09-22T04:01:35.639Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/47/62c70aa4a1c26569bc958c9ca86af2bb4e1f614e8c04fb2989833874f7ae/lxml-6.0.2-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:6ddff43f702905a4e32bc24f3f2e2edfe0f8fde3277d481bffb709a4cced7a1f", size = 5064917, upload-time = "2025-09-22T04:01:37.448Z" },
-    { url = "https://files.pythonhosted.org/packages/bd/55/6ceddaca353ebd0f1908ef712c597f8570cc9c58130dbb89903198e441fd/lxml-6.0.2-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:6da5185951d72e6f5352166e3da7b0dc27aa70bd1090b0eb3f7f7212b53f1bb8", size = 4788795, upload-time = "2025-09-22T04:01:39.165Z" },
-    { url = "https://files.pythonhosted.org/packages/cf/e8/fd63e15da5e3fd4c2146f8bbb3c14e94ab850589beab88e547b2dbce22e1/lxml-6.0.2-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:57a86e1ebb4020a38d295c04fc79603c7899e0df71588043eb218722dabc087f", size = 5676759, upload-time = "2025-09-22T04:01:41.506Z" },
-    { url = "https://files.pythonhosted.org/packages/76/47/b3ec58dc5c374697f5ba37412cd2728f427d056315d124dd4b61da381877/lxml-6.0.2-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:2047d8234fe735ab77802ce5f2297e410ff40f5238aec569ad7c8e163d7b19a6", size = 5255666, upload-time = "2025-09-22T04:01:43.363Z" },
-    { url = "https://files.pythonhosted.org/packages/19/93/03ba725df4c3d72afd9596eef4a37a837ce8e4806010569bedfcd2cb68fd/lxml-6.0.2-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6f91fd2b2ea15a6800c8e24418c0775a1694eefc011392da73bc6cef2623b322", size = 5277989, upload-time = "2025-09-22T04:01:45.215Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/80/c06de80bfce881d0ad738576f243911fccf992687ae09fd80b734712b39c/lxml-6.0.2-cp312-cp312-win32.whl", hash = "sha256:3ae2ce7d6fedfb3414a2b6c5e20b249c4c607f72cb8d2bb7cc9c6ec7c6f4e849", size = 3611456, upload-time = "2025-09-22T04:01:48.243Z" },
-    { url = "https://files.pythonhosted.org/packages/f7/d7/0cdfb6c3e30893463fb3d1e52bc5f5f99684a03c29a0b6b605cfae879cd5/lxml-6.0.2-cp312-cp312-win_amd64.whl", hash = "sha256:72c87e5ee4e58a8354fb9c7c84cbf95a1c8236c127a5d1b7683f04bed8361e1f", size = 4011793, upload-time = "2025-09-22T04:01:50.042Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/7b/93c73c67db235931527301ed3785f849c78991e2e34f3fd9a6663ffda4c5/lxml-6.0.2-cp312-cp312-win_arm64.whl", hash = "sha256:61cb10eeb95570153e0c0e554f58df92ecf5109f75eacad4a95baa709e26c3d6", size = 3672836, upload-time = "2025-09-22T04:01:52.145Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/11/29d08bc103a62c0eba8016e7ed5aeebbf1e4312e83b0b1648dd203b0e87d/lxml-6.0.2-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:1c06035eafa8404b5cf475bb37a9f6088b0aca288d4ccc9d69389750d5543700", size = 3949829, upload-time = "2025-09-22T04:04:45.608Z" },
-    { url = "https://files.pythonhosted.org/packages/12/b3/52ab9a3b31e5ab8238da241baa19eec44d2ab426532441ee607165aebb52/lxml-6.0.2-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:c7d13103045de1bdd6fe5d61802565f1a3537d70cd3abf596aa0af62761921ee", size = 4226277, upload-time = "2025-09-22T04:04:47.754Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/33/1eaf780c1baad88224611df13b1c2a9dfa460b526cacfe769103ff50d845/lxml-6.0.2-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:0a3c150a95fbe5ac91de323aa756219ef9cf7fde5a3f00e2281e30f33fa5fa4f", size = 4330433, upload-time = "2025-09-22T04:04:49.907Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/c1/27428a2ff348e994ab4f8777d3a0ad510b6b92d37718e5887d2da99952a2/lxml-6.0.2-pp311-pypy311_pp73-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:60fa43be34f78bebb27812ed90f1925ec99560b0fa1decdb7d12b84d857d31e9", size = 4272119, upload-time = "2025-09-22T04:04:51.801Z" },
-    { url = "https://files.pythonhosted.org/packages/f0/d0/3020fa12bcec4ab62f97aab026d57c2f0cfd480a558758d9ca233bb6a79d/lxml-6.0.2-pp311-pypy311_pp73-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:21c73b476d3cfe836be731225ec3421fa2f048d84f6df6a8e70433dff1376d5a", size = 4417314, upload-time = "2025-09-22T04:04:55.024Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/77/d7f491cbc05303ac6801651aabeb262d43f319288c1ea96c66b1d2692ff3/lxml-6.0.2-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:27220da5be049e936c3aca06f174e8827ca6445a4353a1995584311487fc4e3e", size = 3518768, upload-time = "2025-09-22T04:04:57.097Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/5d/3bccad330292946f97962df9d5f2d3ae129cce6e212732a781e856b91e07/lxml-6.1.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:cec05be8c876f92a5aa07b01d60bbb4d11cfbdd654cad0561c0d7b5c043a61b9", size = 8526232, upload-time = "2026-04-18T04:27:40.389Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/51/adc8826570a112f83bb4ddb3a2ab510bbc2ccd62c1b9fe1f34fae2d90b57/lxml-6.1.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:9c03e048b6ce8e77b09c734e931584894ecd58d08296804ca2d0b184c933ce50", size = 4595448, upload-time = "2026-04-18T04:27:44.208Z" },
+    { url = "https://files.pythonhosted.org/packages/54/84/5a9ec07cbe1d2334a6465f863b949a520d2699a755738986dcd3b6b89e3f/lxml-6.1.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:942454ff253da14218f972b23dc72fa4edf6c943f37edd19cd697618b626fac5", size = 4923771, upload-time = "2026-04-18T04:32:17.402Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/23/851cfa33b6b38adb628e45ad51fb27105fa34b2b3ba9d1d4aa7a9428dfe0/lxml-6.1.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:d036ee7b99d5148072ac7c9b847193decdfeac633db350363f7bce4fff108f0e", size = 5068101, upload-time = "2026-04-18T04:32:21.437Z" },
+    { url = "https://files.pythonhosted.org/packages/b0/38/41bf99c2023c6b79916ba057d83e9db21d642f473cac210201222882d38b/lxml-6.1.0-cp311-cp311-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:3ae5d8d5427f3cc317e7950f2da7ad276df0cfa37b8de2f5658959e618ea8512", size = 5002573, upload-time = "2026-04-18T04:32:25.373Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/20/053aa10bdc39747e1e923ce2d45413075e84f70a136045bb09e5eaca41d3/lxml-6.1.0-cp311-cp311-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:363e47283bde87051b821826e71dde47f107e08614e1aa312ba0c5711e77738c", size = 5202816, upload-time = "2026-04-18T04:32:29.393Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/da/bc710fad8bf04b93baee752c192eaa2210cd3a84f969d0be7830fea55802/lxml-6.1.0-cp311-cp311-manylinux_2_28_i686.whl", hash = "sha256:f504d861d9f2a8f94020130adac88d66de93841707a23a86244263d1e54682f5", size = 5329999, upload-time = "2026-04-18T04:32:34.019Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/cb/bf035dedbdf7fab49411aa52e4236f3445e98d38647d85419e6c0d2806b9/lxml-6.1.0-cp311-cp311-manylinux_2_31_armv7l.whl", hash = "sha256:23a5dc68e08ed13331d61815c08f260f46b4a60fdd1640bbeb82cf89a9d90289", size = 4659643, upload-time = "2026-04-18T04:32:37.932Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/4f/22be31f33727a5e4c7b01b0a874503026e50329b259d3587e0b923cf964b/lxml-6.1.0-cp311-cp311-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:f15401d8d3dbf239e23c818afc10c7207f7b95f9a307e092122b6f86dd43209a", size = 5265963, upload-time = "2026-04-18T04:32:41.881Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/2b/d44d0e5c79226017f4ab8c87a802ebe4f89f97e6585a8e4166dffcdd7b6e/lxml-6.1.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:fcf3da95e93349e0647d48d4b36a12783105bcc74cb0c416952f9988410846a3", size = 5045444, upload-time = "2026-04-18T04:32:44.512Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/c3/3f034fec1594c331a6dbf9491238fdcc9d66f68cc529e109ec75b97197e1/lxml-6.1.0-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:0d082495c5fcf426e425a6e28daaba1fcb6d8f854a4ff01effb1f1f381203eb9", size = 4712703, upload-time = "2026-04-18T04:32:47.16Z" },
+    { url = "https://files.pythonhosted.org/packages/12/16/0b83fccc158218aca75a7aa33e97441df737950734246b9fffa39301603d/lxml-6.1.0-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:e3c4f84b24a1fcba435157d111c4b755099c6ff00a3daee1ad281817de75ed11", size = 5252745, upload-time = "2026-04-18T04:32:50.427Z" },
+    { url = "https://files.pythonhosted.org/packages/dd/ee/12e6c1b39a77666c02eaa77f94a870aaf63c4ac3a497b2d52319448b01c6/lxml-6.1.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:976a6b39b1b13e8c354ad8d3f261f3a4ac6609518af91bdb5094760a08f132c4", size = 5226822, upload-time = "2026-04-18T04:32:53.437Z" },
+    { url = "https://files.pythonhosted.org/packages/34/20/c7852904858b4723af01d2fc14b5d38ff57cb92f01934a127ebd9a9e51aa/lxml-6.1.0-cp311-cp311-win32.whl", hash = "sha256:857efde87d365706590847b916baff69c0bc9252dc5af030e378c9800c0b10e3", size = 3594026, upload-time = "2026-04-18T04:27:31.903Z" },
+    { url = "https://files.pythonhosted.org/packages/02/05/d60c732b56da5085175c07c74b2df4e6d181b0c9a61e1691474f06ef4b39/lxml-6.1.0-cp311-cp311-win_amd64.whl", hash = "sha256:183bfb45a493081943be7ea2b5adfc2b611e1cf377cefa8b8a8be404f45ef9a7", size = 4025114, upload-time = "2026-04-18T04:27:34.077Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/df/c84dcc175fd690823436d15b41cb920cd5ba5e14cd8bfb00949d5903b320/lxml-6.1.0-cp311-cp311-win_arm64.whl", hash = "sha256:19f4164243fc206d12ed3d866e80e74f5bc3627966520da1a5f97e42c32a3f39", size = 3667742, upload-time = "2026-04-18T04:27:38.45Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/d4/9326838b59dc36dfae42eec9656b97520f9997eee1de47b8316aaeed169c/lxml-6.1.0-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:d2f17a16cd8751e8eb233a7e41aecdf8e511712e00088bf9be455f604cd0d28d", size = 8570663, upload-time = "2026-04-18T04:27:48.253Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/a4/053745ce1f8303ccbb788b86c0db3a91b973675cefc42566a188637b7c40/lxml-6.1.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:f0cea5b1d3e6e77d71bd2b9972eb2446221a69dc52bb0b9c3c6f6e5700592d93", size = 4624024, upload-time = "2026-04-18T04:27:52.594Z" },
+    { url = "https://files.pythonhosted.org/packages/90/97/a517944b20f8fd0932ad2109482bee4e29fe721416387a363306667941f6/lxml-6.1.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fc46da94826188ed45cb53bd8e3fc076ae22675aea2087843d4735627f867c6d", size = 4930895, upload-time = "2026-04-18T04:32:56.29Z" },
+    { url = "https://files.pythonhosted.org/packages/94/7c/e08a970727d556caa040a44773c7b7e3ad0f0d73dedc863543e9a8b931f2/lxml-6.1.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:9147d8e386ec3b82c3b15d88927f734f565b0aaadef7def562b853adca45784a", size = 5093820, upload-time = "2026-04-18T04:32:58.94Z" },
+    { url = "https://files.pythonhosted.org/packages/88/ee/2a5c2aa2c32016a226ca25d3e1056a8102ea6e1fe308bf50213586635400/lxml-6.1.0-cp312-cp312-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:5715e0e28736a070f3f34a7ccc09e2fdcba0e3060abbcf61a1a5718ff6d6b105", size = 5005790, upload-time = "2026-04-18T04:33:01.272Z" },
+    { url = "https://files.pythonhosted.org/packages/e3/38/a0db9be8f38ad6043ab9429487c128dd1d30f07956ef43040402f8da49e8/lxml-6.1.0-cp312-cp312-manylinux_2_26_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:4937460dc5df0cdd2f06a86c285c28afda06aefa3af949f9477d3e8df430c485", size = 5630827, upload-time = "2026-04-18T04:33:04.036Z" },
+    { url = "https://files.pythonhosted.org/packages/31/ba/3c13d3fc24b7cacf675f808a3a1baabf43a30d0cd24c98f94548e9aa58eb/lxml-6.1.0-cp312-cp312-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:bc783ee3147e60a25aa0445ea82b3e8aabb83b240f2b95d32cb75587ff781814", size = 5240445, upload-time = "2026-04-18T04:33:06.87Z" },
+    { url = "https://files.pythonhosted.org/packages/55/ba/eeef4ccba09b2212fe239f46c1692a98db1878e0872ae320756488878a94/lxml-6.1.0-cp312-cp312-manylinux_2_28_i686.whl", hash = "sha256:40d9189f80075f2e1f88db21ef815a2b17b28adf8e50aaf5c789bfe737027f32", size = 5350121, upload-time = "2026-04-18T04:33:09.365Z" },
+    { url = "https://files.pythonhosted.org/packages/7e/01/1da87c7b587c38d0cbe77a01aae3b9c1c49ed47d76918ef3db8fc151b1ca/lxml-6.1.0-cp312-cp312-manylinux_2_31_armv7l.whl", hash = "sha256:05b9b8787e35bec69e68daf4952b2e6dfcfb0db7ecf1a06f8cdfbbac4eb71aad", size = 4694949, upload-time = "2026-04-18T04:33:11.628Z" },
+    { url = "https://files.pythonhosted.org/packages/a1/88/7db0fe66d5aaf128443ee1623dec3db1576f3e4c17751ec0ef5866468590/lxml-6.1.0-cp312-cp312-manylinux_2_38_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:0f0f08beb0182e3e9a86fae124b3c47a7b41b7b69b225e1377db983802404e54", size = 5243901, upload-time = "2026-04-18T04:33:13.95Z" },
+    { url = "https://files.pythonhosted.org/packages/00/a8/1346726af7d1f6fca1f11223ba34001462b0a3660416986d37641708d57c/lxml-6.1.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:73becf6d8c81d4c76b1014dbd3584cb26d904492dcf73ca85dc8bff08dcd6d2d", size = 5048054, upload-time = "2026-04-18T04:33:16.965Z" },
+    { url = "https://files.pythonhosted.org/packages/2e/b7/85057012f035d1a0c87e02f8c723ca3c3e6e0728bcf4cb62080b21b1c1e3/lxml-6.1.0-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:1ae225f66e5938f4fa29d37e009a3bb3b13032ac57eb4eb42afa44f6e4054e69", size = 4777324, upload-time = "2026-04-18T04:33:19.832Z" },
+    { url = "https://files.pythonhosted.org/packages/75/6c/ad2f94a91073ef570f33718040e8e160d5fb93331cf1ab3ca1323f939e2d/lxml-6.1.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:690022c7fae793b0489aa68a658822cea83e0d5933781811cabbf5ea3bcfe73d", size = 5645702, upload-time = "2026-04-18T04:33:22.436Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/89/0bb6c0bd549c19004c60eea9dc554dd78fd647b72314ef25d460e0d208c6/lxml-6.1.0-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:63aeafc26aac0be8aff14af7871249e87ea1319be92090bfd632ec68e03b16a5", size = 5232901, upload-time = "2026-04-18T04:33:26.21Z" },
+    { url = "https://files.pythonhosted.org/packages/a1/d9/d609a11fb567da9399f525193e2b49847b5a409cdebe737f06a8b7126bdc/lxml-6.1.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:264c605ab9c0e4aa1a679636f4582c4d3313700009fac3ec9c3412ed0d8f3e1d", size = 5261333, upload-time = "2026-04-18T04:33:28.984Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/3a/ac3f99ec8ac93089e7dd556f279e0d14c24de0a74a507e143a2e4b496e7c/lxml-6.1.0-cp312-cp312-win32.whl", hash = "sha256:56971379bc5ee8037c5a0f09fa88f66cdb7d37c3e38af3e45cf539f41131ac1f", size = 3596289, upload-time = "2026-04-18T04:27:42.819Z" },
+    { url = "https://files.pythonhosted.org/packages/f2/a7/0a915557538593cb1bbeedcd40e13c7a261822c26fecbbdb71dad0c2f540/lxml-6.1.0-cp312-cp312-win_amd64.whl", hash = "sha256:bba078de0031c219e5dd06cf3e6bf8fb8e6e64a77819b358f53bb132e3e03366", size = 3997059, upload-time = "2026-04-18T04:27:46.764Z" },
+    { url = "https://files.pythonhosted.org/packages/92/96/a5dc078cf0126fbfbc35611d77ecd5da80054b5893e28fb213a5613b9e1d/lxml-6.1.0-cp312-cp312-win_arm64.whl", hash = "sha256:c3592631e652afa34999a088f98ba7dfc7d6aff0d535c410bea77a71743f3819", size = 3659552, upload-time = "2026-04-18T04:27:51.133Z" },
+    { url = "https://files.pythonhosted.org/packages/f2/88/55143966481409b1740a3ac669e611055f49efd68087a5ce41582325db3e/lxml-6.1.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:546b66c0dd1bb8d9fa89d7123e5fa19a8aff3a1f2141eb22df96112afb17b842", size = 3930134, upload-time = "2026-04-18T04:32:35.008Z" },
+    { url = "https://files.pythonhosted.org/packages/b5/97/28b985c2983938d3cb696dd5501423afb90a8c3e869ef5d3c62569282c0f/lxml-6.1.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:5cfa1a34df366d9dc0d5eaf420f4cf2bb1e1bebe1066d1c2fc28c179f8a4004c", size = 4210749, upload-time = "2026-04-18T04:36:03.626Z" },
+    { url = "https://files.pythonhosted.org/packages/29/67/dfab2b7d58214921935ccea7ce9b3df9b7d46f305d12f0f532ac7cf6b804/lxml-6.1.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:db88156fcf544cdbf0d95588051515cfdfd4c876fc66444eb98bceb5d6db76de", size = 4318463, upload-time = "2026-04-18T04:36:06.309Z" },
+    { url = "https://files.pythonhosted.org/packages/32/a2/4ac7eb32a4d997dd352c32c32399aae27b3f268d440e6f9cfa405b575d2f/lxml-6.1.0-pp311-pypy311_pp73-manylinux_2_26_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:07f98f5496f96bf724b1e3c933c107f0cbf2745db18c03d2e13a291c3afd2635", size = 4251124, upload-time = "2026-04-18T04:36:09.056Z" },
+    { url = "https://files.pythonhosted.org/packages/33/ef/d6abd850bb4822f9b720cfe36b547a558e694881010ff7d012191e8769c6/lxml-6.1.0-pp311-pypy311_pp73-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:4642e04449a1e164b5ff71ffd901ddb772dfabf5c9adf1b7be5dffe1212bc037", size = 4401758, upload-time = "2026-04-18T04:36:11.803Z" },
+    { url = "https://files.pythonhosted.org/packages/40/44/3ee09a5b60cb44c4f2fbc1c9015cfd6ff5afc08f991cab295d3024dcbf2d/lxml-6.1.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:7da13bb6fbadfafb474e0226a30570a3445cfd47c86296f2446dafbd77079ace", size = 3508860, upload-time = "2026-04-18T04:32:48.619Z" },
 ]
 
 [package.optional-dependencies]

From 534a3ed076c1dea7ee5ceb862c1439cdf3749579 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 21:17:25 -0300
Subject: [PATCH 040/345] chore(deps): bump python-dotenv from 1.2.1 to 1.2.2
 (#773)

Bumps [python-dotenv](https://github.com/theskumar/python-dotenv) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index f1ed8225..12cd9b00 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -30,7 +30,7 @@ dependencies = [
     "langchain_mistralai>=1.1.1",
     "langchain_deepseek>=1.0.0",
     "tomli>=2.0.2",
-    "python-dotenv>=1.0.1",
+    "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
     "content-core>=1.14.1,<2",
     "ai-prompter>=0.4,<1",
diff --git a/uv.lock b/uv.lock
index 9dd899d2..0a76730b 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2167,7 +2167,7 @@ requires-dist = [
     { name = "pycountry", specifier = ">=26.2.16" },
     { name = "pydantic", specifier = ">=2.9.2" },
     { name = "pytest", marker = "extra == 'dev'", specifier = ">=9.0.3" },
-    { name = "python-dotenv", specifier = ">=1.0.1" },
+    { name = "python-dotenv", specifier = ">=1.2.2" },
     { name = "ruff", marker = "extra == 'dev'", specifier = ">=0.5.5" },
     { name = "surreal-commands", specifier = ">=1.3.1,<2" },
     { name = "surrealdb", specifier = ">=1.0.4" },
@@ -2850,11 +2850,11 @@ wheels = [
 
 [[package]]
 name = "python-dotenv"
-version = "1.2.1"
+version = "1.2.2"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f0/26/19cadc79a718c5edbec86fd4919a6b6d3f681039a2f6d66d14be94e75fb9/python_dotenv-1.2.1.tar.gz", hash = "sha256:42667e897e16ab0d66954af0e60a9caa94f0fd4ecf3aaf6d2d260eec1aa36ad6", size = 44221, upload-time = "2025-10-26T15:12:10.434Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/82/ed/0301aeeac3e5353ef3d94b6ec08bbcabd04a72018415dcb29e588514bba8/python_dotenv-1.2.2.tar.gz", hash = "sha256:2c371a91fbd7ba082c2c1dc1f8bf89ca22564a087c2c287cd9b662adde799cf3", size = 50135, upload-time = "2026-03-01T16:00:26.196Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/14/1b/a298b06749107c305e1fe0f814c6c74aea7b2f1e10989cb30f544a1b3253/python_dotenv-1.2.1-py3-none-any.whl", hash = "sha256:b81ee9561e9ca4004139c6cbba3a238c32b03e4894671e181b671e8cb8425d61", size = 21230, upload-time = "2025-10-26T15:12:09.109Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/d7/1959b9648791274998a9c3526f6d0ec8fd2233e4d4acce81bbae76b44b2a/python_dotenv-1.2.2-py3-none-any.whl", hash = "sha256:1d8214789a24de455a8b8bd8ae6fe3c6b69a5e3d64aa8a8e5d68e694bbcb285a", size = 22101, upload-time = "2026-03-01T16:00:25.09Z" },
 ]
 
 [[package]]

From 8e74e492d3eafba000b5178cce363984d702b4cf Mon Sep 17 00:00:00 2001
From: Charly MARTIN <charly@hey.com>
Date: Fri, 22 May 2026 01:26:59 +0100
Subject: [PATCH 041/345] Correct settings form call-to-action label: Settings
 -> Save (#771)

---
 .../src/app/(dashboard)/settings/components/SettingsForm.tsx    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index f74f25f0..0dfafc0c 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -270,7 +270,7 @@ export function SettingsForm() {
           type="submit" 
           disabled={!isDirty || updateSettings.isPending}
         >
-          {updateSettings.isPending ? t('common.saving') : t('navigation.settings')}
+          {updateSettings.isPending ? t('common.saving') : t('common.save')}
         </Button>
       </div>
     </form>

From 000f46a30a8456a499eddbf4d8b7e092cc4ecbd2 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 21 May 2026 21:27:30 -0300
Subject: [PATCH 042/345] fix: inject notebook name and description into chat
 system prompt (#719)

The chat system prompt template had a conditional block for notebook
metadata but the /chat/execute endpoint never populated it. Fetch the
notebook linked to the session via the refers_to relationship and pass
it to the graph state so the LLM receives the notebook's name and
description as project context.

Closes #685
---
 api/routers/chat.py       | 10 ++++++++++
 prompts/chat/system.jinja |  3 ++-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/api/routers/chat.py b/api/routers/chat.py
index 8abe6694..abeeab82 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -342,6 +342,15 @@ async def execute_chat(request: ExecuteChatRequest):
         if not session:
             raise HTTPException(status_code=404, detail="Session not found")
 
+        # Fetch notebook linked to this session
+        notebook_query = await repo_query(
+            "SELECT out FROM refers_to WHERE in = $session_id",
+            {"session_id": ensure_record_id(full_session_id)},
+        )
+        notebook = None
+        if notebook_query:
+            notebook = await Notebook.get(notebook_query[0]["out"])
+
         # Determine model override (per-request override takes precedence over session-level)
         model_override = (
             request.model_override
@@ -360,6 +369,7 @@ async def execute_chat(request: ExecuteChatRequest):
         state_values = current_state.values if current_state else {}
         state_values["messages"] = state_values.get("messages", [])
         state_values["context"] = request.context
+        state_values["notebook"] = notebook
         state_values["model_override"] = model_override
 
         # Add user message to state
diff --git a/prompts/chat/system.jinja b/prompts/chat/system.jinja
index dab2eda2..f56e75be 100644
--- a/prompts/chat/system.jinja
+++ b/prompts/chat/system.jinja
@@ -11,7 +11,8 @@ Whenever a user asks you a question, you need to identify the query context and
 {% if notebook %}
 # PROJECT INFORMATION
 
-{{notebook}}
+**Name:** {{notebook.name}}
+**Description:** {{notebook.description}}
 {% endif %}
 
 {% if context %}

From 24892aca1b172d90282adc753701d91ce63ea4db Mon Sep 17 00:00:00 2001
From: Marius <marius.marsbar@gmail.com>
Date: Fri, 22 May 2026 13:33:14 +0200
Subject: [PATCH 043/345] Add German UI locale (#794)

Co-authored-by: Marius <marius@example.local>
---
 .../src/components/common/LanguageToggle.tsx  |   6 +
 frontend/src/lib/locales/de-DE/index.ts       | 933 ++++++++++++++++++
 frontend/src/lib/locales/index.ts             |   7 +-
 frontend/src/lib/utils/date-locale.ts         |   3 +-
 4 files changed, 946 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/lib/locales/de-DE/index.ts

diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 67c01ec8..005647bb 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -88,6 +88,12 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         >
           <span>{t('common.spanish')}</span>
         </DropdownMenuItem>
+        <DropdownMenuItem
+          onClick={() => setLanguage('de-DE')}
+          className={currentLang === 'de-DE' || currentLang.startsWith('de') ? 'bg-accent' : ''}
+        >
+          <span>Deutsch</span>
+        </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
new file mode 100644
index 00000000..4c4d7e97
--- /dev/null
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -0,0 +1,933 @@
+// German locale.
+// Translate values only; do not change keys, placeholders or structure.
+
+export const deDE = {
+  common: {
+    search: "Suchen...",
+    create: "Neu",
+    new: "Neu",
+    cancel: "Abbrechen",
+    delete: "Löschen",
+    edit: "Bearbeiten",
+    theme: "Design",
+    signOut: "Abmelden",
+    noMatches: "Keine Treffer gefunden",
+    tryDifferentSearch: "Versuche es mit einem anderen Suchbegriff.",
+    light: "Hell",
+    dark: "Dunkel",
+    system: "System",
+    loading: "Laden...",
+    note: "Notiz",
+    insight: "Erkenntnis",
+    newSource: "Neue Quelle",
+    newNotebook: "Neues Notebook",
+    newPodcast: "Neuer Podcast",
+    language: "Sprache",
+    english: "Englisch",
+    chinese: "简体中文",
+    japanese: "日本語",
+    french: "Français",
+    russian: "Русский",
+    bengali: "বাংলা",
+    spanish: "Español",
+    source: "Quelle",
+    notebook: "Notebook",
+    podcast: "Podcast",
+    quickActions: "Schnellaktionen",
+    quickActionsDesc: "Navigation, Suche, Fragen, Design",
+    appName: "Open Notebook",
+    add: "Hinzufügen",
+    remove: "Entfernen",
+    confirm: "Bestätigen",
+    warning: "Warnung",
+    error: "Fehler",
+    success: "Erfolg",
+    model: "Modell",
+    back: "Zurück",
+    next: "Weiter",
+    done: "Fertig",
+    processing: "Verarbeitung...",
+    creating: "Erstellen...",
+    linked: "Verknüpft",
+    adding: "Hinzufügen...",
+    addSelected: "Ausgewählte hinzufügen",
+    customModel: "Benutzerdefiniertes Modell",
+    failed: "fehlgeschlagen",
+    current: "Aktuell",
+    save: "Speichern",
+    writeNote: "Notiz schreiben",
+    batchMode: "Stapelmodus",
+    optional: "Optional",
+    type: "Typ",
+    title: "Titel",
+    created: "Erstellt {time}",
+    updated: "Aktualisiert {time}",
+    actions: "Aktionen",
+    noResults: "Keine Ergebnisse",
+    references: "Referenzen",
+    refreshPage: "Bitte versuche, die Seite neu zu laden",
+    refresh: "Aktualisieren",
+    aiGenerated: "KI-generiert",
+    human: "Menschlich",
+    unknown: "Unbekannt",
+    notes: "Notizen",
+    chat: "Chat",
+    deleteForever: "Endgültig löschen",
+    connectionError: "Verbindungsfehler",
+    unableToConnect: "Keine Verbindung zum API-Server möglich",
+    retryConnection: "Verbindung erneut versuchen",
+    diagnosticInfo: "Diagnoseinformationen",
+    version: "Version",
+    built: "Build",
+    apiUrl: "API-URL",
+    frontendUrl: "Frontend-URL",
+    checkConsoleLogs: "Prüfe die Browserkonsole auf detaillierte Logs (suche nach 🔧 [Config]-Meldungen)",
+    yes: "Ja",
+    no: "Nein",
+    saving: "Speichern...",
+    description: "Beschreibung",
+    saveToNote: "In Notiz speichern",
+    copyToClipboard: "In Zwischenablage kopieren",
+    close: "Schließen",
+    insights: "Erkenntnisse",
+    progress: "Fortschritt",
+    deleting: "Löschen...",
+    created_label: "Erstellt",
+    updated_label: "Aktualisiert",
+    download: "Herunterladen",
+    saveChanges: "Änderungen speichern",
+    name: "Name",
+    default: "Standard",
+    nameRequired: "Name ist erforderlich",
+    modelConfiguration: "Modellkonfiguration",
+    resetToDefault: "Auf Standard zurücksetzen",
+    reasoning: "Denkprozess",
+    searchTerms: "Suchbegriffe",
+    strategy: "Strategie",
+    individualAnswers: "Einzelantworten ({count})",
+    finalAnswer: "Endgültige Antwort",
+    notebookLabel: "Notebook: {name}",
+    itemNotFound: "{type} konnte nicht gefunden werden",
+    accessibility: {
+      transformationViews: "Transformationsansichten",
+      searchKB: "Wissensbasis fragen oder durchsuchen",
+      enterQuestion: "Gib deine Frage an die Wissensbasis ein",
+      enterSearch: "Suchanfrage eingeben",
+      searchKBBtn: "Wissensbasis durchsuchen",
+      podcastViews: "Podcast-Ansichten",
+      ytVideo: "YouTube-Video",
+      askResponse: "Antwort auf Frage",
+      searchNotebooks: "Notebooks suchen",
+    },
+    url: "URL",
+    errorDetails: "Fehlerdetails",
+    editTransformation: "Transformation bearbeiten",
+    retry: "Erneut versuchen",
+    traditionalChinese: "繁體中文",
+    portuguese: "Português",
+    completed: "abgeschlossen",
+    saveSuccess: "Erfolgreich gespeichert",
+    contextModes: {
+      off: "Nicht im Chat enthalten",
+      insights: "Nur Insights",
+      full: "Vollständiger Inhalt",
+      clickToCycle: "Klicken zum Wechseln",
+    },
+    clickToEdit: "Zum Bearbeiten klicken",
+  },
+  apiErrors: {
+    notebookNotFound: "Notebook nicht gefunden",
+    sourceNotFound: "Quelle nicht gefunden",
+    transformationNotFound: "Transformation nicht gefunden",
+    fileUploadFailed: "Datei-Upload fehlgeschlagen",
+    urlRequired: "Für den Typ Link ist eine URL erforderlich",
+    contentRequired: "Für den Typ Text ist Inhalt erforderlich",
+    invalidSourceType: "Ungültiger Quellentyp",
+    processingFailed: "Verarbeitung fehlgeschlagen",
+    failedToQueue: "Verarbeitung konnte nicht in die Warteschlange gestellt werden",
+    invalidSortBy: "Sortierfeld muss „created“ oder „updated“ sein",
+    invalidSortOrder: "Sortierreihenfolge muss „asc“ oder „desc“ sein",
+    accessDenied: "Zugriff auf Datei verweigert",
+    fileNotFoundOnServer: "Datei auf dem Server nicht gefunden",
+    searchFailed: "Suche fehlgeschlagen",
+    askFailed: "Frage konnte nicht verarbeitet werden",
+    pleaseEnterQuestion: "Bitte gib eine Frage ein",
+    pleaseConfigureModels: "Bitte konfiguriere alle erforderlichen Modelle",
+    failedToCreateSession: "Sitzung konnte nicht erstellt werden",
+    failedToUpdateSession: "Sitzung konnte nicht aktualisiert werden",
+    failedToDeleteSession: "Sitzung konnte nicht gelöscht werden",
+    failedToSendMessage: "Nachricht konnte nicht gesendet werden",
+    unauthorized: "Nicht autorisierter Zugriff. Bitte prüfe dein Passwort",
+    invalidPassword: "Ungültiges Passwort",
+    embeddingModelRequired: "Diese Funktion benötigt ein Embedding-Modell. Bitte konfiguriere eines im Bereich Modelle.",
+    strategyModelNotFound: "Strategiemodell nicht gefunden",
+    answerModelNotFound: "Antwortmodell nicht gefunden",
+    finalAnswerModelNotFound: "Modell für die finale Antwort nicht gefunden",
+    noAnswerGenerated: "Es konnte keine Antwort erzeugt werden",
+    genericError: "Es ist ein unerwarteter Fehler aufgetreten",
+  },
+  connectionErrors: {
+    apiTitle: "Keine Verbindung zum API-Server möglich",
+    apiDesc: "Der Open Notebook API-Server konnte nicht erreicht werden",
+    dbTitle: "Datenbankverbindung fehlgeschlagen",
+    dbDesc: "Der API-Server läuft, aber die Datenbank ist nicht erreichbar",
+    troubleshooting: "Das bedeutet normalerweise:",
+    apiUnreachable1: "Der API-Server läuft nicht",
+    apiUnreachable2: "Der API-Server läuft unter einer anderen Adresse",
+    apiUnreachable3: "Probleme mit der Netzwerkverbindung",
+    dbFailed1: "SurrealDB läuft nicht",
+    dbFailed2: "Die Datenbankverbindung ist falsch konfiguriert",
+    dbFailed3: "Netzwerkprobleme zwischen API und Datenbank",
+    quickFixes: "Schnelle Lösungen:",
+    setApiUrl: "Setze die Umgebungsvariable API_URL:",
+    checkSurreal: "Prüfe, ob SurrealDB läuft:",
+    seeDocumentation: "Ausführliche Einrichtungsanweisungen findest du hier:",
+    docLink: "Open Notebook-Dokumentation",
+    showTechnical: "Technische Details anzeigen",
+    attemptedUrl: "Versuchte URL",
+    message: "Meldung",
+    technicalDetails: "Technische Details",
+    stackTrace: "Stacktrace",
+    retryLabel: "Verbindung erneut versuchen",
+    retryHint: "Drücke R oder klicke auf den Button, um es erneut zu versuchen",
+    dockerLabel: "Für Docker",
+    localDevLabel: "Für lokale Entwicklung",
+  },
+  auth: {
+    loginTitle: "Open Notebook",
+    loginDesc: "Gib dein Passwort ein, um auf die Anwendung zuzugreifen",
+    passwordPlaceholder: "Passwort",
+    signingIn: "Anmelden...",
+    signIn: "Anmelden",
+    connectErrorHint: "Keine Verbindung zum Server möglich. Bitte prüfe, ob die API läuft.",
+  },
+  navigation: {
+    collect: "Sammeln",
+    process: "Verarbeiten",
+    create: "Erstellen",
+    manage: "Verwalten",
+    sources: "Quellen",
+    notebooks: "Notebooks",
+    askAndSearch: "Fragen und Suchen",
+    podcasts: "Podcasts",
+    models: "Modelle",
+    transformations: "Transformationen",
+    transformation: "Transformation",
+    settings: "Einstellungen",
+    advanced: "Erweitert",
+    nav: "Navigation",
+    language: "Sprache wechseln",
+    theme: "Design",
+    ask: "Fragen",
+  },
+  notebooks: {
+    title: "Notebooks",
+    newNotebook: "Neues Notebook",
+    searchPlaceholder: "Notebooks suchen...",
+    archived: "Archiviert",
+    archive: "Archivieren",
+    unarchive: "Aus Archiv wiederherstellen",
+    deleteNotebook: "Notebook löschen",
+    deleteNotebookDesc: "Möchtest du „{name}“ wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+    deleteNotebookLoading: "Löschvorschau wird geladen...",
+    deleteNotebookNotes: "{count} Notiz(en) werden dauerhaft gelöscht.",
+    deleteNotebookNoNotes: "Keine Notizen zum Löschen vorhanden.",
+    deleteNotebookExclusiveSources: "{count} Quelle(n) existieren nur in diesem Notebook.",
+    deleteNotebookSharedSources: "{count} Quelle(n) werden auch in anderen Notebooks verwendet und nur aus diesem Notebook entfernt.",
+    deleteNotebookNoSources: "Keine Quellen in diesem Notebook.",
+    deleteExclusiveSourcesLabel: "Exklusive Quellen löschen",
+    keepExclusiveSourcesLabel: "Verknüpfung lösen und behalten",
+    activeNotebooks: "Aktive Notebooks",
+    archivedNotebooks: "Archivierte Notebooks",
+    notFound: "Notebook nicht gefunden",
+    notFoundDesc: "Das angeforderte Notebook existiert nicht.",
+    updated: "Aktualisiert",
+    namePlaceholder: "Notebook-Name",
+    addDescription: "Beschreibung hinzufügen...",
+    noNotesYet: "Noch keine Notizen",
+    deleteNote: "Notiz löschen",
+    deleteNoteConfirm: "Möchtest du diese Notiz wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+    noteCreatedSuccess: "Notiz erfolgreich erstellt",
+    failedToCreateNote: "Notiz konnte nicht erstellt werden",
+    noteUpdatedSuccess: "Notiz erfolgreich aktualisiert",
+    failedToUpdateNote: "Notiz konnte nicht aktualisiert werden",
+    noteDeletedSuccess: "Notiz erfolgreich gelöscht",
+    failedToDeleteNote: "Notiz konnte nicht gelöscht werden",
+    createNew: "Neues Notebook erstellen",
+    createNewDesc: "Gib einen Namen und optional eine Beschreibung ein, um zu starten.",
+    descPlaceholder: "Füge hier weitere Informationen zu diesem Notebook hinzu...",
+    createSuccess: "Notebook erfolgreich erstellt",
+    updateSuccess: "Notebook erfolgreich aktualisiert",
+    deleteSuccess: "Notebook erfolgreich gelöscht",
+  },
+  sources: {
+    title: "Quellen",
+    add: "Quelle hinzufügen",
+    addNew: "Neue Quelle hinzufügen",
+    addExisting: "Vorhandene Quelle hinzufügen",
+    delete: "Quelle löschen",
+    statusPreparing: "Wird vorbereitet",
+    statusQueued: "In Warteschlange",
+    statusProcessing: "Wird verarbeitet",
+    statusCompleted: "Abgeschlossen",
+    statusFailed: "Fehlgeschlagen",
+    statusPreparingDesc: "Verarbeitung wird vorbereitet",
+    statusQueuedDesc: "Wartet auf Verarbeitung",
+    statusProcessingDesc: "Wird gerade verarbeitet",
+    statusCompletedDesc: "Erfolgreich verarbeitet",
+    statusFailedDesc: "Verarbeitung fehlgeschlagen",
+    failedToLoad: "Quellen konnten nicht geladen werden",
+    allSourcesDesc: "Hier findest du alle deine Quellen. Du kannst neue Quellen hinzufügen oder vorhandene verwalten.",
+    allSources: "Alle Quellen",
+    insights: "Erkenntnisse",
+    yes: "Ja",
+    no: "Nein",
+    loadingMore: "Weitere werden geladen...",
+    noSourcesYet: "Noch keine Quellen vorhanden",
+    allSourcesDescShort: "Hier findest du alle deine Quellen.",
+    cannotSaveNoteNoNotebook: "Notiz kann nicht gespeichert werden: Notebook-ID nicht verfügbar",
+    createFirstSource: "Füge deine erste Quelle hinzu, um deine Wissensbasis aufzubauen.",
+    deleteSourceConfirm: "Möchtest du diese Quelle wirklich löschen?",
+    deleteConfirm: "Möchtest du das wirklich löschen?",
+    deleteConfirmWithTitle: "Möchtest du „{title}“ wirklich löschen?",
+    deleteSuccess: "Quelle erfolgreich gelöscht. Hinweis: Um die Datei auch aus dem Speicher zu löschen, musst du in den Einstellungen die Option „Datei löschen“ aktivieren.",
+    failedToDelete: "Quelle konnte nicht gelöscht werden",
+    sourceQueued: "Quelle eingereiht",
+    sourceQueuedDesc: "Quelle wurde zur Hintergrundverarbeitung eingereicht. Den Fortschritt kannst du in der Quellenliste verfolgen.",
+    sourceAddedSuccess: "Quelle erfolgreich hinzugefügt",
+    failedToAddSource: "Quelle konnte nicht hinzugefügt werden",
+    sourceUpdatedSuccess: "Quelle erfolgreich aktualisiert",
+    failedToUpdateSource: "Quelle konnte nicht aktualisiert werden",
+    sourceDeletedSuccess: "Quelle erfolgreich gelöscht",
+    failedToDeleteSource: "Quelle konnte nicht gelöscht werden",
+    fileUploadedSuccess: "Datei erfolgreich hochgeladen",
+    failedToUploadFile: "Datei konnte nicht hochgeladen werden",
+    sourceRequeued: "Quelle erneut eingereiht",
+    sourceRequeuedDesc: "Die Quelle wurde erneut zur Verarbeitung in die Warteschlange gestellt.",
+    failedToRetry: "Erneuter Versuch fehlgeschlagen",
+    sourcesAddedToNotebook: "{count} Quelle(n) zum Notebook hinzugefügt",
+    failedToAddSourcesToNotebook: "Quellen konnten nicht zum Notebook hinzugefügt werden",
+    partialAddSuccess: "{success} Quelle(n) hinzugefügt, {failed} fehlgeschlagen",
+    sourceRemovedFromNotebook: "Quelle erfolgreich aus dem Notebook entfernt",
+    failedToRemoveSourceFromNotebook: "Quelle konnte nicht aus dem Notebook entfernt werden",
+    removeConfirm: "Möchtest du dies wirklich aus dem Notebook entfernen?",
+    checking: "Wird geprüft...",
+    untitledSource: "Unbenannte Quelle",
+    maxItems: "max. {count}",
+    insightsCount: "{count} Erkenntnisse",
+    details: "Details",
+    detailsTitle: "Quellendetails",
+    content: "Inhalt",
+    metadata: "Metadaten",
+    type: {
+      link: "Link",
+      file: "Datei",
+      text: "Text",
+    },
+    id: "Quellen-ID",
+    topics: "Themen",
+    embedded: "Eingebettet",
+    notEmbedded: "Nicht eingebettet",
+    embedContent: "Inhalt einbetten",
+    embedding: "Wird eingebettet...",
+    alreadyEmbedded: "Bereits eingebettet",
+    downloadFile: "Datei herunterladen",
+    fileUnavailable: "Datei nicht verfügbar",
+    preparing: "Wird vorbereitet...",
+    generateNewInsight: "Neue Erkenntnis erzeugen",
+    selectTransformation: "Transformation auswählen...",
+    noInsightsYet: "Noch keine Erkenntnisse vorhanden",
+    createFirstInsight: "Erzeuge deine erste Erkenntnis mit einer der obigen Transformationen",
+    viewInsight: "Erkenntnis anzeigen",
+    deleteInsight: "Erkenntnis löschen",
+    deleteInsightConfirm: "Möchtest du diese Erkenntnis wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+    insightGenerationStarted: "Erzeugung der Erkenntnis gestartet. Sie erscheint in Kürze.",
+    editNote: "Notiz bearbeiten",
+    createNote: "Notiz erstellen",
+    addTitle: "Titel hinzufügen...",
+    untitledNote: "Unbenannte Notiz",
+    writeNotePlaceholder: "Schreibe den Inhalt deiner Notiz hier hinein...",
+    saveNote: "Notiz speichern",
+    createNoteBtn: "Notiz erstellen",
+    createFirstNote: "Erstelle deine erste Notiz, um Erkenntnisse und Beobachtungen festzuhalten.",
+    urlLabel: "URL(s) *",
+    fileLabel: "Datei(en) *",
+    textContentLabel: "Textinhalt *",
+    enterUrlsPlaceholder: "URLs eingeben, eine pro Zeile\nhttps://example.com/artikel1\nhttps://example.com/artikel2",
+    batchUrlHint: "Füge mehrere URLs ein, jeweils eine pro Zeile, um sie gesammelt zu importieren",
+    invalidUrlsDetected: "Ungültige URLs gefunden:",
+    lineLabel: "Zeile {line}",
+    fixInvalidUrls: "Bitte korrigiere oder entferne ungültige URLs, um fortzufahren",
+    selectMultipleFilesHint: "Wähle mehrere Dateien für den Sammelimport aus. Unterstützt werden: Dokumente (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medien (MP4, MP3, WAV, M4A), Bilder (JPG, PNG), Archive (ZIP)",
+    selectedFiles: "Ausgewählte Dateien:",
+    textPlaceholder: "Füge deinen Inhalt hier ein oder schreibe ihn direkt hinein...",
+    htmlDetected: "HTML-Inhalt erkannt. Er wird nach der Verarbeitung in Markdown umgewandelt.",
+    titlePlaceholder: "Gib deiner Quelle einen aussagekräftigen Titel",
+    batchTitlesAuto: "Titel werden für jede Quelle automatisch erzeugt.",
+    batchCommonSettings: " Dieselben Notebooks und Transformationen werden auf alle Elemente angewendet.",
+    urlsCount: "{count} URL(s)",
+    filesCount: "{count} Datei(en)",
+    addSource: "Quelle hinzufügen",
+    notEmbeddedAlert: "Inhalt nicht eingebettet",
+    notEmbeddedDesc: "Dieser Inhalt wurde noch nicht für die Vektorsuche eingebettet. Einbettung ermöglicht erweiterte Suchfunktionen und eine bessere Auffindbarkeit der Inhalte.",
+    openOnYoutube: "Auf YouTube öffnen",
+    urlCopied: "URL in die Zwischenablage kopiert",
+    viewSource: "Quelle anzeigen",
+    noInsightSelected: "Keine Erkenntnis ausgewählt",
+    sourceInsight: "Quellen-Erkenntnis",
+    manageNotebooks: "Notebooks verwalten",
+    manageNotebooksDesc: "Verwalte, welche Notebooks diese Quelle enthalten",
+    noNotebooksAvailable: "Keine Notebooks verfügbar",
+    loadFailed: "Quellendetails konnten nicht geladen werden",
+    removeFromNotebook: "Aus Notebook entfernen",
+    retryProcessing: "Verarbeitung erneut versuchen",
+    deleteSource: "Quelle löschen",
+    retry: "Erneut versuchen",
+    addExistingTitle: "Vorhandene Quellen hinzufügen",
+    addExistingDesc: "Wähle vorhandene Quellen aus allen Notebooks aus, um sie dem aktuellen Notebook hinzuzufügen.",
+    searchPlaceholder: "Quellen nach Name oder URL suchen...",
+    noNotebooksFound: "Keine Notebooks gefunden.",
+    showingFirst100: "Die ersten 100 Quellen werden angezeigt. Nutze die Suche, um bestimmte Quellen zu finden.",
+    selectedCount: "{count} Quellen ausgewählt",
+    added: "Hinzugefügt am {date}",
+    addUrl: "URL hinzufügen",
+    uploadFile: "Datei hochladen",
+    enterText: "Text eingeben",
+    processDescription: "Inhalt wird verarbeitet und von der KI analysiert.",
+    processingFiles: "Deine Dateien werden verarbeitet...",
+    titleRequired: "Für Textinhalt ist ein Titel erforderlich",
+    titleGenerated: "Wenn du dieses Feld leer lässt, wird aus dem Inhalt ein Titel erzeugt",
+    batchCount: "Wird verarbeitet: {count} × {type}",
+    enableEmbedding: "Einbettung für die Suche aktivieren",
+    embeddingDesc: "Ermöglicht, dass diese Quelle in Vektorsuchen und KI-Abfragen gefunden wird",
+    embeddingAlways: "Einbettung automatisch aktiviert",
+    embeddingAlwaysDesc: "Deine Einstellungen sind so konfiguriert, dass Inhalte immer für die Vektorsuche eingebettet werden.",
+    embeddingNever: "Einbettung deaktiviert",
+    embeddingNeverDesc: "Deine Einstellungen sind so konfiguriert, dass Einbettung übersprungen wird. Die Vektorsuche ist für diese Quelle nicht verfügbar.",
+    changeInSettings: "Du kannst das in den Einstellungen ändern",
+    notFound: "Quelle nicht gefunden",
+    noContent: "Kein Inhalt verfügbar",
+    insightsDesc: "Erkenntnisse aus der Modellanalyse",
+    uploadedFile: "Hochgeladene Datei",
+    fileUnavailableDesc: "Diese Datei ist derzeit aus Gründen des Speichersystems nicht verfügbar.",
+    batchSuccess: "{count} Quelle(n) erfolgreich erstellt",
+    batchFailed: "Nicht alle {count} Quellen konnten erstellt werden",
+    batchPartial: "{success} erfolgreich, {failed} fehlgeschlagen",
+    submittingSource: "Quelle wird zur Verarbeitung übermittelt...",
+    processingBatchSources: "{count} Quellen werden verarbeitet. Das kann einen Moment dauern.",
+    processingSource: "Deine Quelle wird verarbeitet. Das kann einen Moment dauern.",
+    maxFilesAllowed: "Maximal {count} Dateien pro Sammelimport erlaubt",
+  },
+  chat: {
+    sessions: "Sitzungen",
+    sessionTitlePlaceholder: "Titel hier eingeben...",
+    noSessions: "Noch keine Chat-Sitzungen",
+    deleteSession: "Sitzung löschen",
+    deleteSessionDesc: "Möchtest du diese Chat-Sitzung wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+    sendPlaceholder: "Frage etwas zu deinen Quellen...",
+    sessionsTitle: "Chat-Sitzungen",
+    chatWith: "Chat mit {name}",
+    startConversation: "Starte eine Unterhaltung zu {type}",
+    askQuestions: "Stelle Fragen, um den Inhalt besser zu verstehen",
+    pressToSend: "Drücke {key} zum Senden",
+    model: "Modell",
+    createToStart: "Erstelle eine Sitzung, um zu starten.",
+    chatWithNotebook: "Mit Notebook chatten",
+    unableToLoadChat: "Chat konnte nicht geladen werden",
+    noDescription: "Keine Beschreibung",
+    startByCreating: "Erstelle zuerst dein erstes Notebook, um deine Recherche zu organisieren.",
+    messagesCount: "{count} Nachrichten",
+    sessionCreated: "Chat-Sitzung erstellt",
+    sessionUpdated: "Sitzung aktualisiert",
+    sessionDeleted: "Sitzung gelöscht",
+  },
+  searchPage: {
+    askAndSearch: "Fragen und Suchen",
+    chooseAMode: "Modus wählen",
+    askBeta: "Fragen (Beta)",
+    search: "Suchen",
+    askYourKb: "Wissensbasis fragen (Beta)",
+    askYourKbDesc: "Das KI-Modell beantwortet deine Anfrage anhand der Dokumente in deiner Wissensbasis.",
+    question: "Frage",
+    enterQuestionPlaceholder: "Frage eingeben...",
+    pressToSubmit: "Drücke Cmd/Ctrl+Enter zum Absenden",
+    noEmbeddingModel: "Du kannst diese Funktion nicht nutzen, weil kein Embedding-Modell ausgewählt ist. Bitte richte eines auf der Modellseite ein.",
+    usingCustomModels: "Benutzerdefinierte Modelle werden verwendet",
+    usingDefaultModels: "Standardmodelle werden verwendet",
+    advanced: "Erweitert",
+    strategy: "Strategie",
+    answer: "Antwort",
+    final: "Endantwort",
+    ask: "Fragen",
+    processing: "Wird verarbeitet...",
+    saveToNotebooks: "In Notebooks speichern",
+    searchDesc: "Durchsuche deine Wissensbasis nach bestimmten Stichwörtern oder Konzepten",
+    enterSearchPlaceholder: "Suchanfrage eingeben...",
+    pressToSearch: "Drücke Enter zum Suchen",
+    searchType: "Suchtyp",
+    vectorSearchWarning: "Vektorsuche benötigt ein Embedding-Modell. Es ist nur Textsuche verfügbar.",
+    textSearch: "Textsuche",
+    vectorSearch: "Vektorsuche",
+    searchIn: "Suchen in",
+    searchSources: "Quellen durchsuchen",
+    searchNotes: "Notizen durchsuchen",
+    resultsFound: "{count} Ergebnisse gefunden",
+    matches: "Treffer ({count})",
+    noResultsFor: "Keine Ergebnisse für „{query}“ gefunden",
+    notSet: "Nicht festgelegt",
+    saveToNotebook: "In Notebook speichern",
+    saveSuccess: "Erfolgreich im Notebook gespeichert",
+    saveError: "Speichern im Notebook fehlgeschlagen",
+    selectNotebook: "Notebook auswählen",
+    searchAndAsk: "Suchen & Fragen",
+    searchResultsFor: "Suchergebnisse für „{query}“",
+    askAbout: "Fragen zu „{query}“",
+    orSearchKb: "Oder deine Wissensbasis durchsuchen",
+    saving: "Speichern...",
+    advancedModelTitle: "Erweiterte Modellauswahl",
+    advancedModelDesc: "Wähle bestimmte Modelle für jede Phase des Frageprozesses aus",
+    strategyModel: "Strategiemodell",
+    answerModel: "Antwortmodell",
+    finalAnswerModel: "Modell für finale Antwort",
+    selectStrategyPlaceholder: "Strategiemodell auswählen",
+    selectAnswerPlaceholder: "Antwortmodell auswählen",
+    selectFinalPlaceholder: "Modell für finale Antwort auswählen",
+    saveChanges: "Änderungen speichern",
+    processingQuestion: "Deine Frage wird verarbeitet...",
+  },
+  podcasts: {
+    generateEpisode: "Podcast-Episode erzeugen",
+    generateEpisodeDesc: "Wähle die Inhalte aus und konfiguriere die Episodendetails, bevor eine neue Podcast-Episode erzeugt wird.",
+    content: "Inhalt",
+    contentDesc: "Wähle Notebooks, Quellen und Notizen aus, die in diese Episode aufgenommen werden sollen.",
+    itemsSelected: "{count} Elemente ausgewählt",
+    tokens: "{count} Tokens",
+    chars: "{count} Zeichen",
+    loadingNotebooks: "Notebooks werden geladen...",
+    noNotebooksFoundInPodcasts: "Keine Notebooks gefunden. Erstelle ein Notebook und füge Inhalte hinzu, bevor du einen Podcast erzeugst.",
+    noContentSelected: "Kein Inhalt ausgewählt",
+    summary: "Zusammenfassung",
+    fullContent: "Vollständiger Inhalt",
+    untitledSource: "Unbenannte Quelle",
+    untitledNote: "Unbenannte Notiz",
+    episodeSettings: "Episodeneinstellungen",
+    episodeProfile: "Episodenprofil",
+    episodeProfilePlaceholder: "Episodenprofil auswählen",
+    episodeName: "Episodenname",
+    episodeNamePlaceholder: "z. B. KI und die Zukunft der Arbeit",
+    additionalInstructions: "Zusätzliche Anweisungen",
+    instructionsPlaceholder: "Zusätzliche Hinweise, die an das Episoden-Briefing angehängt werden sollen...",
+    generating: "Wird erzeugt...",
+    generate: "Erzeugen",
+    hostPlaceholder: "Moderator {number}",
+    profileRequired: "Episodenprofil erforderlich",
+    profileRequiredDesc: "Wähle ein Episodenprofil aus, bevor du einen Podcast erzeugst.",
+    nameRequired: "Episodenname erforderlich",
+    nameRequiredDesc: "Gib einen Namen für die Episode an.",
+    addContext: "Kontext hinzufügen",
+    addContextDesc: "Wähle mindestens eine Quelle oder Notiz aus, die in die Episode aufgenommen werden soll.",
+    generationFailed: "Podcast-Erzeugung fehlgeschlagen",
+    speakerProfile: "Sprecherprofil",
+    usesSpeakerProfile: "Verwendet Sprecherprofil",
+    sources: "Quellen",
+    notes: "Notizen",
+    noSources: "In diesem Notebook sind keine Quellen verfügbar.",
+    noNotes: "In diesem Notebook sind keine Notizen verfügbar.",
+    selectMode: "Modus auswählen",
+    buildContextFailed: "Kontext konnte nicht erstellt werden. Bitte prüfe deine Auswahl.",
+    podcastTaskStarted: "Podcast-Aufgabe gestartet",
+    loadingProfiles: "Episodenprofile werden geladen...",
+    noProfilesFound: "Keine Episodenprofile gefunden. Erstelle ein Episodenprofil, bevor du einen Podcast erzeugst.",
+    listTitle: "Podcasts",
+    listDesc: "Behalte erzeugte Episoden im Blick und verwalte wiederverwendbare Profile.",
+    chooseAView: "Ansicht auswählen",
+    episodesTab: "Episoden",
+    templatesTab: "Profile",
+    overviewTitle: "Episodenübersicht",
+    overviewDesc: "Überwache Podcast-Erzeugungsaufträge und prüfe die fertigen Ergebnisse.",
+    generateBtn: "Podcast erzeugen",
+    total: "Gesamt",
+    processingLabel: "In Verarbeitung",
+    completedLabel: "Abgeschlossen",
+    failedLabel: "Fehlgeschlagen",
+    pendingLabel: "Ausstehend",
+    loadErrorTitle: "Episoden konnten nicht geladen werden",
+    loadErrorDesc: "Die neuesten Podcast-Episoden konnten nicht abgerufen werden. Versuche es gleich erneut.",
+    loadingEpisodes: "Episoden werden geladen…",
+    noEpisodesYet: "Noch keine Podcast-Episoden. Erzeuge deine erste Episode über die Chat-Oberflächen eines Notebooks oder einer Quelle.",
+    statusRunningTitle: "Aktuell in Verarbeitung",
+    statusRunningDesc: "Episoden, deren Inhalte gerade erzeugt werden.",
+    statusPendingTitle: "In Warteschlange / ausstehend",
+    statusPendingDesc: "Eingereichte Episoden, die auf den Start der Verarbeitung warten.",
+    statusCompletedTitle: "Abgeschlossene Episoden",
+    statusCompletedDesc: "Bereit zum Prüfen, Herunterladen oder Veröffentlichen.",
+    statusFailedTitle: "Fehlgeschlagene Episoden",
+    statusFailedDesc: "Episoden, bei deren Erzeugung Probleme aufgetreten sind.",
+    templatesWorkspaceTitle: "Profil-Arbeitsbereich",
+    templatesWorkspaceDesc: "Erstelle wiederverwendbare Episoden- und Sprecherkonfigurationen für schnelle Podcast-Produktion.",
+    howTemplatesPowerTitle: "Wie Profile die Podcast-Erzeugung steuern",
+    howTemplatesPowerDesc: "Profile teilen den Podcast-Workflow in zwei wiederverwendbare Bausteine. Kombiniere sie beliebig, wenn du eine neue Episode erzeugst.",
+    episodeProfilesSetFormat: "Episodenprofile legen das Format fest",
+    episodeProfilesList1: "Lege die Anzahl der Segmente fest und wie die Geschichte aufgebaut ist",
+    episodeProfilesList2: "Wähle die Sprachmodelle für Briefing, Gliederung und Skripterstellung aus",
+    episodeProfilesList3: "Speichere Standard-Briefings, damit jede Episode mit einem einheitlichen Ton startet",
+    speakerProfilesBringVoices: "Sprecherprofile bringen Stimmen zum Leben",
+    speakerProfilesList1: "Wähle den Text-to-Speech-Anbieter und das Modell aus",
+    speakerProfilesList2: "Erfasse Persönlichkeit, Hintergrundgeschichte und Aussprachehinweise pro Sprecher",
+    speakerProfilesList3: "Verwende dieselben Moderatoren- oder Gaststimmen in verschiedenen Episodenformaten erneut",
+    recommendedWorkflow: "Empfohlener Ablauf",
+    workflowStep1: "Erstelle Sprecherprofile für jede benötigte Stimme",
+    workflowStep2: "Erstelle Episodenprofile, die diese Sprecher namentlich referenzieren",
+    workflowStep3: "Erzeuge Podcasts, indem du das zur Geschichte passende Episodenprofil auswählst",
+    workflowHint: "Episodenprofile referenzieren Sprecherprofile nach Namen. Wenn du mit den Sprechern beginnst, vermeidest du später fehlende Stimmenzuweisungen.",
+    failedToLoadTemplates: "Profildaten konnten nicht geladen werden",
+    failedToLoadTemplatesDesc: "Stelle sicher, dass die API läuft, und versuche es erneut. Einige Bereiche können unvollständig sein.",
+    loadingTemplates: "Profile werden geladen…",
+    speakerProfilesTitle: "Sprecherprofile",
+    speakerProfilesDesc: "Konfiguriere Stimmen und Persönlichkeiten für erzeugte Episoden.",
+    createSpeaker: "Sprecher erstellen",
+    noSpeakerProfiles: "Noch keine Sprecherprofile. Erstelle eines, damit Episodenprofile verfügbar werden.",
+    noDescription: "Keine Beschreibung angegeben.",
+    usedByCount_one: "Von 1 Episode verwendet",
+    usedByCount_other: "Von {count} Episoden verwendet",
+    usedByCount: "Von {count} Episoden verwendet",
+    unused: "Nicht verwendet",
+    voiceId: "Stimmen-ID",
+    backstory: "Hintergrundgeschichte",
+    personality: "Persönlichkeit",
+    edit: "Bearbeiten",
+    duplicate: "Duplizieren",
+    deleteSpeakerProfileTitle: "Sprecherprofil löschen?",
+    deleteSpeakerProfileDesc: "Das Löschen von „{name}“ kann nicht rückgängig gemacht werden.",
+    deleteSpeakerDisabledHint: "Entferne diesen Sprecher aus den Episodenprofilen, bevor du ihn löschst.",
+    deleting: "Wird gelöscht…",
+    episodeProfilesTitle: "Episodenprofile",
+    episodeProfilesDesc: "Definiere wiederverwendbare Erzeugungseinstellungen für deine Sendungen.",
+    createProfile: "Profil erstellen",
+    createSpeakerFirst: "Erstelle ein Sprecherprofil, bevor du ein Episodenprofil hinzufügst.",
+    noEpisodeProfiles: "Noch keine Episodenprofile. Erstelle eines, um die Podcast-Erzeugung zu starten.",
+    speakerCreated: "Sprecher erstellt",
+    speakerCreatedDesc: "Der Sprecher „{name}“ wurde erfolgreich hinzugefügt.",
+    failedToCreateSpeaker: "Sprecherprofil konnte nicht erstellt werden",
+    speakerUpdated: "Sprecher aktualisiert",
+    speakerUpdatedDesc: "Der Sprecher „{name}“ wurde erfolgreich aktualisiert.",
+    failedToUpdateSpeaker: "Sprecherprofil konnte nicht aktualisiert werden",
+    speakerDeleted: "Sprecher gelöscht",
+    speakerDeletedDesc: "Der Sprecher „{name}“ wurde erfolgreich entfernt.",
+    failedToDeleteSpeaker: "Sprecherprofil konnte nicht gelöscht werden",
+    speakerDuplicated: "Sprecher dupliziert",
+    speakerDuplicatedDesc: "Der Sprecher „{name}“ wurde erfolgreich dupliziert.",
+    failedToDuplicateSpeaker: "Sprecherprofil konnte nicht dupliziert werden",
+    generationStarted: "Erzeugung gestartet",
+    generationStartedDesc: "Die Podcast-Erzeugung wurde in die Warteschlange eingereiht.",
+    failedToStartGeneration: "Erzeugung konnte nicht gestartet werden",
+    tryAgainMoment: "Bitte versuche es gleich erneut.",
+    deleteProfileTitle: "Profil löschen?",
+    deleteProfileDesc: "Dadurch wird „{name}“ entfernt. Vorhandene Episoden behalten ihre Daten, aber neue Episoden verwenden diese Konfiguration nicht mehr.",
+    profileCreated: "Profil erstellt",
+    profileCreatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich erstellt.",
+    failedToCreateProfile: "Profil konnte nicht erstellt werden",
+    profileUpdated: "Profil aktualisiert",
+    profileUpdatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich aktualisiert.",
+    failedToUpdateProfile: "Profil konnte nicht aktualisiert werden",
+    profileDeleted: "Profil gelöscht",
+    profileDeletedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich entfernt.",
+    failedToDeleteProfile: "Profil konnte nicht gelöscht werden",
+    failedToDeleteProfileDesc: "Das Episodenprofil konnte nicht entfernt werden.",
+    profileDuplicated: "Profil dupliziert",
+    profileDuplicatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich dupliziert.",
+    failedToDuplicateProfile: "Profil konnte nicht dupliziert werden",
+    episodeDeleted: "Episode gelöscht",
+    episodeDeletedDesc: "Die Episode wurde erfolgreich gelöscht.",
+    failedToDeleteEpisode: "Episode konnte nicht gelöscht werden",
+    failedToDeleteSpeakerDesc: "Das Sprecherprofil konnte nicht entfernt werden.",
+    outlineModel: "Gliederungsmodell",
+    transcriptModel: "Transkriptmodell",
+    segments: "Segmente",
+    defaultBriefingTitle: "Standard-Briefing",
+    created: "Erstellt am {time}",
+    details: "Details",
+    summaryTab: "Zusammenfassung",
+    outlineTab: "Gliederung",
+    transcriptTab: "Transkript",
+    briefing: "Briefing",
+    noOutline: "Keine Gliederung verfügbar.",
+    noTranscript: "Kein Transkript verfügbar.",
+    deleteEpisodeTitle: "Episode löschen?",
+    deleteEpisodeDesc: "Dadurch werden „{name}“ und die zugehörige Audiodatei dauerhaft entfernt.",
+    audioUnavailable: "Audio nicht verfügbar",
+    segment: "Abschnitt",
+    speaker: "Sprecher",
+    profile: "Profil",
+    link: "Link",
+    file: "Datei",
+    embedded: "Eingebettet",
+    notEmbedded: "Nicht eingebettet",
+    noSpeakerProfilesAvailable: "Keine Sprecherprofile verfügbar",
+    editEpisodeProfile: "Episodenprofil bearbeiten",
+    createEpisodeProfile: "Episodenprofil erstellen",
+    episodeProfileFormDesc: "Lege fest, wie Episoden erzeugt werden sollen und welche Sprecherkonfiguration standardmäßig verwendet wird.",
+    noSpeakerProfilesDesc: "Erstelle ein Sprecherprofil, bevor du ein Episodenprofil konfigurierst.",
+    profileName: "Profilname",
+    profileNamePlaceholder: "z. B. Technikgespräch",
+    descriptionPlaceholder: "Kurze Zusammenfassung, wann dieses Profil verwendet werden soll",
+    speakerConfig: "Sprecherkonfiguration",
+    selectSpeakerProfile: "Sprecherprofil auswählen",
+    outlineGeneration: "Gliederungserzeugung",
+    transcriptGeneration: "Transkripterzeugung",
+    defaultBriefingPlaceholder: "Beschreibe Struktur, Ton und Ziele für dieses Episodenformat",
+    editSpeakerProfile: "Sprecherprofil bearbeiten",
+    createSpeakerProfile: "Sprecherprofil erstellen",
+    speakerProfileFormDesc: "Konfiguriere Text-to-Speech-Einstellungen und definiere bis zu vier Sprecher.",
+    speakers: "Sprecher",
+    speakersDesc: "Konfiguriere zwischen einer und vier Stimmen für dieses Profil.",
+    addSpeaker: "Sprecher hinzufügen",
+    speakerNumber: "Sprecher {number}",
+    backstoryPlaceholder: "Kurze Biografie oder Kontext für den Sprecher",
+    personalityPlaceholder: "Beschreibe Stil und Ton",
+    outlineModelRequired: "Gliederungsmodell ist erforderlich",
+    transcriptModelRequired: "Transkriptmodell ist erforderlich",
+    defaultBriefingRequired: "Standard-Briefing ist erforderlich",
+    segmentsInteger: "Muss eine ganze Zahl sein",
+    segmentsMin: "Mindestens 3 Segmente",
+    segmentsMax: "Maximal 20 Segmente",
+    voiceIdRequired: "Stimmen-ID ist erforderlich",
+    backstoryRequired: "Hintergrundgeschichte ist erforderlich",
+    personalityRequired: "Persönlichkeit ist erforderlich",
+    speakerCountMin: "Mindestens ein Sprecher ist erforderlich",
+    speakerCountMax: "Du kannst bis zu 4 Sprecher konfigurieren",
+    delete: "Löschen",
+    failedToDelete: "Podcast konnte nicht gelöscht werden",
+    retry: "Erneut versuchen",
+    retrying: "Wird erneut versucht…",
+    retryStarted: "Neuer Versuch gestartet",
+    retryStartedDesc: "Ein neuer Auftrag zur Podcast-Erzeugung wurde eingereicht.",
+    failedToRetry: "Episode konnte nicht erneut versucht werden",
+    errorDetails: "Fehlerdetails",
+    language: "Sprache",
+    languagePlaceholder: "Sprache auswählen (optional)",
+    podcastLanguage: "Podcast-Sprache",
+    selectOutlineModel: "Gliederungsmodell auswählen",
+    selectTranscriptModel: "Transkriptmodell auswählen",
+    voiceModel: "Stimmenmodell",
+    voiceModelRequired: "Stimmenmodell ist erforderlich",
+    selectVoiceModel: "Stimmenmodell auswählen",
+    perSpeakerTtsOverride: "TTS-Überschreibung pro Sprecher (optional)",
+    useProfileDefault: "Profilstandard verwenden",
+    setupRequired: "Einrichtung erforderlich",
+    setupRequiredDesc: "Für einige Profile sind noch keine Modelle konfiguriert. Bearbeite sie und wähle Modelle aus, bevor du Podcasts erzeugst.",
+    notConfigured: "Nicht konfiguriert",
+  },
+  settings: {
+    contentProcessing: "Inhaltsverarbeitung",
+    contentProcessingDesc: "Konfiguriere, wie Dokumente und URLs verarbeitet werden",
+    docEngine: "Engine für Dokumentverarbeitung",
+    docEnginePlaceholder: "Engine für Dokumentverarbeitung auswählen",
+    urlEngine: "Engine für URL-Verarbeitung",
+    urlEnginePlaceholder: "Engine für URL-Verarbeitung auswählen",
+    autoRecommended: "Auto (empfohlen)",
+    simple: "Einfach",
+    docling: "Docling",
+    helpMeChoose: "Hilf mir bei der Auswahl",
+    docHelp: "· Docling ist etwas langsamer, aber genauer, besonders wenn Dokumente Tabellen und Bilder enthalten. · Einfach extrahiert Inhalte aus dem Dokument ohne Formatierung. · Auto (empfohlen) versucht zuerst Docling und fällt bei Bedarf auf Einfach zurück.",
+    firecrawl: "Firecrawl",
+    jina: "Jina",
+    urlHelp: "· Firecrawl ist ein kostenpflichtiger Dienst mit kostenlosem Einstiegstarif und sehr leistungsfähig. · Jina ist ebenfalls eine gute Option und bietet auch einen kostenlosen Einstiegstarif. · Einfach nutzt eine grundlegende HTTP-Extraktion und kann Inhalte auf JavaScript-basierten Websites übersehen. · Auto (empfohlen) versucht zuerst Firecrawl, dann Jina und fällt zuletzt auf Einfach zurück.",
+    embeddingAndSearch: "Embeddings und Suche",
+    embeddingAndSearchDesc: "Konfiguriere Such- und Embedding-Optionen",
+    defaultEmbeddingOption: "Standardoption für Embeddings",
+    embeddingOptionPlaceholder: "Embedding-Option auswählen",
+    ask: "Nachfragen",
+    always: "Immer",
+    never: "Nie",
+    embeddingHelp: "Durch Embeddings lassen sich Inhalte leichter von dir und deinen KI-Agenten finden. Wenn du ein lokales Embedding-Modell verwendest, zum Beispiel Ollama, musst du dir um Kosten keine Sorgen machen und kannst alles einbetten.",
+    fileManagement: "Dateiverwaltung",
+    fileManagementDesc: "Konfiguriere Dateiverarbeitung und Speicheroptionen",
+    autoDeleteFiles: "Dateien automatisch löschen",
+    autoDeletePlaceholder: "Option für automatisches Löschen auswählen",
+    filesHelp: "Nachdem deine Dateien hochgeladen und verarbeitet wurden, werden sie nicht mehr benötigt. Die meisten Nutzer sollten Open Notebook erlauben, hochgeladene Dateien automatisch aus dem Upload-Ordner zu löschen.",
+    loadFailed: "Einstellungen konnten nicht geladen werden",
+  },
+  advanced: {
+    title: "Erweiterte Werkzeuge",
+    desc: "Erweiterte Werkzeuge und Hilfsfunktionen für erfahrene Nutzer",
+    systemInfo: "Systeminformationen",
+    rebuildEmbeddings: "Embeddings neu aufbauen",
+    rebuildEmbeddingsDesc: "Vektorsuchindex für alle Quellen neu aufbauen",
+    currentVersion: "Aktuelle Version",
+    latestVersion: "Neueste Version",
+    status: "Status",
+    updateAvailable: "Version {version} verfügbar",
+    updateAvailableDesc: "Eine neue Version von Open Notebook ist verfügbar.",
+    upToDate: "Aktuell",
+    unknown: "Unbekannt",
+    viewOnGithub: "Auf GitHub ansehen",
+    updateCheckFailed: "Updates konnten nicht geprüft werden. GitHub ist möglicherweise nicht erreichbar.",
+    rebuild: {
+      mode: "Modus für Neuaufbau",
+      existing: "Vorhandene",
+      all: "Alle",
+      existingDesc: "Nur Elemente erneut einbetten, die bereits Embeddings haben (schneller, für Modellwechsel)",
+      allDesc: "Vorhandene Elemente erneut einbetten und Embeddings für Elemente ohne Embeddings erstellen (langsamer, vollständig)",
+      include: "In Neuaufbau einbeziehen",
+      selectOneError: "Bitte wähle mindestens einen Elementtyp für den Neuaufbau aus",
+      starting: "Neuaufbau wird gestartet...",
+      startBtn: "🚀 Neuaufbau starten",
+      queued: "In Warteschlange",
+      running: "Jobs werden übermittelt...",
+      completed: "Jobs übermittelt!",
+      failed: "Fehlgeschlagen",
+      leavePageHint: "Du kannst diese Seite verlassen, da der Vorgang im Hintergrund läuft",
+      startNew: "Neuen Neuaufbau starten",
+      itemsProcessed: "{processed}/{total} Jobs übermittelt ({percent}%)",
+      failedItems: "{count} Jobs konnten nicht übermittelt werden",
+      time: "Zeit",
+      whenToRebuild: "Wann sollte ich Embeddings neu aufbauen?",
+      whenToRebuildAns: "Du solltest Embeddings neu aufbauen, wenn du Modelle wechselst, Versionen aktualisierst, beschädigte Daten korrigierst oder viele Inhalte importiert hast.",
+      howLong: "Wie lange dauert der Neuaufbau?",
+      howLongAns: "Die Verarbeitungszeit hängt von der Anzahl der Elemente, der Modellgeschwindigkeit und den API-Rate-Limits ab. Lokale Modelle sind meist sehr schnell.",
+      isSafe: "Ist der Neuaufbau sicher, während die App verwendet wird?",
+      isSafeAns: "Ja, der Neuaufbau ist sicher! Er löscht keine Inhalte, sondern ersetzt nur Embeddings und behandelt Fehler kontrolliert.",
+    },
+  },
+  transformations: {
+    title: "Transformationen",
+    desc: "Transformationen sind Prompts, mit denen das LLM eine Quelle verarbeitet und Erkenntnisse, Zusammenfassungen usw. extrahiert.",
+    workspace: "Arbeitsbereich auswählen",
+    playground: "Spielwiese",
+    defaultPrompt: "Standard-Prompt für Transformationen",
+    defaultPromptDesc: "Dieser Text wird zu allen deinen Transformations-Prompts hinzugefügt",
+    defaultPromptPlaceholder: "Standardanweisungen für Transformationen eingeben...",
+    listTitle: "Eigene Transformationen",
+    createNew: "Neu erstellen",
+    inputLabel: "Eingabetext",
+    inputPlaceholder: "Text zum Transformieren eingeben...",
+    outputLabel: "Ausgabe",
+    runTest: "Transformation ausführen",
+    running: "Wird ausgeführt...",
+    selectToStart: "Wähle eine Transformation aus, um zu starten",
+    name: "Name",
+    namePlaceholder: "Eindeutige Kennung, z. B. key_topics",
+    titlePlaceholder: "Angezeigter Titel, standardmäßig der Name",
+    promptPlaceholder: "Schreibe den Prompt, der diese Transformation steuert...",
+    descriptionPlaceholder: "Beschreibe, was diese Transformation macht.",
+    suggestDefault: "Standardmäßig bei neuen Quellen vorschlagen",
+    promptHint: "Prompts sollten mit Blick auf den Quellinhalt geschrieben werden. Du kannst das Modell bitten, zusammenzufassen, Erkenntnisse zu extrahieren oder strukturierte Ausgaben wie Tabellen zu erzeugen.",
+    createSuccess: "Transformation erfolgreich erstellt",
+    updateSuccess: "Transformation erfolgreich aktualisiert",
+    deleteSuccess: "Transformation erfolgreich gelöscht",
+    noTransformations: "Noch keine Transformationen",
+    createOne: "Erstelle eine Transformation, um loszulegen",
+    selectModel: "Modell auswählen",
+    deleteConfirm: "Möchtest du diese Transformation wirklich löschen?",
+    model: "Modell",
+    systemPrompt: "System-Prompt",
+    overrideModelDesc: "Überschreibe das Standardmodell für diese Chat-Sitzung. Leer lassen, um den Systemstandard zu verwenden.",
+    sessionUseReplacement: "Diese Sitzung verwendet {name} statt des Standardmodells.",
+    systemDefault: "Systemstandard",
+  },
+  models: {
+    embedding: "Embedding-Modelle",
+    tts: "Text-to-Speech (TTS)",
+    stt: "Speech-to-Text (STT)",
+    apiKey: "API-Schlüssel",
+    deleteSuccess: "Modell erfolgreich gelöscht",
+    saveSuccess: "Modell erfolgreich gespeichert",
+    noModels: "Keine Modelle",
+    discoverModels: "Modelle erkennen",
+    noModelsFound: "Bei diesem Anbieter wurden keine Modelle gefunden",
+    modelType: "Modelltyp",
+    modelTypeHint: "Wähle den Typ der Modelle aus, die du hinzufügen möchtest. Wenn du unterschiedliche Typen benötigst, füge sie in getrennten Durchläufen hinzu.",
+    deleteModel: "Modell löschen",
+    defaultAssignments: "Standardmodell-Zuweisungen",
+    defaultAssignmentsDesc: "Konfiguriere, welche Modelle Open Notebook für verschiedene Zwecke verwendet",
+    missingRequiredModels: "Erforderliche Modelle fehlen: {models}. Open Notebook funktioniert ohne diese möglicherweise nicht korrekt.",
+    selectModelPlaceholder: "Modell auswählen",
+    requiredModelPlaceholder: "⚠️ Erforderlich – Modell auswählen",
+    chatModelLabel: "Chat-Modell",
+    chatModelDesc: "Wird für Chat-Unterhaltungen verwendet",
+    transformationModelLabel: "Transformationsmodell",
+    transformationModelDesc: "Wird für Zusammenfassungen, Erkenntnisse und Transformationen verwendet",
+    toolsModelLabel: "Tool-Modell",
+    toolsModelDesc: "Wird für Function Calling verwendet – OpenAI oder Anthropic empfohlen",
+    largeContextModelLabel: "Modell mit großem Kontextfenster",
+    largeContextModelDesc: "Wird für die Verarbeitung großer Dokumente verwendet – Gemini empfohlen",
+    embeddingModelLabel: "Embedding-Modell",
+    embeddingModelDesc: "Wird für semantische Suche und Vektor-Embeddings verwendet",
+    ttsModelLabel: "Text-to-Speech-Modell",
+    ttsModelDesc: "Wird für die Podcast-Erstellung verwendet",
+    sttModelLabel: "Speech-to-Text-Modell",
+    sttModelDesc: "Wird für Audiotranskription verwendet",
+    embeddingChangeTitle: "Embedding-Modell ändern",
+    embeddingChangeConfirm: "Du bist dabei, dein Embedding-Modell von {from} auf {to} zu ändern.",
+    rebuildRequired: "Wichtig: Neuaufbau erforderlich",
+    rebuildReason: "Wenn du dein Embedding-Modell änderst, müssen alle vorhandenen Embeddings neu aufgebaut werden, damit die Ergebnisse konsistent bleiben. Ohne Neuaufbau können Suchergebnisse falsch oder unvollständig sein.",
+    whatHappensNext: "Was als Nächstes passiert:",
+    step1: "Dein Standard-Embedding-Modell wird aktualisiert",
+    step2: "Vorhandene Embeddings bleiben bis zum Neuaufbau unverändert",
+    step3: "Neue Inhalte verwenden das neue Embedding-Modell",
+    step4: "Du solltest die Embeddings möglichst bald neu aufbauen",
+    proceedToRebuildPrompt: "Möchtest du zur Seite Erweitert wechseln, um den Neuaufbau jetzt zu starten?",
+    changeModelOnly: "Nur Modell ändern",
+    changeAndRebuild: "Ändern & zum Neuaufbau wechseln",
+    autoAssign: "Standardmodelle automatisch zuweisen",
+    autoAssigning: "Wird zugewiesen...",
+    autoAssignSuccess: "{count} Standardmodelle automatisch zugewiesen",
+    autoAssignNoModels: "Keine Modelle zum Zuweisen verfügbar. Bitte synchronisiere zuerst die Modelle.",
+    autoAssignAlreadySet: "Alle Standardmodelle sind bereits konfiguriert",
+    testModel: "Modell testen",
+    testModelSuccess: "Modelltest bestanden",
+    testModelFailed: "Modelltest fehlgeschlagen",
+    searchOrAddModel: "Modell suchen oder Modellnamen eingeben...",
+    addCustomModel: "\"{name}\" hinzufügen",
+  },
+  apiKeys: {
+    title: "KI mit eigenen API-Schlüsseln konfigurieren",
+    description: "Speichere API-Schlüssel sicher in der Datenbank, um KI-Anbieter in Open Notebook zu aktivieren.",
+    encryptionRequired: "Verschlüsselungsschlüssel nicht konfiguriert",
+    encryptionRequiredDescription: "Setze die Umgebungsvariable OPEN_NOTEBOOK_ENCRYPTION_KEY auf eine beliebige geheime Zeichenkette, um API-Schlüssel in der Datenbank speichern zu können.",
+    configured: "Konfiguriert",
+    notConfigured: "Nicht konfiguriert",
+    migrationAvailable: "Umgebungsvariablen erkannt",
+    migrationDescription: "{count} API-Schlüssel sind über Umgebungsvariablen konfiguriert und können zur einfacheren Verwaltung in die Datenbank migriert werden.",
+    migrateToDatabase: "In Datenbank migrieren",
+    migrating: "Wird migriert...",
+    migrationSuccess: "{count} API-Schlüssel erfolgreich migriert",
+    migrationErrors: "{count} Schlüssel konnten nicht migriert werden",
+    migrationNothingToMigrate: "Alle Schlüssel sind bereits in der Datenbank",
+    learnMore: "Erfahre, wie API-Schlüssel konfiguriert werden →",
+    testConnection: "Verbindung testen",
+    testSuccess: "Verbindung erfolgreich",
+    testFailed: "Verbindungstest fehlgeschlagen",
+    syncModels: "Modelle synchronisieren",
+    syncSuccess: "{discovered} Modelle erkannt, {new} neue hinzugefügt",
+    syncNoNew: "{count} Modelle erkannt, alle bereits registriert",
+    syncFailed: "Modelle konnten nicht synchronisiert werden",
+    getApiKey: "API-Schlüssel abrufen",
+    vertexProject: "GCP-Projekt-ID",
+    vertexLocation: "Region",
+    vertexCredentials: "Pfad zur Service-Account-JSON",
+    addConfig: "Konfiguration hinzufügen",
+    editConfig: "Konfiguration bearbeiten",
+    deleteConfig: "Konfiguration löschen",
+    configName: "Konfigurationsname",
+    configNameHint: "Ein beschreibender Name für diese Konfiguration, z. B. 'Produktion' oder 'Entwicklung'",
+    baseUrl: "Basis-URL",
+    baseUrlOverrideHint: "Nur ändern, wenn du den Standard-API-Endpunkt des Anbieters überschreiben musst.",
+    deleteConfigConfirm: "Möchtest du '{name}' wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
+    configSaveSuccess: "Konfiguration erfolgreich gespeichert",
+    configUpdateSuccess: "Konfiguration erfolgreich aktualisiert",
+    configDeleteSuccess: "Konfiguration erfolgreich gelöscht",
+    apiKeyEditHint: "Leer lassen, um den vorhandenen API-Schlüssel beizubehalten",
+    decryptionError: "Entschlüsselungsfehler",
+    decryptionErrorDescription: "Der API-Schlüssel dieser Zugangsdaten konnte nicht entschlüsselt werden. Möglicherweise hat sich der Verschlüsselungsschlüssel geändert. Lösche diese Zugangsdaten und erstelle sie mit dem richtigen Schlüssel neu.",
+  },
+  setupBanner: {
+    encryptionRequired: "Verschlüsselungsschlüssel nicht konfiguriert",
+    encryptionRequiredDescription: "Setze die Umgebungsvariable OPEN_NOTEBOOK_ENCRYPTION_KEY, um Zugangsdaten sicher zu speichern.",
+    migrationAvailable: "API-Key-Migration verfügbar",
+    migrationDescription: "{count} Anbieter haben API-Keys über Umgebungsvariablen gesetzt. Migriere sie zur einfacheren Verwaltung in die Datenbank.",
+    goToSettings: "Zu den Einstellungen",
+    viewDocs: "Dokumentation anzeigen",
+  },
+}
diff --git a/frontend/src/lib/locales/index.ts b/frontend/src/lib/locales/index.ts
index 0ace84ca..9c7163a4 100644
--- a/frontend/src/lib/locales/index.ts
+++ b/frontend/src/lib/locales/index.ts
@@ -8,6 +8,7 @@ import { frFR } from './fr-FR';
 import { ruRU } from './ru-RU';
 import { bnIN } from './bn-IN';
 import { esES } from './es-ES';
+import { deDE } from './de-DE';
 
 export const resources = {
   'zh-CN': { translation: zhCN },
@@ -20,11 +21,12 @@ export const resources = {
   'ru-RU': { translation: ruRU },
   'bn-IN': { translation: bnIN },
   'es-ES': { translation: esES },
+  'de-DE': { translation: deDE },
 } as const;
 
 export type TranslationKeys = typeof enUS;
 
-export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'es-ES';
+export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'es-ES' | 'de-DE';
 
 export type Language = {
   code: LanguageCode;
@@ -42,6 +44,7 @@ export const languages: Language[] = [
   { code: 'ru-RU', label: 'Русский' },
   { code: 'bn-IN', label: 'বাংলা' },
   { code: 'es-ES', label: 'Español' },
+  { code: 'de-DE', label: 'Deutsch' },
 ];
 
-export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, esES };
+export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, esES, deDE };
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index 5fa2f9ba..bb320e1f 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, es, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, es, de, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -14,6 +14,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'ru-RU': ru,
   'bn-IN': bn,
   'es-ES': es,
+  'de-DE': de,
 }
 
 /**

From 76e408f81e86e0dc4c9ae44b1f33976658ebb926 Mon Sep 17 00:00:00 2001
From: Jordi Mas <jmas@softcatala.org>
Date: Fri, 29 May 2026 15:24:06 +0200
Subject: [PATCH 044/345] feat: add Catalan translation to the UI (#674)

* Add Catalan translation

* Add Catalan to the UI

* Typo

* Make Catalan language dynamic

* Fix LanguageToogle

* fix(i18n): restore locale parity after merging main

- Add `common.catalan` to de-DE (the German locale, merged via #794
  before this PR, was missing the key that this PR adds to en-US)
- Add `apiKeys.decryptionError` and `apiKeys.decryptionErrorDescription`
  to ca-ES (these keys were added to en-US after the locale snapshot)

Locale parity test now passes for all locales.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../src/components/common/LanguageToggle.tsx  |   8 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   1 +
 frontend/src/lib/locales/ca-ES/index.ts       | 931 ++++++++++++++++++
 frontend/src/lib/locales/de-DE/index.ts       |   1 +
 frontend/src/lib/locales/en-US/index.ts       |   1 +
 frontend/src/lib/locales/es-ES/index.ts       |   1 +
 frontend/src/lib/locales/fr-FR/index.ts       |   1 +
 frontend/src/lib/locales/index.ts             |   7 +-
 frontend/src/lib/locales/it-IT/index.ts       |   1 +
 frontend/src/lib/locales/ja-JP/index.ts       |   1 +
 frontend/src/lib/locales/pt-BR/index.ts       |   1 +
 frontend/src/lib/locales/ru-RU/index.ts       |   1 +
 frontend/src/lib/locales/zh-CN/index.ts       |   1 +
 frontend/src/lib/locales/zh-TW/index.ts       |   1 +
 frontend/src/lib/utils/date-locale.ts         |   3 +-
 15 files changed, 956 insertions(+), 4 deletions(-)
 create mode 100644 frontend/src/lib/locales/ca-ES/index.ts

diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 005647bb..87d79cc3 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -34,12 +34,18 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         </Button>
       </DropdownMenuTrigger>
       <DropdownMenuContent align="end">
-        <DropdownMenuItem 
+        <DropdownMenuItem
           onClick={() => setLanguage('en-US')}
           className={currentLang === 'en-US' || currentLang.startsWith('en') ? 'bg-accent' : ''}
         >
           <span>{t('common.english')}</span>
         </DropdownMenuItem>
+        <DropdownMenuItem
+          onClick={() => setLanguage('ca-ES')}
+          className={currentLang === 'ca-ES' || currentLang.startsWith('ca') ? 'bg-accent' : ''}
+        >
+          <span>{t('common.catalan')}</span>
+        </DropdownMenuItem>
         <DropdownMenuItem 
           onClick={() => setLanguage('zh-CN')}
           className={currentLang === 'zh-CN' || currentLang.startsWith('zh-Hans') || currentLang === 'zh' ? 'bg-accent' : ''}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 506cf751..75bd3349 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -26,6 +26,7 @@ export const bnIN = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "উৎস",
     notebook: "নোটবুক",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
new file mode 100644
index 00000000..ef9104fb
--- /dev/null
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -0,0 +1,931 @@
+export const caES = {
+  common: {
+    search: "Cerca...",
+    create: "Nou",
+    new: "Nou",
+    cancel: "Cancel·la",
+    delete: "Suprimeix",
+    edit: "Edita",
+    theme: "Tema",
+    signOut: "Tanca la sessió",
+    noMatches: "No s'ha trobat cap coincidència",
+    tryDifferentSearch: "Prova amb un terme de cerca diferent.",
+    light: "Clar",
+    dark: "Fosc",
+    system: "Sistema",
+    loading: "S'està carregant...",
+    note: "Nota",
+    insight: "Anàlisi",
+    newSource: "Font nova",
+    newNotebook: "Quadern nou",
+    newPodcast: "Podcast nou",
+    language: "Idioma",
+    english: "English",
+    chinese: "简体中文",
+    japanese: "日本語",
+    french: "Français",
+    russian: "Русский",
+    bengali: "বাংলা",
+    catalan: "Català",
+    spanish: "Español",
+    source: "Font",
+    notebook: "Quadern",
+    podcast: "Podcast",
+    quickActions: "Accions ràpides",
+    quickActionsDesc: "Navegació, cerca, preguntes, tema",
+    appName: "Open Notebook",
+    add: "Afegeix",
+    remove: "Elimina",
+    confirm: "Confirma",
+    warning: "Avís",
+    error: "Error",
+    success: "Correcte",
+    model: "Model",
+    back: "Enrere",
+    next: "Següent",
+    done: "Fet",
+    processing: "S'està processant...",
+    creating: "S'està creant...",
+    linked: "Enllaçat",
+    adding: "S'està afegint...",
+    addSelected: "Afegeix la selecció",
+    customModel: "Model personalitzat",
+    failed: "ha fallat",
+    current: "Actual",
+    save: "Desa",
+    writeNote: "Escriu una nota",
+    batchMode: "Mode per lots",
+    optional: "Opcional",
+    type: "Tipus",
+    title: "Títol",
+    created: "Creat {time}",
+    updated: "Actualitzat {time}",
+    actions: "Accions",
+    noResults: "Sense resultats",
+    references: "Referències",
+    refreshPage: "Prova de recarregar la pàgina",
+    refresh: "Recarrega",
+    aiGenerated: "Generat per IA",
+    human: "Humà",
+    unknown: "Desconegut",
+    notes: "Notes",
+    chat: "Xat",
+    deleteForever: "Suprimeix per sempre",
+    connectionError: "Error de connexió",
+    unableToConnect: "No es pot connectar al servidor de l'API",
+    retryConnection: "Torna a connectar",
+    diagnosticInfo: "Informació de diagnòstic",
+    version: "Versió",
+    built: "Compilat",
+    apiUrl: "URL de l'API",
+    frontendUrl: "URL del frontal",
+    checkConsoleLogs: "Consulta la consola del navegador per veure els registres detallats (cerca missatges de 🔧 [Config])",
+    yes: "Sí",
+    no: "No",
+    saving: "S'està desant...",
+    description: "Descripció",
+    saveToNote: "Desa a una nota",
+    copyToClipboard: "Copia al porta-retalls",
+    close: "Tanca",
+    insights: "Anàlisis",
+    progress: "Progrés",
+    deleting: "S'està suprimint...",
+    created_label: "Creat",
+    updated_label: "Actualitzat",
+    download: "Baixa",
+    saveChanges: "Desa els canvis",
+    name: "Nom",
+    default: "Per defecte",
+    nameRequired: "El nom és obligatori",
+    modelConfiguration: "Configuració del model",
+    resetToDefault: "Restableix els valors per defecte",
+    reasoning: "Raonament",
+    searchTerms: "Termes de cerca",
+    strategy: "Estratègia",
+    individualAnswers: "Respostes individuals ({count})",
+    finalAnswer: "Resposta final",
+    notebookLabel: "Quadern: {name}",
+    itemNotFound: "No s'ha pogut trobar aquest {type}",
+    accessibility: {
+      transformationViews: "Vistes de transformació",
+      searchKB: "Pregunta o cerca a la base de coneixement",
+      enterQuestion: "Introdueix la teva pregunta per a la base de coneixement",
+      enterSearch: "Introdueix la consulta de cerca",
+      searchKBBtn: "Cerca a la base de coneixement",
+      podcastViews: "Vistes de podcast",
+      ytVideo: "Vídeo de YouTube",
+      askResponse: "Resposta a la pregunta",
+      searchNotebooks: "Cerca quaderns",
+    },
+    url: "URL",
+    errorDetails: "Detalls de l'error",
+    editTransformation: "Edita la transformació",
+    retry: "Torna-ho a provar",
+    traditionalChinese: "繁體中文",
+    portuguese: "Português",
+    completed: "completat",
+    saveSuccess: "S'ha desat correctament",
+    contextModes: {
+      off: "No s'inclou al xat",
+      insights: "Només anàlisis",
+      full: "Contingut complet",
+      clickToCycle: "Fes clic per canviar",
+    },
+    clickToEdit: "Fes clic per editar",
+  },
+  apiErrors: {
+    notebookNotFound: "No s'ha trobat el quadern",
+    sourceNotFound: "No s'ha trobat la font",
+    transformationNotFound: "No s'ha trobat la transformació",
+    fileUploadFailed: "Ha fallat la càrrega del fitxer",
+    urlRequired: "Cal una URL per al tipus d'enllaç",
+    contentRequired: "Cal contingut per al tipus de text",
+    invalidSourceType: "Tipus de font no vàlid",
+    processingFailed: "Ha fallat el processament",
+    failedToQueue: "Ha fallat l'addició a la cua de processament",
+    invalidSortBy: "El camp d'ordenació ha de ser 'created' o 'updated'",
+    invalidSortOrder: "L'ordre d'ordenació ha de ser 'asc' o 'desc'",
+    accessDenied: "Accés al fitxer denegat",
+    fileNotFoundOnServer: "No s'ha trobat el fitxer al servidor",
+    searchFailed: "Ha fallat la cerca",
+    askFailed: "Ha fallat la consulta",
+    pleaseEnterQuestion: "Introdueix una pregunta",
+    pleaseConfigureModels: "Configura tots els models necessaris",
+    failedToCreateSession: "Ha fallat la creació de la sessió",
+    failedToUpdateSession: "Ha fallat l'actualització de la sessió",
+    failedToDeleteSession: "Ha fallat la supressió de la sessió",
+    failedToSendMessage: "Ha fallat l'enviament del missatge",
+    unauthorized: "Accés no autoritzat; comprova la teva contrasenya",
+    invalidPassword: "Contrasenya incorrecta",
+    embeddingModelRequired: "Aquesta funció requereix un model d'incrustació. Configura'n un a la secció Models.",
+    strategyModelNotFound: "No s'ha trobat el model d'estratègia",
+    answerModelNotFound: "No s'ha trobat el model de resposta",
+    finalAnswerModelNotFound: "No s'ha trobat el model de resposta final",
+    noAnswerGenerated: "No s'ha pogut generar cap resposta",
+    genericError: "S'ha produït un error inesperat",
+  },
+  connectionErrors: {
+    apiTitle: "No es pot connectar al servidor de l'API",
+    apiDesc: "No s'ha pogut establir connexió amb el servidor de l'API d'Open Notebook",
+    dbTitle: "Ha fallat la connexió amb la base de dades",
+    dbDesc: "El servidor de l'API s'està executant, però no es pot accedir a la base de dades",
+    troubleshooting: "Això normalment significa:",
+    apiUnreachable1: "El servidor de l'API no s'està executant",
+    apiUnreachable2: "El servidor de l'API s'executa en una adreça diferent",
+    apiUnreachable3: "Problemes de connectivitat de xarxa",
+    dbFailed1: "SurrealDB no s'està executant",
+    dbFailed2: "La configuració de la connexió amb la base de dades és incorrecta",
+    dbFailed3: "Problemes de xarxa entre l'API i la base de dades",
+    quickFixes: "Solucions ràpides:",
+    setApiUrl: "Estableix la variable d'entorn API_URL:",
+    checkSurreal: "Comprova si SurrealDB s'està executant:",
+    seeDocumentation: "Per obtenir instruccions detallades de configuració, consulta:",
+    docLink: "Documentació d'Open Notebook",
+    showTechnical: "Mostra els detalls tècnics",
+    attemptedUrl: "URL intentada",
+    message: "Missatge",
+    technicalDetails: "Detalls tècnics",
+    stackTrace: "Traça de la pila",
+    retryLabel: "Torna a connectar",
+    retryHint: "Prem R o fes clic al botó per tornar a connectar",
+    dockerLabel: "Per a Docker",
+    localDevLabel: "Per al desenvolupament local",
+  },
+  auth: {
+    loginTitle: "Open Notebook",
+    loginDesc: "Introdueix la teva contrasenya per accedir a l'aplicació",
+    passwordPlaceholder: "Contrasenya",
+    signingIn: "S'està iniciant la sessió...",
+    signIn: "Inicia la sessió",
+    connectErrorHint: "No es pot connectar al servidor. Comprova si l'API s'està executant.",
+  },
+  navigation: {
+    collect: "Recull",
+    process: "Processa",
+    create: "Crea",
+    manage: "Gestiona",
+    sources: "Fonts",
+    notebooks: "Quaderns",
+    askAndSearch: "Pregunta i cerca",
+    podcasts: "Podcasts",
+    models: "Models",
+    transformations: "Transformacions",
+    transformation: "Transformació",
+    settings: "Configuració",
+    advanced: "Avançat",
+    nav: "Navegació",
+    language: "Canvia l'idioma",
+    theme: "Tema",
+    ask: "Pregunta",
+  },
+  notebooks: {
+    title: "Quaderns",
+    newNotebook: "Quadern nou",
+    searchPlaceholder: "Cerca quaderns...",
+    archived: "Arxivat",
+    archive: "Arxiva",
+    unarchive: "Desarxiva",
+    deleteNotebook: "Suprimeix el quadern",
+    deleteNotebookDesc: "Segur que vols suprimir «{name}»? Aquesta acció no es pot desfer.",
+    deleteNotebookLoading: "S'està carregant la previsualització de la supressió...",
+    deleteNotebookNotes: "Se suprimiran {count} nota(es) de manera permanent.",
+    deleteNotebookNoNotes: "No hi ha notes a suprimir.",
+    deleteNotebookExclusiveSources: "{count} font(s) existeix(en) només en aquest quadern.",
+    deleteNotebookSharedSources: "{count} font(s) es comparteix(en) amb altres quaderns i es desenllaçarà(n).",
+    deleteNotebookNoSources: "No hi ha fonts en aquest quadern.",
+    deleteExclusiveSourcesLabel: "Suprimeix les fonts exclusives",
+    keepExclusiveSourcesLabel: "Desenllaça i conserva",
+    activeNotebooks: "Quaderns actius",
+    archivedNotebooks: "Quaderns arxivats",
+    notFound: "No s'ha trobat el quadern",
+    notFoundDesc: "El quadern sol·licitat no existeix.",
+    updated: "Actualitzat",
+    namePlaceholder: "Nom del quadern",
+    addDescription: "Afegeix una descripció...",
+    noNotesYet: "Encara no hi ha notes",
+    deleteNote: "Suprimeix la nota",
+    deleteNoteConfirm: "Segur que vols suprimir aquesta nota? Aquesta acció no es pot desfer.",
+    noteCreatedSuccess: "S'ha creat la nota correctament",
+    failedToCreateNote: "Ha fallat la creació de la nota",
+    noteUpdatedSuccess: "S'ha actualitzat la nota correctament",
+    failedToUpdateNote: "Ha fallat l'actualització de la nota",
+    noteDeletedSuccess: "S'ha suprimit la nota correctament",
+    failedToDeleteNote: "Ha fallat la supressió de la nota",
+    createNew: "Crea un quadern nou",
+    createNewDesc: "Introdueix un nom i una descripció opcional per començar.",
+    descPlaceholder: "Afegeix aquí més informació sobre aquest quadern...",
+    createSuccess: "S'ha creat el quadern correctament",
+    updateSuccess: "S'ha actualitzat el quadern correctament",
+    deleteSuccess: "S'ha suprimit el quadern correctament",
+  },
+  sources: {
+    title: "Fonts",
+    add: "Afegeix una font",
+    addNew: "Afegeix una font nova",
+    addExisting: "Afegeix una font existent",
+    delete: "Suprimeix la font",
+    statusPreparing: "S'està preparant",
+    statusQueued: "En cua",
+    statusProcessing: "S'està processant",
+    statusCompleted: "Completat",
+    statusFailed: "Ha fallat",
+    statusPreparingDesc: "S'està preparant per al processament",
+    statusQueuedDesc: "Esperant per ser processat",
+    statusProcessingDesc: "S'està processant",
+    statusCompletedDesc: "Processat correctament",
+    statusFailedDesc: "Ha fallat el processament",
+    failedToLoad: "Ha fallat la càrrega de les fonts",
+    allSourcesDesc: "Consulta aquí totes les teves fonts. Pots afegir-ne de noves o gestionar les existents.",
+    allSources: "Totes les fonts",
+    insights: "Anàlisis",
+    yes: "Sí",
+    no: "No",
+    loadingMore: "S'està carregant més...",
+    noSourcesYet: "Encara no hi ha fonts",
+    allSourcesDescShort: "Consulta aquí totes les teves fonts.",
+    cannotSaveNoteNoNotebook: "No es pot desar la nota: l'ID del quadern no està disponible",
+    createFirstSource: "Afegeix la primera font per començar a construir la teva base de coneixement.",
+    deleteSourceConfirm: "Segur que vols suprimir aquesta font?",
+    deleteConfirm: "Segur que vols suprimir aquest element?",
+    deleteConfirmWithTitle: "Segur que vols suprimir «{title}»?",
+    deleteSuccess: "S'ha suprimit la font correctament. Nota: per suprimir el fitxer de l'emmagatzematge, cal activar l'opció «suprimeix el fitxer» a la pàgina de configuració.",
+    failedToDelete: "Ha fallat la supressió de la font",
+    sourceQueued: "Font afegida a la cua",
+    sourceQueuedDesc: "La font s'ha enviat per al processament en segon pla. Pots controlar el progrés a la llista de fonts.",
+    sourceAddedSuccess: "S'ha afegit la font correctament",
+    failedToAddSource: "Ha fallat l'addició de la font",
+    sourceUpdatedSuccess: "S'ha actualitzat la font correctament",
+    failedToUpdateSource: "Ha fallat l'actualització de la font",
+    sourceDeletedSuccess: "S'ha suprimit la font correctament",
+    failedToDeleteSource: "Ha fallat la supressió de la font",
+    fileUploadedSuccess: "S'ha carregat el fitxer correctament",
+    failedToUploadFile: "Ha fallat la càrrega del fitxer",
+    sourceRequeued: "S'ha tornat a afegir la font a la cua",
+    sourceRequeuedDesc: "S'ha tornat a afegir la font a la cua de processament.",
+    failedToRetry: "Ha fallat el reintent",
+    sourcesAddedToNotebook: "S'han afegit {count} font(s) al quadern",
+    failedToAddSourcesToNotebook: "Ha fallat l'addició de fonts al quadern",
+    partialAddSuccess: "S'han afegit {success} font(s); {failed} han fallat",
+    sourceRemovedFromNotebook: "S'ha eliminat la font del quadern correctament",
+    failedToRemoveSourceFromNotebook: "Ha fallat l'eliminació de la font del quadern",
+    removeConfirm: "Segur que vols eliminar-lo del quadern?",
+    checking: "S'està comprovant...",
+    untitledSource: "Font sense títol",
+    maxItems: "màx. {count}",
+    insightsCount: "{count} anàlisis",
+    details: "Detalls",
+    detailsTitle: "Detalls de la font",
+    content: "Contingut",
+    metadata: "Metadades",
+    type: {
+      link: "Enllaç",
+      file: "Fitxer",
+      text: "Text",
+    },
+    id: "ID de la font",
+    topics: "Temes",
+    embedded: "Incrustat",
+    notEmbedded: "No incrustat",
+    embedContent: "Incrusta el contingut",
+    embedding: "S'està incrustant...",
+    alreadyEmbedded: "Ja incrustat",
+    downloadFile: "Baixa el fitxer",
+    fileUnavailable: "Fitxer no disponible",
+    preparing: "S'està preparant...",
+    generateNewInsight: "Genera una anàlisi nova",
+    selectTransformation: "Selecciona una transformació...",
+    noInsightsYet: "Encara no hi ha anàlisis",
+    createFirstInsight: "Crea la primera anàlisi amb una transformació de les que hi ha a dalt",
+    viewInsight: "Visualitza l'anàlisi",
+    deleteInsight: "Suprimeix l'anàlisi",
+    deleteInsightConfirm: "Segur que vols suprimir aquesta anàlisi? Aquesta acció no es pot desfer.",
+    insightGenerationStarted: "S'ha iniciat la generació de l'anàlisi. Apareixerà en breu.",
+    editNote: "Edita la nota",
+    createNote: "Crea una nota",
+    addTitle: "Afegeix un títol...",
+    untitledNote: "Nota sense títol",
+    writeNotePlaceholder: "Escriu el contingut de la nota aquí...",
+    saveNote: "Desa la nota",
+    createNoteBtn: "Crea la nota",
+    createFirstNote: "Crea la primera nota per capturar anàlisis i observacions.",
+    urlLabel: "URL(s) *",
+    fileLabel: "Fitxer(s) *",
+    textContentLabel: "Contingut de text *",
+    enterUrlsPlaceholder: "Introdueix les URL, una per línia\nhttps://exemple.com/article1\nhttps://exemple.com/article2",
+    batchUrlHint: "Enganxa múltiples URL (una per línia) per a la importació per lots",
+    invalidUrlsDetected: "S'han detectat URL no vàlides:",
+    lineLabel: "Línia {line}",
+    fixInvalidUrls: "Corregeix o elimina les URL no vàlides per continuar",
+    selectMultipleFilesHint: "Selecciona múltiples fitxers per a la importació per lots. Compatibles: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimèdia (MP4, MP3, WAV, M4A), Imatges (JPG, PNG), Arxius (ZIP)",
+    selectedFiles: "Fitxers seleccionats:",
+    textPlaceholder: "Enganxa o escriu el contingut aquí...",
+    htmlDetected: "S'ha detectat contingut HTML. Es convertirà a Markdown després del processament.",
+    titlePlaceholder: "Posa un títol descriptiu a la teva font",
+    batchTitlesAuto: "Els títols es generaran automàticament per a cada font.",
+    batchCommonSettings: "S'aplicaran els mateixos quaderns i transformacions a tots els elements.",
+    urlsCount: "{count} URL(s)",
+    filesCount: "{count} fitxer(s)",
+    addSource: "Afegeix una font",
+    notEmbeddedAlert: "Contingut no incrustat",
+    notEmbeddedDesc: "Aquest contingut no s'ha incrustat per a la cerca vectorial. La incrustació habilita capacitats de cerca avançada i millora la descoberta de contingut.",
+    openOnYoutube: "Obre a YouTube",
+    urlCopied: "URL copiada al porta-retalls",
+    viewSource: "Visualitza la font",
+    noInsightSelected: "No s'ha seleccionat cap anàlisi",
+    sourceInsight: "Anàlisi de la font",
+    manageNotebooks: "Gestiona els quaderns",
+    manageNotebooksDesc: "Gestiona quins quaderns contenen aquesta font",
+    noNotebooksAvailable: "No hi ha quaderns disponibles",
+    loadFailed: "Ha fallat la càrrega dels detalls de la font",
+    removeFromNotebook: "Elimina del quadern",
+    retryProcessing: "Torna a processar",
+    deleteSource: "Suprimeix la font",
+    retry: "Reintenta",
+    addExistingTitle: "Afegeix fonts existents",
+    addExistingDesc: "Selecciona fonts existents de tots els teus quaderns per afegir-les a l'actual.",
+    searchPlaceholder: "Cerca fonts per nom o URL...",
+    noNotebooksFound: "No s'ha trobat cap quadern.",
+    showingFirst100: "Es mostren les primeres 100 fonts. Utilitza la cerca per trobar-ne d'específiques.",
+    selectedCount: "{count} fonts seleccionades",
+    added: "Afegit el {date}",
+    addUrl: "Afegeix una URL",
+    uploadFile: "Carrega un fitxer",
+    enterText: "Introdueix text",
+    processDescription: "La IA processarà i analitzarà el contingut.",
+    processingFiles: "S'estan processant els teus fitxers...",
+    titleRequired: "Cal un títol per al contingut de text",
+    titleGenerated: "Si es deixa buit, es generarà un títol a partir del contingut",
+    batchCount: "Es processaran {count} {type}",
+    enableEmbedding: "Activa la incrustació per a la cerca",
+    embeddingDesc: "Permet que aquesta font es trobi en cerques vectorials i consultes d'IA",
+    embeddingAlways: "La incrustació s'activa automàticament",
+    embeddingAlwaysDesc: "La configuració actual permet incrustar sempre el contingut per a la cerca vectorial.",
+    embeddingNever: "La incrustació està desactivada",
+    embeddingNeverDesc: "La configuració actual omet la incrustació. La cerca vectorial no estarà disponible per a aquesta font.",
+    changeInSettings: "Pots canviar-ho a la Configuració",
+    notFound: "No s'ha trobat la font",
+    noContent: "No hi ha contingut disponible",
+    insightsDesc: "Anàlisis generades per l'anàlisi del model",
+    uploadedFile: "Fitxer carregat",
+    fileUnavailableDesc: "Aquest fitxer no està disponible per raons del sistema d'emmagatzematge.",
+    batchSuccess: "S'ha(n) creat {count} font(s) correctament",
+    batchFailed: "Ha fallat la creació de les {count} fonts",
+    batchPartial: "{success} correctes, {failed} fallades",
+    submittingSource: "S'està enviant la font per al processament...",
+    processingBatchSources: "S'estan processant {count} fonts. Això pot trigar uns moments.",
+    processingSource: "S'està processant la teva font. Això pot trigar uns moments.",
+    maxFilesAllowed: "Màxim {count} fitxers per lot",
+  },
+  chat: {
+    sessions: "Sessions",
+    sessionTitlePlaceholder: "Escriu un títol aquí...",
+    noSessions: "Encara no hi ha sessions de xat",
+    deleteSession: "Suprimeix la sessió",
+    deleteSessionDesc: "Segur que vols suprimir aquesta sessió de xat? Aquesta acció no es pot desfer.",
+    sendPlaceholder: "Pregunta qualsevol cosa sobre les teves fonts...",
+    sessionsTitle: "Sessions de xat",
+    chatWith: "Xat amb {name}",
+    startConversation: "Inicia una conversa sobre aquest/a {type}",
+    askQuestions: "Fes preguntes per entendre millor el contingut",
+    pressToSend: "Prem {key} per enviar",
+    model: "Model",
+    createToStart: "Crea una sessió per començar.",
+    chatWithNotebook: "Xat amb el quadern",
+    unableToLoadChat: "No es pot carregar el xat",
+    noDescription: "Sense descripció",
+    startByCreating: "Comença creant el teu primer quadern per organitzar la teva recerca.",
+    messagesCount: "{count} missatges",
+    sessionCreated: "S'ha creat la sessió de xat",
+    sessionUpdated: "S'ha actualitzat la sessió",
+    sessionDeleted: "S'ha suprimit la sessió",
+  },
+  searchPage: {
+    askAndSearch: "Pregunta i cerca",
+    chooseAMode: "Tria un mode",
+    askBeta: "Pregunta (beta)",
+    search: "Cerca",
+    askYourKb: "Pregunta a la teva base de coneixement (beta)",
+    askYourKbDesc: "El model de llenguatge respondrà la teva consulta basant-se en els documents de la teva base de coneixement.",
+    question: "Pregunta",
+    enterQuestionPlaceholder: "Introdueix la teva pregunta...",
+    pressToSubmit: "Prem Cmd/Ctrl+Retorn per enviar",
+    noEmbeddingModel: "No pots usar aquesta funció perquè no tens cap model d'incrustació seleccionat. Configura'n un a la pàgina Models.",
+    usingCustomModels: "Usant models personalitzats",
+    usingDefaultModels: "Usant models per defecte",
+    advanced: "Avançat",
+    strategy: "Estratègia",
+    answer: "Resposta",
+    final: "Final",
+    ask: "Pregunta",
+    processing: "S'està processant...",
+    saveToNotebooks: "Desa als quaderns",
+    searchDesc: "Cerca a la teva base de coneixement paraules clau o conceptes específics",
+    enterSearchPlaceholder: "Introdueix la consulta de cerca...",
+    pressToSearch: "Prem Retorn per cercar",
+    searchType: "Tipus de cerca",
+    vectorSearchWarning: "La cerca vectorial requereix un model d'incrustació. Només està disponible la cerca de text.",
+    textSearch: "Cerca de text",
+    vectorSearch: "Cerca vectorial",
+    searchIn: "Cerca a",
+    searchSources: "Cerca a les fonts",
+    searchNotes: "Cerca a les notes",
+    resultsFound: "S'han trobat {count} resultats",
+    matches: "Coincidències ({count})",
+    noResultsFor: "No s'han trobat resultats per a «{query}»",
+    notSet: "No configurat",
+    saveToNotebook: "Desa al quadern",
+    saveSuccess: "S'ha desat correctament al quadern",
+    saveError: "Ha fallat el desament al quadern",
+    selectNotebook: "Selecciona un quadern",
+    searchAndAsk: "Cerca i pregunta",
+    searchResultsFor: "Resultats de cerca per a «{query}»",
+    askAbout: "Pregunta sobre «{query}»",
+    orSearchKb: "O cerca a la teva base de coneixement",
+    saving: "S'està desant...",
+    advancedModelTitle: "Selecció avançada de models",
+    advancedModelDesc: "Tria models específics per a cada fase del procés de consulta",
+    strategyModel: "Model d'estratègia",
+    answerModel: "Model de resposta",
+    finalAnswerModel: "Model de resposta final",
+    selectStrategyPlaceholder: "Selecciona el model d'estratègia",
+    selectAnswerPlaceholder: "Selecciona el model de resposta",
+    selectFinalPlaceholder: "Selecciona el model de resposta final",
+    saveChanges: "Desa els canvis",
+    processingQuestion: "S'està processant la teva pregunta...",
+  },
+  podcasts: {
+    generateEpisode: "Genera un episodi de podcast",
+    generateEpisodeDesc: "Selecciona el contingut a incloure i configura els detalls de l'episodi abans de generar-lo.",
+    content: "Contingut",
+    contentDesc: "Tria quaderns, fonts i notes per incloure en aquest episodi.",
+    itemsSelected: "{count} elements seleccionats",
+    tokens: "{count} tokens",
+    chars: "{count} caràcters",
+    loadingNotebooks: "S'estan carregant els quaderns...",
+    noNotebooksFoundInPodcasts: "No s'ha trobat cap quadern. Crea un quadern i afegeix contingut abans de generar un podcast.",
+    noContentSelected: "No s'ha seleccionat cap contingut",
+    summary: "Resum",
+    fullContent: "Contingut complet",
+    untitledSource: "Font sense títol",
+    untitledNote: "Nota sense títol",
+    episodeSettings: "Configuració de l'episodi",
+    episodeProfile: "Perfil de l'episodi",
+    episodeProfilePlaceholder: "Selecciona un perfil d'episodi",
+    episodeName: "Nom de l'episodi",
+    episodeNamePlaceholder: "per exemple, La IA i el futur del treball",
+    additionalInstructions: "Instruccions addicionals",
+    instructionsPlaceholder: "Qualsevol consell addicional per afegir al resum de l'episodi...",
+    generating: "S'està generant...",
+    generate: "Genera",
+    hostPlaceholder: "Presentador {number}",
+    profileRequired: "Cal un perfil d'episodi",
+    profileRequiredDesc: "Selecciona un perfil d'episodi abans de generar el podcast.",
+    nameRequired: "Cal el nom de l'episodi",
+    nameRequiredDesc: "Proporciona un nom per a l'episodi.",
+    addContext: "Afegeix context",
+    addContextDesc: "Selecciona almenys una font o nota per incloure a l'episodi.",
+    generationFailed: "Ha fallat la generació del podcast",
+    speakerProfile: "Perfil del locutor",
+    usesSpeakerProfile: "Usa el perfil del locutor",
+    sources: "Fonts",
+    notes: "Notes",
+    noSources: "No hi ha fonts disponibles en aquest quadern.",
+    noNotes: "No hi ha notes disponibles en aquest quadern.",
+    selectMode: "Selecciona el mode",
+    buildContextFailed: "Ha fallat la construcció del context. Revisa les teves seleccions.",
+    podcastTaskStarted: "S'ha iniciat la tasca del podcast",
+    loadingProfiles: "S'estan carregant els perfils d'episodi...",
+    noProfilesFound: "No s'ha trobat cap perfil d'episodi. Crea un perfil d'episodi abans de generar un podcast.",
+    listTitle: "Podcasts",
+    listDesc: "Fes un seguiment dels episodis generats i gestiona els perfils reutilitzables.",
+    chooseAView: "Tria una vista",
+    episodesTab: "Episodis",
+    templatesTab: "Perfils",
+    overviewTitle: "Visió general dels episodis",
+    overviewDesc: "Supervisa els treballs de generació de podcasts i revisa els artefactes finals.",
+    generateBtn: "Genera un podcast",
+    total: "Total",
+    processingLabel: "S'està processant",
+    completedLabel: "Completat",
+    failedLabel: "Ha fallat",
+    pendingLabel: "Pendent",
+    loadErrorTitle: "Ha fallat la càrrega dels episodis",
+    loadErrorDesc: "No s'han pogut obtenir els darrers episodis de podcast. Torna-ho a provar en breu.",
+    loadingEpisodes: "S'estan carregant els episodis…",
+    noEpisodesYet: "Encara no hi ha episodis de podcast. Genera el primer des de les interfícies de xat del quadern o la font.",
+    statusRunningTitle: "S'està processant",
+    statusRunningDesc: "Episodis que estan generant recursos activament.",
+    statusPendingTitle: "En cua / Pendent",
+    statusPendingDesc: "Episodis enviats que esperen per iniciar el processament.",
+    statusCompletedTitle: "Episodis completats",
+    statusCompletedDesc: "Llestos per revisar, baixar o publicar.",
+    statusFailedTitle: "Episodis fallats",
+    statusFailedDesc: "Episodis que han tingut problemes durant la generació.",
+    templatesWorkspaceTitle: "Àrea de treball de perfils",
+    templatesWorkspaceDesc: "Crea configuracions d'episodis i locutors reutilitzables per a una producció de podcasts ràpida.",
+    howTemplatesPowerTitle: "Com els perfils impulsen la generació de podcasts",
+    howTemplatesPowerDesc: "Els perfils divideixen el flux de treball del podcast en dos blocs reutilitzables. Combina'ls quan generis un episodi nou.",
+    episodeProfilesSetFormat: "Els perfils d'episodi defineixen el format",
+    episodeProfilesList1: "Indiquen el nombre de segments i com flueix la narració",
+    episodeProfilesList2: "Seleccionen els models de llenguatge per a la presentació, l'esquema i l'escriptura del guió",
+    episodeProfilesList3: "Emmagatzemen presentacions per defecte perquè cada episodi comenci amb un to coherent",
+    speakerProfilesBringVoices: "Els perfils de locutor donen vida a les veus",
+    speakerProfilesList1: "Selecciona el proveïdor i el model de text a veu",
+    speakerProfilesList2: "Captura la personalitat, la història de fons i les notes de pronunciació per locutor",
+    speakerProfilesList3: "Reutilitza les mateixes veus de presentador o convidat en diferents formats d'episodi",
+    recommendedWorkflow: "Flux de treball recomanat",
+    workflowStep1: "Crea perfils de locutor per a cada veu que necessitis",
+    workflowStep2: "Crea perfils d'episodi que facin referència a aquests locutors pel nom",
+    workflowStep3: "Genera podcasts seleccionant el perfil d'episodi que s'adapti a la narració",
+    workflowHint: "Els perfils d'episodi fan referència als perfils de locutor pel nom, de manera que començar pels locutors evita assignacions de veu mancants més endavant.",
+    failedToLoadTemplates: "Ha fallat la càrrega de les dades dels perfils",
+    failedToLoadTemplatesDesc: "Assegura't que l'API s'està executant i torna-ho a provar. Algunes seccions poden estar incompletes.",
+    loadingTemplates: "S'estan carregant els perfils…",
+    speakerProfilesTitle: "Perfils de locutor",
+    speakerProfilesDesc: "Configura les veus i les personalitats per als episodis generats.",
+    createSpeaker: "Crea un locutor",
+    noSpeakerProfiles: "Encara no hi ha perfils de locutor. Crea'n un per fer disponibles els perfils d'episodi.",
+    noDescription: "No s'ha proporcionat cap descripció.",
+    usedByCount_one: "Usat per 1 episodi",
+    usedByCount_other: "Usat per {count} episodis",
+    usedByCount: "Usat per {count} episodis",
+    unused: "No usat",
+    voiceId: "ID de veu",
+    backstory: "Història de fons",
+    personality: "Personalitat",
+    edit: "Edita",
+    duplicate: "Duplica",
+    deleteSpeakerProfileTitle: "Vols suprimir el perfil del locutor?",
+    deleteSpeakerProfileDesc: "La supressió de «{name}» no es pot desfer.",
+    deleteSpeakerDisabledHint: "Elimina aquest locutor dels perfils d'episodi abans de suprimir-lo.",
+    deleting: "S'està suprimint…",
+    episodeProfilesTitle: "Perfils d'episodi",
+    episodeProfilesDesc: "Defineix la configuració de generació reutilitzable per als teus programes.",
+    createProfile: "Crea un perfil",
+    createSpeakerFirst: "Crea un perfil de locutor abans d'afegir un perfil d'episodi.",
+    noEpisodeProfiles: "Encara no hi ha perfils d'episodi. Crea'n un per iniciar la generació de podcasts.",
+    speakerCreated: "S'ha creat el locutor",
+    speakerCreatedDesc: "El locutor «{name}» s'ha afegit correctament.",
+    failedToCreateSpeaker: "Ha fallat la creació del perfil del locutor",
+    speakerUpdated: "S'ha actualitzat el locutor",
+    speakerUpdatedDesc: "El locutor «{name}» s'ha actualitzat correctament.",
+    failedToUpdateSpeaker: "Ha fallat l'actualització del perfil del locutor",
+    speakerDeleted: "S'ha suprimit el locutor",
+    speakerDeletedDesc: "El locutor «{name}» s'ha eliminat correctament.",
+    failedToDeleteSpeaker: "Ha fallat la supressió del perfil del locutor",
+    speakerDuplicated: "S'ha duplicat el locutor",
+    speakerDuplicatedDesc: "El locutor «{name}» s'ha duplicat correctament.",
+    failedToDuplicateSpeaker: "Ha fallat la duplicació del perfil del locutor",
+    generationStarted: "S'ha iniciat la generació",
+    generationStartedDesc: "S'ha afegit la generació del podcast a la cua.",
+    failedToStartGeneration: "Ha fallat l'inici de la generació",
+    tryAgainMoment: "Torna-ho a provar en un moment.",
+    deleteProfileTitle: "Vols suprimir el perfil?",
+    deleteProfileDesc: "Això eliminarà «{name}». Els episodis existents conserven les seves dades, però els nous ja no usaran aquesta configuració.",
+    profileCreated: "S'ha creat el perfil",
+    profileCreatedDesc: "El perfil d'episodi «{name}» s'ha creat correctament.",
+    failedToCreateProfile: "Ha fallat la creació del perfil",
+    profileUpdated: "S'ha actualitzat el perfil",
+    profileUpdatedDesc: "El perfil d'episodi «{name}» s'ha actualitzat correctament.",
+    failedToUpdateProfile: "Ha fallat l'actualització del perfil",
+    profileDeleted: "S'ha suprimit el perfil",
+    profileDeletedDesc: "El perfil d'episodi «{name}» s'ha eliminat correctament.",
+    failedToDeleteProfile: "Ha fallat la supressió del perfil",
+    failedToDeleteProfileDesc: "Ha fallat l'eliminació del perfil d'episodi.",
+    profileDuplicated: "S'ha duplicat el perfil",
+    profileDuplicatedDesc: "El perfil d'episodi «{name}» s'ha duplicat correctament.",
+    failedToDuplicateProfile: "Ha fallat la duplicació del perfil",
+    episodeDeleted: "S'ha suprimit l'episodi",
+    episodeDeletedDesc: "L'episodi s'ha eliminat correctament.",
+    failedToDeleteEpisode: "Ha fallat la supressió de l'episodi",
+    failedToDeleteSpeakerDesc: "Ha fallat l'eliminació del perfil del locutor.",
+    outlineModel: "Model d'esquema",
+    transcriptModel: "Model de transcripció",
+    segments: "Segments",
+    defaultBriefingTitle: "Presentació per defecte",
+    created: "Creat el {time}",
+    details: "Detalls",
+    summaryTab: "Resum",
+    outlineTab: "Esquema",
+    transcriptTab: "Transcripció",
+    briefing: "Presentació",
+    noOutline: "No hi ha cap esquema disponible.",
+    noTranscript: "No hi ha cap transcripció disponible.",
+    deleteEpisodeTitle: "Vols suprimir l'episodi?",
+    deleteEpisodeDesc: "Això eliminarà «{name}» i el seu fitxer d'àudio de manera permanent.",
+    audioUnavailable: "Àudio no disponible",
+    segment: "Segment",
+    speaker: "Locutor",
+    profile: "Perfil",
+    link: "Enllaç",
+    file: "Fitxer",
+    embedded: "Incrustat",
+    notEmbedded: "No incrustat",
+    noSpeakerProfilesAvailable: "No hi ha perfils de locutor disponibles",
+    editEpisodeProfile: "Edita el perfil de l'episodi",
+    createEpisodeProfile: "Crea un perfil d'episodi",
+    episodeProfileFormDesc: "Defineix com s'han de generar els episodis i quina configuració de locutor utilitzen per defecte.",
+    noSpeakerProfilesDesc: "Crea un perfil de locutor abans de configurar un perfil d'episodi.",
+    profileName: "Nom del perfil",
+    profileNamePlaceholder: "per exemple, Debat tecnològic",
+    descriptionPlaceholder: "Breu resum de quan usar aquest perfil",
+    speakerConfig: "Configuració del locutor",
+    selectSpeakerProfile: "Selecciona un perfil de locutor",
+    outlineGeneration: "Generació d'esquema",
+    transcriptGeneration: "Generació de transcripció",
+    defaultBriefingPlaceholder: "Descriu l'estructura, el to i els objectius d'aquest format d'episodi",
+    editSpeakerProfile: "Edita el perfil del locutor",
+    createSpeakerProfile: "Crea un perfil de locutor",
+    speakerProfileFormDesc: "Configura els paràmetres de text a veu i defineix fins a quatre locutors.",
+    speakers: "Locutors",
+    speakersDesc: "Configura entre una i quatre veus per a aquest perfil.",
+    addSpeaker: "Afegeix un locutor",
+    speakerNumber: "Locutor {number}",
+    backstoryPlaceholder: "Breu biografia o context del locutor",
+    personalityPlaceholder: "Descriu l'estil i el to",
+    outlineModelRequired: "Cal un model d'esquema",
+    transcriptModelRequired: "Cal un model de transcripció",
+    defaultBriefingRequired: "Cal una presentació per defecte",
+    segmentsInteger: "Ha de ser un nombre enter",
+    segmentsMin: "Almenys 3 segments",
+    segmentsMax: "Màxim 20 segments",
+    voiceIdRequired: "Cal un ID de veu",
+    backstoryRequired: "Cal una història de fons",
+    personalityRequired: "Cal una personalitat",
+    speakerCountMin: "Cal almenys un locutor",
+    speakerCountMax: "Pots configurar fins a 4 locutors",
+    delete: "Suprimeix",
+    failedToDelete: "Ha fallat la supressió del podcast",
+    retry: "Reintenta",
+    retrying: "S'està reintentant…",
+    retryStarted: "S'ha iniciat el reintent",
+    retryStartedDesc: "S'ha enviat un nou treball de generació de podcast.",
+    failedToRetry: "Ha fallat el reintent de l'episodi",
+    errorDetails: "Detalls de l'error",
+    language: "Idioma",
+    languagePlaceholder: "Selecciona un idioma (opcional)",
+    podcastLanguage: "Idioma del podcast",
+    selectOutlineModel: "Selecciona el model d'esquema",
+    selectTranscriptModel: "Selecciona el model de transcripció",
+    voiceModel: "Model de veu",
+    voiceModelRequired: "Cal un model de veu",
+    selectVoiceModel: "Selecciona el model de veu",
+    perSpeakerTtsOverride: "Substitució de TTS per locutor (opcional)",
+    useProfileDefault: "Usa el valor per defecte del perfil",
+    setupRequired: "Cal configuració",
+    setupRequiredDesc: "Alguns perfils encara no tenen models configurats. Edita'ls per seleccionar models abans de generar podcasts.",
+    notConfigured: "No configurat",
+  },
+  settings: {
+    contentProcessing: "Processament de contingut",
+    contentProcessingDesc: "Configura com es processen els documents i les URL",
+    docEngine: "Motor de processament de documents",
+    docEnginePlaceholder: "Selecciona el motor de processament de documents",
+    urlEngine: "Motor de processament d'URL",
+    urlEnginePlaceholder: "Selecciona el motor de processament d'URL",
+    autoRecommended: "Automàtic (recomanat)",
+    simple: "Simple",
+    docling: "Docling",
+    helpMeChoose: "Ajuda'm a triar",
+    docHelp: "· Docling és una mica més lent però més precís, especialment si els documents contenen taules i imatges. · Simple extreu qualsevol contingut del document sense donar-li format. · Automàtic (recomanat) intentarà processar amb docling i, si falla, usarà simple.",
+    firecrawl: "Firecrawl",
+    jina: "Jina",
+    urlHelp: "· Firecrawl és un servei de pagament (amb nivell gratuït) i és molt potent. · Jina és una bona opció i també té un nivell gratuït. · Simple usarà l'extracció HTTP bàsica i no podrà accedir al contingut de llocs web basats en JavaScript. · Automàtic (recomanat) intentarà usar Firecrawl, després Jina i, finalment, usarà simple.",
+    embeddingAndSearch: "Incrustació i cerca",
+    embeddingAndSearchDesc: "Configura les opcions de cerca i incrustació",
+    defaultEmbeddingOption: "Opció d'incrustació per defecte",
+    embeddingOptionPlaceholder: "Selecciona l'opció d'incrustació",
+    ask: "Pregunta",
+    always: "Sempre",
+    never: "Mai",
+    embeddingHelp: "La incrustació del contingut facilita que tu i els teus agents d'IA el trobeu. Si estàs executant un model d'incrustació local (Ollama, per exemple), no t'has de preocupar pel cost i pots incrustar-ho tot.",
+    fileManagement: "Gestió de fitxers",
+    fileManagementDesc: "Configura el maneig de fitxers i les opcions d'emmagatzematge",
+    autoDeleteFiles: "Supressió automàtica de fitxers",
+    autoDeletePlaceholder: "Selecciona l'opció de supressió automàtica",
+    filesHelp: "Un cop els fitxers s'han carregat i processat, ja no calen. La majoria d'usuaris haurien de permetre que Open Notebook suprimeixi automàticament els fitxers carregats de la carpeta de càrrega.",
+    loadFailed: "Ha fallat la càrrega de la configuració",
+  },
+  advanced: {
+    title: "Eines avançades",
+    desc: "Eines i utilitats avançades per a usuaris experimentats",
+    systemInfo: "Informació del sistema",
+    rebuildEmbeddings: "Reconstrueix les incrustacions",
+    rebuildEmbeddingsDesc: "Reconstrueix l'índex de cerca vectorial per a totes les fonts",
+    currentVersion: "Versió actual",
+    latestVersion: "Darrera versió",
+    status: "Estat",
+    updateAvailable: "La versió {version} és disponible",
+    updateAvailableDesc: "Hi ha una nova versió d'Open Notebook disponible.",
+    upToDate: "Actualitzat",
+    unknown: "Desconegut",
+    viewOnGithub: "Visualitza a GitHub",
+    updateCheckFailed: "No es pot comprovar si hi ha actualitzacions. És possible que GitHub no sigui accessible.",
+    rebuild: {
+      mode: "Mode de reconstrucció",
+      existing: "Existent",
+      all: "Tot",
+      existingDesc: "Torna a incrustar només els elements que ja tenen incrustacions (més ràpid, per al canvi de model)",
+      allDesc: "Torna a incrustar els elements existents + crea incrustacions per als elements sense cap (més lent, exhaustiu)",
+      include: "Inclou a la reconstrucció",
+      selectOneError: "Selecciona almenys un tipus d'element per reconstruir",
+      starting: "S'està iniciant la reconstrucció...",
+      startBtn: "🚀 Inicia la reconstrucció",
+      queued: "En cua",
+      running: "S'estan enviant treballs...",
+      completed: "Treballs enviats!",
+      failed: "Ha fallat",
+      leavePageHint: "Pots abandonar aquesta pàgina, ja que s'executarà en segon pla",
+      startNew: "Inicia una reconstrucció nova",
+      itemsProcessed: "{processed}/{total} treballs enviats ({percent}%)",
+      failedItems: "No s'han pogut enviar {count} treballs",
+      time: "Temps",
+      whenToRebuild: "Quan hauria de reconstruir les incrustacions?",
+      whenToRebuildAns: "Hauries de reconstruir quan canviïs de model, actualitzis versions, corregeixis danys o després d'importacions massives.",
+      howLong: "Quant de temps triga la reconstrucció?",
+      howLongAns: "El temps de processament depèn del nombre d'elements, la velocitat del model i els límits de taxa de l'API. Els models locals solen ser molt ràpids.",
+      isSafe: "És segur reconstruir mentre s'usa l'aplicació?",
+      isSafeAns: "Sí, la reconstrucció és segura! No suprimeix el contingut, només substitueix les incrustacions, i gestiona els errors correctament.",
+    },
+  },
+  transformations: {
+    title: "Transformacions",
+    desc: "Les transformacions són instruccions que el model de llenguatge usarà per processar una font i extreure'n anàlisis, resums, etc.",
+    workspace: "Tria una àrea de treball",
+    playground: "Camp de proves",
+    defaultPrompt: "Instrucció de transformació per defecte",
+    defaultPromptDesc: "S'afegirà a totes les teves instruccions de transformació",
+    defaultPromptPlaceholder: "Introdueix les instruccions de transformació per defecte...",
+    listTitle: "Transformacions personalitzades",
+    createNew: "Crea de nova",
+    inputLabel: "Text d'entrada",
+    inputPlaceholder: "Introdueix algun text per transformar...",
+    outputLabel: "Sortida",
+    runTest: "Executa la transformació",
+    running: "S'està executant...",
+    selectToStart: "Selecciona una transformació per començar",
+    name: "Nom",
+    namePlaceholder: "Identificador únic, p. ex. temes_clau",
+    titlePlaceholder: "Títol visualitzat, el nom per defecte",
+    promptPlaceholder: "Escriu la instrucció que alimentarà aquesta transformació...",
+    descriptionPlaceholder: "Descriu què fa aquesta transformació.",
+    suggestDefault: "Suggerir per defecte a les fonts noves",
+    promptHint: "Les instruccions s'han d'escriure tenint en compte el contingut de la font. Pots demanar al model que resumeixi, extregui anàlisis o produeixi sortides estructurades com taules.",
+    createSuccess: "S'ha creat la transformació correctament",
+    updateSuccess: "S'ha actualitzat la transformació correctament",
+    deleteSuccess: "S'ha suprimit la transformació correctament",
+    noTransformations: "Encara no hi ha transformacions",
+    createOne: "Crea una transformació per començar",
+    selectModel: "Selecciona un model",
+    deleteConfirm: "Segur que vols suprimir aquesta transformació?",
+    model: "Model",
+    systemPrompt: "Instrucció del sistema",
+    overrideModelDesc: "Substitueix el model per defecte per a aquesta sessió de xat. Deixa-ho buit per usar el valor per defecte del sistema.",
+    sessionUseReplacement: "Aquesta sessió usarà {name} en lloc del model per defecte.",
+    systemDefault: "Valor per defecte del sistema",
+  },
+  models: {
+    embedding: "Models d'incrustació",
+    tts: "Text a veu (TTS)",
+    stt: "Veu a text (STT)",
+    apiKey: "Clau de l'API",
+    deleteSuccess: "S'ha suprimit el model correctament",
+    saveSuccess: "S'ha desat el model correctament",
+    noModels: "Sense models",
+    discoverModels: "Descobreix models",
+    noModelsFound: "No s'ha trobat cap model d'aquest proveïdor",
+    modelType: "Tipus de model",
+    modelTypeHint: "Selecciona el tipus per als models que vols afegir. Si necessites tipus diferents, afegeix-los en lots separats.",
+    deleteModel: "Suprimeix el model",
+    defaultAssignments: "Assignacions de model per defecte",
+    defaultAssignmentsDesc: "Configura quins models s'usaran per a diferents propòsits a Open Notebook",
+    missingRequiredModels: "Falten models obligatoris: {models}. Open Notebook pot no funcionar correctament sense aquests.",
+    selectModelPlaceholder: "Selecciona un model",
+    requiredModelPlaceholder: "⚠️ Obligatori - Selecciona un model",
+    chatModelLabel: "Model de xat",
+    chatModelDesc: "S'usa per a les converses de xat",
+    transformationModelLabel: "Model de transformació",
+    transformationModelDesc: "S'usa per a resums, anàlisis i transformacions",
+    toolsModelLabel: "Model d'eines",
+    toolsModelDesc: "S'usa per a la crida de funcions; es recomana OpenAI o Anthropic",
+    largeContextModelLabel: "Model de context gran",
+    largeContextModelDesc: "S'usa per al processament de documents grans; es recomana Gemini",
+    embeddingModelLabel: "Model d'incrustació",
+    embeddingModelDesc: "S'usa per a la cerca semàntica i les incrustacions vectorials",
+    ttsModelLabel: "Model de text a veu",
+    ttsModelDesc: "S'usa per a la generació de podcasts",
+    sttModelLabel: "Model de veu a text",
+    sttModelDesc: "S'usa per a la transcripció d'àudio",
+    embeddingChangeTitle: "Canvi de model d'incrustació",
+    embeddingChangeConfirm: "Estàs a punt de canviar el model d'incrustació de {from} a {to}.",
+    rebuildRequired: "Important: cal reconstruir",
+    rebuildReason: "El canvi del model d'incrustació requereix reconstruir totes les incrustacions existents per mantenir la coherència. Sense reconstruir, les cerques poden retornar resultats incorrectes o incomplets.",
+    whatHappensNext: "Què passa a continuació:",
+    step1: "S'actualitzarà el model d'incrustació per defecte",
+    step2: "Les incrustacions existents romandran sense canvis fins a la reconstrucció",
+    step3: "El contingut nou usarà el model d'incrustació nou",
+    step4: "Hauries de reconstruir les incrustacions tan aviat com sigui possible",
+    proceedToRebuildPrompt: "Vols continuar a la pàgina Avançat per iniciar la reconstrucció ara?",
+    changeModelOnly: "Canvia només el model",
+    changeAndRebuild: "Canvia i ves a Reconstruir",
+    autoAssign: "Assigna els valors per defecte automàticament",
+    autoAssigning: "S'està assignant...",
+    autoAssignSuccess: "S'han assignat automàticament {count} models per defecte",
+    autoAssignNoModels: "No hi ha models disponibles per assignar. Sincronitza primer els models.",
+    autoAssignAlreadySet: "Tots els models per defecte ja estan configurats",
+    testModel: "Prova el model",
+    testModelSuccess: "La prova del model ha tingut èxit",
+    testModelFailed: "Ha fallat la prova del model",
+    searchOrAddModel: "Cerca o escriu un nom de model...",
+    addCustomModel: "Afegeix «{name}»",
+  },
+  apiKeys: {
+    title: "Configura la teva IA amb les teves pròpies claus de l'API",
+    description: "Emmagatzema les claus de l'API de manera segura a la base de dades per habilitar els proveïdors d'IA a Open Notebook.",
+    encryptionRequired: "Clau de xifratge no configurada",
+    encryptionRequiredDescription: "Estableix la variable d'entorn OPEN_NOTEBOOK_ENCRYPTION_KEY a qualsevol cadena secreta per habilitar l'emmagatzematge de claus de l'API a la base de dades.",
+    configured: "Configurat",
+    notConfigured: "No configurat",
+    migrationAvailable: "S'han detectat variables d'entorn",
+    migrationDescription: "{count} clau(s) de l'API estan configurades mitjançant variables d'entorn i es poden migrar a la base de dades per facilitar-ne la gestió.",
+    migrateToDatabase: "Migra a la base de dades",
+    migrating: "S'està migrant...",
+    migrationSuccess: "S'han migrat correctament {count} clau(es) de l'API",
+    migrationErrors: "{count} clau(es) no s'han pogut migrar",
+    migrationNothingToMigrate: "Totes les claus ja estan a la base de dades",
+    learnMore: "Aprèn a configurar les claus de l'API →",
+    testConnection: "Prova la connexió",
+    testSuccess: "Connexió correcta",
+    testFailed: "Ha fallat la prova de connexió",
+    syncModels: "Sincronitza els models",
+    syncSuccess: "S'han descobert {discovered} models, s'han afegit {new} de nous",
+    syncNoNew: "S'han descobert {count} models, tots ja estan registrats",
+    syncFailed: "Ha fallat la sincronització dels models",
+    getApiKey: "Obtén la clau de l'API",
+    vertexProject: "ID del projecte de GCP",
+    vertexLocation: "Regió",
+    vertexCredentials: "Ruta del JSON del compte de servei",
+    addConfig: "Afegeix una configuració",
+    editConfig: "Edita la configuració",
+    deleteConfig: "Suprimeix la configuració",
+    configName: "Nom de la configuració",
+    configNameHint: "Un nom descriptiu per a aquesta configuració (p. ex., «Producció», «Desenvolupament»)",
+    baseUrl: "URL base",
+    baseUrlOverrideHint: "Canvia-ho només si has de substituir el punt d'accés de l'API per defecte del proveïdor.",
+    deleteConfigConfirm: "Segur que vols suprimir «{name}»? Aquesta acció no es pot desfer.",
+    configSaveSuccess: "S'ha desat la configuració correctament",
+    configUpdateSuccess: "S'ha actualitzat la configuració correctament",
+    configDeleteSuccess: "S'ha suprimit la configuració correctament",
+    apiKeyEditHint: "Deixa-ho en blanc per conservar la clau de l'API existent",
+    decryptionError: "Error de desencriptació",
+    decryptionErrorDescription: "No s'ha pogut desencriptar la clau de l'API d'aquesta credencial. La clau d'encriptació pot haver canviat. Suprimeix aquesta credencial i torna-la a crear amb la clau correcta.",
+  },
+  setupBanner: {
+    encryptionRequired: "Clau de xifratge no configurada",
+    encryptionRequiredDescription: "Estableix la variable d'entorn OPEN_NOTEBOOK_ENCRYPTION_KEY per habilitar l'emmagatzematge segur de credencials.",
+    migrationAvailable: "Migració de clau de l'API disponible",
+    migrationDescription: "{count} proveïdor(s) tenen claus de l'API configurades mitjançant variables d'entorn. Migra-les a la base de dades per facilitar-ne la gestió.",
+    goToSettings: "Ves a la configuració",
+    viewDocs: "Visualitza la documentació",
+  },
+}
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 4c4d7e97..cd371670 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -30,6 +30,7 @@ export const deDE = {
     russian: "Русский",
     bengali: "বাংলা",
     spanish: "Español",
+    catalan: "Català",
     source: "Quelle",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index dc698aa7..e440bc12 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -26,6 +26,7 @@ export const enUS = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Source",
     notebook: "Notebook",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 5796a29b..80db1e3e 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -26,6 +26,7 @@ export const esES = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Fuente",
     notebook: "Cuaderno",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 2dd641d1..1b8371f5 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -26,6 +26,7 @@ export const frFR = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Source",
     notebook: "Carnet",
diff --git a/frontend/src/lib/locales/index.ts b/frontend/src/lib/locales/index.ts
index 9c7163a4..94f4039a 100644
--- a/frontend/src/lib/locales/index.ts
+++ b/frontend/src/lib/locales/index.ts
@@ -7,6 +7,7 @@ import { itIT } from './it-IT';
 import { frFR } from './fr-FR';
 import { ruRU } from './ru-RU';
 import { bnIN } from './bn-IN';
+import { caES } from './ca-ES';
 import { esES } from './es-ES';
 import { deDE } from './de-DE';
 
@@ -20,13 +21,14 @@ export const resources = {
   'fr-FR': { translation: frFR },
   'ru-RU': { translation: ruRU },
   'bn-IN': { translation: bnIN },
+  'ca-ES': { translation: caES },
   'es-ES': { translation: esES },
   'de-DE': { translation: deDE },
 } as const;
 
 export type TranslationKeys = typeof enUS;
 
-export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'es-ES' | 'de-DE';
+export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'ca-ES' | 'es-ES' | 'de-DE';
 
 export type Language = {
   code: LanguageCode;
@@ -35,6 +37,7 @@ export type Language = {
 
 export const languages: Language[] = [
   { code: 'en-US', label: 'English' },
+  { code: 'ca-ES', label: 'Català' },
   { code: 'zh-CN', label: '简体中文' },
   { code: 'zh-TW', label: '繁體中文' },
   { code: 'pt-BR', label: 'Português' },
@@ -47,4 +50,4 @@ export const languages: Language[] = [
   { code: 'de-DE', label: 'Deutsch' },
 ];
 
-export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, esES, deDE };
+export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, caES, esES, deDE };
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 916846d9..d79b509a 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -26,6 +26,7 @@ export const itIT = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Fonte",
     notebook: "Quaderno",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 9a5dfa20..65c2e2dc 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -26,6 +26,7 @@ export const jaJP = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "ソース",
     notebook: "ノートブック",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index d3f66c06..d9973b8a 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -26,6 +26,7 @@ export const ptBR = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Fonte",
     notebook: "Caderno",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index fece9fd6..034a7689 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -26,6 +26,7 @@ export const ruRU = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "Источник",
     notebook: "Блокнот",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index fa0c4e4d..89c32239 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -26,6 +26,7 @@ export const zhCN = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "来源",
     notebook: "笔记本",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 25f26fb1..9c80ab1f 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -26,6 +26,7 @@ export const zhTW = {
     french: "Français",
     russian: "Русский",
     bengali: "বাংলা",
+    catalan: "Català",
     spanish: "Español",
     source: "來源",
     notebook: "筆記本",
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index bb320e1f..f559a040 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, es, de, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -13,6 +13,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'fr-FR': fr,
   'ru-RU': ru,
   'bn-IN': bn,
+  'ca-ES': ca,
   'es-ES': es,
   'de-DE': de,
 }

From 5e432b1f2358f8a01d38d9b1c156b793759ecc0e Mon Sep 17 00:00:00 2001
From: fromnewcoder <140929306+fromnewcoder@users.noreply.github.com>
Date: Fri, 29 May 2026 21:30:52 +0800
Subject: [PATCH 045/345] docs: add external Ollama setup guide (#812)

* docs: add external Ollama setup guide

Add guide for users who have Ollama installed separately and don't
want Docker to run the Ollama service. Includes connection instructions
for host.docker.internal routing.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* chore: remove obsolete test for Ollama embeddings API

* chore: remove ARCHITECTURE_DIAGRAMS.md file

---------

Co-authored-by: jjay <jjay@gmail.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
---
 docs/0-START-HERE/index.md                    |   2 +
 .../quick-start-external-ollama.md            | 212 ++++++++++++++++++
 docs/0-START-HERE/quick-start-local.md        |   4 +-
 3 files changed, 216 insertions(+), 2 deletions(-)
 create mode 100644 docs/0-START-HERE/quick-start-external-ollama.md

diff --git a/docs/0-START-HERE/index.md b/docs/0-START-HERE/index.md
index 3d7c9855..e422e2f6 100644
--- a/docs/0-START-HERE/index.md
+++ b/docs/0-START-HERE/index.md
@@ -23,6 +23,8 @@
 
 → [Local Quick Start](quick-start-local.md)
 
+**Already have Ollama installed?** → [External Ollama Guide](quick-start-external-ollama.md)
+
 ---
 
 ## What Can You Do?
diff --git a/docs/0-START-HERE/quick-start-external-ollama.md b/docs/0-START-HERE/quick-start-external-ollama.md
new file mode 100644
index 00000000..6db464f3
--- /dev/null
+++ b/docs/0-START-HERE/quick-start-external-ollama.md
@@ -0,0 +1,212 @@
+# Quick Start - External Ollama
+
+Run Open Notebook with a **separately installed Ollama** (not via Docker). This avoids Docker running the Ollama service while you use your own local Ollama installation.
+
+## Prerequisites
+
+1. **Docker Desktop** installed (for SurrealDB and Open Notebook)
+   - [Download here](https://www.docker.com/products/docker-desktop/)
+
+2. **Ollama** installed separately
+   - [Download here](https://ollama.ai/)
+   - Verify: run `ollama --version`
+
+3. **Models downloaded** in Ollama:
+   ```bash
+   ollama pull mistral
+   ollama pull nomic-embed-text
+   ```
+
+---
+
+## Step 1: Start Ollama (1 min)
+
+Start the Ollama server:
+
+```bash
+# Default: runs on http://localhost:11434
+ollama serve
+```
+
+Keep this terminal open. Ollama will run in the background.
+
+**Optional: Start Ollama on a custom port or network interface:**
+```bash
+OLLAMA_HOST=0.0.0.0:11434 ollama serve
+```
+
+---
+
+## Step 2: Create Configuration (1 min)
+
+Create a new folder `open-notebook-external-ollama` and add these files:
+
+**docker-compose.yml**:
+```yaml
+services:
+  surrealdb:
+    image: surrealdb/surrealdb:v2
+    command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    user: root
+    ports:
+      - "8000:8000"
+    volumes:
+      - ./surreal_data:/mydata
+
+  open_notebook:
+    image: lfnovo/open_notebook:v1-latest
+    pull_policy: always
+    ports:
+      - "8502:8502"  # Web UI (React frontend)
+      - "5055:5055"  # API (required!)
+    environment:
+      # Encryption key for credential storage (required)
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
+
+      # Database (required)
+      - SURREAL_URL=ws://surrealdb:8000/rpc
+      - SURREAL_USER=root
+      - SURREAL_PASSWORD=password
+      - SURREAL_NAMESPACE=open_notebook
+      - SURREAL_DATABASE=open_notebook
+    volumes:
+      - ./notebook_data:/app/data
+    depends_on:
+      - surrealdb
+    restart: always
+
+```
+
+**Note:** No Ollama service in Docker — we use the host's Ollama.
+
+---
+
+## Step 3: Connect Open Notebook to Host Ollama (1 min)
+
+When Open Notebook runs inside Docker, it cannot reach `localhost:11434` on your host directly. Use the special hostname:
+
+| Host OS | Ollama URL in Open Notebook |
+|---------|----------------------------|
+| Linux | `http://host.containers.internal:11434` |
+| macOS | `http://host.docker.internal:11434` |
+| Windows | `http://host.docker.internal:11434` |
+
+---
+
+## Step 4: Start Open Notebook (1 min)
+
+Open terminal in your `open-notebook-external-ollama` folder:
+
+```bash
+docker compose up -d
+```
+
+Wait 10-15 seconds for services to start.
+
+---
+
+## Step 5: Configure Ollama Provider (1 min)
+
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential**
+3. Select provider: **Ollama**
+4. Give it a name (e.g., "Local Ollama")
+5. Enter the base URL:
+   - **Windows/macOS:** `http://host.docker.internal:11434`
+   - **Linux:** `http://host.containers.internal:11434`
+6. Click **Save**
+7. Click **Test Connection** — should show success
+8. Click **Discover Models** → **Register Models**
+
+---
+
+## Step 6: Configure Models (1 min)
+
+1. Go to **Settings** → **Models**
+2. Set:
+   - **Language Model**: `ollama/mistral` (or whichever model you downloaded)
+   - **Embedding Model**: `ollama/nomic-embed-text`
+3. Click **Save**
+
+---
+
+## Step 7: Access Open Notebook (instant)
+
+Open your browser:
+```
+http://localhost:8502
+```
+
+---
+
+## Verification Checklist
+
+- [ ] Ollama is running (`ollama serve` in terminal)
+- [ ] Docker is running
+- [ ] You can access `http://localhost:8502`
+- [ ] Ollama credential is configured with host URL and tested
+- [ ] Models are registered
+- [ ] Chat works
+
+---
+
+## Troubleshooting
+
+### "Connection failed" when testing Ollama credential
+
+1. Verify Ollama is running:
+   ```bash
+   curl http://localhost:11434/api/version
+   ```
+
+2. Check firewall allows local connections on port 11434
+
+3. For Windows/macOS, ensure `host.docker.internal` is reachable from inside the container:
+   ```bash
+   docker exec <open_notebook_container> curl http://host.docker.internal:11434/api/version
+   ```
+
+### Ollama not starting
+
+```bash
+# Check Ollama logs
+ollama list
+
+# Pull a model again
+ollama pull mistral
+```
+
+### "Address already in use" for SurrealDB
+
+```bash
+docker compose down
+docker compose up -d
+```
+
+---
+
+## Why External Ollama?
+
+| Approach | Ollama in Docker | Ollama External |
+|----------|-----------------|-----------------|
+| **Resource isolation** | Separated | Shares with host |
+| **GPU access** | Requires Docker GPU setup | Native GPU access |
+| **Model management** | Via `docker exec` | Via terminal directly |
+| **Memory usage** | Isolated from host | Shared with host apps |
+
+**External Ollama** is recommended if you:
+- Already have Ollama installed and configured
+- Want GPU access without Docker GPU passthrough complexity
+- Prefer managing models via command line directly
+
+---
+
+## Going Further
+
+- **Add more models**: Run `ollama pull <model>`, then re-discover from Open Notebook
+- **Check Ollama status**: `ollama list` shows downloaded models
+- **Customize Ollama**: Edit `~/.ollama/config.yaml` for advanced settings
+
+---
+
+**Need Help?** Join our [Discord community](https://discord.gg/37XJPXfz2w)
diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index dc6b34f8..b933e4a1 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -2,6 +2,8 @@
 
 Get Open Notebook running with **100% local AI** using Ollama. No cloud API keys needed, completely private.
 
+**Already have Ollama installed?** See [External Ollama Guide](quick-start-external-ollama.md) instead.
+
 ## Prerequisites
 
 1. **Docker Desktop** installed
@@ -258,8 +260,6 @@ docker exec open-notebook-local-ollama-1 ollama pull neural-chat
 4. **Scale Up**: Deploy to a server with better hardware for faster responses
 5. **Benchmark Models**: Try different models to find the speed/quality tradeoff you prefer
 
----
-
 ## Alternative: Using LM Studio Instead of Ollama
 
 **Prefer a GUI?** LM Studio is easier for non-technical users:

From 1d45ca2ef99d2cd58e847fc9d56f09438d45877f Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 29 May 2026 10:39:31 -0300
Subject: [PATCH 046/345] fix(i18n): use t('common.german') for language toggle
 label (#814)

Follow-up to #794. Adds the `german: "Deutsch"` key to every locale and
switches the language toggle from a hardcoded `<span>Deutsch</span>` to
`<span>{t('common.german')}</span>`, matching the pattern used by every
other language entry.
---
 CHANGELOG.md                                      | 3 +++
 frontend/src/components/common/LanguageToggle.tsx | 2 +-
 frontend/src/lib/locales/bn-IN/index.ts           | 1 +
 frontend/src/lib/locales/ca-ES/index.ts           | 1 +
 frontend/src/lib/locales/de-DE/index.ts           | 1 +
 frontend/src/lib/locales/en-US/index.ts           | 1 +
 frontend/src/lib/locales/es-ES/index.ts           | 1 +
 frontend/src/lib/locales/fr-FR/index.ts           | 1 +
 frontend/src/lib/locales/it-IT/index.ts           | 1 +
 frontend/src/lib/locales/ja-JP/index.ts           | 1 +
 frontend/src/lib/locales/pt-BR/index.ts           | 1 +
 frontend/src/lib/locales/ru-RU/index.ts           | 1 +
 frontend/src/lib/locales/zh-CN/index.ts           | 1 +
 frontend/src/lib/locales/zh-TW/index.ts           | 1 +
 14 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9ded2a54..96b70bd3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` environment variable to override the embedding batch size; default remains `50`. Helps with CPU-only local embedding and stricter OpenAI-compatible endpoints (#735)
 - `CORS_ORIGINS` environment variable to configure the API's allowed origins (comma-separated). Default remains `*` for backward compatibility; the API now logs a startup warning prompting users to set it for production deployments. Exception responses honor the configured origins when explicitly set (#585, #597, #730)
 
+### Fixed
+- Language toggle now uses `t('common.german')` instead of a hardcoded "Deutsch" label, matching the pattern used by every other language entry (follow-up to #794)
+
 ## [1.8.5] - 2026-04-14
 
 ### Changed
diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 87d79cc3..aba3b2b5 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -98,7 +98,7 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
           onClick={() => setLanguage('de-DE')}
           className={currentLang === 'de-DE' || currentLang.startsWith('de') ? 'bg-accent' : ''}
         >
-          <span>Deutsch</span>
+          <span>{t('common.german')}</span>
         </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 75bd3349..b77e5547 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -28,6 +28,7 @@ export const bnIN = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "উৎস",
     notebook: "নোটবুক",
     podcast: "পডকাস্ট",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index ef9104fb..f9700755 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -28,6 +28,7 @@ export const caES = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Font",
     notebook: "Quadern",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index cd371670..a918b91e 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -31,6 +31,7 @@ export const deDE = {
     bengali: "বাংলা",
     spanish: "Español",
     catalan: "Català",
+    german: "Deutsch",
     source: "Quelle",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index e440bc12..3dec54ed 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -28,6 +28,7 @@ export const enUS = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Source",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 80db1e3e..3bd55959 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -28,6 +28,7 @@ export const esES = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Fuente",
     notebook: "Cuaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 1b8371f5..c73d0dc5 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -28,6 +28,7 @@ export const frFR = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Source",
     notebook: "Carnet",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index d79b509a..40270e72 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -28,6 +28,7 @@ export const itIT = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Fonte",
     notebook: "Quaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 65c2e2dc..a1b087d4 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -28,6 +28,7 @@ export const jaJP = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "ソース",
     notebook: "ノートブック",
     podcast: "ポッドキャスト",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index d9973b8a..3d8eb90a 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -28,6 +28,7 @@ export const ptBR = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Fonte",
     notebook: "Caderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 034a7689..bc956719 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -28,6 +28,7 @@ export const ruRU = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "Источник",
     notebook: "Блокнот",
     podcast: "Подкаст",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 89c32239..99dfe838 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -28,6 +28,7 @@ export const zhCN = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "来源",
     notebook: "笔记本",
     podcast: "播客",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 9c80ab1f..6be7b5c8 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -28,6 +28,7 @@ export const zhTW = {
     bengali: "বাংলা",
     catalan: "Català",
     spanish: "Español",
+    german: "Deutsch",
     source: "來源",
     notebook: "筆記本",
     podcast: "播客",

From df0ab5f4d783362ea5d76f8ea06cec46649901b9 Mon Sep 17 00:00:00 2001
From: Norbert <norbert.walczak92@gmail.com>
Date: Fri, 29 May 2026 16:01:03 +0200
Subject: [PATCH 047/345] feat: add Polish (pl-PL) UI locale (#817)

- Add frontend/src/lib/locales/pl-PL/index.ts with full Polish translations (16 sections)
- Register pl-PL in locales/index.ts (label Polski)
- Add Polish date handling in date-locale.ts (date-fns pl)
- Add Polish to the language toggle (LanguageToggle.tsx)
- No changes to default prompts, transformations, migrations or app behavior

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../src/components/common/LanguageToggle.tsx  |   6 +
 frontend/src/lib/locales/bn-IN/index.ts       |   1 +
 frontend/src/lib/locales/ca-ES/index.ts       |   1 +
 frontend/src/lib/locales/de-DE/index.ts       |   1 +
 frontend/src/lib/locales/en-US/index.ts       |   1 +
 frontend/src/lib/locales/es-ES/index.ts       |   1 +
 frontend/src/lib/locales/fr-FR/index.ts       |   1 +
 frontend/src/lib/locales/index.ts             |   7 +-
 frontend/src/lib/locales/it-IT/index.ts       |   1 +
 frontend/src/lib/locales/ja-JP/index.ts       |   1 +
 frontend/src/lib/locales/pl-PL/index.ts       | 933 ++++++++++++++++++
 frontend/src/lib/locales/pt-BR/index.ts       |   1 +
 frontend/src/lib/locales/ru-RU/index.ts       |   1 +
 frontend/src/lib/locales/zh-CN/index.ts       |   1 +
 frontend/src/lib/locales/zh-TW/index.ts       |   1 +
 frontend/src/lib/utils/date-locale.ts         |   3 +-
 16 files changed, 958 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/lib/locales/pl-PL/index.ts

diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index aba3b2b5..8c435319 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -100,6 +100,12 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         >
           <span>{t('common.german')}</span>
         </DropdownMenuItem>
+        <DropdownMenuItem
+          onClick={() => setLanguage('pl-PL')}
+          className={currentLang === 'pl-PL' || currentLang.startsWith('pl') ? 'bg-accent' : ''}
+        >
+          <span>{t('common.polish')}</span>
+        </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index b77e5547..ca7705d6 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -29,6 +29,7 @@ export const bnIN = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "উৎস",
     notebook: "নোটবুক",
     podcast: "পডকাস্ট",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index f9700755..7fbf4d7a 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -29,6 +29,7 @@ export const caES = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Font",
     notebook: "Quadern",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index a918b91e..2fd97bb8 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -32,6 +32,7 @@ export const deDE = {
     spanish: "Español",
     catalan: "Català",
     german: "Deutsch",
+    polish: "Polski",
     source: "Quelle",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 3dec54ed..94b1f520 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -29,6 +29,7 @@ export const enUS = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Source",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 3bd55959..ec870478 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -29,6 +29,7 @@ export const esES = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Fuente",
     notebook: "Cuaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index c73d0dc5..b0a2ac63 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -29,6 +29,7 @@ export const frFR = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Source",
     notebook: "Carnet",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/index.ts b/frontend/src/lib/locales/index.ts
index 94f4039a..edd1b1f9 100644
--- a/frontend/src/lib/locales/index.ts
+++ b/frontend/src/lib/locales/index.ts
@@ -10,6 +10,7 @@ import { bnIN } from './bn-IN';
 import { caES } from './ca-ES';
 import { esES } from './es-ES';
 import { deDE } from './de-DE';
+import { plPL } from './pl-PL';
 
 export const resources = {
   'zh-CN': { translation: zhCN },
@@ -24,11 +25,12 @@ export const resources = {
   'ca-ES': { translation: caES },
   'es-ES': { translation: esES },
   'de-DE': { translation: deDE },
+  'pl-PL': { translation: plPL },
 } as const;
 
 export type TranslationKeys = typeof enUS;
 
-export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'ca-ES' | 'es-ES' | 'de-DE';
+export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'ca-ES' | 'es-ES' | 'de-DE' | 'pl-PL';
 
 export type Language = {
   code: LanguageCode;
@@ -48,6 +50,7 @@ export const languages: Language[] = [
   { code: 'bn-IN', label: 'বাংলা' },
   { code: 'es-ES', label: 'Español' },
   { code: 'de-DE', label: 'Deutsch' },
+  { code: 'pl-PL', label: 'Polski' },
 ];
 
-export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, caES, esES, deDE };
+export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, caES, esES, deDE, plPL };
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 40270e72..af20466b 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -29,6 +29,7 @@ export const itIT = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Fonte",
     notebook: "Quaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index a1b087d4..7aec9a6d 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -29,6 +29,7 @@ export const jaJP = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "ソース",
     notebook: "ノートブック",
     podcast: "ポッドキャスト",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
new file mode 100644
index 00000000..7ca46f2e
--- /dev/null
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -0,0 +1,933 @@
+export const plPL = {
+  common: {
+    search: "Szukaj...",
+    create: "Nowy",
+    new: "Nowy",
+    cancel: "Anuluj",
+    delete: "Usuń",
+    edit: "Edytuj",
+    theme: "Motyw",
+    signOut: "Wyloguj się",
+    noMatches: "Brak pasujących wyników",
+    tryDifferentSearch: "Spróbuj użyć innego hasła wyszukiwania.",
+    light: "Jasny",
+    dark: "Ciemny",
+    system: "Systemowy",
+    loading: "Ładowanie...",
+    note: "Notatka",
+    insight: "Wgląd",
+    newSource: "Nowe źródło",
+    newNotebook: "Nowy notatnik",
+    newPodcast: "Nowy podcast",
+    language: "Język",
+    english: "Angielski",
+    chinese: "Chiński (uproszczony)",
+    japanese: "Japoński",
+    french: "Francuski",
+    russian: "Rosyjski",
+    bengali: "Bengalski",
+    spanish: "Hiszpański",
+    catalan: "Kataloński",
+    german: "Niemiecki",
+    polish: "Polski",
+    source: "Źródło",
+    notebook: "Notatnik",
+    podcast: "Podcast",
+    quickActions: "Szybkie akcje",
+    quickActionsDesc: "Nawigacja, wyszukiwanie, pytania, motyw",
+    appName: "Open Notebook",
+    add: "Dodaj",
+    remove: "Usuń",
+    confirm: "Potwierdź",
+    warning: "Ostrzeżenie",
+    error: "Błąd",
+    success: "Sukces",
+    model: "Model",
+    back: "Wstecz",
+    next: "Dalej",
+    done: "Gotowe",
+    processing: "Przetwarzanie...",
+    creating: "Tworzenie...",
+    linked: "Powiązane",
+    adding: "Dodawanie...",
+    addSelected: "Dodaj zaznaczone",
+    customModel: "Model niestandardowy",
+    failed: "niepowodzenie",
+    current: "Bieżący",
+    save: "Zapisz",
+    writeNote: "Napisz notatkę",
+    batchMode: "Tryb wsadowy",
+    optional: "Opcjonalne",
+    type: "Typ",
+    title: "Tytuł",
+    created: "Utworzono {time}",
+    updated: "Zaktualizowano {time}",
+    actions: "Akcje",
+    noResults: "Brak wyników",
+    references: "Odwołania",
+    refreshPage: "Spróbuj odświeżyć stronę",
+    refresh: "Odśwież",
+    aiGenerated: "Wygenerowane przez AI",
+    human: "Człowiek",
+    unknown: "Nieznane",
+    notes: "Notatki",
+    chat: "Czat",
+    deleteForever: "Usuń trwale",
+    connectionError: "Błąd połączenia",
+    unableToConnect: "Nie można połączyć się z serwerem API",
+    retryConnection: "Ponów połączenie",
+    diagnosticInfo: "Informacje diagnostyczne",
+    version: "Wersja",
+    built: "Zbudowano",
+    apiUrl: "Adres URL API",
+    frontendUrl: "Adres URL frontendu",
+    checkConsoleLogs: "Sprawdź konsolę przeglądarki, aby uzyskać szczegółowe logi (szukaj komunikatów 🔧 [Config])",
+    yes: "Tak",
+    no: "Nie",
+    saving: "Zapisywanie...",
+    description: "Opis",
+    saveToNote: "Zapisz do notatki",
+    copyToClipboard: "Kopiuj do schowka",
+    close: "Zamknij",
+    insights: "Wglądy",
+    progress: "Postęp",
+    deleting: "Usuwanie...",
+    created_label: "Utworzono",
+    updated_label: "Zaktualizowano",
+    download: "Pobierz",
+    saveChanges: "Zapisz zmiany",
+    name: "Nazwa",
+    default: "Domyślny",
+    nameRequired: "Nazwa jest wymagana",
+    modelConfiguration: "Konfiguracja modelu",
+    resetToDefault: "Przywróć domyślne",
+    reasoning: "Rozumowanie",
+    searchTerms: "Hasła wyszukiwania",
+    strategy: "Strategia",
+    individualAnswers: "Pojedyncze odpowiedzi ({count})",
+    finalAnswer: "Ostateczna odpowiedź",
+    notebookLabel: "Notatnik: {name}",
+    itemNotFound: "Nie udało się odnaleźć elementu ({type})",
+    accessibility: {
+      transformationViews: "Widoki transformacji",
+      searchKB: "Zadaj pytanie lub przeszukaj swoją bazę wiedzy",
+      enterQuestion: "Wpisz pytanie, aby zapytać bazę wiedzy",
+      enterSearch: "Wpisz zapytanie wyszukiwania",
+      searchKBBtn: "Przeszukaj bazę wiedzy",
+      podcastViews: "Widoki podcastów",
+      ytVideo: "Film w serwisie YouTube",
+      askResponse: "Odpowiedź na pytanie",
+      searchNotebooks: "Przeszukaj notatniki",
+    },
+    url: "URL",
+    errorDetails: "Szczegóły błędu",
+    editTransformation: "Edytuj transformację",
+    retry: "Spróbuj ponownie",
+    traditionalChinese: "Chiński (tradycyjny)",
+    portuguese: "Portugalski",
+    completed: "zakończono",
+    saveSuccess: "Zapisano pomyślnie",
+    contextModes: {
+      off: "Nieuwzględniane w czacie",
+      insights: "Tylko wglądy",
+      full: "Pełna treść",
+      clickToCycle: "Kliknij, aby przełączyć",
+    },
+    clickToEdit: "Kliknij, aby edytować",
+  },
+  apiErrors: {
+    notebookNotFound: "Nie znaleziono notatnika",
+    sourceNotFound: "Nie znaleziono źródła",
+    transformationNotFound: "Nie znaleziono transformacji",
+    fileUploadFailed: "Przesyłanie pliku nie powiodło się",
+    urlRequired: "Adres URL jest wymagany dla typu „link”",
+    contentRequired: "Treść jest wymagana dla typu „tekst”",
+    invalidSourceType: "Nieprawidłowy typ źródła",
+    processingFailed: "Przetwarzanie nie powiodło się",
+    failedToQueue: "Nie udało się dodać do kolejki przetwarzania",
+    invalidSortBy: "Pole sortowania musi mieć wartość „created” lub „updated”",
+    invalidSortOrder: "Kolejność sortowania musi mieć wartość „asc” lub „desc”",
+    accessDenied: "Odmowa dostępu do pliku",
+    fileNotFoundOnServer: "Nie znaleziono pliku na serwerze",
+    searchFailed: "Wyszukiwanie nie powiodło się",
+    askFailed: "Zapytanie nie powiodło się",
+    pleaseEnterQuestion: "Wpisz pytanie",
+    pleaseConfigureModels: "Skonfiguruj wszystkie wymagane modele",
+    failedToCreateSession: "Nie udało się utworzyć sesji",
+    failedToUpdateSession: "Nie udało się zaktualizować sesji",
+    failedToDeleteSession: "Nie udało się usunąć sesji",
+    failedToSendMessage: "Nie udało się wysłać wiadomości",
+    unauthorized: "Brak autoryzacji, sprawdź swoje hasło",
+    invalidPassword: "Nieprawidłowe hasło",
+    embeddingModelRequired: "Ta funkcja wymaga modelu osadzania. Skonfiguruj go w sekcji Modele.",
+    strategyModelNotFound: "Nie znaleziono modelu strategii",
+    answerModelNotFound: "Nie znaleziono modelu odpowiedzi",
+    finalAnswerModelNotFound: "Nie znaleziono modelu ostatecznej odpowiedzi",
+    noAnswerGenerated: "Nie udało się wygenerować odpowiedzi",
+    genericError: "Wystąpił nieoczekiwany błąd",
+  },
+  connectionErrors: {
+    apiTitle: "Nie można połączyć się z serwerem API",
+    apiDesc: "Nie udało się nawiązać połączenia z serwerem API Open Notebook",
+    dbTitle: "Połączenie z bazą danych nie powiodło się",
+    dbDesc: "Serwer API działa, ale baza danych jest niedostępna",
+    troubleshooting: "Zwykle oznacza to, że:",
+    apiUnreachable1: "Serwer API nie jest uruchomiony",
+    apiUnreachable2: "Serwer API działa pod innym adresem",
+    apiUnreachable3: "Problemy z łącznością sieciową",
+    dbFailed1: "SurrealDB nie jest uruchomiony",
+    dbFailed2: "Ustawienia połączenia z bazą danych są nieprawidłowe",
+    dbFailed3: "Problemy sieciowe między API a bazą danych",
+    quickFixes: "Szybkie rozwiązania:",
+    setApiUrl: "Ustaw zmienną środowiskową API_URL:",
+    checkSurreal: "Sprawdź, czy SurrealDB jest uruchomiony:",
+    seeDocumentation: "Szczegółowe instrukcje konfiguracji znajdziesz tutaj:",
+    docLink: "Dokumentacja Open Notebook",
+    showTechnical: "Pokaż szczegóły techniczne",
+    attemptedUrl: "Próbowany adres URL",
+    message: "Komunikat",
+    technicalDetails: "Szczegóły techniczne",
+    stackTrace: "Ślad stosu",
+    retryLabel: "Ponów połączenie",
+    retryHint: "Naciśnij R lub kliknij przycisk, aby spróbować ponownie",
+    dockerLabel: "Dla Dockera",
+    localDevLabel: "Dla środowiska lokalnego",
+  },
+  auth: {
+    loginTitle: "Open Notebook",
+    loginDesc: "Wpisz hasło, aby uzyskać dostęp do aplikacji",
+    passwordPlaceholder: "Hasło",
+    signingIn: "Logowanie...",
+    signIn: "Zaloguj się",
+    connectErrorHint: "Nie można połączyć się z serwerem. Sprawdź, czy API jest uruchomione.",
+  },
+  navigation: {
+    collect: "Zbieraj",
+    process: "Przetwarzaj",
+    create: "Twórz",
+    manage: "Zarządzaj",
+    sources: "Źródła",
+    notebooks: "Notatniki",
+    askAndSearch: "Pytaj i szukaj",
+    podcasts: "Podcasty",
+    models: "Modele",
+    transformations: "Transformacje",
+    transformation: "Transformacja",
+    settings: "Ustawienia",
+    advanced: "Zaawansowane",
+    nav: "Nawigacja",
+    language: "Przełącz język",
+    theme: "Motyw",
+    ask: "Pytaj",
+  },
+  notebooks: {
+    title: "Notatniki",
+    newNotebook: "Nowy notatnik",
+    searchPlaceholder: "Szukaj notatników...",
+    archived: "Zarchiwizowane",
+    archive: "Archiwizuj",
+    unarchive: "Przywróć z archiwum",
+    deleteNotebook: "Usuń notatnik",
+    deleteNotebookDesc: "Czy na pewno chcesz usunąć „{name}”? Tej operacji nie można cofnąć.",
+    deleteNotebookLoading: "Ładowanie podglądu usuwania...",
+    deleteNotebookNotes: "Trwale usuniętych zostanie notatek: {count}.",
+    deleteNotebookNoNotes: "Brak notatek do usunięcia.",
+    deleteNotebookExclusiveSources: "Liczba źródeł istniejących tylko w tym notatniku: {count}.",
+    deleteNotebookSharedSources: "Liczba źródeł współdzielonych z innymi notatnikami, które zostaną odłączone: {count}.",
+    deleteNotebookNoSources: "Brak źródeł w tym notatniku.",
+    deleteExclusiveSourcesLabel: "Usuń źródła wyłączne",
+    keepExclusiveSourcesLabel: "Odłącz i zachowaj je",
+    activeNotebooks: "Aktywne notatniki",
+    archivedNotebooks: "Zarchiwizowane notatniki",
+    notFound: "Nie znaleziono notatnika",
+    notFoundDesc: "Żądany notatnik nie istnieje.",
+    updated: "Zaktualizowano",
+    namePlaceholder: "Nazwa notatnika",
+    addDescription: "Dodaj opis...",
+    noNotesYet: "Brak notatek",
+    deleteNote: "Usuń notatkę",
+    deleteNoteConfirm: "Czy na pewno chcesz usunąć tę notatkę? Tej operacji nie można cofnąć.",
+    noteCreatedSuccess: "Notatka utworzona pomyślnie",
+    failedToCreateNote: "Nie udało się utworzyć notatki",
+    noteUpdatedSuccess: "Notatka zaktualizowana pomyślnie",
+    failedToUpdateNote: "Nie udało się zaktualizować notatki",
+    noteDeletedSuccess: "Notatka usunięta pomyślnie",
+    failedToDeleteNote: "Nie udało się usunąć notatki",
+    createNew: "Utwórz nowy notatnik",
+    createNewDesc: "Wpisz nazwę i opcjonalny opis, aby rozpocząć.",
+    descPlaceholder: "Dodaj tutaj więcej informacji o tym notatniku...",
+    createSuccess: "Notatnik utworzony pomyślnie",
+    updateSuccess: "Notatnik zaktualizowany pomyślnie",
+    deleteSuccess: "Notatnik usunięty pomyślnie",
+  },
+  sources: {
+    title: "Źródła",
+    add: "Dodaj źródło",
+    addNew: "Dodaj nowe źródło",
+    addExisting: "Dodaj istniejące źródło",
+    delete: "Usuń źródło",
+    statusPreparing: "Przygotowywanie",
+    statusQueued: "W kolejce",
+    statusProcessing: "Przetwarzanie",
+    statusCompleted: "Zakończone",
+    statusFailed: "Niepowodzenie",
+    statusPreparingDesc: "Przygotowywanie do przetwarzania",
+    statusQueuedDesc: "Oczekiwanie na przetworzenie",
+    statusProcessingDesc: "Trwa przetwarzanie",
+    statusCompletedDesc: "Przetworzono pomyślnie",
+    statusFailedDesc: "Przetwarzanie nie powiodło się",
+    failedToLoad: "Nie udało się załadować źródeł",
+    allSourcesDesc: "Tutaj zobaczysz wszystkie swoje źródła. Możesz dodawać nowe lub zarządzać istniejącymi.",
+    allSources: "Wszystkie źródła",
+    insights: "Wglądy",
+    yes: "Tak",
+    no: "Nie",
+    loadingMore: "Ładowanie kolejnych...",
+    noSourcesYet: "Brak źródeł",
+    allSourcesDescShort: "Tutaj zobaczysz wszystkie swoje źródła.",
+    cannotSaveNoteNoNotebook: "Nie można zapisać notatki: brak dostępnego identyfikatora notatnika",
+    createFirstSource: "Dodaj pierwsze źródło, aby zacząć budować bazę wiedzy.",
+    deleteSourceConfirm: "Czy na pewno chcesz usunąć to źródło?",
+    deleteConfirm: "Czy na pewno chcesz to usunąć?",
+    deleteConfirmWithTitle: "Czy na pewno chcesz usunąć „{title}”?",
+    deleteSuccess: "Źródło usunięte pomyślnie. Uwaga: aby usunąć plik z magazynu, musisz włączyć opcję „usuń plik” na stronie ustawień.",
+    failedToDelete: "Nie udało się usunąć źródła",
+    sourceQueued: "Źródło w kolejce",
+    sourceQueuedDesc: "Źródło przekazano do przetwarzania w tle. Postęp możesz śledzić na liście źródeł.",
+    sourceAddedSuccess: "Źródło dodane pomyślnie",
+    failedToAddSource: "Nie udało się dodać źródła",
+    sourceUpdatedSuccess: "Źródło zaktualizowane pomyślnie",
+    failedToUpdateSource: "Nie udało się zaktualizować źródła",
+    sourceDeletedSuccess: "Źródło usunięte pomyślnie",
+    failedToDeleteSource: "Nie udało się usunąć źródła",
+    fileUploadedSuccess: "Plik przesłany pomyślnie",
+    failedToUploadFile: "Nie udało się przesłać pliku",
+    sourceRequeued: "Ponowienie źródła w kolejce",
+    sourceRequeuedDesc: "Źródło zostało ponownie dodane do kolejki przetwarzania.",
+    failedToRetry: "Ponowienie nie powiodło się",
+    sourcesAddedToNotebook: "Dodano źródeł do notatnika: {count}",
+    failedToAddSourcesToNotebook: "Nie udało się dodać źródeł do notatnika",
+    partialAddSuccess: "Dodano źródeł: {success}, niepowodzeń: {failed}",
+    sourceRemovedFromNotebook: "Źródło usunięte z notatnika pomyślnie",
+    failedToRemoveSourceFromNotebook: "Nie udało się usunąć źródła z notatnika",
+    removeConfirm: "Czy na pewno chcesz usunąć to z notatnika?",
+    checking: "Sprawdzanie...",
+    untitledSource: "Źródło bez tytułu",
+    maxItems: "maks. {count}",
+    insightsCount: "Wglądy: {count}",
+    details: "Szczegóły",
+    detailsTitle: "Szczegóły źródła",
+    content: "Treść",
+    metadata: "Metadane",
+    type: {
+      link: "Link",
+      file: "Plik",
+      text: "Tekst",
+    },
+    id: "Identyfikator źródła",
+    topics: "Tematy",
+    embedded: "Osadzone",
+    notEmbedded: "Nieosadzone",
+    embedContent: "Osadź treść",
+    embedding: "Osadzanie...",
+    alreadyEmbedded: "Już osadzone",
+    downloadFile: "Pobierz plik",
+    fileUnavailable: "Plik niedostępny",
+    preparing: "Przygotowywanie...",
+    generateNewInsight: "Wygeneruj nowy wgląd",
+    selectTransformation: "Wybierz transformację...",
+    noInsightsYet: "Brak wglądów",
+    createFirstInsight: "Utwórz pierwszy wgląd, korzystając z transformacji powyżej",
+    viewInsight: "Zobacz wgląd",
+    deleteInsight: "Usuń wgląd",
+    deleteInsightConfirm: "Czy na pewno chcesz usunąć ten wgląd? Tej operacji nie można cofnąć.",
+    insightGenerationStarted: "Rozpoczęto generowanie wglądu. Pojawi się wkrótce.",
+    editNote: "Edytuj notatkę",
+    createNote: "Utwórz notatkę",
+    addTitle: "Dodaj tytuł...",
+    untitledNote: "Notatka bez tytułu",
+    writeNotePlaceholder: "Napisz tutaj treść notatki...",
+    saveNote: "Zapisz notatkę",
+    createNoteBtn: "Utwórz notatkę",
+    createFirstNote: "Utwórz pierwszą notatkę, aby zapisać wglądy i obserwacje.",
+    urlLabel: "Adres(y) URL *",
+    fileLabel: "Plik(i) *",
+    textContentLabel: "Treść tekstowa *",
+    enterUrlsPlaceholder: "Wpisz adresy URL, po jednym w wierszu\nhttps://example.com/artykul1\nhttps://example.com/artykul2",
+    batchUrlHint: "Wklej wiele adresów URL (po jednym w wierszu), aby zaimportować je wsadowo",
+    invalidUrlsDetected: "Wykryto nieprawidłowe adresy URL:",
+    lineLabel: "Wiersz {line}",
+    fixInvalidUrls: "Popraw lub usuń nieprawidłowe adresy URL, aby kontynuować",
+    selectMultipleFilesHint: "Wybierz wiele plików, aby zaimportować je wsadowo. Obsługiwane: Dokumenty (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Obrazy (JPG, PNG), Archiwa (ZIP)",
+    selectedFiles: "Wybrane pliki:",
+    textPlaceholder: "Wklej lub wpisz tutaj swoją treść...",
+    htmlDetected: "Wykryto treść HTML. Po przetworzeniu zostanie przekonwertowana na Markdown.",
+    titlePlaceholder: "Nadaj źródłu opisowy tytuł",
+    batchTitlesAuto: "Tytuły zostaną wygenerowane automatycznie dla każdego źródła.",
+    batchCommonSettings: "Te same notatniki i transformacje zostaną zastosowane do wszystkich elementów.",
+    urlsCount: "Liczba adresów URL: {count}",
+    filesCount: "Liczba plików: {count}",
+    addSource: "Dodaj źródło",
+    notEmbeddedAlert: "Treść nieosadzona",
+    notEmbeddedDesc: "Ta treść nie została osadzona na potrzeby wyszukiwania wektorowego. Osadzanie umożliwia zaawansowane wyszukiwanie i lepsze odnajdywanie treści.",
+    openOnYoutube: "Otwórz w serwisie YouTube",
+    urlCopied: "Skopiowano adres URL do schowka",
+    viewSource: "Zobacz źródło",
+    noInsightSelected: "Nie wybrano wglądu",
+    sourceInsight: "Wgląd źródła",
+    manageNotebooks: "Zarządzaj notatnikami",
+    manageNotebooksDesc: "Zarządzaj notatnikami, które zawierają to źródło",
+    noNotebooksAvailable: "Brak dostępnych notatników",
+    loadFailed: "Nie udało się załadować szczegółów źródła",
+    removeFromNotebook: "Usuń z notatnika",
+    retryProcessing: "Ponów przetwarzanie",
+    deleteSource: "Usuń źródło",
+    retry: "Ponów",
+    addExistingTitle: "Dodaj istniejące źródła",
+    addExistingDesc: "Wybierz istniejące źródła ze wszystkich notatników, aby dodać je do bieżącego.",
+    searchPlaceholder: "Szukaj źródeł po nazwie lub adresie URL...",
+    noNotebooksFound: "Nie znaleziono notatników.",
+    showingFirst100: "Wyświetlanie pierwszych 100 źródeł. Użyj wyszukiwania, aby znaleźć konkretne.",
+    selectedCount: "Zaznaczono źródeł: {count}",
+    added: "Dodano dnia {date}",
+    addUrl: "Dodaj adres URL",
+    uploadFile: "Prześlij plik",
+    enterText: "Wpisz tekst",
+    processDescription: "Treść zostanie przetworzona i przeanalizowana przez AI.",
+    processingFiles: "Przetwarzanie plików...",
+    titleRequired: "Tytuł jest wymagany dla treści tekstowej",
+    titleGenerated: "Jeśli pozostawisz puste, tytuł zostanie wygenerowany na podstawie treści",
+    batchCount: "Liczba elementów do przetworzenia: {count} {type}",
+    enableEmbedding: "Włącz osadzanie na potrzeby wyszukiwania",
+    embeddingDesc: "Umożliwia odnajdywanie tego źródła w wyszukiwaniu wektorowym i zapytaniach AI",
+    embeddingAlways: "Osadzanie włączane automatycznie",
+    embeddingAlwaysDesc: "Twoje ustawienia są skonfigurowane tak, aby zawsze osadzać treść na potrzeby wyszukiwania wektorowego.",
+    embeddingNever: "Osadzanie wyłączone",
+    embeddingNeverDesc: "Twoje ustawienia są skonfigurowane tak, aby pomijać osadzanie. Wyszukiwanie wektorowe nie będzie dostępne dla tego źródła.",
+    changeInSettings: "Możesz to zmienić w Ustawieniach",
+    notFound: "Nie znaleziono źródła",
+    noContent: "Brak dostępnej treści",
+    insightsDesc: "Wglądy wygenerowane na podstawie analizy modelu",
+    uploadedFile: "Przesłany plik",
+    fileUnavailableDesc: "Ten plik jest obecnie niedostępny z powodów związanych z systemem magazynowania.",
+    batchSuccess: "Utworzono źródeł pomyślnie: {count}",
+    batchFailed: "Nie udało się utworzyć wszystkich źródeł ({count})",
+    batchPartial: "Powodzenia: {success}, niepowodzenia: {failed}",
+    submittingSource: "Przekazywanie źródła do przetwarzania...",
+    processingBatchSources: "Przetwarzanie źródeł: {count}. Może to chwilę potrwać.",
+    processingSource: "Twoje źródło jest przetwarzane. Może to chwilę potrwać.",
+    maxFilesAllowed: "Maksymalna liczba plików w partii: {count}",
+  },
+  chat: {
+    sessions: "Sesje",
+    sessionTitlePlaceholder: "Wpisz tutaj tytuł...",
+    noSessions: "Brak sesji czatu",
+    deleteSession: "Usuń sesję",
+    deleteSessionDesc: "Czy na pewno chcesz usunąć tę sesję czatu? Tej operacji nie można cofnąć.",
+    sendPlaceholder: "Zapytaj o cokolwiek dotyczące swoich źródeł...",
+    sessionsTitle: "Sesje czatu",
+    chatWith: "Czat z {name}",
+    startConversation: "Rozpocznij rozmowę o tym elemencie ({type})",
+    askQuestions: "Zadawaj pytania, aby lepiej zrozumieć treść",
+    pressToSend: "Naciśnij {key}, aby wysłać",
+    model: "Model",
+    createToStart: "Utwórz sesję, aby rozpocząć.",
+    chatWithNotebook: "Czat z notatnikiem",
+    unableToLoadChat: "Nie można załadować czatu",
+    noDescription: "Brak opisu",
+    startByCreating: "Zacznij od utworzenia pierwszego notatnika, aby uporządkować swoje badania.",
+    messagesCount: "Wiadomości: {count}",
+    sessionCreated: "Utworzono sesję czatu",
+    sessionUpdated: "Zaktualizowano sesję",
+    sessionDeleted: "Usunięto sesję",
+  },
+  searchPage: {
+    askAndSearch: "Pytaj i szukaj",
+    chooseAMode: "Wybierz tryb",
+    askBeta: "Pytaj (beta)",
+    search: "Szukaj",
+    askYourKb: "Zapytaj swoją bazę wiedzy (beta)",
+    askYourKbDesc: "Model LLM odpowie na Twoje pytanie na podstawie dokumentów w Twojej bazie wiedzy.",
+    question: "Pytanie",
+    enterQuestionPlaceholder: "Wpisz pytanie...",
+    pressToSubmit: "Naciśnij Cmd/Ctrl+Enter, aby wysłać",
+    noEmbeddingModel: "Nie możesz użyć tej funkcji, ponieważ nie wybrano modelu osadzania. Skonfiguruj go na stronie Modele.",
+    usingCustomModels: "Korzystanie z modeli niestandardowych",
+    usingDefaultModels: "Korzystanie z modeli domyślnych",
+    advanced: "Zaawansowane",
+    strategy: "Strategia",
+    answer: "Odpowiedź",
+    final: "Ostateczna",
+    ask: "Pytaj",
+    processing: "Przetwarzanie...",
+    saveToNotebooks: "Zapisz do notatników",
+    searchDesc: "Przeszukaj swoją bazę wiedzy pod kątem konkretnych słów kluczowych lub pojęć",
+    enterSearchPlaceholder: "Wpisz zapytanie wyszukiwania...",
+    pressToSearch: "Naciśnij Enter, aby wyszukać",
+    searchType: "Typ wyszukiwania",
+    vectorSearchWarning: "Wyszukiwanie wektorowe wymaga modelu osadzania. Dostępne jest tylko wyszukiwanie tekstowe.",
+    textSearch: "Wyszukiwanie tekstowe",
+    vectorSearch: "Wyszukiwanie wektorowe",
+    searchIn: "Szukaj w",
+    searchSources: "Przeszukaj źródła",
+    searchNotes: "Przeszukaj notatki",
+    resultsFound: "Znaleziono wyników: {count}",
+    matches: "Dopasowania ({count})",
+    noResultsFor: "Brak wyników dla „{query}”",
+    notSet: "Nie ustawiono",
+    saveToNotebook: "Zapisz do notatnika",
+    saveSuccess: "Pomyślnie zapisano do notatnika",
+    saveError: "Nie udało się zapisać do notatnika",
+    selectNotebook: "Wybierz notatnik",
+    searchAndAsk: "Szukaj i pytaj",
+    searchResultsFor: "Wyniki wyszukiwania dla „{query}”",
+    askAbout: "Zapytaj o „{query}”",
+    orSearchKb: "Lub przeszukaj swoją bazę wiedzy",
+    saving: "Zapisywanie...",
+    advancedModelTitle: "Zaawansowany wybór modeli",
+    advancedModelDesc: "Wybierz konkretne modele dla każdego etapu procesu Pytania",
+    strategyModel: "Model strategii",
+    answerModel: "Model odpowiedzi",
+    finalAnswerModel: "Model ostatecznej odpowiedzi",
+    selectStrategyPlaceholder: "Wybierz model strategii",
+    selectAnswerPlaceholder: "Wybierz model odpowiedzi",
+    selectFinalPlaceholder: "Wybierz model ostatecznej odpowiedzi",
+    saveChanges: "Zapisz zmiany",
+    processingQuestion: "Przetwarzanie pytania...",
+  },
+  podcasts: {
+    generateEpisode: "Wygeneruj odcinek podcastu",
+    generateEpisodeDesc: "Wybierz treść do uwzględnienia i skonfiguruj szczegóły odcinka przed wygenerowaniem nowego odcinka podcastu.",
+    content: "Treść",
+    contentDesc: "Wybierz notatniki, źródła i notatki, które chcesz uwzględnić w tym odcinku.",
+    itemsSelected: "Zaznaczono elementów: {count}",
+    tokens: "Tokeny: {count}",
+    chars: "Znaki: {count}",
+    loadingNotebooks: "Ładowanie notatników...",
+    noNotebooksFoundInPodcasts: "Nie znaleziono notatników. Utwórz notatnik i dodaj treść przed wygenerowaniem podcastu.",
+    noContentSelected: "Nie wybrano treści",
+    summary: "Podsumowanie",
+    fullContent: "Pełna treść",
+    untitledSource: "Źródło bez tytułu",
+    untitledNote: "Notatka bez tytułu",
+    episodeSettings: "Ustawienia odcinka",
+    episodeProfile: "Profil odcinka",
+    episodeProfilePlaceholder: "Wybierz profil odcinka",
+    episodeName: "Nazwa odcinka",
+    episodeNamePlaceholder: "np. AI i przyszłość pracy",
+    additionalInstructions: "Dodatkowe instrukcje",
+    instructionsPlaceholder: "Dodatkowe wskazówki dołączane do briefingu odcinka...",
+    generating: "Generowanie...",
+    generate: "Generuj",
+    hostPlaceholder: "Prowadzący {number}",
+    profileRequired: "Wymagany profil odcinka",
+    profileRequiredDesc: "Wybierz profil odcinka przed wygenerowaniem podcastu.",
+    nameRequired: "Wymagana nazwa odcinka",
+    nameRequiredDesc: "Podaj nazwę odcinka.",
+    addContext: "Dodaj kontekst",
+    addContextDesc: "Wybierz co najmniej jedno źródło lub notatkę do uwzględnienia w odcinku.",
+    generationFailed: "Generowanie podcastu nie powiodło się",
+    speakerProfile: "Profil mówcy",
+    usesSpeakerProfile: "Używa profilu mówcy",
+    sources: "Źródła",
+    notes: "Notatki",
+    noSources: "Brak dostępnych źródeł w tym notatniku.",
+    noNotes: "Brak dostępnych notatek w tym notatniku.",
+    selectMode: "Wybierz tryb",
+    buildContextFailed: "Nie udało się zbudować kontekstu. Sprawdź swoje zaznaczenia.",
+    podcastTaskStarted: "Zadanie podcastu rozpoczęte",
+    loadingProfiles: "Ładowanie profili odcinków...",
+    noProfilesFound: "Nie znaleziono profili odcinków. Utwórz profil odcinka przed wygenerowaniem podcastu.",
+    listTitle: "Podcasty",
+    listDesc: "Śledź wygenerowane odcinki i zarządzaj wielokrotnego użytku profilami.",
+    chooseAView: "Wybierz widok",
+    episodesTab: "Odcinki",
+    templatesTab: "Profile",
+    overviewTitle: "Przegląd odcinków",
+    overviewDesc: "Monitoruj zadania generowania podcastów i przeglądaj gotowe materiały.",
+    generateBtn: "Wygeneruj podcast",
+    total: "Łącznie",
+    processingLabel: "Przetwarzanie",
+    completedLabel: "Zakończone",
+    failedLabel: "Niepowodzenie",
+    pendingLabel: "Oczekujące",
+    loadErrorTitle: "Nie udało się załadować odcinków",
+    loadErrorDesc: "Nie mogliśmy pobrać najnowszych odcinków podcastu. Spróbuj ponownie za chwilę.",
+    loadingEpisodes: "Ładowanie odcinków…",
+    noEpisodesYet: "Brak odcinków podcastu. Wygeneruj pierwszy z poziomu notatnika lub interfejsu czatu źródła.",
+    statusRunningTitle: "Obecnie przetwarzane",
+    statusRunningDesc: "Odcinki, dla których aktywnie generowane są materiały.",
+    statusPendingTitle: "W kolejce / Oczekujące",
+    statusPendingDesc: "Przesłane odcinki oczekujące na rozpoczęcie przetwarzania.",
+    statusCompletedTitle: "Zakończone odcinki",
+    statusCompletedDesc: "Gotowe do przeglądania, pobrania lub publikacji.",
+    statusFailedTitle: "Nieudane odcinki",
+    statusFailedDesc: "Odcinki, które napotkały problemy podczas generowania.",
+    templatesWorkspaceTitle: "Obszar roboczy profili",
+    templatesWorkspaceDesc: "Twórz wielokrotnego użytku konfiguracje odcinków i mówców na potrzeby szybkiej produkcji podcastów.",
+    howTemplatesPowerTitle: "Jak profile napędzają generowanie podcastów",
+    howTemplatesPowerDesc: "Profile dzielą proces tworzenia podcastu na dwa wielokrotnego użytku elementy. Łącz je dowolnie przy każdym generowaniu nowego odcinka.",
+    episodeProfilesSetFormat: "Profile odcinków ustalają format",
+    episodeProfilesList1: "Określ liczbę segmentów i sposób prowadzenia narracji",
+    episodeProfilesList2: "Wybierz modele językowe używane do briefingu, tworzenia konspektu i pisania scenariusza",
+    episodeProfilesList3: "Zapisz domyślne briefingi, aby każdy odcinek zaczynał się od spójnego tonu",
+    speakerProfilesBringVoices: "Profile mówców ożywiają głosy",
+    speakerProfilesList1: "Wybierz dostawcę i model syntezy mowy",
+    speakerProfilesList2: "Zdefiniuj osobowość, tło i wskazówki dotyczące wymowy dla każdego mówcy",
+    speakerProfilesList3: "Korzystaj z tych samych głosów prowadzących lub gości w różnych formatach odcinków",
+    recommendedWorkflow: "Zalecany przepływ pracy",
+    workflowStep1: "Utwórz profile mówców dla każdego potrzebnego głosu",
+    workflowStep2: "Twórz profile odcinków, które odwołują się do tych mówców po nazwie",
+    workflowStep3: "Generuj podcasty, wybierając profil odcinka pasujący do tematu",
+    workflowHint: "Profile odcinków odwołują się do profili mówców po nazwie, dlatego rozpoczęcie od mówców pozwala uniknąć braków w przypisaniu głosów.",
+    failedToLoadTemplates: "Nie udało się załadować danych profili",
+    failedToLoadTemplatesDesc: "Upewnij się, że API jest uruchomione, i spróbuj ponownie. Niektóre sekcje mogą być niekompletne.",
+    loadingTemplates: "Ładowanie profili…",
+    speakerProfilesTitle: "Profile mówców",
+    speakerProfilesDesc: "Skonfiguruj głosy i osobowości dla generowanych odcinków.",
+    createSpeaker: "Utwórz mówcę",
+    noSpeakerProfiles: "Brak profili mówców. Utwórz jeden, aby udostępnić profile odcinków.",
+    noDescription: "Nie podano opisu.",
+    usedByCount_one: "Używany przez 1 odcinek",
+    usedByCount_other: "Używany przez {count} odcinków",
+    usedByCount: "Używany przez {count} odcinków",
+    unused: "Nieużywany",
+    voiceId: "Identyfikator głosu",
+    backstory: "Tło",
+    personality: "Osobowość",
+    edit: "Edytuj",
+    duplicate: "Duplikuj",
+    deleteSpeakerProfileTitle: "Usunąć profil mówcy?",
+    deleteSpeakerProfileDesc: "Usunięcia „{name}” nie można cofnąć.",
+    deleteSpeakerDisabledHint: "Usuń tego mówcę z profili odcinków, zanim go usuniesz.",
+    deleting: "Usuwanie…",
+    episodeProfilesTitle: "Profile odcinków",
+    episodeProfilesDesc: "Zdefiniuj wielokrotnego użytku ustawienia generowania dla swoich audycji.",
+    createProfile: "Utwórz profil",
+    createSpeakerFirst: "Utwórz profil mówcy przed dodaniem profilu odcinka.",
+    noEpisodeProfiles: "Brak profili odcinków. Utwórz jeden, aby rozpocząć generowanie podcastów.",
+    speakerCreated: "Utworzono mówcę",
+    speakerCreatedDesc: "Mówca „{name}” został pomyślnie dodany.",
+    failedToCreateSpeaker: "Nie udało się utworzyć profilu mówcy",
+    speakerUpdated: "Zaktualizowano mówcę",
+    speakerUpdatedDesc: "Mówca „{name}” został pomyślnie zaktualizowany.",
+    failedToUpdateSpeaker: "Nie udało się zaktualizować profilu mówcy",
+    speakerDeleted: "Usunięto mówcę",
+    speakerDeletedDesc: "Mówca „{name}” został pomyślnie usunięty.",
+    failedToDeleteSpeaker: "Nie udało się usunąć profilu mówcy",
+    speakerDuplicated: "Zduplikowano mówcę",
+    speakerDuplicatedDesc: "Mówca „{name}” został pomyślnie zduplikowany.",
+    failedToDuplicateSpeaker: "Nie udało się zduplikować profilu mówcy",
+    generationStarted: "Rozpoczęto generowanie",
+    generationStartedDesc: "Generowanie podcastu zostało dodane do kolejki.",
+    failedToStartGeneration: "Nie udało się rozpocząć generowania",
+    tryAgainMoment: "Spróbuj ponownie za chwilę.",
+    deleteProfileTitle: "Usunąć profil?",
+    deleteProfileDesc: "Spowoduje to usunięcie „{name}”. Istniejące odcinki zachowają swoje dane, ale nowe nie będą już korzystać z tej konfiguracji.",
+    profileCreated: "Utworzono profil",
+    profileCreatedDesc: "Profil odcinka „{name}” został pomyślnie utworzony.",
+    failedToCreateProfile: "Nie udało się utworzyć profilu",
+    profileUpdated: "Zaktualizowano profil",
+    profileUpdatedDesc: "Profil odcinka „{name}” został pomyślnie zaktualizowany.",
+    failedToUpdateProfile: "Nie udało się zaktualizować profilu",
+    profileDeleted: "Usunięto profil",
+    profileDeletedDesc: "Profil odcinka „{name}” został pomyślnie usunięty.",
+    failedToDeleteProfile: "Nie udało się usunąć profilu",
+    failedToDeleteProfileDesc: "Nie udało się usunąć profilu odcinka.",
+    profileDuplicated: "Zduplikowano profil",
+    profileDuplicatedDesc: "Profil odcinka „{name}” został pomyślnie zduplikowany.",
+    failedToDuplicateProfile: "Nie udało się zduplikować profilu",
+    episodeDeleted: "Usunięto odcinek",
+    episodeDeletedDesc: "Odcinek został pomyślnie usunięty.",
+    failedToDeleteEpisode: "Nie udało się usunąć odcinka",
+    failedToDeleteSpeakerDesc: "Nie udało się usunąć profilu mówcy.",
+    outlineModel: "Model konspektu",
+    transcriptModel: "Model transkrypcji",
+    segments: "Segmenty",
+    defaultBriefingTitle: "Domyślny briefing",
+    created: "Utworzono {time}",
+    details: "Szczegóły",
+    summaryTab: "Podsumowanie",
+    outlineTab: "Konspekt",
+    transcriptTab: "Transkrypcja",
+    briefing: "Briefing",
+    noOutline: "Brak dostępnego konspektu.",
+    noTranscript: "Brak dostępnej transkrypcji.",
+    deleteEpisodeTitle: "Usunąć odcinek?",
+    deleteEpisodeDesc: "Spowoduje to trwałe usunięcie „{name}” i powiązanego pliku audio.",
+    audioUnavailable: "Audio niedostępne",
+    segment: "Segment",
+    speaker: "Mówca",
+    profile: "Profil",
+    link: "Link",
+    file: "Plik",
+    embedded: "Osadzone",
+    notEmbedded: "Nieosadzone",
+    noSpeakerProfilesAvailable: "Brak dostępnych profili mówców",
+    editEpisodeProfile: "Edytuj profil odcinka",
+    createEpisodeProfile: "Utwórz profil odcinka",
+    episodeProfileFormDesc: "Zdefiniuj, jak mają być generowane odcinki i jakiej konfiguracji mówców używają domyślnie.",
+    noSpeakerProfilesDesc: "Utwórz profil mówcy przed skonfigurowaniem profilu odcinka.",
+    profileName: "Nazwa profilu",
+    profileNamePlaceholder: "np. Dyskusja techniczna",
+    descriptionPlaceholder: "Krótkie podsumowanie, kiedy używać tego profilu",
+    speakerConfig: "Konfiguracja mówców",
+    selectSpeakerProfile: "Wybierz profil mówcy",
+    outlineGeneration: "Generowanie konspektu",
+    transcriptGeneration: "Generowanie transkrypcji",
+    defaultBriefingPlaceholder: "Opisz strukturę, ton i cele dla tego formatu odcinka",
+    editSpeakerProfile: "Edytuj profil mówcy",
+    createSpeakerProfile: "Utwórz profil mówcy",
+    speakerProfileFormDesc: "Skonfiguruj ustawienia syntezy mowy i zdefiniuj maksymalnie czterech mówców.",
+    speakers: "Mówcy",
+    speakersDesc: "Skonfiguruj od jednego do czterech głosów dla tego profilu.",
+    addSpeaker: "Dodaj mówcę",
+    speakerNumber: "Mówca {number}",
+    backstoryPlaceholder: "Krótka biografia lub kontekst mówcy",
+    personalityPlaceholder: "Opisz styl i ton",
+    outlineModelRequired: "Model konspektu jest wymagany",
+    transcriptModelRequired: "Model transkrypcji jest wymagany",
+    defaultBriefingRequired: "Domyślny briefing jest wymagany",
+    segmentsInteger: "Musi być liczbą całkowitą",
+    segmentsMin: "Co najmniej 3 segmenty",
+    segmentsMax: "Maksymalnie 20 segmentów",
+    voiceIdRequired: "Identyfikator głosu jest wymagany",
+    backstoryRequired: "Tło jest wymagane",
+    personalityRequired: "Osobowość jest wymagana",
+    speakerCountMin: "Wymagany jest co najmniej jeden mówca",
+    speakerCountMax: "Możesz skonfigurować maksymalnie 4 mówców",
+    delete: "Usuń",
+    failedToDelete: "Nie udało się usunąć podcastu",
+    retry: "Ponów",
+    retrying: "Ponawianie…",
+    retryStarted: "Rozpoczęto ponowienie",
+    retryStartedDesc: "Przesłano nowe zadanie generowania podcastu.",
+    failedToRetry: "Nie udało się ponowić odcinka",
+    errorDetails: "Szczegóły błędu",
+    language: "Język",
+    languagePlaceholder: "Wybierz język (opcjonalnie)",
+    podcastLanguage: "Język podcastu",
+    selectOutlineModel: "Wybierz model konspektu",
+    selectTranscriptModel: "Wybierz model transkrypcji",
+    voiceModel: "Model głosu",
+    voiceModelRequired: "Model głosu jest wymagany",
+    selectVoiceModel: "Wybierz model głosu",
+    perSpeakerTtsOverride: "Nadpisanie TTS dla poszczególnych mówców (opcjonalne)",
+    useProfileDefault: "Użyj domyślnego dla profilu",
+    setupRequired: "Wymagana konfiguracja",
+    setupRequiredDesc: "Niektóre profile nie mają jeszcze skonfigurowanych modeli. Edytuj je, aby wybrać modele przed wygenerowaniem podcastów.",
+    notConfigured: "Nieskonfigurowane",
+  },
+  settings: {
+    contentProcessing: "Przetwarzanie treści",
+    contentProcessingDesc: "Skonfiguruj sposób przetwarzania dokumentów i adresów URL",
+    docEngine: "Silnik przetwarzania dokumentów",
+    docEnginePlaceholder: "Wybierz silnik przetwarzania dokumentów",
+    urlEngine: "Silnik przetwarzania adresów URL",
+    urlEnginePlaceholder: "Wybierz silnik przetwarzania adresów URL",
+    autoRecommended: "Automatyczny (zalecany)",
+    simple: "Prosty",
+    docling: "Docling",
+    helpMeChoose: "Pomóż mi wybrać",
+    docHelp: "· Docling jest nieco wolniejszy, ale dokładniejszy, zwłaszcza gdy dokumenty zawierają tabele i obrazy. · Prosty wyodrębni dowolną treść z dokumentu bez jej formatowania. · Automatyczny (zalecany) spróbuje przetworzyć przez Docling i w razie potrzeby przełączy się na prosty.",
+    firecrawl: "Firecrawl",
+    jina: "Jina",
+    urlHelp: "· Firecrawl to płatna usługa (z darmowym planem), bardzo wydajna. · Jina również jest dobrym wyborem i także ma darmowy plan. · Prosty używa podstawowej ekstrakcji HTTP i pominie treść na stronach opartych na JavaScript. · Automatyczny (zalecany) spróbuje użyć Firecrawl, następnie Jina, a na końcu przełączy się na prosty.",
+    embeddingAndSearch: "Osadzanie i wyszukiwanie",
+    embeddingAndSearchDesc: "Skonfiguruj opcje wyszukiwania i osadzania",
+    defaultEmbeddingOption: "Domyślna opcja osadzania",
+    embeddingOptionPlaceholder: "Wybierz opcję osadzania",
+    ask: "Pytaj",
+    always: "Zawsze",
+    never: "Nigdy",
+    embeddingHelp: "Osadzenie treści ułatwi jej odnajdywanie zarówno Tobie, jak i Twoim agentom AI. Jeśli używasz lokalnego modelu osadzania (na przykład Ollama), nie musisz martwić się o koszty i możesz osadzać wszystko.",
+    fileManagement: "Zarządzanie plikami",
+    fileManagementDesc: "Skonfiguruj opcje obsługi i przechowywania plików",
+    autoDeleteFiles: "Automatyczne usuwanie plików",
+    autoDeletePlaceholder: "Wybierz opcję automatycznego usuwania",
+    filesHelp: "Po przesłaniu i przetworzeniu plików nie są one już potrzebne. Większość użytkowników powinna pozwolić Open Notebook na automatyczne usuwanie przesłanych plików z folderu przesyłania.",
+    loadFailed: "Nie udało się załadować ustawień",
+  },
+  advanced: {
+    title: "Narzędzia zaawansowane",
+    desc: "Zaawansowane narzędzia i funkcje dla zaawansowanych użytkowników",
+    systemInfo: "Informacje o systemie",
+    rebuildEmbeddings: "Przebuduj osadzenia",
+    rebuildEmbeddingsDesc: "Przebuduj indeks wyszukiwania wektorowego dla wszystkich źródeł",
+    currentVersion: "Bieżąca wersja",
+    latestVersion: "Najnowsza wersja",
+    status: "Status",
+    updateAvailable: "Dostępna wersja {version}",
+    updateAvailableDesc: "Dostępna jest nowa wersja Open Notebook.",
+    upToDate: "Aktualna",
+    unknown: "Nieznana",
+    viewOnGithub: "Zobacz na GitHubie",
+    updateCheckFailed: "Nie można sprawdzić aktualizacji. GitHub może być nieosiągalny.",
+    rebuild: {
+      mode: "Tryb przebudowy",
+      existing: "Istniejące",
+      all: "Wszystkie",
+      existingDesc: "Ponownie osadź tylko elementy, które już mają osadzenia (szybsze, przy zmianie modelu)",
+      allDesc: "Ponownie osadź istniejące elementy + utwórz osadzenia dla elementów, które ich nie mają (wolniejsze, kompleksowe)",
+      include: "Uwzględnij w przebudowie",
+      selectOneError: "Wybierz co najmniej jeden typ elementu do przebudowy",
+      starting: "Rozpoczynanie przebudowy...",
+      startBtn: "🚀 Rozpocznij przebudowę",
+      queued: "W kolejce",
+      running: "Przesyłanie zadań...",
+      completed: "Zadania przesłane!",
+      failed: "Niepowodzenie",
+      leavePageHint: "Możesz opuścić tę stronę, ponieważ operacja będzie działać w tle",
+      startNew: "Rozpocznij nową przebudowę",
+      itemsProcessed: "Przesłano zadań: {processed}/{total} ({percent}%)",
+      failedItems: "Nie udało się przesłać zadań: {count}",
+      time: "Czas",
+      whenToRebuild: "Kiedy powinienem przebudować osadzenia?",
+      whenToRebuildAns: "Powinieneś przebudować przy zmianie modeli, aktualizacji wersji, naprawie uszkodzeń lub po imporcie masowym.",
+      howLong: "Jak długo trwa przebudowa?",
+      howLongAns: "Czas przetwarzania zależy od liczby elementów, szybkości modelu i limitów API. Modele lokalne są zwykle bardzo szybkie.",
+      isSafe: "Czy przebudowa podczas korzystania z aplikacji jest bezpieczna?",
+      isSafeAns: "Tak, przebudowa jest bezpieczna! Nie usuwa treści, jedynie zastępuje osadzenia i sprawnie obsługuje błędy.",
+    },
+  },
+  transformations: {
+    title: "Transformacje",
+    desc: "Transformacje to prompty używane przez model LLM do przetwarzania źródła oraz wyodrębniania wglądów, podsumowań itp.",
+    workspace: "Wybierz obszar roboczy",
+    playground: "Piaskownica",
+    defaultPrompt: "Domyślny prompt transformacji",
+    defaultPromptDesc: "Zostanie dodany do wszystkich Twoich promptów transformacji",
+    defaultPromptPlaceholder: "Wpisz swoje domyślne instrukcje transformacji...",
+    listTitle: "Transformacje niestandardowe",
+    createNew: "Utwórz nową",
+    inputLabel: "Tekst wejściowy",
+    inputPlaceholder: "Wpisz tekst do transformacji...",
+    outputLabel: "Wynik",
+    runTest: "Uruchom transformację",
+    running: "Uruchamianie...",
+    selectToStart: "Wybierz transformację, aby rozpocząć",
+    name: "Nazwa",
+    namePlaceholder: "Unikalny identyfikator, np. key_topics",
+    titlePlaceholder: "Wyświetlany tytuł, domyślnie nazwa",
+    promptPlaceholder: "Napisz prompt, który będzie napędzał tę transformację...",
+    descriptionPlaceholder: "Opisz, co robi ta transformacja.",
+    suggestDefault: "Sugeruj domyślnie dla nowych źródeł",
+    promptHint: "Prompty należy pisać z myślą o treści źródła. Możesz poprosić model o podsumowanie, wyodrębnienie wglądów lub utworzenie ustrukturyzowanych wyników, takich jak tabele.",
+    createSuccess: "Transformacja utworzona pomyślnie",
+    updateSuccess: "Transformacja zaktualizowana pomyślnie",
+    deleteSuccess: "Transformacja usunięta pomyślnie",
+    noTransformations: "Brak transformacji",
+    createOne: "Utwórz transformację, aby rozpocząć",
+    selectModel: "Wybierz model",
+    deleteConfirm: "Czy na pewno chcesz usunąć tę transformację?",
+    model: "Model",
+    systemPrompt: "Prompt systemowy",
+    overrideModelDesc: "Nadpisz domyślny model dla tej sesji czatu. Pozostaw puste, aby użyć domyślnego modelu systemowego.",
+    sessionUseReplacement: "Ta sesja użyje modelu {name} zamiast domyślnego.",
+    systemDefault: "Domyślny systemowy",
+  },
+  models: {
+    embedding: "Modele osadzania",
+    tts: "Synteza mowy (TTS)",
+    stt: "Rozpoznawanie mowy (STT)",
+    apiKey: "Klucz API",
+    deleteSuccess: "Model usunięty pomyślnie",
+    saveSuccess: "Model zapisany pomyślnie",
+    noModels: "Brak modeli",
+    discoverModels: "Wykryj modele",
+    noModelsFound: "Nie znaleziono modeli od tego dostawcy",
+    modelType: "Typ modelu",
+    modelTypeHint: "Wybierz typ modeli, które chcesz dodać. Jeśli potrzebujesz różnych typów, dodaj je w osobnych partiach.",
+    deleteModel: "Usuń model",
+    defaultAssignments: "Domyślne przypisania modeli",
+    defaultAssignmentsDesc: "Skonfiguruj, których modeli używać do różnych celów w Open Notebook",
+    missingRequiredModels: "Brakuje wymaganych modeli: {models}. Bez nich Open Notebook może nie działać poprawnie.",
+    selectModelPlaceholder: "Wybierz model",
+    requiredModelPlaceholder: "⚠️ Wymagane – wybierz model",
+    chatModelLabel: "Model czatu",
+    chatModelDesc: "Używany w rozmowach na czacie",
+    transformationModelLabel: "Model transformacji",
+    transformationModelDesc: "Używany do podsumowań, wglądów i transformacji",
+    toolsModelLabel: "Model narzędzi",
+    toolsModelDesc: "Używany do wywoływania funkcji – zalecane OpenAI lub Anthropic",
+    largeContextModelLabel: "Model dużego kontekstu",
+    largeContextModelDesc: "Używany do przetwarzania dużych dokumentów – zalecany Gemini",
+    embeddingModelLabel: "Model osadzania",
+    embeddingModelDesc: "Używany do wyszukiwania semantycznego i osadzeń wektorowych",
+    ttsModelLabel: "Model syntezy mowy",
+    ttsModelDesc: "Używany do generowania podcastów",
+    sttModelLabel: "Model rozpoznawania mowy",
+    sttModelDesc: "Używany do transkrypcji audio",
+    embeddingChangeTitle: "Zmiana modelu osadzania",
+    embeddingChangeConfirm: "Zamierzasz zmienić model osadzania z {from} na {to}.",
+    rebuildRequired: "Ważne: wymagana przebudowa",
+    rebuildReason: "Zmiana modelu osadzania wymaga przebudowy wszystkich istniejących osadzeń, aby zachować spójność. Bez przebudowy Twoje wyszukiwania mogą zwracać nieprawidłowe lub niekompletne wyniki.",
+    whatHappensNext: "Co stanie się dalej:",
+    step1: "Twój domyślny model osadzania zostanie zaktualizowany",
+    step2: "Istniejące osadzenia pozostaną niezmienione do czasu przebudowy",
+    step3: "Nowa treść będzie korzystać z nowego modelu osadzania",
+    step4: "Powinieneś przebudować osadzenia jak najszybciej",
+    proceedToRebuildPrompt: "Czy chcesz przejść do strony Zaawansowane, aby rozpocząć przebudowę teraz?",
+    changeModelOnly: "Zmień tylko model",
+    changeAndRebuild: "Zmień i przejdź do przebudowy",
+    autoAssign: "Przypisz domyślne automatycznie",
+    autoAssigning: "Przypisywanie...",
+    autoAssignSuccess: "Automatycznie przypisano modeli domyślnych: {count}",
+    autoAssignNoModels: "Brak modeli do przypisania. Najpierw zsynchronizuj modele.",
+    autoAssignAlreadySet: "Wszystkie modele domyślne są już skonfigurowane",
+    testModel: "Przetestuj model",
+    testModelSuccess: "Test modelu zaliczony",
+    testModelFailed: "Test modelu nie powiódł się",
+    searchOrAddModel: "Szukaj lub wpisz nazwę modelu...",
+    addCustomModel: "Dodaj „{name}”",
+  },
+  apiKeys: {
+    title: "Skonfiguruj swoje AI za pomocą własnych kluczy API",
+    description: "Przechowuj klucze API bezpiecznie w bazie danych, aby włączyć dostawców AI w Open Notebook.",
+    encryptionRequired: "Klucz szyfrowania nie został skonfigurowany",
+    encryptionRequiredDescription: "Ustaw zmienną środowiskową OPEN_NOTEBOOK_ENCRYPTION_KEY na dowolny tajny ciąg, aby umożliwić przechowywanie kluczy API w bazie danych.",
+    configured: "Skonfigurowano",
+    notConfigured: "Nieskonfigurowano",
+    migrationAvailable: "Wykryto zmienne środowiskowe",
+    migrationDescription: "Liczba kluczy API skonfigurowanych przez zmienne środowiskowe, które można przenieść do bazy danych w celu łatwiejszego zarządzania: {count}.",
+    migrateToDatabase: "Przenieś do bazy danych",
+    migrating: "Przenoszenie...",
+    migrationSuccess: "Pomyślnie przeniesiono kluczy API: {count}",
+    migrationErrors: "Nie udało się przenieść kluczy: {count}",
+    migrationNothingToMigrate: "Wszystkie klucze są już w bazie danych",
+    learnMore: "Dowiedz się, jak skonfigurować klucze API →",
+    testConnection: "Przetestuj połączenie",
+    testSuccess: "Połączenie udane",
+    testFailed: "Test połączenia nie powiódł się",
+    syncModels: "Synchronizuj modele",
+    syncSuccess: "Wykryto {discovered} modeli, dodano {new} nowych",
+    syncNoNew: "Wykryto {count} modeli, wszystkie są już zarejestrowane",
+    syncFailed: "Nie udało się zsynchronizować modeli",
+    getApiKey: "Uzyskaj klucz API",
+    vertexProject: "Identyfikator projektu GCP",
+    vertexLocation: "Region",
+    vertexCredentials: "Ścieżka do pliku JSON konta usługi",
+    addConfig: "Dodaj konfigurację",
+    editConfig: "Edytuj konfigurację",
+    deleteConfig: "Usuń konfigurację",
+    configName: "Nazwa konfiguracji",
+    configNameHint: "Opisowa nazwa tej konfiguracji (np. „Produkcja”, „Rozwój”)",
+    baseUrl: "Bazowy adres URL",
+    baseUrlOverrideHint: "Zmień to tylko wtedy, gdy musisz nadpisać domyślny punkt końcowy API dostawcy.",
+    deleteConfigConfirm: "Czy na pewno chcesz usunąć „{name}”? Tej operacji nie można cofnąć.",
+    configSaveSuccess: "Konfiguracja zapisana pomyślnie",
+    configUpdateSuccess: "Konfiguracja zaktualizowana pomyślnie",
+    configDeleteSuccess: "Konfiguracja usunięta pomyślnie",
+    apiKeyEditHint: "Pozostaw puste, aby zachować istniejący klucz API",
+    decryptionError: "Błąd odszyfrowywania",
+    decryptionErrorDescription: "Nie udało się odszyfrować klucza API tego poświadczenia. Klucz szyfrowania mógł ulec zmianie. Usuń to poświadczenie i utwórz je ponownie z prawidłowym kluczem.",
+  },
+  setupBanner: {
+    encryptionRequired: "Klucz szyfrowania nie został skonfigurowany",
+    encryptionRequiredDescription: "Ustaw zmienną środowiskową OPEN_NOTEBOOK_ENCRYPTION_KEY, aby umożliwić bezpieczne przechowywanie poświadczeń.",
+    migrationAvailable: "Dostępna migracja kluczy API",
+    migrationDescription: "Liczba dostawców z kluczami API ustawionymi przez zmienne środowiskowe: {count}. Przenieś je do bazy danych w celu łatwiejszego zarządzania.",
+    goToSettings: "Przejdź do Ustawień",
+    viewDocs: "Zobacz dokumentację",
+  },
+}
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 3d8eb90a..1acb299e 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -29,6 +29,7 @@ export const ptBR = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Fonte",
     notebook: "Caderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index bc956719..9ae2ce4d 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -29,6 +29,7 @@ export const ruRU = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "Источник",
     notebook: "Блокнот",
     podcast: "Подкаст",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 99dfe838..6e69bb58 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -29,6 +29,7 @@ export const zhCN = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "来源",
     notebook: "笔记本",
     podcast: "播客",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 6be7b5c8..911348bd 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -29,6 +29,7 @@ export const zhTW = {
     catalan: "Català",
     spanish: "Español",
     german: "Deutsch",
+    polish: "Polski",
     source: "來源",
     notebook: "筆記本",
     podcast: "播客",
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index f559a040..59a201af 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, pl, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -16,6 +16,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'ca-ES': ca,
   'es-ES': es,
   'de-DE': de,
+  'pl-PL': pl,
 }
 
 /**

From 3c2d2af9433b012c0abb8d46412ad2c1d2bff31a Mon Sep 17 00:00:00 2001
From: Burntout Service designer <james.john.nuthall@gmail.com>
Date: Fri, 29 May 2026 16:01:56 +0200
Subject: [PATCH 048/345] fix(frontend): keep "Chat with source" navigation
 in-app (#815)

The "Chat with source" button in SourceDialog opened an internal app route
(/sources/...) in a new browser tab via window.open(..., "_blank"). Switch
it to Next.js router navigation so it stays within the app (closing the
dialog first). External links are unchanged.
---
 frontend/src/components/source/SourceDialog.tsx | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/frontend/src/components/source/SourceDialog.tsx b/frontend/src/components/source/SourceDialog.tsx
index f87bbd5e..2128b5f6 100644
--- a/frontend/src/components/source/SourceDialog.tsx
+++ b/frontend/src/components/source/SourceDialog.tsx
@@ -1,5 +1,6 @@
 'use client'
 
+import { useRouter } from 'next/navigation'
 import { Dialog, DialogContent, DialogTitle } from '@/components/ui/dialog'
 import { SourceDetailContent } from './SourceDetailContent'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -14,10 +15,11 @@ interface SourceDialogProps {
  * Source Dialog Component
  *
  * Displays source details in a modal dialog.
- * Includes a "Chat with source" button that opens the full source page in a new tab.
+ * Includes a "Chat with source" button that navigates to the full source page in-app.
  */
 export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps) {
   const { t } = useTranslation()
+  const router = useRouter()
   // Ensure source ID has 'source:' prefix for API calls and routing
   const sourceIdWithPrefix = sourceId
     ? (sourceId.includes(':') ? sourceId : `source:${sourceId}`)
@@ -25,8 +27,8 @@ export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps
 
   const handleChatClick = () => {
     if (sourceIdWithPrefix) {
-      window.open(`/sources/${sourceIdWithPrefix}`, '_blank')
-      // Modal stays open after opening chat
+      onOpenChange(false)
+      router.push(`/sources/${sourceIdWithPrefix}`)
     }
   }
 

From 67541a50aa2fd9a809a55103737c05e9a53a3c53 Mon Sep 17 00:00:00 2001
From: Rashid Mahmood <codewithrashid@gmail.com>
Date: Fri, 29 May 2026 18:14:29 +0400
Subject: [PATCH 049/345] fix(api): normalize openai_compatible provider name
 in models endpoint (#801)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #792 — credentials for the openai_compatible provider could not be
tested or used because api/routers/models.py spelled the provider with a
hyphen while the rest of the codebase (allow-list, credentials_service,
frontend) uses the underscore form. Align the models endpoint to the
underscore form, normalizing to the hyphen only at the Esperanto boundary
where AIFactory reports it with a hyphen.
---
 api/routers/models.py    |  9 ++++++---
 tests/test_models_api.py | 32 ++++++++++++++++----------------
 2 files changed, 22 insertions(+), 19 deletions(-)

diff --git a/api/routers/models.py b/api/routers/models.py
index df28463b..fc10e0fa 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -414,7 +414,7 @@ async def get_provider_availability():
         )
 
         # OpenAI-compatible: DB credential or env vars
-        provider_status["openai-compatible"] = (
+        provider_status["openai_compatible"] = (
             await _check_provider_has_credential("openai_compatible")
             or _check_openai_compatible_support("LLM")
             or _check_openai_compatible_support("EMBEDDING")
@@ -442,12 +442,15 @@ async def get_provider_availability():
             }
 
             # Special handling for openai-compatible to check mode-specific availability
-            if provider == "openai-compatible":
+            if provider == "openai_compatible":
+                # Esperanto exposes this provider with a hyphen ("openai-compatible"),
+                # while the rest of the codebase uses the underscore form.
+                esperanto_name = "openai-compatible"
                 has_db_cred = await _check_provider_has_credential("openai_compatible")
                 for model_type, mode in mode_mapping.items():
                     if (
                         model_type in esperanto_available
-                        and provider in esperanto_available[model_type]
+                        and esperanto_name in esperanto_available[model_type]
                     ):
                         if has_db_cred or _check_openai_compatible_support(mode):
                             supported_types[provider].append(model_type)
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index 8c32b97d..0ac830cd 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -146,11 +146,11 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # openai-compatible should be available
-        assert "openai-compatible" in data["available"]
+        assert "openai_compatible" in data["available"]
 
         # Should support all 4 types
-        assert "openai-compatible" in data["supported_types"]
-        supported = data["supported_types"]["openai-compatible"]
+        assert "openai_compatible" in data["supported_types"]
+        supported = data["supported_types"]["openai_compatible"]
         assert "language" in supported
         assert "embedding" in supported
         assert "speech_to_text" in supported
@@ -188,11 +188,11 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # openai-compatible should be available
-        assert "openai-compatible" in data["available"]
+        assert "openai_compatible" in data["available"]
 
         # Should support only language and embedding
-        assert "openai-compatible" in data["supported_types"]
-        supported = data["supported_types"]["openai-compatible"]
+        assert "openai_compatible" in data["supported_types"]
+        supported = data["supported_types"]["openai_compatible"]
         assert "language" in supported
         assert "embedding" in supported
         assert "speech_to_text" not in supported
@@ -222,11 +222,11 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # openai-compatible should NOT be available
-        assert "openai-compatible" not in data["available"]
-        assert "openai-compatible" in data["unavailable"]
+        assert "openai_compatible" not in data["available"]
+        assert "openai_compatible" in data["unavailable"]
 
         # Should not have supported_types entry
-        assert "openai-compatible" not in data["supported_types"]
+        assert "openai_compatible" not in data["supported_types"]
 
     @patch("api.routers.models.os.environ.get")
     @patch("api.routers.models.AIFactory.get_available_providers")
@@ -259,11 +259,11 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # openai-compatible should be available
-        assert "openai-compatible" in data["available"]
+        assert "openai_compatible" in data["available"]
 
         # Generic var enables all, so all 4 should be supported
-        assert "openai-compatible" in data["supported_types"]
-        supported = data["supported_types"]["openai-compatible"]
+        assert "openai_compatible" in data["supported_types"]
+        supported = data["supported_types"]["openai_compatible"]
         assert "language" in supported
         assert "embedding" in supported
         assert "speech_to_text" in supported
@@ -297,7 +297,7 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # Should support only language
-        supported = data["supported_types"]["openai-compatible"]
+        supported = data["supported_types"]["openai_compatible"]
         assert supported == ["language"]
 
     @patch("api.routers.models.os.environ.get")
@@ -327,7 +327,7 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # Should support only embedding
-        supported = data["supported_types"]["openai-compatible"]
+        supported = data["supported_types"]["openai_compatible"]
         assert supported == ["embedding"]
 
     @patch("api.routers.models.os.environ.get")
@@ -357,7 +357,7 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # Should support only speech_to_text
-        supported = data["supported_types"]["openai-compatible"]
+        supported = data["supported_types"]["openai_compatible"]
         assert supported == ["speech_to_text"]
 
     @patch("api.routers.models.os.environ.get")
@@ -387,5 +387,5 @@ class TestModelsProviderAvailability:
         data = response.json()
 
         # Should support only text_to_speech
-        supported = data["supported_types"]["openai-compatible"]
+        supported = data["supported_types"]["openai_compatible"]
         assert supported == ["text_to_speech"]

From 43f062d2f3352ed489a949451f4be3907432c940 Mon Sep 17 00:00:00 2001
From: Joey Roth <90125084+Genmin@users.noreply.github.com>
Date: Fri, 29 May 2026 07:22:22 -0700
Subject: [PATCH 050/345] fix(api): use configured base_url for OpenAI model
 discovery (#784)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixes #676 — OpenAI model discovery always called https://api.openai.com/v1/models,
ignoring a credential's configured base_url. Use the configured base_url for
the openai provider and add a models_endpoint() helper that avoids appending
/models twice when the endpoint already includes it.
---
 api/credentials_service.py    | 12 ++++-
 tests/test_credentials_api.py | 92 +++++++++++++++++++++++++++++++++++
 2 files changed, 103 insertions(+), 1 deletion(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 8f288eb7..16a1ba79 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -480,6 +480,12 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     api_key = config.get("api_key")
     base_url = config.get("base_url")
 
+    def models_endpoint(url: str) -> str:
+        trimmed = url.rstrip("/")
+        if trimmed.endswith("/models"):
+            return trimmed
+        return f"{trimmed}/models"
+
     # Static model lists for providers without a listing API
     STATIC_MODELS: Dict[str, List[str]] = {
         "anthropic": [
@@ -546,7 +552,9 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
                 headers["Authorization"] = f"Bearer {api_key}"
             async with httpx.AsyncClient() as client:
                 response = await client.get(
-                    f"{base_url.rstrip('/')}/models", headers=headers, timeout=30.0,
+                    models_endpoint(base_url),
+                    headers=headers,
+                    timeout=30.0,
                 )
                 response.raise_for_status()
                 data = response.json()
@@ -618,6 +626,8 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
 
     # Standard OpenAI-style API discovery
     discovery_url = url_map.get(provider)
+    if provider == "openai" and base_url:
+        discovery_url = models_endpoint(base_url)
     if not discovery_url or not api_key:
         return []
 
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index c22f2cf4..a0109c1f 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -2,9 +2,12 @@
 
 from unittest.mock import AsyncMock, patch
 
+import httpx
 import pytest
 from fastapi.testclient import TestClient
 
+from api import credentials_service
+
 
 @pytest.fixture
 def client():
@@ -96,5 +99,94 @@ class TestCredentialCascadeDelete:
         mock_cred.delete.assert_awaited_once()
 
 
+class TestCredentialModelDiscovery:
+    """Tests for credential-backed model discovery."""
+
+    @pytest.mark.asyncio
+    async def test_openai_discovery_respects_base_url(self, monkeypatch):
+        """OpenAI model discovery should call the configured API base URL."""
+
+        requests = []
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None):
+                requests.append(
+                    {
+                        "url": url,
+                        "headers": headers,
+                        "timeout": timeout,
+                    }
+                )
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "custom-openai-model"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+
+        models = await credentials_service.discover_with_config(
+            "openai",
+            {
+                "api_key": "sk-test",
+                "base_url": "https://llm-gateway.example.com/v1",
+            },
+        )
+
+        assert models == [
+            {
+                "name": "custom-openai-model",
+                "provider": "openai",
+                "description": None,
+            }
+        ]
+        assert requests == [
+            {
+                "url": "https://llm-gateway.example.com/v1/models",
+                "headers": {"Authorization": "Bearer sk-test"},
+                "timeout": 30.0,
+            }
+        ]
+
+    @pytest.mark.asyncio
+    async def test_model_discovery_base_url_can_include_models_path(self, monkeypatch):
+        """Model discovery should not append /models twice."""
+
+        requests = []
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None):
+                requests.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "model-a"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+
+        await credentials_service.discover_with_config(
+            "openai_compatible",
+            {
+                "api_key": "sk-test",
+                "base_url": "https://llm-gateway.example.com/v1/models/",
+            },
+        )
+
+        assert requests == ["https://llm-gateway.example.com/v1/models"]
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From f2182dbdced54995e47d61f6af87fc1be2a6e0d3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 31 May 2026 09:43:47 -0300
Subject: [PATCH 051/345] fix(embedding): drop degenerate tiny chunks before
 embedding (#764) (#768)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Header-based splitters (notably HTMLHeaderTextSplitter on complex pages
like Wikipedia or Project Gutenberg) can emit single-character or
punctuation-only chunks. Some embedding providers — including
llama.cpp's OpenAI-compatible endpoint — return null vector elements
for such inputs, which then crash response parsing in Esperanto with
'TypeError: float() argument must be a string or a real number, not
NoneType'.

chunk_text() now filters chunks below OPEN_NOTEBOOK_MIN_CHUNK_SIZE
tokens (default 5) after splitting. The filter is bypassed when it
would empty the result list, so legitimately short documents are
preserved.
---
 CHANGELOG.md                                  |  4 ++
 docs/5-CONFIGURATION/environment-reference.md |  1 +
 open_notebook/utils/chunking.py               | 48 ++++++++++++++++++-
 tests/test_chunking.py                        | 23 +++++++++
 4 files changed, 75 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 96b70bd3..606dbd81 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` environment variable to override the embedding batch size; default remains `50`. Helps with CPU-only local embedding and stricter OpenAI-compatible endpoints (#735)
 - `CORS_ORIGINS` environment variable to configure the API's allowed origins (comma-separated). Default remains `*` for backward compatibility; the API now logs a startup warning prompting users to set it for production deployments. Exception responses honor the configured origins when explicitly set (#585, #597, #730)
+- `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` environment variable (default: 5 tokens) to filter out degenerate tiny chunks before embedding. Set to `0` to disable.
+
+### Fixed
+- URL source embedding no longer crashes with `TypeError: float() argument must be a string or a real number, not 'NoneType'` when header-based splitters emit single-character fragments from complex HTML pages (e.g. Wikipedia, Project Gutenberg). Such chunks are now filtered before being sent to the embedding provider (#764)
 
 ### Fixed
 - Language toggle now uses `t('common.german')` instead of a hardcoded "Deutsch" label, matching the pattern used by every other language entry (follow-up to #794)
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index cd8977ec..e6fe0781 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -66,6 +66,7 @@ Comprehensive list of all environment variables available in Open Notebook.
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
 | `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | No | 50 | Number of texts sent per embedding batch. Lower this for CPU-only or stricter OpenAI-compatible embedding providers. |
+| `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` | No | 5 | Minimum chunk size in tokens. Chunks below this threshold are dropped before embedding to avoid degenerate single-character fragments that some providers (e.g. llama.cpp) return null embeddings for. Set to `0` to disable filtering. |
 
 ---
 
diff --git a/open_notebook/utils/chunking.py b/open_notebook/utils/chunking.py
index b0eb6fe2..716f58f6 100644
--- a/open_notebook/utils/chunking.py
+++ b/open_notebook/utils/chunking.py
@@ -11,6 +11,7 @@ Key functions:
 Environment Variables:
     OPEN_NOTEBOOK_CHUNK_SIZE: Maximum chunk size in tokens (default: 400)
     OPEN_NOTEBOOK_CHUNK_OVERLAP: Overlap between chunks in tokens (default: 15% of CHUNK_SIZE)
+    OPEN_NOTEBOOK_MIN_CHUNK_SIZE: Minimum chunk size in tokens (default: 5)
 """
 
 import os
@@ -84,13 +85,42 @@ def _get_chunk_overlap(chunk_size: int) -> int:
     return int(chunk_size * 0.15)
 
 
+def _get_min_chunk_size() -> int:
+    """Get minimum chunk size from environment variable or use default.
+
+    Chunks below this token count are dropped. Some splitters (notably the
+    HTML header splitter on complex pages) can emit single-character or
+    punctuation-only chunks that produce useless or null embeddings —
+    llama.cpp's OpenAI-compatible endpoint, for example, returns null vector
+    elements for such inputs and crashes downstream parsing.
+    """
+    raw = os.getenv("OPEN_NOTEBOOK_MIN_CHUNK_SIZE")
+    if raw is None:
+        return 5
+    try:
+        value = int(raw)
+        if value < 0:
+            logger.warning(
+                f"OPEN_NOTEBOOK_MIN_CHUNK_SIZE ({value}) cannot be negative. Using 0."
+            )
+            return 0
+        return value
+    except ValueError:
+        logger.warning(
+            f"Invalid OPEN_NOTEBOOK_MIN_CHUNK_SIZE value: '{raw}'. Using default: 5"
+        )
+        return 5
+
+
 # Constants (computed at import time from environment variables)
 CHUNK_SIZE = _get_chunk_size()
 CHUNK_OVERLAP = _get_chunk_overlap(CHUNK_SIZE)
+MIN_CHUNK_SIZE = _get_min_chunk_size()
 HIGH_CONFIDENCE_THRESHOLD = 0.8  # Threshold for heuristics to override extension
 
 logger.debug(
-    f"Chunking configuration: CHUNK_SIZE={CHUNK_SIZE}, CHUNK_OVERLAP={CHUNK_OVERLAP}"
+    f"Chunking configuration: CHUNK_SIZE={CHUNK_SIZE}, "
+    f"CHUNK_OVERLAP={CHUNK_OVERLAP}, MIN_CHUNK_SIZE={MIN_CHUNK_SIZE}"
 )
 
 
@@ -444,5 +474,21 @@ def chunk_text(
     # Filter out empty chunks
     chunks = [c.strip() for c in chunks if c and c.strip()]
 
+    # Drop chunks below the minimum token threshold. These are typically
+    # punctuation or single-character fragments left over from header-based
+    # splitters; embedding them is wasteful and some providers return null
+    # vector elements for such inputs (which then crash response parsing).
+    # Only filter when more than one chunk exists and at least one chunk
+    # would survive — never return an empty list because of this filter.
+    if MIN_CHUNK_SIZE > 0 and len(chunks) > 1:
+        kept = [c for c in chunks if token_count(c) >= MIN_CHUNK_SIZE]
+        if kept:
+            dropped = len(chunks) - len(kept)
+            if dropped > 0:
+                logger.debug(
+                    f"Dropped {dropped} chunk(s) below MIN_CHUNK_SIZE={MIN_CHUNK_SIZE} tokens"
+                )
+            chunks = kept
+
     logger.debug(f"Created {len(chunks)} chunks from {text_tokens} tokens")
     return chunks
diff --git a/tests/test_chunking.py b/tests/test_chunking.py
index df7d2e63..4044e8a4 100644
--- a/tests/test_chunking.py
+++ b/tests/test_chunking.py
@@ -8,6 +8,7 @@ import pytest
 
 from open_notebook.utils.chunking import (
     CHUNK_SIZE,
+    MIN_CHUNK_SIZE,
     ContentType,
     chunk_text,
     detect_content_type,
@@ -329,6 +330,28 @@ Content for section 2.
         assert len(chunks) > 1
         _assert_chunks_within_token_limit(chunks)
 
+    def test_drops_degenerate_short_chunks(self):
+        """Header splitters can emit single-char chunks; they must be filtered."""
+        large_section = _build_text_exceeding_tokens(
+            "This is a paragraph with enough content to be useful. ", CHUNK_SIZE
+        )
+        # A trailing micro-section ("# .") would otherwise produce a "." chunk.
+        md_text = f"# Real Title\n\n{large_section}\n\n# .\n"
+        chunks = chunk_text(md_text, content_type=ContentType.MARKDOWN)
+        assert len(chunks) >= 1
+        assert all(token_count(c) >= MIN_CHUNK_SIZE for c in chunks)
+        assert all(c.strip() not in (".", ",", ";", "#") for c in chunks)
+
+    def test_filter_never_empties_result(self):
+        """Even if every chunk would be dropped, at least one survives."""
+        # Force the minimum threshold higher than any chunk could possibly be.
+        # We exercise the safety branch by passing PLAIN content that splits
+        # into multiple very-small chunks.
+        text = ". " * 200  # Many tiny fragments after splitting
+        chunks = chunk_text(text, content_type=ContentType.PLAIN)
+        # The function must always return at least one chunk for non-empty input.
+        assert len(chunks) >= 1
+
 
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From 58d4226dc73015383f54c2b7a0398877a11504da Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 2 Jun 2026 04:42:53 -0300
Subject: [PATCH 052/345] chore(deps-dev): bump vitest and @vitest/ui in
 /frontend (#823)

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui). These dependencies needed to be updated together.

Updates `vitest` from 3.2.4 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest)

Updates `@vitest/ui` from 3.2.4 to 4.1.8
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/ui)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.8
  dependency-type: direct:development
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.8
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 387 +++++++++++++++----------------------
 frontend/package.json      |   4 +-
 2 files changed, 156 insertions(+), 235 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 586df766..45c545c9 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -60,14 +60,14 @@
         "@types/react": "^19",
         "@types/react-dom": "^19",
         "@vitejs/plugin-react": "^4.3.4",
-        "@vitest/ui": "^3.0.0",
+        "@vitest/ui": "^4.1.8",
         "eslint": "^9",
         "eslint-config-next": "15.4.2",
         "jsdom": "^26.0.0",
         "tailwindcss": "^4",
         "tw-animate-css": "^1.3.5",
         "typescript": "^5",
-        "vitest": "^3.0.0"
+        "vitest": "^4.1.8"
       }
     },
     "node_modules/@adobe/css-tools": {
@@ -1780,10 +1780,11 @@
       }
     },
     "node_modules/@jridgewell/sourcemap-codec": {
-      "version": "1.5.4",
-      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.4.tgz",
-      "integrity": "sha512-VT2+G1VQs/9oz078bLrYbecdZKs912zQlkelYpuf+SXF+QvZDYJlbx/LSx+meSAwdDFnF8FVXW92AVjjkVmgFw==",
-      "dev": true
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/@jridgewell/trace-mapping": {
       "version": "0.3.29",
@@ -3650,6 +3651,13 @@
       "integrity": "sha512-5EwMtOqvJMMa3HbmxLlF74e+3/HhwBTMcvt3nqVJgGCozO6hzIPOBlwm8mGVNR9SN2IJpxSnlxczyDjcn7qIyw==",
       "dev": true
     },
+    "node_modules/@standard-schema/spec": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
+      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@standard-schema/utils": {
       "version": "0.3.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/utils/-/utils-0.3.0.tgz",
@@ -4174,7 +4182,7 @@
     },
     "node_modules/@types/chai": {
       "version": "5.2.3",
-      "resolved": "https://registry.npmmirror.com/@types/chai/-/chai-5.2.3.tgz",
+      "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
       "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
       "dev": true,
       "license": "MIT",
@@ -4193,7 +4201,7 @@
     },
     "node_modules/@types/deep-eql": {
       "version": "4.0.2",
-      "resolved": "https://registry.npmmirror.com/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz",
       "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
       "dev": true,
       "license": "MIT"
@@ -4922,39 +4930,40 @@
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/expect/-/expect-3.2.4.tgz",
-      "integrity": "sha512-Io0yyORnB6sikFlt8QW5K7slY4OjqNX9jmJQ02QDda8lyM6B5oNgVWoSoKPac8/kgnCUzuHQKrSLtu/uOqqrig==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.8.tgz",
+      "integrity": "sha512-h3nDO677RDLEGlBxyQ5CW8RlMThSKSRLUePLOx09gNIWRL40edgA1GCZSZgf1W55MFAG6/Sw14KeaAnqv0NKdQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
+        "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "3.2.4",
-        "@vitest/utils": "3.2.4",
-        "chai": "^5.2.0",
-        "tinyrainbow": "^2.0.0"
+        "@vitest/spy": "4.1.8",
+        "@vitest/utils": "4.1.8",
+        "chai": "^6.2.2",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/mocker/-/mocker-3.2.4.tgz",
-      "integrity": "sha512-46ryTE9RZO/rfDd7pEqFl7etuyzekzEhUbTW3BvmeO/BcCMEgq59BKhek3dXDWgAj4oMK6OZi+vRr1wPW6qjEQ==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.8.tgz",
+      "integrity": "sha512-LEiN/xe4OSIbKe9HQIp5OC24agGD9J5CnmMgsLohVVoOPWL9a2sBoR6VBx43jQZb7Kr1l4RCuyCJzcAa0+dojw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "3.2.4",
+        "@vitest/spy": "4.1.8",
         "estree-walker": "^3.0.3",
-        "magic-string": "^0.30.17"
+        "magic-string": "^0.30.21"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
         "msw": "^2.4.9",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
         "msw": {
@@ -4966,42 +4975,42 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/pretty-format/-/pretty-format-3.2.4.tgz",
-      "integrity": "sha512-IVNZik8IVRJRTr9fxlitMKeJeXFFFN0JaB9PHPGQ8NKQbGpfjlTx9zO4RefN8gp7eqjNy8nyK3NZmBzOPeIxtA==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.8.tgz",
+      "integrity": "sha512-9GasEBxpZ1VYIpqHf/0+YGg121uSNwCKOJqIrTwWP/TB7DmFCiaBpNl3aPZzoLWfWkuqhbH8vJIVobZkvdo2cA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "tinyrainbow": "^2.0.0"
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/runner/-/runner-3.2.4.tgz",
-      "integrity": "sha512-oukfKT9Mk41LreEW09vt45f8wx7DordoWUZMYdY/cyAk7w5TWkTRCNZYF7sX7n2wB7jyGAl74OxgwhPgKaqDMQ==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.8.tgz",
+      "integrity": "sha512-EmVxeBAfMJvycdjd6Hm+RbFBbA9fKvo0Kx37hNpBYoYeavH3RNsBXWDooR1mgD52dCrxIIuP7UotpfiwOikvcg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "3.2.4",
-        "pathe": "^2.0.3",
-        "strip-literal": "^3.0.0"
+        "@vitest/utils": "4.1.8",
+        "pathe": "^2.0.3"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/snapshot/-/snapshot-3.2.4.tgz",
-      "integrity": "sha512-dEYtS7qQP2CjU27QBC5oUOxLE/v5eLkGqPE0ZKEIDGMs4vKWe7IjgLOeauHsR0D5YuuycGRO5oSRXnwnmA78fQ==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.8.tgz",
+      "integrity": "sha512-acfZboRmAIf05DEKcBQy33VXojFJjtUdLyo7oOmV9kebb2xdU01UknNiPuPZoJZQyO7DF0gZdTGTpeAzET9QPQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.4",
-        "magic-string": "^0.30.17",
+        "@vitest/pretty-format": "4.1.8",
+        "@vitest/utils": "4.1.8",
+        "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -5009,50 +5018,47 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/spy/-/spy-3.2.4.tgz",
-      "integrity": "sha512-vAfasCOe6AIK70iP5UD11Ac4siNUNJ9i/9PZ3NKx07sG6sUxeag1LWdNrMWeKKYBLlzuK+Gn65Yd5nyL6ds+nw==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.8.tgz",
+      "integrity": "sha512-6EevtBp6OZOPF7bmz36HrGMeP3txgVSrgebWxHOafDXGkhIzfXK14f8KF6MuFfgXXUeHxmpD3BQxkV00/3s5mA==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "tinyspy": "^4.0.3"
-      },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/ui": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/ui/-/ui-3.2.4.tgz",
-      "integrity": "sha512-hGISOaP18plkzbWEcP/QvtRW1xDXF2+96HbEX6byqQhAUbiS5oH6/9JwW+QsQCIYON2bI6QZBF+2PvOmrRZ9wA==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/ui/-/ui-4.1.8.tgz",
+      "integrity": "sha512-RUS2ZU2TsduVrI+9c12uTNaKrNUTsm6yFt3fueEUB9iKvyC2UP83F+sqIz00HQIah4UOL1TMoDAki8K0NjGvsA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "3.2.4",
+        "@vitest/utils": "4.1.8",
         "fflate": "^0.8.2",
-        "flatted": "^3.3.3",
+        "flatted": "^3.4.2",
         "pathe": "^2.0.3",
-        "sirv": "^3.0.1",
-        "tinyglobby": "^0.2.14",
-        "tinyrainbow": "^2.0.0"
+        "sirv": "^3.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "vitest": "3.2.4"
+        "vitest": "4.1.8"
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/@vitest/utils/-/utils-3.2.4.tgz",
-      "integrity": "sha512-fB2V0JFrQSMsCo9HiSq3Ezpdv4iYaXRG1Sx8edX3MwxfyNn83mKiGzOcH+Fkxt4MHxr3y42fQi1oeAInqgX2QA==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.8.tgz",
+      "integrity": "sha512-uOJamYALNhfJ6iolExyQM40yIQwDqYnkKtQ5VCiSe17E33H0aQ/u+1GlRuz4LZBk6Mm3sg90G9hEbmEt37C1Zg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.4",
-        "loupe": "^3.1.4",
-        "tinyrainbow": "^2.0.0"
+        "@vitest/pretty-format": "4.1.8",
+        "convert-source-map": "^2.0.0",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
@@ -5311,7 +5317,7 @@
     },
     "node_modules/assertion-error": {
       "version": "2.0.1",
-      "resolved": "https://registry.npmmirror.com/assertion-error/-/assertion-error-2.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
       "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
       "dev": true,
       "license": "MIT",
@@ -5481,16 +5487,6 @@
         "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
       }
     },
-    "node_modules/cac": {
-      "version": "6.7.14",
-      "resolved": "https://registry.npmmirror.com/cac/-/cac-6.7.14.tgz",
-      "integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/call-bind": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz",
@@ -5576,18 +5572,11 @@
       }
     },
     "node_modules/chai": {
-      "version": "5.3.3",
-      "resolved": "https://registry.npmmirror.com/chai/-/chai-5.3.3.tgz",
-      "integrity": "sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==",
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
+      "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "assertion-error": "^2.0.1",
-        "check-error": "^2.1.1",
-        "deep-eql": "^5.0.1",
-        "loupe": "^3.1.0",
-        "pathval": "^2.0.0"
-      },
       "engines": {
         "node": ">=18"
       }
@@ -5644,16 +5633,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/check-error": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmmirror.com/check-error/-/check-error-2.1.3.tgz",
-      "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 16"
-      }
-    },
     "node_modules/chownr": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
@@ -5935,16 +5914,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/deep-eql": {
-      "version": "5.0.2",
-      "resolved": "https://registry.npmmirror.com/deep-eql/-/deep-eql-5.0.2.tgz",
-      "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -6223,9 +6192,9 @@
       }
     },
     "node_modules/es-module-lexer": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmmirror.com/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
-      "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.1.0.tgz",
+      "integrity": "sha512-n27zTYMjYu1aj4MjCWzSP7G9r75utsaoc8m61weK+W8JMBGGQybd43GstCXZ3WNmSFtGT9wi59qQTW6mhTR5LQ==",
       "dev": true,
       "license": "MIT"
     },
@@ -6753,7 +6722,7 @@
     },
     "node_modules/estree-walker": {
       "version": "3.0.3",
-      "resolved": "https://registry.npmmirror.com/estree-walker/-/estree-walker-3.0.3.tgz",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
       "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
       "dev": true,
       "license": "MIT",
@@ -6772,7 +6741,7 @@
     },
     "node_modules/expect-type": {
       "version": "1.3.0",
-      "resolved": "https://registry.npmmirror.com/expect-type/-/expect-type-1.3.0.tgz",
+      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
       "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
       "dev": true,
       "license": "Apache-2.0",
@@ -8584,13 +8553,6 @@
         "loose-envify": "cli.js"
       }
     },
-    "node_modules/loupe": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmmirror.com/loupe/-/loupe-3.2.1.tgz",
-      "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmmirror.com/lru-cache/-/lru-cache-5.1.1.tgz",
@@ -8628,12 +8590,13 @@
       }
     },
     "node_modules/magic-string": {
-      "version": "0.30.17",
-      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.17.tgz",
-      "integrity": "sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA==",
+      "version": "0.30.21",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.0"
+        "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
     "node_modules/markdown-table": {
@@ -9840,6 +9803,17 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/obug": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
+      "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
+      "dev": true,
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
+      "license": "MIT"
+    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
@@ -9981,21 +9955,11 @@
     },
     "node_modules/pathe": {
       "version": "2.0.3",
-      "resolved": "https://registry.npmmirror.com/pathe/-/pathe-2.0.3.tgz",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
       "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/pathval": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmmirror.com/pathval/-/pathval-2.0.1.tgz",
-      "integrity": "sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 14.16"
-      }
-    },
     "node_modules/picocolors": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
@@ -11087,7 +11051,7 @@
     },
     "node_modules/siginfo": {
       "version": "2.0.0",
-      "resolved": "https://registry.npmmirror.com/siginfo/-/siginfo-2.0.0.tgz",
+      "resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
       "integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
       "dev": true,
       "license": "ISC"
@@ -11141,7 +11105,7 @@
     },
     "node_modules/stackback": {
       "version": "0.0.2",
-      "resolved": "https://registry.npmmirror.com/stackback/-/stackback-0.0.2.tgz",
+      "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
       "integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
       "dev": true,
       "license": "MIT"
@@ -11152,9 +11116,9 @@
       "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w=="
     },
     "node_modules/std-env": {
-      "version": "3.10.0",
-      "resolved": "https://registry.npmmirror.com/std-env/-/std-env-3.10.0.tgz",
-      "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==",
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
+      "integrity": "sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==",
       "dev": true,
       "license": "MIT"
     },
@@ -11325,26 +11289,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/strip-literal": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmmirror.com/strip-literal/-/strip-literal-3.1.0.tgz",
-      "integrity": "sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "js-tokens": "^9.0.1"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/antfu"
-      }
-    },
-    "node_modules/strip-literal/node_modules/js-tokens": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmmirror.com/js-tokens/-/js-tokens-9.0.1.tgz",
-      "integrity": "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/style-to-js": {
       "version": "1.1.17",
       "resolved": "https://registry.npmjs.org/style-to-js/-/style-to-js-1.1.17.tgz",
@@ -11456,17 +11400,20 @@
     },
     "node_modules/tinybench": {
       "version": "2.9.0",
-      "resolved": "https://registry.npmmirror.com/tinybench/-/tinybench-2.9.0.tgz",
+      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
       "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
       "dev": true,
       "license": "MIT"
     },
     "node_modules/tinyexec": {
-      "version": "0.3.2",
-      "resolved": "https://registry.npmmirror.com/tinyexec/-/tinyexec-0.3.2.tgz",
-      "integrity": "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==",
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.4.tgz",
+      "integrity": "sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
     },
     "node_modules/tinyglobby": {
       "version": "0.2.15",
@@ -11516,30 +11463,10 @@
         "url": "https://github.com/sponsors/jonschlinkert"
       }
     },
-    "node_modules/tinypool": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmmirror.com/tinypool/-/tinypool-1.1.1.tgz",
-      "integrity": "sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.0.0 || >=20.0.0"
-      }
-    },
     "node_modules/tinyrainbow": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmmirror.com/tinyrainbow/-/tinyrainbow-2.0.0.tgz",
-      "integrity": "sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
-    "node_modules/tinyspy": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmmirror.com/tinyspy/-/tinyspy-4.0.4.tgz",
-      "integrity": "sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==",
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
+      "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -12138,29 +12065,6 @@
         }
       }
     },
-    "node_modules/vite-node": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/vite-node/-/vite-node-3.2.4.tgz",
-      "integrity": "sha512-EbKSKh+bh1E1IFxeO0pg1n4dvoOTt0UDiXMd/qn++r98+jPO1xtJilvXldeuQ8giIB5IkpjCgMleHMNEsGH6pg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cac": "^6.7.14",
-        "debug": "^4.4.1",
-        "es-module-lexer": "^1.7.0",
-        "pathe": "^2.0.3",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
-      },
-      "bin": {
-        "vite-node": "vite-node.mjs"
-      },
-      "engines": {
-        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
     "node_modules/vite/node_modules/fdir": {
       "version": "6.5.0",
       "resolved": "https://registry.npmmirror.com/fdir/-/fdir-6.5.0.tgz",
@@ -12193,65 +12097,79 @@
       }
     },
     "node_modules/vitest": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmmirror.com/vitest/-/vitest-3.2.4.tgz",
-      "integrity": "sha512-LUCP5ev3GURDysTWiP47wRRUpLKMOfPh+yKTx3kVIEiu5KOMeqzpnYNsKyOoVrULivR8tLcks4+lga33Whn90A==",
+      "version": "4.1.8",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.8.tgz",
+      "integrity": "sha512-flY6ScbCIt9HThs+C5HS7jvGOB560DJtk/Z15IQROTA6zEy49Nh8T/dofWTQL+n3vswqn87sbJNiuqw1SDp5Ig==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/chai": "^5.2.2",
-        "@vitest/expect": "3.2.4",
-        "@vitest/mocker": "3.2.4",
-        "@vitest/pretty-format": "^3.2.4",
-        "@vitest/runner": "3.2.4",
-        "@vitest/snapshot": "3.2.4",
-        "@vitest/spy": "3.2.4",
-        "@vitest/utils": "3.2.4",
-        "chai": "^5.2.0",
-        "debug": "^4.4.1",
-        "expect-type": "^1.2.1",
-        "magic-string": "^0.30.17",
+        "@vitest/expect": "4.1.8",
+        "@vitest/mocker": "4.1.8",
+        "@vitest/pretty-format": "4.1.8",
+        "@vitest/runner": "4.1.8",
+        "@vitest/snapshot": "4.1.8",
+        "@vitest/spy": "4.1.8",
+        "@vitest/utils": "4.1.8",
+        "es-module-lexer": "^2.0.0",
+        "expect-type": "^1.3.0",
+        "magic-string": "^0.30.21",
+        "obug": "^2.1.1",
         "pathe": "^2.0.3",
-        "picomatch": "^4.0.2",
-        "std-env": "^3.9.0",
+        "picomatch": "^4.0.3",
+        "std-env": "^4.0.0-rc.1",
         "tinybench": "^2.9.0",
-        "tinyexec": "^0.3.2",
-        "tinyglobby": "^0.2.14",
-        "tinypool": "^1.1.1",
-        "tinyrainbow": "^2.0.0",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0",
-        "vite-node": "3.2.4",
+        "tinyexec": "^1.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.1.0",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
         "why-is-node-running": "^2.3.0"
       },
       "bin": {
         "vitest": "vitest.mjs"
       },
       "engines": {
-        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
         "@edge-runtime/vm": "*",
-        "@types/debug": "^4.1.12",
-        "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
-        "@vitest/browser": "3.2.4",
-        "@vitest/ui": "3.2.4",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "4.1.8",
+        "@vitest/browser-preview": "4.1.8",
+        "@vitest/browser-webdriverio": "4.1.8",
+        "@vitest/coverage-istanbul": "4.1.8",
+        "@vitest/coverage-v8": "4.1.8",
+        "@vitest/ui": "4.1.8",
         "happy-dom": "*",
-        "jsdom": "*"
+        "jsdom": "*",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
         "@edge-runtime/vm": {
           "optional": true
         },
-        "@types/debug": {
+        "@opentelemetry/api": {
           "optional": true
         },
         "@types/node": {
           "optional": true
         },
-        "@vitest/browser": {
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/coverage-istanbul": {
+          "optional": true
+        },
+        "@vitest/coverage-v8": {
           "optional": true
         },
         "@vitest/ui": {
@@ -12262,6 +12180,9 @@
         },
         "jsdom": {
           "optional": true
+        },
+        "vite": {
+          "optional": false
         }
       }
     },
@@ -12458,7 +12379,7 @@
     },
     "node_modules/why-is-node-running": {
       "version": "2.3.0",
-      "resolved": "https://registry.npmmirror.com/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
+      "resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
       "integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
       "dev": true,
       "license": "MIT",
diff --git a/frontend/package.json b/frontend/package.json
index bd3ecc9b..a4f82480 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -67,8 +67,8 @@
     "tailwindcss": "^4",
     "tw-animate-css": "^1.3.5",
     "typescript": "^5",
-    "vitest": "^3.0.0",
-    "@vitest/ui": "^3.0.0",
+    "vitest": "^4.1.8",
+    "@vitest/ui": "^4.1.8",
     "@vitejs/plugin-react": "^4.3.4",
     "@testing-library/react": "^16.2.0",
     "@testing-library/jest-dom": "^6.6.3"

From 06539c1f4c9688f11feb7a5e8bcd7c57d3fb3779 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 2 Jun 2026 04:43:29 -0300
Subject: [PATCH 053/345] chore(deps): bump axios from 1.15.2 to 1.16.0 in
 /frontend (#821)

Bumps [axios](https://github.com/axios/axios) from 1.15.2 to 1.16.0.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.15.2...v1.16.0)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 10 +++++-----
 frontend/package.json      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 45c545c9..6c42e069 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -29,7 +29,7 @@
         "@tailwindcss/typography": "^0.5.16",
         "@tanstack/react-query": "^5.83.0",
         "@uiw/react-md-editor": "^4.0.8",
-        "axios": "^1.15.2",
+        "axios": "^1.16.0",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -5371,12 +5371,12 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.15.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.2.tgz",
-      "integrity": "sha512-wLrXxPtcrPTsNlJmKjkPnNPK2Ihe0hn0wGSaTEiHRPxwjvJwT3hKmXF4dpqxmPO9SoNb2FsYXj/xEo0gHN+D5A==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
+      "integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
       "license": "MIT",
       "dependencies": {
-        "follow-redirects": "^1.15.11",
+        "follow-redirects": "^1.16.0",
         "form-data": "^4.0.5",
         "proxy-from-env": "^2.1.0"
       }
diff --git a/frontend/package.json b/frontend/package.json
index a4f82480..e1752af1 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -33,7 +33,7 @@
     "@tailwindcss/typography": "^0.5.16",
     "@tanstack/react-query": "^5.83.0",
     "@uiw/react-md-editor": "^4.0.8",
-    "axios": "^1.15.2",
+    "axios": "^1.16.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",

From 498031114fec099e486d0b4bf976c6a48cc8bc64 Mon Sep 17 00:00:00 2001
From: Enoch <54134401+enoch-sit@users.noreply.github.com>
Date: Tue, 2 Jun 2026 15:50:44 +0800
Subject: [PATCH 054/345] fix: classify ollama embedding models correctly
 (#811)

* Fix Ollama model discovery and local Docker config

* fix: revert unrelated docker-compose changes, keep ollama embedding classification

Restore docker-compose.yml to upstream (local dev build/port changes were
out of scope), and fix PEP8 blank line in credentials_service.py.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/credentials_service.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 16a1ba79..cd87f3f8 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -18,6 +18,7 @@ from loguru import logger
 from pydantic import SecretStr
 
 from api.models import CredentialResponse
+from open_notebook.ai.model_discovery import classify_model_type
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
 
@@ -535,7 +536,11 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
                 response.raise_for_status()
                 data = response.json()
                 return [
-                    {"name": m.get("name", ""), "provider": "ollama"}
+                    {
+                        "name": m.get("name", ""),
+                        "provider": "ollama",
+                        "model_type": classify_model_type(m.get("name", ""), "ollama"),
+                    }
                     for m in data.get("models", [])
                     if m.get("name")
                 ]

From ce7e0b5d3b78763e1b3f989501e42784dd321560 Mon Sep 17 00:00:00 2001
From: TianjinAI <bamboo.ocean@gmail.com>
Date: Tue, 2 Jun 2026 02:57:05 -0500
Subject: [PATCH 055/345] docs: add windows native installation guide (#463)

* docs: add windows native installation guide

Added a comprehensive installation guide for Open Notebook on Windows, covering prerequisites, setup steps, critical fixes, and troubleshooting.

* docs: move windows native guide into 1-INSTALLATION and link from index

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 docs/1-INSTALLATION/index.md          |   9 +
 docs/1-INSTALLATION/windows-native.md | 243 ++++++++++++++++++++++++++
 2 files changed, 252 insertions(+)
 create mode 100644 docs/1-INSTALLATION/windows-native.md

diff --git a/docs/1-INSTALLATION/index.md b/docs/1-INSTALLATION/index.md
index d74a142f..fa8de1ee 100644
--- a/docs/1-INSTALLATION/index.md
+++ b/docs/1-INSTALLATION/index.md
@@ -31,6 +31,15 @@ Choose your installation route based on your setup and use case.
 
 ---
 
+### 🪟 I'm on Windows and can't use Docker/WSL
+**→ [Windows Native](windows-native.md)** - Run natively, no Docker or WSL
+- ✅ Works on Windows ARM64
+- ✅ For systems without Hyper-V/Docker Desktop
+- ⚠️ Requires Python 3.12+, Node.js, SurrealDB, uv
+- ⏱️ 15 minutes to running
+
+---
+
 
 ## System Requirements
 
diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
new file mode 100644
index 00000000..62cc6cc9
--- /dev/null
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -0,0 +1,243 @@
+# Open Notebook Windows Installation Guide (Native, No Docker)
+
+This guide documents how to install and run [Open Notebook](https://github.com/lfnovo/open-notebook) on Windows **natively without Docker or WSL**.
+
+## Who Is This For?
+
+- **Windows ARM64 users** - Docker Desktop and WSL2 have limitations on ARM64
+- **Users without Hyper-V** - Some Windows editions don't support Docker
+- **Users who prefer native installs** - Simpler architecture, easier debugging
+
+## What This Guide Covers
+
+- Native Windows installation steps
+- Critical configuration fixes for Windows
+- Troubleshooting common issues
+- Upgrade and maintenance scripts
+
+## Prerequisites
+
+| Software     | Installation                     | Required |
+| ------------ | -------------------------------- | -------- |
+| Git          | `winget install Git.Git`         | Yes      |
+| Python 3.12+ | Via uv (installed automatically) | Yes      |
+| Node.js 18+  | `winget install OpenJS.NodeJS`   | Yes      |
+| uv           | `pip install uv`                 | Yes      |
+| SurrealDB    | `scoop install surrealdb`        | Yes      |
+
+## Quick Start
+
+1. **Clone and setup:**
+
+   ```bash
+   cd %USERPROFILE%\Projects  # or your preferred location
+   git clone https://github.com/lfnovo/open-notebook.git
+   cd open-notebook
+   uv sync
+   cd frontend && npm install && cd ..
+   ```
+
+2. **Configure `.env`:**
+
+   - Copy `.env.example` to `.env`
+
+   - Add your API keys
+
+   - **CRITICAL:** Change `SURREAL_URL` from `localhost` to `127.0.0.1`:
+
+     ```env
+     SURREAL_URL="ws://127.0.0.1:8000/rpc"
+     ```
+
+3. **Edit `start-open-notebook.bat`:**
+
+   - Update `ROOT` and `DATA_ROOT` paths to match your setup
+   - Place in parent directory of `open-notebook`
+
+4. **Run:** Double-click `start-open-notebook.bat`
+
+## Directory Structure (Recommended)
+
+```
+YourProjectsFolder\
+├── open-notebook\           # Source code (git clone)
+│   ├── .venv\               # Python virtual environment (created by uv)
+│   ├── frontend\            # Next.js frontend
+│   ├── commands\            # Worker command modules
+│   └── .env                 # Your configuration
+├── open-notebook-data\      # Data storage (SEPARATE from code!)
+│   ├── surrealdb\           # Database files
+│   ├── uploads\             # Uploaded documents
+│   └── sqlite-db\           # LangGraph checkpoints
+└── start-open-notebook.bat  # Launcher script
+```
+
+**Why separate data folder?** Prevents accidental data loss when updating/reinstalling code.
+
+## Critical Windows Fixes
+
+### Issue 1: Wrong Python Version
+
+**Symptom:**
+
+```
+ModuleNotFoundError: No module named 'langgraph.checkpoint.sqlite'
+```
+
+Traceback shows system Python (e.g., `C:\Python314\`) instead of venv.
+
+**Cause:** Windows may have multiple Python versions. The venv's `activate.bat` doesn't always override correctly.
+
+**Solution:** Use `uv run` instead of direct python calls:
+
+```batch
+REM Wrong:
+.venv\Scripts\python.exe run_api.py
+
+REM Correct:
+uv run python run_api.py
+```
+
+### Issue 2: Database Health Check Timeout
+
+**Symptom:**
+
+```
+WARNING: Database health check timed out after 2 seconds
+```
+
+Frontend shows "Database is offline" even though SurrealDB is running.
+
+**Cause:** `.env` uses `localhost` but SurrealDB binds to `127.0.0.1`.
+
+**Solution:** In `.env`, change:
+
+```env
+# Wrong:
+SURREAL_URL="ws://localhost:8000/rpc"
+
+# Correct:
+SURREAL_URL="ws://127.0.0.1:8000/rpc"
+```
+
+### Issue 3: Worker "Failed to canonicalize script path"
+
+**Symptom:**
+
+```
+Failed to canonicalize script path
+```
+
+**Cause:** The `surreal-commands-worker.exe` can't find the Python `commands` module.
+
+**Solution:** Use Python module invocation with PYTHONPATH:
+
+```batch
+set PYTHONPATH=%ROOT%
+uv run --env-file .env python -m surreal_commands.cli.worker --import-modules commands
+```
+
+### Issue 4: DATA_FOLDER Path Parsing Error
+
+**Symptom:**
+
+```
+warning: Failed to parse environment file .env at position X
+```
+
+**Cause:** `uv` can't parse Windows paths with backslashes in `.env`.
+
+**Solution:** Keep `DATA_FOLDER` **commented out** in `.env`. Set it via batch file:
+
+```batch
+set DATA_FOLDER=C:\path\to\open-notebook-data
+```
+
+## Configuration Files
+
+### Modifying `open_notebook/config.py`
+
+The default `config.py` uses a hardcoded data path. Modify it to read from environment:
+
+```python
+import os
+
+# ROOT DATA FOLDER - can be overridden via DATA_FOLDER environment variable
+DATA_FOLDER = os.environ.get("DATA_FOLDER", "./data")
+
+# Rest of file uses DATA_FOLDER...
+```
+
+### Required `.env` Settings
+
+```env
+# Database - MUST use 127.0.0.1!
+SURREAL_URL="ws://127.0.0.1:8000/rpc"
+SURREAL_USER="root"
+SURREAL_PASSWORD="root"
+SURREAL_NAMESPACE="open_notebook"
+SURREAL_DATABASE="open_notebook"
+
+# API Keys (uncomment and fill in)
+OPENAI_API_KEY=your-key-here
+ANTHROPIC_API_KEY=your-key-here
+GOOGLE_API_KEY=your-key-here
+```
+
+## Available AI Models
+
+Once running, add models in Settings. Common model names:
+
+| Provider  | Models                                                       |
+| --------- | ------------------------------------------------------------ |
+| OpenAI    | `gpt-4o`, `gpt-4o-mini`, `gpt-4-turbo`, `text-embedding-3-small` |
+| Anthropic | `claude-sonnet-4-20250514`, `claude-3-5-sonnet-20241022`, `claude-3-5-haiku-20241022` |
+| Google    | `gemini-2.0-flash`, `gemini-1.5-pro`, `gemini-1.5-flash`     |
+| DeepSeek  | `deepseek-chat`, `deepseek-reasoner`                         |
+
+## Upgrading
+
+When a new version is released:
+
+```batch
+cd open-notebook
+git pull
+uv sync
+cd frontend && npm install && cd ..
+```
+
+Then restart all services. Your `.env` and data are preserved.
+
+## Services & Ports
+
+| Service   | Port | URL                        |
+| --------- | ---- | -------------------------- |
+| SurrealDB | 8000 | ws://127.0.0.1:8000        |
+| API       | 5055 | http://127.0.0.1:5055/docs |
+| Frontend  | 3000 | http://127.0.0.1:3000      |
+
+## Troubleshooting
+
+### Services won't start
+
+- Check if ports are in use: `netstat -ano | findstr :8000`
+- Kill existing processes: `taskkill /F /PID <pid>`
+
+### Frontend can't connect to API
+
+- Verify API is running: http://127.0.0.1:5055/docs
+- Check `.env` has `API_URL=http://localhost:5055`
+
+### Worker not processing commands
+
+- Check Worker window for errors
+- Verify PYTHONPATH is set in startup script
+
+## Contributing
+
+Found another Windows-specific issue? Please share your solution!
+
+---
+
+*Tested on Windows 11 ARM64 with Open Notebook v1.6.0*
+*Created: January 2026*

From c43a3e019d01ecbc9cfe3958a9a9d5762dc25dd9 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 05:05:47 -0300
Subject: [PATCH 056/345] chore(ci): remove Claude Code workflows (#824)

Remove claude-code-review.yml and claude.yml. The claude-review check
failed on every PR (expired CLAUDE_CODE_OAUTH_TOKEN) and the @claude
mention bot relied on the same broken token.
---
 .github/workflows/claude-code-review.yml | 48 ----------------------
 .github/workflows/claude.yml             | 51 ------------------------
 2 files changed, 99 deletions(-)
 delete mode 100644 .github/workflows/claude-code-review.yml
 delete mode 100644 .github/workflows/claude.yml

diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
deleted file mode 100644
index 4d51cc1d..00000000
--- a/.github/workflows/claude-code-review.yml
+++ /dev/null
@@ -1,48 +0,0 @@
-name: Claude Code Review
-
-on:
-  pull_request:
-    types: [opened, synchronize, ready_for_review, reopened]
-  pull_request_target:
-    types: [opened, synchronize, ready_for_review, reopened]
-    # Optional: Only run on specific file changes
-    # paths:
-    #   - "src/**/*.ts"
-    #   - "src/**/*.tsx"
-    #   - "src/**/*.js"
-    #   - "src/**/*.jsx"
-
-jobs:
-  claude-review:
-    # Run for fork PRs (via pull_request_target) OR same-repo PRs (via pull_request), but not both
-    if: |
-      (github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository) ||
-      (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)
-
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-      issues: write
-      id-token: write
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-          fetch-depth: 1
-          persist-credentials: false
-
-      - name: Run Claude Code Review
-        id: claude-review
-        uses: anthropics/claude-code-action@v1
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
-          plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
-
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
deleted file mode 100644
index a285620a..00000000
--- a/.github/workflows/claude.yml
+++ /dev/null
@@ -1,51 +0,0 @@
-name: Claude Code
-
-on:
-  issue_comment:
-    types: [created]
-  pull_request_review_comment:
-    types: [created]
-  issues:
-    types: [opened, assigned]
-  pull_request_review:
-    types: [submitted]
-
-jobs:
-  claude:
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-      issues: write
-      id-token: write
-      actions: read # Required for Claude to read CI results on PRs
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-
-      - name: Run Claude Code
-        id: claude
-        uses: anthropics/claude-code-action@v1
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # This is an optional setting that allows Claude to read CI results on PRs
-          additional_permissions: |
-            actions: read
-
-          # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
-          # prompt: 'Update the pull request description to include a summary of changes.'
-
-          # Optional: Add claude_args to customize behavior and configuration
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
-          # claude_args: '--allowed-tools Bash(gh pr:*)'
-

From f8625a58115fb860163b2ead0e30c88f0a913423 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 06:20:24 -0300
Subject: [PATCH 057/345] feat: bump esperanto to 2.22.0 + Ollama num_ctx
 override (#833)

Upgrade esperanto 2.20.0 -> 2.22.0. The constraint (>=2.20.0,<3) already
allowed it; this relocks and picks up upstream fixes (OpenRouter json body,
clearer null-embedding errors, streaming ToolCall objects, base_url
trailing-slash normalization, Ollama thinking-model content).

Esperanto 2.21.0 lowered the Ollama num_ctx default from 128000 to 8192 to
avoid OOM on consumer GPUs. We keep that safe default and add an optional
per-credential num_ctx override for self-hosters whose hardware can handle a
larger context window:

- Credential gains a num_ctx field, surfaced via to_esperanto_config() so it
  flows into AIFactory automatically (no ModelManager change needed).
- Credential create/update API schemas + router pass num_ctx through.
- Frontend: optional numeric field on the Ollama credential form, with i18n
  labels translated across all 13 locales.
- Docs: document the new default and the override under AI providers.

Closes #825
---
 api/credentials_service.py                    |  1 +
 api/models.py                                 |  7 +++++
 api/routers/credentials.py                    |  4 +++
 docs/5-CONFIGURATION/ai-providers.md          | 11 +++++++
 .../(dashboard)/settings/api-keys/page.tsx    | 31 +++++++++++++++++++
 frontend/src/lib/api/credentials.ts           |  3 ++
 frontend/src/lib/locales/bn-IN/index.ts       |  2 ++
 frontend/src/lib/locales/ca-ES/index.ts       |  2 ++
 frontend/src/lib/locales/de-DE/index.ts       |  2 ++
 frontend/src/lib/locales/en-US/index.ts       |  2 ++
 frontend/src/lib/locales/es-ES/index.ts       |  2 ++
 frontend/src/lib/locales/fr-FR/index.ts       |  2 ++
 frontend/src/lib/locales/it-IT/index.ts       |  2 ++
 frontend/src/lib/locales/ja-JP/index.ts       |  2 ++
 frontend/src/lib/locales/pl-PL/index.ts       |  2 ++
 frontend/src/lib/locales/pt-BR/index.ts       |  2 ++
 frontend/src/lib/locales/ru-RU/index.ts       |  2 ++
 frontend/src/lib/locales/zh-CN/index.ts       |  2 ++
 frontend/src/lib/locales/zh-TW/index.ts       |  2 ++
 open_notebook/domain/credential.py            |  6 ++++
 tests/test_credentials_api.py                 | 28 +++++++++++++++++
 uv.lock                                       |  6 ++--
 22 files changed, 120 insertions(+), 3 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index cd87f3f8..bf1d9724 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -220,6 +220,7 @@ def credential_to_response(cred: Credential, model_count: int = 0) -> Credential
         project=cred.project,
         location=cred.location,
         credentials_path=cred.credentials_path,
+        num_ctx=cred.num_ctx,
         has_api_key=cred.api_key is not None,
         created=str(cred.created) if cred.created else "",
         updated=str(cred.updated) if cred.updated else "",
diff --git a/api/models.py b/api/models.py
index 4be00496..07dad5b8 100644
--- a/api/models.py
+++ b/api/models.py
@@ -576,6 +576,9 @@ class CreateCredentialRequest(BaseModel):
     credentials_path: Optional[str] = Field(
         None, description="Credentials file path (Vertex)"
     )
+    num_ctx: Optional[int] = Field(
+        None, description="Context window size (Ollama only; defaults to 8192)"
+    )
 
 
 class UpdateCredentialRequest(BaseModel):
@@ -594,6 +597,9 @@ class UpdateCredentialRequest(BaseModel):
     project: Optional[str] = Field(None, description="Project ID")
     location: Optional[str] = Field(None, description="Location")
     credentials_path: Optional[str] = Field(None, description="Credentials path")
+    num_ctx: Optional[int] = Field(
+        None, description="Context window size (Ollama only; defaults to 8192)"
+    )
 
 
 class CredentialResponse(BaseModel):
@@ -613,6 +619,7 @@ class CredentialResponse(BaseModel):
     project: Optional[str] = None
     location: Optional[str] = None
     credentials_path: Optional[str] = None
+    num_ctx: Optional[int] = None
     has_api_key: bool = False
     created: str
     updated: str
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index 57bbb839..ede05eea 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -171,6 +171,7 @@ async def create_credential(request: CreateCredentialRequest):
             project=request.project,
             location=request.location,
             credentials_path=request.credentials_path,
+            num_ctx=request.num_ctx,
         )
         await cred.save()
         return credential_to_response(cred, 0)
@@ -240,6 +241,9 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
             cred.location = request.location or None
         if request.credentials_path is not None:
             cred.credentials_path = request.credentials_path or None
+        if request.num_ctx is not None:
+            # 0/falsy clears the override and falls back to esperanto's default
+            cred.num_ctx = request.num_ctx or None
 
         await cred.save()
         models = await cred.get_linked_models()
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index dc2f590f..86571c08 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -344,6 +344,17 @@ Heavy use: Depends on models chosen
 
 See [Ollama Setup Guide](ollama.md) for detailed network configuration.
 
+**Context Window (`num_ctx`):**
+
+Ollama models default to a **8,192-token** context window. This default is intentionally
+conservative so models run reliably on consumer GPUs (≈8GB VRAM) without running out of memory.
+If your hardware can handle more, set an optional **Context Window (num_ctx)** value on the
+Ollama credential (Settings → API Keys → edit the Ollama credential). It applies to all models
+that use that credential. Leave it empty to keep the default.
+
+- Raise it (e.g. `32768`) when ingesting large documents or using long chat histories.
+- If you hit "out of memory" errors, lower it or leave it at the default.
+
 **Available Models:**
 - `llama3.3:70b` — Best quality (requires 40GB+ RAM)
 - `llama3.1:8b` — Recommended, balanced (8GB RAM)
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 280a3033..4a1b8896 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -182,6 +182,7 @@ function CredentialFormDialog({
   const [project, setProject] = useState('')
   const [location, setLocation] = useState('')
   const [credentialsPath, setCredentialsPath] = useState('')
+  const [numCtx, setNumCtx] = useState('')
   // Modalities
   const [modalities, setModalities] = useState<string[]>([])
 
@@ -193,6 +194,7 @@ function CredentialFormDialog({
       setProject(credential.project || '')
       setLocation(credential.location || '')
       setCredentialsPath(credential.credentials_path || '')
+      setNumCtx(credential.num_ctx ? String(credential.num_ctx) : '')
       setModalities(credential.modalities || [])
     } else {
       setName('')
@@ -201,6 +203,7 @@ function CredentialFormDialog({
       setProject('')
       setLocation('')
       setCredentialsPath('')
+      setNumCtx('')
       setModalities(PROVIDER_MODALITIES[provider] || ['language'])
     }
   }, [credential, provider])
@@ -223,6 +226,10 @@ function CredentialFormDialog({
         if (location !== (credential.location || '')) data.location = location.trim() || undefined
         if (credentialsPath !== (credential.credentials_path || '')) data.credentials_path = credentialsPath.trim() || undefined
       }
+      if (isOllama && numCtx !== (credential.num_ctx ? String(credential.num_ctx) : '')) {
+        // empty clears the override (0 -> backend resets to default)
+        data.num_ctx = numCtx.trim() ? Number(numCtx) : 0
+      }
       updateCredential.mutate({ credentialId: credential.id, data }, { onSuccess })
     } else {
       const data: CreateCredentialRequest = {
@@ -237,6 +244,9 @@ function CredentialFormDialog({
         data.location = location.trim() || undefined
         data.credentials_path = credentialsPath.trim() || undefined
       }
+      if (isOllama && numCtx.trim()) {
+        data.num_ctx = Number(numCtx)
+      }
       createCredential.mutate(data, { onSuccess })
     }
   }
@@ -367,6 +377,27 @@ function CredentialFormDialog({
             </div>
           )}
 
+          {/* num_ctx (Ollama only) */}
+          {isOllama && (
+            <div className="space-y-2">
+              <Label htmlFor="num-ctx" className="text-muted-foreground">
+                {t('apiKeys.numCtx')}
+                <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
+              </Label>
+              <input
+                id="num-ctx"
+                type="number"
+                min={1}
+                className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                value={numCtx}
+                onChange={(e) => setNumCtx(e.target.value)}
+                placeholder="8192"
+                disabled={isSubmitting}
+              />
+              <p className="text-xs text-muted-foreground">{t('apiKeys.numCtxHint')}</p>
+            </div>
+          )}
+
           {/* Actions */}
           <div className="flex justify-end gap-2 pt-4 border-t">
             <Button type="button" variant="outline" onClick={() => onOpenChange(false)} disabled={isSubmitting}>
diff --git a/frontend/src/lib/api/credentials.ts b/frontend/src/lib/api/credentials.ts
index 16bdf88a..032fe58b 100644
--- a/frontend/src/lib/api/credentials.ts
+++ b/frontend/src/lib/api/credentials.ts
@@ -16,6 +16,7 @@ export interface Credential {
   project?: string | null
   location?: string | null
   credentials_path?: string | null
+  num_ctx?: number | null
   has_api_key: boolean
   created: string
   updated: string
@@ -38,6 +39,7 @@ export interface CreateCredentialRequest {
   project?: string
   location?: string
   credentials_path?: string
+  num_ctx?: number | null
 }
 
 export interface UpdateCredentialRequest {
@@ -54,6 +56,7 @@ export interface UpdateCredentialRequest {
   project?: string
   location?: string
   credentials_path?: string
+  num_ctx?: number | null
 }
 
 export interface DiscoveredModel {
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index ca7705d6..1e6db40f 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -915,6 +915,8 @@ export const bnIN = {
     configNameHint: "এই কনফিগারেশনের জন্য একটি বর্ণনামূলক নাম (যেমন, 'Production', 'Development')",
     baseUrl: "বেস URL",
     baseUrlOverrideHint: "শুধুমাত্র তখনই এটি পরিবর্তন করুন যদি আপনার প্রোভাইডারের ডিফল্ট API এন্ডপয়েন্ট ওভাররাইড করতে হয়।",
+    numCtx: "কনটেক্সট উইন্ডো (num_ctx)",
+    numCtxHint: "Ollama মডেলের জন্য সর্বোচ্চ কনটেক্সট উইন্ডো। ডিফল্ট (8192) ব্যবহার করতে খালি রাখুন। শুধুমাত্র আপনার হার্ডওয়্যার বড় উইন্ডো সামলাতে পারলে বাড়ান।",
     deleteConfigConfirm: "আপনি কি নিশ্চিত '{name}' মুছে ফেলতে চান? এটি পুনরায় করা যাবে না।",
     configSaveSuccess: "কনফিগারেশন সফলভাবে সংরক্ষিত",
     configUpdateSuccess: "কনফিগারেশন সফলভাবে আপডেট",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 7fbf4d7a..a30782c1 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -914,6 +914,8 @@ export const caES = {
     configNameHint: "Un nom descriptiu per a aquesta configuració (p. ex., «Producció», «Desenvolupament»)",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Canvia-ho només si has de substituir el punt d'accés de l'API per defecte del proveïdor.",
+    numCtx: "Finestra de Context (num_ctx)",
+    numCtxHint: "Finestra de context màxima per als models Ollama. Deixa-ho buit per usar el valor per defecte (8192). Augmenta'l només si el teu maquinari pot gestionar una finestra més gran.",
     deleteConfigConfirm: "Segur que vols suprimir «{name}»? Aquesta acció no es pot desfer.",
     configSaveSuccess: "S'ha desat la configuració correctament",
     configUpdateSuccess: "S'ha actualitzat la configuració correctament",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 2fd97bb8..b00ffd51 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -917,6 +917,8 @@ export const deDE = {
     configNameHint: "Ein beschreibender Name für diese Konfiguration, z. B. 'Produktion' oder 'Entwicklung'",
     baseUrl: "Basis-URL",
     baseUrlOverrideHint: "Nur ändern, wenn du den Standard-API-Endpunkt des Anbieters überschreiben musst.",
+    numCtx: "Kontextfenster (num_ctx)",
+    numCtxHint: "Maximales Kontextfenster für Ollama-Modelle. Leer lassen, um den Standardwert (8192) zu verwenden. Nur erhöhen, wenn deine Hardware ein größeres Fenster verarbeiten kann.",
     deleteConfigConfirm: "Möchtest du '{name}' wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
     configSaveSuccess: "Konfiguration erfolgreich gespeichert",
     configUpdateSuccess: "Konfiguration erfolgreich aktualisiert",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 94b1f520..963ab114 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -915,6 +915,8 @@ export const enUS = {
     configNameHint: "A descriptive name for this configuration (e.g., 'Production', 'Development')",
     baseUrl: "Base URL",
     baseUrlOverrideHint: "Only change this if you need to override the provider's default API endpoint.",
+    numCtx: "Context Window (num_ctx)",
+    numCtxHint: "Maximum context window for Ollama models. Leave empty to use the default (8192). Increase only if your hardware can handle a larger window.",
     deleteConfigConfirm: "Are you sure you want to delete '{name}'? This cannot be undone.",
     configSaveSuccess: "Configuration saved successfully",
     configUpdateSuccess: "Configuration updated successfully",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index ec870478..98fcf095 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -915,6 +915,8 @@ export const esES = {
     configNameHint: "Un nombre descriptivo para esta configuración (ej., 'Producción', 'Desarrollo')",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Solo cambia esto si necesitas anular el endpoint API predeterminado del proveedor.",
+    numCtx: "Ventana de Contexto (num_ctx)",
+    numCtxHint: "Ventana de contexto máxima para modelos Ollama. Déjalo vacío para usar el valor predeterminado (8192). Auméntalo solo si tu hardware admite una ventana mayor.",
     deleteConfigConfirm: "¿Estás seguro de que quieres eliminar '{name}'? Esto no se puede deshacer.",
     configSaveSuccess: "Configuración guardada exitosamente",
     configUpdateSuccess: "Configuración actualizada exitosamente",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index b0a2ac63..928fe7c5 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -914,6 +914,8 @@ export const frFR = {
     configNameHint: "Un nom descriptif pour cette configuration (ex : « Production », « Développement »)",
     baseUrl: "URL de base",
     baseUrlOverrideHint: "Ne modifiez ceci que si vous devez remplacer le point d'accès API par défaut du fournisseur.",
+    numCtx: "Fenêtre de Contexte (num_ctx)",
+    numCtxHint: "Fenêtre de contexte maximale pour les modèles Ollama. Laissez vide pour utiliser la valeur par défaut (8192). N'augmentez que si votre matériel peut gérer une fenêtre plus grande.",
     deleteConfigConfirm: "Êtes-vous sûr de vouloir supprimer « {name} » ? Cette action est irréversible.",
     configSaveSuccess: "Configuration enregistrée avec succès",
     configUpdateSuccess: "Configuration mise à jour avec succès",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index af20466b..02d9c65e 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -914,6 +914,8 @@ export const itIT = {
     configNameHint: "Un nome descrittivo per questa configurazione (es. 'Produzione', 'Sviluppo')",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Modifica solo se devi sovrascrivere l'endpoint API predefinito del provider.",
+    numCtx: "Finestra di Contesto (num_ctx)",
+    numCtxHint: "Finestra di contesto massima per i modelli Ollama. Lascia vuoto per usare il valore predefinito (8192). Aumenta solo se il tuo hardware può gestire una finestra più grande.",
     deleteConfigConfirm: "Sei sicuro di voler eliminare '{name}'? Questa azione non può essere annullata.",
     configSaveSuccess: "Configurazione salvata con successo",
     configUpdateSuccess: "Configurazione aggiornata con successo",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 7aec9a6d..66a0d7c1 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -914,6 +914,8 @@ export const jaJP = {
     configNameHint: "この設定の説明的な名前（例：本番環境、開発環境）",
     baseUrl: "ベースURL",
     baseUrlOverrideHint: "プロバイダーのデフォルト API エンドポイントを上書きする場合のみ変更してください。",
+    numCtx: "コンテキストウィンドウ (num_ctx)",
+    numCtxHint: "Ollama モデルの最大コンテキストウィンドウ。空のままにするとデフォルト（8192）を使用します。ハードウェアがより大きなウィンドウを処理できる場合のみ増やしてください。",
     deleteConfigConfirm: "「{name}」を削除してもよろしいですか？この操作は元に戻せません。",
     configSaveSuccess: "設定が正常に保存されました",
     configUpdateSuccess: "設定が正常に変更されました",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 7ca46f2e..096e6a23 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -914,6 +914,8 @@ export const plPL = {
     configNameHint: "Opisowa nazwa tej konfiguracji (np. „Produkcja”, „Rozwój”)",
     baseUrl: "Bazowy adres URL",
     baseUrlOverrideHint: "Zmień to tylko wtedy, gdy musisz nadpisać domyślny punkt końcowy API dostawcy.",
+    numCtx: "Okno kontekstu (num_ctx)",
+    numCtxHint: "Maksymalne okno kontekstu dla modeli Ollama. Pozostaw puste, aby użyć wartości domyślnej (8192). Zwiększ tylko jeśli Twój sprzęt obsłuży większe okno.",
     deleteConfigConfirm: "Czy na pewno chcesz usunąć „{name}”? Tej operacji nie można cofnąć.",
     configSaveSuccess: "Konfiguracja zapisana pomyślnie",
     configUpdateSuccess: "Konfiguracja zaktualizowana pomyślnie",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 1acb299e..7d6342d8 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -914,6 +914,8 @@ export const ptBR = {
     configNameHint: "Um nome descritivo para esta configuração (ex.: 'Produção', 'Desenvolvimento')",
     baseUrl: "URL Base",
     baseUrlOverrideHint: "Altere apenas se precisar sobrescrever o endpoint padrão do provedor.",
+    numCtx: "Janela de Contexto (num_ctx)",
+    numCtxHint: "Janela de contexto máxima para modelos Ollama. Deixe vazio para usar o padrão (8192). Aumente apenas se seu hardware suportar uma janela maior.",
     deleteConfigConfirm: "Tem certeza de que deseja excluir '{name}'? Esta ação não pode ser desfeita.",
     configSaveSuccess: "Configuração salva com sucesso",
     configUpdateSuccess: "Configuração atualizada com sucesso",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 9ae2ce4d..f42fac60 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -914,6 +914,8 @@ export const ruRU = {
     configNameHint: "Описательное название для этой конфигурации (например, «Продакшн», «Разработка»)",
     baseUrl: "Базовый URL",
     baseUrlOverrideHint: "Изменяйте только если нужно переопределить стандартную конечную точку API провайдера.",
+    numCtx: "Окно контекста (num_ctx)",
+    numCtxHint: "Максимальное окно контекста для моделей Ollama. Оставьте пустым для значения по умолчанию (8192). Увеличивайте только если ваше оборудование справится с большим окном.",
     deleteConfigConfirm: "Вы уверены, что хотите удалить «{name}»? Это действие необратимо.",
     configSaveSuccess: "Конфигурация успешно сохранена",
     configUpdateSuccess: "Конфигурация успешно обновлена",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 6e69bb58..a38e2fb3 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -914,6 +914,8 @@ export const zhCN = {
     configNameHint: "此配置的描述性名称（例如：'生产环境'、'开发环境'）",
     baseUrl: "基础 URL",
     baseUrlOverrideHint: "仅在需要覆盖提供商默认 API 端点时更改此项。",
+    numCtx: "上下文窗口 (num_ctx)",
+    numCtxHint: "Ollama 模型的最大上下文窗口。留空则使用默认值（8192）。仅在硬件能够处理更大窗口时增大。",
     deleteConfigConfirm: "确定要删除 '{name}' 吗？此操作无法撤销。",
     configSaveSuccess: "配置保存成功",
     configUpdateSuccess: "配置更新成功",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 911348bd..a7f82a6e 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -914,6 +914,8 @@ export const zhTW = {
     configNameHint: "此設定的描述性名稱（例如：'生產環境'、'開發環境'）",
     baseUrl: "基礎 URL",
     baseUrlOverrideHint: "僅在需要覆蓋提供商預設 API 端點時更改此項。",
+    numCtx: "上下文視窗 (num_ctx)",
+    numCtxHint: "Ollama 模型的最大上下文視窗。留空則使用預設值（8192）。僅在硬體能夠處理更大視窗時增大。",
     deleteConfigConfirm: "確定要刪除 '{name}' 嗎？此操作無法撤銷。",
     configSaveSuccess: "設定儲存成功",
     configUpdateSuccess: "設定更新成功",
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index 16e5ae7c..ad67bcfb 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -47,6 +47,7 @@ class Credential(ObjectModel):
         "project",
         "location",
         "credentials_path",
+        "num_ctx",
     }
 
     name: str
@@ -64,6 +65,9 @@ class Credential(ObjectModel):
     project: Optional[str] = None
     location: Optional[str] = None
     credentials_path: Optional[str] = None
+    # Ollama-only: overrides the context window (num_ctx). Esperanto defaults to
+    # 8192; raise this if your hardware can handle a larger context window.
+    num_ctx: Optional[int] = None
 
     def to_esperanto_config(self) -> Dict[str, Any]:
         """
@@ -98,6 +102,8 @@ class Credential(ObjectModel):
             config["location"] = self.location
         if self.credentials_path:
             config["credentials_path"] = self.credentials_path
+        if self.num_ctx is not None:
+            config["num_ctx"] = self.num_ctx
         return config
 
     @classmethod
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index a0109c1f..3c0cdecb 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -188,5 +188,33 @@ class TestCredentialModelDiscovery:
         assert requests == ["https://llm-gateway.example.com/v1/models"]
 
 
+class TestCredentialNumCtx:
+    """Tests for the Ollama num_ctx override threaded into esperanto config."""
+
+    def test_num_ctx_included_when_set(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(
+            name="Local Ollama",
+            provider="ollama",
+            modalities=["language", "embedding"],
+            base_url="http://localhost:11434",
+            num_ctx=32768,
+        )
+        config = cred.to_esperanto_config()
+        assert config["num_ctx"] == 32768
+        assert config["base_url"] == "http://localhost:11434"
+
+    def test_num_ctx_absent_when_unset(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(
+            name="Local Ollama",
+            provider="ollama",
+            base_url="http://localhost:11434",
+        )
+        assert "num_ctx" not in cred.to_esperanto_config()
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
diff --git a/uv.lock b/uv.lock
index 0a76730b..d372d646 100644
--- a/uv.lock
+++ b/uv.lock
@@ -648,15 +648,15 @@ wheels = [
 
 [[package]]
 name = "esperanto"
-version = "2.20.0"
+version = "2.22.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/bb/8c/eba93a2b7b1a4fc6812bcf0a83a69a3376fcaf5831fae04a0ad539baeff6/esperanto-2.20.0.tar.gz", hash = "sha256:53a16c539ed2f83e3400b4e56d5a20b7873df6cb926c1e6696a9611b3be928fb", size = 845084, upload-time = "2026-03-21T14:32:04.589Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5a/42/5a8c26a8381d60f9c066824a1478c710dbf14d408bef599c86e5072153b5/esperanto-2.22.0.tar.gz", hash = "sha256:463b058aaa5d1c506600dc330151c80afd3ee2277bb2896a4fe020e4b5c3aab7", size = 682384, upload-time = "2026-05-21T23:24:44.399Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/13/83/476dd4d7ee9f1b013ccd66e2518d150e66d3537736aed735b27230af0eb4/esperanto-2.20.0-py3-none-any.whl", hash = "sha256:767f95d08dd29e7d1950f4cc2ec908084e93ec61e945ce9446f001c54b86bb63", size = 203977, upload-time = "2026-03-21T14:32:05.676Z" },
+    { url = "https://files.pythonhosted.org/packages/01/6c/680161c808f05ce393830d7ec99eb3df5fa70417916417ab58c652290d0e/esperanto-2.22.0-py3-none-any.whl", hash = "sha256:fb7db5ef3811e1fa6cd7af254679d9238c6e2359770dc038af4460c090e9022b", size = 225129, upload-time = "2026-05-21T23:24:46.167Z" },
 ]
 
 [[package]]

From 0235632afc6e3cb3e7cce3f60abcf62e5a29b66a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 06:27:09 -0300
Subject: [PATCH 058/345] feat: expose new audio providers (Mistral STT/TTS,
 Deepgram TTS, xAI TTS) (#834)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Surface the audio providers added in esperanto 2.21/2.22:

- Mistral Voxtral STT (voxtral-*-latest) and TTS (voxtral-mini-tts) — reuses
  MISTRAL_API_KEY; discovered via the existing /v1/models endpoint.
- Deepgram TTS (Aura) — new provider: DEEPGRAM_API_KEY env config, key_provider
  mapping, static Aura voice catalog for discovery, modality + display name +
  docs link in the UI.
- xAI TTS — adds text_to_speech to the existing xai provider. xAI TTS is
  voice-based and sends no model id, so the model name is cosmetic; users add it
  via the custom-model input (no discovery entry).

classify_model_type now distinguishes Voxtral TTS vs STT (the "-tts" model must
not be caught by the broader STT names, since STT is checked first) and Aura
voices. PROVIDER_MODALITIES, PROVIDER_ENV_CONFIG, discover_with_config static
list, TEST_MODELS, DEFAULT_TEST_VOICES, the provider-availability endpoint, and
the frontend provider constants are all updated. Provider display names are
frontend constants (not i18n), so no locale changes are needed.

Also removes the dead test_provider_connection() function (no callers; the UI
uses test_credential/test_individual_model) and its now-unused imports.

Closes #826
Closes #827
---
 api/credentials_service.py                    |  12 +-
 api/routers/models.py                         |   3 +-
 .../(dashboard)/settings/api-keys/page.tsx    |   9 +-
 open_notebook/ai/connection_tester.py         | 144 +-----------------
 open_notebook/ai/key_provider.py              |   4 +-
 open_notebook/ai/model_discovery.py           |  43 +++++-
 tests/test_credentials_api.py                 |  32 ++++
 7 files changed, 100 insertions(+), 147 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index bf1d9724..668f972a 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -41,6 +41,7 @@ PROVIDER_ENV_CONFIG: Dict[str, dict] = {
     "openrouter": {"required": ["OPENROUTER_API_KEY"]},
     "voyage": {"required": ["VOYAGE_API_KEY"]},
     "elevenlabs": {"required": ["ELEVENLABS_API_KEY"]},
+    "deepgram": {"required": ["DEEPGRAM_API_KEY"]},
     "ollama": {"required": ["OLLAMA_API_BASE"]},
     "vertex": {
         "required": ["VERTEX_PROJECT", "VERTEX_LOCATION"],
@@ -67,12 +68,13 @@ PROVIDER_MODALITIES: Dict[str, List[str]] = {
     "anthropic": ["language"],
     "google": ["language", "embedding"],
     "groq": ["language", "speech_to_text"],
-    "mistral": ["language", "embedding"],
+    "mistral": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "deepseek": ["language"],
-    "xai": ["language"],
+    "xai": ["language", "text_to_speech"],
     "openrouter": ["language"],
     "voyage": ["embedding"],
     "elevenlabs": ["text_to_speech"],
+    "deepgram": ["text_to_speech"],
     "ollama": ["language", "embedding"],
     "vertex": ["language", "embedding"],
     "azure": ["language", "embedding", "speech_to_text", "text_to_speech"],
@@ -507,6 +509,12 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             "eleven_multilingual_v2", "eleven_turbo_v2_5",
             "eleven_turbo_v2", "eleven_monolingual_v1",
         ],
+        "deepgram": [
+            "aura-2-thalia-en", "aura-2-andromeda-en", "aura-2-helena-en",
+            "aura-2-apollo-en", "aura-2-arcas-en", "aura-2-asteria-en",
+            "aura-2-athena-en", "aura-2-hera-en", "aura-2-hermes-en",
+            "aura-2-atlas-en",
+        ],
     }
 
     if provider in STATIC_MODELS:
diff --git a/api/routers/models.py b/api/routers/models.py
index fc10e0fa..83f562cf 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -13,7 +13,6 @@ from api.models import (
     ModelResponse,
     ProviderAvailabilityResponse,
 )
-from open_notebook.domain.credential import Credential
 from open_notebook.ai.connection_tester import test_individual_model
 from open_notebook.ai.key_provider import provision_provider_keys
 from open_notebook.ai.model_discovery import (
@@ -23,6 +22,7 @@ from open_notebook.ai.model_discovery import (
     sync_provider_models,
 )
 from open_notebook.ai.models import DefaultModels, Model
+from open_notebook.domain.credential import Credential
 from open_notebook.exceptions import InvalidInputError
 
 router = APIRouter()
@@ -381,6 +381,7 @@ async def get_provider_availability():
             "openrouter": "OPENROUTER_API_KEY",
             "voyage": "VOYAGE_API_KEY",
             "elevenlabs": "ELEVENLABS_API_KEY",
+            "deepgram": "DEEPGRAM_API_KEY",
             "ollama": "OLLAMA_API_BASE",
             "dashscope": "DASHSCOPE_API_KEY",
             "minimax": "MINIMAX_API_KEY",
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 4a1b8896..0bf99d2f 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -72,6 +72,7 @@ const PROVIDER_DISPLAY_NAMES: Record<string, string> = {
   openrouter: 'OpenRouter',
   voyage: 'Voyage AI',
   elevenlabs: 'ElevenLabs',
+  deepgram: 'Deepgram',
   ollama: 'Ollama',
   azure: 'Azure OpenAI',
   vertex: 'Google Vertex AI',
@@ -83,7 +84,7 @@ const PROVIDER_DISPLAY_NAMES: Record<string, string> = {
 // All providers in display order
 const ALL_PROVIDERS = [
   'openai', 'anthropic', 'google', 'groq', 'mistral', 'deepseek',
-  'xai', 'openrouter', 'dashscope', 'minimax', 'voyage', 'elevenlabs', 'ollama',
+  'xai', 'openrouter', 'dashscope', 'minimax', 'voyage', 'elevenlabs', 'deepgram', 'ollama',
   'azure', 'vertex', 'openai_compatible',
 ]
 
@@ -93,12 +94,13 @@ const PROVIDER_MODALITIES: Record<string, ModelType[]> = {
   anthropic: ['language'],
   google: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
   groq: ['language', 'speech_to_text'],
-  mistral: ['language', 'embedding'],
+  mistral: ['language', 'embedding', 'speech_to_text', 'text_to_speech'],
   deepseek: ['language'],
-  xai: ['language'],
+  xai: ['language', 'text_to_speech'],
   openrouter: ['language', 'embedding'],
   voyage: ['embedding'],
   elevenlabs: ['text_to_speech', 'speech_to_text'],
+  deepgram: ['text_to_speech'],
   ollama: ['language', 'embedding'],
   azure: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
   vertex: ['language', 'embedding', 'text_to_speech'],
@@ -119,6 +121,7 @@ const PROVIDER_DOCS: Record<string, string> = {
   openrouter: 'https://openrouter.ai/keys',
   voyage: 'https://dash.voyageai.com/api-keys',
   elevenlabs: 'https://elevenlabs.io/app/settings/api-keys',
+  deepgram: 'https://console.deepgram.com/',
   azure: 'https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI',
   vertex: 'https://cloud.google.com/vertex-ai/docs/start/cloud-environment',
   openai_compatible: 'https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md',
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 2825edb8..98178822 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -8,14 +8,11 @@ configurations end-to-end.
 import io
 import os
 import struct
-from typing import List, Optional, Tuple
+from typing import Optional, Tuple
 
 import httpx
-from esperanto.factory import AIFactory
 from loguru import logger
 
-from open_notebook.domain.credential import Credential
-
 # Test models for each provider - uses minimal/cheapest models for testing
 # Format: (model_name, model_type)
 TEST_MODELS = {
@@ -29,6 +26,7 @@ TEST_MODELS = {
     "openrouter": ("openai/gpt-3.5-turbo", "language"),
     "voyage": ("voyage-3-lite", "embedding"),
     "elevenlabs": ("eleven_multilingual_v2", "text_to_speech"),
+    "deepgram": ("aura-2-thalia-en", "text_to_speech"),
     "ollama": (None, "language"),  # Dynamic - will use first available model
     # Complex providers with additional configuration
     "vertex": ("gemini-2.0-flash", "language"),  # Uses Google Vertex AI
@@ -169,148 +167,16 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
     except Exception as e:
         return False, f"Connection error: {str(e)[:100]}"
 
-async def test_provider_connection(
-    provider: str, model_type: str = "language", config_id: Optional[str] = None
-) -> Tuple[bool, str]:
-    """
-    Test if a provider's API key is valid by making a minimal API call.
-
-    Args:
-        provider: Provider name (openai, anthropic, etc.)
-        model_type: Type of model to test (language, embedding, etc.)
-                   Note: This is overridden by TEST_MODELS if provider is in that dict.
-        config_id: Optional specific configuration ID to test (format: configId)
-                   If provided, uses the configuration from ProviderConfig for this specific config.
-
-    Returns:
-        Tuple of (success: bool, message: str)
-    """
-    try:
-        # Get configuration - either specific config or default
-        api_key: Optional[str] = None
-        base_url: Optional[str] = None
-        endpoint: Optional[str] = None
-        api_version: Optional[str] = None
-        model_name: Optional[str] = None
-
-        if config_id:
-            # Load specific credential from database
-            try:
-                cred = await Credential.get(config_id)
-                config = cred.to_esperanto_config()
-                api_key = config.get("api_key")
-                base_url = config.get("base_url")
-                endpoint = config.get("endpoint")
-                api_version = config.get("api_version")
-            except Exception:
-                return False, f"Credential not found: {config_id}"
-
-        # Normalize provider name (handle hyphenated aliases)
-        normalized_provider = provider.replace("-", "_")
-
-        # Special handling for URL-based providers (no API key, just connectivity)
-        if normalized_provider == "ollama":
-            # Use base_url from specific config, or environment variable
-            test_base_url = base_url or os.environ.get("OLLAMA_API_BASE", "http://localhost:11434")
-            return await _test_ollama_connection(test_base_url)
-
-        if normalized_provider == "openai_compatible":
-            # Use base_url from specific config, or environment variable
-            test_base_url = base_url or os.environ.get("OPENAI_COMPATIBLE_BASE_URL")
-            test_api_key = api_key or os.environ.get("OPENAI_COMPATIBLE_API_KEY")
-            if not test_base_url:
-                return False, "No base URL configured for OpenAI-compatible provider"
-            return await _test_openai_compatible_connection(test_base_url, test_api_key)
-
-        if normalized_provider == "azure":
-            # For Azure, base_url from the UI form maps to endpoint
-            azure_endpoint = endpoint or base_url
-            return await _test_azure_connection(azure_endpoint, api_key, api_version)
-
-        # Get test model for provider
-        if normalized_provider not in TEST_MODELS:
-            return False, f"Unknown provider: {provider}"
-
-        test_model, test_model_type = TEST_MODELS[normalized_provider]
-
-        # Use model from config if provided, otherwise use TEST_MODELS default
-        model_to_use = model_name if model_name else test_model
-
-        # For providers with dynamic model detection
-        if model_to_use is None:
-            if normalized_provider == "openai_compatible":
-                # OpenAI-compatible servers should already be tested via _test_openai_compatible_connection
-                test_base_url = base_url or os.environ.get("OPENAI_COMPATIBLE_BASE_URL", "")
-                test_api_key = api_key or os.environ.get("OPENAI_COMPATIBLE_API_KEY")
-                return await _test_openai_compatible_connection(test_base_url, test_api_key)
-            else:
-                return False, f"No test model configured for {provider}"
-
-        # If we have a specific API key, set it in environment for this test
-        if api_key:
-            os.environ[f"{provider.upper()}_API_KEY"] = api_key
-
-        # Try to create the model and make a minimal call
-        if test_model_type == "language":
-            model = AIFactory.create_language(model_name=model_to_use, provider=provider)
-            # Convert to LangChain and make a minimal call
-            lc_model = model.to_langchain()
-            await lc_model.ainvoke("Hi")
-            return True, "Connection successful"
-
-        elif test_model_type == "embedding":
-            model = AIFactory.create_embedding(model_name=model_to_use, provider=provider)
-            # Embed a single short test string
-            await model.aembed(["test"])
-            return True, "Connection successful"
-
-        elif test_model_type == "text_to_speech":
-            # For TTS, we just verify the model can be created
-            # Making an actual TTS call would be more expensive
-            # Most TTS providers validate the key on model creation
-            AIFactory.create_text_to_speech(
-                model_name=model_to_use, provider=provider
-            )
-            return True, "Connection successful (key format valid)"
-
-        else:
-            return False, f"Unsupported model type for testing: {test_model_type}"
-
-    except Exception as e:
-        error_msg = str(e)
-
-        # Clean up common error messages for user-friendly display
-        if "401" in error_msg or "unauthorized" in error_msg.lower():
-            return False, "Invalid API key"
-        elif "403" in error_msg or "forbidden" in error_msg.lower():
-            return False, "API key lacks required permissions"
-        elif "rate" in error_msg.lower() and "limit" in error_msg.lower():
-            # Rate limit means the key is valid but we hit limits
-            return True, "Rate limited - but connection works"
-        elif "connection" in error_msg.lower() or "network" in error_msg.lower():
-            return False, "Connection error - check network/endpoint"
-        elif "timeout" in error_msg.lower():
-            return False, "Connection timed out - check network/endpoint"
-        elif "not found" in error_msg.lower() and "model" in error_msg.lower():
-            # Model not found but auth worked - this is actually a success for connectivity
-            return True, "API key valid (test model not available)"
-        elif provider == "ollama" and "connection refused" in error_msg.lower():
-            return False, "Ollama not running - check if Ollama server is started"
-        else:
-            logger.debug(f"Test connection error for {provider}: {e}")
-            # Truncate long error messages
-            truncated = error_msg[:100] + "..." if len(error_msg) > 100 else error_msg
-            return False, f"Error: {truncated}"
-
-
 # Default voices for TTS testing per provider
-# ElevenLabs excluded: uses voice_id (not name), looked up dynamically
+# ElevenLabs and Mistral excluded: voices looked up dynamically via available_voices
 DEFAULT_TEST_VOICES = {
     "openai": "alloy",
     "azure": "alloy",
     "google": "Kore",
     "vertex": "Kore",
     "openai_compatible": "alloy",
+    "deepgram": "aura-2-thalia-en",
+    "xai": "eve",
 }
 
 
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index d7a621de..b101790e 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -19,7 +19,6 @@ from loguru import logger
 
 from open_notebook.domain.credential import Credential
 
-
 # =============================================================================
 # Provider Configuration Mapping
 # =============================================================================
@@ -58,6 +57,9 @@ PROVIDER_CONFIG = {
     "elevenlabs": {
         "env_var": "ELEVENLABS_API_KEY",
     },
+    "deepgram": {
+        "env_var": "DEEPGRAM_API_KEY",
+    },
     # URL-based providers
     "ollama": {
         "env_var": "OLLAMA_API_BASE",
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 72708433..357a1834 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -14,8 +14,8 @@ import httpx
 from loguru import logger
 
 from open_notebook.ai.models import Model
-from open_notebook.domain.credential import Credential
 from open_notebook.database.repository import repo_query
+from open_notebook.domain.credential import Credential
 
 
 @dataclass
@@ -108,6 +108,11 @@ MISTRAL_MODEL_TYPES = {
         "open-mixtral",
     ],
     "embedding": ["mistral-embed"],
+    # Voxtral. TTS first by specificity: the "-tts" model must not be caught by
+    # the broader STT names. classify_model_type checks speech_to_text before
+    # text_to_speech, so STT patterns are the explicit non-tts model names.
+    "text_to_speech": ["voxtral-mini-tts", "voxtral-tts"],
+    "speech_to_text": ["voxtral-mini-latest", "voxtral-small-latest"],
 }
 
 GROQ_MODEL_TYPES = {
@@ -131,6 +136,10 @@ ELEVENLABS_MODEL_TYPES = {
     "text_to_speech": ["eleven"],
 }
 
+DEEPGRAM_MODEL_TYPES = {
+    "text_to_speech": ["aura"],
+}
+
 DASHSCOPE_MODEL_TYPES = {
     "language": ["qwen"],
 }
@@ -158,6 +167,7 @@ def classify_model_type(model_name: str, provider: str) -> str:
         "xai": XAI_MODEL_TYPES,
         "voyage": VOYAGE_MODEL_TYPES,
         "elevenlabs": ELEVENLABS_MODEL_TYPES,
+        "deepgram": DEEPGRAM_MODEL_TYPES,
         "dashscope": DASHSCOPE_MODEL_TYPES,
         "minimax": MINIMAX_MODEL_TYPES,
     }
@@ -528,6 +538,36 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
     ]
 
 
+async def discover_deepgram_models() -> List[DiscoveredModel]:
+    """Return a curated static list of Deepgram Aura TTS voices.
+
+    Deepgram has no model-listing API and treats each voice as a model id.
+    This is a representative subset of the Aura-2 English catalog; users can
+    add any other voice manually via the custom-model input.
+    """
+    api_key = os.environ.get("DEEPGRAM_API_KEY")
+    if not api_key:
+        return []
+
+    deepgram_voices = [
+        "aura-2-thalia-en",
+        "aura-2-andromeda-en",
+        "aura-2-helena-en",
+        "aura-2-apollo-en",
+        "aura-2-arcas-en",
+        "aura-2-asteria-en",
+        "aura-2-athena-en",
+        "aura-2-hera-en",
+        "aura-2-hermes-en",
+        "aura-2-atlas-en",
+    ]
+
+    return [
+        DiscoveredModel(name=m, provider="deepgram", model_type="text_to_speech")
+        for m in deepgram_voices
+    ]
+
+
 async def discover_dashscope_models() -> List[DiscoveredModel]:
     """Fetch available models from DashScope (Qwen) API."""
     api_key = os.environ.get("DASHSCOPE_API_KEY")
@@ -677,6 +717,7 @@ PROVIDER_DISCOVERY_FUNCTIONS = {
     "openrouter": discover_openrouter_models,
     "voyage": discover_voyage_models,
     "elevenlabs": discover_elevenlabs_models,
+    "deepgram": discover_deepgram_models,
     "openai_compatible": discover_openai_compatible_models,
     "dashscope": discover_dashscope_models,
     "minimax": discover_minimax_models,
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 3c0cdecb..9349749b 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -216,5 +216,37 @@ class TestCredentialNumCtx:
         assert "num_ctx" not in cred.to_esperanto_config()
 
 
+class TestAudioProviderWiring:
+    """Tests for the new audio providers (Mistral STT/TTS, Deepgram TTS, xAI TTS)."""
+
+    def test_classify_voxtral_and_aura(self):
+        from open_notebook.ai.model_discovery import classify_model_type
+
+        # Mistral Voxtral: TTS model must not be mis-detected as STT
+        assert classify_model_type("voxtral-mini-tts-2603", "mistral") == "text_to_speech"
+        assert classify_model_type("voxtral-mini-latest", "mistral") == "speech_to_text"
+        assert classify_model_type("voxtral-small-latest", "mistral") == "speech_to_text"
+        # Existing Mistral classification still holds
+        assert classify_model_type("mistral-large-latest", "mistral") == "language"
+        assert classify_model_type("mistral-embed", "mistral") == "embedding"
+        # Deepgram Aura voices
+        assert classify_model_type("aura-2-thalia-en", "deepgram") == "text_to_speech"
+
+    def test_provider_modalities_include_audio(self):
+        from api.credentials_service import PROVIDER_MODALITIES
+
+        assert "speech_to_text" in PROVIDER_MODALITIES["mistral"]
+        assert "text_to_speech" in PROVIDER_MODALITIES["mistral"]
+        assert "text_to_speech" in PROVIDER_MODALITIES["xai"]
+        assert PROVIDER_MODALITIES["deepgram"] == ["text_to_speech"]
+
+    def test_deepgram_has_env_and_test_model(self):
+        from api.credentials_service import PROVIDER_ENV_CONFIG
+        from open_notebook.ai.connection_tester import TEST_MODELS
+
+        assert PROVIDER_ENV_CONFIG["deepgram"]["required"] == ["DEEPGRAM_API_KEY"]
+        assert TEST_MODELS["deepgram"][1] == "text_to_speech"
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From 9d99006b731ea1e44554dae56eb27db7f22bb0e0 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 06:32:48 -0300
Subject: [PATCH 059/345] feat: complete audio matrix (Google/Vertex TTS,
 Google/ElevenLabs STT) (#835)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enable the remaining esperanto audio modalities for providers Open Notebook
already supports:

- google: + speech_to_text, text_to_speech
- vertex: + text_to_speech
- elevenlabs: + speech_to_text (Scribe)

classify_model_type gains a Google TTS pattern ("tts", matched before the
broad gemini language pattern) and an ElevenLabs STT pattern ("scribe", matched
before the "eleven" TTS pattern). Google STT reuses plain Gemini names that are
indistinguishable from language models by name, so it has no pattern — users
assign the speech_to_text type manually when registering. ElevenLabs discovery
now also returns scribe_v1 as a speech_to_text model.

The frontend already exposed these modalities; this aligns the backend
PROVIDER_MODALITIES, classification, and discovery with esperanto and the UI.

Closes #828
---
 api/credentials_service.py          |  7 ++++---
 open_notebook/ai/model_discovery.py | 15 +++++++++++++--
 tests/test_credentials_api.py       | 22 ++++++++++++++++++++++
 3 files changed, 39 insertions(+), 5 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 668f972a..58dc5b1c 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -66,17 +66,17 @@ PROVIDER_ENV_CONFIG: Dict[str, dict] = {
 PROVIDER_MODALITIES: Dict[str, List[str]] = {
     "openai": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "anthropic": ["language"],
-    "google": ["language", "embedding"],
+    "google": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "groq": ["language", "speech_to_text"],
     "mistral": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "deepseek": ["language"],
     "xai": ["language", "text_to_speech"],
     "openrouter": ["language"],
     "voyage": ["embedding"],
-    "elevenlabs": ["text_to_speech"],
+    "elevenlabs": ["text_to_speech", "speech_to_text"],
     "deepgram": ["text_to_speech"],
     "ollama": ["language", "embedding"],
-    "vertex": ["language", "embedding"],
+    "vertex": ["language", "embedding", "text_to_speech"],
     "azure": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "openai_compatible": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "dashscope": ["language"],
@@ -508,6 +508,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         "elevenlabs": [
             "eleven_multilingual_v2", "eleven_turbo_v2_5",
             "eleven_turbo_v2", "eleven_monolingual_v1",
+            "scribe_v1",  # speech-to-text
         ],
         "deepgram": [
             "aura-2-thalia-en", "aura-2-andromeda-en", "aura-2-helena-en",
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 357a1834..f168acaa 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -67,6 +67,10 @@ ANTHROPIC_MODELS = {
 GOOGLE_MODEL_TYPES = {
     "language": ["gemini", "palm", "bison", "chat"],
     "embedding": ["embedding", "textembedding"],
+    # Gemini TTS preview models carry "tts" in the name (checked before language).
+    # Google STT reuses plain Gemini names and can't be told apart by name, so it
+    # has no pattern here — users assign the speech_to_text type manually.
+    "text_to_speech": ["tts"],
 }
 
 OLLAMA_MODEL_TYPES = {
@@ -134,6 +138,7 @@ VOYAGE_MODEL_TYPES = {
 
 ELEVENLABS_MODEL_TYPES = {
     "text_to_speech": ["eleven"],
+    "speech_to_text": ["scribe"],
 }
 
 DEEPGRAM_MODEL_TYPES = {
@@ -523,7 +528,7 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
     if not api_key:
         return []
 
-    # ElevenLabs specializes in TTS
+    # ElevenLabs TTS models + the Scribe STT model
     elevenlabs_models = [
         "eleven_multilingual_v2",
         "eleven_turbo_v2_5",
@@ -532,10 +537,16 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
         "eleven_multilingual_v1",
     ]
 
-    return [
+    discovered = [
         DiscoveredModel(name=m, provider="elevenlabs", model_type="text_to_speech")
         for m in elevenlabs_models
     ]
+    discovered.append(
+        DiscoveredModel(
+            name="scribe_v1", provider="elevenlabs", model_type="speech_to_text"
+        )
+    )
+    return discovered
 
 
 async def discover_deepgram_models() -> List[DiscoveredModel]:
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 9349749b..141111a8 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -248,5 +248,27 @@ class TestAudioProviderWiring:
         assert TEST_MODELS["deepgram"][1] == "text_to_speech"
 
 
+class TestAudioMatrixWiring:
+    """Tests for completing the audio matrix (Google/Vertex TTS, Google/ElevenLabs STT)."""
+
+    def test_provider_modalities_matrix(self):
+        from api.credentials_service import PROVIDER_MODALITIES
+
+        for m in ("speech_to_text", "text_to_speech"):
+            assert m in PROVIDER_MODALITIES["google"]
+        assert "text_to_speech" in PROVIDER_MODALITIES["vertex"]
+        assert "speech_to_text" in PROVIDER_MODALITIES["elevenlabs"]
+
+    def test_classify_matrix(self):
+        from open_notebook.ai.model_discovery import classify_model_type
+
+        # Gemini TTS preview is classifiable; plain Gemini STT name stays language
+        assert classify_model_type("gemini-3.1-flash-tts-preview", "google") == "text_to_speech"
+        assert classify_model_type("gemini-2.0-flash", "google") == "language"
+        # ElevenLabs Scribe STT must not be caught by the TTS "eleven" pattern
+        assert classify_model_type("scribe_v1", "elevenlabs") == "speech_to_text"
+        assert classify_model_type("eleven_multilingual_v2", "elevenlabs") == "text_to_speech"
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From dd6dc0a4991b04b86723454ed24d9ecb1e8037c3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 09:09:30 -0300
Subject: [PATCH 060/345] fix: use a real speech clip for STT connection tests
 (#838)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The model connection test transcribed a 0.5s silent WAV, so every
speech-to-text test returned a blank transcription — looking broken even
when the provider worked. Bundle a tiny "Hello there" MP3 (6 KB, 16 kHz
mono) and use it instead, so a passing STT test returns actual text.

- Add open_notebook/ai/assets/test_speech.mp3 (shipped via package-data).
- _get_test_audio() loads it, falling back to the silent WAV if missing.
- Empty transcriptions now report a clear message instead of a blank line.
---
 open_notebook/ai/assets/test_speech.mp3 | Bin 0 -> 6092 bytes
 open_notebook/ai/connection_tester.py   |  25 ++++++++++++++++++++++--
 pyproject.toml                          |   3 +++
 3 files changed, 26 insertions(+), 2 deletions(-)
 create mode 100644 open_notebook/ai/assets/test_speech.mp3

diff --git a/open_notebook/ai/assets/test_speech.mp3 b/open_notebook/ai/assets/test_speech.mp3
new file mode 100644
index 0000000000000000000000000000000000000000..ce36c8892645235f393ac0a23f178edf5e0e745c
GIT binary patch
literal 6092
zcmd^@XHZk$w!lLO(qm{b6oJsBh7J)CLKQ-h5|Ac@E=8mZiU>$AQF`x9dhZ}eZz5fq
z^j<79K|rqg-?{hG`}Stum-m}FYn`?ChqLB4XZFlqs*0i@03J4suCCJG3<dxQ)y+L^
zBt#IR2w@?ie>VReu8%@H{#&X#**yDO-2D5{0syzN0I<Js;1R+jjYk!a9v*W%Pw{x;
z3C0tHCj(D0o_ai8cs}Eq$Fqg!2+uVh{Kx<HX8E@_VPSmnA2@*a|9-udwVZ~~_|NkH
zasKP48z7}lH_82S2IP++6@G@C?@m+yBwqbeF%SSH?5=crXk_F06D}_YU;rG>&IE%x
z&d+CMD)Oj71XPo(Ph_*1C9f>xL?<#UvEC(X_e8zkad0<jCHdN%cf2#W_elBkV1V44
zq-xG!uuKf+FH^4#E(2*n+_7`HG15K3#>Oky_T`4eQCWq#HB9JEa+rld0%doNsA!iz
zYtojGiga}!xVuL3o2U7rvzIdm4V&R?yE3;kd*;%-2`dc`!RF%G8ga1IuX)opA1a+&
z>-(AXT^zlS(v#aGcsKw2ZNZzTyUxvfh7{n_aPQ(c*J0l|$LS9*Yu$JU@2nLTTitPF
zY15sf-`l-S@PL)+?h1xA779B=siX}uof^cT@P2s2;-COA)tJg-<{3L8{#IO$@&sYv
zlWfaR+T_#NKlka6Ib6+XB`X!!M5~c3$Y?$qlOJ>4Wm(R8+X^<?VnIYXql)tiAsrvd
z{N0qg6vlH=GgveX;ZLqIFqk>ktcPkHhzsMfp<+&XV&!zdrc-yDA@o8`eUkDMBpTuv
z@|G&sj!;*%P3RIm?Q;@L6@v*I$&R4tvbO8-j1{QnD{ie`qmVmv$)hjH*L2UC^Nix!
zl`W77^eItPQiZ=+<g<@F6I+;z9w=b1W~{R}<=s^XQM+?u`kOZ{`nJ5g2j>Y`(QF2C
zz$2C~;ctZ~w)M$;@{V1)evl)A{z&vBLQ_v*X0+7WvfYl~PW|&LVzP;JK;R99lstk@
zfCul#P7*_RM*a{Bkdl>ZC3&mg;i=Q)IQCnPf<awKU&rvRL8}IX+owsbI)?Gofk@R2
zwWBbGjiR3~xOU4<w00)K$RkT#w-@X#kSg~bo6nDwWi6HN5R)a2{vrqeNv3CSs0{BL
zOT1dmNmy=R5w_jO&GRi9N66mNhtcsXyyYbU<X2DOq=*0t^1nwXM!UcYO`s&-bWoTd
zkXg~f^tyfD89@#u1`|dC1cjd%UU;r<JKZ3G1-`f;%wVu?l^d2nT*#u7`uG9E2=bc^
z)?Y3j6wD5QWnnF|R>D8Y3(dx(l=-RIh9t3+t4N*gPEHz~l21TY@m1`&GD`d1Os^;s
zq+Wg{bS}2AQX@i@$Fd;#_HmN<_X?VL@gor4PX;y;%EXhh42Yd(mVn))Aj@_YocVgN
z74^Z0%ulVLX+EfW<-Myt45`jfA}Ego`W=7_ARK~nRgj33_R^ZJ^!(2SP>@9I&!)U%
zEoFo92m>Pk0M-E%K{@+DK%f9W3cKh0aQ}_~6gwnJomc#GVzG{!m-cJ%G8;39kO`CG
z6HSNa=9SZgk2`c%_tCvVjFF`3DlU*v3KNJr0gBvKRiZIdT_aCudavTk5jmacroj;-
zouF;G65Bp?{L!mL(l69Zh53miGMFV<iU&(|=8oaK#!4(&t`~KMuTHd1xm)G35~nVR
zKyfKIr@TD$FucR|93L0=9A9d11~y<j^{95_AODmi8WuW*k|_FRp}6VerpYzo-GLN%
zKL}M0aPxJ_C}A1KzXKlhNYuu8Rx8}+uJb(Z31y1Qx9Te-c40fRS^jcN?;Suf*O<6O
zU4>rb$W>>h@t(l_{lxti=VG*%?@YAqsnm{A;reNlQ<<SL;Bm<cTcVn)s!Hw=xNaL<
zYtemTnCh83x@MS`U`{Zh$}w_L|3fd~bB6|(8R23<-BL}O(*p8RTX9M4lkXIr^eJSG
z&wq9FGT`fuUaEeDvWa7kNTa@3(?Z|L*R>IOlbM==iH*dX7RHgUvp!YDV%yO5t4LX}
z@ujS62~P4yQR`i&gM<0Op3K7Q&n<Z^&ls;ZUo@#&w(DdX?yaU344%Gjp6g7>ieDyo
zpEYZLZ89PXnjq@DL4F5j?+d+gEAJz~mJ08O3AKL1TW(>LKzcN}sNh>-0T5UT>Jd7=
zNs^ll$>xSJzP;m{I<tQ}{7^G1>z!+K@n-2P)<1!y(wt!W_T5>sJ1`5b(DyKSA}bx3
z5>&;#%+c<%HvaqcC2w%%Jf<aTVt$%&X}8Y)%r+>J@4Jkz*zBXGjH538I$Npgue$2v
zd#xonpK0mf>}?x{L2=)5QNx+8glBTqXcNw{;_+mw=DVaXA9GF-Kb)=+=BrSB@rdx7
zZ^o(7()IJNW=m^dUtb@kE`9$Q_B`3Q^2<iW#>|yT<@BCOAK1bB)zdAf>5~lD^VG%t
zrOtZTN_&-l7KdKv)b)lyc=AGas7|dFA<W;%13i$A3C^P->V#pblWLI{%ZF&2B)4xh
zQFuRma_dl^tj&yO(OAaNRir2hfdcH6XF|`?gOErj7;UvO69LZE9>gHA6CAtA!Hr~`
zu8o0@VO2$%X#?N{!9o2nIWEWd&YsMJL$@o`^*Y&mH}1X4&}WwU@XEpHAyme)!>S<v
zcYArR+ACF#(eFMs&FxO5+{LGy#LoirqT4Rq;BL&-XU7eB#2^vVlBfC{%!x#7-8Ap^
z8S;ft1YUQ?`+FMBdPKp$3P<=N`>wstzZ@Udtlj$n{{%jpq^Rf(+=;qyNPEjTD@c6P
zXyUD2^pW&M7{9k5bF$-WegSLekH$LuTtvx!fVU+-`QeM>E%(Yy9|Nj_Yn_{LuiZGx
z*6m}&GvPQbm6XmIu^@^^U23$GLHe6PY%e(D@qQ#ETft#JCdQ&UXvbiR66>;-97>T%
z#4A|RHdFO^*&jnSlmd@Dcb|MB>GY#W&f0-GBC1sMQ}<-O(iMAiN}<>3whV{%cJDi9
zP1YD1P9olqW!`I{y{F@|rGxCqwd%W6<YJ3Iw5u0AFpo!_BG@DhV)>Y-AJGrx`j9B?
zrwa!}uhNI0*>&r`T=P|27dPlpjvwbUXAkLx@sBg)*p&y>F$vI68TUmXJmS3V)pN<m
z1NwwFMNjyqqweN6P=O)=lHyEE+fSV_*kLO|LVy7<w(ceZsx37FA>pMLF|wL1JW>*l
zBGVQVJ`R1dUYHWsME-aQVUYqr#nRjWi-96{XfUYW4DoMZG>ThDNdH5=IhHoG+|T`~
z5Z;fy$}!YAYcrFZ9WxV{Lt;FdrRB$c+|w!VH9QYRu%PDB)2-dDxhs#RV@+>cxeuSx
z(n-}Zk`5xW)q-A%P?zI&slx`jG*@T3gLupsH>17equlb<cewM_3rv$$=lTN~pDU;J
z)JyG06U#G{>PHBB7;s^WgcKA7lp-wv`v*}8Rpv$s=hHb`V!a-}!e6H?O&v-9K6Y{&
znO%}=4MGp`In>j~S4ys4^*oKK{?K)$tNUG8{M+fh{<ARBYpij==Bb4rko;`1B25Cs
zOTa}&K}?z~@-q{j`U2h{=U+lpqp(h<gzR+9yZ7)}jC-6pN!|m7;WWLphi|=^EL?hU
znHAM7I*^$_R(XNRJ}vh+KT$P`cL*b;U=As~A44P)*nfRdD~&Jf4QI2}GGMfx-`t<@
z4sCpKGsa`*fKpUkKj?{Ph)&!$M-o+j$*)kh*}ha0*X~GGO<{xVLXdJu7f}R(cIQao
z2(NwC@Ax~nZ$~lHXjS^$4#}}l$nFi5J4)g0nVWLC!uWn_=)C0W4)3bWn?vgw=2D~t
zHh<au)BfkqSxPuM)Ey>0FHYwNgtMfld<Q;F`myz>skYX=Fjd}uSw4<dWmu8OQ8WkS
zACP7<F75wK2>82DK|(&y8(X@eZWgrJ!H_46?xQE)5gRp~j6$Kq%Cy{#NZpij+R07l
zOFgP5zMc*JsDhAuP+Oic;Tp^Td{(e~KwX#V;ryK5W{oh+KCQ>s1nYH&mQf*2YfU8<
zvWxc<A)yF;r92I342nx^b1ME;@gO~%7GZ#OMRCDV+c10Hid!5vi=Ur+Vv3gn`=ejR
zMYC3Q0{jPx``Jmpi&>C_TDUxX*8TkO+GlC}ex%~@Ejn7}#bB@>fR@7HPkT}3+=LC4
zjE}hwtDSS=37;&Y(L(MyTi&J1q{AV-9>3(R05*}L-305n%Yw^`k)_Wvmc~CWU8Y6)
zC&TF-gpBP!rrk2XcJe16hqZL@N<Okn;<BVM`0=9q6`bePb@5ew-EHRqqcG3q-VDyr
zFcZTS9(4~(;o<wlZ!%vKUH;1Bbo3;tSZV7TT5^?rOZoe?lXt1LRXN5yJ#tYX_b!Px
zFAH^7x-4Y|$Jol$pX={e*PlhNE9Xmsyca%7?UdmC^hg~;>zTSH%H?VqV#NC+#nx~_
zRu|CpFJ))Fo6p+*lw3yUtr%^8LG?cd#rM2ZQkT<E`g{NCxbb^k&2GjSoHHcT;1?w~
zB2vS>7D$Xk#c?K86U~#+i(P9Dqo{37>B)jX#BzFrLxws}a;kS<=TdEQkHn$Zg;E#>
zt!e20OfjdVmo=q$&n{VADKQU1?`(1JAa5dFZrNktGEdoX**R*si8klON7)T7nh@n<
zJ88+F(KjhPVvSV+$vXFylWYQ$GBZNN^cCu992ybiLOJ6q;YmN{x17`K87Drd&N9(#
zVmw~jyP$CCie~Zt7;i)(cxq3kKCkNa+21Q*W`<swC~;9t)oaS9d|hP`x*}rog+0x7
z3Pa|^ct0C5OwcIQ#Fz|MAECC;CM5|s3y^L27Wcyk$d$o<fQ0~$Ul!FE>yX$BLW0`W
z_kgekgVV<lg(Cqb{gB<}XGvE)6_un^mCE(l)dC9OccB|E2zIstdh35ElAq>RX=;>$
z5Gk0S<qe4pDr*#8X7lGJ{$}>aICi(p=C9O0ar_R57<r_|)NBZqc0w`dT)9qL1}ojo
z7@nIDZS)s(N_9P^jhZyBbkZs+$KhRb>WTD8Yw18TijJwoHMASob!GEYtp7lDH!q|J
z78GC@1}aw;19k&v2mtRIeW?k?sW3b&isNj#Ty?G+OE%3DqO(33>2=0mz7uAWqb(e8
zFB|G+Gs^fTu723)$2*uBKWzA<S!8R7X`E?3`iA#&t#}OeS6qZ$atk^$gm#x2toLfA
z3l>E-j_CDkx@K%V*`{R!wu@E+7*xp#M=Utd5^osjm{MSxS|kzu>SXst<dB`qT7E!+
zVOo>~_7mywfM-{M5h<Ku8JFd!eOP&b))6AH&ra+!ZW5ttQmopOuiLwS|1tCU7B?`<
zVD&(q<m257qHZg2H@Uw3Aof^ee)mIXfj>?_{i&N8g=JJ=C&63jr81U-cGTx_EXXa)
zUEmFqr&jJ$r3$NBv<g~6SvOgFr>W_82qSJL+oje+B<!*DP?5!=aL#k~_a(fP*5gs~
zrO;LPpL!wFuZ%ihmONwZJNtZbx^%YG%`gC-FbscQJYC{MVRk(&dp<4s>-r+UruD+O
zbLnd~-p?OpzCVtDO*1+Le`av<+xhZ$d4nz)!0_k8!xIMy)8}1V=>io@FQyDW_PD*r
zDUfYK07)<)7{TJRYF+h$RWQ2CFdx_f2il9U6Tvk~X@wz3T9Rlk{WB{vt^@>_RkefE
z;N?JMa0mgr-%fN^cod2FrW8urDm$mcIpn}10NC+yzim^Gh8PF{as*^V`-eobs(_G2
z1TmvxC`{Vt0hK^ao_&+y!B|S}$}SMa^7;UffB@)E{$7QXDiB2xR89>H1M%EY6A%JS
zCe@FuoPMiHF4eepa?~fzTws7C7zQW=ld0;DS<TaXy_#K99NY@bn)LETG6I*6NdqdS
z6`}6G)A`DEsGC=11h2iff|_oLC0Qvt-8I|7`#Do0Tr~k~j(#n_{(c_1TVdB`#AIEy
z7YUWo()>~8=p9h|&M7rHjAyQs;DOD8DbwX|bGd$`2*C|l2ig(&F#}j4%}oUb5~7x~
z2c7-=^5BHvphyx)svA_>J!^01f+(0+L?E<%<^)tE!yCE$??@w1t53Kw=0g5&I)mwe
ztO9~Se_=QYlB|=qjw}!WlOlLU7Y@{Kk~Ldh&pIsnK-4Q@*fG%QM#wfC%1#7UCy^wk
z(Bb|Fa03Ly0JNZF06&0b2h=ey-(fbiW3<aiS7m}d#WGn|Ym)q7V{3h|xsmnW-NvS7
z`G#{7XvA_`hEdk3Wd(B*fkF8D?q#mPnJT$L#`kE?CVs15zYPXu&w5U6w_g^<KgOZf
z@qT_OQGhXkHKG9vNZ!5jUwhXrM)UTKwjUDZ4so1=?`c!VH?-usi}A<uKjXE3MqmHC
z;CG|Qf-G!^iYg#^29ia$!@{SyhOkIfVeXvbXPdlJb?E)hKn(293wKq{BI~n+9NG1K
zhWfH;7>64}ijchW#dK7%7A?GDF&dm=!3O3M8l@3aON|~+OASh0fP=l{JkUhjrEA}H
zx7E4$?qY+F<BDox2sn)d#keY+U662vRGKVq-l2S4Emvz>;|-Q=)m@;C!FDX@x_5=F
zhdv-Wm5$f`L=c>2fcH}*$N|L3Xj0#7jg)>qnSJ=pv_$0jFZ=o{UH57Ryp`f&zi*cO
zmVB6jq!m_fMi0#+$T2XMZR^8#>**Se+b+yr7aGB7`Jbrl>h<~O14xM2AYu0tk8o}J
zqPxq;Q3>6*CfegKR=)7e`4+L*1h-j-W7gQlv_!NcT_b{xbl|j&iPZ7JlP)6cxiK-@
z8gU964Ec~a4s#ZBd3Z_oaR5xI1QWB!TmM7|mK?uim^$}DP4-9LbNe$*SInQg(Oq7<
zh}=q(H<!S8V4Hkk44Y$MeYbgN`756LR!X<gMVk+i<yt8+!Kz3Bx`fy;bP}~+?Du%$
zwYc@5uF6#(Qvs2^hxQ6e)0eiex8TGFL@Afke3Wj}U+P`wCh>mG6%@f@Y(uj#*W)dO
zSE&X!hfPf49r@zZGV)!w|EIr(8#Ef3dE=)AA~*0DvI2*)FA!?`K`cG2!ya=@4xwkW
z+LAsb^ZD;SOc&Hv)?QFcL~!lI#K1M3wb8ZW?jEv&1!&If{)|rerd158tE86BR6U*8
za7}_MuoJ7u8W*2bhDAFMP%L|*Ei{Nj9sw<;X*+gQY6rAx-HnR4_ko4{)hj$+Y|ch|
zj%v9T_M2b7XhxUmAX9)3Y)Y~Tb8-g9tH}#BGRjPXDb@USZ4k31E%$A(B3Q=T8DC^7
zVU<>z%vzxLCZ%&WbtPyckrt|?%In&n0|zND3VA{K4*F$&=lSYAPjj}-v3NgwvaL`G
l8DDzrc~YAr@hA&C<47$7Z8f{6(IV~fUqAoMod4g2e*xF1^$h?3

literal 0
HcmV?d00001

diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 98178822..3d358e79 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -214,6 +214,25 @@ def _generate_test_wav() -> io.BytesIO:
     return buf
 
 
+# A short bundled clip of speech ("Hello there") used to validate STT models.
+# Real speech (vs. silence) makes the test transcription non-empty, so a passing
+# test visibly returns text instead of a blank result.
+_TEST_SPEECH_PATH = os.path.join(os.path.dirname(__file__), "assets", "test_speech.mp3")
+
+
+def _get_test_audio() -> io.BytesIO:
+    """Return a short speech clip for STT testing, or silence as a fallback."""
+    try:
+        with open(_TEST_SPEECH_PATH, "rb") as f:
+            buf = io.BytesIO(f.read())
+        buf.name = "test_speech.mp3"
+        buf.seek(0)
+        return buf
+    except OSError:
+        # Fall back to a silent WAV if the bundled clip is missing
+        return _generate_test_wav()
+
+
 def _normalize_error_message(error_msg: str) -> Tuple[bool, str]:
     """Normalize common error patterns into user-friendly messages."""
     lower = error_msg.lower()
@@ -289,11 +308,13 @@ async def test_individual_model(model) -> Tuple[bool, str]:
             return True, "Speech generation successful"
 
         elif model.type == "speech_to_text":
-            audio_file = _generate_test_wav()
+            audio_file = _get_test_audio()
             result = await esp_model.atranscribe(
                 audio_file=audio_file, language="en"
             )
-            text = str(result.text) if hasattr(result, "text") else str(result)
+            text = str(result.text).strip() if hasattr(result, "text") else str(result).strip()
+            if not text:
+                return True, "Connection successful (test clip produced no transcription)"
             return True, f"Transcription: {text[:100]}"
 
         else:
diff --git a/pyproject.toml b/pyproject.toml
index 12cd9b00..c33ea354 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -46,6 +46,9 @@ dependencies = [
 [tool.setuptools]
 package-dir = {"open_notebook" = "open_notebook"}
 
+[tool.setuptools.package-data]
+open_notebook = ["ai/assets/*"]
+
 
 [project.optional-dependencies]
 dev = [

From 57a853879568d481f2c50c5d51b1a871ef4d54a1 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 09:25:01 -0300
Subject: [PATCH 061/345] docs: sync README provider support matrix with actual
 capabilities (#839)

The hand-maintained Provider Support Matrix had drifted from what the app
actually exposes (api/credentials_service.py PROVIDER_MODALITIES). Corrected
the Speech-to-Text / Text-to-Speech columns to match:

- Google: + Speech-to-Text
- Mistral: + Speech-to-Text, + Text-to-Speech (Voxtral)
- xAI: + Text-to-Speech
- Deepgram: new row (Text-to-Speech / Aura)
- Azure OpenAI: + Speech-to-Text, + Text-to-Speech (was already supported)
- OpenAI Compatible: + Embedding, + Speech-to-Text, + Text-to-Speech (was already supported)

The audio rows now reflect the providers shipped in 1.9.0; the Azure and
OpenAI-Compatible corrections fix pre-existing inaccuracies.
---
 README.md | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index d3c46210..bf9b5fab 100644
--- a/README.md
+++ b/README.md
@@ -202,20 +202,21 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | OpenAI       | ✅          | ✅               | ✅             | ✅             |
 | Anthropic    | ✅          | ❌               | ❌             | ❌             |
 | Groq         | ✅          | ❌               | ✅             | ❌             |
-| Google (GenAI) | ✅          | ✅               | ❌             | ✅             |
+| Google (GenAI) | ✅          | ✅               | ✅             | ✅             |
 | Vertex AI    | ✅          | ✅               | ❌             | ✅             |
 | Ollama       | ✅          | ✅               | ❌             | ❌             |
 | Perplexity   | ✅          | ❌               | ❌             | ❌             |
 | ElevenLabs   | ❌          | ❌               | ✅             | ✅             |
-| Azure OpenAI | ✅          | ✅               | ❌             | ❌             |
-| Mistral      | ✅          | ✅               | ❌             | ❌             |
+| Deepgram     | ❌          | ❌               | ❌             | ✅             |
+| Azure OpenAI | ✅          | ✅               | ✅             | ✅             |
+| Mistral      | ✅          | ✅               | ✅             | ✅             |
 | DeepSeek     | ✅          | ❌               | ❌             | ❌             |
 | Voyage       | ❌          | ✅               | ❌             | ❌             |
-| xAI          | ✅          | ❌               | ❌             | ❌             |
+| xAI          | ✅          | ❌               | ❌             | ✅             |
 | OpenRouter   | ✅          | ❌               | ❌             | ❌             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
 | MiniMax      | ✅          | ❌               | ❌             | ❌             |
-| OpenAI Compatible* | ✅          | ❌               | ❌             | ❌             |
+| OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
 
 *Supports LM Studio and any OpenAI-compatible endpoint
 

From 30aed66aecc7cf8590e89eed95310015ab438c5b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 09:25:42 -0300
Subject: [PATCH 062/345] chore(release): 1.9.0 (#836)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* chore(release): 1.9.0

Bump version 1.8.5 -> 1.9.0 and cut the CHANGELOG.

Release highlights: Esperanto 2.20.0 -> 2.22.0 (new audio providers — Mistral
Voxtral STT/TTS, Deepgram TTS, xAI TTS, plus Google/Vertex/ElevenLabs audio
matrix), per-credential Ollama num_ctx override, and inherited upstream fixes
(OpenRouter JSON body, null-embedding errors, streaming tool calls, base_url
normalization, Ollama thinking models). Also includes previously-unreleased
EMBEDDING_BATCH_SIZE / CORS_ORIGINS / MIN_CHUNK_SIZE additions and fixes.

* docs(changelog): note STT test speech-clip fix (#838) under 1.9.0
---
 CHANGELOG.md   | 25 +++++++++++++++++++++++--
 pyproject.toml |  2 +-
 uv.lock        |  2 +-
 3 files changed, 25 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 606dbd81..38d43d72 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,16 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.9.0] - 2026-06-02
+
 ### Added
+- **New audio providers**, surfacing the capabilities added in Esperanto 2.21–2.22:
+  - **Mistral Voxtral** speech-to-text (`voxtral-*-latest`) and text-to-speech (`voxtral-mini-tts`), reusing the existing Mistral credential (#827)
+  - **Deepgram** text-to-speech (Aura voice catalog) as a new provider (`DEEPGRAM_API_KEY`) (#827)
+  - **xAI** text-to-speech (#827)
+  - **Google** speech-to-text & text-to-speech, **Vertex** text-to-speech, and **ElevenLabs** speech-to-text (Scribe), completing the audio provider matrix (#828)
+- Optional per-credential **`num_ctx`** (context window) override for Ollama models, configurable in Settings → API Keys and translated across all 13 locales (#825)
 - `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` environment variable to override the embedding batch size; default remains `50`. Helps with CPU-only local embedding and stricter OpenAI-compatible endpoints (#735)
 - `CORS_ORIGINS` environment variable to configure the API's allowed origins (comma-separated). Default remains `*` for backward compatibility; the API now logs a startup warning prompting users to set it for production deployments. Exception responses honor the configured origins when explicitly set (#585, #597, #730)
 - `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` environment variable (default: 5 tokens) to filter out degenerate tiny chunks before embedding. Set to `0` to disable.
 
-### Fixed
-- URL source embedding no longer crashes with `TypeError: float() argument must be a string or a real number, not 'NoneType'` when header-based splitters emit single-character fragments from complex HTML pages (e.g. Wikipedia, Project Gutenberg). Such chunks are now filtered before being sent to the embedding provider (#764)
+### Changed
+- Bumped **Esperanto 2.20.0 → 2.22.0**. Beyond the new audio providers above, this inherits several upstream fixes and behavior changes (see below).
+
+### Inherited from Esperanto 2.21–2.22
+- **Fixed:** OpenRouter LLM and embedding requests now send a proper JSON body (previously sent a malformed form-encoded payload).
+- **Fixed:** OpenAI-compatible endpoints (e.g. llama.cpp) that return null embeddings now raise a clear, descriptive error instead of an opaque `TypeError`.
+- **Fixed:** Streaming tool calls now return proper `ToolCall` objects across Anthropic, Google, Vertex, and Ollama.
+- **Fixed:** `base_url` trailing slashes are normalized across providers, preventing double-slash URLs (and 301 redirects) for Ollama and other self-hosted endpoints.
+- **Fixed:** Ollama "thinking" models (e.g. Qwen) now merge their reasoning content correctly.
+- **Fixed:** Model discovery honors a custom `base_url` (LiteLLM/vLLM/OpenAI-compatible proxies).
+- **Behavior change:** the Ollama default context window (`num_ctx`) is now **8192** (was 128000) to avoid out-of-memory errors on consumer GPUs. Raise it per-credential via the new `num_ctx` field if your hardware allows.
+- **Behavior change:** the Google embedding default model is now `gemini-embedding-001` (the previous default, `text-embedding-004`, was removed from Google's API). If you used Google embeddings with the old default, re-create the model and re-embed your content (embedding dimensions changed).
+- **Fixed:** Google TTS default model updated to a currently-working preview model.
 
 ### Fixed
+- URL source embedding no longer crashes with `TypeError: float() argument must be a string or a real number, not 'NoneType'` when header-based splitters emit single-character fragments from complex HTML pages (e.g. Wikipedia, Project Gutenberg). Such chunks are now filtered before being sent to the embedding provider (#764)
 - Language toggle now uses `t('common.german')` instead of a hardcoded "Deutsch" label, matching the pattern used by every other language entry (follow-up to #794)
+- Speech-to-text model connection tests now transcribe a short bundled speech clip instead of silence, so a passing test returns real text instead of a blank transcription (#838)
 
 ## [1.8.5] - 2026-04-14
 
diff --git a/pyproject.toml b/pyproject.toml
index c33ea354..322c3973 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.8.5"
+version = "1.9.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/uv.lock b/uv.lock
index d372d646..a5e6bc1c 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2086,7 +2086,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.8.5"
+version = "1.9.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From fc26f9a02ffb4b6b439dadbd576be46a607910e8 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 09:41:55 -0300
Subject: [PATCH 063/345] fix(docker): retry npm ci to survive transient
 registry ECONNRESETs (#840)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The multi-arch build runs `npm ci` for the arm64 image under QEMU emulation,
which is slow and prone to transient `ECONNRESET` errors from the npm registry
(exit code 152) — this broke the Development Build after a recent merge while
the amd64 leg succeeded.

Add npm fetch-retry settings and wrap `npm ci` in a retry loop (up to 5
attempts) in both Dockerfile and Dockerfile.single so a single network blip no
longer fails the whole multi-arch build (incl. the release build).
---
 Dockerfile        | 13 +++++++++++--
 Dockerfile.single | 13 +++++++++++--
 2 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 848178d1..3b7b58e1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -47,8 +47,17 @@ COPY . /app
 WORKDIR /app/frontend
 ARG NPM_REGISTRY=https://registry.npmjs.org/
 COPY frontend/package.json frontend/package-lock.json ./
-RUN npm config set registry ${NPM_REGISTRY}
-RUN npm ci
+RUN npm config set registry ${NPM_REGISTRY} \
+ && npm config set fetch-retries 5 \
+ && npm config set fetch-retry-mintimeout 20000 \
+ && npm config set fetch-retry-maxtimeout 120000
+# Retry npm ci to survive transient registry ECONNRESETs, which are common on
+# the QEMU-emulated arm64 leg of the multi-arch build.
+RUN i=0; until npm ci; do \
+      i=$((i+1)); \
+      if [ "$i" -ge 5 ]; then echo "npm ci failed after $i attempts"; exit 1; fi; \
+      echo "npm ci failed (attempt $i); retrying in 15s"; sleep 15; \
+    done
 COPY frontend/ ./
 RUN npm run build
 
diff --git a/Dockerfile.single b/Dockerfile.single
index 1eb5e805..6d421ee4 100644
--- a/Dockerfile.single
+++ b/Dockerfile.single
@@ -5,8 +5,17 @@ WORKDIR /app/frontend
 # Copy dependency files first to leverage cache
 COPY frontend/package.json frontend/package-lock.json ./
 ARG NPM_REGISTRY=https://registry.npmjs.org/
-RUN npm config set registry ${NPM_REGISTRY}
-RUN npm ci
+RUN npm config set registry ${NPM_REGISTRY} \
+ && npm config set fetch-retries 5 \
+ && npm config set fetch-retry-mintimeout 20000 \
+ && npm config set fetch-retry-maxtimeout 120000
+# Retry npm ci to survive transient registry ECONNRESETs, which are common on
+# the QEMU-emulated arm64 leg of the multi-arch build.
+RUN i=0; until npm ci; do \
+      i=$((i+1)); \
+      if [ "$i" -ge 5 ]; then echo "npm ci failed after $i attempts"; exit 1; fi; \
+      echo "npm ci failed (attempt $i); retrying in 15s"; sleep 15; \
+    done
 
 # Copy the rest of the frontend source
 COPY frontend/ ./

From d114dfcc9ac19abd0d4f7cf168382d3f3b08c0f8 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 12:06:13 -0300
Subject: [PATCH 064/345] chore(ci): bump GitHub Actions to Node 24 versions
 (#841)

* chore(ci): bump GitHub Actions to Node 24 runtime versions

GitHub forces Node 20 JavaScript actions to Node 24 on 2026-06-16 and removes
Node 20 from runners on 2026-09-16. Bump all actions to their latest majors,
which run on Node 24 (verified via each action.yml `runs.using: node24`):

- actions/checkout v4 -> v6
- actions/cache v3 -> v5
- actions/setup-node v4 -> v6
- astral-sh/setup-uv v4 -> v8
- docker/build-push-action v5 -> v7
- docker/login-action v3 -> v4
- docker/setup-buildx-action v3 -> v4

Removes the Node 20 deprecation warnings and keeps CI/release builds working
past the runner cutoff.

* fix(ci): pin astral-sh/setup-uv to v8.1.0 (no bare v8 major tag)
---
 .github/workflows/build-and-release.yml | 26 ++++++++++++-------------
 .github/workflows/build-dev.yml         | 26 ++++++++++++-------------
 .github/workflows/test.yml              |  8 ++++----
 3 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 6c91f85a..2970c66e 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -27,7 +27,7 @@ jobs:
       has_dockerhub_secrets: ${{ steps.check.outputs.has_dockerhub_secrets }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Extract version from pyproject.toml
         id: version
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Free up disk space
         run: |
@@ -67,10 +67,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -78,13 +78,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v3
+        uses: actions/cache@v5
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-regular-${{ github.sha }}
@@ -126,7 +126,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push regular image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
@@ -146,7 +146,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Free up disk space
         run: |
@@ -158,10 +158,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -169,13 +169,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v3
+        uses: actions/cache@v5
         with:
           path: /tmp/.buildx-cache-single
           key: ${{ runner.os }}-buildx-single-${{ github.sha }}
@@ -217,7 +217,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile.single
diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index ef3d819c..0d35e6c6 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -39,7 +39,7 @@ jobs:
       is_push_to_main: ${{ steps.check.outputs.is_push_to_main }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Extract version from pyproject.toml
         id: version
@@ -77,7 +77,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Free up disk space
         if: needs.extract-version.outputs.is_push_to_main == 'true'
@@ -90,11 +90,11 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
         if: needs.extract-version.outputs.is_push_to_main == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -102,13 +102,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.is_push_to_main == 'true' && needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v3
+        uses: actions/cache@v5
         with:
           path: /tmp/.buildx-cache-dev
           key: ${{ runner.os }}-buildx-dev-${{ github.sha }}
@@ -135,7 +135,7 @@ jobs:
           fi
 
       - name: Build and push regular image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile
@@ -157,7 +157,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Free up disk space
         run: |
@@ -169,10 +169,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -180,13 +180,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v3
+        uses: actions/cache@v5
         with:
           path: /tmp/.buildx-cache-dev-single
           key: ${{ runner.os }}-buildx-dev-single-${{ github.sha }}
@@ -203,7 +203,7 @@ jobs:
           echo "tags=${TAGS}" >> $GITHUB_OUTPUT
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: ./Dockerfile.single
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c6d1f23e..931fefad 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v4
+        uses: astral-sh/setup-uv@v8.1.0
         with:
           enable-cache: true
 
@@ -43,10 +43,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm

From 327d766e2ad2c86afe39eca5473b1441c6b2d749 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 2 Jun 2026 21:38:05 -0300
Subject: [PATCH 065/345] fix(providers): expose OpenRouter embedding modality
 (#842)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

OpenRouter embeddings work end-to-end as of 1.9.0 (Esperanto 2.22 fixed the
malformed embedding request body, and the frontend already offers the
embedding modality for OpenRouter). Align the backend so it's consistent:

- credentials_service PROVIDER_MODALITIES: openrouter -> [language, embedding]
  so env/legacy credential migration also enables embedding for OpenRouter
  (get_default_modalities).
- README provider matrix: OpenRouter embedding ✅.

Closes #717
---
 README.md                  | 2 +-
 api/credentials_service.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index bf9b5fab..cb56cf9d 100644
--- a/README.md
+++ b/README.md
@@ -213,7 +213,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | DeepSeek     | ✅          | ❌               | ❌             | ❌             |
 | Voyage       | ❌          | ✅               | ❌             | ❌             |
 | xAI          | ✅          | ❌               | ❌             | ✅             |
-| OpenRouter   | ✅          | ❌               | ❌             | ❌             |
+| OpenRouter   | ✅          | ✅               | ❌             | ❌             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
 | MiniMax      | ✅          | ❌               | ❌             | ❌             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 58dc5b1c..6661d634 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -71,7 +71,7 @@ PROVIDER_MODALITIES: Dict[str, List[str]] = {
     "mistral": ["language", "embedding", "speech_to_text", "text_to_speech"],
     "deepseek": ["language"],
     "xai": ["language", "text_to_speech"],
-    "openrouter": ["language"],
+    "openrouter": ["language", "embedding"],
     "voyage": ["embedding"],
     "elevenlabs": ["text_to_speech", "speech_to_text"],
     "deepgram": ["text_to_speech"],

From 2af3a5895bc4b85216160e3356273ac45c7fbdd3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 13 Jun 2026 08:29:24 -0300
Subject: [PATCH 066/345] chore(deps): bump tornado from 6.5.5 to 6.5.6 (#877)

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.5 to 6.5.6.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.5...v6.5.6)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/uv.lock b/uv.lock
index a5e6bc1c..1b245490 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3455,19 +3455,19 @@ wheels = [
 
 [[package]]
 name = "tornado"
-version = "6.5.5"
+version = "6.5.6"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f8/f1/3173dfa4a18db4a9b03e5d55325559dab51ee653763bb8745a75af491286/tornado-6.5.5.tar.gz", hash = "sha256:192b8f3ea91bd7f1f50c06955416ed76c6b72f96779b962f07f911b91e8d30e9", size = 516006, upload-time = "2026-03-10T21:31:02.067Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/50/57/6d7303a77ae439d9189108f76c0c4fd89ee5e2cc8387bffb55232565c4ed/tornado-6.5.6.tar.gz", hash = "sha256:9a365179fe8ff6b8766f602c0f67c185d778193e9bdd828b19f0b6ed7764177d", size = 518139, upload-time = "2026-05-27T15:35:54.646Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/59/8c/77f5097695f4dd8255ecbd08b2a1ed8ba8b953d337804dd7080f199e12bf/tornado-6.5.5-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:487dc9cc380e29f58c7ab88f9e27cdeef04b2140862e5076a66fb6bb68bb1bfa", size = 445983, upload-time = "2026-03-10T21:30:44.28Z" },
-    { url = "https://files.pythonhosted.org/packages/ab/5e/7625b76cd10f98f1516c36ce0346de62061156352353ef2da44e5c21523c/tornado-6.5.5-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:65a7f1d46d4bb41df1ac99f5fcb685fb25c7e61613742d5108b010975a9a6521", size = 444246, upload-time = "2026-03-10T21:30:46.571Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/04/7b5705d5b3c0fab088f434f9c83edac1573830ca49ccf29fb83bf7178eec/tornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:e74c92e8e65086b338fd56333fb9a68b9f6f2fe7ad532645a290a464bcf46be5", size = 447229, upload-time = "2026-03-10T21:30:48.273Z" },
-    { url = "https://files.pythonhosted.org/packages/34/01/74e034a30ef59afb4097ef8659515e96a39d910b712a89af76f5e4e1f93c/tornado-6.5.5-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:435319e9e340276428bbdb4e7fa732c2d399386d1de5686cb331ec8eee754f07", size = 448192, upload-time = "2026-03-10T21:30:51.22Z" },
-    { url = "https://files.pythonhosted.org/packages/be/00/fe9e02c5a96429fce1a1d15a517f5d8444f9c412e0bb9eadfbe3b0fc55bf/tornado-6.5.5-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:3f54aa540bdbfee7b9eb268ead60e7d199de5021facd276819c193c0fb28ea4e", size = 448039, upload-time = "2026-03-10T21:30:53.52Z" },
-    { url = "https://files.pythonhosted.org/packages/82/9e/656ee4cec0398b1d18d0f1eb6372c41c6b889722641d84948351ae19556d/tornado-6.5.5-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:36abed1754faeb80fbd6e64db2758091e1320f6bba74a4cf8c09cd18ccce8aca", size = 447445, upload-time = "2026-03-10T21:30:55.541Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/76/4921c00511f88af86a33de770d64141170f1cfd9c00311aea689949e274e/tornado-6.5.5-cp39-abi3-win32.whl", hash = "sha256:dd3eafaaeec1c7f2f8fdcd5f964e8907ad788fe8a5a32c4426fbbdda621223b7", size = 448582, upload-time = "2026-03-10T21:30:57.142Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/23/f6c6112a04d28eed765e374435fb1a9198f73e1ec4b4024184f21faeb1ad/tornado-6.5.5-cp39-abi3-win_amd64.whl", hash = "sha256:6443a794ba961a9f619b1ae926a2e900ac20c34483eea67be4ed8f1e58d3ef7b", size = 448990, upload-time = "2026-03-10T21:30:58.857Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/c8/876602cbc96469911f0939f703453c1157b0c826ecb05bdd32e023397d4e/tornado-6.5.5-cp39-abi3-win_arm64.whl", hash = "sha256:2c9a876e094109333f888539ddb2de4361743e5d21eece20688e3e351e4990a6", size = 448016, upload-time = "2026-03-10T21:31:00.43Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/0d/b4f481e18c5a51864e6d12b9a05ecf72919696680b747c958c3fc1f4fbae/tornado-6.5.6-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:65fcfaafb079435c2c19dc9e07c0f1cf0fa9051759ed0a7d0a3ba7ea7f64919c", size = 447737, upload-time = "2026-05-27T15:35:38.122Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/9c/5430c39fcab1144d35860f457b15e9c08b4bc7ac86764354204e983d6183/tornado-6.5.6-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:38bc01b4acacded2de63ae78023548e41ebe6fbed3ec05a796d7ae3ad893887e", size = 445899, upload-time = "2026-05-27T15:35:40.519Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/79/fa7e14a2f939c807a8d30619b4eb604eab219601b78792516ebe22d40cf9/tornado-6.5.6-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:b942e6a137fda31ff54bf8e6e2c8d1c37f1f50583f3ed53fb840b53b9601d104", size = 448964, upload-time = "2026-05-27T15:35:42.106Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/71/bd67d5f5199f937dafe03a49a37989f60f600ff6fef34c79412a829d97bd/tornado-6.5.6-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8666946e70171b8c3f1fc9b7876fac492e84822c4c7f3746f4e8f8bc9ac92a79", size = 449935, upload-time = "2026-05-27T15:35:43.906Z" },
+    { url = "https://files.pythonhosted.org/packages/cc/a4/c24388c9cf5b3c3a513b56a158af9f23092c9a2810d789e294310797df21/tornado-6.5.6-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:1c34cfab7ad6d104f052f55de06d39bbafc5885cfeb4da688803308dbcfa90b7", size = 449767, upload-time = "2026-05-27T15:35:45.793Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/eb/6a07ad550c3f7b37244bd0becdf293ec3d3e961783d8b720a97df50de1b2/tornado-6.5.6-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:385f35e4e22fb52551dfcda4cdc8c30c61c2c001aef5ddad99cdfe116952efd3", size = 449174, upload-time = "2026-05-27T15:35:47.485Z" },
+    { url = "https://files.pythonhosted.org/packages/bb/84/3469e098dccdb6763130e06aacd786bb4363fca7b590a55c101ddf34ed30/tornado-6.5.6-cp39-abi3-win32.whl", hash = "sha256:db475f1b67b2809b10bb16264829087724ca8d24fe4ed47f7b8675cae453ef86", size = 450230, upload-time = "2026-05-27T15:35:49.322Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/3c/273a04e0b9dd9016f1685cca0c1c8795a71ac88a34a8c889a0b443483226/tornado-6.5.6-cp39-abi3-win_amd64.whl", hash = "sha256:6739bf1e8eb09230f1280ddbd3236f0309db70f2c551a8dbc40f62babdf82f79", size = 450667, upload-time = "2026-05-27T15:35:51.194Z" },
+    { url = "https://files.pythonhosted.org/packages/02/98/0cffe22a224f60c5fb1e3aa0b76f9da2e1ca78b0e9545e3d077c68ce60a7/tornado-6.5.6-cp39-abi3-win_arm64.whl", hash = "sha256:2543597b24a695d72338a9a77818362d72387c03ae173f1f169eadc5c91466ac", size = 449690, upload-time = "2026-05-27T15:35:52.902Z" },
 ]
 
 [[package]]

From ad03bca0252dc48089490100883777b6ba9b422a Mon Sep 17 00:00:00 2001
From: Roy Francis <royfrancis@users.noreply.github.com>
Date: Sat, 13 Jun 2026 13:32:25 +0200
Subject: [PATCH 067/345] fix: update instructions for configuring AI provider
 (#873)

---
 README.md | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index cb56cf9d..056fbce2 100644
--- a/README.md
+++ b/README.md
@@ -156,11 +156,12 @@ docker compose up -d
 Wait 15-20 seconds, then open: **http://localhost:8502**
 
 ### Step 4: Configure AI Provider
-1. Go to **Settings** → **API Keys**
-2. Click **Add Credential**
-3. Choose your provider (OpenAI, Anthropic, Google, etc.)
-4. Paste your API key and click **Save**
-5. Click **Test Connection** → **Discover Models** → **Register Models**
+1. Go to **Models** and choose your provider (OpenAI, Anthropic, Google, etc.)
+2. Click **+ Add Configuration**
+3. Paste your API key and other info as needed and click **Add Configuration**
+4. Click **Test** to test connection
+5. Click **Sync Models** and check models to include
+6. Under **Default Model Assignments**, click **Auto-Assign Defaults** or manually specify which models to use for what 
 
 Done! You're ready to create your first notebook.
 

From 0aaaa3245525c539b8b3a043416fcbfd21477e03 Mon Sep 17 00:00:00 2001
From: doganreis <102720101+doganreis@users.noreply.github.com>
Date: Sat, 13 Jun 2026 14:46:15 +0300
Subject: [PATCH 068/345] feat(i18n): add Turkish (tr-TR) translation (#871)

* feat(i18n): add Turkish (tr-TR) translation

* fix(i18n): derive LanguageCode from resources to avoid sync drift

* fix(i18n): make Turkish selectable and fix tr-TR syntax errors

- Fix unescaped quotes in tr-TR search strings that broke the build
- Add Turkish entry to LanguageToggle so it is selectable in the UI
- Register Turkish date-fns locale for date formatting
- Add turkish language name key across all locales for consistency

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 docs/7-DEVELOPMENT/change-playbooks.md        | 198 ++++
 .../src/components/common/LanguageToggle.tsx  |   6 +
 frontend/src/lib/locales/bn-IN/index.ts       |   1 +
 frontend/src/lib/locales/ca-ES/index.ts       |   1 +
 frontend/src/lib/locales/de-DE/index.ts       |   1 +
 frontend/src/lib/locales/en-US/index.ts       |   1 +
 frontend/src/lib/locales/es-ES/index.ts       |   1 +
 frontend/src/lib/locales/fr-FR/index.ts       |   1 +
 frontend/src/lib/locales/index.ts             |   7 +-
 frontend/src/lib/locales/it-IT/index.ts       |   1 +
 frontend/src/lib/locales/ja-JP/index.ts       |   1 +
 frontend/src/lib/locales/pl-PL/index.ts       |   1 +
 frontend/src/lib/locales/pt-BR/index.ts       |   1 +
 frontend/src/lib/locales/ru-RU/index.ts       |   1 +
 frontend/src/lib/locales/tr-TR/index.ts       | 936 ++++++++++++++++++
 frontend/src/lib/locales/zh-CN/index.ts       |   1 +
 frontend/src/lib/locales/zh-TW/index.ts       |   1 +
 frontend/src/lib/utils/date-locale.ts         |   3 +-
 frontend/test-results/.last-run.json          |   4 +
 history.txt                                   |   3 +
 20 files changed, 1167 insertions(+), 3 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/change-playbooks.md
 create mode 100644 frontend/src/lib/locales/tr-TR/index.ts
 create mode 100644 frontend/test-results/.last-run.json
 create mode 100644 history.txt

diff --git a/docs/7-DEVELOPMENT/change-playbooks.md b/docs/7-DEVELOPMENT/change-playbooks.md
new file mode 100644
index 00000000..6bddc14d
--- /dev/null
+++ b/docs/7-DEVELOPMENT/change-playbooks.md
@@ -0,0 +1,198 @@
+# Change Playbooks
+
+Step-by-step guides for common types of changes in the Open Notebook codebase. Each playbook lists the files to touch **in order**, what to do at each step, and what to test.
+
+> **For AI agents:** Read the relevant playbook BEFORE implementing. Follow the sequence — skipping steps causes incomplete changes that break other layers.
+
+---
+
+## How to Use This Document
+
+1. Identify what type of change your issue requires
+2. Follow the playbook step by step
+3. If a change spans multiple types (e.g., new field + new endpoint), combine the relevant playbooks
+4. When in doubt, read existing examples in the codebase — look at the most recent similar change via `git log`
+
+---
+
+## Playbook: Add a Field to an Existing Model
+
+**Example:** "Add `language` field to Source"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `open_notebook/domain/<model>.py` | Add field with type hint and default value. Follow existing patterns in the class. |
+| 2 | `migrations/NNN_<description>.surql` | Create migration. Use next number in sequence. `DEFINE FIELD` for new fields, `UPDATE` for backfilling existing records. |
+| 3 | `api/models.py` | Add field to `*Create`, `*Update` (Optional), and `*Response` schemas. |
+| 4 | `frontend/src/lib/types/api.ts` | Add field to the corresponding TypeScript interface (`*Response`, `Create*Request`, `Update*Request`). |
+| 5 | Frontend component (if user-facing) | Display or edit the field in the relevant component. |
+| 6 | `frontend/src/lib/locales/*/` | Add i18n strings if the field has a user-visible label. All 7 locales. |
+| 7 | Tests | Add/update tests covering the new field — at minimum, API test for create/read. |
+
+**Verify:** Restart API (migration auto-runs), check logs for migration success, test via `/docs`.
+
+---
+
+## Playbook: New API Endpoint
+
+**Example:** "Add endpoint to export notebook as PDF"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `api/models.py` | Define request/response Pydantic schemas. Naming: `<Feature>Request`, `<Feature>Response`. |
+| 2 | `api/routers/<resource>.py` | Add endpoint to existing router, OR create new router file if it's a new resource. Follow the pattern: validate → call service → return response. |
+| 3 | `api/<resource>_service.py` | Business logic goes here, not in the router. Create new service file if needed. |
+| 4 | `api/main.py` | If new router file: register with `app.include_router()`. |
+| 5 | `frontend/src/lib/types/api.ts` | Add TypeScript types matching the Pydantic schemas. |
+| 6 | `frontend/src/lib/api/<resource>.ts` | Add method to the API module. Follow existing pattern (axios call, return `response.data`). |
+| 7 | `frontend/src/lib/hooks/use-<resource>.ts` | Add React Query hook. `useQuery` for GET, `useMutation` for POST/PUT/DELETE. Include cache invalidation and toast. |
+| 8 | Frontend component/page | Wire up the hook in the UI. |
+| 9 | Tests | API test (status codes, validation, error cases). |
+
+**Naming conventions:**
+- Routers: `@router.get("/resources/{id}")` (plural, lowercase, kebab for multi-word)
+- Services: functions are `async`, named descriptively (`process_source`, `generate_podcast`)
+- Hooks: `useResources()` for list, `useResource(id)` for single, `useCreateResource()` for mutation
+
+---
+
+## Playbook: New LangGraph Workflow
+
+**Example:** "Add a summarization workflow"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `prompts/<workflow_name>/*.jinja` | Create Jinja2 prompt templates. Use `Prompter` from ai-prompter. |
+| 2 | `open_notebook/graphs/<workflow_name>.py` | Define `StateDict` (TypedDict), node functions, build graph with `StateGraph`. Use `provision_langchain_model()` for model selection. Wrap LLM calls with `classify_error()`. |
+| 3 | `api/<resource>_service.py` | Invoke graph: `await graph.ainvoke(state, config)`. |
+| 4 | `api/routers/<resource>.py` | Expose endpoint to trigger the workflow. |
+| 5 | `commands/<workflow>_commands.py` | If the workflow should run async: create command with `CommandInput`/`CommandOutput`. Register in command service. |
+| 6 | Frontend integration | API module → hook → component. |
+| 7 | Tests | Test graph nodes individually with mocked LLM responses. |
+
+**Key patterns:**
+- Nodes are sync functions (LangGraph requirement) but can call async code via ThreadPoolExecutor
+- Use `classify_error()` to convert raw exceptions to typed `OpenNotebookError` subclasses
+- Use `provision_langchain_model()` for model selection — never hardcode a provider
+- State is a TypedDict, NOT a Pydantic model
+
+---
+
+## Playbook: Bug Fix (Single Layer)
+
+**Example:** "order_by parameter not working on sources endpoint"
+
+| Step | What to Do |
+|------|------------|
+| 1 | **Identify the layer.** Read the issue and determine: frontend, API router, service, domain model, database, or graph. |
+| 2 | **Read the module's CLAUDE.md.** Every major module has one. It documents patterns and gotchas. |
+| 3 | **Reproduce.** Use the API docs (`/docs`), browser, or a test to confirm the bug. |
+| 4 | **Fix.** Make the minimal change needed. Don't refactor surrounding code. |
+| 5 | **Add a test** that reproduces the bug and verifies the fix. |
+| 6 | **Run existing tests** to verify no regression: `uv run pytest tests/` |
+
+---
+
+## Playbook: Bug Fix (Cross-Layer)
+
+**Example:** "Creating a source via URL doesn't show in notebook"
+
+| Step | What to Do |
+|------|------------|
+| 1 | **Trace the data flow.** Start from where the user sees the problem (frontend) and trace backward: component → hook → API call → router → service → domain → database. |
+| 2 | **Identify where the chain breaks.** Use API docs to test the backend independently of the frontend. Use SurrealDB queries to check if data was persisted. |
+| 3 | **Fix at the right layer.** Don't patch the symptom in the frontend if the bug is in the service. |
+| 4 | **Verify the full chain** after fixing. |
+| 5 | **Add tests** at the layer where the bug was. |
+
+---
+
+## Playbook: Database Migration
+
+**Example:** "Add index on source.notebook_id for query performance"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `migrations/NNN_<description>.surql` | Write SurrealQL. Use next number in sequence. Check existing migrations for patterns. |
+| 2 | Domain model (if schema change) | Update field definitions to match. |
+| 3 | API schemas (if new/changed fields) | Update Pydantic models. |
+| 4 | **Verify:** Restart API and check logs | Migrations auto-run on startup. Look for errors in Loguru output. |
+
+**Important:**
+- Migrations are numbered and run in order
+- They're tracked in `_migrations` table — won't re-run
+- For destructive changes (DROP FIELD), consider data preservation
+- Test with existing data, not just empty database
+
+---
+
+## Playbook: Frontend-Only Change
+
+**Example:** "Improve notebook list loading state"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | Identify component | Components are in `frontend/src/app/` (pages) or `frontend/src/components/` (shared). |
+| 2 | Make changes | Follow existing patterns: functional components, hooks for state, Tailwind for styling. |
+| 3 | i18n strings | If adding user-visible text, add to ALL locale files under `frontend/src/lib/locales/`. |
+| 4 | Test in browser | Check responsive layout, dark mode (if applicable), loading states, empty states, error states. |
+
+**Key patterns:**
+- `'use client'` directive at top of components using hooks
+- State: `useState` for local, Zustand for global, TanStack Query for server
+- Styling: Tailwind utility classes, Shadcn/ui components from `components/ui/`
+- Types: Define in `lib/types/api.ts`, import everywhere
+
+---
+
+## Playbook: New Background Command
+
+**Example:** "Add command to rebuild all embeddings for a notebook"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `commands/<name>_commands.py` | Define `CommandInput` and `CommandOutput` Pydantic classes. Write the command function. |
+| 2 | Register command | Add to the command service so it can be submitted via `CommandService.submit_command_job()`. |
+| 3 | API endpoint | Add endpoint that submits the command and returns the command ID. |
+| 4 | Frontend (polling) | Use `/commands/{command_id}` endpoint to poll for status. Show progress to user. |
+
+**Pattern:**
+- Commands are fire-and-forget: submit returns immediately with a command ID
+- Retry config: `max_attempts`, `stop_on` exceptions (ValueError = no retry)
+- Exponential backoff with jitter for transient failures
+
+---
+
+## Playbook: i18n / Translation Update
+
+**Example:** "Add translations for new settings page"
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `frontend/src/lib/locales/en-US/index.ts` | Add English strings first. Group by feature. |
+| 2 | All other locale files | Add the same keys to: `pt-BR`, `zh-CN`, `zh-TW`, `ja-JP`, `ru-RU`, `bn-IN`. Use English as placeholder if translation unavailable. |
+| 3 | Component | Use `const { t } = useTranslation()` and access via `t.section.key`. |
+
+**7 locales total.** Don't forget any.
+
+---
+
+## Quick Reference: File Locations by Layer
+
+| Layer | Location | Schema/Types | Tests |
+|-------|----------|-------------|-------|
+| Domain models | `open_notebook/domain/` | Pydantic fields | `tests/` |
+| Database | `open_notebook/database/repository.py` | SurrealQL | `tests/` |
+| Migrations | `migrations/*.surql` | SurrealQL | Auto-run on startup |
+| AI/LLM | `open_notebook/ai/` | Esperanto types | `tests/` |
+| Graphs | `open_notebook/graphs/` | TypedDict state | `tests/` |
+| Prompts | `prompts/**/*.jinja` | Jinja2 context | — |
+| Commands | `commands/` | CommandInput/Output | `tests/` |
+| API routers | `api/routers/` | `api/models.py` | `tests/` |
+| API services | `api/*_service.py` | — | `tests/` |
+| Frontend types | `frontend/src/lib/types/` | TypeScript interfaces | — |
+| Frontend API | `frontend/src/lib/api/` | — | — |
+| Frontend hooks | `frontend/src/lib/hooks/` | — | `frontend/src/test/` |
+| Frontend components | `frontend/src/components/` | Props interfaces | `frontend/src/test/` |
+| Frontend pages | `frontend/src/app/` | — | — |
+| i18n | `frontend/src/lib/locales/` | — | — |
diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 8c435319..4ca6fc82 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -106,6 +106,12 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         >
           <span>{t('common.polish')}</span>
         </DropdownMenuItem>
+        <DropdownMenuItem
+          onClick={() => setLanguage('tr-TR')}
+          className={currentLang === 'tr-TR' || currentLang.startsWith('tr') ? 'bg-accent' : ''}
+        >
+          <span>{t('common.turkish')}</span>
+        </DropdownMenuItem>
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 1e6db40f..7d2fb2c6 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -30,6 +30,7 @@ export const bnIN = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "উৎস",
     notebook: "নোটবুক",
     podcast: "পডকাস্ট",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index a30782c1..e4551935 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -30,6 +30,7 @@ export const caES = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Font",
     notebook: "Quadern",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index b00ffd51..65fab762 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -33,6 +33,7 @@ export const deDE = {
     catalan: "Català",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Quelle",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 963ab114..dd4dc322 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -30,6 +30,7 @@ export const enUS = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Source",
     notebook: "Notebook",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 98fcf095..b7a9cf7f 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -30,6 +30,7 @@ export const esES = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Fuente",
     notebook: "Cuaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 928fe7c5..b08dd8dd 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -30,6 +30,7 @@ export const frFR = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Source",
     notebook: "Carnet",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/index.ts b/frontend/src/lib/locales/index.ts
index edd1b1f9..2d39023e 100644
--- a/frontend/src/lib/locales/index.ts
+++ b/frontend/src/lib/locales/index.ts
@@ -11,6 +11,7 @@ import { caES } from './ca-ES';
 import { esES } from './es-ES';
 import { deDE } from './de-DE';
 import { plPL } from './pl-PL';
+import { trTR } from './tr-TR';
 
 export const resources = {
   'zh-CN': { translation: zhCN },
@@ -26,11 +27,12 @@ export const resources = {
   'es-ES': { translation: esES },
   'de-DE': { translation: deDE },
   'pl-PL': { translation: plPL },
+  'tr-TR': { translation: trTR },
 } as const;
 
 export type TranslationKeys = typeof enUS;
 
-export type LanguageCode = 'zh-CN' | 'en-US' | 'zh-TW' | 'pt-BR' | 'ja-JP' | 'it-IT' | 'fr-FR' | 'ru-RU' | 'bn-IN' | 'ca-ES' | 'es-ES' | 'de-DE' | 'pl-PL';
+export type LanguageCode = keyof typeof resources;
 
 export type Language = {
   code: LanguageCode;
@@ -39,6 +41,7 @@ export type Language = {
 
 export const languages: Language[] = [
   { code: 'en-US', label: 'English' },
+  { code: 'tr-TR', label: 'Türkçe' },
   { code: 'ca-ES', label: 'Català' },
   { code: 'zh-CN', label: '简体中文' },
   { code: 'zh-TW', label: '繁體中文' },
@@ -53,4 +56,4 @@ export const languages: Language[] = [
   { code: 'pl-PL', label: 'Polski' },
 ];
 
-export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, caES, esES, deDE, plPL };
+export { zhCN, enUS, zhTW, ptBR, jaJP, itIT, frFR, ruRU, bnIN, caES, esES, deDE, plPL, trTR };
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 02d9c65e..abc32245 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -30,6 +30,7 @@ export const itIT = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Fonte",
     notebook: "Quaderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 66a0d7c1..f3a3818f 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -30,6 +30,7 @@ export const jaJP = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "ソース",
     notebook: "ノートブック",
     podcast: "ポッドキャスト",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 096e6a23..75c3291e 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -30,6 +30,7 @@ export const plPL = {
     catalan: "Kataloński",
     german: "Niemiecki",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Źródło",
     notebook: "Notatnik",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 7d6342d8..71599e1f 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -30,6 +30,7 @@ export const ptBR = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Fonte",
     notebook: "Caderno",
     podcast: "Podcast",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index f42fac60..70611d6f 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -30,6 +30,7 @@ export const ruRU = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "Источник",
     notebook: "Блокнот",
     podcast: "Подкаст",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
new file mode 100644
index 00000000..a457a104
--- /dev/null
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -0,0 +1,936 @@
+export const trTR = {
+  common: {
+    search: "Ara...",
+    create: "Yeni",
+    new: "Yeni",
+    cancel: "İptal",
+    delete: "Sil",
+    edit: "Düzenle",
+    theme: "Tema",
+    signOut: "Çıkış Yap",
+    noMatches: "Eşleşme bulunamadı",
+    tryDifferentSearch: "Farklı bir arama terimi deneyin.",
+    light: "Açık",
+    dark: "Koyu",
+    system: "Sistem",
+    loading: "Yükleniyor...",
+    note: "Not",
+    insight: "İçgörü",
+    newSource: "Yeni Kaynak",
+    newNotebook: "Yeni Defter",
+    newPodcast: "Yeni Podcast",
+    language: "Dil",
+    english: "English",
+    chinese: "简体中文",
+    japanese: "日本語",
+    french: "Français",
+    russian: "Русский",
+    bengali: "বাংলা",
+    catalan: "Català",
+    spanish: "Español",
+    german: "Deutsch",
+    polish: "Polski",
+    turkish: "Türkçe",
+    source: "Kaynak",
+    notebook: "Defter",
+    podcast: "Podcast",
+    quickActions: "Hızlı eylemler",
+    quickActionsDesc: "Gezinme, arama, sor, tema",
+    appName: "Open Notebook",
+    add: "Ekle",
+    remove: "Kaldır",
+    confirm: "Onayla",
+    warning: "Uyarı",
+    error: "Hata",
+    success: "Başarılı",
+    model: "Model",
+    back: "Geri",
+    next: "İleri",
+    done: "Tamam",
+    processing: "İşleniyor...",
+    creating: "Oluşturuluyor...",
+    linked: "Bağlı",
+    adding: "Ekleniyor...",
+    addSelected: "Seçilenleri Ekle",
+    customModel: "Özel Model",
+    failed: "başarısız",
+    current: "Mevcut",
+    save: "Kaydet",
+    writeNote: "Not Yaz",
+    batchMode: "Toplu Mod",
+    optional: "İsteğe Bağlı",
+    type: "Tür",
+    title: "Başlık",
+    created: "{time} oluşturuldu",
+    updated: "{time} güncellendi",
+    actions: "Eylemler",
+    noResults: "Sonuç yok",
+    references: "Referanslar",
+    refreshPage: "Lütfen sayfayı yenilemeyi deneyin",
+    refresh: "Yenile",
+    aiGenerated: "Yapay Zeka Üretimi",
+    human: "İnsan",
+    unknown: "Bilinmiyor",
+    notes: "Notlar",
+    chat: "Sohbet",
+    deleteForever: "Kalıcı Olarak Sil",
+    connectionError: "Bağlantı Hatası",
+    unableToConnect: "API sunucusuna bağlanılamıyor",
+    retryConnection: "Bağlantıyı Yeniden Dene",
+    diagnosticInfo: "Tanılama Bilgisi",
+    version: "Sürüm",
+    built: "Derlendi",
+    apiUrl: "API URL",
+    frontendUrl: "Arayüz URL",
+    checkConsoleLogs: "Ayrıntılı günlükler için tarayıcı konsolunu kontrol edin (🔧 [Config] mesajlarına bakın)",
+    yes: "Evet",
+    no: "Hayır",
+    saving: "Kaydediliyor...",
+    description: "Açıklama",
+    saveToNote: "Nota kaydet",
+    copyToClipboard: "Panoya kopyala",
+    close: "Kapat",
+    insights: "İçgörüler",
+    progress: "İlerleme",
+    deleting: "Siliniyor...",
+    created_label: "Oluşturuldu",
+    updated_label: "Güncellendi",
+    download: "İndir",
+    saveChanges: "Değişiklikleri Kaydet",
+    name: "Ad",
+    default: "Varsayılan",
+    nameRequired: "Ad gereklidir",
+    modelConfiguration: "Model Yapılandırması",
+    resetToDefault: "Varsayılana Sıfırla",
+    reasoning: "Akıl Yürütme",
+    searchTerms: "Arama Terimleri",
+    strategy: "Strateji",
+    individualAnswers: "Bireysel Yanıtlar ({count})",
+    finalAnswer: "Son Yanıt",
+    notebookLabel: "Defter: {name}",
+    itemNotFound: "Bu {type} bulunamadı",
+    accessibility: {
+      transformationViews: "Dönüşüm görünümleri",
+      searchKB: "Bilgi tabanınızda sor veya ara",
+      enterQuestion: "Bilgi tabanına sormak için sorunuzu girin",
+      enterSearch: "Arama sorgusunu girin",
+      searchKBBtn: "Bilgi tabanında ara",
+      podcastViews: "Podcast görünümleri",
+      ytVideo: "YouTube videosu",
+      askResponse: "Yanıt",
+      searchNotebooks: "Defterlerde ara",
+    },
+    url: "URL",
+    errorDetails: "Hata Ayrıntıları",
+    editTransformation: "Dönüşümü Düzenle",
+    retry: "Tekrar Dene",
+    traditionalChinese: "繁體中文",
+    portuguese: "Português",
+    completed: "tamamlandı",
+    saveSuccess: "Başarıyla kaydedildi",
+    contextModes: {
+      off: "Sohbete dahil edilmedi",
+      insights: "Yalnızca içgörüler",
+      full: "Tam içerik",
+      clickToCycle: "Geçiş yapmak için tıklayın",
+    },
+    clickToEdit: "Düzenlemek için tıklayın",
+  },
+  apiErrors: {
+    notebookNotFound: "Defter bulunamadı",
+    sourceNotFound: "Kaynak bulunamadı",
+    transformationNotFound: "Dönüşüm bulunamadı",
+    fileUploadFailed: "Dosya yükleme başarısız",
+    urlRequired: "Bağlantı türü için URL gereklidir",
+    contentRequired: "Metin türü için içerik gereklidir",
+    invalidSourceType: "Geçersiz kaynak türü",
+    processingFailed: "İşleme başarısız",
+    failedToQueue: "İşleme kuyruğa eklenemedi",
+    invalidSortBy: "Sıralama alanı 'created' veya 'updated' olmalıdır",
+    invalidSortOrder: "Sıralama yönü 'asc' veya 'desc' olmalıdır",
+    accessDenied: "Dosyaya erişim reddedildi",
+    fileNotFoundOnServer: "Sunucuda dosya bulunamadı",
+    searchFailed: "Arama başarısız",
+    askFailed: "Sorgu başarısız",
+    pleaseEnterQuestion: "Lütfen bir soru girin",
+    pleaseConfigureModels: "Lütfen gerekli tüm modelleri yapılandırın",
+    failedToCreateSession: "Oturum oluşturulamadı",
+    failedToUpdateSession: "Oturum güncellenemedi",
+    failedToDeleteSession: "Oturum silinemedi",
+    failedToSendMessage: "Mesaj gönderilemedi",
+    unauthorized: "Yetkisiz erişim, lütfen şifrenizi kontrol edin",
+    invalidPassword: "Geçersiz şifre",
+    embeddingModelRequired: "Bu özellik için bir gömme modeli gereklidir. Lütfen Modeller bölümünde bir tane yapılandırın.",
+    strategyModelNotFound: "Strateji modeli bulunamadı",
+    answerModelNotFound: "Yanıt modeli bulunamadı",
+    finalAnswerModelNotFound: "Son yanıt modeli bulunamadı",
+    noAnswerGenerated: "Yanıt oluşturulamadı",
+    genericError: "Beklenmeyen bir hata oluştu",
+  },
+  connectionErrors: {
+    apiTitle: "API Sunucusuna Bağlanılamıyor",
+    apiDesc: "Open Notebook API sunucusuna ulaşılamadı",
+    dbTitle: "Veritabanı Bağlantısı Başarısız",
+    dbDesc: "API sunucusu çalışıyor ancak veritabanına erişilemiyor",
+    troubleshooting: "Bu genellikle şu anlama gelir:",
+    apiUnreachable1: "API sunucusu çalışmıyor",
+    apiUnreachable2: "API sunucusu farklı bir adreste çalışıyor",
+    apiUnreachable3: "Ağ bağlantısı sorunları",
+    dbFailed1: "SurrealDB çalışmıyor",
+    dbFailed2: "Veritabanı bağlantı ayarları hatalı",
+    dbFailed3: "API ile veritabanı arasında ağ sorunları",
+    quickFixes: "Hızlı çözümler:",
+    setApiUrl: "API_URL ortam değişkenini ayarlayın:",
+    checkSurreal: "SurrealDB'nin çalışıp çalışmadığını kontrol edin:",
+    seeDocumentation: "Ayrıntılı kurulum talimatları için bakın:",
+    docLink: "Open Notebook Belgeleri",
+    showTechnical: "Teknik Ayrıntıları Göster",
+    attemptedUrl: "Denenen URL",
+    message: "Mesaj",
+    technicalDetails: "Teknik Ayrıntılar",
+    stackTrace: "Yığın İzi",
+    retryLabel: "Bağlantıyı Yeniden Dene",
+    retryHint: "Yeniden denemek için R tuşuna basın veya butona tıklayın",
+    dockerLabel: "Docker için",
+    localDevLabel: "Yerel geliştirme için",
+  },
+  auth: {
+    loginTitle: "Open Notebook",
+    loginDesc: "Uygulamaya erişmek için şifrenizi girin",
+    passwordPlaceholder: "Şifre",
+    signingIn: "Giriş yapılıyor...",
+    signIn: "Giriş Yap",
+    connectErrorHint: "Sunucuya bağlanılamıyor. API'nin çalışıp çalışmadığını kontrol edin.",
+  },
+  navigation: {
+    collect: "Topla",
+    process: "İşle",
+    create: "Oluştur",
+    manage: "Yönet",
+    sources: "Kaynaklar",
+    notebooks: "Defterler",
+    askAndSearch: "Sor ve Ara",
+    podcasts: "Podcastler",
+    models: "Modeller",
+    transformations: "Dönüşümler",
+    transformation: "Dönüşüm",
+    settings: "Ayarlar",
+    advanced: "Gelişmiş",
+    nav: "Gezinme",
+    language: "Dili değiştir",
+    theme: "Tema",
+    ask: "Sor",
+  },
+  notebooks: {
+    title: "Defterler",
+    newNotebook: "Yeni Defter",
+    searchPlaceholder: "Defterlerde ara...",
+    archived: "Arşivlendi",
+    archive: "Arşivle",
+    unarchive: "Arşivden Çıkar",
+    deleteNotebook: "Defteri Sil",
+    deleteNotebookDesc: "\"{name}\" defterini silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
+    deleteNotebookLoading: "Silme önizlemesi yükleniyor...",
+    deleteNotebookNotes: "{count} not kalıcı olarak silinecek.",
+    deleteNotebookNoNotes: "Silinecek not yok.",
+    deleteNotebookExclusiveSources: "{count} kaynak yalnızca bu defterde bulunuyor.",
+    deleteNotebookSharedSources: "{count} kaynak diğer defterlerle paylaşılıyor ve bağlantısı kesilecek.",
+    deleteNotebookNoSources: "Bu defterde kaynak yok.",
+    deleteExclusiveSourcesLabel: "Özel kaynakları sil",
+    keepExclusiveSourcesLabel: "Bağlantıyı kes ve sakla",
+    activeNotebooks: "Aktif Defterler",
+    archivedNotebooks: "Arşivlenmiş Defterler",
+    notFound: "Defter bulunamadı",
+    notFoundDesc: "İstenen defter mevcut değil.",
+    updated: "Güncellendi",
+    namePlaceholder: "Defter adı",
+    addDescription: "Açıklama ekle...",
+    noNotesYet: "Henüz not yok",
+    deleteNote: "Notu Sil",
+    deleteNoteConfirm: "Bu notu silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
+    noteCreatedSuccess: "Not başarıyla oluşturuldu",
+    failedToCreateNote: "Not oluşturulamadı",
+    noteUpdatedSuccess: "Not başarıyla güncellendi",
+    failedToUpdateNote: "Not güncellenemedi",
+    noteDeletedSuccess: "Not başarıyla silindi",
+    failedToDeleteNote: "Not silinemedi",
+    createNew: "Yeni Defter Oluştur",
+    createNewDesc: "Başlamak için bir ad ve isteğe bağlı açıklama girin.",
+    descPlaceholder: "Bu defter hakkında daha fazla bilgi ekleyin...",
+    createSuccess: "Defter başarıyla oluşturuldu",
+    updateSuccess: "Defter başarıyla güncellendi",
+    deleteSuccess: "Defter başarıyla silindi",
+  },
+  sources: {
+    title: "Kaynaklar",
+    add: "Kaynak Ekle",
+    addNew: "Yeni Kaynak Ekle",
+    addExisting: "Mevcut Kaynak Ekle",
+    delete: "Kaynağı Sil",
+    statusPreparing: "Hazırlanıyor",
+    statusQueued: "Kuyrukta",
+    statusProcessing: "İşleniyor",
+    statusCompleted: "Tamamlandı",
+    statusFailed: "Başarısız",
+    statusPreparingDesc: "İşlemeye hazırlanıyor",
+    statusQueuedDesc: "İşlenmeyi bekliyor",
+    statusProcessingDesc: "İşleniyor",
+    statusCompletedDesc: "Başarıyla işlendi",
+    statusFailedDesc: "İşleme başarısız",
+    failedToLoad: "Kaynaklar yüklenemedi",
+    allSourcesDesc: "Tüm kaynaklarınızı burada görüntüleyin. Yeni kaynaklar ekleyebilir veya mevcut olanları yönetebilirsiniz.",
+    allSources: "Tüm Kaynaklar",
+    insights: "İçgörüler",
+    yes: "Evet",
+    no: "Hayır",
+    loadingMore: "Daha fazla yükleniyor...",
+    noSourcesYet: "Henüz kaynak yok",
+    allSourcesDescShort: "Tüm kaynaklarınızı burada görüntüleyin.",
+    cannotSaveNoteNoNotebook: "Not kaydedilemiyor: defter kimliği mevcut değil",
+    createFirstSource: "Bilgi tabanınızı oluşturmaya başlamak için ilk kaynağınızı ekleyin.",
+    deleteSourceConfirm: "Bu kaynağı silmek istediğinizden emin misiniz?",
+    deleteConfirm: "Bunu silmek istediğinizden emin misiniz?",
+    deleteConfirmWithTitle: "\"{title}\" öğesini silmek istediğinizden emin misiniz?",
+    deleteSuccess: "Kaynak başarıyla silindi. Not: Dosyayı depolamadan silmek için ayarlar sayfasında \"dosyayı sil\" seçeneğini etkinleştirmeniz gerekir.",
+    failedToDelete: "Kaynak silinemedi",
+    sourceQueued: "Kaynak Kuyruğa Eklendi",
+    sourceQueuedDesc: "Kaynak arka planda işlenmek üzere gönderildi. İlerlemeyi kaynaklar listesinden takip edebilirsiniz.",
+    sourceAddedSuccess: "Kaynak başarıyla eklendi",
+    failedToAddSource: "Kaynak eklenemedi",
+    sourceUpdatedSuccess: "Kaynak başarıyla güncellendi",
+    failedToUpdateSource: "Kaynak güncellenemedi",
+    sourceDeletedSuccess: "Kaynak başarıyla silindi",
+    failedToDeleteSource: "Kaynak silinemedi",
+    fileUploadedSuccess: "Dosya başarıyla yüklendi",
+    failedToUploadFile: "Dosya yüklenemedi",
+    sourceRequeued: "Kaynak Yeniden Kuyruğa Alındı",
+    sourceRequeuedDesc: "Kaynak işlenmek üzere yeniden kuyruğa alındı.",
+    failedToRetry: "Yeniden deneme başarısız",
+    sourcesAddedToNotebook: "{count} kaynak deftere eklendi",
+    failedToAddSourcesToNotebook: "Kaynaklar deftere eklenemedi",
+    partialAddSuccess: "{success} kaynak eklendi, {failed} başarısız",
+    sourceRemovedFromNotebook: "Kaynak defterden başarıyla kaldırıldı",
+    failedToRemoveSourceFromNotebook: "Kaynak defterden kaldırılamadı",
+    removeConfirm: "Bunu defterden kaldırmak istediğinizden emin misiniz?",
+    checking: "Kontrol ediliyor...",
+    untitledSource: "Başlıksız Kaynak",
+    maxItems: "en fazla {count}",
+    insightsCount: "{count} içgörü",
+    details: "Ayrıntılar",
+    detailsTitle: "Kaynak Ayrıntıları",
+    content: "İçerik",
+    metadata: "Meta Veri",
+    type: {
+      link: "Bağlantı",
+      file: "Dosya",
+      text: "Metin",
+    },
+    id: "Kaynak Kimliği",
+    topics: "Konular",
+    embedded: "Gömüldü",
+    notEmbedded: "Gömülmedi",
+    embedContent: "İçeriği Göm",
+    embedding: "Gömülüyor...",
+    alreadyEmbedded: "Zaten Gömüldü",
+    downloadFile: "Dosyayı İndir",
+    fileUnavailable: "Dosya mevcut değil",
+    preparing: "Hazırlanıyor...",
+    generateNewInsight: "Yeni İçgörü Oluştur",
+    selectTransformation: "Bir dönüşüm seçin...",
+    noInsightsYet: "Henüz içgörü yok",
+    createFirstInsight: "Yukarıdaki dönüşümü kullanarak ilk içgörünüzü oluşturun",
+    viewInsight: "İçgörüyü Görüntüle",
+    deleteInsight: "İçgörüyü Sil",
+    deleteInsightConfirm: "Bu içgörüyü silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
+    insightGenerationStarted: "İçgörü oluşturma başladı. Kısa süre içinde görünecek.",
+    editNote: "Notu düzenle",
+    createNote: "Not oluştur",
+    addTitle: "Başlık ekle...",
+    untitledNote: "Başlıksız Not",
+    writeNotePlaceholder: "Not içeriğinizi buraya yazın...",
+    saveNote: "Notu Kaydet",
+    createNoteBtn: "Not Oluştur",
+    createFirstNote: "İçgörüleri ve gözlemleri kaydetmek için ilk notunuzu oluşturun.",
+    urlLabel: "URL(ler) *",
+    fileLabel: "Dosya(lar) *",
+    textContentLabel: "Metin İçeriği *",
+    enterUrlsPlaceholder: "URL'leri her satıra bir tane giriniz\nhttps://ornek.com/makale1\nhttps://ornek.com/makale2",
+    batchUrlHint: "Toplu içe aktarma için birden fazla URL yapıştırın (her satıra bir tane)",
+    invalidUrlsDetected: "Geçersiz URL'ler tespit edildi:",
+    lineLabel: "Satır {line}",
+    fixInvalidUrls: "Devam etmek için geçersiz URL'leri düzeltin veya kaldırın",
+    selectMultipleFilesHint: "Toplu içe aktarma için birden fazla dosya seçin. Desteklenenler: Belgeler (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medya (MP4, MP3, WAV, M4A), Görseller (JPG, PNG), Arşivler (ZIP)",
+    selectedFiles: "Seçilen dosyalar:",
+    textPlaceholder: "İçeriğinizi buraya yapıştırın veya yazın...",
+    htmlDetected: "HTML içeriği tespit edildi. İşlendikten sonra Markdown'a dönüştürülecek.",
+    titlePlaceholder: "Kaynağınıza açıklayıcı bir başlık verin",
+    batchTitlesAuto: "Her kaynak için başlıklar otomatik olarak oluşturulacak.",
+    batchCommonSettings: "Aynı defterler ve dönüşümler tüm öğelere uygulanacak.",
+    urlsCount: "{count} URL",
+    filesCount: "{count} dosya",
+    addSource: "Kaynak Ekle",
+    notEmbeddedAlert: "İçerik Gömülmedi",
+    notEmbeddedDesc: "Bu içerik vektör araması için gömülmedi. Gömme, gelişmiş arama özelliklerini ve daha iyi içerik keşfini etkinleştirir.",
+    openOnYoutube: "YouTube'da Aç",
+    urlCopied: "URL panoya kopyalandı",
+    viewSource: "Kaynağı Görüntüle",
+    noInsightSelected: "İçgörü seçilmedi",
+    sourceInsight: "Kaynak İçgörüsü",
+    manageNotebooks: "Defterleri Yönet",
+    manageNotebooksDesc: "Bu kaynağı içeren defterleri yönetin",
+    noNotebooksAvailable: "Mevcut defter yok",
+    loadFailed: "Kaynak ayrıntıları yüklenemedi",
+    removeFromNotebook: "Defterden Kaldır",
+    retryProcessing: "İşlemeyi Yeniden Dene",
+    deleteSource: "Kaynağı Sil",
+    retry: "Yeniden Dene",
+    addExistingTitle: "Mevcut Kaynakları Ekle",
+    addExistingDesc: "Mevcut defterlerinizdeki kaynakları seçerek mevcut deftere ekleyin.",
+    searchPlaceholder: "Kaynakları ad veya URL ile arayın...",
+    noNotebooksFound: "Defter bulunamadı.",
+    showingFirst100: "İlk 100 kaynak gösteriliyor. Belirli olanları bulmak için arama yapın.",
+    selectedCount: "{count} kaynak seçildi",
+    added: "{date} tarihinde eklendi",
+    addUrl: "URL Ekle",
+    uploadFile: "Dosya Yükle",
+    enterText: "Metin Girin",
+    processDescription: "İçerik yapay zeka tarafından işlenecek ve analiz edilecek.",
+    processingFiles: "Dosyalarınız işleniyor...",
+    titleRequired: "Metin içeriği için başlık gereklidir",
+    titleGenerated: "Boş bırakılırsa içerikten otomatik başlık oluşturulacak",
+    batchCount: "{count} {type} işlenecek",
+    enableEmbedding: "Arama için gömmeyi etkinleştir",
+    embeddingDesc: "Bu kaynağın vektör aramalarında ve yapay zeka sorgularında bulunmasını sağlar",
+    embeddingAlways: "Gömme otomatik etkinleştirildi",
+    embeddingAlwaysDesc: "Ayarlarınız içeriği her zaman vektör araması için gömecek şekilde yapılandırılmış.",
+    embeddingNever: "Gömme devre dışı",
+    embeddingNeverDesc: "Ayarlarınız gömmeyi atlamak üzere yapılandırılmış. Bu kaynak için vektör arama kullanılamaz.",
+    changeInSettings: "Bunu Ayarlar'dan değiştirebilirsiniz",
+    notFound: "Kaynak bulunamadı",
+    noContent: "İçerik mevcut değil",
+    insightsDesc: "Model analizinden oluşturulan içgörüler",
+    uploadedFile: "Yüklenen dosya",
+    fileUnavailableDesc: "Bu dosya şu anda depolama sistemi nedeniyle mevcut değil.",
+    batchSuccess: "{count} kaynak başarıyla oluşturuldu",
+    batchFailed: "{count} kaynağın tamamı oluşturulamadı",
+    batchPartial: "{success} başarılı, {failed} başarısız",
+    submittingSource: "Kaynak işlenmek üzere gönderiliyor...",
+    processingBatchSources: "{count} kaynak işleniyor. Bu birkaç dakika sürebilir.",
+    processingSource: "Kaynağınız işleniyor. Bu birkaç dakika sürebilir.",
+    maxFilesAllowed: "Toplu işlem başına en fazla {count} dosya",
+  },
+  chat: {
+    sessions: "Oturumlar",
+    sessionTitlePlaceholder: "Buraya bir başlık yazın...",
+    noSessions: "Henüz sohbet oturumu yok",
+    deleteSession: "Oturumu Sil",
+    deleteSessionDesc: "Bu sohbet oturumunu silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
+    sendPlaceholder: "Kaynaklarınız hakkında herhangi bir şey sorun...",
+    sessionsTitle: "Sohbet Oturumları",
+    chatWith: "{name} ile sohbet et",
+    startConversation: "Bu {type} hakkında sohbet başlatın",
+    askQuestions: "İçeriği daha iyi anlamak için sorular sorun",
+    pressToSend: "Göndermek için {key} tuşuna basın",
+    model: "Model",
+    createToStart: "Başlamak için bir oturum oluşturun.",
+    chatWithNotebook: "Defter ile Sohbet Et",
+    unableToLoadChat: "Sohbet yüklenemedi",
+    noDescription: "Açıklama yok",
+    startByCreating: "Araştırmanızı düzenlemek için ilk defterinizi oluşturun.",
+    messagesCount: "{count} mesaj",
+    sessionCreated: "Sohbet oturumu oluşturuldu",
+    sessionUpdated: "Oturum güncellendi",
+    sessionDeleted: "Oturum silindi",
+  },
+  searchPage: {
+    askAndSearch: "Sor ve Ara",
+    chooseAMode: "Bir mod seçin",
+    askBeta: "Sor (beta)",
+    search: "Ara",
+    askYourKb: "Bilgi Tabanınıza Sorun (beta)",
+    askYourKbDesc: "Yapay zeka, bilgi tabanınızdaki belgelere dayanarak sorunuzu yanıtlayacak.",
+    question: "Soru",
+    enterQuestionPlaceholder: "Sorunuzu girin...",
+    pressToSubmit: "Göndermek için Cmd/Ctrl+Enter tuşuna basın",
+    noEmbeddingModel: "Seçili bir gömme modeliniz olmadığı için bu özelliği kullanamazsınız. Lütfen Modeller sayfasında bir tane ayarlayın.",
+    usingCustomModels: "Özel Modeller Kullanılıyor",
+    usingDefaultModels: "Varsayılan Modeller Kullanılıyor",
+    advanced: "Gelişmiş",
+    strategy: "Strateji",
+    answer: "Yanıt",
+    final: "Son",
+    ask: "Sor",
+    processing: "İşleniyor...",
+    saveToNotebooks: "Defterlere Kaydet",
+    searchDesc: "Bilgi tabanınızda belirli anahtar kelimeler veya kavramlar arayın",
+    enterSearchPlaceholder: "Arama sorgusunu girin...",
+    pressToSearch: "Aramak için Enter tuşuna basın",
+    searchType: "Arama Türü",
+    vectorSearchWarning: "Vektör araması için gömme modeli gereklidir. Yalnızca metin araması kullanılabilir.",
+    textSearch: "Metin Araması",
+    vectorSearch: "Vektör Araması",
+    searchIn: "Şurada Ara",
+    searchSources: "Kaynaklarda Ara",
+    searchNotes: "Notlarda Ara",
+    resultsFound: "{count} sonuç bulundu",
+    matches: "Eşleşmeler ({count})",
+    noResultsFor: "“{query}” için sonuç bulunamadı",
+    notSet: "Ayarlanmadı",
+    saveToNotebook: "Deftere Kaydet",
+    saveSuccess: "Deftere başarıyla kaydedildi",
+    saveError: "Deftere kaydedilemedi",
+    selectNotebook: "Defter Seçin",
+    searchAndAsk: "Ara ve Sor",
+    searchResultsFor: "“{query}” için arama sonuçları",
+    askAbout: "“{query}” hakkında sor",
+    orSearchKb: "Veya bilgi tabanınızda arayın",
+    saving: "Kaydediliyor...",
+    advancedModelTitle: "Gelişmiş Model Seçimi",
+    advancedModelDesc: "Sorgulama sürecinin her aşaması için belirli modeller seçin",
+    strategyModel: "Strateji Modeli",
+    answerModel: "Yanıt Modeli",
+    finalAnswerModel: "Son Yanıt Modeli",
+    selectStrategyPlaceholder: "Strateji modeli seçin",
+    selectAnswerPlaceholder: "Yanıt modeli seçin",
+    selectFinalPlaceholder: "Son yanıt modeli seçin",
+    saveChanges: "Değişiklikleri Kaydet",
+    processingQuestion: "Sorunuz işleniyor...",
+  },
+  podcasts: {
+    generateEpisode: "Podcast Bölümü Oluştur",
+    generateEpisodeDesc: "Yeni bir podcast bölümü oluşturmadan önce dahil edilecek içeriği seçin ve bölüm ayrıntılarını yapılandırın.",
+    content: "İçerik",
+    contentDesc: "Bu bölüme dahil edilecek defterleri, kaynakları ve notları seçin.",
+    itemsSelected: "{count} öğe seçildi",
+    tokens: "{count} token",
+    chars: "{count} karakter",
+    loadingNotebooks: "Defterler yükleniyor...",
+    noNotebooksFoundInPodcasts: "Defter bulunamadı. Podcast oluşturmadan önce bir defter oluşturun ve içerik ekleyin.",
+    noContentSelected: "İçerik seçilmedi",
+    summary: "Özet",
+    fullContent: "Tam içerik",
+    untitledSource: "Başlıksız kaynak",
+    untitledNote: "Başlıksız not",
+    episodeSettings: "Bölüm Ayarları",
+    episodeProfile: "Bölüm profili",
+    episodeProfilePlaceholder: "Bir bölüm profili seçin",
+    episodeName: "Bölüm adı",
+    episodeNamePlaceholder: "örn. Yapay Zeka ve İşin Geleceği",
+    additionalInstructions: "Ek talimatlar",
+    instructionsPlaceholder: "Bölüm brifingine eklenecek ek tavsiyeler...",
+    generating: "Oluşturuluyor...",
+    generate: "Oluştur",
+    hostPlaceholder: "Sunucu {number}",
+    profileRequired: "Bölüm Profili Gerekli",
+    profileRequiredDesc: "Podcast oluşturmadan önce bir bölüm profili seçin.",
+    nameRequired: "Bölüm adı gerekli",
+    nameRequiredDesc: "Bölüm için bir ad girin.",
+    addContext: "Bağlam ekle",
+    addContextDesc: "Bölüme dahil etmek için en az bir kaynak veya not seçin.",
+    generationFailed: "Podcast oluşturma başarısız",
+    speakerProfile: "Konuşmacı Profili",
+    usesSpeakerProfile: "Konuşmacı profili kullanır",
+    sources: "Kaynaklar",
+    notes: "Notlar",
+    noSources: "Bu defterde kaynak yok.",
+    noNotes: "Bu defterde not yok.",
+    selectMode: "Mod seçin",
+    buildContextFailed: "Bağlam oluşturulamadı. Lütfen seçimlerinizi gözden geçirin.",
+    podcastTaskStarted: "Podcast görevi başlatıldı",
+    loadingProfiles: "Bölüm profilleri yükleniyor...",
+    noProfilesFound: "Bölüm profili bulunamadı. Podcast oluşturmadan önce bir bölüm profili oluşturun.",
+    listTitle: "Podcastler",
+    listDesc: "Oluşturulan bölümleri takip edin ve yeniden kullanılabilir profilleri yönetin.",
+    chooseAView: "Bir görünüm seçin",
+    episodesTab: "Bölümler",
+    templatesTab: "Profiller",
+    overviewTitle: "Bölümlere genel bakış",
+    overviewDesc: "Podcast oluşturma işlerini izleyin ve son eserleri inceleyin.",
+    generateBtn: "Podcast Oluştur",
+    total: "Toplam",
+    processingLabel: "İşleniyor",
+    completedLabel: "Tamamlandı",
+    failedLabel: "Başarısız",
+    pendingLabel: "Beklemede",
+    loadErrorTitle: "Bölümler yüklenemedi",
+    loadErrorDesc: "En son podcast bölümleri alınamadı. Kısa süre sonra tekrar deneyin.",
+    loadingEpisodes: "Bölümler yükleniyor…",
+    noEpisodesYet: "Henüz podcast bölümü yok. Defter veya kaynak sohbet arayüzlerinden ilk bölümünüzü oluşturun.",
+    statusRunningTitle: "Şu An İşleniyor",
+    statusRunningDesc: "Aktif olarak içerik oluşturan bölümler.",
+    statusPendingTitle: "Kuyrukta / Beklemede",
+    statusPendingDesc: "İşleme başlamayı bekleyen gönderilmiş bölümler.",
+    statusCompletedTitle: "Tamamlanan Bölümler",
+    statusCompletedDesc: "İncelemeye, indirmeye veya yayınlamaya hazır.",
+    statusFailedTitle: "Başarısız Bölümler",
+    statusFailedDesc: "Oluşturma sırasında sorunla karşılaşan bölümler.",
+    templatesWorkspaceTitle: "Profiller çalışma alanı",
+    templatesWorkspaceDesc: "Hızlı podcast üretimi için yeniden kullanılabilir bölüm ve konuşmacı yapılandırmaları oluşturun.",
+    howTemplatesPowerTitle: "Profiller podcast oluşturmayı nasıl destekler",
+    howTemplatesPowerDesc: "Profiller podcast iş akışını iki yeniden kullanılabilir yapı taşına böler. Yeni bir bölüm oluştururken istediğiniz gibi birleştirin.",
+    episodeProfilesSetFormat: "Bölüm profilleri formatı belirler",
+    episodeProfilesList1: "Segment sayısını ve hikaye akışını ana hatlarıyla belirtin",
+    episodeProfilesList2: "Brifing, ana hat ve senaryo yazımı için kullanılan dil modellerini seçin",
+    episodeProfilesList3: "Her bölümün tutarlı bir tonla başlaması için varsayılan brifingleri saklayın",
+    speakerProfilesBringVoices: "Konuşmacı profilleri sesleri hayata geçirir",
+    speakerProfilesList1: "Metinden sese sağlayıcısını ve modelini seçin",
+    speakerProfilesList2: "Her konuşmacı için kişilik, geçmiş ve telaffuz notlarını kaydedin",
+    speakerProfilesList3: "Aynı ev sahibi veya konuk seslerini farklı bölüm formatlarında yeniden kullanın",
+    recommendedWorkflow: "Önerilen iş akışı",
+    workflowStep1: "İhtiyaç duyduğunuz her ses için konuşmacı profilleri oluşturun",
+    workflowStep2: "Bu konuşmacılara ada göre atıfta bulunan bölüm profilleri oluşturun",
+    workflowStep3: "Hikayeye uygun bölüm profilini seçerek podcast oluşturun",
+    workflowHint: "Bölüm profilleri konuşmacı profillerine ada göre atıfta bulunur, bu nedenle konuşmacılarla başlamak daha sonra eksik ses atamalarını önler.",
+    failedToLoadTemplates: "Profil verileri yüklenemedi",
+    failedToLoadTemplatesDesc: "API'nin çalıştığından emin olun ve tekrar deneyin. Bazı bölümler eksik olabilir.",
+    loadingTemplates: "Profiller yükleniyor…",
+    speakerProfilesTitle: "Konuşmacı profilleri",
+    speakerProfilesDesc: "Oluşturulan bölümler için sesleri ve kişilikleri yapılandırın.",
+    createSpeaker: "Konuşmacı oluştur",
+    noSpeakerProfiles: "Henüz konuşmacı profili yok. Bölüm profillerini kullanılabilir hale getirmek için bir tane oluşturun.",
+    noDescription: "Açıklama sağlanmadı.",
+    usedByCount_one: "1 bölüm tarafından kullanılıyor",
+    usedByCount_other: "{count} bölüm tarafından kullanılıyor",
+    usedByCount: "{count} bölüm tarafından kullanılıyor",
+    unused: "Kullanılmıyor",
+    voiceId: "Ses Kimliği",
+    backstory: "Geçmiş",
+    personality: "Kişilik",
+    edit: "Düzenle",
+    duplicate: "Çoğalt",
+    deleteSpeakerProfileTitle: "Konuşmacı profili silinsin mi?",
+    deleteSpeakerProfileDesc: "\"{name}\" silinmesi geri alınamaz.",
+    deleteSpeakerDisabledHint: "Silmeden önce bu konuşmacıyı bölüm profillerinden kaldırın.",
+    deleting: "Siliniyor…",
+    episodeProfilesTitle: "Bölüm profilleri",
+    episodeProfilesDesc: "Programlarınız için yeniden kullanılabilir oluşturma ayarlarını tanımlayın.",
+    createProfile: "Profil oluştur",
+    createSpeakerFirst: "Bölüm profili eklemeden önce bir konuşmacı profili oluşturun.",
+    noEpisodeProfiles: "Henüz bölüm profili yok. Podcast oluşturmayı başlatmak için bir tane oluşturun.",
+    speakerCreated: "Konuşmacı Oluşturuldu",
+    speakerCreatedDesc: "\"{name}\" konuşmacısı başarıyla eklendi.",
+    failedToCreateSpeaker: "Konuşmacı profili oluşturulamadı",
+    speakerUpdated: "Konuşmacı Güncellendi",
+    speakerUpdatedDesc: "\"{name}\" konuşmacısı başarıyla güncellendi.",
+    failedToUpdateSpeaker: "Konuşmacı profili güncellenemedi",
+    speakerDeleted: "Konuşmacı Silindi",
+    speakerDeletedDesc: "\"{name}\" konuşmacısı başarıyla kaldırıldı.",
+    failedToDeleteSpeaker: "Konuşmacı profili silinemedi",
+    speakerDuplicated: "Konuşmacı Çoğaltıldı",
+    speakerDuplicatedDesc: "\"{name}\" konuşmacısı başarıyla çoğaltıldı.",
+    failedToDuplicateSpeaker: "Konuşmacı profili çoğaltılamadı",
+    generationStarted: "Oluşturma Başladı",
+    generationStartedDesc: "Podcast oluşturma kuyruğa alındı.",
+    failedToStartGeneration: "Oluşturma başlatılamadı",
+    tryAgainMoment: "Lütfen bir an sonra tekrar deneyin.",
+    deleteProfileTitle: "Profil silinsin mi?",
+    deleteProfileDesc: "Bu işlem \"{name}\" profilini kaldıracak. Mevcut bölümler verilerini korur, ancak yeni bölümler artık bu yapılandırmayı kullanmaz.",
+    profileCreated: "Profil Oluşturuldu",
+    profileCreatedDesc: "\"{name}\" bölüm profili başarıyla oluşturuldu.",
+    failedToCreateProfile: "Profil oluşturulamadı",
+    profileUpdated: "Profil Güncellendi",
+    profileUpdatedDesc: "\"{name}\" bölüm profili başarıyla güncellendi.",
+    failedToUpdateProfile: "Profil güncellenemedi",
+    profileDeleted: "Profil Silindi",
+    profileDeletedDesc: "\"{name}\" bölüm profili başarıyla kaldırıldı.",
+    failedToDeleteProfile: "Profil silinemedi",
+    failedToDeleteProfileDesc: "Bölüm profili kaldırılamadı.",
+    profileDuplicated: "Profil Çoğaltıldı",
+    profileDuplicatedDesc: "\"{name}\" bölüm profili başarıyla çoğaltıldı.",
+    failedToDuplicateProfile: "Profil çoğaltılamadı",
+    episodeDeleted: "Bölüm Silindi",
+    episodeDeletedDesc: "Bölüm başarıyla silindi.",
+    failedToDeleteEpisode: "Bölüm silinemedi",
+    failedToDeleteSpeakerDesc: "Konuşmacı profili kaldırılamadı.",
+    outlineModel: "Ana hat modeli",
+    transcriptModel: "Transkript modeli",
+    segments: "Segmentler",
+    defaultBriefingTitle: "Varsayılan brifing",
+    created: "{time} tarihinde oluşturuldu",
+    details: "Ayrıntılar",
+    summaryTab: "Özet",
+    outlineTab: "Ana Hat",
+    transcriptTab: "Transkript",
+    briefing: "Brifing",
+    noOutline: "Ana hat mevcut değil.",
+    noTranscript: "Transkript mevcut değil.",
+    deleteEpisodeTitle: "Bölüm silinsin mi?",
+    deleteEpisodeDesc: "Bu işlem \"{name}\" ve ses dosyasını kalıcı olarak kaldıracak.",
+    audioUnavailable: "Ses mevcut değil",
+    segment: "Segment",
+    speaker: "Konuşmacı",
+    profile: "Profil",
+    link: "Bağlantı",
+    file: "Dosya",
+    embedded: "Gömüldü",
+    notEmbedded: "Gömülmedi",
+    noSpeakerProfilesAvailable: "Kullanılabilir konuşmacı profili yok",
+    editEpisodeProfile: "Bölüm Profilini Düzenle",
+    createEpisodeProfile: "Bölüm Profili Oluştur",
+    episodeProfileFormDesc: "Bölümlerin nasıl oluşturulacağını ve varsayılan olarak hangi konuşmacı yapılandırmasını kullanacağını tanımlayın.",
+    noSpeakerProfilesDesc: "Bir bölüm profili yapılandırmadan önce konuşmacı profili oluşturun.",
+    profileName: "Profil adı",
+    profileNamePlaceholder: "örn. Teknoloji tartışması",
+    descriptionPlaceholder: "Bu profilin ne zaman kullanılacağına dair kısa özet",
+    speakerConfig: "Konuşmacı yapılandırması",
+    selectSpeakerProfile: "Bir konuşmacı profili seçin",
+    outlineGeneration: "Ana hat oluşturma",
+    transcriptGeneration: "Transkript oluşturma",
+    defaultBriefingPlaceholder: "Bu bölüm formatının yapısını, tonunu ve hedeflerini ana hatlarıyla belirtin",
+    editSpeakerProfile: "Konuşmacı Profilini Düzenle",
+    createSpeakerProfile: "Konuşmacı Profili Oluştur",
+    speakerProfileFormDesc: "Metinden sese ayarlarını yapılandırın ve dört adede kadar konuşmacı tanımlayın.",
+    speakers: "Konuşmacılar",
+    speakersDesc: "Bu profil için bir ila dört ses yapılandırın.",
+    addSpeaker: "Konuşmacı ekle",
+    speakerNumber: "Konuşmacı {number}",
+    backstoryPlaceholder: "Konuşmacı için kısa biyografi veya bağlam",
+    personalityPlaceholder: "Üslup ve tonu tanımlayın",
+    outlineModelRequired: "Ana hat modeli gereklidir",
+    transcriptModelRequired: "Transkript modeli gereklidir",
+    defaultBriefingRequired: "Varsayılan brifing gereklidir",
+    segmentsInteger: "Tam sayı olmalıdır",
+    segmentsMin: "En az 3 segment",
+    segmentsMax: "En fazla 20 segment",
+    voiceIdRequired: "Ses kimliği gereklidir",
+    backstoryRequired: "Geçmiş gereklidir",
+    personalityRequired: "Kişilik gereklidir",
+    speakerCountMin: "En az bir konuşmacı gereklidir",
+    speakerCountMax: "En fazla 4 konuşmacı yapılandırabilirsiniz",
+    delete: "Sil",
+    failedToDelete: "Podcast silinemedi",
+    retry: "Yeniden Dene",
+    retrying: "Yeniden deneniyor…",
+    retryStarted: "Yeniden Deneme Başladı",
+    retryStartedDesc: "Yeni bir podcast oluşturma işi gönderildi.",
+    failedToRetry: "Bölüm yeniden denenemedi",
+    errorDetails: "Hata ayrıntıları",
+    language: "Dil",
+    languagePlaceholder: "Bir dil seçin (isteğe bağlı)",
+    podcastLanguage: "Podcast dili",
+    selectOutlineModel: "Ana hat modeli seçin",
+    selectTranscriptModel: "Transkript modeli seçin",
+    voiceModel: "Ses modeli",
+    voiceModelRequired: "Ses modeli gereklidir",
+    selectVoiceModel: "Ses modeli seçin",
+    perSpeakerTtsOverride: "Konuşmacı başına TTS geçersiz kılma (isteğe bağlı)",
+    useProfileDefault: "Profil varsayılanını kullan",
+    setupRequired: "Kurulum gerekli",
+    setupRequiredDesc: "Bazı profillerin henüz yapılandırılmış modeli yok. Podcast oluşturmadan önce düzenleyip model seçin.",
+    notConfigured: "Yapılandırılmadı",
+  },
+  settings: {
+    contentProcessing: "İçerik İşleme",
+    contentProcessingDesc: "Belgeler ve URL'lerin nasıl işleneceğini yapılandırın",
+    docEngine: "Belge İşleme Motoru",
+    docEnginePlaceholder: "Belge işleme motoru seçin",
+    urlEngine: "URL İşleme Motoru",
+    urlEnginePlaceholder: "URL işleme motoru seçin",
+    autoRecommended: "Otomatik (Önerilen)",
+    simple: "Basit",
+    docling: "Docling",
+    helpMeChoose: "Seçmeme yardım et",
+    docHelp: "· Docling biraz daha yavaştır ancak özellikle tablolar ve görseller içeren belgeler için daha doğrudur. · Basit, belgeden herhangi bir içeriği formatlamadan çıkaracak. · Otomatik (önerilen) docling üzerinden işlemeyi deneyecek ve basit'e geri dönecek.",
+    firecrawl: "Firecrawl",
+    jina: "Jina",
+    urlHelp: "· Firecrawl ücretli bir hizmettir (ücretsiz katmanı ile) ve çok güçlüdür. · Jina da iyi bir seçenektir ve ücretsiz katmanı vardır. · Basit, temel HTTP çıkarımını kullanır ve JavaScript tabanlı web sitelerindeki içerikleri kaçırır. · Otomatik (önerilen) önce firecrawl, sonra Jina'yı dener ve son olarak basit'e geri döner.",
+    embeddingAndSearch: "Gömme ve Arama",
+    embeddingAndSearchDesc: "Arama ve gömme seçeneklerini yapılandırın",
+    defaultEmbeddingOption: "Varsayılan Gömme Seçeneği",
+    embeddingOptionPlaceholder: "Gömme seçeneği seçin",
+    ask: "Sor",
+    always: "Her Zaman",
+    never: "Hiçbir Zaman",
+    embeddingHelp: "İçeriği gömmek, sizin ve yapay zeka ajanlarınızın bulmayı kolaylaştırır. Yerel bir gömme modeli çalıştırıyorsanız (örn. Ollama), maliyet konusunda endişelenmenize gerek yok ve her şeyi gömebilirsiniz.",
+    fileManagement: "Dosya Yönetimi",
+    fileManagementDesc: "Dosya işleme ve depolama seçeneklerini yapılandırın",
+    autoDeleteFiles: "Dosyaları Otomatik Sil",
+    autoDeletePlaceholder: "Otomatik silme seçeneği seçin",
+    filesHelp: "Dosyalarınız yüklenip işlendikten sonra artık gerekli değildir. Çoğu kullanıcı Open Notebook'un yüklenen dosyaları yükleme klasöründen otomatik olarak silmesine izin vermelidir.",
+    loadFailed: "Ayarlar yüklenemedi",
+  },
+  advanced: {
+    title: "Gelişmiş Araçlar",
+    desc: "Uzman kullanıcılar için gelişmiş araçlar ve yardımcı programlar",
+    systemInfo: "Sistem Bilgisi",
+    rebuildEmbeddings: "Gömmeleri Yeniden Oluştur",
+    rebuildEmbeddingsDesc: "Tüm kaynaklar için vektör arama indeksini yeniden oluştur",
+    currentVersion: "Mevcut Sürüm",
+    latestVersion: "Son Sürüm",
+    status: "Durum",
+    updateAvailable: "Sürüm {version} Mevcut",
+    updateAvailableDesc: "Open Notebook'un yeni bir sürümü mevcut.",
+    upToDate: "Güncel",
+    unknown: "Bilinmiyor",
+    viewOnGithub: "GitHub'da Görüntüle",
+    updateCheckFailed: "Güncellemeler kontrol edilemiyor. GitHub'a ulaşılamıyor olabilir.",
+    rebuild: {
+      mode: "Yeniden Oluşturma Modu",
+      existing: "Mevcut",
+      all: "Tümü",
+      existingDesc: "Yalnızca zaten gömülmüş öğeleri yeniden göm (daha hızlı, model değiştirme için)",
+      allDesc: "Mevcut öğeleri yeniden göm + gömme olmayan öğeler için gömme oluştur (daha yavaş, kapsamlı)",
+      include: "Yeniden Oluşturmaya Dahil Et",
+      selectOneError: "Lütfen yeniden oluşturmak için en az bir öğe türü seçin",
+      starting: "Yeniden Oluşturma Başlatılıyor...",
+      startBtn: "🚀 Yeniden Oluşturmayı Başlat",
+      queued: "Kuyruğa Alındı",
+      running: "İşler gönderiliyor...",
+      completed: "İşler Gönderildi!",
+      failed: "Başarısız",
+      leavePageHint: "Bu sayfadan ayrılabilirsiniz, arka planda çalışmaya devam edecek",
+      startNew: "Yeni Yeniden Oluşturma Başlat",
+      itemsProcessed: "{processed}/{total} iş gönderildi (%{percent})",
+      failedItems: "{count} iş gönderilemedi",
+      time: "Süre",
+      whenToRebuild: "Gömmeleri ne zaman yeniden oluşturmalıyım?",
+      whenToRebuildAns: "Model değiştirirken, sürüm yükseltirken, bozulmayı düzeltirken veya toplu içe aktarmadan sonra yeniden oluşturmalısınız.",
+      howLong: "Yeniden oluşturma ne kadar sürer?",
+      howLongAns: "İşlem süresi öğe sayısına, model hızına ve API hız sınırlarına bağlıdır. Yerel modeller genellikle çok hızlıdır.",
+      isSafe: "Uygulamayı kullanırken yeniden oluşturmak güvenli mi?",
+      isSafeAns: "Evet, yeniden oluşturmak güvenlidir! İçeriği silmez, yalnızca gömmeleri değiştirir ve hataları zarif şekilde işler.",
+    },
+  },
+  transformations: {
+    title: "Dönüşümler",
+    desc: "Dönüşümler, yapay zekanın bir kaynağı işlemek ve içgörüler, özetler vb. çıkarmak için kullanacağı istemllerdir.",
+    workspace: "Çalışma alanı seçin",
+    playground: "Oyun Alanı",
+    defaultPrompt: "Varsayılan Dönüşüm İstemi",
+    defaultPromptDesc: "Bu, tüm dönüşüm istemlerinize eklenecek",
+    defaultPromptPlaceholder: "Varsayılan dönüşüm talimatlarınızı girin...",
+    listTitle: "Özel Dönüşümler",
+    createNew: "Yeni Oluştur",
+    inputLabel: "Giriş Metni",
+    inputPlaceholder: "Dönüştürmek için metin girin...",
+    outputLabel: "Çıktı",
+    runTest: "Dönüşümü Çalıştır",
+    running: "Çalışıyor...",
+    selectToStart: "Başlamak için bir dönüşüm seçin",
+    name: "Ad",
+    namePlaceholder: "Benzersiz tanımlayıcı, örn. anahtar_konular",
+    titlePlaceholder: "Görüntülenen başlık, varsayılan olarak ad",
+    promptPlaceholder: "Bu dönüşümü destekleyecek istemi yazın...",
+    descriptionPlaceholder: "Bu dönüşümün ne yaptığını açıklayın.",
+    suggestDefault: "Yeni kaynaklarda varsayılan olarak öner",
+    promptHint: "İstemler kaynak içeriği göz önünde bulundurularak yazılmalıdır. Modelden özetleme, içgörü çıkarma veya tablolar gibi yapılandırılmış çıktılar üretmesini isteyebilirsiniz.",
+    createSuccess: "Dönüşüm başarıyla oluşturuldu",
+    updateSuccess: "Dönüşüm başarıyla güncellendi",
+    deleteSuccess: "Dönüşüm başarıyla silindi",
+    noTransformations: "Henüz dönüşüm yok",
+    createOne: "Başlamak için bir dönüşüm oluşturun",
+    selectModel: "Model seçin",
+    deleteConfirm: "Bu dönüşümü silmek istediğinizden emin misiniz?",
+    model: "Model",
+    systemPrompt: "Sistem İstemi",
+    overrideModelDesc: "Bu sohbet oturumu için varsayılan modeli geçersiz kılın. Sistem varsayılanını kullanmak için boş bırakın.",
+    sessionUseReplacement: "Bu oturum varsayılan model yerine {name} kullanacak.",
+    systemDefault: "Sistem Varsayılanı",
+  },
+  models: {
+    embedding: "Gömme Modelleri",
+    tts: "Metinden Sese (TTS)",
+    stt: "Sesten Metne (STT)",
+    apiKey: "API Anahtarı",
+    deleteSuccess: "Model başarıyla silindi",
+    saveSuccess: "Model başarıyla kaydedildi",
+    noModels: "Model yok",
+    discoverModels: "Modelleri Keşfet",
+    noModelsFound: "Bu sağlayıcıdan model bulunamadı",
+    modelType: "Model Türü",
+    modelTypeHint: "Eklemek istediğiniz modellerin türünü seçin. Farklı türlere ihtiyaç duyuyorsanız, ayrı toplu işlemler halinde ekleyin.",
+    deleteModel: "Modeli Sil",
+    defaultAssignments: "Varsayılan Model Atamaları",
+    defaultAssignmentsDesc: "Open Notebook genelinde farklı amaçlar için hangi modellerin kullanılacağını yapılandırın",
+    missingRequiredModels: "Eksik gerekli modeller: {models}. Bu modeller olmadan Open Notebook düzgün çalışmayabilir.",
+    selectModelPlaceholder: "Model seçin",
+    requiredModelPlaceholder: "⚠️ Gerekli - Model seçin",
+    chatModelLabel: "Sohbet Modeli",
+    chatModelDesc: "Sohbet konuşmaları için kullanılır",
+    transformationModelLabel: "Dönüşüm Modeli",
+    transformationModelDesc: "Özetler, içgörüler ve dönüşümler için kullanılır",
+    toolsModelLabel: "Araçlar Modeli",
+    toolsModelDesc: "Fonksiyon çağırma için kullanılır - OpenAI veya Anthropic önerilir",
+    largeContextModelLabel: "Büyük Bağlam Modeli",
+    largeContextModelDesc: "Büyük belgeleri işlemek için kullanılır - Gemini önerilir",
+    embeddingModelLabel: "Gömme Modeli",
+    embeddingModelDesc: "Anlamsal arama ve vektör gömme için kullanılır",
+    ttsModelLabel: "Metinden Sese Modeli",
+    ttsModelDesc: "Podcast oluşturma için kullanılır",
+    sttModelLabel: "Sesten Metne Modeli",
+    sttModelDesc: "Ses transkripsiyonu için kullanılır",
+    embeddingChangeTitle: "Gömme Modeli Değişikliği",
+    embeddingChangeConfirm: "Gömme modelinizi {from}'dan {to}'ya değiştirmek üzeresiniz.",
+    rebuildRequired: "Önemli: Yeniden Oluşturma Gerekli",
+    rebuildReason: "Gömme modelinizi değiştirmek, tutarlılığı korumak için mevcut tüm gömmelerin yeniden oluşturulmasını gerektirir. Yeniden oluşturmadan aramalarınız yanlış veya eksik sonuçlar döndürebilir.",
+    whatHappensNext: "Bundan sonra ne olacak:",
+    step1: "Varsayılan gömme modeliniz güncellenecek",
+    step2: "Mevcut gömmeler yeniden oluşturulana kadar değişmeyecek",
+    step3: "Yeni içerik yeni gömme modelini kullanacak",
+    step4: "Gömmeleri mümkün olan en kısa sürede yeniden oluşturmalısınız",
+    proceedToRebuildPrompt: "Şimdi yeniden oluşturmayı başlatmak için Gelişmiş sayfasına gitmek ister misiniz?",
+    changeModelOnly: "Yalnızca Modeli Değiştir",
+    changeAndRebuild: "Değiştir ve Yeniden Oluşturmaya Git",
+    autoAssign: "Varsayılanları Otomatik Ata",
+    autoAssigning: "Atanıyor...",
+    autoAssignSuccess: "{count} varsayılan model otomatik atandı",
+    autoAssignNoModels: "Atanacak model yok. Lütfen önce modelleri senkronize edin.",
+    autoAssignAlreadySet: "Tüm varsayılan modeller zaten yapılandırılmış",
+    testModel: "Modeli Test Et",
+    testModelSuccess: "Model Testi Başarılı",
+    testModelFailed: "Model Testi Başarısız",
+    searchOrAddModel: "Model adı arayın veya yazın...",
+    addCustomModel: "\"{name}\" Ekle",
+  },
+  apiKeys: {
+    title: "Yapay zekanızı kendi API anahtarlarınızla yapılandırın",
+    description: "Open Notebook'ta yapay zeka sağlayıcılarını etkinleştirmek için API anahtarlarını güvenli şekilde veritabanında saklayın.",
+    encryptionRequired: "Şifreleme anahtarı yapılandırılmadı",
+    encryptionRequiredDescription: "Veritabanında API anahtarlarının saklanmasını etkinleştirmek için OPEN_NOTEBOOK_ENCRYPTION_KEY ortam değişkenini herhangi bir gizli dize olarak ayarlayın.",
+    configured: "Yapılandırıldı",
+    notConfigured: "Yapılandırılmadı",
+    migrationAvailable: "Ortam Değişkenleri Tespit Edildi",
+    migrationDescription: "{count} API anahtarı ortam değişkenleri aracılığıyla yapılandırılmış ve daha kolay yönetim için veritabanına taşınabilir.",
+    migrateToDatabase: "Veritabanına Taşı",
+    migrating: "Taşınıyor...",
+    migrationSuccess: "{count} API anahtarı başarıyla taşındı",
+    migrationErrors: "{count} anahtar taşınamadı",
+    migrationNothingToMigrate: "Tüm anahtarlar zaten veritabanında",
+    learnMore: "API anahtarlarını nasıl yapılandıracağınızı öğrenin →",
+    testConnection: "Bağlantıyı Test Et",
+    testSuccess: "Bağlantı başarılı",
+    testFailed: "Bağlantı testi başarısız",
+    syncModels: "Modelleri Senkronize Et",
+    syncSuccess: "{discovered} model keşfedildi, {new} yeni eklendi",
+    syncNoNew: "{count} model keşfedildi, tamamı zaten kayıtlı",
+    syncFailed: "Modeller senkronize edilemedi",
+    getApiKey: "API Anahtarı Al",
+    vertexProject: "GCP Proje Kimliği",
+    vertexLocation: "Bölge",
+    vertexCredentials: "Hizmet Hesabı JSON Yolu",
+    addConfig: "Yapılandırma Ekle",
+    editConfig: "Yapılandırmayı Düzenle",
+    deleteConfig: "Yapılandırmayı Sil",
+    configName: "Yapılandırma Adı",
+    configNameHint: "Bu yapılandırma için açıklayıcı bir ad (örn. 'Üretim', 'Geliştirme')",
+    baseUrl: "Temel URL",
+    baseUrlOverrideHint: "Yalnızca sağlayıcının varsayılan API uç noktasını geçersiz kılmanız gerekiyorsa değiştirin.",
+    numCtx: "Bağlam Penceresi (num_ctx)",
+    numCtxHint: "Ollama modelleri için maksimum bağlam penceresi. Varsayılanı kullanmak için boş bırakın (8192). Yalnızca donanımınız daha büyük pencereyi kaldırabiliyorsa artırın.",
+    deleteConfigConfirm: "'{name}' yapılandırmasını silmek istediğinizden emin misiniz? Bu geri alınamaz.",
+    configSaveSuccess: "Yapılandırma başarıyla kaydedildi",
+    configUpdateSuccess: "Yapılandırma başarıyla güncellendi",
+    configDeleteSuccess: "Yapılandırma başarıyla silindi",
+    apiKeyEditHint: "Mevcut API anahtarını korumak için boş bırakın",
+    decryptionError: "Şifre Çözme Hatası",
+    decryptionErrorDescription: "Bu kimlik bilgisinin API anahtarı çözülemedi. Şifreleme anahtarı değişmiş olabilir. Bu kimlik bilgisini silin ve doğru anahtarla yeniden oluşturun.",
+  },
+  setupBanner: {
+    encryptionRequired: "Şifreleme anahtarı yapılandırılmadı",
+    encryptionRequiredDescription: "Güvenli kimlik bilgisi depolamayı etkinleştirmek için OPEN_NOTEBOOK_ENCRYPTION_KEY ortam değişkenini ayarlayın.",
+    migrationAvailable: "API anahtarı taşıma mevcut",
+    migrationDescription: "{count} sağlayıcının API anahtarları ortam değişkenleri aracılığıyla ayarlanmış. Daha kolay yönetim için veritabanına taşıyın.",
+    goToSettings: "Ayarlara Git",
+    viewDocs: "Belgeleri Görüntüle",
+  },
+}
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index a38e2fb3..aa0a5718 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -30,6 +30,7 @@ export const zhCN = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "来源",
     notebook: "笔记本",
     podcast: "播客",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index a7f82a6e..42387817 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -30,6 +30,7 @@ export const zhTW = {
     spanish: "Español",
     german: "Deutsch",
     polish: "Polski",
+    turkish: "Türkçe",
     source: "來源",
     notebook: "筆記本",
     podcast: "播客",
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index 59a201af..79921705 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, pl, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, pl, tr, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -17,6 +17,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'es-ES': es,
   'de-DE': de,
   'pl-PL': pl,
+  'tr-TR': tr,
 }
 
 /**
diff --git a/frontend/test-results/.last-run.json b/frontend/test-results/.last-run.json
new file mode 100644
index 00000000..5fca3f84
--- /dev/null
+++ b/frontend/test-results/.last-run.json
@@ -0,0 +1,4 @@
+{
+  "status": "failed",
+  "failedTests": []
+}
\ No newline at end of file
diff --git a/history.txt b/history.txt
new file mode 100644
index 00000000..90bdbfb8
--- /dev/null
+++ b/history.txt
@@ -0,0 +1,3 @@
+#V2
+INSERT INTO credential { name: "BrokenTestCred", provider: "fakeprovider", modalities: ["language"], api_key: "gAAAAABnSomeGarbageThatLooksLikeFernetButIsNot123456789012345678901234567890123456789012345678901234=" };
+UPDATE credential:cda9ffofbi4g3ia4edwr SET api_key = "gAAAAABp3DZnxkMFugjpycLrM8b92Dq3luM5TrEdrmdrP4DAEvQvlK30CvYEejWsIn7W-BsT5UL69g8R21p0h5_JuthntwMGURn6J8AqYG-QHHu6I0y84v8=";

From 238e8e925da3c9cf30226d22a54e14c7a51f262e Mon Sep 17 00:00:00 2001
From: krataratha <kratarathtatran@icloud.com>
Date: Sat, 13 Jun 2026 17:22:26 +0530
Subject: [PATCH 069/345] Enhance export_docs.py with Table of Contents feature
 (#865)

* Enhance export_docs.py with Table of Contents feature

Added a Table of Contents generation feature to the documentation export script, enhancing navigation through consolidated markdown files.

* fix: remove duplicated orphaned code from export_docs.py

The TOC change accidentally duplicated consolidate_folder/main and left
the old body orphaned after the __main__ guard, causing an IndentationError.
Keep only the intended TOC generation so the script runs again.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 scripts/export_docs.py | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/scripts/export_docs.py b/scripts/export_docs.py
index fb8ec17c..6e25051d 100644
--- a/scripts/export_docs.py
+++ b/scripts/export_docs.py
@@ -5,7 +5,8 @@ Export documentation by consolidating markdown files from each docs folder.
 This script:
 1. Scans all subdirectories in the docs/ folder
 2. For each subdirectory, concatenates all .md files (except index.md)
-3. Saves the consolidated content to doc_exports/{folder_name}.md
+3. Generates a Table of Contents for easy navigation
+4. Saves the consolidated content to doc_exports/{folder_name}.md
 """
 
 import logging
@@ -24,7 +25,7 @@ def get_markdown_files(folder: Path) -> List[Path]:
 
 
 def consolidate_folder(folder: Path, output_dir: Path) -> None:
-    """Consolidate all markdown files from a folder into a single file."""
+    """Consolidate all markdown files from a folder into a single file with a TOC."""
     md_files = get_markdown_files(folder)
 
     if not md_files:
@@ -35,11 +36,22 @@ def consolidate_folder(folder: Path, output_dir: Path) -> None:
 
     with output_file.open("w", encoding="utf-8") as outf:
         # Write header
-        outf.write(f"# {folder.name.replace('-', ' ').title()}\n\n")
+        folder_title = folder.name.replace("-", " ").title()
+        outf.write(f"# {folder_title}\n\n")
         outf.write(
             f"This document consolidates all content from the {folder.name} documentation folder.\n\n"
         )
-        outf.write("---\n\n")
+
+        # Generate a Table of Contents dynamically
+        outf.write("## Table of Contents\n\n")
+        for md_file in md_files:
+            section_title = md_file.stem.replace("-", " ").title()
+            # Convert title to a markdown-friendly anchor link
+            # (lowercase, hyphens instead of spaces)
+            anchor = section_title.lower().replace(" ", "-")
+            outf.write(f"* [{section_title}](#{anchor})\n")
+
+        outf.write("\n---\n\n")
 
         # Process each markdown file
         for md_file in md_files:
@@ -88,7 +100,7 @@ def main():
         logger.info(f"Processing {subdir.name}...")
         consolidate_folder(subdir, output_dir)
 
-    logger.info(f"\n✓ Documentation export complete!")
+    logger.info("\n✓ Documentation export complete!")
     logger.info(f"Exported files are in: {output_dir.absolute()}")
 
 

From ee776543b4dc042354f77917b54552cffecbf929 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Sat, 13 Jun 2026 04:53:53 -0700
Subject: [PATCH 070/345] fix: add Notebook.get_context() so podcast generation
 has real content (#864)

PodcastService expected Notebook.get_context() but it did not exist,
so podcasts were generated from empty/placeholder context. Adds the
method plus opt-in include_full_text / include_content flags on
get_sources()/get_notes() (defaults preserve the existing omit
behavior) and assembles formatted source/note context blocks.

Fixes #808

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 open_notebook/domain/notebook.py |  78 ++++++++++++-
 tests/test_domain.py             | 187 ++++++++++++++++++++++++++++++-
 2 files changed, 258 insertions(+), 7 deletions(-)

diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 3c4ea221..b6621fff 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -26,11 +26,12 @@ class Notebook(ObjectModel):
             raise InvalidInputError("Notebook name cannot be empty")
         return v
 
-    async def get_sources(self) -> List["Source"]:
+    async def get_sources(self, include_full_text: bool = False) -> List["Source"]:
         try:
+            source_projection = "" if include_full_text else " omit source.full_text"
             srcs = await repo_query(
-                """
-                select * omit source.full_text from (
+                f"""
+                select *{source_projection} from (
                 select in as source from reference where out=$id
                 fetch source
             ) order by source.updated desc
@@ -43,11 +44,16 @@ class Notebook(ObjectModel):
             logger.exception(e)
             raise DatabaseOperationError(e)
 
-    async def get_notes(self) -> List["Note"]:
+    async def get_notes(self, include_content: bool = False) -> List["Note"]:
         try:
+            note_projection = (
+                " omit note.embedding"
+                if include_content
+                else " omit note.content, note.embedding"
+            )
             srcs = await repo_query(
-                """
-            select * omit note.content, note.embedding from (
+                f"""
+            select *{note_projection} from (
                 select in as note from artifact where out=$id
                 fetch note
             ) order by note.updated desc
@@ -60,6 +66,66 @@ class Notebook(ObjectModel):
             logger.exception(e)
             raise DatabaseOperationError(e)
 
+    async def get_context(self) -> str:
+        """
+        Build long-form notebook context for podcast and LLM workflows.
+
+        Normal list retrieval omits large source/note bodies, so this method uses
+        opt-in full-content fetches and formats only substantive context blocks.
+        """
+        sources = await self.get_sources(include_full_text=True)
+        notes = await self.get_notes(include_content=True)
+        context_blocks = []
+
+        for source in sources:
+            source_context = await source.get_context(context_size="long")
+            if isinstance(source_context, dict):
+                title = source_context.get("title") or source.title or "Untitled source"
+                full_text = source_context.get("full_text")
+                insights = source_context.get("insights") or []
+
+                content_parts = []
+                if full_text:
+                    content_parts.append(str(full_text))
+
+                insight_lines = []
+                for insight in insights:
+                    if not isinstance(insight, dict):
+                        continue
+
+                    insight_content = insight.get("content")
+                    if not insight_content:
+                        continue
+
+                    insight_type = insight.get("insight_type") or "Insight"
+                    insight_lines.append(f"- {insight_type}: {insight_content}")
+
+                if insight_lines:
+                    content_parts.append("Insights:\n" + "\n".join(insight_lines))
+
+                content = "\n\n".join(content_parts).strip()
+            else:
+                title = source.title or "Untitled source"
+                content = str(source_context).strip()
+
+            if content:
+                context_blocks.append(f"## Source: {title}\n\n{content}")
+
+        for note in notes:
+            note_context = note.get_context(context_size="long")
+            if isinstance(note_context, dict):
+                title = note_context.get("title") or note.title or "Untitled note"
+                content = note_context.get("content")
+                content = str(content).strip() if content else ""
+            else:
+                title = note.title or "Untitled note"
+                content = str(note_context).strip()
+
+            if content:
+                context_blocks.append(f"## Note: {title}\n\n{content}")
+
+        return "\n\n".join(context_blocks)
+
     async def get_chat_sessions(self) -> List["ChatSession"]:
         try:
             srcs = await repo_query(
diff --git a/tests/test_domain.py b/tests/test_domain.py
index 917c1631..ca01a6ba 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -5,13 +5,16 @@ This test suite focuses on validation logic, business rules, and data structures
 that can be tested without database mocking.
 """
 
+import sys
 import tempfile
 from pathlib import Path
+from types import ModuleType
 from unittest.mock import AsyncMock, patch
 
 import pytest
 from pydantic import ValidationError
 
+from api.podcast_service import PodcastService
 from open_notebook.ai.models import ModelManager
 from open_notebook.domain.base import RecordModel
 from open_notebook.domain.content_settings import ContentSettings
@@ -99,6 +102,118 @@ class TestNotebookDomain:
         notebook_archived = Notebook(name="Test", description="Test", archived=True)
         assert notebook_archived.archived is True
 
+    @pytest.mark.asyncio
+    async def test_notebook_get_context_includes_source_full_text(self):
+        """Test notebook context includes full source content for podcasts."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+        sources = [
+            Source(
+                id="source:first",
+                title="First Source",
+                full_text="First source full text for podcast generation.",
+            ),
+            Source(
+                id="source:second",
+                title="Second Source",
+                full_text="Second source full text for podcast generation.",
+            ),
+        ]
+        get_sources_calls = []
+
+        async def fake_get_sources(self, include_full_text=False):
+            get_sources_calls.append(include_full_text)
+            return sources
+
+        async def fake_get_notes(self, include_content=False):
+            return []
+
+        async def fake_get_insights(self):
+            return []
+
+        with (
+            patch.object(Notebook, "get_sources", new=fake_get_sources),
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+            patch.object(Source, "get_insights", new=fake_get_insights),
+        ):
+            context = await notebook.get_context()
+
+        assert get_sources_calls == [True]
+        assert "## Source: First Source" in context
+        assert "First source full text for podcast generation." in context
+        assert "## Source: Second Source" in context
+        assert "Second source full text for podcast generation." in context
+        assert "Notebook(id=" not in context
+
+    @pytest.mark.asyncio
+    async def test_notebook_get_context_includes_note_content(self):
+        """Test notebook context includes linked note content."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+        notes = [
+            Note(
+                id="note:first",
+                title="Research Note",
+                content="Important notebook note for the podcast.",
+            )
+        ]
+        get_notes_calls = []
+
+        async def fake_get_sources(self, include_full_text=False):
+            return []
+
+        async def fake_get_notes(self, include_content=False):
+            get_notes_calls.append(include_content)
+            return notes
+
+        with (
+            patch.object(Notebook, "get_sources", new=fake_get_sources),
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+        ):
+            context = await notebook.get_context()
+
+        assert get_notes_calls == [True]
+        assert "## Note: Research Note" in context
+        assert "Important notebook note for the podcast." in context
+
+    @pytest.mark.asyncio
+    async def test_notebook_get_context_returns_empty_string_without_content(self):
+        """Test notebooks with no source or note content produce empty context."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+
+        async def fake_get_sources(self, include_full_text=False):
+            return []
+
+        async def fake_get_notes(self, include_content=False):
+            return []
+
+        with (
+            patch.object(Notebook, "get_sources", new=fake_get_sources),
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+        ):
+            assert await notebook.get_context() == ""
+
+    @pytest.mark.asyncio
+    async def test_notebook_get_context_propagates_source_errors(self):
+        """Test source context failures are not swallowed by notebook context."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+        source = Source(id="source:first", title="First Source")
+
+        async def fake_get_sources(self, include_full_text=False):
+            return [source]
+
+        async def fake_get_notes(self, include_content=False):
+            return []
+
+        async def fake_get_context(self, context_size="short"):
+            raise RuntimeError("source context failed")
+
+        with (
+            patch.object(Notebook, "get_sources", new=fake_get_sources),
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+            patch.object(Source, "get_context", new=fake_get_context),
+        ):
+            with pytest.raises(RuntimeError, match="source context failed"):
+                await notebook.get_context()
+
 
 # ============================================================================
 # TEST SUITE 4: Source Domain
@@ -201,7 +316,6 @@ class TestSourceDomain:
             assert result is True
             mock_delete.assert_called_once()
 
-
     @pytest.mark.asyncio
     async def test_vectorize_raises_valueerror_when_no_text(self):
         """Test that vectorize() raises ValueError (not DatabaseOperationError) for empty text."""
@@ -336,6 +450,77 @@ class TestPodcastDomain:
         assert profile.speakers[0]["name"] == "Host"
 
 
+class TestPodcastService:
+    """Test suite for podcast service notebook content resolution."""
+
+    @pytest.mark.asyncio
+    async def test_submit_generation_job_uses_notebook_context_content(self):
+        """Test notebook podcast jobs submit real source content, not model repr."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+        sources = [
+            Source(
+                id="source:first",
+                title="First Source",
+                full_text="First source full text for submitted podcast content.",
+            ),
+            Source(
+                id="source:second",
+                title="Second Source",
+                full_text="Second source full text for submitted podcast content.",
+            ),
+        ]
+        submitted_args = {}
+
+        async def fake_get_sources(self, include_full_text=False):
+            return sources
+
+        async def fake_get_notes(self, include_content=False):
+            return []
+
+        async def fake_get_insights(self):
+            return []
+
+        def fake_submit_command(app_name, command_name, command_args):
+            submitted_args.update(command_args)
+            return "command:podcast"
+
+        fake_commands_module = ModuleType("commands.podcast_commands")
+        # The real commands/__init__.py runs `from .podcast_commands import
+        # generate_podcast_command` when the package is imported, so the fake
+        # submodule must expose that name or the package import fails before the
+        # patched submit_command is reached.
+        fake_commands_module.generate_podcast_command = lambda *a, **k: None
+
+        with (
+            patch.object(
+                EpisodeProfile, "get_by_name", new=AsyncMock(return_value=object())
+            ),
+            patch.object(
+                SpeakerProfile, "get_by_name", new=AsyncMock(return_value=object())
+            ),
+            patch.object(Notebook, "get", new=AsyncMock(return_value=notebook)),
+            patch.object(Notebook, "get_sources", new=fake_get_sources),
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+            patch.object(Source, "get_insights", new=fake_get_insights),
+            patch("api.podcast_service.submit_command", new=fake_submit_command),
+            patch.dict(
+                sys.modules, {"commands.podcast_commands": fake_commands_module}
+            ),
+        ):
+            job_id = await PodcastService.submit_generation_job(
+                episode_profile_name="Episode",
+                speaker_profile_name="Speakers",
+                episode_name="Episode Name",
+                notebook_id="notebook:test",
+            )
+
+        assert job_id == "command:podcast"
+        content = submitted_args["content"]
+        assert "First source full text for submitted podcast content." in content
+        assert "Second source full text for submitted podcast content." in content
+        assert "Notebook(id=" not in content
+
+
 # ============================================================================
 # TEST SUITE 7: Transformation Domain
 # ============================================================================

From 133709879bfb64781e9c2026a5f8058dcc749ac2 Mon Sep 17 00:00:00 2001
From: james LI <ltianyi992@gmail.com>
Date: Sat, 13 Jun 2026 04:56:33 -0700
Subject: [PATCH 071/345] fix: use model_dump(exclude_unset=True) in PUT
 profile handlers (#860)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

PUT /api/episode-profiles/{id} and PUT /api/speaker-profiles/{id}
both blindly assigned every field of the request body model (including
Optional fields with None defaults) onto the DB object. SurrealDB
rejected None values for fields typed as string — causing HTTP 500
whenever the client omitted any optional field.

Replace the per-field assignment blocks with a model_dump(exclude_unset=True)
loop so only fields the client actually included are written through.
Fields absent from the request body retain their current DB values.

Closes #809

Co-authored-by: james <li@jamesdeMacBook-Pro.local>
---
 api/routers/episode_profiles.py | 14 ++------------
 api/routers/speaker_profiles.py |  8 ++------
 2 files changed, 4 insertions(+), 18 deletions(-)

diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index cc5e0708..b3e5aeb7 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -137,18 +137,8 @@ async def update_episode_profile(profile_id: str, profile_data: EpisodeProfileCr
                 status_code=404, detail=f"Episode profile '{profile_id}' not found"
             )
 
-        profile.name = profile_data.name
-        profile.description = profile_data.description
-        profile.speaker_config = profile_data.speaker_config
-        profile.outline_llm = profile_data.outline_llm
-        profile.transcript_llm = profile_data.transcript_llm
-        profile.language = profile_data.language
-        profile.default_briefing = profile_data.default_briefing
-        profile.num_segments = profile_data.num_segments
-        profile.outline_provider = profile_data.outline_provider
-        profile.outline_model = profile_data.outline_model
-        profile.transcript_provider = profile_data.transcript_provider
-        profile.transcript_model = profile_data.transcript_model
+        for field, value in profile_data.model_dump(exclude_unset=True).items():
+            setattr(profile, field, value)
 
         await profile.save()
         return _profile_to_response(profile)
diff --git a/api/routers/speaker_profiles.py b/api/routers/speaker_profiles.py
index a4401600..edb34d19 100644
--- a/api/routers/speaker_profiles.py
+++ b/api/routers/speaker_profiles.py
@@ -113,12 +113,8 @@ async def update_speaker_profile(profile_id: str, profile_data: SpeakerProfileCr
                 status_code=404, detail=f"Speaker profile '{profile_id}' not found"
             )
 
-        profile.name = profile_data.name
-        profile.description = profile_data.description
-        profile.voice_model = profile_data.voice_model
-        profile.speakers = profile_data.speakers
-        profile.tts_provider = profile_data.tts_provider
-        profile.tts_model = profile_data.tts_model
+        for field, value in profile_data.model_dump(exclude_unset=True).items():
+            setattr(profile, field, value)
 
         await profile.save()
         return _profile_to_response(profile)

From 1d9001bab58a585d62f1ee9c7ed949103f523081 Mon Sep 17 00:00:00 2001
From: "@aaronjmars" <61592645+aaronjmars@users.noreply.github.com>
Date: Sat, 13 Jun 2026 08:01:59 -0400
Subject: [PATCH 072/345] fix(security): bump starlette to 1.2.1 + fastapi to
 0.136.3 for CVE-2026-48710 (BadHost) (#859)

Detected by Aeon + osv-scanner.
Severity: moderate (CVSS 6.5)
CVE-2026-48710 / GHSA-86qp-5c8j-p5mr / PYSEC-2026-161 / X41-2026-002

Affected: starlette < 1.0.1 (currently 0.50.0 in uv.lock).
Fixed: starlette >= 1.0.1 (lockfile bumps to 1.2.1).
FastAPI bumped 0.128.0 -> 0.136.3 because 0.128.0 pinned starlette < 0.51;
0.133.0+ allows starlette 1.x. pyproject.toml's fastapi>=0.104.0 constraint
already permits this.

Co-authored-by: aeonframework <aeonframework@users.noreply.github.com>
---
 uv.lock | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/uv.lock b/uv.lock
index 1b245490..0e9a9e5a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -691,17 +691,18 @@ wheels = [
 
 [[package]]
 name = "fastapi"
-version = "0.128.0"
+version = "0.136.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "annotated-doc" },
     { name = "pydantic" },
     { name = "starlette" },
     { name = "typing-extensions" },
+    { name = "typing-inspection" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/52/08/8c8508db6c7b9aae8f7175046af41baad690771c9bcde676419965e338c7/fastapi-0.128.0.tar.gz", hash = "sha256:1cc179e1cef10a6be60ffe429f79b829dce99d8de32d7acb7e6c8dfdf7f2645a", size = 365682, upload-time = "2025-12-27T15:21:13.714Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/81/2d/ff8d91d7b564d464629a0fd50a4489c97fcb836ac230bf3a7269232a9b1f/fastapi-0.136.3.tar.gz", hash = "sha256:e487fae93ad408e6f47641ee4dfe389864fd7bec92e547ea8498fc13f43e83ab", size = 396410, upload-time = "2026-05-23T18:53:15.192Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5c/05/5cbb59154b093548acd0f4c7c474a118eda06da25aa75c616b72d8fcd92a/fastapi-0.128.0-py3-none-any.whl", hash = "sha256:aebd93f9716ee3b4f4fcfe13ffb7cf308d99c9f3ab5622d8877441072561582d", size = 103094, upload-time = "2025-12-27T15:21:12.154Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/82/45359b62a067409bd929ae8a56b8ed13e5a8c8a61194b3c236920999ab83/fastapi-0.136.3-py3-none-any.whl", hash = "sha256:3d2a69bdf04b7e9f3afa292c3bc7a98816bbfafa10bc9b45f3f3700d2f761620", size = 117481, upload-time = "2026-05-23T18:53:16.924Z" },
 ]
 
 [[package]]
@@ -3314,15 +3315,15 @@ wheels = [
 
 [[package]]
 name = "starlette"
-version = "0.50.0"
+version = "1.2.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ba/b8/73a0e6a6e079a9d9cfa64113d771e421640b6f679a52eeb9b32f72d871a1/starlette-0.50.0.tar.gz", hash = "sha256:a2a17b22203254bcbc2e1f926d2d55f3f9497f769416b3190768befe598fa3ca", size = 2646985, upload-time = "2025-11-01T15:25:27.516Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/25/44/ec35f1b6e83094b997da438a02c8c9b0ade2b1e84cfc48bd4656780760a6/starlette-1.2.1.tar.gz", hash = "sha256:9b9b5ebb992e67d6093741e63c2f59e4f6fff986f81163c087867bd7b924b3f6", size = 2701854, upload-time = "2026-05-31T01:07:51.847Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d9/52/1064f510b141bd54025f9b55105e26d1fa970b9be67ad766380a3c9b74b0/starlette-0.50.0-py3-none-any.whl", hash = "sha256:9e5391843ec9b6e472eed1365a78c8098cfceb7a74bfd4d6b1c0c0095efb3bca", size = 74033, upload-time = "2025-11-01T15:25:25.461Z" },
+    { url = "https://files.pythonhosted.org/packages/1c/54/196d0c1db10af76baa4f64894448505d60d3cdf70ef92cbb35f46a4e4c71/starlette-1.2.1-py3-none-any.whl", hash = "sha256:4de0082d08c8f6764a85a54cf1120d6939507a19905c7768acad2a9f875d2b89", size = 73350, upload-time = "2026-05-31T01:07:50.09Z" },
 ]
 
 [[package]]

From 075686a67939a852b3e60d63acdb2ca3c6a8c9b7 Mon Sep 17 00:00:00 2001
From: "Leon.C" <1169882492@qq.com>
Date: Sat, 13 Jun 2026 20:13:49 +0800
Subject: [PATCH 073/345] docs: add Code of Conduct (Contributor Covenant v2.1)
 (#856)

* docs: add Code of Conduct (Contributor Covenant v2.1)

The contributing guide references a Code of Conduct that contributors
are expected to uphold, but the file was missing. This adds the
standard Contributor Covenant v2.1 and links to it from the
contributing guide.

* docs: point Code of Conduct enforcement contact to project channels

Replace the placeholder conduct@opennotebook.dev address (not a project
domain) with the open-notebook.ai contact form and the project Discord.

---------

Co-authored-by: zichen0116 <zichen0116@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CODE_OF_CONDUCT.md                 | 134 +++++++++++++++++++++++++++++
 docs/7-DEVELOPMENT/contributing.md |   2 +-
 2 files changed, 135 insertions(+), 1 deletion(-)
 create mode 100644 CODE_OF_CONDUCT.md

diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
new file mode 100644
index 00000000..25658fe6
--- /dev/null
+++ b/CODE_OF_CONDUCT.md
@@ -0,0 +1,134 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+- Demonstrating empathy and kindness toward other people
+- Being respectful of differing opinions, viewpoints, and experiences
+- Giving and gracefully accepting constructive feedback
+- Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+- Focusing on what is best not just for us as individuals, but for the overall
+  community
+
+Examples of unacceptable behavior include:
+
+- The use of sexualized language or imagery, and sexual attention or advances of
+  any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information, such as a physical or email address,
+  without their explicit permission
+- Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official email address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement through the
+contact form at **[open-notebook.ai](https://www.open-notebook.ai)** or via our
+**[Discord community](https://discord.gg/37XJPXfz2w)**.
+
+All complaints will be reviewed and investigated promptly and fairly.
+
+All community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community Impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community Impact**: A violation through a single incident or series of
+actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or permanent
+ban.
+
+### 3. Temporary Ban
+
+**Community Impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent Ban
+
+**Community Impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior, harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within the
+community.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage],
+version 2.1, available at
+[https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
+
+Community Impact Guidelines were inspired by
+[Mozilla's code of conduct enforcement ladder][Mozilla CoC].
+
+For answers to common questions about this code of conduct, see the FAQ at
+[https://www.contributor-covenant.org/faq][FAQ]. Translations are available at
+[https://www.contributor-covenant.org/translations][translations].
+
+[homepage]: https://www.contributor-covenant.org
+[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
+[Mozilla CoC]: https://github.com/mozilla/diversity
+[FAQ]: https://www.contributor-covenant.org/faq
+[translations]: https://www.contributor-covenant.org/translations
diff --git a/docs/7-DEVELOPMENT/contributing.md b/docs/7-DEVELOPMENT/contributing.md
index d2d8968a..14ecb1fa 100644
--- a/docs/7-DEVELOPMENT/contributing.md
+++ b/docs/7-DEVELOPMENT/contributing.md
@@ -21,7 +21,7 @@ Thank you for your interest in contributing to Open Notebook! We welcome contrib
 
 ## Code of Conduct
 
-By participating in this project, you are expected to uphold our Code of Conduct. Be respectful, constructive, and collaborative.
+By participating in this project, you are expected to uphold our [Code of Conduct](/CODE_OF_CONDUCT.md). Be respectful, constructive, and collaborative.
 
 ## How Can I Contribute?
 

From d39af076605171bc5ef51441e20e2842af6618e4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 13 Jun 2026 09:16:04 -0300
Subject: [PATCH 074/345] chore(deps): bump aiohttp from 3.13.4 to 3.14.0
 (#844)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 75 ++++++++++++++++++++++++++++++---------------------------
 1 file changed, 39 insertions(+), 36 deletions(-)

diff --git a/uv.lock b/uv.lock
index 0e9a9e5a..6b3a5b65 100644
--- a/uv.lock
+++ b/uv.lock
@@ -44,7 +44,7 @@ wheels = [
 
 [[package]]
 name = "aiohttp"
-version = "3.13.4"
+version = "3.14.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohappyeyeballs" },
@@ -53,44 +53,47 @@ dependencies = [
     { name = "frozenlist" },
     { name = "multidict" },
     { name = "propcache" },
+    { name = "typing-extensions" },
     { name = "yarl" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/45/4a/064321452809dae953c1ed6e017504e72551a26b6f5708a5a80e4bf556ff/aiohttp-3.13.4.tar.gz", hash = "sha256:d97a6d09c66087890c2ab5d49069e1e570583f7ac0314ecf98294c1b6aaebd38", size = 7859748, upload-time = "2026-03-28T17:19:40.6Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ee/ab/93ce242f899b68c51b0578c027aafa791ab3614cb9345fa5d37b5f5c8e3e/aiohttp-3.14.0.tar.gz", hash = "sha256:2882de819734c715fd1b9c11c97e09fa020d14438203d1d354d8ed1702791c9b", size = 7940674, upload-time = "2026-06-01T19:41:02.763Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d4/7e/cb94129302d78c46662b47f9897d642fd0b33bdfef4b73b20c6ced35aa4c/aiohttp-3.13.4-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:8ea0c64d1bcbf201b285c2246c51a0c035ba3bbd306640007bc5844a3b4658c1", size = 760027, upload-time = "2026-03-28T17:15:33.022Z" },
-    { url = "https://files.pythonhosted.org/packages/5e/cd/2db3c9397c3bd24216b203dd739945b04f8b87bb036c640da7ddb63c75ef/aiohttp-3.13.4-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:6f742e1fa45c0ed522b00ede565e18f97e4cf8d1883a712ac42d0339dfb0cce7", size = 508325, upload-time = "2026-03-28T17:15:34.714Z" },
-    { url = "https://files.pythonhosted.org/packages/36/a3/d28b2722ec13107f2e37a86b8a169897308bab6a3b9e071ecead9d67bd9b/aiohttp-3.13.4-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:6dcfb50ee25b3b7a1222a9123be1f9f89e56e67636b561441f0b304e25aaef8f", size = 502402, upload-time = "2026-03-28T17:15:36.409Z" },
-    { url = "https://files.pythonhosted.org/packages/fa/d6/acd47b5f17c4430e555590990a4746efbcb2079909bb865516892bf85f37/aiohttp-3.13.4-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:3262386c4ff370849863ea93b9ea60fd59c6cf56bf8f93beac625cf4d677c04d", size = 1771224, upload-time = "2026-03-28T17:15:38.223Z" },
-    { url = "https://files.pythonhosted.org/packages/98/af/af6e20113ba6a48fd1cd9e5832c4851e7613ef50c7619acdaee6ec5f1aff/aiohttp-3.13.4-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:473bb5aa4218dd254e9ae4834f20e31f5a0083064ac0136a01a62ddbae2eaa42", size = 1731530, upload-time = "2026-03-28T17:15:39.988Z" },
-    { url = "https://files.pythonhosted.org/packages/81/16/78a2f5d9c124ad05d5ce59a9af94214b6466c3491a25fb70760e98e9f762/aiohttp-3.13.4-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:e56423766399b4c77b965f6aaab6c9546617b8994a956821cc507d00b91d978c", size = 1827925, upload-time = "2026-03-28T17:15:41.944Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/1f/79acf0974ced805e0e70027389fccbb7d728e6f30fcac725fb1071e63075/aiohttp-3.13.4-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:8af249343fafd5ad90366a16d230fc265cf1149f26075dc9fe93cfd7c7173942", size = 1923579, upload-time = "2026-03-28T17:15:44.071Z" },
-    { url = "https://files.pythonhosted.org/packages/af/53/29f9e2054ea6900413f3b4c3eb9d8331f60678ec855f13ba8714c47fd48d/aiohttp-3.13.4-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:0bc0a5cf4f10ef5a2c94fdde488734b582a3a7a000b131263e27c9295bd682d9", size = 1767655, upload-time = "2026-03-28T17:15:45.911Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/57/462fe1d3da08109ba4aa8590e7aed57c059af2a7e80ec21f4bac5cfe1094/aiohttp-3.13.4-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:5c7ff1028e3c9fc5123a865ce17df1cb6424d180c503b8517afbe89aa566e6be", size = 1630439, upload-time = "2026-03-28T17:15:48.11Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/4b/4813344aacdb8127263e3eec343d24e973421143826364fa9fc847f6283f/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:ba5cf98b5dcb9bddd857da6713a503fa6d341043258ca823f0f5ab7ab4a94ee8", size = 1745557, upload-time = "2026-03-28T17:15:50.13Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/01/1ef1adae1454341ec50a789f03cfafe4c4ac9c003f6a64515ecd32fe4210/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:d85965d3ba21ee4999e83e992fecb86c4614d6920e40705501c0a1f80a583c12", size = 1741796, upload-time = "2026-03-28T17:15:52.351Z" },
-    { url = "https://files.pythonhosted.org/packages/22/04/8cdd99af988d2aa6922714d957d21383c559835cbd43fbf5a47ddf2e0f05/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:49f0b18a9b05d79f6f37ddd567695943fcefb834ef480f17a4211987302b2dc7", size = 1805312, upload-time = "2026-03-28T17:15:54.407Z" },
-    { url = "https://files.pythonhosted.org/packages/fb/7f/b48d5577338d4b25bbdbae35c75dbfd0493cb8886dc586fbfb2e90862239/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:7f78cb080c86fbf765920e5f1ef35af3f24ec4314d6675d0a21eaf41f6f2679c", size = 1621751, upload-time = "2026-03-28T17:15:56.564Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/89/4eecad8c1858e6d0893c05929e22343e0ebe3aec29a8a399c65c3cc38311/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:67a3ec705534a614b68bbf1c70efa777a21c3da3895d1c44510a41f5a7ae0453", size = 1826073, upload-time = "2026-03-28T17:15:58.489Z" },
-    { url = "https://files.pythonhosted.org/packages/f5/5c/9dc8293ed31b46c39c9c513ac7ca152b3c3d38e0ea111a530ad12001b827/aiohttp-3.13.4-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:d6630ec917e85c5356b2295744c8a97d40f007f96a1c76bf1928dc2e27465393", size = 1760083, upload-time = "2026-03-28T17:16:00.677Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/19/8bbf6a4994205d96831f97b7d21a0feed120136e6267b5b22d229c6dc4dc/aiohttp-3.13.4-cp311-cp311-win32.whl", hash = "sha256:54049021bc626f53a5394c29e8c444f726ee5a14b6e89e0ad118315b1f90f5e3", size = 439690, upload-time = "2026-03-28T17:16:02.902Z" },
-    { url = "https://files.pythonhosted.org/packages/0c/f5/ac409ecd1007528d15c3e8c3a57d34f334c70d76cfb7128a28cffdebd4c1/aiohttp-3.13.4-cp311-cp311-win_amd64.whl", hash = "sha256:c033f2bc964156030772d31cbf7e5defea181238ce1f87b9455b786de7d30145", size = 463824, upload-time = "2026-03-28T17:16:05.058Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/bd/ede278648914cabbabfdf95e436679b5d4156e417896a9b9f4587169e376/aiohttp-3.13.4-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:ee62d4471ce86b108b19c3364db4b91180d13fe3510144872d6bad5401957360", size = 752158, upload-time = "2026-03-28T17:16:06.901Z" },
-    { url = "https://files.pythonhosted.org/packages/90/de/581c053253c07b480b03785196ca5335e3c606a37dc73e95f6527f1591fe/aiohttp-3.13.4-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:c0fd8f41b54b58636402eb493afd512c23580456f022c1ba2db0f810c959ed0d", size = 501037, upload-time = "2026-03-28T17:16:08.82Z" },
-    { url = "https://files.pythonhosted.org/packages/fa/f9/a5ede193c08f13cc42c0a5b50d1e246ecee9115e4cf6e900d8dbd8fd6acb/aiohttp-3.13.4-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:4baa48ce49efd82d6b1a0be12d6a36b35e5594d1dd42f8bfba96ea9f8678b88c", size = 501556, upload-time = "2026-03-28T17:16:10.63Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/10/88ff67cd48a6ec36335b63a640abe86135791544863e0cfe1f065d6cef7a/aiohttp-3.13.4-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d738ebab9f71ee652d9dbd0211057690022201b11197f9a7324fd4dba128aa97", size = 1757314, upload-time = "2026-03-28T17:16:12.498Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/15/fdb90a5cf5a1f52845c276e76298c75fbbcc0ac2b4a86551906d54529965/aiohttp-3.13.4-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:0ce692c3468fa831af7dceed52edf51ac348cebfc8d3feb935927b63bd3e8576", size = 1731819, upload-time = "2026-03-28T17:16:14.558Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/df/28146785a007f7820416be05d4f28cc207493efd1e8c6c1068e9bdc29198/aiohttp-3.13.4-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:8e08abcfe752a454d2cb89ff0c08f2d1ecd057ae3e8cc6d84638de853530ebab", size = 1793279, upload-time = "2026-03-28T17:16:16.594Z" },
-    { url = "https://files.pythonhosted.org/packages/10/47/689c743abf62ea7a77774d5722f220e2c912a77d65d368b884d9779ef41b/aiohttp-3.13.4-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:5977f701b3fff36367a11087f30ea73c212e686d41cd363c50c022d48b011d8d", size = 1891082, upload-time = "2026-03-28T17:16:18.71Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/b6/f7f4f318c7e58c23b761c9b13b9a3c9b394e0f9d5d76fbc6622fa98509f6/aiohttp-3.13.4-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:54203e10405c06f8b6020bd1e076ae0fe6c194adcee12a5a78af3ffa3c57025e", size = 1773938, upload-time = "2026-03-28T17:16:21.125Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/06/f207cb3121852c989586a6fc16ff854c4fcc8651b86c5d3bd1fc83057650/aiohttp-3.13.4-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:358a6af0145bc4dda037f13167bef3cce54b132087acc4c295c739d05d16b1c3", size = 1579548, upload-time = "2026-03-28T17:16:23.588Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/58/e1289661a32161e24c1fe479711d783067210d266842523752869cc1d9c2/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:898ea1850656d7d61832ef06aa9846ab3ddb1621b74f46de78fbc5e1a586ba83", size = 1714669, upload-time = "2026-03-28T17:16:25.713Z" },
-    { url = "https://files.pythonhosted.org/packages/96/0a/3e86d039438a74a86e6a948a9119b22540bae037d6ba317a042ae3c22711/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:7bc30cceb710cf6a44e9617e43eebb6e3e43ad855a34da7b4b6a73537d8a6763", size = 1754175, upload-time = "2026-03-28T17:16:28.18Z" },
-    { url = "https://files.pythonhosted.org/packages/f4/30/e717fc5df83133ba467a560b6d8ef20197037b4bb5d7075b90037de1018e/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:4a31c0c587a8a038f19a4c7e60654a6c899c9de9174593a13e7cc6e15ff271f9", size = 1762049, upload-time = "2026-03-28T17:16:30.941Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/28/8f7a2d4492e336e40005151bdd94baf344880a4707573378579f833a64c1/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:2062f675f3fe6e06d6113eb74a157fb9df58953ffed0cdb4182554b116545758", size = 1570861, upload-time = "2026-03-28T17:16:32.953Z" },
-    { url = "https://files.pythonhosted.org/packages/78/45/12e1a3d0645968b1c38de4b23fdf270b8637735ea057d4f84482ff918ad9/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:3d1ba8afb847ff80626d5e408c1fdc99f942acc877d0702fe137015903a220a9", size = 1790003, upload-time = "2026-03-28T17:16:35.468Z" },
-    { url = "https://files.pythonhosted.org/packages/eb/0f/60374e18d590de16dcb39d6ff62f39c096c1b958e6f37727b5870026ea30/aiohttp-3.13.4-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:b08149419994cdd4d5eecf7fd4bc5986b5a9380285bcd01ab4c0d6bfca47b79d", size = 1737289, upload-time = "2026-03-28T17:16:38.187Z" },
-    { url = "https://files.pythonhosted.org/packages/02/bf/535e58d886cfbc40a8b0013c974afad24ef7632d645bca0b678b70033a60/aiohttp-3.13.4-cp312-cp312-win32.whl", hash = "sha256:fc432f6a2c4f720180959bc19aa37259651c1a4ed8af8afc84dd41c60f15f791", size = 434185, upload-time = "2026-03-28T17:16:40.735Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/1a/d92e3325134ebfff6f4069f270d3aac770d63320bd1fcd0eca023e74d9a8/aiohttp-3.13.4-cp312-cp312-win_amd64.whl", hash = "sha256:6148c9ae97a3e8bff9a1fc9c757fa164116f86c100468339730e717590a3fb77", size = 461285, upload-time = "2026-03-28T17:16:42.713Z" },
+    { url = "https://files.pythonhosted.org/packages/67/47/7727bfe8db93f8835a001bd4359d8480cc68d1259b8bce334668f8be97bd/aiohttp-3.14.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:54bf3522d6f7351e55f89a62d5c2bf138ad557b031670266c5df604ae88e0b5a", size = 759147, upload-time = "2026-06-01T19:37:12.918Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/f2/cd3fedff6fade73d71df9ec908c210cec518ef90fd00289250684b90aecf/aiohttp-3.14.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:0746d9fb0ac4fdef643a84494efe3f06d50335dd8c7a530228b86448aae0a803", size = 513705, upload-time = "2026-06-01T19:37:14.633Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/fe/49746b6b610144a06323bebd8e1211a390310d8c69b98dd6d52df341bc3e/aiohttp-3.14.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:9f3a96b6d39a4872222beee72e1df41d2ff886ae96152cf3e757ef8c5673ef0e", size = 509627, upload-time = "2026-06-01T19:37:16.385Z" },
+    { url = "https://files.pythonhosted.org/packages/4c/3f/28f2f6cf3d5c0e7b01b27140d0e7873fd11fb341169ad3ce78ad04aba628/aiohttp-3.14.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d336820adbb914debbc90a1d8c1bfc4bea55996aecf64866a989d35d1f9fd903", size = 1769293, upload-time = "2026-06-01T19:37:18.067Z" },
+    { url = "https://files.pythonhosted.org/packages/97/6f/2e5f1b525d5474b12b3c60abf733a755845f3bceff21542081ada515f837/aiohttp-3.14.0-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:71b2604c9bfc1b115547d63a094d5244b3f02799833513a99a68aaa7b167c4cb", size = 1732363, upload-time = "2026-06-01T19:37:20.138Z" },
+    { url = "https://files.pythonhosted.org/packages/a8/ce/596120faa85ca7b19cd061e3f2f3be23aa8f11a0aedf9191db9e0da1bd76/aiohttp-3.14.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:610d68800435903e303ca0542b9d3e4eb72a12ff33a6d471a070c1d81eebd3c2", size = 1840375, upload-time = "2026-06-01T19:37:22.104Z" },
+    { url = "https://files.pythonhosted.org/packages/72/3c/a7ffe05a757a4a7867643da69357ec41f506879fbd1b231d2ed90af246b2/aiohttp-3.14.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:514db9a79337068981ee2137310283a07b4b885c584991097a91a4da419bcb81", size = 1921484, upload-time = "2026-06-01T19:37:24.068Z" },
+    { url = "https://files.pythonhosted.org/packages/93/fa/2c861170bbd4a491de93a69e081db1d971092569e0d593a98ef62c384dc1/aiohttp-3.14.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:c452d17eeb95d563fc8b936f3050301dbd1d268126c4632d8b70ede9696202ee", size = 1774153, upload-time = "2026-06-01T19:37:26.256Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/da/1d2f5a165f47ec9b1f69d37b8b977fdc4d501aa72ffb7930db27bb9e49ea/aiohttp-3.14.0-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:ed94a81506e3d1bdbad5108f497a58f2a2354aedb4ca314d5326f07d1fd1ac2d", size = 1632569, upload-time = "2026-06-01T19:37:28.192Z" },
+    { url = "https://files.pythonhosted.org/packages/46/1d/7a6e295c4257252f70f69e90864fdad74b6a1293054fb3f9e65a15de6d63/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:1394dce36e0f0d260ac0b555a654de19cb989f3c1b8bdd24f505314dfea18a00", size = 1740325, upload-time = "2026-06-01T19:37:30.08Z" },
+    { url = "https://files.pythonhosted.org/packages/f1/7e/e1899b1ca3ec62f1eab2a5cbde14039b97493f7f53eb88d9b668562ffa8d/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:d1467d1e7b48a73ca7237e0ee4335f3d02b923dbc27b82fd254bc301c97d4026", size = 1748691, upload-time = "2026-06-01T19:37:32.211Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/54/4e6b61c1fe7d3433f82bcc6bd7e4d7c683a742a10c9b12a025fd3695c047/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:6a5f3532125233c261cf61f32df4059cfcf482eb793c7d3db8452e3142028b86", size = 1814477, upload-time = "2026-06-01T19:37:34.173Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/38/86fd51be2e08d8e45c83d879d255f10391903cd9fe2a16512f7591a15873/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:3ea81eb518a2ecb319d8ec6d1424a37c773f6634bd87d6985eb606b2faac419f", size = 1623393, upload-time = "2026-06-01T19:37:36.281Z" },
+    { url = "https://files.pythonhosted.org/packages/78/49/466e947a42a88ee23c486d036e7e5d1b097f1bafd8084ad9c9a0a92f0f43/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:32e735c3182de7b64f6941a4ede48b38c7f47d9437bd615dd30b5bda8fa1bc93", size = 1824097, upload-time = "2026-06-01T19:37:38.421Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/89/35f3410bc284682338a1be6b6ea0c5abfa05f063942cfaa9256608440434/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:c21ca9a1c63d4509158f478aeb9d02914dcc52adc68d1bc9dee2452284ee5996", size = 1764790, upload-time = "2026-06-01T19:37:40.755Z" },
+    { url = "https://files.pythonhosted.org/packages/42/80/2d4291bd5724d3d17e5951aff5a3e02281483fb47295f0788276ee66cd73/aiohttp-3.14.0-cp311-cp311-win32.whl", hash = "sha256:19ca5fc84130675ba11c6ca5c7da5cb65f7bf8a32cdd2b616bf49cd334688aae", size = 454176, upload-time = "2026-06-01T19:37:42.837Z" },
+    { url = "https://files.pythonhosted.org/packages/59/ed/41d0ad4f6ececffc32bdf1f7b494e5498f7ca5c849ea2e3cc9bbd1668251/aiohttp-3.14.0-cp311-cp311-win_amd64.whl", hash = "sha256:d488e6e9d3bb8ba5ae7066d5be885ae9670eba021b8c6ccb9a3a568e6b19d6e5", size = 479334, upload-time = "2026-06-01T19:37:44.776Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/86/c0b5e305c770053f8c3d069bb52b8196917ba91949d1962d52eb307fb0d2/aiohttp-3.14.0-cp311-cp311-win_arm64.whl", hash = "sha256:8b93618102caf12801638a01a2b478a55410ddd71bd41cfaf6f707953a49ac43", size = 450262, upload-time = "2026-06-01T19:37:46.461Z" },
+    { url = "https://files.pythonhosted.org/packages/89/97/2b6889bfb6b6847520d50d95eb8c4307a45e28aaca39faf4a9454b3d1b2f/aiohttp-3.14.0-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:b29518c9c2ec7e373e68259206a137c7f4f5439c58baaec4b5ab3ab799850a4e", size = 750194, upload-time = "2026-06-01T19:37:48.164Z" },
+    { url = "https://files.pythonhosted.org/packages/21/e2/62634b7fff918ed98c3c6b2f0e70d520f7f28846cb412d451b04354c6459/aiohttp-3.14.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:dbec68ce61b64cb73cab4d33df9433427b1713c8bcccb181dce695c1b6f8e87c", size = 506966, upload-time = "2026-06-01T19:37:50.014Z" },
+    { url = "https://files.pythonhosted.org/packages/dd/fb/5ce075150828c797a5106f1c2fb26034e709d4289b9d2bf8b07f1e59fac6/aiohttp-3.14.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:3cdf534aa455593e589302990c5097aa5c92c06c4262a20da22934f9186a5fff", size = 507527, upload-time = "2026-06-01T19:37:51.96Z" },
+    { url = "https://files.pythonhosted.org/packages/01/d5/405a0ae4e6b081754a3609c1c97c63a950e000a2def16046f1e736933a0e/aiohttp-3.14.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:cb6c657104393b5fbff01a5f59b2023db74058a8077d94475d6c25d03882a108", size = 1762420, upload-time = "2026-06-01T19:37:53.839Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/1d/e05a7c896b15a6bc6fb8fc5319eb437861c2c49c34559ef928add6590315/aiohttp-3.14.0-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:46fbbec4e4fab7428d4396a3823f9320e4560aa3113b89eeebce712c27c9ed5a", size = 1733672, upload-time = "2026-06-01T19:37:55.791Z" },
+    { url = "https://files.pythonhosted.org/packages/cc/22/a72f7c459e195fa41bf4f7abd1f925b91fe91f8097e51c654229ba144a33/aiohttp-3.14.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2c2c7e05dd5335b298085abf45ddf98673934c3ee1c083d0b9ea13d4186ad500", size = 1805064, upload-time = "2026-06-01T19:37:57.931Z" },
+    { url = "https://files.pythonhosted.org/packages/80/50/e85bdaba0be59ca4838005ebfef4048fcdd5f35a02b07057a9a123394440/aiohttp-3.14.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:3c7139100fbaae76515b73051d8f0aa3a3ff02e415eec8a8eee8e2223d9ba955", size = 1902125, upload-time = "2026-06-01T19:38:00.225Z" },
+    { url = "https://files.pythonhosted.org/packages/19/d8/51de5c6b971c27bb1ef620293b8d1ca611ec78736b34b3f6ccf68e4c8785/aiohttp-3.14.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:78d6f9286a629ce52728430afe18f8ed2b6c39a1fddb3802d7244b9983910ad2", size = 1783112, upload-time = "2026-06-01T19:38:02.641Z" },
+    { url = "https://files.pythonhosted.org/packages/73/ae/b4402bfde77e43dfb1b6ccff83c7b7ab63ed06b50c4754f0c5423fb374fe/aiohttp-3.14.0-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:cc3c3e12cdaeb92d7dcf13db00e9f6b1956b910e47256e696df1cfa946d02159", size = 1586356, upload-time = "2026-06-01T19:38:04.637Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/05/750a3265ca4dc54a460bd0cb1121a8f2ce9171fce4a135fb47ea7fd594d2/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:4d6a998191f5ebe3b8c28463ff72bc030250008b3193c402464efadd08b5ca02", size = 1723119, upload-time = "2026-06-01T19:38:06.713Z" },
+    { url = "https://files.pythonhosted.org/packages/37/01/8c0812c50b3b1b1c37b323bf170d6be8847a8f234060485b7d1e71953f60/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:0fc2b75ae8d169d853be2862d960be8550da6c5c65711d5476407eb3fdb006bd", size = 1757216, upload-time = "2026-06-01T19:38:08.736Z" },
+    { url = "https://files.pythonhosted.org/packages/47/2a/50fb98028a26887cbe48dcc1df92a90825615bc73b5584301304090cded8/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:16eee56bcc72d04600bc56c1759982c2385ec0b41d3fd3521f836bf64a0957ef", size = 1770500, upload-time = "2026-06-01T19:38:11.111Z" },
+    { url = "https://files.pythonhosted.org/packages/bd/32/0ffd598a2fa2b9a423daf242e700cfdabda35d6e602394ad9ae58972c1c7/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:5a2e7ca615c3ddc15b82687e05a624e5f5cba3f1d6c20cb81172d70ea498451e", size = 1576224, upload-time = "2026-06-01T19:38:13.391Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/f9/b9fc381dd9b66afb33f2634c40e229d106467be0afcabe79648631ab6712/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:f0b7b8bbbec3ce9467ee0ebe334622fd90624f593edd3136c567811453fc4fae", size = 1794252, upload-time = "2026-06-01T19:38:15.498Z" },
+    { url = "https://files.pythonhosted.org/packages/a8/fb/05d9214c975f23225a8cd5c439325e338c7c377b315480ef3871db51f54e/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:5ba10966d4f03dd96a14365be4b8e37c327c76f11c3ca867116966cdd9f98066", size = 1760193, upload-time = "2026-06-01T19:38:17.624Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/4b/02992fc4fb9e1b6673ee3f888a8e587a6447afda1f6f4aca776c148c2876/aiohttp-3.14.0-cp312-cp312-win32.whl", hash = "sha256:101df7779c80c0636014a6b2c6642acd3efb5b355d48347c9d7dfb720aee9430", size = 448650, upload-time = "2026-06-01T19:38:19.545Z" },
+    { url = "https://files.pythonhosted.org/packages/39/e9/246532214c3abda518477cbaaf16d420295ad8effa5233844cbb38f299ab/aiohttp-3.14.0-cp312-cp312-win_amd64.whl", hash = "sha256:b0a5747586d4467efd1f932710b269131c9717a872dce082cd92a00c1c13123a", size = 476145, upload-time = "2026-06-01T19:38:21.505Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/c3/63f8c20090048915711598b0adf475b149216d736157961de06480a45b15/aiohttp-3.14.0-cp312-cp312-win_arm64.whl", hash = "sha256:5f1c5be60add78fabb4aacd13c5a348ae79d2fcbfc7fa78da8f1eb192273b370", size = 444250, upload-time = "2026-06-01T19:38:24.027Z" },
 ]
 
 [[package]]

From a05c9d2de2240cfe561d4e68acb32cc72069e102 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 04:29:28 -0300
Subject: [PATCH 075/345] fix(sources): query reference edge by in/out in retry
 endpoint (#899)

POST /sources/{id}/retry looked up a source's notebooks with
`SELECT notebook FROM reference WHERE source = $source_id`, but `reference`
is a graph edge (RELATE source->reference->notebook) with only `in`/`out`
columns. The query matched nothing, so `notebook_ids` was always empty and
the endpoint returned 400 for every source. Mirror the working query used in
the source-list path: `SELECT VALUE out FROM reference WHERE in = $source_id`.

Adds regression tests asserting retry re-queues a linked source and only 400s
when a source is genuinely unlinked.
---
 CHANGELOG.md              |  3 +++
 api/routers/sources.py    | 13 +++++++---
 tests/test_sources_api.py | 52 +++++++++++++++++++++++++++++++++++++++
 3 files changed, 64 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38d43d72..4c535929 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
+
 ## [1.9.0] - 2026-06-02
 
 ### Added
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 9c4b7452..15c53ca3 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -842,10 +842,15 @@ async def retry_source_processing(source_id: str):
                 )
                 # Continue with retry if we can't check status
 
-        # Get notebooks that this source belongs to
-        query = "SELECT notebook FROM reference WHERE source = $source_id"
-        references = await repo_query(query, {"source_id": source_id})
-        notebook_ids = [str(ref["notebook"]) for ref in references]
+        # Get notebooks that this source belongs to. `reference` is a graph edge
+        # (RELATE source->reference->notebook), so it only has `in`/`out` columns —
+        # there is no `source`/`notebook` column. Mirror the working query at the
+        # source-list path above. See issue #861.
+        references = await repo_query(
+            "SELECT VALUE out FROM reference WHERE in = $source_id",
+            {"source_id": ensure_record_id(source.id or source_id)},
+        )
+        notebook_ids = [str(nb_id) for nb_id in references] if references else []
 
         if not notebook_ids:
             raise HTTPException(
diff --git a/tests/test_sources_api.py b/tests/test_sources_api.py
index f33cf6bd..c18ea426 100644
--- a/tests/test_sources_api.py
+++ b/tests/test_sources_api.py
@@ -138,5 +138,57 @@ class TestAsyncSourceAssetPersistence:
         assert source.asset is None
 
 
+class TestRetrySourceProcessing:
+    """POST /sources/{id}/retry must find a source's notebooks via the reference
+    edge's in/out columns, not a non-existent `source` column (#861)."""
+
+    @pytest.mark.asyncio
+    @patch("api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock)
+    @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
+    async def test_retry_finds_notebooks_and_requeues(
+        self, mock_get, mock_repo_query, mock_submit, client
+    ):
+        source = MagicMock()
+        source.id = "source:1"
+        source.command = None
+        source.title = "My source"
+        source.topics = []
+        source.full_text = None
+        source.asset = MagicMock(file_path=None, url="https://example.com/post")
+        source.save = AsyncMock()
+        source.get_embedded_chunks = AsyncMock(return_value=0)
+        mock_get.return_value = source
+
+        # The corrected query returns the linked notebook(s)
+        mock_repo_query.return_value = ["notebook:1"]
+        mock_submit.return_value = "123"
+
+        response = client.post("/api/sources/source:1/retry")
+
+        assert response.status_code == 200
+        # Regression guard: must query the reference edge by its `in` column
+        called_query = mock_repo_query.await_args.args[0]
+        assert "WHERE in = $source_id" in called_query
+        assert "SELECT VALUE out FROM reference" in called_query
+
+    @pytest.mark.asyncio
+    @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
+    async def test_retry_400_only_when_truly_unlinked(
+        self, mock_get, mock_repo_query, client
+    ):
+        source = MagicMock()
+        source.id = "source:1"
+        source.command = None
+        mock_get.return_value = source
+        mock_repo_query.return_value = []  # genuinely no notebooks
+
+        response = client.post("/api/sources/source:1/retry")
+
+        assert response.status_code == 400
+        assert "not associated with any notebooks" in response.json()["detail"]
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From 61bfe82643e4abd7175b9a93269756fb45b7846b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 04:29:32 -0300
Subject: [PATCH 076/345] docs: fix local quickstart and document the worker
 step (#900)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

quick-start-local.md (#781):
- add the required OLLAMA_BASE_URL=http://ollama:11434 env var to the
  open_notebook service (already present in examples/docker-compose-ollama.yml)
- correct the provider/model setup navigation from "Settings → API Keys" to
  the actual "Manage → Models" location

from-source.md (#779):
- add a "Start Worker" step between API and Frontend; without the
  surreal-commands worker, sources stay stuck at CommandStatus.NEW
- fix the same outdated "Settings → API Keys" navigation reference
---
 docs/0-START-HERE/quick-start-local.md |  7 +++++--
 docs/1-INSTALLATION/from-source.md     | 25 ++++++++++++++++++++-----
 2 files changed, 25 insertions(+), 7 deletions(-)

diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index b933e4a1..fba38519 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -56,6 +56,9 @@ services:
       - SURREAL_PASSWORD=password
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
+
+      # Ollama (required when running Ollama via Docker, as in this compose file)
+      - OLLAMA_BASE_URL=http://ollama:11434
     volumes:
       - ./notebook_data:/app/data
     depends_on:
@@ -129,7 +132,7 @@ You should see the Open Notebook interface.
 
 ## Step 6: Configure Ollama Provider (1 min)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Ollama**
 4. Give it a name (e.g., "Local Ollama")
@@ -142,7 +145,7 @@ You should see the Open Notebook interface.
 
 ## Step 7: Configure Local Model (1 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Set:
    - **Language Model**: `ollama/mistral` (or whichever model you downloaded)
    - **Embedding Model**: `ollama/nomic-embed-text` (auto-downloads if missing)
diff --git a/docs/1-INSTALLATION/from-source.md b/docs/1-INSTALLATION/from-source.md
index 078bdbc7..3d003cd1 100644
--- a/docs/1-INSTALLATION/from-source.md
+++ b/docs/1-INSTALLATION/from-source.md
@@ -66,7 +66,7 @@ cp .env.example .env
 # OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 ```
 
-After starting the app, configure AI providers via the **Settings → API Keys** UI in the browser.
+After starting the app, configure AI providers via the **Manage → Models** UI in the browser.
 
 ### 5. Start API
 
@@ -76,23 +76,38 @@ make api
 # or: uv run --env-file .env uvicorn api.main:app --host 0.0.0.0 --port 5055
 ```
 
-### 6. Start Frontend
+### 6. Start Worker
+
+Source and note processing (content extraction, embedding, insights) is dispatched
+as background jobs that a **separate worker** process consumes. Without it, every
+source stays stuck at `Source processing status: CommandStatus.NEW` forever.
 
 ```bash
 # Terminal 3
+make worker
+# or: uv run --env-file .env surreal-commands-worker --import-modules commands
+```
+
+> `make start-all` starts Database + API + Worker + Frontend together; the steps
+> above run them individually so you can see each process's logs.
+
+### 7. Start Frontend
+
+```bash
+# Terminal 4
 cd frontend && npm install && npm run dev
 ```
 
-### 7. Access
+### 8. Access
 
 - **Frontend**: http://localhost:3000
 - **API Docs**: http://localhost:5055/docs
 - **Database**: http://localhost:8000
 
-### 8. Configure AI Provider
+### 9. Configure AI Provider
 
 1. Open http://localhost:3000
-2. Go to **Settings** → **API Keys**
+2. Go to **Manage** → **Models**
 3. Click **Add Credential** → Select your provider → Paste API key
 4. Click **Save**, then **Test Connection**
 5. Click **Discover Models** → **Register Models**

From a9a14089777c80371d731fee6776ae0816918813 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 04:48:07 -0300
Subject: [PATCH 077/345] perf(sources): memoize SourceCard and stop polling
 completed sources (#901)

* perf(sources): memoize SourceCard and stop polling completed sources

The notebook source list re-rendered every SourceCard whenever an unrelated
parent state changed (layout toggles, context selection), and every completed
source kept an active status-polling query because shouldFetchStatus was gated
on command_id (which completed sources retain). Both costs scaled with the
number of sources, producing the UI lag reported in #503.

- Wrap SourceCard in React.memo with a comparator over the props that affect
  its output (id, title, updated, status, command_id, embedded, insights_count,
  asset, topics length, contextMode, showRemoveFromNotebook, className).
  Handler identity is intentionally ignored since inline closures capture the
  source id and stay correct while the data is unchanged.
- Only poll status while a source is actually new/queued/running (or just
  finished); the list endpoint already returns status alongside command_id, so
  completed sources no longer spawn a query each.

Approach based on @SurFlurer's perf-opti branch (#503), with a hardened
comparator that also tracks status/command_id/embedded.

* perf(sources): keep polling command-without-status cards; deep-compare topics

Address cubic review on #901:
- shouldFetchStatus now also polls a source that has a command_id but no
  resolved status yet, so such a card no longer gets stuck in a synthetic
  "new" state without ever rechecking
- the memo comparator compares topic contents (element-wise) instead of just
  array length, so a topic badge whose text changes without a length change
  no longer stays stale
---
 CHANGELOG.md                                  |  3 +
 .../src/components/sources/SourceCard.tsx     | 58 ++++++++++++++++++-
 2 files changed, 58 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4c535929..1462ba03 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
 
+### Performance
+- Notebook source list no longer re-renders every `SourceCard` on unrelated state changes (layout toggles, context selection), and completed sources no longer each open a status-polling query. Both scaled with the number of sources and caused UI lag on large notebooks (#503)
+
 ## [1.9.0] - 2026-06-02
 
 ### Added
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 33202203..b80bfe48 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import React, { useState, useEffect } from 'react'
+import React, { useState, useEffect, memo } from 'react'
 import { SourceListResponse } from '@/lib/types/api'
 import { Badge } from '@/components/ui/badge'
 import { Card, CardContent } from '@/components/ui/card'
@@ -107,7 +107,7 @@ function getSourceType(source: SourceListResponse): 'link' | 'upload' | 'text' {
   return 'text'
 }
 
-export function SourceCard({
+function SourceCardImpl({
   source,
   onClick,
   onDelete,
@@ -128,10 +128,20 @@ export function SourceCard({
   // Track processing state to continue polling until we detect completion
   const [wasProcessing, setWasProcessing] = useState(false)
 
-  const shouldFetchStatus = !!sourceWithStatus.command_id ||
+  // Only poll status while the source is actually being processed (or just finished
+  // and we still need one more poll to catch completion). The list endpoint already
+  // populates `status` alongside `command_id`, so we no longer poll for every
+  // completed source — that scaled linearly with the number of cards and caused the
+  // list lag reported in #503.
+  //
+  // A source with a `command_id` but no resolved `status` yet is still ambiguous
+  // (it renders as a synthetic "new"), so keep polling those until a real status
+  // arrives — otherwise such a card would be stuck "processing" forever.
+  const shouldFetchStatus =
     sourceWithStatus.status === 'new' ||
     sourceWithStatus.status === 'queued' ||
     sourceWithStatus.status === 'running' ||
+    (!!sourceWithStatus.command_id && !sourceWithStatus.status) ||
     wasProcessing // Keep polling if we were processing to catch the completion
 
   const { data: statusData, isLoading: statusLoading } = useSourceStatus(
@@ -392,3 +402,45 @@ export function SourceCard({
     </Card>
   )
 }
+
+/**
+ * SourceCard is rendered in long lists (one per source). Without memoization, any
+ * parent re-render (layout toggles, context-selection changes elsewhere) re-rendered
+ * every card, causing UI jank that scaled with the number of sources (#503).
+ *
+ * We compare only the props that affect this card's rendered output. Handler identity
+ * is intentionally ignored: callers often pass inline closures, and those closures
+ * capture the source id, so a stale closure stays correct as long as the source data
+ * below is unchanged.
+ */
+function topicsEqual(a?: string[], b?: string[]): boolean {
+  if (a === b) return true
+  if ((a?.length ?? 0) !== (b?.length ?? 0)) return false
+  if (!a || !b) return true // both empty/undefined (lengths matched above)
+  return a.every((topic, i) => topic === b[i])
+}
+
+function areEqual(prev: SourceCardProps, next: SourceCardProps): boolean {
+  if (prev === next) return true
+
+  const p = prev.source as SourceListResponse & { command_id?: string; status?: string }
+  const n = next.source as SourceListResponse & { command_id?: string; status?: string }
+
+  return (
+    p.id === n.id &&
+    p.title === n.title &&
+    p.updated === n.updated &&
+    p.status === n.status &&
+    p.command_id === n.command_id &&
+    p.embedded === n.embedded &&
+    p.insights_count === n.insights_count &&
+    p.asset?.url === n.asset?.url &&
+    p.asset?.file_path === n.asset?.file_path &&
+    topicsEqual(p.topics, n.topics) &&
+    prev.contextMode === next.contextMode &&
+    prev.showRemoveFromNotebook === next.showRemoveFromNotebook &&
+    prev.className === next.className
+  )
+}
+
+export const SourceCard = memo(SourceCardImpl, areEqual)

From f578b78f6eaed98e3c51279b5f0cb4e1e11fdc7e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 04:51:34 -0300
Subject: [PATCH 078/345] fix(search): reject non-positive limit and survive
 highlight overflow (#898)

* fix(search): reject non-positive limit and survive highlight overflow

- SearchRequest.limit now has ge=1 so 0/negative values are rejected with
  422 instead of flowing into SurrealDB as LIMIT -1/0 (500 or empty set) (#863)
- text_search() catches SurrealDB's "position overflow" highlight error and
  falls back to vector_search() so large/multi-byte chunks no longer 500 (#648)
- add tests covering limit validation and the overflow fallback path

* fix(search): surface error when vector fallback also fails

Address cubic review on #898:
- text_search() no longer returns [] when the vector-search fallback also
  fails; it logs the traceback and raises DatabaseOperationError so a total
  search outage is not masked as a legitimate empty result set
- document the fallback + failure behavior in domain/CLAUDE.md
- update the test to assert the double-failure path raises
---
 CHANGELOG.md                     |   2 +
 api/models.py                    |   2 +-
 open_notebook/domain/CLAUDE.md   |   2 +-
 open_notebook/domain/notebook.py |  22 +++++++
 tests/test_search_api.py         | 104 +++++++++++++++++++++++++++++++
 5 files changed, 130 insertions(+), 2 deletions(-)
 create mode 100644 tests/test_search_api.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1462ba03..d7c8f05f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
+- Text search no longer returns a 500 when SurrealDB's `search::highlight` hits a "position overflow" on large or multi-byte document chunks; it now falls back to vector search and returns results (#648)
+- `POST /api/search` now rejects a non-positive `limit` with a `422` instead of passing `LIMIT -1`/`LIMIT 0` to SurrealDB (which caused a 500 or a silently empty result set) (#863)
 
 ### Performance
 - Notebook source list no longer re-renders every `SourceCard` on unrelated state changes (layout toggles, context selection), and completed sources no longer each open a status-polling query. Both scaled with the number of sources and caused UI lag on large notebooks (#503)
diff --git a/api/models.py b/api/models.py
index 07dad5b8..05663d78 100644
--- a/api/models.py
+++ b/api/models.py
@@ -32,7 +32,7 @@ class NotebookResponse(BaseModel):
 class SearchRequest(BaseModel):
     query: str = Field(..., description="Search query")
     type: Literal["text", "vector"] = Field("text", description="Search type")
-    limit: int = Field(100, description="Maximum number of results", le=1000)
+    limit: int = Field(100, description="Maximum number of results", ge=1, le=1000)
     search_sources: bool = Field(True, description="Include sources in search")
     search_notes: bool = Field(True, description="Include notes in search")
     minimum_score: float = Field(
diff --git a/open_notebook/domain/CLAUDE.md b/open_notebook/domain/CLAUDE.md
index 79678f47..504c5e73 100644
--- a/open_notebook/domain/CLAUDE.md
+++ b/open_notebook/domain/CLAUDE.md
@@ -43,7 +43,7 @@ Two base classes support different persistence patterns: **ObjectModel** (mutabl
 - **Asset**: File/URL reference helper
 
 - **Search functions**:
-  - `text_search()`: Full-text keyword search
+  - `text_search()`: Full-text keyword search. On a SurrealDB `search::highlight` "position overflow" (large/multi-byte chunks) it falls back to `vector_search()`; if that also fails it raises `DatabaseOperationError` (never silently returns an empty list)
   - `vector_search()`: Semantic search via embeddings (default minimum_score=0.2)
 
 ### content_settings.py
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index b6621fff..87e24194 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -707,6 +707,28 @@ async def text_search(
             {"keyword": keyword, "results": results, "source": source, "note": note},
         )
         return search_results
+    except RuntimeError as e:
+        # SurrealDB's search::highlight can compute a byte position that exceeds the
+        # stored string length on large or multi-byte chunks, aborting the whole query
+        # ("position overflow"). Fall back to vector search so the user still gets
+        # results instead of a 500. See issue #648.
+        if "position overflow" in str(e):
+            logger.warning(
+                f"Highlight position overflow, falling back to vector search: {str(e)}"
+            )
+            try:
+                return await vector_search(keyword, results, source, note)
+            except Exception as ve:
+                # Both search paths failed (e.g. no embedding model configured).
+                # Surface the failure instead of returning [] — an empty list would
+                # be indistinguishable from a legitimate "no matches" and mask a
+                # total search outage from callers.
+                logger.error(f"Vector search fallback also failed: {str(ve)}")
+                logger.exception(ve)
+                raise DatabaseOperationError(ve)
+        logger.error(f"Error performing text search: {str(e)}")
+        logger.exception(e)
+        raise DatabaseOperationError(e)
     except Exception as e:
         logger.error(f"Error performing text search: {str(e)}")
         logger.exception(e)
diff --git a/tests/test_search_api.py b/tests/test_search_api.py
new file mode 100644
index 00000000..18c42fd9
--- /dev/null
+++ b/tests/test_search_api.py
@@ -0,0 +1,104 @@
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+
+@pytest.fixture
+def client():
+    """Create test client after environment variables have been cleared by conftest."""
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestSearchLimitValidation:
+    """SearchRequest.limit must reject non-positive values (#863)."""
+
+    @pytest.mark.parametrize("bad_limit", [0, -1, -100])
+    def test_non_positive_limit_returns_422(self, bad_limit, client):
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "text", "limit": bad_limit},
+        )
+        assert response.status_code == 422
+
+    def test_limit_above_max_returns_422(self, client):
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "text", "limit": 1001},
+        )
+        assert response.status_code == 422
+
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_valid_limit_returns_200(self, mock_text_search, client):
+        mock_text_search.return_value = []
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "text", "limit": 10},
+        )
+        assert response.status_code == 200
+        mock_text_search.assert_awaited_once()
+
+
+class TestTextSearchHighlightOverflowFallback:
+    """text_search() must fall back to vector search on a highlight position overflow (#648)."""
+
+    @pytest.mark.asyncio
+    async def test_position_overflow_falls_back_to_vector_search(self):
+        from open_notebook.domain import notebook as notebook_module
+
+        overflow = RuntimeError(
+            "A value can't be highlighted: position overflow: 2545 - len: 1965"
+        )
+        with (
+            patch.object(
+                notebook_module, "repo_query", new_callable=AsyncMock, side_effect=overflow
+            ),
+            patch.object(
+                notebook_module,
+                "vector_search",
+                new_callable=AsyncMock,
+                return_value=[{"id": "source:1"}],
+            ) as mock_vector,
+        ):
+            result = await notebook_module.text_search("hello", 10)
+
+        assert result == [{"id": "source:1"}]
+        mock_vector.assert_awaited_once_with("hello", 10, True, True)
+
+    @pytest.mark.asyncio
+    async def test_position_overflow_raises_when_vector_also_fails(self):
+        from open_notebook.domain import notebook as notebook_module
+        from open_notebook.exceptions import DatabaseOperationError
+
+        overflow = RuntimeError("position overflow: 1 - len: 0")
+        with (
+            patch.object(
+                notebook_module, "repo_query", new_callable=AsyncMock, side_effect=overflow
+            ),
+            patch.object(
+                notebook_module,
+                "vector_search",
+                new_callable=AsyncMock,
+                side_effect=Exception("no embedding model"),
+            ),
+        ):
+            # When both search paths fail, surface the error rather than masking it
+            # as an empty result set.
+            with pytest.raises(DatabaseOperationError):
+                await notebook_module.text_search("hello", 10)
+
+    @pytest.mark.asyncio
+    async def test_other_runtime_errors_still_raise(self):
+        from open_notebook.domain import notebook as notebook_module
+        from open_notebook.exceptions import DatabaseOperationError
+
+        with patch.object(
+            notebook_module,
+            "repo_query",
+            new_callable=AsyncMock,
+            side_effect=RuntimeError("some other db failure"),
+        ):
+            with pytest.raises(DatabaseOperationError):
+                await notebook_module.text_search("hello", 10)

From 003c452839d8a4936fa74e64eb87150905de3309 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 09:12:02 -0300
Subject: [PATCH 079/345] feat(sources): make retry prominent on failed source
 cards (#904)

The retry action for failed sources was effectively dropdown-only and the
inline button (when shown) didn't stop event propagation, so clicking it also
opened the source detail (#726).

- Surface a filled "Retry processing" button directly on failed cards.
- stopPropagation on the retry click so it no longer navigates to the source.
- Drop the `(isFailed as any)` cast + eslint-disable hack.
- Type the progress indicator guard (processing_info.progress is unknown) so
  the card's children type-check without the `any` cast that was hiding it.
---
 CHANGELOG.md                                   |  3 +++
 frontend/src/components/sources/SourceCard.tsx | 18 +++++++++++-------
 2 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d7c8f05f..8eadc362 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- Failed source cards now show a prominent "Retry processing" button directly on the card instead of only inside the 3-dot dropdown; clicking it no longer also opens the source (the click was missing `stopPropagation`) (#726)
+
 ### Fixed
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
 - Text search no longer returns a 500 when SurrealDB's `search::highlight` hits a "position overflow" on large or multi-byte document chunks; it now falls back to vector search and returns results (#648)
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index b80bfe48..9f21d2a9 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -365,24 +365,28 @@ function SourceCardImpl({
           </DropdownMenu>
           </div>
         </div>
-        {/* eslint-disable-next-line @typescript-eslint/no-explicit-any */}
-        {(isFailed as any) && (
+        {/* Prominent retry action surfaced directly on failed cards so it's
+            discoverable without opening the dropdown menu (#726). */}
+        {isFailed ? (
           <div className="flex gap-2 pt-2 border-t">
             <Button
-              variant="outline"
+              variant="default"
               size="sm"
-              onClick={handleRetry}
+              onClick={(e) => {
+                e.stopPropagation()
+                handleRetry()
+              }}
               disabled={!onRetry}
               className="h-7 text-xs"
             >
               <RefreshCw className="h-3 w-3 mr-1" />
-              {t('sources.retry')}
+              {t('sources.retryProcessing')}
             </Button>
           </div>
-        )}
+        ) : null}
 
         {/* Processing progress indicator */}
-        {isProcessing && statusData?.processing_info?.progress && (
+        {isProcessing && typeof statusData?.processing_info?.progress === 'number' && (
           <div className="mt-3 pt-2 border-t">
             <div className="flex justify-between items-center mb-1">
             <span className="text-xs text-gray-600">{t('common.progress')}</span>

From f04d2695951074db413db2c2a8d89c2c8ed1313d Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 09:23:52 -0300
Subject: [PATCH 080/345] fix(search): page-level scroll for results +
 configurable API timeout (#905)

* fix(search): page-level scroll for results + configurable API timeout

#882: Search/Ask results were trapped in a height-capped (max-h-[60vh])
inner-scroll container because the search page content wrapper wasn't a scroll
region. Give the page the same `flex-1 overflow-y-auto` wrapper used by the
other dashboard pages and drop the inner 60vh caps on both the Search results
list and the shared StreamingResponse (Ask), so results scroll at page level.

#880: the axios timeout was hardcoded at 600000ms, so slow chat models would
abort at exactly 10 minutes with no way to raise it. Make it configurable via
NEXT_PUBLIC_API_TIMEOUT_MS (default 600000; 0 disables).

* fix(api-client): treat empty NEXT_PUBLIC_API_TIMEOUT_MS as unset

Address cubic review on #905: Number("") is 0, which would disable the request
timeout if the env var was present but empty. Only parse a non-empty value;
empty/invalid falls back to the default. An explicit "0" still disables it.

* docs: document configurable API timeout in frontend CLAUDE.md

Address cubic review on #905: the frontend docs described the axios timeout as
a fixed 10 minutes. Note that it's configurable via NEXT_PUBLIC_API_TIMEOUT_MS.
---
 CHANGELOG.md                                  |  4 ++++
 frontend/src/CLAUDE.md                        |  2 +-
 frontend/src/app/(dashboard)/search/page.tsx  |  4 ++--
 .../components/search/StreamingResponse.tsx   |  2 +-
 frontend/src/lib/api/CLAUDE.md                |  4 ++--
 frontend/src/lib/api/client.ts                | 21 ++++++++++++++-----
 6 files changed, 26 insertions(+), 11 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8eadc362..4cc09c0d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,10 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- `NEXT_PUBLIC_API_TIMEOUT_MS` environment variable to configure the frontend API request timeout (default `600000` = 10 minutes; set `0` to disable). Lets slow/long-running chat models finish without editing source (#880)
+
 ### Changed
 - Failed source cards now show a prominent "Retry processing" button directly on the card instead of only inside the 3-dot dropdown; clicking it no longer also opens the source (the click was missing `stopPropagation`) (#726)
 
 ### Fixed
+- Search and Ask results now use page-level scrolling instead of being confined to a cramped, height-capped (`60vh`) bottom container, so the full result set is readable (#882)
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
 - Text search no longer returns a 500 when SurrealDB's `search::highlight` hits a "position overflow" on large or multi-byte document chunks; it now falls back to vector search and returns results (#648)
 - `POST /api/search` now rejects a non-positive `limit` with a `422` instead of passing `LIMIT -1`/`LIMIT 0` to SurrealDB (which caused a 500 or a silently empty result set) (#863)
diff --git a/frontend/src/CLAUDE.md b/frontend/src/CLAUDE.md
index 5ccc9afe..2383003d 100644
--- a/frontend/src/CLAUDE.md
+++ b/frontend/src/CLAUDE.md
@@ -40,7 +40,7 @@ User interactions trigger mutations/queries via hooks, which communicate with th
 ### Lib (`src/lib/`) — Data & State Layer
 
 #### `lib/api/` — Backend Communication
-- **`client.ts`**: Central Axios instance with auth interceptor, FormData handling, 10-min timeout
+- **`client.ts`**: Central Axios instance with auth interceptor, FormData handling, configurable request timeout (`NEXT_PUBLIC_API_TIMEOUT_MS`, default 10 min; `0` disables)
 - **`query-client.ts`**: TanStack Query configuration
 - **Resource modules** (`sources.ts`, `chat.ts`, `notebooks.ts`, etc.): Endpoint-specific functions returning typed responses
 - **Pattern**: All requests go through `apiClient`; auth token auto-added from localStorage
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 8c864299..f4d50499 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -158,7 +158,7 @@ export default function SearchPage() {
 
   return (
     <AppShell>
-      <div className="p-4 md:p-6">
+      <div className="flex-1 overflow-y-auto p-4 md:p-6">
         <h1 className="text-xl md:text-2xl font-bold mb-4 md:mb-6">{t('searchPage.askAndSearch')}</h1>
 
         <Tabs value={activeTab} onValueChange={(v) => setActiveTab(v as 'ask' | 'search')} className="w-full space-y-6">
@@ -440,7 +440,7 @@ export default function SearchPage() {
                         </CardContent>
                       </Card>
                     ) : (
-                      <div className="space-y-2 max-h-[60vh] overflow-y-auto pr-2">
+                      <div className="space-y-2">
                         {searchMutation.data.results.map((result, index) => {
                           // Parse type from parent_id (format: "source:id" or "note:id" or "source_insight:id")
                           // Handle null parent_id gracefully (orphaned records)
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index d53f99f5..084dbe45 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -56,7 +56,7 @@ export function StreamingResponse({
 
   return (
     <div
-      className="space-y-4 mt-6 max-h-[60vh] overflow-y-auto pr-2"
+      className="space-y-4 mt-6"
       role="region"
       aria-label={t('common.accessibility.askResponse')}
       aria-live="polite"
diff --git a/frontend/src/lib/api/CLAUDE.md b/frontend/src/lib/api/CLAUDE.md
index 46e80115..fd4f9526 100644
--- a/frontend/src/lib/api/CLAUDE.md
+++ b/frontend/src/lib/api/CLAUDE.md
@@ -11,7 +11,7 @@ Axios-based client and resource-specific API modules for backend communication w
 
 ## Important Patterns
 
-- **Single axios instance**: `apiClient` with 10-minute timeout (for slow LLM operations)
+- **Single axios instance**: `apiClient` with a configurable request timeout for slow LLM operations — `NEXT_PUBLIC_API_TIMEOUT_MS` (default `600000` = 10 min; an explicit `0` disables it, empty/invalid falls back to the default)
 - **Request interceptor**: Auto-fetches base URL from config, adds Bearer auth from localStorage `auth-storage`
 - **FormData handling**: Auto-removes Content-Type header for FormData to let browser set multipart boundary
 - **Response interceptor**: 401 clears auth and redirects to `/login`
@@ -41,7 +41,7 @@ Axios-based client and resource-specific API modules for backend communication w
 
 - **Base URL delay**: First request waits for `getApiUrl()` to resolve; can be slow on startup
 - **FormData fields as JSON strings**: Nested objects (arrays, objects) must be JSON stringified in FormData (e.g., `notebooks`, `transformations`)
-- **Timeout for streaming**: 10-minute timeout may not cover very long-running LLM operations; consider extending if needed
+- **Timeout for streaming**: the default 10-minute timeout may not cover very long-running LLM operations; raise it via `NEXT_PUBLIC_API_TIMEOUT_MS` (or set `0` to disable)
 - **Auth token management**: Token stored in localStorage `auth-storage` key; uses Zustand persist middleware
 - **Headers mutation in interceptor**: Mutating `config.headers` directly; be careful with middleware order
 - **No automatic retry logic**: Failed requests not automatically retried; must be handled in consuming code. Podcast episodes have explicit retry via `retryEpisode()` in `podcasts.ts` and `useRetryPodcastEpisode()` hook
diff --git a/frontend/src/lib/api/client.ts b/frontend/src/lib/api/client.ts
index 43b33b81..7219b713 100644
--- a/frontend/src/lib/api/client.ts
+++ b/frontend/src/lib/api/client.ts
@@ -3,12 +3,23 @@ import { getApiUrl } from '@/lib/config'
 
 // API client with runtime-configurable base URL
 // The base URL is fetched from the API config endpoint on first request
-// Timeout increased to 10 minutes (600000ms = 600s) to accommodate slow LLM operations
-// (transformations, insights generation, chat) especially on slower hardware (Ollama, LM Studio)
-// Note: Frontend uses milliseconds, backend uses seconds
-// Local LLMs can take several minutes for complex questions with large contexts
+//
+// Request timeout defaults to 10 minutes (600000ms) to accommodate slow LLM
+// operations (transformations, insights, synchronous chat) on slower hardware
+// (Ollama, LM Studio). Configure it via NEXT_PUBLIC_API_TIMEOUT_MS for models
+// that can take longer than 10 minutes to respond (#880).
+// Note: value is in milliseconds; an explicit 0 disables the timeout entirely.
+// An empty or invalid value falls back to the default (so a present-but-empty
+// env var doesn't accidentally disable timeouts).
+const DEFAULT_API_TIMEOUT_MS = 600000 // 600 seconds = 10 minutes
+const rawTimeout = process.env.NEXT_PUBLIC_API_TIMEOUT_MS
+const parsedTimeout = rawTimeout && rawTimeout.trim() !== '' ? Number(rawTimeout) : NaN
+const apiTimeout = Number.isFinite(parsedTimeout) && parsedTimeout >= 0
+  ? parsedTimeout
+  : DEFAULT_API_TIMEOUT_MS
+
 export const apiClient = axios.create({
-  timeout: 600000, // 600 seconds = 10 minutes
+  timeout: apiTimeout,
   headers: {
     'Content-Type': 'application/json',
   },

From 060386e674a1ae676180bb59140ee71c3b8a6f2c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 16 Jun 2026 09:24:35 -0300
Subject: [PATCH 081/345] fix(credentials): persist Ollama num_ctx via a
 flexible config object (#903)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(credentials): persist Ollama num_ctx via a flexible config object

The `credential` table is SCHEMAFULL, so the model's `num_ctx` field was
silently dropped on write and the override never took effect (#875).

Rather than add a typed column per provider option, add a single flexible
`config` object to the credential table (migration 15). Provider-specific
tuning options (currently `num_ctx`) are still exposed as top-level fields on
the Credential model and on the API, but are packed into `config` on save and
lifted back out on load via a before-validator. Future options only need a
Pydantic field + an entry in CONFIG_EXTRAS — no further migrations.

- migration 15 (+ down): DEFINE FIELD config ON credential FLEXIBLE TYPE option<object>
- Credential: CONFIG_EXTRAS set, _lift_config before-validator, config packing
  in _prepare_save_data
- tests covering pack/unpack round-trip and the empty-config case

* fix(credentials): preserve unmapped config keys on save

Address cubic review on #903:
- `config` is now a real model field mirroring the credential table's FLEXIBLE
  object and is the on-disk source of truth. `num_ctx` remains a convenience
  field mirrored from/to config. On save we start from the existing bag and
  sync the convenience fields in, so a save never clobbers config keys written
  by a newer version (repo_update uses MERGE, which replaces the whole object).
  config is only written as None when the merged result is genuinely empty.
  (The previous approach relied on Pydantic extras, which ObjectModel's default
  extra="ignore" silently dropped.)
- Update database/CLAUDE.md migration totals (15 up/down, incl. migration 15).
- Add tests for unmapped-key preservation and clearing num_ctx while keeping
  other config keys.

* fix(credentials): validate config-mirrored extras via Pydantic

Address cubic re-review on #903: mirror known config keys (num_ctx) onto their
convenience fields in a `before` model validator so they go through normal
Pydantic field validation/coercion, instead of an `after`-validator
object.__setattr__ that bypassed type checks. Adds a test asserting num_ctx is
coerced to int and a non-coercible value is rejected.
---
 CHANGELOG.md                                  |   1 +
 open_notebook/database/CLAUDE.md              |   2 +-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/15.surrealql          |   6 +
 .../database/migrations/15_down.surrealql     |   3 +
 open_notebook/domain/credential.py            |  54 ++++++++-
 tests/test_domain.py                          | 110 ++++++++++++++++++
 7 files changed, 177 insertions(+), 5 deletions(-)
 create mode 100644 open_notebook/database/migrations/15.surrealql
 create mode 100644 open_notebook/database/migrations/15_down.surrealql

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4cc09c0d..58f467e5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
 - Text search no longer returns a 500 when SurrealDB's `search::highlight` hits a "position overflow" on large or multi-byte document chunks; it now falls back to vector search and returns results (#648)
 - `POST /api/search` now rejects a non-positive `limit` with a `422` instead of passing `LIMIT -1`/`LIMIT 0` to SurrealDB (which caused a 500 or a silently empty result set) (#863)
+- Ollama `num_ctx` credential override is now persisted. The `credential` table gained a flexible `config` object (migration 15) and provider-specific tuning options are stored there instead of being dropped by the SCHEMAFULL table; future per-credential options can be added without a schema migration (#875)
 
 ### Performance
 - Notebook source list no longer re-renders every `SourceCard` on unrelated state changes (layout toggles, context selection), and completed sources no longer each open a status-polling query. Both scaled with the number of sources and caused UI lag on large notebooks (#503)
diff --git a/open_notebook/database/CLAUDE.md b/open_notebook/database/CLAUDE.md
index bf8ecb7d..3f2c63bf 100644
--- a/open_notebook/database/CLAUDE.md
+++ b/open_notebook/database/CLAUDE.md
@@ -50,7 +50,7 @@ Both leverage connection context manager for lifecycle management and automatic
   - `run_one_down()`: Rollback latest migration
 
 - `AsyncMigrationManager`: Main orchestrator
-  - Loads 14 up migrations + 14 down migrations (hard-coded in __init__; migrations 11-12 add credential system, 13 adds model-credential link, 14 adds podcast model registry fields)
+  - Loads 15 up migrations + 15 down migrations (hard-coded in __init__; migrations 11-12 add credential system, 13 adds model-credential link, 14 adds podcast model registry fields, 15 adds the flexible `config` object to the credential table)
   - `get_current_version()`: Query max version from _sbl_migrations table
   - `needs_migration()`: Boolean check (current < total migrations available)
   - `run_migration_up()`: Run all pending migrations with logging
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index ef8cac8d..388a3288 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -118,6 +118,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/14.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/15.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -162,6 +165,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/14_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/15_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/15.surrealql b/open_notebook/database/migrations/15.surrealql
new file mode 100644
index 00000000..1f045ec8
--- /dev/null
+++ b/open_notebook/database/migrations/15.surrealql
@@ -0,0 +1,6 @@
+-- Migration 15: Add a flexible config object to the credential table.
+-- Stores provider-specific tuning options (e.g. Ollama num_ctx) without a
+-- schema change per option. FLEXIBLE allows arbitrary keys inside the object
+-- on this SCHEMAFULL table; validation stays in the Pydantic Credential model.
+
+DEFINE FIELD config ON credential FLEXIBLE TYPE option<object>;
diff --git a/open_notebook/database/migrations/15_down.surrealql b/open_notebook/database/migrations/15_down.surrealql
new file mode 100644
index 00000000..c061b38a
--- /dev/null
+++ b/open_notebook/database/migrations/15_down.surrealql
@@ -0,0 +1,3 @@
+-- Migration 15 rollback: remove the flexible config field from credential
+
+REMOVE FIELD IF EXISTS config ON TABLE credential;
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index ad67bcfb..49827976 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -19,7 +19,7 @@ from datetime import datetime
 from typing import Any, ClassVar, Dict, List, Optional
 
 from loguru import logger
-from pydantic import SecretStr
+from pydantic import SecretStr, model_validator
 
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel
@@ -47,9 +47,14 @@ class Credential(ObjectModel):
         "project",
         "location",
         "credentials_path",
-        "num_ctx",
     }
 
+    # Provider-specific tuning options that are exposed as top-level fields on
+    # this model but persisted inside the flexible `config` object on the
+    # `credential` table (migration 15). Adding a new such option only requires
+    # declaring the Pydantic field below and listing it here — no DB migration.
+    CONFIG_EXTRAS: ClassVar[set[str]] = {"num_ctx"}
+
     name: str
     provider: str
     modalities: List[str] = []
@@ -65,10 +70,35 @@ class Credential(ObjectModel):
     project: Optional[str] = None
     location: Optional[str] = None
     credentials_path: Optional[str] = None
+    # Flexible provider config bag, persisted as-is to the credential table's
+    # `config` FLEXIBLE object (migration 15). This is the source of truth on
+    # disk and holds both the keys this version maps (see CONFIG_EXTRAS) and any
+    # keys written by a newer version, so a load/save round-trip never clobbers
+    # options this version doesn't know about.
+    config: Optional[Dict[str, Any]] = None
+
     # Ollama-only: overrides the context window (num_ctx). Esperanto defaults to
     # 8192; raise this if your hardware can handle a larger context window.
+    # Exposed as a top-level field (and on the API) for convenience; it mirrors
+    # config["num_ctx"].
     num_ctx: Optional[int] = None
 
+    @model_validator(mode="before")
+    @classmethod
+    def _mirror_config_to_fields(cls, data: Any) -> Any:
+        """Mirror known keys from the persisted `config` bag onto their
+        convenience fields on load. Done in `before` so the values flow through
+        normal Pydantic field validation (e.g. `num_ctx` is coerced/validated as
+        an int) instead of being set raw. Unknown keys stay in `config` untouched
+        and are preserved on save."""
+        if isinstance(data, dict) and isinstance(data.get("config"), dict):
+            config = data["config"]
+            data = dict(data)
+            for key in cls.CONFIG_EXTRAS:
+                if data.get(key) is None and config.get(key) is not None:
+                    data[key] = config[key]
+        return data
+
     def to_esperanto_config(self) -> Dict[str, Any]:
         """
         Build config dict for AIFactory.create_*() calls.
@@ -195,10 +225,11 @@ class Credential(ObjectModel):
         return [Model(**row) for row in results]
 
     def _prepare_save_data(self) -> Dict[str, Any]:
-        """Override to encrypt api_key before storage."""
+        """Override to encrypt api_key and sync provider extras into `config`."""
         data = {}
         for key, value in self.model_dump().items():
-            if key == "decryption_error":
+            if key in ("decryption_error", "config"):
+                # `config` is rebuilt below from the existing bag + convenience fields.
                 continue
             if key == "api_key":
                 # Handle SecretStr: extract, encrypt, store
@@ -210,6 +241,21 @@ class Credential(ObjectModel):
             elif value is not None or key in self.__class__.nullable_fields:
                 data[key] = value
 
+        # Sync the convenience fields (num_ctx, ...) into the flexible `config`
+        # object so the SCHEMAFULL credential table doesn't drop them (migration
+        # 15). Starting from the existing bag preserves any keys written by a
+        # newer version, since repo_update MERGE replaces the whole object.
+        # `config` is None only when the merged result is genuinely empty.
+        config: Dict[str, Any] = dict(self.config or {})
+        for key in self.__class__.CONFIG_EXTRAS:
+            data.pop(key, None)  # not a top-level column; lives in `config`
+            value = getattr(self, key, None)
+            if value is not None:
+                config[key] = value
+            else:
+                config.pop(key, None)
+        data["config"] = config or None
+
         return data
 
     async def save(self) -> None:
diff --git a/tests/test_domain.py b/tests/test_domain.py
index ca01a6ba..0f6e61aa 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -616,5 +616,115 @@ class TestEpisodeProfile:
         assert profile.num_segments == 5
 
 
+# ============================================================================
+# TEST SUITE: Credential flexible config bag (#875)
+# ============================================================================
+
+
+class TestCredentialConfigBag:
+    """Provider-specific extras (num_ctx) round-trip through the flexible
+    `config` object instead of a dedicated SCHEMAFULL column."""
+
+    def test_prepare_save_data_packs_num_ctx_into_config(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(name="Local Ollama", provider="ollama", num_ctx=16384)
+        data = cred._prepare_save_data()
+
+        assert data["config"] == {"num_ctx": 16384}
+        assert "num_ctx" not in data  # not a top-level column anymore
+
+    def test_prepare_save_data_config_none_when_no_extras(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(name="OpenAI", provider="openai")
+        data = cred._prepare_save_data()
+
+        assert data["config"] is None
+        assert "num_ctx" not in data
+
+    def test_db_row_with_config_lifts_num_ctx_to_top_level(self):
+        from open_notebook.domain.credential import Credential
+
+        # Simulates a row read back from the DB
+        cred = Credential(
+            name="Local Ollama",
+            provider="ollama",
+            config={"num_ctx": 8192},
+        )
+
+        assert cred.num_ctx == 8192  # mirrored from config onto the convenience field
+
+    def test_num_ctx_round_trips_through_save_and_load(self):
+        from open_notebook.domain.credential import Credential
+
+        original = Credential(name="Local Ollama", provider="ollama", num_ctx=4096)
+        persisted = original._prepare_save_data()
+        # Rebuild from the persisted shape (as the DB would return it)
+        reloaded = Credential(
+            name=persisted["name"],
+            provider=persisted["provider"],
+            config=persisted["config"],
+        )
+
+        assert reloaded.num_ctx == 4096
+        assert reloaded.to_esperanto_config()["num_ctx"] == 4096
+
+    def test_null_config_loads_without_extras(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(name="OpenAI", provider="openai", config=None)
+
+        assert cred.num_ctx is None
+        assert cred.config is None
+        assert cred._prepare_save_data()["config"] is None
+
+    def test_unmapped_config_keys_are_preserved_on_save(self):
+        from open_notebook.domain.credential import Credential
+
+        # A newer version may have written config keys this model doesn't map.
+        # They must survive a load/save round-trip rather than be clobbered
+        # (repo_update MERGE replaces the whole config object).
+        cred = Credential(
+            name="Local Ollama",
+            provider="ollama",
+            config={"num_ctx": 8192, "future_option": "keep-me"},
+        )
+        assert cred.num_ctx == 8192
+
+        data = cred._prepare_save_data()
+        assert data["config"] == {"num_ctx": 8192, "future_option": "keep-me"}
+
+    def test_clearing_num_ctx_keeps_other_config_keys(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(
+            name="Local Ollama",
+            provider="ollama",
+            config={"num_ctx": 8192, "future_option": "keep-me"},
+        )
+        cred.num_ctx = None  # user clears the override
+
+        data = cred._prepare_save_data()
+        assert data["config"] == {"future_option": "keep-me"}
+
+    def test_mirrored_num_ctx_is_validated_as_int(self):
+        from open_notebook.domain.credential import Credential
+
+        # A value coming from the flexible config bag is routed through normal
+        # Pydantic field validation, not set raw.
+        cred = Credential(
+            name="Local Ollama", provider="ollama", config={"num_ctx": "8192"}
+        )
+        assert cred.num_ctx == 8192
+        assert isinstance(cred.num_ctx, int)
+
+        # A non-coercible value is rejected rather than silently flowing through.
+        with pytest.raises(ValidationError):
+            Credential(
+                name="Local Ollama", provider="ollama", config={"num_ctx": "not-an-int"}
+            )
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From 8c49cb49040ddc9478e88cf08b94a8bfca2c7a9b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 17 Jun 2026 11:43:40 -0300
Subject: [PATCH 082/345] feat(chat): render LaTeX math with KaTeX (#916)

Adds inline ($...$) and display ($$...$$) math rendering to chat output (#606),
which is used by both notebook chat and source chat via ChatPanel.

- add remark-math + rehype-katex to the chat ReactMarkdown pipeline
- load KaTeX stylesheet globally in the root layout

The source-reference preprocessing only rewrites [type:id] citation patterns,
so it does not interfere with `$` math delimiters.
---
 CHANGELOG.md                                 |   1 +
 frontend/package-lock.json                   | 182 +++++++++++++++++++
 frontend/package.json                        |  13 +-
 frontend/src/app/layout.tsx                  |   1 +
 frontend/src/components/source/ChatPanel.tsx |   5 +-
 5 files changed, 196 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 58f467e5..a563de1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- LaTeX math rendering in chat — inline (`$...$`) and display (`$$...$$`) expressions are now rendered with KaTeX (#606)
 - `NEXT_PUBLIC_API_TIMEOUT_MS` environment variable to configure the frontend API request timeout (default `600000` = 10 minutes; set `0` to disable). Lets slow/long-running chat models finish without editing source (#880)
 
 ### Changed
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 6c42e069..4d841a46 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -36,6 +36,7 @@
         "date-fns": "^4.1.0",
         "i18next": "^25.7.3",
         "i18next-browser-languagedetector": "^8.2.0",
+        "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
         "next": "^16.2.6",
         "next-themes": "^0.4.6",
@@ -44,7 +45,9 @@
         "react-hook-form": "^7.60.0",
         "react-i18next": "^16.5.0",
         "react-markdown": "^10.1.0",
+        "rehype-katex": "^7.0.1",
         "remark-gfm": "^4.0.1",
+        "remark-math": "^6.0.0",
         "sonner": "^2.0.6",
         "tailwind-merge": "^3.3.1",
         "use-debounce": "^10.0.6",
@@ -4239,6 +4242,12 @@
       "integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==",
       "dev": true
     },
+    "node_modules/@types/katex": {
+      "version": "0.16.8",
+      "resolved": "https://registry.npmjs.org/@types/katex/-/katex-0.16.8.tgz",
+      "integrity": "sha512-trgaNyfU+Xh2Tc+ABIb44a5AYUpicB3uwirOioeOkNPPbmgRNtcWyDeeFRzjPZENO9Vq8gvVqfhaaXWLlevVwg==",
+      "license": "MIT"
+    },
     "node_modules/@types/mdast": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.4.tgz",
@@ -5720,6 +5729,15 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/commander": {
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz",
+      "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 12"
+      }
+    },
     "node_modules/concat-map": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
@@ -7213,6 +7231,21 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/hast-util-from-dom": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/hast-util-from-dom/-/hast-util-from-dom-5.0.1.tgz",
+      "integrity": "sha512-N+LqofjR2zuzTjCPzyDUdSshy4Ma6li7p/c3pA78uTwzFgENbgbUrm2ugwsOdcjI1muO+o6Dgzp9p8WHtn/39Q==",
+      "license": "ISC",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hastscript": "^9.0.0",
+        "web-namespaces": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-from-html": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/hast-util-from-html/-/hast-util-from-html-2.0.3.tgz",
@@ -7230,6 +7263,22 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/hast-util-from-html-isomorphic": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/hast-util-from-html-isomorphic/-/hast-util-from-html-isomorphic-2.0.0.tgz",
+      "integrity": "sha512-zJfpXq44yff2hmE0XmwEOzdWin5xwH+QIhMLOScpX91e/NSGPsAzNCvLQDIEPyO2TXi+lBmU6hjLIhV8MwP2kw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-from-dom": "^5.0.0",
+        "hast-util-from-html": "^2.0.0",
+        "unist-util-remove-position": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-from-parse5": {
       "version": "8.0.3",
       "resolved": "https://registry.npmjs.org/hast-util-from-parse5/-/hast-util-from-parse5-8.0.3.tgz",
@@ -7434,6 +7483,22 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/hast-util-to-text": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/hast-util-to-text/-/hast-util-to-text-4.0.2.tgz",
+      "integrity": "sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/unist": "^3.0.0",
+        "hast-util-is-element": "^3.0.0",
+        "unist-util-find-after": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-whitespace": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz",
@@ -8234,6 +8299,22 @@
         "node": ">=4.0"
       }
     },
+    "node_modules/katex": {
+      "version": "0.16.47",
+      "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz",
+      "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==",
+      "funding": [
+        "https://opencollective.com/katex",
+        "https://github.com/sponsors/katex"
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "commander": "^8.3.0"
+      },
+      "bin": {
+        "katex": "cli.js"
+      }
+    },
     "node_modules/keyv": {
       "version": "4.5.4",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -8760,6 +8841,25 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/mdast-util-math": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/mdast-util-math/-/mdast-util-math-3.0.0.tgz",
+      "integrity": "sha512-Tl9GBNeG/AhJnQM221bJR2HPvLOSnLE/T9cJI9tlc6zwQk2nPk/4f0cHkOdEixQPC/j8UtKDdITswvLAy1OZ1w==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/mdast": "^4.0.0",
+        "devlop": "^1.0.0",
+        "longest-streak": "^3.0.0",
+        "mdast-util-from-markdown": "^2.0.0",
+        "mdast-util-to-markdown": "^2.1.0",
+        "unist-util-remove-position": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/mdast-util-mdx-expression": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/mdast-util-mdx-expression/-/mdast-util-mdx-expression-2.0.1.tgz",
@@ -9073,6 +9173,25 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/micromark-extension-math": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/micromark-extension-math/-/micromark-extension-math-3.1.0.tgz",
+      "integrity": "sha512-lvEqd+fHjATVs+2v/8kg9i5Q0AP2k85H0WUOwpIVvUML8BapsMvh1XAogmQjOCsLpoKRCVQqEkQBB3NhVBcsOg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/katex": "^0.16.0",
+        "devlop": "^1.0.0",
+        "katex": "^0.16.0",
+        "micromark-factory-space": "^2.0.0",
+        "micromark-util-character": "^2.0.0",
+        "micromark-util-symbol": "^2.0.0",
+        "micromark-util-types": "^2.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/micromark-factory-destination": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/micromark-factory-destination/-/micromark-factory-destination-2.0.1.tgz",
@@ -10487,6 +10606,25 @@
         "url": "https://jaywcjlove.github.io/#/sponsor"
       }
     },
+    "node_modules/rehype-katex": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/rehype-katex/-/rehype-katex-7.0.1.tgz",
+      "integrity": "sha512-OiM2wrZ/wuhKkigASodFoo8wimG3H12LWQaH8qSPVJn9apWKFSH3YOCtbKpBorTVw/eI7cuT21XBbvwEswbIOA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/katex": "^0.16.0",
+        "hast-util-from-html-isomorphic": "^2.0.0",
+        "hast-util-to-text": "^4.0.0",
+        "katex": "^0.16.0",
+        "unist-util-visit-parents": "^6.0.0",
+        "vfile": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/rehype-parse": {
       "version": "9.0.1",
       "resolved": "https://registry.npmjs.org/rehype-parse/-/rehype-parse-9.0.1.tgz",
@@ -10606,6 +10744,22 @@
         "url": "https://jaywcjlove.github.io/#/sponsor"
       }
     },
+    "node_modules/remark-math": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/remark-math/-/remark-math-6.0.0.tgz",
+      "integrity": "sha512-MMqgnP74Igy+S3WwnhQ7kqGlEerTETXMvJhrUzDikVZ2/uogJCb+WHUg97hK9/jcfc0dkD73s3LN8zU49cTEtA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/mdast": "^4.0.0",
+        "mdast-util-math": "^3.0.0",
+        "micromark-extension-math": "^3.0.0",
+        "unified": "^11.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/remark-parse": {
       "version": "11.0.0",
       "resolved": "https://registry.npmjs.org/remark-parse/-/remark-parse-11.0.0.tgz",
@@ -11748,6 +11902,20 @@
         "unist-util-visit-parents": "^6.0.0"
       }
     },
+    "node_modules/unist-util-find-after": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-find-after/-/unist-util-find-after-5.0.0.tgz",
+      "integrity": "sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-is": "^6.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/unist-util-is": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.0.tgz",
@@ -11772,6 +11940,20 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/unist-util-remove-position": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/unist-util-remove-position/-/unist-util-remove-position-5.0.0.tgz",
+      "integrity": "sha512-Hp5Kh3wLxv0PHj9m2yZhhLt58KzPtEYKQQ4yxfYFEO7EvHwzyDYnduhHnY1mDxoqr7VUwVuHXk9RXKIiYS1N8Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/unist": "^3.0.0",
+        "unist-util-visit": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/unist-util-stringify-position": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index e1752af1..5ab7f97f 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -40,6 +40,7 @@
     "date-fns": "^4.1.0",
     "i18next": "^25.7.3",
     "i18next-browser-languagedetector": "^8.2.0",
+    "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
     "next": "^16.2.6",
     "next-themes": "^0.4.6",
@@ -48,7 +49,9 @@
     "react-hook-form": "^7.60.0",
     "react-i18next": "^16.5.0",
     "react-markdown": "^10.1.0",
+    "rehype-katex": "^7.0.1",
     "remark-gfm": "^4.0.1",
+    "remark-math": "^6.0.0",
     "sonner": "^2.0.6",
     "tailwind-merge": "^3.3.1",
     "use-debounce": "^10.0.6",
@@ -58,19 +61,19 @@
   "devDependencies": {
     "@eslint/eslintrc": "^3",
     "@tailwindcss/postcss": "^4",
+    "@testing-library/jest-dom": "^6.6.3",
+    "@testing-library/react": "^16.2.0",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
+    "@vitejs/plugin-react": "^4.3.4",
+    "@vitest/ui": "^4.1.8",
     "eslint": "^9",
     "eslint-config-next": "15.4.2",
     "jsdom": "^26.0.0",
     "tailwindcss": "^4",
     "tw-animate-css": "^1.3.5",
     "typescript": "^5",
-    "vitest": "^4.1.8",
-    "@vitest/ui": "^4.1.8",
-    "@vitejs/plugin-react": "^4.3.4",
-    "@testing-library/react": "^16.2.0",
-    "@testing-library/jest-dom": "^6.6.3"
+    "vitest": "^4.1.8"
   }
 }
diff --git a/frontend/src/app/layout.tsx b/frontend/src/app/layout.tsx
index f1a191ce..6913858e 100644
--- a/frontend/src/app/layout.tsx
+++ b/frontend/src/app/layout.tsx
@@ -1,6 +1,7 @@
 import type { Metadata } from "next";
 import { Inter } from "next/font/google";
 import "./globals.css";
+import "katex/dist/katex.min.css";
 import { Toaster } from "@/components/ui/sonner";
 import { QueryProvider } from "@/components/providers/QueryProvider";
 import { ThemeProvider } from "@/components/providers/ThemeProvider";
diff --git a/frontend/src/components/source/ChatPanel.tsx b/frontend/src/components/source/ChatPanel.tsx
index 3908082c..79434162 100644
--- a/frontend/src/components/source/ChatPanel.tsx
+++ b/frontend/src/components/source/ChatPanel.tsx
@@ -10,6 +10,8 @@ import { Dialog, DialogContent, DialogTitle } from '@/components/ui/dialog'
 import { Bot, User, Send, Loader2, FileText, Lightbulb, StickyNote, Clock } from 'lucide-react'
 import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 import {
   SourceChatMessage,
   SourceChatContextIndicator,
@@ -342,7 +344,8 @@ function AIMessageContent({
   return (
     <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-blue-600 prose-a:break-all prose-code:bg-muted prose-code:px-1 prose-code:py-0.5 prose-code:rounded prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
       <ReactMarkdown
-        remarkPlugins={[remarkGfm]}
+        remarkPlugins={[remarkGfm, remarkMath]}
+        rehypePlugins={[rehypeKatex]}
         components={{
           a: LinkComponent,
           p: ({ children }) => <p className="mb-4">{children}</p>,

From 2210904e5b431ea648b7b7803dac3c98adc94056 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 17 Jun 2026 12:14:44 -0300
Subject: [PATCH 083/345] feat(notebooks): bulk include/exclude all sources
 from chat context (#915)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(notebooks): bulk include/exclude all sources from chat context

Adds a "Context" menu to the Sources column header to set every source's chat
context selection at once (#223): "Include all in context" sets each source to
its sensible included mode (insights when available, else full), and "Exclude
all from context" sets them all to off. Frontend-only — reuses the existing
contextSelections state; the menu only shows when a notebook has sources.

New i18n keys translated across all 14 locales.

* fix(notebooks): make bulk context default apply to paginated sources

Address cubic review on #915: with infinite-scroll pagination, bulk
include/exclude only touched currently-loaded sources, so "exclude all" would
silently miss sources loaded afterward (they reverted to the included default).

Track a `sourceContextDefault` ('include' | 'exclude') that bulk actions set;
the load effect applies it to newly-seen sources so later pages follow the same
intent. Extract the selection logic into pure helpers in
`lib/utils/source-context.ts` with unit tests, including a regression test that
loads a second page after exclude-all.

* refactor(notebooks): move ContextMode types to a shared module

Address cubic review on #915: the source-context utility imported ContextMode
from the notebook route component, coupling the util layer to UI. Move
ContextMode/ContextSelections into lib/types/notebook-context.ts; the route file
re-exports them for backward compatibility, and the utility now imports the
shared types instead of a route component.
---
 CHANGELOG.md                                  |  1 +
 .../app/(dashboard)/notebooks/[id]/page.tsx   | 54 ++++++++------
 .../notebooks/components/SourcesColumn.tsx    | 22 +++++-
 frontend/src/lib/locales/bn-IN/index.ts       |  3 +
 frontend/src/lib/locales/ca-ES/index.ts       |  3 +
 frontend/src/lib/locales/de-DE/index.ts       |  3 +
 frontend/src/lib/locales/en-US/index.ts       |  3 +
 frontend/src/lib/locales/es-ES/index.ts       |  3 +
 frontend/src/lib/locales/fr-FR/index.ts       |  3 +
 frontend/src/lib/locales/it-IT/index.ts       |  3 +
 frontend/src/lib/locales/ja-JP/index.ts       |  3 +
 frontend/src/lib/locales/pl-PL/index.ts       |  3 +
 frontend/src/lib/locales/pt-BR/index.ts       |  3 +
 frontend/src/lib/locales/ru-RU/index.ts       |  3 +
 frontend/src/lib/locales/tr-TR/index.ts       |  3 +
 frontend/src/lib/locales/zh-CN/index.ts       |  3 +
 frontend/src/lib/locales/zh-TW/index.ts       |  3 +
 frontend/src/lib/types/notebook-context.ts    |  7 ++
 frontend/src/lib/utils/source-context.test.ts | 73 +++++++++++++++++++
 frontend/src/lib/utils/source-context.ts      | 53 ++++++++++++++
 20 files changed, 228 insertions(+), 24 deletions(-)
 create mode 100644 frontend/src/lib/types/notebook-context.ts
 create mode 100644 frontend/src/lib/utils/source-context.test.ts
 create mode 100644 frontend/src/lib/utils/source-context.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a563de1e..38cb54fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - LaTeX math rendering in chat — inline (`$...$`) and display (`$$...$$`) expressions are now rendered with KaTeX (#606)
 - `NEXT_PUBLIC_API_TIMEOUT_MS` environment variable to configure the frontend API request timeout (default `600000` = 10 minutes; set `0` to disable). Lets slow/long-running chat models finish without editing source (#880)
+- Bulk include/exclude all sources from a notebook's chat context in one action, via a "Context" menu in the Sources column header — translated across all 14 locales (#223)
 
 ### Changed
 - Failed source cards now show a prominent "Retry processing" button directly on the card instead of only inside the 3-dot dropdown; clicking it no longer also opens the source (the click was missing `stopPropagation`) (#726)
diff --git a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
index 09085fe3..84398115 100644
--- a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
@@ -17,13 +17,16 @@ import { useTranslation } from '@/lib/hooks/use-translation'
 import { cn } from '@/lib/utils'
 import { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs'
 import { FileText, StickyNote, MessageSquare } from 'lucide-react'
+import {
+  applyBulkSourceContext,
+  computeSourceSelections,
+  type SourceContextDefault,
+} from '@/lib/utils/source-context'
 
-export type ContextMode = 'off' | 'insights' | 'full'
-
-export interface ContextSelections {
-  sources: Record<string, ContextMode>
-  notes: Record<string, ContextMode>
-}
+// Re-exported from the shared types module for backward compatibility; several
+// components historically import these from this route file.
+import type { ContextMode, ContextSelections } from '@/lib/types/notebook-context'
+export type { ContextMode, ContextSelections }
 
 export default function NotebookPage() {
   const { t } = useTranslation()
@@ -58,27 +61,20 @@ export default function NotebookPage() {
     notes: {}
   })
 
+  // The default context mode applied to sources as they load. A bulk
+  // include/exclude updates this so sources loaded later via pagination follow
+  // the same intent instead of reverting to "included" (#223/#915).
+  const [sourceContextDefault, setSourceContextDefault] = useState<SourceContextDefault>('include')
+
   // Initialize and update selections when sources load or change
   useEffect(() => {
     if (sources && sources.length > 0) {
-      setContextSelections(prev => {
-        const newSourceSelections = { ...prev.sources }
-        sources.forEach(source => {
-          const currentMode = newSourceSelections[source.id]
-          const hasInsights = source.insights_count > 0
-
-          if (currentMode === undefined) {
-            // Initial setup - default based on insights availability
-            newSourceSelections[source.id] = hasInsights ? 'insights' : 'full'
-          } else if (currentMode === 'full' && hasInsights) {
-            // Source gained insights while in 'full' mode - auto-switch to 'insights'
-            newSourceSelections[source.id] = 'insights'
-          }
-        })
-        return { ...prev, sources: newSourceSelections }
-      })
+      setContextSelections(prev => ({
+        ...prev,
+        sources: computeSourceSelections(prev.sources, sources, sourceContextDefault),
+      }))
     }
-  }, [sources])
+  }, [sources, sourceContextDefault])
 
   useEffect(() => {
     if (notes && notes.length > 0) {
@@ -107,6 +103,16 @@ export default function NotebookPage() {
     }))
   }
 
+  // Bulk include/exclude every source from the chat context at once (#223).
+  // Also records the action as the default for sources loaded later (#915).
+  const handleBulkSourceContext = (action: SourceContextDefault) => {
+    setSourceContextDefault(action)
+    setContextSelections(prev => ({
+      ...prev,
+      sources: applyBulkSourceContext(prev.sources, sources ?? [], action),
+    }))
+  }
+
   if (notebookLoading) {
     return (
       <div className="min-h-screen flex items-center justify-center">
@@ -167,6 +173,7 @@ export default function NotebookPage() {
                     onRefresh={refetchSources}
                     contextSelections={contextSelections.sources}
                     onContextModeChange={(sourceId, mode) => handleContextModeChange(sourceId, mode, 'source')}
+                    onBulkContextModeChange={handleBulkSourceContext}
                     hasNextPage={hasNextPage}
                     isFetchingNextPage={isFetchingNextPage}
                     fetchNextPage={fetchNextPage}
@@ -211,6 +218,7 @@ export default function NotebookPage() {
                 onRefresh={refetchSources}
                 contextSelections={contextSelections.sources}
                 onContextModeChange={(sourceId, mode) => handleContextModeChange(sourceId, mode, 'source')}
+                onBulkContextModeChange={handleBulkSourceContext}
                 hasNextPage={hasNextPage}
                 isFetchingNextPage={isFetchingNextPage}
                 fetchNextPage={fetchNextPage}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
index addf1605..22026149 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
@@ -10,7 +10,7 @@ import {
   DropdownMenuItem,
   DropdownMenuTrigger,
 } from '@/components/ui/dropdown-menu'
-import { Plus, FileText, Link2, ChevronDown, Loader2 } from 'lucide-react'
+import { Plus, FileText, Link2, ChevronDown, Loader2, ListChecks } from 'lucide-react'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { AddSourceDialog } from '@/components/sources/AddSourceDialog'
@@ -32,6 +32,7 @@ interface SourcesColumnProps {
   onRefresh?: () => void
   contextSelections?: Record<string, ContextMode>
   onContextModeChange?: (sourceId: string, mode: ContextMode) => void
+  onBulkContextModeChange?: (action: 'include' | 'exclude') => void
   // Pagination props
   hasNextPage?: boolean
   isFetchingNextPage?: boolean
@@ -45,6 +46,7 @@ export function SourcesColumn({
   onRefresh,
   contextSelections,
   onContextModeChange,
+  onBulkContextModeChange,
   hasNextPage,
   isFetchingNextPage,
   fetchNextPage,
@@ -158,6 +160,24 @@ export function SourcesColumn({
             <div className="flex items-center justify-between gap-2">
               <CardTitle className="text-lg">{t('navigation.sources')}</CardTitle>
               <div className="flex items-center gap-2">
+                {onBulkContextModeChange && sources && sources.length > 0 && (
+                  <DropdownMenu>
+                    <DropdownMenuTrigger asChild>
+                      <Button variant="ghost" size="sm" title={t('sources.bulkContext')}>
+                        <ListChecks className="h-4 w-4" />
+                        <ChevronDown className="h-4 w-4 ml-1" />
+                      </Button>
+                    </DropdownMenuTrigger>
+                    <DropdownMenuContent align="end">
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('include')}>
+                        {t('sources.includeAllInContext')}
+                      </DropdownMenuItem>
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('exclude')}>
+                        {t('sources.excludeAllFromContext')}
+                      </DropdownMenuItem>
+                    </DropdownMenuContent>
+                  </DropdownMenu>
+                )}
                 <DropdownMenu open={dropdownOpen} onOpenChange={setDropdownOpen}>
                   <DropdownMenuTrigger asChild>
                     <Button size="sm">
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 7d2fb2c6..820c55cc 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -262,6 +262,9 @@ export const bnIN = {
     deleteSuccess: "নোটবুক সফলভাবে মুছে ফেলা হয়েছে",
   },
   sources: {
+    bulkContext: "প্রসঙ্গ",
+    includeAllInContext: "সবগুলো প্রসঙ্গে যোগ করুন",
+    excludeAllFromContext: "সবগুলো প্রসঙ্গ থেকে বাদ দিন",
     title: "উৎসগুলি",
     add: "উৎস যোগ করুন",
     addNew: "নতুন উৎস যোগ করুন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index e4551935..d69fc9e4 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -262,6 +262,9 @@ export const caES = {
     deleteSuccess: "S'ha suprimit el quadern correctament",
   },
   sources: {
+    bulkContext: "Context",
+    includeAllInContext: "Inclou-les totes al context",
+    excludeAllFromContext: "Exclou-les totes del context",
     title: "Fonts",
     add: "Afegeix una font",
     addNew: "Afegeix una font nova",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 65fab762..f9c033eb 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -265,6 +265,9 @@ export const deDE = {
     deleteSuccess: "Notebook erfolgreich gelöscht",
   },
   sources: {
+    bulkContext: "Kontext",
+    includeAllInContext: "Alle in den Kontext aufnehmen",
+    excludeAllFromContext: "Alle aus dem Kontext ausschließen",
     title: "Quellen",
     add: "Quelle hinzufügen",
     addNew: "Neue Quelle hinzufügen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index dd4dc322..a9448084 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -263,6 +263,9 @@ export const enUS = {
   },
   sources: {
     title: "Sources",
+    bulkContext: "Context",
+    includeAllInContext: "Include all in context",
+    excludeAllFromContext: "Exclude all from context",
     add: "Add Source",
     addNew: "Add New Source",
     addExisting: "Add Existing Source",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index b7a9cf7f..073c8e3c 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -262,6 +262,9 @@ export const esES = {
     deleteSuccess: "Cuaderno eliminado exitosamente",
   },
   sources: {
+    bulkContext: "Contexto",
+    includeAllInContext: "Incluir todas en el contexto",
+    excludeAllFromContext: "Excluir todas del contexto",
     title: "Fuentes",
     add: "Agregar fuente",
     addNew: "Agregar nueva fuente",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index b08dd8dd..cdbd1382 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -262,6 +262,9 @@ export const frFR = {
     deleteSuccess: "Carnet supprimé avec succès",
   },
   sources: {
+    bulkContext: "Contexte",
+    includeAllInContext: "Tout inclure dans le contexte",
+    excludeAllFromContext: "Tout exclure du contexte",
     title: "Sources",
     add: "Ajouter une source",
     addNew: "Ajouter une nouvelle source",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index abc32245..1cac8922 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -262,6 +262,9 @@ export const itIT = {
     deleteSuccess: "Quaderno eliminato con successo",
   },
   sources: {
+    bulkContext: "Contesto",
+    includeAllInContext: "Includi tutte nel contesto",
+    excludeAllFromContext: "Escludi tutte dal contesto",
     title: "Fonti",
     add: "Aggiungi fonte",
     addNew: "Aggiungi nuova fonte",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index f3a3818f..f70eaa30 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -262,6 +262,9 @@ export const jaJP = {
     deleteSuccess: "ノートブックを削除しました",
   },
   sources: {
+    bulkContext: "コンテキスト",
+    includeAllInContext: "すべてをコンテキストに含める",
+    excludeAllFromContext: "すべてをコンテキストから除外",
     title: "ソース",
     add: "ソースを追加",
     addNew: "新規ソースを追加",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 75c3291e..e8315784 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -262,6 +262,9 @@ export const plPL = {
     deleteSuccess: "Notatnik usunięty pomyślnie",
   },
   sources: {
+    bulkContext: "Kontekst",
+    includeAllInContext: "Uwzględnij wszystkie w kontekście",
+    excludeAllFromContext: "Wyklucz wszystkie z kontekstu",
     title: "Źródła",
     add: "Dodaj źródło",
     addNew: "Dodaj nowe źródło",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 71599e1f..5beab90a 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -262,6 +262,9 @@ export const ptBR = {
     deleteSuccess: "Caderno excluído com sucesso",
   },
   sources: {
+    bulkContext: "Contexto",
+    includeAllInContext: "Incluir todas no contexto",
+    excludeAllFromContext: "Excluir todas do contexto",
     title: "Fontes",
     add: "Adicionar Fonte",
     addNew: "Adicionar Nova Fonte",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 70611d6f..a2d8512a 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -262,6 +262,9 @@ export const ruRU = {
     deleteSuccess: "Блокнот успешно удалён",
   },
   sources: {
+    bulkContext: "Контекст",
+    includeAllInContext: "Включить все в контекст",
+    excludeAllFromContext: "Исключить все из контекста",
     title: "Источники",
     add: "Добавить источник",
     addNew: "Добавить новый источник",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index a457a104..9384006f 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -262,6 +262,9 @@ export const trTR = {
     deleteSuccess: "Defter başarıyla silindi",
   },
   sources: {
+    bulkContext: "Bağlam",
+    includeAllInContext: "Tümünü bağlama dahil et",
+    excludeAllFromContext: "Tümünü bağlamdan çıkar",
     title: "Kaynaklar",
     add: "Kaynak Ekle",
     addNew: "Yeni Kaynak Ekle",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index aa0a5718..0d970ae6 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -262,6 +262,9 @@ export const zhCN = {
     deleteSuccess: "笔记本删除成功",
   },
   sources: {
+    bulkContext: "上下文",
+    includeAllInContext: "全部加入上下文",
+    excludeAllFromContext: "全部移出上下文",
     title: "来源",
     add: "添加来源",
     addNew: "添加新来源",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 42387817..c047ac8b 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -262,6 +262,9 @@ export const zhTW = {
     deleteSuccess: "筆記本刪除成功",
   },
   sources: {
+    bulkContext: "上下文",
+    includeAllInContext: "全部加入上下文",
+    excludeAllFromContext: "全部移出上下文",
     title: "來源",
     add: "新增來源",
     addNew: "新增新來源",
diff --git a/frontend/src/lib/types/notebook-context.ts b/frontend/src/lib/types/notebook-context.ts
new file mode 100644
index 00000000..a2461a1a
--- /dev/null
+++ b/frontend/src/lib/types/notebook-context.ts
@@ -0,0 +1,7 @@
+/** Chat-context inclusion mode for a notebook source or note. */
+export type ContextMode = 'off' | 'insights' | 'full'
+
+export interface ContextSelections {
+  sources: Record<string, ContextMode>
+  notes: Record<string, ContextMode>
+}
diff --git a/frontend/src/lib/utils/source-context.test.ts b/frontend/src/lib/utils/source-context.test.ts
new file mode 100644
index 00000000..012adeaa
--- /dev/null
+++ b/frontend/src/lib/utils/source-context.test.ts
@@ -0,0 +1,73 @@
+import { describe, it, expect } from 'vitest'
+import {
+  applyBulkSourceContext,
+  computeSourceSelections,
+  includedMode,
+} from './source-context'
+
+const src = (id: string, insights_count = 0) => ({ id, insights_count })
+
+describe('includedMode', () => {
+  it('prefers insights when available, else full', () => {
+    expect(includedMode(0)).toBe('full')
+    expect(includedMode(3)).toBe('insights')
+  })
+})
+
+describe('computeSourceSelections', () => {
+  it('defaults new sources to included (insights/full)', () => {
+    const result = computeSourceSelections({}, [src('s:1', 2), src('s:2', 0)], 'include')
+    expect(result).toEqual({ 's:1': 'insights', 's:2': 'full' })
+  })
+
+  it('defaults new sources to off when the default mode is exclude', () => {
+    const result = computeSourceSelections({}, [src('s:1', 2), src('s:2', 0)], 'exclude')
+    expect(result).toEqual({ 's:1': 'off', 's:2': 'off' })
+  })
+
+  it('preserves existing explicit selections', () => {
+    const existing = { 's:1': 'off' as const }
+    const result = computeSourceSelections(existing, [src('s:1', 2), src('s:2', 0)], 'include')
+    expect(result['s:1']).toBe('off') // untouched
+    expect(result['s:2']).toBe('full')
+  })
+
+  it('upgrades a full source to insights once it has insights', () => {
+    const result = computeSourceSelections({ 's:1': 'full' }, [src('s:1', 5)], 'include')
+    expect(result['s:1']).toBe('insights')
+  })
+
+  it('keeps later-loaded sources excluded after an exclude-all (regression for #915)', () => {
+    // exclude-all over the first page
+    let selections = applyBulkSourceContext({}, [src('s:1', 0), src('s:2', 1)], 'exclude')
+    expect(selections).toEqual({ 's:1': 'off', 's:2': 'off' })
+
+    // a second page loads; with the exclude default the new sources stay excluded
+    selections = computeSourceSelections(
+      selections,
+      [src('s:1', 0), src('s:2', 1), src('s:3', 4), src('s:4', 0)],
+      'exclude',
+    )
+    expect(selections).toEqual({ 's:1': 'off', 's:2': 'off', 's:3': 'off', 's:4': 'off' })
+  })
+})
+
+describe('applyBulkSourceContext', () => {
+  it('excludes all sources', () => {
+    const result = applyBulkSourceContext(
+      { 's:1': 'full', 's:2': 'insights' },
+      [src('s:1', 0), src('s:2', 3)],
+      'exclude',
+    )
+    expect(result).toEqual({ 's:1': 'off', 's:2': 'off' })
+  })
+
+  it('includes all sources using their sensible mode', () => {
+    const result = applyBulkSourceContext(
+      { 's:1': 'off', 's:2': 'off' },
+      [src('s:1', 0), src('s:2', 3)],
+      'include',
+    )
+    expect(result).toEqual({ 's:1': 'full', 's:2': 'insights' })
+  })
+})
diff --git a/frontend/src/lib/utils/source-context.ts b/frontend/src/lib/utils/source-context.ts
new file mode 100644
index 00000000..02e60cb5
--- /dev/null
+++ b/frontend/src/lib/utils/source-context.ts
@@ -0,0 +1,53 @@
+import type { ContextMode } from '@/lib/types/notebook-context'
+
+export type SourceContextDefault = 'include' | 'exclude'
+
+interface SourceLike {
+  id: string
+  insights_count: number
+}
+
+/** The "included" context mode for a source: insights when available, else full. */
+export function includedMode(insightsCount: number): ContextMode {
+  return insightsCount > 0 ? 'insights' : 'full'
+}
+
+/**
+ * Compute chat-context selections for a batch of sources while preserving
+ * existing choices.
+ *
+ * Newly-seen sources adopt `defaultMode`, so a prior bulk include/exclude also
+ * governs sources that load later via pagination — otherwise "exclude all"
+ * would silently miss sources loaded after the action (#223/#915).
+ */
+export function computeSourceSelections(
+  existing: Record<string, ContextMode>,
+  sources: SourceLike[],
+  defaultMode: SourceContextDefault = 'include',
+): Record<string, ContextMode> {
+  const next = { ...existing }
+  for (const source of sources) {
+    const current = next[source.id]
+    if (current === undefined) {
+      next[source.id] =
+        defaultMode === 'exclude' ? 'off' : includedMode(source.insights_count)
+    } else if (current === 'full' && source.insights_count > 0) {
+      // Source gained insights while in 'full' mode — prefer the leaner insights.
+      next[source.id] = 'insights'
+    }
+  }
+  return next
+}
+
+/** Apply a uniform bulk include/exclude to every given source. */
+export function applyBulkSourceContext(
+  existing: Record<string, ContextMode>,
+  sources: SourceLike[],
+  action: SourceContextDefault,
+): Record<string, ContextMode> {
+  const next = { ...existing }
+  for (const source of sources) {
+    next[source.id] = action === 'exclude' ? 'off' : includedMode(source.insights_count)
+  }
+  return next
+}

From a47eb674e74559e90b77395fd56f584ba650fa06 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:19:22 -0300
Subject: [PATCH 084/345] chore(deps): bump pyjwt from 2.12.0 to 2.13.0 (#897)

Bumps [pyjwt](https://github.com/jpadilla/pyjwt) from 2.12.0 to 2.13.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.12.0...2.13.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 6b3a5b65..9057e718 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2762,11 +2762,11 @@ wheels = [
 
 [[package]]
 name = "pyjwt"
-version = "2.12.0"
+version = "2.13.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a8/10/e8192be5f38f3e8e7e046716de4cae33d56fd5ae08927a823bb916be36c1/pyjwt-2.12.0.tar.gz", hash = "sha256:2f62390b667cd8257de560b850bb5a883102a388829274147f1d724453f8fb02", size = 102511, upload-time = "2026-03-12T17:15:30.831Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/3b/81/58d0ac84e1ef3a3843791d6954d94c0b33d526c75eeb1efbce9d0a4c4077/pyjwt-2.13.0.tar.gz", hash = "sha256:41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423", size = 107515, upload-time = "2026-05-21T19:54:36.618Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/15/70/70f895f404d363d291dcf62c12c85fdd47619ad9674ac0f53364d035925a/pyjwt-2.12.0-py3-none-any.whl", hash = "sha256:9bb459d1bdd0387967d287f5656bf7ec2b9a26645d1961628cda1764e087fd6e", size = 29700, upload-time = "2026-03-12T17:15:29.257Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/5e/ecf12fdb62546d64385c158514e9b2b671f7832108ef2ecd2020ce0af2d1/pyjwt-2.13.0-py3-none-any.whl", hash = "sha256:66adcc2aff09b3f1bbd95fc1e1577df8ac8723c978552fd43304c8a290ac5728", size = 31274, upload-time = "2026-05-21T19:54:35.362Z" },
 ]
 
 [package.optional-dependencies]

From f1c36047e57ce353b92c8308e2cc5373605f9d3a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:20:49 -0300
Subject: [PATCH 085/345] chore(deps): bump python-multipart from 0.0.27 to
 0.0.31 (#906)

Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.27 to 0.0.31.
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.27...0.0.31)

---
updated-dependencies:
- dependency-name: python-multipart
  dependency-version: 0.0.31
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 9057e718..57249a1b 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2863,11 +2863,11 @@ wheels = [
 
 [[package]]
 name = "python-multipart"
-version = "0.0.27"
+version = "0.0.31"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/69/9b/f23807317a113dc36e74e75eb265a02dd1a4d9082abc3c1064acd22997c4/python_multipart-0.0.27.tar.gz", hash = "sha256:9870a6a8c5a20a5bf4f07c017bd1489006ff8836cff097b6933355ee2b49b602", size = 44043, upload-time = "2026-04-27T10:51:26.649Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/64/7e/9b35ad8f3d9ca680f7c87a88f19612fdd8da9796c4d3b46e560ac79dcc4a/python_multipart-0.0.31.tar.gz", hash = "sha256:fc631183bb13e56db3158a4909908dfb2e23565286744e798241e63750e5d680", size = 46689, upload-time = "2026-06-04T08:27:49.014Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/99/78/4126abcbdbd3c559d43e0db7f7b9173fc6befe45d39a2856cc0b8ec2a5a6/python_multipart-0.0.27-py3-none-any.whl", hash = "sha256:6fccfad17a27334bd0193681b369f476eda3409f17381a2d65aa7df3f7275645", size = 29254, upload-time = "2026-04-27T10:51:24.997Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/1e/7f7f299527a5a8ad90acd5f2f78dfa6c8495c6301a3205106ea68a84de96/python_multipart-0.0.31-py3-none-any.whl", hash = "sha256:8408153d68a9773291fc1da39a8b85a50044bddbabd2dd72e9229776b7b15e28", size = 29996, upload-time = "2026-06-04T08:27:47.804Z" },
 ]
 
 [[package]]

From 5b5f3f70d91a581eb4697967914eda3cc69212f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:20:56 -0300
Subject: [PATCH 086/345] chore(deps): bump cryptography from 46.0.7 to 48.0.1
 (#907)

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.7 to 48.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.7...48.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 72 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 36 insertions(+), 36 deletions(-)

diff --git a/uv.lock b/uv.lock
index 57249a1b..f22af7e1 100644
--- a/uv.lock
+++ b/uv.lock
@@ -467,47 +467,47 @@ wheels = [
 
 [[package]]
 name = "cryptography"
-version = "46.0.7"
+version = "48.0.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cffi", marker = "platform_python_implementation != 'PyPy'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/47/93/ac8f3d5ff04d54bc814e961a43ae5b0b146154c89c61b47bb07557679b18/cryptography-46.0.7.tar.gz", hash = "sha256:e4cfd68c5f3e0bfdad0d38e023239b96a2fe84146481852dffbcca442c245aa5", size = 750652, upload-time = "2026-04-08T01:57:54.692Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/12/45/870e7f4bef50e5f53b9f51d4428aee5290eedf58ba443f16b1ebb7ab8e66/cryptography-48.0.1.tar.gz", hash = "sha256:266f4ee051abb2f725b74ef8072b521ce1feacf685a3364fa6a6b45548db791a", size = 832989, upload-time = "2026-06-09T22:32:31.8Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0b/5d/4a8f770695d73be252331e60e526291e3df0c9b27556a90a6b47bccca4c2/cryptography-46.0.7-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:ea42cbe97209df307fdc3b155f1b6fa2577c0defa8f1f7d3be7d31d189108ad4", size = 7179869, upload-time = "2026-04-08T01:56:17.157Z" },
-    { url = "https://files.pythonhosted.org/packages/5f/45/6d80dc379b0bbc1f9d1e429f42e4cb9e1d319c7a8201beffd967c516ea01/cryptography-46.0.7-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:b36a4695e29fe69215d75960b22577197aca3f7a25b9cf9d165dcfe9d80bc325", size = 4275492, upload-time = "2026-04-08T01:56:19.36Z" },
-    { url = "https://files.pythonhosted.org/packages/4a/9a/1765afe9f572e239c3469f2cb429f3ba7b31878c893b246b4b2994ffe2fe/cryptography-46.0.7-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:5ad9ef796328c5e3c4ceed237a183f5d41d21150f972455a9d926593a1dcb308", size = 4426670, upload-time = "2026-04-08T01:56:21.415Z" },
-    { url = "https://files.pythonhosted.org/packages/8f/3e/af9246aaf23cd4ee060699adab1e47ced3f5f7e7a8ffdd339f817b446462/cryptography-46.0.7-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:73510b83623e080a2c35c62c15298096e2a5dc8d51c3b4e1740211839d0dea77", size = 4280275, upload-time = "2026-04-08T01:56:23.539Z" },
-    { url = "https://files.pythonhosted.org/packages/0f/54/6bbbfc5efe86f9d71041827b793c24811a017c6ac0fd12883e4caa86b8ed/cryptography-46.0.7-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:cbd5fb06b62bd0721e1170273d3f4d5a277044c47ca27ee257025146c34cbdd1", size = 4928402, upload-time = "2026-04-08T01:56:25.624Z" },
-    { url = "https://files.pythonhosted.org/packages/2d/cf/054b9d8220f81509939599c8bdbc0c408dbd2bdd41688616a20731371fe0/cryptography-46.0.7-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:420b1e4109cc95f0e5700eed79908cef9268265c773d3a66f7af1eef53d409ef", size = 4459985, upload-time = "2026-04-08T01:56:27.309Z" },
-    { url = "https://files.pythonhosted.org/packages/f9/46/4e4e9c6040fb01c7467d47217d2f882daddeb8828f7df800cb806d8a2288/cryptography-46.0.7-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:24402210aa54baae71d99441d15bb5a1919c195398a87b563df84468160a65de", size = 3990652, upload-time = "2026-04-08T01:56:29.095Z" },
-    { url = "https://files.pythonhosted.org/packages/36/5f/313586c3be5a2fbe87e4c9a254207b860155a8e1f3cca99f9910008e7d08/cryptography-46.0.7-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:8a469028a86f12eb7d2fe97162d0634026d92a21f3ae0ac87ed1c4a447886c83", size = 4279805, upload-time = "2026-04-08T01:56:30.928Z" },
-    { url = "https://files.pythonhosted.org/packages/69/33/60dfc4595f334a2082749673386a4d05e4f0cf4df8248e63b2c3437585f2/cryptography-46.0.7-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:9694078c5d44c157ef3162e3bf3946510b857df5a3955458381d1c7cfc143ddb", size = 4892883, upload-time = "2026-04-08T01:56:32.614Z" },
-    { url = "https://files.pythonhosted.org/packages/c7/0b/333ddab4270c4f5b972f980adef4faa66951a4aaf646ca067af597f15563/cryptography-46.0.7-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:42a1e5f98abb6391717978baf9f90dc28a743b7d9be7f0751a6f56a75d14065b", size = 4459756, upload-time = "2026-04-08T01:56:34.306Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/14/633913398b43b75f1234834170947957c6b623d1701ffc7a9600da907e89/cryptography-46.0.7-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:91bbcb08347344f810cbe49065914fe048949648f6bd5c2519f34619142bbe85", size = 4410244, upload-time = "2026-04-08T01:56:35.977Z" },
-    { url = "https://files.pythonhosted.org/packages/10/f2/19ceb3b3dc14009373432af0c13f46aa08e3ce334ec6eff13492e1812ccd/cryptography-46.0.7-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:5d1c02a14ceb9148cc7816249f64f623fbfee39e8c03b3650d842ad3f34d637e", size = 4674868, upload-time = "2026-04-08T01:56:38.034Z" },
-    { url = "https://files.pythonhosted.org/packages/1a/bb/a5c213c19ee94b15dfccc48f363738633a493812687f5567addbcbba9f6f/cryptography-46.0.7-cp311-abi3-win32.whl", hash = "sha256:d23c8ca48e44ee015cd0a54aeccdf9f09004eba9fc96f38c911011d9ff1bd457", size = 3026504, upload-time = "2026-04-08T01:56:39.666Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/02/7788f9fefa1d060ca68717c3901ae7fffa21ee087a90b7f23c7a603c32ae/cryptography-46.0.7-cp311-abi3-win_amd64.whl", hash = "sha256:397655da831414d165029da9bc483bed2fe0e75dde6a1523ec2fe63f3c46046b", size = 3488363, upload-time = "2026-04-08T01:56:41.893Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/7f/cd42fc3614386bc0c12f0cb3c4ae1fc2bbca5c9662dfed031514911d513d/cryptography-46.0.7-cp38-abi3-macosx_10_9_universal2.whl", hash = "sha256:462ad5cb1c148a22b2e3bcc5ad52504dff325d17daf5df8d88c17dda1f75f2a4", size = 7165618, upload-time = "2026-04-08T01:57:10.645Z" },
-    { url = "https://files.pythonhosted.org/packages/a5/d0/36a49f0262d2319139d2829f773f1b97ef8aef7f97e6e5bd21455e5a8fb5/cryptography-46.0.7-cp38-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:84d4cced91f0f159a7ddacad249cc077e63195c36aac40b4150e7a57e84fffe7", size = 4270628, upload-time = "2026-04-08T01:57:12.885Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/6c/1a42450f464dda6ffbe578a911f773e54dd48c10f9895a23a7e88b3e7db5/cryptography-46.0.7-cp38-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:128c5edfe5e5938b86b03941e94fac9ee793a94452ad1365c9fc3f4f62216832", size = 4415405, upload-time = "2026-04-08T01:57:14.923Z" },
-    { url = "https://files.pythonhosted.org/packages/9a/92/4ed714dbe93a066dc1f4b4581a464d2d7dbec9046f7c8b7016f5286329e2/cryptography-46.0.7-cp38-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:5e51be372b26ef4ba3de3c167cd3d1022934bc838ae9eaad7e644986d2a3d163", size = 4272715, upload-time = "2026-04-08T01:57:16.638Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/e6/a26b84096eddd51494bba19111f8fffe976f6a09f132706f8f1bf03f51f7/cryptography-46.0.7-cp38-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:cdf1a610ef82abb396451862739e3fc93b071c844399e15b90726ef7470eeaf2", size = 4918400, upload-time = "2026-04-08T01:57:19.021Z" },
-    { url = "https://files.pythonhosted.org/packages/c7/08/ffd537b605568a148543ac3c2b239708ae0bd635064bab41359252ef88ed/cryptography-46.0.7-cp38-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:1d25aee46d0c6f1a501adcddb2d2fee4b979381346a78558ed13e50aa8a59067", size = 4450634, upload-time = "2026-04-08T01:57:21.185Z" },
-    { url = "https://files.pythonhosted.org/packages/16/01/0cd51dd86ab5b9befe0d031e276510491976c3a80e9f6e31810cce46c4ad/cryptography-46.0.7-cp38-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:cdfbe22376065ffcf8be74dc9a909f032df19bc58a699456a21712d6e5eabfd0", size = 3985233, upload-time = "2026-04-08T01:57:22.862Z" },
-    { url = "https://files.pythonhosted.org/packages/92/49/819d6ed3a7d9349c2939f81b500a738cb733ab62fbecdbc1e38e83d45e12/cryptography-46.0.7-cp38-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:abad9dac36cbf55de6eb49badd4016806b3165d396f64925bf2999bcb67837ba", size = 4271955, upload-time = "2026-04-08T01:57:24.814Z" },
-    { url = "https://files.pythonhosted.org/packages/80/07/ad9b3c56ebb95ed2473d46df0847357e01583f4c52a85754d1a55e29e4d0/cryptography-46.0.7-cp38-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:935ce7e3cfdb53e3536119a542b839bb94ec1ad081013e9ab9b7cfd478b05006", size = 4879888, upload-time = "2026-04-08T01:57:26.88Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/c7/201d3d58f30c4c2bdbe9b03844c291feb77c20511cc3586daf7edc12a47b/cryptography-46.0.7-cp38-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:35719dc79d4730d30f1c2b6474bd6acda36ae2dfae1e3c16f2051f215df33ce0", size = 4449961, upload-time = "2026-04-08T01:57:29.068Z" },
-    { url = "https://files.pythonhosted.org/packages/a5/ef/649750cbf96f3033c3c976e112265c33906f8e462291a33d77f90356548c/cryptography-46.0.7-cp38-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:7bbc6ccf49d05ac8f7d7b5e2e2c33830d4fe2061def88210a126d130d7f71a85", size = 4401696, upload-time = "2026-04-08T01:57:31.029Z" },
-    { url = "https://files.pythonhosted.org/packages/41/52/a8908dcb1a389a459a29008c29966c1d552588d4ae6d43f3a1a4512e0ebe/cryptography-46.0.7-cp38-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:a1529d614f44b863a7b480c6d000fe93b59acee9c82ffa027cfadc77521a9f5e", size = 4664256, upload-time = "2026-04-08T01:57:33.144Z" },
-    { url = "https://files.pythonhosted.org/packages/4b/fa/f0ab06238e899cc3fb332623f337a7364f36f4bb3f2534c2bb95a35b132c/cryptography-46.0.7-cp38-abi3-win32.whl", hash = "sha256:f247c8c1a1fb45e12586afbb436ef21ff1e80670b2861a90353d9b025583d246", size = 3013001, upload-time = "2026-04-08T01:57:34.933Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/f1/00ce3bde3ca542d1acd8f8cfa38e446840945aa6363f9b74746394b14127/cryptography-46.0.7-cp38-abi3-win_amd64.whl", hash = "sha256:506c4ff91eff4f82bdac7633318a526b1d1309fc07ca76a3ad182cb5b686d6d3", size = 3472985, upload-time = "2026-04-08T01:57:36.714Z" },
-    { url = "https://files.pythonhosted.org/packages/63/0c/dca8abb64e7ca4f6b2978769f6fea5ad06686a190cec381f0a796fdcaaba/cryptography-46.0.7-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:fc9ab8856ae6cf7c9358430e49b368f3108f050031442eaeb6b9d87e4dcf4e4f", size = 3476879, upload-time = "2026-04-08T01:57:38.664Z" },
-    { url = "https://files.pythonhosted.org/packages/3a/ea/075aac6a84b7c271578d81a2f9968acb6e273002408729f2ddff517fed4a/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:d3b99c535a9de0adced13d159c5a9cf65c325601aa30f4be08afd680643e9c15", size = 4219700, upload-time = "2026-04-08T01:57:40.625Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/7b/1c55db7242b5e5612b29fc7a630e91ee7a6e3c8e7bf5406d22e206875fbd/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:d02c738dacda7dc2a74d1b2b3177042009d5cab7c7079db74afc19e56ca1b455", size = 4385982, upload-time = "2026-04-08T01:57:42.725Z" },
-    { url = "https://files.pythonhosted.org/packages/cb/da/9870eec4b69c63ef5925bf7d8342b7e13bc2ee3d47791461c4e49ca212f4/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:04959522f938493042d595a736e7dbdff6eb6cc2339c11465b3ff89343b65f65", size = 4219115, upload-time = "2026-04-08T01:57:44.939Z" },
-    { url = "https://files.pythonhosted.org/packages/f4/72/05aa5832b82dd341969e9a734d1812a6aadb088d9eb6f0430fc337cc5a8f/cryptography-46.0.7-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:3986ac1dee6def53797289999eabe84798ad7817f3e97779b5061a95b0ee4968", size = 4385479, upload-time = "2026-04-08T01:57:46.86Z" },
-    { url = "https://files.pythonhosted.org/packages/20/2a/1b016902351a523aa2bd446b50a5bc1175d7a7d1cf90fe2ef904f9b84ebc/cryptography-46.0.7-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:258514877e15963bd43b558917bc9f54cf7cf866c38aa576ebf47a77ddbc43a4", size = 3412829, upload-time = "2026-04-08T01:57:48.874Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/bc/ee4137cbbe105652c0ee4252792b78fc8e7afa4b8e61d9d5dc05a7f45731/cryptography-48.0.1-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:3e4a1a3232eef2e6c732827d5722db29a0cc8b27af2a4d865b094cf954be9ca1", size = 8008324, upload-time = "2026-06-09T22:31:00.702Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/85/6379d42181bfc713094f081360fc5784d6c816b599d45e7f082502d173ce/cryptography-48.0.1-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:32143b24adb918f078134e1e230f1eb8cc04886b92c28b5f0041aaf3e5699225", size = 4696243, upload-time = "2026-06-09T22:32:33.446Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/87/c85d147b53323c7eb4d850920c8901377323c2a0ff8d79c262d4fee89aa2/cryptography-48.0.1-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f0d27a5696721ef7a672b8c810f6aded391058e0b9486e63e6d93baf765da691", size = 4713235, upload-time = "2026-06-09T22:31:40.141Z" },
+    { url = "https://files.pythonhosted.org/packages/79/58/67cbf8cf1ee7c54b439ca07bbecf8362c07afc11a3724fea70f745784add/cryptography-48.0.1-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:eb86ce1af36fe65041b6db9a8bb064ee621a7e5fded0f80d475ec243477cd242", size = 4702323, upload-time = "2026-06-09T22:31:42.191Z" },
+    { url = "https://files.pythonhosted.org/packages/89/c6/24266ac10c47f6cd2a865f4446062b466da1d1f10b27189eac00e61bf0c9/cryptography-48.0.1-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:b024e784ad6c077ee0147b35ea9cbfc1e34e1fd4c1dcca214c2794d73a12df08", size = 5300085, upload-time = "2026-06-09T22:31:58.703Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/bb/cc4b78784f97efc8c5874c2a9743708d172be6663024b34a0467885ae0c8/cryptography-48.0.1-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:3752f2dbc8f07a30aad2932c986cea495b03bb554887828225da104f732852b6", size = 4746137, upload-time = "2026-06-09T22:31:31.01Z" },
+    { url = "https://files.pythonhosted.org/packages/1f/52/0c44de3f5267f8fbe8e835138017522a333436166e406f0db9b9e6e3033f/cryptography-48.0.1-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:bd81490cd5801d755cf97bb68ac191f14b708470b1c7cf4580f669b9c9264cd8", size = 4333867, upload-time = "2026-06-09T22:32:28.096Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/2e/772d7adbfa931537bc401640b7cac9976bff689bda187833e5d63b428e49/cryptography-48.0.1-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:66fd0771e7b9c6dcd44cf1120690d2338d16d72795cf40cae2786a39eba65429", size = 4701805, upload-time = "2026-06-09T22:31:38.284Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/a3/b06844f303873493c963caf581c04df31c7035e0c1b0f02c4814d319ec80/cryptography-48.0.1-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:3fd2ca57062b241c856670b073487d2e86c4637937ca5601e48f97bf8e11fc8f", size = 5258461, upload-time = "2026-06-09T22:31:04.187Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/13/8b765e2e12b07c74941caadb9d1c8fdc006c4dfbf2b8f2d610519758954d/cryptography-48.0.1-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:0ee6ea481db1ab889cba043ec1eda17bb9c1ea79db6722f779c3667f9f70322f", size = 4745488, upload-time = "2026-06-09T22:32:30.07Z" },
+    { url = "https://files.pythonhosted.org/packages/2e/aa/48972bce55049b32a94f4907eda4d75fa385aad8a39506cc2fc72196ecf0/cryptography-48.0.1-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:f2ceef93cb096aa3c4cc4b5c94ca6131f9196d28c64d6111533402a9b2054d41", size = 4830256, upload-time = "2026-06-09T22:31:43.868Z" },
+    { url = "https://files.pythonhosted.org/packages/47/a2/e5079a032fb85cf6005046ca92bbd78b0c82dad2b5751ab8c311659da06f/cryptography-48.0.1-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:9bd3f92d76217892b15df84ca256c2c113d386fdda7a7d8691aeeced976507c6", size = 4979117, upload-time = "2026-06-09T22:31:05.845Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/a0/8f50cae9c74e718ed769d63ed5c74bd0ea830c9550a74629cebd1b9c7bc7/cryptography-48.0.1-cp311-abi3-win32.whl", hash = "sha256:b9a32b876490d66c8bcc9963ef220199569748434ab01a9d6aaeabf88e7f5158", size = 3304154, upload-time = "2026-06-09T22:32:16.845Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/69/0572c77dbace6fef72f33755bd52ea399c71367250d366237f8691826b9e/cryptography-48.0.1-cp311-abi3-win_amd64.whl", hash = "sha256:39489bfca54c7a1f6b297efcd8bc608ab92d16c4ca631b0cad4da46724588b24", size = 3817138, upload-time = "2026-06-09T22:32:00.388Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/6c/00fa2a95997164c8b2072ce327c23d4ab20809ccc323ea5fab91e53a4bba/cryptography-48.0.1-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:4fdc69f8e4316bcf0c8c8ec1f26f285d12e8142d88d96c876a59a03be3f6ae67", size = 7987408, upload-time = "2026-06-09T22:32:20.777Z" },
+    { url = "https://files.pythonhosted.org/packages/b0/d9/45f309a7e4e5f3f8f121d6d3be9e94024a7726ec598d6e08ae04edb2f04d/cryptography-48.0.1-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:48fe40804d4caa2288f24e70ca8c64c42dd826da0ad7e4f1b41b2128d679e6c8", size = 4690196, upload-time = "2026-06-09T22:31:54.74Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/9f/a1bc8bcc798811b8527eb374bbccf30a3f3e806829d967118222bf1125eb/cryptography-48.0.1-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:86be3b1b0b6bf09482fb50a979c508d2950ed95f5621ec77f4e385962006b83a", size = 4696782, upload-time = "2026-06-09T22:31:45.615Z" },
+    { url = "https://files.pythonhosted.org/packages/66/c2/81a4fb4e4373c500bb526bc337ac5719dd31dd15b970b84a238168c6aa08/cryptography-48.0.1-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:4ab0a343c807bbcd90c971cd1ecf072937cd01847a9e002bef88fb47ac6be577", size = 4696618, upload-time = "2026-06-09T22:31:11.564Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/0b/aa68b221dde92d09cb29a024ede17550ee21e77a404e59fc093c82bb51e1/cryptography-48.0.1-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:9621de99d2da096006b629979efd8ae7eb2d8b822488d0c89ee4000c306c59b1", size = 5289970, upload-time = "2026-06-09T22:31:20.368Z" },
+    { url = "https://files.pythonhosted.org/packages/78/13/fba657f958d2af66ea959a4ba01212632089249d34af1ae48054136344d7/cryptography-48.0.1-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:88c852a0ae366e262e5a1744b685e6a433dc8788dd2a277e418bf4904203609d", size = 4731873, upload-time = "2026-06-09T22:31:22.253Z" },
+    { url = "https://files.pythonhosted.org/packages/4c/4c/9a964756d24a26b3e34dfcb16f961b89838786e6700b635b0d1e3adff4b6/cryptography-48.0.1-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:43c5835e2cb98c8733d86f57d6fc879b613f5c3478607281c3e36daffc6dd8a6", size = 4330804, upload-time = "2026-06-09T22:31:36.56Z" },
+    { url = "https://files.pythonhosted.org/packages/4b/0f/a10f3a6eb12950a10e3a874070283aa2dd5875b2bfd15fad8a3e17b3f13e/cryptography-48.0.1-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:fe0180af5bf9236518a087e35bf2d9a347d5f5f51e63c579d683ddff424e3d46", size = 4696217, upload-time = "2026-06-09T22:31:13.351Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/6f/5cd12f951165ea73ef85266775d97e4c763b2474ccfd816dd69d3a18d6f8/cryptography-48.0.1-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:b7a2d1a937a738a881737cec135a38bb61470589b17515b9f73f571d0ae10401", size = 5245252, upload-time = "2026-06-09T22:32:02.193Z" },
+    { url = "https://files.pythonhosted.org/packages/68/ab/8aaa12e4516ec4464033ab79b6f3b592bd5a92102467c4ace8a0d970203f/cryptography-48.0.1-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:b74ca3b8e5ecdd833bf6a002ca41b4793bb27fb8f1c06ffaf2643c9e9140e31b", size = 4731388, upload-time = "2026-06-09T22:32:04.019Z" },
+    { url = "https://files.pythonhosted.org/packages/1b/24/50027ea4dca85ec1f40688f3c24fb32ccacd520583c9592c3cc95628e6fb/cryptography-48.0.1-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:2c37f2461406063b417837f5f3daab668652acd82423efcd7f0a9f04be972de1", size = 4824186, upload-time = "2026-06-09T22:32:18.707Z" },
+    { url = "https://files.pythonhosted.org/packages/52/41/04cb5eb17085ade6f50cc611fb657df6a0f5885350de8764ece89c050197/cryptography-48.0.1-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:86fe77abb1bd87afb251d4d02ada7ecf53a32cee9b67d976abb2e45a13297475", size = 4964539, upload-time = "2026-06-09T22:31:18.793Z" },
+    { url = "https://files.pythonhosted.org/packages/36/bf/ed70785c496e89d7e73b7cda2d21f2447fd6d4e821714b8d04ff217fed92/cryptography-48.0.1-cp39-abi3-win32.whl", hash = "sha256:6b2c0c3e6ccf3ade7750f836ef3ee36eea250cc467d45c256895573ac08cc6f1", size = 3282307, upload-time = "2026-06-09T22:30:53.162Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/ff/371ea7d252656ee1eb6d83eeeef3d1d0c6baf1d6497687d081ea03814670/cryptography-48.0.1-cp39-abi3-win_amd64.whl", hash = "sha256:9a49ca6c81417f6a5edb50375a60cccdd70fa0a91a5211829dbea74eba94d2ac", size = 3793408, upload-time = "2026-06-09T22:32:15.191Z" },
+    { url = "https://files.pythonhosted.org/packages/a9/d3/eb4e394e587341fdad09a09101fa76478ead3a78b0ad63e55c22f0d75c02/cryptography-48.0.1-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:08a597acce1ff37f347400087776599e2348a3a8bc53b44120e463cd274efe4a", size = 3951747, upload-time = "2026-06-09T22:31:23.871Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/4a/3f43451b4f858bfceaaaffc649e6e787e8d4fb332a1d443af39ab02cc8f1/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:735824ec41b7f74a7c45fb1591349333e4c696cb6c044e5f46356e560143e4cd", size = 4641226, upload-time = "2026-06-09T22:31:02.532Z" },
+    { url = "https://files.pythonhosted.org/packages/73/4e/855584c2c23b09e4ce2d3b9c30e983e679cd60b068c513c6bbdb91e11782/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:92a46e1d638daa264ba2971c0b0489c9409787943efae4d60ffda3d091ef832c", size = 4668958, upload-time = "2026-06-09T22:32:06.213Z" },
+    { url = "https://files.pythonhosted.org/packages/42/3b/d35750e41d803d1e516fd6d6011f065424924da7af1748cef4cc9cb3ede1/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:7e234ac052af99f2700826a5c29ea99d9c1b1f80341cde62d11c8154dc8e0bd9", size = 4640793, upload-time = "2026-06-09T22:32:26.331Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/aa/cdb7181fe865285e87e96825aaab239400f1de0c3bfba9bd9769b79f1a92/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:33842cf0888951cef5bc7ac724ab844a42044c1727b967b7f8997289a0464f92", size = 4668505, upload-time = "2026-06-09T22:31:27.534Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/8c/ce3823c06c2804f194f9e64f0d67fa3f4094a39f2bb1a990cd03603af8fc/cryptography-48.0.1-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:6184ca7b174f28d7c703f1290d4b297217c45355f77a98f67e9b7f14549ac54a", size = 3742204, upload-time = "2026-06-09T22:31:34.773Z" },
 ]
 
 [[package]]

From a0acac7790ac461ff19b1d0e2ad693740e5d761e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:21:03 -0300
Subject: [PATCH 087/345] chore(deps): bump tornado from 6.5.6 to 6.5.7 (#908)

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.6 to 6.5.7.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.6...v6.5.7)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/uv.lock b/uv.lock
index f22af7e1..133c86e8 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3459,19 +3459,19 @@ wheels = [
 
 [[package]]
 name = "tornado"
-version = "6.5.6"
+version = "6.5.7"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/50/57/6d7303a77ae439d9189108f76c0c4fd89ee5e2cc8387bffb55232565c4ed/tornado-6.5.6.tar.gz", hash = "sha256:9a365179fe8ff6b8766f602c0f67c185d778193e9bdd828b19f0b6ed7764177d", size = 518139, upload-time = "2026-05-27T15:35:54.646Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/64/24/95ec527ad67b76d59299e5465b3935d05e4294b7e0290a3924b7487df30b/tornado-6.5.7.tar.gz", hash = "sha256:66c513a76cda70d53907bc27cf1447557699c2e95aa48ba27a442ff61c3ddfc2", size = 519252, upload-time = "2026-06-08T17:34:51.232Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1b/0d/b4f481e18c5a51864e6d12b9a05ecf72919696680b747c958c3fc1f4fbae/tornado-6.5.6-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:65fcfaafb079435c2c19dc9e07c0f1cf0fa9051759ed0a7d0a3ba7ea7f64919c", size = 447737, upload-time = "2026-05-27T15:35:38.122Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/9c/5430c39fcab1144d35860f457b15e9c08b4bc7ac86764354204e983d6183/tornado-6.5.6-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:38bc01b4acacded2de63ae78023548e41ebe6fbed3ec05a796d7ae3ad893887e", size = 445899, upload-time = "2026-05-27T15:35:40.519Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/79/fa7e14a2f939c807a8d30619b4eb604eab219601b78792516ebe22d40cf9/tornado-6.5.6-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:b942e6a137fda31ff54bf8e6e2c8d1c37f1f50583f3ed53fb840b53b9601d104", size = 448964, upload-time = "2026-05-27T15:35:42.106Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/71/bd67d5f5199f937dafe03a49a37989f60f600ff6fef34c79412a829d97bd/tornado-6.5.6-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8666946e70171b8c3f1fc9b7876fac492e84822c4c7f3746f4e8f8bc9ac92a79", size = 449935, upload-time = "2026-05-27T15:35:43.906Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/a4/c24388c9cf5b3c3a513b56a158af9f23092c9a2810d789e294310797df21/tornado-6.5.6-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:1c34cfab7ad6d104f052f55de06d39bbafc5885cfeb4da688803308dbcfa90b7", size = 449767, upload-time = "2026-05-27T15:35:45.793Z" },
-    { url = "https://files.pythonhosted.org/packages/a5/eb/6a07ad550c3f7b37244bd0becdf293ec3d3e961783d8b720a97df50de1b2/tornado-6.5.6-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:385f35e4e22fb52551dfcda4cdc8c30c61c2c001aef5ddad99cdfe116952efd3", size = 449174, upload-time = "2026-05-27T15:35:47.485Z" },
-    { url = "https://files.pythonhosted.org/packages/bb/84/3469e098dccdb6763130e06aacd786bb4363fca7b590a55c101ddf34ed30/tornado-6.5.6-cp39-abi3-win32.whl", hash = "sha256:db475f1b67b2809b10bb16264829087724ca8d24fe4ed47f7b8675cae453ef86", size = 450230, upload-time = "2026-05-27T15:35:49.322Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/3c/273a04e0b9dd9016f1685cca0c1c8795a71ac88a34a8c889a0b443483226/tornado-6.5.6-cp39-abi3-win_amd64.whl", hash = "sha256:6739bf1e8eb09230f1280ddbd3236f0309db70f2c551a8dbc40f62babdf82f79", size = 450667, upload-time = "2026-05-27T15:35:51.194Z" },
-    { url = "https://files.pythonhosted.org/packages/02/98/0cffe22a224f60c5fb1e3aa0b76f9da2e1ca78b0e9545e3d077c68ce60a7/tornado-6.5.6-cp39-abi3-win_arm64.whl", hash = "sha256:2543597b24a695d72338a9a77818362d72387c03ae173f1f169eadc5c91466ac", size = 449690, upload-time = "2026-05-27T15:35:52.902Z" },
+    { url = "https://files.pythonhosted.org/packages/02/dc/c7043cab6fed8ae159fc1923ce829ada35c4dbd797d408a43858ffaf9639/tornado-6.5.7-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:148b2eb15c2c765a50796172c1e499649b35f30d2e3c3d3e15913cfa56bfb163", size = 448543, upload-time = "2026-06-08T17:34:38.052Z" },
+    { url = "https://files.pythonhosted.org/packages/92/4f/090b1431e5a43df696feceffc268c5383cc079ecb5f08ce58f917109aafe/tornado-6.5.7-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:9da38de27f1da3b78a966f0dae12b5a1ea9afe72ca805d84ff06508272ddf100", size = 446707, upload-time = "2026-06-08T17:34:39.594Z" },
+    { url = "https://files.pythonhosted.org/packages/37/d8/ef374952fd5da67d4463122c2b8e5a96536ec10b4b339254c6dcde81d01c/tornado-6.5.7-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:8d759e71906ee783f8867b93bf26a265743da4c1e2f4a018464c1ba019862972", size = 449774, upload-time = "2026-06-08T17:34:41.204Z" },
+    { url = "https://files.pythonhosted.org/packages/35/37/d434c73f4c6e014b745b9b37085f34f40c022f007efff3d7fe65991899f3/tornado-6.5.7-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8a46347a18f23fb92b396beebe0fb78f61dda0cc302445202c16203d8a18848b", size = 450745, upload-time = "2026-06-08T17:34:42.531Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/2b/56b9aff361d7f1ab728a805ec7d7ea835f8807afa9f5cc690ea0e630efb9/tornado-6.5.7-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:7778b30bef919231265e91c69963ce0f49a1e9c07ac900bbe75b19ce2575ba92", size = 450578, upload-time = "2026-06-08T17:34:43.787Z" },
+    { url = "https://files.pythonhosted.org/packages/02/30/a7444fb23aa76860a14198fab96ac79f1866b0a6e19e26c4381b0938e50f/tornado-6.5.7-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:e726f0c75da7726eec023aa62751ff8878bd2737e34fbdd33b1ae5897d2200f5", size = 449985, upload-time = "2026-06-08T17:34:45.326Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/42/5f0e56c01e8d9d36f4e23f367b85ae6cae0c1ecddd5e6977d8388ad27488/tornado-6.5.7-cp39-abi3-win32.whl", hash = "sha256:f8de3bf12d3efdd0cbe7c8887868198f8a91415e3f29fcf258d9b8eb7b1d9ae4", size = 451047, upload-time = "2026-06-08T17:34:46.784Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/a4/b393076ffb21b469eec5b328a0534cf03a3b90bfc6b1f09507cdd075d938/tornado-6.5.7-cp39-abi3-win_amd64.whl", hash = "sha256:de942f843533a039ef9fa3d9c88c7cd8a7c94553fb5ad0154270989b3d99a2c4", size = 451485, upload-time = "2026-06-08T17:34:48.248Z" },
+    { url = "https://files.pythonhosted.org/packages/71/2e/7b1c769803121b809112cf9a00681c472eae1d80e32d7ec0e0bd61d0d0e1/tornado-6.5.7-cp39-abi3-win_arm64.whl", hash = "sha256:ff934fce95643af5f11efdae618eaa73d469dc588641e5c8d19295a0c65c4796", size = 450506, upload-time = "2026-06-08T17:34:49.702Z" },
 ]
 
 [[package]]

From 6b8d55d0dc3e7b8cf67e23c094c3afa053dd865d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:21:11 -0300
Subject: [PATCH 088/345] chore(deps): bump starlette from 1.2.1 to 1.3.1
 (#909)

Bumps [starlette](https://github.com/Kludex/starlette) from 1.2.1 to 1.3.1.
- [Release notes](https://github.com/Kludex/starlette/releases)
- [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md)
- [Commits](https://github.com/Kludex/starlette/compare/1.2.1...1.3.1)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 1.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 133c86e8..bc9a948f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3318,15 +3318,15 @@ wheels = [
 
 [[package]]
 name = "starlette"
-version = "1.2.1"
+version = "1.3.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/25/44/ec35f1b6e83094b997da438a02c8c9b0ade2b1e84cfc48bd4656780760a6/starlette-1.2.1.tar.gz", hash = "sha256:9b9b5ebb992e67d6093741e63c2f59e4f6fff986f81163c087867bd7b924b3f6", size = 2701854, upload-time = "2026-05-31T01:07:51.847Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/eb/e3/7c1dc7381d9f8ab7d854328ebfa884e62cb3f3d8549ddfd37c7814f42afa/starlette-1.3.1.tar.gz", hash = "sha256:05d0213193f2fbaae60e2ecb593b4add4262ad4e46536b54abe36f11a71724e0", size = 2703240, upload-time = "2026-06-12T09:23:11.602Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1c/54/196d0c1db10af76baa4f64894448505d60d3cdf70ef92cbb35f46a4e4c71/starlette-1.2.1-py3-none-any.whl", hash = "sha256:4de0082d08c8f6764a85a54cf1120d6939507a19905c7768acad2a9f875d2b89", size = 73350, upload-time = "2026-05-31T01:07:50.09Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/bb/2799cc2ede3ed41131f8975621e7213dfc7ef4acbbaadfa440f32500c370/starlette-1.3.1-py3-none-any.whl", hash = "sha256:c7372aae11c3c3f26a42df7bd626cec2f47d03483d261d369516a615a53714c6", size = 73632, upload-time = "2026-06-12T09:23:10.017Z" },
 ]
 
 [[package]]

From e7ffcb0f65c847fb58c199c89b915fc67c4ab985 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:21:19 -0300
Subject: [PATCH 089/345] chore(deps): bump langchain-anthropic from 1.3.1 to
 1.4.6 (#910)

Bumps [langchain-anthropic](https://github.com/langchain-ai/langchain) from 1.3.1 to 1.4.6.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-anthropic==1.3.1...langchain-anthropic==1.4.6)

---
updated-dependencies:
- dependency-name: langchain-anthropic
  dependency-version: 1.4.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pyproject.toml |  2 +-
 uv.lock        | 20 ++++++++++----------
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 322c3973..fa125ccb 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -23,7 +23,7 @@ dependencies = [
     "langgraph-checkpoint-sqlite>=3.0.1",
     "langchain-community>=0.4.1",
     "langchain-openai>=1.1.14",
-    "langchain-anthropic>=1.3.0",
+    "langchain-anthropic>=1.4.6",
     "langchain-ollama>=1.0.1",
     "langchain-google-genai>=4.1.2",
     "langchain-groq>=1.1.1",
diff --git a/uv.lock b/uv.lock
index bc9a948f..f9954b8c 100644
--- a/uv.lock
+++ b/uv.lock
@@ -138,7 +138,7 @@ wheels = [
 
 [[package]]
 name = "anthropic"
-version = "0.76.0"
+version = "0.109.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
@@ -150,9 +150,9 @@ dependencies = [
     { name = "sniffio" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/6e/be/d11abafaa15d6304826438170f7574d750218f49a106c54424a40cef4494/anthropic-0.76.0.tar.gz", hash = "sha256:e0cae6a368986d5cf6df743dfbb1b9519e6a9eee9c6c942ad8121c0b34416ffe", size = 495483, upload-time = "2026-01-13T18:41:14.908Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/1b/b7/9a8e2f79011e89dd6eeb599c27332aed765dac9d6fbee3a55e68e4e3ec25/anthropic-0.109.2.tar.gz", hash = "sha256:d37db299597c7bc124b49b767ff135f1e6456b64af2b2fad4b63b2a1df333cf0", size = 927559, upload-time = "2026-06-15T17:30:25.024Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e5/70/7b0fd9c1a738f59d3babe2b4212031c34ab7d0fda4ffef15b58a55c5bcea/anthropic-0.76.0-py3-none-any.whl", hash = "sha256:81efa3113901192af2f0fe977d3ec73fdadb1e691586306c4256cd6d5ccc331c", size = 390309, upload-time = "2026-01-13T18:41:13.483Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/f2/bee5de8a2699fc8a3cce34d61c7a2626a2c310ddde7ea5611327eb0ddbe9/anthropic-0.109.2-py3-none-any.whl", hash = "sha256:e0fb4ca5df0ed983248c9c6c3242adc81d9cfddb8725902da53698554117abac", size = 923800, upload-time = "2026-06-15T17:30:23.124Z" },
 ]
 
 [[package]]
@@ -1395,16 +1395,16 @@ wheels = [
 
 [[package]]
 name = "langchain-anthropic"
-version = "1.3.1"
+version = "1.4.6"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anthropic" },
     { name = "langchain-core" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/0d/b6/ac5ee84e15bf79844c9c791f99a614c7ec7e1a63c2947e55977be01a81b4/langchain_anthropic-1.3.1.tar.gz", hash = "sha256:4f3d7a4a7729ab1aeaf62d32c87d4d227c1b5421668ca9e3734562b383470b07", size = 708940, upload-time = "2026-01-05T21:07:19.345Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e1/f5/cd397b94aeed5fa0e8ab9595b9fb578ac99f424d42220defe6626e6a1a7b/langchain_anthropic-1.4.6.tar.gz", hash = "sha256:78942d4458d883b7d362438a095ed501ed84f44d402622404482481fc973b9da", size = 706540, upload-time = "2026-06-12T16:54:15.352Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/4f/7a5b32764addf4b757545b89899b9d76688176f19e4ee89868e3b8bbfd0f/langchain_anthropic-1.3.1-py3-none-any.whl", hash = "sha256:1fc28cf8037c30597ee6172fc2ff9e345efe8149a8c2a39897b1eebba2948322", size = 46328, upload-time = "2026-01-05T21:07:18.261Z" },
+    { url = "https://files.pythonhosted.org/packages/26/af/927dbbc5a1f5fea1a69adc2883f034cbd1430004e36f4eacd302d500393a/langchain_anthropic-1.4.6-py3-none-any.whl", hash = "sha256:dbd412a956b6b8b0716d9d8460ef71f834a6731cdbfc59e6160482a4a9fb5200", size = 51797, upload-time = "2026-06-12T16:54:14.159Z" },
 ]
 
 [[package]]
@@ -1450,7 +1450,7 @@ wheels = [
 
 [[package]]
 name = "langchain-core"
-version = "1.4.0"
+version = "1.4.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "jsonpatch" },
@@ -1463,9 +1463,9 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "uuid-utils" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/59/de/679a53472c25860837e32c0442c962fa86e95317a36460e2c9d5c91b17c2/langchain_core-1.4.0.tar.gz", hash = "sha256:1dc341eed802ed9c117c0df3923c991e5e9e226571e5725c194eeb5bd93d1a7f", size = 920260, upload-time = "2026-05-11T18:42:35.919Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/ee/2b/fffaff399d20a56d40b9562fa19701e91abd72d8c9d9bc8c2673077b56b6/langchain_core-1.4.7.tar.gz", hash = "sha256:7a825d77de0a3f39adbd9d09612a75e85527e14a52c1601089bcc062972d9f2b", size = 952522, upload-time = "2026-06-12T19:23:57.588Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0f/1a/86c38c27b81913a1c6c12448cab55defb5a1097c7dc9a4cea83f55477a2d/langchain_core-1.4.0-py3-none-any.whl", hash = "sha256:23cbbdb46e38ddd1dd5247e6167e96013eae74bea4c5949c550809970a9e565c", size = 548120, upload-time = "2026-05-11T18:42:33.992Z" },
+    { url = "https://files.pythonhosted.org/packages/de/3e/dcdffa60078ae7b3a00ebb4cbbf1a204a14c3609983c604886523a7d4418/langchain_core-1.4.7-py3-none-any.whl", hash = "sha256:bcadd51951140ecdcba98311dbd931ba5de02a5ba8a2288dad5069c1eea2a13d", size = 554941, upload-time = "2026-06-12T19:23:55.826Z" },
 ]
 
 [[package]]
@@ -2153,7 +2153,7 @@ requires-dist = [
     { name = "ipykernel", marker = "extra == 'dev'", specifier = ">=6.29.5" },
     { name = "ipywidgets", marker = "extra == 'dev'", specifier = ">=8.1.5" },
     { name = "langchain", specifier = ">=1.2.0" },
-    { name = "langchain-anthropic", specifier = ">=1.3.0" },
+    { name = "langchain-anthropic", specifier = ">=1.4.6" },
     { name = "langchain-community", specifier = ">=0.4.1" },
     { name = "langchain-deepseek", specifier = ">=1.0.0" },
     { name = "langchain-google-genai", specifier = ">=4.1.2" },

From ab83cdc08e3ef3c527ba8f0b73f986c8b92baa67 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:21:31 -0300
Subject: [PATCH 090/345] chore(deps): bump aiohttp from 3.14.0 to 3.14.1
 (#912)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 76 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/uv.lock b/uv.lock
index f9954b8c..8b3f7421 100644
--- a/uv.lock
+++ b/uv.lock
@@ -44,7 +44,7 @@ wheels = [
 
 [[package]]
 name = "aiohttp"
-version = "3.14.0"
+version = "3.14.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohappyeyeballs" },
@@ -56,44 +56,44 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "yarl" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ee/ab/93ce242f899b68c51b0578c027aafa791ab3614cb9345fa5d37b5f5c8e3e/aiohttp-3.14.0.tar.gz", hash = "sha256:2882de819734c715fd1b9c11c97e09fa020d14438203d1d354d8ed1702791c9b", size = 7940674, upload-time = "2026-06-01T19:41:02.763Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/82/78/8ea7308cac6934de8c74a14f3d5f65d1c89287426688be79538d0e5c013d/aiohttp-3.14.1.tar.gz", hash = "sha256:307f2cff90a764d329e77040603fa032db89c5c24fdad50c4c15334cba744035", size = 7955794, upload-time = "2026-06-07T21:09:35.529Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/67/47/7727bfe8db93f8835a001bd4359d8480cc68d1259b8bce334668f8be97bd/aiohttp-3.14.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:54bf3522d6f7351e55f89a62d5c2bf138ad557b031670266c5df604ae88e0b5a", size = 759147, upload-time = "2026-06-01T19:37:12.918Z" },
-    { url = "https://files.pythonhosted.org/packages/eb/f2/cd3fedff6fade73d71df9ec908c210cec518ef90fd00289250684b90aecf/aiohttp-3.14.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:0746d9fb0ac4fdef643a84494efe3f06d50335dd8c7a530228b86448aae0a803", size = 513705, upload-time = "2026-06-01T19:37:14.633Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/fe/49746b6b610144a06323bebd8e1211a390310d8c69b98dd6d52df341bc3e/aiohttp-3.14.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:9f3a96b6d39a4872222beee72e1df41d2ff886ae96152cf3e757ef8c5673ef0e", size = 509627, upload-time = "2026-06-01T19:37:16.385Z" },
-    { url = "https://files.pythonhosted.org/packages/4c/3f/28f2f6cf3d5c0e7b01b27140d0e7873fd11fb341169ad3ce78ad04aba628/aiohttp-3.14.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d336820adbb914debbc90a1d8c1bfc4bea55996aecf64866a989d35d1f9fd903", size = 1769293, upload-time = "2026-06-01T19:37:18.067Z" },
-    { url = "https://files.pythonhosted.org/packages/97/6f/2e5f1b525d5474b12b3c60abf733a755845f3bceff21542081ada515f837/aiohttp-3.14.0-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:71b2604c9bfc1b115547d63a094d5244b3f02799833513a99a68aaa7b167c4cb", size = 1732363, upload-time = "2026-06-01T19:37:20.138Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/ce/596120faa85ca7b19cd061e3f2f3be23aa8f11a0aedf9191db9e0da1bd76/aiohttp-3.14.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:610d68800435903e303ca0542b9d3e4eb72a12ff33a6d471a070c1d81eebd3c2", size = 1840375, upload-time = "2026-06-01T19:37:22.104Z" },
-    { url = "https://files.pythonhosted.org/packages/72/3c/a7ffe05a757a4a7867643da69357ec41f506879fbd1b231d2ed90af246b2/aiohttp-3.14.0-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:514db9a79337068981ee2137310283a07b4b885c584991097a91a4da419bcb81", size = 1921484, upload-time = "2026-06-01T19:37:24.068Z" },
-    { url = "https://files.pythonhosted.org/packages/93/fa/2c861170bbd4a491de93a69e081db1d971092569e0d593a98ef62c384dc1/aiohttp-3.14.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:c452d17eeb95d563fc8b936f3050301dbd1d268126c4632d8b70ede9696202ee", size = 1774153, upload-time = "2026-06-01T19:37:26.256Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/da/1d2f5a165f47ec9b1f69d37b8b977fdc4d501aa72ffb7930db27bb9e49ea/aiohttp-3.14.0-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:ed94a81506e3d1bdbad5108f497a58f2a2354aedb4ca314d5326f07d1fd1ac2d", size = 1632569, upload-time = "2026-06-01T19:37:28.192Z" },
-    { url = "https://files.pythonhosted.org/packages/46/1d/7a6e295c4257252f70f69e90864fdad74b6a1293054fb3f9e65a15de6d63/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:1394dce36e0f0d260ac0b555a654de19cb989f3c1b8bdd24f505314dfea18a00", size = 1740325, upload-time = "2026-06-01T19:37:30.08Z" },
-    { url = "https://files.pythonhosted.org/packages/f1/7e/e1899b1ca3ec62f1eab2a5cbde14039b97493f7f53eb88d9b668562ffa8d/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:d1467d1e7b48a73ca7237e0ee4335f3d02b923dbc27b82fd254bc301c97d4026", size = 1748691, upload-time = "2026-06-01T19:37:32.211Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/54/4e6b61c1fe7d3433f82bcc6bd7e4d7c683a742a10c9b12a025fd3695c047/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:6a5f3532125233c261cf61f32df4059cfcf482eb793c7d3db8452e3142028b86", size = 1814477, upload-time = "2026-06-01T19:37:34.173Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/38/86fd51be2e08d8e45c83d879d255f10391903cd9fe2a16512f7591a15873/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:3ea81eb518a2ecb319d8ec6d1424a37c773f6634bd87d6985eb606b2faac419f", size = 1623393, upload-time = "2026-06-01T19:37:36.281Z" },
-    { url = "https://files.pythonhosted.org/packages/78/49/466e947a42a88ee23c486d036e7e5d1b097f1bafd8084ad9c9a0a92f0f43/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:32e735c3182de7b64f6941a4ede48b38c7f47d9437bd615dd30b5bda8fa1bc93", size = 1824097, upload-time = "2026-06-01T19:37:38.421Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/89/35f3410bc284682338a1be6b6ea0c5abfa05f063942cfaa9256608440434/aiohttp-3.14.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:c21ca9a1c63d4509158f478aeb9d02914dcc52adc68d1bc9dee2452284ee5996", size = 1764790, upload-time = "2026-06-01T19:37:40.755Z" },
-    { url = "https://files.pythonhosted.org/packages/42/80/2d4291bd5724d3d17e5951aff5a3e02281483fb47295f0788276ee66cd73/aiohttp-3.14.0-cp311-cp311-win32.whl", hash = "sha256:19ca5fc84130675ba11c6ca5c7da5cb65f7bf8a32cdd2b616bf49cd334688aae", size = 454176, upload-time = "2026-06-01T19:37:42.837Z" },
-    { url = "https://files.pythonhosted.org/packages/59/ed/41d0ad4f6ececffc32bdf1f7b494e5498f7ca5c849ea2e3cc9bbd1668251/aiohttp-3.14.0-cp311-cp311-win_amd64.whl", hash = "sha256:d488e6e9d3bb8ba5ae7066d5be885ae9670eba021b8c6ccb9a3a568e6b19d6e5", size = 479334, upload-time = "2026-06-01T19:37:44.776Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/86/c0b5e305c770053f8c3d069bb52b8196917ba91949d1962d52eb307fb0d2/aiohttp-3.14.0-cp311-cp311-win_arm64.whl", hash = "sha256:8b93618102caf12801638a01a2b478a55410ddd71bd41cfaf6f707953a49ac43", size = 450262, upload-time = "2026-06-01T19:37:46.461Z" },
-    { url = "https://files.pythonhosted.org/packages/89/97/2b6889bfb6b6847520d50d95eb8c4307a45e28aaca39faf4a9454b3d1b2f/aiohttp-3.14.0-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:b29518c9c2ec7e373e68259206a137c7f4f5439c58baaec4b5ab3ab799850a4e", size = 750194, upload-time = "2026-06-01T19:37:48.164Z" },
-    { url = "https://files.pythonhosted.org/packages/21/e2/62634b7fff918ed98c3c6b2f0e70d520f7f28846cb412d451b04354c6459/aiohttp-3.14.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:dbec68ce61b64cb73cab4d33df9433427b1713c8bcccb181dce695c1b6f8e87c", size = 506966, upload-time = "2026-06-01T19:37:50.014Z" },
-    { url = "https://files.pythonhosted.org/packages/dd/fb/5ce075150828c797a5106f1c2fb26034e709d4289b9d2bf8b07f1e59fac6/aiohttp-3.14.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:3cdf534aa455593e589302990c5097aa5c92c06c4262a20da22934f9186a5fff", size = 507527, upload-time = "2026-06-01T19:37:51.96Z" },
-    { url = "https://files.pythonhosted.org/packages/01/d5/405a0ae4e6b081754a3609c1c97c63a950e000a2def16046f1e736933a0e/aiohttp-3.14.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:cb6c657104393b5fbff01a5f59b2023db74058a8077d94475d6c25d03882a108", size = 1762420, upload-time = "2026-06-01T19:37:53.839Z" },
-    { url = "https://files.pythonhosted.org/packages/ae/1d/e05a7c896b15a6bc6fb8fc5319eb437861c2c49c34559ef928add6590315/aiohttp-3.14.0-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:46fbbec4e4fab7428d4396a3823f9320e4560aa3113b89eeebce712c27c9ed5a", size = 1733672, upload-time = "2026-06-01T19:37:55.791Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/22/a72f7c459e195fa41bf4f7abd1f925b91fe91f8097e51c654229ba144a33/aiohttp-3.14.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2c2c7e05dd5335b298085abf45ddf98673934c3ee1c083d0b9ea13d4186ad500", size = 1805064, upload-time = "2026-06-01T19:37:57.931Z" },
-    { url = "https://files.pythonhosted.org/packages/80/50/e85bdaba0be59ca4838005ebfef4048fcdd5f35a02b07057a9a123394440/aiohttp-3.14.0-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:3c7139100fbaae76515b73051d8f0aa3a3ff02e415eec8a8eee8e2223d9ba955", size = 1902125, upload-time = "2026-06-01T19:38:00.225Z" },
-    { url = "https://files.pythonhosted.org/packages/19/d8/51de5c6b971c27bb1ef620293b8d1ca611ec78736b34b3f6ccf68e4c8785/aiohttp-3.14.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:78d6f9286a629ce52728430afe18f8ed2b6c39a1fddb3802d7244b9983910ad2", size = 1783112, upload-time = "2026-06-01T19:38:02.641Z" },
-    { url = "https://files.pythonhosted.org/packages/73/ae/b4402bfde77e43dfb1b6ccff83c7b7ab63ed06b50c4754f0c5423fb374fe/aiohttp-3.14.0-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:cc3c3e12cdaeb92d7dcf13db00e9f6b1956b910e47256e696df1cfa946d02159", size = 1586356, upload-time = "2026-06-01T19:38:04.637Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/05/750a3265ca4dc54a460bd0cb1121a8f2ce9171fce4a135fb47ea7fd594d2/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:4d6a998191f5ebe3b8c28463ff72bc030250008b3193c402464efadd08b5ca02", size = 1723119, upload-time = "2026-06-01T19:38:06.713Z" },
-    { url = "https://files.pythonhosted.org/packages/37/01/8c0812c50b3b1b1c37b323bf170d6be8847a8f234060485b7d1e71953f60/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:0fc2b75ae8d169d853be2862d960be8550da6c5c65711d5476407eb3fdb006bd", size = 1757216, upload-time = "2026-06-01T19:38:08.736Z" },
-    { url = "https://files.pythonhosted.org/packages/47/2a/50fb98028a26887cbe48dcc1df92a90825615bc73b5584301304090cded8/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:16eee56bcc72d04600bc56c1759982c2385ec0b41d3fd3521f836bf64a0957ef", size = 1770500, upload-time = "2026-06-01T19:38:11.111Z" },
-    { url = "https://files.pythonhosted.org/packages/bd/32/0ffd598a2fa2b9a423daf242e700cfdabda35d6e602394ad9ae58972c1c7/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:5a2e7ca615c3ddc15b82687e05a624e5f5cba3f1d6c20cb81172d70ea498451e", size = 1576224, upload-time = "2026-06-01T19:38:13.391Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/f9/b9fc381dd9b66afb33f2634c40e229d106467be0afcabe79648631ab6712/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:f0b7b8bbbec3ce9467ee0ebe334622fd90624f593edd3136c567811453fc4fae", size = 1794252, upload-time = "2026-06-01T19:38:15.498Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/fb/05d9214c975f23225a8cd5c439325e338c7c377b315480ef3871db51f54e/aiohttp-3.14.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:5ba10966d4f03dd96a14365be4b8e37c327c76f11c3ca867116966cdd9f98066", size = 1760193, upload-time = "2026-06-01T19:38:17.624Z" },
-    { url = "https://files.pythonhosted.org/packages/d9/4b/02992fc4fb9e1b6673ee3f888a8e587a6447afda1f6f4aca776c148c2876/aiohttp-3.14.0-cp312-cp312-win32.whl", hash = "sha256:101df7779c80c0636014a6b2c6642acd3efb5b355d48347c9d7dfb720aee9430", size = 448650, upload-time = "2026-06-01T19:38:19.545Z" },
-    { url = "https://files.pythonhosted.org/packages/39/e9/246532214c3abda518477cbaaf16d420295ad8effa5233844cbb38f299ab/aiohttp-3.14.0-cp312-cp312-win_amd64.whl", hash = "sha256:b0a5747586d4467efd1f932710b269131c9717a872dce082cd92a00c1c13123a", size = 476145, upload-time = "2026-06-01T19:38:21.505Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/c3/63f8c20090048915711598b0adf475b149216d736157961de06480a45b15/aiohttp-3.14.0-cp312-cp312-win_arm64.whl", hash = "sha256:5f1c5be60add78fabb4aacd13c5a348ae79d2fcbfc7fa78da8f1eb192273b370", size = 444250, upload-time = "2026-06-01T19:38:24.027Z" },
+    { url = "https://files.pythonhosted.org/packages/26/dd/bf526e6f0a1120dd6f2df2e97bacfe4d358f13d17a0ff5847301a1375a51/aiohttp-3.14.1-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:aa00140699487bd435fde4342d85c94cb256b7cd3a5b9c3396c67f19922afda2", size = 765225, upload-time = "2026-06-07T21:06:07.957Z" },
+    { url = "https://files.pythonhosted.org/packages/8f/e1/a2872aa55495a70f61310d411541c6ee23812d9a884e000c716e1bc3edbf/aiohttp-3.14.1-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:1c1af67559445498b502030c35c59db59966f47041ca9de5b4e707f86bd10b5f", size = 518743, upload-time = "2026-06-07T21:06:09.749Z" },
+    { url = "https://files.pythonhosted.org/packages/5b/e7/c60c7b209e509cc787de3cea0550a518538cfc08003e1c1e14c1c63fff71/aiohttp-3.14.1-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:d44ec478e713ee7f29b439f7eb8dc2b9d4079e11ae114d2c2ac3d5daf30516c8", size = 514139, upload-time = "2026-06-07T21:06:11.26Z" },
+    { url = "https://files.pythonhosted.org/packages/5b/8d/614ace2f579702c9840ab1e1447fd8509e35b0b904f7196418fa2f57b25d/aiohttp-3.14.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d3b1a184a9a8f548a6b73f1e26b96b052193e4b3175ed7342aaf1151a1f00a04", size = 1784088, upload-time = "2026-06-07T21:06:12.887Z" },
+    { url = "https://files.pythonhosted.org/packages/49/e0/726e90f99542bf292f81a96a12cc4847deb86f3ccf62c6f4014a201f4d33/aiohttp-3.14.1-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:5f2504bc0322437c9a1ff6d3333ca56c7477b727c995f036b976ae17b98372c8", size = 1737835, upload-time = "2026-06-07T21:06:14.564Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/4b/d176d5c4db9d33dacf0543102ea59503bc1d528af4cfd0b719949ca49389/aiohttp-3.14.1-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:73f05ea02013e02512c3bf42714f1208c57168c779cc6fe23516e4543089d0a6", size = 1842801, upload-time = "2026-06-07T21:06:16.228Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/d6/5a99b563690ea0cbed912ae94a2ce33993a5709a651a3a4fe761e7dd973a/aiohttp-3.14.1-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:797457503c2d426bee06eef808d07b31ede30b65e054444e7de64cad0061b7af", size = 1929992, upload-time = "2026-06-07T21:06:17.947Z" },
+    { url = "https://files.pythonhosted.org/packages/76/7f/a987b14a3859094b3cea3f4825219c3e5536242564af6e3f9c2f6c994eb2/aiohttp-3.14.1-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:b821a1f7dedf7e37450654e620038ac3b2e81e8fa6ea269337e97101978ec730", size = 1786989, upload-time = "2026-06-07T21:06:19.677Z" },
+    { url = "https://files.pythonhosted.org/packages/f1/1a/420e5c85a3e73349372ed22ce0b6af86bfa6ce16a4b20a64a2e94608c781/aiohttp-3.14.1-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:4cd96b5ba05d67ed0cf00b5b405c8cd99586d8e3481e8ee0a831057591af7621", size = 1640129, upload-time = "2026-06-07T21:06:22.558Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/80/18a592ed3be0a402cc03670bd72ee1f8563ddbe1d8d5542dbf868f274136/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:1d459b98a932296c6f0e94f87511a0b1b90a8a02c30a50e60a297619cd5a58ee", size = 1756576, upload-time = "2026-06-07T21:06:24.8Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/0b/8b3d5713373858ff71a617daf6e3b0e81ad63e79d09a3cf2f6b6b983939c/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:764457a7be60825fb770a644852ff717bcbb5042f189f2bd16df61a81b3f6573", size = 1754668, upload-time = "2026-06-07T21:06:26.528Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/49/fd564575cf225821d7ba5a117cb8bc27213d8a7e1811162afb43ae077039/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:f7a16ef45b081454ef844502d87a848876c490c4cb5c650c230f6ec79ed2c1e7", size = 1817019, upload-time = "2026-06-07T21:06:28.297Z" },
+    { url = "https://files.pythonhosted.org/packages/ed/1b/e850c9ae6fc91356552ae668bb6c51e93fa29c8aef13398a10b56678557f/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:2fbc3ed048b3475b9f0cbcb9978e9d2d3511acd91ead203af26ed9f0056004cf", size = 1631638, upload-time = "2026-06-07T21:06:30.242Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/94/3c337ba72451a89806ace6f75bddc92bafc5b8d53d90115a512858024b63/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:bedb0cd073cc2dc035e30aeb99444389d3cd2113afe4ef9fcd23d439f5bade85", size = 1835660, upload-time = "2026-06-07T21:06:31.943Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/9c/9c18cf367a0498212d9ba7daf990b504a5e8ae064cda4b504e2647c89c03/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:b6feea921016eb3d4e04d65fc4e9ca402d1a3801f562aef94989f54694917af3", size = 1775698, upload-time = "2026-06-07T21:06:33.72Z" },
+    { url = "https://files.pythonhosted.org/packages/b5/63/a251a9d2a6cb45065b2ddc0bde2b3dd10108740a9a42f632c66405a761a2/aiohttp-3.14.1-cp311-cp311-win32.whl", hash = "sha256:313701e488100074ce99850404ee36e741abf6330179fec908a1944ecf570126", size = 458386, upload-time = "2026-06-07T21:06:35.279Z" },
+    { url = "https://files.pythonhosted.org/packages/17/ca/69274c51dcd6e8947d77b2806cf47a4a15f2c846e2cbeb1882547d3da283/aiohttp-3.14.1-cp311-cp311-win_amd64.whl", hash = "sha256:03ab4530fdcb3a543a122ba4b65ac9919da9fe9f78a03d328a6e38ff962f7aa5", size = 483406, upload-time = "2026-06-07T21:06:36.824Z" },
+    { url = "https://files.pythonhosted.org/packages/2c/8a/c25904f77690c3688ec140f87591ef11a0cfe36bf3d5c0f1f38056fb62b3/aiohttp-3.14.1-cp311-cp311-win_arm64.whl", hash = "sha256:486f7d16ed54c39c2cbd7ca71fd8ba2b8bb7860df65bd7b6ed640bab96a38a8b", size = 452987, upload-time = "2026-06-07T21:06:38.371Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/21/151624b51cd92553d95424daf4bf19f19ce9be9002d19253e7e7ce67197b/aiohttp-3.14.1-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:d35143e27778b4bb0fb189562d7f275bff79c62ab8e98459717c0ea617ff2480", size = 757402, upload-time = "2026-06-07T21:06:40.311Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/82/280619e0bd7bf2454987e19282616e84762255dd9c8468f62382e8c191f1/aiohttp-3.14.1-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:bcfb80a2cc36fba2534e5e5b5264dc7ae6fcd9bf15256da3e53d2f499e6fa29d", size = 512310, upload-time = "2026-06-07T21:06:42.207Z" },
+    { url = "https://files.pythonhosted.org/packages/55/b2/2aac325583aaa1353045f96dffa586d8a34e8322e14a7ba49cffeb103ab4/aiohttp-3.14.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:27fd7c91e51729b4f7e1577865fa6d34c9adccbc39aabe9000285b48af9f0ec2", size = 512448, upload-time = "2026-06-07T21:06:43.813Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/72/a60607cb849faa8af8a356c9329ea2eb6f395d49e82cc82ccba1fd8deb8f/aiohttp-3.14.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:64c567bf9eaf664280116a8688f63016e6b32db2505908e2bdaca1b6438142f2", size = 1766854, upload-time = "2026-06-07T21:06:45.391Z" },
+    { url = "https://files.pythonhosted.org/packages/b5/d3/d9fe1c9ec7557ab4d0d82bebaa728c6418f0b93295ec2f4ab015f7710cc7/aiohttp-3.14.1-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:f5e6ff2bdbb8f4cd3fbe41f99e25bbcd58e3bf9f13d3dd31a11e7917251cc77a", size = 1740884, upload-time = "2026-06-07T21:06:47.413Z" },
+    { url = "https://files.pythonhosted.org/packages/c1/dc/f2cecfaf9337ba3e63f181500814ff502aa3d00d9c7ec93a9d23d10a27b2/aiohttp-3.14.1-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2f73e01dc37122325caf079982621262f96d74823c179038a82fddfc50359264", size = 1810034, upload-time = "2026-06-07T21:06:50.165Z" },
+    { url = "https://files.pythonhosted.org/packages/66/d7/2ff65c5e65c0d7476daf7e15c032e0805e36811185b9623e3238ad6c763e/aiohttp-3.14.1-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:bb2c0c80d431c0d03f2c7dbf125150fedd4f0de17366a7ca33f7ccb822391842", size = 1904054, upload-time = "2026-06-07T21:06:52.035Z" },
+    { url = "https://files.pythonhosted.org/packages/20/9c/d445818389df371f56d141d881153ba23183c4735a03f7356ffb43f7757d/aiohttp-3.14.1-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:3e6fc1a85fa7194a1a7d19f44e8609180f4a8eb5fa4c7ed8b4355f080fad235c", size = 1790278, upload-time = "2026-06-07T21:06:54.049Z" },
+    { url = "https://files.pythonhosted.org/packages/4d/aa/bf04cb4d865fc6101c2229a294ad744973b72e513fdc5a6b791e6983d72a/aiohttp-3.14.1-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:686b6c0d3911ec387b444ddf5dc62fb7f7c0a7d5186a7861626496a5ab4aff95", size = 1591795, upload-time = "2026-06-07T21:06:55.911Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/b4/4dac0038960427ba832f6609dfb4ea5437d7fd80c72001b9e48f834f428b/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:c6fa4dc7ad6f8109c70bb1499e589f76b0b792baf39f9b017eb92c8a81d0a199", size = 1728397, upload-time = "2026-06-07T21:06:57.777Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/f9/7cd4e8ad7aa3b75f17d56bb5498dd604a93d4e6eece822ba0568c413fff0/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:87a5eea1b2a5e21e1ebdbb33ad4165359189327e63fc4e4894693e7f821ac817", size = 1766504, upload-time = "2026-06-07T21:07:00.009Z" },
+    { url = "https://files.pythonhosted.org/packages/f9/df/fc01d9fcad0f73fed3f3d361f1f94f975947b50dff82919f6dc2bf4316cc/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:1c1421eb01d4fd608d88cc8290211d177a58532b55ad94076fb349c5bf467f0a", size = 1777806, upload-time = "2026-06-07T21:07:02.064Z" },
+    { url = "https://files.pythonhosted.org/packages/41/09/47e2d090bddcc8fb4ccb4c314aadc32d7c5d9bb55f50f6ad1c92fc15d501/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:34b257ec41345c1e8f2df68fa908a7952f5de932723871eb633ecbbff396c9a4", size = 1580707, upload-time = "2026-06-07T21:07:03.942Z" },
+    { url = "https://files.pythonhosted.org/packages/3d/36/f1a4ce904ae0b6930cfe9afc96d0896f7ec1a620c400405d63783bb95a9c/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:de538791a80e5d862addbc183f70f0158ac9b9bb872bb147f1fd2a683691e087", size = 1798121, upload-time = "2026-06-07T21:07:05.987Z" },
+    { url = "https://files.pythonhosted.org/packages/70/0a/e0075ce9ca0279ee1d4f0c0b85f54fea02ebc83c3007651a72bece658fec/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6f71173be42d3241d428f760122febb748de0623f44308a6f120d0dd9ec572e3", size = 1767580, upload-time = "2026-06-07T21:07:07.873Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/61/a0c0a8f327a9c52095cdd8e312391b00d3ed64ab6c72bb5c33d8ec251cf7/aiohttp-3.14.1-cp312-cp312-win32.whl", hash = "sha256:ec8dc383ee57ea3e883477dcca3f11b65d58199f1080acaf4cd6ad9a99698be4", size = 452771, upload-time = "2026-06-07T21:07:09.669Z" },
+    { url = "https://files.pythonhosted.org/packages/df/d9/ea367c75f16ac9c6cdc8febb25e8318fa21a2b1bc8d6514d4b2d890bface/aiohttp-3.14.1-cp312-cp312-win_amd64.whl", hash = "sha256:2aa92c87868cd13674989f9ee83e5f9f7ea4237589b728048e1f0c8f6caa3271", size = 479873, upload-time = "2026-06-07T21:07:11.538Z" },
+    { url = "https://files.pythonhosted.org/packages/03/64/8d96784a7851156db8a4c6c3f6f91042fdf39fb15a4cc38c8b3c14833c45/aiohttp-3.14.1-cp312-cp312-win_arm64.whl", hash = "sha256:2c840c90759922cb5e6dda94596e079a30fb5a5ba548e7e0dc00574703940847", size = 448073, upload-time = "2026-06-07T21:07:13.637Z" },
 ]
 
 [[package]]

From f997f339ec1a6c28d7c0cdb7761ce874404296f4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:28:21 -0300
Subject: [PATCH 091/345] chore(deps): bump langchain from 1.2.6 to 1.3.9
 (#911)

Bumps [langchain](https://github.com/langchain-ai/langchain) from 1.2.6 to 1.3.9.
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain==1.2.6...langchain==1.3.9)

---
updated-dependencies:
- dependency-name: langchain
  dependency-version: 1.3.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 pyproject.toml |  2 +-
 uv.lock        | 35 +++++++++++++++++++----------------
 2 files changed, 20 insertions(+), 17 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index fa125ccb..cee9fc8b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -17,7 +17,7 @@ dependencies = [
     "uvicorn>=0.24.0",
     "pydantic>=2.9.2",
     "loguru>=0.7.2",
-    "langchain>=1.2.0",
+    "langchain>=1.3.9",
     "langgraph>=1.0.5",
     "tiktoken>=0.12.0",
     "langgraph-checkpoint-sqlite>=3.0.1",
diff --git a/uv.lock b/uv.lock
index 8b3f7421..ac0735c4 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1381,16 +1381,16 @@ wheels = [
 
 [[package]]
 name = "langchain"
-version = "1.2.6"
+version = "1.3.9"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
     { name = "langgraph" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f5/bc/d8f506a525baadee99a65c6cc28c1c35c9eaf1cb2009f048e9861d81a600/langchain-1.2.6.tar.gz", hash = "sha256:7d46cbf719d860a16f6fc182d5d3de17453dda187f3d43e9c40ac352a5094fdd", size = 553127, upload-time = "2026-01-16T19:21:19.611Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/56/7c/651d0dc4913a7a892156c03dd343b99cfe19ee729e6911ab1f4fe7567b8b/langchain-1.3.9.tar.gz", hash = "sha256:9b14ef0db9ef314299ded858b22ca2a40b8f1b05c8c9cb6b82d53a53075fef00", size = 631514, upload-time = "2026-06-12T16:53:27.083Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/3f/28/d5dc4cb06ccb29d62a590d446072964766555e85863f5044c6e644c07d0d/langchain-1.2.6-py3-none-any.whl", hash = "sha256:a9a6c39f03c09b6eb0f1b47e267ad2a2fd04e124dfaa9753bd6c11d2fe7d944e", size = 108458, upload-time = "2026-01-16T19:21:18.085Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/55/3481619d21b9bdfbfda8680fba5cfc6cfe926789b8eaaad95353078cfa20/langchain-1.3.9-py3-none-any.whl", hash = "sha256:4af49ad1095799e4408b489fb79d4b8b49292453618b202d8a697fca59bb6871", size = 132873, upload-time = "2026-06-12T16:53:25.489Z" },
 ]
 
 [[package]]
@@ -1587,7 +1587,7 @@ sdist = { url = "https://files.pythonhosted.org/packages/0e/72/a3add0e4eec4eb9e2
 
 [[package]]
 name = "langgraph"
-version = "1.0.10rc1"
+version = "1.2.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
@@ -1597,22 +1597,22 @@ dependencies = [
     { name = "pydantic" },
     { name = "xxhash" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/59/33/34c8ab47938ac2ac6df1d2696e28b6000e98c2a783b89655fe2261b7f93b/langgraph-1.0.10rc1.tar.gz", hash = "sha256:4042dc1f33297ccbd593bddc5a4e77dc7e0f37c7ac19d48551c53a22287bacaa", size = 511667, upload-time = "2026-02-26T20:13:38.38Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/77/9d/7c9ebd17b95569122e2d2e641f535cf086c870d66bb8e59be33cdba856b3/langgraph-1.2.5.tar.gz", hash = "sha256:09a3bdec6fdb3228623fc78b6f69a1400d383f66348d0b04d0efb692022cc6ef", size = 712532, upload-time = "2026-06-12T20:30:58.498Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/df/61/b6e7fd50c70116369874d681e3aa14bf32adbdde6c05014e5260c081452f/langgraph-1.0.10rc1-py3-none-any.whl", hash = "sha256:10750c035cc48b6809a4657ad0c9fd63fb6ee47dd2f1f2a57adb940381d096e5", size = 160950, upload-time = "2026-02-26T20:13:37.223Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/03/187281cf61845c5a9c397ae6cd9cd73bb54b39435e5575a7b83c853e5b76/langgraph-1.2.5-py3-none-any.whl", hash = "sha256:9286bb5def82fc865959c14378fe473518dc097d586225f622f029637a2a4bb9", size = 246150, upload-time = "2026-06-12T20:30:57.018Z" },
 ]
 
 [[package]]
 name = "langgraph-checkpoint"
-version = "4.0.0"
+version = "4.1.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
     { name = "ormsgpack" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/98/76/55a18c59dedf39688d72c4b06af73a5e3ea0d1a01bc867b88fbf0659f203/langgraph_checkpoint-4.0.0.tar.gz", hash = "sha256:814d1bd050fac029476558d8e68d87bce9009a0262d04a2c14b918255954a624", size = 137320, upload-time = "2026-01-12T20:30:26.38Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/83/47/886af6f886f0bff2273164a45f008694e48a96ff3cd25ff0228f2aa9480e/langgraph_checkpoint-4.1.1.tar.gz", hash = "sha256:6c2bdb530c91f91d7d9c1bd100925d0fc4f498d418c17f3587d1526279482a25", size = 184020, upload-time = "2026-05-22T16:57:38.503Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/4a/de/ddd53b7032e623f3c7bcdab2b44e8bf635e468f62e10e5ff1946f62c9356/langgraph_checkpoint-4.0.0-py3-none-any.whl", hash = "sha256:3fa9b2635a7c5ac28b338f631abf6a030c3b508b7b9ce17c22611513b589c784", size = 46329, upload-time = "2026-01-12T20:30:25.2Z" },
+    { url = "https://files.pythonhosted.org/packages/bd/b4/71425e3e38be92611300b9cc5e46a5bf98ab23f5ea8a75b73d02a2f1413c/langgraph_checkpoint-4.1.1-py3-none-any.whl", hash = "sha256:25d29144b082827218e7bc3f1e9b0566a4bb007895cd6cc26f66a8428739f56e", size = 56212, upload-time = "2026-05-22T16:57:37.203Z" },
 ]
 
 [[package]]
@@ -1631,28 +1631,31 @@ wheels = [
 
 [[package]]
 name = "langgraph-prebuilt"
-version = "1.0.8"
+version = "1.1.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "langchain-core" },
     { name = "langgraph-checkpoint" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/0d/06/dd61a5c2dce009d1b03b1d56f2a85b3127659fdddf5b3be5d8f1d60820fb/langgraph_prebuilt-1.0.8.tar.gz", hash = "sha256:0cd3cf5473ced8a6cd687cc5294e08d3de57529d8dd14fdc6ae4899549efcf69", size = 164442, upload-time = "2026-02-19T18:14:39.083Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/29/66/ed9b93f56bc17ef22d551892f0ac2b225a97fe0fcf23a511b857f70d590b/langgraph_prebuilt-1.1.0.tar.gz", hash = "sha256:3c579cf6eed2d17f9c157c2d0fcaddcd8688524e7022d3b22b37a3bf4589d528", size = 178833, upload-time = "2026-05-12T03:37:49.332Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/dc/41/ec966424ad3f2ed3996d24079d3342c8cd6c0bd0653c12b2a917a685ec6c/langgraph_prebuilt-1.0.8-py3-none-any.whl", hash = "sha256:d16a731e591ba4470f3e313a319c7eee7dbc40895bcf15c821f985a3522a7ce0", size = 35648, upload-time = "2026-02-19T18:14:37.611Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/43/3fe1a700b8490ed02679cdbbc8c915eb23a092faf496c9c1118abcd10be3/langgraph_prebuilt-1.1.0-py3-none-any.whl", hash = "sha256:51e311747d755b751d5c6b39b0c1446124d3a7643d2515017e6714b323508fc9", size = 41043, upload-time = "2026-05-12T03:37:48.007Z" },
 ]
 
 [[package]]
 name = "langgraph-sdk"
-version = "0.3.3"
+version = "0.4.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
+    { name = "langchain-core" },
+    { name = "langchain-protocol" },
     { name = "orjson" },
+    { name = "websockets" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/c3/0f/ed0634c222eed48a31ba48eab6881f94ad690d65e44fe7ca838240a260c1/langgraph_sdk-0.3.3.tar.gz", hash = "sha256:c34c3dce3b6848755eb61f0c94369d1ba04aceeb1b76015db1ea7362c544fb26", size = 130589, upload-time = "2026-01-13T00:30:43.894Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/b4/2b/bd8ac26d4e97f6df88ef05ce5b6a38945a3903e1025d926f4752aa88aa97/langgraph_sdk-0.4.2.tar.gz", hash = "sha256:b88f0f5f6328ac0680d6790614a905b2bcfa257f2276dba4e38f0e86db0aa738", size = 348327, upload-time = "2026-06-01T17:51:19.856Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/6e/be/4ad511bacfdd854afb12974f407cb30010dceb982dc20c55491867b34526/langgraph_sdk-0.3.3-py3-none-any.whl", hash = "sha256:a52ebaf09d91143e55378bb2d0b033ed98f57f48c9ad35c8f81493b88705fc7b", size = 67021, upload-time = "2026-01-13T00:30:42.264Z" },
+    { url = "https://files.pythonhosted.org/packages/a0/05/aac507337cceae773c2cc9ab91eb6301963af7aeeb55b4217a00e15aff17/langgraph_sdk-0.4.2-py3-none-any.whl", hash = "sha256:75fa5096c1177ce39c847096a8fe3745ffd480ddb412995f836e9f5f884c43dd", size = 160521, upload-time = "2026-06-01T17:51:18.849Z" },
 ]
 
 [[package]]
@@ -2152,7 +2155,7 @@ requires-dist = [
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
     { name = "ipykernel", marker = "extra == 'dev'", specifier = ">=6.29.5" },
     { name = "ipywidgets", marker = "extra == 'dev'", specifier = ">=8.1.5" },
-    { name = "langchain", specifier = ">=1.2.0" },
+    { name = "langchain", specifier = ">=1.3.9" },
     { name = "langchain-anthropic", specifier = ">=1.4.6" },
     { name = "langchain-community", specifier = ">=0.4.1" },
     { name = "langchain-deepseek", specifier = ">=1.0.0" },

From ce85fcf4511d14fb9916ec5f230f554eb141bbcc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:28:54 -0300
Subject: [PATCH 092/345] chore(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 in
 /frontend (#918)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 4d841a46..5b3d82e4 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -8189,10 +8189,20 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
       "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"

From 041b25f73ce930d0c8a1894ae681f7ab3325b5d2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 12:41:01 -0300
Subject: [PATCH 093/345] chore(deps): bump form-data from 4.0.5 to 4.0.6 in
 /frontend (#919)

Bumps [form-data](https://github.com/form-data/form-data) from 4.0.5 to 4.0.6.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.5...v4.0.6)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 5b3d82e4..73bd4ab6 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -6930,16 +6930,16 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
-      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz",
+      "integrity": "sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
-        "hasown": "^2.0.2",
-        "mime-types": "^2.1.12"
+        "hasown": "^2.0.4",
+        "mime-types": "^2.1.35"
       },
       "engines": {
         "node": ">= 6"
@@ -7221,9 +7221,10 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+      "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"
       },

From db41ea71203c479f50feb13af98c2992268f08f9 Mon Sep 17 00:00:00 2001
From: Fathi Boudra <fathi.boudra@linaro.org>
Date: Wed, 17 Jun 2026 17:41:05 +0200
Subject: [PATCH 094/345] feat: upgrade container to trixie and node 22.x
 (#914)

* Dockerfile: upgrade Debian Bookworm -> Trixie

Upgrade base images from Bookworm (12) to Trixie (13).
Bookworm is EOL (2026-06-10).

Signed-off-by: Fathi Boudra <fboudra@gmail.com>

* Dockerfile: upgrade node 20.x -> 22.x

Upgrade Node from 20.x to 22.x.
Node 20.x is EOL since March 24, 2026.

Signed-off-by: Fathi Boudra <fboudra@gmail.com>

---------

Signed-off-by: Fathi Boudra <fboudra@gmail.com>
---
 Dockerfile        | 12 ++++++------
 Dockerfile.single | 10 +++++-----
 2 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 3b7b58e1..4f391f2f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,17 +1,17 @@
 # Build stage
-FROM python:3.12-slim-bookworm AS builder
+FROM python:3.12-slim-trixie AS builder
 
 # Install uv using the official method
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 # Install system dependencies required for building certain Python packages
-# Add Node.js 20.x LTS for building frontend
+# Add Node.js 22.x LTS for building frontend
 # NOTE: gcc/g++/make removed - uv should download pre-built wheels. Add back if build fails.
 # NOTE: gcc/g++/make required for some python dependencies
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     build-essential \
-    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
     && apt-get install -y nodejs \
     && rm -rf /var/lib/apt/lists/*
 
@@ -65,15 +65,15 @@ RUN npm run build
 WORKDIR /app
 
 # Runtime stage
-FROM python:3.12-slim-bookworm AS runtime
+FROM python:3.12-slim-trixie AS runtime
 
 # Install only runtime system dependencies (no build tools)
-# Add Node.js 20.x LTS for running frontend
+# Add Node.js 22.x LTS for running frontend
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
     ffmpeg \
     supervisor \
     curl \
-    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
     && apt-get install -y nodejs \
     && rm -rf /var/lib/apt/lists/*
 
diff --git a/Dockerfile.single b/Dockerfile.single
index 6d421ee4..93fe7491 100644
--- a/Dockerfile.single
+++ b/Dockerfile.single
@@ -1,5 +1,5 @@
 # Stage 1: Frontend Builder
-FROM node:20-slim AS frontend-builder
+FROM node:22-slim AS frontend-builder
 WORKDIR /app/frontend
 
 # Copy dependency files first to leverage cache
@@ -26,7 +26,7 @@ RUN npm run build
 FROM surrealdb/surrealdb:v2 AS surreal-binary
 
 # Stage 4: Backend Builder
-FROM python:3.12-slim-bookworm AS backend-builder
+FROM python:3.12-slim-trixie AS backend-builder
 # Install build dependencies
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/*
 # Install uv
@@ -51,14 +51,14 @@ RUN mkdir -p /app/tiktoken-cache && \
     .venv/bin/python -c "import tiktoken; tiktoken.get_encoding('o200k_base')"
 
 # Stage 5: Runtime
-FROM python:3.12-slim-bookworm AS runtime
+FROM python:3.12-slim-trixie AS runtime
 
 # Install runtime dependencies
 RUN apt-get update && apt-get upgrade -y && apt-get install -y \
     ffmpeg \
     supervisor \
     curl \
-    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
     && apt-get install -y nodejs \
     && rm -rf /var/lib/apt/lists/*
 
@@ -103,4 +103,4 @@ RUN mkdir -p /var/log/supervisor
 EXPOSE 8502 5055
 
 # Set startup command
-CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
\ No newline at end of file
+CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

From bd94e7b03b32584b29ba5fb61919a4a92df5a2b1 Mon Sep 17 00:00:00 2001
From: Federico Rao <157750791+Federicorao@users.noreply.github.com>
Date: Wed, 17 Jun 2026 18:21:19 +0200
Subject: [PATCH 095/345] fix(commands): register legacy embedding aliases
 (#876)

---
 commands/embedding_commands.py   | 288 ++++++++++++++++++++++++++++++-
 tests/test_embedding_commands.py | 102 +++++++++++
 2 files changed, 384 insertions(+), 6 deletions(-)
 create mode 100644 tests/test_embedding_commands.py

diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index f6ec70d3..0a2a0b57 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -7,8 +7,8 @@ from surreal_commands import CommandInput, CommandOutput, command, submit_comman
 
 from open_notebook.ai.models import model_manager
 from open_notebook.database.repository import ensure_record_id, repo_insert, repo_query
-from open_notebook.exceptions import ConfigurationError
 from open_notebook.domain.notebook import Note, Source, SourceInsight
+from open_notebook.exceptions import ConfigurationError
 from open_notebook.utils.chunking import ContentType, chunk_text, detect_content_type
 from open_notebook.utils.embedding import generate_embedding, generate_embeddings
 
@@ -118,6 +118,58 @@ class EmbedSourceOutput(CommandOutput):
     error_message: Optional[str] = None
 
 
+class LegacyEmbedSingleItemInput(CommandInput):
+    """Input for the pre-1.6 embed_single_item command kept for queued jobs."""
+
+    item_id: str
+    item_type: Literal["source", "note", "insight"]
+
+
+class LegacyEmbedSingleItemOutput(CommandOutput):
+    """Output matching the pre-1.6 embed_single_item command shape."""
+
+    success: bool
+    item_id: str
+    item_type: str
+    chunks_created: int = 0
+    processing_time: float
+    error_message: Optional[str] = None
+
+
+class LegacyEmbedChunkInput(CommandInput):
+    """Input for the pre-1.6 per-chunk embedding command kept for queued jobs."""
+
+    source_id: str
+    chunk_index: int
+    chunk_text: str
+
+
+class LegacyEmbedChunkOutput(CommandOutput):
+    """Output matching the pre-1.6 embed_chunk command shape."""
+
+    success: bool
+    source_id: str
+    chunk_index: int
+    error_message: Optional[str] = None
+
+
+class LegacyVectorizeSourceInput(CommandInput):
+    """Input for the pre-1.6 vectorize_source command kept for queued jobs."""
+
+    source_id: str
+
+
+class LegacyVectorizeSourceOutput(CommandOutput):
+    """Output matching the pre-1.6 vectorize_source command shape."""
+
+    success: bool
+    source_id: str
+    total_chunks: int
+    jobs_submitted: int
+    processing_time: float
+    error_message: Optional[str] = None
+
+
 @command(
     "embed_note",
     app="open_notebook",
@@ -126,7 +178,10 @@ class EmbedSourceOutput(CommandOutput):
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+        ],  # Don't retry validation/config errors
         "retry_log_level": "debug",
     },
 )
@@ -218,7 +273,10 @@ async def embed_note_command(input_data: EmbedNoteInput) -> EmbedNoteOutput:
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+        ],  # Don't retry validation/config errors
         "retry_log_level": "debug",
     },
 )
@@ -312,7 +370,10 @@ async def embed_insight_command(input_data: EmbedInsightInput) -> EmbedInsightOu
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+        ],  # Don't retry validation/config errors
         "retry_log_level": "debug",
     },
 )
@@ -371,7 +432,7 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
             f"Created {total_chunks} chunks for source {input_data.source_id} "
             f"(sizes: min={min(chunk_sizes) if chunk_sizes else 0}, "
             f"max={max(chunk_sizes) if chunk_sizes else 0}, "
-            f"avg={sum(chunk_sizes)//len(chunk_sizes) if chunk_sizes else 0} chars)"
+            f"avg={sum(chunk_sizes) // len(chunk_sizes) if chunk_sizes else 0} chars)"
         )
 
         if total_chunks == 0:
@@ -440,6 +501,218 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
         raise
 
 
+@command(
+    "embed_single_item",
+    app="open_notebook",
+    retry={
+        "max_attempts": 5,
+        "wait_strategy": "exponential_jitter",
+        "wait_min": 1,
+        "wait_max": 60,
+        "stop_on": [ValueError, ConfigurationError],
+        "retry_log_level": "debug",
+    },
+)
+async def legacy_embed_single_item_command(
+    input_data: LegacyEmbedSingleItemInput,
+) -> LegacyEmbedSingleItemOutput:
+    """
+    Compatibility handler for pre-1.6 queued embed_single_item jobs.
+
+    New code submits embed_source, embed_note, or embed_insight directly. This
+    alias lets workers drain older queues after an upgrade.
+    """
+    start_time = time.time()
+
+    try:
+        logger.info(
+            f"Processing legacy embed_single_item for "
+            f"{input_data.item_type}: {input_data.item_id}"
+        )
+
+        if input_data.item_type == "source":
+            result = await embed_source_command(
+                EmbedSourceInput(
+                    source_id=input_data.item_id,
+                    execution_context=input_data.execution_context,
+                )
+            )
+            chunks_created = result.chunks_created
+        elif input_data.item_type == "note":
+            result = await embed_note_command(
+                EmbedNoteInput(
+                    note_id=input_data.item_id,
+                    execution_context=input_data.execution_context,
+                )
+            )
+            chunks_created = 0
+        elif input_data.item_type == "insight":
+            result = await embed_insight_command(
+                EmbedInsightInput(
+                    insight_id=input_data.item_id,
+                    execution_context=input_data.execution_context,
+                )
+            )
+            chunks_created = 0
+        else:
+            raise ValueError(f"Invalid item_type: {input_data.item_type}")
+
+        return LegacyEmbedSingleItemOutput(
+            success=result.success,
+            item_id=input_data.item_id,
+            item_type=input_data.item_type,
+            chunks_created=chunks_created,
+            processing_time=time.time() - start_time,
+            error_message=result.error_message,
+        )
+
+    except ValueError as e:
+        processing_time = time.time() - start_time
+        logger.error(
+            f"Failed legacy embed_single_item for "
+            f"{input_data.item_type} {input_data.item_id}: {e}"
+        )
+        return LegacyEmbedSingleItemOutput(
+            success=False,
+            item_id=input_data.item_id,
+            item_type=input_data.item_type,
+            processing_time=processing_time,
+            error_message=str(e),
+        )
+    except Exception as e:
+        logger.debug(
+            f"Transient error in legacy embed_single_item for "
+            f"{input_data.item_type} {input_data.item_id}: {e}"
+        )
+        raise
+
+
+@command(
+    "embed_chunk",
+    app="open_notebook",
+    retry={
+        "max_attempts": 5,
+        "wait_strategy": "exponential_jitter",
+        "wait_min": 1,
+        "wait_max": 60,
+        "stop_on": [ValueError, ConfigurationError],
+        "retry_log_level": "debug",
+    },
+)
+async def legacy_embed_chunk_command(
+    input_data: LegacyEmbedChunkInput,
+) -> LegacyEmbedChunkOutput:
+    """
+    Compatibility handler for pre-1.6 queued embed_chunk jobs.
+
+    The legacy vectorizer stored the full chunk payload in each job. Keeping this
+    command registered prevents upgraded workers from crashing on stale queues.
+    """
+    try:
+        logger.debug(
+            f"Processing legacy chunk {input_data.chunk_index} "
+            f"for source {input_data.source_id}"
+        )
+
+        cmd_id = get_command_id(input_data)
+        embedding = await generate_embedding(
+            input_data.chunk_text,
+            content_type=ContentType.PLAIN,
+            command_id=cmd_id,
+        )
+
+        await repo_query(
+            """
+            CREATE source_embedding CONTENT {
+                "source": $source_id,
+                "order": $order,
+                "content": $content,
+                "embedding": $embedding,
+            };
+            """,
+            {
+                "source_id": ensure_record_id(input_data.source_id),
+                "order": input_data.chunk_index,
+                "content": input_data.chunk_text,
+                "embedding": embedding,
+            },
+        )
+
+        return LegacyEmbedChunkOutput(
+            success=True,
+            source_id=input_data.source_id,
+            chunk_index=input_data.chunk_index,
+        )
+
+    except ValueError as e:
+        logger.error(
+            f"Failed legacy embed_chunk for source {input_data.source_id} "
+            f"chunk {input_data.chunk_index}: {e}"
+        )
+        return LegacyEmbedChunkOutput(
+            success=False,
+            source_id=input_data.source_id,
+            chunk_index=input_data.chunk_index,
+            error_message=str(e),
+        )
+    except Exception as e:
+        logger.debug(
+            f"Transient error in legacy embed_chunk for source "
+            f"{input_data.source_id} chunk {input_data.chunk_index}: {e}"
+        )
+        raise
+
+
+@command("vectorize_source", app="open_notebook", retry=None)
+async def legacy_vectorize_source_command(
+    input_data: LegacyVectorizeSourceInput,
+) -> LegacyVectorizeSourceOutput:
+    """
+    Compatibility handler for pre-1.6 queued vectorize_source jobs.
+
+    The old command submitted one job per chunk. Current embed_source does the
+    same source embedding work in one batch-aware command.
+    """
+    start_time = time.time()
+
+    try:
+        logger.info(f"Processing legacy vectorize_source for {input_data.source_id}")
+        result = await embed_source_command(
+            EmbedSourceInput(
+                source_id=input_data.source_id,
+                execution_context=input_data.execution_context,
+            )
+        )
+        jobs_submitted = 1 if result.success else 0
+
+        return LegacyVectorizeSourceOutput(
+            success=result.success,
+            source_id=input_data.source_id,
+            total_chunks=result.chunks_created,
+            jobs_submitted=jobs_submitted,
+            processing_time=time.time() - start_time,
+            error_message=result.error_message,
+        )
+
+    except ValueError as e:
+        processing_time = time.time() - start_time
+        logger.error(f"Failed legacy vectorize_source for {input_data.source_id}: {e}")
+        return LegacyVectorizeSourceOutput(
+            success=False,
+            source_id=input_data.source_id,
+            total_chunks=0,
+            jobs_submitted=0,
+            processing_time=processing_time,
+            error_message=str(e),
+        )
+    except Exception as e:
+        logger.debug(
+            f"Transient error in legacy vectorize_source for "
+            f"{input_data.source_id}: {e}"
+        )
+        raise
+
+
 @command(
     "create_insight",
     app="open_notebook",
@@ -448,7 +721,10 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+        ],  # Don't retry validation/config errors
         "retry_log_level": "debug",
     },
 )
diff --git a/tests/test_embedding_commands.py b/tests/test_embedding_commands.py
new file mode 100644
index 00000000..d3068605
--- /dev/null
+++ b/tests/test_embedding_commands.py
@@ -0,0 +1,102 @@
+from unittest.mock import AsyncMock
+
+import pytest
+from surreal_commands import registry
+
+import commands
+import commands.embedding_commands as embedding_commands
+
+
+def test_legacy_embedding_commands_are_registered():
+    app_commands = registry.list_commands()["open_notebook"]
+
+    assert "embed_chunk" in app_commands
+    assert "embed_single_item" in app_commands
+    assert "vectorize_source" in app_commands
+
+
+@pytest.mark.asyncio
+async def test_legacy_embed_chunk_processes_stale_queue_payload(monkeypatch):
+    mock_generate_embedding = AsyncMock(return_value=[0.1, 0.2, 0.3])
+    mock_repo_query = AsyncMock()
+
+    monkeypatch.setattr(
+        embedding_commands, "generate_embedding", mock_generate_embedding
+    )
+    monkeypatch.setattr(embedding_commands, "repo_query", mock_repo_query)
+    monkeypatch.setattr(
+        embedding_commands, "ensure_record_id", lambda value: f"record:{value}"
+    )
+
+    result = await embedding_commands.legacy_embed_chunk_command(
+        embedding_commands.LegacyEmbedChunkInput(
+            source_id="source:abc",
+            chunk_index=2,
+            chunk_text="queued legacy chunk",
+        )
+    )
+
+    assert result.success is True
+    assert result.source_id == "source:abc"
+    assert result.chunk_index == 2
+    mock_generate_embedding.assert_awaited_once_with(
+        "queued legacy chunk",
+        content_type=embedding_commands.ContentType.PLAIN,
+        command_id="unknown",
+    )
+    mock_repo_query.assert_awaited_once()
+    assert mock_repo_query.await_args is not None
+    assert mock_repo_query.await_args.args[1] == {
+        "source_id": "record:source:abc",
+        "order": 2,
+        "content": "queued legacy chunk",
+        "embedding": [0.1, 0.2, 0.3],
+    }
+
+
+@pytest.mark.asyncio
+async def test_legacy_vectorize_source_delegates_to_embed_source(monkeypatch):
+    async def fake_embed_source(input_data):
+        assert input_data.source_id == "source:abc"
+        return embedding_commands.EmbedSourceOutput(
+            success=True,
+            source_id=input_data.source_id,
+            chunks_created=3,
+            processing_time=0.1,
+        )
+
+    monkeypatch.setattr(embedding_commands, "embed_source_command", fake_embed_source)
+
+    result = await embedding_commands.legacy_vectorize_source_command(
+        embedding_commands.LegacyVectorizeSourceInput(source_id="source:abc")
+    )
+
+    assert result.success is True
+    assert result.source_id == "source:abc"
+    assert result.total_chunks == 3
+    assert result.jobs_submitted == 1
+
+
+@pytest.mark.asyncio
+async def test_legacy_embed_single_item_routes_insights(monkeypatch):
+    async def fake_embed_insight(input_data):
+        assert input_data.insight_id == "source_insight:abc"
+        return embedding_commands.EmbedInsightOutput(
+            success=True,
+            insight_id=input_data.insight_id,
+            processing_time=0.1,
+        )
+
+    monkeypatch.setattr(embedding_commands, "embed_insight_command", fake_embed_insight)
+
+    result = await embedding_commands.legacy_embed_single_item_command(
+        embedding_commands.LegacyEmbedSingleItemInput(
+            item_id="source_insight:abc",
+            item_type="insight",
+        )
+    )
+
+    assert result.success is True
+    assert result.item_id == "source_insight:abc"
+    assert result.item_type == "insight"
+    assert result.chunks_created == 0

From 78ecaaed1a7270f074e1d023410f217ca302565f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 13:23:50 -0300
Subject: [PATCH 096/345] chore(deps-dev): bump tar from 7.5.11 to 7.5.16 in
 /frontend (#920)

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.11 to 7.5.16.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.16)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 73bd4ab6..a90950dc 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -11547,9 +11547,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.11",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
-      "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==",
+      "version": "7.5.16",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
+      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {

From ed47d60d9cb5726c4f85dbe97f1a811a0721a46a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 13:24:39 -0300
Subject: [PATCH 097/345] chore(deps-dev): bump vite from 7.3.2 to 7.3.5 in
 /frontend (#921)

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.2 to 7.3.5.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.5/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.5/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a90950dc..a749d840 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -12184,9 +12184,9 @@
       }
     },
     "node_modules/vite": {
-      "version": "7.3.2",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.2.tgz",
-      "integrity": "sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==",
+      "version": "7.3.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-7.3.5.tgz",
+      "integrity": "sha512-KuOaNhcnGFN2zIPGA7wRmzF+lJA1sea7rHq17aiJ++9lzY1WWG6Jpwqwe1KNbRVPIqHmr8GLYx7jbrQcN/7/ww==",
       "dev": true,
       "license": "MIT",
       "dependencies": {

From 55996c0a4f52cf92e6db00d0f8fe4c1881ba65d1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 17 Jun 2026 13:25:24 -0300
Subject: [PATCH 098/345] chore(deps-dev): bump @babel/core from 7.28.6 to
 7.29.7 in /frontend (#922)

Bumps [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) from 7.28.6 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

---
updated-dependencies:
- dependency-name: "@babel/core"
  dependency-version: 7.29.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 219 +++++++++++++++++++------------------
 1 file changed, 111 insertions(+), 108 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a749d840..66114352 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -127,13 +127,13 @@
       "license": "ISC"
     },
     "node_modules/@babel/code-frame": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/code-frame/-/code-frame-7.28.6.tgz",
-      "integrity": "sha512-JYgintcMjRiCvS8mMECzaEn+m3PfoQiyqukOMCCVQtoJGYJw8j/8LBJEiqkHLkfwCcs74E3pbAUFNg7d9VNJ+Q==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
+      "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/helper-validator-identifier": "^7.28.5",
+        "@babel/helper-validator-identifier": "^7.29.7",
         "js-tokens": "^4.0.0",
         "picocolors": "^1.1.1"
       },
@@ -142,9 +142,9 @@
       }
     },
     "node_modules/@babel/compat-data": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/compat-data/-/compat-data-7.28.6.tgz",
-      "integrity": "sha512-2lfu57JtzctfIrcGMz992hyLlByuzgIk58+hhGCxjKZ3rWI82NnVLjXcaTqkI2NvlcvOskZaiZ5kjUALo3Lpxg==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.7.tgz",
+      "integrity": "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -152,21 +152,21 @@
       }
     },
     "node_modules/@babel/core": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/core/-/core-7.28.6.tgz",
-      "integrity": "sha512-H3mcG6ZDLTlYfaSNi0iOKkigqMFvkTKlGUYlD8GW7nNOYRrevuA46iTypPyv+06V3fEmvvazfntkBU34L0azAw==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz",
+      "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/code-frame": "^7.28.6",
-        "@babel/generator": "^7.28.6",
-        "@babel/helper-compilation-targets": "^7.28.6",
-        "@babel/helper-module-transforms": "^7.28.6",
-        "@babel/helpers": "^7.28.6",
-        "@babel/parser": "^7.28.6",
-        "@babel/template": "^7.28.6",
-        "@babel/traverse": "^7.28.6",
-        "@babel/types": "^7.28.6",
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-compilation-targets": "^7.29.7",
+        "@babel/helper-module-transforms": "^7.29.7",
+        "@babel/helpers": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7",
         "@jridgewell/remapping": "^2.3.5",
         "convert-source-map": "^2.0.0",
         "debug": "^4.1.0",
@@ -206,14 +206,14 @@
       }
     },
     "node_modules/@babel/generator": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/generator/-/generator-7.28.6.tgz",
-      "integrity": "sha512-lOoVRwADj8hjf7al89tvQ2a1lf53Z+7tiXMgpZJL3maQPDxh0DgLMN62B2MKUOFcoodBHLMbDM6WAbKgNy5Suw==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.7.tgz",
+      "integrity": "sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.28.6",
-        "@babel/types": "^7.28.6",
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7",
         "@jridgewell/gen-mapping": "^0.3.12",
         "@jridgewell/trace-mapping": "^0.3.28",
         "jsesc": "^3.0.2"
@@ -223,14 +223,14 @@
       }
     },
     "node_modules/@babel/helper-compilation-targets": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-compilation-targets/-/helper-compilation-targets-7.28.6.tgz",
-      "integrity": "sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz",
+      "integrity": "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/compat-data": "^7.28.6",
-        "@babel/helper-validator-option": "^7.27.1",
+        "@babel/compat-data": "^7.29.7",
+        "@babel/helper-validator-option": "^7.29.7",
         "browserslist": "^4.24.0",
         "lru-cache": "^5.1.1",
         "semver": "^6.3.1"
@@ -241,7 +241,7 @@
     },
     "node_modules/@babel/helper-compilation-targets/node_modules/semver": {
       "version": "6.3.1",
-      "resolved": "https://registry.npmmirror.com/semver/-/semver-6.3.1.tgz",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
       "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
       "dev": true,
       "license": "ISC",
@@ -250,9 +250,9 @@
       }
     },
     "node_modules/@babel/helper-globals": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-globals/-/helper-globals-7.28.0.tgz",
-      "integrity": "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.29.7.tgz",
+      "integrity": "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -260,29 +260,29 @@
       }
     },
     "node_modules/@babel/helper-module-imports": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-module-imports/-/helper-module-imports-7.28.6.tgz",
-      "integrity": "sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz",
+      "integrity": "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/traverse": "^7.28.6",
-        "@babel/types": "^7.28.6"
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7"
       },
       "engines": {
         "node": ">=6.9.0"
       }
     },
     "node_modules/@babel/helper-module-transforms": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-module-transforms/-/helper-module-transforms-7.28.6.tgz",
-      "integrity": "sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz",
+      "integrity": "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/helper-module-imports": "^7.28.6",
-        "@babel/helper-validator-identifier": "^7.28.5",
-        "@babel/traverse": "^7.28.6"
+        "@babel/helper-module-imports": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "@babel/traverse": "^7.29.7"
       },
       "engines": {
         "node": ">=6.9.0"
@@ -302,9 +302,9 @@
       }
     },
     "node_modules/@babel/helper-string-parser": {
-      "version": "7.27.1",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
-      "integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
+      "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -312,9 +312,9 @@
       }
     },
     "node_modules/@babel/helper-validator-identifier": {
-      "version": "7.28.5",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz",
-      "integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
+      "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -322,9 +322,9 @@
       }
     },
     "node_modules/@babel/helper-validator-option": {
-      "version": "7.27.1",
-      "resolved": "https://registry.npmmirror.com/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz",
-      "integrity": "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz",
+      "integrity": "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -332,27 +332,27 @@
       }
     },
     "node_modules/@babel/helpers": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/helpers/-/helpers-7.28.6.tgz",
-      "integrity": "sha512-xOBvwq86HHdB7WUDTfKfT/Vuxh7gElQ+Sfti2Cy6yIWNW05P8iUslOVcZ4/sKbE+/jQaukQAdz/gf3724kYdqw==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.7.tgz",
+      "integrity": "sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/template": "^7.28.6",
-        "@babel/types": "^7.28.6"
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.7"
       },
       "engines": {
         "node": ">=6.9.0"
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/parser/-/parser-7.28.6.tgz",
-      "integrity": "sha512-TeR9zWR18BvbfPmGbLampPMW+uW1NZnJlRuuHso8i87QZNq2JRF9i6RgxRqtEq+wQGsS19NNTWr2duhnE49mfQ==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.7.tgz",
+      "integrity": "sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/types": "^7.28.6"
+        "@babel/types": "^7.29.7"
       },
       "bin": {
         "parser": "bin/babel-parser.js"
@@ -402,33 +402,33 @@
       }
     },
     "node_modules/@babel/template": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/template/-/template-7.28.6.tgz",
-      "integrity": "sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz",
+      "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/code-frame": "^7.28.6",
-        "@babel/parser": "^7.28.6",
-        "@babel/types": "^7.28.6"
+        "@babel/code-frame": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7"
       },
       "engines": {
         "node": ">=6.9.0"
       }
     },
     "node_modules/@babel/traverse": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/traverse/-/traverse-7.28.6.tgz",
-      "integrity": "sha512-fgWX62k02qtjqdSNTAGxmKYY/7FSL9WAS1o2Hu5+I5m9T0yxZzr4cnrfXQ/MX0rIifthCSs6FKTlzYbJcPtMNg==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.29.7.tgz",
+      "integrity": "sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/code-frame": "^7.28.6",
-        "@babel/generator": "^7.28.6",
-        "@babel/helper-globals": "^7.28.0",
-        "@babel/parser": "^7.28.6",
-        "@babel/template": "^7.28.6",
-        "@babel/types": "^7.28.6",
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-globals": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.7",
         "debug": "^4.3.1"
       },
       "engines": {
@@ -436,14 +436,14 @@
       }
     },
     "node_modules/@babel/types": {
-      "version": "7.28.6",
-      "resolved": "https://registry.npmmirror.com/@babel/types/-/types-7.28.6.tgz",
-      "integrity": "sha512-0ZrskXVEHSWIqZM/sQZ4EV3jZJXRkio/WCxaqKZP1g//CEWEPSfeZFcms4XeKBCHU0ZKnIkdJeU/kF+eRp5lBg==",
+      "version": "7.29.7",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.7.tgz",
+      "integrity": "sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/helper-string-parser": "^7.27.1",
-        "@babel/helper-validator-identifier": "^7.28.5"
+        "@babel/helper-string-parser": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7"
       },
       "engines": {
         "node": ">=6.9.0"
@@ -5415,9 +5415,9 @@
       "dev": true
     },
     "node_modules/baseline-browser-mapping": {
-      "version": "2.10.8",
-      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.8.tgz",
-      "integrity": "sha512-PCLz/LXGBsNTErbtB6i5u4eLpHeMfi93aUv5duMmj6caNu6IphS4q6UevDnL36sZQv9lrP11dbPKGMaXPwMKfQ==",
+      "version": "2.10.37",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.37.tgz",
+      "integrity": "sha512-girxaJ7WZssDOFhzCGZTDKoTa1gk6A1TbflaYTpykLJ4UU9Fz9kx1aREM8JCuoVHbL8X8T/mJg7w2oYSq72Oig==",
       "license": "Apache-2.0",
       "bin": {
         "baseline-browser-mapping": "dist/cli.cjs"
@@ -5463,9 +5463,9 @@
       }
     },
     "node_modules/browserslist": {
-      "version": "4.28.1",
-      "resolved": "https://registry.npmmirror.com/browserslist/-/browserslist-4.28.1.tgz",
-      "integrity": "sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA==",
+      "version": "4.28.2",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.2.tgz",
+      "integrity": "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==",
       "dev": true,
       "funding": [
         {
@@ -5483,11 +5483,11 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "baseline-browser-mapping": "^2.9.0",
-        "caniuse-lite": "^1.0.30001759",
-        "electron-to-chromium": "^1.5.263",
-        "node-releases": "^2.0.27",
-        "update-browserslist-db": "^1.2.0"
+        "baseline-browser-mapping": "^2.10.12",
+        "caniuse-lite": "^1.0.30001782",
+        "electron-to-chromium": "^1.5.328",
+        "node-releases": "^2.0.36",
+        "update-browserslist-db": "^1.2.3"
       },
       "bin": {
         "browserslist": "cli.js"
@@ -5552,9 +5552,9 @@
       }
     },
     "node_modules/caniuse-lite": {
-      "version": "1.0.30001764",
-      "resolved": "https://registry.npmmirror.com/caniuse-lite/-/caniuse-lite-1.0.30001764.tgz",
-      "integrity": "sha512-9JGuzl2M+vPL+pz70gtMF9sHdMFbY9FJaQBi186cHKH3pSzDvzoUJUPV6fqiKIMyXbud9ZLg4F3Yza1vJ1+93g==",
+      "version": "1.0.30001799",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001799.tgz",
+      "integrity": "sha512-hG1bReV+OUU+MOqK4t/ZWI0tZOyz3rqS9XuhOUz1cIcbwBKjOyJEJuw9ER5JuNyqxNk8u/JUVbGibBOL1yrjFw==",
       "funding": [
         {
           "type": "opencollective",
@@ -6062,9 +6062,9 @@
       }
     },
     "node_modules/electron-to-chromium": {
-      "version": "1.5.267",
-      "resolved": "https://registry.npmmirror.com/electron-to-chromium/-/electron-to-chromium-1.5.267.tgz",
-      "integrity": "sha512-0Drusm6MVRXSOJpGbaSVgcQsuB4hEkMpHXaVstcPmhu5LIedxs1xNK/nIxmQIU/RPC0+1/o0AVZfBTkTNJOdUw==",
+      "version": "1.5.375",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.375.tgz",
+      "integrity": "sha512-ZWP5eB4BVPW/ZYo9252hQZHZ5XavtsTgpbhcmMmRwymavC5AsLWQWBPaKMeNd2LW0KGby5HPXvj7+sr4ta5j/Q==",
       "dev": true,
       "license": "ISC"
     },
@@ -6314,7 +6314,7 @@
     },
     "node_modules/escalade": {
       "version": "3.2.0",
-      "resolved": "https://registry.npmmirror.com/escalade/-/escalade-3.2.0.tgz",
+      "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
       "integrity": "sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==",
       "dev": true,
       "license": "MIT",
@@ -8254,7 +8254,7 @@
     },
     "node_modules/jsesc": {
       "version": "3.1.0",
-      "resolved": "https://registry.npmmirror.com/jsesc/-/jsesc-3.1.0.tgz",
+      "resolved": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz",
       "integrity": "sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==",
       "dev": true,
       "license": "MIT",
@@ -8647,7 +8647,7 @@
     },
     "node_modules/lru-cache": {
       "version": "5.1.1",
-      "resolved": "https://registry.npmmirror.com/lru-cache/-/lru-cache-5.1.1.tgz",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
       "integrity": "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==",
       "dev": true,
       "license": "ISC",
@@ -8657,7 +8657,7 @@
     },
     "node_modules/lru-cache/node_modules/yallist": {
       "version": "3.1.1",
-      "resolved": "https://registry.npmmirror.com/yallist/-/yallist-3.1.1.tgz",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",
       "integrity": "sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==",
       "dev": true,
       "license": "ISC"
@@ -9794,11 +9794,14 @@
       }
     },
     "node_modules/node-releases": {
-      "version": "2.0.27",
-      "resolved": "https://registry.npmmirror.com/node-releases/-/node-releases-2.0.27.tgz",
-      "integrity": "sha512-nmh3lCkYZ3grZvqcCH+fjmQ7X+H0OeZgP40OierEaAptX4XofMh5kwNbWh7lBduUzCcV/8kZ+NDLCwm2iorIlA==",
+      "version": "2.0.47",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.47.tgz",
+      "integrity": "sha512-Uzmd6LXpouKo8EUK68IjH4+E01w/hXyV3R3g/geCJo+rXLNfh1xucB+LOzYEOQPSiUK3h/xZf0cQGcSsmyL2Og==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
     },
     "node_modules/nth-check": {
       "version": "2.1.1",
@@ -12040,7 +12043,7 @@
     },
     "node_modules/update-browserslist-db": {
       "version": "1.2.3",
-      "resolved": "https://registry.npmmirror.com/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz",
+      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz",
       "integrity": "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==",
       "dev": true,
       "funding": [

From 90dc008a909dbf468d1a63c8d58baeed59e7bde3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 18 Jun 2026 07:44:05 -0300
Subject: [PATCH 099/345] chore(release): prepare v1.10.0 (#923)

* chore(release): prepare v1.10.0

* style: fix import ordering flagged by ruff

* fix(sources): return 404 for missing source and fix retry 500 from double-prefixed command id

- GET /sources/{id} mapped NotFoundError to a generic 500; now returns 404
- POST /sources/{id}/retry double-prefixed the command id (command:command:...),
  raising 'too many values to unpack' after queuing; align with the create path
- update retry test mock to realistic prefixed command id + guard against
  double-prefix; add 404 regression test

* fix(sources): mark failed extraction as failed so retry surfaces (#726)

content-core signals soft failures (unreachable/invalid URL) by returning
title=Error + 'Failed to extract content:' body instead of raising, and the
process_source command swallowed permanent ValueErrors into a success=False
result. Since surreal-commands marks a job completed when the function returns,
failed ingests showed status 'completed' and never offered the retry button.

- source graph: detect the content-core failure sentinel and raise
- process_source_command: re-raise ValueError (stop_on already prevents retry)
  so the job is marked failed and the source becomes retryable

* feat(notebook): per-type bulk context actions for sources and notes (#223)

- Sources context menu now offers 'insights only' (sources without insights
  are excluded rather than forced to full), 'full content', and 'exclude all'
- Add the same bulk Context menu to the Notes column (include all / exclude all)
- Bulk choices propagate to items loaded later via pagination
- New locale keys (includeAllInsights/includeAllFull) across all 14 locales
- Unit tests for the new bulk modes and note context helpers
---
 CHANGELOG.md                                  |  18 ++-
 api/routers/sources.py                        |   7 +-
 commands/CLAUDE.md                            |   5 +-
 commands/source_commands.py                   |  17 ++-
 .../app/(dashboard)/notebooks/[id]/page.tsx   |  42 ++++---
 .../notebooks/components/NotesColumn.tsx      |  25 ++++-
 .../notebooks/components/SourcesColumn.tsx    |  10 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   2 +
 frontend/src/lib/locales/ca-ES/index.ts       |   2 +
 frontend/src/lib/locales/de-DE/index.ts       |   2 +
 frontend/src/lib/locales/en-US/index.ts       |   2 +
 frontend/src/lib/locales/es-ES/index.ts       |   2 +
 frontend/src/lib/locales/fr-FR/index.ts       |   2 +
 frontend/src/lib/locales/it-IT/index.ts       |   2 +
 frontend/src/lib/locales/ja-JP/index.ts       |   2 +
 frontend/src/lib/locales/pl-PL/index.ts       |   2 +
 frontend/src/lib/locales/pt-BR/index.ts       |   2 +
 frontend/src/lib/locales/ru-RU/index.ts       |   2 +
 frontend/src/lib/locales/tr-TR/index.ts       |   2 +
 frontend/src/lib/locales/zh-CN/index.ts       |   2 +
 frontend/src/lib/locales/zh-TW/index.ts       |   2 +
 frontend/src/lib/utils/source-context.test.ts |  89 ++++++++++++++-
 frontend/src/lib/utils/source-context.ts      | 104 ++++++++++++++++--
 open_notebook/graphs/source.py                |  13 +++
 open_notebook/podcasts/migration.py           |   5 +-
 pyproject.toml                                |   2 +-
 tests/test_graphs.py                          |   1 -
 tests/test_sources_api.py                     |  26 ++++-
 uv.lock                                       |   2 +-
 29 files changed, 340 insertions(+), 54 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38cb54fc..5c7ce141 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,20 +7,36 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.10.0] - 2026-06-17
+
+### Security
+- Bumped **Starlette to 1.2.1** and **FastAPI to 0.136.3** to address **CVE-2026-48710** ("BadHost"), a denial-of-service in Starlette's host header handling (#859)
+
 ### Added
 - LaTeX math rendering in chat — inline (`$...$`) and display (`$$...$$`) expressions are now rendered with KaTeX (#606)
 - `NEXT_PUBLIC_API_TIMEOUT_MS` environment variable to configure the frontend API request timeout (default `600000` = 10 minutes; set `0` to disable). Lets slow/long-running chat models finish without editing source (#880)
-- Bulk include/exclude all sources from a notebook's chat context in one action, via a "Context" menu in the Sources column header — translated across all 14 locales (#223)
+- Bulk chat-context actions in a notebook, via a "Context" menu in the Sources and Notes column headers — translated across all 14 locales (#223):
+  - Sources: "Include all (insights only)" (sources without insights are left out rather than forced to full), "Include all (full content)", and "Exclude all from context"
+  - Notes: "Include all in context" / "Exclude all from context"
+- **Turkish (tr-TR) localization** — the UI is now fully translated into Turkish (#871)
 
 ### Changed
 - Failed source cards now show a prominent "Retry processing" button directly on the card instead of only inside the 3-dot dropdown; clicking it no longer also opens the source (the click was missing `stopPropagation`) (#726)
+- Docker base image updated to **Debian trixie** and **Node.js 22.x** (#914)
 
 ### Fixed
+- Podcast generation now uses the notebook's real content. `Notebook.get_context()` was missing, so generation ran against empty context; it now assembles source and note content as expected (#864)
+- `PUT` profile handlers now use `model_dump(exclude_unset=True)`, so partial updates no longer overwrite unspecified fields with defaults (#860)
+- OpenRouter embedding models are now correctly recognized via their embedding modality (#842)
 - Search and Ask results now use page-level scrolling instead of being confined to a cramped, height-capped (`60vh`) bottom container, so the full result set is readable (#882)
 - `POST /sources/{id}/retry` no longer returns `400 "Source is not associated with any notebooks"` for every source; it now queries the `reference` graph edge by its `in`/`out` columns instead of a non-existent `source` column (#861)
+- `POST /sources/{id}/retry` no longer returns a `500` ("too many values to unpack") after successfully queuing the retry job; the command ID was being double-prefixed (`command:command:…`) before being saved to the source. Retrying a failed source now succeeds and updates the source's command reference
+- `GET /sources/{id}` for a missing or deleted source now returns `404` instead of `500`; the handler caught `NotFoundError` in its generic `except` and mapped it to a server error
+- Sources that fail to ingest (e.g. an unreachable or invalid URL) are now marked `failed` instead of silently saved as `completed` with the extraction error as their body. This means the "Retry processing" button (#726) actually appears for the most common failure mode; previously the job returned a failure payload but the command still completed, so the source never reached a retryable state (#726)
 - Text search no longer returns a 500 when SurrealDB's `search::highlight` hits a "position overflow" on large or multi-byte document chunks; it now falls back to vector search and returns results (#648)
 - `POST /api/search` now rejects a non-positive `limit` with a `422` instead of passing `LIMIT -1`/`LIMIT 0` to SurrealDB (which caused a 500 or a silently empty result set) (#863)
 - Ollama `num_ctx` credential override is now persisted. The `credential` table gained a flexible `config` object (migration 15) and provider-specific tuning options are stored there instead of being dropped by the SCHEMAFULL table; future per-credential options can be added without a schema migration (#875)
+- Worker no longer crashes on queued jobs from older versions; legacy embedding command aliases (`embed_single_item`, `embed_chunk`, `vectorize_source`) are registered and delegate to the current commands so stale queues drain cleanly (#695, #876)
 
 ### Performance
 - Notebook source list no longer re-renders every `SourceCard` on unrelated state changes (layout toggles, context selection), and completed sources no longer each open a status-polling query. Both scaled with the number of sources and caused UI lag on large notebooks (#503)
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 15c53ca3..8d5c8492 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -33,7 +33,7 @@ from open_notebook.config import UPLOADS_FOLDER
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import Asset, Notebook, Source
 from open_notebook.domain.transformation import Transformation
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
@@ -679,6 +679,8 @@ async def get_source(source_id: str):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Source not found")
     except Exception as e:
         logger.error(f"Error fetching source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching source: {str(e)}")
@@ -904,7 +906,8 @@ async def retry_source_processing(source_id: str):
             )
 
             # Update source with new command ID
-            source.command = ensure_record_id(f"command:{command_id}")
+            # command_id already includes 'command:' prefix
+            source.command = ensure_record_id(command_id)
             await source.save()
 
             # Get current embedded chunks count
diff --git a/commands/CLAUDE.md b/commands/CLAUDE.md
index 708e8436..364f867d 100644
--- a/commands/CLAUDE.md
+++ b/commands/CLAUDE.md
@@ -14,7 +14,7 @@
 
 ### Other Commands
 
-- **`process_source_command`**: Ingests content through `source_graph`, creates embeddings (optional), and generates insights. Retries on transaction conflicts (exp. jitter, max 15×, 1-120s).
+- **`process_source_command`**: Ingests content through `source_graph`, creates embeddings (optional), and generates insights. Retries on transaction conflicts (exp. jitter, max 15×, 1-120s). Permanent failures (`ValueError`, e.g. unextractable content) are **re-raised** so the job is marked `failed` (and the source becomes retryable from the UI) rather than completing with a failure payload.
 - **`run_transformation_command`**: Runs a transformation on an existing source to generate an insight. Executes the transformation graph (LLM call) then creates insight via `create_insight_command`. Used by `POST /sources/{id}/insights` API endpoint. Retry: 5 attempts, exponential jitter 1-60s.
 - **`generate_podcast_command`**: Creates podcasts via podcast-creator library. Resolves model registry references and credentials for all profiles before invoking podcast-creator. Validates that outline_llm, transcript_llm, and voice_model are configured.
 - **`process_text_command`** (example): Test fixture for text operations (uppercase, lowercase, reverse, word_count).
@@ -62,7 +62,8 @@ async def process_source_command(input_data: SourceProcessingInput) -> SourcePro
         result = await source_graph.ainvoke({...})
         return SourceProcessingOutput(success=True, ...)
     except ValueError as e:
-        return SourceProcessingOutput(success=False, error_message=str(e))  # No retry
+        logger.error(f"Source processing failed (permanent): {e}")
+        raise  # stop_on=[ValueError] => no retry, job marked `failed`
     except Exception as e:
         raise  # Retry all other exceptions
 ```
diff --git a/commands/source_commands.py b/commands/source_commands.py
index 0edac246..b0b5ef89 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -139,15 +139,14 @@ async def process_source_command(
         )
 
     except ValueError as e:
-        # Validation errors are permanent failures - don't retry
-        processing_time = time.time() - start_time
-        logger.error(f"Source processing failed: {e}")
-        return SourceProcessingOutput(
-            success=False,
-            source_id=input_data.source_id,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
+        # Validation errors are permanent failures. Re-raise so surreal-commands
+        # marks the job as `failed` (stop_on=[ValueError] already prevents
+        # pointless retries). Returning a success=False result instead marks the
+        # job `completed` (is_success() checks job status, not the payload),
+        # which hid extraction failures and left the source without a retryable
+        # `failed` status in the UI.
+        logger.error(f"Source processing failed (permanent): {e}")
+        raise
     except Exception as e:
         # Transient failure - will be retried (surreal-commands logs final failure)
         logger.debug(
diff --git a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
index 84398115..2d856b5d 100644
--- a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
@@ -19,8 +19,12 @@ import { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs'
 import { FileText, StickyNote, MessageSquare } from 'lucide-react'
 import {
   applyBulkSourceContext,
+  applyBulkNoteContext,
   computeSourceSelections,
+  computeNoteSelections,
   type SourceContextDefault,
+  type SourceBulkAction,
+  type NoteContextDefault,
 } from '@/lib/utils/source-context'
 
 // Re-exported from the shared types module for backward compatibility; several
@@ -66,6 +70,9 @@ export default function NotebookPage() {
   // the same intent instead of reverting to "included" (#223/#915).
   const [sourceContextDefault, setSourceContextDefault] = useState<SourceContextDefault>('include')
 
+  // Same idea for notes loaded later (notes are binary: included/off).
+  const [noteContextDefault, setNoteContextDefault] = useState<NoteContextDefault>('include')
+
   // Initialize and update selections when sources load or change
   useEffect(() => {
     if (sources && sources.length > 0) {
@@ -78,19 +85,12 @@ export default function NotebookPage() {
 
   useEffect(() => {
     if (notes && notes.length > 0) {
-      setContextSelections(prev => {
-        const newNoteSelections = { ...prev.notes }
-        notes.forEach(note => {
-          // Only set default if not already set
-          if (!(note.id in newNoteSelections)) {
-            // Notes default to 'full'
-            newNoteSelections[note.id] = 'full'
-          }
-        })
-        return { ...prev, notes: newNoteSelections }
-      })
+      setContextSelections(prev => ({
+        ...prev,
+        notes: computeNoteSelections(prev.notes, notes, noteContextDefault),
+      }))
     }
-  }, [notes])
+  }, [notes, noteContextDefault])
 
   // Handler to update context selection
   const handleContextModeChange = (itemId: string, mode: ContextMode, type: 'source' | 'note') => {
@@ -103,9 +103,10 @@ export default function NotebookPage() {
     }))
   }
 
-  // Bulk include/exclude every source from the chat context at once (#223).
-  // Also records the action as the default for sources loaded later (#915).
-  const handleBulkSourceContext = (action: SourceContextDefault) => {
+  // Bulk-apply a context action (insights-only / full / exclude) to every
+  // source at once (#223). Also records the action as the default for sources
+  // loaded later (#915).
+  const handleBulkSourceContext = (action: SourceBulkAction) => {
     setSourceContextDefault(action)
     setContextSelections(prev => ({
       ...prev,
@@ -113,6 +114,15 @@ export default function NotebookPage() {
     }))
   }
 
+  // Bulk include/exclude every note from the chat context at once (#223).
+  const handleBulkNoteContext = (action: NoteContextDefault) => {
+    setNoteContextDefault(action)
+    setContextSelections(prev => ({
+      ...prev,
+      notes: applyBulkNoteContext(prev.notes, notes ?? [], action),
+    }))
+  }
+
   if (notebookLoading) {
     return (
       <div className="min-h-screen flex items-center justify-center">
@@ -186,6 +196,7 @@ export default function NotebookPage() {
                     notebookId={notebookId}
                     contextSelections={contextSelections.notes}
                     onContextModeChange={(noteId, mode) => handleContextModeChange(noteId, mode, 'note')}
+                    onBulkContextModeChange={handleBulkNoteContext}
                   />
                 )}
                 {mobileActiveTab === 'chat' && (
@@ -236,6 +247,7 @@ export default function NotebookPage() {
                 notebookId={notebookId}
                 contextSelections={contextSelections.notes}
                 onContextModeChange={(noteId, mode) => handleContextModeChange(noteId, mode, 'note')}
+                onBulkContextModeChange={handleBulkNoteContext}
               />
             </div>
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index cda02b39..cc222c68 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -10,7 +10,7 @@ import {
   DropdownMenuItem,
   DropdownMenuTrigger,
 } from '@/components/ui/dropdown-menu'
-import { Plus, StickyNote, Bot, User, MoreVertical, Trash2 } from 'lucide-react'
+import { Plus, StickyNote, Bot, User, MoreVertical, Trash2, ListChecks, ChevronDown } from 'lucide-react'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { Badge } from '@/components/ui/badge'
@@ -19,6 +19,7 @@ import { getDateLocale } from '@/lib/utils/date-locale'
 import { formatDistanceToNow } from 'date-fns'
 import { ContextToggle } from '@/components/common/ContextToggle'
 import { ContextMode } from '../[id]/page'
+import type { NoteContextDefault } from '@/lib/utils/source-context'
 import { useDeleteNote } from '@/lib/hooks/use-notes'
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
 import { CollapsibleColumn, createCollapseButton } from '@/components/notebooks/CollapsibleColumn'
@@ -31,6 +32,7 @@ interface NotesColumnProps {
   notebookId: string
   contextSelections?: Record<string, ContextMode>
   onContextModeChange?: (noteId: string, mode: ContextMode) => void
+  onBulkContextModeChange?: (action: NoteContextDefault) => void
 }
 
 export function NotesColumn({
@@ -38,7 +40,8 @@ export function NotesColumn({
   isLoading,
   notebookId,
   contextSelections,
-  onContextModeChange
+  onContextModeChange,
+  onBulkContextModeChange
 }: NotesColumnProps) {
   const { t, language } = useTranslation()
   const [showAddDialog, setShowAddDialog] = useState(false)
@@ -85,6 +88,24 @@ export function NotesColumn({
             <div className="flex items-center justify-between gap-2">
               <CardTitle className="text-lg">{t('common.notes')}</CardTitle>
               <div className="flex items-center gap-2">
+                {onBulkContextModeChange && notes && notes.length > 0 && (
+                  <DropdownMenu>
+                    <DropdownMenuTrigger asChild>
+                      <Button variant="ghost" size="sm" title={t('sources.bulkContext')}>
+                        <ListChecks className="h-4 w-4" />
+                        <ChevronDown className="h-4 w-4 ml-1" />
+                      </Button>
+                    </DropdownMenuTrigger>
+                    <DropdownMenuContent align="end">
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('include')}>
+                        {t('sources.includeAllInContext')}
+                      </DropdownMenuItem>
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('exclude')}>
+                        {t('sources.excludeAllFromContext')}
+                      </DropdownMenuItem>
+                    </DropdownMenuContent>
+                  </DropdownMenu>
+                )}
                 <Button
                   size="sm"
                   onClick={() => {
diff --git a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
index 22026149..859c31ce 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
@@ -20,6 +20,7 @@ import { useDeleteSource, useRetrySource, useRemoveSourceFromNotebook } from '@/
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { ContextMode } from '../[id]/page'
+import type { SourceBulkAction } from '@/lib/utils/source-context'
 import { CollapsibleColumn, createCollapseButton } from '@/components/notebooks/CollapsibleColumn'
 import { useNotebookColumnsStore } from '@/lib/stores/notebook-columns-store'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -32,7 +33,7 @@ interface SourcesColumnProps {
   onRefresh?: () => void
   contextSelections?: Record<string, ContextMode>
   onContextModeChange?: (sourceId: string, mode: ContextMode) => void
-  onBulkContextModeChange?: (action: 'include' | 'exclude') => void
+  onBulkContextModeChange?: (action: SourceBulkAction) => void
   // Pagination props
   hasNextPage?: boolean
   isFetchingNextPage?: boolean
@@ -169,8 +170,11 @@ export function SourcesColumn({
                       </Button>
                     </DropdownMenuTrigger>
                     <DropdownMenuContent align="end">
-                      <DropdownMenuItem onClick={() => onBulkContextModeChange('include')}>
-                        {t('sources.includeAllInContext')}
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('insights')}>
+                        {t('sources.includeAllInsights')}
+                      </DropdownMenuItem>
+                      <DropdownMenuItem onClick={() => onBulkContextModeChange('full')}>
+                        {t('sources.includeAllFull')}
                       </DropdownMenuItem>
                       <DropdownMenuItem onClick={() => onBulkContextModeChange('exclude')}>
                         {t('sources.excludeAllFromContext')}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 820c55cc..243e8ebd 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -264,6 +264,8 @@ export const bnIN = {
   sources: {
     bulkContext: "প্রসঙ্গ",
     includeAllInContext: "সবগুলো প্রসঙ্গে যোগ করুন",
+    includeAllInsights: "সব যোগ করুন (শুধু অন্তর্দৃষ্টি)",
+    includeAllFull: "সব যোগ করুন (সম্পূর্ণ বিষয়বস্তু)",
     excludeAllFromContext: "সবগুলো প্রসঙ্গ থেকে বাদ দিন",
     title: "উৎসগুলি",
     add: "উৎস যোগ করুন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index d69fc9e4..5af20f73 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -264,6 +264,8 @@ export const caES = {
   sources: {
     bulkContext: "Context",
     includeAllInContext: "Inclou-les totes al context",
+    includeAllInsights: "Inclou-les totes (només informacions)",
+    includeAllFull: "Inclou-les totes (contingut complet)",
     excludeAllFromContext: "Exclou-les totes del context",
     title: "Fonts",
     add: "Afegeix una font",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index f9c033eb..b7c1075b 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -267,6 +267,8 @@ export const deDE = {
   sources: {
     bulkContext: "Kontext",
     includeAllInContext: "Alle in den Kontext aufnehmen",
+    includeAllInsights: "Alle aufnehmen (nur Erkenntnisse)",
+    includeAllFull: "Alle aufnehmen (vollständiger Inhalt)",
     excludeAllFromContext: "Alle aus dem Kontext ausschließen",
     title: "Quellen",
     add: "Quelle hinzufügen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index a9448084..1bc1e905 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -265,6 +265,8 @@ export const enUS = {
     title: "Sources",
     bulkContext: "Context",
     includeAllInContext: "Include all in context",
+    includeAllInsights: "Include all (insights only)",
+    includeAllFull: "Include all (full content)",
     excludeAllFromContext: "Exclude all from context",
     add: "Add Source",
     addNew: "Add New Source",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 073c8e3c..5917f007 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -264,6 +264,8 @@ export const esES = {
   sources: {
     bulkContext: "Contexto",
     includeAllInContext: "Incluir todas en el contexto",
+    includeAllInsights: "Incluir todas (solo insights)",
+    includeAllFull: "Incluir todas (contenido completo)",
     excludeAllFromContext: "Excluir todas del contexto",
     title: "Fuentes",
     add: "Agregar fuente",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index cdbd1382..259c9fbb 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -264,6 +264,8 @@ export const frFR = {
   sources: {
     bulkContext: "Contexte",
     includeAllInContext: "Tout inclure dans le contexte",
+    includeAllInsights: "Tout inclure (aperçus uniquement)",
+    includeAllFull: "Tout inclure (contenu complet)",
     excludeAllFromContext: "Tout exclure du contexte",
     title: "Sources",
     add: "Ajouter une source",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 1cac8922..839ab17c 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -264,6 +264,8 @@ export const itIT = {
   sources: {
     bulkContext: "Contesto",
     includeAllInContext: "Includi tutte nel contesto",
+    includeAllInsights: "Includi tutte (solo approfondimenti)",
+    includeAllFull: "Includi tutte (contenuto completo)",
     excludeAllFromContext: "Escludi tutte dal contesto",
     title: "Fonti",
     add: "Aggiungi fonte",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index f70eaa30..7704c084 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -264,6 +264,8 @@ export const jaJP = {
   sources: {
     bulkContext: "コンテキスト",
     includeAllInContext: "すべてをコンテキストに含める",
+    includeAllInsights: "すべて含める（インサイトのみ）",
+    includeAllFull: "すべて含める（全文）",
     excludeAllFromContext: "すべてをコンテキストから除外",
     title: "ソース",
     add: "ソースを追加",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index e8315784..8ff3174c 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -264,6 +264,8 @@ export const plPL = {
   sources: {
     bulkContext: "Kontekst",
     includeAllInContext: "Uwzględnij wszystkie w kontekście",
+    includeAllInsights: "Uwzględnij wszystkie (tylko wnioski)",
+    includeAllFull: "Uwzględnij wszystkie (pełna treść)",
     excludeAllFromContext: "Wyklucz wszystkie z kontekstu",
     title: "Źródła",
     add: "Dodaj źródło",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 5beab90a..b6da2912 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -264,6 +264,8 @@ export const ptBR = {
   sources: {
     bulkContext: "Contexto",
     includeAllInContext: "Incluir todas no contexto",
+    includeAllInsights: "Incluir todas (apenas insights)",
+    includeAllFull: "Incluir todas (conteúdo completo)",
     excludeAllFromContext: "Excluir todas do contexto",
     title: "Fontes",
     add: "Adicionar Fonte",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index a2d8512a..b202faf1 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -264,6 +264,8 @@ export const ruRU = {
   sources: {
     bulkContext: "Контекст",
     includeAllInContext: "Включить все в контекст",
+    includeAllInsights: "Включить все (только выводы)",
+    includeAllFull: "Включить все (полный текст)",
     excludeAllFromContext: "Исключить все из контекста",
     title: "Источники",
     add: "Добавить источник",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 9384006f..d3a8a899 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -264,6 +264,8 @@ export const trTR = {
   sources: {
     bulkContext: "Bağlam",
     includeAllInContext: "Tümünü bağlama dahil et",
+    includeAllInsights: "Tümünü dahil et (yalnızca içgörüler)",
+    includeAllFull: "Tümünü dahil et (tam içerik)",
     excludeAllFromContext: "Tümünü bağlamdan çıkar",
     title: "Kaynaklar",
     add: "Kaynak Ekle",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 0d970ae6..51ff72c0 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -264,6 +264,8 @@ export const zhCN = {
   sources: {
     bulkContext: "上下文",
     includeAllInContext: "全部加入上下文",
+    includeAllInsights: "全部加入（仅见解）",
+    includeAllFull: "全部加入（完整内容）",
     excludeAllFromContext: "全部移出上下文",
     title: "来源",
     add: "添加来源",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index c047ac8b..70993552 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -264,6 +264,8 @@ export const zhTW = {
   sources: {
     bulkContext: "上下文",
     includeAllInContext: "全部加入上下文",
+    includeAllInsights: "全部加入（僅見解）",
+    includeAllFull: "全部加入（完整內容）",
     excludeAllFromContext: "全部移出上下文",
     title: "來源",
     add: "新增來源",
diff --git a/frontend/src/lib/utils/source-context.test.ts b/frontend/src/lib/utils/source-context.test.ts
index 012adeaa..808d74a7 100644
--- a/frontend/src/lib/utils/source-context.test.ts
+++ b/frontend/src/lib/utils/source-context.test.ts
@@ -1,11 +1,15 @@
 import { describe, it, expect } from 'vitest'
 import {
+  applyBulkNoteContext,
   applyBulkSourceContext,
+  bulkModeForSource,
+  computeNoteSelections,
   computeSourceSelections,
   includedMode,
 } from './source-context'
 
 const src = (id: string, insights_count = 0) => ({ id, insights_count })
+const note = (id: string) => ({ id })
 
 describe('includedMode', () => {
   it('prefers insights when available, else full', () => {
@@ -14,6 +18,22 @@ describe('includedMode', () => {
   })
 })
 
+describe('bulkModeForSource', () => {
+  it('insights-only leaves sources without insights excluded', () => {
+    expect(bulkModeForSource('insights', 0)).toBe('off')
+    expect(bulkModeForSource('insights', 2)).toBe('insights')
+  })
+
+  it('full forces full content regardless of insights', () => {
+    expect(bulkModeForSource('full', 0)).toBe('full')
+    expect(bulkModeForSource('full', 5)).toBe('full')
+  })
+
+  it('exclude turns everything off', () => {
+    expect(bulkModeForSource('exclude', 5)).toBe('off')
+  })
+})
+
 describe('computeSourceSelections', () => {
   it('defaults new sources to included (insights/full)', () => {
     const result = computeSourceSelections({}, [src('s:1', 2), src('s:2', 0)], 'include')
@@ -25,6 +45,16 @@ describe('computeSourceSelections', () => {
     expect(result).toEqual({ 's:1': 'off', 's:2': 'off' })
   })
 
+  it('applies an insights-only default to later-loaded sources', () => {
+    const result = computeSourceSelections({}, [src('s:1', 2), src('s:2', 0)], 'insights')
+    expect(result).toEqual({ 's:1': 'insights', 's:2': 'off' })
+  })
+
+  it('applies a full default to later-loaded sources', () => {
+    const result = computeSourceSelections({}, [src('s:1', 2), src('s:2', 0)], 'full')
+    expect(result).toEqual({ 's:1': 'full', 's:2': 'full' })
+  })
+
   it('preserves existing explicit selections', () => {
     const existing = { 's:1': 'off' as const }
     const result = computeSourceSelections(existing, [src('s:1', 2), src('s:2', 0)], 'include')
@@ -32,17 +62,18 @@ describe('computeSourceSelections', () => {
     expect(result['s:2']).toBe('full')
   })
 
-  it('upgrades a full source to insights once it has insights', () => {
-    const result = computeSourceSelections({ 's:1': 'full' }, [src('s:1', 5)], 'include')
-    expect(result['s:1']).toBe('insights')
+  it('upgrades a full source to insights once it has insights (implicit default only)', () => {
+    expect(computeSourceSelections({ 's:1': 'full' }, [src('s:1', 5)], 'include')['s:1']).toBe('insights')
+  })
+
+  it('does not auto-upgrade an explicit full bulk choice', () => {
+    expect(computeSourceSelections({ 's:1': 'full' }, [src('s:1', 5)], 'full')['s:1']).toBe('full')
   })
 
   it('keeps later-loaded sources excluded after an exclude-all (regression for #915)', () => {
-    // exclude-all over the first page
     let selections = applyBulkSourceContext({}, [src('s:1', 0), src('s:2', 1)], 'exclude')
     expect(selections).toEqual({ 's:1': 'off', 's:2': 'off' })
 
-    // a second page loads; with the exclude default the new sources stay excluded
     selections = computeSourceSelections(
       selections,
       [src('s:1', 0), src('s:2', 1), src('s:3', 4), src('s:4', 0)],
@@ -70,4 +101,52 @@ describe('applyBulkSourceContext', () => {
     )
     expect(result).toEqual({ 's:1': 'full', 's:2': 'insights' })
   })
+
+  it('insights-only includes sources with insights and excludes the rest', () => {
+    const result = applyBulkSourceContext(
+      { 's:1': 'full', 's:2': 'off' },
+      [src('s:1', 0), src('s:2', 3)],
+      'insights',
+    )
+    expect(result).toEqual({ 's:1': 'off', 's:2': 'insights' })
+  })
+
+  it('full forces full content on every source', () => {
+    const result = applyBulkSourceContext(
+      { 's:1': 'off', 's:2': 'insights' },
+      [src('s:1', 0), src('s:2', 3)],
+      'full',
+    )
+    expect(result).toEqual({ 's:1': 'full', 's:2': 'full' })
+  })
+})
+
+describe('note context', () => {
+  it('defaults new notes to full (included)', () => {
+    expect(computeNoteSelections({}, [note('n:1'), note('n:2')], 'include')).toEqual({
+      'n:1': 'full',
+      'n:2': 'full',
+    })
+  })
+
+  it('defaults new notes to off when excluded', () => {
+    expect(computeNoteSelections({}, [note('n:1')], 'exclude')).toEqual({ 'n:1': 'off' })
+  })
+
+  it('preserves existing note selections', () => {
+    expect(computeNoteSelections({ 'n:1': 'off' }, [note('n:1'), note('n:2')], 'include')).toEqual({
+      'n:1': 'off',
+      'n:2': 'full',
+    })
+  })
+
+  it('bulk includes/excludes all notes', () => {
+    expect(applyBulkNoteContext({ 'n:1': 'off' }, [note('n:1'), note('n:2')], 'include')).toEqual({
+      'n:1': 'full',
+      'n:2': 'full',
+    })
+    expect(applyBulkNoteContext({ 'n:1': 'full' }, [note('n:1')], 'exclude')).toEqual({
+      'n:1': 'off',
+    })
+  })
 })
diff --git a/frontend/src/lib/utils/source-context.ts b/frontend/src/lib/utils/source-context.ts
index 02e60cb5..e2f41b4b 100644
--- a/frontend/src/lib/utils/source-context.ts
+++ b/frontend/src/lib/utils/source-context.ts
@@ -1,6 +1,19 @@
 import type { ContextMode } from '@/lib/types/notebook-context'
 
-export type SourceContextDefault = 'include' | 'exclude'
+/**
+ * Bulk context actions for sources:
+ * - `include`  → each source's sensible included mode (insights if available, else full)
+ * - `insights` → insights when the source has them, otherwise excluded (don't force full)
+ * - `full`     → full content for every source
+ * - `exclude`  → excluded from context
+ *
+ * `include` is the implicit default applied on first load; `insights`, `full`
+ * and `exclude` are the explicit bulk actions offered in the column header.
+ */
+export type SourceContextDefault = 'include' | 'insights' | 'full' | 'exclude'
+
+/** The subset of actions surfaced as explicit bulk menu items. */
+export type SourceBulkAction = Exclude<SourceContextDefault, 'include'>
 
 interface SourceLike {
   id: string
@@ -12,13 +25,33 @@ export function includedMode(insightsCount: number): ContextMode {
   return insightsCount > 0 ? 'insights' : 'full'
 }
 
+/** Resolve the context mode a bulk action implies for a single source. */
+export function bulkModeForSource(
+  mode: SourceContextDefault,
+  insightsCount: number,
+): ContextMode {
+  switch (mode) {
+    case 'exclude':
+      return 'off'
+    case 'full':
+      return 'full'
+    case 'insights':
+      // "insights only" must not force a mode on sources without insights —
+      // those are left out of context entirely (#223).
+      return insightsCount > 0 ? 'insights' : 'off'
+    case 'include':
+    default:
+      return includedMode(insightsCount)
+  }
+}
+
 /**
  * Compute chat-context selections for a batch of sources while preserving
  * existing choices.
  *
- * Newly-seen sources adopt `defaultMode`, so a prior bulk include/exclude also
- * governs sources that load later via pagination — otherwise "exclude all"
- * would silently miss sources loaded after the action (#223/#915).
+ * Newly-seen sources adopt `defaultMode`, so a prior bulk action also governs
+ * sources that load later via pagination — otherwise a bulk action would
+ * silently miss sources loaded after it (#223/#915).
  */
 export function computeSourceSelections(
   existing: Record<string, ContextMode>,
@@ -29,17 +62,18 @@ export function computeSourceSelections(
   for (const source of sources) {
     const current = next[source.id]
     if (current === undefined) {
-      next[source.id] =
-        defaultMode === 'exclude' ? 'off' : includedMode(source.insights_count)
-    } else if (current === 'full' && source.insights_count > 0) {
-      // Source gained insights while in 'full' mode — prefer the leaner insights.
+      next[source.id] = bulkModeForSource(defaultMode, source.insights_count)
+    } else if (defaultMode === 'include' && current === 'full' && source.insights_count > 0) {
+      // Auto-upgrade only under the implicit default: a source included as
+      // 'full' (because it had no insights yet) prefers leaner insights once
+      // they exist. An explicit 'full' bulk choice is left untouched.
       next[source.id] = 'insights'
     }
   }
   return next
 }
 
-/** Apply a uniform bulk include/exclude to every given source. */
+/** Apply a uniform bulk context action to every given source. */
 export function applyBulkSourceContext(
   existing: Record<string, ContextMode>,
   sources: SourceLike[],
@@ -47,7 +81,57 @@ export function applyBulkSourceContext(
 ): Record<string, ContextMode> {
   const next = { ...existing }
   for (const source of sources) {
-    next[source.id] = action === 'exclude' ? 'off' : includedMode(source.insights_count)
+    next[source.id] = bulkModeForSource(action, source.insights_count)
+  }
+  return next
+}
+
+// ---------------------------------------------------------------------------
+// Notes
+//
+// Notes have no insights, so their context is binary: included (full) or off.
+// ---------------------------------------------------------------------------
+
+/** Bulk context actions for notes. `include` maps to full content. */
+export type NoteContextDefault = 'include' | 'exclude'
+
+interface NoteLike {
+  id: string
+}
+
+/** Resolve the context mode a bulk action implies for a single note. */
+export function bulkModeForNote(action: NoteContextDefault): ContextMode {
+  return action === 'exclude' ? 'off' : 'full'
+}
+
+/**
+ * Compute chat-context selections for a batch of notes while preserving
+ * existing choices. Newly-seen notes adopt `defaultAction` so a prior bulk
+ * action also governs notes that load later.
+ */
+export function computeNoteSelections(
+  existing: Record<string, ContextMode>,
+  notes: NoteLike[],
+  defaultAction: NoteContextDefault = 'include',
+): Record<string, ContextMode> {
+  const next = { ...existing }
+  for (const note of notes) {
+    if (next[note.id] === undefined) {
+      next[note.id] = bulkModeForNote(defaultAction)
+    }
+  }
+  return next
+}
+
+/** Apply a uniform bulk context action to every given note. */
+export function applyBulkNoteContext(
+  existing: Record<string, ContextMode>,
+  notes: NoteLike[],
+  action: NoteContextDefault,
+): Record<string, ContextMode> {
+  const next = { ...existing }
+  for (const note of notes) {
+    next[note.id] = bulkModeForNote(action)
   }
   return next
 }
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index 617396b7..7ae6766c 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -77,6 +77,19 @@ async def content_process(state: SourceState) -> dict:
 
     processed_state = await extract_content(content_state)
 
+    # content-core signals a soft extraction failure (e.g. an unreachable or
+    # invalid URL) by returning title="Error" and content prefixed with
+    # "Failed to extract content:" instead of raising. Detect that sentinel and
+    # raise so the job is marked failed and the source becomes retryable, rather
+    # than being saved as a "completed" source whose body is the error string.
+    if processed_state.title == "Error" and (processed_state.content or "").startswith(
+        "Failed to extract content:"
+    ):
+        raise ValueError(
+            "Could not extract content from this source. "
+            "The URL or file may be unreachable, invalid, or in an unsupported format."
+        )
+
     if not processed_state.content or not processed_state.content.strip():
         url = processed_state.url or ""
         if url and ("youtube.com" in url or "youtu.be" in url):
diff --git a/open_notebook/podcasts/migration.py b/open_notebook/podcasts/migration.py
index d238d456..1ee0eedb 100644
--- a/open_notebook/podcasts/migration.py
+++ b/open_notebook/podcasts/migration.py
@@ -162,7 +162,10 @@ async def migrate_podcast_profiles() -> None:
                 tts_provider, tts_model, "text_to_speech"
             )
             if model_id:
-                from open_notebook.database.repository import ensure_record_id, repo_update
+                from open_notebook.database.repository import (
+                    ensure_record_id,
+                    repo_update,
+                )
 
                 await repo_update(
                     "speaker_profile",
diff --git a/pyproject.toml b/pyproject.toml
index cee9fc8b..aeb5cac5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.9.0"
+version = "1.10.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 259d0957..02406cae 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -11,7 +11,6 @@ from unittest.mock import AsyncMock, MagicMock, patch
 import pytest
 
 from open_notebook.domain.notebook import Source
-
 from open_notebook.graphs.prompt import PatternChainState, graph
 from open_notebook.graphs.tools import get_current_timestamp
 from open_notebook.graphs.transformation import (
diff --git a/tests/test_sources_api.py b/tests/test_sources_api.py
index c18ea426..ae9e7540 100644
--- a/tests/test_sources_api.py
+++ b/tests/test_sources_api.py
@@ -162,7 +162,9 @@ class TestRetrySourceProcessing:
 
         # The corrected query returns the linked notebook(s)
         mock_repo_query.return_value = ["notebook:1"]
-        mock_submit.return_value = "123"
+        # submit_command_job returns str(RecordID), which already includes the
+        # "command:" table prefix.
+        mock_submit.return_value = "command:123"
 
         response = client.post("/api/sources/source:1/retry")
 
@@ -171,6 +173,11 @@ class TestRetrySourceProcessing:
         called_query = mock_repo_query.await_args.args[0]
         assert "WHERE in = $source_id" in called_query
         assert "SELECT VALUE out FROM reference" in called_query
+        # Regression guard: command_id must not be double-prefixed
+        # (`command:command:…`), which previously raised a 500 on save.
+        assert "command:command" not in str(source.command)
+        assert str(source.command).count("command:") == 1
+        assert str(source.command).startswith("command:")
 
     @pytest.mark.asyncio
     @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
@@ -190,5 +197,22 @@ class TestRetrySourceProcessing:
         assert "not associated with any notebooks" in response.json()["detail"]
 
 
+class TestGetSourceNotFound:
+    """GET /sources/{id} must return 404 (not 500) for a missing/deleted source.
+    `Source.get()` raises NotFoundError rather than returning None, so the handler
+    must map it to 404 instead of catching it in its generic `except`."""
+
+    @pytest.mark.asyncio
+    @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
+    async def test_get_missing_source_returns_404(self, mock_get, client):
+        from open_notebook.exceptions import NotFoundError
+
+        mock_get.side_effect = NotFoundError("source with id source:gone not found")
+
+        response = client.get("/api/sources/source:gone")
+
+        assert response.status_code == 404
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
diff --git a/uv.lock b/uv.lock
index ac0735c4..bba82c39 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2093,7 +2093,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.9.0"
+version = "1.10.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 7c4dd6cd896b88974410d404f75ffccdc4686013 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 18 Jun 2026 08:23:28 -0300
Subject: [PATCH 100/345] fix(api): return 404 instead of 500 for missing
 resources in CRUD endpoints (#862) (#924)

* fix(api): return 404 instead of 500 for missing resources in CRUD endpoints (#862)

ObjectModel.get() raises NotFoundError for a missing record (never returns a
falsy value), so the 'if not obj: 404' guards were dead code and each handler's
broad 'except Exception' re-raised NotFoundError as 500, never hitting the global
NotFoundError->404 handler.

Add an explicit 'except NotFoundError -> 404' arm to the affected handlers in
notebooks, notes, models, credentials and embedding routers, plus regression
tests asserting 404 (not 500) when .get() raises NotFoundError.

* refactor(api): remove dead 'if not obj' guards after .get() (cubic #924)

Now that each handler maps NotFoundError -> 404, the 'if not obj: raise 404'
guards are unreachable (.get() raises rather than returning a falsy value).
Drop them; where the fetched object was only used by the guard, keep the .get()
call for its existence-validation side effect without binding an unused var.
---
 CHANGELOG.md               |   3 +
 api/routers/credentials.py |   5 ++
 api/routers/embedding.py   |   9 +--
 api/routers/models.py      |   6 +-
 api/routers/notebooks.py   |  36 +++++-----
 api/routers/notes.py       |  25 +++----
 tests/test_crud_404.py     | 131 +++++++++++++++++++++++++++++++++++++
 7 files changed, 176 insertions(+), 39 deletions(-)
 create mode 100644 tests/test_crud_404.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5c7ce141..f40a1260 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
+
 ## [1.10.0] - 2026-06-17
 
 ### Security
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index ede05eea..cc2524d6 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -56,6 +56,7 @@ from api.models import (
 )
 from open_notebook.database.repository import ensure_record_id, repo_delete, repo_query
 from open_notebook.domain.credential import Credential
+from open_notebook.exceptions import NotFoundError
 
 router = APIRouter(prefix="/credentials", tags=["credentials"])
 
@@ -251,6 +252,8 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
 
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Credential not found")
     except Exception as e:
         logger.error(f"Error updating credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to update credential")
@@ -344,6 +347,8 @@ async def delete_credential(
 
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Credential not found")
     except Exception as e:
         logger.error(f"Error deleting credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to delete credential")
diff --git a/api/routers/embedding.py b/api/routers/embedding.py
index 0e6f5cb6..c4310a64 100644
--- a/api/routers/embedding.py
+++ b/api/routers/embedding.py
@@ -5,6 +5,7 @@ from api.command_service import CommandService
 from api.models import EmbedRequest, EmbedResponse
 from open_notebook.ai.models import model_manager
 from open_notebook.domain.notebook import Note, Source
+from open_notebook.exceptions import NotFoundError
 
 router = APIRouter()
 
@@ -78,8 +79,6 @@ async def embed_content(embed_request: EmbedRequest):
             # Get the item and submit embedding job
             if item_type == "source":
                 source_item = await Source.get(item_id)
-                if not source_item:
-                    raise HTTPException(status_code=404, detail="Source not found")
 
                 # Submit embed_source job (returns command_id for tracking)
                 command_id = await source_item.vectorize()
@@ -87,8 +86,6 @@ async def embed_content(embed_request: EmbedRequest):
 
             elif item_type == "note":
                 note_item = await Note.get(item_id)
-                if not note_item:
-                    raise HTTPException(status_code=404, detail="Note not found")
 
                 # Note.save() internally submits embed_note command and returns command_id
                 command_id = await note_item.save()
@@ -104,6 +101,10 @@ async def embed_content(embed_request: EmbedRequest):
 
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(
+            status_code=404, detail=f"{embed_request.item_type} not found"
+        )
     except Exception as e:
         logger.error(
             f"Error embedding {embed_request.item_type} {embed_request.item_id}: {str(e)}"
diff --git a/api/routers/models.py b/api/routers/models.py
index 83f562cf..f25bdbd2 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -23,7 +23,7 @@ from open_notebook.ai.model_discovery import (
 )
 from open_notebook.ai.models import DefaultModels, Model
 from open_notebook.domain.credential import Credential
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
@@ -254,14 +254,14 @@ async def delete_model(model_id: str):
     """Delete a model configuration."""
     try:
         model = await Model.get(model_id)
-        if not model:
-            raise HTTPException(status_code=404, detail="Model not found")
 
         await model.delete()
 
         return {"message": "Model deleted successfully"}
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Model not found")
     except Exception as e:
         logger.error(f"Error deleting model {model_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error deleting model: {str(e)}")
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index fd08e44b..3b026698 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -12,7 +12,7 @@ from api.models import (
 )
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import Notebook, Source
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
@@ -122,8 +122,6 @@ async def get_notebook_delete_preview(notebook_id: str):
     """Get a preview of what will be deleted when this notebook is deleted."""
     try:
         notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
 
         preview = await notebook.get_delete_preview()
 
@@ -136,6 +134,8 @@ async def get_notebook_delete_preview(notebook_id: str):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except Exception as e:
         logger.error(f"Error getting delete preview for notebook {notebook_id}: {e}")
         raise HTTPException(
@@ -185,8 +185,6 @@ async def update_notebook(notebook_id: str, notebook_update: NotebookUpdate):
     """Update a notebook."""
     try:
         notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
 
         # Update only provided fields
         if notebook_update.name is not None:
@@ -233,6 +231,8 @@ async def update_notebook(notebook_id: str, notebook_update: NotebookUpdate):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
@@ -246,15 +246,9 @@ async def update_notebook(notebook_id: str, notebook_update: NotebookUpdate):
 async def add_source_to_notebook(notebook_id: str, source_id: str):
     """Add an existing source to a notebook (create the reference)."""
     try:
-        # Check if notebook exists
-        notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
-
-        # Check if source exists
-        source = await Source.get(source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
+        # Verify the notebook and source exist (raises NotFoundError -> 404)
+        await Notebook.get(notebook_id)
+        await Source.get(source_id)
 
         # Check if reference already exists (idempotency)
         existing_ref = await repo_query(
@@ -278,6 +272,8 @@ async def add_source_to_notebook(notebook_id: str, source_id: str):
         return {"message": "Source linked to notebook successfully"}
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook or source not found")
     except Exception as e:
         logger.error(
             f"Error linking source {source_id} to notebook {notebook_id}: {str(e)}"
@@ -291,10 +287,8 @@ async def add_source_to_notebook(notebook_id: str, source_id: str):
 async def remove_source_from_notebook(notebook_id: str, source_id: str):
     """Remove a source from a notebook (delete the reference)."""
     try:
-        # Check if notebook exists
-        notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
+        # Verify the notebook exists (raises NotFoundError -> 404)
+        await Notebook.get(notebook_id)
 
         # Delete the reference record linking source to notebook
         await repo_query(
@@ -308,6 +302,8 @@ async def remove_source_from_notebook(notebook_id: str, source_id: str):
         return {"message": "Source removed from notebook successfully"}
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except Exception as e:
         logger.error(
             f"Error removing source {source_id} from notebook {notebook_id}: {str(e)}"
@@ -334,8 +330,6 @@ async def delete_notebook(
     """
     try:
         notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
 
         result = await notebook.delete(delete_exclusive_sources=delete_exclusive_sources)
 
@@ -347,6 +341,8 @@ async def delete_notebook(
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except Exception as e:
         logger.error(f"Error deleting notebook {notebook_id}: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/notes.py b/api/routers/notes.py
index ddc8f15d..d5a6acb9 100644
--- a/api/routers/notes.py
+++ b/api/routers/notes.py
@@ -5,7 +5,7 @@ from loguru import logger
 
 from api.models import NoteCreate, NoteResponse, NoteUpdate
 from open_notebook.domain.notebook import Note
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
@@ -21,8 +21,6 @@ async def get_notes(
             from open_notebook.domain.notebook import Notebook
 
             notebook = await Notebook.get(notebook_id)
-            if not notebook:
-                raise HTTPException(status_code=404, detail="Notebook not found")
             notes = await notebook.get_notes()
         else:
             # Get all notes
@@ -41,6 +39,8 @@ async def get_notes(
         ]
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except Exception as e:
         logger.error(f"Error fetching notes: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching notes: {str(e)}")
@@ -84,9 +84,8 @@ async def create_note(note_data: NoteCreate):
         if note_data.notebook_id:
             from open_notebook.domain.notebook import Notebook
 
-            notebook = await Notebook.get(note_data.notebook_id)
-            if not notebook:
-                raise HTTPException(status_code=404, detail="Notebook not found")
+            # Verify the notebook exists (raises NotFoundError -> 404)
+            await Notebook.get(note_data.notebook_id)
             await new_note.add_to_notebook(note_data.notebook_id)
 
         return NoteResponse(
@@ -100,6 +99,8 @@ async def create_note(note_data: NoteCreate):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
@@ -112,8 +113,6 @@ async def get_note(note_id: str):
     """Get a specific note by ID."""
     try:
         note = await Note.get(note_id)
-        if not note:
-            raise HTTPException(status_code=404, detail="Note not found")
 
         return NoteResponse(
             id=note.id or "",
@@ -125,6 +124,8 @@ async def get_note(note_id: str):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Note not found")
     except Exception as e:
         logger.error(f"Error fetching note {note_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching note: {str(e)}")
@@ -135,8 +136,6 @@ async def update_note(note_id: str, note_update: NoteUpdate):
     """Update a note."""
     try:
         note = await Note.get(note_id)
-        if not note:
-            raise HTTPException(status_code=404, detail="Note not found")
 
         # Update only provided fields
         if note_update.title is not None:
@@ -164,6 +163,8 @@ async def update_note(note_id: str, note_update: NoteUpdate):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Note not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
@@ -176,14 +177,14 @@ async def delete_note(note_id: str):
     """Delete a note."""
     try:
         note = await Note.get(note_id)
-        if not note:
-            raise HTTPException(status_code=404, detail="Note not found")
 
         await note.delete()
 
         return {"message": "Note deleted successfully"}
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Note not found")
     except Exception as e:
         logger.error(f"Error deleting note {note_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error deleting note: {str(e)}")
diff --git a/tests/test_crud_404.py b/tests/test_crud_404.py
new file mode 100644
index 00000000..43a7767a
--- /dev/null
+++ b/tests/test_crud_404.py
@@ -0,0 +1,131 @@
+"""Regression tests for #862: mutating/CRUD endpoints must return 404 (not 500)
+for a non-existent resource.
+
+`ObjectModel.get()` raises `NotFoundError` for a missing record (it never returns
+a falsy value), so each handler needs an explicit `except NotFoundError -> 404`
+arm before its broad `except Exception` (which would otherwise produce a 500).
+"""
+
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.exceptions import NotFoundError
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _nf(*_args, **_kwargs):
+    raise NotFoundError("not found")
+
+
+# --- notebooks --------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+async def test_delete_notebook_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.delete("/api/notebooks/notebook:gone").status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+async def test_update_notebook_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.put("/api/notebooks/notebook:gone", json={"name": "x"}).status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+async def test_delete_preview_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.get("/api/notebooks/notebook:gone/delete-preview").status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+async def test_add_source_missing_notebook_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.post("/api/notebooks/notebook:gone/sources/source:1").status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+async def test_remove_source_missing_notebook_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.delete("/api/notebooks/notebook:gone/sources/source:1").status_code == 404
+
+
+# --- notes ------------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notes.Note.get", new_callable=AsyncMock)
+async def test_get_note_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.get("/api/notes/note:gone").status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notes.Note.get", new_callable=AsyncMock)
+async def test_update_note_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.put("/api/notes/note:gone", json={"content": "x"}).status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.notes.Note.get", new_callable=AsyncMock)
+async def test_delete_note_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.delete("/api/notes/note:gone").status_code == 404
+
+
+# --- models -----------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.models.Model.get", new_callable=AsyncMock)
+async def test_delete_model_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.delete("/api/models/model:gone").status_code == 404
+
+
+# --- credentials ------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.credentials.require_encryption_key", new=MagicMock())
+@patch("api.routers.credentials.Credential.get", new_callable=AsyncMock)
+async def test_update_credential_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.put("/api/credentials/credential:gone", json={"name": "x"}).status_code == 404
+
+
+@pytest.mark.asyncio
+@patch("api.routers.credentials.Credential.get", new_callable=AsyncMock)
+async def test_delete_credential_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    assert client.delete("/api/credentials/credential:gone").status_code == 404
+
+
+# --- embedding --------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.embedding.Source.get", new_callable=AsyncMock)
+@patch("api.routers.embedding.model_manager.get_embedding_model", new_callable=AsyncMock)
+async def test_embed_missing_source_returns_404(mock_embed_model, mock_get, client):
+    mock_embed_model.return_value = MagicMock()  # an embedding model is configured
+    mock_get.side_effect = _nf
+    resp = client.post(
+        "/api/embed",
+        json={"item_id": "source:gone", "item_type": "source", "async_processing": False},
+    )
+    assert resp.status_code == 404

From 209b48cc104fdf56819206f428d9e801572cb992 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 18 Jun 2026 10:26:00 -0300
Subject: [PATCH 101/345] feat(notebooks): add list view toggle to notebooks
 page (#925)

Add a tile/list view toggle to the Notebooks page header. Tile view
(the card grid) remains the default; list view renders compact rows
showing notebook name, description, source/note counts, and last
updated. The preference is persisted via a Zustand store and shared by
the active and archived lists. New labels are translated across all 14
locales.

Closes #885

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   3 +
 .../notebooks/components/NotebookList.tsx     |  21 ++-
 .../notebooks/components/NotebookRow.tsx      | 142 ++++++++++++++++++
 .../src/app/(dashboard)/notebooks/page.tsx    |  27 +++-
 frontend/src/lib/locales/bn-IN/index.ts       |   2 +
 frontend/src/lib/locales/ca-ES/index.ts       |   2 +
 frontend/src/lib/locales/de-DE/index.ts       |   2 +
 frontend/src/lib/locales/en-US/index.ts       |   2 +
 frontend/src/lib/locales/es-ES/index.ts       |   2 +
 frontend/src/lib/locales/fr-FR/index.ts       |   2 +
 frontend/src/lib/locales/it-IT/index.ts       |   2 +
 frontend/src/lib/locales/ja-JP/index.ts       |   2 +
 frontend/src/lib/locales/pl-PL/index.ts       |   2 +
 frontend/src/lib/locales/pt-BR/index.ts       |   2 +
 frontend/src/lib/locales/ru-RU/index.ts       |   2 +
 frontend/src/lib/locales/tr-TR/index.ts       |   2 +
 frontend/src/lib/locales/zh-CN/index.ts       |   2 +
 frontend/src/lib/locales/zh-TW/index.ts       |   2 +
 .../src/lib/stores/notebook-view-store.ts     |  21 +++
 19 files changed, 236 insertions(+), 6 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
 create mode 100644 frontend/src/lib/stores/notebook-view-store.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f40a1260..6d613789 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
+
 ### Fixed
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
index c51ba4ed..c092e231 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
@@ -2,6 +2,8 @@
 
 import { NotebookResponse } from '@/lib/types/api'
 import { NotebookCard } from './NotebookCard'
+import { NotebookRow } from './NotebookRow'
+import { useNotebookViewStore } from '@/lib/stores/notebook-view-store'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { Book, ChevronDown, ChevronRight, Plus } from 'lucide-react'
@@ -31,6 +33,7 @@ export function NotebookList({
   actionLabel,
 }: NotebookListProps) {
   const { t } = useTranslation()
+  const viewMode = useNotebookViewStore((state) => state.viewMode)
   const [isExpanded, setIsExpanded] = useState(!collapsible)
 
   if (isLoading) {
@@ -78,11 +81,19 @@ export function NotebookList({
       </div>
 
       {isExpanded && (
-        <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
-          {notebooks.map((notebook) => (
-            <NotebookCard key={notebook.id} notebook={notebook} />
-          ))}
-        </div>
+        viewMode === 'list' ? (
+          <div className="flex flex-col gap-2">
+            {notebooks.map((notebook) => (
+              <NotebookRow key={notebook.id} notebook={notebook} />
+            ))}
+          </div>
+        ) : (
+          <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
+            {notebooks.map((notebook) => (
+              <NotebookCard key={notebook.id} notebook={notebook} />
+            ))}
+          </div>
+        )
       )}
     </div>
   )
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
new file mode 100644
index 00000000..1a61f69a
--- /dev/null
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
@@ -0,0 +1,142 @@
+'use client'
+
+import Link from 'next/link'
+import { useRouter } from 'next/navigation'
+import { NotebookResponse } from '@/lib/types/api'
+import { Button } from '@/components/ui/button'
+import { Badge } from '@/components/ui/badge'
+import { MoreHorizontal, Archive, ArchiveRestore, Trash2, FileText, StickyNote } from 'lucide-react'
+import { formatDistanceToNow } from 'date-fns'
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuTrigger,
+} from '@/components/ui/dropdown-menu'
+import { useUpdateNotebook } from '@/lib/hooks/use-notebooks'
+import { NotebookDeleteDialog } from './NotebookDeleteDialog'
+import { useState } from 'react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { getDateLocale } from '@/lib/utils/date-locale'
+
+interface NotebookRowProps {
+  notebook: NotebookResponse
+}
+
+export function NotebookRow({ notebook }: NotebookRowProps) {
+  const { t, language } = useTranslation()
+  const [showDeleteDialog, setShowDeleteDialog] = useState(false)
+  const router = useRouter()
+  const updateNotebook = useUpdateNotebook()
+
+  const handleArchiveToggle = (e: React.MouseEvent) => {
+    e.stopPropagation()
+    updateNotebook.mutate({
+      id: notebook.id,
+      data: { archived: !notebook.archived }
+    })
+  }
+
+  const handleRowClick = () => {
+    router.push(`/notebooks/${encodeURIComponent(notebook.id)}`)
+  }
+
+  return (
+    <>
+      {/* The row is mouse-clickable for convenience, but the notebook name is
+          the accessible primary action (a real link) for keyboard/screen-reader
+          users — avoiding nested interactive (button-in-button) semantics. */}
+      <div
+        className="group flex items-center gap-4 rounded-lg border bg-card px-4 py-3 card-hover"
+        onClick={handleRowClick}
+        style={{ cursor: 'pointer' }}
+      >
+        <div className="flex-1 min-w-0">
+          <div className="flex items-center gap-2">
+            <Link
+              href={`/notebooks/${encodeURIComponent(notebook.id)}`}
+              onClick={(e) => e.stopPropagation()}
+              className="font-medium truncate rounded-sm outline-none group-hover:text-primary transition-colors focus-visible:ring-2 focus-visible:ring-ring"
+            >
+              {notebook.name}
+            </Link>
+            {notebook.archived && (
+              <Badge variant="secondary">
+                {t('notebooks.archived')}
+              </Badge>
+            )}
+          </div>
+          {notebook.description && (
+            <p className="text-sm text-muted-foreground truncate">
+              {notebook.description}
+            </p>
+          )}
+        </div>
+
+        <div className="flex items-center gap-1.5 shrink-0">
+          <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+            <FileText className="h-3 w-3" />
+            <span>{notebook.source_count}</span>
+          </Badge>
+          <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+            <StickyNote className="h-3 w-3" />
+            <span>{notebook.note_count}</span>
+          </Badge>
+        </div>
+
+        <div className="hidden sm:block w-40 shrink-0 text-right text-xs text-muted-foreground">
+          {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), {
+            addSuffix: true,
+            locale: getDateLocale(language)
+          }))}
+        </div>
+
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button
+              aria-label={t('common.actions')}
+              variant="ghost"
+              size="sm"
+              className="opacity-0 group-hover:opacity-100 group-focus-within:opacity-100 focus-visible:opacity-100 transition-opacity shrink-0"
+              onClick={(e) => e.stopPropagation()}
+            >
+              <MoreHorizontal className="h-4 w-4" />
+            </Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent align="end" onClick={(e) => e.stopPropagation()}>
+            <DropdownMenuItem onClick={handleArchiveToggle}>
+              {notebook.archived ? (
+                <>
+                  <ArchiveRestore className="h-4 w-4 mr-2" />
+                  {t('notebooks.unarchive')}
+                </>
+              ) : (
+                <>
+                  <Archive className="h-4 w-4 mr-2" />
+                  {t('notebooks.archive')}
+                </>
+              )}
+            </DropdownMenuItem>
+            <DropdownMenuItem
+              onClick={(e) => {
+                e.stopPropagation()
+                setShowDeleteDialog(true)
+              }}
+              className="text-red-600"
+            >
+              <Trash2 className="h-4 w-4 mr-2" />
+              {t('common.delete')}
+            </DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+      </div>
+
+      <NotebookDeleteDialog
+        open={showDeleteDialog}
+        onOpenChange={setShowDeleteDialog}
+        notebookId={notebook.id}
+        notebookName={notebook.name}
+      />
+    </>
+  )
+}
diff --git a/frontend/src/app/(dashboard)/notebooks/page.tsx b/frontend/src/app/(dashboard)/notebooks/page.tsx
index 6637e2b9..08daee41 100644
--- a/frontend/src/app/(dashboard)/notebooks/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/page.tsx
@@ -5,16 +5,19 @@ import { useMemo, useState } from 'react'
 import { AppShell } from '@/components/layout/AppShell'
 import { NotebookList } from './components/NotebookList'
 import { Button } from '@/components/ui/button'
-import { Plus, RefreshCw } from 'lucide-react'
+import { Plus, RefreshCw, LayoutGrid, List } from 'lucide-react'
 import { useNotebooks } from '@/lib/hooks/use-notebooks'
 import { CreateNotebookDialog } from '@/components/notebooks/CreateNotebookDialog'
 import { Input } from '@/components/ui/input'
 import { useTranslation } from '@/lib/hooks/use-translation'
+import { useNotebookViewStore } from '@/lib/stores/notebook-view-store'
 
 export default function NotebooksPage() {
   const { t } = useTranslation()
   const [createDialogOpen, setCreateDialogOpen] = useState(false)
   const [searchTerm, setSearchTerm] = useState('')
+  const viewMode = useNotebookViewStore((state) => state.viewMode)
+  const setViewMode = useNotebookViewStore((state) => state.setViewMode)
   const { data: notebooks, isLoading, refetch } = useNotebooks(false)
   const { data: archivedNotebooks } = useNotebooks(true)
 
@@ -59,6 +62,28 @@ export default function NotebooksPage() {
             </Button>
           </div>
           <div className="flex flex-col gap-3 sm:flex-row sm:items-center sm:gap-4">
+            <div className="flex items-center rounded-md border p-0.5">
+              <Button
+                variant={viewMode === 'tile' ? 'secondary' : 'ghost'}
+                size="sm"
+                onClick={() => setViewMode('tile')}
+                aria-label={t('notebooks.tileView')}
+                aria-pressed={viewMode === 'tile'}
+                title={t('notebooks.tileView')}
+              >
+                <LayoutGrid className="h-4 w-4" />
+              </Button>
+              <Button
+                variant={viewMode === 'list' ? 'secondary' : 'ghost'}
+                size="sm"
+                onClick={() => setViewMode('list')}
+                aria-label={t('notebooks.listView')}
+                aria-pressed={viewMode === 'list'}
+                title={t('notebooks.listView')}
+              >
+                <List className="h-4 w-4" />
+              </Button>
+            </div>
             <Input
               id="notebook-search"
               name="notebook-search"
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 243e8ebd..676958cd 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -240,6 +240,8 @@ export const bnIN = {
     keepExclusiveSourcesLabel: "আনলিংক করে রাখুন",
     activeNotebooks: "সক্রিয় নোটবুক",
     archivedNotebooks: "আর্কাইভ নোটবুক",
+    tileView: "টাইল ভিউ",
+    listView: "তালিকা ভিউ",
     notFound: "নোটবুক খুঁজে পাওয়া যায়নি",
     notFoundDesc: "অনুরোধ করা নোটবুক অস্তিত্ব নেই।",
     updated: "আপডেট করা",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 5af20f73..3655ba0b 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -240,6 +240,8 @@ export const caES = {
     keepExclusiveSourcesLabel: "Desenllaça i conserva",
     activeNotebooks: "Quaderns actius",
     archivedNotebooks: "Quaderns arxivats",
+    tileView: "Vista de mosaic",
+    listView: "Vista de llista",
     notFound: "No s'ha trobat el quadern",
     notFoundDesc: "El quadern sol·licitat no existeix.",
     updated: "Actualitzat",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index b7c1075b..262657cc 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -243,6 +243,8 @@ export const deDE = {
     keepExclusiveSourcesLabel: "Verknüpfung lösen und behalten",
     activeNotebooks: "Aktive Notebooks",
     archivedNotebooks: "Archivierte Notebooks",
+    tileView: "Kachelansicht",
+    listView: "Listenansicht",
     notFound: "Notebook nicht gefunden",
     notFoundDesc: "Das angeforderte Notebook existiert nicht.",
     updated: "Aktualisiert",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 1bc1e905..53feea43 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -240,6 +240,8 @@ export const enUS = {
     keepExclusiveSourcesLabel: "Unlink and keep them",
     activeNotebooks: "Active Notebooks",
     archivedNotebooks: "Archived Notebooks",
+    tileView: "Tile view",
+    listView: "List view",
     notFound: "Notebook not found",
     notFoundDesc: "The requested notebook does not exist.",
     updated: "Updated",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 5917f007..45c25ac1 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -240,6 +240,8 @@ export const esES = {
     keepExclusiveSourcesLabel: "Desvincular y conservarlas",
     activeNotebooks: "Cuadernos activos",
     archivedNotebooks: "Cuadernos archivados",
+    tileView: "Vista de mosaico",
+    listView: "Vista de lista",
     notFound: "Cuaderno no encontrado",
     notFoundDesc: "El cuaderno solicitado no existe.",
     updated: "Actualizado",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 259c9fbb..affd6200 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -240,6 +240,8 @@ export const frFR = {
     keepExclusiveSourcesLabel: "Délier et les conserver",
     activeNotebooks: "Carnets actifs",
     archivedNotebooks: "Carnets archivés",
+    tileView: "Vue en mosaïque",
+    listView: "Vue en liste",
     notFound: "Carnet introuvable",
     notFoundDesc: "Le carnet demandé n'existe pas.",
     updated: "Mis à jour",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 839ab17c..faff0450 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -240,6 +240,8 @@ export const itIT = {
     keepExclusiveSourcesLabel: "Scollega e mantieni",
     activeNotebooks: "Quaderni attivi",
     archivedNotebooks: "Quaderni archiviati",
+    tileView: "Vista a riquadri",
+    listView: "Vista a elenco",
     notFound: "Quaderno non trovato",
     notFoundDesc: "Il quaderno richiesto non esiste.",
     updated: "Aggiornato",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 7704c084..3e323012 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -240,6 +240,8 @@ export const jaJP = {
     keepExclusiveSourcesLabel: "リンク解除して保持",
     activeNotebooks: "アクティブなノートブック",
     archivedNotebooks: "アーカイブ済みノートブック",
+    tileView: "タイル表示",
+    listView: "リスト表示",
     notFound: "ノートブックが見つかりません",
     notFoundDesc: "指定されたノートブックは存在しません。",
     updated: "更新日時",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 8ff3174c..4f7b9ba9 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -240,6 +240,8 @@ export const plPL = {
     keepExclusiveSourcesLabel: "Odłącz i zachowaj je",
     activeNotebooks: "Aktywne notatniki",
     archivedNotebooks: "Zarchiwizowane notatniki",
+    tileView: "Widok kafelków",
+    listView: "Widok listy",
     notFound: "Nie znaleziono notatnika",
     notFoundDesc: "Żądany notatnik nie istnieje.",
     updated: "Zaktualizowano",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index b6da2912..dd1400f1 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -240,6 +240,8 @@ export const ptBR = {
     keepExclusiveSourcesLabel: "Desvincular e manter",
     activeNotebooks: "Cadernos Ativos",
     archivedNotebooks: "Cadernos Arquivados",
+    tileView: "Visualização em blocos",
+    listView: "Visualização em lista",
     notFound: "Caderno não encontrado",
     notFoundDesc: "O caderno solicitado não existe.",
     updated: "Atualizado",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index b202faf1..8969ce4d 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -240,6 +240,8 @@ export const ruRU = {
     keepExclusiveSourcesLabel: "Отвязать и сохранить",
     activeNotebooks: "Активные блокноты",
     archivedNotebooks: "Архивные блокноты",
+    tileView: "Вид плиткой",
+    listView: "Вид списком",
     notFound: "Блокнот не найден",
     notFoundDesc: "Запрошенный блокнот не существует.",
     updated: "Обновлено",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index d3a8a899..eb0c5929 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -240,6 +240,8 @@ export const trTR = {
     keepExclusiveSourcesLabel: "Bağlantıyı kes ve sakla",
     activeNotebooks: "Aktif Defterler",
     archivedNotebooks: "Arşivlenmiş Defterler",
+    tileView: "Döşeme görünümü",
+    listView: "Liste görünümü",
     notFound: "Defter bulunamadı",
     notFoundDesc: "İstenen defter mevcut değil.",
     updated: "Güncellendi",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 51ff72c0..0d2f022f 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -240,6 +240,8 @@ export const zhCN = {
     keepExclusiveSourcesLabel: "取消关联并保留",
     activeNotebooks: "活动的笔记本",
     archivedNotebooks: "归档的笔记本",
+    tileView: "平铺视图",
+    listView: "列表视图",
     notFound: "未找到笔记本",
     notFoundDesc: "请求的笔记本不存在。",
     updated: "已更新",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 70993552..25c84d08 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -240,6 +240,8 @@ export const zhTW = {
     keepExclusiveSourcesLabel: "取消關聯並保留",
     activeNotebooks: "活動中的筆記本",
     archivedNotebooks: "封存的筆記本",
+    tileView: "並排檢視",
+    listView: "清單檢視",
     notFound: "未找到筆記本",
     notFoundDesc: "請求的筆記本不存在。",
     updated: "已更新",
diff --git a/frontend/src/lib/stores/notebook-view-store.ts b/frontend/src/lib/stores/notebook-view-store.ts
new file mode 100644
index 00000000..8a8147de
--- /dev/null
+++ b/frontend/src/lib/stores/notebook-view-store.ts
@@ -0,0 +1,21 @@
+import { create } from 'zustand'
+import { persist } from 'zustand/middleware'
+
+export type NotebookViewMode = 'tile' | 'list'
+
+interface NotebookViewState {
+  viewMode: NotebookViewMode
+  setViewMode: (mode: NotebookViewMode) => void
+}
+
+export const useNotebookViewStore = create<NotebookViewState>()(
+  persist(
+    (set) => ({
+      viewMode: 'tile',
+      setViewMode: (mode) => set({ viewMode: mode }),
+    }),
+    {
+      name: 'notebook-view-storage',
+    }
+  )
+)

From 2920ad72a425d8dc66bb149ad2a85c9f1abacd02 Mon Sep 17 00:00:00 2001
From: nyxst4ck <nyxst4ck@gmail.com>
Date: Sun, 21 Jun 2026 14:13:25 -0300
Subject: [PATCH 102/345] feat(examples): add EasyPanel template (#927)

Adds an EasyPanel template (current index.ts + meta.yaml format) under examples/easypanel with SurrealDB v2, generated DB/encryption secrets, and an optional/generated app password.

Fixes #189
---
 examples/README.md           |  4 ++
 examples/easypanel/README.md | 26 ++++++++++++
 examples/easypanel/index.ts  | 80 ++++++++++++++++++++++++++++++++++++
 examples/easypanel/meta.yaml | 79 +++++++++++++++++++++++++++++++++++
 4 files changed, 189 insertions(+)
 create mode 100644 examples/easypanel/README.md
 create mode 100644 examples/easypanel/index.ts
 create mode 100644 examples/easypanel/meta.yaml

diff --git a/examples/README.md b/examples/README.md
index dc2a7fd2..d7797c1d 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -2,6 +2,10 @@
 
 This folder contains different `docker-compose.yml` configurations for various use cases.
 
+It also includes an [`easypanel`](./easypanel/) template that can be copied into
+the official EasyPanel templates repository and tested in the EasyPanel
+templates playground.
+
 ## 📋 Available Examples
 
 ### `docker-compose-full-local.yml` - 100% Local AI (No Cloud APIs) 🌟
diff --git a/examples/easypanel/README.md b/examples/easypanel/README.md
new file mode 100644
index 00000000..9023dfa0
--- /dev/null
+++ b/examples/easypanel/README.md
@@ -0,0 +1,26 @@
+# EasyPanel template
+
+This directory contains an EasyPanel template for Open Notebook. It follows the
+format used by the official EasyPanel templates repository:
+
+- `meta.yaml` describes the template metadata and input schema.
+- `index.ts` generates the EasyPanel services.
+
+The template deploys two services:
+
+- Open Notebook, exposed on port `8502`.
+- SurrealDB v2, kept private on the project network and persisted in a volume.
+
+## Testing
+
+1. Copy this directory to `templates/open-notebook` in
+   `easypanel-io/templates`.
+2. Run the EasyPanel templates playground with `npm run dev`.
+3. Create the template from the generated JSON inside an EasyPanel instance.
+
+Set an Open Notebook password in the form before deploying. If it is left blank,
+the template generates one and stores it in the app service environment as
+`OPEN_NOTEBOOK_PASSWORD`.
+
+After deployment, open the EasyPanel domain and configure AI providers from
+Open Notebook's Settings > API Keys page.
diff --git a/examples/easypanel/index.ts b/examples/easypanel/index.ts
new file mode 100644
index 00000000..77d211e9
--- /dev/null
+++ b/examples/easypanel/index.ts
@@ -0,0 +1,80 @@
+import {
+  Output,
+  randomPassword,
+  randomString,
+  Services,
+} from "~templates-utils";
+import { Input } from "./meta";
+
+export function generate(input: Input): Output {
+  const services: Services = [];
+  const appPassword = input.appPassword || randomPassword();
+  const databasePassword = randomPassword();
+  const encryptionKey = randomString(64);
+
+  services.push({
+    type: "app",
+    data: {
+      serviceName: input.databaseServiceName,
+      env: [`SURREAL_EXPERIMENTAL_GRAPHQL=true`].join("\n"),
+      source: {
+        type: "image",
+        image: input.databaseServiceImage,
+      },
+      deploy: {
+        command: [
+          "start",
+          "--log info",
+          "--user root",
+          `--pass ${databasePassword}`,
+          "--bind 0.0.0.0:8000",
+          "rocksdb:/mydata/mydatabase.db",
+        ].join(" "),
+      },
+      mounts: [
+        {
+          type: "volume",
+          name: "surreal-data",
+          mountPath: "/mydata",
+        },
+      ],
+    },
+  });
+
+  services.push({
+    type: "app",
+    data: {
+      serviceName: input.appServiceName,
+      env: [
+        `API_URL=https://$(PRIMARY_DOMAIN)`,
+        `INTERNAL_API_URL=http://localhost:5055`,
+        `OPEN_NOTEBOOK_ENCRYPTION_KEY=${encryptionKey}`,
+        `OPEN_NOTEBOOK_PASSWORD=${appPassword}`,
+        `SURREAL_URL=ws://$(PROJECT_NAME)_${input.databaseServiceName}:8000/rpc`,
+        `SURREAL_USER=root`,
+        `SURREAL_PASSWORD=${databasePassword}`,
+        `SURREAL_NAMESPACE=open_notebook`,
+        `SURREAL_DATABASE=open_notebook`,
+      ].join("\n"),
+      source: {
+        type: "image",
+        image: input.appServiceImage,
+      },
+      domains: [
+        {
+          host: "$(EASYPANEL_DOMAIN)",
+          port: 8502,
+        },
+      ],
+      mounts: [
+        {
+          type: "volume",
+          name: "notebook-data",
+          mountPath: "/app/data",
+        },
+      ],
+    },
+  });
+
+  return { services };
+}
diff --git a/examples/easypanel/meta.yaml b/examples/easypanel/meta.yaml
new file mode 100644
index 00000000..9846e209
--- /dev/null
+++ b/examples/easypanel/meta.yaml
@@ -0,0 +1,79 @@
+name: Open Notebook
+description:
+  Open Notebook is an open-source, self-hosted notebook and research workspace
+  for collecting sources, taking notes, searching, chatting with content, and
+  generating podcasts.
+instructions:
+  Deploy the template, open the generated EasyPanel domain, and log in with the
+  configured Open Notebook password. Configure AI providers from Settings > API
+  Keys after the first login. If the password field is left blank, a random
+  password is generated and stored as OPEN_NOTEBOOK_PASSWORD in the app service
+  environment.
+changeLog:
+  - date: 2026-06-19
+    description: First release
+links:
+  - label: Website
+    url: https://www.open-notebook.ai
+  - label: Documentation
+    url: https://github.com/lfnovo/open-notebook/tree/main/docs
+  - label: Github
+    url: https://github.com/lfnovo/open-notebook
+contributors:
+  - name: nyxst4ck
+    url: https://github.com/nyxst4ck
+schema:
+  type: object
+  required:
+    - appServiceName
+    - appServiceImage
+    - databaseServiceName
+    - databaseServiceImage
+  properties:
+    appServiceName:
+      type: string
+      title: App Service Name
+      default: open-notebook
+    appServiceImage:
+      type: string
+      title: App Service Image
+      default: lfnovo/open_notebook:1.10.0
+    databaseServiceName:
+      type: string
+      title: Database Service Name
+      default: surrealdb
+    databaseServiceImage:
+      type: string
+      title: Database Service Image
+      default: surrealdb/surrealdb:v2
+    appPassword:
+      type: string
+      title: Open Notebook Password
+      default: ""
+benefits:
+  - title: One-click deployment
+    description:
+      Creates the Open Notebook app and SurrealDB database services with the
+      required environment variables and persistent volumes.
+  - title: Secure defaults
+    description:
+      Generates database and encryption secrets during template creation and
+      supports a user-provided or generated application password.
+  - title: Reverse-proxy friendly
+    description:
+      Exposes only the frontend port and uses Open Notebook's built-in Next.js
+      API proxy for backend requests.
+features:
+  - title: Source collection
+    description: Save documents, web pages, audio, video, and other research sources.
+  - title: Notebook workspace
+    description: Organize sources and notes into reusable research notebooks.
+  - title: AI chat and search
+    description: Ask questions across notebook context with citations.
+  - title: Podcast generation
+    description: Generate podcast-style audio from selected notebook content.
+tags:
+  - AI
+  - Knowledge Management
+  - Notes
+  - Research

From f103e40c2fc3904c2e0ef1f5d94ad48555fef5bb Mon Sep 17 00:00:00 2001
From: "hyeonho.park" <34496141+hyeonho-park@users.noreply.github.com>
Date: Mon, 22 Jun 2026 02:49:15 +0900
Subject: [PATCH 103/345] fix: stream SSE responses end-to-end through Next.js
 proxy (#770)

Switches the streaming endpoints (/api/search/ask, source chat messages) to media_type=text/event-stream and adds dedicated App Router SSE route handlers (_sse-proxy.ts) that stream the upstream body directly, bypassing the Next.js rewrites proxy's gzip buffering in standalone/production mode.

Verified locally: with Accept-Encoding: gzip (i.e. a real browser), the standalone rewrites proxy buffered the entire SSE stream to completion; the route-handler approach restores progressive delivery.
---
 api/routers/search.py                         |  7 +++-
 api/routers/source_chat.py                    |  4 +--
 frontend/src/app/api/_sse-proxy.ts            | 36 +++++++++++++++++++
 frontend/src/app/api/search/ask/route.ts      |  9 +++++
 .../sessions/[sessionId]/messages/route.ts    | 16 +++++++++
 5 files changed, 69 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/app/api/_sse-proxy.ts
 create mode 100644 frontend/src/app/api/search/ask/route.ts
 create mode 100644 frontend/src/app/api/sources/[sourceId]/chat/sessions/[sessionId]/messages/route.ts

diff --git a/api/routers/search.py b/api/routers/search.py
index 53c7d768..21ff8b1d 100644
--- a/api/routers/search.py
+++ b/api/routers/search.py
@@ -147,7 +147,12 @@ async def ask_knowledge_base(ask_request: AskRequest):
             stream_ask_response(
                 ask_request.question, strategy_model, answer_model, final_answer_model
             ),
-            media_type="text/plain",
+            media_type="text/event-stream",
+            headers={
+                "Cache-Control": "no-cache",
+                "Connection": "keep-alive",
+                "X-Accel-Buffering": "no",
+            },
         )
 
     except HTTPException:
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index ca304de0..381d83c8 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -539,11 +539,11 @@ async def send_message_to_source_chat(
                 message=request.message,
                 model_override=model_override,
             ),
-            media_type="text/plain",
+            media_type="text/event-stream",
             headers={
                 "Cache-Control": "no-cache",
                 "Connection": "keep-alive",
-                "Content-Type": "text/plain; charset=utf-8",
+                "X-Accel-Buffering": "no",
             },
         )
 
diff --git a/frontend/src/app/api/_sse-proxy.ts b/frontend/src/app/api/_sse-proxy.ts
new file mode 100644
index 00000000..eb18fb1f
--- /dev/null
+++ b/frontend/src/app/api/_sse-proxy.ts
@@ -0,0 +1,36 @@
+import type { NextRequest } from 'next/server'
+
+const INTERNAL_API_URL = process.env.INTERNAL_API_URL || 'http://localhost:5055'
+
+export async function sseProxy(req: NextRequest, upstreamPath: string) {
+  const body = await req.text()
+  const auth = req.headers.get('authorization')
+
+  const upstream = await fetch(`${INTERNAL_API_URL}${upstreamPath}`, {
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      ...(auth ? { Authorization: auth } : {}),
+      Accept: 'text/event-stream',
+    },
+    body,
+    cache: 'no-store',
+  })
+
+  if (!upstream.ok || !upstream.body) {
+    return new Response(upstream.body, {
+      status: upstream.status,
+      headers: { 'Content-Type': upstream.headers.get('content-type') ?? 'application/json' },
+    })
+  }
+
+  return new Response(upstream.body, {
+    status: 200,
+    headers: {
+      'Content-Type': 'text/event-stream; charset=utf-8',
+      'Cache-Control': 'no-cache, no-transform',
+      Connection: 'keep-alive',
+      'X-Accel-Buffering': 'no',
+    },
+  })
+}
diff --git a/frontend/src/app/api/search/ask/route.ts b/frontend/src/app/api/search/ask/route.ts
new file mode 100644
index 00000000..2c139a99
--- /dev/null
+++ b/frontend/src/app/api/search/ask/route.ts
@@ -0,0 +1,9 @@
+import type { NextRequest } from 'next/server'
+import { sseProxy } from '../../_sse-proxy'
+
+export const runtime = 'nodejs'
+export const dynamic = 'force-dynamic'
+
+export async function POST(req: NextRequest) {
+  return sseProxy(req, '/api/search/ask')
+}
diff --git a/frontend/src/app/api/sources/[sourceId]/chat/sessions/[sessionId]/messages/route.ts b/frontend/src/app/api/sources/[sourceId]/chat/sessions/[sessionId]/messages/route.ts
new file mode 100644
index 00000000..1dd93bbc
--- /dev/null
+++ b/frontend/src/app/api/sources/[sourceId]/chat/sessions/[sessionId]/messages/route.ts
@@ -0,0 +1,16 @@
+import type { NextRequest } from 'next/server'
+import { sseProxy } from '../../../../../../_sse-proxy'
+
+export const runtime = 'nodejs'
+export const dynamic = 'force-dynamic'
+
+export async function POST(
+  req: NextRequest,
+  { params }: { params: Promise<{ sourceId: string; sessionId: string }> }
+) {
+  const { sourceId, sessionId } = await params
+  return sseProxy(
+    req,
+    `/api/sources/${encodeURIComponent(sourceId)}/chat/sessions/${encodeURIComponent(sessionId)}/messages`
+  )
+}

From 42437abf1059cb7766e4ffebabc2a79832c2fd77 Mon Sep 17 00:00:00 2001
From: ProfTrader <3li8@proton.me>
Date: Sun, 21 Jun 2026 23:30:44 +0530
Subject: [PATCH 104/345] fix: narrow note context mode type (#929)

Adds NoteContextMode = Exclude<ContextMode, 'insights'> and threads it through the note selection utilities and NotesColumn callbacks, so notes only accept off/full (no insights). Pure type-safety, no runtime behavior change.

Fixes #917
---
 .../app/(dashboard)/notebooks/[id]/page.tsx   | 31 ++++++++++++-------
 .../notebooks/components/NotesColumn.tsx      | 15 ++++-----
 .../src/components/common/ContextToggle.tsx   | 14 +++++++--
 frontend/src/lib/types/notebook-context.ts    |  3 +-
 frontend/src/lib/utils/source-context.ts      | 12 +++----
 5 files changed, 47 insertions(+), 28 deletions(-)

diff --git a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
index 2d856b5d..6249c35b 100644
--- a/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/[id]/page.tsx
@@ -29,8 +29,8 @@ import {
 
 // Re-exported from the shared types module for backward compatibility; several
 // components historically import these from this route file.
-import type { ContextMode, ContextSelections } from '@/lib/types/notebook-context'
-export type { ContextMode, ContextSelections }
+import type { ContextMode, ContextSelections, NoteContextMode } from '@/lib/types/notebook-context'
+export type { ContextMode, ContextSelections, NoteContextMode }
 
 export default function NotebookPage() {
   const { t } = useTranslation()
@@ -92,13 +92,22 @@ export default function NotebookPage() {
     }
   }, [notes, noteContextDefault])
 
-  // Handler to update context selection
-  const handleContextModeChange = (itemId: string, mode: ContextMode, type: 'source' | 'note') => {
+  const handleSourceContextModeChange = (sourceId: string, mode: ContextMode) => {
     setContextSelections(prev => ({
       ...prev,
-      [type === 'source' ? 'sources' : 'notes']: {
-        ...(type === 'source' ? prev.sources : prev.notes),
-        [itemId]: mode
+      sources: {
+        ...prev.sources,
+        [sourceId]: mode
+      }
+    }))
+  }
+
+  const handleNoteContextModeChange = (noteId: string, mode: NoteContextMode) => {
+    setContextSelections(prev => ({
+      ...prev,
+      notes: {
+        ...prev.notes,
+        [noteId]: mode
       }
     }))
   }
@@ -182,7 +191,7 @@ export default function NotebookPage() {
                     notebookName={notebook?.name}
                     onRefresh={refetchSources}
                     contextSelections={contextSelections.sources}
-                    onContextModeChange={(sourceId, mode) => handleContextModeChange(sourceId, mode, 'source')}
+                    onContextModeChange={handleSourceContextModeChange}
                     onBulkContextModeChange={handleBulkSourceContext}
                     hasNextPage={hasNextPage}
                     isFetchingNextPage={isFetchingNextPage}
@@ -195,7 +204,7 @@ export default function NotebookPage() {
                     isLoading={notesLoading}
                     notebookId={notebookId}
                     contextSelections={contextSelections.notes}
-                    onContextModeChange={(noteId, mode) => handleContextModeChange(noteId, mode, 'note')}
+                    onContextModeChange={handleNoteContextModeChange}
                     onBulkContextModeChange={handleBulkNoteContext}
                   />
                 )}
@@ -228,7 +237,7 @@ export default function NotebookPage() {
                 notebookName={notebook?.name}
                 onRefresh={refetchSources}
                 contextSelections={contextSelections.sources}
-                onContextModeChange={(sourceId, mode) => handleContextModeChange(sourceId, mode, 'source')}
+                onContextModeChange={handleSourceContextModeChange}
                 onBulkContextModeChange={handleBulkSourceContext}
                 hasNextPage={hasNextPage}
                 isFetchingNextPage={isFetchingNextPage}
@@ -246,7 +255,7 @@ export default function NotebookPage() {
                 isLoading={notesLoading}
                 notebookId={notebookId}
                 contextSelections={contextSelections.notes}
-                onContextModeChange={(noteId, mode) => handleContextModeChange(noteId, mode, 'note')}
+                onContextModeChange={handleNoteContextModeChange}
                 onBulkContextModeChange={handleBulkNoteContext}
               />
             </div>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index cc222c68..618a94d9 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -18,7 +18,7 @@ import { NoteEditorDialog } from './NoteEditorDialog'
 import { getDateLocale } from '@/lib/utils/date-locale'
 import { formatDistanceToNow } from 'date-fns'
 import { ContextToggle } from '@/components/common/ContextToggle'
-import { ContextMode } from '../[id]/page'
+import type { NoteContextMode } from '../[id]/page'
 import type { NoteContextDefault } from '@/lib/utils/source-context'
 import { useDeleteNote } from '@/lib/hooks/use-notes'
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
@@ -30,8 +30,8 @@ interface NotesColumnProps {
   notes?: NoteResponse[]
   isLoading: boolean
   notebookId: string
-  contextSelections?: Record<string, ContextMode>
-  onContextModeChange?: (noteId: string, mode: ContextMode) => void
+  contextSelections?: Record<string, NoteContextMode>
+  onContextModeChange?: (noteId: string, mode: NoteContextMode) => void
   onBulkContextModeChange?: (action: NoteContextDefault) => void
 }
 
@@ -53,9 +53,10 @@ export function NotesColumn({
 
   // Collapsible column state
   const { notesCollapsed, toggleNotes } = useNotebookColumnsStore()
+  const notesLabel = t('common.notes')
   const collapseButton = useMemo(
-    () => createCollapseButton(toggleNotes, t('common.notes')),
-    [toggleNotes, t('common.notes')]
+    () => createCollapseButton(toggleNotes, notesLabel),
+    [toggleNotes, notesLabel]
   )
 
   const handleDeleteClick = (noteId: string) => {
@@ -81,12 +82,12 @@ export function NotesColumn({
         isCollapsed={notesCollapsed}
         onToggle={toggleNotes}
         collapsedIcon={StickyNote}
-        collapsedLabel={t('common.notes')}
+        collapsedLabel={notesLabel}
       >
         <Card className="h-full flex flex-col flex-1 overflow-hidden">
           <CardHeader className="pb-3 flex-shrink-0">
             <div className="flex items-center justify-between gap-2">
-              <CardTitle className="text-lg">{t('common.notes')}</CardTitle>
+              <CardTitle className="text-lg">{notesLabel}</CardTitle>
               <div className="flex items-center gap-2">
                 {onBulkContextModeChange && notes && notes.length > 0 && (
                   <DropdownMenu>
diff --git a/frontend/src/components/common/ContextToggle.tsx b/frontend/src/components/common/ContextToggle.tsx
index cb7ec8b1..17dde78e 100644
--- a/frontend/src/components/common/ContextToggle.tsx
+++ b/frontend/src/components/common/ContextToggle.tsx
@@ -19,7 +19,15 @@ interface ContextToggleProps {
   className?: string
 }
 
-export function ContextToggle({ mode, hasInsights = false, onChange, className }: ContextToggleProps) {
+export function ContextToggle<TMode extends ContextMode = ContextMode>({
+  mode,
+  hasInsights = false,
+  onChange,
+  className
+}: Omit<ContextToggleProps, 'mode' | 'onChange'> & {
+  mode: TMode
+  onChange: (mode: TMode) => void
+}) {
   const { t } = useTranslation()
 
   const MODE_CONFIG = {
@@ -46,9 +54,9 @@ export function ContextToggle({ mode, hasInsights = false, onChange, className }
   const Icon = config.icon
 
   // Determine available modes based on whether item has insights
-  const availableModes: ContextMode[] = hasInsights
+  const availableModes = (hasInsights
     ? ['off', 'insights', 'full']
-    : ['off', 'full']
+    : ['off', 'full']) as TMode[]
 
   const handleClick = (e: React.MouseEvent) => {
     e.stopPropagation() // Prevent card click
diff --git a/frontend/src/lib/types/notebook-context.ts b/frontend/src/lib/types/notebook-context.ts
index a2461a1a..462d3c6f 100644
--- a/frontend/src/lib/types/notebook-context.ts
+++ b/frontend/src/lib/types/notebook-context.ts
@@ -1,7 +1,8 @@
 /** Chat-context inclusion mode for a notebook source or note. */
 export type ContextMode = 'off' | 'insights' | 'full'
+export type NoteContextMode = Exclude<ContextMode, 'insights'>
 
 export interface ContextSelections {
   sources: Record<string, ContextMode>
-  notes: Record<string, ContextMode>
+  notes: Record<string, NoteContextMode>
 }
diff --git a/frontend/src/lib/utils/source-context.ts b/frontend/src/lib/utils/source-context.ts
index e2f41b4b..c2297d33 100644
--- a/frontend/src/lib/utils/source-context.ts
+++ b/frontend/src/lib/utils/source-context.ts
@@ -1,4 +1,4 @@
-import type { ContextMode } from '@/lib/types/notebook-context'
+import type { ContextMode, NoteContextMode } from '@/lib/types/notebook-context'
 
 /**
  * Bulk context actions for sources:
@@ -100,7 +100,7 @@ interface NoteLike {
 }
 
 /** Resolve the context mode a bulk action implies for a single note. */
-export function bulkModeForNote(action: NoteContextDefault): ContextMode {
+export function bulkModeForNote(action: NoteContextDefault): NoteContextMode {
   return action === 'exclude' ? 'off' : 'full'
 }
 
@@ -110,10 +110,10 @@ export function bulkModeForNote(action: NoteContextDefault): ContextMode {
  * action also governs notes that load later.
  */
 export function computeNoteSelections(
-  existing: Record<string, ContextMode>,
+  existing: Record<string, NoteContextMode>,
   notes: NoteLike[],
   defaultAction: NoteContextDefault = 'include',
-): Record<string, ContextMode> {
+): Record<string, NoteContextMode> {
   const next = { ...existing }
   for (const note of notes) {
     if (next[note.id] === undefined) {
@@ -125,10 +125,10 @@ export function computeNoteSelections(
 
 /** Apply a uniform bulk context action to every given note. */
 export function applyBulkNoteContext(
-  existing: Record<string, ContextMode>,
+  existing: Record<string, NoteContextMode>,
   notes: NoteLike[],
   action: NoteContextDefault,
-): Record<string, ContextMode> {
+): Record<string, NoteContextMode> {
   const next = { ...existing }
   for (const note of notes) {
     next[note.id] = bulkModeForNote(action)

From d7e1fdbc4c8a5be570b69054ca84399fe1e30396 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 15:21:03 -0300
Subject: [PATCH 105/345] docs: add EasyPanel deployment to single-container
 guide (#948)

Documents the EasyPanel template (examples/easypanel/) in the cloud-platform deploy list, covering the one-click gallery flow and the manual playground flow. Notes it provisions the app + a dedicated SurrealDB with generated secrets.

Refs #189
---
 docs/1-INSTALLATION/single-container.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/1-INSTALLATION/single-container.md b/docs/1-INSTALLATION/single-container.md
index 70ee6bfd..33699ebd 100644
--- a/docs/1-INSTALLATION/single-container.md
+++ b/docs/1-INSTALLATION/single-container.md
@@ -97,6 +97,15 @@ heroku config:set OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
 5. Enable persistent volumes
 6. Coolify handles HTTPS automatically
 
+**EasyPanel:**
+
+Open Notebook ships an EasyPanel template at [`examples/easypanel/`](https://github.com/lfnovo/open-notebook/tree/main/examples/easypanel). Unlike the single-image options above, the template provisions **two services** — the Open Notebook app and a dedicated SurrealDB instance — and generates the database password, encryption key, and (optionally) the app password for you.
+
+- **One-click (recommended):** once the template is published to the official [EasyPanel template gallery](https://github.com/easypanel-io/templates), create a new service from "Open Notebook", set an app password (or leave it blank to auto-generate one), and deploy.
+- **Manual:** copy `examples/easypanel/` into `templates/open-notebook` in a checkout of [`easypanel-io/templates`](https://github.com/easypanel-io/templates), run the templates playground (`npm run dev`), and create the template from the generated JSON in your EasyPanel instance.
+
+After deployment, open the EasyPanel domain and configure your AI provider in **Settings → API Keys**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
+
 ---
 
 ## Environment Variables

From c46acd7d1fc20c80987509b02cffe4fc32778cbc Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 15:29:46 -0300
Subject: [PATCH 106/345] fix: handle special-token sequences in token counting
 (#949)

token_count() now encodes with disallowed_special=() so source/context text containing sequences like <|endoftext|> no longer raises ValueError.

Fixes #667
---
 CHANGELOG.md                       | 1 +
 open_notebook/utils/token_utils.py | 5 ++++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d613789..d066dd68 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
+- Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
 
 ## [1.10.0] - 2026-06-17
 
diff --git a/open_notebook/utils/token_utils.py b/open_notebook/utils/token_utils.py
index 3791f0cf..224f769c 100644
--- a/open_notebook/utils/token_utils.py
+++ b/open_notebook/utils/token_utils.py
@@ -26,7 +26,10 @@ def token_count(input_string: str) -> int:
         import tiktoken
 
         encoding = tiktoken.get_encoding("o200k_base")
-        tokens = encoding.encode(input_string)
+        # disallowed_special=() treats sequences like "<|endoftext|>" as ordinary
+        # text instead of raising ValueError. User/source content can legitimately
+        # contain these substrings, and we only need a token count here.
+        tokens = encoding.encode(input_string, disallowed_special=())
         return len(tokens)
     except (ImportError, OSError) as e:
         # Fallback: handles ImportError (tiktoken not installed) AND network/OS

From f2efa0c6fbedd5f1ccd4bac9a797bfc4edfd5070 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 15:34:24 -0300
Subject: [PATCH 107/345] docs: document ESPERANTO_TTS_TIMEOUT env var (#952)

Documents ESPERANTO_TTS_TIMEOUT (default 300s) in the environment reference; raise it for slow/self-hosted TTS providers.

Fixes #937
---
 CHANGELOG.md                                  | 1 +
 docs/5-CONFIGURATION/environment-reference.md | 1 +
 2 files changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d066dd68..6609d996 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
+- Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 
 ### Fixed
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index e6fe0781..11434400 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -94,6 +94,7 @@ CORS_ORIGINS=https://notebook.example.com
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
 | `TTS_BATCH_SIZE` | No | 5 | Concurrent TTS requests (1-5, depends on provider) |
+| `ESPERANTO_TTS_TIMEOUT` | No | 300 | Text-to-speech request timeout in seconds (passed through to Esperanto). Increase it for slow or self-hosted TTS providers that take longer than 5 minutes to synthesize a segment, otherwise long podcast segments can fail with a timeout. |
 
 ---
 

From 92cff8e2d1a5f6851e1de18cf08192f0fb0a58bc Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 15:35:23 -0300
Subject: [PATCH 108/345] fix: use uv run --no-sync in single-container
 supervisord (#951)

A brand-new single-container instance hung at "API not ready yet" because the api and worker programs ran with `uv run` (without `--no-sync`), so uv tried to sync dev deps absent from the --no-dev build. Both now use `uv run --no-sync`, matching the multi-container config.

Fixes #609
---
 CHANGELOG.md            | 1 +
 supervisord.single.conf | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6609d996..c9214400 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
+- Single-container image no longer hangs at "API not ready yet" on a brand-new instance. `supervisord.single.conf` ran the API and worker with `uv run` (without `--no-sync`), so at startup `uv` tried to sync dev dependencies it couldn't resolve against the `--no-dev` build. Both processes now use `uv run --no-sync`, matching the multi-container `supervisord.conf` (#609)
 
 ## [1.10.0] - 2026-06-17
 
diff --git a/supervisord.single.conf b/supervisord.single.conf
index 786dbbf6..90e3288d 100644
--- a/supervisord.single.conf
+++ b/supervisord.single.conf
@@ -16,7 +16,7 @@ autostart=true
 startsecs=5
 
 [program:api]
-command=uv run uvicorn api.main:app --host 0.0.0.0 --port 5055
+command=uv run --no-sync uvicorn api.main:app --host 0.0.0.0 --port 5055
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
@@ -27,7 +27,7 @@ autostart=true
 startsecs=3
 
 [program:worker]
-command=uv run surreal-commands-worker --import-modules commands
+command=uv run --no-sync surreal-commands-worker --import-modules commands
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr

From e73f23116bdb5349fba8965abdbd1ce4602c644a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 15:36:25 -0300
Subject: [PATCH 109/345] fix: let note editor fill the dialog height (#950)

Removed the max-h-[500px] constraint on the MarkdownEditor wrapper so the note editor grows to fill the dialog (respecting the flex-1/h-full parent) instead of being capped at 500px.

Fixes #932
---
 CHANGELOG.md                                                    | 1 +
 .../app/(dashboard)/notebooks/components/NoteEditorDialog.tsx   | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c9214400..ceef255f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
 - Single-container image no longer hangs at "API not ready yet" on a brand-new instance. `supervisord.single.conf` ran the API and worker with `uv run` (without `--no-sync`), so at startup `uv` tried to sync dev dependencies it couldn't resolve against the `--no-dev` build. Both processes now use `uv run --no-sync`, matching the multi-container `supervisord.conf` (#609)
+- Note editor now expands to fill the dialog instead of being capped at `500px`; removed the `max-h-[500px]` constraint that overrode the `flex-1` parent and cramped editing on tall windows (#932)
 
 ## [1.10.0] - 2026-06-17
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
index f1bb01b5..6b5d0c98 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
@@ -162,7 +162,7 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
                       height={420}
                       placeholder={t('sources.writeNotePlaceholder')}
                       className={cn(
-                          "w-full h-full min-h-[420px] max-h-[500px] overflow-hidden [&_.w-md-editor]:!static [&_.w-md-editor]:!w-full [&_.w-md-editor]:!h-full [&_.w-md-editor-content]:overflow-y-auto",
+                          "w-full h-full min-h-[420px] overflow-hidden [&_.w-md-editor]:!static [&_.w-md-editor]:!w-full [&_.w-md-editor]:!h-full [&_.w-md-editor-content]:overflow-y-auto",
                           !isEditorFullscreen && "rounded-md border"
                       )}
                     />

From 1884205346e05ea344f063e171771f7b5e530335 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 17:20:21 -0300
Subject: [PATCH 110/345] chore(security): source docker-compose SurrealDB
 creds from env (#953)

Parameterize SurrealDB credentials in docker-compose.yml via ${SURREAL_USER:-root} / ${SURREAL_PASSWORD:-root} (applied to both the database server command and the app env), defaulting to root:root so the zero-config quick start is unchanged. Documented in .env.example and inline comments.

Fixes #946
---
 .env.example       |  3 +++
 CHANGELOG.md       |  3 +++
 docker-compose.yml | 14 ++++++++++----
 3 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/.env.example b/.env.example
index 0b12adad..919625ce 100644
--- a/.env.example
+++ b/.env.example
@@ -14,6 +14,9 @@ OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
 # =============================================================================
 
 SURREAL_URL=ws://surrealdb:8000/rpc
+# root:root is fine for local use. Change these before exposing the instance to a
+# network — docker-compose.yml reads them for both the SurrealDB server and the
+# app, so the two stay in sync.
 SURREAL_USER=root
 SURREAL_PASSWORD=root
 SURREAL_NAMESPACE=open_notebook
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ceef255f..0707b45f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 
+### Changed
+- `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
+
 ### Fixed
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
diff --git a/docker-compose.yml b/docker-compose.yml
index 47c59ff4..ca316508 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,11 @@
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
+    # Credentials default to root:root for a zero-config local setup. Before
+    # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
+    # in a .env file (see .env.example) — they are applied here and to the
+    # open_notebook service below, so the two always stay in sync.
+    command: start --log info --user ${SURREAL_USER:-root} --pass ${SURREAL_PASSWORD:-root} rocksdb:/mydata/mydatabase.db
     user: root  # Required for bind mounts on Linux
     ports:
       - "8000:8000"
@@ -22,10 +26,12 @@ services:
       # This encrypts your API keys in the database
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
 
-      # Database connection (default values - no need to change)
+      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to root:root
+      # for local use; override them in a .env file before exposing the instance
+      # (the same values configure the surrealdb service above).
       - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=root
+      - SURREAL_USER=${SURREAL_USER:-root}
+      - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
     volumes:

From 25f82acdc4bca68f584a18d359bc27a2accc80a0 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 18:04:02 -0300
Subject: [PATCH 111/345] docs: add SECURITY.md with disclosure policy (#954)

Add a security policy: private vulnerability reporting via GitHub, supported versions, response expectations, and a scope note linking the hardening guide.

Fixes #943
---
 CHANGELOG.md |  1 +
 SECURITY.md  | 65 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 66 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0707b45f..631998fd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
+- `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
 
 ### Changed
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..8b887360
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,65 @@
+# Security Policy
+
+## Supported Versions
+
+Open Notebook is an actively developed project. Security fixes are applied to the
+**latest released version** only; there are no long-term support branches.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| Latest release (`1.x`, current minor) | :white_check_mark: |
+| Older releases | :x: |
+
+If you are running an older version, please upgrade to the latest release before
+reporting an issue — the problem may already be fixed.
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub issues,
+discussions, or pull requests.**
+
+Instead, report them privately through GitHub's built-in **private vulnerability
+reporting**:
+
+1. Go to the [Security tab](https://github.com/lfnovo/open-notebook/security) of
+   the repository.
+2. Click **"Report a vulnerability"**.
+3. Fill out the form with as much detail as you can.
+
+This keeps the report private between you and the maintainers until a fix is
+available.
+
+When reporting, please include where relevant:
+
+- A description of the vulnerability and its impact.
+- Steps to reproduce (a proof of concept, affected endpoint/component, or sample
+  configuration).
+- The Open Notebook version and how you are running it (Docker Compose,
+  single-container, from source).
+- Any suggested remediation, if you have one.
+
+## What to Expect
+
+- **Acknowledgement:** we aim to acknowledge a report within **5 business days**.
+- **Assessment:** we will investigate, confirm the issue, and determine the
+  affected versions.
+- **Fix & disclosure:** once a fix is ready we will release it and, with your
+  consent, credit you in the release notes. We follow a coordinated-disclosure
+  approach and ask that you keep the report private until a fix is published.
+
+## Scope
+
+Open Notebook is **self-hosted**: you run the API, frontend, and SurrealDB
+yourself, and you control the AI provider credentials. Please keep in mind:
+
+- The built-in password middleware (`OPEN_NOTEBOOK_PASSWORD`) is a basic access
+  control, not a full authentication system. See
+  [docs/5-CONFIGURATION/security.md](docs/5-CONFIGURATION/security.md) for
+  hardening guidance (encryption key, reverse proxy, CORS, default credentials).
+- Misconfiguration of your own deployment (e.g. exposing SurrealDB with default
+  credentials, or running without `OPEN_NOTEBOOK_ENCRYPTION_KEY`) is a
+  deployment concern covered by that hardening guide rather than a vulnerability
+  in the project — though we welcome reports where the defaults or docs actively
+  steer users toward an insecure setup.
+
+Thank you for helping keep Open Notebook and its users safe.

From c993c6051cf328ef036d1081a6575ab17773081c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 18:07:51 -0300
Subject: [PATCH 112/345] fix: render [insight:<id>] chat references as
 clickable citations (#955)

Accept `insight` as an alias for `source_insight` in the reference parsers so the short form models sometimes emit becomes a clickable citation that opens the insight.

Fixes #490
---
 CHANGELOG.md                                 |  1 +
 frontend/src/lib/utils/source-references.tsx | 27 +++++++++++++-------
 2 files changed, 19 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 631998fd..05c64625 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- Chat references using the short `[insight:<id>]` form (emitted by some models) are now rendered as clickable citations like `[source_insight:<id>]` and `[note:<id>]` already were; `insight` is treated as an alias for `source_insight`, so clicking it opens the insight (#490)
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
 - Single-container image no longer hangs at "API not ready yet" on a brand-new instance. `supervisord.single.conf` ran the API and worker with `uv run` (without `--no-sync`), so at startup `uv` tried to sync dev dependencies it couldn't resolve against the `--no-dev` build. Both processes now use `uv run --no-sync`, matching the multi-container `supervisord.conf` (#609)
diff --git a/frontend/src/lib/utils/source-references.tsx b/frontend/src/lib/utils/source-references.tsx
index 4ab58270..d78c08aa 100644
--- a/frontend/src/lib/utils/source-references.tsx
+++ b/frontend/src/lib/utils/source-references.tsx
@@ -44,14 +44,19 @@ export interface ReferenceData {
  * @returns Array of parsed references
  */
 export function parseSourceReferences(text: string): ParsedReference[] {
-  // Match pattern: (source_insight|note|source):alphanumeric_id
-  // This handles references both inside and outside brackets
-  const pattern = /(source_insight|note|source):([a-zA-Z0-9_]+)/g
+  // Match pattern: (source_insight|insight|note|source):alphanumeric_id
+  // This handles references both inside and outside brackets.
+  // `insight:` is accepted as an alias for `source_insight` — some models emit the
+  // short form — and normalized below so all downstream rendering (icon, link,
+  // click handler) treats it identically. Keep `source_insight` first in the
+  // alternation so it wins over the `insight` alias.
+  const pattern = /(source_insight|insight|note|source):([a-zA-Z0-9_]+)/g
   const matches: ParsedReference[] = []
 
   let match
   while ((match = pattern.exec(text)) !== null) {
-    const type = match[1] as ReferenceType
+    const rawType = match[1]
+    const type = (rawType === 'insight' ? 'source_insight' : rawType) as ReferenceType
     const id = match[2]
 
     matches.push({
@@ -172,21 +177,25 @@ export function convertSourceReferences(
  * @returns Text with references converted to markdown links
  */
 export function convertReferencesToMarkdownLinks(text: string): string {
-  // Step 1: Find ALL references using simple greedy pattern
-  const refPattern = /(source_insight|note|source):([a-zA-Z0-9_]+)/g
+  // Step 1: Find ALL references using simple greedy pattern.
+  // `insight:` is accepted as an alias for `source_insight` and normalized below.
+  const refPattern = /(source_insight|insight|note|source):([a-zA-Z0-9_]+)/g
   const references: Array<{ type: string; id: string; index: number; length: number }> = []
 
   let match
   while ((match = refPattern.exec(text)) !== null) {
-    const type = match[1]
+    const rawType = match[1]
     const id = match[2]
 
     // Validate the reference
-    const validTypes = ['source', 'source_insight', 'note']
-    if (!validTypes.includes(type) || !id || id.length === 0 || id.length > 100) {
+    const validTypes = ['source', 'source_insight', 'insight', 'note']
+    if (!validTypes.includes(rawType) || !id || id.length === 0 || id.length > 100) {
       continue // Skip invalid references
     }
 
+    // Normalize the `insight` alias so the href/display use the canonical type
+    const type = rawType === 'insight' ? 'source_insight' : rawType
+
     references.push({
       type,
       id,

From 8e3d6d5dfd8c09e80243877d7adfe62392c1acba Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 18:22:27 -0300
Subject: [PATCH 113/345] fix: keep discover-models dialog submit button
 visible (#956)

Lay the model-discovery dialog out as grid-rows-[auto_1fr_auto] (fixed header/footer, scrollable body) so the Add button stays visible with long model lists. Fixes the OpenRouter-models registration blocker.

Fixes #816
---
 CHANGELOG.md                                            | 1 +
 frontend/src/app/(dashboard)/settings/api-keys/page.tsx | 6 ++++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 05c64625..7379675c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- OpenRouter (and other providers') "Discover models" dialog no longer cuts off the submit button: the dialog now uses a fixed header/footer with a scrollable body (`grid-rows-[auto_1fr_auto]`) instead of scrolling the whole content, so the "Add" button stays visible regardless of how many models are listed (#816)
 - Chat references using the short `[insight:<id>]` form (emitted by some models) are now rendered as clickable citations like `[source_insight:<id>]` and `[note:<id>]` already were; `insight` is treated as an alias for `source_insight`, so clicking it opens the insight (#490)
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 0bf99d2f..8121c502 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -549,7 +549,7 @@ function DiscoverModelsDialog({
 
   return (
     <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-lg max-h-[80vh] overflow-y-auto">
+      <DialogContent className="sm:max-w-lg max-h-[85vh] grid-rows-[auto_1fr_auto]">
         <DialogHeader>
           <DialogTitle>
             {t('models.discoverModels')} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
@@ -559,6 +559,7 @@ function DiscoverModelsDialog({
           </DialogDescription>
         </DialogHeader>
 
+        <div className="min-h-0 overflow-y-auto">
         {discoverModels.isPending ? (
           <div className="flex items-center justify-center py-12">
             <LoadingSpinner size="lg" />
@@ -611,7 +612,7 @@ function DiscoverModelsDialog({
             )}
 
             {/* Model list */}
-            <div className="space-y-1 max-h-60 overflow-y-auto">
+            <div className="space-y-1">
               {filteredModels.map((model) => (
                 <label
                   key={model.name}
@@ -652,6 +653,7 @@ function DiscoverModelsDialog({
             </div>
           </div>
         )}
+        </div>
 
         <DialogFooter>
           <Button variant="outline" onClick={() => onOpenChange(false)}>

From 6b6b3c673316f4ba1dcd2043fd4363dacde54f60 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 18:23:08 -0300
Subject: [PATCH 114/345] feat: render LaTeX math beyond chat (#957)

Extend KaTeX rendering (remark-math + rehype-katex) from chat-only to source content, source insights, Ask answers, transformation output, and the note editor live preview.

Fixes #269
---
 CHANGELOG.md                                         |  1 +
 .../components/TransformationPlayground.tsx          |  5 ++++-
 frontend/src/components/search/StreamingResponse.tsx |  5 ++++-
 .../src/components/source/SourceDetailContent.tsx    |  5 ++++-
 .../src/components/source/SourceInsightDialog.tsx    |  5 ++++-
 frontend/src/components/ui/markdown-editor.tsx       | 12 ++++++++++++
 6 files changed, 29 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7379675c..e8c892d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
+- LaTeX math rendering (KaTeX) now also applies to source content, source insights, Ask answers, transformation output, and the note editor preview — previously only chat had it (#269)
 
 ### Changed
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
index f907ad2a..006e257a 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
@@ -14,6 +14,8 @@ import { ModelSelector } from '@/components/common/ModelSelector'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 
 interface TransformationPlaygroundProps {
   transformations: Transformation[] | undefined
@@ -125,7 +127,8 @@ export function TransformationPlayground({ transformations, selectedTransformati
                   <CardContent className="pt-6">
                     <div className="prose prose-sm max-w-none dark:prose-invert">
                       <ReactMarkdown
-                        remarkPlugins={[remarkGfm]}
+                        remarkPlugins={[remarkGfm, remarkMath]}
+                        rehypePlugins={[rehypeKatex]}
                         components={{
                           table: ({ children }) => (
                             <div className="my-4 overflow-x-auto">
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index 084dbe45..9edad660 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -8,6 +8,8 @@ import { CheckCircle, Sparkles, Lightbulb, ChevronDown } from 'lucide-react'
 import { useState } from 'react'
 import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 import { convertReferencesToMarkdownLinks, createReferenceLinkComponent } from '@/lib/utils/source-references'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -175,7 +177,8 @@ function FinalAnswerContent({
   return (
     <div className="prose prose-sm max-w-none dark:prose-invert break-words prose-a:break-all prose-p:leading-relaxed prose-headings:mt-4 prose-headings:mb-2">
       <ReactMarkdown
-        remarkPlugins={[remarkGfm]}
+        remarkPlugins={[remarkGfm, remarkMath]}
+        rehypePlugins={[rehypeKatex]}
         components={{
           a: LinkComponent,
           table: ({ children }) => (
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/source/SourceDetailContent.tsx
index 0c24d282..d3fed308 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/source/SourceDetailContent.tsx
@@ -5,6 +5,8 @@ import { useQueryClient } from '@tanstack/react-query'
 import { isAxiosError } from 'axios'
 import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 import { sourcesApi } from '@/lib/api/sources'
 import { insightsApi, SourceInsightResponse } from '@/lib/api/insights'
 import { transformationsApi } from '@/lib/api/transformations'
@@ -522,7 +524,8 @@ export function SourceDetailContent({
                 )}
                 <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none prose-headings:font-semibold prose-a:text-blue-600 prose-code:bg-muted prose-code:px-1 prose-code:py-0.5 prose-code:rounded prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
                   <ReactMarkdown
-                    remarkPlugins={[remarkGfm]}
+                    remarkPlugins={[remarkGfm, remarkMath]}
+                    rehypePlugins={[rehypeKatex]}
                     components={{
                       p: ({ children }) => <p className="mb-4">{children}</p>,
                       h1: ({ children }) => <h1 className="text-2xl font-bold mt-6 mb-4">{children}</h1>,
diff --git a/frontend/src/components/source/SourceInsightDialog.tsx b/frontend/src/components/source/SourceInsightDialog.tsx
index 40e45395..a4945700 100644
--- a/frontend/src/components/source/SourceInsightDialog.tsx
+++ b/frontend/src/components/source/SourceInsightDialog.tsx
@@ -7,6 +7,8 @@ import { Button } from '@/components/ui/button'
 import { FileText } from 'lucide-react'
 import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 import { useInsight } from '@/lib/hooks/use-insights'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -127,7 +129,8 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
             ) : displayInsight ? (
               <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none">
                 <ReactMarkdown
-                  remarkPlugins={[remarkGfm]}
+                  remarkPlugins={[remarkGfm, remarkMath]}
+                  rehypePlugins={[rehypeKatex]}
                   components={{
                     table: ({ children }) => (
                       <div className="my-4 overflow-x-auto">
diff --git a/frontend/src/components/ui/markdown-editor.tsx b/frontend/src/components/ui/markdown-editor.tsx
index 891bb754..4d258283 100644
--- a/frontend/src/components/ui/markdown-editor.tsx
+++ b/frontend/src/components/ui/markdown-editor.tsx
@@ -2,12 +2,23 @@
 
 import dynamic from 'next/dynamic'
 import { forwardRef } from 'react'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
 
 const MDEditor = dynamic(
   () => import('@uiw/react-md-editor').then((mod) => mod.default),
   { ssr: false }
 )
 
+// Render `$...$` / `$$...$$` math in the live preview. @uiw/react-md-editor
+// concatenates these with its defaults (gfm, prism, raw), so syntax
+// highlighting and GFM are preserved. KaTeX CSS is loaded globally in
+// app/layout.tsx.
+const PREVIEW_OPTIONS = {
+  remarkPlugins: [remarkMath],
+  rehypePlugins: [rehypeKatex],
+}
+
 export interface MarkdownEditorProps {
   value?: string
   onChange?: (value?: string) => void
@@ -35,6 +46,7 @@ export const MarkdownEditor = forwardRef<HTMLDivElement, MarkdownEditorProps>(
             id: textareaId,
             name: name,
           }}
+          previewOptions={PREVIEW_OPTIONS}
           data-color-mode="light"
         />
       </div>

From c2e117e2ab650ec4df4b19bb35bc324174e2b18f Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 19:35:51 -0300
Subject: [PATCH 115/345] docs: fix Windows native guide referencing missing
 launcher script (#958)

Rewrite the Windows native Quick Start to start the four services manually via uv run, and add an optional sample launcher users can save themselves, instead of pointing at a start-open-notebook.bat that the repo never shipped.

Fixes #846
---
 CHANGELOG.md                          |  1 +
 docs/1-INSTALLATION/windows-native.md | 52 ++++++++++++++++++++++++---
 2 files changed, 48 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e8c892d8..3871630c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- Windows native install guide no longer points users at a `start-open-notebook.bat` that doesn't exist in the repo; the Quick Start now documents starting the four services manually with `uv run`, plus an optional sample launcher you can save yourself (#846)
 - OpenRouter (and other providers') "Discover models" dialog no longer cuts off the submit button: the dialog now uses a fixed header/footer with a scrollable body (`grid-rows-[auto_1fr_auto]`) instead of scrolling the whole content, so the "Add" button stays visible regardless of how many models are listed (#816)
 - Chat references using the short `[insight:<id>]` form (emitted by some models) are now rendered as clickable citations like `[source_insight:<id>]` and `[note:<id>]` already were; `insight` is treated as an alias for `source_insight`, so clicking it opens the insight (#490)
 - CRUD endpoints now return `404` (not `500`) for a non-existent resource. `ObjectModel.get()` raises `NotFoundError` rather than returning a falsy value, so the broad `except Exception` in each handler was masking it as a server error. Added an explicit `NotFoundError → 404` arm to the notebook (update / delete / delete-preview / add-source / remove-source), note (get / update / delete / list / create), model (delete), credential (update / delete) and embed handlers (#862)
diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
index 62cc6cc9..2712d436 100644
--- a/docs/1-INSTALLATION/windows-native.md
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -49,12 +49,30 @@ This guide documents how to install and run [Open Notebook](https://github.com/l
      SURREAL_URL="ws://127.0.0.1:8000/rpc"
      ```
 
-3. **Edit `start-open-notebook.bat`:**
+3. **Start the four services**, each in its own terminal, from the `open-notebook` folder.
 
-   - Update `ROOT` and `DATA_ROOT` paths to match your setup
-   - Place in parent directory of `open-notebook`
+   > Open Notebook does not ship a launcher script — start the services manually as below (or wrap them in your own `.bat`, see [Optional: one-click launcher](#optional-one-click-launcher)).
 
-4. **Run:** Double-click `start-open-notebook.bat`
+   ```batch
+   REM Optional: point Open Notebook at a separate data folder (see Issue 4 below).
+   REM Set this in each terminal before running, or skip to use ./data.
+   set DATA_FOLDER=%USERPROFILE%\Projects\open-notebook-data
+
+   REM Terminal 1 — SurrealDB
+   surreal start --user root --pass root --bind 127.0.0.1:8000 rocksdb:%DATA_FOLDER%\surrealdb
+
+   REM Terminal 2 — API
+   uv run --env-file .env run_api.py
+
+   REM Terminal 3 — Worker (module form avoids the Windows "canonicalize" error, see Issue 3)
+   set PYTHONPATH=%CD%
+   uv run --env-file .env python -m surreal_commands.cli.worker --import-modules commands
+
+   REM Terminal 4 — Frontend
+   cd frontend && npm run dev
+   ```
+
+4. **Open the app:** http://127.0.0.1:3000
 
 ## Directory Structure (Recommended)
 
@@ -69,11 +87,35 @@ YourProjectsFolder\
 │   ├── surrealdb\           # Database files
 │   ├── uploads\             # Uploaded documents
 │   └── sqlite-db\           # LangGraph checkpoints
-└── start-open-notebook.bat  # Launcher script
+└── start-open-notebook.bat  # Optional launcher you create yourself (see below)
 ```
 
 **Why separate data folder?** Prevents accidental data loss when updating/reinstalling code.
 
+## Optional: one-click launcher
+
+Open Notebook does not ship a launcher, but you can save the following as
+`start-open-notebook.bat` (anywhere you like) to start all four services with a
+double-click. Adjust `ROOT` and `DATA_ROOT` to match your setup.
+
+```batch
+@echo off
+REM --- adjust these two paths ---
+set ROOT=%USERPROFILE%\Projects\open-notebook
+set DATA_ROOT=%USERPROFILE%\Projects\open-notebook-data
+
+set DATA_FOLDER=%DATA_ROOT%
+set PYTHONPATH=%ROOT%
+cd /d %ROOT%
+
+start "SurrealDB" surreal start --user root --pass root --bind 127.0.0.1:8000 rocksdb:%DATA_ROOT%\surrealdb
+start "API" cmd /k "uv run --env-file .env run_api.py"
+start "Worker" cmd /k "uv run --env-file .env python -m surreal_commands.cli.worker --import-modules commands"
+start "Frontend" cmd /k "cd /d %ROOT%\frontend && npm run dev"
+```
+
+Then open http://127.0.0.1:3000.
+
 ## Critical Windows Fixes
 
 ### Issue 1: Wrong Python Version

From cac4e01975cab2dd65898f547d706f64abb482dc Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 21 Jun 2026 19:35:55 -0300
Subject: [PATCH 116/345] feat: add 'Refresh content' action for web-link
 sources (#959)

Add a 'Refresh content' menu item for completed web-link sources that re-fetches the URL and re-embeds via process_source (no transformations, so no duplicate insights). Translated across all 14 locales.

Fixes #259
---
 CHANGELOG.md                                  |  1 +
 .../notebooks/components/SourcesColumn.tsx    |  1 +
 .../src/components/sources/SourceCard.tsx     | 23 +++++++++++++++++++
 frontend/src/lib/locales/bn-IN/index.ts       |  1 +
 frontend/src/lib/locales/ca-ES/index.ts       |  1 +
 frontend/src/lib/locales/de-DE/index.ts       |  1 +
 frontend/src/lib/locales/en-US/index.ts       |  1 +
 frontend/src/lib/locales/es-ES/index.ts       |  1 +
 frontend/src/lib/locales/fr-FR/index.ts       |  1 +
 frontend/src/lib/locales/it-IT/index.ts       |  1 +
 frontend/src/lib/locales/ja-JP/index.ts       |  1 +
 frontend/src/lib/locales/pl-PL/index.ts       |  1 +
 frontend/src/lib/locales/pt-BR/index.ts       |  1 +
 frontend/src/lib/locales/ru-RU/index.ts       |  1 +
 frontend/src/lib/locales/tr-TR/index.ts       |  1 +
 frontend/src/lib/locales/zh-CN/index.ts       |  1 +
 frontend/src/lib/locales/zh-TW/index.ts       |  1 +
 17 files changed, 39 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3871630c..fb399e2b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
 - LaTeX math rendering (KaTeX) now also applies to source content, source insights, Ask answers, transformation output, and the note editor preview — previously only chat had it (#269)
+- "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
 
 ### Changed
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
diff --git a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
index 859c31ce..29395b0f 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
@@ -226,6 +226,7 @@ export function SourcesColumn({
                     onClick={handleSourceClick}
                     onDelete={handleDeleteClick}
                     onRetry={handleRetry}
+                    onRefreshContent={handleRetry}
                     onRemoveFromNotebook={handleRemoveFromNotebook}
                     onRefresh={onRefresh}
                     showRemoveFromNotebook={true}
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 9f21d2a9..8f0cd0a2 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -36,6 +36,7 @@ interface SourceCardProps {
   source: SourceListResponse
   onDelete?: (sourceId: string) => void
   onRetry?: (sourceId: string) => void
+  onRefreshContent?: (sourceId: string) => void
   onRemoveFromNotebook?: (sourceId: string) => void
   onClick?: (sourceId: string) => void
   onRefresh?: () => void
@@ -112,6 +113,7 @@ function SourceCardImpl({
   onClick,
   onDelete,
   onRetry,
+  onRefreshContent,
   onRemoveFromNotebook,
   onRefresh,
   className,
@@ -190,6 +192,12 @@ function SourceCardImpl({
     }
   }
 
+  const handleRefreshContent = () => {
+    if (onRefreshContent) {
+      onRefreshContent(source.id)
+    }
+  }
+
   const handleDelete = () => {
     if (onDelete) {
       onDelete(source.id)
@@ -350,6 +358,21 @@ function SourceCardImpl({
                 </>
               )}
 
+              {sourceType === 'link' && isCompleted && onRefreshContent && (
+                <>
+                  <DropdownMenuItem
+                    onClick={(e) => {
+                      e.stopPropagation()
+                      handleRefreshContent()
+                    }}
+                  >
+                    <RefreshCw className="h-4 w-4 mr-2" />
+                    {t('sources.refreshContent')}
+                  </DropdownMenuItem>
+                  <DropdownMenuSeparator />
+                </>
+              )}
+
               <DropdownMenuItem
                 onClick={(e) => {
                   e.stopPropagation()
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 676958cd..96711457 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -389,6 +389,7 @@ export const bnIN = {
     loadFailed: "উৎসের বিবরণ লোড করতে ব্যর্থ",
     removeFromNotebook: "নোটবুক থেকে সরান",
     retryProcessing: "প্রক্রিয়াকরণ পুনরায় চেষ্টা করুন",
+    refreshContent: "বিষয়বস্তু রিফ্রেশ করুন",
     deleteSource: "উৎস মুছে ফেলুন",
     retry: "আবার চেষ্টা",
     addExistingTitle: "বিদ্যমান উৎস যোগ করুন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 3655ba0b..b3b06caa 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -389,6 +389,7 @@ export const caES = {
     loadFailed: "Ha fallat la càrrega dels detalls de la font",
     removeFromNotebook: "Elimina del quadern",
     retryProcessing: "Torna a processar",
+    refreshContent: "Actualitza el contingut",
     deleteSource: "Suprimeix la font",
     retry: "Reintenta",
     addExistingTitle: "Afegeix fonts existents",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 262657cc..ba60c277 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -392,6 +392,7 @@ export const deDE = {
     loadFailed: "Quellendetails konnten nicht geladen werden",
     removeFromNotebook: "Aus Notebook entfernen",
     retryProcessing: "Verarbeitung erneut versuchen",
+    refreshContent: "Inhalt aktualisieren",
     deleteSource: "Quelle löschen",
     retry: "Erneut versuchen",
     addExistingTitle: "Vorhandene Quellen hinzufügen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 53feea43..81858132 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -389,6 +389,7 @@ export const enUS = {
     loadFailed: "Failed to load source details",
     removeFromNotebook: "Remove from Notebook",
     retryProcessing: "Retry Processing",
+    refreshContent: "Refresh content",
     deleteSource: "Delete Source",
     retry: "Retry",
     addExistingTitle: "Add Existing Sources",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 45c25ac1..ff104e2d 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -389,6 +389,7 @@ export const esES = {
     loadFailed: "Error al cargar los detalles de la fuente",
     removeFromNotebook: "Quitar del cuaderno",
     retryProcessing: "Reintentar procesamiento",
+    refreshContent: "Actualizar contenido",
     deleteSource: "Eliminar fuente",
     retry: "Reintentar",
     addExistingTitle: "Agregar fuentes existentes",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index affd6200..fd159dde 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -389,6 +389,7 @@ export const frFR = {
     loadFailed: "Échec du chargement des détails de la source",
     removeFromNotebook: "Retirer du carnet",
     retryProcessing: "Réessayer le traitement",
+    refreshContent: "Actualiser le contenu",
     deleteSource: "Supprimer la source",
     retry: "Réessayer",
     addExistingTitle: "Ajouter des sources existantes",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index faff0450..17d6f332 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -389,6 +389,7 @@ export const itIT = {
     loadFailed: "Impossibile caricare i dettagli della fonte",
     removeFromNotebook: "Rimuovi dal quaderno",
     retryProcessing: "Riprova elaborazione",
+    refreshContent: "Aggiorna contenuto",
     deleteSource: "Elimina fonte",
     retry: "Riprova",
     addExistingTitle: "Aggiungi fonti esistenti",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 3e323012..955fcbaa 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -389,6 +389,7 @@ export const jaJP = {
     loadFailed: "ソース詳細の読み込みに失敗しました",
     removeFromNotebook: "ノートブックから削除",
     retryProcessing: "処理を再試行",
+    refreshContent: "コンテンツを更新",
     deleteSource: "ソースを削除",
     retry: "再試行",
     addExistingTitle: "既存ソースを追加",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 4f7b9ba9..19cb2158 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -389,6 +389,7 @@ export const plPL = {
     loadFailed: "Nie udało się załadować szczegółów źródła",
     removeFromNotebook: "Usuń z notatnika",
     retryProcessing: "Ponów przetwarzanie",
+    refreshContent: "Odśwież treść",
     deleteSource: "Usuń źródło",
     retry: "Ponów",
     addExistingTitle: "Dodaj istniejące źródła",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index dd1400f1..5e1aece3 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -389,6 +389,7 @@ export const ptBR = {
     loadFailed: "Falha ao carregar detalhes da fonte",
     removeFromNotebook: "Remover do Caderno",
     retryProcessing: "Tentar Processamento Novamente",
+    refreshContent: "Atualizar conteúdo",
     deleteSource: "Excluir Fonte",
     retry: "Tentar Novamente",
     addExistingTitle: "Adicionar Fontes Existentes",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 8969ce4d..032a0e65 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -389,6 +389,7 @@ export const ruRU = {
     loadFailed: "Не удалось загрузить детали источника",
     removeFromNotebook: "Удалить из блокнота",
     retryProcessing: "Повторить обработку",
+    refreshContent: "Обновить содержимое",
     deleteSource: "Удалить источник",
     retry: "Повторить",
     addExistingTitle: "Добавить существующие источники",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index eb0c5929..1de945e7 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -389,6 +389,7 @@ export const trTR = {
     loadFailed: "Kaynak ayrıntıları yüklenemedi",
     removeFromNotebook: "Defterden Kaldır",
     retryProcessing: "İşlemeyi Yeniden Dene",
+    refreshContent: "İçeriği yenile",
     deleteSource: "Kaynağı Sil",
     retry: "Yeniden Dene",
     addExistingTitle: "Mevcut Kaynakları Ekle",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 0d2f022f..6cfa5700 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -389,6 +389,7 @@ export const zhCN = {
     loadFailed: "加载来源详情失败",
     removeFromNotebook: "从笔记本移除",
     retryProcessing: "重试处理",
+    refreshContent: "刷新内容",
     deleteSource: "删除来源",
     retry: "重试",
     addExistingTitle: "添加现有来源",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 25c84d08..51d004cb 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -389,6 +389,7 @@ export const zhTW = {
     loadFailed: "載入來源詳情失敗",
     removeFromNotebook: "從筆記本移除",
     retryProcessing: "重試處理",
+    refreshContent: "重新整理內容",
     deleteSource: "刪除來源",
     retry: "重試",
     addExistingTitle: "新增現有來源",

From 6595522bd432180cb5ffb21f8c3bc8d9d497aaa3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 25 Jun 2026 07:26:46 -0300
Subject: [PATCH 117/345] fix: run chat graph invoke off the event loop (#971)

Notebook chat (execute_chat) and source-chat SSE ran LangGraph's synchronous invoke() on the event loop, freezing the whole API while the LLM responded. Both now run via asyncio.to_thread(), matching the existing get_state() calls.

Fixes #704
---
 CHANGELOG.md               | 1 +
 api/routers/chat.py        | 8 ++++++--
 api/routers/source_chat.py | 8 ++++++--
 3 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fb399e2b..38949512 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- API no longer freezes for all requests while a chat waits on the LLM. Both the notebook chat (`execute_chat`) and source chat handlers ran LangGraph's synchronous `invoke()` directly on the event loop; they now run it via `asyncio.to_thread()` (matching the existing `get_state` calls), so other requests stay responsive — and the source-chat SSE can flush its early events instead of stalling until the model finishes (#704)
 - Windows native install guide no longer points users at a `start-open-notebook.bat` that doesn't exist in the repo; the Quick Start now documents starting the four services manually with `uv run`, plus an optional sample launcher you can save yourself (#846)
 - OpenRouter (and other providers') "Discover models" dialog no longer cuts off the submit button: the dialog now uses a fixed header/footer with a scrollable body (`grid-rows-[auto_1fr_auto]`) instead of scrolling the whole content, so the "Add" button stays visible regardless of how many models are listed (#816)
 - Chat references using the short `[insight:<id>]` form (emitted by some models) are now rendered as clickable citations like `[source_insight:<id>]` and `[note:<id>]` already were; `insight` is treated as an alias for `source_insight`, so clicking it opens the insight (#490)
diff --git a/api/routers/chat.py b/api/routers/chat.py
index abeeab82..103e0aa2 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -378,8 +378,12 @@ async def execute_chat(request: ExecuteChatRequest):
         user_message = HumanMessage(content=request.message)
         state_values["messages"].append(user_message)
 
-        # Execute chat graph
-        result = chat_graph.invoke(
+        # Execute chat graph in a thread so the synchronous LangGraph invoke
+        # (SqliteSaver checkpoints are sync) doesn't block the event loop and
+        # freeze the rest of the API while the LLM responds. Mirrors the
+        # get_state() calls above.
+        result = await asyncio.to_thread(
+            chat_graph.invoke,
             input=state_values,  # type: ignore[arg-type]
             config=RunnableConfig(
                 configurable={
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index 381d83c8..64182936 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -440,8 +440,12 @@ async def stream_source_chat_response(
         user_event = {"type": "user_message", "content": message, "timestamp": None}
         yield f"data: {json.dumps(user_event)}\n\n"
 
-        # Execute source chat graph synchronously (like notebook chat does)
-        result = source_chat_graph.invoke(
+        # Run the synchronous LangGraph invoke in a thread so it doesn't block the
+        # event loop. While blocked, even the already-yielded SSE events can't
+        # flush and every other request stalls until the LLM finishes. Mirrors the
+        # get_state() calls above.
+        result = await asyncio.to_thread(
+            source_chat_graph.invoke,
             input=state_values,  # type: ignore[arg-type]
             config=RunnableConfig(
                 configurable={"thread_id": session_id, "model_id": model_override}

From 8a5bf2d98aef25a67c468d7e62a82a724e30852c Mon Sep 17 00:00:00 2001
From: ProfTrader <3li8@proton.me>
Date: Thu, 25 Jun 2026 16:03:47 +0530
Subject: [PATCH 118/345] feat: sort sources by all table columns (#930)

Expand /api/sources sorting to type, title, created, updated, insights_count, and embedded (whitelisted, with a computed type alias so SurrealDB can order by it). Frontend adds sortable headers for every column plus an Updated column.

Fixes #895
---
 api/routers/sources.py                        | 31 ++++++-
 frontend/src/app/(dashboard)/sources/page.tsx | 85 ++++++++++++-------
 frontend/src/lib/api/sources.ts               |  4 +-
 frontend/src/lib/locales/bn-IN/index.ts       |  2 +-
 frontend/src/lib/locales/ca-ES/index.ts       |  2 +-
 frontend/src/lib/locales/de-DE/index.ts       |  2 +-
 frontend/src/lib/locales/en-US/index.ts       |  2 +-
 frontend/src/lib/locales/es-ES/index.ts       |  2 +-
 frontend/src/lib/locales/fr-FR/index.ts       |  2 +-
 frontend/src/lib/locales/it-IT/index.ts       |  2 +-
 frontend/src/lib/locales/ja-JP/index.ts       |  2 +-
 frontend/src/lib/locales/pl-PL/index.ts       |  2 +-
 frontend/src/lib/locales/pt-BR/index.ts       |  2 +-
 frontend/src/lib/locales/ru-RU/index.ts       |  2 +-
 frontend/src/lib/locales/tr-TR/index.ts       |  2 +-
 frontend/src/lib/locales/zh-CN/index.ts       |  2 +-
 frontend/src/lib/locales/zh-TW/index.ts       |  2 +-
 frontend/src/lib/utils/error-handler.ts       |  2 +-
 18 files changed, 99 insertions(+), 51 deletions(-)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index 8d5c8492..9e24e1db 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -37,6 +37,20 @@ from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
+SOURCE_SORT_FIELDS = {
+    "created": "created",
+    "updated": "updated",
+    "title": "title",
+    "insights_count": "insights_count",
+    "embedded": "embedded",
+    "type": "type",
+}
+
+SOURCE_TYPE_EXPRESSION = (
+    "IF asset.file_path != NONE THEN 'file' "
+    "ELSE IF asset.url != NONE THEN 'link' ELSE 'text' END"
+)
+
 
 def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
     """Generate unique filename like Streamlit app (append counter if file exists)."""
@@ -166,16 +180,21 @@ async def get_sources(
     ),
     offset: int = Query(0, ge=0, description="Number of sources to skip"),
     sort_by: str = Query(
-        "updated", description="Field to sort by (created or updated)"
+        "updated",
+        description="Field to sort by (type, title, created, updated, insights_count, or embedded)",
     ),
     sort_order: str = Query("desc", description="Sort order (asc or desc)"),
 ):
     """Get sources with pagination and sorting support."""
     try:
         # Validate sort parameters
-        if sort_by not in ["created", "updated"]:
+        if sort_by not in SOURCE_SORT_FIELDS:
             raise HTTPException(
-                status_code=400, detail="sort_by must be 'created' or 'updated'"
+                status_code=400,
+                detail=(
+                    "sort_by must be one of: type, title, created, updated, "
+                    "insights_count, embedded"
+                ),
             )
         if sort_order.lower() not in ["asc", "desc"]:
             raise HTTPException(
@@ -183,7 +202,9 @@ async def get_sources(
             )
 
         # Build ORDER BY clause
-        order_clause = f"ORDER BY {sort_by} {sort_order.upper()}"
+        order_clause = (
+            f"ORDER BY {SOURCE_SORT_FIELDS[sort_by]} {sort_order.upper()}, id ASC"
+        )
 
         # Build the query
         if notebook_id:
@@ -195,6 +216,7 @@ async def get_sources(
             # Query sources for specific notebook - include command field with FETCH
             query = f"""
                 SELECT id, asset, created, title, updated, topics, command,
+                ({SOURCE_TYPE_EXPRESSION}) AS type,
                 (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
                 (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
                 FROM (select value in from reference where out=$notebook_id)
@@ -214,6 +236,7 @@ async def get_sources(
             # Query all sources - include command field with FETCH
             query = f"""
                 SELECT id, asset, created, title, updated, topics, command,
+                ({SOURCE_TYPE_EXPRESSION}) AS type,
                 (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
                 (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
                 FROM source
diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index 8669fce6..fceefa56 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -2,13 +2,13 @@
 
 import { useState, useEffect, useCallback, useRef } from 'react'
 import { useRouter } from 'next/navigation'
-import { sourcesApi } from '@/lib/api/sources'
+import { sourcesApi, type SourceSortField } from '@/lib/api/sources'
 import { SourceListResponse } from '@/lib/types/api'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { AppShell } from '@/components/layout/AppShell'
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
-import { FileText, Link as LinkIcon, Upload, AlignLeft, Trash2, ArrowUpDown } from 'lucide-react'
+import { FileText, Link as LinkIcon, Upload, AlignLeft, Trash2, ArrowDown, ArrowUp, ArrowUpDown } from 'lucide-react'
 import { formatDistanceToNow } from 'date-fns'
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
@@ -20,12 +20,13 @@ import { getApiErrorKey } from '@/lib/utils/error-handler'
 
 export default function SourcesPage() {
   const { t, language } = useTranslation()
+  const failedToLoadMessage = t('sources.failedToLoad')
   const [sources, setSources] = useState<SourceListResponse[]>([])
   const [loading, setLoading] = useState(true)
   const [loadingMore, setLoadingMore] = useState(false)
   const [error, setError] = useState<string | null>(null)
   const [selectedIndex, setSelectedIndex] = useState(0)
-  const [sortBy, setSortBy] = useState<'created' | 'updated'>('updated')
+  const [sortBy, setSortBy] = useState<SourceSortField>('updated')
   const [sortOrder, setSortOrder] = useState<'asc' | 'desc'>('desc')
   const [deleteDialog, setDeleteDialog] = useState<{ open: boolean; source: SourceListResponse | null }>({
     open: false,
@@ -75,14 +76,14 @@ export default function SourcesPage() {
       offsetRef.current += data.length
     } catch (err) {
       console.error('Failed to fetch sources:', err)
-      setError(t('sources.failedToLoad'))
-      toast.error(t('sources.failedToLoad'))
+      setError(failedToLoadMessage)
+      toast.error(failedToLoadMessage)
     } finally {
       setLoading(false)
       setLoadingMore(false)
       loadingMoreRef.current = false
     }
-  }, [sortBy, sortOrder, t('sources.failedToLoad')])
+  }, [sortBy, sortOrder, failedToLoadMessage])
 
   // Initial load and when sort changes
   useEffect(() => {
@@ -202,7 +203,8 @@ export default function SourcesPage() {
     }
   }, [fetchSources, sources.length])
 
-  const toggleSort = (field: 'created' | 'updated') => {
+  const toggleSort = (field: SourceSortField) => {
+    setSelectedIndex(0)
     if (sortBy === field) {
       // Toggle order if clicking the same field
       setSortOrder(prev => prev === 'asc' ? 'desc' : 'asc')
@@ -213,6 +215,33 @@ export default function SourcesPage() {
     }
   }
 
+  const renderSortableHeader = (
+    field: SourceSortField,
+    label: string,
+    align: 'left' | 'center' = 'left'
+  ) => {
+    const active = sortBy === field
+    const SortIcon = active ? (sortOrder === 'asc' ? ArrowUp : ArrowDown) : ArrowUpDown
+
+    return (
+      <Button
+        variant="ghost"
+        size="sm"
+        onClick={() => toggleSort(field)}
+        className={cn(
+          "h-8 px-2 hover:bg-muted",
+          align === 'center' && "mx-auto"
+        )}
+      >
+        {label}
+        <SortIcon className={cn(
+          "ml-2 h-3 w-3",
+          active ? 'opacity-100' : 'opacity-30'
+        )} />
+      </Button>
+    )
+  }
+
   const getSourceIcon = (source: SourceListResponse) => {
     if (source.asset?.url) return <LinkIcon className="h-4 w-4" />
     if (source.asset?.file_path) return <Upload className="h-4 w-4" />
@@ -297,12 +326,13 @@ export default function SourcesPage() {
           <table
             ref={tableRef}
             tabIndex={0}
-            className="w-full min-w-[800px] outline-none table-fixed"
+            className="w-full min-w-[920px] outline-none table-fixed"
           >
             <colgroup>
               <col className="w-[120px]" />
               <col className="w-auto" />
               <col className="w-[140px]" />
+              <col className="w-[140px]" />
               <col className="w-[100px]" />
               <col className="w-[100px]" />
               <col className="w-[100px]" />
@@ -310,35 +340,22 @@ export default function SourcesPage() {
             <thead className="sticky top-0 bg-background z-10">
               <tr className="border-b bg-muted/50">
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground">
-                  {t('common.type')}
+                  {renderSortableHeader('type', t('common.type'))}
                 </th>
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground">
-                  {t('common.title')}
+                  {renderSortableHeader('title', t('common.title'))}
                 </th>
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground hidden sm:table-cell">
-                  <Button
-                    variant="ghost"
-                    size="sm"
-                    onClick={() => toggleSort('created')}
-                    className="h-8 px-2 hover:bg-muted"
-                  >
-                    {t('common.created_label')}
-                    <ArrowUpDown className={cn(
-                      "ml-2 h-3 w-3",
-                      sortBy === 'created' ? 'opacity-100' : 'opacity-30'
-                    )} />
-                    {sortBy === 'created' && (
-                      <span className="ml-1 text-xs">
-                        {sortOrder === 'asc' ? '↑' : '↓'}
-                      </span>
-                    )}
-                  </Button>
+                  {renderSortableHeader('created', t('common.created_label'))}
+                </th>
+                <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground hidden sm:table-cell">
+                  {renderSortableHeader('updated', t('common.updated_label'))}
                 </th>
                 <th className="h-12 px-4 text-center align-middle font-medium text-muted-foreground hidden md:table-cell">
-                  {t('sources.insights')}
+                  {renderSortableHeader('insights_count', t('sources.insights'), 'center')}
                 </th>
                 <th className="h-12 px-4 text-center align-middle font-medium text-muted-foreground hidden lg:table-cell">
-                  {t('sources.embedded')}
+                  {renderSortableHeader('embedded', t('sources.embedded'), 'center')}
                 </th>
                 <th className="h-12 px-4 text-right align-middle font-medium text-muted-foreground">
                   {t('common.actions')}
@@ -384,6 +401,12 @@ export default function SourcesPage() {
                       locale: getDateLocale(language)
                     })}
                   </td>
+                  <td className="h-12 px-4 text-muted-foreground text-sm hidden sm:table-cell">
+                    {formatDistanceToNow(new Date(source.updated), {
+                      addSuffix: true,
+                      locale: getDateLocale(language)
+                    })}
+                  </td>
                   <td className="h-12 px-4 text-center hidden md:table-cell">
                     <span className="text-sm font-medium">{source.insights_count || 0}</span>
                   </td>
@@ -406,7 +429,7 @@ export default function SourcesPage() {
               ))}
               {loadingMore && (
                 <tr>
-                  <td colSpan={6} className="h-16 text-center">
+                  <td colSpan={7} className="h-16 text-center">
                     <div className="flex items-center justify-center">
                       <LoadingSpinner />
                       <span className="ml-2 text-muted-foreground">{t('sources.loadingMore')}</span>
@@ -430,4 +453,4 @@ export default function SourcesPage() {
       />
     </AppShell>
   )
-}
\ No newline at end of file
+}
diff --git a/frontend/src/lib/api/sources.ts b/frontend/src/lib/api/sources.ts
index 8ce7f344..5acd1947 100644
--- a/frontend/src/lib/api/sources.ts
+++ b/frontend/src/lib/api/sources.ts
@@ -10,12 +10,14 @@ import {
   UpdateSourceRequest 
 } from '@/lib/types/api'
 
+export type SourceSortField = 'type' | 'title' | 'created' | 'updated' | 'insights_count' | 'embedded'
+
 export const sourcesApi = {
   list: async (params?: {
     notebook_id?: string
     limit?: number
     offset?: number
-    sort_by?: 'created' | 'updated'
+    sort_by?: SourceSortField
     sort_order?: 'asc' | 'desc'
   }) => {
     const response = await apiClient.get<SourceListResponse[]>('/sources', { params })
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 96711457..74f26050 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -146,7 +146,7 @@ export const bnIN = {
     invalidSourceType: "অবৈধ উৎস ধরন",
     processingFailed: "প্রক্রিয়াকরণ ব্যর্থ",
     failedToQueue: "প্রক্রিয়াকরণ কিউ করতে ব্যর্থ",
-    invalidSortBy: "সাজানোর ফিল্ড 'created' বা 'updated' হতে হবে",
+    invalidSortBy: "সাজানোর ফিল্ড type, title, created, updated, insights_count, বা embedded হতে হবে",
     invalidSortOrder: "সাজানোর ক্রম 'asc' বা 'desc' হতে হবে",
     accessDenied: "ফাইলের অ্যাক্সেস অস্বীকৃত",
     fileNotFoundOnServer: "সার্ভারে ফাইল খুঁজে পাওয়া যায়নি",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index b3b06caa..ff044d90 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -146,7 +146,7 @@ export const caES = {
     invalidSourceType: "Tipus de font no vàlid",
     processingFailed: "Ha fallat el processament",
     failedToQueue: "Ha fallat l'addició a la cua de processament",
-    invalidSortBy: "El camp d'ordenació ha de ser 'created' o 'updated'",
+    invalidSortBy: "El camp d'ordenació ha de ser type, title, created, updated, insights_count o embedded",
     invalidSortOrder: "L'ordre d'ordenació ha de ser 'asc' o 'desc'",
     accessDenied: "Accés al fitxer denegat",
     fileNotFoundOnServer: "No s'ha trobat el fitxer al servidor",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index ba60c277..bf9b7dd2 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -149,7 +149,7 @@ export const deDE = {
     invalidSourceType: "Ungültiger Quellentyp",
     processingFailed: "Verarbeitung fehlgeschlagen",
     failedToQueue: "Verarbeitung konnte nicht in die Warteschlange gestellt werden",
-    invalidSortBy: "Sortierfeld muss „created“ oder „updated“ sein",
+    invalidSortBy: "Sortierfeld muss type, title, created, updated, insights_count oder embedded sein",
     invalidSortOrder: "Sortierreihenfolge muss „asc“ oder „desc“ sein",
     accessDenied: "Zugriff auf Datei verweigert",
     fileNotFoundOnServer: "Datei auf dem Server nicht gefunden",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 81858132..750141b5 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -146,7 +146,7 @@ export const enUS = {
     invalidSourceType: "Invalid source type",
     processingFailed: "Processing failed",
     failedToQueue: "Failed to queue processing",
-    invalidSortBy: "Sort field must be 'created' or 'updated'",
+    invalidSortBy: "Sort field must be type, title, created, updated, insights_count, or embedded",
     invalidSortOrder: "Sort order must be 'asc' or 'desc'",
     accessDenied: "Access to file denied",
     fileNotFoundOnServer: "File not found on server",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index ff104e2d..f7cbc47e 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -146,7 +146,7 @@ export const esES = {
     invalidSourceType: "Tipo de fuente inválido",
     processingFailed: "El procesamiento falló",
     failedToQueue: "Error al poner en cola el procesamiento",
-    invalidSortBy: "El campo de ordenamiento debe ser 'created' o 'updated'",
+    invalidSortBy: "El campo de ordenamiento debe ser type, title, created, updated, insights_count o embedded",
     invalidSortOrder: "El orden debe ser 'asc' o 'desc'",
     accessDenied: "Acceso al archivo denegado",
     fileNotFoundOnServer: "Archivo no encontrado en el servidor",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index fd159dde..4f0ea77b 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -146,7 +146,7 @@ export const frFR = {
     invalidSourceType: "Type de source invalide",
     processingFailed: "Échec du traitement",
     failedToQueue: "Échec de la mise en file d'attente du traitement",
-    invalidSortBy: "Le champ de tri doit être 'created' ou 'updated'",
+    invalidSortBy: "Le champ de tri doit être type, title, created, updated, insights_count ou embedded",
     invalidSortOrder: "L'ordre de tri doit être 'asc' ou 'desc'",
     accessDenied: "Accès au fichier refusé",
     fileNotFoundOnServer: "Fichier introuvable sur le serveur",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 17d6f332..21aece9c 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -146,7 +146,7 @@ export const itIT = {
     invalidSourceType: "Tipo di fonte non valido",
     processingFailed: "Elaborazione fallita",
     failedToQueue: "Impossibile accodare l'elaborazione",
-    invalidSortBy: "Il campo di ordinamento deve essere 'created' o 'updated'",
+    invalidSortBy: "Il campo di ordinamento deve essere type, title, created, updated, insights_count o embedded",
     invalidSortOrder: "L'ordine deve essere 'asc' o 'desc'",
     accessDenied: "Accesso al file negato",
     fileNotFoundOnServer: "File non trovato sul server",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 955fcbaa..ae89e464 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -146,7 +146,7 @@ export const jaJP = {
     invalidSourceType: "無効なソースタイプです",
     processingFailed: "処理に失敗しました",
     failedToQueue: "処理キューへの追加に失敗しました",
-    invalidSortBy: "ソートフィールドは'created'または'updated'である必要があります",
+    invalidSortBy: "ソートフィールドは type、title、created、updated、insights_count、または embedded である必要があります",
     invalidSortOrder: "ソート順は'asc'または'desc'である必要があります",
     accessDenied: "ファイルへのアクセスが拒否されました",
     fileNotFoundOnServer: "サーバー上にファイルが見つかりません",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 19cb2158..3724d971 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -146,7 +146,7 @@ export const plPL = {
     invalidSourceType: "Nieprawidłowy typ źródła",
     processingFailed: "Przetwarzanie nie powiodło się",
     failedToQueue: "Nie udało się dodać do kolejki przetwarzania",
-    invalidSortBy: "Pole sortowania musi mieć wartość „created” lub „updated”",
+    invalidSortBy: "Pole sortowania musi mieć wartość type, title, created, updated, insights_count lub embedded",
     invalidSortOrder: "Kolejność sortowania musi mieć wartość „asc” lub „desc”",
     accessDenied: "Odmowa dostępu do pliku",
     fileNotFoundOnServer: "Nie znaleziono pliku na serwerze",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 5e1aece3..ea607e2b 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -146,7 +146,7 @@ export const ptBR = {
     invalidSourceType: "Tipo de fonte inválido",
     processingFailed: "Processamento falhou",
     failedToQueue: "Falha ao enfileirar processamento",
-    invalidSortBy: "Campo de ordenação deve ser 'created' ou 'updated'",
+    invalidSortBy: "Campo de ordenação deve ser type, title, created, updated, insights_count ou embedded",
     invalidSortOrder: "Ordem deve ser 'asc' ou 'desc'",
     accessDenied: "Acesso ao arquivo negado",
     fileNotFoundOnServer: "Arquivo não encontrado no servidor",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 032a0e65..f640e0e3 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -146,7 +146,7 @@ export const ruRU = {
     invalidSourceType: "Недопустимый тип источника",
     processingFailed: "Обработка не удалась",
     failedToQueue: "Не удалось поставить в очередь обработки",
-    invalidSortBy: "Поле сортировки должно быть 'created' или 'updated'",
+    invalidSortBy: "Поле сортировки должно быть type, title, created, updated, insights_count или embedded",
     invalidSortOrder: "Порядок сортировки должен быть 'asc' или 'desc'",
     accessDenied: "Доступ к файлу запрещён",
     fileNotFoundOnServer: "Файл не найден на сервере",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 1de945e7..a40d063f 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -146,7 +146,7 @@ export const trTR = {
     invalidSourceType: "Geçersiz kaynak türü",
     processingFailed: "İşleme başarısız",
     failedToQueue: "İşleme kuyruğa eklenemedi",
-    invalidSortBy: "Sıralama alanı 'created' veya 'updated' olmalıdır",
+    invalidSortBy: "Sıralama alanı type, title, created, updated, insights_count veya embedded olmalıdır",
     invalidSortOrder: "Sıralama yönü 'asc' veya 'desc' olmalıdır",
     accessDenied: "Dosyaya erişim reddedildi",
     fileNotFoundOnServer: "Sunucuda dosya bulunamadı",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 6cfa5700..6b432e30 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -146,7 +146,7 @@ export const zhCN = {
     invalidSourceType: "无效的源类型",
     processingFailed: "处理失败",
     failedToQueue: "排队处理失败",
-    invalidSortBy: "排序字段必须是 'created' 或 'updated'",
+    invalidSortBy: "排序字段必须是 type、title、created、updated、insights_count 或 embedded",
     invalidSortOrder: "排序方向必须是 'asc' 或 'desc'",
     accessDenied: "文件访问被拒绝",
     fileNotFoundOnServer: "服务器上找不到该文件",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 51d004cb..e74db4a2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -146,7 +146,7 @@ export const zhTW = {
     invalidSourceType: "無效的源類型",
     processingFailed: "處理失敗",
     failedToQueue: "排隊處理失敗",
-    invalidSortBy: "排序欄位必須是 'created' 或 'updated'",
+    invalidSortBy: "排序欄位必須是 type、title、created、updated、insights_count 或 embedded",
     invalidSortOrder: "排序方向必須是 'asc' 或 'desc'",
     accessDenied: "檔案存取被拒絕",
     fileNotFoundOnServer: "伺服器上找不到該檔案",
diff --git a/frontend/src/lib/utils/error-handler.ts b/frontend/src/lib/utils/error-handler.ts
index 58de92d5..b25a4a48 100644
--- a/frontend/src/lib/utils/error-handler.ts
+++ b/frontend/src/lib/utils/error-handler.ts
@@ -11,7 +11,7 @@ export const ERROR_MAP: Record<string, string> = {
   "Invalid source type": "apiErrors.invalidSourceType",
   "Processing failed": "apiErrors.processingFailed",
   "Failed to queue processing": "apiErrors.failedToQueue",
-  "sort_by must be 'created' or 'updated'": "apiErrors.invalidSortBy",
+  "sort_by must be one of: type, title, created, updated, insights_count, embedded": "apiErrors.invalidSortBy",
   "sort_order must be 'asc' or 'desc'": "apiErrors.invalidSortOrder",
   "Access to file denied": "apiErrors.accessDenied",
   "File not found on server": "apiErrors.fileNotFoundOnServer",

From dfe615571315a67b379fa6f3b1a3127b1cbd0664 Mon Sep 17 00:00:00 2001
From: ProfTrader <3li8@proton.me>
Date: Thu, 25 Jun 2026 16:12:13 +0530
Subject: [PATCH 119/345] docs: document flow-driven release process (#960)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add .github/RELEASE_PROCESS.md documenting the flow-driven release model (ready → PR → main → cut a version when mature), dev/stable image flow, and a maintainer verification checklist. The other #938 cleanup tasks (deprecated RC label, RC scripts, release-please) were already done or moot.

Fixes #938
---
 .github/RELEASE_PROCESS.md | 52 ++++++++++++++++++++++++++++++++++++++
 CHANGELOG.md               |  1 +
 2 files changed, 53 insertions(+)
 create mode 100644 .github/RELEASE_PROCESS.md

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
new file mode 100644
index 00000000..083a21d3
--- /dev/null
+++ b/.github/RELEASE_PROCESS.md
@@ -0,0 +1,52 @@
+# Release Process
+
+Open Notebook uses a flow-driven release process. Work moves from `ready`
+issues into pull requests, pull requests merge to `main`, and maintainers cut a
+version when the branch has enough validated change to ship.
+
+## Release Model
+
+- Patch releases ship backwards-compatible fixes.
+- Minor releases ship backwards-compatible features and improvements.
+- Major releases are planned with a milestone when they include breaking
+  changes or migrations that need user coordination.
+- Release candidates and community soak labels are no longer part of the
+  process. Use the `in-dev-build` label for changes available in development
+  images and `released` for shipped work.
+
+## Normal Flow
+
+1. Triage issues into `ready` once the scope and design are clear.
+2. Implement each change in a focused pull request linked to the approved issue.
+3. Merge the pull request after review and required checks pass.
+4. Let the development build publish the `v1-dev` image from `main`.
+5. Cut a stable release when `main` has a coherent set of changes ready for
+   users.
+
+## Cutting A Stable Release
+
+1. Confirm `main` is green and review the changes since the previous release.
+2. Update `pyproject.toml` with the target semantic version.
+3. Move the relevant `CHANGELOG.md` entries from `Unreleased` into a dated
+   version section.
+4. Create a GitHub release for the version tag, for example `v1.11.0`.
+5. Run the `Build and Release` workflow. Push `v1-latest` tags for normal
+   stable releases.
+6. Verify the published images are available in GHCR and Docker Hub when
+   Docker Hub credentials are configured.
+7. Mark shipped issues with `released` and close any release-tracking tasks.
+
+## Manual Verification
+
+Before publishing a stable release, manually verify the areas touched by the
+release. At minimum, cover:
+
+- installation or upgrade path changed by the release;
+- source ingestion and processing when content or worker behavior changed;
+- chat, search, notes, and notebooks when user workflows changed;
+- provider setup when model, credential, or API behavior changed;
+- Docker image startup when packaging, environment, or dependency changes
+  landed.
+
+Automated checks should catch regressions where possible, but the release owner
+chooses the manual matrix from the actual changes in the release.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 38949512..c8203e7d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- Documented the flow-driven release process in `.github/RELEASE_PROCESS.md`, including the `ready` to `main` to stable release path, dev/stable image labels, and maintainer verification checklist (#938)
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)

From 5a7b775270cf15538632b1a72432dd73ccc2d76f Mon Sep 17 00:00:00 2001
From: ProfTrader <3li8@proton.me>
Date: Thu, 25 Jun 2026 16:46:41 +0530
Subject: [PATCH 120/345] refactor(types): type-check domain base model (#961)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Remove the mypy ignore_errors override for open_notebook.domain.base and fix the surfaced type errors by adding typed DB config helpers (namespace/database default to open_notebook, password to root — matching the documented defaults). Adds tests/test_repository_config.py.

One slice of the incremental mypy cleanup. Refs #945
---
 mypy.ini                             |  3 ---
 open_notebook/database/repository.py | 25 ++++++++++++++-----
 tests/test_repository_config.py      | 36 ++++++++++++++++++++++++++++
 3 files changed, 55 insertions(+), 9 deletions(-)
 create mode 100644 tests/test_repository_config.py

diff --git a/mypy.ini b/mypy.ini
index 186fd9d7..eb1e9811 100644
--- a/mypy.ini
+++ b/mypy.ini
@@ -23,9 +23,6 @@ ignore_errors = True
 [mypy-api.routers.models]
 ignore_errors = True
 
-[mypy-open_notebook.domain.base]
-ignore_errors = True
-
 [mypy-open_notebook.domain.notebook]
 ignore_errors = True
 
diff --git a/open_notebook/database/repository.py b/open_notebook/database/repository.py
index 3fb9e04e..15491ee3 100644
--- a/open_notebook/database/repository.py
+++ b/open_notebook/database/repository.py
@@ -9,7 +9,12 @@ from surrealdb import AsyncSurreal, RecordID  # type: ignore
 T = TypeVar("T", Dict[str, Any], List[Dict[str, Any]])
 
 
-def get_database_url():
+def _get_env_or_default(name: str, default: str) -> str:
+    value = os.getenv(name)
+    return value if value else default
+
+
+def get_database_url() -> str:
     """Get database URL with backward compatibility"""
     surreal_url = os.getenv("SURREAL_URL")
     if surreal_url:
@@ -21,9 +26,19 @@ def get_database_url():
     return f"ws://{address}/rpc:{port}"
 
 
-def get_database_password():
+def get_database_password() -> str:
     """Get password with backward compatibility"""
-    return os.getenv("SURREAL_PASSWORD") or os.getenv("SURREAL_PASS")
+    return os.getenv("SURREAL_PASSWORD") or os.getenv("SURREAL_PASS") or "root"
+
+
+def get_database_namespace() -> str:
+    """Get configured SurrealDB namespace."""
+    return _get_env_or_default("SURREAL_NAMESPACE", "open_notebook")
+
+
+def get_database_name() -> str:
+    """Get configured SurrealDB database name."""
+    return _get_env_or_default("SURREAL_DATABASE", "open_notebook")
 
 
 def parse_record_ids(obj: Any) -> Any:
@@ -53,9 +68,7 @@ async def db_connection():
             "password": get_database_password(),
         }
     )
-    await db.use(
-        os.environ.get("SURREAL_NAMESPACE"), os.environ.get("SURREAL_DATABASE")
-    )
+    await db.use(get_database_namespace(), get_database_name())
     try:
         yield db
     finally:
diff --git a/tests/test_repository_config.py b/tests/test_repository_config.py
new file mode 100644
index 00000000..d28319c6
--- /dev/null
+++ b/tests/test_repository_config.py
@@ -0,0 +1,36 @@
+from open_notebook.database.repository import (
+    get_database_name,
+    get_database_namespace,
+    get_database_password,
+)
+
+
+def test_database_namespace_defaults_when_unset(monkeypatch):
+    monkeypatch.delenv("SURREAL_NAMESPACE", raising=False)
+
+    assert get_database_namespace() == "open_notebook"
+
+
+def test_database_namespace_defaults_when_empty(monkeypatch):
+    monkeypatch.setenv("SURREAL_NAMESPACE", "")
+
+    assert get_database_namespace() == "open_notebook"
+
+
+def test_database_name_defaults_when_unset(monkeypatch):
+    monkeypatch.delenv("SURREAL_DATABASE", raising=False)
+
+    assert get_database_name() == "open_notebook"
+
+
+def test_database_name_defaults_when_empty(monkeypatch):
+    monkeypatch.setenv("SURREAL_DATABASE", "")
+
+    assert get_database_name() == "open_notebook"
+
+
+def test_database_password_defaults_when_empty(monkeypatch):
+    monkeypatch.setenv("SURREAL_PASSWORD", "")
+    monkeypatch.setenv("SURREAL_PASS", "")
+
+    assert get_database_password() == "root"

From 9bbd06bf9bf2c3e254cfeee07c1da5f5cbcbcdee Mon Sep 17 00:00:00 2001
From: ProfTrader <3li8@proton.me>
Date: Thu, 25 Jun 2026 16:55:20 +0530
Subject: [PATCH 121/345] fix: address dependency audit findings (#962)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add npm overrides for vulnerable transitive frontend packages (ws, brace-expansion, ajv, @eslint/plugin-kit, postcss) — npm audit now reports 0 vulnerabilities — refresh uv.lock (langsmith, pydantic-settings, pip), and harden external window.open(..., '_blank') calls with noopener,noreferrer.

Verified: uv lock --check consistent, npm audit 0 vulns, npm build passes.
---
 frontend/package-lock.json                    | 99 +++++++++----------
 frontend/package.json                         |  7 ++
 .../components/source/SourceDetailContent.tsx | 42 +++++---
 frontend/src/lib/hooks/use-version-check.ts   |  2 +-
 uv.lock                                       | 19 ++--
 5 files changed, 91 insertions(+), 78 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 66114352..c02d9f22 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1156,16 +1156,30 @@
       }
     },
     "node_modules/@eslint/plugin-kit": {
-      "version": "0.3.3",
-      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.3.3.tgz",
-      "integrity": "sha512-1+WqvgNMhmlAambTvT3KPtCl/Ibr68VldY2XY40SL1CE0ZXiakFR/cbTspaF5HsnpDMvcYYoJHfl4980NBjGag==",
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.7.2.tgz",
+      "integrity": "sha512-+CNAzxglkrpNf/kKywqQfk74QjtceuOE7Qm+AF8miRvPF/wmmK5+OJOgVh3AVTT3RP2mH3+FOaxlE5v72owk0A==",
       "dev": true,
+      "license": "Apache-2.0",
       "dependencies": {
-        "@eslint/core": "^0.15.1",
+        "@eslint/core": "^1.2.1",
         "levn": "^0.4.1"
       },
       "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+        "node": "^20.19.0 || ^22.13.0 || >=24"
+      }
+    },
+    "node_modules/@eslint/plugin-kit/node_modules/@eslint/core": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@eslint/core/-/core-1.2.1.tgz",
+      "integrity": "sha512-MwcE1P+AZ4C6DWlpin/OmOA54mmIZ/+xZuJiQd4SyB29oAJjN30UW9wkKNptW2ctp4cEsvhlLY/CsQ1uoHDloQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/json-schema": "^7.0.15"
+      },
+      "engines": {
+        "node": "^20.19.0 || ^22.13.0 || >=24"
       }
     },
     "node_modules/@floating-ui/core": {
@@ -4478,15 +4492,6 @@
         "typescript": ">=4.8.4 <5.9.0"
       }
     },
-    "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
-      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
-      "dev": true,
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/fast-glob": {
       "version": "3.3.3",
       "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz",
@@ -4531,6 +4536,17 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch/node_modules/brace-expansion": {
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
+      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
+      }
+    },
     "node_modules/@typescript-eslint/utils": {
       "version": "8.37.0",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.37.0.tgz",
@@ -5105,10 +5121,11 @@
       }
     },
     "node_modules/ajv": {
-      "version": "6.12.6",
-      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
-      "integrity": "sha512-j3fVLgvTo527anyYyJOGTYJbG+vnnQYvE0m5mmkc1TK+nxAppkCLMIL0aZ4dblVCNoGShhm+kzE4ZUykBoMg4g==",
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.15.0.tgz",
+      "integrity": "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.1",
         "fast-json-stable-stringify": "^2.0.0",
@@ -5441,10 +5458,11 @@
       "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww=="
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
+      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
         "concat-map": "0.0.1"
@@ -9766,33 +9784,6 @@
         "react-dom": "^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc"
       }
     },
-    "node_modules/next/node_modules/postcss": {
-      "version": "8.4.31",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
-      "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==",
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/postcss/"
-        },
-        {
-          "type": "tidelift",
-          "url": "https://tidelift.com/funding/github/npm/postcss"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
-      "dependencies": {
-        "nanoid": "^3.3.6",
-        "picocolors": "^1.0.0",
-        "source-map-js": "^1.0.2"
-      },
-      "engines": {
-        "node": "^10 || ^12 || >=14"
-      }
-    },
     "node_modules/node-releases": {
       "version": "2.0.47",
       "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.47.tgz",
@@ -10121,10 +10112,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.6",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
-      "integrity": "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==",
-      "dev": true,
+      "version": "8.5.10",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz",
+      "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==",
       "funding": [
         {
           "type": "opencollective",
@@ -10139,6 +10129,7 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "dependencies": {
         "nanoid": "^3.3.11",
         "picocolors": "^1.1.1",
@@ -12600,9 +12591,9 @@
       }
     },
     "node_modules/ws": {
-      "version": "8.19.0",
-      "resolved": "https://registry.npmmirror.com/ws/-/ws-8.19.0.tgz",
-      "integrity": "sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==",
+      "version": "8.21.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
+      "integrity": "sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/frontend/package.json b/frontend/package.json
index 5ab7f97f..226fa2c5 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -75,5 +75,12 @@
     "tw-animate-css": "^1.3.5",
     "typescript": "^5",
     "vitest": "^4.1.8"
+  },
+  "overrides": {
+    "ws": "8.21.0",
+    "brace-expansion": "1.1.15",
+    "ajv": "6.15.0",
+    "@eslint/plugin-kit": "0.7.2",
+    "postcss": "8.5.10"
   }
 }
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/source/SourceDetailContent.tsx
index d3fed308..26d3ad82 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/source/SourceDetailContent.tsx
@@ -77,6 +77,17 @@ interface SourceDetailContentProps {
   onClose?: () => void
 }
 
+const safeExternalHref = (url: string | null | undefined): string | null => {
+  if (!url) return null
+
+  try {
+    const parsedUrl = new URL(url)
+    return ['http:', 'https:'].includes(parsedUrl.protocol) ? parsedUrl.href : null
+  } catch {
+    return null
+  }
+}
+
 export function SourceDetailContent({
   sourceId,
   showChatButton = false,
@@ -318,6 +329,8 @@ export function SourceDetailContent({
     return 'text'
   }
 
+  const externalHref = useMemo(() => safeExternalHref(source?.asset?.url), [source?.asset?.url])
+
   const handleCopyUrl = useCallback(() => {
     if (source?.asset?.url) {
       navigator.clipboard.writeText(source.asset.url)
@@ -328,10 +341,10 @@ export function SourceDetailContent({
   }, [source, t])
 
   const handleOpenExternal = useCallback(() => {
-    if (source?.asset?.url) {
-      window.open(source.asset.url, '_blank')
+    if (externalHref) {
+      window.open(externalHref, '_blank', 'noopener,noreferrer')
     }
-  }, [source])
+  }, [externalHref])
 
   const getYouTubeVideoId = (url: string): string | null => {
     const patterns = [
@@ -347,14 +360,14 @@ export function SourceDetailContent({
   }
 
   const isYouTubeUrl = useMemo(() => {
-    if (!source?.asset?.url) return false
-    return !!(getYouTubeVideoId(source.asset.url))
-  }, [source?.asset?.url])
+    if (!externalHref) return false
+    return !!(getYouTubeVideoId(externalHref))
+  }, [externalHref])
 
   const youTubeVideoId = useMemo(() => {
-    if (!source?.asset?.url) return null
-    return getYouTubeVideoId(source.asset.url)
-  }, [source?.asset?.url])
+    if (!externalHref) return null
+    return getYouTubeVideoId(externalHref)
+  }, [externalHref])
 
   const handleDelete = async () => {
     if (!source) return
@@ -481,16 +494,16 @@ export function SourceDetailContent({
                   {isYouTubeUrl && <Youtube className="h-5 w-5" />}
                   {t('sources.content')}
                 </CardTitle>
-                {source.asset?.url && !isYouTubeUrl && (
+                {externalHref && !isYouTubeUrl && (
                   <CardDescription className="flex items-center gap-2">
                     <LinkIcon className="h-4 w-4" />
                     <a
-                      href={source.asset.url}
+                      href={externalHref}
                       target="_blank"
                       rel="noopener noreferrer"
                       className="hover:underline text-blue-600"
                     >
-                      {source.asset.url}
+                      {source.asset?.url}
                     </a>
                   </CardDescription>
                 )}
@@ -507,10 +520,10 @@ export function SourceDetailContent({
                         allowFullScreen
                       />
                     </div>
-                    {source.asset?.url && (
+                    {externalHref && (
                       <div className="mt-2">
                         <a
-                          href={source.asset.url}
+                          href={externalHref}
                           target="_blank"
                           rel="noopener noreferrer"
                           className="text-sm text-muted-foreground hover:underline inline-flex items-center gap-1"
@@ -714,6 +727,7 @@ export function SourceDetailContent({
                           size="sm"
                           variant="outline"
                           onClick={handleOpenExternal}
+                          disabled={!externalHref}
                         >
                           <ExternalLink className="h-4 w-4" />
                         </Button>
diff --git a/frontend/src/lib/hooks/use-version-check.ts b/frontend/src/lib/hooks/use-version-check.ts
index fff80148..f159fd70 100644
--- a/frontend/src/lib/hooks/use-version-check.ts
+++ b/frontend/src/lib/hooks/use-version-check.ts
@@ -32,7 +32,7 @@ export function useVersionCheck() {
           closeButton: true,
           action: {
             label: t('advanced.viewOnGithub'),
-            onClick: () => window.open('https://github.com/lfnovo/open-notebook', '_blank'),
+            onClick: () => window.open('https://github.com/lfnovo/open-notebook', '_blank', 'noopener,noreferrer'),
           },
           onDismiss: () => sessionStorage.setItem(dismissKey, 'true'),
         })
diff --git a/uv.lock b/uv.lock
index bba82c39..4d826403 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1660,7 +1660,7 @@ wheels = [
 
 [[package]]
 name = "langsmith"
-version = "0.8.0"
+version = "0.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
@@ -1670,12 +1670,13 @@ dependencies = [
     { name = "requests" },
     { name = "requests-toolbelt" },
     { name = "uuid-utils" },
+    { name = "websockets" },
     { name = "xxhash" },
     { name = "zstandard" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/a8/64/95f1f013531395f4e8ed73caeee780f65c7c58fe028cb543f8937b45611b/langsmith-0.8.0.tar.gz", hash = "sha256:59fe5b2a56bbbe14a08aa76691f84b49e8675dd21e11b57d80c6db8c08bac2e3", size = 4432996, upload-time = "2026-04-30T22:13:07.341Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/92/34/a77abacdece10440fa04d8b2afd884708a98f62ff271ee79d75bcb8bb9bc/langsmith-0.9.0.tar.gz", hash = "sha256:21b381462ee44713dd5e2163b7db44fb28fde65146aad27aeabd778c464da0f0", size = 4556365, upload-time = "2026-06-22T15:37:18.733Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f3/e1/a4be2e696c9473bb53298df398237da5674704d781d4b748ed35aeef592a/langsmith-0.8.0-py3-none-any.whl", hash = "sha256:12cc4bc5622b835a6d841964d6034df3617bdb912dae0c1381fd0a68a9b3a3ef", size = 393268, upload-time = "2026-04-30T22:13:05.56Z" },
+    { url = "https://files.pythonhosted.org/packages/c6/64/d411be633d1c976955a09f6b3c58fbe70592d1370d262d171f7daf7e3793/langsmith-0.9.0-py3-none-any.whl", hash = "sha256:5eeccc36ff956946df8510a2b3b5a87d36c44f11bfb2e5205e9cf03d7b65ec9c", size = 578496, upload-time = "2026-06-22T15:37:16.42Z" },
 ]
 
 [[package]]
@@ -2429,11 +2430,11 @@ wheels = [
 
 [[package]]
 name = "pip"
-version = "26.1"
+version = "26.1.2"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/73/7e/d2b04004e1068ad4fdfa2f227b839b5d03e602e47cdbbf49de71137c9546/pip-26.1.tar.gz", hash = "sha256:81e13ebcca3ffa8cc85e4deff5c27e1ee26dea0aa7fc2f294a073ac208806ff3", size = 1840316, upload-time = "2026-04-26T21:00:05.406Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/01/91/47e7d486260f618783899587af63ccf7980fb60245c3e63dd4571c6b57ad/pip-26.1.2.tar.gz", hash = "sha256:f49cd134c61cf2fd75e0ce2676db03e4054504a5a4986d00f8299ae632dc4605", size = 1840799, upload-time = "2026-05-31T17:33:58.56Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/70/7a/be4bd8bcbb24ea475856dd68159d78b03b2bb53dae369f69c9606b8888f5/pip-26.1-py3-none-any.whl", hash = "sha256:4e8486d821d814b77319acb7b9e8bf5a4ee7590a643e7cb21029f209be8573c1", size = 1812804, upload-time = "2026-04-26T21:00:03.194Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/95/6b5cb3461ea5673ba0995989746db58eb18b91b54dbf331e72f569540946/pip-26.1.2-py3-none-any.whl", hash = "sha256:382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab", size = 1813144, upload-time = "2026-05-31T17:33:56.772Z" },
 ]
 
 [[package]]
@@ -2733,16 +2734,16 @@ wheels = [
 
 [[package]]
 name = "pydantic-settings"
-version = "2.12.0"
+version = "2.14.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "pydantic" },
     { name = "python-dotenv" },
     { name = "typing-inspection" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/43/4b/ac7e0aae12027748076d72a8764ff1c9d82ca75a7a52622e67ed3f765c54/pydantic_settings-2.12.0.tar.gz", hash = "sha256:005538ef951e3c2a68e1c08b292b5f2e71490def8589d4221b95dab00dafcfd0", size = 194184, upload-time = "2025-11-10T14:25:47.013Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/5c/b5/8f48e906c3e0205276e8bd8cb7512217a87b2685304d64be27cad5b3019f/pydantic_settings-2.14.2.tar.gz", hash = "sha256:c19dd64b19097f1de80184f0cc7b0272a13ae6e170cbf240a3e27e381ed14a5f", size = 237700, upload-time = "2026-06-19T13:44:56.324Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c1/60/5d4751ba3f4a40a6891f24eec885f51afd78d208498268c734e256fb13c4/pydantic_settings-2.12.0-py3-none-any.whl", hash = "sha256:fddb9fd99a5b18da837b29710391e945b1e30c135477f484084ee513adb93809", size = 51880, upload-time = "2025-11-10T14:25:45.546Z" },
+    { url = "https://files.pythonhosted.org/packages/77/c1/6e422f34e569cf8e18df68d1939c81c099d2b61e4f7d9621c8a77560799c/pydantic_settings-2.14.2-py3-none-any.whl", hash = "sha256:a20c97b37910b6550d5ea50fbcc2d4187defe58cd57070b73863d069419c9440", size = 61715, upload-time = "2026-06-19T13:44:55.02Z" },
 ]
 
 [[package]]

From 7c2dcde8b1b22ec409f38f97af9913c0c5d328de Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 25 Jun 2026 08:31:44 -0300
Subject: [PATCH 122/345] docs(changelog): add missing Security entry for #962
 (#972)

Restore the dependency-audit Security entry that was dropped during #962's squash merge.
---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c8203e7d..d0b17059 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Single-container image no longer hangs at "API not ready yet" on a brand-new instance. `supervisord.single.conf` ran the API and worker with `uv run` (without `--no-sync`), so at startup `uv` tried to sync dev dependencies it couldn't resolve against the `--no-dev` build. Both processes now use `uv run --no-sync`, matching the multi-container `supervisord.conf` (#609)
 - Note editor now expands to fill the dialog instead of being capped at `500px`; removed the `max-h-[500px]` constraint that overrode the `flex-1` parent and cramped editing on tall windows (#932)
 
+### Security
+- Resolved dependency audit findings: added npm `overrides` for vulnerable transitive frontend packages (`ws`, `brace-expansion`, `ajv`, `@eslint/plugin-kit`, `postcss`) — `npm audit` now reports 0 vulnerabilities — refreshed `uv.lock` (`langsmith`, `pydantic-settings`, `pip`), and hardened external `window.open(..., '_blank')` calls with `noopener,noreferrer` (#962)
+
 ## [1.10.0] - 2026-06-17
 
 ### Security

From 14ba8f51e81f34855cd21c390f2576215d8808dd Mon Sep 17 00:00:00 2001
From: D-revv <123307719+D-revv@users.noreply.github.com>
Date: Thu, 25 Jun 2026 13:41:37 +0200
Subject: [PATCH 123/345] test(ci): measure and report test coverage (#966)

Add backend (pytest-cov) and frontend (Vitest v8) coverage to CI: pytest runs with --cov + uploads coverage.xml, vitest runs with --coverage + uploads the report. Lockfiles (uv.lock, package-lock.json) regenerated for the new deps; verified both coverage runs pass in CI.

Closes #942
---
 .github/workflows/test.yml |  20 +++-
 frontend/package-lock.json | 240 +++++++++++++++++++++++++++++--------
 frontend/package.json      |   4 +-
 frontend/vitest.config.ts  |   5 +
 pyproject.toml             |   1 +
 uv.lock                    |  60 ++++++++++
 6 files changed, 273 insertions(+), 57 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 931fefad..209d6268 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -32,8 +32,14 @@ jobs:
       - name: Install dependencies
         run: uv sync
 
-      - name: Run tests
-        run: uv run pytest tests/ -v
+      - name: Run tests with coverage
+        run: uv run pytest tests/ -v --cov=open_notebook --cov=api --cov-report=term-missing --cov-report=xml
+
+      - name: Upload coverage artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: backend-coverage
+          path: coverage.xml
 
   frontend:
     name: Frontend Tests
@@ -55,5 +61,11 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Run tests
-        run: npm test
+      - name: Run tests with coverage
+        run: npm run test:coverage
+
+      - name: Upload coverage artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: frontend-coverage
+          path: frontend/coverage/
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index c02d9f22..eacd17e7 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -63,6 +63,7 @@
         "@types/react": "^19",
         "@types/react-dom": "^19",
         "@vitejs/plugin-react": "^4.3.4",
+        "@vitest/coverage-v8": "^4.1.8",
         "@vitest/ui": "^4.1.8",
         "eslint": "^9",
         "eslint-config-next": "15.4.2",
@@ -449,6 +450,16 @@
         "node": ">=6.9.0"
       }
     },
+    "node_modules/@bcoe/v8-coverage": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz",
+      "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/@csstools/color-helpers": {
       "version": "5.1.0",
       "resolved": "https://registry.npmmirror.com/@csstools/color-helpers/-/color-helpers-5.1.0.tgz",
@@ -1804,10 +1815,11 @@
       "license": "MIT"
     },
     "node_modules/@jridgewell/trace-mapping": {
-      "version": "0.3.29",
-      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.29.tgz",
-      "integrity": "sha512-uw6guiW/gcAGPDhLmd77/6lW8QLeiV5RUTsAX46Db6oLhGaVj4lhnPwb184s1bkc8kdVg/+h988dro8GRDpmYQ==",
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@jridgewell/resolve-uri": "^3.1.0",
         "@jridgewell/sourcemap-codec": "^1.4.14"
@@ -4954,17 +4966,48 @@
         "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0"
       }
     },
+    "node_modules/@vitest/coverage-v8": {
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.9.tgz",
+      "integrity": "sha512-G9/lgqibheLVBDRuya45EbsEXTYcWoSG+TLg7i2axuzx0Eq62eXn+aWXyaVdV5vKvFSWd6ywcX8hA7la9Pvu8g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@bcoe/v8-coverage": "^1.0.2",
+        "@vitest/utils": "4.1.9",
+        "ast-v8-to-istanbul": "^1.0.0",
+        "istanbul-lib-coverage": "^3.2.2",
+        "istanbul-lib-report": "^3.0.1",
+        "istanbul-reports": "^3.2.0",
+        "magicast": "^0.5.2",
+        "obug": "^2.1.1",
+        "std-env": "^4.0.0-rc.1",
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@vitest/browser": "4.1.9",
+        "vitest": "4.1.9"
+      },
+      "peerDependenciesMeta": {
+        "@vitest/browser": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@vitest/expect": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.8.tgz",
-      "integrity": "sha512-h3nDO677RDLEGlBxyQ5CW8RlMThSKSRLUePLOx09gNIWRL40edgA1GCZSZgf1W55MFAG6/Sw14KeaAnqv0NKdQ==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.9.tgz",
+      "integrity": "sha512-vl/rYsUKcBr3SnQn166+XR5ZQcgMx3DQhFWdfli/cWpLnLUmbxZvyrJZotLFUryib+LtArYMSTJ5RbQ57ZqrlA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "4.1.8",
-        "@vitest/utils": "4.1.8",
+        "@vitest/spy": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "chai": "^6.2.2",
         "tinyrainbow": "^3.1.0"
       },
@@ -4973,13 +5016,13 @@
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.8.tgz",
-      "integrity": "sha512-LEiN/xe4OSIbKe9HQIp5OC24agGD9J5CnmMgsLohVVoOPWL9a2sBoR6VBx43jQZb7Kr1l4RCuyCJzcAa0+dojw==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.9.tgz",
+      "integrity": "sha512-EVkXzBjrPGM+cK8/ANWgBrkUCfJfb38/EfTSO8h7pWvKkyPkpWxvR7BkD2MyItMF62C97zAEoqdpUixwR/e+Rw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "4.1.8",
+        "@vitest/spy": "4.1.9",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.21"
       },
@@ -5000,9 +5043,9 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.8.tgz",
-      "integrity": "sha512-9GasEBxpZ1VYIpqHf/0+YGg121uSNwCKOJqIrTwWP/TB7DmFCiaBpNl3aPZzoLWfWkuqhbH8vJIVobZkvdo2cA==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.9.tgz",
+      "integrity": "sha512-s0iufns3iIFitdgm+YR7g1whCAaGtXz459VS9/PqyKDEEFgYIhsHOQmXgIgDuYCt7DeQmiZT0Qe2OA2p4ZPu5A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -5013,13 +5056,13 @@
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.8.tgz",
-      "integrity": "sha512-EmVxeBAfMJvycdjd6Hm+RbFBbA9fKvo0Kx37hNpBYoYeavH3RNsBXWDooR1mgD52dCrxIIuP7UotpfiwOikvcg==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.9.tgz",
+      "integrity": "sha512-KXLMDtc7oe70+3mJfGrPUWPesswH+3sTxAMAMl8DG7I8IUQT4XW718dY5ID3vPUcmlu27CcKfY4P3h3I29SLJg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "4.1.8",
+        "@vitest/utils": "4.1.9",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -5027,14 +5070,14 @@
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.8.tgz",
-      "integrity": "sha512-acfZboRmAIf05DEKcBQy33VXojFJjtUdLyo7oOmV9kebb2xdU01UknNiPuPZoJZQyO7DF0gZdTGTpeAzET9QPQ==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.9.tgz",
+      "integrity": "sha512-Jc7RKGNBo8Z28WYIm0Niej4xdSPByRf6mU58VpHQkd6Zh05rlnA+twjbK5HyeIGHxrzsc3mJgS43uM0CZKzaIA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.8",
-        "@vitest/utils": "4.1.8",
+        "@vitest/pretty-format": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
@@ -5043,9 +5086,9 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.8.tgz",
-      "integrity": "sha512-6EevtBp6OZOPF7bmz36HrGMeP3txgVSrgebWxHOafDXGkhIzfXK14f8KF6MuFfgXXUeHxmpD3BQxkV00/3s5mA==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.9.tgz",
+      "integrity": "sha512-fHpsS6mIi+PiEW+vcRVOMkX1oSaPKne3VOclSFICPcGOmfKgXPU5iAah+wcNcj2xPrCCmfq99IDGf+EojhhvhA==",
       "dev": true,
       "license": "MIT",
       "funding": {
@@ -5053,13 +5096,13 @@
       }
     },
     "node_modules/@vitest/ui": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/ui/-/ui-4.1.8.tgz",
-      "integrity": "sha512-RUS2ZU2TsduVrI+9c12uTNaKrNUTsm6yFt3fueEUB9iKvyC2UP83F+sqIz00HQIah4UOL1TMoDAki8K0NjGvsA==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/ui/-/ui-4.1.9.tgz",
+      "integrity": "sha512-U/cRvtqfEPj27FI1n9cyUvi4vXXdcLhjJiI+InYKdk8hP4VrS6RXOjGL7rfFaeBc37iRKANsR6eEzIoC7lmgBQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "4.1.8",
+        "@vitest/utils": "4.1.9",
         "fflate": "^0.8.2",
         "flatted": "^3.4.2",
         "pathe": "^2.0.3",
@@ -5071,17 +5114,17 @@
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "vitest": "4.1.8"
+        "vitest": "4.1.9"
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.8.tgz",
-      "integrity": "sha512-uOJamYALNhfJ6iolExyQM40yIQwDqYnkKtQ5VCiSe17E33H0aQ/u+1GlRuz4LZBk6Mm3sg90G9hEbmEt37C1Zg==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.9.tgz",
+      "integrity": "sha512-A51o8ymO5PpqlWNnBP9ZHPXDIpuMtTLlGSjN7la4US+LJzoUMyhwjA5QXlm39JexgwHKW4Xjs8Z2d3dLCXOeuA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.8",
+        "@vitest/pretty-format": "4.1.9",
         "convert-source-map": "^2.0.0",
         "tinyrainbow": "^3.1.0"
       },
@@ -5357,6 +5400,25 @@
       "integrity": "sha512-OH/2E5Fg20h2aPrbe+QL8JZQFko0YZaF+j4mnQ7BGhfavO7OpSLa8a0y9sBwomHdSbkhTS8TQNayBfnW5DwbvQ==",
       "dev": true
     },
+    "node_modules/ast-v8-to-istanbul": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.4.tgz",
+      "integrity": "sha512-0bC0/4bTSrnwdhU3IsZDwEdojvuPrSg59OYZfKsLRtJZ0u8VBx9DebfqqG8bRdCC0I7vjgxmPi41P0lpkhJHtA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.31",
+        "estree-walker": "^3.0.3",
+        "js-tokens": "^10.0.0"
+      }
+    },
+    "node_modules/ast-v8-to-istanbul/node_modules/js-tokens": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz",
+      "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/async-function": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz",
@@ -7559,6 +7621,13 @@
         "node": ">=18"
       }
     },
+    "node_modules/html-escaper": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
+      "integrity": "sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/html-parse-stringify": {
       "version": "3.0.1",
       "resolved": "https://registry.npmmirror.com/html-parse-stringify/-/html-parse-stringify-3.0.1.tgz",
@@ -8175,6 +8244,45 @@
       "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==",
       "dev": true
     },
+    "node_modules/istanbul-lib-coverage": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.2.tgz",
+      "integrity": "sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/istanbul-lib-report": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.1.tgz",
+      "integrity": "sha512-GCfE1mtsHGOELCU8e/Z7YWzpmybrx/+dSTfLrvY8qRmaY6zXTKWn6WQIjaAFw069icm6GVMNkgu0NzI4iPZUNw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "istanbul-lib-coverage": "^3.0.0",
+        "make-dir": "^4.0.0",
+        "supports-color": "^7.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/istanbul-reports": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz",
+      "integrity": "sha512-HGYWWS/ehqTV3xN10i23tkPkpH46MLCIMFNCaaKNavAXTF1RkqxawEPtnjnGZ6XKSInBKkiOA5BKS+aZiY3AvA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "html-escaper": "^2.0.0",
+        "istanbul-lib-report": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/iterator.prototype": {
       "version": "1.1.5",
       "resolved": "https://registry.npmjs.org/iterator.prototype/-/iterator.prototype-1.1.5.tgz",
@@ -8709,6 +8817,34 @@
         "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
+    "node_modules/magicast": {
+      "version": "0.5.3",
+      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.3.tgz",
+      "integrity": "sha512-pVKE4UdSQ7DvHzivsCIFx2BJn1mHG6KsyrFcaxFx6tONdneEuThrDx0Cj3AMg58KyN4pzYT+LHOotxDQDjNvkw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.29.3",
+        "@babel/types": "^7.29.0",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/make-dir": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/make-dir/-/make-dir-4.0.0.tgz",
+      "integrity": "sha512-hXdUTZYIVOt1Ex//jAQi+wTZZpUpwBj/0QsOzqegb3rGMMeJiSEu5xLHnYfBrRV4RH2+OCSOO95Is/7x1WJ4bw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.5.3"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/markdown-table": {
       "version": "3.0.4",
       "resolved": "https://registry.npmjs.org/markdown-table/-/markdown-table-3.0.4.tgz",
@@ -12284,19 +12420,19 @@
       }
     },
     "node_modules/vitest": {
-      "version": "4.1.8",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.8.tgz",
-      "integrity": "sha512-flY6ScbCIt9HThs+C5HS7jvGOB560DJtk/Z15IQROTA6zEy49Nh8T/dofWTQL+n3vswqn87sbJNiuqw1SDp5Ig==",
+      "version": "4.1.9",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.9.tgz",
+      "integrity": "sha512-nE3/LEyc0z87uHYLZebqCUOaJr2hdtuPp7BQ4BosVFnfltxgAvMG08NyrSGlPpOUWvR27c5flSmYFTNr78L9GQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/expect": "4.1.8",
-        "@vitest/mocker": "4.1.8",
-        "@vitest/pretty-format": "4.1.8",
-        "@vitest/runner": "4.1.8",
-        "@vitest/snapshot": "4.1.8",
-        "@vitest/spy": "4.1.8",
-        "@vitest/utils": "4.1.8",
+        "@vitest/expect": "4.1.9",
+        "@vitest/mocker": "4.1.9",
+        "@vitest/pretty-format": "4.1.9",
+        "@vitest/runner": "4.1.9",
+        "@vitest/snapshot": "4.1.9",
+        "@vitest/spy": "4.1.9",
+        "@vitest/utils": "4.1.9",
         "es-module-lexer": "^2.0.0",
         "expect-type": "^1.3.0",
         "magic-string": "^0.30.21",
@@ -12324,12 +12460,12 @@
         "@edge-runtime/vm": "*",
         "@opentelemetry/api": "^1.9.0",
         "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-        "@vitest/browser-playwright": "4.1.8",
-        "@vitest/browser-preview": "4.1.8",
-        "@vitest/browser-webdriverio": "4.1.8",
-        "@vitest/coverage-istanbul": "4.1.8",
-        "@vitest/coverage-v8": "4.1.8",
-        "@vitest/ui": "4.1.8",
+        "@vitest/browser-playwright": "4.1.9",
+        "@vitest/browser-preview": "4.1.9",
+        "@vitest/browser-webdriverio": "4.1.9",
+        "@vitest/coverage-istanbul": "4.1.9",
+        "@vitest/coverage-v8": "4.1.9",
+        "@vitest/ui": "4.1.9",
         "happy-dom": "*",
         "jsdom": "*",
         "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
diff --git a/frontend/package.json b/frontend/package.json
index 226fa2c5..a91e9bda 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -9,7 +9,8 @@
     "lint": "eslint src/",
     "test": "vitest run",
     "test:watch": "vitest",
-    "test:ui": "vitest --ui"
+    "test:ui": "vitest --ui",
+    "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
     "@hookform/resolvers": "^5.1.1",
@@ -67,6 +68,7 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "@vitejs/plugin-react": "^4.3.4",
+    "@vitest/coverage-v8": "^4.1.8",
     "@vitest/ui": "^4.1.8",
     "eslint": "^9",
     "eslint-config-next": "15.4.2",
diff --git a/frontend/vitest.config.ts b/frontend/vitest.config.ts
index 1649e5e8..ea285a3a 100644
--- a/frontend/vitest.config.ts
+++ b/frontend/vitest.config.ts
@@ -10,6 +10,11 @@ export default defineConfig({
     setupFiles: ['./src/test/setup.ts'],
     alias: {
       '@': path.resolve(__dirname, './src')
+    },
+    coverage: {
+      provider: 'v8',
+      reporter: ['text', 'json', 'html']
+      // Note: reportsDirectory is NOT specified - vitest 4.x uses default location
     }
   }
 })
diff --git a/pyproject.toml b/pyproject.toml
index aeb5cac5..8c3903e8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -69,6 +69,7 @@ build-backend = "setuptools.build_meta"
 dev = [
     "pre-commit>=4.1.0",
     "pytest-asyncio>=1.2.0",
+    "pytest-cov>=7.0.0",
     "ruff>=0.14.13",
     "types-requests>=2.32.4.20250913",
 ]
diff --git a/uv.lock b/uv.lock
index 4d826403..59d0ef6a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -465,6 +465,50 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d2/d1/017d7f5a74a10471d327ace5d0e2cc11bc30400b0e2a01feaf5dad92a113/content_core-1.14.1-py3-none-any.whl", hash = "sha256:14df9b8b819376f7b9c25658368532367b453e21feb86ae77a43ae9a07161006", size = 186377, upload-time = "2026-01-30T01:48:29.872Z" },
 ]
 
+[[package]]
+name = "coverage"
+version = "7.14.3"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/b4/91/0a7c28934e50d8ac9a7b117712d176f2953c3170bccced5eaacfa3e96175/coverage-7.14.3.tar.gz", hash = "sha256:1a7563a443f3d53fdeb040ec8c9f7466aed7ca3dc5891aa09d3ca3625fa4387f", size = 924398, upload-time = "2026-06-22T23:10:25.584Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/f1/24/efb17eb94018dd3415d0e8a76a4786a866e8964aa9c50f033399d23939c2/coverage-7.14.3-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:e574801e1d643561594aa021206c46d80b257e9853087090ba97bed8b0a509d3", size = 220501, upload-time = "2026-06-22T23:08:02.182Z" },
+    { url = "https://files.pythonhosted.org/packages/76/93/32f1bfca6cdd34259c8af42820a034b7a28dfb44969a13ed38c17e0ba5b0/coverage-7.14.3-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:f82b6bb7d75a2613e85d07cefa3a8c973d0544a8993337f6e2728e4a1e94c305", size = 221008, upload-time = "2026-06-22T23:08:03.701Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/88/0d0f974855ff905d15a64f7873d00bdc4182e2736267486c6634f4af293c/coverage-7.14.3-cp311-cp311-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:a2335ea5fed26af2e831094964fa3f8fae60b45f7e37fcc2d3b615b2add3ad87", size = 251420, upload-time = "2026-06-22T23:08:05.211Z" },
+    { url = "https://files.pythonhosted.org/packages/39/7f/117dd2ec65e4140576f8ef991d88220f9b806769f7a8c20e0550c0f924e2/coverage-7.14.3-cp311-cp311-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:fbb8c3a98e779013786ae01d229662aeacbc77100efbd3f2f245219ace5af700", size = 253331, upload-time = "2026-06-22T23:08:06.672Z" },
+    { url = "https://files.pythonhosted.org/packages/87/55/f0bd6d6538e3f16829fb8a44b6c0d2fe9da638bbfdd6a20f8b5da8f4fa81/coverage-7.14.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:ac082660de8f429ba0ea363595abb838998570b9a7546777c60f413ab902bbde", size = 255441, upload-time = "2026-06-22T23:08:08.208Z" },
+    { url = "https://files.pythonhosted.org/packages/1e/98/aa71f7879019c846a8a9662579ea4484b0202cf1e252ffeed647075e7eca/coverage-7.14.3-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:8ac012839ff7e396030f1e94e10553a431d14e4de2ab65cb3acb72bbd5628ca2", size = 257398, upload-time = "2026-06-22T23:08:09.749Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/4f/5fd367e59844190f5965015d7bee899e67a89d13eb2760118479bf836f2f/coverage-7.14.3-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:5952f8c1bda2a5347154450379316e6dfa4d934d62ca35f6784451e6f55074fb", size = 251558, upload-time = "2026-06-22T23:08:11.37Z" },
+    { url = "https://files.pythonhosted.org/packages/8f/de/5383a6ee5a6376701fe07d980fa8e4a66c0c377fead16712720340d701a3/coverage-7.14.3-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:8cf0f2509acb4619e2471a1951089054dd58ebea7a912066d2ea56dd4c24ca4a", size = 253134, upload-time = "2026-06-22T23:08:13.04Z" },
+    { url = "https://files.pythonhosted.org/packages/01/99/09542b1a99f788e3daec7f0fadc288821e71aca9ea298d51bfa1ba79fed5/coverage-7.14.3-cp311-cp311-musllinux_1_2_i686.whl", hash = "sha256:2e41fd3aab806770008279a93879b0924b16247e09ab537c043d08bbca53b4ab", size = 251195, upload-time = "2026-06-22T23:08:14.606Z" },
+    { url = "https://files.pythonhosted.org/packages/02/9d/722fe8c13f0fbb064491b9e8656e56a606286792e5068c47ca1042e773e8/coverage-7.14.3-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:f0a47095963cfe054e0df178daca95aec21e680d6076da807c3add28dfe920f7", size = 254959, upload-time = "2026-06-22T23:08:16.431Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/58/943627179ff1d82da9e54d0a5b0bb907bb19cf19515599ccd921de50b469/coverage-7.14.3-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:a090cbf9521e78ffdb2fcf448b72902afe9f5923ff6a12d5c0d0120200348af9", size = 250914, upload-time = "2026-06-22T23:08:18.03Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/d4/803efcbf9ae5567454a0c71e983589529448e2704ee0da2dc0163d482f18/coverage-7.14.3-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:4d310baf69a4fbe8a098ce727e4808a34866ac718a6f759ae659cbd3221358bc", size = 251824, upload-time = "2026-06-22T23:08:19.704Z" },
+    { url = "https://files.pythonhosted.org/packages/32/79/3f78ea9563132746eed5cecb75d2e576f9d8fec45a47242b5ae0950b82a3/coverage-7.14.3-cp311-cp311-win32.whl", hash = "sha256:74fdd718d88fe144f4579b8747873a07ec3f04cb837d5faec5a25d9e22fa31a8", size = 222594, upload-time = "2026-06-22T23:08:21.311Z" },
+    { url = "https://files.pythonhosted.org/packages/85/22/9ebbc5a2ab42ac5d0eea1f48648629e1de9bbe41ec243ed6b93d55a5a53f/coverage-7.14.3-cp311-cp311-win_amd64.whl", hash = "sha256:cc96aa922e21d4bc5d5ed3c915cef27dfcbc13686f47d5e378d647fbfba655a2", size = 223073, upload-time = "2026-06-22T23:08:23.318Z" },
+    { url = "https://files.pythonhosted.org/packages/71/af/69d5fcc16cb555153f99cec5467922f226be0369f7335a9506856d2a7bd0/coverage-7.14.3-cp311-cp311-win_arm64.whl", hash = "sha256:c66f9f9d4f1e9712eb9b1de5310f881d4e2188cfcba5065e1a8490f38687f2c4", size = 222617, upload-time = "2026-06-22T23:08:25.054Z" },
+    { url = "https://files.pythonhosted.org/packages/bd/b0/8a911f6ffe6974dac4df95b468ab9a2899d0e59f0f99a489afeec39f00bc/coverage-7.14.3-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:3d74ff26299c4879ce3a4d826f9d3d4d556fd285fde7bbce3c0ef5a8ab1cec24", size = 220672, upload-time = "2026-06-22T23:08:26.621Z" },
+    { url = "https://files.pythonhosted.org/packages/36/16/0fc0cb52538783dbbae0934b834f5a58fd5354380ee6cad4a07b15dc845d/coverage-7.14.3-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:96150a9cf3468ea20f0bc5d0e21b3df8972c31480ef90fa7614b773cc6429665", size = 221035, upload-time = "2026-06-22T23:08:28.372Z" },
+    { url = "https://files.pythonhosted.org/packages/77/e2/421ccfbb48335ac49e93301478cf5d623b0c2bf1c0cadd8e2b2fc6c0c710/coverage-7.14.3-cp312-cp312-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:27d07a46500ba23515b838dbcf52512026af04090755cf6cc64166d88c9b9a1a", size = 252540, upload-time = "2026-06-22T23:08:30.226Z" },
+    { url = "https://files.pythonhosted.org/packages/06/c2/05b8c890097c61a7f4406b35396b997a635200ded0339eda83dfbe526c5f/coverage-7.14.3-cp312-cp312-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:621e13c6108234d7960aaf5762ab5c3c00f33c30c15af06dcbff0c73bf112727", size = 255274, upload-time = "2026-06-22T23:08:31.876Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/be/b6d9efe447f8ba3c3c854195f326bd64c54b907d936cd2fdebf8767ec72e/coverage-7.14.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:4b60ca6d8af70473491a15a343cbabab2e8f9ea66a4376e81c7aa24876a6f977", size = 256389, upload-time = "2026-06-22T23:08:33.843Z" },
+    { url = "https://files.pythonhosted.org/packages/d4/3c/f26e50acc429e608bc534ac06f0a3c169019c798178ec5e9de3dbc0df9c9/coverage-7.14.3-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:c90a7cdd5e380e1ce02f19792e2ac2fbfbf177e35a27e69fd3e873b30d895c0c", size = 258648, upload-time = "2026-06-22T23:08:35.481Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/a2/01c1fabf816c8e1dae197e258edf878a3d3ddc86fbda34b76e5794277d8f/coverage-7.14.3-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:5d788e5fd55347eef06ca0732c77d04a264de67e8ff24631270cdff3767a60cf", size = 252949, upload-time = "2026-06-22T23:08:37.562Z" },
+    { url = "https://files.pythonhosted.org/packages/89/c6/941166dd79c31fd44a13063780ae8d552eee0089a0a0930b9bdb7df554ed/coverage-7.14.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:62c7f79db2851c95ef020e5d28b97afde3daf9f7febcd35b53e05638f729063f", size = 254310, upload-time = "2026-06-22T23:08:39.174Z" },
+    { url = "https://files.pythonhosted.org/packages/10/31/80b1fd028201a961033ce95be3cd1e39e521b3762e6b4a1ac1616cb291e7/coverage-7.14.3-cp312-cp312-musllinux_1_2_i686.whl", hash = "sha256:90f7608aeb5d9b60b523b9fb2a4ee1973867cc4865a3f26fe6c7577073b70205", size = 252453, upload-time = "2026-06-22T23:08:40.84Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/85/c3d9addd94c4b524f3f4af0232075f5fe7170ce99a1386edff803e5934db/coverage-7.14.3-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:1e3b91f9c4740aeb571ecf82e5e8d8e4ab62d34fcb5a5d4e5baa38c6f7d2857c", size = 256522, upload-time = "2026-06-22T23:08:42.494Z" },
+    { url = "https://files.pythonhosted.org/packages/91/14/e5a0575f73795af3a7a9ae13dadf812e17d32422896839987dc3f86947e1/coverage-7.14.3-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:c946099774a7699de03cbd0ff0a64e21aed4525eed9d959adde4afe6d15758ef", size = 252023, upload-time = "2026-06-22T23:08:44.243Z" },
+    { url = "https://files.pythonhosted.org/packages/38/9b/9652ee531937ce3b8a63a8896885b2b4a2d56adc30e53c9540c666286d88/coverage-7.14.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:16b206e521feb8b7133a45754643dead0538489cf8b783b90cf5f4e3299625fd", size = 253893, upload-time = "2026-06-22T23:08:46.113Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/05/42678841c8c38e4b08bdfc48269f5a16dfbf5806000fe6a89b4cece3c691/coverage-7.14.3-cp312-cp312-win32.whl", hash = "sha256:ea3169c7116eb6cdf7608c6c7da9ecfcb3da40688e3a510fac2d1d2bafd6dc35", size = 222734, upload-time = "2026-06-22T23:08:47.858Z" },
+    { url = "https://files.pythonhosted.org/packages/df/87/07a4fcee55177a25f1b52331a8e92cf4f2c53b1a9c75ce2981fd59c684ad/coverage-7.14.3-cp312-cp312-win_amd64.whl", hash = "sha256:7ea52fc08f007bcc494d4bb3df3851e95843d881860ba38fe2c64dc100db5e7d", size = 223266, upload-time = "2026-06-22T23:08:49.494Z" },
+    { url = "https://files.pythonhosted.org/packages/aa/34/2b8b66a989282ea7b370beb49f50bab29470dc30bb0b03935b6b802782f7/coverage-7.14.3-cp312-cp312-win_arm64.whl", hash = "sha256:8cec0ad652ec57790970d817490105bd917d783c2f7b38d6b58a0ca312e1a336", size = 222655, upload-time = "2026-06-22T23:08:51.766Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/e3/a0aa32bfa3a081951f60a23bc0e7b512891ef0eecda1153cf1d8ba36c6b1/coverage-7.14.3-py3-none-any.whl", hash = "sha256:fb7e18afb6e903c1a92401a2f0501ac277dca527bb9ca6fe1f691a8a0026a0e8", size = 212469, upload-time = "2026-06-22T23:10:23.405Z" },
+]
+
+[package.optional-dependencies]
+toml = [
+    { name = "tomli", marker = "python_full_version <= '3.11'" },
+]
+
 [[package]]
 name = "cryptography"
 version = "48.0.1"
@@ -2142,6 +2186,7 @@ dev = [
 dev = [
     { name = "pre-commit" },
     { name = "pytest-asyncio" },
+    { name = "pytest-cov" },
     { name = "ruff" },
     { name = "types-requests" },
 ]
@@ -2190,6 +2235,7 @@ provides-extras = ["dev"]
 dev = [
     { name = "pre-commit", specifier = ">=4.1.0" },
     { name = "pytest-asyncio", specifier = ">=1.2.0" },
+    { name = "pytest-cov", specifier = ">=7.0.0" },
     { name = "ruff", specifier = ">=0.14.13" },
     { name = "types-requests", specifier = ">=2.32.4.20250913" },
 ]
@@ -2831,6 +2877,20 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e5/35/f8b19922b6a25bc0880171a2f1a003eaeb93657475193ab516fd87cac9da/pytest_asyncio-1.3.0-py3-none-any.whl", hash = "sha256:611e26147c7f77640e6d0a92a38ed17c3e9848063698d5c93d5aa7aa11cebff5", size = 15075, upload-time = "2025-11-10T16:07:45.537Z" },
 ]
 
+[[package]]
+name = "pytest-cov"
+version = "7.1.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "coverage", extra = ["toml"] },
+    { name = "pluggy" },
+    { name = "pytest" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/b1/51/a849f96e117386044471c8ec2bd6cfebacda285da9525c9106aeb28da671/pytest_cov-7.1.0.tar.gz", hash = "sha256:30674f2b5f6351aa09702a9c8c364f6a01c27aae0c1366ae8016160d1efc56b2", size = 55592, upload-time = "2026-03-21T20:11:16.284Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/9d/7a/d968e294073affff457b041c2be9868a40c1c71f4a35fcc1e45e5493067b/pytest_cov-7.1.0-py3-none-any.whl", hash = "sha256:a0461110b7865f9a271aa1b51e516c9a95de9d696734a2f71e3e78f46e1d4678", size = 22876, upload-time = "2026-03-21T20:11:14.438Z" },
+]
+
 [[package]]
 name = "python-dateutil"
 version = "2.9.0.post0"

From b5852855efc374fbf5eb6f45caa38f045dbf601f Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Fri, 3 Jul 2026 07:57:27 -0700
Subject: [PATCH 124/345] refactor: type-check api.auth and remove its mypy
 ignore_errors (#983)

Add type annotations to PasswordAuthMiddleware.__init__ and dispatch (plus
excluded_paths) and drop the [mypy-api.auth] ignore_errors stanza so the
module is type-checked. Annotations only; no behavior change.

Refs #945

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
---
 api/auth.py | 15 ++++++++++-----
 mypy.ini    |  3 ---
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/api/auth.py b/api/auth.py
index b89058bb..481fce48 100644
--- a/api/auth.py
+++ b/api/auth.py
@@ -3,8 +3,9 @@ from typing import Optional
 from fastapi import Depends, HTTPException, Request
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 from loguru import logger
-from starlette.middleware.base import BaseHTTPMiddleware
-from starlette.responses import JSONResponse
+from starlette.middleware.base import BaseHTTPMiddleware, RequestResponseEndpoint
+from starlette.responses import JSONResponse, Response
+from starlette.types import ASGIApp
 
 from open_notebook.utils.encryption import get_secret_from_env
 
@@ -16,10 +17,12 @@ class PasswordAuthMiddleware(BaseHTTPMiddleware):
     Supports Docker secrets via OPEN_NOTEBOOK_PASSWORD_FILE.
     """
 
-    def __init__(self, app, excluded_paths: Optional[list] = None):
+    def __init__(
+        self, app: ASGIApp, excluded_paths: Optional[list[str]] = None
+    ) -> None:
         super().__init__(app)
         self.password = get_secret_from_env("OPEN_NOTEBOOK_PASSWORD")
-        self.excluded_paths = excluded_paths or [
+        self.excluded_paths: list[str] = excluded_paths or [
             "/",
             "/health",
             "/docs",
@@ -27,7 +30,9 @@ class PasswordAuthMiddleware(BaseHTTPMiddleware):
             "/redoc",
         ]
 
-    async def dispatch(self, request: Request, call_next):
+    async def dispatch(
+        self, request: Request, call_next: RequestResponseEndpoint
+    ) -> Response:
         # Skip authentication if no password is set
         if not self.password:
             return await call_next(request)
diff --git a/mypy.ini b/mypy.ini
index eb1e9811..017d4413 100644
--- a/mypy.ini
+++ b/mypy.ini
@@ -17,9 +17,6 @@ ignore_errors = True
 [mypy-api.podcast_api_service]
 ignore_errors = True
 
-[mypy-api.auth]
-ignore_errors = True
-
 [mypy-api.routers.models]
 ignore_errors = True
 

From 8d1405cb3b9678e0a785d73948b4ba5841466f62 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Fri, 3 Jul 2026 08:23:19 -0700
Subject: [PATCH 125/345] fix: pass max_tokens through to podcast_creator for
 outline/transcript generation (#982)

* fix: pass max_tokens through to podcast_creator for outline/transcript generation

* fix: persist and expose episode_profile max_tokens (migration + API)

* docs: add CHANGELOG entry for episode profile max_tokens pass-through (#639)

---------

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  |  1 +
 api/routers/episode_profiles.py               |  8 ++
 commands/podcast_commands.py                  |  6 +-
 open_notebook/database/async_migrate.py       |  6 ++
 .../database/migrations/16.surrealql          |  7 ++
 .../database/migrations/16_down.surrealql     |  3 +
 open_notebook/podcasts/models.py              | 19 ++++-
 tests/test_podcast_path.py                    | 80 +++++++++++++++++++
 8 files changed, 124 insertions(+), 6 deletions(-)
 create mode 100644 open_notebook/database/migrations/16.surrealql
 create mode 100644 open_notebook/database/migrations/16_down.surrealql

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d0b17059..caaff16d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- Podcast generation no longer truncates on dense, long-form content (`LengthFinishReasonError` / `OUTPUT_PARSING_FAILURE`): episode profiles now support an optional `max_tokens` that is passed through to podcast_creator's outline/transcript generation, overriding its defaults — settable via the episode profile API (UI follow-up in #991) (#639)
 - API no longer freezes for all requests while a chat waits on the LLM. Both the notebook chat (`execute_chat`) and source chat handlers ran LangGraph's synchronous `invoke()` directly on the event loop; they now run it via `asyncio.to_thread()` (matching the existing `get_state` calls), so other requests stay responsive — and the source-chat SSE can flush its early events instead of stalling until the model finishes (#704)
 - Windows native install guide no longer points users at a `start-open-notebook.bat` that doesn't exist in the repo; the Quick Start now documents starting the four services manually with `uv run`, plus an optional sample launcher you can save yourself (#846)
 - OpenRouter (and other providers') "Discover models" dialog no longer cuts off the submit button: the dialog now uses a fixed header/footer with a scrollable body (`grid-rows-[auto_1fr_auto]`) instead of scrolling the whole content, so the "Add" button stays visible regardless of how many models are listed (#816)
diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index b3e5aeb7..85ece62e 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -19,6 +19,7 @@ class EpisodeProfileResponse(BaseModel):
     language: Optional[str] = None
     default_briefing: str
     num_segments: int
+    max_tokens: Optional[int] = None
     # Legacy fields (for display/migration awareness)
     outline_provider: Optional[str] = None
     outline_model: Optional[str] = None
@@ -37,6 +38,7 @@ def _profile_to_response(profile: EpisodeProfile) -> EpisodeProfileResponse:
         language=profile.language,
         default_briefing=profile.default_briefing,
         num_segments=profile.num_segments,
+        max_tokens=profile.max_tokens,
         outline_provider=profile.outline_provider,
         outline_model=profile.outline_model,
         transcript_provider=profile.transcript_provider,
@@ -90,6 +92,10 @@ class EpisodeProfileCreate(BaseModel):
     language: Optional[str] = Field(None, description="Podcast language code")
     default_briefing: str = Field(..., description="Default briefing template")
     num_segments: int = Field(default=5, description="Number of podcast segments")
+    max_tokens: Optional[int] = Field(
+        None,
+        description="Max output tokens for outline/transcript generation",
+    )
     # Legacy fields (accepted but not required)
     outline_provider: Optional[str] = None
     outline_model: Optional[str] = None
@@ -110,6 +116,7 @@ async def create_episode_profile(profile_data: EpisodeProfileCreate):
             language=profile_data.language,
             default_briefing=profile_data.default_briefing,
             num_segments=profile_data.num_segments,
+            max_tokens=profile_data.max_tokens,
             outline_provider=profile_data.outline_provider,
             outline_model=profile_data.outline_model,
             transcript_provider=profile_data.transcript_provider,
@@ -198,6 +205,7 @@ async def duplicate_episode_profile(profile_id: str):
             language=original.language,
             default_briefing=original.default_briefing,
             num_segments=original.num_segments,
+            max_tokens=original.max_tokens,
             outline_provider=original.outline_provider,
             outline_model=original.outline_model,
             transcript_provider=original.transcript_provider,
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 34ffae85..fd533be8 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -153,14 +153,16 @@ async def generate_podcast_command(
             try:
                 if ep_dict.get("outline_llm"):
                     prov, model, conf = await _resolve_model_config(
-                        str(ep_dict["outline_llm"])
+                        str(ep_dict["outline_llm"]),
+                        max_tokens=ep_dict.get("max_tokens"),
                     )
                     ep_dict["outline_provider"] = prov
                     ep_dict["outline_model"] = model
                     ep_dict["outline_config"] = conf
                 if ep_dict.get("transcript_llm"):
                     prov, model, conf = await _resolve_model_config(
-                        str(ep_dict["transcript_llm"])
+                        str(ep_dict["transcript_llm"]),
+                        max_tokens=ep_dict.get("max_tokens"),
                     )
                     ep_dict["transcript_provider"] = prov
                     ep_dict["transcript_model"] = model
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 388a3288..5780ee9f 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -121,6 +121,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/15.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/16.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -168,6 +171,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/15_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/16_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/16.surrealql b/open_notebook/database/migrations/16.surrealql
new file mode 100644
index 00000000..a9913b89
--- /dev/null
+++ b/open_notebook/database/migrations/16.surrealql
@@ -0,0 +1,7 @@
+-- Migration 16: Add optional max_tokens override to episode_profile.
+-- Lets a profile cap (or raise) the output tokens used for outline and
+-- transcript generation, which is passed through to podcast_creator.
+-- The episode_profile table is SCHEMAFULL, so the field must be declared
+-- here for the value to persist.
+
+DEFINE FIELD IF NOT EXISTS max_tokens ON TABLE episode_profile TYPE option<int>;
diff --git a/open_notebook/database/migrations/16_down.surrealql b/open_notebook/database/migrations/16_down.surrealql
new file mode 100644
index 00000000..df4445d2
--- /dev/null
+++ b/open_notebook/database/migrations/16_down.surrealql
@@ -0,0 +1,3 @@
+-- Migration 16 rollback: Remove max_tokens field from episode_profile.
+
+REMOVE FIELD IF EXISTS max_tokens ON TABLE episode_profile;
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index cccdf9e3..92176d8c 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -8,11 +8,13 @@ from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel
 
 
-async def _resolve_model_config(model_id: str) -> Tuple[str, str, dict]:
+async def _resolve_model_config(
+    model_id: str, max_tokens: Optional[int] = None
+) -> Tuple[str, str, dict]:
     """Load Model record, resolve credential -> (provider, model_name, config_dict).
 
     Used by resolve_outline_config, resolve_transcript_config, resolve_tts_config,
-    and per-speaker TTS overrides.
+    and per-speaker TTS overrides. Optionally passes through a max_tokens override.
     """
     from open_notebook.ai.models import Model
 
@@ -26,6 +28,8 @@ async def _resolve_model_config(model_id: str) -> Tuple[str, str, dict]:
         from open_notebook.ai.key_provider import provision_provider_keys
 
         await provision_provider_keys(model.provider)
+    if max_tokens is not None:
+        config = {**config, "max_tokens": max_tokens}
     return (model.provider, model.name, config)
 
 
@@ -45,6 +49,7 @@ class EpisodeProfile(ObjectModel):
         "outline_llm",
         "transcript_llm",
         "language",
+        "max_tokens",
     }
 
     name: str = Field(..., description="Unique profile name")
@@ -78,6 +83,10 @@ class EpisodeProfile(ObjectModel):
 
     default_briefing: str = Field(..., description="Default briefing template")
     num_segments: int = Field(default=5, description="Number of podcast segments")
+    max_tokens: Optional[int] = Field(
+        None,
+        description="Max output tokens for outline/transcript generation (passed through to podcast_creator)",
+    )
 
     @field_validator("num_segments")
     @classmethod
@@ -101,7 +110,7 @@ class EpisodeProfile(ObjectModel):
                 f"Episode profile '{self.name}' has no outline model configured. "
                 "Please update the profile to select an outline model."
             )
-        return await _resolve_model_config(self.outline_llm)
+        return await _resolve_model_config(self.outline_llm, max_tokens=self.max_tokens)
 
     async def resolve_transcript_config(self) -> Tuple[str, str, dict]:
         """Resolve transcript model -> (provider, model_name, config_dict)"""
@@ -110,7 +119,9 @@ class EpisodeProfile(ObjectModel):
                 f"Episode profile '{self.name}' has no transcript model configured. "
                 "Please update the profile to select a transcript model."
             )
-        return await _resolve_model_config(self.transcript_llm)
+        return await _resolve_model_config(
+            self.transcript_llm, max_tokens=self.max_tokens
+        )
 
     @classmethod
     async def get_by_name(cls, name: str) -> Optional["EpisodeProfile"]:
diff --git a/tests/test_podcast_path.py b/tests/test_podcast_path.py
index b48ac8dd..b2d606a0 100644
--- a/tests/test_podcast_path.py
+++ b/tests/test_podcast_path.py
@@ -8,8 +8,13 @@ spaces and special characters (GitHub issue #663).
 
 import uuid
 from pathlib import PurePosixPath
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
+import pytest
 
 from commands.podcast_commands import build_episode_output_dir
+from open_notebook.podcasts.models import EpisodeProfile, _resolve_model_config
 
 
 class TestBuildEpisodeOutputDir:
@@ -66,3 +71,78 @@ class TestBuildEpisodeOutputDir:
         output_dir.mkdir(parents=True, exist_ok=True)
         assert output_dir.exists()
         assert output_dir.is_dir()
+
+
+class TestResolveModelConfigMaxTokens:
+    """Test max_tokens passthrough without database access."""
+
+    @pytest.mark.asyncio
+    async def test_includes_max_tokens_when_configured(self):
+        fake_model = SimpleNamespace(
+            provider="anthropic",
+            name="claude-sonnet-4",
+            credential=None,
+        )
+
+        with (
+            patch(
+                "open_notebook.ai.models.Model.get",
+                new=AsyncMock(return_value=fake_model),
+            ),
+            patch(
+                "open_notebook.ai.key_provider.provision_provider_keys",
+                new=AsyncMock(return_value=True),
+            ),
+        ):
+            provider, model_name, config = await _resolve_model_config(
+                "model:test", max_tokens=12000
+            )
+
+        assert provider == "anthropic"
+        assert model_name == "claude-sonnet-4"
+        assert config["max_tokens"] == 12000
+
+    @pytest.mark.asyncio
+    async def test_omits_max_tokens_when_not_configured(self):
+        fake_model = SimpleNamespace(
+            provider="anthropic",
+            name="claude-sonnet-4",
+            credential=None,
+        )
+
+        with (
+            patch(
+                "open_notebook.ai.models.Model.get",
+                new=AsyncMock(return_value=fake_model),
+            ),
+            patch(
+                "open_notebook.ai.key_provider.provision_provider_keys",
+                new=AsyncMock(return_value=True),
+            ),
+        ):
+            _, _, config = await _resolve_model_config("model:test")
+
+        assert "max_tokens" not in config
+
+
+class TestEpisodeProfileMaxTokens:
+    """Test EpisodeProfile accepts optional max_tokens."""
+
+    def test_accepts_max_tokens(self):
+        profile = EpisodeProfile(
+            name="Long Form",
+            speaker_config="default",
+            default_briefing="Test briefing",
+            max_tokens=12000,
+        )
+
+        assert profile.max_tokens == 12000
+
+    def test_max_tokens_defaults_to_none(self):
+        profile = EpisodeProfile(
+            name="Default",
+            speaker_config="default",
+            default_briefing="Test briefing",
+        )
+
+        assert profile.max_tokens is None

From bb48d3d578551820179642bb3cd7cfd1224273c5 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Fri, 3 Jul 2026 08:30:50 -0700
Subject: [PATCH 126/345] feat: per-transformation custom model selection
 (#978)

* feat: per-transformation custom model selection

Fixes #776

* fix: validate model_id exists when creating or updating a transformation

The create and update endpoints persisted model_id without checking the
referenced model exists, so an invalid reference was stored silently and only
surfaced later as a 404 at execution time. Add the same existence check
execute_transformation already performs (Model.get -> 404 if missing) to both
the create and update paths, so a bad model_id is rejected up front with a
clear 404. Update still allows clearing model_id to None.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* test: cover model_id existence validation on transformation create/update

The create test now mocks Model.get so the new existence check passes and
asserts it was awaited with the supplied model_id. The update test expects
Model.get to be awaited twice (once validating the update, once at execute)
rather than once.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* docs: add CHANGELOG entry for per-transformation model selection (#776)

---------

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  |   1 +
 TRIAGE.md                                     |  92 +++++++
 api/models.py                                 |  13 +-
 api/routers/transformations.py                |  91 ++++---
 api/transformations_service.py                |  66 ++---
 .../components/TransformationEditorDialog.tsx |  94 ++++++-
 frontend/src/lib/types/transformations.ts     |   9 +-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/17.surrealql          |   3 +
 .../database/migrations/17_down.surrealql     |   3 +
 open_notebook/domain/transformation.py        |  11 +-
 screenshot-01-initial-load.png                | Bin 0 -> 49861 bytes
 screenshot-02-notebooks-list.png              | Bin 0 -> 75293 bytes
 screenshot-03-notebook-detail.png             | Bin 0 -> 105068 bytes
 screenshot-04-sources-context-menu.png        | Bin 0 -> 109783 bytes
 screenshot-05-after-insights-only.png         | Bin 0 -> 105634 bytes
 screenshot-06-source-card-hover.png           | Bin 0 -> 108632 bytes
 screenshot-07-after-full-content.png          | Bin 0 -> 107004 bytes
 screenshot-08-after-exclude-sources.png       | Bin 0 -> 107117 bytes
 screenshot-09-notes-context-menu.png          | Bin 0 -> 109855 bytes
 screenshot-10-after-exclude-notes.png         | Bin 0 -> 109855 bytes
 screenshot-11-after-include-notes.png         | Bin 0 -> 106831 bytes
 screenshot-12-post-delete-notebooks.png       | Bin 0 -> 71677 bytes
 tests/test_transformations_api.py             | 242 ++++++++++++++++++
 24 files changed, 522 insertions(+), 109 deletions(-)
 create mode 100644 TRIAGE.md
 create mode 100644 open_notebook/database/migrations/17.surrealql
 create mode 100644 open_notebook/database/migrations/17_down.surrealql
 create mode 100644 screenshot-01-initial-load.png
 create mode 100644 screenshot-02-notebooks-list.png
 create mode 100644 screenshot-03-notebook-detail.png
 create mode 100644 screenshot-04-sources-context-menu.png
 create mode 100644 screenshot-05-after-insights-only.png
 create mode 100644 screenshot-06-source-card-hover.png
 create mode 100644 screenshot-07-after-full-content.png
 create mode 100644 screenshot-08-after-exclude-sources.png
 create mode 100644 screenshot-09-notes-context-menu.png
 create mode 100644 screenshot-10-after-exclude-notes.png
 create mode 100644 screenshot-11-after-include-notes.png
 create mode 100644 screenshot-12-post-delete-notebooks.png
 create mode 100644 tests/test_transformations_api.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index caaff16d..07d1fed3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
 - LaTeX math rendering (KaTeX) now also applies to source content, source insights, Ask answers, transformation output, and the note editor preview — previously only chat had it (#269)
+- Per-transformation model selection — each transformation can now be assigned its own language model from the transformation editor, overriding the global transformation default for that transformation only. Runs without an explicit model keep using the system default as before (#776)
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
 
 ### Changed
diff --git a/TRIAGE.md b/TRIAGE.md
new file mode 100644
index 00000000..083722e4
--- /dev/null
+++ b/TRIAGE.md
@@ -0,0 +1,92 @@
+# Triage Rules — Open Notebook
+
+Project-specific triage rules. The `/triage` loop provides the **mechanism**; this file is the
+**jurisprudence** for this repo. Keep it the single source of truth for how we label issues.
+
+## State funnel (outcome of triage)
+
+Every open issue lands in exactly **one** state. **Untriaged = no state label** — that's what
+`/triage` scans for.
+
+| Label | Meaning |
+|---|---|
+| *(none)* | Not triaged yet. |
+| `needs-vision` | Unsure if/how this fits — strategic call for the maintainers. |
+| `needs-design` | Wanted, but the *how* isn't resolved — needs design/spec before it's ready. |
+| `needs-info` | Waiting on the reporter to confirm or provide more information. |
+| `ready` | Fully specified — the dev loop can pick it up. |
+| **Close** | Use GitHub's native close reasons (duplicate / not planned). Link the canonical issue when duplicate/superseded. |
+
+## Type
+
+What kind of work it is. Apply one when it's clear.
+
+- `bug` · `enhancement` · `documentation`
+
+> `installation` is an **intake** label applied by the issue-creation workflow (not by triage).
+> During triage, installation reports are routed to `area: deploy`.
+
+## Area — apply ALWAYS (one per issue)
+
+Which part of the system. This is the axis we use to route work and surface contributor-friendly
+tasks, so every triaged issue should get one area when it clearly belongs to one.
+
+| Label | What goes here |
+|---|---|
+| `area: chat` | Conversation/chat, RAG retrieval, agentic responses, citations |
+| `area: search` | Full-text and semantic search |
+| `area: sources` | Source ingestion & processing (URLs, files, content extraction, chunking) |
+| `area: notebooks` | Notebook features: notes, insights, transformations |
+| `area: providers` | AI provider integrations + model configuration (OpenAI, Ollama, …) |
+| `area: embeddings` | Embedding models, vectorization, semantic indexing |
+| `area: podcast` | Podcast / audio generation |
+| `area: database` | SurrealDB, persistence, schema, migrations |
+| `area: ui` | Frontend (Next.js), UX, visual issues |
+| `area: deploy` | Docker, deployment, k8s, reverse proxy, infra/setup |
+| `area: offline` | Airgapped/offline operation (tokenizer caching, no network) |
+| `area: i18n` | Internationalization / localization |
+
+## Bundling / epics
+
+- `umbrella` — a tracking issue grouping related work.
+- `tracked-in-umbrella` — covered by an umbrella; follow the umbrella for progress.
+- `bundled` — part of a thematic bundle.
+- `upstream` — root cause lives in one of our libraries (below), not in this repo.
+
+### Consolidation: one issue vs. umbrella
+
+When several open issues circle the same topic, pick the model by **how decided the work is** —
+not just by shared theme. The trap is filing many half-formed issues for a topic that isn't yet
+decidable work; that inflates the backlog and reads as "90 things to do" when it's ~30 themes.
+
+- **Pre-vision / pre-design topic** → collapse into **one** issue (`needs-vision` or `needs-design`),
+  capture each request's signal (👍 counts, interested contributors) in its body, and **close the
+  rest as duplicates** pointing to it. A topic isn't N issues — it's one thinking space.
+- **Already decomposed into real parallel tasks** → use `umbrella` + `tracked-in-umbrella`. Children
+  stay open because each is independently pickable (e.g. the multi-user umbrella #712).
+
+Rule of thumb: if the issues can't be worked until *we* make a call, they're one issue. If the call
+is made and the work splits into things a contributor could pick up today, they're an umbrella with
+children. **Never close an issue that has an active assignee/contributor or open PR** — link it as a
+phase instead.
+
+## Ecosystem (our own libraries)
+
+Mark issues whose real home is an upstream lib:
+
+- `esperanto` — model abstraction layer (LLM / embedding / TTS / STT).
+- `content-core` — content extraction.
+- `podcast-creator` — podcast generation library.
+
+## Community
+
+- `good first issue` — small, well-scoped, newcomer-friendly.
+- `help wanted` — we'd welcome a contributor to take this.
+
+## Rules
+
+- Assign **one state**, **one type**, and **one area** where each applies. Multiple
+  bundling/ecosystem labels are fine.
+- `/triage` output must always carry a state (or be closed). Don't leave issues stateless.
+- **Don't invent labels** — the set is curated. If something doesn't fit, raise it instead of adding a label.
+- When closing as duplicate/superseded, link the canonical issue.
diff --git a/api/models.py b/api/models.py
index 05663d78..f5124606 100644
--- a/api/models.py
+++ b/api/models.py
@@ -112,6 +112,9 @@ class TransformationCreate(BaseModel):
     apply_default: bool = Field(
         False, description="Whether to apply this transformation by default"
     )
+    model_id: Optional[str] = Field(
+        None, description="Model ID to use by default for this transformation"
+    )
 
 
 class TransformationUpdate(BaseModel):
@@ -126,6 +129,9 @@ class TransformationUpdate(BaseModel):
     apply_default: Optional[bool] = Field(
         None, description="Whether to apply this transformation by default"
     )
+    model_id: Optional[str] = Field(
+        None, description="Model ID to use by default for this transformation"
+    )
 
 
 class TransformationResponse(BaseModel):
@@ -135,6 +141,7 @@ class TransformationResponse(BaseModel):
     description: str
     prompt: str
     apply_default: bool
+    model_id: Optional[str] = None
     created: str
     updated: str
 
@@ -146,7 +153,9 @@ class TransformationExecuteRequest(BaseModel):
         ..., description="ID of the transformation to execute"
     )
     input_text: str = Field(..., description="Text to transform")
-    model_id: str = Field(..., description="Model ID to use for the transformation")
+    model_id: Optional[str] = Field(
+        None, description="Model ID to use for this transformation run"
+    )
 
 
 class TransformationExecuteResponse(BaseModel):
@@ -154,7 +163,7 @@ class TransformationExecuteResponse(BaseModel):
 
     output: str = Field(..., description="Transformed text")
     transformation_id: str = Field(..., description="ID of the transformation used")
-    model_id: str = Field(..., description="Model ID used")
+    model_id: Optional[str] = Field(None, description="Model ID used")
 
 
 # Default Prompt API models
diff --git a/api/routers/transformations.py b/api/routers/transformations.py
index 1848ad54..50f61fd8 100644
--- a/api/routers/transformations.py
+++ b/api/routers/transformations.py
@@ -20,6 +20,20 @@ from open_notebook.graphs.transformation import graph as transformation_graph
 router = APIRouter()
 
 
+def _transformation_response(transformation: Transformation) -> TransformationResponse:
+    return TransformationResponse(
+        id=transformation.id or "",
+        name=transformation.name,
+        title=transformation.title,
+        description=transformation.description,
+        prompt=transformation.prompt,
+        apply_default=transformation.apply_default,
+        model_id=transformation.model_id,
+        created=str(transformation.created),
+        updated=str(transformation.updated),
+    )
+
+
 @router.get("/transformations", response_model=List[TransformationResponse])
 async def get_transformations():
     """Get all transformations."""
@@ -27,16 +41,7 @@ async def get_transformations():
         transformations = await Transformation.get_all(order_by="name asc")
 
         return [
-            TransformationResponse(
-                id=transformation.id or "",
-                name=transformation.name,
-                title=transformation.title,
-                description=transformation.description,
-                prompt=transformation.prompt,
-                apply_default=transformation.apply_default,
-                created=str(transformation.created),
-                updated=str(transformation.updated),
-            )
+            _transformation_response(transformation)
             for transformation in transformations
         ]
     except Exception as e:
@@ -50,25 +55,26 @@ async def get_transformations():
 async def create_transformation(transformation_data: TransformationCreate):
     """Create a new transformation."""
     try:
+        # Reject unknown model references up front (same check as execute);
+        # otherwise an invalid model_id is stored and only fails at run time.
+        if transformation_data.model_id:
+            model = await Model.get(transformation_data.model_id)
+            if not model:
+                raise HTTPException(status_code=404, detail="Model not found")
+
         new_transformation = Transformation(
             name=transformation_data.name,
             title=transformation_data.title,
             description=transformation_data.description,
             prompt=transformation_data.prompt,
             apply_default=transformation_data.apply_default,
+            model_id=transformation_data.model_id,
         )
         await new_transformation.save()
 
-        return TransformationResponse(
-            id=new_transformation.id or "",
-            name=new_transformation.name,
-            title=new_transformation.title,
-            description=new_transformation.description,
-            prompt=new_transformation.prompt,
-            apply_default=new_transformation.apply_default,
-            created=str(new_transformation.created),
-            updated=str(new_transformation.updated),
-        )
+        return _transformation_response(new_transformation)
+    except HTTPException:
+        raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
@@ -87,10 +93,14 @@ async def execute_transformation(execute_request: TransformationExecuteRequest):
         if not transformation:
             raise HTTPException(status_code=404, detail="Transformation not found")
 
-        # Validate model exists
-        model = await Model.get(execute_request.model_id)
-        if not model:
-            raise HTTPException(status_code=404, detail="Model not found")
+        model_id = execute_request.model_id or transformation.model_id
+
+        # Validate explicit or transformation-specific model exists.
+        # None is allowed so the graph can use the configured transformation default.
+        if model_id:
+            model = await Model.get(model_id)
+            if not model:
+                raise HTTPException(status_code=404, detail="Model not found")
 
         # Execute the transformation
         result = await transformation_graph.ainvoke(
@@ -98,13 +108,13 @@ async def execute_transformation(execute_request: TransformationExecuteRequest):
                 input_text=execute_request.input_text,
                 transformation=transformation,
             ),
-            config=dict(configurable={"model_id": execute_request.model_id}),
+            config=dict(configurable={"model_id": model_id}),
         )
 
         return TransformationExecuteResponse(
             output=result["output"],
             transformation_id=execute_request.transformation_id,
-            model_id=execute_request.model_id,
+            model_id=model_id,
         )
 
     except HTTPException:
@@ -166,16 +176,7 @@ async def get_transformation(transformation_id: str):
         if not transformation:
             raise HTTPException(status_code=404, detail="Transformation not found")
 
-        return TransformationResponse(
-            id=transformation.id or "",
-            name=transformation.name,
-            title=transformation.title,
-            description=transformation.description,
-            prompt=transformation.prompt,
-            apply_default=transformation.apply_default,
-            created=str(transformation.created),
-            updated=str(transformation.updated),
-        )
+        return _transformation_response(transformation)
     except HTTPException:
         raise
     except Exception as e:
@@ -208,19 +209,17 @@ async def update_transformation(
             transformation.prompt = transformation_update.prompt
         if transformation_update.apply_default is not None:
             transformation.apply_default = transformation_update.apply_default
+        if "model_id" in transformation_update.model_fields_set:
+            # Validate a newly supplied model reference (allow clearing to None).
+            if transformation_update.model_id:
+                model = await Model.get(transformation_update.model_id)
+                if not model:
+                    raise HTTPException(status_code=404, detail="Model not found")
+            transformation.model_id = transformation_update.model_id
 
         await transformation.save()
 
-        return TransformationResponse(
-            id=transformation.id or "",
-            name=transformation.name,
-            title=transformation.title,
-            description=transformation.description,
-            prompt=transformation.prompt,
-            apply_default=transformation.apply_default,
-            created=str(transformation.created),
-            updated=str(transformation.updated),
-        )
+        return _transformation_response(transformation)
     except HTTPException:
         raise
     except InvalidInputError as e:
diff --git a/api/transformations_service.py b/api/transformations_service.py
index bc81c08c..bd0a0910 100644
--- a/api/transformations_service.py
+++ b/api/transformations_service.py
@@ -3,7 +3,7 @@ Transformations service layer using API.
 """
 
 from datetime import datetime
-from typing import Any, Dict, List, Union
+from typing import Any, Dict, List, Optional, Union
 
 from loguru import logger
 
@@ -17,39 +17,14 @@ class TransformationsService:
     def __init__(self):
         logger.info("Using API for transformations operations")
 
-    def get_all_transformations(self) -> List[Transformation]:
-        """Get all transformations."""
-        transformations_data = api_client.get_transformations()
-        # Convert API response to Transformation objects
-        transformations = []
-        for trans_data in transformations_data:
-            transformation = Transformation(
-                name=trans_data["name"],
-                title=trans_data["title"],
-                description=trans_data["description"],
-                prompt=trans_data["prompt"],
-                apply_default=trans_data["apply_default"],
-            )
-            transformation.id = trans_data["id"]
-            transformation.created = datetime.fromisoformat(
-                trans_data["created"].replace("Z", "+00:00")
-            )
-            transformation.updated = datetime.fromisoformat(
-                trans_data["updated"].replace("Z", "+00:00")
-            )
-            transformations.append(transformation)
-        return transformations
-
-    def get_transformation(self, transformation_id: str) -> Transformation:
-        """Get a specific transformation."""
-        response = api_client.get_transformation(transformation_id)
-        trans_data = response if isinstance(response, dict) else response[0]
+    def _build_transformation(self, trans_data: Dict[str, Any]) -> Transformation:
         transformation = Transformation(
             name=trans_data["name"],
             title=trans_data["title"],
             description=trans_data["description"],
             prompt=trans_data["prompt"],
             apply_default=trans_data["apply_default"],
+            model_id=trans_data.get("model_id"),
         )
         transformation.id = trans_data["id"]
         transformation.created = datetime.fromisoformat(
@@ -60,6 +35,21 @@ class TransformationsService:
         )
         return transformation
 
+    def get_all_transformations(self) -> List[Transformation]:
+        """Get all transformations."""
+        transformations_data = api_client.get_transformations()
+        # Convert API response to Transformation objects
+        transformations = []
+        for trans_data in transformations_data:
+            transformations.append(self._build_transformation(trans_data))
+        return transformations
+
+    def get_transformation(self, transformation_id: str) -> Transformation:
+        """Get a specific transformation."""
+        response = api_client.get_transformation(transformation_id)
+        trans_data = response if isinstance(response, dict) else response[0]
+        return self._build_transformation(trans_data)
+
     def create_transformation(
         self,
         name: str,
@@ -77,21 +67,7 @@ class TransformationsService:
             apply_default=apply_default,
         )
         trans_data = response if isinstance(response, dict) else response[0]
-        transformation = Transformation(
-            name=trans_data["name"],
-            title=trans_data["title"],
-            description=trans_data["description"],
-            prompt=trans_data["prompt"],
-            apply_default=trans_data["apply_default"],
-        )
-        transformation.id = trans_data["id"]
-        transformation.created = datetime.fromisoformat(
-            trans_data["created"].replace("Z", "+00:00")
-        )
-        transformation.updated = datetime.fromisoformat(
-            trans_data["updated"].replace("Z", "+00:00")
-        )
-        return transformation
+        return self._build_transformation(trans_data)
 
     def update_transformation(self, transformation: Transformation) -> Transformation:
         """Update a transformation."""
@@ -104,6 +80,7 @@ class TransformationsService:
             "description": transformation.description,
             "prompt": transformation.prompt,
             "apply_default": transformation.apply_default,
+            "model_id": transformation.model_id,
         }
         response = api_client.update_transformation(transformation.id, **updates)
         trans_data = response if isinstance(response, dict) else response[0]
@@ -114,6 +91,7 @@ class TransformationsService:
         transformation.description = trans_data["description"]
         transformation.prompt = trans_data["prompt"]
         transformation.apply_default = trans_data["apply_default"]
+        transformation.model_id = trans_data.get("model_id")
         transformation.updated = datetime.fromisoformat(
             trans_data["updated"].replace("Z", "+00:00")
         )
@@ -126,7 +104,7 @@ class TransformationsService:
         return True
 
     def execute_transformation(
-        self, transformation_id: str, input_text: str, model_id: str
+        self, transformation_id: str, input_text: str, model_id: Optional[str] = None
     ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
         """Execute a transformation on input text."""
         result = api_client.execute_transformation(
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
index 4143270a..34c3b180 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import { useEffect, useId } from 'react'
+import { useEffect, useId, useMemo } from 'react'
 import { Controller, useForm } from 'react-hook-form'
 import { zodResolver } from '@hookform/resolvers/zod'
 import { z } from 'zod'
@@ -11,18 +11,33 @@ import { Textarea } from '@/components/ui/textarea'
 import { Checkbox } from '@/components/ui/checkbox'
 import { Label } from '@/components/ui/label'
 import { MarkdownEditor } from '@/components/ui/markdown-editor'
-import { useCreateTransformation, useUpdateTransformation, useTransformation } from '@/lib/hooks/use-transformations'
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from '@/components/ui/select'
+import {
+  useCreateTransformation,
+  useUpdateTransformation,
+  useTransformation,
+} from '@/lib/hooks/use-transformations'
+import { useModels } from '@/lib/hooks/use-models'
 import { Transformation } from '@/lib/types/transformations'
 import { useQueryClient } from '@tanstack/react-query'
 import { TRANSFORMATION_QUERY_KEYS } from '@/lib/hooks/use-transformations'
 import { useTranslation } from '@/lib/hooks/use-translation'
 
+const DEFAULT_MODEL_VALUE = '__default_transformation_model__'
+
 const transformationSchema = z.object({
   name: z.string().min(1),
   title: z.string().min(1),
   description: z.string().optional(),
   prompt: z.string().min(1),
   apply_default: z.boolean().optional(),
+  model_id: z.string().nullable().optional(),
 })
 
 type TransformationFormData = z.infer<typeof transformationSchema>
@@ -40,10 +55,16 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
   const defaultId = useId()
   const descriptionId = useId()
   const promptId = useId()
+  const modelId = useId()
   const isEditing = Boolean(transformation)
   const { data: fetchedTransformation, isLoading } = useTransformation(transformation?.id ?? '', {
     enabled: open && Boolean(transformation?.id),
   })
+  const { data: models = [], isLoading: isLoadingModels } = useModels()
+  const languageModels = useMemo(
+    () => models.filter((model) => model.type === 'language'),
+    [models]
+  )
   const createTransformation = useCreateTransformation()
   const updateTransformation = useUpdateTransformation()
   const queryClient = useQueryClient()
@@ -61,12 +82,20 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
       description: '',
       prompt: '',
       apply_default: false,
+      model_id: null,
     },
   })
 
   useEffect(() => {
     if (!open) {
-      reset({ name: '', title: '', description: '', prompt: '', apply_default: false })
+      reset({
+        name: '',
+        title: '',
+        description: '',
+        prompt: '',
+        apply_default: false,
+        model_id: null,
+      })
       return
     }
 
@@ -77,6 +106,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
       description: source?.description ?? '',
       prompt: source?.prompt ?? '',
       apply_default: source?.apply_default ?? false,
+      model_id: source?.model_id ?? null,
     })
   }, [open, transformation, fetchedTransformation, reset])
 
@@ -90,6 +120,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
           description: data.description || undefined,
           prompt: data.prompt,
           apply_default: Boolean(data.apply_default),
+          model_id: data.model_id || null,
         },
       })
       queryClient.invalidateQueries({ queryKey: TRANSFORMATION_QUERY_KEYS.transformation(transformation.id) })
@@ -100,6 +131,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
         description: data.description || '',
         prompt: data.prompt,
         apply_default: Boolean(data.apply_default),
+        model_id: data.model_id || null,
       })
     }
 
@@ -170,24 +202,60 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                       )}
                     />
                   </div>
-                  <div className="flex items-center gap-2 pt-6 md:pt-8">
+                  <div>
+                    <Label htmlFor={modelId} className="text-sm font-medium">
+                      {t('transformations.model')}
+                    </Label>
                     <Controller
                       control={control}
-                      name="apply_default"
+                      name="model_id"
                       render={({ field }) => (
-                        <Checkbox
-                          id={defaultId}
-                          checked={field.value}
-                          onCheckedChange={(checked) => field.onChange(Boolean(checked))}
-                        />
+                        <Select
+                          name={field.name}
+                          value={field.value ?? DEFAULT_MODEL_VALUE}
+                          onValueChange={(value) =>
+                            field.onChange(
+                              value === DEFAULT_MODEL_VALUE ? null : value
+                            )
+                          }
+                          disabled={isLoadingModels}
+                        >
+                          <SelectTrigger id={modelId} className="w-full">
+                            <SelectValue placeholder={t('transformations.selectModel')} />
+                          </SelectTrigger>
+                          <SelectContent>
+                            <SelectItem value={DEFAULT_MODEL_VALUE}>
+                              {t('transformations.systemDefault')}
+                            </SelectItem>
+                            {languageModels.map((model) => (
+                              <SelectItem key={model.id} value={model.id}>
+                                {model.name}
+                              </SelectItem>
+                            ))}
+                          </SelectContent>
+                        </Select>
                       )}
                     />
-                     <Label htmlFor={defaultId} className="text-sm">
-                       {t('transformations.suggestDefault')}
-                     </Label>
                   </div>
                 </div>
 
+                <div className="flex items-center gap-2">
+                  <Controller
+                    control={control}
+                    name="apply_default"
+                    render={({ field }) => (
+                      <Checkbox
+                        id={defaultId}
+                        checked={field.value}
+                        onCheckedChange={(checked) => field.onChange(Boolean(checked))}
+                      />
+                    )}
+                  />
+                   <Label htmlFor={defaultId} className="text-sm">
+                     {t('transformations.suggestDefault')}
+                   </Label>
+                </div>
+
                 <div>
                    <Label htmlFor={descriptionId} className="text-sm font-medium">
                      {t('notebooks.addDescription').replace('...', '')}
diff --git a/frontend/src/lib/types/transformations.ts b/frontend/src/lib/types/transformations.ts
index ca747486..1f4dd1e5 100644
--- a/frontend/src/lib/types/transformations.ts
+++ b/frontend/src/lib/types/transformations.ts
@@ -5,6 +5,7 @@ export interface Transformation {
   description: string
   prompt: string
   apply_default: boolean
+  model_id: string | null
   created: string
   updated: string
 }
@@ -15,6 +16,7 @@ export interface CreateTransformationRequest {
   description: string
   prompt: string
   apply_default?: boolean
+  model_id?: string | null
 }
 
 export interface UpdateTransformationRequest {
@@ -23,20 +25,21 @@ export interface UpdateTransformationRequest {
   description?: string
   prompt?: string
   apply_default?: boolean
+  model_id?: string | null
 }
 
 export interface ExecuteTransformationRequest {
   transformation_id: string
   input_text: string
-  model_id: string
+  model_id?: string | null
 }
 
 export interface ExecuteTransformationResponse {
   output: string
   transformation_id: string
-  model_id: string
+  model_id: string | null
 }
 
 export interface DefaultPrompt {
   transformation_instructions: string
-}
\ No newline at end of file
+}
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 5780ee9f..d993cbfc 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -124,6 +124,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/16.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/17.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -174,6 +177,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/16_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/17_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/17.surrealql b/open_notebook/database/migrations/17.surrealql
new file mode 100644
index 00000000..166a4056
--- /dev/null
+++ b/open_notebook/database/migrations/17.surrealql
@@ -0,0 +1,3 @@
+-- Migration 17: Per-transformation model selection
+
+DEFINE FIELD IF NOT EXISTS model_id ON TABLE transformation TYPE option<record<model>>;
diff --git a/open_notebook/database/migrations/17_down.surrealql b/open_notebook/database/migrations/17_down.surrealql
new file mode 100644
index 00000000..b37ba6a4
--- /dev/null
+++ b/open_notebook/database/migrations/17_down.surrealql
@@ -0,0 +1,3 @@
+-- Migration 17 rollback: Remove per-transformation model selection
+
+REMOVE FIELD IF EXISTS model_id ON TABLE transformation;
diff --git a/open_notebook/domain/transformation.py b/open_notebook/domain/transformation.py
index 4e979767..d0aef99a 100644
--- a/open_notebook/domain/transformation.py
+++ b/open_notebook/domain/transformation.py
@@ -1,17 +1,26 @@
-from typing import ClassVar, Optional
+from typing import Any, ClassVar, Dict, Optional
 
 from pydantic import Field
 
+from open_notebook.database.repository import ensure_record_id
 from open_notebook.domain.base import ObjectModel, RecordModel
 
 
 class Transformation(ObjectModel):
     table_name: ClassVar[str] = "transformation"
+    nullable_fields: ClassVar[set[str]] = {"model_id"}
     name: str
     title: str
     description: str
     prompt: str
     apply_default: bool
+    model_id: Optional[str] = None
+
+    def _prepare_save_data(self) -> Dict[str, Any]:
+        data = super()._prepare_save_data()
+        if data.get("model_id"):
+            data["model_id"] = ensure_record_id(data["model_id"])
+        return data
 
 
 class DefaultPrompts(RecordModel):
diff --git a/screenshot-01-initial-load.png b/screenshot-01-initial-load.png
new file mode 100644
index 0000000000000000000000000000000000000000..27256e0112a7c87ff8afa22834a937247e3cd5d9
GIT binary patch
literal 49861
zcmd43byU>-*EZ^HVSp$KNC=9Alt@dPz|h^HNJw{=h=72A3=IMz-O>$8cjwR@GIYnx
z*?2#{=RE8E>#TLodDrV&t{H}5=KKA`-q*gaYkz!Yq(tzpkzPA@?i?OM^p)JXa~FTY
zf72`H;g!}|M#FRGZk|KDdamH`ZFL;SMRFh8v}taqL#-oBRewe2HsdD(=k+Rshyhe`
znt)h@>;UQO9+dMynt+bH^Ys@mKCW(JsYT4!g&q)?9o0DsQ0`k&P96(P7OYhbY<Dh>
zSu;JPqPp{49E17i@nfm8i|A&wz61~Fx@pcoID1^W<8kxs(Z=uDm9t0Q*Y_`;J;qYq
zJiEdVQn#-B1CP&AuY5Xt`MdnZ7iW*%^#6PQTs1?1h%iOxU07Li{!bV@xS|pfhRd}}
zPY5YY?Dj*iakICDa?_g9hCQx2yWVq^G;)kL8-+9JN;;%i3QBFYy@oTtK3o`xezj;5
zAQ>+l^-5P)_x<~{s;d8be|Y~9-do+YE$pa7?^J;e19hxZxE8wf%`HM>qT87h-Mz_e
z(VWJ?>;`7sCH#Vd15JVVh;Q9Wz`U%kuD)?2FpAwkz#a3^5<Ax-pX7degqN#P+m|Zc
z6?=TVIorfQA{Oyjz3{!Io>6+C%Gvd;f9=2aiIsI_O|#(Zj(&n1Md;#=KKHwhb|#(4
zCpRB!SI^Yp3!zHPwTp}t`D~Ufj`z^?^3|A=ZOn=g9Zf6d6en#c-+J*eOYXHy<y={Z
zvZ~EH@Ub5hLexB-FeoKk`r{!e8H;`!EbGLl_;)N2+`ea=GI9SVg^=4xpR}`HTR8e)
z^PN8t^T}F;d1t)P;_PgJ#q<xjjdW~yK|w)%m|mNkvgoDTbW$10xxXi>j{p7mcQeoK
z9z9)){t+D9Iwm&Ha{G^(99zP*Jnn+dETg9luLNa-yA+oCO8?1yyE!viTU)!(9u+H4
z5i<DB%nZ}UV$EjI$#1{LpKZ{e)<Z$@8g6u~+SNy+%t|>|YdbZ5;V#QuXDr`^%eYL6
z88#D@YitXsB4agdV?c~<qh^JjWHd*a&2s*0zdK}tCvA7>ZK_`t=u5`NYF3|Ey|S>_
zxQ-)wRhEc`>?@!BgdG}1CPfp*9J(u(Xg=wd-x$MfF2+YirBnOK7behpu35D}A3a`S
zPp5)v38BkW%nW8vRre>#wp$xB<TqUI)$66_Q!g>ATCc%A;Nsc~8~yrW^#vMb%P-KT
zQR#rFx<rlFTES|w^!35Z%ZyWKTCCW~>HeYX@t$^-Q^!G#AWVn-M|u_pYpd$RT{8U#
zff=ugBF7wcO#2#@(r?NyMP1{T?<~%Hkf48q<Q<x6fZd(&P6nHvlD<B@S|zXDs>9LF
zGNW>i$ygNYJ7JdGEdpEWf#K0nn8D$$b*WS-&E913p&zfenbnJLkUwp1ZOssm=wv&9
zd+CTNDYb6OwVZ7X4-bcr$Wkjp1wZu3*KHvnC1qgmj463WpjKw3r{^Jb@<fwpD_??u
zkdV{mfH>Y|Yk4?tmR340)Zy9sgljmHs#>0o*Fr~(=|tu0^Qj7)e+DxDEUPj|$MM6A
zg=L$L<d<c=AUio;ckj>D&XuECxBWB7Z8Gf85v{10q0mD_6EmJ7S%IVxzw_v;HkV0P
zT$OsU36mE88u16Yd+348l8OrFKZDtU<U9=j3`|bCuMV>!%sn^lyuG|ij0V&eG|O!e
zn3J^?cl5ZVCjkn3V(l{sE5ts8HsE#;42-^mg9E_@%mw$8ypzFf_1@;-hazp^%>CHr
zLc_`T0bBEJ%4t){6O!^NE&{eI9Cg}Wv=VnGOUx;EiLPI}b~GPRrdDBxR`a?>2w~;f
zqy*6wb2Mv(Ti*$Sc9+SsoLqm6fbgB^tv_EM4|XcOW+XgS;L-QR^OqITSJyZiWqOpT
zy2;x^*ji8Rekk{n&w4>3U5=)MV7{5^wV&u`Udx$J4;U9(LY${-wUb$04xaF!$a#1C
zZ`?zPpZ~`1=y$^G-j@=9e4ywOCY@oV?Ji*3o8*i7vcEPyTJ4(Y<<&r}jmxZ2nl{%G
z(SY38_*`r{+MF=ZC4}v*cCFB9@FS5PFSm`MW+i!IJSb78zq5Kc-4QcH#*xM%AV*Ek
zu5Yv08Jomx9LzBJ`Ih$HI=0MD+_I{&lEH1WVdL~T9{X{vCsBmptKiAc)IvVn6@^r(
z@mmjt5jvrD-EOCXZSg|bI05$&6soyDoLOBw&=ggONS8}S4qqO5Zrak*(*v`^V=*<g
zIwCZfCaZaxTh&+e+>tCfBdch>Eu3XC?#F9?+Pm!f?JCUt{aLEpyXO;fb8}scdYj_}
zDl#)O#dr=I*G39NNC_F0PAD(GsB@;F+*c>K5-;Fvx3{XAt@-`gKR7r(NlihNLYAw;
zd5r?|tzq)!CBJ@&c-w1XZVKOrBt^@o$HAc_&~f*;UvSURiO?vuH#q<=KyE?5bx<t1
zNN$jT|J{J+1%2YKs7rilbR;_5vF!MgExw6z!Tw*q6c!bU^CSM?UcJh>WAkTF(O9?n
zYl32CxZG(4#KTH{h`lBzSpfmNc@B0+rCGOVhuSCaW*Y+vf6mR!P>F1#G+3zHg5MvZ
zOZt*d4;L>Gd}FXX*m&!>Ht<ItolLGO_TB}y@!|I3ZI%^Sn+$@3M(Q*)Vk9g$DQfhH
zW?I7@*@k<T;moo>KHW*2DLE;vWX>;8BmJU1OSfq(g#2dub$)-jPr225wkasY9)eC~
z6=TN!N0-M{PP>Si(Agm+2x1J1E^`kWgfE309k16E?JH3n?^PY`XF_=IB}E-x*=iy_
z^bdo)=#Uzj^<qhmdQUB@99z%S{+zIdz@D5uyS-m%=qqc9oOFDKjNV?qtU$;2kK`RM
z`kK6(9#!bF2tnArbe-s_>ygb2LM?SOK_y3{jG&N3t5T-a;z4?jXob;$QDcF2joWxP
zSI*Vp(bS;8Ksf}mc1ncO^^woQb>hctq2u*s){6=!h92G&*{*x5Wwl<{=~O;*mFl%A
zT|J^9DX(aXt&3ug2?+=Y*raF)<agM37QR<o^!~cbJl9x_yL-=%1_n%O<O+HUjb`4Z
zq9+hL*2MmkFz1rqu)8|)a@uunanax)b=IH7d+*PXGN6@8PuR^J*@|ISJ@YzYRk417
zGSao7Uh~@=j~WVw4<sVXEF|h_wwneS>II86f`@Ur=+(VaQ&Z=14*0j%4W-_`o%XqL
zuN4ByV3sOgtecxX-gD8w(YcWU&Qw1kyj2J{KKPVJ?&=tQ%lE@SS(I|M*zH!IzEqVv
z4SBIXQ3d%%D|>OG%6SD#r|9{OXSUdMeWC_3pw3u4jktdH=9EW`!Z#-7cy|^1^`m4&
z2$y_{1gdv!yuvtger?=+2xdQ$Z$CmdvHEDM?bdu-L`ZF-)Ajc}8>h{m9twXk8vf}K
z5+cvm)RyY9y}*1J$)?{P$)1{da;x6K=*^q&cWjf#va2e|q#NS-jQAz|2JF|y%3O~F
zPl%@%!WntA*HfkATeKyv5iv!+3Ap;{)2Fdg%WXg_`64+vJh<A;#7;X)!6&a@a;acO
zZS3rnS{{<+x{7-#Olcns3OG{PuF>`W%+GKA##2yy8u3^&6iZcz4b?I~o}KJ;7G_y*
zF+P0x#f6Av?89w3j6lJ!i3zRI)r(}`c5sX;Syr&_fsN~)O#Bd1R^nMcaP+1~(z)j#
z8|!@Vb2Tf%S+oU3L_~J2wu0iagfY9$&X}DG=gv(~(DDiXl+3KH?J#MdzbpDWIz2T{
zUrDUtRpv(O3gWw8pu%!rMthXP(4H(FLzB&BpkXXGua~imWDHmEh3Fgicu6OFtCVvm
ztV;VT9j#}BjR*N_8nj=%s`thtOR`JVYwk@JnE&;NgM-@Hj?PiHBU%q~)AQ%gSMZwi
zP@(i8$*8?1$~L^%WU(;hVi=>cA<KNJMMrdz)wzt*ewj=fVT^UQqUlCUNNQm=vI$b|
z{L?OrUkneqO;Jfj$=G_|5P&Y>B{T6wSzKB65X=}J^F%n!bEO^JM`fw@Ic_hs_82U7
zYR2<B{+PIdyimkDUExew>qj`->56yb2I*4^8LP%N5q_(=G=9e|LVCGEr(M!yF~^1G
z-~y4LI1C2k%?fa!GiHA>6VtpesnuF{U^5SU_YR{H72s3AJ-V{01-!efhi{)f`_(o`
zMovDKBFRUWx;iltrm3OvXUP1g^<qwa9W|*f8YOwz!6`gPDcfnf_O)(RqDWAWTSw%t
zgqJ=rDs-dk^NM+5gz+wiTh315s^vCOVwVr={EFqb4%RBxwVy6PEE>AppL5UNF==y_
zZlQHvDNiT)<E85@vtIV!9q0GNUplE38JR{V+pi1u_LbX?){7r6#F*>KZ7*Qs^q8^N
zS`6s$UusBqo-LTICxX9KFuv?NWI6vlj1L`r=w2U;%Y-FZXkXs@jiackX&uJ6xI3in
zOkloJYI$3C;L<gRW|676ITIB?t{*&F7(VIiZ$+#Qf4xF@E4iInVUHv4?Sqw++$gMS
zfdP?zlz)9G;b%$n++I|gRhibdkD{QUpnR&^>4-sm#3R`ZxKa{!Ub9Ke;y|V{8K)74
z)m%j5Lz+u1vR0cj4a!+6j%#C+0H5+=HOEHMAvmj*n7M|~c0llF_VRD=cMn;5>bRA}
zU0JSQ<zzdb_qI;>rS$31Zfht#yW`d!gsRtd;_!~IPPH4;b%ol@N@-IxVLq?@iAGT<
zF0(Pw%i@~_?%03iZhtiubl8{zY$KXFEk-6sb(iD)(&08SIXSr-<}l*t&nF{pgvxRj
zM@xzL?kAST^*kdVU`usHZCmfI3_!J`U50m=09kWlb@2JtL+AZ9K6lKhRpmj>&}H}`
z`Sgn9#2%oNp)6H)-`~iK)C?z>W6H+ZE&8^7d5pwQ)6sBct?^e6CqH!wt(%WM<YYaJ
zHXSQ9oNe5_n&X@_(<Wm&T0ELJd#EXqbVQA=^9eGUtR8Uqc_)SX5$1FsdwlrE69=DG
z>YEJ|G$RG>9Mzp6xw+<^m+|Ji9yfYoF~{p><K=BzfJM@@%vzAiYI-Wo?){K&6%oig
zC2pseXWPm}C9Qsa@Ysr19Lmvza3fi(K)KY`OldD1M8T}hj84v4+ga{oRx2E<bbQx>
z#K!Rm0RX8xPM=vxlct%!LB=Hk$>A>RyeZw>PloIs)$h~x?SUOd4o0~z$V1J)dIh;k
zxMfD#v|tCO{F^P~$kEK&)h~LL9ULO-Q~$Yegip%x<afGEfqn-$zeBUMP)G2ifpmGg
zI@7z<2h7@-<DYNqd~it^8tULGf=D^@o%hXF0uaF#Lpe2Z0?uyaOo!Y1lM!O$&oI<1
zO>c8@a^$vPUw`1@eCdr#&_1Hk|KUGez}$xB<)?gn%9#rf)oGfH<OqWO0>Z)+GnJU>
zq`tjTDfRbn1AKTm7otUgrfw4ZIPh38V}`|=Wmov>uNOq4S*it;ZU<6~%(PW_jnrBI
zw3NeT%B*N+A1-6F?RjrIIXLvE%Zp_G+55A9*puiJ@|3K=e6kC7`T-;gf@K<|dwg~h
zT5&wq!Wg$aw^Ow!O^n@r9&{6>J4gFLj|e3RD*xhP%*Vm-E?FY0#lU!lFEoduR7VH1
z(%2*8h|MkyMGgA(ueuDXi6_f%C#z3UEHiVNy@iI`o;dr)2JZwNw+i3ZHF|T<xa&Lu
z_|rdNK31AAlarCJk{{r5Sd>n1Lds?GBl)?pvGHMMK;k=y(Oj1<350LZYriI8a^9@v
zev8Fipmaa+9ek`=zB5)PRI_y=OrO~D*q}X9_S%A6IETh3L`FW`MmL60bYV}NHk5n&
zJ-=yEe-{KWNY8Qgf0*S{3UR~nMJvogAg8Mfni0C&s)nuND^xvJMWxH9j*X4w>vtFp
zUp{P_ZetP2(yozmrYCzN>bX^>oF?;pA`LxSBK_^D?B697qLC!`T%oi)zwTti&id-7
zF7i-*VkRQ>zK68$)cVFsRk`>$I5;*bQS(#I6P1nzo!^irvy1lJ#)C{OC&}{f->W?P
z_42A3Ez1q+`|fS~`|eY#-vl<Pd0ySPa;5u51?N@-1`1Ndt5AtZhf4B_$r^X8o={V{
z^`g|?>WH=jZfrf*(zhD-5B}m-?o<0>jhD(#kM~=BRH|Jrp_A${r$UtM`h|YS0Z|3h
z#kVt+n-m>#w5pVnnzt+D`_p7yJE9lq&IOTizXc$m=DaqhtybdZ){!6)mH&Q`M(hhW
zCex$B`JclZqKT%XTtZlWkw2levSAE@C<l5kM7A7hk<mbp8Q%llynKsn=GXk`J%;E@
z*B46O_wZNeJ*!O`<Z;?j-r6T7#13SumrMY{F+7c6(eAGf_oivyw-_zXMs;XX2)d|b
zC>T11+ra=y#|x%+gwaa!W<PLGeLs{ljzg)?BV`(9QRKWYH5-4C?upr$gX4Sj%0TAn
zX4ATyc|`YUnRNtu6x)A<Pd=PFp2q%ql*RC;)jWe*>Pdj``2?pjz|jz`5yrVHn?6KW
z6t4-%%(^-raSU%vu0w*;(1@Fqe<i4g{&H>>e+{r?D`i-c<#O*lkUuRoxD0Cw=Y1;d
z&5f}soJRc)qs8bmOlmxo6I{caexQ9Tf?mGU;#%G`BP@p<CeB>eo5YtosPP(wVpNAS
z@AhR&uHfhLqs6GY+j5-W8W=Dp7xznfGF0nq<WticbHh{26SY8Z?a0fDC-H|NrB8i6
zjYcRcK)scO{P}YOAhZ4Ygr+lnk#>4qdMQ5ZG;y!YwCtvk6nh~K9_gEd(xT(f)W5sB
zq{TfMa`JiWyR{47%hF35q7y}2Z@1G-7Mj<b+6VNdNQPmv3X7-x=zVSoXcxJ#3ms?0
z4~FOFY^IQMb#;FwC<(vp<<bI4qI9s@YF=!Hk^@j|iD93<T8-yRZ@@j&!Iy8}Wt|a6
zpRbg|tn|)L&J-sV4Gp`6JZZs+F0@(hMfeS(*47S5x!v4ewoOgl_f1qAwcw7Wm5hFG
zDAS<5Ej+;r{No$yqVow}MXhVM{wPoh8+l6iH3{o}W?sJY&hTyY*8Pp}zH6R|!U5g+
z0e1|GGTVlSRp{;-HeW`1ZOt9-Q#?Qp`rV=5>WZvG<aR!N!(lvF`N~($yQ$o^tLs6f
z#e->qC)*1h@66539q8TPvVMDzKEBlJFwo#f$Sycr_{`%3mCS<oj=Bdi(dSfnos=Y$
z>2Up$Nl}FvX^fEj?*{)a^8;A1kMM&&GK^4flA^*G9LZ2Xd`K?u#rPovyORhR6q+5h
zzu0S3=%=4}JY#IhaDU9I_vS<un7Fk5>!0MD3#4wV7a2)hh>!H1f9LJ=nnxvbM~R`x
zb*rTb7ELFTri}3N{aw-eXnsfJ;6&a#DAy~JibLMCA8xxF2axk<5J*_r+MXJ;JBB4$
zFJia~S)k(X`J8|~+9kWXfXvuxbAnPVW2WmZ7t@2^3y9#3Co1a4fCq5plTUKA3Lmau
z&5d-R{z7hKAv;RH#Z3_-8N5c#8E6lmg@jL0f2`-radnBl7;iO$e-BvTZ$MXte8|pb
zEBRt;?-!=#o9rcKKoWCg@V-%#YXOgi<XWT*uq#B&YDuTXrY8qimx1Jb^8L;8ARy;5
zOJf?wrJgK9U8I)y%;P*FH~GzPcbxWU&broC-p$B*W!5swS^bZ3G2HRFJ>vrLenLJx
z?wAv}Y4J+Oyu7>;bD{MfBd5mEH^W=?EFq82Q3yEM^d`~QdE+UjeEosu4jaNetE;Ok
z@_&$dAdbx7{_g5Rir(T8W-(`gA%B?e9Is<6u4kS}ZaQn^iG5CbapJ|K>wc`=_Zsub
z>Wd<aKTJm0)E+*4y0kUV=#BaO`7>O-G1_Xrm8R-i-HTTM<VK54Lk@xuw&DO=IB!gO
zOeYuSYPo8uvW?lnALpyhLdI+?;!C&m`t<3pxmJoq)Yd{r=I+4}re>1y=!k+H)t}FB
zOQ>el+mTK(I`qvRckl_Cdz@5$!-EuiQ;nh7yLdWud}wxVE|f-`C_8p)-!DZ#hzN>R
z969cr=bK|kJ1njT{QC9lqI|%GUW0g7{nECRBt!_5lgC|=?%Qz*M~hJBF115#p?fY{
z09eA8TfV-&hP_FuKuuo0L0)LkHE}UBFfb4UxBzw9Jzr+OUhPd%ByN*Yy0qmoz->Np
za`Y!%O`R)WyQV9^E<xgBBQTtKK#^uM^H{e>E|y#i?WZea{jHA+NC!ZP^}<P#CLy9Y
zLA`{+yKv82uJF{`cqOg0WIxA=nf~aRfPes=C#2l;@xwY`@P>a*uXKby+B~^E22cp%
zX3<`e@ldivHcZi%n^!y(hH|yF@$rL*rCLMi?1Lx-3ismO*ETjDjb$oRvgG=C$22=S
zI&zu}|9T>*UA-8_!P6S?bEs^4TiiI1{4m*WU@U-)TPc0!tk!N33S)5n32b%^2E}f@
zki}t0Fma*3wN<S5#oCx7<Vwaa;~~KyJc3c9!K{R$7*1oYavQ^J0jHfvKSIWq1;R&D
zZ%eVybG710AII^$c{Zl`&w$Xr?R$W<kZt^km~$H5T)%$3?%wkNLm>}F?dosS4Bv@a
zw8**IIf&~ddiEAuLWV5nr&(&qN2*<$uHL3iza!Rz!;sgp;rR<#O2Wq)g$|oY$L;b|
zM2M0zowj;coB-}I6uYC>2rJ1r-mCn0g+NnK!_Zv5_~QOR%X93`vQXtJ7u}>AUpCNC
zYU<Zitrt5vzp<)hspN$*Mv!4oa)IVmd&tHnR~y$qQ&=vaDiw>%{aMIvHS*3!;V*X$
zOOI<m{Bs)MFB@$%kfE5XCCT7Ga0zcQ5H-rjq>b^JR%nC(ougXN`c+@gBj3?md(w7w
z_-${JySdHUw5$ahHGo>D*4r)yByO|JhOYL{UuQSyeBYl2*%NM5tJLCcwt(~ADj=Us
z?(iSzh~FJC+<mC$&x4d97y-u|X4QgyhF)FO?}#=$&=LJwZL^HzNRh@)lxiH3Laycp
z9N--R81}0T17+){tFweqq1`(FU_*Oji(wLIB4Q~d{}Y2wX{Z(0PS(U5L@xO<0%Aj0
z)O5f_1(I<O{(j*3cH%m5oVMt8h_qmwz_G}zc#`N%X4U+;6iKq0BcuN7%BQ2|HASYQ
z!fg};mtr^!^Nj}l&R^Oh3$nDaft3jX%M||M#g63bk#Vj1ldz}IiI$xe_NIHA=|*EL
ztmYGyWx16&<tB|RHSMel?Sdy8vm!wh>1X$RR;j?~=nP->4a}956Nfop#|8;?BH2=u
z=xr@659cG|{fSvH`Oayy+E`4y_!zTt&NsWqW}t`YWkPM3e6|}RU%z_w=vl<c=>-jq
zZ~f{Id3n_cnyZ}mY3k<MmyO8Z5LDQ&Ystu10J=k?`{?4%=-fiXK45~ldCFd3Zk5`h
zod6~wDVTbe7CO{{CGCtGM_7r^RNT7@>^5>Hl8HwokQ`avuYUh<l#-AT$a!>R<Xz<<
za&x(Kxagy~mcH)po9M={6vDfA59V4zK#HM<*?4v3Q+I9&^I!1~%PK|kS1kNLL=61@
zPKx}1t(uym8_JzjICpNUMlbzbWuEbn8D^tSn&q29nUz;#z#lVI;c0X5>_cH(h4tJI
zAD)Sei{s!phgr2n<W^bED#6q;-1ZF!sIu=8dU+X#k8f1@24>oa2e^V_;~|Zxeq)xw
zxpiS9hmfFSFQsgh#Y+DO>$_^vkVdIfpFfw*JzIpZ-^v<we&Rz^RFo63Zd-V=@sOR`
z@zn1`;Hln^7Dw%|$)|h~qa<QJdI)ubDT+hU++%5JiC*6AeP4=d6dMhpoJWh$8n0~z
zA&VCEGDq4(el7_pj2;SCKLx$)r>qWlejKCe^u3mfaKp(YJJgv-kzU*6dRH2*VgIN^
zppO5Y&2AL%cU6wtfzx^n!8OH|jD{qlH+&tpWd07z%(F*0>1{!(k|-S_NyD4w5}0TU
zlr)8Y!M+M!4&i8}!dwM~$H~bWP<fgwK2lPupg*7&7K|e2{y57~!06i8w96!mH4qOL
z<!DyqSxm3X`Dv7xwGCtr;ovUOgtbIQMxsaU<N54=Phu1N#rK?cjYwJSy5cT01;tmp
zW1q+In@L9Z#|oY<hBK29GcDyXXV|Y(<nx-&<?CfqJxm0hG@+`}a&|CI00&5E6H`;o
z423*W&I}b*Rl^XeSl$ZjMJ@Cv36|Vmz;FW2L~N$0_NE|D-5l|V97yPzqZn#Cv0^2z
z<619qJ3BkYOsAUFdws>*ebN=cXZ%^OVM!K`D3(hGH7SA%x72aFcy+eHUwIXc)~hiZ
z{4&~EV9*7~Of2QGYW|CfjUd4lB&YF0(&Qr$E$CI-;I~_gUCP;N^Q$8TB+^^E0+y#o
z+2lOm#6us=%quoNSq8$8ZOH3-L^7@F_h*8X@nS4lS4CdoQ$1V!4;S#NJ+@-Fy}eRA
zf@>?BHZpprVzbt@pOz+1ek(W6WZ3t%0e~f@$&hke<GHSQ?%zngy}Wm+T;>xSd!|Ao
zA|uT@4cEAh6q+_DQP=m^mir7?PD*bx9eR<`PJTN*#&_RBaEplGIMR!Uv&7x88Xw<o
zrXE3c2_B28zu2nLhjk#S;sQaf_0`<L%Nt`g<8OuUell#~7Q5DYtA|K${D)-Z)p&vH
zMJ3Xy66ljdajQEqQ$I0V^QHOI;}!e!X}tDp8gj4sZJJ9oc%+%hn)6Cu5l1N`yigs{
zY<U78(%RM*@pH}x|H9syfWv(2E`*^_W_1RGPI3ZVAcO69mMo>a2na^kj)jIR4J+=@
z>Ddv+UxppBG%fp#=okXmcm+Oa20tA(spNb>cARdt@SX^M*i=_rD<1JUVP>nvGm3q&
z^@ZTU_aC}tRnGV=;cZ{o5L7c=LM#jlX>WE{D2GQz%uqY2o}N`EzPNmjTUjR3+Y5NQ
z+r5Cl>ZJhibw+Ob&-t~6F^Z~vMTd6lynRa{v~{V1ocx6PT_Y~k73J=e+B2UjJ=B(v
z=x?m=a*B$=nCM)O3b(>1%IE1u>DK{;L`lVCM(ZBd=-wqJHV_wYqn=0unoPjq=6#Zv
zg0~Q!TURM~Z3-3AXSld5;{&Nz8vL;q)@`bJI%UnxqE|(Wi;K&w8XCwDGD4WA+Qk_z
zhir~pbIAJ){zwwNkirJBUm+cVett)Xi(VccK^3;fEb9^<T_ujj9YzF=un(wVz4U;R
zCbEzrlOO?#xi{V@b!&=b%%H=-R?r@*D5kFNAwX;Z`Sk9$zM6(J(QPvMRuvQ#Ax<pm
zhSMWVRRYOJ@X4Pt+)_RQQ^{icp<*@v7D)rv$69u)#${e^hf^L_O9u!|X#<xH)~Ct2
zlENL2744ie?MtK%c9!MS4d>cPB0eW|L&2s&Z*%9dhD`6rI|yB*Lb5KB{83CyOs;l~
z;>w#|(Moc9Y1fVCm$I1~8ZY4703A$z#;=k|HGjBdvU8%;Qhk5z-rRe)j%Z0FPSVuF
z5PkvwHZ=%Dw2MAfj7nJ{zxuM(`Ow*RR;|TveiQhX5-cW3L<qV%@sLL#K=ADj?4dCW
zdn9YKzjjK%nf#!Dx=LQ|FxaT;`}3;ggNO1^Hf`(<v4d)Ul8+9Kr2hR(y)!~v>g%r*
z!U|nJJv61;@JMa#3$5~s#V~tC261GBF1y>YsTaTTXh=O-ayHeIjUGVotE;QjrdOpx
z=-gQ@<<Ls5AoNU@d&9Qk#7QJ+5pRl1q-*p$8j&>qVwEFB#_<=6JuWyK{-a0)3lKks
z8#|JvdZDhdjbNcmo57<%Id_fCe5OkLXk1i>GGv0jMH%_KFpDN$;rGWwn%L?MbXcyR
z%iyN7venTJ-PWx(96FYe;fjlt_U92Mk-B9-dP&6#ium~uT!(4?GRf$v>(+7Z+^-n+
z5mUN2uS|rxsHdpr);(wP9}}{2N>F+Zq5!+L1aCr!P#AMe+D~4ie%=F7de6eDm6V8x
z=;p?fR~x;`llTPYV7WkKveb``M+LeqNCa<DgIKzVn3nf%xg6P+`|e}GR7oZox_3?U
zR0|rtLip_0TCJ;H%94j4>CyOJV-PgF8?R>gbw_Hv8ci4Wk{NsDs*qKEd_659LE2b!
znMIm{+jJm5R?a5uUOy6947LM3NWXS7G}N2IhWQ5ey}jQ>BOYgmDw>a%->!MMuPc(o
z_5LosscI3IB9-Ltk89r6uk?hkhBT7hBqJ+u*xUk84g7e-7m|D0rS^zQGQ|43UcNAH
zb2CJz^B%d&)?9i$gKxgt{1ev0n_)fb*;Q37BNY({r#h>}PI~v$gWVxLg0dK{Y!-jX
z%1{3pMM*E2Ks7f$ord+x!KgXDy(ZR7iivgI;O@b}#-Af{G$9Z5(QK8V?nf-D7A(-*
zrM!9bkx!3r#6xyc6fip>YGd`jleBjq#_q2li$AnpaCh$tZ~qf3=(MAPoGUi1m<xX6
ztl;wIeQy#b-W>xZm>@k$AzLlo#Zh`zvKN+bzG<=;A@^EWXv^jvx`Jht+VKyrsj+cp
zbMqrpKG@a)_A(90=@Rf=(v_d6Cmxy3>RtG9te0odd2&x^)^!&<*$DVjG+pwDCb_vF
z^coiXCF%wRzftL27i5z{3^9>2=YIxEF;SS%5Voq`K*lZ-{0CV^<R@Q9YO1#EuO03b
z?J@4J>1iFBi5IC>3o+z49L&7XX8W5+I-;0vu2o4m-o#!yOtH;9(9(P(Uy;@J{kbbH
zCsn{6UttoWhu-yQ=cUh{csGkrCkcBa^WNs{eV)%lyq+IFe(|oa@&N0B_t352uG}jo
z=J8q+T0G=KZqn}y+e@j!F2;z3wE{J}FvwgZpV|qCgZ}9OV!V7nQOr&(1%nL;M&l~c
zQ;*Wyva42D8pz1}1jJGA8RC$L%T7B?fyV0x?aBM;y<4{)Bukm%%-YXkO`lm<{Insh
zj$iIg{xe>2ygG6nwqtLqv~*p=n=dq*X4F+dh;@Z%4!Z!-fpo>TMN|=)&y7QHYt^1X
zfrD~3gv0zqRXgJ(8jq}4tc;C=V|A{D9c3<mTXbOv7m9zLzHe*{9vjG-^Oy@;lFnUg
z=F2N9Od`YFW@E?~0ecR6t5FKW$lFeunwoL^j#RUF+hS#iHvG;`%cyC%8t>nWUD|Ag
zML+rgl@vuFam_VqlB@Ep`X4*aE_Aq;G}YFgtPK2NWwn$Cj@@;>)fPc-W|o6THW)6}
zIq5E>?PUTk2MH@Xv2gdpEzWdTLr+NNJ)OTKZjE%Vj>H!7#?e062#%i=K$ml({BRp`
zVC@97zX#qo3#uIB1V)h?#H#(veb}7&_NeVGVZ)kBVXdR!y@B+LXFgkIO<aVChT==F
z1qtOH*Z#T?aMI(~?Wuk3A1=E}=%ng4K}9v=iSth{eY|X{RCZqy!g_7&QWybZJ$ADx
z_F3=x-ble>5IN68nf0jA00WD5^&WsG--xg6XJFUCn)b>k)N@^xP#8cIH`=xJ6C_Gd
zN<g-&o33k`v%o@X0|pJ`TjP*|AS5@?Hm7~kHLX20p<ziAR1Il07~bzQT_!tQ3>Aib
zd!9H!ptD(EF?GF9+8^0cIIfPBE&lR&Xw_YFhF?WFUUj32GC^4|s`ECrB4<G?luRly
zsr*z3T-WPOcq!t3s25D$Cyw5%_w6HotkD_9n98L*QE3K<<?Btzf(1$Tt)mqh4i5FT
zUhWz-ZsIG-HJI}D))m`Mr8Lb^5jz(&sspxZL?OF7rWe#W;|Q`~reMa1%vbcj(gYhw
zheXWb9TQzjn#gew5;kY%k#Y=*TfIlFE(|TBkIX|W1CY8(IU3r<CiK~B42n!GEn901
z>j!8Wai!+bnOS+B-*yYl(_=}9s)r(hEiVYxU-zyH6C6j@OSOoU>35_67;Ry@aQ=LW
z=_nxq!4J(DnnUCS-)s=y?=J`w6;aWp^_tvZ?kDzZ-w3YIq&!wH=H1K)Iphq908=7n
zA%=3YK#1U<a~s-hBlL;a4st8qCrbd<H=CJGoTQRtS`%C#_=6MdTYYXPZqmp8BI61$
zg0#pwtEfaKeYcwDhZ-VT5-JKU1%;%G7t#gw+LwllO$#X9znQ1;K|Q=Vr0pI-5I|kG
zG9dKT)8u7#icG?JD2|S|yK3xK55y<XOsZ_Q>l0dhh<vT8Xt`QsqQ!Dh&C0uAZ@l>2
z&bG`ip~Y?oZ>8p236nAa-syEjCtEKL8V{OaFvlakvuI7N3|**-WFb_Hl-tUWbZS=Y
zsi~^YxBM9_SG--vGGjEbrCQ_mXGmKb$T`n15;Fk=ul*cEpB`>DIm)R6fHL;E!Hkz0
z2XyF5USQoGDCR<JC1O;9`eBi{F?2skB<KdgEeO4@CvIMK)2t|Vot~GT>nL+OO`+B$
z37PVyLe!8UR^JiCS65Eo<10o|v$TaqKz)Ko+8>TDp8TrUIbv#-D~{C{Pd!g3)<iu~
z*tY0xwmNr|;Hd$ch^bLr6f-2@?d9!Vy=4#ppiHlwii)Z~CK!7gycH2qx)Hr3*Po_G
z-rZeTj9zF>V(J(O!@=$~i<h*oOv~@CX$2D?p0YhvxWPJka?mv?^sAu(Q6+g+W`tGM
zb3b;cK`^nId*j~lZj&W#c8~l0Tl(I;d(`VdTgwLa)12H*X{|Yj$dY2LrLMlA`|6c0
z1kq3J_34VWspP-O%!LW~2+2=g<#!mbn$OH9A>QrR`Ui?4T01)jH%t*Qn8CrpY!knK
zW4w$VcOE@@dHI;wZ4(TodM(~Dyw!0@lL6FwtiG|x@nGp!*SB+-eXGO)p<34=AM$7y
z3_G+O{<#WqAptx8dNex1&zYh`wkjc4J#F=dQM*&o{OWexm*xJG$3}yXiw?e?pLme#
zI`tT*o~7b*8aanJsmsV0gijvv1i^i`$BcDFMg%|e@(|syOsY1jU2-4z&QpJ8MO4Z%
zU`S(b++e8+mnJYz-1OqrRzKTB@*%_YBd6S7(ivL*$2GARIDqlGGG~7=H^Vi9zKP?^
zhJEg<#5&^sn5CA0Q_4~GT=d*weg<p6K%<}$LVBQ3VQhYnxnm$7e?WwipR&8?huXH`
zSbA!0>x<LP;G>`U=O@_Z=s|CNOkb6M=GvZk2Om~gC{tjUxk8blQ~fC<KPiYWRl(1v
z&pyLbd0>%K!E=UzL3rFDtrAPZWUVKbD%L<rN8Czbe||+(=u)Kt6BE<e_;&Rw6IA}^
zmb%@K$X@JcW#}!tYZF-qI8!L?PsYtR^?Nz5aH>RQx<(8n7-zUk+RhAOWBN-!v2n{^
zz{tD}7K>Gi>PzRE??;8K{2D0zP12X~`O$nFv)P1PS%1c?Wmj;|$`amRMrpkS%W<=M
zi`SyZ+^%HWyf|IEqA~VL`NmXD?4{Tlxk&@gxSCM5@1B}tjtMw3EGt@Usn>!Oq-*<+
zLM#tu$Sh9uU7WxIc<#eK%ANE|@{xgyq--|V!GbagXX&XZGjAHNvVt=UcGQsA9j}2d
zp-bD0_ujsVVZz#_Ok;e-O>#@Z+IQTu6a;s+^<}-j4Fpx3xtz~c?qecKVny-f$g*Tr
ziWv9JyAGXOTb_4}CF{(X>pxCkS9KUOzv6Z0s(3}irP_d0MVYj63vEt@1QVv&PTI2@
z`>;Q8Y{x#?{GQV^lVSPDysOxn!84XrLw&yGhhKSGJZ}b~BTgDQwHU{lL+!AnHYV<9
zrXe?e?Mo)dnSK42^SbNxPczN7yNieJ+89@5*D~AJ&+q<+3!r_xdx}!*FiBm*$;>Sg
zjJH`Sz83Js-@TXqhGsy;3GV#!v%BDZO9Te>2?-Mu6B`?wD1;q@*Os0l(L%1HYR}Nr
zo7CFGQnmKuspcseV7S@Y*?0B-<sr|8;JY%mZStnpo-#K1yUgF2dg6dD{Vxkh?bC8T
z0ex&&C0ChzkOD&IxfGq~XYcj(!&&_Qg)iIM_-A(^LwofTs>iXRvgewpD~dZn;%tpp
z@`NZ}iHZ2av3T=ddV8$|Cj$|J^lS<xYIQxjS+hx11jPPHH+;66mbDj(bN1<dPgL*U
z=@1jPVQTYD6lLB*BiAGM^q|Ou1s~axGyJG&2?~*_j86vQ=A5QJiZ)s2B^t&gcK3Zv
zrb!Hu$30*iJJ<b}Y6Yf__};zKN3XJ<f~`AaJ`9K9OP}awxe2r41XG4i+#`Bi-V|9i
zQjWLxclPluEG^Gk4L)c^vE9sYXG{3(n_5J;p;mZcK+&~I*=qB*6{4Hx_T-#8pKip>
zw0ljN2cOeE4E<=R>Hqxk?D|4mE+jNs97vJYlTqQE4M{qk;`xMsM7Ga<xiQGrVM=%Q
z?A$u}|DHCAWU>3W*RT5r1h`Ho0qF)+L0B|Wh41VVe*Kb*>IY*r{ykoo^$7u>Ii;n$
z8Ux5iMn()n&YwT8l&$7^xHS(P1UGjHh&n`I=Z@iU+PQ0Bun3Mt5|)*X>4*NrST2h<
zSaKe#ySx`JP`d68yq|q5D5yxvX%t$I0&4E*yT+`GqpF4PgD+;DP0P6|R=xXUU<m>C
zy0Wqrd;xU#@5^XiynNa1Xqk>}8QjU>PzMlMsa53!hz<vz;u~lYK9qYl_V&v3$_XDM
zsClzv>E#!ahSp|gwx)dqbbmo}1XQ_+MIi3wo_)t(S9fA!Vu|^rR(YWT2nj_LSKWFa
z%69kk$X>Jm{rfqHT%FOJnGy_2SxeBsfjO~m`g5rk^gd8{9~~MGU5*!We;#+c{cmeb
zxnBOWrNu>JLPE_X(OWNrB9tA$f&gw3{TAeFanIVuMq2G^7w}dp<-Q)YUFoOKj)m+G
zsh_sW?(gO3&|d$9PbnB`K;KklV$}GBB*0mBuE5|yLPCN!B?)bOKiPaj(echQP1KX+
zqQ9d=z^;0~J-h=EN6GInwGb};2N>soz`$a#d$F@yTUmhvByiJ#WO?chmef!NjQB&N
zqw2=ud7ELz%4c8s;gy8l=vBH@lfgkH=vVPp7c`luOm@e5fch40*ZGYHfF2Y|DUwcG
zb1h&*OOmf5Vq`R~aF2|Msj));{fK%Ar3ayJ20_vTSbwtBHa64Xe|Ri(u-$d9w>gq^
zjiVD3EwJ%#wXtk7DDM>)h=XCxqq(^m8aPPw@vmJwGs6#p<elm7Uocn==4w0MG{1^F
zlC0TaU9OvI2YL<+(*J$OV9x?T3p(bR-|ffi8bno&%b`^ODQ7<|SY;Oyg9Jl=?JdUh
zCH|nYo^KsU6tSNr!v!(Kc%t%>+Gta%pMTr7`gORg&L{d?bG~Y`us*lCQD9!^4G*bD
zokf;&zENiajQn*xJRrCnr-Sx&babeTRaI5f70%xB?tk`6$tzvKTU|BL=4#=O6O%+_
zfm{v-hOgx#P`{mR=KnJqrT$lKB)qkMZ*4rLv=0`<-&>xbrM>Y9x_Y9Yyq&pDXFB{d
zQ04EcHpjmm&&FVAvDEzlggjjQ77vE%7b>}0p2S4>A+w-917lMOUJx+Dp9QjWksp`c
zUoN3FSuInQC|m+0?%usSTx!{O{?fHpYiJP=5NLyD7{|Y<!{Hsa=d~V~{y1!w-Z0-z
zdEZ#=dJH}Wa1G*t7Cc_<8dFqc3ug6qIy!&z?^H*U*nNKMg?6x-F$BTIie4e-wQ2rz
z^|tnUD1-!8P@I9^n_5~@Ns(BFDz7u{^xdmhNnEz5LURV?93+c21}0t`nsokr<FQuq
zI8OnD0jdq0+=^)%mG76QWpx|BM1elr5zc%JGA5q5g`J&g_xBz!eBu59WiWeZ4ji@M
zYIi@~jTj^$B}L^<E&^p}Y2DVBqj?On9EfB9FAX4~e)03`B@GX^B+e#b)BU-*epNon
zaa*5^+l-vstTKEO$SI`7dt>8=XfVNkAz>eE%RB*jmgXau@!;6xr1nufFp}U4mt}tR
zXm}FqF<5QCo<sfX=TDiIw7tDOZyJd>{!MUYBhOI^x;(0b=A@Bi@se*mnyC^|-{|F2
zfV(wbOus=XsMCU^IX!j<TU`=_NW1lkmuD0Hi?3~`B=#naSZE}tu{YbLtIn*ftYC^b
zg*bPO_;Ej&c_DnmlK1lQ5ibncOF~!@b7pH+C_(>|`>`pa#?3WE>rKy(*H8;l1zZ&0
z*xWn>lkP`PPxumk!`?a2m^&g_HIHJrOyz!jTFg=va>JgM7<9#LZfq=}iu|LZRK2cg
zDJc#9#k&)#=>%86TQLMRa&r5ZBOPL9wWX!V=gD6^J?ly>-+>90*|rv@6rY66rYSHM
z%BW!E8|c;Rh~_MMYi4G4xLt94MBzMtUObE;nUjF&_Xtl#|ApiShugnAJbMpz`m|8g
zLN$D#(SH?&NDnqs&|M?ux<HF2V$st0cSsl&&%Z^Ziinva<G&X;?XFZ;iwqcBTD8*J
z@;HK{V;5SWAQkSfj<7G66cliN$tx<le)TGX-~1z=Vq}a^P`Yo#_u$YpPV#&AiiDy1
z1B#d`0RAG3LD6b&H6H42n%8Y$_Iyu5aJEb)USoR{g}vaP7<eem2$@vggFC^SBK=~<
zL4g2>KyUT+p=sn+w$Rh32PcQuX~e_7+Cg5JSACJlwY)Vi&Z6P)kw!E!G|7H{O@NFn
z2HI+h-}mT1uN3O#N(gkE1+(H)@Ha<uj(#EOlaA#*TgTufZ*u}+9UxbXT=EO(vj_(z
zjP9wP&F0K&61Jylp%%8b9ijAnX|mdgfgF`Q9T+p{)%jLXU=1s&qoV^{&O5t9eY#(g
z>f!S;N+*vw6)ow!!b2B-d-}L+wa`HiWR2tY;B{g%bMsv02WLw2IWQv>Lztk9&yWiO
zouTggb5A`U$by2FGq1YhDDlYlymV{TidH~u>3~H%=!Q9Qq<@ei9wGI2YARZosHk2<
z1$ufW+TkA&OF?^{d6g61$Bz{0y3Wv7ldDx_k4D{tF1DhIe7!cz!K{R@1sgpR(+SuB
zfC&MuP5L_F)?Fbt4e&k`l~Iqo9;5AhdRW16h@1i|;*YinmW<MZXY9M{*uyig_1i{q
z3oEN=Ha$7885JR*PmDPXAtWTk$e0Nogp%K${_gDDTauj&62i>QG?czBtElMu#*+w6
zqHF6+?$~q0#B^s-ZYgZ}!gO~6APJI_+Vp<|td8IL1X|Ga^HqVcC^}ZT>+k1x?Z%Bk
zsoR`Hw{JfT$;#GteIP@!u)faXA+zFkm3F+!nFU(NkXHlvE?l^vr|XSNU;XUH1lQkY
z+of;57ZQjLk$1no(zu9u_kX{p4=a!*W+%S@;en<2+s4Zq!QgSzf$rv6&+d0??D&7d
zOmo8jJuvfsO+x<<dxi5QI`6}PUaFJ_$8FNt%B7}P_4xYE`0S|z)}r;%*^~djJC&=L
zJ)ZFMpXh}E7C=TGy$BALrLuH~B1(+-Z#G+J6xX8yX|4LmsBlm!;;|_ZvVe!9p$XIx
z?1GWt5inFyS1&6q?axqbt4sXOC5If%P|WO%6Cl2`^VHeSfF;)oPzV<j`~CZG=35oP
z0(<rP^)tQ*79bcJk#96fDdQOc=^z_n`A0CRIvwws8ZNd+6#z%1ny(vdCo0;UuU7+t
z`C}?7Hdrvw-U3~MU;ifNdj$so!NTZ2d3&QLsw!Sw%7p+|UcRuiyDQ*!@(K(ty3k_e
zj`(IgUat82BL#T94*|o$>k<&cZESYF@d!cx-JU1D;Ktrw;O8ro#b{~JDJvbfn>7G0
z9$}7`!NdgSB=3lbA?PgthA@srdje7$>7ZhXS?pO0O|X#rKZpdmb7wt{+1aM>!H{cQ
z!29y9DNr$oyaW#_1v@AwpsTP|BR>r`Cy2aK!VF8p1qKOwd&~dUptPAcjbM{6Oiw?+
zOJB}bEl?73iDJ`3Mu1>EbOZ)`HoaB_`Xj{j8mj0IFyP>aP=pWFlk+8L0Bw>QMtuSL
zj@>q<5~ilU|MtWYj|@$h>pp8Tp%GYUi|G29^TG?G9mevsGej(`@;VXIeU{kR*!9U8
zy1YJ6_Kdu@<UXePWs;X`f#%xYe%3c|?n7YI)0?FHu1BxpZbwXk+SpnEZ58~Jm5%ap
zMFr0|<px8_XTZY~8(T10ZY%yG5xlgY%As!ni+z0<%WErUyx0+=EEag<#*H%T3J|i;
zz+;1U946HgkNN<OvL@r@rxDr<PEO&-_iEtZ{k!Up^k<%xf@U>59EpRkHy-i+KU@F>
z1;2w#s|`VKA*L_2t38tStdx@DX%DWW(XOuSg%I}=CeLOWBVf=4<xaz?%|^n-7g5oy
z?;5EGZI`;=LhS+o1aT4q?GxiLmteTSfSWGlf#*w@wnC$`M2SY<D+YhyO1~j!NxZg3
z#|H<0_hL8eZJb&#QWTqG*+H=(WN_eo-~G!0c~J=A$skxTGCVB$(Ah3EEiDZ?IE{zm
zZb6p%YCuOvhdzXC*(m-wFi>eT`2||<^vD(lv8cHC*@Ih!mb1dUe}<s_at2BVa6Exs
z>=C^}t40_@%Z8tv!x(f5MRWeq(9|3sAOD-+mco3^`FfHNv(WH-gM<zE)dlabwBX+B
zO_y(~c6H7?XpI|OUWt~E0|DVj)t7((@J&X>#+t%{oJ}pieDR_Nw3f$^l9KK<5Z3`D
z9RDftU*%5|`ZI2vkh_PH1CvInOc(>@Cm$c2ix<7Uy~S!2=sVimtrprx(qv!mcC}=l
zMW^rT>APgL#Ncd{{{8V1fHnGtat=UAtziWU=|}*DP+_G*-v%^{Ksnr>BFTuhVv&0n
znsxAR*<@#9bMhxwKu#)@1W!EVXxjHSU170qGgQ>N?U9>cbAV<vP9ue&FJH#M=w2_L
z{!&b1XL~!O^wFWrwJ_(s6Pkj#PISuIr95kra2dS{?qxttS834`r^?Wa1gMDynDKlt
zq9{{odz?R<S7q=)UIwGR>&}ua{U1o0ncx&bX$%eyLLs=fT`~KI(W~yZ++~xYob0`q
z&rLP$*A8NzTFN;$S9)D@97dtUn)%&MK4rZ?CS(<YGZD2;Ai&QL4H<<XUx2egl*t5D
zn8&2?e6kdM#`D;8o@IDwo=+l)*D+$Er4?><Wr;a@@%HUoIl@rUsPEcFU-E0@zA1c=
z`yb_3CUz&ZhnhNgpBk0?2rq+peC@?M66v%3cuvAi78D>rx)mS)-<@62Dp!>Q7V}G$
zm)hIg&mz!=P;txqUwnP9UiAg9u%Dk_utM4gEGxUXxV5oy8;4<5M@PEDS%FUf_2aWg
zG{3vMKc`C9-Ps`W4e;{|7ZDY8D7PuLvm3mF3m5u9SIq2wD96F7YALxj<CH0ld-i8v
zUoc*H|K-J~Me?Qc`iwl2o>!jEsWVI}x=oz{W_bDhTL}qV1HT!~TiSGAWZ|`QTJr-Q
zGK}~PQ{&Hr&ra<S4b;6<3kKRtm3(t#;`h%+S!;QKI4t<WpQZOwzv?PpRp<T9!Bb&c
zvJd9cNY@`%SHYW}^&%A?DEzAMUT21%HpJ*lSzWgdk0@M6sHMAl|Kjxxq9>O3PnJ_D
z=Y#9dUHw#GfX#xpo;!y%hB8u)Y;|P&p<|`ViVvloGQA~4inKIQ`~4H|IN0)VE(I_m
z4G?sy^1y-vy{WA7DeWr(mo8uCce(pj$ldMVeELy$JW}wGdMj!#sk_=$$h0qI9(;Fr
z0{{Gj4{q!-v+?L81K9K1;mk4pnT5tfN6<Y*FRudjJd?X6uW-(;JO?gPf(DGRS8;JA
zdYBlMm?C`sCd0~lzMEH!`_rPJP|B@|17rqe3^|+bn*dTpK06b@gSl!3Lpk@7l^j<i
z&B6H!364qtJpLp?ZYG|WZIcXILlF-iJn*J@B_bjn%~7pZgwJbdVyxlkGL7WiUO0t5
z{FrD?*XjeEW{6n?=4YK?a72QD@gT0DkC#_V#(Z*67tV#tE_+kIFZ{h<a}WFbH-&|T
z_f`h%{|t7xpBC}`rgq03yB@hXL7y9ifFP4X+D6Hw)bZ}nVee$ME1l_w_DIHvm{--1
z!N~bbYhL<vf-4QWt<R3|z`YKqSPTG85W*bv0m%fgVFtbm!KB(ACm@d0@+F{w^9|gV
zdoPg?-M#y!@~mm@&rq&3=HyW5WaFLV;kbR@AP`1yl!V6x9Brt|4>l71E!EDaTa8}r
zLq1a}+rrV(BBYffkDtQvgX1Kw+_<6j^Ns9a)<|J6ROx1u)rmpUoFpV<Wa>3;7nX%w
z4!-ico$i*r@VeF_uC87ICsOR7j~(GKiMiy&ca7=tHAO#vLdUf1_JX7v*46NEON&L_
zN<kqs6bEQDo;SblFXt+xTNUUB3}vg2rpptXhMb(9I`3nKJD7()T@C5znB6M=^a~nK
zp@yz)Z_m<gkyBDy|K)rG7Q-|AiGazQe$PF<1>H^#d?>5g*WknvjcS)QHT~O!j7~n@
z-dYuQoWCm<yRgh%aBPGPbUANzKjwOOR|)PO;o1AMxR_qGcN@BG5KM=?$^OWzXSvCZ
zID*{FtPG%!vC2>r<$kICdR)?Tb#?XZRI~A;{6bisQ226#2bZmdQ1UD?O?6bUdvp&B
z6oDklsQkFbYThq_or9ykv9WQZcW{ulnw{f!C5q)TWY<CwXm3v%jCfGDU7@6+rbZ$R
zQX^F4G<mwFvRqun-Uv33X8PZU%%Fr$IYzr-rVASUBU;5EVWVIP!U!|KH=c92p47VR
z59O?Uf4l_n8&DA?PM5gU)+Kfy?f#+m1U5IlRJ`mPQZ0U3>I1Y~c)#5m%To0RmLy~G
z@Clb>bRnuA?230A#i23uJc5abimJE0eYHP51l5uWSt2a|Z44J0H>S{P9tHUUNV^KK
z>TwzmDp~H+;f7{R!8sER_4N{wPn6iubn!cI?oI63PW*tS@58ALop2I7%*xKj!N>ei
z&JDtY6FK@d^Jao%6NPP7hnFGUBkNZNvkgq|DR%%ob8QQk1mIw8-=&=qY7j`CqwRM1
z8e0C)Xmrh?e#XU`B4h3pM2K)hybQ1F(Y|8lk;z!;G|bpp+R<s*N>j={s&uT;?OI!f
zvl{S7Gz#>Y>uBLPi@l}IX=tEm3Luj&wYX(q5V1DSC!Tuog|)Rcy}6jLoI1<dV4j#q
zVM2T21cZ2<cIvNFp2fZii88Bs<NgC~SHwN@+D|QT2FhB0`e`UVbkpVXm<(Srh2~{u
zO%1D^rJmg`p^{|jc(<dSC?zE&IMD)_$rf<R0}-Ypss}q*$a<lW=`FO*0vBcs9S6PQ
zpsi+=*v|vo0}lO7fJks4KpS++Yzm8Q0CxE3<u%`(;0aVV*wE>08}`tng{Gqnj~*@k
z$*t*m%=MQm#;WVzx^)X75f~5<CVKnsfdowu5Ok^=+q(h`7pO@X<eg6r@<K5LIN3l^
zpBeuE*E*Acf<j8Vvb1ziOCxI5pYu568%^6N)pdId3z?ROvNBvRiIO+sf#%J2iS`b{
zc>PbM2oizXoVd=1RD)&i+}r1KU;UeaTIxMyLh2jd5sZo66s7sE^dmRVkeCDq<G@Ni
zwzR!{_T;~hkm}F8kN_TNuS;dO)(H+9X;1$=Kl}Ykn1>8sMsYsX%^A%fuJ2kt!E1jL
z7o6Oo^sC}!bzaih`=-K>&aG*&v0>*YE)^FmePjFY?CBER-HJlJ_{W_4FuawLrI022
zY(aia(mj3pq+0ZSFjsa!wrR##$;~HM58YZzcEa`(&yvb_gwn6R|BJo%jH)tSw?wTn
zYbho~K>?K@Ne~c_C<Y`6k_7}*l4L>2VVM;HQ8JR0AQ>cQPzjPG=bVw8bGmb3?LNEv
zp1!wxjC1<*8ROKCUA3!J*80BpeZrjcna}?CexBBfik6lZc7A?#c6K^CI>kRs{&@J1
zgNf-Og<m?ywG>X#&F|}WCWBPy3LPi6x2Ew-I?plbKQ`o4RykaC=ShfRpZd7$gFO)z
z5iF-}@~wMO{&{MBFnRI%k<C<n<qhHReV$ReeLXC~`#1kh<%kB&%a8~7eX#7H9bpV1
z{?p?HlK)MQu6P2~cbcnLug0iljTgTU`S$JGMYD8NqoFrXZGNaNR(?LYm(y+LK3snB
z#%{Knp6r}I$?o0FP?~uwy}-fGHXli~Q3GIzN!6v5iJ6k)qrfVjDd<nn%pg8|-%DRu
zRHUA3XN{x+$y#)sB}?GuZTH|XMXl2mDL06)qn2T2IybDa_h@-*iop+P5Q&v9g3QN{
z)N?ApDb-*LFx{WycGv-`Dr(~KR*3RNh1pwl<In;M(@aeD1qNz^L~=tVj@h%E`E&Gg
zL4s>&Y-5Q}hPq$!_%1YjJN`P>6ecl<A;%(o*D4K6qg*ghL~h*3n#fg(?_cQLh`9N!
ztfWM*IkB_8m64G#O3YmcH=5UOu?n*_Ud&5IFerl5bkkyNQjuMo8l6FV?+;-O`wNUy
zG$pSfyKAnCtc8tMj4W&-B)y>BS<5sZf&2(*c6usud~{Uhvt-8hy$(0{CjhSQC1qr{
z7){?soOCs={cMEK^l;$ONOg!V<PZ%LK%zUcm(E;w=<k+kDvSP(xxT-W$^+Nr05;F`
zmkHU-HsP;=kxcY7n1&(ejL`UaX&qq~nNfFPJV2JL{<C=G7ff<F9br)X`1l9#HgxZw
z=gOjJIZKEA{cjI9nm|5wG2aXIR}!oppq$LJ=NmU{#Vm+ew~U1%mnMq-qG+$QYrNWC
zm|)sWB%+jZJHA61WMiwu7PpVw09GUXR2T;jtAZC)prE}<wBk=Rf^fQ0Xb7H@C`r((
z9YAaTfkSs5GrHro;lzP8XWi@v-S?suV}b3nKl*i`cfG2rO6R8vlCd^?jzX>zQmki=
zirwE}o*Bo8js4`;yz8#xsJ>80`o&x;^ggTY?C00|?$k4|lIf<sp9@-j>7@hFBTIeY
zw1y{z%6AW~Tbaq>Z&)cUepL-s3T=$Grd5J9SZy_tSe{>#^plY7fpeS9-0~wBMLc=(
z2h1_p4NG93@chM#(xTSZ)`_NsE8joG#{TRpISkdi<xq_gTF#bY#B(uf^gIDhPBXCW
zXoyqW?C+?LOImx%hzalCe_WkQVecD!SSW<<mbbSHfb_#KKcETkMfuN?dZgY96_DAW
z#!G>}6wDXKni8J9`jOYj4sZY`;ipy+T!EBt-8#lvRZ(F)R70C6P*Ks`-;XlP**)~g
zf=-41seQg__AC2A*(FXYCpj>yXD<d{+Y4wGg|S?e{1BOOl!e5L@BhF8uGYdT2J=;x
zc@9Ae5jVSgU4`6uKg~|GrkOx<iu3ud;4CYqe>v`a{R&Gl-O6!J^uZVlX9ajPE75#&
zz*AfkY+%1O@P2K+6k2KD>6FoSlROqLd%ecEF>rs{5_Li*S+f#~Kq)-4Y@a|E%xTzk
zlUVM2jrL(b08Lq<QR}?-jT}@v{Cs?T(H>T)uRMBrAKi~vORlZ0eTd5QF#X%K#6-6O
z+HaAXKcr9uM5?5S<D7)nvS~is;evuP$9zP`k>E(?#}PgPa7PLt8%RFDQpYMIw7FzH
zOCGldP?1|u0Zhbxw)&OI4hcAd(a2u;RO6#nT<Am=AYhA!e8Ww%HCc~Ozpl7aaKv(T
zQH+#~jKIagA!kY-Q<OtWWC<?$u&6eG%V37dLq`zi<)atfB~row<%=5>6cqULm`342
zsU&*7aHiUr5c`6Q>Bf0>AA{FGMSv=k9x>c~W%8Z&sAg1%IstFCs!#c>{+R$T&}Hj0
zFfG9q=&;a4Fkt;+O@v7q85xyPk0X|-vg32fNe>*L-kt^{FN)4Rr)g-e7HaJ0oMH#j
za|@)!k>=1;#SF7B46;y2r+l$m54_)fqcCWa0Tt9f&6rrDx-zj0ldq50ckUm>!)r<F
zbReUkfI3xf$a3{nUkPTm#T?u#8e(x;TE{WF!mb3w-USJ2-EQmY-mB={b03($+{e{{
z`3__nT2P#z)v5qnp1SffMm?wH+qVv@nqSqLxuAR?zPIzN?j*Qoy(!0#Npi$tO3G?@
zdSNmKwEgwVE$DyHgPgI3c|d+`QaPe97v}t0obfZ)U<iY8SmyI7%1NJ#%GxmK49IW)
zi6)JRn{5oAF(D#pLjj02bQaI$;8@s^zi1ceC{ynhitqL<^WIPg&ra%H%WT$HYzltz
zxJK~R-9xArB|!HotVVuvJ5-CXKWK@&7K@4rMi;MUS#N#m(x&L@?!Mc!WojgTFMyB8
z*iEKW-PLj8%3{B_hWM#yanC5CNtTp-w%t-Gh>#lryf<0^?#d=7FE&|BCRGYXGr!2T
zg5`@rXKp(}pLX}5uch7#9|Y}-P|DHviXFVMG87=fr8(IptghY<x`{rc+A5(%dgsDK
z=SJ7JXF}_@avj!|m5d#)iZe)Ibg`qcF%87HgM)+P4=Y<+MED4U#&P2N%d+fToH|VN
z5wWJVrlzJf>mK}?Y-bm5mWJb?4!30(B;2E=If_PFCRNUhLDdYnre1BXee;e-!*!;3
z%(9d4;hX6sY+QkL-`kUXam3f!wa<s=0Px>iFw#SRDYTYsS>bOC%gVsOFfx|q8~V>=
zvnbBr(|Tik?X2DnMm-mbjXa4^PDm;F`R(S0FC3}~<vOdEbicai$}0zuuM4n;p>Xve
zZ)eS0Wwwry@HRd~wr@>cT^-ma(Vr;SZi%pX*9LgDdIs&*9kUaNzs|>#?Che1thzc;
za299+)6LW_qcboVF>bf1i&i2u#8Bay3TPHRA|(h1fc*o2E=E8;fy_7i&bMszwfai?
z)RJ^!4aH!|1rBX4ao?|woK_Gxcqy#MZv_v06yC~bG5YcEuMA#4LVj{_suzH>fc10%
z8lTB5VX<d!yJ?T3Y`*R*DlcD$%O2qGf9SUOtmkEzs6Ks~q-!a@&OEJNavM~xsLd@H
za@@J|7;v2v-3#%%Z0L210uqTH44&MK7qh4f#eCZrce+>^t*=j?59``X{Mp&MFdoe<
zN2x(w2}o4&>jwF6N@hW0=jE<3VPdiPxWadln^?!fAaeWvW=;3M$ff)ns}Y#pIf^@l
zF8wj#0V(n(^(`i@NZr>&PW%!bLcgo+e|OVZP{)u0-P6?EM18whbRs47k*skdz?lbz
zg@uKO>*9!G;3jk<t<y_1kF)&ePk(=Zcr5ky$|<PBTSN=4q|V+|NxBPY?+wOKP5ebA
zc$qxMmhb_VV|wTxP0PHDb}P03O=eUOWQ+NJ2jUSfF0M^TWb*Xqzn%jXN8EApR?0x#
zw{6?DQYVb-OAD=C_0u;ps!uWS2KJS=A&9A-7Ibl7I28TheOQZ{O>Yc+Hu+Jjo&qsn
zCLE63+#ku8a4(N@b93tv^UrtnXFKM?Sa#Qbd2>#UmqG_ga<dYB><tZ^^V_!_0JDc`
z0uehKY%t{*Hi-KOg$!dH*ZppgBrZhL$*)A;!czxeI>`q@*3sL#r@#^1jSd`NA+JHu
zO8W8zOtBNcmYd7Zm$+F+h%Oe{F{gz|h%d8C8>V?{tE<7m!L*~tZ6L}jJ2NH9Kp}GV
zIjSWJ8vwgB0V-Lbi&f5`@x(A35T{3GrMU=V7?{dtA1y4n8bqWy!f*JUGwI;}{ooG$
zL-Q1SY>^1{Ch4qMZRF<F{Z$*9z=ZkMyEVi01}QIneV6B3O_JvUduwWX9wFt>E;ZED
zv>$DnQrhwT_3L5{2jB1%lxcIrbCJZ%yCwU1$)9&q4NZmmh;9vjs^?<q@v?Y%Tc8w{
zG*iz;w<Ag}Z|eO-uV>W1oy{ajFvmY2;4m}XnAE1TVLWENpTw2NtnWSoa7>I_%N<o!
zKcEr%Mh_p3M-Z!;En?@D_07ymb&QPqM@9_Ny9>atEH6+kA}x-Ef!hj~I*HUq-Tw{M
z^07(-O-;=OlGs7C@K2tYR!>Rs$Ii56B*nMv;m9{j&)sBAXntyuUXCn=!@+~4Y0|t^
z_B5-hd+X~Yke$8aWY<|G(7zXFo}G%!bXY3_a0<fNAOJH2brn3M7@n|r@PNl*H9Z-g
zE%6pNswXEW@8-XRB!Wpj+v-s3fy0OGdkS{vmq8*RZZEs}4b%%f(gGsnOZa$smywa2
zj;_(we@8h02OGAjFL;9!Eh)CJEDo}7kRDOavIw}VpJuEEe*_B{eAuqcW|#>Gt;m<!
z!$uBBnm<iGjX2@p!S?_<*s}fE?%w{usrOs9bB(Ak_lShx92m<n2i{%T0sjmXe2zIl
z4%&aSzxdkfB4N7OD*gvMOaITfY6;H|sG8_1@sNmGX!uP_>Tm!4@#9D2RXi_=7P#9k
z0igwr_xpr5h{no^c(bTlpwtGyT6%>XEv{mG|MwS8x;>~yxi~rH!~BDSI^oXp`*CeZ
z#O~>aC<uCm2ag_kq;f*D^hsR;&(*jiJ2HiZg+&4#=}e_iMn(oLVK+1dEug;8G<Xcz
zEwnGdJ&<TfvH1`!8~7f`_=3AZYc^frsEO>0_@WoUJBMz%exnXvZ<eD?pNL<iOKpDt
zw(p#JqhPLlA?iZEV86bk3wKM1CSz}W;2QHQ^^EQ-^UlMKM%}?)&Tcy|4I!k*dUePT
zV3*{qH~b2ln^T0Ji9qa8!~5*nvz_}-^r3$(DG75}d#PI~$Vv}_46b6<pDtf(YnujW
zzdqh>JAL-%*DG)U;#4L_v~v8hc^Rz8d;||PL^o19ib4CMU_#Bwc{R|;(6HYchflM}
zd2X6f=+31L6zCWi-PB7FHr8B)pY6!X$k=zBeGzyVkTLdhV;^k<YM`%Pl8fLxhrF+*
z!6;fiM=;>xLz_EyE|q!3CQktuyp^aWhM|4*Z9^c`QF#`>`*ydl_#k^peZ2x?Twee3
zxsao6duh)rM1Es@frE|I1Fa!`;|1&K#^xkl)|=FM9s{8bjj%=%bEhly0etCsPHi5U
zXLh8~5;YA*qjK+8167>CQSx9^P*Ih7s%&RxhjN-Cav%CTYbbc!et{aNSp%*N-e3Xo
zIgHtQe)KpDQg9r6e0>!ny0o>mjdXSC%T{5n)~8I#E;x1UZ|bCuR~waDGDtxcRq|=@
zSAZ2kn8TVD785xTUy?F;Nz}NzeN4uDUZl%=n>+AQM%oDu38@U=Q%cb%Js#2{#SM4l
z@|jCMcaG`~j-r6BaHn@oPSP&3L2^ZtQj2mOe~UFr;!gwAjiRc*)Y|3Pd3I{*OD}0V
zviqEgVdin#JLpr=($e0<Z{yOhy94nSUbW{d&c1&1&wp)|E$HZQfTIRrAU><fuP^oz
zD2A=34Rv)5j_DW}kR3X7h_te0xsyF0CB>ydl;25sqyb;X$Z}~~TiFW5?Y=eO*)2)B
zX;*RXl@#J`Yj=GWb{xD>0a-i|`1Z}c%mXiO02sKLdTYyo76#mjKOM3`Z8z}@5d6s8
zHPD!W64lYsQPBl85^7KEH?%Pajaw=1#e7#&vv+*l_?P$7PaYHMJWioMU{aWAyAT-E
z*^aFHmP*LD`}=kPF{Pem^<Rb|M}{!XsK|K;H{lm>AtYMuYb`XG7;!tciN>06)ONml
zfHMZa6!QlUJQf$`8r>D_zI{>8*&$2eAy#@d)UYW+CIsZv!0_<!zyKFqn1{faM)JcI
z4xl(FZ5J4#HXw{3E3<1A-{F^l$`<4{ulaB?p2YH^Jak+j=0`@>seeuX0}B{g=@RY*
zS0m*&ADg<z(GK2h2}wzQ7awM3WGo?uU{nW96TN%ryL1r#o0>|A9K%g5Yj(eEKlgJA
zt{A8I!%`l%&XR~dlkInx(v}4Re)fGlECOK(PyAePwPcY$JO1*(zgFgNOPWOh0JVc}
z?khxy^EeE*6&Q=Bqb>q-WBIEp!F*)U`<SO$4?Gm#zJ48XJL3(&ZxmB#-}QuUcwFwm
zBZn<J+NU{hm)~d1-}m`(Pkoi-*L#&f-AIOgK(W=;)dleh-7oL8J-c^T>pyeUomyD1
zG&5tDGOn>+7+2HP)rIJNTQBWENpXSGo;`ca9y}1W`Kv?cpZH~_+8}m)W)%30p2{jJ
zbZ}xDS7C1`^7ayAbJ~_y5CCL{^~A>a{=HYoCGY)yN-1#efJ*&`to7zB!s9gQ;T_*m
zfo+Dhud0q^LBxakAH6x@f0p0=R)TqGo9$Ry*?G1r0FD)#qbt;6C3~KqP$iz;uPd+Q
zM2OG*-+S%D@Y-%HLpYDDu$fEW@q3kC{qy(yfL`+b>hjiB)e-2I*5(?o)xhu+9hp<Z
z62uVQ`PW55EGMLal<M+lJ$tqWJIoZAE(GE{6Dy{8jUdP*=+B4j+O_LeivAq13Pf>#
z|3uVYA0KpoZwW<8LkUkVf(H2*+sC}kn$m~ufIiqZ+%o-L&kqg9#4w*Z6XN^>NKj2n
z3*+y)-T7g_u04A?zTDNs{sE2jNwNwQgdtQ8KG3Kt<~az!wH&g{wbdC`q9<%tRu<RS
zpDb_yxsZ|yh0*4ZDd3o52-&`;4*+rzB1-5Q{6bMdi%LH|4{M}iFrh%<kZz8jJZZ!q
zDf<30@*`j|$Sv2u9|s@`%h%cNS5%5oeQGhcKvUTsVeC8AddElNPpwacV{b6<hrbT*
zyv)!h_WtIcXElQG3IoOhBD82LdR+j~rx_CNe0y3M_(Jp^XW;O7U}t^3IgoMfqHPim
z&CVEFC<oM<YN(vzoj4C_3Ko&=_lvsZHqv2pK|B^)dVCi>WGE;`R+rjAoU4RO8EI%}
zU_JzW4><{sX-}w@0P>imFMHXY-7d1}9FiDX&~Hnxw(MM^Hb)IoL!(;+3vD8zK>;~e
z3$&RM`PJ14294)b!fA>&t9@WPYH&Q=On7Y8)JFhYzzSy!qbY6$AGnM@e5^~uFSqW<
zvJB#X_3Ap5GRXiC6csDEuk3(3SGeTyO8A9cxPMdVA_uVv0;|^I17|&E78a<1?(u7W
zx=cxQ2yOB5QrtX!2Pz?$KC2kxlaf+DKSucA>+8v^{N1Vs#*vt55$pZCq~GmT_2q7e
zk5AK;SNrL8i=btNWHbJDMsQDJgf8a5LxO|b+suv+fa?CT^6HfJ<~x_9dWTm))WV^<
zK_0?DIY;25)kRb5_0gnU2z40as>lS<7-)2AA_{U->X-!ON(Ho_JCUkzhD*MOes^2O
z43pA4+JJY*AWT<@l4r=zMgf2`Q`M51YJn>Kcfne>>v`}aJ?Y)giy|e@1RR<->$g$Q
zb^mqi%bjlkO=)vK*`b2OaK9Cfl~RQd3Nu&1<p&TXq9}CpuBfPh`5t%fhhJDGftKfE
z3IuIr%sir-FW!UQ>GkWI6E84C6cKS22Cds^T#3G;PVU67IXk?zbR!@m<Dwo>owCKP
za+b_<^S5Om{*PH7^ZyeB|Hs`oo+?kOzI~IimGtKk%Xxx32@l+X?)+D~mthIUu!cDz
zMTTzRjq9r~LVx%JlwP+d{4U6{u+;^L)BROi+5&E5J;i;j%_w~1X|ph{*@la(79zqj
zM0IhR$@7q#6zW#D*<&UXrARxQx}M40B>B(t@UZ@K>(-Q1#b(tU8<+W-4#6B(S6A^*
z$Z;?~gQjyuN~$?I5XDiM8;4f$N8%&i5?@w8`W@zM)gOiPA@eqHotgTJ6{cr&TjlpC
z#H!S{v_OkP`!W!Y(h7(cM0)Hnd~2F@*PKY1WD-L$+x`p~*kA5CmFtmU10kcN60pHp
zjrpX}g1r<9!%t8;q+l{0gr1{P4z3(k&~QaXoOY>)>X$C1-(UYA<bd!Jyo)jqLnP{p
z@5I<Ig}w9i)CT==^xW;x9J|S`Z#Yb#v8aw851YFxA_83@Q8$Dec)vcXAHTU8N|ax}
z?)%b={lAKQW(%xtfwC@ABd^2fyass16p%u&=`R}b{GbI&1#khUZpA2xU_@KEbSHS0
z-%}bIKI<MbsKOh4Jf7pkViZ8M!<~O%OwAP0E-YLo<Rzp-wL4DmJh+4A4euM;luy~^
zs5hZl2i1pbRQWITi*`L8J%d72GMAH<kgq*@2c!fqZ|LipG&&%vHD^)b<c<NpG~>pY
zWj=!SBC#MU#am`4CpRzVWG<WX3%1jzWmjVF$jjgEHZJ!`kd>{aJKoYlbNsXCgj+mb
zAn?aq*;Wb3gq1OFDykq@Ig@{;<g*}(T|`{STZp@e3M?tzQ~dcX<6wuNa^QwL-3?#%
z%B|h#Otdt;(1#3#=k%S&$_7&JEgPNNMVaIy-l2;^`wG5Adwq2~>{$VMY__7=tN?w|
z44a{s)YXG#SGKUdt2?gSL+Z*(fn&OuTRfLhON=Zg+de~V#NLRi6Kdwh&o>NuBhj}I
zBV4kb`WOg#&%t-^-bGkJJoxf`Lj%`F`Ltx<NtfC2_GmyHMNXcJ|H6B)frJ9_kvHwN
ziRMl2KM$t>OtzEkvFYpT`ZYAfz$(DMha8V3Oyb84RBiGMjj2X{kbw02ndII8FN{a+
zLXX%i`?M2Xbg3818CFE}L!HW(?}cV%t)MtazAMWHabkMIIrZ%HBc$*fIM*)}JGgGY
zf!RKCRz)vsl$H?oi&Da9V{(@HOkqiNh@3^pCX#Dq5Y}M73v+m}Yy7OjD=A_=<=BUU
zIvjWhv2Ecm0YVR63Ks$yC=RB>tE)4AP*PIjBzTHpUd6KlMe@q>^8AEQ6+C(U3cr2(
zgfk68TX+|_hvuU80O8&BOGcx&5c3y_cGmIm<$`PZL-bCVen-%eY)B;r)UR1z3&=bZ
zQd5z`o60_y()1qYk&A*F9GH_nSgxlIwzexEunFMsv5nwerUsV#5SI0bwT2`)+sBOn
zJ_l@JsX2F+aRwGwtCvII={bu7Vl%&rWd-z!&+$Kc+a<T|c9)eoabY+bkWyI<)<1N7
zx?=nLYVS>Y{d$)+FLc`t@twM?s-Hu@f#DG`3lKjES<nS;ZfP9Arw+}5H~?fF#e%?^
z@R;EpLL-*@z!$6+_z=|OiI{7$%3EC7nV!x=yquTfB~R>nV!7+@u?3a9Q$zv8mhArj
z6p3Q4bNhEdl^1z<K(7*4jsOh*lPJF#&XbK--@2Qa3ufl$r79L7*l9;4YD$0z4xM$B
z>~$-vMcnGjpp7g%Y?O5}8yRSQf*d}eE%UBxy?+0np);@2M>G=(QAfOIF<)ZX#(L_(
z_vd0o`EI_uv1@4&FY?d=o-d)`bvL8A-MaM#mUnG*JtIN<t|Mq8|3K*lWWjyDIwbcn
zog{opE}?zfymz7GVEs@#z&2KWEcE7;zS^j#FBija?Av4G;lEuF%^MP54bQ^?LzrC`
zxl$>ixV0YY>LM<^^5o^`e<L4rt9vkrAiHtO+8fY3mKA)=@u-Oa?sS<k<T8<Q3*hKC
z*%iii_TtU&9hi{8JYsmynP7{z5%X0qkCVrHAh_I~@()OghMXqpJ}d1$i{ZL3^xO!_
zWdVFd{zz*WVGHP1cVFLWN2!Kr7U3u(;(mvsN8@evKUt*Ve2YzDF*h<H9mfK%(4?E6
zPHWhmX9k0X+`^7^SryO(oN~crU&$B1a;2Hm1LpBqibWzM$!+Ktqm606#3sZ9$SrLL
z%9Uv)Y(Tvc7os6wYM^z7)($-{gB*%cOTgA#-Z42h{9we^U*TIDi^Utrr!~sR?bhBP
zmspwFlXP9N)&S@(?*7N0iOAa`E+2}SF{ja)s6E28z{JU!49$jicxWDMML;NRwvdyj
zBh6%vi@ltFEhP6S`1zGs{`<RLm8|}8w+00P?H}-JAE=cUVo*sg&Ui>bxaI{`gKvX3
zlM-VI0U^8Oa1avM%5Ze`QupGz@ISDCnJknn(5Z1C%QkpX_hN{O*Qliq;21U*X#kCC
zMIeT4$7MRuWMXGv$qaT9aU>meJOE?hA{Xrzy*nLNa=2D<Y%RlYtk5wt%Ue`+bgUC6
zG0<gQFu*7-VPN<Jc+gK&_OqtgaiQG}c!ZpHb}uPay_O#2FTR|5J-@0oz@BJVeN2C7
zurh1ypb`_qsUf)V`n72DKyh(;Y3yjoRY5*JRik{~N53Mr7t+id0HFa6I@Gx_gCHfQ
z4c9Bm%{m>hcHSw;JGcmky#C6guagaC4*(j#qRNH&V38ICP`s_VS!Qh`qjn%H7^)kG
zRll1XS0eNnhu$UM1)Oo@$Pq0~O<NSgsC~a+M7u@<JsKI=Aig<JSAblJh}g*Y@7EE_
z!R`Zz8bfJ3m2_PatLV^rvM@9Eg?ao5S@FH5Kol4FW$9U2&;`ccN;s6*2iXDr8dxS?
zv%c4FDt(EDCc;cslspeEMTe9Q)6f7=z0c%%NAK2v2ZM&Kl@%l&q76--uB>2~I_#{<
zr|(p(t*pw6#H8-^&v@Xb?y2jV>`3Zi6@jYOtYGmADE#YcJ`y+bU=s?O1gQO$0Oq5b
z7v*Jlh8p2{!&w{{L&MRvmG#tAE_6k3DjfpF`|dUEMe&+DJqpk-1mFC0S%v%v6rH<v
zTU$V5Gp3Dk-b2oS3)A>9)!9DD+}36$wszBCuzU!}*f^vDm_^jbaVetk^`R*TOpURd
zkbddrAGopj6Zsw2+$``aw4t3;cQeGOdAd9?^gs3%i@kK;E-|90Z{ZXtH#bKzY@u!j
zUyX#u3bHblLo%R}ov-UZ5f`m4ueyl34wq4<xNEZAvJ<#;4=7gA>^JyGEzQm3>X7J_
zJQNib?b#=qy;=aK@9aekH+SP=qFRZP3CR?f)$-q^+DhQQr0;y{)Tcv7+?(Rj3t|gN
zmZWbDkg}-T8KtO#e-}ieQQIz$eK^-rxoh94o9g0%b?11aB#qFnfo_A`!jD}$ktP^F
zJIBlmV86ta5r!%UD}x}`oWKMu9i<#bLUA>ZAL>H*1d<PRR<L>*q8R+?QlJ>aqD53i
zWkp2|R#6^{hn&+A5-=~zW4HMF({-+oR~_#S42aq5|7$~?2HtVRMDuu?q#f1e*iUNw
zBIIsc!lcfw6@`88>wLwwl&D)tdE^MZSDB&OlcfjAMe5xEVDfXgt}n>)eU$vaq_QDa
zp`mO@)OG@+1pN#>zzU4y_aGjc)JKKIju~_W-CP;!T3=g%n_o7V0H`}uiEgUsU6bvW
z_C!8B${^chMI0$bh`aQs1&T3PM4Z`*;@Y=>kw&2*O5yq*M-E*n?=~xpc$So~@>9U(
z9OD|wr|QPVg)j=<n@#^hxa4^Y&DPq_!qq_05rrT{YlT=Dhpi0jmS(L=T%b~4BQBrw
zWNgQL`5{_ybY-We*oK0*P2vg|(S%@mjPWL>U>~jSjlVob;ezhLs^L)L<;JxShNvS0
z0|ScKYzM#Dh>biAjI6mcYJ`bXF{@=7mitt<ywFuIg2p*KNay<1tMYNT3tO|yus+M<
zl6%})V)a$UBG=)w?wLGu?S?ufrxlbtVPV?S6UwY}$ruFJ#$1l)wY<lVw<yPSbK9Cg
z#zS-VERXFxSsRG}4-b~6&9bhZ3eL-e%7G!B-}$O=$&(TS)2t&!EikrAgX>wBh)4-=
z>(A=s+hl+5UkzB1W_tcr^~L5uOF(a<Hu1^*pI*B9zt}aG%7%SLt5uo=?0*yF$kvuk
zxJ>*`*iBV@Wpn54mPs$M!b?1NzZXCfY1s5did-dfG6l*^0w@N!hQrSS)DIim&6*(u
zr_J#GsPgwD@TX(xaI^<{kEJ@yMp*mCC#=gZ_8h9PtWe=GZBX$D24J7q9F?)(%dYF|
zH{iwhS+V1T;d~-^@0yNGb8Piw!LWBD!2j*-Gym-Dl6d*7-pw~p+?M-3^*Hd}k{O}m
zee~rMM_B#$f5oF9g(edbo<`^WEEr?aD=em%;s%sb--2lQuK(Q*;=R1&yXqlhVln}5
zJv|afEo?G%d&T)z0Q((Ca!NG1P=Eyn1_H<d<Hs!bc{WOcNw;$SJi0-;l6!gUHc>#p
z{V%q+B<q2ZH6J>`WtgrdrPo)f0pn;raFK4S877_Ue{Sc;L~-xPh-$9g3rO&aA4>&f
z+O1B}mwBzJgL5NsJzXU92<lx$bQ0}t({Pi0IN5c|*Ag3*YN-C3o56cAR7ZKJw1}_m
zv85No)=wVW7K-FdbzhC6$L>Z)(SK^6b!3mkYxeq^7bV{!d|=y?X<Paf3JNdp<|IBb
z9&~*&Q-wu9+5oqjl>5ZT-F}~`QHymY*w-^q>M8O0EtVj``wbVN#)|`a&~B-XRt$I@
zD?9r*b2ExwbTQ(8Yb}$QjoLHk7zO80bm?rYui;?1y$OCU;!6v49NoVE50?XQ-0y}v
zQD4$Y`Xt|dwtx{qXpY2%rI!JNFtRc!M1`v9&|S0q1e}*3DOqmWY0ugm|DgNwNmLqG
z*5~QzsU^g)MZA2ZHazVwCe_s2;4YB1461{z!9!_Xn>N(ZQOve7RaP@Jbk6p;t3q0R
z$*lt-I~w&=<Mz__oX5|<?$|dx(VPV1fTX;&)O7WnOm;eeI}jAt6hW0+l%F30;3TmR
z$vq|}X0!gzPLd?5v>i?_l5^8Mdhp;Fx3M9#vtd%{`t`%et>aAz51SKd-F`xlfvz4I
zd3*kyUJEnP%-T0DP)L=+rvMKr%znC04C4z_R8&Ti&@TSf3z1ZNnhAzZvh^F|>SL7U
z#QZkzRfqCter@^SkBVD8EJ8%~(PW4j-K4B}=gqi2%pPyKcMn`*WWDj5e?nV@??o(x
zk>|wnLf+%6!eN~Gnp4V`MazY-U*Q*MbjkCGncI1&Eu$7IJrT2^`-}pAe2noGF=S1i
zV>hC1qrY%zEbb6Kl}eris=uYa%|pfXoFOx!925^05OQKC@D*2B{{q5&C1Ebb4*$HL
zApJrFLf<q&*_AKa%Xjqiukjb~vB1<EjB>r_%@)S<{&EL?`R;;2D%|@aItfP0fcaOF
z{reR+f4VXIn8_|C@jt+}4Ms{1KLL=XT&T2vUqDU6xR}ogkUDsR<mh+7lp^`4Wn0}X
z_c29%hhh=m%X^VqzwQ?*r=yI0&=5L(mI_!N3~H6|p2slgyYdyR0@S|7eoGy_$32Xt
zV6~rAg*Yk+nk2hry?A2LfAwmdYMRuDx4d#RwrTNY`ErDpwNwTPv1*r~!u*X+ar@3Q
zhIF(n1-ljWoxl5ihT`IVTH#o^9ihL9X2IG<-TY?IS1f}S8pnAaJit&XMt)9POVa)H
zopE<{l?FluUkfv+b^(k*n7WoilU5(u9<5{|<~E&(_b96rBNq;q-@q-2=<N!i;d0FY
zWaczaVV=MotFgxo6Gd2y9E>GN*Z~L-8}T&MXgBczW;>PBbVta4RM^gKc#B@|X6Z}7
zdUX^S+nt}8DZ>j#BJ2@^@*fIWt;PBvI!?|y2ya@JmtI_gEC2>fL3hf_wr$@o#$4AB
z)-I$8mGdEXZ1&ntyHlt5opATb!3nCao}N(R56fX+QxLhJl5&$zPM(P(cekSjk#zIx
z!wM|ZJOCL}61KLsp8Oyhrh(LGm!Rbqusb%HPg0AHSqXd1@*e{tWhDMlRtsT@FK&jY
z-JHEJ&NY=stMCou&JY4L6cuG!P4(bOl?HXHb?01pK?JCIy))sK;J2CXK0dsCcoXpW
zzibhDqWp&Af1hMef_@a=5B-gs*A4|cYHYOlO)F(@mtF9vCZ^t`=fqWwq9L+jjWGv`
zAY}%iG?7<Hf1VDzLyGuqW<_&utgfzB1m%4sKD4ee_cu=-K%2%WxDU@3<4ulkyNO9R
z0Af+b7ymM-fj(qDk!U#LaUQsrg300LPVDFYt>#z>y+_@aq#Lhzj8p1ajpD{?DBBXo
z;#?8&AjHFHwb~|1B6*5*>!&H{owPe4{kSCYlJUjmEBVm90$o`9Jxu}jX|(E-yPqm0
zN<56}#hSl-{v2B@@AVbO|CRq)aw!u%KF-1$7ngtwBiE%X*)iC#FdcR0EIsZ*w0vX@
zCdW*wKFT0RXFVFibd$c1{cn4qp3zZ8Ik=>RnU@CV{*Ng)AH5a<-stzxd;qjz%KzOD
zc*>qXKpw{swf6Gn^rut%KL0Wc0YPU2jSc$6k-A8GAlyVSZq2P3$_v}BuTKyy(FfJ0
zP3Wo+fEbE<oK3)$$MTKXK`2D9wVH>Q_uQ??5dbN8igS?p^p_2u`!+$;X<zbUZ8k$=
zi@G8LUMXnkuDjR-(qkP08&(-&6*x{X7^DQP?_kfO783_y<}=(F&#hCggkp-gknz^7
z^f#<J`^h<*e*U~6Y&HJ$A6NimFyxZR;hRLw<1|@)HSI?|1z06W9(Vf8kSHbNIy(mg
z%OUXsGfT@#Z`PpbXah8oXm1sXGYtgsVYH$M5HyjJ>f#*~=<bcYU~md=h5__WsB2K~
zCKnXn&F`VZhnIJ|3m`H~4K4<e2ViS|%PXcQUX0^G*A}A^bW5GcPn_TL^TYU?HZ?Ro
z6_4iro4pV&wGb2z@N5Dvs=5qClTvPWBMt{V5zdho!+nfZCAq4tEgQS&WUb_hCwNj(
z-1Abzn&Qos_O1?|m1GCU2aJLz=m;`6CvK-zU+o{8=v?sjMgca1pUz{Njhs&-0PDlZ
zefnpF7Q43Q-^OfxB|LG^xzZc}L&}TMyt(1R7a}F@TwD!EA9L8bj=ba@h~cID+o0%b
z$-#g$r<;aw;@F)LPC);ol9%*wo<WXIBEPYbn~_mGc<9C64RvAp7MM_>++D$HPTGA@
ziz;C>l2^nwXW%**KMQHs@$3^<6@TisHSBs|*d3pml>-2LL;}HMd%#V@dK98FH(21d
zDy%YuxMhK$PJZt;``1IU+aCA2Fd_l$EleI3TxWou3~fMgFSPiP2%CZJUKneo|Cafe
zlbe6!1+Y?dl`Yvt$qv`g5Q{7R<D0S@7J$pYIVeST(-&;Q<ebU%Bg<<G>Cwe8s%av7
z^}4$c0@C)bxs65-;*-;)7a3+f;n_iVQefDCUlWCr!?Iol_G;m&O`}7<A22h>3Ld2!
zI@?f|wfNh%klSeG;Jj8l%pN;*=ybKb*G*JYLnh6M)=<wRznA@5?!^+#+1B2!o!!9T
zhiMJd%}8uQi%}$e)DK+yP|A<sm<8F-D+99G7Xa(7m0s6=u%9@2_}v&k4sxLqg49kj
zYwXh#>~hvh0=f!cx%>zFC?Iaa?SLBJMoX&?N&!Ouj;7XDVu~M$4==g=-$`nI2DV53
z#_Hi%X8?*A?#%Zwr$SiI$N{MuDTybGu5$`$Stb2JLQs$ffZ5-n!d}w46b0o9jg2qk
zzCF7gfV~20;T(skM-QMcGBH*_XJb#r@v2a<Bx%8=M+L8050{_2_I+hxf=I$V*z-$C
z!+!2pb#G6hgd%nonyImK3I7aS3%Q!*uqFtv6$7v?IKrO(3~K=L`+9q8lLlWUCKCyR
zKz^~BkFzAls`4Nm1?G>DwDqnh1W2F$4rH4eO-IoeL<N%D?i4=B?7QTWxqq|pS#KrG
zh>8i#B1uQWai8ZPcL@XnJ$?8#1IM>-bHV%XdHJ$D^1bB+8k*-VU8)toU4e-)-A23g
zQbZ5oN<@z_$F1|%EXlX6)BnRE6Uz6Km#Km5L;1d*x_RUuTmJc<Lizrmf`_<9e6|4E
z|BY4u|MlJfFNIuwgGB%C^A`UxvnKy(Pu<sz1k1s01%-u<uiVGQzEcZt(>ica*z`}C
ztFa9#BR8)VwlMCGZE3Jkjcw^jT~K7I*Pl>r<xNf7A6w76pfdQTL0N|3&FR;N&+<^a
zm&0yw*MzG-my4L_ejoV<1VNHY>-lEgu@nopxgSf@t+qy6WW|ZsUX+0tN2$YzFYB?#
zA)@8mfBlF5dL;jK82;-T{NENC7)`!Cy+#C<hTPK%kG3BcrQM+TbIYaD3@y~A|7RlD
z^r8D_E?l^vtxc++pdhw#79(tRk!M*eL$_~voZ6jr!RSm)S5INtn>W11smk7=_Ax37
zq*pw=EIfDrvE}29bS;n6gDKxcpS^goT`bG7Li6>pvxv7XPcMnKMnpyFH*)$Mypr5W
z8wr0AE(#gy@@c2_r`z}H>+8D_hypQBZ*O|Lzo_ikCUO=A>hjdS+`;yq2|5UT=wn$X
z3O}HLUz{Q-EIRe-1n2##k2(vSBh9)&0c_pAqBhVjoa8cWy8G&63s4>N3+q2k9BgN+
zHCn6(1N<D|$5Z;SQeeVO!okyy|NSl4DGJ`N;!3cu6j<=`@UR<_xK3;M?mDG4UsNvV
zKd^x5pWL0LWo0Av22S}TLRR0O=jF}T)b;cPWB8D;RCb-y@S^27?CA35@-|jtngTD3
z1o#;*=gCQ3%#{x6z>BOBY)QO)tl6a1XlG%b<Ss)CX}L=NnbFSm`Qr0G?E1a)vKLi5
zdFRH`I&*v9<|VV0rkf64@Y~T^rE2oiZopTUy_Meo!K%!47qO<Ba-Xwdlp#YOWY>m4
zijZVJy&9(<Cl|uprN~#7M>rZ3hSX9Gm+(hju$lc<L%n57a&)Rj>=aZk<U;G;$}Qw~
zRr2)mkq9o{+&e~PH~G!Pu9rg9s9q>Ft?8bViNg#<Z_(PUlLkM{u$hwjlHZxPJlTYe
z6smU9A16V6Qe4n?-B|1F)V6?jt;4)gjWv(|LaAfW#_IaYc$P`NF+>dsX&p8rBN{@q
zP&hjbI<e-?e%;y&WQ6_B*T?Y=a|OiF$c?j_f{Put6C}sJ)F=F)<g=ZRX*FJXI2r^1
z@&(yCbBiT-oV+zb3R}9EIZ5sQDA2<v9TtBbTUcM&AP*8DIo|-qg)~q1^VQXCASeZ{
z{H8qxJo!2EEhF!)?3a=?oa{0h&(K{3D1K)Bh7VgpOw4G%cQ|3OI~ZgwSJtijH+~MQ
znyi(b%Npe|Y<f$4OMxxy2Pn-%uYP;Qt~XiEQCTtS?1JXD@cK{6M2KEWOH1)v>n9k_
zof`*7YCDmW)^5=n3tuOITE1)5F`1dXky+<BlV*S_INmmGP}WscP*Ag<yKs<>qxw9A
z5JM9%F!R-QNV`k!y!DJ7rS0hX^KJGE?Hi4Gf@~I}3B*mfy;SiV)82XfTE*{R&@uXw
z!uWMa@MTiHNdt`){ls~hozd(DVXz=&xjeuS?hlKAAFak&0;e@-auzw~q24iFTGGhw
zekpWK?R>CiUq0j}kW4qKFCXKxY&E({M0k>yd&u(G%!iqhbo0nA68%A@$O$RA_Gu^1
z-}C<Laz;~V@@qcm7=gJucla`Y3`o(YcJ8t)I&NTc#QA^~wp((w-SRHh1j1qP=*JyB
zy&=ed+#AqRFWGkT@sa<qFuWQT7kqDQ>+a9eL6mn{pWdrGMv>|ovD8boVQDC@)Ohu>
z?fMegFnM0)+I%YsMJkv737kY3o$`{Bp{4}3knV2QY__G3&-TNV#mGWnI3gr2YdlkO
zh}BJt?)BSa=kHbcr$~frIrzVhd@plGoo>j>+nZ0TICZMgmy5-r{#mD$=72@(zVXgH
z=@1PQ5o_xuzKLv#_bc^E8l9#;#?V-Q6tMqJvIqx+L45Y$p2ja8X^{Ba&o_tnZ!Ie=
zWn@yqP9%YuRM3{bF29C97&uUwz!;?E*Sm60f7a~D?@<a0ent&&;^eZZ@Z)B!I8{p>
ze5cRL+~pXH&_c!<duxtOtiYILVdBF<sSW;DQofhce{!`t!}s4!;+)IFCQRpDf7_Px
z;)0proVtzP@ZyxKmzVKT!iVrcn{y6&hw1p!?3UihgjirXb0wz{VY=i;-b{rp<{7KF
zTK_r=xD1txMXi@pX}SN!nNlW#U&bv?^%3rSx^{J=r({x`>SkfzS~UN#@<ujd%GIB2
zf8K>^>z;IIfvCN&7b&UdJ`(3)4P#@ewXLU4kJb|&byyEtOsLyztSxYpkHGf9VJOTy
zcP79@!>W5bjI=7AC)d;%WAY%{r1ndYNU&RmVY8457FzKKYeEK<#1b+HE8JhfPUrZC
zBhHiXPhJ`bmxu*jA80pi8XjO_wwft*v41gQ-G0nKGjF9`4r037a!Hvoy*?xXyq=?9
z@+}aC7M|>+6vH>0ubYo{)`>gl(zxv6rF2|ibu!;1cgf3_qqD^*tsT~2R_jYbd|i*X
zp5~%4f02InSAAU_<a(1i3mpbl^3UVI2=cE^o;lbZ6>Sig-czci?i*OAU3`|pVa!0o
zk7sHEoQsK-=xlAQRO0+{B^i6O2_)C7xr?%)Ra#?ePvdW!m1vi=BsWJ6CGCV^2skXl
z={>h)RO}YJU-gb<It0HCu<Wo_@-InkHKs@@1+GTJaJ1SUD0+O(yv~u`d=|_n*gkfa
zu}VXL0pLwIKk>ntS0^p1M&c`d&i4{6KJRlI5lVjHp~-I)e`~sL?O4rb*mRDRlnM8r
zZzPB(4-r*ckazOyvp9q`WG&Xy+O=D_5GNYd7JiuaI*{)+!h<E}eY8?qN{~MoGR_Uz
zYq77;;x~fMp*zGB7-T)ryq7imY)j(;%nS3XLrAhl6U(sj+Q2|5$f{?znA*JUXu^*Q
zK9e?AhuQq)?)i4hAf9~e2BQX;1;HwPz-)^7+SOJ=j$e-SfhV}fSBHnA7WXADTw&)j
z(^&lO(ECH^P~lg63F?mVv`$@0tFCTP+;&q=J2^AorNVB&_tgP9^Ty7=hZPINU?O0S
z0zkZ_c!!XWV2H6m<#z@-b%(K(MjXKjlSi-ao;mnuh)UDw9@?LbOiWHiE^+hD`rU6x
zwGUn<?-(V^^NqN7ftO#3PS$`cACZ@xl{H?EBuEjK#4UzN=fqZ2GaoG-RedDga@qeO
zX4vr)MWa*ydLHUaREYTbr)IxG6ZrVXYZM}=X>O%NwMYLvf7K@LJL;Nwx&t*_yylEi
z5fO%slE(sm95{ayjDPYA>BVoecKUt&{hnSHEKJdGBCxIz4CXp^rQi}VZ5*{r`~35&
ze5+wn1^(|B#|I_gcrJ<WevS%`ftI)$Jk*2u<KM{!*-^(tMBKs%kIhM0SRyJb`{LJ3
zo=;Y$W@cs0TVJMtS&pCe%D0_V{7ZfA%_kPy9#&#kJB^<gaQ(8`Jj`Mtpr2~yS?%0t
ze{aVR9@oCtg<JLhO*uIZOaZ5o!`hKLgoWujEo~t&Of7q@%){seHYtWGSh_sBwlG*A
z0#tONd5}X)zpgF@{*&BzN{_kfy(&*JGct|?xUWmxK|*;u@3#ZddQN6$CUkm8ca6y9
zO|hy&U!SP{xbDh7{p<C?EGggVY2z%HUl7t!m}F0tGSy;B5){z~-@|d|kM~d2t@}Oi
zXY{`1n;mOiz!7>qw#(mi(a)r!$sk@Jq%}Oq!Dgz5_8`NV(*uKp@WnX{Kca(bh4X_#
z8%v<_Md**elEy?C?$y$gHL=8iApv$FtS;n9GqY-B%r$JaXf;Z^U;ChKEVXqU<(b`F
zeIu&6j_^t^zVUQTodSs03cG#Rdtcd%#HMMs5o0_?kz7QOx3y0s-n*u3YC5&PLWqL{
zicGiNeDh%NIN6!;%#pY`mXM(A>}=fg3>gv>OkH?1R91IZ$?~j3Yr8ufR>t&Tq^;Cg
z!1@q>^4p{U!L|A~Z#=cN`=|B>L2&><?mdrFR~pu3PA4FCXHAtkYA8W%fX7W;h=TAI
zEI&u$@--Z+_4|^S18{~HM|BqjmVdFvswiYU=q66a`N5cNG(INgcEUYtEjQe~U3xeP
zwzx3YT?I!UZ{7d8AkoJBkz$tJQX)#V)#5X*uRq?Bl}$v*8vByJ|IGDqN-FJ_KAd{8
zP)mf&fNi_+Vb*Tcu>*cf0vIS`No@*l9$~{HO$M_c@|Ha52c_****5}}{2X^tey`Vf
z=N>V^5n2=JEy^eigbq%`i$c)OYV9=+{LfaC_%-3v6W4B?<QORa#Z_Zcdl0M_7EHh6
z(Ta{;zW&xl;Qf<@wukcmSEQt*{Ea><hgM-P4(E+$-Ka>%@p0((agm?f@Azf8kd@K~
zF)L@bMq*0UB?+ri@`^;C0r&446kNzyj1{@(tl5coxR_Iz9wIU}g#ry7!KKWUv0!!s
z4EdrH;KF@~?M%tv&nNQI7jE5Gy{D%WBMh$1JDD}W+K!?>W?APwMXwRU@e!iYXV!eV
znHl6aT)GuI-<K+0`(S8H>MMHn%1c8siYXPUqSFtH48XLWX1^dnBmN!_-u3a3!W_~2
z7&M=<fTD^+C)@X;i_Q<1H`;Xz<ZpS<i=4DLMowY+{h(k-Vp_kKDi`0qzBIH6*E?3a
zo@Go?ycT#ru8z@+g$`Sj!2rvWpFdp$CURG#uKqNPduGJh_H_Hq8QI*mdDV$*4nAcH
zL2s>P*Bw*jLYm30LgE9w9mqN1sTMym*^z<m!Mj}Ml+hB3hNo(1KSC;a(<P&*7-+px
zb%g{ph!l-Gr2tpusN=DtFVgSVvK<gni(bE1w*O>9paM+-?vhZjgq~j7YtEl<NvG)O
zb;o3;$OW`4paQHLb8OTZ*8z9t{6=|O=yfW4L#)|AKUmT-BHFm_)YpLApz|YEC~f)R
zNd3N9R~O9R*$ss;fNy<Enc9|UsUuw{Lrj~CDQyrC`N}IQXD}A&r+#e`4e9P#?X6=U
zgtBozM7R1@sR_-KO)p)pyO4VlTi%BGCv5t1DEACJwz+3g%m;5vYgD)0e}ac?__^<n
z1Wb{Qo;`$0EM+|cvz9RLWwH>FIVY|w*8U;*{VDJ>4G<enPp3?=yQzl+H|Y2oc_~|R
zs%vI7&qQVo%xDN3LEMGer8e|~*Iio9M0uF*msxJL8Tq5th?{2E>L8il+t$(7)naR<
zK`vK0jnWgP3bI8tu&^RdXbF5%3SuFiowWQ_v^3<lh?LpzNw7uSfKTFw`2#{$_H9O5
zGe5aq$?y2vt(KLQxy(p6u)KM5kT0aa>sxDsxt|{~F*KlbtE0elPjq~)SDj}Rj^hgY
zq%*d4*FQiK^AqBiJ&yZG7+6@^jkCr={Er=vw46{EYd3d2NJnMeSIxu5E<HK~D+H7n
zFs2|2F7mm^c)9(sH2-noh|fB64lDMl&F<Dyg=7-q;wVzG%3I%_+)FR%GudJgf4!+y
z)AhaS%c<qGJb@D{(NR%nJg;f#a~faqJ-BzzbjZ7OthDFk>w$*>PU^(+WAdR9v}vpi
z3>76MEa%j-cHPj*$y=X$vM7ddpJ~n%z@a-<6Im^IZy3sZ`>rQDxrR?+IY_A|iNI{y
zRuW9oB%D5AoN%pjC#4m2Y1H`w_%FJdQ$SLNeI%r71tr|K7vUx<8or;1H}E-~3O2k&
zh}BFArcSk*avN`N6eRRiU#G%vSUFo&XmR8(3Wc2DiiU_}QuD&qRdc%5U7A^AsjBiD
z<lqmD{IzJ3kCG=>rN6fw&lr4t=B=opO~pahGmZ9-DnFP9SkzLw4LD5NR4W*b4KLEt
zD@Q~|mPERTc0Aqg1QH*|@RCZ3#EUQQk0#3Hh%&HhB++0-{lFHntHScxlXk|&>gML=
z$q=yV>JVz>8#s@oyxVc*>NgR+FU`gj0a|5^>Zy~5ukpJ4sTUHEVg6xM*_G1mX#8Y(
z$<RA@_pu=MvNlu$cEf9YjL(~+V`7|36}bL5Bq&G<WLnm^m+|O@99?(}J+|l(VaMP8
zZLsQTw|yz#+_!Q42_2s({@A&+jwf(%w&*V{g`vWS5B2P)g3?8wSzE*QV5zY1<U=$0
z>_4{L5s0}??YyWYlModXlN}nG4qe{%?MsXtc0Ko0(A_G@%R4M~yGaFzV`a+?i7i`-
zWmBK9<yv@qE7jH2&5mYRt9QKAxWC7UsYm1PUEx(oK&(pKv}L}XV_<LtRzyvqtai^k
za-X77Bdmbc$hCTpaBvLht_EEzS0Llqy5$mA;-2R+<_t_stSn<6z7|0S7k6Gsvxpe^
z4OB>;oA-Y!b#uFyBFyD*UP3dj$XS7A+m^?Q+N8Upqx6AJ(S2cfok7l_NKO2=DeALM
ztPOCiJa@KO`i|UzhZl5Wh=p0Ke%NK7CB>8RMu~>K60A8ytB`Fia^>~Q*2Jqi;-&C{
zP45hP7KJIBpBI$qt15_Ay7v_nqn(YvKmylh(K<G=JUidIabh2m`xe37V-&kK=F?tD
zU+f?8R<}_e7(1@(zfQGbs-nYZfqsaAcq`BWJeIz^A}H45qnSHREcxc@<aA*!1W`o?
zfgm*+6Bk!eS?L-;ruL{Cm(N{W33mfEmPqYdVIeI_^2xC@-NJcPWAyl;TH#l=#U2%`
zU_KA&Rw9xgEmb~1vcN|*4Dfk(#XNV`ZNi%Qs}p9EHgjx<qMxo<8fFqOtnMl>UyPdO
z*KmCbi2$eI6B>x_)%Elm+uGW^$gZe-xl{eazX^q{m_et62uCo@F}(-nK4&nXbz<Y*
znGTU}4{~^iTGJ*F$J~~bZr_GMu12Y0r`?PTs^Kjo@i~8XLr*6qFsC{-5r(JH_x^ea
z7ZF7uJ9@MrujzFfe!f*cSFDAPw>NiJQ1ECi>~PB=qskd+ZL=9MLgN0B+PXjES8!0{
z#O+kWW<1M`c8e=8)0thH*w9s0w$>qVW=)rN`s2w8*v#_JH}&4zxJI@n-I==vEXuE3
zKVnX(c<M(`Q@Hd-fF-2`O2k`PcvFjY_v0_!l9O|9eoeh#+M+cPo7RzuIx=^;ewT^;
z=>r}13j)5U-tvtv0uk&RO{(Nwo1JL0n_<!QHx>E31_i*G1M~1Nj7h3^v*X7}%QlWm
z$z$B(*-%zrGqyuv9`bW1mE8k;W2~K-+*r#CqO$5Ds}NkV#a3o}GzOEARq9TquvW`n
zw}w3s2}Go2zPf?OQ@&YIP)yA~-YOUbC#08^G^qayf$22>?&*C?!H1bp-9YOBRC`v-
zL%T7VS@3+f^cZT^>d&E}G?&{e2@W!!<I)EMLn?$e!b@5xj_9_VmBl_B$WCk4@q;|r
z5Ub6A!3;vTwz|@}aTf@dW&4~r&t$=2X&*kz4!kG_Y_1|6EWg}&HEqri2$h#d;`xR`
z<<@7zQx;aVk9s<C`XomJWECNIc7YO(1cSjSiV^}cj?E26$CoglW7jMyx3Wiv!TyBp
zgZ5i|1Qx7zI=!!GzCkr!Eh-t75$g2P4yI6R%CMDl+Ttgodc2Kee)Hx#{Ak0T7J&om
zHbdIdz@pSF+n3f?Citg|LlSg1)`Z9onwI;7pkeKV{Unp#8O$NgwaytxczMU?XnujB
z(^r64{cdn|X4{77jK~tK28@pEc26Ps8gUft-(%?~^ZT9y!CSdF=x<wnjjYJRW1H>V
zu&=i_nI2mQzLRS(r)Bwh4Y3xY#J6{jqI0q6qi`#Y!H7dY^rn#V%6Yw-$Q+qOO-5fK
zg!<{H7xeSP=o0)Ixd3+y9voX~a;&t|nGjl^%3NmensBhJ_f%S^OFGFHpEXXhlXCGz
zsK8iKr7i|BtV$U)f`Cileh)a(J7D9?$zd{bBZcSnyPk9|RSd=FE)N6CSsm3CvYf3R
zJ4Q5?SPy97K7c{Gv=@JNAwb9xF6i*V?sEhnh}_Ma52}QBl2GN2z);U5bEpU*I+5S5
z;PpZ7_StYT_rOl0wD&ttOuoQbRW~iv#$Ejye)&~YRMb&Hbu_53yTYqLofqGy2~mv7
zjT<)x*eeK0p5|P*+FH*rfR&DU=1`heni6^gSTu!&sX<q*ntS6B$O|L(1mupxa}&3;
zlRKpN#yspUzZs#Sh)Pc8#OGdoq=!g?e`vb@&rPzt;*&4v%<yc*h`~9fKSc{6(z#*l
zUAwdjtPqKclKMMn6E}gx>eC+3$yFHa?^l$U|2xccEe(!B3)Mgyz31+aw=eqpnGE#x
z4>hG1GP@9y0QTo1HCUJ2H<pp<cB3u(`@ggdpBch=peeiL!*Hl*1VupI?q;6Ca_1#w
zA*Jm|%J&u2xm?(<eedac3*2mGkbnm3wtQW}N9s;XV?k4VV0^Z>zRH$i_l3(PiCcv?
zv!MFOxf5!BTa{v?R1&omjErJ+WhNb+N_^ej-Mzgb+Y>WB`TN%@K4H^)x4XB@GFzwS
z<E3KybB8y~h9514BSRElMmk*@<en&(%fl~_wM<d}GbloG_3(B)->t~a<q;b#Ec+7Q
zzuSs`kso789W$uPgLg?6JNH8hS7<Vl=ARJ=3I~!;*R-2N(*vNY=PI|^`5gmcp4j0A
z{i42N*>gMi{}1%{qZcP5vn=N)Zl5l$vDx<hHGz~g8UVP2_#42WvNzwwv***F`>d^?
zV1Dgd|0}9<Lv@j%5fN3%c*M-w6uWv2EUm4t;m}kD`VICQEx!0%m3n%elo;`)0^VR(
z*HO|@H@DNiKw}c$*V9_~w%jo{zk%W3FkvpK^BkHEMH|Wmx6RLUAhDf^zI05%J27#(
zrY3H;Ay%A>kRx*&B77!)p1X8Qi86+nfkBZ%tCuW^b3niR*0s%7hQkyU^*JI!^H0C0
zKGEkjf4|6)Yk7<Ja^N%Y^y%t0uI<E9Vh?bdswhRq=e{QOQ~J#!T%_lfMh1=W$H%BD
zl78RDbzy)7KZ-G0L4^COz(N~<kOf*|aEfU$=&nl8bald@e;G0FbBUkC{ZU!uNeV6p
zIYulclj$-uu_uaaMMhn{qx+RB5p5hXIYMgQrXL-9=oSGmI}-{UxOY$I!~+2+)w#D7
z7g0e~an}!5!sPSAQZcQDi!7^DX=brXDagAa7A<<=z(!Ju<->fn*TMlx(}M2z%b0nv
z8;RwHvC8T7fQJ<XdUKholn{I<3cpkh`GF@pi(F6Iwjr!rR9_QvB@Ft{^oEWR*I<=t
z2<nuvtjvwKFL=o1Ld`qfw6r=?iD3R~D4gEksz(W<{e-W7>=a2_z7m(a`~gbSxe1}J
zwugl2q#(6pt-fom#(aH1wSOAIADhi4edx2FduFs2VWoAWUE8}mEX;2rwY3;&JiI=x
z=bgrCPmfH<{F|gVwE#CP@R+|;8?0Q@e#<}o+UZ>8r2oSTmod?2M#pwRglOIOUK5rE
z4s+2?OiWCK)n0^{hX7bVL`4n5w+zrsI#S&RW{}pqNg7WQR(E5%-ua4g&Rl9z<$A}b
zSCq@3|9UI<ChP#2j0B0WVU1g2BB722UMwN6u&StOlW_S);;`605tuL-XbW5?C~vtw
z{sy+-pzP596kSa0bZ9r0f;KYxy>jBRr@2F}Q^C~Vofod)#Dh@KqU~8NYV7OM)6?^E
zMM&oxn@v{lTOll9G%sUGb527qWhlRWL`b0T-7~^sK2?E;x%nJ18NlE-xPN1PV&WwU
z74Vw0fxf;IU~uwZj%8w9sMqz2%fCV(L*~`5qfE$|so+D>ZpYlH^QH8-xYHlh?WR~+
z)4NuaDtI|MFg&DR@Vb2>W3WT>?UFe0u^u#7xpa#VcE2x8GGG$LOH^kbpoZsKS1_Zv
z5okM3oQf&;H9=~XTUy#aM@6h3d|mK*MXaFNb`TRQfub0Ot$YW&-7@))pPwk957M`O
z4KxFl+iDLP8Gvlf={_<|X|1vkA3oqal`_Q_gr~KcjerYP?<@fz_@4ND+FI5rzXR#x
zeTWb9mH3jC@|MkY2%+DW8~4q?n`s=--Nu~8Mh;Hj+Wg8WNPwovTGXHAB5UqD^hY@D
zCNI%dTu>lP>88)tl+Ab81_6_Z!92L{*;X?pBI2f^(h}PNYR%GH%|eWL7mbZHPJvXK
znrl56F<ka+YPsr4FA49jccRV|iZpg8$%qe=Ox*{|cB`!Tv`ZOS(pb-)eeFdorqWGQ
z-gly%r;}Q>T?>a{ZhSVoK+@WPAII>5hGjbyu+L&u;|zw>kp0d2N*I)M`e=np;UX|w
z4%-0;wlUI*`+29g;oQOjE_SpNyPku`S##m;sDqhBc)<J^2EtQp>M&}szB;%OO~|Sg
z3@T~k#pE9cDp)IE@`y6IFTI_)Mp`@9UFD?L8mg}oXc^yNnzs@C+On&N^RX!mbzJ}B
zVez|D+-;NL%WLOLG1!47@1zT1He^FTB^nb5hz<vZmP*or^W8&DVVvIm(usAwA6<7Y
zPz+*yN0E@4r<ELO5Wi-h$n|(kWr6ozLyWQvjp1Abs`a5zcd57yZiu&0RWL<8=v?Vo
zNNdp_DPzq;-||*3#r?1p&pIH5$jHcCl+Gl4qg8O*Z6rJ@B=x=~a*}&I9Ei2Bj)0Fd
zh=@Bd*Wnxe(o1RU%-i+2Qn$9=ym3uX<^SpH%EPJ7+kVS4W=x4*S%!*AX+p|!CQCGQ
zh_PgMtdS*KmMjrYyU@vG$u^c@29YIumQKk|A{>;Zh;Z8M>*4+UJo8-ddtL8!y?<8Z
zIOqGjzxQXkKX)*TIdnHYuVOO6dVSf15UmTQm}iZQx@#J6xl&NC|0$=gS;NCR94X44
z-=2qv2vrw)S4YQUV*V+HcLyn@*6`0`u3!2sNCpoIr4J>*#qBk2Er%3NP`qCo^vGm#
zpC1oB3&DO3p|Vxozw2V!V@C70N|0Wqt7XW1>S%~3u+Br5g&%FkzC6FJn|S9lBsuxS
z{We9Knwo_%ucuP~!v*NxSf5d*_j)#1u6+w(+SYD6y4Z&l#T_SS+i!C)=8B)8E|D~E
z<ofbVokt;v#^B>s?K*n8$|5_&jrG1)!M@P*TJf+Yy0PuO)OwsyZt`4mJE-O+#lH}A
zKx2KTB3Gmi5khCDdJS<a!haKZ*uiOW+_yKb&ccW2(CyOaPVo=rqB7$4;qKj4YeD--
zj2niL95er8L1X4VR#q3uWP2MMG2LtK#-zW=Ljz8#8z6cNO+fLX|J^J_ia%P)@|FKr
z0?)tiQX-kkEN1jz`V%tw7UBh5{-g-j%QgMZ!Atym4l^8uM&rS?V+JC3doWlpo6B8l
zeVKb(lT~YLT*}-fqYd0WYTtR-Kt%lL7gIewIqF&nv<WhK4|t|1YPi;+Syr+`-7Hk0
z|F?sxDldfAnm9dx(n7*&76^JIm<I4Oqhn&~+Av@3_PCCBE1PRIv<74}c!3VmEgT6~
zqSZz>HZ?W1v|uP*r0m`_4wv0SRX~gf+R}U;j5ULno=cFA31-=Ez{dntjA8C>X=qrS
zty4wQotc^0#xyiEY)z0A8@z|73%hy`9z59hM`->^S4%DZ5BWW7KewFc6F2QbtBhy<
zwe!g>Hq#xWr=on6^@kH&@|HfkQ!C*z*u{r_y6S|!HOOP_q%)Bnsd;}DVeWL#0WqYh
z64L<CT-VzCo?e=KnCWookkr1P;^PaR>K#+Xdni0w$Z=D<$hyc0^Q{k&Ny5ZTun59I
z`5wf?kOj2NxZ?}JeWP^1EP$|z6zB~Kq7<%e8cOvt#CqE^Pab{Q=So_UW$_00So$UT
zkHxF+_N*m544AfYO*^MXPC65j=vGPr-;E8ILBQt`2#ZWSZ;xYmm7_BNCY|S;zYJa;
z;W62;HV~35{0ce@>qESGW+g|`-o2u(%`}FHCSSJAQLmfWSU@D08uO9MA&M<syNm4r
z2a*E4Ru`uPAFwg&-UHA$d-Lp3E2AWz!XbJV;QTXJsX(z*P7BNppF!^LMoc}ybK_3<
za6VioEe9f~SOu-E$X~IV000F~8Bemba(0RpSzW+BW-Uy?66<%4yWF5fKX`zVo^e1!
zn!JsJZcgm&3SXHd@go={7tB~X)vF?KcXzp$z5Q+@gChBafy*Nt`4HdG#Udu^;%f#{
z$dXd53m}A`{pnfrtdQC##6z8`s_MrW7(jrWoE+1KV2(~T%X0tF6T^0%O0LW15o^}e
z3=0pF=iT)I<Mk1+DG<xi9bPsEYj=F&;o)(so@1arNl^6n!XU@wLfIe7b~T2fP866#
z^z<lJPYVq)Bh%7UI5WN{nrL&q(ENeXQJ2_FpZhM&yd*L8O-;G1E7xZ;m7!R;VqoO+
zeKw5ktEbQK?`L!NmSXP;_2(}-K4#b2x;R9O`y2laj=HC?>wJrM28rJ%Ztuy8kE1N6
z1`j@{6l6of=n(14y`ghP*7=t%?@X~JT5m>ISFMFCzFAmMi2WvWS-=uP6?8ICLbnx&
zT&cs2;%3EJqtox4d<gL^LkRgF!{$TF##N;rm%aBw7Cml}9$}}FfE{Hnpl4WN>Y(ek
znc<qrQ#7UM>-QIs_!Xc{$76>}X~5(0vPla_TH4a@G315ASDk0C!>oh)x?OavBRlSI
zqE;oK2XD`&epkcGh@_NcSD>*^e*nGS79r_)q9T*-+@j4tGJQM@Df)seS3U9Fu`+TR
zWR--lCuT-Q=W)hR5c9d<Tf)3hMXIp!OzGN{d7xwFUM0OwXHG&cg+XKwPfZp#so&bz
zn1o)@c&p9!oo=?}YNG9*%n2ruQH#gHn00`w)MMe?SZBs>OX?58-&m5a9kcN1Hrl!E
z0CzGv^f`re75=10W+mC9=V5-!y7h5)>DjkhXHw#F;+3ljUQD88a&L`8*?~4A6B9>z
zfI66oif!sl_d~6QKbUjeJbrrnt{1Xb1lq-;P*luHNL&sS8*>w>R(-=C=u0o%>(y9W
zq+!O0IK^)x*|OK{#AX8ZT%C*gd}AVU62ufN89HqNv%f!y2YlQjt+#I#dYf79KW_|P
zK)bIOsa&xaY$!%_NP)a$lE9!=+>?-kZnC}Y9sUbYFsNul9NPkO*0gL#3R{k*;NW&j
zyT1S4sSoS`!rb97kp}L$s#`gi$Hn-V17}8QYU;V5tu~DoCj`hf`BWCO?-AQiswmOw
zXB4IzkG}}{iXBpSAm~WUOPZH{y1p&gw^O@J#O=?Disji(`rAxhIxIm{%tH~N0_D?f
zE^7hmBj804IwInyX=~41JC>+0i=O!@y5y{ZgG@;&o9OT9-)>2s&UP*F-2T|({q-mv
z`H3Vy2dJqpz-Oxqv0?yp(GNjeYekb0E0N+zO4IajJ$@d(k}=PbwnW9HCBkq8(Nux?
zs0c6pH!~#<>~8#+yb@J5luU?IuFhW6>8O<A{{8yKxKXjQFOn@(jFhIx&z_AjB95MQ
z*K9Bt3n)C`{n|Yot7ywsA{FC~fPxy~0Im??W?rpN7{loT1r0xGRyt)#3wnII7ffh*
zdgr0{>vepBPQE%{MxS{hwAKSJ2G_ve;KiLGdjl@OYXx%XGsxn*0wX_X2C`!5tKD!%
z5Q0?tzU1J58Uz)2%ypY2c{MlTHW<g6Cw#FC=-!;Xie)f;RtV4BwH>s`Jbu&#?47Df
z@_q9+@@ejGZMZ9UWWM&R4O;pLxiK+z!H`8UJ{}*KvYeL7qi;92h)Hn^;)Zi#?N#V#
z2d3IxSJ8-$iY&1^`H54(#2QRiGw@;3PV~^J>%2Q6+MqlUv-s$=)y40g#B3V0q-v>{
zCO|j)VPYBIao<m#=qgxEx@{AK)w3bWt9pUa{%XURT0Ep3um;&`Wzt0VuA)Eqxq&NR
zgJ^2;ID{f0SwE8c<?!nrzV>vwSxjR<l@GN{Y9;-|Pf1WDU~xIx;rL1J{ml{jT&_E`
zf=!9h4qI&I`5?WvSl_dNagvQ;x}V#j`G$nJkwB9A1;T}Ql)f6a$G6w1E2}zqp)w~y
z>EUoj;>9orf*9@8Sz)+SR}ygt<-E_lKXj4KDwS?K!IGpd(GM@cU-)OodxQo}Aml0b
zs1T(QpyJQ?2!_u^bN7?)7Dpl?XqQipr{35&zs&*SM>?TCwbrwX{=wz{5aY8FeC+1m
z(05ehgJcF&1bGW4VeodYUeNsyd7oyW_Sb+7%F7*8+MX+cwe;H(BQn1Io*`D%0rrEz
zUoNf4u6hGLzB1gEo-F6_?pb39jcu~yd^iz}s#yb4vN<psZ$h9z$$$M|p2w@U^yRK}
zTNWIVh+;4N)hu}Iv^NX{)3`>$3jCUX79G0s^(3Hh8w{#tgyi{NgVA+bX|-p-mZo`6
zkLS_Q#rcdvOTRr<#>R{bZgH?d)G^@&Avu4tSs-}C7q{W=i3$htM<j1wEa^4|hSEq3
z+mZfue6_G8ul!4eGNYkj^H#Q6m-L1{P9Y`n{llwEGt%xbC58U=q{uQBM2ob_NCY)d
zC#dK!=h~zR{hpUCGy!Q*nBCS*S2HFIek7j;#xjWhZ1Ar{D@n7jj>;>2@I3hf+dZ9s
z<D%F8+Zz>VwEIH`@Zl0gq>LW4tV<2}6+IqYpVRQiS$I6ZHPr!nS1`GWU353~1qW3g
zwlVC&A?b|ZDF4Q2fZMKWy1C_i>VbQAQbrmHxd${hp7tO(!K66;1H(>ZTke_dhSYcP
z9irJ>VOp;XWXjkzzC-yw*V$37Qogw^50Bae&L+fSM`V8O{`KfmZ(7v2Gg`V1H}7DS
zjV~oV$;zyWB~*__&fst9f2x*IKisFwRvh-mFIGO&MnA1s30nbJ^ah%OBt=&=$@{fC
z^@=@(vP5xAVuf2<RCOC~U4wzlcD6MWomwCEgeYI^*Tv4a>mUk>HdOP#^_8K@r7?3(
z1y^s}iv=1J?c;A+)Hd`$C;@2e-g>np(*$JRluy+Q=9dqLp`ryLN`+|nNQO>MPKIyy
zbKoHvIyqHa!s*l4KgXAO9M|RI;Uivi3!C8&{RfJ<OID13<g;FF!K0t~{v}O9IWo`6
z4%r9S(Mn|q85tWp@Mb!RWXI+h8zIp>vcNO$f5fNtaWG<&otY+hjZQJ252okJzrV>1
ztA{tNwL$YmDH5=7A$OTft_zquYiPJ@DHj>-aGU6Mu@Mmcc1nHh3i$0@W-lPz^0yZe
zCssZcDXlNPg0qeF#)V49t8(kr|3%_Mg+u4L#{4Lv#_N*`RC)_2FHRyblBj55;o%1q
zpx+cgtw=QG*E?2Y2Nx|YMpgy}m!5yeXP4LA8to^*>o4%xseB407M{brfR)b_SQYwV
z-Xv%m0ZV#<{jJ}1H*bJCHNo#|TI*$dEG~`4nCuWzQj8pg3-t)ItE)-T>loI)=j$}c
zqrs2pKLOlLP%vEvx^B@6h1+imEj>&K-@L^pfSCUJokpq*Dd>2c#W5H-^U|;1QynLp
z^w!nD)YR0-i0ARKK{)SB)pm%3*XSSs&Se<k)!`AI(i7E6sIB51PC0d^h!}`!R5QNj
z(G)ofq}>RzU5e`v$I<;k(9YAAe*r}axSVhLc)u_9v=bpGNRkqO#U2z=-?uFtr-eU^
zgogg&_vJcl3&hK6FJ$n=gywf4*ccEVBLGdyZy)Ns?%ygQBJ)PIwL9*y10Qf__SB^x
z5+zDT|4raaI4`p*N3$(+WUD#WR3zE|vLL=Nl<>#pHaV4$19On@g4E?OFij%il6?{~
z<L%Gbb`NG<%U_Y<DJrfCv~M*flA_FFjD)eyNaDy5i$Xg}I*UdsT)JSXT5M#JyW@GL
zdF$)AoZP{azz-t1Y&FZ*tuj6oo_n6AmE>Vb>*-c~ZM#nKEwLJjByDuUuZ)Ut_RPAM
z)1;b|!(pl;i<ua=rmWj&Xm|#G95^uHyJ^$rNx~NZN!h(uxX3}PleWy(q}~(Ll)>K{
z{GF<jtgSx4CT=B$<<Dkk4ZHOG3C_DqOV~AfG?JQ;kFHNaZHGlkwsTWtv#g7A&!eR?
zFEVtK&m@>z6!+~+yh!!_NGF+}5TW>;jpkCy9hOY|zXC!;(w(y=DH{?3n%jVv$|L7;
z<O)W$dYy}1{2fWU!dm~T(aqOdZF$%^8A(PbtV*$zO1S^TqZpuihE?e#ti_;{db8Fa
zl$qbV^YW>ijcCe_c;&pqc%KAQftY4@JX<cCv##usDL*$m;#d<w5p|t+%UN0S{<Z+?
zBuCL+o|?P2Tk2&7;sd=|amys8=IuR&!DcMB*zdWoLF!4B^WT#ozAvi7>wdw6ewswF
zZeh3`!Sp<%8!$OD+$k;W5-rCV#rE3<@Q$}1VpvHndxqU?s>tVaD;K>&IiyNxC08Sy
zSVwLONhjx;toLyOqC8_;Y)F%$@UojP7VEhcbdTBz%ymvDKj2O!fc`VK#`)*7g7YM&
z$mWE+vu{4#5nM&M+EsCu7+2}p?X3>qb%?v%koZt$%)HsO{MWC)?!*hVXR>zJ+;tGU
z#?0m@4eY)!&llKy8OP9Vd>zMYeLd{5yDk36Mttg9Hy!^={<z`HkP-f7lLlGmbe_t&
G>;DautFBl8

literal 0
HcmV?d00001

diff --git a/screenshot-02-notebooks-list.png b/screenshot-02-notebooks-list.png
new file mode 100644
index 0000000000000000000000000000000000000000..8311551bb84c9bd5bf152bf0913d6bf6790bfc72
GIT binary patch
literal 75293
zcmd43bySvJ_bsdf(k0#9-GX#WgLF!lfYOaf-84vdcY|~Z(%mT_-Q9h*zQ6Yy<NN=N
zbIvu!!x)eEb=Tf|tu@!2bKSv83R1`j_y{jvyg+_0Ew1w71#~6&&j#)l_?Llo2Fn*O
z&|bV37g2RhJy?Qq#grm|Jqd1p2~YOzwTnwg^E*rymC_%1KgL9(vF);$^76Vvo55vG
z8YLXouz1~`;^?s=0nsHTdtPx+OmA&%oo^f*IczyE$CZ?lLd@3f@9kZgpI1gh2iK<h
z-8aa;%bx1Bzxcna5fe(3{O^^m8}gFu?_KE1%-vt3{@q5KU?eR4@3vT3Hd4xe_YLIX
zqP_Wd-=+!@T=0Khj_&{V%i)DEVv|s;t^22EvG$#*{r!Bw{{GM+7lz}LlNeflhg4F1
zO~}F~mcof>H2MZJ=Wh80<_u>E!S$8s*y`jALWtlQoBChAoEjRgDl03qu~i+cPXs}C
ze2tFI3Jwkq2x#>6wT(DNM8er;366>E60>XV!xfoNDvG9!HsGXXc2~!#+Y;Tr$j-@;
znEAX?;$mDOk{Ac6e8c7@zFqz$pSrV0hDT_Ojg1Yw(ag-uH`*Le&xf=$BADpp@}@|4
z!fSH(?J@6PzbIZo`Hkywb8v8Ra~sL#qQcjm>{vK@QLt?oT3g%L+Qug_5$4%6l=3)K
zK-MeYEBK9ng)bA2w1RJX3?3{-GW?Y5`dM9QNaYW@Azi0@7n5D<p2S*?aln_YnMUu&
zK=~Bz3;_>jdirXWJehC;p1ZsKFFidyYkH0Ln=<P?^5J1&3K@cG#j5X3pHg`p3KTP{
z%!c>sY!-9%MJ+4}gL)BZ3SQOK)vehStCje6jOf(c!leyl8wJ}FI?0eR($j0x&;|Iw
zehFt{WOU?$$ch(<4I;zCOX#!uJb4BN@{0rr3ePou9Q_uQm**xd{8?8wH7?GyNA%T?
z1cQhjCIKc|nvhT&p(FH)Zx@1g*@KC!CEh&iMiQCn`VF;w_&+8>D`nu&+;8F{f^m}I
zm$>bg*+0z{n3<V@FV>&Jv(n~uzcuo>d$~W`{@f<qq9d&wL3BTzF3>D~NA%9QMKPnT
z{poJ->&r)&ygwI~({^gD?w8QYGd~s3#mYoP$fW5sb#!(q^D>dv+Pn{qjg14oC*_k4
zsIc=uEXI}vBT4VZ4Evx`nktS7p!^_68}O#KQR5#Kf}TIVBoH9lg0Hc9@s3;nt!g-`
zhJ+vaZ+5aN6-);?VIw|{={D!Xg}&&Vv+Yrz!-eVT5{<{Z{fGPOV{Y5uuG7WSJ`bk_
zuJx&@sc2Q7<|>tyuoJngom03E!ER7MssrWdNbSXBI%a0@f0gsys>S&=(4uu`pZxiw
zl-?&Eo42;U4h7|Rc;Jcvzezs#r)u7K9cLF4m)YzH<KksvqsHaR6c!Pze^qpGI~$wm
zinMBBj8cott5=<H)~%9xYqGfAK`rALtK{V3wZgAUwQ9K8+3io)+7U3N`Hy7{419Jc
zx^K@mb?QDfrgE4L{Fula6!3n)rE3rk2;sC@csOpyvBqB8-MyXGST9yBQZLo~!nl5P
z#JqjH)QoD!@BMIdFz)~kjB>edKrjYP-o!+c<L<%62EXORbw@`>Kl4{i@(@v&5KOwO
z(_Sy<<K>(wwEga`M79j$aAIQO#E6K9bY2H_a6a{P5x}0Gbp>N+=PfmS$$1}R27`!w
zG*i}FW!%eYpxy2bWw!RK&UR_5eg)g&O7KImAGW7|Jd=)EnfBxAFDY^YVNQshai{<3
zdan;y*snv#k`fY&i`&E5P(xFG4Q}H<s>pl%#kIuiOmo-Va%nf||1M{N%X792s{TZ%
ztPAG*dGv`-H+Fl)ep!QGPgd0*1!|DEpUh5fe2E8YtKS#ukv*kwS52mLd76+M6P21L
z@sRZx98WW~&a!Y+^Xj*{4-X6!i}<}x<~ZNz|IqBrB>t716%h&P;_U2T#V50(!l2$(
z4`lM*@O$^$Gc5bnsHmuNy=I%=4MpI|M0}3IuZop(sN34wT<OTkU)kxld2T*E!dlIg
z`cmOA-gu3qHqxn4b8|bdb=fIDMG7e>I{S|22&J$Y=T}uJ&z9@iF1JkA+qDaLTp4*!
z7psL}GljrgTkjt&HEU~Y4+K;(o0}IX3gT^SZ_l=QN%`l?C>P3A=##wT+p=4%8xBCk
zalhR2yHRTMKiH`>%pfm4oUf5GF~NML%D=1)EAOfiNi4vk*Tio<GxUZkB=kCboU|1R
zcOM=Bp{k|^T??t?X9znh$PAXgBWRM&Lql>f%FKSl!~{O>P@OUJMjIK9P|w4kaM0S?
zvR$5=ybH_pzlJaSDLoeA3aE}Pu)oYQG)aYoVwc}yEbETFdnoBBf_nYV8F$$uy)CDP
zb<F$z>d=03fLfrmM7PoYhOgY9y?lsH`$wNI)V=qe<x$ZG8U##QR>RJE$cq166U+6{
z(n_V_qh0$WyWO&)^-L)W9Nf)rLB{hvW`zNXpy%h+&Xv)0fp9FMx1U+_?lRG@j+RQS
zri*3c8C%`X^Jhw6QHizdZ3VFBnq5YJH#&fT-QC%F>$p?d(9i&4ULl1WYw+RZ*N>tP
z1*DnX+EJS+Z%>=mN}f7W{a~-(y?yI>e<+^EscJuzII6TL^rYEfIoY$bQ+V8-K|Yn#
zIx6&>Egt*^B;sTNkD2kDAe|o;zHhJgrb~)uMd<J*p<q$?U5@x=Y-dV~Tvu?BC*FO{
z2pt=9iB*a6YtST$0Y~{I69Y9h_Imm^+Jp|XjAiRA!_^?cZ-Tgg&#+5Y&6AR5E?j>M
znh`^1>E+O{f1H}AaDzT^3^XFfbV)Q@@z~^fgf}D{t`?n)8=mL!Vh}4>*5ekkV`O9`
zCqMkXjnX_YNQ%}W$~*=G6b1oz$LGxi0}_5$&ALxXh&aq^p&V>%@nkWCA6lFb+oh|G
zdr@A$ex3N)*_qj(jej{##Y+i=yvM*hX|~dEou&O@Z!8NcxkA6i72QWF9G@;@VQ%hX
z_nfVB9OTLbCLQ&XLfHgncqdH;YpR5HhiwH_)!5+Ry?wE`*uha!53M2<sw6V-PWWxu
zo|+#%VBGE%DpQ~kzWsc<mPfBv+)|4|`&={HbFkEGw>5-!6EDuKRH3gIZM>RcztN}6
ztCuSst&qk?t!K8{DRfd>Q2p~=rRC%n4vYTB&hG9!k89gCfg~Qgw$wtk67@8`+U|F`
z3UuQ0b1gX>5hw33Ffmi3K6aE0qV2{X!1pgzkq($v&KH!x_XW7Mcc2D8*zIlbD4D;^
zGTw!5{=7<5j$_6ov#miyf>lv$w5Dcq5iYKoh=xMWDC)lu^6{O3&iw_En5nI;ez9sl
zsI*jG??*~i@~YVjl(Iy%Cs9cRg@s)=2e9OLtfs`z55Xz@kdMwqH#sw-{^d&*xf&L|
z>dnQZ;m&4-cCEJL_lc!umw=|pilOL9m!seE_-F$G%`V4TTr0nR<+y&CW=p+2e>c#l
zbSr*C3X%&g(|m2;s}*fnJG<lQl3BRRqC|3!LX8UI2|wvKMtr?g@X;1&Z@+v`mDKMW
zKE&+7{1Jb<8bq>LH9VZcGpZ>J@o618CBHn}+oPXA<vsjRpkSD7yVP{dMylGz@X)*B
zC5%fza6O`epoy;Di$tcZ{&6r{m$?;BRD>k{Qv%r(54QYXuUf=R4W}%tJX&<$H(W|d
zze0NAyTHy`$%jkVM`5VeR{<DS*wWXqh1#|BYs^mkA0(6T@bH{gJ7G5X2nh*ell1i~
zVukw#2N8Yr^bptV`oB{}6EwP>c0Nz@JFJemtavqh-A9o4q?YGWb+;?;lxS3hU@=f{
zw|GBlKltPp(`qWI)lU{EZVj4O@UAQiW~826UW!mF@wOaJGq5-~gtoYy4@~H{d*`)m
zPM18-e2?d2)TwhEh%Jht_A)3@m!~9_;3i%FNr;a@fAWmawO3=@8?nPb2Qsj!xIaDK
z)4X|(`EW8FZQ8Pz3|XsR!(Xs{{C&i|B!7#XT!kf4>svt97zd{Bm*BL_LNs)2#y4vL
zae1^msjMxszx`*bjOn|#xZb+}NaaA|SOGF04lZut5FwWpr%?;28CJ}VAl!J-iHKUw
zM~OF%Opvt7w5P|$#vqWBS1^R9pFdX$xt@GfQi|$>Mnnv4bl4_cth1anGc}8&S37ap
zpRqZk>+}P_i9B0OQn?WICDxwoS1V>uP>8h{_?h*Zc8-q9#lLFWue5cALK{C_?(+=9
zF@#pEt<-+fm}z#}SI=s*9oE?=o$|FvU`|V5F$naT`ufsOR8&;_>g!vjE%?ncIETLh
zO@>25d*A=_^8#HhDAw{Bf>5YQMrvCHdC(Dqpxscu%B?}lN^h&IR!~ZNk6Tt?9`(^W
zIWvQ_oN>a(UXf);vO;e1#y)P1sVtfclbf2{7@x=X;e1rc>$E!od>6}!-1q7H&OxXo
zZg&@!K`2Djis`wHl-Z<??eyxU4W@%LAQHlH*?tenIi;@_D(8U2y;Sr8$3!DaRky~B
zNwk;O!OZ+@FWF|{M~~R~t8|;iI#7-807OPNjbqZmo^J4dyz2^H>94`wpDMC3GOBjJ
z#Q*SNGJ@#cM?*@X-iSv8JpQTMhuib>t>Ip|&9{7@;#Rb$e|~;~A|N2>!i|oOE^JpK
z;@knX=NC599pWk>J;+(z-JuBpVW}<;30(5gqERX)bDrKG(|{6d)*WI>?s3D)On?4(
z{b8ZrZhL1Zv1b$ghlgv+PqQc*#q@75dc(uRTn1j}Tk;@F%Aq1S9pU)j%_$FeS8jT^
zySI7n2B*5Mb_Ps*&qhK<_P99_DN@P%F;hsz&;M}ifQr=n2cxm6Dc4&f{_EElsHmu_
zxX8o({qJ*;=~>R_MAI}U@Ag>R&UeOhZf;z8czEWsSCH|bjj~1j?%<vk()qc(n)b$C
z@NYak-n)IEAt%3!igUy~Jza}tE`M)a$bztqu{z$l-~JF$$&Phf);;(lEp0P#+PdF3
z%bkB_T*5uoMlDD!+vqryIntbC3}<GGJVQcM|AV0!DL?9tkXI&2yc7$6<l9r}6&g7f
z%E@a*LQac689q<Gzj3lz{3YR{+U~3l*1CNxFWsw#qA8@LA_$!TihX*#f4*5qwHJKV
z4l)&a1ip~B==G661hD|0>A*&ZpAdRdAZ1oSK;9W<>vTB5ERXe!<L-p1SP)9H$2GHx
z{(6rWl|gN7t;ENz{r%93EwDplh*D+A+%{)mN1YBAkbOKZcG^C6*vVLqjEvNnkN$l4
zvfhS*h$sfVSgxmYJ28~RAsIpFi)(-Khm3&7b`QYmVl~Fw@4x@c1u&Q@g6*~tb)5%T
z92_;edWRttG>m~hZkl2p4JW76KYvIc1}CcdzyFM(QKZwJD${K|107I_N?viOYzLWG
z;N8u`wd`c8$EZ>F6G5Y}B);P5n4AE(ty(ldhDs*Z>URTti2Y|JJ&l=_6`{P#*RZf9
z#}+D?`mL`=M#{lkzH>fso#;k$L&3j*#|HUTJBC_*FrF#sQX%EaZwt#B3x`?v(^3=i
zo<XzoQXn!xb7LI1>+bH7Kpg+!X5H~N>*VL_iXka`f|8Mh(Jc4NWG?HOy86*bWirZV
ziJ2HJkuLAm)hxJ&lb`-bFvG)4=!6L51H31GyX))MC#x7p{=uc!ceRSSdzi`Bq>PNe
zXJ-|6UcF{$ZP7nx4bm;Q#u{%;9t-x2H|iFyy2Dsa-fmBF3Mn$f?x%62;;`P;`w;8m
zJ;;8@P#iKbJ047GP>;D%hkdN9uID5`M%?a4KBVri6UxefZpQSme)(x_Q;U<F!~Oaw
z0M;HxI?h5LO7a7M5*7Nb2b-4z9Ub}%k-oZwO^)d3(N9m_a6e){xPulZENJVy$JK#C
z-RD>|%v_?*99otNoMeZn4XtKpWN%3?PtUYe1Pi7}+)o!f$~#5dg9(bvEoQ@3xq<-S
z_&SC}kNYGvH+bG=r&>(rhu7EFt5?HBpM>E}o(ikLC6Sl?d>h9{+l}Bv{~EoBbg4t=
z8l0R&VWT>`6+v)x6-^BvR?zRs(q~hH`B~ZLcx-?3JMIX}EH+|qgtR}{mu?YmTtq>Z
zn_X6xTbtv=0<bK?T0ML`FLu~&G3WW^jQ!V6R{fF@DL8_KPnTQolaISU_kaUu(B^qN
zYY@sg8rlp<foA7JF)=YNoHm!^Wtt2m$=k>KYYaMoMq2q@Fr%(A1Rte%ABTC?LF=LC
z@ZQrHppt``GT0u!4SC&axNJdxPgs<L5`*@(Ezev80?s)a11#}au@?8uR?pjo%*>At
z4jd0<DtRCT)2c7-Q~+W;9M3Usw9gAr0PvztG=SaNxvq%O;c%f0JQhjxPQ@fSV<jcS
z`_8K;EI2>EWrboltSaj!KM%K6-DFo<tY?NjJ4@4B^7k2Lqm;Uy{+pLsPG8V%bDDN6
z62tcj#~<q8JB4@lu7&{bVRuMH0WGsz2>6x{I5-I|pM7CfNi8{P4G-DzRY_ABR12fb
zI1BrK{v?ePJ4TDncl`X3-YJt&1?;_gnRfp!K<96KwdfHe@y-L@AY;?1nDj-FojoWv
zc-=b}DCli0f-pJ(&4g9k=?5;}@HagX@^a7Qx+003pXOLSJf=-U(8iHT1lcXQk2?bp
zAup<WB886h8a^BHVpQpFkLW!<yy=Y-6BS*oKQ0va1Ehh}W$gYNvW17c{b!UTi9eu0
zqrpSY4p<}jITs!tUOf2i5611u;i3x!GgZLD_T~iLzDc{*3IuNSB8Po0BF<CRkU_)e
zm!f0T^7w<iedK~ZPr4>}Nd!|NuQwmCnY8;YSa(arW06-iEOsZR<LKiucpWA-`VACQ
z-_9&8t^euBA%|UPzK+VsXeS-$S5Lz*O%uPzWVV>A%)O~Ccze>Q`CCy{&4o{fH-v~n
zLZH42X3I&#^f}jlq&Q&@Q}$Y0ke<wYm+UGWUC2ez^W9m<yQv&nsQqH<Fr@DlVXsQ`
zd8H3-<>YK>J`JfbXjOBf8*t&I1O{J<b>j^CTiWY+n;6wcV%CO+xX_ib``-m-f1LL}
z!~PPKvDdr(en*MAEmPu~L2mlXiYlo_VNK1QAC@0bi1{I`2lF-N(w>i?4Kqpbyqogc
zo#?V2<pi0%H=;`x8sH6wyNlh#w?0n~BWca<R|jNvbbt{XFsWd_TXMnJJmrUU#4~C!
znxo)zW*YwL(R^B{wYHuu7b{nBm@Xs;(W_(pawxq<CPg!avn2phXT5DPBA3lllSHEc
z^*1?_4gV&C=_aQX3>pQ5%QUR^n>7bs)ze8uAz0`Z^u4TbuluW+ay{9?!1zbNp9HpR
zF6F*op(vHVk_FY3X5vZI3rlySB<=(B_2FWWXJ)D-t!9%Wo!rIFxYy2@q1)L8lSX;z
z)}g+mY&r?#E9<T-zhx9{Z*W)`5)u-<PF*bFr-7K>qml|qIt`c5u&{;J`=6~IsOxKM
zC2A#e)utG{nFss(^$y!l05+`Zfo%sMCj4PIiNjo^#teBhweip9C4Ldd5U=|M=68F@
zBw%W$iauCx@&U4R{Q03~6?{riS`TN+{9<CRv^EKNj`|W<P`zKU=(mJq{n#2NAakNK
zIJ>%<Z-3rd?>)M@a<iT)R4Gxf{qrZv?fgl&_W8lVZ9F>ww0w-JJS$BucNdK~EG>jY
zL;%^SHJtdkP&V0b_B=gGot%d<n%-YA#VOls>BOp6n^et|r7SLJ7yOVcTQCYbyIy&2
zXvDIa%*RV#BY5j|_o_`(Lu1=^X@Mald8cgIKa@#Bt+Am-(f|0_V5ZXDkgc|L&PVE?
znJGD5y;~J3p+v!elMRzA1Tq<^W~hdIISdVe%IJf5t!U?n?(ZwP6>X)?A1G@NA5LfC
zmD~Ljm*0D~>GPjphblmh7a+4DM!S~iI2oR%zn=vN@Au=^{t&7ChR~vPY$RTi3zFS_
zw`);No4GNjSv6zf)>oHzDWOKt3_aCRvs3<vl|xXn_xY&EHKF?CwPVi~e4GrW+#&wG
z@%o(m?fPTRg&cCt!;1@aiooOFjZ4eRB518bJ36sUI?gA5I?m|cX!WJTt0ilAz-_H{
zKSwO33Hh|KKVHrn(7~^U;;;m(lKG!s$UTq|3VFA%w|n0HMGSG10F;lr<Jgb4Kb)=L
zZx7$&d7<-qJ>EI-epwY=D@HFMJBgW;wzXDQD@teg{VFf%_m%S|_dUku1wbC()5mTA
z69Gb|?^c?I9D2GXAS`RuC&ygq`Qbc<rkF%}%Aq@C^L*=((_&0G_f8^Sq@3##X2Ls8
zncTgdbx5_zv0px=PRRX26(u7nDM?#L2mX?Dwpfk8%j*#o*57%ui~F;7$MX)-g;K*H
z0K=6|CKX{(2<P^}Nr2>-Sdx)t!I3g(FblbUHpq&oP)L2dm??4?O(Dd_!}GWvX)06b
zw$azmZYtyb@P#L~=F@y~E|wSsz(A*m@~gu|qN?8uwJ9qt@KGhgI{_qnzEB<-CF+*F
z5nh@@ot>V2Xwy~KhYPjhu5_wUR->o!ASECXaKBKVH}ENgLqdwDYInncd@Ykra3*?J
z=Y8^LJf5j}!!xhW>&`J00@1BD!OEVAohj5(6ED;J+0)ac#xVVu3P`0Eulr?eCVa1}
zc_sf?295k(-7f=lA@3l^+RxX8e~R5LM(C1eWVfhLMW#YH$m!L?Z1Nx9R6F4O?jCA2
zdbVLREOEui4@pBy(esQ?%q-a{PQLBaQB_`QkXNOnwDk!7(|1vp=VNm^rJ?q8wZE1!
zTx>mhQBu}4hxAJ5rvX1&F_jJ;48rqvD!t>wc|)PDQUh<UW_2mI(QF1v@pAP+*v)2T
z;X1X9CE>3i#UM?`bF8YZZ?3)7^kQ)NX5?h_WVE`dLLqmrJBL_1_z`F03&n%il3Gk?
zmACrWISS-%y%+0j1O<y1r6UNgF9ESACl^*5ulkL)OH?8hTY1YkLAP9&*9}L0IFn5)
z8QnO6S&u6+!29MTE7kSnPuom0=)$dRY|8j+tExH(-5hs-Qt`yZ`(+w18e>D<ag17>
zot@;2jB?C=EhOZ8T^?s@n^77?_M6WU(+!ThDxltR8R%6R<*|qVC?0xAul>U!9b`5h
zJJnz*O5RhzJ(UA)@bT_)q0UApSK2VzbczO{jfzwpyQ(djH2YJ9M#Ttd5)E2zNC1Td
zU<-F?icov;{nqO0?$MLy*~S-Y>f*snitxa`GMmM%n{hE(3sX}v3~L~qIJ#Ub$&~2S
zQxl64DQ3^53%pY+)l_JWXWkw)=+PHWfAOt_{2PPZpKG6vZ{5-Z{j{nW>LBs$NxO<W
z0tDyw^g#6{5iE#UUx*R<dr*>Txw()2bQseP%s0M}asEOVCDgu``xWd9r<H1jx7ReT
zZk8xBF)<5^ZUdvNSYdD!szi~7VQ{U>&KN?5a!sA<;80Tg?>4UrtLYHBGG+BQiW(LA
zLG=`$<FwT6?ArO=J}IL(^8s!sEMjJSnvBlFbzfp&o!tvx(;`;WRZh-|0pI%I_VQ93
z=2H6D--o4o?IRV!wwipZN47S5WB@%%%O>4}sD!CT)qWuDb}rv0ORF{ADs7#<{Ln~u
zPpIsucn$l)v3wr;n`J683;(rSwOJzhq79XZVuG5CXP!$Jg(XY+L)xR_JNImH?`hwn
zlSTB?BU2lQnb|j37Fmf#Owm%%eWT*CDiuna008LxdtySxItlQB{qQ(AhltvsNquS_
zdQ_dII9hHkkOS$2cHT5yU{Y`vC0cEQmz^{=_^sPvyh%yWk`Q)$#X#*!`?Ii{8iRF#
zCt72rx^ST-5MTh2I>vvA1K-1>!|ij{|EE9^!$(A58i)}BfGhqL<iqE2Rr=$%HU-qg
zo2@i{w~%pCWd%c9+dxR+`<U0DfdmKd?ssE5D*grAgiCt5KIrH@u8HGA1A?STQ_rta
zKY#8EQaU_Zf@RTnCHH|$k#EuF(M<{pdIP<YN`^9h(Vtc2b%=`ZtJ_Wgnwq`LNE0Yg
zsopNrll|>KA6e`WAI|a;QgoCzuggr{*Au<FBF`#tIxf7wCIP)$PykhW(bHaBy?qs)
zjt&7HGJ@Kl?T}6Z0RuyxTrC}A<8^Wg1VcSIxDVPno=u*&+Wy0U)>3^9%b?Eau`^c1
z>wrzV(=8@Bd(q)~qAmA)>}^#XOKLGP9t`Coo`O*9N15>8@guyWz4;=lYw=U?C61bu
z_bX94Xw|+NHG3=%Tli<CQ&R`!rmuSgY~~rc9!%22<PL>De*|aIznbFz$`LmpU3L1*
z<NHR1ZhlBp&Gn!?!4aaaNLzqz^eTh4BF{o!U2WBcao@pNyipTS^6C}(UN@CiKg@f=
zlGN1~9=`&)l0?Y+6$StlQ|`Onp<VkkpdPSa*2dCbuDtSjY8>n9d%Mg2{+R9Np)qKN
z5H+%k3!9~Uk0Db>2@vRj-k~ldmh3WUlS`#=a8GtpvP!=wQh%j1xH*_$KAL_HP#&lG
zOsUrT-DSyMi5D^G$`Gm(&gkDkG;o+7a-^flDI}3_w1gWUGnLE{W72sN2i^yY$J%IV
zYpYi1!$c0JxR5~wepOn=6NUf5I^N<&VQfqx9t_k*9&f8C1xCFl=(Q4%0w|eS>FM!}
zO(Z4zT?%8xxK$d%(zXnV1}H<OTlxt1{79A)6LGgZk6HiA1q^>xBEGk>vML@DU*Irk
z>nb_0CZ6$C`$Ho@P0ej-Q-$r;XCY%9s~G*F%X{OeZw}Er>Ma?xc~A+j4(4UyWTKr)
z4cfWaY(!!egh*7E+Os4Yy9(I86dQ|V+=i}TuzV|*fp1e@p{6F){q0l6w^!ZZ*RaF<
z>Q_Ko(q8Vn47AfOo+WFyy%HHFde+CW`*sVZx-M0Eia5HcL`udIW`x}iRhhPD87$^_
z`Y6|?9M8eWu4a~!5!r)wxj4#);>L#c%kty*eP5$!t%2fM0R*Q=2;{B9mRvf&+YkLR
z<(#{0iBSK${D4Rjp)U@yE!b*~ju&M*^&5`E$y^@{U=Wn^8GxV&n(^q@M@L71nLd-r
z74@Qlr$Q|F?VK$cj?YdCXjrpPpGv<si%qCBIu@7eFSodb0wOmOzZKMk5seo6&0<M4
zYs#|VgxSHnOQG+_X#yV3gYm;9>Se`^FPd0DXJz-hAzH}*&j?fn3aN;Afvi@KYcpkG
zT16Cb+Qd(NK^mJ}(lF?o(2D8&ps52aW^3#U8?=IAdLhcWy^|9=2ZtCMZHzJG#p(Gs
zi@lMwdtYA>(9|awPJodA&NSaoC$xOC7N8ML4zros8<~O4tjn6WpIU%!b$KxF^UE1z
zaJJmSIK3`AiZc&zC~tRi`0P<Sxi=;8?Utcw@gxikgbvhGQwgJ~r%Rax>CQ6FAd|5(
zkk}$6y;=94fV#$E()Q&d=b>E*tw127B?c);x5?3IGM_|CGZ8WS!u5z{Mqf3}rC`qM
zgXgm9Zx5;we)Y7Xw?$?2H8hGP@2*vm3Yqj_X?kSgQu)-eo9#?Yn3`=NRm0txO~oZs
zob*L9{0h(4S3Phn3{4Prg<?P64@F2#WE2F!LW*z{UTnqDuIQOECHX36mpH{%k=A6`
zglZCj#>s`>e!kNWW<U;Bg$e)QQpBvoSL=7<7)M{{X<mJj%`Q%<>hhhI-`jJo6>p>Q
zb22AXE=${uXyf@Y5RHN2d3ntK-0dNArI@Zy+t|?XmXA99H-L5=XpQ}rj@EomdlS{B
zC4gWPblUqdQw(|<$uL~1iq+uu9H~g<Wk{il!c=KegB2=jB;X9R6mq@;iZHK7s<51^
z>dSgQhxy2WWml5WLzJtOh<F%;ptkt*a(4ZbjSUXVla6z@QV@_rv&B<{p7|@(%lNLY
zZV9+Q(XxnzRGlohdN6$X^z?8mp)P8s()i0?blI6aPcs@)P3CU{7}}+3Qw=30)@*8M
z*4~IT$vwqF)B^E2zl4pB>~}6l&$|TyH(51RRg&IAql%Z!;lKZMhib$y;rSZG(PIGx
z`*3|dbY%jAW`tS4MTU2R{TIDD<MqLO=w!iYPF;F>g;Gf}7lz`f^XI<p)m1u0^$M*T
z`f7)xqfzBmjf$26#pm0-=@gl6;4dJ?$HzuP`{8!3z*A3tlbBp9VTFk&#Q2rda?cvG
z*fXasMF#-a6p$y>me0Ir%b|dG;w>d5=E|FF8UNukemBpmAk>VgV;Re2=}95;?vkI+
z>9&pZ@u}FYRuJT0UDt<QZ92vKrPAB!g$lN@GzT4SF4I|wmMx?OGum}}7@>;6C~;lY
zFN=p(JB@=AV$k<wyWeVuw%;R|FHX^85L7hr4@DAn4~-PdE`+Uocg?ksp$d`=t|E|d
zjlF41NnDa}`noeGUpzQxafYZS5lMAkQXY24yxT8`t<1c!zJ7d=+8AnLIo87RkR=AY
zKU0>|;-5y9jqjGFT;z7XwODT#H)-7CS>^g=Eu0(yn{f`X0w!~@gH2QAdLFaoL<27~
zF88>iu6=)&*MC{>*{LYitkNyClk(kB=!pT4&T_sQ=2Zb8MFH0-Unms~QULR$EyTp+
z2$3q&2vS-Z;;=nJW*<``Jm-9O@!l;%(Ge3!!Vb4*rnf4lwSKUu^u3`G_+0iQsq^-C
zfN2AnEkT3@!EUNh8K@E-*GGsb>Uw7=zYakZ1O2mAckVa;sp9}VM$h12ltS`_K&KF|
z!(64|`F6>g;w2N0dw-I&1Tf|Fbaom6)lVvda#`Th`Bpeco7k3t6>zPz0NB+(?W0R0
zUJ_Bq8cS_*nVEcsD6t-nXBKSl0~KPGz!mmdkZM3+VmUQ0fu(h(Z1L`{mS-6f`!O6}
z4UijTLD{cfy_zkZ4@<=*=kvJt1PPN_wGSqgj246(;Wt_xofMV45DG>@4zon1NB!Zc
zmUaGO-|u!SZ9(wRdP_}CKRdNUSFf*9?DD;DH{oy+o}2Sd2IBTlWy=YJZU<RH(JHwt
zG8g<vt(K~cGXS3y9Q=N|80(#r6@`x&5Xk&)0kt6X!1~f5g19^Kj`u+q@iNaAumQoS
zPIngp*0Z+QEczFH(J?oq()*XkE0YrwqBV86Um280g{*WcKdu2Wru_8M8W33CF+BNF
z%ChmL2uMgz59fvu8t}dRSqVzS`T^_(rP*I;iQIxpu(X9rQf4w2V|Ssk?@DF27m2!j
ziBR=@8Ei#&bL^;!ldeT+xvf$9tFjznta$2Tw4<`Pj@fTie&iF%)s1&1ozi-`fxCBI
znrRozxM(Uzmm{x4-?|)mPUa8CLT8!@Lz4VndsPGWDA!cIP-*q2uNOOaOgyt5xBG>8
z@*uz4S)uUDX^BuEPK;Kx;nRHQu>Gw8WYg$L8DYTD49?Brx_RexE-Y+y1shYz#w%?>
zLqh{?NS7m7?P7oS8gP+g4|t-L3!r^=lYo}jG#k$r;<EEk<Rk?~kfo-}<KOT3W8Ak#
z4k6*En~wW4#>dMWipEmDh}aMLznLhQCYJqTSH8EHA?2GALg4XW^Y^vcfyJ*{)E!C`
z{)?)(IP|NQTo#FvuD-(e#%6Mwnhj-TmpY3q^nQ+b+3%L>9L3$w-YS;eLVD%o<zox_
zJhQjn+YN_AV&dRbIMLw)wkGNTJ)N$MO^X)VFg<SCCqXX8gYT9qms6halo?8NAl(rQ
z?JP<;+a=5SP#fwslJpf7=X!VO^V3#JMcgmafV+4txcVr9sj$}pdsnA^`HIiuJw57f
z$9}NEIIoD<j2i6so#8F{C@(-~Un1_O4Jft6W)~JbB{Ix|siH~H>v86YRMyli)|k)s
zl3e%9RkCvc#t)cDm>=}^dEolrPc?p7mrOnf{bRG|E&H$qt5#vpL|$l|EIw%a39D!a
zL{LtS+n?<n96q?y6u$2c!HUN3-j>(kOk_^Jj``^?2TyL;cQ1#wX+cfh(=X{K`pA%r
zg<NcoKR-X8o7Wy-izhSV_S27^iXg=jJnE!py`MXtspM1m_wOus-ua`7wsEx*^00+c
zp^F@T!o+*;WJooZ864g9giRppIjiIK+2-JEMJu`=7UNDa-dC#2yG!dZSPGuR3xqA#
z{>jP7&d!P9GEMDrtFI(4U9Qc+N0j$63@ZYvARsIlm41%T&-2cw2a(g#_Wk+=Mb+HU
zu(QY6-q+XH8%aWdhqvyK*LJ1aN2c<ykBIr%l}8WbGFU(m1;s6ijB=tZ%oHwI5O)ae
z4JsbhK<NQC+QhreHb(uHcApoLlbe^Q)!M46oTAq)ZilREBVVJWgFqZG_kN9X?W09k
zZt5qIr=Z9gGJs+YuOxRPWXuuCF8vyxmzpjg>+!K>^rvn2l=K*^SkSXP@RP<ie?+x1
zG{nZnF8^&tvHub4uTQ`tik6|zqf|<2f6dBEoEL%H<I@9(){m=eSN}D%bO7_JJ<fwW
zJ}$1Nb}}q9bTDI}+D8d~kH1efGyU{%^yW!?9`^4u$%lh7`nva;+0vd?qn_o{99e<4
zRr!d#!qFV`b#I4fXN5w~{AsZRjKP~%lu5-(j8y}_(u#a%2JL-RP{zk~MZ3UCkJ`6T
zM-hT>H$rRe{YYf!%CG6(i&9XCffW4n=byqti?q~0e^Dh&1o0}`)LoHmMykc?+FDa#
z;Y!j0uF4MM8pY!$7{o=b9j_(+P`e9-W9X;IfA+EtYh-lgata?|WMpI}#vyrm`OaSy
zXuyWjZ7N6|yYzvA!mq{626-xxm~w!x+A9mIx4ZlPt_`@X6b4(JA@<B0uhEf>exj#%
zxnHx`yXD5|!|a#6?Irqv!ky{-jZeVhCs-=l^$k1PSKMA+UJML=H#axXT+zJtE+rND
z*DNC9T9Of+i76?Pl9Ci0k;=qCBmqqgx4>Q0$7@U?A`EnNJZx-RQ&USTtJJDriY6Yn
zrOIJBaUH+KUVq`wVJ%=A!&p!5E<$<aVx3y8AUqb6Zo~n9L|YToL`Bk|{nu71qaH!H
zi*c{M<?;_;qpxbgf$@^wfN=sgR1@07q+g1$S8vebD^EjKcWLe-y~HUMJBOF$kONZu
z3N;wpJf=0@Aqu3C_;h`ZvS)eipZi{8Nvg+J{5YMx8lxgV#$QPJDr@nV;+(#HYN_B8
zBq;0+dJ$_B#XzIUwe)f^0TFdpGZ}IAfpC3LMrG^9TP?2#^nZ5fJ2YB7sw>;wUpeQj
zUk|Cw`zH*o|5=<bL=3^+AI|ARuF3x2^Fy;^YSEFAiJ+N&OHWTH{pac~ji!2O__1Nm
zvHN7oxK*l+oLv&lGz_?wZCUo3sT@o2t*x2=dAOzP|9Y1Lj!3B*Zi~kcpxnR6A%8!@
z-3hkSrgSWOle6fb6&cxHQ<L-WbqC5E-B8G~JK7cShUZ2tq8yQQFzZTSdc)n&*nz<r
zJsM?~ku<guJboI+GC)5#itx!e4E~>6+)={(rJ-hQqSx1PQd6c+#=finF{L|-^1LMb
z&TY+tcPgzsU^Umn%?AAP;L4@oLxfWlGINhwhWTXqKb~`NcYT^L>|=B!sXJ_C-v7AM
zC*X-p;7pJC+11fnq3mUi<^H`utQ+4T8bY>9z#_rF&!(_LO*)kLJ%U_N-{eViQq(OV
ztIc)oeua>qDOK?%06{<c`!b@PogHtqkdJq?B_PI23JSJk>0*GV*<a!I?yje|7kD-n
z=jSa)A|oPzU+||t@N2fUF(0cJ!@<KNqoT?-SrLVVgaEvO$#=){*M095Rh?UsAgNaZ
zIhq#VdYqCkC8X4jeY8^`maQ_%wD_Qp)(W7g9)n75q9@=csq~H|kQ|Pez4)b#Fe?7b
z1sEA)pms{q-W=AiFzMd(cK8MPmjiYYCeG1;VfE-q&fy8TYfT=#JSX@*o}a8zr~-Q-
zW%wX~hy<J0M~_u~>}MY^nf9n1hkJXkI|HVkYNU-a_}#EYD*o>3!1A)WaG_2H7rOJ-
zx1H9-hA%Pft=^BXqlrN?Q><N!Pu#cE&kHOKE1u_0z-gV#X~|eEDJ~9ty2j#LK+(jV
zUaq&x=!3aB;JpA`)ETChy5gwD(Gjr>Zbd->Q1xThdq?5^4jUXCLczmDF5|p3G?JU#
zFmQ4}6LQ4#5W?6G3>i`LPrpl?0BuD92^BMIVfh@Jiqj4qE*?ZaBg7CHTKP387ieX$
z<-%~;2z}UyaByhY&CfQDpYN=rfh(hr9hiLPD-ClpIZv*A9PY1L`J9Re3q~{AA6A1h
z0G)a|Dzr}{pL`1_Ro-@mG<=}4hD1c5|2=8*bFgpF@bMu+ije#~i6u&@pn0952s(+g
zlWXI@f{!W3czHG?9B1@VywwM%r}<1fgdRq1(i8#mihC_0fpp+2=*?W+-IEg&!$_XP
ztE#H%>#u<?xi-Gh=edJtB@DD^b$))vW!g?pcl&mDoWLuZBN?u3pY)wdHi2I4^{T0f
z2_^LjU=rWtm#7wn>;jXaHTGPS6Twg_n{m9S`_5QamRL|@V;rq|DbN@N0N<J7o(7Z>
z-*y9^$8df-Rx0rIpDrd>HI?V9H>JXG-PXF^n>r=p;TF0d|Mc}^^;+%h{xJ*90leIs
zJ3GHiwL({X3=(_d^1WWlgNC`|`{lk5B}Qf6!Ena2Y>uQnAyFD@yHun;koDi#f#vjq
zh4tV!fgen$C^Bfj`eC_FqxjSWIB*7y@&vce?^H{w*XwQ<;(w34sqyheHhVYG({XMG
zLV0ofO6`-~$X3Z(hjsKz$-A{7<1Zb0VK&U=?KkZSeCluR+}BFv$=^_1){6_uj+f-m
zxrwEE6l=eY41h#nb)T0k>*PhvIm=)2P%G$qGeg*giCMHO^p}8+wR$|B)64y7ZtRC8
zhN*9X;u88ZsAN04yPN$n+grma2A-#zfKdSr{X2Sk87(9c35&u#Bu;3ozut04SQtAO
zSD9uNxr!T5bPpHnBX!@f4V|vju#T4|Sup|s!_jmJ&nqm|7cfWjHQRqW{J=kb8q4&S
zaeCUx0i4t*vu?u)2+7CWZIXWG8bJDDhW^B=VlMt+)I9)PFShg5cqH;g#r~FfEBSfA
zxb0o0T?_is@V2%mJgyd^stX;B<Q^DK`7}P8-HAMacz_GJx?Ur|0d$U9z|pR**XHTw
ze+u4K)D`%(+<5AZ$V~yg^S5(3a~w)kwE0weveNYfu*04z4+V@&$jC@YCl^2>GaZb7
z^Y3I&zZ*ttyR-`Ua!SszMe?T3?3oCTKF(fM!pndY14FxnSQ@Hnp(p}Tpn$lcLRU%E
z9*Zp6=o(pBizw5`*P3{5Cz>`57=A&|85j&!blnaxXD2Qoc2-xP^^WQswwWQX!RkGp
ztUltfq*oZUqeMe>;!?gSkWX<xU2|)ki=m0sZ@Y*x49t%dQr8RE1bBR4Qy<VA^s2Xo
z-vR#yfVdkl!=d>xX<uxgZy(XF0(o4b4Dfqpsmt-InwmGj{8Cx&^Q7f;wo#Oem^lX=
zcN9nXf)5{1Be#i(M_;25LX6PEK*qu+!C<JaRnud11RZ!{`G*2$eCux)q~CZjA-!Px
z*tUa6yjwua4wgM0hLcIJ=@ZCUfq{V~8qXhUt<;8qRehma;&OV`;PcV%B)|>>5db-w
zOw=)&-shR;_Iz>B5<14&nfpw%6zGrlS45I%7M4k_Y?@M19zxGNf9n}7fk(khvTC2n
z>!<66ThYt0)bqCv^_i}Cr0N+sMD)Srw@)dSW~FxoZ=!GJTx3hz3;DV(oGL$GV_@m2
zzFbv9o&MD$hgpMTn)=3ABKv~Regp2io~RR20sZMxoee=&2!<%2cNuVm%a2!o1ts1*
zUc-RIoM^GqMwHKEv!K-CditX@8#FU82$;f|wZ^>)yypArYH$mnAId_(q@bYKpRHJ_
zFff321?Y~$T%mWRm!8gcW_*0S)@oWDUb;G*_%X>WTjhH<A1^PN?T_l}A9Zz4y9K=9
z;36X;0s_mk+BCn4IzB$W{qd@V=o>vjN~420C^(rYz%4B|C^M<gKuH6HV8q+ndW&(<
zk*Uc^DKG!K;!2Pj;PwEe3&ujmN7CK_UHatL-VZZily^DX&;mgL1$(7prmdwF0DUf+
z1CDQOnb%tlyg2nVoOIu{_2lQ_#%Jvte~3^-$p~2&6e1%Z8F{uE3)u<7cB#9rJ&p+a
znr}UQA}5<Fk-SXo%QIJH3=E9iGGakbOe`!L8ygDFaxQn^=*x=uCKE?r)KcQ}><xUK
zRkgM9gY;<i7kkqf7&>)@%zD7uxDLo8<9sAI76bJq#8u#V01D*y$h~Q6a?8LZRAPSV
zRug|UXJ<EJ0e4QjWtP{kpIulROPvD{u)@N_Hwig7YCykMWY84*$<ng)eefHq*c65}
zj}j#jr;0>CVdR?TS(ajv4*}N?L!^;}WARXZUETNH8DP9<Y{CX39o@hYpB%qvM%pIt
zZr7tIxXbbRqn(b<KHxB+@HBWo7?8;B!T+tOpAN(j;f&Y1TKs}xePn`;iX$i<^Ydt}
zSO(q!qAhq{?~Q@zAC2E4ac^4wl)Hzt6ETG1*r_H-W?vwnqOP=hL@KSwR;uI;oS_pE
zQcmFrMkk3;R-E9xl$$UXnN$d50|N-BmzPUzUhnb=xU6W;!?Uu2PvzK<nWlz@hgDd(
zfoV*7&2Viy!v_Tg<>@&xznHs|X*h|RI)9HVkV;1z-#WX?{(E%vo~5d)iMD$3l{Og+
zJq?g~a(JI-4YrS$TT8TR^5O7DQ+dxpE{&sAMldLqRs)GI`f@sX_dqujG~{4lB0M;_
z)t&1!a}ta`F*5#zuGLkjOr-v@qg~PW&jPL2GI9%9A$L!BlutLBuCSpQDAa9^=Xnr_
za)8hB-tuukLGj=ytAI3Kjopg3n+=wfRBxo96)B0WZL#b;IR~|(Mv1<jlNuFt(DL&0
zQuk3;a11cMg-0sx<Ne5!O(<5$Lx=~S=`mlZ;xes3h*DW{v1h5vVjYuqq}gzCYwZS@
zK$`-CBhiPTrgLr&8f_MNy&*3I93Nc<Z4u|p1{l>Du;Eq8*M<4+ZK-9sVC}Tl#g-)U
zcs5w2nEqgZ2y}??2%^Q-Rs&Fq>P`B;!~OYdt;?kc(-P_F!P~U%Zmr9ehACTzu;@qh
ziUI<y{{}LZxvvGGI*}9960n9_Y(u*mhM#%N2Naa;>NFk5PIr@fvyWBAw|K@swcUJ5
zbH$2%E5xkNnZe@DqTm^FgLZs(2q7JK;YQNVZaTp4b%#41;Q717trd(ytgYloqTA2S
zZ+3LKtjLRBkWck`I`7Z40z3$e7(YJ%B&?NeKb&ZCxtkO6qTXiF`*cl$fuRI&F#Wfn
z`u$u1nU=xD!1dv#Uy6haU%)*~eS$>`V(xu^s9|ylY`6Km?ansS!>k}c8-U@E*L*y?
zou6NIwxvjo;ZzV0*#DBJ6^!LyK|z^~$hGM7bO!kJ?H8#72LTg<ylmM<P%&^~15Ps(
zlkOX&)#v%;S)ZDxQ#d{solYJ9ngehzc9nyqrm8`wlv^wvEqZ-Svz$h5r{4?$5Rke&
zw6wUE{bE51H+Oe&bUA#)xV}d*G@}SO&RG8eh4)BsB=;sK)EIaem>t$ZD(av<@VP3*
zmF`cyzyD6D*IXQ-419DC!0CH&d8twH1dBeqP`e+3!!loGybah=a+xCKoWK^=qLLEp
z;pF1VT)k!#`D9Mn-HA-VKXS0M|INzSJHH!a8XFr^BbD|R?P$cMq+AZ>ihw%?c*B65
zU>O{~mX?+YSA%<Su)+wg<7VV?589r+-%tmll4#YK+4xr&_ZG(|aao(4uGuD&IGk<J
zAro-7ffdEKRsr?k_S}c=L%wbRLR{OEwo^TP?%Cc{QCfUlex5o41H)e(l>DR_jCO&_
z%vu0i5XB5ZCl{Aqk02zxg=$j<H<w<JrI=LIawJXteSrSpf7j9r=8;-lS8soz3dyJQ
z@9#|${0h8Gm?dp>+9y^ocJo8{mznxL0{1=nWYoT<XOA>mD~8y9H+l8Ikfp1Nrlx;w
zZQdA6F09Lus@~Okg27h5$8S2cbtcV|cMFgf4#Q~j00vds<K5lMn^R-A?r{)Zj9O>)
zZ>GRXky*K){CW9ZPp`?buBIl1!@OL#R4MD5Js!xqz*ap_QZtnHuHa+Gw}Cx;PK&R!
zn_wyw(gq-N(4X^3#UP+Ydb&x-GXZ5sh@HLqeGGLn9T(*_fF#t4?t~m$9I~?08bI3>
z`0(Ka<qP1rTHoFd`uOQ!jzubxIIjhf4Od^nGk~@P08k)m%C=HVivn4H=Q@ZaA0WQz
z$w>~N6967uuksI%zfJW}eL3eP3=loPbure(9Jk%87b=`P^l-Ar168<Cuh|(C2R`S6
zn?D_optvqKeEIcjT>_Z%tDN12(^WIwJ37d~j<6WC{ZKMU&38WB3&)=Z9y;$|fllWe
zRWYHUf`MM57;tl7T!OoxK-ZS+*VtruXlTiEjh0C%>3~&!;M&w29GDXwg7p^^d>R>v
zSQ7v(x$Esj%|{UparyTK5`E|-BndsTk<<*Nq@<LT(5n_(?X>bwPfvR($MaP8^xle<
z%OKJUN~mv;-EPmQUU5HS9;qeY$xK!Y(<^Onj|u?CUd*x_ITe_r78Gog2*H%GeCe4D
z^iJ}xJltE-cz^o>>n3=(_4RewQqI;#88p*cdzh|}r)a)@w6>N1OrGzwPImD6R~zWp
zYo?M8xZBH4+ROky6@XPP6T=dwWABc&c>`TO=9ijf((tK53_1Tp6kq_N;E=JaA)h}u
zs(MC4-k7K~iTEE)Gl852<3E;X@7Rvd|2eiAp^o{JvAr?I-}n}fwG0%M8k6E-WyPIl
zrEiZLZ^@DT0{=}~<KnVwu7_=@xMyc$E&JcCl)HcEb3&kN!DQdp&sCerr%45Yik>jX
z5+ZnJR<t4Wp-mFT(YQZ2aM<yu42Anj0N?a?p1xr4tI`7j#sGox*HmnAJn~;cUR<p{
z@JojOnXYe49YMj1Gf5y4$vo&qbb`=A*u?{Vw9pa$J{vuH%uSe<ZplT`FZO*MSGmJ~
zxqvXJe{@Q<LOirT!qwKl|AAC9E&X=>?~p&?KgtSx@c-RI{;^r4*^Kc~QKS%BQ+Idw
zH9bQQN*SU>3gxR)+XV_J(d^RfgY7p{(AS>g&x%LeoY&4;_1nh(-#yHWIUj|kV<p}^
zVPRkZ${GB{z`?;GAsN*pj`r6}0TREjuP?CA6cq(WM;lH&W|UV7yvd6=jHbPJO*m8r
zKT42mJW!5u-*|EYcd!k_1|}w^v0`MTi<Ql+x8n173vhhCJBVPe7xwjQ!_mK7u0Y0e
zyFc^aSAqGTkC{W=y0c@EWewhjnwq*_9fv{~KuSl6`1huV;>rJ+%@0uM*CTSa@94;4
ztE!q&kGJ^s4YK^Y_1B*$B?>VyYirqq2gmAB@Wlpj>!h*|C>R!Uu)&mdZv+t-?pp%@
z8xXgkPg<xlhUKW~nmIZ?Zns&y0z5m#GLvq@XD|r_hDgZ_lDQ9IX=n<-<jFYW-deXT
z=>CX!Y)eB!L)p)VQ@(<^QA_3-kPlFZ_;RbSK!4AydsCn;FqptnP|G(E;7E)%&`K2O
z@Xb$5PEOv&rW6`IPwJzRw5myNZEaj|@E7W9w@;DcNnKacv0gis0@QhfasbBx`;?GU
zv-9vwna=Hfdq)h9-EtTq?<*D<XlO>w%CVoq?Z6(IpP#=ynqdH{N2Q?{@Q^Z3R4Ak^
zKz249ms@UC44P|d&cOqfKS5s%X8V{5%1Uo!#rg6N4#BS&u=yJs8Ztv@)5heHI5>qV
z0O{Q$sAzH#3lA1+=<litI!+VE<kfs-WoAA)S^WjFC>SL!NcH=P>VSr@Fh5WB1&5H3
z)BAx3KuXsl(SS3Dtsw#X4U3*vogfJ%(0!mjv`#<-X08`Lwae1E81{BJ0F7W`cD52J
zoAqt^<;T)Q0-S0^6SwR|yhsuK_ZXRyB-usMjcW<-Y;Ix^5NH4tVX6Quo+nY0fDO31
zx?;zN2IrB7ryh(r1S54c0V$HM0GLV43=O027J{qsubfX$Pr;eU&!_&qh;I4@Us+C$
z5g)Th<nr>8W9+4=2jv9TzvB>d$VLS+(&NL!3C?aqto|_Qfwu@50cTE(j-HijlIYyW
zvqn}RbpHv{sB>yoAvW)+)l8dGk_xm86cF0U$`X&q1)O1od$=DJKaS7mh=U#f#X#R@
z54nJmziXg|vke9k!C8t*rKq5yVhLQ|*#WdiQ6qo+kE*H>VNN)JZ^|_)(o-d?Ps^-v
z0HJ?$$ohasOl)amLkE$T8p{+F`xRRvS+Log3c@S&-vZ%TL>5ir@U876uFTEtfPp^v
z=VeVt(3^wdMMOBbF2{~<FprOqOG`_evSegrpbPpb7fmK9*<<!BT6a-qO*5b}w+F~%
zV8w8Qu^}fC^%JcTU6+v_eJq|Q4z7OnHv*%pt`ZT_OySTIYXJ^F-(mtYfF+t$-y$QA
z!K4;jG)?3l>j<Bdl|hrE<?h5LGX4|?2ZxZym9Cte98l+C>tSJF^xD1k6c!iXy?ytt
ze-}()5Bw4d*i+%e+JOEZKF|s5=nh}Ly!Sd3*OJlaA08S~MT=I*(#rbMPa!e^`Tu>{
zu}vGAz1a$ogIs`{0}Q*88vqyZFbdJaU;^lFgdQDnU)2FqP<KxcCcUafUsOjj5AMZ@
zYnA7%3@`W<0x|RLE*-?9-;J_bW+SOu_G=)BUHf)lBkv8`t7yGb##Xki0SD9Ew0l*N
zoCu6Vqkvz;z=(nM%k@@80;>^k^fwqLrioW%dU^5_0B8bQ&-XGdPfz}0Tfhib%h6lY
zOvK(2Ob*siL>&Rb84OZcTUd}nq+Q110OqW(sp-*QFH89FH>y-Xu+K|1Ev)P8vWpc;
zZ_d5&;);%QHF?!)Y+rBwF{+k;TbbG4ETAWD*&!Yrs{h##->bwBMtHbjdsH{ou(739
zkzi@El(>n3<q)t|`~MEcu1#c-G05CnP59|#*(P~B6l4(E!G8}mSsBT#0YL~{n<@Z<
zm|{x_2UlZqya7_%-~H|Y!q~sd6ycx3@_*<DXV@{tW5Xq+q`+yJUtC0#@dLZ)?g5&y
zCD|m0r-uO0nt*}f%e`q1yZ=SqTgGL%Ztc5@BAwDm3j%_qDBXg9G}7H6D1y>RcL_*O
zx+Nu~MY_ACq`SNJV9xj5`~PWw-M{^9&AH}WKI?hz`?|(B$9W!Orq*-SRZ>#&*SEE~
zxs;;54{D%@>-;pO?hNgBy@X^RWN_vd7Zr2laU>+Np)K$1>yuNT1D)`;KMV}ST`PGv
z_37hBX+B6EH#Idq*X8-R{M`iwOIKGn;>f_z5E97x_6aX+2Apz1PmR4fThR?X6!HKJ
z0|}o)JGjl35(RIxhCy}TsZThCL=~cfuX2F~ndSnB`p->!<2VR8K+yFucXxN6c;9ao
zSwB5A^yA}7AtLHe5cR(ax_f}UJq^~@RXjJ;;^Y0Lr-8wfpo9-zmXiY{gMirc*gufp
zVOJh|t-WSezTwn>3AHb#Z@wjnF#cfrkCdLkgGVh>_mPm&FCi2V$oc*QgTFytZLPN~
zNOCdz&f-x_P*F?_^rtq}pZ@J?@(Uv(B7*b*LE{uy_%tf43dBAn@qW&IThO}D7AEfN
z?duEHZ@G`Xtsx1`HO6LU<G@~!v6`(H{U{)?0J0U^K)EGh1Udct<4tu)RjQO4p>Uf*
zM*Ec4u=OyAu#baZa);c>!+w2us=>V>B*Y$WOqdMHCGm_D>(dx_Qzx`XwiW(vU}9!w
zyN$%}n^)Nyi~H(np)@FfV;o<MXTP3Hc{92-<l>c4J6w4RZoad!ht{l=k2^nsruW07
zM?>cFc&Z50LkKg!U+P?f6qaEWjw4EhIS6Oi>#1*zF?}VWsWo}`&dbliuiAbiumRd$
zC`IK>sL@-MluO}0q)vK(LGsdm9d9Xzk9(CD64m!dJXe#NiqWbQ;MuBiJUBnz(&Xp+
zL&|lDOzZ_N9a?R*r;V{z^=v_qLE5}L`?0S82FFzLR}pgXYyy|W@8oAH94H6<siK~%
z_cAZO?AqDFy*}}cIZu=xo&o`f-6v4D#6Hvc^X~dGna#s3BRN@j?=P*fbunZuZM8mj
z$Fi_~Yz<bw`BscC2OUMcRdOlB7v8>oJ6;KQd^<PPArd7NuEUf90<s@F;F@>8K8wMB
z`u3AOGw56~@RD?#f$A@E29GA7gPi*QsY^;itFRa$8QLF#!NkG{Jf}HPL-npm-C&#W
zefws8v|wRz5s!f26NHkC>5gkor*f4fh{uw6?45pn@c?oNvwG=ajzThn{Wr@verHT_
z2hegEV%5`MF?SyxA75Wzbj13Hg|&4<B392$Qql}&7;NBaP*NZB$Dv^}g)`lg9!;y(
zK_RE|<3xBw^EISf+;3ckd*Vl08n$xelHH)w$dOM~OcfD#JDr#429^qcg^KgVrP=S!
z2Q0&F_F&I`J&<M%pZ{XNtEenge@F{17-N`c&>w_DF(`Qb@+v)ygqw%wxmo}FzJG!b
z6O_&wzKj*=LcMgyQtS+RYDiSFm>4jFWF+P)^o!J`73E<)zL+{o5Z5p~@bfGr+EUr(
zde?_*93;;z{w^*Cnm}Jo!cF0v=5Y^6-vH`EdR^{ECQF^}Ja((z@hQxG2`?xNOXD-o
zPEYN&ChLUm#?ZZqzdGn+?1@pl!TDv4lT2bS)TVcS7zg@n$LMjNAYm#yvql*z2F61%
z3m!~lfCx-yy{XB-A|>VZ^${}%;T!+*c9gL!6C5nydVbqgt}1<_SJ3J$tE^;E%wVN!
z4Y@6qI6rS|flK5xfa1mW2IK<X#O{WGcfB;<Y%l}m6F$T^V&s<g(!dix_QxG;wpqYS
zfI6_Eqy)5tZg_{mZFjR8!H5m%Lt(Y0`FXbYb5BloX0cFE1U~$I{K*C?c?bNv<T@D0
z$jX6ESCgb4ziuaD@7u2ps)JWhMkZFT;pgWaw^SY-<!HWI$ZllICIOv7B~`=`67n#=
zcy2zZ{EcSJv;Xt@usM)Jva(EK1LQ*DK79CacCeyapNUH=h4=JrcV}lQbm9*7V70Ur
zsHe|(Js=H_PbOt2LZ(zSZk}jNjP+!h`X^eppI&^QhO+WLJemjvEx?Nk3;KI^_ZyI0
zK@qSa%KjCO@ol!j{bsIF)L6j`4S+jZ4Q^guUZP;&hjXr<?|GB>T1R9y$PS_}K1`P7
zf->_vydSc$acqWks72Z}$1t~nlcMC)7Ec6u?loTXXweOhKvGbUbpBiBomuxUp_@?T
z6ny_au)R1nfIC2rs6fzFjZtpYp$J_(r1?57&l(=P;?sng86zX(xPN0*!QFt*F+S_g
z(kdN~nC4PunJSQO1MyC%UvuGS)6?q*q4HJOwagD8Zx{F*_O^^LyWnODm`+SgJ`cMS
zNXE4}1eae5CVaVZ@I-`DiAG|g8oCFPi-57~RTi9~_aov%?}==7)5#D~;Nhk4!GOW%
zY<v}mz~m*Jn9crpiJ@8G&OSCt+6jW-_V_T)QAc40LP=zLd_ln$5VofO{PAA@QZ@}D
zscdAEto2|<z^d@|ZWC6+%{8xQBFrs8?d6|PX>M*VvmASS={!u2i##rxatR%XWvCJW
z1C9pLB_f}=yYDaV!3Y2pQ5Pm|AVhT{j2pg*V?P6DJ{HAHWqJ9*(NXkSxLpLzE%72|
zdI^$fhz}mjEewBGzb6NBmG4>2Co0RI3xk<xpue<)KAN^%+5+!5=r-`>;-u;J7yt{v
z!{&8s(<#12rR;N^i@mlwAD%A8m_}r_Pl0fEd~55+U3*l~1SwxCB2kOqEt!-Lb|QHC
zJ0Ivp&XgJtwFIreSMQPCuCO^?as>xC@F1K#;Mx6s$4|b}XLt8Kr)aG=!5G|lVxN_=
zWQLefpRSLWMDi3TdOYG?wwkF$OlKyNt%j=sY-yp7xV^QOU_cyWoTb1hhzS4F;xd}h
zbpdpMNw?l=W3)%t?aar=N8Ibd(cXqP;^yW)(fzV_|EmS0(7Iip5eY}Nlv<01_#@xU
z`<aik^d((9{2H!NM6KsVEglFEuGQ6nCisM`?Cj?tHqXq=oFe{OFP4Fzle}9bT?pLt
z08B`Pmag1V6(Cy<3$6B>JrS(6_8Z?6^&+UnOOzlFJ}4*HBi^7|MX$jqh(LrcUZS?M
zHuOXRX*dHwNyuNyLuK0pNQk8&aRLc-{r6JXSJEeb!K3-AFV<x2+Sv&n8q{VRw)GMv
zG|mE!2dG^9HAz8o8Jhc6Jfh`xbsw7j=YiMpdwjmkTu{%H!+t#~D(1~Ez3jNS33x+`
z+kSsBc>n%AnDkk{<#I23{*xn5%Ncl^48bxreUjR#qw|)a9i9h2%q=z#R{RNZ8KV?O
z_z}y^2GVkV0rbn~{POjs_#}48BZCEKrPEddk>8G{f=H-gFZA-Z>gO!XH|`>UDHp%{
zH6MaW>h{y1$8l=V#XJ=){`|MO1axh~NP+ircNCG@HT1@^nBdCueoLu5mCdLGe7;cG
zJo(H$Qkr)}BqV{04OVDeTot0e=&jQ9>rg}fZuUXD(O$%UNBkNK{Rsv!yV2ola~Fz%
zWt*;1JKL})0YJCHa0tYL!LlKDkuABDodWEM(_pnVxaYi7l)tOZw^6uDI!8VpO#MD3
z&*tw{HU)g660dJDegk~xueh4#n*^g#Dj`1yzu+VDCTOdkFr#wp;o8Q+i!V;Az|YIe
zn~JJlMBhcJ7QK|;rL1i?+}Fo)L~&Q$Du{rYQ90*J_S?7L9EwhFlKo+#3kNj@#a%W=
zQU-HJ3BqWQm$_PZjAddAUxX4LaJM=G4eMZYVyMXvOJ6x%vvPaCmNE?s*U3*(O<(H(
zisLn>bhrY#D}<YTDfHdLJAVV52%1u1B_5a4_C~L~gA+(w=T_bM&ARFA&6q!$ZNI_g
zV7L99$M>N#-SC@dG@lJ|Jw?x+MY!z`vhPbO9LBaZj1ktsHKZl<_D)!``#*j#nyP-f
z^Jc7El+7uy2szmat^j0VEHWPNq^I>r!iQWM7fE(ozTp5Na4X1OL0hElFA!rCI#8xP
zR9f=(@URH`9(+Hw$?p|&wy`F?Vn*>GhB&5hj<4P}!*k(PdR}(|f@P`s&)YdOKg|ZH
zGjTf3wzuWPCo`^<zUY2MM00CG9^PqSv6?7ViJ)%T9pG%zPW!w-W|cGRdQy;|f6G+^
z|BUZ;4*Lx}JEy?!!Z8j_the9zG$>-ES?_#OIQSTNX^*en8{YnWPsQzV{LD`nZi(>o
zurFGwgFNlkuOS!sOD|mhYB?4)?IwoyE>%SXu<ZVRfSB%mkB4-@;BkK2ib)Ja1yo;I
zxRJdIO`-0DVf{I99MaMa7xSTVw&_nvP0$Pg@|>W{sbufvLYN@PPX%@|kc@;|*I=;J
zZp{`50c?7|QZCQX+MR#5<0d9*O_gteQuW5T4r<8eM}#q+Fj(PsWZyehB6@pvdBD;Y
z#i080y~5?+TBjooY-0~VqoEviY{zqy^u7P|Oszm8Bx=UT70%26LJ4l$MS2AC2u8=t
z$6PyLZKlSd!eUiQd9wcZuP4f5_<#Ac@GLy0P12{92<*i<>`$1O$~nfOEkmdueER$u
z0*=Kpv3QIblQ?NL-&H)Ih6@b-n(PEFDd_%1^6uxini7gJ05%}w^u{gvv{E(u&)j3$
z@dZ6RQLb0P5|l`%U@1UR`MbSU$ujhq*Ps0dGsH_!-3Qc%Ylp5(lS5iH+%DdE*p4-e
z_$b?mv5V#7j1(q~N}tvrWv6`J(W$hVg&gI^&kwp(348E1_at3JQaV-6H2Q*3mCfd#
zb!Ir}#p!h8!d$<}C;!Rlj_COz8S(oyTExZk4D517Zj)|z$otIr^>;~E*o_Ul-~Z}-
zR9<Z@&N+77@gx~}#I-=c^~Gn>tVfTf5k!{mqi_#$gZdS}@-Pbx7ZD2bBmr07;8|3>
z_hRqOEb=U-I83_1)kFcW>CuR)VM+e>U}k<;SeSg+R|~EHU~5n$H*W!yN!9-j4E(Xv
zAzuBI7F-lhSy{1hQfl{Zy-5!+FYou*K&j9!s2Bd49QnnEzbEhnk@6mQLFh951*^j@
zwr~`pQ5sfFB21z>3}1rPjg1Hgdp8T*1-8VZqAKe`uSZer$*<vb9nY1CV<&#2_uG3%
zQCAv}G0+Qt+8p;uZG%fbUEGYBvhQzGt8VR2QgS$9Ct#Xv@paJ00#7_B&zBjR4Mr^Y
z7J0Pad=dM`hwxx2f%*fvot7XK)A_EhZsa33%;!-JPf9U`g+1T~N5KliCRTy+ZZK0i
ziTmS&^je3>Y&jd@s623uppNkC5%4*FjaA`wIW2xvq%dhH1q$jdauSVzNqPAZzmxK%
zb4gs8s17v@@65&|*SfeZM{{I@T3+TZvqNu~$Z1YJh&ayQA^oO(fOZkv2<`X18f8B5
zKlFo4(a8u#ynE8+9~S8B-ovHJ4!^!Zd$w%u19xL2N;<muCpSYidzf6qTu{-0=nImb
z<Q@aZ(%L!vSdnW^-*IXLjq90oC)B&>fC}{yE-!Vt$J^mkV_FyBE?8>bo_2<Tr`5Zy
z;ukVk5<-O={i!r+HS!d{DT~Nd(p%jHaa_+`YV{h6AWI@@L(G;+IT&6a88w&#K}q-P
zD*06ePkyUWqIS46VH#x&4Jh=bPsStl%_vgIvP}ElYMVB|J=dP7x8c4Kw*k{X-3FZz
z$ucRkKR@?CU1bYRfLRmhx+z7q@8@?!>@Rj?;bMlSL>&AcT}ix^1MkQ<%_!ZpU|{&p
z$cV|m^bX)d<!9XmtE6MB$M5PL;;`X+KDBb2bx(G9L%2DD-3~CWaRTOe_mk<$+bUG>
zhLE?0kLW_I(-Jx`2>Ai)qK1!{L7hmh1p$p9r{Vw-R&?5P8%1sUJM1RiE0BtA?KNxi
z4H-u?FezO@vCM<`UUYPHZQy74763W;W%mA37G8%4I-mVIr#f-Z#eiG_mpzopPym35
z>&d5l=w0B!>nYUcosExs-2#^>AG9fl=;3F#BU(x+d@k8dt$ss5M@oT*gLRocOoo&-
z#T{56ita4Oghan%1zdR$+5v0{CIIXtLC!k##3~-cRy%J;csts3I%a1n5c8%kUK-zZ
zM4yV$b@QM<gl-xtZ=IS?&nHh|c02Z6os@`38A=Us3sT~T9qL^iuf24ofk$c+qvZ43
z>^&R3(^oS><p2xl2nR*Fbl&~)!z`TUl!BlP4AxA@M?4mr6gnu5fvd$Z8Qgyp&@Sqq
zRGRkbh<#{p!GD@XLfYbwJGtBu`2@6r=Xyedn|A$|ss$R;;P(Tx84PUz1vU8R55kpN
zrckhIb&a5S%cm_x3@x`kaf3dtXo|a+wdep%goYc6VSs5I0p$vEX#RKm0V~JQLPC<~
z>v4VUtN^*GJ>Fuo0o`Ob9vSRh<JZ3L!4wAYQ7$e=PV!H-KV(@*NfXwFZhOa8c&zr9
zdtSI*dP4?^QcO&Wm5%O#t3ef!Q@0s9)V!{i9%kgWBKh}$G2D(s{lnvTUlMOv7CYP;
zeD%OHiiuf)I>Y<?aX!36Bk(oy+jF*Do{`-GeC6AL;2C&%?*T*q!{^VRgGXht#84tC
zNDS%#JWUn^@y$i-rv`FfTeko>=mLNb5feiP|5%v`DjNe_NHd;PO&LW7heqJ#fSW}d
z90P!7z2!7n-BixXV%r#6TISb#s(-j|1MX_UD^4Wdis9M80?og&T|GSo1}%Y|m*7Zy
zrnXCp+PsVL%A%N8x5U5^3Ttt?!_5g%+4eBGD4tDU__aV;paj|wguSS-bStdX(N!+@
z+J0A>bm4s7nyEw6f9z|;`oLqGA$|mmARO<P8C%8NZmwP!;j@nZaKE_*pbwB`h}WzO
zT0r}Sm%_@>Fz635Pkj63&Sd#LbBxEL;rU{2r66u1<B2<E>?=V4W4gMWNb>6H#Alr2
z{Pa{dmX*Ay^M!2OKL2r5PDda<v0!%seaK9YZ{Vy)z{8uJJCDE;089(2kN$ryz;L0b
z8+>(C)X*DKWPrtM+-W41YF34Wm1q4fEIAZPPVsnXt|@@r=c_$a?^>hqBJ)@DQ`Mg}
zg14NgfB=;JM?@>p2TC_MLNf-7?Kq%foCXuISdSG>gD@63qlS>)9Yk>D5dgoTEJxq#
zsze>B%7Sj9`)=bOMspODX7-enpg09+!yiyNQc~_jC;+SGa3O36>_R@FCN-bP7F(p3
zq>1n#{4fPPoAb6?C+<P3+&`g$Cf$TYVvd(;&r>W-W583vVl3Ti7V;Jam)#E&Gc;Dd
zaFA~Jp5*?n^<l%!`Nj?)dj9&EtoBp+Qz0&?{WmA4eu!-cu?wnIR8-U+BL#-W2gG=I
z-mb4pi#lsMO^yn@vELiqZ=RSqE11@0o}ZtOf1+XZAfB&&%T8N_j`nm=OG^t_(i8%<
zJBy2t>75S_UEUcQ2GqWA8&sM_m=$(DJUD1tm3g4?=-i)0*QxsF%j^xc9-~w?1Ea@v
z%xH#5<L~sn`eYCl&lr%wY@Xl2MPF;Aub=9OgV|YCs^TouaWN^s=Li?G(qsX+SPTfW
z90yq*$guqhh^DLI3lv#V`sgUWE{LF`qvL-bC9ODs#I&`wS5UebK44_5H`F|X#$cau
zfrLRqztYa}c|iP?8%6RX?hnMhR6(Be;W#wPeqvquWSt&rGSEiSPy8;I66(VzzJzj?
zkbchp1?Us&aFT{gJ2_vp8&Q({@DjcDL33~W=jfoX0r12vz>A6e$5A{(l!#J>fdo&T
z0##~!uRZc;NLqCu<+M`U6j!8?S+n91?<e$o`e2DM<dj^?<PJ=JhTH_CAtpO2!zSw0
zx1DI+Mz5ed{$#;W_t<|X^`tyCEj^*rnszOM9a&wxlhekch!z@|?MeE3rH?83-p>ia
z&??+*I5wsjpliTIh#)U4EF53WmWc~289~Ko<a0Tl1G|QyXpvSG`|&%FSb)ChsP;hN
zZ=Ya(FV^-Sb$jMOMis_|9q7#|*bJIsHpIuL^H}pG0=GJX+jH!@5GSk!JvXlidv3f)
zcebeE`oU6}#mN5o(T1p>8?d8hsYS=r#GhVv!YjU`b^-9Ty(xWja|VBUzn3njyI|7y
zK5tKhTl!yLycUZz!f!aB>72F99$522eO956{tA2~hzxESQWnEGC1wK@>>k%p)<en}
z>PbR)42(M~zlpE?uNDxc^JAIf5`X>2{e~O2L6}nn3KatU6Vxj8I-auwS|gP9qtyFg
zd&7VF4WC6vE2p=Y1Q!plOs{e0A)QN*{&bk&wF6{LC7)bho#?K<;WF!&&)IPa#C|cM
zEP!Jy2WtFGwLJ%WAu=+D`yxy-aR!itPFAoj{>jca9{oOX8>s%p?G5rAJZ&JN%Wse8
z`-g;JU}DNTy}TW1=}2{z%&B#^wISWrA6$iNc?@ouk@c7Ljt38<CnqOSJLheixxK}z
zv_fB+2GGao-44e}ceuUx$qyYeO20@7y2z@kjv48S_{VN`i2F|rI+(CZNv=6;ARvA{
zLmBF*lKI!HA-0nQa@OL5J;|kh`2uODf87)~17M$8!De5lfhijdc&;7Z;Qjlb{{OxI
z;Q!gqfId_j4nZBtPK8I0_HX@H)YMWc@dzTv1^+oj1o-%jqHe7;{{LTXcgWqu#RhLi
z=AojCiwk2B-7TE@Yp)!P-fR^9`{5`UMN?@2dLWa;^F~%vLjw<_Zt0j_pi4XOyqm<j
zzP4f2x3XH?-24N2EY$uTv^Z6uDQp3U3K|1M)R!ZL+CQMrm5KxB65K$}m#43djEt@?
zF+mcCphDtkbq2`aFr~Qr5D1SD)xH8V1)FxUUL#oC-r3lMt?lma-U|J7&M$a)=ydCA
zVXpN|vm*H4@Dp`siyZ;B6ubz9@~JLDLUaESMf+?Tk|<XIi<tv;HTZVGH?Cdl(BX|T
zODPLp4$V@d4q&b%aJ`F%Sdo||1TcaE0|DF3FoTPY4S%$Vt7{!-fm7q-e?vgFA?3F9
zPDn^7EriygV-3nD6ng~hr{Z`pGLUZ$2cF6G#ZC)I49q%{KR*n?z|Hw+9Z=D3f16Rh
zgO7U0xK`@lZ!?N_?Iop{mMXMTGL+;~C5BHFU7!SRQF{9HDfet+quchM<cLF2q1El{
zP4K2dLkwtZ0w7N38UTo+(F-Yo)BJl;5wu7?Fc-C{KYLImTpQ>OHn0YuolBq~mlU!a
zU$b-(e#cd8aI1s%<8N+cWMt)urFRm@_3gxe&4DN9!}xLae6iypKR>_le;+FdK9(|!
z2<M7&b8|;sSc+6nE#JKhX#f|->C-TT=+1A<&Rdg5kaY!yCP<+O!s)>e?g~$<>V{n1
zq}Bc(whVnkL!}JKc>wtMczaVT1jP9ZE+Ihq!Q-&YY8wo-oUoY&_=x}K&#i$!m+#Z2
znuthkQPC`n5F)Zf!|7ILtL>cu`3<K#<;T^(e>a!kqH}<A1Gu<gE{d+4nwUTt$@OwW
zM&7dk51*p?7)-PF!iSPwxlrdR=zP(MT~_<&!2t^YW#{N<7D({ynvmL-wzN!unsv6;
z5%Syc#eRcwn&7{uyec;I-tS+(Qecj%rmjAct5gFfz<98+i*nKrvn4>)L<gNd*vKKw
zq1?L!qIZj~goMP|7|g?dcmoI{RTjVVmP+ui!Q&euf=EBmhN0P9hFlnkHCh!`X8<|~
z&uOk%A8Y$-AK}0UzGd(xX=!WUT6z9G1pIBElFfcfQ_2n<%D#CCVgq~z6;Doj-FmH?
z>#NpaV&>sEe(s@>a>{F+YP;70ZzLsuIvwT3#hC*nbhxPc{Nkdfrlw03j#Fq0Yv7$>
zG$tV?PPl@t5l6zsyC6gw|1GhaV8<YJ1NZ&X&J7*xEI5eBgfzfYwPHQcX<HhQivByB
zmo(JvG4)GfA%O+}&%td%r4HsTogDc_xPxJp1k2;c!%$=aO%S94;LiEg{z0=1_Q!`3
zcqT;{l+7AYeyNiDUod7;xjWo4>_UhJTUu!0{se6a85I=__2x1%-Eghq=ul$?ydMBE
z_&oJr(Z`H1Qx2%aV^CDP4K9I)!C;4z(i?PRNI`YMtY)g*GU!*4Tyj{%tSBD5T^$IB
zs4%G$*ZH8FgLQogkac*S8-GVcD1?Td!2}|>ELCwBS|)H6fptYf$js1?!)`UaC!zB4
zXv_d!bZCVjr<E&1Zg36lJ_OZC2?=cs4MU0_=8F8^F9;YHf~@XT@%D(yJa1`hqnVBw
z%<l*c4i<Z42DF>!6x^>|bRIuJjKKciDis$O_wV1o#dU~?J|?B~)KcHFS1d_Mr5za^
z)+^C&O(quqdP63s7BuTN(DkJh15U6fGoO;+bxd!Iuq*%PhZM^=2<rUrYfzBAO;i8B
zUKYl>5P^Z8<M_m#M)EV<Hegbvc=(VeS-^R@#POgPFq8V{kVJyNO&FJzZ%ePax9>zo
zM8srU3jRBnz>EWU%V4<1xzgOyqTew-u9jMj{&QU$1qDSUyDYvV`ss_&qFGpkVP8NH
zuV2l$k~DD1oED|0d9=4T6d$k!?rB9MyicX$Q-MqiTU$XryxKP0?$@?LLMfC^s$h*b
zmVm)ElyyEZue@GK4uQr1Bv^4hz3}!Nz*PRMF=Z9#=yv{*4HOKJs#Z2O!q#5cAOM~x
zFw_u^jlEmO1SmWYiEaNjs~g`W#o2N?I@E&NnbjWNT^sZDw+Xn38$iKj4C!j{@{ROR
zad4_XKU?v6y;7uEsbU#~fr8Ss63xG}(zo~VkXJ-3RVlvb{?vNb8(uIo-Tsi8W=`hT
z$8iiR(?jRXQbAZdZQRVo1-<b{T?Z>H;QUB9X-k)o6MqFOKo-DcMBN1gNz0Yqt6Z#H
zGwW)=hmG5T21@BagFoZtK|l53^U3MOPBgfkAqaT)+cyGX;l`TJ6sLeg)OF|QF+6z#
z2>igHASEzYi=Ahl)Qztg@0+|-FL2mP`(fg0qo)VF_R6?8_1SuGc){t_{eFq9aAz@U
zwzrona>>l;a{LPTMgT^^UW<u4QB)+FD^ki{F1LK4TetsAp7KUBrcWka+K{HRo3Zp>
zkIDXGfb-fQEx5U8k{Ovf>o{LH_k8>3%KVBTQ(SiT4m*<^IUF1nA!NMN*_R*T$N5vX
zCXxHXqUQ}E4UORS={wmoyF-1}SWfe=l%3H4{`+3QEWVtwK>(gAeEg)dG(63UO(tNI
zxB_#_FtxfU>vbGEt<7|`sZBDA9JxxZ$8;+I9aue2VImLz4)+1bq+sG085`5Ba~f*&
zY6BCTRMh*X%UQRJi@k+xHC&n$NTjiGafv9vNCO~&Se+fov#@=KPC$VC?i1gf=|6#}
zN52mCmn=(60WMfI>KrX)U=K;KMh!4AP@uc>@bWr3IZ=g9SMC&tg|RRO$G6i)AdOeN
zJNbv-k5x}MLsHn~QFkJT>D^E3Y7Pg>NtM>q%*yQ}ol-}L1{udKXmaWpYPAl)!Ya$p
z|52)w!LX~tw7I%UxdKg+6If_+$g?8dIMuUaVqWmT))K2{>Vp_JOpjk%j1`840ijSm
zDol<L8{7MO6`nJoo@w#6nt^`pw{r$?Z8tX?)}em+a_4&Yn}Ix)1OQ5d8_IaI7>&RV
z1rsxl`yd8hdhkRTMpeHGVT@mLaK1>v=CcO2O93L;OZBa&`n!nN4KO(rH6a>lYM5!H
z(lvUVS4Jp4Pvht73+K0*TL--HH!H~)x2RlA2+OIxTyqu=#mB`3mRWErw##^>?`!n|
z^1B#DSLX!<nlGA0|HAC6K(bc?;obHh#PM&7k{H()?l*M^qTH`ZwM!E`TxudC7n0qd
zwcQN=`P1Fr{=Vbuh#GnVto&#(HiU3e(_~4K9x<olcQRdZjmh%wkEt;@Jqk2Gr#p=k
z-2!E{b4QV&kYH?Omx`j#>TYa>4LNb}RO<aWJi+=^0os^orUIIMDUNv@<igseeh1=j
z@bT-WhevTK16^l%IW|lciXqB`05328cq{}F7x7c3Q(@5`UzwHN^7mITk0g5bQa86A
zJ~T6{H5&j?;-}+5p_iym8C^jSdDmm+Cn16fJP~F3oh$?$X-6BC`gLk4Y9+tHWP563
z0dK=08RJ*$I~{I9NzOZ4I8zot_#eRD?Sl;k{)quM+L=;I`zw`%3^$7wDpq~}c#R{J
zL@fACPfZc(#xP;f2#k;S|0$+^_|VXF1!14rv{y^W7I(+#bocfA??M=1*<KH%XG6N-
zhvgXD^YBZ5J1FO}w=#jF0d&-_R{LrLgPE4aa?QP%HjP3;gSwl^ZW^&KY{=uD$sP+n
z4Pw-(CDOP%>Up1ri*&|<xAL{BvkciS2jo+6q>!%sM@)^290jidd+fZ_LsO`-C5kL}
z=LA-dAzulM5{gt*Jp=3y({&fc(lHfqDZ*qUn9n>_A}n-uF#4IcZF{(ziAmPDd4YCK
z6?EfGz8FF&;O=<}PU1bK!8{cuG3)W@G#bxoeXj@QC5A&zMJCb3JewXsDPrpm<KJHH
z;oUtJaIFU1DB=~^;+}Q26#w9Z9Y;f17)TiFWH>lgRud$L1wQAh=r!+~Lnz$;U|6=f
zRPp_0R2EW~R#PM5c^JPTZi=HoTb<pRC>>LX5BR_)+KU0BI4~8xDm;pmJJ-_<LZ$Q;
z^}Cb2ogTJsaMz{U7h}VskgTXs1J>h!p0x$GYLA=tYI{v@CyL-ap!>LV$Lb?vecJxB
zvVHwX7f<R}KDdp6knUx|eHx1#3x2i-n42LpcaB%3dX&x|;GI5so2N|fg+TvkT3DS{
zSN8@8q6@k%SLg2zpA6sl(>HIe61ZHSWy1mWD*I8g>_(j@JCe50r8rBmh)=26TP>`8
z>HpONY)J{$g%qr%_ZiOX8yoXDBFac)rQk)n$dn$tINAu%p>eVYoEdPauCtRdf0=}3
zi|`|OV&iDG!(TpnSxkr^Ud9kn@hPMQTYK&a!iV9xM%R)OeM-?)WS-7bF(UM@a(l!B
zH?53{lk!XK@F3-ARq-*>T)(3$J)3*c+>v{SZnrDztbkGQGmV6sVu=Aa=flfR6#IPe
zY||SIv(yuX9{X?G108nMB-x7F{BokZ)`*mDnZ`iED0H?1(nTp~eng@<Hwp0#;<+w<
zs0A35nOLX7fdK(q<0a31*NdA5ofx8%wchw|6zbFk)aitgC$ZjHUpkWNl?bmg>R@y!
z5%oQ6k;SHAKyLM3C!AxOGz=mL5xB6*0d`SmH0k2LS@09t#Fnq)0zEx%*xKp))JG<V
zOXBo(>8{`HpJuxsDkR;#=ad#_7zs<rUY`er;4Tu^GF+J&E5MW)wkWu*^u8;J1dD$W
zWoJ%s813rirEOYp$1)Oq7NOhUk|&Z&v1M?116dM(S|W8ll|ZZ>L9`1rF1+<5^^<L~
zVJao6&0qZz-!;mqKT)k(RsF;Zr%4(Q;JSsoUTMU>BF7b;_Cbq@V58S4!}c8nFXG1f
zx;LAH(SzbIqt4}ee#7;y(k?e-JZ0zGHEXNGX#%lfU;3LCe6XMIJ@tr1a(+qNN&S%B
zao<Wz-j<S}DQ;XJ?P#72pid!k1<};fugfi>2Zls!aPQ?4^@t}6eTy8FP;yr&^dBwj
zj7Y`|@X1KV<W+6H19v0s@s&ehY=2YJ!-qsaA)*lVXsxYH`1{88wug=8r_ep|4k`=8
z>Vnn$qs<8vGAEa&l9CUnB1Z3K&*5kLvW|#|*tHI>3S8ak#g2vIV)-zflqUlf?+&2c
z8nF3wgQn6l88KE~QSlogerMz|#vE~+LD+|l=b0piYbSKU21*j2Fza4ek!px?X~2`b
zo^Y2-!%A8bkCMh?2~uKSapS=y!SZ2WDDfb!9Bz066-qN*j2%A1yIVu6=sJ{R$2okj
z6j?pJlF?FW{6F5#GLV$8%TgHh;UCJ`Kdr2`xBQ!`j=a1;GxtMpAu3t?V4pl*@Uz;3
zh=NCPzgbA#REl58OijJ`Z59PLufWe`ldu4zuGd|CS^KT%FXEy|OtNL)VRN*93uV2d
zi|O{H+$~7)29p+^+i0xQ`PY*EZKmI~st_K?W2;&o-&M4+#J$dj`TNFfgDIHRyw77?
zCd;b!Y0HEcm#}qFRCsO0$#EIPn3lJ;{AwThJ}!Rdl7EULuSzrDpSqw%xV&Hv%d2{m
z8-j5jZK8?UCRC>>q*vRLg7N)&uPvE^-^o+u@kJ2x%yDuH<04zr_zXzsfKFhXzDq@-
z=-^;y$LY4pD%KerKEunO(Fv_)PftjBXii5e*xq-Ap)4YM^i_AR1q~KR<vo=f5LFrc
zfUFut?)BqGB<!ghtc3TN_2tW#OiWq=;zG1?&R(Ey$i=c^Xs4k(6p)jS4e=L$W@2Fx
zh$7w9EPC6tTwW@xz7iL}5F}V-2S}$xy*CABchucf+`~?7O6qye2j1g7Q{!qho6Xj^
zKIxppkB`FWM1Piv4*r529Iw2>S#))lq_F%&O2#DS1?t@Z>mhk{pFC<|`K|H<`(EE~
z%4hr3rAi5fHh0!KfoTQZM_2azJkF})=><{>_93p@wIh{N;;M=n`B4m>)9rpTeDk^G
zw?@tWa`$tU_*IK$emNjfBk_rMdwF~rz9+)W@b1BWuB{oxWWDVp5>F&rOkqxklkI!x
zij>CQi;AU4ce2a&oSo`L<}x@<%gD$cc(0mLynK(xuUv*%CN{ApYc3i+BD*utr6KrP
zD#w@Qp&*@PFH}>1Inpdcanj0SB9D`M{(W%hJYTtp!|d$$iSOLQhVWCjvd}~6D_)r$
zq)U1Im$swdb%7QF4wiSuChLM#xD~`!e4X=IP~CSD22~2WUE-;0ogMBOes;_)4#e*w
z=drWuO+*CcMTsIIZ<60o*OvlmiOA4OJRV1n@rG$B2Ls5~-iK<r=x-vU&)wg0+aoMd
zYC`mkk?d~jInoOrPR<3wW7<vx6e5IX8a}?x!NK9~?w8q5&<8l)+jWOM!>qQBKPZXm
zOnAW}f*1VE@}Dlh#`e|KW<#dug3hJ7UNW0BZc4|YMALmSEMbXn3#oJR`$>4EQ$thG
z(Q(nh0EdIXTrionPa%CQ1WORK<?Mt;?#?quG0Yqf4C)@3^{}XW@V{{K^PlZM%U4gA
z(z5!a*%guAg4-#^zef=jEz|WPCA=+#F&XpW>0IeoBASK|3l)3^57VciW06^t!3}nF
zzqxuD@qmv|+#?m~@@ggdD4t_)N4_`7IX{ZatE`sLqY?D_kW@80;t0i8f#^-x8eJKs
zdxp&We^ePV-Jj-VM<YdssQ#FIovY;O17}6ZvA@RA+R&Sf>eQ^5%Wq#@SrGC7zORxa
zPvD5ZsI2;3EvC?R@cKtw99^VU6YPx|y1EF%(fe7=L&G}$^MmtX+TaCQ*7aRMWg>p_
zsfw24E$0$q`kUrqcUxM%mi<nh*Et5<P42VgKGVsiFni53?jTBud-(yDSH!UHdw!=B
z>Bl6~(ARbtX{VnSjE;}f`OX6n;7r=t^W>{vq2XyK^aWFFT%E<m^oLc53ZHxi0s-iS
zh8CH4{V)LMio^6-N?7LRH`bY(Hj1v+P_h7JqBI;VEV-pp0-(=oYb6e;m7W)uh=3X3
zU;3=9-Jv@#DSD7WU;GQ3f9y9ZLLZ&IUT%1G=u!N!#Uam@D0q4OtIy+rW#hlIwXd(q
zgP|r7uw7h)^fYYvQdp^UD?1cndFbq#c|W+HW<|X?<pA1wRD9dB!yymb5`Y0^T+>!n
z^YA+_r}DK3c6D}2k#m33p+`-9e(uArCE@)g*?6Kvs9Qc)(UC9wcf5cr2(n@QVXrH&
z4<*1ABu@fh6tdU<z?agMeY$Mgdx=Qq8Z4pr5kF7NL$CrPwOUkTKfzKe;cms#J+AR~
zh`wgMA!Vtlf=WfQT85FdAyUZ$s4z7`H_+>R)kYiq$6s@IAgVD%BJ3Z^kNcxk_+`!T
ztx<EmvZBG7lQ9;3!{YL+Ah`w-yF4!!#m`pbfozeX{v*u0`XNhSg_JY5`OQSPOyuiH
zR#4bH*}j9PU=FPf0az_E$02K1m>dUpKbDa^&jSlP5R{svIRE*Uto7JtFC>+@{l@eB
zC;lu*hNwp@4fXZHUEkg;enoCIs%bh2b4O@Z-~Htdc$kql32uvvQ4}|nM!QDbBK+1t
zWxJXZL#%U8Uoc*p!geHc^0e=?W7no@)6z=hLdy?`F%*ye3h<^ZWCa_`-z1o<c7q9j
z9Ui?^G-_cFb8mk3?|JG!I$?oF$wH$w6s9#GVGAcS9U*LO9XLAHg@(R$<ydW@9{%vz
zJrqc}pc69fxZ17sx<-L)6=c#wa(>akZNKg^coJy$+pR<@I*<s#{ebR{jRb|$-{!Sg
z*(GM8=kBMwZ0A}2hsQgDUlj{+6)YP)pRFTT1l!KYN>MQ13nwTpDFKhz6DQkMYidFe
zjxbYsNJe?+>BYz!eQd~4M3*!_06%@YVzh4Z|KQ+yh06W{DPnKup}8;nUIQ{3nnc50
z6_LsZ&m$})6a=rzu#*n~zpRwqt1|ZZuKQkcX=!P{Q&CDV402y-<|}1qMMr14=#dHq
zMXKiga&MlTJl~yPaC5u9Wwcus)GGX#H!|V)wch_UI+d>U{pvMcO<)w48z;7R)UDZq
z3fNXTqNSF?{ho5wPDgYusF%xnQ#0ioLa^d@mWR<h%(wRtinr*YGN_Qnedz^1)6ef2
zo<PorZpYZh(sFBSD_x+G1yx0bYd?zX0{zm;M6ncO2vDB^e?US;JIbP!d-#SiWOn|>
z=FZOfJrksHftpY6!ro}pm5EQf+2SmK&h0c+F>O`>swHR@Zz~8m@4NWH1KK*~U$9!#
z@YZ@V<9w-&>-b_Ps6<tSSA<j;Wqc>+^LzZ=Pn>t7-v4c$0PHY>pJ%p+E3>s=Fk$-}
zRdU%xS1#?&q`@ev=Ftusafa+)6&3~tvFSE*Ub0Ql14N*X*E*WMfA0^>)+C<i8Wl3N
ziY`a%DiA?cEtvG@N8$<6t}b)lSd+0|SJwSua&Wpg1m0piUuB#{*vj|7QAByV`gufS
zlPutN$qF={i>LU+jkg$h0BbY7DfLXp=u(X5XmtP#j_+1`^aKO3z-Qqc_ev5a&ku7p
z{&_<9$6wgrZ9T;l#~G-HH~UjFmz_ZkiJ(Gm_d{O`!U7cZqsu$gr;k`uV&vNriO4~e
ziSt)3A!Jc6{W+-rin7kItsa;-H@i*uGasRgLtx?I0jMKEVPO$^E*<8DKI?fLMCkvp
z8-IfRyri5t{B~x7$|!OQw3n7(R}H?#{?>>DYfi;uUm+nbrN4+fgeL4hx4sck6#5r$
zojI_BHugW@T87k&-be9XY+YVlyYa~-b`6XtO$m2>Js@ldMk+MpJX9K{PO5a9cVi;_
zzdg5%ps8Q2pl<!8H{^>k^|g@J-R%NanKWYcf-fQj`F=9m6bH$iX1?DijY2Jk!}jP3
z-{c~r7s?S-oqc2?G%oj;H8{VSYL;71qpOp+d}<cS$*XewTNM+ZP`7+mMtnNaonb_p
zg|4^DB9!8pq`c626iI%EY4DQF!urn6^*xh^ry(sn3AKlXk_U3uMLJ2Ug@0I`k8NUG
zfBBW>wpT7Rc$qz#<#U@it|(SWcamJ1pY_mnGwK~!Hzp}|J_&_&kx4Ih<jP3OieQgQ
z_L9u$tC01+<eMkQ0WjeuV@-L1ipOwcurhhWRA=Z!q$%Z!a@3d>F+Xo!-ASPENzdBa
zN?-qc^cf_88h(7Nrg`+njBFf3FOh|wo-<NB^Zqn18rp%8p!6h57lV1yk@ueYrr#hD
zclJhbZbq@G_`8w@8N&wbSql^EyvV|^Z#<VD!G*qvsp&z+aebu0aicA8#)5hy;aEi(
z;dUDR?K83BKL)#+mRqN-{pLcGVjI#!PByZOYiE<Kt+<Z(m!e9uk7tCPWl$dMMDokZ
zSUR`wntZu=Sy7#FqZ_gOiJ3+HaFojj%M(wc+D%Qd@FP2^g)fy&fQGs2vu;if4rwRu
zKgwJehu8nU(hnQ_a=3X;Y_3A2x<2QW-!(cy>c-hp$S5e7&u@AX9%K9F{8QY6VGW%s
zk?(XaGA>)Ee)Z+9b#7ZQPPgGOkrC?-BS<RC+5EAl7z&=S)3-K#*lDjN#9L6)67Ok#
zuX6nD_o39DQQPBio3so8f3r?3-k6TWqsuG*f3*O-_59%sOZ&LsrNQ#T;rY*8YcflU
z;T_D$m*DEQW~;{3kSkwC2D%zcdHlIELr{j@X!z)H_<YYD21`T3gtG6{nIVE9riFjK
zR`Z79HhtsuJN{{p8Juv<{eD9BIXCiM>?yy@l@N-!M!jeO#uqlPsBabDI^CEjDh<z!
zW<76go#Z%MxWYHx8857=qoy(#D1(C*80e!S^@5gM*<m<Me<8FQ3-!GYNmOZS<$do>
z6{TLEf*8RX7?(wnjZdvy9Z#{`S2&K$LQkdaH2*pM@6f1D<=Y>p)6VEFhC1bPi|7B%
zPQ)g@z-+DIM#o!%5si`((wnsZ14Wp50RjDX3{0|f26Bcv9;<P^2y#e<l$5Z+v_^ip
zxwRFtF~g9J=zaEva7}7DT>=ZXbVE2^Ai~^c=Jew1EQVe|<bQ@l_j&5M@kIot$?<qh
zy4!W?s$oW@8Mm;rGgkBY1O{mt*R4P-qIg*>SK9-;;Xgk=c=h{$TO`F`Z?Bg6>3@?Z
zbnXS~7GRK^Kwe_a39`)zd)Q)CLV9|;h1wS{tj3`<qnbeh?ikEja+$u!)W?ij>P-3x
z@clUr@L#<bc@N<?fQMFk5>B#{mmgoO!zYGhAD9f&-L3=xj6=cw5m<HYDnQcDH15iR
zM)-FkY!oNvaI+dK#9szP3NIg@76a9@XV%A?#BbtVfL>(Nqij@4D-A>Ot)XmHAk{To
zeFD7A_G?RsV1{tL)3`oc5s{I2^~zwxVe;pmgs$t6Pf<}3<zOz{Y_Le}BY15%IEKoY
z+~Iite6m9Q5GeE?w*O=*6YL&1-;PTpzyMGh?AO)>ix*JS9{G?80wPlnrZz+mA97d>
z$HMmpU`mk<S_+DtJ^@m&$R5B}%V-9rV_?L<*@@b{GnCz+b;pKDIfqrG9>&t^5W;c2
zz+9cK>D!*>HSInXW-w|CeFyV>5&@SCAD^WthS_96_h->x=b`Es%TUc#T)OqbJ00E$
zs&iZ@Qh)mS^DRUBJ8atq@v&`4*FC8c%=r-63n4w}0X8C?Y$Bz<-IJFuo5#i)O#2`e
z%PG6y3b3<U+nZ~ey?TDPO}FK4MB%85_X|&eaY-X>&6}!;j7-XTngdZVa1{6R2!GfZ
zWrmgappOE$pCv}C_Ou9|xaZb??n~1>ehkxF*_`SI!rjxA<Z|QAs7A=9{Qw^}WGyo5
z>iGYeoLD-8+%Rl)o2=aFFSpEw{iLuii#PKtOg<vWHz&(4RCQfL&R`Mm>R{#q*j!;h
z41GQ@@;RIicOl%`lgKThtBY?#gAB;f(M;(VcBAl742+`g)qiwq0IjvsY9b(mg53==
zKtQ6Z4?cukmNW3yVNeZDOCCG3wdJ?4G|v@8vqtG3rZ>y$>z6Hrd2IeP60)!ed7~%c
z7no!1H^<==)%dY{J5ib72m>af&d>M8fVKi5dS*rdK9xAu$c%suz~(JRq?S4L%CaC2
zN?lGwK@oOtRuA~l6PU{YRn5ZOd?4fX6-;{{yE+dtGCWU)OS#gT4D12;#Kh&!CwG;Z
zo;|DAC=Y~;A{(cXVd@D>B<W3o<_WaRCx3ln($hsRjthY1wA3mGh)=2Bmwwpw*G?jO
zdUKwL4Hmt%@Ea#+ejxrK42X1?U;dd+wx~O~zH&aTF&{cNAEH~JV&O_>f?4o$F|Sxw
zF0Ndys&xqXDKeaaKIxCL0lwlD7(L@X(^>?YU1v4mn85yJDdv@x6@at@moY)6{m#r;
z<?J%xNLCjEvkvtypcg&mwOxGTp9K6X`-=*Td-Zl}B)==5nx<ZVs$G2wO8l@Pt-Zim
z29^%l%iRSKfejJ5lKGuW%!hm-1QrV0#VV{qMtwq^4p(9KlsaruqY^!*nnOoHxw_bK
z5B^tH)-KSXwNn8f_djJ)tJpB?`k|7a1smE$`o_C9q7x}dNGd=h#d~QaIr{*^0)FoW
zD5f=b-c-QaG?+F(rc)s#O&l$~ug+rRm3`iik1@~Q0oxIlNmB_&VHlY#v=#Tl{<N;>
zryN$}chDzbxQ&W_^6%4cMcWoETwPs_NyG|snuZ8wWs_H8-U+d>^l|_<80IK1%BSih
z0;XVu`8P<a&*@txIE<l+iqaUrwhKy6qgG;2C$KiypN-Q{V`66)Nteo7Yq+_#9L(sj
zl?9aqe*PN$rfSH?T_5yyf?3|}>c~Mjik*T2n68sAxw-$cxm^-Hrtn@T{|6uF9f?oE
zENaRtZM+i`Vq!kS!mRW2yn@M=mX6-u2mI2DPy4%?zs3esf>U5>`pU7yKs@Sqgm&}q
zXU`B5lhBau69bBi;f<FxgB>fdj|-EQl709)*569#bYb<t!(4Rr%`)?kOVV%{+%9GX
zO_)tPCwwE}#a&6)_LdCgJa3Eppnh8Lf%?huM2`H)6xkq+KPkj(pCMWL&%|_FUA{lv
z4S;%Sq)1n~E;tBIM$o39yNta(8I38_aj|u(Y`L`$hJe~F3_}K$-X$+cNpFH*m@O7o
z=gDh#F3}yQbSB-24yx5>yWASg)C5k4xPeP76joHabstwMO8K&+qv+$LItB*V{276G
zK!v3Ph#K+9V%4IsXhtv<e;mn+4kEl!fwOA4M-z4A3d~DS0WPUDP!h|1&<10=Fd{aP
zf)uecQ)H9YVRisUBz+j}f<fa65<7M=6|XBy$!%<O0sK3z6&dPE`87B+wEhzYsg=Pf
ziA|#ntTXEBiqWyQ7GIk0kuS}d3MF%nXd9{(z!>$njS|65fyP>C<{BCXNKLe7hf&l3
z!rdfA3PQ<{&c0o!CD+tM11^Wlt9w!SICX?^6Q@4wr%`@zsOswn#IQLZbx!s6zO^K_
zz7!KXbXyakl-Vg*8R{J$KTWWyCwp%3lRaA{e-!*0@$5?%;MfNL3JtF1bT#mLEy727
z3Qj%lU4Yo5QR@%@3B~H4KVbm}OdA%y7Zj}Y-4J`sf`9~jwSCUN49>dWzyhOINai>m
zuFk{y?`%bOav-~bEMe|}AbU&X{Pi15AM$xd78X24?J)X!CYyXM3bFRY#6$=!eThRx
z9$0bPUqr!;wyhImFb7}vJ~}ku(*T+UP+7RnM>{*%Au$M#JEJmv&>s;WRAWGA#vF$1
z|Mn$nVP%y>-vx1IaZWF}vpOv;ErLk(9}-ehs^Q>(fB|&mJv><HO$V3;M$2a30w(a{
znirr=Wt2!oMA()z+p>DJ$P)`6>KL0W#CUx@y;A*VK3;4MriZe(jUmbY{xdAoNHFbk
z3zR5jp%RVlcwYj<gr4~Fmk#e6Tmt!Ky5l|)Fr8+)-v|J-7H~l~+ci5&(op#{xL%Bg
zQ+Yuw;ZLe)HhfL@2B!N{ll8ujjf~ijey@^JhK1|NV9hI3D}m&;#oRABV4o#Abqr-)
zy@V~?P@M>6m8h{*!b<x2A`{vHamZbmKzx`^=G0`OG<qoOO<Uf@;To;7A38ozNzbIX
zeCgFC`|%kU1CekM-7iZ3s&MOH7jQmS3?g^~o21CtL;j(!Sj@1ov$bs=^~p%%!@~$4
zlC3jcTVFrijPu(cZd#xv@dRYjGCLybqJ-SZQkSZDV2<tPI$pBPL}{KDPnwdes}~e#
z?X&~Vqv$L{I<(67glWzjOYJF>LVG!};?hr^agYkmsAWi|!o0%eP=Sow@89=V6f*ii
zg8J66AW}{lmi-*onyEX`%Ryy;9QNy%P{uXqy#fg7!e{_=SG@T|`K>DL7$$XcfRo_h
z=$o2mGkx0otHSMp+mAK+2Ps>b{i}D*9jA5rKdr5=;vk74&$noIeHjWh%FN?**aZ%l
z5j0d(k(E2*C~3-&8wPt*HXH!YEtF9J;FE4=KBCZHQ85ZP@hVf=Y?bBM-2&+rNkHJj
z$OOt%=bLN(txYR9A#M)>$aS@IVBy2+quN>>35k4LFR%{tx?Og!4XpryZvDT_vGLE#
zi=zBn02fsEZfYAkUp2K@%R=x2?!$aTv|R(PqQ|6AeZnF|SGd0i6={+DT%O3)H?D|F
z-5+2{lg|*EDl@k>FbGxwpW5k0kwo_1D-tpF#~h>$@)!nh#S<9S`m5g0dlu<lFlm(4
ziu#Shhn@TPQuib0@yV?X{vahLU^C+#Q08cfiH)<M>&}cLrVj2BH1Ct#lbrvUUgC7^
z4?I15Q&Re62r^L?@PO(fKIgZFir)!95S-~|)uLLklaW1o<QdInIf~6c03&6{J@Ek~
z^6p~B>xIot<)()@edkA0faeISgbU4XwV!=0b2s9zkn-_gpB3;YiaY?EsUK_!J2*IK
z+Xn+8Y#(_uxP!rc>t^C}I=nvw)s;l-`ucisqOUxe-4(L7&i%+$dicd_Ve=%!Z&xpR
z;|`{Ri66pUsg#Gi3|IJeqn89sjsZN))hSjGo+iePtPas1t(@?n6s^9YgYu9NTCR-B
zid80yu-h~7oUsO6OK2D>TdyF`2T?oeU{>3O>__W$m2I0?4Mg#(w6He9+$PK>bK#4;
z6z%IAdm30y@iqOPh&nqpzqB-3!Bhmq>fvso5|FvtT7Bya?#iw3&KKCk#I!8QPg9#L
ztgXMD?{zz%bxMCyg^iLiU!__U^KjifcZs8qUcsIiw0ztEtD(C+-K|)q+?Hg>ogvA#
zi6=AUU=?g*GxS~V+o4Q`>`|LuC#<v?+Sfs^Ft}6Ze)CU9J$OYq&{s3|3}ib9mbSLM
z8q<r5SzS1YHX85bx04Wg|6VPw9Up;pi=Q_}>*1mBw55RAi@I&J!Yfy?IB(x~mX?ur
zZlxTNB7{mCZilaLx2?FIiS2P|*t{N_Qp)=ZaQ0E90&cMhVG}Mlc#5KWz~Y+=Zj899
z>K)jilfZSABNdGbUgPDSiyz>O(s;7Cfod=Y%5awL)%&!=PPYG90U^Z*jz%^$7%P9?
z5im0`0Xr_gqcuY5b^_PdPxqTtFE7`QuK_W4#ExxuW}2WvXv~j(8Usn4D-dC!J@G)=
zcZ0=1!GGwM|5V!(a$nw_FwO^bno$VGked9Vm}wi^3q{3D?I$2A#^0R>2N62@AtZzs
zcPRQ(z1Ay?;8AOvvx#}O1=8r#;Wiwr>1xtOa@;()uVdOmAU9hko7BW6p!L66013R3
zEj3V6Pt-c5Lk9-ITQU|Zx<sxw_PRg;sfCn`A0p6PJZyw=Le2c)L}-J3qc9VM^-Jo7
zTIM}@kY=;Ixo*09SJ(%w=6G#L`|UoIj$o<+vns?CuD7O6sz2|1;j{w7f4yJAiyaMh
zbxt#R-Zf(S!$zS0-CAI|)kHiUKq!vrUP;Ch^|S_$AEe!o9U$pOhL8XJ)25`L;0?Sn
zKdW*}E#&_B2}7>KAAP>@adFH#mslc9VsGx=^?-e{uljuup})c=Ah=$Np}{r=!^z~p
zKx0b_!$cY$@)kIvo@IkD4%K(f&zF|Zu*t|mj;JT0P}Z)ndJ}-#Qh#;)vDpN~QxPHm
zeuyGI_vgS#0>BP3n#<9MB;=rWcl|fUY;Jc<f!F4iDvM{(J2!_t++Z_HUTWlGQT6L9
zZGQ2cJg3W3V!W3h{;EOo<9z&xNhvGC){F;LY;LU1SwdBnu(r%*cAlJ{=j`+pTrQcP
zcb*j%_QoFk^)b~-TwhlQ&u&}H*@UTRaV!4Q(TVZ#lu1tkF`I@Pk5T4W|58D#l3F1O
z;7M+KJkn0!>VXw?;I4(_w!Qc3*nrKqFnDGg>M5Ydb=}`ii6!SSA=-CXWt?MSw`#u+
z8wq0L<J%M3fa`iMfH$KTVl`^%ucDO$rBElT+^;7f)_0K676(TkHMsFae6-;Bhuxrl
z@5|m6Sortv3Q58ZKU!_Cbl(FoeXr;*V12^bGrkrnoTq<3!jwS7%<t<6ZWwEkN`AH0
z9ehzH#$oM~akUKY1^A4?KUELb@3a$#QV2c}U)#71n~rsLk#a;37RaZfd%kvAgqnRW
z#8%%03v#96Nl^L1xXcUiyr}0wb+n@N&Lgj0o!jPop_lkY@br4x3DlxhFC2>G@XfN|
z?ZvV>*LwK%s0j(dcgoUO@J}3}xln3--4K+Puxr^MC(EAXy&1j8k75e<OLYP9x7cj@
zQsU;q^gc2qgJvD%+PPZMs5tSp29N0E-x(d~G#r0;U#xo044`+z(8P*Tsqf_L#1A98
znf;#=`iH*NPOi0{j+fj9TtAYB7QFU21dM1jq2j*S5#;RO+D|(!Rw08$^)d>Lh?JCu
zK6>_^K+S$M56>hA<>i;Ut8fLYq^zvgh=>wTdcR);U1nggUA^b^6S1QV0dc=8J3azk
zBnjZwnwlesiJqRG5k5bPStU&GfXjSQrV8-U65&Fmg4Z82CXcuIzuVWjF7{*N0ex3?
zhWnMsT$Gi921Jha&CG^N3@syMa|%r2goUZ%s!q_Un`Y{2D62j%v~IyptvL22Qd(^Y
z0wlqs4gOthM?vpq*f2o29!b9UrV|nSq;qO<E|OYj<g}eCCnE(*Sp$psIR^mUxbIe|
zkh4R$;BcNnxBjr+)ejuJY$1;(Q$^d@Bpd<MJA{k|H9Dj*7MI`N-;)_I@BsiqKpe6a
zK(^=zgF-@><$vL@;j-)Pzn4!9bqAY)509lE-t69jsW%VipEC0maLgz&O5IvBb^b5n
z-aDM@zJDKADpJxiGt!a~N|IeDMOm2%A%yJg)i9$}h_XVmM^QEzA!KDHd+)v1?|gUN
z_xF3>$M5^k_xK&h=Xd>a9oNwn@7MeFdcGdxe4LN-%%2@;Np&3MGnaako~~<WmzCrT
zk-#v)r7tz|jcy6YJl{$glFq#(E+rv&tg_M5(#GexU2AP_zUpCvawDibU*{8ezEHCU
z!uAMFMJ40m%{Lq)Hp|ny1NKu=qF-r)k=>rvOEIkCaWV(#u;_>FsNGQys#{x$+7tfV
z-wB}3`O>=!8>I4o2m|By=q2KC1neq;0K~u$3VGHi2)YN#1x~cp<4x&v2nX0P)4hLR
zE=KAKpu1qTLYIjcX%+Yf@^Et2{9v77^hPbV0(vA|Pp>Q{sibmZ{~5a>rcO>`MNevW
z?#cP67_eQ9_XOhsGMA-}hy2jR(1+shAw&FDl;2&jq(HxRL^k)KA?$%88j8KT!2TE3
zs~pE#K1=SUY|EG#HE_6|-G+eDr8y5JNGX90*Xv6=cVG+)dtx;YA3hvz&lJ?@uB(%C
z;-_Fb6<*MqZV(H5u^#sC#Tez5shk)lUU+llm-KF<`xmh1C1exu`OK|b;ygUM_O>+{
zJKWk<%H}0b==mS{b?8-v%*27n7lYZZ6=Z;nj3@uZSLo5woCuGMU18I?@{=su0RZOd
z%j_Z43=B^%-jazv9VswVdvPJ^;hq8Pxx}FF@4i)N#VYb%Xq;z6dU<g=yPxvm2gF(X
zt=)=uM;rMMvAhU0I7rr{XBjmecJJuKb+rkNu3*g+apCzVCbh8Dg&>;doP=i7(lsru
z+KOvkr4rU3?*ERy3{<BwG9zV2bltPA4<DGRR(JpC<kj@v^-D9rG$wz&G5T_3POGn;
z6qlj1BT@?N>eX^>tOW%_@M>gdQ`S3~HB`kkc(NofF)Qkb`R?!bW1|OIekyS9)_l|a
z=1Fj6Pq$n;3j3ZtmuYnj4Azi_&_Rw2Eq!!Ys6>@|IH2l7U)lWU#OFul77N`4dN{p0
z*#{a8Jf0v8X8T7*g41ZdL+`NVQ{Z{j0qQZwj|K#o@<m^+JVitD7v|QxkwYxD)3Jw;
zH<3B%xM=_RuK?-)z54Z62cEFJpztq~Bri)=2=)b-f+2ov1G@oum#8E@+@dx1!w(;X
zPVa-Eb~9H9ugQm_3flr>=+|<m4|OU?LLxCLz+VUZ`dH4%A7;B?Q1gVAXHfR-xixU+
zjtM(CZ=fnVe*Qd%#*~ywnD@g;aTC9hCuM8>-npUSf=f#VwL&}a(wsi$(!Tpxr3FF(
zq-(TM@E?nY9&Ri6-MB08=Yi~E1mp+7`I72$WS}26__^9i=!YZ+$8H1&=XWgzb9!lj
z#&kPL^#GuKrcfwUMn^|OJpj5i1Kr(ssi}vcQ4d`B_I~+6e5?1hEm2qcI&vvcC0sDQ
zlj^X*Cf3xegOF&kwJ9!f=cIJb5BEa{4<dFt&Gb^{-OjdLflDA<E0>^NZucj5$-M5p
zACybEhcF38Lj+V2f`$rGS6JorF|%Y>V)G;{WA*<u9_s5$Y}<xL{pI7w*Z}hbAOU#P
zn;*p(R&>T1Vl=?tmEUShr@rxamiN?Ptybg5n>-wT=LBsYpz>fHP*Q7@6+JWFl3I>N
zig%2jh6eC&c)4H4+(4DjIS_QqUPF|(BX>#e+O^Ycf1)KNAx!&|%-DH1z^jsD`<O%?
z7hL>^Ci<)ERu3fTzTG&S>$-IS;0tVCPs1c#Y<~<#Y^J0TIT;yNHu;_i8yG-`BZQi*
z{|SNllzc0;?1#U>Op3#T5!8Z)VHXS8^m1vh-LW^1_<8?V9Y|z#?D%mk(aeB7Ze^8@
zt?f7LORj<&$kCCJkQ1cj9EbFVt=bP1F$Dh8^BfpEW1>3NnJ<pLJ1FKZGuFi=Cvni7
zk2_PSfEQ9Bhk_J;VWvr?Z~Bl{swM**wE*YUzU9f3^qYiq2uzg^&^{3^1y>S9C6JSa
zW_RaC^p`B3eS?Bj%+0SsGSR=lO?Vz#Kbi$jfIw--+a;*1Y*iRaZhat?G_i7b+c7hE
zlgL3P!c}DN?#BpiPyvm8`UMSYTwEOV0ajO5u==}g##iq7aPEKCmpKoIWAMemWv2-f
z;z%=Yd7PFu%~eSMShEA`0}KodckYC~J|p!w<sN4J0~tXrW8W?{dHD@O6sy>wKKF{<
z*9UFy0EIiRO$-h1fjaUY2DwI24vrfx`y01lOA7E9_RJ;|zt3RBA$d08FeBp&k5n}S
zA)Jjf0>ALBam;G4VNm9`MXz)_*Jkb|^G01X++UFVC|;hCC%e9S@_mH!%Iv}(>J+Eh
z>rBUwmw;66?%|<(-RTp7fX$bG?bQ>>7om4P>2!day;Hu@(!mkFm^ly0dv82ggm7>1
zb}eV#hRVuwLPEW(3+mWTF6|~YdQwDJ8rnJ#xd};&mnZvfRqce;y8BMKCNOs1fAc<6
z?%+`HJALRbwk!s^edN9jknV7~|8<zSI|c)orQ!M?<>eIQh5uRJ-Vvhe%(fCOsKzYk
z32zkb@4v+@ygOdMsAZNo-&(l!2vt8UP|epCP1sd9@hFCip01&KJCFAI{rjV@m@#mO
zQ_mz=C+V&G=Rl`YN89)7GY%f;XCm>P40A=7D;1ak#ngOwIh>RV0F_13L)4Pad9iH>
z%J@_P#&=7%dGo@z7FrF^<Y4GH7b)`!TbxupSm!v_U34zkdjwr6v)Lof<C{7XOm9i<
z)k0hxP<k5F4ESE2{w60Z_8#n=4+@G36}v!W@UWS97kxfCNGgaEip3g{Vkt1I05~GP
zl!>x=_&{&u!e#Dtzs?~^rl!lH2Zj6YseDi~m=~!}Il`M@psoGFB@OZ=p5@X3ZWI`N
z=^7dRPE;{~?Pwd<HXgw7PeVQY{i9LdVlGg55<5PsIS(!7U(dMXrjU&l$Gtf!rS!to
zkMsxkj$f$F&zBfAu^kU^p6>qSL>;aZ<3%}>4akN$L;QzPndM_}IIDKboh^+LV+boN
zi+YSMLz%`R^&t6nOAqXiUY1{7b*Pwdw2yzsJR3#H7I2x{+wV{Ots{Ct&!-}R9>rPp
z6z@cYFrWB+6Tw*RMi8yo-mAy>E}C~g(sFs5%3p{<B!Zi9YuXIzq{WRTe~DG>EXAX`
zheVfIYnsLSvYEu!!+6snFbb!U2Y<4*t*wD7MNW6#?oU?g*5(=)eClUrcK?v6>iiIT
zRmf_rS;KeZIQ{4J^c7ouP1-xm?P<E@ov@>(Nibv}qNRJ5ayQu0WbZxZI+C05r_T)M
zX!kRgEdF5p8AJccn~}Mhokh+>!ug%E1Tiu3{LQT}ZWze$@>0f&zg!$`8ryxyMQ#*<
z7ppe)7_k86V;2zk2vr%vTutcS`8KYimKKV9h3re{zAd+pNS%!FbLdUi-IoKkU}6)$
z)?y^BvuCI)BDxr@`ZEHRbQa`fGk$*fZp8WMqo+66#K*GvtVij0SkjnZR*mEEy+}nX
zCgCuA;%J|zlFyczM_E}Jsno#IquLawm=`Y=_mW=s$Ijm6fH{6a!DkPy25sv>?&SUm
zLQB90E^Vgifgr7;K?`jL(IzG)R~(S=qWZCRJiR<~DESfo-3R>C4x$G@451saIMpRP
zmJc);N-lDMq)y4K%UEsVQ44wU?ff?uz;bhS6GrQ;@{q_|hkeiIuV1MWiW)89C)b31
zR>XX-f^OR`XU_+*PF48Bd>D!_F?9hrKPh-)3}P2!W9`VG5Vq+y#49KhdXehj!DCui
z63k)K1%<t`eFfs4i;#6R(~kTdxr>AZq#Hj>4T{1sv`fGzuwkz{=?7Ho&>iF<5##lT
z%{xY!#y?)`1wZYWfZmq%=)BgmgIZNMR&@LKV?rGPZ|pslJ$16h-Oi7<uMFJ!8Gh(%
z{y%NgAl>1^zVfags_J6IZ4Vu?{CI~jpQTA-Lf5o+VyeTDM&s;HrMuOPVQD}7%ikK6
zY7fVqR1bJ_GsFg>eHdNd9u9c?ScL6SP0XiH2SoJmeOL^fujjcc%_L~!*6j3QVfxZL
zo%XN7cDm4I3<!F?aS&i{-_+KwmHm+d3g<t0hOzi1>q~(cy`wAn=&E`9aic^veK|QV
zAy01I{j^Zb+xa6O?-7^gdM$?1r$@k{ox)0=<MQ<5iZ$jFonMR#<s#<2%oI2ubwuSY
zbBnO{Dn0kB*1xvJa>ORuTV!vJ(7nT-o~`B;^_MropvtolTrtWKAZG=r<=spWBb`>~
zS(}dyq3!6%wrW8p;nZAjf&I?%csjw#sotp%BTUEnVYLD${$v_f$Z<ooiInSrGf;eM
z93VXCpM`n_NEL5WQ)>a`pA`_iU&o^ABNu!6(+${?9C(3&t_woa^)a=K`}Ii6kSsK4
zN@yaT<0g5<tRoaD!w7wlt%_I2VZD9<QWsy0Tb|R-xjVJskU>v)mqfbj`pjAg-zK5L
zF*;|~xn5C0s>oP03KdY2y)<qcW1;-%Fwr3>%0e>NU%Ik%1S%uG1+z(N>8Jo%PkXZe
zum00rz{+~K&Z1ggQ`lwwd`=`d-<T3wTCqRby!G$?bNCuWFm7^sB&S^3Ci#Ge#v;fw
zVz;%cboe<>Tjm(^^{j*+@4K=Mf7Jlv`=A)`@hOR4zQe$;R4v<|4<lrb24c_Ld89!p
z3AJx-T%mGUSSbC>t)qTMCFL+kprm7U7^O)pDz<BC%O)DU|K{y@kR1BKes&=tA?!t#
z*|Hn-wrAN)G-D_z=3MtqPUBEu3-8H5iZ8-ZW(<ssoa|3O)u4JZ4vUW4t<)s+osZSc
z{{F?~N0675qZpQ8<6=HoMwGaBf>W!2lSJ`T>+>VFbq)2y$eZkk0+-b>O6w_MkrPu?
zocBItARWkt1@F^7kbw6(T~T)Gdyx?BX*SyQ3~_GdJUa_MK0Xx{6(|6>$)eFalwddI
za_7z;NZ1;+eZCTMAsNd->Nz0)ju50|v5jYj5+b`<ZxS;4&8aG336uSbm*P0ron?4l
zR|j!*F}ZS-?&xffmF+^=@qQX45XDbA-|?HZV||=-1KFBhC$owDf@1Ko16YjJLh?0O
zo|b*ZQo0U$Qz#I#<(X(N8h3}<RaAp6%i46SBq)kXT0d!3CLOiOwBtJW90KNt6Ev^c
zH{N<9WIHLl{16gQMFuO&eVtv-eDZA@ec0t1_W&R+pJ#XdgD~C-uG1{Wzvqw7)46Ue
zm_0o9iW4qMrx<5X+CPH%pw)~*^6jSm?RWK4!^42Pqj9De7k`Q|=CKX;w^*IUw)+A$
zTI+A@=lGG?5+^?p;d%k$H;1Da@*S+zP*7ps+t+u9jOrn$Y8`J()M1+Ml2OF%o$$yC
zvU>RfbCK}6SCDT)ieu;~`u!!5{q44&0<N>yBcPz!mwwz;HPe)won5;B<TTt%+h7-d
zUk&9~BL{MSr2fx@Wd|@Z+(YkS*{y!1>;^S;>{pYJt;KdMj|<;3^w>L+NG~Os{m1h+
zBPO^c6q8Vx{)k=2K0~0u^z`GmZqv*_>me2}gs|zIS%c&tb``pao#JQWl>ASTpQp&=
zRHqXB=mP;k$t3jz#oheB>gyxTx+c9IpRIh#HPlm5`imMjGs9^`z$r!*EB}?t&(P87
zofS?dRyn7;I!}w`&#SHe<B1rVU#5q~S`px6pY!mCIDIDzHiXWnZYqR1U3@s42GI+I
zAvl{JK6L2mc8C<ILs~0Nz69isyXC%mgVk?+-W}EQeAwHOn;8}s=1=8QhvjAsBp$oj
z{t>vJ$o+;Ey!+_>cX<Sf^8OzQ*35jWpYO#(y8)PN?T;S=aC2gnEJ3)T@UFyc{FM3-
zUZlzPObUx}gt?D5-h!eMu{B#|hECz?QI_1`Yck;w;TWo!U~-;6AV2~wL1EiTp@Imc
zqt(^ba1rN&kw=YYzf)^DZEZ+IGIHD4aN?_UfAH-4idh-)Cw%#rvKZ*SSi%7Fh8!L2
zMh#|{5AD_M6ZLYvEGKtgnZEK#O5kAj)e5m2|DYi>f|A_FYe^fNC~sck@x8q8@~rso
z+ik@5svkqI%8Lbt@yO)I+3vC~+Z8dd>Hg08>Vlm1PrYe2hyKAq{U20u3n$+@1spAG
z#RMFKr>zh(ky}({uD8PfTx)atXUkt=WZ5sa;O1vx{k@g4Unfqu?|X{<E4Dq|#FZr?
z=#$JSBBV7hOOox|_i8EP($0@EVLX7U?N3F@X`Esq>+-Il5Px4?B{K2KtDzH46hVbw
zq2`bWF(N2k_&ZxSCGajT?i+cw%YF58%;-`Ir+m~2MuLWXCWSVOzD}X#Oz+OpYY<$y
zmW73g8G_B-k&+Un@}BB<yn=>rU0hsX26y!}dG;6hV(=L^E6yp6w+y(={wzx{oZR{R
z`Avz+my>IwiJyjQ!VE$4fO1iS$Ztt&nvjmdmpufv#?HKibUDy(kuUJMqGh?O3u}c|
zM_<LiJam?={v+!hEAjX={jiaemkr6&b*T-b&SVRQ*KQvn3Xdub%(xXZFQO-ZJHPgx
zkAp#4=e?;rXtoq(jcN1VDfnF&2{MPLo&DVAMf+L$bBu(kAeESvHcXdZBS3#VO9%R7
z;fDgEV>tm)7o8m6)!&8g3&u~VCYG_1kFaND#U3T`^sbRnF%aG1u=)Y!XzQ`&k^1O0
zlx1jiO?7pXR~n#dTpc00wbbQ$Xe0wjU8DfNw&x!Pop}h{qyTQZ-;qQ4Bm*)c<V>5a
zjI|M>l9mrJ^~1b7&<v6TvnYTrV6@;Ck5tyoF*jVV3;G!d0uSDvOAx;SM!`D=2B-=k
zZNi4{<jUdWnqH3noL}{-ly|(vP&gp-l7wf|_wNLs1JweBlTBwlp!%hn6g=u8RUvy!
zDkCFfe%8Tyy1NL2_q_}PJLVwE_f}yi8k}TBqRkZpC2SO>&ujVwkVp2l67a6Kw?65p
zsjD0J@2cM`XloiW@6sh<ShN^Su<g@w;qL`Kh_G#b`WBE-G!0YUFC@D`3viQAhK?fy
z!Oxf#EiKRZBR4=wODM8n!74}UmZ!;3;c~Cfu511Aye7XtKz9QSZNK6Jk1%^!Tk4{A
zu(LZ_CVuc{xC2Wh9l?znx2Vi_h2A1s|I=*aWqYT=k2gbXr#d&9-yQuRVQGnQh3`Qt
zXcG$Hpg|9j3ajzl_v^Z$o&rr({W9OTq;g<{c)#j{0Ui~r!o7-@+SejPoR$e}8(4md
zsRo0!(|AZP>J+H;!F*Fe0c>^fqyQ`MSdTqEsLMs2+hN`S>GDuO)m?R?y7w>M-(Xj)
z_@Y;J3d}LR^Vew07K5*24<4O`q#TG@dV?_V>O9V{wIeqtCrPU?1$rltiR4sGOMCuY
z1BDcBj?bT?mbOsTq*cq!2=cg3F22klxY>15LBMvBo|5tly6qi?739Z$LnFKwIz#(t
z&t;i)iM*3OCYcEf>G5<Dh`aVgoh!skjNHP+H)+h5c@UeQSfk0zZ0=7?EdxRf-EL7-
zqZs4=f+FFEs{Yz3^X_jV;7-em&^CO$*^YGHn5a?<MK|ivJ);lWzwRvg5ezcfbG(H>
zPyQ4ai)r$L6BrhEy{ljYFX$_Uox3PD@AZ~Wz2VY&OhXen*rMeJJFL`y$tUg5&{Vv7
z3j{n=2;yR5puz;q?P}ut7~xxCUL9QP_5w6qxU>jDddaa<o~^i~<mr<qdk$YK_pVt^
znNG><lstRv*zC_ETlcv1;W_iT^lpLEmMy=dlN;`TkB?N9BsSm8T*tiW1E|`zqRvT_
z`l#;LV<Kpuc<$q3i>|UF<z+U)^6sbR8>Np0M0pr@f4e81nt4t|x<%c$sWS(JDnluy
zbGINc;@3So%GR*U;ve7pV-4;}WTdxd(SQ-A0{BOdSm=4kza&x|T4=?9H6M$r_IgH{
zDg2$swTFpKr|*hB&8Sb_n<#Tl`5Lw057}BtC1m%q_DSRvKL?G^%gfSNP_wuHxP0^V
zMm9G3Bsclh6t=iCr)1zq#!{fuMqB?rE1}i)&ST%E$Jadn0eR(X%s1ohC{H*jAF`nm
zW7%KB-=4rY5LP<ldF+G&<zRjl*}eDpfbUkM7?pXQCb?v^uSm6ADraxm;nRmsMmr@9
z<SQP1Zhf?Y{~wRIfQ~EQ6ZSPeP!$_qrPANJ{Npr}aZygE^v=%PBvDD<#IOGSHMzMH
z@dDYLZH<3o3=%v)9w5ImS{&u(e*N5>yh!sCYo#**FUaoQxaZ5wdvGLySYG*GbKbTN
zo~{1cq_w^*Ho7Fui!<@Qd(ZO31W$LepLIzbCFA@$sADdC_Wg^+?cc|hSjbM1mnp;(
zG2TvFRD9CV!S`K@<-3)ue7%xW%k2Qm8^#P?pSJ_L9{&!?!_mr>&@hH8HRX%fm^>(=
zg;zZjI7i-cNIaFAk15q>{q7ds?A<)@eN<MFHA}X|>ltU1Wzm*85x!c3=C-8a#el7l
zTc%P*lv!gZPfhIaQ-9_s758Sv>1peFeA@ZzxBmT610}5{hn#5$UP*qf%jY|~w-qr*
zaSWus<_{>2zEV3HWvryF$7V!*Xy=1cVzY@y`;D(JHa{^;dgLZ2r@zm?%+1l%n~XC`
z(z<D$k93dgL6z{tCnXt;k598t<8b1ifb?Xc*vhJ&)Pp;EQ=7fr@0xOWG*a6PCXA?u
zCyd!ES3M~?cVI`<xgU&DY>l4bIs7MN)Pv)mC{!~$_ysc)91f#GlU+@k#9v>}zW4O(
z_Ym%xrc?E?gRY<6?qg-yU#TnkW!b~4Vdti!kum4G*p7O~(tmV)EHCuiJhxi?Hx{sK
zh;eypB#SEk3_VqhfMZ%*K27_LJjb06l+H#Lb1CwA4hzG4k8s8OA^IM2Qmo=MhgixU
z>~|1b|8sM=(9bHCY>3hz;)Kj``4zTnhbxaG!2RohrN^8Vr-?Xv>VZ;+z0T#-((_?4
z-WA5IoiQ?jrSJCWj2PBOB?Y^xQZgB7tauDFz-Ef@F>PUy1#H<t4b~#Rf|=*1sn@3B
zPOYAi4*iw=EVy}d>rK(^y$ioI9%rzJ%HA+ZP3TOOl(45ho14xp)4(JfzfVH#@wUId
zQ+l=)eJgIHLnmU}e+b?<LB4f<N;&ls_ebm6Zy(a$+_UmvRl1~k>%1CkM@Yd<`=;Z^
zZU@u)JZ!=ff>#jX_Kv5RYtEGNtvupx6X!hOt2ZupBWdTDl;h3-<7XdLr0VaoSs$$=
z`)BTQI+uNj<4xFsfiSl)_eE)1pYqp~`%g{Ud0)1^lEe01J^t^LpT0*36_t}W_Fj3~
z+q*3O>gCbTq*7N`RDHaA*5bdZk6j9&{MXCAPp<j;;j{zosfnNyc%GC0{4~($%v8*F
z!zAKYH5Sv4Pp>`uuXs~NGny!KgDX_UI!XGs=aH_y1n<wWp`DC8Y9vt)qLk&EdIH9{
z62(61EGD$F`Uh?Jdf(D08t_g{Q0*V+r1Kuh+fExt{K_=OP^G)CkIT#QFo`F<E9Zqp
zG8U%zMY7hVd-|@?<N9yHu8)}x3a7j~?YK(xTUUSdQb6+EXlpCE=dVLu6Q0T+)bqM0
z*O9UB)$rHtw28#8_Qe=RuMw>_OYrYmJe&GNqSi>@q7_4jq=9-<be{ichTF?)N}1;<
zgTlRowoMr{NwocPeBdW=$JzsTf}GhX;r6wKiZ7H$8<@kzuLVpTWq!nYw_Hk~;03Le
z_}kO81F@ftB%V&`5q@sX#82(hC?21emxvvn$>*Rr)utY8a%oaw;Yh200^rH`;H;&u
zMp5G<!e7fdG_2{yE@2e6&F|K!N=;M81R0rY7nsdQ-i}7H65DEu5#r%>hxb)KgIH5;
zvnZ(X$}i3{w(GJb))19CUfm_8#pP^$^jOrNN86a?7iX(QSLW<DFQ$w-D|3Y|D=tbP
z+=&doa@3jSJV3)~>cTa@wI%lmcmI(8Ynx5{HUv9OhJWA4`yZA~Jul9w1|RW}3H(ld
z(_hVl+~4aoAHjJoe;E<(L@>v^NT5hW!|@wmDRS0623uXqIL&_Hj?_o`0KYFEoSRg?
zPq1$B#r`?Wkcx*>IWlqJ)WqS=BAs8{N{^$PcS{=ACtkh%&-blmK2fQu)A#G4n*GD8
zfgjwOEsVQ$Sibu0xAr-?r5O-0&inaSmeF+^VSjzLbA;Q)8k<?3cG_Y%g^gYHL`0mj
zs?(iY4{|vhG)Zun$#Gx@PO#U;f8Mt2voB8Q&dm{TqlA98*?VpAkHk9GBzRv7KRlDD
zax=jB-qzys9cSvE-hJM(9rSJ_Q|wUf-177E#V^<}PGnS&;(u&=iC_CVW8&2SLA|ZT
z;X_fY#>Q`!8=LRAAsyY<)+e}spFnuw-)(uoiei1~;hjB~C8neo&HQA(CKS3v78l*-
z?O{rIwwspx;DJ}C2!GRC|Eib+7wzt22l*p~sj8!Mes!C0)vGe>?_50WK1+~by@~T;
zc~BpR#&5if@#b@hSSg(%`JM-f0!|NqQJ(#hj~b={(et$9*+%NK7Oa{YaxApF1I*$g
zCY8n{q!Le6hKoE}T)ruNRy$<bE`C(Rjj83Z3A<ND3r?dYF)pG_T2s2|QbBt1;`*q&
zf8n$DgB_o~oac;jE<Cq;K=+KH)|WgF?avB1)HV*dQNqqd6ZORs>&>?$z9;BNJLmUz
zRd`&N2nf-;eu;*b)=)<$DmIn{E}MwFvQGX}k50AMOHgyi?7J@|C(`_SQHi~UyE-pG
znedyqC+bVNkN-WWm&&*GKn9QVPS!GZ6~x6$5|k35epXa{!#aBmNS(IGDQHX6Gccee
zgctE~p?tfUhIhQiywWrR56vMcKk)F{wF)qvb#>;4UzwVk2Dbv!eN60`q5M1kR=Eec
zsDg52FpmLMufpYk=m0CKsv56ZnPSc#&#N9D4BYAFEvTs@r|~KU_l%8j&pK~9HVRD6
zCnq+axp3oH)EyZh-!N>0=hpw*qg1TG=)r^Y_v^m3wxS)LoNE2_tDzwZlK-<YoEic{
zRY4aos-@k%9P<tRRJR5U&rtgZZqo+pfT5?aH~82`TY(;(`FKE^Es^G;`J-7I*dtsH
z_;vSa;bjYp^~hn>>%&4-;V<8_(GIYLaN7C(bA{2|d@e1CGPg<oUZJ#s<0JS0Lu>%9
zF<;QJS-yymXC2(JV@E5rB9%<*2+l3Rr&Utux96cRW80=(A9V#n(68Uv!@UM0r~#}-
zLcA1g>9gG2=H_YT#9VKK$3LZUbKUyrJ2<QA-b^1A8kgix>V3F9)yL!H!?*O87>R@n
zw_iw@P46LubPkil`;@05g^ijX6Cy;=uYbFmdft_NdkdSZLa#Z!GqfK*4EXZp%ef)o
zs==(W?26a&w%?YMs{<B-dG*w=YB#0_m<8Gyr@@2Q7G59xCfeF+NviUf19+O)5(K=A
zH}sSwlY{dUT7r9g$jeIOQ)p&NRg{j-5}8e`<d-WQ(vxMn>R4^g047t($Mi>awY3zk
zdgr*+z}SZuK}CBz3BNd|#^}4)xlFnWZpjRfc*D?$3EMlGO7>gZ)?YGwd{l8zLN9Tz
z#nHrPdq|$B|4D3i)yVpC+k#^BYjcyp=vUJ}?N6Q^dqPIa_U!4I<20lvwrz6pFJ2&j
zx#QaHX(y3d=gGOwr96WZp>zE%D`6J5{xAwI{u-!?mQ#GtY7W|N61tgN+DAD!I9A)c
zCVkrB%OJAQc<Wf}U3W9XWInZ-qa&}nB&=qmd-dvn|G1`ZvGq-vT;<Mj#UJU#o1Tdt
z3%^pk?d}Ab5Ou30Rc;<WZ<^OD27d&DOrtMqf6`$+2AuX|Y;3G4-))elU+#*g%zWHd
zsFwaQ-d<L8qf!57<tFuj;8fnBPDx)ot~@R^g^Naw<(`ZVpp4od3HA4P9*Gg}wYmMy
zfbCP!p01`GldrvjaY`ktKW0e3r78r*d^~lN&OlEO3qu0^-?D}RRWyay#;vgU$K+c5
z;|Kp>aCB<!<U2V=dN7Md?9<cJt+q~1z7=)d{FBWd)z^5?V#sZGAN%iTbnydOg{O&#
zF0CXaiP5lGu1#ci`OAtdWEOU`XIsU>O1^MqP(8B#eUWRZ1f7m{S3z#xbg?vc{FFdY
z>aDr%U*KDNk^BPsZZyl!X?ad%)C$e{E{8|KP9}Re%16>~^8>W!2Og9_%mB!J$ZFQl
z3+-;J_jV8weM?XrXd;HAASMeVm<=#F48M{)Gv4W3zKwWM-Ci{U8V~kE9n_k3Gu1pK
z<-)b1q8z*nZiils!InPwEG90=>23Ojp-hJ=ogwBM!L2QJ&0`>7lWdO<b`KsmmK&#J
zCtwVDfQX1FQGq}jPB7ZJ)5ps4v$0~=Q~&pDK%-*q=T6lNcyR?lo);q3n*y9<sxg41
z(c}uUu*A+&jwJTmxs49mxh+Tz_?43>Rc(B?w6Z#eU)gMC`h7PM(M!4Q%(#JKyWQ|-
zyHD=lPDFG<@yj2@T?fCDTSwkbu4l#%8x0VCff9obo0}Xj8ezt5N=C^P?B&N5`OA+d
zi6$(j9VFG(aNi2QE}i)4;mBvwIE9`xGLn{e$|vak<QVAv(l%9n`aaQbXHN2`+fq<e
zJiJYbjb1rkJn38?gP)x9-@ovy?~@b$LgKRPr63Mg-$!he`x3t-Uc1N`S;^0+z43{v
zT$g``m@3Q6*3Wx-dQ^uwUi|$l=H|(USBhsyn~G*g$NYGO8LL?K7ytJ0E1934udX(~
zan*;4QsNTjZW6_dNySB!`#x2!|FjYkTd)u+Ue&#cd$QXtEoF0ok4v}cNyPE@&)kS{
zWiwj2m9_ZNquu!8<-ZyH2KM6%es`V5@K(%mbA9K5w3=RVR(fUQrJap4q)HWp&;BC9
zSjD`*SiqZo!O+k!(mWz0L_<z4&AcayRF$OXD4C~%jEv32q=w$a!Iu7aCvo?f33sn~
z)s7?L66qM5b&Lced|da?z{a>4W6~G%Ww)oN>80YgHt+m;=GJ#0;aT5-W~MPap*P2m
zZ*Nvxk9d!ritKED`HYM7DOaw1KVqWDx4pR(hDR{Js;IneaoU}jZF8#jJ~=;Qq|`;+
zL-~{CeWRpqayxr<&uz-qy%u%x*+V9F)71il0HfyW=Z~Jb6<YO#=o~&%_2Wn7j~{A5
zA+fmk421hH?~b2sJk2qmA$Jhsv;0^N^G>LlJqR|-8BR`31s$-Mdd$hUg8ak6G%Sf!
z23&`}?Mm*ytEP;{{UTs`g4=1YYxieqx2?51ONBNsB;$nso}D$jJ8#LD72h^)J^fho
zl69pD7EC?G%Li^$1xa3#S|56_GOO2f*L$nx`__!wN$N^LM(yW+ze{p?U*!(5IH?(C
zI;NDFt~_(1@-3E}ajj$T`?<ZpZ*|d1Z^S3Q{`*NM2%ogMr(Bn|=?E$2feX_GYm>Q>
zFKK2z(T%Rf7uwHsWiPwE9o90ak$9;XUua-)d^24oIv{Qor_bqyq^j#WpI>=H0{i~K
zfdK~R`A<`Mb29hwuNv2_wGH@F`5Zl~P;R9-D=Hi>YJFguD`smva5BDt@(O;I{O^Yw
zm+L0wZ0~_n6?SCjS#K5Wo)BL8GnSG&DS+P-#mi^d5On1VyQ$+Lmp$qaK3y@Lr0aTV
z^gF{47#EzHa!EIHrI>P>9B4{BCJW6U;ksTE-kRkp`lC&hq~*RV8M@{BFzlh2s9Roa
zpNjfoS$CNPszFN@g2#_XqegJu80)|^HDUc=O8#O_i>4#kqPyjrvIpL%+y1dApX{*p
zeSdKM%hLr<!YRXbGkv%+mak#cHZWH!${@JtkAWqJsHkgd{vrTd!+BBbA1B2-9mbML
ziHPosf8DmD_#LkmfXD2W!H}u1?I{Lf)`QS&7TsE(vuk+H*V!0bTZ4sh;mzekh3m74
zjU2We*0vziibH%tOKmV|-tG-HvgW5myVGk$d<3aERLv)|hpdOwFy;BV)L~mV)91>{
zLUs7?UPdS7@)znzR^Jau((^m7`c8uvFCP4`!&+QCx_{=VUbzGj(T}yh)_-FGL`R+^
zP`Is)|0)c<e*CJhS2I*(qo%{d!VYz&7OcKwPsy^34a<qJs%h&hdoDQr?J1%z<!Xdo
zFVj$%tqW!&oLSxL6r%Ji4boh(`m#UIJskcrH&jdUb~-k~g=~YlUU;#!FE-qvQfqT|
z2xv3CWkux7vJY25f4w9VGF!UGzI^N@%&>$nw?Ds-z<00Wq&8N$&WNE_(;YaA0RPS7
z{j*eNdiki(c=?Ae86L<1R9u=0ckaxO#72-aI5-0}hj8-|DXYk4+g@*$JGLEPv~OU}
zZkpM#&rfJ}xVy*z4>1gjA1=d@Bq$>Hi8|GNZ8xRnimm1V_bGqmV~CiEdEaxsg4s%T
zv8Z;V#21mS7=Gije*?m2s(cMH1)P~mX3CjVz%gPJwyCVHuKf9vylTC0Yt7k?B9+_a
z-`AQWLz|3UAWcopKl`3fpS`UPEZ?E8>?YRtJ}q^wK^<Foq0ygt#QpW%`%|CF8E1m!
zC;+zp9IlT5v-x4M+wR=)&sH>tk}q~-3@)~B9VD%)Zb(x5CAwiaOr`$d!0+cr%+7(%
zRK=OwI~?toKmNI@&t%_}CxcBZ5~s}{i&$w++H;t<az7aOnOIFjMD%Duj*_Gp!T?uJ
z27cQ{yjr->+>YJhOLp#8m+dCLw8ZR6dIcX-%rx^Ugv`4tUNPNxH-9DJ1$C#Dm6bw?
zrKKg-VHNKjV;}3%%SlQa&-ygW!HUmYh9}t!v^zcBF<z^W-_-RJ)?c2s760J0I%2Ro
z-?s9{N@b?sx6*eT5s@l|lC%4C@gA<M!FOX0OOqSLduq+H^~R>jo=?xbGfpA*kK%=#
zLMrjTR@d%tk0Em?+Yz3H_!+rTFB#qI2QRPSixvvt-XhCjfy{rDVrPk5f%*Ukvv8+%
zO9$khgD;q@8mH#lz#~m~xtkdDgHHXBFV~WRRJVmZXuzAlwcci+>xU8w0ZugOba+6H
z%1wS<LcTXp+M+Ms!+8<<MF$YFC}yTs$2_l|+*#thIKpJ~R9ivuiddWZw@2IH&j@A7
zGw|lIE+OZ0t0CTZ@n{~CUH3K>P5UM#6^)M6u5b#G<>?H=Ul)Ggk8VhRkTdeJ{XzOq
za=t&y^S@-5CUT|m^H!FYSMh#3E`IyrUzj~p7SgBWR*^Xr?l>?wxH-V(DkCi&a?wHu
z9R#8i!zp*M-nFShFn6PKt=ny^|6a0HlO=hN57$2S_(PgUbhPc<&(kD0Me-ylAa)pd
zIT?gn44URnY{HsEczwD{(B{s}B`>QQ{<W;W7r7gYf~$)iCh+5ax{I8RrwVU~^;E&H
z>7EjNN~fF*3Qb0V`QNx6_!oYaWU!vs_S~@ash5+<!>uFRvuAC-En6j31m&MIPC>8q
zA#vszPbQZ?coG=He$F|In>v<F$6PJZG}!%A#Vyfwy>BM&_hD*kF4eU6&|}bBEvY4#
zb!J`2n&m(tZPf7L`ba;O07xsH;C-MzIoBs%z2~@!rXt=XxD`|~m8?GaS8639IvSs_
z8BpJF0q&)7?=W*t3PmBl^!f*zv+>(=>2BSbmIk=X%KR>YRTK(_X`z3wCwY|IEjD!4
zHFA~;Co*j_zVlMnLbJLgt~Dv>&nC*&qmetr@V>YmB*kAiD0LKnbnW!x{r^+{;~X2$
zeSF0O59BViebB~-2P7&yuCq19C229m`Vz{|fJ;az|EIe2|Neh8rn2mZ*~J4mu@lPZ
zK>q_uuMnUKSuN6Hx`+hCIrd2mWaqoKHs$Vz+IAAk8b3kI=7$izPn?$#oCv_;T2OdC
zBvD+KOWgVS`6Gw={3Jz}yTzZ9L=+&|1@Y)|BNQ2g+b<@j7Qki80!CR&?WtSJ>L!%3
zIqS3R;01)xwMBjZI23ASgRgvva#yjcgTrc^JX7p;ZBpyEZ)s7!#gzLptQjgR>%(Il
z_QxL{rtF!WrOI3Gl_p`d`^H9HP)Ump$+q1jGd8BF6*M;Vpi7;OQ!uk~UE7%2N(J9(
z=8<ypg?6i2;a(d68HA7WW)soN(8&FI>!TANSP*qJwY3rF4Hbr2dGulTt8SV-aH0Ld
z9I^~3YZ>z&k~1eS>Xdphfw>a6M{B?r|55*Br+wjC#}p!3Q~a+BEMfClbQg3px%QKC
z`@M44>y$@ukm7nT(U93jUZWv<8oBX<MHfv1c-kQi#Iv)rr)0zF6?EWl4Eo;TgSsQ}
z1RufrsPCwS4(M~F_c#5-T7DNFcI_<sZua_VPZVxUnBn_nD)4YFk8A1Igi_)Y<f5L*
z(*CTeF+v_eDU#Qsxq<M~0k8-3x<K$6#$%bsK%9!yE_q(ky`N6Jhm#k~`d)~h{IRSu
ziIh>rD_B`g@XaKcmNCx#v8qKS*b*sU=(2%J;hfy-J!9sY%Vj#1Z(E4kj0b1&eI>DW
zU2^+Z3gP(*ToLu_)@>y8avvL)Y6Pd;mJS^6+%qNp=I{%;g_%fC#&>U5s`TB8P`!O$
zY`1kBi3!4hH}f111Y_*rEI1Q<lg}jl)vL4kq76JisCtmvp0(4`z9k&ZlL?!j4&ljH
zR#rM8OM`S%|HU|{!G92gbKA+hy5QT#CPTTko!*`t&+K}H4H#E=!Uw+n1cMets4yXW
z%Zy__Hto(!9nXA%zM_#g>O_F~<9hw1EPi`}$Wc851G6tp%DQE~6Lpc!m@-St(m{>M
zPIRuC2ce!a`Skpm|7dw*Je!i$4N~)0h3Bf%@i{<+B5&JG<u5Ib{7OWyV!nz}>_P6t
z*LeH6*;yzs9?3+&2Um%j@T?dfbGMr2nlkTyBcu1Jj<y(CYD1x5PyHv9B8N`hP+fUE
ziz=8ACaTb}XA8wH{yUb4^<0!wgJ|J*GllRPFSd7utFD?xVdK8Uc}aMGCjRVq!G=BI
zX2~lO+Tm3tRXEPUoe5pjjzF-dLkE9`NFa157KR&-HZ(MRxQwV$nYbEKiJwWky#N27
zi1(l2HX&!bHUfQL%a;~S>g1=uALv020;r<+aSPdxVgp<;-HcNh`CqW;{V-eZ3p?n+
zYBhZ4Z>bvAJBz8c=&1;q0y;nv8T<AL40neMJ4V?29*GgezGKeXq@%|svpA<uv&6Mn
zVv<R%&0xqT;h+ou^Bb-zHf^rd_Ta!gZ@18!YBPxN5k+{51y!}44uk$8)D|MTWz~RZ
z%7szWT~(dEdc@=~o@m<Fge<Y;a#76&SaFrpTRm8Rr+RF`Vrzq9FL4xa1`0Lw<f5y?
z(edHHf#PslP+~|gaHytrSM$_PHpWZ0q;%8>FXds$HRe<Yawvi>c6%pK{AUAkQgpqK
zzKlGQ5k@nKm!Ix~G)`q@q6_M8B=KambgFi<!aib(bz!`e%arlGm+Z!pGm-c6?d|83
zSIGQ}AKfR{)7KwI<AKsdZruU}QEJ|-5op*{l$7PdSFT)<WVD}0E8{v}FUjCA%q%N3
z<Jb2>&}F0{MqA;2gl*>vx}%)#Cv&3f=Ka!K`JuPRd0XxXJ{*o%?68eMkMLl&-)z@D
zp}QcX#IzhSdQC!aE(dj`sqCSYuJw<#2%&IQbNqXwuQWxRd-vweS1SKX7{+`iruZY;
zpZ~HP7!z22vTor3h;n;8j`VF~a+)s6ohn%CeoBGY+NGy&FvQHI;d<c_L}#0J>s(wQ
z=wIt~;uIcA2*vMBGCMfKPu?r!UVF(L6zZ~S*weR9aJ)5tO$JvYxZM3zVJz&tq0Y5H
zmQZsiv<H*vwVli+aED?h+_x`rpUJefwdI|X?^?_}EAH4yeTPQMXy${WVEAE=?*qA&
z?Rfr#k`86g#SA9<{#U@QO+WuQ6(1krbnYu)X<V!0x`m&x4cEx}i6p&$74q~F#t_2T
zSS;L8Ot2+?Za@C1T$X>Jae8$wVv9cc+M_KC;s$W!G9I+eBIcnu?VH3ZFgBU=_4Tjf
z-7KV1q9O$<*QEP`|H65Zjrm{G;X#>4t)&bSgl)#3U5Dli(rEp=ikcdc>2Jg(cL4Y@
zin<iPzw8+po@1`<0vFJ$Wn4`);9pD^pycX3sHUbC|4L1*ZR?$$wq2@LrD1H?Z$N?#
zKIAh~(S9O%<DaF6p!re5KV&o7m|ZNXjLUd%DPcUI9$s-jt3p7(*ubWXyC0!UzbW-4
zv)%OjhrGP(`gels)0bV>+Ph41Mg|3}N5}J*I%8Ns+u_|&cviP;GOc8>r!P)ET1p_-
zjiwE6vY!YYCB>edCHSAE@bwb(jOu0fq(5BgYEfJLHl2>I^TWJO$vLnaXI-~!E$tA&
zZ98&In4b9uX%*;G<lwqg&6HZKND(D6mS^+MO?;s$hO?&$&Q9dU5>s$U$Sns2=!s;u
z>iEFps&KAG&@69eP|YChSEM+hWn#V|fSV>Zgwh=^-7wl~Ti^;a9C$+^*1Z)Iq`8U4
z*0a%eWk3ZK+)0!-L7L;YWQ99$u3R_gCJ=%*)XnlW6crmk>s3jau>aGrnz8u@1}?zu
zImy&0SaEen4X<_S0Z$5A%Mnz+mGdnSuEI+pw9?;&=AkHZG83oykMoj7c6PRQ1OHH{
zu=QvLUhCrpk@tg_27+9(>xYqcohw;m!yh(Gxu6D1bBh#D_1P25%6!A)SuZZsrv3`G
zXUxW8CJUo=<Eww(wdcjf#c`uT>(j?kkY(rSd7QVK`^o2ihg!*ReSIA?uy>~2R;VcV
z6J3|MtjKHpW`v?W9cM&Iq=NABgSHEp<@&YPiFfoZEN0*-4P%Vg;o*!kW9R-Or6|#p
zY7-v=Jo?hS$(o!QPi2h%f39l&&m8h!CHto1<LTeVsTgf-dL1}^442hR%!}qFdg~3L
zt=mrMo*?U`qE}W6&K#-`_9Z@}jO%@6AreixsEPsow3K>l5rU87RKCi*79Z&7c*}>-
zLM0YNylPESvqD#Ya2wGj1w9ERmj3+Ce3cXVXd??Bx{^L_xnrd<q8(W6##OM~z#1Ex
zW4VQ-;{4+zwPaIYQhJTc`V5Q9Tu9eF0|UveGqS=9^Vlz-5E%Yex4GO`kDoR{S-5K-
zJq=QfVn{;Leoe;-Yq*Gc$&%f?Qjo<K{LFQxF)z<PP^}v@KiAcf*g6_MQ-V>r1zO;V
z+$oVBU8F-o%!+dWLDw40{ms>u+~}>SX>~ZIwIPtxxbBUqhl!=6A`hh)TAmcPROY?z
zMK6iPTXWH^U&RQ6&D(2+KWc`Z@r{vU9OThL0@0%wX7t{uzdBR?au*_2)*)G;5sxFL
zf1KvdFgcFTa4#fhcK${h!(m}OsG(|>=O$-@K32Rn7!W~$QsNoNs*J%{{RIo*g(hKg
zx<5SLYB46d-V=3F`i&4!F>N%^x3*^dT;0kDvlNf#Orj!5##Lw9fp(;1b}SAxes%xy
z$7M~cSO=W8Rg|dcnr&g#HGvYT(<ss8Yum>;9?UC{LMOhqGir~b8Q`%ROtMQ!TSN-&
zLPw6)X90Co#@(VPb=idKpsN9onMqjyOAMHyfmhhKu_WqcKzrdq>!WRJo@)CpcE5-0
zUUG3nB23q(yVHv)C|CV1_EwDiGC*mCLBtupz}-K%^Q3AH=U;Fu$r1`C^9;;;l;(t@
zf_(Qhp1$BfK$lti&t_O~T2wH5@;+#tPRZT0L=Wx0ATnQ9qOBU|S`&P>?{gKW8EW}g
zl8iHL27NC?R$J|MYp?TlIa#6p4Rsi01!DO($YLv&oYwMsa6m}N5jq0R5sBk53FCT`
zidLBGrah*P`OCecolbMfGvlae3jsAyadDE0-tEY-hHMQYt7SQZZJ2fQ+cUQxIBc#^
zhda$~O&~LB_rS`-uE*WgODgKN>hBgU*@DR&W3Y8U1L;`En^O)|cU&DQ45d1v{2R?o
zadA}IPhhlcnLP%3UvcsAv2><IzYq}E_iSMO4*1nSkXIZQ+YEr$X~ZRk+x40qNByZ3
zUujHQMSz6FRHZazX<|#`Mu8C&u8vlLMZ9+cN>|z?;Zw~f?MX>V+lY4wtq$v=%+|an
zHB;fTvAA~|E2B+|hV9V6fS$n+2-qwA{;sy)@T@j900P?2>0`ug3XbK;puHoA<~^Pi
zWE(0P)(eoC>~a`;j><Z)TGI~Ls4RL}v;@;<1GeJ?*EcS5sDB+#NKCo^>*G(LD42Bz
zrS<dF($lYsZp^1+=jzHyejeXcB*Ht>>nKoq1&mZRNPj>{(?^BwiJsA0*VSJOkWsY5
zlP#w66Bw;Pig%B?@5i{M+EGhMCE~K4#a;DZaN;wZAmx}GM!^Fu#PE2eRSE&oz1)zy
zqPqIegY-A(X1hjWDJEOYQo)t?co;y}h8`&E6G1IitH23`Fh74Ayb<#zzKTwz%Wm!e
zB=&;L(0oA2mzL)%IHwkLdly@Emr!Ct=S*+i0<H2H9v377iYXM-H}gr7Z<|n!dRpY7
zX+qI8iTcNGy2w*x>CapYpQRqN_6vr!wv^n(=W_<jw6<+}LrB>Hb5`z)+MWzlW#d_W
zGR$o?Z+Xg-rM3}0YKl*}q`G>qUNunEllx5a)r1YWWnuO;p|!P|i5cxnFPL#^INYO;
zdm?vU+Pc%KRs&sR_thg!xq#eJ)y<Y3+ETTr+(SJ$G&uM{WU#;AgK+7|dE3~zT=nn_
zZdDjkYdoBJvU3k~Nb><oT^V4z9m&ly)OBRPkuSztZtqoVYOPUh?Pc1WTx>U6n*UWh
zKaxI|Jrqvp!jh!E>?mFi=bX`Vi{DQp;^9Qo_3(Uxk)QCQDnK_N82P|k?_ZMul_1Id
z4QR`5z3n9wqUSAo-OgnGnSCKRdB^?+&`4MYy_9+c{8Rqw)v{)FGlt~A%ua_j6p46u
zv|U%KCSt>EjBIRVM&ct&RrH-~Y;3SpAhLR2F@fd5r6A6*hK9;Dl@K6-r$Wv{p+?ko
zv8@%A-XI=<pP2?R`o*i1xQV8ve15y1za$b5<DL)Vq*UJIcMEI*$e5RxS062E2&P8d
zp_*X%qGVpkC$5=xd=(vjPYjvUy!ewgn6w6ZGFVm=5zf#LmaR=+9+{ByBUSCDYjbGL
zU;C%Osb%ryV!#r_(h-=~huL;I_qbD^<KgMMu5QvagDQs1x&|>lVV(o+%{=1Rq3w$Z
zs0(Oc+_%~OnF+E~KA<oV?l?(F=8f+hA#RFoADxOHi9$!H02HvXyUpAh;mVs{Z?NY&
zyi5F)FH4M~3Ef^9p&2&>u!(Gg!hH+^GGVKIcu-oK%P)_Z<xVss)SBRw9=SOE2<_V)
z#|d6`iai@h7-n8d&TEr|uSG$BvHOj>>5JxOfKi8~YyenlLY`Xu>s~`1-VwJ$GWYTF
zBW-Ssr`KNDTCvh_nz<5L*^;|t#)v$HzD1~Drh2q7PQDLQWi}3u@m~f*XbK^g%NKB|
zD)lrP18=23ijS#sP6hV^gGg?<Aj@J=xKcD-r195BEZCu%BlB^w8m!*!b5kQdlM~Qz
zKv3p;!(U256wVN41W>Ow;O+%@<@Y^*-Ynr8UQd`wls8pg-C(>yL3F8jV`+O2`d!<f
zye-OFbZ)$aA@fV~ttK+&Bo#tobFijK4}sxd!{`5dknjKFPv}WB8J2n-=*dT<Lq$n6
z_SWd1Is^kF(LAx^xIuS?Z#{oJ4G2FU1%sxOh3fs%nBp%N&?yt@CU|HfDEc)Q!9-SE
zAdKHi8Nl01yT4^vf<N0Xs2fDtPH9r#F?YG|c})9$&`8pU{XH*4H%njc>hmK&aCqw)
zBgNM&^;fV^DzbdHzq=^5oGHR#bY%bWztxfpMi}U8Uy?9pnPGHrz#Cg9{|oI<Qe)n0
z$bFbtd~{Fh{qHePh5I)5a0!VvWq)ic=Bc3}<jMT`1|J}Rb7e<T!Mkvmz(Uq%Oa0v=
z78Ng<<8Sw(g|S7>DVx9`OPE8F4%hFMupUqkr~#=pZJF{|8|rmx&B#}ydx=pnrOxhI
zNBxHUI@XphiC}`;kP85G72`~>QqYd;06p-)F+<A-T%iOx_@Dq+&T#Kbe(`7s*YN!@
zCmcuG*&&o8T`3x#Jt+DZg>$eH1a$r~jd}Ii@{O*o4TAO0aDB9a=RWnIf;s~Hei7+W
z{mXBip|CYrcxVSNVZ^p)1Aa^>{+mAaHETEgYbZz<OFmT!e9RrNLo&ciIg~-b2^Pa4
zLMwmgF=yFWnLXm;E4B6LAJ#qQ!u>&aM1TQ3{E#Yk_i(eY2(qzWfVg%n>bIe1?3^J&
z{EZv?uwDJb1vHa3{Sf!~AWeaLnH@I52-ST9dr_j`y%c*LdRF(UeEqZZdw}Hx!HZ$u
z&uCG40J!oV=_41$-Q!Ly0DgFnncG&zFBx*m@B8UWH~{36`EwR5zm`Op#fwZQFrNcI
z0gNF3))3^%N+LGL6t_6@rk{WnGWng_5uH+6fwS%Io%wZ$h9qu&Afmi5<4M0N8+mak
zG(8ArE>&kTJ;pPelo^nl<50gc^YHN8E0iPJdv*#_nmr{pt=fdKFCA*XA`+&D%RNtv
zpA|bkr{g8;WGH7kt$dz7yVobti<NogIn7z2(yEeuf*IH>X5O(lRX7E^_cA}Gt%~Cm
zQ-o5gy6lLV69%^5F-Bx+LE}k)R5`LG{ld=iq#r{aM6TQ<>X{ZQy`!b~u^U>?+)>yt
z2~K3lu{aIBHQ>tXE+!-ulndl-Nm*ITm>LprY9sRz8$Gv&)YL~H(3%Cby*BtPPX?0X
zFEn;QC(3jQF|u(Pmp1Opvug@DdSi9MzWXtWTLvw1;DfY;*?{`}JNxMF-lw3c6FreB
zcVusB9Vt`v>)fiOj^n4_oj0T(wJh-vww?J-oxk|om;g^^nQIUKZ_I!fRpV-*>$=>$
z&k<&WH=Dt4l#lZcw(9!PimZ2_7N10yi}H9#aR5`4yW)yp9#7}X5&K54)q_U}`j1Q1
z8Ff#U`)+>n*WJyZo3hQ}b%%V~46=*#LI!jWz@YkkLUBk;U$Fn>)0Di~XUmicUf6Px
zea^8_TFmR<pbc>E%^CGYpw6XCIK>h1*RkH$dC$Krvukq*LKKd8U;fy3ZD54xg%Eb(
zhLR(>cC8%IAA<-j1+_R5P1lXOxDS@WqkAWo-?{~YzUSjXenit@L=V6iQ0LXzs_QCu
zEC^z`IS_(?6;p2)+U?G``cn*oHp^>WOgX@-P+~uy_&W9#N2(-mYq{KC`--;t@^Zhw
zY(9=45CSDVWk{z?aaW-gbSU0kPEAFH#XF8kig?Rf;Ux@{H>$KY>6=9?dQ0WrB%yFe
zph?qC_?_#!_^g(i{5nToO7>t734iIyqAZ@hs?j9BM1jK#JB**dR}q8fYK;Si{j*IB
zWXbJ0ZsZJw=c0df1YkDyCwq*5**_e%W+wO86c#saPwa}14X1j2Z`rPRH;Y?N?>{+m
z%-UM&-&jDclKyj0DIG@RW5s?up&St3kq`8wcT?`=|9J*@1}Ca@e-r6$mV{jvO4Hw|
zJu#82^Z*7KWt|3&q~WiRSn@hgnCf5u7p^dxP^fzO@?`*2%FSGS+hNRpnSk>9s)eDf
z*}tdH`g?7y-S{U-@e1EqkJB`kC=g8!e|ikCTL$z+yg1hq5(=yCbEHs}89Xb~E3rNh
zr9l|`@x_CW$G(Kp@y#aoZ#&{F0e-h6w=YI=*n=PdALmfiK32f_p)DImSBE4{h=?UB
z8kEJVPU7`n?0%PSDaVm%T6|Xm>!G%$X7o??TwP=f6lG5Jsz|!;$BZzs6TBoIz#Na<
ztYi=4CH^0u8pin!7h)duAKBRx6HaClO{<^Q7IeN+e*q339C=j=#VOY4zbV^uKk8Cy
zx2sc~#%j!v7H`Y4=qp&((c#y9_Uu`4Fofc+jQQhH-3-0RisY`krKo!}Z}In7)a&z@
zeK`_Pi3&GDwjPF<8ORu&$N+%ZZ81G2<hh))(274?Mrh&dS5K_x0cU3-RNJlzXZIu3
zALHEnM&@ZG!^YU_;!4L}Z`b+ZPq&}}#OS*2jVJIZLGJnEwE38)%p{X&VJ^~MHI93K
zcV@1Zq8$S!!aVQX<7tcnL`UOvZ-4n6W!BXJt&3xmcQWqF$I57U?9Jxj9hY^@f#*vy
z#({{^vx1XZ>FSvi010w_$p|Y9loqZJyZ};cS{;0LV~wH}kcFS%q#FeI8pruM?QTVg
z2%>yAc7sqc_SU4u0i}q<p!<yaSGx1V)93>}ly&_VKu_y&g-{p880~e7cYIdXvfslg
zSn8?q!`yoG$^761;pJ{MPIUo|@+W4R<r~cDfE{}X;5J~_oUs(=+KYYFSp-cLus;as
zFoGG?lF)2LH2TLlt-?(p`x{U8aE`Z_)fR3pOg1OCyLB%SXcybGSD4ia58HA4(;8>)
z_$)G)mcs~_{p@IBYIg54cH7_aYdEzv5u&2^iX&WBS=m?}|0`>+gghpuK-#{ps8B5g
zsufnYDcPb>NX#O@y}<WsmTs~Rsy9y6u&}Cc)VL=mK$aTUe}TvN_KCd*5>X6*v}B5a
ziMN(eP$S-Rvhkm^USFP}5M7tMrq`oe;Yh8y>}mG~IcOfO7r^{i=yjGMsw3{3HylOj
zzfWlT(aXJn+C1wp2s06LpGF2ClYSvJdEE*TtyDT3x&Z`Sh7PpT-2+9))jc_5%Aq6B
zDD4U{%`rrgjV?bMA=q<oc0VC`ZwQX3=`KwQBD{{HHz%X4K(Qe@U-uNuLr*4=(}x)e
z*u#PXp#!{Kw476PfIW|T$&-{i(5<AB%Lsmjkrg(L@{%>7{OnGU7iz}@)^*~Gih;hq
z#|HxcNA8HP<mMn>;q{+i(0LL-oVNzyyB|*@*Fo@eQDiNN^f|MvzJY-T#x?}#o+ZL}
zx3ImveS9{`hr@hdVV4l3>A-rv?D-MuC%w3J2bOT^=4D;!=;*L(%E`&Oul`}f2iLC4
z=QEJr1hk9Y{AD*au055%o_y{^wc_<d2v_+E3$ea`UneQ_6dvKzjAS0htMtXd7&-F@
zGkCy3ds1yX?O9HI0&V3u8^7N9{uH1bcK5D1#Al1$+57$5Pz2Lgyd`pM*blvAYAQ2a
zi2mDkE<}SsUc>%wxJB8BUUT4W#frBUx?n{02#058WEHxw61v(7|L-S1f8NYLiBSRp
zZgz-&#_p!qa5sS=IhiF~)q?shz#AX&->*-)V@fY~`sW0o8*pK)<0{<6wD5pDt~0p`
z<;?p6h#$thY7WT~3YRPB=$;9p)O`$WV+z$5=|r7Y&+lBUx;C#7$Ur`f;3FN5GE@~q
z6)C=jfx$zh_|oIz+tM*47mLQZ)OPwqd%+Cv_&?XhM%)7gIN<{MCQcWV6Zb3{*Kr6I
zB+OMD_rv5ayt=9i)w%(KJqd-#99|!e)2j5Mi`+3d-^?Kz59_}Zj@l^Wg`e+u!%!w8
z5P-<F(L+J4lC=%{-~Ug0Umi_m+yC41^gLyZ24f*jvJoj%rl(CBM8q}=mAQzbWU6c$
zD5W;35He4@$UKw`wM}K7N@Pxj%r?&F?tR|1-rqTAt+UQL?>c9#v);d&toFU{`?{~|
z`~6H`AsNe8lPz8Rye}Yu?mYMAHVBCeP*m@Rt=V^J5f9rVR^#yn@Y+9oeFuS+5->dY
zIMc+VCp`L4Uc0%0ky4rY{Du&-*~Q)_s=~=*lt|fq*mXrOQz(KQ<WbXNuh~~u=V{-S
zK3`dmtgdlvQfCXtDu|bjpN=wPadA4q%=Mi}RkiRfDh^qt-n(kY6Rw<aZ?pc{U-P3g
z&#^ADNG(03Y@7Nom5@8p7!U;6buJXjo@%um3)7wFFCy0A*uJ5QR`&Qq9X1dg<a2d<
z2S&hA0805W*l{rjHw$4-M1yQ3-Lzd&GAQ{_A~&&V-(~$Gb~N>rU}_;YoFpiH#=Ol)
zrvR?w$IWILuUvue)jg6+IedScb@L0<1>w7F{jXV(&R3K=yJ0JF@cWu)oY}wI`O}u)
zmtA?5%=n9+W~RoUcB$I3PVRF3M&>aVDs(VrJS)kqSN`$aCRKM_#}&?N|2}QZ|6$ww
zuY&Ra{8ys?y@vijx8y&!<o_L}^`Dm$yXC)ANcf-E`TxV$`TV+oL;u7A{^5N3&tv}I
ze#`>EjBcWhIuseCC2!Baf75IiV6Zi{;<5P4|0|e2ZS{U0ab%I#N&hO+4nhw2tvydb
zz}*D8RKa3XJvp-A6Ga6OwzjdihcyV@Ln-|hqMP2K%F@~TMD|D%%gfhySHNc&<FJ-j
z*kH8*A$g<h-}ua79WSqeqhOFfMZZft38?<=ueuvkd-)b%E#%?jgQfu;4`IbMS_u{v
zL}*e{Fz!br#xbGSpRq_`I6g04ockJP;Ul*j;9?!rb{Q{hX`i5|A=IOXF*M^cdg3<p
z{*Z+}&wowmZB`0hutX5MK_t=$V+b1wVEf=^twWN4_v}7iu6pl-uF<h6*$ptKdMXV)
z{dASInC<D)yX{{9ot|93vj=J;l@#M$0EYIh6j6FQLGbtZ&{)0`d-h~uW=X+y;kinH
ztse?K8gQkF!UT!X1_^O<H_!D~l&Mrg)`W&oVU_a4UBZ^}!{=f>xOt*~p=E|bV`ywG
zm`X+#<^mv#@^71im3po$p9(fI1rNJ^_uv)O(ag-citF{?0cnH$Ux^Oz>CLqzCgyPp
z($24e4mXtes@h|zBvYEY(w<wCD8oie%M~I~(RVQ<G73#<X8<qsm90HSaKq6>@3uW=
zLin=^`XYQJ&#)_@k${rUvCXyonOKyUYlD{Qg&)OVEEZi4cIJWL03p#2wJ&>Lnfb+U
zNc4-U5A^<7lLI-j7qChATNC!F&YrG@L<F<U3L*P|vr89^&TSv@Q^n(G(IKO41NAF!
z&By_1sy?`crip-OWr~qPr1*pR`2DVv{?jn()Pts8nEEQxJP-FrK#~=!l{p$y<?*+h
z0l5=?NuS<(n-2y^jeLl$JmEPRxF+>%hg6j3_rB(|9F{TXvK#kiXJ?~)_AO%WW!9Oz
zA(At%iCH0pic!Oz9$$BuX9K6WGOSO#dM=}gyv|Eb+Yi<Un@#~iU=yqE8|>9QapF@?
zc_7pt_lAKB+5m3y!D0ltE^U%!2a%JDFF#?!qdnmhyr=@Jt*9YfR2o)R-OvySm7d-p
z<QJ?mH;AvS^d+c4GvT$&DV8X7tae5p=~mK&1l@0ikUW$@fC82PH#kAe3FX%0tL0qO
zJhDIO*=x|b`%K0X{kD!39ajM|#w`oEN-pGhmBOA%>cw{_N*mw%LLFvn^L^pfa$hdD
za&93t75IA_!)?>|Ozynklw+O)f#HF}FQ-2hfFRBl*Yjc7>oGO5w_BN+ayH*S6H7Tm
zY0v2qG@9PSjYDD)7tR1a*3V4lpo-2!xVPV8|5J^nurKuS5d{OW-se#Kgyo&2qdNn0
zd7C6lDBo)L?c!MV?L7-E|JpSkt}XnkK3*)IqT2%mPYsQUIxM2q4baflbva}gtKn@X
zdx;DhJO6_5YHj>qe2gGKE6^W2uP4Gj38h-*fk2+N$t%lO<pQ?*Qg3l6#D)7CpcII#
zoFdjN?GcR+2omhEesD%WU<f!Y>(ag`Utyo7vxuq9_nyy29J}<-ueYVlaz`P!;=1Qq
zO1)|7{E<*<CO0h2{ML1Qy+Y(JTkXUd+KxW-<S9_=^wm9#iYmD@76SCXLIg(QwF;#%
z-;3une#xL1)oY^O&El<wBRltl#w3BV?X#_ZxH?-@m^;SutyGHXDgL~w9g3CTwrLrh
zaW{LOs+TZTk{#{7fh7kbc>=Tpjl<UQ9=H?!Q2fNRmkC?+&$cS*lD4O>HM*nvqn4N(
zne`e$GmsQT6<q9c8i?>rQ(A;vZ037`NC2m&8`uswd?4%m>tzz-F~bWQdyr(FUN7t}
z9g`#5KFnemlbd!ti-*oeHcJ&`Cmh>6m^aJ~^x^0GwZ~5$@*aD8?OJ)9Ek{$y#6(u(
za#3=trdED$NFX>M!e8~kxCKga461#or#-s>_xPt0-=#gz<m_~OUtcS1d{|#4zFA-P
z=eUnRI8>zSmDSbNlsg=n(3RAsr00)gpYnw`zb9(PbB!Q=55RI!UgIv^EpE)QgVf=!
zos}H>7AEd%+}U7mR+v@&nXcNHZtj?p*6s|!6_`Q|V$~%OpuE=|;wv#qss=#`PJ_C|
zckP7~%c=M6y)bk4a;R!}Ppau3zrp@z5yt%C#YA8*SKI(wbPBi+LSKF39E=~}y*dC<
z$A)kSFajVxsD?WY^JR)BB(3&NYN|`rE;0Ai`d~v@=)J#F)L%m)ea(i8&`2GWsJHn>
zi&Aa{+Xi4-Y+Wwdp75%1i5O0=^>3Yp8iXoE;M|E61k%;%Uh^M>_cRDnJ=t}vu#p1^
z9UDscf(3%)Zc4tSSp@_cdtG`UN|@9lzU1R%RqF}dUM*!;nca+%a=Z6&ngiFa9e|GS
z!tl+X*a6Iy?6ETzLX$v{m)zopt1PioxPwcEV$1%J9gr|B*yeeq7vpa64`VhIC)-}a
zcyV*BCB4bOv;<~B?C})-C=(Nq8gtWK(-1(vV=zu+pBd6UC?r5TU4pywHAFMu36x$*
zO_M_nif6j5!^|T?Lz@u=46U7wo9c&9(`-U24sbLzF;RxOB6(g^;A<Y>w%NY0E|&6F
zJ`3*bA{Rg9wP3GTxjfN|vn{RqCb&%bJ0fI$+7n;T4+m_4asTC(tZQV%Pr3KfN5(s~
z*C(>=RHe@xvNNgluwm)*{#F8_e*`#mlYZ#DID#G9>RfoHvf9hhfvBHqEaKkJEoN${
zB!lp_Hx<-Ilkg@fldSCo6||L!L4$Jts6CwF9fwg*CYjCZF$9^vbd?nAja%LkLWtJS
z`h9Y!Ngzc2gPg2kV9*@0wdus!RVjyRjdM||d?fxBr43R5QsmYK_+O_`d5Ei~%!sHy
zjI_8-OiJY(?i=8%jw;!hEF3M*|Ibq9^+m_zqc<Gj5EsMtBG0WY@aO;B_BHG)!h&&o
zIJ1g1G9eH<GuBi7OBC^x@jI|lb^@{-YJfN)LF@4p7<>bp3g{9nfhW`OvW4+U`$Bk+
z-E%{l$l_SASghMmC~35y#@f65R$w4RZz;(pLb&8q=w(2?K}8VUlGWLQ{bmKHpuSBn
zo~bX>#ldbj{IbwY=$>51CmjJ(B$lI2T=Mu{YF?fkf)my|7~_4=aszyQzV|Ix;H_KW
zaqBZ}gO6d%ECQL~!SQ%FfxXQAYc>X6MiHkAwAx4UQ}E%owHbruX1j+8PX?lYVw>F&
z)CnwD{^NxP0!q$O`^=H)3o$f^$924lkV?Wb=6^_F(@7hfek}Ti+_7y|y3s{2Z})?K
zYkMm*kN5}F7x%)$Kj0V0{A<E@O~2tfh)f#0pEai7V%)8c4ozl*y2QryNTxdw8Nh)5
z&cMWQr^P5i`<sksA#+qsE0U>Y<cxT8*nf0wZWF42OeXWZ50=mT)W@x2Vq*Gxpd0Yh
znPzwFbniH;xA~2$tgI})nZ6Ax><$cw{=km(VSPLHHKEv1K+LQMPP7?oCs@_293kaG
zBEfc5U#l4?+ZEjxnT7OF_iqNwSZWzzqr7gRJ>!PCt*TfhYlvrrA>JMC9qGV1jo;cQ
z)nW@<=vVND@#NK3P2Rf5g@*XY*>IgYt1Y4az-R4$yXC+Ef6-@seSO|z<z>*)f5f*Z
zpES<jEqSI5PO{}IMidaT&%F-y>q|na4o?!e4DW~QGJ2q&BpmNXm#}9M^07fyO;coR
zEP@V0@s~QTRK53nKNDNo$_?}-;I#Z9#|J%r6s-o^qD0sNU<+eDufF^y+dmR(^txmV
zNRviE;$(9!HXie%7V?!2FV1su1ab~t?2`jwl5@7h-72(3-ci8y%pj}4C6HCu&mO|O
zK-2YH?BW-2!WnA&?T0@M8VUY{*Rm<>nN)f{Hmwny*l<#@mNd~{imnZ?ICaR65EO!-
zTH})<x--B7Q|UJNI9nBcEch{lY8C#=zg|$jX<3ItPgmgfRZ11EaQzlI1chX)5vr<o
z!8lh&wecl+ioGut@0iMi%;Rs!P8=ecFJ6#;OFIy#Wq8Ke!~{GEvTk{gw}sr@X6VKj
ze)k5vZz6)-$~+b1evTj5a9Hly_ZgGLWu=|>vmA=f<y&KdwAz_HxK=pbWj_T`(iQY2
z)x0w%1cCY&fyh_eeC8ZWRP+l>S<j@T@9fQiriWUnaJGG7bUll*=tpm;!Bnv{(T_AV
zG^o{qCgO{+v99%#%FM@V2skubqj0}u-swozCa>DSFp(A1>Cs&QW8ETKRf4B+m#~G*
zqWjs40i4`|dd47;55?o`9E9s|?X`nGi={JP;F{cL&A2EUzS|+orE~2`qwQt>JL8sH
zB|64wXQ%3(DmU=o0*wm0Xg<d7sj5Gsq)U`N&dTCB?>|ka=I&BfPJ1R+n9<`<F)}iu
zvy=U|p&ErQY&03zaAJ7|?xkPy?<LL(eD#-SljPzbqz;BvkfftFz+(e#(VI2Mf)bpz
z8uSbJCl)~6=YYzuG{d@;ZskHU1$SuFLShfHeqe0gx=6Plo4PoXONrR`Qq%dYU1(&^
z#OLoH3;ywhy*F~aOu~YffAB|a2>TS7H5~$&Y#1|i#DZ2*ryhvwk?+yb@+IX7$~o*t
zUlF})T_1T!l9ZQV_x3J|0{ix?p;CW|9_vGwt#6sEKbxiN)%9UixILvaGUU9<l29X9
zepUE5At{8L`BdWZfU_)dB{d4pO~{DQsbqI?>6=V<y=^6$r05&EI>vrT@hkNqU%g?0
z`&qs9s^Hi_cun9C)mI;=ixRoq4!=jvj~!TX&?vlSXtJnYB7F~iK31{*x}at2%qZjS
zA+8RQv=iG&0j&ZW_~H1|&xddx+_j{5=!HK(&!qKm^nm{HWQPwY8&H_<Jsqt7ED3}z
zY!qbC=M$1(M3A7Zwp}bBs1c6##NNV6?rmL{zSPK^daD$jaQJ>aww5-K#@7W;DH*c3
zfuMC_A(xkH!jGkp()p0s&+#e9#|c*L?>&u?%{_tA+XCo>mxL<C@dIfTmj|UGIZKjM
zkC*)_C3WHy9JJfFU^0Ox&Cv_zKW<hyTcW6U5fTA#;vCh~%rHJ*u4PAV_8cn@D?Roo
zB7#!l<Cmmo*tt(Gh-)YEzq>&;9}M4m8eFJrA692}rEo!*u^|hUu-Jn&X0vXh-$EyU
zFr@{-W02k08fmxA)GI6kH3&&UTV<tRQ%WMY$+)F|A^Bfxg|I?U-fWC{6Ag3<VmhM#
z;%kq#G>RYQ89rlu#56knVR&Bq>Gh?p*wXoued81jPn>Ced-pv<K&SSzEF`CS(1oin
z<<*Fu2r!$DQm!)0X_Jr^HEH6CT*LeFOk4e^<{eUWZtk8m^#_*#KiGdNJd6YLFhz=|
zRF?5hTU<2Gi#e7!F%bl@xlA#HWiCsMq%(aw`r4q})=A!9VVKt{yWV&)FRYKLE*cT=
zyM1`=#2Sgo)YofbT<b=UYNp%^HE8o?93jg3&xSurbVXAOG3@F(gJS*rmQ=-Gz6z%W
z5^tJUjWFt$rZWH2|2Fi;THVoccD!$O>PjFat8t4Roo+Ahh7k!mR5N{jeX~OSZN0ub
zp1lqVLf{WVk<QoG>lgmE%#t&8|3;3njHi}|vCY8Z+MHsjAR(b=9k7%~H^mG{o^_I#
zx9ovK0?MRp)8Ci<wUr{z9gy*nosSm`o`O@Mi$+CzlpPyIqO1gp?$KoPg8o7ekLYXW
zDF*3B0h`ctlk`S<+AVRy#%gfJ?QcG2RmU-JJEIy%&)63(uxuGA_V`s9ee?03eDZcW
z($_GSXl}B!Sa7P9z+4WMU!^}&%FQ)Md*tAkx>R~XaH@%3Nm_#o@h9=Hu(Jmun_^Qd
zH`QBi<T;Vjq@UOmV=;5G2#jKCYBh`eA66Eeo~Z;Q$dmk(%<r4B>IcQOqXMdRFPNuR
z>nG4N;-@<B&qhT@C@irg!UhpQY|0YX9JX=(`WPr5Udm%{Mw{;Crib(Mrp!j1{hxiK
zFE8(g8;~&YbY5tv8LMp2R-9Z~{Lz~$v=3^M88it}fB#_A7MH>3>qjvo7R}*6xb3PF
zFHXM;R@LT=fVd1ZccXv8WuP=dSChy~gjWl!Xj-R5rcD||<~^8W&iPF$yHyGQ*Hc#q
z>QhQ>?+kD3`GI~pu%jj`(Ihe;1zh@B$4)NLj>yOH^8*NqY3$ac;j(eiz!-i<xik;$
z84)~!aFG$HUGHqXg<}%B<sv8n#+?IpLoDmo`5a5a&!8wFsDgZ0=Gkjl=VY8ebrRtm
zJJ)fv*olJu9zv{Gk0GipLUfzEfM$(wC#L2Nvr$n<%^nt8*il%4v4bcq1KL01`a>cj
zcuqvGRw>5j5?868`wAtv!O|Lr3KrGP4)hmVw>>64R6-0<3Db(XTT@d~Ep%VFm$BaS
zcTCTGm;=52uFisg`nnYXXJJ<>#uRoyFP8>OhLauTKW6ozBNFK1l$-S1;8Law#SbPh
zR{^&9_K8Ngf;Hd@MsJzB`dVjxP*UN$`(mo_KpYeiDmDGd%@XB3m3N5;ve~lr&V?@h
z;eKe{9^j9?ke&us9*a^@{-YEq!75>;Jsf+Oqi?!Aoy*`X1@5@1w*u~Dj#Gpc`P}E<
zAU7<YYEPMly#kh_uPDiaac6vZlE22w;@HwscBZ2shZ0=*OVBRzS!6xk9(6(4izyqa
zrM7E`{u6+Zk+ya%3@Q#y4uOD7pk)3HvfoSd-!1}A7(m~=zM?UiB0<f^o=ZxX_@1RV
z4P)_c6PK$!IYh`!W0LBbtPdLaJVI^>hYIfUREF<D2eJpFJo=MlzMy9$0)g--`+!Ig
zx-faKCeN@BM(*yI;nanFy>e;cheY~xpfhQ0y`_E}Mz!<TTiWeLuwI~4Ho|2z>?*}#
ziL{lmnghji!(T@sR(!UHJHTqJ5bL4}c{uhmS=h(R(~iJf^kyEBHrR3`)^U8XA}T;g
zz}eZ^QMGL%*m|><D@$=Lv&4IW+Xj7cR}tJv(J)+_lhr#hOCHXS^LQ+=BsdNu9TL7v
zVJ!G9i4{l~7nvR*tfVi;Dmbe+Od}dc#wvBT1Q{qTi#@avo4e1S$qL*m$Q>dqA`n*y
zv`24g#ZYf7z`HBnz_j+}na(4{iT7$T4j9qhGU@|SV760{bym#xoO9St@u<>!M>?E3
zCb1u|cSMC|_nfRkdEE#|k>U6lcW!BI(|qeq6f2)#vrdxzEOfEcqvNdaosQ_ApFEd{
zGx1<k5_&Wu?*KAw8Q0$H_qTa_KvYDON5dMiJZx5S)K_}id)?p@CKM?OC2f6A{gQVU
z<7H<mP@FenXVIz>UncC{8l9B6GvzR>e33|5gb_-4dZgv$*K8uION~p}sK7n#NbM(F
z8er@BgCe)voeG3-SWfdw$>UsqOlX}f`~@)`zV9f;=gne04Aj;*;uy@TCD2H`ATzsb
zmtGv$N~EdSr4i-_Ma2SxG{&~Wi#h+YS4gjofbfzwg6Jsv)j8)*>)qCm&t~6TJm?U5
zquBuP1@Txd!iJTt2{q(o=)bBlC?xLYMBP)wQFVr;wAf^^2xs6Gqw=dVUOC#wj!8&L
z-m+BVCboD672Rw!+wWG)w0)a57d^Ff`D6VxdPab<{9MZ?c5FD>aU?3BMi2|69Xsw=
zF7Qs(6aQ=gVg4013Ixp)ot-1dUD#w);$O6TB!x#M1jp_Tk^sw>O;(qp<Q(tp6aAV%
zw+&d>^)iF)*QW(BIBo?}<sAFht&@!0`!fOOA(~g1_UCGAmOA0e#Boy^Y3v$rXVAKf
zw(_@SPeVxSS>AZQyBRCt`Wf=3pZ!wC*=NFSbw^eC+-sq}4hqV`P_Vc#9bsJ6k!1ai
zK}W1hNBa~DEA4eQ;y}LRYroZjsfo3!PqtoeHId=`X-u!=P1ujb-ZMokiwQk5Vr;)J
zdu3we_ZPpW_qWg$#>d`X#eH{g-oqU~!@CN<-Jde^95S$FOwzv++KufNYJ>5zsbXfe
zY^Vlo{}<IjPeL^Q3tHBSt1@LJ*RE}yon=SwX`FH5V`}PAn!w^fsgtphk-iRn2IzZJ
zy19gcLWdKQ5o!8ufAJT)OPd+#V4zU$ScQOqqi>A3ej4`@@|j9gpp*XD-{;Tfo@SCK
zOPtOcaoW!V9sPjl0bO{o!dTT`dDlo(_mX63@$hLI9QZ*;{w&pT!*<__qlu;28F6jw
z^A4@2uza6xLVQ)o_~#xxmt@Wti|n5Et%h%eQx5$)-1Uj9&)S-rn}08$e>~D#fj-@V
zlUVDSFJw3WmoniR8?m$s3(js{f9t>00GnIiw>sn5l4<!>gC>_iBSrc87~v7UnoG`i
z+OW^=eRsF_hZrV472-j{S?#*5^5TPVMTHC`P3j&fjX80tyPTrUc>A{1xnxl{j?mD8
zSIexC545bo80pykewT-ahWae#_u<fG5HHfGBZbCOiXN~JLNt<n=pyf8Rh*flz7(<l
zWy44z7I{gMIQ}ma=ojz-zT;iY+4C?$bRP)xS(OpEBVUGe^IEMCAS<IT{RJ&+=+^sS
za4kWmSw{Zw@M!*EjH)_i0H+4jWonR4f5;k&2N+Na>l}FiUi|FVm`V5*?(7>L?5{EX
zPMBql96}4e=X+ik%7+(bxF>MwQaO)dfO}_GyjB6uN^vJRi4`Tg;T^kkq&B1o;RYAJ
zcfQ>3cN;+f*C9VlFFoLIoL=B$H~n3?)WE-HeyT(Kmk=*w*qO8o2nT^Q#{}+J_3iG8
z6dCRv;9)+$TEM}OUg9$dtYm5QdLSBVq(^**uT)@{4K!_c!BZ9BOD%qLo`z@So{0Bu
z*=iy&A;P2I7=S^Yv#)0l7_EhJzO{PCHa}GHzU;Fo?N)^}82_#7)~%yXL8<JEhZ=!o
z2v{o`z_PiZ{0I_WaDk4s%2@wx5#hXnm!~1s_&%Wzhmp=3us33jeqDU3$#+@75Yx^?
zwDv=bZj$@~amus3Yhl+w!h`Y549@-Q$(9boD8b-aKCc#=m^cU^2GT<I%}e89iZBn%
z0n&?)ixYAw>o(6nQ*ioS$ao8pMTlW^&poGw)C%+xwClh@0WwqDX!bFNyjy7B#4#+7
zHY9XWgE1@=Uf6jc%8N+7Ac*DWQxp*vJ=<FWOx_mOI;HdHl1mVvwLdExw-oVfb+-{t
z_%%ap30V^;|Bq<3<6!tw0Y3<LX$Op<c-Q58m@|ko*s7kJxaC;D!)cIMlD<4(`rg&n
z=6}zRCgiI)$ElHbr2+#34RgYa%0K=S3qU4Og?|!JeU#l?tH&M=PYPZax=+fSBMU|X
z3P*_xx_-v_>#;DYP_`h-8ULxJmPl&&=-y#*?zKM{+g6W(F4P^uaS6!Ot-RfMe?=&5
z`@-j|dur1p-NtRtHE1bJkF?DLv>?E*4c1i_`si0iKRw;Q@L*T%o+22liDxsHHY`B}
z#^;(W^gAV4iT@L>x(_Ur#FmPe5^IW4RuC}_SoN5eUODPA()y)JB#K7k(SYMpQ7u4{
zeKrk_Zh)nFdh2)F$vAb+<SxKD9ybTDz8E1%D&ud}qJ@U<^6W@<Y}p~YT^JcD=oid7
zVJWYMh?j^E`<mmB7eEh!=Thm9QrH=l@Vea=JnJ?7t^^Yaf3gic0u;IS7<2RFa})++
zaekXM3NdgjmT>mW4qT_HSYM#|EX^+|4n6A<y6|2!I%WoR4gy-@w&7`fBe;t{tHG@*
zkG|^CTd<NM9!yS`Hme^#@fsT+1#CGwVdhw{nta>o`*(zLE`tFNShdiA8V0Xu$FFOA
z4%Xs=H9Wm7b_bSqWcL<zfE-zWi^@|g2gV4D!H!8mjP}I)P3HNIjDk<_$vfxuHKWeR
zD)rys(Yu<^hq}0Yz>gNArknWDr7AZB-|H#?x3_mSr6EF}@sW8BhT03Tx9QoJlXn!|
zyUymAOJpV@jmweWqm;FT^ZZ9-|KepU+Ks(5b%_uXgzoY{ae%x(R3F54`k_79IMaP-
z;Mm019K(qy+tBoTm`{bNIj~m7(>ACgRE(hcV9FZ|i;BXVx>T$%gssDH*6Rj3wVl<p
z$B#{C5BOU&0&RH{Kr3#%yL1!bzd*^Pm6eN_zJU;#rdHkIT()d|zC#9gg&|j{PrJGu
z-jp{IdRxrmaMn;%I0<z<c*j{}Un!)HjaOyxBgY0WsNUsQ!;!qX*pEUF`|<1`l?6k;
zf7lO8F`x$k08@lfXF+V5O5l?*e67{BN(y3u_Xr!Zb(<Dk$dI}<98boVr;SN)QMcSD
zN+nwKD{SI-b!cqV=<4HhAHLC5*yoca_Tog6C9R@%7r0%%Y=VHAzsn(mZNKWBQOmg*
zQ#TEb%llvVjEt~F{$6r~CN4GiU7LsP*XcRWgTwdPah}pAPeyP930($_&Qzr|NYam3
zNpliE6Sp77ug=zE0$O!7HIWL^8BeSz`~zFmnoU|Y-xQm4FC2iQJ2B*{%#Jky)5Kjf
z6H6@~-Nt*|<5xrPV8MgzsHbEBn!q|fR>$UQ@$E)R=lhQVPpYn|0bdogDA99ta9%lO
zoqI456JQ(qMEnuY)X_fTbDuF*l#ZTo?HRnaA@}s*?#{eGxbqCc$3G%?!wV$;mkMtc
zK!E^m7)TqBK(!8Mmln()UZ4jE0YZDu4{pjG>A451-EaPng%=nrqj%9`tWT;I<Cs79
zB4lj_M}`Vwz0iK6zxHr)`W~{T`_x0s5f3+ydHVD-I1Ek^!hi^J9Al_bWKDa%s))NV
zH6?VvSdjMq_?OI&wEY`{7Js@w{V*&d?gC#jRQ=x&GMbKiM7Ujt0gk%3+`PNx&6SXl
zS~eUbq7w3U?=2y62Cg>*8<=bTVKIu0=4tZDu}FHnuFSSy=3g2oRl>G}68{<}!5Mf^
z(PVP6o&$9RR!x*sgNHSoj%|P-Y0mqPfl4(7{2X(HoBd|9l>!mtbtw0Uxmqq`BxgKl
zl#qD@!RHEjIz-|!zKcwT`fH>8H}487AQl855nkXW=<VCEJxc7#AaEPHJ60RbYxIpD
zmkJRih5mO2n@<#`er5Id80F&7;{FqW`S4vX!aK<}!1h>dElQMBf3`?9qwwAQ71Vai
zLw?{b-hde|bhnq;TCD<bm7Yj{MQ=Ug^cPW436i9_4fwNq3aSV+27-+Wc(96@<5l2(
z)W1qfZjnqr7%Xh{+^U=Ap;Ywivf>Rq^}^XU8+etxw}eq0Gkp8tYACw%^0h2*)c1hq
z32vZ~^-Cn%F;2JdcCvX%9Js0o%F0sLdds(0K^Uz%&x0AnZ-l)@uijiMwm8u+0xIMn
zB@J6jc(^gFLPU@Jv#Os#WhRVDBaSW-f1PQgZDP_cSR?W4;iRxoQ#AdeOP*T3t5Y3l
zNv7;V)P;luMkf2i@!Np~i6f<h(WRF)jx2FP6a?{z-NYaQ>squY!=mO+m#VWCSmQm$
z3yT->@0!|g=vPx=s>^CofJN%U{=VY2!Y8}fe9&>-j?-OBi_`GHS4S!r>_cbn+Vz1x
zO20*qkzK!b|4q6`K+(>T`*<0b3RX`YFIb5;{&?G8xeVzBm$NdBRzTAq-W&TNMo}6o
zTZ>qY>bkn%WG$mhMhA>^^>2PlJ-4Rh<gYgwX>qNF-<G5Q5?ETzVmK{#8L<MYOHaB`
zk=I9H&Dw8&i`_JVIsW<GRv;1uG%@02x>z!Aeo5MP>K~Ux&zHS_nrvWD;#0(A`X?z0
z|F&#dU*gPz4}TZ%q3N6fwFJNcNFj0b^oK55F6tSBS}If^MB>u0)A>hh2x`_qtY0^p
z9u`0Vd{amfNPJ(i+-mQ1i1CYO+Z7ZNs^0?s-lC}J2@+Pfk7{HTKY)5YQvR%o|5cgP
zO{v>ccbM33=3zB9ZZ$;v_6;YrPBi=}Anm}L5mA!Nos-J*@OSO-m{E7}*PKCZ_5*$_
z9Z?Rq()tCwY%qvq$Z!Wxs5`CPtmQ3fBBCQHR>3b%fv@uSVWsw&Df1sQpEXz%t@3X-
zxBlJg9BB3cBYxR#1SUKg=HMx%-$k6w1660@PVcSTE18fja8Jp~;`Y+eugfX^^`5%l
zIFG%ER^oYZ`x=d{Vt3+qYzva0A_bFp!1R2I(~8uP2)r|-tWDeoFG{oXPa7SMCeL(q
zEz0jcuJDi;fx$u*9ih0g_MN%13BA^<N6908Lxu*}7EtqLWyu+ly>_C-TwhIP>qcY*
zDV6w6JpN6f$Cv3xWWC(MC2wE9g^0w@+)j#}D5s9eQF%V;Z^K=*gOtJtn*bt=T^%&Z
zL<E}va<UkvMzvhWi!lnp2YWQMX%t-GsAEnAPpN*f0~kus^N&`PZd7sEy^i(Ro^C3m
zlT$Wz6R1@ddsqUyfL;Kong?A$_JuqPrPkPcwP1BhG)m@1y<@;!%WD;<ztzV%0yu?)
zCz5So4$>V&cf}*=jZgu#zE9o9ZP3qF1j=v+9Kwy?W90Z`t+sRFr@xC*4EF3vJ&AZ*
zK(`~156<^L&VYMM7-bcnKQZeBZ>IMfPG6F*qQqu>aW3Tx?+Jky!lz-sx(p9Ha_zca
z`_&b~R#p`?*5RCB<~1gQfe8d+Y^ipCu~K#MIdiqBHE{BD(;Rnwl8e8_cCLUwC{PvF
zPcNAfBsvNd0GnC$5#6T}fB38Oh3-PFooGe`k^AQYyt{zT5ID>%u9z6fhdS~)18(My
z0KqTXif&wQhzSXJ^B?@IEwF4%41RNRy2JSuijM~DmB`lVhx&w7t^$2bH$0Dv5L&>^
zYHq^=*f19{Nm$FZ__uUGfsdWq3!xz-!hWzsBfO`K(T0L#F*763R{z(8U)ttzEiRX1
z?>WR4vM6^?W6Yr#(h3ii&51H4h!B>zxHM+&gL>W_k~c1%A(%=z&k=QdP;G4G`F8`c
z*;R!r7u%idBUt=7;E7x=>FB-ss)cz^ASHbE=TGRLM9WIwH(&|EF<M4@hsLhV<w8%{
zVaQ@sFc(^NaV!S+3`w)IR>zq^Wl$EN1V|*FAr5Uek8wcdh$ynMZYBh4cQ=qJ^b592
ziwkP37dmrYbl<7*0d@ScsPlw_U3&ZWL7c%xHiLU1H1wG+=pw-C^$#e2lro|&c_7{P
zx|x2#lu5G@d0SAGUteePZb>C-1z}jnY4{NVQu!BuxS+&OXFj`y+pwL(vp+mRTV?hl
zVJb(K&x1(8@ebTx_jdaP%okB5=Rv8s+S&%Q!_VNP8E#$(ULTGe)18r7`DZ)4ei|Iy
z;G%9vohE$P#PWTb`dZ8SNR+go!W~#W?}lNM*7vzb-+=JGMKqFz(--FHt@Kf%8GOA`
zggKJ=T;bz|Q?VNBfwljM`?b2qV(6aLuIx{jQ@~o5i4ciA^?FET<ThNVrhFcoE6Xgs
z`j((v`)S~=)*+)1gY+CGdZi5AKd;i64p!T{pbNAQ<daTEwnvr$!?$1EXat}@DXH`p
zxm6JvWCYv@h3z2nNgiVW$Ixxb9jj(Xy9@(q;(G&<Et88FfsE{r*^Xe*!#&>+2YGjq
zY0lXyjw!k)Xp$DIZz4xU24Wy#^FYl5tdK~Xjv?{z^7F3eMf6Y($bau7{$^BJqbK@Z
zrm!Wju698n@K_}wH8E*wPOl|$UC3WV7SHKA7;Wc*Ri88ZNh?;+rBfBR=ll8<Bvj*c
z)Uo-<tJA!1eP#><#+$j6^FWIE<JHyW#Bfoa_kqb|9L;KLJP|)-0rxXrsYYm>3KJ6(
z(LREHA3|NvaUbou$z@GEjT<Y4XXbt8IXCPcq|*fm`ZsG^cBg9~4!o_YcCW6Cp67U?
z;QR@yURl&rs6pg}-vfQcZ<N)`P?`Dj#MzwbDmF(T5bhqod=e6di5njfd&d8q)Gc!&
z4IB+E6OS1h3;93t>>~XAsRz7qc|^g3M}8q#SkWB$1An{vFTyr>Tj7Mn`Qw8SMNGot
z>VIhpcu{|U^9I@85IasGVE5?bOwk$>dltI($7h>i+>hjN3{HSVtOibEe%ao7>^WYe
zpLZQU4{7NjAd}08$({a~<BR)8-=C!0-&rMll^FW;cN=D$Sz*26fjt^oKSF2*C5x&x
z;{o1E4M)U~u83||xLn`3Y}p@kM0Ox={b$%;eHwKogon8;Ci&zsJbK9Lc;ef*^yQKt
zF(Qgc;rtRzq;I{C_MPj#{^N*6r_ti(q2uIj)wQ+A(>L>|M+5ieal?bv$zeziZU)?V
zazVyzm=JEoB_xC`1*`l^vI|YwI*W|l($gp$FnEdixQn?Blg_23GtkQ44!w&&v~g4H
z_K*_i>8yvp)p97QyUH6cr-8x`)up{&B?~K_c=Ue;T|^j`iJlnSQtHPvC&oLsl%sz8
zZ3s)crQeHCp3?d^N2ZDO9cJcw7)*zn`y*vfcPxABlUB&{IV$haXa^f|d3iaY8V|2@
z8?#U1=Dp$#dii55C5zvXOu@v#2@g7kVw4CVzC?B)!{7z^ZN?QgoY(pqfH!l0H4s2&
z@Dgwyc7}E<P;*__4UxSMLqkJ#Hzla!?x{I#P;?)`W4(;Nf%eXm#z9>g(@P_*V4=Pf
zMRod@wSJo%)mjDg8xAujw4*=|&SHo~TU#68e^K6mVBL3nLq%8GAm-*J272%HQW|{f
zcV|z}4M;EyZb473di5@a2tP;5$-^>GWBUHt;n<l1x2?;q^oO_9L(R5Pe~HlS!?a1z
zR?(TzT0kR)Fi<z>Z-~vXUhIa(@1kF~ja)(`e=_FX61{C-%1pd$x5VEath>8GR)4nm
z>a^jjylVuT{!vw3M2ez6L*@E8T3j~BYG_<_^9&Xj&3&5EOCNnQ@r@4qW6cht{<=K^
z{8{H-7TZCpa}$UFWPO2<K1iDhF|WNM7?)Z;V!dJ}zm8FQA|KOb=#}ltfKSQjs&VG!
z<+TBprVU9qBvwCbN{dP6rF4^K+<pPd5`~u`xW7SykN?^UGuLo%9cE%?A3rxqiIOhP
z(##qK)54yydfK$A>dhw?VGk$ik7-%Q`0}tiHZjbz5-t0yqa2!&1&YrjMJQC5yK9$C
zpN7L<6H(K&q@z3Ob8G=j2WmtzosLKYmv`YY#+XjS0AiqX7(Ipc3$uxg35sivo%Y+S
zSo^h)b1q@FOI6rX<ttj05^hz0Op4hT#<!&r=Eck>#xYGR53qK(keF3~6Rl6<yO>H8
zQO7qDrGFeE<jCfvwE@yy-QLi*S1s|Zl&HSiXIsh^Yd#x6^Z4Cr3-{vX@-gW&b^ja!
zT|Sc1C?5NKrtAX_?DDP>!&TG|k6Kn#NtQ6(XIHz>M5=~*TSONtdHw`TEQPu&-Rn=w
z;Zwto)8og*g3>*=nN{xVCaD^<)@AtlS^$Vvbkq?Iq7|R5W<-4O{iM20&c^K>T_Y~a
zprpC)^&v}~#749rL5Yv#Z3aH~&h?qz4Be%YY_{e83iJw#k4ey%&N7bK(Kt>?1WVdJ
z$B*mZ<Vgrh*SsfVvM?JH=Sj*4d8gw+1j-1d8T+3T`qCySRWhD}&c#xS>8clggqO7{
z+$3J!sQcS#hGYUWa(wMm;@-S6NknDb^8HlSagyomsyN(H6Jqmw8nP(FQYF5^pnp{i
zEtNC$eitcqt%hUBia${zUl~suJI`_|CH0T=ba|si<5-$%w_XK4E0Mg!1txGw*U#)B
gu5ksi3oc*woA|=W&XK<=@i)s3AJA4$CtF_oZ!p@IDgXcg

literal 0
HcmV?d00001

diff --git a/screenshot-03-notebook-detail.png b/screenshot-03-notebook-detail.png
new file mode 100644
index 0000000000000000000000000000000000000000..76a8355d931f950e88bd772d5fa9065449d26bcc
GIT binary patch
literal 105068
zcmd43g;SMX+Xt$2NOwttba!`mcS#FKHwbJ>TDrTtyAhF)MnJklkZ$2D-}igZpK#_d
z^UQ4b?78>7?{%%~`qg?ORh4B>kO+}py?TWrCo8G`>J>~K_|E|W3cNGA&0zcL75XbV
zNij{Ytl!zNUO0S2p&FiINTFNG_2N;T|Nh3zqXZaR#+Xn4^QT|d`C{$3;qpS5Y+!Tf
zo$I}<NR#;eJ&mW!h13-^G&C&vcT8(*JOKd%F$8i5y11;1ln%Q1e_kTUrKqA~{`a*k
zduVX{|Goc(4jTeK`R_Ad6!Xcb{`)%qJrXSWzbk<EsWjdpApZ9?Rl2yC?0+vu{v8`h
z{C}4&`TygkucQXhacP46C1vXnW-<6521Yaw4iNr(%U{UN%80RW_|LUrzq4|<W2(zj
zCy~9mLiZV_*hu^lF2mnHJV2wOo8e|Q_ur>Ob&rmTd9=Nag^rGojjgEkPIF+mPjr1`
zWNLg|QH90BA1BelYM6G`Ts#<Iz%(%5f~;p{roByn@~61zWiJaMC)#(@!e&}LZ0w!=
zeQR4=y8m00_oDT8cXvKsUg_!S`uh6#goFoE+y$d4eWIG%e?<b^S{fQe_lBqpzIa;=
zGtHVS2S<~?LBZ&N+j>?rB6Z!gpgH?FD{1Ikm~HQ{(pK)gU6RgjIq`+spjcjuMk#|B
zAOBqd#m^d}#s>KWe)o)UG*a7#$uu^sXW!e?N3%C;YiqZEL_T_Y;<5F8FV_u%3Wc=D
z<=Omqwe8M~jn~ThOO-O0mzObHNGik-FJ89?35xw73ltRU4zxLzcm<>IBb^{zF$xEf
zqddAsl+Z}Rt;l=or}(!?^)|b0b%R#N<F)Q@?XLUuIyH+e4!>HR)_-L2*-z#5Z<Ru0
z?QZl-NM`XmZ@vHirP$+ig<5tlON;zJPv#5uOcoA0x{XDmyopHuur;-NJjV#>qI<l~
z^axRUI>PWcHrtP;#R5yQcUUD(@BI8A4%1V$!BdRmV}?8Oc<YkuZO(<Be}rvkOS+x6
zAC{Z#pC9Z`2g7d}v?`jcCYHZOz2J(ZULDR#)O=WO(u;>NU2ZyTw*M*Qdy_@>ukPj4
zAz@))U5aJRs7K;NnaOM8E!1F5t)zFt({T-&Xb>czq&|h8-D3B=<qrrDpA=n8MH>5!
zzUM&aSLG(Zi^PyY-xF!v>e$`e`x5xVB$xU_`{Cf|h}q!A<Y=xumBobIe>g5Tp2z9A
zR3*2?c9z?9uS%;z^YM25g_F|z_H;F#Tp|kFc{E3ecA(4aT>RnBdf+SC96@iFhbsbQ
z<*yg}EWAEfX*TQ~&fC(5v%g{pI2LASIc8q5l2g!Ak=ZZ&t~O{@^Q4wSayH_9xF!9>
z&=c^N&=KKpxkf4Y9%_j&#rcYPUiTx-wnfL)4y|^VdByYwPKV{Ep-8NZaBjyH7?qU|
z)%wl*lO}mf`siAO13?C5YK0|*7SrG2aw8;P&5^lS?2KSgO25H_P@x)kd9??=JeTp8
zZHMn(9dg|MS%3L1v<OOxidz-y^5%w%gQJ*_frczKUT36U_QYs>TsBg8b_+9q3eGH_
zV#EMnAJIrCBA(UB#LS#x9A&^R8L^z0QSl8Vr{*l&{0+wITDL3{q*=FtW#;ikMMP59
z8k1f#Gc&asLq4U+Bsz^0Mm;EX_=@3~nVHqqzkeS+PkwoF^6)q<H+|2S2oFaku`)HC
zs<(iLxw*Kon<+Z%^!!7_Y4fRSrN`g*>*wTJ!}j+U7Tf##;aECVy0D?zU0!UGZKnO=
zl9<Ufh^VM<g?uz?jk{@;G6XG#uOePQ+?=$U4Gzx~D{$G)+<`(y&#JRqs4*Iwu9t23
zu#_Vb7(2&pzW|dOAH?Idre3Oi(qK9Ed#SP2xErq1<D^VAKR6ocyW>)W`{n>D*dXEq
zU}N|mOg)Q-CSiQ4i@iCV<+1*e#iY;K>#|D^Q_<LXStN&5s1jnu|MxF+29HyaE05z!
zJcEw%dF8#s+(t5kPV8Hu=e-I0E`2^taH|u`%lcG;%*@P{+SLnJ<@(L?K~S(1VUVzP
zpX-VemEHh<tP`ix3av^*L&M@ug;eI06kLo!o3+mDY@^G)2?#fDz?0-^$Msp`@y?Fh
z!<F2GgiPGq<LScv$J;-<juRPNtq#8^{>=xSvw8#sgt~^Up>VdZLqm&$gB*<Gj9Vk3
zR#uvliMGz70$d_#@a{1<?w)}mr<FfD7GMY2`9hbMAOuH<gHB&27gf9XD_#A&b3Exc
z9jY~I9P5nq%^V13o8L{H27s+VA%!H<b@Ft7DIvMq<*iYT(`Y%?VHKlJM=bOZhe<6T
zL(Es<@Qb@_??)QjWq(LGJnHZ8Fl>4T(ki<~tBD+8{|v$N?Qe15_Q4h*;<9_+;|H5Z
zTlj_g_3I!|;f5_A?q`a}mYZyi>P*EZ3PG0)!j$;b`(j+BEZyq3YSJ5^*Xl@e*Cz{F
z6$F)Jc`&B3Z<NR5cUpf4JfhUsYdXD#E3h>tb6@y_e@slEK$ZL6I(`JbuE%OZ-{M<r
zxH$ywEvu<%jbS@jWQPwQAcYed&7Wc&=E}?xD5MJHpdHVSLy!><7wfk}k?~R)@8L7V
zp6mk9xDe<TTb*7&+YG;KZD@Ea=w<q6ty^)*_yUELG#B)6InUFT_UfvpDax(cQk6O<
z`-eQYD&uZ?^MCttE51af)>sIunyky?<X@#0|5{kU{o^sjD&X;3bN%sba}bik>#`H^
z0n!=p_W|@IP^L_ORkC=O+MKb{w&uyFv#9<pu*F$70xBvSCnq|U71_T&sE3fAo`9)T
z^7ZwJ8v#m)^ehHT+<~!B`QwUGR!6bxl@%myaOly1-<U2mHTkRwsdKl&{sZwI(e|2F
z-AMj|<%bWL=kZrp*Vh`4Zl^19{HF0ik*{bnzyev^f|VHIrKB7@rq8PmW#>Hi4Q&$(
zc~EEUZ+R8<S&-qv05v3OKAp!2btME21@Tsp*`z1B*Z<)vrL$~Tg44&>SH$m*)m(E5
zO`O`^vcj}L(klX{DPrW6?3biiajjLik00CIk5lM(dE%Mc^vdD1bbc3iJS3+Ty*|G^
z{z+;zNT)$#KNgRvGMYrk^o93$p}JPT*+-HKK~QkzTP(@X0x5-qkInlb@M!d!WmK)M
z`<Qm)J3ao7-QE5J-ooA&oLPj5J2pMVzgqu9aE{j)t?%2}EjL9@VV*2EkHwQi%Tq8W
z+HoOpJ1kSp=hf6W?v5t&yB)j|r~^~yi(vwexSj&`zo$HRUvfygKmJD0Te>@PJ*kYH
z$<gK;b{-gY-CsLf`Pb+mo=7BdNdrq*DyP2HcycIbc>Q#4U4KJclg-KJ>feN1AR)va
zQY$JcUG9AM-~W*v5ne<a9d4I9p3V{ODiZMY&P4dp{%1|UQN6k4#H>k=U%7|<vNa<U
zlel<5yf8kT@6|z%&GZ(R{X)fr<Hqyf$Gc1}d+p{pxAjg>5%BR%ii9BW&f6cPqpa4-
z#c0;cO)b*W(ixr*qWh<N4)drhdiDX*lGh$ZV5}l)8EI3Yf=3E{Nfr$eXEUZ2q9ni4
z0u6QkhN7#fPJe$g7j4G=<@xW-%Sb}uV0c^_mwm}yWS-J{u>Us|?J{|2>vLj?<&z=w
zzK=Id|CZwN>I&(n{TyiabLF!$**s3hzP`Ts)E9dbmuH*)i$@y8^2LXNrz_rvW!lxt
zHzx+L<dFFHDsLDLW=oU;pP%m0Lh>)dDiUPjBrVCY>xY`nm6S+qgaeZ9+tjvrsGao?
z@_(VkgsS~uz119G(n?Ep*Nr944_X^oSGw~-5FwR9IXaB0`YP^z0!eK~w;hnTLP9~p
z@~J0~I5;@C+a1Fz51zYwgg5MPL!2Mtw4EsvTJL?y+tePuc|V>eSJttkr>`&UcPHv9
z;JVio0U!9phO{>%mq;_HTY8g3e>E8X=lk8=dEs4PaRrSA4Yh;yWDaU7Yjeuu(~=&?
z1sdsEW=2N7IlaZ>-Fe7x{vVx4Il>ecld#G-0uJtT-OqW@#WX``#j<v8hcimmaKBm{
zE>Bm9A|QxZ&ntCitJlXr&r(JuUY;6Z><r6tV*TD@w$=YRs(6zaa&vbU^Rbv@Qtg3q
z94)cP@lymZ<!K6&2`st1HYeN0(Ud73i?Pr1lT^_xBY8i&kgClL{4Tb~AKAoGR7NL_
znBLyrhX5{LQ@h|{*5+xnn-l-X0hKQ>5@j7loVJ*2f(Kh$P{>cKot~80x3D=!FtS+8
z%+AkGp<qrTSQ6LryiI>oNN~5*Xno-(I~zy;F{QNBx~+`!{Ol~^=sTb=ax}kJ+U*A*
zkv%;DA}ch?S=g<iqi5g4zVCp3OrgBtdieV{@$}2h$uAD;A2VA|Da%s&uo^kMrbK%&
zD5!tVHMT5h-}JcCn(n`SLJ2sNmAosFkvgEY&Z78&s?UK!fR9khp1*4!W;Mz*ij8Fd
zfd~_wCR!Z<O92D3Wc*#oD_eF*a|Ovvsn1BRWw1lcpr5$gxP?Xjhq*HH4|)#2T4oJr
zx>a&}%IZTapUOL9^4G%jDL;6!q9IvwdB`|9If;m@yB&V0FP5`#y*o3To0Jq}<>1KV
zbA_XiGHCH@MZ>03m$bRElc0A0S+n}^@ZeIG-$Y$u-_3poAf07Jol(2X{nseGqkKaI
z?~T6KhhZ-hnXRU7;@W<lqsrIrVD2y{J@_Y(mWY)>Y_^AEw5xPu^=-pZv%9*wB)3GX
z5fc~qA)wo*XzQsq*-YPGzRWZoTTSMi<OcRI#|Gz4cl+Lo(Z8R}Y4pCtJ!18Lya`c>
z!mZv|YqVxraWUwAcznYKko{N+Q}~t0$Bhj%4XqkOy+be@Vcas7Ulytj;z${U3i2D|
zQ<-t*4*~w5*PSBQsS!-3*ZPs$E1JRCvfAMu-Z1lKw!zXqJ?DJ;<?7}}3~?ffPT~Fn
zhr?>zu*>WFZ0V#VVVn2m3y02Iem7nJ-XpPOjL4p!@76vx8#MO5b29??H6e%HaukO_
zo5KBw6Z{jw6X%_=J5-L4Z!FE*6)Et2))VR-p_AZC{jt$d!^94?b5UIxa*$gzN|pPo
zQT=vC5<W&s%J1Z7aM?FXV1QYtQk19P>2Zz5<G!)zvNa^<7fM1BRUo7@lmmdq-`n+>
zi08Xuu|nwzoIrA6j(u;p->2$Tg2ap02F<vgiyQGWt4Ex}HG+f;J-kV7_KTQ-y^8_?
z@@D(mg<>1!q(7DYUyNck3h?5^_E{dr(-<(}^>c&@+>8o}JN~ByJWtJdIfY2Z=c1Qv
zJ!`M}TDwE3AMVuP9&O;;y?+Bsh>Od(^5lMXJ*Z9)`n7^zvs}Fx>=hJZ-jV)%SujpC
zN)(;14%l>m9sjHqaa?&($`8t*kW|hW4+R7);N>~QxZ7vcR`B8KFvQ1WFf8Wr`WV@D
zqQm`|oWy!O?d{|e7Z?knC<}<qD%t$a<cL<|X^6?NSSVj!W33!a2ac#k{cFRTx}6@`
z_4UpnaMu|4G#LPO^>uyXH0knk{*l#wCdo=bRFwfP?ss>VkeoaZhPtVO*uy5;;bNhT
zXIduNe*7y0Ozc&9tqK6$_rh&ep%VnH#t-T(zFnXE3fvvtrEreNevGnfK~T)*m(oCy
zr`LQZ;&WxQgvMt%nl$|lAZ>##a&^o&qFd`i=@=%)aeqHQ>1cd9Xw3>uwi!LG0ktaK
zdH{;=@9*=aUYTREL|^IL;xVb_eM;8aan0SDC*-uLD~YSEWl?Vqd<pvdcpH`}D_2HH
zLZg`WiAU*lwB>t=QYMLDTkprs0db;@0`H3*X+8AOs~j1#Hi?!Ii4o#E+18K{iCE&L
zVxpGOhijsZGAsUsdTNCf<F=2lFZi~!lyd~Z-D+a!<Vl625XHLCYdZ9C+0Chv`aIns
zE*lmTalZ#T4HW^0_eD~d_vL4Z8JJAP3aJ4%zn8*Lh+gh2il#8JXqEB#-6FL2`evE)
zf0zW<7;+p=Eth$?D+PuW#CF)KKUN!BYgTqd{8hyi>b&Al!CesGiTw0w;}PwzcCBZn
z@uc0L{C3#2<P!p~3-N+NV?MMbg$;>v{2|PAe10K|u*qDvr}EEl>USBREj-<-Il^}v
zP&nAJ7n2CAwj@iHNyrOSYeOH95YEE=2-)AC)tN~Q#soh;{`m@~^c|q9WW~#^PPN8i
zuLqot7bd_MBW$+AM`L1S9F8OXS*&1<;bclB=zY-?7uUKH`n=NRO<9%tuXiZ1TMS3D
zdgnil6fP_*pj(wWP>O=0WYDRBX!i48{WQ505)wjr^Tre|o%_Vsf9}T*$GI|$ZlCL*
zrjXds;AD+tq~x<t-55~#WXr=bL@c^zshmvGxo}EkER$J$QTV1x;;2zWVqaz<GaEFT
z+^v8=$h`T~ian{;jodv~C=*vnUxfCdrP*#im`Uw)U|6?6Qm(7aCOjk*sdw*kpC!pC
z@BAacB`oHznDu-7?nB^l47NZ`6q8B1M(X!y*BUdud-sJoNj2K0DBiIP-^Rx4_Ebo5
zDpw@X!`=O4sqyx3miGF&ck&hhAjkEdY)}~h28{5<K<uWI*er%mS36~F5Z{eQVkKiT
z`Np)^oV%Z$Y!1p4!C}b<P7lwVZ}bnsp%5x?r3rYR`dlATOxVB$i@e_i%0PbQypi{O
zG;#SG?z$G`1Yv)E4vyIfThWA}My$_P&oU=;{_IxckV&cxi!+W;qqJaW^5$j}A0#cF
zptJ*Tpn>&L+r-MuvchblNl@q#@6}36oYfe0s{Qi2*f|`Id7(vc-5ZbjOe#EErm)`O
z4t+hC&S8DBSbupqTPlk~pW<T1f!MP#l~`sLOCkWbu6oC)--PcGMXU05BJ=j=*4IGL
z2-b#&rOSr3dHHap3}~5;HaFRPt`;d}V)IaE>&!w#UY=%GRurkI;<eBNUO%GgRqJBf
zzCsX(uvMvQ58*=l|25>R>n}GU%XKdFso^5@LLsifg*^ZAxMzOmIXH6vyVA~BqQqLI
zDeU*g%xq1=3hu)y!No<gSo=(hYw5A&*b$dk(PS1Z??D!Gr(SQ4Rbg0IyRTOaKGw%G
zSzXh3=R`PMjpsSJ4aHeWTJjV%R1}Qoo~`GA)y`Y@<j_N=<aDV@Y~<>ADSMLGgb!WE
z7{6%Y-rzTxfBoF)>9qY9^ihcnPVR&s`G5BJ|7=~rHg`Zy8$vts8ZWIi87SY17q5K%
zD&;yX{tg0QjVOgUmh>A^Ow0>V62viA;()~g#%)wIJ1ChL_CB_;F)BN|dJ0o23OBVI
z9iWz{js9-@99S;h8bjDa>CRU$`FqodSTv*cNhvAXcq};#Y6VTDr89%~lOo?_Do&_@
z+T!W*@Nll%aV3&={cwHE;z=spg|_5<z6F|fk8-u!(_K9n>s#N9PCGgR#4@8){aMe{
z`(LjH%kHS@J^?NRDS*HILj593q;q}5HJNq4%;GjzmT-rOFppg_U!j#ML7i|1K<8*f
z32L;}7^Mtq`E2wb?Xi^VqQ|HEM%HsFchAWjAr{q*O6LY3C}nax#Gj&)@XI&SGDDtH
zC0s!b2eYKBPO!Od4LS26q6q6-j-@0*^(bX7ygXO>2`c9bYZOW=5#YF(?vCQvc&NPy
zE9MBgU+jFJIoaLK*B-E)SuALVjRj0(ld?jYswepRm?!BJpc8;^#5zbwvh$?0?p6K2
z#X1C|i;w()weze%`jwid$*QO{fkwiw+VWwC9yV9OkJI13Tk7{xi-Yg4mJ@KNfUPuw
zZksFU-KAS!iv#WIst}?08^}oo_CJ|zoTZhZPrkw;<32t92?Uc9d>_i3G6tjlLKS$j
z;|Y}TipY0)>%D<^T1qg|yD+)pe$pf)$*<XG8XABctDMcB%kN$QW(c@juji+)pI-l+
zCKIq29tVh{O7}cO*yhigzhWjgmvC(c*QKtd)y8*@8XWuOFuJAPUjJ6-zsqI(@V^D#
z&#6w=le&)s7>f=scE?xQEtU`UIrNMuJ}{>nzSudS+&+>2Y{a=$KPLKDi{$t-Q7hbA
zp@gGh@4tTD-L%S=Zw0<{FG8dAt!>lXE9P2oyF?g2xCy)Bg~7s=^!QTWJt*CBXG<7&
zHRzwm1@u3`!Cp#OhY9*Ra=#bF|E-W{jsLUUwwakZ9hV35y^oxcP<|zgVgsTR14)^f
zlRXJ3L$(`T6Q6%@e*Pv}^?bajT6LL~x%r#MJ{A1F5E#kgp^xrLT<<i8iEScf=krw4
zu?y5g#4Q^l>>8$QW<;AJIy4IQo}|xV7XEx#!VV#K%j@<JD2F>aIXR~!8pNL>er2Eh
zu*&OpP<Ql)++95ihk?*}3u}?Qm=ODO`Aw%*qi7HmD~|l_eC5x9Y)ePSnjAzX>mS4@
zgq-n?R059B_!O|XnzXdEhr&KrWlcz1xTqu#{Q795eC2RoTd8#+c2c<4NkzE0dv`Da
zol%t-EYqbbPE8@h`?vY(#qxJ{@~uAXuMphJ;X*4E{xNm&p6O1{Tu?j~MEsh_Q3v8V
z0C*v<Zz18(>+0(RWm4_ZCSM$O8cxXTjEs_!G7Y}d{TRrBihgMTgv}I4xuT(|5HKpF
zjN3d(L0?4^%tAv!4fx+q&r}d*T{k<sKHiY<x$c3kdH@<PP-NO2S2Mu806z#_X%XzL
zg{<u}+Ksg~9M1fg8h^)_rgZ|Db>qWbB0mj1({bMc&A}tBs+1RpnVRJ5Sd<Ri*}Lav
zU5<}wy}gr3dV7h(>2XAsGtGt9Db3`Q#xNh&9aJkIa*qoLpL*e>h@n)nQ3O3OWt4n9
zIf%H?_r!XyGbPqvx)c@4aLQtoBvHesc>1@-iHuC5>MCyX+pBqV-`;1-WpY;=4(x0W
zhA-=XLMW;5zT8`=)G?WLoh}GfYbKP0p{s9hX3{8W%39go`K~b~e#a2UZ8wLY&$eZl
zYDWS~$m3Yx&2p4eANMxYL=#J1s}aj~slhUZ@qXEL@RvcR1}@MdG?Dlg>8C&GgQ*RG
zf{&M9w!QqS$=v+BmJss4o%HfxFE-Tqsavg4p%f;jgd$+%ZGNLQ1J=y%wQk?jm8B8u
z>jQbt2>>4z{+V0rtXy2lv&4X8eZJe=+iL-m9iWZh1NfDdW5-fia`{|4Ixg~ZjGlgE
z3y6t{aoPD9iQ$EX^SN4;Zzs%RAr%)lm)&veb<^C<01<L@X=!O_=xQW^axk1h{RV&%
z@k8mW+A2W+e>C4|70MiW%oHgfSX+J;wh_S~B=ow0T6vr8Gb%yuv<@qB*SoBCcG79q
z-ydMl4YU4oTC1r0@B(9`!9L+R-RmM~HnL62p0+vJa6pwr1|tnuApL!c{;T-4MPrMk
z;Ng6w^<dbw!-poT0&=RbvcN+?_KbV{lDX`0^HJoJ5LlGY#+c3J0Prdz6ZE}d?BV=b
zYm)k$k?3IurIE7ycjtSe?BK@R!FxzzxsMN`)&=?fKR9h|B;a+14wLW0u5wTVevsU4
z$jghGc9f{n899WBbH#`Ct}fDRw!__?4&hv=$L)|^vc%^V`LYQL3JTC$&@W;@{UR`t
zTW=aS+i`I>?}PFH^nz*iC_rLuO@5!o!Xi<2TP^Tgq20DLllfekh{wq?3gvrKQ!;v@
zEralKK!!&e$!O|}m9yoam|@mC3N6g5oN{S@|MGd=L8l=bzO)hWS#^#~F?kRnk3hQj
z<DKn2sD70s)(XX0CbjWANw(G8G+V@X2))J|v=w6c8Qe5E8ey22Jfq1Bov!;osYL;V
z!F6t+z^}U4sZSk?0g5DDnEk9u8Y_9$B!DuvC%<Hd!T=C^gU|YojBMj_f6}1kL$dA2
z7itB~?KvQ?ReQYry`_K-k)1<cW|tBaHRtr4zw94^Srh~{<OxV*eujedJAawD?-F&P
zTV-xQjZ^SPB9t#AEJ|Rv41U_6K+Dd`Dx${v6A}{>qpuIxEs&}p7TeO6eZRoGE22Vv
z^QO$CcN36|`CwJ01d33MJ)q~hB+%QmgO<l>qbd@%&;`JyW{siu%QN)Cf;ONLDb<xO
z#^=mN9V3T5`Fw)|19KX|wC;Iu{(CIkRjSGd$Hxc9M7-D#_NKIJcg&!vxLh}fS-UWv
zcU!MwtY<3H<$lH{gd-wLyn>dYo>la9n;t8FpFu%6IN%mwUP9eQMn#qWs&T%~Y;bqr
z0C0hiZj6|Y)uDQgR%3{=qA`T?7MS}nL_E*WkH>;3(D0~f0y=sk)<Cua(vt>SVicmb
zwl-ix@yD*rx^=2PpgVF_oHe*c6shKmPb;2d8q7%qI<0o>?(K!)N?zAQpvZP%Ljc6+
z41DQX-YajXvIRyO(Dxs<LfQS;oYuNT0<|YWca;_MI-0Y+&c@aJXC=nNY=G|rFrJkC
z{l`$G_0mpBi5-CAg#-l$l=@ze84re`0G}lp;BoO#Bw!%89xpgdd9nRjUFvYJ1g=lP
zrq{z&Z9&<GC3et_j_1lRLAO3XA!0M95)MUsyTbDl>1qXK8Pv(j6s?VnjBvHyJn3}(
zz{>I`FDe!KhID2ut>13qCk~+!f9vgUo}s+5LbcTlv7e4UO(*8UW=%_HV(W=!4wfrr
zIX_37>xhrCT#6t6rv>b{-Ws$l`;Lxl;;G<cvs9RnkwV>7uYb_ZuQI!D@L6i?Xgz$-
z=h>k=nq(Xz183A@ce(Yfl4-*!Mw1MPCDi?NwSmsz&E=*2auc7TcO0n*A_@u+%k|cK
z{_amaD!iQl+q2zex5%LJc;oSfREQW8bEZ^9gl}6Ro8KKsYo<=MjCmn&UC)2vKkF74
z=e)j<<1fH~5U{^j{j~%fW(utuRVB!;I<sv;E;|7CevhY<vWydA9K1jLl<WdLRhO=z
zuTiPEO!~x?UZ$6t)~iW$v+tP?kB@miEQ)gIP8XPz=HBn;QfGva(x~L9mngOakX38c
zsZ52hl*yeire@skV)^o1dz>^Q2%-m6G$ZwI>tP4b#NVy_M0Z$t{rWX9Ga~Q<4rc-Z
zB%7`^36%L(VAEsRXysnju{>X{LFE2cMI|l_r8oBHr@fVKU%Z}auw~vEwv7PC1X$yj
ziSv05X{~C59jfLoGt+nId&P>u8`C|RKd02loz?~-QZGi{u4<a-Byyk3k|0f4FPP-I
zVqe+JE)_}G&jtt$el>0ONH=R9J$2~x`(fPYIgL4X-<Sut>7-d&qPD7^lkMvrM-0E3
zb}_|FA|de;iK};q3G?DE@_LU;#B~W#9|3WiFp)+H%!njS!$0f2pis+H%dwmDpscK{
zh<IvrqS8MsH5?xtj7V33D&4&DyT6DbF0blG_?1VTUR_x!U^Py9_qd<CoyQSsmodd;
z&?4>>fe)Qol$_k`vxj3SH9A&?&*P|AYwRD-`Ys({lub8ab&?2pj8ciARNz=uz0<$y
zJi%xg1x@4ocQ4LwuZLm$oGNr`d#vLcx;Af4Ola-Pb?e0|G+%zcU|G!r^J7~gRAGbp
zY;`n??{cYee<!kzVedz_0Tn)=@@-pS7lJfOu@KgzkmJ2H0{PBup<#Oic<f25T$H<U
zBGQq%>~06~5y%=^<?2%1exa?crF-OlD>~Ksk)KC_A<l`%I{PM!rTO6sgEGv%2HU~h
z9Mjn>8axNEBNug~+6b<(GWrs&DQcKrt6=EN`1pSo{&at^xhTFKIMpo2)T2~lDr^PA
zeYn8J-D2D;ZoBt#C&%K?f6aasA4uongnD_6Q;~jh)nKjQy@%j2=;xPQ7Qozuj#<EU
zR_Swh)-Rt-Z|7rIAtoTui9)onKar_(62i@KU6rP4KgCVN{SNuK+yBu6G_#przzATG
zus;=o!3FfDFFAG7?VX)b_|O{3R=#GMv){}5rRJem$g@fm)A>Dq^OnQ)$CHQ5yC!`_
zdan#@>A6lDZHQ)w7^c3?(3c2Y<%#ElFQ5~hthAF*7?$}=_gM+}-5~(vd8DvXsiTq*
zKT=FMzkvv@rv4AXjCR?;7bN)cV#AB!^Gtb>Oh8#V56;b9SyzY^Z(D{o04@<Q$A;G0
zKkN5Y)>b7?YT=fDRgnAISVd)$xjTYYC@!|VJXYG8?f0`E*E<_>D#^~gj$ZqpKY*sp
zXwdRB5Q;o=6;2uitm~hZI-WqVR?o6w4}3P++rtHeJlVBd6iJ*0;8ICcUWlHG1|u+r
zD|PF)5P%3TXg5b1g~x))2G>#!9u3mGo7wago)&cddowf8um!K(vf<$1?l1Rq*)3h}
zFLosj_1ZoLe8ye?&Sqj_m8kBIToJTZI&-;deXaySmfBim{l2>};#mAD$;d6=o8LLC
zW&<G3u)E!NGN{aJGt~!B8ugWV5%{i_=4P#1ZHJ#VG5<m9=d)BME@Zor&}szGSehu$
za0f7Oa7f}`sDJ!m_V8$-=s&x?4ZPfQFf|p8CFa}FZLs-7ju9jwApykb_{9aPPdOlx
zk)59I4b;9trX@U5;lSq)@84G$vk2z{U&8Bh59NXnj1de=?*WiVfaPme>~K4LD-w|Q
zvC<hV)BSGVE*ljU3{Es~W2oFRx1FHbPX^)lIc?Q9vC7kJ$H#3V=x4X!m>>`;?BU^I
zfc+!POcAQ9^co{1Bdd|}foc3<NM%Sq^sZgd>r7M#+V1h@qzn#`e5Vz@*%dI_zCOS+
znE8k({}Zp!LgC<`FZkZXEBY_5r4PrH0ZNpejm`Vvims~XOfH#z9uU!ghS)lxo)`}+
z>)GXHX;>ur2m|!|tFDh1Vd(@YYL@yd8%698^a4wu+MiwQDx|^hwyC}w1S$oHDk1$-
zkp#-}GSkyRg30a&y-WdAJETiIR?3q6y_Gc8gJKl)zi3&3<ywz_Cb<OMLElQdE04qS
z&RjWGg0h#yzqSDF?gm6YS62-l9yGB47#BouoOw}RE2|>OTwCW)iKFp53gRmC;G@8~
zleMw2k(G@|O+|Yyku@v+dcPPzYq}R)7gSMS$2z!PhTCmwWrsPa7{%l#_TL24G@)H*
zN^R|Wsfr0mX(=g215nDVRidgCM}UtHa#$<^LKztul1_)_R-YHG^*`i?##5PqEdcnP
ztT=iJg(Pf}qH6qB{MaUqYf&Eu>r`TeG*ae4GkCbD>9`F4{UidpWah|d$L~37vwS>4
zLVB$j*&A8v!b<UdA`w9;sz2k=5+z@e{+E?&imqywXdS8OQq}8_Y>=T(U#!S@pOfx9
z)|4jkf6+SG;JliC4U~$=#v-{N>FMbFssKs<H-Cqy5UhQWNHnf^GT{FIRVFXu1`!eQ
z{N@H@ClwPL`|9qTLlC)n5~PBFU=w&WcMl3rMWq(lNyya~SBJ<ZCL;e9@^I^G<+s>u
z4`*kbe`%`w;sX#+l1Bf+cz%A~*u;sazx#0g%lG!}T8I1XbYZD-ZVx&-dK&P+KsjKD
zs5*spv2k-_o{KUhP?0kmwslxdl)NFBDOIu$S^ZhNK9T#vB1twU8;Kd4$$hfexNo}D
zKn<i~$t(n9<j1>dJrk4lK2g%nkCU0VDypg<*SgvvDQ6cKH&<7j92_|RE^C8<{duVo
z59CRHe*0D`8q@`bEt{ZP6c4+@vWZDg+urv?jt5hCRN~b-GlTn!;zBgsQ>A~s<O}Y9
z#>DBGf1TrM%Em^X&$XS~pS9N&+e48Yl{!x1{%S*U&GxOo*8??&(5fZBKmaga?D8I5
zY46p30D!g<Ol-%My0vZrFw^I%^x7SM?Uj_!P}KC@@Vf3n3A(i-FD+GQZ6o1~BAmST
z-TOjaDfu)dPo=+ef0+sr1KmFEZ#m0!fcnTL!dAZ;k@3+93Y5o}CR0}$^5sq7n*jtn
zkt^c#Ew;Ky<#dIQ{e4|X0@83iXyp-9P&*7)Uwn8tIkEZWspxi?($dnfSx(DtfCCp~
z6+$3$D*ky$KIRGCaQb_B9hr#uP05dV^6Y;<T$bXKk+j@}RHu<Na5vAM|H>>1&3%C`
zQb@f44>Bl7?B=GuIIcqFF#qJ&t#H5-BQGzng|xt7;MUL*G<@vxQt_`Y?|mS<ovsHa
zaXS#&+cV7Nlqx+Q&(iLL6e94+C+6m`&Cs8hn+-r^NXtrs4NoQnl;md9{y;j7lK5<@
z?yj!=alPMvNI$L0QmRp^02K|nD#D=kG~n^ZKbBZ;z5B7w?Ql6;;C8j$Rm62K8ibnI
zS*f-XC~0qh^ELV2_J^b8ifWT*Urc?*IR;4)K!V~r`y7D0&u{(XcUV~11ssUfm^2h6
zJ`{i_8SXKbL>FQu-{a?;&SkF#MpK)A^ZwKQ3k6#P!yZ`e_oXYY`^=QC4e!5G`R-J(
zpG71m11X3I^{t?By*Yum1}ySkh}=<bp!P;>csQ-&%lY<xY;5R2F}!!P)4JImv7pzR
z@5;Gr3oB3dI>S1(YmUoZ7T<1wikS@}ISwg|1fXsGS@mtRnQq9-BU=nbw+6+$$>+Sq
zsGy)A=$5V^6PF`S^ZS?Q&P1lCl@$$e1EZhy!hH*IS&YL<fA8<d-GM;Y#jb`ixrz#l
zWShme9!eQyAO#C+ltdp1_mPV5*BbP?@5lb#|6%m-bdQ`v=0Y<g+cW|e5rhEi?SH;D
zq~_#=QPF6jY3uYoU2YCMUJz=Vg-3f^DxVBhTkMw(QXE0AKttg3y)pm(<!k&%S<WGv
zD|8$*AEQE0W~T2#ReHfuP7EFnn&+>UZm;z7kAGIY<N4j`-BYK_Fwd?IU9s)JOW6=9
zKP=Fv3+X8TRhxN;ku>5os?%D}SQeke5Qa~Dgi^*_@+lF|X_Y}MtbC!_;4(LNxoSda
zbW-@!-@j^wQYh@!KRy6QG2HF`Pw%|2a8E>?aW^4?sj2BJ_=+y^VtT+iQuy6RX_Suo
z;ZK3ZGbm!eFb>Sq(B(G>2z|`&C1hn~+g+$BV<fR;H9S4zRy)zK>63cJLiANlWD&pU
zS7@pkLIvNf2kMjy^b}~vR0vWz7D_i?qg>%JKcOXCc_TFMfcBIv5{OvBmo^5HXRjm6
zdc;^*SSF&xf5E`Ogef3a9D+`xQ?sJ_NGAS{Q_s`W<N4`NZzZ|&@qDFTla1Nj7`V%t
z*q6VLDj-7y1cbOQJ#US&3<;lpnOGc1q2K+N%^56w{JZr)djN*j3m`x?cmIf|`o+=l
zZ3RQX{o|iqu^_QCr<FElkAzouls_J>lPg6_D3r@nocScFw}&)7odFq0q1$IZAD66}
zoVFlvVY8vY{A&Zc8vBG)6o1)Fq}PJzQVN4kg?=*<5Y;622C>5Pl0br1&PLXz(dycn
zV(5DcQzu1?WRzgQ6ZVCG|AQL{;4x^vBOOA+P8j#@Vzs#tr2ruTq#($zZ%kvisz|;&
zZ&w~3e5M6w4_u*Xne`fw+I1SOaC{#P!R!c$6rMR<nu-}qtwlyeahS@Z(SN61yS8)u
zDAa0^_Ngpb>VZa51273l{19AcG-d(GT93C*g=W1ClxQYMK6k&DlQK8^`ThHAcNtwZ
zBs^wQvwVDdBSS+Fd&!|oH0KzPCl_)<pn^F{LPdoIqC6TUG_knWueByyc>4ZihSWjF
z1PWMpcXzY4PiaBWII6m9fXoKbUsM}-f*_R5`y%{<0Vzy65WAq$Z$cmjK_}IaiA<g(
zBW9r3fNgtsIBRY2ixVUbIzDc?^aiY&zU|Kk4fjW8>-(2yN~4aZ<b=EnA;%R~Z?&h;
zY?vc#jL-NQRk~)f|0X71-=BwTgAr1Y3ePvI1nHJ$PKl-E5~Jo6)oj`SX#sZ7(Lpm)
zpY;PKb4UgWL|#X8v>n5v<>V=o9-aX60yR7g^@K9U3l?dSa+$@Xr%2W;)S%3$lRhVd
z^NE6*m0O%)3%x+UH-PAQls8{+9)lv4Z2DKTJu{jZ(aYteyzWdG+8<hI$?GaE4cMR{
zPv{tgBTjJLf04<<B&<rZr)UCXQ#46bQEG}@Kuakf`v=tV&^JhJsq|s=?99x9ZcqhL
zso?NJZFQ`qLXnC=Nb`+%t-Qn!(0m6pWBo+ggM)+3I3N;MwpWv!87qB}ZHBj}Bt=|k
z@@Pv4QPhN71I1V^V!E)M9<~euBHLWU$JN4wgD{d<j4PREgX{orLa6A$S%hh*It3W`
za7hspYDJhj>||ym!xQM+{*Z5LUEZ|GuiSKoqYroU0bwEIwyFC_A%-(aI|R-2+CKS8
z3>HtC77vd{mqbZXF@w7rt#c(5Sw}wU9THJe1Y6mk3QEntN{<sJhx3S+cu)BTs&PDA
zTv{e1c>WhV>HL^!?}`awKn{T4?+!*htkOV61t@W32>DjzgYosi=5uy)6V-ZqYCUNz
z4j1_Rn?j;QE|D<MY%=M5@QP3kWf&$x7eU!QRartJq{ir%Tx)W&<x<0EDU6gd7866z
z<PlmcD;Z$SIKk4yOW7SlA*yw_)oWF95A;wujIjAFU=;WxH?n?+v~#7{>OUDI?_@b$
zcCV99cJYc;x09X(qwVHIfYBUK4_iRZN)8h#Wfn9_e{7m1GakZ_S19-9=bP1=%Z~-;
z=90c$0No|DAZV3h_<qou5Qi6|WLv+vqT(@vg3Wez>#rY?GP-y+MGH`N%fbivd3VCq
zgtQSOwD<#c|FaDxVF4)Bf5jCbi=oFAhcwq4Iz!D~ybSO0_JHRu5DOxGv}CC2EtSna
z^Xx<_LVy1B_xAJ0XIB3FHAI;nKW|mUu<kPH7<meA2vJ}$Uvu=Zksl-y2u9wUPn&co
z!Wr3C`Be~g%D7dk$`Rc6BiF~R<OsRK{-=kBT1{o_dQq8~ox~ZTN*rB2Oac?rne|X{
zWEFaWrawckuaD+4g@uLdTu1xUMY6bXG3<nG@{f=h@MuTANU5!Y=eXHdC_@7o^YeZj
zX;RMCC*}R<)*t*5ul(MqSl)7ekc<*GPT=9yW?v`a4|wg)FqC6r0T03k^x=-rIAbaA
zHs9q!EmN9${sqIb2I|;QQ{pk;PO%V*b_)e9^}E-LB^@#zCd#`E@&x?rh#q_zGVQ}B
zGlG8r9uwz@7o&j0^j(|(<J&8VwvInHC%$SYHQLqYqe=2k{3Aro)by;Z=qW-=W6XOa
zXF$+L=1~gOG}#zUKCa^x!|CJy+2(ANuLWc>5PfHJ+4=PGS)}Sv{KcjQqqd<OP6h}6
zrg(SkCwZ;oN?Rs*NOo4q*O?ip1koT~KE9`y;_c3H%7(eYL53L#fNVorY^U;YIq5N9
z39MZm21=DAy`Tx&%jzkS;^P<hMwsw(SdLD0c}pm%7_HWp2MG?|9420dz^f={@gfUo
zt@jueMxt=n;4%?LdcC3pl6a(g@#h}z%eO2qr>pR1BX;u@7iXJ^Oa>lu{t>Mt{ll@@
zxVCSc14?)?U{O+MuOw+?I57r?qhR`as&D!`ONH6O{?*sE;eYDOM0`M*9!pyG30*E+
zJoKV41;AuurAct~AX~^6LrXpX4Njv(_Qj9vKT*l6-H+(E_=#)&yljlWkI|cfKx=_F
z@2{J_1GkOyLFQ<Q#Pj!}NwIwB%}FLmXWXA}mnKMKTIcx!IQdcPdOlxtV1A4ecA#%;
zjEIK4ok3tq`Z|LA!}$0(NLL5`SsOI}+EcUp>4CH25$KD(&O$<~0PYMgKoMY+F&^*)
zzPxIl1V4F~m=*X(W9b|Qk(kOZ4d}KoDdi~yHGFQW9OCcLm$cMfZcm}R;EvMuEuv$s
zo<^Pk>J^2Qxo&)o(s5BINUI?G4rw4Z&p^VF*C|&=4S#xiqLeO>0($7<?<EBUjx?d&
z4{T^}1%pMd@<H+{n}7bp2X%?)&Fiz9n^?{;UE$e3Ji%DA#f|fZ50mrrC@fk-s96Z<
zG%*w1zHxKH0JN*}NDr~To`y%hr5S3E{wE*xLSSs`+-`9UY7TR~D=v2$&(JU-Lns!|
z3A55k6Br9~Y>Ug9R4%HtVTV?KAF9jlcPDe<_XOqy^5I-}N6CE!3ygKk)&JppLIQ%l
zk%a5rF`iBjl23Gs%3T;j09v&>Z=+Hny~p_-Q`h}_u^w$+bqIQPVWGMc!|H6q_-qLb
zV2I4u&&6t??rv_2ZO-4O^8EqirIe=Fk_6nP!Fuumpd&L*iI^v#9|E?=s9qHBLo;7?
zNsHAKH2SfKaW&w4i%V8G``rfzgu?^f15k54Jv|YICnkl`mb$3bRaIG88|AKN8}*O3
zq%ru@>r<@8DLiTIAn(#_HL*9EJf^3gk<06RI#XPUiaM&=6ivVZ0*Jfc6RlfXY|lq-
zPKAnuk;UHuHZeto{;ICUwr1g-D<TH)5SbkGiDa9j@M?$qiNj?)p6+bRwyq8x%-%}!
z*P8Tp+s#WCVW|+<uJyjic6u<yYZf`Ib})hdBsn+)Ko8)xNS0**rx^(dCqafC-j|NY
z3rb`uz_t5(Fs;#!Nx95x`Y_Cd_s;ZXHwt;}vaBQe^P=GFM;`S;Y3eM5!`KVpjRc%+
zI17f#?*9P5|7p27^ZYmZ%+eAp>cnX+o1!RZ|3EjQGxI+{J;EY37L0!K*Pxb2QKSg#
zOOm1hRYLFrMBq>TAtRp!YnP91B83>g$nVNq1!or*Q6x2`^>)|5e@0yP?pUh$su2?o
z*wRQGP<Az}WTL1zjA<-k?n7Uwqrjeb1pO2EX|NiKC(BxD%c|6&1oEQ;RuhC9^mxpM
zL2`8_y^am8ghz$5r7z7E-`2FNGbE!WhY*KW$~Ejql*>poAJlM|jaTX&SC2#lr-x~@
zGP#x1{7vf3yR(fRhGUMwp$58)v$9SQra;xB+9yn2{Iw4b&z#p=l#;(Wvk&3zbhE_@
zObEg6@Nnq#e_R8e!{%$VR{zHommo<&;l=FdduwWDcoeuG_=(y8luDi2CeJ^cdX2aq
zhcnvUW!b8>U%@00i*Z`4V<IDag+x3l-hw=YB#Vr&4Y+*Y9Jh_?ze7fD#|x+qucL68
zkP#94kr(RB9Ow*@@tDs5`a2i|Y+)n$lW>r76eniBP&^SJAn|e|#9jEZav*V;3C`-=
zfMTN*$$tS-#nI1Nf*60sy-CiMm<>sr4_RIpJ9>uH1~-gM89dQ#r%|dCLs2jr?)(8y
z(Fq9{NXW{O4p0SXCHFLB?^i|v6hgmHm{P0FzzIByk^JiaJzdhsl2$G?wpel<DM)_~
zQirp+wDcK<jF)$Da?*sE27?aJgN22Z`ffZ~WX(>l7$(-}wDk1R<n?W0xs^{J2j<NX
zVjMK@CL*<hDZl>uB~w;{gQNd-U8HYv5{(Dvbb7<~;qFfKr_{rUpZ{OesHiLS_e5Xl
zAK!c<=u#eWm{0^3rMM48iH0zCmluXBuQ}B+ROI>96-0NwDPfeMqobo#(UxSe-j&U-
z1j7l&9IYCTtsRM729+*a1*!lMh$|7U{~3}2H2PSO8E)QPvUxH&QR(@ql5EyZnEw;N
z<e;jR=(n-RN=OR`sSuIZ*gQ=@f)Z3W!Zgw{280!@rq{gBIfN>|U!Y~TLu@9)Kj~kW
zgTzZlEx>Fpm2#qe$$h=X`TweM!5&rwQm}s`8_9NPKk>x;?^JAc9xQTxRrVu1vUmX0
zg;F8Se~-mdJ=;u(zeBj!JM;gyqk!_qVB?T7%^Uwqdq<ISOJz@!qI2Tq{^0mCu`Q&z
z{GVv@@8&RZdezan=_oSzBJVgV%XR1FG$(IYX^Y!+m(=E%$^Lu)<PgcPwb+p5ViU`R
zU>dP62tck1c)BZ(imJSuCqt1{EDDE$h6dB?dULS!?yC3i)!`+mOi7omF+4oL?3Hrk
z<Kw|VfrJ0%i0#f9M<Yyig%x;rhDd?&?>6pZrhecLnEW^or!cUa?){A4EAXX|ZzkfV
z7-B)QxyjOEh$B#gEM!z)Q^|X-`s6B)I91+M_J{1j0lU@^5|pF6u0`C<l9GiB8Ty>c
zvi@PU;}KZCG&D4z)dK&}X1XB1xj8w42b~;{A&|U{j#Xw{@LcNh*17qu2M(Fx|9F`x
zwg-VLpw-@9Ubfb;f|FzxKu@8#0f|tcs4z%<#*WsipaOmK@5NV~{m)ci!%%(!4q@2o
z!POj>nmSpfhaCRqFj2VMVSGFCXu2%Y;2Hcx5s%+Z?d=3EqC+`U4?{rrjbG1M9}+LC
zrF|BruGqmTc7=$%x5&Su3qAk1iRgUZj<2aT$3zt@@wJkrV7#@Dmm#_R-4{9MU!_=w
zRYTpk!STB1TVIc<6||Rs?LS{mVkFYUfMg23-5PK*;;K*HsjsXG{Tm6%OK!peZfgye
zI+Hos!_fr6ZdT(qt=?nI7_`7S<Mj9)&s!!2#EmGR4<Ta0>W}B%37&tfH3aPKAM4tJ
z$>jyL@rC!k9Cskg_StF5v_E=uUBu4+cFD&`@ZsIor=S|%TTMeBayT6<p7p2od^l8b
z9ho;v6i*?LHcIu(sFbf?PYt#PT&X|Gb70^zx|C@BVEUr>yDk3-1qnlEiQ)6m7mIJo
ze7rlgT9uzynj0EEtaWXQyj1yJA2CI9v#$2hT!O|9#Ix(uRf6OT0nfKtLcW_IzzN3Q
z(R^h(wSu(w*5T~_WKK5>Y#O&i#>2He2+W@V(8{3W*q0Ar6dubd!evr#;H#_65coI=
zaq;Xdr1>&6puf_MmG%7j<%yq)fPzx3S^lBuP?CK(mc-81_H`=|F<U<9ft)x#8$RX-
zOUuopqp-#JXD}4N4PX%M0I0SL^4>A5IyHv99w#1gZ%MMUdl`+ps_cJybb6Bd{a5S*
zkQ4ktSUId1%XDg`LD+f|6$vRr&|4YMN^mSJ;AoD|TL$C{CsSEeG(C4tPXUHJ1;{Nu
z4L_Ap51R)^8EBJ#ALGapfQ{UiYBh1BkjU5o^$e&S3L;{VC5WP<jac)3L?8#^A&6vB
z0#nnFFisI{H*?gx$479+_!~F`-k<+TaU4yo1mpn+zJ0qrnkPz0N%7JJ@y7V@0&h-?
z+`Aehc=I$7eZMU)b)Yo}1U_E?uJ#$13AohBK(<@!yhW!4`3Eu}Um-NQAHP*la5WU#
z%;C+s&JltqHwTG+wN8)D>wKmEX#rYIb&_7ph}Zuq_?_=6&FDwZ2X^H76vE>|6je%+
zaThQ9>EE=~{Gls9Cp0IaSoKBIB?aW;<<Q9>TVtXUgr@c``YK>+YmH!R4BIFBP*HJ%
z0J^ev@O)nIuTmAfGP<_EPfsAfZtv*0(C$h^lsQ*+4PtFvfdRgA$>gYJ`j88Z&qE!~
zXB+1gS`2T97df2PvOpMABAE~=UoO#ycez-hbEY_|aH|twtjSy>{U)2aHfNH#Pq!xm
z6txHrAA!25xtlMgX7MjdJLCr7qrAf_)oT&|2l1lryLeO0Es*Vq#(ucJ2Vw@Q4y5zL
zk~&!XzDV(MYxw)SyS~?4TZf14TSEjkU!-G>$QXeC%Cdcaak0>pK!JaB3{=?QQFcyF
zNP%d!aE5?>w-4pBxHylE>M^h|z{zlg)E^`QH$vVQU0RjHz{{PVpI@po>%3a;ygi$*
z<VnC`GT`p;y(NdhYX+%)hci3|$>0%ngb)BC9aahDWL#lD1|EmCs@kO2;bfVK!isDb
zRP@H~?tHyPC1670XJy}XrLS!${I}R9NtuM51?gmGkLDR#99LoFy$)x%2-u6hAxGc3
zULPqP5kcN!A>Is~M+2B5^&@Ku{>{N_wa*^$A1S$|f`y#H7@=Ca&|repJu9uf`0Fgg
zartk3H{hwiDL7Eo&+>m*ogGrWKi<7{zwIO0t?kLVJD@Z6!w6-6hdXdwn>;Zpsn;_g
z+<muSL`J2ZxBS`XBajFR5uu4pS39_h9s$~{Gm^bj+Z!h^?hWugoS6sr$;Xcy{0ZU!
z^UTeS6GtNO_xUd^jOaYEFu3iIP<Wbe;0zc@_sosRvW<v(h*yK81xg9W+%-6>`kDyg
zX|}XAo7K!pGt$}PS<rP)d~Oc#T=inVBD0UvnAF&r!f#|iwVceAH>anUXB%|@5JlOK
z;e>0B1BHpIqjL)q^PkJ)5(bbGe7(FVxPME#%dl?uVS==g!wPZ>2IYf<T6h$aOnx3C
z<M?LSQD3APJ=r*C1I6l4WaE1;*;K$2V+grM!2h_Q6F9^mYfC<^QFmY`{Rog6B<U1{
zktOs;n*O4fu|yCT5$nCy*!-Tjf2K&DTj0YvEqG447q^hxmY663PM5#005U7RQf#~~
zkJFFPYF!$2tZEVGA!s%|aMDCDyUEsp%y3>^TM6oa>y)WTUuZQUrN)(OWAxNHIT$yv
zAkQdFC$42-miOQXmBa>lB`sdc_?c`aP{!*nQYJU4+%ozqd94UCgruQ?CClaHw9cu<
zQjIv6xBT~P(?Uf>1p%%dxicnf2Rb27-0x`48{rG6;JggvOvN@Y(_>&>gQJCIE7#Z8
z5=`q~zoG;>JA$!WEYhTr!C77?|Azh+2(&=2xCBz1S@_{pzU5H<rz39}MWtj!zkIlJ
zyna<Yv^Q^}@k^^uerAS$3_Xz@N-H}>I1JBrm@Ofxy8-6HSU-8-kfivh%`0TQ8o&E3
zs7?mVFjsQQa~_%4TD_no2_xBCASulj)h8^AmPsbHxAO@OeurjYKo&$s;PZZDb%;z$
zpwp0c_moWYKqD0<pT(LllxtF1Sy|D{#u1-a<1o+C58Se`1i8A|-%C+su;eE$yQ6Q<
zS73a$0ECfk*uB;B5XZ!(*du;kzSnTs>6wXh^Fm3OkjAdVdTGI$B?=UR*-Yh#F~{t>
z5?}hd4j1~BNayQ}tZdb%$iW3}Ci<(*r+*UC-X6ve4dppAFg(mJ+$&Y{o4Wm(y$Uiw
zDmxgUmm=lt2CIqDgd=o4E}h&=daciP^Yny-gnb`^>3ee4ZpEuhOG%Z2&B9z<=z*h6
zq}vB@0Pgu-c;lEP7p=0UC(I-e(r&;^y{~gx-vq~-q!sr&+zqs=7GKS33`cv|4W?qd
z$R=1F?eu>7Budao_<MlEunAx(ASgq;k@zdzk7<q!I9L%#b#D|Py({xSUxay4M$zej
z5gW5NeHIz+y9F8+kiAhAPZ_kUOzJjzBV5_3r?6<jbNa&6n;D93=uH<Zq-jN*EO<vY
z{97Fkx8}5HPT8>wqY*Vw$nF1O?k%ILPQ$iugV=PZASvA~N_Te%(jX-zDF`TRI-~_e
zU=z|^3L>2f0)isaAPOQS((#-)Gxu|Uc)z}DJ@aAKEFCs`|MwMV9LMiGuGqpMws_OS
zYPXyAYWHqEugY)wC??3(Z~AT|B`06ycr}LU(*`*d=-X~7M4y{JyfX2l{Ei@`qTu{x
zUxoGq^Urd)NlVOIA54_03R9>ujZvuz-cu)d9fDn7>7>t7+NqsBa=kj5ex=Dx%66z!
zJw3+r#S5wL?<j&a<DZLec3QLwJgGlJM|ZU17*~GsYxlQ3#cI5hOK<UpGF#}U6EHzU
z;_cDdu0V0*n$UqHL2A}MdN}XHcYMsM!IYVVWaF>ar4efDMOwoTe{(S17PM6+AjuH#
z0v|T4D7&ZA?xfr%l%`@@ca?|d^NwAVcavE^SZ0Q1CAVb8U4c3c2;9hckh}7K91gmB
z&ZRtV>tRM*ncQ*!725Clj^r!oJEdCcBdnSbo-=C&6^6NgG_W%nJ@~jw$M5y?{4jQo
zdr+O?=i4Fopp6oT7WMIL-qK;RQ;|r5Ib0D2RNmCx(Y3a!mXQcC=QDm8Wtxjhyi=Ci
zv&z>2`%hY0`k=kGz+=ppLnA~Mzt}^oqY}8iNVe875(jS+NF5?46&2h%i3+F2!n}(p
zHy?sT4g*#FXMiHWG(+=7dp7}nR9mGMNI8cy8xY&=%BfPpvv8jU9WE|@{|<St`JdHH
zX$2a|M_0nxkurgSKR?Z|>l){W@DPWqXRL!LbZ_UI^LXcn?9;bv;K(fT@YbJB?1w$C
z)ED<0gD8?ujMnrOKeD>0W8`QdR6vwpUGWv~>eDv>a#>y(YH@$=M+iZn_R~w<4dvxr
zfP%oYdfZp<v9!l^N8rn30WtqoS#%0;Qoe)l+Fjfg?`etcK%SE+6_*<v%}-9GA49zO
zZq*dxBOQtD^yLqm``th|+5Mg)IQKS?K=cfRK_<p0i+`X0$=-=7&VnAd*PUqe>p>w2
z$g2huJZ4iHP%$TSg<x!4NiCJbFki7y`6>mcA=<=8xW5;wv^9no<`XQ6{gru48-2PX
zv5E;nUnWECi7eH$fSOhCxml{9ePcYWsrS!MAmy)E>eEu1nd)Wnjv<dLpa<>wXsN;T
zms&XlqWY=@a@B-#WriA1V1HxxjwdiM(AWeJAk<9_Xg0E~{=!hsX@V|wHA>jU<b1J*
zb4<!@_AZsc<O2EHr-~<~j|zN|Ev{n)v%@crQ8ez@<K7@x5N3+dL0kqBz-5KYDv!Cq
z;q|jt5P&SAf`TnRzsMid-v2`Uj3?0LQHaClR0DVAA9y(KQR_Er0hPnD(v%}op|Lsp
zVmtEthjR*57P~=GKlMz{dRX?$(2s{OMP^nOuk_ag9f{21Y(MoKr4t`58Y^v~m7!xy
zS7s=EaU^(VCZ3=C`-p$Yi{F$lZ~ttR@!GXHihjAs-R>3LTF7?Q*v(rle`^Vs1hjm<
zA6qFK-?aRL-NZq?P6=n0qT)hCGAb9fSAM;cyqJ*GV^IU@p?41>>a07>(TI*c$!&4)
z@#DSNrKT^POw8~ywKAP__TP<m;+I~=dVp(4KNKKi&Tww`KGJHe;0qxE;q2O_v$M12
zX8#4nXFY52Pz3!3_5g73N7{nU8OMk3_S;CT__a~_KixJ-Qj1Lii+(=Y*|XIz6b(Xx
z2L2v_K}PlW7=%7ioM8#Gge7cJvW9t75tXg$5UuJ*JV5=5{86I4NnILAsa{ENCYLMS
z{eh8#n}X*wahAyGP{%G3jhcQj8d3drv71_$W9dgKrzkzU=l5Y0Rr}<marf0}9WmkJ
zsH{X`#)~KG%ExlZ6x6~R|Lpd3^;h?kq<<b~r9;t!xDW35*F5$^>7g9)ym!NVIbyuZ
z!gGHk^rC)*jScQ-7szbDiM(ZH13CqMHyrw@Z_jRDM0?Ak(l};{VWm~W!S;A*S*KJI
ziOK>+0T~IEb|Lj+zql8gWB*}!B{7c-bLCf03bE4^sMX=ASnhhspN7bQMCEVkA&(45
zMSAH`C<C#`1ZFO|QnaEP+h;m||4z0(^b;C`!(Fjzvl>Df<<7@VIGgE@zM%arr!X+j
zI=J*Ij*tG?-96GrC_7v6eSamRoK7!q`eQA!BQ+#b9K+GB0qdVvij=>VJgD5Mk3=G0
z9Y(u|;(n0$9K4s|tdsD{rkuC-YvkCM5GzV`D~<x{@jUwF3sD*TAah2(h78+VM_IyB
z*=BSG57|K}Gcxfx!l}@I>oClo^>6x{%4_A&2L0b?11C*6D`AJ1p@9CMw<zymMyNVI
z;ae(0tW|vVAIX=B7_mHIsg+CiKcyF0V(zIsKHvxYTVzpA`tOzDn*4u;dzM5WGBP(O
z#l^)nCWk_yWMn!R8KPF!{yrl3*Z2>d3NWHafnPBA<Uj|MO{1eVKtzGPx04VP^A6k#
z5Y$kUlBR&a6biK8z+7-Wlh4W;ytFM|tL0P^-`*L4Ctu3z$2=~TK(U0G+05CAXUIKh
z9CE;dl*%jv8i?O$URzfo*r-kxc$EIFNDbh*V0VIWAFwmUwgZb`x$*Mw=!q{Ya|ZjO
zd;idoOGk);zkf5>TSY`f-ui7X2A`jPZVhP4y6G7`saLA6!Y00|nabh4Yt&R%_j9(D
z^GcRf@WSwmmN6GAD+a{qb<h@&{_{CcxYpP2hlz}2(&J)b-2{_Xa<UC<lL7)H-6MK*
zy#nRST`!7?`XY(CJ{G8i%7Gs*o!@2!?BYu-2rx}MySdT*E_>Gwab@S6J1a4)djtA^
zR>Wb3g9hQ-U<jean1jzwoN~anVVS%E?w7BVlgh$~*x1+y%l#hThiQpe-76q{QS$}+
z_0aqGd2QnVtTSXnB)mk>;SPGRRea2v17J*q0}03a`aXa7pe51Ix6(cvsnHBJ`l}k0
zrxXADRw(DmJBRSOm=wO72J=Ck?EqI`XJ@CZtnBXYu9uhBeHWLx)_@|a>kJj;TuZqa
zGGMib*JYaF6FJ*j`=14iR^PaetZ*@bjxls}OP)Ov^V=E$*i@wokL-W7fSKv(h2a$T
zWLOJOqFQF)<*fpcPKRDM*43+W$!-80gID}-H8JK1<1irafQuUPP~cSUfYez0R<I-p
zlWExXIA+A)CVdF0v)wzx6i%aFa5F)d^RM$s-zaBeVZr0~ipFYVjf#!^GxKIT34gAZ
zP;5Jn%#g9mHu>W2V8{@(?I---58?Sc%@l4^7G~z<#hw`W3=yrBAl?N_MsftOX+T?n
z-{G@983j5z0Mq#Xno{t5(g6}0C?Tpg1FOx_e&5@%15)qeuJ`Hu8sbpa3DIbNm&(bx
z^uP89V;)4LZ1r(DIc+sHIt8KovT||^UvWVY7(z5Ofi>Fw<xAK*g}<jj!g8z#H_}O6
zJvLvwpiGvTdGzj!e~*XAOytD9{~i=E_x~$g#5`UE1D3k6aXLM+`zkFh?RJ@!3=6Yl
zH7N-(W{_qFFdLas+QELE`iP)tMAVHPx#Gi{Cx_mu<hHVlSJn6#Jmy&`XrSUvjI4G;
zLq|V8#)N-|!BGujw`=msxE)PeMn*;;2XAkO3$DLiT51tf0QJ9qN6^LZkbhU)CULNJ
zaCEfLWdoU$t82I}Btp+AkKPj|F-tSZHsCchK|15>OYn$VLqlWBar`h`S=l%ND@uy1
z2ig53$HLtUD%k%QQHe4D?Xm@}meywOyrmkBXNr{!B1*LQ!$bdv*M9soHOXB1nV#FA
z0w06;N}9FoV!IX_n3b3h^Sou)q@)~%p}8O+Akx@aONb<_Sln13o8NSEbhNUyO_%=X
zr${e;N;-s`hUb<{q>pxR5L9l5hK3Ff8JHQQ2V@Ur+2!u&eIP(7z?)QYFpkEGx{77u
zUN05C1=<lJ2~hqqAr1o*ZwNvUrK<}EBT!IKPX?hvX?qBeri?LF3yZ^O$1+q3dPYLd
z-v>><fE}NPzEJP@u}Jd;`6>#W0ovqAb7YT#U_DAmw1QOV;+Laj*x~wDjH+vF1mog_
zwL#MVeT66R3N5j+c%VY>?CR2JmBGYL4XgI~)tpF8VABbqGc@0~;qCEh5~~x_&9U(R
zCcwv+IV1(U7^WTG4g7DKrV{q>c@78uu8(?icX`=Z1}?pqUh-Ow*JDFjyu7_ZUZn$A
zq^%}pB33ZVKt~xKE48hod_X}}Ra;@<YkK4fm-eFehW^i}p8fp(5cPiECxz(=V!1sb
zOouATgJ4$<T<%}cCFx!324fI7S3u(w$ZH`9gpNqin0$OW<bEEKAb&O58nk!H%4|jT
zEX(#G#1Ri7#)`PVUcnJykfOTyavuBO#4FRw05@R<m@PIf4}Y`B&x3suY}4dTJo!dd
z=AK?&TxQMs(WLCr<la*?HpgI52kHJmKJW>+jVfj1X<mzauk9RcldQh>+lGeacc|PZ
zwgB~p*I=z|RKRWa1g?>d5tJTykwA!E7S9lP6bk`A*ftuEngIeBt`&}(!C_eb=xEn*
zb@lsqQOkDvfa8-pwYJVP%|pO~LuV-E)s~jdjf$#)2Xj|@WBHLY<7_oO$&Q*OI}0<u
zL(P078Zok?qhpMLwVjIJ`qheGr}1ck$`U|Dw6bq2tTh4dhXEhH{dvIEtaV2vtEO@B
z+xA;3kMzbp7rS+<YwqjU<E6e$-J!0ok6#Y!yx^k0j155n0rkY#m@aJ>2pXnmW>A;f
z9vy~QvTA1in5^-9sZIrk14s)?72`7dgGvEt0aE3z`HoNkwg5G+6>>c6q&GTM0oQ0~
ztZi-C5DZcjDYsH233FTpx%!bOvVT{+3A>n6ecL*kySw|r@uq_8HR<)R@bI%gpHHX+
z@2$MEp93!skD2&2N=lF~N>6o21U3tlID)(HMOHMFKCRjxpN%RR=Sn|;VqiNFPdEe>
zLoaT91{9_D+Bhg^i|@YP$y2~tm@C$i!^G@sJ3q5OJ9!9SI21eFfGz@EfA|qc%XSNz
zyfZ}DVgoGY9GpQ~)f}$y?Tq_zur(~uFHSLOQ*<Q=mE3``0gNRQSwRmgxK5x%Xwps0
z$yqj#%nIdt3ZG7}HN{i%U#tkQNk3NMV`D1@x3GXQ82X`{^zhfzA38<j0%f9A1ce-g
zNR|Z1t4F^(!(!ZbH)fQs`=6i904i`E8d?fqq>QHE#X1EVUOrrtSh8<59#j<VCo3)!
z%Z}$x59s{)|5yg#Xf$qcvJ?9NUktRa47#yQzt&g3vjV=;rvjB^@ON!4EiviO*iTr+
z#%VkX3}ni_##7|w-8MKL$*-JCT*w5Cu(8o5H@a)ru8E0zIam}ZFWgW&n|T|E8Jh;&
zq*Ur8X8Z9pe;00aIYiXW+G$7UAlVMsqgoMv_h<#|(T8zt{{H@qX;9N=(Yk&N0bp^U
zB^GJvY&JeVet#sWER}=dz=y?6#<PCO7XpuMiaed`{y=#wNQ{WNY)!1X3GF>lIf8A(
z0d@|cC%<7F!!AE11T@MA$FTyldWVHyUqvBaYP0T9y=#<U`?N9B9>L%tXWED^gE&<9
zd;SnNgl&zW<N(Eq_-yAj)7${gR7MftpYa2ObgAzgtIVt;1f5PQNXTPx8EC8^7BDt4
zY69sq6#r!?i@TvFg=6=|f(hk?%^lkY@977qKmerxb!rmFW$3dAghNm(eR()r!X6wk
zKzu?<)S9(4f~!;MHu%K>Aa$?FRpRWxhE&K3z!sqU17UPz8A!hgS>!!EdAu&nB@h6p
zlrl%sgRnS0BEnSuT#V}$D4*jc1CQdbiOxa?ys-tyAE&=RSpVRsF{xe70Z|S#TSxl(
zzRpT+f>Ctas8|sTLh*aEZ`$aWq1iF}$^(=GpB1TJ$HE?wiR}3F$p^4TVC+E#H@TXD
z{gj-`7~qR+SFeUbbnd%3OS{qyC5f>*`zio_(&Ng?E)J$7*y2BD#yV^mX_Qvh{rCIz
zHD~4H({>=>EF%S)3MId_Ux5-pdL_Nr>XjR;cj01x1JSNov)2P!9F36BP;gY(iRx&;
z739%BveifOgfYFYP7uvX-g|$ct8ctSFYI~c;KT$OLq&y+gbcpQeX)P?eLs5E*L(Z>
z`&(P__WH<#SKF{ZI5|CSY;52vdlg4(EyJ?>xl>nNnI<y0Lnq%32X!~}x~b4*`Sp%K
zID+`c<Psu@fc3!gbTlrCI)%SLD@SrnZgosy=Q;7}w|{dC<^hzQ4B{(&qeF9e8dQh>
z4aE>DXw3bTvZa#$ByI?m6L(G0|Ni@b)2468{LO@Qx-v$vRG6#zdXxQzZIux!Sr<fV
z<&gOeP7!mWqMXRS9Ium5G!=S$Z!)Aj0ZzUlp9taWvFHak6=L!_r}PPBgRWgruI1mg
zW7n*f4v(KQB0nKygV-%_mM#+!b12__lJ@r0@C)>m6+e*<z36n{i)Dajd}DpRkbnSj
z6o#m16C8j5G?XxHEDvE05DN#uc0CqH?(g_j^(iG`<$m6k04qp;Ir_DhId;;_-1EPW
z=J!E_zzb|NVE;lvDuqqQ35s89`M@OQ7Z#oaZA;{h?CflSy96KaRYYP!3V7|dUq4Vn
z=V2c!B9&cEJ}M@$T_pRFpAuFg?d;JR;4A4&AE9^qcxQD)ladVZrKRSrK+wa4QuX(6
zg$=+PfUnk~dAH55!X(<yeZIW|mhA-S+PcEM87qMYcLLiBV3kB1S6?RU)qwy0ZNR=s
zf-M&Jg_%ouI<RN_Y6#)ZJ1eUbEcKbHWx*)K6qEn%4}jGaC?~>&I{nH6;76=L<?2Sk
zMuz@Pq=g1F$SJrE%HUWHA-qsujFLwyEJowsDkA#(N;i>6tYyJl@rqEo`d&>4_A)@-
zDdLZP1o5%N5rLAD66C#LJ1vo8+z035%Di^>tmHYQfD;*1goJ$FYhFr9MbKpi2S1(g
z8iACQ)B*IY@K<ESE?k*{_8Tv5`8t|IVs~?kM%4Aq^bDZvd;tH;449lpNC3>zK<^p^
zU6}iH!LhSVZWa(%AO%WC$RuHl9a&BFZ(?3}upBTSacM~rArma{ah9~M9;&|}Oav*>
zq8m8F!Fy1?+U7Qw4e8#eQUkSLb*?i<kf+Mt0CNfP16RN{kF|lX1$bV&zkgR5RaL%y
zd-mpG@Sh)}BxiuBHpqDnFkc)ToS_52n?U=Z<@C6Xy6-8?&FC3m$Uc1d&}JV}q)E74
z3C2sFJ|&oTb=@E*PXqOZu2L~ou)ZTx8{J>S9j!K}|2h|F`)J5}b1-%?LiiYU3E{M%
z&w}8tu%e<OEbR3ZSXxCt<VZc-{m}tLubLL$DuJKs+S=Lx2?idiJ3KWq&a@nf0BU0V
z70Cm*uW=+1dTl|cuwo4>@2Uu%K^oo81+alYNFLU~=>S4!0svKqXk*EqROsY4udqWJ
zInx%*OT(^PAdkF?vHMigWw{9%l914?=I*`)78EEfJht$ZAr`Gw?Y=P_nF;SF_-J=v
zXox!tbZ7IdWGK}7XgYm0-<i6tq#jB5)ijBdxB+nzxZ?Tv`A0`b9lthKXtS^cBHN%`
z49mmhjUTF|<)X(2i#sj{Cpb9xq*R{n+WjcFZhDu*d^b+|p3=c}GhJn2ArF|fn<zwQ
zoqGfcvPQ#H*8ThNj0DF#;j$69CY7zxq>iA4sFK{<2pH7(cm*gke1?K>Hy`c``Kx8}
z^2xGc(Y8aG5=!xRdClL9?@D>Ek)G7tyw%qq4&?GJ$kOjSFc34}yLkKQUx_>(aD=q^
zZk`#>!Zwi=2doUc{-@ioA?78Aa1)k&xlaBH#D<m(r2OxkO7<_juNnv?I12!QbX7Dc
zas>YyWXWIHg<Ks!G6MW$Fu4zEF2qB+9Ls_K)dHS3bz@-qEU@=~0K$KQd><eH)zY{E
zx8`MDLFNc*nw6hF0eUeE)I^1Pk%R(GSJOnnxDm#ZA%%FM&Ozp8K1VM3wDCl`!7SB+
zhS-yYj70Z-wg-h|82%yMgi=y%K%<E9+gctVQBq>PFC~PZ;Fp)$ncl0*{x~yNJ&e=!
ziwn}lwy@m5BT@84<OlCKyiN=87pe48bO7Hu3B$$tob(l#kGERXe|~n0Jlll`1j58G
zLqn%kZ7XIiKHs_`e4SkO<Um1#@%%!>mx~3tB$PD_YplZ{+#5K{gEACp)K#z?Lg5^w
zltq9)*RGP3G@qPr=eg~HxNJ>HmQvc(^mGKHx_hzYM%O3Ni`<v?ny4$pc7YHrxX!)_
zT6tdr7_XdLzP;`3^AKaeu|+;W{Ad7BQLI|oSKu}d1R!GNYuIdB%y%+LiH5R}<QbFF
z<?C!mhVeY=ePh<<zxxR^+_?Nx2sTT~nEZ`MF^^-yD!O;@tu3T<7@Fw$mw$}fKnP0S
zhQk#*swZ5fd#Nr+@3FSS&*sR67h#7@!=Y5Vkp?g1D?%2u<R4esDGZ%NUt6p6-e!A#
zkFijV>Ra>GvXh+e?^&$f8|bo(+cjU4M`a6gSYMx=ot1<(9GqMZpDSBUNGgqMuF!b^
zRn-0JIpc%lJr}lQ;N8Q)cLSgpkxF$E$`%%P6sDoZIOYjH;*pd`03d-F5b83Y`uia|
zE(Q6E^Jk72a>XeNeMOjWa3C1h3MHam7a$q>>@2I`<A)8GKEB$r)y;r*V8sk~5`^Gt
z$-N>jCZ?DXjP}Fbz6+z^2-B}H`2~;|#ta$QKzU2RlsSkoY*o(?P{{!=Ox2w_|Ec;C
zA0MAJO9vTfP04RB-T;mH80;#8GQ%>0g<FZNPbC^*Z5K<7P9t)lbMK7tD)<~6FRf!m
zAH<+YMYaB8G#|=A?F{wSaLOJ-vY6@U>FWy)auWc6!X7oslP`fN%SohQq39t*Uch#*
zu2I1W#hBhA+P;*kdH(<x^2$2k5d@#0)Fa|pv}E!weY&K-881cp%`>cttUE$cLH>6h
zv@di5-a=<DE0~4llhInkazwoYifz-XD_qHDR_O+?2)=<w9*jkLCAxNsaYsvV?CcQE
z29vU_f)AY+`(<-)crDiDG$y6W^)H^VT50U=2o6I|__@NAS1s*6<X4K@H!m;<bX>9g
z%Y$m)+!Cv#X7jWaiKt)RS9q%-!cJiJkmyW)^OBD5lXPEwkD?}G2~NZ<XChN4a>Dow
z8(-B?uEB;^^^b(+8~WZo6_r{kDqeZ~B^3(6aBbz?ea3AHO9ce%fjU7}yT?{V8km@v
zD0LNo%Z`vRNQ)~?o8GRt%Nw8I;^9GXhNm_KdN8JJ^L#}-3kwTlbSrMsLE9obNL(43
z#tKxR3Y!?YfMW1aaC6)IRPps}#J_|LE`x@^<9I+rlX2)PAN5;Mu7<PXGqe*N$1fKB
zIs8ol*kY)@^4MOWMwcIzdSD2g{rdWO!2O|OAQV$<Ar~MD20Ysv-_5tMYFB@-S*$@P
z%qhHs*AkB37cX9TjK6<>zbG28wu2_rk~cvhNIv)@U-}O_0$0n|S9ItSWWK3^dWDr;
zWS|HmBPO;kSOmV*<k?w(2c!f@RYmYI?!x*54Jx1Itf2=K(<K6Y$|}hoH?Ko711Z5)
za%m?1_c>_A09#k3QL^{)_^oZc?Av!dXl@^PU;mXMxFq~rSn?N;DH5s3hAoOEvl!X+
zCd~bgqQY3^d#0mVZhLJWqgdkeTp1F_)Yo6%@Dg$g#_-Q`yP?BUguo^`&x*Zma_rUF
zr9~5vJMO%Y?jybahT&0L>)lt{U7f1FEyr}-jn2_`^)*#^Uy6|0_(qw!rOwpe>`8FS
z+xOr8q(PM2fm-aLP_P}AddV!%68A$}wS*rNEvnVGd(d+*OgdgDFOYp9UB&MphTEto
z{wL!=oB@Z$+i5sDdCi*9G9vOw9n+=GC?(uxE!>Tbji>c%?B0DMVU0(npo~jGQ3-jy
zEHi*qP|yj(V}K(WQ3oyZt_XsB=DY$#D#H~6Eiss15I)8ccMZIQE?;WHA~`Qs?EtG?
zg->y<%jeXYyo{bDE!BkwgIt<YhL5(gkI~q|&_DIRjJMv<0mbR7LlbogdP84B)sb7i
z{3TC_9|Wlt3gLY%ePxxb#Qx5P)4U}*SToAGit+WXJ+H^YYf5vudeiFzS>n~wod*`T
z%WD1R3n>;ilU36tQ{{0CCVY+PYW`#z2g+b!1V&mO*okc`bKT@VxuOtqg$i;`)<k2O
zg`GcteonuJ*$MWf>Id_6F}woIcXnA}o(Y6k_Hg|l;LARjVU&&4NZ+zAR3!`c8@>Db
z0YHEPr(bP5?DaGq0ACUK?`wd!-MOgyL-f#OJJ1FvlzNUNkkflQUzmd*5~$rBIt@++
zCp}89ffJPQvR2fwz=%dFXdQ`_tetoO?1VByZiOp?E>pWtt{#_7SjxL2E)$l^MeL1s
zhu#KnvruetsaO%TyJzPipbW>S#SgVg<I30;4CCACUV08?Bbd4XSNY-oTnvz(B7B-5
zH+>=IF*Z2(pg*Al!dux1#M<e>whi27q1O^YNXY|$cc7=d!!)Y3UA->R4EWBUgQ;au
z`!cV0V937T?I*7rN`7%S!uQ<wLBc5r&>ayPmoy$1pM?FS87tPYLA-%51tfAmW?Dqy
zydW(7!14YHqX<~FA1?Lc!A^ujoH9rn^sEHJlXdn_p{c?!_2eoh{rmnzi_cxOBKOh8
z>4RQcwEAyvEu2Cya>uj?PVob{TRlhz37rVZLocpj$-te%-$e*V`)6kZ$**`Z!>Jcg
za+ul{`bN?XA@|e@rZ7{@#x)d(i%cXv4#V8{NC~7kHa5@ptfk4eXU({z%F+qnEgu9q
zXd8^S%Va%bZnU6y@s2H;pHYb}lJuqZT{F8&DD5Fmzu$5026$iC(hSs#d9Q@@B<T%q
zEQjZ5WAs?%a_VN_oVw-X#qFk=Nlb|Ljmh7{A)D4P>ejQjlU`cC$Ec@Tvm48ZkHWoG
zhI||smOi2XnrHV{&v#YvpX9_U_;hr0a9icZ*ZTj-RJPz7*D0VzTFRlIzj4_q4%%ga
z{v&cLmIQByPWYp}b*#)vBC=>;c+lozoF9I7BUSX<`!UJ{wJLDw)Y{p9sU<rA9i|&;
zFBDkvB$3!30am1N+tMnQ!J+Qekt*qMfmc0-cKH4r=kxsVu&pU)NK)1DQZ-Sn92^?l
zMfxWE4H=7AmtSwj*9Od2jv*NJ72inxjCz_K?JpmLJE-=lzxUE}O2`-$umuZ`9mICM
zdkVr;QC~exY2Fr{(5n|06>N<&ZFiVqT}q77eOZJZzWDmAcJh(IYMVIMOA_7Q#7JK0
zyek;ulO?upy)-v#)i9~Kj{d}qw$H=GxcD>H8W#O;UW+WN{xSVf_~t>Imi7YixS>JV
z$IPs)-z>$#{`*r%D?s382D3<j_!OPLW-be9Lh#o7_2~0r9VRC8Cg5fwV)059kJhIe
zNLtj=PV(_Twg!kEfEHML!?4T{Z=g$SWVW>>IK9#D0T|dFDgf=JNQZlwkn8B763XoS
z>^O%(E*yr_V0FG97#NtI=Hlb4R!P3+4mEU=Pvh`^%YB1;!Dns!wM`$sgEI~u9(czK
z#b}SVM)Q>-@PE;Xx~@arPAd2;cFy2LK>?ANi%w%u1yCRmNXlHDPG%j{Du&h@R1j}@
zuR%d)3#v}wzGENzpY3&koNfzt164UV&XJ>Th0y?N18_kdq!zNmKi@C)ss6F*2ss3_
zF2&&V2<`s*7fjQ+M5aC=qc^7vaJlJzy<WI3k1TE*Y}7ib|1vq5>(B9BG<ik|uA?*#
z0}e4r5Fnx5hXuIM40*GFfB-qiEr#`L4pboe20wCEq^O;N!x0oXF}*D`==6OGed4T;
z#p8n<kwO~%)L7F*++<iX!$RkxnkBi`1mwXEx9clD_vAli#FwtHQz=aUeCa-s**lIk
z&B4Z(nv0{X+kN;wJK-iPy{;Bo{QRWe*c@q>jn~@$7+EXyDO)RQcx({$7#rQJI#{gu
z(Irfg63y;lp?mwBOVQQHdN#n6ie{p+fbz{ZOqGd`M6I6!g{{5V;Wkldn&`YE9Qrus
zDMH^H<`XG|dH0hWRNor3y~!ODGt(qLcBLVj_(pX8rx2fH7`ah0@gg%{DOEBA;)JA?
z7O-tW&QztI@qkUK_+fu7IlfRpe(|D)>u1djoZ0qv%eC<VxVr*Mw{X!vP8zev0!vP*
zjwndne}5xPqx%|pFXe-8VZ}*CHEv6(y>r48WH=1#3l2+sg1V}O&27b%mFYp!(+~H9
zi}Dv%+G%xK9`Ecok0r}d?czM2)i>~@8((_4p&FI#!FS?4dbYU8ZTNy>W-!`@peK}I
zj(}{iIGs&tQ$I84Qfz|FTIB836tyKxlpfVL6Dy9xXiGCgc5c;nUS-F~J6^Kvf3Th$
zdBk)N!hPdBUOZawNTQ*YQZ5sU5i|MNn$4Qv?Hj=CMX_9x9FZ;SezcZ(u(eaDdkM&1
zl!1Iym!9B|_R|?q_D{hhxnSsSFSbEjmJa|I;@(dARO>J%0p@223kbZ=k&>cb8hK!b
z3K0;yekT*AU%^<0fscSSpNA&jl~vA(s;3`54>%GIK)SxSITxeOV^p~gjB03+3p$KQ
z(>RUfJ}DP-nW{g8B4+Wqd@Sq0MeJ|gJvL_D9k~G20vWYsl$;WfHRGer0C%<U^xhjz
zqZBeX=)}R8p?t|gs0k6?%M8V^k$wAUu0mO0Dg+&;G@!E`Wu8yYZC<U0D3qxb#!Vm7
zo1(ccsb5NY(4b&O*w*Qw4+=hE>NRaF*U9Q9q{${|iv50-?Wjus!I_*pm&r;wEO(LJ
z-rmibrNRk1$#QYOKbd}$o%kJv_l)dL>Wt$3*Lw|gEV~n}`;0kbN%RjU*=Ce@1Iw}{
zJq-P`6wz2+TPlsYRqc$#gGG4qyi^n_h%)(}Ral#(@MA`BTrDo0ilN)-{1))6@pj|l
zm+w_hgwiicPd%8fmIcj(ne`0HulACspc#FWXL<)MGAr&JL3{J<#q-Z?YH4>^S(O@|
za)oLqi6I9ax+g2m4R#Px_~<y|#S(>la-70w3>+#TufFX*4>YRR>%V>h1p?q(AKqu!
z+-&5+sOD1~{A`8HATyPCT#SQHghCD8y6<!#@mOB3p=g`qzgj?}Lbfukj<%gQ-JwPa
zM;%&Gw7^O4yFA4p{=D!X^=knX&M7ae`3min9>`2o-KwgvZXQSLKsvpzzRjPkN^7f`
zsvSc3XMG@9ArC!H42oK!0s>GO+Jb7KWddZ**VT6+PJ9Rp0U%WoxKS^-m`5M$!d0)K
zr}umE?8><A_R7$6zzaeNas?cGP%eLrf>?A{K-$=N5<bz#mo6~$3^#ofYJ)(Ec;T_s
zi`s4lxFeK-c=h`)a}aUgsXi{rS70t4D8A9u+N#@{=xX}4N>2J?q1yMKWsd~%qgYEW
zN;Qi;@86e)M@ya408!!>Wct8r)<wvE2_bXsF}1O=Gn#otCg&y0A^-NRWT{^)6JAO7
zN2)eoCmBSOcCR2?1IEPd&)*?-X|o*&2Kvj*Vn#p-LXKS17=JpAAkrq_jQ(DIBkG>;
zuDzl3WnBDZVevgx&+g?(?>}*9<J8Yfg~FzeFsD+q(NNiywT^4Wxo(1&sY)fUocppl
zy++6KJwes}dc{EAL~gL2nuyePxJ*sr)#Xxf-cWZ}$U)Q2-Z~eTHa0S<bZz~QM(%ZO
z@4Sy%nIVK^IF#E^SiK2hd7;|*$J@+mX;B0F-m)X%SMur5tn^7r0s?{!KGa@vYSz$5
z^|Ks#T$%;4Sy*n%#-Im3vtR7Sf^?H)>Twvq|48%pn1Z9HiZerYunr8z`g~OIL)_+S
zVa$qY99Fn&un>>o=GUk7&0Nwuua6X|uKyCK!)GVCBFc4QHj*c_AlorFsF^!R<T1;B
z=f~~SFn#3yNlGshfmEV&u|{{4CoU>Z!%66kiLo&#rRP1l^zBF*=^w3+*d|K`-Zes~
z?7@gXvJ0H&ulcP&%1h=L78Y(A`TSRkuPUiZOSePI+_c^y@s@Ap#VMZ7?*cTq;vn0>
z6s)%5;bFS22BrNUqqMreV2%W2w$x(o^Oa_|KvYu;O&UlHFVve5H~~pc@9TrnkQMl6
zbCZ`-0Sf2Ez%3m2C6&yMyn2h|CO<I}h;JbY%nBfRl^;WkuGB9PfX*!r`FkS*k?Q(-
zE}c9vv<0|Wk=D5S;x}KvdSz)Oapw!1e&Z3^&&NN1R$_)sInkyhY;04uW>Z11MCiW1
z10kNM(E`X(u_=7owOl@x-^smdW@ZMJq=I-snpds?WUpf2XoZ^YcL0b)3ZBhOjMHIp
z4+}C#-E_#)Tq7A!#x8rwGwpkPEH6+I6SMdwrACqWEgOl>^7)iWX>r5!oRff-fm(k4
z3di?iWt)=N-I)HdJymqyvDvB?I(-oaxm1yWv%`S*mp1xx^gTZmW3+Y(u-goidPgBu
z>h1*<x^lRL->75v)=3wbcXPf$o^xVi6aH|7Rk~!IMQ5tfCA9VudxO`iu14_Wo=)7W
zfc@hWDYnvDJ0<e(k-5cS{JHGYMtiF<icK0%C7wdIY!7-6z{Q0Lb$2JRbd(iNATq_O
zzMM8(8H@Gi%w>;)6q$D?EOGWc12bPq^ZbeK-g2_;C5r5WwW<y5>tv#Hk)gh+!(X%K
zdb6cYauM%tuXdXm?CXD#nP2ETZy}e&uMOs+_AjsvlawcZMDjp4qkGzdbf^ks6~hS~
zm3i0)yFZKGPwYZn<q?T#gA>`%YoLH48&uiu^)}#L6VX2Qg`;VyR|8tP*F^3+>>Bk^
zoWKY;fBz%4cZ*6Vzdt0wUF!Q|L`H%|n=@B(epw$kPQ!P@p{_3I$(2LY7f?p!u_JC|
zYRDoUTLQCCq3!?z4k+`&M8GRJIKN?hq#|D5zyJ~TEHJBB?o$5Tss`X+^P@unI=W4t
zU*cepEcDy923SbAl=Tm=yJuwFOtA%yK6v21udWu7BVo{+W+G$H!FDjr?K^^m6(q#j
zLXOt@>`|0Ym7Thk30c6L!=QpMB$qcsM2CWI(f!G4&AlB6=<>3r)kU;H=?CKc6ri0W
zes8v^jhL_(-5?!2F&f1EqaC`px5tN5e)lzXPCfKh^H~7x^!o=d_lF(|2dK**R3Z${
z58x<Y5Z#Afjdth_)s)G$V5uNml;*c?6q8~s41#b3p!ar%DP*~eJ?EeRzCcp?UcS}?
zK4?hU);2bH7Ng7k^D^0r7*pn={P0c3nE5{|SgSQWQtk0L^H300nQe)wkVrMpKhM%t
zJoV--i~V$KU!O`Sy;s(+#3|b0xa~-_o||3rA&2RA0gJxPu%%(s(Mg?GhisnLWz!qD
zQO4Jo@8<=$vg5q)=HMQdG&o8mA7o?M)H|_gVPkh(DY%Oe9^KI~a>Spbz{8G_a*FY$
zNR=_H9?J@NiRfh7PqjjJIY(+3g=L^9&6M7FpKkx?md6=fJvj^}<27Fdi9qHVnD(YY
zMhF=xRGprP-UKk(H|jIC#@YkZJAr0*roVi-X(kQ?Rn4M<JM9GMwkU0JHz}wo;FO0X
zvvL}wL0u1ICHB9jgddzqkZK`hVZak905W9BdyPH5g<02Vxp99oJ6iKRZLqGvRI{np
zo#Lb@j7%Ls?M@&AHeKv=i!td^cAkGVq&jQbeZQa1WH*YXBOWnUx0_#jh(Sz5?dITJ
zGyh8W`mvGWRMbYvQH-SCP_WK~`Ltif{mto~$!6;geg*Ztl45m=>E#^c3kTAtXEQBg
zc+WNcpk&hs+M!5Jelc<JUcPV$-1N%~4X7z?df-B5=-sLa-rs0A_;t}l20AR*q^Kw4
z^WnnIytQ9NxAqledJ9D#I#7H;Hz9z0Y<6>V80M%!v78^~EupCG5jwQQ#36KF^AuuG
zdm#z$o^j%NI<zU?!1TV3%8Y@DLpu)H$^51!CilNK7MeC)2bWiEP0iuYs)x1lr0hgX
zL@IbbR5zGM`Te%$p}H@(^yMpOg+owKP%)yDPRi5eD~G2t=of+1&}`MEnD7uzRN0Dc
zsDB*PK$XNCRPwgWc+}$&^zzRQLD7Wz28B!yp(F2KI?n;w@*ZZLZ42T#Ml{yc*{5dW
zlw;RE{Q=b=q6-K)4!IYbVL97cF5LS{){1e|4Eo9P`NBlugNr?C<m|c!YZK1ep@8Cq
zwl28`IvM((?%lN`>yrrX(;&(<&S)HO?VQaRQZ`TGyiTJb^OFFRa>=U5_7%-Rn(U$+
zwi(`c%O}+Lr+MtS1N!+U7tU@maWVZA!2O6;TBM!C9mBpSK6wq(RhJ{hvJcPh(}-eN
z>O=Od))c27mnX8^5h6a%D9!a^i%awsKi?%>`l*oZM|p#=)*ihFAL|-=lBiO{!Hv>3
z8y|L(Z&e!w2XlT*_h`vgsP$E$azyN^*#j5ib;(C)x%0V0=!GkA3W8eL`O_n_JEV<~
zpu^0Mg&MRJ$cG>xm;U$%a_!Oiv0NEBeGl#1M4``~8G(?Kn>)4PJ%9?f^Fhj_moBWW
zCGH`cm<zd9?1$PXT(LD*s+=8)1r&*R+m`oC3$@!N=~knO7TkZ6IrFmjls<ADb*K>t
z`8;jR9(c;Zskn36)JD({$AVFhhIcBWRP6hh^39#tO74522CCwjek>cuPRUB|@V!_D
zSGOaq7tQ${lE=jBa#IEP*@c$VUtqmmm$!cD`Cap%9;A!TtRJyNiN&bt`5=Lpgt=of
zLO(`Or*K5VT~_s)6h&PuL({2cxa+L>7-|y$jkq$w49&nHDi3ho`kx*Ni;9YRdU}4r
zepyr$fw2pazT<;~;)vE19<#OWrHGMPF(VOAdw|(}{%lG+5O?kKNO8r@b@YXa4QQJx
zl4&K$fd+$$!Yk>GhmTK9T^-prJr@_Q0IrnW_3N|Su^coYs-uA@1sVj)of{4>Knyf)
z5j-@JRf5|KppO-~9Tce?Nhh(GO|Q_OcG&`$1S*wFxg8prQwn8=s<6nrtzbNv1w&O|
zm3^uHp!O=%=)!)ULoApD3sPo^0mJzxDHKcO$P8N_jDmB8@E7#=C2mhIWI(9`{xesV
z<7u{-2eFgkFn?%{B_?JBU|Z>9Bk796S<d2ZckJBLNq_Rn#0#m0p62I_NxJ41?Y`gL
zdAgkNI?>t^7jY(oE5h+HFW6S@EN`tBqlWq*-{A(kdMcXydJe{O<`bq?HnH(P`KhTl
zGp}#8K6Q$!_@R;;k|i0a=<C}AGc?QW?-7^E@Iv<`!MWyk@Y(n$!`E3=RhtP6U2xw;
zH#51SRdCCN;{vv%_Ncth{)0x2B<)`N{5;e@dB1+;{Jqz1*ap2(p$_`f;$5$`aUwi%
z-JOTfD&6jLFs3D{(>{GX{{!Zcbq9yDLZ2IpIpfLM`D)Gh%3x&ofmfD@0Uk@Napu;$
z$BJ}+E}5-cd+x{SWQi(a_PyR!v1CxsDij;;=gGei3{_l@V}Z*zNkWRrhsq2x2r&78
zcrJ@oYXg`j(3_ydd&RdZ>ikI-e_Ptr9e@Bung-NKFv=A?$pS)XOQsgkl#C)dPvKCW
zu_IL_qw^3V=-`Sf>z71_6(9;yMJNpwL`2v_R0~l;-kJN=M<4C#!H)&M)@r`}?199x
zyP2ZS+~XU#A@-oK&h(t>!GjhjsEn3oJzm2iAH1mm!E>wKJMu{k6b2-RXo4^3bx6)b
z^1~sTwIHse*Y7(Ae?F=AAL))r=_v?YZTk}#N-x0-Zy0OBm`1NzpT}S_)BkcIbZ7w@
ztKjix`h^k78FaA40Aom`?l$fFG7fud6KfGy(8pe7+jQ8Ca<XO}&jH;~r^YCfoKF8t
zJ0QkylmGDYAvcIW2DAwk<*_?~Qu?|44h%9Rf-!uPO<Gh)T1`S#2F$2$%ge}K+LUkb
z<{=EZ(peRJe);Kj_KGqwiYbC$s$lIexl<?dw#}gzN`OqAaxi<w?{ba_6%b2bgYEz$
z^qM9xNqKY&pv4!VuC9L9%nbD4pzE`F^pSynbNY3t8!+FF?fQ(UxT&9FlXFFCox{yU
z_+fiViAYzEP%>ce4Rq)aI-pY0uu|ObR|~Q#W9@CV!o2}t(1Vj8*x?$pY*|PG&PS3Y
zKbh_DRo<gPnxLQgI-&IVPJ{)jsn}A3%{uCX_~%e8R1jvnV)Q<h)4o<W6zPCY+FU%I
zs~zVUC1%CT;UdO4Rw}I?Bn?9Ch^i_J(04(r-Dk0T0NSJxx1!TNLJg9dk`jvY)K}JF
z1Qdu%K{3J^d+)DA!h$FPBofG^lvdnkpI_Gr39Ib^C)MH$y(p})ZMd^R_oJtT5cUJj
zt)RW8MBovn9eme6pNp`+dkF*ZSjR0v?+PYm_tmj57)_Gj(d7KOie%vIr{RCK09_`N
z;tn`>;2EF6`34~}GMh%~?EL7JESreK2w|{Q@pv9JY3bX181dBRwF-02u2pwDF)QuJ
zA^0nN!CN{Qo>xYU;&a7HVXk-zp<!ZPqoNwhEG!?satj6R_IqE40K09qQD)vMuI?#2
zkv3IlPawu)7H#{MK7ECL%@Q3C8(aM04yi~z8kU{GSlJq1HO*j097y;G^W1>}VoHnh
z-&KN&Fc)_Pe3tcv1%`YmUjlG6M!SI#-ZArCYUp{47pMpp4?#o#LMA2VOX%3kRb@a{
zQBVo##0S)H9_<$UkR#K^8wwEV;QSTo(0q97)FuJCOqif?20sXsE-SwHt_;)KU8%hP
z<!x0R>kRb!<0zy2?J_|r>U;zTsO+y#cWZf_4SRsZB<G;~I?w-8`Ilve+f`8Om~QsQ
zft#=t-%dwLo(i|9Urv@Pd7b+YD&x+yeIa8M4G{eq<Z=3|9KX;=nb>9$Cbj>kU{U-4
zWiyzJN6vGX`TN5pa731K{@z~NzY`0CVA=AFqa{4=^;~zbwtfI4s3Di3OoKH(XddXb
z%(WS1%2_ImfBcv%*nM&yCW%PJkLALnTaL=KQG})7Y-!0Cd=>%?Oq`utvKJufsmlg=
z_cR&&%PEL<%3!<Rq>s2pj*p@~VSqX_o!~tf$M*qxxZ~MyE%eMmQVmlfREqC8C*xcv
z=Uidd|B1EarmdZu<xGmrt&u6z(J`1Z1a0;9m4$_%^+|q!R(c~Lh75)lK20_DV6m<J
zc%DKk0^$nRP+AH9afq8+u^oCKv6m%;uT%YcYR57=F)~BMg=6d~DNvUthK4i}=J5ZD
z!SIX83i&=#8FF9O>m-q_zl^i=;quL_UfqZgJ{Cyw@?j!~?u-h^cfZuwD2a;NVUIu;
zerXeu=@?S>i_SF4gu55g_^)4K%u=K747BrD(X3#`Hk6iNFain8dK7XPvHT;uCQB9O
zp!51c>TK(A8jsl?JUSR<0SebB?QmZFx<*ZYxM0(`O_v;iG`8IjUSQ@AnF4kKKEM%u
zD#vY7pLxsI9K`4lH<iX4`gqa`IRJXv&I&2dClhq*uY&N_kK)H>d2%Xy229IFot+0H
z4hBNFH@WIe66jDxMbObWarg9v5?7V)ruma6Paq_Qc>_8i?1jpctLvFJ#wH}HvUG3?
zdVW(av~XzgaiQQ!cXM%(upgcVi2(qc;XKWI@J)4X5@v2pmf!gZ9fym-7At)frlRi}
zVqj_()I>lFwGGuDm}@T}htUF$O2lneJ$s_o4u|>uFpmU2?QOqm`6yxpjYoz|!J{v=
z=jG+)iP@mTz}gAu@J6WY+}N&?Q%<6>;uwi+IV_!h&*aZg9>a3G?V~tSKBk(Fg~ngp
z+F^pQ7|g|i6^PC`H`>n09nc5CSH8H%bp3&+ryvX^%!=y;ZRtMP=u4IJcYgntlk7+T
z*|qTVXH34%i;GFXiH=T#88%6{CU+we>cG_qO2)SSVrF4pYTY48+uy>cbsxNP#Bt6o
zK~$Vk&F4gG6PU;p$CfNnpJC&UEl4XN5txbDpa4?td~s5psX~~GARiYMtxS+n8oAb8
zjAT^7ztDn4iX=`j34JcCMf^19DR9o9cPt@fwsOCagJR?4`y}pY8OdmUzZOE6w5!4u
z!beZv-rvvmuOUxHhc+%HH`nq+aR3Xpf;~MSAD^KPk*xCl#6Qd@^ZkR#+NTEySx{hy
z>BJ}>DzPi~Z$^AVLzR_%%?Z{_aP{=8gQl3U>oo8vOxQj$YIu3*WV!>4etmr%lunh`
z%do#Sg2oTV9t8NkDpGs)7VLI#HR$!NE-u!Bx&rD^hsVbt@_lLE+6+}L0$*+wXjcP6
zj933%5tIdVhF?Qg{t{~N&>lh<G_8Wh6K2v$@$s>Np%`NJ!Dk=LfuRtBsuZlbqS{{-
z7N%pWjY+&?nrDY&Rib+Xhn#EvFHEijN*mXOoeFk8B;D`?nLl7)V6mRh1*<8=)8M}#
zCnm0i5eBgH0a17Z>i*gnP$vWeQEt)@t&NvwR&AMBSqXq$aD|t9EJ6YbA1W251^#Kk
zChg~)fpCw!l+OPyDMvljd`A-CZ(*qJ`Gr0k-(~jAH#nSNeu<E<umq^-DuI)3Tw;X9
zz${}$7M&n}1&8UvR|gooW*(3>xl2C<o$56f$(!;MV68hUQn3;AT)9tqN{;|&_~F(<
zej4}lXKXrGB4}u^(J?R}BYFkf2HJfPKke-9Qc6A&yB{is9XdPx8fIg+6p<rerL~@(
z-#NTZ_GU1RJDF9>6-A8#IiXU&Ca9<<acfM0s*5tl7lhy<)&l)sSE&Fis+SN3&o5K~
zl~L>*3f=Qng@rfHz{XD<Y{#pu0s>Iz2wq?(p%l~l@Ha-D4h*8ACY7}9pFe-PcKYjU
zQ{gSB@&XtdW+Fkn0;(XGb0CVFx`jMTxeQfBF}NP?$ASovUIT}e?LTA~^TT{Q89$J-
zR9BAxc^IIDMEArag;s+>$Oy+es5LRtx^Su1!QY7g0Vp~EJAeNCd70KTy`Rmm9zCJ&
z9{ursq7`O#iL8Pjl3<yR1|)blA1wcXB?eVa8y6QiF4P>kL75m{SU3Th35Y^$92~Uk
z?!|#=<6rYHLZ#Q?4q<ak0F8wI`_9fh{gNcm7);zoTfl^gf0-J?zcYAVxVXDlx3skQ
zbIrlh+5QYRfU`iDsBsUMfq_BRjw7W7dI=mrB=;&~#ScRRhf)wMA@CQzfdvBg1@&}3
z^U6u%My`-&;R~Q8V1m?t0OY?AgI`P;yZ9oQjl9AP9Ve?hKy?O_%Vxo{Ff>66iw-2!
zEpRMhr`l=xU(7NNh9i;D7sg>hS<}_pItzMY6Qi*_JUmd|OHhLKt`v7<0~V$=G01*3
z-ZFeoQk;j-My1Q<?V~+1juZj}!rjB;&+p%%QspV);^G+scBK|=*$1B<rv9s5PvVyH
zrtQ2Chz%qkcSn)%eagtpyf>UxqMX<XzI-6NHP+PurSKEvZ6=NPd5Qv_#1WZzK+_*K
zy$Tcs;h4A7?2cNSw3Gr1$4f6cxqA@I!{B2m&FpM#fn-lrTYDsmgq4BUDgt@;(fOIg
zGUF}-ZYreoz3i}n{xaX-!6d~Ve!=;85uihP1bTi|rcL-r3#jW^&4or^P`e==$rN(r
zvZo;{9nO*P_X4}mwJTr|oSb?Idkg1%_*(J*ST1p79PI2SDoo*yZ{ohQlLPyFs@@US
zEkj(ymPL!t4BVz5qXt7O!!0Y0e~rEH7DlmfaY>^tO>PLaq&pE)Q)7Et=qoYx%+1k>
zkBp4)Wl7zSePuz(iq0VWpYwo_oE#3CkbUq&-O7f8cCi=8PZj0wzZq}8s$lH~vrARj
zh1rD=@}CuZQ$#)^bt|SL1*b3@qv?ihUX|>BHiFTkf4%0gMv}1qe{^&nF;*hO!mwnC
zFT;xX*S<>}V9kwy88U%^zzqw9o+=6(ouQ4AHZaf({!mX(&dki@%|CYGDD)aaBp=q%
zA-aFSF^()TkyS?r!{npDtM7;6G}Lh&`ThkEhIfNi0q^JlEq9n3p;DgPz$hdHnA*rp
za2voLNJuBl=kXa6Q5IGvmhw~Eu6*#A^Pla(&!8B>CnS_2p`fBGW5<g7cPa<`0Nu8Y
z4BHUc;tQ_EfxiFZMY@rcSe=g_TgoVpU3TNTi2g7BSZcX1c`(<Smbeq&kD2|6XxhIX
z{RFz5t2hkK6U?ifP0#*$6F;I7!?X#L#^(dn;N^fkN)Xl4xy%23s-aAW_JNld@jt%@
zc*vJc$dMq?AZP@PJ0T$9;lus?3B=(994Vb5lNF`}_jPE0&9=rw;=%Sr0G~BO@Yxir
znAicFQQ$g<#EEblW_9$z?Wdl~(GV$GSqTgF)$(BK-vN*CtCV%=6>&cH(I`v)^1=Q!
z*XH{!Z3tS~WqTeThaf$z11+FJ@Zv%jCS>~bLGnL8aYLlUT;Bl+MgkvC)CB+r-j)gn
zydxGuC{%!hGH!w$0>U1afBp*YBpG5tB!o_2o}K_q4x_};^1u>kuRw)fW7hHsN}Flf
zaGr%$>_Cbx?4<wN{}1*f7|;k-2K^>ijf3}DH)lS7Hll_31O2<JdK^YPbCqVC8hW+`
z{Aw`W_R~v^cfcTmYkcwBI|?E_Z*YTvRuYifjIT~lPdyyh4NLWd`V*djexCf_hns{@
zz7ld_e$&c11C{mdz$5)va>K(put!e;?gx3$*RS8ff;SAPuZ6jn8Ua+7SmB65PjZ8T
z08AKm``QS+6Bp=NN!Sg_do#m<d$6@22TEM9#)B*&V0$sl!5RZ3Ie3NN=e1wy74d-A
zQI^lhh+;^;6<QzdkAuLPur}Mu>H|YLhhh9COurI>1~L?JW3Nm69bR?u?J&~Iq`es7
zAw<I2$9t!Cyxvi-6Hj{@W(E}%eJ?d|2ERY2+}ZwI5>(nj#ZScmCpVNQan7NIY-QT&
z-`d(L;S(390Z02(+c`bB=GI>-CqCF)e+U*h5Qw{t6)da_T~kY8qcV68IRYPnh~wD(
z{sgNnUem_AAY+3L_RQNrr3_|!`|oc91MUqZJzN{7YHp664M)Iy-vDSMfk_c&3Rqhv
zpzUP+vqY0<l&NhHV4Yx^nVA7+i`vKEaL2&inUaYIMa13@A0RvVzAzkkuyy$iK(!v7
zNRP>7TfsF;O-)VhP<KjdYOvlNfSB3AI%sE^U&sosk%G1tX5n0SYG+$~wE`<((jfpq
ziJV4&I&w5#YJgb-alXUZ$?J^`SCfp<f54`MvWr?tHHLQY(`)1+;?<s=;W(qFK7RP{
zxxZhz)%pJYf}LF)-%6VMn`!<3)dKh(939cG(b9mmult_MsrLjn98liMa6~=6bnalC
zmI#S`836-~ip^0>BHeF0=K-a1)~@4tu?GY)@GZDQ9b%%)2;PnLWHnJp0wu{_9Kc6&
zbLSHhv|n=~R8oEvk9_<n%r~Os`FvPZeussge&oXk2uAtD#E{>fF_URO067@c>H+i|
z7mEv~C0}M4w1oy|Bb#q@av(DB+L{mgV=S2<T6GHRCbt91KS+VpcP{#p<D8dE+g>5U
z+n@?M1ki(nQi3iJ?Jti)oKV`;^@7uA!@(LK7q|225=2$D-wmK0la2?v;0n#Ly<aVG
z6aIlv7Hpm76()G7a;+cOW%H9Y!7%s*Vpd1kS0H=m7Zs&Io*=-9ir?K5VFc>=xpDo6
ztlMGaNM==fKd{t=?b!UR0uF{l<V%s$WiA{YKd{8f%5Bf^iwM@qvcJ5|qJsYDv3AyI
z*22O<VOg1tqvI1|ZgAvKOi>_f%={%+a-TRs)(1Ja{xOUIf*6_`iu5q9>=XpMx!r*A
zaB(O${tbcK!yhA0VA{g>_Zel%M1A0OjHeQG+L}i}-2{9b;agu@1KLVTO0>P%%wTpJ
zlw09w+lSK!YT=3`f{h^f1e5|;sCPkj?@sRyg~|yP0TB@>s~iK0682&`uf^H!>MsZc
zE<yK7KNgJG7;=Sgco;^RVA6eVj>V<>p?rF3YQhXrH1&r47&vcg&dx4Rj^tTcTQf%(
zu!?doFD=Dn)~BWxW@JRsGnYKM;+)$#J^j9~Z}T065%Avx1r2QwhZQ4dl%1|K{&!pb
z1;<<lk_s7vNO{fkoF+EcaD3jB=-ES&xIXY$1S(vBPn-fDR%!%<Cim>0p`1T!LhMpg
zU2Xizoj+(8dUewUDqYaHfh<R_Vi1ZpK-Hn`t`0t*g_fqM!wB0^I;(oRJ`9tDN;Kdl
zE~;suj2Ot4h`7h7vzl@HVQF^uS$|@e&eI$|D}l_2ul0^FatVeqKfP18GH61?FuFCw
zM~NihE9V4evVJHtd&oYy8}F>un*qO^WK%bLn0oDIaqYRje(193r7C{&dvC`4YG5IY
z%0gp+FSF~xWKvn#(@3hZ+mxwWaCUNBk*30SS=!jZ|7anP`u6LW%e{LqT@x<+mA`+h
zB{C`$@JovhezCJA7OX{2G`({tD*ZBhq%A#%Ob|A^UgkiD+9>kBR)aJ-;TxlW`V4pL
zb@4jut!?GI=nrYz-{Ecv<hy9L1S-KCB#6~q@83V^Vx%L((oYyAMR;O!jAY%-Jke~Q
zKR>KfTN`I@nDiAI1s^`K;5IL~z)w;`9ug*f7#M)E@xrIL5ptO2n0OR%t<=7p(U4#M
z+tc!=uc^^$u+@_U*A8t?POp|=47i0pO5Qfi57ZE8J>3gbl8{Kv&bxRfSF41~@4uNH
zL4sA#H1`_;+3t1R$D``klcm9zG>381Rom{GPysb_8_ArI)#Iore%pmjZUhX$mXqt6
z)Jr)@oA24%-tJKweyD_XD50E?rUqWn#qj1j7y(xthCV@mIFs=4{X8BFvg$57yXGt_
zB^9ivXCu?^hHdWlW*H*Alk4t2B(lUfYmN$Vv^id5ZsYW8+74fmIB#W5$HFbxMxG4M
z|A`MG#+Fqk4!LkkA@6Qu1+yatHnC@2{siy@S%iej?f$vxpK#JR|EE`t2lg+z6gd(C
zJb(Z3xQif2B+5rY&mcvv7-L{Fu3YtOHe_pmgHR1&zG>Tl#ARp`mD2X#3AkqoBBdna
zoj48fb^ck-1ISNE!W^~G!+D9mui4XSH!gxZVg~+NLh5Ut^k^!o^Klx{F2AiTh}Iny
zg95g)_3(%xE{b|W_xYCHGaV9=t5R+BGRk><laur+zEotY5#kau{hKk5x=Jue5I5!j
z4_WUWj&=WsjcX7}icm^MwrCOAduCI}NVe=q%19_QY$8I)3Q>^}B4re^$%x3_+3Pv4
z`#HYP?~mX8&wU)-Ze7>s^B%9)`8o&uD)L<go7>xKs1-!$Hku)X9b%P#pkcwvPfA8c
zabTF}MtH_K{x+FE0iHH;T7D$d;ctHLPdp?^O0t(Vx0q4)0*BdtkVwr}_Mz_a|6=Ww
zRIiv}Woc<{_dU@i{Lbf%prRwQwk`ILEVrJsGOiZhWC+at@|r|IswY(Xumr4nCI1o9
z0eeopexPA1O-(JMqGERH6pV*%Z!!fDmp#41F>g7v6=@sF5JAdZM^T%al=MZsU=LTM
zOJh@$PkYu=Ka!`QTNuB&p@%*m2EAr(^$=__pCSYnat3DBsCT^8{MCUkm^k3AY8tK+
z3iKubH%)keMKIw5DbynY4BaCMqDG3rGNh?~7aAMXeKCWqC8*@f1L7T;)7FVx+7F+{
zzbbzC?fE%B=aN7QXwPv#sDKzm_-kqd<>)l@+oLNQGCcQtH!876c2Ifm;R3P>os)>?
zs(+jB&Q?(gP!H5|&+3Advgz2gej&CEF?A9i3!=Tr==8vB-v8kVdY2<SS5mEiR>9TO
z*?omm`?V~>8xH+ODi{!(Q`+pMa*v}iiJF3^Hy@t^oZJ+Q2RTJYG(W;u&rbzC@UFu*
z?!o9kT`dO<7VO_B+jH{rLdx7+Tws0@J{7d|T+;2s3)@guDuNMK#jZq&Qb`J2)k)?`
z9LZfDa#4X$2eSbRk`NUX5~}AKKzLtYrgqE=!8{-WDv1~}cy4c6Am?s~&bLiEOU`ZV
zvmXb8@cTEq*%K8zxscA8t;|e&d2PWxE?qCb%BH2Ol7T*}_w)&vCEE;?*8rk|+~~y_
zlanH)t`jMh0}@P}oF5Ut1(hlgQeSKTQJlV>o}T+CCWwy(y|c4#m5su(Rucc>6@Ij%
ziqHqy@0$0k(4tV@w|5ZF%#4MUx{jRs9P4@;a&!>SW+&ZlL%V)fj{K$_THJNm`0h=%
zROCpn0-Df82#NsnjkGE-|1*`fxw*NW9YVzK_u-KfG9SKwZ)<7UO{>_&%ms9wRX(Dg
zP{*-K`O1DCfR$>k(Rk=fvM)gEj*8uV;)?97OpwH-^OL6o%znPA0W}j5e~aMYqxJof
zSaBWvmpyx;OoMZCbGJ4qISsq=_428Jp+%;5W_Ml(%NT+TXV=rhH@?({hJHMwMZCq%
zkVSl;;^MW*$>V4gW5Q@@En7?-97xQPRu4m@bsgq+$YuKiwH+eCD8niZJ&x5O2qlP|
z?-aq|e)I12y@=P^LBa#--lu(t^)aP;DSaI1MbDQndL{5PAo3!96cZD3cP=?GF%ejc
z#$AJT{P9~T-4;i81YCwQFxOn3Xn&{wjva$n5wJ_Q)|c?ow$bUJp1UOCgT_D|JoWo8
zUi?Dgu)Z>Df(`|p6)Y3VOsh$T(o@pYCubR%`aXs^DL|Ns67Jj6<F<Bor@hG^t8-sV
zeKW=sOaLFkk0vqwcd8Nd8t{Y1+J&^R->_kXUiMs^COi8R1`#!}=IYMQB0$hT!Q2)1
zx?3#?d&YKDBpumT>0UP9bE-b)I(Ddgl)6LZ)~!YKFj9wZ6rrLgJ#*yvpO=us>`+M&
zT*>i<5j=u%!WOKwG5PjShox{)QJzNZ2}G2jxGpBx_|d}0Wb$|D8IYh^KHsOG(v|9N
zs}${WPGcdSk3st!uK2%C4A%>AN~+l3|H#zls8Z#oR=w^Yc`N8RJ$>eM@axx>1*gWq
zi?RCt+ygKh>=QCOY4%>cXtHlLO(}wQS$>`;<4R5y%<kc%c~CXO_<f3AJ`0ipVXol;
z?{}1<WiBHR$*3(+b6V7!$H4R;tWuVH4Su(znPg<lL3;@!5$O0AVS<aA{^q)Q(@UBv
z5+AuLnCSp9=k7B$Ha;hM^LM2b<a#?R18k@Tae5q{PjVc{9rPrpegBQU4{9Xc4fn|o
zHDSbpQ8(@~C~{z7KwchDT%y6O;w#AsM#6WXn*L1TwO^mJ(+)NUM=D5dE`2evt}6Y5
z6L8ajFwVdf?LaEi#aanfb*{tU-1w`q5@8I~1wteqb#lr<M)4EX?~-1-{QXWQaA$d{
z7{@{27ll-wPCT!SJ_&tt@paA)L!A>j!92^7T*TOW^SBKOEBeMODsL@L_E09fjyL1;
ze>l({nxm)!#}AvVX86snJ?rYv&pN|Y8!GzRmtwp2{ocCh?|H3IUtJ(rTP#cC83!vq
z-m_=%at5VLjSz)GyVVZk8H_s~QXGeUKaD@@`S=7QILpb2A{Z2z9rOSBS#(^{`TRK<
zg&pA<c1N$}Wdv7?qql~Nv!?$q(Da8oigtg2W!8<8G^c%`e0p)gN-I@i9|b)M$<Z;9
zXX|Tg-#oagkjPjpZ}LX%^NN^m7UP-Fqg()&Cz69I1lPVP2r6rkSEc^4;J<QajWR{q
zAApst+UEXe^wZZ!G3ya9uhl@r;CTyWeSLk#OD?WopTvSJa2%WuOs!<&E8S<%QG&6E
zvF)1abt@VG9&}`1vF_1pK=Hvaf5<x=#riUKZ<)t5l&`0#o};fJwJ2Edr#B^>Zu2R5
zd2~mQDo7o@Ccvp4^bP~ww&39}VH-Do|DAie7`LB?8fQz;F5dmp8Gt)PT&KDQA$UXe
zsnmp-GX<k~0YG~2sWt9>4aRIyz`B_f-o1G{8k-nF*)9xo<>s2OFvum*V8{<5LD(b8
z*++{NVCi6b2B{O5d$w+Nq3d{sbLq&@mb`)c&CQ`u1Q2QiC2GB$>wBI|ST9XPc?;z|
zL5xH^KbumLv4eQ526NH#*3)HHYlcIXH%{DFB2{`eMm~M`=u!BDwEZsgxFw*gfl~@*
zar1!GE4Jg#41M|g;~K$6=;qB*n^wy(J+gxbp$c&R`#l!0HztS?(CZ{#x^;W3*^~gz
z1w~u4np`G1G%+@|S#{}xSpaMoMN2OphA#zQ&k=vn2yji`w?8|?JXQ^&D9mNP_4OHj
zp+b@Q#SjY=9Y+AQKaQ$5I+@BacEAcLw{4#Y95pU+?S?T01VhzpaI$|78$B@K(Wt6)
z=Jtt-iKY4Um#tlWqj$-nHxciZ2Y3f2k!|Ux^%op58o4!GD_~lc`u6SHz)rA~mVlK{
zcH~5W7L9WT<^zj}PJa8iKIP=elY2-G)Z-!otcz*>3@n8J0|m+(Hg<Gi`T|8u-_>+;
z+*}O8uF5Yi_CZA!V4FFxzI1%Z(zfnO?EkQUFdW3Ut&QoscdN&r2d7Ue{1~d!v#Jtz
z=9uDlV7CJX3QfB{KzcA$fJOwZ>VHoVfg9~j>FlJ;3?$tJ>VKhhbWFsog!#DNgYYL$
z145lDr)VERigRoa4NI)^ME=qDmo{&&k8Z6~0Sat>&4lwW%eMFWuox>MFL`wK_XO*?
z%>CX4Q8Dfx;AelZ(mw|OdsLUNnL@}jMF12VPCAIlc3_jhukQJ83^s(kfc7O^hDlX@
zU`qfWEpP+uVBtm0zUeXdo0;>yqqDbOq21bOQzM2Nhy|E|H(@S|&XSscT{v3<=pWD`
zKwIt`IQ|_2-@&Q?R51CLKMXR@CLc(MKM_!Wr>oF@15>%B*?~NWm|<8jHsF&ax}O_D
z1yywJ;8I}1rvjs*b}qc++=>cDDj3jtY_2*7%9xp@9J}y(1YNt?w?;U2g%aFic1d+1
zPEVxtA2uu8AB&jk0O70Qa&7sU&)L6MbqB{51%t5YjXTyb)L8HCws@nF9PTGG2t&=C
zjaeTSUn##@)F^uIEEAefVr9%WC;x%%#h=zoo8X7RZYcj<g9cDL^Atasu;=RKjECR%
zC3Uek2CXW&5PdEBV#gud!{6zxD6UhN{rv>BL-yt$uEV%%IFf&OZ)!+gxzeG@5G8%?
zugXA{?@<JqS;2<xJYr2uO?R#7yw8Zx_}4F^cS+cNMkhsn35$T>{OQ;~dn@+U%TCBe
z<1t<fc3P67rl!6WcMj8qu1`*b4_=4+J45{@C#|2vWd%b7(^ko07=@~X9ty{m6bwnT
zbQ@UY;#pL=Q^!GvULJ3Cue|RIV(vuuyM0ssa}qc$p>0DN#lf0DBg~Y+rhyF}vyt#G
z2ybCe%4s5Q!C?HH!kO>%Q^06d4lpqZRXeu$J@%cGJC;rLr}xN}3XzaM#Wr-Uu$s{z
zU+(eWj9$EvWUTK8tjAF)>i_`3Tek0dJC7ffXB2`?Q10;+Yt`q-rVk(=!J(^>G*|NK
z`jFTWGLqn5V5w<%2P{kSC}Hxf`9{{z*Ckssh1Odhc<r--@u3Bancj-Hi}v22cR@rO
z+_gAV(*RHgMBJfo%7+$s?k5~d47wf=D%2#BWi<Ce`c>%JA1_}aGYa!m59Ib7c&M8l
zeMbAWzlOk7=&dJ_Z;9(0bb;07>5XXKsPR28Qgxl_9l3v>Xy2nv)b{EIVrqG1PaLA*
z@2hmcx>fo)v!4;aQJaQojfu{0Sv#j&xBM;<+&2@&FO`<wOM3kQ)6njm{lWXIGXLY#
zxZ?t)nX-&y(1dAqNXI$=BAIQuCl@i7)3637Tz13}$Jkku3`(URBp^}-SD+4-_L|2%
z1@c!Y{r9#u9qyJuNf{UmEN`yeIy*V|1$(Qm(N55zmnzuMum`uR9X!;49}hZWb_8&5
z1@w$xA0~;YgEhLf%<W))7Ix6H4bxq)pV%_(=6Pia;mivQ8Gw1)m`<FHwgf9Cj$i5g
zuD=dtm1iqDfgFMTByk{Q`2n^9pTYY>IW*QcIE~A?K=u9k<*ZGM`H^fuWmXN*W&`E3
zVrj7b(Mf-H;}_-r{eDZOvO!woEf$iQz6)Wy@QFHMx&*ir<2JI_vp5alXkp~FUKf#m
zXb|Ji!P_p}Snwt-JD}d9O8M}vLFa8!H9QGfTnxoPz%l#!Bx)B}Bf->+;yU%DvPj%n
z1A{p48SM`-A@W_D+gta95ax1MImIFsqKf6^HH>pXO*!P2H|50D_WdcIBg;cP6@J^c
zvo||V11yFVNxIPP*Rq>HA?~H2f0ttmVBBGRi<IBM7!UVZ8;alkD<7;v&S$q`MSxGR
zO99LmP(xVY!uI>PZ(cIs6?#VM>W7g`VuL!pFw|#0{O!rH-t4R2klR;W%*9v^H~RIB
zeFskV0;<YFqV&I&6}tMS8oxi^nk0`wnLNKV>Hg?o%_oYn(NmpCO%mb@6pw}<U|_Ux
z^XF?OoKjW5W5Jm`G5!;<F#O-cxOx62JxddIx6d^!&QB2ap!)Gr;Th+WisyBVXJGUG
z2jRTeop|)#hQ1M3h7DeTt#EUoGfZ|Nn+QK!kW8YVYY0d#+xldC>qZ>ML|#l*ra)Ko
z+&zgCGBT$Q3!Gh{ICg%uD&Q7Iv+@*2ql_3C9aqy=N&cB*-a8!MceeArZTmXt1VY(3
z|KsMzCcIT8L#31Qorkk8W>UY2wG6*3d5i4HJpwVzsFc0O5TEOW*B!mG`EW@w+q-DY
z=~QPANmzSGP5RwU<%{FSS*VqNLoS)~Jr}1c=_QN$FE}soW9l94hDJspwSvN-R@Q=I
zRq`G2)L_U-vFLM^WwWEBCI~x9{`X*eY&z%2UhA`C-$AHQe{nGl#w&1Fmgb=h#&otA
zE?+y-<;$lw@tFg%&IlXC1=DP7x9+<4$DhncS?~m41{pG`jRved+~%F|RD3S>v+BX?
z_&}}$F~_ad>%#tQ)c08bgAL{;_=>~RaM7Iul?XmuvXju`r=S?(@skRB<@K$*yZGLU
z!$&TD73L2C<TSROxj7oF){{U<frYi{<QnE86305fCjCb*bS4)4C2o0|DZ=Qo;Vr;x
z@b6{>8lWP)o9E|J5}vANJ*2pa>8}baLlQ9fXqG3oDd_!JN#1u`yoaQSP}82fu{X=&
z%9Wj>f@N^>p{y%)GJRuptglQz^TkZ}I~C=G`}ZqxhbI+Yg~xv2dlVa0&At>%a<C`G
z`F-^&HN<(rv|e5OOxh?%Q;&_JUqIULt-&gfd-u{F+r;qoy;Ao>PTpl7{J&wP85Ytj
z@(0lJ-46UtAVskqGX2p2>T#M%%%T3zpLdBT2)liMX_R@l>h`WEYtXK?w;tgJZHm8?
za!oL8{UZSQ3@W1R0O4KNVH$`-Nv-(<tx`CV1v7Z7=zs42{MFLpvbFxSCYa_i`zF5Q
z1xwl5oyih1O;*a!qR&{$JlDwIr&m%PJRIPHcXi8JLa$5XBguiWkWff%B%S>%sC)xj
zZcw@W8#4t>>LVnLi2Zho4A4xGPx7DX|8zW!^32=6BOs|gl!iX#Vth-X{R`MzBS7FP
zz;LL7`zv;cGEVzfxJ}X;*kXF|^p$VLoRrj+Z};CzxuWhHgCNa`G>U5hrc!u_H=C2n
zHAwzhLdDa7{?%fCq$Rlk(mC1r=yi>m8R0Jq%7=}W6-VUl*h*ZtD0|fDC+zLC&gd_M
zXgnkzb@=&eq&>S6vp0~{ZbqtZ@|u*#D=O}OnefFVWr}7mvr+_TXS2WDhhg`K0sd-$
z6!X%;!q*Uzwxk20h*1GWg*1(~uGn*}rR4&WGp}A1<R@awiM4q(ab6jH$X<H`($64u
zH1}Lhmaai<QJ))v&vaa3y9sq4X<BAK@0I*a^ItV^n27dcR+o$7j?&x_L8;23koHbC
zD4f8h1Gk_5WceYNv4p*KAo%E^*wd)dIdgzBOlBYU9p&*F9GV~<&9iuCv{ea_og%wT
zj(Z~@=+q6|^z|Q$i@`*(z!S#ihV2ITUhd0+>+9>_UNk};gX_;!+-q}H>CwRia$48>
zr{QhH))FKX7LK{ik67vv^Pso);QMicJq|EoV`2qba&K(JL#!TtEA}{<?$n_z*gHNn
zJp2*2+Sq8Fe^h^ayFf30@!R|cnN^fRDrK>cpuEgZ3Y6-SJox!eU~mu0cIZHZRByjT
z>6<Mj?$|GCn?qdcj$w{@j7lKC;r_!9RjTp8lGjNnPqLVSZGPnRFvx{Kb*g{DgcZc&
zj-H+pnMVgf5Yb$V=e|~WS@u#o*?Y$KJX23yuGWhha^4`{kr1>i_jC^8R*QcLGv7>-
zfb&Z}Zo^O3bKAvA(#EN1rRTNhg#L|AN(m>@>Jp5`h?$i_LAd<em|(WKI*7PpRfMX<
zd75&_-hBM%Tc=V5tR5PbUa|yyxXbQ@ppM89b0KvuaCJB__{TMiyjK}N5(=~{FSxX6
zVQBg6nHrw)Bl|;t1F-08Y`LT}1lkOd|5CxFg&XY%xY3By3*-k0{vzS#1gM2cc4be}
zF{;F91g=SkxJ`BGzl%03Ft0;jjEVkf*s}qcBVY`a+UH@qt9O=`cfC|AjXP07qzL@|
z8_z*lJR$5_+1!lZor|ZqhEf}}oP6t_(#aEpB==xxyo=x>{BU9xS!Z*)5$_&WwLFM?
zZ~yDy>*pC%%}^u%Oxe-Pzrn_THuW#u^ejgC!{fWljr6^s_-hAN`R$?Q;o8D6jyiwS
z?q9z|dJzXQ)BD*(K|yZt2)7O?Ni}AbDeZq2MjBxEMwO*|Y);TZ*)4DM$k|BdR8b?b
zim+6-$t#r24)b$|4?MBn=W9$6LvpD^oq;Bp_s0GMI`ppB$rQ}U3l}tAjnqqLVtzae
z{LWhM@XrTAnpj`5HW50Mrw+tO3xqafj~*Pw`F}F@k&w}?y#=r}wv3<1%<{IBu&<Q}
zk@=I86{7xYL-zG0Q>W`d##rU%%%U#cl8-!flxU#L<B>e~ku-$kIQ%LcU9=($5RHl#
zK1ku;&`Z3mRuJXq|A#!WE&{>ieelK7C(2CTsDN54d`#YV-}CTDQ%^L$)yu@sy!~pM
zE+T`3f<BNp-U_pSQPFY(dQcpNZCYfXE5IMWed$6Vn_bJ(j;)w8i7=&QMmH>I-*e=>
z>}wUP{fTRf6^(9#f0z3ViG0(`4~gpl=l8v{xU>{7EzS8j>j&*&SQ-o6TYe8y`0VV*
zJ#U$$eyslfyoaDJ(}2OW!8D~!4@QYNQ<+ji&n}T4i{lDAz#zQ$c-FX(kyw&*(@Uc`
z(_G`N&xg)0h~(p-Og>Qbi$g%^`gP!@6xh^yD3&tRq;8TLztc?F##;U)y8ji*wQk_u
zfKL(*?0M1u<k-9V=sqi3TZ4-7mObyBO!w`D|J<=SIrF1OO0e+c?*`#m(St3H({G~F
zYv{%UGh&#OA)^=YSYXX;4JA@hQOO*+-tG4$pu5bd^y1lzAdjzB>_jKGRSI*wB6fb|
zP4>=Xen>e)zq`V~{>$TF$m8I&c6+c&4ozybxJCgA)nlS}4o$@eQa{z_eA`k&x+rcC
zLk=FHcXHzyvj1TLvZ<4iUlZ?Jair0|&k|Q#SKKH1^j4(Rie~ux49%1U*!J=A@;0~K
zuv%IAmahMf1hu>&@_A7JppE!+H|@=DtwK98tI;#m9F3UGNY&n+HXsGmV<5NjKx22i
z4mx?Km(9Kgj;abYyz&2nnO}3?a0^ZjW+c(}>YsWgWKQMWq1`L}og*`3nm=dQeFV1@
zUiqWx66gqR)w`bJ<wF&4xZNcQb;z~1zafuVZ_A^U@!kXXRs1k8Z{TQ(3?$LE{Jrof
z{{*t^-@n1M(smjTQJAYhxbw-Y95kID&(9H%l(5Fb#FHo9ti1gMzwL8c*M$8?pfAT^
z)C%`y{(4uW`hnb5dYh|5jTBO(?W(*lAj{-KZybfz7`;7p9qmtiXMNe0boBv3+2+3&
zCyrrbGX0kRS+uJjnBQxnu6v|PmBZ_^CBT@Y0(wE@+I`pClO1Mg4A0(SF@3wHAW#&+
zs{XQ<vk`V>ekCaIVw$<P)zyO>Su`kakKB=#4yS$gEa1e61&Gva588m<kabo4m=$y6
z-$of1Q2LqpZM2F^s|~;z3-XAPL-$u=UEDB6ISzjCMVRU{9`b%GD`3|p*-G%7f!QC#
z(t&@!9K`8p@V@fbFDta$xFu@iFEtd}UlX7(v39**dw^p!`izMIqBv2m{RPmR=(COJ
z^(*`rNUFaEw&K1!nHdUuc0xYulRIi^HCZ~Dap%lP^rl9V(eTE-c+nuI5Wqs34V=3^
zKj7z{<A0#ppD&W~dk8&&-x3x1;v-)13~N691<LP!7``DLycOU^r7CKdLnT);t|Z~)
zZ1>x@(h!w>*1WbE8cif-Gp&=t!|=M1VUdHMVYbZV(b0@UnH6op{;a%6)~Hf-azoH}
z#g4J_{7^fX)97eZoCbHt`DT&;diHH5P!auERsM$x-)H^*gTgF>zU;EZJXcyTFa@B$
zeXyp&^V%CGr_ZTV5_#DR?|67jPE34ZR%0c(s};vyH8?bM!`?n;CURTm!Gj08ckfPf
z)_q(_wQ8eTbNN=)ih`GzqQW~y8?DcMecC1_bhKB^?L<w|F>^A|kNw8M%}Z<kL&t_E
zYk1GeFBn=P;Opj%8#iE0X;kw50qc$TtKl4t@K|Qy*d|s`m3BME=FjRfl%zNJIHg9d
z0i&5CJzuM;48H_fQ=N)A@bnT1w}0WedgEQR(xWvrt^b6Rmm@FKvtANVR7_2h)_!|k
z+z$9BEQqb#@tY1&2{LVNCcf06q}Ndw=Khb(HUy3$E@+DDtp1zYAxHTeHO0AZ)8c2P
z6<<9tlE*`=OXAu|qAc#&OW?%~k^T4M$3)e?A6UO*^6BRFn~wU<8UIBe2k}f1>N@-s
zro2a>icy*o1&^7NGknBqVYDePYJ@G27D3sB|K3CJD;=&vZ3cQ5L5JK(U@rp(2s+wd
zUCn!?fdlMj2)7qeE*xQH_7EE@RSx-h`ag1_;v0-^Sc~6+aNFFhxOWg55pZ+{$GYEj
zVwEDo?#z~1>GOUR6u6-<j3Vlxp+55B*{>>TncvMn+o}Kifb)K4_<&iJy@JRGpkh--
zr;u#Z`nTCdx_t-KkzODO5vC*uj_RZarT{zv(FUdIEpW%|x?M1YGq~^)+#GXFkYdOW
zKOZ?R<ccl_`kJ0@3vRt;)4FgUXE~30bS=1-L)o9&4^};ciJX5^;NerrB!jha0vj;C
zAXYkinVkPTZ`+aMC;sD*vU)d5D=KPP0BHyD5Win>{a+!f8Tgd<w`a#J!uKgj%Im}f
zwmFpCJ0Q|S*{*->8s*XE3LwuyH>><5FakRku?j7~K$27n`a(3GBWPODcp@7WIRc;^
zF#_7u0Ne(Q^)q)@_SHn#DiGu{aM}lY9xvo94NrvsXx84R42}8{#qK?;2s^17+ai2#
z*>06bk&58y%NkTsA#uQ2!(HQU7q8|k{}i*I=({luvV$MA6ZqSQC3@jYIn|b#qCrC5
zfiG`oZLJ3;ve}&=JZp%0vHw9Wd}IIXBAiX*MOMy`R-uNjs<>9f2Tb9OcKU7Dals77
z)BxrR0#Ez{6A8-^dCyO*A;qhcV}6-_Szk7kl@u#dDI6sb$-aGP8wVlwwrxTp&R||~
zaW_P`_Pu(?c<yYie-LVThhkGiL<C}8*_oHZZg4>t0PJ@;wgu<ALwlAgDA3Rxb`@AW
z?s|5SFwd-Yl;?K|V|Br3Oey@%y$#Z|NAl!MUYL|#&Cp=}ks^6jaORJ{muIA6+kCZR
zV1=)*)S-9~m5j<gYXElbJ9uKR_And(QLCIHWzI*err^v>m`*YRCm%jwfBzYXJC^Rk
z=uUr_2qz~gh0-`~b1+Anxp8Wv1oeiKuOG?M&+Dv1yS%^T8h?u8)~!eW25S|2Itsgz
z;$nS0z1qPJTSG&`{tBPGJjcpJ*@cZTv3nQ0h%(o`RsQ?nM_~HjYJ$&zksGHMkmg7j
zxhC`fEUtRf2_tBX`Ie@-Cu_rGZ1po<(y+51fgB#K1Tg;a^psa1vjxQ+I~{?wA-mc2
zn^Pxa4p8vn%U)yzE&szLF^j&ErNdjWF(W{Dhs~1I0hzVDw~4?Ce<;!h%H)w@_}ScS
z&r19E*-;JxG7i<aqgyQJG<kKXDKJj&dTVM1SOURJvW8G`$i(m&!K!QDAomgbc(<9}
zZn$VrJF~oO7{n+d5A$OzE7DO3=b=<Alh^;D#vHhFY!Ozl&tagvucKob?t&QgJ&xqc
zIW>Lw?pU+4RJc&QMI;t&RFp2}EI`BX^vW?kd&an9g$fQ5fd?{ZmvB2UoV&3KPA<Xw
z1I~{Nk!agKpLW9B1px}r4R_m8v%JM&j$6LMY4FC{0?iA48+M&`Ss)j%dz0i{#1_kV
zZ_ya9&$+*Qw0Z!PHMoGQ9g@CLiJ8vKK*eMGF^x3G<sj;BBMy+%n9)#r@0AZZxwyIZ
zIAiyL;}<t!QOa`hH0H*@Df5MiB}l;o?)`960V7}8`1^J5m7{F&cuewdtbMxYjzeku
z_wVNSHjDV%1BHB9nXPWL)4r|)oemjKdZ~|~uDssYht!6ieNUZ1nrtuWgKU9{9z*AF
zZcqzyw9*JhdPoM}X_DB%<cr|hj^Vrf{;jsmh@Y-TpcA4(A-Jp8Qw*X44lY~<6a;h0
zQ|$91!oq0B))z*2{$D-taBVTF{q*&K`}R)YsAA?N!}|_@EgBv_ANWlIXd!;Vnu~Cf
zb3{W@xeF{CmMM{5*Y<q<QeB<mII!)p&;{Uj&qW_M2`3z@7wzn<Vz{p6iejTcbktRR
z>niXWe=QQQs@qtHbdl7KwH${5fqdLU907$kt$f<APop#3nao>jxiBOxpqZxdfWMOQ
zsgyO<gFmnU(X2Uu;q|BMpQ`{DK|MxKu5sZdU|5*ede8QY9g0R3;_TvL@Xk^fh!Y4o
zw5qm0X&*j*dFd9dGm8}ySE8uq0oTJZ)j_TwPIj$3m9)j9^S0i!h2o1K;Aw&|Yfw`B
zQ9}_bU_=}k<d&X7q6qby0Q@DSF&EIp7k*F;*_$Zpp?r6U79Gj6fe9FDoDu|%oaJ%K
zx-g;?53G6y6&kKwR#sf9idr>YU3W(6X)u^WiGn1-gsBYu90LKkD!Cn16v`Zud?{M|
zv-jX)Qb2%Q>S1gHfp~RZ8tdhY;B{Tt5Pqd(V&a3i=eKsApcr=oVl5FBww1=TcX??^
zjtDj5K2W96j6SS!{9U<ATwMIn1<r?O<H+Rt1Tb5LgGVvved`$C1iboaoRUVc{lZzE
zyv6dB_UKWBdF<6&HC<K+>JZ&acD2G=<~`$9$fwf#*%RA4Lf&Hs_eh;REBRScZfa(x
zWBkbnhp+J^Ypt2To@DZ*gV+++Cnjii+uc1W@WFl8Z3(C4(w&VI*-w{;%U*`?gxsna
zjh`i(so5w`q)zk^pFqi;BJaiLqXp}W@CkW=*f$~d-@Ylljto7ed4)tdYT<i^728Ns
zvtva9_kf<)e9b7b6V@kh!5j+{N4VIJ89aIV6kXu+wVryC`u@<oSM(R{G%_@ju~>14
zO^*GnwsCwEG1GU~d|zYSQbTic^}&<9JAXnX62MyNc#~*R)5gmUo%+~Mlhmzuv~+Zx
zsG@_q!)@A6xuLE_?77(%SDJV?8m93Iz)IOya?m{|*gYQp1w;46QO5d2hqam<{dZTi
zvfmivF}72LX=F8?q@iI`w;1Ii3Qbt;B`ND>4Jj@uvGjt_?A{15tfvL-Q#{AQD2;7?
z!P1|GC{I4v2rIt3VrN!4D!i#HEYA#P=j%TNO;ngQC*&BtSEUfQllBP!ql1IP?c0Un
zf~<$?o3P$er&V`990vY++-spO6tnHgkT?k+_^JhZ>auQe)-iKH%C3~?x!|02yuG$Q
zwN!i|DzryE|HjP1>d@n#;bCq1?3Y)$`(C!^g?f6{H>@bwTwQ9*Y{mBeVO?bYzHp)o
zPH<k!-E)!4LS%QeTHajA$=aTFI$wMZmUb6XAFM1kUBFbGJ^8A1X1L+ENiJUv@7MQ=
zUVi!V1t1Ou<97EeIhFF&8<AgXQHDJ|ap?voJ|#BhOT+H}8qT~k*Ymc(4o^fNAdW0n
zb+&OOp~%@KR=$!_x|kbp_DU1iDs65t_7~s6{MbrAain;Zy8dbl6ml-Ncrutcm=EnH
z3VnwnPT3phokGrL_C86l7t*}9?t%fgGx&(n;sJ09MK7h6>$DrNxF|_9q2b~N_2qIW
z)OU4&4Kvo1`QhzbG(c-y>>{Ts+hoLO#B`Zw@g=metqBcvb>nprNp#cNURe)ynLm6(
zc|p8aR9V;i`>=x;e6!)NyMjt^gol^RO}RrzM1+6^*M$#Da^^RG{!ExwmPm32&Hw&9
z-18UUR8pa0fOb)#7Dpt11}o#;xI9EJhEvioeG7c@1Y=BFcE_(V?DGqoYbv{T`5GI)
z1aeRALej{*mx#&gXWu_L-L&Auw$CWR(^;?9{RNDBx!{}oK+Qt4<NvULt>4o|w{e;2
zPXSjQLYNMeBK;`S{?VCREbS!LA@bKvrD<s0ynrnBU;Ix7XYQ-ZprY7iVG#*#&3|KT
zn$~t-y(>>A+);5YM0v+S?B`F-`o|_5YdJ-C`-*QVbYOG+(Av{hQI>T#N=MGIqHYL~
zTbQl=1^vO8a@vD)!3A6t6N;k+q{Nrxqq+TkeY;oVhzev-i5?-kb3ylwo~HM~qh}?>
zUZ{mXG2ipy=$*-qX^hVSsTe%a06ych?SbGQqxRyLFBrwQT*rcGcwVdTsC8;(YSpl*
zc*o?nMff9I!xqR4CR92MmIdO+>dHo+fQ^3(CCLTLO>_zhwhj2w00GcEH?yn8nYX3u
z9K0}l<*7$(Z;sVK`4&|U0M&CY!=nS97o2-Po>?0Gkva<1kFrprz+?=#IygXNd?Nj;
z0qx!Mh<YhB|3c?+L*QM{ZP<Uc@wB3OR^7Gjw!KaHPJklI{BQx&Gln0`1xHBN>?nvT
zD_#RafpU8m%m-*4(h3N8Ckl3x64!H_V?iP60Z8Twp%<9&KEFdkF~P$X^Ca9FoRerc
zXhw67#A+5%X_jv|+{Mt{jhBkuXUna>bhcc=yp{t)lC|v(#uE40*C*@sK=Q*BjX}tX
zz!f}}6OxmoD&J6_I(k|0vpq@+9IxKs+u)=ShfmWZMsLJ`uFX|b8t1C_O%pO7r~m$a
z-Jg>#>ASnX-vaQIkVSnFuB>RqwVw)m*dCW}E&uxbS-oP@#Sj1ow@yaVj6cdef<qGm
zH0!R%fY3VLY2t&nK^C+%?WbNF)8f?+y(T6n3C>cO{4YULE3tEockp7$2L#f-Eh>r;
zof;c^9(st-B@(Z8Vo8|@p7#Cmt5ipxZHq4I`EzUunmXSS;=`o3NDm$(#>#hgaso!@
zS6u7?aVG-bTv7P3snDvda~r%L`yML+#Z!u>M<SXwoh+TfUyd9+T<QHv-}Opd^|P-u
z6`u{#p=;mYl9Bqa=+3-!&~1zfHvY8^;)F;%_lLtRa{H<6d4t5uw2?|pv7zMsQ{5Gc
z9>~6`2H^=Kt1{Mn_~)tk-zyf^?mNiQSGwf6wIm4NiLLSU;TL+IoAXHkO+Kyk@0-|_
zNVwL}EkH%vG<-6|@l%v%T`W8lQW=)EH)fS~NB+iExfIk2EJ-WEULN8YWSd2XhR)%n
zQVP_~3){2V@Gp<Wtdc(?^#l(e!|PI}GGqCY?Bjb35R*Cl_wTE+2dSy7Yl$e=g!%b<
zHH>P$aR>{S&jm>O3aTh7KF`d|Z@WEAJ-0uhAS$}T=f0ocbhfKSrC`Cf!Liir+9R1W
zZhSnObA#0caVqySrH4U5K|e&(Em%1@6|=O~ISMn|j<=89wkw%jbP<!d3h8fTL(8Y9
zKOQe<_8(N(owLs0-goyU4?jPD`;v`u<Yu`!D4Ves&UZZo#EatAdyY-W<qo&G=Ua}O
zaA8A}1Sea#@AS-1IG$k0Jx@*~dC($(MK@*hTjI<Q%kNs8XV@@NZlX|fONn#s938pq
zo$Km&XVJy$wZSOer)y0-ucgB3M)X>v7F(I__xekcmdy{p__=CMhEE-Q@#yj6FXG~A
zuWsk9Mja(0y8rbssjuLRy`P^S{lT!x`&01Zm6Oge&>26eNrM0S=C|LGIg$w3)YA5-
zi%Lh;E?+(`=u=lcOhhEvv9=)r%Z1=@mrt=zau3Hv*@UJzMQQ$4W&0rYG+iocYHv3U
zIT2B<W%xfT?ToP5v~;Ow(gBC=oMK~Rvzb%;`J^`Y&XS7VE}|q=Th%i>S6P}>BkI2B
z$I7P}JL`O6ApY>BGZ3FW?Bz9T5lFPdPAUAmCcb?qH2hxOL67lCp4~)A7W$X{x@B|N
zs7OstVa@j|&d-y@KEZLEIGlVhj_P2@MA6vepdc>&7VVvLz%-uREeDqg#J@;7SFl)g
z9*2Gt9Ju`bE+q~Ogg!a2Q=6B|5D^iD@^SlD9v?3r7}m`(kh@CNCMR{QHbYIwv}%=J
zAS=5XE{Am)zc5AP)tkHa&QdjsZg6^ftJ6fp;yNg3=n=N3i`JCmHeOgj20y>E)<lPi
zYMu4&>0XyTL`2mK%X~}pkNqc@Q^<`Ox&0+)uHqEPJj9JMfI%@^a##ARoizCm;OL+p
z&4P<idAT?IN|Y59L(eDdy^z_44+UEKwevq5D|j*IksGPkE#GvB*P)M!9A>Yct=KXB
zbeF<40Yvv~F%co5=b#5yQ;GZ;8X_3arpV{uVB<AfFTG6o8n*4WfDCmX`s{ecx}H3C
zjO!*971epWt~t$=at$m1sp4W9AR5N4uPKJZ)*`9;wJ6GZ`MKSK3ap>ed3_@Fm&_Fa
z4<wvTY$RQ0|48y?#DS1hk$Fs&LKr2I#b3R8l}hk92w#EIk1#G602_TDowZTAW2n!O
z;=SdTi;p=hqx2jU?QLA7w{b+EJhEs50CXkK_|NpTfK7{FlTkIWB+$Z^H)bm~h9lHb
zfT7{tgPt&4ckAy9M`;-uR8-52B75HC<fLDYJx#qb-n!vO*{@ARRC$vnP4v%^*tUNK
z=P6tw?Jk+~3k&yDRXyO@-j#=H-D@QIV75ZAr7L~%>P+dZTQ%AOK0rF*o9#xe?5gxU
zb?I~VC3ogurGCb>mMG+0fNP`WBa8--G61kc{UMI|QiLWY%RH)e!i2oQW!H-@Uu4Hk
zm#6e;xL0e<fQ>;v8}WUuhRy_L=<i|7L!f&#Cx5!EU*gK8pzsa9*utfj6Z^$MtNxyY
zz!{!aCWUiOOp)B5vGSo4LU=H0D<luxw6I7^J+Yp4GQ-l&Zg^;DXmqp_pqK|HrstM~
z&Ly}HFlZnv(@jsA0$%E2pwNkP>ldVkZ(c&D#UP^1t0SHY#`)DE(gcXbl=yUsa>9F(
zwgaw-?|AC4QxhlwFq_GwPl%6i1FtN;y&$>Viwh<~DXG0AGM$7;DcgP|SskLLUR?gQ
z)pjN%^$`Hf)YA=0R7pp;*?1N{QQ>$fJa5j_3qm1w8z?$GujCeCDB?kN;>6}p1;#8h
zxM8R29cE<o8E+YZ*AWsb&@IX_wC9^W+FaXN+nZ^!O9;T^cMA;YX~+Z)UCEsqg#qUt
zU^QWHJ4@Vnjz#-tUXvXtcbv2wrT^C~v_+oG9YH>*GPjsbV60M#-!bvvg5)#Q@tOCI
z7u-Xl{{4b>_>AF43@#yXpnd%#16%zplOJ&vA_OINHs85e5R7#*c|k94SpWpG6ddsN
zD?7;N=QS|&AiD!9L_2X6>;zH4a@r??KS@|62-^VCicnVA7_p@7@u=n8|CsmU#SWwv
zt+zI?Xni0uSeB-d=9(J7x@Ty7A*e1-M;|roFsuqM$s3N2XKb)!qOjGWvqr#0cxowL
zIH$g)gM%?zWfSjMglH6Lojf6W#~OHGT2W-f_qON!<1bMBA*mw^4FXrg4>({Lt;s7z
zzrt6llsvHf6A2#sa2irAyYdo{EQKDfG&>yqDLyr8zyOs}gbm9*J=~ZuyhH^H*Dhyg
zu8&qt{eUS&1*h29*)c)C!cdr>j~eCUZtJf7x}=~8q#xg2{UdcOVXq!Gjk-FeL`4?n
zejc-*+((`cAk+xL-OOp9l|KFv;;p%A_dWZ(4WT+!x=VmFb+iBC%p$Oc?0;QRO09n6
zBa8@4$Qv$Qy7XzW@jjT14H+m;xFnxhnVYkk+;aMU!G*`TpFZsQ^VMFSfO6|c<Sr-i
zvVduG#`c$=hAOS&jmb$d^2mh;A3j7u1LDvI;z0YZwO<QBhBK@2ew388QZpd<^oE5k
z&^$50Lom36N1-Ic@*L+S97p7#Ds_xwm$$Q&M|j&mjq5@!pnFCztEsALXniT$Mx?vQ
zG0$N&#>6sfkJcI>Cl4K+$h&vv{K@{Hx|_lgb%KGRo$R&R)|EQFtPHMON|oA8YC0m3
z<jJCK`QXk+JQ9Z6>LX-RDLbGquig$JE@RQwruHay`McXCJMxdf<s-xLkg6^Wln8sG
zgj)(v4rZ<$r5)GskwOpSM=WhMI!wKG645F%#ya+4jv+XoQ31IQFa!8jq1OpNv!}Jc
zeQ768{NMaHf(x^@8(!qewPIWxYsaXm?@e{h1EY$IwJ5BLj;3Ac)?xVD%IqSzmMC=b
zVuYj~oBf=&)`DKi^ciIeM{bXh$(G;QE74>TM~*!mNg;DN0@uj3#K)3>y~@V@3oKVd
zkJIoPjG@z-cw4a}<H6aTa$U-b_>$k}-N}z1zXRY5hA(;}UFzT1_`~OJPdzX5h-i4I
zr8m}^?%tVegw^H);G0`_yF!|iI9Ml<6audYei11t6%`e^sJiz9dx^~r(4>{n-|Z-@
zt*y-!WOZKZio<5;3nvF=mm@qp4b9C~g@qT%LyybJ%ZmtU^w%Zy_L7tA-7D@vm1@o*
zBJ%4-&BrJmHPg2t8d_mD3C<?%H_?#K{?QgcJ2!9QGabH50KL{}yXK^AtVu+1z~n3W
zB05=Ju^}Bu*C3l81Xy`q6rBUuP-Zu7pc(&%Z+3ywKPZR{3#&s6Va$f?OM8DmWj86+
z(_@WcI>PFcY2Mg<x>j>oz{bw*$l=2lX4RdMwf4gSyk{Ie!gy-a%F0AR!jAKbg?E`J
zq0@WFT%nD>{))786;S(_(`!aq0YH1PA60wm&}d+R^<%kW(xPV%3@yUJ4v}sEEqx~1
zZ0_AFMP%=#bsgnE^lat0o>;3dJMeN6N8oUqc&Qe@`T_s!9@f&LR=IpR`0-=y_ZT-k
zSzvNuS~G#o{q?nhvx^Z7_XSl94LvcMKuR&qurXR^n8u?&gW+JFNMbY7)YR}FFJ^~p
ziLFO#zS5Uh9ipMJx3T$5w_H28dyijluVLiXq?eq>85kJo=^Zk1hyGAAFigJ_H}mu?
zi=Omfpb@Z{Q$0dOWoc_`XJeD;^Kz|WeuWYhvR72@fmL}mHWrriqN3*=jTO!_yX;f)
z!$`NVu;b#zhnrPm92Jj!PfWHC2nlyDm_$Nvz5BNbv$Nv%p)VXN&5iBx$my~uwfMC*
zM0P25JsEaGO#AlTd&W@nf{%qo+1Bsi!P^g2{fLZ3%HQqnze5#_%9+UJ=-Sxn*&lD;
zT50jVFD%r#+2a}JD;S{jkuG-Te^@|&+aC><Qz`iEKn!j=H0}sUI>;~qOE_M)&wA}B
zFJorPt5>H^$)r6$!&pG`Tb0Sg_<3C1bI1x!L$hm%ifMcg5#6`rV0^tMN<mcX`|+L#
z4rL<iBlu(d!yhb3O87Uu9DXJKdCCGb28EWqGiv9jG0&f4;T&dQpr)hSfx1C_<ZIAt
zY+E>geEr%RN<l>Q`vc$`$HKtC444lbKYsJxJrUS#2@XB%3^y<{`-6fD)1=|CvFm1L
zY52Xr-I(y>Fj%ZgNij=ESbPyzt~6_*lrtgLZD*fD$Usw6M0=@=ADzqlb3*#R@?FVK
zP0eHA4S$Auhhc{VJNuPFxm~zdDxMMQ@$m3)X=&-j;ry%po&_`oyg@;ZmE9ru|BDa!
zqPh=wq=0Ln!rFcg-cQh0=qHMwJ2zkH>o-3?uY5Z^C)7SDFc6g`(cCP)xnt_s*imfh
zCtp!1XKEy~baWJwk&&%WgTs*^=vW?ZfnkVk@5ee2^v=gsw!Zs^R$og1Xq5#pkNU@<
z_F=qQ|KBhB`0)-NhN}V~o*T_cAsG8VzumUBXtj@WTehwMxD|qFI?;oB90ta5Ol)1^
z4F6-h$97?O1NVLC2p=EKiG}MUGI#eC;10-9<DAX_D;m=XLlTrR#mMJD9s9AE#$#uT
zvQ2sj3dwuRo(=6E-o{)#_92uI>>f<x1vw>GHGy2;lB$p7Ilz(~6+8FQdSrVcH}uu=
zV*kBa6$#w6^un%P05&n`y1g{<;l0;umBNvyAN^QRKk;G7xxB!*K={(7G!bqgArR>e
zNHB4S??-o@$pBzYgaXM12e+*L5TwTZroil52MQ6-rFKH;jZQ5xk!q3U)TvU}aZ59^
zcb;pr=SOfqR#jKGi~DTYC-*b~3ud#wXxEj5`=X^BCfF=;<muDec-4~6q?q>dXJMcT
z$Fq|{b1BdoC4duUfbEUT2QwA)5O*g#D7JJwAP35%-Cm!J#~)pOu}omEyAprGl{2w&
zDg{JmjHLP0!KAq`PK_6p$KZRYnUjvr$}I_@d|_dAMY}eKBc$L)B`!`=AGH`OvE#!>
za|;l=Czp9wSJy|tak2kW&P0ggW6kwgI5PFdO7EIucXD?hcx&2+p)f!vL8sqIsC6gg
zF=03@B&7GrBA|@~^R2}RFTB~`9~yEcIT=r&0!L;Qokwlu{=W4Cl{e>6>w{DM9qeFa
zYQBE`+SIhkH3dKkCvoMjJ^g?vXPd;2Lx%NSNdkrBods6K-R9sbu>Zeb`Vkq~7!|<}
zUHjzuvw#Cf($GvTc?N@+DJv)UNtP0mR`4E!cMtP*JL@-M@`#yzn&hq+M6CV8NC<?T
z5=}tUT4NCb&~<!iY|I6icFgFH4!>jno6E;$k+OtRn=?Xu$-?EQ4xXPmqc+<;K(}9E
z8I0ln`O|xf94wZI-szwK^<0@Ta?`8dul0I$sq@mz%#8l5X-jII&u0GO!pP&`!Ogkq
z5U_!AfJW~wV}~CD?Ay@lA5(3HAf>i;PUk7^G_8G@vc9>A?@=ra-!lpuaE0>AZjDU8
zPCYS~Ir-)LchB*b8cRz{Y*Ua#!Ls$1-_q09-&*Qy3=AZN9gQ3PmUt`MFP3Ym_`JUd
zmPibBULzM7J<uhu_2FQehU)5Sz^iHf7p4X1FIY}tsT}#el>h#HU~ur20^f)T?Ve%U
z<HynJ6hUU^1K0@n;o~PyFa>w}yOm*c7EhzDu$GpKh-jEqNlD4qR~;Yu@X3?OzuQsO
zPXGN8bNaAFO=~*y&O$8L;lp9r4obiH5^a}fB~H-MrI#`H-<Pzux7S6yBVHf|X-;F!
z%#<fr5%QwOAmFv`4ycPqzvUeS3ou=8{c#>1nIK~-Z>-LnqzS)KOQ>o8;56AmfC{rO
zJ`4x|U>}R^Pe)gDC8x*m<DB}XbKKkn&k~@6eSMD!GnK(=B9BP!5w;Y}xLEd_J9o||
zUGx4FhqKD|ftqjMcy`F4`1RV@p81(l>dDm#5D?^S=%g;6JJe0yO}j-zh9-6e27f`+
z6^R$8M-gR+;j(jGcvOD=j^~$w(v_qylq1BSdJP@<w^X+$^D0)RMN-XQJUw0n?V9?z
zy=2iXx+SB3(LhVN5C6&39;M|q2)i8z$v(^!r*U(RP?)YtV(>qCSss>ACLY9^nqdpA
zRaII_#X;b(n;_|Xx>fyAf`m^wSpO3Ne8|CE>b5!s8Z~NWXE@~G#2&Zo{DDI@H8k{4
zoj<HZzui@GMegcR93Yqgz(Ut;yhS&`8;vRy<CtxZ0ptZq`t0>ek!Q~iLV6aa379x~
z7uVg?1o>SBiTU|qW%RhCw6}Rt@WK5%5qL7C#AaoCyY9IYgeTL@LQHf&UaG3H%tHlD
znV|EK&(~*Lb|9I<Id1Duh|j@8ze?OjBRI}%I`549y_+)bxUi4$-*jJT_5wT1A^OTZ
z6iR&O5J{~y@!j(_WylanbIxvVn*E1JKo0i_zWkNDo^*t`E(Y<-=jP{~0e>f)x3K;E
zfLJAJA+jaDZGHI9I2`!Q<Dk>QGZ|SKh@m*SS@%Z2Vs&*D-bOgX^vLOfQ(W0l5>Nq~
zr+i~ZB$MKAQ{ql`9=qZz9__E!l=!yg51bGJfxT2Ky3A>?436~Zu%1470<DIFrKN*~
z1)G=m+~-FNIA^?iY>xakF*P%b0s^|~?DSG}IhHXr)=bG>qXpB?V!Ow?aekwO;LS_|
zvtz+S>m`cc(N^_+Uu$ZVrV)!4dmd7o2SYV|pl2}QJXuy8R1~*WMk{AOa!rk`ST>(o
z{iH&sSZxMIKRJ5&YCgF;MpxFwQdtCexRjL2aYR~gEc3?4FH9CS1mmk=y|O=hw%l@O
zs;drk<+b(osor8iQBepV$$|7lg-{H5i==ogJ`@+XX!igJjIKY5QerAERc8*y40I<>
z42|o*GAgA#cyKwha402YosMtn_V3CtSYgyQh7AHe$;h6^?3$|?;L)|)R|Ci`03RJY
zd^pxtA;<VrU4MU}{=0|D_1_j$Uu=iUy@-viQv-cJ42b7@_1Fb%xC>)|?>61@6pSh?
z!rbdpqx=<d2i#+1h4i1ol@KiDt2q<bK<)b=mQqvKF@8nqdqU|)yY3cr@)cW!mtT6X
zjhK(8S~Rei$nC8DiT_nJ3+?MtZ5TCns@8F!CV3SRX>4cb>b}P=g1KjBYRb&$W*!Af
zJnJ5eqyU?T%d<VI%axG_ozJx>F4XtxrK5H@6p_#4;1GZ`Ag;VDq{=p^s471=-<w(|
zQNf(K50+lwBWW3rfvWKari<${9|{YX7dJQ#y^g~v^t)(4jmubcZM&zjk$7`!3ljY1
z(v@GB7GCYt_Xg>58f^@YeE1*RX=sFAj=sGF2rN`}IPdv~5A7)m>S#Q0qfvPG{j_75
z<hsc-dHN>b<e6*9z(6AuDJmPX;lnkF4kdGY#n!^Y#?g_(W-!71ZbNHF&I?deu8?4Q
zz|sl=v~zQkJI2c3vt=)%MfhOV<bCbh3&_7{xU_`Y4cE_4NF}D0f4WE6k*RH@75m`>
z=%kD7+HJ1WpYFOn3l831>a1CicoTlYcW7q7#|dP{XAIZcGquf{UhaXMH0+4Z8@({R
zsL7J3v5`Sdt?AL<pHpDh3ZciNe;0hVTQED-xyIZLN$n))T_{_&zcE(u)Il*byoY_{
z&q`heUszNBY{dYGFEd(_5&bPQoa4#`@!<>SuFnreq2qxs=Be(fp&A~T7wB}3cE6jG
z*zTI1Hp;SUYHUe<Bi~~bRyTudmeBUEFHgfGG%<43JmP{$yhD_Z7H#+^<c>PWYP~#o
zw7Jys$4;@od1vl4wD=<d%rDsU_OY#TrfX~^oYvQ&x9C(7ziM)^;8KCi-Q}saJd>tJ
zl(@&YwCg+$80uz#Vi2xHh6oWiNLzb~W|LSes&0d5YmUpjgv>Zlb`!&GWA6cAT9BYc
z-nGBG7Qn?dd%4d%I{FGqs&pN)TZ=nqT4P`AL{zmlzG}_676L2+6U{R4|G^%L2W6yZ
zd-<0aOp3u6j|W-{ye4F}eB+sUt<IvQ1wGS-qP?nd`@%xBgqXAQyrV38q<cPa<g~N^
z&*^VruW;yQ-di~+;yx2A;vTm7h|MDH?vic&%651rdU54sl=2T68`aLo>QuA7P*Mvu
zRU!^IbzRYNaX)j~S#er*yP_je#e`ifV>t7TQjx=Sd%ZCntw2iPJ4X;zR(ygMftthn
zObsX3f%?|DInvCRY5tY3sD?o%KQ)cv-R4LPF_r&tYc+^51PrJo`rnyiIcc>Zsu^XM
z_AeGViEsmOX};3S$_aIJS^Vo3SyMNmw5BGOsYT1I+1%JDFJ=t-QR20tnb&=q!Yeat
z;Gq9mY<iScb2)P_<V7;|uC}UL_0|Q-$_tln&`NCaE3mvOu_`Di9j4YSa$smvjiyRt
z<?kN;P8SpHscV#>v5<ML;ID0fl7cbOdF399*0yMz{e5cXE+Zv&AE!*W^ivJ=3e3;B
zspBaBRUi`?|84G3EXYkRn5l#A)Klj12ZQHSxt8lFf7ux8IY(;RbB(eQnwv?_qm#i@
zv5F!$lkCFj(^Cr;neG*5&M;6?QrcYQh$sq<oNY;vYx#pL7l=9|7EZ3pXvLdfvN8GS
zl<dHT0*Ftea&0uxO0k(y^v>7=;)<<Ni4?XZZm!wyqiTCLMOd}#5^HpP_;wLhW`|yH
zF0@~KNHK}n+YxY-adyiDi)xiA3&i4j(Mbf2dU;qW)Spj@)K*73{7gZD1ke8Z)O}I@
z!Ox!`Rc{KP&<<j>9hrdmcYRvxaF`xTfRw-?TFy`tv9nsx8)bD?qjSmFn+%JiD>)N9
zOZ;Tq9t%Q>5(OF_*bc;QcQf;9rQ46DRM6nQz^oL8jOy^Aje0awE2QM7<pDX~s&i=M
ztohGaySz81zPr_IMS)?ZgBHS{MW*WhB!j+Wcw<H<(dm4*kycQ<eZi4+){***?{q7{
z|J)1AYbq<hWwK{zrL|yyvY(usPy4Hi_nAwJCm5?4&kMUGrw4ZZ4+}6~(0_37pvS=z
zLPF3Oc_<#Z*<JAA%UQQbDa9dM2$#Y7fQgG2FgEuAFLinmS4BQW_^+7~2x>lCKL8m4
zrrrMi*-z&k93%+b9Y!C~J8c<F)zyihv~;$#Xt76IyTeLiytU$LdQ5F6m~24l(QN%i
zf;Yz2jS(CnW%tc>V$b)39V+U*Da+nUsH;`2Zr=PedUd>-as$vR$F5V;dsSj`4c=bY
z2bMEf<$$wM*SPoAy}+O#UCLY!hteZSZ8Gvvk$;?Br%R-4BG+G-OR$Zw#Cm(vXs;`Y
z+qH1Vrmb7Iq?Y?<yuS%pTJY|_vt$uk5|RF8rZNj3j;ExgK&(=1(a`AcFPk}=>18S1
z(cHV~LvFFaKW%&5!iiLqy|kgNO;+&qCDkl}0_E5<Y6B`KETU%AIyeTHp3n=VIt@xg
zYP&g+ZBx(`70+?4kvVeVx^jY3_!nspMfynYM1F1(fqTnmz@yn3j$p>lC<nUTlJ>al
zQ-mYw{CIjbj@^yLrgyNn|F`N4zHXoP4;HsFG|98LkBbKWs$BYs9M1YkB@~yZ^;;G}
zzHpyhZW;+0rW1vq(ppC{ydr?AgVKfDJIFxj<hdaNI}h}eF)(kAsbV~LU$6~jGq?l!
z+tUd^fL>gbQ=|<KS>4)LndmLHpYCZlc{LUpb<)r%VdT#UZZub3Xk#MXRNDCh$TNS^
z@NLHP_^Mow$cgy&&T0@GW2Nx{xlczgqnBz|@FQ_+t5(nslVfFP2QI(3wX#t!3<)78
z3yW3>IT_j3zt#|JV0L{?iKsLcZX57fO77k9f21G^+~8!|nqllLpU=*tlEICYE$}2c
zy3a(^C>_?@`Fm(V$@m=qnt;;Ud);jI0w3FsHw&N`@LW>AEl0;i^6;U!eYiA<ammFy
zGrh3`J|=N9oMbMrNrL(Vg}VdvU~kc**_Q4to~=mq-dKJr;_jd%x-nB~gEe?r0JIRg
z;hzY}`0xpgOOQVy{(f_rOY_Q=kLVOzjEf6q!9q{<8J}34Ptna<&1_Xko1f}#MXkpN
zg8=#emMjIE{v`aIZg$v(D@U3KVYx#0S%DgLq6-46flrf(p`q8o)dEh~|Ipy|<s$!#
zlou)$=Xk_`uMr$yr+a?*`i7)Ud~l!rTzrd8K~8S62(vTb$to>sJ$?q-bunig!&m}P
zlxUTg6$J#W`E0D{7rS^l&1naDqI72zTfccsO=R}9st8~d9;Neqd}>wcM_AMLDOoK1
ztBV-scN=XK;|j1SuLD~uS|7|<&YL_+E^7-PW@hA2@N(&guFYW521tElc!h1U&})OQ
z`x2JA?Gv<$61V<7u=}|@?K2)MT<|!x^7-u_QIUJB8AVA$Z8d1~dglIw+#1$pZB=nO
zNP6cqu@&2BU4OM6-eXHxYo4?*A+SXCm%~ez6#bTdIaPX~2=O!j#+UP08EGfydTp@n
z=f36_6wvdJC7=TYbvMWJUrahoVr^0D3Ku&6xr=ol5r{c;hFU@oh^r2NzD`py)AMKW
z263i{FO9Y^*m5$n@`%CFUhRtI`agXtO%TkntCC;pr{9cG*7^LP5p7nza+FrEKh+Mx
zrC#40@A=TTFfxf5hyJSsuq#I!?HB(3h`9X~*1lqQ=H?pCa5UJe6po{%^7Oxbi-)tO
z#HQ6d+EhVdUtM&GYV&}(5r@`?d!q?O(DsTs7%s$Guqo3<1Sf`RM)RGIS)0kyOsU6?
zD|G0~lpkSNov<nwT1x=+)C$d_7JLCRavwKHq|5en>8Ui``g{7{94B9?fe*25+gwDh
z{Ie4~<LP_e6;u@zszkq8A9|d}R!7G@i~%Q}?z!;FEb|w5z75&$qyxywLl^gwkQ5hx
zY7vte@gZF+#qj3;q1JArVta~p|1TNDvw>$P!D?PcQXZy{Cr;Rzr19)258GAde`1^O
zSy0f^;9%vIulKbgBbbs?do3lE)x*EIcGA`PJMekwPf1<Ww$(qcpT!VWuy&5hEb{89
zZ00SM-`_Xsm>XJ*Mzs|tT(tH^G@Z2>Rdol{0i0P?E8%xc&C+*s_c~j}zVp)~*UlTn
zPl?sV+FZTXV<9zeOvj(XTOT;p9yytPjr-vucp(W>IfqbdUjZma)PI?Zx9tyiYm40O
zAnNgs*7K;WXzzuFY>&%p+xRT;XXMIXA%9XpW>X~nAiB6%M!wamc{_X;*J5AP&)iyT
z=VJj*nD)3X-4Kjv8jN``y1;>7O7wr&d-Hgz_qT6Ug9asSLxr88EVGo9Qidp5iwuhh
zVJmY<$(*4Ql4M#)WeS->gfdqOi)0Q75i(@ROosDby7zfr&pFR|o%1^9Ip^Ge+`oVJ
zZ@1H0eZQaKy584&h}B%LK>KH%;96eVKmSkh>%TVP%iR15$;J3arnSs0EYtAExn1@y
zTF7Vn_U*fN?~dQ~4w#IOzKH2xt5A4l4Ms%A9ft1X3>}in(9iA8EM5NO2J7=NaD#PR
zqGLRxot75PeAo^gw&YTaEd9!!)$bBieN<W+9p>rO+v1Wfkmlohe#)bJkOpGY^;)Z`
z%`>ps8RXk7q0?7!TANZ0@%ui}pL!_w^m8nG1}sZW%JT4`mC53zPY^rO4o@l^Bk->H
z-jJBKd9z=b$ZyF@pX-{YVkG}!XFmisKk%xZ!rCuP$_k>R2~9Jn1J|OBAiO2(#FD~D
znAqsFV@Pz^W&wYI2(Yn+>;5|e0F;u`8@kIX5>t=<BcBN#y>R7W?M=7-eh;tWH95C*
zkI^kY#{3>`x4*|tViTU{TqH1(rc$+%Tr-WLFk`?SbWK(DGE$!bZCF6G|LIt<|4t`$
z5(!x+ecvli01$(srFpRN2ZX&T!zPpca&Rf((<&&~asI`(S!h5+gnsP%6!}tlk8xLt
zjIeG7&*sUwUyThJj(uY*v06!ond!mv&vu<I*G}VGs-A)dYcHd@l<*xqNcnvjM!-6`
zt-zrX&)D@wME0v!jR7IfdDnkLU+MVrdyW#86f(@Owz!OOAcjWX4Ec~DfG<LsL0`~S
z;9voJE$HGWw5`2B&bMh!_0w;goS3l0j^6sZaHq%Ie)$U)?Rhn5&CSfrgk*pnqRo|*
zmF*6cb5xNia;jY!YUTtvOnWFuLIs}!6)W$w5{5huVKA@AyYQg^00l7LlP3<xD{SiJ
zAs-ButD5*hUSlWj;$1!bgn^fC@%Q4QFigsjV?-=Huz#GWs(L@kf;gQ*S?|v#0-HxK
z?Mc!JaSW4(Kg+eCnGFmTsO9J5TTd@@wt}=-Q_9Sb`GeU7_8>J<xadAB4IA;Zsiqnl
zFSL0Qi{;k{9Aae9BN!MMbT9++M_`QtcZ@`$$_>FvkM#;XN&88>U5!HW89TVS#WN>Y
zO1`b3TS>*q3~ARXhMP)CE9-APe0Xl&>$3UG%IR&7A|r_xQ`wt2Rg^!dyZ2T{BoRXw
z`uoj?&Mh6JgZUtqN^^9gh+(0ssPQHmmQ#2|sY9@XnV<^p<F(PRiQm2@F=TV!+Fp60
zskXwWAe1R6G<d_BZ@E_;9TC_7Q}uQSPhUgBsKmRtmgVTBsh8390BLz-tz?C3C1g9Y
zbrfAH<-eCt<78}t?J<*sR@G1Pl$J%l(^yHy(rCwTjH+j59Pz3#Z^bM<Wds6M^%x)J
z_=OyubnCH_c7y(<kym{}UA%j4fLZoLK@9mlyCz>T<v(`o<ITK|r8Qol9E7P8z@bMA
zO-)TX<iv?fEmyW}brbb`>h!afuo<jI%6(xC9#0L8t0zy=Aou#G-h^rp#)Tv#gn4;Q
zaI0x0EsG9nj`R-HhXS;YsND}*00_A_<@*xqE0TV~;0186Xq!57{6})GHGwcM`QaVl
zB@`bNdWf&Eem-{;-woB0%@rXgO>m#gG%|emE*iDa*%ODqKb4Sw5bGgvm<Wc7fae2D
zFIah6f?M+3QuiM`7#blRxt-2v%lux9_J>i24C)uyTVV%&L5v0QsmQrHmp3<!hNcZM
z?%l#>_j{t63QLYOt)v3hQCxvy>V4w*p<2sVI;01d@8ieLWnVyj!pS*|s8LsE)(EA+
zRP~rExXBGlJ<`0ry)!e_C;I~^lyxV&Tz-fRVj3pYpy(I!0V1rhA<y-IS+EP17blCr
zOsTrhkR70T`SSC%mgIl_33~k4e}bXc;J~~O=n|klF0vJpZ-mNaUIX33_ddtqr<@IT
zp+Q0WU9zfYcTZe9xwP$^%OSX3Z`+m!5{&gbZKEe9U6pi3tYbY-_L@nRD?de*>vAIX
zZo#Fp_x%2$Z^H97rVO^VwLM#sArb1nd?B@XJy`sFpLV6G-+k^pE%jg<n*z^9;!)G4
z_vj6lKau%Pj)s!CRD)LLjF&vc>2AKIa{tJ&(jexKTBatY=-W??na7EDObPPU3OaXy
zUZxi3Asa4Un_#!cxE}L<A*!b!^-d*$kFhF^W(2Cs$;YymHW(7x4s%DLH=K#`x7?~Y
z2TEJQ4g`yLVjS8R7qmH8M43a?MMfa<vBA|D9y+?Cr^DBFb1t-TII~cbOogIRU+SNG
zSn>WnyfB4L6^gpa)?U<1Q<t-87I8rv*3eb*9x-LD)U%J^4BHd8_4Mh}zP`R`KUkQz
z{3;KQ$T;5f{X5?}eSLkqYnpU)b{uPYgT4<)#7Y0nvNtB_Vp-YBip0TZR8>}<)As_^
zHONo@amzk(ibzUvHsC9@CVJt{+K<yhputRGdQ-#e*ROlkKVLhLm35$;s@h=mn!S>j
zIh0T-=fb8!)Ub=y-_@%ifgh2_kN7qi+G{)M#JNsu(m1I?a?C7jJiZ5(#ix4?2ph8U
zF@opcxE;GtWr;3|LP@B;Ba|EQK7o}~mG0b(gQ2lc#z8*7TgjCbc;6)LH>%C@8W4p_
z2cE{R?NwgL(kP|>^HJXzV^>@r)qZx?8rKK6_{Uz1Zkc6G&@R2X`C8+DR3P*!U@n6P
z!^WevT1b5JURoFqfx#UgAD^j2O@V{K^5XT(3Gsq!-}8Fq9i00=&g1YuyY<J^;Pv|Y
zdXnR#{U+A(^05=-r|}m}8N+l#9qGY>vHM;w<}lZ8Yk|N7U8><G+D-MwA0uVA@oy%`
zFU24<qn8hHWsQjuD~lHA<|jJubpts?2;F&VO0>)t<5ySGE?9<Sp_hKvYn1;(I36G|
z_5&^|uvMWwLBx)6LC$G7AF0E0?GxGIUo7DJh#|=ah9tkL!iH%x_MbnSif{OWA!pyH
zq7x}|!vt17ru&vWfLPp^8$W<yJcb;YLSE{vRNrS*WcRZ*1sj#xienleIXcga?AtbP
z4s-pE+ZBB#oVbSfocfx8w#gr$6y+1bHQI776^a=+LRqiGg+Vwhj(&)jE`Ba>I2Z{v
z>t*yq%$GsIKvhG|vE+?}x7d&7WX-;@Ql<^`GU;d2tV8*y4|d&wMI^>lXC6%zPwAC<
zq}%^)3O<AoSIpFXwpQ;e@K`bjQrWE3wm!1D@#V?d=qS}Qp=FixlM#S2P#}MKVPa^=
zWc5l4Q!Vria9)ep-JEI6B=zdHi0+lwuG2obxo00AuIU|o@7G1Wf3aM3sQs01;SG$0
zR*t()oxFVc{D*seG<fycytj_L11x{rcqOjl+atQN>gLZUjGTE?wKTn#B(O}Is5rOn
zfc=k;-xWS9j9~JU;fX~@x8`L`xYAI83B-1TD1?+D>pzqsNL;M(2wSvjWX(UGGh~NP
za<2=rL&N6p?-3LnXfgf~z%l*7A|?PpdIQEw_VML`F|nVX%A%ThhBpo&k)1+Ywh=Qu
z!S%!Y_sIbOUEx?g_4?XgzFWw&)t1U~D+!Z4mz!#vDk(@LGOMgC7k9cO&31Wmhor_!
zmRAUzJhe3GazsdoDB%-Ao_{E}0{Xxn)GZ16hq|ClD1ZN+)HJ^|+Z=W5RTwEYGP2Ek
zi!R?zDuePrH-^*qN$8rIYG1f;`{Oa&PO_gPv*^;IFvbSjYZIhruo*&*6Lv1m|1d(^
zA9?xqE=kLq6eFLl^YVN2l-!4K2y6L%|Nb51j;3;$=So>?)AVa0$C<cPM^`|ZtqxDO
z`TYECQp`5DaULEN!Ak9qDU`q2`TQ6;XH0Of&i*{g6B@uJqx!TTJuSLHpKVKZU%xK;
zi~EqI!z5A?>H_6FX607qwf8((EHSdAw?{GB{_M>4`BN&dto;*Ccc>M@RWj$vF(+a}
ztmHPX#ZIhej31vDX>R@7=!~i=;H-=r!f~HIiaPuSTIE5MG{}XOxz=NvsyT6{EL@EJ
zvrA*tFR+B=mZm1bs)iz~4OwnDW;gqSGS+zJ+o;hLqyn1UunVD4M{er!d=MdSBVRzc
zcDSkC=+{%Z9Z0W3GoPwRX1~-`lK4eX46PypwzPrQkf-;Wl|MT(Tv$-RDj0;~Uz(Zj
zp#IZ@h&y-Ir&Lp!({yKFBA@EUY>8^-J^)DMR2MicMYu+o9#&D=LiH_hS+_3c<jIpc
zmi3jNKIOslku2S~yI)ux?PEg0xu++yfXtcaY!;^K?-1%;=gIGGt`<(nExAn}1<G#I
zCSkvV^GC&raUlbyej&g3HdwqUraqFgrAXOwwUPDCZmxZLa<kKBk8GVCEBhm+kqI*=
z5K|=Z_5^=uOvq+qJaG|GL+Y}2;aLMXqG~xk5>+tTK(c!wCw8f?hb+H?uT-OBxciLB
zH$^4PBtgk<0CffIT`)ax8us*^T>zuDP3V71R~0Nh-jSSbR-E|eT;e@r_<=S$Mvvad
zFqd)57HEL)yu7}~MgQ6TSxn4uh<)$=Rl9Tl#M+6O!@X~5Xil9(iYT$(7A=P<3>pjJ
z?-Q!QR|eqv+^Z}8+8GJXf@}hQ8%Yx<;%@X>#49;8&g{*qq6(EtKfwrDHC%AbV0YO~
zTnEYOiTv!$%st(jMab%+VMF>)DD{9WqDHA&fWOF9q30819UL7S3?)ARwcq_BH`mYK
zzt)n)D7p3{^|t*wYp%ww&CJD@FJG4UVuUk^xz_&ebMu;1s8G12uH0i~2D_gp3w%oQ
zm5vuCuwa!^)fy0&5)ld7ycG3J=L8~tc$gf1RHuFcr^1$X-9`ms6>7?`cmF`L1y>Wo
zuL4sd(~>+QY+Nx}1Aq1PYu2wXEi(C(mU6%x6zc0o53-H(u;kfV_8L%t3^&JEb7+%E
zl(C}8Pb;5xIf4f6(Aw5^N{WC7H_nXVf`Io4p$F8f0UT$+cNd8Hr!R#s94=p#zO|*x
z3pWrJO3ovPq+Ml$ybvzp=B+OR6S5P!K=^ndktO~2j+t6SNMw!f((cHL2XqcleH(Uj
z>Y-o1g!VF}Xc6y)GIhd;T&*x~K}9n}j#Ey>p(LinUaFh0K<RzP#h+TrRy#tfat{s;
zX1B35HKi<TQ7<A5?PpzF7^^<G#8Z6{d#5U{bS+0TF=0uFvfH9Pf@d^Vqmgn-16QuK
zP8di0gt^2xZ#;7wvH~A)tIJwX;Zz3gq<}R;8r<!se~OEW_@t}eGjmK=@bkS#Nbd~H
zf5`%iV^Z5{BY#mt1)xCC^ac2O#O8~=%g2~fd8v55a)e+f2ZC4yeh1x~YS$^j{l|~f
zX2MdJ&z<H%B|SZ}4+M=i4E*$7?oiIBzJ1%-`0~!^6X}!$qIM8-&(l*P<c|2Krql~C
zeYzhQ7~z7*t)MRhJ>+klGM-dt=J5oB-1_EbLf^N--ZBZo&YGyga|;n>HPJ6M%p<ax
zdz%QrntXj%)Dx~<zaAWPeR+{U$mf`W`C@hUS9>Y3_%n4`xw$&(_HI{Vve_C0kC8$i
zO6w_+D1!Wt=clZaw^nxsIaFHS(5iWD)i?upAmvW9y%cxCA%jboMD(5%gqpo#6&=`f
zkziQ*o?#%=kOL$YB9l>~Om9olKBtxCGC&}@oq|54RmqvQiBRvsV)_AJ76vbTOJiAe
z;I3(g%r>nd<Ui&34|?y=r-KwfFs(*^{GcVm!tlb(Ov%E+qJ!-cu#nJu<5?G1uIrt%
zwax4-?jrl1Ia7m@kM5fp2<JM?v91oJvlyx4&<1rrV4|<MbY*$xv16P<4;+SP<RUUG
zn^URx*-Jr=f9Wu6Ua*S%x$PS7i_ikb0UQp|e$kS!%mJTCUv6=~fiOhs&Du$l2M-Q+
zl}1p0Hf_m)%<vRL2-zu^8}yOz3x0QYOutJ2av9R=vb0dcBs-AyNhD4BpEm|T@$?HF
zUml0RK6g1+ahj+n9(rawq+w{9z3;T|5aTfGv_Lsg`y_wA$vbU}A8WHc`Fe!euR4i;
z1tDy((KFm;YC^cLm(qnRp=0FCSzb|t&nkKL6%P!Vj}ao%nswz$?`7BRGyH<#ntNvv
zA!Ld#iCCm95kAT=pw4qkOQJKvSPj{k8U-?y+0n;0hxftTM@0Z;17|x0l_Hzejg_yC
zH-gQFGq1k3)^=)Og|g3Z0pl8+yM;J@8xl)BXWEj0WJ9hFR!b<}jQTPIQn`9X?#>L)
z<^=`@N*CUF1Db%3x6JQ_VcYZPpWuu==saEl^+>g8Inorav}HTg#omH>q6Rr*x1`6S
zE}O^#49hi%`BlkjX~Q?yEV1zfym`Yj@1f#CKjA=G3=6hRP*5y0&Jv*$ujrC{^Y-m$
z+-0(Ai3{S#{hjx&%hcU>W2cHc(b{sTK0%K!aT^QE#d*5L4yRJMm5^*GVj<4qj=su*
zA#+Kdj1O8{j}Xt0|89&?<sdvxh>~hH70=o{bV%1;B*+D;ej)AAyh7i_qN1%7$>Ar~
zH?)GQ;_jF%wI8qS)G$`bj+W55a9!uh+TePIfy#5#8<Ddh1&E2nFNzo~1;k&RV~7Ki
z4C`VXg(H1u^-EsYaigr9`0KHvk6X{^Xhy=5>(I)?qXHMoSM!tr*BKlZH0QD+2R}d8
z(@OQm=t3t+O>E;vUr3{rPMyM1B1+j>S`MI$Xf{z%NrR6F?EsNK9Q5;-0{Y9NeZn>u
zmHra6SqS+Sark$l4biF7-mGME%Dc1u?&b#=g;&mhJQ%fq=BtBRVQN87`g=Y<wyL!B
zn`-@58YA7tDqcQeVp7jC&$sEWjq?!JBE~Q30BcK?4I2>jevh3ur1k`Kg`^qqxD$Pr
zzp`T(+2y%XjL|yM{7y%cWX7YMHYjUqwlsrSxI^?@^0vZ)9ioN{2hm~CRTBB;!T8gF
zG<L%=)2ZB0;dIu!F^@ae?1rq(ZVgS_W?$rgD<UYKiQU~WfuzDg;|||^esJ7o6|AMR
zW%%z<+MCR~cVAzaI@(8{cnsBL(|GsAu;*YoI{x!5G^cFNX*&(8rQ_>rM4g;owZ%0*
ze+nj4Kg$CQtbBisRm$uPqy2Zu(S>P)_E#&w3SVFzZ&;XD8(N{s!SweL)aUiUbr{&H
z@~oSiDk}%Tnm~QwWS@fojytN2g-$!s{(!6&>Q`|;vgws=Ac%I*{$9r>Wa3)y?94jW
zloAjXWuw#IU>pfrhi&JgZ&;X_*M{81#gH-Oh@c>hqducedi3bg;Y*)ifJg+4NY-WI
z{&7$qU}GQ4IogtGp{zWBM$**(zqL<j_@AlAoP~rI4ngP&;!pZrU@&55qhZ-RQk%AU
z6kP3|KrkaP$07vO`0q#$D#yp5Zpj3n0rU`D-?$?hc5%mCou4?1<3-We0}7I8^eDt#
zp(fzziI?mWHX#=*prD7#{`}%3FWA{=get4fFNlOfiMza*_|~gyxG81Yhp`>|S|9-N
z0C(@+rRZV2ElM4SPm9eLNfE7Q_QRiRI$hKJmtTC8^;{mqh{=>5B_1+`t$_QI$rFds
z#_c}*Q?X5+-bbE?_Rj6R{C8%$y12~EQNWnI{3YiEx{(A;hAU?tHHn{Zt)U7TgPMhX
z6R&m|b`QhDd;3bzc`2XLtn#6imjyAb>mVTb-q(lhfW|zVmzcsSUmMH6KA5RWCX=hf
z0|*C5yEBy-<u>~^2&zQr#}pSwH8H1Yr|<=kg(;DM!jQi?<%_T(Q5E#n;Q;{-(?cGB
z1%WB*-T*yA6Qdi`3-ms3JpO#&n>Xc!pvGaY<*QB!z&WnX85I?k@D8>S0%b$zOe`!w
zb&q+LR)HG&sOwb1g7%ODFK=9JluC^02Vmx@Wx(@mqY8I%aq*TcSU>u*i-l!x<o@_J
z!gg7=UHh$@)_1(eF?;0-y;&ijoACa>|BMJYduxW1%MXV&4e*8aQNQonvEy0Z9dDVJ
zpcF2&UoWf*tvGSP6xj1L=hD(TifCw}ueY~~n5GZnxJ(a0Lin+!27;%3^dEnG+9!gf
zXz9zXTu<$J{>1`(7XpHVH5s-BC@Nv6-24h=`g^b{6E+Bz{irowSpMB6p;3@i0T-VH
zVZpN{aw}g&)DJ!~Tx$Sm&eby6-l6}a%ON8;G$2ntOfOO-4A`ZLD23H&pe`$f;7`1!
zUJw?hNhUo&Gg{<0;<L4#R*{@eeL3I*iO-+PJ|m&`4bVrq8#^+1I5l8)KwBLO-sj=h
zH-SN;nCM4Hg-|Pq1|Vo~%T_lDlXsFAFYZN!jH|5L(sA=e%>EG@_a#x~nC%!DQ}@Ne
zq<pd(VwVS7vmAE(XvkGzudAxE`}*1zEheHZ&SyM%C5eLd*Q>7Z0PYo=3m3@2d#;?i
z$7j3?K13vJrq>=z{g}EmbHnJT1;Z3GN4;B*4yB>^CG&pVro=qJCLj8*Y=p<yl{#wz
ztS2t6JF}JTX2ka~?r-1z5#c_Dssd(6l${lv?9Ro`J2{{H3<3qnzyR+`s8CQ=mRH20
zi%8eFVyLXkJRki#jd&;meD~+TaZ<OuQI20!&6NPP8GWXeFJXNZr6GT<Oy+WVeVhVK
zdC|+o%#`pjJhh(hl#aPNTc^EluuELNeM3O(;Nc<We^O0QqtUndU0*#S<>OZorvIDM
zFgp48Y?1BKM|w56L;26>7`+8?i54ynzNq#H_Dk3d$m=5FJ<#f5%1(8Ago*EQS5}%X
zkxu?fgyF5L)!}C*zz6$`bg(epI;=1#Etxo`vOF$AgMnCvL{LwzK?Y&}1<m`%q?EI1
zpD@s3qx}JuBdTnQzkiRp!`No%g?<~*WUqy$&dv-NYE^BidMq`@?fG--CTB=UpXdGj
zI-fKJhk@0PrZWn^C2|L{<%bxgBcdyB;q?=RS!5MHkhnE*8zJnrSFU7%NoH6L1p$Z#
zFkp(kw0X-GP6<=sZEV6iQ@dpsUt-ABkqjT>rew{Rro`G`-%Cj(QbTU_I5;y2T;~$*
zf_EVUqn;?odMr|_y4c{fOD0eh;u+8s9dtZ9A%9(jmV1ZjLvD@*$qwK9A)6^XP0h`}
zBx{y^@Q+AV=a%y*!nZ=T`{BcfG%=ufun6dc{mfXWEy$i`5Jtm|0JDZ5O^L<-9a*^m
z#cu;es0&w^9nwl+*?+kuL($&;{<2*ne_Nbl5>B6*sAGiy>bX4^sW`Q1H8WkM*jCTV
z<gBb;D)*~SVm49nV1zJ6<ihsohv!COBK+JCccCkA#D1U-rUn2tTfv)f(Z@I*93k9$
zjTkS&SI0jv5DE-`vwHMhnc6AY(*CA$k$9a4zz|Z7)=44fLL`9J6{M5UEBR<h!?l5m
zl!9gqOiZES8KSQsZh-8@`>pUDEcc=O+rNHMy=m%EBJs>_<f`Zny^tpHYgIexwZJ+Y
z6He&Fs>Y!Y?~Fa+wU(Y?pd7&Bm&(dy)Urb~p>vXCG$j#rb{3pqthfKmG&OpC)kp`B
z4I8(+qz2bP^N$)KEZ<hn-^@Y%3SBz}|Dc4p(<CLnzBFHhf4|k*ZXiDhfil<tNOi9q
zPF8zgdpK%n?3Q(xcA@m9fz~e~{tgN1sF5XFXomXdUn6KqYANflzq<MP`JX*o(LRO?
zrw@WqQ#VlLuXj-T`**BF5fnW7>knGi$#cg{EOd|-kGW1&zP@I>fu7!dVQ_q+&prA^
zH4V(AbN1TxGpHWx!`nyJ;cDgg;b9T=;v&+p(x8ust{N8`2gmcG*AQ{nVmH7k<kicU
zmjH<^C*wtu#^EY$A13TEG1Z!NQ7C|oPs!EU`EMCl)hJa4A1I8;zV2>r3CXRADgr_)
zDPn<K^wP(6){W^bU`ftw<Sr5q#1wRHVS#wfZgFmBVLh$Rqw77_=D__fP>w4hIy%A{
z30e<f;)y3tgiabBGt;LrOMVF}51?S3pqavg^pO2P5+ul|Z-X@fe+89eNZyY=8y+>D
z<KJ#c`y*!?$taMcE@HRxP2*e+OR`8oO*P;I8tNC2qiP@ingsvTY2?f9ojY}*dJs()
zp?#U6&0F0x*-_Cz8fz}8qcq6<X8tKk6sR^M@cY%9uh`m_I*ts@cCEZXstb8GO+UBl
z$<deT&!58>CT82@tmin`SWR2*RTZ`8EnSbRM?{v}RQ(&;ItMJ<PzHW~^V(+*?hsQ1
z!JmGO%1Nx4CiZ>RIh08I2J%--SUEY<c7fzo3P7GOUY5Y<v9jb8GEDgiK?m|Y;foxV
zYWP_IHeMZ^Z329JI3Lfwi1p{A+W$sx?>RLP?C%ec2fy223H$d~*3_JGp@$}9g83d4
z1&oZIA2R5Q{`Op<+qlsH#=`R=QT4_XAAc!rFcR<l@J59;pn8C_j(H|qd`u=HJ>8~Y
zq+h6EH{nKIb8c+N0mx6Kq@-5goL$sUY2Q@^Ur^a9)d7e5|HHfC|J@%S>e_M#w~pi0
z%9n6<Tm3r(t$QfE5{?7nXZtG{W_||g6n<tpI_3~@rIeO>esL5?S_>vQ9zF}p!AqZi
zqEgJYYJ3JirmE6?M~*lnn+%J)ro@I;Y|wppaZBT!(a0AnQ9V1xqfnb3MD6EtdOHqw
zgPJ0@VENCN88`_9upiW?a=}~BAnO905*;v!p?Fr~9t#Z#0h?N|tRgVxAvo@EeuS-J
z((1CvJ7CH~krX`ihB7Bb+&Ry;OjJpoi}=7`f^E`t$7OlZ8}=|BlQk`n%~O)#Z$`?)
zs3edt%h)q2e$l_b);NelN#5`dXBs@{4+1w^Jq}C-6r&Xdy-!eY#l@+g4&b0^qzQdR
zCx~7R$+AsU`*pQu7cXi_dZ%4FL6}$86qrr{u8y;9<5p*<FFAvd>7Ofc^A7pD*Af0m
ztsg$rRHr=`)g3vJYLiHEp;i?wIm$WB_Mni0OHYCH5Nrd{$cHJ}j%8ybpHfx*2=%jB
z&qk(2a7GF1aO(wAX%4^D!kX{kgy92<vEr*M*%a_zggS7T6nU;JBhm-=X$LB{NC}vR
zPwIiyj8Fo|k@j4KW?+6mGgdl66agw+Agqay-!DZubppT*El0XUl@S~_Vnyxo2=Hc*
z(pUc0%eP4n#v)C5Ha8*@6@Ar?IWGSCI&$ycJ&xnf$(JcP|Djb{T`divVmrfvO$C{9
zwFSF1(l-vhGuct?6}e^Gw(#|+^Lzqj7ij)TxZuERHGu379uaNvr=|2pQ5KldgfBO5
z(nOCpTwSMznkRp@O(MEEeTJtIuIgw`tzZu@HJmvKJ<M;oU!WmVQqt4YquxXeI*vbB
zb-JM|`)jXk+PSQrf%+Aie^YbYy0u(tG0TSb_LR%9#l`N<&U28_S=2m|u^$Km0u!+7
zz|hjHoMl_Kx4j2gwVLs=y5y&irW_Gn0lYDQTkgv5ncXq&;ck~lD!5m!pL;HvV@eDJ
z*rE61_3Lv4LLaI3Wp=i<?oUuh(@q=+9pR91{g`c54H~aB(hF0bZ`(EgVD*L@q?Y?v
zsXjTP_bz1AP2mth*oTFiyA;V4mo8mmf8g)mo?{iCX-mNI3d9&7?&6zU>q00^LXQt!
z5?(`$x;*pqDCDs_c7&twaE6zyw7sSH2&^#duV065+ri0+CfdNseq(B2-w4RWXOxvI
zGYmb!WqJ0I>zK;~1;!o{2Mz=$kr|+Ri@f3v%2nyI>ut0N@k)%4UGc~;K{x&d(iDJ%
z2M7d<swwOg>$j72af;Tv&+ZW5Jt`!mX_&lT#SpQw$C|6FFAX*jvftxyJ{zwjCUoy}
za+YxXNXRGg^GC#AP7SvpV?9|ZV94COe|0w{2ozp97WaAGrRLNW)5pMD(yTP#H3NSD
z)8$2aR57oSExo+F9P+?k3mniByT_6IOd<i$t!rq2+Q$*=JszhJa~9ueB8O_>T^L`%
z>koel@o1sAghUUlgNGWSJWYI50?&?#mk^8=#JuY$PHtjq?uJ%%43`uP$FawN>&GvX
zo)I=rP7S`qGt`(&x_l9KSAdtosE*XD*fge(aMY<}GcqvrkXP>>i4enE8Y};3hP@qA
zv_x<`C#^K`W(b2NO*DA!d{428htyLx2=ksgX!sr3N)e)ZsF2|UCbuxBeGX;;UrwDo
zc?aQvL(!Q1Q)??LD|1AG@>X(CRqZ)C;xDd*o)VZ)A=IU$XFVYw^!1ll7?cAJNJx-w
zU*K<_h5!Sk<KZ8=E+bzY0BLi|F0P_Mbl7>fG>V`3yK=<sTVJI`^&L8OnoSW~%msfm
zP~h>AS6Y03;nR;hg+m9W^2-J<4jqK3=F|5Oo+U&*1KdJ$VkEqQVgL{djVkCO1Y@ES
zbR9s_%s(x<09?f4Tez6`KEm1+VUgnEnfT3v`lj?4@Y!B|(q;=?U<EzHk(I^C`!6lj
z;iqHq_I6j3O3UgIExe(GDNZ`p=(rLwzxYnm=0w9%?Ky?nXSGkE&;}1I8a6q~!F$L8
zXfZw|9vbT`9)>U{MXLfkdQx2zUiLYmP-5XMr$<HFEfBM{z^-pdU9M)}ORj%npGs$p
zh77FD-$IH$k5j48WzrnEF%C2yJk0|}+5({iQx-t`W?z`ZklsM;HDBPsX?h#(rRLe2
zh+(kjj8N!--6Ee9)Z%(}b_J))X#4giugIMtnRPh*<6>qL_6tU8>`uJcDk+Gl8e^Pc
zP@KBBxcvUzH9I+3?dD1iz)bS{gWaC6NXs`Y+y>{Dhmuwoz7Vt9PX3DpP!rtW-kxVp
zqp{M_WZ)9}UB=WUBAy0w6LL0Q>PxsI5e!IQngWKpN=sp;jWEB@nO(7qV~zn_OWxY^
z2qY?mN_aC%dD_ls>fPYrdQ@4Mwg5sxK2Q{zVxe2+Mw+xsH&#!HnTz7-?^=}nw%SV?
zH`{?jhaBwfKlV(K)o;x0=YhzlR&0Tuo}T!s;QEZwDU{9-1iZby&+0U|L~U(ti8uCK
zK(Okqwc=M@cKO{7S@*I;BuD7q+G&CrK2vx9hqV(+)V$wU_U?eKMMg9%a-2p(y<9YM
zQrM@M$)o@f+=@bDb%_?!cef05PC^?lMD6L&oSB(nubBn_t6a58&*afs>3n+!nC&J;
z_ebtls|D4#!jZzQv_<uQ=#B9IZ^0EQ+-3!H<%yTjX0M)nJigR&hHivjqJR=(VyBIy
z!6{Nbyx|=LA2dM^+IET9a0X+2`8V-6q~QFs7wiBRdbHvpYTPmmG$l8k{Nz@*%H)h)
zuMwF;^ui<2Aa7&ufKkBlge>?VT3_5jyaOrQ&4d%vRxo`Abqupy=}^4~e;<XVbN5>>
zIh~jcn5bSbh0m$k9ORK9YS3_Es&Q=f{?4fhVpAY`F~8!QrYaIY-8$4f1Ji&34&xmC
zIjVpcRDF34!?g2bdH#nQuBlH^g-|7!OZX>Lz(-)n+7G17hZxpMe@!4>9Q2i3wXL}K
zmWe&=!nbg-$4$N`v(@F6RJkN#FKMTF>y2qxyCT&TUO$zPti%}i0qgq|y`*ya@{{`^
zSI{u&U@3#(g4x!!-!nE=i!>|Mqh>Tu2YB9LSSvg~`R0}vDk<FPW9V=YC3D1iJV><;
zVG~TUb2OJEXtgohN%MUA9Tku3tVerCu`|5R;7qz_5?Ac`FJR3g5ol<{P)CVo=?&TS
z>Z9m9=d<+=nfYss0#Vk~-WZ@7>?Zaxu?HoQ!0{{}686=r$I*lVg9qg1kT*mm(QheG
zK9ZA@qd~qGp!Lj+mf48?+3}j!p>!Lhzz`S;>E|ThUz(`S!W&<l`+mz>4t*@V<`hFr
z<>lqipMM@=w|@vvlCT}F`HeL-XI)VeybK9hfE5~i&EEotA)V4xi2uk8+qHODV84Vp
z019TcNQwEy`7P@<6vfk)$s5k<pdZ^w)3!~?!AQ^S%uf6al^6!(;`B0BK$pFar{hh!
zMn>)|*zy5g8O&Z5VT?%l9VYaB>9c_?<E}cSfvaZ6u+kCw-4}oHL_Q~lrJ~R5%CXXd
z{uFA4eOp3ez<h)APWJ1Bgp)49p($ri?k2hdoeFhsOE=JE3M4bHg-j$D4%NVC7MFiF
z;7X~KL~toLE-i<JEjvFU>jrqcu4{&7d_iPn{%Vb6D_Yj&yFXNGy>XAv9TXoZW14|I
zB&fZ<(y@R(1O*<F1<XQfKorCMbqx;B9q$*)^mqr=#13Pin2CFT&6+^dIh^BQn=*1p
zY9yuTW=3CGz$_Bxz29)BOI`Y$bFpGu$l+Dg%lRVvM3AQ6ZEHpi9~eG}QO{U=O$4oR
zNliF!*xz^M1kx)+9rAHG+~->Q09XgH86RL<U{xD$feTSqw$C`(fF*RL%S~t@WnIX@
z=@<@9&cSCcFz7_<F+G_EFtz|)%b>6??cI#?OI+qT&T~k9I)fRL9w6Tru~Yka*G*^>
zQ?{4Xoic-@TelzwB#JHeVi=829OUO$O1&P^2HV=HW?hyhU+ur}T+<(uR~~qa+t0pZ
zU=zkBL`K|ccbJuS6=?o9?H(+-3V^h1*|7+&+A4GD&133|AKO1u)*^v@B|#!(BkG+~
z#FW2>ILzQq_nhm9{_CsVIE&rUd*gqovY~M_dv_-j7_taN+{iKiHC8QNaqKAD_{<Dg
zWK`@#Sb5Y|g}GN#eucZBPZ8S^;@39_2PODZXy;vyM8OOOvqbf2ZpNQ53b=gvE3V8Y
z$JGn>Rd)8Hqt|^zm+(pC@EowhXb<UIjcIGz{m<mUond_ZfqpD2`N3ZL%-Wm|PHDAI
zF+l-i4X~Fu>S9^9xx1(%VLhZc@$mj5*fBsa-|0Rp!yR)EN-zlTvlC8O*$U^UySxNj
zf*3+cf+{Pb;KH8^H7E>&dvKUvDmBo&#`tb8PgINM8Zv}j@BjE9ARt{U$tYdl0eJ(U
z(ml=CO#5y{e)svh1>5A)88B}Je~H4Vs2C%h$-~Qw^K~PPlq3%wI&%zC#y7X=4ec$K
zQZQcvI{gvy-tCs>&OMBZGEB9SVCLWu&eAXpcU`$p(|c8FSCCjKe-8jo{l<tq>Qx8Q
zwJDs{BK!Yk;jSIG`y(x(!CST-J60-_-u(f)*NJ!29FJ(Te^UC6)YJD;&B}Cn+x74!
z?<?gO>`-lo8$jX;fLtT$Bh1{8)kf5_dvkMHJ$gOVV_OXj+A;4L=C4F<^`AXh@{{4t
zh2F})hGYhed#<o#YNCjQX)UJbEi$e}W+o;`Q-%m`pU^I0+9L@nG`+~9-I*hptc8LR
z66g%tugYhX9|E}*|K~p$>Y>$VoCSPi9-g&gt7m=CK~q~E%HK!8FFV8tPfZ$z{^!=-
zSlOwlM7y%(2<snk93pS9Zt<WpAi<;u=NOE+o=_zLAxqSNdlL4f_YWw)`gi8}K`oa*
zf?!nwff4HTf8Y)tvKh1(-T-JrDLZpeR0GdIskQ{Dk^KxL7A%qGpbC-H_O!QW7~WX@
zUUt!!x8A`aqPxXw!Aip?Y$clf&;cGmkUtgp`&R>UTs^>U^5XF~$vJ4)VN<6!n<f{<
zCMOR79EEH#6+M2++HP7!;hGj$c;gpbx{<U&w86AQ)VSmwq8IE#VJ55%!~rM884~Hy
zq2Zmz#&Q-vZUZ!^3uA!>?raLV51m%-m5#h~S<HZQ0^uQ4Bm2kp<T~IPNbcclLej-=
z0;sJPya#94>}&Vmc~=(xJ2*dt`UejW&OWexC_^X}(8|0<#0KL5yLc28TbP)TcuNF@
z3Nt|$Oet~=C2-QopnXBs${Y04ZWGk)xgCh<18E;Xle(&^wgIdfBVm5=XNA(-p8<E{
zKzf1-ns3gq)WeWJXqjMuFywp$JK?%P4(CXO@p7m@>AZQ*ADa>z$UiX<4A~43(bEKq
zOp@w+9u)N~{P)p_nHM_l2A`NhxzG<rC`^PR?!j5s7yaStfhzxiVyMd=B`GxD^RytX
zQdv60H^dG%s~9us{lxgVpkB5qh;k71BPpu;hpry+DBm<t2UK0b+WhK-F)&T@rBz_V
zP4hEHjfPbLUZmQE-krvLfkUlXUVLS^u_~|T+w~<VIHPwR)FbBe*Nk_^q{`5`57a*r
z@YUSg_jb*?1tiS5C0zRB7*hD+#eM?=WW7HFPSXE9a3k>sd^hlVO7Kg-nTYfa6%`iX
zKjW6fJR#y;{OaC6O3quaFn#{SbkW-->bB$&=57k*>ci;_q-_hI%0r_+4gBc%^z<||
z8(sWo7Rpg5ghYcC*0iBn2-ri~<1{p{U~A&dMXi5_E3W;^7hD2=a}d-)m{$jT1MLo^
z7a`$wbs8P#aep?ik&`P$AyxGTn~ETK80mI4P7Y#oXjx6ap{j!o81tFT^YbercdM?#
zegbyi;7Q03y-1{VGV`;Hgw=ET=)G<x_GWc22~h&jx`sV+iT}(!o#j1`8P+1;a=#=C
zAr~mkPKUI9it-eOmVq=1EJQPjl92RRrROQ@I)Ew^3WYBbc3ofe_4G);VH*Qx;u2to
z{MW3ooC?$uQ)vn7RdwLmvq!-rb#h3neR6<Z(lWM}I>*}Izf#JNQN!xF(W|^6WBW6b
zSAj{NS^D`%H?~NW56Qe@{QR^4T=FA~3}EMImbgd2y99f*3XbLK1GTN`1}zYA!<ncb
zsGr>8c+?lr*0<0~K-g)shtK@jSB!<9{gtNa7mz{uMUo8Ta>GcWSS3QuePIfJnYGVA
z!ek#G9}gOAR?;iRhNMwi=z{jLOKiu0wd;k|I3`RWyK^BaDN5SGJ^=Ht^SRazmX?-4
zAu(siP<;Z42&Yb+N_!>K^lN%L?D7nFHCxz(6AFC-(k{J)_zdviv3>hSCu>j3Injdv
zjIxO~`WQ@rvKNyqY%v=|@NC&(Z-tzj2;&D%cEaCAMsh9dL$LOirdwh#&mx&kq-B<1
zr`lr4!z#A{9}L5?KNrg6u8E*}7@#XpNoaGhGB3hG4yz`<s}+8^V3AA@OZ8&X0SH6l
z1i(2ws`vvJmqV=`g_vbsr;@R`3KZol0yt-<tnLP?f4~Q*WK_Qs7JO;3vZwwEY?f%X
zEaZ5$r8N;xgho&(V3_z8;~arvjPIPPDAbS*iAyjq0wn|td5c4qbpyY?zrm@tIt9Vg
z#I6zEu!oJ7#-+lqJ+}YXJ*)l0ID<l@Y>lR+_vv+yjm5x>F2`bn`5qL>`}fy<_&{hT
zW4unYp5Q;<v-mF-a64|_^;FYLyiGFa$N$wJk*Di)<t3i~(cKSvG<iwr)1J=CH^Uza
zcR6pS&8ZLcf>cT0Y(Ro&zQ=o1a_(LNpq0kL{CpwtN+_m~+GJC>xc0o^mS;9n>T#>L
z@;38t{#A>Y&YqzC+Zz#y#ea!G>;F4q(0|qz`~Tkt|Gz%{KU-DzUyJttn%??9T{-?=
zFYdoy+<#gi_rK2h|K#U<l{VOvbawP0Y|y{)hjTG#U=dfZT_e*mZrbGheAg!5`?S91
zrqchEH`#mmz=14~MHr$hRzLUVS1|Ez_Eood`}(TzJlD-MNA4z~7iemTj`i?`fTV^d
zq({XL1Zip9<PC6ra7Dvf&=gjK0SqH$POx<iFDi*F#;mv<y!!1JOwjIi|Djv=a)G*w
zypFg)^+@<J1G|Bd-Mi*yvxbBNL#=R&B!+rG#ejqadnnq(3=Y#IgH@O87N+LGA8n64
zF@nZo_*LO+R^`HXq?y&HLwD4Wd|vx&@%LZq8HD3E68Or6#4B1qzW>xFS?a6TU8Q8M
zLptp5r~656e+j24D{I_)0b%iqrgKz_cvfnJ_UA+Od$zQlO1+H{T%MO#@z(aXHbi5b
zK6!FT{p!!wL12eFM06yNABUT=lj)<DU7KJZu#w4Q>~nfyq-wl@iJ?F1VYV__pcn=q
z`d^n=>Lc<Z*-}k4vu|a2r3L%tPmn{HFR&<bzn3Z4RbufdQTO^wg%VO;{&=19%Avhu
zw@J+x{L~zY=KNLFekvMVat8~3wa&fr;?F%EQpM_~mMtkE5h5vgHWvg3v?FKq0h2uC
zd<=Rx)OxUmta_229<ZpY>eiNQy@{UT_>XVuOKdvClBh$MmS32xV_WwhUrqO8uHj~0
zCmZV`i_4R#77vIalGNdSOp|*&>UX~4Q}Wh#mek088*EU{q!>`3t@iQaQfh=lFyG+N
z!``8X8lP({$IgBqx4cMv2wrlkCsb+-3=CHq5~BU6E57w`j35!~%Hm&7_$cST^YbGD
zxYpWwFKu<L9;GyGATa9djxG&ZX~azNyOU}gN-tQFIVqB@p9Q*`8)Ib$&n!@)6IXty
z(Z<VzN!$Uuk1hUeQ$Y)*#hJM4^`({)Ox=ZT@8*d74a08>i-R7E${((-vWMi=D6Bi#
z+^rrbI;ngR<dn_fWLLqTFM8_0lZVb`D~I9>qWzSV?!6_(G`yS=SD`A~+fTu3ho+FI
zw(Bc`|5B!`jQc_n2Hp`7N%;Ow-p3p-+nAYEPReb*gO^&D4B!|#NkY=SLZ`3KH4;^=
zy$(ptRDEyz^s7oGI6Bc&@7{$YKe%_@*r~nMfU`+JMr9?Na-V;{ghaHIEj3J}#q5Z%
zFgT1Vz^=&TeTOIEN+or9&NgD>-aUKZ!Vo?^2#6a|7^$W&XaNNar{8d_|3O<&^4H-E
z4AZ(Bz=H+23su5JVYFNgIbw+h)2&;9V4#DKJiDdF0g~`}`LR(WJ`t7*xqNd?iL&d9
zd>eh14s<>}Y3MS?B$aC`QJ(SZp?%VQ+0x~~)LG`eUSIhu1j|=g1U^0~zL+s4A#P-F
zAgJ(!(qQ!W+3K$Hmov}yad>D*4K7I!#%zB*oK1aQLsF*LS=-<Kwem^#ozSmJv5Q?>
z9pflXFwnw0rypz=2+~MlZoqd$N1&j?!WA~i%b6IHb{e(A7_cExCR-w_hyzd)(*3?y
zg^4U)5>cgb`fuiah1n5C>jZ%uoA&b(WuKyMnAaK|ahp5c-!Fc3`V*875Hk#%TGxGR
z-Rbn_qAz!CVu_ZKaJ*V$`8?t6;@AoScw&uzi~EF%;(Us1^G=tE*%xPG^ylp#9GO!2
zqL#4I`}^E3HH|wxrV(l`8V%nfR~FR|e6~=qlMIV}c$nqNQ40x&q=xqfdXb&%53qU&
zEFoBO954Z~F)=Zj>QdANKDRe8hXoETp1((q5Za;TP*kw$Z-kOVcZ?){2@K5rdIW+O
zTlD_!>mTaimVmYMCEKEQ4RtHD4%ZzVgtRMjPY0?&tvL5vj-m<A5Yh9m-F~(bUz&>r
z2|txaWXFo#)Bx3GGF<sL6!ru~1QcIcS`a&N;w^~IE{k)1sxNK3x>K|~xsEwbK=y%|
z5ypLh_Xfwid*vs;op>|%tE;ng<)5X6bn;AaM#+++50Z8~hCfDbiA=Y=a9+vjVbDY@
zWxc~M^>mhJ#}chNAybIT6K&?}$f7QlP8l*bvcx2tE^TA6W~Hb;OzjX;Z+JAze2Jp$
zxo=QT#OV;mfs$1ZSlEs4XfO7*`!W;mnY-^e#JK!;buZS1|DH86bxr*j3s{noS&_5B
zkic`!q!fe<I3IkBS-F9<g|W^KhMkUKrgN|{46*wmMZIx0ZQ-!B_88n2LpGQ>8h0^B
zAo$4$4~tZdu`F1?b!oakAl1OA)<|gGX9(BY^W+lMa$#hI7&X!a(xMB%Rl}HH=7uAb
zqu!@YNqvdR2ln@uuY44_wSUH3x;U~>S1L~|wur;;HS@#1qzgy5o6dyniPPTJ$VJkR
z)3{*t_^0%iUtLqMnJ#kKO?V`Hbl2*2E3XLW88|0IutqpiC=+Yfauv@Sal>|mneY{v
z$R6GAXx^Vf)QT~e2(e+pI*fY5EPIECwO+qy$GRo-6QKl3g2;Muf+VZ1Y8T5_Y+l2m
zlh%J@ac&TyvK#5?r$;-^D!~u&wB0k)Qz@!djqn#znbS79_r6r1l+RdGNo;GCd@J|&
zj*>&B|1^SSx(qwla8r@D=5SiU!J@PEM3vWA3z17BaCc2uLgo2vQ?=3`ysI`-92d;Z
z`K>fap5$DWL&7{fb>-zs4Y3PN9}?x|-&}NP{q#v^H!ki_<w)yt!12`=TQZh}YL|s<
z*xA{Uv}M(t%GlYN2;D|whTkcMKC?d0l}w9c6$X?!6`#bzmR+XzLuA0_5T<#U#Fs5h
zx697=8q(|Sy#)o+Bhn|OKU-W`ZwxL;@b}fMJ+Or-@S#LsQnbvmzMA1(Y;0`Y+_u(_
z7I}|KN`5TctI`*R#X>5AG4}%xxJvb4(<eqd{`gdU_im;A!R|EW6vkziwT;D3?#Hd)
zD0jwbS0otjuRXiEH0YaumK|L^wZqE;hLO((mQq>qjb(si2CuK?v(l+ht~!BUmYw}2
zZzS{K!`6cq`@R<6FkaCv(}qzkU%ww>@`zqAY23=-D$IMe%*W=j)Cw=l;?nF}ppZ^o
zBZjdz8_NUQSB^!DG$zGa2WTn`#wljnGrf6T=$oi42rfkSnMjGmhTTg2z0==^^fi|3
zcm-e<g45i9VTZlP?~zgLXStQ*wx6HR<Fv>4j>0r5QI}~Ph)WZuq+R%H=eqyaiTuj_
zuDZJML*kp(EG-OsQU2KYJ?L_m8lJ2zEpVMyf&`TBZv=)#=h-0W>@kEhLvR!xN^gKv
zX==)<^5KEd1UJ50<Gs{_k?F}<dSr#?AyFZ}r4CoSap<iSI9yUrRPm^~+RyTsL*&|K
zQeMdNnS+c6vR^e{Jm1I$(=WSTXToow#f@e04<~xC2_>CI_w;pLVC8&VEH1%Q!LW6!
z-Sz95Mz`Gd3VPP`iK|&!&WSkEf9sq3z46GARxrXIJ$zX7weN!ql$Q}ET_501ATF7y
zJp`9zv-%VoQz1e7VHj8M%bd|sZ!#C9`9+?`a$FqwR?dt4>ZD+*&4xXJpI!;Jz2VEe
zp~P}B%9wj){Q1_0J49{I=0#2PFyFSVINxPvm>6?`XIL##TP%EF=-~oK++gQJqcG~o
zVB<8;`+-Wa?=x%%KSr_etGcf&y^4A=k#tOFZ8y$IwMP`gr1L|SEsPTZH(lG}cJ8?~
z4wc|oQRA^tD{S%79?sLgs~VVCO>^_XofX*+H+U}>|0H}dBVei~RRC40bm;tPm&Qe|
zYk~XB5y2OQ0z-3al5$A`XJCNgZmpz49fwY>{wme-Cr)?f9W$4!C^7nZm&ut%H6VPf
z{Hhp*lbQ-e@N=A^3htIAKQO&KC;OvlJ}Ki^XNl$_-aW7c{Jp^6Me_LkoW42jH;xp9
zVZ2rf5DwsM(Fze^2-HpgvTOTzGU7Nvgb;yml+vY!7bd$QbgG)X<KvTVTsjRQBREaC
zi5jEw3T)bqvBWDwE3zzV)iB%$3rEy6&R!8dKJC<8Of<B&-ua{JdQ$oPYTxVM0xWyE
zEF^Df(~ocj23J&vZA`Qn?E0Ag^uiG{Ll$va?Pw+QmfhX7U#upS-Rtq?o_YD=#awUb
zEQnn*Sc_0cLM9_^Ki~`REU2WKVkY3iR`DQe^h<6rYa8?&ure3A?l9H~Yb%@CF*yyg
zwI4=xp2O*%FziG4d6(D5H4SiDc?PRG5UPt5yt7dr)|j4EiI{P|GNP7RMKdWU_a$q_
zKu3DD{wZ6w2BB|J(ZV7LQbfobYRdzTHHEe1Uss2JV|gI=V9!LVRCv>A+UZ1Rw`cD`
z5tYn-)WU*9@vA4zbO;1mnHub!e&NWDXC$$}gks%*(CqH=iH4*p(Itb&7Dob_E+^87
zF!{Nl6$;bVf!$`pTbP2AqBN>54Vg+<|DGxBgk9D2P$tGh!3%M!{i8<jYcqRbYTHb8
za~DzW{sga?Up=GNJe2!8IUl<vWUc=M+LK^rKWs~wPl660m}>@I8vNCB^3*caRJJ|W
zPANi@B6`X&Bd7YD9;4nGfh4zk-B)R`d2~UFk!%xZ?lS}&FR5%OOw6kBkK&EooWe-r
zkj!!lTV_)f(b|9D_!s9g_E6NsF3%amw<I1Gw0aS%7%~;}L2vEawOd%{ERu+KuG>|u
z4Ag&r=iLE(A53y<=)pGQY#+OukPYpHT9m}$!#Z$xdR{1$xHY-O2P&3%EH8+e&gDJV
zh2ajO<l~EO-@I9oty7@zv_RG>{IOe21WwkJ?U*SX=I8%hUte-^vscGh^lB7P@A(~E
zj6I_<caI!tf386|XkmMCqwZdo$%tWLA>P9WrcQi~_rEr)PO{m5tRXhlI_v!wrT|?o
zshNGrl&d8BY!!)vF4T-3W=civ{VT^0m(1<YpLsYfDLB!4Z7U;VqYNXXd$>TLm-KPF
z-fu8|Ew*WoL2nt{^SFs^WirMDK3}yXjm^z{FcK!d!Z;N)(~;BM)4E2to~xg0J=mc|
zbZ6gf<~sWI18$2V-283HC`g5UXpu-*I+DaI&pvftn|*-OC~W*^aLBHtqQ5U5WI1Mm
zlOb=~hdt74`rT3S(;)^#fxg9c-}k<{@3n_A7a=pyOlw0!-O?Yuy2Ph%DpuIq%Gb50
zflB-}E{FsRe~ce_c}donBuG`)G&Sp?2O_t@ykin43AyNXA=(vHp;M)hR)H^*Vel%^
zZC;|lzi=Ql3v%Aky12xt?}K^@#bK3cLC(0zUAo`(VeiPfb4*OuPHtfGkn0fo{+%UZ
zKT>u7wuD|*E7M5qgZzIqRRZ%hMb0)Zg0|bJwk4;S-TehuvZWnT!4de<(vpOz0U!a<
z2fphH6@sxoJ=UdFy38+>r4r$YON>*ZcPYcLU0gq>XE-xSrB~#9Yr1l<!r%<VEVPCt
zQ0^1>-F^^RewjAQ=!>s~1)gmeSLsR#C<7x|Sy@o>w(J&tbnn%xAKhgY0%sNu2nl6r
zr-Wdob1PWxoaJ3_w`NpvQ_-N&nER$+17b$#P9IlaB70E8X`L$sW|q(=_nRKyHto#U
z<{A09)#X4m_)XJ>LGz}t>dSV8JLT6uI+g~3#N!<=^tnD(ov#hJUGRzV@rE!;+4+|e
zdP>t}x^Mpskp8CuM$c%o)F6@d>yPWu6>VCDiS0H^N$sSsqXXLWLH<w6@c-F-YW3^T
z_3i@vLmD+RHBIQ{`{Q?-X{?}d0cJlCV53sMQgbI{L(NB3h-qyuUshGMdtd+P*{xeA
zRtLjH{LCwR_Ur*;sIB!}dwYB2<HvnD5|834!!d=&$aUlT_0mULsWT-rVu!>ucw*LC
zGI#mlDHJ(|1Vi=)g70b|SO3JiU4&(#iv|~x&(If<G(ql}nKoD0Ck%fzx^L4Om%KtY
z;O_2QKqA*+ox^&E&mUfy=Hgaa-GSq-*Z}Z%u7;$!p0Dj{n_JuFs^LGobDTrjO!WBi
zhVpWKt=tpt+1=Um*(^pEgM(HNo^OYOSXp5LVP=+M`S5bd&pW_(@<(X9`eutfS;Nik
zc7A^3Qxn?HB(EYob=wcErPh9R_4N}Csc9Ku=yQl&mDGMaRGID+<GERTRWr-u4j=!Y
zT`RjUT`~X>1^Zant_TsEScZLPR#ogb9T940-}++ZIJC=MN3QoT#wnhz0D&RV7nu~0
z#2k;u)ocWh|1Q>|NAQtHyJ_>Q=M<Rz18px`pbnw@w4a{{!{pdhGS949hxv>{APS11
zK+IGB2I2ZPeaHFp=Q$-U?Z-N02o`?|(8ixXe?H)rOTPi_i83raZ$B{whdjn@;u@6R
z9t(q~UG%dPl5%r9Jh`bUmmyrb*A0q+1?)XcB|mqqyq){?9Z}zzvao%4D(6`L^b{@2
zHg~udWEWbRix-ouw%uV`=sexcXY+HEU}58>h1{kjT=Vdunp$4+ZB8PO!+$M}bpgdT
z()~t%=n^^LlYrD9cnvheNe*I%l;I(GWFxuEb)4r-S-f+Snhkz8+pgP%g@tz{H{U^e
zXIPT4$I(1fYRCc$F8iPPQLvV`p6C?<yO{Zh=|9kNop~ggVpI%0j!XiVGb$XgXg)ps
zh06W0&$iwCjXTBkkvt-ITt<dG{e5f<!H7n7v02xon-A&gwg3vu01;IJ;jNEp@)^6s
zt9Gz;Iq$p;v1G@-5@mD5!De0?ck*OME5Ia`xA3*@f@FL;T<jQl{k#FlMuJT;`{AGQ
z{WYAU?X&9kTeo>E{2oi=Jp6oe{)Zw?LY<7Sv2WzT7)XQZwF=>dZe}MWV)H*=(gMa?
zJdvhn(OHJjAk+|ser{WKd<1iG8q<6TZWCn$1uYSoU|ZT@@%ecqt}Lzt7qqK1Q)DQ;
zT@$MzW<vs^qN02Dpc3<-xeEC)(~eis=Jm`H;9sO~Q%QM&<Sq1O-ZcI>hlO^&o%i0;
zYRE*I>#u2N7DI%^P&w4W=HuUH;dQ+?5MlGk-1-cgA=a&OOZKtx@m|MGJCoEEO{;+E
zQpAnRtE;t$`xp=Xh5<DTGc)Thh2Jyop<aCdVgVx=#-$+I*6%rW4@TyiF4sV^n4OxU
z{FB1xNv{D9^@)NlH$YWM1i4iLaYXSnm8UOv$>j7jlucKW^g%ZNivRA=K>_&_@gFBr
z$ceDtRciPKq65UiZFYTCiH1E>gI&9i+D+BPE&bbhex9E{`$X1V2d)qa#|6s@W@up=
z>%pznbsy^KL4yRpW<Y$$UH)!TLOEs41HA^k6oau5Q%9hygck$D*7wcLx#)#bIG{Ih
zm>rEmZb)V8M+=(FZM}lS>vIR3mf~d`HhNdB57`XI=fPU%g{d~=S?Tx!y3kLh{Afz)
zN>vw76Mc2<`!kS(5*hE{rhK@+I}OA(Rw439YTF+Or2z0=enEk<ACk{RP^Q%9!uUYN
zj%J>*#)X4pK@`D6?1v>J8ZK?s5(vKwMo$fv>G15&G45EN8{qVEr@Tukqw%qXFYvSM
z6w$d1YUt27*y4N{Q2l1;4Pm)|`(|ltn<V!=S#vLP!iD{QWtKWZiqh63d6bCzJZ0Si
zEF5WaGq8@ay7Wm8DptE{dAnf5enmm^+)&DVe|;&C7vM3S2?+^krQs(XzHfy0uPo=y
zvxbGs;YxnqWNmGMnJLk0@OsD<cK-2c>4U$n@ctk`g&<N5$~{w^*J=0$3HYA9Wnfy*
zf|qk}EY7NtAIhCw$7ZTw39)VWLdv4KL%hdtn{E)L#=1&ZI-I)F{>nhF1HLEy#*M>2
zl)|9vxFZuO0bfnTQeiDvwZ6EOgEs{q$XV(eh<G3&YsR<%rwb@_id=d{p44GPv19FP
zK<o3$u5SVRG|3vM{?cvw>hgf!h+(@^j%e*#k>SqtGGHz96V*b`p7DnX&nLf15ky6U
z8VK^OmX9A{Ec*<}gA7~YrhzP<;xLKiEp}83I>&*!6CSW(haP1<a#jP3H{di7f?oo~
z2U-U_uUGq69B~SsdF+V$f?{R<=}BC|`Ik9=Qtw7vvx;@nA1y3_MFeKQJ!n25VxTSY
znY{r;x>9!?7@K$R-v{nB1I-ZD$HT`8QGH)>Mc}$bQZwVTGFY?qM9JbNrogHaT}pm_
ze!7kHsriT<|FUsiCZQ!hdHS@kk5B0ZT{@!&rJgsvywVdB6S3x(TZ;8oy(c=6db9pG
zA|<t7vE$RSv$ItTzo3j7GD&2Rc(&XF73zdt=^?5uf#j@={H<?bnGJMzAF%EG`q3ia
zelP?g{SY_VZbt4HhTpR*hBQ;r+J?PKZl96h2uk0^jT@H+2`z1{t)@+nRc&F<bwfDj
zj`709)S@j<q9#l048GCGz}lNkc1>_?+O{pM6m{baX$GMlVW;45^3NMps4{}sfTUP)
z!f~h}s`c~XGS)SULg!w51CtuDwK+{2ptx9W*8P4kW*Le)EIpgH>{H0Vh7OcZv#z4z
zw3Lp-*;L77zL*n_+Qu~H81G5Vt`p{dZnBFuq_8wG$uQ;2y{;D&A0I^<^Vq;&(XfAK
zNWCuhH8r#Xxd)Rlv<Q@2#-w7Ob+J=Z@?Rbv9`}6y!nZ~_+osFe6s)?7nR%6ADV_{b
z7*2X(bL%Tx<5TT+b!U}cI*;o8^Ut?Zm$>M<x;m5z^qJ6o-Mlfo=%BuC9XI%Cx-^rO
zew6WpSGH%K$)3-gwbxSA*_3HqT4K|_jWC~m{0znekylg-z*2t=RWH#MY6FP1;9O?L
zf6T1>ehesW5bw_C#3K?D#^?v#7qt7Dl`p`yLPRh7&Q{yj7xm@kSjpQMjH+ThM{(Qu
zq@<+ytK33X(nyzQFT!|{jf?&rCZ5eP6WwK}(Q#jHN`5QhhBJYnq60Q+V@-N29?{LO
z%CZPree}M(+-%tD^wB4)wbjGTjC#D3pFa>@#bv!o^%Ws~-NtPIuwrnq&d;<9jTO(1
zA`29cGn7g$f3Q3B3WsDY=y}{nuFCHoZBDa5`ZrtAb3hfK8^@tzK!p_4fW$xnZ11_5
z_6}gN;hKq3@P++w&jCJpdtv`e*Q;Z_UgF@v|Anu&j;b<`+CWW0q@<CS20@UNK7@3m
z2nf<rA}uZ50@5H|hY}=2TImK!X=w?irQz=5eBaHru7Av0Gs7_NdCxEQe)bb#5Ut3g
z$Y<c}yE{j@yY=u)&>skbGoNkh9<dWOgOYTz(ep9mFvv+fzrMW+J5^2n)z#yEq3e*Q
zR}S)T^@P*4d@^WtS=8xWN7hG+U@Jnl_bA-Z1re}gpvV()SSjAD170sgjy-OgYPy(&
z!A!)(`Ds#O;xE+2Q3b|yQBnDzf&d+Gu0A<)Zg|Z(7y^Rr5qQ=)pZ+ab?upr=a{~aT
zv@w}x7^tSGoO+$VOhR~+lp3Fm0^ly`v4<EdI^$gQXYu*@=1^?_V>Ne^Eyd$#+wfTn
z$fBVlQvCivW#A4NXu~)ArL_r|hhW#7F6c1d6_Ww7(OmcYc}GY7pgaW=r4rT5;(uS6
zf~YcFH6mUV)>c*}eLbB$OiO^b!gW;Nek+sq5Hx#tZn_{XwqsN-1PwIMzzv=ydnlEG
zhll6UqgvVM=2~LV{gRL*fU60lay<gS0$N%Ln}jaF&SPU25u?CX=9m3QDtr_J=RfeM
zWfL{Cvjw0g02vG*#>VG7%n#*{Hi2`?{t6<ifu;_=VY;thZ$nrUB(2qG7O2BM20=$=
zF9Q*)oF6bmpS-tq!pn{?8%PymqJ^}|M(E|?T8-*tl2d7ycZce)w^s+IEVApNcPJUC
zVQgaE8MP!yo%_k&)PRYJNxBFmA0B@<k3nxGr|fkmAnVm_TcS$))W9IUlAuS(5EeFg
zz|VOe+MpQhHOU@-V<I=+qd_90lYMvo%Sh`l<be)yG_gPVU#jkg_};nZeKaq0?h`Ic
z)f2<yL<3p(woqs93WNHb^pRt*B6|xrO<XM!$xPPxdfwMx1T(bY4+Wjt9#BuaKrmHL
z4?>=I`HCLjdwPlx0ZXrkil04Xc?b#|T^$|dzPT8L9|0j1i$uBqBiNOpv}rmgG4us!
zY6b=d-j_=X`N))eTw2_PtqRgpib_iIal27-{WT8dMIvB?s$W}a4sJyS&ZVqS83Let
zrv|bQ^gb7(Y*gM(_b>;5UIl^3(!|+a`abwO4}}h??v`0M)>6lgFY#{KnVYX>WY82G
zttISUyM7(&@YLh*`T2PegB|al?@9Zn&WQ2n#e4)KYpt}rhKd|F`c=4l0l^2GSkPwY
za?#L;k4dD8XJstKhsQH(z#X7M>1-#bZ&PJtVQzjp=TxS3-4OIcg_;H2K*uk~0lgDa
zy>072U*OjPDtPX*jW<jTn46NDE=B2uY%VV(A+i<*j(Vl~C6&X6zo$UM=MG+D%xcXu
z-QDtVXo~;IWxE4xR1vp*IE^N|yN9Ny*{i+0;$`nZ*a8s|B|g4|u`$dK`NXQ9n`(No
zu2FI)|Iw1kwPY#)(NB?jo{;0OvKxg^04vb2Yj!HNch5$T<SQqwn`jhVBqfq6NXXs4
zzHU(B)SLJnVvK?6?*Jv=zBy2zd%+G*^yHT$3o9h6qs{_(dtPo8P?x?+R{VIv8rKVy
zaVG&D9>uI|x4-5(Ly{F{O3=j7*DXMXrrc31YgU#P1eE@ns(uWyGyq}$2K#H5xxV$`
z{JPCWYVQxaMNgaxsMl54OVME(1?WyXm~ewnDXjAnSg$mP>SFE+hN@W^kXqN;3^w;H
z^h;yzYRIcUdVA>&L?6cxmR1WRN%`;!#|bHUer0O{jr_T?Ou^%rJcdsosh*pIc?Aq=
zOF>gS*LeOukNy7rxLCvo!u_0qpFi{0p9R#`n3T$OPuA=WfX2VI1E$G>6`<gQQZ2@l
z)wBgf6^f~kv{;=WDEE6Go#})yOYG93SY#0=w~ESufmafgW1ey$plrHaj7$Yb7Zm#A
zz9kV-3|oEY@85W7NIB6+GpnSgcb=_vs)HmrDk>`VBG|Lgm%sl(EqWU=Ou>@AzH4R%
z3r@IiZEaoP2j0Z~K_1M=LEYA0WyLQd9Eu`3cQ%X&(5K&qSo7bTim)DI)R}9d$uGk-
zNY4{?b;vG2HRoMxlyTd{D@08#(^o}Pa|x){PA(q~_lk<&Sq|l_fwL6coM66Yb7f<;
zVG1;Da672$^Pqew{{9Vpcaa~;?9>FjYK4Ai!ZmoWhC&!DmB8z5poYh<IW-VLXYaJ}
z1nB;LH8s*kM$Njm2kPqOb1>#_4<{2cYBjHI1HHWN*z4&pJG(vL_u~$_J2D$J*b^`q
zfSwo{743=Z6P_{Q6dxh&2ux>KG8;hewOa|!qhOjYY`5SD$t&s&N4cTMS${ARxcCc3
z)+ieK;1yny0`!fpARC6|uObZm>Wc<AA-=5H5Yg8ru7A?LUl_aLsso+U3e-(^{yP3H
z=zpLnjmX&Sb}UtW|8aZ!b&|m7_q1JK_rL6Vh~Nub>A&HcpVa#}*zOhZvV}oDaqOha
zB$a&;SaLpo?9OlsArnN*FA~F4yB+~^o4Hh6UvT$*6p7*gXHL|(FGyM+?K2+c!Zp-g
zVxejpMRD{`TV2!rlJS0$szyBF?NKYQb(8mK0dB7?#&X>!NGC#|5-A`b?z3NyZj>k1
z*46#TW!I02FYP?qdiVrB@RcjcQZ)XCvJ$+E?Jt6;&83JlQ?p;A3aL#Q_~$<+bpWC=
zw_=R#H^ncfK^^dKY3o<+4&NJpz{?BKbhN_4$75Xbf1@Td*b&4zs9*TthNy1K3;IIA
zN0a}A2(x$;-2afU|1->fAqpj!`gythr!LD1&xN;_;@=Eb6`*vWd!VM73kzNTHGw%2
z4<BlP=>YIq2ngQ2Q|#El^;c6<gA0t4aGC%xDPv<(4%9Qf;RTHCUQB5$N7A?1+5YM2
z@MQImv`y2H3=Xm=@D_x34FJ7YO#vx81Mrs4{!TSRBzK_-<Q$ekp;X-a=GR~*G(Tph
z-EiJiU3NrLQwurkb&-LXyQDrDOqSqu;*G%sHUTK2&5&)VQ}gk)mI`xx(Bb#@A2U3F
z5k3K_J;AX}_m-wt#qMd`+%6=$#d>RSnM`OlY6yCr9fkc_04>%M)NgDW5b<t*+1PYj
zKu8GO%N4$dL$PsfKsw@ou>iQDQ3Hzy%vF5gWw@~vo8V5l`U>@H?G+V2oV9oPpWHsK
ztuB90SJyC74j_$F1Vmgu@;H(Oo7k{01t{FWl{$$@WflTIx{zX*XFcQ9L*UN9`t)xV
z_?QC{aJ)xC|4m3xP;SWqBu<2m7iX?X<>1(M*)i++RoZUF_6jwN!WPYtR2fZ{y3}Sn
zF>ieEb7MIkt{o1><T?co7rFk{*1E8@6>4L}5mKxAA9d~eMkLakp~!t4EcPDX%OJ{B
zYvLczUs&vVfa7Oxe}DbM&BoIHilzxNaGiwu9&_C;Y!otaCcw{&2MW~h;o*u>@={Wu
zGY9ytrjB1)BM~GlO>uE?W6DMc;6MccKLDt}1ep5vjaEctaik!|)%DoR>wa@f%ct-a
zXFyC+;^Uo{yGK8Kpy1>j0PBn}-O7rJwsoV^qiise^ZWf5ZmiA6^2f)=+Bef>U{f4|
zY01#g9io275|y06)x8bQIPp?KzY4%fYsAv<@XrkN`(V>W&b^dWo>J$qs_f|Ks1|*T
zGcP@z`Y#{jioAqGqh4ANi7+cGD;wKgT}%vSPmQP_iwl3|+rITIFD=pI;p5};8Zj_1
zJbNaHq{JK%5D=VTV#<G}qXVHLw{pySZ_&zVYHR-j!@8*9oFo<&78Q|EcepJB0zyYd
zcx-Lc;RNb^%B=dSPlAz!Rh=%!)Z84vE*mIlucO@-H)7$CF=h}HoVX_=e3wk{ngps%
z0db#%gakf*>Q3yJ5Rfanzj>2khZ|`I>--x<<r6(U81{66E;rtt%FNBp?bWM4fOXV4
zuKDKp3&IB207w-urk!ojIO<HbH5w`#8PS#Ny?lwRYy%C<Y>mcA5X}~C@jD8#5VL5n
zo>yG=?qw^bTq$1In4%CQc8KzUf<4sp0T<V|+0ZcBfR&}CcqP9FZ?<2MkdSa;TiW0h
z(G=s5aRbC_2w=w7qR<9u#@3!-o;OF^^I&DTpe1e8S_`a%_Km>bfNCv+VDcKgN40x_
zEyA%kfNSyWuC?&C{vu_^X+K?N>zAjKt}m^uP#S!IcH}C2eJAg=0NskFc4@gwZ5;7e
zQV=dAcV=_BFk1eFOhrb?t9>0Eb&dmyieQttut*TqeJh%gD71V^lI|A9%P`Ed_-0aW
zCa=?@BO30w=QndZH#aG6&=Vd;4KCRWQZX_xKrXoCbcB6%SSZ7~d$O)INQ_ifg%n=|
z;fsE+hAr7ML${mK&_KDXk3i7rU+tBs1>@%hU^56g-zFCO@Wq7_M{PK2??n|~!u$8(
zvaYNBzrTE`Ls%U35>9noJBnz+?^#sBclQ94TCS@FsvfX4q~no)77IuQ62JMXx?$#>
zAcbqZjBh%28Xw}xhkLJ$f^w4PP3N-fLJJ^6(+zinOcqxDB8ekO0}&MQ-*5XPt>l<=
z`7G3HpUN7+W_j#r=j@EgVR6w7=4WKgwVLPG!7~pXkCFb^@_@50G$7z6tJ$xsP+)y=
z-OH2Dy(51q$b2qg4^HK*E_FkVa=Nid{{5F((_T*Vh!LRN4EpBh2MM4%jePwoUe6By
z0|JdCgj%poobHQ}tSZ4xF=wUeOXuIdfK~^HO<OJF))m&gh6C^>j7YL%Zln7n)jLgA
z{(U4@b9|+CTz{kzAXl06%*Y@z`PVS#-a9;eoT{pK1(h1vHudx8PnweDl@;g1SL|k4
z%t1p*8I5_&+~8&s3>HWF`WE$4L&L0=5Cs=HPT6Lwm{2FS?jY*z-SqHbg}R0YR0{yJ
zk!Z4f!eu@`KCXH>#dpO?xV5c(>b^_ZOR3u3d}1k$KB~aPpnW2|L7B;8;Qm19Td~WQ
zJ~G(M)YMQJ>e!Qm4flmsTX0h`)%{A%(f0iQ$B!S8SB+M8jLpnK&q-JVv*?VN;;o1C
zs%oF52`a(dC?fVvall-C-b-UY7d^Mbn}wODc%NT>N0}M<o-F^}*#Xm6lJX!ziw_?@
zypM@dl^xM*o0zDvnG%mBh>jK(PR3l{qrzu|>^HF|gtme|ijz9v=m6j>j6C}bF=7TZ
zbNK$6g$tsdX{;{h{pn)1#>U{|tGkn#o7)C%6CgMYEE~^NxbYXS3C_2mV|i12buzk`
zF=yTo-PYAx%=D;Ja{4|{4~n3gQx}&$LAiuQL{x=@6jV8_NxvLCgjW~RG}4TKeN91a
z;I^j89+`+juR(KfSp^B5@9dW$YzrO7L&r)N!(S<-78sfYrdrlnU?zuX18pA!+TvIG
zrH<Ec<Nn*$t-^zeJ2MG9YOHYx>=s5<zSw>zc9Plma4C=^44tZM&Ut4%uM;Qy^&rAG
z^T{Zd6JN;?@p|aW3K65O|0k%uG%tC~<86qALj3cLuTo+`3a@ETF#bJ%u|E$N80=@L
zSA~mTR`-0Si9HNb7}S)L`{Xkh^rS$O(Grmj8}QHas3H<=U$>qU1Dt4gE%~ISv<Rrv
zmwvto8`#?BG#M3LSrun2)OF$wZL4}8Gc2%umv;Y=i_18xOU+5f$@RzTcM~*+qEqQ*
zS<DC0z;K6+m9=>nfQ*H+@`7S(<{^k#Q&VNbj-M(XQ(hN6RPQkGcMQE&Fs7(c#qGfQ
z-8W<JwhBQE+;D-7arN(r;ho^)hpa2`i62-GW=I^pM2};Wyp}WHs*5#7o-+)7Kbho(
zbEp#$f&pmP$6fuH-N^Z|@1XvkOwG+rMqa*<RskltZ~@(_;^5>I<K->cJoCK<3xJ8&
zmh_dQoE*z7=}d9#TTQYuuqdTWqM+~^5WD=_ba{R&Q(>zaie=H)Kar|z9QxrQ5fKFW
zoO;0*Yx(It96+Q5A!MDp#&7`nULU^#ScKmr1r`}DWYW;9_8HUA!-l5g?u5=FHI?%E
z_3P`pPXs+rDE=xPa+m0yULH1G?(SQYl6<dmV*7ivqj7CiSl<AKe}JaYm=DM}ZT^`3
z{vF_54G4aZTQN6X2FBMxf2sf*TMsy`!i}x4(Hx0NbMrWARp3-2<}BotQ&N(o-GP)5
zc!RXGzd?C#X=$1K{yprgA+m>g3oNk*I#s(V0(O-rvljXNsbR??r$lzo<Kz!^I<P)<
zmo`x~x*yI$@CW!~9Im94h79P}zj2*wY_YEq78W-7Q6_;{I~Y|+Iqwi#(bm=mTkE#b
z(PsskAd}W-jKQY(!Ovct{l!Rc`dq{vXQ8^f+8ojpAuLe9<&Un8w{lJ0ebKmdgEGgp
zb*LrW+}-!LE;Up5?zbIxb+OdBP>c6MD-#lou`$W3XO*zMz0xPtbXLAhefj2kTrcF8
z8~2}Xc?&yl24`e^zBWqw1Owu%f`j+jm{nU_^)`NRJz!>jAS#NF`PgkeKYeWe5ZWnH
zGQp*<KH1=zGOEYLy3T#4|BGF;jz!s*FGoStPiQszJ_v$CO$hT&NPc2`Z0yp~5|!{9
z!f*B?NW;Ue4%>-xf;~UqYky|k-v%>(q#|$-;pC)tYT8-6_j}V?ty(HjijGLWsWH)W
zxjW)}b`TV0=YyGxD8Mn9XshX|s_NU<VTt^v-Cv0BdjOG-;od!s2BR_Xd#0fLZQy1h
zfBM%4oQpV4c{@X$b-_4T-@w3jGbBI1V|Ur=eT+hrZBh!GLHQCBRD%}7X_De?MLs1~
zzu#xP`ywc4ulS-`67h(pAdAxblK9#v{r|oX$v*6m{+R}rJec7H$Ub!ZCBDO=S*yyh
zw{IPoUOks)V`X)(B%pqOZy+Vj+silIz@Y?9O-nMbyrKes>lTd7DDJwexP5*c$>HVI
zm<Vod2tzyqW#xDGbw7i-#vMx+#G1=Z&df(au>sGUDKwWLzOU6u?F2688<UT*#!KfA
z74!3%I=UUs=-BH)nAFszVI;;23sg|&LtOV&T?sXuXZS)NQd1ouy-NPK^NSZ7SFfiv
z->^3`GP)z54fUI!S+pjTB54Te+SXQ)I?>jQJ6@M6@@-7a^$R-d=O<yvl`@1ZYP;sl
z?JVZ&e%_Di+1nm2jGOypoS!rF1O{)>Cr?UF=HLbaus?@@9q`&Zlde$kUxphXVT#dc
z6bSc_p?JC&X$7qMfacVFO+Z!JFzH1K6od3!<`F!fi&P1X+WJ!^du%>iXgpn`P^K@k
z=X9Pdp2$A+x;M^ivmT$KTYH-|{pfD)`QtYPtTj`~Hyh&bpD!*dY$UA{7@S9=wH;r*
zS~4{JP}PnIN%bNi3bkBiBjGSNxqJ3OVCOVW89X2Ec|CsB8I|wnI|)Q?Dl&`Je$R(y
zibRVP@wgZ-DJeajetuOPnX8=CWF|E5tb!rhjSV!k&vuTE!C`frB1H#PBKYOYzySp3
zxb*n=KR;h^#^d!2=~dU8vFf1-W!HGroMyOJ=hCpo$|wzI(GfA;!iqzh$nTkQJD5z8
zH(W&{d*}1tli|i*K+CY&o5a!wVbJFj6(p_V!A1$CrMO<9VPP-~civr^=<K9ToU1S&
z2R8_>!x_{x<IlmkdGM;XysB7lcXt~9mJJuX&0OQ-tygeFRN7LLQhMGb`W)KrH#!d~
zcLWZU7E0m1KU&Ire$Cp9kmfo_Y|TZIa9XY}F1jB6*~*WbtvmeM-`_twtL%~Z{{3uy
z4GH7W5ciEjCt*`m)dw%I!aN&nflSQJ+0OTW;oGeZ5sftN?(V|ikP|@@YL=Ar>?pcX
z@+Cxtnee*qe);fW8fIsfRUvn%3r&n}A)<eSS9jnh<^u7xc^J#{Hu<fttRzQ8<!G|z
zR%jQY*%)1p7as#yvjIh4&Fjn$byo1G!u4L~@$$Kkye|Ov;G(6a^dD+AbJyerpNRrZ
zVp=ZX-qtB3Jm`JQSXo_tc`z=?{Dw}%^3_LJJO29hpWkTRER-w8`*$_1`G!7$b2-t5
z{`cffnoa4)9sWT<@5uHx;lKk!jKE_`Av6evQF4%5YFSOEzJ$x={M=K>=~ny-m`A<n
z8W252i<5+zTv^$RJ_k-V-(>ptcjR4@S2MtK-t}PJVAjihcJ6{t0f|-#_#ze<AHdE?
zudaq>rUgj$xntb5F7Ceu^LHMB>m6kHWIvj$tr9bHd-DaFWPb?Ko7X}_6L2;^9Jq~_
zkp9T&Y<=|dbilh&%JZNgzqVAjTJ8fi>5ulQsSWTDg#?(_K-9lc$fdL`;VVAEoST#5
z?y9vhTYQA~5pbwXRTJ}`q6tELEhP_+_y5ff3kob^LK~U03DCLKW(tec*gwX7_+VD-
z6Ny$);ShCR*^f1fCC#9?!vDWmz{8PmaAabi?S0BT-V>u1D6^H4N*vRGyBjb|RT1Qc
z+}t5duBP8ny07+~2B~(<$Vd}PkCdx)ExW=vYG~Ay9?2YkT1#8_!fRr=2(zJoW~Qq9
z`A1RY#n<TnIZQO43ot*fQA7$S_3AM`bZk31g1i!Ay!6WMxUBX3Z|Jyp8c$!{WOavg
zP*zs<(VJ~jR;Oi-0@zzy=$7B>X@l}Y)hiVl36OzWB6v^sZkW;;TYRDZjcR<gx+kmd
z_VxAUDY@ggDk87W&ZbEQ-u_X&H8@$dh5;7rH-%3(U-+cGjKlGV7Ww%2R_uGNLL)Oo
zp@XcSnOWY-%F5VSyo^}tTi5_d{o|=QeIiR3>Zk79Q_WTj5f46syM{So75G&`0zVdw
zF`t+r`!jV}<D_ri46UqGgh&83HY{faR7FB}os1mA?ni3E(+u^3>6zzjr%KPVlKqa%
z4QX2<OG=!~%=lP;0Clt1A9cb?1wQyiDD;U>TQdh}+=k>iCzv7x=LG4`GD>$%%>Mm8
zNm4=#HK*vFy$`8H_A~TZlW>c^ZS20A_+K4{@TSpBKqunk8!N_EKM&FmZ49OAp`%6B
zXwmv;Hxaq&s8C}(-W$J)eto+A-~ZHYjq_ywYc0T-fv=npCXWA)e^r1N`grunCbowU
z9M@?dJ<_2ml>1er-b92t9fFZYXj&LI@4=+7?Wn<|%jKFHwlO)X6f+KqQ~^V_beKED
zWM?-Btaeb3gKPXFlg{BpDDjvJsRRXUu3o(#beoKsqr&T)*xh~Vo8M_zkN4$yH-IS4
z8)L`7oCg}O&CI0j<wZ73mVQlD=dT3*nGS(A&qZB5w4!2oFjJ-4iiD;=GNi_NsnhmH
z1YG?P96wraiq$IxK61~K1@~^+C3&9WzziMul#dt~Y`$mZCjO{*%?}G3hDt8l`3~06
z@iEvJwt^X+p4H{WJ>Yeckv)S-B|MyB;iqct9)Kt?w`=Rye)h~L{q$g?&D~Ap+wI!!
zmvN?MW*>DA9i#^!>DG;%2DSR|M~(IMsbCFZC@-{3>m4umJZ-BC%y2r|4w-GJQ%V#5
zoFTr`g3E@56_;r67CjVE5CC_&otL5E_uo^W_-)&j6CZHX=lHEWxrK!VHpT$4_Xs+e
zIsc&u?G1?vIR=0NCiaxqrr_b7U2NfOW~G<;#KKcl<L2e%lhG(~<;ir#>emd3b6`~=
zYhp?pPqM12mb0XLz)-pM7^YrS4>AV!*9Hu|6YlHY*DpLrm2dpSGE%MFN5(hZ>_;~P
zB%w#+_dG#4nA_HKq2n63+rVjjCmoXPIU(+M#<V9Mo>Cu7YUt<+JDOW00Ympsrpn9C
z;>g||%aYy$urrGz=p_loG}WG`X9G}rIq~6WyEQg5iN&c1Q0{1Q2sb58T%Aj#c*OUa
znfp-6HZ-KFl25&JTpKFzzMM^Lmr+|5vR`V260(-xhkd-hraD8^M&5x*O;Ff%*V@kR
zQ&Q5zYy-M^ZzAj1T@jI#zSL7YAhY(wdm*{t>m+p8-upXMVPj)+13r^A4TYGO9yt5J
zU=t5xC$r5DeJ3#lmwp=`%d9{BGJ4)ZwLnw9$*W=0!^$cJ3X84jkhaRErgU-CwluNE
z@DEnOF#h<FLpBh~t;CR@{*u!$_zmglG~pH#n}g%Z5gp;*Rc?VNEIb{3D0;eiSLz#7
z&divhds}lVU>{pisVy#E1eV5ZzlJN<vSScc&UaE^P>#j;K1RdtZA8=ZP%h~XORE}t
zxH#}oR@1#_9S_zaON$Sh3)jY9F(vJ`_k)>(QIq+m?dJXIX^P%Y6%`;?Fa=DYSW^fi
z{&}q<n@|(X0MT*I9sz2wu<#y)SD2_zAl1IIun=D941{B7H`?1~(z#7PsJg}H-7)N%
zK0CZ;87tDNAz4NG#?EhCKLz{;m*F%9KPkWU>GTU8>|^Xv!al4EV*+{8%=r}Nx|qn-
z1U@4;N-R%)DVSVG{|oNj*aVV+!Vyw#>mzWb{)OQ%u2w5h{BG_07e=`EWfR=PhHqs7
z+Jxp7ATTb@H@JU-@;8uw;rDN-=uPb&fuOfD%6z5o^vZCY<-gtxY5B+n2QoRs0|IXI
z@-Q(y&fMowZ~-J<bNlQp8EZY}A(S&)qeVrkZp0~CmX@`ZuViEbX;W00387}#zL&7t
zmwtH+EtZfY#{TXu0AN%B5_U--+kNBi9+CppHY*1Q@kYej+OjReifJDB0vOd89}*+4
z(M*!8vc*NdH<$2f9v?>+d+G5#%M|**h;RzJL4v|O4pst6O0d~1{kaNOTTK_W)KwBW
z65-TmFRtN26cw^2d=?nGy*k2yxPsO;zgsPEad9n@faU^I^IWHmx5s;z_xk{$_WE5l
z0R)D<L)(M#rVH$Bg%6Q!z(2eMnDo!eil||;!@Albwe8jlK+bJNneyJ9IdU5H^~o-q
zq`NaN3U7YP!xqeH$DCjh6kHxDaF7jLprFVI3~-wMV&@JGIYR9V$Q>!vLrGG=;|gMp
zi7h>AYIeap?Vj73%_S-{*kilP4;@qBXRB?lx`p}EljR1E=gl}20=|U#>IGTZrLsbA
zl?Vw5H>X@MQi4N6-$kmhS3m1ZWoKa#gl70~u2gDCV*nTSj)RO0<LBV+rMj*D4o7|c
zi|Lw6X^hrpRE3D&BpDn+#5M+}@J3=@ATp2Df2hrPaI~-@d>%mZ2B_y?E(<+3z7O=3
z%-r@j_;#ipV&JUzT#OI|?_(@t58p_0Sdf9s@b%+kz%lj!v?!d7M+-HpX)VnlzO#a0
zmCgw8*T%wl3Gv~0WP*ioPF<dFHNiyvsQs?@w|qtz)D!%>x1u4ZO6rH?>-8U8vdMz4
z^p>DxfO1TiLJsP(ru`w4oqlY5d_$K%ttI;BVhRdj&@^!`#rD8<)ZXafB*{MVX<0N+
zBYR7ps;ZN8yQeD}hWS)#*r=gMz0K5E;?~N_9Wp^emi?dKjDO^AZ{xLg+Uv$U-ysr%
z*f?k}A={NmzVr~k229?-ur?2g>}+l}+WcV-{#XyZdlSupQBq^r!l#(MtluEtR2^Vx
zqSy=ec+KFF$(l@zylUw?K;<YLp@KDN%gtThP@jycrKPR?qrN76g(VwK1lMgE7)<FQ
z?~LpNZ>R3%_e(j4z}sXXnK*_z@%9Krd=TG1Gw=6Uj!_||5PtLW*PtO#j)8jAV#K^d
zJ2KPgN#G={t9v_NjqS-<@bN>l`g%z2I669g_wF44PQPdBASq@JE;NhTdR(|ls0avb
zj5SVbFysT6N%d<98C1`S0nXaod|_!>cq%l=!m>8H_M>_6YL+T<dByUmb!c!Q+TzT&
zZ^V~J8<e|5^Z$3Si<NhKym;d6+<*wbj#Z-@`Yjvl;-3D;Hf8GGBu^yH92_e->xfx>
zjG~6=FK7cto|cj7i06!0lEsPlK2{z15NQUbt?JzoYcd7--2TwKyEpz{$k`li>nb+1
zQ=0)Kd6)ac^7A{=riCBS*oMHTxSkHN_SEb7+4(tyK|Hvh79L8$+^7iONAnh(tzk^b
zMqGB!Ra8{i*w}I;6i<)i^b0jP5*GOpX7cj4ZUrtF!R;sGgO9Jn81wJ!9eJ6PZ$4c|
z;yvG-J5gc4a>|a=-IFI_*QhF|-PYBWIi25~CxO=!;%j(c=u!MIclihH(Gknfo6X4u
zrCAo1uPue~yms0W0AQM^w74hli#lx_00a&T7630o7%_w$GV$E%+hNQ#*)dC1R#sm4
z5FFfp6x}`H)>2tnd-NL2#+tKBr?~$$M7(sM(SmHuKhT~uG>F{HVv_AcYj)c3@>)%G
z0lREjRRh}UXAfOG-qPxm5L)1=Wb*I>3n#PPKQP{F@o#Q|KG@0a%W&AcQgzQQdwo&=
zSXMUp<%_^()6u8LZf>;=4GrI|Qczcp=0F75Ua|N-ec{CJE8zXW?q!U-+H~%`Gj1Su
zvOsNyqEP<)njernQuI{C+xv2D*Z{8f5#S`{DJDU7RFq?;S_9q_{A&iDPGgW#1;mFX
z4V44Rhk0m=Y^YKTU(Kd)Lj2e7-zC{s1Pq(stXcPxFZ}#j=Cnbaq{#Pj@aN!Q8Oq33
zr%Juv{v$20RVpn<RbU>4i5p4!;HL#O^%fl7g#Sv};53XXyErvDN5@JibyOCMO^+=B
zS4YG_*9N_H@HlzyN#s*9220^LacWtC9}S<I#-`n_??&cLe(6T$z;qEo`RNHkVfVzu
zvwwvVom=_#olmG2A%zAhhhq>x?e8XDpt-WVY}GH(_mGWEm!>dBr{upjl~<KD&hlU#
z+qffM|5as~YEoJnZ9iDo7XAW{>?IJ312*b*r21>NVK0g{cl>2*zsKRsEh#B}{)A^0
z`a|yKh`w_YUW=jDmX_xk?Lq$oGBklNauRsMk8@lZwzE5ga*|^<g<RtM*jOIaSb%jB
zShj(j2j0l$`g;9~Z{yd|_M^Lc2ht*L-Le$&ILe^*(uO3x2pr1EwO10;-hFiiFhlg(
z{x;`SY`-<@S6LZeR`w2|^}L?c*w%Jqb(Kxk(@2%36&(#J!9TsFr=H#12=i4b-g$uG
zeovu?R_7CY?td3k3zMX&ciroU`v-VPa61!PlHxd(S2#@1%z$@E6eg&k&d-uN+S?D-
zh6zr`DhsU4%;Lvb;R853I&L2vd`}khz7TS=3VE+vZDefpQHu!=aMAv$sTiNK#_x02
zUt8N)T4reyKhy5Kk>!T#NhA`Vgu-3IkvTa_K&RKpf5&-B$gTC_1ss(+`gMUrdOtxg
z2Z+q@(2y#g`@txQr$;@=mOw!lJc#6g`NXuKqTUWb#~_{P?(S~qHtrDJSb5?ma#mc7
z%8H+@Auu;J1z+k_$f>fR9Q|qd`gIW4w!FxOPG_}Wnie}R-<<Bi5Zq4nj!x$c#wR65
zaL><mW3m005u^BVGL?Q!<KVk8{Y4fR_Yh!#O!g3SV5Ka6GJc#vUZ6?{_aypgC)9M?
zr~rb~MJHJ~IS5;Uc>8QPo7NT<_J<TSa?D_~X%7$0?!7)z!$0TI*WUg}P|)=7&-Kov
zSFbqWPJ3P#h^0xgucs-q=?&fP&6~G;khJ0k(vd_|hx({$V%<f42K#@p0Jz!M;^aq`
zS#_>FrU53zdWbJ1y3?LE94(lb2-gU20kS(eG0~sMmFu$gDmV;Tfw{ghOv8&!K5}?4
zZs6=#Y4B;m{8MVWmrl@}?EC0wNhmGcKv+^f1-wY+aw8ob8JKNf<-UKPk^mz};OMx=
z;KIb#mPu3c)klgQAo#xpQ`M}cFV+*5y_++2?y|Dzu(yrdHBA&WS=8{Al$6pR7>>YU
zmX*Z;a#<DC4zta6h&Tjt7(bw~eP$hzk*#5Pq@-_&qntj)L2fZOKYu#k?;5z1Zz$(H
z$!v6csfiFVRt<mv5IQ!t@v*VV?PPAXRA>lb)c@|Cv!WlYU=t~zYad0(YW!sx=?1@L
z+qriT>y_Us2=a{E)S}uSpsTG63)_PfxCasB&!H5Ow?URMFy#vh38A4^cSv9rzLqzQ
z{vsS|eeW^O!T+Gc5ig!Ohjm&Q8dC1W#Kwld&rVO@s-ENUUN86q{pXM#`=gWYOvzkR
zkyyNFM4R>Tv_tkMv4v~Yp8GYGuk)3^G2adyMvBno7=m&OgnbD#^@4(eP}`cBufB10
z#mF^~@OaAy7$*T1#yUBR{bHG6<Q<wUkRQzIoNoS^CA<$m8+<?GT8K6rpR#B7FD@Ec
zwYb!gU%sD6s?qDcBU#|~cXTDt3VA_j#^@VX@^gc|^6(COU%<)NuNpE+VEe)SutIHs
zD0rP~UwwZR%`-&})e;7^N@DeK;sKSaA(CBFPtV%eIHGgBFs@0!K=@c=A7(ivx-P)<
zrWLJsg5u(x!Ryz9jh^Tv>_?C2b40wN5?XJ9&-fW&<}f()(F{B$q8y?L$THn=v9rVM
ze!sIL_xbbZ;OHT4V4eJ)6+x(?BY<bHP`Of4qc+{579;Tc*U@Q!dTtM>rLd*NO6V!5
zBbC^k|D0)gB&Hj@B>^UfhR2V}f}#vu=ewK<`)+7ADksZLnF@<#Ll7cwAL%P1VvMW(
z?--Bo;jza!$b0v<V~XfvN~Ae??_l{|%haat9e4`hu#k{YnX>Ewo~0id*#wNUJ+(F~
zQ3JB*=r6VLW72pLfV<};l{V_Q`Jn?Jh*B%2xf#()#j@)73y+y9_s7%}5RDB0mvHz!
z837;#;E*=0!R8OV0isqD6LwlZ1BeX*o%vz8FFh*ZgTzsoiz`>Ybz6+S*92!9UOQ;V
zoc4d&b~<@q>^bhdrmWEn&traZa#}5pty)BB(r=HunY)M#eV30X6)<#aBYcwmfa~=O
z13=wA*akNva#whjKXGtt1I@`3!~aK&#wVrzIdB@uT8U2atuK=!X?oP}AE<9iNKFOI
z6}qbI+K5Q;?I-g#i(LGpg5lb^<rpFlIXUNs)C1GHc4^?VlTnJ=eXgpKAX0vacXHyk
zQ4$Ml3|t3rsHP1(f_v|w(NeU;#tLr^=c9Y6;_B5pj=sIBGXLQ2W8TI_(IbgIz-Rua
z(aIWKf&Tt-Ki`5G4FCp{qiu-=mTaIiSkBZghZ1eTkdP(iJiMo)W4OEf7Og7#PTWsU
z*CV`+7cgiHtbPpucQi0C&>;qP^z3i8T5#33WM#iQ)}3Qnax-I?*x3F@C8BnfJm_?T
z=4Qm9w)Ntg`GbNxoY6^1Aq@=?1>`-bjju@%RR=n$XA^f7{QVup@o{T7goSTB{tkpG
zI~SL`Le8xaTLr-l2i<I(G?ueX)RD2l2x`%v7eD=OLgZ0cFh);rZ!>P_8y)Pz7?Y5s
zqyqH<DMQubt8^5zP3ePqN^HFy6*@(?As?vzXGHwSh~tjBhozFEw@|T##`wL*++{(s
zH#&<jYypD0`^b^T`L1^lloGRU8@v)so0bT~9r!2KuV0_Su?!qCZn`WDOUp^H!m4w`
zBv`*H9sPPUUNxnxCjOPL*38Vnx4{^(T*Y8N+cV-}n(MTqf?O9#NM2V(RLR2qIZdSQ
zBlIx`wep_c-7PKW$E!><+ccu{c#mi@s<iJzLYp~IS70z0ZcI8t1qmOvd3<KQ6%bU|
z+N=#ag^Y6kx{gd7%aF@MZv`$$-b20_P5Lu)FP{CG-PsWf*uaBxvt<dLr-WJ$Q@TgV
zF+}x=-C+%Ux&Hfi0OkLH+xlLv>+7RUKWQ(R=^HQ!WY$E`;A?#N1o94Cy-%mu>9y<G
zb)h__wlXyIdB1|f&DWE)sn`o<g8ljovr|1bie-P?AZt)(d#TSE=M%O5LBPI{_@;*X
z5UNWWeM_qfF&O_>55g!a+67HWy2sOFM>`yotXi$7+1h$+f`TRL*S){_mf|nrwfJ|#
z(5sa@V?{9_s|<;h-FSb0p=33B-;sWxoXw~N%An*%H2U)Ef8}dQ!^<_*Y7!777=J0G
z)z)bBfr8IgQgkrF^RERde~wc+-;Sm9-oamI<rQc6tr9(&Vt~apPj(*+8S)R)j1sV8
z0+y@xJCX0VV5@AVe7BNPuuSrrtiSQyJ}a;IqRmk4BH}+7G%;P3RF-|;6|Ab+h#0NN
zuPN8o<KVClFXyIwEHa)fG~kSVJP+$vY6Q7WWv%ky)3j;vDfW}lFW+ms{i}37Fu)fM
zm;H&~f2CqDGTP|BAv&F9PT>V5LSHj*9n&i{4pkhlr<mdR7L~jf)JLweQer?}*6tn=
z5H;bhcnC}AA8!(-$yQc9I*l*5;1Ix9dlu|#D2jOa_`olydHF`BXpt0+)EOHyb8OEZ
zFsUdhHen+6|AU(sdL|1#c)Ih_Ohm=ccismtXvWp`CTm>x%#2pYeeMuTvW0ZOgv3Cb
z3@9M-1&AcL2vBd$FDixYDQg@DM?avrTwLQ!O62!cC9{*R$CUf0e)ml&8Jtj&?X)Bv
zx8i!q)HeA-ExNm}FTf&dooQcjU&X`Br?ERG2`1f02?5vL&69%^uJ3tDMG6T(5v9Ty
z5vM`NvEWqPV!6GhdV(kTdV<Svb@{Qywqo(mHD>x1jDvKEH5@IH8e!Zj2_K}FgT1}1
zvT{Y)1AboKe|R}LhLu$j)Y9jFrz~Lj?6WSiBtCB^@_^;^@R+imDp%s+LFTUjcf@(V
z7+ztI-z^}bj-eG?NODRW5V^CfP@ujuW3>WJ=mi=*j#(M6U7rFs=HBM!YkNeY&0r+0
z*Wi}@<qN&A@SE+Q7Xsv<BS%$;;ba=0x&h-U(K%N7ATT*Jgs?{0(m)~G4=L%OX-iFw
zs0@K&t?krj^p08KKnv!|TW{6L!{3o0QuxDpm`UxsktbP{KsHqPpIUMGS@yr82%t0w
zA6bDc9-#llCMK3Utd{zo2)HhH9~2a<fxSH>)oE*vECV8lxjwvMZ*LEYnv<mloKhX9
zhl|zL6D*${;Ac_2QK0jiowlwwZx&iDEC@Oypxm;sSi3gr-t#VQMFjVBXiqw*k~6|P
z*#hrDe&z!tLR(LdJthfD3j68_s~h`u)Qp1+Khz7u`o8Xo;fad3+qdcZ{U1lO4M#xB
zt#OzmEDAtkL(Ay~Lc|4D@T1?^+iR1Okr}ITP+I`TgUbHqM3qW9RpQ@+1BoZG@19Xm
zY=Uwdnv$96Bk2;fD?Z!4Cn^3^IFSqKPspvAi4Y<_s=|e4%gN+;`&xf>;k)7f7#v(i
z?X8!RmWEGA_@h9h?C5#n(b0_n1nm<nTCt`p>GGft3dKdG?J2{xn4!b042r+Me`b_E
zwEKjn8|<~Vnyh7l6N6qFlWI$J?DG=`Hfhqk968<I>2s<>883daWM5O0Z1GZnw=XmD
z@%dM=i=Dv8NQgmO6+8J=fkl#a^MC~7=E1mDD>Vs8zR&ejd8V<r^B3eDOt4-16y_|R
z=SUW4PEP7zjSMca%5y#-SlRn!c>R%qCUPWVjSUd964L7fqC$HAdRWV!nyhiDseRyD
zxKrVIns$B~3E$K9&Q4`{IRb-+i>0I-4DD%lX}1^{a$~13a3TSSpMh)bvyGJ<j%D~z
z1+*785Ko_y_>gDp9V#@bFsDhd3L6qN7bXep)L;@YLJJFju;-cs6!>5o`!zlxAw4$M
z(n{CON!7rB+TC5Kmqdja5;_m_)4j4!d2$B_-=X7B)Oen9+*z@0N)3rP7vTpD!1(m^
z^tW&N8EDA;>F*uV&1kV`Hy58^a3Mb1&e1BD>Qvon0{8v>mk-U%;tGlNA#uUf1q3=i
zsN)U!5rB%#Laj^p)zo9=>%f%(RO<<ILu~5iazg$`{qr8wjd%R&)kj#+L!Ov^`VF;a
zCMF!uYi~X7?}TiNzhIw4kPZe=X23D2zlLZzK+6955qy0fL<9gDXQhp7c0`Ka>l#SF
zLc1$yuL(0^(AhBkH!iAL>1%*kYkqqN;1!z1$2ZMI_H}jHjTI-v=7zSGXJ#~h=!Izj
z{e1$`A1ia0UQgWwj9MRpE`yy}RklacFmw0pIIOgO*H;`n-ZAJTkO(8fwfk2v{s7$p
z0QAMr>mG@Tk%(>8@8L>N-eikIgVPO8bXp-H-98>>i2~J!Gi#=R&{dtmq)P3<{=oq;
zl2+Hbct78e>%s*Cs!v|K1qTC<o#nIR%k}}Gtuu`WX`rD3KgikP;f|ITa4sN$lkUMD
z2$L@^O5Rb4@R@dNa+a<DQMlD;h;`1hnw~Dp3M9`En$rMURE*&TNCmzwdU=Lr_XtkL
z`^7p{I;sZeYbmzGH_?M03DpG#J+_{$m$uc=US5nOafFCq_kfwOhz7QQZ;TA|wLhQg
zyXw;vI<+@-zcg72hB39<YU)tAz)%MMbwdz(nk>nBT-jU8$0EGdCU$wuA*u(`X$Iy&
zCI*J{4Fd;IHn0Bv-Qc)ZE*HZHS*mx6;643`;J@I8d~C9Z`jcPm79pD?r}P-eUERx(
z>+vusewmq(ab>tC;qquD#kS$%#0pmB>GA3T2#UP_Oiw_{%G%3YHHQ@gqL)*17b|NM
zn;WH<wny6lmWn+8lMgxo)SrXL5!24sx|BYYeZFY%)GU1VK*|b;SF_-gFg#3v3(bH}
zVaEO@R5e~3CH!1!nwtB+tHS^;{<M@OJqH<vFly8Rp^RKi8Wtud8$0_*LmZcJdnG`V
zpma?H4%;GRDT1;wL|j`<BRCI`b8g#NbWlFEx4?1)akDGz@x_kFe?T~_1g=GN#G0bo
z68|S<K*=3)jzO1xEwj+WBN-T33=Apk=>LlafMq76IRg&K#h)Oj0yNnW0yuOrY~|#-
z`1ruKmaD?7fpwM)?bI(3#kHJC0SCK^vM7l6@`VMHCgeip5OrURRZCh4@?ppZASUiF
z&@$EUjh7mbpcW-O4F95c5Xxy_At|fVXK&SeAJ~5(d(mjQb6PQ=C#IS`{#|_;9TNkB
zQw>n6j(CiXjA(v{`Z%hamFK#q&($B7>sprxV}bI=k@~<W0fRWa?BYLpOS{5n&<DKl
zO*?mc{krVmRPW&KyFZR|d{Jq_Z#tZ&r&=oWUJZX#NVV29I=eLwf}tFX8>|Jw!E+Fa
zOV0C)jJ~~)2oo5vm+*f2(?n(fDHaY7P5$Wanxq)W0M{Ci%PY)XU2u}?ipkGG;rN^e
z@9^_MZotxK@Y&kc!~~>EMGqn#<;><GBqaxP!SIS7%)jiE?d{9KN8`U|BE^~S?dyx}
zro+NY5|2QewX5GEGDVQwrDb@EH06l<f+*P;?R3GY0+skZJTx>kDA%Eaaa!pW>u8nQ
zc+Ms&>UDl{DTnKRu+HM;v<<5PwC8YOPS-l6z+hncWH0@4ALdr!WDjwO+Q7Dqkcdc5
z1#&(uKxNDP0`10)V(pz69%|hh$hNfJe9nG$*wj=~&4P{|gnv(_{%{tRto7N7q!R1^
zZ(@nU2<QbU#ZYu=y26B3VVamE5<+HDjJrhji*M#`M(o{^HmdnCerzcJiXhY3Fx&Jn
ze{4j?br%j)Jo)R|i6<`kpfn)FJoxAYcEu$6iHzq`($WXNzEf&_X*ydjZEW-c9@gu#
zqaC-qNy4r}hjW~21)*alr>;NBGQor^Ax-DYwt@*z!RIc2`nfI~ypV!GcuolAWJY=d
zdjS3RFI!oSp7`^(3<e%{Xk$9{Z@SFWJ-c~Oj5f`I`J<`sZf;IagIskGN&IYR7kXu3
zq4w&extC@jh_NcAr%ceg^5YN<iX;3eO-7yr3d_#Uzq^)<nsHTCB`fDlVA>>ew3w6|
zhf>wY#4OIw8~)r~TU&#lT-b-?oMrpt5P~Ly6wOT4Sa<JWz}{cnhrvNhN;4L)aKb5z
zTB>8D0MO{~$H~jftDOsrjon{&w4UF&BEi|+AOEz1g|3i1+yy;o=v3<envw{FelmjM
z4hH^+Oo-+sM&ipV^_5k|KGW3&VRP(nTij8O4t_!By1(yM-9LN$m@VSLds2A$)cdEb
zWj%t~%UyNv6+xmXj1Op~o9#jAPnw1XL;A?6YFzzVN3zcXwzEMn41#_WxpIwY=KkQ+
zlr9_gy3H-y!2EosVN{>5=0`*2o2_l~>Q&%}uaD+qu(vp8P3y;vT+6a<W!B1S-&wdn
zf@6)5Qe;ie^KlZ1H%1F!A;i>9*SjjHtE>0KU%(mUz1P>I<yi7v$12p4oXuY<0v-N>
z{e0$~(I+~8<Xbw!S0AVUDMZy7AFe(=Q@LH=ByXxF;X?<ILqCp)60nW)?!66pnku~}
z!1!&cHI<Qp*BM(Uh7sX%86@jxl!3HPcxV)`jfv|&BEW@rhnEUCFWAphBaOHSh>K{6
ziR09F^a)jN@92~RV<Xr%&(f{OPMuMc5R(g2>5pl0&MIabgRfd*a;&~aWsQbh)T*R{
zL#CyL>H|xf;)tT~f25mHm4$CS?+Wc+zMErUAU2XB{1rmeE=Ewr7`gWRCgqhL-7YHU
zT~E@n`h7hkV<$|zjbwNA)#aCfBOPUxIVxjcJ7tCUsTKO>B?lEEnCLEAGn3536|*Cq
z=0ys6QeBY{U%GQ2JfTn(#Wy|5mdt}szZ)lEqIwkdoUdPbj{FOD4KoR+!lxM4rwj|z
z#F_tmOiHqdvz@T$?CCIe;ilWy+Sm3u4~65k&_4(-XSwUoofFRYEcy}S+q%x8XW8UB
z0Z6@CTRs#}FC~?H`<6ef#3xUPp|g5K{LtuwF?S9tss$;z7>)mTN|RrQXV<20-Ga4R
z?$n%&Wg8w~B7kb33QGSQGU2b8{?d|Bv;Xw@GgK+`O!;!vn}n7DiI}b)D$7Il6Uf}$
z+afW`5~yS2A4Tfs!S83S6x!Oz-cD7hC`r{D!Q*5df^^{wZFJ}7V_=ZxNHESTDY1bO
zu5RTv*gZ(X!%ltn@ilytp`z2;Bbkzv1b`apn+g;JNk?~w%+1)1g&?$Jj+mICc3`!)
zr$-llC!AiugE>0`)V>&m<{*{!33@XI#bZ|N=1?vY++F79JEQNxeEB8F{f_$aFtutY
znBn^YZv1U*|K>$fMk?oxM$=UYVs1QMNda0sOs*j64DO)-M5emrb2aN$#lE4TAz+|Q
zOdMCwdFj@_*#X+a$!-tl-7?Nz|9#ofSO4>}p|w@*_Nuj=aD||Gkh5gnA;rh{p-7C1
zQiVUxT&;*)9WO6YDmtFY$w{L)@OX!N=@3kvpli#1aRu$logdi$zLLW33~}vOf7#p#
zQQ2F-uZSe&S^%2^P?9ane6uG)b}idKe*Bo4I(@z+$opXQDY%{Rm^=@>`tMz36@I72
zz^>nE0bMc74+LPc4n=L|0+VJMDd-`w@NdEx-TNLjgn&wK>HH8eL;Uxju?{*=BP54t
z;w5bGEFRF&8G*7!OTq6>u@_`!@&urLFZL1oj}(Qk#;|tF-_0-nP3CuqAcO~mLT3ju
zr~t1<RAu7xj6#?^Pgpy4jflv@e{?l`HB+rO-N@Ns27OM#S@*35xPAbC8UXz}y%_?2
zRE>%7wg7MJ>N`FikGX$EZDHP-IPxAg9s0^DTdaJpyjFPIlaG4yD`Vhubvi1nQOV8&
zA{y>6kQ^9w$F8;|x#6BCVUypjU;IB=e+x6J|K4Y(`0|bB&>@-?5<<w`>W1m_KgeRQ
zzP=v96d~l=#MBg%_e$T%@v$KRlszav#=h~?lSItBM2-r%<;V>2==gXGD=Y9Z`-bx$
ziHJs$ja6W?zlW{i2C}ZM2xxHtVFb-Uma_&>9H9iCcS%GN!YBKLX)SAIeuIv8Uvgh&
zUv6KK@Z)!d36Xyfb~}d>qemo>*vb#t@};IGG3i`i69UK@P(33DiREqb4#qOtZ*R{>
zP6<W64L<xXro~Eh!g_iIwSc2(FYqwf9))wTuypms0eJngAC@NFEpE84YJ2=1j)JJM
zM-;@)`A}Vh!9(#o)T3ae47-IUMRh~(9@Vp#!$yVrRrt|3Cn{uG|4|K-t0a1bz0STg
zH8st~NE@h~UYu_Am^HtB`xX}4z0I{(S5v+QmI<~C4`DSBqDFBI0jSR+TRL|=^PN=}
zAu%y5Q_K6V7iX@p*q~V^Mf;>`r3{4&0^vI=9<202^2Y~NGp1+sIpu>-<K&5i{`)xk
zCu}GJXIonvcT&xf>ZATfhz>qkAz*E|{{hr!;6WuBfaiqhI|fAs<gnS&v@(|6=F6|T
zzAQ?QfPt53$G;|bXhV%=Waqa;rmuVBy`D^Gb6FaH5X;{qrXv7_lSXpLEn0FGRGrPi
z=Ywt76-qp)HbscskuV^db927(Zzs&$KEW}p84h*;P%O}(;kq<J!gB$+Z;JSYK=R`m
z5&Xd8d-~@UUR)8M5ayPLtY&pMH=1Bn$U5F*E;S<3qJac7#C0}nA_mFpnFs;n_S=fG
zB#B*JT@o}>KOUCdq!ju}2QZs6U)H4gzFmipqGpdkXh`ALFXz*PcZU-|nrRO2%1Awg
zxRsOORwU;Gzgvc=H+PE`^}r6-)EfLF%@q}s2}$<!Nu;W<7jd!&w5x6c);Zasrl@&S
zhC<+l`tt6J3bQ^i6X4yFHpJ-TBnX|O9dTD9v%YrM-pNVi_0OLui!70EtqBHRDC>`M
zcjO}O_mVGPj`r7vp|vIqzCFCe)nYXxWx`JCGDJ#P=yN>@`SCR&ftJrFw0FoMA_R*8
z5Lkc}p~Z*i`(}YT)F0~fEZV1jt&C8f`&V{$MrURkW@e_s&?oeGVq#)%#q*2hDET+i
z?ehNQgW7}yP?(;Bc2c(*N4tE<y}?QZU@mZ825+54@rcBuXcNOsb(*Zn06X*P$!oxN
zzQ4%KSa|Io4n<~`_{&cIeJHzOfvMFIu;M1+Eq?<<fxJL{tNDkNrDZo3XFVPXNuBql
zDCj?+p^A%*1xH^%7B--v``(ZqC?01IcJC1Lo+fl?05z}Ro9(Y<hArTuwFo~k-e6?C
z2{u@sTm7lpKICjW6=X@h^%-9W-R<v0e|j-(xKCE}`73;Nr~ke>?dy+CPT*8q)4#@o
zl>#JoBAz=WjH*;pzU9@`<MkKj&wlg(FN}en{$+ow<j7&vuR&!+#qf-nm>7avcEH(c
zEG;cfNEk0Ol!W$V?a!Zg-G;KVq?X~(leQTFzHqUZZs565Qau0~J+pLA=hneYNoYy(
z6<xi6+==8;PQO?H1U@;1ZEL13VT=*l_P^iI_keW01K%gyhxH8&5L)dBKin49bh=@1
zX=G^`>YFK_3q9anVr3<z--EP2+S+akzJ|oeM8EO*>6$%MSBdocT4!x)YLRuZB-LRA
zsI5`QNA3boN5R~3*|WwXaj7ag0K%wO4a>p|UY729hf;J(IR#`VB5#HBzNU|>`|Y3i
zj#9{oDJl$ZXvbm>FN?CxGcaUJ6R^8x_Yr*g9zA)y2<_&xXA>wrDSImgE-sL+YQy5X
zz|EHH9Y8yt3$3d#mxR|#NkXz(J$oXQc4sR(F*@4oWIqW4z?D)T-E_6TI6DSz$na!0
z+`HTAS*%Dw2M_`?`{*}%JX4)>RO3hp+f(}>wFo*(=*?deI54WD?RT?1ykS{9=(=6t
zQ&aOyS@|P;o}2e@{_QBH6gwJ%QSNs}S*#EKe8um^_76;dBj~)Ty+o%w#X6=Ph1s^7
z@lGKw%g(>OKeeUl#L`ezH3)igNH16@Hz3ikvLqq~8Bt4bQmMyY-z7LNKi_+{RGsdv
ze>iDX!DoF$tzQRTG!`XPL`2Jri^jH>L0Czjt;Ur-3bQ=-_N=%phUgW49%e}R!85jA
z`mnQ`B=&cA;|C*GLX5E&`@aOehnHOy`0r(lzV?@Yt|_zUp=M{ayVTXG07pn|nE#_`
zkU|5eh-hYpsxNB?l+7jJ0|=E7?A6G1C7~-<Fb?FTBs8b{`VO|dy+Md77wny^V8lOJ
zjSF_tNk?V2bE3%u(3yr3Nsl}{KR=Jgt>Rl+8RNNkPm&EYKR-WA1yhQMU|^PbK>1U7
z`PawvFlE1nKT03Y9nKprux3q`?Qt3mN5|N|qeI{|`~3*M*HUiRGXGf8cDs}|{7pt=
zzJC20uTbhxglW)PSs4dTIoeI7bWxj)vHM$%r~UBwz{bm}iD4z$o!{aNdeVh|RVSI_
zPzyGHT+g!3cpw;-wQnh>Hdhj_V5`W536Ov9GvOv<Jp#?^nF_qF7aoSOhQ)@hA?cCi
z|7}|#)V38T7f^RC!(sK;Y1QKaMCI(v129B5e!n3HX_BQE4ZLbzPn0jK--h(f09Ch=
zQL*WMQ68Qf_*{a5&pg2Mfi|<gp+pwaHnz)QgKo)&WeOhw!jbs_{Ml&#^e*>+3{2xM
zM?iQmy%(zmbT>fOkBPfrYK_qfw!9`o+)g4x)=n<-L9J1d6UCRiNzo>yrJ8-cW3Ub*
zUc^9i7c$my?((s7bMJzlmiZTE`wLs!NczvPZ6LoMP{xW`Z*P4V_JV~I7?p#114AVs
zFwpW(7nr3zDLz`8Fh`ZXZ)YH=m_L(S=kxyM$wp~eCjPx`7b$ogfNU7q*r50pS-1w#
zo|DzK)O1GT;#c_SOMZN|xib46EDT;GT)Q@jF`^w}tbV4ce%=(Fm2rjFlW^d7aY@k|
z1TVft_W<YD%K%?hBMX*_O7@1zWIHixB7vw7OH$NrIMV#}`$xPdnLkEBRLt3QwhQsB
zz=e>AA}GX;$S8mXnfZ*T(RHsKD&dC93v@qpvAvZPZ`*N>?Qw%c%Tz*gLc&VBMYPrm
zUaK((Ssh3{<;;Aq|7JeGw((epV<6?>YDA=%{?Cmmqn1E}GN+vhpn%=JefxvZ;W@5o
zBENaRwZ(mY{_3WS15P;XDfz6wh)1M2=7pY2VLe$t)fWcc6&%Iwwr93E>O>WZiY5X(
z8&^n$h6I`un>(9-6^2~mNW(UhX+>SFRbsD`U#7Yj@FL{p<w4i=kh@$&WTuLEFd0%1
zmVr79+Ds2PW5dI5XBGlmK+Q&y+ymlE!A82F!0!m%m>*1Wb_iMRhZHgdqtnv<EG*E8
zeh|By16a@g((A)Y!d+~S`6$f$>?X^zjWU_4!6f<Leb-G5Gl#~;WHL@@VYoRlA+hy;
zv~=y^Y+hkpr-aT!2pYH1%Ouhk)iNcF+^X&*o$D$dw~AGDbTnfYLQ{`gY2%W$D@9zZ
z*ldqHF0Ci4`&=sR+VU7PrQI4PE+dk?Nqm2P=Z|yFcg}gg_xHZP^Lu|S3s$8+DeHlL
z=FUrK9QQz$dhhDV+U+nFM+Z|x*Rhcff0tdc8X@f+=gijF9Yi=3w<(UG=LtP?Vt|P#
z39JOrE@0bVd)rVK$RGRdX@b25m$9$m;C~NcgMm1h=Ow7H6TBAIwI2$S8a@1aVPGQR
zzQrm;6}LCVmMGL3++czm+ue*Z!9?-9A-`ODi#5_sHtlKNGXDZS{>e(Oz6^y^B%{^K
z@%dL`x638j(W4e;4=BE8-`@9Z3_Uaz>6;3o7!t)Afxua89e}US$YihMBtud;#6yM$
z2cLM{gOFoJ3x5ldBzqa2dK&Z1R`fDxlK`>*YI?f(*_#FkUp;rp?x4tLs+hI9$Jiy;
zO@;CdVdAn4i-WV;y^itc$nBgatfq{?Q)-+8S0YDX>P*pP&kGgc59-Q-cFWOji6kwL
z=j|uOQwqE24M4NcnTGNiu=$$7QwlpKHbHC2S3<a(OwnSmJMEXZL@Ps?Gj>SV{P3jD
znw&g(rsD=!I~Rq0sVqelP4p1!*O47hL`@-bK#br}!WF2WT3dl1$jQsV){nK3bngtt
z{=N+ddNpMPDoR-U5$*+IQEO?!Pc;d+5I1eMfvlfM^IM;@Oo5TV{X;SGS0>Jy8hs-p
zcjHH=g%%F>$OERBV%f&)%k?sF86ewz24t^KK@n+S;6=cX$iQF{)cQtIBn?eM<40*-
zLZKlBv$KuTQl$?ty9c?6!OZ0gsM_{{K7uvv0>ZJXD<H0XyxzL<(S!c>bR|kyuFbOS
z`_ku<if86o*WN!XX!?qo#60g_nP6~nK@rQ)*x0Z1p|gA?wybIfaIK}%54heRqf>4@
zjM+!DEs4q4!B5w<kNbcM#6-*<4w5)vkvtv`4mgNZB#pk{*)KE{I7K(}CCNEIe6du!
z)Wqy{Q(jvo0ffLBNrWYkwibk9nlH{3gd@{_zD%cbU)ef3EmbVt4~~j^q=EuIa&jEI
zpG+__Ym!QH78XuJ3f4SzIChcuA?HP*jq9NkR?=00L%yMUQVZQHKqn2S#ClckR2tZ7
z6$3`Um^Gx$4iEFsxZ5*@DGEP~FgC`WI%TA1S&HxJesd&Fj6Z}1QFiONWVfjJMe%Ky
z&-8J+1-@DVxUL@|-vE_iHa492jN^LB@RG?u<!gVdsdE)b#O&7Rk&)7sE9O(*t6xnZ
zbWiwi`V!xJVC|9aox-hz2mH+vfTr-&3|3Mp<oO%b0FUNZ(_eaEX+2K$qMrAOGx}}Q
z*InW#Z+m8@nrNtCbEVWHbi?f1N#b(rPSsQGYS9>5)Ql?K2^42C9aeUgOo2w8H%*Jo
zE4yjqO5OT%J*FlO=bi7T(-V=!9nJ;iIpuN(T^r%u>0}prr5CsUT}!%p+zxF#Sgy)A
zaTvE{X3yU7U8_vcPls$9s>774e%PU4l1gc!9yP?dN6}J?=5&1X_a?4?p86M#Eh<dl
zGG<psl^y5@8Q}%>g)B0`VvHfuT)*H?X|k9}O~ZJUB9wFCG(HAM6!K41pf#7<O-SsF
zX#SVD*U`9`6?pdK_^o3c(@;?VoRvJ+&Ks)n)Fi9gXK-1TgrH9D;{rymV9eA}$_|Lf
stD25%XM;A9T+UQ~3_?t5nhFO<U2P+i?aHSkyy1=7IkG>gg+R~wA2U%fQ~&?~

literal 0
HcmV?d00001

diff --git a/screenshot-04-sources-context-menu.png b/screenshot-04-sources-context-menu.png
new file mode 100644
index 0000000000000000000000000000000000000000..1b94790b72177a675e1e17f6af9064b572f8773d
GIT binary patch
literal 109783
zcmeFZbyt;L+b@iCcY|~&ebL?BNOyO4gLDYeEhQn{AV`O_bf<JkceAJ0{oKzx-Y>BK
z+Ki=xSgduPGmhg|lPG0HDHKFPL<k576d7sp4-gR0HQ=8;JS6ze@D{x_1Oz&SjJSxJ
z*O#Mg7%dzHqVR~553;gqEH%QyKOJgYTU(dMPyYSrI)S!B7y0oRcoS2#_igJV*{Odv
zl7;2p4^NN13{TO2=;)#`#B=(Vm*;0@(lMY#(7{98KqBXVJ_TQSV`7H>=lg%Z!2W+<
zcw<YXn)gZ8rNiUmjc+HXCnBm2_Ne}M?8c}C1#>Vkx3{;ob_YW;GVbN&f+{{(PZ~4q
zC#~G#xda%y+}m$5+HI=Mrej)*29v>q2gNu#5fL6CAt3<)&fB+Qnej5Av5ARaqoeD>
z!^49`A0Fs-7e`0si;Kb-60FXh8R*gl7U@X~$?%GY)&vqRW0K0Pi0H*c@ZY|DOF~jr
zS^4Yli~fDxh&Mkm2?=rW@hkH4!S{<QDw2yNb5<bhsOb=A@8Fr49pAoXG*i^6qmHw*
z=x1d-HXFk4S+LrDRAG|N2`k&eLsPgri_jBiNQz2a|Lz!Au3^u>fT*p5Tcut;R-s*A
z@b#+}=f(ac<=eLc{{Fq+9oJ<ZnYC)rU%n}3D{_R#$H&iCuR}va*RcQot=!>uP$xfU
zrqb{~%gN@fyPLeEn~31x&!J6klbB6>h@Y?nnNmF4U~XPsyqdi~{6`~i9yYdk>jMf~
znv?|7a~lSERVKYpVYUd8qTJZnW=?ykZ+Ta$4PTePJI+_>*UP0bt#|nAHakrYCKPBj
zL1FEbs1#_2H~U;?CaD&g4t!>#@OF?f`p*TlAUcdi$HcI*3|5y&Qx+$}@`OAE>BD)a
z1h;KuL>VP#F#O6$HK-Fur+fF$+j_56lXFZFeA41>V#I;>bbXc|MuogD%qH@>B_$=5
za`@L8ZTBvA<iOkOmupmJ^LbWk*Qc5@)6mew(?8yl8j0hwIIcZO#%8YkaL@YBYT2gS
z+}wnO3c0>=!%rX_q~6AHVQ7I!&WMuXn4bE?0AuWi{|Vk`Lxh1p`F%;v@T@64-_MkH
z!-Q$Et}}6(!wo@Bw<iJ^7#KucRm{p=>5qdWBaUlrDu#xEBdL`umP-u;)UwGguC9Mp
zTI9Ne!wzRkzZ>^T9!T@^^Gn8&s8)RuOQ4v8zdYZPItknz)h6~jUTVC*#N*~pW>zm7
zEtE-89o*Nb)X7XwSIpt3e)sO(5CjW31szqMay~^iuRCsQB1ITCGjVS?$^b#9-#sK(
z=*vpWrOj-asfC3~b<XAWpLwjlo1?}0rN%!xT3Suk(<g_s<x{OU$IEC+dUn0xu^JUx
z?^ku=^$0OP$~k#B7&)Hay|mMhyb(sB;G&Vo7YcadmPF?Xi6a%t=5eKIK|S=UU1@gy
z`@)MWA=zM!4_fEZ;9_DH=jSW#Ry2In6Ez?oNNn&_v7nI|&PYvw&xnac#Px}$v#s67
z$0Zz|naTLUTd(qo9yTPOUsc^GVe)9&ooD>^;{3;X*znIkgni{D-y9jE2jX(AtgY3{
zH58WE3_JW36>-Sj^K2R#8=)W}`2_@ixc|v7EnO^D_;b0(97DjSAtO^N6?XzpOiT=B
zmk14QeD_xtC4C$*&xd-8V>q-E0(|_?h={GOO5N{b`RXOgBp6kCEr<zJ-(*ZoOlTA`
zxt)IJY1dmYYq1D9e<T+RKUr<9cG-~yPv`YK;fJQJ$c!cAX!y>o+3d7|Mk+|wXusUl
z|K9626dWq2!%B(GEFG;<j?GfTJ(x?|nUd}T(K<f2eKSi--3l!gs-xXsx_jff?{zis
z-@yOb|J^NCQCSIg%q{o~Ud_?*6ufou7uW+gNpbNe+j)|KljZN<tyFApzTaEU{0@Ob
zW77X|as3C6Uq=J;aK8FmdHF~kiJ{^8@v^7%<4mRQH@AbSC^6Aqe!n~ACCmK@a-N&)
zR{uv2Lqnkxa3|lJnlv_9rsf@NY?i9@b!m{my)PBYsJ3~$B_?)QX{KraGgUP5{D^jT
zb+w&^LdeeTcSlAE>emI`otC(y<l+8AUxc-Uf&vE%%R4~>%JV_t;n8hr@@dwOb~XXd
zwLMDeX)QVNw|DQV&9OAQIM@2f4D|1n(gz(~#>ePFOKan;T9i(=meYU2h7DTV^nY_c
zRB31h3${*=r?oFlzfA3YWXU(B+-RLzrwvg)PsEfSnWUF;t=g$j1guuKgBY8WU>KzJ
zHgDgXBLXXFn%ax*vL>s^&HKx}bEx*VHZVGQd3h|(o1ux+a$-s}v~m=b1-u?dHQtx0
z3R#?<Co84$8LU&j%zDl6)Zq}e^Hms0liwXXnGFRwtf%k=Sun@G@D%voIyh}H)LbZJ
zuzJswB*-f}hh%@DQ~JVvFqUmdx&QS1OdkJm{RheOyTd9WyA`+jF#9`6tKS>FQrL_-
zSG&K6%F5^#mYeK-_ZLzbb(85enZnqALwb+a*47I6Ts8a7n?FCePaq#TUOJYDNOyxp
zCJ^|-AJqBz^GS&cB`gYINpUfa59l`?KG)H$pK$1l3n)WKFu)f4=&!p3_qTW+M~QtV
z6?)TJ=nsoZ9B&G<Q6QznX}{FB+TY*r)r1wn<8zhnb-dLdYtFj4`SVj7#>x5CfKcGe
z%>4Y`i)OWf?Q9u`{JDuVJMBMzn-f~dsf4_IMO_^x<rM4%B2Vg<uy|HBnGb^v$Yfbe
z1?RQF4No4bV>=~Jf5wld^zU7nE}UO;d-5QR`zM9{aVzj%MHCga!>q0PB8pl(aTr`m
z+)K;KsMmf9^!D^f<Qla5xWFN^vS4(HU!JV`+O4&Ek`jFT`t?Z*vVj9DoaUtzoy&18
z<`eY-u93=y6t(}*`FVWtNGfBH@Alv%!pXq%<L$ZU*>4d)tVX}ce$dN6d!zY`_z)yx
z#;AlNpA3(d@DUe-1VUzWDnX_!tEs7JJVzj@@Cl&~25)3GZ#xEx+A=Ucm7VM*Uo4{A
zj@xp~PMhEZt4s=AiZ+uaDBbRV=9DU6MU0HPlHaQ?e?NtI%jDDHeOW9StMlaf=%Ept
z!SDYdFD-2asidj-9omK^g7P_;gvW(_h-Dz|HKV*#A!|-v((QO@c61b(8Y5Lk1tl0<
zv@6FuW@f`yk4mujdQnHgMv81htVX}kq4+z_vZGwqugI1bGmTlBanA)*Y1RZ{oW&5{
z)VM_5Z35e3S6Y!ddNm}ExODTJyc(C^!_Z}Bn<CL>Q;|l-McuZKWZ`8Z>{;F+a&ar9
z<yTc1w0YIyF&j{UQ8(tt_D95JNbh=nd2UUlwkHwrf%g2B*;s`3dUcSrpV~BTWo!Gh
zzrO}M$hao(HK1Ixda=bd&B_C++OV^KT{H|aN^s@*aP|+_Ml_M3a1P5&`jCO|#B6Qz
z(Y_@l)J8`~U*T+s`uX{x>n2)mU=(M<E+lvyFa4r&*G^?C`A~#78p49f+U=F{7!x|7
z32Gzev4oeEaU+v@8CBtY2AgH`>(5VV{jo%yR+FNsv3UyHeNk8l@-}d&+jTjyDRev{
zDgKW)C?_Ln%y2L;wEG-{=;%(*4=5*0DqllmV^NYYsAaJOA8$D9uEE|<yXo|QMD?60
z*E}6e5R3WSj4lgng9SmC2PL|Y5IKcQEmn(!j0cHajy8aUNcxZPFKaB0Z;EEG?|4Q;
z;a96ldaxO{ATR&fNE0#;5i-yZl8C4qM90M$`$~}!j#|D>G1sA|Cl;|l0|SF3W5=JQ
z6i3$h{rl_vC9S3i1qMdK?a8Vb$K=F>^3~PV6VncE|4n+9E{jYWzrFo2SgX>n4r^`Q
ztlfdH3ZXpCa}|p$b5S{ZVF9l%v;+nQ21l<cWszZF@lCql9jK(!OLqMH+KMP&UshH1
z^`UT7NwU)BJxlci#}ZT7?H20@EOYt2Wyfl<Mc`Z%BJrq4?5|E%HPu4&f4JS8-61Bh
znD$?_`+9<M0k8Caz0qOSr^K12h3_fV`FDR)ZZ3;F>eAMuBWAM4iquIQODT<v-A8GD
z%9HMpPH1vj4a9$bA59oBG2IIK-KB4{%Sp2+p<xr=itvQ3@(pcA1>KuRi;Ig#&eN|#
zsS>h>M@b4Td{@d<<d(ri&Nq><UggdAo|vD<!@WymHl*P>MdJSn?S#do=)5<!3f2~@
zF|i}O0|6T4+lAHDY*JL~L+UqDFfcIGk+PXxU0vHJ41o6}NO5}{-GOEfiihg+uP;3G
zrbsCpNhnD}SzL}<;az)E%gcPVua|q{cuaa!z4wgfNZ%26TYcuZ1)+twMT>t8#bmSW
zE`Ay`r9J1`{l%BMpOr)GEY#)<KO!(V$_|aBfiQ5#+PGPOoRLHD$AFG=Q0ioa@jeZ2
zd(~h#LW)H~LhHw-eeBlpbr>)DOkQB}mmem)hhmJnO&=M{<<hFA<bI%$@I!MnL8l1S
zF5@5CmvHoWz+IAIX_$UTLqI@4L!(#j!WR+~3qitT$_wac4GItM?+HUv*5>y*i}TOZ
zYjKe;(<GuR1=vPeO>J8YrG-(Y;`*Ws6s^6|p40A-M^d2x><Aa~?ZtY_7NQrWT)~h@
z1nu)jhJn6IP<28Pt{+`Wi-TlBt;#hRK^F?vu?9sfBqT(8On4@=#rAE_<L#+yIfIj%
zn_jI+ON0J*>4cs?bI&@&Fx8W)-xS5@u-}`kR_XixGa64WwlUq|FVzfyGYr@3@xr-f
zc)C~wDjt*F&u4H!X*OkL>gB_4LDL9R#CpyZ@V$9ypP(e9D+j1(=xqnsrmW_6pKuus
z$~BHZ6v+}165aw(IV{U7AAy?f<x{MXMS_VLjcH?StljRT;CdO1L&v?^?94XQb-eVP
z+j8-AkF<Fm9YTkd<WjA|zwuS~N9Q{?{na1W2|0A?Whu;tDu(Md1_FD~mO-01SietR
z-YD=lNAtQLGU-scAsN=16gA^<p@xf`;G#ve;M~G={+X}tWrXeUIyVUxr=a%J41tX;
z5yJpvdMy;GOuyBm@Bs_zTN)^N8}xRLr;#^$sR48v6%Ec?#eFY#{UQZ4r8ut?`ABIn
zH~V|K9lXQ~$m<<QS$Eytw+~znVG12w`cDn+7mkx}0t1&8UMJYDJsnP3)js}L3m|b9
zxL&ee2xsJ`GJiwhKS1r){UMbte&+~77O}#(XdzsFs+pwAfHduOp9Zh&XHVPCaA|#_
zjq_m{g8`EunLMifT@8v2U4J=UA?1rsqYa}$n^j+ALQ~U@&3sihbM9J^T$-`HBPb#>
zrLSCJur|@?Jmw>*0)BUcf94$l9O(LXj?eGKa=6H-(?H1U20zNt>UkRErdMMWKw~*?
zH&a3$P@@<r7)!(zOr=$0M6QM_&n^us@03LIJRrrWQML_TT4Ou!psqd(pffp(JbQs;
zY`FIuYY%5<?K-pf{1`C<u;sf8wODH%{@)4;>aC|O7CyuW+==ntoUWto(hTxYK?Flf
zd{@loRWDPM;Xt84A4;NC%49V^j3@7HvS03Tfo-YnEOGnPwbJ5RI7{|TGWIZuMq%?g
z{&Hs|&BYGPQ8!i(_4!Qcv~H7KQBe^AAt7(T6EsPlMrEeVSXtu7i=7e2<t71sequ&Q
z^dv8%=FSDf1^|6|d1c1^qor)O2UVs7jg5_^XF;nO|H6}EL_tks?Uw$JDQpgV$Ivp(
za)Y(+$qE4<A0G{p(-c5R`3x+^KI3vME9AO&OlGKl&C7FhbHioup1m52722*xDT=hL
zb3>&UW$N?^<5A--fS>WW?$*UXG6HzXovcb@4dvnCf$P~GcpA;Ac@mD2@t0V7r!Us;
zCBIV%Hb(&)vRbdDuC?`Xt^M)k(GfBUgUxabpUt8{ezz-$(Rod%fRz8kpEa2x6@TkM
zYAIiDvF9`UR&~NT%L7u`uSPZ$-ztlI?SwwX#CSh*`VEl0J}9`~IH=lBCYygA{G@5r
zK7-HpW#{AE21AA-i(rmKXr0o@Mg9_UFpFM9OZXs8EM7QLSs9CZO3ZEI;bJ|UIQC(q
zvSC63M!ZsiR2(6nhkUS#6F|fSTn<m+C`9B%fLhTo^+IfT?oR~0zGQ{!aKuFD=;%xr
zD;%%3;*GGgU>dY~P_na!I*JC8aMz&Cjr_{`-bG{W;DDNhH;lGkUS5u59KOT}nVz0L
zQ>Bko8tiU$e}N++A|fj*%Mvo0b^A@w#>R%%dGjs^3QlZEWI(k0qEt3R+^cI1{tYs^
zJs|HIReECzpWc5HAsie5#h)BjD=EI0!7~02J2_YLKT*Fb)k;4^LH&OJ(;u5FKkec6
z^i>)1Ht1KAac_7H^@YL$KD~xpPe`-}w^qp+C#V%Tr;xE(ttLMaQ(>K^00YkDqg}wf
zJr(MLA<vW(zt`yuXy4zb`k^fP&)0<D)^nr0{O;afEE+3PQc@wI&Noo7pmHhrtT13%
zyz#$!x_6b6lM@pY6a0pe#E{AAeUS`mD=Wd9Fdo-p<*(k=lQ+kKC>`xi8x-?K^83t7
z(R^!d-pg&?^i{9`)z39pV-*to5<ZJyAQtdJc57Tn(KPFUHm(V(s>+Fyd4qy--DfSF
z(ARDnY+*p_<3j4{isVN#NgOhd&1sC-A0=)pbZeIA0BJpW36@%)5JKkGBs;Q5x{WmS
zNY~S>6}%wWGd5XORSu6g&$(m`O-$j@q=M5Wazeg0(AT|TNO*4rd`5r$LMavfnaFI{
z-;GD?gUK=aUX^Bx2r+lIe7?(J<M6>@v2Mq9uEO29#T1}pDpPvEtS9H9l3-zB6*Jj)
zz}6}0ZLpg3d$>Bt%p_!>52^@0`^4{RVEN~P3Q8EABE}`QjG_JAdpg|49yG<DQ`G9Z
zoY$@nB>W~{-oaC%lA`I>lRs>j{xp$j-2J6or7mEMe11;uiYrONi~D#`|DkbsNp6oG
zn+coWMsz<hW#K?SFS38)4I$P*9~?AnTrRQqiHV<DgUz2^9oOO!bLV0i$~2sjcVg(_
zFf|2P*gXv}NaSY5D&=<%VJ7Zs=@r6t=M}ULx%h&9+jEt=KvDR-w>*8>nx8L{=(-;f
zA$9lgB3{W<-fEZ6w10dYVq?CkUy}Uz@E|*`1s`^H{YO(;+^VN<!_?F?@aZn7T_$I+
zx3@qz2vSB7ElHH{f_rVPqqw+VUXq(v<99nc5-!8t?yquo5*QAxN*$CF$yNyH{Hrwr
zHj9he<fSEECZ_N78WqIYR98+pg8n**OF5Sh*S2sGhNN+Tul7`Mx$U!b+}|AA4l3fM
z`8L`-XX+dbr;GqiuV*CN@!|eiJPRqwkL66c`^{>w^qqm$lg&&?*jKn)z)zcF%LATa
zxg1{(@xUH~_CrWFL!9=xKD^9NlzzHBUH8()f+|?N*!+2El6k&*IFV23x!&T6MANZd
zHMaUJb}-c$lcbQzzStSa?CE*B7Lq04OtCFQnz>xA>F76<ZuU6?^w2XItFy^6okl{u
zGa$4r)rj1A0a<8zvE@x1B2SI|vIcu=<Y@$`f@3)XS*;-<P!iO3R#q`{xZI$|M8}n+
zOZ&lOaoBdR0@h!qT@ULCpq=n1*^B&_$$|(100z$;gO;)jdv4emagg2Je*w@3nm~hW
z_Z}wcubLY4)Bsdc!Kos-dCT#ffV<yoUnR;x4NGQzEjP(4Ek#L)QlR}7?f-Bk`H9Vj
z(2AK!wRjXrV1j`!0C!-`C}LD7=ZgZmp{=dm-S83Z;m<s?%B;ANn&R2}KFgUk1AMYx
zM*7E_<I~0Zc`*0KM@N|)wl5pK0~@^&`63=b%0nUKc3jPrC1poLW2U6^_cJK6-8~o{
zEwSZ#w&7&?j8{j$IfyW85v%O}ncv@_C@jykeVhGKUm)v^$iC{JWT~BXx9A<wU}v5P
zB}%){5YfJre%t1HO_5C+Y9x=zdVYzV=A}?efmWUP;HWpbss+IS^w&4sW``9M_j2qs
zF&ZrI(SNw9`>7?rjKKX9mkaB5g7bJ@KQ`wcZ7%yh<vmO`!Jiiq)2lPDg)|FhW&0Ij
zOHWBwMpLt)t3>IPHdcCVT0!}&4ZQLJS%QK0BQyA=6%}8~8VNDqwcyOo%%~aT4u-$s
zmlk%BMYc@S2$44#4N8^%fWjIjL(ao7NJaB$n+8dN93>PPgO6Hv+%Z|k=$T1Riv?d4
zZfPNT(`KT-AC`HMz5nAbgjRW<<rV;YiJf~t3sad-)4eva7RXx&&4NpB;?(Ow_h!Ly
zx$TXJ!z3;$Eqy;0YGH3b+ve?hB3Z}A`H@`4NW|UA>GuiHm7UAUm^Pm74GXT%61HsO
zpACY;WHih$zERCiP4&^9-Kz7;`$cz$z~#SXXFH7m5Ne}*Xm!&J0{u`Ag;gfaNb;|>
z(n-K><+R@Md`8433HxbZGzW)K2YY>!ki!O0V=&!HK8}lZ<`b|2HZ#&VI5_EWU=_3i
zvg(%(7TiLIe`{A48Oi8W9T{QZBt*MW_tW6uAoRL_LxU`=<+IHSzsq(>V`F1M!4_zW
zRR--%zPDom&kvu8c_0-QfCwF*v&BLLZ#9dN$+CH8{hC^L8dG3Jd36!%O~=53%W7KX
z^32PtJ6Gm@T;l6i-IidyaKSMZv_(lFy2mi}g+tx-P`pu4zzyvr+Wi&Zdpq<)QMAn}
zFFC{uT}plIj{y3^3yvdo(iu(DBlvW<-dp0x%h3+`kusc;S$3^S6K7c5^Pt*MX+8t>
zgwi6*W-^g&-k6w}J4_nK^^TNTNO2Z*z;+q{vYW~Qn_RYPmh2ztsM=a*Aeh{5GXZ@+
z0=LJo<2%5e6VXw7Kd{}gt!B#_uNor-OxN4xnoDSs%iL(E0CA`=d@bLTl#XQh#$dDD
zgo5W%qyF^`;G};U6f*J?$9(dF;mr8B(ia%Fi9GU=v}$=joEk1!&x7qe0Blg#DBaFY
zj72lCXcZasf8gIUe6A9owkwcC`CA%9o+S14vz1)&adG=uBRV@@52nAhy8jt|JmBVD
z_&a+WJ@+O%B46~MetyE6oSYmR>(rPC+b|wVlrZ7<^AV+KXyC0|PnwkrVO|CLVtac#
zSn<pTZQKrD$jkx9?g@1eC-U0qo}G<FP%rQ_;j?z29g|A`inbK@^QXk>4<t{c@i%^&
zM_h5~T(6pZ(cUktf;2RKdu!?Qflpxwa<94jQliCSm1|uCSp6NIJKf3kBVUu$gVC)@
z*l=dOdcBIt#<A;c8@9WGpmZ9nER4w5uuwz_G0qk6h>4#LruRg{7%~`2wEoHG?#{|C
zN<w|R<SOFzXO7X&nnWmI^tp)kI2pE>Ve<I!Fw+cQ&lEBjnw6s)UW@>8hzqoS!9Pna
zu6yM0KZp49Tfr_ET6KJREn<ikwmu^dWn}O6VY#cRm7gwErDcLY7wGUj6%;S#{)m2D
zJv==8S3@BSsCU|cq@lcHSOJPym(o=m&}0D@Xx2UA!p5X<bNHaHF2_o8&X=P{#ASnl
zMf>9UbccXX4xA|EMWaqW`GbRl^8zxO^Xd8V@fRGEoc4HCRrQAVB(J{h5chsQEBXJ}
zl#pQ;MW$`DKuSlbG{|u?8n&6;MWIV3T3_Id(5o{r=f-BFh6O7}3M}LCM|krmsfJ^U
z_m^l?9@d(6rb4v%-MefKMH|)78LWgeb4`_Nj<Z)O2$}ZBKnnuQ@|M+%MGoy(78j|Y
zpP89iVO-pJcSwX6Ap;|0645sxm;E!@?s05GT|_m5w8W}SBWzO0_4D3n3eqlTwp_E-
z=bA8Sl)5*xqaf{`X+g9$?XMI|M-m)9wGC^%J(5Pvthb#HI@))$O>Y(!7W5*HYdmT&
zY;~XgA4A_bT8@3$O=O^>tJAK>1#&eOOulrBiwC^x>6$=?G)}|H=eK+S(WXk;=H%xa
z13Cd{3P8-NEiUG3KZf^kPFGvGa!-gd*#rd*zF_iyhvLBhVG`>SYa_3sqNt)W)P$Uz
zKljxz3BJ$!Ii8C%5w%)v43|);(o`4Jg+x>=(l`j&8`0v@+tW%TMzc&Z%B`)Px__qY
zG|(}{*WOr^*P0HThfNN|5;-~=GIi@90S3Q|6%S##_h21$3HX}r{7dG5OJC%MTpHq^
zz0vf4>b2{OH(6R5@<2^HIvSnd12P8At=)2yg3E^Y9=amfZ>s5=)a{XCfj}hKJw1)X
z6?aZ5f}_eo67}@Fov$|h#Hn;ZEpvT+jf6vYbzZ>YS1TTcxhPa_nZ}geLe>`W9PU+Q
zPQ~)qFdc;K0CT%HmOWV@HCu9S`9qFf{A4|l42*L(G;z&Qqt&FzMvuhq?k*@n+BHTS
zK-bMbpIU3JSN--G_!q*x=TG;Y;wrOc>WFwuEA^JuFi5*w%YV0pA0qG%Dl=kTEg(x8
z`zTFVh5gLb`p%~}_-^{(BE(x);sAQ>UXi!ltHvRm^>Ifc<kcCPG$@h@*_Tp+YQ38K
z@{f$^%AnBD#H@<_BD+_QnieXK++wKX8V0MSaX^}5%R}pbwSaP29AX@~H1UsT0&vN;
zYU))6>iN?7AIAh5)5g+(w&^t!y8noVBG@t36eU@|8Y+eU`YxUnNGcmAXJ=<X(C<#Z
zeQCGV)BBQ@^$5r_uoK2^b#!$#%Qa$Ki&{~AUS9V%78Vx3vc4cNB;<17cilxMA~JsS
zmi;#h5od4_ma{kPAnl2?2zq8lMwCaBcKxnX$_N$K25?P=7hAdkBX(Sq_cxyF6Q*^A
zt4O}w{k6A6t*3WVY0yrif8MqG-eUC&&!rdBdpbJsD|)=?1zXhzmH;_33)~ss9Pt2#
zPsHssQKjFiojO^pVB0~w16-=HFZYd#?=#>KfZ*NGHQ-Z-2QLJl4{a#cpe-dS3DjtI
z=R1IJ*{y!_1Ay!6E5&YjveH7SuYU~gA(U51S=s0lZfC!(uxk#tGx7TV!*%xY(Qr#k
z3)m-YS+jZ0evz`DXp~L-rY1+xNg3pW(HANm&(fo64LiFd(@r;K?w>j}k~BzH&=6VN
zCS6F&S%b2DOWjWk1>J;$@!dS^HL5iE^5h(IDT;bEs^<-A;cd`g=wgXV*sbwrY>fs(
zODAIQ$4JvuHEzl$e_KYm)Sl|QqaBTonbQu6N~5!y&Q)Z9Cb$<pGCl2jwf~R&*AL<%
zFzoE?z)z)&&gcpIG&nSLE?F^@^lkGDXy}URWEI`;%VeY(jLgiys}8*5^M6p=m#4{~
zxdP7L1QElpE}GJU0{XGG;Cd(T3}V0|Nw}R@Fkz`x3nUqdtIEoJz}w_dm58Vq7b8gx
z2sKG9&~e!>jnZx<kiezmp0$@6cD@WH^<0EYeSXTUD6;rPcz^k7_^OnyKAzqB5e-K%
zsJzRw+^9Pk$c4LbJylv2TK}Y)?;jp+#zdfzMny+&-pH@q#_SON#oVVVl{&Kz*F<M0
znKBpafmqtSfU&r3hLr;2nv%&70~3>~9f=g^eBblGUTh7Z9l(qhhHS_&k^sudeUS1M
z^ifRa7?ozHd;r%%Wu#dO0yMDPk1aMEsecc#Mys5~B|}*$5=Iz)+4J;<^1tzAh50qK
zb-v}mqprRxpc`fpP)&+R1Jh@|PyTwPNF0fVWSW?9j2(?V=6OlMxh2*cT2hBshmILK
z+NFEl6Xx1zGn;&qtPxUNT<m*$@*a2u`yrfc&KmM199CKFzF}e4K&Rw1?Uz4U2SzTS
z3%!#djj+^c>#Ve}4+#mWl^Ikj`=gzu<-knb>4Wn}zR>9}Jg(p5Glpl$@CAI5xuvv!
z2=BU`uIaCc*HZvPA#vgdLpD{Dlk6?tPBNqJ%|b0D`iA_}Cs@v9=dFHMfQ$_{fv8ba
z5z0LKE|@PJ7>xg-&Ym_aOVxP4g_JiU>Hkc4W%oc@5QypP3-Hb6O`O+Bs&{6hv~9Cv
zJ^e1_u{V*_C{kj(Q1*F04pE(#XJpfZsW49Yt%`|uRvS5Mu^N^@8y-QlDeng$qP4(c
z0T#m!@R?SwBGQBtC?qmD?O7dGw3rkNwSfd&Ts#N%=$#&Od~m!BrPSwLC{*LQBwRUA
z_UQ~eAVqzAeU-l4t!HwSYi9=81E^*%&#JG5_$(nomfFzJ016L{;(Tdgp<0<*DUYiK
zP=jO5lYuM0e{hh)>z=7p2Wi}5@{?7MMvfK~9^s4NkU&POH(Nw5+|D)8IP_omy-oUK
z2tWko_jjl?G`@|&1WG_fGiE;}fa_XbSkOAE1k+*pA80<rIh2Ms=y`4D(%;3P9`Xv|
zqN1V_Lv}&+A9Bqw5*ZnJ_i(MNrdF7ef<r2o3dur6;RLE=ON+LmZW4q~e{V04Wu}MA
zq=Ts+SwrID;-aI=nhpFku<-Hk0FT?QZ)|io(av#KE7u57VpPo&4g!SOV%3KDuaaU2
z#~25^+7ct|cSh;6_Mcyo2OCb;+fh(1x3J!4TPJ6{kJl?UM+WOpTqD1%%*Nh6rN0YZ
zCk#=$jyS3on#L9x8Ci?-D`k*5GYElTSPCD{RnnJ=fLa(xGBXCq#MiH1)zz$q7TJT^
zL_brP+Pq^+q70KCfuMp11=9>!haK#i^5SC9-C)a^{Vw*#h5YVV{tnI4^cmuh#KaF?
zUeMO*?7?jx5|O*)$Q<9XsgkwGkKnVHB8#Ah#sJiJ0_e06$@Z3LJ~Ei9qW|QOA_L#5
zO>nT!h>G<VTBcAYLbZhceSb^x!clp7kkNP}jgAQ|GMElHKt@J}2pleuCV;OAI=6yL
z4-sg~o9j^SZosWkP;d`?6_zZ7bwTh>SrO(Q9;K4unP!DhpcC8Huk-mp@VAANU646D
zJA-lT?#{m}|Mrct_kQ7p+GsbpCa7$3YN~5}8@D}gG?@k<JcIo=e}U8AM+W&)V^2>H
zSkk2+CskZrR#73YYR)=zm9C;Pxv_!KHeK-Jht6;+)3AK%i@Y4O89CJj6Zr4%?^4i5
zrlHfnk)`3)aXQ;^y5!dT{r>%XC-vSih2f=eRyL@NRHnb>8_Y3y)P-u!d4CgRWDIL=
z=B~2Q%88&S@J4Xyl(|Mv{m%C9lm8u$zt0Vg*=Y3G$2CZ?#FWDuxpbmVGEh$%U}H1Q
zNcH&NCyA$$&Ha`^i8j-k+TIx*MSS~CG&ug>n*x|Hm7#KCkK-MiIZ~zAf3E--UF0JF
z_r9p3<>cg~qDsaHOxfSxzdc=bW)>$U&CTU<SZN7(R#a1SQ&v9vrev5d@9g>rIMrC>
zj4)G6Gk=@keRy>>>E9R#{ATr677(?PME6ddm~gVUSD;Y^R3zYVCQK|sQSXP_bAN1W
zLV^kmQs(=2?`lSaeAu>Q%gPW(pjo4+@SJZ?db9a%vobR92?&fXNATis=sAU<MPt<}
ztU3c<CzEK$)hiDR3k&;L#eoBwmi8TNl*B{|&JBYmJAF4d`6x_@j2L)SR0KrCsR?Dv
z3}KptL3HfspPw{^{2y4^*?|QBGIoU4{L0~Ytd46JxkAs;c;6Ly78dK%ZcYUB+I@DC
zL#Vwl|6MGeBDi3F2$&5!7TX_<<mKI_i^o7NBjON5)OJ6=eN-_t%P^g<3b7p1GszI6
zN!X@1Iv#1To&Ty;Ynbw4Ic_jKGNP2t>oJjM;Ns$fLO63WRh0eX2jR%O8UZG~W=yVZ
zM^O)tqlGfbSUP!+t{gDN9;rNLm{G|0XB$bmxvyP8?UJ8~t*or#Z=hV4!Xl~u_riW<
zK$8;%Je`3HQ!f2L4O;)8e>6@#D;rx_0%AWpU+WY@8pJ(fJC#HK&z~YvwR$j}&>S3%
zh&V?Q<MHvzR-Eb1cQl34KW3!Me#fAqdc;VhtYs~YRzUnahZJza`jSy?pX^#=)|#E?
zr>BuT&{SMLLc+wXtO`j=NGva4ZwV#}7VUx1)b&fdue^LrOUwJ)PM_;JFplyHNW|Pu
zN8lEKoy*3`Ix{;fa_kLSk5GV@uTMay=V`)^AG|$ePX$urirGIt#z!h^Ye)G8Jl%Qk
z49DJI9GojAg0P`nYDH9JWS>Q1LgX0~5>8zx&iO<>)_RAxjyBH4*<FYAbd~9VVyD;n
z4<iv*dwWI_e9ZIBpSB=dCFHyb_-IwUx-{*2qx+v6P?>vrD4cMbN0o9rv~=-QG&FYc
zyp9$KXldcj3orMoKYG;Hup}uCjpufJ!mXT}p8mP>DTiLePT0gtb96kn^Fpx&SoBi6
zS~@ysBrS=^Z6yT-?e@!Su6tE87208jY8kB5#)&%L9q3<x=)G~V-uY_eXvitz6R!z&
z%g1pLoJg?4!ZKC(WvEX8GB!=GU4XSH0%>_`B+W53b=StGtlFSmzum{x&5iv?G_qbi
z%H#~-3*hN-I`EDIKd*`sOEI_O?z%i8JY47H>Hb5<JVH(hhb`w86Og3I0vsLJ6RE?b
zK<*D81EA-J&7XfrNOEv-cTGr*n3+#keNo@?`Rv{t`w9vQIm0Ee$w*R&<p>2fI<8M{
z4UBIxfI8fq)y6?iMz()<&IWwhz7&vd5ey6v;7@%r4!Ao*fCO>D-*b$3wBIhI&0KET
zXIHw8g;6g*{5~aBE{T_LS*<_M+uS7)^g~2rb2#~g=XiB}`AJ_gN$z9TG90!|?TA%k
zH>MB*A>rZsWQ@P1e9&4sO(i%U#jw*Go53p8E0l!F<j<T!^W#tw9*F;hPFYQUO$ZVR
zP%|T^yswIkgrBie2>~93-Zw>e>9klP&(QF2@}6RaYz$!;83a@{?+kHukR8%86fy)a
zvjKGrD#?aniE=lE1fqyN2!5Ji)sb^@HtBGDqoPcJonj{=JL`+82lUWpt&MyJ??Z4Q
zur?!Ag(n;qYV?opqIEdRF5;URbvZw%eb8&Pp``oehi5Zn*x?0CNwi{~^pTYnK~aim
zJbYqe2LBIMS%ZTm(C<Y!^u@%sx<hEcqEUp3Zn=9pI_9Dfc?fR;uGTd<iF$p}?i&|*
z?(6fy?XvAQl=$=h=fx+{S>h=qLB9$z;@NUOYH1}kwVD1{zV&w3O0CI!^O62$#CI~F
zpAHcO0*FS<OGo%psl(Atg9#DXw^)(kggdC#H#Ezt7*XQ&r5Oo5APh;D(_V+v=FJqL
z3&oCaHW|ImTm>S=&*`ImD|#8)%|!%r-AbJzpKBX0FE8@TjVOI(Ss<*%eTubRZX!Sp
z<>v7^^GZw@j0Y`%tW!ZA5lF91c8iJVLdxR&d*@wwLr_siGo>idm`tQ;qq$;CM+v@8
z^mKHEPD-j{D8$X6j%^!+z`EPnMXz<f!qYrZwOWdC0iTGElc~!464okzq1H4|Yaw?<
z(G)TfDRnz3UX*|w)ZEA~u<iuZ@QY{1<x)kmJF4&y_DzoK7__t^CdSj<-MH>jS}I3J
zvbNR;;j)H?olN>m+FJ0OVr*<!`{>f}Gw<!~<qSIm;3Q$W(+iv017B6tf`Qf_{>x=&
z802kxo!<Nd1xJ@x)0Qn1h@-v@Dm3t;#UvzHCa5E+Wa!l1?d@x!q5}9;((Q4qbH<cb
zR#wL6arAiJJFu{D)*CSnOb$}s2If)91#?SHi^aNYQ2LKnTan_RQ%*}&2QHE}nUAQH
zzeUCuWnAnWlQ9CEau3l7LLB6Q&19jW;gxlo)ru>~=5}@s{*MOuP%Zg^LBRq4)dFxD
zpWZ<EP_YC+;#)e+I<7T;Rm|Pq0pT#BR)CC0W4(&xmdTcKg#r%`4t`@2a+G~)?MLa9
zMu>@>h+YUQ0bDz#lV9<j(m$fxm{dOVRmXQsR$K0Wnz|D~?o^qCti_ixn+_hCpU6ra
zecJDMsWLAQy)a1$*l|d>6`=y?JP;|7eh#x`|D3`h$?2P!iGwA8ZdRI_io3+;#21hM
z1-n>32ZzH(4Ky#Z?RF}ZIV_sd&{E?2k7nXh16>yIaN|?Sr`CuqK~T;=0-k@k+L9!b
z)M4PtvD;8d)7pj9Al@9ThIt0`o5l?2u4MH?7oszCC&k<RXX=Sz5J0zmQzO^c*H_GM
zNG%UtgRNerCvp|^xY9CW*y-a$4Y6wO;LziV^WG$CA+H-V5?Y2|2pz2fx<Y*g4o43^
z+t2^m*j-Ik)poj=;K&8Yl_gq}7@Y4?EtJ=BD3hN!9*&u>4nyyeUM3hz27r|I$#OtO
zUw`$dw9(gX8+2@DgR7pfa`=oqhiulJ;gm44(9AGov3^1Shn}@HTy^i})m0%8*vGrO
zi}>*HhdU%+nmE$p`92#KM&UkDr)YiNl#~=;at^QZ@-C^DBjQSEeGPcI^1VJ}TnPvW
zKo5N{9;qja8#M)k`PF6T0w|^-{!z>E(_YnB5|1br#tWDdt`wWyJH6el%m6Y~DQ4R=
z$LZM=j{^4@)c&q1`5;KiSi;$)o7y@$x911@6$a42;8p&426F7q2ofXG#>PgoHt3M7
zB2bUCpV?-8Gl{v;i?_m2{zUtWC*V_3^5?E&!i$!u_RSSW)pKLd%{5`i93IFD|Cq}7
z|Ib3nxmfgBnYT;c%db$TgnMz)1@FA|-><spWs&tQc^A>V=84biZEc}mb5*OEU8It<
zGkhEGwClL(x@+)w_~uOx$h+_84@%7ot9p=VhC#NL`YeK$>rUD;Gpx=;G?w2#se(c`
zo*ZPwBgoubAJMU~kM`fm&uyNPc12ih(7rX$8&UMRviQ-(DD5yuy5Mf??|*k@ZDsZD
z=!>6|MOl46h3Em%FDiZG`%UQ7)ZjzKt#(BS2LV=ck=@G?sp9LS#e<_oIeJY8aoz;?
zMjLgU2oV|t2hZU*m>(@Ug3u~F7<Jfzeh6zu9^=kos{zVv&N@tkRM*Mj)+Lr@kULXL
zzJKZ3G|=6>da%q`a{>*9F+;_nqTQsaB#9@}z|y79E=~PU8&jDWh$1tCLWTiIAvi!<
z`BuPX8@p`v`fzqMO=({N&YMyPpwzEMi(BnSQ>bV{9!C?<(`ruFFeLn5$e*y(-c-1P
zYHrL*Z73+f$XJPh6;6Am)L4x4OxZ5k)>llJq-V5{2Fh=2o6p5|QAWo5++qn`U8Drz
zAYfv=yq2=Hj#AdKv#@Xv>4S<E-ee8B89N;&1mD`z{YcV>;a9j5j>3utG~}3-Tyv&u
zTwDvFk;UI6r@f{S4zfJ~6d7>Y53W|XMiqr%iZ*P)Xv=23gL(uyz7Ej$3bmp0KblJX
zPqd0(elprF)QkaW1&2nm_kga%7YqW>%tQFBeoD?{h=hu?$5HZ%b`;^UcnBbeeAQh~
zOOpQYP!TXu{-spsnuAL+=9>r<t~D!Si*-fHBOryI+_3j}d-C0(B~NxZG~cASL=^<H
zENko1n1R<eJ=KZ^*FW$|_|?L}Ay`4}*4TVg2*28h57W|<-{(p`o0sE<yRGNm*fVHV
zi7`~Y!nd$+a9c5(i}}KsGb2gRJ!IV6&@`+aLwpl7o}b9=fC2|(eGpt-zSs$@-1+#x
zUiN6%@zml319K0OphfeL8Tcg(``;rYr6>3LqFnt@0omoRs6^7N*zcl6+K@ELvB}w(
z5`!zE429g#r{)3dpxcyeY$nrUyKqZt7XaJ{cnsIy095&XAV@DG8%nPs{%RacnDS?)
zG+ZC>(<sUWa!|uvJzt@XVe4sg89|21^DIJ8O<mo7r8y@kNU#r|Bn~8)sZ6E!1fE^V
zxod>qm>v|pK0Q61D^s6zMS<!A3*aJ_KfoW+u^86!!o%H|{0RTwASc3(d}Q%BOW0K4
z;?X3<#rOqJVOm1>k1dqOEL}&ee@qqc$VQ$b^7OA9fe7VGdi65yQO^=jQ50N8o1eb?
zUk$X%HD>EAnM+IF>1yMEiuUJx%hDKe3(K)kK7k@tDW~nDI0$jHV>G3KP<a7iw3pEm
zuiHL!PYfXkx*)JF!_G>y>siZcZf=?$Z{EITvxv;hwAqx_3V)|DS|*(!O2m2eaT1y1
z0&JM0^}q@cdfJpP8`_J5X$b0bqGDJ**}Q;HRAM5~B@$g)P6O!}a3BSr0`ECH+qTyQ
zVDGKp5K2J8VCoEbc6hoo9v;r9YwI4p-k+?`=0gKPA_ZODOEAMA@Yv9Z6aF<LD+`cR
zCwF%)PR<@iKKH{mFYHj|?%>@CDs+gNCYkEFL01F}P8+rH!9j=*zkco*!;U&Pn`>6B
ze5B+2=bvzI^aH=AJCLz>j8|MSFT5Yk_@v+3B=sSoX|)v%z&Z#NECA};d~eB<^S#!K
zD2?l&TCT1RMijGk#27%bU}u$&s{@mAiQDL*pE`}n{_^r0bI#@VkC?ivm1$_a%_BV|
zIME*ke)o@XU-&#>JjsVzT!D<*VLSh3g)j8#<|a(+$D=JFR=j8pw32A}2>id!CXN{c
z{N!5Te(luLrAuwgP=naE@<irY50+5NHCIaiY@DM$lMd5thfg359Gq?;`s|hIz?is%
zME(>=SyIoeN|a9280)8FD7%KedE-(dpOI)?LCMR*6YzXk>$1}ij;VBGPnW3ZCv&RF
z7>94xfvCnV_XxOSBTQm|flj}KKkS176GtL2TWk8KFQEoGC>^+1(2EF-A+kbcJvej=
zT-G0iW}#4!FTk-1*xB1k-P`oc%m$lTuYu3c??a_lpC7K52Pp*S-wpH^Yek?|G8uNf
zG5+`+WfNd3*Ifxzll|#$BMFq>K$0<rDD;=ZD(@K#rt_nbC!ktHif|~fL2$pA1;fD!
zBM|oN0l^NR+Y<^Vn*l1FTFddz%3Hp-B%fnqLLmp*e;-30Ku$sScmcZ3(ilt3LuM%0
z4lMewj7Haozkmeg)dl?3zOeFa{R2`VzdST>mgAEY<O4J><B)Xvk+1{c8X`30u4hJM
z)CyUMN}`irB|zBn^Hb=H=7$deU5g;z)HbYx*$jrtuXX<2X#3qMwMT+s`MYg`*D4-O
zMid@G*OuGPumV7r*to=rYtV(n@((h?gE1-pc9A>!!KiWza}qyF6=%ahHYv@;s1><5
zSv%?2cLX+~3yAUxvD&!kSXfvjB;9yP(wKk^059aq0I3kBY;~$17hjT{edd1nl;AU!
zsWA7(5ld(>7hRj{RLXBEkT*6@w3f(_2Xq=44Q)Vzx|yRnD?dMf!d+&quBOImVKZ?B
zW-+|*La>(rHV(^0mv<WUtAw1sgKaJtG=oiIMdGLmVUytCU^0y&`@*M~fPgoErWZRO
z=@Fh<Zz2UPh?R@zj0KNwh#|5ieZ&q10t&01<i8pUUqS}ic2hUco-_)k_Mo_>_7Xz9
z;$IQ*uV^M-C2Wy294c9Nzb6BJjFeOR@m~@1UqMYiK9(%h+i4t%nvhG{jKixRRZwGC
zzdr82zx!FjBKRzoC<89)2ttVvV8{OmY4Hek8RpnHZkmpg=!+0J?EiZPmK@8>h<v;8
zG7|sq4+5v8vHtr?y9pU#@fhMBBIAFpjlYjU=!{>inQx*A*lfj8y%BdUC6HgnrBrgX
z30U>r|5c#>eHzukI(BH~NNp1;!zBYa6?toRE%$Oh^lhl=+9+0*?SHNa$c{WO#bn8h
zVzz7otO%GqAAkS;%d7xeU08>;7B)#-0gK{#qj&FgJ<zQ9^*D}H5bP>b@2FfM|B&F|
zB7YN8Qvrc?6O$>fXx=d0B!aq!&z=5%qNVZwz1&yyIs&n~`Id`RoH@(h!y0Sa#06XP
z!5``-H@FNe!EgNrKMPtQUf6k(dR#N=dg{YZ)U(=JjD(+<=K5zOLM~57===PdTQ`DE
zU;<FrXMZ9J2qrT#Gl0BA<2C{)5LQ)%I>L@l4*DZFCmH=kk9W?K$LY5h=mh{a$o~#J
zT`TB~P_nVM4v&xmNAa!zsZvr(E6N4p2M`TFnw|AP7H1Dg9YTQ*8(OL53$3@(8$B>Y
z9A&f*&~On<It?~g``t7&{nl}`ExMG6wNFEbd;#|tC<+QF+YoX>Emxnhz<~D&jSHEO
ztEm~;R@d`VYnhjawjwu#3Kp@DRQ(v%6Rb&a*G{Tqp!w|oGF0}28dGp#Tjzosyj%=H
zpVw>P%^EC?2SW4OodH>~3bhB*1LK(-&WAI#CEnHA_0;W61yl&|@cf`T$XiUGUt9=!
zo!xzWBS5P}66=<kl|{ns^~F3AB<}#?;f1n6Z*K8#^M53vOcV*fPs-rS`JF(-k|zZ?
zmsWTlpW@$D#FJ##h^|BQvYyw?y4$n<O89clbCuqHX+j_@le6k!dMj9`a=kEJ{rbJU
zg)u43v;eIx(yHHp#b04AACm7pX7!m2dhA>GSCjO{1Sh+e;G=!44M#TyU+MO*k!~*c
z7w)>tA5e(qHnITQ0Dw;GyTkI{__|R;&;cxG1^^g>zBe{Nc`Qi=64~xtWh-D%ghWJt
zRfwsnFQi^u{n@(TPek5;W6YekyLRU4clVc?%T32WtE{JYHA{@pF4e@vsjfD%xK2$?
zw}^>{dHLow)UbzH%TB?xcD)CuVZq_iOf%kunD?svAQ9CKj7!7jnw?)+Oi>}^-MqXy
z0Rb<OC<mttwbzxpOm`wLz-q6Qj2(u*{N24J6_*42l-1?Oy-bd*$EyRM&At`@v??nQ
z-S;PC)zx8)aT&B08%kZzH|LzBq@>1k+6xUkPXHC_2zch~{K{#cnZlsW-$IWF56|m&
z*B617J3FJ6{e{?B1>uSo6}a3Km;?j_QMT4V(cl`Qp#KfdHH`olNlT;C|M9b5I8-b8
z#r6;quwPU^eCR249>K=O#@rJY7w=1=Wlm1U22#RhUm+qZV_-o0#6%5veQ=Lk7V4Ec
z38%6fb5tE$fYvLRz6_py-cp>c(mx){egwLolUsxBMBZ2s)Brfr_6Z8OWDfTF_{QMm
zb7^H|RK4Zu+ktjL?+apayAD4eK;|Tn<i0*8s(XF`)hi2~F8aS(0NDl2q78Yn(y?8w
zGXon#`=Hyb*6ZQxp7x5CvOncv9Rf-i>FCE@AJNW<){`CsJ|qj<v0%!DQp-`r59CrG
zX$`3k6Ue4|=c`HDFd2doPkwi|=NJD*MMLZKI8H4tmaI0&MnS$(`LkNT2Lxo!5_&P>
zo(A}xUg)Un?UfdKaM}(39~0py%sDXsk|~6U`R;#;7nWN+=Z911^EO*u_ui0_uHPK%
zHrdSLbNrtE#(cphO2i-VM6B*@r81K)Akayx_$@k`bsiQ%{gsI8gl6#*8iFKshjM<f
zw6T|0Un*m(vt%>KZ@X>wX%i2I`gphjc1NsCDI(IXS-loYW4&1SPu(WaBKdQE|3<ea
zdLNwMVNj_<UBX~)ZvGB&=0LUi>s!8?4Q490%Uu)@oWH-=$$~xrq@bbvPsHc9x`4|_
z85lU6u2HVM&Xgj7;w7Qswm$(527E^+QHGJHAaY_tLsK$)AKLwA{uK4C?AHRG;7a{g
zobW~gU)0kj_xK_dvn7Dd!J!%7t9`A~L`vv5?ta!5-K6ceO1}S@c#+JxYD17HnN#k`
z;yh+&W9x>B*>eT(W)ns<u9l&7t6A#LoPA>x6RV$BVC08}5GwrIp}M1g%b9o%wJu|5
z&C4&rOUtBX*dl+{A+Ertkudk_QHPf2b2U}m7ubl`CH_azyYiB*w%~<<+=_|}BXYkd
ziMxXmgb~e!^cwehe33#VHC+`nCgrYoVJtOoIITBFSJRmEBaVZ!;t+A!A1`*6+kMf%
zkr#7ELtIGACX72G{F%Rw&9^-?XyI96K?@5Qqm7^;aQt%|L}OG`Fpyc}vz2XQiRMEN
zklmjhR+oBVAp^0nwg}j8Y0~h4o*9OunP2?b#xt9DHVHW-Nu%Q3!j&=iQk%EtcuqFJ
zAqomeEA76d2#S8S=;i3~PIvb(U|y1`<8pFPDbSFSMeP>kPoj<bgQ&|SK1nv?KJ~|u
z!b)V5(H(^aPfbmQ5|u&0^~-%^Ng9rZWV2-2+#uIq>-5a!b}p={;^e%(zGT*EK-_(=
z<yKVieBKL3-tzeK(|kNGzkMm>HB3TCG9|qcU7N=-=gIqRRhREHVSG6@FN05?`M4MU
zG91<GlWZa`9#Ink{~y>*COOj9W&r~jXnkftadh^Ki9sgQlXy>`DDm%}B)edE9V}#}
z;M3PyO{`E26B2Z6Pp?JQb&dTg)88X}9VUrr3jZc16g4%NjQ=tiCcNHLD74gE4LfYD
z5HwWaeUQzHiuNEU8R}q#i%dQP5|Nij1`peT(2A0~4V925>i7Kc79JBV?zCjLhbD=P
zWPz80f@17TOCJ|F+@>;edwo4%NUU2ZO@4xQY-UxGt7oFzLdxF^9P4p#*G3TsYwcp2
z`5!miC=U;NpgWX9?miine3Fuop#D6)a5w)`thvXdZ%W=pGxVx=tO;nMTE4Q$?`&*!
z>6|IZyPWO-q6aEf*eVV}Z*6?SovrybJ$<}O3DU{S&9CW+iI28WG#DzGnVDzuWN2<~
z4NlBt+jl#?4L_&C!@^n?-eMH5BH>kCTv2)2x*WZopHaiB50>Gzq4})3>q%UR48+4v
zc-7(9p$+sp4bq#Y_51&`_IK8`J%X{`j-=|{&E6-uo;Oa!xqV@yx9gJ4szcFVeA4Lj
z5V_MPLZs>TB@I(}vUeEhctA*%1Wla98J~zKUo^LC{nv3wXP^<JlAuZiP--)mstp0p
zwzrG!!J1uxLDC3#c~S>vKnQGO(hPZ<4HHS0P$#I$96+Ws;uOI#6xmS9*HBiLC+}tv
z<KbQaScU+X1^k(fRO=7f`ZO&(&WWuQUYvGXo}i5mMt~YOno-a0%nNkIX7@h^={cjn
z6eN1_@LZ%5+z#(L2M6Dg)WdUbWRU3qrw!=GUHmX_XG>LW&!>`;F=2O~F*nA!aByCc
z6+>9XWlc=CJ~VT<4PdRDlZ!n7PJ~bMmmdKx{LlFpd2P1=;PZn&HF8m{4c{H2babI>
z+^;g0b!vCvY;3ggIY;z(dq}fszo%M%ytDSq>V_@!8C}w`)|XU^i<T7)lb}!<V+06{
z;I6&~kN6wi>egF~l&FMUUA;K&AgC39c%9ad28HXxlxE;Huvgcw0hku>yyX4|aaQkL
zES2Ru4lb@BJrNik16Ddbb>nyPR%luh=$F6+L&CwN8T~)Zy@gj+YZvyb(%s$N-6`D&
z2q;K*OG!$17=)72ptOKUBa%{50)liYNP{3qor%8h`<?In1!oM$9%Jjqy`J@~HSZbM
z^_$(*^YhYR{C$<YvhgK#kK{h{;$+*pJ()&i24hv$pOX_09}g!1W*<cj(pqAjs$8+4
zsw-Ln6Ju&&*GoHUcIjOVOtbSO3zgMNUO_tcV)yw_+>|Mr+b!xZaFu*PhxSo{+16J@
zrMNBl#%^Nf4P|ACb9~=rg#cud(*^l_XxUn1guhzJ9D8~Tx}EErKR(4KWUoHNnsYzC
z@}c}aK3OLi)F1>M48Oyk_b~BY4mI@ucSBtdM7Sc(XwbjJ*=7rGPNm6T{SeqjEaT7F
zzLe@bbrG4g5pb#vn=t8*+Ob&(rf{}gF=#C+U+FQ+9Elcn?6y(DCCk+*XexGp_^lSK
zXd*XnhC&k~su`;1fDyf0?0QwoOh*t%i&5l7hO%2v_E&!FeVv$4QY1dI>T8Ml5j-Ph
z0Mk2dlgoo{geKIVs3~QTIUhXphVGhCt-a84Xd=jG@F6?;bNWR@Qu4evQFnQ1Oh(bT
z!Hp=2EkZW%0*0Xe{!PWX@5<XdI)2T!D(6TC%5t4gR@^SbCMEy5vQ^x`kl1H}cMR@2
z9C};}H_;%p9^8&>WckhCyB)J#yktvF4Yv<UVGM?V@@$3QodFDY9M5iaHNx8srzBM1
zGqo^uQCG)62tVg^kttqOX!fQ$|1*IQy)x#O`RWy=q7fOVE3`)<&SgSi2D-Ol1kZBc
z+<xuqaGTF3n81iY%N(+~rJjZ2Vpgt-wt&BPe>vxe>jTs|>k%6^D#R#(uwHR(eK3j*
zl<5A@S;9s~R|>4XTXZlq^gapG_(Oo0o|ezn)blnCezE8Z7dGY%x<<dlO6Wx8${E)`
z#CkYrkt7~i@jze1c?wdj2Ic1<s`Z|0JsYWYIMk^Z<{bf%3KIz<m3Zy!hrp}zQ;x+b
zHB}E(V#{?%NH@NaU{gz078j$c4<yh9^4F!9Kd}E++YV_7d@fXq2bsd3jg6_@uJD=S
z;CWoe&k%H1(wFYz=+Fms+^?x>0c~ti#Gg%$`Yap07KCyk7iZ7qbY$>p<H0!ceoJGe
z=SWCU5C*YPugV|1Uv7QeMxI0a4f5PDPtBYUH{P&X>KEUCJLJ$7z`zhL8}7eE{MMiv
zbScmRo@L$;dq7Dw(AXS&oy8syJ8IVsF!?woHLp1I(HsxYxkt#38q_&c&8j%UjE(k3
zA;a+Hzmnrh(nIwQb|UxQ5s__W=Gz`rdLv(6Zc4BA!TTF6t$~`?J%k(SpPCPg$no!C
z8?@q=$018ZL2Qpx>sYd8wJ(;6@0`d-%qP%lA;ZIq6?h}g!Mvr2TRr`b)<{D`BT4;q
z>DD5TcbmpR++NgD<BM6#kY0jS(sG%xuVF26mxpP1o#lq{bkwvh-8TSrb8vu;rj%N=
z8Q0OtaAKTF4*^M@KSRV7Rf6=P*)k%_|NAq|Hp4J#>P|9;Z1CE@Vy`W3kTaq*j+4Hu
zrx3S`M$fae;cJ)v@v4ePsr-i#Z%abPn9P2Be3X^V@Hgm$r~}+dUp&ypa#o4*QgV!=
z+;VT?zm2)E$$|aIyYgu(cnLxaIqwasiH87sV*s%sAJI{pT$;hjGO1ap&&2$}LG*>E
z4<(LYm_<F>3CF*q|5D#tx3R}=sz0Rld<d1ktUXz2t~Ex_VY0kEmf**|xAT-#R3^D0
zI#-uczmDDoOr-%k<=f0H)air!JEGU6`8h&w?f`4@uZd}2b%%?Jt@T)iRrf#ovD>;#
z518lXYbpm=|5osbva9IU0t2j^!WG;3Ykki0)_mw5<%a3@ARznOXuyroNJyt0|6*?S
zbA(oo-igeFrAIrn>B)cp)EWL1v0^K~Ddo8hVxrLEMu$KTjqraP6$-Btr=L76F5qBg
z#jM10C@iX7jl1hC$$)A|$MZ>PBJQCT4Oj96^L4-G`qyHw?On1vEfG*GUGaLK#2#$p
z#O+Ae5+fzL>k%2^A>3<p!^8~t|M{d$mJD4kLoe#zkM*wf-o>q1$iVGVU3>^}GHl@X
zwOGocCLEFO-=|Fcl(<j7(9(~M*Soo|L61i!YmLf%RU?P~pO1mqZq1D<W_gq~PMfHz
zg7Tl=RhUd<3e%2oJp6Yjt}AQeX-<j%+&H+)tK$C?Si!&O{Qvo1fKLV3o~}=ySQ<IF
zxw*x~qimSiUR|@1{{6z$vF2X`(<#6rejgm%)zho3uZIdX9ek4uYnz);hVY4q)UU7G
ztE&%yIFg9t-izG~KC9QUv8ucCt%U_m!B_1dfq-eTjjb)S|DV%S00YR2gRxKuTxlsC
z(+h3Epwjt<xB*@ny|6F;Bgd@@S+k*nmmeCnek^a$L7=&JbkrG@le3U3i%>nVun@e~
zKY@;Z0AwTZba=VDPdB(*wFL!MR8$!LDbedgi+k35_~WbA=@tlVp{*+$BH^<GbDX5+
z_qDa8vb|7v^8EL4oQ^Ch;Y&v1Cy0Q)D^w~TZdDMfrGAI*h2s?FW@l4l`pC+LLU}D9
zDA-lWZ=(i~vb}>f4l;rW5OIJ)&Ed8L&iV1S#JQ#$Ewt(kiB$e``+DzKGowmLNm*H1
zs=s7s`Xef)-}U?&9%Ko|)CpQ`9i8f$8vp%eqyb#fuiz7GY*tC62RRs9&j0xeRGthX
zE)D10-Y5CquzLJ`AXV!d3Z1-sXGdpew``OH%CXXU!{hal_K}GH?@#3=CXUz)efsnX
zEMLE4AwPfmR9{;=Avsw<SonBvF9G{`0<>z#w8L}VSE4`_zx0rlLRU)Suj1<O2f(L$
zXT$R3>C+c4UsBhhoG<>j7a--&$bIUzGkdC2&~tKz^3lb@Vrg^p4DeAOI7CGuf%n<7
zCX-WDHQW|CI5;TD{=Ys9X9TV-2<fFBt?vO@sy~HmWqaEbOxB_YYXnX1Ab9z;*d7iJ
zw0mXufZB91l-2y#2X)lliGY9rsYU-BGIA8qhGs9|!J4Offu=k9VhNj+qWj~YKYwg(
zZU67Pz?qs={NTNsvvYZT`~c7+%-;f<N$#Dk<|((A*U{z0nQWEGhX5gF<|fdY!)PSM
z)O-(=CqOm%u>%IAw2VuTSaroFTc&{<!yTwTID0EQ&}TaEy({{EUin1QM#w9eo#0%7
zsaX<b3keAc%JgfH1=c(v9J+%$=KJ_;%;Ue5KU1X?VmUk^p@~)RK6P_LRdhR+|Gsau
z3N`os!*~1JvLpUqxA^~u_(Vk|Tm@nR8k%8{P9cJzaLZL5DV>%d;iY9*?~Q3)Hwb(R
z_vnIrmzj9~5aKC_FVV<t3|kz3Wh<d2P_WIttAR^Kn~8x9o$_A%<zNCTDgrz_GN2Gr
z0M3v^d4V=eh2iA5Z(sn9305{XpfkZgnJ;B*h4d28=moUdm}4*#E|8)jn)j0K&xGS>
z85oF4OI{aV8RV?j!9gr<7!yu1?HFwr`E4$Kes)?~+#Dq@FQEYPwV=)#eD+?%M89G}
z0tMvW%P<BKBBE|odadQ{Z6`;^L2LA@<Ha%p=)qAD6jT(&@&gK~SFm^(2`L(!;f_vD
z%bRIM?^Un=3Zj3Pf^~f<i9U&qw5vHZf<F+EkjjcnfBv)wT$Qz&jJcb&LPT9%N?e==
z@dWer9Y~QYN~7hMNg<|u;0^yt_{k~sd&kDdbBA$ct&vy_S<P5&Se=&7arq<A`DLwz
z^y1Ly5v(2B6E8?R;Q3@aE(d54LrgG<DL=#)AOTv8d<BUqqO3JmOF&-v+Q6HFV%C6e
z>j`Z&_*!aE*t-!EZ`M>U_8Q<0Wr_qtU{&1_5B$T}C%0^dl#|oY&;S{azCO{Pb6kac
z;dhCtsKW7q)&^Zvp3YK6BI~eT>VNktKa638yFfdffcXgy<}Z@qkx&gwI)HSjCiQgI
zF0LJ|z<~h-(S1Qx-o(QbsaQh=4GqqI76w%MO<6<vSoy|e{b91}8~6F|jiWsb>#VWF
zv;d<f!DEj@b7aB1oE)>m?_A(rd)BtrFE%wJ0n)z|JcVbWsY<oVQIU$!`Q!(MGR6zh
z7ZQE`mgyI)cV(Gl+HU=Q^7uJLUpZ&!+0M6|!WFJ$@S31tQwYyaOdJiSe}Mqf@Mt5y
zrp6;v*v0+g39SbvYaB@R!6+(NBqVFi!s^cI!x~sq!=(*>qjQuRpRDzbX=2J0#jrgf
zeIOuXcI<*@6E_t8>Kq9l)1Ia$KppA@l|Qg${Qdo(J;PRhP7OVM6DVUBnyvfB948zN
z42ia<-~B%OT{-IsNUQF+moZPDu4RH_rc7@mb+kqy_AXdfp>OggQ706Ro>)HMPlz~-
zZ2>51*$*avH)#X};^DwtXmAgI92E`j7wNH{*Ds1}mY}8zzS`+Vl{-KJ8s%MGT^soR
zd02e{J_w~a6w?xPnT7uS2xNah0xvUjl*9?5D4b=<)LLoWFt+siK9~+(cejgsxgmUA
z;0-{Z_53~vz{Hef-EI(t%7#Hl_1nx0#U&jbovCSX;RAE?g!+0MpT~ZI(YKz&phhcA
zOimJ80hYy7M&<_LA{<qCTkr$`H?F3N*Q~)!7V1lYqI^Cp0s4Xsqy=Ee1hUH|gjpDm
zcE+?kZP;-Elp8c>;SqT(+bF+*kiH>&9ZN3h|337+g^Mx0LDOjFPEO6>eq_d=J%(<7
z3XfT}d3y)2!kR!1*zCi@#8lMVtD+*&0F)(WAusRB-9_yn=+k#b<EV>ufQ4pvrk>;(
zBHwtazSG875l}tg!~h0ku}SkWT=3#TjSYs8(b;>auN4N>TN7oe0Ki<Iei!}fm2r{U
z9W}LIJ#<~qwJE99A?_WAc|?zWinp+3HYy0yzzxRu`*vCDyNMdoqrx{fU8H`$r;vc8
z&FSkMDJhebJC7bcvK`JAvhKy5LW5zNaL{=K$NkEkg*FoAcF?v%^0aTBl9Hkr|KPU&
zFVP9qftMVgsL(8V`PgnerllOo@!4(q$Y(!d{sH`3D;H-zZcq{jO;s%cnn*SnzM>ky
zY(1e3((<UtP0(cUKnuf_ZCok%Y4|$t`tp$eU7mrP0Wq4Ko!t+xK{4%>>%JK(P{uKg
z;uRJSGr?{HyvFAYp);6X!z@-~Ebty?L1`&5F>%Vt6rvat&z1UX=4YV@FMFxrIiKaT
z?lp%4S+vP#_g>|zIdEQqQ5?O%1`wtVQH%%t`9-Gp)Z2lK<?Y*;JaHcJ<T{2){QEjf
z7u{;!;weH>Rdg-MCgynvqSt$)C@C_`8`};}PVr9~g0F7=#z9B-KReFK%Ho=ZUV5il
zjM9gJ&!2_*dI`F2@Szp`zGzO3i&KMd63{pTPLmp!;ej4gRe7i@D=Sv^_O<>;rNFK9
zhITjn66IkykgRdcrUT_kZ-3oK)UXrve_^|TD+2zr-N}l_VcZ3P9U7aMu-Isyos|r}
zJO^-0^h71_7k3xhGQ~XWVq;_Ba#~sf-r0U8=6Vpus~sCp!eiUv+m@oSPUslj2KYi6
zz;Uj8(gHD8hV|;VZ{H-51q1|GKX%8bQi^#L0tuo@8L)FUTT|{aZ)6dEfa?Vucvo##
z%yI;iZx>`VHC;Yu=!>2KVbelxe7rF7;eT_3-U{njTIaDsck|p}%PUMy3HS4pQLs^h
z=7<ZhLUqkBNr1!!*&nkRW&k1p1qEI!$ONXQUQD$<M!DqgV{Hdg3Xf48rCcSnCMq7h
z2mjLjq{KtgD6rF!LZVmiGGpoDf^`MfGel%$AZ<E!M8pF626(N2?xY!vr4TNs;WamZ
z?<j<eOh@PLrxqiLEu@OywGioyftWaxcYUVI+#7B&*3%<QrV<zThcF2<PUED<KR##P
z_StD+d~ey`)zbq{5HYKE$XhEqO{n9wwQ+Zu*)@%gDZSY^-bmxIhWR~yERV~4&u5|S
z@y6y4EnbtCIXN_PKYzY{97ak1X6fG%&3`jz^}09B%gdOogNK;NCn?zia&>(;!w3oa
zg}r0okvli}cV-2&<0V!{CcKq>Ziar-;7_|3j8It`G4T1S$*nt9`3@X(!X=Rj2$C6n
zh*%T4B$)dCU!{mR2wN;Dx_BZh^B_yM_+QzlfK993gPZj8e+hH%>BuYA|NZg*jk|uq
zxxudnIbF<%#yVo6d~QdYD!*7V6ry4Te{(!TIT_NK-yw5uHoL*SiV6bs@uCaScnba6
z7BA3B)yj+U%4|P>llVLB@4AifS6x7cz|nOX?cq6GWl*C89<a6h7Lo&&E2N34xkWj_
z1VJ#BM#D0Yi1y_teT@e=AQu-GnCqul?fw3}061o-iU9W36(foB^xBM+z*HQ<-OMSn
zDG0u=lYw)#Cxys1=m!LiaV<sM4Qz)yb7z44e92~IRArubeu@PEvPXY@Ik>xidX_aY
zAp|k4XG~RFdjtkMFwpGbZwHK;@>6mtn|{3p$WL(T?q;6W;x!WfZ6WkxK72M65RZqr
z?~~V&HbLu(vEG}Q#VeLA_4r;}P-kwgOaq+$$nmpK6v5kF@9?Du%;!}aZpT}V(8LmU
znsnZspW`fmAPB(4w}9WW#YcD@F7GGR8bD2LMw-Y%hXMCCVh|P8%5xZUg-dZg(s!Ya
zb`b&0_~FMfmlr5<SScL$ch&|-fFkGN<C7)oe#;w+N}Q9IH{rqs7(@3fjd#}9dr`x#
zy9E*DxSaSntHqw=vgcmKytX*i`<SO1RLTS^0Cyvnb8*RnqUS)?9~~VXm}GXYt~A8N
z-jHGOF?zTTz48MRnzOT-X11i_;2=OZKq>~znAKrd?UshmU9ne@(b1j3{Vz&*aXR3g
zc6Zve{Pc_}ReE>1TYXW?>!;uczk^jaXJOa*Bv*Jdu`}2Dr$6=d?0kDqu>+K=>u-Uh
zEMJ3Ee;p+Ujez-ehVb&j-yTPV^T$sIQ5+25fs&8pn~{-DzN0b-r{R7*h^de;h+iCo
z328MN=OL8Wgn{0>^Y1*?*o(WMM3)`<oYNL^_IvXyu$|LEBnTCoj-H-zowMK7CBmYs
zwKXHPQEl;iII$j`LtgZIZ%@?od#d|6T=Epm@;uz!P~m!8Vn17U$H`{_7`9`3mnOHU
z$fVX@hfi+fBw3wee^>U}Y$hk1d+*mg6g~T2;Zbm*%~8c=j>71GGMi=Z>*OSq*OOyo
zgn=++|Faan+3e#APeS---8T`2cKHPbU^|>^ef%48F6X(XwaE&K1UKH_?ZG3tp?k7v
zwx2VyqytM~^f9(CA*LT;2pr<CpnRTcabH2c?4Vv>_DEGlq`L$qL8^4&gZHHXKnRo9
z;-R6ZlnyZHcVM_wy{=(~n3$Qr16~0>Py5U(JTVGWrhKL$RCuLwAhw;How4kJS@RDa
z9rrVTL0dF<&<L`J3(*K}3{YRbw#ka6mTD?1De3F$^V%4TL?cN4&}jy#icW!2rQtg$
zNfvvaW<n?O<0gc%Tdpr(ScP*{-^u#cKn24M(0%w{T|$dp9`_V%!0EK8uI*VexUWTA
z4BO%4(NYTu#|uV)0Fp@1uHI%dFbUYkXU~YXwyB;zL4UM0CB}j&&vG}UR3SnTY$Y6e
z#W64SM?vJQdIn8#s>>6<$8Y+gh{(uJp%gzKk?V@7m5t<+$eX?MBwSwXJn)p?%dg<g
zn@?1bh+5%0Q7=fssq$3wNV**5zrBDGdd2drEQ-NbVi?47DRt%F{db45Bt|0K1f8d<
zeD{~#Rum(=S&fX0Htyt+sb^wN17vuAS(u1j&-rU5LXev|LH3hg)9c&(47^7?cka9#
z&XPc>Z*2`+>WGAaBfR$aiqzhBO(N6R>kg(FQt*@IzwIl>On>%3%>wg%T2atgGw7j|
zzNzkxX<O8Nhe)Y=*Ia=dkd`#U&ZGl~m6esp$Ji%Dj+C_gu^Q+Fd3D-1ie%H(v}fZ;
zc~=V63_qclE8I*;KP+WulJvSsrDS~@8yousgDfSNsU9qXuU}uYFf>p1;OhVx_rSt!
z^V0(x2zMu!bMoW1C3o9`q^5oWe?XR?w5;rYvGxZrvcn%QUno)tJAd>*1_1$Zrl>^S
z+<<(UX9|qX{cwcLy)JG<6)QdMQaZXk4dRdZ@y#hHMhk!MgB37-va_?HmjQ1gR6c(O
zQiq``04wwA&Q8#B7g`ESd#Z+si6<B=+;GSR8z2)LYXeVKwXyo9M|lN8GMzx?I~S>`
zgl}w-8#?J+PN}~tPb)yKfhM)KHkF&PHOpI9$}lsQl||j}NNA-%-uP(a07Bwa+byD=
z7bQk=tRay>95Sr6bFI^rrW%JnKV$`@>RMTx449WfQAggeJ87%A$<KL}COCi5NcvSt
z|H?-p>*~;WD&uKsYJX^vW~3(`o2Rbaw@$E0zu+`H0FoetXab=npfK#?;o#t?^X~ER
zL8TDQ?=W60n<L$-{(?2sw{Rw$kSJ2Wi-Dd#NpkYz#~Ye`z_x*0P!^Or`g(ehq*IWQ
zH9DnM*;^!CDEdW=j_OQ1Y{9L?<%aXg=$+kg&3mrL>bEGTB3QiXWJ(jE2#1$$Vq|2h
zw|8o?ZuWC#x{2>E;H!Y1<nh5O+JIF8En^JjC&>BtNGkjx*`56~H1zPt5EWo0goK2M
z!t;>aXB+k*%QiGH0BfWl=!ciN16aVM*$&iGlzf&9iX{P`oq&xSkjYZ>n&-yGo&u2B
zuL>d)L>rpsk+|t9ivoCA)!uN?(wf6*0RL|hes*oZfHJA4sEHIVO@QjW7aEG>q@?Y+
zH$?&rm}QCxZU;mG98(*p23MB^uRE2JSs0RTPTtVlt!%NGh-a=PvW`kwGmuagULk}D
zq1W`_PQ$zO&k_DyiR{}m82yhS!DLJOt%C;eK6MzE4GwYwo0Q*uIr!njodA;TU_#a%
z?tA5k=&uc|<fkKUysKe<P#EI{q7m(sq7@kQXaL`miwh$&lSE-(3}D{_lzOCJdc(Ck
z7ChQa=gZ5*;^Rqz)`GNz`+THM()K<ks7zWj8F{O^Wv*A<6iO@MR_DP|6F3Xokmwq{
zD@ww}m2=B?YkzO0PwR{>NzDA2(Srvdd`DYra-8@nEL;Q(@vsAo0<+RAVaQX`d6_n*
zUvk_BrpIg5WZSV$Jd1tZd-py-+~#xuot9QW!@GB$Ai^#Wt0LyNsQCh2pV9;)IA_2o
zqfSXpj&FyFhPE+YqFy?wo(@XkV*m&MucH;Jq}k{;iw279smL28$5h>AN5Job5t{GC
zA0}&WU<;fEl#(IyU(VF?___HhUH7=KJ7;GpgJG=d_H%p#3@`nCXl6elyHSa5rx=-T
z46UyhId-(Sr%c}4o)Ixs?_>dGA&&-WAR!ZV*vCCg)V)+}UWYNld6Ac!;;*XZqn|;W
znH?XDbI%qa0S9JfKO;Xl8-&5k^)fXz`sQI{1hfOPCH>?)Dpkg9z)7F``gPR(Qfu*7
zSm10A-dm)04II2t?6XWE`M7RT)Mw|b<TnfwTgUHC0pDC_8~Oy;LvJSsh#Ee8U5SN(
zZdX=WlhKW+>3cbmV^XnwElJElmN<RVr#f-@f^aI~L3x}|{4<-)N+zlb&6~ueL)>k6
zKi|6zN(?-cvao2Q;eJ&dnKd%EbL8WFl1NJuDX%d#OYGe5e!P`gWjK-XwDJ@3w#C9Z
z5+51CC+SN<h3|0#a`f?}RXZ;u$UUtEC62;enz>$~8j#gIe3{mYgz>~2g{G$9xnU(m
znO>{^dpM0Ccf#SvQDp1my}A$qoz<Efh&H8Oy6r9ImEGqlc#&ri+pevmW3{paP}aQS
zj;P$XZ=dr*<@5n)PipjP=*gt?+D8!uZc81k6|)W1KtTua)Vn8gk$g`ZE^#LvquC|S
z4W=G(_Re47qNmEsdatxDhX0Thyvxd2rBqjKr_NJt;WhPz$9c!Ft{_!AO!C%L`FFWq
zBC3cn!Q+I*C{603@&>-M<xi6)cF(0*+#Pewy?-N6{1|L{sA_qK%7E75{H?Z%f#lx2
za@}zTuB{u_r0LxwDd{vS|1R%YqA*z+deV8!`wP`aA_l&M19xc=plt5*U}rUk&Uvf<
z(ZTVtY<mQbbn^+ld{R+BZgurOFs^`%9=1zcOU6jwHT8t-3jpxbf2zh4zc+>E34mrt
zw&Gp)e{FmLL*gYI-ycN4z6%Ab3FOZ(K-bVfe*p-O_9d`+=Lk6wQ$p0~HVb$G3b$Jh
z{g0EG{dyd}yaq@T1`)`5gCVqq+VDZpqv5kmD@G;=H$e?Chwnw5j(YW)Id7rxvP+EQ
zt!Pjv{KwP+wv?DrDJe+%8FHk)%g3M71;CU2rLWHcX!1ztgfbFyi|z7n;oU7LfHqJu
zXk79g5s!k_`q#kv+WAxkU}`2cg`Yu<aPrjCqja_{cmaT}w|)1jRFjq9+3(2Gq{JC;
zNr+6K^`L~Bx^t6Ss0}_;J97xLjNT>wBW!p|h!9PS)Lt5!Ecp2bfK!<%IpCfJvH8Xl
zz-j?}cX6=x1x7;qw?K+YF}@gb^8&^$PwbVSkUrxjU_O6<1GD^n?QmaBDD(HXXTHK?
z2$g?xz-d2>6{<-3aUF4q!&7;3pyjsRi6RmqC?w?W_4&lZyciE`%EU*C)wkFQ3XSL$
zY4p5xL~I&g`7=#lJRg*ZX+6T94L*07+7llX2ytm-O2aKPxR@5I;dXjBP}ypwO#RMO
zAF(?vP2DvuTRiid0;x<d;~~2AMgKXYyl_8>r9eh?FKOLnQ<YdV5{DDB=!;duAkEh&
zk8AVd@~cW{Pruujp(*EuHDBHIJS0XI<bF87c~Gq>g5-{BGo?<Ch*>+8FWljm=V~I2
zy5W2`WlbE|8Q+Jp!o~X`l}ZlysI9!@h#Q6#3EUNtVj+KD-&z-r7!f_1-36Z|y16-%
z(ML~<we<i>hb`3baP9%2k}r5tZ$l}+w@BAwV|Vzy;zYuCkCw0px+eM35$MU8nG^$v
za5kWR<D?F<^(K~6cDiA6@=f<-THO$pCeWhVUBkq1olv~$^~kt~Nj}k$5TX`p?-!nk
z&+m95m2jE)mNi}bTfz{JVu;CJq{^v2y?Ia9GSih$3M=o-{ubfdbUCqHp2X=Z6JMql
zTw6h+yS^7xXVkQaA-xK0x(SH#`?H=oRKBdg%&0Oa(bxo3mQiSxZz51_>9vRyywu0r
zkqPe}$#Wnl1;q+oK$Z?B)I58KZ$vN+#~j^;vrQ~4=voMFj!aB+zs_0E`Vf1txxEd_
ztAX7GsVHo!gY{AQEuzP0STxdGpEK{XUINxnCBPIY%!oZWrBP>;w}UV<q2wj#{I&U&
z<Qn0&oC!ZIf3SxRJrjjehXF=NVIn3S;mz!C$Gy>hH`|Bso7eU?FL>bH-5XIXzAr8U
z_7jhYXrjr>NECMEAUiq2DV*zZaenT9yfsmv>{I)`ySp29ouEa_(|iD0(D|tV^p4Yo
zoa&xG$C)oXiI2mjm&Fh*HHAN`tLKSE7QKIeiRkC%X0zi&29(qqX}plqn7~`1#ZR3w
zLkp$xs^}h?-^HH^Xez@R9i)N<VKg{A;rN3xiYR$d{P40>JJ6ufBQiD?jo^FKj{Cu?
z!_*&c(-zLwWtUQo3_+b*DUaz`RGr{8mmJ^su%af{zyF8G%A7Jh7OA&`gGA#<c!bSm
z+Mw25YJvWdo{o+Uz69MCg+1BC=xF2P-@*fe`b;WknB;<_US<yP7BzZnT16C(AF!i}
zXzr1t&Bk&O8HT=Jx_YY1&M*}|9eh`0d&KH^DBk8qvCzPIm><?h;?XyyxjPNcPAebh
zFU+r~h&Ww~ZFV-#HgSb)CL5lZlZ6yvOI{Av9jnmWjuWPu5<c;IuU?fy7bZRHcfU9-
z?BSiQaGXpxg_zTEPYXA_`z*pg&DmA;6RZ$?uJ|o~Rrc5F87@!_8u5pRxU$A4J(7>o
zP>l5YC97IR(qSz|#a=})Y_N0deH_q&awo&Qlc7Hn_w&x`7*pPJb65q^csevY8_*qR
z16?C|F}cs-sqYbUrzsSPv^>66b{OwLW6kr&5b%}XWrj$gzb-A+CIv%p?lkJ#XR_hQ
z%b)nMh<XGM78%NP<*Hm)5_=Z1xWgiGkKJnB?Tb;1?r!n0^9+B_vEh-t+;tP2eHGYF
z{*w4on%Lh1H9W}TOD2cIPPqT<f)?v2#t@Sv&o{FG`Ke=xa#wxtQ?AE{7sHh`-@{@(
z#`y9!P(GrHHS%$o%7_Y?qDqya{)kKMy^pxrYGSW*YiU$Ye(-0RT*)wc*UV=RcG&$e
zG&JP$tv2OYp^se5gHRoZHH!0MaloiJ!3O>2UZ^cU)3)wc>nN?9h+Eoq&gn10_ivyA
zXQgDdLuL}XZs75|-s=I?jd}_vJk)p@?QjcV0?b52v<5W(JU(o$uR@Nf;VX$nigAQu
z?#rULC7GFtr2$)%@WJ>ZD(W)h6>?$=bj%0Sb$eG~7;D<#w!hk!3@P5nN-!@T#(jZe
z2A=z<KU&Ma9#p_6qG!pks1OP|Z=jP$E?@$XZoKj{O4;s8Fl6m13(SY3bi~zz><Bh=
zkl?sKdKAH%Of8s3td??arMNtr!ltXVg@zE_pv3i{#XQwqF5H-fl(&(kUaTdMLyvE-
zPSFI{)k3gzV{@}05BudJF;|8sADg^+#NaAArR7AjtF0Z<3)RvPHiFF2i4Ag<Nf{+g
zY@s2$g$RNPp1$LG5^H@t1n<4kw?Szm_uonys^&3;8j_*TDeqoXW;gj`NZla_N5HvF
zTu%Hl4mInx(My7+!u&~8O@na*Uao^QtL2EBdR{IDr2)S#z7$n7@Ol0|EkeFIUb6li
zgG}f5SLQ8taYs3kx^?3Qb{29&SQmuibehC8z^-@Fc4^WwC@wk`FWrJEr)o*UUJz^b
z_(Z#xp@p*lMKzIBBd<J%5F#DBDriH1R{Xw(-O<WQ7m_vrg%NV54OQDXyj=P$^50%S
z2)b3$Ik}R7cGUzzOjDWxF$s%g=g<D&TW*CmMq{xrtZW$X{YGnhS<0*Kc4^(Y+dTYA
zy?TGB{KxTalX9Jm<(0@3sv#5AwjKPQu#LOqh*n8_o#!$bvEr<0x62Ue00D3JjuM01
z9TIsUc6wZ%M?w(oply4!!JoEHA@Xo*XXgW~RvIn%!h#V?C{qFzS!h#}t^dLeEGAGj
zdo6WzLnI11Slx%p%6uJGUPPe8Jb!+@U?x##2F4#B14Mv`&a6oelpLa`yRe%Kz&BtF
zuG5aS?+csLdP1C-%gmtm5aho8ov^s5Eh+@s*tDD)C)TfVwH}5-t8mp=P*Cs{lSYp8
zd)e^o)oxJz5g^jJwyRYwSCp1ku?asc!t*OZ*D)|CW~82Al#lZiUkPMEmupDp&6X_|
zQu*Ha0qWT7qfHTzt1Q2YfXy~@9|Cpni(GgzFv?Nhd(mg1PPyS|?|o0^CMNc~BJpDn
z&#tXsUPqd@#>r<?1S9P)5VAPX!?a~hPgFOH*B1nCvZ+hox~k{!YeYixS*zHS_!CjF
z(e-l*l>sepguaM*J<3RN|Gr%#VM2EQ9ZgkI@ibB))d{hadKoE>4TU#p5=eCH#JtN#
zySL2&XajT87xUffDH-2#yyQlrZWYiVT6hqYL`R(89d5ay);uv0>1#d`Qfgdd-3O}-
zP7M~IxQ2}=Rxp~;AlA0fAgg^Ca6t6U_(|<lbWTTt+>-HaM3XnAjE_donT6W5jU87k
ziGtb+yK8Rr{UAwk_N^V@6z9=Eo$c6po~!845o;Ngn#CH+u-~HFGJ>SYTZw8GiSbl9
zbcr(_SF=mZ6EhDS%jBjY^8s1)o|tV?4Vn?Iw6}c?A79@(I-MW2`heWY+19kD(ai16
z8+*JFk&!ACPw`|hUoj>oCPD@bt(L%QOU2KhKa+5#0WX+X?=~kV=bqBh@v+(n^;}!<
zZI$<M&}yaex_8CkeR@vwuC^A8ChO220#^;}OG$tz7FTCnn|pe8rmUc_r<VBU$8R`j
z8G{wkR#YXc1fr9fWr5T_fJ%Sg!agl$?N07G)aLjE1kis)cdrVqtMl%TBceqGq*yzm
zRqjY%AFQXzT(-7>lp5bBPq?JGI7Vf5*7(%Gk@;6M?$%>A4R)+dYH|gFL4DulE>#H$
zqZY?&LJ{__!^2Fe$0?+Cx7_9*;=2(6j0o0$?ZHLk*?n&=i={y$8xm;0EoPrTv`x_G
zw#BGRk{xtuN1uL&$RM(#!=T{#?Z{YGwF^fsqVWgS3qs&r8e1=JJP>2Yd>@$@6gxex
zS-dzTe&lr6+{IkTIciH2aM^{q7<47i|NDvc2nT1fq;34FI-^DgmKvIu?n8k`?409@
z7X2Y@*OrCt`%lTfw~wgg)nux}7*C-8R^d3*)rA)pGs;5CYXi3ruX2kIQm9N{5rpSA
z0ZU-&;u*EnVA4$?Mrl*jif_8FH2_Na3uu)VEDCfs>EY;B4??i2Jn$?u7FQPDwdK-^
z5?ivPU)fP>kV#*lsHJb><lU%j`ZHj*g`Q2R)mG!l6FD>^+x98D?SdP1U>RvjUG=x#
zyzFAd*Q+cH8kG6l#8^_sHF7lcXcmTIB^q~jc;dc)h1ijno<8~FMoyl5WMc*ps1`E;
zAM=Uu8PqzY<@y@D0y~bQ`Hkxfz;FdHs#d13*VYstTMm`k9<(k%&63agZXE1!7qDg$
z>Ok&iXfM!;abR(xvelP(lA5h@v!+LE_H_UyRl|^b_9z+m7VS0GaFjFX&o43(l2qu6
zfVB~t$HYREC@7EZeZ9QA(%dY{J3s%NYaUMF$^?*LllOKIh{Di``k{)%yo||%9w9k-
zhISH^f$97<j@sH)tf;_-hviRj$E6*{06R4dV!U9$g!UCNx=V7_Co;>XJ>Hx|Ox%<a
zVEjh4kC!3na4_H6?8o!A*~jE$)wU(H)S%kZ-~SZW%i-E~MjhE#tbW1gx47i6i1II%
z1sP8o5)^HrS{aZ;I_3k?Smkv5+#nzneluzpJ^9!3-O&P;`No}{O6_ov4norj)3iqW
zO~CTV{t8P&Q<K-uEE-J<^u6J;4vmk4%9)`7eTo$(5}V(@6XW83<VSz&pP$kDhJJM+
zRs-88iJ9fA;+T4Cl3cfYH<7H6yClL?-c7l;qh4Plb%Fy+(F=|qHlu|jW4$-1DtsMN
zcNLvuNWyZ=pmK6ldf;?!ddoDxs$wfWxS00`U4&t3T-aLZFth(bdew;GaQ{|H=E(Ef
za<R<72YXk`9EF7y;coQf3S}&2MU8tILiJWxLYB=Y5wiEH#%8@q5SO~YcJOw%4>@1S
zzs?(E7P4J9ze|&qW+f|TQf=uMiB1F#G4^e<lB6#nvVhKyl$&|5WFO!MS-<WnSFd%O
zDgXG|zdS!bkA#j2HG_D!(@h@qUODDR^WM7?Wg_Ka@9Z%2Q$QUDb81W2vJ-GAMW}_^
zk&u8(_zDw4j{V8Ta=UW7rEC6x_rlrQA$V}AQ8LG>?tZf~%Zt&k#{c8k5%{x_mu)<A
zSMHR{mJ{=8=Fy?nplZz@_A+OtUz|rtf(tVAaw|_uhVPl;^{-TYlam<bPz~1c={qO!
za+ylz=@@1R(RApzXG+|)x|q@NsJ-H=&9*{8!x1$#8M$!Q5h1rRxZCGq?^{;Y*K1i}
zLLLA1{#$Ml-q#o~jEvz6*p!m|P!;?Pd|p_Tq75!H!hM>8e_-J!bh6)+y8hmpetJKr
zqJnDv737LjtA{%<KQ9JkEac2qN$yd&6VOKUofa2QQQk(Pt9QmD|2`7*R1N#5qy|5U
zJUAIgB|llgMjS9>nnOeVe#HY9bMvZzQ+`urwWO~7s@ZF@6SRJTstOZD%%^r%47K?%
zi7TK-4Q~0~^a$^JLPBaP9A3&$7114Dx9c9Pz^G}j#_3zF1E6&M7@?0GPOFf4uiBC+
zcMU|6)go(N+d7%A_-zhg71(}8RIU8XRE3e;XQX>b^U5Gn>5e&srCK)qQ?N`RMtmJ)
zIEiVo1fK-@7)R|jBl2qGkluK#Z2__jQK-1I^c!sMNzu{P!DV?(vKgOFQ}=5(ubh>Y
zdt6rjit{e*plS@dnG{9c67r0@GH&QLWrUcdYXkZmPnp3Ly6{m$Rf?1~>6ROXEB|(3
z6K1DiC~(fKqYuJbv5$N3&LYv7ME@wH3Dp*5@$y9aRB2;LaikMqx4)*eTOqI7$BO7*
zA8K}f@THIdrvOn7yO?f@&Z0o(AVr0^P2tD~TtE5eR8mM+EN0XB7@YUR)%w!-3J3;E
zrs`dDV5)qJkg~Qhcih*{ucV}8d-l}HMrVqiU9UKVf4)#vz{v?#pAP3=du-9{-2e}R
zR4U4v9YZH7YG7t&W@KbAV63W2#`AQtV&-FcsQ=hRSs0?rbd92I3RYo98uwm9PdAzs
z;r^ayb}#`t($=ABC28V~E8e=zZ0+(=5-YB+s0_YB`jKNIwRPr<w-3*UwPy$|Wz<K~
z7Ca-O6l!!(rV5pu-6`@43u5iQZ<q=D)o#hy<-aoZ8?eo`WcZCyA;2MlPLM1oe@8lH
zZQ#zTHPjlhT1L*!Vcz_Whzy~+H*Q&hx(t>fnMV*plML2;dcYjAFqNJ#l)Q_(rRJ`w
z=PeL@0Y8zwR27T|V*<;f;^IIW?p;_g)74F`4+GX@?#;lpej<?CELWw1i52Kz#NQ}B
z9oRkuEj6qO;Y$Lmcb<-s{}e_?{0;)jF%yYar93w~I}XVsdRGw5UaJ)OWdi~vtw~Mg
zLqqA(pRnJA5hWF$W!INC!zUd(_E})v8H2ULMRx4r)j&HVN(f->9*L+z<Tl{dqBMx9
z)qHhAL&#tn<Esx_QyfSXR-a|Tsq>)9TzWqH^bkY7h{sqoC->?HOm#t|g5wZP`pD}D
z#3FI*<qaOApl6FY2HA6H=*>M&{nBwzSZOn@J%%I&S!m!#T06(o<fJ!Px==g$QA+c~
z+8D@!NuBMA&eY9qSOurr22zgQnUM1AY~2*_n+5d|5v;5=*!f6RG~)48u};-1DJZ%e
z^&Ce%evL;WGVbIcXEL5AOR|YBd{S3dCeXw=nP;i*y4P>5BMV3r9MruW0lPX;0fJ;q
ze>SrZ^k(sE(6zI&T6zRKwV+C91=rQjXAQWubx&X%3**&g9ccPPCr^4Sln;KMX1=}}
z@B4OW#pTD)aQiUXKRO#5uyKm~QNt<*8rsEfn`)Ify)Cm}sQGT8>Xl7U6bt*4X*9<4
zq~)s(zCcY21xs7;J7wy~1kBu;z5=<U%9OeBn&-DV#t46WQRO4!4x}_d^|WOh;%ynQ
zzlJN7DHrs?woTvR;Vu&;5V?E7)=)?);jk_Tbr7rrkVD|s_ydc2f5=OY5W`;JvPRFy
zs6xQ+yUe$cVYQ!3eyuR_`98Q|j1+64l&80kr+kPzm?Vm^t9t`R<xSRoHPDqpLPpkq
zYgz%v%W^cuV&+i6#FsBHQt64o>pb!AMQeJJ|KX-ODdKP_!dcOe+5u7+RRWc{<NeAb
zDDam&<G`|i4r=TwEIBMVg2`>gl^C_YV>|<fGyQH-GEyGt6|79u9`6nfiw&(kJUS8*
z5K!lqadV4FNdc;I3_*o`%suH6hZA$plau}A>S~>&Idiuj5K|dFAlC4jn-7k~{3;u(
zkz|Erfh^;vT%hGaAdz=TNJ5fn9>-jJl6w&S&1l(4YXD<4Cj#9{SU!xG&lq>ISf>^G
zBiF}?;k%xVFCDa7h+zpBVk(>{C@6wExtyRD@t>)yzzu@>E%^5xdz0?!ks$l~(7=Qr
zd%Aa_C;+y7Q&b$Rjb#s#oCnle)t23}b8{AMouQy{gaJ~s?|ut(13-mZ@xW`oE%>>s
zIN~Zy@b<Q)eReQ+Px=cKS9BnY+S>r#gN!67MdVZ*WY>2t^I$`_@6y(6qrAVKH8YI5
zB{++Hbz`Mrt_ZPSeL`4;HyvH>L0UGg2RG|H??sVudS|mVk`O9?F7mZZa{q3MmhD~d
z6B4$&qK&e6qE@5%lYVMg_z@a1dFpqt`1{gQx(JT*$D#_7%FzqgkmPU`Ch>@g=OO6A
zxnkDpzrDA_fOed}_6Up_&|ZQ^JmiL_rzaFcP?z97v4uIRl&2DI0wis@jD9@fz}HYz
zQi4&_a#!pM4)tvKqkyyHImigRQS*?Yap`vW-AknYH|rU+$LHJ341@z=1g0Gh(y@Tw
zJD*`?XDX-R6XXTyz#vVPr}nX}3+?~y1>_;8avA+x_V{seRu5bKLb6{8Z(sdskYfc|
z$gN<D;um@3)=3`<pxFB0Gi-Bp*?Q6*s(Ckj8t1RHDLpS^nv4<+V4R?)K<WQM7!w-{
zDqX``6@x4!Z^&}AH|jD0`qeReA50%<-_r`Yygr6py3IDHb_K}tewH0?M<=JE3WPrE
z`3QbjguW_GoQ1jAYB&XKxS>;6^8NFxku*>APk~w62iR!^qEv8!ua5p)Uq9aXlBxP2
z5kw|gv{<l^)PAmsYupxO!%>)IgEb)#<Af3uI$q_2e4C0Lq<Pi|(nXWVTah4dUfzX)
z6R2$LYTkak{T$|#pb~_Y$56&wZhR2nF-0YCBjP@{%aYmwl!(o;O4myVa$#r2?JHQr
zJj&H-ZI&k&b_N@-M-l=QkD%;7G-)scLN~mGnC^0kYTkx%B8e!SbO9s;J&e(AfyH@=
z`-UYkl-R&jhwHd;m2vOAnoFVs2%|}_gVV6xSOnWU-+eh?xB)lq&@WpwC8eW@A4I&i
ze19(I;+ftNK5h>SlhW4I1bOnCv9>IU`gjZ2@2*h)=FJG@Esp%Kuv<BF-><ZOWvM<g
zzw2-^g!6)0fdA1tF6dVvVK;3H3dg&m|HlAFC{=KwvLq@tRlp6Vfd4;&M?<6uXGyyr
zgx7RQzq|JK>#*@cQ481^=dHf`2k=CtS=R}FShP4jz}BeA=Dk!>R^D$^${WGN!m_fA
zV9NwA&mIOQW&_BH3=A4bmq0}UM<^mnd6*>oJamzDVqk^+oa7Ybi!H6Knv60Wzz&hc
zHEnv7zPr|bLPr^qF5=2P_MGr|XYSL&LJr;)<$o^KQPH2=!)nvUQq33c+)bjMt(#)b
z#azl^yj+;1BW*AwHlA|_*31rU^lEG4MFNNB%HG%R?jl$q0_BKB(uAe6i;KLR+%@KD
zVh)CLbf^@tRvVf}8(-`MUFSVuo#V3HPYu$@V*O_CEZOiVy-MRF$aEo<h0to-vDaPQ
z)Z`B_WdrQ9#~>BMs&_u#GCVH^QoYqX_0)$`6CVOU!6)0;SfdcIeL~8$`(4~)H3s$*
zb)d$YKRNk9d(GjdqgZA9$UQn2`==DIYvDRZj*RkAiw(ZZz$?ki&8>2rh(q-B0V}67
zD5Bs6g6Ut-*|7<X_F)*5Uvlb%ybDu685(K{Z|51|JTrU9Yhi(5URl|-bp7;@q`0I6
z4xwxJxTQ1fSF)d}`wa3Pm^7jtuH?z1oP6sBffn>qOSSVlpxXnL9elzj+s`1n`gTwt
z{>c7$1enFlzrq**1cNajV^hf#`eAc6K-1!XIWK(3!n-1_#Rl6%-{~eUe&aJ=H2W^8
zJ#C96#YltFcw4EfG4Y59Ob~{7vG!K;d0FKlgM`tB9`&l#3-wF<n>Vo98ISw+K6h|%
zFcucp#<V>^>D*dDuB63Zy0_=HieOd+24V|~sm$5X4<A0@rvLmY=&4aD8?}i$##sPb
zP5$t<L>*PfAEZXZ%*P)Yx{Y=Y9?o;pM}eL+3$&MFrE!D(3HogKUnixNwB+x|$|eqm
z*K~AsF*cgS7J+r>)Zn04RmCH<DPk2{;|?pn-_5^rPC&IkA2Cif<M?3qeo9(Dzp*F`
z&oDfPh9QPAuY=X7;XIi{JK+oq1n<9-brCIK)elISlbS)+4x+Z?nM}sfQ9fVgeYA|i
zb~{>jc6JjGxXKoim}+%kMBmR&TV3k}JBoKPZ$B>gl?pn3S6lQTBG@LNl_}6*q^o;9
z3Wp#Kv<I7xS`~r7z({6e8yhBF-7m0ZFWyQ&Zx$LUe_&ho$B#hK)_C=b9o7nHKKb(X
z>u+dEfI<Y4Rwbn<Q2nvN@FL999lGqJ<%R;xhSH$m4-6P$!oY|J?*S-Qcvb5+z!n9&
zaKzc!ADG<^hRKI|O6|2w)-cMzE+3usT7=8nk3JTPxUWTTg<%0=dYk?i$G>qvxiAZT
zF|e9{ya1^Q$nbD*o;N^!2Z}gm4N{aWVhW08cs{}IFb*`^-d<EkIN%C^)(%|^izL}v
zP|&BOraH|w<UM=FjXm4qHvsOyit_R<&zIaLan}YwyCf2+JLp8;>Rrw3dtqqiGF7z?
zT5HR%(7~RYodrr@Ze=A%3%y?X{2XU9ev2O=xKYa8b#?p6iE^JcRZOY&U$HK{YKf#|
z7;@`P_)KaaZ%TQ?+NiXX6I^{RF0LI{d;2Q4B}>u^T2weNe!<c;P#@@*8{joNy9@xG
z+ys`2zzYOcIM`7QAr&?lq0G=8cjVST+5rBpX>1tokDBV!+Z<*IGH!4}!{n@ok>OGB
z`CizTp0;+#XWVPWCttgVJ-BM_m?6oL_cnrCXJlkACZ-phBEL!{B=2Nr-zME34wWb?
zE{4)EKQAxpH-4+gU+wtGr`}S&2s*m<lQQr|eO&l*C~*k}rj=bt-u6;|-&(ttXu;kW
zQ`6g^8h}PQQGQ~XEHfFQG|cX=p7$TZ>ojWu1P6G-sHn1F#TRH{fH8ebo=GzAw%-j2
zi5V#Q+I#F>&9KL=ciKLoWpvvnAtxs$B+Rd@1Q9?HtVB2p3S%JirKF;!hA^lF9DXb;
ziy&ct$$yt<mrzX$BOP{3F5rQi7#o|v4p&*ZgbV}-_@CiAEyRFj1M`PlAQ}tK-!ReD
z)s=juRROL;f-v02y4m-C!`T1C{r5;-INjAEVETT8;2!1#o+~|?uyG9<vu;j#@7}$u
zs~du#3VDC%&!BMRA=tuVsgNCA*8cJ1;`%zNeCK&A3qAdT=tvMdd;f`pW9iu$N_SUR
zeqV@|cKhEerS-VYUwMg)hzQ4wp}Kn6U8Xn8ni(p)VSC}^*7%=$ew=b@e-veAW~QZ;
zp&a<JvJ&3b)6;YQHaa@`5hipjG%VRyGhvbOwRy`Yo*-H-3=*Pp_Z20`L4Xqv93msT
z!L*+H&gBn?+BrJ+d|_w-_X`GRprI6?$LX9fS5aXd&kdD@^(=kiJ+~worKN*>%|V~=
zAAsDxEA6ngT0HS*m?B({yg+lO{&q(jCU79T04G$0D(B<bFSE0^f@vguKZ@wI`@=Gp
zjEqtUkJfJ+-@e_2?(pgS-d;>B!PQLLRS4;uq@<c}t|!K0s4Xrt-Vc2_4aZ)?{$uEt
zfA|mth~K^Fm-s}Y5D-9bTeFaLKUNasez<)SY(0Q-!xk|Sd9QdewB4%HzUdzm?-H%%
zeYi2mJK^|)`cR*A6XFyGaV_ipp&cNaw71iNXBWQb$5-?3<)gh@=BR{~?7RPC3Dwft
zh3HTmu_VJMJcaYu4?2<nXAU?-K&EMEZf-u;<OMPGx(f9}lVDuUfAfZAmHrnU=1Vws
zKGH!##ZUjXqwFAnm`sv!T=#_vgRkD+$HnUF1t0N|TM>Wt`>WnH&D68Gvf=QsK#(s|
zP3|dHxo$@uOBFZ3q=}GKJJ)OTUO<ly^Tzo!c$h&|&ETe>PzW^+s2MGU39qfsH-lzP
z00@C92X74sw<*ORfy(UZ!GQ<Zh7pi|{pgWD+5PtZG1#2Jeg;<Dge+bne)?eoBBF|d
z0`MY!E-ovB67C<jFDCfbwaGLEA!PebQ+$aa@5;y7)Y*APfGCDw>)pF|XAy^jp^~IW
zRcY0t!4EgMwI$%iix=pGyo?MuiQapw0arUN_GxCukzv_6ZSm33sn4D<({N;0KMs8i
z7`AvEWpncw@IhZ&u>RUOXb+K;8Q=VRp)R|dH~ErVs5j}sPFMkJC|*QiUg%q9t@nQP
zCX1m<W%u|?#47*uYOwKVgZthCDL)bLg;BZ6G1o5gm}`Nu!n|C0yXPS-LkuR}#ra6M
z!nM6sVJGsB7QP=z=_dlRC~E4zp5sd_*mtt3SlmXFsJf0vfBhFPFNA=x@<(o|Bpt!J
z?7!cl2?5vu{AB<C=O=L;I_56IQ&UL>aG@81hOV}7_d5`AA*HlQzt$H+i#xh=czAeX
zf~$`gGE-2#LknJd77Uf$betE3YacPK!!%%756s?>%$Vp^tIELS4CfU1>aH)@59eBJ
z&HU$hyWaNmgA}@-6P_SSRBFO@_b5Gw!#72YS>wcYW6Z{lQqs2=)+DG#iNU_G+RE_o
zKsUGE26qBTpN7X&$#FEe382w;ZFEYp0h((y^!|XcyLt<_@H5lX*Yf*+e&JQAVxTgt
zIzX6!;=>Mh*>G`b;yix~<sE01^@+?71QS@qH&bb1bo_gLzV$H_rof?feE4wa-?wsr
zPgalHL!dAeV#Bk$&`iwj3^L|-pkvHTORIPKD%-@edObmz72szd0a`{^s~~*bi9%If
zcTZ??@k)Bs*Vp@ijShxjR8$;{>mPg%R!d+NE*V88IO(E)Z)@DZ=k-`!my3*B-=tV>
zf$^D@0|PJb9$X8Y(`%VfDS$%{U&{_?ez2eeeTJOdd#tc;nGPmqB_I;Z%i|mKgIJA-
z5(YwH1}r4>G`ir$*v{_9hyo_iK?dn6ZYO+qO9GJnD+GZ!7f}NAsUG_*iy(iCnH?X`
z2jx4|y0&eH!i|ESZUc+EOG|WrK>zOdt#-o=I&o}z#Uqf-{^L_BP&3RCcfbi+RRxD7
z9H64ba!R<tWMYbnel|9WUS2kSr(5f{z=yoDwg$MK8axK2lamv$fq9*u?1RLorxFeq
zz^M3tA0%T^|Hf(dAs;e)9#cs;l?a|=VPG8YpRzraqdh%6?Zl&^n#+@CN!zG<IERmm
z3pa|@eUJk2F2pAgFh(taQUTUp9iQyW!w+vTJ|z?Q4zgkhF}%DZ5Z!Fys{|Ez_gF}L
ze0)t!O?bG}LIms6n3&ZK*k4_eoee8o)OY4vB?84Oi>;%vx5LBbVIduVz)2OTkF!9l
z7xwdLGZl`Y<xt4l9p;)`pmFk?k}R4O8IzPzYR_XdzZ--T>)+lF02-5S-fas~C_oli
z&;cQ>s;J1uV_*FZ89K<BA6{EtCH){%V1c*A^XTUq<U)+8w)-DzYz9F3e!a4CeT44Z
z(*2}6zOBd>%lp5*00l6N>ATJ~O@K-BA9NuxRVA8MK_J-IS5HL+ks*dsApktWK^7K?
za1c2<_Jf<8b8`bcaF8o%(1%_ZaEvZY;MIh&nF}PCRcL;7UYo+KQVz0dl)zGnNb@`V
z{xUC*P8gtzbY%?|F0khqVloYH?(NxU&z_++y39NSuMBPA2{cL==sQlUq0tFD!>I6+
ziT%#OPYEPj)X}bHKy)?25Vlv*_}cMdQ5(_l=U~kf>@Io)gbpzM2ElHoOvUzm>(`DB
z%ZXAV(dJ}b#Tcm=Yj;<;EZEI(Bf6<c2~-AoL@+=GB{P5r<ty5+;4fqQG|X691M454
zyJs6_QxgUY68m44eJwY9X`E5?e0wCX6Oz(K+6ev#eO$gh6I<Kw8&p43ucHp)K2E|t
z*_b8(&NKd;1=BLSeML-sJlMVakTvbCbi*Vd)8sa3dZpTw)UkZO*_&(UZDHX!w1otF
zj^Sm`SB&>iM1dJI<4%+BKD~A3+g+Y!dPd#$Fk&?9uVZ5hn9x}C^6?1=`x5Cs80ZWg
zfmlFFO3K(c(BF^VAJ?2W>HGWs)GRx?UYH&**DaujNkEBYX!PEZNGBdDM%4$nDeU@5
z5(y3`7_w<HyG7);Axx;gHI?fAEbiq9t8IlM1=SJ6#O;PCeSYJBuqTRt_2&!lX@V9H
z=bwYF*Q&52o~j-ziJZ|x+E;DA+_v+hoX%m)GH^E#v!Mubc&?yf=j+?>D|8u=OERRA
z5E^_HU}OpNg?&TQ9|D!3e1OdwPpKp_ipT;3FIHbKyb$J9!`K2XKJZ1l1~!#Jz7LpW
zjPUGVVEL{d3ngGZ>`G5bd$E$*65mnuw9+kp(-WTQL`ZV8UcG{}@fRe&&}dS@kW)yy
z-6s9NEA5jb1xSIEV(jd#Y<(aHFgDBDvVk78LlxeUpR0O_XU1(o1(x0DV`^HEv%sSZ
z7z^VA*cy;{mdd7U3(sfOR!Lcz6=c^Wvoxj1lO3Qt!6D;MJBzVU0JJgSpdgi244Q}B
zx{8n}RS@(k$G?7AZ`^$21RA{{Abi(Wvw@~Xkx^?FLlLBchSi;=qAT&`%b&d3fBjw`
zWgtav90qm!)|T@Z>fkqbsDQPaUs8gm{yMUo#)xB8a4_oc(p*&f=ZQ^`37IHlva8fJ
zpH$LrpaPWh8~Ax)p8T8lMTK!=Dfn|kLqo?ba#L?1Ab`f|3i_Gy(b#Yiug<{pa`S=v
zc=0G$s~}{-B%#KB>n8-17C#IK>liPO08?vU2%TlMPp~2_uc88A=o}4sJ79<&D0F_#
zW@V$_1(oOaj1SPgwhRr40>PSrAKs?@2F?E!D3ie|&I6M-F*uhXY0TBrefkbo@j$$h
z;kUH3y!$jqmEXEAsR(z5ml~FDdVtOmT1A!)uc7M&{lz(O9KE@7<wIEO1Um-*cLZpL
z@$&OW;VJCg)N($?kb_o9|8jS{e#u=SGwBQXN$67FrzGwTy<ybg)(#8U^EPRN#J#tA
zFW%P*LZ|d<eRL%Z31fOj0y>5i{LhU}bAw?w*8F=XkuJlMyDwqi&7rE3f_aK@wdFLd
zYCbx`0>uX`E{iFemb16DMSj}<G|nLpN>6acRNSjT#)q}W@L({*-82;sDJoh61$aUs
zlx0m#P4H@qV!2O3{lZ~9<#_Q2tE2}9j#Nq8!F9;#SNuOcA!~M?#&@57Qkz>*F$WQR
z{RezW@!2CkpoFp?D@6P6bK9$^SY&w-UeWngBm(dM;q1NRvF_jhVHt&%NQq=*WJ{#T
zjIzp}83|>}CM!E7dnU<FlqkwBWR$Wg8Ici5_8#~1{CvLO`}cd?f8N(W*Q(RI_xT#f
z@mz=8OIAPMFKk{9@8=&K`LMjWnf~&nJt6x-2{u~N5QO+REqISipK@1>IJ-DE*WTTI
z#VOidZ|6F{vi+93;a9?#y(?EbE2KA3-A=Tc%&yMWy=kovtp7#q_>xUP?M^sTi@RC~
z?j0qOuWfB=I9Pl?YeblknqqRd-a2v=1Y%W4c-C7|#fLtA99x~sv<m-FSEsD2yI21q
z>F2GGLw*$f2N)TzY;T%RUz$BCD<>z1Dz(Lg99RhDf5IM;1<tYN>5=c;PYz}_uN}H`
zC!OZHr?O1T(>4y#6&1>ugOq2;ibCBn(qd9OQ02GmcMa$lKaLsq9mLSBv!bG^^TgP%
z8gDG;usmg}(HQzpc8q=fy3|R{$(xaJSCz%r3gA3E7#`3+Z^ET=>JBED!7Un4DF2^|
zkTkki!AIj*N06L-(32m+#QWDE8Rj@SJw2VHnuen7f`WjVnHfCyWzJBq)#0whnk>P$
z1^v-No3!U(Rmx1W!+%S)?fo4^f<AqU>AqGD{|Fv+cLE9J%X_&PgDU?gu1JB!Oy-?w
zo!F)ZIgtz|8*%(^j1l6!?Ed3ap8oMx%D4IN-`+w|<%4i2hKGffmhyA2V~&mY>MUAa
zX;sxo3wqt&6*Nt;%>iA$zSRiAhM_&~e<ErSTeVxm#EsQRdcL_-^Y<&$Kp=Tu<1Jk6
zjlC<k8YAqWYkM;9f0X~RxZgIf@<Z@xOy^#uH3yu$eBh)hL=68uS5UjNiZYwYB+2s{
zSGKjb3K)gLSV=DRf1a4_B0p6Sip0-pQac&)dt>_lOs!+?+G+f!>AsTAmqz06(8U^=
z=A%N6e(ju!8~r`!xpN+0AM1m$yxUqEya112Jskqcp*z;Ba9hG}QA%Nr4NrdU`UkRi
z@veMbo00lCoJ%T?33&h_)}u&bwSEVW*==jvp6A*=i@y&^N=p8pC*Bjam(<k71u;Z*
z{D$Y;k(@_bQCa1;k5TM5SZnBwUKeqdVfYlIc<F~4=L!1@L<e~F+NfjTylLm>cgMaQ
zEHaw_*3^=GMl*aAs~SxQT=STcG5*F%6HdV#sxx{uzI<^{Uc4|uVQpkI#FCVjR_O8^
z@b)?H)izw$%YQ_PQgH0S{%a01AvXBL)RdT22kHO&?xIPWVk|h#@vHzbQXg|ejKKMU
z2({dSJ!E8dL)D+#+U|w+zjO3~@*CEXhf#BLb7&R(cR)MN{wOj-8r1%?+S=Vmc$36!
zzbPQg!FFnL>{_KqazKD=XU-R7gE;<tUwxl8HRi#24vyX9A3(<gH9WG7!x102hB~m^
zbwi}J`t945C>9c4zP(VR+$}8Ff5_58I}3g$6mf2DV{vg#GEZp!+dYv+A8leZBmeNN
zh=!P$7-a+h-!<F~JUlipze|sO(nh8g5VWYDP!SCMguQO#W=qn2rZn42`=F915+M&Q
zF20|dx`mVmjeFm_mn4J{8l(NLCND2J+ajHSq)pHZK8-~8*Yy;sdMj4nUY)*y31VaS
zX_ZNcH!XxRx&FIl(Rz+Ii}Y|iJ1@ZPVcYj+SC4G_nF|+G<mKi2k>C{V5yE*cA(F1E
zr^o-{fryUm&p&hXH*C5o<>lE=XJMKtW>Ha|UTA_R@uLy>kwb_0<Jmq`nbxi2xOPed
zgo7w>CvaMzbD<3LLf->JHz6kJ3t|;8mn?%%aYi(Jb$=@r8JQ<L`=<;kxl5OVLoZ_*
z2GFL4#ztgO?teNuqMch%P=JY|85u|)T0PoKEwlQ&z0PGVHyV%qMBM$-@y~md;$C5q
zunA+51wBoUlV`-I(09~NS3k-NZrb5%4-O{V$UgWB4*k_ZyrKKU!$`N+qdbi~-d|&@
za1so9im<Vf-mF8d6Q&4?q5f;?4^ewVkWs;RmL4a+l1yhR2!PTq^1*`?ard6+lcBp0
z94~;M8GoD-B)_F^-Rrs<BRz}LMR3@Hfki-|upqoZqvi9l;DeXd)NUIduNHq!PcLSv
z^mI>16W>$oppo$LeQyE~?1ZR~bUC0K+kEB%<ee3Z-hDD8-Dr_fZ!xb6Tei*44hO<F
zG1*u01DI5LJ=n6W0$#lZycEDg8>7u;Hh(ezjbc0}4kT0{r;)dTS}$Z)+;JovGaX}H
zP8pS0%R_Ds)$?B*Ege~0T=n55pas#689u!mmY2tMoZPU`*ypq&9E8~1Ub8>9r@x<p
zHr?XJjlK$ZcMn;rj2kfC9=OOZB|ymhr<kT#J*_x&9}{^tGcwJ(y0lhbO;zRu!)K!w
z+tc3O)23#IEDULX?HGcwgPwkSA(!b<ov`pT`ioRMhl`mmVtMZ%znx?4T8%Hw=i~4~
z7hGG3Tn}J$nCT~DB82(&cn;Tkx=wX%{Hx*e)<u5Fl`CH`_r`N=Uj9F9Ue8b0p0^H#
zfcCuC<}u1LID`Aox1t3c7*uu1XL3;vcLNNMGkbE{OedbZn~?F7d07|baq!;6!(2Dm
zQx&xCp!&*x`t+P>?K_NP$FS^7PeAVnaH@fGGkjyoRY;55U~@s5W@^g1PWIk&b41uw
zk|x}`OAl-18Nnu1>!{T|@6EzPk3|ZfutflcR1ji6v?wd)#zL~@7WP_L1*YtYrSZk_
zB}a7XB8LsO{PlHZ-Z!$cvd~D^@16wA0*(fgB-qUE+K;~eoW*|Ad@pNnd%LL>i3U}(
zv{rc25!kqX4y;kHHty_pZ|hvx(?^EMBgbU2_8`E|$Y@IFk>qtw(zehh(eLAQ_Ms6G
zuu)jY$V>9g9wnBff+|MHo8>7N)%anpr&dl@BPPVV{g{|ce73xWro|tbDW8@ZH5W3u
zEoZ(NAK*z9)B54V*)k%Eo`+GisJax_Iq9C~a<dqnW}ApCP^~~x$h}M#Qsh#uHvZIf
zmY0)D_jxE<wY9)4c1qzlmlEDb<NK2j_b^0?3bTL?PLpn6;{Gi`N2Hl_f#U%oMuIfD
zZtVrdNkWghcgIc!Gi7Oy9#usX;YWSpTY9>wN0Zf{dcdk^Q%r)gh7Zn6xf`p(XV5rc
zpc;<vomU+D4o0f!>ROP_MFuo796S%Qd{y-6_bVtL?oE?C66EIQI57U&?@mDSvr|G(
zsCI-rDm9-3;eQ&E;+HDW%*-%VR#xhTcr1)x!QL!CfE8t7X=%XetP}y5%zI}$Rq;rj
zi>s@$5OP^m>OvmECe|uyWH^Ip3~zubTyi{&*LL&&EhJjQJn~-%RTLU=AdzX(J-hKX
zm*HVpn6_3{dtklP-V+WNM#F*q1$2?6tJaJ@{9i2K@#Dt<#FLj;Mg2K-#*Nzl{{U$c
z{onvznhc#66nqMv>wg}J&*-?s9o{qC_P9sXKB^Scg{P(tY_9F4izfN0-RyUbYWoM{
z4GQ8&_a_FjA<Wx$8tQj8y>hbT0-~C(%yK4Jn^~D6bIhpRW&E{d?NuPJ6+RoKQ2o7n
z`~ey#RN(bOlq#uF75#*~2_V;~+~W`VG0;(%zJB=d;TN0F)P#IcxdUuhj>u|j)04}L
za?IA>Or`e*ihbKOp8&>NcYUj`uQaMS(BZ=Y;RNNcC&>E(jL0^V4Sw_`c!c{Y5TJ(+
zM^{u;RRPYnFg2b0t;gbjWqPz(6Hukl*|T}t`4QjVYSOb^hhhja()M1_dQU>&O2?(^
z*MH*Crg~oNB^YdQNe+X3$Y&6-7WPKnDum3G)3-5B_UVaEx&_qU(NYMD!2MZvdsvp(
zPgC;&?yaG6*Ay>~#B2rX2zh?f!ooraCw+fIFu+^UCol78-Ii@qjOD0X08DoqgvQCM
zNvDU=yk)7S%cA_hE_Z-PD5{H@aL104cJx_jUAc1eb0oD~LdNswakNI4<WZ(!`6cih
zoxM?i@8g4`sCPU7sd@K8V1{Zy#Io%@*gp(tKWo`W6(G0%?bRzmjC&rrsi1H#ElrB1
zXYJukTYBePhZ8`cj!F6UgRHzRHEe1>RNa}c`wuS=Q`;*I&sRXf;_2bRrqGde+6>=e
zIRY+mHr5gbgZm|%H8eDYTGP|79p<-#jAB6)Rl)}kA_67i?%lfx!#^#^rcWO#B0Gub
z0L%xWN7V@RAz4>nXRd1Y7RX4w47oWJLzSKj9KpQuF#wmLwTfh${Qa9Pk+w;@9+uKI
z5C_Z)x&?Y=K$m@de2xcK!PQ|<bmP3L-haWckN0XGVhCR}he(n<v)P;y#lcAO{rf*t
zNM(^urvJEtv%*Z#r>WvGsa7%Oon&NK5}l6DMAIVui_FhbU#9~ll2ZKRB=eCYO$RxW
zOU<`8$^P`b2qvxN82yfiQ`@hhsqDj2jJs5}15Zl1z9$7!eW6|$TgpZD%K@~{?}=o7
zofi{h9feS7d&41MaTr(wBHbn$0X{qf*P{?#={@yDLNGHqDQR{)L(Q@j35E#?h!U|#
zhBoOVT35z1mjuuBegB@EoNQ(Dhiw*GgZ~3;eT-CkoP9yj&8_r;BA59`T-wk|?Q(oT
z_tLnElEwybrQ=~CrqdX78J<?#(sDuh@&)S20Nx;d85}<5=3gIe94bVJ;U;F!$5~}C
z;v74!@W}WJ^~v;rkdXV8-k1op58z=K2+v24gr0QU(n<UuG>n_>DTXuze=G#|+Haz$
znCCDgX%!Bo%Psi_N5<|S(0Z<=*zY<wBHwh@WXQzrBdQ}>Ud!m8w}G$Mzw%trad#KB
zWYKHE=qW92O%swYKYlcVE^mGW6UE|Gw`M=&3q~>9xTOb+E%M(bpHs#_G#x#CeVP4E
zqAu5+G*R`?Z*ET3-Fv(%PbQh9olNg4nUV-Uzp?&#O~wec6yu+Bm1|=VffJHtRZ3^?
zAS1z00>}_>5}BvxqnCkATtBVq&xCPmY6X60CYRqx@p#$RM&<GR*|RJO>LS_WCr<GD
zFxO|f5E*d+k2e5ROgguSp>vogbK=Aa2-z6K-Gr6TAmxs#$ZFr?hAHuYVJGSz@-!QD
zd;@z#91}Psy`1z}><(NRp84gnw(#c+icEhyLC$=c0~+^Sgod+^7Wr&cN1x=B@Z07#
zI$faudTi;>%A{ERz!r@;8v#>@VR>O^TNx4Dcb40Db)mJ8OJ(#3#0`neD-6q`r?j6R
zrfh;|AMJ@#8hjI41$r_DllaRAt5utoe~plxxb-=X>-F^yvU<y)0gKjfWY0v}_?N&6
z-f%Hw-?-!ry6C4*p8~GM*&Lmg*!nZ3LFJU;yH~lnx17A94XiW?#i2g^`#jT3<Pjg*
zcej562s)JCQMV~JvC7SF-TK^d$)K23`)Trn!(1)+I(%eeMlq}6-(Xptda-#CGSzeD
zPMP1l`iJY$aRp9e7%c30H5(dgYkB!X6$*z>d(NL4{4DXeziQ*D!Xf307p?b!g;IFr
z;!^%o+iu%<{O{c2dCqOI%7j_>Z00=}f>2QkOuetvE<av7TEwR3YRXw70+vK3ASfs;
zRA!k5xD~IoQjQ`$%^ZjL(`p<u5?;%^<dryIA8-`n%u-33O{=PscrykR96>Ub*FS7R
zU31S7NfVYff54Sf22f4eBM*!Biv`W(;?feVCaLE>U8Ua>>V%X;u{(=;SOI5kza=e8
z8YnFMZa0Gf2WL+_j!xu1K_SV9@MP*OM?M_g-vHo11ga77+)~}9$xLtg>6XTq`}NZI
zWCK{YDlg`-o#q2LsD%d4d$?BnB?)jW^+Mw-w<h|m&PSyTIPF!iYm9i&(xPH$B*pd(
zcwYsE5v3>0VFV6R>CO`dLb(buGrv-bzmG947w=*Su!z-&t*L1_Cf6&)e}c=tvA4HI
zDW0;42U@zJy(`0YoQ{+jLUNC)2D~lI09*(yCdAwic%-v9Fdpyd<B%ud;;}Qvt2atg
zkkEZG>htM8`(GNA6vHF{)yhKzN}fFn`DWo8F!Q@gkriQCilYl3S76o{fsO$ZlDm5j
z&iwoS+8uB#vyo1r@e<_HzD8;?Km>5OZLDejp6|+4b&#}rNKXG5$N5<VAi<o1Bw8?8
z$B&c=kB22E9~0&dzpqGH3%CK~S1yc71_lQB5r-OAvy~G0Q{m%khgugJCG^{2G@R1=
zl{PL0KT1mCy;d4j=n+j^MS6#Ujt)w4(e46;7Q`Y%@u7{`S^oPPy)|kL=3cyg1#fTf
z^xa59n;9K_Pg>Da7q}-<rU=6(RF}RbC7I`XS0Ei_kPmE8PgmEdBxs(MxwSHj&m7B%
z($*~9F+Y~ZAKI+UFw&nbs4%T_Q&la5PB=I?7=eH<y*<S*UL<+<Yb5AFFeYdm9Vjo^
znX7}@--uoLh^Po3^9<RcL($MAT}csxB;qi?Ek%1%P`1riOn=AlLMkEZ%f}cPI1;IG
zL{|nLw|*JUJil+QMn=2{Lw&xbqGZRkzleyCY5$*!_D@tFGmh~$w}((&K$Sg0Cu?<m
z>x`hFg40nN9s7HTr9)blmD8>mLJkseb5sbXPW04@@|t%H#(A%_;NoKr`#5PV7bOKA
zo%aheer#-P!cw?y$vcH2JnDa-MBYvh50A+yYnELjN!^b-xudU<latq)1uqA*v=RsZ
zNYBhnPJXt!m*qbJf^s?nq*>fm>ez$U8_QM72`$t<mm(f_y|@-yY@wWUhga^ZQ-#x0
zW^>uz-RU(eI9ZWWp_S8;w%2=ma|wQ&(ET(=EG1m0E-a#o+@CDya@#qc8#1SFyoT?d
zUrEWq*qPh!>vhZDw5gT&ZY?7$R$MHBW~J77W#%H;-bWYr)Hdj4-OG-RJxO!t@mEGE
zUplD`Wcs5_>97oBr;haxy%7A&={hoxk6(oXTj3J7CooVV7h+xqSP2gIjgCK2l$nq=
z&0+SR<$v|&jY=UsDFk3~iHXjRWr>DFO=aPEG8{$H96Eu_M%Gjc`7#LxI&7XEhKBuE
zkgKu}NTbgTx0Z!Ax>q+dQk?MpF66Twj<d*Fv@Zlm&}UMHKCW}vADTJgb~U~vZQca5
zS|j_@K5%bunK#zfP@VRF{R%zYeIDIygR?mp+J@32NMdMk@X$?9tuOkQ4w*!HEZmdm
zrlpM^`SpuBsH>yn=K&1Vqa)F`4hjkifS(PXN*W}l+LMuz7W0mO$Yt|INqwI3(Ys{k
zd0{mjbdu&fV$bwJET<fjJCLKs@&Mlsj+Uo)mOiN@#Un>(xY_&ztg~HRzI^fvp!I(9
zoC^pH{P-ahI+b0!cB%ZfIyMI@1LSNk^@_ZaZaGlCM0f7CH1y)gkVDD+9U>M;?8zE-
z&<T5a?cjgj4yGLQuc_I=@f*6I0cm9M=bguOo~fnFKN#ozp{^Dc2|Cu^P$8fSow8-d
zBQaMM1D&yG3Y(V{HEiGeQqLP8fbia9qW>tH1DXyYv~UDLVt75F71r9hyZ4*-q&On}
z??!0Gt5>fOCXho#$3l2{H{)PD!4?s*>mz;A=H=ZteA?_%-RM`g9%bMG*atFHH(sL;
zA#WvR_|=Tsc86BR(%c*vktR>R?DqC9jMzKObMp(^faXQnApVkf89){dE8Kp3FFVUW
zJUgseTFU<7#e-M8B-XdD?;qwQUbr4<7jU@Vqys9LQ7VLy5jvU(X>bOf3nAWJk8R;-
zu?{#L#6@~ZVNl&rUtj(W&+~kn*@&l5^CFgJ7-toxVLkXmDWn+bJ|ieB98eX#wI8`%
zMOK|JF;?Xw&HV>%$fdEzL^6AOrrrB~x2IpsM?BNlq#{9n{=wQ>OnH24aavJHQbC4X
z_Wyp4`k}^wtzVc4nB{Z-Fc+z5U=6R0nuf;m($cS)pFe*JpAflG--Ms!@a>iHwQChR
zFT{9h_F;UqziP73*;PmPx)8scEHgje^0>pBb<Ur}Wvc6u_`ZFMoGNq&hPkVB((|l#
zc|fgKx8G;4ep9clmb&7NAm`=xe4(p*udF)JquN=mKw21~)vno>#q1m9*YU)V6;Z2u
zr4q>Wu3ZBsFoI68P5mgpp~5e9HBFQtYJrd?Y_BizeD-83bE+zyPfLDQtWR0Ja6{aP
z^l~F*fJBtC3}JEnH_;Qhn{1q$@6=jYWxkc#r9j@e{JXugp&`fdS3~Fl#;c#z!D*+Q
zHXDav1630=c}EVs-?(*etIGCufcfFvbI+q9Iq`(6f6SZ3g6=IKxE|#AK1xcVGiU5D
zA+|5^4aYrRc7`4nwrx*K#@d#Pf2fp5lz&cjr)29g$K4!lQViU^q*V6H(!+x^?KeA#
z+~v!;?jPxo2mJFwPop0KN8Hg+j_n_Dj}kgg$?%gqJ0z+bghnxM^9vb<sx2R>#jS^3
z3h^7RdL=Qjav-3v6PZ@H*`aE-wYP837dvJ1zgU0}X|*#v`WSh|tDfQU+`o!Fj$8Y_
z#W956!HI(YP`Pq%A)CAV3K*04Q>JF-=1s*(SZN6SnlGR?l_m6<-iK*vGctruk)L_x
z%XOgn6<h^f#g+9Rdu{9egPwfuJIyEp$UK?``obXkX{7u{o*01e0;0q^iGPT|vF{H;
z?SplpyQp#$TL`Kl_T#uiuWE1F{wVc9#GbFORP1qiW*QJ`eh}k9Ny<6vhqeK@I-+Fi
zMgMf?!*LQ4ZsbIN3<@tp!)Y|v1e!5g+<)od+4rN%SR*{$o)`j4yOzaOM(kL&c0u;x
z4O_(@K~K6L6z86IB;tUw=#VFeIAJV1Ll8Z3HuK(45;WDAsZdqv3x!F5#XT@o7>{6X
zYg<VW4QV2b*s484`$GU3sLF|%8R(dvpss|1B!NKV$lcFkUh5FLt9BK(<*&)f{J2Y=
zJrE&mXxW4S!c2o*yZm46=NKgOIR{}m6fLBrq_144Pn_^ig8Zcam1!Mmz%29*pcf#N
za(5|sg}$P`aj?RDs3E5dy#UQ>MOhi9V<LrH7AesHPxn(&j%*_}yRY2!2NJ3f>Nh#6
zg%q~V5f)Vc&$RN25kCp2@goL~NcKY3iIN6%v0;IpI_P@zFyPE--PEf^1qE+|D91_5
zrBhH3@xAQDi)B(*_qX5cgzD(5eg9&2e(wz>+((^NUaBWEF?GwwEGFAGMa0JcfxHk{
z3T_{3^Su`wo1kg=&sVW>_d6d+s?_Ua>=e9_j$0B8p3KAl2+^nkO)MA_gW;-bLiU1_
zCt@IZHjN>((-#BVY^$K4fO3Rh`1bbfFv-{2EmJ3016;8a2mm=^Fkona+VI-?dpN8h
zrK)zB)PP7PaTy7R4#3_a@Yq~i0Egj=DA-ePh8%r|Dm@=WM!G{H2%Qcn`{37tVPVv!
zynKA<VetKZhK8Od_cc&0H#axbKHtimkLo6=g&a7rta9VRG@`B%wu(zg?E3q=s8yim
z3}7OQM*!qDS{}^8{nXlu3}?3+N(sFB^oI^b)T1&oDRUwl0rzV0A;7bzM;<+rD@2zk
z=AjIr3W8EaNJIoaiEWetcvF5PZw8)z8*d3)4XY#ycR2t3>b*CLg<DbX&opI|&U1Vy
zbeqy-#lADADV}aTNSl?JnbL2}f4H-H@dbH(63jIST_`InL%A~=o0&;Mvp9$d$ZrS$
zgSgwF>zOJ11xj(NXA&pjghwcRFbN*_(RIOekQYo}EN^HKrQlV@>%<7o;7{|2Vz011
zNdGZdr0;p-o=5dQP-2sd0B-OppW>Yrgz}<tzz{&l+63nl1TMnYrTxB94EsR?08GZD
z!j0_yp%i-hDOdoL&pTi8CvJc#=eUS9^a8bFm4XZ-dV2JHyu7dU%U!IpVjC-O53?E$
zJdvny<infUgzZm(Vk7nMY^V;wt5D)v1i%w23h<=Se?dvYHs8FwyzHTWI$)LI{ndM|
za^cdpArp-8e5(d5>Iz9Ns_hunih*j?K7S|!O`(9w*UD>Ri%mRn!DI7F%F6ED>uzoq
z)jkW;Z8AxcKbQY{;Zlzb4}Vj_2Oearzx&tXhupZE$Jnt<DX>g2`3sqeTxC@dg0I@#
zxKY~?SW_d_;)u?8d#;Wl<(U<rI#e&`SA(P-WzHdH>IE!sXh7lXNOif4WRpkfCEK;Z
z&QX40nI*3TAvhidEY&|C1?{}%y7bHMcQZ3jZf~#7krXdLKL)Ds7rly+5#xO=VJ#(+
z{fKRP378~J!t01wDS`~~>R~rsjpb}jVm>N5*Gd;2ySlNxB~C7T@?;&h_X#l<x-}qr
zj2x4OpUiNb9e4kkxxF~KQ0?R8Z1F&0yk)JEqNkx@w>8xPI%Nz2tiSRIYm18zhs&`0
zqoJ;@`=_{OY{~O()0oko`YInfJH!vcaB_omPV~Jf>%>Zni=!ub7_2wXo<99a%X1bh
zUshFh0(0unv1DG_KfkmDwzDQXyY1{c(o4|VBj{L0TYKrfKR9C(N4J+>oG85auOCiG
zpV&*la5s(2zgxUPLyis+=$&tj7nUHr<4xK+eKL&7PSY<@MGd?E?Gq99LIhUf0NxU)
z{_#J5_6A;q_!4Ik=LxzaM;h2V{W&5)8K)sV^h49`ADAbj4T$b!m9EUN?vs0VQ876^
zbQWV$Tesulwe{xT_lrVrkAP$B5if)w0`P~RZMJt~|KeyAOW@k$0SIK|*gL*_*?$?|
zthU$*&ovW@dq?ioz7=fl45LW6dIpw@PpDFTyrB)8WTd9<K-URA4w?h#dB`fn+-JH9
zO_&gAIp6it=!IFMj%Cru+$)-zfua_YUds^qG=MaNHp|Invzu*wb?)_@C2J_p>FGut
z+B2{T5qGug&cAGPuG&#wf|Ux3vO^XrVc7(^5R=q4$WF+ZJ1TJGAyT$OJHJEX^KXBW
zT3#V|nI|+jg@oW=>cQSbk+w^&5BD%Cz{nxIqQ8F`(c_;nYjE*Jdj3JIozs5X#7$i~
zFAS6#Ju&MEbpp!%#)eD339Q^uT<6n_4C2lqI8RnN_Jy=ng#|LgHqW}ymQLbLA*Z*{
z($WIzB6Jpr<t#)Lmm&R0%Cb47l>u!z;#dH5qBDEyV3NN64#3GMwOWQ8#pzwwvB*Fu
zT1*-|Kznt!+IJhmz4RnhF_l>EfPSs}->K(bO;tNP_ZIJlmnY1nCZvX2-dZrADb;&p
z+;e^LBjyagdGiKsCA3L6<!ALn=|^|XPxL|*+8lIfX%L?{{^Zi7-Izvg$@<0UOeb5f
zMI4k8q0GvAS&}Yz3K?uzcRee!>E$0>YX9=Z2doRqYJY}*b1ok_qV4!kUJ8G<`{I)z
z$m%kewqS9%cbvH3hI}q)dB3%JGWvri<dTaKf#%^1qCL%dBe=&u2JbrW{re|GQEl&$
z9-6M1t6@@qFowFJ8IwOC^RxtWikd5|PAgC2<Iqset=2&_LshPSmLH#YW>Le)1DLLG
zav7rMfn)T8_xg4fkOYa(aYezrEr|k59bxC9sgEXlfi+d;--Ro&3L46NPf$xC>|!j6
z<swulwJ1xKXLU|+Eb<+_bhu8osW|xkLT62Q+(uD32Xdfe56SVHqZ|HsUmqLZe)=1W
zrLjz`z;uwMDaF1`k;%7dLxty?mlj<<CcnoJdQ3B%|9K%Bg^vFHaI*BWGU)%jQ2t1Q
zIoP{bnUPV#%PSOvJ>H)s|1p3--p-Q4EM4@xR*<d@9p-|S4HBdaZqw)F=xqblQh?T{
z3Yy-)y$mluFC%qY0^}4jkxReZ_d2OBx;r_6Rrvuf;YGoHOhtH(tctuG^TprlNPN+&
zx?=~Mu(x-mxXbUTbK%j^!)pt-a1DAbO?84IL;4YFq!VXJIg-^Tz}|oQq%`a9!uxN0
zywqny$GdyAARSnlv=Ve9ebqh{qttB`?uCl6+ds-(8H5G1#<8b7CWJwfQ;rl|{r+8*
zVP0T%Q#f_KGkmvEi5~UAJ!chZsLKw~k?cJp+<1$A_xnN<2_$J{XqCH!;pV~YQ*@As
z*0i}gKl1Sfpvi}kgswkZxwi-uJ~MeTD`D_aF{qEbs6k+%hAjNvuifdp(<##Tq15<f
zPAbU_RR)HHTosJBe2%=NboOHDUBBKi1yt6m<HNc3>^&GcyRd+~<SW*?=k^5xaPD~W
zE(m4m$;=KX3c;%*w<mW!lq<ita|MIAfCwS5Mzho90txA^3l}PTUK(LYfO(w0gTp_B
zi34Pd&`H5J*<JY08wPiJk>_XhX(oO5LjWtCx~?g&%6};RptI3R``x?DP;5g~HfqWt
zFG3)HZ{Exp5eNdU{Qf<aeic;|_no&{?{RFQAcUDTJ12)STQ^@v<e7~3e#~f@7+-FG
z&nz`Mf@=U((Y*@i)!97!Gn5I*kB&eQ?Q_-G;G`-`UFd~d2{!_ohRv%nhsJ4Ny0F?6
z6vawEDHu;J^tjLw#l{)uW$?2Yg`QGY5TTQFXl7TuB1^1lDBH)Gr}|I$MNq+Q_Z_Mu
zN4Wn6dVRRHTS<IXr>wjj7nQ~vfow_xDxl!7=U642M-ZNwwROl8p)~%FdE->nxfZl1
z_||X`mcX+q$hrl#WZ%a%DBqg~5w0(kOg-$z=$GBiJT&@?f`ZlE)WM{ur&P<*lFnEu
z<Cd0|OJ`2)xxE}MjJJ)ImA?gBU;NW^#o&!49Sx1L2IBWwd7>N>+qKZSko!Vd%z(o%
zA9Ft*(wEc^p}f@>TU(to3#PmZXS|ivD9#HcwCm^O>9(#lJY={Hkb0;iTQOW`pl0Vi
zGGF0Ba#qf)LzfzTGl50O*_IL_;&6Hqr<Iv1h>uM5?>^Ul$hK9c!*;Kq?9m%MH9Uax
zeI?g0iuZ}6&)kPVPB*vgY?4@dbg@mW#n+GvKVz{vYg%0`If5&odYWkjS+^(w5X#bW
ze<niz13nhrO1+TW&4@9TB*7=**x0f=je|yaFFTgn(LH&`Kra&z%lu(rU?5$s;Jzm1
zVM;QkXja;+!#p$mv<6x4Dk|85q?sukx6;hl|JFQ=j>=+7{&OMW`0IZyl_$UN_xg8+
zdhrg-<x`y~kuP|A{M%e}R=RUWz(92I>xZDfVP}c;)i;*;aI?>i1Q+5UYGhjB)2P?p
zMPz<~m?etC#QXHiD=DSup@cSPhwEb42M#jc=c}*sWjyEd`?lvJDZdY@QjEvx=ngwv
zvf5n#lUJULiyn!I$ztAcTHrnxKR*V^?-$UIOB3)*x?%jv<J5(fsc!N1{DDCr&YHRW
zFhKJ2lfk5(<99wgtBIBJD1SMc74UtZ-h&N=`ks%(Z+lG_Yy-}ztgB~leKpL}KEkbK
z{{F5%4*&8ONn);#;#8f-K0$UDiUs(o(|e8b@Ts4Vx@farn$)oH2;@(U>nQorml(O}
zLWAnJHg>c`-6$59Q>pEDrP6Yn-kDvy3bTD$l8Syc`gtPr>KI69W2-W^zmNLt%A9Di
zhF`F4{ZKsTur74^bWv&VK+lu^#R5t-I#Tqb?`W_r>Z_U5s8?mERQ^)%=l%5l{ZrfT
z8jzdAxfv0wX-q~mo5oB<Y$asfbt{qINQb25l_{a{*LrK8iaAP>K7)yL3tKDBC{y9r
zD)T4#l}LjmRhM3kqcFJ1$P}f|!GDP2{wvHtJugzS%|)%dCd#d#hItLkb9<)L&@0o_
zni>-Xx}Y0h+}L;UV4~;4@NhtbK)?E=b~ZJuekspGXI^6WBLRPlM?B<iNRy~&X(#{w
z1qLh%=siWqBBuN|li%Z&$=o!w?=7vZCK?&^jut%Nx%D$IErDJ5G~UELQ09!-k5r+t
zZ$%~w3J>1$VyFZ_Bt5+(T%L1(3Ue`7!DhHNZSe=XncmFHEA5$$AcwAoRsFp+{ir2%
zV*pF)R_nIT@@UfOqU`gNHJZ5*plFM0QS}3xE`wj7%-P{bss5$?^uivnnkjC%jeN;B
zXQbZDI`K^0O3l4pos5X+r=3NYyv5z=iQKd!=)81R7NJ|j*b&Fux0A%(zrvefYxft1
zUl4c4j<J`Gz4s>pm8&5jz?M7<og<gweO}oq8>#KpD#%z6fXl|DL>=o!k&Gl7AXzpq
z42q8Bs3do26u=_kfk<YT1q5s;(Zw2?+uQT2g0FJgTn!WDSLZeWb4g8}nVD%WZGZ?*
z4yl?gw-B~duI*=Twro!324j4(?#N8##IU+A%>PplH9jQ@>}+rR<0*2#b&Ta>Gwv{`
zoix{@r|%#w&E4I7%Yu-2($k|;u2GoBqxt-(b%z6jLqgboz*+p~rQO1ZJxmJYasH@y
zuvv`5s_L%z>YEA_=1x&68}k{yYwIt2ZShVio?ByITxt(WX*oafx$!TuSqi7-1Qx%t
zEIrB?m;b~4NjGlKE+T0IDsulg6p4;-KDekNV6Dp^a5LOoKdV;m2pDg^mXotWn!YTo
zB(6tO_%yO!UC?+Jhb^Qy+G!L*=sK*KE5VM%QQ=T~gF3@iOHU6OQg0VY(y85zVuyS;
zjHoA3$pO~`o2ou$*Ua&Zr1&>Py?Mu<tHS%tmIo2D@%|t(%1!5ohI>MfD;YLujvUy!
zFJ8vK?O!aE*!A1RU9Ua0kggDl#gH^V$v%V<`Ap5s<Q$0OnK<n}vqGV}1eZ+cfh`HA
z(OXlUH9L|JY0$Wy8+PDS?u_)K-ut?LfP;ug`sPJuQVk_pBWPA=7}>w8_@Y0}Q)QRT
zUe4i|^0Zg#|HAFMRlj7lUL$GNn(BP}m2P44%X*{UEV(f1^;E!35a&v9bC&~0N6Gg!
zv2_eG7o|tAxG70@oA7)u54t6v6Vwv_`$<@@y_FS<I2#h8eAXK(-eY*lsS0`b$TrCA
z8R)lnj3j<-xfQ>;OEPrHV`s<z9Y@4W>C$B`A|fJ(2h!wO-2l}Q5do`>gn3gN3TNeG
z&mo+{l8U>K8S)rs1-Q3D+@|Z!=g*z%hm&Mw5wk(3?uK55T%dKTPr&fqvjcJbMg~Hv
z5G}aw5t~}?Jr9pnZf<Yjo|Ud2MiERq7UlhGnn(Cb#JRkbOx40Zzl7vxWA#^LTvxtY
z`X<z}uBzF~me$rIQ&aSXTQIt6Tz7GDnqOE@Hhl}fu!-+^V;}Bx1NXYtpc+PONur%P
z?8vw~YxD7P=LRm`cp@z6Igg^Vs58f>6O|%bDabUm!XzHPD1QCA6LmghQT!iyj;Z}v
z!g)B1EebGTWo~YbaHo`;;9p?rfd7YDQ3Ms|>SV6GH2^$Mw40J!F0&xm*<$Q)O_)>@
z6AbtNIzN7tACH;kszbkHQ05f>ayIFR#<f`aNV?PWxPx)jTi97tV0?B?mNDR%EK4p1
z_CFB6XF{9$>}Y&@iSj4pe2g453IEfX>ppKpD`0F`+SS`DDkP+Fa|g;s0zg1d&&>zS
zf=Sr&UQE3M=U}B$0_)QI#{-FfPW)#-(I3KoGC+)Q=;iYRW*-8+u`NvI2ExKKkf(Y1
z*!K2D8E|nBR6hN*yl>GULViMh_3Bsr0SqeKTq_4bpmdix=Yk~BeXjL!aM0NOks+=?
z-*v0umgJ%F=3n0`+|v|et2?yU##_^LA?(4t#&hRJ<7{z>4AJuHsnw`*olqLS%Fz_h
z)4GSrn~jU#h&$-UU?mfp9pq{J#X2Go$e$CgIJocJ0ay)D5ud^0>&#5&JPiw+PMi$S
zhWK4SK<5QFfHxw~n%%qKSkdIwAK^FD8pqYu1vkvZmut)eM|kxVJ_TYSTvZ%-OXFb7
zp6@AKE4`wIwb0SPeBpxOF5#2oez=t?E1xJjIXgOP38_d+OY7<B;iijyBt3XngP|++
zWG-PsB}{J=G^qt^SiX?l#ZY=_n8)_%f}iW)**_&GCr8L@0F0vaNYMzCOGiV4m~lnd
ziEO`tZi_+8TUD^mEuS>0^f0xzkFNbe)Q}=Nc0r=*?_UgRR53RW+)>}=VM%=3AlEo(
zU;n<XDMMusyUqN<-l(J1<vX44Rz`bGZ{12wc-bXIu3?O%2bDr8@?xE1>u<?CCOYQi
zpPV21D9w?$EE;iOf{OT96UIEPQFNv7vnjEfWc-~kRjn4gb?kC85w(8@`~Le`U&oX=
zE^vPOG-dK#0Jo0P{f{Z4`Ay|4R76DPvZS(jJw(l(YaRcv@aE677oB(dh5#i!U+$)W
zbD{V(MAA+%ih-YYMlu2l!YEnrAMOe(a`3apo}?lsnzcuE>$&z6JCs7_f_pFB$prWf
zUYW4jd#Mi{0`sz;lQUN<)j5S4IU>Mh;kmd2J_G1wUY5-D>urE+oyJ?BBT<BhkUbWc
zW;4iPTU%R0Bcr7s(0)}_R)#;k(%-MdExoLfrC=&wc6sV^0(lS-Q6&S!G5W7>+SM+j
z9)MOuTJdx<CmsNowkBZaUk|N^stMIJ)Pntpi7XkzafCj9XZ;V?$xHiGb6Rn3HrCez
zYtdIMLb;BMq8eZ;{P3TC;QpJuyNd)m1?~^pVP6`8VTTyVQluGs@%WtMJle`;2P>iR
zuUk+|SOb%I&?{;2sTTn;Uz5*FAcbhDaQ|7%XvQasiHQO9zr3p$6AY)FN1sK#!q!;f
zX&NEC-Mj8)eQz94lCVaqXG+HA?l~~6n}&!k3GJ=^nw{&Ls{&wI(z-}-&#c2rr(_Ky
zo(s%cd5^{lYnI)AxB0?OLYU$`ct1`BT17&q0E`<09mf9E9K?vWmrzFHc+nlaUl22W
zOtJLSwPT|8n<jo+@xL)vN<437=KE{i-g(GOaE9l44bTz^(fd<9x_SNjY!B1nr&s0!
z)&%~E-J8Br8)$>L)IEfPTXHE6!Us^gXjzmKTyVN${9GEW_Ia<7ll2rl2Wn}=aGbxh
zm;_1|<+!k2pUNc>hrtX?grZ37C^8F$rp|l$`!l)TVM2J{oh5#?_lU_UAM)D??1Q_b
z4!5TFXwxD6_4JE=%E}slGGkn$Ai8J;QU2*YT)#0>`iFURMjDwWs#c8uA=^@sxa;4o
zwRsaLB!N(}e<)UC=|$OrzONQeQn*W-3;tqbTcpDT6D?`cs*qLbBVH;kdb8zQo@Oq0
zkwpXRnOna3^;LcdkkEf&u%9#6JLU|#f^ufpy1AQ(Gv>x3Gp@#K<%!0#xJy=R<0)1`
z%p2zieL*^0MuAPJ=Z!vNkY|<wp1;b&D@Xo8LPW&Z;#zRg8VnXRlB+*2=H;M%)n0A@
zr?V(J3Q^HiCp>~poxsJpiK3#(gWCAl^bm+bcj81k5f_I5o#*!`is*FKlPA$(uT7-+
zL3fBOB2`?)m?ClARSSR{aJm&#?4kRPZ7#Gvxb@}Hui@eLiWM&<+m_#J!=WTJ%NzoI
zaK<_Gz41g!#@r>vAecI~2y1=yhAmF>hKQ{jUmursNZNi=a}B^vi>rn=c}cxltSL^2
zSzTwhQrxL0TCGa`GU-FU;yi3@F8%KWV9;9JIPbMwP*LFpYSe{q-VLsSZ*a@T=wJIT
z4KM<;^b$^~XP|{aqk-`8#5dr0u1Ykjo~?m4O-K-xKFV7Jge{2<sQ?<k3Y|WPD*Qn)
zIPe_UX!IjYzN>SDXf~YbIw}Jh#AK9BcZ(c1HEn?pLLbIMt6-D^jLZTp!%}Ws5%jy!
zC(O4nffwO%6<{!Uib~{$;3Y!uYwYWY7B9vCXms`uDvIo>Y4qgtT5i?EM90FM$<vMI
zlLwoc1katTZ)wrmrE$qvaK4y@iuIym(H~?QUXIx0E4uu|KwlrDEJjisa+Fxqr{vST
z=N(}T&91^UI%-aUGf+Ul|IEFnk9I1kO7T5>mhyNuOu{hE*Rk7D$1+@5SlHP37uXR=
z&EQm<dnH8@uos$CB=m@jiCvP-q4wha^Fgk+vAJ3CZ>}1Pt|x#<W1$!^5Y{G~eXkK4
zLe0SZ*?zF{^zd_(s_FW#a}@t3WcBDULQ(s=Rf>tW_e9a{VO5Qe0-YDnr)k2j6)Vj@
ziJ#_ll~r`N?uS>>027okzU6y~O(LeUE0Q@tO$b^ip^Yb9D{SvKjmFrtsUsgxPC~rs
zmU+nsqnW30j4MIRx;BrPQoO*tluJ6QzL%x8-l&C)=^~!syXV4@mb9JB3-MW;GQIu%
zh9l4NZA`fuO07B#b_vm_w&tRw@I+3~r(2%C)`Advg`bQYSR*Q#iah=NlxfD)o;#YF
zzW_WjFysdfZ4*;8>n>^Zyebyb9WhoYPm^93gWzw|@XhaAOJq4Gh&+Ead_fiypg}Y*
zeo+*N<z`-DR}AEuc7|643dFVf&lH%H+$Dl8=p}$z>uPEo_FH3#v=Fdq(X=!4UOq}r
zqf|YC+Ll917Zrd><?I!^v?)!Ig8Qf{c=cYj{n*g2od1On8|8!PtsEE2Z~E@<7%kk3
z#vGlbo`HeVGffQ+^qM%946DS>QYrDidHot_e;GfO(v1slyvsjZBPG}M?4l`i?d_15
z#I~QiDD=rV!1Gt57s;B0NAp`j?XoZ2^tPcEK&J7`-@m`cb^1FxWM#(Rvt+ih2A;!U
zk$IyM^V&p#Em~%>(d-*HSPSV-E<IE4U=~tPQ=2|^=fI9;<R?9g|HT5bl`QfC(O7GS
zy@=t%Jfl?e$TH^|cXxp*->s0t%lcUg!;qsxlCLFUt^SsI?}MEkm7AufFR$I9?Bz_p
zqL6dTa}T?iZnhGwfKmD3LPs$5ew%ZR3>#WDkxCsVozEsD#+%ZA9N6=n5=^bDttE=j
z_1K^xufks3wHB$MAo)b3w?5}T*HzSBTu$MAi4^#`p0mlc<A>cVd5*>HcFl6u4+>B@
zDX)EqDQ%zk6{2G-s!twsC96or!G{GkQ}crhmk)?f1u5J=e1vU3lI`^MlGvB@k0=P>
za!X9Z9C5YQoLIJ#-=+C>57z8pRPS!WObuo&+#E23yZq_VPW|(6ZTNNTCCpKjapzB?
zzNXDnb7#q5^3x~o<<d~dDPp7ok)svXYbx|7Hg44GsuHF*Bj#AbVQ^C>P*VFEK$~_%
zkmFSeTXnGINoG4GdB3%8;W4Rxya{)uGKi|~Wi%;@@v33smvl3h0>~B`!q*6g!<9#i
z@!OTni~Y~Fl_@6n9^GEVd<`tb-;pu5^-68^Mc>At3!!mvRBVPJY!hnK=XWd~L8;2~
z-tTMYf>lV4Ogyjbk@}*{WV!p2+c~qZMWWUw`FWo6P&Zh}{zAAAM3Pv2O&3{N<C&g~
zcC!{f{P{ELo#vkXqb2FpHy1w#RvJXjpw8ERcY7GsI}%PVaw{V_K>}wZm`QIR6AzEL
zKONZ%C}h&==W(Z0tC$p<Q-oc@5$5RR#0^D>#(<Jsvba0cw|1_4)C9}LI+}f)e~SQU
zhJ03hfFN{TJf<AaUE=sF2NW@&9I?EmqS8_&YyIZM$NRY6F<$VvJ^f7p^^MM3dn0gZ
z|7vzVw71X2s!IA+NJ6B^E+uOFO%K6h2xiAA=({#nkBp3W6^YRLe?*G`3RIePEH~{y
z4DUL2I)+e9<ri|4I1GVDaGJUb>BVnc>L_yx*ou^Ki@pIf%_@H%acm-k-&ThHok0tZ
z02N!P?NL5$tT4@vCH`XX=O`(KKIS#}_6xR{HcLxehQY98tF02=t8${e{$B>F<nH+F
zr~gj`=9Omua<W6@XDFsv+E@pyf~+~>4r(~6o*a8HfgsIb64zNN>u<5Om|Pg`cwA)v
z^Br+&vS=CHkBB9l!wUo9&CALvTiXD26`M~py0A68E2FpeRY+n3*;5UKhT459wLToe
zdgUPSX*Y!=lwFH}MB&Zrq$y283_%M>P(SyoL>Ma&oHWsYmtDKiph9SaDP6I_dnZ;V
zJ2~5z6mQB9-n*wNI;hyVcHfP^D<(i=tgZXrIsQ6!CPz8Qt3ndo0Eg-HuSluMZ$)*8
zKY?#$zWp-O%0DScjNkY4KoqSXvsk_9REx(vYj?k@=?nN%iy`0D;YM78b~kR!e>`f2
z6gCrN@bl>ML$7tJUA}U~Sd}6OgpR_wsmw@8OiqaXxxO}$nf-QU&`b47sbcidBpNk9
zT%D?tYi}^f8zt>?)wC7bpEcQjw8<_iflB?R`W@-~R5?>lB28+$%kvpX=+i?a*0|VZ
zICC$kJE98ePMcqf-&eoc%1{v#2J5nM%>g%;mKRz6FM0Iey|7a%r1lRto0Xb67D!EI
zA-#3%-*MR+!`EifS>5I<Vf>zK)eo?C(9NyKYEsE(B{(ExePd7gyK~%=GCkZz<&+UL
z|BNS!Yw=pYVB1%YB*~S$dNn)hY@p%o<CD#u?RO(ZDIgYpCHqE>a!H5Y1%@i`H4P1u
zjLY-6rK<Y3CNGa<uWR`Z04I#Kwx%=@+}_@vd#M_0FuxI#%8@J>-1#|w?qPSAJAak&
zsM1ZJqc#cK@v``qpJu%cpD_{d*luV~mnHwwE^zQU(@Ol#K&+ZvV>HERu9%Ndk=hoM
zg72e8mwroHS27yus;jqKO;cKBZR9`a+5NniNyGW+`mIFadpjW(k3AmFKX-O>yLzrj
z@%Y$_(U#=ZG8XFQIMElaKbAHxO;Ny^bF0!d!QC-KT#(C3C6G1wa}fvkLaq$acM25$
zIlhm2eZCaz4N~flp0PGlB2EueEGLuY(#R>ze^-`Od+f!v30ndFq>nm(g;*me_sA~g
z@*kV(cuGt}6vc=8Tz*|%wnUz9`&ph!h^ABJv-v`4x+li|YC=}e%VSQVw&iEIVar=|
zwtJ6-g;jB*xrs%8iK%NL)z)+7F&TVDDn3Jfo#}VC_p=V85G}<I*%n=s>@j(X4C)=y
zz3~NCKUF~69##7^I@)chsd$Zg^vac?dBHOC-zIXx?Z*}9Nr@~U=1z3l^xh~m9Gfv_
z&9e#0F{d}@CY80+t&LpDQwl7%>Wck5I1)n<=EnX(FxV(B@x9_Nr`Nld9=C=+qiLup
z3i4G<7A7ZZV^+K~wZ<hBrS(m@S-43H6}oVs-%x@YUnkd2es7hdTgfvz_kd(m`ohlz
zf0W7<6?KIi<>c7h6?B_l3Z8C`s<_PYh)6Mz=<c-Ki^=R!CDL-MnB;TpozJ>>BA&m^
zWEQKwh^I>B-^IPNy~q?>eC<$!c#_~lo0$2RSr?Kv&4C^Px61PUj3DW_X_%j<UKAE4
z#RYjKogyb{^3_P%edgYsx;w<f;&RNSHzp;2|8crbDYagcFHJ{Fo7!S7wK<zfTFb4?
zov&)4=exc7s}eJuI3J(m<t;!o(>fmtyyXvjNNE19p^t!k#;T_vFNPj_`gebsO=Sb_
z4$x+o6qC_ldwIn1sXdj}ps62t31*W1JOMz^C6)bYqOsAwV?<UvdeAyv9sPCtN2%t}
zDd~)4wZFF@KoPOl(!F;4`0<!20uK5)aR-K~GwdR0&X#&jHq5WXafpL?bu7_BsekK>
zMs+8L>XUgK)0FVmcad^k_;i$rsQ%ZC@d)D)itdY-Xe-4Z-z7Eo!w-@`Vk~vyzHa{@
zpaw>>eqGnpp(V73t_H$}XL>~_SIsc$C`(1us$&!gwe|~xt--1dp)Ue81(rPp^4Ut-
z)$7(VTJ+iS98tq4)UptJSN;{L9NkX<J_D@jG7U>bm?sT~N`ZQ&4tkZI0(~A$c*oK9
z)1#7%83sYEIPu}bhhh%ox4^bSFYfjj8=)iq!2?Z%A0VBIIdU|&%czn$IiD`eoIbu>
zPG7k3LG?9KS>_*r<~(sVjpb_X9ZTPg-KWYShG~lKC}Hy@;q%QJ1F{gaf@vgTmTkF!
zOu%=bL=i!yz?lgGbb4fjcTJ6Y93%!#=M5+vTheNzFQLx612g8#jD2UW-$H{(T=@|6
ziPanSaQ|J*Rasky?+>o&DDAEB6bDQnLC+|0`zH~C^8v;*)kBGhb#joFh-fxKflFY9
z*rU07QA23IQ2f60=CB@jwX}rSy}j$64?=NXEwuZjylZ0w2V&3M%ZHI^4e&@VY-{SJ
zRV>HD_-~r4Zdf{3I<9{&w!pEdo1<c7g*^6a(2=4)<E#T=YE<UbjYxG1LQ-+qlL9(b
z7ne7SuPobZoyIPV7D2oUv_e~G0#_Ksj(w16BRI?DcbjnzuYPe5CSBu`W6l$hDsy43
zv8tj+i7{4Dd0EcPaoiseC;;FZ2R4sR!8b&_?cKYVeWp!dNm>McjmwuCfjx*?s+ojU
z^aS5|ob+`M(>|E4;>38fLkKRFBHhcIZ_vUiO;2=H)$CLY49bpOw6412>iVD!a=7wQ
z4YD@wy#2llUxWub1*+*%TI%;6X(8l0RW^V&$|nJsrTsZ%{XnBW`j)Yww|3xqa$|@w
z1P)l(znURc_w-&clJ$H%Z`q`|w3Kv4z1RV-?TdfnKig~KxAFJw5U{Ym40&ghp~U%7
z)V^uH>tSLrsL0)?MJL!>IE4Bwx1>ZHM$|5KMsc^M_&;f?QR}pKq0sqch(1drT8#ve
zvGGPmMi$qxD5#eK_p;Z;2)aJ_{bR*vU>eeZJIprig;dXD@~EnV@kY9#G)H-$F{p%O
z^U;*d5*uBl>d4d#bao<n$OcaVtFwG<I3*s{CC=U-w&|%>sht9?yc>{fcO5}ux|Jse
z7X$_dQeR^bc5-%(^+%nd{Jz3-A%UL?xa}!?0L2E>g0j#R0S)&8)<%fKJ$6iSQu>6@
zrxx4D`1tIKii+*U;(H!^cN4Oo%bp6}Lf4g7ci!pTGlw5RqZJIEnlMg$@9R^dhuYQ*
z)4`#%K|{?yY2T96u5=&4$>?>La?^aDNNil=ItaBV;HTw|YyB2CtyR*tufU!yYS-6Q
z<~;FkZ2S%cv)-9(%Id&3qpo)R&BQEWU32reAPFO7fZ(Iix0SdUfC1$tp4P%Zv1|0*
z!^IXmWlWC%g8?}MJMioGZx^V8P+nD^o|eCS89<#PV`*_QKUgYaOTFjZK^T77u^$;#
z=kj8S2=dBGk0K<PVKl&c-9f1+QC~m=i15fRm4bGbJ-&L!cjl?gMer0XiiNOM0A}p3
z@@fTG<+tTp$kqY85S7CvU}sJfU$KAhB0Ib384e6?>6}~FufKnx7WHs$zULlb6j5U?
z;SxsfChrbDD&(olhE@3JYtRIRgzy`#cD}wPsbLJy%QM5WV*4(zr`@~Oe#{TJJ9iWO
ztPS<2G_<g66O)rC@ur68$m{A(!h-zrz)>C@7eG<8%qcNaZOxn7@t;!6Yl7zffrOeG
zyR-yHD^4pOQ%>M*9s73{JBeMTxpx@O796CYP**+p1XEsgO|Bp=w*+Qwu@43ML)?lF
zj*3|DQ+P~$53>%{V2KMAEA?8j#}Nb8vkkkq`Jv*{<LVu=T~<(WvkB;aHI#Ovb*~JG
z4w!CgXt=a}O*a%$k33@`EyaWLW%6QOCQ$(`ECa-*gOx>`^KcCIcQ2)hU;g~|GP1k@
zQkVaWf^?W2EqS89)xYV@9bG1RA@e9i&sQD*L3m1v0RBp$%p}y=*abAPqdMRE`&A@U
zp4WMc$t`p2(1eC^(vat~?ekSKJfZwXqNHm!CuZdx|Nfk+x8`&o6|H%hu0-Xbr~R~J
zNGfZtJ3pUrv@Bry+4T?JK;m^nB_z^5U2LYidexKG{J`W9az;i1vHMuUt5hTVzBTbC
z4uG-Kjw3<G&)@hQqM?UiUU%?K(4i6(irm`UHL|D3?t7$>gQ7RC4u2RyP$D$!?VTI^
zUn~H5d3WICt~j!rYtx*<+!aZN8q}&c1LFEuS;U9?WzD&d92wu<E`+}4Fta%2fdeJ4
zGb>{y%HEyx^xCNO7|u6mV_^6r8~iR_>t?h)Q+gI_FXRvilLZdlQkPi}*}71(-6ud|
zP2Ux*_wA|77QjeIDk?D9%K8_6S=Y&{@`yq~H}o}4N`QdHYZr3SA2|XM`YN~;b|wN>
z%?~M|mjMWF^C=4H1P+smq~wnY%!liJ^UObe=WWs&6+v<z)#1Z8EI#(eHQA2_^9eY3
zM)Ne~^!MLKejU#*A=8(J=PeFV3O!uhyjlgrGQMBLVnbW@LThinc0QoOl%QC`xdy}<
zr^qo$@1(wB=L!CSZ{R7>04>8dTUrWGYTJ1+FOCY_lqUqLiXqMY25OWXpA!q)BvQ}X
zJ<rb0CN|g9pm`7xf!tWNH(%=OgXWoqSk_FYaly{ln9g&G6X`1>$hO8$8jp0?+yqi?
zTAn)|cO(&A7dGQv>tbqllIh=q<B#<g0w=Y_vyX)(eSG|;w`rux*TzPq<f|)^EXjRG
z-k0Cb`^714A)&s(!Lws$uwJdpuAVYckKO&6RjP)_%<Li#+O36_p@`hvx2dVF2IWeP
zqD~iJ{qXny01_vbB3eR$9*k9MUth;3Zi$-Ptu6m<Fn20#FkI%mxc#8`m7p%sCMVm0
zW~P89J@vk_N3W4CXZzMx+~fkw8BHl+DZd#Tn172ho2HOyly%nf)~(oTE2{V6jqVB3
z37qLoY!SrFvC)xV=Lh$Zd+>G3Dl0pe<a{}Ltcg2oKIcRz_3`6y+eY!|9?;a>F5Fej
zKn(Ken1ZDA=SIsl1?X$(k53DH^j?d4L8R~R?P+RjYi@1L9W3*bm4r}M5)lbK_D&jK
z5GG=#8JYQubD8L=`hV%Fwo`<UA|kRp>`x%5h=lJ;lN0_<|55vrKd*q87za2wVPUl0
zLdu3;C1)DK8t{sBbaX;O`lI$ku93<@MXY~KO%1UKHMnVBym*+Gr<m|=xFo9w;7U|f
z8??3GfBewb*FS}i^*Bl%Bz<Ig-SxVqrN>}pS@^@(9bWnx`FB*$+Sq*7EhGk~XlwTZ
z1ryQc1X!J>=UHb@SqZw&9M=b17%P&vba3z9L_5OOGMfh0OkYDqB^*CFFz`jpQnOA|
zsodpT{;!#K5fK$1gXD=FObUK-PU%^sSCjeq?Zl}v0f_*0-PEMOev<GTVA>?G^Q#Wv
zcX_#lg<EQCFXR!_^`8<85q{^Yr4{Fk;d6FC-gC0P0q_BKiGiPMSsbT~D@Q^0{1O>_
z=je<$M<wf~(xxN-*N3sPc64>IwW|Y`q`Tmu0Pct;qTFe$<CW>f_`^J)TVpvRxq-K2
zHNZ2`7`Y>){rdm&31H*%#8ohW?#X%Q=ScUZxC}AP4b;v;YDgmo8uP}c_ru5R_m`P`
z3XV|22-5v}!t3kTwSj)6yx@A2>G1+4b08yyyfM`fXWjYpV+`=2?`)IcUkaAjrsC83
zT0@z9*|u!^-&xh)iv|wG1GpB92F-HvsqYEAj(g-$o7jd(lbeeo5&jDV9~qg()!xUz
zmy<xpggWSVZ{fdhMVY9k`Q+uTHo@kgn%~@7slp|_3dSE{3y~2K32D>|FhD}pdeg!J
z&QpVA#3M2y%F#NlX0urK@2#aNk(jgam$$vXb<k?4)K1x-c#UQ`58n-QCv;Zy-GIIz
zvN%Y;Xa%MP1E5dw0rkON#sofs(ARJ0rSEeTLK#|n6M5Il><7eN-||a2bL*;+Od-zh
z^{u970H{$i={<pxoU@Y?pFDV;nB}Q@M1*JeE>NpKe}4Nxg!HLz$hoP@G)xvc@i}4Z
zkH%^Aa$k>K4ngQVT>Fnzq}F35Y4Dr>88+;$^>I9mEtjAFCxY<@5)j*wzzw5AnwYDS
zC|pyrh_cag&}S+60Ol&EN)^AW()k!I`B<PCqPWCer&tdjQ|NxtN>oY1<UI=`<Vh%4
ze!O!$iJ*<UcYDj#2^cLgX2vre7h7DJNQ+#an^Vk51FnY)g=d!#2+?FoEcV&27Fx^%
zqZE{ROc&m99z3S^#xi<d2i%4$`&Se)m=H3Uu?MIjRxilkm_vzU)1Zt1q(WI$pq+me
z5G?Ft`3x3jW_-bt`bgTVv$M5@J2k#b<f=TLN-5q6Vf#NZUNUx4(?sa#6$nG58&2y8
zH2@`sq!C@Ix!&%XA=SxUH|Jn!T!Tt~>Q&s)ER`bj=GK=lUvm93g$~MZvk0;2HcIPj
z+Z#;J2|7FjZ8DF`*u^M@VB3#<^i=!*Veh@8qRiKHQPei47DPn^6GadNL=**yDo{l(
zl7N5#M8E`!WDrFW0fi!o<QxS_D%n7ek|amTS%OGDPvPEkX3m_s_s&{#(^|9t=-q2|
zw^j9hzwo}#`-FI(&z~KB?#C=3aR(Zl^9|@%tjt1gRP3+8#=CFXU)mz)EYzvo0O8r-
zn^W;<E^%z239iMh88M&y?%nU<BwKNDaU4@a{PVV~r1ux!OXD$pvgh1-StSacI2a#T
zDy`4955sN_b!KGy$x)^^yjQz%iP3kqoe&T}*p@1v7={^itRE&OCb0M*ezh5@yNere
z?|}pOUc)^LO0`$`Y==B=dmJaz&=kvpXK!PpgMS3sn6!8^$X5&PIUl%oMdrt=+pYZc
z<G_uAhbZ019c%;!47%Y^y<HlI{)R}O>f?^}g8B1-6W2ca`u5|^*DC>Heybd<gT8iQ
zhVdRwp*Aj;JxiCvCFKl*&&>^6IMv6do)PK?r*ag;@w!4#r%}tA-{<Td7^sO;^^aFy
z;b41)+!DsqU)plg;*GoT#)WN%j=!QMwCdGCf2w~7ZrWY^Tik!L+$jkT#j)5c3X~Hy
ze21{r1799}Fmz42^OG?;<QTm0UgG^lQ8928Dur$5;Z`>evSQwyHlNLOQQ)?nIJX%5
z>NjXGp1(sQYFaA1BM0wJqT|GUZ9@1u(mL0&yyWCPedseelQi8L;IcPq=%o!(BPXF^
zr<I@Tac+3YlqX_87O%H!@Zcu&=z--ifC1PI|E8to60ImN_x|XAQ^9W%s<C>Jg<Cxs
zC&33bLTBI_vK6TGvHE&5^eY%hG-l1Jw~b_K+^7r~>+fgtn<#K;yu{;t2V~JF8*DSL
ze9rdevBgmoCl5Y3)%FqA0oUN6jY^V<_ew}kPFub+ot_F-o4(i!=FQPck6aCI-aM34
zh#Sgl<wbgW{i8KY(Q*rYK;NN{Q>%G(>*+0*TOMm^#QF|hy)sx+kD-y@>CrN0I#DPN
zdX^Sm0S5?Pmk<Bw+3t&RqGNe&mo?rjv)V73bhPJW9n)|K4qh2+%VXQW35m~~k(E6L
zJZcFO(}Q#YflS_9M*<a^&(gB_CBNX)BogNMSaBos@pZ$j2+@CVH^hwLqgP+VceaBH
z7`b!T@*96oBS#*?v4;b7;LB4{cn~G%<dmWm+Oi*b1$n_)KnC%nAYyQ)e+K?<yEL<#
z_#l#$!I@mpfwX}QqJW=EDd3}-+`o?oE6Kq@97&dPva-;qMO3{KUA|yfdOk|wjN95p
zwuA&2l!jq~I@o!|e{qeUpHJNe!gf&bO5fwo*V~U;h_VISlOvd|*YM?m9l^Gz*#YAl
zN!{<`a(93c++OYxpfWUbua6~5ZIPN(Qq}|sowLLASTf-S6BLJJYj-8v`3EiUuKF)u
zUeQtO7S2C<ij#v#%teyp6;PhhwncVubE<`1@IdByV@nGO-Vy!Wy16>ZVMV#NPOu8*
zR6W)Zr>Z>HI5GNR3S6;)E+x&t*-s8f(fKd-crKGJuOI*Nw2Vi09y9w0?W{fU3i|oJ
zyH){yvg4-H10_eL<V!0(x?oBe6aN!MF2}dFoCUFm>JS|PL}J*z`@mf(DBjAxf6oM|
zlhj%?shzd#ei0&uV);AOVZazX(y9XHu7mZCCJ4H~Haz!-gEf^U9Csh<%2BdpjszqW
zg7O069gtrxWj#EVE*x7>@_kT^2-niM2ZIzfH6PrS@<Dbp_1gv`V5pIKab@Cb6&kEe
zyQS|Xo(58G`x8z>n0L{hO~&O_mCO3AKENEIK#~<1Dn15uNP7bceQ;e!`@LmZ!*?*G
zr=--h8A)uYG3BK?uT1utJuoTh2)ig_sS2kl4ILvgtydST-16LZqVPM!hha$Pxpy8w
z-B3ePbgnf*XJE3x_IIIwK~vLU%Uy##+y|`fN5M$3u(FbW!yjorKFfwmBQbRmisu&0
zjquAvu70_IbWK05uAxZ1{fC|u>z<I2alshw_uP7DI-(cMq)t9hh)#H$keZN@kaz1T
zcGZm|r)UH|(4tF+!&uOKNBq;L87MU)o;s|vE~^E58Wd}_4H$bJt%dK9$wa5avu7J{
zUaDGe+PwL!#l&*}JFvmrvb*@;U2a?AOo##*qJpBKx>)Ym@|qf(&yV$oIE*rX>EsAH
zIXZG{q>z@KRIeRX%=cu|0mW~qF<CWG@Dx~%kjh>pilYEIbHDF#qL#A`^08GHpbAt0
zl^SF8!%MJIVWkq4)TDo9nGIJ$O6h<4t*Bn{M#?$$gy+In$Rc(;8Y!A0*7nm%xOKB+
z*2r1Od<>7^EHTBRc?7#sD=RB_IZ38~Rv>^<DmD>=Z3mnbpD;_S3JQ!oui@sHb;Pd?
z`rk-kAF!*&c)pa}?I|a3XOgK(CTd9k!kzI{pJXX`MQr@dsTH%$C5hTCO^uhzww^yN
zr?ZnZq9ngOFQkzY!(W={X_J_HOYgp()AUGFtZrVALh$@Z+d?#DF5<pwC~j!dWx~7L
zE#E=^G3>~FLc6d<i1%9l1R#<DR%v?Y-{2VqF6KgEt%0HEO!M^QR^{$?zs!>IisO%;
zTvv#tjfz^)jXHU1iR~#{z{O~-56l~P9JmRA2};rzdyWfQ|GJgFv^2Y*5~FBW9Tp7S
z>(|n(sLjM@u@d*6eR3uIVuc>fZ?fZhdym^&fvl2xfz``A+1WWcBg4;Tw8$fj=23a9
z_3RE*lb5qCA{U(q`jJq?mCi0xVlQ6~i1_Bk6ReC@L!U498S%7dz@e{{Ei7LL#v*%$
z-spC_H~TNzzZLb()w5D8QP%Lh)7BjCoio-Z1pjWyYp-F=Zii^PxhT1X74qB9|HK01
zUnr6Hc}3$;Bn!K2by!a*MzgNij5B7XR-ufrsU+G7ZI7^Z-%+#UgSw_JjsZt5UiNN`
zbN-R<d~&SA{!)Z=sD;+yj-I~at2{2A^`4V~R^&)7iLekiH*c$K^3yHM7$TBBhCg5y
z{RI~G7`Us7E`H?A0jG?EyawyuM0i!}d3!b9&o8%I{Au9)d?<)mGDcCjfI?VNK!fB(
z`KIUTse4&sQq?TiCONvW_)R=LE0g7#Vs=AcIb|(iV`f5geHB6}T`5j81|CLNv0Une
z=YAHAm+esE3!WA&zXjC<%y%184I1z?Kyo1*r)<E5a(qrvk|P$*{%?^jRb<Sio*1y$
zjXUctYdNY9MuCX-C6DX}R4T~mklv)4$E0>xs<hSRbR#ot-tP8w_R=prx!6X5B7ZyH
zivt0`F2W&#{#v^FRgy~=2J5;neILc;=bY>~vwfn&U6x?K=f_gUUo<p^hd+nhZt2_3
z_#NtpK3D@`+8eanGQxuXE=(nqV@2RqGheV(ce6I-@4A?%d>uU@b<!R$*`3EW(*q;M
zkXkjEw5Z6bj;goeuJ4QI`LrC{;v9Gtf-Vm^czh`+(8yuFfi97-32@_E<kgWCJVUxW
zudpo@OY{y#%Ba^5M&=&bs(RgZSq&5aW+;Qp{Y1eF)MU;)`h#UVsaGznVX8luoa=d!
zEj1_Q8Gf1C4?kL8QL5rgN$zIm^$Ydi2p#4{3yz-UV-!-t9nZ*bY#i#6guIXZH60}s
zdRv>IBL5J0PvMlWY?#%LCEuB}E(z%W9kFsa{CZ)25aFgl|2=fCU}~10zjmq2=Plt`
zY<SI6mP8zVm2XZN;EiG7&2>K68JT?EsqwKMnogWrXTT7{(am($6h1ua*&4u%9v}ed
z@cCzMObZvUbPj{{_uAjTET48%KH$t*gG%$EY1%mqTwov_4NU-;oHI~a?bxwnaxFy(
zWx_$=h#-!a$gV?om{8f=90#3cuuV;pW_l?tFRlE$8x>K#Wesx+8+)q8YhskN2{Y}D
z=MkQ0b+3Z4C6XqRnJ+G%=~cLK!*)`5T?fkohsoZOgv%K=mqnAE<TUg7)DOzNsq_8Y
z`<@)~4GUi#<hV*6a-z7Kk37$Lh^&Tzk*2NC!9Xy0d`39EO0RhTn>WkximVEBiSNZ}
zo&F}IX1Th#J@`tgjnF(A@3q)Hol~Hs<~*inJGuP}hV>9bBW5ilDKF^w!sQYhzMcaT
z96Jl^H%H5Gc{xRh$4(N%DT#ZI&&PrjhI9cK2K)rz2Cm@X7_;^H=T#z%P3Q{I`M@7?
zVD5e}CVoZ!7l$m+BEzA5f+vs5(=-eUta86vY#j}_y3e)`x4mr<^%bS)PE?8VQ0_9}
z@_`005UmJsYt7>aUNJAtAz%vv9yoqKiHJhOBDTkDcI*j3Ms2X8odcrv&B~5?hv%Nd
z#ybgh2=t0e$6v^E41R7pn`D!1v)CxpKn1WhK3I&BW8C*^FE8HxNc-`x(@lbw*>+5z
z%fx<MW~z7jjPg*?mj9-rl&}pyv&Mx74`g$!PKnOPBqdCBeJz5fHIh?QbfrpUAx+Nz
z28Dh`StBfh(l<I9p5=sarf+CwhLqmi^;#U8oVJN$w42O7iBo{GM9~P??J#q9$Kl`}
z?`hUNR*vBJM)endDO9{sU7jBXHLE0M;7Ea({ffF=ckw5!h7IVBKSGjqL5k>(YQF@c
zA}BSj5kZ8DG=7w}2XnT{CmYQVie&TryfxO^1hWelfwGxl_1@|zImYxH)KQSe15%;L
za=?)CBZ6^ibf6qY7ff2IsmFu}xzh>qJl=)i$3R|8?XZY))FsPBO8Gw8G7GsF!JEB=
z7B!&Yy-w*^GNC>h+tzBj_#|T2>gwvizsuR4F6(!5vyzm6uibT$71XDRilL}xvanla
z>W9CDUPmLdW%K6xyF0gUUs#%5qCBK!uG_DG$s@`QxJm@2=(kmr%dRx!6&1R*U|vJ;
z81F9N#H;r1a-14#o>_nw2Z1Pg;ezyUug4M7hhk-eaxHfGM<JDoEAm~BKn5K5_`r7*
z(!Wh0f=g9jpN_`#toLqdJ9Bt%z$^DFSP^EJaV@3Xr|1UM?L$L&|7W*qQy5e_GU|06
z+AQk}9gP$7nZ$;1jn;?k)=BRI?Bk>EA<I+J)UuGVJHWe~?fTB^72cc|rR1ZZW<S2)
zQ|$4sjbEOe%98E!hQALePW2$&sIIdx*Y`2ES}H74hE5y6RwrhVYzoV2BJ*Xnn2ux2
zC(Q&5BZo=I&inZpIFG@UAJnni{goXo5?FOwv`S>#p{husIz<U-lGQ*>WMBfsWm^eh
zjm^!|qb=u!Q{@}Dz1i8Kvyn|kB6^cwIMS}5?T#`YY))^RpJ~Aeho`!-ygcE4|7i@d
zSOSuPC+X-Y<josBOL(v6kB+KT>gL|PY#iS!f`oOSjgF48XbqhfxA!y)l&-(i`Dylh
zLen`z@`#`Q#TR=hFM=J!UvTsJE{?@1g_q(c2MQJ~*~=<7#FlqvF0ego_FlysIWj-Q
z@QL9+M58Z&yGp{CE<5Z}@|TqO8TAm9Up4iwPk4$h+)^Z|U807K%b_RrW(npAmPyhH
z^e!(FTN_USww`e$sS;8>4za!;KYk2%Q=+V&m9G3fX?_;N;0{sVoXi)luHOS^x9O?d
z*{vxod^UMJY0*6B%g!~#pVQOtQ&Z(-)CYe{ZkX7^H<tzG!8sNdmTJazBqjOBj<n|f
zYdD07w6)s0EDV_$(~<8sHp#~7m+1X`sM6Z!M08cEkyJZB@B7Jbkw?NOGOIHBWnFK?
zCf4Aqw3Yq?tVQWgun8>?`polm*bnzpy?dtqm$DBm>1Ud(DJOBRrj<RW&EdXD*7Dlj
z6mQa?E}&kc(A;rGkU{G(Mi^<B)YIt6(H^h+ag46!;#y}q=kK+YU>V&l*6y#Coh6kG
z6|DEGs2?S)muzx$)H*C)R#(RzJLq}SzU&cB5|WWROZvwMiH}MFESaRXir$lRk)0Wf
zoAHPKdu;mRA=CpjG;T*Ao4{t4+_ed3C5>1(Rmt!#(DorA>m|W&Wo6(3YvxtsHWmA1
zOb|wz5QcRegI)EUdDEJl5r413-o=$*gP$<|PW4t86u8rz_9H28S>CQt>QzvHkU7!P
zb8gDFJ>$Ltai@^^@_YN0tLs+|uj1zJ6~MMZGf<3s9Q$UtGH?O^g^K%I22Sc1NlC}(
zy05H1#pK7YSE6IS1Amcy5mR9*_GuVKpV%k)?d=bXUh2a6_gFaC6O#Rvw?P2}w2EQf
zIL@ROFJ2_7l!T+5EG%4!a0V|CV)@pr*+aS_(SWY@@aSB)ZU3vh|3k+wnRj0FG2}=I
z*lO1Of>HpzC*&bfK**+B!!8~@dNkZ3{y}#>L#)w`ecw2deYAyd8@<FKx)Z#-iZr)7
z>vzzsL?Xnq&}~@6cIYSvXV)d-6WSbHQSI^SAm@F<9R#65L#%T6<qSSJSFGFki~Dlp
zDOOe_dAn5wFFYLn9ts-|uw5Vw2~Kos%UWT-#2YL-I5LuEGuMpbgVUs+dwFq+<ZJ_?
z0vwnESjtZta7$-3dq+pBgSN=BMJMaw{i(jdpK8Q;-@&X0hEn^>Z>msV?W0@VaPw$w
zMI{^sM;0@4o~y>j;f#cz@WOclhsfCp_TvhK208y<ZD160s!bRBRyB2qekv#+Hp6!n
z0SI56>7+15Em4l$&aL$xc|5E}`c)NgFNI5*>3^y}wNe}1PAi1Tv)%l(<<_nD2Qf54
zlImjs%;>wsC|y5_g3y>Ob-U~$J9%kf1D`eielAv^xv42G{=tvJ(d~@yX9jEEDu%Az
z!ncq5Ts_`6FDm(n`fhQzE#bVZ(~sZLnFp-E(!ikTxYol#f%)Iro3?J{)X9#SS0Oz{
zLuoUa&)J?${<d}db{s)fu%ave(V8KH`CD#oQe84xqD~Hc<Ews`Hbi(Lp+siCN(-8<
zq2UGcG54AvHibK<wr|lOz-Fn97Qwg^Q&pVj&XExRAS+&oL5bf}@dI-~@@rDk0r6P|
zu8gnWN%LC)ZDwC{x<8qQpZ7Q0CN$q=2lePYS42&}<>z16|Dz(N{gT8nyP=~7@=iDn
z{olNaxjs`x!+-iTG6z(weG(sx@+I3G-nVPl;n7S6v+xHpUc4G%7m_jM1HF{==YyZm
z&z;E`>shCFBSM_Uf(;x65UJm4XW7**F+F@($$2pwqYsX6#2eO&jVJBx`Yle9T(Hy}
zKLPJ8J-=bUK%&9jyU{OaP-^&-Z}^4<3zp&Pd@u@kH*{yo>FFhS*)1(>=gvvoMs_+3
z7!~%{N5kP}q4P;Q-#GY5uNHRfVu1QmZ;#RE{NiHwJlo>-9?qSXfy#&fdSrg_F~S0-
zF<`Ba#z>d`m=}7e53j23&(SR{j4u#EGqQZ$l~5E+&e&2x9wsL3cUSC6Ots#RV8-kG
z;ze`D)CY~!J{c<&A;e#_R`{FuoGj0{k9kq1X5wWA!|4h3rOwYk03S*J^2}#XRe7r^
z?kp^KA}=s-lzOL&!+r%5A~Un&?qCR~a}uK`4_-*p(O$b&2Wn|`@eM!1_{5?@?D$T<
zpkrV-Z2uB*Zo3b)cr?7Xi9>Lthp(XD-!$!;=Z>}}Umq@TQ6Hj$XIQM?&)(ld3cGJw
zDs)ARXJ(%J&Ygm(-uoc^f^#SkuN<AZdknWAmqITOHS!Q}cF4j>_(xwad4aMF0e{$A
z`pMUxMk-|v)ke1fnZ47I+kiXw+QnCW6^tAv8=vnu@H^<iDZ?7s!BFXH378MPm=%2t
zpe0yD8|D?7AMc6#DTzNjv1#W{bsD+JpFho@6RZ)-rT4sB40X!V(z@D4Z?xZ*2oZcP
zq*o_q9(Bq+5Fk*oi+1j~`>Ufv=ATH-0FqjoH2nSj<2Nf4bEa*Nu9H6AUf?IydS{#G
zg}q7IlaEz)nKeAy{EGgt!||&-$+fA;$@0Igy+|REkxvshGR?ikd0HS8{5OXORpm$B
zo6h*K;>Jel<w`Qkg<o{)%&wG`-?htmdua}}l^pDMG*ooX8oQYt{ZsS7^!SZXp6Y3K
zmMV6O28=FmgxZPt@Ko89HYfiR3y3g1qFcRwqZ50wJ$s2`F)PdV()i}$VnuaE7CI_Y
z9?AYUtWS=K`B2yt<Oy5nJIwT5dt5$%@NCJhC!x2Mvf+nL)rqL68v(+b03UmViM_rk
zs<lqT!-nM3?Ti%;Kl4kMEbiTVC&7AQ&t7##S6f0^yr%Hhryx~|v3@=rF4h;8)f%&V
zv;G-S%5a_w2fJT-&LyRjIr-ex)qUGd1aKByTticQ3qK$#yv%Xv-lf+zK|6MCTU;qC
z-&e#(ek9Am$47E@dF+vVWH*5|vHSL(g*d|YwKVP}P?48Q`);m3Dvg|?YoZ!bj!&JO
z7z+7F7F{<Ec|LzhPgv<u<syieI2c`Z-&z93&t?o#Wl0e8w`n{bs+S@#NJ<qgJ%6e8
zNVX8PLYJbL2TJbLZ%);0^YP5Adw|&wH(g=9PT2Ksc9Rd?sv94f%lppOtvR)4{{RNP
zVtv$qQK-%779nvl%;oVGcaFg#iKRXN_$V&1l_~z<w;rk!n(Ju}O;KmUn}grs(r|zI
zQSmVK8vb8K+j{3kM0h}eraz>yIs!jb5Bi_*!x1k;aOy=t?Nk+P&rDuE54(K#12H>z
zF1>?9L5nnxbOO_xH)ALsU{~~_7s~ej_KjELJmEHN;wOkP5q+7o13a^AO!_#Qwyu^H
z(t#l%S0LaA8$H)@>LtbRfT*3OuMP;|dQB-~r1_@YrG`h3#0aTYOM>@W-sh04JY8)^
z8Vv~xr6TGKZcxrXf6fbR13%)C>w}-&-V}lh(EEvzCYP}>LR}$lRb)La0g6NDB)-6T
z_=K6&%BZ2=yoeNaJ?<qtkdScg8=gP^)#o_l%CDB?6W5>No}GgA84z{PWbAd#Y>Rp%
zh3PfI8Dhu{nxrakP6L=|Z{2;*1C3MSXj_(oAdgZQtlLJ>bK_sQXbF2na2A6^m!@Tg
zzgOsy>{lMa;Y;Qn61N}_AObPdYe&rl`6a}Yujb}+!M!r_WS#NsaBNE53&A~DV}a8e
zxCkyR)Ono3Dvwi+ezvWQJM(@&0N2ra$)>;j;*k(3Z2ge$^vmr>F_~Fenq3DLH~^sf
z8TWhE7-{yEYe4W|)}#b)#Cs+tpyn6hTL6@9PBUax0D+D3r2K2%oVy*&iHUQwV@p$Y
zv8i2MyD(aV6{OopkILIe(6`E@oY$i|-eDT=v8L&)(8I-JLT_(W9D~S7kxj_7r>8oc
zZQZ&jaVi`gDf)C8J`}TvmdsMBV5)19YFL^06H+~+@aX91#Gl{?82!MEyt{&ma%(fp
zm-{tZqNxpDbp6uMU=Fz{d`TA;rvR<VK|>RFrw$yiI*qy_xL8t24~K5Euz7KhvMMQt
zsl$4s`J-X&OERKI-|%bF7FUNyKcFk?*CIXvVb|4n1A&8hZLlM+;gdrSj3+*-Fh!o=
z<2%OE6I}Hb9xs#=ULQ+~QuK|rwYS>*ESNB=KZbz_D;L-0uu9zdLgsfky~XJ0Jmb~x
zlDH}K?w@|OTWjkjqR1Q=VD~d0tT{zH%5n)JOFKkn(jKZ$Ms4TQ!;vviCA!nnN<{7k
zU4G~1brI7@crBtWp$sXrol|oZJix$!^ET=<v#4E^Qn(dnOzu6FBbRQiVD5>?RO8ee
z+cCO>d#gFB;E4AEtgNT`q-hz?PI^M~1NTG~Rz^{~hzk{99k(<$yYBmmV5C6|#90DK
zek$Yv_rnKm=6VfiyLx85<LJKu6M5i&x}taQ@wT|*6lOD_(Gofy!wj3b%m{JA1E)v6
z3Yjw_=uM)8Tyr)XoX9{CTgh1!i9l!K;*lQ2Sc0Am#k2{eh8E#H{?CN1DG5`of<M3%
zwOcgF1ylwqBqByofbeupz&;~$^JVR=;0KG%R3~5GhzU52^g0e5qNzKrC%7*xo+x}`
zM>lNPfXObIiBftAqp5lbT<7||!5fXy&eF`bizshQGqgn&c+S%F)U8WWYp;-HyryaC
z=?P|MHLii{iLpDgu+@>;co}{H0be7Xr(5(R+X;RZV9QO0-qAT2ycd)0<C^>_$;nXT
zWqVaVaLOoEwzd|E<=(?VE-o83B>RU@67=^-iA=E78cgbGkcUwPXeEa^?H4B~`EvYV
z<xrsw<Wk}b%I{=(FQ7Kn=Vsb-&;7W!s`mufi`^#PoovSXzji8XP=oMxGR=qnwb4)3
zj>IZkzhyw}QYK|7_F?>c$bvN53{y5)GO#CqUVfb59e$lz!+lZ0EXgV1NZ?L}<4R$_
zF(wKIv<oiHr%#_SWY5g-&Nl7U73#$>8Qy*+{sL5g0I(p~^Uk%!)I_#Le!3J%>V;D&
z+sL_U20%OXe|KUKIe>XmaV<Hr)fe<KgyCH)Se{!esUtQvHfTA)kC%`pdrXEr-IBAg
zlfiDHvl@P)gxw|g5I##C2zhhDHlcvn?Lcd-I3PaP6r<GUxFnrW8Ytu|7{IAssprGK
zW^hn>97t!3LL}>8e?N@Bx<DU+X_1VP30czkTgbyOHU+Twq&XB!J?8oEwzp=wL^U>E
zid_dc7nnN|Z%f3@%LZ{t3xxEYSPDE;jjY;Zv7@MWC>Bv$Z@`D44Mif+^9JcK?58)-
zZk^f7()*oB=vRBDS;Lu^%cjaHYfHX$7#h(}*F?roDw^je!~ry>L{h2O5jNo1aBPER
z!w5WNX_MeL6?Jga($W$X$mm!YVT=sN4C1vq1!K&jd`+j|UJE~kT}k~BH*BT{JRB8H
zZ9is0C`F|2vUTAjAYrjzEvE#BqNqJ|`xl(jk-Y2$Cm0feeK@Rh>ZMCK=bg_-9mh`0
zfjJF_8jVsl(k=SL04J$I7{a(7n2S~MnO-ot_s-Y3zU$E=`wgzH+sukWhF&t6-FpWq
zDl>Mog>iS65{a1{P1((MFk36_X28AMGrnQ@cBk!_#%)Axo$q|nn&v2x6P8u6=WK8E
z_F4cr$g{b<v-9tzXi5=YdSmE$PL4G2d?w?QB!^!ujef|Busd_3oVUcndUlzCnK>wq
zUfP?M;8Gu_p=#tx`tDWf<Vw<mL1Lrd$z&-vFde?v*Q@$|QN_XKwLbwR<OM0eOA_JB
zjWIFB@QFm`&xIk!m4(8t?I%Iy{qp&<I1@E6air;fPx7rM(>7PiK2-6EA_!kh!n2~e
zJKS_K7&cG}qNA{8VzNvFMY}C0A5SnWJRBdw-ODN@)Y4txGEf=oNqTc(J;z}HK8M?d
zk73RQnmv_t<~NJ`FdkRCB_=ywu54=*GF2G^1DSs8$aN9sQZ}vbE{Kn?*Z3Y5tX@3A
zr}j7?^8zPl*{4tT7xyFOck@}?gX-7fuT~+o`*4}ugIY@SUrffvGBX#71b%U79d=6z
zXK{}8Bt%MkNTm2B>CBbA8`-YmgoC!-HS6KhLrgDAtkDVR>k=!zLmIm$dQ7kBxV-#J
zKDC+|t%OG+O_4ZVN~Sy2QeH34*Yz@=HSNZXoa94UR%dt%xC^Xxbkyv`1fb$4Rz&v9
z1F9yC1PR9FtEqei9!n+nwpl*oGwJ&B6k5WM=Hp2qlaWeXQK8gpC$s8`?2X+NEV7hT
z_9ZhbYi4XINDu}UVSgU)NRteOraoRd4%B%n$rJuKUdM-*+ss8Vx+Iz;XnnBP&J08I
zjvdjIWv+|T<AEElT&wxIh4`c!IN<AJl;%D^DXMvW(%>bAfVL}3M`AC7|D+sPlb;`9
zzoJ7<QRewZPQ5|TAx&z#XeS$R=KKo+t!CX;PqkRGIHf;OXjWwTW0GJ}!qB5N;~=#d
z4u5Z(OuJt6eZFBwJ)3@x-f3}!G2E|@+fI82%i7B(807@)WrmO)gWmS&g4B^j%3taY
zi>OlqPa5Rj3isD?1`fo44C~CCpT`^{WwJ_q;1^@(97rjzA2RMO?bQzjeipBtHILm-
z7$nMjTEwy(ucrSNEVedUFFPss%?YEr&I{J=`uH5Ok1?p7fzxAcswL!Yl-S^?QrtSA
z^Wih7B8*q?|0$smus#GKcEZ388~E2$l_>V*&#5W@GbR+-%OCHJsBfAbE6@>7)6JU|
zK6kFJiSXBHqdMM0oilZ@fb{xoCpx=8Q`~}fxZD*ssV%7n<9O5XyAR9P7P>jvlT_wA
zI{?-nt+}@nB4yXCo97f;D<YCRx#UCHFlpws=<RVgVv*Y7(Leg|V{q`cfx&GUY#og5
zUfLTZk?rAN&gq}y5}C_#iht&2&29?W$-^Vmh9*d8Hkw1ZFwQOIB5f7z*x#Ek(ymM=
zecr{)d^nc);`+QNF<j5najMXN<oIdvoW2)#)>Fon-%Hr5dg{j5xcd4!P_6|2xPA8=
z`K%Xjg1!I7CdMIS;&<gj(k=NCxkD7qHB1bgmOOLJPz34gd#zlc;+KQEhxt#Qr1CMT
z0obji(!G1<!z+Vd315Q^BZ7z%Nv&snVLc#f{VSkHaH#|XDey;dwfyobzm$4IE_M&M
z)-Rbr!E{iw<#A`x(vm|Z*0*J&R>h&9=u}a094^?Q)FsX!mLe5b6GCf_gweu?BZ^<9
z37>hc{*q~=3}ic#?C83m#`i49Ufr*<oblS=$kh?I;edOpW(8W#L|RU-w6~AsCk+)x
zyF_K4404{oBdZ%rzPQ<OK310CHmSvN>0QXYN?7=AS`hc6giO>RcWVZ7+kO8$qXBGS
z7YD+30u^}J`AOXJ7%Yd^ZIo70YN&@W6$7Zy9YR7v-e66xg1D>{8~nf+nw5+PLVDAI
zp2yzqe%|rAZ4J{7hV?0HsDBY`FZiTYT<7GP%Sn!;Hi~G|N+YLkQ#qA1G#cyw4VPGK
z^Y-mo_qtLjB<D){0|(%jcY&Zk)^6MRW9mp3?=s^bB69NVG;Xsb3hAzZZ!Q3yjvQ-I
z>OXDj597n1`KS;Qh?Nf=%NRMq$3GWz2B9;JGCxq80|=tuvj>IhAf&MS_w7Tj#1syn
zU%%et=X)Dk&5m8WdGpNe=F5H-UmOPkKC-LCe8TX@ZpAhabto_nAu}T+BL`A4rqyBD
zwl&Lq1q0*u5b?LA-q**aF=R})U1-NHL$Zv3@%MM+NK>s3V<P5bVdpT7+5efj=$}}C
zK9DNLF;HW`=0e!Fo(qt|CcrXl*I&kp`_rz>blA0YB<a37a&ZfX^vPpX$Xe{-#AI(g
zJ?D2Q5^THkmEh<Auk<JU;Mv*&yM!p__ds~=D`rblp=V)naSTYDy%qij`Og(h`yRlQ
zUVZa*zFS5{f_GXsZT76GM|BTz$W+1JuW(_*sMmw~!@x<IFZCY&`pgz4EyI}2AYU|@
zAJZpmMa6gJHK_&$#AgaY7U_nyP#;kM5m}GtaL<3`TlmvK6mLPrXEHZ=>gv@lI3~6X
z3@;e<6f5YhqmS752MK4wb1$oS``Ss018KIH&rOea$n1~o{2oDETAb6yU=qf-WvK={
zadfEc)e;5{_vYe&m%gY}`s~IEuXkqf?sXV)^}@3O<K){dHvoWpb+<G2*XSbj?KRq0
znQLBxI&S;D2?t2wT-rvqkQtC=63CH{`AM;gH;|!y^2CYigLbIqxu^pnu%&SFzfVrK
zoE~s)2C}?b<~rjG|2m3??#_f+fb^U^laB?fhWu?@E>X>|1@7L7eTO{F;&*~-DDd!i
ztOG-H$=8t_CKxT^Z54<Yi*LlHaRLzf&^-WW=&APLXwO}?dfyDMZAg=2n+SgcL<gj>
zyDc9|Ms9BT6m41&`iO)7cu+mXSCa})d)E!Hc%MDfxbd&QVvfVZ4DTvp`B!1$fdeBf
zk~m#1=T+C%Y7tLpSc!>+)Y0lUc8H3peXXhaQdftLUWxq4=Eq3NT5j&jqf&NZ9s3R(
z2s@NxQcNY;yEDO=wP$gzjJ(dP3zx9{Y}*kA&~q9;Kaq+&#;%$xx^j+1!SjvwS}hBU
zk5)Hh9w2;<{*(^fU-f|IbNF!vA<;>i%WJp!;_pE;0YnppOmA<cZW3hlquI6#iQBX^
zG|=Y6rw%+r?E(rdxVqu_y`KO-!c8>h&^pD#)ao+jiOpPqR=UyT*PSkyfPy3lO9U=A
zln7HlEl=o|-hy;+@7`#P>j<Z^9HHPULqtlvjPFCB8xZrsvd$$kVBh}z-?4>uS4JB9
z@`XHoIu}9g0P9;VUM*IZ!Q619J?957UjK7*Edv9uvC+2dexAcC>wSz~EwS}pe`O9P
zFY%(Sn3$h3K3#?<hH4yeLzKkpUE5f`aXw<5gD)|3>xPGPtx9IEf~&Z^>;O6Vr<Okh
zH=kEb_%!@j($G&yq*}EX49Y*0zH-GKjt9%jUfR1E7`!Q|<1CK`SGXfMoo((e*5~`n
zuyJv<!UCs#{gntMyFx9$iHS|h%ASs2Y1itL1}{4VrRAACh*_OpH96(4<A^FS=6~Ty
zY5MV0piNbee9BioY!`pEr1n}@fm?=#p@)u|?D*e7Sv33qFHOQ|{zc@WBDr2dNND5C
z3ETN?gzZ#zIC!d{cjOz}qf<x|wVb>_-2R6p&MI1g-4iT4Mb%o+9Lg$-5kmqxw`E<N
z>M(ffr2XJ{XWXc0M(<I5*Y(8<SWU*J!ONIP+)j*!ucm_C8_o0~5Em~2i-Tsn@)Gf`
z{fg~xR7*qeG@Dw$%A7~4briU!q+`9s9*{}?va}Yx|DZhn{YcAf^fcTgR;zBBb~Qou
zO?iu^65#V;Jfmyd`aIkk4%JeAV#G)=1u&LCi7DTZ0*gJY8q8z{HIeZ9Z0A9Z_qQ@8
zdpTe3pRojddZ#YzqG&^mQtHj>ZcjFQCOW!sW8W@NX=H@oiLC+4$r_ehhq}T*r-c0K
zs6qcC2*$8Pilkm|G)>Zi8^6Fr31^@_R9>{U#q9We0v+8CSY<-OtZ6%s#uf8+xRq0T
zLL+FG0ORKXE^C5?6qLJ7A5D}IB!*p}=d}$ExHr|+8xW%eHvhHpc3rbJxP#dCmEXmF
zIjdh90c{of=fnK`vi2Ed&yjDT${-ZrRZ;C_!P`M$uJY%>9$DJS01t8-7p0QtFJF!|
zCg=1Bmt3bx9N%3HPlI#k4MfKb{RKNxQS=~js+<7Fjw&GHU>c4ZRNEuy<KU~()76!1
zHFHek0p!G-Dlrk2N17CF1fMba0>_G8Lx^G_{>nu;iD<b&A8SO55xs%<8-GtQ#G%b{
zJ2NALs(hhw*N)J7%8OZyusSav-}`$o1-rx%8yg-aJEzH{CRL(mG{@bG>f+AbyLlM!
zFaV3Z4Uh<;^KeFMgiZr!1JNj6!JpsoK!b(6k13WC-f^rrLb_5+d+pbDVO8qse^2U|
zfc;|6iM#FR2&dO953h|ts4Y13VwinF(6>;=!wC-Boom-tTMMy=9(NojW;^W1Yx`{(
zK3e<?Tb!QV`HiV&uy;m<Dfiythh9DLV5-Xzx1T(j3d(HhWmxZk^rQ(Yz;w}u_3P1F
zFfgttk5Vz2U})4mOl0Nc%#<N9T)OLXXl^jXV4_o;nOT1(%lkK&MI~@@MBc;FNUD;4
znN{{rA1b&<<Nh?F<#0F_>*TDxzCpiY^0kYWLw#yw0g}MwSn>$F{faMX2v+a5phn*B
zw==kYy%wkM(y9ui(|mdHDd-htwP3dto$~SAr;%_8&L;Blp2W`+Sb9V65QMv%9;|kj
zUQzh-oeTzSGGNYWi%6MH>@G?X7)+quaTS!5cq*HRZ>4^t;xxV?5l5t3swq^t2rPbQ
zk;PEirarEIwB<wUJKlzaKpHCm*C3R31ob~wZNu|j!N^rnMeQkRHqt1*KU#jN4*)2L
z`jeBBWP{|?R9HmMK#&UFggVg{J54*=!WlgEA@eN#vhR?TRQU_6Kpg_70t|kr@9f3*
z)yI?a_(5)rEAT$3V=4PN!>4z4%DzP#FB|Y%74P9kI_d^!Z02B!0>hQmx+UmGCSlYD
z1%qClL9pBO^fWB>LaoG={AL?;S2Dg0bQg%)&ku&|6!|@YHnHX_)VFnOqh2}^W7)x>
zj(``J%w0(REyi<nAi)NIVebaSvytX;D2ze@<2j^U(`nvO;e9z;&-K$MvGeE8L)mXJ
znj(S~;M`s;0=ah6$%AZcQbdaLFRYL`Bu7X|NnzZ+z6tR<NiHtolnuaQCuz5A-#!EP
z$?NJg?SDju>3E2X-tt2{mXj7o*NyKPzt(v?V#zJsvyxt7vo(Y7Y<qEYvtaeZ+B42C
zDZ&FIBM~eW2(W<_>gu+?#TH(<ddJe}nf{+B`Tmo4#Q!P;{4e^?=f~G}O%I+N894yu
z%j%}2;ahXPH;?Z|`2YaBv|CM9RYBTRH~SJU9GjEV)3S|#4ui0W*%^*<aoy_rauNKm
zy8zBz_EdPUv?4~?e%aCl6zY?A7^%-hjMyQ@eib3RjS*~33VGUbkHLog7R>e3?_O0<
zPOzOI`_+YFM99kSOVV@QbyV_B<GW-mC#prIJ@S0s;yuBQ+p7yp6-RN7UI{JE9_s9c
z=Fry&gF{~Y?593`{4JopcaCM5D3kr$_sf>6XpQR}si`1<Y++tNO$jMgMlS`qONYH8
zrIA7q<y;BHpI(%IA>M(SB)gNj_5QtkimQL@(a8R@jvx{r7#LqM0^b&}ooaU_BR<J(
z=zO58z=R|eOzVG~5fb7^mU_{r7Tny@0(&C!Pmgv&c%vMn=z)Ym_GIxp_7LD>FpcK5
z%(R|4qFF7>(LbSlVSM(!+40r{jVVB|G2x(-A;n4E@PRqcQo-IIU%q^Str7>FwWTEp
zFT@R?iL!gb?NZf8H9{H;JVq#1&b4Khko&5154H7G3{#!Akk{-3Ng>)tY9y9&A!KZ~
z(N*55i*a^Eu3Ik@@I#kV08Uu%=DHMvTh(EmDAF$73*mEBs)H!l*Id)9KH))d&ntwO
ztX>01Ts?XvzepHb=B+FjF@AtAqF&>>T`5X6?Qji?R>)aB9i(NST~?8#gr2J-hdQ25
zXO7wG#KE<bbsPl+g$88IpYS(FyvBTU`Y;H*@Zadi*$EtxwG2PXO?D46GaTWB;a&oO
z4g#X7nn=zZ>%632hiW?zbyFG8L{$dCcpV0BoEYv?1wdZlA#6h}-C9-_f4!&@AHpm=
zKLyPvK$c$fj-`;wvC*XmFnmNjPKpBpULa>g^>FFqy=u5{fMbdrokn<}e1vOT%^Xbo
z5jH5{>|#{Yf)NpfI#fFvR18Z~Ro7p=W#a1z{(4OxS&n;<V&QJ~^7$t9ZgS!U5%5vW
z3fircKJ4G^*^~%34YVqEVCac;>Rt+zYTZ8`&juZp8_j79v_22|>Ebw)h@w!O;DN?N
zYQ0VB!Uaq*Q?C_l0e1&B$MDQr!Vyg1h*dsq{9R=&MX(9Q(Za%lzn>pE?^ztNC^>S{
zU@7*kpa9MgRBaVPDsgv>RflJ#DFn{D1qXL5FWCzU2^Cc^i(D@(|NKPs6dxZYn!E+m
z!N5DV07Zd8ka0_)LV_|}-U=)5bsD@H29X&-x?JfsNVO$@+z%W4dcim@c?nZl*|bc>
z%|4kT@LKor_iur?Pv3bwry*X_O_RL)t<rU6atk34I@gOg2LH7v=^sx(vhAV7+l}8L
z^C{sa$oQz#hJYXeVB{0b(qZZe!<qXE3JOH2Ob#3#(K}S2D`#cx!wG)>ekzvX5-ff2
zJ!SGK2MC6|T}LXRcN`l_j1nh|jpTNAhG2vdtAN_*@4NF7Pq&mPu(7eVDRd2KDh@df
z-Gf?nC(|Mi@n3QT1o`2IikxCpWXkpgI*OxZ*Oy3O^D%SE@6n!GA!|tCMwZ@3yi7hh
z+_;1$q?MS)LP$tMLoA6Ai?M$fbF6LrJW`fJ7)4-KkK6)Gs*P^kIOZG!E0uZWI0uq+
zwQK{moIz0p4h-PVorv2;%kOn>m$<kC3<)x$A&;FrdFITSt}QGhqM@iDrR9Mi*ubtC
zkQM$ef`#*l+Q*E!m83^?`w$bv!p@qi4M&y!iLUb~fRUi56(~3(={A3P_2S9blRl)9
zG#C~n8MD=4Qe`sKs#=MV^A@2<pFelOs=vcdNSRhiQSlq2fhA-(yF2jIZGRM|!%B|p
z@^9rYhA^VGht^kn?K!g{ujFJC)H>cDQtVe8P@$scGREu}Jq0NJ4F@?1xfZopk+>>x
zGHW&*;Z#Is!TGN}cE+HiR(Y}^0b>e08>+^<x6EFNM;qK;8k(OGQ?{Gx*UWUEAhnJX
zBIMae=Oe$UwE2rXg#k58dZ^|(A!2J{>8z~tx@z74KZ?7QYzp^LsaMObC*@K0(aL|1
zl<CK@Z9iSj2BaI)`|qzrD~FrYT{7mh+JhB^%_d+MgE~dfV&WUf-w?*tQF-y`gD(yR
zK#N%u9H|i8j@F!YO%`0`q4ss(4DGRd`4JXX*w|g(;tYQq&sGbVI+v6<GjCt5#s)PG
ztBf<8c{p-&DVy!7c!}c>d*HO(lWWNQz;}Tyqo2QjR&>87U|u%SoSwpi_KRJ!9V-Y!
zB4<5B3>~L{?R=V}CvgEs6pPv^P}8TXq+k{M3wD3X?P@sn{)9~6i1EF}VW=z+XTP!x
zfD_~=sK1;h$4B>z+6Ac0!R;^$2A6QUjo%wYd;t>#FxKHvnFK8=5{3XvaS*=saK4~E
zZ2mH_FHa_Qm0s<Yo1F})gjfK?dk}7w&*aqA28qm6dK@icbg_d}yyop#Ku+2w==o-M
z-ZM3oJ#!2ud4+|n)pWa%6E@jHEa<(;vW2umb}sQ7>%oJ%n0FAi_Ye?PNsrvT@q@1m
z6KS%U6cp|X2^qt$VU8|v(Yck_<+d$bE8E54gFEOw@*CP89toPx*?Bb#$eVZEpngZJ
zlS!@;)yVY0H3qh7B^=Vk3hy|6c9z~_)UWTJurhY#3)--Sg}l;_;HBVy()5+ws|)G>
zm|*%p+v@+DN~Zsa-daeK6a?>J5xQ-k)!wvNkMEtt8RR76^eQ{QVK?<hh_QM)INU>I
z7YGNSWcqH4iTv`RZ**w{cQ<+)H)m(1nojE7DgVzNUu>#o&Rt3S#01)V%7!9WhPU}l
zd{#ZhN|w^sQ3=%*?xt)4CI<_)p<3)_Fcz9C-s<tC2As1Tf*aY_XWNy6?=+>TUW3yb
zlm2hWLn!jF|ENyX7NSndY0{1hb2?Hs5bh9%Je_F$*BQr+;=6r674=>d`7`ezqJ%+r
z|K}&x_RASnb#-Yl6@d`Hr2NPr1jx>rn%y|XF#(R+0SmHA^M_Ya=SP$=4E;`^z|$T&
zf27GE*p_=I!?#m$^<TWq*-z!51;p|5_4DUY<Xodv(M}tP1{A|UXoFaWn#{X?%STvT
z|A7BO&6zu`79|0EirE&_Ff#r-ttylKaHb`B-4lYM1CJ05u*pcHiC>69a4vRU3C?ok
zx|qQ}HO-X^ML4`bFv*3&+G=J$Y|Y7iR9nh4hzb9py>^9fa|39mfBFoKL559{EEX&;
zX|0O~y42n_!;eUcneUK-_ea_=*Lu|*%3(0Aqz1AG&iF&nT&#>HW3v;iH%OP0P5w1X
z5IIH#2@*h7L2c%htZREJSt<M(Iy&-#-x(7LNXJ=-R@T;17aTcFHijeGNOJ8}9Dv%F
z10p{Fl;AXpg*(C+WI~MREZkLg6ZlKH(A@ADE&kq&AR)%Hruk@^FvdjCr`YOiOi7qN
z=cE{Ck9X&H`gUQEaQefM#`+L(TaE#uHAHwlhFC21W#th=+`EHqPs5{Np6V++q8{h9
z08Ci`xtOr0FR>%jc)b?TE572FK=O`*Zl(jUV1H#GDmLz|lwbgE$X`kM`1<ut%VVCg
zsu!4uRw$2sESlbGHC!toNpHG^5X-KwQi(b_Fm-!_m0!#c!|45|hVGlqgTV1IBLgj;
zx)sLSna<9!tNTPlZN9^a*H8Jcj_zlU&}}P6+X=(_JC^Pa0(Q$^C!-^U<5-|xYH@Kf
zDr;&Kr9krXJ(6^$vWpv{wz*Vd+&|2oWWcmI4Cyk!E$R$mMH=m&i%T5WM7(CY6$V1k
zMjbL#UcD{3IE8mIc(ccRr_uii4JD-&b|yO++@ndYNH-YUvm0~ZNN$|aFHr+6{VY0&
z0l?NRTPP1V3gZr(oM88lyW{4%Y(Et_5WPdXvd$hZFd_bZP)mZ<5`#63&jpn;DA9EF
z;L=c<-|!`zyiR5Om=cm~FgE}rMCH%2+Hy6H``Fa)pFa@$gk6+qY+`2S9gH~#Inc8l
zw_P-}P+=kwFB&t=jN82C&ADXj+qS}>c`y7@0By_+!aaUi63$QO6oRr*+5%^g2o|yR
z;aMRZIwZFGV-q-Rs}3h{tpDV5e1)h_-U+c{6s`K%x>Ke1Mw>Z=@A2C&FXAaK4#g8e
zkim@xsH_hqJIuyVkHM>*{pUC=X|V{3+S+cTse-N1@^F$UMst_qyt2x(3~O&_xXW@W
zKon~_()bfjXpwrM;4u4WAU8yDWqIk#*Q2Q8BHzoz!JHuD>C*y`iu6F}Z*@<JKqTy+
zMW8&dqo3wul^w%!!cx}%SC!j=I!Z`$OqQ1ImeI!Kw~}r{bZmC@=$c?f4yRtzj@%By
ztCE-k7yCQkLV%gsKss)R*c@v8&Cfn6NBD5+E@WU=h?L1R+^1yqTkY8e;N6i^FuIRN
zz@IdAcfY#uE!a*o=Dm#gWPk8pkSM{WPr?ZV0^a4+8|j&dvB7Ob&mjFpiSLmneJhUa
z2yqU^`Gq`k%^`@9%F4=0N=h0V&veBYRM`Xs956Fjip5X~A!D*~D;a;^6cc;o<|dbI
zNa-FQ=Sf!7_OV)V#SS1As}zxTdmXq5IQ5Xr)IV9cLxq!Dw*7B0i3)|TgL4-D7L&m6
zUp2N~Vn$ji{nqO}DS^;!Dj0dCrYe7V2p_<uXxyr#QmXgzwSrQz&jH?$6_>raqRVIC
zmz0SyWaehmp5jpI4;1_EtK^^v-wDl}jZ0dsx4W54@7;sL)f|?A^|VD*d3oK}uRlIH
zERlItsQ>;U>yl4mF?#9jG0Irbu)LL9U1_)6j8`Fq|3Lcj|K819YTpfrVKNms!0JJN
z=zejd82ee=!wg3IRl3*0e<SN3*Ry-FlPmORns%g32ZSEFZmUaN@}d6%i#bee&_Esa
zGlbY#?+q*%IQ*P_eH#!jx7y|u+wk%JEgvj$-dW}ePDGe#W$IB27@6?Ez$X+E>^I^x
zQjyG7Po*8!@q>5gZiq%dR*y9$2Pd=o>SLY4W3~7_u`8W7CU}GXrMV7{ryL((J&lY*
z=w*P6C{dp?O@!07ZI1KNJ4ib~hDv|4&07URH>z_cWc)A&*~Rm>2+r%A+4+x|d$2jG
z-549{3p+bIaZ}4-6d=&_p`+3ia03oWjPRarwWk)^?b-4O&Hm<1x0mbErBI1T943Ge
z-YbS4!E6?mcGVRk29>RXW<zI%`hAnZz#%h6#siUqeM9uW;PhewOaBJVKkoSle&*1>
za;Q#QSw+}MaWWL<aYLrzc}u^HuUxqT;0U-gZu=Y<-^7eknm~CsfsHEe{!_OauYk>I
zloc7Nk2?e@>2Qg9`#wQCs}f}U&!4Zt<{ysVx4$P00?^reTvPUO2ReAYwS&4Ty=jIg
zsmbAacGMgQpo$oxP<_k)*p&P$1CqU@%T4fe`S<v~Gv^Jv)oFlw>~q*eQilP5UbGkA
z(6R8^=pvoVD(3VIM5#%|Ztjzw%|}8nBp@M*9vna%s4%94dH{}t6k2m>JZE)?RF6YJ
zNNQ&k`nA=}2ME^~M#L!4U>yZt(3JdQlONZlsL(CtDz05Us%nya7?wg_(+T<7o;T`Z
zs_Lk;Vw35C6AX~3cuvB9Xvv`bxo}N7hBXLL-o9zmyZ7(?gsm$9k|5}hYZNI@z;otd
zk|St7#zHT>bLT636A(dv4ODAydG)8}Au-Tys=vR!erm(3e8IT)GLFjKU#^yBVQS;O
zy9xM41HhxnH2ku>#mTbi!49k#>6(+gyzb2*g8C3;nB6~hr<L8HG602~r`Sic;fKb?
z!#>BapAYXLo;+EL6#^`90UWs+oPbIGW$@G!RK)89oKgA-oh%FcX~UWex6L0uod4D0
z$9E50W)QNRqYyd1LVrR348UB3%pbI!4vi2eB&u<2R#vZ}PB9<J5-?(^S9rp=%5$$d
zA{u$+b@RgC&_kTJ!{mn=WHosPX)P>>d01BI-ofDAs;{TVLbJT>pS*wwc@Cn2fN%aq
zjtv+YbF#8ZlAdBOBKX?(7ku19@3hT>W@`T6!G6I9(%JfhnUsLo9dITqQ83f7HOhJt
zghfgWa&^6KG{0he&B!Q<x;e$7yejFxSQsh_BxJvJW4xYpB-OZK$EgT_R?r+1N%yfp
zc$A~kRC*%5!JJE#!3+e1B?g#M%mXy1-k|{1$Mb^YPcKiFy+Bi%pqVc5EON<Bh6i$9
zu303j3=v<U7^Ibp+=zGr!||F(WnB4n9FdQZ)6UGmu9omxHtBTf5Cr@>tLL&ThwwUT
zB0`P8cChPyQ@a8uYS;KOF<Ct+2nGPZW@o`ix&ikG1iCI)2<W0fj{6{77keo=OfMC9
ze1Dm*g86nv1A}M`z^L=MBS*Sjcnb4O)`NC~7cXS|{lH)ZmMm%m>|o<38)gCn4xkKL
zs#o{K+Wav#_8uu4DA!kJ8iFyl@+$3V(8ctA#viItysbi9r0wm0zHT`isxx8Jo|p?s
z)1)U7k9FZBg?ZF8BZ4WBl8RW|m+)vo3ZW+J&5qn3Y{52ySHJlFyy1JK3m=c1+%TcP
z9@In-!Lzfp@WKy!-;=pJ;c?2%Y6aR+v<FHsO~nIPnJnWg@vA}AScT}r-&Aq_2iOr%
zlLTr)((HdV6=U53Y<egDM6xP);lX&j_MfL&LXFxYvXKu{PhUNWnH_X+80VM;fC;^R
zOoIt=Gh%%3x2)$*@-hJJ6A=-CX5gm}*u*m<ey?_KGxJj>Sf4s`=5_NG)_$tqv^yrk
z!RFxMB!@qyi2M)NcaHvx!iJH7p<qEdV3nQaVt!&`57k7SSan{KuqEz;*FK?#58}r7
zUrUmY$<|LJ0ETo7d>CNeY`1)MAFb8`wP*h9^lO7QN`5N|$NqHF;nR7e)O|#ANCrM`
z`2YW}-P-@Zn4kPdV8DNW`F~+I{67rC{P&ap?<fE7)Mfu^O3r^T+W+Y}`(HF_{_msm
zzi(KS$N$z2;y;fGxKg{YLs}El(`qyk8&)aJO^)H$@2vkub9cO-B-rJ?N{#!kIRqb#
zK$&+AjlpOCeXHgX?%EcXmI&KB4ngnQtMKOm8jDo#DTpBkS)adn0ZT#19@9aO$-Pn0
zhaowe-2U5!hOyaO)sxyAKbknbeOrMj$$|Zznq543i#NW7I6#7-R<m>Uhlu@3HmWZK
z0n5t5%L?Mt%7CZnC`}$d3=pw>EO?ra&vbrzTw8kzGJYfIPLFGy*2sF8I{6aPfnMnU
zPTf>o08x5=6!;}=;ycQTRp$+{8+++?(f<4`+vC!rloZTSy{ok41pkSY661jQ*TiMg
z2G%{K4O?AQ5-k`+CQnUlCm#v-{&4+POivnlOOGqZ=z-flk4KKEetsol)lpfg_U!hp
z1mwKJj%bDr!wm_lp$`4Aef#$DTTF=g^)YRbFzC+)pV?w%Ib1KQ`t7^Ki(C9j^YEj_
zd-K!G_e>3Kus>Cz{yE|1y7NK?>y9e-zRkbzRBFNc;<>Cn7Wdv~Xx;a;q4(Z)e<rre
zqh-UGJgHuyI^*^=Sy!(Qbh{$Y+26i5o6*Hn<Z49k!qGeZOwaJjl|zP#aYnBWTDN6e
zYH8x@gfKGF)0=gEqWVIXz5^$8(e<TWOUxVQ$sWtEpM&Q)6DT%R^1H{;jU0oHtKQmr
zI#)l;O3ewU#Qh8nRn@FI;K^d>^;MNQYW*=MofbN#?z?IU4wN<W?E*GKcfUoF)1K&S
z@(dp#)-;I}Hi^WgxqJ@Qdgc)NjKbS-##dzp7*g->LJHB-N>Xy=pk!5G77O7s2K}5G
z7qaQm4nSn<Pf7e(y2=bD5^pQkgg{VesPJSyLSRtY3b9Gktm)#!C%1*eYJxV*5bxGR
zPjfBhnOw8B&VmILm1_(PM)cuGS~GjWC+IQ-5JFROgf{UW$ir@K^*trmy`~}2#zW@|
zfBoG3+i>2StPd*N_&U#LIfUYmDkFPM)9r~pka1h_gGHKy17$2iVNhe<H<E?G&kw4|
z#-VozfA-_MgF&oPu+GPO1wa8S-hQN9WXb%(B=r9MJL#$^(anzdfNwEijK##T6H;GT
z*c7tpKGidNa@Bli$&Z=bl2R>?ph$a-7Zf|JuS_A1K`q8QHes2S6t4(YUS8hInGa^*
z&7gONg$1tN!=TtJcXOYfg2GMU)^A<kjaX)PT0aI(4ps$ZboTcru_S-Nv}IoEQ`FW~
zqSd25q;Zd9?IYOilE_1VKp$-vd;l*<tL_vLse;*`PL!*4TwkX3Y_3g+Ioup5&PR1y
zPjkNMIcpbD?d<kXEP%3Z-SX>OY7vR&&Pg$}oc6m?YatP){7k25*{Ig3`g1P#$uGOV
z+81p0%pSXH{>y();@b#MsoV|DK|f||JDzRbS-`X3?y^8%xS(_J-yc_=RY$bF(0y)d
zXXDkC*Uw22n(wjw`hqwj!4W$%)&^(WHW1n{Mx#Gw0Rlg<8E`WKX%!Ku(VJ&BH@W@p
zxB)?Ck4#Daq){srRW5tnU}88M{FZn1m}oW~Z~qD(H<J9#miHNY&k*g#t(kVME=EC4
zPT6Fp5@sw=gPluvm>8&52HSvRn<F+pL-Sd-Q))F=5??J-_}RZkJsr;d9UHo+5<Ik3
z<iqJJ4F-Fd1E0KH@p?x$DEdoe&tQ>&bjfW`X-mbL&H|nlRo9u<w2X2DcGhx7Yi`Dh
z=4gHs_0y~mpM_8J$Pk}JBq8z^abvKTWmp{lR-d9TQ*yK`AJL9r9uP}-LDKP7e6z@p
z<4kRw#A7UEw<xVaAUM+p@%3&c{DUE%*4z0xoWcMmY~RSpYo6fyub2bDyFZ5vi5T^y
zMYV)Wq9)zbaHf@^R|;It8n*))*$Q!1B$y1Nl*7PO!GdQ-l8h&7g$;O_vQP>+!vqBU
zXE36K(TXFA;H1H_MfZhUAwMT4gTPK_Q^<aQw}Vsv;NVcp-G1T%lxEN>zG;0SDaB&u
zw3%ZkiKw`DrB3i_nDYL9b}xgT^;5KRv`maGD_R}(yeB-WNu}ewp^{(){A|`faP7U#
zKJ9Sn?)$_Qj*R$FFeJn!1BzeoC;#-kdk`|M*OMA`{J(WqOCd3>pmRUDbQV`?pCNjL
zEqEFnmMbbMbx?M|)B!_AAJM#2maqL)w%#9w@`&viV_k!rseEuQPP-cjG7oSa>d5nb
z@+2p1q{Tc03RVR7<ic?lMhO(YE8uV0FU=^#Dvvh)G<K%FNU;1KtK8P!-d<9YY)~an
zx|Kc=Asd@b&#~cI+fqX|?WV8egc|=?W3%(a=Sa=c`QD$nM7^h{OxpHw(2{z2yFw#+
zColHDD~(D0dqoD4!ZMGqI$^OC=Re{Geik4?Gs9v;lg&~@j;fZ0CZ~hH5R`a~oDYja
zA;9HH>PbGd){8;bgEe>f?kz78oF$PP0UyH2&d*1kEo&@(jlh_KGb^JYh>i8EB1H$9
zbj)@w`pTaM+w1fW54U8Qt21~Xb$ZexTk?YJ=M@c$A>Rr70%v<3yB9fOuA2M293F|X
zX4&`$Imq>QePxsJNucO)e!lVPkq!<P^_nMM8%5*jghH5w-W(@-WZbMSx2rn8s{Y{5
zhqF#ih}Uw2(cZgWA3h+R$2&rNCKmE(6ct17+}zRyuNWI2_26rF1w`jjw7ewM9kis}
z%*V?cg8=3zIic1znM)cPte5Fh&y=>5&Q$9r&B~qTob=r$bNk!-lD`Po;oPE56`4sn
zjkee`2~MwD&vDe@o!!zKQlBLCoPP9PT4NkqASfY}s!nX(w(ZT?siGiZq2A)F2We?(
z85j(29auOF1Er8l$-BMHam%s)Ou711aNZ3E2@I|%R?T2+;=rV<a5UVd&bY|-7pv7-
zziC8Y$6s*r$cB*yo5H!;_>eaye`3#@Yd)F?D<~wnF`A#V8<~R}4(9SQYu-ukQs2AR
zVCz;FP_H?;xE7&(#T`&BTF=YO$jIqzc?9)PO((KO5VA?!)SCRG0k%@^n<1XObmdCt
z#)H$9o@}#~fq6@JxrecB>-UE{*8C`{eX#S>b1Ak6X-rxb`D9`0N6RER*)#J499p{!
zcfVD)un>q|Ej#S<vXaLC2W@W^SLM64jhcu^cc*j-0!mAlNKH@yX;4a}TSU4$m2Qw0
zkycV#N(2O?ySu+JajoyS-}hi2?Y$2F>Vo;q=f1}n*SMk+1iX-&()H)hCy$Hd?e8y8
zfN%~_<QlSVY74CcDzyCkIX0+fAyWnfqdV}GV2}>RE<SWzZ{(~$JO(d7AW}rUIc%f4
z1rX(H2#HLSC;(T$+)DXk)vQMFON7+3xb27=jlgMOs7&`|;8K~AmkwN;{CW4t)aVRa
zJDM1dBj%=dB@2sONl9iB`Qryq_?mxAXoOiSBHq0D0p4;k!Hy^Ubx_!u^Bj-1_dsgH
zazWs=xf$#paWx_KzhvX>kknJ&xQ2)SQ^W$=s0ZBKE;XG&JD_1H+;t}s6qtW9RI8eI
zpNA(}s?8kME)lBw@-E@M{na%@^3KYjG}`X=^Oe8Z-_^y#@PxaP1XZM>3p%L`@*+7!
zY#U?O*#QM^y;a1obUQ)%y>uNB)SB|iGI>$@Bnv?+M1}I_a`#hnZw41b7j^E+9HnSr
z&9|TUu5~gd2<ALa*z1$ofITm3Unwpscn3Nh?*<FZsmj#94!627*om1Hc%u>0Be2MS
z3nrM>)}`cZg=94GUv>aYcu~zkhRlz>#4mLAao1EMQDVN5y<oC_nk09gQEOdffYVz<
zkB2(&1R4ycrJP4S@in~|NozAXyyLu5m;d!H?>^k<XsAw*;2H*<ZQj%3`SBVopu2v9
z4FnhyEdNZ)f@68!3|1~xjvM+ZBI8C*;9i(%!s;^(K3Gpb5xcS;L3M!3=4f*Y4{9nz
z+Q~yiUG(q3#vR2E4lb^uol%TRU}OTqhM2)b9*bvfU`FPQ2R<pFJOnGb$%%;~FxRXe
z(15!W5b_>@hrbV2N0>oY)^9V_7&GZHxv{XoIW!6pJS<Dz64HPOzw7#O*CWfHaUtC+
znUU8Manq7iDZFhg=2q6rrOD>3+Q_%^f-<_U`L$?0xq^)fz5NXz3?m6zlth+Znwap}
zE&2h&!ga613be~`^eMQe@wBu)0BLMl$r<jxfgDb|wNafw3(#l*2O+kq+Hs@AcA*$V
zfy~ww&G0%yFzEt#0fT?>@6JvwQn;RA?-OtvPa2jh$G~!I|76x4*)s90CMtg$Bw0}i
zu*LofUQxgv5hKiRPVxYG-MW60NJm7IK0MB$n32j2J@C9^P@<e!jQ>TZung`!$lg7|
zGr*@xYv-rAYjiw<TqQx3tFOO&*GkW%Fq7)OVU|W|yhJ6sA@|?b?aN+OE0KXeWY8k(
z3M*ECGcc4Q5gK1U)ntALTX6X#<qq>@BkpBTj*>py6y94dh79KD<Fv=~%bKY+bK5X1
zDKi#8iNjwHB;r*4T2erYN<ZV{*G6f|=2;Fl@baUOP$2&P6%>iAFRSZ1(ENzS#+DA5
zwtIp&x}v;1CM&ly#({*jfQA)m;6;D-=AQ^pE@8HSm|~jB%_OVJRY9U)Fo`AsJr6^k
zl&8!d*>r1kFbmupeA6bCQQeY3!8X87B#-RPqh18>rZhgUt#jX=J$jiV=iQkk2%E9q
zodriQ8-tX?5Fj$#eMG-rPZ!yd{UoX230NU;Bq&q-8jn^*88mMK>7W~26tD+oeKA@n
z7j?{UE5Ky>ckN93m;6&%#4zJ`8^huwTs%BF0_1fB+oG|tF+%3Z*9SF>{~mwb^HLNX
zr5+RtEu+Zd_i{Rpm($Zg<q8V}i_qvK>-0zkyo8y2@i?Z+>J`enLpi==y~NOROWDXQ
zd<o#<a_KChO^;qE##k45P`l6bWj}tKhY9*Cu>7)9Iy=(^<!)Y+VJo^8D0RVT5mE>7
znCs<UY;|(VKr~B3sS?<uz+1~W4zHTi*>PdY+fiM)>(5h=ktjKl$B_aZyW4Z-KxIAK
zY!WF`ftFA0KXdJm!Mjx?3-)17ZVanE=efhZ(Tk{aYs87fBeT3c>Rr_nve%=cbsjFP
z$=a|cYE?}eJ8jpeS%u>seYsUfO2)!pXi%)a^ETvFd9*PRYr$_V$@!i_d{zyo_DFT;
zrNgo5D|kuh=e~k@7ic{4R)JA@1a}FG_U|DWSROM=HGu9_Qbq=h+j1;MRI7t(7Nbhx
z<REX9UA0;#oIMR%Q<^RAhYt^zhsc0J?*_*aT-;%bjb4lfw?S3n&y`^qpTP|O6Lc|=
zPyRDkGahw+eq-s(^xSW@GVo?PE1~kaq5U#Kx7@_GC6E%*w!w61tJYZ|a~0CZA%jNg
z?D#`wGY5SCx($|xn_<-smJK#@zEDYJXFF3SvmSZ61?)rG__OTb6D(0Spl^UaWo2~F
zvS==&_xJCwKy)`Bemw%FB@lfAH{J>+VMyC}-C+RU%WS0!8U}`H$$)hE<0%pEpB(EF
zs7BZSKvdK6#F{&5#0$BiC?a1MKRJ@{I2rlZ^tgnCAA$!zyuUkHg`l>y=-)AbTrIKX
z8tS9=YuCMu_F(1q6^jN={gt~<<ejVaD}>@Bt0stV+9%~$0b>HwR<YekZU}4O{n!)a
zU;6(H+4?WKv;Vf}iY&%uZ&r32D5rq#0L7F(>E9{--{xWezrnkgzs{8(JP;uhy$XIG
zkJ=yqb2FW&%gtR(O-+ULWbo%)O}q`s8u7$HiUt!}5)$LU4Bil6&t4J+oMi5v-@JJf
zn5>YM__?Bji<h_E!uazptrjUIB@Qm`^4gl=%a?RxCq0#e4<RKUEmh8q3@+Tw9yw_=
zR8({<EKp{}m0I(OzEhb_iM}<bZ)ph;Q4RP~mX?K+mJG9(O8hGm7#06Axjv4FKqgm6
zjAATCT(?JMTO01B4{I$Mw22^*q#$3#SB!)|ic3nZ75uj?*?5O&g|EHv6C1BOjOSz=
zA2<c4AdL2My1z1URZa{TX)s6z`nJz^K5_E%4FC7FJKef_Q%YJIf+(3t8Q|Y|qFuf+
z7%Ft(r(H#k@v<}{ZsSGD6E`pQ^j9W4S6vQ{Dj)e=W}4w1fZpKz>=wlA)YQaHe6g&F
zT#}NKf=9*t{OZ3sx592IF@mna?My(q!5YFK=%j<gfLJAm1queOQUiBYL(Uh~`vXc1
zOtK$9fdNo}D?}q<knt^!l*hsUA|n7isDgcQW-H(^^67c&)(7jtXQl8YAQpIic6NGk
z@lUE)2GB%hzqEh*FBZU>Kz8}_6HN>afg5sjd;r>5Xm(kCJpKg|e7nVP&?25fg6uZ9
z#ZJe@@?E$#XO}@ZDa#V%?|DIzdBWf`Xsp|#7(wJB<qo2oM;@y{1h2FhsrI-?0kIKK
z_=el4JkpI`f0RJ(V-<Hcndl*_ch5Xe35F}(d;~Jt1e}llmb;(mFz<rX3Z(nhft`Cl
z#7l!+Q7F=FpgpPvPJDF{a2^i86|=6kHi&@rPo5eX8JYRbrSIUgBc6Dp5eP6H17KGI
z;ZrJSw}EZ5-}(f^2s|JT0h0;&k5QidwkBX0nd!2Z2*%anE`Nd41d?3=tBEj>D3Nj*
zWIom{(Mtmw1%#_Tt9>gZEG#V4A&&_v*vx7e)lVTy6AX;ln}7;H0`wMo+YIr`4+WPR
zzmU-BRMT&X6F5S5vE?NPL%?+D0W&cs33mzDw?J0|%!eW#pn3{|nhd-PK+XXaDAB&H
zxz49>+X3mRhe#K_vaAez<ow>-aoaBs!_SJ6*8@44Ofc~|M6e6ky(+%A$IGi&?*~M8
zO!7ld$$Du0A@=2Hs>u(m5&G9xRs=0agAXP*%E3Pt(6V4kVZQa;K}z{mD`#Y+*~}gu
zHZ~+M?n21LY)4FvY=i-*YJ(nldUrv(SwWL33*7ugkyR>4b>F*I5=1^?eYV{e#>xiA
z4Nu8C;A%bo6<icB$@cXjOK1Dl&(t0mV4!)Sz1al5^hQ=zj93W=kPn}*4Mq^avb3>f
zEozSSO@wF7%fccr<^o)X@g%`Yh>2BCee@lTpo2B<V5PVLa&NTXXW^a@JUZt#?pWqn
z9jP#n1Lyw^Xp4KZLFIX}u>i=(7O*<NgwX%P)-b?7i`n3vaxxng241vWmZJ|MQA7{_
zHgOxv$ANla3U{F^0TRaYX4=A-{`0D9f(h;sSd#)4BHrP}{mC3WTO;N50NfqS2@S2H
z$F6@%0fw?ufAw<sAf8AK!+T<)H;h8id3lh(LKtj-!KF}40Fdg}z?H3S1<D6Fgq1+L
z5I5h^$i|;4I!|Q^4#W@ji&skHVrkr-Mvc%l9N!06acOg^VQ306H)EMp+<tws8p;{S
zjv1-49iFIbU_kc<7F9g=+zRlzAdBl!`=86}_h&T_KtSRoAF#1J^Z|y2z6!8DkhejF
z2KlP<^2WvJ_wPEs80hG`q}K-n=xKiyo_MT|-_pi^d5*IAw4=WU71jUUdw+Qx*8q02
z)w&P40dniAJXH!c_;`359$e$vj}6jWbNif14<<?+v0b0K_}z@nI`sJ6*KOiy?3pDx
ziIsBJ)zedZzeX@)XVq#x>2;HzXx500o!!UO{H+PsjSMtKjAHGoYe103b9HsK0{%T|
zy~l;fboDX4eM%PGKMoH2V3d(~zka7j>rhQp$^dY_$*<OiijM;$kpefKR8!yq!5mvD
z74&u$#9g_2P8c*m(8W<vi2zs1@$N+DSNk`-{w{1x8uTW6VNr>6b*obfIeiBCfxo{<
zefPndpm&774-<<#9>fU4lUB(`o2Wa{1GkX(=#qJeBCSfD9cXiU!%?1oI^-49I$tfn
zKjD5LJkE|z{8N;L#jNKe78d!#!{e2U<_86Dm*R9|LBh8Lq$geXy$bv(;MYY)M}Lfr
zOiv)A2fZe$YdkkQyCo=xU;=~j9IF*nzNbLIHv9`WeH4SD^L)Zfu$ToFTY#wWhOVmG
zGa7)6XlZf3f43a|G_pCUreqe9a!-F2Fg=mu#rsCry<0;mf{Iu_Jk%fT6)is8Y&v3K
zXiZBK>$hYP5+1*WxeD(3qELQV@T)Rpun3H(;oXntHqJLwrkD*Zx<bxthEM6bw_E{S
zuyJ;8AD^@1l`@|@4U^y}HfGgO;c@ZSo`L+nNmq$Joq?et7ig+42=YY~u3y)3b#Yny
zQ<VYnyoqa&Tm=alHv6l?5$s^gq>O@&iP@@j9aI$EJw59q<!vy=JYZ#AVI(k(g;cKU
znwp@|e4PF-)Z8~t4{72S5aWdOQSF}!6_`4nJ`)!&tEnl-y|H=<l@85^R``WZd$xbB
zL3#!tA)kQQ2w~p59_vF?jz;N;>QDC#ZU`lGAy)XVkBsm`32u3+#nBu2gp~jxuoM&&
zrj-A?()V<JWem4MEc3fn{qvtd@&rzFzi=nqfY+~GlkD5`egL3QQxletxA);uh099e
z0}weTM?~lYor_=CCMhOH-Lz2OMN3O-PmTQc)5CiNuAV^(Gd642VkWHz;X7*jCK4VQ
z8R~%tdmpKxAKmH(IH92qC|%y*r675H@4*9Bk^cVv^yYxVLIp(}Bc|7{Ujtj#>0tao
znG8f1(~K!yL&9gkE_K;;G62>(fRJ#@OXH)Xp{X_mKF*3kk?JGJtge^o=0UYTxDs>g
zml1I;1}$WjwM)iCkhZ;FU9-G_eD!%PK+pbjJR+FE!=s`6rP9S#+h}HH=2KmF`_n^f
z)w+Wu#|dcay<UAIMs2?rEpI$DgfbL<d!V2D@}H~l1KDzQZ&-JLlpkzX`$~q=b)@%d
z_t^jz77$#P1KL(c2QK0^7nk+HhD<>U!`-_`dwFc+q4NTZ3c5XvX)=b|v&6bTgW&{?
zP=Nu{Q^U9Kyq^l%E&5PqXe(rzn!>1;Mn*<%-ns=z*w5PhwkI#%g5Sa-P~ZtXm<0t-
z>JCH>w>x{K=BP`JjEp|NnhKhNA^?G?A(X=M%06Ipw+STzLPm><6oIZrO!;>DPZg?y
z!X3Z`0A)9S0tBy%PR@b}=a+oGkRD%S&~jnY6~DT^&H#HD|6Gwqt_BEVQcZZ86-O~-
z<8*R}ZFUcjv`pN8b-2v<&Z!(tNi$aqq|Vq47YRcRI9V+};;h{~g+Af@(6BHxt1Dqg
zEWq^VJ8&Yg21To>Q%7_=WLe=ORKP$QzR<zlr6^k3bmdWD=k3)@xeTy$b(-tg>u0H3
zS|WiM`L~NdJs*1^Uyi*Pd{1y>u(iQYzuGj`=0{EGK|R#FIgE`-{ty!4DEjZQco)}h
z_d`Er|F{9PD+|f4J)H#!%H!9-0d!%$>*&qT)Ewowll`#^$N~UyQ+gaALO^@$1;-0^
z?ZY~rvXYWFU^Gj_A^Ep_Wvo&OR5ZLFKw~l4{oz51yMr&d%DBvebO;9U<k;9z5U%H>
zB(vCKWU?5pfAzQ!+nLt^81Sp@!v6A*lp{{v+p}X}6b3JW)1&L2%QeHsAaWHZ8wv6E
zK#dHX10@wfar#ZR&fZ?Dj%eoWYzC&2X?6$`Bsc#J#vnP#q)epuL`5e<$SNyeO?e#>
zQNGpYh|~Rw9TOe>=Tm}AfIHXR0ufL;`IvGQ-@G9cyL?JSm^sjU<Kn4(Dr6@!d9eLZ
zyr-k%^`GBqD6HPTr+-ph&{W>!M5DaycCo8tKmm%kXPo>;dST%gY05n2^Ldnprlw2F
z%Pt_b00Ox2%a=s>__8xx&vkT?m6M2ALcnr_&ZY(2Afn~x!bCa5<D=8*KpwUYJmGSa
zy8HwbF1p4A@7pt_UqNyR0v^lh=G)B7%nEVm+zzYHAfFd3ML;ltZVN%zJcnKPm4ec>
zC}!p9SAnSO-9>Ug8%!LFb<PB7sUj(LS`MM@O-RJl{IdFVkN}4w0t-p=95t895iu}&
z_RRI=%a?u17^J&KlFcp9UD7c!GBC{GOeXrt4D7FY1u6v#>qB+x>nrUQ6;-@EdUd{r
zqU1$%7@&~`USojoEh}xbroFq^w1;)u@_jz<Q9UQ!c4FoqnTEHKlYhQmnvr2>V-v^(
zTJx7W9%sCdgZ0r<RpX+fyry7B=`DOis!-66+U$HqcSDbwlauQ98c=HU12}Jj|M4v%
zpD6HPOYeFGC-e1dhQ5zy;Er$|1$}dut)mFefM%Id0OD98GWz{1Fd4|m2&#S(F@b5o
z!p$<B_3AfxW}lsDO^*cxH_NO!?k$IC6rLvX+72H((ZlfueV@c^z1@=h2fnNCktcPz
zSegamvv1z?$t8dIkSBFaF@w*a$6qM8lG7bC-FI-4aeaC^^5e(gz!Vc^PPn8XI=K2}
zbmttJR8iDG1{E%N(vHVtDza<t-cKfMD9^NGSODu*TiclZeFx|vh)IZu{OrRS9^p&A
zX0{B7FLT_`=`SfT?=w>%P=M6)wiP}0o8r2<lW_dr9?d;{<|hKz;_B}-6G6=U=L<bj
zaJ>!p^-=0}Lnz;7nvWk<=Z_z&fB2ylUT?_(&ha)xA^_gFv@-Umu~Gc;%R0;Az%_Zf
z(A>rdpIGx*e5X<N-rgZegk)Y<XS<4#u`x7i)ELui!<9PHTTJo-#-E#Yq*W>;%s?(i
z+F=KZH<?s$wtsLf&CgFzrzOX0kWn$uzLYuNqqS9<iAm1*QTK!<G_!TO9xv*ljn;4S
zHSGat)(2Y7y50Us6$A)gMxmXQRN?KXVP{tq4hhxKRcU{$q!i~nFmNB6BC9|&Na7CC
zUu3)e?IF|K6H9_d#(e+uG&C$x`22UlN(O>7-CBd&q0KqF-}|`vWv$+KCAd<=&XjEp
zEU>^`*3+{PE<m_a?z`+N|2xBRcB>(c)aj{JRU`)bnwltRxA*pR@Kvwy@$x#@ls(YM
z8`)01XF(l(jPE`d6ZiQEiPQ^BPPvy+gnqw)8jUp20L>0SZ);OcQ?hFF^Yh~B{t{wX
zmf4w^@=po!7aDVXqbpnwl3}8O8-z{!YYANaA|exqk5%~Gps^CUIJHGAL!{<Vc`DmV
zDs5oTg%G=?5jdTRo^Bd~z9Isbj*fGEwBm&7!l}EXqx!J!7S40Xv-=5rZ8igFHk~v_
z7vBALKG{zKi51MtxD_1`QQ7y7rnIfK73>N!Wc`zBoo##X5T$FsNHXS5FnRv0Go0o+
zA=@*EEh~&=cfYK%L%OQujS*?EZ4C*rhT%(sK!r+ft5-Iw&oEt@<UCrXS=62j`+9W^
zu@9*CKYm<=doyq2Ap}3h@2Wxu_S@s7oP&vzD+wh|SHKvvF_K<kq3Z~nOc9niT9uf}
zOqA+4DhKc<v^Mi(R;Oz6@34t~&;N+XNO9xF8Ys}(+1(`<u=@cN0=lRKupoS#Bp{Vr
zh7=))9P0IGS=Hs~XhV@G@uhO-A<|8*sX6&<+8eze>gKLR{_qWOZo;BQog@E?1#E9e
zAKu76W+18f6Q#5d{#IDxCm@8{{0wIR<l`bBoP&7d&wOtYI9VUC(T0vHH|kHSfgews
zj`FBOs=wXk;cvoxyaP%1yDbfxxHsuTqUE#hg`-Wz>!dID4y;0CDGcG#ztzHqs~eT?
zh*OJn;JPv~M`&}jHEX_fHSp@}il*~^^_KO}NV%myk%HB0Fu!-Yth`+1gkwV7JtjOH
z9JyHYbu=}lqZoXbywO&m4`5-rs)fmS+roQkX<MF8N|FGNf&%Vcu=>=QGQang4sVEU
zy#=A|uIPp9HT$h&<Dr>)e`jtemw+tuotqMQy-K_krr4QL3VTltD!C4^A^P;QbZq=w
z=6!b`N;Y=(o5)@aCq_+TJ)-oO<TkQ}r=>LuNA_IG%H7?(zn9vwzSENSJpYQUZj$OD
zp5f?CqocHpGAdaK*dc~E&%%)ph?Z6&cZzI4txn&-V0!TtV;s@AfHVSQ5Tz8AO%{2X
z;6%`D{!T<kQR$wTkiPs6Diq(<qyvz5r#~qZiumRKNjgekPB1R=ub<_;og}EcI{gB}
z-jMp=WC3^U^XDV5hj(^9>hj)0=}*ne3xLQO@C7gB>J4QR>%P?psy(nqw7GczcUYEc
zK-IrqagO@j_$AR^bZ8fH@f(#;mW{Cb+o{g7V`GDFZG9VjEaB=twW%Oxqkm~^e74<L
z2F`>_rjH+k<HoJMge@>4$ji$+ew>h;%u$gNAMdn0XsRN3y5ZsB-vOWCD}XJbx3_n8
zfK2u}x8?HFl3tTAG0|}N(%6#4b<HawA=oob<a=en2L2>ly{=nlLV``KM+I@2Mc^a?
zlx8m`!oC7j1Y9EcA&H6mf5muEw6(R7N?p?6)6@6Rf}<fH5I0jEU;KvxI|ql^y3mye
zZViXA@NqXo?&Fzp&pKG?d(zghn>~knVmV@KYpX3R<ws|yt-bx)ufi43YfzArySvqH
z^#h{~COQzBibD-2BZCa<Vx3xIpBo#itHD2p;abQ{1?<J3gU|9Bj7ZSlQ6o;+O&T25
zTmTUGxeB+InyM-eGY$@zyThgPce?+EqCOzn^@N0knydjM;DZL+<(Fn=;CZPeC|EN)
z8;!>p3QyM6^#RtMJ54-^otB`BQdI?cY21Bo?my!nzL*Y3Yo^1rWD+;p_MzH&hcI>w
zj8msYnV|(TBs?Y6H#Hr}QL+M80>neuVEa~6#e!{NelqTwo`U6YQIf_T&;-jWD8R*X
zk}9S|p!)|}V921@+1}pL2X(fgWkx#3+^kXO-1Eb4U~Q2S8ylK+ctYgPEV~NDyvffi
ztP||1k#8oi9@JY?Q<7YY+h$<;XfZPr)z#e%o(nhgh@tToX5rzPZS+B%<=Ok;?d{E&
zyvPp|!5?iY1A|CEzXceUxpdMVweVd}xXY;&5FVSH{Pt)&CQZU`cV!qWAS?As2!V-F
zCd~L2&HhuUf#5#`b{J^r=&Qd=uj@n-T7yjk?2>ub=jUCvXPJY=%we{KQON>SFaZnt
z42+DhY78aiEdygRS$SgHSy?C0_DP3PhU9=T&QDE_Ul@ik|3=J#a&=H)cW<xGzF;wg
zdV}T@xI$g)radFnHISDNOi2+n+1fVqB@g2I@eQDWRsmuX5`D|8_Hc3dMuKw0h#$U5
zjf#qjMyVk5dycJf3xib1=tnqI<|(z7QChrdLrGE)59vWM+RCHlGC)p&)3!}E&<5Ip
zp#idv4!)bZhedytl~v&v3K^!`@L}s#UAb(o$?s$bN=+>-=&8vdo}H3__%{j(0}BgU
zA3du=Xf<IORmXFvU=sWa!X!3y$sI=A_&))q4E)vgg9%Jl1O!m>*oaJ3)0pao?$UZ(
zXb^wP5D2ERodz#YyokI*HYTa;oR`$pX<z-k8R9y(csMxL0gCN6i~g#OU{jeK&^7>n
z_iNX+46m>TZw6Qvm=0vqbKo3x|N4dE%*nt&m~y3+di=%LH&YN)zczYPPV@=DIYcUI
zDLZ-<gmK~6VY1HPiVfN+|MblSmWr_3oBjv>OIum8TBp!g+_^&qhI{P1yaZ_~Nm9t`
zjg*?4dTyS@`s>|Xn(q%nH<CP+yEk7HL&HJ%T>|F+WYDYafQyYRLr+hb*_OXPQ?ov4
z_ap!6*khwk>5#x*XmS?d#_i7$8j9)9L(g$%tMy0jD-NObo2HqADQq?r4m;E3@d*iO
z2EOd@b+|)bac^%gk<<k_{uxbG72xq-wfCy?;&QV!e`a{%Ru;f_n8I(1!p>v4%n%|*
z!Anhjg{pJD`$HBYTY1*tIXxk9#VdBql`!?FUk&yvj{tw(igPVIHCE?kgkQBBdEJ|R
zd-KSj#pkgJ3-UAd2nN04cB7WGgp+|!FP1jit^6Ko<PsK!wd~!0gSg&y0ka+j`u#oa
zo}M1CYiyOppHmjV%NLP~pn+*@{Li1VvcPHj$Yc!_q;hQ85kHKW!`dCO;C6oGo|BzT
z&%p2nAY9vpC%LKy6w1dt`>!YRV?>vo{DWHJw5D<U{Hqs~*!{B;wTKNU`{NoKQe5U>
zn=re)JX-z|3n4ks-+!;Qx3?JlVxa8?l{fRmwTZ6+>t?2ZzH*tpd**za5KnA)CbguD
zkX&t!e*2bPy?eV0sSY+v%`{{eDpTt7MVb71JVu0&I-mjZ`4L=PKFc%vySu+ZFjwX$
z&<}5Bb6Z<lcrJes%q#^OSD6@T>7Z7j4LOIQMgcV565P*z>&1(44sCzPisdm2?$<`O
zhn!|f?2cZ}#i5k|+^0yBKe!Gc20AhswzQyNhbYUN`bc%(GYKJR_sC{qI)pO0B^e6m
z%pzm`Ckd2g0Zx<&P(W@=;1(FXO0Z-O2AJT>D=pm`8!MIcQ*Ugn+MaA8FCn4p`*$vZ
z>f9B?<FI&_!%gJtZC;^gW)^5O2XEi;frqO3b5w7|#IF`(Uoec-+0p?ANw<Sr6x<E5
zN56NNJDf@&PxTcpEFPoN{UK837<rYJ64Ypnp#_0hR9!iF`TQugzB9)C_3`0q`zvU6
z#M0lD3zmHZK4_TUv6oUCP>o`5eD>@aalS_)UC@J|7)kK~F3-?_3JZ|J!Y?#kyb|mb
zpnWjRg{7diHqGuIIq{V=k%f)z=Z?$b>8TqXLEm5cyLW49Y69iIIRtIoyejxV0k^Fa
zigTY&zk5&rL<E>=D6X~iYj17I{n;X;wy@{m2w|;lA3{OGVEGve^b{j<7{EAQQUiM&
zXJ_a539$Vm)fI{%z>*T^r=~_T%leM{VMtSMd_iZ~Nk%q@DcmfCM}wI!o17gr>7^4X
z2^ewp9~2mgY9iYr$-8;%BUgsXuU<#_n?r#p+Pxiq9QB(0nPvDB!0ROG5%o8b<(rn)
zeXwW;MP--Ag7mVd;ZB9x=<O}(o(;$f3}pC29IUK@TwHmFhabtMoDQwK$$ZJ65qK{i
z!J7MI%Et)#vm{-ZnV0}|+PK(BvBIwI_~<l{O#uK5;m~xWPcERQ@=Y-BK_2WzOOEp<
zwF&U70s`98JKPS&rvc}>Edh}M-$%-E-se+ZzeJ%UbbvpyzW9m?`>*a;SqG%tm%Ogd
zF&*h&5WP48GGcXKKo5W*VdVTYxyz*<IG3NK4tVVKFKYPq_xYx#7@<@7L<u#u)L|_f
z49s9ygm{}Yr4&j{3Q-8EfeeF;Uf~B)uux~`;=1kA{Ncd{)SH{PDoOZlO2DE@T)e;0
zC+KC58!2bnr{Q#;gXVw?^@AsZV8n9tyj&-IzPq>gVt3$XyfNV8aD&u9;vuZcC!A&o
zmWJ*Sae&#mGDn=B&rQJT9^vm5>kO_6Zglb8zpqtpVmQ+pDxU>3p>pm7;Ga#TrLAR>
zK;3Ep15hCsCmwL|I9VQAneTE|TUm?#I@+%Q@GO#yW4{vW=chGUuXK2HBoAStcwocg
z7ry|GYNdv+7JBqG3%qlH40Aja7P3*hL&}l>Y^Lw=SfZyecTd4sc|)B<1NE}Q?TC%a
z@DHr+FM9DvPw$bP9UE@waTZLyA#HIwE)LE9V(|5Wc(rUk7*ILMMv@1wy){VL;9EXg
zAozjctOs)bZUEDkTuwZ+SSChBz}g`GZZnum1K1`&@E9}Kub*v<yT0>h>ZT;H=VfIj
zvv1g%k%2BY<8=UffFw&GhwkGByQNV`p>o+@b@}@(0wnr*A7a)UkYLK2p!f&&%U|ca
zg&|%mEIJx76l@9)pro?WeZ4Bra`Xm(b!msj;aP=Wj5=dq=;%;Bi^^6UkL5UH7pY%#
z>Fj!ZlrGf(POZ?&-o8qZf)ZO)Aumo~eV==l_?y|STa{9(Qi38P-8a?g|NB6E6UlIs
zf)w!3PmU@cWs(SeZP>+Sd665*Yq=cQP&t`wY-yR5e8+j|U~*V=r|X8*hKVLddcN;t
zV?#swaRN3To<+!$T7C)($Jw<tAJ6D$9()w8zkl^MR>n>NVI5qT?5lW>liNdMtRHg^
zg@E7D@qwvM^f@@+hVJ(@4i!B3Y4Plt|F8biKM<^-_ibR{49-rCBNg-)9|i0&6~t69
zpX0E8OinJfnoP4Pba?cr^X*ykw<|U#78YQR4m%<rlL!PjT?P;@&CJB4=$4odzr8D=
zf_CecU@aZni?h(&<q~mO<Z(rOf%Wh4u?w>GH1BH^6gu^;{ybD+ek-${fc4xFmePO+
z@7<0C^aWzYo+~TsK_-%d1zzbg>`ve?9nZz7%Y=S>H1*^xvcMeA^opF)i)@J^K}QbU
zPIV?5E<-;|8hXC5OgY0n{*SU6^bQWo%g2lLlRxYg6Cb`bAyoA0V4TQsIm4Nd<bSGF
zp1QEIf=BTJ(ThkrT=oJZ%!31~h>suN2NtAiz9SGv9`1B*K;mh~{%$PxiMk3v7<{Z<
z2<+CCP*A=ISWmNY_rro8&Z=ghZT!S!gR#-<-1(WBipPMNTAH%kPIo#CUtMI_e<9S#
z@nGG3uRt?yO)i{$xNr<C>d!JWjRXa?^1PpYoUf(lRa@qHM$)~cpnYq+pb#@Xoym-J
zVQ$Wl`oYrx`D~Zk$0mV~wXz<3qdw!pzMKnVu4akex^*&Au8RnJUhmeuG_a8Q$lm}6
z0*vQqXlP&nX9JGvICLobZeZ;M?j5HyVMw=w<)^wyiwaSF|HT5BlMM5Gj{)2{{!?Y8
zpbr+yNybG$-hK{%UPMHkvOa5}&@+<c<aHI5rxCw0nf!U#L_*ewq(fBPITp`O`c!kW
zlam!U{v7Rm?sq+)1m9SQR+d%5!;SpFYuolnRW&fxtnEMZZO5DA-6Jq*8T<XL-~v1`
zh;giMR}_Exw90RL?uG52{@l!r^n7p_8yt{no+~DBbI{S*o*i3iTBbMqu_Q#lS2hxK
z-u@(F{{E}aBd4`d#cuP>k4a>0&CO7O_nv<u@Zu{y2Mdn2EQO~)iLhJOzU?^tvkr0{
z0ku3mJuQC;9Q5?}USomjjV5FWUf61|#yHCcgVX%tAT$0<#BBft4p#Z!y=Uytn4gAK
zVDQhNUc!|8)cj_&e+7ag_Z9SDawF1(_U0bmbr6tHQW6e1ca{)3y*AoSJX!QYFO2d9
zPmZJr;8$Cd?v=mW+6vrHsP~-U;5|NSA%a5${y0RWq?yj^#-_?qlB(j&N;~9(U|se}
z`>1Wqs`qR`RF^R39iOh7^{D4{nJ=%$*QTcUTy}o~WxR+No;{_|p`05gGjkraH@Tr-
zES9_?An&AC=)OKwxWj1W*=9djJDz1OrMz`H?TEQJX}CBc-5Y`dt=eVJ#nkQ5yA(ga
z6A0xNuv`2FE-|S2+##D1@2Sngad9KZ$64*IG)_^UDl4ZdGxZP5#aIOTvp}Q+bgYnz
z`v)jnDyBpoi_H`Xxh6w{I&9qpR4GQe6jT_<Y2(B+iAa+HzgziMd1d9$&YB^tBHTwB
zJT^ipBr0@NnQUMeC^?sUoKrus(Hw9e4t1j70fkD>khB!O)ZjE{``mLtAeJYL2bERW
zwrnL3-w&q;p5lHHAc|`xn3y&5LgG4~{+$4ILd*^o4!k+WsDuuq;~ruP3fC!d{OKr-
zDpl1Z@IDahg1vx*aqn=Y^W(>V&d;WD2V)*)tq*DFQsqkR_>w2eEA(+EJXR(saH9S+
zd%Hu@SJlyDlm?DHOPqSaFMuB&!!7Ro7;zOVEE~)pAoS~7zIr>VeWBI~m{cn(*J-Rj
zf;KKbsqhgqzi7j|gm5$R{#4jf0Y;LQRrOto5ji5{tDhhB#z_*a^k-c^zrjm9hwAO`
z!Osu*ys-e-Bqg!Gjny;uH6!O!$l~T?l!=IrHnX%e*4J<CjzmI2vP#D&;^Yo5jpt?;
z7HYooaBResNvhx4>g{^$D{5{I(bjf|5?Hjv-@YucyJ^GB4yu;-I5{UrMgmO3%@{2b
zev52<xcNmrx$80V7S6<~yGE1G0Y5&&Q0iEbHvb7Gro(Ry=j&?78;{mKngUgQPRu7J
zhThx@aiY)K@+FWxR!SWCXX)Ha1gJ3`ZeSBDh9J_@Y9Z`=^zUZRE(?15u!Mt&DK}j!
z37drci@HTAx;OI2NgA_ch%-^B&-77`^MT7U2RFAWwmQ8<!Sb5MKlp2DHy<1A`qB9b
z)#le%ePQo&1GzBZii=2-lxaKP9ViBW4ZzAYNOxd82xn60)z2v6iOP+8`IICi3Fqha
z@YTd+gVRSwVIhRgxMwYS9Gg0S;46f+{+s2&5r6+qb}biZ3cfxqeqHD4IIR5>k{hAM
z;1I?AU0l59v>63osKQJ}dJ#aZ=mmYXRWCOtgx%af7~V}3uw|HTA<B^(Se<aEW@dJt
zZtlB%TMqiH)^ENTV*s)xyS~nMq380ftQ`Ik;RUymg6-P4>*DFr52(bjGlL6wWQ3s5
zO;fWK_Mau(u<d@fAmZ+_nXI!HuTvMS@yyI@d3mTIZhv{Bq4@ia%N<HCp{=9ieO_Lv
zH<8I;84cPUwk+Nog^-j1Ml!}7(WU(Sfp8fle<)}^Bo|Vd&DZ+T(Gl6YFh37k!4pWW
z$72Xa$9!E-6%7ZL>g}`9vaF5O5l)9i?Dt&(;Q?F70{g{+_u80kucEcJX_?a&+Fj{9
zW}X6mR|khs<#FmO_hG=b`u0x5>(;@rc02TDkl^Ju)kqH$LjPfgjMDzfuz72++_Omt
z>z02}adEt2CS+hBDf!sz0c-Ag{%EL#<JzdOVJjr$mKN9Xktyjq&&|Q;vXoU^e|$Xd
zIH^@;v<2I_OVm|`9hy0}b?qBwF2o`p=d>(Vu;z3<+@x8y@pljtv%ELa**SA@zG2>+
z1KTvaO7M@l0U<ht5ljP9%2nWKm&*mQ8h*ZC$}1{xq)OM6bDpfhA}c_j4PU(;V%C9H
zCVoI0K9|V5gPlK+&GQsDrU_zyV4(=UKj2mDG2fMw<zhIHU1U4&=5n(CLRZ&nkQhp4
zFxR2$$=Y++jl5qj&d2bEy>d`M06#dkT%&pW860Cs>9)LXyfyg#!+A%fPZWbCrUM{E
zLMkg$Q_%L<LWl(V$)VF7<k6v(kf4@y6DKzR^ZR!DJvO!*bT}X1_^&JsiziAmL^-><
z3OiwE2x8MdCRFnJJ3s%v_5ex+4H`5W;&RHQ!0C9r&_gj8b#zh*o~@sm6rvcyo}j^4
z##Rk^6vX~vO3hdKCLjj_@*Ss{7^JD;V>Q7G1)^HbNAGlDDVxlx*`R(@coXO5Rwa-J
z!Qalv#6%Bipvu|62Exr3Rik1htAlw8TU)?Ony9qu?c{9GR#t{3vcu&v$mkVhx5=6V
zryVwE<FF(H>rKYMo_+)^TSDTwvt&q_pPgAQp|Icsr@5E}h@+}~Lu0noKdGE_GB%k_
z*N~Q&J~Aarn1+~NZt$OGJ#unWp@Z+ewKa@`c4e}`F^ZuF^tOv~cl+@ed%#M{95$x8
zwAIyoI0z;6wz~OJ96Ag@?oK~g)qh7iFikDhxmI>}b?sU;gO6K(R#5+&XV2Qiypo}!
z(4of_Tux`{flEJWW<fD%V!}Q66L{fLeWtM-kg}5d*V**}UVha5jma>unJ#A%2<oQg
z;(9J@1(={nkTMfK@OQQt<6d@uIG6)jB0vFe935*MIZ1uQOcSBe0Y$1pkgS{>D-%=r
za!7kSJ*T)i{Zwm+7HTExN8+$+)T42&tTADcFQ0@qc6Q=<yh0uy0HP_m48l`g^792^
z0)m49)*;%2DXt1Ais{HT>Det0;%@_BPG<f@&BP1n65UiyVdTGl@%5L$KH4P_G7=mY
zf94r0TsZHX7g7Qaf8N1bu32HWHZw3yb#chJ&tWRWfMgcH1kyAzV%+F0mtVJjAtaOt
zp_1}-Y59{sAO?1P{6mE~5p;w>za8lT=~Zd+Ud5+Mc{ANia#z9>9aC9CVhjKedKwy)
zv>#x?Muo|o)nfweBnbTS)YLV}b_21JzmD-2kEQ-0a2;R$?nO-gW?Cf=G5Q<-MJ@OZ
zE`rH#_%y5nU_Y1l^h(f=_V$swlPiSQ=Wa%Jb`}BMW<^G@M}wFkxUKnVQ_S3cCi0T0
zs;ZVsA{ZuJttfrV%gSIyh9yqT@I+CuDa8(h1_hiqlcJ+P8OATC=jUVR3x<8q)<`hj
zb=;Xp2FO4{@E|hB1RD%JLy5V_gW`Eix8YOhx>`DDX#6@oN|{<n0K7`?7{<XHjo^{q
zl`ITle)UjPa2b;CFL(hvllsB_(m>nfBmkf$&HgIjC46zz+rX*)b#v6bc;;yotfDW^
zvzZ=1;W+!)A4e<hAi~HWyl#fDn)=giS8_SXClNaMgTK^+K_Tc1v73%_9T(uHyti`T
zEs~>+a^q0H2$Tp{Td>F}MfVV*gNu?X#@sw~67_CJq>{WmU~~5qpf7{k^6~+H9IpuR
zgAJ@U79XFRbkecE%UtMHw&0pe5OI$L{T|cuhG8>|?4lQ^HMO-u5GVp%8h!x*z0-KE
zCO(VbUmVs<&@<*Jg#(Mm#Cf?{mgVC(^h3x5WBAx|G0nUuDeY>5b?=mn!<2(WlL9-s
zyDfipY3)S!fhVbm)0^SJK?DNT%mqj+FTQRzEOUVmDQpK<$7?D}GXQ}Hk<AWxX1VQ;
zoC5z8ol@wo(5W(*Ycfa#V5O~tk$*0$rk0^2X@$iIC$XsQ{7%E!7Z!oz`nozulFk7z
zumTFcTJ~ee;+p{%b!jOn&F2JX9Pd?W(0p-l7H$r`?(4G#T2^aoYjv^b6It1!E?;)a
z4eI{~#jK<OGTUdUF1Q_!`rpVf<Ui-FAX2bxX=98rZ@XBltZ@3sWBU1*(-7J$u-FNy
z!bbI~CWuVLPN6?#7a?NtR1F`vTZiMm%o>l*POWNI5iC#LO2=dtDpL-;pIi*HFTu=1
zSv~!}D>wcZb~ZyQemb$)$*BN)`K^`W&X$=c#w;IE6b4}R>_(fu7^%xhMV0dP>qB$}
z#thn9@>B!xOgDj3q`oAn_L!l2?6avFY{xUj&|O`L?A2KSqW2F^2oHbvK8<Gt)@>?!
zlHRfHMwbl%X)wTJt_SJ8NkQ?vD?Zc3)2X#iq|vQGHjQl1z0ubrgfQMCp5Px>SXk+b
zcmA+ZRaYw*nZ`5EuJ8BF>&e@GbU5@>mkKz=XUFzTw}IYAWC+nUA^s35oeNtq`2$8C
z)b2CIq{yrf_5u$d${GqdtiBVq=dbCySD5_51vJU{TZ=YYm)ps76r+ptO#rTdZ#>wP
zkw={`lh21;q;qysvr!MN1*7<oL{UM(owwh@k8etmHY+f7hfs+=LBMBAXMLUGx?V-d
z9{75eHtuEG>5J(wR(cSGRJk5-{L(!hq2uQt`St79-wH)!&CH)`4JKjmU(U#9-vBp7
zU}4fPbN>Y!^3Ao%FpkrvAD|~c*tp2dl^1rgJJ{Mv;F=kM!meHCV!1q+1ABFZBabG7
zx4QQ?=wOau$p%aekLiF3!&Zd88$I$TK=-Roh6>9)JNzriv<?xn^1$CCBjA6o!VrZ)
zeDB`fySo6DuxhZyx%3RlKvw~@(ml9A_4O%E_FVf11`NNyFaEbXR;g2_s0+>q?ZEuP
zf<lh9M!7`{{M#TjIXOA5`}d=cNwY@7>Vk23$ybe|bBhYJ>Vj3zzUfHws>^U@m;ue4
zfVWvy3K5-=k@0VnoUi*^itTcVssnb1)_cnsDtDM-IzD}}=;q3G&d$oZlWvp$>)&Lm
zLJ^aa0>YcoQp2EXvhHqm2F4uO8Fn@{`5Ie20)EhxXDg0TiQt0|GciwYZkY6^%jrnc
z?!MgDlK)}>4h}9ya|<1{_tWN&6-ar_X6NT=bEowGt({rMs%&wjfh|<I-?j<m-{Vj}
z&(6y1hLpK^0if<+zbJ(Wf)=$ao-51Ru<dB4VQsiL?y-pr%>3WJX#iyw3E}}S01A7>
zI$`GCaP5c0s;VOys=6%0Sg5FX>9f3jzu*zrPl-nt7FJYN#-)x*7C-W*LRa=Gsu|W+
z^=h<?fr%(zT(Wr%R<fC6Y6>Dpv%0x0G}t-~Z_R-NyuZJ1IfmlT;wzD~yNeEjUjUSh
z!07ZDz-A!bS{o`5`~^C-*1SAZ&2lgp>6@77>FiW9Kdp7%h<&brsIi`LKn%uo+-Qtq
z>~(VDF{b`x*)ehLjRhoSXCmek654O56#7{bXtCW#;sGSeP{QC;!<_B56&Id&?HZsA
zZpGSSrW|_Ri6LM=4_`f#KTvqe0YE7&-2x_z%qs)|t}C>VEZt7CKLR#4@qp(RZ?gJZ
zzo$p)Y$_+q7`#B2K<5jS0<0q!2Xg#=sbD0d+^l#}z59TT2R6AtWt8=5Z_kr;f7T2-
zs|lAC^+I0Bv!87_&RdV3(IO~ROeF=K8sMG>3T9(>w=uv1ObXLO{{dukrGZ%tu_Kba
zWvQvqioW{$t^SZ4Mt{JJgsi6*G048~^YcRqL)e$!A!MtzU7*YckAf~Tt6BqNV-l(q
z&^U<9J_e#K4E2JJn0N@hjzxs@=s7UOfE4*Ym*X3Zj2c1{F35?Lg_BOA2*IKf$7*?v
z+%x{ehXNEEOmbA2eb@aF<{wTr&cDF$zp}J6ncvn7tktoJR9@ocpPPm!qM$FHEf@5H
zVh}P<YX*CY8;V-#B4?o_g5j~-*7V$TC%mHf$_!Lh<#lvKt{JJSa-(2lT5s+guXrFQ
zftc_FW*Ilj@llWM*-|Ecj^|~#bWn0g$^U3DM0I~W;whugkIwanCQB*)p4sjq4M5I+
zs_iS4TTDK+_9UIaFL2-KjYqc$C}}*gXsEwYu~V-YFb5HynLz-i`*CJTiQbJTnHnlu
z!aPhWor~%;kk|#GO`pGf8EnXYjG%+=2bvh*7ssQ(llbutf+n{7Wz|mU2Rk716-b-=
zQA#2-A*K_5Y=K<bzgh3j2nLffA*Ap12N$6gQZbY8VHXi;@9Ps`%EiFcRQ6G0*~wf|
zF#@afH!!VS4kxIwEph%I2}wsWJs@_Mi62({kj>E#V9zoP7q(?Tekk0+#E;oi7MDbe
zDVqakYpF>8jTE=-ESG7Rrj&`JeN|i~Wt-k5B!Go3hq#mNo06T)SBc5VQ^36q<PdXv
z$G6bsd>s!}Jp{kX`bW6TZETe<&+lUu+B;aAz9$qC`jbhh>?z6i@t*$O30QSLef##R
zYVPNsqY@E}9MVBG%(TxZm>QIcy#pfNlo9HLriawrdq7a(nVb_$s`V^BD?2+QnbqHn
z%OdNy#>%cGk_nSb7>UWw!%6M^VDc3Ed2VXzH=r;_6ieNqGOe}S&YAu06%YFx5FDzz
zxXiR#E|E6CUx6#BH|4?-Mx9d{PB}af7(-yiFf0x+^3Z1#1T)3Zq&oWz#l&bjBB7~(
zBI6&iY^wd@1N=pm+-qs@V)A@)Hh+zO@MiEX#@N`!h)RBSjS6#Z+G0+OcSc6(s}_h3
z%FKb4$RT!Qlv-AfVj>Tr@prSC8C8$u^K*7kANjJds;1}ORBj6jG{t`_flpeU?59VP
zqO$9FT(meLeuJ;@sE2bG&096%o}gAlc=+n#t2P0eA@N)cAjFZ85Lg!UOS2+DA9TnI
zORq*vkI2aIa+y`&BpCnu9U`=4hJeUNR4S8XJNgA9JX95YN<o)F1wIMYaPxz`4Q!vd
z-44}=MFAtprAmHi?XdFe1u(jj`FBib1q%7Va0ar*_&&dLnF01=SC<j0Apq(R-42Ou
z#wRaCBm}f&IAYS7(c)o8p>loD>{dc~^L5ufYlLZ=8ftp_;#;z?34D~}gAMkm1o@f0
zhz|vWt26jJv|e*_b3?w5{CWAUYx+i9)8%Q*D62VUt3m{vhu<&^R>rBEI_a63h7N`<
z^S!<H{i#oJNZTL8Oi3F{jPq}9I3#dM{pNm7iQENxHF5U9#GTt{iXzU*8OF^@Pf4j5
z5*!S|2v%XK`H1(}q55cdsDRmw;gNd_Lfg}I8yMfjhh&g)aw?ss&3}0_6$wp17%`V@
zLHCQA{fjlL0Tp!Z61~2kY1cE=q@jlQ0UlCjT)?UA&yswG-Z@a72ko_ZDq@<oS<v|q
zyG;+cP{);!=$R6+GEsL6e2-&lkNc=INA=Wm#CX|$jDAw-{&jl~!`lgw^iVVUI?ke+
znr#-R4)zd}#mB?AAI;4_e*Nlr<})XT>@d)NyZ~Mi=SB!UK+oy^e%eHYguxk$SqdJu
z5MVFpa5&#B2y@j|<DCI)UKmHE<t5XwMBhLj%qhex*sT)7KFL=Uf9o?Tg1%iG56=+z
zT#c!S>yi&^Jw#i3i*L5hs24u>MPK5ycgmoL8Fo2PDJx>Vpb6$0w?$>NU)TXxoC&6o
z_%y&dZDuod&>+o#Auf)9zPh2objhewIiM^+Z^ET~TWi?19}pn-4-!WVUJDe$c`Jcn
zWa}Az{%r8i8Tqd8ky_Gi>&*}uW(;m@)sU#^lnD8ZHYB|)BF%nd!WpV??r_Y?F*8t3
zUnVEK`{s4%E%D0ZB38Ac#BpOC0(~Lbk~vgg+12fMX^VjcwAo`N`eY2PJisv_Y#0&7
zv{zODMj4S|s)QeQ-f#i{<6s1|`Xd4l&MahO4<<^vd#1;NUzElU$amh-%KN=qo|+0J
zpcJsvg9?)DalRD8dht!ImicZS(lNjp{TJ+*y0-VnY+;s*i_qIDg+)7s)vvBDbo%a`
z<Yh*)L<A+<rwM<r7X7rfI<rr*zfno*wC}&#kL!3O%ll;1mWA*pEHuW)Ur5pG5iv0_
z0X*<OS%@LJ^{j5y4=?2{YObX`Pu<*9s~jLQs6i@R0v#~wxR*$lZv>juYap;|#Ig4m
zE=26w-R+&eZ%~w(8J)j=9e3oadDc3*^z*yL%|*%zUc53Yh%<bupsXw(4J%=F3@z9a
z&P;zG7iqFzAZ>Z+Z#HkhD(w@^iLLRrO@-C*;NEi6>uj-n`e(Rsiqe-MclB<wtO^Z%
zHiINxx82?Er6DFMDfBENbo2SXg4ZC&r7%a+up_f#bPg>_9pftFbDitAV%xXVrG^K&
zEL%?Q%&9y?_MW^<wYRi{8DeVC?Hj(^L=bAKC6s6em0v=;k_gv(|FC!*UgiJ5y^<J+
zmSP&C9Bzcdrj5pBi*2dBCTVDH&80bLGlvO+C7+Rzz}ni{)6;7v;`!FH0CThg4L&w@
ze&~-r7xHJSSo^<EOKu#}*_%!KN=#=~4!MKP4Ie*hR|$1?bo7H^8^e9${};?WKg9&I
z3n4`MymKJ+rzrMxi6ASa7>Q1{WR-?$8R4qmZx+3OpX3~b32JHsD&IlEtjB<SXaY3%
z)u2~_BHWu2793a&vG&Ab_8}&i!3ua|v_9n(i+|Y-`j@3W*j)-U5oBGRo#60oK$<yv
zTZ`d~(y583WenqeJox>S-oWk+LV)$Y^%g_0^B{PB+!(_7;psK%Pcq(;`bA19;(DBS
zkR=gS)_1i^DK%G|4>V??b^R1bT%OR(>wT^RlwnXpLCe6)$47{K+V<XASyE$P3PGT_
zG&e_+`%3~7KWxR*ddVZyYUP{>BQY0Ks&^c(LU+VdS)CFAzCC4pvK3TcR4oen2|Mv*
zkS&NZv?LEKN3FM}jnQx1I1C}>ZH7ZILlF3fUCRNomJ0uGL->$XPF7a)>zl2v1SP}R
zTUZ8~pEseNe6FfW7#z$~d)d^a1U2ik`7n&;@^$_ISb(qwuWdreH;?r*+Ph^QViI=o
z#Gw!#rd@tx#E_{>y^l{7b^e`_LW7{W=Na&Mj2=NZ3=_*SxVnMThn(y~iRBn&n!pqI
zJroTLw!Lp>0GZF`{Imt&`a45Q_JH<7YRdXR&aLzrSUf@p5H(t5w**1FWD??|A}6c(
zLc%V)nJzd#LVye_C)fVotd4$4%DK1u%c5JKm}TH}iV5kB;5=5?HxT0E|1iq_Ppca1
z8IG*Es8XUg_yGDvM^=o-ib0_v8{<L1uwMVjZzVe<K8OMd9sEYJ9;RS)F93+GJ~ci4
z8ua4*KVa&C@w5u|3&i`|+madxs&W`2VT+lS^HM-?N4!wris$CXWqI)jH8NXDtQfyy
z(DX?>l?C!m<`S2&Eeig;Mt(UZ0uJbBu;K<*mZ#^{wXs`r!>Up;ZA|!Rd77xmwnJTj
zpI_YtxLlH?o11SWDwIh>0|M4Y%7b`<uM@z80|Ul#PHb!}taehX={V{ZH>BSalQH1V
zd4v|Tnkp|kcjQv%n|~cgE?2Hryk5KL5iE9gaRJo~G@|tn9XV8UIjHgTJJmBq85#Y~
z&s+<XKCzxR@q{Wt+$wKP{lIdjL>>Ydi)i`g+yqh-UEVGtE}DKlL<DoyT<%qHsop;M
zR-!NQ57eiKOG&XZG~|URc4|3NW(z_Q8X8Ms;SZY6o>AW*B_U9Mj&|n`&QbWm^fa!#
z#SOnU#ShgJ4O9d9>I$alX2Hu(VVFSmhAHNDzE{r#XLYi&fEQx098JFkoRLf+A@JX>
zWL*nNJM30)ewUS%%}nDK76!T8+S}d+SAy?OOGbU*kpnQRW3`eR+HF%90@DDwpw@@F
zyS%?9YTE=a7f_DYRxNH0iAgPlig4imO5<Td*P>~r1l6I2sZ&efoRc<~zGt+=$43`v
zA_1J}aZsiIV^k}W-8cCiNO0kLFz(EB-NorE#ENU++Z!{wo*(5rEjpcP!V+z9db!XF
zE1CXrA2D!$1I{q`iFnezoNb3Va^Ubkby)(NKv-&&-14qoQHl6jfAv=5+L$9)&#Uw1
zR#Au^hujs^;@IT_um;$YMPL$txj7s9Y|<@szE?cVeSZ!_Tl4cC6JZb`aXuH9qDI&r
z)!{2Xl+*<kGCi4r`r8I5_LR=-4mWe4Q%H%*P*%dKs_FoBckN~)kC=VzG3K7V=0bbI
zf3W~oY|`!MKA<?$?14-I#9iEif_NUF0|-@?`fihj>}+V$HGj0WYTn1lPebG;talh$
zSbX9=YYB=|xd#Sa*oZjx+nmP*TIe1aQ}AmuKKZx{AXM*%1FO@zll2DgDG0JKglrwf
z4=&YJ&Ry|a77%_eoh)GA(U#K!f)TYGk+t=SPr41~@sEW&VVAr7yVSPaq<hkJ;|#<s
zH=6nnW7*Gu)4*!_kc$h49nv3Fb6q@+*K2&B%MT3=X=+5qi<EX{-|Ngt=>fqu>o2qd
zaJHhj+-GD~!uX@(G({qYSVN!eT!a|Sh3=EtamS#JX<086bZ^i*f;U4m*1Z%D5#2Q9
zQ_xmTwZ%ZPj`uZpZS6m|sJfQMD#QHz+NN6+7?hH2wr8!o%FKqAhjm;b#_0R~mm<JK
ztnQ2}&gI+z{cB7o)et)XetqIko?!aMah%PCJeY9X8+r<R%I%X4^W?Y3Antksb_(J$
zYCr09-L~d{b=I4$_yQ;m4FI1Ax*r<_G*BW7Bo59HrMk`7?Yj?5zx8i(9;oCQea9|@
zR3}nknFAg<y##DX6#_)V@u1pu5Rze_&(6&uBO8~Nmf}HJv>_ob{`SH>CL*E_l2+e)
zNdTSPp3@kh8^Ft99f9XNR$*QVG9=h|(P78_!cSiU_`Eymqz{;xn-G`Q1Ft7IzYaji
z)8#q9QDHYZe3UDqhJU1(k5|7xYO!|+xZ=B9CZ%2zxT(R|=oG*RED8Z5GZwW5d{R;t
z3?PT$OtEutOmuXxKp@6koNnYgy4Rjqm!Q*T__`F(Na7RPA#Ld#qJ<#90QlLlM@L6l
zy!KnuQnklpRs}%TOMg8JK_r(Kfq$;U{Zn3VKP;-)9(*axj}JDYdPOh9NyB(@-+qb*
zguA2!)2iX@2`qn#b(D5DCUtkzVT)+`X#A;FTA;~ro$5!{Cp!*YAds@Jd@T&*P1vV0
zNIf4{1X6;Not>TX2i}#T)Ku!rx2J+Eblq-}FMOHGZAM^yO<!BR(sVdWnlRtw5N#@y
zVr-}h6|uZcO$o~#5xs9}vcUwbxB$BzOw_qTf+Xk>d6SbxMI{b)xf9UUfW-!`1md%m
zA3uJC(Ir>c-p;PpiA$ce-eIlU<rKt1U<$D{X2p6hSimSj(Z~CSVHCtC{s9Gg78mFn
zAR*!M5twn2Hv(;eDaIMrU1At0_1111S;pdwtP$bN`3Y+LF1ft5ELFbB3J@7`P5;rO
zZ;)6IE9-{C>B)?A+Rl%x0s=1Gi5Gb($Sjp=yL&>X{^jL6Py(T6_~hL2D&YM5ph5WJ
z^bRD{NJv?C#umapcsXvg(y9S8<@oo`&d%c4Pt=7e6@V&r46n$&Es!R?Fj0d5Gzg~v
z%_Tn!&8Fi5Z@`CXXTif^^Y1w(g#hYhml%^NL>-kdKg&dnN`~(?b2#DC>g<D?r@cCN
zc#oz$B3I|xtF65}z9E(5Q;6S{Qn_+RUHD6b`w3s5w{ed>ytKeyFSzJQ5uGg5dWx6=
zl_Zsp&cvi!xgI3%81sS8#4McM=#-So|5MhLheP?j?>2j~G$Tu8sO;I73JGJ3<)ayf
zWQnoUB2*$v7<)vP>@wMXlu#<6EZNs6Whpz8Y}q5fXU6xpT-R^@a9v#EojLD0?>WzN
zKlgn<-YfIav<}jR{LLIXmTC+pU2dxG;rSHt6^0WV<8g0*z7Y^`o$AB++{(%~#jJGP
zQGWw`1Z2K|fzjq@WM?uJ&k1umd(<BQ43Kk7O--@5a4%Sn@qu7LT*jAZXZ<M@)0f&>
zaz>&&w+AI}D3);U3Pu<B5l}Jo^z=j`?VX*Ay>`L__GfbXtCp2pz}Y1W0+7MM<+SsF
zfj2kn@WQHiVj&5Z6P?vMNM^0@wNU7;zIPI|!Cf_?J~)_n(-*v3=X5xa9h;hVa)izI
zPbKz$N+kUe|IOW@|5KT6+3ibi9h}gsqp@~=TzS9)J5gDg2ZA}LtnBF%dX$Vz!=QzO
zvoq1oj^K0eUcS4`Tl{)EMLA=B?oUb7Jv>U{%c|AJG40|OaZ*oTP>N^j`vs74tcY?Z
z0{1|7M}FOZXU#cPQ5^&`A2@;Cc1A_T2X?`f!|``2E`YYVSl-mZXk9i%@p_9ql`}#R
z#)ke7;ezFg5-u??tr_{#Q1M{iOpGnjM1X)~VhK`3ue=W|dA*dYURM~+Ok{o3T6P{}
z(qM%1v7upObMpbe+TSRpzn9Idp7wo47%KpwlJ^k&pu9~Pip+^%C+~|Ofw~A(7eH4@
zZi`o2{KB{Hm(cPK2*oBQucBCA$tQ=0hez)bS~(Zl<3@PU-EAJlT=XxS*;5R;s8bVK
zqT%8_<K(P^OEMTVT#~q{*QeJ2XPS>|Hll~Q@=;uq$mXdk5ejR8)MX<hBec40f^4fB
zML)mkFkU8VE{FG&V|btjk^Lh^%Qr&NL*(GK&8|TLL4uVzh`yFGZ66Pd2zISUhjQHr
zQJNkqTwEzS9C%z6szL2U0_I`DSr)}T`mO@^`iFlKoyy1_;jAxpuzFuC;&`RBe<B%k
z*n)FB3J<?7hIkJD1{*rrBS0d&Afo<NieQl5p5lDy5hGnrRp;3=X#6YUCo^(dx!@TU
znoUfm#=9+A$GDT|e<m~Ya~0aA5|zTg-AOXTpyExw)YreRt(fhFE-o*WdDy8`p1=Vl
zoH@pfYyw!l?ctLxb0>``QI~ei@0{N%5=#lrN56Gd)TJgV=oEmrASD2DZb8A!IUzag
zG+Wth<~oyz>o1q8PScJqg#+Gn8U@&}MiOa!^mc6_i|d2nY&9xPsc%4Rmxzr|UjAi|
zICVr%?>EerkI$pc#B{P5HaVtojUd>b8kGW%mVK!TjeC?W?7Ke;H<Y2(5&!{BJVJ{|
z%sM|&DSk;Z6Xf8d4Nc0PH-t}~Y?^R?0LbhOP!Ii{9EJi9G~lDk6ExIRx`a;~u5}3s
zVP3s5@gBZLo0hPXo5M+0(wTC`T;<9%hNe6m?Cn91-~y_A*z>^b0jLYWQt|Zgs55#8
zc(98Jnv28D4~!Y_Lc`Q1C@w>}ai&HVP1aE2+buPPR|nu!qKQ4kiaGN;0BKA^xeVM7
zmw=iNFMWN22x3DlUtBjTDIZ{RP>Dc$Gze2?fv9(PCg(BW8eXcOgOg*97xcI9>IJdW
z{EU5HFRq<d24dr6TXK-DHB`7__uJaoxPw~!Vu)!zp}C{uqY(*n_3G6&chD9<{l|B?
zTN^q;9rm`~gZj{ZpSB3eFm0zCYDTq3!0RIu93`N0I<=`=Vxox+LINKhVIf&jQL#o-
zp-wA(_mOiS$NEm%bN{DMl~lSvD?`c86iV2EbS%&?9vWfYAZ(#GbY6gy#u5C&_np5=
zOCyjtwx+QZHR{tQ4o%o=KNyP3ln-;p@u7J^_BFQpYd}1azEAoOl<B(=yy!CTXZLqM
zg6!UdWNbZXW~luXM7R(Irho?rRQqAmMCW92$ODb|l6>UHl{c!Yw9*Vb5?%@3El$ZC
zdK4+dFdRJ)$^zGY0DOi8?KR-7cwvNh8gGk-HlKvwJZ<eFjoeYavGlR~%gT_tIkIXs
zd*V)8RkwY8(+pk#;$FE<Zcgm&Ep`r8ej9zg1)bOvtt!ioicU@oQK?{)mXcy-mZImW
zNhJ^p3aTcsgS$l#cV=8%YO*LeJ(YufW3xU$or#i`J<yH5yj&hn*Y$5jg%a1|QmfQu
zbMvCcp9a2dBv$7C#{^`hO%gBxO$ayp(-Vw)>GC7>Z13GO2NdH_CAfNifkt>>_PaeV
zjhA%dqKQ#Iw=fDKuZ8yWzWB$c6+OahE~><~`^}sgYB||*bH1S{(j6TJLPGvrNND5+
zb_=49TeT9@$4n1!om@8Ul(iyz9|T;Z6G~c;qS8~>N!aq@;|r$Wh_}Ex%^`QNyW7BH
zJecJOE=I?|;Irj%AN(l^iGSDiK>FuD5`1JK-}a7tw3fBHY1(JKHWDE%C@9?`BWG@r
zcB!yiB7frX#$Gt0y?w!DzWOH6_N}k4$9t7dvxotg!)Q@|dVXH*)-;X;?mgBVrtDme
zN!s?cu$4glt%8d>7_#g(5996SQ*o)Ojzr=!g$WRM0woB+9Nfibll3{Nt*s3xUb6cI
zxB}>iZsdO5QY^NCXbytcH+yL*R6@ZlGmM1@9n3+)rE1LY2!2JHw||Fk$(mEO29Rfj
zF$+*gDPt4vUe~T&OAcU<d@m2<VUAyqXB-fFWqN~~ws!2j5sbGjR7G^(OevQhb@ALh
zps_v@%FoUc%LI|U)(V!u*p0n$<Jp`S2!R=m5)}iYzvVs&VHhY}?(^7BTjM?dJip4Q
zcNCKbZNom*tQ|ry1ykzrD-9&W;F7irVbuF*5niNDAX5ghcc(PTDfThGG0L)d*3m1#
zQ4RSv8M!Yj1No}wQC0>{AnmM&5Pk2lHn4m^u?x=5d<~37TE_xGRY{Rdaa`DrhJRET
zqy6Jh$4ZrquN$D;fWl!g6He-HlW;0?*7V3)>dg};!Ga()Fp<re)H=C&6vRY+R7r*v
z@~tY*`i2yqrgAR)1|!48-rrX~#BKaqWtu{9fq{BSG5b1Q(HF7QG<C?6g-i6lb{hj?
z6Wm{;Dj{w#U~&Z`E+Ze-+wVArfUs_mq2l%H+imsiOw7X>tDi!Gnjie~h8eU@Q9nSG
z_5nEM=<GqH#_ejCucbNqLgKEd12gq_1XHH(>SbT=pnAdaB?(eF#|cabi4;OA2kx8f
z$Gp6}&h$Tv5y%=Q&G(I)OReB!bPs9=!e`E81B(iLsKh*;fn3E0tRmLtzaQznucM|j
zIVncRVJtQ48B$CepTmE~7cFv{o#GLE1)?k<T)TLZw_=#^$9<NXg=589)3_tC`ua&g
zP6T!g=r*rIk<g*-HAny;CxfnWK8p>GZ@(Dv=Nm@ztGPkTa3CAroNOzAy@i!W)((uA
zs@F&LhUA8;eW$9{hCy-o>Pd+1=5>saTzhl(T1Fb$PNaXnWR0ir)q9BIHr=Fz3ioLK
zI>R}(_TArV4S~IEnhj<1F02Lj1uu4{7O0_=?R1WoB!VCnaH8&`;d%M<0^M2ZU>K4W
z7ZkLg*^SzO5Cj9@77!y41VT=5<_K&d-n=Q|^1$*&?~}AWdsqlMXmtXpV(mboxAo_{
zmG|%V3h+LOascNT(8F14Yd01cWqy5O%i!`r&Ozl5^u=~`Xn`_o*2}QE&^onEr#X0r
zq-{Um0<At9+Zq^=3_>q^IMcQo)vhQhDq=o>wM-4T-z7m3|Kj=pN?2HU{5>@GBOW{-
z3Vm<kW*Ojq-FN+3TRVtdX$_BVE-iJ>X05F4{bd_Rt%v@!gt>~Gojtmh7MgDP_DNOk
zj;Q<pT{C7IH<Ysq;NUZ58W)7H_gI<U5mqk#8c5DTSuNNBr=5P|tkWQ*p{Gy#QWd7b
z++&lI;EH&uKo;Cagd4g+c5aY%MpQxJ*Y?`?+wSh5?WkCIbn9V#eEc|=FBe~_0)K}*
z!HXSmuRrCso9RLC;e+RO33LkDkl!FqbwO0j-1pCs3HLYh#~XCyGveY7BM>A-83%A7
zl6og?gwqU;VyNLwN=bnSmRYb+vVW}PJ8@pFx7h(Se1$w~He_b$+2|9x&?7bTE|?vg
zjtgG>$^6+ghAC(1N%S+_?lT%7e<4D;gOV<}4kXQ*oxh=@k6FM{e_tF_N>>|>Sgp@h
z?to#F@o(et3Rp7RE#gwoE&r(b+=0FgW@VXb{==U>efqpAbu1Y)2WH*{<+nj!dfscv
z?%)r%_xJY(@`}y)qu|I1p?Oakt2$fN`8oD$>dZBv`$F!?;OV%18aXB?1k7(Ayt6ep
z2{q|~Xy9!m=^V7T{tcOL&d|{Db~1JQ2OlqOblMK3NGcuj&y~*uV8M;q`jp05)Sdg!
zlcJ)c<#O<KNqJ6x-~bk>)hh?SqcLnRxyEM)Po6rZCC&tkL{Ex|+@s^@s^^#o9Q+aC
zN5G3wM;kNU<5^Xhb)%HoA9P>gfP#!mT~$*4zU*U-gM-$vfjqd7UuhP$G$j7~9T_Jw
zJ3EUGp01uckka1N^j@$8MXCbpAJ=c?i|_~zL3{y$i2Nm4HU5o-&WD;s<6(P>k4r8Z
zv9PknwoaJ&)}b+&QE0`9D-QRnGwKoi71iHnC(9$YJ~NZNbulcTV!cy)CB&EYUfS}X
z{45t1>Rd8V=Mp!6hO%VMN??46eKQSH1IBxR9D~;$f<BnOTY?t|)pTIRX53f;dgMrQ
zwaJdV@}HO(Yjpkk`rVlsc#6<ESItu-E#LmI-TqQDY<w|f>Bm&2e}Fp~c%tR9N2JbE
zwsO}knRz&LHjR7g>+5T4Eri53FNO&hu^ZFPUhc0cc}%pbJMI`0InxK`8OHnP8qi2w
zj&gLhCx?Vzb^bSS@}vsgVLP>`_TiyZB{G6{FV=<+XoUcbLO{0^%HPr6+6o~o*xXPC
z-(>#CiHTuvS4ft%Un;e)ImD-E1D;E!QSgw3FD<OBY^)BrmOL4$TRe}+&dvP`zd1WQ
z!>$ug?RdF8H&h8`7u(w}P%96L%{Iowq2;EyN%Qyb7jc@We#P}Xe^j^=g*baQf9C1k
z8@A4uKO8O$#{#f$=&uxl+y%MojVrw`Q;7cjNa{`IrrzZIkYn1F8m0j@m%t3626UkC
zO*S_+1e(HiHBUH+2@39m#mLI{`S!1G69ChKX?KCr@ZF-@KkuvFyW^aW;N|9i4G%(n
z*>^v45M-Qn>|h|L0lKyd{PmWJ%Vmx=t224OtKOx+Q^b%cS@qWX!<W5#_rkuu-mUH7
z*qM=&(fal423XVh0%#171G2ZIpp$^Ntg_B}JKs=OUcTJle^+JH|0$HhxZ=W>g)I-=
z_tmcACuY`W1XmS_{Z)>K(@z#fo0@H9gA>IbQZH9yYHMo)0|VpZmjN3r7wY2uPuP9#
z)-;r?fgp>(<H0~9|CIo1^(F;+wsQ^js(aU&Mgi^h9VsGh^F-HCtbxHDclSpb9jR;c
z8^6^m{db;CHbi;*-E1N`IFxd_T0O;yWOq21Kk-gZErPU(lb{T0jI-yyC4Aj5+;#ht
z&JPvqi4I~tp{B+^K!1EuE{9^Qj^2!0wVpLxe+-1oG5lst*ZoU9kHeH@W3z6;adqEi
z*lk(WzFZ$DpU_7G0K(P77gYjeeZ9~51vQIaV!>85xq`*?z-zY?E<pgkcKIOr1M>15
zoqq#bbGN@_1hfQ|;IDzl;~_%ysJLM%{<$wI+TxN8?*SvE`trIbgR^IXr0x4x0XtC(
znYa<#z_4ZOW$x7zV~xE#M@)v?vVTPD+o7oE`IAl0G-eY<1>sLe5A*PBK(}>MGc!SD
zkax9Axck}&kWsbSfRF$teWw>rEZr#=U02iJ*RMu(9|a;?0~ioN?V!RE%t=<fZT@au
zeA!`D+~e<=Z&L7qIqRDyYmdK5Ps!#fb#xAHCsddfyCbF80|hYHks?N@ahJl&G43<$
zy8FR|0h$E60wNo;{3tFCDYhZjGcRK}PUnH79)%yFXEjx~2UzAilVR|B`a5Bnu<T_#
zRdb$D=Awy0_z#Ij%%1_)bo<T`g+_uf?8XTns9Rp4SEEe70?F(mo)4TwC;0uhVjn*S
z&Er)Ehg^af2g@QMzvBh^P<*qU=_aJIi?;y&g~JS!jzdIxog3xfFOZO*ctAtpZ=)tb
z=j90h&Huf!V`H~Cdv317>$m6h#Iqey2wve>NL3H^)d1ED@_%sVu*n9@J2Fxah8GwV
zR0$1iy#n*CQQ0jYLXPmIf<V>$-o9Py&tHT)d9qOvZ|4*Y#eM@Pg}n8xFzk_E0#V~>
z;eA@HFS#4*JAV%?sW(gw4|g+&)|e)2t($xHJ!?z363jN8e1P}NwW59-x{3p|_m*-e
zoTZB{1hrXdnFka-gO4+OJtx$a7k6}fU~1$%GPGD8w87>QyEzd}*92epv_zYs(WjRm
zud+`6Hgt}ZCK%aE22zx$%%s+L-c-;eEDW6-fV1q1)0JdmYBo$SDG%4Xsy=<qsx!Cc
zrG<-AiM`Dqf@{&B8120+)RB$4#dfu{2txB(pmG6^sc}#?xnS~uVWvz2L+|0RnpN?q
z7iCH)%pn9<>!)xBz>23(PRkzXe-dmorRPim=|X<OME%%u&N;W<qi3a+E+wZF-d!(Q
zSp22RFX}hNl=c0z6)&=K#pgw={~=0}R{U{9GCM`wrwp*}U0CCz*neM4=lOsEs<%K+
z;869VDGs-=;C56(j)Bravd1V7omhFZKg$~RZ%y{PW458gW2jxj3%U*)VNUggKZVkL
z&!Xqz1(6mjzFrrrwUW6o(@~>iCkp&xsx2_PB_U>!v+P_o`*7O?-~Mgf7^%C(u~zpp
zlb(;+<lRF4^=;aajP=iokvQ9L*hV}=`2SMFsQ%;JToOC%S@is-7fxE5mYQ)S)Mw*g
zNZOr*0HUFivrnd~OX?9#8AgSo@=9IxpQp}|avizF&*wxtPytz}p`s!Tc#8F7aq)11
zO>%F~Bp=)*6#)$=d&!tloTsy;uljE!z$Ne^GvDnkc#xr`aqPKEAARer0jB8KknJtu
z3yBQ7mlM12o$u47*#eQomWVZ+*(j&@)-E^{w!G|!>ct=I&11l;UJW|8WS)Fm1D_$^
z^kf&=$Toj7uPGw>g45LOI&SUq)6L9<<_Fren`w7phi%WEogF1lYL~P<^wjuz|DL@~
Vmc;DZHz%oo($O+NKhv-d{4ZE9-L(J!

literal 0
HcmV?d00001

diff --git a/screenshot-05-after-insights-only.png b/screenshot-05-after-insights-only.png
new file mode 100644
index 0000000000000000000000000000000000000000..44e6ac243cf5c915a4e60d65c6582d407cd562cc
GIT binary patch
literal 105634
zcmd43g;$i(_CJh4ceiw>bjQ#Q(k<O0-5}j1jdXW|G)gES-6;*y-Ss=%`@R3dyI$6E
zty#m&!_0Zk+51!5aAid)WCQ{PC@3go8ENqkP*87cz&|^<*Wj7K4F)SHC^RS;aZxq*
zjDt*QcWhq5VAX3J2CNAFJ_M$tmmlWHwjN`|w&u2%ADi5xr|cI0KaVzQpK=R#e73Ee
z*wf^x+0zCFaK};M;Lw67Wim1{?Ck8`k_Dkb;K*dK^+n<S`;bxwA}alVk7ckBAmFzz
zFOkVpM#K2;V`+@wfVh`;f#<){Vg>!@3PEUJ#dAq1|NA(O5&@d*zn2T5RH21~|G!Iz
z|NrsQ<G81ian*2VxMXOVFx@}2{_Vp5-*+R;&CLxc85<u*cc6ebH(z3BLRgnWgK>|D
zBRxI(dZcM#l%`NHOl)jKcTo!epYJIBm5hg{cX4rXMVOS8H7s4ZBq-Y7zcW5QH!UqK
z%V6k^o_c;LO0GyE)EzyD%%7Z6Twtl{dM`L8w&lbDea3)KeGtY*1q}uU=I-uJM@I+Y
zzn=sHPnq%WU!kL;EOYas<Yb(X5SUZzO&LZ~-Pf;`qp$BT1_lNPU#DSa+RCh_;kU_0
z3Z1fru<}UXc#nJB>bZY2MhvF*{#SIqpw7Shx53IOUs8e1eCR8$(@X?5gHk#NFDa?W
z1Ek8Z>yufMfO^?f>^s4ki|qF%)DPE(i_epI?d|RF1l<2^Z&T;_=bMZ_+#({_VJeOP
zcRx(63JP{82P!2{tJj$(*BmM%%f_MhBX7bx!rX4GtzD|>lDsC>`Y<x2WvUYumMvrE
zEKyT+@_zQT7ON8{B7SUE@2yP_UW?u0)u-jwY+=974}}PJ3k@FEN6SNL^)M(zl)k*I
zDkuaTTD=hoG)hUdDvq;N%K_peyx0LRyO2_aY*_p0>D9~(-R0$mLwAfgGWg4H+EC8u
z5j-f^F@L6}kuRj-sIE((?GeHSn&#4-heBZQv_$YD8k%yozxHvCbKCztm@aoq=dk+p
zx4rh$@<P{h*8RWnK(IPh`fZ<1*Zq2{sq|Z&;~2hi+oMyyOXafjtkiKC$>eAG&ndvb
zCL<#QcV{3$7ygVrPOhI}Q_J*KYTDYZRZ$;SB|OA(3QB2hpWa(AC^mMC9jk8;2A2-~
ztB`Jq$x)n6S|GB7o_3dSV0QM3-!qfKw;9R1e|vk(hEIlNYNZ+#T68|YqQAw_D0Nzl
zW;K3VrdBOtOk&V{yk2?cpzwHpdR+Y}hJfojl*|O%-R^z+;f{poGa76bpNsX~1%6D7
z#Q7EjtM$}BTDDe|{E*#=`IvWtzj}Hox}jLf$muCb<&teHbs9C?s3Z^^40!G?_hZ>R
zJ<ef1!9A9$7OPii@%r3Fsh4XA``kIF&V5?x)Gz&z6ot>uZ8dSQIgpUv#$~sFq@-s%
zoZh%SYM3*xgQiW;{Y9?Cpd%zuES^RwE8;EG6se<0Z`fK-C@N+UC6Ym>x6A4e|9-xb
zjXuZip?O%;cMt3D4nXO^ASem<@VHG)OPk2RCjRd_23;|mn+J(!TGfUtTZTiq<ytTz
z4U<8FQes)T(2I)lYP7>T&^%kam6dLw;ZnHyNSJqT{)IK%im4VMa<XB2zUO_8Cgf&f
zWE@OpD&I{bmx#ciiV)iqnby+LX>DooxjE_7Z$sJM-d0HG5c0n1k0TR9Mnd9qwv7Fe
zm6ZkF3RYO`@$ND{iQo00L^*e2x;&+_veL)L$6<9asXTWKY?25#Tt=-hY4S-*QBl!+
z$>@Xm`q=`R1dE~6cS0iBLO$G|mek7B27W~o67xCZ1z>6n>oi*P@nDUlbM8mtvcxSE
zDG+X8v7IC{>DtUzsTaxbc6eP+SL*s*A7yU+Nl8&5n`hE#pjYb`(yYpmo|~`VK_L-R
zuE}A0jW#p>x8r`ZKR(~%++4HTAW+1`(Gl!p<0-2#`Qq$szk2gwhXZhVr|ls!Uv9rB
zf_Bf#y;>8RznwmTQVeYo*3)Iwa>??&!XqOi<(k#w7o{Hx9iJX<dqRUkT3ip)i<DM6
zeJ~FA-7fd0M@E<@mRp=G<m4hxj5w;7XJ(qT>x&?S89WYkikYqMhkSf|S-eiNPP4Tp
zzuVl7PuF^2Z|fza2^PQGW4|;D`WvmA`+Hq&hxML+#>U16M@Q%c);PYVr0nc$dHoGq
zIhpB(pGi%#$GCBn+;%&CDs7TzDD~II8cHFY#S)xcSQg29t?<O7YU}A;|K@1>d*pt1
z3vi?-DK)gMw7FG(UW2T$@Edk|qp5uVwEV%QuR^=NLcd%MK`Q#L-2L<`g=CcNWD#ds
z3%mJ{_sz-p&p_B5vf#l%*zyJN%3`H#YSf2|-N{-Lsf&vX$rz$|ZhPN<1O2AqU49~e
zl9`fO3~O!Y&t@uhv1ye>oQ~ruq;h-FR<r$Z$`i&LZN78c8%&p~5(=?mC}!~F`rNyI
z-e9abi^ga79Lw>Cs5o@UCDL*_Zk8b8c1Gtoxwr(2?9Eg%EFCU1maF7%r@r6F!OQi(
zzb1)ew-~9n7{wzbG_s#88qPH#<g!(6{=7yzk#p^%(!aX8ibBk%*Y0k$J3%#uwC;9p
zQ6eh+Q^@BI+#8yxt|aw3(Lk7sz3Iu`Uh%`-!$Y6vC!gJsB!-lvBpgq1@23a+D?0^}
z#28K+jZjox?;E&-iHqI&dZ_^HpxNpby(Zf<=f%0X)p-;W^PLg>JsT1(+mbO1sn~Z(
z(VxLizPY=!0d=Y1c_5*ffYTaDwVjVLJpllTI7*~WTv5@VpgRSKqi$k5GO{6(v9m+|
zduN&RWsRNt?(6wduKo#mQpD)b2!7_Z9m*nc))NbsLRd?ZZ%&1$@gruhSI)M)t_qMq
zX=FArNjPaMD2|P-UMN;Aj+uBBh$R1(bzH#r;jJ)>VP`-TI~!Yj?&}2|S}{yNwXpr!
zYMMR_Tf~}@{(SP5O=amxkMr#xf}dAcS+6$+lNfFm+uT@gF&n+ZBw1Lh!50dSMYt0!
zF|CxxmQRF3jsJp!jt?dCbwZ`2?Az7V)pz?9jlu`&I%r&m>72bNL3N8Rf=mw5r%s>y
zpSC<^gQj-)AJ(OJCkn;MEgtWX)yvcnt6}`x+7?san}9y?in!_u>@uU<GwdzbCvWfQ
zw56`+FDWT*c%xve1*-(Y6Ac$T|BlH-51H?{|E;G03J{J?p50>8?qso)Opw`!N|>M9
z!`})CrlzMW)k=-;uMUl1asG3T>L9c>;V+Av#J9rnXp))ss(7S~`!p0oyQmN4F!l8X
zQczd+&4uDDL(7S5)keHt`}x=@JRH}f&}TFmPI+_!%gT*tD2;CJ;F?B+VABh@UgVe=
zv()tT?UBs=qvf_WHyI^7)M=qKHZz0`-?L4JzwNHG)rO&MkYL&L&@RtQ*~6KJQBXnO
z!or5r`Ww}FU4M$iVKQiQ&0IKu0a)Qnmv)`0%DwdU<2~xx_Ante27a^Eq`A>UE|Sxx
z^4;em850vz(*h5P<~VR8Nt@tC$tfPJ2tG>beE-y;JZ&b?o#VVa!HU`~O^damzRr#T
zF}ysOm$PH(7DFs|>Gbv>>p&smA$<f$h0AvCM7!QR!Vqpj{OVvH^H)KWnH>54yjGnl
zd`X?#@!y|54>t~|sH3bMlFLg=irGRG%N}Q&we|IwI^;@OOW+b;Duv7j6Vsn|Mh)X)
z%GAq`=4usQFz=aoeSnbN!UZmi!2<^#y?qHmIHiaw4g_6HkA7-w%71%9GCh`<?nxOV
zIT)>V8DK{Xcn3MM8jk`vPI*jgJo*R0AQCPT31$d$QYm3Z$4AQ}f!s`@fJ<j_<*>2n
zfe)7`C@6+qzDe}b(b?J0pwz1<$Y=63E}Zv-#u9uovsDT~!VfN!%PK6~%9ldr{0_=O
z7|+S9A%&4*28R_}l#8`eDMZ-!AwEheTPXZlv&@>!Ty4VjXeo^qUe%_B#V~_|;`!z@
zu(TAPzKE>}yvX|C&LR0<fl*(?77u_pCKxe=aD2+vkak)L<9w%`Dr?TUB8C0y;}r;{
zd@8H&#;;56PkO&q>D`#L>#(f#N{(XM%`loz7yBgesbLRKPx*~x`H%81q*Ak~WtO4P
zeI=JFb-Umpi50ZQKjw3PGV8ZKtoQwaE7pbtn0e-m6`&5%9sEV7RwC9iC?XIR7QVc+
zzWOosHrmKKpX6Zi{yH?15<W!PMaF80r@~`wejXp^#_Re>g69}fU>ZJ-S}$Y0J2=vQ
zr4xIQ$AD#t4PTP|<a}pzYb~xQTWysV6*ZPs#cKWN=-qrK)e9w=YqYrzg2(jn_V#O4
z$l#%KMNC>tKu#C{P(-5Q$IisS0A2fYCcm5cNJe4bEmLD;140px#~Ae#A|a8%Mp18{
zBA)Yo)pJ$H4dKN}E!?$2Y*gH+B9A!by9RRtHV&-Yh!C7AJc6$}1%spu+Xz=@Xz%P@
z{_4&8JnQ`)HT<{F5UG?nfHT3W`B~$9Y!z({r^KX;B=AnTCj|N9AM44Y%I&X5px28=
zGs$l$E!!boa!nB!wFP=8)0Wrry8|qAcUPcb6UgLZy-y((ljBRh{v|DKekhGyS$nDV
zGSnyM^IA6~Uz3o&6!hEi+1V5^<U%GD{rx0=utpTB!H0X(4B&vNp>9F?17T5RxgYG8
zTaoiI>(=kJT}wyXOn#%}P8}mYb09;g#0fdAn;o|hreqhtAOG9krNe-+R!D80A!~Qs
zif9-N0MKbD`}up3KDTaDg<P_?E)jI~xX=BS7`^GA<b3V=?LAhXyNh6@^KGWJzin<L
zOOCqr+rN?CFE-hYrgOGk2)mz*DXFSA+2Zf=c$`r>r!PET9WE+m(F*3}*2yN(<Ik@F
z1j4NRL&#!e37bJ<Fonf$Z;DI5%{8!Y0%<Z&f*~!-VdIyVhev*p`A}+$UJC*~n<>3U
zMQ<9r1qISl#r$&`11gD7UZ=rj&ftmovJI9}^FrmkAy#XZY?8IK((Z&AC{kJU>U-df
zhw>s~Rr9?X&F&JxM6Jqm+@h~Hr(5m@B_QW-Bq3~1j&nI`Xbbi=^dcz7YZ|aZo)?y>
z;^b70n$ZM}bGcyv&QO0)uGIa$UHpyjvplcI8CGXE3W~&77K5?k={nW(y}h=(pZ7+N
z3dK}J7y5D9`4Ydg6SEEq%EN_z2a0g*PqORQnNLC4j`mSE)`s1UqKFTV);lM>EtNKx
zcdv^54EQf^-Jnszbwpqcnl}Yas-*EOodPIUD*mShT)_$It5k}A=FHV=&n|cOQ{OpK
z5wwp~CXriiHxonHL441JlgpR;PKZw#(t6juL^{PojnfU_>PVKL&5tksS69Id>Sc-K
z5@#mAV|o@0str17O`h!$kf*T791(CBn|<zM05%6TRZMYXyv@yis-BR;a_YN1Nvh3E
z^$OH3kIAnKo{=i;at#IB8pRSH>)9%38CH{D@+FL^mT^d_tCG=oaxprL+I4RWx?5fL
zqoboiiw^z4I*vrZfwv7^a63^b2Y_iXO~An1$7v!y=iYp&*vg6ufP+zV5hhUmq<@2E
z^mFMgZ|GZ*xSW3)ReCL;EeI<F5`=Az=Su->1!|gaxke=#d|>aKp<2Df$Gs`KbZg}g
zo!%`f`H};^{d6A+!uXn+>=swy<G;Ee%$*_=a@EzaUSD0k6Y>s1Qm!=)hO<zI7aPx$
z(5%!s+~1GHc@-ujz&c^LY{=pF^q`@EKI#)8WwZK2G+hY%NKgB}fkh>n!!;+T%C&Y*
zWi@)8#c`|Jq`+l0aWR(rCKv%5V*!e0IFlcDFhIHJS^%bpxK82-vi(D<_3-czRB-C$
z8ugiSO%gB8$?zy9mAt9$V8po5wNb~tsZu)CqKLWIOnlD&SQAxqt>07`bhLWT0@^#i
zO}|`2h6wnsOez3gfO$#vq5_n`4Cp#2fB=_WfVL2noXX?S9Y+?}$OfC`3h!`7;C|UE
zbFU%USY~xch~+S*kU8i!?U|oGEj|?b_1}EaWNm|VlTH1}HLB-HzuPd(thGxeR~6eQ
zWzAmX=X{!v9UO!chLm4s*4)z+Svj=c3kva8@7U3`Gr4#(_07+=LZ8tO6aJE%GhUG^
z1GNNArDPW3b9;X;Dunz_!1CW1nUUnr$Mey3qn?oG`(wYj4*>0|vh+Z$eYaao?s_5!
z*5Ql_#lgYZ_!WJ))RGX!&WZtu>#xN{xu>9~r8+arij+So)n63Y#6pl*J#ruVI|jZ|
z1+t3S5xxR@N3-;UL;=D~E}-kjYimXyKSHthH&_Yp<u^4oQAnX2&)0Jo5IZwsRb-T@
zl?1^aM5FzH8t1Z}viup)RcQ5okHhk{hsV_cZ!eS$hNBiG5=JI<A`EwKT?^>MEZ$H8
zh0U>h*<*6cZEjsfkh>q|y7lG?a~NAnb9jKY`NLu#ey&kovlH@rg3Ln`aJvE8L{6|;
zur-*(?<`$Q1+)YS1PDh;$(Bu{wfdVk6#pRbePNOayT1bcLqe{Pg@3$#-1>uyi<|OJ
z&@=OeH!W2to4@Mt-5JRQ6~0(8Q)k4AQZ2G5>YbqZN@oW|P6V|5l0?gSn+A__`#}3x
zB3^pVROP!!uCFnns3g<XE7D~@^;#SObA+{$WJh}-Lj>pdwSMK%V7YlOoLP-%o$0`2
zp`4AmIe`!|?bl{E$oP=lRMrHISV+{3d>$`MHQhrH9UjdG-TT5~Wf#n_m@Jwgv@@xI
zZFdf2F|;QR%78xOCu@$k$A3Fu8;1dm1>ndpfK@6+ujFQpJ-YScaFJU@I0FbvBbjYk
zf?gqNxyE$3TnVd)D1zYxfaBz!A_tG=NkkfbcfY$hZTIj4$ZE7u4!5GRGT7QSINt=l
z!DYPw=$U{;^Lk#;?y({hOpyrtwzssTg(;DilRiA45;f_xaCAeV1;LqUbw-8J0j-R;
z-Xu^}*w0`i#6`bs_L_)Qo(b-;>G(?f!G5)o@UF#CNB-MKty;Y~Jcw9F(a^<86T{84
zO<-Li<BsC&pY%SbF}P!1#F|MuJFfap!68W$co(N@BB6!nvGK7lA^-$26-CX4@5oPz
z(+DN2pdhO!7q4`wjSfr0rjJQAM$?j*7IpBN#M=t&uPxHtU6X(|ItXCP>h06Xn#tbO
z4Ejj!@&5kK!2@<<>&;PJaBEJ&B(54m&oQKMX?|YY=@*1H2+$1(IRrBVm4t}s;r86(
zAo@i7c%@6}8<$<sWRG}!2xUw{LVaar^caRj1Xe-^8oSxx#mU;E<vVCjttMNKUCB16
zx4GMY;W4QPYZH@`HBy)}Sq$0}LqjKeJOBblxAqzU5P*od%SRxY=^oX*0}z>k>=*cZ
z(C)nJ*cY)<q`~K~egmF9aZC}`*Xzt1mM9Uzb1zx_@=27^k%iHB>yM`Rc%T;`o)f>+
zD|MplExIldiFqC0cD{vh23t*+O>Zj8P(E$^cB`u>eUm?b_HVprk7J{4I!{7wxAXHF
zk-T@j{_^<_%h}Gec}9h5@d)4sg>63fC=&<am}JjeV@ryed>eAqYEDBL0v-@WNMNi6
zAR&cc0Bo7=dZs6d1>{(x+CWS)m`JP9nkrp?>NphCL&Yos?N&j-<!M<S7i+?XrXS<g
zhKAna)8W0EH3l6p6CHlfoe0>2a^C|3DH=-XNy<RA(FYL!wqE2=QQhdCAQK^^wDcAT
z7Jm}MwF+0A!efhKV^hL-0Ti;FEIK?~{BF?h{x?T7U$s~fi|MY?_~WNf@bTf<RI*sd
z6NT(L87h+^UJm}Rp`UIo2KHy|kCs}(7w7`a2EG=W4q(jJTZCG@BDsJ?J<2T$|51{$
zsv0(05*WxPBB`SR1hl1Elj6x@B^-J+pqt%+yLPbBMM7W-1SIWz$;%`LzX{mG$9pBK
ziGuDO^?LJn`9nxNE;EG?<ZsGUZ4a&o@2e`EM^9J$=1TnYOoVq+i+Ma)aRN@{aQFiQ
zZm|*9+(@4VJdx!OFJx!=)PIa)R&f#%e7EvXedMx3<Z)%&8b-YHICodb*yc3<su0Id
z@TKFI;#ro^Z`<CF9nMxAJIqMPaMCWv)??ASpDOvGyS(ih9m9S7y<wowL@i*1{fxMp
z{b&#55-jj$tBe|jxYBU=*Uda-3S@tan9>pMnG{NkT0(wjkV(GZCB9QdLPqwpt_*n_
zVJpFjiD{Aw?fVnz9VICnRY<)}nP@KCwuqc~2~6-{0a_XX7JY(*X+p4MJWQU%R3--J
z4tE4ajjzRU86HyZo5O=M8BR+Ji_jEX4igb4s0#Hxi;a^tin6ZIX&IoHN#BGkeGE;s
zR;DdlAki2Gr>aMdc6qi+AJr+brKQD_x`Bwd4)9vT*7$=t<d0!!TFS)4#D({BwI&nv
zVRAg)H;a~n-kSvkSSu+X(aW&4r&Pb{Xr*po-aOJ*1q(}nGB}1pka8{77lC~`o%rd}
z6bfzc12Teo%EuQw#k*Lu`Y(X5JzS<?I5^|M0)NujX*&BrbNSxTuvBA|u>Cgx8Zig?
zMIVxslw?J9JzQ{^sYttFwOi?I1cDymF>G4fLuq3-kud-8*^BP)??Z2o@(a~DdG>WT
zwquC-oi_Vb3Z&x!s>l@ZuztL2TyAwC=J^bjUIR4kJl@}HEI%q$<hqvcYg@Rcd@YE4
z_zP3)$C%9g-&ez{BA2T->72&OEG7@QewtE9SlBu4OZOLhd}uEoV$0^3@jj4FU?%=*
zr;q#aQ1~1p2tyV5t-&T3>c&QSPH6R_<;zBK&1{3FW_|9PkMAy)Yp6DRs{b_H==d-6
zs?E)Z{+kc#yq>L9d}p0auO^(!XeT1w9!IS}&=NENU|vHb6uP|n`Svh?&{;)0c@l^e
zHk@#%AB;^*R9l_tcw7De`8hZEMDxgQu7<3^_@;$<nh$})dP?hDXG+k7L>Q&5ggUXz
zoMwW}OqNCeu5u?NC55Y)(R!gF9LuprJ?~W`;1oa-b#i;=noVr&Dv6AY^u!qh=j-9|
zI^aa}l~=xbiXuFLg2YmsAjD!+gSr45)6u1t`uNek@g&RiO7-$0QXsc<npj)Y7xP}6
zo}xSSOi#N2#T}rSq(^5WVq&1qzjxYpcG(gYY`XzC;mw;j<(kh;0nA9K0N8%`O;JpP
zB`arxe(F=_sc=$A_};i6At50=d>5eCP-NADgW+%7!4uK{47EK#LrhaHlZ>4{EC|nx
zV;RKq8S^Elq+DH+XkO;Oifap4=|J_o@oUV_;lG9i26)eYLh?N6F-)tuc!qDUGEE=N
z^V@RoUZqhoW9>0C8xLm@g_DmC_9;^KLce1Ol?5<9Uo_BjW=4m791TNZ%AQY2X%sAv
z#lTl>%fR)%o(RnLc?l$|@w^tSAb>!6QnrC!Jz?lHp{Ve2@IxDru?dXu^i1%wS=l&;
z;KZ0-4{!tRkavF}S1gnaZaTpO;>Kw`rQAyL^em^%^qTW$C|c7P>;BKx9_n>@0MQFb
zd#`WKwiwXT_Fe^9`f+k_V1dQ$f1%!F4M7>fUYC2Eb5mJTF+`>6<;l+F_sAX|beZ3x
zq7}%aq#lW5E20S-!{RBP7dpI9qvBq@dR1Z@c1&FKl}3p<HXyY(nO<G?v=|Mr^_cM5
zPW_{?<9+CVMbgZ~=7D$g5S2h>brgy(=6H_~qv9<@b!1_c?h-bI@9rvr>k=-0Mn!%3
zq*&|RL+NkM-HD2ks3=_%nRLx(tL){z5DEJVJeW$bYHf|!(WDUWPL-N)%ob&{8bR=~
z`y!tKJNzC7f4M(<yyBPB)%BdhV%P*cn#nj`r|te<rC=rH4xe_iC17CCOK=;^B6z;^
zT0W_b!eSDCJZIFbIsnZp$eI~H_kviE+3hDzM8`xXgQnsonI&zsZJcBT*6CTd#5*9Y
z%gRw_!P?l^G&Y#~sQ?;q`nyPB@XPl%uvc<2IB2VeK>G*GrW86i9ncA~Ay8zt$koRj
zZDuMe4Z93DDm}n)s!}VR0PH1!s-7MYKU@8z^9Z-2C2hrP<Y9aQg0d_Of!a5m{{;PN
zjc)58hK5pxD?d7+5_9`1>=WREyzeS(5+vE%MUA}r$r6$k6k46bc;qc<U*qx6rkO8v
z)El5sO=98W6O^4JvNQPt16T$&wK4>Sm>O3SNXX5BVr#56Ohf6Mx{4yN%QUNTGI{L(
zw%?8luWZ*6vF1E4wG7_zVp7XjXjWHwrs_G@)YX*%_M?~W^fMrMqTXtfIzBihQ;ZTC
z5huzxA|*BN-JRF{m7S)hW&>%NUqtGcUOCYlP~rjPEwRf=m-|`-&c9qTBa0z@5AONq
z!1=z#C6NCcv4Q|@RWY=B^&k5%9QJR!htpbjFfap>Se{K<<v7FvaPM1Q794s@RCB;-
zIredTNE-+Zv|2SkfbRu}3raNZ<KIkRnjHWbOb}D7^h_Nwm`In&X)^;#@^I>V;+4*|
z9;sE;o0GLS=Y~8M)L(QEg~_RLg6?2%4*wpvnTwSaYpxbDJi(&un@QU@UM(U-Q)e!C
zToBtT_x>zVjQ+9zeQD8|E1PxDcJ2qsfV8>UQccxPSZxi_-cJ3we&;Wn!J$Nt)p^qY
zX#pvU1Xv7t*}^QZZ$8Z#16XX-!sa<&*W7qy$?Mjt7=e`)DEZc)#r*N?C(Ad>#5ebF
z<0x??pf|;TGBjMFR!IMuc)d9=85b7^JjUzYNpNSnw*C_FI)Y=M(aPC|;(PNv-t+V4
zPasw$v3E{Y>3gmB!n?W-zUH(10pQM;FtWWZeA4U!3Ix$qAs^4iOuLB!x({0j)8fs@
z1RUT-{sP9@Xx8Ixcg32&Vls*rU9rM9=HGI9t<E0fd42CAV7ZiBW)#xc6t=&1cKQaw
zTyh3t)1BGfrBTTxTch}<3V6r@{l@F+063tY==K~|6I#qt9>A4)1KU}tDtk@}42XZE
zzdd`g;Dq6FSq;S+v_ZQ(UTR_YzA^jrRH>5hxzhPaL==&8>v*`p`F_t@v(1%h%0ob4
ziIC%l%ivAA(`eT6jihF|Mu&24_h^=&?)OiJEE<7axdxKRdm`ZjGEy6ml43Ua0I#;H
zEHO!#E+1G5gNS@D7gb+fg@pz;Zd#FJZ9l&OgC89(GznLg^7mJ8n1R!+TOsNUEseVm
zRJy*|5^_vCqX7g#T`GqJk}lSs&U?F@#*EG;5j|}#NXYtwvp4C*pHC8s2bwA#ll~}<
zL8QZGQaP;F!Qm}jzdKp$0bXyAY+(sBHY+>(VuMwn&XDPFx`LFH6qj-IJ3*Y#o#Ah8
zfa)Pj&cST;+v@8tkLN#kubgiDhFBm>bL4{W6!;fy9EMAVq1<#YP4hDj9SeoY!Q8l@
z*Og><j_F`ZbyyG3X+T+^N_fjzqLKPOPdc8YNotNhg-Ms0W@DTP7LWL(qg11E;cv&_
zSqQ(Y_qU2dNbnh*>XYHKQmQ&CF<$^GwxWOe4>tzYB6(2%QeeBQQW-Rv(d{Yal94Qy
zI(?)>M7}gwtatuqUI8%a!2@ivBArHpx;FEmhs#-MbU^m;iF}R9fM-*lQhjoEHntQT
zd%rhbuB>wVa9h9q+C2T|NudS_@M~Fzlkybg<-1v;;yG=Sfsl1m0>_^3>y7z&&-SK~
zYL(7dj$m|D1(ubB6G^u}G`4l7wD)=dYe)+9H}x{#uU`XP6>90X!ag%{DH?(~C}%9U
zSxmV?LJ-dSOoOHhx{-H%qssOqRAq*UOhG}G$nENYbgR`GLn|mLa9Y~fv^i{q2zZ>8
z_>7qsWnp7lBQKb5NSYaS0NX(!l~v{LyUi>!5RpDl0mbn{VZ;O`7aun_H@e-&vI$$3
zC|f>!PM%WFFZ@B1iFB&JqwpD~N$~{S<2+;P@cf6Y0O!A>NyjFe{umcDgZ-YeJy^BA
ztEAxL&ww`9!!K~SWd<BI^C*N|dH^)vVO#^9u9wEKRFbnf5QtuApt**zu`K+gr6h6f
zgP{FF;V_V@{i1!q%E|edWUajGuH6|W7fg`tJk(=*!a>5###KHcMW|2PQDX6Bc5<>_
z0oT_Pn^;wqIC{kR=5~KNCnq=#?J!{P2}p8Hw)3stw-G=Ek)0$lcs*ZdR<8Sfq{c|B
zkZ0WV>7i?Qm<iaVG&`RDSV8gxJfCZbKEu^#6=|gd&k>w<G@!d%ZT5HJuozJ0A=|0~
zbbwK|+nx81r3}V+pu5``)a1QgKH$TjZT;ak8{7nRI%2Nw^V$Q@y#N(6RIGb##OwDY
zpjQ+|2CA;enSfvyljW-oLPs9&n)SZO!{s)M?jU$j=;Ob?NkQdb`{DnF&t(s9B{E*)
z#fbkUxvbl0w>a|>Ah{i3N${5O$D%=%G)Ick<h+5+!9+tNg_HTp!^^w4un^|nGdg;F
zxajuk)e``SDJBDXP$A-PQQ+YR;>dg;x(QI8+mH9x=H}brw}|zohI#<yM8?P0dUo90
z{90aq1RuD62b9vFl&w>#`MRyGDK@LgBA>HOm50h-fG2Ez4@~~Oy82O#b)rb2611sB
zr3}(ZAzx?NOg<{1`1G`2Ls0?!Y)r188c2H^+1h4MNL^XNgp3V-rK*>Xn=3(E__eU0
z^8l$(3p4x!oQ-MroF<#uWNQ%8dU99hpPijWgoEQ?TmM=={@Np$C{lTvm7RhjLOv4u
zCA^hqHkOwr>?ewenE-14&ppI!uoth6SCn4XCO;nA8DLsNLt*Pw%Yb$^W#k`-6!xiU
zDrhfGqawW+9GT8GaAbgX9N?iGgBZ-F*I=1jSXc;v^I35qLTg%D`1kLz+ZB$KZ2y;w
z!GV~YyXTEGXo<Y!%yhN^Y6ci86lDlxS`w(Efk%bE7Q_v9?~{PC6xfLD+}tiMF1VW(
zq$zQl@yJ0Y=91D=X*h^HrARWZz1Ib7;H7Xf0YO1Qz>M_r^xUvN+tkp>h&@z#ZO#lw
zSVDk^$o>#*JC0~xL_I##klGEK2;Kk^X_dK6Hn%r7zE2O+Lqk)&y>nw@UsTNyrY}-o
zz48Y=sBSX9v{Ys)nc2K3%md_jbl_wrf^q&6i0g&Tr4LXS8F&jrkJ3W)2}24&;LRJs
zQtN`6aGga~c9VFk_W}QXB^sn5yrSZdq7M#^CkP3Bm=2?iRby+VckVo&6ceBLZz?M1
z|AKSkfBJR!og*s-5t9n#C_M_khL@K8FVXeCoLw*C9)ZAgPP&#{dO=3oY3`fp{{{0f
zx_WJbg-U-8O)=|*{(lwFv&;rNmxaY%)R)2E-(M+9;CF}ez4z_e<xm=8v63Mi9Nfjp
ziTCAR^cekURtMlv*e^E{*n+MPH~1D7xGy|8ZYARHzwvx%G8qhedqX)nr(E?<OU?E6
zEAb!{M#S%WH<T6$0$yosg<v~iI=s0w?<X`dp+JXiz>pzdU+=TAnf(N8UHx>9nVZ|~
z;rrY3=U})X0y={wqx0=duj_a8szpKI(}iJ!Kwq{H@9zFSA>O|YnkC>=!6P9JCeRd*
zVPs_)ynFW!<m<>$EU7S<0wC|buJUxhA9;9r?Tlvs9vWgyhqXS16e--_?`x(kwK$0r
zAFTc~A>{tVqFJRj^|M<59&AME^_TnJ@C$Ghkfk8N!qWQw=@JCW#9V-!<vN@`T*4C3
z3=(EDZ(w7>n{$(-G0;&^pg~!TW0?Ie`+T@~?d;<6JBE0nT$6^FIFo>rzR_xOXlhEl
z7iaFB#faXQZ_IuWS5SUSyl*EUUO%#cA7YKp-GC8}<8iv46d7qVnw1HIa*)Q?=yHK7
zZ;6{nJ(M5<)|ircE<+~F6#(QvcbAKxtWM^N$?YaEXkK0H+8GrDyf0ABeISpAx<%+H
zc*4iPcuh=&fqjM{FE1Z~?WFAG>ER((|1*lh4-(NU9sPinF+N@!M=C6KRRk8k@`WW!
zzy6{xDKjC_rY|{~(Q>oaLo+8h_4Q4G!nf_)^AvERTwPlVV#}0v*NFMA1U=3KXlZH1
zV03r=&Nf>DVPoePik9olX0HytNCez7s1^212P%}kvbYY9N3%0QpLf4Kb5T`Q4HCTp
zX!Cf{?JXHPxS9SJFIz1D`nga#UeEO_i0!1aThwM}3;Rmqg%fyuOlC|ol2`)%Bd{au
zEJn|s9)FwtnE~wm`Dhsy=!!KB4RQWt=s*K)bUR)X^g<EzyuhkM*iCHHs9HKX-Jl^M
z5!QodKA$e<=5;h>=io@hZMK>9$DksbrpXlY5o*x=6}8K$dUjcUUZEWcsA$L^O|Oyc
zXBG^KHsem;M-A6OLBA&iHX5hxs5+@C`ZuvU+S*k*ji+O|nAr4*$++q{A_l1i$&A|J
zT|n$<exOk@;NihSN_e+9{q!ic>hy2Sfs$XJkI?DdULPMM1-^Uy0ja|)pooKHh#T-d
zS>M0!^m_*8)gMr%jc_3uAleYH(;HsT$i(C@X~s;<?@EwX16~2-<!@<e1@dX+dtSub
z;X3W^yhnA_)g<d~j*cVWG(Ca@1O(96Ml$cgVmv-Qh61Wnau4Nqx7py^)1=Rjnj!3W
z3#^#t!2UEiig9uP5LX(kcEB<^B*(>lTvC`%U)|oW^}6;4XLel{K(nuGW{v{MXGWc_
zht#k2nm=DIwa5XrRDztMtyp*%c?o5+h7r1|>JtcxL{)fky;ECS0^5Jh=+`jd7)E7k
zbkq8h6mmc6Em)LGULGRhJjnpi8=V*RQoiAlUGb^J`P+T2g;a|!)};Q4l5>61lWGOT
zr46h*Z8QwBwYF}txC9Q{hoiIebFpX~&VHcw0SggjVyo+U#@*|l6qu6b6kq)PUlEm@
zAtaS8H9L5Lze~Vfg-FuOqSyTTnNgd~>`yYZ_2kM5i7**qKwu!qfuS2wri-M5?BMad
zQ_aVp-hlfD-9cpIroK`|u417zJU_MRET3XGTB~i5IS_JH6x!!>eO~h`;rOFpLe=GQ
z{?r}(hjsX;9#CZDq{T0xJv}|Gv#=I^fy}VHtg-?(JA0ewWzhmGIwW_XwJl*X#qU}F
zO*laA(c}^cxdxpM8z?RhV1fVEn)v-~Z`tY_jD$=RO&|(6R*(__^9e2?>&urf&riDd
zH>Z>9eZ=4+M3;a03JQy6=IOrha|Ij{T##SBq{|5={1@T%3QZ+mL{s|pL~HzFF*P>D
zC1|*=3T^h;N?l~@R}%z|FZ+d>fnJUF4La4NUO`v~eP);iQ=;8`9aXso6A;5_Ooaq$
z5oLFeyHY~lhH}{Hpu$2jY?oX4yQLfY6KF<ByMX7kSfnr+0DTU55J4Zv`28l38kMq6
zy__0Ny4hQ=&Ksq$M(XHiWpy=fpI|f}_vh7#!t!`8PHVNM`ad39gD$E6C=Rlamz$0I
z?pEXCKmaW#*ccR3At7N${&e^-My((v2$tD@fPiJqA6l}7wdKWYDmk2Ja;S#+A_acg
zL}f}GUp~Ht{3AF9*<8pi6C;*bVST;aH?Cojn6V832qX~2KS(5V;;#^pbZ|eKei19N
zUi`*=EKb$@p|I{oyZQ4geSLjAW>WK25ooOB?>(VPc@f_CR~<*o{CN0uFs-cd;?lrO
zj>Muv3XP9PpZZvDj%=DDXJWF!X~X67^w9T<`Z5x?8i@N7-|aP1rE1ERb6<lF1oCN?
zJ0o_clqKG=#QbVmSbjz{{(KTa<O^6#I&c%+zkh3@oB*D|btZ)Xk+z(p=XbHD8dm1w
zveKyj3ultU(U6zCa$Jba`#&uJD2uGWl%O_{s_xc$ic2P?+;4%G_`8Zs%u|lS;OW6N
z><ZZMAgjEF0n(oVZPdtJ((qByV-a(~B_K={)5WGptK<^YPbGcPWcO`Af9#iBazy|Y
zkYPL7L`<)B*wxYS+_}cWaum-?Rd)mg+T#>?YZ1CfQ){8FL^h$+$j^ZFzEDTP$msI)
z<cltuClOZ&EMCjwABQ5wpFgC!nrS2gQO0IQKJL1VV-xSaF}eI!KP)8$D=QqA7>{YP
zq>oa5KQd9+q|5${fzEl(MO<`^R-OulJf9I^ka~^W4p-ed`#TeXzk40y@*-F-tyh?d
z;-v=#1c1o|Ca5-XW#!LP=jz?!P;x4zANr<*K9le{KY;S`0baz-tUpfi2&948jRRp2
zDKOMdy(I<4FlsbpNYp+XIXk+#22YRo_JaJbXU!k|cK1g2Q}P<oaLd5EDn7{c3dhQ0
zl0hb`-%pZO=u3Cdk}l^RCIHbWr|=K|P$nA3?>0gqrATg?+Uhce#jJ-GfM$)uhJ^36
zKcf%esoK^Wz?;~nCn+o=Y^K2QKf%3{#}}5bUYq{t{3R@SRn2XegM;JWL}8_~uC{hE
zUA`8UQTW~6^cH9bpWB+7MbISC$sFOe3zC`R&<bU-^*cN<59B67h=#q0nHStx5qpwL
zxM;}V=?M|l-LD@lhtg{@N8ZyGnooH@+<+)E1^EJK$weBKW$8kIuYhp3z$cAxj2N`M
zy$eDD0vx8Y2F9DayLI!IR1z)09H)1Na7S^x{~IH|D((7+)>vAM1Zw20Q8%NvWK(p;
z<*LQ4p0pJmK0<iYCW&A03eSuGdkmEUD$Rpd-U!8tS3mC;dDNxVCs!@;`MBfn8~E%d
zYFUsq44tGoMMrV)e6^c^F$&5O(gtci=3eIK&Eao^NgwATfksGc3`srJOjrG5sn<u7
zN(&?-++QSF6RY|2Ryc#Qw47(D3Uv{-q9LGi!v>tp*W<o>mn9KFo6y+Y+B%S{J;%{g
zK3g|Q)PYa&8Ik<kC9JEymSMGi+t%SBGJi2q#_goG33~2!G)`GnjiW=rP#X3$F<3{K
zB~MdG>QG8bto;65?ex#U-#CmnsJr4bAPp}mh{Oi@+?J1m1|v{z<o&VHW-RCGbi;xa
z(Wn9(X!+B1lr!cW!Pl;{Aa=FRSTiEQ)o@&V&B6AWH0y*lEo#RwxsH`={7W7_Mz~7s
zzew}f#)%`@$>^Y^QHuVI#UxvJ6%xSjb|fYoRC*6`h^W&?W$FwC(zzE!f$b`~d9Po;
z{y3k|agY~_B<yUt!aAuYeF+UxBCjGb)m~LNMH5V;>rhEVY=Q$vA$fti@jRK%d=a}%
za7zEpTG`a!$WW)&SnzCbd)RAta&gc~2fze0c&xDe{Kw~PzN$Y0<Z?jyq*!t}S#_}d
z1_~`CpZrzLhC=p}o4D-l^N)^@#OVuvf0et)=0bK5{~1o_9J`pBeoQ9lXSdB3<`?w7
zx!4?Vs!_e%ourDG`?z8Kw>>xPO<bMXAQp>uUH{^Dl9LnAH_^UVm=6yEr~&+{?^B`f
z3+T2(saEK}(DuC|-l&Xy=2K8Ib#%vkZ`&>nb+BknBH*?6CO-}AFZP-L?5|s<-s1wc
z+@N0Mcz0SYRubzpVAM`tc%N<Fwm79IQ(+G(zt^3jJO2Avt2N)@75h1Qe0MqYjhI*$
zvdW)0GGgDnR#b+BrH}0ahth&=8zY&p;GC>f>DMFTRslVSv0K_0*}1y7m}aCzh#yNj
z)zc$L1kc^m^QSnq-ylju{IW3|Av=5hOUkY5xx{kZ-i9|vD0=Vd8@DjCo|4jaU!>;y
zMv)L$dc?co(NV*f*bf;m><|d)0mn|Ky*WRFQJlcvtjsLL28DPk3JpQrH7Rka?HVoC
z-?M1OGCv<*nC%&aK+(wdhye6$%us_VqL*gNWeiOP!pjE`=I&!QH0(Nww~Plo;{{`O
zBbh7l>JEYTtfBf?+S=;1xvJajtD%{=3$(YllSh$-TwnYSUj5NvWyg{7<mBMcCx+em
zh6YlkXa@q~CXJ&2XiZ0>gM#`WE>p|=Qc(Nt$qWb>m%V#u_U|mRcLg5FA6`R~)%MJZ
zY}VkI)rE37z{#4^WAKz<_BhuY^>9r+0A_)FPP~_?9LVcro+9{8g{4BPb_g7ys3;_`
z2xoiKi_2}O-B{E#f5Xyk=h;@;J#aCg>kzIa=L|q@HP)JT-QUV)u}Kh)-4cv+*#2$D
z?9PV-e<<nZ<C(KxXmIL}6QZX6wMKznOAg!<pgi4PuW+)a=Sn`^U48?Y7@Jv7SunwR
z^ELr}LBx#bL-MCC=UqO^Y(>f@t{~^nwC<bzbR;As;#F5bv%p{s)zHw0i8-0#b^dn)
zXh<mPv4tfb%^$)cJ+Q7I&n#CcYsSPh42Z4Y?HQ++ml>^22+}T#e(T-Et`p%mj%Ks_
zD`E{2Xfhz0z*u6yL1`^=Xxb#U1i{%%m!(rja~3QV%FP-Z#q==oJFFwAIkY-+v7(Y^
zg20wGDBTm`ZBZOxUZ=rsaa)>xqRIDhrq#tJ$7mgNXplM%WK&yl8<q~b5@7}hrCPoG
z7n&US*dWf4rWcNGN5ty0@%4P?`~BTC{-}qkzNCcwkyR>UsX+%hN|3YEt)q(zzw^Jh
zN01<=9knVwFki*g>;|{Hxrr2Nem!eRO&amhC@V-S<)!*;e$O!z4ZC`><3=hXnSoc7
zFCzXbB5KpUj5_C>oW+T!!PMZeCX$(bHGN;n!?!>YTvBwr;6h4D3Y9eCxFwr+RF#YX
z)IERvSDc!7Xr!SCSp9^<e8%Az5@6J%>*G&90HlNHK;xmOwJZ7BjYMT;G+A`%kPIME
zH{~2aMDx7Jm*cyW&wpE-4F4oY_ehZ&LmPt%h;2$Ug+l*Wf`H4gtz4|wnElSuF0;;M
zpSq;8TCe5j43~bsWaDhbJduR^)G|<yVi~_WMav!>I5t|2|GPP52LpSHq$4Aly1(@|
zNkf?R7Y^oX?N8UYnniEstMn0DM94pp94G>a)4iMXlk_C#b~@Im(Hi^uke|(Frh6oF
zu>`jflfDvU0^~|gqY1wQS3%5w!=T^QAMcgbE2H*L%NnT*fO5x!AZ3;QVjk1S@w_eI
zl(_#O;3%OAwgG5U*zf7JPqW3Sr~t+o&6pLsBzXg@W6$CuEE{}UAnY5uQe90C3@{3%
zQTl;*ljfq!-(R%DlQXX-R^mA;qy>!#E;{;+QYK$$z3Fgri$^`o+N=+HS(<x1lz<|Q
zVg@H08^q`**?R?Wayhc!21V)Pzsy_uBJ%C2*RP{=#+Nj+2!6{cKcGCF$SwG%DkKt_
zj@I;ASC<eS^({0sh!_v_QIhvgPYY_Z{Yf=IEPyUsPXC32Cpk1EzcqMV8$;<T!n1b3
z8uW{UzTL?<aTV_L><p*ON+MX}^!)t#^0H4NxP`O%+uy%`$6V0=vXPJ&&aIO#LC=R2
z3<~ws!o*@a>atIQ#ucA+vYW^ajcRa1ghCSDBw`FGC#eRfUBOutGxI0950sJHb1jyC
zCr@x+*M@2Y{>y+)qX@<NMfFPME#f(4Z|i@EUl#_Lr?Vo=a167K>!qM5x0zJL^ZUPf
z)Href8S13dE8Iy`RphTX(4(o}Vqdfgpnq6GAHqRWVY&4<SDQsKR#x#BJ$pzUhJ|Eb
zlt2I+C2Rstme|u_2dbfz2>v&`sw2u@AC(vIG$n&}hWH~v^8W^7!!*VMf|X}R9s}Nz
zbwS-0s9^qg5)#9$!JG^$=z;#G{pCafX%)MH>yIU4zZr#N0geNWs%-r5-Lv<Fi^SCw
zd0OfJeKIr*{4P~AE@sAbzKCY_@^GzX6}3P2Jv6~BTGOIaga4f{1XmOPb&M6XP-ssT
zpFu7973$>T!t-o1t-e0;W|<UOT0W=^tT4zZJ)UmtG+%T*0-@(}|GUJ8^?gkXR8%De
zpwq2_a5OY@pDmUP)^}>=-fLpNi+^<F=r0R&8#p$C*S#_lE=6ubKVDsj_nju7V_r4V
zl`2?Fa_xww$pDkz9^{Q{J0p2+r5SlE-~Q8*ovO$6;SQf2=@wD4{YM@nh$c4*2Qls~
z*R%&F={ZnOFflPnNU}3{>p>WWRGW<f-GUSX1}fEaAy&khcooNWW`B-A4*<DavM4b9
zFbgya8zZBm{e24~qnQq`P@wjQr#kJ=EQ79$!>mUtS^Blz<NRn}6PJhq1DlZhs6U-k
zwNgiYS|}^)Z@oDakwCK>sITL(G<CZ9)ULOfD{c><0&H)a_rF4S!q_DSX+|K4KcOM!
zc4pn|G?ZjWB@VuGO=%3CD8~BL6HL=rh->^2TctP$4gtNoD`H~h%|=P$cHU>nKD!i+
zf<}yM;g>J?C&fOQS>Mbe#pdB=4M^5NqNKI{3kq3S=^-s-X=w@6j*6stXCWWQg;p20
z*muNW)+ox^y#HgH+5RVV2H*wpm=CRLm581k%>MytI7AG1ouTaJrBl{eJ@D#<COc|l
z=wlwRgTAuf7UFahl|I{#ee_2fT<NlYI+=GB6L_LD_V=&id6w7nrGrt&{{HuArRweq
zqA7*+m;T{(a5KY)v`C!3-mJy-bwsMq2<+%+l#T@|F-#dU2koT~$VfP|a|{u^aT~vt
z78iHQwd?C1tjx^jE3^Zt<TN^bA5kO;Q$Kx7xCPUofHZ+*Mv&|+XxpQiZ8ukku!P^H
z05j{);0+Ww0WvQb5({}PpFr)>;W-Ujyywoyqk1`)@oclhWF)rJ7mvZwQIZ$ylIG`6
zvX~fXknu05u1+*lTLBT+09Bydt5s-GcRQ2goBTqmZD{zStEtItGc#l{YJfn31m9Fw
z_u0Wg!dBW3GzIVhf{@Rujr;0Az5$X7cA8$7Z?V_)m7<~{XqSJ1&HzL_KwZeZt{9ng
zIM}$jAgTE5I8&9nf^J7dpJ8EOKvJ++_xqJ*)e?`-U3+^TkQ%p!zwy^GI69rrb^45g
z+o&KP1xED(A`$Y19ajC{NX1M0`T6O|fp%3OgQNZG8K}b0u&_OKcSp-oo9sk$!Er!i
z_P9Bz1xk`)v~E#xF|H8o!@~o}5!igpvA54Qq~0zjo%~QFe{^{0bhw}(CnvX5!Dbfm
zM_*+r{lv}t`Y3RGh=l2{!&0ei(x5@}=dF$3qafs2rjmb_%+z+Y;urMh8&_pEg_K6n
ze3M;uVIl9xJ3lv~YtQ4qVraFXasp_8prh5joO08;AxN1O{68(=rM69Mrs%-A__;Q%
zqM_q%zr!Ao7r%CV-bq`ORPlLJ7KYB5glzr;X&}ir7dM;13(*Yg3O}egd(KT4>w|hf
z`sy}ek|!l4b-T~Kfkwb|P5>C9vnZi!1_Q95C0Ts>G*hZ-1Au19<)^tCCPN|qsU$KK
zBb}f#^oZV8kAGv~^y-7Ccw-bwSwuiSlu9B%$aUCgom*^iS_Fn@?mDnC!C++uh_cU>
zsMt+?0h@w;6wdDR#xG*Ety~Eela~nXjWYp0zN{UT@};oTwsBC$P25Md^?K8RAS^H^
zU#V65&LXHyKJBa56;ZE0q|^e|)61*p73cce8c;*EEx(2!+fXpL9t)9foL*c^G{lqR
z?d`w7kwG>Nj-Wh|OrZz{oqBW3CkO<D0ndSWdVM5_lmLX*YcTbkXZA-D%s!7#PtP|y
zgkG$CKkf&^o^jY<d$qeAqX)sN`6~~=WbA`UxBd@sAYuE?ei27h%IWR>PIeM&1&~dA
zmRl>yJxM1=vO2(6&3vxdAD|S9oRs|5l618pZ{HXn{m;Fplb*Dmrf;yG#*=lQuWJO7
zRL`5J9Vei3?I8xe!#s8U?GOu;;xr1Wrl-d?vBW%L%Aqg?bbGf9P{3vC9zGzFRrn>K
zKHSjR1*Qu*Y-W~gxydxJP>l%QuUQ$FJX~HpUY)P%Z&icZw@GH;iw!-=fYVKApEx`y
zuHD(qoT=p~i-tj=Y$qYeW4FMe66B9uqnNoj;d3x&HOE|VOACb77kSnD7ECW=6B8jo
zM7p_N``PRx{Ep4OJy~OaonwuX4F+htyWb>ifSV0`3}e#*JX2Es+!-(%f-s4{cL$;u
zp~!Eaz!*9hFJrIk<>B>7<8>ml-Yap{tkPrdX63OuU5`*83CRcjz~x|W5Lk0FT!(;9
z#jT#;BGw|jf)9<1Tm-F6e3Me?Q*b|^t7wG2lCBc08$U3nb3~c+5S!L|?nPBX!x6l4
za~K(i)<X7v_~+7-4sq0xAA*}}>MorE=F)+Y&#KKP_aL7{zg3})Xp|Kop~=1g=7C5H
zoL4&Tp(Y?jhs7d3qMM{!{RpWDV6(@1A>3lkSB9_0JahOp`2Hp)J_I2@X4Om3W2_v5
zdI550w(Vn!Pq%!Gp?DVtCKV#rj|yZ=kk`tR>#WyzV=w_KkVzIc{eaJD!xB#KAyIBD
z?ETIMgG<Bslny<Q0P)TA&S7;F*;`f&K68z?YyNHB%bEgD74l3b1=SbSRFslnL{p>;
zjD;1%cv~sp!Au`X#b&v?yNj^)XV)zD%Lt*t)As_~?F;FP)Kk_{GY}LG+k_%4+y(rm
zfovh6&XO&D{<d|NnBiom$cs={U@@zkhKp`>x*aov!D$e=$2wpIhBcfpma^b+SZOJn
zKg$&96F4yIAaS?0(NKHqdWu$6LmY02Igd^DSW|BY7}`vhfQRG4;tpcAG#o3D@9Fw<
zwPB`_n?(0#MpMcs^U)_JhB(I(#9iO(BQcPM|3C<r6voEQ9cqE+@zKo8-|H0_4GT#T
z6S^SyUnz2qV&Eo^;wfm%JjvTQ;jd!8efw5c4=LfZ4vAIWcO$Aq0<K4fpci@pX@UMo
z#(Xykq0;|O0Pi0~>DPgM85ApgezGw_%6IW7<;-<Dkq=GlD^13p`Sxw34~_*I@&PG^
z^unj#eaTK|Bx*S@FepB**VM`cBKY7vgRTR#qtMetOcyYK{Vmmd5saaMR*#ugvOSVo
zy9zcQn2;|~$^Q_<C$2F({kup$t=)PW0SrB}e#?odF22rJ-rwDoivO6JOGJ$5vNuJ5
zQ=^ofA)ax&d%zYy91fQ4Cm717@9=bi2pz2WnGPnltWCB6;+Mq0-F=Zr7FfA(LKRH(
zp&*U#c63Ep<W~iZ@ESg~4)EvAhY5ZNKod`wsheCD;^PG&Gu~5m8$M0VKELNd9z>&q
zM?nc+pE-#MZP@@7%WA5GOa6#K^OIK1YS)PqTi@h=@XuF9zw}@<Js+wV;Sc6SNdgbF
zlE)e_I90nPQ;MHDvFl^J7hQHTPmr+;J9;h5E|QxcAPo$n=cM6OfNX<Vm%99XLHgzi
zSl2FaD3J)J7(C9Nbv<5B{{v>p)~G!=#WK4fKta1-fy=B{sZseMiC&fySC*n1UzXie
z8nz_>p`prJjk&B_Id$w^O$6z-+p&=OK%RVRq)BE*=jQ)o?k(H0-oB_&1MnuLTS@7b
zknZk~P(lzSMCp+3P5}vNL`qT+1d$F2>25?yT3X_nxcB~_=L4MUI%mJw!InGLZ>_oJ
z9CM5@d&!(tqTq&YGOFkDt-L@+u`*^FM)+>-cN3YfMOnXS?<|pH@E<+nGVAieJftvP
zhVptH7T|V5>Jf4f`>Sspv<lwDDcA(VH5+0G#f_Cdl~;QVG(teHzlE19&{F^93$UV0
zqo+CW88r}(iB(hOzRzd>@s!&i%Ih;u@lTBt<sn0!t#{7=LTM^uEp!7GH2kvRM@`=0
z;Ys<zs8YJn3gGG|zgN^Lh)e(3dMRfr=nKowyDGEo^1k76noeDwL`=~rs1p5Z=(F{@
zNVfQ>Kb*o|*hApS7ZyE-$=gJgy{<p7*I*->b=z+E?1x{Bu3C{c!SDkhS-HcV&c}Bo
z=yJEw0J?+x7EBmzVf>k|PxpR4ANJ28gV5y(m*X+L;<L~&mi3OpS2(x5tKCBYfXJ*p
z17L5JI-f?j<de-Dv*6_BgoDNC2kDSoGKJ77-I)Ho4dnnZ{-6h2aC;1iX|XdljzftG
zWBu3Er%m~EArhulYOl_ufy2F@zW`_uXFZ$#Oi_gOP9+V^T(<2_Xv9WXnG4(p*uDt=
zmhwOnNrXEoMlppblLKChX~3`77o9~FW{TDm6=aE_WaU;PG6x8;)b6e>`#*=m*eEs1
zZ+SN%Z_KH3Qos?W)UwTX`t=FqCU=8>4BEa`h-b+Dl+d*2yx6MOc^m10<7z<a*Lz`)
z@h0v>t6ZGDaybJS2@)enmu^lUlVM{&G2VUqH%s2@_$|m9&{x@S#)wk$2Tfw}w$?*I
zmzTgGFxILO77|jY0QIuP!8!pA2GCQCwNwEvh-i@D;SUDjI%}Qkv&Ts-<foYu`nd|P
zEPHSY1w7lr%r4GdoTA9}1RX6Vs-9onIA8{H$LT890n&E7-#h8>AV@&dp$$B(#)yN}
zB!R*Dn0L0}vU9Y!?%?3S*b;7V#f?$i2rS5!b<0i8p-<fuH2O}yUNNym;SxgTdsUlo
z#eB^?fx<l;L!6RYNQ~;7@A%j^QmKuBAiY0=T!sp1{L3qPd}P||6{`ooY`VV#^|H68
zX9Jq}o!=mZH2Qj0yo;I*FUk904DKP@Fzbnrj_bn$r->PKkxr$CX|~}jeV0TEbN~w1
zD5p47!nQw#j{Gewa_LzK%)(9k*qM~hEmy}q*)uyAa$_~_<=)3P_+CHCkumG!@9p$H
z|F>##q)sKLmYM%m)T7TgBZa-ESR>Fw<kVE7v-Xdbl$6l5Wcs?_=iIa($jjUU^$0MX
zF`xjX$ti33rq-|Ku6<hvT@8UDy89mb^WV>g^f-;#{X))p&?}IUk)><mDcG)EtZya4
zLd<e-B~m}ez<%XN?oS~1`%#Qer#H!c6W~Gew%!b=7Vyc)$S5f>Od2rbtfdBO68~6k
z3UuhHNUl1ucQC5iJ^X0ucw%RESC^uXe{4P2N(&Aqvd)W5$egq90H3B9QG#MUMC3uB
zkw>IF)zYo@P~++6$4u^~QV&M5^eqI1+?a+%F&_rprW?C;$*4xTsDqRI20iWqQHrQK
z>*SKUfr;%UjihU2_vBzbq3mdV<ZVp+XM3|Tj3?ICEQ{Al7$QiArM`EPrgy$nHYFlX
zJHzpwzSALj_u2RhVz2IhmQ$-z^K-lTgSx7kBXw-RBjlgDu<vOC#j)JHFH1W74OA-c
zp-<y}ga!SpKV_WYxw2Y~jJ>({c<ZVz+`E+-$d)59qO;QAfTGxU9+oag8#+|%Xq!0b
z`)KWu(Az-fAJZ*)d<*k8>blmXL}<gg6G5%_-2}1?eZ?OA>&Z2M_6RTFTW@Pj7rB(&
zVq#N*zsBPVXrNwU0#uXY&;78uneh8RS(H)IdNmFOnk$J||216-z{WMN<b6uBz6#yz
z`tCn@<s3;4&6E$cu(Memomw-)e3i*>R8>s=>n|piohENa3!Eu`e*@3f!?!^zMysNi
z%~cF?8=Rv=6Cb1tK8SN*(D4yyU|OkT+iQ^gg->3$4!oztpW~rIs8h{Ah@|?NQG%AX
zjo1|b7l?WN;F00dW9<p58)m|W`Lx-TwAykfL=+nTlAow6*%0^E*9Au?LurP6|9+)_
zR*GF}#7G&h>R;Rkcm#x-EQ0^@J{$P&l_5|2|Bd%qD3SQ;$_f!FDd|E95VRW`DRDBS
z?418D5&X?+KTsRg=S!f?0}mJ|t+(gr)f&8n;p~0xo|t$A<vEa<(J?T3K$i)rgTv1*
zMi(Hba)O~1I3El~tb>gakZOpzOw|C?9!Y0oD*;@fA49v`<OIxur0ovj%3*o5ubSkz
z+?T=Lv-a=O(H3MWi@Wa3gZ=|6kwG0AI;7wbbiA;*I9Q~kx&h#`LD`eo^z@g&l#hsv
z1k8LN{H-7s@_@#JdO4m&??#wPEpUVh4ko~guFmO~-!(`XzPKNyJ3iLcMMzY3{5i__
zcLz0~0bZGfSxJZR_xFcB`SR*&KM?oVZZ6!SkZS^<sKs_=VF8FjWy1xUPj!56oPc-^
zaPrV`)Mns{k55cUUv6;ifbeLSug4eQz!wB^|E!?bJvahDr$C^geNSZ1n9P$3T^xV+
z2V(r_=%@zf4H}vp@N=50ch_k}OZ^2!;b0oXd1(IR_o@815<>72z|LtiO8P-P^%iIv
z$`k?nhljfd2M=#^MTnH~nZ#{<^>mlSlkxoDb6Xflp;U^KS>rkaECcku@)`a8{XnJ@
z78V8(8swfw+jGx@WaXHdy8$Uut8?xJ#j_$`M5L&2-T$CNtYTI{<EL@$@SA|utly&m
zYak(uer$kHYQW`aRov_Q?tfUo#s+j}6hC(l4FNXSv4daU+}PN^Bv@NpD=IAb&xsF+
z*|F%AKp1O-e-aqcKnpYbNz)AgSE49HugiwvEAV}PeNRyza@Ui+1gM~SIXUZX7fhZ!
zfk-$q91PZjbG1&2wZ+AnQ<LxGwxBNT+{%<l4tww8*f^e#l?t*Gs1IfT??qUyz=Nv}
zd{DlEvcJ}e>`5uJ;TK(aho5YknnS=f7B9Oa>cz#tzyUi2w(O|>lbznT)yz62Z??h+
zx~C?+9zU`LYT-J^{bx#XQSftEYXBBIU9%tjKi_H<2?+`D;s+p$*4Fq7^Yt+?*qyw<
zn8LBSI!WAi_V&y6e}PacTE-k@^ej?5ydRy;YlYam^7!UgsNvO<&ZhIK`U|bYf5af6
z|A!L)e{FHNiY_51ghxusgrKq$la-Y{d#M|P8j8-+7SQTvq-hKGi=php6zOUNei_sf
zCLw3oR$f@%o@uX<lVfTcHI(F7j@yuf{bFKVsrCh-^Wf!m0bEIFU;th93<U>Qd1rHI
zWMl-0xEvfDyu4f-{kJcDBW(V!_b|G8j{&ZAo7*BnP+}hMTvbkQ-)3n+Aw(A-azB6;
zO)W(2h2&=MoM>Zj@0|=8O-(!xQm3ypi+F^l5{p=hoK)rWV?^X>K0epP<zBab`!+E;
zDq}%#ve~55(bB@q!O%I_Om3!&EwPBP?r=BV5G3Dk-Yg#rv_F4w^)-%ta+6|ochJ$W
zfJ0hqVSwG$cRR%ax(ksJk#Tx@2#FAFJBOqFqu(DZD>=BhBJw6_(YdI0(XQT?(hwah
zF^y76Fke*k<;%N(6`!49<5FarW_e`AXMHGG3GSz6=?rM)`@5d5tPdtBBwaz>yOW-)
zm`E6K_PO&l2|oVP))uP&*W@cuzx8&7N7jd2Ipf^YQjfOE5w$KqrOr~{t51mSjV#;k
zXFFNB1}frk+p&vtcSiJY8E7J+u-13)8Uio<>doge<B?HNvRdycJ}W3HDrzgd`m_xw
zZ%iai#DxgRSzSm1Ny#})!0WTf%^wS&3EddX2&uX6$^=9ED+AisP@80>(k9UgeN{DC
zCc?*$*kc62*zGP-1@f-6Pj27KDDn2fjTz}^2`%d9Lyn0hb!#09cG3rhh|!f-7Z)`e
zyjs9U;D^mZa}+q5fKLW3LY|{@Fyv4U_>jQQ6-S&r%xuk?E*QlN|0Np>PhjrG)mn;$
zBg^iE(<LPHzBmoRX?aH%G2jc<dERiX_}=_uRPScDF|IBt*#df_#ZzP|R22L+V5-f}
zW2;yyca|dE!}^JptNQp8GHePj&a3slu}Mgdqw2Q<<rpwCo1K4+vW7I`&;$V(!|H4x
z15}PJxa@$@4;KIt<6@1&N)$X5IO|>YfXuKy{^SAf4&d7dx&h6#&#t?opY4A_k^Dv!
zpedb-CB7W9bfFVM)<>X8>400}tNW449m!fp5+LTdtbD(7@Crl~Hv!VRubr>91~GbY
zXl$(7`x3aUCtT*=Ckr3`ilz`nmC!Px^uD|XQf63~s?6zcC!<oS#^Q8K)qjsyzey9$
zE-k{}&+nb2iVw(<IC^&jIJ513$UqJbx~8yU8_S_dF>+EevL<1(uHjHTdN8^4*qIlP
z$&4iBakjVjYe-BS%TpD7mr_?349)>-7yD~8_?a0Q?A(RGwHF8iZ7}GW#jksvpAs|y
z!VMT>9uPR;#;1Yc3cA2I=UTFnq#waP2fX3FCvl#GYam?yIJA~IhDW>%4C9@hYS1!d
zWpH8eq-2|U2B-TZvJ4*&7rj!$cG$vu0`-ZF&1IixcmS`@I65lo$)D{LxL<nSj+H=7
z2d~7%!Lf666kO@=e(GqZF$9S$zX0J(nekH~2xdodfClEu$ACr&1B`uA1zk#lgJr=)
z?mZ~+08Wt(Cv0voZb3Ob#JW8D2m+E<aQAhC>j^w2M@L76H!Q|a8u_r)y#pk6bkQU_
zOOdZO3Smo)(x-MfT-$zEhbyz#j|NgDXtU0Oq8=?Pxuzd-4La3yrB-Za=Av(L^uS5E
z<=hM(7L!6`u{AUfFy{by2x?_OgZrzqhCO3<ej1q}qg!KZyoSJotzc<<JK*N&@5MGn
zTd>r7yakPn^EmqG1q+a<G<cnd6EI&tpU78l0U<Y<#8*}O;=H49nI&9_Vb})h2h@L$
z+T$mGk6QVBh%0WuNRbX4gong^AZ~(`LAezTSOjI=#&5wi12|{EexBdlWYwB6A29~$
ztA~dN09<r=j!q5VhIcsSGI4WhAlDll$WyfeG3bLyXq?yBX5}hg&VZ?7#G5NcAL(ma
zv*9;xFIbT!5uqX#)0WS@B${BE*n|IDrW2<~2FTl~g8<a$b$M9_&!o`v2`YZ!Y&!Vf
zb%wwts^AS?TF|y4Vlut$5{A#XLzJz)<#xDX84w#Bdffz9VH<Kp5UoR~u^D{#?VUW{
zPn18V4PKr&%ix^?ay7k5i-k17>Pf)L!CNU+Cx$lqQ;Io)s$3EdIGhvZzq<>!GH?f4
zL%_(sJ!Iy1e(D5j<j^FL3I+k35k<y#SG(>8G8%+5*TvRvV714rl^+9~;d-}&XT2%@
z9BQG^a3bt-Z3vQB1AT^fFece7`~*n(U}4JJ+{wzyYK8%2c<>EC48Mao6WpS%xtoF`
z73flfT&;%ly?%`rLrd}!WM>x5RwGtPNl7e*U$D)gHHxDYvb?On8uZWQ|5_I|mu{ZQ
z3m2EMor`i^XA>~zgiaHQpmS<zDZ8}`Y+{27Q_g*2XI6vScYq^;C*aQEVa3Ppk6!1b
zX9R`neoxyY()qS+5TAj(4O(dn;B?@~usvO!^QJT@D=*ipvXYJ>=bxXedQRlxas)!x
zC}PgR#>PyrUxh#F&kqg{;GQ_}5nLz{{xLB%T=!^0Tj=B^yx1#Qv0sn>6VZPqkD-Fa
z^JGgG(+LD&Foq#qm<7SnRm_wqCgy>g9kN|H=qKrSNW^7kQr^COdqP<&4pO2GF7C4v
zsZ7N3(h`z5vEd9D=P`m%*!X>sy`7zSr|CBnA#p5ui+^=d4=CwBAO8OB;Bpl9R4X86
zd>5#|%*+l?pFRac;PJ>iCJ+ISny(U!5ceka95eJRegC_U@vlquG&wy3pVelAn2?2$
zOf|abfygM*c+Pi<iEPaVmP0Z-Dxo`$|K?n;SNkg{172W1#y60J|Ihkw#vMR=ZP5&a
z>LJCyc`L04*!$v2$SJ+rmHuK+m?0bxoPof?K}8ZaFt%hF)D7!ll-7R!x6a!OzAExg
zdcPbqv563EeWkvB!*YE+$2wXBl^IW+`fX>5!rv!;#(5>I@uD|R4|Cs^&c62gpkFw)
zPdmOB=i^O&JOL_HB*OLwxE;wDs8pzU;FH~H^JB+z_pF<*x*)4FPTN$0Q6mNQrf{qn
z0)z1T>|)hN*JJhL{Lxikj{{8Xk-dvET|SEPwZd%I43E)WbbQ+M2h;EscvvDHH37X!
zDW@`ohn@O$GK4#dn~-WQ9r<)6Kf)xGV^=VJh_Z2yn^O4&OF}PaT+Ok>^s78q>Ipdy
zd}j$=Dqf?ZWH&LSAyV;9o1c%3g_3+^=;#eIb9b>?5Bn@Rvx6*_i52{fxlcf)2A4-{
zY^)pyK;ADWD?dYD2b>gfXurkntQ&!!XJdG&s9V^ZE;a>o)etK+Jlfl#QX2Q<gxIJg
z)UKzw=$j9E6^cuE-4{ip8OhWZ_oCK`t={k><AF;N4xN$jjYH5_$R`ihg8Ay7qivmS
zAdOdn%?g+UNnz~n>_G9@1e7=_a`3M?$rJ~Y7zw%yFh{AStbU~PzLvW(6hA{@6S-XW
zc~SPnEml`d1KmTl_!O5rb~)td3KA?zb2ITArA=(ha6qgb7-T}IVF5@Cn5}TrgZ_I2
zqCME*ell*6!QsQYE3~w#>)07%OpV2DGYj@JDv+JvFx{l129jC@r98paV=P^6OSEwa
zOCe<vmc}EJ<9N*qW;9=pah*%wMkl#l-I9VV5e+^Cx8gnMK+3!|Tb~yk><$X@?U_3F
z-^&M}7J@^3qwe%@a|L|az4$;o4hZ}<*ykZ6uDsA2(sjPik-r+G+fUD45ci9<4n38i
z4U=9h#1hQI*_$#pKI1_OMq9cc8L;r`;tZK30K9yF4wm2#@|JzDRO^Nl+|jYppVhJ+
z(^(IWVG~nCz?0{5+b4E<cKYWJ9Q2u{CQdVjU(=sAWunfy$8;>^@7#Z89gKBnVZ7em
zC5jxJeJ6`w&4Q6|qr=9y-QEhM13M6=g7#LfD&&v0#=$@rf$Ov7e9R~Z#DE#X?kZUk
zOpd;NAviSNDZG0te-F`!$KmmEXS@cj%<wmDqYxyD?)$39KqYHwKJFG1(WDPpf%t#?
z7z~Y-lDRBT!OjSnk>;S-)cW(msKFS7{c52AGyA2!74Zz(-ySXg(;ABB>3I&uxH+Yz
zqBgU0Gj&Hk-tYv6JHQ8}rMX$+{sq`af#l_)(buMZ7e4L63RJTYadv(~nSPuM{f>N1
z8ylM%K>1l%Sl~)8h*G<M(K#q{A@q0kNpCmUM8!X&=FC?41Ph-}AZ&*V5;QFIAM7_z
zl*EbeG9u9NJ1N@d1_uY*+uNI)^*4WmPazR|x`@}AEm)czf40fs`lSR#@5R{(SQ~qv
zpN@cb5waQ-T&!i0V*mv4L=c+ry+9TUuCVI&FTirTh2><v=_a^+oe4QCV_Y=fbzK{j
z&cY2iehgHvUP<7iJIptVJOB-mF9OaAk<(-+1uC3-)WpopO!$GQ$1%2z!|tuDt&RlS
zQL+e}b<^k0a&Zr-+3aM70o(rxE^s9!CB|nrZ`=?mLZBK)x4ZfV?&?tgPEO&#DBD=D
z@yNh9{|^gr98F&B&#Dg%4ULLYxysDAIM<$@@o;bub6d<WwxNSj>i1NB(4mliVFM<^
zj&`U3?>H{x1p!lb7iWP`XMlw3oz0v`2s8+OOW*{o%wy3Yo~C>{p5K~rcYoMO)w%5h
zHDv(8@D$Qdm9)wCa<L{*Obou0pQ<qX6~KX!CUw0?N-7Q#C$J!4bw5l6v|(@`8t&X@
z<^258-9bOMw=coW$J&Alm)5O}<3b^6YQfGC&fd}1x&ADzYP!AvP%5ajMukosy5AH-
zP7Y<idc9jDB+yL~4B3ez8rudS+epEV0)ZVk+mgNf64H-lW@A%2!N~1wIYbS*W8n9d
z=$0>ndwC<uEw5(H7^ADY9yJOWOYscq>-|}hwt^2HfX05Lqr)7WgP^>?w0S`pnx@Z7
zEo+q}4LqBTg1`iMEn|(xAw31uvk8p3a!*Ni+3wRAXNWH;#px>7H6TOB1yb|S2Rr*~
znzwGrT8r{v#XQJPXil2cVDw4JR0?E#Iq@M-St|E~SviG+cH7pMb`)dPv{8i^qv)I*
znhS}bK+A702C@^1U$keG2<@&8{D5TUb8YSU`Oz1M4PIx*hQ+;J3g9zmJXGhn#>Jgg
zP+(bZBF(JD0Nc}P!l)9^Icnqig@uV)rzvn|<FgvZ1}^Rt9vS&Ds_KS>kA)0!?)uN4
ztd-YU%4?p>mmNgH<3j?Ik+-n(VgOkL0TLupr?d5f5aD2_xWev-7m|97WW=SZ`5Syp
z8fS`hwjr6aeCe?A9WV4vd!V$YY?d_LC{d9>h)6;<+E7+}(iqF4!4O&K*3V|Q_4N=#
zg4QfA6Jy2l?E3LJo%p_ca@_pR8^_RsXwA5R{&ZODTMm9B%NzkE{^aR*69anVi~8SB
zPM1uaWYs^4jo-w{R3uTS$yf}keg2ST@O?63P5%-9w$G)J{L5!gIrG<5v3hKZQp2Ts
z^#}%T+nAdt!efQY3EUu6icz6c85&(vTB@4l>%H*VVFfE*zW5POt>aoMz3Sc8oQb=D
zrA9Y+d3oX7eg5J_<ohMKstiBdS3xL)#20e1-J>HTuq#IJ`Ka9oEX~Kra$^%T2y9R-
zI6(1IQO)kEg8c9DX2<{=W#GN?)NlbfW0aRelj6`?pXe_5&l@K&Jp^6_<7;Bj_|iTA
z1GK;fi;-?H%iCwv%I}8=3J<~R`ST*IAi`EKQY2#5rheLfRoxoGW_Kg{iU(X8V>qjY
zlX$(6JIMl0wa<KjhO)mpaNnR71Cq{!CfF??$amS0V1~T83MK#)CiC*~Rm0`+ut0-V
zIi<2KJTdjYdC4<LQo~+gvamd=tf_J$CFY(FiVnG%?`YCuUIPvd0QsH#VmA}8=6;2S
zi&}<~>E^N+%aC~gLop>AHw#M&0S?|_=%e4#Z+|W}J8+h#Yn0v-&3)w{{R&(mSkQip
zFc||a<f<VFlL^3@Mc97H2(anIx}CEeF?p8~{a0!nBRstE%80U!35RFkDk~rNjG;Tl
z?(PHIOmLWo&VO$V6<$~$j1rKZeqtO!r(?wEjqdIKD%_7mN-n>G;6h~L-L%tz+4#-+
zGwC#BlUdHTwC@W04D8mxB-Eg3u<gYEC>ds|{XLgP?%jNOM@uxl=xK2Nvd;t<FfPMw
zlBJ)>s0lDO`0046c^U8jvCLC;cX!WHl6SL(>k9m1OEmM+mu;nV&%nm4FO~nM;v@wB
zW(s%~PQWYIMK)%|?=sCZ1H_xES|d*dBGAIlLKc<XmFGCPW}FSX6%c3_KdOJ)@xAJ~
z4h#-ZJMH9)aBRV=!=BIcl-;%R1adOC?B5ltxs^PVDK5#MVfDc`0%idy<LalY8^M?a
zVn`_(=YZ<JF;(55U7R8y(3M#Gaz-G<cn9SJ3|@$f!#hk#PTthm1#z05VhcUEg78U@
zc;aV@Ao(t=EiV_6JQ>dCtgtB@c6#s>z7t^Tky@z&PNY+!mn<*GN{ZFKb;?AhfXTeN
zjt&t@k029(3ZGrJ?~Z&vQ%{5s7#JFgYFJRXW_uy*dAbiH5zKx)Wf7~#o16a@N6?Wa
zIk!BJ&VOI!zR`~%FR;%^RyRHiTyJ5-z5j3{Ah=Z5RYR*Y*P^-Q$a}+TgK`}opRuQP
zc1l7v=g>Tp{!|M;*CC|wN%@ji>%e3#!PeKsW64}Y^o~k@lQHFm-{%X>p``d4wNt{!
z44;g2ma^^T1URdFi9bG`_R2eBiIc=AVRCzcy{%8cNrF#p==D%)`Rs=R^+&z%!+Qy&
zAH6fjU35MOl%^s~Raqw!@Uch&>oUgOlsCRm;m+vhg4M)VkCS!KF~q!LP{0W~`Bkd^
zd-)tQI54n{l>maE;H$j{3M63(0>o&HR@Q@H^&x`)a2#7BS0Rw&>Ylb=LMTuxgsG8G
zs~rT;fd3Lh@nB84$4LbtYfAVy<g3c*UfQEp!Aw(Lk|%n!ajtuMjQUZ@t;zIZx6>VL
zymQMMNheyxdxYsu9}-s2h7{atOHolkb=#(+8_|*YZj%-NK5Gh}&w7u+?DLCOGNSUO
z%9;xSKTYpld?KR|;}Pj80-T<Lo9MI=mu(dc;kOLE7%%v91J(@Gxpf|Tx*QQsm4x#U
zB|Pa5Mg;M-eCse-BUvD$TqNl9IouQs3qV6ljE=Se!C-3Y*UTr)w=xVoVyV7mi}bg*
zUzw0Xb=~BGJ&A#fV`AMLunWk+@tQm&S)3pSf~gN#6GU^1kdGCE%^FxB+1mhg05)Q9
zB{jfhtB}YBmzZ=5xgk*Y<>Tm@)Iq^^)+YN|DS0sFeFdLofH^te%boz#IJMZTF#{mB
zl@huS9;4T9o)(NeaV<l?j{N}!E2y{n3o#nh;z#5cKFC`npl9EK&M%n8_&0GlEGxMx
zQ(*|%{Q+VQe1u@!dkSa2`?4!7hqBX3T(-YLFRP-Wf?UWIv;=q5dHmc&?G{}>S?evx
z(1KS@-`la55Rv!V0f8%YKPmww)>pTKN8rg0C}D^onaJJPaqvNbi?PhOWv5oQw-j9M
z%TO~>u@f3N(j-ZFt&x0nz-2X0m7>A>(s>{oS>ix1P*1Ei00N)&WaVz}TOIKJZbJvb
zhqIc$u$!az?`59sI~<v!%@M@AFNCL|n<k05$ODB*H^46-Y!lY2Sb|21ZiCm&LkSWI
z%w`kY?b)>Z<|_5ByBJh2UJMC)lK%PGs752?aZI@$zK)i!-ESSL^(V6;ytY7YNvoH+
z<O{ya-Nga=w)2)bmHko{k(y9~6?{CCwGB~c%n#J-Q{kG?ZBb;|nwHX>K`Y~uvC~=+
z#W@(1_=T^KZR!cw3aQAXKZ3_ufOm|p+oKcy&%O*vhIYiOVe!inmwzlIX*_@CrLVtz
zYMD(Qh_<y{w3r;nm1*a!8Os@{>#U6vtQM4}CDAx3(PNdJN_2WSh<-242`x-2xVpLz
znssWjP;<TrxJ|sypn)k-menupb%tHl4hSIMi^32-EecS1&`JXF2w!<D1Wmfipzcu3
zU-8YEe>0*F+C$JNKLj4`rwyq4aJ|8FHL%%r<vZ(eu$nQzRmmYYSt16IUJ#BMhD(qn
zM2%kS+G)CF=Fne;ZRnlTqi$`L?})akCvIuQUpyFA(1Wjv=sb5x$hfu57)dE%)=Fli
z<FThUO!LT8&9Fj>8)dvzj760G^;^an*_O;wW;z}<w3%7K#ZJ$kfgD*SubYRW+hqCf
zU6Z0yNKR)W4qFLgHtFWcy<G2KRgoi6Y!<zSiblNpB=2=S2^=K4I~HZDQ+$tZ`U4@%
zuk?Nx_@A?X^>Xr~Qq;r*HtqM04n=3`YrrFHQ6)+&-J|a+jT_2?7z4P>SIE7AtlDDe
z#GZ9={zurum7>jisS{_R?{U5w6;eCOLmE%#?b*N#08P|`*I>|y2e|Dpc*D&@@U4Z}
zV(zQ3sPbd-&%j)+)Q+Q5&c+J5h9ErnlG9&u1;OsjQ-MiG5Ql@KBR3x(*vD8**D#X9
z>iY4(!F{IonT_qrS^)B6;mJt}2|sW<C&3C90gdU^(3ke8JNGRImmr~^uMca;M^NEb
z`sA!v+5K?472Is$<9@33Do{XB5G3|BU>Z#$gYme|c?Oaknh051UJEK(+9qFBu&X};
zO1BW0D-)k<7s#av9DphvkUd(hkKct}WouCovLt1&83<(cV9pqW(68*^j<B1)L)%ma
zm({Rb)uwuvid4vHk@cU}qTb0#(h*JmhU5(q0ngLQc*ca>2}n^#a%8Iksa*I14Qg&K
zE<z?jstqy=lB$Xd04%<Q+&9y*I0ev`%*jZZLd!YVIr3RR{%{vl2)A-4DeCkBE5WXK
z)bJ&rN`a5bZ9;F$>B<*;tv^($3B`)dR0@*Du36(4bTO=}bbX?WTHH0?9aCxB3wpHt
zzGM!IlM}xRo#D-O-Sx)EF%z?3go%u@-IjWrt`1}L@p|rROBGQ<7^8)b#Ft}gnGH3Q
zSr=In@{vyg#FYp1@*_hy!eid|O&r;1SR$myc$(#T{Cz%FBh;KEgOsELop!VzmeqBc
z^0S783Rg=n-lz%#N2IJ#Kj%2e;tNO8Ql56ii}*oR7QbAFLBiFOAzJFVR>2^f|EjZs
z5QW=4Cx21?<&<_Z`fOt(*r|U5JlFgE4mtABxGrPFm0$ix9K$<+z_!vYVxT|e{(P#T
z^*v|2dROkp_M~E1AoihcrCkyUW3I-Gk(Q2*k|@L0*UN^M0b7TilKcdt6L-nAZ&?_p
zfyy?8g`aP)+d1&%O7%U!Km20hZFh)U#2!*&*19XZxX?jShxSZODL%)UQCakwOy@wA
z^j2k8!LG!r?jwGke1)&nx+^0J;kY}PTBIg~X<7=N9+_WfsI&F}dV=-?%%{>F!n=3n
z+fGfFNgS5s&u#;DAUO!1+m-!H0~xh+Y+u}R@qM8Fl)9sYA~p}!fzpI16}*x``;fdF
zd^v``&ro0TeITemvOsYMFF&}~K*jj`XLoS>gG&8G_EL-}**B1-z5wI6y`9X=C&$EO
zZ^cd(Ks0gw!k$#h9(o_(&qx&q_ZY}N2LLUGp(WSq*2hZOnN^_s@EPFub<u?%@{RyC
zzQzXe1F?vQZiYzx04~T02H=2Ynv8w*ymg#Ivc3M$tnIOb!*8IC72O7ZFGN7{a%R(N
z4Bz%`=GPIQ#C&h8r*qimkL62;6K&v1SjId@zWIJXo;O%FI-Ut-_ESFkB5Q<9l~#d9
zRu)#mKACCTe^|gg3g)^ZXMyySfQTPx<m-ibXD7_enGz3?BU0waOH_0ut5CSC?DOqr
zz4B7?9~qYKhEW$)=!F-LH5{}Ae676{UwZfmSIYT$?w{44+ap7HDhkm<JM)d3eE3Du
z->el@`eXtV*b4G_B=D9i)s@1zmNT)<u013W+|@J`xLh54GbJN*xu=YIBVV&hl+9Eu
z!A8_rr<_Z@wj7zR`62&6r~P~*m2US+PqNO3@ymnl*Jh&w1LB)B-IVdP&RJZfBH(ou
zFVx(fC3fAtDi8meMQ#wK)II1GC_)X?lP;W>mSzC#EN~8tWz@vzcq4t2upM#28^IB0
zQgjR3NxTWB@VyFB#`H#tvFQ2~f>%I;mj7Xk<}33<vp4hcu|ac=(pr7=K{`ZtbS_s-
zA_wtF3oAF|*a}abR?5|t5>qIX)FMgV+<K-};IG8^LlHYWUHDanTv;a03K(%hp$Gu{
z1Po@v*n^1U9|~?Lz%dui;CX&H-^3Xg2(9t;qK8GsR#tb1_{5Y6U~C6eBF>O3K}om^
zZhyq5;0i{6Gax7k5)mfll=onO?Q`;Sf0Yxs#digrSxD#p9Q=ZkGu#h(GYfa%HF8~s
zz#}QYl!!<6Qxl9MWNV+wPk52IVWggjNEiM6Fjrjkt2$G^r>Cc|h*;Fi8s=GmQsrd3
zp_>w6hOV7NU=tackg?ugY>{20PPMnYtKIgL+*s})^}Fj_0W#IJ1W8}!FsasWeWP(m
zf(COhXJBK;gu$2x@QC5nt4QjL#Kt-(%YK0M__c+$q_-I|e&alcUe41}Zds)$J)Jp(
zSaEr%f@XfPcczmaOyyf+diy>K?MwtOCTpE$$GeU?@o|hT{awbX?{7`)nAIm#NaPWL
z%cY#+eA6<ga{}GczROz9bSPc@O*={Xh2PWXkk`c@(hHooG9uK=eQ-+QPJ`Rk@Y9B9
zFLY#*lg@PMkzO!xoQh-1@W$3Aj`1C^pl80H8rBNEg@T#i1%)5^16#GIgY%V)dwBFJ
zt7E05{U|IE>i(mVI^PxEDw3k_E*5dUQ{x{qmmVV_V=&;JvsB{1-}`7+?lxyMxL$GX
z+sY!IrE6t(kH7~d#B^r=ZSnBI06b(*cERgRvd6FTOtXIP;A!B@9z7(Dp7xX$%HqYL
z@8Jv>9WChJu`)Kcw6O5$D_2WU9{1ZRmy82v)p7$WK;iiv2+!(a3P=5UwDC1pVh@im
z+>z~wOe}J$i;Ih)_sXzEUX|$c-#6`qsT-A$i)Wt3az2&$qMnv25@;C>&@|b*N#KRa
zL=f{oY4ic7HM8%jub^)Q#?{aR1E#Sj)Hy|;er6;00>z`RPgOe%C{(&2S?w%kuohal
z<xFRreGdV(05Vl*7$j?9t*H10;AsxcY`A_)?^-{xwAB0J%86)(O^x10obPB41{&?E
z2c~9_!0BvDywET*qKFl8Kh%oKB~)lYZ~IEr_HM9jElZrcM?Vk_C978F-O@?mj!WLE
zt*HTWwfr4(V%u3~CR+kXH-3#29l`yBV?JG1R3M7`DAioT%f4SKZJhpfEWU=aLCxj&
z=up!~1bA%~Oiv@B)}zbrJSwizQh)yW>zHYJ!5bOb-iP1SV<$C8)`-&0HsjH@-g(Y>
zd1*}qU_6}MXiKEvyjhdsq1`K-L%NUF{Vsz4>C!!1x?a+g_}YR>k~f`&!_vlGJ`Irx
zx*qF~BT1IUp+Kv6D+m2Fo~|43h5>QpJ~y6{<yoAqr}%xDncwy1j$Ueue|9Z&9LCQ<
z(auJForjj+5K%k{K+F^r1;D~HrkA23u=5Y(6lg@zWqQj+x6^(!VWfr~W{M-@c4>Y$
zf|URKmcqnPpTc#0*S)t5wal)j({9XIGnxW6?j98G7ppncEDm`DM_MzQX19E0GcLCE
zj~{eilv}LEz9u-umfs2OlQ+Y)_g3d_0Ddx^r`r@7)BI3%DVNR=$PIUtfuL=M-vKNZ
z^iig)B$6>63pJz7IWVDzW_~mopEID`>KS*8cA!`S#ZnGSct*MDw=3)5Dw{b&VLCPD
zOp*CjUHnL8mu;($AHmV&By$2>j|&+Q_fnK45I#@T_lcxG9$%c_0;ji1ppc=X{|2vQ
zam<c^f$OBR!^8M=`ozC%KMJ^PRhYEd10oBMoXymyD&6vIK;ryFO;#tXz^;lv-ZX(J
z0op>p78VK!17Nm_0uVN8?0x{5!3l0;0Hl>txH&801EL{wgq@0KGm{b{bt{ExU@IiL
zA7mOZy^7ua71+4QtGuKm%ZKVdLFg44fEoed8<1;J96yAMW_H1B7UY&ME+{CNgbWF?
zzv?4E0oCvT=a3%Gd(*Lq4x%h351oKQZx869?0yF~AI9M)yNhkN$shP6vJ4lbK5#tV
z!2wkK`AjW=h%0<7fKEb-i#JOQ1Z@e*)B!R)fS%OLmoKS5br#YWhT1bpoTP>PD7&YO
zYi~gNUaPlAi+m+RO)GB6|Lypw<Qh-yQYF`VsUnG4<?M-hS7y^NVYB8#O{uBNs<CWk
z)ZGcm34w$QUN3eGm$^_Gtmcu&$-l9iKPcO^?NOTJ&A30-TmA5q(QYewFuL*y3g@ea
z#mja*d3jCQpHlguZ^FMQI4t?*8_AtLRQ%BJ4x_>^VfoBK8vCwiCI$_;wt@9mx*m+S
z{K>_%?mk(1I$bptppe%AOb%-E;eGJ&XayQ1R3CF6&0U1P0e6XEY)7^{p>3{feX46w
zMMcGOh)KiHS)lFtb#}B)i7dxiuh{}kb6sS5Rqa9+Fnot+yaj5hpJ(n2>DU2=hK39e
z$_WElA~+Y<728ZQ*phX<Pu})L@`bhCWeIOruq;hWpw<?s8`Qzu@^p!p&${cS)n&s*
zW_CPR@ln(yDn^=Kx?n@0Z&0;xnM_W~;tSPCs~?`is|_7_OZwW<b@o$zo=a&0LA&3P
z74<H7PuD|`I|w)@>ioD2Y=7L_6&zrA39XuPQr<h4fb=`f)E+G8nAqCdhCIW7V!iZH
zRTwu%dkB;>Vi60EA*mzV?cfBa=@pFrVv@EZR0eKsVVA8r(UEE}+v+IloBfJCn+kbo
zhbsRz&<>_x_>qXyI(HVSIYRvoIeA3l3vdficNgy@V2%&suQbYe?Jp3m*4w5A5-je%
zZ%M#g0R09azej=SM0$@OU!ETc>B)x0?CgfLqSQs;zMh9ZP5;3!zRcZ?jd*QtBO@a%
zq=o1){kObb<ha1-1XhD(e<qbFEPI~%^DiDJT!zlj&I3+oal|{Xb2sb&iy<JO+^$T`
z%Az`ysV@<>io0Sba2Qh?4#hZIkO{h|6nt(hr2G>CkDAQxF2DUdvFm@J^_Gd{_M;t>
z_SsVBf&`B|_ai*xd=~8wQqcbd<R6O%oJXef)oE}ZtEsE0DwUS7w|kBcW&~$_&8|_q
zb#PHG=gUP;#pLmDv$eszH3dBkVZEH+v+!!UVDP-cG0LW?eM@_^A{fK}&Q`<6X0B|u
z77pc1H?(^b+4&}={`Gc^&vGSDooBV4VZP9nOHOS5rdbelSF0B__{me}aATg<9a04|
z$4zO@l9#Qa!Rj}t+~ajNV#?GhUpZ)n8)csgx>a+jU!+8ZUG`R+jN-)Ri|3kl#xxl(
zYi&$cb;Cf<>u6Y$`f65CD4Cj=R5))|CrBHIGiZMx?sA0!)PAYc?s!L>+W@qKH!#^?
z{ly4wwc&AsF$|cEcMWRjbx$`oVzWoWyxztSzHWox;=+(X04lEk2Gi6y0>@QfQX-x+
z%=P%5%PeEyjl&a!P6WcgC|cJ=k5T)leP~d40?wD^c7?THkL5XEQ`G!^n*RcyGxMHB
z=Mld|{aITktBDpXXI-eq;6UqryGy>eLXVs?@2jh*3gO}%h5Eit7)?fIO$e3GqLSSX
zJ2Iok<w_H9YRzMP@IXm0StTj9QT>`PC%|dYAVXw}L%ST>0<&O`)|-nM5yLbgGSpKq
z<-ZO_iO#3{@>+4w_~SNjg<7LCl57mj&w6`%&6tzY)9;e@6R{+1Z*CUfJ=6g59kfft
z-GAs#^g!nNjDmvQi55no%I17pE+Y!isjIf0z}FKB#R76Ct$x4!VEaGp&Q{<4ezi`H
zFG15Y^^3$0iGgLv4LJ$`tlfb#0|GEh`WuXOD&p59iEx4`5y4B6j6rk(_iWoEEZ2Pl
z<)%7gy~Q~f14DF1Aj*%5OO@z>Fu4?na6dM|D3nX<v@^EF_|zL_oteWB)fndxD!|d;
zluHw6*V_+3g@?0w@|$RSW@bJa4mJd&Oa-PR&@rM}X@BSR*D0&7KZltV*mON3tRe@!
z10TPHVC4tVRYsXEu#1ae9LAZP-Rn$$WLf5Yra0MwxgVdNobH9Q!NsS65pf|d8rt;8
z?9qO>MW>PJ%s8d?O)tV?+Rp{AeRj@=p2P)s2hbx2*LhS_aLEqc{CX72T28>Ts}(bp
z+YKIy0x((hphro9XEoPiV9}oS4RoF-#u@T{@9vVo5N-fj)m&NwGpo#iJOP~t4GO2N
z=@W=GEq96W@f|lO2?PbrX77%#!@7sj5x=8INQbAKDK4uZ!p^=8Be#%?XiNwTi4ccT
zqz5|F=B^4pft*62*&H&r<hX90Uk*Jj=t;l{wOf1eqL5UH_$&89ua6AH!8L=k*5zfq
z;s-X7Xkkukag7p59Ex@yVhv=Nfl~EYm{b{Nv$42)1#NTHI&aoO=?Y_>@40O0LvxFi
z%M_c`)_4%?dp?sd`hJ=RL|8ekkefD5*!?ARt}PJl)n9?Efkz*e$RsyohOa<CVaI*D
zi6!)7rwH;q$WZ}c7W6!gud9=VN)9mD4;QvKJ%-FGfz$_g?U~Q@^Ch=V<JySquh$ic
zk^0`SzU5h|48H?zVBl-sT=l~dW~;_Jgn<){IYh=XObJXj!!L+u0^-#4TgbAQSFB-L
zQ}O($OX!m@tgrj}E%;VCI6H&4si*06A>n#Z5ldr;r&>r$R@UMux7>Q$as}sF4@!+=
zqL>5b^%Ten)Q_wA-urP}&z2UKTa<%gy5-k?-iZ{6Ro)0V)s&O7O=3*xU-a*yu(DYw
z6&7HR5yd5JH^M+Rc6~<)(4{^wJ%cdG3?cPC|C1m-Zj6+LZy%!@6%}PMEw1-+@ZB!h
zfKi<R$^Y`We6Tj`Y1Vmvi6gM?VFd5OpYUhX(AK09;$DJTTDt`ayGvaOzkr&@QL`Wh
zZ6_#1DTLj|TU%S(+Hy_Wy1>n-iSN#hJ%CS-ohees?Wq650t6hzoIMf-vUl?VP&nR)
zboK5ojCaPM;z3@3%n|J2eTcrpy~Hgm-5v`q&=$WizJy77xH^Dn_NU-Q45AoKf=x+P
zt{J(F?0rK%vxDoHY!-?*%P^%}GS@xBuG(0oF04z)KV^6sZkPk5R@T%i1}sn*9AgW_
zvq*<<y_yZRCT+C>9{R3+0pr@;VCY6b-@W2lFW8+FfDL!RMEIMbCjVe!V&W^x#SLJ6
z<UwO_7PJEq&!9ocZ!3lq1Knt!*YWijkjE`=Z#TGX!$xoh-X+Q4?m$il;4wO~2p-q{
zRhXQkD(ZfSWOfOA@+}{8_j}Nm+_fr$N$IelaBnVxd&$83RBm@QY5@-G@H}WvK*+MQ
z^eqPklT=JKitNbSQ=ba|Y6L<9hnAH(4F8!M0N`H#tB2+9<;d~*M%BV5quanKSklQ!
zmlozMp`he`T}-rvX+=IpLXJu`2_%iNMvo{zVB&$)MDJt#h~5+W{k^?W>$=atzv%G<
z&5pmNO8%sV`~E6c$Iot@9wMY6a;ZBXGJ&TLjhgnLH<Vc)6x@{WpuCafuNfE|#FfCm
zlF;VUXhmPFjusc?=8gbc6JniNrMC7rSQ8elVmVOlV8sPN*#=fr_*NeQCx%WQ;jS1Y
z^XvH`CMxQ<rDc*p=Fxd-`9aC`T55e@WUid!18)jOqGuNb9tsY+;dK=MP_VAZJ{{$y
zlN743A)#cehRO}n-RFmCpWStmeVCt*QvBMGKLVJbSvK1+`TeurM=2LzgsD}>lep3S
zTG|dq*dj<ZO7hdee&jRy5wqf(9`J&ZNmYASXplU@r;gG>WuK_lPU|l3Y4MEkk6wY?
zjbQLu?kuJ2b-_6nuw%0;RB<N7<Y8`jZ&q<>9cu}S2;d+w$DSxD6Y~HVP+3+6oZi^f
z75UfvA1g|FfK2_2^YnN(F2t1aP$?PTJu@`)8w48eYUs%pwS4iuG~B${5x2zhB~VvY
zRsD|r`;z{YK}&!mo7*G)mQ@tV+EjHks3gu#&>=|BbY>v_KH<2NKV9!{i!%M5yvG(Z
zA578k`Tpf4ZgD;?j}yk|)B2E@IZX5)rPukVGojHvuPUF&HUq}jU+U|@FsI~@1yH>U
zm<4zSR2~VQ$8Ys_$}H4nvmU7udxKPENk2!;0@67wG>!Mx-(zV6d0kwpe{@9uIX*6=
z`2urbAtcTFJXDjpCzwOXm@QQUX&wo9T|I?-d`(M?`MrD`ir>z7`49V247%H~ls%P}
znz3H*${beMfH&lKX7`uw$fH-B5QyZX>I1YwTDF)cpV@A(Q579rZb}q0d`|w}Ul^+V
z19z{ZsrmT17*^h=;VjAsFim!3*DcG`a(NB4t>bEc)5yc*8}Lu#W0(||3&96=m{h)Y
zczJd8(cT`Ats}Ku@aQ6fDL=s6bC^Ng9-RS#wH7EZ3y3s`x)`Lw;W7XgRi0J>7yPOm
zL}75*3FPvyvw*AsOzN*@!EU^mslD@Z0*L=h>Yxm2?*r1eu@3mDUQL_;Qaw<J^K%kr
z^nqiq_FjpEm<mTJMilEWPcu{MlTDQ1cI&1Kb-B;G*^~4~2lw&^)UVe`{lVQRlIh$I
z2;3#=uaIM~*L_w6CfBN}poBOvUfxO<^@b^_!oaWsHzJ@{{D7GPkT|wXpG{%R!U#)W
zk?E@EV}%bD8v3E0Wzppj1#@G#yTB?s2=*65a2U9nA5{!gcPO;=09l43@x%)Zs>Ai`
z#=n1m*%9>uMu`d9&NqTb&|qFQ)UC!abMmJ;n2pFbTfZ1G9)td17!i9^<3b{d6j&2n
z_H{9l41RPwuoAyuslmFs$j+P)m)75f2#&r+yD-EU#&?o7y-Pz4p2u$E&DZunv6h}7
z$3a4W=qoeLI=27p?g;ub1MZ8HxKS$FM*)GH7yUyxl7&c;nCriOJ(tG5c=ZdrJsyms
zfSZnzNa2+Tf|TUs<YjAa=m6Es0!v$lI05+2d*W=m6evJ|*ofQ^GdDL6QPR}>P9A5`
zzbFupY8H>Z=kAlahl$<S!0-}LY_3AB`Y0BNQkHZW`%*WkICPUW_p3f~z3g9c|E0(K
zD`X_|SmfgkCi&hlB%LbsS$l)aX$J%S6r&i*fHMVM;;N|fuaJDje<vIqrh;u5m7Xrr
z>pw{i^03%VH1<u6cXCwJ9a7R@3iD9P`H87SEG_b1?q8(UEAMess_K#k?N3N5rk})l
zD%=8=YvT#CX1Y*Z81FE!68N>=W@Gb<K^PkkvuRwcF|Dq7$O7d;6jd4<xRqoiB+@m^
zw6wG!8>pzq!6haRaEVXNl*jWx0sAczd;%(3L*E*O41IkMHURo=baY9P@Fnq#^htKP
z;Tk@u*rU~ArvUc*&oT}x9L7rqWYm-2{V9}=c6N6}z5E<OHDw0;9Jqa;>4(=<DTkMq
zmO!U3DS7kp<0&{e1s#PFpJ8<2Z$MVIwq61X#jKvK3t-NO9rV+-$IE{Mr4txSFetF(
zakUB%8JbfSHU80YqK@n_Li_Bs1Djb-QaOy+8XfHt@_~uA(1>^iViPg3Ct!X}#%rC#
zSDHo%1Z&Fjvif6cL;mo-yUi`^*NdgI@`^r)WVCDO8B_P9W{XN2n42KS$IPLl=X}b<
zqFsuX>LzRkc_2PR%-qPxCQ#?Xi7xL09bzqm-{C#9WWZ_eiVf3n`6iN>6GH&X67ab(
zgL@z!)JDMZ%p8THcWs+O4LldKNTuqYG*KHEq(QdvNbg>YFNC+%ks@<&%^q3l0tDSL
zPpN==@`rSEoJ1gi>I9_rb6>&9^3R-+cVue`u%krW4?h4Y|NZ;-V9(qB3bZ6N2TWA7
zRM$QeXtpKjJ|PH;LArrXLlqDJqAcuMHpq%>#iBQ1rW2hAztjkDO;3UDFYK^vO?*y?
z0C$uFIPpN@AYeBnuiMx}M?pe@sUGjZ#Rv*+=$0Pt*utDEVr&0#bpKg+Mq6_YrGx<w
z64Pcb^-hHFg}Pxxl%NY+7HJktD4_3D0iowO25@Z`BqYkop8=hYzX9zZ)_V-Cibo_B
z<N&QkU?0tK0et;dn2Vrz=J|UW^P<Zz^U4Mdu-{)`Spg9iW^l7g<!Jd!@GxAdhAt^a
zf+0tibAd4d0P=tM@ByNx$MFtaWbDLD3#jLeH}RQFp;^p1P7E$Sk}06-1y<2tX1&~?
zOt&9oH*o+9z&EaUT*K{g#I_s+zkGM#33)+$WeEo7*k^quA6Cx}e(8V>l!JrA!GgV&
zf%!@)cEC8<!IxT?f!0Jf10O5s%s)pl@jK*0b#OsJmIkB8tOl|JD+ytS=gi>XI$TfS
zBoDLTponvW(1-jVpWnEW1py>f$i`k88>?5ChC-;d*z())hl!BAbSo!HZ%64E7&?1<
zm4)AIcN3Y(bCHpeog6`dm%<5iK+qEk)Gj_4)IEdc$$czr$3SZVj0!Lz0<WGps0o1Y
zZQmSVXW!P&WrqC)A0rwh$<W5Ifx$yi<Wv2tGN3KUX0B9#SyX_7as%K4IpXt@tr$`7
zt1b?hXv^laxDVdH8lDRlX%A0eKEOWw5wIr(O_RoE@BF`tTNuD%1JiDJVIpJH&|l51
zJ)0$xVU<-Cx6pF$a~%MEz+eo9VE~MC+@esBlM@GY8jxOxZKvt{Bjbl|z@Fk56--Zi
z4yY}Vu~46;0mBn6HgqC3N9b|FvxN`=rWc~G_9~^rpV`+EjT2`Pz?0DXWW5Ft6wV;w
zvJ`oK6y{+I6xs58+@>JQ(|jifw0Y3995Fp)0xHE-0lbInEZ5lvAzzG5f}&Xs1|*Y^
z!?Aw$pGsan$*7*g6Y3S9)PlbrJQ*v=W0=Z?b|{=*1Kla`m;MCeHv4w<to1W6->rtc
zil!_hqaji`1^V?Z*7;FalJoI*b>RJn9RLQbpjrZ3vp>*ET3cU-i{`y-^wyv&;z}!S
z1H&I5JZSCe!mYr2FY&*RKzt<?jlJfxsq!(rfDRByjw9($d=h|IWZuNY#B4ckX%G1o
zXs3Zq9q`Z4+>o0vE&_=2uCssf28h$nkmP;q>e7!Qh@Nqi0Ey?Bp>7yzD6$><11qnp
zKn||#e)kw>P7QzR?4NA3r%e9}(P3_k>ebkrzbBQp{O=H(zyJRKx?w;zyNRNOMLs3%
z^-SOZ|ND-d^zD8ew6v`q^kBUTBQ%f-)v)*84h)Qq@o*3G@$d|f<hH&2dzfR0v2Tha
z;xbEZd=e8g;8k#797#lPN5|asG?aodD3bpi`D}SdWUArJ>T1#TX}_2Nv`5Sm5)!>V
z5&5Y9Y`svdfpru57yerQv<v=u_<c;bYW}smyaRx{q=dw{W;`vSmUA=qzfb3cM3g9C
z5XkoOLj7_u;s;ho&N1W-<^Iua+yL6UJFOa^tGW8|o~D;b0S41(Q`3fzEH0j_3FE)6
z6eo<L<=7S4%DC(vZvTFW6bn5_u|qLMs{aX*XYs@=N)(<YMh%1$Y(T00Z)d<_nTa27
zHz<}#<6QHzg^_Xp`c+7DZbN9p{?r68<<oF$o9dTo(n?^hY^J961oRpsBI4rWa21t(
z`gBEg47m?rzC3`mUGW7{sdjdD7pEiq=HFBQdokRb1CNqKPQ~^tt2Heeyy_oSTDSpy
zzbg9U?=e6hps*HPzX>QIv<1X>?}M)9t6BH6EKKK(@u&bhdB=Z)t%-QIA4htUu>1S)
zaK#9$iLahyy#M<mxVXNQA2f2UV6vcjZwk)BEZkxkkcTNGpaG2g2*yF|Lw3(<od7Kk
z&>HMP;j-{!ZH?co>m8iPM)T#KHMrc@iNSLNep91B<MXE%kF8RuX(IG0?0@b79ayXQ
zksZLe@XHt(g%CO*bG`j#%KASn;5@^duxWE;C0O%^d0W^|l-qZAU|jispAXeXiV^{3
z36y#+OPyK3M+=_#xwQWo8bqZ=4O@e`Z_^BBU;SSGp!X5&0wDjm>$XpTl1Fs{D2K<|
zU?8OHfKb6qK4Hk-wPY*YkG@024eGY;o*s|s8cw)SBdDL1Ij)JSxg8z`3V?`rf9)v}
z7*~%fjX+BfXi#q<*uXHr`IR~EzKLoZ8|cjhW01f=n<4ca8N@$pjF7+9+FgM+iR@Qq
zJz;-OAwHG&g+kKxFhOVQqn#b_88BEMwlwX8X&GSEITc30Ol4|eVF7b^=e>V+nOQ#{
zwJ!Vku|@Ui(>Q<@4}bCX1C>Y=&_kFGBm|-p0QPxaPCw~>qYMP<5SC>q;*)McmL=f2
zqjn5T;!o;1r?5hnV<rAdujAr0K{o-yVQ!~&3<Cpc8%d;Red#cnkPha1LT`(gLk{WH
zzn&8EXtYtB0Z&%@aiD30PIy+l2J#VqU`5OIqCj=D`Rmso&~I^ch`8-zdxKj8w{f$s
zwS5JN69+f|<cmMRz>GvAuy;K>w!`NHO$Aa4tmNR}+$gUn&~dLa6A_*0y9R)BBV9rE
zES^@QA0o$7cwap5zR>66(<$z;_{SL+JO$_nbc?u5JNv(S2E!o5z$&#(7@+jj)b!nj
zrM30Dy?soF59FK{mX^q5cgO)!ZG6KrQT>p4{{VBC3MROnou6li=*he^HT^If_{7WW
zE2+H3G>k}b++Qsp%!4i|?2(x-uYSNl+|dtuGnJOVp~69z$W~r;ft`EvroW%R<dUkm
zoS&3zV0wCqudhhTl;c;L*Ss(h3WjunE1kG_6H5baxzFpO(o%DHcqS&+rlt%CDsSpt
zY6R>>LYhm9K@fNY;E~_4=PUGT1LQpDn9od1sN)Otw=(y#3{ln2+oU<pUJU2Uw?~k)
z@p%$kSy|B?%{F+e-nqL4Rjo9RgP0hlVH6}QZ_;$YL+lB!HOMgp<Uw2xb=-mXB`Yh;
z0v;(G39JywLjQ0j^}LOW3S9g_X#W5a@x{xRY={#QD@Mef5cAv7F<-xaEhyMiT100>
z$j6B7fDbe3PqSZnMMcjoLf-S9zhgmHcLnDvNr{~qPTu<;B^cie(S;&=_^720q%Lf2
zfiJ*QOG{r|&_j9?P7(!h8n}s^X8Kx<m&HO!srF|$U)|x)VKLOCmQ$Z*;J9S9!V@;L
z$k+W1@IEv#njq_6>WsZodV#z>;;yhgw2R)nc>^Sspq;6YD?SAU1!_(Vkgt2e&b&=N
ze!0IEr=HU;g>(NC>_6aS3cZ+g{PgLQEu}4d>tT7YT7^SD1@dN)Tqp6_fSrdm#FX2r
z2nnqSD4ek*bA{Nc)M;`lr7}U<W$n+Qsi??9g-Twj-HC!OR1UTi<NevjCMLAO59xVW
zmo_*3Qz{b@a$$fRC2hIyjpv!o)6+duQ%B(b%gl^^|GxH97*E%KLEH=h-Kfr)x%mYI
zd+L|?%-UZR5-8TuoxecK@r&y&WPzg)or?57uR~=JTSv<G((3u!uZoFL9nln3e{msB
zLvu($tfp&VRZ5`;UZ8CT^~04XqR9i>Cq}_oY3tyR<J1GwX_*XaH{u!bz!dBc&@Pkj
zub6hfF}NR_zYolXhpMXHts%zw9jZwjB)u&V^eiSSlI!aJe9&_+D-MZaIDSct(Rzz`
zG{N*6O96_!2~r<xx}i{u>+4-1`l{LQYW{|XBBP^>1t{MruEBhh9@lrfPtZaC8K5F2
zCWc@4v+N!bkqwUUyH^}s3ohrUJV-uVFgK{T7xR6?jzl;71&-Y_ln}C4e*Jn2qG`la
zpO^6;yQS!#nW9ryS5)8*+|<DSCZ^?ghO6<8BhEiD8}Val$@=+onnfQLO4pKqS}{o$
zxugM>ZJi-O;(PQy!6fs>GE=F}f1*Hi2l>+U`1o<2v<TN?0c8#&_A<U!CjV#dlQ^HI
z%Wk3-V3%2xZ(I1Wwgu3dE*gS!zzH+*Z%W#XoE!ksn?I0cu|g(EnB|?6<<`z*f-m`h
zsCw^stpEQDSW8j%iXwZ<$SB#e$&Bn|6p<vWjFgd;9hnIsqwHj6g@&?KQX(TNqRh*E
zuFv=W-H*rp`RB8AxvuN|8qeoB=Xs6;p=*7nSeZJv1->g;ik-cpH(la3#k=^J^`$-x
zJM@1%GVU|braCL2Eu~2i`>pxyMdvpPJ>urxZ9y<l{`G?7V8^65+!e^y?Bl+Xo~cn*
zeT;X#Xic}Co_bJ~kuZAe9debpxs&A8x{r{txw^X_k(<o$Ns3dv?dx2ZH^;^8U3fBz
zbZ_|Cvj!9iiWDc_9LTz&s;VkC7xa{Od1d98loU)pa=t8fs-9NX?8@G8L571n=RuaK
zBs=?^8s(*eTNe)LAJ6)uc;nXnn<OmyUD*fNeiicNpn>KD<e;V0#gP3w<yPEg(U(zE
z#p#J&9)A9_w%NIRyN~Q=bC;XEMZKi)+f%tPH#fIHV@#7+1<^U1NuE(Vk%}*3wCnL?
zw#dHidCKyTFN>#*bh@aQF8ra(=WD(|N=hHXEzXfW(thTUvHnpOT3Sx*2j#@QS)OtW
zT5jgVoI>s$v?BX+%EkAp#I^6v8fhPqKC({nBFkwqc5m;AK_uo<Cs42YH5z*}ONopB
zUZKD%`bNi4(0Zj9=3Fc6rz5(X@MXA&WyPsV-o8bv?XwFk;3tnN&vGgeju38L)PHBx
zRc?Rz5_gk?lAV`~MO9T^(xxli6e?aZ4lQzp--|m!9yABFrfnEXc}mnMadD}72eHFE
zN3)7_@8jr@>rPJUot^&4i6Q&5^yTt>P3hcEO8$7sJ=;=X{X^**kEB!~Szj1^<g>4n
z%M1_AP}ja^d(RMJM3<I&(87Y{5cBNpT*bG&TKr#}+mA)?(e)OX+@4Q8wNJ}MiFXev
z?{Yk=W=@hPt_c|RA%=7Sj=uKvZ4(_rY;wM|xvDsp_AtX5CFGRKHIcxIu$T`uWo1VR
zn~Rso6Webk1rcK!xoAa%jfrnaUghWKfZwZ&p2wHIze(oPe|wQF^tEnRjj~?c=>Z-j
z#5_^jQ6J6RuQ5&iMoLaSmMx@BP4}7aqDzhIeM}nj5P!|71J7^vJg)H<&0P{%J;6st
zVy?5gD-RFiFye_|#b~sb@NYZ~IHAcC8v)t9yk#~?nr`sDM!?X&<=H5)dc1G{Z=G%f
z66nXz!eIecQ#fV@-@HMmK7k5Q?IsZP!6IXMd-acSkxLOaUxq{X+qY%lg;Z_qMCGPz
zo&i~pGDh=5LvtRgR;`zJOL5WqEXa}!B7iHl!RuNT6Bfo~#A2$FS9Q8e95;30E;5cF
z65FQZsua@BM$M<lG;&6&%K*UckK}<rfTBDcMEV5AF)`X-Za<CgGBrJ2CmW+`$jtD9
zlj4L-@PNu=wVEIB%|tU;XkOXVyj=!kXJbSx!{TE4jinJ{LkEgVzfzJJ9%Uqw7f^Kq
z2NwnE^D14Yw$#mH#pcWO^pS%HO=>TDnVHo>46Z8K>iO$)+vm>;P}zn=w;M`J7jfyJ
zVc=#xuc&q4(pR(!cWQ2~zOXGK&EIwF_tu8~dzuh3htP<Nv|cWFCdn|=&Y6?k9{?8?
z30GjXC^7f%&T-Pzc&P#-3On#buOQ##*w^-wRObOE<;%<C;qe`4(;SFzE)Zdn_wF%1
zRcfWwA{x@YPc!+?D`JtHo1B2d(vXluIm@gceMHf2pzwWPqjUdv=mN+)!fL4Q0+(Xq
zKQ~@#84CiY)@6{_wrM9WZnAv_VFHlBE&mv9HsA<{+ycP50h>+j<t;pB@411|7dc&+
ziM@5(zFCuDIsIB8quAz<Yv~hrY8Dn#b&Ip9TH$qd%+bLU7kvHvZbPXbdr+L_BVxMX
zO0Op8xpHRrA$&dj&!UOl?9xUsO$h?*pbHT&E29sDRE$mWt3cI@+5QW<y3zR?U>Dw*
zU4gpc@!lga+D7CZS$;wOIL73N@mWEHaW3^}*Wof%%<!Rfl=J=l4))hW*lTM`43HRF
zRytKD_D_R)!^k2%JO+?__#B=mn4!&*aC9j@-+_b-(ZCbeuRq7_-xsr=ta5l@p#9yu
zEAt~97`>iIdAgcZq1M&&_n{^ceIVNb_@0=P1n0Ng2y1a4dw%GrgroLAAx$Z><HNR8
zar?nt@>ov*$k`xgo*%1cI&cjvrQiCp`Pg%>FJz5-We#Ib=w5(=T_ffiVDcfpn<LP)
z*p%XH=z0538z`~IIrsJFX$5Spmx5Ttdxri}!L01?Z^>iFR+g4%1QYFHI*b`jkcm82
zt$!Cb<`@2a?~2!JKZJ3fS3>D5se4bB80E1OjF1XJyYIi)R?S;2U0sENTWKR9HAviY
zNY!$DxGy^H>QN6>Rjz95_X7jE-n$!N&I8XLd~Ydmo?Ur<tL4M`N0R1&qW+f8{DFG`
z*xJ^(j*XP}=a3CXc_SOn7tY`?J_CWI8pRlc(Zb_)t*_(a-bFLJ!J3DC;{HCKBYEt*
zIixr^xP$+PQ)~v}$b+<;OfMT0tkTGrCwGn<IB)<8>Aa6H_)62DI4JfMU@YqMfxbRS
z^LjWb(N6J1>j&@j24Dl<VwY`%oM^v{<7jL<u2gIqli&71cJL0(7KfG8uwYfS-u~X3
zH<g~{xO42EN{dlf51WwT5D8!1ujlKYfrEeif39gu>B02vq-zDU0zBv8C0-uk%dT;E
z9%|4NNJ_aj03pspKl%X^^yLpodoxdN|6Q<*|9$7m)O8@?)f-GYFJ5N1W7Z(oQM`kV
zKOg5O_hBNwkJs0AXw@h0fX@yHmJ=Qm4(JIN=H~(YH6oXC=I~&1P%{}F@7w#wYL$XF
zM=LtMku)fVefjlD`bUwv$72nKo<&3=FMWI;U#WSCsl5(nLdYxd^YzWscmMc6dDqE$
zxm$6&F<@C)S{n0zm=XZ@pFeFrL<;irbHh<wx$8(wdU|+MQ(1Yrc=QPmtHHlGc}z{e
zdqikQ?J+-g=6x*ry%wC#7%mWKZG<y7uyNx7Rt*>*oNuJJJ9qAZRj#Od_?L|=7%DSq
zMpNU~U3u58nC}1WAqx-x9=nMJ36|XO%>qLnqQTToqJ|;nuSf{^B-{^o($hh^@syS%
zU>?S`Gx|O<y6{ie5L={H(&F>;#qGV<udl;Ih~RvVj{))vy2VZ$a&SvS?avU%WTS;6
z3Dc(57Ah7r|Az%+$$5iQU|f8SRw7iw+|NHoj95MV2JW<f-<^E+=pvS+@OBHZ-!6z8
znb{?NPUmc|-<y!+2t4$VoA-b)ox|Hh*$k@pxR8+0tRH?ex<3e3y!s!-xbz<M035l#
za;Vkg$52dmWHz=f0QruNsY@Zb`>I+ozXv#FedhgbF#^KXarZ3X!A$moCp&8S*M0uz
ziL~W~kBZ#fzT1QVpfs8jyN47<NVq;)mRfXVzZHU=geae$7JXq#x;`i7%)d)g{4hUS
z@GO~n?>SnP1kUFwH((pqBE3)Qxcg@-JqBb_ltV8axV{Ww{B+dWa^%LMbR8KPK_rzL
zw+WI4StKul{(6LDd*u6EgD4Kn<RJ-%LZUh2LvHeJrpz57XzZIk-o8F)ckv?i%Q8Lu
zpQ<S7JzsGo0^GJcbf9_vI>^2qV5mJjJ?X^Thli=ep?1JVOS9Yk6>KjIi!v~X1@jP$
zRPt_?1JEsp*9WGn#0WTcFTH>0_(<0rzUiOxb<E)8Gn>t)-vn7u4C_e+{j3H69-nI6
zo7dyu5Csop6YMZP-Bfybi4v@!9>+7#!E7TeLGQzw5#Vx$LIAC|Vcqc9SR-uCaEx~)
z3-!Wj1Qd0?;%SQaclt+1Muy6)|ABy-OCnB*L!OS65dcxSfyj#G6PsOD!U^S`)2H7U
zb6I|gP<?bdlUI|Li<^7*qgkx7utl7?i*PL9Iw^Sk_$nlbc*qRRk<edRHwRi@WRPS4
z%R(m}_3Z1^Q~(j0u|Ie2VR<<<Eoti5`S*Yq>>sFbi=S4c*;N}d_IC4mttdyx=59Cg
zR;-4iP73u;sudW7R;hkadWQph9~{bK(^412;@LL%23KkZr5*;ul>zf`AU+mlR)E}y
zK4><7S}<ZMd1(maX8xE*8(v1N5zv5cJQ#py(sr$@Ko3-N0%HGsTbdGT^7okQ%dadb
zFnf77^9p0mV;@dkD1h+!yw{fUckQJN)4u>PV?TqSWWahfC}FKoGRK*j8FrJ-HsD^M
z`WkGTo8V}N0SbG}bxs-@M8JdtsNpcYH>|BP@Gp-}cLR6W+Vqe2)zNu{v4sB&;@+f+
zi)h@<V3oZl3;&G+Yw#u8*9yrp;*;@b*0HX3YiT2D`tjLvTDWce=DxTtbMf63Sl)bX
zQ~k62b8L7>S{09VVPXGNSNxChpl!Ov11zV&z(4g~xSk_F^kkff^Wc+o<a@57K}L$1
z8@gpEHoDYrY_z`5_E(g<Sg%~JmrA#om`4)rPBwb_PL*@nR@^nD>D)iT``UDN+L#m3
zaiS{eTdO&@N=g#cYRt$xW<&#uNzV&|XMr-LH;&_WXy~3v<9N=yD(`Q^o|~E(D6)rm
z1RN)r0Q9bbuN@<=+q8wnT={}>xNU$*Pgi&HVkbbXiRq3gCaGlZ=o?W?qO?6b^-cf_
z-IY$txsCA+cxGAEUM_`27-~0iChusmqPRyuLEz1!zfIT$C%MsF4WALRuP~%rgC%^n
ztk=#+8pSuSbula?;V}_{cs#fh9>4gmrNJ-R%hyi2z5J=9)9X|kMTjzDul1w?1P(3!
z_|#6mEFV{L(3TXr0L^$ME8$%vv}3AM2=|QwZNb3Z{S?3!hQg7}hl*VfKgc=P0<;R=
zrKc{nCJ7|sB!y#b#Lm!{414H$bMD9(d_r9ru_RQr*Fp=^OX25v&hJmMT$z(vWHGP1
zx~Jz6u;n_>ZD_$pafaigaGZaO@>o5FW#P-0n<>fclRhLTITYxW$zPOb`IyvyxfFVe
z!!Au;t+6ox#OlV(d*g!#icJK}o?r9GaVZ1d`41tsC8fp;f+k;(?jvHs-@lg_^Njf~
z%$LCJ9@pl*XV)`q0vHB`bBWF3yGNm77$)F<UYOI0!OoV5)Gu>$<epZL!Yc%MU-k6V
z(8Gc`Q(?(O&lF+|OZgAgKj5zCGV(_9<U@>)P?fG=vgzjL{v&RvbsoG6qdF4YGmc*7
zT$91Cgft3xlkX0~X&Svgfl3mY!=h5D0HRFtz6OUO>1Ql-|FqpuTd;^lRZ`|ChL%L=
z>z<XEJ^4H`X`zpUq;p&n?Mcu!>`)?rk%yD16}k#Y)IfovvsYmbC~1*N(L<A(RmO+X
zwwRl#8-Dwi(uJDxpbnyBIQ7!FBS<`D*v_SnUqZP6Zaq6p<Hif1k;KvOA#zD^Kugzt
zej2?<bRw6C9K>M+RT>KY*sMNCflI6{%NN4K!dlm%+UUl8l{=uc)<uH49aQ)?RCXY1
z_x1Zgj9LuiLxoKgc6T7hvA=RsmN65qaI?5`$56$Md~gyrXbGI{3!*vkHcQkt7=pDf
z5<t!!!Le)tj=MRfajx6Hylbox^_^`#lmu<muEWNU_~rB8OCVV|=p+JK{xD&p>FIMb
z?^Jr1@0}pqsN0$XZs6pL1COVn@e-XPmt~Fnb`8r%bRAcGQ6+$#E;zB9MTFRKDY;;a
zM*R3tZ+3qW(DfJ|X?QODATTouFogGaOv~`Q_V$A@v1E3t+HqN8f<XQ*#ofu(pqd-4
zY=cX`wRJMp_+8cw@Ns)7=5UoK+rK=$wzft#<+b=55iAB_xLbW;tMIk0+<n*jN|)5k
zpO`4$wxf0I95~Nyss#37dtfyF4c^VEXFdxbRxm4--xH}&XkT>KI_21fqpncCsZ>tC
z&(+?dJ(7w`80^8@(NSj7S{MfQ%;mPfe5q0RXcxtiX$&e5Z5p`_xx_&p2x_+CyN!IK
zyWc~?^`bP3+XpCumfOT7C28Y#d5)t2IBFwjTV%vDaMN&f<?r8HK})}s^#9KGTfQBo
z@YI9P5YE`JTtsvgGsl+wtlhm^aQDGO8VxRqvM<t{d9`*+rnEdW!*nb-p9gO+Z6ahC
z9^P??ifkbF(FLfn-z`%v-oD3FrBJ9b_poRJ#XEK%b)-uAt-g>rFd_bgO>_L1qxGAP
zjx~t2K;*Y_AqOH*(z1n(u)0XcyzBJ_01eoB(rAm$=-b$6E8ir&{gxQK2|*VwJBf2G
zN>xh_j!#1Z+7i5L{K*fJR*=8yh3gM<^NTLNKk|ff<Pe|kLD8`*Kp7Z#b}xvcGQ(DP
z!`E&1_tgIVX;)hd#B?t|kmtGa_lVG?-1pOc`TMaV5>nubavNNDH01B4$I$!{En^Ol
zszv@~<>M<ryyV2gcfz3qjKXK1x_y*ZiGNTEeuQ%$N4#;7(da#qLpdFc+0ve#$3~O<
zHvVoQl?fRZ$s(5bIMte@B0fL!s7H_rv&4vnWr6Fv2Sdd8x``dve`UD{w023O_0v>Q
zO1D<mNfty<SwE~DaxI)3SAv8t0dDmm&N4A|`rdmlVwv=O_H$!>{=nits*7+rak&A%
zv74G;=ot>Mju_Y?1GEAHEHA0W&X`LV--qk%k{}9h(mb+`dn^H+z|i^AO5^9LnB9_^
zlRU`G{9@T>s^`oaUA6Aa=ie`IlJ1DFbNk3xx0|!X54!7S3|F*%{P?l00JH3)6#{4U
zM~*(Ag;pNENeCN_hw9<l!ef&oW>0Kb&3B%wHsB)xCsqU5$KvxLPA&Qe!jnW9?A>{>
z>y{Q482iUFdT1EZ?DfMm?7+UYAZr<p$jPIrFAYP?O3p_7r9a!s@zCIBnv6T?!ruLd
z$jva1LS5mzIKhAUsV?VJ0}I_-5KWwSaw7HlQ00sgD6B&4>g1KAcThb%SpK?WNN$X1
zlf{pZcUKiZfxN&1+$ujI*TMY@eKA#X=x?I<Qs)g|00YV2ObYy6a|h$3@03B}JC4L#
z${Yzb=mcEa!d76rLDzHhvoKaHV(G(NgZp%Ic;T_ss>St62%}8tAMYP4aCLJF?K?^*
z<~3IZ6D)1j#%iy}fB^P67G5cX(G!Ad8!=*y8GMz|_HhhoMXt7QuL*2Q^_bdFCmhGP
zVjHrr;lJ)~XBRAUfV>FtYBnqew<VN%lDhHb3ntZY7r^XKt5?#w#M;X0JxS6tr$-Sb
z#1sQ=>MCcB-M}l<FWI8%0q4nAuK-;T2*yP$Xc}$f#!J!Xjk{}fc99<7->;e#i4B`W
z@WK4ssk_=27AJU!Lci~C4qcS<=a_tVk}N^ob>tn~+;Ss}Yz`W5hEpP}ZHIIu@sR)c
z?~mH1K~bm&tvYQgJ=DQF=`>cw@Ik%3ycVF$!W<1+Sw+VllYJ(smjNw9ahuGegCxP{
zFZ|ahyZd3k!pMJ)$~+aIULKtXCl4sltYdtA-L!W9j(be()|G@NBTX?#8G1-}*fD7K
zk@kKB39%T5Vurb|<NbR(C}<3O6Ul@c!6&CWU$wJ`wNkC)D@I=lsw1Ynrph$8p9UYk
zwMflSjiVg)5WCXn<<?dgWp4X}^B%O=@BIt?RL{{AYUkrjoCgxaAZu1yp<t0b+lh$~
z=d)c<KH>)=8&L#d-pLBOA{fvH{hc>Y?wth?6Q1IkrnI44-};$9Nc(;`U8w%o?dh<U
z;U{n7J0jX}ya>VW^AX`mScai(^>d9{N$XY>{y?&y;V+w+3;*~T?s2{HrGTBArXp~w
z#;UFYlZdV}?-X!ipGp*+54q^(;j=A0TO0MN_5_6g`j4{6KDD*cIi4VUYYeh-G4kFX
zJ2bf%$%0qP77S<{UZ;-s2-e-c{f+1=e<;My4#GEai%4o03aR1sm2LOPB#_Zi_5J!#
zeTb8yM!E0}^t|v~t$=3fsr1FL_5w!;1m4-B-0mykLB_#D&_uwG-ek#7!#4mG_fmh-
z0XDgPjL~XQgrc+MODUqKQJm~Mf*NuFMKq$^=Ld>(u(r3?E@(wDzF|U<Wg`FS92G8{
zn?b}Ouq`CG^EA0!9Wpp;5to4Opp~A^d?yAYC0zz=G2C#AG;9Fq@SXV#^#ln7O%}((
z;fYu09@e4o&QZn{?)zfGH~joU@5iFLuV4M~<pF;N-dpQAqP0fVb$~hfxb;-31$Pl1
zY3BS~$v7M)5t0;MJS~%esm3La4<c;xVZk&D?C*;0`q(x873HdwtGVvjp?#ZD`0GX8
z7p9cjRj$l0a>b+n4-4QQ1osa3i-JOkQ=6Kvr~Y{wzgxnbU5K4gAt~)T*14S=e6xlA
zP={Z-tAvPvp=e|IGlNg&3n<p61AQ~jRC_pI&wPEHkDhWfkC!`wrU6-qJvXoJ-t`3`
z-tRR-A0{aVWnn)Bu1x@t{Znk#EHyLvHuKv+(Vx{j;UOW&+hkEBD#c14zB!spdndcx
zUgO`7;k|Buv$C=v`076_vrq3%bK$lc-(!f1&+Y$aUSy=^^UwWWC#t&BX_7SGX`mMK
z+B$HaEd5%p*Y;pBlihixE(}ZnHQFN*4?FIb3xrK~PwQvT31Uo2UyAfYs0JbZXa5Xz
z@mxK1&qJ3=wd3;(3)s;J6_}owD3KP{G&rVkZ3g6~s9+LN0Jfo;R^u`_2N1Q3pIf(4
zCCo{i8;hqi%te;cjOya2dY@XS)JwyG5+Tu>TJQ!k=Wkp1tD{Ft{e^hVVuPaW5~@&r
z$8zhXD^Wh?_JKY2)(o0-Z}gU!{uXL$c_d@si7)SOdRp30alvwnFovmv)1@v&I?*tb
zh91S#3r*HT^_V%RNfmv6vkR}W%2rW5NnzIp3JU{A?xOxU66gwxrp}GtE(slNaQiqU
zCe0{lG6Rif?m&wy-^1M=4+F_6{mRd4$C{5eTe!7HMWd-HwXVPXwN(wZV}gP~1(r9P
z<VE)Rj5~BO=KN3lp6~mkV3D#k-76ZX9`YlplXZK#AdjW$v9#&B=3cp&$`t#5h6&FK
zZ5sQKGKB#8cLV1yZ7fXn<1#{eXDLFRKgc?cR`A$1o0?t$!tyM!e>j5f!jHK*c33yR
z`QMWdQ05PIL7RL2p#F?fY3-xjNJjPRYIMd7;<D`q9s0M66x?g#=OxG#e+V4qSWg^y
zc`eO!sQ}bXIuvs)-qsM^RrAevf(G~S@riXk@eY9K(X+pOfT;c$yv@<vR9yT6rvq?v
zxaE~l?$VKBxeSXMK=G`eo@)C!r1{%Wm;>JU@b>600C>c>k@e;7ebaYtc~K7C82Jp<
z1$~YPYwOj~iYe5CKl=-0SR65Xkp^mcte)W#UkI|#gT9HB1619F&}ZrO{Yq#LgB_yy
z@tF^B&W_dh0(%8F15qOHv_Z@||3N-@yGosJ??SWM!W%Jk4-;~+L;0vkyZn`8QN<~o
zQ&K!A7cVxl$(8<5D*<X#`e{faRjpAB8ee2+zEIHNLsLkqIOVINLd!%+xo2VFkKc`r
zi<Hik`}UPsnlWGCNc#S^?P?B712v0GS^op&HxC|s32Erz#9eAr^~rI$04Uqubfg?m
z>{C4Z5cvI*S;S&;1qE#bMp5@ThoM58abKpU#+tWpqJTiW9cn$dv@lUgStW<Ccuyfy
zVNmfzV>~>IS`7K&9*#WUd2ZyOhc6fbPWr3J0>O}0Fir3K@{1_EBpfuUq8dM8Adn17
z)4G{LgWYz?adFfqYQ$X5*?(%h!9)OR@xbHTqo+11c7&>qy$o+~>$b?DCdx+~3NgBb
z3B%$XGd4LE!A=Vw262t@Th?sCTmybxPp^EvRmfFUQxoPz^nSluN?B^3(dZvSFcP9o
zc=oQpfB&%;gE^`%aez-DYVPkZMF=zBsDv(EB7MZd9TMlO0wtajbpkgsL~5$5X*@_0
zgpVH|>Fw<u8`H5g+_NW?TgORY;>bl6lc(n;<#!Row=SeMSDl~p@$d*fAwD;H{(NLX
zK}uQKY2k@e=O6IpJ98d*`}Qritg(;wwg6^)pmgbb_E_y4*=9qbO6Li?joc>Y!rakV
z$#RSf<~(__KT1eK`fhAL(sD{lUVo!aX53%l^tg)QOy3TfiJxP80rVXc7YA&ZEbYdk
zOe<#L-$myHOZs5Cf46dZo1RC5s5oA3Ang0?VtM~nIJSk<ls^??D(8%B@8VI-jSVKx
zaf_}<4iA0j>=8O3um4znDq14qGzBd!N8vlDy_v8c5Rkn#_+RK$JLNt_EVO~!q=Sif
z$%!hgxDgd1KNhj;AQ{K@02e7v0G;SeHKMXF;la5SL!_5VUhGkvQ7!vV{T6rpe?Lwd
zn|N%OqP)Sj<kRxX60uYNsT$iEy_tCcqY_`1n_L7&CSI7BIehToi=|^gGy8j%Xir7G
zW5cftp<cl2Xd2mp-h%cMCp+0U9IRWYZNsR3{rt(2J4J`u%O8`=xFq(`W;ZayW-#3L
z-hb&)-0DP29+R_8{(hR8yKjN_&4obl3Wh%5|6_)-I*uT2t@{fN87dJr*tac2E=GEV
zFXV8%xH2;{NA}+veD*>dZ_xDIPuLr)qnN~@J)Wm^?Ba=>xoyO_mI3wb79+ZCT8+GT
z^QKfKRQvxetcFTPp+C%J)(0kjtXNE3JapgdP1gD6H~w8NHg$7#JBC8B8J>E_bLA!x
zWPl4^9}c@<4AE-8xBx2xgWFdex)T7h+`rX+h<EK!8l&qi3d;Yqd$ckaIk>sYCH$6>
zFf4%T<+!zMI&d@O`2PD)Erj><*tVI?`vvXl&#?{Y>D>vN&51lZLtst-giI8Y(RIR$
zhf8)bX!UmvETbXeM<LXM&S~#~gOFdLkqF0|hY+Y4#XPoq_?f4mQSf8XVi9mwp>&V}
z(gwe!|GuS7<!8^H0VUfR#Ptc$NfkJUC!VlJP^00a<pH%K)~-CJJo^>Jcn9m@$a&ap
zn^!&p{t;^58WQ2_L9EJ9>8LRCpM{=Kf`cOm#dzd*fqNpBY=;jwcuspGs!7_-B4~5f
z`RAu*j(rf*?*@l;au||x^c{HL)s>aEoiPz%Dn`p0_`l^v5PN8FTZM-y)E70HoiZ(A
z-9xywQD7lWrOK|Y6N>gC`6G&f(aqn#I|Xga*BWv;mVCjOw7p0#G^t-FCo!LYZtV{a
zaLma7_QQz;A*V6$10q0Hem)d~1TU{uabTIM;FrZkaR;knwLWZr^~#c8UNT|VY(M-J
zP{_Ib-1Gc-`4PVPh0;?G?;cTC*`(OFFXT&u$F~nqEB;&fD1&}Km6M81E{;$CvhuzN
z4ww;mc}6`TM{{9HFPTF@+#mGxsiNbtcR%4Yxu~g)=Y{Z%kpB#9t1d30uLB|<PRd2I
z_ctwW5evN2s~DpqNzXv=%JkeEENVEyEsH(8y#Y4eZfe?L8!_1n0IB5Z4x^Q=c;Zgs
z7eMLps2RKk%tMsd0b`s%^`YYY&@<TliP@7ZkQ%?<=K`(?AFMEt7t+1PZ}sdQek;%f
zZYmA6ml#@<I(C*9Ya?{E{DtAub2&g!Ia1f@=Owf?C6#aV5UHUJz_<mNx8VGsMC32w
zMAr!?)P0r3%D2P#yI$Sf8m@5MKYQCpt^7O>D)56VoZ|5!CUkos{U3kkVT|)3COZ0*
zD>@!~q@tlvrTQvJ@0Q^RP!CU^p`7#XtFNy!Pd>rT!J|!2^$pgLc|h;;b?+lmrywjW
z%w;=pixjHcw$9G)FfzXtrx-;qkf1igwfy@l-7W5`$I)~~&?0RFcSH=Eyf=Dt43|T3
z<`3Yx%%(BY8U-K)B_*?h{|LnQm?W*jE?$bmI7h4S6_~vvbYmuCrwbkDQ=po7rqGWV
z)m>%4D+rnlp4uDE2}y*K$R8X#g;junwD|XrPIrt0QzlL<f_8cVkQIL_+^vf`-~BJT
zq{&{eR_*+34ZDF8Z%uT(>e_jLRdyce8YeHtj{Q-bh|BI44MC}ctyPH~%W2x;U{QB<
zaJtvF#Hwxr8AUjhDr##H^DzoH3bhiYgt%kkF8li@pERq3%8+ZdhC%()pGYZJTDaW_
zLg=sa*iT|ZhPi5vh-3z#duPh5KxG{TAZ}SPIS%}vLBI&e2-n3N;O`P?Wtc4afFHon
zgGwETKib}RLpJ%^MDKoezQDbE!?6_5#|-{|^#BGiD$@3pP;cA+I{M}D^KHeuN1nIw
z9ynkiW<Y}sGA~*C(sc2H%cl!2A9E7U09k*@``@SN?6EOc_J{23ncGwuTR*o6{D#WG
zf37Q($-Ujm@@(RJ#`J3=@U*7e?;lTIKCe$n*1vzm|F<$`it-xOqQ0YOOG?WVHrx@n
zgO+WezM=4?)2sUV=6^TK_fb-^$*opOILaZwlt(IP%;SsEy<hKg5-U9oWojk3H10-5
zMt;EZgUMrZ`@eIqFpghfr49E{@I$L>(_BW@;b1agVp(v}Fa={STg&~uF7`c#2J@;F
z1kLw4r-<I36yjhWsl4EBA-~^jxUYFr;zy>>`sAB*TiOSKicySPUw`~Sd>$j&y^g4Q
zXz(0o`#OI9{D~?`=Yrc*y_oq7Zn%8?(POj%?w>S;-{m*3o__4}Bi<tWb(z!KnVE}g
zOT`+oHb#X>>dtF~4J`@wjT57RSR?KL@CP=27Mhk>@eH=YCywvqF?<tOuUtuB_zYh0
z1AqE&!p4!VaToVrE)_CO8<!IZVO_)CbNx7kyZcdG3y{PmA9tYdDti6q&GxFjp_SDq
zG(-rv8{8#@V~B-~?Qyy~XGYq@DY!OF{qPo``Y<w*_u(ttUlXgVbUAHrzy`?NeCvjK
zVtM%@m7;EPPZ;7qg@?Ol#y{r1;>!V)9UdP3YB%}KVd_JNK2}~3En1~umE{%|)@_Y$
zpvb@Yi2G6f+wyV`#VtwW&o`GEqX&wh$9-SWdlC-R3uE;u4$Vo8Y8o$fGma|@ZW{ef
z@u?#4M_d6f9rr7?Y4hqb*i?;Jf)OF_z#(bL(HNIL^CQUx1qHeS92yTx4kR62xM$j{
z-KU(RxGARBRK7k}EDFWJ^6)fqE3&cWYbOs>A7o*{DSUjZI+-G=k;7IE;V-B=TlX^x
z&%@wq@tcP6XG*@o`jsxqjAPTa5KiHe`aPW;bOMryj1$d0kwum!RTtlj+c#;iT@c~r
zeFPkWwvwm+vBn&X3@|anyKbx<P@$jQ)E5LfKl;OuW!5)F8M|vCS7H)XNKhPGih?ey
zG0)Vz5u>Svhd6UgGUYirRkC{Cnvt*zE!I(VjdI7HIB~+!|GK56<rL2p=q$%v|Cx9y
z8-b7TqhTO<q7i8gE&ItE4Qwy|4-4@9t(YvtmsQSX`;vI9Z2W3YRCzcMr9fEC#qp|j
z1Jqk)W~Q5K36Hxbdr~$KM!nJW-3PjZaXAp?EAjM(-yf;I^7SEv^J|Ya*9~b^PcP&1
zC~nO6JIFkaPuB7Zz~ZmYp6IZiTpTpB=jJM^)Xi9Rdn{jU%i(w36wk=0Yz`PJ*4n+H
z%UYM*2Fo!lyFC#_qqQJT`#Ues9OcH=$FF&wwOKfMwD$ZOw!NUAE^V#yB*ciP{O+*M
z&YVr%mCN#ri;L)vkBCo10h9|^8N3(~k2K1IQZAF|8NK?u=DL5))Q*4edb-&ILPhM-
z(7bKXmRgo}U*Z-1@gG`N*E|F`I?j@XkjG`NuF5_4`31v--eU@{_V@B7J;?(DF+V?F
z$bOQ8dM8O-BdA^VKzu{`rJKcjmEav-s(gE$^`!UeY(ci;EgZ($0a|_MNH;RX?Zaw)
z&Ikwsm9iT4og0`1c>8!w8&vgttRf?H&w6^NM6Hfkv+D|MWkHv2lvxbt2K{W(2G{I4
zW2qAIB6(P#yzKquQL$t%>+=I3)p_8D>UR(G*g9(!8cRGf$Wg&8mqm@RIJLHLRb{37
zXhrBzYVGrK{>RH}*1m=xDH1XII#60VK*mEM7!jWJ9V4e9ld5~Vq+8p#VEU2uHhnQ!
zs{u;uNX&TE*Qe*_hu)eG_T0CFq|4@-On~8;(m4^YrzrOXBF<Fo0i+c-FYftWpN(w_
z$4c@G1#CmODg7o=w{=(5f|MB<x3}-VM(#%K@_{ma+4Q*6z0PAa1=<Wx@P+bS`qbd}
z3g7%ntAbbflLD_C`>pzwLS%=~F*D~hY<eY(`xOwK1{^ZM_X$cVZM`afY^HT)`ER;#
z83^0%A?Zwpz^O}LNuCHq^*y+I?P!!ioSQ?T%FM6q&?jW<LiEC^`a5oB0Km~+LLx`-
z+~~Cg2kt|K9W9_@q_J<oY|w^4`?37vNhJ~i9=%;@-Tb{a-3At3%Dz+AS_h=hJ&_IL
z=SKRp3f}Y2aP*+?Nc2j5yPn6hmDO(q1{Brco3xc550tYDMc@^-fI|Q&SkTa=nPwZE
z&~3Jq`ks&V3MGMd6)NVTLPOiY?XA4UZ_V$sWiqp{lX<@Szs(qjY0e0;R<{gkDUpoz
z<)@8PU*4}ok)tAWi)*+>jh^UwLYK0~_nW^zo1-&}NjIm1^5K(ddJg>5OQS3#H)V+U
z1vDZ^plZQ!l~)1KaRv<yVh&EQe<>=s&;cz9h6C2^IJ2=R`L$A_6E4EKS{fW;U;bF%
zoGE7y$P2Jx1()K*5DK^dbI^8Mj;bQk2tLFr5(YrFuNZV<&7%1E4jl=iPIWE?l$4hC
zS(wVo7pRh724HYVe*G0Lo8e-!-r?bY1=)e#SFWtCev7p!)gN29f-IPC^YbO2OAF4u
zxW&fiNHhiZnxg^+nXI|i&3BtSs%hhAeQ<DZ)0z|P*%shOQ}{Ck^l|2K5AZUUTJ|a4
zvwd)T3xaW(15TiXn1Fv{O>N;pKc}V!@zyX!bl{*E@!HpXrgzD0?2{GJXnCkW>AdXd
zxcupv){f85U@18l#`DzAH|cb7-gd>rw{NKHcuyGAvhTD*ntLt@iG!%Ow>J(U2`MSJ
zp%OnF`)IrCTt|(xY=O$B%Wn*0d!H%%GKvfckPL+1ZS*{|11BSx!Ejz2Ti?UP8$b8(
zx-v_05&@Ke@cXjMW9!*L3dG)~(g_iIea(h?7C#c--s+n@!D{p({p3Fx0V>#XRiUYZ
zxknr~1hc0jt~?pKP=UkldTrLPrVRqvf#%HwU%DuLMOG_dPgDx4n(|-%yb{#_9QeSd
zk#zRcx5Z2!TG12zfMJqy6*hnG(z;1&^(t9N)B{J@XO{}SsQCEz$aJ5Wn82w{M^-*3
zb@ir<?zW)B{Z!KAJo}FPHWQ|h+E+?GUiM0tHn(<VWU?j=Bd3^s+fzeb9m;wqQ!`xM
zfB%XGa2T*(AR{LimzGZYaMyolV3Bc+5&T6fVIi1VCb1Y((rkLa?~HGP!#~*+hQQ?+
zL(DiMPJp}Zl$u&Wc7Go&H8uMgfi1d^CUY?^*G@_guJ~1F+475t8T2?7eeV43xMAWR
z&J}DLkT!o=UX=du;f(opNl~3Z+lqc&U0sRejSVceXY~SpNc>PMa~Sq1cbc^os4}k%
z({_3_N2va`GJagv%8{PrrfZLcR)zXntm0t$n^bN?8?7e)qU=Kn^XgJXWxd5Kn<_=0
ze}5lb*R6RgdZRXLSobz(=Bx5Yf*S?OBz0uL)Ln~{>F-BQdEiEgl*ZMMV8?DV!jrY+
zgCrz3J8AX>XXxEJXOi@ta`WEIAy$#tgU62bo5b?(A|X*y|E)~k^@5vb_Oe&L9&OmS
zZ*;nPwu@pXNJ!#56cl2Q+BQAnwsz+&y%gf)z~Uf;ciUBzCtbKGS(uQ?Uazu)gv4Ao
z!N#9fYN>HavdgrPdglov*mIM{((6UdM-Df)Gm?;e$QxRgxXQD0OmbE?Bi`9$jzMGa
zqoIM0f7HGZrMt_mX%Ho#L_7Itd}+4ecJe13?=B%*TSx&#UY%ok&FLZ%ue8eO(ZwIf
z)zR6Rf9x;nl=$$U&PK=O%Eljx3JStSKxXSDTAKd3H85^CHjQlhaP=mNsIZL(DGGd(
zNAI?Rr8%n`N1()8R(ec)pMCqAyKyu=F5@nYx+M{3nt5fSoeb2iLHHkxFPqkaPBE{V
ziN$3sAllZ}_ANWe`&A2?8&C}!FOTd`rvE3SGmgfniLhP_;q)V^VDHOyJ4lqiFa74<
zVvGuz<H#ld%qAG3^wSI{brH3oR<Hr9W)aLOI|w>4F3^kEqC&s9V;62w*h{i9G4VOd
zk~tX_;Z1eIcgP`4k#LrH`9LWb_~(spk))tjw_cdy=I?LlP3L4We0%0bO=TsZHp6fp
z@6Pu2Xx5WuPH#To$U!8T{{1C@0fWWE4Y0>Lu)Q`-J`2gE)etv7|3v^cxf((FSRJ}k
z^YbHlT3bl#>EYTE;A!AF<XeqLMC<teu;{us){fOB0Pp$Qb=~?!j6JGrGR$l`UK5x&
z1S6{*aO%`4%~#mT+`rH=xxIU!kMF<P@6SDWD0t1hvr*q7Z1`Wez}Fp~AO;9)=})gB
z3gCYzh+Y*U)CX~@Z`;}emL`AMJ`2OFlbp}b%~-{^oAZ^uyr(zeSFDOs_}&@3$S(wj
zU`~qg`Nl4khEQT~(gBH>&W%+tAR%e7<jj|A<DMN@mXM&RNESZf0CV-e*RP|62s_+~
zboFEoWwA!&BQKVm)DwR+#(qQHiyEMaJJ4&m#JQhWdqTk95-VNU`Kd}MIbIz9oFNHR
zCFepf8wJZi%2&|H5HnsId72|(Rb<o=ZPmi7pkQ-76{dw9ky%T~IQxeti`z4BWzY<`
zA7pMypoK81$8LO2!1%-G&rQH@XAet|laN%TB`w*Uee<ddyG7yzwRZ9sh%SISL4Iyy
zV*_xg^66891j;QVDie(N!xIvbj^OBn<&aVkay=vU?Zz)EVIU#0!uet7Uwc}<yvR<1
zep_oZ<9Pt2Gu@1WM~r}T6j+A59VklVNfEqhs^w;|-6~=mctSQa0-8~xft^Fl9&&nv
zz2uC-dG{z*ST!Yle#-I8N*{dw7tvk<%wK-|IK;rP^0R(xP&76#9NH3Ik>Z=&N&+U@
zrjs{#uyBNv?+0Ij8WFqgv0<(S)Nk-3nbJCU?h9YGf5}}bDXIALYOb#Hc!D5ELCK#%
zR+N_sy3jw<+yChD0{48uaH&K}OiYXk_khyb{K(p<sHg)No;%%YgRDr$v$T&c(`>Cb
z7N=)kdZ+qrSt#W3HNlW4Eg$Q(A+1+jpHZDkrbn1f(~0#zy^i=bL+<|;7wfLgUd2@i
z;4niXcP9x6JDsBidvsJ3IM?Q4lf^j*H9nljXru_Vtj15y0zO2N^3h!=p%QOG_2XsD
zE^PSF7Z9!SU-%G=5{JjYP9Y=?A5=m@BB3u>&LQdksI-uf4#clpvyL>~79=7!ipX>5
z|6)9#loH7|e5LzidVFM-9#N8$S5#LgOFjcDhmC<|2VIDH-x&NVlMi6fs}$-h_vSb0
z3R`;xs3@5wN^tk~S@t<Pxtz}049Hd2Bl2!2-SVcsHzP^JKbKp_kOU{Qmc&9XJaF7y
zT{A-Dt#u$aor=GzEpSL(Lu1y~g8)m2zCuc~LIY)1U<FOkb<}&i!37jMCJ6mCQ&{8b
z>NAwK#cighL+CvWNGR|DzQX0!t1UZF_IPO`$swe&eg8hUVC@Dz8n8rD!y;<HL#(VK
z)mu<l2#KO?aH3>cc7|GzXBGfsF;G1G#L2+TcFdph#NR!*xR$474Ci^<2TH;JJ|8;n
zw?xle?K(=kr|T~!046U{-t|+z-0{ki3$=}{Z~nWK1q0>3iO#{lA#u@$%r+_-YM<%a
zm$6&<4KRKF3iroDNOW-WQX<rBu71<?TE+SyBa5VG06^~U<aB*~`92eA>&#3l3j3nA
zva)<qiuF@Ft_rN}%6w~krl^6ZUZxTLAK&Jt)K}mrgc)FYN4~w3^TQO|e?Pi<DG6@l
z;Eld>$3UM7%A8i2@#q_b&AP_MM%fot&WilbI*d||N6CEWMk8FpjX09RWozIXv1AZ_
z(ra#{Dd1#xjPpuH-M0OXC*30>nl@z_bvHi=&iYbt?Wv2$BHyenqXhh=*XU4~z&z<0
zb*-?Oeb1=sqdl!Ep|tvwH<l(NqIATo)tclZqoR)C{0aznaCR1OHqdG~pu3l^V7qz!
zT|qYG)vH&vhrU8YJUI<Zy2%SBCPZ^hU@=bT6F!r}&Zql=u~({oc-Pou(8SElwVif@
zNiX!ZdhCm8nuVnriYDdDbZ$Qxx0H=e$dkGk%iCqDtEV>=baW@jRUtpWS5a2Vm!U-e
z8pZUaunqVBWR3#`W|PP(!gcqDP*R5Chk<UL$&XA)Bf)4gPb_9ga6z7xPHI&Fas~C3
zERHFNhfPY?w;5Cf47fK=!6lOZVCq5E0Du2$F_4olEidc(h#Zhu?WXOTMQT+(ch=k8
z%yo;Zms{&XyG&tyc>8uXAOQiT%k*q)&KETN_<Z2;z5M4-(7I%8mv-a-VF60r+S1ZP
z9Z{Y_Mf05f3MyJ^Ww=zKrL+W^TX11d&^8~UMKnkUBn!F9;T%tj1=<YN5FDjG_+qcG
z+%Yz6@bx%(vK|$A*Y9^Z*+s+jF_Do#RK#%$oK~dneEBj{{)XwlDjbTl19UeJ>os|c
zAJY+5=GWXb>Q1UOk1OrE)c5WkyRdL;PvjGU_>W!tEp0w8ahk>H)YaD`20;FYgdLQ>
z4m9KyF|RjIH=_N4xdYIA>za97sBonLwOu2?SBwcXJXN%i(${9Fs~zEc^Spc)>2k3_
z4$;O24MHTt#=jY30S;U!-=V!rIM82L{eWH<Ctb-6S?4|<%u<ub>1gQ*D=2XA@~Xd=
zrlX_lx!n~u8B|`NziTR}ZCT%&<m$cD)DetNqB$1qY6KPD&>$D!&xSkMz(>LE(bMwy
z*ngpQZUNr*)U26n3}JWfXhJ^M^i)H7`qvTI%RFcxT{$({)z$Uo%e&Weg3{8TKYy0~
zb_|!7OWkRHTf;<BParGQ_V%ivPPhKNwvCC6&CbkR`Ee~d!hO=AwY3##?0>#j^U-no
z#7V+Y(ZS8l*)jRP?XwHhKH_n1jf6uQd^&`vil<^`Bn>pQ;geL#t`CndSiKpAduxql
zO{Qp8TxQXcv}`#t_#{k?7*1ZZv!gLO1RSCJljOcHrQc5Ku)j<+a7Z|{BkoO?#sxq3
zun@Tvmz@0kI*b1AQ3odJjr@#bRmrGgp_S=E6iJc5_Ap5uMKCq)H0~o0rtGWy^X}fc
zbAXEK-uWi~F4LPCN=*%7($eU&l3Ur$;&)sX+R1^k_q2lUA3qk7I0}z{-Z+#=-tiOv
zGYQE>db||=l8jW^NBldB8vAbI-(w~ObCvEg9m%F<WMpJ!W}u@>=Q?^J``Wit_V|i1
zp`xmKxr>y9<o6IY3U(1;VNRr^_w@7)4RsC-aBF<}ZDDlj+BMx%rzRmUTUb~qDG{c}
z%QjH#R$<?JgCK{R=ea@7W@qP#*+$`_GmU)d)zwp#7dWuoYHEg1d60ZQ{+46+Rly<(
zZ5CkzcK5g1x7QusIBw-WeCTNT-%EMmr8Kl*p+ZjnHu0rt_nL!{gXP3G&z8|x{PDU2
z=rrP0RNL^IZEK``aXlilHCi7YY(X>czK)EX<q_&O?Wze04HdwT`&JUGdwOPOM?1T$
zp%G99^hd2Q<RyFb=;`K0y>xGYktP!JXiae`$|FY0g6>&eGE%$^D>^Y-;f6lgkGVpm
zLhZk|F1(Wi<$rs7T3TA3tP5EB+k1nE5PniF<g<znT^F>&Ang46wQU0{vgg$ZNY_+x
z+vWk`|NkrSaC7H*g_AKcr65xsLoLUr3ZV!@Ag2*2vbn3l!$1@#dy;AEcU$a$$^<Ig
z>nqn^b{E~LzhPb-hf$v`?c@gNPDR>Kz7p+abM3!^exy1mc4c#w%q6=wYfsUZ|L+&!
zeZ6yomw;dd0&Y0p5efMVmt%HOf?GF@j{%lLmm|KM%f^k@t9R}p&yy8|yPJfB5z*2O
zgw`0CPq<TnE7pyS>|5RXmk3Y<=h|N!wt*W9J`kQq#Kxv%)Bb5~YXg0D+0n83>QuJG
z6sA2@R8<ERfP0sJ=mpZi<3<FKz=riT*|j}Klae=YOzeMZl-YMnJ_d1u^O9L|CJ_%I
z8?~&(dHZkC(b2Eph@chsMyS=635uW-MT`W(Mgth8)7b=7SiD`^(}=HN_8(VnLqh{N
z2o8OSPy1)-@X*~^gQ?%~?+sU(yP2D7@9R6^Mxwak`jl9`U+7qxl4m-)nXS`-kTEV>
zT4rfUNn!JfQ?gq#ItBXp!wp{MhxYmK8Inxy28Ri-9*&Z8u-e^A!GfG8kFi2zj=(bN
zacxQ52h0!rvuXZ+{}jW%soVDT-mDO@2~sip7FlNR@D&0ubQ_O`NzkMav>pE9;OO<r
zMK8s@hp18>Z{Ak4^%w6OA6Lu_L>aug?0j=~*Xru(wRJq77R!_~!SI<l6U!zK61+yv
z;T#0NJwnJaUhm)r(iM5<j&CTNe?S1x??)tcI;K|lD#3#y<U;7|yBu^}pa6?)o3kz_
z#l%$8uRG*`hpR3xF9MEkF?^f>h_R^UP%a{B(Pe5C=m*SNNiyIoFn@Wrn+5dOpWjz{
zu|f~LYRNpwEZ-u09|_i<nuBav?=9U*5(wN5$b#Uq^9II<du)Ri5Y$qU;1{?)JB@Lc
zGf!;vc6_F#qx&{9Lu~Y`coF-4#@F{^MJKMt!d<Ay2Bm<G8L<|gDSlK1`>s=;>z2HY
z6DU^)yw0CL|J;Agh>k81961({jOz${X&_>a32PU8&Yn$8PEMAM2_!D$co8GK-``GC
zH=}w$J%4Ep^+am{k1<Eo)KQG3gEt;Es)02JK@z*OK_09%4Nbf@Bfr4|rJhMfR@Sjn
z%YPX1@&7mW4>c)jX?KVf*0&0s#WEFEx@)=^afUeXk&%%R2>Rgh8CX~zeOa+;y#DR)
zf|)RlV|(QVW%t$BNl%{=Gb0|krszvSqZAVnVR-e<Vd{No5+iXl0wYE-3}xHE@GvnQ
zXReU>m=m!@H4&)AKpDngRApYlIS*DPJPUNZ{^|2iWxW{r3OEs7b25m~@ZlgWt;G3u
zrk_6@Sr2ERe88Y%^HlqtJ9psr32e^OL*P9kXf<LtCk>xh)kmjEI6giA>?l7&eMd!B
zyU5xx`a_3`8)#q&xR-LX0PW;bzAjoNtSYOAr#yHPyKr94?A65C{2Vobe%kW4<=JK&
zN0;YEv_Re8y-WDV1yC)VCy-xscJO=8`(>H6>>vVgVj7-T7!366&Dy2y6n9R*I{*6R
zw{@N=*EAHekoVD@a7LiOZ}lCfKUnp%cJrS&^?fhKwm#$?o5RFG&!sze_N8PyIepje
z)2re;y;%dv9<aYnY%nORO+~MjUtdWRZ8|tRF@bEeE<DD|<4vkE^_TAz8T0Mkvqy{9
ze_c|1Navv?SW<w>NIen~6MJxJ`10H`jA*Q(s{*_XtoJG;QP^yiwY5MDN}>gg^6nha
ze9tu{NglU?IMd0&)p_$fOOMW4T2dT7ehyf&B4L$_kB^V%5AmD%-y)!*C56D>6sD3|
ziA`)WKchfVj6*^Gq?sVE<ht>93@p_0%Pq5XA&vg=$ykNC;R1ab9zI-RuxK`W91JOq
zvC*7vkhj?|E%ubx)vE?q@8~KxPoGP;)+yMdImOeRA|4-ah~Zgi5I_*8;pm#}yKIz}
zXp!wNmnq>`q1)f!SBay8ur>{!SB3Or(=z({y->jbYtvTFMF_l$Vz-m?$kVR?r}L##
z6@v)w&6)fWWv=E_Jmss0q_IJOAM2Pe_2ox_D1}7sn3x!B3E<LN6dD@3y!Kw>$SZxn
zu4RD&!<#a#Jw2R9kN)gVY?1SG?N?+!_A%kZgFNM9$BaiA_W&*A!d+pc41vq!pFBCx
zX1&wdRFM%8@gLqtGgmsEdz+!gqy6jvi==_VBklS4)_DJcq<a{m?yk+yJ|A)3I7{xY
z(TzC6fDLckYM0vttL^%dfg76YE~Z8a3I1mqe9I|WEg1RZY@4l3ORmi(h*(Nj*VZO?
zqN=xjcBSLhD^KKML*Rs@ao4fu_x)X0zlNLRKwDZCE_e%q;sqF&fXzh`o}ybmf9FG6
zTG(Z3698<WMANHb$o7|bph+{W8h)2m&R5s_?g5|KK2z%$Y+~);pF^ef74?Fq!Z4jJ
z#?E#)>9X)a1l0>ZqfvswJ@?V26yXo;?Wer2!lMGxiabng+G3`_d!qe57T6RZC0vtt
z?}i#}y7Yarrv2(51#>m~OP4H5)66nu2M7OFG4fd!Sn`Mm5&9rKIBRZBSbRzDxBf=P
zI4=>wwsVYIe|rBQ#|UOzD;ObyZ|GS!z)}whr|&TaZ5M#;Jt%+u4%$cmf%r2>?Tb9{
z4E+E6hy_csD{nC+G0U%S%teLNX8PPyj2tluPJWrU%5!{Wy7U-RgQX1vdEESM0J1g?
zC0u`yp8f+R%v5L~_!@BC#lLKzjdlMOw9Br-JR{?9(5jtF1Z~8>;iD#n4`O3`fi-R{
z`@sQ`Y)<wSF^ZCCbBd5;Y)=Fx#&sK&*{DC-QE_LJp|Yw9PF&6g2AU=&*B;sWNJe#C
z@A=Rp`zr0#`YTg@;>l{X>xz$PqtlyCd~e0ujc{`K_~C=5h3~IMg{3OJ^zTrLBnDF)
zs_B-5kvWUps=TV|Z3dyCVtGJ*^B;X+OXkvY^D}HEw4_s-s;<A|D{|i^v;hT-GjVcu
z#>j)p3cZvy5}&L&IXQ#21By1Oin-Mvq=r)kfXP5i$PeVP{QT&HIZV%lTQE?7+q$`R
zEp4NfwNBC2VFiB(j@GeHk^(Ui!FJ?GwyO~L21a(lFD+oee0911ACKQrn+)HUJpWC?
z)<4Ik(Tz4LB$ExRl3(nz>|y1x*1Bh$pg<~Y{rtnrm$jbLH3@G3?A3TLIC%wRDN=3y
zc+v>A9Ai41tUWGypBQH6%g_g6>ta?mOX|{fod|vD6I&g#rdm9X9HTdYD#Zy*&9(#w
zxD2jm>u7ra82a4VX<>7)!g=Ys0d4G6@}cqW1hsra@61Wh6-Tagu9JCYPu}7qTwm@A
z+W6a?JkOU{Ob!CtG(j*Jcb@aub2osZ$?aw%pTWRmp{mKe(22jZ-LJ3M^9u>K5UD4b
zKG73x7UP-CEJ}a<=@X}%++vcToy+>RqpWd%kg;!%`8AYk2ul8p+b&7StOjBXOqrT}
z91o~<2dD+d%vwn1vIE!Gw*HML9=PxNIa+s@18Y%fcd-Q;)dD_VUTF;n6+b4p7ZK5e
z;lRTJ<Ro2L*OzC&K{c)YN$CnYYh((A-aY?cqW617M-9pKLie8pDyGDn=#uJiteZ?i
zxJXGN`lpTd(W7eIltqo*+r#UgvpNNPljV}7FdB8+V)V!R-2V5ud^};yhYtOyg*%6D
zU*3`YgFK<iemFvT2P^Za&+6X#1Py*(qjs`(^Hz=KtvLVdFw92=BEe`lfxuI%*(G4!
zr>0esc0Br!%+%Y=8$6vq`2G(I08Xc0!?2`>8O^^H$Iayh#*6sQ^l);Me;7Gi^it?d
z*}UKM+pVON+S4y~Wn;=DU~NjQI#nRK1#!As_fMB<X*27YYH7)7yq-_7{jPP&<e#p(
zcZxqJ0K?qp-9`_SLU_|N2opvLPaf}QIxQ!qK4euYHrusdNnNYnHSGf}D{JY;Zosce
z6e;p0icu!}F*R29vpZJdx|#Q#ge?bxofFzNcn<f#6cNc)4bJ_H&he6Gfroa7OKAJ~
zAzbh0NV#f7Cq#BVqQt>Fm(~MhWOdii%#9uC(Rn#Ic;>@k_hc#ORK3ZC_~mEUW-Fkp
z;BDMXNTBC4Km7qLWr<}Es8rOlM5dT~hKgANmT`(rgzM3}O|XL2TAgpos7fSnn(O|Z
zrbW3;Nk)ogh>^9Q$wI@YGmc~bROWSYbrd@!;(*g$neB?F1F^3;lMwPiU5aOs^W)mF
ziU-%O8)y~YiHyAJDU`2}yqaTL#-<qfaQr9(O$3k8L6co}FK(?3?&1oqtW3Nv{~Du9
zTGX;ZgsasqHb(l14-)udGncvcCl^5NWmJ%|9w}@RBff6=b=KVb-_J(l0s_pVPx#H;
zjZT#0PnL<WLGhxwcA7Es?cW|2Q~^pc7qpEC5KrGzm&%#FOLImw#eY0=p6;}4y^dh{
zbG>^i*?CsX$%F};M4Z?qGrzXEM|VSNNB9=YuwzHC<E!Vde(~JM`j)sB9(|W3+4tUq
zOzSL6+C!glhK;rjI5(HLE^D#?w+Hs=<quWNh|`w$n3&x76~qpQ171dMpncC!=o86K
z5ZH)B|Gl!JC;bZD9;6BDvjwW^u>=XpWj`>9#Q2)?5#A{5(#5}NcwLY1ht)RDyFYcX
zz=w4>cp7-7b?w(wPZs$Bi@dLRdilpFP*z`+y>v;){a4SCpij-$z1+zT3h+S~{01)c
zFei+p_W((pwX|e2qH1DNb^Xel{U7s5^4TOFbF;?gUK*y*&K(%%-Vo4Y>R$d^mNcM0
zVVB4l@p@3B{}BcEseCIsOUrbWP&%ne>p9$$dg-)J#xQhvB4B+U5z%0vbprGkj<HsR
zJ$kfl%%4~wVD^zcM)gkLsC8$j`g6N(XQR^iGulBO>o#Bci%ong6xK-XmS=L*BIy+Z
zH<xS2Pp1TwIVhT6rOZj%n>ZJe$OG1>?}5o$o?*9%=QLpml~k|7A?VW*q3sc|ZEA1h
zS`4E`^@(FQu$dqWi^fj<tkr)r@3}^Wjb0YpG<HHvMp(7aNut9yilP#G2ZQdPKKsF>
z>gTo%K{N0LM!k~VSpl*`pfc9d(gNDQDD+!ASF`W$FLszDhRIF(kR-m@t{k+kAOmz(
z+<#%}2Y&J@6><LUN5mfZq#RwC8z@>NS1X8K{xWHzsbHhv`=$6&o!_6D63Ys20Ta!b
zGR=4<D>AE{>8_b_xI#(|a$JqJDd#%QVLCETfknEcm`x!qT9{Ko0YYVqBY`9OLu)O;
zTy}O}`_32`5Cv9!HEy2Wk?TdmXN<J|{P{CH*2aaAt<g&M75+C&+Ce^Rt8#r5ivBZ+
zia`q9fwRJ=BU{#G!sGOpw4D-d6O;7OgMju0Yq`Do=LpY6_v0DPj+QT9F6bq8wFnK9
zidr52H=X^;n3YEv^D^VV#+%`>Qp%-42~!3ow-ok&-(ruUy7Bt;nKj}9ObVN?uUxG#
z$I9i7#cA?*0gynz>Tg0v)U=~^L`6j_zQ>fmf@d0VI`D4km_d2|#A47g(?&1`_y-(2
zE<+^Up9a*51j%`&C?%d))~X2_Ch*`TVQ2UPEo7nne#X~9+fDjbRv8$rudA!Oe#qs%
z#31d%yO)n{bw)3rb9IFdClu4S>l=#kkB8Cj;Ba7}p(z??V`j!aWYan+K;@zb%c=&{
z8=s%rS%#9c!3%49VcZk4S12*Kmq5>WyiWb)aD1x4vSuDLOHJI}si_CavW?=B*tnCs
zaVgUE4>aDO%A>zW;Kc=W%E`R;a%D*=cQ+2d`e*ba2JG1hJ7#~C!IuNXf)Y6V%iy-+
zGZP6Dd7Zvn>u<1WyBQZgt;LoVa@A{+M+*#FY02Ik8Xnevtjyft($=fkn`joVE80EU
z`zwMz1K0f}D*HFtimDo?n<@SFfEbc-tanbRa?<i+l5$4&hUVk`f)C9JzGq9u_7@Og
znY;FOcH+LjZ$MF!E%tTq+Ki|^D2Y!Mj`m)ziM%V|(Ku*4CfeU;o~*U5c4_<m<|L1b
zr0ZD?T0@I~x!(Mf0|qLZ>erEE*jVy9`u}0?&7-mG`+k2{^E@aCg~~h@m69Pu&XdeT
zNGek#DrBZXT#9fyktCUCLde`Gry-d`#tfNfGVk}P`@Z*n_VfIH&sux!{agFD)^q=H
zU-!DNh~qqt@9`Pl@7J5bnl18sb2G?Z>f)J7jRJvO803Rn_EkPm?Xf%U3RbkKH~Je=
zmdXN|VlOOcMutK67%V_FWe40T*|6PwVP0asH<UZ0nRFAb01lRju&{$M7e!p=(}X}Z
z<ZM#Q**qVbJa{hg?r7oc*NL7RUwoCtGLwxGy41#nkCuLu?X79oKXF5=(01_a%y52v
z{Es(g52xrki)-P!!-FsPSPuGi>s!BP$?{mI_2bC=oSMpRq&=8+w(@yf4c3%<BvzbN
z<g_j}+-=G@Vc;?y#y0oiQ5epRNF&J&v=;;UtdW@LU<(kc>R%ZwZYwmVeT{jh@ryeT
zxdk6Na^&Gd8R4X)@89iP9jeY+((T=Q&BB7KeWJ{*k703_-#!)=$unmL8~b_ow3pIc
zmOAN1e_mGh{JC?{j)rHs%LsldBuin|7*4{qyul~YG9tl6+h$lpxwH5}_?n&)n-{sf
zj+G7i*ZVEA--=y%;%D5SI+<|9_B8hcis>`*WNaRVFzoN)AxBXfEAMcO&CEAC5p5YV
zF~M)fuQc<ryMmm=Kb-MOBW>&RhJ7)zGv+nZ^_77Ylk-*w!je;V1@USt;g+De!{N1W
z;C3K)|Ka<eyfg;Q`m16DABvZrU(tw4cvI}ksG)u2$a=XZce36gsq(ryft3E*>u#U#
zk(Wn^H?*U(-oBB3t4cba=a?H>ZaS&(-g=HYrTfok)rTP(#FAHTH$-)~F{3uQQ~zN(
zv*-|?mS*7WT;OVm_y+k>Yj)w^b90d0aEEj@WxlG=<u%&1I{q%LMDn!g&E{mdO$J3$
zbu#-gwg_1Eo*k7GbD1xgI9$A(*U?+qLNxha-~eLV#=Qkn>!k6Qum)pT07yi*#(D$u
z)KHO8cu^IlQcaTa?`TTvx9ly|e*1b7A?cFy@otHG<n>3u8^mZ2=4Ld+>P}8A7%dOA
zyUEMBOjeQw^qVmj<`5DxA8gQv@XhzhlQgx@nGTb3B_%7dUSnf_uiqMk#Z}I&t6wk!
z$;}PaXaN)&;|1S!3Oe`UhlGn>_NFfc)fqi$Xlz5CJ(I6OM|@I9h?q@0@B5OR*!%8&
zAy$w{tmP_))@AGlqI&(e4VQ;$#yBvq2EK5#`iL7rhx-eWk^D;&6m6`a(L-URS`#1t
z3r!I2UIdg*70%9+xjIRHegG#Aa4N4sUH=_j5;{)HmTbMoj}0kq2;99Gi@@7UZ+=zb
znBpSz348_J<uKJ;3C0K4W(Zd@Yf|s_{QTLHYpv(?0NXab{JYi}nxtjpc}xHTHe@o=
z{kh6de0@bkL@;z~D)DI%7bBwk`z1#Z!<9Ff9XTi_UQSV`*amPcVI)o`C|HHZ4y6aA
zRxwL$g`Qab;jDK@l_(b2jL}~?UQ3BuGe27OnM6`K*P;(#7M}?C-ju5UWDn<8%ncQ)
zU}k{D;fasW0{Sk}HWsn5T-T+BV1pe2qR|y32<)kacwzO|uUh&s0Qx2CW<^-FkAS?R
z>Gv6Gou<F*6uW&h7IQW3{ZP2vIUyP+y@|%^WsV&?Cnx0k*}p{a^1$xyPgP2yW~DMq
zOkFscws-3Aks~=)D^4FhZcdzXnRmW)>C)ME!nVoeUAF2$d^*w`L4Wl}Yb4N;Hq_66
zg0p_zI^ue@W-KRO#Y!DY!hR}6uPa5*4#>!%ew}PZ2JQ7azGpWX(QhDhJBh9@t-oey
z*kilgPA^8&;WO|fcetm#F`DN3l`*SbD3XIDOF1}J+`5tW<aL}QRJAbOU1PECJWO8D
zUS2Ubk9=A$x%S)l?_3-lTEjYdHCg4KCLUb@3-QgMNu5s(zv>60{+d+Cf;Vq-j%6K$
z9LM6^lJg54yNSOtglkx73g`e!zW(jiOc4JWTQ|?J7h4FsN8dkm+iF8<Vip_YR{O-=
z<Xv+OcA7)L1IbPJ-RHP40HI-mA+~<~vE-(hUvXb2Ahgk6z=L|z!U94KP>d!fCw-qj
zRc*nt?xpxvlH9ZzT#W5*#l96#KJf+=$((Dz3DNXO_vkSpp>8XdJ0f#sGMD=_HvQFc
z)1Q@|o*p`b?b8WRqV|;0!7Mp2x^iy$99-|`X`g$ZH)GIzeP#LHy>}S#VBn7Rh<p%k
zAO(B-b5QH!trmyZQB71c1*8Z_gt)`6BJ#>@c`@cOUAaP3oM|qY5C_EUH8R54<U(R}
zv&x8FW{+iuhAbLWTKKkZ*|G&{(!wVS)oa#IB<K@F16NobXGa)mC!9Ze3~$NUPapVK
z#`@`ibXC&#@B8PhEi5fDz<*kh-J|{ppHe{`#hqqMtCXb^tJ;e2;&Y8PSvM9i`KWq!
z>^yB)lwrjEwN6Qmb};esUiv;4Y84Ce4pu^pYH#(5oKwUCi@Vov=|;U7HBx1tq;-Lf
zcf$sW%#4hoZxMk>H#VD*Q|D)fakD@5VakEiz`?;G`+D_7g6LTs0B!!M0Aulplle5A
zF<hZ6pGP{tKub<bTCo6JXU{6)S<CmIJAa<{9>?6m##3j`aHUBV(FItQ;ugod&LERF
zOJr`65z~8{()jx$iZ@tApnmkH&v$M=#B#oF^j=`&&!0aLmIOF>Du-fEkMRf-!@Ke>
z{TD85!zEk<8%i^~pgf(b-OXpe&K;xut~SGZLL3b{x%hm-I$d4eUyk4W+n+~7sAf!V
z_TQbhQc@iuy~*eZ!PA=&eLbaJ=dpXK3#shk?Fp8Z!IjbVG^I8ZUrrk{YLHUTJRdU4
z*mrO#U+0&?3Gpoy;Vo?^vC`9z5BKdU7fyIls%_KRxtrL<LKHf5XEWj9L?TYuy7~?H
zFt8V5*y0XP>K4B!s#uzGf7wZ&;mBMU|KY=G%v(Zs<vxghFQc1f^v_v9bffiygaiiD
zoe;jeKzZEzt*YUy5?eSa#vTQLg^39x9UY<?Q~fske`K%Uu*ZM`W?Pl?q3!td7j8jk
zSoljoghy7I;i<PbhSZu>oNW6JfAJ4a6~nX6w)S~wsP%2=a59+i3k?4fiV!_O#~vOR
zB_p%4A|zbm<-M0x@3D`MIw|ssMdW^2f_$QVD1ZxuhZwsFW5ar;##nlKQ_Zty&ps(P
z98;~XR`u}mR=fO`p_HR*&u5CH1Dygv<<2YJ{oT?+_!1d>Nob9}jfS08gyXa-!DD=!
zAldbkjy3eyqTqDbF&_QBY}B8;6>H-mg(aFWKfhPy?u4x1-!Kr?q}bR0)sa%$BW`=v
z=g|g7ta<&GsDDst_K+Tdr}$Uot2IUn^XV$Z>;LgrZTz+(R%v>pdvAdj^z_SEQ!0Jn
zL_`CP(P06Nf4k8BQzYd26|dA{`MX}8e)Y|7Z&tigWHI&23ybG|#muW8vx`^S(h8&?
zZ3sLNzXNvnF}U!Fy|9`{gXvES<WPFi+t-&?Kq@We(vj(zj=pps(_qZ*&mUaIWErz9
z?K||VyY;a<5D>Vyupr{I3vu1VyRffs)_0tnAMB*#vF8dg{aJDleoW%s=|zWM9@|?2
zD>xVyV3Z?{1UjV(F=A1@XOAHo2Wlyy)Bhv)iE-K6eS()k%&^8Ju)YNERIo0_VYA1n
z3R05c`v>c7Y8A9X&|C~QTrd_`as|T#K*7y87%?p#`jKl|7hi>`B6R>=<dR?h{oOlL
zIOYzXo=|6i`YXusXJx1zzyys6>Y<UcVKL*2bLFUhgTA6%sZY^cK*tSpgc37K6ZC40
zR>e!zu@|gEgif6@0uYwg0xw+MYzy7wi&sOSnxwBw)|r-EIelQ)STYDoP#Vg+?TJ+m
zKZq@r!-Q{*>B9|K>ci^i8$OkkBwDsU7vjtRg&GTTITa@3Jw^hU!xuW*o;<0v?Fhz2
zO<6arpf8M)o3;^;{?Ue|7K3naU5cK}U5%AxaTNP-1lmCOsG#r!guL=vz<tZSF%utw
zxbTUB|8UC+8h#B(5@Luw0PpjjnTydnYdb&X&~!-X7N)eD_sCK14ZT1)R;rYwnPi@6
zvb~-H>l*x;>EFJ+Ms1a4Uat`p(|sT$J9WZw3GSSUQ&5Sgj$^Q59_8!nn>r3chB+>w
zNI)f=4X5-OfUWuDF#01GmE>Vo){fbBdT-{XdU^wIOx7l#l(UKAP<$5uHBtiPgjDLs
zoOb?>bncxI+V$*?va+%XKFHVL(aWy*J${7!J}S#gBI(XWfyXamJ&<vni$I_)zxP*R
zyHi>fc5LSopVsVWVxr$YKHAsm?!Jz)pQzSj*!e+H|I%aExt?zW^@SL^GSkuVtM*k%
zHbV2S#B-m6g9F>)fJ<z=toMh*?DEPk;aD3Vzb!QSV0}4zGvPHxGH-5m-r4Lo0DqmJ
z`~>;Z)NK0#-o`PRo3D*^+*fmC5S=>WWn?y;uqTX5?%-2s$GpAOm;fUM_h3ot;RfOa
z)hV-rX9SDFB8N#2%uY%h8wJ_A9duhl{rvVbuz77~S-zcqO%`GXwg4Xn;Y*RdD6#Qw
z_t?Jh9kpgsng`yCLJ85|lqFqO2Gb;iH*prH1?&D5hF5IX%@%3b>Y9}1!~Lo`wWy*3
zgSOJA$}^Hnu=;xIFgbF6?fJk1>;WH>Ak>HW%vPDbF60@TpfrplUm;aNn@&|vog@~S
zeb45v6tzke#yS9FRo7`SE?e{JvC@Zrh5Y~kTrwi}pD3j7l(1KJu^FgSr8XOvAMQ<K
zJ1y@8^uHR3@@Q*t{au7|pqEeBK`>61@zgSpdQ%aa6K&B{V>_Us+~7-Q0Dz>UyITcC
z1!{OAjp7Y2(q-5Oq6Ih=l2t#pz&neXf>2@JIf#-HdSMQg8qg;-!63-SGSE9c>&Ccm
zUjv$Kyy*~1Md(+wdzK`Il~=&PH45o7&YPI5%{&xc6GHb|H&K^Z<skMf3G~vJFTXTj
z7kEy;s31RDg<z9$j$%*yu=ab~Iqbr|hKl%FBqS%go2q6+KUpWK!<*?AQZ^6Jau=pw
zejTg<6lIFLVAh&Ex}a1ex5U;&{`w@Rq%#-x9THs2e(ZaAVAh>mTwGg82Js`)e(FXO
zhoWK>^1%@4fyEZe-A&uKgJJbN-zfx<ccyVK#GSHXzsIR1db{f!wwT?)aZH-2FFg0|
zPtuwez^I|@t9sZt#E*v#y@x@R4+|wRe!T|V&5v-tTH7woZr$(jmxH}g@B3PO2H%7d
z_z2ZjgAK(-R8#)!h`65$+ehs1e!RXKs*xIP&qc@SwUO8*6|vBbLw8zj=16)X_{IaU
z6wlS@M6Qd*N?gwOWxPb-b0ZZMzoZ*pBduqU5GZSYTTSl9_t#2^oXWuSDR3*_@t=RA
z60s)lNi5zW32Pe~v_Ot9yZJ$3Iz&Rp&+=@g;rtn?$l$<0P2HBkp&_nuMfwV;9I_oI
zzoI-O9!kd&m3HeiJzGx$V!+S|m7nrjz9XEmrvF>JnK|9m;+(>Sid|81VoFL1Daz;$
zD>>R3+CT1XD7ygr5vEO32)t9j(;ZP=cte3omjZkflz8mN2I5X=Ym0D;r0Hfk{vNwZ
zaa6idLS5qi)~J0&(uj1%)MMGM#BWtd`)JGQU$M}Q&|H2WB1|8Bl<V^`1~k3c9&GI1
zlPnhaNeJ_|xv{w_$rT+`iR2XWC!R~P%2jtT>S2;t+>^l9Ka1UTp<?n5Pxr+$SB#9}
z&uq}N8@dh-^4G6Q@D9DOxPYdtOlClX)Ybja4go-FsVU29<WE&4RRLk6af0<1>>o+6
z=O%c14Oo5Nnoqi8U~g})+rq@m9I>J?ak1)UnCM*#{zna1={QeT$}gp#v0FYe{ShQO
z`I45RrBUEwgLUr*tL1s$7}l+iE{X3}3~?@vKX+F|q%nYVk1wOR?Eo1PZGlHgF!*tv
zxM*i*=k-)5-Cb@e{r2s2+#F709T9b#R~CFeZZ&ZRz6%b4x=y^L0B4Y41_Y<3lFRG%
z`v<ZEKZlxxsj9BAL}tmEo!hrBbO-ze5p&@A(36#7VnnPp5hUe`HMW{%MrNih^qpto
zlz7Z&>7w1=8c`CBX5+au6My5GHZ(LeZd+OG`@8v9hsxOdwJdl9$D;MJswtF1{T=zA
zJ_@nZSB4jB%m*7+hUHu|2~MZ&u4C8L(edzDR*nW<z|Rj8Bs%tV#+mM#n52v!8Y28D
z7rv!uXKN_iIA0CVpsV3JLnJ*D)zJn1R3LP2Nayvo@-{zP`5R6Fm2Zv9zpBT5CA3-F
z*#)?;pU_iK*sAj)FTgnGl&EOwMM7iR>oxO6!5)tu#ne7@V$hzOPAC_*ANz%y0_W#s
zn$SRxrbAPPBp?Hv1ZcmXZeDTXo5H<E{v>WIPe_iJ3qN%`1D#Rc<Tm3jT6Utnlhe)i
zqNod@4Gbaauu<mmHtZD`;-l-_!@1m-@tT==1f!Lx9ZXE2Sn<-lOM<t%fbHz`067uI
z`oUAT-k>Hxp#=4`)yb1uY6k|}mfQsNtMhDYbuwKs1+l~RxAlSJ!F8&16rBwt14Dgs
zKTykS%_`u{UYgHxn>S0<NQJ69M#=2jHK8kKt+<;K=&vVeCME7=iy1jA2?^Ta&$OHQ
z2ObeHy5yr^n%KhPQl}iIt!3Ns&JK`_OxGnX2T1prmTq_s1Y}$m4P^z*D9fgwXLAk)
zD@w&xi2Fg%wprIFGaP8-r6aqw2@g?l;B2paHlAb=mG9J#){bfa{^-0y3XgkFS#EjI
z2ztwFactIE^AN2Q_F=fWfKW1UAr(n4yN`PX6Pwla|61D2c8gfDfT1Rk%Su@rbsB2p
z?q^(5S6A<kRt~o$KE39rv@{j7Zi57qq^oqWKo}_0U%cn?6hnmYQh$E*>LO4qL4qrj
zPXs0G?%qX#2TnqPBBVTB+M9B$I4?`Raa*xN%w~NP`?`~sKe*Vs=j_^DMmtn~0XZw<
z;Y<}I*_Z$!G>d6F^hz2TMg;c$W+_OI^b$y>cx{rSle|SwpN1Od>|bhQvpfApbI6UX
z2InaT40CcISWlhEUo&Rz?7RqvBDNttKQ%H|J_!FUA~bflC&MniE;!mFmifYSDYXFz
z3duX)37amTyxny@OEp`*OQ-DM;RyMz@Z}SyBBKo1P7rP@x(S()El79Ti~<TjaKtxW
zs!lmO?^34qE6sd<YoPD=gpi6_vUSGr1vws1T90X~NmeHr7k-Lk*+s8PhTP5Pba`JL
zF=QW&X_vv&G}(JXu7IlFo#b^lF`*`-L)Dp_@5C_ICGA!hBJ6eEV#mSx5F8;So3B0E
z20o_&XzUhUqM$B8oE;R3CEgVmleG8~u<`$WzBMlkwszQRn0N11&AnsXT7V-O5;IND
z%1V9!LsD>y)99Sd_@WRa#okX&BKw%hz9RQ4JTNF53eI4!cTf*p=3v{Z-9H=h{&@VN
z)3GXz58t;op6*E;c$`BUz^28Oma|5*KTaykQzU4Euy)XoXGKIh!OiaT35x7K6MEcQ
z$<O9BBBS=wLa&f~=C&4iqoUa51v1WWHGT8u&EnX{ofvJrwi}gj;F*30ivyRetiCn|
zoXAN@7ai*Ez8G6UPd(=R!sI8+sw4f^6x<HETl!0nQ&X3FSMkyOwW4qYb+4iRmrcQw
z``UgfI~iQ`qKOKO)HlgJ@AB>zCF(Cpb7#xHkrv;hWni$K8Cu`N9wVx4Z~y7<-9O3R
zxweC;XvD}L?S)r|wKTM&{V?|5?O`u$zBG?u19UK9)PH-YO4gYAO?~q53jG?k0`EAO
z@3(*%o9IptE};r@L~X?2s=N02PKurgbV_fX=bD=`>4%4JLbt|VOLdhYGNUFsL<ki{
z03;VW1@_gL2V%bSrLnQ9J_{AdO<3@Sg@TvMUWhqBDNzhnKhw$N;o&g*^LdaKV)y|q
z5zy|aC*>d{x>W2s*k9Y%jd_u+lhc{jTPw?jAl^fM$f1WdT@hw6d-(?r?A{H_(+kW@
z(RszWtsuR9pY~WY#)J5Ma;2_xWPX04-H@=Z&GY&{X94PlKi=+!9~MsBz~f+N8bdIL
zYyy0EuCt>H@+AQ!_!%HKhD`L<_t(Cd<7S%G?$~T7WMOVTU$6a<O_8YWww#Mty*&7*
z>dMN@rw1-DgebTfQ!Tld3y@Q{5$l+yH)eexT1VeTI2X2kLJDb@_1OSj`2|7fB$i;9
z5iOz{7}!}pw3U9jze`O+>y@Kz8ZsHMa^PfRvot*WF0=EaWYBgEKZbt{+ixMu#?DS#
zxhkW#w-=I^14m!w94Ed{F{=dt_Y^&sUmA*G92x4Iz<?ntgnY-KHSa`BB$u%aicMmx
z^5gq-JY;-}%<OE`HFMZ=MZcZ>kUOP~{L%=`Bo5O4n5WvAu{rKCX5<)!l&XdXIdd;8
z%Y)>&>B=gg*hDik{}GsDfA*8tRa(l*GUT>f;pMV0%aSObbG;hD1!6+!4=UcdQt#J0
zYb7P!AiMZTTg6tM;DhD18WVsctaRC^-5IpLY=III=7YWZ;-{T|e@E?BAE%avX`O55
zrFk~q-tu7Wg90k7D=7HUTz|qIS(^#UbhbUQC-T>Q_(wSzdI}M|kf3BMe29BcA+sv1
zzw@xbVYvQ#EQv8JIs;jI2nekU^7HFM%&VH4(^YMUiSGnzXv`y5w3Okbs~J;%ekuv<
zWoUi>PWAvhAR(b2dgSPPb03<F*S`o0^Vqp^vG|ynn6#A1Pd}>PidE#6HLpW&#rlN5
z%EoYqxh~#L-A3mAnP=60C}9gRaCEeIw!HR@N$@-9T2q)AdGxW3RP_l)*$fY~tz0kB
zq`l}N?N;{B2T$LL)WCl1M*uY2<Y>~*=O;ozR%M3~D<~qObAT`JD#qF0zI}uEfQN7z
z)pSf%xF=8P8cbGkBK&xD>uOv>O6c<9q_eOvB)Y#Z7v{+uLfE#n6pj^b>$h+3nwrv;
z!$-_21+G@K<kx)is?EE5bF@=656>AeE(T>@P&y)kfzoj)?=JUR$i948R%9?0L!NM1
z@T^}6v$*Ke_?O3<_qhJ;tIVZamwUbX)7Fm~DY_2Ol!COo{42_J{v(_zmr=)72=J;T
zX=ySs-QaQ8d4G0I;hO8DVz+z1TTL)_D+ta>@WC_pZ(mwHhMveZ0v2jw!v4rwEBetc
zMb0y9$B$PuHxu35$^<YuD=%%bqkT8!Mqd+nu84lwoKzXJhmP*1k<qiEHAic>Bm+_u
zZEU;~5(s5iH{TbEu}M8!HCTMx<{!s^=cl#YvFtaF6G{F}0gpslHH|Kt3xsJLxt{2g
zx9*w6_nI1MDXp#p)Gf&W;vS6VmFnuMisoB<@)q~IcOB}!bW_yHjX=0e1FVCL%i}s2
zr_aWKHttzg4uJ?2&plsDHN=k_x?$3WrzIa>io?PGJXQUC;8c8p2PEEgiJGQk9m>;8
zKfAgx(cl;c&P4mNM>G}H8!dSOeGAn!Oa1z@mZr%@*(iO_BE3a4S!)L6Mzlm$Ru)94
z5fdb!4i_2?@|PBw&z#z;rgwLAS<f*$Cr6w5r8H?g0le-8ZsOT!m|PZ$k|a_&s>Q*K
z4^Vtn5Dkv-v**uKE~ZO2Qpspg#56TE_3I*{*JH=Q%MsF_VSteH{tYGCB@y$H9}X}~
z^Jtdc{NQf2hnCi6Scsa^n6Pml|3FRD`6?=|;u5u@1@~~MTjNtpelr3js9qDAQdziP
zaU%<Y#k6gQYtVp<9A#aZg3z&J5Vus<#FW>?!ROGFYpo44sNuD1^>8jdYb#uU=s8z8
z+zw8&JZO|*%!Oiw!o{%M^~4{h0Z2W>?hgIJ<+5o7chzB_js>zy(BFQejD{x!>k6V<
zu37+)TGntfAc!0ZBCX1jOGDU!P~X)w-TOk^O5^b`@_G}`1HKA@7TYL+ISHYTa5=`r
zz=;8_z6$3l%pPGWM_u>>iY^CgWjEWt(gCKXW}<y%$Yf|-TpuU~#?`=J$6v~QEc(Pq
zGQ{P_+jKZAFTMo3BgJu=Q4dks$n~(y1+6Sl<MfrYD=^bxDyCKwo1dRgeXG&r%EoGL
zf*`rhdcC3Ho~?HH4TDI}Ma{cDS=C>)B`d}TjS8hg7BMq31EfW8rz9+IP!qxfS?43}
zGM{|^zEl9mg*uq0PZG?<_!V-U=k6e2yq?wE%&dQS$%?hWrav;d0)!cfIU_$Y*iT~E
zINq(~(wO0uL*-<}DWfx3z?pCj-7q|5e{SC=@B_knGSD)s&v43a<i+B)9XqNI*7Of9
z$RCt&I(eJiodo;@kKjk-!6W!gs1bZ7Xr6w6&#{z#^=gEi9CZV$b%t8Qnxav)phXql
zN{)>+SqWoTbnUGc20m7~YRh~paS^7{@4v^}5trk<Joon&Ixz$L^3~6(R7z;ruNthq
zjT<F1Gs}PW^sp<pwwC{r>-R{~ARM4Oa3H>*08=Tn0atn}Sg_v0Ff~Ck5vUc~MTE!c
zWhLf_LEd#v%~00MKQ)!A{ZQcyc+d&QUENh>Wo2$2<gV+KxtW(kg@|UPZd7Z&0P=(L
zEG}HW_$RhE3b&E#9-LpjdRdJ0bZl8ZfPInt@@25a??A#c8*6L5JR2QgLiqVArq9=>
z>L;D^qJ<d*`N8e&ZY#nT-}@j4$6GfL$FeQC<lhL(G)>bpGjAZlL8M&~9#hZgqRo52
z+T(>~o_om>*A)0VAM|ce;!r_{cue4WcphO({bBCCU=0xDF*G-aF}D9rNg3DD+EWJb
z8;XDNSwP-7Go=}(LYP4oK-{q#sFNLVg?A)O#3~hfbnp4a$xaE0BFM4M7ru(G$T$2_
zOwSkwy%cBoHpi8vok;Z(5LXNnmF2%OApeZ~xC?IC71$<gTAW6=JNJdP{o`5MP+eV3
z?A0k+tb$=8wmvTUJ&W55?p!4bBLw7F3B$BVX*PC&k4e4I-({86wfywy4icOCu<*%~
zGZ23Q&Wd|w%N=^Ey2Es1&j~g*wo(PIfA?OY-biUSx^9%(FH8*f`S$c{(>kbpjgU)+
z$ghKK9Y!Ak0;7IY<N|4ctLdSV5)>Tpo`!{mQEfLgrM4LZe_jb^Po7^bD`<TFLk+}#
zKl}ePyWjuWFOL_Y--HS9HPhfe7&=z3HY?Lntu``}sF@MPp_z0NZx^cFNX`Tvt`J{e
z<+2%g&7j*=p)jhds#^C};H^Z&AHpFNQE(e?Wc2EzxFH&D9-&?mt`Me8>_hbl0net`
z7W#7(G*R($&j%PE-2*+sQh@S?7z;qdeuLdXP6niY47V^9sDngU2X$C%!VwIYYt6|Z
z;V@ALz82CxT8mtqR-cj#MUxHEgokQt6(73=*!nAXg}-5Y;>M7?3!8z<7oK4?fmDx1
z@N*jTY<V5bO-<vBLU4)_Xcv}d9m<$6K96*Fw?DB9fa>m%))t3}ZfcbVsF-o@X?L~#
z<OBN;EMftriUwPa^p%NxoXclGCQMOeOd2)eXVR(Dr+K{2Ki;Pj-i&nL;TEfoce4oQ
zffX21Fl}xxDNAKo@4<4xQ9`*>&m7&X1#eGsMgHiF9sE884o^VcNsNO2zA;8Y#B6Ge
zYqlrY0NaI|Z3Q|UGt<*LnI=BlhFWrzIUwRD@g*4%8u3<LnkeUMg_PKJ$u`?YFW&Db
zD41wx)e}gKfL_8Bgt>Vi9E0FaR0H0}(2`-C1oL}+u2DaNoA|Vn?W-dNFmrU3m;d|t
zNwXTonHt#Jj3YKeXoEpGjQGF|M}9@K5p;K0w3H9WZ(G)28oj0VxpSZV4t+F=iY~-P
z$Cr7I>dvI`d(M{|@69IT5FaDG+0$HHg?@+dMP@|<loM?4e3(RBCMaK^{>yisBSO}U
zzDUGwWay=Me)*kXem#Kz+4JWY=H`4@B*Br*vKze&#okbDpMKWHkY$8j3!5miz*gAq
zW^mNH*B5~!`>F1qjMuOI{(|Vlz@S|zEDt6?!|qZ+xM~o0)Ck{Crf7b6dlU>>c-~7l
zG&eWne882l`}!jHqsMlBwdk=@|0vK;qVV!0_TdC$5}#LK=T0P8p)7^-YQlZ<PY6?{
zKht}CX@D87*z<FlG={rAPoMhRKK1g_BB`aGli0e|+V(S~qrQxLYnxKhPGX624dY$B
zr2NYU-rXPl=hZ2QuK>V+jj#VJr-phY$pO1x03xo!lmGG9v152>W+oERBsRmF30)4e
zsEs^{BnsblB^zr(KxNn&K|q-+Di-l5u(<w~`ttN(bRnKi409VA8c?ZV+=qkx0x%TO
zOZlTkJGX3U&g`>7s!4QHRGeZ6^4vLb9VRr0_n|uamZFT2k6rr(8(Ui#V^#4gis{3r
zFTVgOvGR*k5o|q*A#M2H{PrL;olA)->tbW$Wc!q~HSkKp;G`!@EZpcAV<-mw{(7bm
znr434>gOjKqqFpD<`C3s9E3`SVgG)t7e9Xbq(R-n+^aLHzsXtWcm?GtnGZQJ3@5g4
zfv^B#4S`E<f7L2`9!Kg1B5!K^Ez2;lOI!=zE!=v(EDNv^WLdQ@2OF56l94+c)XhbB
z$W4D6G4OEto!HJpFr9tm>4}p`-v!vu9-~@3@RwW>TsPplg+BP2nxuv&>W&P&(r~@t
z4!Vi=-#l*!iLC;5ToLm+mCEo8>X1?ro?+1z_K&dH1e>8YJ489j%6d;BkXkm$D`>5k
zUV132`F`-{&VSAVLR?v3k6qgeYub5?JQhI@!)e978|!4E8}Wq7X71<xj3}`40nu`D
z%7<y9sW!6<%5F7*!+d;o0L0DK{rDm6>fz}bcj-QPDQ*f#Rf?H`%LxwHiZLC6ky)#T
zE`Y1~$Ks0iS#xi!{%EOpnO*y^Q^z}3t5F^}590N5mjB*uK%LN1AHvP<11I$BYB$*)
zQh7;~&=3?&G|I*?)JqBIEA^KF;!%@U_2R|vTTOGFW>fdJ2MHS7ogU}`m*i{6q+XdB
z9v?)M8SAeRb6up8-*7?6+DKe)!{G;amhsGx0sfbfiAk!Y7SWj!D<Uk6X|*IE4XLtP
zudaRG;^EQ1)PPC78kh+NZeg~|i%lr^1azl79s3!nKchTHz^F|8j(B=sRg$IPAzNv)
zMnSrwy25_p((3AC$kaow6zb1F(TMQ&tpX_yE6Xl|f}=nU`W%>hq)bA<OWcd(8;t^3
z0L;Tx4Lk4{G`((f##%X+`jwRi<IC;?2@hd|rFQ@LtEpR<Yu6&5@?brMhDWWBPdhbv
znGecj28l)M&EJ6oMT%X3;!)GDLpJ*kC1mJi?o*S;1}vzX>Ki92DNSF$Nd3V}E4D;9
zR=tChdZ167dmE8M<9xr7CF5Q|?&2{#2Yact72&PSj!sT-l7-zR2Cj1sjj6>v+Nm`~
zE?;27fFp;y$Ec?0dbPBdCQPK%9s_HRh5k5}KyA$^x$WFdKKsXI6Vxn8{OmUe<d9|h
z?(^pu40SLJQ(LynFY%ruCOX5}LA6POAyc=tD*E%gcUREDpe}+}3hE|H9Ju7OwP{?`
z+x8pZ+RZ!5LL-?4pZE7jh2gCPlo#Y$rneju;=~=hgK^T)?^}XRJX){yv{Tv<5S>n)
z`cz$gs3#tTddy}tl+R7g&I(=}V;9(YL{;U^l@hy0C;ufDx-1P*2HNlU?<3Nh=<aF%
zOARF87FjFle}=!n|9;LByJKTpF0c4R1w6_LljpD=m3fv3UPN)-RK{rC$5RGez?cv@
z(iKri>FKq+>2*vv&c)WlL%rmFsUmhqJAt<W!NXX8b&N?<u=lF~NMjf{{-3Rg{#Wa<
z5~3Ck+gFPq4`r`*T%{%%ucd*jA;T|QDzjm=TRnR+;L&{)KoppG03Up^Ek5Rhc5mOT
zJ%nDkVZlsLxh#WEGP)M8?A40$TY;j4k%sm*v0ELlqTk~r<AF?yS<GIZxdx`6n_0&m
zvVE8yl~k#DHU9>yTl8+$c7g$4`S7BUywm;5?@)N6G75abV;RV{6mmwvPl$sb3_je#
z)t|CCD1;706m1UMG)0C`aX+hWhI*$n8f5GKZZefY6P@m|kezR5wX!s8sjgm&<_k2F
zIN>MJUw{$lH}}HxsQdO-geX+md-^?(uS$D}u`EJ7pWlHB5WmyQ2#VcDVn$~h<F&R5
zw?))V!R?RDYY0pLILR>04L>uR1CKcad#h6DNvxyuWS`_wdG)A_YJOAEsn%upLiIur
z%5WUz$^`X=g>WKC<d4Gjn23~HV8}vVS+%>exJ-@X0LOc&XXLWd%DFE%vXH})`b5DC
zq%(kQ6?<VRj(G!Z_BIBgijPq*ys<KxjXLl8r_Hz+!mufZ&Hktt$-ea0{f3klh=<gf
zg;<pXqiG|(>os=>N8%#3Km|IIKZ>H2OBp<1wgV7yaT7k5B&fT=A&=+tr&TK{&)^G^
zld+xI$E&4S0_@sb7|31b`&qNXaoK`+dUyymRaJr<9J&P2{nJ3<({6%;5D+!C!kbMQ
zngpUtYu@xJ&_z*|M@Mo+sG4lvxieVxKQcwDQy&V}FJ%?hn_}ig9H)ROh_z_Za;lBx
z$6@35;N=^{LaDxNNKijtSW%(S`lxHN%Ja*YFDt+`la|VYrtSN}>^AH;aOK*y!%fOt
z?$J(4EZMwP)XFl?!aEDI8|Y!aqHgwEPf>;_8SSjjC28pbu|P^4Pvld!LJ%wE3&7wG
zO}b&W`92))61O@!@HNYe)(+Uh7(d5D@4J8ek?0aigw|Hb07f~*8~=wA;Q;R>&W5kt
z57KVQNQ0t-*7YuaZ#7P+1b%`s22dU~V2xsuo}P{(CJ%xI%WF%W-hMW5`<PHsY6HF_
zS^P!FdF01w%zRP%Cf3%a85oFQ<JgM#gnX9y2^edr7l07@&rjL`D`}~$4T!F3&hqc(
z$dYm>y(gwgN)?zi&v|w078jdsF1Cn143qU>w%Wp2`}*}!v#KbJ)udj&q`RD`cO+`1
z-I;qnVJ%5`IvnQ1U$G9LbAkgkJClkWC=X1Q26;TGpN-!hV@p;swi9QkQ)zLCH|5z{
zQ%Eu0ht^JL5E6G4)yW#;c~*(_{(=Zj8-CPu6T&<^#6)XS6Mogj;ha77o*KJb-k3#&
zs;xYIBxpPP0WTFigrjH;T=Lvj+-#!$qZjXa6!@!;_-XatmogU>w%kk6T?#FWW<GVZ
zS%W>{PW%mWCn)BQ9oG>R020t_rN~co{@`5P!iLssPqFo#JD}~8&|!Znwkiq%aY1V5
z&RKxIE`&=g;h|1d`<w)0dWaqDXc?>_7hj@;9YM%D{Gyem(tvm$$#kBey!vbHJgBR<
zk7REKYajt{>(;GLKvksF0C~Y<Ot^95#-CA8Y(-(&^_$c7s)TD3&yM%EGo6lSm&#JL
z%bDK>Yqku=NF|s!I85$Cejh5y3LFn?zLa=KyH22OT$+^}n@T<oc`ptHh>T`TNG-a@
zS&m<S%|>t#z4DGGffq`RJ4iHT(1{ETtjEX0b`u`13x|IJou=9n!+P4P?FYmQ_!pR>
zi5xwOy@~O_bLt0pR>_EU^Lfe|bIn^V+59AQtmq6C9k$~oSX5N>^yyPjLAcM0yADD8
z@aoK<GTrXoSB;E}%;!fRoy8gfQ*qLTfS`_!D_)NVGU^sgfv1<2juq94eARu{$;oN`
z=@<VTc1K(Cr6F>iibZN1+VU<5Bu+p^Pl|{H7tb*)9tq!OWz;d;rN6D<L8IHxUq;KC
za+>B@D&lGy{7gkVn!X}!Ir>Byg>uX|AJdm*b<nTa4KdK^?djn+rojFt=E68uE(p6)
z3O=5wP*$K`|2z=RI&_;p<Aq!A^sV?qD@R)-9EE(B3$Ay48g-m;{!&p<S6gd6+9s}c
zRD*g&SnVhu&c=7Y;fhDU6IQ(3oUnSGQcF&(w$T4Ddi>uq<lr*w@u4aL|A%)obH>SC
z#2qh=n>~IG80^`%IH*_eLci@s!-t{}4CNnAy9T`>`&wupu01*`A+Zdo1>}_%OrK*9
z71E14n0U8qa1f{Vi9gebaK3Hsa9*mCYH((IBF2F)<W^n0f6aB%;PVayoO)@RNlN(B
z0Kfz^9LG>P(CnmDTe1;nMj<Gj;7{VRF5t4-cf6CzIvO9o!T93bDEA|V9L%R-L_2lr
z6wC~|)TWBY$OC`ZeB2J=4vYFkpXb{GgZJ*<4TE72x<qQ2hz=`a6_(G8PT6A6fI}4Z
zY`jlrC)BMP2cR^t%wTbS*4wE%f?oo?mUZtUZV>%=KSS`eZF@c;T}31HQV$RmILvu3
z7Z@Sw8RmPNOi0%=LHAWsk~JE_V^=TNZ{GZ-A5}QNZe0vKERcZJUy!sLDZq~#$kT)L
z=^UYu)g!1$ZQlmz))TVz)|=Q_25LGK^et`rz8=KUg2(!1b>tlCVf3E~*$O6uZH0aQ
zN6v59$y^t&`Vkh-#B9V%!rX$LZXliq^YU=F)LV9T;M!DS34nA65co3N-NLmK$w}*q
zF;gj9S5s_Mj<?|Po6XS>I)Y-k(i`eF**)8?{QT5-3*(7I#8I8*;*uBYgr6@kIs?di
zNr+l73?D}ohT6!`$cRkRs95~74N%)H{%0BRXX6l*F~AcQz{z>}l7<}}1L6FH3Q0hC
zGDB9{>mp{q@b^>kBtAZsn1vS<CUFrwqc7*#nBg=bm31d{7gk3VYnZ~$-U4kY_UXDw
zT9v4w<h>UMl0L1@ZjCOc=xQ=R4P2nH2{>B;ab7}WG{dnj>#RO}keCo$+z=TV87+3|
zR>wVVby{DWn}2{IIBJqpZbHY4)yH=XkNJi%OG|?96>1r*jQHr}{{<TXb4zB6@9Lv(
zq@Y8)sor{h{p5z79HP<L3hwHp4_8a_ku?yqw+R!DS<I{_>dMOp!Nq<iHs^%dJ;8Cq
zh7D>=8ga-lehCY}1;)PeU@N?NX*V^dwO_w^vo%rk+I6y+nTZL!TT^IbUI5*$i%2kA
zYq0NCHbM}CxwXJrwCv<p-;w{C)k>j^W4=&Et?4i#VSj!(e`ZB{S70Z${3vSOes^vp
z;YrnvVN=v6teVd<0xKkqG$gl|y(X_?-$;D2NPf^+-sTC(@P!F$^s<(gF+J&4?Gl7*
z`F1NQYzKvSa?49g<-^oSFD(VUo~UgD6ITI@Ve%GKbf#CY3JgmwO<5xz5EtiXM+d6k
za1OnoR9;HRz*$(27B%|n<Ffm(Q20Di*8a~~z!)nfAf2FiVa4r&;)Tk8+#f=@($Dy|
z4|oJ>XF1w-X&Pl)G(~&7flCX_Lj|)`<XU1P7V!AR-g#8798u^GV<Zhxt6*tUjPe&N
zCPZl{W{m@sp95t#LNSE+h6OJ<LVsYKOWiFfI|3^ge4R(!-qDfh)R-CuI#`kt_xcKO
zXUpz^OQ@K3vTPs>tp3#*j0Lyw+D=4o3yW-*fRP#FFId%aQlzG)W8{W%8ObiGxK|>i
zA0e`B9)t(EbLSFs#OuZ<CP)@DD8aYT3nb@z_yh#}gp>ol3e%oFlRd$Pm*1|*&ZdTC
z1G42|qlQfwiu7be!~>Fu@jH%>x!%yt(3wt+-7?59YJ%hg0O3&>fun`yhI87%GoOVj
z8+T`JT3Q+qnSTxoWfNv0$FYt>UYA1xH#}Nb?C$Q4Vc>ws-J$QtczDe50ps*R_ZXsx
z%%(WpmPSM0(*i05WIrJI9m6$EyG_4-kN*r8-#RgstdXR3kYdYlaXr#<+S!`71CNT0
z8K#{8wLc;W$G9vnI-pK=#x^242j3S*gKW*KH*U*wW7rBV%@4jnK`H6b)sB?tKL<Vg
zLnM!|2gpC7PRB``>(3|_m@rnnMVE~aP`mJ{g52-lzY%gG*b{QU9|yto?5y3bTk_dt
z+{$R{Vy?uOzu;*~!g*Y`A@lS<_YtMDyC)d`hErt64wuSQngZAiU@N@=sqv8`QATc$
z|A@231vXrMPu)@rP5P;NJs99;m%}7h&5qIef*Ox=LO&J}fx$-L<#u<IGxS~m!h(Xk
z<wC%pDUpxygsgGfMa@;N;MjAamF(3A>E40+{}W>H|IQBkAItLp)du~)zWhH$Oa9mA
z{y$lj|F5ZF|BZ0(-!nn~>x28R5AI+7`v1CV(IWlVS@-{f5dQ!5aUrCIkN4iC_g}s!
z|1~DGDsnAlKX70R*S!tD=fqWoHhX$g%gFyt2SWErRn=-V$y+Xey0}_Q|M<|@2qfBe
z^scm<&{~3%$}cIo!s51gK}71(C1(%?nU2RV{T>g1gI~h2Tf}uy9yq?9n?P+14Ah5G
z-E&ZeHa=_Ef-tDrhZ_n(*#C=ta@Q&%qnlYFI2G_Q|2Wg8zA71nGyfdWt)Wn^LR3BQ
z9si*OxZSzUO}qcM#quIM@<6~D%qr8nGc)uV_Sp8<SHsX259C0tr<nVJ*uc6fX>QV&
zRy<enFd$vo>XW!z@~1CcX(iu2mB#wrcGV6zthr5*kIc7^F6q+Li2{}@yLQEXD&b8l
z`L04SjoDintn!t+jc;v}Y~lm#pHsuaQns~xzldED>?niEh&pKk(;VhkzT?L&#yVz=
zp6Be}1bo1DhKcuKXJ%_d<Z?db?c=uK3GrO5F^z5<+o>#jx#_Cf+YFrq50AS_8{}fk
zcnN<$dAf7P$HDouO}mZt>^_c1g=9YKe*ez*OdFV=60^F-*IUpkdXu&H?1>X|u)H<s
z)yd-NW1i1Jwsn@uIDYh~-*GO@tc^RJu?aiG586Y$kI$1QE%~!&L1QukzJ};p@}<~Z
zqjKB&twkLj%1d-wgrYEE(@w;Kk`<*_l{y(|@k~x#4@UIr7vFswu&p`}z-C5nlx2>U
zEj%J<^~876N$Z>OM)wWvwy~^dvPq#0|1x1KICz*)Ly>q-kw|@!`F?rOBf{T<bkyKf
zu*M432Z;SaZ|j0d@y;l82f?IQaPG5v%4dHVAK%QYZK)zer_Dg^DKfaJFzq+VHGR{y
zuO#{}%#&ZnxUpv<Z=>eQnX0#q$`9wGMf%kpgO&|Wr56^q0stjs`Qz`&zBB+1rEik2
zb-<R1-0QgRUEJC*4K;(K{=r?9*h>v<qoHY1#pmB0c(9i_W$#12-`^~+aEU9dWb9?1
zJolMrqt*U8>n9>dRfNK(xT*g)`OP^wIV$q>Am)yO25n0)NDUxnN$`0{NM3$E_vv$q
zyg%T(+4`hHY$agzQ}qEg)a%I;^^Bxv8#ym*(N>B(x!?9ivDnMem#+$F`*r4nW4J>4
zBGV!~qe!_~QZ6-_Q-TVF8*A3C{RnOfR`}{3M-Cr`AV3WcW%mAS!k|)x%lWj~I2`5U
z8v>+-A$%D~5-F+oL`GgJXu)lrMQq2a(CYeEcmP(GomRkP>Nd1XP-7RhxgH3GS@6L7
z_7w^erXWYQPsqin_Xx``SZ+;>y1vJWR1jkvo`!e7^DE|f7MRSrGkkYR_JuFa#~DHg
z$o}*q5_*$T&i3~v$y}eu+`8NehkWBhofH-7RD~!@G!HeZ#utVqJ*;Oq1<$T^0JVJ=
z4dI-W2BWKnVCToYgz#N&`x2{vrw~=#@0cjQ=v?`#opE+C{fx(Dvmt5jgz5g;n=oZ#
zbBk$KAg>d&bh6EYm)=@jxuTMKiJ_-5?^b7Gc>7Nw<4eLq=>?1!l(c3T2f$KVlupM%
z{Xoy^VMGPtd^l+j3`&PWuFj6QfGWj&tZR>YZSY&iJ|8AKsCgzb?jwxg=e~Wt4BOmq
zSFtcPpN=`9RdZ!|=ZgPvu8*<o1L8|5{)-yn16w7ROiP2R_{H+w56<x$bJn<Zx$p@o
zpM9qGjw5gadq-=773E_M*4M5b4}A4ZXpd$7mE$*aYU*Tk!kQV7@Wsb|kW_?56owLv
zd`!mLWwd!UxOjcZdzcs*kr-yrUJjX#g0$Iu?c2N{l~JPLjWZ?{w{+Oqedu1E8dqS?
zL@X0-)HlY!1CtoA86ANS_w8$SxD6+}(<jFr*rEUsfjG7Yytlpz9X8E#w(~f0hkuXP
z0<jV>Q=cS4^boV|{QwFL*4h}7z~ZeQ0;Wz>ZS0b$<qt9#q=<dOU_&WvzPvih>wXE&
z@el4SFebOYy`4{XiB7^)lzkYh@zY3ta^z)X31~RT5iQ2WE~USyKIopHWcDJ*{(Yxu
zrGm%>TZ?NeY0lao>u^>w6n}JQT+hCT<A&YWfY&1re?Mne4_BD4D%IZ(HR1M*u5%^9
zhv+2dW+IFz*BHWOFFdrOT}2!;PmD$QhPJH4Z3kc5S8~Jv%v{U}9&KIm_VOC8jdSup
ztVG&|hyoST$RdYBn(m3T5}!es`Lt?YRgCm#szNI8?Tj+BlUY-tlNEgNkdlH%JB>Gi
zpz%BS)`q^1=hP)Y-=>;p!%cVzrNHZ)96KAEU-e0uq>KDw9O^u2=N{iz%~>|RyxF}v
zN4>wYF2*CmR;p)O{!`#PK1qP2R14Q}(-M1*_C!R}ZT-@hRhF2!s~x^v=Dx}sg4G(7
z5~QT!qhkaqd=glv=(pskXmVfQ?C*y==XLe;0{QyyAa@>bHLT?H2x6{PQI}5JF`TmQ
zEjV`sK%m32FECFMJf_Tu!HZs$M^3&|m%}yETK4`ER&DX{w%~mRIMH!d)>p9B3Gu)y
zLK0@@B^s-}1VcgUL)-+BZCQMYfBdnK`Bjw-(#y{~7G+E}oD4(q9oR@}glt-i4LgSP
zlP~UO7nXMz`<Umob|5_}m$WxTA+T&@R*Y@+iIPFi8rybazjESTiX0rpdOA7;MvZXM
zQ+uZ-og#POm6x<OJNqOpcR(c~KQ1@`?RK=ksW^roo^tbgo;00I%EzcTfq}+lCypsZ
z79=jREKfSmuFE8?l)kRpa5MC&W=08aO(ang>}<Zjz5T^ByfBT`kZl(nF$$En)hg!O
zKJG#N0{a+H`36p#L_|PKwp^2>-3MO^PDczyeSG#vvLROZZJtSdfqH@cF|T0QUF)s9
zeSIZue!Z=$g*y<b5HHO+oDUMR-n+?MNem94@BwV6c2I5}PIlbul;j8I4V{0EP6fc=
zkfs7P-&Du_D)^4@9_L<<Y%+b=R{(3jJM^2AhiCprt^(X>b&~Z*L1*FhayWeGkW@_v
zoHuLNyd-SG-v0}jQj~Qob5)(NoXob5s=vN+AH0fXJApydst5IqQSLQI&R-s6zISZa
zm*}s;EcD7K1e*3ZQST|r;1>!-b?MHbGe`cMYzGc*EnKkl1=YvEO&{7EX>04uzt%cZ
zHrg@#YA^1?bB>&}1vn0{)D{g}ka?S*fBMv3Y&8Z@Za_?Mq#6pb)6n1y0|baOQ?PR^
zt#}4IiVt;lZw$XQAU|8fDiD169{gw}Ps8|nj%;?v%UQuncKZd|uE@Y-^7rBh!hCJ%
zJY=ZqJo*#r9<|}$zpHq8sb`R<tX^3D?O&L}{PTGtpkJy{99%l1_*_#{KL-Zeb$$qh
zE1Jvdv6PKXLs98Hi}H3!7-^&&womxHT09Y4eCpo`W-N`2rp$xs`+T+)=!Yx_+`Yv$
zrZ!28`HGa1ePPMepj+Z2hJGmtg~5@_Ts=}c+ZD>`Sr~cf<Z)uSv-STlVO{(!ovF6n
zXCg29gw&_cKIy(+%kQNdu77f8I53!=-d<#&m$^J~DNr$^(_0mFl+p|(ZTIs5pMK5$
zA1@^|i=;Mu8QFg~o@_Gm;?(VCPnIIRS7(<sz7Sbo9PRX^1Y{176%NkjNfqr@5j-=c
z#<mM8iY_3=qJ@3J+XEV%fBw3);}9PI<7J=Nrn@d~sD1UVIJod!zIQatlydaM8coxh
z6)vk6?I(K2du-Np4hAe6a}#^Hp9^+2?2+MI=r+4xccHqGbE#adhH>GiZ}B5{v2fAp
zU{FyS(hRVq%y(PLnjJS>A+bNP8$ymr84>TMg&l20E@|L;2_dadDWQoN@fL2j%a^@!
zNa4b!sy>WunD1`iwk=sF(;WAB;HSqQ0#4jGxiBX#011DN<uFi^;SJA^n`<<}1?J$7
zBpXx_?F9~B+S-u))0<bTWjFM@55RZ0zGesNPh%HTL#?s(^JmtrU$2k_zl#=;qw|lg
z>x>Y$8hdYN|L@nFW*1mBr9wFjd&bRsq)_*W+)j-)dU;1_JeY;M>O<zh(=n7jqa%JM
zvg1E}7r<?DnQ7Vx)venM-}U|)YP1>C$st34RoNA^29=>mZUXlVzDKFY7A@JsJGO2O
z&ZQES9VVZGe~oQOSFSZZa$^;InZppUfwVPFA6UM)^|GhFryl_T-R}3;xQ$kpB10p6
z!$@@EBB)zznopURbe`<<0kn*Lt0w8IBq$E={0^~Tcx^h_t3OZ%Ek~L{aP}S!?>o2b
zTbUFFRv%58Cja|hk8+)!l$N)U-Gfg>3PsU&#hCWDzpK!th?$fSZ#KFwHE!RN(NQu{
z6F0@Tr1w1bv`?Ky3=Qv2F9&Q+gEh1w9(YE-M_4Q&Or`9`fRT`S-&eObr_qDc18H~!
z1Lh+Xd%M)?;5Um=(5|Nx6z~u`zgDIgdC>}(vy#2(4~E%Cr>_G9QjaICj}j0^dk)(^
zwk+eFzBMpnXS`8NR#Mo3<@y73DSWc}sc*_J>TK7!50f`{h^Gv77lMS$=-1lL=WhL`
zu%jB@mU4My8^uN*b@nU&lz^!;qwI{Q<EY_7zcSQYKdCYdG0Rmke@NPJaF{lFW!u-T
zzCMH39mQuZ9KLja%^ZuQD;9m$a2tSJ2P_2pUp$1_gZ>&bt#-oo+)+_c?0XVF=7p-2
z-E+M89l2%}Ki;~4Z4RF~2%M}2MPg+)#wMK(--zL5OB@Wimh08%OpurN+tLXKD=drf
z$tna@yjf`7vufHKDzC`8TJcf+s%PKxy{Q&zr60e2rMxShs?Q_-t9k0}G)vfSBFm_u
z$;<49?r9*v1Kks4&7bb+a(dFUQ#};xhkDA}1SN^d;wEC-AH(Sg<d=;yly-d-!?+#3
zj3>H5p&9u;ZU^dE%x@0c&uPWXmX?;wA0)zF9FSOkTWphWT6G^TP`3#RP0xwad3SfQ
zM)AP9;0D!L5auN8Mrt;)Oa=Pn-Ts+Pa`<CH&E}v~zV$ng9#mCi_TTlOgYzG^D+)Pw
zzR*5GNzwSLCo-)Q)$(6gi9<=uQ|1=&-I>G!t;+lpKP!cT^plfmt#<3Yy4N+J+cn!B
z+<-$`nq1dlL?-{ll9~$h&uD~_7sX-9xy|%;b|N8ak6p24#!C|IF_5puw)A$@oQ6=E
zH>Vr&_J65NiFV}mZ#*<EBqp{9dIN;-4l{hefJxfMFmW|e9pVnc)o*PQ$G*K3wM}(h
zY9@00qpb?-7OADR?T+X^Kx!{|T;fEh+4dTyVm^bShVpVM91;qmkQ0M;-1#~eFK*la
zO`&+1gF79`0_gqri%xxn)EB`u1NoyS^4+{@pJ0*vkT7F${rbhCf-j)J=459-_VylV
z7}iYfiK>FX7(97+h%G03!_Yjyi1qCt-*azI&lV8TIhB`BA39WI)2~MC?UZo;CNLti
zse8>2&t0YcZ6hw5{PhT_0rVb@o&*NJ;PY~p?6h=&&%EnGA4Iq3YOvn45SqLucJ=Dj
zfqd2_3X++Orcn;P-AO&zX`+>g4tZCz#Gd)*Uf#dnHq6u#9JU?Sm8C{z^*aqV=7drI
z(Em13CIc_N+1b>NzS(pCeYgX9)!wsfp<E{`exODc)BJxn;ar_H(Xh72LzsC-5b8Jf
z)f{xBQZ1mI`uO1k7V*$bS>NCwAHRO>8klhA#>U1*Wd5fO$7g1Du8KN3`2By=@7u?G
zVDZPlVz}}HtA(Cen62h;MI(JYEX>DZRIgp_=Y#c=-1j)fZ$d`-PLGp;n~m+bsOX<O
zuG~c$IWIRgX0qpMAlG}fy|8Jz=7;z_DWhHz`!jV2_jr%Pu4n#uyz)t{lR76aom?4a
zW>HujZ;ajj^yLc-ZdCzal&aa9ZZ$bKZ7ys1<9#06CvS`a4t_p0b+qRhof&f(d)lt~
z`>l5O9sGWK_tMcJe=GI+GmD}jcZ_&)hgaDGIcL>WkRF+k;1zk5`Za&Nv)^`|SVO7$
z;ppkLja1n<yrt*nD^NCRXgc^yQ|!Xs)~~vdX;^K60bo4ZA+DfsW2f&Orjr&L8HH$n
zAhcuWTpe7U&ELm&5#FFin3o4czP>Dkwf-1HfDHYe==+c@sCWZ9lwh}o;hpQ#Fe*zI
zvHWo{&xQa=HDo!%gM&#%V1QC1z_?S=q3H>_p6K)=&sNXP0{0TM^O%&JIdux^vENvZ
z6KCY8*Xdp?Xaax@Xw6OmM0@Yv+4W5n$n7K+hHA0BU!Ewhns|epU<HNH6$x5(gkpyV
zR!|e0ju{sDAG3ov>d!1d=|-}z?<kxkg8F&!68Hv*l6NU2b`&)2nSG;>)50IHg4kKD
z3=xE>QU6*8$DlwS1CZD1<2aRG;1yo+{^5Ce+sA<G%HKP0VUY|hdFQac4kKKg4arTw
zzE3|`zZGa&Vq-n37wo-%4i5GW=t85KjXc9GLJxt+a6i7;9Yf0CxOQjZRD?Rr?|B1W
z(W5Z%=}gMV32<xC_8DC%@ixP8lA;<#_4UOt+rxB^Y5+;^<w!Nd`dgruo>$9xcBJ^n
zk4pj5P<#LE*O9vOD&i_n{Rvo2;Kc*``!s`PW9sm)Y6G4ord2rXbzStYIH_hw*qNJy
z5v+Y*<#43s5Wt)<SAO@$jY11)(vsZ@#R#bc-MO5sEO284R3_NXi--buxq#Uw8XP#D
zBH*|J%~j2hfXwt3m{N)CRA2@aCre#VcEh6d%?)nj*!GX`v7n%E@p6Xs;}VReg-)}0
zL}SERS&<6FJzCTP8&DG{VsOyg)Tkzi2Yzawpaz<;4T7G)hG7#@+`onwU!jmvanv4e
zT1P7cYg^O~g@o6xOOCil9#NO)jHW6v#Lr;Z;j(mtNlnX-Bg*zCZV(Z092_Ql{m*~&
zu&sJ=dbC$dZObZHt*uRoS!fh#Q$jtM3-f4j4UUY&vITiOcbl%agOG5G5HuOX(Bru-
z{vO8<1iBc(!Qsr^Aviw+t{`K0y-Kw6+?KqpPACVdPAMVe5&fjPJdvR4=-_}~=nZ;*
zg766PS7R-S!orylM#RI^5y0UhXhzjXLU4ZxLRNKw+a=y1fArz6NQJ9t=2y0DZGk2g
z&uSxN6u5Vmy-pQBeq52~KK`^OwFmY)`+L#hI^GGuNSPa=^r<`ht8cb@tP^?L;aV-Y
zA09q<KxagYdjUcX&Kp28SHQTQsFlKFSR1~CdkGSw&aTh;Q@%5G2lw*qk>}X9*&$W(
zC!}UO5B&BO{eeooCZ-kqa48p2Gqt(O&>V~Qq9ewvAi6_Q-HwTP!u9INe?FrPJyqdV
z6p9ql8NTTo^@$0otyIdJ%*Bgux0Tj*bo8NYFMo}j`?BHRqUq;8IZm6S1C%Z{g{ES?
zj$y^Kw3sb%JE%sc#J~F$FTrySHB7?Coy=l>Z&R6K@=X#z4Gaq_OiA%s_J&lS>^YLa
zR^qnYRGW2!-tgxqHk^eKJAMIjJnPBg3J22<3|n}cnEO`8tzNPpAn2p#*S)wxJW9Jr
z3>KIMnh&;i+=*zUFU5K%o%=+~u0Jz0=X;#UM~;jXO%K(hV1k#Z`5t2nNbGf`IJ}-d
zMXuPxWkYz+*|rPlWwVKi*}S{AOtlFuF+*YJ2+Q~FpG7bLue`n*UT&o&G62C4WHEEV
z1%THRFZUMbgM<s?uKoMt!<jTOn4_IBDtq<n6>K(`x#Ds6sF5%(tAqRh-ZmV0RJ#xC
zF)5dFCvg3{{ogMH7x4c%t7EQxp1|{m91udr3=nL5x^J#6{$^oglE0p;dt$sGgSqt#
zrY#we37cD3Xyj(ZIfg#QXb1KARJq{f1x3ZfN1||zqFAYx`AoY}JJJSQDS`2A?*Qg0
ztAe>l@Z#&EOU%$4XBbhsa9e=Pas%o~Otk8aKfnb9A=EOA2||?!IUq;h2nymKRE?HT
z$M4aQs;^MY;^YLlZV<9c6f=xLql?)FJD%*E`4xnYLuiA^*IZAq4oaNKfcQ+zA}gDk
zbSSCY*lzNkHSrUal$JS?F+yi-Zf<@vjHtRC_%EkR+v5L&(*=!t^op%j$++Bxw$v9B
z0zvmo&CN+eC)dKPg^4S-_8B}u;>j9P&2<JpFoiZ4&f%C#F(PPFC;f|vJ=WLPr{{YX
zz6@K^B|w0+X{$I3dir(7JKnEoBx+D9Q~n!WZylBO8nq1?C?zG`AtjxnbhmV;g0zZ)
z(t=2LcXvyRNJ%3g-6%+RBOS9J&-<=#X3fm`<E(WI&J*`<-+N#Cir%gW<HMa<c3Rpt
zP~>^I{CE#V(CRP!Fj#D_r*<>UX<x-N?R<hn@TL*{e;Q>Cl!zybLhyC7c;LeH5L1i;
zrjkKjN#ks|+|bL3O2;Q9<-7#XA=&pPHXA(ZNL)c#Sqnh@ZalLN9=YoZDLKG4A4<EL
zs@{O&3=ftW_+JB|lty)6cvziJi%YYDC!aP|EOBN>RRkk2`TS-K)>s#r8farJ&CLs6
z5LeslhBq{XAeIiVHU=_2oDoJ2YJaPmUK?frQuQ(LzrZ7*3Ycfs4UUJa5uo)8^u>W!
zotc$Y`T0@)g9HvnMoE~{ZWyTzW=i>CkR}$FgBM@m7qhIQVDsHy+#Vj+e9jrE5Eu$=
z!kyCQ@$nt7Yx}M4am|1*c!j^2?hM?-Z=`KDQ7^Big?{sJGkXK1`>WhEF49Ri)g0)V
z^3`;jpc4ZsTsW-|=ndd@h9n)PloT$Tu~M*HDFjtlw<??(P+O#MnkMeM(3S%Q4bsuo
zd=VMsW@e)xCAd?%2!1W_;(A~!*PQWe`pZwK9}dgC&S2jL6FgYPuPL9d4lamX>2SIn
zViPyQ)l^|-b9TG~GLL+CrBr;8{gAUN4e~c#mnqdp3`y()bFAhqy~Wt_NA~Yo>9BZ_
za;G8@^4#mQjUCuv0F*ugCYRSxWFdo5!QvtKdOYRDFwX?aAn-zE$$=BE4V4|Qz7X~`
zN2`PI;ibZ$6FIaEa2;HGhud{Rkl7famBR<tu%m?-ucmky!1edWqLwuhcxD9n`)lwh
zJ~DRrv_DI}zif8(#2ff|)8(dl{4Dq_&0Zo1BMtsxa88BjKu_Q!YDT`kc{<~I8({_j
zyhgRSb9l^v5D4CtZ%1G`0nAo4NGF8{IzI%~9nj=~%R~KU9nf}xtE}BL4Mo)+x*`w>
zkP;KGk$}fv<%jdo^mGf*K_Fb{j7S&@f@=?eQO(BI4qo=|$J;3}%(y!=F7VzF;dsM9
zatF1!vK}TqKcvKJ7O1s@?54{Oh`jWsImo)PNlE&EFh5lc&e>#6asxfLZYxwz5Ca$t
za)6U<(xWYK0rYNb@<I*+rEsc%<J#Kr$4n{oJQr5*lKcvm-O!p9>69nK#{{PF!b*S*
z3p(EimTSS!o~|B-MX(<SiA#Mu+H>>mV**xMv~9KFKNe}1u8q0(;LylR=kP0lOAsgm
z;7q?`1+M}yBY?BQ2y$4ktbja|DYhu^_-B;s^eF_%^y^3iPDrAK&Iv+SqBshqW!^$h
z0772?i}KE_RLrAy0q^J2{RO;UD2p>$GRF{ABNcSD3b+Ye3cw_-blNjXP+-!CybH|G
zEZUiMDtXrD;FKjMZVuVA;8+Sphb}@nGBr5n$f&_3F}?~e!GIBbI(~U!L5Kz!$O!Ng
zmN$)IG6M3ZN>!m*4?P?su&nT0T!c)4#k`9#guVOzzT%VedfYFzvs()XtH2x8gkv3E
z^ut2r^eday?qua31okrZfb_HPoWXq*x)ThFWT(t@@9$~ui3K9z1V2oj_i3@(pkcy5
zLD4W;L?j{kV#EZP>D<j$BgDa>ZiV|jvW!8Db23GO)*9S$Es6aD0%E+uC;3Nq06UnQ
zXcxy5DS^6&%}iQC0@9+nW3D#A&;XJ+bt7m3Cad9NgEOe1;1NkXO0~YUw6qZAw1)TI
zo;FurI>xEMGO4^=6|C|1r)%GcIaE(q+wk>7zh%}Nc`~`J2^tCz1sl^GgT|;Q#vV~!
z!d;1J%d4vVgM#9^#Zm=HzWuHmxl4y3PZ9f5``Bwgwth*-2vngTKi()fS&Q4hxV+pL
zDFByYU<-g@(&_%?xzwkSpG|zZQJ=wD$1pXwzB1c|7Qifqe~8Z(xPj#i_V+7~iKU2w
zJS4U%mQfv61jghJZ)6Q#Rhw9unqJPnFVngW(VTSPjL2`=p{VNzExK08`lSOq*`Wil
ze%(7mJ@%KY<BWeI?1vquV2}_OPlW`E96&D~=IxA^j>EPTSjn1TDhqG&zk{t!dk-rN
zOdShiVsd<ZYQY!j_2mUi1T8;5Jq-;P3kyt#;zQ{#-Cx&r=U-^33B2GLEee(&RZ<&<
zu)G{a$HgvHR1JjUOjPG<S!Hlc!-E3l6t2l1xoVf(;34=aQt$3alimgxJpl3uDw{EQ
zOxOGEKn?+Mc_0+(RMV)3SX^ipW7@1=q^74+{pMLS_^Zj30ET_*2%9ZQnZKL;(b<0R
zM|iD<bR6122@t;fP*YN>2>hU@pa_7SF2qZ2fCYAMf;|}IQ=gx#q^-c!BeCvxhTF5z
zJT+Aa`UnK}16HNr28Y->b~TLj&w$?pqvh+@^yP>f2o1INuMwX0jYpiE-EsXhj6bGX
zv6#TeV$>!Olj1_ILP9!+jUj6!OHMs<;)~m98nofBLH!LC%@M>Ka_V5TCa*@Vgyu42
z@$3)x-(vCK1{LG9W?M6tj&%;NOidTe`%`~|vJFzrdW2&to`W+E80*l-d;`~ob@Pad
zm#MV!^LuFwql5`bNz<TDdNq*lncW5l`RecZHnewoy1IGw$LW$|(1AKTId##%E{s)q
zcna&j0Murv*T~x1+69`Bb^t|AZWAcNcL27IP?=eTObsxITKuE(ePl$Vi6vQaW9+B<
zmGcZtkcNf||MPJ?rcDFGdW=^ugW){lMl#k$kX+x3BD#p%*D|}J&boj7u3eN^_WFKS
zrioO)zyB_LnH$@WceV_r$VaQJDuG2EM$E0n^}PGW7!)TTbixqQ<B)pG?l|_Hxj72r
zQ(Ju1b$4*12v2@u(zarK3lA_ifp@FBHM8yv!y7KlU^EQlsK><~gSvX<$;ns8nY9vH
zvnCKB29pcC2DgWIK}GsCp~V0L;4a3kY;Im`*L@hC$^<z(2uVDCecj{a9IQaDIHM<?
zG=K#Ffcg63t_RB@OI9FlgM~WeeNM)*k}|mNDd4L%pk_qAyV%k;#z06Z({Ea{sbP&p
zVNJ^qdAiEK&hBV>dH;^)KL;9m=OxnNqR7uHRt`s-wV*|mofxiW5NPEfM)j;<R&NlO
zD+Ff%v-uY?XE{|n|BD5<cB5~f9;l#FpEco6a;vq=KdLJZ&K?V9VFU9k>)D5{T_qQn
zw>J?D8zCMZ2<Vp$yyeFx|63e&N5py8qx_f3aHAAdfBk)ZQ@?&)#Pm1+K`f2xgCf*k
zKlLh9{NafRQuq;B6r4L8iOFjw*R0a8oTtQZrIL>vXKqj!7ZQ<TX=4*r%sI-EN3mA)
z;$u!u4x&-}LuYjw7;KxGf%uOb1GKlOx%}`nvNE~0b{DF;XsYb-*x=X0M^U`H$i~J9
zAbwdl5jDqN*PBHa(W!+K&+Lb+Mc9DFIc$UpNfMnli0EtpQYWBBM?^c{cyU))|G}`V
z2ITSl6NfEggHt8qHxP;TS78n3AHy<xXKx5+Z{{9{E6Fladq;X>^WUPOk`hOLh!*I=
zz%-MR>bRc4=*Zx3QRIJ%MpFsYEDe6%1JqTAsV^gcn&Vz6J3KSs`>{<w$+Pb!a=OSZ
zAaKz4;`qb!)XSfJ*f{VHud1L~G+5L7uR4Yu84e~<&5Wvu+!Y7Jn1&`JJDW$ODLp?w
z|EtbV#gi^k5@?abdzN6|ySywYP;u)oB?^cZONxsN@qPi7OOpwI>^|aW`CH%JD@{+|
zlwa!t*8UM!0-cR~*uDB%Ce63cGq|2S8U692xuYY|_A_Qw&f>+z1*L~UY;-iOFbvWl
z=l;maOd;UF!pz(gPX|)Vwxi*pAwUpVdG1}G&$5gEY-?+S=~uJ=mUZ<RbW*ufU|WfU
zBZo}{*Dg9*GzG<LlzVoy!Jc!fpB!;_9?t02H#x-}?BlUquXC79;-wXU=H^==``*W!
zw;`)0SeJ{L`Fy4U3DI&uAFgl7HL?zJ@lq5B5t4kNX7Z{mUv_DGyTz4UWNP<n-jI!n
zsY9SoG5=@u<;)a`lmqfe1@JPMe=5q!J#oK~1gqw}JPUw}z<C7xwC@uUeav$|f2AD9
zHa9r9@_^>s#PqZ=xJb14Jf?L5i)YD3=vHX%7=C?oQ^8>s8<cZ(9@p+-+^@^eMvKNl
zY~*Q<Mb00ckl-U5;BRSVRSSA<tgvNEG$2M?eFdbmPs!x(LT4BQ9UaKQ4!5Sqp>2Nf
z-~i;-r>A#r-eiRpd0Ft01Ki+osj2Re7Y$eyCFKq#IlsStRZUIny2<%T7RcEHwvN_@
z^DboMp(5(sNt1@|9iaKy?rt>vJ{a{gw*6Sam_tD!ll*W5zK*r3GH4+-HzCyU3l{m=
zi_@PVHv><pFJE;+2)U`KZn%;XI+mA}iDq<lqEnEQg8;*;1nEvp!$a9kC^XGMUU5Az
zYf`~Evu=@BP^hf5R~5LQZ}rB(K~_$#rXmt-PSCTTccW2DYdASgoE~s?Sq=4$jEr<r
zYykQbpGjk;r}yn&SeD>2b4>okGEEd7VG;I_ot+&31%f7RyP)f&DUXg$FCY5#D>>pp
zT3{eaKsr3?(~x%_9v<G+_1Q`OR~xh#4fXW{U*qBst1}Mdl9=e|V35K=^M#-4mjG@K
zad8OsIE)$851;o%Jn%zE8_j!(1nV7lQu`drZR4Y&qrF)G%BFu+4r(Dj+t^F$E?1PI
zENQ6>-R#+Y{odZ*m(!0>icZdJL_^!jUi^X3ds9mI)v}s-6WNT~TIZ!<Dp20HK?td$
z7k^SK6G{=FUZeo=0&cfkXkr_Iy2nL>0mf75pkH*-j36rChK6|e+w(eT#02aX^F`sX
zj(E>;VA0*w*C!pjn}k_E?$o*0SSicMxfSEEJv}*D4YM3Qy>ue}{h^!0^lWUHgLERs
zp5F*6D7$sR*GKG$g5JGa94s>~Vl+#4_eL{Ub8`X`lEm<Ee+?~fo&t^7S&I9rDk=hs
ze`@eL!k_F-_xEE(6kISdN-Zxg(oki5_4CeEVcg|-^5k@?x@i8j##ciP7S-9|855Xe
zB*dpoZwUnN1~e{hZ5hrHM9h+rZAKj5$Bo)Wdxkmm8?HteMy3nYE%sUiAnoFTHHke%
zao@6<x;pklK>yyJAF*bzxS0oRnclqUnDt-U%k>vRSRv))9D`muF($@mfYD49PE#g5
z3bL$}6cZU6>PYk-^3L-<QAW<o9Bnu>{(mx57K5<h%{p(4y`sf+JVvf|YU9A0FAH{{
zk~CD{p9Hg$iU#rf(-lkFk`S|GA(@C)<Ktv%uJwh$J?qZfTqhyjMgDsS`$b(#b{f3{
zw?Pu;x;4dHt;ZUDX|HnRwYa>npg!l2^C9XB<KWBHW=Wq*$gEn0MlSu1tu6ao%=LU|
z+MINu$E3;S%Bet^E-d?=FJWOn;jx+c^?GaC56T0o$Jg<0N(W8XIT%~f5oPEp5hjXi
zPWTU&JJ#~Mp$C05Q;L)*s!3>ASTb@d1NXS2|3IO@AtLhU&-i*H*Y@`}pPFXKz0vFW
z{rhsP#Hm+O6*Grh%>JqBi>|UV6?XR0i;D`Ufb2Z=5qMhemkI>V#(#d}!L#Cab>(hh
zW|o(e129K{>+$P+H4{peGjtS7h#JFQck&Nfs?nb#81#R)q)hIgJ0*0F6Kjo`F~6kh
z02GUdhlk+Gg~gN!S9JU^bg?kJQVO{gmz9;dp`Wzod@X7P+83|rrl3366_;O&FR5rq
zZni~21sUY&;m(60J3rulSoLnwINmGk-B5*{M$zhblr2yojq07`2I_you>{mv<|v#d
z1nPynJQrHPR1vI3s%!{@?P$0n<KpttpX}f~->;cHdM33O>y?@c&RLzw{O?J4rQfo8
ze}fP%DwKjzy2~>mt+_rhwE?rJFMyTJOE5Dd;6d0*1ebv=2<;Je6D$rwPMI`0)re`L
z`W&hQ^xIa@7-<njvV|3469RLCnyA#-RGniQ;Gqc#wINR@r7Q=I0W<M!(qM~wB2Y(5
z8*Rvs-}4|BKnO??6XR#q(bLN`fQS0Cm{;n+B*Crc2g?-jmLzoXlfWdSTBR0_H09$r
z*jvw5s@X5V_FHlUi4%**%<Y)&rv_7uN>3STG)9g+IkR^SEjM@1X!Yh5F5nlhW`&9F
z@GE9L%UAy^p7J!W%I8~Vj#<tRg6AwWG`B`Ywi1?-+LdTB)^tVtTlj(a#$&fAI~R5y
z>=a;d-1+2~d3tM~6$Srt?mmyEo}S6#amJ{1b%O7}Vot94$%zvh???Bb<2yG67-Upi
zbN%yO?%$6jC*RsVCBO11p6R?G>yrFi)F@s4RZCu;AK4w(+h}EOPHT&89DBs=kL>z<
zq`XT-6w<>b@N-&TCTMSO*O_T;l}I)gj)}pNav7qcLR-&nMoSu<l)GFpT0ad6S5l=K
zO|bf``dSHJ5Bo56&dPiY%H>2&<oF<>GohhTmH2TtKNW*Qkce_C-Ofz$BTuT6O*6mO
zyQx}xi;TP0Gq(^;0Zs%b$(XYjqf6o=jQfcHPEe7SHn+A;<Ww*>Gh10+Mt#pF(nQ6|
z+Hi5vBEB@&+F5N&^xE#nj{<qK2+<I<CRyM`LKhGn85!9x3>o9sm-jPz{<J`B;zZqX
zxC%pGT3Aq66RT310O2`6co1zp)6fPath^jEl<H-0hXWi;ox=x$PE&+PAE<1ZQqdw_
zJy$pEIso4Q;V+4v))VLbdq+>Nxn4~nT^%=F?;pJ;BOI)C7rKIc=v$-0M#kQVo~ny6
zPgw?xB%6QyxPr{34`=V<mMtt+AoSxDG5{dg18ld+Inu-Wd?>+E`oo{^gDYuiG)5Z6
zk+HF%;`1=az$Yj!Apmz9B%KTL@?Iv{62K}3Lph@ui~zr9%bD^VD+#<^Ry?#RZD9Ni
z5^0e$%bQxDN4*W0Q7y3a18^;7oEGr+CLw}pbLN9+hKi)5HzuX94r5)Ti*DuhN$1O2
zgGPrfdOkkF82R@QIG>;hL;CgZuF`xUg05R@Pw9Ss=5o9<>k3OWpgI;DtZ00lo>#wf
z#|PGyKw63|EgfG76M-3+`K`OW{CX(4E6xGr9zJ-`TIU!xFi9r}v+y!|)626?5hEG8
z14#dkKbUc)gxipdHakVM+819O@d?wkqM^sUeH$n69t{%}RY_J>yd@$P;-h&_U~AS7
z8@1nc#{=MnU8Nly+W66%+ubc%iG=0h!_zrG{4Ndl2A&URhjNU20eSHNOTpL*iwl%y
zyTjEv#~u2YQ&kuT65^j=Lih7${7gaUNGH;C<9!n<Zsz9JmP(DJuOtnAcVlBbWM7Oz
z5;S-q+FxHiKrnd{@pqcEb#(mS1jX~cUq6Xuz0@i>qvPgQs5Cj6Z)Z+UCQJ2jxAwzq
z2DTE*HE&n9gFb|f*IitGC})_NF#@)zyxha{Ml+*Slfle17FO0gWe<{@_@#Hhe6CdZ
zL_fd0%*5gO8xv#8KReLj)@^+>jU*lF|Bl=}UOrlW=p5t0UXqvQXW4VFwmg+J@tEG}
zX<QN8hQEnG4yq#9AL<veby`jcfX?w9iKHe*Lify!Rz0(hlhew{iNH`L1YDt`>~>0;
zn?FMHiid6uEQ^+E?K$&*qngd)2aCPOe28A>{UpEZ^u#G(Bl8d;^Qa0V_-s%cYW{$x
z<=vOiEx;sh;JUjDLuCff%KrBDQwRu~Knt|%3Y?frPKNjfEG?@VFR$r)WG6)Q;oMP?
zk*XvR`6b5_lnwbijBQ=tMLnv&y%_)eLDpBC4pxkNgwHpIj3ul6{`boV|A5It&5z;{
zVQFI}x8aCV$9#b+GH|5Er2QJ4X>CnSSyP@lFLacEo7nqpvZ2q0NodoO#owIvx`A8g
ze)0Bi!~+JEuTiP{hcDTbsMh4n_!qy~ub7k@!lljZutlQvyz*yKo!rVB8eL7Na&_f?
z<l{@}&o(o^gxE`85^D(W@yVZu?b2(!t*J(LDbc$_Pa8eT&CAeumj)y7!0VHq#ful2
z^GqtYzoSwAD^xcV5_G#Bojh?lJZ4UT4Xye`=&ykcWpD2)fw%K4T###BXVI5T-|>Wn
z5^se5(a})4m~MX4T2+AtQ`3c=D%d8DVPL-ASX^{EKQdg?O)1?92xkR@hrjT4*4BtY
zb#8)MF1Yoc**bT~tc-iANBb+*nWH{hrnv414?CNdX=c8xk9;nVF@2?EZpkR=v+zA4
z6u6Q7{qKpc^-oS(LBdq_6PSy@^f;LaMRjxk__$SBPVNWaEDOv%?=(hKdLd}#9K0!D
z72OFV-NAYhce_0cT|T9`#Y%6=c`Q*Zcys18|ArBgoFA#P<BJ5+#Q$OeMv^`y75mSg
zLfUOxyP=pKZWh&1*#*~`BPp-+n!!MwBW_zz;@PS5?6<$?RyokY!PM;dri_ph9F40i
z=ez<A4;4Mv$&`ud5D!1spTo6PXxO2dk`rlgk?LqOklbPxX?oU|d`*LtX&D<66GFKr
zfQZqM)l$z5?*I978j_ckk{I_g<mq#%@Fu}~z@|5q>NPbsz`zpc0#4i8uLA;pFvZC8
z2UWWa&>wk>78<h|)x&PE*?xuTYn|`a?~YbLK8i-yD=mQfG7qH|&CKT~X1+Cru$w^+
zle7u=D#+Blo{JAtT>bNBciQ$`byw15WX9lN`87&|)2qG0|MRpCA>)@+RlVb!mYu4>
z5}$xr*C2lsQh}oaDC4k_y>kF{4H^-@qsT75enIXzxM`5@o`IR8ZsN|uf)5=yHrQxj
z0xzw#Rlp|ARhM{#HX>T3dsrB`+M@q6v-Z{gn7;k>QH`!RM*7b<BNqp#Px>|6V6IBS
zZQh0@!ZNNaef=7X^a#nwueX;4MhXp?=_=GVMRxWui_`>Ql{(bRGuq8dIqm=OoZknd
zO`Y0(4`4bI=9dZ|>GT7s)c*jU;Ip%{`r{cHU?Hwe*Z7H6=MoFcV*4j%kBr=-Oe6W7
zgiqN5;}&B~cQTn2MiNctIuQLF-c>=KCl`e0YE2TF9nOo=7aITN4Q#JgQyY59yF2(y
zNr|l@t<O2*Zib~Ve|%JwSA>V~BUm;=Jm252;CtiF@&zmv6_Mz?Uh8RxADVzE3QmnS
z+rK<eG=II)kW`gqy^a=-K$HMOL+MX}CO)O4nP|&##*MxM8-jwr3V$z=d`iS3LuK|x
zT>g^0K3;awJ>G@D7&qfG)mD_1<@XTA+>^^Qcv$F6Qt!yVSGN<JQ88Yq+0)jx2prrj
zHSM`bc(%^m(=oS5?JSE}q<UU(d0OlKz5N_RS%sb}rsI4N6P|k27@(WX3=Nr_9p*)J
zdg}pCRp{O7cet8LjZ!>S#v4Bjs4HXOtVU=pi9+M3r;;xDP`8BbIeoT^ACKkp=dZ1-
z0QWZAA4WwyrzFu$ms@5Tv42+w@kMU&5^JJ(`+NBKNTEqJLVuc-bz3<0nVIi8`L`T-
zO#_{LMF_sAtgQYLTdDuAH6s2oA?n|{eQ_aPt+xf;+o)~#{ZWcGky-;^N&$hS;$kw5
zG6?HUK>b$~f}f8(bO3DRtIpQ;b~leK2CfVJ8G~@8sPWQ|-hUrk2L}^&=6a^eV%=Ab
zm2YyA?|)2A;(UnV<M{6h^_>&Ve~85d9@#pi*}hl}cpvbEVx`0pPcMyEFq$`03^>%v
zQ(4~|&>l1;{+~+3WpLQ)`Cd*=j`jDtch}<o<F{0(@xluCrfK6|2|8{Y04+#VBWXZ8
z$DR2f&ZW8(T!@WEzrR(3zUMlaxr3Cc*TEwTFEketp$~xs@-y|4fq?<}ZC{uO=nQ|o
zS{-2EXmH%2))2C@Klt=X4}+Xv*1#Mj4w#q@625|LY~cIXBk<00JWFOALaLy`SP#=b
z>ra)qJo~#o+f;Mp3*3wbv!2k!MGZp2mFKOgmb1dL$&`eSr+=DFCqm%rhmGfOp{7Ew
zq`F04Tm9is<vbS{`hyouJdc$k#G^oE?PvoMy@6p$numK~Rg?}D)pw7P{0yi?^LnmF
zWWk}KKYM%OKG%fmE7Mt#0vM=a&1-Ilj;SfMbHQh#lrzH{IOZdo(nYMy%r-w0)0kb4
zR?@~zZh9gPO#aP-y}gR6D#<tZDVLWXg3OFImlvtzHgYHoA*S8YZ+(2aDcyC9G_qSR
z#06Cd<X9J1R)P+K0t0P-`8PSRy3e<%W@M08*QjY|fNAs)7{$Y<s5bujc~>$@Lc9mu
zu4X-BRAoZf7kJQkK!Yc0f|n#-IaLI3E?Ocf(zABZCO|jvY@$qTO5hY4v&jh^h!u~V
zpEr36tOf>fjpH-z7@n8~+IL`_^);e@3-Q6hDZh86<4Ivy?K(FA!&`s+o&nT`jne*(
zR&Aq%9Ic}EJmKq$AVAG6AYc#{AJ~Yu>rYbV?>_){xXN(ryLX3oG-kl9{_XYEhmj@h
zEq=%CkEd5xjffKFuWb13-Pr6@Wxo;+gtH|CaFJui0K_gCGT7QGBv>Ei<<+1<FpUX>
zqouvha}yF$shFKV%~=bbGHbI)6$U{Bjh~jQ9&V*bE&&&5n2wH)fPervS4mIo6LoA4
zkB*YLSF%n{rlBiH?|5uI!qMB@uW#F6ZehVZkX7Vxdk*MvU?v2cP=8T>EY|Jc3f~po
zs64}TIP7QYu|kx+m}1tuW0;p#rY9!8SmQe#m<#3t1rzDtv!gCSCFv$k1okLWT*3Y*
zt%^ttWb-hK>lsMXN8Ld>nXQY<7r~}cj8*pfv$W({f4r7w`~c0@yGlY%CE4TnwaM|e
zVNN?7cuD~WJ&tVW17rrD^-bDGzl*f_6tlCl=WdXCC@3l>pWw|i5=c`4>tq8uM$qtD
zzj-q~Fn}p&d^o7JQ9~e!*VYd)5vd;>q>YT&mM5kKAQmkWgLF*0fE=mk^>3Hxv{_iv
zG`M;|x}=tz+*)7C^qv3Sf&KgUVtOz#Ariu1&=z>V?v$~~@)W-%GG}Q=W`xnzKhJla
zV}Jf`X+77$#VI=Uk*tQ_&_-)TF0J_YNedrN5ngoCYZTHf@Ts~pQ1-Fgv_UQTb<rHx
zbr)lOw!T(?-WT)3t$@R}fJ(UZ0KMfa^iNIwdB;U^w7p?@Fd*WtOb7|^VvOhKU=;F&
zIQF)lCA$UEJxCgH+WYjF90%vgyVWTBmBz3&CSGwwxzi9btn(!oa*=0?%kW(WyUOSk
z^R?&Z=Duh~qN3<x_IAs^>ri24Bkb-osZ>(v2_J(em&Y7eK8K5^>VZ36;Dz&nFxZ*v
zb%r(z3mZ9Z)24GUvcaBP$k>?jEp9@>Bpf4?2F?dr^G{bdX(7)EcaFdl_dxZA<oUc?
z%(~b<3ya3t`S~1jhzC4CK&+9G!oXj}(bOl52?z=KFy}+KXAc9*toyXr6x9$_2bMdB
zrysD0hK)L&dBOQ)rEKvdb8tACuZoL{tLg=ZOE6g+%Y8af?|dC=4hUcUezy$}7_jcW
zyc}=3!pKrc4r^~bTfYWht-0-O&bRZ!iK@qx#<K)BZ<e$bWypJUfza@So8G&1ytChq
zK~7up@a<;iqE0@fqXT14Zdu=XGO~2|aP^w5#z#hYaw;rW`WhZ*<FP+lSXr_EyZ(OU
zY=0jQU^}rxu8Au!nVa#rUT{6W|Mq*pEK^MPOyg#cD<EAvpzV67RHD_{VHE9fBZ(0f
zvJI{xk8sGzA*)s6dF7OVuAZI?jKe!k#-Uw#3A4_C>p-(TLBkZaQ_qbx3@|x3y%ADl
zqXYD{Aaj99O%I4uRBCF5MIuSoR3WxJVVIb9(GRYUI<P1OiUe?5zrg`UY5@>AKR;rk
zZCF{k(U}`okQOT|2>vRkaH{UNcc`(-^77(T;H5VYPYL9P8~}%s1ie4upcMAzRD763
z98`??uS`r#G)7jzbNv!#e^^XjY?NN#NlR2r6E;ME<C*jw0Kq@UY6kx=Y^&vyJyl@t
zUT;>~zNKATTH3ofP;V39la%%ak&f$9_qDF>4`fWY-gtF3=)O!!*c)~H=aDhP(%kH*
ztlx?2nsEv8X_vd5>PhnQ2%Go%L;S|G#=1HijS-IQ0cc%J<3L%3^MLuK?v$Ly1wgbg
zUrqr<ld*0_W+ai9RQPmp1B!F4f$-~J>TGO%@gfeJ>cGqZo(+2Lpk11<+3d79FBjXk
zT^I!pgrLVfMIS-oZMDF1N$tqHv&xr{@I+WRRs20ZK7O?&PWp##h>=bLl=BtLFB<69
z2<{5R2VO@l-y`SWgshhu+fLJT^A|6wUJ{=SDX_a=>|Fp84~z8C1qjrEiKKInPT2b!
zDc|Re&z2T`b387S6_lJF%e{o~d8UNF8UOKP4R$*4SM;k^>mI7p_otjU!!mSX-sIJ*
z9$`YU0_;1j@$r_PBwxI}Ul0<?K-s*U^;CNLGheQgfC3XcM=c>LEC0DVJl{k+p`i{Z
zowI+!OYb3bsa_VAs<M2JiHtPL@ocgl<-Y(&d`|uYUICRCHa6<+!q#4zXLV(0^J!60
z5~tNFsCZt<kM^)Qa~nUk58R^3QR>M@G7<iidE~~E6crUTmG01^qsH`J>(Ot<^l@jW
zubOo|yhyy1k0ZaGU{VX)p6qqf^$QCu<fX-;W3e--Z}I3Pz$LwakJH__zd=Go6rY?N
zY_<17V^MU^3?5v5ci=lp2@c`~1#E!-Hc){cV3_bzrEjX`p!wWt!r_867*!5DLV-7b
zZlDGG4{#+Y{&(0O!0M<k#T#x(BiF6={r>s%dN&fh6?9E+O_;Np-3r}Ekjj%8iN-6U
z)bFr9=n2q#nquC=UYv5ql$0x-H+FjtH2819r4}lE7VXKjtt*EGkTd=LAy;R6x~A00
zLp*AL!d6Y5z;<kHbCabnAb2y7vLN{thoVAJ5Ehtb(g>b>W4(<SidAtdY-i`-bV0&0
zm`mtWxp<GfrZT8pUP0XKa24M9iEjsKkh?d1oeWj7#RPqZe!<o0qlZhNbrdoUFQoDP
zMg?gtBi<>ahxW;wybt7{z=aZWNhopzW}-ly;BbBw^{+MfT5g(l-=9LNT7PB>f+v75
zl+E?0W|j@i2a%00T6-Z04~yi`TO|p?UdV}v9-DU91I72N-4fvB!!V;ou<=-9w=jwS
z>0$2&5MjRDw3E`c_<Ewen#lNH!|cDVwslwB*w|R;&UXlPmbEY)yDuZt2`sW7FDih=
z<?Z7GSmB5Ez@_;Z`;bBK3C3r3=Xc)Mkd$2f?x_rOF`Le=4`R(DDS0TH9|RN=P`(06
z>qKHf&OGqO-X6CQfFyOcxS(;89N#c)VmfPnrx?}Dj?Zrm&7vtV>bvv5eEZs+pABm}
zaiQ`-?82V*b}7WSPDA5TwR^w(-;b8Ab@_V+8YZ8+qB&|yD}<K)Vn1PPEJIb8$zOu~
zZ&2V>v#xf59KnT-7{k|9`LZz)5fA%7lk<7A&$Ak+O7=i*ZSpW)h0b6g!))BLt<UZF
zH<zTOqvN=4Wh$SOh4|JbA;ens_Vh@k=lXeuBffyv#?!g~#R9s@;Q00SCRW>0dc)Yb
z1C6OhJs<C<%#@U^g|K4~fcvR1fR3Nbv;z+uV8J?_<Z)S=qPg?gyLYm(bvO_1UhlRB
z0#*jTct#%R^H(;rPk(lIuU{Ttf3}E$#v&)r0`8srg&P;AkCBn<KHl)~B)Ok;i&~gN
z6yw{T`$}XY-jODJEQJ`HoN@f`PzY?5S;1T1Ba^^S6jaVX0lb9_(f6A~EF)ZG>x+wv
zE>2%T3H<;UatiJsRr!ZC{Vp}O-PDJ{URQULzbIM615n$+*;!?at9oZ!(qcOK&&FY4
zL3IXEqE7pZ#Ky+9cUycr-e7$%udc04kk@31>p{xAi-j185)dDcVt!TC;Z!v#%-M|B
zcwCy$YC*1yVPo)+!7i8#f+~4vcvuzN^>k_F;=(O5QVr_5-$4FD*j7yO8W`*WknD$*
z*45Y7%(c)V1Sa4PLJ)BJ>;1+fxHf<`TPPFu86xKfpA<H?0;d@Er)Z=g(HF3%C$Zvq
z@BqC4D+w}Ce$8HA74}hNx)TviRJc(UV;6?z^JJ1=G(e$;-WS4}02w7WlM_7u50Je-
zDw|UQdNIdL5?wVl5}ZNjuJF!1{_NabXi?_nqB=nM_j7dg^mHXp{wD}fSI0^ObgrN^
zu&v(<EGc>VAN(7^{ri96U+jEgqObYE6W6dlLPw9erE2=IF_3~;aI*n%c6sBHic|_T
z@_RJD+z1sdE-vQ5^?@iw=_A+e+J{|EXi`^zYt+=#KpSp7+bD!hsA_@BGoB}AO(OX9
zx~Q}fBF@WRPWGD!02B9aQv_{RrZ4EmS6h4(mTGui4mn=5A0GD3oABOx;o@?a9vk!R
z?m=AB#gFD@qkPYL!8`Ld=SO0YF)i`q?T^Tqc%Yy64-ABICA?hjwd#t^SIeYHjE#jh
zX%!G*85!e=Z|`f;1Ab0~{NF~PpGxuAK7`bdAEU5RZJ00z5nR5ovU>92Y#0Y810`9u
zL|o$iY_|8^j(oI?m>59;0T}l>P7=9P8&rzmQ@o?3bfoA7AH)lB_$p39WYw=8j&ws3
zElg`3^8uZ0PgwQOLWnpelV|FVvx|y)RtH--Lr4r^%`5*Zzbq#^yYB1b_uId2BD3bV
z6lk>1?=x0_@$LWO!z7=~PFZR4eEb|+l<n-$<U?=Xyqa~dJ1p;XL5vr!<r5P@=f`m|
ze^taK(eNvmhLyvbul&*7PUb9zT411(ey)-%y@f-KfooTLQB+DmUH?Qt;Oxw0WpVNB
z#0k~RSghXf(MqrLZFH1Gl81H+yK`9gsWM-}FvWkqIX6hgdUECxz?yz5K<6=Fz!$8Z
zo>$iIQPuLl4*E*yvKYu>zqUXl4m4j^Yo=xCMbZ{%o|Rht^FT)z4Z|}cFE~+Ozo)Xo
zPNg5;pM>L3?Qm53LlR<JZ2hrK0)2}eyCuoC(T_z#P0hr{#;XhVA?c5e1y9xA?HJAf
z-Qa_qR3_nicOj#TP~(+8YM9cKM6Qcq+Bp$3x=)CxbpOpjOlri-+77Z_c!9C)vvhPh
zj0#W@VD(NdE#Kqh@@NNGP6J5d?Ci>K_0GqBF>cT0%OyM5on49-3@u5w@A_t@Dcx6+
z{hk{G2~hOHER2k8LE#Y*biyxZem&(tstbuza1jFR*cKKLnp)YC88=1A+1bh`=QhL(
z3O1ZkVjtF;iR9U$H|V2N&;0e+L(jUEp+n2Ur~)AA*RPK&lw>imt-YWJgY@7JnwwRK
z9a%)c*V>p-DeMqfN9822HyJp1Aw%AzkY-e7CQTc~!<BbX<|uL?Y^Uj<&lr?x;Q2lZ
z2-Wf0FvJTnaC!hxq9Ov^*i8VM;UEavFY_$&r#ynqQq$XoM^ztP7Mi^}7ww2!CIC?f
z)`_pd@rp=4Hr9BALc3+)E%Rs36h>~mpAuUx-u-UGA6mHSgeIoJSU20@C4z<vh+f<e
zmiE&QMkX~Y;|0788ZUf8LOyR%f1xKhvzwdb8CulV6!r9sfr;<Y^H&rtH#MdA<~&0}
z@YMtgr%zCjZ1HCvQP`_DwEAln1P*c^9H18$zgSIR!GfzS;>R4Wg@Ay*#$46yjHag2
zX8C~9(wc;X({SprAgl=IHY#t^_@SY5Ky+HL);$5gAbPyZNoKx~-!VIjC6Zr@fGYl*
zv_`G$VH@FbHvA6nHX(}+k4f9Jz39PC${ncKAe<db7NOJ@K2L~EORK4_<`qxZnP+Y{
zw!0P%ZH|mm53!vC`P+kWs06S-vN_q3iNdz=s!q8}HxZsvuX{O$8iL_{Qu5?&6$>)W
zfQ1=;fNi~~M(MzlJ@yD6p9C+jlG?jHhzDPTG`tQLEn1_b3f{gBk~mnkY&0}@GJ|jx
z?(e>#<a@ms%PIhD2?$#0r?G})f{)Su;*`RF+^;WB!NnD@)Bf)64y-^Yehll#7X?6e
zmCq4>u2OuHh7A7j#Ftk#y`7c(MfWI$W$XWhgjQAE+f#ER`FZFeQ0#1913tRtezHhi
zMJTqwt{{H&65D~)qX&A4S+@gxG4@SJo#BFCc?tg3M>`^Rpuq3yVuO%GSf;Lyu^L$3
zh;DCzlWf?stXGRZ_SaDa*;M%|nu{8<aZg{->z=p9PTPq^?%*ah0=()PaXH=wNsr#h
zM&aS*!~bAu|L<NW-V&?n>5ojR%RH`U0s`b9&<iK@xr%G@qgS7NIws1MLG*}$ZknK!
zBHlf_N#VzzPj@wY&DtResMWlth09T}L6zksoK#>ob%asoR0ba2ks=4tbj%TWZl9~<
zlVui^mSQ<TDl|2W6;5+LR)D5|@;k{2KcrV8d$mhc3;?^%Qc2D7)s}5#__MtV#HHv_
zY``WXckqJ&8SU>=7OdE@S8dJ9WrILl)uMgr8*G$=UsW2{Eh_t0iR{T}(5Hd|V#Jt)
z@eC#U{{tOwWtbfmHcY;qkncV^&PXsWFDF+z^gT`Fni=Uy8%M@EUZ7j~y?i0{0v0AV
zwz1k5K~5Xav_e8ZDlY<cn1zHYzm(n#*!<WK$#yr3N!?&BM}^r-NJdq|#Xk;=fb>?Z
zg{m<c`dV8{+~QhozFrwrMjK>=IzL9qYAqx{u@QbltJx?R{BGhWfWAlypAg56FBi6u
zoND>8XzI9`5f1$K=O(1j6VvdSnrOxfy##J`z2Hjm<F~&zG`Yp(^JB{QV^l`I-|e1z
zQj@tG8}VPx#?hBlA44s|;eA+-JpDkC#W7*s-Aj|^byXwR^ArM${~GB0xo7`v&uOeP
z|7SJjpP0Yy;TKLAlX3Txu>}HH&h+gVR((^6%SMZWVGwg0;>4`PJS)C_)%kzH=9-;^
zEI{C<p<%*O<@lw%`))|^E4zU#9!Uigl6YHFOACz;&Ft7%$KaqCedUY)f8bp8_i&%5
zb2l<KsS^oaFqZe@&AxtijiOQDA-cSdkkjbIzJ}`OzPb6b0`8w?$dWdvhmCBeG&Q?&
zhFXDvp&?w+3-g~rL#UPBAuWJRZ-G8-a>r31!{%dn{O`w~$4y3*0;`+nO{(kan1`u&
z6;~5h(@uJCeTZS;#)T;<>&?Xpn9cK<WWJgn<K%n`i+0@n2vJP3DY5uLeWI!IO=`P8
zk*zIX(6NU86gV|c%gJ`*lL%)Gkr%R|Nx`6cOSKgctN6%Bwm5yrZ28AH3h@pJdEXhj
z1wQL*J3GuOUVdbZg2l-6D;L5|S^Zu-mKjg*gdAloPwpX$KXq2IvaxBMqT+R1%~>rn
z30n%tLbM@FFee-=lY{p`izIZcgIRunqV;Ms1;H9{1)MAt<mDgG@M970KMs{vQy*?R
zHQ(z^7%uB>a1AKYM^;Sa>FAbcdxS^^Y4uZvRh<KnA7B|hB?(+{AW#LE+ETRg5b)m-
zeTdOPkMf+AL<YWqCuSP<gP6dJj1e6nN-xdq+%HDl^IREVQDWHW_6qz0Aw5q?UjFx&
zEj}^(<a!8Suc`_Tz?A`Nwjlpm3tVG&ey+U-Qr`IyISEHPR^|dgcVOg=J6#LgVQ9Bo
zTKI*Jf8hxVx*TR#p)PhnZqMQ2Jx`K)I=`O%)HsRB(@Y70=ys7U9+dcD9U@I?;1xsw
zcPq2w2BM??H}EK;NQoeQ(JHycahWF~WMif4@X~EXN!;yX>xumgc9Bm$2AggL)JU;;
zrvI~XKT6;pobN^8^V`20jGK(&kB*New4y_G$;iop++k<8|LgauREhKr&)wwZByXco
ztobx0l9w#_;<r6j1PjfV5=n3lHIMWWpGQeo*Dfq+Qz9aW@8AEGqhPUDr-6zZAfKaF
zOdu{MMlBrE*VT2O(#7QwA%ok81{GGkJcy@5NC%V_MCqu~rPR~{4+lV{mC;3*zbD)G
z@VqvaDL4pw2(PK%mc>eiV?SEeGr#<K6XL1FwVoATrM!0f-QRx<esy4&xK?Xl{%INA
z`_u9U(|lM_(LuV{We)B}w+BbaLKGbJqnw?0Y(wyTz;lCS{c=Crj4&Sc*mbuICxx9!
zW3A&*v%+fFJlHcYm4x~~BD0-!H6T?E@R6OI{vA(&^~gQ+jn$PE*f51)TbgTWnLT7>
zm0FaTQBYDUDZ?S7fP@jmt@hcF^ev`!@KB|Xk35n%AD^}-Nk*k(Popwpsu+`?34Y6Z
z0?*nSjO?gzrX?jqW<T8t0uRGa-(%B^!;_QEEwmlpt9W>bAS1i>5-Jk_3$~LX&8_5`
zC#S4T2~?}~Zx;yeFN0ESe!-(310;8_ae4Rd9d<qrlYryl^N2E>9I@sqeDUCLV~^iV
zN~JpGWKAIb-hIYRK%iMj05RZq%p5&DJpNnRG=`9$j|AdhyPj`3Gv0>vs$v2cpmWhF
zn?8iOB?hNGAoBJ;g#{5VL+F?Xsuxh5EzHeXjp}d7^mRpn_Ba&iO2Y5ghN>~iKRMs=
z?${8E7$`tRMksUPM`>~w{0^gZlU7qn#}0mEJ+cZiR7kIp{s$8j+Oq1MTpgs9t}HzS
z>Pd02dlO|+W#w?OZhuiXUXYoDnEjIk#3iXm|M=?`aHT>I-$089l0prg{ODM}Oqx;9
zyBWLf>3Wi|u3`QSVa86}j~)bOuK0RSU!OsPi<y`hh5Jlp#A5dUVgc^wl%MF)v>yIP
z-{KWLI&zq@Qu(Bo;qZ;S3z*Cnry%~wc(#hDQKnxO-%Khmn4Ilk!%pnOP<9@Gu0hTR
zS0QONvsZb~_(AUiP0**BnzXpMonYerrR8OlWx!Q|C_~Br&S`zbN?4c`5}&-=vo%4v
zqWa<m$ky~45BlmT-FB&S+fRX^1zNL}`FDDHBzhpE%}K948y+|I7_POC4+_!;sHP(%
z>E0tBP2n?35abD!Yfm(soaq1KqD2e>J0F5G`cWj`_Z?~zhXj&9vW}l^lc5%Y3<=M3
zDroop14(?ao<UG_qguhmipXrUAM>n76Uv=4z!*F(ZTc3%upsRmywH9Cwhk19P)#r<
zI5^wzfNpD|H=!Sh%~ufZJv8nHoEf}8<o7*8LuyqjKsZ{<QSfkE2;npS@HYmmsxB@L
zrmTijpV%+I13}4O9-m*3x|epjW$STpbOe~!H7VzO0c3z^ovb15Ww>QpRhes2MD1`H
zUcS6~Lm5LtaBpymy{Y&;Y|@U7I$D7tp2@^0biNoRG2?cCp@>IF2=)^#Kxkq)g>+>w
zMZLT@um<t{kEk?E3=DQArlF=70Lefi*9bh*_-%mEAPEeZYoVe#y6XP92P+=1$33sK
zX!7*~j`Pk?&IaJ_42neT{~mW7-e<X3-a`qQUA87EyMVka9Dt(lw)p$g(`rO+2D~ho
z+hDh7Y4tEF6^OEg3^WfO;LJd~4MwvN|8D-%MYo>&-VrkA&Ua6*GrqY$&)DO7;Cs6Q
zMLaNsf}V86T33Io$OZK2qlI>f-UkRODTn}u$3J0!q$EbtT9bs+>HzhgqUz#z*xp<$
zMk%+S%6bj$tjj4YhxxCbjp<)^{rtH#zEciqD^?;luV1q%$&RnHjt(@wD<xX#9&R-3
z1(b5INIMNAJYZH3psMAe4tKIUOyUXvz>WeK^Y1zyDVtkWx_)(gZP3fnpua(=*Jk6<
z*4appG+k~f_Vz@%VWM<;WVhEzgZ;`;vsap=NwHA`sD_R}kGgWW76sy;&eqjc;<LE8
zA1`$5W*aZ<m!oN#@WFjW#9iEFti2tfM|gV%Tc4o|2(kjp39tpZHJmR&@{);#1<w#%
zQ}^IF5U#)m5Ofm%K7x^tbJ%@DL*hA1u{~zMH$c$MwPR5YU-^s(W`x#i&7oE2YBSGL
zkKmA!28j}pk-=4q=IB@xXLJVMP{qyF_wU~y`+S*pSf-pdGp~&d%H#R%?MBC)Mo`&X
zrg7<Ih+Lm4v)Av=Pn0jHs$TpZF9GK0kUC%q2$?5ZyqK6+PwXY_&rU5UQ3RA8=;+s%
zJGR6xy9Wo~E_OxiGz#Pai61!CERZI9brFU|HZfjpqy4XtlF)Kub-jp%nt!*2{?5+h
z8Aq{=dhrMywj;;dw8U}6eEkW_)5`+x_o}HESLc-86*mYzpZ=y37N(FA_p$*o^!B7h
zo`MKyQ6c475`UZB<Fu&B<9nPjTRg|}PtDS~iU}8&$3Y|O^Sn0hKmeNX$9a&QN5FD&
zi}-zC^6`v^$7d%YqCr2(K0qeXP}c@Z^p8DnQ}X2&&?&fokL(xX!?j`k7X&NvoCHDO
zv;Onu0<N-{G~;xwqC3_kyG9G-ppwvzZ{*-^J8#tez0CCzleDCi2L-_sPR)ymg!YPy
z+uqGh5W=;}%ZD4UA*EOu%|o!VN`C*~05%;Udk8iV24*G54w5N&Ed9kZ9s~W%CJMG|
zXggSMA=awc4E~>P>P{JIYHDSse@`4D8L6o!+uH}B^j^D0Bqpjxg|Z5gQLRcnc@jwS
zNJ?_lYj1m1$05zqOQMnMA1#<dhEoe}3sy!(4JOU)ZMIvyH?6D^w6wSYWq^9Hf4SAz
z;p1)YXFKwH&uvHRSl}f3P7BlDYhd8Wm1v{1+hSSIzPdFGk%e5jvO3hT%2*iw<8gJM
z>W7&Er1MX#eX!F3>Nbeta~nj>9MKQ|{vDO`x|`IJG`F<{Qwm(#BaHrje;5g15lF>Q
zrgUQ2dLHCRyi=`1QCuvZ|L}gS?-|<r+oUbag^72c7O^pT|CP<?y8h#Z^$7e?fsk0J
z`Nta-7pSkcF@`o(eTkV<9ca|5!_Dw7Q|+cKonjPfrgYi(xV*CJ>hdpNB7d-);#@zt
zy;J&+Xw%!zUREQc90guitEkUl$W-MIRp1eDsnoS9G4vWMP8i_c6&^|_Vl13mQq-Y#
zYr9R&`}Cf-<WuC^h@ZccrPJ$8N8<0(ZZ=X+*#1DGKDIa~hb}X{*0<R%IT|&lUEIK=
zQb5<7_*7i3;Mx6Ub2FgN&l!-+f0*r7%QqsyQzSvzm}f$?<WRMuoH#<VtjQ7=9IXlr
zg8gp^-T$Ad+N&u2_A_Uj$xF7Y<5vCX6or?CY}Bs}U6t1x$X;ns;Thw__7$i;GlqUH
zlL-gwXS)PSxk;<&Nf#sK_h4fMr+6<UbsH*Gl^2h(O=R{0P;DpWLhhU~xv+2}b~%~>
zctr7cDLF@lS)xsntm-5s1QdC(QQCi3mvNLHu?mDZpE_+S(R(BC+%jXtg;TwY{pp?H
zlwr%R6jyuE9*IX!-?@i|LJ_v6?DbFSe<Pu6lB(yxuV25W^ipGDvMe}pJD$)>6h1=0
zdx^%c{{4~shd@ILloG#yogSkxLvh1yhmLHAM8D*9^cmB?EfY?JScj1r9vvYmX;F)~
znY{eBcRflOO8yDqoyQu~TS*~$x<3ZEbt(R1(MFbgsto)}mFo4Bk}B*~G_$fQ;9RPM
zAf^-uhHLSe(65<?)fzt99rLNlNnQ}HnDu-F&<mobzt|A65cwgWWlPixR{aOtMDUR!
zx?>ueh;qK%IIaw*3)Z-}b&)h~5fKlt8Uj-QMv&>Cpp<?2@*3hM<KhS@=5;}6=S-}t
zsCbzBlynz@)KsJBpH={<<Zj{bZT<V@KQW)bWXE0cx##zAvFiTLR@j5Q9ud~K(w71>
z5pHnE92$z2&(XX6UaA}i9fO&f8FXlbgmJJKf|9cfya#un3j|LPnv1)nyZrBKY(5cX
zG!wb3*#r;X1a1pVCQpz?b$NopH7KQ*2qjoFtnl#g{!oi&rKFH+0Y72@sxqwXFF`DZ
zD*fyRmFMq|0NnWJe*<<GzIoHW%pANyr>*L7=}<Cf(B=c;f|m8n2aOjG%_k}<DlKgm
zYG&ibeh-AZ5?8Xd-azyrII4e%FukQ`PM(7Y4>%mh!^H{vW7R#}LZx6I2#NRqbPXi>
z2*f7Q`VH$Q#lO=Be~p*uD^>=l6?RYhBYz$uV&YmrZ`O0fP_>$z_Gl8ty)4JN$p51W
z`R4=XBkm=pP(NS^fkD6kfi(DR*t!D^9F5mkdO!oDeS<6{e9K3Nz25(xDoIVvwTD@E
zAH+H}s5l+}c9aPvgE;BeQQ2Y<@u=`eWl~f)=0{Xg1*Tr?ePBR*<Ate#w=+_C{K<4w
z(lrV+0LdoMZ*)tjb3K4wXKYt-aDRX*G3Li&+J_@xNB8@4V^ExNlk)I7b+WSbLN$H$
zvbe1-<6kQj5y6Dw9g`#0%g(~m-J=es?%>}AcN@6%D#Wn`1PAx_^$}R#Oav=|@AT02
zOoD4lVyVbqPTWTiS7ZOvWC{sE13osT*N6FU!}x;Ml$q%tkWq(}@8<^_YA*w}*5}7y
zQi2DPu-I7h3v&8Gq@S5@U)~}enk4p=y?u$@fb-$L5U!8Sp_&60;w{oVSi9SThLzhs
zMYYbcz5SVhpotJ4T5uav(<~K6Z#}P$a@3cy93~<d!ct)zhl+>F)p{X~-NOI9f?yG(
zmTt@}IPD<aWMd1R;_goq3HzidE$w@?|3`rYj>1yfIyAdM?2Z1jE?P1R6G)G|f369(
zE6OgxW`POsbO=8Tap3%Av0C$jt-HPCfyTNuMP&{V?z9{n1Al&GvRgyE)$tPda}|{V
zIBeKQhczFcK9iUrGo>K*HVTAd)HCys-t%H$$5W-h`bA(MET&4{#R|F}0ivhP6!YmV
zHv0SJ#ib=WdU}$3-v3?$>XJjGlsFUC2hAL{%G>|GBjOid#SsinH8q+j-9W6Ig-tLY
zvw1C?@o1t2c)U&L+X5OWsthBkr7Db|HMw_J{N=5lXZHL8DsvJvhnj~v4)^|jq+S$A
z;zF|&cuch`0u^M|jvYwiI$z&Vn^1GjDX=%t{*?5=4gpKLHDki0@4jU(%+Oa0UZIT~
zrk4iV3JLssfFj(bKlqikShdvxk7J>9#*-!^{mEO6Gp-CBY91mK_)1Wcir(<~Gik)7
zcsmNy78=tNdm%1z|E&0Y62;M#o?96a_+PpsGa^)|lb_hr(`TdiE-o+AVAE_8Pku@z
ze-;tGPA)*I`kVXo>jH3hP089NN1si(zupX4>jBnwO;r^Scab>yd>pEeA7Q+h4+m({
zpZQ=TUhosoe6f~JZgcaW^72ll=$YSq-}((&6i(d&!o}|eM*70LxR_)dMGnqjyE6=y
zx93K99RpWf87Ji8UW75t^kvk1d^Nx-Gi-8~n8H<b+iQ;l()`0FKbI@)OL=*D7@3?w
zyy@BX_$LKd<JeQl+)r;ALc}ueJ`N99N0;GL<&C%g<6me%9lfs!h|dcyUCrCn{tTg+
zvM0an`-$y&WnYSCbjipD1(G0oXM(XMAPU3-#e>^%8<|<F_`c#z_KjlQ(zBBjm_Dd@
zc#5AUrAq}h@_j`Z5`b48;^{^k@eZJrBfu{}qAAoTa?CAZeM5yi${A{sY0WYB9ft|s
zyTeTap5@~Fe3WW|jP-C-RSLKH0ETcT47T8>**Q7za}dOsoyp4Sp&>i)G6%srgst+~
z8bNe%*x#KzPL-Twj^{(b5nSm#9Z%p!n2!lSX7XgEF(Tafu#||>V<W|JrooxpC_PvH
z;-xfwB?}ABQED=Pc0`UuA94%-y(Xc5uW9r<P68azy0bXZ?iPA-vQ4CtHXqbz<cM@K
zGP0`DYh8*XyPjB9xCo}W_ptv8(ehW}5)v}3f}2mU_^<Pwrj?x?Af<D=os`WqxVkzy
zrP~pakc5($hEe=3pSZe2zPeb6gB?K$M5bm<0-*Ec<pc*@M+NF>ljWAEV@o$~pfe+K
z1Wb{wgSpKGkM}y$7MC6Z6qQvO05aL8>#JWojru^zcn9~Gv2hx;#NAo28=Y&}xjGwf
z0&gdf#c36Ri<74h+<g2Fo15$Ffn-3uwCru(c(dF)iHh5SKEm<G5HkC?hTZHkEy{rf
zU2dwKG$Q;h8Mg86vzk<y{GfgH4?EzPXlJj|J{OU~e35z9qN=EYkxTM8vhcTqxISDt
zWw>2ZASrawB5dN(alZopF4&j_J{||#9HFADw~*()xtYwW?=HpCMg}rW&=v$jkzahl
z845U$86XzGe24VESK8Wfe6tq<srPpx;u8|y?k^SqVL~zK5x%qCOuaJ@ECwgL;S%0e
z%Vf$IvTyUpVe~Wt7n^}!?^H8X{0~%<B^TgUhA~AtDW2P`dy&vM`JsxsPoI}E2K3^<
zXoj=LO!W5Ocg;T;46B6Dw|KakURKDVD$l8SuG)Hl>PAgCIjLFM@kx;}7WuD1AzsJ>
z9uU6lEybaWi}QoA#=*2LVeIv{UGRx2oAAZhFmhP~Pu!~}2-dY03A#8s=(jO)HXHl)
z{<_r$440p$jDq*?<pt2nuHH}&!<h_H*8E}%LL=~{2}Zquu;((-r!glY;c(Zyb8z@9
zDp{>eW&=-%Q1l`c67GM6WZ(0F##$!V)JjkwF8BnA8QB4^#F%yjm}8_M3n|##KC&bT
z>1=BQw^>1Y`m=+65qn3+^Yhu+L>?=y`Lv_Ri4aV3aX}%Wc0Yi_hTR`Meymf>n3+lp
z@>#e1N@~aB<%EO;e!0gF9!R*!QxzsV9er_f2&}Fqql{QwAw-eXNaE<`7~`1Ft~68J
z-+BP&fWH-S4(7j?S8z>!$00`XJ}dHJoNd_eW|q$x0v&EX!R2wXXk~3}E#iJC14{ED
z@O~N&`lf*u3~ZsyBc;O8F2ANGGJZN4BulGrE!wPtf{Ga`s|KX>j~)>;)xAR<*Nx{B
zq$8iVl;n&0@gn~Ztj+gCs57U$_Iy-*%YAVefO7Ufh4K%gP+I+wU21m8$6m*_AB3wx
zLq+8eJcjf0H1T*Ol9iShLF@$Jv8xgIoK^n|UiatfGr#FcKOY|&n%wMce=Jbwv1?S-
z#H<ZwAsdaswDro0Ga4BjB-EpEVQg$mseLoo+-}=Fn-h)`(WXqt3gxP#<V8irwYO6R
zn(C|XT`eaqjIBDY{@g#}*685=c>fV`e^|f&L*z=>yuT78FMRUH3&u7XDJdA}QSS&f
z<3TwIZ-bHRWaIy8>HOoF&f_@VCBr02WYP(bnwu*>n(Aan^Lq{7`4v4xg>tT}l9Znh
zjMm8MaqY;jCO=}eOXA!eP8Ra3letlJh{zD;l3)9A?``ehJ@)uM_W8W`+57!^zuwOe
zMA2%`)8RO3Bv9rcZG|6-Rm|LtYoJAt<2<3ZZaDwO)03bBv>V6Sw%(E#G<G;2w*V%N
zmUQQ=mXWPYCbJd>(;%e;?TDccw8t>WFzIxV3|?o~oT<Nh^x83)(`B4Qqa(}^?>$*=
zLT|U1Qs+)C@t;o=+q$|Zm6K|G$5IZ9r6t{gCIb7XyOTZ3izpYz`;0;`hRK2vQBiWK
zBl_PuBV&s-t&C-W3I;83-J>2AmiUx%aCW}>R)6I8O9_xL0)10#<WK|}TvHv@P&7oX
zzv6+`P*V$NO58ODvuY1HoC}lPt2u}hD5$fbDV8Dcdy2$sE`~3cm#J_~i}~w6S7uX`
zgEy(DfQ58;eZHrVux|aszL=QhCdraH2vZ<4(Cppwuaq+;ht&J?)`Q-HLBx$jYNm>)
zrG7b8x#Un=;miiTBfP`hTy8seihWDE#R>LiZ;LE`qwOx{2@2vW4-f&zpb!rl8VOf)
zU)}YGMk^o_!B-dyqx{|7<l;YpoPk_$(2rl@AAjJnuf8&MMJ41AWG)NaahG|=SOlmI
z-c3*AzArd5KLS!7Fj6mkG(V)j$~DsNoTx@qgG+pHtr>k&_Dj_ju3_MON1lV5c6Mwm
zd|~XEqWziT_V0j}$`+gS6CCG}XViFd<#oT^#^X0l^c>LA#qr>?B3-FD{@o#gSxYiG
z6er)17fLT)dpm37S%onQ3;zY%tzq1(<sCuP<pm7+H1mZ0v{T}bz4u!|Nkn#LG8nu>
zUGwC7_kzP_;P9EMeBcasD9pm_8jN?$t<NXHbs*=K_D7ds2Yho;&0Y?>V^{u2JsjBj
z*pfvZO)?Q-eb%z=9i1)WRL9#zMgl2!@JQBnNF~TLS*%Ydj`}<$Ry5{*E&!HBl6WTg
z;K76K9?+3Qr*U)r>85lG!Q5O?ett$WOdkXa1Kow1{gS8Ali{ACh38{H2O4g`02iqD
z@kj_PVQG{kf+MMS&>#`~RQD{`(xpOrAJ2Q^R$t<pre}ecH28eEQ-v99CtrRXEm>bA
z8>qJ41gK>K>=GazU1KpA3`wIledT(l-t}e@=sr4sSlZac0uu~mwiJ)y16Ep+caPaq
zOYE+sgo;FKn!Ty$5^~4zuw!WUXKBV@)buvU#N02!UxmXiO@p5kZXh3wB2pptL{K#{
zKmxCg*pt%*Aeb{oU!(J)zP+skIEmj9$J;b)4Zz9$zT;;Kc6(>5EkXEGayITC`;Emk
zsZfiLIIO71`q_IAGj6hrBT-qDWD7I1fxf<zZ;ecpidoUy1fUfo;(8ftmP85)`ugnP
z&=8~&a5=RN9$y2ut_))7Xz&Oen7ZcXR{8heTQsm=+=}FMb6nq}SzhB=obQvs{o3qb
zOVW|v2Ug^8pPjM+qBr&OB4IPHQS)?K*+F&n|G305*74PGs@V5Ps&!+8;j05`_)Aj{
zr=Dz#Qz-dHXHhxND78#x1B-=l{M4NdLT3V=<z~Fs8~I*yxzhF%PbAt1IlH0^l1(!~
z>Db@D2s2cLt2Wwgw!UxnlKFR<-Cvbxz~B>qv`$5#XISW|mZcQ=Uv_hUsWn4m?h6c1
zPZ|Dv>pYt@R9226Xp6n4AI|E?OHLH#uZqltDp%l{oJ0_4-bR9PDJ1f4w^!U(!aU0f
zY^gHMF6ek$?wL~`bv6rbCwr86>Fm(OS)XHc!cp!2MbGe3PDZd@YMOmHlPwgp_s{Md
z`}+N|C=v5+)Gf!eM1|N*<B_YpM{hYFx?YMByn1lNiKDmG-cizGWCQtJZg+EYe_-mw
zQANRri5^m;*?gltHoCJ3PLMgf%v4kqOF|B}7!=(5p?jCAGK%YxqbKdgZw{)KFFU;k
z6Wv+iYI_OLLO!;V{f4S(>;Y8t;D8;+&e(4S=^@AB>D2utyXCdNwU2>nSCSGEYr5;|
z$bil1n#sFW>Cs%Yp?-nqPpH3|<SWDXPD2;Fu2)-5oI@uyBxcr-!#b+&_QpJXeDykV
z>XgFq%BDL#y_}Q1RbamDm!>-vMH9;7#+W|&Q?^o0TE&ONia%lTCeQs>_blO$DT@5P
zl&hWL?hG1n;zLG6k7d#Aj_faA{JuW>L|Rq4@Db_b&Zh6=YhlbzSJ}a|tah#V0GC0r
zn!7rtYD$u_B%9h7zdXfSFD_(lny|gIta|adDd%DaKT)Pt!pnJ$pf&vsN<T`OV)A2Z
z>|%biO)<j6x3d)Qmj*NE9ZcC(+x!DAAku)6wtEX5nJ)5Ah7zTk8#YL#Rr53XK$1eq
c(q^R%&!@k;Vy@&umBFRloID(VC7w$8A4NcU^#A|>

literal 0
HcmV?d00001

diff --git a/screenshot-06-source-card-hover.png b/screenshot-06-source-card-hover.png
new file mode 100644
index 0000000000000000000000000000000000000000..16fb283f553bd46cc355cf62d3f6a7f30f62edf7
GIT binary patch
literal 108632
zcmeFYWmg>07A+dV-66QU1rHkB-QC^YA-KCkaCZ+7f@_fA4#8c52hZEdIp^N@2i~{G
zXc%-?cU5)O-fPO5J3>KD91#u|?$xVTh>{W_O0Ql))PY}Hm^a{+k!?E5SFccBNs0)n
zcziy|hSb57#v2SfQ<8cu3aLnsVN?IMy}f;V`C)0ztGZIJy?p@b<gB|}47G>{$!8*`
z=Vn#7?{&oQKiZCN|9<vQc(3Hj#6(5k2M#BBct2`sq_YMR!~A^=S5p7)Ut$<id7;4g
z|GW;K#QpzINaG4dSl&ruM8%knRLD@wFo~i-2>yL6CA7A3iAg9bDH**ZLpC!TWMz2A
zqFC(9TYCKv>Qsi+SVO4(4MButX399jlj%R7fk=pnmoO3*7A7MrEGRUVKxZkhQ&d)-
zn^ahsno?Ah)Yc#1&B}Q9y=gXHGjMW0VtSNr1T|F3(Cef}oC1+fZH$+LEBWx4B?N_l
zfPj#&rnYwC-z@~UD(m$C8ZIst4o+2JVRdb7X-!RuNGPi17ZK5XT%yh0U0Z{^urW#5
zFFO}wGWsROIb*oOcWc5lI&mQfbqc4g%(}OX>6TUv8WdOzhVM*%{q(h6`NE`97T)YS
z_0{!wB7>EamNwFq1euVRnVFe|gTvL`pW(R6V#??)m)Dba07pnjNUzfe69uJPDIiI?
zn8kGDy=ao;6xx5jcv%lLbXXpgy_uPfMH%u6Qn?_~<?FTpUcn#4{(*r)N=-K;uL5^>
z$7IAyiX+C*f@$wH(sS})`&?6cUDCe<Y?N1w7#V4bae16ib_WF6t+p!G>Sdp;wfjFm
zxL#~g6pF_gY9h%b8xKaC9&TOk(y3Oe@pxV1kR|SY#Sr^<!x9QN_Ns=5snL_3Dk|8b
z#I}gd;|1!DiE9%RIC)u7qgj%Qxo4)O%wUD0Sn9uqY?Bhh+-%LpY>n(=2OG%XEC1+*
zB;xa8b2(sUWo;CXBRpGe+y2#+*52M#rQLECOTe>G^BiW%011y3th3Z&FF?i;0RHE&
zU4DAF!HfPkqe#V3@$m3)aBNIWy2Fz{GLqEB8%sjwjmbzvW~8dIh@yyzvm)B6m3rB1
zS0t*%*86{ubWzo`z=%>*ii9_Ok1B&UKHXEJ+fGJG`tt1V8}MdtRa{fkbEd>UCMJf{
z{%5bR*;u-2gUO-$ub-~R^BoSGq&LT$t96_DOA@?%d_%DW>iL1n^+sP{t~UFi&wd?w
z;Zo_fIhk(uipt5QNTo6In2yYvuza;$;edqKlF8;~pr#I|$bp>-hl8b7D$-b}S?jMU
zk|3#p9~w?5bQqY(73f3E7w~@x1S3RS3(IP8a$tO1mhlUfe9mm;LY@N2@$D%O7!{hg
zlRrBiHzKlZr;83pQYuZf;S;5T@LM6V(*|Q>G1tF&jyAkj2pW!&Orn(g%oTtta=XzN
z7FSbKBk8IzggiP|xd8T(F~GM78%P{}0%c`HLSo3xy=?MB3UQcX2h)jO(Hq;;tbjb%
z@-QNv21$|}-lKG9f9P^)@DPWYVT~&Zh5|9BwG0QVxZlr%+Ml}&qihUev_XoUVuV(P
zDh7Rw*XK?`UcT0BJhLI^{&Kfcs~N5cNhPMU)9>TQ?iTwTKJVN4xjEbQ&b6h+{lOT#
z+LDs_c6TNSBqSueg_@4i{T8)qEfP9pB7U7xxeo8&XX)wb!C_(B{S4Y)1oKsEbYM|y
zw3=}f$crV7jEqWTGI&jfCqFpvF={n28-CjC6F*sMZ1K9WI$dt&bKawepsLE0&Ejx$
zsZwaNnEL%|ovfLFyQz=DW8?V|naz5BcBySJ0-Z{`$-?zyF=4sc`l>Ac<VSXUD$_3m
zb9H>!cDK`qrN)}w5m>TUh6Ds0Hm%jwwxx0ezt-B31CCBl`OJTu?932n{Rj^q219pq
z6`V2#lilbGTbmf-&vy4;y&=;2oj!w=rewv6g`wbw{_5i9X6=h@dzE|;)XiuzO%gLX
z+t~BtZ&P2fXq+5df9Dq4mA&KRp|$6So0)|LX&kZJpA7W$+-@h`7(K<(X<3~10lB(V
zRHc>bwZnv89X7Y}1cSPK9|zs>IPH86CSU)ZraP+V_2JRcY|MEP$jVWvsb&TS3Ob+V
zdJ_VYGb9saN{Zix%sm+uE<PrW#MM%V;jny%-<wu4`phJ!&&kLVDmui1iHY^1Li16R
zra%1|#u(~lq<G9&m@GZk%xYV_{qbslf=-1x_xy`=8Y3d=&E18uA{`ckmdOxOz7m(|
z$e#+8at_Ps9Z*>EGuthuw$y7^<#XLaLQRzDh^nllQ|WbE9bOAejgB7ohB(vG(k4;K
z)2db=T$?C0kh8E<NT>bC;;{YM>Zsger#qU;K<9nE+IFR21am$iU_D@hfWv%#wI4U0
z#TkSg9o%R>aWq#+wb}|-<ug+vOTcQzhOV+&SD{)dpToPmH-3le^78V6BJma)=~KJ;
zL{1DIX9kBY6b2dFd6}X=CX?RNa&u*7CN9@<zA)9nB8RP(dYJ-A2HOUd=NMW<5vTzz
zc58ZFegtf9A7^%u*kNe6eC~!z<#R{wK@Ez1ceOB?FWl7BBr-8MIf>1r=g^X!ogEPH
z#!KYs?&9sOttL@&?CDAi1;Pi%Epq(Cn|CZG4qq^X0RSwwI+D3(Wo2!z$>HpQO0d--
zpU#{^6ArHKl~`*SGSSP^{mkNG`Xd-Z#kMPM%mYy*Q=j_*Qiby(bYj1MkLK#iE>?u}
zcjD5(ll+~yNtTBn4Ryr|dl#d4q<WwbR*>0mxj)kIib;xQSXQ#~A(j-5^r~zLMQ;gR
zhcGB*3wDVNln74sl7?xem6WLU3a_%#)9YLxuCyS#cN4!we=WmStKZdgmd)dy;E0QR
zgk1blo7K=_>ld73r5Zz<MxgC$EKEPO0%Agm8BDs=9zL&YjkbNq-)Fi{V75@Ni!u-u
zyeB8`Ut8ldRGCDUp|$p`Feni52#072KYt~GmKH0cwdUgB;BmPV!L}P0&(Nw_168b!
zPulU&F<bQdA`a(0npvOc)gJ9ge4?P$Y}pSdE-)$WCi4`9*kRtheOn@%^|M^r{J>%A
zYOYef*?M7jB?d2p-RyFfW+6Ua;lo6W{rdOv9-G(`ZLhoY1d%>`o?GvllH1dj_mESC
z;>gm{(#awkl%nh~;H9CtyoLs+4lh^ln<GdbW-@T4FKNFC4O>S<OArjxy<azZp2^No
zRIiD^8!aYJu{;!Z#Ol?+O3<efi3!1>4#625uwacCYZO+JJ=rD{r3=G*-`MLYXV$y;
zt+lC4(bo19jp78<z|?b;-@z9O*EBk<b)O%{vlfb_mIOS`U!8Hg9(~Vwx!4w;VzADg
zT3ASuFw$t~X6CY(>}I!~KU=I<W@`^fW76NUPaqW)Av*KB*fK3wD&8U84B&A&px#F|
zwXmkU-ehBCU6`DV?;u+ZkBdV#lD?+p?ZudR#WM{`TY3}YXah96)$Auv6fq%6oLZ-x
z1e6D>;rRT54j3kes(Daj0<WE1U3XvhC-l>q4Yv|0qBOArITE&q;zl!OZ+}e~^5Ipg
zR>G;?-W;p9GU<K8!N8zjux2AB?jAp-bx)($oc{R}4C6!!>DKnH;A(#Vm#2moPP^5e
z*ib|~LVllkR6u4tb5ztOvFSDLUY;K@g7PmzD^N$@lADs4SoYV-8EX=h@fbIpU4N%f
zOFX3yma?ic>C@;DvcNI7A=r;+QaeoJ7g8!D)$HkYT+1B1c1pdbr<qbP%zrPVOJVza
z<KW=#YG1x4P=u6}^w(-zkX1o>dHKQp>5BWi7UnNQBNZq~Zr?$5b$9otXxD9bOELZQ
z=h>cREW&wjETmrUdWZJ<@%Q@o^UF)4KdKd^A#kvk?S9V{I=vzc``g<Lc=rHGnwnh|
z-tX3Xdith)xPGK9m+adc&vLjaS1vUrl16nQUI@O+H~A3b_Y4(oRp<TNE+<Ey7!3ep
zoB2cynA;l+yJ7Ry+Q{rbisZutSddm1e_x@8ei!ui`4ggJIpn<a0+VEv*bfyR%(_L$
zg~9}**pL|UT0IP^-S_dw<8LCgY%^Hcy~6;ZZGP&~I&Z2>-uKL1vI*hgFc*HN-UcIq
zgUnM0(2uv}%9lyxJt(xP$!@1R<3XLBops%SYVb~Z>Tl3ce#&xii~x}0dw&@MyX_%-
zKJ0<B)J;f8_~as?%tXUQM@=okNUI4ZT9Q`-xN9PWn+H?Ijb`IW@bL1ES$y7d4_LH)
zRCtt0>a}|HE&&t8EiLXse?WC))cYn9aHUO)WrsQDe&6J&1H-{3WHvS$p3S`Xy>YmZ
z>YQ_L&YDv4)aj^R;F}}d=m%;U6sx1UUePV6rl>=8ah6p<Qbnc9&Z-@5<(m!CIq!vJ
zV+tARu<{C4*V!=Abp2p7Cl$_^=YW+aOGIt8-)DR#X)Z(@He6OVPALNQD>z5CW$e9f
z&{xFhYR2veu&}Vm$aD(b_*v!U-`kw`6$FgmeH0frzt|EjqbKA#U*T8C7lNdmsYFbf
zH6Dtstf;um4_!^Ap7-+H06gqc#Sp;x8Mtx%`8qJ357(Awp?|iA<PBVe)SkYMC|-O8
zo6LlsJB1=G4U|Zhzu0CmXmb>*Emx}NZfqE&@}aOB{?H0L2avc*3s0+7)#|jn-r%-o
zG!R*%jorls=O+f>3bI_GD&2M{HoKo0@U~C#rE<C(`~WsqeO5Z3e<QqyMkb`ynhkx-
z<@co=P?@Vb93ueLAXE<h8Hk6=y_iWdT-r)Ne<ZUzf$V57C5XgkQf#s7m@Xbo&&))|
zVMZB|;*i<@q3h`dDDFEnv`93qvUt~OE!V0lIQ1Hxo1;1F2&l8g3xT~6fU6O|>5wX9
zBrZF|E<&U1mR<@bT@i8FguFl<)+|@TG&Y_IMbzD?c{4yq+1<Czm+9ev4T!QvgUA6^
zr_(O&1vMc)LeMHh4w5rn4m<}ZCui$G_x?m~nl!mmFEYE`YBDzlC<QyRt$E9B&fbw(
zI9$~_oj#EIhT=n!789nHrBW$Ye_q<(=L>W?PL@Sj4G2gaY+(j;KtHHeKtj9qwVd`d
za&X-#{xP$yAB`)C$VF0p)^;CU&%KQmh^Bwi)e>zh*5N^1se4yS&O}_eY6GSHKQF-k
zCz5W{XH#U1c~ce1j6=Ns5HV&8f}V%{ab7#x5bORBs|IMI<ZJpA`k3wO>kKoU&*Vt1
zlUylH>cL0z)$J~aiCr(aryC0SdL3T(m+t_dL7l%%Wzd$(eaWR^Q&0{brctk1%@+;>
z*v)P-Y``BgRA<<yFk!d$^)wu{&#-2x*_yLxyFe74m8;zh@RqtBZjuK;Nih-)rV0iW
zG?}M}-!b>dW?TyJTh(hdSH#2dxSvhW&f3gXP`v3AVKp1mNXL%fTWPUp(*A;<12bqG
zr0V>1CwX>Oi->^0VYdpQ4L6PKFEJz-1l79=@gWT2V|?DhJV0}?7+jhXK?qXMqgfho
zU?P5>o%!l4&0AusTkI5D)N}#=oGRR%*&1Ezkz|^0L{6PP_la@U;&Epl!mZ>v{Jv&@
zo84Ty0QF5J_qqS=Y_&Gkl&0!VnM(QeeDz9iU*8nztM?Jup^s6|qJZEU8^qtOmU=Xc
z#SxMnqhn!(s<eI0adYLP;Y>hF;@}?3WQVuMUEj4$0@azzd9c~%{!#{YqkuwcF`u5<
z&}#yod6h)_j>H7Xr*);Lr)RJP$GuN&slk*EKSh>`<%`wa5n#eX{8ZmYQs~q{37(jS
zZ#uZUKv$5<XhK{Z7!c*X-W%6$YIEYW8UCvuhx^8|d1_6*C(=7Fw%F@~A<xIldwa6<
z*!4%&2+rvCM00yEMs*n9Ba&kN(fqmtTC3x$6`L*jajn{v;?gXa&oN^RWsJshSYnw5
zhRXB;EAQ7hQL({qF39VhD_x54L44Zm+ARj}$S$8KG?-imV~m#aTs0DAU}@>z^9j1a
zX6JQ=)=9_~E0AGXb(11!#D^wUc<DIc%*>coylXw?_w^DM$=8Fw!F>1b^*x*0N&3b1
z(D#_Y$Nk)9bV`}ODpaBzaEQoJ=8ty-ysdxy|6~Pfu}6n_d3mv#$^2TVWg2B>Mgw}3
zosBK{myrM2dKdQmC{RItl$NHZkV)7h$O2Xt7BGgP%N%bo=r!u}I=)I^Rtfw6>0klX
zURD;-EFKcxZ$TWW4odkPE|Xzq37!KDY7Kr>nj|>nMLd#EuM0qRIjvCjcb+l2w2X(m
zyj*TR4u3sQzQa69xWgqojA$og<xHph)us29hx7&hfbKyt7=~+Uy}kyGK)b@)MEGEH
z3<Ao(B`V5;Pp@*vt`E-l*PEEIcBfsbR5*tzt!At24`hpIzfV^tAW1T%Medi&6#EVi
zM7}Bry)Q@zY`-wd%kP=F!jqZg=jZqH^9zDT?(n*aJZaUW9DDPyaX3>tKR;hmQsN^=
zMybnYdNgYZs<;8%8#w1%n|zTgy~1qn0pw0T_cPuF1DOM+<y0QM4k!D$3I_EcVDvF)
zv599+Awc*K_tqN^393iwdWurYqCw%|;NoJ^YXIQjF~n6Mzc@+H%UFoWS^Y~X_>(MR
zdnPd44B-YtM63mVn@roiDWAIfi<&hM;};gVp~N!p$pedxU#!?5h<M!ao5uk;JzaYw
z611?k4vQq>pDB|T@Vtb%=^Kbj!~fuPz1Hq7fk~U{W5|lsxiOhkW+<1%fw``5SEbpA
z<rW17Z>`3~@8#w{tDU|x{r$m`Luy<fR7JF@7;$lMfDCH_LZT39=BsOE2CMne(NWzP
zL<3we)AUVMPwGts)F)yQoSWqz^wnkM6<94jP^DHGN}0A=cWq5@FV=z7Fl0ys@Y?Mp
z4==*1?OR^(X5|aj6hy*0I>X-v5}@Ox`2CbBHFf>(g;EMc1BYbbbicqscfe!JynC-<
ze%adkse2<rnQY>7TvX(|&4QHuPnlwwA8eY*ESB$f4fNeiTBOP%l*;UM(mR!is3MBp
zKHG;Y@n>^|3>%Q+{qpL)jZiEUvtMf1y}v5;=mPrI&dMtB0RLfg6ScEbK(TW4gi*T;
z-pl(jPb=dbg?1P4ng&)ZAreqMAkk1WnGHQ6L@u|7knv@&g>rIoAmK11T)fgvrsIb$
zZf~3Gn9bn|j0Q%&VH<7shUj;AC5$xYL0QjNjjvf?e<Dui<F=l+;ZIf4U*EVr#Z#?N
zL54%~;+pvUflSeM!t?&JI7#_w$as6u-*6u9y%G63F!5lQJRfhfzq)Rhs(p1i-1?qG
zb+P@!{rSnSU_3-p0LP<z<CC2r`4ct09}p>`Q$gOqaa$dnD^uLIUf6mJk;~zQ)qg{o
z-P>f?C+1T|j`rvIQC)AozuV#qum4L`x|vT4xBFS|8mGNpSOimf`_;LJeu>OC#|EH{
z9&b-K&j1cNH&QVMKkW-UgBQY>-X;Bb?|gqr!4Hebul3^xd)ud9^VP?ph`mGG0Oc7O
zV?0%c1FE%K@|HxOeA9W{Usl_k+jzLR6jXXkO7<*l1B`cuQSZVdBl^|rOh@NeeUE0p
zbGuqOw-gqlH<hsw;Szjs3jfRG+u&!<iZH+AmX{k?SRaGZw7m4eF(q(<f<M#Hkc9pe
zpWCI?`!^w=H-3M97P=mP0Ysxhg{IReud)(3Az}?E_3K~j$P7QqEb}^AZI&ATJT;!p
zlupR!@(Z0}^h9FNC{=5z0>>{M>s-+P{_;abCQS4QEPu#dG&eWgTa#8(Q(&|DK3uyx
zw*&fc4^X(n|BvBpS%O8pZj*)M_8_D7m!e7N@tK*?u`!%n^`%VDOcvIo5%w<bnDOo4
zlSnQfokmk-m25Kk>^TdD0}UpMHJ>#3Qel(_jCyrCb+I~>mp7M876%r}zv4zH2Nn03
z?l~<BmpWLDVi&!ck9v2X;_NC?Y2UGU3l2AZ*n1yf@d_z}pUP#EC0o*16%GqVx09QZ
zcI589BRwqc?bn+WpF5K}(`>7yX)9A{VRI?opU2Szn9z^YtD>3XxOgX0@+HM_W0`tN
zL!VS_ajZ?T)mw3_mDLo2WVox#3Q80d)Yavuv=CvFXCtk&v@)6DO?qAtk`vQVgjSAL
z2vV}|eUv7zfXbLHiciKhQA!e3N(!M&f)WY{&qg!d=Nuuf^TTGK#X-n_dwMGE%x+<C
zA4jyLGWcoll}2U1`}WC_^K_T_K#^L7%KOcJsybmO_F)L+Q~OG@3>H%Z+MP3?K8CZ4
zD=X=K1e;k~&s3<=oryKfaDF0DG!S%ka@snB$7Xb>B(~c;S-P9@x*K+6ANFJD=`Esb
z2v<%#Iy~G$zdL3;qx#lgXDB>{l$o#|27J%0%I|AiCa+MAbP!oA(+vKZ&0RR$E{mUD
zzpanKEBz$uLNWp9Y^=Q_F!ye5Zh$dE=iQ{!)?g7t$ZFOU8VWTQ^cD(1qrv1ozf2es
z!NF{~v4H^!vYD+ePE41@C%q;MLlcvtRd*tW>ggWMi<m6H*z22{t2OGkz?5Xt?`*JM
zhz)oP9ZmR*ommHfhlyv%5DR7U3p|@)f4%aHEynsg@j1PNUA!v|4Fh_Ud7m4x8$^yj
zg>!{bn+bd)W+jIHwJC`B*r=%7_7P{F55LY(S>OD!^)M*y-xl84+_svlu(&yie05i;
z)<ZIK>NPt+$5p}S^6AH2mjNNddWXQR_PnW<S@p;2qTVr?blc8#Oj*N&yvWJwWMU@@
zGcz+ESaf%HcTt9q5Xy6rn4`e9q&aRg8$T-2LPQHpPS46(C{xUqKXclR#A`x%xh%9@
zZVFJ7;aVszEBpum+vJz%$-Bpg=BI*8g^Gr3iR^6aDt)4LXEJh;1Z6DOgUKBD4~w)@
zpO%562&`9VsKE(#id*cPt1EQ#*96=yckBMOQXbfKoFi_BJ9$&drU*aDTn?2Cg))IP
z0Ina#J$-DA$czmjl{kM}J5NH|+FA0>I9OPNETLUpe}FXhx;^Q6JmmWD!S3fb&x@@P
zqg}zzx=%}u=2KHsjEom_2fgQYHcM#l3HkX*(6zMa8uXLqMgy7FiX@XdIy#!0nt)d>
zU>Hbj3VI0r!FD2e9=n@>H_DXZc3`bYI&;_a_hR@?`q6W696d0!zI{a43nSO(GuC@9
zb;G#2_SBJ)xr^m{&*c9IkDmIHb^t9@5>ma?J%ldx^V@FEY~x5ll4YPmM7i|<BqZJ8
zLBAlxV1Glm1qDH~Os=u-aC{G_mu&A9(<4HOl_Kt>vGMVrF1AZaMXNGM%ala*K5wLD
z7bpD4=5ZAC0Oj4s5||ys&!$wT$&e-VQ_sL*66xC@-1XTpsaS;(hJ5p#6KFgB<7EKP
zBrpTtdGp(WZtPpDeR(XTkNl{4P7=(ZV#kN$v#1ezxZF&K9ehW)-sX%=s*L|J{8ru7
z)%8EKMB|$WsxpcX))`=B#^`(#**ptPmda;XkBA|`Fxgpb?9FH~;!m+ubAvHj{X5_P
z@VK3DMaL^DDwf&Q=@XPhM@Qdjq9iRw$6Ph83XLV1OKD|R+)`}$Rb%IUo(Si08H`2=
zE<kXc#ut0F#9XnvTe=&Sgd~94E5Rz;CPmRqo08nfJi{W5@@DfiG7>)00Ij5`3azvf
zt29INrf<EQH>Zb27?#v`w(8L5+Tsa~7?`9oT$-o|YJlTk?TS6zo+gbnADWM6QtUUn
zoeK1YAsbufgU(Z-SWIkm^!3HX2Zs$}`Jm=zSEcP)>Et@}HGmLevJ9v<fnQ`&U&rGt
z={oYK&%VksuhwD*<FL2L`8#v|uLDs(m@f+WyLLS7TU#_1)UsCbVxaqR85G6q0;*K1
z%r|68O3H$!l9z(N9Br@Oy_R`neC`G#%|uZ#0W=(bc6irP!-&$VP{%R5pRI02sR)jO
z)<vOeWomiTUPfl-e5Lxt+)Yz{z93K$p2xJg>fiLc{CvLJTl@e$O-HHo&q%Wd2P4f#
z&DJccsuZfK>|qTGp<dEkRH)%M5BWBBlz4j8fp6Jz)Y6c&p1r9EDdjYL1;-VK*-izY
zRcu0J&`nHqJ}Y6FX;H!n<&`tqL{Dvvikv~4RbFgUorg?O$)q0~Xb9R>hfqkTUcyRz
zijppz?Y}>mD)fJe$Q`<@?Gj_qXROL)wVpo#s2JY2qZAYn5D*mwub=BYS24HRC>(Yx
z8M2=(%(Xj`B5f9#)<lZ*><hfut}X#BlmXpTtauMb7@&_p+lXeF*EEfsor8l>sc1M1
zx%Yek7<^{WRXKpAZU;_|pH_I3niezv>x4r9&(G&-Zya#v*_vnXuhMKHXDclN%*+aQ
zZ;&)@wSXnzae+ohSLw7n0$MkB8$H649_7E*fGAD_LZNWeW3$&oapy#*&|<0pAUl9@
zl1^WAD!Ja$^SR2jubN!ul%KSuxkxDq`bEV=@p&*iecg2&B(6`}6Kc#=tLPEk`fDf4
z=32}r!|Sau3D`3^WBty#>bwQkG?iT_qhGQi0(|=a=LH}Lza8gb2&9q?+f`_8^1UlL
zCAq@d@AB2Gb`qUqDMlgo`RxaY@=^0=)ksX(gL!d4dW(JT0qKqG^j_cT8>P>(U~8mI
zAqoEmwKMeT^>Z5!FYh<s$5`gw4$mtN4vyP3o;c8(s?oUM6tJ?k)^0SDJxe|1zB}zI
z45L8%US~*l7tJ)D$qxLq)Q*n2Pe{1uVzEzA#i)*+P{UMb5@IM?T3V5AUqGYFF=ey}
zee;Xm+WbKAMXTd>t**4E;e7B%Dre}bWOyw4oox!c^-f^WEwc^0%_>cIz1m~gXe+9y
zSpMotw`71xHz+UAXt(CI)PwB2|D#f|a4()j7!2+KmKac;E_SIwYis`qw@Z#D1Nv{1
zaJGBMs|XWD0EVQkmSnk#jEpP}|3f146X@OHa=N{HZ&XxhEXt-2tZ6=3-P25V>qu^S
z1qFlS`HOA#ybp0i0-^RUg<_1mqv{^N&(=U`Y|uc=915{$vO}U6q#_uHaqQ_OhY8?=
zhKS3ezrVy3`{uJRPrV<fFRSIf_>sDMlEVLSF&Xh>UcFLX{S-B5*NAzsO|rwV<I~x*
zPh<+LcB7vEE?Sx3oi&?v)zmjhg>@2=q!MAyJsxivN!_(tx9waCI*Fg(*jKyA=+d%>
zb>K+^cWCy;GJF9@s_U$G`r-j4mQ;bEsPLMAAiKlcJ<6yAbmOI@q`skAAI%<eb*Pjp
zB~ij!Gxu@~i<{BW(aC2&2s~wfaOQTQOp-(Q+UOQMKuonVNMd7V#xU3GQEmMu6A9!e
z(mNIe*r3F6-F8N~h1pqNryXi}wAs8e<{6QJ$S&KsI#tkqkB}cE<3VC(-|(I(Q!GTM
z3f@ITCW_6iDwfM$zQ6iY`iE+)!u-eQzA(77ZrzP`)mDei;|2S3bVK!~#zy0e(ENOo
z8jpj?&9X9TyNP~hdHv3Rj65!rJsXeRYOLLwa^%koXGU=XV8N6+=@ov@4_lX*BqV|j
zVdswPUu@}UX$AbA;&r=aIB+^=w+_J+i`S*ml9s01?8Om{!fJEa)Jex^dw0W{RYtdf
zR>SaGK2>il(4U;>qx%SiP5pW&T^3HGeiF@rTy}U&dkPynqPsn6=6#1>83sKuqcHNl
zxr>j#js{NB51Ue@DvM6*{dzoXTuPCY=J=3!VhkuhRRC9@%}1aqugPv<XjpGPaR%y2
zB)<hKy7@q`R?wHFMsW>|U&jlzU{LS9fCe(XatQ)H@H48_YZ-qB$1oBTe=5dJuP|AG
zPs)@NgTTgwZWZPN%|ZX=rb8XXKv09ios)}UP2_6zI{J0l=!7bIh+(TorzM2oOKtoW
z<=UKfV+r{XP=6G4SQs>BGaHhs2gy885VDvskILLB#gKXgf>yRMzz7JEu_!n0ci+Q=
z4^e^--^MI_r#DFDZ)$FCR6>L!V6x_UoU=SBE~0DcQFb5PxvrARwMx#vPRxC+Cn`En
zKrGG77nk_uOQMYV`xCPcToV%#a+ra@qnCPP@!!7$>MUpWv|H>PXNdeDA~EUa3q-GA
z(FdI!Nk>Og{Ev^0PFLHKCT`x)z+|w2CL8|-iW#3~eG~Apq*7?fidtHJ17z23cSDqB
zuamW1`<fzI3NKyKRR+_an3MAp?6Cikdv10Xq!ak;f35<1rQy24>qd%<tPeC_FC^87
z>47W@STV5#RBKQ|&%xm-5R18!Bn%y@QmObd0(}VJ^X{HoiU86o|4DG6_@B8J``j_T
z=q4aM_xART?B@vizP|rk{qICmB|E=;>>MpkVu3QNz#W667X5$cr5a^G@M3E;trnmx
zD2_h#nk?P%;obH1^=fLVOSZCa4&KSj%M%dj;$;~*N#B}65D^g}BFZ{;+>KE(GoO#9
zF%6q*Yp(=1@LrW^Hge=@m3$0%WB;?&{HGN@xJms)&<t^C5fGTsZy;q@+sEH8e3E&5
zSzDQ96W~v1$PmlOK#(-mdLRaczyvEZGxN(Aj&cNqeAS|G_R-XIX~W1tV5OLnKq+a=
zUmnfTIYP|>NgIz#4xGcAJhz&P3N%d2>U=@zA0=@A5)-Pz85tPgO|-a)1tm}*@(m^n
zG)rVYFfddDfzopXpZj!w6^F~7_-|g~>IteVE5jql5hEr^#j9IQzxHst3}s<`mpIaN
zEtoU{NHcZ%-*(K?9qOJSKO@G7!+7T0!^6Wr<MK2wu%@sO6Bn0~rxHH_<3EXwe~n+E
z#EB-CkADMaLOnju4|CJgXxx)Oe$@Cry4l&Kp=Y0m{xv>*^I~fX3JNMKPk#{&|0g(;
zhzld0kwN|4T#GwT(lq>=w3$4uFgOd)=ppCeP$Nx%fDYTLO-KlMvu`{q+dT$p_*S*B
zv^1zolEF(bgGQQ`m7#hPUh3~BzynUW$vPw?<j>uOvbeamw6wCWZcNFD$@Jm-!h(Xn
zJ~EF|aa-H!9R}Ux4Ej?L)fpC&*wF=l{vFT^g-VnZQi_sW%i(<2;fhOV1N7`1RQp0?
zFPFh3BFIRk{O?=Aks^cD=RHgL`S?;67d2|EG;+e|-kH)!bxB-cq_(jBd$R<}e=}3T
zft$^42UvP3=1S7oqgM_TNouM|L#(X68L3|X=S?Cd#Pb`Hh>=Cw(>uFkV+aJ)|2MM7
zk|t9<xzA3`iV0sW{O@G{e%%CdlD{|n-xvS?{z;@bX+m&tFw0gP8UexcUJP_j$iepZ
z)z#5lmYp3ZxV%AufuNF)VT`o96ZQ7?zDqzGE?#N*rT@)iZebzr@92ZL5Le9LcBLf?
z=asauXzlD|RHg<&8$Qp=)t;asCLM=%uNyTJ6P3;0R1nFaH_rQs;8|E+-ox@qi1fSQ
z>Q`6)p;+J4RLJo$nYzdO#{H2LJmNR`VihWmt1Z8VBhbx1XIEB~m)E<XVq@>`?p9Y+
zRFsrN>b9y^X<!o&C^wimmJkO92?quSy0|oHLMcd)!$E`?9Zs_YmVk_i$e>(O6dNl?
zE3dK<L$7iEdm`5l=mScklj}ox?^}G}5_w(r?EHlIM=&-2p~v9Wey!UnHwrrXT0zKY
zcR)uTH=};%7vD$zS!~V0#kQ+YmB)~&?=jFMk$R`<ZH8j2Pfxb!o`DmkuBHY$8Bde>
zzA4GcxSTZ$9o}GQGNkGmc<X%gz$D~e4>>uRF19^gW>4Sx#OM6{U`uaIO^yb6`SL6-
zAn=Do_yJ%>|LiRJ4V7679%_O&`riN{skz{I21GuN-_!Y0^RdC<GzHMny}l<WHuMY(
z21SAIi+t``=)+#!!*!6K4Gs<piPz&pc0qz-F_J<cIspO;798o0cZ@|6nX?j+8<BEy
zyWmEC<7_TA{g>-O5#jjsH5$zmd%*1-aJ%PQ?Dgur!xP_PP#f%RUXakzF8}-)`zZ04
zoWtjHx0A(5`2PKSH8rf&KbO15rSkf9b<}nKf2M@P<i7dbFOQAQPENjR-iL&LdAaC&
z1cL>b;gj?8VmQJ6=NsR@C+(x4p;lB@I!=I5Qmu7k-{~XvEy={eVYtE68kF$*EDLhd
zr+%P*4Mll9&hHj#*KKSfJ-qzZTOIeO3QIxR)NHLw>Fgv#Mu_luc}hX2`avk*H@No9
zV1haQ9ocrN;qlSEwyq9l71Hi%duZazmx0;2xqC!Hz9Z1^O7fTrfmau5$D}o($x6%>
z@CCsFV-u6`6>L7xS^Ly~UXu>mpqtrF_N%Q?WA$Gc`@MIhSkJ!&1iZ{wd;j>{rcx@0
z=%;Ktni?o+wf2?a4y1L0SNyN`Itq<Hv|SU|%4Ksy=dzkJk}g5QXC5C7x|=>-A0Br;
zi^t;ggD~XWL~fUswzj3EWv9nxr`dSP!GXnM2#WdlM7Q(LeBKeAo&1E{6UFe@tMRa<
za@l__2SCxI1G?wCfOQ)uNTA7ji~zSfe0^o5MTKS)6AlheELc4DGq?ZG@tG^_d?7U>
zA_FF-U%KtcgnV0G+k*r|xw#&J!x<uEip27{or~?ihwF_?9a9!HU~?$#Wno}oxZTEX
zHhR!oXVhzd?o8MRFC=!20p=j|DU0)$ZkJ!X)tr=siP8kyz-ssQN2DvIjbB6xMH2Z%
zU(L5g2m1J24#@S)cvsCQ^xom^W4A|BrhEbzRj3f9D~67kdM-OTH6>RP{jV6i1%Y7}
zY;<=y*XUq48ccRgjJncn{bMbTkZ+~=_*Jsl@w}|8%w-`d{JZbSq9P)BVo|t7)wWX)
zH`an*pB{hRPEIn5EEa^ozbOM1B!HGFsbYlB8wniOdZ7l=XQR{eit#B5gGQ%H1GQ{?
zcv#{@h(m%rF_XQL5;uZAzU1}mfT6ftM)ew(N;TQM&UiHPX07JPRtSjGP{ft~*xEAH
zLR#dAl@eKHRra~L%0HsT8AL)1_gCf<;8Jw6K|3#jGDwU%fQNvDl-fbvBx_=ltRtl$
z3*y0T?!OWaf?)C|J=WG%R?PcCPvcubyQfB@p7&@M6dJ7UKewktn|+}9Oxt6hx{gt?
z7q54|X$-kprdnB{;{^~Dq(+AT4X;#jw3;b-clJhVdR;)lYakcc5+Ar}abH02bBGb`
zm4E+IL$L$quuA{;ITpsSGLO$5a43GFQCck)Q!rMqr*WM~@68#~FkO$hghejc)T<7N
zWvRB7UYi1e*c^&z?d|17a<v&DtRMw?bNp&(EBV6GpJ5!GHoEKojuHEx--4bPHR?Y8
zJ|h6VPsoe6qW#W<ObD60@xwK`E5gK^w~nJvd^^2_ZO|<h6;dn{Z1=0(5#Ypy&)DsB
z)_->1ff%DffqauUhs*ZfcsqH0Jupzj;0JC`AA5WK_T6aF<5lWJ)`Lw(VE)3K31`_T
zwIFq9tv)Zv|0K)2vS{q^Mpmz;m7qW2{_r9142DkX{?hdN8bY|ZwpJgU7Ca`JO(=kj
zd|_e|g;Ey>>g_!@bTKHd^rkNz_UouBfyZ-|5o>UmBeZmMeGaeRzlEmFtNWJC=lxD~
z2ej*uac8xKg_$S6izZTo=5Cor{TqB-TwH}90-i5>x{U1X?4W`6xE&VP)^_;#I~VlU
zd5rpBrHeb1`P?_qsa3hV@~zkEyA#6FuFsUl?PCw<FG}Xgp^`|mr_iQ^HNn8c@4tN_
z<ZlrF5c)qaz$fr&GY|z0_sdA9Z@Uv~a$DQd7h7)wgq={e*-L2TGY0b~2<9IfHK1n{
z#qC?r;=enBh>y!@hr_v*LSr0f0kTe(CMKV>EtZ>J=iqWaky0>o2+?h!6fAc<0!x-F
zpLYNzK|20`&&y>eEH7rEdIe5;IT)7A<5N*ivrPpt^SNCfs-VnO3f)3bpisOVe?92f
zX*I#!e%yJbLVDR|yJGf@h@RdxAptc)tl(pOF=+c*`~uV6$U!mP%~K7u?K>={dgFgj
zvn|SHvf-6D?YvDyB_Md4MS{;Oo#bEgeFsXee-{erWT4tp!E0DdgMO-vBu#D+$`JEp
zy_V<KQ}hB(ZHot63akWW`f66Z(L0jAfkPWeSfN0LS9Q|;{St|}wP=)YG$Je1Yv~`l
zefP!&nDlwu&_10tG|&zsW73($Eavs>hy=3b5QRf)y_u&y3xZ>emh0?%spGb?v~0Ft
zM{{cfVQ<xPB~%XTR4avbOtRz`_QzeO>!aX%_?JnBvLS10>nQah(e=(76taMb#7aSh
z0+9>neMYh(oi%PxV97xX!mz`?3ylU;Iis-fZN;U7w}($K!tKSyE{Uvc%mwzX455Hb
zE$p0u)u-@~4UBdd0A)A7)`Qv+5w5edA)`p?6$ShsIy^R!T5@xVAPiYhNz>v*3tR$%
z%k(;?!A&>R-{RO&;Xj6$@(a<#`64p)Io!kH(c%0o3Iue@^}8r@$kH;uUp+s@DVP4J
zS5eOUq&ZW9XzB|<u(fTiyRSlP4pvA-rt9lhuVN{oQ6UcxF2Z>LlIeK?&*+00TdcBh
zpJ8SklPD4U`3oeXGv582sC5cNIl`!Cw?89A3UPIyMlAHoM2jzRDbW!7M=!Jm0msL9
zW%U$K`pqf_qs*T*U)qF!3fhhEfb;GTS}^XG4P)820=W!}Kb%ZVBsu;sOQieAh3H4w
z4#~8tZ&C~vqjYqR8k&eXU!>fu-et6(2Szyc1Y$b9obNypEy*=1sL7Nil-ee$n!vN{
zfEtJr{Oe~2G8|luhGKfvz`DRE<ndl$TI!6-xm}xOc9Th1%@ZxU8v25Uo1=vV^~q-+
z2eZh=K~kY5=<y<5!}~3W`T4*jx!uOpw{e6S#A)|Ww+WWM4=#MZ54{zte@L^3zkYSi
z9x#lL2pr1xdG+DEX5_xxYT>JEV-$9+5C~VQm&Q7$(8fN|<ng_6QwInMV!qCjh^NvQ
z8I+K6{dkON-#z|#(j>u0Kw&J!OGI-OFoBV)%&kmM_K&1j=f$B5QbXau0lN44nOOZd
zAV%aBYlwLB-_zs|WT8FDv_L^GFj(5|I8j1I1{4~m&62kD;SI=>1rNYhyqa$VQ7+by
zM5f#XpreZ<3wNHBs}6<!4A-DCHJ1;PW8&Nvk7v1))DrS}*;!illv;w^rZBkzv78*z
zpAHwXG*6LKC@3f@uY>Eus7Ve`U<1TN-xv&Ox1Rs%Prmf;ZVXLMxd{kJcx;R=Zd4!{
zjU~_?^`fO4Duud4ScxP030#W~pL^~TmA<gw@{}Blt)L0p$MUMEs?j;cYL3?L{t}Vt
z59mT%3}>>H|2liQ?G7;3A=<JP2ZjO`Ij->6TpBqM!M<G+zJ%|vvi)@zq_6Ajqxe03
z_oFLkd}1qRT{8^^>X7&aCWEJ324BzwA=Q~$y@t&yBMd1!`NrpJaQoqAr7V%fuq++&
zD0w31S+DBk-r0TC*vjkoW`Aqz9f_5i8f1Oc5r378PtXP27cxh;Au@3tVA-rSnhya$
z{)_fg64Qt-_6`orHPm_pa3VE&In*dnJv}7M2^YFQ131dX5ey3p3$IR=MzNVz=~N^2
zM_=Dqs{95~Mc-{&+L2%D{xX%2EF=n=llG{n2?Y}u+va!p%=%qk%gb2RN&^w{SiLdb
zymP#LreR1UVla@s?NUxT0{$TjA3v9~&ryFLj2i>E&La|@{uU&jwvtA=RUjn?gLhG6
z0V4tNZdrUd<TweOh&T7whm~PN;xMe~eD^l*!PO5HxXv#rF>5qKl$D7l89es_It*M_
z+}y)ocs&u2aOtCr&-?rPacQ)M&~m|S?ChYi)qHSuwgz4Qo)ip5{=a4Pj78`#vGNa=
zv8+RYF@`2A)AKI9o(~fhVGWcZ%Cs7r5B{*y-|Qa!e%5RWe>TGK>r%%fv6UZ4<9@nF
zx{)jE*&49*h!dZMKc08x_k9Qq4gDG;n-E9Th0o)LTf)qLA$EyDXZCzB#VUa@OuL9@
z=>5TI2csfC9J-`B2s(~zEd9OkMk4@Sm^g0NibA;KgM&K2gdDd+tt~Anql1g#d3drw
z8qsF4jzElcc38mo;hX*X6u{;P)^f^hfsj1JqEIr!!`qb>qK}s}6o%Hq65>NnAWH}f
z4==n^&=n=kr-1~bXP-ZBl)C^-0Kr80&s<8ne8Q=m>1~9(9u3ArFCd$EbbJiD3EMxi
zACZuH71-$LMuGC^@I5xPvkMh>yWG*dpohut4XMtPBz|RJo1|Nvu#ZM+v)q)QkpWw@
ze7f>`#xS;z3?%SqRUCT)_n47Mvw=PVODdSABTA#$+P~)fnkqz3jBGkxcFhxw8nj5i
zyT976*8ZK3FtE>v2dj)fTnxCS`{^>0(IHSBAQ87s_r4(JZHfJ=QwGZ|0EI0+`HE3$
z=~32{c2w-NuUx3p1iPc_0vlr)(jIUTKeCm({Hn8ges3?40N;%XzhO-u%p{Y*?;Ws*
zjQ`5cg}6c;v55Ddo-ix;30g^~M9Z+@l05d!B~BZu<Jxjr3yg&tp(dqB-<ua|P$wiv
zDh|ctzJgVS`O}(}YV5OXqUDoCl5f*d6`Vs}zji9KSyC#mA_GffE=I8@R4ZSqH5+kd
z-UAQxqor^Ph8Z;@JdcY-NF~td$do;(WKicnEX(2;b?$yAkWsa}Sf(+fr81&8=kn{4
z@Z`HG9Ez*9I++gbjpG%26huhA*sU!WK6ILn+QCN!0_wWb>8sDOsp#(R+#W!`<s9R5
za(c?`Zs&cmr3&-*X_@$k-}6^fogL!Pm*;jcm7M-6osWyBOO34h#Hew|ZlxgNvE?*r
zfZ{Rvv}L_mrnr_wHNl|S@KwL-Y^%UcrULWv`tS{Vr};!aApX=2yzoC6<0*+5h@*l2
ze5Jf{FcoyQ%ZkgK2fh4ezG{g)LE=2H*={Wve&KR=^yzN%t*^(^o#i*QNvcW92(exa
zXeTl@HUt*fj3Df{G?r6B9_Sz@pjNBLutRm-m6@qEni`W-A6NX6F|r0D7d$u^0gTQe
z)kv(yv)OvrURV8e7fL<ySG6<6(hF>CYzi6<Qd;QoKFmv;uSsUq|KaXdTpoE%W{Tr^
zjL3lRbF+=EDU}mrM`itHb0J0<tRY<;$P;CJl#!9~@PN>lAys^Oev62BGvmb+k5%S2
zimPpa1KQhrbX}!9iPx_;gDd+`GUv<Avyw_6sH7w$sFURAMlhsAL`(ofu#-BQ+OPx*
zg@hI;9)^LDV;CiUjbehAIP!>4iuX-!*mg-KDl$^c3#}wc0OOkntTUG(dE}c2SU9*q
zjg;nuOS*@9$emI1^pSe!a-R}ddk7=sYN+xyIF>MEnlXttiLjKvDT~_wqw>@Wm<5Mz
zgRXu6dy^&MJ7Z)Mx>*h}a613uK{$RuFJ%gBj0yZiBG`=m&G@z9f7aiD%^`U>f-qMb
zXWmw9cJaeD=dlDHWvPv3L=^x1tW8ue#O95=2_bpIn{SrnFrbz6cZ(1SwOOj7%H+Bi
zYvAyk^OA)B9SrR76+B68ws=1?*l?F6mifQMvn;W_^uf`@4RBuT|JnE7o!F#Kxfq!L
zu#wdqr1_kS$$B3bSHaTw-ZXUi|D0i<M5F)>%!;Z3!Do#@&FLK5<38M!htnkaG~3hh
z%v8hw8h60yRC<yWEYlF1H5M~LBX4*OFbOEDtD75Rf83(i5t7#mDk`%;U3B{YNl18U
z5%9YMW=HTYh2P6HA{<=mO@ajZdZ*_=e~~SQD@z<DnaM2(Y4}G;{EI-Kw80ESlRRzf
zIGKyaEDb-{3|@%DE~hu-%%vNXVBz#2t(uDyvS6BisT62G`7z%H`}#q}oPl65yyGN^
zNm<#j{jm|AY3ZRdns~Z@C{7=VkQYq4wA55J4GoQpEskvNW)3zsgLhD*J1@^eu1B*9
zN>Y6fj3A%`*0_E(?BjNN0dtDW<sdjG$Iin8{QZ$9*bx(rpt<b%bhk8~^&2qhtP&MR
z(64>CDkb`1`XLg?bZiE#R?C^t0(l3AgG7o-u;5XxF3<C5Tk>csyokx4<uL--imK}B
z&>y;|<&b>0{xPlN?-W=<s+hNNc$NBzsx1iuCIwX2G$9ubH>Pfne0Xc0*qMfmjFw7s
zs|IVkx#+qWD-|RhR<I2q5f-ED|9-zP<Xpgxt?cbNo%i}bI8%cB7a{vE5R)#Qb4#WM
zjsQ@Es>3$idU`*hk?`?&TPHxmCqa&mF6tRNw%%n56dKE!!4hG_K=)t#tF4Y<sFHcz
zPv3{p)4X?~kk8f%#l=$@4<gXP*^1nfOEUz2Df#n`O=Di_?y-xq%NL2?q_#tYTS3{3
z^JhH|(PDb&$wk^9e5>8=WMDGCr6<j-Hy_hTbFCSR6)<f12_JBESXYK)W=;87JD-{7
zQsNGe!SHvvI!1yRqn?Yi12xF3_;y+w<gM2mAA^eM_i&9VhL>(<kaQ2=D2a+G6zMcd
z>b}vuwno3}W_Og+*?9(w0asgF`vM)14$tQY0_u;ftTU+$x<F6>#5X#g=i_2C9_$5H
zp<zyBcz7_s&&^Sc2-@+E%8!BKoQevCR7GC_*CTvJusl|~rN+77P=uvK7O%9n7P<wj
zYnm#U2P;qIa1dZQm?y8UuEcF5{L>gu!Qo>NFKg}AGMlZ{#nVAjkKg0mWin6i=T8Cf
z{@E`7IDnF%t1v!TBC-F&7N~9%v#A1AFh-K84dLBgT)^VIQ6MN?f1e3+w%|R*F1Ofg
zR;WZ2olz4LA57+N1MW6GJzb^MOll`3=f5SQzHlXBVq!vmRxBKrx=J2Z^$Dz`n4my|
zrLP3>332|u0AU!<t^PK!q@=REd~@2v1o+Xg&cvW=G*xJBWmSQMWa?q01d)*{(4}Z$
zu?Q5{_07#i9q^yeg}?J=2FpJ!*3XoW5kc}h@|FY20kTHF!JGgK)PPs`0vufZZw^Bd
zU?pfnGeaaZG;+@5!ot8D>#vAy&EO1+lmB@Exm=D=q#XMEh2SFQg;4Z3f3KpF`^(}y
zljxgKXiHt#CFw_DMkiQ>892)3{duL+;VXXCLfI&x8wS0b9FaJ{_8JxD(&|KUt~2UE
zJ=sB5)6*gm|0JGUe3U>u-J8ag^9_wY5bmtb@Hww!0|^<q%W3y(O^qB_9V;Uft$4iF
z@dzyB+cG*~{N5&*-9Ctjn*%^W5OHT;j%#};q?hfMo8VQgsDs^3wKgoe{P=(%kB<Bm
zOYrFH<HO@>HS@)mb@r2dHupp=jP3dPrn1UzzNn({%k8OmuZxvMnX~OHg_|y5`WJNE
z#T%$>0Y5GpBQ#9h=I1wf_28AIwq+nI97)lSmZtLa^Bq3MKtMu*<qU|KMY36D!;!{A
zI-b0sS~hSfK?wVHn2lR0Xo8fn0!G;km9sb?bp!em2Wr)sI$vE*@2}LI4nYfi7Q74y
z36GD5zo}_4C^gQ106AFe`h%l6)#jYFKe0x_n+KP!!m**1ld~RQi~<GnJp3Na39)-H
zw-W-|1{y0JkCQ*Lp*4;^mVkv@bX;7m?!Or4DpZ3vP=_=qZ!FM!x5_8}-FX^`8L^ln
z7r^tRJb=3jY^aMj+s_~?o$C=aX-q$p!<7S;<ZIj5M#bQ=!xUhg5<8J`XqNCf{>7@{
zMw9Xol=-f<nlAS?TZMV5AfFp^9{WbUxuqNTF23g3kglH1i}uo7SbtU3baj-+^Q4qU
z4EkVX0r;$d)H<IKU%@YDaAe_Z0akQJJwPN-phIzV?~UuWKK4R#E;6>>mjPoHSj<1$
zoVyeYzsAPy5)&KZ1$0G7W&`Q#_jvpEwE}xs95DVhJPe$k&NpYS54YLaAc7D~sAjc*
z7%}7)*6lK%kgE&m?lKU(0+Dd46dZf|+<_?d!jf1k_veRZG{m4NwQ|zMYeTN(CQEa`
z|6E;~80g^uPsE0m^Jqk=M2UB}yN3jTmQE3qknoxm8394aW>NMi)?hGzqQdpKq!rr+
zohmlCAT<h3JU{RH+GR8Js5`<@iFnMUp`iO@N!r6hB8}6Ymr|b4)}ky<*LeF$I<+d)
z6Anvv$-@8XTu|c7@AibE2vS}<@}sZd4)N|VTsmB>PFsLE+<o$Fq2yjfX}SQM{}!OZ
z15qpIDjj~$v03;e^@IX?NZRk^i|E0&aA>0jt!60?ZZk7Vl$wHM%<o12ortMAEalO|
zu`5-AH1o}u_C)SXW_I24dWQAW^~?&s`3b!^La)g3lbVTPbaU&w9c~}On46<RD<-p&
ziKm0Ve8DQxl8{KZoR+rkWv2eRwzdvNxFGYn?xO7-IZ-$SrV(dL7795SiHhSPvSN&c
zi`-yAp^h%o`C46_!|bK6@AC!rJ{Fx?@S`wKMkX$}0V-!<h{wOSx1C>}Fc%HIZjL@X
zQ0H;|3jgwjIe=-F_=ObbXbU9oV7J*g<GMUy)E8qlDkP6$<NX$wfI59+E&n}nfB;{L
zN`@Q)N3P5D_~%4!XI(p~As03an!l~hR^uC*u&*0uK(v7TnS*V25vi2AI(ClJWq0>S
z<cT*zvFrRY+Vrj%v?dg8;=z``L22gYljO^^dF*#}Z62sHn2yba-B!6n7pDtqcFhNz
z_amIpGA5HA{bpOnb^l+UMmmw`otnKNBE8t)e332iVP7BaS%Rvyu7I*C8ggYah`|QW
zAEtL=UWFO<=RNVsmVM>rNmQ<ZC3!g8YxJ<Tws*AGPA|YV`u!U@`DzE<)xyfk%5uOS
zpbHR7Nb)MqfL`1j&R`pF`^4ZaNUMaMSG0N9y*!BlQ$|r;J!lC+)dw?WJw!`XlsyBY
z4`FvlrPF@huI`hkr)MKV($)!!<ak8VEJ07BWD*nzu!-`2=5_^n(p}h@HtU4|2JPGK
zYZFsb65P(#c;QGB<)J@O(a~G)qYS`hngaeKSn7|vM{`gHJo1Q^k`hXy^xx9K0_&=(
z&wN~nBPcWp5=Kd$Y}fs}Id|uq&nsVSp^_d`8QRsWA2>HZ%lzMqv_c=e@l)JwN;lmx
z`Ra%#%S#4FqqQSWfyWapt^R=Re{iUdML6ykT1V7-z~Hve_x~_=7G6PaTeMf{?nb($
zOG=TDP>@DY5Ri~mx<k4<q!f_u5D*YSQW~U@4v{YDd<)M#_rCWZyfN+=cX;%8KEBv{
z?YZXst#$4A9$#q@R?VK%_Ha>n-}B~dsmCuyOQyw4dX(uiuZqOH&F!P<{JZ1IOEn6~
zkAg!&mK{bxKM^ojFO@*ZNXE#HUct-;v4!@jvbSbJMAt(NQgni!2%31U=LhRYbPxT|
z>}*Ote^$y@-Ltb5^E{`#T<AiaIwiSX{5D^i0I6Dynp$t`iMdsK)>aUj?<gHQNp&;w
z84m9sQ2dLZU3>@(=|8*GLegkVieD>^sThQAp6W#7$9VW1XFG<`AMXRKp$2pWd}0g?
z!=MEob;M`BY}*@O60@Pb?;E;TO8eu@tSfY1gugo(Qy?{X9`FnHMPksx`$z7&u+gYQ
z*+1Nrfhj1KTx<6Z+LzS|Nihq-NvHq3b#L~VIsDGHFor@*QV-Y1YkaSElWbB)v^pFw
zlIPFcMMpgdEb3wewEAQ=3}(H^EE&p+=50rR%^vHnNTpWo(a{Il4^)~V3=2Whc=!CI
z@a@}g(DH27t+r&nZ~7<#swNfri=BCbwWfh^5RyHPcUaHil%^8>@Ip(3Yhgmq5hp?1
z>%RIsaj!!^P9G7UUuy#y1ofHIpfn}0Yx_FuXR+zlEy0P}3o3t*3f+&hoa@+?@jwCz
zFhDm@)`JLlO>{IZ+X}lKi+aZb>{8U?o-!N&E}1RFPE00WT+6GWkCvati+GaOaDxul
zz*<DGmdCFww`t(?;tTg(9tD{iuC2)W0_{(0P|jPYIOBp!jwgF#;TbaWDOlPAxxX3y
z{Bl%Q<v<Jg6?TUQd2^DYPE^NxZ3MZCqdSQOn#C+XyYyW^93fvqxs@tx7pycJ(~~K`
z7M#oEWjjj%>4}4$q|inPCEvXSxnXtnV*a0%wDyCz8LfNnTh7O3G~B6p(#zfj=8c}y
z&?*l_cT!g7Udx0%*48FJ#dHq(V(G4R&}2V19_$pRq<q9@hSRB-;t0eM459^OEOR?U
z?AXy&(5Yt13{s#eIP>)jCh36TScxy63A^<4&(_u&wOm1+DEqA`lgVli43ZK*3O2?c
zv|2$KkKZ{$FICifF0r71jh*9K@|=C<lb-=P4txjCs@C+z2cW!!sLj1CJ#Z8}evC0C
z`Dd9kuZ!7Lwq_j)A<BDe=)c~orI);aU)Uvsor!yEW6}vR<W|fL?fq4?^9nxjSq}dA
z;j%M_W;-}h+x1>_H(UvK^Wx0udzDF_j^AU#PppHV-+UgPZAeP$1cShC5VV_bFvfDF
z;ZenIP;wC6(cIZNo?COJa={Q_`S~lxm0$ke?(h;$w}TR;fik~lkrv9`7+^bibO=v$
ze7gMSz)>R0`lFL}5V4`5xyJ#cid4b~?TE=QlQVIb?fvJ^rT+fH-H0@QoShm7rJB2L
z7QUM*FfB7Qh32zq2M)88gw&=sWeG7O?tANn-k=~k9pN@@9s@3)px$Jp2>_ws>vrMX
zz2Q}UX8h5~PmlD&V|fnbATf!ECUgcju8uoP;*n%LJxQMk7j8B`$Hc|M%P1<MyIaSu
z=tM|G)%3fL5PDo(F+U142*#Usj`5j<@?~R(36vBs%XE%fcQ*hmq%W#ifOrx8pLd1G
zUmI0GLtEM;T%I;))^yp=rWCDkLq2*%J<vU4(=SgB&uJu^0keG!MG21uH$j6T``6N7
z+RE*Wgf#U4>-3xWB|$gV?>w=$$q&o~o!uu3%#6`k=@883y|E?t1goq0m64*HY9v!W
zg~ER>BBmSbOZ;M_*gwTtF-wkZcz;<qn%m`jJZTf(yWw?ic&vjJ#*1)}fOH(Ih)CUo
zo1Y|nT`4GDotE)<czhlHjD#EV>)*csi6y<8CH8RS<f!iF>ALn0g5Zut%p%%VJ^E*~
z(=)uK(C54^^dX##O32sE!Y;VkC3`1!BA~-aJx;5;;>Wdh@48I9RzkQXOtV_rM{*_n
zq?dWCJ;U<vJCOZH2SIIv-$nhI5V@uz-;7FU_ifVODXh`*Uy&jRGqa40LPhqeiVB&g
z=%9j<)dZt}JS9Eq!;GTV_Tli?+oZ)&BTWDKFZs-|n5dFHNhJ)HUZ8HrzNgx_`(mUe
zaP%Y1U}O&49h2q)l5lT>0l5?#fxHJ2a(~@qe@`ov578wL9~1a!u}<}((&<{C<g!0p
zB~h@6`d59~6GDHnl=5_f_Lj@N5AuxHOKH<DJrg;Je||(Cn#5)#TG^t8SkQq`S0DW6
zpLU1=YAHn7>cijr0RNC~@?)Yg^S@UM0ul=J4FB_+L1O6tAOGS}4r+5yP*6=xjWkYM
zd%KM6_p%;_q{3^d;Gh4|6)0p}XUhPf@#4h`a5hCmL=-=(8Xg>62z2-G08jKOB>TZ3
zVqpOhJBptZM85-p^`Kj(-vpN1E*Ur*e}&^pB*oqK!9msi{Xc)wgzXY6%jz5~K3h)k
zCKWci{DD93wKNFkL9^QKzkaR1@1Fo6D=H`<0H&CLpw(To!SS&%98n0oN(Ev!(Rz7Z
zX%vov`}eNZPjxjl*vBWYF3+~Vc_Ua_S!w^w*DPiuyzTV6|4r)o2;_O;lpc8l2v-op
z5q4T%UFGpnru^{X#lP=k1v&<XT@ETC6DqjU{V_;VQz=Cq)>=Ji&gT$VO^u8YTXdC`
z=URga6ciP0K$PYUCFW>w-c>zC1aUs;>sODp(mufHHMZ;35}--avJ^b{j|ETqT4_86
z3Qi)a{OVx#!!&Sn=`U_Um?tGM(OLi%bXQADOE3(z4<eNuz&gFfsacc=Zm_+l|9hYC
zum29fdYt<UbLMA)B{%j!qGMp7Y-h*XCdy#V`zs!W6Yyd%letg+uP2A5l1RhPM^M*u
za(t}yoMidFjg1X{urxSQ<>fo4rly95)C9#O$w^moK{$d(Fr262`^CUgVRtQz(|!Bl
zzgob*@3@cL+vbG#+;{J)J$>r7Gv{5i)B@?9?_p%Wx2bP9Wk~wN+W?ipHyk7s6xe3T
zKd|e91IFS)Qd?WN?f<<jf86FGuvi1r0S;$&zz>5P2-FNj*#>vXyL}KA1Ax?<p&Sk%
zzYGixLJv(7d~>0X>38?Pef#!3lG^TbaB#l=Ly0YT!?3ooyZrJ^yKGUy!e8ne8X7)+
z+`Ux#SFHH^0z<;9`-za~Sd<(CSSH}id3VDBVy&+yDv-ppii_`=4m?1u4kh9G-YQMP
zsZ-;1<ynD&>3Mk$?kTG&-OsPBFhY;Bk-(@&8=zfjdeaF&S2z?-V*sF7lwV%^?`I+{
z83)bO#E)n=kpsiSa`rnfEG^lMQj(L&yZK{kMI<^FAaU6JFZs`f?BO%ihn1E5u_9UQ
z{>Dt5I`98`n{hjJto{McU4I2e&;M)Gge6(!|Fd7HlS$wvDd_0H!cB+3!pd4MjzwhT
z(}AiUf<|}SNU`bKCz|AcJRcm}yrL$JYv$*LYAhb8t(TkSqkv21{fI{*%a@%~2vl-9
zwV<<y_Vx<U3xH=WO&1&<p8W<_A`9RBEG|A?1BB?|VQ4T8533V+((qBRbs$FL<q;A{
zi*%g&NL^b4!j3na0-4#_DXFOx6%}=LZ^xMv5&ha2cojfni^w9KSDkT4OhyKD!62nf
zIR4%bf7Ga-gm!(kLjPQ?N0UlONXSdXXy$)&(*9m<J0s9u2#yH;F*fv&%mf|>>F{qK
zAE{w=je`S+U5B3GpA6T31?E4O0>9%E)$xTz2Y0U@C)p1Co&pdHz}g2v9G#JdTZorV
zQcq7wO6p#$d8~RA{LC4u3b?B@Y8coYqTuY6I6p^3L|k248~7ba!;28d9>*2O8z*4n
ziHanNltjZz!PbTtjm=v%$Kr`Of3QAA;5rJQES~h1|GOTb#eMsxPr45>$MrKo;L>BU
z06Irr0lFT~LxDI|38tW;f9`kB9U*jLKM2gEihD_X3<NKrL`76b@!TH*2pSU-0xw7+
zjoPQfQn?HGlFAF1SO@X(@kCnj*N;paA^xS097>Y9HQ|&op}F;7Rxp?j7m#mvWDz$5
zkc!z{Oabe~3vuwGZh!+&HWra!B2q6l@gaC;l<!|(7)}@YBg(G#A6@&D;gZ+`u3rHJ
ze-g?BGDB30;k*w6u_-7+8E6;h=U~(~eD(B}*By0hTl=EpwRlnbAWH<UaMMUkj8Kp*
zjp1n!vDmOU4IZ@eo~m45o)_ZZJ4C2uEu_t#-{XUX!K|44O~4@e2`~jffP15>s|2o@
z%Vz&SAlE^9^4kS;V+7M#;6NbHP|lw%AYsIK{a3Phgj8_+Ul-U$Oqn3>vjg%qz!usL
zf%+Eo4M>B1X^k`<x-y{h0(VL4tE&J&IYWrvM^FmaL#Hq=&(zZ%a{RE0RhP5Q<SI47
z{$tx;WpP#h=?<K=kGJ+$`3f{b?>>V=mTPZv6&wtC`0nfgTZ$*Z2dOyu?i=XHtL@go
zigzuCWdI{f_p58XTR>nS`09VoGysU{2hbcnuD04xB~Ot;!oompHiG-Y!Q$lJAdp~?
zM?=s`{r9mWApQLjxS5y&M2``LuG22Jl@gf%{09LG$k&UN%%T%=2MWPw_SS8t9@P2%
z{AX2N<K>1l5+DTp-rU5xii*PJDxFp3;O6d_oDBT(wZ1{>ri`?oR3<dGLwVSrRnpMV
z+(6#}&JC&~Y*GMhBxW<Ja^C$2L4eO@LlH-6?|F@XUhj2bWY<<Lplt20kEP+cP}odQ
zCXxmR1c<;oVj)p0wTeKtDkuf-{3XrbkCP>9E{Mf*0&Q+??iz%bNcVO;G(7y`Y&#zI
zVNQ*%1~3}~HBduM4FnIrN?*5mNdr|il6NvdrF7h$;WHoZSfYpYOb-Mb=b}P0z%K`3
z3UK!ThV(^^waT@lxJVo83J`d}0l56rUk9eUdgtAG2$?_#Pg7MD4wwbW<QEIL3$iT4
zrHubx=VBW-eQdD`yvpK8e?N^7Hlb7nJU?i&ugrW!F{}s<ovgJBgtPHudho(P@Qm!f
zyU+%>VJY7W*$jfm0n*k8vHJG*_ALQeF5FN=f!l#v%sKI;9}%1S9Cj@!Ix+hVHyX-;
zG=T917_JN$oDTp_5*l>@nQFOD=w%}cbZXi5U%^8HE97_7g)xRPHa2a3x_30FcyXfl
z3qBZ=!fLrIn|{64Jn%*eG>)OMx3PhPPhsjSxM|eTP8#$F@oK|%oS5qc@2kG4YqC;6
z0I%7RHcuF^@u1_@Z1>Cdk+$%Q9HuaDg!qozGBPq#JnqNb1Ox;^AoXcyNS*-yi1NNW
zqD=Qqgi|{#`6XlN$6r4t_|T%#9qicV=AEFCU9Xh3e^*Ln^`?0vU3yq=(I3-;u+FN|
z><Mwbk2vh!3O^@@nwoBs0ZH%P7BwN^($;02y9-LqpI_a9jkw|G15g?egzIo32g$R1
z-Jbml1r)$~h8jH1gzZfJU>$Zw)63F?MMg&E=TCsC7L3wU@Ge89b)hb-;}1)LO8`yK
zeg@0rEqc@i9Et2inn8)`YFv0JtHB*?t1AQU2s2aDZ-YLt>i~uDRZk*Xp)Npo05J*)
ztSMMi61enUXlvI(fdDv1Dbl=Fc#6CR^?DRc_UIgujex45<TdI5iWRgLV@#JI!y<+Z
zusxP<@aJydcdvOpEm9_Xxbg#5BDA1f8^d?-eFLCs1#mW)ieMTr1XDanhKp-kTU*?;
zYiom&cmFLjmek?kA^2v7oqIq$!%HOLy^!NZ2hf#(I)+C@g*~a8{U{#LY8dwdq`-qj
z!E3bA5$)w45HLRZZmP;c^pba#rO9k4=Q@t*2bj^@@X~yNcT$@EH%}P3067l?>EBG(
zO^l8bUm_sygCwp~Wqts$D2PwhLEON4?m;5KT}v&Hd!iulNRKHgxv&?9>q2QB!w@8n
zF+q$<mn(IBOT9nNxMV|Zo+E^b8OEfTEM&9bCmjinUF*wpB%oO>{cRn4+)+-yq4!-f
z0XDDnbeb7O^#sVYP^vyva-ma3{Bw8+*qFSn2CpMt!9K3Ly76FElq4t5aq*#~`!c_|
zX<=Z{$9p4f=~|iQ=4S9!!9$F`FLv)MCZ;`f>Y!v8yz3Z*&MR@Q{m<^~+=Qo6<{wom
z5y_EsgMD-EesNI|{yoItL}e^qgFVt;!+8=^QcXTc1oza_AJ8?j2ET~-w<x3go}n*+
zI!RM)R2T4f&;9p-;7+_%Ad`|Si2U!LJd0(8as-vGxc<n1+G8S;hM2I4p`1M>{bSF*
zKvL5EPksF%$$zuLG(kGZ*C)eE?rpD%=Tz+6sm4+?iWe<@z0;v&rsV}~S}KPB6oSzf
z*9oiEw57G@hf}e?P-(RL#a?A|XemxszL(?6AdnXHMmI$6oKpyZwO{GFM%?`_bmrr7
z-1?<zM7#4=k+o-nUSNKHnWbc<-$_7)Qp3iG6ETx+Cd!_GScm{y{9f%%1Iz7u61xp2
z8H9MfK?)0&UNX3yQvNEmrUm5-CX%6AxgkBuDR77Xb166D`BbnHs*E&3(Gd<SD57$f
zPn(z36Q^DKKX?*}MO!l5CljSD!adu%)9Yl6Um*kGG{y$*4}CK9v38sTgU48{&@N9I
zPIRyjq4zal+uhv-^B|xb^(T<wWCt)=;56o${-A?z)~NB61Uipz!4Y>vSp2%heB4M@
zfCVEaP?|2El7Z@T6ieRQlA1jJ--P)RKF2NRoMBnWMCf}2wITJ{oHd<)P7hKbf}Fsy
zu3TdseSV?{h*n1cfbE*T<D7;a6i%>RgL2Bs1F$2&xuuKuTYGp4>`<asKkaJ_U%tep
zRZZEg#1kgO_XDuQ&DSoiqWTo<uR3kf<;*Aa@`>I^5WkKXw||d^xce%jIdOvKO>|2Z
zTI@9kr^<X}qS9;#@Oc{>8)4z$uo(Sp@c2FrLS~rF={^~A?xV$aMSZe#wcH4gvqQkj
z2*r|f;~7lX9gsyoy)K@mHUG>odp=RIa>&Rv?Yo60Q;}pJk#ux_PZpth{Cp^kCP*Bc
zsGVKEp)jgnS~5Kr1&bV?kWdRwW3USYk`&-{n@gRs)~2mN(U5=NP%<<&hO3$dDG%xd
zcu|9jerLX^&ouJhm{H@WmE(@-#e3sNuf?#%s`8uP=Xg=spog5n2J=KgrrFQgxjxWe
zS#MT<tmL+P)Q6A|Sa`4O?CmizFhuQ^i$FPt0_PS=Ao}59HfWhlCMHHkOXnvTkS^Z)
zefN5e-&?x!55(Ze2TsN{NSG4*6`!iAfU}*r;qZ=A7rB3R=+(|N6elk~YZMB)k4;|)
zI70mwC&vH?IG;0EA#LHwQKT#=kZP=;q(KRmn<z+k^v@5nEUR3f32!<9UM$B9DhhRX
z;Txzpy(rnjw2}9c>?I|E2Nu}~JRo!uPWE-Lwc%i3Sqhj9O7BDX{s_+H8Ti*GSmDn=
zz1|YHo=XQfM_`~V;FEPUG#ntg3^y0ki;s_QcMA6CgZ+J@#ZvYBnB3glLW_EvbNE5W
zA>04b+8WidRQF4OuILwh<=pG`@!1*5%IYexA9TW$1uwG(WtQ$=f1}YOh!0yu_twi&
zgAy%wWrXsGzV5;i<J=~X+k~v+6}}(ZybmBjcx^9X3xS}it83lIe%P948oka=4*-Pl
z-QZ|R-e5FoWn~3m>HBLV>rK9H&#NsPJTKT7D0@71s735i-EnhZr-H{(^t80Z@*Ln2
z-rC?Mdj~qoIFvnXm(5hpXNMe2M1IHX3xjfpaS)(}GP&8nC=LfNf?R;tOdI+2zgoaa
zC0;E)d<W4U!NI{`_G|+H-Ht_{E#6D<l8sL@`pLMl9Fw%+PlHW^`6OGvfBy|z+vVk@
z?Ikq+#Isu4RU_LKV5!n<{*%O?L0Psj|Hd3HfBM?jlMoZ53OV^CZk|<(b138}_)PWz
zPmFNuR>_O6)xZEg*O8W%o_or8GOqu)NUxEK>O1g^zt-1-#ewf-tF`pC7Qlqsyl&l%
z)?Asx!RLIqae~Hb&Ap&>9S^ObKmGxd!u$Mum$s1j+qdr|ClRd-W<Pf%4S2$Upb?C!
z4ODT64DrCr1=hZ}11CE>Uva@V+v*c#boBIkUv0k!5Yqv27~UqdUyhQgscduGe}1!e
zQveuXt0PUEI`-M0<E_gJl#R{DBzH{UUcv<km*G|n8w-rN!H3}oqBp#-jE~~pQiw~N
z2HIL%M{N=&H&n7l0b3=W#Q;EX@qp4c^hNlxV<bI#ox-fRohI%D*zZ$NTIL+>?V-jt
z)zTUVd@r1pk_LW0ShC;fNh)SlqiL_}X^$f_Wh7}=kJP4M_RO>PG|5RjroD}|tlt)r
z@=JYai<(wU%zddNnjHZM4WmDPpgj+1ze(rIlEt08hJmC^9LHL_pxNV>#H`s>r+#_w
zmBwjFVLp@B>Mi834%gJw)EyFDg%ZZkcE3xAiTzb|T$-mZ9AHJexInnPbZhfPIf9*<
zuu40G-+UNX@GICI9uNTX0W6345a|c#^W4S56n?Xw3KR*6CRpJ}d5yH7{z!izCFNV*
z<gM$xfO{*8myKlvvVb|L`oV2#-M+<duBCy=a;I(RgEnYCdv+i4g+B#8!{P>vY&hrl
zwzMoB?=G?{`EVswS8o9;dyeWKa+2|9ATN|rKK_DU<V&DN^XYkc@z;qR*G~Uc-S@>S
ziN_iKRuk#Z_C9nyvNXNzXu|M(+TUuc?Mb+P)h225BT#~B-pqO?JWp><6vKLij#Spc
zg@o!~T}VAS@ox2UP0ZA+wfew7v8yXB=*Go+?ZrVKinS7pUkoWG_}O|`^L1VqPK>o}
zo8YBl1s9%V4RN&CSXS2kdQiFmTMUl6nM_$F6@qISih6fvhr8C>3k}$+ta0)~IpJqV
z+fOTu<Xh<{seoS*(ujwL7yQBE<x8KOCBS%3e|77hn9!Dz$~0&}j*gCorST;iGH#a)
z>FwL`@$ECTQUMEsP{!SN+M+}Wv>nU-_Me+eDzB`p3}v-~VsCFx&uvOJoi7PL{AD4~
zGm<XR0uu?!#jXpI4o96@TO_X^1=lq2Ej7@7A#}v0#XZ~HEQuLF+=@oPq*<a<1#Es!
zT_F8e>x%hpO9$g0j)M-&?E0}5@BW|PTya=Cu*x*~1`@KH3cyZEwbAU40U+{b+RB#z
zNZ*GeVTBn6Dr(~0H-J3}@99AY*aYMve^p?a9h*@JnA>MR(oj(7(I0qAai1L_eJ~g+
zZ65fYAiSM7UZD*cWOl~l$=|TJQQ-7$O1pSrui7VUAm`S)R&=jOXL5<r^xg6lDoe-5
z8804Z$>l!r*@OJ0B=53^dNT}Em?}4X^|)ISI53G~Ctlk#E;~}rS1Rc>lYJ!&=s8-3
zQWJhRK9#e+03t2y$|?!Qi}nr<Rx|bfRSqh53Y%H(!&5LO^F=pgt36UVeolM&Jth9r
z%W|7$&G|8-*z<v}ID5<i(iO{v;~^M6U(#<<=%i?qR#XnwVA`>#R;#f+!x&S2DIGIc
z^}RdtuJ}Q&-0!!-CRSD+P#niuy!!nN_D|?}M(kl^>V>=)yiG}&$j!LA3QKpX_NQu>
zKM55rcm}&5!-9i}jol2AjEc^6p`nkpv`CA5%7}RlD%4)Vx6#3&rZ$95#KwS$gB5%y
zz|Rj1LH8c6XG@OPIZQ%D<hU^o&rx`*#mk_E;)9Ui4c5ckZA$B47XxG5>E189jt!ui
z?wqI(VHur|m8Sif+Y2jzio-Gh^q@;PF>Nh%s(}+*MHRnc7;=Q~uzd9%z&wVTnHiyi
z%uGA=uCY=*7Y?knR8YJ54E9yxoY8N!@X>tJ6Z{4zHs@LOl6C7g=qt!E;9~(Zw#ML^
z^a+P7eN{3zot^;_f)&DXZ%@>_V7~%KJ?B?VhP8_A*~YQK!Dgibdy!PE*RNm0rZHa}
zxq9Q^iM#LbJ|fCjeXaeOU!83NOd8sAF97%_2Emo2{gzH!UaSpmWufODNh9S1{PPne
zjW|_yM!ntT?jjql1UU?9XJ9*RS+5|kW`EW^sw*${?Ccg4<+|>S!xr;e*2%X$TAMw;
z>eMK&?@2m+c{e+ef#Rb>_=L4%`LoGTL^-pbzwWE&g4MJXbtxVPB&|jY>}NY_xJh@o
z(1Y1cnq4&r%zL7LY%K9r9|Ty_>Kk^sY8poPYw073TBqH1>9C#B$_B~H^LS?$STRv9
zERTW%PG+xiir}n92~oGmY)T<(_@+Wxj9D~aaucc!kJp^F2FJ1#l+lt>P|)`PV+{Vq
zz?h(z=Bxlz^?UOy&nj6S-MRZ35(MRTzn`#wRW?vyeB*^`Q6&|B+m&TQlf7r=92fna
znt|g%_?+*N7{4kDdznnNlTkNUS@glgV!!33S@qXaWgjtw@l;L8j`;WfgZ!82a{-D}
z*+qWBXB*!~Ys*p6@M|lTxW62HP_#C<C&<j3i_IRzefgA=j-AT+H^SNP5L^>2-BI~x
z2loWSZo7Z0p2hc(pr#}BB;#x}Sud^FVM)k;fDFY;pz%}X8nAr>!f}0b)7J-$+TC&Y
zVF1J9OKCg1KY;3B*R8{xl`!R#lMX7^{$v8@T;{e=Vy@RPW}zAC#`Fo2*#+1qErIto
za>vP&A9Mx4!h)}|<@!iW%&wfT%2+!Dvm*Fk^-&6u^P9eHJZ2FU9ed0F>#ID$*M%^$
zA?SkmhP1-#3O<4!-Xs{ma(OT&r-H?V7>IkL351R$1+k7;a)E-DAhvM3`<@HOSm16o
zo2o(MCVlptq`jZ8`5QqbXfr2(*MSirYvNZ$tZ>NvxeBc@8-V;EAY1^IWq)%LMT0)?
z2xdrtg^KXCwC%-dxN7zWP=&uy>%g)Em8SJlM>(ikP&n8F2*bGoZP7p&s{$8ay4tYW
z5AC>CwzpI&Fro}C9St{Lyta=Ph<E<q3N?#=PJS-Ecdrpz!6EYEh1?irmDa!eV9Pji
zzdW~T_S-$ax%nfLd3bKF$rtnqKhvvI3&LiFWWq+OEkFlnAn)>BtPY_#9le8S2{%7~
zo%8M>NQ^dwUAX4B#J;fc0`=q<cm`0-3{-YDC-=Ef0?6klKIN+D5#C8hm#Ah`-Ip*X
zaZpQWG1Cf}zW7$}oA~A3+~ww*ewmS1v$w{V*L~2+1A4cmGAYV5u{XLb9FJ+&pGzr+
zq1En$kePj2?e)Luryx=~x5(9_Bw~~aLCHeK&@hAbX}{^(Vr}8aO&K{od+WR-dYM=P
z>i)V!t9NDf9)tg4%HwEU^o_xT#X;;M<@?pU$u!s*m}igt-v(1XAAC{6xxcx2Bq@^e
z&QLf4T4x~TW<*o~sY+UpdswB0+)rOB1Hhz2=Hb9hy)A;efHm?Rl%_vXR8((%*oWsS
ztGgX;APInYBhC`GL&<Nd4DMf0UR=8SaulEMIE|NOu!KRkQpN+7C<j*La?A(*Jn`wh
z3zy8A4N(I>$RCh3oHJQQ@Dewpr1=YnRE_vQ$&gw@RpfZBT5MWG?=1P?gDca<2Tx9Z
zAMSj-HzpX%L=1Vdl^yBzgz}b{WeMby_V3A7QKw~pDQlS6J;U(dYE^UG^5600F7%I*
z{5-bd_7?XB9YMCjLvqYEyCdD|tA+tD2X}MkECpsXy|<P~nD%9AyE9>ef^9VjSj6-)
zS?2oIKR!O(aggDGaUB;>QE?k}7Bm6VEWqD?=LzDsfdSkvo}S_-oL!}#KaYiy^f!7P
zQS!VzhDy&yeS;Coybkawryqk;hIQTnPS26w#?#Gf`T^=w4l@HpczU22I|p1l^M*;_
zT{7T^OE4=@De+j5Ex`z!foISZRk}}li$-hjPlV)`Yta=xjp+stl;)n!PWh)#nc3J1
zbiZI*rwZ8+jt+xIQ1aL5$qD%9K09r{FtrE`kB7LuOe(g=@#(?(r&qclf(gFr(*b7A
zdC3A7n`96o$6TH(q;tA|l;0wsn`t2Ol=SfMfNP%2RoaG9d}F-a4*03T?Jc(CU~34n
zM7d83rdur-vjK+zgZ)Xiw&7uWuq6U^(|Az()l5BJ0S<g(K#ry%SPt0oSZHM(KZPa$
z%a;YK5QQXO?aF($6Tzq|Ucao;j?MUZcq9(u`rovFfk09XjhCl^*&$59K*pgG^18gG
z^VwpIlbk$R!JOI81A!wG)L{^K^~u_`LyGzbGFp_6;twQ@-&u^Q%LF~*DD|-(LM)B`
z_I^M$nruAz@>Qy;b`w?4CG($w|G4+xKKs<il{j|867S+YlEZi7=Wfi0rzmH$cuji&
z&z5Iy?&g~2e=;#f>b}A5FgMR!o$W-&lbKU<UawzN_%!AM6K{V$;<;oS;eJuq%vqUy
zpnsy$eIjJpgS@VGN;%qmwnvs7CC>CR;;(XYJCQA4%?y$ux=U%tRf5RK##UsABj<aM
zfT?>`C+W6Vvn_F+29$GTRm7DknAG<r)t%@_I8i+iVO~K?ual;x=AEY{0R3X>!ZW9;
zFY5F*c|)jC-+9j!)vgI_@4ac_PS*kfqL?zbfPjDV%KR=>ugvi(AW=~Tp{K!}6XQm$
zbrIv^K~c(oxmClVg=&B!OA#0mpv=~G`LV0Za^CE)=Z|=9=KS(L-)Lpn&QZodtQ6@!
zM#_x4nH}};VuQD2@C$pH%Q{o9T`Ysi*A+MWHa?2F9b6n`*lI#9xJxBt73CYMa244d
zl?OHap17yOxFtl)@ujGvZ&C(6A~t9G2P6u-^H)tH3yMrJep+8&ucM;_?kwi@;1~gz
z8kRt;3_+8occ10(){Sn>A@mYHTFWizM5Pu-M@k29YbVO$P23uVq(OOq@1m-Tid29Q
z1I=3N*)st4R%(CBF-3+!EF*29B>eotuuFuu3svfjm2hB2$R@y!u>lRJ^Zi6pG<P6e
z(s<OKVqt}+r6NZ|$D(=UfPuHxMDaJsy5Qn}xxdnA4fF=h`i06jvzL$~NxzKc{_xkI
z(h;$;zOI-mWN^G=U>Ypuc6dJD5~xxRV1m2nKf;{0Ka?#Lmz2EjjA3k5gRu>$227$>
zkr>whY5}I)0&#2ylOe5{Ag&jU6Ch*Tgg>ivZsKh6L#{31*0)u9ZD;L7Qb2lK^-veL
zvDs9ePf$=s>NeXoN_63+s`oe4q$VPv)&l0)-Y#^OSk0TUvN1CwtK?wJl~KeN=!1d^
zLx8RAaEi!CgNMLzPQqPWVWp5{R*N-*(R(5hmcs4xf)5P`#IC7Kh|E;3ELt1|L<AyU
z)x|XS@(+vglFMpp^`9;Ad~ZcZ$Ri*BM0hfH_T}+&G`r<_f>Pw0!}%+b6eooe=bRgC
z$j>D2R<BUjurZTs>*)4>d)8n%5z-ZZHPjgTPMeuo_DA452^M)uNn?Hk%cE@!7eDGi
z7%?HO#Mv|O2umX9(ctx3mUiFDP;F{vrU9J)QUREpIzr)w-KsZ<+NFc3Wwf-)Mi7GP
zNYO&WiDnF}4rXr(Ra9{7O0$($s1}}O={?d&WEAp>nLnB_=FFauCK-J-xy?DsqG)3y
z*^T`>p;FID-mb}>6~l*THPOKHC2hV4ORD%MMB23pyWbU-800o!1J2LLusPhQg_h7a
znnw2%^u(1E0gL7N`EsMq!E(bPCX8UC2l;P?^UABMUqAD@nJfoQy6%Ox$FSZ(JE8@o
zrKW+W=?^5RXgE2y0BmbwavK^#h<~Ps^M{}rDG2Fx{sxds&tYiSuP)&Sj2{^>9L0H_
zN&6&+vD9vE`mbTZP^a%WH#wBkA7~}+bSf}?NWFD^qHF+(szxqJ*bZPXiq!X9uTkHq
zk~2PxpBIXAa?0)qzRt!sPC{4F(#qqf>XnuXu@hN5dP3-D&1WFyt85X~XXjxDb^iL;
z)ftRA<5LAPw(VlOfK*Fme|Xdl8!Z*&Kn@$D!VGQgn@HS3J@KpK-Mx5rL!%>i@suqr
zxkd;-9^lv)(xFNc85_iosQhR&xuyEf6Y<iH#jF+y&8bs&JVNZH#g~fH!)7^2mP)xK
zw7U6G<?wCxcbFAw6K45nQYZu;8H+_wuJH46v)`|%+vU(mx80JdhqEge!2W@UZj7@V
zlbwCw_8zw~<J$^~MB=dY8ZGVaS`x_v?a$C*!oeh0j)#d}b`JM?zn@<3b|5c?QwsaA
z-eL>u^c@Y4Y>-R|O`>wUQX^Gm(OC~nU*{k3<4o2wW+DwyG}9^SDy23nXMeDF;?GD%
zwaNRq51ruFXU?nV10VV4C3zaVp2Q7DThFk*Sn;7Fed@>6?BAaG%{oCoh-qO%IAEZ)
zl@zPg)%A33&HR{>&uqev1C?5oe}a%bafV28Pi%Db;m%QKY%Vr-W8lp>W8i~C3y{;l
zB^6Qu@e5`ZjpwT|156f{ZfLlUgW^^|?T=2>%vJFD^E(~4{d5Tg+7VD+L}Bz<<K^l4
zczGtwAOLmu1h!@n0igPQQD@KkBO#QSALM-))$@WC;J0p&;)`vdKXJy#-soA*dV~v9
zdtRRomBi%bSHc7=b><`Ht*xyPpHii?Ob4z?_9J7|W^fjBH<7Z~+wL74w3P^HPk?!+
zRVq&rtZ8&HP<ic@4=b!V(T*R*B&m}N-s2DI>eYbQZ1CQ%+dFE{fpuq}o|ZNX$oE#E
zU*8<u9yRGgfnf`MRgnE2q>^oyFnKZ%3iTsiEu{yG<SH?=uyVbx+Zi63CFry-?qMS#
zYA5$NW>t_@5oxGWSGI6$H0RyUdYqZL-1R$;dxS*hl+nmgDZ@wfx6%2QQ@)~{Zb9$N
z*?9!nw~OUK`z^B7^ru=(E<OG+oYCB7f}9+~inYCE<|-MS=xWI4y;$Qv@9YYgB%(;s
z`**#@&W7npEErL$aA=7;2(+Re3Hsgd)qmytvFo{`v&|FKkhQI8H~k|~+a=t`w}zvR
zooOr0l~M#3hx66oRSSHN>kp`Ewy^x0g5TEK{CK=^ym~Kve3Z*khm=nuUASG2_o-Qo
z;Yf&NeelcKtNf0$s@P?7pBRbA8<Y!jx2;QE+yqASvfqPS`SreUzl?d6_(vjaQ-=mn
zacXDaMEjNXq^dKC9+5o!Q<yTT@%VA5i0T~QOF!<Xv4P*++zGB{#q`udtJ}XS1kI%V
zJ*@lq7m$F4en<luUk-SxI8O=}F)ksFO+=&-XPkh)K3WW`gTghglE)kU=D|(qkeFJ!
z9x6n?zn&O~)$2I-?WVRwN3<2b<PAiCJhCLWDZRJ-3eA&imj1pyjL<|8poA6M)Y;0)
zD$&}YsHJ6Xtn><|qex0gx$dtxfO8G{<RG`Ac(rote|rG5MV3xvtTni8_gGl82>n27
zxXa6%%wxD5$Ewx`G6yU?&{}4WkMV<`olF6uL0|E60_g~Z-Y8S2R$0@oxO_MoEPSm8
zQ$a8D-9;>Qn4%#gb8>!hfoswda9~=zG=$G<aCyfdz%@_8&CM+l2_Uu+O3$Fxs6yaz
zb?LG9Zu$2DMy12Lru);xN-uY)Nq17#=XZ(C%fN9CGc1pz{Y8Ee1cJ?c6-+DBbq;MP
zZ{Ya?zTs0@nUL!~_tq`J5EzHh=yvp%2}<(fKw2PL>0w7B0U2dA!(+#i(5(1?Y`>7j
zuE##+3+@>DC@2_TWyWgJGA~a>F)|Nc*ApOPC9jq1n<?U1T^)&+Z)rg1(qR2Lz32G{
z%KnCm>WCh3^~68m+jApo+WYp3;NGsZ)=H6*gX6{ffyl~Kq7=7BJ69Wbva)<*t!am)
zEf{sPg^yyY*!nNW;x_9zFe`lGmjeQ6Q2QGR1Mr?$8=P(N-F6VnCOcbux3|)2iO~g9
zJ-t9H{sjY@DlWlsf6sOaSWaI8Fv<Mx3JVGn|02I+sjdf<S!*f#*5;;e`dgY`F1c#w
z>~n#)Dx%Qdf4&C`3QFPJRIOxuHiQRYI|k<kN}3l=8-Wiu0|O!w^R!PCx?yt7kwn=z
z3BS>ot=2QKb9SwbrgrtBxWmq;EH4Et{Th<3)7;q<&=1zWD0^=9_|JP$lwL##tBmTH
zj9B@7$bK=nOd%(2T5l6RUhr7bg;HC|l-ZSblWUFk{nbbBdv5#M<DiyQE?bT~lu*Df
zq*oxBdab+sgg-=fdo`)VU?@om&Rjqpj<;q+mX-ak-p*~%+zQL1HG*OC&hD-^Y0KxC
zp+9`x4hm41bwn9JR8z_P;}0m@*!3=*LQWlFz~J#Jglr@Ao`9)fW6#A2oBF;GbgNGO
zkZ`XGNd=h)OZ!ky0`@fH&?hS8E(VsJX`>7yiUSqX`_K%C37CFZ<XK-|2dcgPx3?0|
zzyVU;$=NnheMB6~Uy)&r_Yv+y1dm}mgyV3@`)6L5KE%Mmk$s4Jd7QL9qnjuNj!u`~
zeVgz(d-r^?ZNsW+2MK!adkI)Nq2)LiU1>go?}Kag%+ZlC;}>x4Z1_(cHdRtm1+CUV
zme}RPG7GFOUmx>N#wbFsk6hXN^%(Cr%q8neaDYilbZhCLJV?KU0X!X9vC^3WcmZ8-
z8q>^EhWILqvTt&7GHA}mt4KshHZNVv8xnU79@pYHXh_&(V3VJ^Mc*=bBB_2%{__*o
z(}}|rAJmN%hMswsgW`dUiU2G3veoZ?RU5P|`hjOh<U>kD-P{TUc^@R@9ZML-*Y)3=
zTcjyxAj(pqeF~^%<?4Anf16!hO6l=$KdCaa@8f>$mM;x6c<UC4Q-09xwzjZ%NBLS{
zILeK)MAaJ)wsEOkymwVdWbtyNZo2wGQoTgk{UcqK_w|%ktuPS^=8D(Wl*?NmUqO;M
zaxN||FnQb-U3g0D&+!pZ;4F*1DW3tS3+g9-atS<bKje1+y~qslT?i)i@%4rAyaxyV
zRXt$D*v$mbms_HMvQnM9c2qj(K7Ab(-s+@7h%d&*wG6`OUU>Eml}cv3^|=3oh<<4Y
z$53<|wXGoGw#6q+(x$>f*0=_|14R1T^`TiQtJvV191@G3y?EsKo$VX1)RHT*H~nKG
zm_AJ8E?DiEPI&i83x8eeGf6YbJVGnxE388$h?SIjaxZzc`-#yj_~Lw(Ql#m|p5!px
z#TO!@;U;F+5&}-KOveBK;$avDn6K0vStarEBq*DeH1{l?+yJyKfLT=(A;ul`9xoTT
zEAY5?j*iAgMt&9RL)_W)fnJrlv8idE&_*^Sm;rAq<+i9Z(*x`IZDMG_?XCPk;5YBa
zc9U@a0q~`ntc6Y+!0i5-_j$5pRsYq4gS|%^IVd#L7qg{bSzlicIWuN)<j&D`Spw{M
zcLS%&CvYCxgvra@ed@@D)9|Ixo+yW8pc$a)RGNAVmEoGDKvzIH>{y~zX$1BFM@i||
zvpkmL1Mq$?jPb!aK5xI)?$xhTFX(?*!eSle7}PW{U^<+Km)9I}hXlyy#6O@t#mCKk
z;{$kpfcZjJkafNS{it-46H2~gG)HS|txqOI%^lOzu-!+{R%x3*5a9pf!0^}^<J{Of
zF?N~DJ3N0t|4QWX&+jAZejk#W@Pa7^M{qI2qIp<b_2~pSWEcdOxbk0H;ufl~KJ4Zh
zB*u>_^CGv5*-_g6IA`g_g@B;Te{aq$Z5aP~XRJI@t-eIz+Z$J~M}+Y4@vNr5dlX-=
zQ>6v1<X5jbbvW7CEjPw@!T<bV8t<;pXaWc^FfUC>Y#k;~!&CIT2fo2&;4d5=HrL-P
z8v(=P4MlD_aW;Ti?aTOLzjLRh&A2+7CDgi&#}|9~c5VfX0o})#N)u(=OboJw?ZY?Z
zb8=3p@0k?c36txQ`)+2ns^9FFjn;^1x{rsl@{;8F1FeDucQHn$>Fh`Z41+`Vw$%V9
zGFV}-Ee}ljYu%2pw@;GFx>uk-3a<;Wccwu}f#J81cq8SXYtEX53AXoJ5v-a(s(CN2
zXDSDFrBg7Z4&a8p@$f~)GU@-&sS!19O!$b1+J+yei9NV*=RVRLh*sSR#nyIT@JUJ4
z3pIP8ha61(`t2K$$kC3DG7wX}E(Bsq1KG!n2@kNenrWO5w`Z9}b9GNq(b0jD&9Zg-
zoyBa!y)?CbsGR}L@YV{~+#1NK+(SHcX1p(~rJ>L7@@|72we1*iPGKK8u?ZDWv)-4M
zmS$%gtKI}AEYvL8<Pxc-52Y%*f)!g(QeXxIb#HGk{wA{T9nY)F>7RAhs_Tb28n`A>
zge<7Rm@!sJ1|kn!WHXgi2}Cn42`TPGr+h@?xSw~PahR|(qxJ_O<__3U+M;L_P)Yn?
zyo>o%&8{CB!TNB%$66dW>hmYKwzMe0zm}H#+Hc4Gg4hHgvyqzLEOn@q>R}WY3X%N8
z*?a^wkHu6CYeS=H`^Dun#(V}X^k4mzI3mCI_4T#1ARymOO-!#A{8tMg#m83#&k0Q3
zf|TjW$;n9Z^DE$xALmFtxbJp|IlIO8O2_5<Qz{Pf$gTvAP^HG)T;_#Z`_)^LUFecH
zkw<WuO*nlKw<nEdADUdZ!<&3U^w@sn!eB};gUJ05l;ieCmwcA^fu@3sWrq8LQ7@_G
zjR&teZk80553~{&WwnKa<tOI#inM-YAwQf8fj~7=HZq!z96DiL)-X+MgqggM0T-K<
z(48Lz56nFuK+IhXdJV8D>w&)mh}<x$No$Mc*%LUk<mTi!UYu&60wih%FsRf**0?gC
z{<<QNZkmBB;!(^I@5-!~KA2ko4h~f;EONKyWSx%2piIZ7_ald~Rp7RJ4MAXu2`@;}
zHh45w02aUBj~sdvy<p6PlTsCcjrflbw;@*`@X?=Kr~D<%XuUgIZv%~6f&Ha0va8ia
z^o;QW4U2RC3{`LQDEYI9x-X6OcE1lBJlx8lU#{w_jdN`ut01=_K1i+cyb&v3{m4g8
zxi_qDP7c@aC3LO@l<zZ30Z<_zpgo4Md5yh{0J?x()zede2wiS~ZfX<%_bjV?@HG1@
z_Pv*0#_%!2{)nwP0H^gkPp8T<7=zFXV`fNNzS(x5+y#@bR8aFS5UzP7ZT7!|w!43T
z1^6%mQqqo00dDS%*+%NvYPxW0aZOGvFw&Tgl^_h8TwPwk3*FA^&1?MV?z@<t)Q{3R
zlDFC5{+sU$_@m*xeZ#^x_DUFgR*(MI(z0Gt?(nGJy|Z>;sec0N5pPsK*+yZ)IwV)j
zpf?Q5QUa$g+oaR-1fRjJl8+C)N<V#{hIWk-X>bj%Vl0!Q@x^T86-}M-yNx@l($<Zh
zo7h;LPu00pvslFaego+I0QyL{%!K*-QB}vdF5IcjI6MXlwy0x)A|k74@gW_{*L3Be
zqV|n<sONEf?}UhAt(Y=RPR52On6e+{p!swdfjNg!EKQz(sedp#6ih&XTWb03vY_=G
zW4+7S<>Euz%9#^aLaXYAKL*C(1K8z3^X`5v>S#&O;_T`gvh`-xZy8q$5A2D@m^@cs
z2b`Ejyo0mnMa5Mddpck~ChYLgmA&T8<JIC_Th5FGMjJH+Jq~me$2ebkBQ~B=ZC77z
z;}_@QJ6Ol$DSr*3x#U+T{e-+^y}pO9>dUGM$t&mu`UM04c}#A<NUNOg5^!+4@TMw=
zJg3mxDN|)+X3|w6^#bbLu}-G4Da;Dw;c1TR1s?o3%)5mo4h$~hlyQbJCa~Bx-z=nw
z3~`bv)=~+w9xKrm8;5)p_!uxAd27PBWnY?l@Joqz`R=L-p?=bDa?he>-54uvggGko
zwzseOM;+!N$*34;Z_8L5*Y9;}(=@s3B2G!F#9mQK7I(<Wnz^^6=GdUojY;_PSUkW^
zS-TTWqkskPB-_&x%BN1L;I)Dy*yc8u!c7s+bHsBv>^Xw=0M7OPtim=SAt8X$L1+7Y
z;TLEMO5(!&Pa_z4$oJ|xN7M@=dt3d7lep1U;7oZ6!Lia8(<dNvg5L-vJ3|=dvKtT}
z0}AW<RPCJz$MsQyNXxA$;qxNcDPMkeJNh65N9lL4bCZ(&g0DN3lw*5Y#C2Z}RzYq_
zI@16AgvSW#9K_qsr}6hry1*8=HuTpPC@qh^f&aBYRZqa@I2K;!TXpJTQrLfrOr#&>
z<>eK<_^SGPYYTkln72h3*x1Yu)&yXJDIoAY_g4&br;o|%!F!DC;k>`{qxiYMX9jRn
zp)ktM$e6D%?uM;8D?7W&VLbtwk|E_)W<zzr1Ay^HK${lsi3D8hZwr#i$w|;O%AmZ2
zGbD7=VTcs;HXLAyJJx<L>Ll6B&W^q?04-B+MEZO~dq*bSb=T^2?AtfoRp`G{(A$z!
zV$()DbzZLHF262mFz)vXcVe;VEFe}i8tmKfWza0c3NbIML@G2(kt-8oHEo^t(lg$5
zAwnB@$d@(+|8B+u_*$r-b)bWQHk=LujU=MM*7HE_V)wH{aG+p*PTPrs7X=c98<zZF
zNUNEJwVat;1887--dtK-F#duxg2~}yX(^X<PPJe!Wvrp{oQNO)bw<?-8MR=CWqF>y
zhPHCX<x>oj*8DkpBQ~_~C;Uu<xpP;T^$e!;$4f^)y<`e5lsL37K~j$q(TwA-e7E71
z?m8_+_L&&31=gWQdE9K2iW(+{UFL+Ln{%XwS(#ZMKR#NPc&GwjQWiF2+;y12P(G89
z@rTq;)ff>T)(p8Nq<>ttrs`{--{ab@H!&M@FEbcZ5YCU#^N;-+3#HIf8*G%}|E$hU
zXSegm5HXrXos<aUombZ_HV7U;l*_#$lm_Nc0f<~~Ul}5RkN{AXC14a0L2guW_hHiB
zAqxr#d8DQe3jiDL(*&7~1QZO+R}+*79PneQEXGOgx#D|TJO2un_i~4Pkv2Aw3{vwi
zYIzBmb^!CFp;HD!8$-XqsH_lT4j8UQ0aI(46hiqY$DW!t1HlTE1E^S|g*1t}Hanu}
zVVF54CMJt=y8cK(JdA^6ZC_nqcZ0d{PTOMOukPtlfSGHc;hEK1*uWUz=?de=OuF}t
z`#*ej@5`3-M|ar#+14tZh{6q}<ZQzQw9&#sLIef-W}yg!&Ndh^CvM2GTW))d%jzA{
z2O&K)%B*5hkMke--MjBk#I&?bsEAkICrzaMci~qj%tAn;d-_oy!=TDs1Eh|{ZE9;6
zT?5&fBrzBKqtDfx8w-OhVqyy*>|9-bv4P2|17`TaMliq@{2{;yfe1U<@Xrh>SvvYm
za{j#jEML>7aGokE8ZOc%KtPa61<cnn3@IKT9}gO1Q_JCps3;fz&&5D05`XmD-1;~8
z!8Xf$*YfxXOs8Q|V2Xh$KDxjA-d9ysO;1f(Ps4_8^Ysy~wBrriJH;V)avx~0_;fHS
z8$dc*F31Oo)?ODHC-ZNqu1Ah3xVr}xeE2|hbXPz?yWW{K%oEoSzD#>3ujyL5?=TE@
zF3MM`78V6)+Kj-oA8qXuXm?6Tcte%|N=jLSf#(hG&<x^|mI$(#n7sPlMZ$o)0W+ec
z(L|YUX8;G9#3&cC6qW(w#mX6C1nhyDFvxsg<G-f#$XIPdR4GZHU6{e4)^`QoyyL>s
z(#S?|7q;uoV8p4x3IP5uH<t?*t+H>>2%sUaB{v$Bn1^}bCvVhe0U_Hp-4;SL^y3E)
zH#duF>*>bC9{?b6t2Yyz#-gz3&CE~LVwCZSh-kj$=YT0S^#5j|J0@AQaNz_b%*i?W
z{r7KJbPaNR<rXjdKit#%WU>hnAbsJ=%F42GJWcycn0N|{1T0q0B5BXY#*UZ~X(O1#
zOSfRLDz`a;&5`D6Ze_M{7Nm~rDSEJCf_D&1FLo9gp`oD-4Nb5!!KLPul#JGtKL(u)
zUb}ys`qES~O+MT-G&{}yp<t!~eF^MbwHvgk;&~EGBbM$T`fnlifZ6-jty`_-?)UFE
z#~6X*_Pi9#y_T5x!G7|J{_dZ(KQVzTeeSi*g0kEIoX!O;M)x800vjuYL%NH!`Hn-v
z`}$B{+z$8-4-)3wHg|P(jgBV#FVd_Lmn3O6T{i;iGt-mQff8NOiILmjqMrWrDl(cr
zkT2gj((RcxQS&V9c)QaO%7)qrDr#~HipP=9PEJq39pp`og%f#gTLYgA$s#15$4-&b
z9+P`R^SB)=GW*d4Y|(dkc?ZYFxWvRLFUwTfSXm)SlxN&cyz%t6#{W|3j}uCyw4nHf
zgA~N|Fb&^VS3Ax(`vVqld(BluNT{{Bd0};k8O$s&e}_J83rSGMv`sOk8a|+wj*b;D
zR&g^gNb?Ae<A5UHGd&OmdnzoHZhK4e`uh65$Olkfz%p>l1x=J;X#ujgG$a`~26^?4
zn`}>5Ra=w)cUKH5TnzvWLjiw!0oqY;aPZv$CHT&Uo3agb>#w^>UmUGY!ZH<pp4bhf
zdxJMlat>G!c6OgGFV31QS*}Co_bjJ$KjrWtW_Wuy!5}j5n^t;WG<J18g6WY^Of0lZ
z9dA$7TEM{uU%trO`@Rvgg8#qiZ&W&*OhO`}wu+l&)18hy@r<B1E;nRFFaeqp(LTMd
zt}a#FGOR|Al$lI|d-*@flLtCFsnT>!XT+qWF->{!)l);B92vRJy~z1=l;Goa9Fh2+
zz$TmnD}G8Q5_YcKll#J-FOe{AOG2r^`rrS$kMeOA?|%~|(oeh*Y5(`$`u{(_KpuwM
zmKFZix_X=H%W1&Z%O<*y+8-p<!Y7i-liRevLr5d^?~RQfx{ePZMkCW8{eEu}qm^*i
z`-bP9#`x$9lh_p0iocA>AWE#iyaqXrtD5qO+`SU=xQF=6Mr|RXe=iMw`}%wlq<(X9
zF1b4_%6L(L_W9rMx})|lKtV34j76|N9uF<a=^3fI{Pm|Mjs5p}rMouj>Fr|}@acjX
z>Hq#POZtQ2`3gFe8WBO3-Z3%w^g#;kn*#JP3u_dDWlVpU3p(Z)6A7@gQ4kXo5fMSM
z3`3&>GFq8nfh{U2DJU*3DN-PQL-)z~!WU0oBI)n29^rTVsFI0@EiIXnP>x9$(J#Dw
z$uQpBOy}SrP*pkHsV`@QoK!iJo<q(zYOHsm9l=z}(f)UKO>OY-Gxc<2DJgn+Ec^+w
z`ZVXq`C#ow5f%;6rpTprZ&9^;z0MH1W>Ilx5r4PzY0RoQH<D_h(DRw-e{L{}e7t|u
zB(j0G0b=ymrsoAkMbeIvbh*~&Jfat2+41uZ6O+{Jex5OZ0iYe+`S^Y?=gEkI!4}>5
zsQ|w^8~{iq&V@A{OukcnI($-;PAhsIWmQY-Ox)McR0qhZjm*-rpf+Yb&0<muon*y(
zOq81{@l`C}UoMUZ6c&~8t=H4uFA!n$V|_l*TE0g2<ubx*i*cWKdOEH6YxCihfrojS
ziE&azMLNe_-FHed>w86tNIAuQoVB04N>HO0LmVD+Z|jfNQ~p6W8jAe%=4N9Hmw9(z
zgAs`y+G{nB>S~Pj>R?yDYm9;PYo=eEnNwmNsC2*I-c1mR!1p5d;L!Y>mA-G1Mi}>@
zINt!BO8;LiU{1IpI(_9?5iuc27P+#TL0z&>rV8t5C3}i<Vz@AkoRC!Uv9o%-cJ#Sr
z2dBigqFKBCaeyd$$iZYgFhPmX`Q8m$&S8&wiQ2LCu!mp9BENb*TE&~<77{+y{V4I%
z%*bM?RyNDoaqPi#R|5)qyNvdhyFS+D;`Bf`S0ivb;0+DZc>--3BO^@upj3nzEquRL
z>fif(%ePy%JoO{*^F8NlLO~Y65}4n<JhN=`zd|fA{4S{XYP)`dM7(;FICgW_eeUKT
z45HCfHI<jk$Uc(3G_AxOcpqO5CYf1hG<{iO&INCqRc+_gSH!DEF7)KsKYV`g-B?M{
zqA^R<A9B`V(8b~?7d`cP@6z|r_c9H=%|{I7VKlbb&W7^1_+F`R%bWwfNQa^v`}JI+
zg^6F5(2ozBNIq57F52Vi*VDagd}a*;Sm%QDBIG2_I`@u0(TLvN*B3pj$T3cw`Zht=
zE?KIMO^JlL5IfJs#IBB;XKNPVUTkm&G2qy*>7TEAN)g>B%6vq+&wu6x-Iv|b6s+mq
zI!mLBXdk9HB=fR#iTW>ZCCuqt?=+ksTU4uZ-#D~0c`|w>d`hoOYSqzM+H$K|+uYSH
z)vd{#<W<$?xc}2Ia)iH_w6Rz=3|hFi$X`E8J4!uFDqd+t|7Cc;X=6q<LFu=+?DP!k
zP)i&;je_vdCv$WaqyQd-Rhkx8#)%GBpWU4%=8Wh0I;o$<%OZ%73eziMxFdG^+!Dx3
zz8W)PR3x`eXs>boovY>YmY-cA&6P^5CT*BjR+bsUaM4F^t9m!92EGo7hppy)Iw`pl
zc3sP#6Rz`4-@?AHZ%DyJGBV?4X@cQ+iX^)K*1`T|U?6J2_K#N*8eO(K4e8=I*e2!W
zJ~lD^#>sSLbdsf`RRqY?e_0*T>yZC{^cq=Z^@e0H^|KFZ-vhAL%NPl6_*jEGGmM5e
z$^FD$U0pp!FMMEfa;&*I)%eDX2T&W|LXhGmC5rB4z30n{IF4p8_4qgi-OHo*_=kr^
zXhnvD_UCZcR)jBlmD1LWtt|2}L*51X+!{m)Ikg{|Yfu+Sou;0&u=c+y6Zg-}edq06
z0>t%@hxb{pv)gI@e-Q~`B$Rka&ruC1D7p1<tFt1oDaRwT{o!oh+A2NylbFN<Ku93v
zzJdQUGHT`Rfu#F&#7Df5r<>c;vjMo?;NwVzWsBkFhF@@X*+?ak=G$>QC9PK<9|}9}
znRV^TdDi;I=rR$1<ayStDt{AUv_P!Tq{Y?p<=<^-2}zYoDv^oigm9A8eyJk^>M?7F
zd#tC&r<X7)swJ3!)!q{_<UL>m)qVtLaWiOY{vV#cJD$rnY+q54l#D3ZdkbmUvPU+N
zRYu4tTVzFO*{f1!*@cjh%#g}n8CjJPk)827Jn#Gdo`0Ut^OUdqd*9c6UFUh6$51~C
zH83&gE}1H{I2=V1%t=kpUzzFbwg9`>)U%IK)>Qws&f($ay><UnrFjQJNtty60FOzg
z>gmKq9sicp3kSx>#!ev45wDTUUcvVy-=0s#%+JRGKSFKWM9S4Cmv~&%woM4(BM{@N
zF8#t+=eT&XH$^rXp?tvEl6_XDItfc#P)NOf3rE)-249R*etv$^S?O)L#%ETEhDH5>
zEK3xh$yq=I#^|!6PAhPn5V`g#UIP`RQ{QXQ+$p8~)U8qrz%UeboL+<i{rjV^un(Dq
zXsYuIEq4|d7OwpN^SeLbBoi@epHMP7@43OGT*IM>!`?nSw5P8A!q0E4GTJ(u+c(^^
z#+8QnmpMs#6Fj~2_VsDDkzf)_fUNz9-o;!YS;E_QxU&B$+b)R$RSt4u-QC=P2zdNk
z$+x<?A5<8^%%9)2-fKSh!%ry+NmuW@$pYGl^!KA^6@Xd_dF*Wa^rMTpwK^x_G#HE$
z>|&B|_<yI@f7T*|E;0$)#I;cJ>gO9f)&zOG5K>`LQBhI7ar|~sS675#am2sZbEYR9
zv8lwzX=r-$j9k}7s(cQ7Tlrn_`}glcu=Pr8+czP(hMSE=Zxh!@M<y@c5y+JK3ruIg
z6EeuwIh~z|%G!d#p|_x}uW)>He%7Se@tXnX#gp^>#b-355#ab|^iF<0DLg@yjf~p9
zkq3gLik9_NMuy&d-+iY`p0;a1&Hi8M8fKz-_%*ppW5jbRa`M+uG8R2U+4!cgaPl#k
z-YYX!35m_R1MA%hLqq1H^MQmu$ZmY}P*aR`zpIN&(23v+rl#q>-X9@M;H3PECy+t{
zAyv&541)6W?}I)kSK0HuW(%sal>N{Umutpwd?vpfde{+=90U3HSCPjx{yWZhFGl#{
zqe25CBO~zie8wBeULU*nY;^PrLVCvV2H)+{_4AOBx(c;qz^iuc7wSe1ckeD>ikXuW
z&J2hTteWWXB&CAXRBi^j*I{8dlGsS*-~tKD+T?$bjFy5vi30x|kYphA=iPpZ`fbW9
zlH2Y1;k1ca;KN6X_k-EQj$J;<T10hQkxfHJCh`}^IXVUg+WPw1y1J9}?80xQbmo|Z
zg?S_-Sa^62DkLV@1~qM`{7K`>&CNyf0c>zZ@K&)Vu@J)o;5o;RUPrDWQo&3b3Vl<o
zRQ>@emAL~Owo_Ml5?;Pu4(Hu-&)kHl4$-OKXn6F(8fNOwVj}0a)NudjRj;@AY0A_%
ze!%i#^DG>jgFVg2NJs+vUqdW*H5voz_m&?^{dY_uahtqLW}5g~DwQ!WsPn~Vc}H07
zoWsir$$Vl#fdFfm-UoBbESWA2?Fc=6{mIXiYjPqi6=|((H`UKQ+EUt=-Kg+EH!W8D
zy58Np)%!%u^ePM06F>7(3G(nnc{v*~#D}cifR$<bQKie5b(KC6l*=AWYU2J*S1&Dt
z#=v$4Dq{#|5NSFgKqW}r`EJQ~T9&Xom?Q?TE8m8w)8Ir~Dj{S8Gwta=aak$#k45cr
z3Iy~L9333cvm#~U!sTyc)I4XAORSN6-n%vNCe)djBZd4C_Z!ql?7ND1EEJ1H7n5OV
z{BrpHZ4v91H&$00ffH}>Ulyb0(rT-%-Fuh_8%tCo8x(AqYQydblz@JS_XRGsrI}Zo
z{Rw80S1S(<J#Z*)^BqwX%T1lyI#%o{sf56DXrrpM?~@8rzBlI;(@JVs%Ni)ZE*5y$
z<*<>9hG(9BR~0S$L&52|iHqD6Q^)c%w)Cs6*7otG&w1w<hFRXD+G#eqs4YXZxSzE0
z4e~^QC&H!F*tk~Em4QkwHT6oC3LWjQnP0Z2f|~47T60ut4iH<f|J0NwB$TA5&uJu=
zFOXZXBtCG6)@^5dT)qqqaM1&8NEi2$`Q-}sE&PC~2PTEjBrEvMDpUNn?qV(|>X!u~
z_pxK~*bvI$s)0Bew2up}ViqzZU?l7&N7V#1r18vjWPZa8iTqCPOf%d=O6|Kj))Vmt
z>!vGyhD#WFx4O<w*M%|bhI{=@92B+AbA#(3i39hCyAwik75?5Rb4mv7h?bW2tyQzj
zaOgdz=s-2ua5gbEHgyGs<3DJeXxWO+W!4?p(krP*6(4&yr<{Mu|NgJgvD70cz92Gb
zk?P*N{F9tl&K<8T^YU3ZJg(9BuhrZk{#w9^`iD;vCpb?lPwf43V%)ls_aV)$9{#=-
zTr5<7ynds~v+$SHI{VI(12GhSM;Hc`2)Hi1umzxCv7yHGMovx+2w%O}6wKCO+XbT-
zdCLH&iQ-Qg95z;@EN6s-EV2o8$eU&K9yC!bPIlIGst=$1|0V~5OkS`4D>LFu-l%Up
zN<C+A;X-nTg-6QLgV;LT`hEJu-)^d1;~MFHxGeTyo#^t(GV)`O-W|`+Sk}m|d{&=p
zRezIcJKGo?a+3SRX{Vy%a0$jwT_e})kHiQt-0V3&ZTz-ql<@a3&&~F;3X%d#p~l%|
zC&;V?d1#*K{`zsv_%~}TS*(#;T;y_@TWF$^bf`Xg1!H&eP3m^JEY5W^;jv&FlgI@7
zq%)5nUTXA`Vhte>qJ~9Cs$8?b4Ye)L($bQ!P#d;A^};4j1rBN}(S5Z~gAR&n2xv@j
zz-7qS*Z1MWzud3qZA<xKag^M=Yt`__@Zb+wWhqY1(2TuJ`E;pVhsek%mlNo6UUIW*
zoMM}d$kVJkL1cGOeZtx=yQU9eiaK}Bk=|}zm7!L<c}BipRDMWrQ2)_=0~@)mY=^aN
ze2XBxgRu|JS~IP;L>Ma!bw676$?29obR^2=<li5UzQ}|}-&&50JIgNLkmt5mv$tLI
zeQq4(o#uugx%QUF{*J}mIz66PwkOBHxNwgG%d5f8DaMbnpYG28)#2rRcIo_>kO0k#
zrz6Y`Gy+7D&BB!19OL;tJ$E_u8hxJ4R7C9GM<S_!R<rz2WrtVc!mSIG!q|QH9o*KE
zov$HCY@Iljw5xUX{Lsy`U7HxxXt?`rGS8|wsE%)?w6Vmw;o@tzREv*qpJ?zEdgvV|
z*f<`&t=AYEEj@Yv)?|?O5e3;qp;9jPA)Qh1tUjlie>h~zwZ3#AUz9KA?2=YRsQT0G
zf#~P!SEVK_8E<G4eR7a(^0Skx{AO(YSnE#tWy;!<z?qaJ6~awO%w~~dSUDj&&m}u?
zSU7VsT8~lID)`qgS_e^k>5oVAu9}^lzWX-!C=Jn*)QFs92U_Z5)VXXUUsWXqL`}{;
z*KSqnTcuFs^-<;1)xXl-Tz~AvQ_Z9XIj(7y%1!-)Gpc^dv0W7RMILWaSVjgh^St0w
z3*b0JOsu2-uz8u1`fh05v7BaNmV}^QI>B?h{9*dGSq`EoQ*s(QpvoNIEH1K{^ecxq
zP>1=|5~-OxEQA#c)i;Nb=!^A)FKgeYd|~xE?A_Oj2Y&jlx6+3CrN$C(nS?ofzr;>$
zeT>!Tp2`ECNcC4;@|OP!40<>gD<e(>XX&Ke%T!sqUTLC!o=f|*fSklB9hI+Y`K>g|
zs%??&sz$vV0iJZuXNO%miqC4zvGUw|z$x#v|CQ%rj260*J1K=^L{a?Y;`dcEeoeI>
zq&#;t^W%W&r(i}t9`!L6KJf*Gsv?uHvoHA6w<t>4RdZ^dWyLjrlt^^@FzT~xe0DX^
zL$h%F*O`)olXV{NyX>1a!>^psRz3gqjW`=6-S)N?uPMt|m&VZOjRV=2*0PV~pM1w~
zbAQ&Q1}?jnr+r<g9C%rRReke@LaeEM`43i3sOq>}|ET@mo{Kfi<e-^z<pgA#CbBKh
zd3|&A^<vqhFDa6rBdRPs_vT)B%S{+KBprY$hoP36)}4-!sqqR6lTP|i!PcB(FOP(1
zEot)?9HXfTT?yZQHhr<r%JN^H*<|jmhD$F_ra9cz)f-ErEVwR6^Cb2yQ(Vy5kojlc
zOmzQ;1$fzZHL%CFbumdARt{=*kM*VOSBOirPT>h(l^8Ehv%a=in|Ds$>~7f)IHI`h
z<0h8dmekc{l~tZ#`_ou-vV^GAmVpSc2}y!9^Y+=t_IxboO9Cx*ov!Ofw>vj0vA;j0
ziaoowuQmO7t<<`4r-BqkX1zI2NS5qp(MJd5W0WvS@*j2Gn*9%6i~0=6MoU*$l7;2&
zQTfAroE^TDkRyv$TeH|9Ecv+4Vw|<VUshc0v5!S>G-|#8#Odp+ERmD^A0IxQZ`OKh
zYWxxs-Ji#a7JjyM>3s?}RV;TDGBDOK&}S#TQkrhF@RXUj_|ica`~FORiQyaDwdqfJ
zcz<>s9_~Lj;rJjR`0L=`k2S1~luF_>lD5DpW>s2>A1vP7$+F7L)n$)sn)}YLFuu><
z?zk-1qes+92S2wwrR7o0bN5!XqGTeftF3MDHYq0b{b7}H&~7)DU4DgCpZa8Wl$L^$
z(god^TSZ6vX?Bq;*Fkmas~^uvW!yX3Pl1ev@>8r7!Uab~+O4N#RzhB$F=v+XR8X`T
zi6e*<%ZRi-<UIeJjSrPAm74uN=H6gq<LQl!$0ttkw6s|HF&B|~(JfpY`&|F8x!dB)
z=_5KNXT=FwuSj20YzjIwWe}2i<kmN8QY#%dHxI`CKq{AWGz<)dj^Bn6ge!4-gGJ+1
zo@vE8Vm|E7H`I-@TCwedebG!M$E3~b6df-c86EduQ|8=wO6h-6U?(<{Yb$6{X3Vc9
z%%L^wR$hSAlb<bY-rKU-T%;VjVH0kw@BenyT#koV(|bRDJ`JOsSj<@(biI!iof7}H
z-&*#(cEY8S>5(Gq-=x$<>Yurb1e=kS(sBOCU*urjqb?RZeHtDc<nmWDQc1IBS!%O<
zMeIk|i}qB;N2X^orKiQF2N2ooJ^o$&b<nK1SGwc%F@-r9U5!NDH#Rq!84u}}+)!+Z
z<e)m|`eO`M-sOikS4V!MZohdmJK-^<tAU_uMyXmtDcr&#02TBE=c^YTl`Q`_Vj$vp
z^pWGa33F@|1!y}u@{BGJT`F_B4j1Q;gGQi6!f{O%0k??sc%_{#ym(M)v^k>o_OCV)
zliJR|;w<$m$h?-i{Z5rFI$g;$^_{-HepDIU)PdHre2w{WD)4H_lbqM`V$5gs*|RUf
zCMbCSS<=e}i>nGN^Ck61mOX7)bu&*C(JYmI8XX@eJ>3V5YL0#~8n<`;-#=(`9Ycfx
z_cJ<5R+Z^CjG@5PUR_(bfKhbeGYq1Z7S_wX|0=G8%Gfh^N1umc_nTSOdDyaA)ZKMN
z4iMSNJ`p}X--dhch#1A7D^Og_;H}YF=<a)puf1fH_J!~s;V2}e_xFxz!-@GgJ$+|d
z$o*=68N{=YKl~$cbIbveCMd9(SZ~Icm)q%ZBY(3=Ji|Yl*1iq4!cD?V>y>-^!(T3L
zpVK3wAPHQnF)!F(P8ihI*~xo4Na$ZH_u~`Mn)wLg&Ue)2_$^9$8_um^`N~mpW@b|4
z!9~o;Ph03toUlMXY7?4aW@5_5{c0(2Izzwq`0)u3*sclR98;#Jcf5UD@)FaPP_|tN
zUA8j|ZnzVNev}=Zc+Qux-<2|wYi(v~J$c^cz-lX-&6lUAty}cwP{W&7c+e+WTo5Pu
zh?e?OygMxf+n@)5iiW{y|CPGCN(v-(RIoNwd~{O(eWfKF4lqUftm)jI)*VQA0Bp*i
zzb@Szt5?CmDU;^cnYl;-3)&Hf{G6O)G@OF0%S&!=FCcoTQ6`=Od^?LTPczY;HhN69
zEC&S0#5WKAOKjSO$nsOHcR^5>Lnhk`@6&O?$AyAGGr0Bh%NB;I9}Av*Bb%*_;of_u
zEEh-r;1<NZzj)6A6=|pm9UUFrvuBU`FT3NTb8}|JFaCm+t@&8A{My%HNSfx_QissN
zgIbOG?<YwA{kJyU|E)M8F9$qrgK`)4@ALDBZYTvH0GljJ=%De7!HcK<<f5k+i{$Kb
zx-%@EdY3P&nVNz+coSq^KDA3e3VjsTYJvvsyE7rH1G|%T*$FnLy>tVlkD~X{Mt%C#
zmAxCAaOC9K{bj|j-Hi{aU#z{<cp`9k2||@zsJgr5$X%eo6>2-}(Dxk_dAJdTaxO6p
z-grQFCVq82cv;8LaMw(Th}nbgw0-a&_1CAKd0|+^cr@6?<^^U&FlZc`XZ$mH|7CJA
zzXVJ)FUZv<c1>KW^eV&`0CH5v4~AGrO=@hu<EeN%8M4FK{0=NaM^=V;lw~*BHQ>}F
z_TSh>{_vd)3nvAbbLi)C^d+X<bgke!ldUcscr^MeJ0_dV1JorY?p{i5Xf6ee->g9i
z+t|3?;Jz;~TxF9$8lX!bUH|ixD|G{OXXc(t-DVa|eQT?fsY+eyJc9n`9~^$rDuSpY
zS!~1q=;1?Ny{0rRX5RQ_HlB5+eayrvlrR?3*tHA8F6Ym1B;p9R%IIZo==Xxjwu@S2
zH8h5Ldm}3D+_|Ic-DB?mumCQ~06LeKmoaktD*OS#50kzv@g*M{hcq6Gl5c?`S3?hc
zBgQoVu@N^z!^0O41<GV%-OKalH5b9xEUqizw7)Jl$-TEphk@h23pYM7Z_80iJ+HwU
z+~(UQ05M^TL&zOQwy4<?qgIb(nyZ#c0r~l#;b4SRA`*Ic;B<P=_MNuAex3BR7r<5^
zI<IGy(s+A;RD{p*#Rt8r>U;DpC|%9EhM_5wY4_aw-x=BFm1qh-6E2%*rrEaCEs$+7
zIJI<k9>Hdcp<m{YJneMFFON_AfIJ2lByIyf$^+jgPq0-R4C+Na8lzI8UR(gh3MNtP
zQup6nm3<1|Mx^TaX=z1fW-8!@z_b^FBpWZEf5w**iw}|0&~Qd6{}1NdL9ah3NUr}T
zpuSD(`BC`-4kjjL4Gjgd9jtV}nvVYu=5j>b%cKvXnh4HTy{-3}sKBTgRJL>B4D^z>
zT41stGk^9314GnYCh<agUGFcoPVTk$P}wi;4G&Mt%i}w&(K;0SENYNTR)E;mDWP4o
zYJyuaj!f;8td;97!Ia9GS>o1GAKuFUIaF*cEI<JY0ae*^w(rVxSGIvcJfG=z@l~+w
zsj0i8+0`;=`!1`(irVPK0;cgPDc>;wreLVmj1CRm#l_U(-<%N<u}*5m0!<V$^0s*>
z#7sP<N&fL_oskLEeKl{p5_v5hYt?CWBT@my2{NEGX=xqY#GN_&*SV(*?x;UDj!!td
z6TMYpKJ2QXWRuc>bx=eI%UP{EV7E^XRrIzdiGXYJ_9tLu4)sJ)$Pi#p5cbTj_Ved_
z*nZuR@Y@tpSSZFm0#(5J`j)yIRiNCZ*A}DrPvCkj>(V|ed6&x=Fn6A)AfppQ;@O1_
zr*m-+XixEo8NeY-MUh;7j!7)2;qL1P1jobq#U60a2v15}32mPGuyKISLPv@2bk38p
zN@1`Kd^=)K2EHBiWk@ZhzuY4`Tx@W2<*fMO4{XFNf@!T(N_u)!4tKQf@EY(X=*wa^
zlk%7iOX!WL-Z5+LXaIHt-I2YM6YPon;!R<Sh3UQ{rs&{)j*l*Qz^n)3c*ZkM5-56<
z*|lyS*SoV5&MzMp*+jy|x~?M<prxWRb>vG@5(jh=!hI#-Ko+(5?osU;h$8kr*imSd
z`Bz<g`i}8CHzOGt0yS3H>V}nr>4ujxiZXcDUFmX}Urmq!9NmTy-CXOsJLPsZzxCy5
z`F~k7AhxNE)+!vNE}9$hm(kK9UllYeT8iht3^3ZL$SNDx53E^L!W#Bjphc7wa!XzB
zc?#-5aPP+EdT~UACTM`Ov-dEU-L+u<{9AZ7ZPV7m;yVP~;LTmXX6OPROW2$ZGA7)$
zt)FcD%#YI#)?jL<*uf+E-JKheWE2QSj_{ODHI%}QpIMGW5*Ae@TD0%kS!-C{JZQ44
zZ)~g;g;xvjIe*Y-VJf9M%@;23f(;M;7e#qj;hcd@+T!3o4F$Z`vaNiUApMz@kKJ{6
z@Mt?->{yLhmhBb?S1YmN#2yO|HKm_l`4lw{ezJU9btQfEle1y*TrU7*mVI!Phwq#q
z{h36sBhAP7AB#){mGV7ATF7}ewhZm`yASCqDlsB39NiW=S8CTO0Avd6qFq5RtKtKA
z`re%l$2XbkE7VOA&V;ux*9;>A18)02u%wO&m<V0(X$A36E_LhP-+v%J-S(}7l@ra$
zlO4!oF$qzbNhY>*bd-b{rnsjQ;#w~zeo0ff4?j^qJRuN;CJs`zv^6(JsXPpYM<C$n
zF)*{>7f=ZzVifDn*fm*pcq}>Nq=WQp<?r9$ZK>&r(b(9O<bzokfJ4GVFKE}o7rc(Z
ze8&Y~XrSICh5GJn6B1p)N<;z{OgR6*G3!B-8eIJ|T_)k@Prbm=v;qEz4K`zvx(j~~
z(TRZ@o#XNQ-QmNNj*h>@9M%%7g>A{9-|cxsUy(T0S90AG!xEUHeO3PX2ZSql@VD01
z7OBL%Xi|j#U-olfX=d9B*+PwZ`OTa6-jKDh$kTlclOTBD+~0pO>`imQR-|W^xlZCa
zMW@_^#aLo&!A8L>{}wLnJ5Ec>;T}uc&?R`Ackd}1grURI9f4^tUmjT3D@>!LTzV#+
zcM^I(FoL_@*u`MVlfbv`BcR*$7hdxBDe*N}49$1b3DS?l^Ce&iBbsI&724IF0@J$S
zeUBX~+-D9y+0U}`^SS$EOWdwGF9HG+1d?Ghs4AKr`9j2|^(4M<mbO1sB94E)%f6<p
z-2piTPD6Ovg09vVJbJW(?G}mx{gi<9r{{`cfp3}<`}(k8>)o?7@r@wET`7YZgfeFY
z9P-%TR=`nX)C@)7V)c%OtZLsYhfwJ^S7E-YU5@C3T|F&r)V01cXLAe^BqbzPX8Zr)
zFRDu2z#Qe}Mboy&Le9g3V7u-Esx33>u256&(<DqrwW~Kz*%WRFG>C>LZQ7;6rM;6s
z#yW_kS>XVv*uS*ARqne!f?7!8_CSeoNe<s{-?cwCAyx$2a;@;H9lO|5YlbirqbEnb
z3HnGDlERKgX7~(iHw3++rU(gcUZEl*BNIn_X2rkDw1?<Kv-HyysW}`A-~rp0Yv>G8
zIWX^k%QIzPl0&8lod(~!jyDb=)b>DV2V!Pgj3h74-&S|>u|2-=e^@}g_HM%)z``FK
zAAhXbP5VL!wZC?trCrU)2;+~pJo-F4YoqkAXMfxSyB_Z{0WJaJmq-@J{qULTaeV!x
z*+brLxRTv?29NmAdV<h^Tu5F@8)#I)EeM+Yc;!9$k(;0Q!>Ayv8tikK+Y6Y0A{X?>
z33Y(-ydA+Z7v=^^u$R#Z&5YK=b?VO-hX@AAD?uiMNC_2k@XddD#@THARZ>#+%a=b9
z8RN6`Yaivom;oIxhyR?IeY<ep7{4+zEpS-imv_XbV7!@CRVCTQbW$k(7`IOF6VY&q
zy{$uDfmi&Tk=_fdY28B+D?!*0P>r0(r?$PCWm4XObGW@;2tFlLxgZoD<F|L6?wWtr
zfk+Lz9`)D1KQ=VfY{161WbZycZTl2ouK>*6mga`8wWl@2$A?&Kpa$24VOo9XE0dcS
zg24k0_|}}=agW;HbqB6wpkWTxrfKyT9iHiRmYH~aYpTN<-j9uht;ynyobM_~t%+Dl
zt(tY9Mj%gDa6R%!jsQe5vPa&3gP(QS9zTBSYHZc*DY!{KWRNtNjpI*{>mTeZvgW;d
z)_YO@iCF%9szMJJmw`e{x}wRp)V1zDFv}lxqSf~BC}0;SI>9gaM9fjq-qGRS`1^}b
z$!*+0mcEp(C~yOl6=WxR@a5NY`|V5NyZ5xo<~v>BtJL^-juVW<b$4T#Bwcvs5XKc5
z1~b&-!WpY5__ww~j*N`faiVd+ONRIR4ib~(<%z43pG*3<Pj#H;szcC?|Msl+io?dY
zfFg$X`)^Mj4|hIWPs4^5Xswt_haB(yKlml0Xx3PQe5e9h#pNxkl3A82Ux$n;-_n=D
zizKE0@1}REU-*$$ysK#FMrUS7?_5UB=(QY0d5q&wgVAe?E46TK*)%G5(WmX#x|3(r
zSuT5Lqew|#Z|tx9<}H;c#+F^({;PG`hP@UlgsvknPDkGZ*12R?fObC_8TGB8<6C=g
zxnMx+`^72o`a8EN<fe!}?M_!Z((e@;H%`f9`b0ogS7f1oZv)Y%7fDU5Ddj|sk~B04
z$ly%>Jc*6JIW)9^PLQN4J?|RUar@HYg*)*yZ=}Ll-P`qU!mAqo@ItbwpD)<SHDOxf
z<5hWmxN_gCT<CG&alX(LmF|@ZD(xK`(!RP~S1ii_Z)pjM+W!6|lB$#{Il15<0<!(d
zQ{&^s7B!WSq;4+v+P+y#Is2`@zx>_1?RSEP!MlcYF)Ip6YPy-K)&A!#oS&Y)&f!@%
zI@UqXPV`$46jIpjC}F`_tjLp+K6asap(Svp?b%h!zdqKEq8mt{be-y8-(0~KwFTxb
zX49$eHXRwwxU8QwDa!5d$AABpyz!l2km_+}<N%24%fH%_NhsdTd<fh!GFBNmNZHTq
z5~M7StrEloeq)CPyUy<JQH><cXO*^{FOpJIWecw=@EAOBra;P>O5I&|l+fzxi`X)j
zYVL6I{UoSbHF-yMMThP`<qYAySz+U<TP0AHL2i4rTbS_9PF|km^`2Sm9k0xie;6s^
z_?~`&QT4bEr?7AiY)G?y!!nkZ<v08>gxoAH+-`3#9K*9|updKYS9{u#C;P4JVQXnM
zUg<Wq2qrC7ft|CU+o|7p9~bS~+S&r9<{{emr72PWH5^=XnEw2sC`5Aky(ePH^9F?y
z3su(Zz<~p6OH-W{mrkWllYHB!msU_P2gKrQvUnNn^!E@3Pmf~^8?8!^ckJrk58w)e
zwfQ{zIzPp^y|E!<5I+qJeE60B>J<dx!;p}(Q*NWzGB6-se_rr}Tw#;Eb)2gfN&{J+
zgM6dp+FYK==iP%>?u3wq0G5g(HbT2eb><Ss(L@q{j%ZSvFH^sMeK1Xt350$!g-`vN
z#8LJoln`9Ey#lQT%WjTyP~BryIy@SS+khy75*$0I=RI!PiMmX1W$^|3FHVpc+Yb&F
zq}hHK^wo-Npp6s@D}X6G{Kxhl<~Xf@8pRsqYHWd4wE@E{INU)zXLb&Z)=1^U7Tu^2
z)51G(K}O~SKq)>xzQi^G%G3VaK>!(UT&O}n3Xh3IA-%o=7~rkWOWXG3*`d_Y7F#Go
z-Nq*p?kl+D(#vIxxU4S|*cGulcQ(3pH8qb^3vp$D#JtuXaAIN)9Eukg)|-P%*$}oi
zX6`N`LMbinFG?_(mt+^cD~U#1t(6f%uAY3JI{!8VYyIV}obwxNbII76L{NA&2EVwq
zBig_b=UBG0G4txN(1c1hY-*?duYGwcJCWrECWJc}%b;A}ZLFgSI#M;xbexjo!7JmE
zgE@&~wE-uk-2UL5c&)wb^Ec5POS5nx^H`$_t%`*Xt%%J@^^+uZNa(2>8L0;40~K_+
z-&SL#_g`kMEAKG#&(}`B6~&?edI|C0DLh)(2kDmP5n5e=eP`sw`tVr1d)NAl*f`aK
zhsKdRAk<!YYw|tHKNvwu_^yQ^grRcx*3_zPkAFO(OvB0f5j<Q@X-$s2B`7moIwxuy
zzZ@BLMy0f1^GuRgJuir5{}sY>MB~gn_Aqn+3r9$7*n4q##_NtRnD6rW`zkzlBMlPN
z!bD9-kG5ov!Usg_wq@gk$-?sT@)|h?w4+(t7f!;2cmQE0C^vA;IKNJ3M?5KZeHiR=
z@tCc&tzjSCx<G>WTdi8E?K5Z85k0QKbMdKJjvjZx{v@Ggf7XcyUcFZ%oSfbTheTSF
z1pcJ)XK-G$H05=;VUYlk-wN4#9v)(t=+jF3y)C@yC%RsHF{~&4!-qAM>aESOpKLID
zpt`mfSrCdwU+(;k1@>gcgKialGq40ZnDN1k3kRH-kdTX;+W_)|9PS7Ss>3ZpL+z+s
ze(H~boNoUY%64$9f*`Ox{UcL{1zqp}!X^e`oR9MV!1X&0%D%=xKZzxK021~ayP(g4
zWyCqBK`*!s!%z%o`t5t%$HhGk@zGxI+0-p_y3NQq4`Ms#Axj$@lt6aw?#oCxK$$)J
z+`k8Si5)xv)d%XxR>(ngT{FzPMAAJ1S^W3h#%p9Dnfth>5I&)PN`*ZIN(kK-n{bQB
zZ~GAW7@O93a%Wg&>u6o=G%L0#DC20wMDNR#vP-LQ9Qwq}%<S?vYFD!9Pfx!uL>Km;
zw1)s-KQM^EGxnJ32vIS#{xIUZUT^kQQ7D#~P1^M7NLXjd^#nuPvK#(ngscOyDTb3B
zACy+ZwNv|8O0&39We>#P5Pe~hyN}(t^SJ6VxJhX1l<E$u9jgyt6fmGH*U&ks$dw>>
zRC$*l)#44nIOr$y#RU4myv$5)x|e75^$k`!?{1PxR5zv6cooYkk@7DF5>_PTkbutR
zWM@Qt`PR#e>|yma5&EOG23$%)1b*vd;fg#|na~`<4Y>B>$JO7LBYalJ=-gCeUst(I
z?w1<FP>Dw1?UjUGHq=3dC{x9A<kFolHFqu82WA0|p?BaCcOrjG?ytS0rlFUvv=gH7
zrP!?MU0~oseB(aSA77J1=zbh^b#*QD+g}*`u%i9l&ce7)IW0L(Eo#zZtryg+0{8y-
zV^l8eS3v5&GxB3EvBZMhnpXa$!b4-=8yzYo<>1RHjb;B(Q!@%XZ}jz`>ZM%?yz_V=
zN#tc+U7dESD0t{w%o^}#x@Sxye2|3Fuqjf5<l5ld!agmHk5gj-jYueNzFY1u9l~rS
z?{pPfbah%M&wJOSv$C4d;sb?1?#c_5<e(n%N}CwY9q0Msp-sN90(Q0dWBkT%WCHg}
z9CEmY7UZUfRAxR@J(+EU#Yo#An(Hehe5~L_OLbmEq*z|C{cYj>)YNupUamBwfi{$@
zBGTT#e*uuWk$jg3K4Px?2R<=a@wff}f$mOWq3`-48fTKs{XOU6`NAld)xgm)Ja(&f
zal1S1s314uy1@v7)}<G{X6!$iW{=+kj;)F9uU%O#irS=paG7Cg{by?mUCtr3aQR;D
z&u63Noo}4BZDZPAeJK7t+bGYN!=16gw6672#!APMda^3H%J(syU4!q9ja#<%g|EYQ
z7N*)#yOCg8>d^0aHM$xh-Or^+K9hg>qF-6%|K(Ygo{<p=Gm89r;8VmQX<o8Tf%Z8F
zkAKSPmQs7UQ(GY>#w=U@vg+fD+6mEDg{FRfW(mJwOma=Kfj{H@i?|*;<M6>2AaxK(
zkbJ|wRU)t1_Yi3=jI^|gT`nn5%b1o-&%=zl#DV03A1`c=P+T4$B0}tv!68Dm(<hu@
zme7}`;A(0rOUf+9RR_@~^1=qbC4l<&4Y<J2paAE2C8|8v*TZ!ybCZ*CS^V_1u)WfN
zjFC>tm-d7;c6%-8J1svFUFQrQK@Tu)cop=(KF79{Z2&L`!i#c<=Yv);%&PD8D1`ix
z%2yF?@ZqPH#x@@<C$gx8Vc3KsrIsVSCmxVicuywth5dhhWzK`&v(#(OdgYINt;JtW
zdne9|;S?TRUvNSMy(=x|{X(T0{83{?jp&|5LIh_kn{i34>+>Ma+5@nyPrKp92WH}V
zQBiddWmi4DrJeo?(mz~ZO3CUdJ!@E%nJxtp5!aB+%^7p)gdXGGXKZ{hmPLVw>Yh*G
zn3-|L+lmSzIi|qix7(V+zy1DwRF>OI;+p(1+Hxg1$<s!x;>x_YqH)<H>92C(BSYo7
zRoV|Lx6XSwbQhTZ{q-wx);B?cpsBowhy2Avr{)130<$C{>1=tN*9O(NQHQ}2HATup
z#r*px9S?+6Z4lAEo+5jPeYh(}f95APS3%$Aiw8)Obh0}mT=5$J`%@ROvFszr#nsf)
z<Am^mY?D)$>>q%ogoE3@NcIZ|N&Q9a6oP0YSj?9ztFEgxn9-wIb_aB!qB|`R4Vg8t
zIwQ$4A$J{1K$Ul_KH>SQJjWsMMB0B&ZFQ|Fw)ol(N9GrLaSx0HE_tl7@!d?DFk>G*
zEDD5;;q>%%=lORXyMiB^);0F!!-&G+>~6s1030$DKe?(lBAy!W4{;ftnh_967kAjx
zWCHR{xWJ7P%a0>cQW2GvJRAR{#r-zj=7&v}IWM}YT_KRMITiL`Vq33`3sugwYX>H&
zm5c6$hm#yRg4CBUHw<s?L={jtouUAko@-V0{X2R8(6fS1B26dYz<z1(<rlFVaOTf=
znz+$@wPU8?z6FF>hnBc`S+h0yHQ2`H=be$qz9N{u$on8HOz(c~6!}*0-_QR4hXsf(
zFX)i?ZeIRY8}ppazIs(bYHM6s*XpTZbEN-vc=elz2@iH%Nq+{bs}%kNFDqZ~-_aIE
zoIvlFFUBiQS*F}m3EYem8Q0^COzlE9S-w24#y2A*B_;J-)p_)2AC;A5(i+FtXV0%P
zJ@HvS^61M<0r}o0j*jF@6doPd#$-QX+cFS-^6+6vG;?;|gIk~4-iWBASczrtQ4MKx
z_V~8R=+JgL$1v90`$Q|3${ozPbjQ@re5<S~UNJin;G4<~aiatk!H4Uy&4$PK5m+51
z@f$sJWcuQXE>kx>Z+f$l2E9E5A7<o3$O&Bbb5p2pb|#;)oio0m{l4klVoLOl4D_Mj
zsM!TNkKm^X`iTPZ_YQ5XaTW^A6tJgXpdupp{#%iWDBvWk?Z|_yk2@89*(!lLrSAK=
zjO;KSgc#oBIu$`c88v<|vJwC|`j?CQk?8oAnwfyWnSC#FiaW5XhoGgchyWe@9Q#d;
ziPG9#Qs}7WSJmld!(6=u9Rh+6-@;^wZ5tk+_OEYfKuy7|?StkWXx?+TjSnBLO})Ea
zixT??{drNVCX0PWQ^PdtZgncoYKi4A6<_*ZBZ-TztRfB$Flc=)EiERNB(t_UQjwOP
zZv8zyLJH-|uAxKM%F?hphJv0Lg!%zZ>!L2!dvA7s?5d^JhYxMadk6@;P7j8XH)UrG
z0$!eg<J;Nu$7Z{-?^~T?A6@%O!LF+Dd^`R8=M>osJo=09F!rvxMYg?uZ3hEWIJW?I
zm)_W-;=9zw9vBjm87z~q)0BmmbM@E4qhi<5#Yx`QXOc?sSzn5LRvGXXt^XC*%llQ1
zU>Q4L9T^$2$GMEV+!rSpsjQCQFXHF>R2Cn4h>L)L;MLuO%#pee8F#i|ekirG=?Wg2
zxnB~Jf@g5%#tE3B7Zej#<q15(um)^p6<bG9SsA0~uVOTOpG=^e<TfgjH{RG~WW$i!
z)YO#o;^sEY3xQvsI(-^vXT+;l&bZ%nVh(Sin$JGyx4A%I*gJ+QZs?8OU(7}TI$ka?
zG1@m}ZIM^6z-v?=AiYcwU`Rp!XY<GB%ZnoYh2^f_D&8H7d4AA^={-BaIUO&rw^U<n
zLn<9HFR{D)U0OmGvo0!j^yU17xTF~AL9|fw-^wB={L?J3s|*wt-o#Kwd7K5E2O}kA
zvEP<4FK@2r@YMRRsQINSX%(hQ-}QTMs(1W$;EfH_im@S2pYn<dHM>H5s194~_Bkt2
z)<f#W!sL&6upEN)I#Qy^X{aX+U~xq?A%mS<>D`S{a37cEt6#l!nY>r9Fx|Z--eq+8
z^43!4(qa0suhbIm(^hxK!Bl^_xw(1w@RrH#cc8Qf1OzlSHDQwlww3_^9Q8^TsIg^E
zrky^e%+XhDQ|s^Y7|EYMK)}SCNkJ3!`6zMVN$#^}<-?`rSQE4^OZ}VG#csA$SlcEv
z{*xp$xZX2u#{6FJqKL4t>fWC)G{pJ)7Ow~T5@l`|jIo`ZGN~&m2pigr!^sSUlihN)
zia)<VXw1&0x3GCCWYiptqU<6FM>u`{e2zo^4t*0nH8s0<^htVp;4!&YIpB7h`zL#2
zu#6qP=`iagbrWMD3``&;1}U|p|3*S59zQJQY%DF)pE>1^&(H7t8NFa>Nx987_IrHV
zSlvD#<9!)LAbC?1fJ~;$Y5~*p0K$|Uy*Jlx2JYP#yJqUPN2llCL`($y@Ymaw80QB{
zbZJQ44MSA!qtOTE=()Kz-_<{P|51K^zOP73%LG<ZhQD`HK&Vm!zHGDAJB1rfw)>Ai
z=2dmz=p`ZJr+lX%#{N$?UT{a!?jM!`)Y7jqk|ttMoViVR6~clgToK2onN$<L<nQ6C
zCj%`0yokfw9`YR5sa8=}J(Hu-aP2vnap6^K2qvKGk9`26J?)+CdHS<Aw1RReo<F>Q
z@wrsV&GAOnyOm?VZ@kdlDa3QdQdH}bavJo+A@?bU^Xum)y&4)jp2{ouFg)huJ9p~x
zFQ1|M{ySQ{>~@h-Fs8(pWe<PUR}4Ja{N+mlwq<jF$y*rG0vTCf`F2X-{yX#zCW>Tq
zD+=oBvycm8LIWH1D4dj8#V~SGY}t#**@FiUs(xZ&b5teXoQT<j#{InSnsV~_<?|l1
zd2GHK;Hqw{|1_Vt{A0v_K3>pK;U1Otn6s6+q91Zt20ngNl5MR2dFDEMv9e(Yb5S7)
z<@;*4sUV5FWcQ`Td@%2u?u0%3%Us5FRw4VYUI0%Q?Scf~({4|wY|I&h&%X(0iI>-p
zt>0;Tf4kx#UGEu(KCNbQ?j$jXzBRnoDAL}-#aDV~7D{e8;Qs)K@~p!0qAP``254T)
z=e|<h+FBiHepFOa5;HxAfCe}IA`vG5Xh~+C`vUTCZn)&2JpmB{z27Rd#s9uJyS})X
zJT^JGj7_SAVS|LS@l(MJRObj^oPXl1sOAzgHR3Zb+21>yr9F;T{AH%Ursh{HmXqQh
zl`fM!IAI_l{{B_^<H%>Z9C97H&5ar7!NHcMveqL~YbkK!?idCjinXJrp%b6QRF{!*
z?J1{Jll59hig0=>!w5-9&Fsb6JGT;OmirvmW4Any(B4OqZy=#GujxS5rNS|tzrFMa
z1gzJQF?Uv+MgRlKKcfJBS#VSOGE{Wgw?+DpS@TFGp(FLezrFhw{kPX&TlHejN{Zc!
z$D}V4KPbJmR6LNlq<ES;KSH%fcEI{t<Sa#WAO>j}UBz75X<dTVtzJKq&2ad~5oL{h
zg%X?rX?)h7Y)Im<bo2^Lyr()EFy_H*O~cyJ+B}gD40pngmzBa4+^@_d1l!oF=r0y|
z&O{kMZ!NI-f?-GhuF=sEZavlXH@-VtM8_k0&$Z9Qb860Eb?2-OY3G}itLB6NtkhU)
z5p^D}t*KEl@IsSjpYBlmZ{DBDKewtfrzQ6kY)!VvqJ})CJ24<_*^MaRApjBCimEBQ
z_48*Meq&ln%D?b@R#H-0midfxA@uI{yo6}@4f}hP;5<YR{nlZC1V*K_&V6QExvN7W
zaCSuuja$*i>H`i-%W+1(M7}sOb8~Z}f~fZDGNlA(IseT<6zF;!T7OgzQSkUst-j$!
zay$-6odr4xFD+%|u;AnCw5sju;hLWG>FJh!8+Pw}39PFhbY;KuobSo)6-Olvus77I
zI-^QKQ4v{820WWOD+!u!wz<M@z?Cj$OUc~t+#-%(RwX}fe;qJ{p8iriot+oaQdf83
zMQkLiw!wbvSxGuyRcmEar7`ngxpaHEI|25Y8#Atuk$ZZsjy0IN^Mj!Uyi4`Aqc!1V
zcciH{*@-T}ORv8pa0~m4_iSHOMp>Q8ij(Bx-Y<`rzeO@%K+W>!@7HR~b!~d`%&i-`
z_<2m;{>jodXWuG@wzwOJdU$`dT{o*cLb*D!v{|>fGo|`5)|#rusRjh59iIOE$C}Ib
z?AfLfkcgHZTD*U`!Xr7uz^DqtscbryRJ~+L2*;ka+<!$NV=(4J7g?;r0Ev<6zopXB
zQq}X50B`KleW#)X%~Zbe^M{}MkQ;rq7d!uvlWQ+^GS@^rtUOzx>3YB8S4l;YX|}ZR
zk<op&Pj&$1z^~a^2TMzS?+bfVH}iBqirYC;2(cXyv+w#-{B?hCj{ar;E=>G@BMMa9
z%V1=envlPkD6~-gRZ7Dx{e)4HRj-l<N%j^M|1?X)tM@0^kE<kG55Ap`{%tfAGBK)c
zw!+A6+Ku^-sN(=zW&(R=iT=l3BZK>bciG=4seFiuwgF3Q**P?(W#|@WA<Wd3IMdF7
z;zm+Mp&GY#-s}ho&d~mfWen|0ulIWNy%t1%?Mk;HE4w15L4NgNqbO@SG+1*vtJ6pP
zp0L*~^739T-2_VNzqL%`&7-1On>yPY^Y+)6j{3bq3Sw#|@r4C%x7E2jcp4eE;}f1~
za#dv9r{czq$YK&_Cf`dCSp_PTu^-%6mGU=p56GC6yOaQn0e|J+)XV4AK|p}jZmV=y
zocITm$;SzX)Z9FW>BRJUy%s03G0e(ZR~5DEu)+upb^`j8?P|SBG{iBgRoAf1S^aED
z5FF`zxjpq;_jb-*eddynaKu^Pkh-Ynr#|T<iP_&T9EI4AtP<jb&$Bxoq~dBr$7ua&
zj4-ucPF#HV%$(Yr%GP)xbnN;QM!&VF0T$|uLj$VGS{*4A{=e*=!Q)UxN-w~HRaA6#
zaq@b$FRh6B*klN4!tL8zgM+HZ#x80Zvq7%JdkC7$+|JzA*3TYecYh6Rmuo@4XdR7Z
z<m{>28=7--)~M>^8l_B4?~}p46B8e_?mgy_Aq_k4V~j2(&cr`!TvoBB)R{V$DL$rG
zFbn-*x%@*s4cJXfn-9F4`?DM?;FjlK#t^qXbgQ<mE_TVBb3NJf7U~AW9&a2XI)q)-
zl{vTK^c3dZV;Z3ClV~4!QB-^U{jtM;?iF#7O)LK_BHq`p_?Rcy&(CP>89|X8PBbcl
zrX<uWT+)C$Up>>{R8cGnG(LnK`yy;0Fo0*5%`&UnU%h?47?}stCW4=jJolHfLWv5{
zw6{brNAG5T(MTrmGTUgnQp9mOx&&TB0qxN2JWW-d`E%^ZPezyC|KND_VcI|811{@}
zahMC^T+Bd4!M)5KSJzdcZ)wKkIn!Ug6Cgi>$M=ACVRCgulUC%%<t=aBDP*-Cqxf>|
z^TzL*I|l$z^)j-Lz6L~vf{#;uO{#rNCyn8`|H7EUa*HS^P=*1$Uq1fSj(;H=$0v8J
zzA(LC{_$Ssk^DUbUXJ#?1^R$o(A{V}lThJN11|)`)q2c}Hn*PN^3wY?Sl$WJ24nqS
zfd9{;Z!~j-E8-47yUC}YW2HKzDxZXvjDfZrKLrP5s5{&L7!NaS_JdjEzq#-d%|lM8
za6GrJ4MqhhR^Wl<pgIH6NL)t|9xJuZjc)*Ao1)CYC`GK=d0?}fcmog-CAGbl{$M$~
zg8osNr{lG2*Or|mk#XYbDOd~|Npp-p7zPpYEt*otnT(c(JV(fgy;gpgS%Oz^IaO}o
zvH~1rzhg#JRaqHJW!8aD{_^C^*Y56J=0JGk`+rXJsTZVImzEqr=|t~>!T-*3Z#vuH
zi#Mgf5?_~;#7Q_fJEMcBg0uTRuitaSw^QiiKm3?8<H?NnyVcOxhzr(tNpX@Ts&xpu
zp!Hq&=>K5>io44m`IrF6ZSCy`GE_Rz*A2bBY1v<t8T}qk@4~J>Ucs@3&wLo1${w(&
z*G5BCRBN+6DMUb>X)l^o6HsUAR#*-a<>B7qH+^?0ExF8d=&Lki4=SwVB7WLRQzKa%
znRqi~vzMM8%>MrQ+18WT1Gsgd<&41RR+VCx1|t9V!E(|skF(9g`PWcG1Lj=)B)D*<
zaBZnG5X!ub?{^})2&JkwT_&JngPUSPizLH{H|KV=2yi{k^V4-lq$7#AYS1IOP`m`Z
zpUv?tmiG8@oak&Y&m51Cjv~)BV?E&YdFd5POt_tv%2@-G^XeY5Ud4yp4A1O;)A;r4
zNPoYq_dfLZi_)H6US1X!H||#4`xoIxO)c0sEHy;4cb`lA&#!ktzEGcd9u-yNAA1PF
zsU^k5@xoC9anXKBi?SEr86<V++Xl(6o=>2LlbANP07~kQ6JM3&<*laA@v|e2Q75iL
zx=<r?I7@N0mZL)I_{@4H$b%Us@w1K&9p7Hw5<f}uX1Y_}bH+OxRhoS7OBKQO+s*em
zoYzDz3eGns80e0?ZM_x4+rO-vXS88>(6J-qeRO}(JOAHaKwA#)Vj@gWiqs>sw717K
zS8PN$NMa9R)VuC_fnq3&qkp;i(pSN_Su$tgo@;6D7w3m=nVllLrzi07ao+6n{d+1k
zh=XMwar!8xk2m0m;Tf>7wY7C{V5`_PznMTwKoHP~M(?RckcE8kkHeeszvzy0M{tRV
zbXrAl5fTu{82?c?*i^%Ibjry+Q-k6zsvmU?5wFCP1O&?BjL(%&@9R?(oQdf;E!Qbb
zRzzJOd~iZfhpx-(gkJM~Cc%)s1O!EiY*l?k_7k7}h&CByk?%dH1E-h$5mXxCl~k|%
z!ubgZ-l*hHWlpLRy|dFvI?Lag)y4ZLrz|}ser^A54?2~3x)A#q_?>#yle-wCv!J)E
zu<vaJ{2<>$JE8koCGvYm>FSx&Wgbz{)5o;*J@?;MV0ibEWb{v>-~IRKA_3k`OT+K#
ziOyFL;1E~$GWsIMh$?T0y-{cezgc~a6gZ5hGKFQQ1&IMyL@R`#XEb}q`O3bV=UsG)
zz`+(7RrgwKkl<mP(tpABqB?|Gh!==vXq>b=>V}54fXXy~03#GWm&La2d)b?}KI@#Z
zY3+Mey`6Jow3b^VCHXR<KO@Trht#TSSW<5_Wd)rHJ;?lL1<_VHdc<+TGFgY&;-vlG
zv+QW6?`~=kh<Cm+NB8jRD63*)eZ6wh#h@g;X>^Nz_|qgCoWS_)z@1ylMjl0}rbkB(
zTCL&5fjiy%0#|rbm0S}S7l-wW`=zVb^z^#Uj65jNPB*}KIze#9^aX$dy%PJ=kk@k5
zRqwo)JAZ_XEbg>74noZ66d!G>0!~V5>F+PpPJgHIxGO<vT36LeO*FF5PH&pRy8Wc!
zh7BH2Sr5u5m}zlKXBu-InH;h567Aom_3bk6myaGh#=#GvZ%kz`D(gLjQbrXXL!k0q
z@6Lgu{qphC&ci0xu5mVpMhjtkUc$MGBKT*o`L&iTR4<zgAB{ad%fczE{ijX<m7AOG
zca`2gyM^KmbnXh|9~$K7sTeH(o394U`c&9@+Gl>b?9H2}65i43aOHdzA+;fcFX0>(
zyLgB)L#I>i6V_nSL}WWOqez}DSUXT@g!y<>==nSb?#CT=!B;ny7~ShI$-C+9u0Q5E
zbQ)n~Q560MM}DBIRyo0E{(cj<3LNiwAEHynK<IMSEqCj;AdjJbrx&(*eF(!tW`3I2
z;SV3iG3=7sQiDPzFpepK&0_OY^V`e%m^eV1U<ivaNYR^Paa(|Nfue1~6Z&8;K|mfy
zW@UoG-wwP@aq5SIb=YA@p9qIrOxRw&+>NEj$UZjsLUk8mHx!&FPoAu-tb`>$r)C7b
zcmV_Fi@)3dw&3lbepoFV-UZH97T-T;-lGvLsQ1?#DusSro-|G{+kK{|onP+S;zW3~
z8nsMrhFF&WXuM$c$)uKg@T+W5kfk-^K+h(GHJH|?yBjN<iIP5#qHoY0GWB^T;T<dL
z1sqOZzP@69Mc<P_<p^pD<x2)qDgioKv3X5??ATWL;*tVyAnp-7On5We1MJw`BAieG
z?SS*SZ{8!=0YqI@0FDJS$X$;~M@N0oB;55v5C8uAV{4Tz!*Abru*QTFpw8E0>yo)t
zUX%b+vO~K|g2V^hhS)1AiSHDarv4T<c@)SVdD!`iJVz&++$JEw(AwE~9#3AYITHSd
zpPr?U_?v?*z`o_d$oL!!6$Qu5(b@(T5g=>?!rCwP)gmw*e%84z)?Z<fpTiHUvW~^s
zev##S$a+^q3oEQu>R?3Tg=)8RUoFZ{AYDRs&#{AGmB3Ex15SE;O*q)HWfFQfafuY?
zW86JAH@DIGiG`wsz&O6(U@FxLCR>?@VR^@!N&2wmJ>9w%Jd6i>dJH<ggER~Z&*;R2
z=#^S|6;D>hLxvr#U0pDK&#B%LyEfg$m?3f2wk;A1M#Y&VAu0RR&9POo6Qai8En|d4
z5&r};V4or-mH0G#C8ijw0mEGI%@vhCD))7kz{f#@LFHv^5iERyx2b>P-4u8@eFLys
zcOVWVup7Y59jK|fiB=k4@wQ#x{f7_FdComO?_h2H8z|ZyQ9e`ZTFl~q-Id;Qvry&S
z(*vJ-t7Zx_GkuiID>Vn^KOLyH{?vo?RGn|28|Oq{l-?4({UJazS3j3o<<&0MY2Q6q
zWIcnK5#S|`aJRnKUpdti^#JH#omH)x?SxZuHp5jdo=c|mnuP^Z#ksRTjyv-X51%+n
zNB6ITH{?axg?;^+cvzTf^JEXd=R^8#Pu>WF^h(TPP-bRGLPCO5*IlwFU3=EQEsjTY
zc8_8uH#TtV=(Wahf`&MSd7$|TVkpHSsn0r`z@_br>!bS4&+eb1yPnGvS0=yu!Vss7
zdevZ-6uN!7GX?Cwtzf<KZWL`-_F?5oe|R}wxpHNCss_G@TPxq%;qv&ptjv%zQF!tI
zyLEWli&pkMnv&w$zqNRR7qvb@R-(@^eFIAxuPtl&smy00tNwi7sZo+Qe~S~L`BSQT
z)~rss=37%^qvG~u!%$@3<d_NTH6L26QaImb9vL*t+`0Ek;NAt!MM>|)`i9J~0T!PK
z*wVo1((PX)A3r}k8P7sOpxw`jrRv-xw>PE;I5}U+(}Ou==*IxG&`(ib9w1&CHZKm2
z?EKf|<w?G0^h4J@!pfd(YMwlvq{@^RExN`{;?38;vZPb@L{)11o#@(hRc0-htg7X@
zeUJk(+w``7vXGBCvO7C_$MAa5QFH6S_wUp6>xi$c-dsj??S%pVU1;i^3wv~RV_<Y)
zP=Ipn177_W%cWn=E<Ya$(y3la1+ax|9|jSdS-dZ~dh6yPS_i4Z-ya2UNrH(<>iovq
z+OHG11;0i|qo$2%GZvn(M|R>~si{cBk#x9>hnA82JjQal@U_s9L%vrW9Wx1>)7#o^
zh>N#~J9A#Uretnj{Zex)F3-x+()0~iS#*nl@NeE&y$Rzor>&2S*Wr!$eN=n+>wNPr
z61nFznlC;CUk}Ige?vg4S(-da39$6*(??&X*|w(vHNirQ2g^oU_Z9bvqemCI4bv|^
zlZd;;gyebX6(7vm!F@v~o0H(&<5`bWBKHMlxxz-Wty=o|nhYi+?QCtyDJX2L8=O=t
z9VZ_0|IfWsD=&}31i-k*x)%Lt6AP6UT~fJb6-*nD8UawosC3pd`<OwlL5aqb9u>~N
zD=W~!jevT9!!e^2$)iSRO3kaKcFl-xZ#>A)*N9@-VYto1UJnYA`8zk2=qo&B$6|w;
z0miv&a;noh+u3CkICE!*qhnA|P~aZ0xq4O3o4h}AQ*dR;E@0C+aijUL%ohr3YI<7Q
z*fY*f`<w;U)JQ?*LT%?cFV&W;naJ(nFfnsm*6H%|AzFDw8@~`{K0XY`9?-8e{lI`B
zIhj7zFy$E+9V{|wX`hZ3jBT@;Dm2_LEGyIaH{0IcZd^dwB4FQPadBzWJ2E^xN}hdL
z!Zj|MSxV}?her?g+KrcaFV$Z7M#fN6P@Fh<^09cCWD>da0hK#@_I%CH=g-d*b`ACM
z*rp=v@5%MQ;Z`(J%|%M;y6?kv=9|jf<nkZyw}0t=3cizdh4r`oh2UBBt&Yu!@M<W}
zK0ac3NlHQzGmw&;tnuT8EP?aMe|&)_HRYmI_U@ArV>M5nEIv-PB$pEsAOFK%;|cxo
zChm;I7Yv~kCr&uo+D77r=<062+A}OhB!@ya(l;>vRr_Mxc|JY~QBkdX>x=A{_qgos
z_rBubU}bO56Czu{LRgtk985r9b#7hw^Qs+zj9C59H&h@5GU>bjn}8rid-tOV2->*z
zGVlJ|mI_lx{3CiV_rczCW)2P}%F4=KUh;Z+ZjatRy<Pi|@*(W&^YZczk(Dz;2>yZY
z0wC$q$jH|}zY^x>@gc@RT|>jAp6nHS38vH`AtBPxFAWcWX=#ze@BQ#Z27moEjbKn+
z9V;nS({+cZF;btRjk|q{Ffx+zIYvcEX?gv6KCa+<$@ob*rkBwJDH%1s>n=a@M6)z|
zOnRhQSaeDic0cO65<V&eQWpGX*U2J%7peY({qcQ$CvU8<;*T%il_8!`1_2Of-&8)?
zvvaN-LPA2nJ3lry!a1Ak{CVSM)gtO5evqOL;@6o8?q!Z-4GD!QapFr+517{=9=7z&
zn@8c{?at2dng$*jD_VgoNmqP``YO4D2(2-gw^z~{f#G0QudQ;V|5!f@#-;?XXm)2j
zX=!Q5X^y5Z0S^ygIOH4`I<#p7p3;f_5@G)g?EWvNtjG#sms|l?7~_Pg#|otirMpwp
z4>Jn?`{iQight24T*m4P!8G8Y@5b;DTA&sg00^i^2cZeN_Oo^umNHiMU70nCV3<F9
zj@reQH~kpJE|sS+4JbsJ)fy~Gf#JHl@tyVh(}o;`h~pv#zyG4PwU=h}{gb*>d~5kJ
z$SlL}+;f$q(m=4(9Jp3wb=jq!o(h*UEKDT#-BCB+xErS<yEqRM6O)95$$n%Y!Lq8q
z%=tOoO|es|-@DhbwzW!$3jUqz&(ikv>h-y>HRXZ-!vZQ65GJ}?i9V<Ji@YXr&pCT*
zYuufAVb})IftJ-R1vETwr5H`N$`jzg^X=&sZ%`kUV#cWQPY-uC(vh5a&%<2`F6!O=
zht@K5GF3s0kBf(U1uHA7tLuG~Odvz*O6%i^8{~wb(972S=!2SNaiTe$_ZN8O3e}9q
zC#R;2@-Ch7hPdmQ>T`Us*EmMqis#N!X&u18@4|&~XTr7qYlMJaBqVrZd4CpK)a+E~
zwPJqqmo4%N+?EY{uVyc$3&u&|{`_gQc4Qiili3qViS_6(_!e=GyjvT~a2o!O62mPW
z)5R0y<SD~Na`tyX0lvNbzdxnV6f5`$XgVU*iY2U=Ov|JQ|0q`OY#+cNan~3%U6Bk0
z=ba$4Uy3LbwGRet{j09VP~6=2)ZkaN*?x;ZzwRt$R}=j|_TD_6%KhIP*1Qwho7AQ>
z$h1%*r6@8K7MX_-c3BjP3YkfXEs>Um%=0{DO6F3@qEd#0%#<-Q&+hlK_rCA@+~+>e
zIj`4qUe9y>IQ{eM_1m$obzR@<`~7_0)2A9q$65;;v2u2YXnWiM_y%b$9zyUb(jV|x
z5WOyzIgQHPMY)Obuck5HD93=ZYOm`!tanrI0{}wWU;=kHZ~cN&7{eh^<Y?#Hz1xy7
zMU}y{VgS~f5HeD-Zt}zZrJwZBIacN@Ai4-*^nymwRa)Vi>z_kD1|D$u$B$s(du+iT
zZG{a^cl0=M?1EB=5*O^>M9_Q}E(Qw(_vmQ|vIpy=><x=<DN;{?+p)nFqc}@LZ{*{1
zlSHC~hME&u@~^dUii)04?`=vCY4QMbGr*3DFm*dZYGqraPdRc%Uz~qV*t*4KNE`>2
zVYy4HkB=fO0HGrN=s`j>q;~Gy>AqSfz{T|%QL&NdD(XnoXVp6iwC7!R>&019%owp>
zS!y|YMFl0i$cYor_40y;PB(PKSeLUw<!rUd!3Go!>{3C30qBVmsE0&Ea+N}|Ao<xX
zwXz6M3+x4gjQFSB8bzPrZjcN}zB_O?0-rxWAytvwoYl^-eY^U&Mb^b4w_%;lN^<5u
zk*(b9Vn$R@7(i(f_^h@tY{M3RIh=+k<+lGqbI%~=7($_|kk^7#SsIV61Jc)|4ls3g
zCd;7IfeLgIUUWmTTC|@QjVXjtlecam15d^6cJe06;Cs+&<<{SK>=3>7WtWwe>7G3i
zsODXN_Ehx0e){yO^gXZVB_Vb<37_NT>*OD~^sA>)!XF|BE0;k|PL3<`+`8PT*N5hh
z0=vj8-HG7=i?gc@WzJ$P1Z3(>LJ5xTM~liu+d3E4G1J`<`+-WFg=gu6-B32H_sieH
zw?dBU|8QwmV5QvEo6C)Fkdjk$OLY1C3P`b;F{unvD6AqQ9c9K;24=y;bW+{>lg=}7
zKdRq?wt#z)e^3-|KuD>OQMN+d{&?Qw=~-W$)Q9jU-I<`Ttd!|b4h=0L-(VTN*;}4&
zRMz@EnyCyM1agC$wi%+i`v$V3<oR>>MVAIX(PXgA@3X>9(OhDbM2Pa-l(|brh+H8y
zW%U0ry`4LA$Nl>U!^S~*zXdbs`k=o<3VA)A!s4uZT}Ou%YDSV4=AV$xJV4)~ekbF~
z)vNo*s;<=Cr8K{3ZB27ubz|XiSp~;)^5jWEsQfdTzjpEc&H+b`xUb~Wv(}t{G7hhU
z@k91wQ<#egesgTyW#~qn7DU^PXOAA&^-rpx?sIKS*3CXlR2g4#><T_45y<HI)<2S>
zab+kE-NCh<*VYjcdnkK2165m32J8>Yc_4C8k++47W$)hKI5_Mu85Bss332gYer*k+
zjmB_bb~2K)DCS|uuWKN`3r(l+)sI*5%$8{*LouENTNvRgz<Iq<-cN$q*3c&vH*Usu
zxd`T;>r)V+H|zB-ciGJhzk|~}O;9o_b$AH}uXU#+W*Hx|&=M0CE_nJhKvHU9z+|4l
z6e>9=N<XfDK~E1e9TDOlAP{nWXbZ{AKw~#W^s1Q|e;azifa{*#-b(y@no0RC(G;4#
zbYW?7ow~ZZh6FA%iQ!#X!P5)Ez-1O{o3(sSYn&iwht<~?+3aqqO?@50cl=w8sZhZd
zwx$yMW?;p`b<?XMK`u-_3h#+T4RSU%*?PzXaYPLj);<X0?{7s2q_eYuIUL80^OGT`
zPoD<z0ly|R9`}O}g;zIwfja$^p|^qQQSMNw^UR*-F7rcg_swcD^E;rMX8Og!C^x|p
zLtREkuCZKy!y7#XKmL5z%XrKJ3fd*_C1GcgnN@|iIPr}A<Tnn-BKS1gvJ8C#0zS$K
zHSTl2_N<`5sx{w(JYL{3`Ay376Aus11ScTBk6@Quc~w^uks<&qaJk#E83ND6?X89f
zF6^gf^SlXB;*7|s@?l9vJ(aFAjfj=7)~Na((y(nh*S8Ob`p>SJ3kcNWwWw~eu88D{
zM9}wz!hvY_C?u1Y!Q6tr5s3*N7QHQbyQYju=07K$#cjSJ$#F|)Xed>eLoX3~OzoX;
z1M1AE0f4&qq^1M$NEj?OIA8rDeGdbezpV9}_C!Q(10p8Vp>5f`a=`i+VQbBe-m29V
zuY|o9a!Ee;;?&*CDD^>sYfF{E-C|_4y17y=@5ITIE90;FF2Cs+%Z9PU4LApI`01hP
zA5Vl$n(Tt34NGpH#<*Fi?<?lb@-ZVqIoNg@5L3X}zU(K7iEnz}szysOVTRbdsbPP!
z-}F@V4D_z(+32~q&~Ku<Ga_d}2W|%@JVdu1ny%1A`E6jZTXEZ1S+i0UcH?}_<l`bw
z-IjGilQ3Fp!<KTquum_)5ijt@{#WMAbiu#?3qB8fhR?V95DlgUu4y<atD&|^5K&T^
z3_ZFlB{^lV6)69XojWD1J2d9^>G(W4qmFF}wjX`(?T5<BEJxa%;p507-^H?X>3Pj&
zSjb#Pr0`|U*bIEkLF59!5yJ&I%N#NNAucmu#D28Zk8$_2W9AxT4XT|XeMJs8m(~SN
zOgnd!nohJYzGA|;+i;%#YP~`IE@ClRFqzAR@j|g}!K1oY{u~BM$00Eq!jjTx{{F_d
zOKSCN?+>Fi`9~`Cu^H#;LpXy%hNlK?000a$Bs=@D8)@_eo>y_bS*)$0sHb352GbCg
zGLi4TYIMwUr9w#oTK~^gRr(#j=bBHrsr5X%Mc?TDnA?{aUusLPYbx}+=3lxWOxj3W
z;oEq5x3*`?i6p7ei`p199ZXi+daWS|QyVhd3M{i<SG<~GU=wiwxLUlm{w(K;s?;)H
z#TcqGK=H(~<7G>g6i?M8D-l#?A3x4%rg^3guGZKlC9NinC*%zvP1Y4~EIg&)kd<L8
z2Yi(FtOA4-qyylCue29WqdJ%bqRPuA@~PB3baS=1hC!fxL1|gPsw%B3srH;892XWo
zE+!V(?zV?OPgfmPY-d?v+1!BypKA9D8aj}DCymU8DEE(y@ZC?kyNLsh2XCO_G3DIQ
zzKv|bTKn0~*$Z*+3Xx&<ZtUn=wOlTmO02&}jH(I4<*8(j0G;fve$2xB3Z3?J8<^`8
zmnt7=JS11foMPO*{qc~V%rAnR(h%#E)T5?))9GfwC#_I^8o><^bx5UJDz1_ZxcZ(K
z7lZI+@%|Lg+g|S4+*EKCtKxJKM1HkBr0E2g<R~qIZvfv_6O+Wf*;=XOx1(*d<Z?Cf
z*|EioCATMQg}hVVD5q{j#;a_Nt;Knbnya});?l{>W)({!@|<xCH3|LwWNSIYl4rVN
zdPEBOBPmeR_@YK`dhs7G=QK@7@0;iY{Y%%8DEYNXsfPfK74MoKYTBLKJwZQQ$Jtbg
zC6boiC%>;uK<H2MGHK<K8756XIdZA~b7pwqwU+#wy=LZ*MKNLKI@Mc*s8|7RvB0|X
zu(}DR_4Ms>ANg|g*rm;zHW?OiPXA!)&(s8fVXn&?_~-#;j2wBk9<HQXARm$AY;&3#
z5u}sm#t2`rBA_9lMpwMZuJ{lTBLzqir>^VrG~d<~VkPfnVgp^aH;I2f@5w+NFkA;#
zW(K%KKgW2?0;PrGbn+F`(S+)QZ_?!gv8@rO2gkdSUbCPyK=zC|cZ_?5v(2#~H%7}z
zO)&+m3!h%@^98LQZ~Y=C%nNoa(URi|R=A|b=!x=5o9W?>4<A&9rjPit3UEq;=2g;8
zcOsrXf0vkb@pk<qL9M7L348TOqalG@wPRHS)@T$%4NGQ}qn4EJ)0_6kN{Fb`$7pqM
zIh}Uw5$c!Fv*m9SuzVurE_p19uywwnwN;<J$umjfoED>DZiU1ru?Q`r!>O-_j_c98
zl5d%64f#5sT@cD8ot3KK_2Eg;NUV=LD*%AHhH^8oQ)%YZTi!_~HV$FV6+vl<l8ZoJ
z!bD7SPjPvH!Y5vSBF?X=&|`s?l|pFvoH5@!_mgF;V%0<Rne{&709tYi>if5kR#zZY
zL~#T6-K97^1eV%>YFCxwfR8Wa<x3$<-GfB(FpE+?<_!<zn@goNDD_#^C+MNB!Yk^G
zmlJ(%Urmrw#~G0{Wwu%Ts>l;JMS{#}ZCL}_cSlF<g}L7HrZh*z7YgDpp@l$b!f(I-
zu9XsC1Ft4!%GsO=k)%T}j|p85Sx*7qM80v#Kg&>z&ricWa3q=QB3DCg`ehlZpWf&7
zUmw-o2mM^&uR*rw;dDUr%YR8@$eSD>X7#Y*wuytoTx04{z_pkpATWKppiZlrJuGac
zLMHUo`Qp~iggr8pnp)Fq*AjLINANVU>m@esN*3B6ugAT}IUIQU7nHGwp?L%I2J$<t
z^c!&|ko)_uM8_ksDks!0$DZP1BnGLn2Pq$Op0Ng{H9wN~5;8dmsD8lU{k6T<`j?;c
z-(|65PY!424K-WO_4yd%Vwm4^+LZz&hsxUhQ`{yE6;Uy<@KcUGaAkn=nExPAR(yMT
zc0zt)Th!4j&qnOVQP8Ic+k=Eapm$^C&+%^KuNAA1pLn53R5WMDo$XUYy$~v9ow_m_
zIq~g%r07|No#gB}G?$Q3pC4^)I;v(%RAN$5+0-}Ozr4s~cL+lh$#zPO2pvoP1SL0F
zz(eVez|6q6zPnxms8by1lrH;Sxgm+MQGR)$W2igcr<(J!NiU}U%y)ack|N=;+{4Vw
zZwP(<-2C_Ge5-b?+&DLWrC_ak7uRLm+3{btZ+Aqs=|uUal(=$he(qE~qm)BepqTYu
zs#~g{%7YgRV%`DP6GXE><3NfkS`Wc&)%RiAD=Ujka)-wL!2<SiFH+M6INt#Azv9PI
zea6f39^5t%KlW4o$@>f8QAYcPl(k7HXi;BiwsBW4&-LabSp$pNpr-{*Du_nP)nEh_
z)Wl<pwr~dhg{Wiu?#h#)8VJ|90X#IJ3?vF{am3a7CQS27gEBrjgxHJup1`CvQ8iJL
z(7vD9&aH=8m<E>3R>4FH$p;10Xp2pZa%la~7f?1GCEvkWnjlBl$||eFOFv2ZnP*CT
zxKf4iq0<;>0qV@Hz4(xun`*)kcEng5JLs{83%$MNN4^#r)T`9r(`Nxejtkq=oZYEk
zURnb9-+kE`t;&J@U7>R2c~^wc85ns5ekgIA{J?hf8<C74O!7Eklj5MXMkr$TL?zF+
zmpK~~FQr=FddzvB6kK2_Mr|dMQOQR7Ds`je<ueahsGXks8Aua0j46G-{?@;Jq9>vJ
zM5?e+$?e{e7T;WCkSt{i3{@*}ZK_JJ%;MT}W^p_=TkBrELz5Ru$Ae>>p+@Aq>@gO?
z34s>X&wH!F#H_>oBivXgwnOh`Uw^w{BjG)H3gGF56t!4Vvg$K;?v<w(N<vh?%-`Ab
zwzBea*Na)5j0<A7N0=s>jHAGEr8-V}4Shi<6fz_ba{2t`LCnf4vuIjC3#i};#rHF=
zILbm}w32;FtY<*})W;$l1HDl51~WyuoPq*qQA(W5BC`zn)nWWtm>mlZ=1<(Qm3svf
z(X^UTdA0=!G^>VAq{~TwAyJ9cr_ou153ydH=Egr2cB+t@g0D5C>+YJTAI0JSrZ`p8
zJ?N6NvjjD``25FCk|D1~f%90IJ=D=A@1D#Zt-a{GE9gPAhjiFsk&uO2_<VvuM_IQ$
zQ}V09W~AhLb3&rbZWx<@Wy00Qr<XXkc)P3m<mcv6qQ1Y=yBH@Y?3g;O8*`3PXwc&I
zpE;00?LQ<SXjyWtB@9|UA;t1Pq`ya<mLRk|^4O@uU3>BQ4e5?ZNYK>ojJ&1kL*|2i
zu<@_TR(JM~kB`52(ZyiTI=gR>pWo==kJ2k$*QftNtVi^NS3fYW#FPGf^e8(rvS8$h
zPKidnkfvlcorqw#`vXX8ktInk6OP%@&!xb(wU8~KK9Ebeefq3MY`Bs!yK}&Mihi(i
z@W6fIm!)5Pglp0tHwCP4-$+{V4KN+dnoK=tcam_IYX2l*lBa~ab+j9-qmRnCQm<3e
z#4W0YLc7Rdzk!B+M5z<`XkgZ}{Mx(Zvcp%21{7vTZI-NTt1MEKE+#pVuHS!pttFQR
zt_B=c%vXDqu1wsul}m-oKvl{0u&eoqbom1B?(>PuO${-{?B;|cH9TDH^jq~YpObJt
zTE=<v28|&hU82xgqOTIcb2qm_Z2DCDMaghu`lwnOVn=u9+;0%o{YS9uGc*we9Xl{p
z{7;9OkkLjdmjOf`rFRaD?fVsoJC&il+zlR0qM5_Yh@)91Ydy>}__w9+0a!p{_|SE6
z`=A)Yy?)|gRdlU_k~TuzPQ@`4;z{@3szcmIL57&j{#d3rI=BX;j|b-!7Sal2txXNb
zn*DYcqIXE^$~4QMU5G<EHsWNg1x&bgnNsg0@dgxs9c=gxoR9KP*V=}k8EdmwJLkGM
znxGQd3W2-$sZ*D0gCjw4`ug}}UTldsZ`fQ_wVLGf@#9mpx1Ggy_?>St?4BYxnD$J{
zZKTlTt<~1x-1XXNTF_|Zw(kAyw;adGX#9d>!orWEu(Xk&NVyv1zvtuuZ6uXDf1?H(
zNC(HttbO%<;MWM!njCl>osf}W!p%sWnwZJzK-%Ner{fT)fXj1oZpKa!k(xRPp##6p
zJMP1Wtp@9xRHNq5?Uc)U2O|jOOR-%@miHlp6+w-J80EpfzUMc($56bfGk-9QIC{lL
zt{lJvl#kNP-+WlEBp8m?y#0RZt$!vrJv3$0kED)s>vInpCn5Lhkol2x^#f~<@D}6;
zplUMpkF`9#6kg&?K>ydy=W_*KTH1(UZ+SgO{vxYN&wWA{pN|X<sy~g<{Ns;+yuA4Q
z&a%ZWj5k0o2Lu;^$r`&aqD89>_G_w%3ODdU-&TFcS1A^_824?^&?9p{8+PveR-cFD
zbVN@e%z9<X<`LJc#aUP2%=7&rvI*M>d42E0uhdZ3G_3RU^0aj^>V6ntDbRPzPjUBI
zNy7Y|XO3S6hb+}!m$<&PtkM4Yg4GtfQWYa3*2suGpR?LCItRYbigI$sk*GaGnuM(|
z@AkpA;`1%&t`Q2IXV={`jVrYGqBp{W|2gZP<R8QwXGH`8Et12azzffHplHgo5Pt2i
zol<A`1L~pEl|05sug49OVmmW<eo)VsnI4Hi+o2XP4gJ+^mSj5Xf`Ngn9pCB3lWa%6
zEYv5aYtV@vnG^d3AYhG(I7{Fv$H}XgFLV0&m}yxH9$=N4e$1<yRpmDv8WxsfGF?Xp
z_cEf<b)18<Y)3_Mv<}9{#U&Vu#amIVe3*HZg7^_x(tqd975d!0;6lzZ^bkVrc=zpZ
zBhQ{>m7#MuNWY^RP;Tb?aQlIk?Gh(h12{XD7gu)<aOJgEjA^C>XvVQ6z5&=L^9M?m
zz5^Tl*qaIp3pL*^px!u7$W!{H8rhG0w&EGQiom|Vw6^XL9OxS!-o?h2_-xA-?^Dh*
z7ulPVA$E3NT{aRKLp{whbAZzl3L!Do)$kmK$wDS;v6lYF1E;gW{v6zTOISDuSEL(_
znC$;`r1z;#Axwxnwx}e8td2%udY0*zty_V~AJRw&AQj;l_V)66^ZGUI^{=5AbDvI&
zgsox-jnxFlx5iY!F@_m<Lqwe%C}lR^S3EYzb1f=frs&~)On4ogbfNmg2Vhd?b7Mea
z;U)OqqjAEx{FH?*S*5?i3rEG4O=TA<+`{h)R-HAyb4_|>oEj}PZz&*!eDtN0=y^5o
z6#ADI_V)C-T4j`fSG-3zz7YE4iS58giyvRPi-SKzwq;$&0S2W<9@xXNZECDjv#i_~
zu+QC1krm6gHPUs?mzAX}bz99(NcE+<m{3E6tedk&?cA#{50Xny80AS&kZH;7LqIlo
z{OYygFhzM;e(4qb2S-&^ADO*p=ij>J&+^$0iTb7|!hwlfntRSdJ{mgUzR}V$y`!uI
zW|AdHRH`4+=RTAskrLKlB}YeB<mKI)peJQtka5`dmmzg1>)1TO-5^nHURKcgQ(t=S
z4`s`)>k~NeN?ZEV?~DW-$Iv^|N(Nrpefx|hBrM^~A3S6dNvhexcE;-`;e%wOVLf?(
zxj@M%K&rLa@|9ebFZo4q{+86imM<50mroP9Ki1dFG~e@I`pm%S#~i8pXa1U+kyWOP
zF|h7w*jC1sgPj2c=AKNhF^iV51Hx*vR=RDeEbGtQ-VZk+yB2enMA(3N+)j?=61@SX
z<EQDVN9j96KOESY``h&XV$bC(H?c)rG~8^>;wV*HqTkUr6dv*GFLY;a2PDzQ;v28;
z<HPb%zqO-X-Nu3kFONSaI&Ryh+hZT4&MW87Yp&K&ck`w&5JC%fWi2l3a@LR~U-DnH
zV(e41U>6k;dEo1t9VaI*k8#iY&J%g${F6R!Hn|+vsHrxk%0c`0JHP+B-a5*OJvK`r
zrPh<U<k<EbG;7Y12XcNr>0fHsf1v-zmoHZ#!&}})9jLj-C5y9gKUmMQfpWguSu^hL
z8guaD-Q5!hiT0svy$<K-0}h>)f6KR3{fM{`Whs#E>g9<s)3YZv;7+}E|I9C>Z3|~B
z<#w3{S9!LnD+F<ioI3TcdZ3ftcRfjIh*7KW^zL1|1jdYxZ5gt-x4<fMe_}r_k{!Fj
zVP=jKY3{mg(<e0M9~?3+h>zpsJlJcyV}IMn3ay9grK|VPux{~%FQEO`Upz(>%Egps
zG;8k^i}H0Qo2<rjHC}4;@wxBNYx_yXwSj#_{=C<MD#2<4T|g%O`87FRF0E{lw316@
z3+MF@Z6$8kYO`aNS%0A8#PVVipOdw|VWvTIoK((we0$NgZ@=$E8kd%SV^_$v{gCnV
znD1AXa~GkJde|$j$-j4d&|z=6d~~y2knDZsKd+sW8XIh8U<ulYmyM3J4;DxXjSAu6
z5PCbp<B9#bMG0^3GjD?E`5E@vnV=M{6icmNJgck7<%WUVH{izI#f`IE_$l<s-csa1
zZY)W2pZc$K9lwAq0u;1+_vHP3sofKuXSN3n+}-2D?lIDvIA%cSVEGOpOked)&|Im?
z@Ns^wSb=l;9D2jYds4R7MHF?_Ct4D}K?vdkn<zO59cRz*a54$py=O-3gatY41>jm7
z1)1Ad$6q}J^-8ebb^CX^lUr%R_v-B!V1bdPTEJxBlL0@Zk?Z%$`%y`8abI1uu2;p1
zQwk6xvLhT@D?i`*<LD(mo9a0`zA)Ve%sZLHPyK?{=9b-|w9>?ms59t_cC)gYB7B!t
z?&uAUv~0uK!>6BLO%1$a=P{0?A$$yGAH(%H53~+$7s>W1vbI^B5mZ?wp-L5ih-Z-2
z@fD@bS>JO|v+Wh`$pi5Q^$^&^ERo~;yIKI!cr&ePc>yY>IQ61l0(sF8E1O<<KQi$r
z{v!w$@&}wm9q1D>4QMGyI(t$33<K1(t~i7?JyjWbglKSgZax0t!*&GX97c)qZgDt!
z5<y9r1LY0TKX^%48=X?ED}guMyL*>MWl4P@LpNI|*LA2m?8}!6j?T>immGc2-!vsE
zNff9bm;T1DS6?9i$bYCi0|9P;AywBVX4=`F=4$T%0*&s*(OEZSSDJO_j}IUGaVJV|
zk0z}p(w^@h^xWEDT4h}x`XyP_9+)JsS2%~L)zv8vSZnb&eWO0x%sWVawVAkEeTP(;
zV<KODr}P9&Wg)vV&EE4v7^}-GaieSC<vsa(_hcdKL<oh6UNG5))LLA#I1Q6gZ7;le
z#Wda`%}-KNvbYLDf)qdO>k6WakmP<2idBvHGkO*Pc4{3TIDRMyq;B=;f^)uH>FI-i
z+~~(HaXUiXcj1YMX&T-mx>9!PR@2&I#T}FZ*57`MJ&r;-2i>zt6+_6zTjO2A?XM@6
zb?PyDILfC!hKpNKaCzZPzU%pauz+cou`(l=urH+f*Z<DJ!LoB^Y_=N&D)o1wOuxy?
zyPbv?>D}l1yDXYc;fA7$C8&R&?Oa7}w4c`c^UBH?Y0h7ypmSz@o5YxHaFLActIH-P
zqz=@?O8J3*4EAf^e0jH@d4E$5NS%;ALeW5W#SCx@qAAO3B#$Ldi8zeQGgCE&G<ijg
zDB__1Iri?2Jr4U|+@)8=8#Ygc^f?ZwxvT=KG|ahd*pM_Wwd(TXm3O(cw2($?$MffN
z)%z8%4SakAXgJ?~Ogi*hV@fRZG3c(XEiI3ds^5Y{HFiBFS3d|T2KRlpg~3H*_vIqF
z6Z5W#mYZy8q*1Zm(fPAVg%-XE^6kDeaE_V7OPZS?ZN5iz;2yNaBc1MYRCSS)r9?n%
zKUs>CnTM2>nRgwii#Ta%VL^r`5l@qwo!goHnN@qR#&_z6IhfIn-R7q;4ILhZf#&S&
zva&MISHsQO!#p=`5+)#$OntPSqg4Qp?}b1>PY~A@f-vS?5k>IH<W{Rc{`eK{=cWUx
z58)1$xlRc_X%mbd1hJtOJ`0aUOaghPK}SM<&=%uSxbX!gm~W7qhv(eTt=!i`O=aLb
zpa9+9kgfy-EX2Ynk=UQu!5#Yk>sRH8SSurJc97lRg@dgT%y=B-LzdBU;d4$^OdU%o
z9vIS}LT(k|`dwmfu-^Ll%4lMAYM`lNW*ww`$;saA(%kAH0^fNETFjAx>LO9EyLLPi
zGs-h#M770jz@N_Ftp~7OVLY%vWHBT)1J0i}aEou)x?Lo6iK6@@i}hpXQ(Nxr<krkq
zjm)r+g*Yl_-}RW+TNaPz>TKUWZz?^pt*LC^tq01Iq<jGJATr!wS47elLe!CqI`mCv
zq4NIfY#a=TRq)UtW(PBZ$G+s;TY3B*Z-J6W4v{q*IicL6r&`z`!`QiF#|fl!!q{5d
zAY%G;m*9mP-#@f7bFZ|oJ7~S%-rk-j8LDQ`&?Cn|TjyRgj=+H*9c4nX3SJ<uK@RGq
zUR3<4#;?N6M47uMGh0)KHic_c{<3zti(^waSowrpxvdJ1_Rgb`Q*q@#Mg@`v$~eQa
zd4>jQ=|@mLK@Jf)Le)f<t5MTn=!LX5mtx-}Y+tDxAo*2S|3tVhQ@o%YDX1V8^G$ep
zmvmf6P>?pUZ5Xi0Pvu?jEIwxxn>Y9ioA4+d$WaVjVBR*pi>v=LHeGOe4JSNSZZ+ht
zPyOirsgZx6$Yxi6Z24Sn8qF)|Po{dPktg7>OE~fc{sGNo6{S+Vu%2%FkrIt-H$(0u
zR5nly^ZKYuWd`x7Yt+0){{%aOLR^$)7-DXnnI)S<Q@AL6@G+OIN|^v8`rg<Le$rNx
zw)?Q%SeSAoFc5Dldtu+sy;A2kzga+)JBQ)-kH+OLE6cM|wIQnqOa-{h>2+VeiXVBv
zYU#awS&m<6VYv^4GE4d^Y3bGNF!K!gOE+;ygb9R1=H)efjNQkp&w{RLB0xMS;lzAT
zd#Pi5f@ONe4(^qbpT2V67YCJYvxt05<`SDeqQ0EzV6Ln2V;dvmd2?r3*;iB1#J$5E
zWwMJihY~+xcp}-lf+I`n_FMmoM7I-{U+<?nU}I-xV++k<RS3~YRBBAq)3$g>{6L|4
zKO~Z%f_Ux2@>AXq;`aJCZ_b8PYGdmPV$TQ<50{e<y&x06^5w~s0mKjhE<Q8l>2o;g
zN&Q2p(%uINgou~k>`j8Yn2MeAelZ)jFalK6T(Ma7X<&)S&`*<!uC4%8$-!p4xu@V|
z?)hOf1o99qHA3epw*n(0uT#lc#Wq6;WFB>C;-5;v8ARJh4?qz8XtSpY=e{j}kA7tl
ze@}J=eK1!qT%}e`=a8V`d2g(Tsg`n4)c%LYpmFdq=MR@d4XcO&nju$BP1*J=t#bOI
z@b`=W_bl+U=_xOclE?i#CFXe3{R;{bo#J|x7Actl=Nx0Xd{P4wUpEz`T>F-H#Y03e
z+bcts*cN`Z3jHG76gm@V))gHy6U;E_?trhRG09O6+cqg9VVD6!MI04nWn?r4UuN2F
zou5vvJ$<9AI_mTm${y~?Y>}ZsJp{CO0xK3!%z)Rz$11W6N?`7lAn}yfx>^T;OngdI
z+STspC2}+8@|)7qQ-v6IlBQjo|L#J}nRV@~mh?MqgCC%Tc{_c@*4}=&X_&(f{iobt
zH@A;!L#CS^n=y)&X<1%;<lx+l>FJRBy65HOkb5pPXRVIavtm$Ol&}ecrAuf|a!XVb
z(BhPLx=FO)m_Nsujp|IvB<fTVByQ6Us(FdGv<t1y+Ywn<0^OFKh*XubGfDu|6ZRAA
zcFhYrO>q%|6|SlaDeET^xfP>ujxP+vOAeLhra>$QDP0(n)~g$~bLbBmOK3$?rZrkN
zswb<wPgK%Xe2y{cmxf#c*&@5d7fuj@+Wv}CN#>hDJDxw^Vev8ML%w-M&GF)*Ah>9=
zJv^jy+rm?1E<DQ!zcxr~i*FM}bknneW0+!SXkn&d$->fnE!Uu;N}xk(f?x~l$LKTb
zlS!qJC_sz!g5(@vdfJtJe=W=wK`KtuLvek4n^PNA8@N%-K^Y)nH`LYNj~VPVZ%#RU
zjYwI=tV{@$$BbQm7UktlBKidm?t?751a?+z>;9ZMC-5gSWwX4!y~RsBUqC~+aZ}mv
zQY+3|yw`(3;Se2YK+sl_NH4G&oQua1J*um#%iY~74aF3sk@BFnD4yvL#ZR7`9_v(H
zM;@P?3|Tg)5eR5kpU^!wqp)f7=8DU@bRt!2;Y6)pzg{d?F&#M<=@Q@}HhgGt2VBV(
zSBE|&m~$m=KX_1fem$UiYl!i+cANTgMRB`IbL~)EYN*&O511{1hu}Y`%Hu~qPyP^o
zHJ9PqU8nb~?eqy9$=A-ZTYK`g*EG*1*q=}?F7r|7SF3!wa(!=KlUk=zZj^}5WgC5~
z^^fc62dXbnol|Fj-MRCyKz!-W?3I_Fs7v&*p`m)ABBl`E^?uXQzkPAwk+`e)%AfC{
z6}P#06F6JZ(oniOuWA(eVzN{yRNAm<pjr<IW<!EIp{Wu=R}`_id3h2@^Ti+7A#Eoi
z@_~Tz9LI67LOw(B-R&o#YNNAeq3#_d-Xm5LbQO1NJ~*S;5VEl%p+(4CDR+`bVEVkm
zjx3F_qkiUU^Rt(usGd0?SvK|BO{~`3Jc=1=M%OplYN+0`V9GwkXqF{dB<$K>6UF??
zv}P!gy}wW+LE*RQR5^J97hpd{`<@IKT}Qz{D=;o69>p|9x4G^ucpp0Ru4F^>-UYld
zBrYy19gG|xz6%_PEfzFf*tT|(s&LJVT7EvW&ZtCLf;8n9$e+36PvfxmbsXE-Hg&Au
z152Q-%L5OF>d)Q}%Ly8Z+>EqC<V>sS#C2Z$g^upzrhhchYZ&mEtxS(j*nBG`t583%
zva_QFy2^dss-v_QnBCwJBc?UH_s*R20zkU+ipdY(Cys%KMrWoX{;;`sv?zrEzcc10
z-ph`hUTX;1kvW2RTf?l2GxZMRU7zl4d307zPAf(2nQ1K#ZaeCY(>CAkmX(b@KFDht
zhABLlYJ&^_L!Omy;XaVf2<hjKBbxj6kFU$)vDQA!Z;+36-NYm^xM)iE+iRbraO0a_
zx@1)0c1S3DPNJTMPJMYgx-_qZVOStD5mQ}RY-a!yu)rfQT`g^GgI)+9`w7(<I51OR
zu#A6qQD70^jq4vZbOo6N!<aq#yRM+WA=u53!(;9+40O|<;=N(QxJo5!*JC<GKNu)X
zm0f|N<!j0JgKVno2$(>XrxSB#<$$c@hd|!uD!(@Fht#LQjdhI~A0HtYF2g6y$nJn5
z{|^Kd0Txd(J-i$QsW60n6EV{J08v`>R&n5^4xt?ZUY?#cg3zasNpoE<UqPS%OLeh!
zdeT^FgP!{ZGvlXSXq_r^*Mo{aeDV1yPEL`-huwBBFGn+SEaY5^x%&<(bUc&}+P${1
z5$Nt#uloA66lD!)RmwTS^J7*Qv(*lK2d$QG+1vw_&(LesGEq@`HGWLaWF25VOV}N@
zT&p$YrojLU-b0*40J{)PfT&yT2hKu~O75mTJw4EHa`~taIUKWaP&`37r&rv#046&j
z7%v#NIYlG(-8CyK7$D-LmQd2`T`qGfK%8;9?rd&OPLchXN2|@>B`u3UHAAUCuJ=XT
zi{@t48vCKAua8o1S(rqMA8V>YS*dvc5I;ZBt0|`vhFX4paYbEKh;yArz7VEU8;7H$
zm|O-gE^rCZ(0z^%AwpwljPBl(eQn=)UVAslA}*FB(UOgoz`SAkNDiL^PKCBK*N|C~
zm9+OSHsg48WSf!Sb^g>(iu|=fwUT^%3fH&NJ6$q0<(@7Kxs9qL@^v+Cz@QjhGyLW}
zN(fvH){kS@vUxMr;)1^Zldv%Vy{DDwp9n=7>bz)aF-NyFy&HAX4$^VFm21y}Td6oo
z($&b~j)+TlW&b|+h(jB24tyz@jnUeaSToyfyx3<>%v1Wq_u)e=CdQzw4^d??RkbDd
z`veV(#ShtV=h~00^SMv%!8}@M71aqp6bo}jh%(fh@55-@9pw@fb6s6(c01dj1_sLB
zxG|1pM)BNp!v04+{0OY1b^M-d_c-Pc>Ez%;yH}ScFM=U>^5o0j)8dLIVA_|KqWpJ@
zHGTYuF94`Gi}3#NrFXUIAT>2<(mm+0K*&Iiqg&$xDv3ippV)h`_%>k!X3IQco0P?X
z&;pB~+8~>dDyw#JLH+#8BVYD`d8glX`|!mRE0sq;)9B}tnov_qE~GqKxl!SE8opRr
zvk=x4y}Sp0e#clVGyd4`VYE(^`j44Bw?S#f`#vVg{)>Z3zx+0;SzsG{gKxL6Ipodl
zxFYT-jYpo5nK@;w>gWR=qyE-R<i;b*o%e0IACDzggvr?q0{LfWW8*2Ndnj5{Cnvzd
z#%7A%()NN(j4~lo;N#@bzC9d&-y_)`j~xxn$Jn_QYDau3!+-FL42CK3w)_%yE&lL2
z9(MR9)R1uF{kN6mU(j!Kew>K>_!sP*WmsL~KUe_m8T{L>6#n$}v5|&{r(rnc>Sv{C
z+7S|jy7zpe8$_z+?&Dn^<h`)|BiG1csNo`JY(RlUTV8Y>xAj<mfkZ>_5o)ec%t~?G
z1Z8@fUf#?LkLV#WxS2&Q8s%D1Uc@JOCp4h6PLw>Kso#N~Qk(YkUDvN<ke<1(wCsb9
ze|vgR8T24&s*q=*v&v4;gbyD8Mo9LU32G0E+AKqN#k!f985;RXw?AH_NM>%jxf2FT
zfLHcSZ-X`#Cy%z;1#G3*A}cj2HMIqy2)2ii(2=f}mlPQpnZ?b=cXhlg7CNVt3!iKd
z!UDg9T|5lDv|+jMkNa~h8p5}pW$2Zx9LhiaqVm3BvE8s6`0oT?c(klB?j<sU9*P{p
zQU@Q}?WVJS4EwIs>QXK4*!m68+=~I~A|7NF9-b<E69^4M7p5Rm0Md4?Da}+%E58*k
ztR|ecI5D8yR6))h*b!vtc0PIXI~(^angij@8&kx=;Fh(Zl+9|}%EF@(wIqvgfea&?
z$#0psi4Z{y2<cjop|6DRvF>Y8-f-j3m8pih?R!q7&@Ssm8z-bq$3#Wny-3kQAi(W`
zk17*UeY6BIBy#ENL-2LlZb;Pb?kjJmF^u#^h*PFPVQ?}=Ai1tCGok3wEXw_!p;zJP
z;2>!5Olv1}5`_>CrspZl1h&XOTKNW#eoX`NuwY|z1wsfIu<_6=hS8AuK~%J1$OtCI
zD7D(!*l5zOr|bG-bJoi0YQE`<F9!zZD%=13?O<X;l7Bs8dOS&_z$N51#ERf{(ODKT
zAl_pPN>b>`E38IRHLswf#W?!}$?IRAtIPBf^lGqy!D5iUSzSp<NhsTWLpQiOk}1ZG
zPg8j}^g$HMz%99MrD9tEeEjh+<s&T{!jw8xtx6O=bDRx--=c=~-H>27&${VuhAL73
z)0*$udfN_p)kXO1<DR#GubJrdBsA1+;G^`nVnmR=@eRRpNRz@~<S&TX`!d&Qk&IaG
zC0MlmRQ|BANDHrTY#gc3lj*y1_%wX$<KukUotdvIkRs^MHknybfdMK^0>&M^iG^#7
z^_@Lj4cpnSV`co&brcG;sHmuk#`l@|VEd5zH>d95v5vT4H`Z|-X8nfbRfrg27O+`X
zhgX2oWxp^L%CBA8H;A5zg<U}5p`d!)YuI9%s0n{KEKHf(eL-T>g9nh9P$r^VC+2dD
zfeKHT1WAJPokR#;O)u_ARFsiM#2$&`u42WsdvfQRK>82axxwTOO%0RGj8~p`B9&YT
z-2$Z2&%oF&!~@@j!zV}j-sVvhBnUm&E7E5pCRT`*P@MwcO9?W$PIyRe4Sc+W9YgC%
zPF@~j0Gbe8(2nJtP@ZE_A)uGr2qW-x2|x}*Scb2>o0|q4fs7WP2M-WBbtCLEEA47-
z-Bm76d5CfbZMO!yK>QR_mvT1zH;?u%U#H2!3Xs^JWib2Jd!O6aSXtiGMeR&|(+?3X
zu&0O&P1bpX)WkRjy`fEKO*=;0R?9v@fM_E*PkI5z#CXq}ZG)EpKv}HQl&?(C+5z6~
zovyJTxue55dsSj=ie`(#vc2>x8(S(Vs=wBKpXk*aL{}m^yy=7FVM@ktd-h=T;#G6=
z&=kYZyrQC_ExTLZLZt6D@_k@nzoJNsBxa8zzjLIk3!d?WuF;<F-^WHqVoL7<gLT~Y
zuZ|a5AGAVDo(ef-M{9(9RfPlAt+gV3^s%008MV$rrq{1WUMn%bOOmGw4D|J-B)mh1
z+|r^)>yhsis^~<@(i8@C)!+U-6XL&ja{ND^77zY&etddiefMjhz>$$#NIazFH-Puq
zP*pQ5a{2W*6n9XOSqy)EkL5wE6@*f9^5;**)+iz46;x&ddZ@21L#YmK7vVp4*ncR^
zhxhNtbjKo0NTe2Dr`4f!+%_9<=UNMT1EWY%%ePbMQSK|c=ZczDVy|<Zpx#Lsh1wF<
z8g=65-$h6R@Jb<~2I28ZrH7%^M-TxFWcL`NPu#o(gdUp?404%kyS^UJ(G9T)(y8ls
zURU@OSM&Z<)n|TFA*%BWv?=L4?|{VI9_#2`9D56iuS`^HOAA2{gV@W+uMv9{UwRHX
z=?{H<wKrTsQ;Q=GIU|SHPSacsvnW}<`_fbo505&`yS&-;LYlj~R9f*~eTrlw)pmoB
zsi~<pmq%b=JhOYkRmthpvNBir`4?v0-G>^@5y*#zfat??t7Nz6)xNH-k#BHmrqAqe
zdZv;1m1NrCTA1ytl!N92NkOt4b^r%eB8wH`OPpJTDwg<hOW}qR`T5FQ5*_Sg4>+}I
zNC1;4rbWfUDZ1G&kp=iMGhDDA!5zfHP4p)u9mfCo_D+vg!0AUz9u7=|xI4mY4VT_9
z4!__W;PMVjUsNNNf;%urmh<d`orgyzI-JM0Y}%w~5`XS|pSHNecmORha2aiMhE8Tx
ztgLsF-f@JtB%PNCO+<L1g#F5V{U{h+e4#(DQSxU8K23f)XuNi}$bsCuf*zCjm<qJ`
zy45nb3{_rYuf3PL?U!EyHa@@fs!COI{`o}&N*p%CJ+=hqhjYFKnO%B6Fo)AL7iJM-
zV_K3Cg4p7&)a`|)V4!K(uwYB*3gYT;CpeCD1!B`zjb1T9iUQ8ObLaFfT&O;SEfJ*N
zmsr_k!2V48R?foR1e4PO;3%Cdv(v7~h?^Q8Khko>z@V+Gs|&ExI}B5-4tNPk_Z~@?
zK5SQwNH8B<!f+X+{H1cq9UB}4vj|@iL=NwefKoBXx$>nIn*Z6S7xb=T9v0`pcv2+z
z+#pYiz~j2g%8Q0Mh?`B^{6^~;uvu#$O~SSV0Vp&SO$*#tXKA1Uor20vBQ3K^PetZn
z+wUxC1a;~u@X%0tB07cAosyCQqQKEfN95SC>(Dr(Qi7I>Pf;;4*Svv;IiQh>yT$VR
z@9-G8;q_vYT8crdTHg^Py#YxsP{3fu4%~e0cxP~oC@x~xN6>}K?2n3whzMr0M-igt
z6DR>uFjF-No3Jcp3MB!BLNqF%9w!GAUQI~${?qtKg;u=W$X~t5ec(#X6b$(mFCk8S
zWx=7nllQ>M!-sVYQ#L9YMkDF)&HMM)=O;{aU*oIm#h*Jwc<?zThbIwiBn%q+^QK1I
z-oAJd15qRoPtsb2$i<s(B@z311J0jRQYdtd>E>z(0og&&Z~%rI?IxZA&Ja``+22+Z
zw@{j6d}0D}0OzGIbzi?`AX6A!M?Bm>%sE{0itNh8f5J(JpmqEf#S<k$qN07YAb|!{
zMciTK2osoS`1DDARud54<Aqpp9AmKnLj8Uh&ecpl3?i}Kn3}+K3FuE2W*}LtP_6@@
z`~fMZX3JqV4B1Lo)-15FQ+$S~sf%f}2Y7~vJoce|f@w8Vi@&n7vk!P7q48p@Od{4~
zICS}({6?kES11-S%o?H%$7pp7vcG0#Zo}A-=PiF9)Bu;EoPxsB`}d1}q!tz3r&THE
zi`OeIst(~($qnTT7FrnD2|S3V0#AMLV3)boN(E~GyUEq7Pc~v@4I{M}lIyzK^a)fw
zWo5(LchAtGp6KYPRPvb=qlUAm{nU1??@#TMosNqqni&+`GR1>Nqlk2(K<?k}dwQ1I
z24ndv{G>fM?A5pI>>`g17bY}lWn7>QJ1pMlF!DthX;XM1`Pq;*9fd4B>y}){Z|{s@
z2K&RzEK5p<=;D)v;hK=9po)H;byg<^ng=hh)aB23rO8t69uN!O{P8su6$CIVg)&=4
z+9h(4sj~;Pwlw-eXi*pvARe0!EkT2w^@1n{lAxeG<v5{*DAYuif#F56k|m1!x`u{y
zWZl2=cJB_1!KtFiiz$!|NIjBT8t+9Ek;C**0WHirQR#}!Btu8E+G)FSc+aslAj*uE
z-T;Seqq=F$b66JjQ*H2noO2JxMFAWs+BkxZA3&Bm&y!=8X8gVZS}h5RM+saXB2LQQ
z>c#%g#mnm~DoDF<lG%N=vMXKHk6%qsM(x<l&5{;xD<a1DU}bqR2wquC3$(KOAt}j(
zKp>51qg%b$xl3)nM<e0Qs_mI8wipa|3$PV2H-3J@<8|7?^lrDGZ^qFwEKM~$BA(O6
zC^q8lS6;5_r4EYJVDfRhc*H<{@9Du@?MZCf{HyLI=lm9kX)fR=F}JG;k#bGj>JnbR
zc!9&U1!{$k4m-=HiS5{AnXeA9o~2!KnCbp*X-C7x-m^!`PNhsjLyqx-&d!SnKAX-5
z{()w1xjrr$hBVuBi7R8;o?c!6<W7o<b8)clK<>Or;E2zkn3pp@ncO>Zgn1M9mZasx
zk33R;XY5xS@Ik+G>eQ(tN9I^d)&~gx&rFF4Uh!#`BF)Oby73Kc<LIR$1xrWeI76NH
zRg(I#!x=WzS|;zUn%8ig=u;Q*F-7sz(%PCNs#{zi6F^C)UH+Lgqt2I}h~q)vNU)vx
zT6Z0AIKpr<?LYplZvDTs*Z-dsNq=c;|MjOo49c+Wda-U^FJ0%*+F=;*o^<K{4fw^7
z_)Y#RjUClI&$bQSo?BVu{nZ<OWBUgS*pp*7Y{sUhbf4|p@S+2DUx2D8M>LJ3&z!lF
z(D3%r^4j_Fu@p?LmM#OhusaDae>><Uu+{q^EpBFSJ?u({3WWW*Dq-+5u8&#37*;#H
z;cyRXhV~D9GJy@AO>{tWdJvTW*SXt>X!Sz!HeoQ|c2EP`>RRW2rcESIhR<BBCpbaU
zk?-fpr%A1nxB6}vnmDE3k9IvifMp4q7V5sw#_ppyq(-650RPROr{J{bv{QaoFaqFd
z7<<YqBruTO6d)S{!a-U%5U;`Twb(9iAwXdUk<`_)n{E9p3XY6&5YOWc&x5oM28M}=
zGz=y!Zpm{8>_t|u9|Z@GReczt$OeT!fQLS=qNTuwYHlV53!+iZKj#;wuyV>_TrE|@
z3VW24;{*wrYJdX;SukhtJEHrIuzUNlA8Y?wGZa1GfRe_jtOIs%9mLWAZ?7qZiJLO>
zKaJu+>ZhHiT&AjZ*J}4Y0w^ab8=1J&dYIVSJCUFS5izd3FO{q&L&+(wxug%M7LoYZ
zd*8aRcD>x-ID{6X`y+UNMZV+zJ35fmxZDbG0P34!g~yyCGi}!L$ja_Qv!1g2aPRVY
z)Dm2Zn0b2c>{%!b<DvVJS$_#+dPHPoLLurkzOAX*N+DKYaM(}WxTCd$TeL<HV`@cU
zi2vWJ48!L)a{ehZs&hmp_sFEK`0Y6f9gCtt;b-LM+W_%Rh~cHFhC`CEljsOR(q5wG
zvNHb>Elaf9f?lq1sK}48(n%HEDQujOZ?03j+>so;okE4UMn6-38ZWOsqSWD6$=yG1
zj@h~0-3L&T`vxV8gzBGde4Jq4^}@|31U)1{J&xk}0;44{thWn%DpKxB&-#87IS==*
zH{+sAB<8woL%<g;11<{nlGWwQX|&aH#y@C&_JDH#j+YEy13rHEV1)$B&D;0z*;P&t
zi^1oPQM#u=nFn0k$-z+uV>{xohIl^jQ`x3yZ;>Mm-3ri>>1kKNSBT00)PmBtT>L!R
z5xWNHv}uwc^rK~{rhr+7<fs1qiJ@SkcW7DO5kZYBplAgjw>LwzCU^Ic2wTaf`v_M`
ztp$B}voR%mWofbwkxn>96`cQp6QZ-M{2s0p&TC9*ZsEEzB!!Rtcz*InN!jdJ=l6bX
zM;JS?K|@nV`?P8w5wTzQQrKghbba6}#KB5!DtLa1bS8>_D{G~#q1HDXDv3%Z$c0vG
z2C~j6g|;d|oHsPn=DUBVtC)(b0&5Nix)u|r$1Xg{D%quzqITf;akMsNLk+HrE1&$F
z&_H7tvD>m;70f?QXmM_I$Hm0#U)z#yCA~ZC{WNI@ok9MbSdilB8#NRvlt*gKe6I>D
zlc!&Nf|#S98u-1<`Ym!AaJZpyNJmFxf9qD-g`7AnyVn)q_ro#i7x93Ig*lJFc^C!K
zF1F+;v)PB*zYmilNsHv1TJC*RfE9ZfURV8{L!*WUX7dQC#}f2=_z-6Gyw=01n6hgI
zSOALcfJEb>TW4#?pFe+ID-!#ZL!E;@=@0#kBfstwzEoKuc1um^u0{M0t7&t%GZzp{
zPs1BfB7+D8i8hD@N8B5zjzbM$wY2aB<V~UeD1uaoEXp@}o~!VfrT8B&&M1;6@-Z<|
zL-!iYgZSBoTse?1co~STP~)Y`ee84#Pkg2%ee3@?S1(}ra4`?<`311BDO9TG-qB~J
zZD<M7gx#ArOJbW=R(=QA4tgpGrUU(*P_BOZByImWnqN@x9bl=(sm^U4@Qk*6`N9>(
z!;M~&d0Ufd>TKNw81y}r?K0%hVA4?3TPOZGVinpiba-@kcYAoe%>Kf9=iy%gsSrYk
zRLq+%9gO~EAF1nok0t}@1udINWR*Xjzd%1_FCi_M(fIzgD@bwBVDInidy?M{ZTV^{
zrYMk)(|Y!)DRM5t)s~|qr&s$!*l^D~ItuJq`aVP&tZjS|LO`B>7ry-5iD`l1>-8Q+
zWG*)2Wqs?n8;$}AbmGXHf?+)PZtP!ZYlt9&CsD=st~l-^@|ii-9${(IbDp)o{I8g$
z{~U<o-#UH&gZPSRM(IwJu>sKlF)%s?e_CWeZ<e8Yu<$5rG+^Wh4LM%}0_k!+GES57
z(Q8a-%Aoc;NQ${V%AoTL>L}E-2=NQjN&+@UHiu(0iNyOC6u+hsq-#;#xw#T(8eyyX
z_zRDF_|+6;NMUZ6=jYWXCNv<`1R^7hiJS(?n=JYstJE|M;4`7c=NcSXqiaWfwOj6y
zUul!h4>1fSOS9>$NF*K^g_RYkxE)0Q*aB#JHo80S0`7aLtu|u$pvuq)j3ujFx<tz@
zw`$2XMU%*~sS?C-*`$i~u8_;vLO~bgw*Jn}u3zqQpO!1gv)JuTKp;2f(C*x|OU&}K
zHQ-0!2>2vfT@^@abik2=c0f}Z9(UFdKG0n|cP53qw&o9FQv>i${X%=|{OX(j&*S>j
zc}%yD07wk#^w!9iF_OsI4wRdS<x*_<APpu|$;QN&wuV-=Z~aGKzI=(K8LQ73gTR6O
z_esS*Q!*QFEm(x8504A6n9C^lGoBgf>tn;agn`#+TrFxbisgolP3_tORXX?Z_ZDE>
zXvKC28Ohx3L=8e(KWLoW@3}RQUCat$j4-r)hRLYHabj_d_u=kYL)hndVBuMsx1oCC
zOKLOML}9qx$6Qli1kQdfbxgnBHbe7D$p}yWm9(O8cIvO76<ylR-)~Tpmi|yB;&=C(
z>h0PjE)J@!;`4XPPQISZIj|9+p8tvc6z_Znf?{jabICUph5(C0nah)^97XKdeR4v{
zE*O#x<S4-rdk|rsn9W=Ix;nf3!M>(gS!YErJm<&V0C5!WkE4jI&m-SBA9m@Lq^>hY
zUe>@lL)y>DDN}O~NzUP-gcXHmlxX-Or!nQLwbcyxQ@p(UB%tHOGGb5~1iqcXsxh%U
zasA*w(I~HIP(io)+N*z!ptL^LDJ#aQqszl#OVe$i8$_8C%FepjHUc@JIGu6<bQI;}
z<U|YY>3KZ{K`PfE$Tx-SYLU5M*^7(txSs$w0#l&0|6-xly@CQe-<>~W)h7~Q1jPzL
z!j&7Y%6uyWL*x5?g!t3?dyI(-XP`L*?_S1H({vjnJ86R+HsBXM^!E?G3jNG#)_(q1
zP=o_GS{Q%D#Kp+JwSb5iQu5lSOcDrnuTF7er(7aH1y9*IPuTQos>A!nD=)tZ%;`17
zIYoYpwvXEfH9!dYMs-TxVMJ)z5fz<^i?|LGg>T>}L0Yv2|FyPferV3~SHat0=5`wx
zmV5VluSC0sUDYej;<}Qy0cy?(%}Cwo)+nVqh>N*Y&+#5Pw%i#8-j^1(L>F+#^w#|&
z>g<h-0&E3Nc1zkMU}q^_`G5Xdjnb58o&_BsmT%C5h#d<6YWU+-B2J`AnIMM@G0BTa
zON4TLzCpF2sS1@0_96_vej_3{DrD${K9W@Q)}KRH)d{dc&{h7^h}Kqc{{DdjZ+NB(
zVbeRB?(&QeGdIbpKwSq@j~do?V3JZO+b>LeP6QO0kE6JtH3Fv`ke*qXl>>+kLn2^Y
zzkniq{U&+_cF{QmP+$O=uC;SY@8BSzWdws-SOqVr*)#6Ob3qLZyq=ezf2dYSzRY$L
zSbp$IM@?%)2NU4Xh2#+#@rF3&p-}^`HH~C;40#*-@dLBEb3qwEqG%i>;7l}~C>g7I
zv~SfFm|pN<!xdPcot>Tk+90Ceogz(P+hi^i5n!a>>V^k{2IaH$HF%_ve2Zfn`x@fu
zL_%W>OSbQGU!sb2x<p>RO<=}Ix98Z6ie=AWl<g!kqnI8&z&jOuF~mz-&8%+ad|W%m
zZ{e<&yRWX`_9}d!%+Lgu*~Y7oP6l**17hPi!3Ah{<^Se+|7%|kX5c({Fi4q`wG!qv
zMINoOBR?OQ9~lLq9|j<ATKuqicW-Z?gnd-PmCZ?<;^M7!b#=(*`=o*NP+Df{-Ppr6
zX?@y=O-wxg<UM9uOGrrYWuKXmuXaY%+`n$9X%p~Pb|nAyFOU1l0Ck_cLx;G5NJnK!
zFqU%?Sd%QB5SPy#iR_NZhzRntTA>$Is<3&9`TD=^YYv#3cb4h&Yp1r6`nS&8Ykvzk
zh@3er+<!kO@xR0Y{{Qm)|1bLEqd#h)$oiE|QBGRx|5p&>KUhZn7rl-Dee3?skkkKu
zdH;*ThX4J>{oBdB|GjAcd(qPUYoz_3SEh<q-;V2y|NN;<m#}3`%51%Li?<7X%)0V&
zRf=-ufp}U;{-3nItiw^mLnpFH$Yc#5c+u9=E!&CSbIX=3O8YYm3eBKW#Uw1uKNV}=
z2#-C`Qkvlb5r0Ts>HTyN#I_e2SbpouH@><$*&SEmnX?^uTU<ranH$co*mtC>3>7>f
z)O&5&ca7#C2M-h892_W)KRF%XZ09CEhk#!>V$M(exVX4e&+F)m7wI=`JQXfsujsqe
z&mAhUenuE$D*?}^8&}LAWn!w0W6uPy;U#X%wJPt<$l=5Mf<r4l1If)MMyGTx$5S2(
ziwfrw{)i~_RE(|J%(IiY)AvuE!>2?`zgu_hi<5iH&t`Hhr7uT={=1LB@D9shuMtk|
zmrPPFm|?8rb^Th#=;(ELP^NiLxGgEe$$=T{%zO5T+~{%^dB2;%6KPGG85fX4;hd@*
zZ*a-bcgOLdcL>tPW63Q@*~0ru$XbkWftumqDl5Ue;h-kBY|mv*lMVaMoi5)|YM)kQ
za5V646fwAHu6q21-3EL4M2k;fT#n!5IY+FLd&8${^!rzr%g+Y_)H9iHn(i?s3o<e=
zAkj*DbY<BaBEFE|xU<`as~~xVN3epHm57FgTgt@bD7*Gi*_9=slXIHx_qEB^SKjL%
zu^ph}4*dHr3G^)dc=CNV!@}i{tJ7&${1wTfHKUwN4V6aSA<wG3HiZSHWRpDN3mNxq
zVz<rO6J9%^Ei}xjSWlJwK$T3&$a`6C>GiVPi+sdbJVa|1!51TA`#wIuX?QSx_5LT#
z<PVC9Pvv|rBl7j?eNe4X$z_xHF~J9Sg`~L_BdS-_oSrQ0S|2_|IIXmbgeh7$`0>5M
z*-@LP6|L)&rv#TPY%e=Im()qElBNbOK`9|=JMg@f@68Knz{IXykf$CXXWf9v$<MFp
zOU^;cKQ}%8dCJrA+P3%Y27H_K#uM9Ls5u3%m=cKJeE!tgeo-t%Q{?lDGgRBPPpH+<
zVBWhIS_Algpc=n;vJepzDXQ>bg9e5<Py?S~*bTpp-UZUP`RKKL^{ZO=gTYQ@!?W#D
zmo%Pg@E5%NGkme{=jG-L+_DK*;FgLbMQvkZZ087im&rI37?tR*M<hbl@H^aFBZ!j_
z*|T%!ZHVhR&(ia6-4#9$IG0`2p}qfQKtKR;*^*rsSa?62a^IVh@U-&VH?sx#7iRQG
zCjb`q?P7%+UZfdXfK>Ty$Ydaq+X*~KMVASgRUlS0vLc*|X|lm*F0uAE2@%0Q@zF+N
z0#Q9D-N+m6t?aS<rZ2x&^3}uZyWLG12Es|n3>8niTf&$w%PvRqp5^me6;gS!<Hn=s
zIc@nDu5$-|ofK1;*;CQEA{<d5bo0}Ay!g$1PQ30iT|WfQnLOjGdqru8zs#_@>XJ2o
z`BBI5Ddlc%3Rxd?FQ%O`L$<tow?Qgd9#ZMVWq20AzhVl9j#2jH_w2a^Nhti}^m&5q
zdm+(7Je3xJ;^t?Sf8FC+n7nr#UNXET6Mp<X*U^#I0{fYfH=vL&TZH+i+rtpyyt?vg
zkkJ$Qd3jHdsG975==k%?#}9<W9P;K#x4A;hi#~ox=lh^FV_))umhnJp=e^_ZR^6Wn
zedE@O5|3AU$4nkOF3D0{j#DXHxEZ6C7gkwKPFKB=*WCI*@o4ww$#a^w34ZNCP1MM4
zzGbYF1A~@*)zW~g&CJX;uW}RvUu1LSiv05N<GA;}Dn7k$3)A7uM9t_VEc+qDLDTE<
z5ICeK;1Tv#xu*Utjlc5@QKM=ivcsRxBQ6H+v!RYM_$h8<^gF3B?@Aq>=t-xk*Lrz7
ziLC08D-icUe$WUbR)XvF5F_~jkgtkMuXNm3@4&qYK2R$OgY>E?gbFC~&6gK4p|t@x
z3WV=gpMpz_<J?Dk=+Y694`tGE!lHsM1TC_y)?c5y;$}ALh#u!plu%Z1R3qLko=g6`
zH88UNg#D)_*}5ko77-&~=2nin=)UU125DaL%9DK)Hw%x2{Rh^<nR{Q@v#534%gOy&
zUWgCatap>s#7W_e>Wt*`;+=|%f)?y9k!vT|$KWkYF2vv^<JKcbk0SD|9FT;MkB{Ed
zuGy570VK=s<nQC6j#F9Oxw}7DlV{U(reSaS@w4{|7h}yxR1_;o3&ME}1PBR6hJdKK
zM#Ysn6@ZJd^}A|p#@ffUBX`9}*hxk);U}bTaMZB9qod=~Cxrg^6I}|%Q<PIlf9}|D
z5E>Il?qAP!5R=3-Lx#LQ&j;xq{7rX#-jbF`oxEL7f&yRAs|0Vd4&U$LZT#sUWLzRK
zw=hDYuuM*qdv|YuI<~E=3Yc<*+&yv+*`KTtl|9zWBsl=hc>mB4fJ#54u{UQLDEUbJ
z58mD~EbDc97j+sSND5La-Q6fim(m?7AYIZOf`BwggMf6WG=hX8Al;30Nl15|@iNys
zXP@i8KkjS$X|2he^2YBO&lvZ(!=tzUttJoQlXs_|#VEj5Ma1_ra9?TI<cVN+r(9nf
zm-y=3MKAIe)hd_8MCwbfUO4NJMl>`t(+G~y?DS5XuOm6A7^Do9lEF<zt|=#y?EY2q
zC7!1^VI?c=En&}(4wqycw-S4%zF|TNF@3w5x9rs=Kj_sn4Up(CJ^nlvOeN+!Rf{CI
z+nFD~NcR8tK!Fu|AS`n(UJNt$)9UC5GB7Z_@L5wv_CJS4Vn`SK;T^t@j7X3hrV|2;
zOcn-zJLR*p>I%a*ZxkxcvbfB-Yrn;nm6gfVQX8Q}hjg6H&9FFza@k$H^2_2jnLK_-
zWe#7REM$sXOZuZftnxe@KSLdmxT#z3$`!K_dVS$rM3hZKmZrIu(QROz{EG#Q6s9NZ
z<H3FEvdaQ0psu7z0Z5?&P-*PRrL-;l^1%D1^jo-0FU95!eUPS4Lje|tGauzT0k;5L
z%Te7QzL2MJA6wm(IkaVu2l=69+0W-%u&wez7Km3>=;r-=O;EKk9m*{R|6LG@OgC;J
z$RW_8Nd40{Jlrxq-VSzmXNQfji0n<S2aD`m7s}{3@QWfp(ZGh15}g?0W@fJ9KYRy0
zht>FQj?6X~N`QiV#<Ni!Skhn}zccfCq&N9aK9>YamOp0W0RN4Q&BqbsX|VTf2hXu+
zDMy05sG~68P}bU!@lhaD6GE@R#i#Dfk_S#Ru!#iCM{e5LfgOlz8@?0aAIM9E#tWjO
z&fs^#-ibZtO!R9_jJ<Umgm5fE$l~x9omc4#`>W**=eyrP8V+1Cxu&@k&rR4G#^>dk
zf?65gOzJc}0OL}CZ(o7nOi3V8$a!sOd`NAmkCK^Msa<O4;$cFjKxm;Sbat5oRDy<2
z4gy2bV{!?oq+eXM=J^r0R1WLEjzVbV^qMuO*0mZv3d91_rB0IsJt4D{s$*Rbi!i>@
zik)<FcW=+h(NRI$YXdvFad{V?=6^6}0O%w9R`&#f^L6}|FZB^^u<vGw;T07X)wE9s
zngT08d|AjR%thba(xQ<Kxfq#rJWO&`NV~ga7Vc--CVKVh-|Gq*<>~kvIdEGSpIc0j
zm*!UM$0eqYD%AlN>RGww(5YC}Q~G#=3)75zas8wX932W^NDme$)$qS7BNpI!;yPKP
z)q-oc0y-ao^KC>x6g8jP&AG8sL7C5=RC8XhwQVAeQ>1D;(rQs+5kIv(uRn6lVh{bY
z6{UVY`^OrC3@QO<M>FNgyav%=YF}eqz1X*kOyJ8(;7ft9Tj`44>T|W&(1LW{?Iv{^
zxHqD^l%L4|?xyjRI}995*i1<OB6k{>mC1Pswf!EdD;qraOfNYhRS&pY5MN*i4woLq
z#p19x13^}nASmXMfmQ)gqUwax6{h|}Z?hD@PM=@C_xM$NFIcR*I(z|b^6lHVhjJCO
zAWTonU3{)Rfh*Dd9SJxGG)l)+fdov}RF;Ty8)%Ly+7O%qX#^IaV63XHHlM1^+pHJ{
zn!14Fh5?8e5hpN;rn&;wV$g6+^`;<8RRWC*Pl|f(x(Jf;vD2wMUHg$Y7EVJaOR6fI
zC^6GUp}!=&s(H#|Q=Ds%Tqai<M@-i%Qoi<ad!T%OYdKs`d}kr-EFnJr-QhTLrMWt6
zR!_j93>JjE;HObl#SNPDk(6B!JA!@s>OfW!?l=g1A+U$u4z^hygV}$9u&Hw2EYP@D
z8&bjLfa@?;?{)>A9RtU|ND?8C?x36JCpd4ofmyeTTBZH!eU_rB7pgA(=?^05B|n}Q
zYL+9x?}+rJM_D1kqYby}OT~l&0KSuQ4u();C-amcJWTS*le)D~s)K7E!uK0(-<z9$
z7ik`66-mA3{g^9L@Kpox9$CxP*u&yWl?uduLj!E1X|3<Fsto-lldSS*39~At_c8v>
zb)dw2K@W-xt${aS%9SZcyTs+dPFSh`Yi6td=%eewDD=lt7YfvNHgp?Hst7aQH3PWp
zGOg9iGR;f%n9WF|L%{pYGqdz|4{VMYzJS^<=e`*1JV`4JosN`%$XZen@<mP>qfjNU
zE-9&qQCzFIqEkZ?UDFF;9~$p33Q?`V#Oi=}_qQ5v{sdAjZ!)134LJE3&}VYfn)bDg
zyf{^7e?|CfY}Wc`sB!38bV#>hylIVsnNK9r<G=HnSDZcIITR;&)yR?{23GpJuzAP?
z86_}T@7#-h_3D-MO_lqbeB^m=&yQEvq7jBdD8sr_vUG+*_1tfvX9H<%6&R?N8BP)L
z6vxrXGcP@WmM@}m;KBXjgBNALkIfsJTUuc02MjAP5<WbvDlU$9Y;?QUD2Bg_kI5xD
zm^Eli8>ha*5RYrkQ(?!>%HFM^Zo?K)>V=s>tP|vFEoJ7T8G)p#8r-VwZt(T=L)y2D
z`2-g36xq*#ib&srf)tbMSihb$Zx3V~Pv}n!rnZ6Fk(KrN5hv@mI5b^r+X2`<9#<D(
z@cf(gr<dZ+WEO+8OB6zpAb~k5>L<hp#8`s$OQY>lEqE;C)ZNrfNlnGC&51l!;_cXn
zjusxt^I4ziGDQ$2DzRf;59n<plr@C-)?u}t<nyhYpYX$C#%QVZ(PTs3q7tky>1sLU
zdcAnb@;Qnv@^{dRGR&dRTqpYk#R7Z&2!CnylOirSHXp8gMKQu?G2YTae~A}yvP(xL
zg$s)*Qz+7uVlOOYC0;ybhNLVYlheELyE&fj{F(`RU}s~;K&LF#{{^(KaCfbbS}}p1
zb#tEi)BwC|rJ<sbT_D^fr==EEpVz^Ht=@S@DxN(H7UP#-lZ1?Z$~sO5^4?5V6DtxD
z6X;f8)5Y}v4vccUiKe9!y9%}#?N-UY`uz78zQk8M9V~TTZSU`!OjHQ(Er%L)eWEes
zxpyxZZm~b3Gn7=IYj#}fIPgLC90SS^m9$zYiJ&aGPMSy$n1jny8G~xncImh0rAu*T
zr7A>I#W54s#D)pL#0W-`pvam4YgsV~32w{R@=hft<eQsRVUM1IU=ZxpN}=OZXU9Au
z``~CpA~MVL{T*b@Zgx-mV_7k@JM6Y9Y_Zba+C6;UStLeIJ|7j~svJJV7l)b|Dr=-2
zLPJR@c7dBIplNL#P?#JTh;nr8Mfra51)V%kVJz|>`>1qAYVlr|EC}Rvi%sJhvrgv<
zW~*?Z{QsXqTl#4A5o;@F1~?ar{~x+zY>a%T?*=&IQAJs|(IS4||1E+^$hH2djT>5?
z=;}CN@I)s4yEv<J0jvks!f;N(UB=3s8d5;?^xhg7LFAL6K{V6H5zfQCy=%h2EPBK-
zK4h&C95;1z42+Dl4h>O$i|J<%ersxAprWDi^~;x(q@>WdTMuWH7Qm00_C0ke4@|bR
zp-~~YxVVo92{luNwDlLN&u>TsdMXh|`&U*jfo+HqZe?YqM|pgBa0lWeapoBMH%n}{
z?!Z(b<!#~HvbSH~UMBJj#QqB{bq9ooqNBM-fS5V`McG{0$u2pq6~^`X{QeLES3o?>
zz#uI<jC9cM*SXvoyp0t6;kr@2Vf8*UH6Y+F<WPwJG}v1bclPlLpOm})rMD>WfQKIJ
z!D)%86Iobpg83!<Axf7ZJvphG)+G-$*mGd<-KAEzewenA>WZ9FdT(6IY;T0ufwuBs
z{U|vrs}iIyKvba}*9H#a^XCDPIM*L@s@C2L3kmQ3Iw+VA9)jB{t3g}tpFe*p_N_O@
z@}OJI<~)RR+;~y-{6_&H*IFV7K_I9r6Nvo?TIcb0T4W3`;cG#J65U#5(yx@Bw`sGt
z%ya?8pcE$Oxj%nE6$S$pIG%1Xj6b~oFcOUP_3a?>VrmfRglA{Sv~6<GNbZaqr+|3#
zGET=MHV5>F6%`dHTi7WbkfxexkPH%?k3<I!Qu^=Qi9t8A4AiN$jOP(er}}Y>nq`iE
zYp1?lL0pv@5FrtPGE{C5{sy0uNrJy5VIH^#sY|~D*Zx&@Ln)Fc)?)AI@1(%I@FK0Z
zwY39cJL1%-Od*33@<)N9J_@E(VBl$^r49vlqQ>qBZhfeQppdEz4XyO<ng#wKne5Fu
zkP0lWg4z$vh`wIl236-fQ*fpG63=OB3-sdVr-YxlEu?^Y0sm|~L((Y^8Nwa1fF#Lb
zbPmdsWk^fw*as_zsmk?UkRDR5{enL~GwK$FM1LCOo6E_`K{RkZ7$76~lj{)_jVfh4
z*I#R21&nvFE#I0B6|7)kW|q5|CMGsDhA_nbu?^86>wRg%kR<^G7`jj>$bkU?1ibrE
zKnLEKxw5iHgJgHWemG5LFP7qbiV6z>GR-B83L&|gf`q!v`(q&4B@;#R+-WHR1GiN{
zNaIu9nggH@+K2|R1}LE*3nYOHDl{M<+R@YV3RJuGkhh^(ZUmlF#>d+cD3V!@>hqqR
z<{%D>&V|b>6(A;H!alW{J})k&^0;~@o{mCk0R5KK<5(qKXsx0*LQ$`q+@4h1B~;0<
zWO}8{J^*7VUq0dETWd{v=HdwL69f!Ug`FPM10DfAO93t#xTw9auTOerFb&U9XEd-_
z5SI^_DNr?V4(%6wX$6rYZ5tX;bL(vuCO|NXiqEW+rzB2w0bPP(nZXN`SgCX7_aZ<X
z8PysCcfcNgx5IERFyjIa#f7|}EF{`Lb3c9#T&?>?zajJveJUD&7~n=I<|$=S%N%PD
z%)&>hQ2crvrg18*`3loPU>G|dZ~sH(_V2j0UROsim&je9^=%pIimsL$)P9wldyDNw
z0uI(~G+x_~#R3AQ*EJhMh=Af;ufEZv_B2t52j|PGf}}wK0OUxcAP=X~Vv<{N0k|Gu
z3;YUhA;QGd4d|!CAz~Y!X)WEeB4;yIAzp}GSE29T1tHkFReN3uu33Z93RF8!4LdN`
z22pT2ASuoTsBkZC&2_{Sw1%Ep4rYhKH>y^~bKL?}Fk4MOlas?xn*Zj!V+Po_!(Wiq
zMLq&^M?;}xB%}stX0-hP4BjX5849E#AIVcLmrXP}<v#<{hBl%MiFZt@PaK?qAg?4Y
zV>k~gWZ=uGJ_cS$L$kva?G%^vJ9qbujSWCB_KhDswf*|cUY?2#*ejbr5g~l|i-rz3
zG7dsB@aV#zl=0Ng2namV?T7yw0R*tz2jNG7^_=&qx_87Z9MK(6;Nim`Z0s6n`#|>e
zT#Rvf4b(M)1GJ?IK|yQH2u}!pH{l}G>H4!b;4F>G{=&duQT;my1egDd1;8mjAOY}-
z)YN*sj4Cbd2heOT!0smRs4w%y0w63Oi7)=bf9;2M^4g=kRuPc+2K&_k$k)r3zfugf
zhDpcsbV!htR7j8~zpJZ@a-%&O^xPmynS-kHkTaL%FMJ7?D=8Q3AX*3nS33x6{08|p
z@a;uQ5^d@1X8&8dqao(2NV`5wvs@x@0#Z_{t>=Q+^gY7glBShP#T@T-)H+xQT1}UM
z84{=iz*o-SH8BV(0d(lwoh)|18f*GV!E0}lMH&U1o($t&r~60_!pxUw-{Bm0_QLxF
zB$)Jom|nfO4t%2HIgI~~mD+*+9%iF{!zL)Ia3T-;GbGu&yW%;bKbXhH(k*D`Dnx*;
zdMIC2xse2fE)N)DF^M?E$_#&a-^oJLNE5j;&Q${PguXrntE~x8kx@`m8d%<Rh=qHC
zmyeHOJjN^2;!Yb{*&fA{CyeXUieP0pGSZH_#L@L%3yR&jFzAIaF~P^zqow$ULCC+R
z^q@9}2LEz%x?;fxtxoglk}~5zy>PMjTOffyBk+HtiXGuFxoYHjN9Q$ug)z=(qni4p
zd${t$5E2zS!Xki5DjE`0EZ53kH@J^?cgqF}rfg?}VC)w1Wu8W<UV9{<CRgbYNG2>S
z40Gz~pmcG0S(#KGPy94^+8wDhpco&U=ewhV)pTNU*fk+I7mM7k%^2b<6)veKCMW3;
z@?0gn2)=49Y9qLB-dC{l@JLU9R61g#d1Qnx`>p|=q~tGfYkzkzOq+)e3Ce$gqLnRh
z0irdt(PFTd+C!X@={n7H$W-*VEHua$GgSx_^x>?W$?zb;eR_0{UZ*hP>Gc5B)uqzT
zZnjcJ>gM(k(Zx-S6l+Zmu~23p;(ox~`xw~aP#iDz2jwB`sc^&%>{vFJma<F;ys+Xa
z*xA|F&3t&TeoepoE^f1Ib;C1@u|D|y`@8f38aGPg#?o80^?A(nBER9vZbo)$1qB8k
zHSRaR4q*#y)mUg5b5q|y7v9iXeT=6Od*=$1uXdcVgt26Q<!r7zWqdr|$;iprKKY`%
z&PV1`axxvn<pczD<iVu?!uf=rHh9{C{EF}n*v)1ujR6%L9#@nHWX934Dpd-)rbbUe
zi9Jp>HZTQq^G5uqM0Ft5GquE;VV(Osy0MhqT8K3b0<B*kwbFB6B@2TiC8Lc@AUv~p
z#2&aW5KOQqPn^d}(p&|iuP%=!foBROzTsFJ0`)+8F^#X|PEC&-NChDehMjl>0BV$n
zhIWHJ*lpFe>3V;tH>O5L%bU{%%>h5==4g6T!YZn&AjbZophxCmw2cjl;8opn%GKxK
zIRL?mU!OFB%Z9V7>s@mAlOJZ?Wo2ZPud=MZYA9LxXj(wv15wupc*W#rK!?8XsdN`!
zs||Ewz<b>KfFkdCx=O=Rw|x$jT#qx0`sA#x#3SuM)4l+B3~cuQD4GIVMyKBzf~TU0
zjg3zuOT=Nfyx7)e6749T#LMHdJ4VPs4Y`-~6;f6b63bs2EeQnNSqDk6v9T53QHhh<
z+3o#)?Q8OV`*4RW;1|jB1CC3s4^Xb)0?gqIL7ijxQdeQO!puL2a7U<FN#5Hrr5>t&
z|C#@+#$|7sgnf~2XsO|3xe>HHCL@J^vSvKax;r}o?PCVV44O~?N`IH={`9>Ual8S6
z8l&J9^4I9-@1!Tt2aQvb!0{!Y5J0*UFzm?8$$|7YcW`J>8Wmb&U+y_OBH^^!<gl4<
z22S4>tylK={ZJ=7_xt@n!HKJqPoZI@u4_~DC1;_ebcV{L0hw5n+w?ELmw}5cJm8R@
z;#bBpy$dAp5<k!)damXDNdIT=$f^{qC1aT`u&$bZ%C{};-osCiic(JC+M_RJp^nLa
z)17bt$`o`AO9sTVm3!GVR}mVjs-%=(ROIk;LxNbcZG8M`=tI8YH@<zJQqGj+$xt^V
z2WCG%4J#gP76Lz#9i_l>0|NtE+#sXwIxc;%!I_$x0>vmqCai-B*xUQ2=`-ri-d_B*
zJ&~*kkid!*f8ulcsFZhpc}8_NO3D5Ma5$lj0R@D5<shk%*zxBlHaGFAA!8m$nDPmn
zY+PIp<7Fw(dVoEQ_3ZacC>i>YFcglI;$l=wTRSYAtkMLI-y&_Fxy-@pcWI)sk$jhI
zbxt)T1(KX<PQt;rL0AjBANyn*7^+|D)$G?OB>a3G>>V5)pbv+W!D-V5^`wBUt&$Qd
z@lKJ83m24s(Vf6j8n`WJsHrzkR*e6Bo=2@W{C_%R{-~%xQ&-3D-<}PX*8Q4%TjX}5
zx;9;{0v6deYy*dgY0-B-MMYVXLgkcu@#29YWN>c45BvhzLjF-%v$eBh1GZ{tiGOOY
z-3pdix97!r3PD@1I$2thz&i>4oh%6MnVn6y2JhTA(S&e&LHax8M0v_nJLvU<r>Dio
z9lAcTfhs6Q%JX@o5*EB#eHj_WQM!RiVHt4=@j6^|&<2|d2{E|yDJmZ4Ucd&SzqZn|
z+$fos<O?Mq-x*xB0l%RsG@ayDz(Smki{a<p5Vx6{iWPH<CI`v>o9Pfz1X6_m&S6%s
z@K89>W%JbU-%3hK3Oj?$OJGKOxHc?(6=GZSI<3vl#${jBJ83H8;b2-Gm9$6m;Jj08
zbkE{5yJZ>e<N;Xzl$2mmEG#UPVhr34@NQ$uV!~F2dsmXk(TU}yMV_9ivGJMn<F{Et
z;HDf5-468EaT@;6Q#x$^&NJe}$kzmG!p*VL-tlp4o$k4xzjo4m{YiSey4EJR3guIh
zTXNu&>45bE_$&;ArXE%)!r-?gb`Y2S9KMFc@Nmf3wJ<cKi;5o|T`(5ApT#c7qaKlz
z1i}hm&VXv28CSxV42V+gzwbsUK8%qEibZqU!N-CgH@)&f&UN>Lwsx}fgA@#<6wa)k
zmh9Y1$Z1GTrHuKf(#`xGMBI3s7`A|0fMf_k8h<DBj6ErWR|C?X;)*+<4F{YEPki`!
z&i=lAH>a!XJ8>!wurnm;X=@X+k1oDs#9%@re)gxG26;9^quv$0i6%cFJq;C8kj-w{
z028wsH1{AKq653(DUM#5CgVEmIZS|<L@yNF^xk3uS}QDEL_v{JZ8Za%N$dZ-Z~KkV
zCerlOtgJhFx~{I&s3->q+PF$LK+5A_W5cOhFut40YDpS>iu-OUCeB`tP+SXx<%Mw+
zp8psmJgyOP7=7^d1)=g~TZDBc9oXxnF*m2B`g1EQ4`vpia@ox(i*`(u8*hO`MJ3-G
zp?}+&nSm3YLf7Hf`)scZ*z0~$S|BSo!izRc8WQV2Nioh0?V6bZyWlOb!wZfkc;H|I
zx;oFZNpo)Qs+KMOfHv3J?>}I1^9CEv%8$VT0p#W$xKKg}Ilz2QEmzgZ&@d1QEs&p?
zS%9Dambl0U1cSKge8u{^xk(?@UeVda3pDKt>$yl6>nhEbX#TBck@Hv|(cl1WY{)?S
zOp+gX`aH;!+ANe9hpXc_CxracG{}pfZ>ELzHnLM&ceiHarBnCg6+Q>lC~c5F_Q8k0
z-NUy<hJ%Os20GQ(wf5t6E?fE;rqFvQa(kh+WYCkZdB9IZdfXR68>LaOyuBx2Q@N25
zhWEx*)*N=9pwT*8EBIo_9^BOAZ915Z>To#O=y~O~)qVC$aC(Tb7z|Q1eqsuI3S$9f
zs$FY{v6P!62x~xQ+E?d7vbe&qgQ9XE%WhUfld@5+|4aMB;SV3=SyPZ)z;|wU__jHm
z?3O*ZhYEI9A{OewNwrnuMJ-4)$kUO8I>ZOsU7w8Mt>GMry`yYtd<m-R&}gYF)=1Qu
zPul65y@P<nH9<MWKIB|*C}th<!U_m0YbKVGqKxZgEA1Ii9-A#ITf9p)F@q{Vs8VWg
z^s9rklBnz}xKj@`1XnBQP*G<;;hhN1k4sJ-&kVHTO>5$HbFB@Q`X1{ed-I{LgkN2x
zEVd%JBsTLs8G8v*nqwlg%{DQvU^li0>N<m|&9qNTcKJR^#O$-@8;1}pb%^{>Sld$;
zl_$Erx~TLsX3PRjKnyaak|L;#p03L1=-vR+iR*`4Y-uRm&7jbO`no5Au80yzgdGD{
zWp6jc@zln&B*4!Oj~OZ(wxX&&Ddj>*Wo1XVs){MK*n-AwJW9mV5zt0pcHFwJVg=?-
zPx<)Tmc*++VyoV&6lT16?>?e_h#8<gtD?>jR<X0Mz`6bhDw5mLiipMrKHVU%@aw-N
z*K3|G<NBwbxie1UR_~qFMK1{M0<;hiASNuV3s-=)wzfw@P<+X>5D{2*mxKPdw3M4`
zX*_}|_eAJZVj>vrY8KCGYiQ)E(6hxMzC7~$N6p}&k)AvdLAdevuK~N=Nc0-IdySN#
zhh;IjfB^6crY9zXbc!)DvKC=#O!3qv#>c1O2Q45!cz}>`0QKY<6H|9M9S1vm=3!K1
zB$#<onE78_Z1E^Qh2a6=H^$*5l~oG@=u$jM#Oo)zi>9eL{`4s-Pj%~EG;mKs@;kjf
zL*1b4UViMc!(?pOu6a4E+f_#Ap$v>K85hBMDADl2J!Ch0`SR2UnT-IHQR~A6IVP-7
z6@WK`ig+XJ^m*K$;&R}wU9SJQ&g0&A9J{x>yA#TRW5%)UXl3Y2{*B*E6Z|d`B2Z9J
zXyiV_@B_BpkWPOFLJ4RfF3#O|24KkKbwmpd_=<%$(%;jw3C3UeED{tyAVh(D7aFNY
zbbmnd`>D)gl9Ywz3v_g-2Oh!WU$nk~28V~!ZLuw4XoyoxN=ytoK(OSht>F?@CfJ;5
zY>bJC>5<Yq#G#Rc?FTqOgGJaRbj(y#2aD}E(D^hpbc0hTYv`dZfbSr3a9<r*>gtk_
z@6CqhBqr9x*f@AR>u@I<`cvN}xD*SH<)xsp{&c5N0+Mi#)<;JN2JS!Tf$ltG)1L|g
z&CRmK_{Nj~{Qol81b5xw;2<1hHiI_h7JM-FECRse-2H)ojE;^@p@sc^*6-hsYMwnL
zafa{5)fFlBK9<6M7HR1W1nrVw2r$#o&>#-O(EA4<k;^eoccjeKwYDvjfBqa?0$I7Z
z9%LGIp^_cu_VtC|!zYgz<fMSGy%gv4BbXQVc5z?4XxG-BhTq@n?0fUUq>Mr2xjU7}
zO9_cq@W%7QB>A2k5%*s#fcwq&8<er$H#ybdxUktS1}J7okkd|#jX_IALrV*djGXg}
zm(75}fTX1FtH1vl{7*KdBJg$y0k^IfQPfn){_&BKkufn`MqPh^YeY(?+tr^j2UsZq
zpCe;3_y`FZ*J$vB1O^9-#@<6g>1Qmx79>5W$6n<BFbvaonr7zAyfmP0kQDTtQ9z(O
zT%Qez@awDUVhv<?V}(VWgi2slqqf6&7ajpe8=HuM)Sh|PdrfQMWTHTV0FIZ7d%ngi
z0}=O-=RP17UYo3D5m2R+=yKazmUXw(u!On}%pGdP*(G9qw46ryMqj^s;>}O5Euxtx
z4NiC{Tp^Q#J)+?01I`|>2r-kmbEi_=FYx0>3H$b**o<P|4S(Aa0Av+<24wtx2Y^Z)
z?GC4v)t7WG4mK1FjE{kV;`E)O2`aQfESQ0`q^Vp;+qo$EZJ(X@4-X{_=mqXcMSyYn
z-RHEMWNGb7w$DPt!Wum;5-NzOnDHM-4;@v+je$){YAQFucT@^@y-73h@C%d{^8nX8
z(dppO(4RE#*`5Pa>-ASiP6z9{OcEM^RDyF&+gwU`gQaC;gfi<K)|X*G5K}ysiJJIz
z+qv1TdH+}`lj#!vMPFY`I5dzp?bnyvo{p#r=vWxxySvd(Uf&-IpMCi2s7EMQ_q<pg
zEUx@#$>NNq<w51{09-&y9Q9GjO6O))+<DeeM^Z5@X}dDR3<+^_UrO-aRTIMp!yvJQ
z`*FU``g%&7_{9C*oJwo*cr_T`Ty`{Ja8h9ViC1DZa|uIFfeO9iey?ypNn~P9j&We;
zaABfRAko?#ej-|%Z@iuY^MJUTq?syXnxd`c!dm25qw4KAc^11bIc6t)>GxbwV;c?6
z!i0)Ti;3Ig<KsbsQ|3$Z1^N6o@a^6~+z7Y)Zi%SSK~WV(M`^H`))Y(JxkYBC3|ezq
z6x0Jtzx%Jj6zlx_T!AK<`a2{BIBj!1dGf?$8Jugtih^4roz{OKUg3x?2#xUm{f)V~
zh$JmsmWX}(pqC#%epG7AaBj8^T+a|#*$dm^V`Ac`qss%+0Z@z!$J}3kKaldpYHy_I
zmclR5*NhFn@5cp5aPoVu32_cjH(~9CH{85=&c)!lIzZ**bOhBajXWVa`6C+?NC4mX
z9XFi8!e9q)yOqmET@nCv#aqoC3(yMVuCqw_r<3c^WbYqYWm(1=%i$p2DAi;0xrlc`
z+?>a)Tr&-+^tG6}FpI*Lf^moh^mwC(fBC}sIU`!z+v&*2h<(NWYJN^idR2`f_7t12
z{pU}u++H`aPrtzj)+pNY>7UI_n>mri)j?wg{pe+pTt4S*EbnkB)xMlw9IE0jDAxeK
zK@Kq!e`Q6*T};eI_Y>46Z7{bi^>h9W6|0pY=H$6yfDCWvFf|i)BSUKV7~uc+<Gw<5
zgr>>lCjG!D#E!jvTL>LnQBg2&+K(zQh<B`0zIQJ^D#{Kq;^ciIW;=ks6N>nd=?|!m
zOC9jRVm>;~>?y;#o5*Q1+3=39BVR)dCR6cMI2@1|u3O;~GrD=~4~IJUA3b7|w&TC%
zoJ#aD=|Q^Kv=7aC92l`1BH@0(k4rz3hgj}L*+e1SKdd3%X>!B&9JrGP@YaHsm$Rr}
zeJBM^jLKDoB%T!>L*R#O<D2|A>tldy!wYIj8717gU$fb(PaIn{(eet5s@?{jQ&mIb
z&Fn!ReN2a#ET?l|AYF3uX8Qe-sd+cy?>%kd>Sc7~`LM!wMn-;h?&0rA#&F0X=wy(d
zpsMUv%Be0Q!tQjAboW(K;;RKzE89xpC8tNBYk!np$U6=QNx>ytk(a0G;USRiWM>!E
ziZ5^2A{vp*c{jkD*R-VB$U#l%swU2L8hd~aHItV@b~q@MPV%0}7GW|qb*PLC+6Dc1
z7#^ZS!hT^U%`J5B7G}$1Q{)&1(VLlbnXm4tJ<J4Wd)@%4T=#p3N+2fYm#ejcp8m)5
zH|KN2|1}VUCp$3kg`Z4(Y;1CTJXO9HG&@R4wmUmDH9_0kI1@Z*JhjKiV!q_^3Q0}(
z+7V?n08L3jVY>x?=3+%qhr&MQ>CSRDA9$&d=ePLY>xa82#t$H-)1^3_VEMgS;SKPB
zi;Pqfi#a)*Oo1FAs*pKg;H>nBqvpG!eL%blF(j~ZsVy(pfAdDjqLUu5gqGUXlx$Uo
z#;fy{dRPxh(C`ADEa1AInVSFWQvBZ+VY@6Nc6Mm-`0-zWMd036<$$pQ3`@E}09#pB
zwlPwq+~`qn&+GBbX1*&;^jET*W&TiJgM^Y2J8B?U<$y961;Y|d-4$RcYHnT>5B5ml
zcjMI-(fnd4J@X=}HGeC~ad%@p;HjN<__AuA3W;YORymMO{{V~!j7d;^ZalQABd>Rz
zYii+l!)RaHEh(AR{fQKqemNYR03XiEOAQU6_~+T^8)qrGtPMSlm*KX4Gt<|1I1mCW
zrkTq18^rZ>2{1_8{hgRu>2_0I`5XOpVgPWx8o`SS$Q<U=)+W9<6P(+c5g|$m4+o*D
zNAojv^|+oS(Ql6EgPK&&>LKjPs?p*Uz6w#Qy}q;zf;}(`hnNO-+T6-i`k$z<Vums@
zZfp0Tzh8Z#8WRl_H6$=lw5h*tzmvs$=XgN6_ahM(m^)AaQ+6bojeMT`e$SwM*uV>)
zJ9q8~UVgnFzt(~e`5I4As03DV2b-Fjy1EK)A%7&*_(;gHae47cHnB?IT|wbH)CVl=
ztnrMDFGj{Ishd2yO|*P`uZEZ+$ReJL_b&w#0$TBq&rxG*dJ5=AuFG96vgHF8M}VbZ
zTVn5J%evLN*li6LcuK=guJ_aBpgaS7w<&IxFDI+K)<-NDJqQg<3z)`h9je2^@JBLD
zmBZjxqM^jqvWkzP(kWZSht4pbgN7n?e(?K%gW8K+3QMExN4GTo&dxeM&o}wi`=ur|
zzxlr(h=QGHx}BZ5x31?^Yyc<tM@DOlWZhFO%a)zmIU0Fo2c&;aJ2IAw({(@N<oG}9
zlQKEND#PJ<8yjykzj^!mIevY2mb^R+jnVPx=^IimuE)N@Xt2tHHSziR$@8I2vHnW$
zh}<4BL){owqz6ys<uOgQqc4*^Tq!3c@2P*87An`(CF7O;Ws8iy=KqhCRWIOr-~l<i
zv0)E^EsS@>pBji4S_1|OvV_jc2`{fABsAxnx7y-uY<6fvKR!CaO%PXth;dH6%#@Tc
zDb*6Uqkkwx6;Wwukn1QIwe~*du9b*fpK_I|3`zM)lR1Vs;|0XCy}cckFrap{nG}Ai
zR(w7)UXBltA193lY?qDOBbOfY-mbKq%5UbzE`T1d)?#uKW)r*pKQC}MIazAH@kAhn
z?{gaRF4pd?WR$#yE1Sb{4OdC89K0AtKK~3fP}MWe+1w1<JPUn2ni*)Wrq<7y>pstK
zHbOEd8*NuvdC!&U<#9_h?l8wNO~WY}y41q0n=i97Gt=kkbMfBzUe9E?Xu!8@<30vN
zBrI93Sf`Oni-O0XEefC#VA1%8RKSN1UX{`|7=y^SD}sV*pIN^lTC?J{pvMjR(x|PZ
zp%LJ6>(&K$tH9d!i;L<?89z$d(pIAt-2NW6wn08V^(rEaa&FU+33Lubg&~LgRK-4*
z!y~s96>+&__x4l?+B%ifBl8GZqT(qA)mG72+pPantPF)#d)wQ=DF&ZQ9~S#g@Ep@&
zrH?Hw0DR!>4OmKS@)H}Qp<FToNMjfU^MBw&f#9O<a9G_~dPT!5)dN-tY@U~|lr$!4
z9n|9sbai$6t1RBA3{k0!Nikrm`BhgN+wZGpa?zpcp$E%ncvdRv4}HGpdgT!^l$TfS
zGzeyzPm1=ThypkXMu7uRy`qh}pRt91{!E`cvGebIo6i3EDGr$2Nx~WI)(Im{qM%?&
zJB&$6;;@?b#JZ`-382uglw~3jXuBy3@|070y1FJxbic_Z((a^5QD>3jj)Oacaa#hZ
zB^efEWGkN$JyRcTEiK)V%2Kk!GjB<iExcMAZq%x^cbIATxzZbF?Sy_&5SjyzwnCl?
z)OXl`AR|}fi2HU|<(m2Vrzp_xMG!#Y9nX@cZKc401=H4)8`d59Ov%43T&4pAY4|Bj
z0;<BQfe%CwV<-7Lg?=e1so1hmiA3&y?z#a_1`Z4~Ok-bd&LE0`6)aIwf$(lBALxGE
z#evgsaY!R5m;zf9lU6rZ*Eb#Tq2tAfN=o|o^<hk`XvZRPy`ZFu-mT~rhK=W7zG`Fr
z!N_^z)rFxVipd_7xJS>N?I)}Fq2z*nAejF>;2r#<^EXX2rFkVh0m14BT{9_A^B@2l
zj6?W+JQfpP@+jhR?sw(+xr7otPWMp?)GoHJF1Hwl)L}w9o2Y!4x#Q(^3D6_B9f4Pe
z4|pz6=XP*5VWN2F3QNhz?Cci~)obohycQPr5=m?O|92Dc{lLW}k)=hOf&afY6lJB3
z?wp?@A_6yZ?6ghd6*xs7cLA30y*lg;lg4(-cdvJRP8h>3FVfn|D=M&JeAZHyT^qq%
z9Jb4Dm*<{Aw#D4^>9py1o-detA+}*)pE<)TNG~wuVLECneo8}R$#6{#SMfHr`a>0u
zU;Y0*k7d>hA8q4l1>?J3Q*+q2e){wk$`y8seMd}WN6rsqOufb{kEir*K)ekL4HdK|
zeH2rBKWC_MB4PcOgUL*|=qppYm()=x`Fam9Kg2u}j&IXg+mz=+T>eXCM%`PW$>A`T
zlOV=X{oYxy3V7Jz#?!AxvZx{e()|OLet0ThV)!7~1#fwgRzXTF5A_pDUMm?oP+$`h
z6M;KPbYXuJ9+~u)OIx0vFH}k)LSRl_!AJ3<P{46qVj@kP@#L5W09XsgC~8Kzt-9qZ
z^m}%858B&J0e@9f!~4y6jrO1!n2<K>0_VC|D$CZ+{Pi@0VPHPSe2T9xnrBtjh^Z-I
z?i=`v*l_M6ZdJmjROOA#i8me%9mB)Err~BZZ{x=Vb`tMYsU~;HAl{q7U7wp|`OLO1
zRpoZ#r?TYvz<a?MQ**hcjCjDwMWY|z9bOXlh42D%AC)s*hL)-zrdV+i#Lv>%332bn
zNCCQ$MVf!Fq)0E=kdzYf1A66galuC#__(+#{Y7#CAsCbNRT@Ylh##f1L;Ohe$NU|W
zXv>GNrYC`nx`6!qRjS>Nup6qY!+7{#EC5=lTze$dyS@?bM^k#wm^F9nN%Qq&d=Rgh
zk&Vp;P}9!eHJ&#16>+WS=X(j%vP77KyOe&==6UB!!hkL$6bw8XsX^#(+NY--w`VU0
z_65&N(k&)Ofbzoo?)0_6;*wgC`_W&%fgJg;hIejeEPsHv^QvkiBuw7k(UFLEzn$CS
zX66pGC15rBaoA+~_cyB<ZFquyJ?C^de7hLT(i5INUcU0i*0v+_g+Amv;WM40+=Bg+
zlZ}n*W{qh=O!MuA27wGoOdAIa#_me1nK^h{LqqnSS9lo`=r-20FHiROyMP#`ZwT2T
zr9Ciz&GXl<vH7?X7L@=4tJ2()>F=<Pr<Om;?dvv)X?b;3*V6LiEG2(;N2E@jv!;~!
z-Io9}tWSNL9LigOM+Q0~au)f(of_x#w!w<<q$H-$-p<ZOm%T#>ouQF?^!U+lIX5~N
z7Z)H`fMIRR?-~}k9=*E)!vlAq_-Qt{Gu@oD>y>q|Gv9?4CxRd=yRQ(Q_NO%>?|g1_
zeFZ-(pr4^X=2dW`(s5nYG&k>rD`k0QMS1~fGhA<kQZ&n{_1{4+MddJjiD=;h0<p2#
z(5DMiPYcZWFhIxFTd3LF+R{>gIPv-!Vm+WrAG1FI#Iu9L$t{Qh8ieq)|GZr|Q0|xR
zlxD639|OJybi9Je5^@~_Y9FO*`D0kHP5=6}j;LqNIZ##qSXs1&1Omf>mqIc7XBwF5
zB`NAdE&w{Zg_V^RO_1K?9J3bh;nvK<pBl9J?qC_?cDkx~itoiZS{NUvkiwl+ADR0I
z?#ArY)bCwgZ;v)_l^e^)t%b@a*7hbI?Z8U)RmHY=C@hK72z(l=rxWze%_(v(^CyI!
z=r#=k;|~5x3DV{;JWS%|H<TXX-{lzzYTo>i^ve;3_8M%N<`;^JEFk^oo5MP{AApVs
zqyRgjlnjepfGmW|a>Ltz01wYQ;;!72=7S?EI$4UScK3Jhh@S-vlibCo4$cwY-nJH<
zK0DvD!oK6<{W61+7O}doG9Q&oXuo;$B>=J#(OEB|Bx!ut3MuiXG9>ZQC@CrDZamzg
zVrPHpieiI{LxBaZdaI*4JV44|V(k-r@|CF<zi1}^e8fAz`*^Zce<g$vSQzYVtvx-!
znu)U<+jgs&5H5klqgOjSFb7XHdTw>HG`?0)fF}Xt8Yee+%go&K+<c{1XJf4N0+wVs
zvTiSNld|%}G}w8r76OP2F;|Ba9wRwgZg()0gU^`roX9>n(<vsMb?O+AH>M?|Pt6J9
zrKv0vHU!KwoH)BHQmCn^WoL&mlRtb?ViiSQOhCZC_=0i(ZVA9d-OdjAbIEJJ@nEaS
ztNyBAF2$xmhv|M7)}O6|FtX0B*1J_RF*2fAHFtKd4`c-oSZipkkclQI2wvSniz~ps
zE=57BLv)K{rH~KLKGX->2JwE=SWEDK&7D0t<;Gcy;@FxATZQlkTHfGpdOA9B4lCHL
zlLaf#;{N#YcN+>e3tVPPouiYL_xAVqzdErX`3jpRfR@zR#YHOkxvVS;Ep7N(C><RY
zi-<ARTx;m7yVZ9;6NKF)ornXNA}rF_vbgEjuZNx{?)~XmfJzf`nFXY}=I8UqfCHQB
z<q7^ah(k^Q=u6`c;0(Ax_9XZ|2!8b@^2$a&z=P{1`5E@8s>*So1ehyE31A82xHgof
zTJZkPy~`rP_=t#|4hB1bN)}c|cdb0n_zsz2Nq)ARcm<PE=kTz_d~^F+{pM9&UBby}
zRk*9@a9sqQa<+>rxA}|!_$9@aY)K(1wjatk;5IuDqV(KvfZ$Q8pI;UD3KhXjjw(J~
ztaWDdoX&xJ;qPCUzZ2*~r?AQaA7;^g`tl1%`}NrVkppL8{yk2ZRMtRG@t^s6W-SpY
z(IL1wN_pw&%%*BLf?+2%RlY)sfC(Pp;Hc}BPcVS{xibhmNIW#W+H#0zfTI`+-L?if
zebiQ6`Hi1|neQ!MAd_L?<YZ+n$k+N|-2(ZAtejjwhm3=ws_I>?q+f583%WS{zJX2_
z7Ogq*DODa9TX#PI(<nnCw3!_I(QJVWG^(ALn3QzUPLndf5)U#}y;D%a-);gR8DR4x
zc*-HGkexc2XR989Fvxih*GE}MzYBsf<xnmg?9YySJulyZxAUmB+vCQBuFp@EulL-y
z^i53zOZ;bt8s3E)EyASwvV8f7rQsMuGLo3svX`Gnwbo8_r6&zw0IkY3&)8VJTS(7z
z+vtFPefep<;0s>HvDeRqoMfW+L`k&yGJZxz9qNS|{<(gw;FC37>%b7=<lq1g3$4;0
zuUm5(StTWJn%nNb8Y!ft_keC2+LWsD@(1D<??PUFbNmU5(!`V$D_vbSkMp|#kcN=(
zST;j|7m#bcbt`@ssP{X(%9W6i)L9*2Dzwp$8}Pd`EF8K$>609{WByN7;?NM9yu6d5
zB3u~V2`6SL>_9foM#kKPwk8-=Sk?-{uY&O|)H#gW!qb2U`pxYKKA!04=;iJUZTB5t
z@RnZ$+bbAf?_ml)A|eWESC|*gh3|!TEvTw$EUA@I=aQqfH~Hcm_SkxQn|!>y;9Q>V
zv?U-N>n`Z97JafO2s=?td;926+5RnZ+6U=x!0VkX*D*LS5c(k4Kn#1L+w18`8FIhf
zaYk08#U&)%mEsl`d*E|1_2UQL)p1-+XPh4&yJB~KUcE*F0~uM(Yrf01;q{#-F1s2@
zJ8KWxAl#8zfVlF9Z9Pku_wmXf6CHPEm77_lIkK)4enaZ4gfE3MhfE1$ghC`0hKR$A
zVBw|saLAHS*-R=a3w;!2Z0+}NB6a7e0(APu1rwEDTpy0>=b(7@e1c$c9kqa8NgXOr
z&|@JFf%{lYte>ip8BD0b`jQ}4PC^_bS|A%1%CkGb2^|Q`{v?x74Le+@f6sjg4iA{t
z@>Q7Q7O=@U*x0b|h?<tcCz<v=;4V{C`}GycMF0TV(PqnML6WD&J@;C4T7+G8IB7%i
zmp*7hQIm4db0)f-_n8*We7wK(Lu|xSW`4F@c?->m+`BAv<s{`LFJLb=@&c9I54|yi
z@+*AsA*(<#C!YsrKJZy(no8-TtvKS5m5Q|-SzTPD3|;+QgLBEbw88$f!pL!TwZc@n
zC8N`V@Om3b6n+c23B2AofG5E6CEGifIB!DetK;7<urcoOzC(iIfLXJ-X?gsQ=o&t*
zDHcl_Cx9@6=^Y<F;A+{N{kH3^e5+|sfe-7brLFs(ujv#`Oxj?NP<lDgOH4;c2VSBQ
zUn~%<ts)cPZFhxLNK`Fcs=@FLpxEK)e;Us$cX(!=)ox=_#4%r(&VHv6SA~69PD;uQ
zbR2NA@4`a{=4@7j)XxX|P2#cCux~;Ovjj93U}DS%(wu&LsP4NHbB*8S@~T>p?(gmn
zDBl3KkoWT2F8cY|*%FsMYCy?M`ewt!`=HYU6GV}<r=wU9M)kU8Hx774{=N>xtg|m*
zA>(_m@!ut{*nx-xY@e|oJjhbY%N%@Cp!xA7%!%T@nc3L@!99N$s`U4lwnQKi#v!|u
z%II*BwnU!C8<vcT{ERroP>`zy66qCD(|14w3!=hcV-K@zkjElkWgF>e@zht>1Harm
z(Nczvjvo&RhMo-$a@<yYs%ripqyl(QD&Q_mBG{1ot-tP>p_EiU=X6I$egz-0S_C8w
z!1uK<C)!`{mO~~QbZXMv;eK^tD<%dg9<*e|U3@rZUm7!E6$i!3n~3;7jeJ>>Ac?8o
zK(1`!4K!F40_(zXpgs>97r4bhOPeZC=TT$=WS7@`WT-VXN$_Mb@t<3#Z3fH6Jz}@-
zR6-Be7baK?(V$SGEcUBOi@@Jt2q;K`$Fn4^Mi8GTY-?*~VgfTYKC{^5<Rmyr-_4gr
zL;Z04;|ABCTDNX0F52H}FcRg`i%Do(0>!A7zj84n?9%t;qnmTk=mPKo={RG>TB*5u
zPlh0W9U8&Pswxp`z!vuoEF8}crv%=)>P;nZntqOrE#^RQY5<IJcdv73g^S%WzETXV
zHZ3J3b@F6LpE;}*#;GeKHBDr1Fx~hylATR0W!T{BD}y!cI;K|I!j2fXBCugY3MK`1
zFlV>uh-9Op?H?Uk*({+-*&)zDTU%QhIXMa8jjXujgTup+VCk{?vl}8AwXmU3&QUOJ
z1qci<2w3}m=Y;SIYX_z^Ou_#hUi{H)yF%38u`{-)RRjo?J;|X$L^3a4h_3x4hXwpq
zm}gynxnC~H=?NDL@m=W;`4se_CdgaWP}*}+h?nN(s!RtlqN#S)fI9!o<NUb_#e<+a
zAp55gX(}iX;Em|Qq;&k~{`D+lI*?iVzf3bmu=4{I0Kbgq?&3Jlv~x>qD=!(D4d|-d
z;){!!llc4{{}NH>Qb+gag;ZR`$Hy-()8AIqdT;UIRiSg;0pi@MY8z$0&QnQeR-d^2
z<Ys9_g$m{(@iT&t8%G=E$`Lz@yBj2)uXT-$`P>dGrt80vF{k%X4_yqBa-kCq9Sy6e
zIN4X|G@PsFCFyu*21`=5D`xmXw)*0HOJ_?Q?0gjrS{4_FV7q<Oz}6NO2@At!d+&7J
zv$VPzCnh|GO48k8korwW^bYM)01i<p0PY}$X^1+iJDLCS_<dC=6|tyDC2F}xP`^q7
z0)m07kG(b)GCWpkeg$T&ei)B)r#3#IWNee&MnX!xW1z)o*dD3V)!hx~Gx&Rid=DI=
zH!JX$pfV%$q5l9E`|7GDOyz!~(Sc?kq_R4CdSG7FCqhig6dfHMO%&v^J8=pO!2to_
z-f<WuFF+P*I{n-2c>Biym|EsQKpa>;`soh+QBodMFcbA<A|r!kW2vZr)e{rp2Xc8`
zaoLg)7BG&$gtD+zRJ}~9fu}=m`w|Y$dCM=F)WtvR>w8m9oypGW-x@uo|F%QR_4t{F
z%7`cmHl0dGY!ppc%jt6*_x*nSgg`(t-#4XlhD=b15Fx>~wBf`Er71Bg$|p{JFeF3<
z;9*63l=)i~pd)$sNhsGmvn}+eAHUT5fU@ocm({}Z#8)^KkpD|o`5u*04+57mcC^pW
z-Bt2$W-6GbRr-_bybi&3QWg)Yi^x|X@Qn|&E`1=-lU|fl!iit$<&_hX@KRGVGs`eF
znIXW8?QPIM1(W~90<y-`*7q$W5T_k45`(FNh4cfMW0Gj*!kpIHN)!Q*v7l+4{cg_U
z51%o3UM;|sz}0o3)nb*X5#zBp%&yz*G&8r6t6NBRBRPd(E(9O(pU}F8cd#~8h!SNg
zR4^h^-qRTgad526&4UT@;#;TcU%<cU%Zuge{8jqrMD?<S4W^{*KuN{|$>S`u+J`Ys
z4}&~-Up%2k3RVLOr@CuGR8%k~usUR2Cjbmk#4F?$VD4Ta#OkvJIdg6qIaSch8xD1U
z#w6x=#L`OFUGB!B#EW|xZw4hZi7N~yY@Iiy3ei45v9ra69bQilMj?(8(}xKNd-Dr?
z(O*SxQGs9~wLK@|Va^XGB?3~6sYJuRQa?H|VB`BLvb(#xSZ<t8bF{t*t<ttkPj4nU
zT|ywjDv)IUj@y-}f3c*H6!6^<^?Me0ItOOxAn~sM7o(;aU9E6A-0%g{fs8vt55e=<
zQkP7W02WV+5fr~7)-O*-H3#N+ZS!zt6~FKAnSUfomE&vsOhr6q{xL&}FIfcZf%ws+
z^L{oftMwZlz~6|h0_vV+Ig;dj!Y5=D6l~<aEmGLtJ{j6Gg`<k9xVP;<)@wf0Qtii)
zmR27!|Lc~yxpbzZO7#xT-3EGhi)YK(ME?A0d0oF^<AFbEO7}CieHTHmCVcE+Q&m|B
z4?Z8(>9KQ+Cf&}inVFs*ud}u1Djj<m?gwi$WsTz!`4r+~QU2|m6g3Qj?b{gTHYz|2
z4HX>v4c4Y$FBK0p<4;A6+mTn}xgm9s7s#Xt1>D2!J4~)F>%rc&)cs@vpu=Ee!G+yJ
zOOQMIV$sGNqwdHN3pBH7xVxv%F#&U1auK2+y^@l&sJ?h`qULdH44W$4x>r_dqEhZ4
zB6^FAc$nrR-jdMm(~62`tHJnUT&NFeE~(f#IG`4>sp`8RmI(PbZAU?f(CMZh2pb^U
zd9qPo-#ZJmuH$9HmX^hE34ne3Xr(!iwzDo$`trpY+w(x${W;`KOo3yAu1~s9Z-I)u
zfGPeg32FF6Ss&;Vpt7>k4&T7WfY}ugguoqVRpVIL_(?sU{_|W)Dx!8?**x=Vtpw0A
z5`oV_Tw>%x+TzZy8a+Du(r%SbII{pY?!4En{y|$~cx=qMkbC+qz$~x~BO>-l2d{o$
z^Ca?YZ46MU4BZTJ$Mz6ap<yicEhx#aIeSXrx|>6dGe7$<Oo_;VG?R#?MG&V_A`AsF
zZ0oO&m#+ssSXcPMFnXYjn1Y^hV0$6&p!oOw^G{KxneI#jKL~)QJ+Jg1{Y*UsBbD16
zl{O0!U?Ke&M;{iDK0z}Z#QwawRF_AMg1V{7Iaqn4@tae8EShEKfBK^UCYBfEe`$=@
zeJ6+)6c`Wx=0N0l1nuMWytp_THD{=(^=?jXmnW-$fcxb*D?fL|q4`L+M^NZ?B=>0v
zDkrekSSWtX>x0=g@^m454^jyT)O?6D@0o^1JvMUiPZ7S;A&rO<Y<AZgqrOd+7_V@%
z&lM{wjHr+T<$O&@WL8j6NL8R^XJ3qY8x%kfSi&?6AdT+o$M!Y|Mq)wsp`K~+hYyRk
ze~(k#chS8c>3yOVta<i|{+3yo3hgeqX*krrjj-eo%gmv1!ArrmqoT=Cb07(C!_Z)m
zHD>J~KcRB;eMwaKG$=hG=U4*{zP;;up4s*Ifj_gjO?c_ipeT}^Yh-z-C-eN|rY>Tc
zZ|j7a@pQw8DD$N^l`wo4`NRkyI|TQElAf6e=YX8#{YR4~M<<%;^Bj7`W?w1Z%TN!x
z<a1=p@D^wlvuX}wSt~7aS-*)VXL)Ha`*={Tu2F&57nmQ|iat$lCBynkHJutq4;k@I
z)3{<#3M!vSBXDIgu}b7y*PC5nh_nb@Z~4TAgjCOoL>%cwD{r$HQ^89~pJ<&D=B#>v
zuP?@=z9|IR<)5N5+IoA{{|9`oX6N5>{nxgTq58SrbCNuW@}Ji$%<b;LzKeZjYqz(!
z`xg9ckdfWuyFSMd=G%-h#&n$jel2cmn^05~8WVGeM;h@U=6g&$WtHABF<_GSY1$SF
z__?{U@j6CoX?aAWmx(<vpYVSVr7I>u_n=N612`AFZvcdIWC&?;i~D=Lc2@P=qOB_*
zB)N;fb)EY2r6n~c+RW$VgdVv2*~0lrC5C!u%~p5-sk3t+8g~T!P_x>S0_ptX73`lN
zd_YLyvDc#~nMI$5mC;Pq_i>+En|>Yh*ij^U_U;v@1FlVc`XLAHRN5MOoN)#>ZGagM
z4UPYY4+bDsR#sL<;BP9DKm!E3nC0UgWdQ+gZ!`Wyp`EY91SvbejvbT322$fs752~h
z70+V+2bfQ9QTog#8cI=!c$N~Rf$TveMQ|5wpM=Bc6P$ro23!}2si}oF9ayFs8vZ|g
z&K684+1S8mBL!mHK57CsX)!+F1brfOJ4(s`w7{4jlaMgc@a`4RHoM6IfT}d?WPaqf
zN043IM|Z<);EhViT~jrlfmGJTXhnyd$Mhh|7FNN3^Qr}}6SQ}5#|1cU30Q-L0G)Cx
z$a<-mnQhJv>qXvuuG4F&&CHAr#Q7ESn2(Wse!j}W?ZfGQ?Z4~({q@m%{X74z`=$Q^
zX5cVYD@#W9H~F0-eKIkhqg46b#n!^Y!o@{g;mYZO?ew}8T^;*|KjBs4JMw(!H(Q4u
zz`o%gDk_4s^`F;s{oqP`NGG}ZDj2VU;1b}<Pl@=CAI^Nkw}S}+1UupRzPaeoOqz|A
zcnu&j&36tCeh8VFosO4d544H;e>~V22UQp`!Qsx1gxb)f@+VKm5<h(cHA_wHu1FE@
z4X^FGQz;Qlf5{zr8uXDER9!+Z1>St4rGz!Cw*|i~5ue9bUMGx;lNBzQ^kEMNlV*5v
z7U;uNX>pY*v0$#)DX^E4O4uKost@FZ4$R9ejq}mNhae5&F(p8z2YTuJ{C!S&$jVsS
zeJkuB=`PVf6Dr0gAVb-HMWCY&Uj#6Yg;hqazah>fh1nqWY|52;_v9pGRN9fe+dnzk
zQxtjkPnv>GG5JN!*C*(Y#?<Zfw020cZQLVMz6@-h%H>31WGR`Nn=|DWw=3Z~u;Q#;
z{4ssZtD_RV-nzd8a%-cFTd*X<zdphapQW<O%F7A4-;!Q}<`J<K2@iLio|XkQG}cX7
znV@_|Utiw<_cphkoj@vX@1F}md4LPeVyZTV6NyWryP&29^>$NhsMhUa;gwB%EqU4`
zVfr;q-x57)*#scdP+p_bDo0GOzZzVeGTnU(fFXo>R#l1D`#|FW<D_n#ec2x%1qq&Q
zyt>Gt^ZigU(|ENFZam?vz)S%q9ZAg`kXyj$3<KlPdo4BHPLc#4WnF;?x3vgM4-+UJ
ziJTBRf%@$7^2|>%n2m!$y>c7y8`^Im#l4pCq$hxIJ|KqS>gaIto&pl!2%mW!>S)(G
z<POjG2GxsB|AIMtt1~RD;Uemv@f8LGJ=mstoSIU7{2W083I-S8^Q~q9uvu;Ku#FgN
ztyofA<QLMTyI}A36cUvWQV$)^|L{b9epJIc23QTioB$}k{P(R7g81rmv{AdWBN7P5
znlCSH1i8WJ9_D#DO-dd5ho}xt?1&4}DB-)%mFLyj<L<!-iWDO5w{I+qML75um*{$v
zzHK+%<G4MnnZP$RS|nuBr7Qt@Mz5i`<m6hT?)=Z68PDr44h4OAQDYg<ueXiEBA_Rn
zfHo*g<gdLtHB_ghRR~N3j$2q*Tx#uGQ|Er2DZO*^y9hS2>A)fc%9;J}_FUNdTYW_p
zvH}TmU@B@dF*Nz}C&Yppb8v95?E>@H!-Fa85lRZTMQx68`9HUi^w_%@!GtT*ZlxHi
zgXc<;6YK&h(4-e$RiYlx2eV|&WoA-Vl-MrOr)^%WPFmqR{K1;v`2B>ja1XLCJKmy}
zyPxmSz$W9@OWgy@nFb0de?S=<Db@GK*LIe`QsrAXV&^p*YP)k!!1e5JdfAhKRP0;2
za&kSniWxh%5XzHu1=`DlFHYMF9hicQ!d{T<cv*k63<?!kw5{i)#LC699}MN;d@}4#
zsQglYcnax##=Rb!NAR-UPlA@&X8>ldIai!21Jx4K;_|YdGl<V-oEN&)b>2ZPm}TQ-
zt>x*yF+@cJ3qYD*mh8v_)&cN6%_MR=fT`CN>?7y9;+3f`U9V4+n2MW9y9G`7@63P9
z*9E5}vm)<^RzM`z`lCmW61XjbasW6MRaMwqQ<g{f*z4wD4NpnAnsN#T9Fuh^U3><T
zpUzL$iC}?Ar%VkwEXzwvt2!NDLA4LW!%A~}H2B6m0I-6)ONf-Qh)!$}B2Vov&oLoe
zzy~G{M^J|Wtd>Y4<NWeJ0M-9f)|baa*@gWVW%t-+OZGJOHCfV(HH2YoAzRi&L}X2}
z?`tUASQ;dwEKvxdY-v!45Iq`2WJ%Wd8a?m(`{U=2K0adR%zdBxoO6Az@8a0aa4%0z
zD{Z<|dG=b(z-S@}=TF4O!-*R3hjO^!P^SS3G&X5de*28PJcjGrWRqNnbx6qFq@+uJ
zen9<d6Pn_r_#T-P0PM=W1c-KchEENJJNL214l-DHy7{atF_nb8=D<~fE4D2`0}yT~
zp9GQeX8(=AtGg|F1z3}WT<n_&TK152Fu2g4OQTRoVaotyl>Gy-x^W*sigBQplBk|x
zqa!02uA%i&Yh3x1e+}zG{BWynKRhy{B|0^*Bm_e)1=>8^)c3X`FGRe{1FfbWz}Q1=
zh{su;DPr4ozESn9?v2S$opqI7!%vKo#4(*)Y#l)Eb&F=g$$v$vLj0!FP|>4Q4l#2f
zpu7Tb_8Yn}qu__DniQK;79Nyq5Pb$xEtI^k@c*)g{6&yjDv*@ib}u<3=<OiIS}qKt
zKcI(kxg|(A8XY74tRgkl-qVCdL{$w06Yd5m)LnSu55+l`>0)jGZQ(CcWgHpd%`+YB
zo;%c~E#wmC@vliTuSZgi-V^>2fF+|YfK%yn$1XiskDycW@!L0?>;h~tR*lQyd5<8~
zJX7){9fSJf;$n07K?KCNxfRM@#<uNmNCAhX<GGJf3HG`F_Xeo<2lQcontbNUK$COy
z=+VCW2UyOOGH@{60~&D7)~SQQs{V4Am5}i8XZgh%pl^ioOGCfD_5ngT3|G@{apWTD
z{-LXdz8=l(S3PUdeqoHZZZ7M8v4A2HL0qzKP%KmTtK+GKm^iB>&5aIJLXA;<Me?tC
zP*aJ<lUd@nYv-0eHKK*YZ$4RDc=s+x#&ivA3V`1qfSJ7#zUK|ej&|WKH#+W7J1fdU
zmjPN$Sd*_cwmaYP4jRzLeRA7<wxcE$4V=e=NQQs)_u6&OZ@YzoyvW%26KwbYfTAn4
zJX>;)$@Kir56}Mkz}0lP6p8Mnx(=7!x!RbOMS^4X%9ux_XI^xl^>TMdJ8pNpDJo~U
zRC)HkgO8=#r81;jDF(6eGBFdnslecwB@!hOy%Q7WJNqn=l<LC!AujGsS0Vnw#U&^(
zkV7d{PY+UK6XaEI%-A>Cgn`XxXa>;9n13>?LR4Qr81py>nr;;_Gc)5I6}J4-g`fZ#
zA8&_geGrhAlVg%gZ>{<niDz@Z`bKP=mC1~5Gk`J%yQBI48YJy49CC*omU#rLo`r=g
zlKuk7bj!;6CnkDdzb@U{+%#TtG$>hlFdCpb{j96Ap+GAFZ}TafRA(S+81*a|Jf^Rc
zfgbIYOsTG=05>;x=kUzI-gFO8tRd{Z%<{|bpHtB>kSV5&3BF5MX8#8I_za3ZPZ~RI
zSU_?q;J6dJc#O!%(<N~8rri9o57dA4Jgc_)U)u?Ydy4`N4*2^xUQ0%Hi_h|IHlt|%
z$4KAXn-Fyj%T@W-))u?Ou82X-N;h}7RCUdJ56EQV61%5KPYM6{+YT&unP^d=k7{*1
z7H<MK8Q`uMxC|C<eWwp;`>T6WQRx}{$2t$3Bn*s>WCZ1F5tWob%#T%TN11(~tiCAt
ze(EPbp@>zq_r+VzT9oBGa()E^;N8(fwS%^`m<z7Wq^2EVq+LtE1xm#SX)Nl000KFB
z2vgnf`%r`h@k`6kvn1GE<jgp>2vD$!i|9h^z(bnIyz_PPAijv~z(wGdgE&bCF@ehb
z(nxn6v$-Ljl&C0n6HQi(l<w*~&Fc3~&VzU9j|^MC<-N6jn`7efHycN%>&yf~{m0Vo
zzV{TzQA7;~;={#bUR9*(K$1}0<VVGC=E*_zJ?YEQ{*|WJb38(c)!CZJi{lZDV)1qc
zfqjORVuuVK5x^#~zVDAwl(z?!cf>^Hjk!!-!Zw^N&t{@38&!~#t6q^%q5rcL_`^{9
z9tqc-xupef!q%ZdML@TmjeDx{HZy2WVK+OU;oxz+3qK-l|3T8>=^#xplB~F*q9Q9x
z>+<F3g13nr3psQZ9r!Fq>*^5izeOW`1Tw-H!Tbf7&t-x6_{9!xCw|U<tVJ4(1{!+*
z7Lgbc4G_@2?V6a71$}L5>f<KoM>uv9k@;1%EZrTKlI(0*&s=ea!?)yoGju_8q|r6a
z*ZxX@tb!TZ($Y=$&vI{8A27I^17#Km^FM(Zf^QR#AhazWz*_XOi4;|)47r@m{zcMs
z4C@zTM%3zZbK_cCk|NG>AKn&$xZ<<rAFrZ_Tc0|x#s_~M0wfFPm2p@&!opf>YHG5w
z%z&n%rmDKaT0<g#v8Dmj&~u{hs1cYDsJRn_NRNd@v@YhG%U@BSkc>QIe2<KQ@{bSU
zeS?te6tc6_cv9JKWo-?p#+UT;Ohj1`3L|V~+Wn*+iLI?I>_2c$Z4F%ga{o#Y@y|lx
zS$o?YYGPXalqad0i;cZE8)2NWw?6$8ws>El&Ek%MEgR=KX+=d4=r(R$jg8W)hfPpb
z%dM`yzDpcVcH^)YQJxAJ0wR>d5sD+slXQnKgy=20VClFi7RK7@&>0QnibS4szaVgl
zNF)ktw=;jO1O<_fj*hqYPY5*&-`n_DqLZR{^-A<n(hL^B#-CAP<O-aNf&RI;&GQ?O
zUI@}#WS3E9AuBCt^car=?h-C|3OstM`<w7V{rCQ!XV{FpL#gO5M&?k|BTL(%8UJ&v
zw!{&Rme1^({irV$BjvBn&>Wt#fo^s>Gy>mWB<wHG#m1%pNIbOf;YcDOCufS`;zF82
z|4`?d+hppeVY$DoIHoL%ibsjroVBI<sM)E2>67Pt=fR~WF`Yu#L`3tM8;?KA;Z;Sk
zYCv84m*0k@0byi>DN$<fjOV0J>l9-UW|d?H4US#D79T|*4YOuG7uy9R63eg(0af{M
zxtd^-_}Wn6cu{ftSuZe512xU{>u09uqYf`99R|fGE<x`Y;^lS4JbSXcd!oJliiq61
z!NDsHp6&~S`5@QRV!QCHwYAmqHJpO3Ub|MsS);xo!=fnq|AQJw4lgq~=Vf#|i4}-G
zQRL;71gvxk@vBNd_CetQj<ul7q-*QcY$~#nPu8+WDvJrmj^Ix^UVE(=C&3bR&9iJ$
z_3y|^xvBJ3bFw`mah=bbn{#sa&=`n2%Lf-W8_5%96iH4@mZ{SAYJDMbi!vl4p&5d$
z!OV;N@RmhynevG*NjHOfMNA(+l_IrY9Z|HRZ%Ru`zezE);$T-X-z@`{Rx6Yhfg^G%
zTs;DKK5@eZVHXr)@a<cq<hu{+BncvX1!acz;+j=)AYuLRgx+x;w(Y&$-Ck9z_2c!Y
z!nTS7Md+xgz;#2Z13Z%PRN_<#PW>ga|B(}|Y2o<5gwEZkx)-#a{<g2L@#)i%++Psz
z1w){TLUB;k8oL@mdmV&Cxe<&BukPZN(4N9pLZx5u)rc&F*O9|9I3r%50FSaXHs;I7
z)i+Y;8Ha|m@pK5v%!L-_*dNH_MDuIr8wbC%kxWTQ5R+qcWXhpP7`BRFE@XBfVHxz1
zq^pWENFggOsG`(5^E*T*TVrW3^#T<T@3h4=MPRm^P!NPy5d?0<_Cgn24+E=-V?iDd
zpv~%8MX-2Be~0uEy6TZn_{DuVd?eM?r&m6!7z?p3vgjzBV9{gikR|75k2vn&Bm9H{
z9ani%a5kSI&LbPWi6r5TvB5Iv;~du>NYUJ*Fdx&?kETFH-Prsw&N1XCodJv5g;>0+
zJ#CQr9W7L)&*WHaW#RkZD)5J+iHCm}pmKJ-dmXHj$8+IGnUh&^oal&JeICh)A;m@Z
zJ%&#V+wkdF58+)^Cujv1-TB?jSLrqO6aSmDs^QhiT->&glt|?f!DS_Tli6QIFJ8PT
zD=XV<5v3~*l_~b4cgW4}wP&(4hQb0UK{w{QFAe0`&s5d4o)6yiTvZrZ(_R-76;*=7
zIsmthr#Wz`xdc`}h)q1clkakhHH-8H<u^!g;IyQa?rTA%@CQQB%w=;Qzl>lkWzj(k
zg=~(y(i7>K6H@yCi~&cRli*UwOjw2ECP!gf8c^J0pgY3eeJ5oDo|KLC_2uD5b~kS5
zR+%5w&)zlu*9L%ZQbh?)BT~4d8DZ)DeWo-5l~=}oCR$t1BpYA`o}XYbyTcT~gTBls
zKTp#FMr$u$s)DlO4?hc5b!$GuNWd)noD6$fW~LH2%79nP&rgj#lanEn&mVzTz)2n+
z@cCVZ<$KZ2NTW#aoI^(`e1d@ozdwU?fPrUB9qhH6ZrTCiPip;L;Lc`#z~|e)!IR}K
z7lPQxNje^X918YjPOG(V>-_Bcc!CUQ*o!?aIXJS!`Z-;L>CoS{d!~HO4kW8pl$ejh
zk*`Q0QHZ2l+E-8LybR`G!itLK!9oSt))>v0TiBA4s4Kw#6@4AL(!K*lZ9zc+*v>A&
zSROp!M#QwY7vp5WLWwQoq-x-|n($EKz}aaa($eLflyRJg8W(mYVE(zl8itb@%-i_!
zs4y%$OBf2j`-1|>Jk$p>k$<294*c*Ky2Vd`bPfVq@C+RM(lvds<X!V1FAr;vGpPVi
zm*_ZHvmnwNtp4uuD1mr4v3&t1ZWA?20Xs%z#=7C@Q+f1(FV^)bpttUwPoyvHjLm2E
zh7f}+keZ_cr%#_yUvO}}FX>jZ5*|O97Ux0p+Yw76{UNyo-TKMU?HY6&%*mSG^!Dn#
z`$5o(?CJsA(VwIm`5|oNxdr3zpF<HE6x0m@TqatX?#@ow)Rs-0WdU7{FR^%HlMfz)
zphti4vvujqmtCmGU+ELnm;vwrK|%}AHHgEH_>Ckj@%CWFsH}f3cvJkm9_Dzx4wUUY
z!b9-*(`;Ni@zu9Up113we8GbUpNcgo>*8d9JaT(BY8>var|Q<|tI0`mIXQhsw0}Eq
z%-%o2g|&u?bN@H#d|=W!^2zVM?pvMf5j-(IVUF*<Yap6Mx#4FP-_67Y{t`Re-=mPo
zrRG~p`%vpA*hvCnrDxFK(76qMOtYW755N#9V96qF8oHrNU`qr+<p(R{Q86*!`+1p|
zW+4K_``}Ts0Yo7RwqPcjffWf}H#8J0N^V1ZNcyaG^;BS;cM^%YcVjCH>S`R?<d%zt
zU<P`09?rnlxmaI+L`i5XPF~u75i>7rVPUbSg;E0<`)vqzCM<iUxV#SpJGgi@F|bnv
zOLJPNJ`c8ftikL8xjS6ITm`C=R9H3E>%b&zq6VTQ^w_jU<X|sIW$<U8Uz`w9P%t}9
z{iw85SBe@-xajJw@A}Bn%4+6x`i~zxNKG^9V9rg2A3k}{oD+RFnEr2Qr6+p`1UHrB
z(!>k6w#%`<rr^T^qyuHCX4JQ~g=2XG{r#_DHNMvZ23jy&B0P5>ll@($f4|PcqzrX_
zcW!Rz%sGJz*P``zM^G9X^S(`n)6!@(I`GGs493;*^Gc?lZm^)D9F+4kVcOd42P^`W
z%42Q#`wn)Uyr=ihd;IsTwv(=uyh?JpswFua>ZFNe5bOyzeSJehLO>)Ng@$8ALU-G?
z$1I_&PhRFRuo<zqno;$s!Sg~w985C&{K%l7l^G<OFp*sjxY3s7!A4D^LPoLb7JwZk
z55GZ@d3AqRLW*+RnXvmPZO!zsEP3FJJbjw^Hh!Pw%Ugt|+0kJ3O{pKwV;}K7oL?P-
z=t=AU9n$)bAtpP0vptqjC{?*S8*}O(ZbeV<8wXvXHqwYAvZX~WeXJW=#$HnZG`51#
z(i(iJ_<g&vG%*UCy$*dakDa(is;$8qiBraLr1T<7Ef+jwC%(SNMomKlKk0Z9Puy=A
zgoMO(;6}rN5{`!HBHzYp=ioHP$V5&?hUXhdthT0{5gTu~&TW2%@0Fdg)V0$?M~*<h
z6EX!ggqJc1HR+27NvusxIATelm+N)gc9zOGU28)_$$cqS>=41k#ocP8KF=ro6dNoA
zl^mpn02h5yrx9ft;b;NKRqOU*6^MiX?Cc1>iPO^%bVJC>G7n%^leoiSmVN@3jCA0N
zsrSp(6c7V|X1n^PiJP(U5QOyVs9LuKL2GFP=5w5Ho{Up><8+wdeb;ySI}_ma{$*}B
zWN&*K??)U3A{Y%F-NUm#_rQcjJz$w<zy?-8aHjbVyez=MpBF`6x>+8-y?9(~BUFkP
zY!+U33C}Pca93cCi;J*u8aDGB*-3U$?>HZ&MjLElwi_Tin{04Zb21?gQM4WKP+NK7
z%Hj`xK+QoBSy90WbP%FJksRK!D;{V~Knn(AHx;P8uvnN?=<6C>AseF>k1mNdS46Hy
z*K$D?X&^P*xdELbwbb-<umToPv&GL$LyMBQw-Zn=<t4uosUcE_Pt6M4;fg}>`x};!
zkM==}A3AGA6a0rLLvjD$eP$L@Rkf)ov>GPk7LO+fB8%n|1@Ed{*|r%{Gdg3_{)frd
z{Zj|BbLj21p;!yT{a6**v|7>*e#hgp51pEGodK+XaM}dGY?;MKH9|I2n<6aot%L=w
zZp#~Q0DEC6V)2Ls^otP2b}FK=F~EHdFhp>TORH&71jo&N@GJo^*eQi~O6<dEQh|+y
zBiFH;3dr@X0800OEJ>$V4G{-PD}~0hPIqJJ?0<1=3J&+kADl3s@+pP={HoCZUQily
zs`}Hzyew>N8=r%JT3K5Qst5}UL#d<T$dBdgD6Oix=Heo9YXsaU^%p$!ye)UGe@}eR
zyS3U=2*J=HK=*<w>wIVd905}N2koi};Q=`FigudfZVd@SxGDkvuP{=xY-l&;G`;SD
zlp;Z(k``8{_}ME4n4=2ya~$Uw^~m+J#sB>Kz#GgzQ`f;2i`4_6K>W>d=GWb_yo3Z=
zUnfY7h4KKjFYmt3tC5q>7JfFnSZLwD|6N0&3K$ow3;EcsWDQMc!hSe9*ueh_Y#p43
zpD!<fr^HqRx5irE4yTPhz=<KR73j?18Dosdij4|Hj4W6RQ1)Jx72kt|f<R@^L<2Lt
z$WS!COI2+(B_dT11Ch!U2Xp+Dr4uU*N-*@^8Pd>4pUrWwQVkPir>1Pn*kq*{X{s}H
zp-@d;B;{5EE(KvC(uBdm!GVElpj$&cHb`-X&m%F?j3!_0I};N0{d}L+sQq=l!QDc<
zFwNE0vi+SWn)L@*`slEw5zUKjz0$>KvsWY?k~Khjq@%vyPYp}Q3Rtw|&sy-WBf@s8
z+dM2>F4c5Ut{afi^E8-w*50)yJN#WMgWiW^I-}661U(BPOONA5YPBnwhVomPm!Z7N
zraohO&z{}HcloZ75LDosBO``JMn-yj1tcUiTwe~};g`y4pmI_$`&R%L)@dGpy}rMS
zl7v~s>Sl6MDI8a;m`~5i5g4V`fAGAH{odzIde2ImzOrbF|1gZ|L$nxY;2eMu<UK(R
zL1WOqV_{B*Z+!YCGIFmO@ojLLhFp+~*t*#!8_h~y^~7Fxg90*pNOoey=S?x-QT3M%
z!;}`GM|Drx%23tN4$1+EH1f4yneOiKF$}b)ra!NxeF-RFjGp>chOV`KcY^y*Pf>xD
zCJ~uNUEJDn7Kql4E-sGV-cFU>htwK)F}miZW2pSU1P)k57*6%H%ib*7H?VZ68&)Tz
zsxZ<}bZqOBoUNR1Ssj*0niF)&&KQAwC7`g1o(w<1a1Xm%kIdiPVECRAD|~)bE`5=b
z*yqf8C<?2*lTPliDt1J{NFip5q27?AIz;60)qMQxN6yKQwj-vc4sTCaW(i94{jy^D
zmhS4pzLWfLW;Pu+XGr5V&3($_<m9B^VM1T*=VJSg(#E#wTD}xRs}0k33UD6!FT(%%
zBX+viw~0n>6w$R`Oc&h`NwU!1#(v9u-^)s^MO;YmNRfFM@iz4<i3<S;g&x8#3ZK6E
z*k*~lRq60Y0+n}k@_RWfg+|sY4X@+-m#_LwyjRx_C%byc+JTymjIKo{w5uTAvEp$c
zLz%E-ZHLj}B#3=;A^aFht?PnD5TgQK5qG*R%jz`i*Nc&K@qe$_cGk}Md+E$#5oO>)
zUZ~))MP1ncU(u_*egK}L2M7L9SDwN*6r>G~{D@70{Llj5KZ@{^BNw#{HJ_mD@BR-@
CFvMyA

literal 0
HcmV?d00001

diff --git a/screenshot-07-after-full-content.png b/screenshot-07-after-full-content.png
new file mode 100644
index 0000000000000000000000000000000000000000..ecf1dcf845004790e25dd01eb8c09d8b39bea3e2
GIT binary patch
literal 107004
zcmeGD^;cEV+CPA*pmYe*9n#$b(kb22-7VeHEhXLE-QC??0@5M1=@Rbrob!Iixc|WY
z=`ywqcDeUj>zU8<sTnFSD~<$@3;*iXD<nw?5ye-ppsT<?YuGp7k&$g$^H;A>UrCAx
zD!Zl~r@#G*A%hnbd@3&@Ai#_&stkQ>b9{PwYQx_OexNk_PLV~b6rc}JUzS;0GG3<a
z1fp*{Fe^UQ{`=u+y&U7o#>c?uhb2|pIyteluo#2&BmQ?IZOj?^-=BWOAzE;7LjQgI
z-yQh>{~fI`mQkav?XOyNO7ccwUn2f<&ishKkw74ji0G`WtS%NYhOw~-Qw<iQ9O5gl
z^7G9E19`SlQ*_-WiXYU>^aKSG6q5ft)h?)bcv!f&xHvc%1O&n<(UJj?VPQ2XDJ2OB
z39*VR0fH6dV-ZFg7DIG`*n8!6KBbCH3<$Hvgf{T{Zb{mZrYzLAUfTD++71p5&d=?%
zwY9}ip#}flmJz8ErlzX8y7cJjWwf;kR8-=n*)MiJMAIuM6b*>Gy1D&1JS28djH7Sn
zWt~klFQ%+Tbk?!`nxyJkgp4pBfii2r*+ErQ!u&D*?wl$?5E-9qsX(UH?=6Dn*AK-?
zh3jdb9CCA5@Xa+`uMT1|bTT~eFIrnV;%{{8%$T1h(>|pdAd--fRO)uZ!NTelcXekA
z9nKghw+-i+!TtBx=YIS93(Na+vWyf~RwAq-7Yia^yl(d86`UaU@$(Z>th*+8<+r;x
zCM{l&A3BB>07-$@=Z4?prqdE9kxpgy+H5GMs!fXc_&gMo3-u1M&FPQoT1$Pa)1RB`
zKa2h0i4laKgN#2hDg3};O~^+u-M5UVRr_SWMNSsGR{;Ir(-f2Yd#`M0h)P%(%6L~g
zvx+R(FHP{dtHQtSi`e@4m<ZE|bi$Fe6m9ZHSeY*ahaW;w7K4aC&;`WPZT-ectw!f_
zyD%Dx&K46Blgr>;uQk0Li67P0)?F-CGQB<h{AZ!uR9(vV&0AtMWJ2D)5NW+`zd)H3
zwpO=GOtSwhupx!M{{FY`-t7<P4u<>`U?8cCHk5puH6|?)mYkr<B8n;|&MIoGTB@ow
zK4OpYWzfYTgx(ev3!~Rh7~_MGx(HLatQyf|yT`4lh=|pC+jL)F(jyfOjm=uiC*2Ou
z)duT*K33BS8ugihwY7H3MVml)j0&~N?gE+Ad@{(@6+Vx1T6((hbWQ^7<z_F;>Di7W
zGK@~Ev-M_=C^9mJmDPxJIyZfCgw1S$lkb~?*#a39czA<QQz5n-p*QeY3@iCkYSpyV
ziXoRh%m#fDX^_kPNju?#$;{3y*>raklec(mc8>P;F`*~RwWdyg78t)y<!HAePfSeA
zw1RqqmD94?9*|Kj*Pvh1h*rim>iWpV%~8|Hc(!-*!x$>-T?}3vg-jZk{Ts57<L+P-
zqV%-1*rTi;Sfkf}ICVO`)B8U!fm#YVerI7oLZYvskzzFQ1!?Hx4#qb+1rID^lN|C)
z^TW{S;i#-A_%mCofD)!{7Kn-H7JL0R0yQgbq^t4A?81ZFO!#L8_ziw)i$tS-+P=fX
z!P3%vYWJHv2s!~lIxf3~gvZ`^YU8)vFVWoc>@6)VuV263=y1C^n3mGiY}IaUz+%wC
z=d@`H3;R;3^Z7j&7gv+@s&huhhDL)`Xc@2b@z;|TCnDY^Q!_JcLc$+VjkX(bfvVL8
zZ$+BiuW?0Ue^P{oh9+}6UHtAA-WyA9HJk1UcpZd<*WvTxTcT20XT7@jbdP|VR%O9q
zKC`sGULg@fdbZIiZn4^E8?JQT6^u+^vr;E{eKaqd$v4~PHX276wOFDOE*@y)ax|B(
z^+}VqbW36>5|5Kn%Z^4<75g>ppM$CFUOIYu9_Qn8@TsuMwzg-V984%P-yJ%NiHJBK
zOuZi@<f`g)wU@eSyf+0a6$XVtx8q@V)Rb4FpPbEVNkCUO)0nTLql3rgH1?)gw^QeE
zCLcX0Ajs|RJiBi4e6zRagvVunBE6%-``22dt**9qdVqdj<=Wg_opA7tG@(}e(XTRf
zhc;&deEbUCPKx$F7rV4jFvt%#CwMQ*MGCpO;wY^D8Ag6lqDDq}8H6&PNg8Zyb5KzJ
zTif+$KM?cAq{EC@=n00(_h5Y8J<4M{DG-KxGx}>L-WtraZ8_C#ljW$3l==A?c$U#V
zo@+3RM0wrl>+53B9`+UY4;DV7O`Sep>`L*peuHCN9T<2=dUQBjn4?Okn0J1<CX{b?
zG)Emzqms;K{;knQTVY(g&J2>uS+PIyNl=(2G#*8@{-aa^gI3dbqJ!OCr~3=hk00}g
z<0!#faNSv`)zNTp=9?V~%QYLVmuu=R7a5F4e#WeOK(;<oF++a^)teOY{1?Xa`KemH
zw&2`1#_r}={j<l-cRW+yc-x07bHjlM6TdJ#jplFj!*PY{9e*vM(>pu)p=Z9o{=0cP
zohzOz7Fj5l3D*yc#QSZhXsbVbqsd-do3wJZ@eGz=wZ(~+ho{wO<~za;^Web1&C&dy
ziS$-HPMhy0dOoQ>!bn2!$aoxE_m}%D&+hII;L~tfjH-fyf(~$SaUYK6X-^w!YG!8R
zgrh=;_`SP2=uiA-sx22M0!S!j(*m?-_&`aFH29rQ=Td4mSZ&%E8XEGh!u8_wdkeMQ
zz@ZPYezHHD`M3^ydk5Lh<oDSdO^kZv;nB66Eufc%7)Y>DGXJ}{SpH|C($ZxmCGcd5
zFc<Kj5`G3ov#=_}4%aynH!|e%uYGvKwk>?MO>*zau3kin5U%*$T3$1KcRFNI#Xvs>
zo}>jr(t`NX$y$*0fhaZMPCrJtTuNJ;Y?I*>2NRRw;p%WUl}9hyH}n-nN~7)C`Q>{1
z;}91+`}`nUR(UcL8$>R!$#@h~i>|xjRX999jl$Mj_R=bYewHTjC_-8X{?m=ls2Aa2
z<V}8s(O@$~I5>MJCmC#vE2y|3jSQM3s`rGXujxs7U&Z$2lf@}>T3cIZe)gb{yhk@e
zU{L+rSnYH$)g4>QFCl}A`f|QWrpJ-SX<N~TNR5-HQC~tAT<dby@o<etq3lo0#H9Cd
zg+svO?1zl?d85rusZ^DqW344#-H>83!wDV^E*|1}JE1LxWa5yQIb%5ZgA#XdXPDoC
z9h6qWaOmk;Yie?GHhB*Vb%~(e`ES9BcNiELU;@q7n#wKt;s8t#qq&J8q$6b{awMP=
zdQWkZc{&!+;w=1YiT{gYasuCu3H%gGL==l6?7ZK);k29j>vY#nyTB#a0`g{m_%P{4
zJI@2PekL!>oI*WYTr3#Lp&7f^DJdx*zkF?Xg^+?X4!50spj0GJg439~x~iC8M)cVo
z+6DB!e3X|vNbW&G!{ouyQQyEom65N$-S4i~mWvgu?H*BP&QJg)47~INB82n(`U?tG
zG5^c3NYB4UDL6nhGBu-k&}(jFR8~+x;U(IHN<>7|mvEr&8bDp}+Bpv_85T+H1Y;D?
zD&JiaM+8VS>Fn~7kzCD##wOzNo>1d!xwX|7LHAFeKH0xWB{Ik*G1(8t_R}E<rVard
zV<c@6jJ#Ww5vfw597OZ@a83J5twIY99zNla9Tye#_tv-cR;dI!b8GAI9g*SKk6PNg
zy{fi)dc-F_e-^Ay&8D)ts}04m|DE4IlE!bnz=#LUS&kW-#<mEzT1!9?Qz${~$$~R>
z!FPp~(sD9s>{+2EJy2dDe%>6%(j3oJiKfGJd1;6WGq>x*M+;QR$S?ypnXOdzsNy5k
z#Ra|wt#vMp{JT1i^rh9+m#6!<QsS79kRgxT)9jQaejo4YOR(M*ZS<|8n%x8`4r2>T
zOaB}_h`G1gZ*z~nQYw%R`eZ+m*37gJnxPfw{qjtSqobp9{1RUx(d{R+Vzb`H5XYo2
zdVl9CCI0;PkyA#7URm1BN=IiS-}&z+DT|pZ>s8e>ua&yP<v~Sgf+2Piou71t(~Y)1
z3P{d>7UpL!5kz{*)L%|EI&UG{;;vurE0FLwgd$mo*ESm?pg6rB@8NoPvOagbh!xar
z^L_IPkYtuLfD-A!u}2|#{s^m36C3*4H27Vs$L;##EfHF}2^`$sp|8+3A5~$M2W1K`
zGgGHDIAB<ad%lO>7ykjK=>wR@o8{V?IPz{(nuMPX*2d%hU=CGvb$Z^jOuOm+rl$Cw
zYG)q?P78pffpFWd!giys*oR$&goICa5=xA4Tr^Zv5)?G%Z=j&!T517S7Gc=z3yrHa
z8AnDykh4$y>>>MrNz+S-M-j(qyI$q!JDK0u=pyv8Kbgs>(<bucQgZ~$24n1x=L8oY
zG#)+)>%MWHEcWHG=uYVD9ns|;eYlME*+3J~I#<9h{tgAK3R_acJ4<<*3Khr_=>w#@
znr<YxIYYk1LEvzlOw^3un!qF}co};TV=hch$w0%rQKrFW4Zfiaz&I(!Lq5j?rnw~}
z8Xtp3=DAgQ%YYN)Jwb}H0UIJTG&Dj&69a<?dLQrJa4g0g?*W$Y2?+~e6v(Uddfr8O
zbxlnCki51K{&>AJtTZw*;#ow}_%W<rhwyH>cAr;eiIBJH1pq&LDlDN49+w}jn=e;~
ztk~(%7@d>fgm}-Y4F{9tI~%2#k)%mQR_n~$y&gH{zIfamgPA>61Cv8Brv3+Yz0)UC
z(^&BSVppwPgW7tLUZZX(2&ofOyxa0>EV(usUNl?-015>}R;wkuJICWCoYUFD$*%E6
z?bhcpREM3RX;RTJ`xl4(iNd53T=o)&;M!VN$CQJY<7HM(&TMfuW!3o-l~`_1049t_
zmM|H0a%9t6I5_ez_c>2Dd|v&GcT55goL`Nl-Rnw7P<=7$_QPbiT;SkjRIWDI{j+FG
zj@u+0{KBfH(`2X6reiN}EEIdj9!9C<D0Pb!SW&9mNiw5Ut`P~3L9;uW*eM7lo?I&c
z34=R7ca5ST)DmrXzfPok-x64<QLphU91o_K*d;u;_gC1X-#7s8Hq7VwQi(=rp+C>H
zBXQZYkwrm4HKQ{W-5f8+Z&AFHrJa~qJjZBgWQ@AeN^qu8DXDS0ObB?s8xYK;D8YCk
z%??+CzQO&inN5LzhtuJJ;%(sXe|BxV@{a$0oeeVEP~%f7d-pQC@+?lM<TIF{z(Bny
z+sk2{5k0m1e_B8<$uPpu!K#Ze7QN{*RI?LK;K1}uC`!12LQEARi&OmF;v<GnPz@6j
z=3XIo3BGQPL|X%c(s&o#pSj{%$HQ2KT(Q-amHBc_Q0}~mjJm${?V{nBtR_zzA8?DP
zg?4_@YXY=u2)Z;5uPbWifFXd7MW&4w^Coxa`b>+*Ypp0V_R~3mIBD9ol5qn|dg-WM
zDIC^sB&*D(4T|WJ%%TyKeiz85_lVQ07AxW?>Q8309~~XhYc>ezC7BIG;2>PSnen_m
zT{9j{=tb{#wW_lCLBu~ie_fuDv7SJ$sV^n?u!(ZWW%v74QY!I&^eb4j4{Pq%M=GVN
z^!;oh0_1Y398O?*_69{RRU6`s67KXp=giQ*0dyoz)jv(6-a<B=JN{O9B9+tjqT1<f
z9Z3#0u@4;IVv7?V0l~@C)Kn-sCFGUU(VVQKDh3XXa#5Ax-~=Glb+7``TfUpm20qg>
z`BHxlKl0sD6P8cs4oW-*1O}3*$ja`grA-V;=k<|CB7+9f6F1;<(J<_MvXaSvrd*-*
zi2}uL2JK^+JZ2J8`@S*uX*9hj77GmDFKbIn&9biwr$Oa4qTvZkwCS=&R=XoAi)HGO
zp0ch9U^I@Wa%SdZnN35sDYMd8B=M?pb90+U$4>}Ww3_iajQ$bW9fQ4zbhR2I$%Ie%
zyslLi^Ch6ifi9ZFVvH7tUTZpu%V|@lwbvELXur;%OT;^Kuq;|GDQxZ&e{mCbe;IhT
zRJzbaBK0Vb_Hp(Nd<*vjC34NsP|{+>X6wy8r&UFxPq2IG9-X0xP7C~>{Dr0%I=njM
zQ3q~84C4aIK1xSF_#4G@Bqi9{_Y?$?Q-&E~VfiYC{zAzWn4_?Ol=_7TwPPO9var0l
zFh5>m-X4sK!+G22{kH`UodPfx9K{j<vbI<dQN6`~;HR({(^$+i5gr{JjHP|bwcX&O
z>+O<oJz2S)nnHa>f4H2=hN{v5EfI-B(!s$YsZHMdPRGm33zl`R;eD2X?;F4`1xxe@
z0A5y+myZq$gC8SCz<er>0uV(ugV+B2cXqV%RJDASXNe-kd%`MCp;u5MtAGj5m#Tf6
zHMlU3es^&(5SbeCdVze036v0*%n*`|w1Goyb+sh+D>>@Z+&gr4^WR;*C?D;JmaG7h
zM${yIfx|P*{}K<$${|3;q-h%mEwHy$V0*7ZqdqMEO<JAFc*_1HLPH+_%l3jHduR$B
z99B!j+|_}C+1S$(-D|E)Q&YbW?~y3X0IK2V?-cY8((3e<asNe!Zt~je>gnDA0U`Y9
z{_^ruWRlVJPxIM=%ufy}!*En%%e8@M;~tUD$9I<JCqV6JdS@u)GtKb}vKMJNnqb|8
zTUS$KvEGI=6JbJpCye=nfCsrn<9LLY#XOb?us41=-!~M1F~iM%Ck^!&gdT4byxQU0
z+j|R17I8q-QM!XuVv;4-cx<MOb3~Vj%%B8%#k1rTepG=zY|jT_(y!cmm14r@fSJgz
z0$lpH%l8F6AR$4u=x&oWvgHbZPI-Q<HrHWLy}#DhVrZ1<?t4t|J-f3h6?)V7yl^|R
z&(&L<363$(*4wo~n{ILX1OBo$GaDi|q{YV{$t_2xL_$PN<92!g?NvV5e7<DY=jCr<
zc{=m!XtZb*RPPvBtg8lFX|`9;Bt1n7B@;71H~R)LSo*EZp#7!Y$$@_`p*xo%#E)s~
zV7SUDHHU~#wSlIhRxiOKJ*9@ZZ!maF6W?t|<akhyhP~v7LAOXb&+a@)GJ90ju&_~5
zp?uT7jv^`?1r{-bi~iy%|E|dFx`Ezl?{8uBa56=t5CwfMK0!Bfg*-gFGVHu@bYT6+
zfC_8qC5pn-bc9-hIHw9Z-lTiaO=t|6xa~&A-`&xD*N#rF#|-{X{Tzpb;9&8)hi8#;
zhT2xEY=(oA6MqZi9_^x^j}H%DCcnZ4p6`xgNr;&B1Z)Cg<@0ps+a8)RG&?)n*GE2m
zs2?jS%rLmRx;QtNG#m<e^My_bkapZJ_f%-2{BX+@axq<UwO{$kyPuV**WQ2qqOIND
z>S7BJE<2UP!RFJ34=eioP1<6mE)Un!gR9kY4US3sX0P~pW<^CM2@kjsYK0S(#qkw7
z?cessaN2&|%kg(+nmOplqP!!d;mXoPh1);~*Dcp@lE3=B-eeEeXwPo7bTAO9`&Wok
zE+c^Pb)2;RN|vB7pE6qL%ky7aMoR-dHcg!tM?q=U4$X9Kr@d1kUi9=O&ds~IwlQiy
zB-+=g*P6hfobI1yeD<)frIZbL+81_sygCeL#EBbY-aht>mlN`jQoTN6Z~A_=Qa@TC
z(=)gYxYLgxk*>-^z63lCxyz!S{A1}nKBvE$e*uI-MYH*IA3449W-#P^FXTN2dT6Cy
zIA(d%BLEhFG;P^<c)*w`Nb<4qdOuP9)8n4$<y+&Fm%IxK{IZLSy*7KAkLJ<UsPDA4
zasip_nVA56AJpmd@$&5L*=I0S98Ol|;W4~b5bNrlNLV1XKqC74a4j0nYJqFU$e>g(
z2EHGk*Td7(J^GyN`!c)D9&ia5RLiiX5$>`&z5k-A$UuwjLT3tjik+MUzGnGV^X+$6
zH=w9ZO<akzY87BIoNf4EfBFWEYlKCw@vA6i`{soDO7QaPiiKq)c(T-SoL43p$LS<U
z_e5*}BIGQJ&y&Bde2{_ecH^f(D>&#*ZMN^kmxwHQptPisZ)M&sbcZ+8nMIO&>EWZy
zHiqSNSmLw2aJ0rvvKIm+p2NU{$J<=4Rbn)B{FY>PAA1lw=QWqnK-yH`XdOkQ3XL9G
zi>HjIvT{cviUA=%(!mPlO)q8p3Et1qrJ|qJz7rAGu9fW0M!d&T4p_yU)_IMbp8>IC
zv2>R-R#7c+_Dm8%!el_x?Up$BTULZmL|e#QR8mqxtx-zi8>^upBP>i{;!B6!<qu7s
z-)HA+&OSswfNvHmGEW?r^dVN!U)rEX!lGu%XhvY@eYH}~)sq+w^uigbD6~I`V^)1V
zlA8a*!h-8?0n0l!m@bWve0V^Z`}x#KOi?cscmYSr=SvV<DoBxJ@$!`&@IWLb5*L2Y
zJBd9iz}oF8*rY}c03g}1A?NXe!bW?GsSE=HbJ_toMI-zc8iUpyy9Nr;r;2yWXCJ>N
z8Hr-re^DeLu=af8qubvbP>9X#2)iQ4df{E9REXS>@{3;f-K*>g@WmbBO#bQdkW>=k
zpqn%PSF26--@b}qU6i>(w(c;2OedwL=CaWNHRCawK=03Sz-%a1T3p=CyVU9P@=*$N
zyVvpRU=uWN=y&fRdYG7jQ+MI-4gfd<lJkh??eq){PTF;;{pC{iHZTnS!B_k3g4)aa
zb`KX6>?xnC0|m1lKG*Z;EBs(}0fE$s_mq<cm$vjT6I>$;LW~<pg*|T!Now~>Im!wf
zt=q+JCmsfGX>oT^G@E6)?L0+94%$AhIGC7CCY4QBCO&U|t|lZRjY?N6R+P*Y$Aa$i
z!Qfe?N=#KytI)69i+<MF7VqZ8?l_bG)mS!KH>TmMAsB-}k7=vPOhF!YSoC}m@k4D&
zF;D$E#0Q;>jI1Ldw6wIe4U^cf*rGpd7ig@}H(IUEGK%Hz-~_)!L`IgXl#WokG&_&K
z)qs7uUtcKK6sDy}`=dCgkR_AaFtbQ{6XEr!>Z~9`rE(~n2L}0S6GUw?G8)xQR(-C+
zi-%!HuT%ue0<1|QURP}FJIe~{>dvCf%uFtXgJ_ao)e5cja~eI{pQkg!g1OYA*lpqm
zGx<FMY=yGv8Xcb07wY)hp#{qnGPwVQNWZ&CAV6g9G11XQ7$f@lya0R!P;vV0ti4^;
zMuYY0RzE`jh(A~B-9IXpn@d38Q=Wy;+goES)#rM56(DV9PCw}_r^<-b;Rs~yo12@3
zsi`){!<hg$zn@+gJ8<YN@2$7ugI&&kCCjtB(>BEIIc|9dP(Nh-{i>xkH_l@Rb3@qY
z((ip8;dbd$pPRJLxNT_A<8l_|_IFS>sp{$_)SKK$V`)XklUKiNm4{H8y_Aj{I2XPp
zVxDHOkDs@p5Plepe7QJeOhE*A1fa#h?Cf9CY|t@Z`Z%@i?9K<HGU2fr^e(a#KdRgN
zaq>u!flj^ScMjC=yBW|VlOCnyR;ZDr)pH)#T3teey4gqWhK7`r-v@nzj<wzDlk{Au
zzuadOKn;s?6LP6HpG|4qczTgi|KL0GTNqZeXw04IuBsYwHeU*h0T%MP!{v-mq=4%?
z>PaQ&0{^kmyla7yL_v8+_Y26%JrwRbZLZalaTLGkZ}8yZ-g9#nms*nJM%@v}l|<sz
zhXC-A#_I+zHdItZrOdH(hOFdvv9l>IC~YvBIQjiAZ6B{kc2;(Ul{V?~t^4aRw@bU=
zg``bC`JbdZvAwXw1Y*r;$90~N*iA|yY{>#@)sig5Vm|{+6AcP@AtxD3%x>>@v{Y2p
zU*8rKe5lO4S0PRsWaToZ63mMNG&Pe8VhI-wnlyP@8SJ}Kfbs9Yk$F8_$?mRP0U{6!
zQE#;QTct0ou3@%ZvkNRLQ1D)!p2$ReJ+pfH`Z04{*Wf)Ow-48rD#~coEoP%eIIluu
zo~b8b;&AmY!Q2k2y=13ImI{LN60bbht_n0@bkS7Dz(NreHdpj#yVx85iN$a+)!pr@
z$pYcU#>EYrNqGoI1KlQh&=;!bJ11pftyZk4sAz-Pv<2ueIm92TYiWa-0L|JCR~8&S
zS*dRY(r0nq-Yzg~0I&vJ=IZ*oM74ZGQ|-QO%j@xGch*bTVPJ4DT*+_WG3%YMTDelW
zia#|iEfsC)Qi3nboce_&nlD!+QP_ak%%;k*RW^i;yK(Vgkru)Pfxu=NFdC)ob#;76
z5GsIUVd2vuL13jve@il@Jcvnz$B3ws_qH*_2QR67AS$y9ODvN~Kc~GteM|!Z=xw{`
z(XYe@gNj2hfu#Ot@g-&O+gwr1Xd=R&{jn7GR?+aiEvDwVtir<mgM*>PeXVwPq+6?v
z4sFFvw|!LE<r?F-<gJh8A;LaDkKH>vi^3FvP)Z?4@L~l3iUf!(rgg@QR4h=XE5TGI
z;)CtQ0w0=uUF!}+t#||>ti(TC@d+_q|6Dp!^gDpSPgWZTe-J2@E@U1uOryF1I?>f7
zkPOGAw`@6IGQZU?H8wsDT6nG5^cI=;525Y+4j0ozhIANY{D7eCKm?!AoTK?t3~I$Z
zQ1#)M^nH#07R=p;4!27U9)$fdXn9LG@xDC&yP=|xIMZI2lW-K|&<+p&nM1$W=H&HL
zU0ODatHbwfo@HO$JnBs%bBI189WSVPEGU=5<t~+ubpM|g@Io%EE7$IH`CF1z?~`&v
zHS$Iat<k!Hf9nJd#wcwfL*T2;N95v#k_wI57RBkF*V-O`0QQaMv<29A`j!aS+cn)7
zJ<{YGiY(k0_`G+aK14%NKp3=ladmYCfL(9I!NCIy3v2)Ml-X)21cO%fq8&^gc8j^+
zHis4d8_zyhc2-u$z+SqKV3bMaNdN4SP+wp59U1prECRcKCZvfMY6sngoD6n+Y)ph_
zHSN=7(};0wsGVlL#rDCH*{>!Dr%hfPlci8rTr-sF$Xf)=3kaIa*}7({vv$gs@3_)f
z3$RbmwG>rVZRShz9jh*OePsA+^?St*yHS9MRH|A&0F+;#zKpU&0v>*`O9h($@0}~l
zbVU}Ff6JrTH|kn~7S$V7h(%YpPF-9~jF8`(SO1P)lY`x2hs*O0*5mQQtm9X^hgwR@
z3cK|Rv{ME!^;OHgBNxB#@j4xmcT6MUaVOB4f|Jl;I(bT`>OTM>u_#Xw424LFvkG}u
zF~JGxMLl<KQw)0F!;|T(OBG@ud6!d^e{y{FLGK_op09rd+W91Rx;A|8T#$wN;AFXE
zCCf&jv4c-kD!6>DsMP{)j`(Rlg+tMDfvafpceEsH7T%=}S8-O!ky`2WWUO<w&Dj;o
z$;5~;CCj3a1Zr~_u<vwR_j)iEfoeYRgJ6)HM)ZTSfRxmqE?=*lBv5xnetvIk`+zL-
z4w+G<WG+v#2REV$=^|!1EG!H-yWKA@&#AA|hskFH2>Cpr-Tm`%m&mWLuKJVJ>@XP^
z;|vBO%)!(U?a49%lf%DvettfRh`&1ynw^Sfj7_2AiD;F~DjrxtyKxYSC@5*9yLDg_
zo?n^kyY(6lddn;*wmQ>8`M>;mfvY{bzr=!M_fXqm+}U8zC?D*NYd#4qVU(AZeJ#kY
ztc+qM{OnFgLld^jYQHg?XbY}cU#EB^?mQlcRbQ(m#mG<UICWecP8+M9z+$kfC>eC$
zqoI+vBM{xD^SET?Tx<`b9KIdP^WT)BC*-r=f<BDTVP|7QV~9}5lh_<hWDJswPFCQr
z4Q+8I+gw3AH#+R6x)Z;6T~{dEg?W3@nxoHm<H7Rw#2mfazR|Cx<+<ZTh_!POCI1aY
zPCViT<7BZgL|<Q;r8Zr0n$*o!t7r0ViixD8>?18*0CbF0m*(|W|0U3p5^jE~`WF-w
zJl>wss@LQl_;aw@t4bHKo2CAJ3=F*P@czqfxnOm=kt-er#HHTpJjpmfFYM%&4&J<Z
z^R>jc_)AMWQ}LmZh@GPScb))X?Op=IuX~;to5wkVOI$rgVDIX9S?MX%L{x$un>^b|
z9aqw9^XDn!2(@OzaVYvAaZhp{7Lrv1I)(I(MYLqcKN-Rx8BVuE0osMhcD?OCGdI9(
zdg3G5eHAT%ACp%Wggg1|*i3Lifr)B~VD`3g`H^=$o*T8<sMYyg#-~r8OJ@pkMXB0%
zOuwrsDzeZ=S54;m0luVc%KS9u&OS5*YVqRj{NFfAIeczMSKyGioc`J@;BSKt!=ztn
zbE^f;po2Z>c!>&aeZ3P{q`mv@z8?alalr*AvV*P7sQan`^ejMT-_NYBdR**K0}IQz
z_+3LWaK@O19rcH=urPeT&P-3MR~rO!X%~Xxjf@;`b91m<DC?dXO<^y+*qP>c*rUrd
zdfW4Dz67I5IzbG`U;#UCVO}(*-VAW=*!AcEkCxZ#VGaygEv<^nRo~IzbUT2R!T6py
z?w0@`X=!CeccXf;-cI|E7=~;ZCGU(P?EotElbK0r{x|=3A!X$cWFcCijg6JX#mu8@
zq@<*PE8t>asF!_Z=1ZW%(UTDQ4QQN$L+x<`#p|nx!otFY1m|i4QR9T;QCL1cJ`0PZ
zEq6$=jGo?aAh||Qf-VYY?6wEASbDzt2oMQKO|{%B9{}V*@X2ZF0viu696l&i()(?S
z5SbJ4Y=_V7MCQh;Oo>D3+%f5(JQjMd=)h=V76d0JCqQM25fQUhnyTK8CSXhHT?|Z3
zMH`d2qkUZfumR8h-5lZPmN;B;fNA#yPqft4scC35WFiyNWH5$kcfRJ71hKGE|MOr4
z{Gy3rg(k8@fl6EhQc56PR`t*`2tq|WL+}4p&t2grh9d?>{P{WT3{x?*TRthycS<r_
zD%LoXVreNNwqis<)PS^Rug8hOC?b8roo%6P#Kj8j+|ts~f9KVQKzXXZj!j6oH_tSl
zEcQ)vK%3BykH#dx+LyRUPC%AG1r2*B8O-aH<YYk@4Rv)u+!y-$KTX5g{^$KDbJOuZ
zf7aEr|NRSv6N3h_A1aDan^dgmAMd55V8F-6cnlv)8vh&PenWvEY|{^Xewg4bpA262
zZ)s5{x^GMvVDXA@2?*$)<SeEUMx@OZlg-To3FZI21KgtVa<pmb=$-&J25K2D?omkz
z4Vwx@oOBcp1_l8kVK>ib3kwT!+rykOBlF3+Iw4FU(p&KBKW}I8cZI7)%QDKzeG8+D
z%$eBx7D%LMYV2A|<dxP`tg|uZ=6;}M{JX@c&?IuM#_29cv(pM;;o;jQLA&lvu?j!4
z&Qm|2=r{BH_r=g8|9!3C5RQ&zu+6558%4EawHAsRi@6H>|8iWx|L;Xc@CHa3b6FBC
zA7yMN#>S?6Ny%aVm%So&7@mXovhin8>X_pGzi$A1iw|i3zq>=?V_;|~EF^>jQ49U?
z!`b1os~r^}WN(n{S?%9-R#tYDm;c8}lC|tzUQjVHC;la**4iJ>N8<m0RLOsuS4d~r
zOr7~Gw&2beP()5n^~qXpPj~mptXNU_pPcS%KvKwslq?q>gGEVE(EtbP+GGgN$%#GT
z^$waO^43IpaH|Uu8!N4zkx@uyCcg)eZQ)2!E%FpUKKjE%W%7A-xL=RZ(9qCn_YDqu
zxVh2N(v}uc0ZEfq)hgu24{G%qt~m7WZW2L3K~NoZP(vTlKKTh%J07kS%IShEMFNAi
zqLdVEJj@702$SyX{biwUC|bfW3}81G&ws^1&r0!RN~ZMvS8LxejY!C0n;{pwsqG#p
zgMA{Lwx?Wr0&+#jru%pRd5L(%7)N~eK<4?RZGt1r5VJ#kd@|~IFf}rAq?Z4(T$>15
zA*)FQ5ldbaNYCYpIe{cx7LXEV5UirYu_^~-_W4P8cwB5iuz;O{UvKhPlRf1q_P0=x
zA8kG_)02}v=fC+t<_0tsrfV3JMuhh<ZfO6O0I8|qcrr8zk@wU2a_enKq|C5RJGTQ7
zZK;8YNdc2$H@0GhmU)8kch5i_G@pU~enIhS{I{LZNJx=k7$>5W(b4i|97*<fauP9Y
z#W5ecaR~57m`Ojn+FG!(qW>p_C&KZ)B?7G(>)sis-TUuEqpePrM@TGGQWCbCt7k}9
zSVKd@7GEr1J{FKcw)ghlqoW(z*o^#5Pqzi0<?`Iz&QvzKcvOb>--q%T1#d5}&vO}A
z;9PG9-vTIfw&synTpY>-`*JW{%WBF%N=~Y*qOzGm#OJBe?(VSO=H^N{{QGyb@#q4`
z&~2IK#DttfAz(Fp$AApQDCu^3)2fzL74F{x2Mh$!Zu-L)1L2eZ937o^MTaCZX!CeI
z^b{-YYin-^s*<F8F5a9xg2oJw5Z<Non}y%|$;w<Ed|bTl?@)Bvcv_wiO6?{)j5^J3
zKa&~i`}<j!;n;e&i-YY8(Mgq34ie@z+C5M>u7$re8&Am`=;+`t2%BRO+wuwvTMY-F
zFZU}KDzqbYm6KWW^<r15^m(3P-o4wrSo^iUx|$d-iE?ptyc~Z1$>$k9Ry*r^b;C_%
zMFc3~&#nh|5JS^St>)+ZOEm-p2PC9xwMwnUiZ#&pkXli<=+tN6Gips4r|0MUW%ipL
z?`sfPHjkI3bUR!v%+0Z}cVwP*MtK#$H1F3&Mu`%5T3_$T{{j~!FE7tT3WR~<d?^Ny
zcZ0`d!+LxLmdV+g%TAwtAvlQpyQe+^kqL6#P<*%Nr+HtfK@gM-t_6*F%jRMs;QRNi
zILh=N_@5$ay)FmFyNFQ;rJk99DhK`AX2aX=a&K)Uo|ZU9a&7j515_i_r!gttP9K5I
zp0{yF8Idp;oVN$ltgcD+4!Uiwag3S1OU7))&`qtK;@Oz35fr#|n{iqB`N`5aB%qE#
zO3(@CBkcY8ZmDUukO`dlfgmXmZ6aDTdEKgA&h)7wRm)QVi_RiNz!`P{wU8wij+>Wn
z9OHg%A=CoGm9%VZi0?UUPeWdThG3U9GD=?Z?d3Ta_}<p54WB%JcX&PWJt1H*DA$?k
z7mW`MNjwEug+xY{E98F5iIIRZ2VoM|qq*i9V{4ELM7$3CNnET_@^g@y*o@P9h1%Iu
zv>aE(P2$%=c`8*YRi%0@PP|D6LjBHU=4W6Zz|7*08K0gK5x?(8Ktx7P;G?dSF*5oo
z{Y748ac0K-{CDVqKWz4t>)P7ts_ATjc61Z44{3Be@Q-$ZABevFa&t0RZD=YLPt(nq
zp!=a@FIwk()9~$Pk$P>7w0llY4u|df-<y-xFY)*qjW%JW-(#<CQGTXD_8+cSb8>Sw
zHwt7}pG4mLj^fg+L!Ee&9LCkGF>r{A5ryvZx~Ed&eK>#>Li7R}!m{K(mBuwW&L>Bx
z3cTaHqpM$LLS3DOmlui@@&)}hGBR|AJY5a2e$I@<<82#kuQb~FLXpS<RV3Mr{9E7n
zIKf4$!0R}hwUtDAP53RCu#kOTLTolS;u!6gI)8zl-R;<WhoQjF-%xCfjq{C8%`cjL
zp*U@Rh5oXfE6S*Mf`Fs#7RfZbwK^EEUcDI@=&!e0hNb@i`X?g7W87-7w18qanipCu
zHQB$J8?%<hkPCWShc~25F<*$~b=Ek@rK&d95Lchic6VbsiGNi96<D52hE3z;^%tOX
z`Kl~ERxmMM5xjx(<<2j+Hpfa_Wn$^-Ca*sMBO@10tI-DOsjikbx2OoV_iY~{e$n@y
z3+GKg){-IMdgF6dC8nh4WyOV(E6}Lc(dw=vBeS!!7j+{OXh0Yefhi8Y=^dnZaEa^X
z@ir4U8T_8EK1t$LrCQA_VCXo0Ynf}b<s^io*#NzMpR(U)Nis|JJ&6=M2F*|ZI#>h*
zwWiII|I-5Yp`HM>4SL%2Lq)@F7~%73v19#NT|GUK{-}?*6QnwK0fTh((eMeHY2tSY
z$eaapd*vkhoUG6v1H??lxfRb~9ckwC{FF=?MaYmX8TZg+`RhFVXV(&Jd5Crh5S4Q8
zCbt7FK9Gqp2<8Be?tA9Pv0kMQLuZaofw=!Vwq<dq*srUr)>jOgc^tGGM0j{X?)yF(
z*iIlxEkVUV$%hW@b6BTbcvn@;iHeE+YZHPAzyZ!`2dh1_TT*{zS6!i0b)HldUT|G%
zM(>mPj8)P|42p!9qa&hKkli_*%yR}s93B^HAs$l}W#gXUAqk#-wMcG|G`BupfJ&9_
zhE3ZgE1@Cp`qsKK1#z+-i=0rHalpTMTY~}6kPvbg0~jc&PoD8i@4FP0>n%j5VNOA#
z^}OF2j(_Et*zESYqtr|Rq3<0M1sNJS<Vk>c3av`jo=DkF-|^!5I(S||SU6X^6|-t|
zt@$!bG5?}Uuv*#wp#nR5r*qoYCtHnjO!qw4M)0$al9CcHkL<%~dN4Me^iM4$KeUfw
zx@`v$(JW4Xc7Qa8APCEjfD;q}SV&-dJAKK8orkMu0OAb<vP%Mz48bo|rWbem?lML1
zl%PcDpbMAsl~h#nbvsXgl@}Ijwzudh1bjT&m+J(ree>q>(w|tGLTCrAM&c(!G%83+
zEHz)gI+pqsls4j#PP|gdgwUHnm4f~rg@Fip-3ziad<g=?U0yqitZpE9Y=3hsnqVO<
z9g)IjPJE(N_EjG%QL{-Mj4*+autPN!m2!DOGj&)Ll)>=_U~-|eRr&OADYX?!`a<b*
z+x%+kSQ7sb%FNPpd9NadDwIyzU^0&1pIz0^z`;~fNd4OUi|POORmd7Zq3$W&lk|Py
zL~jw<!|>AE_x1LFu@x+$nAr0hp*{K;dgF6>fwraI>D?N^A0b=h(xXtK45#d;&-l%;
ztarw5?2h)Z*f_7E2Y~{JMyf-1y>WP+c|7An>de_<84Z%EG4w;x08I*`wzPJF7(0Wm
zPEuL_2LE@I@g52S9j#GW_bZc>E_w-z1)?P<eJ`)Ob8|B@s^c_IJCm^50aBquym4}E
z{rfFwOiaHc+1>Vp*Nue9#Buje7cu6*ZutZt-O+q%jI5D%I`@3PesrkcYP#nuob$4g
zyDkf0^vnXSSQxYCt6Hn`^_TeLdu;&^=;I1LK7M=5ulupMD~Vg5W#I8cD77f!AWxTy
z6zFJ3R5K(o*!Cj2H0aR<js;)E{sYG}1&JvAqEVPW@Pax2AXsqf0U}k(t$1uj>712Q
zsmK>%bs|9Z?XDU0Sk5OT^nSYAWSLdAyM9Z^>xvkTuKc>p!Fq+w@Y_d__2K5`j-!bD
z36ZNVK=@16F4oppfE%Z*x0DDbV|bhU#ZG>5GIeHwsG1r~jDRl}*V6M#F>A{hSq&Q#
z6W6r%{)Dz~gZXj|GaC)sE1vb9Kw5OAkr$X#_Pnw>6vT*MnZ|VKZxK>J2=>d0k^)4{
zf_Sp(@7?C#y>TAX{nRQYB)kR2<R!iBqor#0(O1zmz`-d|%zsK`+&Dka<aR=CEVJKs
zuc$Z!<6-!kB*PgxmCs8shdJ*tV@u!zTbk?&dUD#72qGRM+N;Ng1AkLFUZ!|B2_^1X
z?f;yrt;*=;xRE||kpaC=!C>ynkMg=-Mbs6hrVfs$x+r`!?vZC!nxocjyQ}@WJepY1
zG%$B{+UpB}bOseAr($)<Dc|ZFZ{bC#RS|^N@(}W$Dp%^16Mp9Y)#0@<KK^-HVg||4
z*3OP;f+~XmUZg-Lg9`N>AOlP>kjyqHYsE(F9x<T50mxXX)2v!_Zb=U_SE#TCGMtlv
zwA9pKl`)rN4h0Ap3w8py5yl5xr+tSm&%a0J=IVff!0@TVa=y7#zC=tU<fbAZ`2c%H
zGwgPMfkX&pU$CH@OH9De@&ZDRs3Zo+o_FV=ax_p%800wU3BqH#pk)HsqNnESD$*md
zGXyZ@XI?&`r0(Nk({MKsP<+Zp0s37khqazr5{dz0l(>Y11URpdjOS)ld@}<By7nvJ
zlJOIk1Q2k&X94L#waWD{K7c>^20}m^z5mxnTSj63k<lj%mi%rO;s^roJkMV3&2*IT
z5EJMazB!eoe3DWfx{h?Ohz^R;y)0S8+3^l9arw*IYU<aQ1V`!e{{7)t+n)&)7|WCj
zADSH!=jW8eF=(G4+lg_MlieQ%DAy%2azyDfc->xyzEOYcL1x7W)~_i02S`_))6Nie
z01m4OlPB0&gS@HG>a3!ye{y1tg3rZg^NR@p+<=%WM}1?JGO(K>mE**38j<}%E|U*P
z!95cdWn6I<GxtiUD*^^wXbCo*9=GqwGlkF^I0EV#89_q7zN(5zgyDgQdm(UFUQTYZ
z`*jBV{-mzk--naFP%>o|RwFn6<UiB7rhq+`Xf_5_R5a9HmV4Y1uB^ZdPXi<1blvM5
z^!e)Q_cqIbi}vLb2LK8hOyT?Ld%cW%y;z1+NR?#VJ2A1KXba#6NC$sHZafCTXZilO
z@Yub)A&z|BPay9IB|&-0GIPA+SnP58LxN_e!R2fd0Ih8OEf7U@Ipqyt`Eb_iNG|P7
zoS4DqwVW@d8Ilh~*-o!N6KVz`crel%O*=FB<v!0>{SFz*i3$k`9yAUlKYlpb5$ExY
zBzF3A0X|@lg_h1!sMDU}af9E}E-YbdtIL(w+F8KzdKfy+4Q=NC))KL)V93ogS(FN<
zj(o_tWB~zbs^3BY)<zYzRa-Vow!Wukt6AWO$D_Y0`1n>aLdvspX?B2;3grVgjHakH
zTrt~z`+<opYY!gk&5k^vFpBEpWm?T(wP%#7*;Xjz!b>yDq|Aw%3&(#jp<+M)0g=$!
zUtnlabZ_=PUQU=7MS;y07k3cWbe={TY&a>bkY<-NhUj#8o}#N<8m;OauUZo%C0-Eb
z%d%W_F6scVd2+5!AeBSL<%By)+I4PCTg!$d{7x$u-_o*FHXY>Xz7h1ivc>CLZnRyD
z2*>Z6s?==+xxX^aMhs3^evhkzJ}im86aO{y-XH=l0yb=DLblF3Y!0ih`(w%BQVC^;
ztBt8mMFeqX{p;;K!jT}W!N$UZ29JO1*NBh@CxHOF4fuNR9EbZ=7SL|5&Nc|FLFnBk
zGBUCsYN130ok43fp7!r{Fv`^?Ad%-10+|AZA93O0h=wAkrkIAvjgScu^YYvrHYKTa
z+RWBk*kdxMUI6=`*I@fHz?bmw?`m?P;^O_=vxRO-tvHus7_17n=%pW<>>BfmR~D>V
zc_k%b{caL-8G(!LyiDi-Y2E*_p-w-)CJWVpZca3e+epqDr}*@t=BtvPp!u-aT#A75
zE|4rTe#6Ynyt(<_lQ~oba*HyzxG3|dUO*#jh2GlAS6@U*Dz5S=<5Xe>CIEc`S=dY?
zw}*#P22S=TVEh!xsy~P0K};P)D7Ai$m3OZpA|VA<NL?ia1_t(GCLS;hagfK~;>dEk
zrbVyLBx7P=L|&0gQ+86jo}=yAfu8ji4gJFh=xQ2kvR%`wON60RHU4<ReML7pbRF0}
zLJcHE2TUVmBE_T_XmWJvJxK|d{~lJEh>c(L>bw1PN_Gh&(l~-$bILJZL5cqeY=Wqt
z-Zab5pyLi>>JWpc8C(b6^!y9%|L68ikk1cwuiFbn+3Xi_%<^v>o~N%LO~?7Z{O|c?
z%x1Wr)Keou@|rii=KoJf6Ji)LO;Avt+Hhm_8+vn|7efqG)&EF`&BQPWB$esneN5nq
zyEw5FAf^6S75wpwE+B%q2Ht)Be=i09iFLxXqn_~?-DPcr($IGd_9uQKV^LK){@F#N
z|LKDurmpxTBe=Biquxai$5fK1p_bF~>rs@Pj&(yWmZf6K`~UYsNeJiLY)>4W#9fj&
z;us`YWMq2>huiCGLm#}n*P)UW0$@K?YO1)aE3_0A7qItRr>Cds7Qa7TK_KyvtD74*
zB$?HRq!3EhjOY)!kx@~D1Sqhu28X++Yr)UYum3B&`2_lipz1goKWAHswD;X&j!v31
z8p-x9KR=h%6DUPrQGe$8j#PF}D{xkFyn~wkhgx32AQ-0RH9NLoUVIc$C!KnY^WIn>
zpgSo*#R)><0iH)PFDyJfkle&HVB`q79WN%*VTPf(T+jQ0kXC^dGdk11Sh)ehoQd+p
z`DlQ5eUjAxDi(;(kg;T>a-Ml#9pFeIM5_cNr%Uijb6-&Qn?ZPg{{Z4Zd_F=Q@$Vmn
zkG^g<$MeA`ng6})%c0;HXlSdi8On4dRqK<E8H5S4<)|ZqEz_3QZmk@>7Ru<tLk%;%
zYb-jUwyB`3P1NM=G*g+-Ki?eTk%h29HhcFY@m#)YYW}_5==<bAF`2}yBQ9>a)?&@f
z{4L2BtLI`Y8Q~&b24?=jac&}iR?l4BsN3%lH2GS`%^k<X{Yl5L;a}f>T~abJ9RR^4
zEX>^FL~6qxP(t2SfZ2@>w}4Ct5YYd=FWmhYOUf6z%a@I;ZkD~C7wX8DJAAjXb@yt=
ztehd6=2{P;rKESqhlww%^D_z5G*#8X>LP50j9>Yz7m7)Ft|Qjm7@;Rh`*RGE@?-4E
zv`L(wLeKfR6F%puT9HO-HE$VMTFy2>7<uY5GHim8%k{{gt`04yb1<0}c87CcF8AfI
zC4&$Tf&TWe)t?GZIoM$_zQpBoxfe-CH+Js}E)OuY2|r}TC_H1*<AZU2@pNBGz;k1W
zWfg@%yTWNcLrhAF_HaIq*SNIA1ruBYhEaTcU`<5J<8m#QeOOad6Sq?dWt>KmJ5Yt@
zTbydqDJLj!e|P&20`|<H({>Pupmw=8Z@bzcDj_ih*)|0N^61a%fqZIeYB!G;z`p<F
zNs?uw+xY@v25hBn@p-8(DY5W>SATLma_$O@MLs({Il_~CsYT*%c5tH!<>5bm0L9rO
zh7=R*OYE-@VTJzoFjsuZsN3P2Yc#wCLh=30MzQdb_NTuv7%PcZRy67@)hbm_61DEH
z4o3qKChlxaRI{8<EP&PT|3yt+zKbDA6NpN$TTA0rrUxSN4*vY1NPz>J=z=C1YiJU_
zOpmhW$z@i6D!jP74A!$*DANZrWFK9-+hs>)rfxC|hZ!Ae)CJ@|)bi^54z@T*yhx>#
zB0F2Zcr4Q>M`ma`w-9)kSeTd@(px~!_1DC~!&@y<_?%|&@@!ZIwQYYgol8b&4z1bZ
zY6-LXe_DW}_T}CWuvcrVO(M44YgsB$>)Z+edJgLq`G{bCjJx~OwMQ~>S=kgeVDHKd
z$??{K9n3%mNJ>c9yFKG)&~X%d^{c7HsWg$%c2EhZ*M(pg2hjS+{-m%KM~Pu3=TVF?
z^G2Qz_PSl<&8{|{uB@y8p3$#;uv8r%7&tX|3j|pJH`dnpfy$;_q^DLK%R5ks4w_aU
zzhHs}tddpIk4Qrt{risvm5@R*s=|QktOv1q(>PoNys__lZUNreF1!KlyYMWU4w(4e
z6TF7I<kz&&t{3V#gm9$vfUt*Z)YPGf;Fes-`%7cnV0oXc$S8YeV<IA5W{<SmZoJ3C
z`|}#gJ*NR_mXv7W`gb?FvgV(~N)TPhiv396XtRc(@=9i@!P?;%WIcEySmnI{yt{xv
zP5?WxXqU_E2v`ozd~b0M+1@W25v~%%^nSegTs*ghn$`&RP)NQFiHLXx)ecZqmS8(^
zk$hq2w_W$eiW6e&41OQ4{R!a!-{XLSElhH)-@U<dB#kXjmMA2?rT(N_kbt0|FQRyG
zf^V1s1aWz?S{SPal7e*3YqW7x*mno*4B9I<r)#^9F1D0~qb!F3PvC1ZURd;nypF_M
z<aav4=ky@m1#+wJ%pU+rfJ84GEK6McgjysBx+J@W^1yCDusDeM^02Vb=pzdRf?zMs
zh*5tS67W1~l)G4=NlO4o`|RN?QYWFQ{PUc{_cNvtkep^*U!7k9P5TK|q7o?J0!xVa
zOQmX+vQ1yf8L#i-l<VLGYyArMU3l?^DWALj3qdRlfTsZ<cEg}#eD4ZM8VvkRiGqob
z-xImsR67+`soT0q0^-Rd^_GpUo$7~$ev;%~^3hDu^}@jk+}tZ4r8G8Yz#d<c_2|p<
z!^KLx)3+5{^R#M`buqyEZ>*!^{<b49q{bE)!pV?~zx@p8&*d%3@l3vUZ&1Bl8rS}x
zKZ9{$Y_=<PQlg^yYLyeH6(En?TRZZfK^q;Nk16!^Wsm#s{jjzF3?I%;DgUZN;&s`G
zP0I^pP9EbK=EVk`|5oU(vaGMoZz(vltSniN#Pdmg>5462m$nR{3TY9HFSt2%g+n%G
z<}Vb8MrcR3zr286Zlwyyt6!@;39CdUAOZj*!rWlOO4ul|u$3Vp-JGnVKz}Fqk4jF4
zJL+coBy>5J#QZ~3kC-Q$8zeGbF+2Z#Ao%+2OFYeMAMARQag8*yFMtC0wLAhX@M}$$
z35q6aj`eiT^iOJsZ1kq;w|?iBrr2A?k4Qbdfl}Y0!rp%SaQGq8kfkfb(89tGp1Wdb
zXox8p(RUr#7j|H0&L+Q^yc|9$x(cXJ(30RI#~E?LU^&{so=ZWEUUCHXz$*}zWdc(O
zun=hjk-&Jgpj<$i@0#}}bzh$ZrzM8ssQ0NLiSz@T0O<V2#ktNWCA=K0th1jS5;{Eg
zeR<x%X_RZ^gKe!}WG#N|K~*G0W1w;jaocRy*V2Yx74rGShN-?gSO@sJ&UQmlMut7V
zPfeI(%Rv876ju)^h;jnKID?5vMEmiEK3c=5DK(Wx*|Nv#gKs}x6mtdaG)wm5fgzNC
z8`J&8&)oa2{#{I#kx9l^I6C=X-iEko@f?q}v~bTr$WsiZnP7ba1=2aJ=~A?l@?8ED
z$ne~gxMC9v+RrL@hJB#^fQ}wM>dW$9TxC>EJod(U!}waNnn96WMUBy<Y;Zx_&_323
zO<C70k0}VXOX5I}1XidJi;gL+{cpF%5(~R=HYYVG0~r~lId);8o(szMItna$d^NSk
ztSn-CixEHs1lpOp!zw~nm@Mx3z3;j*pakEHrb_bymjomQL^N>_ZK@*g9v-&&f9$Tn
zWoaN*|75~}ednOQJ#g)c(q%LhCm!WerL3kFEUfvs$kyTR&du*b!4jWe4PpEok>dXR
z6cjx~H%}f<f<d#?Ee5S5SFHGvgrn(Qw4ku?Ho$3IeXINXfcF#2CPhna#9;9LeZ}&-
z#E2AwN_r_P4C{sc`&Shej7<`9G#VUWnNc_LNwJHDeYFd2X~DfhAq}4Jt;cj`I-O*v
zK^yZCTJ4&Gp@%6wYjrt8Z?}}(m1CLy;_z_wR?DQPBN1*m^>#6SD<&vAwv}WUjXj67
zxUG_ciT(e>+*^2MwRLZx2Ga4;jkL71G}4WvfaEJ3Dj+2x(jh9HA|VaZAf<E(NF&_}
z3P`8Kot*l9_aC_9o^i$*g9C0~_Fj9fIiL9i=ls%cOg4qZ%lbcmmO6d+_1)Yrnyd$;
z3Na_CVK9ot8tTmsZB2_gVIPkydSCY_ZPR|Z`^|bYD^j$34-AM!pABKqle0x#*0r+5
zE2e~jgJljAa@9p=H`7!~f{=lPR1?i1sw#16kG_09DdPzVGDbX4W#e9LBhL*?JCrDW
z95+rX**v6(u)QXI!x^0(rA21)rmo5L>(^P>ZSOsH_y0n$_P%s$xhEk(iP;aZA(zX+
znu?!OFdlU*9X)+C2HWblGDm(J4MSaBCKi@!0%lCvlHwI{u>`F1U%%dwk&(%8n{9A1
zk1mb_Hcekb{}s1e@jPuOAKOwr5@k2^x-HQ8d$W|@1Gy3{U<e=%<Pw|S?+X$#Ib%TC
zKX8jQN9vdP8#}0S9ELp87QuNqN$W6wU-LMIkGqYjz%8=S#AKGcLpolk_|(3Od`B2*
zcGP5g%4)|LW+*Hof=U{CF?60;9#m~w>rANivLcqlfa>r@a(p(IZ*<sw3bFw+b=k3P
z(brS2Wac}5>USviQQyPta%SP*4p&a#V(oxUs?oaNq@}9?MpudKm$LvLW2Ntjz0?;M
zPvw-R;+-lO4M^24IUxSD<Bhk_n*-jghZk}$v8?pD3vOg_mpbY_$>2R%#xiu?{svFT
zz=Qt}dCPM}lJ9kg@AmUle@M}%5^>sHomreWV;|#176K=BDv?LV0wtp@T076hb`AJC
zj%j&$HpMJ3?;9vZ&YbKA`IYAJ+!B$=2k3pgjaILw{rbMy$Yag+5OFjfU)U$D=$U`6
zf?`IyAht-etH0k=N@{y+K|8a5sk0wn;qW)LKJyism^9NXz0pP=8S9iyc**?>UkK;f
z4x^5P658?m7gutrBbXd2PWWB-+D?PP#9~3y^z`0n;m0m=E<Q0aiJdD@qSMU*qo?C3
z##J+$MPnYzCLb#9^pJ>K5qbmJQc}$iCFQ5TM@AxMli~y1u0A$y``~v2uUaANY76Qu
zVuhrZ-X3a2{kwPPiwp>BA2th=S1#Yv8dMJGysMzFGF{7ldg~4!@a&vV_MA8fo2V1s
zjwHC3tBoY~2A)^mAR>;VqF&oci?q(P3RteF;(W!)$msHW+7eb-49$A7&g+HOOJgW#
zA*-u4d{U^s1f4vYUEZfh1`!J|y68eAz014o1*7bbQ~VLkqD;?J?S>x*6!rINw=g^R
z7{h6%Z_#_vM?y&1Nx^ZkOL$T`DJ_rq`5q=bc>#|n%Il$;&0Bwdz7C}vp@WZiTP!vd
z?|{hC2w0(GBxZnyZ8lTRT(q9|<fKmWxrdBm`g3pC4um{BV24KNgc9mbNeA_6CIry|
zeH+!zt^obu;KSuvrXg8f#tIA#az)WlnV+rMe%XpAD@6t`@$d1<H1eVs{9IUAfU$bv
zgR0DsPP9-a^Ci<6yUXDRJDXP9wS;(`;3A-CkdFg+lGxJF;N6DnNAKxb2OUyNOG^|n
z-c5<`sn-|qET8ZG0I~AxSav<s<c;o_6)`afwa|m{GCpt!8Xg_}<hH@AqhNQU<qU0$
znrZ}05P>qx!0`SQ`j-Xyd4jf=*CLsMgO6QYtH3m+gL6KWCJOsjt_nA;%xBP3pxhUo
zR(SV(+CGn&kdQ&Y?x?G7WaY2tYhD&635D~u>-oLrv<h2}^ybh=j5XAndw2vU?y3&i
zQwWm~GmWpMAA;%0)5G5~)2#YiX4rrmIeaT_2eC3>RYEQ{rqk}zYAEqZA_DnTtskUn
z!OG`$Z*FPk+-DzCe&Kjd`+#_VXus~~ne|(<e9#|!{a5o(x9|j0+Wkp<97-^t5n{kR
z_;av<>eU{_kZUHTrLA44mF@rDJXQ9(UY;2mwSV~S^QBvD(H}l=cPhcT0~Iiz(;^4i
zonPNdvh$Da5u_+4Fv@`G^d%q-#njm!cZI6w(6kRw=2^I}k0*cg5p}iu^mL^enzCl&
zTIXZgPE$*s;9yjs($+dI6jbc0b(xQxYxb<vJNiK(766*=nCLH&)sIp(C!TtIiLI^C
zf(oM8c&fV%FCUu7slA`O$ivosAbL3y11I?%yr9ykZ^ga3dwa9gQmh7kog!>9&i=ds
zr4G#xh0yTNKJ__5Z?#Z7ox36>(C}#B{zzgQ)JTDJW`)o%e5Bae=Xhry!Fjwx4phmc
zm-=LM$dvZJpcX$XnZm1SIK<_-!0=H?D3<FjWuKggBd(9gVTMZOVAG#D3}`sOjK8Mj
zue;miw=~_T9Jk}~c-!L*wJ1?_AIt%yQ=~MPek^u4+0*S1lGZ<LM-?0DijjZyt6On8
z%Ne`87P>sr+aln^L~Yj~6LP->>l86<`4%hb*<v6eCUdf6bkd`^%e~c^5;IS}G{P?#
zXon8RK@<QE1)>qQXdY`TuBB(AczFFuPR@C%xxXy+A=Q0emB+%&41p4`$IZ=b5NskN
z!>|w-$zqcy@=|;)6D5<7qR)(`If=0N+ac+~lQ3C@8oH`qzkH*UZGvIPXv)hjezzQ2
z0{G%vX=e5;FS^<KLx3J$R#>SK9MX#mRS7*&e$f2Wqf_%|J@(X0rd%P&Kf=eZGKL)*
z$D-Z}8su2uZ1s`#7!M(o;LGn$%gQ{fzxyQj$Lsf{^Mc)C8#S5f>5;O0fiX6(mFBk7
zBz-azk-{N#dM8HS=ePdi`?Nh-wxZL~v%=?zpyj39f6M(_U|)Av_L26`uA%aKMyb<$
zHaaBt&q+5yKSM8q8K#&?Sw6;$@@Tq@;s9#rrH<4O4+K~rj4V#wxjjB%@k3+bJ(q!J
zGcl97Uf{AKf1i+TW`A%&L3n}P;vI2;%O=G)L1%VbR{J%3H2E`jnHDOUwJ!e~?CiSE
zFNj5ig!XnUNn;s6Y&N9DeaViaKcr3jBJfMT9ebi@^YRml*^+<6A-E6&KP!qm#qK|c
zs?PrSAUi9ntL<i|qbzwNd0=%7>>lggT~bWodX)N>%k-1yb+;DS0Yh*%I{#`t6fuNd
z$StFPi>Ev(aA?SHL#K}+*Wj!+t+Gktdis-L7YI;)qj$2e?@Gw94$#k58&%Q^yd+GD
zh`wg8$(+o={rC4#=t#j)V%Mh3Y2OAx7gZbafi%W6;lDo~=pC6ti}L7;oNEc92c7<D
z({PY=groyNcGeViq5on5f5DKU*bE=ZDK!;<$4l{meMnKkazZz5+(RC*BdzK8DxYxX
ztHcAYLbZS3Pn71U{w&_Nz-KHgJ4dds5{?>f#)*5|aAMM*<*`>}1{c{yk&&V9+VB>m
zerG|q)gu4vFF~hIV7MpM_1s<>am%lsTq+BT>w<`h<ute(?_Z{&ESJL9m)^T<qO!Cl
zoqS=k7AR3%HK#q;tpB36C^7Z4%b}z0S^=`CbkzU;-z0?`bZPv8zDoe%uYWBJmn+u)
z{Q?fZCEEXRUm#`E{r~ujZXzi%e0=<yH`7*&0RUTFC5umDeCqc14TS$n%O-UbTU)Py
z=L-NXAitTKn)>K4AuS^lun80d@#m+3_4QsZE|oz+asj9~MMdGe#xQi@(n!Ax`(f65
zz`!m=rO@}8TUjxCo*W-v9L{n4Gy{sd-C(91ueJNrry#HRq$;A4P#q;q{m%_W$Uc^N
z=f4Fb7?^$K8Pz^q>UibtbGFsm-~Xg5vU&Xb=4PYk{sShac4oEYyu!jcn1b*A=(~=(
z_p!3l!Zueq?u&-Y^dqy#+s73t$;r5619-sd`n(HTncriBgGdxQNip$H{{rw9#5p+~
zsx)0{h>ng9lh580&CQ>|<!BnM1y3T<AB0_g3tTKLj*D#=U|H2!%xkH9`$6T=m$<^8
zgn=N21m$PGq$u9{uM?6BOI+Yl(w1CP`e*GLgiWI?02lD#!-tO?9Awjg(Suz2-Jd2&
zNkQQ(fIc!Z5>Cv10P?+fF2`b+tUYyyyHZtI87(RL@2x<ILIC^^K30p8y-rFSK&~pO
z#FGYwXHZDU%K&U`y!BV(HC|wSHW1jImiiCSkM6G+I*pPM6*XY_wX?IcB@=NN_U6r-
zSFd!nw6uUaCn$KZw-<~1CK4)`pBe$_w!<CZbh7lAj1q_<e;Wi|UWtJAqvb77L&9+m
z@FgSHvE%t^5RZAs@gKA%<5DvzQ`0%9d$x?5o10<e6?995l#Q)`qES;vM|JyuFNCZ#
z?7D&6_OlJgph$<a{(iLs`I9GUz)EO|0^-1{3V2?4G-Bg*u3jLu;OFOui-7^&#_G6+
zm>4(r7I>pgKe9=j8>zhF4im<X`T$-eTQcwTRrB{`LU6`eSy}zRe|52h)I5_<4?qnB
zu+ZW91e%v|wlc9{rOj7&TRS`8SzYnp_(Hsrn7Aq(gb9|7dY*pGaNdH7E2bWdNi6M7
z>}{L1bJbrWNjM)gQ3D9s)G-5K*2?z(eL3jqFf}zbRc8U<f;Gq_;&Gdc3%6WNPA<rj
zqWf(sZPxa|LH2k0zjk5T(CG*<&OmygaVu?T#WwNASbSCgcY~7(wI~++-(4@~{BOns
z2Q=&d&%XE)K^v;dEFtj@A0_H45fRb&TreiDlm!Y~J4zI8dCq(!En{e}^yyZcirF43
zeJFp6WZ+O*Yf*`|mK1Yn#NF&f+94?tQYzSkqgdN6m_<aG>FIfa4I(Hg$i?;gvlM7T
zw>GqObaY^)!tK@5)7I2fKl1B!$fG5cl~31FMf{{)!@>nK*hs#`k7zgFm6kesdyI^Z
zR#jDL6vV|6Rmh}~`*-1|BQhp~Ck-tubnf1zm3Wn$OmW1|b{cHStP_brzofy+9O@Fe
ze?x%|#6I}4#clss8W5jvH0#}BVPO<ume*6Dv`mEG5~-1fg^8=Fd4FtlwBs9(wtdXy
zCHVgSDDWK&;N8=^OLa*~+I$7~uKU`0-@XkaK|K)nqG`S>6df#3!S+qHK<)Als0JzX
zNM!}6atc+#8`6cgy-SEdWPSJ`mv+;?3tOXH<Fm#Wjj^_4x@B}?3;!;MJR(9_k**Pc
zh6|oR@W@eJHGmpK9&y3dVA0Xm2HNb_^pfoCZqOJ|c^pd{^rYzBGcY&`?=H-Uy?iV<
zI^h`f)D|YqQ5CdCrDkADfJHC^>KEJSpteR#U;sHeNlDTD`enCwOc&aVn#}>tJ(Ier
zsUF<=*Sbn<T_{lkf8Q&m8w%h7mw|dqEt!mL_4eZdKh=kH4ntW6nH{Yo^WXPdCnhFZ
zTN&OlV=$NBY`n$uGBhkq?iiph3keo`7AF?>onOK-H<D<}$^Kd?%O;NcRuObX_dnQ4
z-+N4>8p6D{yK4`2g>kwVrynbxmVUf_@#7UcL#V^`+plciU}L=;7##&cy9M#(wW9ai
zcuzF5{8bUYH~zkyzN3%<e||5R#KH$`5<n*7Qt>=o2Gj^la)5|*>9z<`Ur?TQ?n8qj
zn9d?ECkKj*!PqgBsJQgDjOmQM?w;zq|K|f5I_fiHw17Ycmx3Q<YB={E-8Hzhkng$w
zo+~+Uw4y$J@_|ir2mGx*H?(dqbqYS7Mi3MC9da2~H^{$w&>l{_Ia6PfG9~)E_VJ7-
zdto#bFsCaK<a~uX$Cj1Ae6|9IIxvwF<mEj+*)JrM@w@h;FS*L&{Iu3%7IvTJ&fX$3
z_z}>cd=+nPZ3U|u@Cz_UYGy&#FxTkC;~(km2NDB7t-)l^0P72N+LKq7Wbn+k_5NC%
zcVFKKv5ck#Mb84R#MQ5DVT4(oggIfruo4m$?n@PYvvvm<?V&OtOQ>1tOOf<Ccnb&A
zD{4_xf=W=i&(6+n;bCBG@0>7<UW4xXlTXc5&zdNanXIf3e?f6^F<EP-92N{u)2{$i
zGt3OkRl%@|Re!*Hdr=M*6&3s^zn|#<w+Q$~=in{?rzUud=z+S|T=uuT(V-wS^L;h7
zIC#UV(&6^|MYyD7Ts~3!zn`d<qwI3yI!b9(m2u;9&KNX=7c5pdGagjhIOS`N%>X5K
z>f;-*KDDr5%%YygBE^hJhHb>fF|YK=+&P>yj5m?s42nlJju)be4HbvMXYXgg8wY5G
zgv&?=&LL3rG&O>EZ*}znw7>dQcI}0Fw?T|MQSW~H#*H90UADr!0m=}Bq_mR<$3M4N
z`R46l@+5~>@N%7U{`GQ3>NPJ|gwujL(*>?c9;0q_`cAxlcX`m-R`%Y#C%>nKTZ3@|
zQn$d=mGG8&o#*KBeDfJMhP;Bp9h-p{XceWUEGE-CVDP~zZ)0uUNzKbc#A0^Mi<W8t
zh&Izf=HT+{4bsYYj~_o-fQi;pC_V!~>)2-#IcjU=mOZ@wN8;U8(OM+0x|q<VQNF)^
zQ(#Sgxh0<x|NZgIn~_P3=+xBIa5cImgA$WZ;C)o?f^={|si&$2|DN6?zC$<!Gcqz%
zhkWj1zb`JvCn1U7(ocG;rE|)pP1w=or@Z`H?AeZEC#cGCaBvn@Cn`cxjcdWz6|`|w
z@;#R-T^yxlD_NCK4e|bT==A$r&bLaAF~~2sFz5f>C1Zy0=x72J1~{`>HCsHVsy8z6
zIQ&$HriRDHNXVTo&aeNzNkp{#>!cd2V{4$IdwGF)<(*Lfr(TvJA?)fy0_Dv=?zaU5
zsz9{(5$G&m-%fZ3_&B$PE}$<hEyYMS4o+6t!^mqAbd4KR?(+>1UHe^y&w^<~_vmg<
zU1LCBye;+D0aRU$086$E&~ES=%Y!WaeMw2@kbiA$t)E|WZ_-7xonDSA`JIm+!DxXK
zYS~)n??l9x^+TCOH*cVyvQeE2D`Cf<Dl6&S0p}x0WJ_Cf02*j6mcfG{OuiT-X6D>{
zd;!<s=O)0(?$<~@j+X`eHJ~<s;Xxtb42YF2{Ia>KN!V)RrAP))tbm8q{5rf-+;n#K
z!_s&D?IxCWz=~PWevF@cKr+KuBtBK>+0GG2oUM8j$!TbCr;I_bcscPA4>kr{C^9jR
zu2B5<P@WfkPyt^~tcxUz*m-awy<en{LHDi9JOqZW>k}2X2D_eNgH~J~8!BE=H;0PK
z%0PHW&%l;Yuf&AUcE|#RbzH`E*ks&Sezbv>8n(b1*wWAgA|q?Wm}I#^k{K};H>Im@
z_;>yM>v*6ou{OCpO1tsIKZ*Tqoh+T{1!9=X{Zh8-;SQK@!qBp>tu3&`oK8(uRaHX+
zvB}J)W@JR=mS2z~hR@>v%*#s#!K~vBTN}9j(()O{rKR1J{<W6-%%6(Be&KJUc-|{%
z%OWty;O1rw(1fi+0t)%Py-MH|f*Nn=j$7#E$~XS|)bwb^kE#fYERlM{nRJC?V_u}M
zua9u%Mp&W-4li<ttbHU;iUu~_8w4|!52L$8nFfddBeE<DEpwnFDcj;zzYV}t`qDA>
zpRSTJlGPktY5%{UwD5%|1TAz{+@Zw!``dr;+x+SE9jJPkSy*|EU9GZuII#8cW&Sq(
z-hLwmkalQe@1L~w*JxPS))NRt?F(+?)BT5@6h+RO_Ze^gT?QUmU$&5KbIT{92SYL6
z(P<6(8!ZHLih?aCakG*JFz8e62Jr+~I5NusoBY;gg?MCd<k2qX{k&E{*FcHze%A|f
z8y;e&c(u^imY*}$V{UuxrUogEt@?T6ym^SDlI`tqmrQi)u13RSNh118@+c*v)lPK!
zXL;OTZnzTPpH{TNU(<j0)1DWsiO4UdklXHezpLs5SoZ3Fr*C=jX&p5yzpS`anCPMV
zY{iP{jeCrgVfQ-J(b?OYLojz!^*IdST`Sos<bKy9&k*yJYhcI&?V;gj3v=!r57vLN
z0D*_pREynaiOSyI-Y%}Lqa!2w)y;Er7fpTvVB`s2$lMIh;u9t3atK+j`LljWak)Yg
z^U-ii1pyYE=nz@@d@4qogh-aW7sWN1+$$XUQvOFhr>qfKsNXSn2y4R|vbk!ycMm>H
z!3*{!wu}>;_5A#h*~+?K--)yT-k7c}%*i<blQ4Y>DB3*1sRc}_3{c0*E!Prx%t7sZ
z)m>E;n_kwA@0}oh2vnQ!+?uH0nBtD3_9U0Ry%zo8hr3<7N@Q>fL-j0_Ik4!stpvLa
zm$_|QvOK_18IE!|4}L)?f~92~K(Wx?!JdT#LoN>Ux1#Q|%^58<PK5fXu&2v_R0=!_
zIv7z^W%YB_#pRdpU*7bn(T2lgf!w^Df&p!QYd;i*302<CUay-IpROVu&V}U>ZKffZ
z<|N#6N?q3UbOYVsVU3H4Sy@rxb-dFKR@`D@vuf|eFzSQxZsL=Xb)5_T`0)c~=p3e>
z#Td{pK@bb^n?An6%E=ao?=mr@{G%LRd(cre({JDP6UoK@>*8Yw%KpfH3r5w@kWMds
zbXV7XU<34_{RGa7TB=C<?5qR_$2t_14;7bzNrL6@Xrt)EBe1sPva+(UScY$GY*1rk
zW2?lL0-09Xqh=sl#OEZ!<dbKs)6TMzib^3IiOOk!Y*}u-<uPZzcm`gIr$84FxcCYE
zwB*M6I+&0_2ZwbS%c|Y~P8^&IotPuo_5%7rvaYR4xxM+<8&&i}Vc@m`-Sv1v{1{FX
zbhMj2YnQ|&Uuw1p1Js=)7inpjc!XZSpqyPNFR~Iei@9@+?oXy`%2qFpkVgx@-DQF*
z5#RYS_|H%KHofqJogegOHnR;$<>fojqyxnU#TSfJw#OISIbB^`vX)9TGW<bW9W#7;
z=?IMCws)a+0uJ`kv!xD@;gqvobp_cn=Ep|g7q4GG-d=2PN6%im$M&eL5$!U_qC7c0
z)D-tR=f9u0ivG@%e;#POpEt8qB7zIOCzh3Ssid$Fu-T&b?>SF^^7I{$aOjT7C7)A0
ze<#e)D*}D8ah=Ogur8DE+%x-g@aWDHlaRoGTD)_aVC-PLmP&910oO4&UZP$DD@2)F
z1;qc8{rz~7P*%RaC`Ft7<Q1ZXLU%4IA{Z-?1rV~jy7hcl%&pt>RKm`(JGKnxO0X7X
z515#lf582NIZ*S|+cTNavzqdL&j4F#)oPazeiNolrmyIiI1-SJj{f}VIZ}|5JBvh+
zDu`3?-GGOH(QiEz$lFvNa*=OfovByy?(*JXVnPvT-qM!!WZP6u&ayXg5cKbm*--QR
ztOFdwx9UPeLz@hlj>pYZiu6jj9(O`T`Kh5{dU_gGbZ{4Zly(#;55mXfQi)@gmZ;#6
zE5>;hSN;^|@&mh}+&&xoF!iJViP2|oIq=nxmuCi#hCbZZfiR17Hhem@iE_6fEK<(<
zMMq%ppM7R*WHkS#Z%R~G5ONv1?mRIn%Lod^&kw*fzb{>zia<jXJ@q~2wR{E!12n(6
zxx0E8$HdOT8?tq5Oc0D_q4Z1!&MikEhpR!~{wxrAGB6gvRKzKafN8$tCHjU2s7Z%X
zrH2y)h0B4802Vw@#*Jji+;VW7za>T<Rdv}pJ9NS}0Yxs1*`L*HY;3$FVkICUaa(K)
zvm3QztQ15DQ?r{}C8c#oc~2JUKhMdHGD<uZ>7_Satj8qhW|(Pnx6S7<e0qPHB{$ja
z0uyFh4Du0X<nw@o930?|Yw_bE$Yr^Lcp8f}u4GFkMYBGZ!%1>_m|gU=UGnMu?9GN>
zY~{IvgXXehOY`$DE+Ub<oV8%Z#3R6&xcG&zxcCVmflHe=OP#-mLlx<L@tf7Ig2;Bf
z^s0j=sIUT<0nsYbFO!Bo3jm|GKQEyt3bn-Z_xFdv9!#$W1Rp(+`2=Gc^MLD;3t`6S
zkzexCb%02hB=&-d#GRA0`ZLg2;V$@HM+3(~0Co=celAhoF#=fb`Pvu`7>ncKy@B4S
z%n0MNMRM{a*scV4L4|zw2QP9q{<dkeGsmM1eJ?a-1>l5=dX^zwW3Yw`*$fBiwvDl-
zO8o>Z#fgc>BPZ8S(W`U#rp97YslVD8@X*J>BKZ#HE$gO!nC3epw^@mrS{jLIi6&=1
zJKVdOb5_5bZa{NMdo_|jxQnu?mnu+>Kds?z%*H&yAH(8Ph_OPwf5G0(`M9TpUvZ&n
zD5s@1bh(y}Zhzs!hYz5A+&}vR^`BR0vLnpJjzU91Lb|a}Rk{G*%uofP(@2TwTr`sk
zJ<ZPpT1!jI(>I}^ihKGn<>zN=1iLnH>xWlQPg~o5ApJS)tMIlP_+Jei!iOfpGP}%u
zYo4yA7YKP@Q$;(+s@K&pE>~0;)>W+tMi!R5OEK&&B_%mIIPK2VL=6ThT$;Q$J`aGo
zSg8>z>_%N~V19;kF<77npx$roVxwAEFP!?^b0Z@<*uf-i;F<~*WUZOhOL#3o8K^QH
zv?&`#Fa|Ep9<-jBwfGWH_{QRHo$Rkk1)!3$n1S^mHqH9Z_Z~<`Y2&JV2+IKE04hVa
zSm@}9cb-U{o#4ERP`z{{c9?Mf8O-0149%@^hBOn5l*st!gYkN<<heX-wXOkk9l+hv
zc;ymtDb?OZC|=XQuJNh<*B3jIgeqc-z%jQXnP-A)*!Jb&u2WwgdzDUb26}Qv(Nl|J
ze(^dz!st#s)Wm>50z)9?_V!|e1@I#<_W1pq#+&q=FA)m_4X}mzvyP2x2+}pdCT~)i
zX9=`mjri;(7iVX?v7*`_IsB))(kv1{Q8FWkt$^*>mgdou!?o{yUy>_oJdhQC#3vZ%
z_U8lE{pg~KChV#g%jdb$J5fg;=A3YR;AiVw$I9M_+#zYHB_fMr^jP2CTI#-cMi(t?
zrv5-*ANm9G?{%L0$*_gMb}e%pG<dsRJq0!j)x_w%>0hJvpt=TQUaX%Bp`}Op1qDDC
zrH-!zSC?C2(}RON930s9rS!3qxF>AEd&9Ns1Gq&^O-wLh<Kcwy1qTL##T%#GTDB2b
z6R$uY0&l26wS&R$);aEJoO|oiFNprUUK~9+KMMg+`O*}Uw_dk!%v)mA<vRJr{@RLB
zjo5o$26Xxq<m1P$FW?r4J^kSTsx4xoz}v3Son^Jo<E*ZZcTG)EdI4yyu6P6<_9fX1
zF}ugR*31zS;RJY6W*(?0M=EHEBCaBvDPLTvzm9|6V0>I(0OMP6t(jrtbK^HOGfA@Y
z)waXGVflh=gWF6ZVSarbdL-8FT6)a{pNsR$9m6C)`lq8{ZB31shvS=%5;@mLM7MF?
ziRwANmAtU00UugE{#^ly4d4OKlQS*#Gu~8>kI8@1=if3xVSRr}c_5I~<ZNPe?41C6
z&yHQ$aDSq|&c;2tFr32H0)z5Z{py7Wi-QkRN}C+rzQ58a2{LaMc3Z^2`g7*EAp7A9
z#>|F^ueHKW3};QDtSc#V;cAlI?|g`#-~VV~PFYI#XI#%$O0}b{3{Ub#RPC?u$S#;l
zSrcb;P?7h2Z7>skjB)E)`%VRoZlaGA30X6)q($e=3aUHz^R4<Qzz(3neUrw5CR{5M
znWLIi_pn`A$i>Cwoig}Ag;wkm$MO=f^N?Y(+Br;vK9ihCcN_sPRtUE>(2~KkPMKaA
zGlq;_V?Xdcq_ePmfSSg2EgoE_%lD*%c;XuV&=rm1>bmWfZB=;F{Wy?eF~SWRcfHe$
z*8j{VOGDr6m4kJEyr~t#ud>{<iPNVJdN(sro}rcsa|T5gieO~hp5iy-q=+dSV3;3F
zym{n^d?Uf+Y?o%{wj!P~-&OZS#X_B0pB8yqqOY$nwl#}ZeV&Z4vY{T+)Y=ypj-`Iq
z<~D=xFLjfiY!>_LlZlQs4zX}cw#cghds$5o6BU=1ZoyswW9D?T7PK^D?<l(NXvu-`
z@uS|PVQ|W9bw^BM6W~8|7%RGfE;@Bl=_Tn$qe`0vK+y)*Uq0FPz37{+eYyhSDBe&G
zJhT4#whU}20hIs@MJq%4Mp7%KfSr)_S1KW(7QDGQVuAh^XDIfNS#2+Z&ssfAz#f;4
zK+^YoeY%#g#{!HpgzQGpHF20x>Je9(JrCBSRK>btpaE<NWea;MVd8XpP15It|M4^m
z88#;e=7K;F_g32mczd72kcUmLxZ(NP142T=%3&O8k?D!!<ah6W!@CDrAg>DWNB+Pb
z4qimp?$Fmh+l8%Y3~Jx`JH^i53$CLbT%rfyk(44}U+%U+F+CBuUHTT)03CyViU-+(
z((qez*B+eo9In}1ll^`#=P5V^J)+$z(8=HVJ!5#U|2DXGTSfP?^<LxPoURA5o8K8s
zjNWo1#Z1y?>JMK~Q1RQ$LuG;3$kSxNw;IYaU0VR3b9_5Q$xqOx)zp24>No21^LJ2s
z0B(Tim4TgsisbP)-Z=(jXtvQ^K~a17+U9JwuQ2xr`fVejkdsXPt8rLEoKcy0Z1s65
z<y7hcTI=U%Kd9S`KA{}m^tBf(r};zDR6Rqa8af(&HX%?aVQ<@0{K>MDrb1#Ar9CmS
z=ZQXzn&A5+?iZ0tKZw0gf{vAf9duZFt*XqTcpTop+<N+${r;G$V;&3d^+!3UUX>Zi
z<y+cHJAH$rh}Y6L4(G4`_|1uJV>J1WxVNWz8qr1<i@X_z;2uG$Ok%7Aeg5>vMA5pU
zoTC$;f<n;uTx>)WJlRrLuLp}@>IEPiSX`ivmijO_JY3=9CDo8|;&E|qOf%HFM4eoW
zPaJOdhDJOC^^Sx7n-=tbs7BzV#iJI9__*#cQ%8LP!AJfr;LWE!5~6{0c6YZXe*tHM
zR7!j6y&@y2jQ0XBc)icm#@Dks0^dkrJteX)z)Y1!`$m%dz=-hyPg?vu#?@yBL0h}i
zDjE2JN)a9x0@fx{{+_ZgvA?J+v~^su&nx|K$AE@2<4+#;mv9Gl_Kbnl=U=%#6PTb^
zBxA9<JnQ+4hJKZnSMy6OW3z_X;f!?%4d$6%XRe#{7nkU*t6le-?xKkjZ}#b5I=$Zw
zXy01Mryw)RQbc;EYGO-1_rBQ8y@PEqWal{dSsaO^YaqNj@a<dYrPuQ5tuG}XKYjxw
zw9)sFO2T^_oLS2B)|vR7mqVeq$T$KU4c3KcARh~98c(;Y=?9m@t*6lQJWRZL{iM|z
zv|^{$Fbj?pYw-X2RygkAByShkl4eu^G?(DbjdHhid4)R24KQ8#ph=Z~v4B<pHh<54
zLPP$TpHKhr0qVTb>PKEe>S+>J?d{-5PIo>#J@q{NJzS`Fud)ivlpsFjMu^N!u)a8G
zxsglGm(!ob_pP%NZBzGDK@L4C{RWk83DjJZQ&SmNf6s_65dT_RtGDW_gLVgU(2zis
zf{sp=pC*2o7K={GLUaoQG?t+HSc6Qk>+k1qFK4}`<rYpre@e6%BZoMMlTy$9f@?Q0
zxsi`oO#mMV`mi~a%|66Fo6|LtA0s!#kdPXR*w>pq2-8c+$e=68^?uGb>*E5JA*iS=
zL+c=bz@gwbJ3qZ4^aR`)0qsa?Q%C=U`amA6?x3b>=T&vZ7?OZ8KyF5F5-rZS*jSsK
zj;*Qzvqg=tLH?S%w2GXSS<=Nt2WuSudb30Lh??k5;-~$GKd;#JwcO<{xe5s%x}+o2
z36D0Y#;0yNd~s^t34ZXy@4OLrP{UHK2R;6({;#H`dk$VDvJd6eoQ|2A_4Ph7{voGd
zZJlus3};={O!{<)jCqa0llF`Y`}HrAq*uakrM2RS#^*mZMv(aw@=?2v`I7F&_tMT&
ze#vB<iKNrkL{fX{6RZbu8>r`ouaEG>SKR%Osg)g`SCu|vF<!cmSw~pwZLrD!vt9eg
zpCMJl6nqY<>;yDkYwXTjs-g0Gz0X@z`aNr$h-CsTAdEf?KR$LP-MZVXqeqJQ9zX|v
z%7sxLi!L(<j#dq%DifYWsVCEoKY}#2r*l4frHB@q*Mhj50vS5tXL7{E6D?2IgH|r6
zUk9f=y{#WJ)N;`&eGeBoaNEIim#NQ3;|&@bI+N$%vx(izv-UfI8x4IYde(YI6Dga%
zZgB#ns<GPl(A6Zb$amSQ8DJ1DjCj!P6*IqOH=#GhFWOYkki!U6z{26NPYu#aBM<$U
zVyV~A&_G2^Jym7Tz7ZBJ;JHT@PojZsFxi~&(GmI5;@bT6zGdZKxy9Y+HzhG|q&rOT
zcB3s_Mbx<1rew9;9ZOD0fiaBlOx-?oI$+`XXtEL`xf#x}r{BL=3JB;@Qd07FWPGo?
z&xv#tD~DD-6Q(K4A)Re)EegiQ*M|}c=LQB$V}@y?;aC$EPL*Q*mZy0JEC*Pg(0>uR
zfdxsl-dhkV0|kw5#FwBW<}Yr_1U_V<LGA=Lr63V!6clzMZtG-hZg433OD1pAh#~Gb
zjE;?Q8I%WlC<5j{*PDfglM}3!eXbwnQ3+vU_+Bkdbj6x4Np6obB@WPjyMe0uyZaGt
zaj`V<^(TfSH?~RS--C_u@qk8%vLhsA)F#F<a7$Y`-oP#U)$MC#c_UV-;6*oK%IxS*
z3Z=2T@@lvOU#(4p2n9IW59UZMbTwt%js{DfCl2V9d@j?HR=LJ*#o}`F(_y{m$ydWw
zr(^_`$6lFPRi2j4>ghy>`f7Ce0|tJilX-Jxm-*{3LR5{>k5;TZ&4>3AstG!JTUQb&
zP&9HgCAlng&P*kddV|A=x-z+yCSBpduEk{+nz0?rp8GmQN4{tE9!ai_rKCO{<bly`
zTsrcE9S2((kqREdv8?9op3cbN`*!HkI?=FGdBH3Dusz(+&=Bf#b4a}k!pwGZFknk>
zNn~jZ#wQ_g*uRp=#T?(>j?rJ5^DFHNmF+~l2R*SqdDy7W(35PoUIK?mi=*p@N$+t|
zR=YemPlwwnvRNfeY$g__qxROgY&jCSvZc70$@zNmI9N2%g0Oj25Sj19-MM<I)A3h8
z*8%Qtmo@qGQz7gfaFcxz_8CGNz+)CBSk$6|kIEwzQDaXa%?~IKx%)T+`j@jz$gqLv
z#BTs$K)sI|EI}A^P3*3>H<--bd=)VX2nza-dbr9R`!N>?N3rp~$@6d=+Krz0svu=q
z6_WMm4=Y1a1jsd=4GpnIDSrzJo(rIiKr#S_>X8LA;XQRfuz<5Lt*or1VmdvXi;#bn
z409t3NM1t(Hr!CLYBzLsUC14;iBl%ZW|KuCGon342ys}y{){+GWkFxCYVknL7^6*E
zIXQrh9h$~d2o%~SfV@X<X#Rc9D#2m<ij%%3Y6z!OR$+#L!POhwLcMXn#(VnkpAL_W
z-oe+fcepi3l(~=R@_`Xunn?~BGp0G%Xnjp9&Ku?YiQbSi7Qyd=!cuDAmN8f4eo;_V
zpoUG97NJY)hn&;G3L{>{dzQHw^w`v@p}|?ds7?*j-^I9OYJW}gM-XF?ZKL8+RbKW~
zhJq@ai%cpqOZ_5rHZp#Lc>dh^VIwlq&-1NKu4K<7CrgWQ+uYTKL2z&PPpX@1_0P|O
zA&2r68PD79>ueF-0b{S;e3njm8HMY0p-ra6@^&pGeQiWHkSp0Vo0%+J#nz~3XfvTw
zpM>`Kv?Ut*jaw2EX&{E5VcZ`E8_i_L%)~j%Tgr=yLYqXlU8L|M*jw}#q?a_!gnAfd
z37rn8WNg4&0jESnqz)_tkEr;RCIUIpZ;J9y5V1tg5=%RagPZ#{V4y42)xN=3=aJyu
z6D3H&@PbT8lb(SAhBi>MDnN20z{TJf41zDpf}7xm+eSG$HKmdx?g;^Ek#+!Qr19JC
zKwKioVv$HB;JMoXDbff#gEJfwLXu<+xgHFho}Dq!(|csEf?f*7t;#3i7E4M(rF<zd
zY*Ij^2cn=tlw{-8o}{~jy7^k1%*<Aht+Qx$-Pm{rBuUbU^P}wmjE=h*F)<}2x1Wc{
z#KDAFc{*q^tGt|--pSp!vr~&NV=l;SPQ^;gc6@JumW@vj6z#b^aTV=_)s9H4)w_^w
z0v$rA)0Y>!2azudg?vtWBk5$o>Fb3M->k9PsbZJYJB;&gDMDBEG{s<Tbzawni4|Yw
z=$~3qx*YTo0w-JAiJ>h&^z8G~$BLeRvzTU5dH?>$mzBJ(684Bam9BUi=^O4}lT0NW
zRUD)X2p%2GuH5Ur^7!M;=vr&W025@=G7qV0ooq|iM3;PCigOC`JH50qQ4aPI<yx8R
zx96jYNE+-{L~QlKu^`sS<hZL0p^b8rH>-Vg7)(B&@?GGCvptzuXcwkqDFEy!WM&f*
z?Km(rWEPi#1`5RCw*jacRvML?G?7+3Paby;>iCsH65<XNiF5HkSeVksEvjliFM0#I
zTXQe&vU(lLu)MH;>wEmtxH)F=C#l<c_P{gI)x+_p-!}bAIgl+T%5}LrxYvqJF5J1i
zsXQ+9`S%>VF?~WA11*1K@lMn>vLu@t8x=$3-&p*Ww1w87+GLnBETxRYO}2Oqj6jqk
zT~%(r-w>OUy*gL#o(5A1r~}PUkDR*Gs7)R3+_}TVWEpE2PXM|)DsfL$K=s>s{G6}u
zUquVSv~lp<mVTGI4|G63D^c&G(n{K8#XA@f$ICQqO4PS#-7hi&WIr$r0?i(v#R@o`
z&CN6v;BZ99Y(%!^SOFoPA0JJDzkMXYZLk<?9=2mb>D7FbXKzyyOo=I#%b%Zlf`AnC
z-Xu4WFxdqH2j9~lz5ptI0z+=78Np&9RY#eiqt%%rpCC~9<6||1FfPAL<_!ML3|Lx_
zH<xg@Q}=X*D{VUBj)sAO!T0W%Z*y~aNEoh$jwwrU(h>e>B(Ta0p{T5`4mL3Bd~JM`
zMa-gcMPTr7bMBU}-E)r5cOn0@$vsF3LJxk8Qf?aIy>ZtF0B=}lXXh3bl3%glVe7OA
zhTYSEoBHF;!fyZV!<3nwo#$d3kI@YWB0yi<-Q7VOZ}u}tPh3-NSsQ<6Qx^6`rI^$;
zdfRL%){MoPUj^yOLUY%~qokxu264Dr@*1Cy1`T?CoDPx-ICj-9&B_U_z6eRv|M+EH
zA+mHo|G@tA9ro?d<$?#jk~)dIh?XKlrska{YeMleRsGc>cU`w(<5h(RV{iM!*^hh=
zh_!}hrG)V9G6iCahm5@Y9>kk#CzpP550biHIyAk5Kv~HC*23L_@p^q;CMWw#j-aLK
znHEiI;v*?x<0?DL_Hamfag9GH0p}`U&%k~n>alfKtQ%M!EZ?>i%D%Uo-rM~4Wf5p7
z%*_6=E2-++51L+HE04rT{U{DCHCEyLbggt;Ht+y|yEk58eJ9Nqubt4Jn~@Ra#;qCu
zNKEr&k1eUvanb>6ug$ZaXQu|G;{lxc`m7r<B^qr7#DphyEj~YLxmib2Hl>fNcu9gU
z9@TE&`XOtu)>}YA=o#;+l>CGiKV!Q?z@o4O^ShI*aYpKDTvlUVh{gHKlQFQgLGEIk
z4X2ci>Y?xmS5|WyJ5J#wi4L+n{*-H77p!J2As0>r`~H)bII?w64UxA7Vi1B`Qa?_F
zZ42}&53%Pw@Adbur<nt{6q^4>moD;zuOz$<9FBM5Sbt4HbF(;VZEuMCM4gY159kHI
zAvf6qrc(g7nngPWBSwKz<S_xb_th%W!0Bo=n?#vE0&K#0yWHJI*j09;vb$7o4D|F?
zRtH-FAvdb9`jC;a0COr2YF5p^7Wjx|ENwY8M6f>FTjk+@S5-9-P6A26;k2jQ$!lY3
zi89ifnoj-ij6Xc63hu3kIE<<em;fwTegjt#019>$!BOz4RHz^)(3=LFfnhbCa$0wg
zrv{DNqp_k14>g&|j7RG~)G~ftE4;SJQ0IND)%FaAVZ4?O>^dxOL{=f1D=HCMNZxM7
zK^wKejPi%=U)<cjUmAf6<P{gs=BQD|n`mevZsm}!y(GU`y|<ZBz`?>bA|-Rdp+(!P
z6pCqj-M;##$ds!g!jGCNP*|*_k+9D6e#I%VLx&QQ)2oYnd_i!|tS-!zJlOWys5VQt
zIx&hD_4=##xR}Jsj;CSV_BLzIEe%Ao&C&vUZ!Oe?P*R>ptJ$<M3lgxsuiq?9>La`-
z7D0e6oEL8v68P#`w;{8^DZ%KR?X94&9rt~b(=>0S3RgK54jU8Dl;e`L%X}}MlioJD
z#v)|%R4RXaXJ=?&VEogcZ(lM?<#dYl@huw+DoDU{nUw3T%rL|w#th64m0PmwIBAIC
z%Q!kZLgDP<8dTM*tE00$WHVJw-Aj>oOIQ?(pc1-Mas$E3h26A7L3%4fv#quN*|{zY
zQEC6Jx`%<-=SYWs@eKXZ%7-7mVK8`9jRp<fX(%>hboV^B&U?hmlg?x_y(ug$LqCxy
z<6uWvU74yeG}y-XXZ?1H*aNq8K27zKy7CF@@znt7wccM}VKO%mIjnARQcgILB;n(^
zG)zLtKCGTY%SRwYPRo6XmU$g;$SV$3SigY+)Maf<#*<YVKTm4Cg`NFa;MQI6oHjOk
ztEm<q8XEZyKNseg;1RTQc=&B>?8gT)Wo2cXyC7K5wXw-F!k2XY7Yh(t&$b(7d;GX~
zU{)yp&Qn8ueF(e@je<fF{ng}9s|muy<)(-WZN7&y6%cT1Ytjj8DZx5OTiZPT>f+K8
zUF#MFCN_4rnGSEmvn3I`kv!;zwu5E{MRXxAEsi}wrC$ftd?uW@koH(3JOcxX0f3^P
zP$|MT1tL9&7)(MvbYZsbiYL2VJOcr|29-8+v+tmX*Z2uIM%UiOC94MzA-WAj03c>j
z3?c6^*^7;qe;nWr&epk#a&upK2V_<-N|1?*-E?*Pj4IHxlGw~XJ~jpb)F?W`Q`fcP
zGiU7LcCG6L8518E3|ds?@d7s9^7~?he<!6_pR-c>QxhINz{e*<A7wmg=kLeE%N#_8
z&6Lv~+7^7uH2MnXp#WR9jqo%6AQZ;+G}IKvQ$lgpnt^_md-o{S@Q!A0RkhvUvCxv@
z(r6N+ZStLMs9o$;RpnjHmJU+(=8QkwoO$&sXc!D}fa?d$$eujWMd^V_Ubppeh&BvY
zm}z)szt9p?iUtf*F>jB#$p?ua(W+12UcARZ{i%?h>%M7XGq4bS8>E3>V)IKy=&hKa
z`I&8w<ZJUvv}y}-L|}B|2k{8pjm~GeNTcb=<&045RqV7?>o#i%%*J?v%6}4i-DR85
z@UDKrqPK_u^Gx=e>sZJGj`p9y?&Ke|a|IptZTM?_FK9N8lS+G5;UotG-shXMXD~GV
zHTFUD@iYvHTCzZ5pdit9{ZTX6pe9M0+9=jJE&YI~o<T&!6CWUSSofd5DWomyVTomv
zShS(>Hz2TH@WE_?HVBd(7Z#m4xw-QIfrnj|SaSNxoD0pPcVZ_3_G1vdj$(>ukkiBR
zi?TFOY76}2H9Xbp_wb2`#5}eTMxyFqBrYnEy9$*T@ZYhgXh-G&-$3S=%MMvI%!k4t
z*ZKB@0U~@Gc#-6C##Ahc2t`p-Q&T>^imYpYizh4i{e=d@gKdZjQ-bjXVE`>bK}pFp
ziGyl=dVW?PB$tsjwxL!?+Z)`ai69_noWg8zd9m|aJ}rycP5O+Li|f8sICJGu`cBBC
zVT=8}KCI=mK%j!i_;b@4A;93N0?gdOd%wuIer%$mh1P*wsw;?!F+L#RI)%GNJm3}J
z>g$Hyh|eJZ*@wNdcv0U*vXWigV=G<rJ@e6dCix-o>;glA8@vv2C91?|z<nAI507lx
z(M(Y>G&OYwa&&;Ee|mZfp!~{@AHh#VP?q84*xHcroegvM{yvzwou`__d$i}}=}8YJ
zTelgqDrxt&Jis3AQG=t~<}8yq8*jk+co`vyPD8$I8qjvt-wM&mP0=<lv!UA}J^i~r
zr+c*SC3sunZk||-&?<&d0M{ASgO#0`hgI|x+LGvzbo94n9!@=3BeYToB|qteSPF}1
z9!`u~>vGvR3QP}(75lIPX+wJ%I5@y&`Z*lMPHvyw;FwGLWFrg{g16z}U;0wM(KSua
z%o*tG1JsEkUjgwtqQV&0c<;Sy(1>nGkZOE>9a<uQ$bmoF4Iyz-B6W42XUZ)L$>>Jr
z;VwLxc64%gmzjW^yzS<Imhztv?TIEZ4%AE-2mlgqJyD)*v$gSU^IPCZD2bgTgiXN|
z&h6>bM-ULOw+vjvZ=J-_Wq>~%;mKrEL2TC^wX3U-&*tn*0NUZ@lw1kNO8k=G)n(Ua
zF!FTq<f<y$gfhl#`Y-a-<|tb9V<3Xrr+cdhgK0GoBbihJM-9wwL0ov;<9djSq3iVl
zE>)oIYo$poG#m=_&QD%py`(6^RI=1X>EOL|IfRo@K@i?&@?i<~`yPq+7?|`yh@hpP
z!z&L17gyf^rVF0apM2IxfI;+rba;64TgmO1O8QqfCGRuiz|;Z`DDe?1KobCI_`>Tq
zl>I1KNzqDOlU_Rmml!BU0(HMy0@0f8#FDR-Q-y49Mmh8DmdtD0*>;(DoBu<bBJWzk
zKG6NM;^gAuFqqj6<p3yg*=F2-v|}N!71PU|7gco50EJ4GEUboCZK*>o>uj#^g0?O@
zVV&Jb-w`w+m^j^fI=78#(C32wK==T7Mf4+X5#?JX1bGlX<ECnH=RvAEqkju|@Ze`!
zTzJ=y%fN!rqK?&%=%=xK2|~m%j~KJ9j=xoUmc^1JF@r`fqa`tJ%bQs(Q4GdVpc#UU
zK+d$4Fmohb5&P2jeQT2Un{%J^2~^5R*%-&KL&gWp<k>!L%zo0wUi$fywXV^JFj>Y-
z4pa<_d~K%}VW0WJa8)^Q=8pY_%;kZ;l9QQP4wMc^`-wOry_AT_-Z$U&vK+oM7xZky
znM83bWwUXb<f2iQy+C$@`e9t2i7djG5|}jCoojS!^|b<6wIF&Fpc+sDL7StqcggBH
zH?4E|4p5FNuOX%BR;lz2G-iW)WET+M3f6NPHUMeA3B%8EsIKG)hP`hd3PB`t;b9;w
z)pLl5rz*wV$@8!t+4&xX4%K*1fH7#Hrl#s&pxDR(^9j8L&iJiQVq}tm0o+(5y$UB$
zEr8M-|M|nWm=<tp{coU#FN37JiXdtK-C!+@#h6&~@`Vb^!z15%4fZeZv$;P@sSnqn
zZ1+pSlD&(&@=cdkDv<&ehe98Q(#5}p+Fu$T{2J|<Gflka0<-%g-^1U=qN4RcSLf-r
z<AI?#9UUETotA!qZ_x!UIt=#29!>5+cFZVn_JBVfij~iYB+66=I5ilX{C<_)KHLiE
zQvr8~$7m((Tw7Z)sB<yMRW~jLA|6eRC6GrJ6hKf#DhY=5e#WpT0L?@Wh-#g$C~wL4
z)YrbI5ifufkz1OcjNx4PFCHXmp3z>y(y`vbI(rW*ZGOLR?)?T7{2LghDtkq$KBMT1
zPhjebwQ3|mBivh&jL({pl?73(Y)Q5C5YP%Z_IzGm9vm^Si(J;nkd#tc<=Zze{`7~-
zYAehG*T?DhuwWHULAVS=Vu2O)XU7G4;0Hs><hKuo3K1Wm1_W*qq}Lxpg@Jr7=DdtB
ztskG9JQ*)zfJ`LdEldK>H!0~SoJb-rHvMm4i)J9OvU_l){%e|~DVTMjsMqw;YJGNH
zvl18g$+CuU>xiR|>8|Ku(<%q1AzO1lfONWZ=n=weRpcBc%e>Jm(bj=cEv1PwnOIH{
zABOTW;f4IP3|<_GsaAM)oz0Kk+aF{UyYSf}l0u@dQR+#O*j+ZoT>e{gh9TS^yn*%G
z)rFpr=9tjf*a&6so&*2$=g(`v3?o4HJtiKWg2dL1HA}#tT4%Fx;dc(|8X3t-GIz#y
zHVTQf0^{_>%_~yGG(c`exf2*)e}~<+1*lHfIdd}G$}tAZTHa=+c?UTKAR7()!zq|A
zV-k~yHI#m7NL2f|u4gEGxg$>GWP7Rj4J``9d_S$JX9c5pJGrIFsm|p=Ee$O#=H2uL
z7GQa6)e|V!Ltj&#H5eJW%B6;(M4cF`!RUPbZ+<O5$9|_edhPydOsVD5=yII!tzY=b
zYuGM}Xd|H;dYs9IY-CZwN5?$=ibQM?J3&2?a#xvx=D0z^B{3m~0HI((em+wjI~Nxh
zsGagZg%MCw2e=cZr7KZ*qk;|k5D_utr(w3m8PK?O2HXg)aCrSLnEP?5;^$bI9Zv!i
zp@y9{#@jdL5wh_zL7J}}j}^2cY0t$$k_(fui$70D-0kh{FH^qMQpQeBPE->~Y^zI3
z1_BEU3Le_ofn~ppQxRM26m;59a#NF$nLX4>2NoB2P$8D!u8X^^*VNZ5$jSzSfg0$p
zC&tIS-o6A-<O4|HxVv{)!QOoSDHkz^eyK{r*Wln5u@?aPf$klcv#t=B@!9)Q@4=<}
z1<U}Wa9*^v9L$FJ>{&|s>ubmgK6ojuq^a*StEi`sl(teIB*I@))w#+P+K5Fg|4d2*
zeh;N(2RiUUcLp02$WwuZ3bAk}a1J>6V!f1p{Tc_9MIhh=pR#xe<-3~;${jF^05aqu
zAVGY*y#5bFJ@-67>jhO`q6K0Dm@_a!1b?HV+}t<UfrcvxZyvz)VJmFLlfm^k*n#q1
z4XaLCc>^F_kdb)@5mv)FecCyy9mP=P*4Nj&{~A%!)*gnG^_5f}bCGX_aFU_XejF;O
zamLgMq7QYrMl27`{()Tv2<dNe90mlqt7Sk8Y=&^(Ja7?r1gl*f=m9a`-$Yq};?CH3
z&h6JohE}%nxTU?JARF5+0JedX2}(&Qu}m~H<^dTnqii!F+k<9)``0MDCSuWOZ0y4N
zI~D;tcxF8aBe<{1D}C6Bce_iSiHT_(dwck6F%=<4$PYmL_jLcGrzgZ1n4`-``)`{X
z8yk0Ay7V3agY@ME&;dGpXR%_nfinQSFVAOZEE-MVKXV)L$_R(IJADiIL8rbtbD*C1
zIs+-6qeDYO!^7-G<BKgpDnM)H)@dO;i9uu0`wDW^o>CqdtV$(=m(KsZAD15kWj-}E
z6_gkdr2-QYQY(>A{@)ky<FEt!z~D1p1}qmIwg(cYLS39+R8;ig11HVb+_C-rGYqNF
zPu=~6UYoN%4%6b^M;cv{Lck{T`Z@F++*rYZQO4A?1XknpgVohlP+PjgSn5(6Tu{Jo
zw+xhN>c0v0AexPO2~sy~bo2)A<M7w7)#KRWfK$Qz39AJUa;W$z(^eqJScsXKnU?l0
zRnN*21Ba58gG28H6spRd2ujKx#vJMMihuR6PKz3f1JEq+Kbl<LF#HG~09p<3W=!&K
z@Ax%}-@u0b2A;CWvz<!Nj$~&u{U_q=`oO|lJ5-?C1E{F#TcHg2V?%|av0RUa-zyyA
zGX(R5S-$Z~P9bf(fLCZMZF_qgI^(ecjsAq&X%;25B_*4%YK~^Nwl1S4Az@uHLR(Hw
zcj=Bdmo3U{nfa|dV)1O2#)bDU(;iGs8^P@Ks8u;XJzb;JteJ!}xneF=@1MLK*nc<;
z>Tr=!^m59vrOs|{!DZ^&+7&=v2ABoJaW~LH5|fi9e9wFPHjLp$9=Y5u<&kCwEc%oD
zD?3m>*TSHvH%v$)0_UI=I%(%S{8>p!1~8;d6Ze9mP`~l{CoqGtUa^l%D3y`s0+k1j
zGyVx8_zUHo;-$!zAkKev)<ENDE+ox)GLkn4!O=i6oGdcXMsF-Ou5bE`M(hsz2q9q%
zoc1o*SMdJD0=CE%lCpMJn*6TASsdPkj~~_1ArCKk(1b?BFQ7$^*VF@L84>8|=?R;G
zsPi&JL8rj09}y7&g+<pZIL<1pH=#^<Xuh<!=RzlnWCO1LKf>EuvLMLsjK_Jgp<eeg
zpC5on?n9=kJDMObNx!bEt800RG;iB)5dw83&;J1!fRVo4a04~if}72sb|@q_H{sno
z!JF*wKJN#DMzwA3Z-r+BDOFTaHG)}=*As7uOU*8lse1Z`f&qw-{?(E!OI&7D{qt#}
zwEw>{4bZgu$#f~-l@+`zCFS?8jwQ-%hy#6Taj~TZ&LWVjFQ#LXOPyL0#l{gsiVV!6
ziHW-x|FvYWrNsevpXRNtyvRs&dBjBMQDUOL14N5XPX3~xD6ruE$B8ynC;9<I3xMll
zn8+Q5&~?lQ?2C(wRh1)(g#VgO*eU9giaw@f1Xo<&t=L6_?5oB9-Vq8drpr&1m&+2R
z9XXD%^xrySjVh;I{vjog5JuxA_}_)%XyK_NQKFtU5vu&{90j*pi}AaXrAFE7SJ}88
zvg+6Faa@w`|9S+9QA8YpI)%*6Tzh-}USuchi*y${eXdkL=RZ#-OOb*k=bkvQfmH1h
zK7G3WzsFa8)tMv^jLe(jRj;78yrTRFNBuv~cJT>=wG{f48ECx9n5x{HUVP@@1fz61
zX6DJE@|sm(i0z)AdCADM0;W}pz56@W5MC!7?42^~rInRGySYyQAqBnR-#0>5omLlX
zIG09I;@Az7n&+WnuKGsm+pnP#pFc|i=hydSuX`D<!DIV02x~=O8OD>_0~rCTG=LNn
zVZ3J={C6AZVuiEHiU7J9NN7+QrUUwRbH{&cF_f|Es(&fG>F^KCkCk1(aP2YSt=EO7
zjc!neLtI|FH~_!6hTj3O1&1iuqOVAR>>uV3wqr&3-Y{1tBOzh#fE~2naiIZfPiXQD
zCW(@4df!613cy#sRDcMakkBW~wCITYo);+*b^^Dog&H5<PkYHaRYU+nPQNcLwf^^+
z%C8FFMf}aXT7+1`Zzc6z>pKVMJl;o<(2(!1-D#Sv1OJ2`xcJqJVq>qZD?+6jbXba?
zA?Xi}pL)ZO?||?RrS%A;|FtW^m=X^AL#cpZ8(Z7{x58&IaOiHs7JO`kmkk(uG3Y=b
zeqN4SQquIN4(NN4%UuiL6MvK24DlQ`t94)`!tjyi&f^wP73Zj@w*8+EnpD0X=<P=f
z{*qSTzvz;1B>q2CeRo{W{o8&h6b+>)w6wJ}G^D7|)X-F<w1<`!DJ?Cu(?CUgDDAWd
z8i<sJly-@B+VwlG@AG`0*Xwuxci*>iU7yc;oab>KgH!nYe9xO#Nas51Hq(+c7!=rF
z<#7vsU$7Sl4aad0QJvooK28Cs^6h<n3^H9^qByu^Oqwh~``-K*#YtcnMMp;`h}nNF
zwaY<SqLr;Bkrj8##N;NU?T^weFs6o3$~^|99v1A`m&0yIDPmRvv1wremx%W^>&1%~
z?B$5*PU%3*>k6^OSZi-q=I8?{&j0=3tYYE9@2Pwtfg&L$&b?8s*|&%n@-9T*>C;|h
z@nR0JJ=AzF{uYXtUpqsM`^-Nj_&ioSb8@e<gTn&`e>p^P7)orQdE}s3#A^BCPq2{K
zMt&p4%lKgIF9>Y)8#ivK`ypJWKLfnXpuGDV-@yl=+&}lU?NR#w9mMpUAM|oyUVrc3
zpAxe+4!r{x+vny4VMRQj@%C*(ld$2qp0tU&t}f*nNpbkc`KcQ1bZ67Hw(^)LK&aT<
z9As)T9)a-k&`K&^R#rnEMc;eh(jTLu`z4K{lpC3&^?n-y*WZ@gbbtQ$_bix?5r^cj
zJ*YUggY)I(tFNqwjvWc)!;x4juc2{4LqkztU-9C_c(>?Zvjc`#P*x(%0I7>1f&yQO
zBepIKUDVgn*6#YE4o1EiAdFDRe?6BbjT1JnDuR>?gM8`_3qFzTd01uS<mo9X_5N9g
zFB-pdz9#1Kay)c!=SQ&>focCwnd!Zawe@^8G`WWx8?RTDYYUx*aAsr-)I#9_4^d3A
z%p0#fe;cF-f=(yaD;xmy-oWjN{CIqUbP7|h@3)Mdz`o7RHD>^%Lhf_w5Qtx*%6cI4
zUfm~C^(7;UtdEJDa{<Uj;H&ow;fy6M@(38daFLz5ov-a(Ar;e;<m8(o!<N?BHda$C
zVhSuY5+t5}tNXYF1&`XDgRLb91ZbSR53C(%DCR$xboa}7QR9Zu6uEuD(vKNLAvv1E
zw!nUXAN4-2H@JH<v&p)~Oy2Q=Bf2u$a!a{w*wyu)x%oJ9UKxeWpS^xP10_Do=9TA8
z9i5$~krZi2qRYNs`6TLFFQ%Q?RxeaO_5kB8L%cf3DabH&V0HkV@Eu!LPR`1-82p$w
z(6^(}NI$>pTh0A@4K%(~d}Anr1+^9yspUhOl=oAHJ$mxwAw}o+?<T|%e|`3klGC|c
zf`)(t7c&(R5q~jf{=>4cHO^F=o|;0=7<|&Ll0RlE)a~1Ewl<+AbMD*;KECYtum=v<
z{6O_@R%ULfF(ddk6t>3nufWe<p5D<gDj4~cR6Dr^%hhvlVGo^rqk1nIh>6O+QagKV
z>+ktSv!`_VVHb#~Pm25^96iN$KYqi<`T!j-owhy#OrV1HIf@Ew>33HKLf~3HNZEXU
z22AK<qFAMF{>+OPF94~Yx>g)_hm~b>{PXkt)Kn>}4*#B>9{r;6mmXNmS8%@VKX}lv
z&{Sep?jlu7UD{1sTSEnfxX8$tH8uQV2dU*h?{4RNaYL%nJ#t=ZabMyXL-Jn7A<*dw
z`N~96@7?3(6-MgetFS4@h3ppgA_GnK$IFWc%(DCv_eD{A;og%c;*#UAhs^)xx-wU>
ztgI~9Jxyn(pv{__o5Kah#<1tk$)xKXqNh(9P*uEm!Ki#9+*e`mOB4CnaIt*48S{nl
z{r|0=+;`PG(;ht<S)Xb8(k#;A;HNim=wl<nM~NeY2cCM$XuiHg0@=C$YI?8oE+|GQ
zlF+OA2xcVjR*h1o*`bE+L0Y;7^?%H*!LPOk@V7V{HSc?pbt3=pN561S3W`!il5l-7
z*&A@b=KL)ntfh8cHo-)pl}SJ8uIT=b!*R`@Hg)_Qjg1cxp26O2wvnvwo&FqJP0rix
zZcOB4)OSN78Q8W@&*8zmA0bz5M%E~2_+lX0UCO<6rW|1{Y(VRF_8O88%RJ(?^kf%R
z*i@dIpl>gI_)xO*S8X1tF~#H1(2N%^n`B5C|G@1`YE)#F>%!(SQ>8ZcENS27{rCnw
zmYve`v%6G}!u%um_+q=7)=@?ZgG|YjLEeX@2Hcw!si>Q3cYV4oOVvx__@*8{m4z?@
z<8d#Y_aBk4&<x$Pbx;0c#JvCN)B2I;n{0=PFN`u1RBxr{|L`)L0t;(C-`65hW^`D%
zef#2ScFH5>ZH+ni5f%%)X_{2t{j`S<M@K7&QA?0Yy^*+MOU?5EABylij%l&aKil~+
ztv32l-#MuNAk*HDgzv9#VQPLhK7<TjC!F<3J;$|<(WtUNa7)AIMMl~$i6h-?sn+a-
zl4bLvrWrieGJL2A<(BQ|5|GwZ&V35<W_-Qxe`*@<#OUegRc)DYo_2Q^fx}1G+qX(r
z{s^_&`Sshr%*}1uKRigHChq-9;|eXUv-Q4N+XD+{E-{};ydze}_x{A?vqyef5>oXP
zvtj0`kV$>)*b&-`dxC;(A7^J%GYG885dvPF=&5`oB6@9RF1LJaX&7z6I_um*+9m6;
z$n1I_>XRvvv9SqnC97M5{~UOsCY9!{;~dLy`0VFkx$OO{V$550-=YMLFuyHKWQg8t
zB}bNaf0gGf?_cJZu$3cx3l>UE_Br=uhGkoFa&!t~&CQdR#)r7qy=Z!OU%W^{OM6jN
zG$n&e*H5BbN}<byb>+NTrKgV_)u4H7^#!u|_Ya>_xxtc98P-C+8Cm*1Ge7%mEG<)|
zU%-+8<2NW%Q?g{(SXn!|x;}j`6(Lle+ew|*Hsw__GlL|{UM>+k63-tQT2RyQZLrs)
zVA~dZ#O$<hSXk{uRT}2&%RkB(9in;6v<pq=wHO0zKYlK~U=@C)lN|sjf-Fy)wPIM%
z1=ms_A6eHc$6J`VwlcL|8`j8@oQ<XP^^<$T<i?6+P8<;~a%b0=w%zunOJj)|8~hRE
zzn1-u^O4Zgva`C$C8$H<dkRK_&L_$}7GLirw>~TRUG<ZXAZ6jRJ(@Wg8QtlsS2Hhc
z^4_S*gd=0TAh;TQ2H(e9X^&u50rSP5wL3=*Fm$WF>jKPY5H1{u$?14?`Ene+%bnu>
zpEB<5p7K%%;0svO=nr+rzzH|tPY~1B7N3qxfCEA$2Y$8j%_^7a8wv`R0c2wk(>=JR
zDlgvzVI|8|ln@DGZpCl7(Zb>RSTWLY=~QNsDVx%4r)9Izp8C&wIf&y#-4AtGu3_&k
znc031_tiPlefxfRt{v2rf=NjW_aGcI2P)kLGt`&>vN<O~54XO$*<WgRU_+U?1UXY7
zGLZ3Do0)Oba3HbwTZX{M2TH$UaL4UStYgeS9`%Opq6j=UPf*Dr`XcHeN0sx0D!>E=
zQBByRefj%i1tEg0GiH$=4rZ$v8QCvQ)+3)gUdXICBxE7<h<)<jl%qofCDUJ!`G5=4
z2^PMvYs<R&!TqimY+GKIl+fC5aA2cODDJdf@nJ692j4x`iN(K(M`$GFB<GU)ho+`t
z5^fc>kkMqxOO_zPXKrEPA*1rqj{`Ni4<B9{YaQFOdv}f&cYaC=h0Q=1leADh+}tkQ
zNQgViB2{eo(xU09?B65V;U2gV>=1bP#?cFwFo@CenjaRW+`~>9LRWHBx=IErd}b#~
z5gV@moCWux>yJw&s!dEta0r}?R|F?C7XS|6w#NIv>gr)Zf!W36(v&c&WK;p)Q9wXN
zgM08J@O<!Ka`yz#@ctJIKuRV!(%5awi;Infzz1~=jj8W>(*?#2ANfBemi_sj*M@j^
z6vH~eBmlf{ai>+i$WBb$sBqSONIspBogL|r50~jE-doN7C8uK8ceJUMjO^_AzD7hd
zM-L$)peLCkUNHT%rmpUhCkP6EA?dPRyF;h1ci6V4fWnj|Y9FOE$FTl@FS=$^Cc-=b
z5dwo54nw|XZSd7_#xyy5b!yn@fXq<Ks848{i(XIp2I#ZuIx2A%?0UyNkD^YYqN?-n
z6+dZs{W{)xjdfQm5KW|s+JHlhP6<PZO?-5i+(5=v3PR;fU&*&08y}!eg<O~jd`j4#
zN|-bSL6n5iMJ+&0aC20o6)_O&DVlHyV|;#){OSx%B1d%eVU|TNBVG9hA{}<#9PK<k
zq}ExfO}2b~{-gNz&n4vc!pAj1!g;rDD!uVfQDf!kzvmR`U^{UAf1!w8-zO&w>P=i%
z=M>A~8_=Jrk!>EWNDlHG)!ClFfB@}mE$;Zb{StR3sp7^NL^5|~p5H@5_=~i9pV)D5
zVaCiQ^#owcg$6>FYS;pu$sxukFjB&>P}1YV(Zh$U%-U{e3V6^Dr=C9Zd1owi0tvhv
z9G9RlnRo%iE_hIZ-z0cFme&~KjOWzsyhF(NxP9l23V0M?7#Sr$2u7epBzq{+S=YS{
zdi=f)4t&NmKJ^9N6c@;bWvmD~dr|^=kIi6^oSy!@(Cn72$^gRA+f;a>RBrl@o)ASL
zFJJjGJ)N%e@Nr;pH;OIiQFbkk2?srlUAMc1G56?`&9%oj?M+*p)(S(Bu`p15xnKzK
z@2ybL#y^7++#pA%B<7UZc*`ryx3y=o($ZixRDtIUyLoDp4HT5+ShbG7QNS}lKt#gz
zN(#8opt{FvU|3(jtHQ{}v&KxqvR@IfNQCPDK7DT{$}mdxlO57PWBGM*1-FYnUbuL%
ztGhd_($CNDsz)cNw>S$btiD|WTUOHL_nSMrelVAs?hXq5+!zFx#^W>mTFtf%{zDF6
zuRkV#g8dT|sFiCO_P7$T1<?kNQBo<w-sV$3C7xxKb#EXaLaO+#l;#!KBU!$GG!N8w
zuH_HCS@{^%P70~fX995MedK@4Gv}ZB9B$gX#`(8}-K6oMOTinJx{g9fJ2QYA!m4i;
z@OG9IkC0GnM+dbva()a@>>BsR$Xk>QMSXKfUY8f;dim<rr_oOa0;L<Te@z-{6zp>%
z_-;nr|L@n2PxWUy5(4WY0Kjg`+0JN^prytqzdPFewez?r^hg-W3czejCB6gC$V^_T
zY5RubRYjqYtH-sQKM)|MO_#%fv*M~QJcDq;Ywnk^x_Wqgyj6})9t?7Xe4EYxV{pq*
zbdZXPi3w^8cwwSCoyi>b_RD-pVzRspzwXU%#Kgo|nOs@F)H=KcPTGV3Yn+<0%E`%D
z%+%|PP`+>_F1zzGiSn<$5`%Y7B7`0>o^ydEaEse<a>_7;6-|Hlsb7~;m#I7l$q#l&
zoaIt+9{$qgeJnA)<uUcBui%6$z3Ml)7baT01+aQM!#P57S$><Y0kc4~bo|WB1=mV=
z?%rL;Kpacc5w@-wa3j8b`+WyVjWdo19ZgN>G~`2ks@c&P6sU~gX~82Llvnot0Nu#I
zzz?uBQI0J>gUkY<c+gA)jYs9o9}5zKi3?>~Ta|Ez9`?7=_S+1<lXHPXk*`hF@b0He
zCnA>(zxqs}GeV*D;28-^=S>{^_m+RJ4SEYNFL{0X;sUS)_u%p@!LViPrA2~+qay+t
zMUMlUxuUTNZin+szlWEX%+(^E+v|Gpo`cnt;dP_7RVdnD+H}vrDPmOSn22S8SzG$j
zbtfKrX-`u_L%0)J5P-f2VV`BnGj*x|l;{-I(0%3R9*4J@)BcV<YfgJga(fE@6}}J+
zEz0P1BjP}M`~i>8uK@d!5U4nSgwnLtVZVlRWM*vn77!WU>)`N|!)6kGM*!SSdSl|^
z;&k%*4)bVD0*PZ}oc%XD=r;2HljF#HVFHY&5Npb2WWAS)2m1M}tiopxva^-;R-PfC
zr3)8fP1>3DZPzZJ0&<RilKbL!moi}h0uZG@gqo4jCk|`0uiWt#{RMXv71)@xTsKj7
zy+gCcF7*%hJ=EUL;~!(@!QcgF$~i?g-~e6mWOu$dJdsue^gGNq{+$4iM7Pj13ofJ2
zB%F1mOhJ0UaZ50($klfS%Z=v6G|U5}rKLY5h?W%cyZ}1_E~^#g;*I>RD**A3Vbu3N
z{ZWi|3-BF;yf}G3V|aNeL--6nTk#rB^LNo82femvAAm0g<|}5AX<jh63JAR@1bBr1
zzP0HADaU3QxEzgW3knVOvs%Y(BeV?%2nb-KI|&Cf$jole_dXPcz|;*920<;fBD9dW
z9X(z2=nysa-M<M33QtQ)e(2HLFS|GHXUEqy;ZTi;IwyMm+qO$Ay?^h1ufC6yS@S#|
zXT4uwq@!Q(N;uN4>7#fp+d7&-RzR=GaK`paX2b~YP)E8M%BWkAy^<e1h{$NYBJ;;X
zjhBI{DX-U++5eQhGpYBs_*1GPP1+W`@_?{R%*?#O&8%Oveb#$>_u;--@ml+zZ$Ewb
zP-#?KgR>12^m_fc)PZ0@IyyRRw{o}H*HPap{HNeNqySzxPQhX{_pb$04uV%I8gWw!
z1;&S%Q@U{Kk+%Gj4BA-O(bFMJBr)zNWm4n<3HdYa?Eo$)Oq4J)Vmx%{NfWp;FuS20
zR=<87Au1%XvG1^lM*jTyC<jwKAg+L8)6+@7q(neB_oY#eXV3GsbM<-$YNTEeTkSxL
z7<NpI#n|2Q1%5w@D1^Df;Ne+XS{FQa^f~<YMu7fMf(asr419UIi!ActTO!;cv55x;
znIp<yoBndr!mki>El16A65EM!mG*kDdJPZmeGe%sr+i<yZ0ts+u4bIXCG(ubh3NfQ
z;QIbj8}o7`Q&Ur%B~K5$>lC<uYWHb#II-vIopyG1hLc=#1~?)Y%?E2-0%BgNB@JLe
zn<!${UwyAEl6~i+S;*ZRcux+$o}Bn$_B#|#FP<W|e0FoJdQ5yiVZ}~50+ysre8KrB
zGvJ{&znvdN+0SKA`UkFg*utm;O)VzEEj3wGEk1ABLra1x5!tM*$rtt*bNcT9&@(hN
z#L$TBT~N}sYYA}bO+0rmHaK|xnMBctNA%aTqYLWzKRy(vi+vAT*{}sX03)t261;yM
zTp*x$R|1IK1GL5A!ir|sRk>4OJ?@Ixz@Svbe&E@miiaR#<GFV=Hr@h!4@5^v+5v8)
zAD%q_njmOD(0{GOdM^pdtMfyS7wemxn}x^^m*K=q-V|E%(TRjSG+FP>((bYG$)2P6
z5d;$$+x7Krn2Qj6B|blQ#upJ%K8t4InWRfXb@jO$I_S*z7SId}A38~uIOB17>_Cl<
z!eMHTpI1?N{F(gv4FLl;1#^vR&CyB3rB?i&8;Y_YD5qx_hgAC`ieO0>>U7F-m+65#
zgB7rJ003g_9anVsne=L0KkqBN&)!`g*Y<z<s1h~x@*&x&?N_^Dbyr&pH(}@vHs>49
zGBZ<&=ArJKyM0~Vkm?Hb;*(!rb>sFi7K@q*>VW-3@%P!DH{=Tf#>MD$<Wf|hiIc|E
z62{%0EHlFi<k12~j5}b!`K%8k)e2JdccO9W=^VPLq&^S9fosQOxcR-&2b|jR=e?lU
zyeF<GH-l+Q&+0WbxEjt6HgnZxWK2NI4`Cgr3YUtB^3a>!-d@Lj(!cR+^9{-<bW2z1
zUY;?6ReVi1&~j@kilfR%y#J`0AkV*R{I*n`U@g)DmM|yeet7v_Jq{00H2uDliJS)G
z+IVdt&C(=J*n&T#3(E(dI<EizB)x!+tMqoCR>5C5BsZ>K&(fr&p%IQ|;9_D#isuZl
zeq6Y3;`J}Y)nIX8%qcfNXVYy+H8j@tbjTGhlK=t<)9p|g<;5q^@m_uJibFc+xJB6;
zZehE=JB&AH`q#w2bZK*)q<X`y9Gh_ZR{BxCgnI=?cCX@+b^tKD6n&|!8O*D^JUhVJ
zpfKpY(JfUWOLM-38z5*1&?-JIk6}+keLWP*&zoakUG~m<{|^Z2@f!un7ngsFrUjmV
zHD-q0reFtL*ztOX+JPd;=i-iq#&Va%!DH=*_sJzHZ&J^bbE2JJ)Gv?Ra_tGHPQ85T
z-OuU`Dr(2R;?v+6O1jO2)Yi@oL6o8*FF%T$6eO#8uPu}W1?}gk;vX=Ct9+}&ueuuu
z?YdDOzI`S+H!%N#y|C~+dF84vjKokEdXP0>Yn;Qt7&lz-3{*P#DaKx}3pFW!>qXvL
zIV^BH0Jouy<-e*sikU{kdz@kGfx~NRdisE$0Xkie<p>%&y7z3~d^jHAW=jH>>0t!9
zXfqg@s9@CY=0|qqOC74c5t;t|sCJjkmV=gdmtIF*znJTvIE=yYVvmU4)N;k}<X6&!
z*q11D8)MF{jfUSUoR8q5J>CV`(3JaOT5tCAg=eluzr8!0b0(NH_KI+X@_A>{NB5pQ
zd4dyDHn9yunJ7xiP%%d8%*$5o7<!~kofzK7Ct!J>>hkZGS;O$L0iVI#S2i)Q!#^DT
z&c8Va`|r6D`8jKAYq;mfVD#yp3h%DR<_CHjaYl}uuB&2VWYhr2!Lj7~kBsyX*=~`e
zchbYc+I>kD(KpFhcUl%NB#Rs9>q|&TY}N2{`V(5DsHKaSm9GYndEYouAoe+7naQmY
z2B1Xj#D4`iuROyZy@!dJ@jv+k2NIm9)73e|zP!-P?MaF$`8o-x0Xc(D=i2PQzKlss
z{6P>INW#}~)T}Lb@uqsJ<siJN83mJN_{lzLDnM{%1`Pi_F=?M!-2*QG{;638WtS#C
z+kG(!Rf8Q3oqen4zdza#ge)&F!@|O_W;37TD<Y9aE!BVY_je-q7CC_^5N}EBo2-5s
znYKTwkI)@QoCvpg`ZZfS2a-T9cvxk|PEBnMw)Vjy9uI0QLDcGn+0qx5l-qaLmlXM3
z;APuaY!%vf1HB`2hqTw`ez|>TI*&jmIQyeaEw{wz!2fv%a^U|`@vRqFoll2z%r(i+
zIl9klJ=dJ@nQd%RLapGk7p3Nh9#X{{5Zf;qjW+)o)uT91Z&Ag=YG_!Qxgo*A+#Ey7
zbN*!|B>`%vW<%&`vtJZkKhJJ$W8=N?4?5~lbb`MJjWVSn_7%<|uCr$0Ao|l+^5gSs
z!}QlB3Zwhg=|YYO+_us`c*!0;7;b*8Om&v{IUHJ|VwanDrr(lkG`ZDFJz=e~`{7!g
zQAbU2D8LCmock<g^m^3GFFiT#6OL0@*3r+5+9&>t2{oMiF7om5mBS&EU=~^^=&>Ll
z{RO;}l%=6vvC=<LS7>mdKnszBRl)jJWjB}<s3^uJdmNgABGmQw15^|)?kq1iy!^G!
zdo`Ik^fa>_)ph8E-PaaqkE@u3+;OcbwI3Y7FA_99Z$AY06+Ftgvh#`=>IonQ4W}xO
z(JrtsGyhs&w!!p8#qw!zf{b^4(4oePlz}gTgQzm&1hsmyZ+*CeZo;~+SP`v>`kDD!
zFzHnW*!n7YvtC;gM|@gaU;cp>xW;R_^Xu38V|xQc#KnmP$YHrzSI3N{uf|c#?g8y|
z%smErdIST!+Qnt@NkwifnmNe!39Qm@Vkubu&C$;J2WG8%_hmP?uz2Ae12`tpB>dj`
zb~sVK^ydk9Ly;d{VC&4$J+fSjQ{$wQmgFhz>?-q5eK6UV8yPxKA2{F`{s<Fc-PeYs
z+A5C5=P8&Z-Qknh!-Z^jr*W0m(A5;p10!sY*aW%ZDnr5X#NQYzc6@dg;>AHsyJ40^
zu&$@d6#U6`>Xa^eeS%DIo&3RCCm1uB_aOu{fEPm>fsSDDh)8TCK7-g%)8K-8I5ufH
zFuyef_4Ax<&m1<4Agi0-#9uTy?#;L`cTFLlsutX!(TNuSn1S|oHS+|+o}M-S%~|--
zy!d$Fh<~uQdK0rPbKp%W`HRqpZ9z@h@cyhC7%gqg@TVZvu&JN<iPC6bjGC2vLe^i%
z${iGUtwDHLdf0+%SP+hZqNr^T(LFSaj*H`}_wR4vfew^ALO`lneYeEl=?a6TjHPbR
zu{AaRMTeLE+?zZ7f}3mK#InR4-Lo{)${9=>I(Nt;gom|5&%LdfqNbCLjnA!ofA_C~
zX;HjlV|dW<7C<6E3qL)RFy36nZA+ira>P}(xRiMBcEZw+_Sx=dqaF*Bp~61<P&x5V
zG<YbX@E4+$I3VlnTm<tQfE7s5F(x^1ZE|YtO_>|Sd`z}}f&wZ@(kE4w56R}GjQ16e
z?Wjg{VAaE%57oMCYW<o0CE)Y+65zAx?jzs#PKB=)!<~iXF3bX@J4!}DZ$>3^tG|36
zy&wkCs;K@nRazi!zFDtV>3aXU<g%w{)mfL{(SnaadOUFCGaR=5O?}H(j7mpII@y^u
zf(t7yHSpLU7R*8C&|>Y*uEkyRLHBVx1DWyx&5k?+w>XnXB|_K*Mwf*+04#4Rd;-UE
z{<D?*?eU(|#>)|C`)K(M4<Ado$owNRiH+tVA-gMnO#$J+K0E*Z`8IGHl=2>Yh_hTS
z=L3Pn<Tmq>El21VWIHDL6H<cFENn7{&jy3Or72H{S(Z86Kd|Ry--TpdvyQsUE5RBm
zJ*=gfTqzg!#X5+j-^?LpzxGNp`ZpRpc(VmPq>bebq8YoM%i)xmD*i~FBY-vh3wFlS
zdDvBpw96gmKet<7PVTzo702xC+^LLD9~czXG|H<peo?mVF*P2yYM33YO^l~)x^y*z
zdVxeBM;6&yPi_)zF1(|8ti`2-I|iL!aab7WB8-%bo7P|8>%0IUWHso+yLZ=X{`e*l
zGMmFsEnvLkvl@T;Rv!+MFXl|gj~gbR-!<jv_r-rTY~9HEB?Ig#&d|5x{bJD+ity_R
zdc)mWFzo2DW1-8!LF~5ukH2q)F%7mgJqQPU13ZE88Y}X%hKj7a@+<f^w|3$VFwZs7
z49S(4yb}s4D<}}`;g2iG?9+@TGBEf7gR{WE%d2Z^ArDC?tly))H~{8xfDmA*molkV
zgd=QP_7aQnFd2OZ_t2wbVsyu{r^F49e{sjnG$jbWzM%i3)u-YPznEzr{&+r?z{bN<
zcrjE5b(&>Is-k9KvM6y_FRb7xj`w^B^PRj_Xlez<9ej@6kM=BqLaSN5uCJ>4iH^^o
zF%CowRtF$CUwIoElfTf@)3e_Vx%Bw>^70~lVJTua(J^v#DpRGw6&4BA6x~(|4_?3K
z?{+HqbK!e~EvPNJM~}gOrwlGq(F}SMdWFnaIt7f+<m+ino^IRF4ZT#Ant81RaO1u2
zx%y{;&d%&%{{hzrc(6Bq4i^6!7qGi6FH~^$l}i?SAzpUs>lq>=Y<<%Q3&Ru1hMFJU
zwko%d^N4S{p@g^Y)b#bu%=f%|K=QwInpm$-k74TGb~WQO?33DY@n3q(lO#?0i3;Xc
zAm>Qj`=^Qdm;axE>XU?_)o92j3Cq6hEclTLz4+qeWUqReR`t@|G-_2+D@l26*^qj+
zB(ZO7u2yW%mJdG-Ur*4vmSM%dtqndRh~suWuWh=rx$idI_MH2bQdd`(8oP(@T5&V@
zu|RS9UXmPK<J;QWTKW6q2o;sXR0qlFgS=gq<@yCTjZv2smyq!J_aq+#U=|_c?PW8q
ziLC{#-<!}-=a<g%^^*Ih&)Lp`pc35I!NQ9(NYb?Vi*e(_mm29twc9`x&v|GTxXP~P
z>Aj)0558XM`pW{$Lol68tgM1fi%hd_R7<kbOWx^0l&Q(BTbNzcO{lAGa~<W(zg~F;
z#TM$;Mvma`vA_&cT&#faOEHCi25IpLgXr$PYHSD3?4*vn4o7nt2MnXU($BPk=K}BI
zP^{cQ%3*W4if@JNGaFj{hor@$m`4Mu@9P^FBx0OA#qvo*<Ljry10%d~U-~_K1ho7<
z<lFr)M=r#Z;NVZ6b9e!KjvB%(gafuujR4c=_cl<*W}>N8x(9ltIl68LBW3}#Y3?&Q
zLV>n@wmISzvpsITQV1`t8jmoXU=}jYii&l{1dCqWK|M)&3l^StT$Vxjjr{nizTh-q
zUhK1wU^0n&_cqSmbG>jwQe5l2c0S0M1wD(`0aYOu=V8LIDjO(8M&%BNm<-~i3QnW>
z+uaA#dYzymaG_!KbLGvueJsepBf2_)(G6Ph;Bm$l`XlF8gj&c%aFwD>zV?`*gvuLQ
ze=O$bo`A9*7VzKhFJEg4jzZC9wlJP|<i~wohdZyidiGQt{%G5D`v5VE5tvh^9OaVU
z+aVbfE08#@t*^_t&!t`td(z=!7JC@8GCWgRka|uA83vb?<!5D`ZX;6H0jvcK*vE%u
z>Iu)bSdda-lR_?-6m6csqQ3UONS~q)Zvb$4zM$n@=j_D9K4+7KqIan=zkX36_T^4f
zaMSr^$8Y`zYier1!OzNnG)xELzvD=DRYAl-hEB~}8#AObmD(mcnqfZ>$!o@98foP<
z$Mp7jOU#1@%(S$|J)A;1Lt?zw-T#9zzjE=r{I27PA(>NyR?DgE{yn#wLXYIbt}Ywo
z6+1gK6U>2ZA01~}_@fURL?VF(5!prepQ*=`I<Nak^P6u@U>3$#LFr{a#Twr<$1Zm@
zEQC0gR4)+@fBHJRMd9BVM4EmqgF$q(Hg@j?1wS%XaPSKVhUcs>#v&l{!sSZ|k0sfr
zD_-vT_U&f8nvP1k5`mj2|6Ptivt+eUZwukG5t!C562F&Vr7VlV#1<GykKVOaxBX`f
zNYzXHpQ(X-WcXnMGc?Hi*nj?AV$Tt=Gm;mcevLU1|5~z53NYAFCMGrK$N!nD)q-q*
zKl|)Lb!4y_`}(hwZEVm8N?<N3t`y6wsC?)@e@cdw;9vR|4t9^9Trpjv2Z&$6D{!Hi
zB(r9LPI0D{4Z{1?%^X^uXiy&r^n_4?&2E1KutT7z=)*Zj247xm6ELEVk7a|&zG@pM
zVMD-h0T}`&{#8RZUpR{np4)A@7j7uPNkNq%{Fci9`7IEejto;D@<(wQ5*+L^;{E3*
ziJ|t&&WCxqlXf(FLjnRqdQ9Bhu2|%{e1G;<!ufOD8$t7xKQk5dMU|C%<PRTCUEJ|0
z`Z>6Dm9>GmeR{2YL44)j=d~BVZdA=~NX++IB%uiPM(c0AkvO0-n_v4+HBQj@OR`TV
z?YHNn=R8u?NmX9E?<XP(7m_16|DA2D26S<)EX_~#EJm<AWozS}|KN?=$MgN8q)sc?
z*BGYwZh-U;7UIgvU?3`B!*YiRzkNI3XE|{dex5HhD+;HY+!Ua90c>{rr?i6;k9w(X
z1tyX$)Lr^`Dzj7iXVn-t7RG))<<)29YYYqv7vb6yKvtm=zwpZUAaj;L#XcgU^L^?p
z#D&?UG+uFM?ACRS?vG7c?o8(k17U{4cMCOp2s9Z=mlWCO=5OT#tl3#;Yj<^ZMR7aX
zk(TpO^mcy_PM7p_Z+rV$m^i;JFIP!eYJ^)eNZq#9)*Vok!fP5Q8je_RgiLGFZf-7m
z@$+B2R(87@b5p>dnB~33V2F%}$USUzqZR}A*PAL%woi_`^799bW%%+2o!@V&2n~y7
zP}ChxMYR`jWPJDY=dHHbJOEWNCMiCMGT_Fx1B&+&2%eStgMInVowI=^8eJn_Oejha
z<2!ejU{Juz$0xIzyb;AI4b-03XRfbgx?_9(!+l_)9iX04%KXtNG*#s0b43Fk;@=??
z_-HrL+zUk(a-Mld4UL)cW{nFM=;WD+3sdoG2*%ml8`%KTrWrs3VUfwp<@Mh7xK!!t
zI6;QWo#WFysHjCaVdNfqrb!btyS266^78VC&H}Zpr^IFjm<8aF4Cr+1@0POQ0ko%5
z9f@c;wBLu9n~O^?_^j;7N_B(12Uj~jeNy$#6%<j~@BqZ*_<VBxDQn8+qoAPZI*)&U
zrf>z~lE42Yxn47*zr-dZ$A*-o?%3U>$**ls6+QiV;HY2qHG0WmYyEL%W^+f{jvKR^
zscEWb#OSYI;UK@UUk?ZjY)=r~Kp71nD^lQ5bQ!aE6DGIMg)N>?vn!c4<UeDCh7<v4
z;8iT&u{j|lBV%uGf9n>_Hrw#l$grlK^@G%!6>1-<=E&Bk0-R~JC?p^fRIXAzyYydP
zfE|{U6^^->^8CrowA__<N0LxEjTf~`WAlXZ)BS!;7R7)Az<cgjy+7$-PEp&w6F4T;
zOgUm&uuznD7Q%Oll`UYr9^P^%^jEkBbIj;Qbj&Glwf-7d$v^<elf|)SiX@&BlEo;V
zy?r$>Lx~Yv0D1#^mY1c?gCUsHc<pShM%z<I^*^@O6uenir=6n%4D!dvk1C2eXsnn1
zZhXa|!&c7Y*jxVP5&bueHZoIN3<fAHusNa1(FDLt{1<W6z%fEF^ckpdZiD}FxAe`r
zWF)OXa5Gqa&tTVpfP_;IyNCSbi*p-?O&tx*4mU^I+SwUE?)cN~703aO(8(jCjgDv3
z2{Q$H(L0mf;C3|zQo`O~7_ABPei@%NF}mkI0Ec%GB(IBxh8J_Q%!LZ9UkB<5UNM|Q
zfS|mh-Z}mC=g*O+MqV*$@!ne{YSP8ff2jvoM%?FKt3Xz~fPetWc^;K#tBqYbPsdK*
zvFv}-izj+DNhe2V`SE&$%<hwyz1&u2sz*6i*Qbr)^mBEf3DpuTrdBT%H8c669D&(?
zme<z0Qi4KDF+{`&skvU|{uMS2JKGzC;1vvZ?x3S(S2c|>ZLj+3X1rdr<vMEQy%jUc
zb?lfy)(jk0uXeK<y+?O^?&tJtqVTW#{m<)^Sbp_|fM|JYQ3E}!_lDg-vDMXcQc~Ni
zBa~|o0Y;H7bh*F}0!A{zfZr5v3vFFyy3aOPf>0g@kX5s$27ms%|1QJ~uP$5fjV2oY
zg^Bi+HUUSsqHrGn&b_r8x1)1xxYwfBS~!znuP4_>7=hp~$x>{krX|W^9=cH77JApV
zw5n~pdY?+^g9i^#`bBeT6hhFcx!8STAHUfehH(-Sv|Kv5O$El7S~Y^*)RC!ii+$!?
z57?srf}eI^1woSNx!m=It$PS{4A6N9w+IhkW@j_BFK+dcXiHw0()SB}V{Oc9N(y^%
zMkg7zzl807?Y88iA0?*c5z5rbUNXS40QwEo+)pHKlMQ%=<z5aq7G2$L2*gthN*Auj
z@h-v5z9ZugeQ<Qy?RT`3)Poe9EtSg(d1~gm!WNJQdaiY)DT{GyDZMJ*oNJV)58rxr
zvv%xb{411wzwf(gq3evWHhwNyLh~mc1FGI1XIsgbP(Rv5tFEq&sEyi}1S0G67>o%z
z2dUQjuH1i%j@jcbnkW(?A!;0p`Y{z1Yv6N0v5YPJ8(yG{nZ0;4;o;0bMW}~54|6I-
zbMYIMDSLeB>yvDu5W8)dl$>TIwbqAy_OW9jNjL#<h2EQvAzEjUDq>oJ>dU&)lloe%
zmmQo7RFa9@4}evIT0Sad5U2@=6zm_Hf2fC;Bh$x*iI#S2v0ZqSoNKU6;d!=AH~+c2
zo&~nO@Yt<X{HNS+0Bn49ek8R)z|7m@@^o0_e$3;Jt!+;x+Fyc!`u(OL`%$%4FqEnL
zGdTj5HJ}M=iKcd9Yi&IbK}Y1Yey|MJ(g&uDRxzDHuZ_oGGi<M8qo<p;L|zOjpS*UE
zoE*1S!a`r`-qwNe{Fl%GCjxZ9et}eQYqVt~*gi07^ygjEeV^kOe}EALP1I(aKrJ+T
zUZ0=o7n=O0gU!^<(Pn#^9sSTpk8HcLW14JRihoDE#hejre4p)T&7?nHUu7%};ylJL
zEwk>rR(f$EueNq@tW9lHt!#4`3ENy*+B*4WZFIjMDsX9AP?D3!WE3va5;ZG$-riGq
zrsWo(@~or*2(dimB%DSS`nj0yj{4~iyB;`jfTZq6gh@9RIt9~qrEEaCu<Ph_96aH7
z<{F8)*_5g$7u#iQ25X)d<KiA{X=&-}Q(AaPEW4(k6KgR%z;;uC!uCt@_Jdu1ux-hb
zK}P61Jb>u@kW?mi{!w`->8$D=2+;IrUee)cS&qo}@AM+0b&CB^Huxm^QR-(Qugw+3
zf4N=(qvJX{H8M(7**NTQiE21ivR9O7e?U{VI-MW*zU;D6T~wqww1LZbq76Uqnzz5;
zriCq!x!Q9{RoQ%hP4?GMx>a|lY^p5WK6m=`X`J_rl1tNQTs$}a?hlRtUcdlrT$Fz<
z-<p57%ubdKjyD%<wi2c|&f|adi@ahoBA3{Xx31i!KJxte0p-&=yHj?Xa@@F~23Tej
zFSfINp>L6N?9>!45rF<&%_{r-iHJ=3@qwd~Kybf$YUlT^aLo5IuV%QS4fEPwI})Fa
zwoB6}QY5Zb8cMvGAq~Zl5C}uQih{;jiW|hbh8nDVU=LHcFgoRz`j)?vG&E_>^#1&L
zuB8It_||5{VB)_lY3;`B@V*f+);v95aB#__JCwa}8f#q!S_aS7g_u}>Np_b7uy(+?
zp*=OcJEck1z@QR4dUAIP+xu6SN30W*yw>CUSZS~P>{Eh?P%^dKq}6Af?8?$w4^&RF
zu`TtLByv~Le^VJA8*A&vR=j>aRA0~ZYPf_01uByG(3y0BY^4~fREpSBx>wj=E0sFH
z_%HID`N!1?(-zcs`HE&qDAWQE(&M~rz)W#U05js9`y6etpA5^Ev|g)`C5FqkxBNVm
zVRCT=XB&qlW?es+yf^3jq+J5@Io(ojZB;I3F3o<&SSh<|%_WjhqhYvf`W%uKe$n$=
zZ8_PxirP#65_w<i7p0SaKNCQEWwFHJL0R+#EA`8gPcL#ci)d=IEG>Vk>n09A1fRGp
zqVwOikRrF%3r*^>t)!w*BzdRFFE9zFyK;UMnjIjOg-;0drmlF6ofS6{nQGRp=MqG1
z($$huY_il-HbZD@m34nBHei4wg1}3RmwhR&>Lrb)_B%Ue!|fDTf4s28^7KkTA4s0d
zc;A%tLP$Y)*s{zW(->W;ed`99+cX$=1@hBq;IYd-QOc-5>-A{6ihBuc2w~C*=kd*d
zIHvHkzr!LO2<8g9-PAOk+u=7ITQtJjkpdHP*DL|eH+P-)=eB9Zhv^q$cxCCD-n@#J
z&)&_Fl(&m$wY@V}{}moQz8Yq8g<7$&tZ>9#i5IcHcFxWD6d_Cu?lDqNMzqUrpJ3mP
z)S!Nh_I>ErFZC+-H=}Q3f`o3pU&54O>KdC0zh1%INSMqC5z9Krw!GG-Cit&Q<^&4G
z@@QM5tinKs?`rxTr|DZ}X7T-nnv)VFnhs|%Zwxv#2n@Xhbv}emg!`_#dTS!dJGNBX
zrL1v&DR*jgG<6^kH?$PytJe^N6U{BdC{=F6I(EcpDT;S}D3ED=qxPt<xozT^JRoKn
zGyZ5;fGM;#Hp(fQKXt`es@|6bFgXB=D}w(TDeqCxFT^0y7!^SK^RwL<YJ;;i$GC^i
zRFr^vlll1Z<56Q+Qb2+XzA0Co_e{OthquP0wg`P!d!4$I4&fxk+AI?4Wz4&cIqF$n
z5w<j(EAX&Si;99b>xd}~LC9|M&PmY-o|@0j-9yB~z1CP4o3Ag;z+d*-bS$Ly{{6h^
z5l|yh`|X4SQ3@^^)y$8Tl)TX$#8^&D>2KuZKO_J-;~$N>G}gtk6>s0y)Ke!rmvNrQ
z-Faf0W2_#e2>1%#LopcH1nnN*A%4629OWmjM7mAK3l0TBTfDt))33@~vsvhkt4U^U
zRCxJ8yL}D)JjRNE4pSY%K2S;rRgS8lgrx~vU;3uTwoA!@@A}(EO;flHb6U<w;A%ak
z!yEeK$@b==09#Xbck{08TkE<JiXTKWo0v}VpWvuqt}@vBHs{!$Ya{U97&XnW3PAG1
zTGClwUS4Kqu20wBZ7aVGc|>DpvGV@NZj!>-rviHb>8gw-MMTusMvK5Y?M+EZq)<d(
z%))rb*yCsJdFT$q-AQL$_)l$OriuEMjq6EEQW$j7(azVLzz<L5N%J;IRI1i^eES1O
zg|yZ5S_wF_X@;?*cD4h>YRj(T)RtWtq%+?aukG5ki}bbHV*2O``&rc+b6L-B+<2Uy
zmtNyMwalt3G+n7zw3L6iFH_?>d$rk}oxb^h_Qy}W79t}$&tY~*;KHlT4@sk+%vFZD
zts;djIwl^nm20R*PDho#Fgn$8Y#=qSop^dP-EG>VO@vFc{J2e|kT(PIoHPs7Zv7XY
z!VI*Wl3==i-HUnkty?G8T6g$rsrL{OeG%Wy5?-Q6b&#^V-)E5e{z=x+LssVI38RP1
zh=_<3$fXr_>Bq6L{>*z_tk~e7qLQ0s#XuQ_AIzE<TONg#q|)ZHd1U1!OY8It=?&VK
zd~%hn{TS5zczQ_-PaOtMP|r5?uIcJYqlAnL>9PT6tAJdJx~Ez?nd(+;v6tc#aFnD!
zO*nOEGF{PlxKrhoX1;j#z!TqV!$?U-huZzU2`G#Q>gTOkf!aU$RkfypscY*YL`0VQ
zJl}5a)vyUBZg2~dyM$hohetBtP3`7Fj?^8sk;Wm#ExP+dLqjlP`sR&snM}nCOu33c
zu^J<PF5@j-&pJBaNJ(>bun}t;44JqFV(wWgd~3E~GL~@m>VJt<nCMI?`M%}i+SAfS
z3JepixweZqRD&%p_m(E#fMAGd1_ciqoCcfI`PD*%+6^=<0sTS+#XH_b(Qr|jshq7L
zL^?XrSWd(qBO*%8N4Z(s$eMDuIn&oIkc?$+JIAo1P-}n8>iJ9xwpdQJ8Q&evSJwaw
zz<&h?f)NIh=;P!sUsjI4;v28^8-#Tj)1QksZ;4F9wF|Vk1H-qpj?5-bG5YPLZ|yiU
zbEf;z%KhyHDB9E{e<HRApudE5=Ool#o!Q#=###r>T47lP2;whbWTDNC*__lxjEVH4
zU{*#!FLVc`B`x0G>u1l7gD~(Di_#-iD$T!)c#l=$r8IsGx=-^jXX$*X-0gvnmn%e=
zEL_bFSWw?qe8?I3Y!wg+>IDrZM0|EEpxJJ@2Z-Z$_iQLie_RuJDBn@x#A?9R$IZzp
z+LMda8O0*r9AwHH7M~LMUST9rg6=Gm{W_=W`cR3D`0f5x@Ne+-9_`w*_Yu?17M=+J
z0p^_bMoJkFW>ua`{(Tj;j*uJpfa!D0^cH=vNV@-$i0FZvypqSmdCknJG;;=19(t!{
zOFg}~_;`BV%{>Eo7;d!4ozMw8tU4nii!N5}?a=eHWtHXST#iOa;O;5#p>`u1EJb~w
z#J~&A7%t1Uk-ak$|HT53n1*+7`*&Z7GTIQca`>V{GXPOZ_(42Le$gWZ!NI{1j8M~E
zef=y^3Z%J8l=&^sP><U+K75Q9c@<J>EWqYycBR8*MMb9!K*%8gHV+<gq*Zn6ENTjq
z3&q@_K#3?0hgO8D12V>i0el*`c6t-jdKzP<xuxYzAXh^}8n_!h?jmw%S^V_#Fqs(x
zwB0UxO5~ulMfz-S)pBX322rm_xJ&@pq2bk%PQ_)QT(<u?_f-x>er=+>$iC$50E3z}
zb9pivbk9Y24WtaH4)Z8*`swl=`+fE>0%kpwHthuO{FQJX*V3&2@#CzN)Fy7S93w_W
zN=#)!jdX4+KG4jJ&TU>%!giwPIk#sB{5klLT`jR5Lsf^dSR0ME_l`i#s^JL;Qd!@H
zz@-Sw*1or}tF^TdQ2p;rsI13Zm)kiNw#e!L)tmAIvB^@%^eHg8NNHhVK@WnIpMNzZ
z%xwj1DnD88F0ZSLo$XEzd_SeTUz=NN|F^ovS1-Zx!Yas4Rm31*H1XA-w~+=yTDDvT
z1oA;=gY^m2Bx%9IJouO$8gEG&pcTQjUxW$|*+4mbfMEZ#ewRZ6pjkm$s*w8IJ65Fb
z7$9_#G@$$hHA}!T3DZ3{N5>YZ8$d|!E3>ySHDycN<I&6|Ty!EfmJX*wXVMKiWJG)^
z6w9VkGTuR|)o+I<$9tnHzhrv4owWarwbIwqqrd>iR69(PVDXQFjcw{SRN+e5@d*h!
zuMO8w@~bBPdlkJ8K@yMx9h>6Y7835_P+d=f5){i}`b&!3rjs)OI`tZj$TTj(`OP`?
z?`tdG5D(9_h8M31HkS(uQfblTCs`Yo^Tjdb;Iq;S#DdMCz!pNVO@?+(EOOiMH&lU{
zY}0r{MP&(^^e$s%<x@wVHjpJ7+iS4^tIWN<+9t5U=|+7M8yi7ZzlStD##(8UJQv<n
z%_E+M{?H+ok}afUaNAE#Bv~v?ub9Q~bg@loqrk`J2fq!uvYjwBWRIXYvEGHz3f?{j
z*E3<#zt18LmYy(FC23wll;fxk#S@SB8zE22E;ThZRsB;+vF}Uq{mA)q_YepeF^BDq
zK&L%p@!4K2X<f;qzJWCnVQ05H(M)vhTKlo^O-;BHe^8+5J&&dql82wdsR~ZyH;(Ox
zKo>NXT#6%n*HVpY1rGl@$L^hcbv1`4ri^$cT^FP_&FcP4X?Q3Cwda@_h0DR)p+T?2
zJPL&|Zy=sH+<s5hgRpT-*n9~G#GgNZI!V*7Y-uRo@Xh3QR;;_)ensnSG+ByN=Ns6F
z#Rf|D16)B1r+8cC^~BN^(*bv7^t203V;@PX@`uB^1vTfS3rkC5cfNNGA^0%!=|Sxd
zKhN6{6w60anVl8N&LhdJKiCud(%F?iv$VPFGR7>Zir&tKqrhP!=W%@MV>L3lTAM?8
zf6Ywh^5qZ2Cm6*Y&U?Y!R^IDj;AIq|Z$a(h;NZ?HsHlkdJfj`Bb|+{haZ~O1p$J*#
z+-UJt?s*U1mVaVt55;1tK46CU_nxwkM%C#1g|Ec%Az4{jo9!2wn>Lhg3@otf&Pnqi
zvJLH4r?Egj=YqP>LqEA2B=K@@No4PBRDqC*bfhf3uh&%{VDCqKK&1x>#i?UT#wix<
zj0DX4tZP3u43GA@QGhzxVN&TsXh%8*W%woUdU#ARV5z_nK6d!p(bR<~_V6x@T9g%~
z0!THTM*>$!C+JwOw#0stV*V8q6O*>PDoj?k!Pbs@wkio%7W%&=nU$+TktHSCDYE@a
zJVgp+Vd|O@$a^1KUp@w=H5&Hs-7CFD-hZQZiIV?T;02kQAk_zBTf5j&qhub};_pKl
zFV$0IQBD(@<RPF6ncauUDJggU{fNL<Q<b24-y{!s_Qpyv?i}t;ng_h9HLj<HLr-1c
z3fj<Yi7wI)&uX@T8!xlCcxOjsKKFc0#F5gfs<Df&f1MlqeGSyEMEa+s2;bliRS&mH
zopAdNtG1vgPr#5`C3J2j1&|OB<W^GgILY7vi%#;i<(Km%1P12YH}}_<cyK3SSYl_J
zdw_0pV)80CODvbhF#7$-gICK-k`Jq3e4Kp`-rmFnu*6+WQI(g20|D@wU(di5q}8w4
zf7JWUMElm5cVo1gD^X!=b93f{2X%%OPF(KZXrP_l+!hz^F8r#$^>fXCs-f?i^uWYO
z>2mzz3-a>ox<_T@8eyZb+Q1n9EI&UfDyn*cu9L>Bv7ur2Zr_f6?LW1tInCl<U0u&)
zC7t8pQEGFMT?<JNiKDIdq_;FNVbf4N*KU}W8vOKWSY95WxQcD=X?wQo1I>zL6ck9w
zZHZ`nq7t;?mwLf_=c$ekOpK@20`8f69oZBA{YS0i9ih?MOxxa%v_w0k!Ey_M%sf|$
zU0;veT3T}b;QR6Uh+6Z<PRdX1FV=ed`W*gn6~0BYm_^>#cP+ynrSa$a=j`EQid;g$
z8AQ#dqpymp#P;klQY`t>&|sKnwRmxFAz4;c)`t{-e}8%g2C#b?JEM1O9;}f2P!T;i
z$i|dBcB|Mkm4cl704Zs>NsVW-&V$_ZHC2LV&IpN$#xyYNM(i5UC6*;35_;wtH@+xB
z#7r|h^B1QwQL+Z%Kcn>J+6`<1mF!{sO8g@davq~KA|i%&D5QA>@S?=U#d&$9goJpM
z4L?h7zYl&tK5h<6yN3_^!^w$=emy5t_XZ9QlWk9T;i5Tn<~w$s{_w-@$ZP*&KY(k`
z+QP!dDqeLL5m8;`c~sN|y7|5h4Xi+0%xs^<475dF>$+D6|GX;qLq|`Xu)B3D4WHnb
z%m)d8+UzA46#cNgny*=@C*@Y;db_*(+lKB&QMGfNFd{)MZ&Y)z`NhvmE$gPIObtv-
z3hR2q@bk0uXe-!BNJtE>U8}OPn?p_@x}U5hX@t6B_76x@=~84~xE(14g%1As+#oBy
zh^C&Nd#UYs%VVUp8q|1_@bczDv$gyKLp)I6SlPQ!M0`)a(1?13UF^ae6LzfaXUX%}
z(716l2Jp#jBmVQ*P?t7Gg50U1sv3E`1aXI`d~DHJ4r}0^JudF>AkrF0{N2sf6kHVx
z92CdJ1)WCS>_tNV|KEUb7ggElUsSX>^^FrY>PhZeAY7vd;M;>)3#>1#unV6*BlBFJ
zvan{E$36M;?fqYqaf4kY(bp8<zXN944CV_lLx76_bN1A;00Wi-ssY}!cu6~)yt21E
z7g{np+A+b~OUdX27feV9pvOMtn4}nK*Fx>4PD~i5QSJ9xQ3ZO4Z~lCg3zZYtM)Y%w
zi-{7>m<?7#AX4hNM#jyfGy-sjaC5&ncNTs-%UdfnDD>!PXimzoj|U*1@lQ{0M~Bn$
zZ<PN46o^SkvhG98rS;bW=J=6k2%u7)fv(kHu@z#<*JxI<@NSsDF;nekAS6`*T){<t
z5ee}8hULtBAcf%a86WQjoBPh}z=<s_4|uL+(Sb^pufx}F_00>{ZN}^5?yRevTVAHo
zC|Y6iJeE~a;X!sE@9Ed`llaAE_DQ-YU_!p1G`N!d*MnVK2%-Ji-x|X`Qfm2ir&8-9
zfMcikQO4+7QGjqSy%GqJ##)~HY-Y>ce@tyxIIZ~Ev#1-V#y?HtJe=vy-+_&v%PTTk
zp3&La{DDGQYd<h@-8cUCr?i-(DWBj-CCr<oOn*JTeShz-=Y(MaCcTjuhwLT)jal8k
zy)_+=d5mhR4ikZxyZWoXws!k&Tz<Yi8DR0Ki8W^#(s01E+)Jc{27~|A?je9~*lbS7
zbn|GgLnRd>QUP=5F?RwDl$=~ujuMCx&{g#ZE6SG)W6^uPz#?dl`cQL;yd70G*0!=(
zE6{1O`-NX{(1Uw}Xr+@CHqSyhR2iP~XbU0N9<Nk6MeRPfp$K|2BKi+{Ek|MN!KL3J
zik4J}chAa9+CQQq;=Z!kxw#=Z7roX4n(3GtzbGnl{(UbF;VDesf2zH<vLn5K?mk6x
ztDB{%ziZ$S4b2GhU*VNE%7FlCeFX(|-}f+6%i4qdwQf=Dx@#vgZ&W7~L;0;TP_f{8
zb(nIs(*@YmTc<H6c&MRjhF+#K&w#VS3r)$tZlik`bbwaeWwo@S68V3-N{6mI6MdQs
z1Pl(_o4ukoI^buDT6Gv!TlAe3L3@hcnY*s?*6rJL3=HX}5AYZ{uiOSd20wGVGqc5?
zRHoRvOOlN(6_aA_l~?KYhu1qff3O;)qE(G=djEcXUAop|@rt^7fp3}f)_Pv0+c!N{
zrN`K4+aD~_VT3Jp@1K-orDwK;=PKMAQzI{$`kc2kj>tRjvm47g8>)LuQ>v<~@d;C(
zBuL+Xm|^jk^<v2K%+D1RlyCLX$6^1wSTTvsY!C-_Wfh4_j)U^vMW~VAgD;jMSL^D+
zXJ$VO3#hhJy4&2Gpbz1EDF?><`EvklU$;kt!=yrvxW#Bd&l2GSOOvK=T<70Mm9u+4
zgmg4|$3H7;Dn-uQ?Qh@3nrN%O;;H$O%jkSlQ)zn1dg-=^NQvss!s+H)FpW2aH?ZD5
zhR`FVj`Rfuc}owY^VAv+TzJ@VMmILSw#9pEc_l^eL-fHSm+2YIzPP6@_@>>78Lf~&
z>HGD>n)^(D8mwU0UX0J*0*x4nT;mz0ho+eJ15=J@$ixu$ls$`xh`d)qeEg|-v9F9W
zpbBW`U_2O(&IhixH>$t9!{Jqf-GOrw^e=!lHHa$t`RA=Z!bO)L9cl4zPx|oguHqfk
z$Wy=o03)w&Y`FaCQGD(-+N=R`C4-RZTr_tSCNCXjvzJ|6OF@N+)BsK6=`QZOY%ebD
z5_*x6;#0+7RJC7g`;?AOEY?Z9_<Ufy%+ANJUo{kE3TX@Z3NM0s5%1^k6L3H``joEu
zaMSFiux(5uSpb%7j)ZwrQ2nTIo?V=<-*l9*b2hVDPu%Ras0O<r)s#fQXs_*H4QI=F
z_k~e<ZkKeadmwpmsxp8^l8@)%+3|VEo%@k?v~laPNP$}o4GphevcmmY+|0)Mch7&Z
zfL5)2`vO7YSG2lfeScy84g%*1=FyLNbaIyfuz(FCh&JW+ZNyCSiiwCs`(DDD>++)h
zs0nfky|B50oghw&L2sEG)DQ=;$CMA-J3yBKXo}0M1@wl>w{L+TwAIxmUn|Mx;7Esx
zB1&3j<B#(iH)Xu^ya?G`QbF-Yx)Ue1{=|F#`*VhyDLmdv(GJs+`1mZswS7MQ5Iobe
zlC`p^7d$jy;3nS6$zQ*C>5|f4%k`yRA$&ZzZ$95xo<7BNmHnT>kb<<elJbWqd7}mx
znaICkzvp^3>s)gtZkK%hB1P}lJGHr~_Y}@s>u5$sdTM8?*PpRVz!p)iy{?n%?)Vf`
zmA>9yg^{eQ7BIsapP4Cjo2^eyPKIDs)P6ug`po9)$VU#<-xU=xIuo$wm@BanlisNc
zqc*CCgfg;rr_JP@As9B$M?~E`RkQk1ZF}>|<tNV&RO|oeIQ`6*l(e@DXosHe{`vgu
zikTY@w6_o|Lu*Ou+6g%TV(b~jUS~9U^A48&rPMD56!T{kR_TbQR@{i@uEh-l(zP?5
zeoM?L3w+NL#}_!(yVxo#*&14`pGn{U{QiBqli5mwXinze7QQQ`SIU%3wl~MXLM|vS
z)+;oPk%Dfv@D3zvaz9^subB-X^aNZ?pq23{avM31vB|y<wsZ_nZ-8$ZaPrbY5n<t|
zFv&tC)FDy3bh}OLew=xFi9M<%Q|=OuOP8{QaGx@XqqexyJr?`UN{rd}6~|X)pRv^w
z5D?`iZFOjTxU=~%l@TeMUxh6`w;tF+rH=`a&R{i~U`ECr;s#<INs@T3(G3A3Gx^WO
z>=}V|z-x77a()O*i%yr=B=p(RAf`g5eEBiM--!v%DE1rGoho}wsn$-J8%O+w6+89=
z`o+`@m&?LIxf!{6xkae{YHb6shRj(-iFCV%QTo8q`Stps4N5i?o{@CY>zRR45S>CZ
zo@aXVTlxth)$Z4S*H?C$zkIpbmHpV75*;&;h0?;pKi@L$5ekftX#y3DONze{#FLp}
zp{-~}M>k$%A)u+I@eLHH0h~Ox^}b^ZGP%@8d{~)e{?*)FHb*GTxpO%u#2sK}e<0Eq
z_q@aUlE?KjYUpYBUjB1lnrwlR1eKKbI+8TZz=-zE3;*M`IR5ujqT3m3t%)`Pnb^^a
zJ68R>q88@w)%(&e^lp4pgQ%tJBAI1}!SD(8>x!{ghh_G{;rx4BTjl+Y*vL<qvb^!y
z(s8+eqnd1eBy0-<7!bw$?r`Nqxa+1CR07di#k;ss{Z=PuoP}MwcQpD)h5>s_bb#qB
zOp^7|qcd=5W!~7@xh`9HH3PV;&O$@DYE-u$wOjPn2isR-d3hcePO~ND2psD@-pc~I
z>+H|UA5ok&XWh25Or@s`wPC;TklKh8L-vb{<9rYt=QLF}{G())0wKKRE$Kjz{AQB(
zwxZV{U}-Lmm*scu?yd!J&(Es-G)0jnD?5B8i#k1h=hV0OgzcyXn)a7as&#|^FJ{$|
zdS^-#FnK(-Z{PM%;5kI)$hgf^0omNbtOYa92-9Zb#dLE9<`D%u)f-(43$ZfiA|f>O
zS!r4;dzzYh`ukOC{*5ST5S<_IOjCwgIOWHrT9xg_$U;q6XN=wRZqd4O<^Qqw)=^dO
z``Rcj6U+so0v1Yxph!p~NX$uh2w0#33M$>0h=RhTL<Ceo8Wf~U1(8Wgi8K---Cg&Y
zdiH+L8Rva(ob!%x?;T^WfA-o-fywXpjnC)#Jh4ObYI#TvGc>LIq1wePVFXpb3xtiN
z3$}Bbx9qF=ZYqwbtQLKXR60i^5!V}^M1Z!cq1+^dcLe&QV<##x$|)*1|IrnbMV8MT
zoZHIl;UyOz@!9Lc9opW}4!6T2^xVN~BUztm@AcLf<93adoC(Sep61JulX>#^aXPJ@
z;JZT-&Xf3XMn*KO-)R=ugcWv(8N5h}2pnq&;4=H0b|Vae8+(Gdv~K{hxX^tdX6l!J
z6P67C(YJ<`fyAzc_>(cpvENu?eAp7BOTv#{o*hb^VmXrF!X}ufB>A`9Xq#@kDW?We
zCO}2i>83YXuW@1Wb2#Hs%M{&bw!Iq<M@1V8sa*Gd`0(pUFJR+}2NeguMam`I$HUj0
z>jhNFA$ErBTDNvQ9iF{vn0tJAavkUs0wBWPD>A~_?M<&NLri`Ss!i~9*iK&pVX1eo
z2LNBe3lQO(6!FfCs`bTa0m3lXV-LuB6gWnDAy?M})fR%27}gHX%WA$b6){Ki5^u$c
zqq73Ok4Xk6S%2-^f68&9o3+zTSo5z0+O=xe5rGdLviw2I2Fm08v{Y32+o?B!@g1*M
zGu4v81b2(Ii7%m=z5d-gcgUce#Vn$?hzF3sVoQ)wk9tn);6Gv%Z-60T9E<inFR#7a
zx@X+DCS;S1B-|F2i;TIB&?-eAkK6PKHFNxCc^Y<hg&F5(V4egXww>s1EDvgriC{a8
z3+L>B!X7R)1Vz49<(r{5h-17oo%N|IxdEcjSmlKbqnx_QuLl^|&DFWAX$vAGrUE9z
zc|`Az1PQ{?GK;Y$aDLg`%#797LZ<$}(S!%Q3x#4I*<b9o57EA87shj6l90pC)%Ur8
zbtRm~ptfnw;0`sHPQqJLGMALpnr4hq-yBJ#W`eLLEAO@QshHB&Z$eA{M-}kfAKB@B
zq3U^t-@Z3bh<i!dP@)Rj4NimM5-Dnj^FhkLH1m274G9WV3CxvIxPo_c84_f40o0cb
z^6c9o=`32l)rE=khK&W~2=xK_q0Cb|3Na@<7Nb@9{8JH)g0C;aR2&x@9HG$4**mQx
z#{nKcDB(N}A{nPLCUKrg)#c@N#ZjO7Bj-{yKg<3l-%Sm?ILmP&0Z7jBLO7Dhv1FQN
zcO5+V>Y&k7i#?}wyq6Ex#Fw65Ep~V7IA(;&?!;v|ehKmNFLQJb-%T@5{Tz(CP%KLO
znl{zj*LSAOUzSCgxS~!w8GP(!lhwAZTj4k{`{aO2RMe&D!r0kRXnM5j*Yr37V!icR
z4~NP=)ckG?XfyW$*<3T(Ux(;)bFuD5pbkmQAky{j@rxxdfd_<(JIyYQ#gZlU_#?N8
zc&V4)ov`~vpxxTXY_6W*S{E0cm}BDsH-TD^a|WBN!KJ(ll3oxGgM;kD)IvrIWdpW^
zXgb!KPj;eSXL%+!=!mhp1hk(Ru|>bQYGoy4Rvrz}^&U>mVGz@7N0)2*p7!n)x9%`n
z`1Y|r-QJfmVs&*D4_AHbm*NL*E5B-cz`pD(@{r0gM~CGn*N)GC8)z}h0o{^9_iknb
zMak~Df%*bjFI}`RDzdelf)eNff}VyvJ?J!Kh*3NDQ1DA*8hXvBipVuVy}v>}u$^Up
z3e2TE_!xa>QGxS`XQjSF@lSK@BpQnq==|gWYGVkqf*Xh|ikK;$Q>V`4Ixp~dC8ic$
zZBBb<Dz~B?%n~2HFh4&y`U8nTAg?OTa8xxBogAE;Bx(_fGK}S+N_OYuQGN7bQP|5*
zZIb95a4sNF4X_BuQY->2(FSCZ7EHBm{V$%E{_yz0gz4d`jE~@GEw3(>vnUY!0I_^5
z_QIu^XEXf07PGpz5!zn&Mf1g#B?k~3*e9-)`j~@4rE(nJ>UzDkX=X|p1?XWxAA|4t
zYh_LiUEOSepmiqiUN52FkM<ZCoE``W;&O_sSBk;Je`@EU4nBxgZ`D&Eg~y~MY?b!y
zOqm2$NFGr3p+z@>U6kFm2=SbQlGAWf7lN6Du&|!B>@h7i1DS@}s+i7a&kurahs!DN
zW{>^3&MTTTqK@OgmKQ2uv^m`h)NyXOncbXy;&d`Kii0TW+pb|kBVh5sKYXBQB`?`H
zueo#W{+U9wQ&0DcoPI!8lXtx}BJ^ax5(!Suf#aMT2?M7!L&e=z#d%dQM^PkR;IzK=
z@y>!-Fg|K|3y}nNNL0GbZ8WA_@qUw|kP$Z*x_M!sKa}Y*C)q5*$){@J0~7%v8jr5k
zj<$OYJQ7WN9R1;$V^z@n`l|&6ZqbZ^<%vSelNI7l^yF#M3pdvY!bbzLEC1~AZ$>$q
zcD>WBetMV<iO^<+l`2^UmpEtylw!NEi@1?ixNmxWZYi{9#4|J%LHR$_xfZ39DD;GB
zF3NQ}Bo@lvt1a&fMKe#|Z2>M!dU(ox`QhxyS<sCDRkhPH!{?OKn<GbZroZlh1qU;W
zpaf2BL*2`Z(;~DQsFqO#B}5p+T80n<@5+L?nHT$p$SEh|?SYg3TZZjm19pcBq*$b@
z&@z8}C0nsyB#k}dooYB^M~7OePbg2~vF0}lPgN)XZXuITKeB@(E(!dVv*h4hm9L$q
z#_XCIOTVIa;&hU-zt$FN#w$ld_+0bhu+H94B_{`fY6I2bE|>!8MBRePlcvdwWmOpT
zzXd6mld&=NTt&xfq}CA>%F+D@W`N8<-#%lNMjHi}@%BTKqv&N~F5fr1u9u`gH<Cri
zLhi5VZzyot%sO?#??Zy=GjyyK$lT4jMdP<HzqlwOQqU+N+vl-mA#Xpb=Uux3f2Leq
zV>Om5_5Kz<w=F-_q;Q+Si4&yM;JzZ8yB?h8pq5>-v}8TEFVUFOninWFRUJ=2(PKnK
z$jHhD<ezxCyN^YYV<L;euP%V)MEi`K=F2dpb6hTdRe^@V%E9LqK3ltIm+b2sDYH;q
zqdldyDp!_f+qBT&pZj9>$KI35-A(~*z4NojWo4r_u+PWblF<5YoW`h`rR=&8+`EU}
zMeWw*?#5ty19ei<Mir~aq@yl^tBZp_iHlB4!cSC7b+=$cCu3<)83df!I+I;qV(Ty6
zeTFpiKCr(or2JrSln1F+yQNcddqSfB^S`35$#f_Cy)?712y2@rzmGj}I3_=j)Jji2
z#+$RtYByhKO2_ce$<SrZaidj$kpB*ymOK3W|N8>7#eepc|9cAnIV$NW3Zd{nf!pJf
zE;C$Zt*z`}pA^;B)JPp44<a4JfCk$&XnGuB4bz6)(IDL8OC2K*h}yaiHiSZK*Jy2&
zWmN&%b@-$Ybl>pidp#+NOr(6br4-V^Osn<+>rUp4Ys|k9^l?C3>0l~*YH#eknu6)#
z0g+oWA6=^SDIaXyq#|7GN};PN%pg~X(>n;NhwXrA^KRT!$Ys(NV_yFN^9gJhoFxx^
z7*Aflh5iLuz-W~rdXB&s$t!%(PWtsN`=-RD9*?>+ii*EJ-RDM&7ReVW3!1_sdK-;a
z)SB(w-|0R7fdv$}L~c+rxQ*`vnxw{cgqfiQeTr`eA1K8dM5YMy^Aq0^q0kOafUiwE
z{Fz=IE{2E&AGpH?rS*2k2It8VJx$&2cce|M&Q8v{BOL_@TK;}#V+B^6xI`jO{nCbp
z>8Pj9yLpHA!w21Uq2)@=vZ#YqYl`s{MxO9c(Q7K69r4)B^GxlHt*xzo{`?$x8JrXS
zywzb@%16$nnivC%V5gp%9+;|2vG42aYcF(D^1h>&+JW)9<sBW;s@Wnu`2se9KqP~Y
z)+Mo*jt=--$7{JL)WyL(25qIKhQh?|=8l5R_{lv#bqynkDPgB3ViDeylb6?5(GSbn
zU%kDDN6@JhqW}L@D_d1r*&E-m34_<>d?(qAwEjUuQ1K1<yM|w^k?9V3hvT>ru^Ti(
zXIYmH<ryqDqh7yWo4-`VQmpVa->M^js!I57%nr_UOl54aUNo)WXJlyT4J^)_g<NZ}
zIUOEX8+Riw;hr?x#q;M6OZC-YL|D|Im%V7QnQA#iT)bRNw8i@STa_XdeNK*!j!2Gd
zh}ER!(T?lt`O-oCGw6<qzW(>>a1X1N_p%4C)R@5Gd3MU>)srCF*H%Oz(fseWDYBz%
z4;F~a1in~OQ*(~XuP%aJ%}Q`PjR7kH?AmETH<GgM&=k(n1h+%SZvr}j%XEoUV;M++
zFzKfnPk~?GBsf%>R07B6*|*&DQYZ_tWn)_tyY&^U9Y(s!xDI_8F89HsSE`5Md<jOM
z#+Sj!byu%l+s(ibGs|N<&|-Em9w59tG0#fAoui$Wl``*}u8Xl;UFF+tDvlwH_r4O1
zx*=6b={KyYHeC0p##MW(!t!upw`PufTRC8FTgfe#ukdu0^DE)9%XAsHhx?ZeCy7d#
z*P2;2z^Y#DAph5wr?2A-w@V6XqH7Q2&)dDyV1W8F$<kwf9CW!1UthaI*C+5aMOcP~
zi@N$arX4XFZiZ3vL13UTPhr3yx+-?Yl;<zz@zDVf{@@F%vp-hY&N;C-R&isJ<hLQ`
z*RN;jhT_%0cl;l>`y{(_O@tfiE5vuaQ6R(i_4h-@O-o0o_4d3w`4-ZgF?jQR@&xWq
za}Dw7ED{OfFHlpK`nFCo{2Xq^r!e8vOYsrN%?X0{6|^v4SeFPF0}a5RdRY?w=2_>r
zZ<mW7B&WRu3s5(;<JYj!VTaKd7J4MrzM==PPTaJq5S9?Jcea(vnRzOoUL7Y#N-bD&
zOZ7cXS{4x!7S{5ddy=1d=~ADaRZ`(k!d*<UPM$bn4mToHB(}#8pk<O_(K9_@!%{19
zsu!L_dCqQof%z;<iuf{|%#nLs8WEurb0h0kpR*HJq(0cvjX5@F+ao7nY@w(-J?C-3
z+`RUUO8RTLtx8e0jp<kV0nlFW$ghX;puIhr5U@yGUibQt+w^T)LHps|10Q1)UrD;<
zvd<s-2oBAa8daQ@JVx0sE8`9q?}J{8!;=l7R1uM8ZtK&9^pAI1Us$*9wD~A;#X`ls
zyi<2TWp!6Y*40T31BW+)<C0Db{OTsdlN!>6ei#?mnSByqm*wL-boMMaEV%}bT@R10
zU}BJdKEYcp-jEv2TFZJhB>%9-d%LCw-Vf<GZy&q4Q?oujGn2UN5=eY`Urxw)r|9I_
zlL7+78<NbLJtLi`M76ivc2MppwqO&O4{?=wqxf)+l%LS&veWx^u3lb?YWOZH{`KB_
zyz5`mdbHPWP@{YQ>sM!$%sJA4hGK-qc*@NkSln@&Yd?E<>|vs%EpId%m-KH+$G6Bx
zE-a(IjS^{7e8MisVmYOQN$hH>tV*>91Y<ADT)NZ)O9u#>Sw|~Q4&E!9WZ7OmBqAi#
zf<32lm--QIv954Mox_#4B9m|P5LNDCf4zHmQzsBk$bNp=Q3Ue6vbu(r^R~9p&NPo!
z<L~0{w|DQC>1x+fJK8``Z5OKUEoLpY+?eQ5&CastNQHk$ig<L}0XjO|wFw@~48~4=
zrdxpGgWt%%w|%qOLR(VFIgw*rTwFZL?q>#hPhQ&pMR6T}3{1FLC28b8dk1>ZQmH7f
z<|J__Jo<~uFCODS<<muq&$?b$*6s5Uqlr&DgTz`!h83+#8lK98g4>VsFC#Rjw=waj
zwDEQIBAGb#gBz&2j4^KumAkWEVP=dg>YxJGp?7^z_NJzeXU-%&`OB1XG33#SM^i<+
z;=0dkU}(*R!-Ij`f0^uV!Jr<psc*`*vM6v~)JOEhyIo^1cw6H642wPD$?9vIpRePu
z(^JlxUytq$>d4y(C+SHM5?N1^Z(HQ0$S58z5sUTc+$}dImzZcbWH`-^k?)5*dCG6U
zvR)x*p7@w?nY8U5jUSn1$35y_YMXEcis0J~#5JqcE?rCZD1Di7E6$JFpZu#|V&(aT
zJEX(r7{OQGg`iS?kp1$C<||%S&4XvyLgus8UmwO4fHDBirwydB^QF1HD^$Nb#IpMW
z+BpK{!Kp~Cvd&*qVLQVXXgYY5=C2Q8KZcgX0R&yTBsqSR)o7Ke>@Qj)zoVy*`Z?v#
z+HIv8^WC^r*Js}eNyMn#H;001qCawT(Arl(&a9ggih)<=I?uczxmQOP?cTHJjcN2m
zPwe9SJeN7`o;|#larxmT+~dQ|Qz&cWi=|dif#T>@zI2~&n`hF!ns1a<3cMQS^P}CI
zu05qAXkEEOOW$3JH8OfJ)k|hA1|m~}&?SNt=w*w`Hk+~iShbvIxUSZ}3GXWp(x?kE
z9X^{inwz~_vqNi4?XV9}ZXX{2&04sxJ$-C{eCmVzbq|*|k`uP(O3zOZq@&-Ga+-ww
zTpOIOtALYOIg`0i5#exoRT<M+gS#A!of(RaB!jyst595b;hF;M0S!R9&&-_136Isu
z3&n+jKX7(Ncfj7J0A+QiWz%cvb?oLKG!CMUkAVf=V@l8P<q29v6TdI`v50h;ZM9Z{
z+c1yTrVSe)t2e&m8xY`D|7JV5pzKrC&okgZO7vKBYp5BM^JNTT5=sh~WK#|kLd@}v
zy6DL08c{n7mgd+eN!}S5F|k(!8G?;%muA~l!&~Bf)2R9N-d*GccB;4YN&(6tNEYET
z4O}*6h<Rcbqc})GztpEE499g8<cW%iz>%`=XO-BVJ<UMJc+|kTV?GJ9gm}Hwl<MjQ
zhtXxcfs?q_K=Z@AIA*w4*l=BAbNXI0uQE^5Pd9rWRCo@*z^P1D1@fyIC2!YAhQ#@1
zZ<+VYmtCOl2wQ$r4~{WCFp!xt>3rb$c|URdagwFD%}<|}UwwTsmaa2{K`nTEBOB76
zLP(?cK+;Xrssm3cMm!4h{j+c}1w!P$GBfT?$8MZ+OHSAV_A-M!gO>&y%rWnx8n<U*
z59A%;(olb`=jfQ-l5N!<41CDvfS59Eng3CCJGzSgvjiX~dF+aJNr5cyrU&X*P%<vB
z%$<lAC0;_3-ql}HkzP11STAu*1U;2|?CxOCJC6D)LHi~wW6VJLI1>)yWalec?)VMQ
zpFP8ymc8Yl<hdbpr{pgV8_)_sgR02ix;G{8D*HzOQOmF8xLKtWF4aU9v5>WH)kb<8
zoSt+hePVkEb}w<j?CZ-K77}Yytm>H;igu?c#~zQ-b#eP)+m*!(%It|e^{X~}6=`2E
zt1bmt;y$ATk#6LN4|?S5*2tSM^<zQ2UjN3eKc#MTJyaG#BBl3pX!_FLy*nsAZ-W>;
z>!JfZ1JhW8BpHy3d&UZvh(}&57j|6TXbT(%Xe!-;oKlv><7kC;RhQ-OXAOZLv6-tg
zZr-unJ3F%Ewc~(ZTA=NYRLvksyTSLP@%KdO0`AF`p{7Q38K8w82%@Rw$->(y26ib^
zELU6saikViPtMMwI5mirEEpLcX4#L*L`nE|y3I#5$puBX_m)k%lzyb+&hAte5k+ru
zU7ZYx9HXSyXpd-0Z1MOV1hXW}uPmb8SB7OJX~%a1Vj_Hf8pyyTn9%d<Y9zZ_it~&(
zD-~PT83G@;f0`iyth&jAaAsH;|8XhQ#P~HpMC~aqZ4T}kUh*|?g-AQ?rZ5!Wxnl?F
z*g~-3kOv%N3*SJg&-4^#5O<^8-Vhm_KBU$SL8iyj9Vc%~-Ivs211l&JWIhK6VZl4Z
z*SuP#I+}4Tq6V)`#l1h0uUWsq(5}DC-#AlSSLahYjCg~)*e%UwcWN1|9g(Bixo_Ni
z!{$(BcOsi>6#duax3;WHS|hsGp?8;UH&5H*#K3X$<7$3VP=VV)1HWY%yHu~FBjGz4
zj+x|tZ%k|g%o&Ws5_3Y-gxR^lP>rsQ1cK`cRyJx^)OuPdrs}2Aa%=}kn&*?W$wv|I
z=Pjmos}w#>K*6^$3GrBWh)=%Pjwd0wIoD(DbnWXk*L6qvUXoaqC|qA@XTNgN?v+gI
zHQ5JaogUzK9Ho}yhn}k*$wi8N#7AD5H%X2!OAhRImUc(73inMZ+C&s+F+2LpgHGOO
zB}$_=yHfISVi4+EkQURf)_wwQy#4Kku!invAKfggDi*bf$%%;|&4^L{4Ng-(zZnaB
zZfVgx@HQ<CP!rLLt|P7{kbK8>y~V-$PHNf$Ncsa>P1xBtdtb>tuUp{U2dAf}2gKxP
zydkp>(vK@T%$bD*N^pb4N++g6!k*JB-d<JJN_>eb*WW95%1r0_wQGSqtl{flvGn1&
z5ih(Y1e5}y3ve`!R@7LLMi+Ji>>)^-T3W@xfl{Z9ayO)ey#$8A6ip0ql^Z13g?ljZ
zXLU_5SNG=AaG$PKSo0|TfI>Q<7~{yHH<aeIuB$CaNpoLd_p@!VCNp1Km7S#4jUZke
zXi80Woremd2s3OxGj7%t8olbO<Z18|9&B5X;Zj;$F|Dy;r%NopeS2-&J_d%tC#M?^
zh&`9cOAZL=@neo;*QZ0HH0dWA6n$!;tNp$C-4e^hqTQ^c=@W??`j-ZjZqe0!jb#y@
zIj*si?08*Ia}?!2!OBHeMrJ0GcyOpC!?-oGD&{LJSkg{hdNA-5hLe2phj8Gk^LL<;
zlRtANzm_K7znk^Zw>T363m@XQz-liaqA8zl(yxK~n+m=VHI_Cv8-#q)LDHiiV-g&<
z&nSfI%S5eyhX4!2U4ZWTgZHR;-#lycfi558lRQya%6~&Da>XS`M{^liPk<Vw@Ag8f
zNmyz1A6S5gDrMW(4Gw5^;#%M<{H2u|5i5>6P#b9(xOU<2fb&GZTqQG8=<}nTU)Ave
z#OG%=ax(Lt&1Cy1!G+4ecD$<=O=IZXSkcpX-`QEGgA$V@ANF->xjIY-4vh5dEPO1+
zgQFImM~sKTw>BpwGkXT^)2ha=V`AjgzpgzNP*t6!y~TU3@J)$MaRhD><KVE~H>_FI
zqM%g{dOt}W(aMxzG*ckZYOyOld91|TT)CI;FH`;52T8KGTEotl!cQ<##OCy5M55)1
zW<AaHjJIWMkF^}qhWBjV?83l3AiACVrJB7tm|Qdx*})uKMUr+okbNN~;4LX8dQC^Z
zy`4Kre}W>2Wbw|x-1}p4I%ZBUOGe_45{={pyWwyRnonK$6%IO#&A%5HyMfzu%uqnB
z$_M+W(fA$PIZ5{TEtszmJxZYqahaZ%J|H9{gj$u#^S!9e&(|!{D|rPW+<J>&U-d*p
zGy-s6s8=fjlZtpV$)<nJVc^lvDyHfeIp_PU3-FD<34V*$>LJrbQhZVw7+}G7b8Ypg
zIY?^?BQ1jNt4=A}DHcsBDXQidFV@AXIdC?|@4X5SCem(}n9(Cr@=qgpKGRYk8@x||
z1K?ru)a*!Jq}w;8a6R1&>&~6JN%~npshwI<jJK{>dJP7onb3qCMu-BA3r6ZJAV6w4
zHPF|?nBQ!9J|4fK|H{$7^#~8rZC0IUEL0*Tl`?A^GeFSE0STVe*0F*9Q(cU)nGyx#
zey2ssF?5?5=iu8q^8KA%)pH#@GG>C>t>-05tWJa!&(#gIr&xQ?W;*@)x=NTmT;aUh
zb}krF3$AduX%NVo+ce`M3;*_5+Y99$gahGTUSG=mJA=R-#svw^3Vaz_%7cn9IM7p7
zRRuGLLi$&Rc}tt#7C3hrpMLK!wzC~poXxBoa6s}MA8*8v>w9Z|fydg%54X>u-sHH?
zKp7}p`T`58r5q?~CYp9If;R;#7x;6;mYg$#QR6%7PDvWShaeBT7RBUmTo5I$mX`@@
zqBFH_ruTgRN0G-bEFAJw%REnm-P*LP-MOaYGepUZ&z%L#xd`#aWo7D;R5i~gTIVN@
zHpn+0@xJ2i@bKOdZ;!>ME`&w}Hn4m?u|kg4NF#JR(J2Q%P*G3Kd42YF;8I|+VxRA>
zn6nG}BIkE_d1nc)i{DS&_pPYv?(p`R43;6zORPe%KiPJXlRcmK1m%a^0)gQ|8h^P*
zH>G_YILC}48?U|rV4|_HQrX_Ui&53#kHs!R%e1b#x|+Bw64L1|Hi^AW8k%NLfA`L+
zE_wp;7p;?*KsJam%)VMnt5(AZemM$HXz`Pgk!sZe-v-=uiN%=N69dc6IPBPnZfWUE
z+83sn)2yq3i6y>dxtApaN_Wn64~Jy4lAQtqC)rrG=yA@4mJ7r!+nlIj`SjhgNn|2n
z@KF|R0E;e%b=F^^oUx}fyw-TOze(Mea{@LKqqJLQv_grDeOa0ahMS2$qrk}m8lsLv
zchZyCD^*Z6C~aTKI0-ow*sbiiP+E%CJjH{YyA%%11igNpl8C*H`&t_Sk}VdEB|aoo
znKH|QfVrmHx>cJ2`?6nR>^g>=yNZPJ){E}vr^(-Z%5-<xpyS^4=6>-z8Qk=uiAs!=
z3&pcRslQbf|3XETM)M!|(4J_Z+*g-b`?j-+=mB;8`YI}j@~{h2$EHe(=dE}B#+^&r
z>#flWl`|1rjeu2(*<p86{xn}|ZxH3&6&RfzamjO7>+73|273T1EpkM=DkBC!sME>d
z-`(mXVq#PF;RB_|!O5SQo-X3P?4yk2Tm=l4yy>o#l|;#_po_2sstEa7-jy0j)T6*<
zK*z6ZY2gyI8Az=JYbMKj?dVydDY%V0I+nEiBX`?*>Ss8#`+`D3Xmw0beBpoHXNNaB
z!M>rsx>{ElcGX$vq0m(_p9O2J+J3}vH%HfQMn+M$#r<kE3E&|NLH>#Zd84&24Kse9
zamn#Hk9W2MgJ31WkKz6KkIT>s`j;w&q>QvW#3_YjM!L5Q{gCA&JJ#)^r*~Uftb(D(
zwu8$~@Hd3%9P0(;2P!HmMJx7i?-2$D=Q^9368jfW@1q2PQyb}d&a@ulihoY_S+3vg
zURUV$7!3}NaYe?g>#cPA_a8~O9r|{f^aC*Iv9m%DGM{<8#}`ufsMWWXg;#6Gs;f7e
zZv1EOaOT>zHlf9Zf_?nGHqFu-2X6mnxaaQ#pJrgtu%RkB5OiQPPD|4RyuO+@EWf{1
z1;-07`C9#(=FpRS8@y51w6(WKw?T)j!u3c~NMOk;zF{SLA9UuNK-0hm1X^5ZKk{Jr
zoQYV-YB^}2LYCj8X`>n@5_G2gZgBXf*~ZT_f7e$!_D(Z~rj8><CbYS&trBRD$NWJ3
zm9!Fcl=_B-+W#!1Gy4Cnyk*n%JNTVKXaBJD;ma4ja)-gUB`3+ZEH1&Wy|Fak$wuk^
zF-R#MG`{=P(!vjxzJ^{6UdheLUW1wVh9S(497l{6S-5{zhRVW>U91Vk{@puwKF@Wk
zX)(clg_Vv?IB&xzb~RTpxKqRC(Pn}rlV(gSNgsXa&tOBc%)eOG_c~X6ErF{dqMi5n
zarNue+g#1e%{gbXn(Tv6K9!UqXyuo%v(o}cJe$%^To#6}w{70Aq1-}W-}I!Q-~kEe
zxZTIkiRC4E{;9Nvgdg0y$E9eEU5Vc<e<ubQA`YXZ1}d|8ymYA*0liIdJ#p^(@OL~7
zF=(ttYG-+U@8ysWd;b3W)j>usW8>@_2EHMH^Wmv{-Qp*)>%;A0+O4dgVd<Wr=r5z$
z7GPy&7C2Ap0gWGenxn;#CY(OaJjj!KK|x{ZPhHPFAp#0;U#iJQ&N3=(%0~8_I}I2a
zp%2S_Aq$r;v%y0MIsm^?Ec5wANqFEr2M07DKo)^R0b$0Uo_Q%O0BC^)K&~md+n1?n
zX{KpGQx)6<>!uVruKv0VC5GeJjPEXa_&j<98~lr*{H!tWltS#4g24(L{qpSD_rEs2
zpxON}@3?XdksjoB8{h~vl0z|4ZLw-|LEKFh!)bp(&j?A@Ynf+%Z)5q&{qGUfY0?-*
zSQMd4M;bSkdC#BW;2|-T_qebFg}*Q{IA%HSjTLKVMm`Fb>Ee=>J@VIWEvgFxsNSsQ
z`K7Q-7R>4eoaYT6AK!BHXz_-<p8oO+q36wz2aO#{yHjaPAZLutM(2)I-zeGpzb9lK
zisF734e!WDImU-doOY}?miy`ZvyQ-jhpjnI$&>oQF`hKeGQ}6Ne{>}Ok0y2hS%wm%
zaT|=6yhTvQ(<b-e1atbGf*#3!70~~y_b}4ZccS~lYgcr74jP5H+h8J=6!r^+5|22B
zUJY3Fz%hi|`W4v6XzqqP*OXRDK^O<!p0EV}k04>@f%kSpLY!(^Q4jht=%!HHsT?~|
zQjUxj?Oa$|N-VZ8vj*dBP>YFa2r>jNYYrGVcr3qb`qCd?;AWCxHr62(b45%{jB*K4
z`RNWAF)xqiX+W3^*iClkrbNW3IfwwJfAwu|M1)yG11NMlxxp}e*G@HQ2NSP}cHh2J
zSHJp!yB@?hCJ6&8W@hGG4X7<ZPImS`^10M^Nm58iw~4nH^0@%#^SA%1hN2Ipj(fKp
z{DxqYviRi5f`m91Xs*hXOUH9gQFQaCbM6av6Wwy_*71>C%Q!-%on+bAO5sllam#%$
z2hy+LbT_Yk?PO{i*h0&|&|Kj16l#arUlXU1iw?a?Q=;A&qRtsui_dvTR5mv|K~lo5
zy1z5WCM2a5fRIY)<Rx^3rB4sJ^jEh-bp7D|{UJU*3lbcjYd~v&DWYZLB)A6aa9dOA
zWU4MV|5Yy^BxJm~piKh;KMJv<PHL0-Xfn|Savy^*;)T%lT+xqUjP3yO1A07cjPiP!
z`!sIL6YOXpQ}t`zs$X=rwY8zb<$a8_FeM6$*??t<JPg|Q;$+3@<a?+Az{F|KynYt0
zvvw5)H+yoU%O%~Mp_`2Zhm9m;Y;64JJ)es{d;j>6BbpL=$GNytZV0>1Z{duOkFqTu
z<Oo$h))`|Gz@`FWB^U#o#YJnYE;tf^$we_i@Zbd01gj`c4U?c<osPP}(6uz;EKfY$
zfPGoq6DjT3S8iqyidE-2At&Wj`9eg?Tgh{6?5}9Ne{N{<DG5VJ00uYzwcO*-XU`~-
zS*r0uC@r(mIY&rH1>Oc#q^!o%Q@WiwJQp(39(h6`o>|r;8-_6W7j_#kgn$VoVmW*}
z#I%3EDgL>(td>#V)@J06WA@BvoWPAL<`x#SV>}-xPv%8Xis77~#xdRQP6$;>pBz90
z_gtf%Y(=o0%g8Zq%11c7m5?PX4^Ga(UE`my0r8Kxo!zllOfgI;`X{Wkr9F!#f9Bec
zP@HNQPP*fO0=g5w8i#g5X&lgrD+pqf)4)k4eEV4B!IPMVQShLt=5cWhxI~A4{$!K;
zjLoUEpav_u1{6Qyi|xcn#OtgLr>pf%bbVa!;INZZ6||De!nu?W<f+UZH7Yyb7qZe=
zKSjGOHuN4Dc8SN%6~0Cv)0`GM^fW;u${Fe&(0dV1a~m3J#LJ~3at`$|OB5ayw=W&r
z@(o;s%(4%hU0f2=zqho2etog>*-d<4QUg}T99*-J_2c87g%_Hn88e8&8Oqgc>&{io
zYmjsjZDCB=TZg$7`yZDBhyze0l=F_CxJFei4FAC<MEJp8nDum?uWuD#L#dVNDf<yo
z#r9NGc-SUY!N<aU76%iVO-wov2%y2o!8JA7GE;M39{O#V_^n8;&IdrhPuK~U9Nn$Y
zL}}S#UZ1*L`5kB?XMx+aMknyj6w2fHu=MHhks~q$DJVQ7Z*;xvT?`bMhtQa%iId?d
z2M1<L&=4LuotLDhsHjL1ezbLW$v?1ww5Ly=xGy#|ef(%bG9|gm%gKQc*?=<?_}|B+
z&rMA=WU`6VR%rYuX=xzY+_J^FB84j2_n!*M<sj8jKBscWqwB}^j9omuopLt>RMX2)
zyD)^znN%R7nrvV1NO(e$z#;pRr3N8gWHRB;nWQQo{^w#S>;0c{HU9Gr@ZY>Z{+nMu
z)4A~z+}2xLE=#%2zon2(sLD3@1g(`rXR_mfXj_uOV@z2ap_39!$I#(ZMFsaw7uXX(
z+Zbi)gVG)j1tvxA$q1o9{JF-e4ak022xGX^ORpcLd^?T-rY)?)jY$k4(=1B^SxP!L
zx=YB50Wth^aQT~pK_RQvA%4>`{DdH%6OQA4kmo{iQvt&3LMkE}PY4NRx-HrByDm<L
z;ygzCj9}1jl&Xr#^x5>bd!$V<oAw=AV;eXUSt4al*tMo<z>LB+<N0xl)&=LtA@^rr
z;i2RNg+rq0GhC61w7~o$CJzA}x_RxI591c>g&S+D?Qrn_eKh#_*G=u0;oL^tv2Bav
ziHjxU@E78k=-*Cc43wXFrTT`+@tBfQ#hnQ_2n1#ym9t4y0}|~#JKUHx_5~h8eA;DZ
zNO2(=`L$xDuXk}_*K4XvGs@T;pGnU*%EdkP!>a)HVc3np!CMF8K*Rx^lEA1G%(GG@
z-1)%Eiz1L_o1LA7EF*jya71agJor2DRD6!P3V(a|6}vZ9U_fJk1zS!1v~ygZpMdLE
zd58l@l^*e$X61o5!CbG0_z;{<j!P6C>2!RmXb4XM`WN^UajAb;h<Yly0~J&$4tKJN
z=&jy3icg>{MNF<4(}GRjU;w`iits5k2A+j3vvA-Vq1nD2l7P3@0^d8px(+0g-?adV
z#Jo4i-;`r#hBn6!_2kWipDu7!+~u5_n+w^H4GI|yC@5imcoaj3kE?zmf(s7J+$#p7
z@H8+>LmCZSUvU+pR6sPB6|mOP+8)`A&7rFRHV`a11UVBvboH|dEwJ$*&tr{34Z*e^
zC)pH60Zl2zxX&MKU&?h|n1nOs9N?(9^rd<6P)Rp=ef_v=FMWMg)YZR&gx_Bo3K0Z_
z7YmD&?s_#TBrV3<LI&>r_t8R)?x^R}_Di$jxG=!Uw}+tVoW}u&Ya=1&R&Df?c-|}e
zzs8g*t=ixJZ=!2?P+7>au$<hBhg`qPZhypitqF=-;J$*uc;WM*WCnQZDXe*54?)~y
zq79)GnKszApDuwDN-8LGaV4g`ee3rFhc4=f+&sPGaFS|Fz@3?hruhhg5T16kN1oQN
zfefh+e9+HdzU+?YrY5x#4Op+vB-KO$Y;F)>u3YIy`ImLI7U_Gub&?l8?Zm2Y%NkRI
zGr@fGQ8u-Rx}vqcn66K16K{jgTbHb+tXz4Ix(A>=3=|9SC<!&V;sa-K3nLnp=v@=a
zPswC79LKcinV~|^XM*ArUtf*ATpu-?`kzXv+S%Cw+Pu#*ad&4f&}rF6uNxDRm8|lj
zry!rI;DNaq|MBB6CQtD8j{kj}5Xf<@s&O+P5c<Q-@aBv+tp($5G{1PK`pD%BIk)3l
zTQ=0`A<;+M1JRvnZ59_7hb$OuFK|;W+jD0y^ttve>HZlWvIc1r9bb1_&J^rEv?-(o
z`*Vtl<9J<-vGiQpipSj$yVn~FUF2x&4SQaW8Ckn*>D$ZLVEf_D0PkclZW4+}-h@x$
z9;+7%ob4KyIa~E(RYy>T#=JG=2j%oi=$l)838ZT)%gfo?oOpkpy{6iS8>IBLgGT3|
zl@a*59r}hOqZ}Ie@&cO*I-?z}`1cBDqcm&u)i;(eq&%>!D@KN|dBEFGIO`THH<a=p
z!t)XmdONkMs&sOVpPyd|w_o;J2`nCYMMhe!6);b6cK!yF#6r^RvQvNm{JC~^UHl1D
zHbiyh3we^uZ~I@#Zbs#c?tomMKKu36xj*Mr;5O=egM!8l^;_(i)gy?K+I*r3(OEco
zQCY2ge|Hp<a5-9y8#l%+ujF{F74GgtiFb2lQD^Vo5D^=9C2<wB8mUG(2}+)@TccRl
zVN^|G!=%&$04B~RI4CxPr+xCI&B{B?Zl&V|p`oFPi9@iXwmp{i7Y5^k0?Gqf@FGh`
zWPJ5=K@6j(Q0*DzJ9;}0PzbbCiig9;WaD<k?R~1zZOzAQCu82kM_*W5FrY=oL>_@O
zs6RH+?Di9V^|Z#4H+cb)T39jRM{j4E&CtuIRDTgkD3h^TDXvSKxBc=!pyN4@@aA|e
z1)C{>j!1P0yK%T)ph6VA(ba{oM9NNs2Bhak@UCeP0bMgjN(oa03`mH7+2eQy40MDJ
z0JPYBImLu)4RPMPY4Nx?bD(h_A_WA9Gwz{$@Va!FxQ>&^-?^~pq(*a>MBS(%IuN!=
z4%W%Qyj$Vts@Fs^F?kC2S<MKOTRo{otDplN!YV{s$#p13*i@cBbL2P2bl1Nm0UZ@k
z-nSTUK<lGMG}M8|713VS%N=v06Xal$kX;lM>xd9+izZOcZH_gMJozWfx(Tkh3=IpM
ztL7(q8n)K3eEIO<d`Er`)VdK78I}#>(>P>lua?uxQ9kl>GuYEEq{e-D{Kmye9oGB(
z2*!i~cl-;JL36c;d3eV5WXQpcS!zJnp}M1W3pF+MmMyk7-l~an9Y6ltdzJ2QH#fJb
zUZ=Yi#frNF_di=Sex*`a=#IHY`B}dZbqc*vUte1K>skAahp*@7yI#AV3~P!$HQRFb
zTkKxK{Nq*=yqoH}D9|l~W2^Uux;e>v1c2R5Oe%a!suDg^8Ml5`#z)gVM)8D6GQlcE
zn0Qx4Gv)U=!MQlLgAE&1AMAM_B`|)l`Gh|;n^FGd|I*FjzgY$S7r(q*pR9<sFE~=r
zqCuVVIjKUGH|cI+S9y-QX{%G2=bw7Yl>hiHXm-s@9wLqHTEMyt?Pr%ICDqUjc;HZn
z=Bn@5{L+#V;K&9&N)<^}rPMDgZ}<5Fx_Tu>Jd$U$9%a8^#?{O0iv^+1q(wMl1kyI^
z_5?L!BO~nUAA^QR?i)}{+=jnT++JU#9clIbt;R)D>}6B1QBIOnl>#{^5skmE?Dxkc
zxKTH;S`h{Vyl6w#Cnk<SH(4)OXr6K7gXe8%HCu9Q5L@H0wrqnC1#`^mFI~K-`3xc_
zY&E-#5=g`O4Bsmrzz?}SE&Cf{reba1$q;mrk`LM7btWyfaMAD}|4U2l#QX7M>K4wU
zqoX*NDlpCSQuvHQu{wMS&b!e*Br7mpbfX?z`DeRdDB!*{qDX$hub!mujj12Jn-wSf
zp$K}s*MXutfjbzCwe4Xa9r_ZKmq@o+WR6)PQ)+b3&~WX{7m6ptuZdUbHb0=5h7q~U
zPvZ=WjQ3vu)QIyZfXajY@VgWBGmE)$IFQu!!;#p=9OZ>zCj?qv$D0$^=~jBkud64b
z?2AKX1XshSdx!Atc+?K;A7<VEJS>cJ;&UmdmOIi-o9ChIZu8GQ*ZTJDIC^<x9;lZ-
zVK|xVzT$k&y;*JK%JeS{@K}Rb1`zVf!0@W%kdHISCDixOYTLk^tpmkYN=a;?YIrVY
zK<|NhXlew0<w%DuN?9C!bwCCdWqu#gGhwnt>?}M)xtXZ&+51KAX|6DxxHu1YCx_v<
zcV-otIBOJ7tF@p4<W{2;I3|~W`i{y>p!)?DL2;ZVyW@0R?z+2kadrf+^+>ZCjVJ9C
zTqBE=;Z@fMZI)GQX0oi;EF6{nH<H!XuU{`LENozeQdvBR+`#qv2}=P+*o6Gywj3=?
zWLY<$$y|oZG=|a(D|0~zuMIMX^DM=rd~h27(caE(q&+WW+6bo}n5Dm$U|Q02(asAr
zv0L8!cyJHX89FxC-_<J}x@<r&e`Dby7&6E-9j0Xf7upbQCH!vnhJ|9T)?;6^93T<<
zJ+0AVfC%IcCPsLUjpi66CWk>7U%h_QHr&t_7_m{hVsowEof!|e1QsYq+&3z-Y@NhC
zq_$`wj-3pCvBc#@vpV~&G_X_B41p<c1!i<G`agt%b^DGT!L!58i*sZBKXqq)a|QVq
zJAW$GsvYoq5x<6jJZa%7uS2uqw!dCtQKJfRa{l&BXUCuZnb;}qc*eqW(3sT%dERbI
zx_d*8z?0r7p+s*>=daiNz(u$;UiShNu{(xA*5pZXaiatqQnRT2wY8PGo<=Y2zX49X
z3e#MBa^Ko^?h_v9=aLdiGvMYt-qo3_@jrxxd?w<ZFuQ;xb;G7j6zT<)pJ2?G$i2oG
zs_#k7Qt`@zw*jeXbaQ*<$}^-GoXpt#<R?b!DE2Rv`uO_zP(1g52_u`X>(?)RSmDA4
z#M=XZ22Q^knUsRj2NEAzpc627_u2)jd9x05U=?>vFFIj`KL8>X#B0nYxOHYai8CEA
zP!Uilg)?Wcid3$LXg9}c1i%lz3O@0{?kkISoJxiU27lHsKBbPlB`z!?ZNQfj@3pqF
z)5oY2d~@>}V*!bUp%@l*o`#ewY}*0RBovO|Z260`Md8Ei;f#7JwOUe@yo_=_RymZ%
zT)l;fU}agCeXdAm>aFHKuz*z(OP@Jx$D>oe|G8SDFMGq>2OXc^d%Tq$-Y<(*gcPoa
z-08)r0e(K>5|&MIKL*Ce;HXPur$Tv{hq?Lv?nRkWWpHI*`XWTQt0{!G@KyeOpoWMw
z*t~f&$gU+(5t1`@H{Ldd&%~ll62zcFaHU`7<?Y+IAw#BqLr|5L_AHUHGZ<VssheuT
z%B*#OTSNWU%kc2<J3Q6@KqNGUgZ0k;Pj6UjcdoTE_78vH?)B#5uq_RrE-H^BChtj5
zc$8pPoW<N4D&?`-D=#7{%3@W6r?(0ymx<NRB;WDJ=qR%p8A1zjkI}iI)RW0cN%%Df
z*}z@%`h7teoRi-ubHa80_{_m+^X%3Vu|QODF-m(uP<&<Cv=f~;rqBq}X5T3Ld-Hbi
zG3?tCl(c7~9oF{3mqU4faK_Y|D!*Hv|E1;9fAN<6hhx)!@ypBg7t|<ah5NTS4cXt<
ztLY8~KoXmAT^gv|CAuDNdv_`9&rQ97f7Y)SKKx~B)VFaZhTMKGSg+3vx@Qi$OUOyJ
zp0QyV^~PzU`#veu(ZvPfF~7g1XC?dk^*^Es0YUQuj`QRG04fNSTIQKROUq@wj;|l@
zZl-7{V~CAd!>qzp*sf;J(YJDidSA1K%>VauD|1Dia8T4%|Jb&{*wYNUs}eECXP{f8
zIHDqv2{-@m&Fwkucl);bS_7!RP{*nVyqbIfi!i8lzF`K5(Kp+cdl2*BfRBJ13Ooxv
zRu%;_PQcIwfqdAjjViM}Pqipu1E`}wuFwhCILwuWHNApyY3{9VKnd{tq;Mk8A;RDX
zBGAaMU)9^;Cr~p!oiy_6*|}0IDvj%bDTv4Wk5{+VBI<BR%nD#u+EePr7w~7FbDEt$
z++eJwE#aj;`HFXYVQrs0oCoN4??$RnF|2oxfdR%@y+xjBCN%yB#q5)C0|IEKusK_-
zE?m$^G0H*p@TH_A?pV=UVR>UC#f%4~JrmkGobr2kp6P*rMeUARaWHkX2RRrdHPj}j
zL3Y6~82BQnxL$|Yo*Y_pLyP_IJX56fx+@~I-YkDdqzhs+5YGVz{mcs&eh^(xOu<!N
zL`+OcZo0&~2LLM06dVRx<#CBVs?T>j+|+2-F=aVGmh~>GtPI;j&3cg@(-1}fBPhJH
zGBYvg_w`bcV_o%Yz|aQQkqktSLHWWLON0k`;0{4a%mV6xRbdZ2)!V<*ok=*sI4_g5
z4S$`b7$A;6%?~W2m@BNS&jrvb#LT)PsSGBg<<cOb25!a;dD7`tn|}(<;&7zEoj?CF
zC};+_52XMCiX2n$A0`Abe+~TnnF)((jN9Qhr1(SQ_pPYRDf`ze=aiSu9bG?8DKyx7
z-ypi4Qg+jW7~Jnj>*hnY9;itpa`W=ww`*D#eF#<$ECUSt_9<Rh4^IQ&k(&eS+DQ0h
zpr#`n#x<QD6r_`W`Q|H)Ns1yAZxzFQyV+q8bMzWttNP&Ke*mE2ci3QVLxQ%!or}oy
zZM0WV@H*u2;>dd3N#2hhk*+%Tl&+;5<|+mO6Zh~6#i|;?IvGU5vs@Az<vo~k4S1Br
zxibb{;G`z*2;8&4xv^NdVCN4w2=(?ui4Sav_bH->6lq)Y=G5>OG|0w4K?Va!)3!DQ
zqri(@807$Eh|&I@YnO=TJceRI9<P&FjdOB%<N$(n_&=uE8WXCuH{ZE?w=Y&SRWd{3
z_hf+(;q&N<#bS{lv_cgAH`WBPpXS0HfjB1JI#{1)Czf4n&6L}2{^Q5r(3XeP8KLVe
zhlwq{2<Nm8+@R#c0Zn<7Vpxq^7rS#i{L2;=`WY;GK%G3Bc@1ZcCPVOS6EB7Eoz@1I
zg?M%epaF^kK?gAtiY~bHWfljtc5L8Zml2U;`V#05e?bdJBEFBv?*p1Y2EZs96V*<E
zc~tD+AMIomD66m6YWj{mcPto;t}&OBu<ppmGlHf17*<6?>%qb7ygVhLC3r6a8K^fd
zF0HNoQ61ijM&+rG&+^YO|5W33OiW>T?<(P<#-f~BZz{3ifMn{!6L<6GC7c+DTjg~a
zg?D={m~|H+?m^=V=d)4GQ0SnkF`)RGeKV@BLJtFq*5>9v=fgsDKWguthx~s9nV739
zjz9MGz22T1<9-R{*q;Cu5;g_2cx4-4X}kox40+#0-jBnYEC7Yg5wdCL<q1~GEGi%?
zt3GTg&KzF)#Fv%fOJQg7VDtqGt{I@4IP*v^I7cYVA9Mg;4tX3YsDia*c_0}WGF*Bd
zOb<4qViv*k@tCd5!uj$CWhQPy!%Y<Rr?~*N4+~v_!!ySUfoIMXb|P+2=K~=P<CBxH
z7r4@Wa=q3rdiuVhAxm&q&U0e*QVdf+s)vZ^r0Ib~8MpoNt$+5@V@G=hcl{Q{P6r#W
zQ)K$5^5^K$s0|*Ew7maAKRw`77I)_KOfW63C6_3%?S-tI08*ww94lwy7ZL(RNV$!-
zhzc92WaQ1npZlbwZs9fmnt{%5<HPaby0uI?%6j$W`NI&QV*D@OsQ=9i`CniDuP2XX
z_<v8^{QtFi*}t~Tzg`@U(EoEm{=XJ2_V+)XcK_epGESj`NB)5Y{Oi>H|NW`UPjNE#
zoVx?6#$R13zsbqt5pT0<lBpQGdZv^K?0@){|C`?QOSwPM!9=z_^z`%x4kVkhT>3Wv
zgmxB*g)*k5y-%f{1jPb@M7Vr`;{*}RNtF7W$58doeY~q+n&!IjBG<v%+T1)oe=D%i
zb9wftZfBsy8Oj1AjmGu|rtP%U@Pz_z_&ZoF6+>hwOuqOm7!ss@lQyaHt$|d8Vcd-I
z+oCNdp-z*%<&jd6i`t}D;tzI=NI6e8Vd8`yHe`|)6G*3~lp?s$ggORBm%I>3hv?C^
zAuiR`EfOx5M&x~en4p!s;>4Wc>+@f0KJe*#Khmfx{jN?nkKbL!aJJ<{DNm2h2Qj1m
zuCDW(R0vc8lsaO8dKga3`(eKnD+!g3HuR)P$;qbKc0+HNnO~LX!Ijye>w_8+%AdV7
z9t;NM$^ZE)jeKxRmlygwAr=YTCViN~M(5AqR@=6-lb>VYr8e*GfL76OC5nWwva5Z~
z+;_!lwuS5$OwbU>43st0GUUo{wd;VX$8$mM)|QrEhAi6$)yAQ&h3OVKz{8*8*H2v{
z|Eoz}7zT@xA@N&JotXAO<d$hjEE-tI`zOXY`c_vIkTF3N{ozNU=N+CBy;(E<P3!Ix
z`b!pjeC^*WxuntZr%oSUQM9g$olY|KamcF%Ix#mp8?O;XyhW$DqC$N5<w^MBcyTpI
z1a6bP11ZKHoT18KnxltwM#LJB5j<KM2Xh9(Ti_EW1gYQN<A(!CqOAc`cXh35n~z-#
znm$@Uh^#~YP;?f41nmnT6R;jQDO+sH9<Ue|8ft!bQwEqb0br<8+zCcC`9oo{s1x7q
z4q+0Om!P?3CyYR@KlS!D|Niy~$sJ^W{6b|upP~Ybv$_YbZQ4Z44Un{?e{A5=@>bD`
z^*{}~YyS`;*C{SiaQY`aK(2aUe~Gu$&V$SGql5ejuohy1qCFe4-zSeA;Rizh?C7Yi
zUc)4AH~1nds-T6}T=$Weq-0H?tqkSedCF6qOb-zDZsQND=y<?-AdqF~TI`{HWwJ$m
zS~bFw%<9g;t7e>|8|y|)Kkfb|Vw`Ueh;wS^{`q)Ogf^!;&y*rL7iquG&!^GQ15=b5
z9ya<=RyL0LDX&TXL(&N}+lM43c{N^N<%$JU&DH<N{o&zjKqB2>(FX6tLT7r!EiQ>U
zSVgIxzi{DIH1}^3w?O~5<UB;`j$_kd(_+|SRsY5y#Ym(hZZll0;8UnIb~VHq9df`j
zrwEH6oz(QnI3o`4?^CUv4`N5T4_2><2mNq-KsNj2*5q4irDyVht6yH8X?5*WxYFn|
zx;Yjj&H>i@b`dtmFVv2w8@?MTtk$Hqy-}99qk>Nuo~`X#Zh)wq7aNe)$_WZ8a_*pa
z#&QDZ25b}+v%`V(fR`Yn*dD#<dxA~?J@+?ghvW*=ui|AUMUzhari*<I&T}}#W3ucL
z#6{nC(g9oz2*rO^8zV7wulJB5Cw5y0%!WGzb{!PC#SiYa_9mI4^Q>8RbuoaZoizp{
z1NvBOS*!KLco|gM69stUlOzJpNYxebupVH|swQpXbKRTV*)1fQay;zS&@d95p-PxO
z3*XnLqUWIkcz0<i^LkifG4Vl;-Ov;5qgoMfpt~G29@xHZoBWgguOn8jT3Q~pWIA~8
zf`!G!@v(K;VABt{=sDkiT#m&kZ3!dhBlJw1G=%eIAvNzTn`WESTb-RGG`dsAiXf<{
zjbg8Y4lm*1;54{{t>l0!6jjv-OnZX2Il(9yhBrvAQSzqbhwxY7H^q2R(0RHSn$a^z
zV}I}feB7alo}0HzTU)QRWgmiJDIk!3kp5#5fgr_~M2^^Fq3r&4l1rXYH6y~k$4BS!
zJ=$E_{R&(!(!N;Dv%Gn(R5wLj(-^SNzWPEtC7tMdheS>He(lQ8wf$=3<C+rz)`#F-
z`NlnXL(``dCr=8NJ*+=56B38tj>>Ry{vFisYf4O$p-WRWE_=DOk3)b``??c7J6w)m
zNEJn~6vH4WFuVSP49l2K$}qTbBXILlVhluJV+A=5?jcv8(L4qm*t#LkYHsuZ(6|M-
z9mH(YPruw~oVN;kJz@v-Kx$@ja(33ufV23Gw=hC2pw&Aj&aA~{p0S+mzq`3Nc7x2!
zxCVpb{w)=KkI5GnGOtV%N`gMTDAY4qNYYJ8D!TW*#EbN%LiEZegy~iJ7xNw%V|e!W
zpHqVoT<C>C9lz-8lBnpw{+_An05xX}W^%Jn0n=V853&T>?WX}&ACGa1&L+UJ9JOWb
z?Z-UaW0&R*5i0{qf%)kr5B?ZrbclG?D@|~QJRni?^9o#!z$2fVni{H&3ZV5cQzD0w
z=o`7^?MK_>KgE)C4{3X^c6Ex4thh9oJ=pDn<jnl@A8!#dX|G`%X#&?7R*5oEk3k0E
zmj}fbO-M&<Z~z2V`u>)*Y=<4ZzW_%}QOVxm>4}Mq_wNG*;v_S&YNGP8i!w5TM9*Kk
zbj+XsqYn_N;4d(Z>xo>^YN61PjB-9fC;^unEA!BjAm%Crys>6{jCWa^n@-%ccGh;W
zCEqDF`ZR-IBu+ra<6W0F#vi@?RyBN(_!Ax)IQKFY4aOkcz!ul6sivW!iQw;R!kE0j
z?806!z3J&=BJ|*H20~Lpxfr<GfsO{ypSoYd{)It6OvG&0$0+1yvz+|V`ZaY|0&S!Z
zd;wR^v55Et$|)#N>;+9WHu@Bc+`}UK8oX({g^QCDOpg0%kEY^rBcjic#*>$~T2=K4
zIB=~QL#YVIgBgIh>%9J&cJYR!<YTNqy+I@(+y#?oX3B+``9?*sackBZGaXzAYM}>#
zO^`ow&mehT6ANj4ymy_2uZGM3JTQXZYt}F~Nc6^&PQXbkqW8EaTk0XeNZSgos^lV;
z0Gs;k{{55g^B4BQuhSrXPjzT|SzB9@TBOzFN8?RM*K&pnJmmiuDuTnWw+N{HSlyM9
z@_Be<%IBa&Uq^u#;IzPBr!JMgur6F!g|-?TFaI0!Uk+`?Q2U~VMN8)ODR9p^vu~dL
ziNXFSNTC&cpR@EGrM`#pzTyQ5-|azVzf8Xn?~i|SSaT`U>Z>BGm8NdpkhYp(p%Xw1
zS=Jt_e;I8TUjNy$$zV3q*~gM3BO?PiG1fF6I3Lohg2OhO<l0_eT{bKC_)K9HuM;5u
zW9ByL`*K+@r0CRtQbSVA!&>j>IDrJLyIA;mWW=VZHeWLy_Bw%b>{lrPx|$a(oc(I*
za`W~Qoz!)UKXuP|Js@tZtE?0dGP%>b?N_U9b=<92`xNr-UD*`jzRST(wcU5Xt|70H
z-63&~#i>Z()Xkc=Dhsw1H^|90B;hxDF*jTmSqkjK;aIjf5PJyJKW_3n+AUvvmu}WY
zYY;aDq%!p~t(!@cwLbIL4+wMM2CYC-KR++-QX%|gNB{446$ONzbWP2Sarfd}TFBLq
z=K^shoxfzfiw2d;5A|*B^(mOD{94O<VbZ&(<_zsgVj4-KJj@SwHgS<)6>itG+s%bD
zbqYkoJ^SV@$^*~Aq+UPIeg^Xon9;7rs<{~((Lh>USy!j&(GBppvtS7{jB0+6a;@T<
ziLa1rDmprPGmC_wz|F>lgW!(L&CR9iCTpU+3Ce!-2`>4Wi}T`DfVE>)lOZ$+YJ1+0
z*pJxHm-(2Ic437epdRUCI0P@Xn<wVkuh>oYh7LE6fWCrny2D%q#wc(df%MDI;`-3H
zszBRMlu%CCW^1>c_&G?|C#Oi;%qMw{)ivLoF)$*=LvLw1|D+qu&<kFZyy{4g4&+K-
z`{1dD;U$9eDiE#&EZk|ls|E=_A;-=pO7%f!h|u89cr7N*G>CtN;TQUIur6i<HO4`y
zS>0|+Z`@j|U3YhYFb5|*zpSjM0x*wFhMh!|{PtsdDbu*;wDcQc3R9SA&#u$Qs-#Ou
z*ni@pbO7572qH(f>U7sgRfY-AeYhP7i+H!8ZxVy$!|g6FWxaxXO1Ed>Nc%T+njb?b
z1GnI#(u4Wt`@+^`1^7wETp8&6q)kv5a}AHV%)L?HNwE@%^>3onU>HhdyjJ_#zkxa?
z|BWhJl>ON15Qx6&sjFZoZ;U@wZVKTbeA&)HnjT)+UhrZ!$ci?cM&Av#-y=;NInw<^
zAoxRbuANrj2tpi;?p*CDor%sgf`T4S>jwHII<c&qb>q}A(UuQ>&8yd9mX!1$Ng6|k
zpy}d2Z-7mwoSBWI@<zqRD8tVe)6PbpEhUMDu_TIrdskOP>fpBxKX9${e7Kvd>s0ST
z|9egE8yFbE;nM(uM4;u5_awhhOCxQ-l65$v*?f=sWCJIL^1$4SbHg;tJ)N(AhYk;n
zn<<>9F-mzbZD)sXTlv}X2`4to7;ct?p@6G7H=A7Hs2fD{11>VK@k9A&WK=ieK4<^D
z%iteaz@GwrD#3{3XE|MQM(lPaQ4ZdmOSjH`c^*BpiO#>aJY8>-Lj;3~8?D}#iiZMm
z<t#%lB=U@<rC*MkOMgflZoc05<45u4)zzg%+}Yr#zS`Xxoig9<APYv^xz^aIC=8V5
zg01F8#NMOog(E>!{ze0e!Afo{X^|vW4hOkJtfGb9fQU3i3byOi?fh-fSk}O@k)E7v
zG%F;2v*s&$Gos~_lS10J3`>pY`id=1TxNK&zT=1JS;NxyBm53lF(}VKMNQR7e14B3
zKAFtH`2|%Hq9_SwsV;LnP-LC`@u?aIvMG^sQP4tLn2qf+eB*Jk*BQ6TMfxD6(+Qpq
z(UFJ&XgKSgzuh|o!Yqovgib;U&f+UohNo_H#S&B*=;@E$KP{G*E$#BN@;-<)90T`$
z-^!-;r2B1KOS1Q>r};T#RKsu$Up+QD3Nyz7q!U!W$dN9Gt%li9eQcQfii+k%gaE+&
zP~hs<SO|p;GOtzLqpoM2?5i2mekonZ;vys<z@zo1m#?TYD=iJh&{#u!#-u$=Y2lo@
zxHQIuN%w)j|E_&|;XwPx*VKVL2E+3c^#N=vv`kFMdHkDo<;EeIt9$2|H*~CT^V(H5
z*fHX^WulN|#Ll;EW=8=3VZNsgZA2DvabAXa;f;hGn|Nu%vu8O6*iW6(ciS5+Zh&Ny
zqzG?sYJ3MADxT2<PBr1A;LTbmn=GSVrc6zPGO&ChB|elVXYogC*PoHf|2BT&Z+yX#
z4`;d-RX+9a)~16F{7agb>r6}}|Ix($uT!o5H)CxKe~8BB5d3nD@u9zFJ&8ChJQl~f
z*HM?yt6_g31gfJ+nZq1@ir*_M8|v!n$~d(4{~v7qWmuJK*9MF(ML|JADFLNBrCX$1
zI+d0d5RfjVQ>0tERT`wFrKO~#LqNKlJtjWyxA$>;n;+|ku$atwUoplx&iG=!{`YS#
z{3MvLk?*kZ@K8dETz0l!SXf1VzO)HLW;Xu#U|=A^BaVbb@5Kwt@oA@q>~?@QRR5Eo
zpM;UsJE!Mt%KG|>V5<k5*U+$;J*0<Jm(nhZ#9*hvqI*k9X}G<8ZOTN1nH~vVW_C)^
z(kBub=wBz(xxyZ$C8eFEbEPL+hsT=NALBbG3Sga+&Z-@*R|Zpe`gbpPKUbW7{J-x#
zqc;NiEQn|m3((i1(BpdJQnoQdeE(&LZN1A%gP}Dd1r0sw`a4KuRVj$~wv8c$8XO!9
zKFUfQa$I_jH?JK$|0B$hAU!#0m^L7fd9~+IE8>Em_wQ3fnI5g}&%N>Qr=%v}4m{mI
z`O(~50Qxx4X{fW+gQ5sf7b=E-l~*mq=<&Y#;RG7qRqnn|^=8|%5g;GPU!7a*EQ8MS
zx%GNmh=$jhRgiZTJE%AylNuCbpCKXvrtSb?sIv`1I5(HgbmZ?blioyGjuAm1b`%P6
z!6~rvv*_`oWSDgWN91Z{fP%^%yzAf=9RgGb`sE_GQ*gl+67ss8&<RW|7>JhwJ)!aP
zG(><&IV;}J@1QaKn`)(Tw>s4Y(9-l5e{4k({asoTwEjH?N`S&}NZDEm*8$4CKRVIT
z#u<3B)dEU&x?a`~^}Iboj+|z0ZJnLfrIGs_{a`g;<qy=Kw#VDH2l+Ve@F&yxJ+-uy
z1${m-F>V$sIl0|b4HKk0f#<vv^hR%W;2k=FdFAx<Q=p>)DwPc#fcO6F`Z^<-{LQ)c
zFruZ^c-G7i9J&l4;V9}by~$1>gn}Sqert=x_Bk@dw@(xsw7^>fHH+HXdvM;i0VnjH
zghpU2SZ&Xev3WFk`yFmxWNMaV+&u-C3_E)U23}aNL2HSbnF|U+y|i%s->b41v4bSv
z=$?Pp0UXdGb$}%X3g$e<20(o=&uH%}aXW%FwDJ>BiH5_$3AB%CXfvc1a^xpryd7}w
zBttsNH2~uR`|-tv9*oIP!GWsr#N=ak_R>Vf3!JQ|yVwnS-`+&1-UKl#NTkw=8i}E7
zCb|d!a&DI(IEKu@H6Qx}?C3K<`YPnSO)4NDG65O}>gUPlkTn6y7qIfZG-#1%C5f3(
z3p!)6p;aXH^7gz5`c5Ao&?>~etls_h4d>$GNbN55$B%Gaqd}&vA2fl=Y}{aJib%2c
z0c8Uuc2<HL0sv%jW^+)o5jnwS@E%F1GlHU4VC~lds2>f%9uD5?TA?ST4DEh&0SY{w
z3eaIPUym!pJrw<IP;tSgF$D|oR8m2p4?y3S1YHZGVwyf=rN?kX;?X83AEk>`=NoSR
z(94n2n(`CmcUS}J0ylv(@Z`Y+<@|i_o|DrN5F0e|6v;f>b>IU1B@dz6htNvnvgo?c
zw~|nzdxD%6h&0T=o1LcuTe<~c$pTwIosIi?*O&K!j~aM~0!e{>NtobQ1tew3Qb9n^
zqcs(`v)>Qy=+&bJhlciino_swN#V~WyaPt!p!A=Iy=UPDtsNu+q7DXuK|kyuYz~l0
zZbC%>2H}w<bp4)ZhgP7@c#|&DcPi<&hJhM$ml7N7P6tzW&QC(%VSmBkwiwQH-Z50k
zz07->!c)=%Xd-mUF+5mc++cEkyan$`Iqlhv|J#>;fdaa^V#Y$%z@TBx0W|PYYjbn5
zPBJJ?kr)5fBpa{BzJGsK#HyI0Np1)R3NI=wGG@vEEcXs&h4ejTKa~Kuo5|E#aj2P9
z^L|1W=kOfRg`{7Oh7IbJ4R?2U|M~@aJlbCE5RK6(dZhYb0n$4`x8+k}`!W)Q4@rD!
zHV9W{&r@&}wg<9A`YYFeLikqPy8y1eNPG75f}u%jn?bkk2YAxKt&NTu&f~mo7W6=z
ziX6|;cDicI#ynb+R$Sa+9!d_da{8=(8xpm^;$HjqDkV8N5Xa<C!+}^G%>jv9r5``0
z0iD$AY~x3?o7r&Q9I!wn!inu?zc)4cG)B&RwjKu341k-bAdvu_t}?|-h=}_nbOidd
z(f%-cc6Ro=ZfwwUvVgD*ydT3{57uPPK&lIc+sAtlKU4#&4ahW~71Nu++G8=I>nyI0
z;UDgv{j!=3fGKd45%xX=8VsXuoyGbX2^Eo)*=JR{&AL+Nlu2gIV$j#pK@bBj{kQz8
z{2!?^`L+wLjhB2gt*w-djCDG-c&LM&fbrBiU6Fb!;xEqk{Ri}*FX!Nkc-ZV0qP&?7
ziyh*DQv}`m06X``B&h`Un+`Q(WqAPeHdVlde5eP=vq6m}=D@uLe>@OQZ-SWW?~#$I
zDV#oCz;KbR?1^JZjlR(x!$6~l&Zu3^LrK{>RJIJ#se2e0pGXu^0IMbfvWSd{F{$~B
z8<2T>0yzhXwnelmDk=<xl)<~^%YXm=S$tJgciUx868e8XzuUKN)f;R4H`w0Y-SO*J
z7f_EtKzsFfdUzr1Ufm0=B^|~a{lmkQO;*UzZ<iUfE7VPZ3&Wa0Hfm(<<@~3o9-k^_
z5*NAg<1&<qK)k!x--yGc4PKcibp3YV{-mLyLAB}L%ny_u43bN5*4~AH#D`q#e<3gY
zHZt<W#Kf8cOLgDiAY1kHD_0=1PN|$wCNGEQ?=t^L;vOZczx_YYhE>sNq|3`2yW9hP
zeG;7yfp%3I_=xxQ5GyuZXIcK$)mrlsXd$nqpT9Pac^&-B)%MLB&1$>0s+kYb6Z+sB
z({SbavTFzc2vAgN1ACnbwgwRLDN$>xt5@4)a%4Ut$9!X#QaKd_T4scUP}*)2;i{+w
z6dS!gaxwQZ9huQe%gPXwsWdC#Cp|wAVLJ`RXK_4SUxmvTq-N*cERE~K`I*{Vk68`l
zArCXd;Fd^MINTDUg^-I&?G8S`2sYld;`^JoA)_)ntpr$a!Ij1tg`qjSzuEQlX0CQc
z1R>qCsi_Hd+8faxO6u0+HZ=5a&Uhh^$!B}uhw+v>aFlxd+{vxR+*SP!G|}~zqr_C3
zr2=8#ZWj4UHWGYOT!C9J?Fxi@P;Xg+jUp<)@p6wAc>O^p`s;ZmDE)z9nE2GAVAqkd
z1nA^=bo1mb@GZdFAl>teH^<3dzYmOd5USj&{-IK1aI;fL=64!^OlUBv23z<2Tz43e
zL{b%k-wJID$S5^S40X1qryw#IF|Mc!Uu17ADNzy=d*%PhF}kx8$}s1EgeM3^$_1oL
zkz;b+q8^VN1J%RT@k0Oe6uwIc+5&UOV~~Tw6hz8^4oIvrZ0I?eFasdrwG(^1IbHt(
zm|{3tBPV-twQtQQ3pGYV@Qb9(A;PZ=YL>I@7G@|MWWEj(VPSnU>CM4oB8)<Y4}4m~
z;uae#D`ZEiTvu=2yIUA1TiI8<zCh-Oi@J)B5x4pBq7iN$1=Jxp_iEuo1>K_Jyv>c1
z0Z9)yI)}>5vGcnxPXG1*DGrYoi`xQ7nh05)a`rATX@}dviyo+vVCSNAr~`^aK|#TT
z+KazM9&lK$4&_!wL_~Z=sCNNhaXs1f1FSckm?SR_Ihe(0({q2N1dJ_#CkWCAn*$){
z1%ia<@7Y#I_rAKiI^4~Xu`RYAz?K-I&b}IV<CXq~BkYIfs&K5@XU!7$yprM{%8qMr
zoxs^x>JQ9U%fYOY3<L1L144eGR7CTGE3ob(#=(J283VaOs5n337AxW*B2nYZ#O$(q
z4J7{{C~(tyyS5X9Y?EcCmr#07)P>f$i(p`2K%m<h|7Wb6Kb|&&Vi~i<oah)2xBE{L
z*%Uz%Nf5Kh2n*K0z~DCO;%Ei1+Q%j*VN#g~JbqYZ(Ck~(%Ha_Z<hPRG7jS{2r?_3)
z_xDI(%L1?$je&C52e@XVz_jb(lUdmd4qA4ZW6+yKF@maK0~|ru2eZo>8?T^3g~^B_
z2-9IS2QaDXawKX@Ruf#sw6;}zcQj<jV1Gw`9Itg^vA5p?A&JytR2Gd<c73ww4Dd*?
z{*x9HR((<Rm6}=}evsNhJm^CtCO|)&W{SVl!v~@A1Fd^C?iY)R@+M#xf?$i1_hg)1
z=!CAZ!u{mY)YQ}i1;#C3uqlQa$I0;mCV~lHH@aAs>i#m0<9J>ifsWvAM4)T5Y`Z<U
zLv?(xMdFl^=KDR>>r=YW$48w;<7G7WT6ygj!HHHw7wR;2Fz<^DGS)=SQU+w19wDlU
zD5eo+ZAuZPwD8>Py+aTf8XD>AxHi0c98^?OQxnU8kN=#I+nUi>0(2Yp_Utj2>kvR-
z4&3U?bK7yi>MB7!sVwUiNjXBg20E-IT&GnW2YbpK8HpI@e6u9jj8IQ6RoSmbuCEya
zbPmHe&G$E--*qga=ixbS@(FlQ4Hv9#O?e@lr|*v9gazO<1?wPX-XEWIM5~fwC(^Qn
zJ6lRm);txbBb@3wV2b${BJXg8E|fn(o+})wDxX+sX=x#5*|g8AL8`d&@=yEQ!I3%_
zv_<oIe%S&^JGd?Q1O%G<`k*tBAOw8q)#Ks2l&CV+($+z2#()!y7`UB%8&PM71uvPa
zuRbw^cR=|DS|tvT(|cM0ur1UJ7I&;!9_?ELx!M*c;C73}QF^^IUL;W|j$on>zzf)=
zz@;lOzj_s3fA%gsqi5#7%gEBzl#kD)Xvyv}k?oVqKXb*!QhcVg_1Zc2lM~*prOowV
zulq{Rvbv-tu@qg4-eb82?0<S4*=vG*so<#plDpF+>h<Z~#bQ+d`g#w4)RdF{r;FYO
zc8}9VfCT~c$aL8=0slmAIO+q}SgNJsqoR^NetZpa(MCpJ6g7X1?wN``sNfUg)`&?-
zf$Q9dBT%TZA&f0}CL>E$LiUj{jv9Yf4v=5d<eVVK^Hu>UXvh(M>$6&Qd{Q2Rk*<1N
z;s^b|f8V=Jm47dfU;A(ER>Q?YcsJCJe1@%erqudiFMuTozV0zYa4?(`P`8!Q7D&`&
z<>q#GKYVzA8`A@3O6GhN6xahwr-!DtW(M1{!r@Q({$pu_-st{QC2<_|5typxDtLkU
z!@|XpPy(ybE|8`7hE<}r3Hwv8boxI{DGCkiJiKU{o@VAKKd81Jn5?|ua$J7{3FcyA
z2XSvV!<tDm(kd!&4GmmfsZsA99O&XG|5sVg;bd>mHCiyfoA$(tG`bzfV>KIppP4{h
z2SY(xBML8ItP<4NAOaKz|8&6ezrXj9QUUl;<VB#UFs4;bPLA{pee`H^p?@@-hBk0@
z{WL=b_1(`#udDCh|EtTPC3<==tdi=!dzan;k`Z_5X}fF8f-?RJDafRJ2B88Pz9&S#
z>1DO%<sr<&PtRubVBW^!xg{+23#vjOUF%~5xZ2z@sEg9t2U$-rvaJE^EKkkE*f<FJ
zUXUO&^HV`VByo{Pi@k{_DS|{BtE*oXY2S7?yF%N`;dPl&s9{t7nt&Fu0`e{+=dt?k
zK{UssM?GLXvSk@`Di!Qyq8&#3fU|2qE|mPTv+bGOLt;Z5zPDznNl9haQ?4f;_EPx7
zr4-N~@vOkZbvxT|intqs0@kzCkoxfUaQ*0~IieYS@ZhtuU><qKCS(m#F7}M-dCAMX
z!y=qm24x<J`xDIW?k^`NCtx$a9>UU~O8Xg{Pe8vxUOsLE4w739{AVOr&Z5&GE3GdM
zfTWbRq(2J_>{b&h*%#uVNFJ+ont^L-cW=b`cEKq%LB;RP@Wb(j3vS=TCLfepgVd*j
zU|r|1rn>l%3~8TFs334q{*K?_>15UPX%dWF$TN_ib%_tQx$=zTO`si#c~G`BYCpJ5
z6*g>9@gxFuCSEt=asLoK+b-Z4`1cPNPh4l74EtaO#+A0-myyX*r7tO-9{IHLMoUY^
z7i-GtcG0~8P1iyr(~sI=<1b+ZZ86jKBCqHHwn}o!WAPC{4PFnna`-43q<Xjuh*PEg
zNs~>(HhD$MFphIy4JIUYQBn036%KxlK21moc_urwIrD3lgwgSoDC(ErBh)%+Gm)1c
zl4djF+{<PaGDaRGmBNoBENV3{+9n5w`juWr)^2HyQ&b9Y*g=IiM@~+k>n}iVbij^{
zSny(E!=$WOk>+V>iE*Z--Qlu6@*K&9Zy=H|FtC6Si7dgtzFyw?Yk>?q8DR%?G1>Jl
z5zA3*;m*l*MHrrqj7aA*);NUb5$2&AVvl`9e1PQSDznv`3HLG*%gTJN{~?3VJ1+DA
zaMSPK=TyAsd;P*<=r}9{REVEG6}@O+a7AjZB_wQrCWZJWCCn|Mz}SVaJ<cBA1LVOp
z0OVp~;OO~M&0F+=QMebS89bFNE&tlxK5A|jsn8CqxP|!jN=u}dON%&R(I0w1BABMA
zS(>A2Gux|HxMy##wzCt|*Y^Q@b=~a`;u)!6a&xuaQu^&1&#J-e*Xtms2-VsFshPRC
zc{^i5L<CtyYIOA5`BrHq{_`y_p^z@{#rq9{fP0K-17^_qS`_pmUNYj|dol(Fej3T8
zxq*l8o4RD0zAL8APPMuPJK=4yOfP+Ar0Q;TmDA#CGo?qM2V1hgi}Zw`r!b0@la+0B
zVnN0xCME`pRUCAG36(digT~jNGBwo*^4{+7=H}PBQQHguBm6Bpz*VPhO+<8Z){nTj
zXiNDsViDF=E+!%(%|OlC-P?nj&24|h6Ql<C_@i*F2pmk>G&-$6Bqng-BG1SK5ES~$
z{?u>@Zzm@w$wlaj36y_=3aI2&5?6XdLj#QZaVHk=3SsP00S+f-hfwDLa1$6E7zk2C
zP%<5Cn|bFvnF99~=yK{)TGybk3=0XVDlcD|s;!EOQjw8aD>0IUXLs{vA{>SK1XCM;
zf`hsK33QOa3VZr=8XAv?%9UCD@R97p9Z8)=Po&8Wm{#wEN88!i6{9{4E3T;60RQNU
z3QqcD7>){0VZOMBi5V9s#=nveGL<3AImD5npfFQub@q`g9Czk76v0pm!dh`=1&9CQ
zs(}G~JA3=+uGe+5P`0kF5{$_xDh?!hw*uDjxQ@rU`sK@)h~=V$q^_wM|LIfEL`0f@
zQ(GG=8QJ*61oV$DKgQBA`0`{lx3s{u6p&2a4_ncFF=86}^4@M0Dk`e8)6=Os7wkPX
z@KIookcQ*tjycRSpm!&H>OS`F2GU1ORMelE1|}x$u%sly2!qnhOif3j-T~$u6v}gS
z=GYzKBuBfuA`7~@pJ0&s{ZYBPqT&-EXMiI^wDV&V85tRM^<RJt*1lc!&hq7j0p&V8
z=dlu_oo(nmT_@Wb44%Jy`Ka_IyotKD<=&*3Z%X?Cq+4X4p?^Z{CBML%fw8qkp}MeU
z+e{;!9pf@75<rN!XJFFeUmt@fiV6oj{U>C&N1GssTA6To@)7*(W42c-fH#5xj*kYe
zTZmj>+<o&m(Bng7ZChb*YoJ4sUgL*R^htOY-RYtMx351){~>|sTQI=VB6`iUt-J8J
z<E)Q7y{DXF<9Ah66@;Rn!1!!YD?Q!nqd`Vy=6#*gvY0$eva|GLaA<uTUAEZvk!VLT
zT`}$5@}EC1${|n=!oLE8g2d^&MH5x?gKaQ_Xle5}skdKX82v~-hMeMnAFA%S(d6uG
zZ1+DZ{uUKcp^tHXNJ8Ruu!d{SE%Te1J~nS_)w%=_*YtF<`0p4L?in^NZf<ek#22|G
zB~cdZ$HsW-ZpQn(bpl%uKr11yLihB|JfJ6miR~{@3ahGHTW^VVLGnGkby*z0evW((
z#&<KvL?r^#IQbp$kF~|ymjLp>7y*lLiBSg5t>ORXZqczQgbh&%qu-sjt=qci%Ql2r
z50~DHTbS8wFI+*F`vH(|iiB^qLV0Zz{^?i&#&40x*0guqV#5e=H*h1zVCZ^Z2fWg-
z%w>M#&4(pu4QL;S;bkQZI+y-%;OPk|GBh^!3np;=zSXz|3CIN!nfJx79^qV&RzoOc
z^fw)snMJ0qaw69!N`{Sm_SCyz{ASiPIVqdy!)Nj4%@bYt{gqPra@k!il`@P^)&?dY
z9g@^iZ+J;b<@xy39}m^5UzQivph4oi8WucRPJJFSu^5r`Vw~ZRvycCzh`&vEij~2I
zOHBMBGVLd^32l?Z)-=<TCs^Q^azk#W#sSU7Cn_qcF1EJz?8^&oR%~(J=ssUZIi*)W
zii<IHb#=$b#djV^D-`7|0sbAvA3PJ!Z0l7%>VCQ7nVX$WLq!Gk(O0kt%2PHZQ9MPv
zWA>}Y0c*`UFr=;O#XR0Xpulb}v6#vfv44EPJ}%C%%=8IxGMrsqAq*W2cVK`2ZI3ye
zijAHgAT5ndN_tUu`+Uys_sGyUTchFsO7@ORil1~`h76|X1&#$#0qmG>6|3<a8*vs;
zrC82!ci>o=ZGY(AYDlB6!2}sqFW`Q(<t$aHsat@wL<lZQEzHkHe#8nF$=Ia-`t|FV
z7buy@fuV~_OLXO<g5+|Shm%{HN;OMqxw)gj3<ExF5MgFHp2!qL)MEK^BziyfAf~f5
z1&r4UjsqYHtfp5~K-G!@G*I7S@Psv8C-a1;FtojqHTNtwG3xq_waCiAeq2SVbvPx1
zUi@zGa05yH;=AB|IHQRniwj(DUQA{PoBcfUJTWG^RAylC3kk85lN<P%uSv{$0B1O`
zABHWP1_vK3b%8A_#-roB=}N3SNgO+4P>yvKjDcw{lh`U?V_+Z=?pVB6gLHNM?4R`@
zp%ct_Xi-#XGZj4KdS9CE{>3P0J2opPr@9(<%4_~;#woz}R_3z+bDVnz1-f}<t1*>|
z8s+7Toa5x7aQ>&A=JJ<0myJnNav-5S)YR+;)i03q=q~H}1LJ-;czv>OET3YY_NHCM
zj7!f4|5S=b%r66GJ>_CPaq;o<3k!7gH!kqD&~7?P_?Je?-&X=>fmVLr@r6D9b2P1z
z@DmqO?2*rje8Jfj4<1Ci%yK_laUdoRWB9#f;nPLJQ@Zw0x$~K0Bw2Q{fD051<U&Fu
z-EPj#QhOn}rSs`Oo)O*>6RzjbG%R!FH$R?`Me@2oNQau`%HCTM+)F2k);x>*$;2eA
zrzg~df%gMA-olr(g)G;z1F%36J~l&%VKBOxwUhM%O`Rxf2tK?JnLKy2f8|Ykp3W$G
z#)|m_$8|~bN`#IsKPX5VDvQ|IPYDTB1v-w7&y|(!c226R3w%(**QTHRUYuXRRx1z?
zc0g^Ef`kG<o}#_Iz5Ab@EjM0WJV-B`r~Ik+e^@||AGgh=!_g*EhIX<bk;mS$mHBB;
zLLS6(=O42jZMK0ug&-ZBxN1UCqpthL1iAq#R4@D<r^#sr9sjDVSJ5z+tEu4wV}Oy$
z&vxg>bn8iT#@dzlpxT)^IQ&ZFvjWD{dq2~SybFjs@W~Lh8e3OqR0JISwvLW~m1{y|
z;L^$JY62qv-FBf8a5XT31AC%u?(GF2mH?&TyoX&SOZdQ8TDp^#5-5h?miJjSfGblH
z6FjrP;R}d#J3R>s^K{V%+U0k^TlVwew0Xz#lwkLzm_Jz#oP=Op(bqxWcu@(&LVmbj
zc^%h>Ay<MDnx6F&K&I(px&i|+K%4tOe4!AZ^Q_;iue7vOyVg-<q5Z2x1)%LisD6gC
z-y7!UHnMO576T7@;`76UgU!jRKZ%@wP5V7XxBBU9tFm*U{(u*7S!id{(<{2XAc2FV
znnQ?;Y-d!@iDJ3Bw$@?u(R78S?=<t=+(;oegaQl+U7gU=CqPxvoP0EW_U8OJB0c@f
zZ8ZY*JJ&UIS8P&Y@P~%suR3qc%-+b!J$mrrd^lX_Ytt6KuCwcK9vN_Gd7$;$433ES
z6Y+-F%RO3`kdc=5`0@<*hibnN@QU}PX?LXK;z53CVq&r}ZvS7CT~E9LxbDB6C`aED
z74-qwCm@ja3-MzQ(14>jG~UIQ;N=<1v<|u#Bt{?H&=7A6m|2NYz`^E}$JVqcl%Nqw
zF`JEXNl77ZLgKj{))t^2{Gxqe4_s%*wtbk=^6>LN-Rl|VvhoHCaLseekJ%fQuRyzf
zdD$?AZDUge99Aky9FG|`2H9$}fp91dhjNA9zYEqtdNDdll^*sjAwfn?zl#5@Sx8o}
z<4vTby9F|zv99a?7<5i<N<PeR>Uissg4^W1Khu%2a}`%bVtOVgv4wzl7hGSTQir!Y
zs32tJyp|ty<A(eJp_m$aLRVAM^BM+CXXi5*NdD+QTp6Gu{Z4|NpTA0b&#<|zts3wP
z&}55lJje0S*nU)CFQqj`)gvt4*U=%Xji24vK|&IAIM56fs-LgL#Nwxal}riyoEkLu
z_y1WRUjYoHx~3+X#}@g8uo8yWeg5Q#h-$Z^OS=unH*dOcAQ3m+vNL)4Qa~n?Lh`A<
zNrWmG?}j}jc(_tDfCFG3N~dBp{0(=#?pHEjiK{wjlEHWgTCGW-1t)Q1D$<wj3}uLa
zZ}RC_98^ErO!;`K{`nY4Tc%c4R*PtiP)}8u4U`^kh(c|kWtbF*2ynPuic1kXFNXLE
zBii4c3NEf(5!4^|7ug=$O(n1^jeV7g3BcudKxHTy2Va8j(KqB;F+5}Wxqp1lJSj#w
z&F4SGsFmNNPdz4Dx{!3nUixh{<*mE7{GOFn{6KEQujsv$&)|7l8XlZVdEZbAZvWq(
zENWpvSc>ima}J}dC_n_HW+I5#76*R*`~}Ja2?;1=Mq#_k*kW{}+^z@>u7P<v;hK%B
zRe@>&OXEvbP0c_DAD<Vn5+OTO!&80B((S>k?t{NofCqE)^0sw$D$$eS<<?qD_eR&;
zbChs8d2rOUZQU)biX$$+ckYf(y}LV{_o{0T7ghGv1bzJtWP<Sb9}(?n-aXoj>Tf*#
zi3fE8reJY_SjRWXf^{x0J&);VX*G-WJK@BU3?uYDfn;<Tey&u_TyD2uTIzbb<h%{b
zzIV{FzaLs{KNH<N2q#I`Z*&HRLRjLN8O&+T>e?>FZ0G0h8JR2;U!;|=+%(+@T57`x
zGu@e>v0)ud%klJ_uCl(c)mjAv^$~nMew-B$6htSVbgECz%d4hXu|So1eefIexUiMV
z#(luRINVhLkxhR}?YjvLN5{VP@hkB=Vgq2T|5#|(=?;|MA3x{Fxd^bcTekRHxmsnk
z2GA!&dn>-;_dG9Wb@Tq_hp;SmnA)1HuH^<}Lyf|bUA51+K3pYNh3XgXkmNSwHRH7`
zch_n3N!_Hg^T{q}n1uc5J`~y+u=N;%QIo6`M+BU=^R!dKTfyM6NT<fv=qXz|Py%ck
zH^iH;SCyRX<r6t1R@y8>G}IK;4E?S@=^t3C<&lw**{>-eQ%7VhBslm(;2j8kXoWCM
znEZO5Y)tqau8qh$NiVkKeoEXv7!5%}x&Xg0mj0uio#sfGxpLA6^z}W56W5`ro)O(5
zQc8w)X;s%}qTVex20}&mdaH}-4>R&^m7kpN4IOR@?sv1)x_i`v|MBI;QTIVCYu%)1
zz|-JSGEUCkzCOH>fmkLa)*%4(@^h)-VtZWlAUN6iKC#>Dcjf0%3ePpGcfGDo`tkFM
zp6*H=aawXo?ZG01e9O9{=>TwmLJSzv=!fo*P~OQvrekGo>&R6;GHDBVbNlvf`WSi&
zQLWCLz&voBnomhy2TRG`-d>`ZLvaEh=l|dGLf&CEvne!G?v+seUy*L#41zU%fD<Gx
zPsYHtH5L8QSe5;sH}$!y1p=0q3`)Ftmz^_5FaQ{aky<kUQEEnVZCEgEa9&%gGJP3h
z;}00W%A<`vt|2SX_uN@xxLXfXep|oVmsW}=NRsWSWQb}*$#^d7(Gr`IC#qkzh{1X=
zE32((zXZk8)ffh<7zH1==fQ)FP4y7$!0?EO8cq9!Ro7%*4#JL_!5q$X6UETU&NlNC
zA<GL^6Tnj6y=hFYl3z=*fvE0cy4ObjLVR|Pg4azKIn^6_dRt_o$m<goP6ul^zBMq;
zzE6RSRxsN2_zoa|_I9eYRF)jKdwf+FJ|Z(Q_Q3yXW%WhgllKPV&-}7GVaXCm559pk
z=XWfgbltym|H{sO4_a_2P{9Dyow2Fw-U!cI*?$mna<Ykyjj54Qo3-?HnL}xWME1NE
zU;|D<@FH2*^;C(?TO+*$`=xCo8=Iuq*!QTFDJkge*PlrQYiLdD^8)ncKbDXM5s#ej
zDAF%>)oO~jQdk$CfH*6DJOrB{RULSBjnUxHBr(+#$WQ#K;ew=sIF`wcq95O>SP}*_
ziOJGO^(;LuqbQ@JRO-4;Q>D(lnXdf>lsR}}4mVEeT^W)7J&1%Z=F_>>8X%|#TRVun
zvRf%!Dfu6iWlWzbLYtztP$lhe1!;bAs;beX1u`pzc8$2#M}jI}CcSU7Si^}4nJ0_(
z{uj~$LpdKrbw>}6bH?Ln;j@+(6jag6=i4o7aGGNh?9%2qZ9RQgAZcO(n7|%97nyFD
z2y_k%fW+!@aCgR|st(Myfmp<6I}bY^|3&4!<BKCCC>P)^%iZ(`1I~Km?jk_EzJ6tf
ztwi|X0cCIahX!zLyT2|`X5tCWyv1}Kfk{R_Xg&n5&N<8zpqQej$(2jw;9_NUY4UE1
zANyvTl$6xX-Y*y9^Z@PFtz+mrTBqtu%6~!c2|gP#^71w#1t(xul$;#w2<Wo?R88*~
z0TGeqx;;3yIx7^p_T(u^Fu;*#)ti_q<93*v`pfXfHN2%7a&qjfrL9fQBaK;B8VyM+
z(SwBEzd#BBAQYEz*YWR{BS$kV{oN`?p3KB~yNh@*xz0XuaXEnjX`SoAa%)f~oN|S=
zF?DryerR#P-g5u-`48NPqRV1GTF+qs3ym)F`;7$C9A{?^tvcu15CVdeIHCi7v>IkM
zSnqH_|0HOp*a(iLYnzK`ECN=Rmi78gk#G%|UqU`GSa`A<wPTOX03}*Rv;t<lgy-$e
zfq|OHUZ2xW3oTGE!0mlBlt7`Qt*!oajZwfIMgp*Y_lIHRu=DGM4H(fl&$r&a9;xKv
zg#@mE<2mo}{*%W9F2pfaKysUI^dfQK6|05DLBFA~am(v+@AkY($A=B{DsV9qgKW?G
z1lplFRj5Sz@>pG+zXb$T*}r{@C0=6X703Me>}V^@{56hR!^Ih<(B(00OVYDg%ZXtP
zGnS;mDQQ&<cv?Ua1?gFd{hv<>?5WXfVbjx}%1phS_m(%7dyy24z`~DqdG=2)w_ZtA
z6}GCEniXmCler!6T7n@Z1=hT1h})6j6KoQxSqi+KWbQ4bg`qU<FW~G4T}x%9V{a15
z^fz1Vq4)1^T))X5!&rCjr((4eayyE$g$CYfk-J5cJYQ)sBBCvkt_bUArWW6l2a8+|
zPr+w)Y3Y64(Q2+91**S)rG&I%qSui%4DM4F+q}KCAMx5LM`ue%q2T+iZBTMeWlG}9
zQBqRQ-6HbphMCQvN?@ku!}rB*N6&>W%ID_W7@C^Cz#yXKulV08`o;><3{p>s^K+Oe
zC(zPLh+mkUJ#N921rD~}S4S*HfYa37Jt0xSY3p*M4POuHZBUcdUL)0P(3NOpRe)p&
zRtIDS)vDw^We)y2s7k@8rG05D5mp-T);y1x0)^XoH9G;+ib8H&uB(G;d3_g4EJG19
zit+=Gw@H!|3->~2#CB5Lc^dQX15|3ihoVPL#8Ye&MZFmh={HK0gGL?CuXelpAW1Df
zcx825Oi@tn@lm2AjRYY)mBlzc&!B*!x?NOakm3z>b#)y}xO;f8yyRh#mlS(T%(hqp
z*Svns%P_=A4ugW+=LP|osl}zrY5vRe^NhjFW&2Oq*+p-&kf!DT)J=9dvX+BhO?*J@
zHJ7wB-EK{Oet!FFk!)p$m7jP*GRB8+f$7va!w6QNgrtby$x!iObS%6A3`N7sgCJMl
z+xuqzbbO@pF7>|S1K<d~e-rXO=!Eva3=i`L?F&+u<>i9&i;Hcac6>%nyZx0;rA+@j
z1-S(liV0wgXqxJQfiUqq*{GUPA`&BP-SHujo1Fs=(c3t>GGR2d5EINfQ4BXX6!VGh
zZdqLuFeL{=Ec0<Tv*|joZg#-<bX`|teti+WiS*+9VykFwC34xQ1e`k?A+qONt(#o(
zvF~BtS$L7n(7SibgJyZVBy29bswAm78xs!4hm+!uY9kRPq=AT|jFc4EMdL)KbD+@V
zL4oqCXa-VDvy_)WJwcQkJ*dy_>G>2!*`i-q7-UbN(WG#V8NY-B=1<Sb@pQdr@|*c8
z?JtgRXis-_<Cy0FIFt+?GUHHE!e4y+of=SQ0M0_>#UvyEsfZc-y!jj&x6MhX<JzrQ
zie2+RRUoT2f)cwjuxoMBroZLw{}qO<&F1E-#}N&pfkBWVNJ*3XFg~XyuYlfncb0X<
zB1Ws-8EBtiG}#N~4sZwsZ|)hDMg1QZU|?pp0<QEWK{TJ@fjZW!p_c-e+r@w+$-+WH
zwrrgK2@E-IA>8x9`}pr(zmV5_5KS@U5N|;S;LYk15Yh<?e*u#zD4&PGo9*iIXa?4{
z$H7SBoJth1KhO}@riDK6ZSNmqB~MhK#h5}q0>bao>u{W#Cu)Cp*LgXCZZL(2&k3W^
zcHyuq<_hw@L7#Tth`IV6hP7Ws!?7V*FbR*K=X%MFyn&#Mu2;?`Id)LU2U?i9uaC`v
z$6TwslT#I}9CE+SaeJ&<ocjYeSW8=Dmr}&q`UeIKPWNdZJz5tZa3;z8^?7`|lSc0k
zV8vQmVI)E@hq}Gj5k^!3AOxs(^a+`c*3|avnN%q<Gg%z|;thN&d0{@}y_P0%yx#PE
z=(zm93u;czmW~b;RaL+whjMPz#D#(n+v;@vB($>`B8o#q5NP9l`--NY0N`-ABmp@H
zLgJ*N%GN6T4hQ_^Lb%XGnduhHEHQ|GlK>prrZ_K}SL=B}zZQIW$dla8_~H<0xj*@2
z9fs3JhMRo+{J@Yag=;+o&x7B%YY|!zz0z0aZ{J3z=nVWJr^U_Cciw!Nl{UddO+7s_
z(g`fKZKpJ_A*CNGX=_0e%T_l2-&pY82PYaDxAO(PWimZN;vZt1g*hJ#&A<5iF4{dl
zhLD<;Et*dc3%T`bkz9b-+V&@tOY>_ZS|RBrv}JgDXfe;|eym1bVi~P5Xx?KYRbHzI
zl_6cGpk3>eEF&OD$U|SN45eC9HZ>n|xapb#<ru0{^+eh(%7@Q<usr*TKw#HdZqDv`
zZd>illPBjlq;C$;;dXFfM$vf<@Zs7!I*hby9^&#Ux+cJw%zp+5E3wQRZH9w25N!b@
z11X<)j61Z1prKQp=N2(BG$cp$A2bA;IMMg_?`x+k-nm|FPn4CFw|)nKh3apHA_0wa
zt>kEY1)o88rRSP$ZEg9jxxu-@AG?B@zs07c$eIyoJuk3W<9y+6Fg2_(!7;+CMtlc?
zM?&Btvl%NUrfQn;JbP>p&{Rku4_I}={6zMMhU4zkg8cK&!CpR~Xk_sMAEP<^Wgj!U
zTz8=?Cg^#|iQT7SuiMYO8vy3cLLUn)%I4p{Oo3|=1?aw(zs~pJqVG>SdjIpo$G@wq
z?=hcb*$PJ>@8HPTV^a$-7szR94sctix-2K)F$G&MW~iEEp6kp9Fi@dlV%B<`aUJTN
zj!{riwE@d$u|gj4z6+Ls5Kb1jmRZ2G1(OLQ@Z7T_*iN#+^E?>wVYxI|hD>l240l!4
zY+x#bA3MYifQG9BHZq&TS`_#j>^{ph7SR;H<38ty&jO6=#UBHb#H;+)FLB#75HCQU
zv8Gz_{^#iE=(8ITaB+8cBwnqxv(tQUSssA0pJ`2CDhQY3ixR_X4!f_ce2(kDZViV4
zRbb$Xfd2PPPtS(EKVD>rIvc1WerpenRl#&3d%!HKo2O9ggF1}J#Qgvv292(?QJC^Z
zhmu4PA;t$b8P(B|FG>>mp0l)>H3de|N?JgL6Gtx@d4RjLwnqQI--nNJU-r5sfc(3!
zIt}jf!#6D|VDCseVOV^ENuGCJazTa2zfxV&oFfq|yTeHIIDVVye&VB|QcJWkGE$jH
zK`Q(KNqs=g_q=LYnXVuDNG5K?VQ30Y7zE@QwY8HWEKgOIQ|>w(=?%iU$-;sujE?!g
zI)5DIUZy6$XelZ041r4{@Zs{`+F0BYcXO+~yl^{$zE?E_>{xr_S+i}8M#G<;T6}-^
z6xDADa8ZE%U|zX@al`-)0fUuRfpd6S7o+t_i4_$G$-Gxjin{<jh>TKcX_*WP=5ynk
z7#Mg;`dv@a%21WG6$Lp@cywy(rLs?R17en>Hut+a#A@P}Y*lWo`*u^KVu&ay)V=MX
z?FFNP$x3uQwR^dIuwRLZH({jx!xwr9K+C`=Zz@+oVf_UN35Es-57c?x4(rOwq8b}h
zr_WvXrs>OKX@MtV@^(MF>sIqZhr-FJD?8RNF5{#Bl3zfzpFeV<u8u0K`ZpbVA~tLQ
z?IP~t;^DzsyXd5$!SO;(pyvTsV)b4Y9T9V8=Zy(@Q2TavcG3pcZ#NIY-Dzuk7x*c{
zX2W<7+#J?$n7=r${44={8{*mZ6LuCPzt!T01*CrZRBb)A44}f~m?n%Q^Yt2aT}?Ti
z#~M5)0bMl6Oi0kmeJ)Opo|BbDc3=P|naL*|Lb|^uMTaqwkdkmQeW^r7?#D=!`!rVB
z8dU+fx3siWVm{;;O|`S`w&lU&c`l_&p;k}_D&jOksDdBfzwVrzA3wm3f)Yi*d~hs`
zs0sqI1@?MWtH)3F@S&GN=_cWKTss)mgH}UcO6vSzbm~XK<|gp80-QDo$?~Y9S@S}N
zuNWD7fK1?>$NWrBJRBF(jRnyFFBzNAk63W7*<~}mW5=?zwA>H_wkJx&#V1c!RJKpb
z2_RVL219NrgC=U7xLd`C$9)~$3A1tlg={$AEdwN>JNAOIVs9bba+^rn?*GAt4R@@7
z%7dfD%FD|sr04TrLUOYAU0>1U^YaZGFI(saVm`)Xi@BrUy_+cDA|Uet0_|GCilNqN
z<)?bOVo&l3WhqrbbY37eRkmC*kIDL&0YJ@OC&qC<+fCNtG^<5HU*mqe@@&e4M(&{>
zK9Kb9Fp>T>WC+2#Ff%vj^*Dvu*kdf72yJmIhnXxfCL>ipaNwsG6zra!{&k$lrWE$m
zjAMM9x33T5UsEfhrKNQoCZ%#tH{1n^D^Q!BtYn5u*+c3AxS$qufQ70pH}@!{G8+(b
z)(j7GL{BIh$Vy3p`8H@{(4T87`l%G|WiKhcB7&^Kswx`KY4<(cTix?7#Ga#J+61H?
zAK!|8gmm*9geR*M;cuY@_1iRr0_<>;iT-c8Zy*l6aW`CmAr}#N$Fn~Di+%u2g*T^h
zgiTP05K@2s{JG)O;(l{dNJvysk&}c(PI!16?J4TKU^#4+znag?EVF)uwfGB4y$dV_
zcyDc^EI<;weD?2Os)~20l!kNAc<xl)LOumBL@Iqy!V*)hfro^`IyV@{m_k1N$z3$|
zITMz19dRNO11mZUBnlP+&Z?3U8QJb<f*M#OhAY`Cg$}1&2(VBUO*$8^Mvv5&d)gUO
zD=#hWJ78TAMdBgP%p2bB<StIvLv*Y4>#^;S{q2d0q(P_ii7HG;r0JI=@fb-LB|0Z%
zkw$yFHNBdf$^}stxAX7q$?|6lql$MAZh3o)L{k|V&TnjN+^1MF77$E=AJj5KN{@@n
z<@n-eX^nIA<`<<rKmQf0Vu8T#Je+C8{UO<AR@Sj{i^<BFtN>o#YUlgP%7a+}01@ID
zH(4(%Me6kfVhrjp(HLAhrQw@-3*sGIe9rPXi8Y@B^b<a6?c48Gu8fQLx{jXD;sXSe
z4>ZC|896yy2M5EHj}~OZ$SNxAJw3sv1;geD+CW4QhxJQUd|?hd2ZspLhHa4nbmG@m
zR`*opf%${wwwOFrX;u6-c7A1L`*6|=VxL;!aB$q10N!*}1O-XUIhiQ2_{H{E$x!2Y
zsr_W74!h~opqII$%K)tdJ=7mh(dKvKRbWiaO@np7(IJma`0LqUJyWUNzdy2-ImB<U
zKPe`#c;~u7Y9H%t$dW1<<M`B%ls<T~YG*dQx%K;d4}hV~8(0C8t}#kB)Ol5WettfI
zb*F@;!<viFLsFGatoK60kF7{4?j2#DZ~F(fU`$MinuwTCnrfFMbuQel+(}Ndc=SQD
zf{#Ryou9vBLi_!v&RtS??+K5d+E!LoiQ+!z#yUMai`AmrIXK{AXD1Q(*0_(AAc-o%
z6F|pUH<PP?d7ei6&3PvnF@`Yb>a)0Rv=S%1Z_5JBgV$mhtDXx+dwX$>a+0hNqbUx6
zXCyPh#!RC|cWf`n#O)7Xzuj3k)dmO~imyBGm4k|~ygDz=cu+#Z6*wCFUQ}HMzJ%Xk
z|K?5JVik$JNCCRK1Nha79;$~~R6aL*P1<U+;g>1Si}n5~6O)4L!fmB6kw2}CVla~W
z@WF9en-LSP2_>~>n~-c|;bOx$kS_WHXXoQza&o>|MnrcER}^Fj|1LG|fb05`n>As^
zGN9^GLA3jGNSnO&PYKygH2?I?Avz%8`wB(ER*{V5#ZLh6roAV_`OLSa*2xGa_3uxd
z)oo%7T99RsrdOn8WFq|Mhb&$lPa41ioo*Dubqf@GR~Nhue4|*vbPTI@s=&8*BaB=3
z0kVMxSf7_n9vcCNvdn2K9quC#FtO6nLDIHf?c2Nf74PWv9@SA7U~`TB))^cAeeo!?
z{#d2Ym*=G2h7O$#OF1lRJ~cr-GXOywipW1$A9sM(C2ut5@0p6OF0q0j=l%C6J9l$`
z3JWu3TNunV2*L|ayKRXkx1=2&FGgWAmP1(w?FkoSs4?_UOrB+K$!lq`$6i-e53y7D
z{G>DcV1v30WEca@r>v^V>wIUxweW|Y;_%*1hu-Sb^Yt=Ju~jU2h&?H8`3GrFmi0dc
zonpUppb)CG&3r4X@h2Z3W85vQJ6Zlcs_S<DE*?uaDED?cpcG5bIvF!U5|fYW^6?uX
zvMuI)U7qO`hI^NYEHlpX_SB9t!JYheY02kp8Ty8X!QtV#dAA<j{Qn1!?{qr(vEcuC
zFQ-~&u|^yF3mR(X(f3yal6qu6$ozwLRp`sI+0r)UV(3|fg!F8F;I01JlX69lG~K~1
zQMa?RPz%2iwEnI>62(Uezmvt5c6d;~UkN9MWZt->qGEvPOKw5>sEacP^Yqd-;a8y{
zS~3+?c1%fD>d)@)ixEA@@0OMyxl?jJs<OqDh%#`*2>L=S3UR;a_(ZI*w?h%P{&3Y8
zdB)})2Wu7*Zr({#q}?Z8>!pjDwvJ<vQ|G*ujAM+RteHa_!lk3~ryQ4rCE9cjQE?8Z
zZ4<vfh*#ZY8@WL47N0PaH*U6I>ib7qRN83zH#8R;e#VOR@838Taj!7QP-4=xz4c5H
zOva3f_91DGO8h@YVoVyF&p=54$6r@}|EL*i{N4O^GIVXt_!rvR6BF7Rd+*v1uPN3>
zhU$NISHX0{=WO2nb6)TN3pn>{j*KBFuw99@aPYMLO3%yNJ3S4;x8NxRpb=P*YK_sO
zEcmW0<?jDs0r6VhLupT*V$GLB2C7Ep0DzxdZ$jiUEc}m6jkCXp*VkKVYa`Q-IXZIn
z_`+YHO7qH?Zp5M@DarEHE7iCAP{?-NEwFrRukT(nhDY^#Lp=At`$@Xo?Ut+-G}#mS
zo(=6&Q(@*GEok=T_7&Vs-ZylGB*3sc?>Y2UixU+@tOEsVAuxl2hM6Ys!!wLWgAzR}
zbpGW`u7QufEvAh*UJ4Tm*s3`5hkTP$IwOeLRCG|HFH<7I5vzbZSw%#oG$tk+Dl-Hg
zS3m*R!9*oG$PT_WHWsC6WAZ8rd`4+EJ!ftF((l7zmM(}ZXfHYJX^bLb<)Ub8YT7+P
zI^v1AW0k{~{1BJyD|*5(6WHbbsf~d_v$N_(?f1$`OPk$e=)unZG0gj6co-UJCgl9a
zD>;mknwmwk*m=2!rlhOht%OPY7Qo@ZCMIMo)>?yxAf8J>Ufyc-YnYEuN?i~PJAgQk
z^k-TiAfI6$^_?AIXz+al`M(l`IPEXl3Lck>8iC7C;M&c7wS7%pPDD{pT@IKULJj>%
zz`8xO)7CZ!=;zese>%J4isWTv5_oKT#!6bqDf$5#WKOTIV}{{i|0g6+>WI9pbK?d-
z1S@5J7!K<Ky+KoRGB@>;cL1~;aoq2J#{)e!Ihj1~*9*I1+ASAeJRKIkEP18#A$gy7
zybgX!xXpm!`86wJjoki!Mi;L{Xiv$CIc<pFtu~$;CuSQDRPUtlvw~_0TuU7CwF4(+
zBdHhy(1~cj3}#Bkz5CBg4jQ{uK3uw9NN#)6|49duy5F07c?rD|KS_q+?m$luBLzkG
zREpkk0TR}oezQjDm8E^s%hl|r8f7v@3M?7Zk<Twx9(y-*c_P}poRMn#V@#pX&!wf&
z(a|@@O6vD@3gY86V`Qk*(8y?L@Ka@Sv$CWy1qG9&up1h5^YCPbN=j_&-JGIwY%?BU
z{p4U~7WM?AuR>K5v;zKl_F&JiRKYv<$)!&^&TAr({UYK*Q8Q}%FJfV{$U#rHl6vJn
z(%*jstPm3S?Nykhi=5pSNx!HG-d|W=W_zQrchX!lPa?N)PAR09$-kd6P5RiPVq$t)
zT~Q}0o1Rdg`uA2-3*X!NJlfH))o$aVoL(Me(2p@+x36nFVG;|o`rNO_o}ELw*22-u
zQGj2?!QNhFNr~_s4t9ouQXD)y@?Em6who%uu{+OUHwtb|Uwepipm0i@jQ@U#d(&W{
z-5Q{(A*YZA1zH_p`ZX=TVnb?qS3{s8{~IQ3CJA{BfK3$ESZSI4{6f_FMu-H;!O;;6
z2fn+n8V>X(d4bZS2wg7+2k#d+cU{2DM5I~3Zm|`<v*-_P7ffD&l#5#66a4kDhbHA`
zQFF!kN|8Vcpn2$Jt>QAoE*za65D~v_Z_ao*(hP=*nd_UNM!$ZS78BoWDG&sP7dE}3
z1OOzMc17=Gn9=gL{qI8Bsy`xIuC3+%#A6#eM|KZ{tci(<mCie;$-EQ_Fzf);&E%j8
zY(1+X>UatWT)+(W?L+6mvYxs88%?KD5mj?>++<40%PV704$ww9VC0~}{P)&#IIY&s
zioEI*W3tQ3%R!&B;Q1OlP{?i!t&wU_<-(bmd-e2e9mypD_B!C0le;ZYDME^hzV%lb
zU1F%@fP(9>S#9pU#(08p;J|>DxEnbD8a~p4?A%;{tJr90(1dL24;0eFyq9DUV>&Uh
zijP2zv?h#BSItY>?0RKw{k00hT=12iK&%<AY8(@<=Dtc*{3X9HAR4J0t3mxjSB8LG
zFZ}sZbx9@n2h7@`(cV5h+}qtvVO>~-n35g=+j%j4{SaX0Jx@8!3Rf7qfrM<x>Jnqq
zs51;>CE&@`UmWspHD2Aw$v$Cvf$VWO{%7#5vho9MP$_2r{BXH{Fp384fW3p&qx%EE
zS&}#A@>6?yzMTo^yirlH8*JhS*MGbOsG=|I`vs{23sP1k2_AD=K!OZO-GRE2)+6(u
zzVDyV(3lSA4IKZs9HsD7IbZeabae9g%~I_aUivc<5|XRU+A^3l{rUU1)_Erq67?Pl
zdEyj;al`V6#ue9f%vGvZqvr*P&K8SK+S}UbVldZY{rvpQ$hf)jhh*a}w@?4t)Sd6j
zLWg~}np*)1N#LZ?fK<~Ujc#!o44l?0Ms*<}6NLCz&>^<M1tfdEf4$TK^A7VOC!dp6
zOJi47dewx>P@(yoZTv|cg~bbG-UTqW2~fg~PW4zXX|k!?;iCo;JhX)d5)#O<FN<fB
zii?X=J+-Y&Ot@Tju^;pK{#jZgnC|*!y8wVCL?(N$!osrp{cQ)L2k!W0bNZQ`0%qQy
z!f*QPv&MEY5K)0H38MQw-@D=05IA{;cF+EM#Rg@Z6Zrz{2AKM}c!Cb)nQC;Z-VmrK
z!E+LhW{<1Oi`ZDyll<-NH|81O^Kr*!XXh>i+yTl53)TCr>BDtQ!)Xv4pxZPL41i={
zXD)yQM3)DULJ{xtI)A`S#&Qi-n6o1!Z6b7mM3A&ldOe^bFPM_MdfW`_MoJ@?9HlSm
zsEH=koxWF+FxpE)4j61=V!7Ni=Rlw~Nqrg)nXHOOS};g77a=aJQj~RC(WUFd&2_7d
zhb5XJ8LkT^pp!6i2`=?d0#?G#<j9ElVHX1n0AIR@$&%8Be;I#E6?)bw%GS5{Zf@}!
zBUTgW`4M4Va(ZNdk8JF6+>Cii+`0wHyO@Og4<8t{1^YH$9G(G`3U?gwg9qLL5fSY7
zSc(*Bix)xQW!ldy=Goob3%0EB=bs^>@nmmca35IIOD7O|0Bds?6b(<p_+BN*`}sLM
zi%W!YB+MUV?H@dNARr)ct??K!<nb#jFNYc1m(Mufg!k$eoM&XaeXSkIS!Gq(tL#D*
zEnU@iABzZr|HvI*5F*3n`o_ryoEW^qK763J{{l+a3d<`RAt2P|?jyLjn859W$7l+E
zfG`J$T`BUq=!UZlTF8YwT8ML(1<dnY6$}|*xZ`)z1VUO%jfJ}QN@5_v0Zbjy(5@Cp
zY+}cwqoRg@>_6jT>IgyQu*9JGI)nwa1tWRLwYomQEU4%(X>nq!tLc%Ok#BGDOgp99
z>!gd(<Db<|EA&`U7T|MfyL%PLJ4Dkoo^84*;e2ndXyk_%!4_|38|4GN6Btn}r9vDl
zv0zOm>QPnW#ng<@Y&Xjvh4?4wJrWQZb3Wx1!jX8+Y3WJG^?C);k(Y9p`>$>iK)A^f
z2<#ZbP$*7jeX2p`0(AVEx2t^m&%BHhwM!S>7*F<x*h_waRO9KzK6Z{UqNdfx_%p-B
z^$QRl!Y~QNmUl;lTi+@w)Ph#g*hTBNlGJRNTb7Fl5@mdTN_|l$awep!PD>;G-)trN
z%a{7i3mRlhPr37xu0gv_$Per3fngDw-AQyb4urLtyMjN0O!n^foKQQpTD~gPG|4<*
z^P1g|2zi{dEkZ>}so!C-y+J7rQmDehD5wkPj>uVAv)LZM5D<9wGlY#T8l>`p^vE5x
zQ7Qu-8QlVlvMmUu)X1z-DDE|J#ZHaBqPDg$4VjdVZe&8+z|ztPXccvhQ=@z&Lo2ff
zYy7EO<L914sTt2Szh3GA`9^&SS7de4r^YGi`~KwxN+{if*dOqxA9EZ-`7o9ve+Gx0
zKGe7kUZ9)+3B($+;>6TVXw41=^%Lahdf})yAw*CB3$U|P-r$4)0pcUJCe7!W?aO(c
zb~mON6xl*7ix6MG$L`_>-~EfLcXNb?3O=A3pu;Ad@w&PIK}%al2e%C|k3q99s9nC4
zmq-+Tp)0Te8YSl=_|J#~ryGteE}7VEoV!4ufH4m|BUC>sq4^^2?aP7@1gUs^{SgYv
zJ_j7de((RI4&w_Mw0-+|e2yp#wea;l?J|iBw^@%YVLHX=s_ukh5zT%iGEO;Qw4kFP
zktykDEJ&6_-$g6OLfZ>5b7l#46(yAY1q^bfpDzo0?2?o3s-2MYRSu+ZltsT*Qlyn@
z{{7iZZXk!*FMayx3zK-;VA>ON($60N`$rt)7Bs7`2u(+LI6JnQMHuMFQ48?1j!kn$
zR?^utgi*flas{6~zSs)jW~zxDQ`HffsM-89?94ln_l&llmN7*o<@+@xzC@mqD4UC=
z+~)tjc$${@d#IkQK#y?qu!S^EG*Eg<GLKt*tJbq>ZhGJf#wH-RY+d3Q_vCyI<op!S
zmc~pbn3X1<t90M-9o&RYOyf8<rM=Ewz=;N11Oeo(Yru7>N+#e(3c`2UXhEqQ4#J|H
zs`a`nQ?+tbrJ#E=uR#X|UvCL;?*Ky#Jov!z;U1$&Gf&4WDO`Wu;0EoJ0Ysr07)W>%
zSVXFnty`_F(en<?1!y**ey;=&4O4Xy+rRcPrgKb5Ldg!A-o9QnSmxbT>o_AKUA_X1
zxer#SUl0F(k)rz%5uxb5B5rPYbSTS9`6?=E@I>3Aw;%);k*K}*Clh>t65`|YROwlV
zrl%WV%-frI8;*%exOzaJfVQwLmbx$1BKkrzo|kWez@<zHmL@rQ<U=<jS6*zHKQrp;
ze*Q&&diweR=05;6DBPl;qk8@NHRM$;FD>~6IK!hKEC_@^;~#L#&CbDn3DKdiKtXrj
zhZTf6^}kPsvK?7u=ZU{`?v%gHI8cK#z%022m_`sT2ZRG@X=(ZxnM}W$jNw4P*oq3+
zl(ldJK<x$IQOC`|z&TqllUPS%ClgdGNea7evLm3A?HcdjX5xoincMB~wdzfnE`&aM
z2;n{;?r>*q6{%1MRV6Vw$He5MQ4HLRz{f>|cLPZsTSEUo(kAO?h%!i3N#b_%gEGCH
zvTexJuG{Tm01a*(h}>LVU4xX0#j3SsvIob<$NT$jj<@IZJWrP3J%(w;8N9oGpm~N}
z7`_tI#|Ge-0I@u&oR$!GR;##!y+qU2TvsO`*5q|{HuEC@j(H|~rgh?fOtt$;x1()I
zM2rSWV}-4-%!}c90032_3E<iRs8-VGI08+=e*YsxiHR+}qQ#0OD9?H?k(rU9>#`IB
z4-x{bso2?7R0#=%Ri<j4B+JZx$4?HiBjz&j6{C?4*A+oY){e+riqkX!w8>wW#D&2P
z?w?<PPOTh-rz%s6m6<(q5HV=YPOoz;Z<;@Qe*KBCQlW?-nPc%jp^?m1FXT+T$yf>g
z9!^Kp;F<JgF(#ueU6`X#Q4>*l0t<$!mvL`6bv!M-i64T_z|hCs(voQk-S7J22~`y#
zWn@A(^t86tRgWF)>-z;n-}GX{imG`l4bibfLqp=Y&&t4OVXPHYz4|sbEdAWcr}1}*
zaQ<JMK#c1L1`hTN^gJ7VeawV6hg&jB%E~eU$IYDrrjrpsWI#|2ZEO*%PSfJ}Ag?d#
z%1;qk{u6V6Xn<ybUFn+yi}BHQxx^OfNy@nMO1l6(17l%x)5Ks$QppyU2Kb7|WGkx@
zT>sC_fftN>bOjwh*$0F;3DHmK&;CPvx)H3GICo_E!<b><)1?eTiPb(Zn`A^~qobqq
z@Am1p1c3{VR{==6`UQ_3c@k+p4l}|Y!{W+4!eJ-F{WCwGrE1bmL5%oS_akl?>#-Fu
zVZx#O+QHH%-eu)y`uFeO*;xKRRb6=?)N2>+BH0O(Z3vU4k*sCSIw)LO#&RtUSyQ5r
zofI_`Nrvou%}m{kPg3@+38}0Vw`|!f8K&&bcV_zj`TS{&cjo<__q^vk=Q+<g5NE^a
zgjXu!yngK(Nb00l`#;-zfkmQYPIQfE%>XhMYQ8Eno)^Y<3nd^fY9+6t!cbQa?tzi>
zz<wZM(O$?dlV%+#y8vs^m)(T<ZcI&~&)tkvQ=H?YV_*0Dem}a=1TZNVTU+Rhwd9{&
z`w9W>xnP6R!?nqv?*>HDdZIv?4N(tA!a^KR5aX!fJaYZ@;y0rd{*->_0q;>Y=ELr#
zNehT?{47zNE&ASlnfOUeh{J2DBN?CEodi*3lfDqbL^Crd$3N18@kuf(l|4(I9wts1
z;|Sx?SN1SnPv`9|KChG^d?++}Q|^o>%9i$@(MBia+LGY}z_J%O@|7-W;VrR+g-H<x
zhsb})>##FgeWaycU=W^U1Dr5N+T&_MHcwg-*Az%msLAlF-pkERF~V2-`*5>gxoT!Y
zzV!71X5{V6OG$p8vOr4teIkqXzi-o;)#5IJA_$N?{QPDEjJMQFBemOj&`FG~bNaoq
z5T;Jhph!*QJl3`?#zVkS3mKukW$oxT37F?@q_B|VRZf1S>Z6dTez0l)^VZJ@Q~Gz+
zOKFlF>iY=o^3|mP^+Gr~4=Qe}MV`}O?;ui-rJm4SxhV>CPUsS$LUEf*_OoVm_lB$1
z{#>qfy-iVJLL0;_4^|ZA$$K0mwKFd}bIit$fK+O-iQTvn$6#`~q9BB2LzLU>DSs*w
zMmf%vo2T({bMte5i3C}UzPH`o_x09y5lT*+4sEZtVA<`BjUS6cRi-zqvz4zOP~Q5d
zuMU{d>!bd~Fvrl@mQ_CPP;Sn{0~l;`$j98LPZ`VSQ5nk%NokioF$(C@qCtx{lwxcf
zg=TMB<5wp^ye$>`*IdU3jJ^Fd+%QnE+uZ)%2=UF!w3w#q>i(XdMM~OvV1U<5?P{`<
zvxMZWT>+y8rcse@_*sx&fJUACV_!xf>+4%dg&Z{+R04pkdYD+6X^?NHcqBA5tyw{V
zxh2TB2V~_HBYASXergK34ZAPBYX`iXS`(Z7f#VE)u`odqd0Q#WwaZ~)!;<t`?XR=Y
z+z2eDaQ|tUrI?dp0SdahuA(#3)7MNs7U+E6+}?&A;gLB01h`Gma!o{DSrAAU_pZO_
zQS$-X^L}l;7a5QI{2HpwWuyC1=6sU6!y_Z%OT!Q2cYin!i~9FPZUO73r`H~O4XuKO
zpqx~o;lErzakN0qy8$k<s;ak>?bqQlt_zu}XWR!Muxh6|9H0rAZ)XQwf1q#zG7_eI
z!0_Xln+(?uU!pNGOS0t3QK*CGpEJ}^t9H3^<)7giCF_d^J#7Adlhg7YjVHR!%s^|H
zKJx3J$e7Yju`F10UI){n!za6YBmU*|0GHNjBP}xe;e)7)$JU@Hb@R*nDkzw#PBUiu
z@jgzcd;=w#Aq}9(rn=yDfb(=BIxGi$k4mN5Bb&n(S1V4PuBfbRU3=pO=mw<H{Q7dA
zP%t-ec7rMeed1B8J*4h?4B)0I>ejduh#e*82s#>n%7s#d1t$%1Rg;(@vr7BJuPrVK
zrp?0u$KVO6ptEnX4&N(|x%i;u23O&}VsRH&S06t=PFeC%?dgz@Qwtg+FZ}c~QpjR=
z&X#eheoI7I@+47kkvj1^ku$O}+g$HlGB_(&OA<>h2eeJRAKL84#p@VqJ^=*w6C=x~
zR&iIk)UezN`cS<LYI@sSUqJJ#xpBF+I~Zu8bCo$~-0PPUBERuT=@aXteS9j4i;K%Y
z7qhEFvHWfkI%oo#)c-8f7Zchz5zsGf%uApdX22aY1PyK1@Z_Sf$5YQVzL5?w{6{Bq
zx8o=AmwD0UG0j9xHQ!$0898X9?=&-Eg&KD}TylfU7w`BDYyfXETLl-t>^=iLvAN~(
zjf3>a(7}oxd_sfOS*@`roIhx^EGfXjEY?RsL6cO5kM{HQlwK_zzwz-?J^-vsa#N5U
zEgm+;>Mkw?EiMU5NGQc(G7Ae)cp`dAv9sm|%BIDYa%jR}8eCEk(<OyXy13<kZM&Pb
zpM%$#+pZ;Mu`&mXCO|7LQJ{0Zz^E3Q??12|Ppa1PrqE!TBcMxe5J@$`RO)4$K+W!(
z2~EgoISaOcsD>_QWqo~X5_Tz#R|tVfo{-eL@kO~$q9{{pF#x0GpeRh7^!M?h8p@QB
zuYcyY5KBLXyfipp{=dU2#W<`+1|c)6p1fF&A19wLz@vHF(?eZfj|dM($S1Q891*8a
z-(uwZ1aFum@ESAV@+hI9FwVtgAEqlQiEVKTGC;FaF>ZNql%{-l-?xruikL>N06b-;
zGXQACSnk^VL7sSroukRO@rUBj=RmuOp;9BftI&1J5l?1GKZ3+*_l7*4!fW*8Ec!A`
z><@;C5eHdcerV)4(0T^@^Vjxwet-o*d<cL@jPdFF*UHOLnIFJ)gCfn=`_`6?@tDxH
zwKWLX5@vg6pNAT@Ilwv%G3vnG^L-T$8rj1Yr-W)G0Ds><JJ1w0>5Pj@;Y~xPw0dKq
z$OEju!J#1l3}lr1K}Qotl*`Dn@7?QVx|#|x`IPeJY!0s43TT&X$FPHHhvU$s-HDTg
z{9Abjsq=hKpCXz{^6+7^aPH|QGF*TEjd=IY%=A(2&ow)S4oE7)O<xVv4xuR}Ar!9w
zZ}%tMGTN~lAwd5Vn88$*?$-<lK_|^y6s?Qy;O*<z$MZEJSG*x0zmt(MIT8OaDZ(xQ
zXrsW06L<@XU_svAdNDs6%L)K_{0S78!-UaVzh)S?d2n-E3j}TaFL*>>`L&}0O1jW7
z8T_W;IlL@eHM_k0YrT~oG}}7@o?T?Py2qIu(Aw---uxXVEYNO0d&agyp__~U`Nypu
z4CP)6-&Jo5gY*#VsqT&eM+9Bc5;|;h1(?s~7wf~j<8?XF7AIkwjg5^118>yV-yCO&
z76MH~n0^@#ggh_^LS7yk4TE(NBgZS+fhHZbG+dUidon@w3hL-lzSE_$3axAnLJ*>X
zqQPKi6o|P30s}kXw*D&3yd|VN$;l~IFc?>EPpW7?M=Obj8xYFyLRdZMEN*PjCFpF}
z|1N;4lD1t36R)S24g~aTtw<bn2rNcmeDoJNC^E?jn^YBzcq_U{-by}A4o;yDnql@O
zdHhIk6*1)@K(S$njQ{JrAKj=sCDz4v6W@AXel@~kud?a}{#Yw$ENN_#XjdLq{K9H-
ze%^Vk0fr}ts-2yARP|;FG}OYvXb}@}6Xh1`sl4Id((eiP+1u@{1WxRHG}d*mtWqlp
zo=iaPC}1~0a0PY$MAGN(9hpsf2U+iqFc`aal7*VxUMxM)p`ELA`D{Zdh+~Y$t$Vn+
zx%ogj<xr*lIqM@BVa)xoh={j+eO-yV5zFq2u757_zuT?-F}Gk7OW&PN<`w~R|4?UV
z`RQT{gRKSA<}c2VXcLlT$G~b6#l|YrtveQZ*~NkwEZ3%?{yCGagqpj2b{_CN9eJ3~
zlf?S6E73L&CQS^$$p8-7jf$Mi%(B73fK$aUPu>-ITn7x-3<(qpg^Q)W0FJnm%6Bm_
z4m!=5K#O*qZ#94dv#GRjf`KB?hA~+APjr#+d8`8PT?y?BZ%p27QyY!o_#stx{22(2
z7AO4DF*Iz2f<7qD1=fkz2=FKW6t|i&N;XOS8~n2*Kk$RKqE>x|In8SB`%C{)6R=MS
zJSCk)HIyo|B=gd*u0g25!w4{KPwY##OH@@>hWO57Oa{eT+W#C+17wf*3y!feh{7o;
zacf8-k$_0L!q)=?2n=)aj5J!5gLJu{Iz27u;f_3iTAJAfN-pe`!alGY=x_E53~wP2
zOtNrp%65Yf)vW`t2xeH__&cnwNI2LbXcctez#O21UbfV=;7-Rz_4CmPgHnINfJw%m
z?u}t#WD|CO_4T^5_>X|X7|?V8mlM5|8RYqgH+zp-OI*>i!=;5v!0RA!koq0?tD^<-
z^7A3YsI2r|c>O+Kb&fQ6+>896_aoa#FeAtCjgMir{^2pXiMB@<PRZqTbqSMfT*f*o
z>!f*}2KzY7jvYOwxsbb1d>Q9k#Z0Zx4x`t5@i)y(^z`xz3O*(!`9P~zL8y{&b_4fG
zZ;EhnhKN9dlr!c2S<ev!4{6-!p*>TDXH3Zq0bmuAG_rrc7%9n!m^0heNvmuQ85Y-3
zRXJUl{h%SCb!F<?iGzyq^PFBEm2u*T#vidYxe3<dE@oL$!np!VN=>x@asM9!1^!tN
z5sC%FJ-Gr36B`~7Y16%sM>O^UHOJRnuTvxKIcuq>^y5|r^yD~~0qGn3RJ<Zunae?R
z4WP>4W(3tpu@@&Xe12l($rRpY+LTp;6rVBfZqC3$Wy`n}bp#I3*-Lh84ZgKhg|-LG
zYIw<gNs==-5^6BQADh4gyU-7i2$PiMYPA>ssfKqBqEsAQ)i3zaJ}oJ^O9}JvFjvLM
z)dXNKaEPT$$$C*sF}z1qZr}1@^5@{?5z<$QAqhY2QZX?~s>->NzZh#n?|n*{mAR6`
zA>m4#3R&-Eq`ACl_CDr{cr+;%(P2rcy<8W(Gsm<hJds6;2j{M-3^IRF4DCR)x6j@F
zw%X{rcJ-V02F|}+L3VOx%rd_gd@t3X6dEE%F}3nP)2OWMXD_%6nYJq{i`s>NLYOs8
z%y_tatR!*A$*<5hOMzEi@izh?=Cr&mU}^c7E!#;#Gj@bX6^T{<%rH?PIQ7#(?VL_0
jzq4g%4YD&n1nZvb?thG9UC!^qZ}yxrv%&mh;(6`A+<lL(

literal 0
HcmV?d00001

diff --git a/screenshot-08-after-exclude-sources.png b/screenshot-08-after-exclude-sources.png
new file mode 100644
index 0000000000000000000000000000000000000000..c25c1175df1e8b88b20b67a6a8c6e6cdced44331
GIT binary patch
literal 107117
zcmeFZWn0wI+6PK^cSwqWl%#ZbcS?6R(jwj6DBTSr9ZGk1OG<a=S?+!I^AXOgGuP<l
zz{G!6-1o1R;YtdUs7ORe5D*Zk(o$k75D+jm;Ex>w6!^)|7QGb&1O|k(n6R41_oGZ$
zEnIoxkkAvX_mJYS$_zM1_D3ftC-#D^;0FEa=tK;LSUm3JC7VC+@E#o%9@g{JW+Q`*
z7u;Iwc*onYhm@6-qsX1#t*v$J?iNLnBLw`rJJUz}@1F<(1IcmZRR8@scu@HNKNu*a
ztz)2O3hC`-g?(3)v{Ov^-_Z#>lJfE4drL)2OItG%kIcq)nVtfrT{^Y7*gqVhpPl|$
z*j$HQK`+tjfLWYX8Vg1k1KgVf7Z#c(CME_3O7`{$rh?=sZPnD0W@psufBsBLnxa8*
zwlg=Uo}LoHL+YCM##t9oMwvD<dKn?t%9RdW$iaa1)w^G5+uPeaJ9E_2)06o3p5VTS
zLYp!%QS<w^AtR%_o*s$1dNKpY#WqeHqq1^IpQMMU=i&Z7xyw`nV>2HcTZ)wxO*zWv
zc;S)jc##q`<XK}Qo+G`mfbzz?1ZN*H_F<~WTQbYl7Q2@x*vbl|*(yEvn<H+pbdJz3
z_9ox*^9QzhM(gRV%RGM2Z9;e{R?L>>2#Je}o3CDnfq|)E|FfsnVLCV^w`QvR^S{>z
zV|~`yNm0`IEp2;tem>YPbcP)M{_BcR7P&>7ps+AS>CyuRM5nWhxjFgtl(+_BR|&$N
zP_QFO2&3GmJF?uKq-1T^H^V5Q=w$ore!nX}H6F~A&eq$^R~!6d()sBzQ!;rJ3yr<A
zH)*03;^@?@Q>wDF)vw4*>1i)x_}?qwMzSA^h>BumWmVHC(q>P9;|_fC*Ms*=4rtp*
z4>wFoXBbUS(f=WXL1)F>t#Te0z>FSZh4{HE&vVOIyQmLC!1KcN><<MsHML?E-&(u(
zd<5>WuAaesm7e!})vC>Wm5E=9&;5mP)f+CyI85!|Pxr_~oc3OqyNv&xqxk%=$Vg-q
zl#k34CSum)sd1VEwcAii=G4@)a<U(^DG~DX(*uy`HTkQ8Oxns=hBe7MH21aY3Gi@o
zFz~y&0<~R39z0GK>o_SXji-xH&CQEeB$bt&hEwD{FLzg4+=y?}Sxn4pjo+=TuC}`F
z>*NS^wzwTStTajUU@0n&vzYXyFdk|()u49y+@1M9^73Z)`fFC}>(v<M=9}DOy_1no
zXXOZvvR`dc@9^1GEmlBALNb=N5Mj>~fkMJ#SZQ{_ucd#l5_Z|e;&X@a{rvLpxTEOa
z_&3g9pO0Jc@a_-i-CI5%XUN%(XYrS-7VEz}Y1l0{xH~z;uhsj#LV9c(6LVO%Iq%Tz
z&joBxkwY_e4wmKyigI%{x-$?%aD=U-aXEDbA#M>0o1zQ&-0dA5eb<F|YtyPS_;vnp
zeJHpRm<dYNfPD@%9u`(nVWISH#m}$0BKj2l2|wMH&8ek_(o^CQ(x1+_D(?=eL@EgB
zHQrX`xV6RT`)JoU4H2EoL@>~W_}*$v3=^N;3bD{8?Bm67Hb!V_$Y@?2oo~_b@bJu*
zYo^|eB+@7r%HUGC<ygDAxj{ogb@*N$t+f|7G<;reup7(%#r*k*3l}#zi{G2v5!}9g
zwBzUhRc|>7rR{mOH>p#9z~|vOJ}^Mb$M*)_ez^e}sZu2PBFu5NY&MLFTOJD=o6T&f
zKsXQ%43x!27i>5*3JH(xddIVRnVS7{(RH)SUkWaxS=*JS_(0J`kzk~DzgN;yyZI_q
zg-&QPK93UV#J<@wb$+)4*E(}Xh3{M%b>{M<xCyJZCVyGYj_m9r$&EPeSNQzanq94o
zV8|=-MMF^PYisu>a-Rd?(J7SL+uJS1vyz>O3Z@A$F&8_0;or3Sy>?KF+b*o{W-AAx
zlkzpW?hmDY$Ue8!mbIM7>FDSX820k<^>sg5cz>)~t-qS^PL>)C5%uzHL)0qUs5``b
z+5IGjgxAOSxv5n#TcD+dC%jwAptZT#^YP|5jjzeMx6o?Z+~XLGvHq_w>R$7OvZ?SW
z1b4^FoG*3Y^^!4fjKMY)vxg;%92k(|=g+ufuC%l)fro?Z?YDVHN+^|{{^q@@4qV))
z(bK>5!J6(kfv8$xJjgFaX&?N)N9eT0G%!cXnSK}16>AGuZd(>Eba%iNxzav^pKFn?
z2sYvoV_aG_=<v~Quubnt)yoq@3@ZU;D?+DMDL0_?Gh%YrdsS-93N6pg9%;SS&%zw;
z8(rcKYfV}FhbX9nR2l+Wvv?o$e;9W9e91{o1(%PXl$1m*pP|*}A-y-aZ7OYQs#dH(
z(rCNb;(3|Eq{ov=r!M1l8jOse+k;`a+EQ=K3KsF}{bhfV{I}om5?$JL<~MtjB=+B7
zH9D-Oi(*LmBM|BAr3z)#!Mi#?e(plx@$>UTD0q2(>|Aa4z70VomjCt<Is%i(qbDq0
zJOZcLX{)8Bh3KZiW*(BKLA^Z143q*2)FvTP7hBtZoA7j{xz(uK%M$LU@t$*ryx`A7
zZg;kzAJbNKaj~G+)j($;yp^S8SXORsZnb{<rv0Z+pZNK?ufp!mx8RSKrvzw8c->E=
z-Z*y!g)h82X0x35ZA*_p#_#pR^V0m}BL_!sT_)E^tx12c4VmDVH;LHzAN04Q9b?G^
zU+yn0*4jLqe?<<@&Q&h|#`zE;=7RP1AI@O8)9>l&DJv^urnDokjx!n5MtIMbNEIwM
z4B>ppN`y5cg0dMbAM07pqPKc?W(m6hQ9qmB;nkLcq^fLa@1RvvWjbwg;=i9*S2K`1
zS6EdQ?}2}df{cvs>ven5OTs+xTMPnwbh**~&hvE5*YtZv#(@dq#GD*K#$Bt(N}jk2
zQ;OlIuj0XE$y8zRQ?B<Hg^saA91^=<R(|=By@sL?j`-!JpidHDVQn59WN^{#!BfZA
z^Qki{Q}T&H>4<qiP=(7%QkU8<EiVgt-^e9g&<x<|GH3=Su%RV<e-_r6`g#|NN{m*w
z0m|jJnbaVadbx%X_ji8po4N9N@>(Joe}Bm7BKgya+_$bxd-uDe-!eFCE|2FbD~Q-U
zccWaSq)MXxwz{9NS~Gup`<z6|@5M04Or!9WRbFbh{83K9^>A*qs|)HKW{R{jY5+7m
znj=R^Nr_gm!ZCR2Z?q9G#$hW+)fg8#ly9ftE@VbHtzJ<q%x7kaH~U_c6NZ0AQE;k$
z4YzBH`S6HYicvOPhJ!POS3R(~nVz?eMn_jS!Ca)47Ti~><O?@xnUmcyV`FWN$7uby
z*&Er@+C&o-ny2Uw1#7xuZ|@L^-{^g{hq+R3JsU6ZwACM*_i0HWzq}lqn7CU7CZrP*
z`k`98?lWkPd5frRU!I9xk?|O49~^JXHLD}>KQLh<qOXAFN$5u_N=%%KUK}1?nvs!l
zg}Wi*<Ku(zDZyd`vnT^@A^!8}S~r!Ob_#!qPCea7ATt(gr$_Q-RM3QGARH>*vABn&
zQ9YA#9#=tXT^-x)FOT!7yK`)?S$kf{EwQ;hFAAchkN<SOnX9XH-jPu<Gx+r-`0-+A
zSXj7|wOs;~_bR>CvDMxP+`76t6X!gw+Ptc&YNK*acJ`#3Uv7sV-Dj!|UiT)u{{iHI
z>w?+<0l$}k+tc-8B9vrKwP-CSa&BY_S(-2PL^6j$$ApPLixrJuX%`((a*@gncpJ3B
z0$Qlql*41Aj9HKntuds7S=CgG%!qq>zi61sR3wS}?DOq+K)}Pp?=gjE-Rq4<hK04c
zpOTh^_x1JV{cUtu7pLgyztPg!wMby{1Qo2=?={QyXL^z-Xj432o_dZJUBv3B9t%Z&
z`Mv5lIU1d8?d<fv7?ehAkAEmQ-W@&kyd;u-Bqn@EK<VStW`u~td*S=~BCo27jH^oe
zEp^`gJnnSeFZ&&%)k2Hga1`OId?rt&aW4`x-w#`ed4Fy-?3?{*MYTXs6}6k4gG;vg
z`PMjX7s4XbuMat+NO=2tdbV4?rh0I#+(nCCY!5;oV`5@<KFiC?7cTcXl6l^1YHD&a
zGfQzxW4yM>9{5AUo55`4iXsMJyo+p1ra~Os+26mvE~kk|OIG*q+36i0kNs2!z;Lt3
z<Nf7d0Qf2@E3s)5QAR$fUiJ5GCNvXMbKxda@r06N8(w{Cu;or%XdM5}JzZ-8zYoD2
zlvm*B{_W$BU10-*b<l}Q%gXTHtH8XP-AIUwQ$V<H$xL<xs`7bVElf>yO--?K5%gUf
zQomO+H#avnL`O&eg241W^@A=e8VV|Ea*WJ_n7_Zjk&)2~ql*P1*ju_#Wif0PW7eSm
zmQh%YW<*nu;W1{^xnkkthay2($8voy%ufAaKqMP??)UO^e}9QD5lfovJAydnSZ+v~
zT35zVex5xMTE<a!o=r%;yBN8EPL_<M!=kRfLpdk+UY;$d=lLw=@*!8Zg=&~$;8?%R
zy5<Za80z61Pv?B7jDc1{IKEdhl&u;cNl<{U#-k{I6iKV6u>yy;#Ml;lI7%*YsZ3p#
z&j(CaqW+ZcKwR#G2Wzrm?J~iET?t2?NFPT*em-=W+s1|w0FVn&(a}u0O<x}fhhcPd
zbRzK>gX)hba@TMCf0zxkmg?J;6l8HZVVNbMb8O>^DRZCw25seUY1hr4PT!egaoDgp
zfFpM7?*x4xP$Xzfd#mf-;E#ivpiDh;It=zMHD(?_>ProF^wv-OUROwHXy%L1dqVa!
zBie@;Yrp)mKbZ+PJMR?ClGExoO*~v9M&|z^@qM^TUszb^3btEnd}Xu>K_h|7MkC?r
z^gWodYPxT5`Fl!ej7BD)QWD2;3u>@#S!tO*{|4&b<|b4o^#l0H$f*1tCaSPXq0G)U
z+Ip>tWU0yx=$DmxtqS2-@1mpSAFmHTAkirF$7FhXO*CO(VMSnN2>w!!CaPy(L{=+N
z+JCqvmWH!me|epG-@&wb9T7-}o#<Sx%(s#EspZ$+@v{5Dtj*UewMw0KpZf@~z2>V=
zsa#T8-A}_2zj{exqgUnGuX;t|Bd>O8R_VSw>5UFFifirdHnQ*a?fiVa#L?9I8#K!#
zX)2X2cMjWyv>9>$eNKYLO@4Xbj;V37IC?obHAhs}1d2A_o(k4nsn#0rfaag)Z2awi
zS^&*WKPMW|?DFzAGa3<mM)ae_^+q35t}`~De*32$IQaF$^#YDB7w!9-#lG)eQ%KHV
zi!-~?p<Von@s#IPsxw3ERw6{xW-xMl#MV2ATO0|8Ne4zn5Tf%7vB~gYQHyeNde~<-
zMOSggs#K9?qtK^SYbuE>9LS0*ho`t}_g<A-KOeu7#fyEzJ+#(go5|yLvCRTNBWuO+
z=r_)6f#=tv2_bn*%3|03DS+*KpC3kZgrV=*NdXiU=5I9{p6d=l4OVs<&uWj0LB?kq
z*gndLCg$vdI}F;JE|4~n3INDS*sN15(3H>j!F4EU&}YVYXDFE*7jy$?Wb_Ol3<Bzm
z$^8D`U0>PP+r8cQr_9d8m`T4?Rh=|BVFPM<u)lA&)&|>vQ$Y3-7XuA<721sGjE4A?
zTzC?!Nqew?RpkQ_#4ct^RRJOsaNRpQUT*wxB&=}sfo_$O*<nrBiesQuyRI+ky{d<x
zsnwQN0%*RtiU_Ga)5WjzW$HF0Bz6m#)N*M9&@)wf^n=>!rnCkfPdCTBUEST2ln^Z8
z@F9<p&*HKv45h`XS1ZLHKP94x7>}W+@l<w>eC8JKe~yUB$W84ryX?yGSv}DR7=F-i
zvs`XiZFU(m8%i>|fS_U2nZYyjN1XQ757<Ck>~g1Y`P041?EdK!4M87Z0uybX$dji1
z)8SE-YNbO5v*mH);p5KN2eW`e)J8!u^4PC<*#8kHu1QQxY#JUtCRx&LCjMypkB@E}
z?~bH@W4YAR;d1;VluW12$H#Ybye#N>Ax2GOKAOS(`G}x-#Gl4sv&~OJ(4$~7zfNZh
zZt8_@=M7HuWr)Li{#*&9?5h&iyGtLW7M_QG^qPTzwE3zH-rEOG%c4eyR<B`m1{X2?
zHY`??s<{PB2I8M+!!A6+xMoE(J*gA;SEH!CN+ft?)fh$n_8xS2jj_l`W-U4lY*z=f
z*px`uIwjQu0|*1fEG81M#GD#^w(a(-OMs;TT7;-l=6!pz$%=yU1+<6ne4a?wv&^Ii
zdwU~kEbWTfYYfxBr97?=t|uliUa%i7|8zdr=-V&;!2KvKD=VAUru5}b-`Cd{fo-M%
zlN>Zuw}TmpGD8xbT4OUMrMQR)q!IGVzpquX8Q;DsX0RJg<WR(Yo~Tu-@hMZG#w4xb
z6oG&iTL#n`Ks(22;~}d!xQmOv=x<?=b5z^R!=&3>@&l;$a>g$7%6Vd&5FRp4WWCuF
zve0lS9<=_Czs;9Rl;193-778-&}&o#!Q&n~)+lY*bvW->ufY;=x`Rc|fcmF^!+M6x
zU7_Y3DG(EoMc7lrF6xB?A10+4QILAWB#=(}0{uha6vrKyg&*(k?(XkV-*DYMT$i(E
zQUHX0^>pt-Pfu@RVj@tCnaGgA>UQvRx>%8g8#0*NCPgXFvw9MZ1Pg8*zy;+a)8!(0
zn-h=AzIyS<IbGDHrKOKHb2wHKY#2`z$o)}-$a>MN?_46nv4cC|9v<NCFVd~7tf&>B
zBdAVDu-PxYCKDe4IO(^*8fEd2-=LA}oO*6=rb%?gmWs@x0eJL9dg4uNkr6_dnkc0f
z+-|jm=vg>6jq<Y3?HIrzuh>B!KQ@%yZLmeRT-8}9DhcZTv^)o_Vs&*jo=%P7zRUcL
zPiHQTa`*R-c61%NXMi^`9^sv?wd-~G^e)vOo~*UonNmf0h+tRdn{fYh+bjSbTeV28
z)#IG<fSK`A!`<nx*Pr!lG!QD#KajdUOx?GwHK0nveI*x5i*kLVuB^di%;<_2Y)z-F
z+pf+gSd7>Cwm&j}d2=AVrk*&TOhBW7F^|o!$oiP*2TM<X=!hPU=bgt<zargi`5x1!
z9JLa|v%T<KSxuwjMs1@?Bj|eS=xB5Vlq_bBi<REH63gq4jIO&c#c{pq)X^dujQMZI
znJP6NaB|5lMf8k_m1#6sQub|n>4!w&-Y$B~VK*v95wKVTq2YspK>y`4Xf`G$`BZ-=
z(9vVhuAjqo^fcTTMf4_?m*HoJdRmp<-(FuQXVqdLZ49S=hzpZO%ZZ4Neg+KghT4--
zQBjeN4PZl;;<ymqn8wEH=H~Z_*gHe&f7&sSacIwWN6XnsVL7zgz2r|MS|MO^uh!Dp
zEJm|GR5+KGm%HDdR7T*I!@wf)e}8>+kVsg{x_r2{k?aqO?FYogaE|z+E!XS*!2{8c
z%ac{_dK((KO4psC9k9~2cE<c3?w`fJAt(AUpDA@ht_Dcm>1#b%&s9X{!2>RP*c@Fh
z92mlBPj!Wy$!<m20VBs6Z1wzrde(E%<M;ZKoXWw%oWb}(pYKBv;d&*I7MyN@R-j5S
zd9ZN~q(zu5Q$VB8-z@a6g5|z#uJ|3{emr#d=42J#fR#Gkq_1}eiEJ}0Rs)ce=C7wy
zg_nKNUHx02u`4K`da4chgJPe%DDERTlFsHZ_MLl$<joseIwKPk)t?Q&fxgA;Bi1Xn
zNx#tMDSIN|vg=x@!_mCl*@>y6mVk~5uBPiB(egu{IibRB$hImqw6wMc)Ve{ZzCayG
zAob2NBsjR{%4K_C5|9f({;r<AV^bJE8MJ#9`rHRa_%}2#iBW&iC{wF-SQoH#l8}c!
z?k$u_)@ihV2BHLbr+}sR0k{lWHGr|q&CM}0{t0|}xRzDpz$8e<_CY!)baTXj8*m&R
zdU=NTx<2qd&X7%KHOt_1IDdH##e5r*FZ>zE7pTNMcFQR;WbBHHAFvbK?%HJLN2Zh0
zeVTHt+T!#uB^Ap!F<btMWpP)}sZ7-BBQ0(I?sDBwolq!rmF^U|Lmv2*)0rRDE=WhT
z6W!v``%9Vrx{3tTrRSwvIaL=WdqsmupTTtQDbA`+-UMnA;ti|s=e>YJ9qfME9X4dW
z1|9)Ay3=8Jme_1K*L{-5jl{Kv>!CuKk|a9FOv1x+eVdUmkA>7-1~rE%B?m<bRz?%k
zS&xZ3E^{S5{kQ-x6ud5x;LS_x9(r2Dy5Rv>b@f@b%Go%f!OD`N++4J}-(&>817WC&
zdmKN5PEFPK#xk60mOL>HCqXq(&iIFvy{iL~75R496(6OX!tV#Yk~l-=Ahe%#^qsRg
znVBT|Kdho4M<Hu8!pHjnOs9GskCbLK=+L#z6F8|6b><j=Q9X7jHy=!RXGFJs5{hp2
zH+OPw4$nfQuC~^GG7r}M?II!Z?>MTO9H41A-vT|WNgX5A@x`ahlHX^$iOBR<ilI>g
zu6ECRX*buO=ZH^kxaio~#shJkmhht^kGTK`-dQ`}o^K(FW>CyD6PYG3b^gbL`NHCH
z7Wd`(!GxGs11)k-Bnubtm-S7c6C4~IoUFDQcscA(6;8l`bx+H|!I1_J;A|r(c0Oq_
zZ@6c2MIV3vCMO*kDuW>Mn}le0+z0@ATKcJgj?TNlIxHg2SW<p-u*|Cf65zCNY0_P-
zv(S8fc?QrVocag|3SVAdGM|N^blfAjoZ!Cs(cioGDK}ty-S_d~;t?RHb1T*h>$O)N
zvbVTR2{tHB_Hfzu>g@kM$HdHa!M7RDs^a%ekXX-p2>sme<rBu|rBdiD9(|ID3Gu2v
zv?Qt5O6Yb^cVmrqQp{mbH4?btjo#<`=#rkIPOl{TxR?~9$w+WZEhNmT=);I?#8ts{
zN-O;2otBn%_D)V$Pj9Cl0#i;M6gr!^qt{)$Pj%*Q&XsWC!ZLF5^5q(pT{P~^Ue`oF
zF<vg)D|PAvH01a!YD@Bk4(IF&s>P28A8#s;@-mdlrZT0<)yrFqL`B9?1;mTnEa$5j
z@tteb^C0W>+r5DLiGm`RW+QX-;o$FInlUIIkFyC}dX0A-NDIV;t**`!mP4%Yr<g6K
z;mj1HgNZb$jGqF0@FX?!tQwrQB>p>xxuvCp#oRa+d1K5kFE18j-}l$riBF5S_V#Mr
z4(G%p@xqb;<A*=-INua^b^V#B+J)4@%*UYDq7@aYs5lUmGUt3WZ+boTN0!rRlgh!t
z0Tp!=XeKdaAEXv(6tkFfi6<rWJw0y6G7;7D8;yCb6llgI)AG=lVtaeVSKFZ74Xgcq
zG><gL(>Px>c_TbuSOuu5edasT=6^k#thFVFvpvMeSsB@Uyf_c4wLkS>o)t8k9HbK-
z2=bKNs+`%BebIsYKpRm?*Jn{r{)XMsa5!Z&I%?ZIk0OknvSU9WFi`NzlUhv<ZX!G`
z{ZIsU+oCql{z5G@eh{a_T2Jck`Bwjmf!CCRmEjQ9DrnZStSD8=eUcJIbcJ@-yC@KY
zoJL(@0*6cgv~GmnLB8BpokoSU-pA3`UrFMaw5S3>HNis_@PX*W!|a*7?z;gP>stWx
ziJC@0BTT+zc&s7=-;$EE&T>+On&ysSh4=GO549J-Gr3M%eJhMN#7KykJe;NFHdKVM
zcO;5c(Zuy((uvgBfXzw_l$6kR;NhGyn;9DZjtxlbN#U%fc+?E@yb%!=)myBxe5$^N
z!nvek_)*B=l}3(J7?!%t3?&t+%=DI*(V)%rE*wK5!3wxP<!TJockpbC$gsIB)RB>f
z9Td#SKeS+rs@_zmYLrX#`Frvus)k^R^_A$i1L%q<`&GBYhx^=AoLLK((YimCcz?B3
zlW4vuo7<%*Y8+r0z;(N(L;($#h$6rxB;4QHa@m_O%7UY(FW>Gf#b>mpZ<(+Bl%JOn
z<R$!xdKkusLj==FAnhl_H;ZVZSv}n<)<IoXxjkO5^wR)F9Pj4kxrQ(g1R|M4;(~Y@
z#gsP3_|TY`n3aU^zn!2cB+bnjB>fY$cy3Pd;o7))vo{hL=;(mFn*xR!A2wHN@rN14
zF0i_M;^{1#!88DmgD-lH&%|Vl$L)ZNHyb#4<tl|p4thJ65x4u(p^CStql9E+9~2O?
zru~Uf^qMv5&E1MBDsn0+j17>6lq{UOsGywm1##r%3%bjb>O=dc_huCG9mWf~d-~sg
zjR=gh%7A{LT|`Ky9vHau2o_AU(xyf5FXEXtJ$E{vQBAtL^<T7JX*%~Yx&l;yiwn4d
zHb&>0?|h)J{%p^XGdle<=~i2UJQ)D#?3_0RBdc+_JKAI9Y$Xglu))Fb>hWglS?iO<
zD!t|HuFEls?^A`c#mv33UYMaT0zf-hUpLTgCKc57654DgzdAefcz&q2yiC$hV0Qp)
z5*hF5OqifUt3s<*P_Wzrcz;dgZNUEWC@iF6{^z6*Kmm2o2Y4QUw#--Dd$-84ivbAF
z%*?E04uz(5qtjs9Y&mHxD?1E6mr=KA?`-4kgooAX>SD7?F(fox-iAkK0E{w_7G{C*
z1DKpQFo^DM<kOfjv%5GQ^le@{x!E9RbT%K;)BgNV3&3O{Bo|<%+w4g{%k<s~6wNzb
zi**&KHnqxaq&Etdh+bO_42f2L|2Jpur_oh@vA^D<<@onJjxRH(rhA8_jn;U4PCN{u
zL+_5d8jn!YTL;dnB4vV|hu%fL6}nps1d>(hTuG5ylc7+me#<Z(?e-uxpO^8~bEpKF
z{%dWxM4h!t`YSJdsW2rz#QkKofx!tHI=aJh1HYW7z5VIt=H|*OKUmovKKDo+^L>3q
z0I;kuuDYEqzs8crL`Rdbni6E67lPecXFmF~4jXSm7<vs1i#88ts>N5I%@`b*+~D9~
zON(#(-b|X!a;%v4!zq=S--!SWJL!v_!8eyjab<P?EyL~i0wtio381LWT!p+QUyWyk
zHmCcEPnPV^&=4R3acCM<x?NXnhw~0`q)*HiV=HCq<>*B09=9j_48wqUqZ-6q08?aa
z4Dm22!7~m_rxdbJg`}7NSs+HjJyG5$4=d}%Laj-7H&_d`Mxw>QxZ>qX62081(&L?;
zovi}KT*)O2EG+PtnDwDEF2P9MNpM>JQ7e+uc6YyBZFPS(;;<wl%bWZ0K8YaPm7T2z
z9yyU5=JP2&-)EJh)N1C<on{Z2NoFGst5J&QTnJJ8>a$uV+=aqMiP*7>Zn&YIoJQ|R
z>t`NFy~jHoCc*~uz>}d~rNA>yn<=GAtNfg`KoM$%Q2P;=m!N>MGK0|&!N}xjH}7IU
z$N6mC&y+TdK``;<Y5d-Ev*q(mn-75Tr?Hr%ixq|iAX!>j9k2h=#9<3Y!qrex`V*}M
zJmCI~-bnmxE@iDi%m!fr)=$82KA0K2dtLXN&SgtC&6p4kMH6+XVTb-!kd@WJb%`|A
zwPWTimo4B1XtNYSlH6!Uy;D<5%L8C^o(VZ{;=$=mL&=YJ-a(blz!~>pCEa)WY6ZFe
z4Gxv)JI^}?2ahYuE>lK;+S%Eke!XNfmuK<1Lz2;bhtl*v)d0?e{aRZudXOG~Vku^X
z4-XGqTk&rt^YikW__1&KP453m8&BS9)%ulyU9`2DC&*>-g%>7*Pp8sPD+Av4<^?VV
zh457CnG;Y3dFkjt8;jHbEyqL9F|)aWO&yi0|6WH_^zC^U0T_lh*L{&Rm~_JHx{Q)?
zPONH1NW~Ooxd6X{H$vV+9=1;F9rQ#yX1}OaC$e}TiQVZ-$`4Ohso5{RpOuCzsF_63
z?=2iJ41Kf+5=U%{)tZ#Di1E+a1lZ-m4#qEN7{FA>{{D2`73>0X3<)<$8iBjJyP$M1
zYE-1{1%706(vU0Ru>9ux7!-Wn@#UGvWtZUuNL{zUd+nNRasoBj+C_0;4+;uOE5pB3
zrlp;^dEZpbQN`&iZ_xBg^CghA#%9S0*vx-&NouzU?E-IF^eNn2T#AE$D%VY$N7{BH
z>Ey%Ed%YG=OeHD0(hKlWZ5u#p;*WKlbVm;`S4_1L4a$^Z+?he*;Xk-0$a8Y6i2S~W
z9y);8B<Gwb7<Pm;q^M{&TP;wee>h|I$(rLzWg=zqPbt5NiiAd?B3p!#*ZXmZ>Vg8(
ztk`!MS(3u4s={S;1Yce}IR*wqq%baEXP>cYVt|-s33j#n$;w8NU>gh)KGRBt_B22d
zPEM4gL&@|%>)n9xH~QDhA16qTh{GC%%n_k3>!+4Zn}^f=1un+a^0N0-!5~Os7+JwJ
zlmd3gHt1^f{t6%0Uu$Y|QXAMNTzbV35i&pl-W|(S&6jXXQP!x|w=&G}d$=ML7(@yJ
z!ppEzIzuMA^$f-!GMa+c1XLgAw&SKDz<ykA2it%tRs*NV0iKEMbC+_y1mK$V<@j$a
zRf}UvOG_6%)qiSa`Y-r9@24`bCyyOo+>Y|sE`xi8#L3IcBM{z}X>0c#9hKKk0S3wW
z&hUImiIk0vjX(+mtf7?HpQa`*S=q>=25QKwsN&+{l$3^gH>31-kF0^Qv9TE$Elv79
z8rTE`cRR!Q+jT(2HrCE^0}DM-k<rB59ITuSw{oX{NgzLxpM3wUqX3}rf1kCBc|{rc
zdAi;n9gTV(o;1cjG=d|=G|dX9jetm5uB55iSX--LVu(-~09&cm(4z*G$SENqafF^n
z<NvG;Ox(9)UzggwIaLC|JHPUkWCB@9TwJ`obTXmN3d%G1jjYNnh_FZ^rKdnjVStF!
z0O3!|6b5auhq_l+Ni+=Z2#APc2w1*j{(C)pTR>G_9u_I7FcEb$d9@l9^qJ{4s+l<w
zRjL(XAaybYLO>iFaJ=sC&fks%`smUoZDeqiyScd$f{fF7bs$npN{WP~W!hDRvzYV$
zo1kF`N=grx=ALGSKokKTnEUejP!ky$c~9umCm^CM>$dJDYzJ|IPw)8!f3PPbBeS%W
z@$%vyC55_;bwStc@0gS>o#0$#29co_GSF^%UBC*S3-nPD(723EOacQ%&)0toDaKsZ
zKFj_dfi;3w&(F^fejQ}=5>9_FPsGO9J^?NBZ`{G%S@fq3XjQLw=c=-@s-mKL>gvHo
zL#7G)ETBSlcfa*0mXw!|PGZypVWVddHUb-9``=&xUMr@7@qt1EDoM`u=bt~r8@tX;
zzg3l$H_Jkhza`a!F@j@d)Qb!L*OdO<w-Ku=E){%vcx0TMoOEYvbkQ|gBd~D3#2-*F
zxLf@9$^RGP<L<UOo?vXF8>dQPN;%w+p>8juPPH)aV`V)4zi?j|gK$M>A`#ADO~K%3
zdO9wTQV<Nqf4&rquqmUqPVTs!lKBw6PU!!x0D&@9B;fzM2iuAu)F35A`}T!ya&pq%
zp0o)+FE)0395i!-*3Y1j^U%`XZS{}KRW-HxAs{1L{EJwftoeG}U$_|<2>vI6)ng!T
z1!80W;*Ytx8!atMa#eg^o}RAukwek5L9Ji9K6Iyin~#K3qokr@oDO|$K0xf|#*u=!
zjU|n?IhGmP`kADrX28POI0$Go-he`5Qes#a7>kEO!^Z#%q)Mk=hK`PoLA0m8-`mp@
zY?bm7+AW%u;neEbn3(q(6$pvgAOt5YEUcrG!GJyR4vRZLq}FsWqgc@(BqRiE8#!57
z`e^u}bCKO~gY(N`gUP&)@8Nm9Z>BnYC9P*l5}cXSY5f1qzcZdG1r<W``Na-EMQFV}
zVw^U+Gr#=MOVIFBiFw^gg?!`9Vpdzxxp@tY(?yx$x5?kUk*RlBpPKuaJN0_BC@U`B
zyFcBJO1kn%SUA_Hn@6v;VSZ-DkPx<^Up!J{qv$d_E;Ey-zDm1}E|ILp!hWG9&<w3v
zj8by#*X!Qjzk-%Zr^@+ogv7*!&%cj8Q&6%hLj7mkFqCj7l5cm%k^wON2DtKC<5`(a
zv6Yqe!NJ^7YRn<PO-b0nAUDWO?a2m9cS4y#vh#zmsA#?jEc_%J6%|efs`;B2Y!xa!
zYbtd|3CVs|uv6E*Ep>H8{VO3b@u)dW`C=#H9eNTV`geK!4gZKVZyN$cCP_)jK$$&0
zvTcqnP~5-ImsD(R_5@)QEu9P(Km62h7UTM?oSeKKXLs>$i$Ms<#@M)`x;k{}^68%b
z%hTD*&GBQqcPu*x2PWJG(9l0WT)_s31(lW2tz348Dwb>54JGz}bx%M+L(^_?wG$Jg
z`a(?@jv!cLC`_+~iB2YP5A1N8!+@-;bwGiApYGCu#fML82!zybXi-Z2HjnF>(o4YI
zUEF-(wS!$R^p+crpI=t#85jVz8GgDuuZxy9Qdd|1;@=<3t68>9o8{UWkUU|3fB8wO
zc>Ay7dT-=B0m0tZh4^?fJtrkg8~rX=Hy*_+pBhizx>QtLT#_~?ptO|~7q|L8cDVel
znkiFHHc%^7=`~8w`SpeP1!So<E>>680Ax*(M!z^1Nk=~822qoQ%n#Y64WC6c`xLV~
zNVz<Y7ADz%hyD6=U!I&?7!vYOu32R>XB!?96QYOUghy|VJg!}bcX)8HS#+t};<``7
zx-pU-Y0%+eZDmD3v@3nDKg_3WGjHFihlU<2^aPT|y^+YVN=i!1lzg9$M!?tL<NviY
z?(qHw^5)`Vt?u^h++?iLe)aPFKAbn~yEH2n_XYUu=f~JgE+;&T@W{yC)$K||NJwEC
z1uilHA0*9(-RN(*xsar?FU*2IcQBCl>t7r}22v(@=xzMq>a>~*bR#tPh^+rFKcUWm
z`^3YnXn0)C+kyCLk2EJ2gEo&u&g$F+Gxlbfrq*AQxp=Kn)PxM@i8+OZ=^})n2a$&z
z!MPE>L%2WNDYx*4!V8z&6Q*pinoerX=JTwz7^k3(PGKY_CM3+GL?#?`7Z(%Dk%%NJ
zh?dW7akCL>v0eJf#?Fp{`O#)K2m;gt$DE;Isxs&Gj<+DF38G$vK7TrV9|fL38b+zf
zQMhCjaPg-g+py^9O8s_~gm@`vD<TXGkBjX^z!861P9hv2zZX`a*JKJ+6`HVLX%aoU
zi_qaHyNGK7s<eiNGSIBB=|+9<tp`C-TI=vdFXB!cURf0sqKv>Nc=LwASH<!hNF$~v
z<z!S97GD49#GZu56v;hrX>DvA?~CT8aQen!qgAC#I5T{E%uCnzdb}K)FFB3_9BKoG
zU$knY6zzYy`;q=(o_Fb2V&dX<OFs{RFM&(X(_lRdqY3$L|CEfDdu!b7ut7pnyc>jO
zitfT;ev>(UbYS`p%ZlsdTpu+}K}Sk+0u^MCE21%)!SPk+>(7wyQedf=iUY1op68J<
zoLrY$fPH=x@B<8k^Ya4-KYx4N{aFtaZ6PlG$DZCkfRf+9i+q2><4QRwwH@~D8}GJz
zhmSd^T=aS^Ts`PGnB$&&%$65Il)Uct$o@gY{qHXS#vyxeldcR6$-G~gPI7^U2Zao}
zdA`O-kGGW)c<TY-0)r=u6VYG~g-1u)Oy*JO(0)GQ!@#@YZJbW~x*hQDo~l4e;$PFH
zY!%j%Kok-1dENv$n0p*3p>N0Qem_;-2^((|=jZbu#MI=0>ZT$o$*cy5iQDm#fZvx+
zb4#OmbRHNiC^s4J#{`gt3W<kAqb{{0<8nkv{=?%|wq>#SqYwud*Qn`hnm;tIlGfT-
zw!1Ly{bF4zFs;>8u>rY_r;-jvG8;~&M-I)%Aeu3JykYcAm34Ew&g8v)z1wiYp4tDO
z7GPp+{q*u&43c~3#B=Dom`8M~MKc#W#NRVNfEZ7*WWdnv)&AC<^f}pQtP)kRfhoEB
z3o~-YuCA_oh+qA&*%W?F<Uv6pl|S51$5v3xtgU~T^a~I`H|OHkKlwv@4-p7LMzJ*=
zfD)IhkiESF91Y~wz8I3OXpeWYOB74Mx*#Ih+W<OqRcLD;>Mtq8sOX7^h2WB#6aIi#
zJ_TAu7Ljc%Dz8TS<9jB{EudU?Cw%<!#7s)w?9G@-hk(LIY$=8@?Q?xFnv;W3kf>M@
zaE6Ru6~K?d4Urt?0|*@ADLk^Qo~fx=Li_-xX=zLh+7hoLZydpQoFcs}Tn-zJ_i7~&
z+wD}SAF*l10!rW9e>D}8?Eh_!06#vJbZUjv><{hK^78EMXhWJr`U4YBmfd=w0J}k0
z3-<A5e~4Fbi=}Ui@dOweDhSk<R0TT!o%>J10PAc+9AUAr)V?3rM8t+<5C?Hx4BtNj
z?k5+iAF^~2h1|7ucDGuQ@Eb&ICk$CBg|Wubd!QL1ZE$aeVeuts3=I6VNI2NpK^z9H
zbtRJ*olb)Ro)|}#t>iQUQ|9H{(*?elTh|k;-yYt~77+G(>$VC`*F3}Ge~S%*fQ-)1
zfna1Ng!ihA3h6)0WJNJVMnys>OtJ-hH~tvLmhr8C{znn$>*M1oWwO<Fhwe=sOI9@B
zW6jJc)Fa{;p~nMS3*h^Gt6p9$vt@{Q;#zrMUaq{ahj8r$1qBhha45x?C?du7p%9e|
zW$sCMZ@N2r>;|mb=EL)zk?NRj!}GW?&;ML({8`0U{LZD>Xz#Wn$;6?$3l0icjOiL$
z^^J@aIBh*l3CzvG0-hB7O}#YXZBR+t7vS4m>;$I-gYyb26`*Ic2tz;8#IVhJXT0IU
zDB6;UJ_z>}izmRw=F2uPgQ1vtZ)~$PBmD-+#=!te;@b5cx!%59ebj#-azg;XqyvyM
zcNF3tvwYl2ujV4D1AKYtM|=|wXRq%NW_uQOl|02WSqEPn^z}vffbgGq9y*D5t-uw5
z{~<z#`AA$rp<df7j?nKNe|^-9x<{uNP>q}k{XColV_l22Y3ZqF2BtX&>3+ZxUfi9#
zAc(l%-h!au&Jbc^{oNz{S+4d%L3gChqIB$<9DWn*;OGN%D^o=^X#c3FsKJ?u=wotj
zb6R4wzWM0|^b7{ye-Ftht%5;h{WJF#+mtoiK!CMUvw93*5uJK#?5XgIa=q3JE)-U2
z$5vG|a_B5|LNcvmAQCzQ*g7CWa0r5C8nt=QzmP3szpl>q|Fa_wb)7{YRoaUO{h`l;
zhD}+s{Pc%RMe-oUd8n}7#_Y+OKusl&sSP9igJY)jds|`{7my(Vf5#1k1qWt)f&CM0
z?G8lEi)~D=Y2mf76p$aK)w=Qc(E78x8ze2{%rlUxI(`Sj#~L{W(0z5Q0@YluYJ1Qm
zCqJLfX%m6)Rn4YlLU78aN7lBCWe_&R*XnSNf1sR3QC~+Z?b1pIWacptal-QRpI@_i
z>W29!Wuc)16Ia}Bj?65-;V}{k=Tkz~Y%yxpP`)pG^82GNIwS)utAS_j-KliJU*e#)
z74qZaVyi%Vh8*{!pMpx$+_VyuX}vem@xBL+SThu@Qj7X)Ql&;E2n6i_RWT&=b$hU`
z$qY!~Zf?HrdlQIN=;uG*F8s8*OpK!FzQuvh%h_<9${N`2p*CLdh=*8c6er{J-t@PU
z6Ka`C-(VH_x48U*D>Bunv&dQDhq;rO^q}fT-byOSdbc!tuC#gLtE*6>;Ic_(Ui3z;
zM<%!X>_^zh$({<lAt1|U78{*nCHs=sf=-XUZrB!ZEcJc$e1YXJzyd(B_y;TP?N6j7
z5{z=Z0|Nt{B+ieN$XTy1sQj4`(9rzDqh7a3EE8LMF+PF>9tZ$^xgM$q9&!B}rECee
z*UP`__*Df3cQ4QVS32a_(8;jRc$k>)A3*3OW*qYJy1W>mjtE?mdsB)Pgb~$IHeIj1
z9M>Qv^0soSzdOU69w<HOI@3`Bu1^C`4(lDFL1Ely8{ISlr6_Xhai(%wXp>FmqjYYE
z8vRvgXJI|@1MvU@dU^N+F$XRtj^hFC{L`H%Sy_2Gr<Kb30PTk!0@7G;&WFlG>M#GZ
zF9p}c$cUQPJ}4l5d}`smj+6zpwUgzV4&r3)x9G+uVno<+|0oMZw^`6X*7Aa+J!MFU
z(TB#b(y>u>HWn%_#uhL@a6mWG7p7hp<8X+PUp@GPy9B%2wa)$2Xy!>Ki5BUS<RDWi
zP&`8Gk~Fpif38aJ7|<7M>oQPhfOzM;*`uA-b=O1uUbU%aHj(B7xiWdVp+nH|&O$9)
zNeCrrS_23RhBN0&q6duoL-&*Ofh`q4R}mQa48|06uCm<REH11R3R}BMkV6BqngYS7
z(%aXo{Y&ud;S@&3v4RYrm+jDxaRf0zh07pS4l`IB7gdQ$LGnh%pvjSgfdM5x@<l<x
z&5(O$dfLS`sJN@yB^9KMd5yXp)o10j*9>>PuJ(ZA0Dm}BT2)?tyy<+n)*gCu)1|}?
z6rWaivNrF(M%LB=p8)6ZJf}s-g@R?sl_rNUv`f^ljQ@*82{KO|;o+DCOMua_8OC%o
zwmR?ds5y1`6fvVyW`e{$&@u(5!ds)*d3g<v<|?5RB7Pn(x|C?wg;=KDffOz1Hn}Lh
zk4z+piDUzXfHr(SS%EX&2YlIKz2!2QV6qQ#nv<#7RJt`=(D(d1&AeGs;oqzw-LOPe
zyEh2?F&8_hWR52*xGTX_f5%EcHTHp=h12Oj)eRqQ|D+mhB&1H$tRR$B%zx^{9sPhd
zMqc~tnMpG2UtD9C1gp@2q8yHmUQSyiV*8RP2aNS1+n*w3zSl2wF)=q%6lME>@<@t{
z=T2$oOPI~9ikD85DD$UbD!BwhLOPeIm2O&9yaj2AlVSXE_41GE)%t`*X?@X$xj%Dd
zkl1iigO8W$e`}wtctRxpsWE!?_{%;ciO-<rbhNOqkhw$^6J&<avr?{UF`!UFqV}MS
zTcy;QYc&m5N@{6px=<+lNo~E+ZrR2@tJ>|58jxox3ciCA0M$hB&YLB;KYwl@;cWnQ
zh9?Me?PFM-Vm4DcK6hBI!+MouY?glOXJmVfFJPy~gZRxdeCzbX^|BL>B{Kq_<(G37
z+ld?iyYN98eYIFo(@B|^dNQKj%PoLtz427a)RYQ`>jc&TUkX1C52Ft(gn&}JnG%1`
z3xcb|c~m>df2=Dyx)*xxhnWeJ?r_rk`>jy)tBt`#i*qTVY@y<Jg#YF<dSZfkfXWn&
z6s4d*n{7jyR;9o(lZPWNd*T(a4-m(c>l8@2@uqX3;KCpxhW|$wEZ(avl!-p3gwOjL
zC8UFr$fuxLwW6e|Dr(e8u`e$))LD=X6EvdrUpDkBAfU-wW4DtN3-=b4^M_k<=0NjR
z#Yo6pR6;&=Q04EHl_WDr78aI`4NM=FaH{iL^qKj2`O|tKotz~`J6nGvF<IHf>Zhy?
zDOR{3>@hS^ORxMcUK%|_g@m{`CF*pIq`~B{umJ!NbdyFZJ6A#UI=D*qA_Yik-FT_n
zOamXOl5Yvem_5G7El;K6;o?SLQ7O>;dhc<D_1AGzY8w^{8wUrbmd@_&j>Xj_@<5`b
zV6@5KDGx<#1B4z@9n>kHmY|WTq@}|YV94!C4><n!YYB$0z)&=zj`2%c#|?;3a}Q1{
zq`Cc{q~#3b{7sFTJ%N!+5&T-`EDAP=<v-FJsAJm!J}?v`f!<^#6HUUD<(+Jw_iAOv
zGJOBJssHXj7@e_$I9CVxq@EDZ3gZ7yh-)U#)|OBf_WL`Eu!;VaCi?#rwgFgfEd<YF
zKFScx9<r~3Rt1P4Z2s@PC@(=OcK~5iQFxsA|5f7#V4Fu-Gazl{)1z62`Cw7Bjq+bF
zl{HM~`s54}|D%!o=ZS;ooUlgUepF<>9p;N%{z1~N6}b7!_rkL7m|uG<;Xgw4e=b%k
z=GS|Ko#7guk*{(AVjs!5xOzrMSLf$rpY7t{sHlS>;^X6i+y>^BLG;h>Z=9zRl9F}0
z&==GF{hEE#%gZ$E?7oL4lvx!XA}Y}z1q4Xl`N+w`%#y%ret3lck10z2g8PCg?9rQi
zANpg%Epg4pZp6IaaIAZw<4c9Qb`kl$s#lI6vC>-#p=!FL9>d(j_e#pfp>Q=XvxLG0
zsj+0g81&oB`=VgM*8I+90n*va;M7Js9|95*NKHz3!7GyTc>sA1{yhxHvVs)kGEjGh
zS$n`?RB$-%n-+OtJWwP4a#?|B060m7KI~x+2<&9O1p~j31__@B-wre3K(<<b@8wtC
zFB@IBDHIa{UwN}O;CC16G=bjm?_e5$QZ(Q@lvMQ0>6y4i*3!-WXpM3W5-4OQt@>=_
zzFwz%tu;NxKpo@zFj)426qS!suf6ybusjx(zF(`kP9R(m2{59=Le1*f*v+q3>X9sd
ztA{Hm9v&TVY0=^F-6(AsDIofldTPs4GG~$VnJE*F_?yV(U&Z0n@gy?@i@%YAe&$MY
zyKviCg8u%(0CKCT$*tQMJj9fjmToLosT4vDV*o<y?B?75pLrcn7_dm0WH&Z>@(YBM
z)kb=y;e0rDxnuD@>}CBLLD{-9cH(Q8e^^&+@Zz9}>|IpyyYG!L=44d6p=Z5zKhn`Q
z+vmUS7+kS<kr758sk>^;kZVj7gI*_Vk0|PmvG=zxc5H5L-Vt%g)Tn}!#SISYSQ1?T
zJK!<d!kT3I`@f853mQ=o@-;OU7T!nVI{@GA65tV4)h+W;A{}k*3ur(Ed@pzTX@#({
zw{}M}D=Lxs{a&meZ+sVEmra6^(4vXwW5dFN1bi<07(ad-o2&&X84@$IT!#FUFS{eK
z-zk}xsy-iEzc0Wm$^rr%kRq<`&e^2lJkI`{*I86Y;=K2Hc}nK<yjuQgMT&*xe6)}r
z7dN3&c;sjWT!6JTK~UjY0ifN3(KQ4{2ha{r*8M8V%79i@2?*A?2RKnBU?_x6dfXeS
zN#X2>D4SXp9TTJ9X#WXl7@{FpomEt9FwPI#gDxKoI{fpsYAJyp)7fmAfE4Wn!0v}?
zvZW<}^3}_AIE1Tw9<FwtJn^3zYX&sSHD-ahB~nOFOKXTfQmL5L2C)5HgJZtL_4Tz|
z;z$ta=%Rm@mvoAiuP#tPNMtxyl;-*Ai6RXgHI1W*^-n7VsQC8sl3u+Gh6uSQ-^b_6
zCJ{fMfJoVfx}vJ~|Fi&1>%|{VmX=yXmo&ka*dUEq>bx@)6dYU}cc+l4v!wxCqK~#(
z_{9s2r?f}EJ#@hVhOd%Doj`|Pu1Hq}+B4UOgzY~{51YL<9v|P39DifCBJb<YMtbtO
zJ$VKwl3L*nIK3gUO+&imeM=fm!mB1LdkOd;fKlWS_PUuov%t9<R=ogvglh4ar>E!J
z!+*Mf1YUXp^%x6Z^jUwm=Vs95a^ndI9anzh?9|(v$Sq7xo|w7a3cYQ1(F7tE0U=?^
z2ZIJ<anC4&e`(?{zW_mN3b}eCo{uqRA!hjL9et-UIp6b&0uG3^W94nBY?+~Th!CDd
zPCXF3hqo<mQW&@bGQac<NgZe+oNd>M@nea3-Cguz*PB|Ag|Vyc<ie#huP{9w%zi7m
z6JaDE+!0T92M5mH$t+x-u0z+`rQzMzRKcTX<t*t`>yO62g$Dv?o!KyH36y2mN4pFo
zhirjW!|(nF%k_sjv9S(-ohTiGBP{Pm1fHUl0>Mm5s*?tw{y1B1JRK~=3;ojuPEE)%
z37MK+0ZR7#3=M~NgeV-$^9=mJR#z+J&a<ccLr~}_QA}yraU01up#CYI&ETjzF9M=2
z2@Yl~D7b2LOHv3}Vg4Pyts558MGD|(pam9coN0&<v(TyA$x0ERnCrj10T@h>rrGYF
ztMrc3><+zkm?>EU*r9n5`~CV4GtMOaYymylB-+nsf1Ie2$)Gqqj+c%PX6ZMaySm?g
zbXWrkq+~Am91+dRB^a|GKKBpf+5Fl>e+Z#4)$=8GNcnllbqW~iWIVq8CPmIwFOrky
zgShhq`}Ye%!Tj!MD}^l_%HCp~g`_S+Lh8+vG}BT~j&|qtC2v-A687t#&T0Eq9&q^L
z`OfJtuunt{MMt(o&Jy8~(a<&|99Fa~d*`cH&oF>Tdw($dscpUDO0|<JL4a0@U|^}k
z7ny|Q*tpl$$%=^R0K;Lx^X}?+8TS@S^ZX#WoN8$R=t_$VIHWAb5Zm+_B0a>ZA~8;{
zcFQ-QBLU>wARMRzq%N@8wxq=~z)|Vayu7J83mSxZAQ^3HoBgNWOWoz;iD<p<a=pF`
z+67Jtq;HoCF8iilmvq^;yxz<x;l9AXT4M`7iriIK^t1&mgl1R#3^t_jdD33EVh`G(
zKf0*B)&%_vc}81#pPh|OngYcX>)>|9cYlgwp#mgN5Zr;Z9H$S$CjcaVJYvL%TPXsE
zh>?komK(_sAf(~QkdfJD0*#!5cGCrX85(~JeHL+Jw^AW9K6<$3t=R_pEY1tF_2~Cz
z+QB5Br#o1;Tc@p%A2`CJqz&X^%Wa<BgNc8IXdF$DVK)AbGxrSN5C?f8r9!~tAaB!7
zy(j87{mS3JvVwx^sv933u8c$o)ox*@R|5j0XJlM8@M!VjLknD|3$>y-wfFBtF*}Pi
zYYZW!Y|>0~i{f4aU@w84px5l2DIHZ(qtfN5*5Zozr3ysHL?0>sni)&rIjKV{pC2to
zKHZOMFO{g5BgKM)t3EeJ?|`QDCq^hhqf)09P|t)!oxJ<6^wg%XL8w1smOTLDioPo5
z_e+S>fZJOGCQhTxyokI!M}3c`_{U9SqkVBAL(~wOF=VqWE@m-s%xyGY$FvD(!D=>}
zwmAO1#IY<@2$QV2k9#Jf-F(dV7fJc|f0pV$4bTeyf-v;}iUGy0({T+OurH+g6HQ}S
zI?11Kp}-Lk7R%2@32T+aoF{)m{}_FR>6Mo}2U4PtoE!ra{7~F~fYo^@>;{?Pyq-oi
z*CB(ts@t`3k(ceUIv!0ajqr7_1d<5?WK>X$MgY0%mrkhe#bvUJW`0#wJg-D7v6hLM
z86iDjaE)-?7jiUPZh%k>EG%reswxQFLLUSpYPgEegeVWco_E9Fyg|UyS~J}|zj^{>
zpJHjq&@s@iXMUdS)rnzV0b<rTtgvTLh&gSTh@))S8=~l|zdz}zVQEzrT4=-PF7^&D
zFCIZZYL?`}QmX(`3HjB91q7`0!t`y{0-yUIHJF_<s%;)DVW?G*rr`e}Y4X0MKs&#=
zzXvoW44Zm;%H0%JQSd8D6J@#-EE4v|5=wC_IE?bLGD^N6G2?gn)zvgRa~4)bN)+@b
zAU+WIBD_7pT{G8(*7w{jAs%qAXh}@)|1kH~L0PSD_^&~?lyrl1m(mRaN;lGth%}PI
zOA1IR-5@P3-Ca^5rP6{ZC?E~OxpD9PJ->7QKQm{BnLTU;*Spqwp68D1`rN14Uri7E
zj(+;ZdvY|ME72O*J;=ECa#-c_5igJT9)l4Jl^qFdBY8Z#5<P4D(3$-W*WbS4;u89)
zQgzUgk?>&8>91}+LlqCkG0-0WS!p>)rYN;$7)KXEK%Hh8Lo03jpd96Txo*qZEHYoS
zu-D}D^l1;eO}J%|?B70bV`hLVo_v4xo7=OK9_@adZN#CsVm!@JsdzcG1>c~beeaj2
z#`lmqc4r^UCMe7z^j|pZXwtDXIY&~ahXsp9G(a1UhlXnxpydr!y_~XqvBodxtjc9C
zySfsDo=`ERAngsrX#yf5j03rkRNPH1G(239sVEy^v0P-*o>)?HUri0kzT^J=b{}gt
z7Dn|BV<RW%?@DjCc(3*`7_%+5c&CBnbn5}TYxu#F2$4;0rTGet0X*B}2m*zLCU;zv
zH#Ig~oqgH`BbOZ9kxdt=0*0n;L9|uUC)HIvRiCNXRX6#=?Sd<x8_Iq49PPkM%Ac1i
zf9CDoO@gVfQLNDw%eUsb(y{Zr{aABK5x?HW%?*na@AAzbIV;S^?dHAm`NTF?-RPf~
z{2a=L7x{Q^`MI+@)5FVFJt^wR!#birRE@+Xieys6epRzwA$kpc>8Qt0egm@}BF_6$
zT`RXP4#lkIX;b_#Pm0LJ<wj(D9mlG*QZ;AlKN(GBz(c$sRO&e^U9&#*(X?NV-_gxX
zmq#B-TkQ|tt~-|QD&H{C_u@Yz?ebS7{@Qeu>0TkbE=3ni2*Kl*m2b9O)4XP-`pq6c
zzD)#MA?5VMYi2`ff=qzbHLIw|wwxLIedF0u8P5(7&nt^~?%b6req$v*+e4$<(0lX1
zbjnG+H%ttbC*aR1r8OPX=C^O#+nOy6W$FWCPz06Q9nVR~9fQ)xEd}U8=o4R)Nysv}
zHWF`C&(L`P5e8{cY2aNzY@E(M$Py2LGAyao@wW*+#kuP@pY3JoRxGTPbWBd3e=MyZ
zAm!u}6&2sR29_wAMJN#TxuRb;wOujhvFh;KT5NBQx)Y^4{szj&<`VLszsAPmEu<s{
zdt7%i?s@wh8MjU$|9Th79U_I4u90C%MLkK$rI8eZ2J=pV>ixBcE)(~I`y~|=Hn!%5
z&+iEFQQdPhpRcWA$Lyd?N}o#dtX7>&9zk5xo)8kfPEY^7lND=|YaP5+Q_mH_!NA})
zn*IhfiV0L(sYWr&F{{%^sA1o}+44!D1mO4c<PN}bp&zyUd!u3iFD0|+>b#3{I7th_
zV-jKXR<Zx!(ONbZmC(iHGHeWonV#jy<$GcR^8W8!XMYGzE5F~6$0N;qy85gr7@~U6
z-Io+?`Cn{7D97jM=iBoNi-=Vi>XSGE)@bO-Inx!3(=Fb45K(Xb_;GQ(j7|IebhlV@
zV|i&A8~eAU8tntE$C!kbvc|-rJy6ntY=&+YBEr=^Y`H%TvJvLs(haQ*7JemeM5Y&+
zA26EUh_;*0z0a1Aok~ST<-fb~kyV@3%gZ-Vk5@qTn~sBH`fXjUqF5qMjz%o#)6w%*
zS`GJchj@FRgj3#-+uwHsZzvQN=-H^meTPI)yQqiG*Wdd<{K~0WK*;|o;m(-1*K8`@
z_C#J`v&ZAo(o&y;@2W*Hwfk?@^z`*pQ&OOVm?!rll!>WtvCVr~ehI(l#f?}-d3kSl
z_jhAio}C;^8B}ptkg##n$h3)j?I7uhd{)Tx|Ljo2#K%XV*K|D4RJ-x_`C3#(NE~h5
z#kyHMVnL&@<4kA4W!y9mp|_V8BKfz<qyyPqVj{-bAK6F1z;Olj`)3xt9aAiRo-2PC
z@OGYf{uJf5RHXjw`B@byG3A~>BSrUHsYdW7;*Jzn<}SARneg8Q7Re0`WXKmdOctJx
zsTt%*>;K&(5eUfpzqHO}F>t5flAX>eDVc`~)hruSOVKgoQ&SD#sLV*WzeCyphsHQ<
z(ea9ezcl;YCrsCLetWGa!--!Am_`s!^B%PVv;jT1fo8{krW_0qIFPoA`FMPvsUR;o
z;In2AT##gJmI>2o`T42JqLfku2V70~KcQ96c=zHvt_2j}a^+UxO>BT7zo`5+^*i4-
z%-dd2)jb|d72s*af`<9r&o5yBT?%G<SIG@luD2@ZvG)MY0*+{04+*1+w{Nj^uS3lY
zi)8#JFRY;##KhK+O@!!dgh^sTpBgO4?%Wd6TKk(H7(Xt*q8m>LMm-XDUYf0Yd}cb(
zh0O|EVHTQJzRp{FkRS%z4yMgiD!hDP)YFBA{)yd*lMsiW+yML7u_#syT*C&{me}T@
z##N4UljcbiwO1?k!g!nkWC1x4{m?5_+Cv%{bq2<7oG}inUpy9}9d&c9KB%^Q%=Vv+
zJ_|c>$oj9CgTCUW0-5(DG@?l((u`uH1do1x`Pzk?1WBe$G)Um^J)cttHAlJ9^1Y<?
zl<$=Nt$<PU7W8$1$dS4J5iRkqnrn1)G)KK;FjS0|JCB{UE(j+@Y*}vo1-p?NX^B~>
zIc!i0Yhsg<kRWx^h+#!3CFabGk1LAOGGLIEjGB)%F+cy-BhQzt;Jn`R<KU0nu_4{y
zEhojdO{c%|nNny$sl;txTzW@jg$>jUg|UMen~%aFS_K_y7i?6$t%|r0I7ZXrA35J!
zc&c^E+3iv9ygURl_H6fSN-KW1-*hUO@hkfdJ5%4HI$Z7<Q!&`P(`b9iIsVD6ag~|9
zL6!HRNI9U>7zVMH8B#1JJ<m5DnlNkVjhYR-7QdZ!8SziZh1sZ&_VKm8EEauunY`GY
zC?8dykD^MSUhSVJPBJUu1(e)Zq)=(9%TQgK&SdZ$%oiNQQYtI6R4n^p8uq!;Okp@N
z8uNDD>EU}!55bhXTE|7oiR#XBEVD$kcjHy~9;B|-z^k8IlDe<@Q2B!4_VyxUw5RCc
ztJO$L`Guia;r{V^ya5-H&|)zQ!NI|41-Z*mTrHX9CQI_)ZPO?A;a4(udI$Q$JrTG<
zl!pfEkAr(8UWUlEL1z<GKkkd-CbPR+TaIZ0uIBn!mMRM^q5HlUMB~DfjjrT28_H04
z4a}&Nygp1TbISX->Zc)tV=SMN?=x1A#!BwQ$`dqTeySV2Z75(+Fl^K}(8QVdH$#C<
zn?80-4Wl-^o`vA8;`<d@;=KHh)TBrzOsu~pz|kL5Pyee0fHD)g5ncKwhhQBiHXTEC
zB9FU8lzZ_o^WVP-e~Jo!I^LwBRlipiMN^F;YV6f_+}-!LlmwN?0e+XXs$1@EjErw+
z1?W}Xv=SewM?~8o(Q*+I&3>Docubl5wR-;F%aX#QI8kBkj!42IC;vg+7bB|Pdhlqj
zJ8U|ahBu~(m(8)KgfQ~C*|=oFQvqfLDaC}Ls|Fl=HBxwENFOQ_1PP;mevd{c<9t%c
zEVX=F#s7aYMVGrSkJi$3=V)(ui)AV?(9wrub$&I`QIz_pTpC1^{27^6p{y-|jDZ(@
zQ}W;cJ8-XB7B5omapu4ESv0y&bXitc<%EB}!YNSyibwx`A8v&4|Ko4&C!%$Qhld{@
zA2WFNg4au-zp{)Wq=w*sx1MeYB#^L~HhV4(4=d~I&vka@$h}x6BO~)os;Kz&kFy#i
ztZ&Q8V2^&{V2JpY3N9H4UrzToIVhnrg?qR)2YxDBP|;3&7#q86zqG!O3Vmv8=mu&E
zH>ah2N)`BFIjLW5iJtP|e+B0?!8H~%z=ME<`{e#>R!~uo&&=RToS&bg;8G!s!377A
zg1UwV^s=hJ4**^Wp~v$eS(G3rCr|We)h$Po>;DoO>a8h$MGd>W@Vm7HC<SPUt~pUs
zQp)4)b$|Hq;@^L*C#ws34udxv(Yt^YqMXEe_uf6XZ{yF;B#%2$HO4zSu7x&dXLq0z
z^uaH;&@I+ryv=C@u&38i=+XoP1R^5MwOJXc9`1fGE_qS$5k|4P&;JEphF>)WmSO)j
zH#djU2<@p>iPkN0Phh#s4Ge^rN@W)mSU-OJXQdZ2k=D6<V=T)RIAI|`tI-e_`FAD3
zvLt~E10~Fg#K_aZ?e__HUe@ADLjn*I7WN_->jTbK^lXFAY$feDf+g#UY4^{UV$^4(
zoQQ~VtI_`cez0#IMS$)*I$B#pLj$C90s;s7`>$|b#)5o<R4q7LDM23i17Dp;$Th`8
zuFzWleBsm9TipRSq?WcelrI@LPoQge0+<Xad~{?;1o#6K2kOu}#+{v=&<+l{GmOW|
zT0+*Y2F2uqt^d74vgT{nv<Pmn(abG(E7Up888o@EJb97@Le`GBJ1@thYrvNbKFQf?
zE5n2D+8}CyUq%2WnYAfNQBiL0oy`x0pC4OVIyz;(Y+h`0U;QGL!cC;g@-whX9V;Dd
zOqiH2UX4BYchw_FG00~QKhP@G5fBsvRedwmAwycr0YL=4tJP*uWTIky!|n7qsa94|
zaRUzs$XMuGJC>k+1_JNSFQ5zK7ka2?u(LL(X`UQ{x#8LmFLC8lPq0sUiL#{spSM_A
zON%f;2$~t+zuPO}EWCK}BG?gR)@J(h7*PMQ1A)F><G(kPPKf>?W=?o$=rfmQLdO61
zD$_50|G%3a?uhyS;~gWCmmZDo1-wi)(8Ra_HHX9coFEmvl;`((q$~p^G@U`WFRMfA
z@3q3neM)#s_TDnJ^yb)dR)wa96jS(!<eOv~-VSO`VFoY^D2HEyT~$R^*3!+*4FuUn
zMihR*Xmrs_p9(=nlAoUsRrK=mg52En<C`fT)&B3F&*HlJdFj#cMJit}5S#5TtLy5{
zOixP}>u6|<;P_di(J2H<BkalTpTxzfU%&qRnBU&se(6Ke4rb!(zrRQ3?{&cM!T5g=
zY*os4p5V6K1A^!T4^Pv*d1l~rg{uUg8mT#lM^;ytmkYMV=o_Tv!zb3i{@Off;95ZT
z5*#NkTrRf}=f8v3)3dWp1wc0<273&`2ptV8CMtaV<41K(&G)(U3`CYe0~$qy1hOat
zlR+}W5AYDacoGsIMTOG-{t0b(*)>MYub6MJtW?vfrDLuxv@G=ReP!nm-lLZBx-uVT
z!a}t|+Wpm~Y^|cAVrt5bbqe}#xXiNWNnEeqL5Jei>yV1%7P9-rGz2|a|2&s6HenZH
z#P1ERWT7Yi@y&oJkgJY8*6rN5!^z3X%q(kc94#(^6!$Uv6&wNCJ&;>LuXm`5RS7wT
z<^oGA5}od*rFv(aYm$0VC*U@aP)=WvyU`@*p@Hi=HGh|z!^``R^V6rhp!z6O3X0h3
zuTUDHgH2Ce9K06#xI<+3DTXpyo{e68Bnhm)H_nAin4PT;4+?jTRd<ANttAOgPfoxR
zIy7C!e38WQ<J*$j&-diI@_2J7kH{vdNQsGaO0QPQv1WEp&S#}*g5fQNI1FB?bE3aD
zG}fYX`8-F-3Z(AbPglIk(LcB^f$b0MrW;$n>#O}oNu0*8jR8ZHvOMdSY~6J^9{7lY
zf-wcPa7pNJeU$gJS{yO8V$oM{|Gpi8zL+?}bW+CvcLU0ph0p0ei|kTQ1OdP*vZ^@q
zVB>Rfb}rI*Qw<HYMwgiW7|Jh|W`0^){ENU#tp=u(f#L1VkEJiuK8gHn^w_><_{qGg
zs_J}Wf0K_@_W`#7F`JG#_}RdC&&$Je2DB9tnKs`<NJHRwX!KeD9$Qy`7hS+x19!;R
zM#Z|jyA`5HtZa0<hDy{nMvdD7j?9s0Pj1M`%iGx&@qrwMo!Qg3O(4;(2%fvi-{*eq
zE-^)-To5-CQ>e%>lJJ!wjp|`C=X|Z*_STjtbp6T~M@Cd=aXx<hxCG9)g);pbXaWga
zkJu`X18ULB$ERC@fuU#kN4*xHX7>&cmz}sOeyIiCy0tuB1h`0ZEX>=ZxM*mBH_lIf
z-wA4LXxN9tKEQt%Ea?y;Koc$WNHc@i3QFu}KrVX+)nG_f4mLj|-D)I%`sGt{vYvo|
zwme=>7V=k|H@KDspRizw9KTRwVG75hNeZH;yR^C!*xLFB)KAHxfwQo|8UnnkE96Dw
z?fM_{?;NtkTeY>c=;-Nbx0fDON+wTD4HiEK{w(;~qDgo}zoG#y2?%%M!j|Sm#?6Po
zAqxr$+Jkn2X=fLhj^Xo?U4Xa0w%$_@U>RW90tKo**l|JCz{<?5Rc@pt7qTFXIKCCx
zZ7~S%UQPDroc&$%<dnhbtGm1ybhSFKc@t4QfIteK7|3*^c{Y1`!J|IhA({1t0940!
zU9E8`?-6=*S@g#|Oy=GlB1*c6df3T8LP=@d?(YY1g`pC~TWJa}sS3%=z$4u#!xZX!
zGGdC0xOw_}G^5!Wi%Jyn3sQ~`@3%Q9DDSzEi2KThV7$(j0PvJ{lbfA9UOQ8xj>f4B
zy$fLQq#9TAzUvoUZOQ@2ti4Ea*Vpu%^@!1>@7yT_<;k$u^jpKDiM%j&ndH>e4$iR0
z6S=)LHe=p@PTg&7nG@Wyh`NhP9iXqrD6Yd)NJvCrX}>}utQPUv4E*hsV9?~@<qgVH
zc=;0mp>vgHs}K&D)^5#IaLvTZI?2~g4Lh)q1kp_5aCz>fX2q&sEqI*23w{skI1)4A
zx%v4$lY{UYL=wM)+Ctj5o60l^`-ipl^$PNz+b;vpP?3=vo7y-u`>1}3dhabs$kH!<
z{dvJTIACQSn2eY_yZEB4s`}P)Fdo)&hL{iWqG=X|xGzZ;1hFLKY4Au-Pkt9dK)6`<
zSY&iK+~{RXstu$ZBzx5ypdYxv|7SOIz+46;6T}9zAFSNQGQXUjK4TZtGcbVHb~JgH
zy37LrDlV=*A`a8(fMI^kqA9PgUImJKz$VC%6!kDFCvuy$n6NRqVQ>Urg3FPF-*z1S
z1Agsz%QaXUq9_pXGIzk=gUG4YW80uo!Q;oYJGjlm3&HCP&H2M0LZ*9bO5+G@GXAOY
zalK{_fzhAezhe;O)&b*3=HGBe_5q_Zk{QrxZruDsaAspV2itE9HYu+g_zahqmn*-#
z<}v}i$GdTh*>`5$r@#S*jft0^zh|_3Hd9PwH%mz#{Xv?b`<1QHh4NnQlP^sN5ELau
zrT252_b~UE+S@nzo#{Yidwld`2FQw6U}1tg4>Z)(H-S0|EDy5>pBtWbcRUX+(XEK!
zMnjJn)|6gzDN>53x!|-kqzO;|_whbkCxY`j`F#8X-@okTgwG-Xw}hK^r<h2S38Jx2
z^-q9|=u3%d2WJDUL@yzAJ21voDr*ZIL`dEm`SgiAh`Xu@9x>aKM=~j!B@pl9X_!cS
zAy~tk!+!F_#MM<Z5&f891}u-ypVOv9Mbd;vEpKkVDJ*<jUJlB}S5;LqS3CGG>8tZy
zavd`!Je>pKi~Y=z1<7<1bp}{dDQldHJw5iZ=n4JI1#;MXB(T4ODhR+v3oJ^RG5-b7
zbp5n8QfQxO>Ij=c;f#9yzsv-0E|8s6MzQ4O|NiD#0^^m=hpx5d$c)-=?j;Q|VW;`3
zo}iRc+-3<Mfw8sK00!wlYM<}`EPMobimetdEj>l`OofL-B~wqs(9=q9fB0bf8ly(q
z`^uaM_Ckr9S3%$f)68O3QYO2?wZUgU8QIK6OFrfQl1xR<ps7aJBH>eFvf*Vwqw~44
z&V{%4o#>8q-|2i?JQSHybt7~{?L{$jm7}y9`)_QkEZ@1bU+gN?^0;dbUW5*6q6Zc?
zyJjy?gI3(na`0}w4`*NTHIc_-kqJ@fEGn&}W0HQM7v}O;0<=3O`S;h~WVOj9W4G#L
zCBjEJtEk2PuNJUnB}AjD>K^jG>RR*fOtDK=FS<EJUkndvJz5-5t>ldn^FcBY#J)y!
zc?pt7tBf{EDz8$8KmH;hSVimbi{v3nH~-4&Dv(}F3kv$Gu_3j)qQyf+K1UjvH15Zs
z{{a^`)UN*uxcJFp(3`6LZZyVTjf?>|LRRChq9`Y=lG=4+e|@t<QgD^-CY>0QC}9r~
zt=(}U@>Vu>)?D8<tk01NOJcP$$(FowhD8#w0mni9^QU6X+p4PDuqgv?laO#9c*>w5
zsaC0kx*P0iDrth0Ka-P5WW%Sd#UIP!gk1F^0-lRdq2tV=C>vI$--tK(u4~_`92=TO
zU-#J(9;$H>x3$24;TpGH*P7SimOc<5A=z1hc?u2=X;3nS{0@YH{-F6}cLjzoXi&~)
zt5)@yK&Ida2L{0Bh8R#(WMLyPmS5Ak^1tpDdjCq`E-Wf28Q0{ud5%Osr^4Gm;zK>x
zdfm)%0V=OOCSe$>)TWs=v1794*$KeFCL|=(gMStFSJ*rUx>vvCD-l#V%vLS~$876~
zg`FJ$D<VO-0q>)fA{@LMc~64!lJz})v80kPkPNPe-|o7_j*m-N<Vq%W?q0-wL2ABA
zx|b4#h}hln!o|!fFJH(MYd)qCgW3%+u0@1};iv$Z$0MwW&uJo_ZLNO#BF*^V^(Wxt
z<K=Y$$^{NiOlYXQ+>3eDRQ|i7Mz%^Bf{&j;^Jhu;=?Wq`dK=Ii`D4wNgBo7YA_=|}
zb^p%qUuQcJdFcijb(Yoey`H{4z_OwK984%ozw6pJ--JdWPjuR818nW$g6QL;e?G{%
zf?7~sAnkBO_#iPCBKYOk15XHw+i{5cBvAHJ+@#H+LLYt!C07o$?7-T~6u!cRc2CeS
z#C?O)Zvld88Aku}<6ACHok1ahZ@#<^{0I!(m$uVo#nsh&dtcd5ut?AXAm87e1++ON
zEcvS-)M){4b&YG#)AN;H<zw%Yy{}74c;_uoS5f@u=ZQn^UCH=AElNP=rCu?P&Kxnh
zdnZY7Wij~g%aocOjue(d{NEKD#H9(*qpeiPgzUb2?#m>VOu~t#{F;?zwW72Xu*oHP
zc^s#36n*`3<_Y;RsgM)9f2KIc$UVrEjjJsO;g|sqt?8$_w~!HsA%YumF96RTgxdwE
zk@Jz1573lOjA_?+6UnU%_W${@F<c3F-(xN-Q6WYSQ$nJ>5V<Q5E1v)Cz<zYJaG9HX
zAQ%k-&P<p2@Bn<+wBr0CA|kvY35HjBN6_XH&s?H>t7gHp2`_=;3vIM+glz<$G+0$P
z`d?DR8s@!##7cspr&s-DANzBR)hxsYpPe+R>0I|^Z5iK0jSVi`8)W1VAe!--nNQXq
zSLEjMKHD#P=b(#<gk;q24+}HH%UD)ccIj=ri(@4tge|D`s}Pkwdi2Q2$q9g;a%-@t
z%!6oJ(CedURG!RN2Z2X2GyWPX{RPTZdMOf=<PS#6sA$#U*QHBKYNI_pWtxSYb7my>
z;%;a$(&YoIz!9GI+qW-ZhJpJ0B?Oc^{p;HqOyoM2mTPH3<+J0`J>j)dA-fNy8#720
z`m2vG_pH9}^>uUvieO>?=8h0}c_|8ftqkJ`0L-SRlZ~bdkP}NM)|IV4`vo+NafCBe
zu8M3Ya-CP@5FX4vK0ccda!8faC;*eMFp=v)#Ht0TetJRS9fHiL;~K~$!yWr!pMWUb
z<>%+S4ZxAZAYvsXCiVbFC#XE`)CuC<r8LyEwisDceDv7*@yI^E28KmhciA3OYiS@Y
z--PP3q(risdP_MKmlC_93Op)!?T?)k(XSGrrKNBV?bT~>N^2S<(e5EPn6ZamsXT=O
zs!9T@RR-&MW(}*whPG~;*t--e`U_Ej`yAtvGJS}LR*Q}6@AKkv(dF-_b<niDxVX-y
z!yd5zt@G$tX0D*}YZUD7-337S6SD<%#d{2*At0Lmp2$;ZX}8Uj$JRfjVP<YnPI3YW
zgx!}WqA3SkTkgM~c{b#lT@=QB0R{%Bzv-DjopCYyK@JDsfXCKiz!HQD#KgpaU2c22
zIuFW4h+T4Wb61v^pF-S}$kv&pqN(WvEj(u^9_5>~Urc_20AD}mjjI0iXxw0&KF91~
zrlW1ftFHaBuEhF>&t`(A9VM~#AIc#MHV}&lrN8~zQ+H@;6Izv87o|uK2_m#{XwG!A
zyOMbiBGHj6m$;D8Lh1@}KYdBFyZkO{Yu4ehZytSrkShF|Uujh+Ba+aR@dn1A;Clw8
ztdcHog^SDkE-&UQCk{04R^~T4bJAHkDJuGSL4go>=YSz>1z%t;)91R!<l^ul%y@5J
z;)7k-l{uj=njGGiLcJ>UaD^r@MSXqJOL{uGc+qKKmZ}ay)v_VrQVJ+0Q&Uq=WxY*G
z+6W!SMB8gQZitBq^?=D)5!-Q7qxB3Cp^cH0$4^X73y`kfD7d@D@^H3Iy>k!(NE-ox
zrq5Zmkdvjy@&v4$sZ!lb;Ek~-U769UDPed=Z$Rz$uVYzRXJ9<Eo+;0OnH+pVLbro+
zke{9(qr<y8l(kp_D+tQDgr3VH>a|6bb*Q*h;hDBhh%tc2=HCP^`?IAEsgpf@h&eM*
zAraO9JxV3!+vI36fi|z*T(@}ui~usjq~g&{0)iSijG;-X(nO10v3`qQ9%9*vfdM2G
z?1trT-s`Lxvpb|t<Jo4g=`cMcF6fp|xI-U*efpZ#ukwa!GC9k~$SFD6`qOO`Y2K*<
zj|Q8Z%<9Ev%hsh^6BS?MP$GR5bNYNtIC55mcsy7A&hIP+#)`1%mfy3RwDk1EZNnUs
zz##PeG*2wkN$B9noQ7vQJuL@*J3C+v4OP3PkB*K)GG0^7YH6o`t#<=5Ty|GAGZlJV
zag57hrj{0cJ7wbAT#i-&s)B=_V#hQ-riu&>O_3b!3=O|GtDXy_G>R*8VJq{7-Pjb#
zPk-&qi7d~6N#!GY?zQ*9Kim>0nLtNJ2X-v!#&Vsvp|FK?28ZRIcYRB;FI0t%f=NZ`
znFqw;P&NgJY~#MOtll{kFksKdQJ(*Ec0@q^b8QWF29#2ovJjQzt=d!=ld+aqRrM5d
zNP@7i&>m75Y3X~OKT}H%G&o_GS%qmffLUfXZsI>$enRpy^o|FuWQm``uD##oMfdx(
z88Dfkr+lflViV7@4}BhWd3xZ=X_Tp+atkT$ePwNJ57>ve(#8D>0858~(UsJsUsEt?
zwu9p4Vh@st=vFWs^)veZIek4dxiffje!@o}Pc0V_M#C+7^Tzp`n<^>1(MPIZn{aHl
zW~($E9m`S?K<+n#9QH9ZE0bmA>zuwEj%J8NMn-a*iYG0tthjuiQW|WeQ%{2HYYh!W
zc~l&~=`08qiS5o{pOyojo7oEyPj=Gp2CaT>M0nTU<`|k9nK`b7j}dJ1DoP^3S6Kf+
zK_(?8hE1ul9*3b6L1w^#k1jdtbS?jIUhe}j3k;2S5=4xGwSuMg-MJQXr=>~?4mN!t
zwfZU~-AWvDVl%gUhka|NJA~jJJH1=I&z}rRZ-xQ6<yc?GN6LcRNIr+!$NKL>ql?E-
zep#9PLFOSP=oddHlwBVhmZrlbucCS#Lgs48FY+hoaXVu=njU%0&(|q3{=_7mIAWIl
zR5cVrI>pe|14-r;qTiA#QX}3BI@2JI#1Mu6BlEtn+qcRW!&a|&3E6l^Fj(vzKVM<X
z3AJbOpoZ}Rm{YL#E#J6LcON5xgih@Mk*Ag;&HNTxB38rez_Y51k`CdCZaJeZ`-r3M
zu~xNHV|0D}P=?tk26@(9s1tR}+csZK&otWcM@OQudH0X%!mPQL8b_NaIY{0pm2(`3
zST+%iH+G-RI<eD4@9V2;9?rdd+uldzcYkF{ymM>RM{ps+{ZndB`n^iYu49v&>`Jet
zR$Rv~+O#9F^JT&L-+j!{M9#yvTj-I3#bvo$NR1Y%v1jzX2!}OjZi0!ax0;RF$jodR
zsx^m)hf<vgT=C{(I+^%4zS+gan^5%!?QrBTnp#o@x}MpQluH;K#r83Qn8myX3Q3zE
zY_jKWFRol(q(K)dM(Byr$pVDD0B!c`4vmJRV=QT`4B{o;Fc>dj3QZ_y*zj;KchzCF
zvF5Y<QcYbWwHZkkbX|AUV(^EKOtGdyV(&;+yXo4%axR$)mIv*%po4D{Vj*6!cOX1`
zeoGsFL$qb(7}@`H-)?Jmmz%^upQytD!)z(y6M(^5ASeS5FPv`zkmK4GlJi<7zZljQ
z6Z-=2Hh9A^wdsqFz;+M4BQz&jz*W6n>D^{hAsKsO1XEf-+zQihB49Tad_3><KJ{Zm
zO~k6%UF>S8rq@}(;qUb&Z~baG)GX3CQut7o%0?_?r7}y}<whr8n(H$&O{UBAdl|B{
zlackFHF*BIfI%-%ixBod7jBVkcK?AR0A_|jP|?%Q1L2Bhq$dLX$8rq0&~<yficL6S
z8=Bf6`i*OA>-;*b3peXUt6Hd9a3x8L@5wooCVwq9)8{vOw|V~JZKEKuM?i=o=cis4
zIE1{Js5pW8+IUJ;AE(g&smJBb-#F&wkAlwX+bPLm<zku|KEYt>DVc8fj4tUnn5`*&
zGB?p*=BX{k!?Zq0Zk;_?AVh?M$2-^(^st><VlXy(4|#56ot-!IaRbwN`iJ<}b$Ar4
zkt1qpESF@DiwfA!wc>qU-2~uO?-bh!Z1lmrNtRS=aq_$Jy%5q<G^<%dI;1GK*_FC3
z@0=&U+HOzI!D4@k2n~hi&u#Ztkf<=81m?taeWXDm$M^zoiJHUy{=VbP1H30i;xI!X
zDQthoE3CjlHY687MYu(s2R~+VxVv0C0<Qxo25|FVIYeMeME51F3`!n1++o54TCHT5
zk)_WBVT1g*_3jP<TY||qTkLEslK=uiR2IzTys<8d-qaH5!f~m0h=N21{I|)v$~%Za
z(cjX?-iL3-(YhGqTP{<1Drls{a^+CIzA@FX2o%toO-vh+RQ@K;8eC16_C<r)tuV6&
zvjTCuYs6X_qoUPn@h0LLUJA3-{diO6OrKvh!MGt8rK^+oXsu9`&aYXrnPvxPL>^h!
z)^Uzd+E$VXva8+<#w215ui%SZ?tcmC^nNI<vH>;}gGAWb5uS9{05fpBxp9<mDSL8o
zcnDm*uMpiqob9*&jrK6I6#*E@i}m+xgqHx<V-kM?h+sStaxLsPpK~?;s|6h0eYzs-
z51OV&SRbGndt3&7<jXRXcJcTy-SN#2cQjQEnY@9pSgQjxB~6^rYiNmkEqUYRKc?SO
z^I30wX+EMEp`fIE_wF5(lAuhD+Fz{MZ>9>BJ~6HGtSpEcT73?;0C?QcFbjwCs`IyQ
z=&oi;`~s|h?Oe?U)Bu-SBQJ~4Xz^<U^S%S3h6**T+BVSV=z&)Ve7^EWtq{LvLJ4j0
zox>5}j^m@kzVcr&ljd-IrNQX)4nVrE*>t<V)f)#@RqaCD23PT(p=Pw95&dHrYy<1V
zNiWe|WsV?C#d7q6<2&)ut{}+OQyAu{8n<K-MeTca4_oG=qN3EqzWz?z{h5bJJR-zT
zm}t#qFy*n-aREJ?es2IO<QEi-GI&VO3XSuY6c&1JjB+H}l_<p?l8SnveQ%o-FWPe1
zPVGZeFaD~H=ajl6fZsr1$Xb1aeD#vNQ0smrYR#aA(DshS;q(iuYefQVGMz0brZ2u3
zs;YS!0qV>0NkHXbKhiL{eahJxBSmh`Q0gmu_M4Sc&-=4x>oS#kqEc6?Uj$W^Kj1m!
zlN}Fh{)tAUIo^uz^Q)VQipX62j}ZyQ$G7<8e$21)Sy?KjeDI@4{7QHz-KU@2`JFgI
zvqV0W%kU+ZR#V-K(p3?ED}-DB!C#wCVvXe6Txhlyz03Y$3AoYRCW1ycrEm1JCE9FG
zZ8f#EMvX4s5Z0*2sQq5DQbpnS$tzk>`Z=wdjQL1T&T66ME-bI7w|68vwRCS|<c0P7
z@RKip1c)(>Bm0Mc!mrAvUZgWYD!cPVcil?7E~*$o91ejTt;j!eL_~8zHCrJYmy|J~
zX*FDWtMOfz{n8I{%*MGKpZ#Wd@2B<>^%Rrw+49}F-?@K!g%H~f?@zTYl8m7^*6#Vb
zj!@;5W(=mP#5MVWVpTnLzU3(|+WivNbhbxyCb!DQaB}3(5ek^tJPt+(jVz+@`ZO!u
zmX?<E^mL#w&~Hb?17_bgkxC6q|Fkoy-c+iT@W#^3_iOj(3(E(ws3kCvvmqX4L0!F$
z*I+q_KN#}73|jrkd^QUJYh`C=2W{OX46EP|ZiSNR-q$NvGUNSMk`@#O0L&po>8Do)
zOR?|X8oIw1$jE)CJ_^wIHJ)N)t0t$T#I-y-7@9lb=LKZ3JsdIcdQQP)fT~jH#I&rq
zEp>FlY?Yjg1mVoT;*^1yZ{NSGBy;<J8>h965DmCkfn-g+3T$k5&L^UdmY!FxyoCXE
zRpxTNGT^#FHDeO9<>nydy7&~?lgFW5@@kd<1?Oorj7sd}>_nh6j&hs2Jalq(b|)$!
z@%og@8D7s#_VFr43B9Kk1P`>cH=pA9E#3q+=Wy+Z7r!6sNT%dtB=c608fTQ}SYlgF
zt*Nd09%>7#2d_9T`bp^!37UsdG46LG+MXRm6WunzPkt9S?zg{C@qJU|Nlw3=x${z7
zf6&KV7qgt-Hb1JRleDJDa?oESV-(0yxvHdd2bN?~D!;~UYj3V460o8Yhe=728Icza
zv2h3Z{$1s{g|u!KFGio2y5z?7&Ye({eFfD=h1&Avspl^5k8j^-PIq|G7$b~}qL^Z~
zmt|;Q?zk{(4?Wsn>%w|Fg@-6&0OQ}$)?5uF3|m`Ukl~BNII|nblXvUbvEdz!N0=dy
zkqpHGi(W)nJ$>56S5|x~a!tXYjxj?KS?9jFd)BdXF-8p%ITN}6rQf<%kgBtJtH=3I
z^XN%JYOdNX=bwtF?zj1fRFWoXND`t**HPD#ih^&1>NBFLk7e?OSs9LpyPh3B77%y`
zAvuMJ2Nuc+bYr?@7ope(WdGh5Nl~N;;`)mD*Y5j4&JBO>!x@S#!xhvYaKKR49|jc(
z#K|{hvQqTLsc6K-FJRyn6Vo;^hXLB}FH^-IQUxFL!lV@bHs~hoL$>io`I8J|E+eLg
z1doAiP-+x&<MtNfJGN(9DihXq0X{xVOak!~mYxL7t76>TZ4M5OJLs2xgj&tI`+)X1
z*YK1NiS|iny#B6^vGFmBpwpXMa>W?xdU{0+R0j+)k*@bv{qA5$H>7Z9N)-txt~a)|
zf^7<$T(A|8*6D~KWK0mU%a};~aiwRFrT~YpnKH$u{kN>Lz#AkK>x%AMU)RI$ZvOb5
zhEya__u3X?;uN(>3rMf=xs^&kioTifT`#^be&e#9&ASm9-LqGFHb%_ML8PY1qf1em
zxmK|ly=hrT^T9Xvq#Ki(b9O~&GN=T3w8i&OFY$|P7&E@TaxI{d?Y$x20!&>_P%8ai
zSDkG38k`(IZhe3@uV%U*OrzpNcMuzkbTERMU2CYR8IFpAT{Hw3_j@8)UoHHAvn=5-
zJ+j;##^Ws+!ecewv^$||>&i1>_A3BG1|!7v51v~_Q{=eZ@6stGnWx3kFSJh&;)#cE
zFl3qNRWDC))*QER(>f3Hwj*=gCwM^kyL3xdi6UYnV<m)>Iq0d}F{_cSC<c~|KEjr6
zG}8htI%+R>SzAFtS6dr7%Yum|trB_JB8(}`_k_1eTCp4iK{OXI+vxMc#S!;4Q7khv
z+DUl}B)pq<VDR7?j2Z>~lc|GY&*Y@ba@Pr@XmSVi(3SSed*<UaSgU|bGES|rz0i6F
zeIl~EE^844{h<E>ckCfVOWk2Fu}FDqWg}K{Ic{^<LMafMH7y$8s5%1sB2$1|^)3U|
zY|4A31e*QBLo1}XJZ?cj%ew^3O+&9sVft5@!8;8K$L!Kl==36^b-^$|?oJYBH<!JG
zgWiWvtE-_-5z(xcrlq4J&+zl-uVX!Xru}BTEgu#YR_rt?GFhv2R!9T1Qg{!&J`%Ir
zB2xliPRM4|k>>%a^TJPjXQILf8Q}08fO0#Y&3bcb1U35IQNB)zySBNbn*@W-Ly85Q
zqQB3NWO*~#DltM3Rr1vS7zFCC6m2<(rc$>nQlpwJ?cAn}PAG`_nz|I*dmMjqYB}3v
zJvcrwHYd<{ZCi6B-fn^7-25kYM2wzvA7hx|<=uciMtr9Cp^S(omU>bhR)#4#v!THD
zVk$!)ft)_9-=>g<&ArcY+nz_Zx~^dlA;RQE<#rw!0Qr8M1gL3w594r+Mo6hcSCe|n
zACv}WgMnoD)LaOiZJ2`zMR98wSX4=n8(Tdh6~e>Ofui@OlACE~w_?sj4R46Z(*FLX
z4V4P1_#f2!bIsJ!*NwL0m$*ETAI21#%r+)TZ)|6qSd1CBV|G;+k@~P~W)6v<H9Y&X
z*tqj_>5s+4csC>4K5aZ+;_HMV%Z-a%TmM#oRELCkbD-~#3aTWR4tB4KwM783@c!~F
zq+;C$y-0kkKVd>e_(kip13>(BM3H{zk0wvso7+Y9gdU!ThP=LYah3m{P@sSv0Z5jD
zfcdr>wX+-h%f5o!Tx)as?QlSjJBHy<#uFnbHkoLVBr6F|U*zhakC0w9ZLipf3JN~k
z^X^5<!uRe;c0+-@3xR1t>7)Y)BcQ+GlaWonHGJ6}hO1qq)@G}2cuXG(ZBhq2I~k?v
zQeDsa+D&j$<kGNf7DPRN-gz~rE`|3i)OcVNUzV7Ujth$t1@5q2z7pR0=OzKEHQ{lr
z2oD8c1O$3b5L7M<|A5ZCuM6LTq!mC{O=J5P7jex5ojwOn-xuegC0K9Aw=N1JtF5UC
z)(5^;#&JG08F2+Bt_J=2+WWJ&NkZz;?-`<W+7IUl<}V}Mm!4|DfQEJR@aR(}{{HGA
z#XYmG9?xH&p@bHNy8y~GK$Sdka)KmH-3Zx{&~;<f6^dABXr`ngx?<|8Ynr$Ae#tV0
zaVRBZ{Gi)><Nq{grC~2JJ5_k`#_aNQ>57Si8H9R(UnzRtfm0)9FiNz$US)nkc->`K
zmfp<$Err<1gYr~v|A(QsP4pd5*Qr@YywS|2-{qQmFV#e3K4W5cn=Zv@-sIe;=XgB0
zo__0G;tYeuZi6`;O<;m-P}h#L#hPQNaxi)>v$>0gP0!BB8!c#O#lehZ+3SwS672^K
zE6vo(3jgAl4@T;;(*bswD;*N4Ti&2}rELe+zXingr2MwmGS`4y`^w=sZ+35`qA;nl
zx}m<lJ|%_bt9PMh3-L~FAiJgX#^aZ;`E;-f+r+3@!SsqBa0&u4qjzIbW*0$&g^n)O
zIao=P-<8Zs<%`FDc(Om2>4Pr*QUa6Mr}8c~+Z(?<qDVb$hnxzg&xKi-3DT`6oUcp_
zHO-C}*U8&09>fc9mPNiBubEPw^t~B@7A;hF-Oyc*`DOPHv~Af6hCgy*48KjLYAha#
zW2V_$OPhZ6wuwD_koFy7Gw4&<*nEWi(;s4DeEg30et_d|9020@6+KH!OR;?<eJ``r
z+Wp0xOjT}+i;Lq~98dc^^S8dF0AUU_zpWxTL=w_$_rc`~&H+X3MM%w1E5v=yc)eT=
z^z@eQWO;7D<Va8>f{IH#A&L)C1i<s&;X0$ny`ol{wduFg-4yc`>Vr}lVM^=fz-vKC
z-S8TLvLN8=zt24B08J9)B|2q#qdydt;)SUaKLGs_DQ=qtG)SQ6$N^nBLZ=qM8Cpoo
zFK3Kq%DX7=p&SS6%@O8ZSuOzOTg~CBRQ1RMpnH(Bk-y9bF)$v&_CxhM4it{Ul9I?)
zmI{ZL^J}$snoykznc>f;obPj5AhhSKWZe<Z1wW=#I)tYXO@Tz%r6^e3|C}Tuh2QQ*
zf(m~0v@8iLn^ut)0MB7}mcj;55G>_XD?%;8o`}ufQ}gvOjz2y{teBCQ?&IT&F9^|G
z@pHR$7h@i`jCw2(%bNNqnBk25_=WhHr2QB_NL7Ni%nFwjMdWh<xr$IRXE(QM_A?B|
zxvCb^is06#Yu9t6(PPAJSz|xemQPOV645IP&3rwA9%lOCLFF#?93oWO%58>HFi(Fn
zB24`TE$TGkR&1p@jkhx63zOVakpl#``o-v@pvwd<$6e&aJgGO9TeCd8uB?YYW{yCj
zbPXBxF(<PCw5vc<((J)l#*SeKx*a05KJeW;Sy;GUoa^%&!%VPS*qj^&wX#I0y#zc+
zsHhw7(_qG>-msCJ91&MEl!Lm;o<EC!@q$Lm@SS~1iq*|x?gC8Fa)>KQ<V4TYH%vmL
zub=tGv&j!EQTKT)5=3fa8&2E5<qpy{G-mee{*ET^va!(~HeY~u(;%qtB9)$>AwF7s
zpn%_6c^-q2QdP8Olwo#lqWWe=gv+zu*YEGWm#4%tu+eeHXJQHoO@AgjoRl#zx(^ks
zth!mf6c1kHl(-I-YtMN=+X3UVc%>t$#F|W++!`Hbewx(i;Qm(&m{h(MDT!@<`;k6N
z#og-wWH4!753<*gl|}4F2?HM62kK4j?d^4Sf=`g)M3BCD3MrzDj7+Z?7u3-_TwOyB
z`>I+}J`D}Ava`!Ztqmq9*iI!<9R}^>p1}~d!QO;bweZNHUgV5{FJ3-pFkh`&1&^8<
zmo#)n&D2zpDKCEcJ^2h&yTtuYqqw$Wri&qysnDxZc~-zn@&hmc=!0PzSgL5sOI;zq
zd!L6We#%!$$RXL4?kTk&dd1RAOXvBMjMs9fD+F`rke{D0^oq~)sNiw~i0OdFxMmkd
zvVVXLMUha}vIdtpkon2_{FvSbxwuy%v${EO7>nZfS~)p&bF5D&_`Hxmefk6gY%$C%
z%bm7ABK2pdvU6mUrGB{=&)9}^!96?n;3%nMUeC5N;7nn@U;7mzGo|yE($=I70ajET
zPjQba0}qEhgTNYBqmv_Esd};8FwZz4er!VknPdFU!@c|^UlT4dvB&&kOFmhj@eNrL
z<dE;0hz|!|yM(DI;e32NgV{;Y#ol|T2YqiL0ip-DiHQZRN1!done#IoQ_5i&*!|z9
z-_ldLLv0dfQ*=-PMGr=D`-zB{El|yVhb9|>i6o!;btb6ea;3tQ+W>$8J^7CB;mIj$
z$U&_zCT;W_>){-P9!v^^eYMw=3Ubc_p0QWdanteeQ5Fg?2BQ-sF}0A6f1}44?|tZa
z-OMiX_vWi)tR!(9cEnr_p$*A`)nBdD$GnL(penX(*sO5oLBU@fCaglr^@8{v0MbWi
ztMVoSF%$d&pnQynTZ>$8_u<)sXb$Zr%*}&jQ%Z)r?cl0WE$~C4JgA2=Pp#xQJkJ}=
zS}8r`h~*m0=mX^L2{f94BnP?MLg7Q|-EQn1)r|>&P0kdl1KMKQSIjbnGq31L2R=%t
z>(0{k&AZ#Y@@i^3*;2tzw}k<=`}ib17yJnlZr|`6gVllo75_XX=GI`sNf14#aRB{o
zBgNbY1G;Sp-JfQgn$v8<ymJnA_IOM@3X0sky!VsnE3#~4x!NlBWa6`+Upt1GU-6bg
zB<Z_nN56D*kmC*Og<6BS$?3q+Vi^ykviYtJiIDllr_G`t6gD*IrLd%quLKWK+dqk@
z5aZyA4ZvrO3LwEpL@WnY0uu#NCkk-b0YYRf{T7PZFq$;y8ch|H)+QQ)tDys#226XY
zV{B^im2JZuccOmjvmE11m{tKl*LQULeFN|wXhr$gAmH37{<=FmKmW|jt79qjCbX1>
z5;=T!SFXIw5)$oDxoB!^Tu#HeegZBA-{!Fl*L6x0?^;_?R_zi(@jscFnc*8lua(hQ
zIM86y?@XCKCRaN6?C-yf9AN;6MIbWK6V{14kX*nS`0%5kB6lN(v_WzvO*I$u0{5Rc
zMk(FR;>ZGMyxAzvb8=`O4Mh&B4B=eDnq(AWzG1_z(Zh6CKoL*YC3~E)5GBP@MR^6?
zN8PSlT}cOda_<H$8r=`TcmD!wN{)1hkx@C-T^B8=#65sXgr&K;P=$9#<MurAgiaj9
znxPYAf7K5`f&AP9HyH<gNFi&HfGHhQ#h~rX1QZNaeqQO1Pw&&}!*5ArgB@$RFWLe0
zJ<Ml7<`8$5)Dr|&$7MDOWK0K#+i5WO24*lJVT1aWNkuW*HU|Y{IUYwp9}5Z1Ky)nq
z5R`@ienzx}hPAd4m)u%I>e#$Wi|V>FGte&(b2g=h9(lslQdZbsxd_=);)C=C|7!{N
z>ojtOik?~9I5VJ0i>sNP^Qnm!0$Cs`HFbWax9dB5B|#_xalifxNE7hZ+h7((2Y)}q
z<6;=c6}Y<4%CL?ZWQUWBqci^P+qbJ0oQyIafexb|bLjK0vA9lCA3uiRg{*FV*f2+|
ze0vFfgw5~YTm60zlaLJLef;p@*Qa{igjzZnuPV=k4ahv(4+WG{*5D3>8`xDH2%97S
z>)5XJT-iivN>-4}e)v{`NkDaNQO&w!*oC64U4CeAq&?_iar7;p-RN6LyPi2+$NiGx
zHq{mL5-$@HG$Hu`A}Dao@i*J}xE`SqI1{n%`(%jy^ar%;iek@eI~dr&z74`e)CrDO
zOOwu^ptEg5U0cPr+-D%>IOhCZ0mBC}#e71Aa}*hy%X-oVf|v2yUZ7jV%QT2jO%5HG
zX~_zP!MqHqb2}CPh>nMMT_ZGk=9o0>69ZIB^$Y6;_(8Ld1-c>hF`G#QOO53q9VKN3
z1V208nZi0cT}`}?9<|%>oL+o+!B|7+^ZZ7Tn3{~t>Re6X<R=*2(!&ieeeT&Op`5!&
zI<kz6jN&pQms#IL625ihPwr$;GmBYU&Q|7t`W%|kO&|=XzmWS!>{WI8u6i@=S67S2
zT}+1K_eV(eA1}EkB3ac%`t=w~Zr|!z3<V+0^}C;|RoII=wLnC>2*?v@85t<j&^=3J
z)5W<2tpLnU$7M=+8_ngV*VaOxP<AKk5<~*N<?77*Fls58#B9i#oZP_?M#sb3h=YlF
zo4&>G><|L3<v{INg<g@oM7BG!4K`y`R9irdURYQ-VUT1?O-`1?d(`BX^6P8oF)alm
zMIwM|@+BeA=w=odvu<5dfZzt6H6brPG5$3(b?6O3Avoxy39SJkEq_^$`Ht=;N66Cy
z*VI17@Bkdxs!-M{tIBVnchz!3Ukd&mSNDDvjh+IiQeIqi5oWLUMfYDq;0ep5PBpDg
zrP?5>wbf5iQ4y5yjZJBHe*<GS6q_7|i*JLW4CG?4kx#5he^((1DFX4?7wDzy6l;LC
ztREC4&^|Eh+Ub1?^F~1rz6~hHLyyf#%6iAq^ttmQI3AZ^_R^QCQkk#^5TFWi5Ab<x
z>G2pWymtqA7%0YqZ{c^6?2cXOB*NPz-*lnJY?#c|RInEY=8IpxHrU0NC1mK}oXEpJ
z(54S>M~62@ve0FBz%274(B?rW_pwxWXyi+)%h#)UKrrtDh}3-_4<3W47q*R(w;9~Q
zN01<A<HC2q;2GztHLNcOdmCWyAgr2$;ulz=0Ewkj_~0>59kl)G9A-SA7YOn*#L4c?
za<K2VIcQ9PNvT_;);Tu^)SPW%;&nKZoEF<CB}y#%aTJpqy~Vdc3}6J4>2C?|@&+rO
zByyxd>nkpkQpAIMWie=)7F;ZI0hC<<X+M6=4x6k}-q)|Z9}=Hj%XfxHerFa%PC&0K
zUAtb1POk-te}&4osP<c~2Kz_3n#=$@N@=jGn2p?fML0YAtV%5yMkKl1LR>D~Lu`J9
zOqYp?so}h*`TWlxD0t`F<n8|c-F*O2F%zk_mzVI~b1pqD89hCcLnhDciV7~-f&!-Z
z6bTlwtM?H6SC-NMRJ4*E=JjRz2HM)st@=ECIvug3_B=$4iK^i-MC*iq*4U!RvCcj|
z)0t(4;f?<9%L4CfoVipTY@6eXYqV|Vge$)YH-q)ARKz_*>23wGsS@HChYdW7>^Ir@
z`6}yD-f?g<*E|>#J-qkU%m(vlX$Or{@#96f@8&43q5NH)Gq!5y^%;0BKPK*&4X-oU
zkP|L{r01U@{oZp_LG`KLp1)p;o6ce9w*^uhgBHnG%%p(G8}~8VO=0+lZ}kfrNW8Q(
zHI-d-jf{+-x9{SUz;N##$}eVdsRaIGEWn_@VPgf<A7MBf=1q_OVC2vm$C%7eZl_AM
zg(;c6XZVkVTlRVwxTrz%NgalfN3p#3GM@&96Ah^1fp6yWXi?=SjP_)OdE=0m?H?SZ
zaC1zuo0#OFLkY0=^XC>2hOg*pGuK0X25K_*xVbw<*i8UB0-|otKJfd%oOK>gPe7!h
z0YD8VHbV$2y>65ak~m;Dr7I;qoU4B#k>$z)Cp9!td3o{IuVZ0iia0MV{g|nMc_hEr
z1sq|i?5=o#>eBHV199Dv_*Nd**{z-+y6Oo7!uye3-+wbTbzu<jx<(d6>e=LCz%WLT
z%no5rK1bSpNN0m-21x;UJpum?Hp52n;elW@?#xi1$l1jnbZk%IwT7M_91c|X0O95V
z2gR?&_6k@l5fSK9(AMsUX&W%LdYB>DR`;zzUQy9_z7oBdm>)$03<!snr*CNZVuMw`
z8p)HK3?ur`YhpEDE$7eaL2xK^5BDK<1nmXF7+UZyo}NG|%7aNna1qW6AVhfDdLK{L
z<C+UwYb0Btq&9QV0F#;-m^>Au(vfN1jH}FhmjbCoV78))uWxt>P{faf1O*LhZPBCr
z@erWz04Xbo=*~dyWS-ROw+ZexXyw4(4HK|-p+F!d^&IN&VUO{A%*G*rJ%LkMRw~?e
zZthRkYc55a27`Acpr7R(MEgQ5(Ly8g`qe8_zMe4<yK#5A*lsQ_OPL`5XW4YQt1l4B
z&A>o%38o&a^LCIuU4k9q_$m}V-)NP*3lq2k_STA%W?q8H1d{L@69X{k6bl3Tultt@
z2ixF^_-x$ZYz8HKFt5N-I-1oE-2WRgjG{Rb-hsSUTU<sBNaT6JGWv=i;I#k8WDf4d
z@Xyid$T=@wDEs=R!zdNlyt`CT<NE%<goH-x_w!>}?Hw+*W@b*0Im*7B1B%ef%Ifjs
z$Ggtr@5(EFJw%h<QuTiH1wtl^)t@j4P4c31qW(!1*e$+5_ym)7!Jq*<)!H=pSne1b
zw?f(ifIn$%?Kj}2fVUJ3Q2#h6!;RpXm;wF-itp}jZeRtTf?~v`F`mC#uuAUSv1pdH
zbphZ-uV25uq9;yGZKlMlsi}Ff_~C=*z0lcNJtiKay)1b1N(|nydcGhClMaH@r3GfO
z0oyi1)Y}Cp;CwctOKgHVrJ+mOrd}=1%PSECh3p)_CUqqF&$TP-Bo{aM8cr{m^W@Wo
z*aZn!+@mi!5Y<3PO)l=soS=8uQ255m|2zP)i%S@D2xERMu(1zXyno+6G=NsM|MAZA
zU)Z=WllkrTz<<^&3`Qpb|IUqg`6ZxGICopXQWJ2P4v&h0)sBga8zxcq3IhWJ9v`4u
zNY6fczy6;=VP;QZhL#<+hKbxd@cVI3+u7R_Gsm_&&hd_p+Q3Yrk@xSxV7$J5SZ>jO
z=-YIAmL!L$-f>Q+^_e#0NPq_ENDsf+J8LQd+(8yk85yWXK{~zxg(^^$L#72FLyxD8
z7~be23~MXUkf*twgKJhhR>1gQEuaV_(f4pz^u{Cq=c8CNzu52EhkU~bUU(3lK*#CE
z^2{4$o7to66>z*cSzAxTC~@&s@FZPOaA#jaCXXjfM>jb&l@DW%xyd8dzqDUoBlm=c
z0Ctet!-t@ZYlA2TJV^<;xj_*TgB{OrHtgbEz>7H7?D@peF+DSr)AEi=$p2`ibhq>H
zh=_WtuUCFi^5l8V#L0=X-nMqgq$Deg<d$7hQW7QM7}fBI<PND6_xkp>gOk$`uavK^
zucIS-W_?FTtctuGo^0RF{{G~L59=1ae07<4SN1g+qYd`8SjYtT3ONviaX|~gwaQ6k
zmP#C+o$84l|1<icH9lnh&*lTC1mV>&^Y8n!rt$ybH?Q>N|N3|1uwjY{oKOEajq<bH
zFuTC&Us(ye6U@jJE|QkV3m`?dvXax*wo+BqmXoXY`WFl!drvWp2BE|)D$2^h5Ohmc
zkPha-5*zC2<=53Ug@&?{V*Ll4jn3D`lg0-9f9@zC7@C8oBO4mLI5-3*A^iUP@5T{N
zPW8roLQ%rTpQ9Fi<E3L4$oAhAh47=p6$yW5xxYrp;L#=gmox)ECu^V2iPq>HdrNlo
zdDQ>$ix|-8=`CO~8pTde{C||(a4jW24N|Q#3yb2LRB;I%1j-P_{qqPk7>O`xKbAzK
zV~Vx@cQw3r)p)!?19s!C%KzLJyyEznkj)RH5M3pF0(Jku{~lksV_-TmB!EAv-r!ve
za_$a&|GyV2==c*btGfheD;BRg4sOFBL|kQv(S5@sBI>GG=uTmdP)oq&!oa`)D9No-
zq0GMrNPOGmBr7rriA8{B18($cCip*JE;sB9lEt?r_Xg`Vzd^Vs;^7FMR)hWBgFhfz
zYld()-**X&>Z4f_!y0+68#r);neHupo1j-D;fVOp7ccujYBY%Zg<iE~90+NeaG-C;
zE%@IZ1=G9?4juxQvJgMNQHz&Zyw75*YZ|wiW9zebP3}KhKtS_zu2ffOmK7RuYin9Z
z%iX9u=r}mw8uj>4fV~W(bAu`?xp`m*okhl6pDxzSGpv6wSunt0vF`Y(4))?0=nZD_
z+jW6G0Kf1%oJP^)B5w`rQGP<mkxnK7(JGJih$1yLL^%IF4D5mHLEQK5JsXH!zRj85
z?Efcqg!9QSYLFyd>~Cr=w*A@OiiEh$ZDVwM2S`35xPdo;{S>rDF5y1{qBy7<O%!V;
z!2o%Xl`2QA^+Z@Kwg<qdl*+`!LkPIRRFWV)@_+I4-GNy4?fV*ph)_cI$SBE*QbzX3
zUP&m*in1wG2&wG7l08C%$cQK-BO@a_BV?8k@jJZl_x=6#RF84r*L_{*=RA+|7^WW{
zJ8O7g6A8l8uZ1C_{l9+wioD!|N&;w4FHJENgXZ}3lOrl%$@Rbq7G%Skduw*h5rO~z
z<7Q(B;cU6wNK0G?gdG+S?hx<_?xR6C0?5~IZhQjROU>kf%Vb>P1m}xGG9N#EI&0NQ
zvyFAohf>GsYv<3O-_p_VHF$dmQKhM96_>i+v$ThCw&0{kQulC%S_@2u^z#gO%42R^
zzi!H8+m$gCbLRV~$*U`?5Jn`Nb1u5KmL#EsX$=a^H$}Vx_QNuAa?<vf_Ctk?oRe3N
z9?5{PrK{s0mGnP%k5Gn2x*No`Z|_pW02yNi>-@&wRcx~u^82MCd37N;mb~wF+A%M8
zj$upE$#MrGlGn>kH|tFy4AAhola-Sb$@6^)#C4kMUTbaSafR^09~>DRgg|)|9ZbC=
z`SHHqmX?Fo8pg(nn-D_me~o_1da~JK&z^0E*f0O{w}vhC#4(%5^mGecF%Z*<ZBl;F
zF)?Le4A|Du*AI7l+;Y4{fed-&weklPn!?fxXXZ}iT}jEyV|%QlsTuh6sUqu5rt;lT
z!-KVKY<1~j9B*O6Dd0Tow9u8KI|mXMEGQR&Pl0xYbnXv$$FNX75c6(X635{=`cqV|
z@80bjr;|2UL39o*&>|uub#x-!6-c%hS|?@Y<^B8>(4nUg|DsZ(>}RIA7GZ(-6LNCr
z|B9Du6e0eFd^e*-@)=Sw=LW@Z-95?7t@n8WcWH+y<{Z_S=1Fl|&vE4k<FvH3ONcZo
z#W{V8<gdUrZS9~%&(+!VV@wN>6=?^E^YYT4-j#qXx8<_3vI;P`{OmJS?F2E$b$;Nr
zRo7$aLAnbT>wQ;A{+S+05S^Fop2Efe9KA7Qlv>)L5mMZ@b>=at>}{%5Mf6z15)V%c
zvj^CcFzHCVR*eCFkAjys)XmP2Kgw_Y4&r4~4=ZSE8>^^LluMJwHu8)z)JsZXC2BeM
z1-=Eky1R3eQKJcEhU?768y}(^$h9Cp)%b1ISNJ8A-T&t2m|a0Js+&|G=uZZ^x>@|l
zN=%US{?ioxNmNv>Im)@Pun>1>C-~>i&d$g;-#g~Il2(k5H{6NaxXQx<3hczhcElEl
zS~S0*x&9G@?ht17nAl0k5B&E%L<7RYrG%!>eq@`1X)synmL52SE0aQtU6}_YSc$)A
zEsTxrxx^`XS~^X+(sya85$<$9q;B6n1@{1^0I6ZqhyJ2$Y*58wry_UhlAF-93@Z&i
z{o}YdNlE!pQAF$k2}I3#Pxjw`pb-ULWLH<$m(G{gWYSyOjoxHt;K@Kl6E{(6_Tgrf
zI7Tdkf?@kr!t=0sJ~&bXo=R2AOSxYdyCmILgsXGa;$5bujsjAtxWDo8`SUi^gynM>
zl3e3OPf2=j3wv*~X-0ycHHqlWfZF~IsE?}v07g1|Mqi1=_TRzsVvj#Rr)Fl5?c7=C
z_bQ#5WDE=j2~N&QFfBfP{0RGo1FauWOn!D}dzzY#jyJTpG4noB+`~@@ghxiEE+T>k
z*3ac;AxQRfvs?Z>PWLhV>2$1Q-^pGAk${6|1qC@o6u0(`p85FUsRBKPC}d~MGOR$P
z{D#7Kt@4shxK$ViC1MhmFcq@ym7)`Lr>3MN=rXyUa)gTNWqLYisgeTrIR5?&$BuE(
z?Q>#JHs(5YhTVv=JSmAug(2jTBGJq1^~|j5Os580BU=CKB9?KIdTH;YX<h*Vj&RK;
z*%prWV{tcnx^<LDsdfkijvyyAMW)H5*g^P+hlj_^j1>f-nO7#l*@H+0<Mx_emL`nj
zisstpe3^O!Ef|JB_D|KR{iQI|aN+tzs36;B!V`0VbpyuI;RjiY?R+a?7^L25ax*Kb
z!q=%GBtf$1;=DCw8lOOD{6;#__qsYZMRKYgvMr^L+OM)n)UpDmw~`kx($jGKrs2fJ
zxiK30(dXGGhB$b&E~~RlQylrtMD~D3l_^{f4a7G2Tl#wMW7-|-%GM$4(WC7`Nw-lC
zvTD7JsOyf?)6%M6kPGytlITlGF>`CQ8rFQYezq|zN=3_ae<&T^LE)Dy&+(CcaRMwX
ziiYA-$;nv)630t5oaHHZxZNt3L&6~h^WGOX<jYcYaQwQDrsfxO299mrCEM>LpB&rL
zjvn~C7Vw1aJIV5CpHJr}mAIjAm;R4<>|vjwu-;x0nQ;@sc2V!fhFeMhf|hhI(MfNm
zjxK+^)CNHIgrYGe%ni7CLhU#lsNAkQ{^;Y-d7hejWA}Q9W+{)0@09f>H<A}mQI^wP
zB#YU7{~=F0zmEtVIYQ+td-;*%Yw;{mt~h0aMP&ub9YmzPcjV7kQtVOQZCKWW(wbzl
z@-OdW4M^CZ)R$nxDtjT;Bku5y#8ry_j*8o&*}do8qczFNBbSyecb`ya=g5RUi->PT
z<^8gThJlCcYYrye*?ymzz{@+;eQ3D<=)~=(QnsQqb`Ol6o`3GbU-1PULVvh0iA-Rq
z2B)YfKkpMFO6q=kU0qJ$YfJu7m@y^<S@yHD7xxYZhsB2bHHG6o%ii3F)=`v0&1WB{
zybLFrP-kb4Na}uCiDWnB<-DnrBHS(s)c!h$W$mQ?KFmB}!Y}1yaaM$zyz?=Q^5&AR
zi@{%MSxN8zxT?u8r74Xr&x*|U)6-*4Xbuhi@}-VV>-RsdBElz6NO^gmSX;}eYvvO<
z=DUaFG{`PIOmf-S`;Dc#_2fMtn(=4k=UErFV})oJN4)o|I|kh!swnM(nch7KoPh7#
ze+|PYxzkHgRyHj+H@?bKX}2ZXlC&yW4~)~$JnU>IH$yT`Jbt=vGWq3xKa;}aid(1A
z_8zLgm2}Qc<=1$_T$%laQSNJlrErnAk|6DmNrdM#OJbG^==>jBTW_pPd;z%>0!wkv
zzt_K&wrX9}_^X+%lYJEsyP*eygv4Dw$L=m2WUqIAA&k&3*<hfHw3nZMCoB4(m%`x<
zjk!)lz#zGmOsL~DzscLtI_J?0wezTPlM^~8P93O|XmmKF_$n#s+T2&Q7evd&ilKG<
z{AVrdV9t>4G(!d486)>xXZk#h>tE9y`vDG26WpOu=b0tkI$>`ZL+9-D27c{u;*^z0
zJYV*3Lvt|54Q>E%`RXY!DT79PY#ND7hc6+K(af~cdG4B`q9tBE9N~knsL9IK*ZQ1b
z(MIlBoQNZ@=F4O7v}$BbyQliXU_OKQWT@JDbWWH~UclhK3-f{?jmwaOVe?XpQ(>#p
zae6G}(kHl20nt)j?Td*q&%BS;)1%;;XVOK_yjQPUJwf9b{r<~w?rZDM(+|6++U@zb
zAt23u_3D{wOkv>?atod^oTcfsLy{F3<B&`ZE`M+9_&iimqCf_-C{@9jrMASgFypZ6
z({S(2_rb&rVtdisXeB10tc#wWRmegGMhqxY6D~Y}^dHjuUiZB>-R6U~=9OmZ3hZKG
zn~<SOH$SuS55b!Vm8qPMXCWR>KJoqZdBR7HOmMmgNN6v!zoz<wY^KrM!9O!o|H|`L
zE<V+?!!zB(<-gvyv@m#_yen|PzY`5gByZ$FV&c53<q3};pUZQX^jdG+UtCi1xDr<5
z(r%XJ9PI(8{jTiI330~_db_VMKRf$%idhm7xituyasCg(_WK<)B4_v-+|2^ty#sL~
z|LN_vFM@lbs_|f?b;bQc!~d{=*4DR|et%}$-n75z<OIK%;?Z4(7@Wc273wzIJp+{I
zYmTlXL_BChVJ7!6OY;WSIeNu6pJ9wZ*9p9H>^<%k%&B0^S^Us2yBU46^$PyHft+%*
z>1aL|62yxmBeYD^ds<un!Swc${~xq$N|pL>I#P-{V_r89*&MdR8<<{DS{n63@iJvI
zobvf>HT+eNbsa;<>OqA_-XoWjB-Tc}55CG<IcurGP!!VSbAUN~>Ex{j%w<IsyBiN&
z@<r`J(`_s;ehzyU%0J^>cb^|PwdH#v`~VPof4^t%ASFL!(ctT@_o$)PAC4Wsom69<
z3Dx!VlwjG26%foaw4j_lKu+J6ZybN-#z&Z%l!5^cAQ0drcxLA-tGvnRh0|pGR^E?{
zcyIn;1g)*$O35tVExM78B8#AiaFBF^k>}*RIQ*rNd-dY$85t#|!-9*w&T<@wOpUrT
ztRqQ*{6+rpO+wS)oU5mXOImK#)kY`u(NQjr?(4N9r5ycVea!LD_Y>}VRKR%d6r2e-
zPu}!Dl=$Es2zTTR8CLSKZv<`+IKB4qG%zs0E<v04X$Vv?kFE0Yh%645p9NDrspH<A
z4`*C{9<$5vS=B-_*t2?SKdYChWe3677_!g1Q7E*J`htIl{Fg_6!=hO)(<8|Pjs=MD
z5EK%^eJ{QSscQhZN6()5%@i4E#?SRG(wws1x7Hf(ijxY1hR1AoIRH%L5YzJMP5k)M
zMfnjM2On$Fcw(~07s?K5QSK;FQ|%8`+a)CL9v6GTf<|7P*^QN{0TJ3*B?~RQ^vcwX
zoSZmIef+jZagV-ZT?Aa#V|g4pgvVbxv}$ahqAeLTv$frOk6k4cZmJub2Y&WD9%Jyz
z$;$eic;2sx1itWyi39}f^YEcpYn<*|WUb#Ucd)=6Ihb#JFkn7e^53W)K=|x;&NjgW
zoXRxc@bqo`(wC8u*-h{&DEKrX9TrBRMfoU1c=zh>|L@gbURz#TClFzq*G8%<l7QFS
zi-?XK(KRuVT!3@v<?ov83eR&iQ$IpGjEp>t&n<%cZGHN*h*|j0QLqnprWcpLliCxs
z{N2A+Gbe&kR17(QCz-TT9_<rdu<J~__%rvu=KzdI8^U*!Wr@c~&icB#x$XC58!;+0
zeTXz?!UO*APvqW;7>l~J<<E6r+y}?%mhpdasd^J4ElP%o<Todx1IX#SKYlDCfH^0Y
z<e+JPYvf+^J4oB<rekg%ft>j6QS8eBG}jgJDYaRDIFUIfwHj!xA*-Me-xObV&9>LL
z_Dl97Q;G?#T@#hfU9%B9U)zFBB$E6z#fp^JcKv~867JXj{(cdw&I#ChS&3WM2aKU#
zhLxZp3>opMeGcdj_*XKX5oS)4DV7rwd;;+N`W!drwlnTNVj!Wfj@Ev7@q*>x!C!!7
z2l|g-QPaBg=a0zQvlg*nz+V&<#f-p)?(~CZ!_Hn!xr6nyb8~`^)-y?niQ$H$Rhyi)
zbM59=8aO8c@6*%QpVoZ+n?3qbf|#yVFlp3#5u4HgMs|y1BG%2LwN=^+V)RT*p=0U9
z%bm5)6c<_7s~PBT-f_{0nW|3-+!5uxnI^0pa<DGpn}x73g?o;s#Rn}_%Kn7Uw8sx`
z7!hL?2sotg!Grf8MIjLfAiC99og7#j@kn`1PbX}lTyLxL`gcW1sodc8%WR@QQ5r90
zNun(7Bk>SodrQr4_3xIHSC*ELU}W?9x(f`ZPX=u)jqRhBzi8e=OpVgTwwaojhiO+@
zI_8>4BSljoy?I!7(O`W;ukD1iVf*BKY!cD#xp@d!mJB%vmZ?|@gVcXX{j}NRd?5AD
zm?d9BMF7GI^@Xkm%=XxL5Ps^)4Awp(32q0JE&0hK?Qim)#GipJ+a0`qP#XldaiIO^
zO#cQTXrmnk4si9E8_@~!Smz$5rM)-x8HQG9;8acj`H%~gSB1%SYHuv@@bMwht@!w(
z-%{0sQffw}ZxZuvJ!AW6^@s6+5~b{dOwun)%yzY+#3FE*7PLB|1HK1jUheMypsMF=
zp#&zDbG1ASx>A7YhAy03Tp8F35t7nCTA$?q2_e^ihTq<G{MmQ+Kd_D#2Vqlm)E-|T
z>gbeCo&Xvg)|9V?LgITrG?QhQVJ;=bV(Sy=D$V?yUc>>Y1Pc4fL|=aemMJc*53IWt
z<tagwf}pGda(FD~&CqWJ21D0S4Xrn{YK`mf;7$3nFI(#2BcyV#&VM`2%^k3ba)y>{
zzAJMFc+WESVIVZiOPKE-hkW|4OZf#Ir+%Vish|G4wNV@#td1?R?d_lmJY$-vk9+gW
z-}5)G5fKqRKXxWZHc+dyv;hTznV!D+-(Bkf`GmIaZtOB{qTM*EU4*R+Tti}GVmzVR
zR*L$2d$^L5|7eq#%g>nK*`cSF>RB;n-IC>J2QZ#717rp-xuW_XPz?u#hL0a1mmF!G
zXWZ02X;iue{g7(@i)>4%{{vzzo`V{OQ<#+@HP!LyGd~vd2mPn^B}(oH@KPD@e~)8e
zaMo~nw>>>vjSHI1qAtBYT6?MKZEe~;MNylt5lTnjSj<dd3<dy#>SEv5F#`#T*ugdb
zrq>AUgZC*Ilv$doe+$h%;O^n{gj0kamLlASMfEV~OZx}t3KX2Vg@xCqwOg@5JHUM;
zXa)+zYV7-qdOm%6hy4NksIdqAXc&_=94G+#59mi2<@1Yw_1Dkru1Wxw9X)CA7I|9v
z0x4vSjD8}arV>8~N;W~{1~w>qXY@S?X&_LAF%w4O9(o8tD1vI?t5OD|x$DXhb0KZx
zc|DRru9Z6wjspX`4J`!#5zO}U<KuOgs^Ky7s1QW%si}?K#{-@g@)KO(DCuQsG}WdY
zPug#_gGz-Uq>FdmER$F-J&uhxg39;XaP?Ez=3rlGaMXt=6#8c{FPXR`q1ye1plt}D
zg}TJI@KA!HbLMQBWp~z@qA$bMwgV?d)X4_yG;E81$!^uxkUzEW@4p=IhSl%nnr2yy
zfaBB8dM8$S4)4}p%9Wp=D2}9MW+o3_<EQDW{{4!$J_ZKi&}F8lr(?Z2p<V7!$5xD$
zSY7j%cdn;TWD?=Gfjx*)Q!_0nccDNx_p8_)Xp{t3<-ioX7<b0xqR?)0{rpXs?_K-(
z0TERLXn%2{7Fw~aIM02B`-aEbf-#PK=m<_4eLd5ZCKCsK)JO>HCD_owdw&uS?)%Hc
zJNRTlAlr==(s;U_ot`d^Itd;sy!6|WF4+A3p^1F>gFowR18$gEeNL8?^n!|<YG&fh
z=__xJ>6d}Md{t$-EfKq3Hvae^TYt$n*ZmL8YnEeEdKs2K$3ktOl-|WZB_t$(Z35G&
zkJyLW<BTNOS0wnjvJH#D1QZ~pVbZ5jmGD2=B6WB3_sqWL)8WjPoZ#dzKRMFEtzmch
z^0OuS{?glg%^3xY?G`P1Z*G6v{%Hs@9N+8Tzs5d%;?d4HCnh#((Lg+IPjH^~BK4WQ
zuj!Ipb*e{g{A5|pIxhgJ`tba?_~h*0Lqs3YE9$(u5~>uJdx-Je^3=2VP|aaM3uQdH
zuWl%q{e1vyk)aA_kkvYet7XHv$Q|^8yACjG$625gXFJaV?^y^oNR7KS%o@CPMh!fc
z*4F&RcU^HMz1(29^D+Yl87{-GK&`GrA}5&VYlGFE2Y%k{WYolF?)lfhIC^BZIiHJq
zd#P~0A))4ax#9`~rkK<9##f6U!cb~#2WOUs2@D{d!8$A_>gw*Ecp`kJBLu{LY;cc$
z_7E$)@#%7<&~7L~3=8d9@JaVGn9Mc7)o?pL=GZ+CkL|UQJi8%}_r7%;r8G=NyIzR<
zm{(zy*PE>!&u4W1pk{mlMxzm%Tel8~5FdD&4wmW!ml|6%f#X>w)0hz?iWR|TMdw3m
z)hN8{;G7|ELl}3ASBD#`PAcIuh{-$9fSdH2AE{xo_^)@FPC-Xsfq!kgxxBnw=!JUQ
z|M~OYbfRYe12~|JfXf}_ziMt4%ABzXnpSsiuapFmy=(%O(C*(ke=Z74Qo=Rw<#9QX
zl3H7T!DFn(?1Q}Q^Wtc3O=}o6NW4!F|8)maCJlL(>p@5OKtv`xb47T~^z{BE%zUFU
z=k<T^Jc|m&H}&;LqI&(ts8fHfUyvuF?HK@2_Q%*=!1krcRGLpg;S=t97Nh6Kl?<NE
zqX>yfczfkq_gE`ZJd|$%ZOJI~ip?C`+kEXzU&F-b%#vSTJfuF3^(uO0a<G#2S07%d
zx3<hmT|RT(R*|HWJ#~Cx*poOA{rC@QACKMcYQ$uHiSdHRIW{&2IQt+l584xJtU{@;
z(b_|>vByHpRH_}RUG2&3ZVVmC{sqz|*X27IT$TxU^Ch?WS7>~(kcL3D36(K?@ExiW
z_Hp?|orh)(!fv?I@>~zXQ=4n~r_xO`%Vc~X%mu4Zy~gI|4*D2nYo)udhEg9r`jMmS
zA=h(Q&m_Ze=20lQNF%-n3@Uw(f-o(aqyUrCO4>G0b7mL4#By@1Pr92fFo3xLj9|7q
z+lO9&_Z?`WOJ~;!e@}FzTv|^U66kfB?d~5MVpKqtQ9H*Z*WkNf@oPqqmcF`257(L6
zPAe`45=;JvciWqqvJrV@=?KG6ujVl`z-4<^x##=A9uTg&wDn?=@D;_lqOq_p_G7QH
zE>YF6bkvNagin(p6Vt-38r@k0+dB{wn9sW$4|YOZ`o(t7y>*;T5=1d;A3m_d!0Ds!
zwT^47tTNIMh<w_9FE4{fXNM_I{`qk~Jtmr4Mn*=rZcUr?PCi}gEikziR{g`$iq~X&
zEqC9ak2uG^+le8aCDr%EzsdFG?_d(lb)@Y3oMdSxt$lf%rg?&BKs)c1cR}7W`DARo
zPa77+n0Wn~IyE#nh?XSaYb?AYPZ?J{J>bJ8xB0xR%oQZcJDQeJGS+y}L$8eVxfDCv
zaMD^}9jK1Hz4Ol2&yE`1A9zzz;-)=?-4_IWFAECv-`=Tpn52r6#VSy*#_N=diX%Jw
zhp1Bwk{-XGP9A@;c1<~oP1TMagO{v}RFbiLu1+?J$vYH{7gsVe=}EE`{)YvudGpz{
zCy3kNQP0)SychMw=YU_uOt$ukx7}FlSPxZ@Ti=6okgwwA`Z7BiW1ohJ(;aTq@N2K*
z*4LLWz4`GWV^8crg)`rbSi#l1Fh^^_jR0jTe+C#mD&pjDeHQo!n!tk{*;CXNXYUqb
zXp%7pnjdodA+b%8pI-xRRZ48lm@c9lIC<3|%cIU^Ph{4sSO1__#8h$e%9}zH$&|lu
z!JC?(BFOcNA;6KH59*Ei%#|S7=L8lhFm@9a{VL#rlOAQW29_f{zTSU-XQy+@Y@76|
z1+Y~goVrUhhFxdM1;VI10o)Pq4lxc~+N`a6Tqkn9{*EvFX4#%FoD3)a?0YnP*MHv9
z%BuGE&6|*uxkdQFY~h7(l7u@|It4}H?-{VM9?2kz`0(-05}WA7kt#g-a8pyq2@K`s
zgJzlaU7>gS6o}c}^y?JNH0EcB(#T)VLE45@=_4N{)lf(hz%TB4Dd)&V_TyCFJJ)2i
z;=hh^&(J9Ug6VmJaCxQ7#r^*=Ve1(jOdy#T)I=YM_4To{-3)Y-a5=s}{h0Kd%a4v_
zpf>1r!PXLL=Gq2zKCy{JiNddpQ)S@Hqjmq?@Kk`DHD0UTU%u2b5cvs<iS0j4o+Zun
zzN6zk;^(Oc!YXaLv+6FWsXhg`_k|#$_-2Mu{x0WFR#ZCas0?;^I&c2;<QdxF6<5xs
zzIzAa_RcB8q6iYT)$N%lYHZ&Ya6}fJBXg%hVfXnv0yZb5IBz1PbXTf8T2Vz(mY4iS
zFD;5Ge#9dKQhESy##;dve+ovhUPWzbz*@fOd2Us1OC#IwE|ol03=NEm4^k_P3jn%X
zU0Yl1$!*8V7tur_Xd;PqV(hRS1UXZy(6koE+K2nIV9h85UrSf+zjSn}Dg3~UY=UAF
zj?XB5HJ2jUz6+?Fd#T|*k`Jhd{+v_au2*d6yV_qaQ=jQ1CP1Km;B?o?sSggv&A-g+
zlozL`PY9{;+y1;yyX`vLeOP^J<5yihFZXpy(U405OfO%SVt{}Q`TF<76C>4X0*#m#
zbh@t;-b1}eb}jc+{7_DrqDqgxo~-Ar$M0iI-!PY%vIakSV%_oL;vZOCARaXy{32++
z5KsQNetI`ll)6RS>czho#%A^tlI5R21X5)#?Kpn;F|9r_F<w6g;Ak3#soFbdrP>1Y
zPyP8Zm7!ulZ1{C)w&xpS5G&ro{&JZDnKfocMsom^f*H;V!@pH{qwaFR*QodJeU)nd
zZBb2eoE7Mxy|tHulvLiZ&F@zP*e>QguqBU*I*M-920p}?0)9=Gb#@8expQZ*>fUKv
zAA!>_;=Ew2a#-e7%GAKih8?xgPLxqFCvY95(lGCpK#x6x!iM?jz*nM~ko7kZtI>Jn
z!PK#{WCHUOATdvjb<pagXb<HZf78(xgu}Ig0D5VCcx^H>FTyK{>kt;}h<G*B)$M_}
z5YL`DoN|Fh8Wi6Y3IBb^=YlM>)Z3saDy+JGdVYI7XW8(QnU%CM7~DkKstzPSx-!=y
zc*5cEd5D}WTikBYU|9TFW9#t?ym=RkZhUG3jrYc-Vq$Zn=5X`6!sAp_Y(mU4ptmiJ
z)JkiJ0oi<9yY%Brs^uz%2`^}rW6X7lw%WrLey-XQT%wa%`OvWOObpaZ4<DC<y=4Ld
zFB$iH=yH+YcS=5X<jJY)K~JdYolHp-ZjhGJYrO2qmClBB!YpXemIh`#kHj>G8?4#N
zl%9Mbw$S3<OY#r4b9C*%YnCPI$2!?VM1;H3ztd#qG|zes;7%5~J&QwA+)C}o*zz8R
z77vUnc4&h@w^nYXt;{1uz?S%<JxeXL>cUzn+(>l$i3Gcg7poD*DB%{;@k0AeRx2>-
zrNhBNL1-fAy>>T0GWm_gE!+pjZ=p5<z?6&k#HS2gDD4xu4E4C=thZGlNZg@)<`RI#
z7>~u6T49Mi41Cy>>5PcTk-1xxDt&JmUTuOT9UZub6|zy-?_7N&i^jk17LsVo`M3Ug
z#~)-_s;3^iRC0eqE1(RFls^8L!mI(RDB^qfHW8EO@2{}FvGL?F;UVjfm;%TtC=~nz
zF+;wTOtZq@HRojHS<S{t={kAFo-&>%V#t{hyL!9>ur$ex00nb~pzqW5=swWSs2_hz
z9E;=N<t@T00#JxOJdz#!Ux@4v?uUvDypEROM?bDqx+wvM`26{^+p)gi=q0bd8lZze
z;#8|2Q;bD(A3Fx5`HquyA6|4|2<LEr@|Zjkk}`}j2UWZvE~1*_4Cn-&-5M(tKPSu~
zrLP}tBX01A#l}o@@$0LDPoG&dN1#19s7#*ccv6n?#B8)cynYtT@0iJdxpM5+9CWg^
zEI@3>AWkP}F0l46Y#z=JxW`PVWfLqv%RHR?Di^c%r9!93Tq%lPDPKE|4$We-Z=Kik
zcdUfHdHrk)w>w_ATsg|$e(bGvjC*YTHD&EgDu?=}?6#;=@3717=)P{3w6tQ?o8JIB
zpeYp=%X!zTRx;IPgk(#sk5pB8x5bsnYHIFbg$337T{crWo40i1L+c!4qtfSl8M)WK
zI_Z2dPt&LW5)qPrNry9yUUkJ?Nd0EC{J5d|T@tGTt8~{my>XLC^n>V_AJ11n+w}6p
z&yNQV9Va6rQ?(QCfD{P)f$JSFSX<*igpAYyA;(4@U<~c)B-#(}wVpkW-}pr<Z1Yve
z$f!dmfV}w*b_~cWc5!I{`11PB*h`z<t6>T3q+i7i7R~Oht*j__MjbLM$LETthm7&u
z{%3*!hxo3(T?(XrR6<>64=Zgqm7jy<jFNLbx$i8$T!(o!M|`>>I(5n>jH|RKW0)Bj
zpdoO(=x^PuP%F0Unu-bqxQ<>_=}jrld#YC|@a34;c;K|_0uH^IfE$}x;l_!xWz?Av
ztJ6#a+LSVeH=)_ezH^}1Y`)~WTHz#GMp^OBdo-N?W+<2Km%VGAqzlB%2}+bJb+svP
zsyqWbIs|4|Td^!|jU)MfGNxm%L(*v-pHBs9@foL#M4to(wzlP-MAe<RTBJ<L^{LPd
zdtu60qB@GGEOZfy_e!Co!zcrP0T{t3I2^c6duXu4raj;=JF9(;-m414v{-$hrDtRj
zG|LW;a>O9cBw%Wa^6K;Gk(2W(=In&Jr?rJ=?4W&=@gr3t6+dvmA6=@<wR7j96m$zP
z!xr}aG6s%?jLpY!<7ynZFhHAGnT=uu3(q8p-90`~Bo`DFP<*}N3DzIVB@G8y&)OPL
zXiwu<$LIfWim8ci`qG+U6R9vDfEYmw>(yD2!```ir@#V@bnpdQU&s&pshRa<YTN}D
zD>tx>AtLf9E&ckE>*Uq9EYvjBOU&bxdtg}FT14>r+g|BLT1a$aN%EoR|2eZ!b+ufu
zx*9AKiJ9RlA1BjTPQTqPk9*24QIwcXfBgSwpnD>85m+KCD+{IR<J2cRgfGKRo}tPu
zC}=543JK8=F3Ys>AWB<8V?}A}aAtLLW1}`9X2tf*45yeF9thTbciGNpcn%7)`V<rt
zR9AZq@TI=>LsrS)TV7hzef2PP9K^;ng#?CiBN?rWwLO*8R!3JEtGtY31`bptHbp*o
zz;fh>S>Fjky)oL8m)!otm`HW@QE2E4zDnvauG7SqGq}&LK8UseoRb{T5N_SFxp}iL
z!1n2J=9Qm@Nc4!`)hg~XRB;Sb3%)Q|`WSj6a}vm=fI9-6S_NfE1IJVzXD}WiQN1kn
zQ=0sVGKHEOB9$O23EsJH%NpKCa)4riT+Q;famY8aNy6?I;o6tDV(b!f^`pOCp@$42
zt0RI}_c#MEWR`94F>xV_&TDwQ{Ptdo;;78)Mea2x*Y;T@g<=;$U0h>)(NTwMF1vpU
zVJ}>lCSQrY5hF_{vk5z-qeo?CO1MoGeUE5XPf2sl@OWVA3Ut?KGnU`|ctFPw@!Q=V
z7ztTwENZ4^z<10~r5a>nM^A9q*#=08Wyl>ANpbH}0{Pl?RuA}jNS0+kYqI#`e^<=+
z>eZIn52cWJdj3nBjtM;tKY@VY;LP&>{P1xTzyGYl4-vS?93x`g+fZ^KHthhmy(OQI
z3pq^SPQ%0c2!ZW8uU%>H=nm~Lf1((Aq;|}J`zY`AprIl0#MfU99cP`+Ik&~UzH`nf
zvuz<M{>-~~=cQz&rO)j!i+%eyB+1FGI$D_&%oprfGo7$Vve2+uolKoS_=J++fo-4^
zvE|U}+*vmE@VEa|F)DRU{-IJlU19Sq$2DDlyNV*k<6_E7*JrW6#}}?CRc%{G@-mSU
z5Hvm~_I;q2XH<sG21tgNNd^#Izlri+-*sSrrDE4SHBf@PAgsY2ox9PL<T9;};|p^c
zrN;ml^g7jR9}!}{%OW6n@G}T6py8!l(DmzK#J=ADO3w1~DidAYnCQa6ho?;Yw)$M_
z@9n=fupbJ4Oh%__yj*i4RzN-JD!LjS0s?~0N8c_J7)C~HW?W804@Q2#e=k73(36?<
z%sYlJWt$9(y)-i6duExgynrDkPrsmc#GCmXe2dW&QZQ{9)g<pFBo+HqTv!-E`D5!e
zoij`ym@W)EI`HaL-}l3=w1uk25MbTnjNw_6i;!6i0Z!ySg<&sDn0uex6PkF@`Fn&r
zzz~%g=;(OxlB}ftC>wLQ)c)Fid>U(Vf7vfJ^<TSWyIoHX(n(Ihb{ohY1084N`%l4D
zz=4;#)FlV{`^lLkvH*?=_WF{1H@>Qzmf>x0zX;|4dT`t3h(-RZZw1U7HMF(Ef%E{Q
ze`D1J&e&r#d0{!DnaPK^_43@H9EPWX3np)z2oZexdV2^6`U7fqT7XeEw{v`&YPJ9l
zrMZ#Ka*&O3uc4NKK@80}$B<HIcqZgEj;?D+$+C&&PlTPyiG9>usu7Zd07oFo45o5@
zX=<b1K5*vD>kIe(C{D7W;h<q;tg`AN;^WI*8=l*k2yD+YlvHM^#7^Rk_qy2*bUr0;
zsQ<TiFOuK*igFNUf)KWp-|eia1O(<nJZaLL7x{Uchpv|M@-#jo_LYi4>e(dL?jznN
z&cOMMzXSB0$Sf)836^Y|?O<KFS_?1r%DWQh9jEe;4p(SqlBJGP`eSjC`S4-QT)kEt
z*5Jz(!;}ncU@+#|Zl4nW9~NM9rCoGCE`}=U-NUiRA5u1kAt562ExWJ-X^BP0i*}$G
zzdw;)`fyfKT}(_YpW1jwiz6cW@ZnG@G4x8{A%p><q@WYjQ4Yn~;N*NNoj?(;7ED$5
zW9t==JN=}YK~0IGw_pT&<&#E#ybm}i$jdj=Dq)+t%e3f(6m9)<&1XdQT)~GlagcrT
zR3r0iAaLjlfnaFGF7aiep4Yf7*M0mbe_`m#r}p-Ci2D2bd?f=Ly`b&k6_L_1DMeW+
zO2gk2X9`rJ+kiu88i6<xhqyG(1-^6MJae9Z`gij`HYUQ=G1aC9`BmiBrO88!1@eo4
zRcG1k&lTwtu<TfAQsv!kC8M_|S@+r59l?FU8a{KhmNiw1w`q-sPk%e<ttb56u_Dpe
zQd?=l$d61L0}Q77Q=y1CZ9joEtkdGK+U?MqBba7){(KAM8R6h6XXr^Y?RZg(DK;PK
zso2=ql?(t3oi#fLu-OP5&8fHe&ITyl5=OEs^1~}GV#PQAX`smh5XWhmEVld&a*c_$
z#Lc!uBan0}{(yLj9KJ8Z!`ll(-$+BMCYmjxCl03o_|*<+xEra-qEb{+0=Z*ruSqau
zP@jOg)NI_mAIjE%AaBmp#}qq)=g!@nXgmxmI}AbAp@Hc!gare;#X~&8SY~D1JRBy<
zx!>zg{{u9$Oy^xHFDLG*f%L{Dxhme>+xp$rzQXgXpyp4Le<^M;zPo3OPP0owY(6(R
ziMs&&ubOurt3?uzDT2?7-a{JTY!|}LGqagD*adEW?!_&sV)y8D&2c2m3vr%;3ECU9
zg~F|D-joAn_GK0=8Q4wo+RG|u08g!UoL&gy3@W%<zO^=TV3&UZjydi#9(!3mr9Y~1
z)d#yUcgNIh|K)4a6nE%TcE-4vSaEbi&<@@H%r#fS2T$d3i{xOc7PakrVNyeZx4Jo3
z@C$CV;IS@$V)kx4`x~=aSV2DSyH4m@aLtq)!e=DcNB3>ygB`T%Afl|cv#_whr?=$-
zH5aV2gl+q>Ol$W_{-bd{doWu@@%GYO!KaFfs8ID-X3yW6sMBdxaBKz=5gnIyQgcrT
zDHT)qyUMIjH(TEQ9J%-20EiFSaj`7?Mm(O;aWxBKcX(RLY<g>(vO|JYvSH8t*xw(c
zQo2%jhVtOOLdZ-RsZXbaSpzQf=6KMUQvL@V9r)CBvqBtU&E&PUe4^yc@-yo&Bj(6F
zpEoVh(kqc6WIw-^NtP$c1yXT(Z@d4wx44RpNHB-gzui5}?EHKcU>TAqxhG;6@DQkA
zfm{~`QCmf`+mr7E41eIPN>}d}qT;b1dcxPiS<QGk%ylmGO7iFYn{5yhY^>xOl`&~$
zMaWxiEWB$HWZ4w2^#UdcJ)lU>=0cWU!8P`tIt<2KeL~on7M8h29D(WkivjNVr7?fz
zrV(q3;GCkfKuhy#SXW9C|2pAKuKY%HBq@P8$00hxB3?(wUpUslUXb+s+g)2LeL<u6
z?)Q(ZtkM-$9Cg_|m(lWQRog|cym<CZEsW7_@a;uum0xZvB``6HjqH)UB}~V_;Jx!t
zINKH{M5BZAT6MU(3>Y!wBqX6EGz9jb;pV{IU27Qz!WfVXed*j8l)tD3s<<*jX6e0k
zH>z^a<UP7<ZQvTO^b6L!HgCJ5{&8$_E}Q~#KVDCwH5Oe|Q<=J|pyX@Qm63Sg`*)9i
zDsmPsT6gQOoUnl9BZ-|(c-`Nu!NEauWfE~J3kw9IM^AX@jZ={R+uod6dDipei%I{$
zz-&Q#tk5lG9Hy0SXN-eVQpT3QD`;Oc>X+(gSkcw-AzD31!(C|kWgKu5Du~4L{GG5$
zqu`(K%N@NDRMm%=Deu2C(-_{`6E}nMVk+d|e?u>H(`j7NCNwm3R}>d>Dpv1;mTP~}
z2xR?flIh(i?yb(A`Ug|68^B-i6_K|?@6RnRx^ApcZ*-lid5cF-**dbvW~d^vf|W|S
zryrIvli5G-6A}ngC4YO6r?wIUhR|$gJILu_^1Da=AUCtegpdBXi;9X0;rnl)*Lxx9
zIK;gDPAmPbkjune3|6aNYeO779LiNcaL~hz%I6JCqdS_Knm&HKvhsMp%!Xm+^IPM?
z9HxqgY`e3@UPxcUr2I<K8Z>k?ED;4y(wI5<CuCKVBz8|K>cK2|J+7wJ&;s9XuO~Ej
zqdwu?aIj|=t0t`94!e+R!dhM)8NC=xRWOUW2G4TXpq-N4?Vi_gRr<HmGPXP)O0|@h
zX87ug?!RwiX?Mz!;P9qGxEO6RrJ8*4l1zcG7H9tR-b;H^wp3T_E<nsUKTyJWajRv-
z%jk^9Z|=ZQd}1)>s|PdRxvO!uY4Jy|$#iq!Rx`XiVEdO~;<aIzq}&;PhkImB>8g_p
zKW~Epi7#nLteg7<_odNg6j?3F7Mu1H5d~=g!AB=1Ua$zUQtl-PDNi`>dfBTj{;bKX
zt=t1rfD;kfU4eslbNN%U`6JLdR6LbBO?fwAN|)iUaD;~!tUlFVx2ezlf)>qL8_L3P
z--lTph>RN4Uu=36Xo;y+%5S;4u5nB^gAVp<+RJKQ+cW2}E^EmramT5@>k?`jUaDhu
z7qAWb0S^WYqmz86NSu{tC!i>Ws+mu(o=_&x4{oI>ZC!*iN>3GnKlX@9Zm(09$nhpr
zlti9OK_j!!(KU#=7I{C5AXZ*c@dqLiwB3ZN&jdz;jrwbO8ED4qH*YjT#P1wpB_N0m
zTF5w^gB@_%p{Nt;cAWXjrIv^$4ZCo&_3vw>`{4p9StNu1#)uM*&KOTuMh(lspdC-H
z;zEJmQx_uV5O|-~;ppI6pMA9-39msU^yvHkptx6-st=9LH5vaf*s;67`|sT<0(5w-
zYA&y!6y9GNeVF$PooqT$mbbg^DsT3aVXyE8#3D-64rCP8+222PeDsus27PyEo5f*L
z!Dl+U#Gal)OCo#Bec`9YM-U>Si|*0u&*F&5h4{;1PtEt09CKS7{)c%Nzh3!~MwJJ-
z*M`MqkQ2Mhuf;Q0uV4QGh0)EngmfDafXAO4sZr6NRjNC2IYAi2YSiFIhqMinC(;HT
z9jw3RfpYhxzu22jU{t7N68#1m#^a*4mT+qbpVQ{`=W)&bSV^<+)e*+OfnOb`J~N50
z<StgnOL%Ra{rfAU!x4K*js(<#Imn%%Ey$Ntt}{bRX>6>bmb7L3sDV@A!o?k&2eXk@
z5G|z>?1-N(I6)Ujq+3L6NcrjcO{#2C-}|LR1f!DL?_6Ht!sAle54_3NGQ{oP4WTwD
z7_-xBgRQS*(6z}wqhA$!u8;j%#JY;SlJLOm8~#wcHihvwIrAO1_?j1srOcNS#h9ya
z?|kuR_L4Afd;wnR*3ySy?9z29EZ`3K8SfGshAa73`zOAB8W`X$w@B}BBuyKIm-9o-
z)anX=8W?6Ofpy`y1IVZ@`ER22Z}-rlPhG{O;o;#PWl2~Gp})SlJGo_eLhtJp7?JEL
zDpmAjbFpS|ac4Z<{v*!WQa~oNm&NX{H)d;Rf_xBR?qZdBnGtSj20)BZZ@7+aZf{ok
zlW*1y4eeS4;~nDM*g;bjdMAExpyF*rBWm7+8N48V{K&%b#{J%Vq1NY9g&B!0jx5#u
zv}8Th3jKoNkmFfKln({MM?*9T2n1<C(Zq#79H6LG=bP&d%0ODKy}n+aR)AirJ@!`%
zZ0DP!U2S@DoYACK?|9`<dCw-+KLw6cV!IJ{FkI1Dvx?=Jva&b)Wy39}XAIYZPCv#E
zvHSBgxkvNw*&HQ1Pb~ut(hHeVyvQ*9$2(bzb=ulYmn&jL!s<a>IdyoU^{?uk^9dY_
zUxlnXT_Gph+L(SDZ*YHm<2^*?UcbMbnB9|X;wdr<WC|2gl`*E^#VT6YrdaIUPB5*a
zYf{=9F$#{OcwiUCAD!^q4*&7GTR(N~++P&+aLU|k><89^XH4X{7`t9jdFQ=#ikWz{
zWJmWS-;T`kSwTT^czD&y(d##EOnNUsvGm}<i?a*7e@r@c%@ZuozY{hgrfIx#t(r{u
z%o)K@Z+Us59j)Pj=;&bJ01<)R`4N!#o^=>6QI5`+8RvZ4Tb{Rs77o0K$QNQ<-WTgW
zuxqthHNp5IJSSp1@HX$NyhsIO{KVf%!}fy7#l_Q;MI81w!oObZ`8KBbLN}S~tx>xT
z;r{&`Z!fA{X<AfqiK`sd7O$$LH!)K4obH^H%Qye(`ugUK3C|m)@W09)EkCwPzR!<{
zox5s5L-0VgS@7B;`Hf)7ruf#FdhKDwg+ZlchOkk25vBb0_|>f|O2bQ2xZs6tR#isr
zMj6tfb(03+5gT1B4}SVe5u3ZOv|8#U{6PGf90M6SIha2ad^=@Z%47rtQr|HLe&v!D
zkhto2z)R)#vw#qVwAfgyFog(AvMeI&EQID}VF6BM6`fopA25q%WZ1jK948=9ynsg;
z_nyXh!P)RZ5gBbEa=|0{f~4lUS`6K8^g2zKLyS{^Hjr^Co#slS-xzkIH|NzMet42c
zR8-GL;R%<5OT#yl>jw!4Zfn_iWS3Jtw2PzRy4)(vyZR(`cAh(nv-;A085R|f+iE}S
z1H)0kI_x*LemzwF!+CxJA1^V%gQ#>t@|%<;QHm`0{l&~_8pB{RuYGJ2cSp;mHQ|fL
zle+D{&@wS0ZYOB_#`YFr)9QUZW7y?!TRClSZR`&U`Q$pHcG;5x^P%_pk{Ky=TID5x
z2_YQ3n2moA*slO3eaS~M`|<@DhyIBKvAZ(Q=zDs`a29g)&LdO~9WLzTsX0%frTW)v
za?fJ4Y$OV^yZ20IgYwJG_;g!55GLLiDv;yRr1m1w$PPce8ehC|D9Cq~HI;Oj5x?n=
zJ~npQl)TFiH5e67B7@9tCtbb-w3gjz&ZK60VSx!_)05}VqXZN83uSlfzPj=cCKH0K
zo#`#$@?0x-h_tV!I~^&{d9l1{2`AE(GCNP>X^e8#?WLuqFl(7DtZ&1L4P!@7mS*nd
z#0t!s{Mz7%lwK*J$I%@z1_XdJ(cjm%F%FUv2gJ*z%0JV?-BID--~h&%T{ze3Wavr+
z)i4!VWxp`5b6}C>b6U?b+&iTunAFD`j3+X64o;?Qg_Egsh%cl3s55-%a{C_^kbE)q
zB7BX~Cov?2tyMV92%5gXg)v~T!r2I|Ja(FVsem`om~d}sP)&uf`k>E5PWRf*O3QIN
zpvt+x%Od#a&sj9P78rj3^WfUsJInseH<7hzIbLs%`l1DXhGEZQ^(H?Hiz&i1neTUu
z!0#A`iQrufOMti72?+=)*|nO5o<_^4ofhe0(QXR4B>$nV4hx;P<IGETSUD;%%@%s3
zSvq7MegYJ$gM4wYyb6R<<w1Q{HC(B*`oy}jUD8V!5o)71x*${pWgM6B6|RdIMvUne
zx-#4CYfdqra|$5a9q>hH3z4%H%7i7YQOcuuiQNQqn_m8=1dNy%CX}FhR*pK^U+sB5
zwn!&C%*Dk8GndNPZXpl(k`}QxV13OxLpmd@?V(1_emn%=n4E!GimR*rx6)^RetuNm
zKcYQe#HFM>tg5QQHVlX3#0*^gy1&;uUEC`42Jf-kj7Q`tosb?8(V?w8_-`u@PIo6_
ztWzu0*a*SB!Z^g{l%W>SR<5(>jk2}RUs}73*<4K?RRjwEgxMH}<!3C~&V?YCw8S=R
zQ3KQb6yI`LZAS?nCL<+6KxRuzOKT&GxnAxZ7rOHd*}V+iIrk{1Xce)I@S%v9XZ<Gg
z1%!jhGIcav$eWv*o<6M(_aMp5pW4oO+1Y_Ke0X%xbX9{_XJeC#wSHFWIVa2H6YY}8
zEUSD32y+i92SA_3mO@n59C;xjG10>G-(Pa7KiGEjd<YY84*JnG?K$-Gst*%=rU|P~
zx(4h0eN0S|7cN|o+?cpA`D~&kTD@BQ@4vMppaOQ<V=aXBhc!CB=#z#~VySyk>lo9G
zSe`zAzWu9Rl26}daiAo3;JTe1|0(dBH3|$YEiETzXL<L*m_71=>-Udp#w;L{C?as4
zY7GMM4XikjwY38i7yuapf`Vb44<*baV*3yA@wI?oHm80%NU>wDrC}VeuU20TI49>4
z`1IQ*_=R~#h8pAl;!}r$KScN~NW56yzyuj;6}iqKv;Yx0LLwr&a7{r?Tk@Ij_jo7{
zF-g1uy|2?~%i^ZBYV3+J{C_bUfL52eJ~@SsKjnTZhYD^Xf{@Fd^Qn=b2I=U$@x|U9
zkJ3b_n=%iBysYn>$=z*yS7+8Cw9MBSiHV8d0#=R}eKkMNc<8v88*b~~$5k;gKLB{<
ze9+VTimRndK(3<gcL%Yz6=Us^%rS#X5AY)$@A8a|X*y3f9|1IxQn`#>598s(tR?@z
z<K(vb{XMvth-|$QwI=L0nodIihhX<6NVr=glq^iqpJL}aFb~kV(D5%GVE&yfXp!^u
z%Iop7gpI$k6`Zg+^xR$ErJ==$9Wk@l?xlCUamix&rBo)hj<q*u!?$QW2d!vAyE3b_
zt|8e9w`0e%flBw>b1dFQUh8I2=RgGT>obsh@&xnQ86hDw6oWSV%w%OJUdpL-k5O?x
zp*Xe_yVqQM<-j?=nj9^6l{@wxyDPq)mS?j<LPB7Z-yFXTqGlGu_G+*A>;s)`fKiOl
z3MMg0AoUXEcMbei$o`#?V^pIb7R_Sae3fdcyO_G?P`V5^g|jV4u9GQ;Tz_;_-~J{V
z#t=Ry?z!`6?{L`b*P)eH#U1zb>uxR6%aazdWBIsYZ_J2o|6`9P4bBUV(?@4CyroG6
z{hbc_Zv6U`*a&r<(5>k@>!ADhfCt|;H&5F<)YRFj)%k+Tl`h8R`SYE3e><j=DegEq
zsdkKkWjiqqUeClWH@AA+AlTmn_wOW)kB@J<rR^M}?%y~(;XNJ@K(p5@vc6V5u>FQo
zX=Wt-u+9ooZ+dOn;weJ;<uHa81!{9%94RZ3v=1r!BP%N><?>n1^Im=XezK*v+YG(H
ziiY50pG#hZv6m_cW$tZmK@SegU`$KKY7gMq68h=w-5ZXRPxu&=%~HVlg4~%&(yI=y
zC`V_*#7~2ihUDU5&<8q4B>B&IxVz8LgVa7gH5D~}<yhKEIA=%?fEE=c2|p4o$M60>
zeH{;mW&=#e>Z7Q%RO`V{ZVrymU!zto|CyMW82$czbE`Z#EEKV1K{R7}TCs8!p1xsE
zt^%S4U<`!g`q{FT>gskZIg-h;tTYs^o1t*Rlg%ApLB*+@^$e$?PO#V!>>6H|lw5FK
zNFW0gtyq;|2~-)=KP21n4lGXt1HoCST(ANxp_O%lz%UNhZ8wkVKhmIFOAq6@Rm`Ft
z+MAY=B8_1A$Rj4&Z0|y8OaFW6;vJlw0ZrfhXi*0fq82t9bNZQ$L=O!9a1-4%j=SEl
zsC6n&@0B$kNNRPc$K4V7fyV}B{06uC5wvY*TjS-~j8kY~aO1eREh+8x^bc(w)+k=x
z+1&$*O#5xg3mR3lC>i(8xvy~Sf+dX^X<SFCsj)N3wv30%)}*w#%t}q)uj%cT8nfmT
z=Lrl|%*`Q$Finyur!hAHkq2g&*RH8ENx0>mPZlul>udb9xp%PiV)2=P0L2~BOO}=~
z<>hoHeeB`CR#zPziu8vcdAziRluSyhgTeL4=II$;!OL$Fjh}b7GaWgSK6x(XzMLBU
z=O_Q|yTh{5l5XYy|F*llynLHy&MJ)Geu4vHrTv6{0G<`NWdE>Ob&Tw!gR35?>)|z)
z6g$!&m9hHA{&*tU#_8s|x~qGZl0(Eeyoq0q%i2s^w?R)(G*mQyf7$o5>c5VypRviW
zZXbHiD5pnz{5Wrkw2@K#Z#5r+Ve#tX{Y4Taa$L(a1hG%=J4LPCG#%y3K6>R!T&~FN
z>P9I&*2uG~Vi6%B0+%lN;6sXyTk$3j8KNZKL(nL-vggW0`4)xQj*h~R5CWd57Jpm9
zM$(CvgEwxlLk!D9=5U0L<sDW&1R-M+AB2-L_YlNVy4oK=O(uA@`_E{N<qzXWp~*@m
z_TByG7n=KJcK_SKz1v2+qt~vjtwo#~*2sqA4u6)<UKSQTd$zc!NKkm<u`RxEkqldv
zfk!@<OsdHWi;6yne)!nk&7m^5bVbWXR@U6ovJWH6{7>6gc_(S`<&_7~PanLu%FBK7
zB%AlP#K(_@GgT+Eb*oOqmy}Ef(LO{XmbilfAHH<G{q7;w5M8C)8l9%YmE}cx^xY?H
z_~)3Jm{`BP#Qz_aRM_2$z#Jy}^gf5F&nf1fMMsKGojGGT`V(Z(2eywfbtpj*sHYcY
z^@==6()%I{3(IQPr~3Ni;ts;tH#RBmegobhHk$<7M!TIp>A{0#g#zk!KhgS<(r}ww
zSurv)z8V?M(TxYv!<UUHrxHK_$>&}9%So<YRR(R4L;5=!LvScxruo?h*@oh>KG-?B
zyK91XoT{2y*l~z5;~wslTm*S|TodQqaS)oqtU<JK-&#-c_xBGw3hK!*p{Y5n2fncx
zrR~1C8oB>_a}x^!V?TewB&!L(my4+f3T5nFTBJZyfbGTC(%bh=WXdpmZv|daybs!V
zFw>&=xue)rr5>dMy%IXEO%S{+)`1pbvF3b-8{5P}q!!@umY)BGR2OSWoR_bE7h``1
zARHkyWp~EdpvzGnycK3{R8-GMgZrb1ZZB)dkWQ|i2*7%!=PPS#6bBE6?}1q_L`N{R
zz15v{xFxzE<mF3Ypq>*9XYIhTa>TA@#OwSFEWH2`tY}|{o_g176S*FG1>43MgO%<o
z8X6%3)0iQ;y<j2FV^u8e0}`QA^dC^4X?S%6?k4YkG=k)NSzl;^yncJAqUXV$WLSC6
z07mGfI&uUjkGY-Q7tmI*H~x{?j4iuj2~=Sl&a-Y%dU%3H>P%S0Z(Q+XjXf2SYKW@g
zRc~!=)&4<^AH0Z_U<WtOiP;Cha1<2>ZxcW=Yl&`hN-yQAcv(Zx&Pe)ophl7BlgJq8
z>5ua13Hy2dPVYE@ZyqjxO745_I}bt8Uhu0yh8e1KuYzCLJ|Z#@9@6Y|LfPcdU-lU3
zVQ&I-*nZ^yzKhg%rS>%(J<y{?`IDv1e7!|597rL#W!V^FwrjQ4ot1*bP1J#*EUf&L
z_Y`{XP+()d*>YN8{qNt54t1PRNs?>f1a#EY;WEj1DQ?q(yp;Kd#o&sbz;Z9rpA7A?
zx;r}#kjmqWz`jyaQtUf?%F5Por_!+8YYJ#_zz}c`telON{@$F)e(Vlm$@D|Mzt2D=
zMg8bGxco9O#G|q0bbY4%CC{)6x)9ov2D`@&&+qKhenA<y%~`%5<D)}R=D~E8cT=BZ
zwI5rI4p((EnMO%rI|V{?)*%&l>1LXPv~8{~E*NoP=Kb$`a1~gkx}EL8lG{39Hvxm<
zeSaQ3)$zlJt#00o8{7|fR$>wo<qq_IBF>{zt#cJ0;j5jy4?2L5KOiDEo!1|>Q{LK>
zTya@dRTXHW-Sz8K$g9p!EeBN0*&7T7wu$#V`JqFlMMYYfUlxUwicS^D{r4F+9DON>
zW)TfY9qgiZ8z@BC<{7H2CRr_ZAUPe_Unarg^YU^-94lda5H}SsRxT$i>on6@0*zZZ
zmuGK=+P9F9-K50y!QeO|?H}67|9$GEZc;(7I=8ts)p{OPhjh4Yb*>D0h!0en)|GC{
zE0Pz5K-8JQ0~7ddQo9vu9d>s1$dhcSh$<>U0P2qLXr-BbAcEP_@}EDLPs7exPklB_
zN^%aOb)ETEwgdFdsTdz@jr_B?&WmPsWh94kwQt>ZI*A;#_}%{a8JzPz_<PUHUimmY
zoDC_We*TvBWq>V=;6VT&PfQH@^W)2}CTeE)h?6tCsi019?Sp(gFjMov(-U`9w#guO
z<k=z7*6zCGzYQy^`1?Fv7_|VbVt*;CbYiz${@p`G@W6F9I6eHtj=+tNrxAyJ?7Yj$
zlOs0lY}*?Fz#=sRnU(3Q`mY+sZFB9c_KtuLtu6TZ>#KKb^XJpj4v<83>V{2E0U(ug
zo%mkv7>#w4+PD>y<e%Xpi{9c}Udl&9w;vYD1?llT1!1Fb<tWDXiOks8aw>1?`9SI#
z_!tb(nvlH%N`N2TbI=&noCQ1`V&~5X9~U355Bv_|LuYG#yv4v9p50xF>iU-Z)%OkG
zw*H3&<VDMtp(yX!cQIb*R%uO*3CdFU40z!0a6f`xfeB<4#`ga<y-jc3IuG70oo=D2
zG+oF`g>fqymhW`*^o_a84M9?qHP>(7?y2#v!8UmFcbEEcM#jkB>_)8rt>Pi#ipLDz
zSYkmn$)&#SG5Gd0egibGAFxQ6CU~8Ae(j=n(p2!Ky{LXvMom-l{mx7{rz-0$tysMO
zGk-6P%oh&fp<1_^cf~(W%@MDkKmUVk({^J1`19yG139{sw9xx>(6^wkaUZK|u<FV<
zFD8bMmMvX8d$s9P7aH3}VU*JBtL4p$H3jq%ZXJW=H859yW$=2iqeFufCJnlJn@R#I
z=sa(=#&MR^qIBKgoR?K{!ttax{-mZB<qSp?DG{95PXC;p#qydN{*735$H&CLvr#cQ
z`Tk1wR)oK5vKu|&y1Id(;qD&u-V_{_o<~qLetwfC%5By0`Lj-`+#Uj!E;y%$>u6-C
z@@z=(s5?$JZ#2;EV`FDecM*1+I!+gJ-c{+#%eH+)zoUb*sqUrS;b0a?Pj{RaT{)FW
zrT?-oOeiz4o5@^fao8AK(lp859TUCI3mhyWd^}1@)x271ciy?QLRgSG!q2ByWd3@p
zmEl|eWXMMt{KIIvb!h1J;;@gjv@~F5%l@Lk`?l-boBi03-Erj0ZF}dvGX`zu{l8X{
zoYjw9x3@UGccS_E8xX{2XA{p}t9Sp8Va+4LL_qg<*Oy58#RUhmwQZb5fMM|yR^XOv
zS;)~yv3=)q3hfZp&n!ItlZ|FWZ>;ulZr|7dyw~_rO;y$W1P<4Z#zw_~OtsB&-CQp4
zvcY7<q+NdA)oyMyMDj}kSN{;_;mdm8f6q8#AkVtegK#8k>w6AC;jg-0g@KLX4mM<7
z-bt+FIMqRW$Z_g?DR*P&rT1Sec&k%jVc|Yr9}7FZoM(Xgzm7C@j?Zo0Z%dFvaJs0F
zP<ZgUB4zX;;d{XT{WEW*oEp|--p!f{$!dj>TI2g~$H|}w7~a~LPfQ?1V<U4-mq9cy
zIyx?5zXkaH-d>lqD4g!{+(mVAPceZW8SA>)cfFmRogcm@OU0NTRZ#F>tVz~;V>$Q_
zX>#q;lanG|TlLqfhQa=NRMECl3~K=ZH@PsTLd}Ir!@Q_IH#*Mh0U4Wj16)tRZP{M2
zFm-d2tuS#F_G$EJ9%w$-64&y#MUNX;4wu%xJI<%d?S`g6oXXj$x?&JB-Dt*cHReO%
z(bT2)D$ZrLTb>9hC#+qds+f(wr$7zVdo_^thmxKiS>k4ZcVI1X6b(l0)xTkL(#dJn
zJ_mw5JoKV<ZdzGgyw!Gnl}5z)UVBoa%%u;&1o?M9@ZLSly|R2`F<0LnB9+dr;*Ssa
zDIhDEg(pifRAyIC=*;&e7YSw7k_y2|wta=5G!CUFHw5V;e~hD#^#8H<mSIuv?b@(~
ziiLs&sGu|mC?Sdn7$7tB&`PKbAV?@74F-rPC=4Yip>zmRB5j}&DoP3xg0$q&{hp)u
zz2A55XTQfj_I{oZ&xd<`Sj)p@%>3i}UDtJ1g$Hgs+`Y`O#gtxNI8BJE3Vpx#5FcA9
z?$G||Vwt5^U}d+)-QX_fYE!QXAs@p-^P1XyrMRdF=8S?(g9G)f0FtyCd+SqUWR||e
z#=BzQ2}y!a7K^W=+=jy6E&2B`tq#;CLfy2F)ET6#;(V<@i$u^<m@-6TXhL*uF7?ca
z5MOTR;w-c`zhZ1GD7>jj%=rZGwX?_Q`bNkV&uVxJRjB!MS%IGe_twOo{aE7eD&^c+
zXxAG}><Rj!<xN|3jfK2EVs#D_uL5Y2i7f(_%V=v6VU_ZjU753UdFB@bbsl+kAUAQ<
zU#YDUR`T^U8{ig|$XieEdpw@_C}Jr?$;@I-b%UzZeL#k-=vUg|;RE&4c40%e4}Q!R
z^YbIq>A($f@}Pmi=0?VSrehstKhvkjctrd-a>bpss;bT}O~6IZ#8-)T<PsB;v7Mdh
zZ1Y17)R=G$2)AK=0?v{Rl`S+l1R@^3_IbqwtdRpwY1~}31x;2+MH~xvlalSNO^W;h
zn_>&YDA{%=eNS81P?vL;^yf%@C%IHjlnbs~C2CKhF}k`iWA1wq4DY!i@Sh$@&938<
zCtOsET1!W#IC)Td&CXDE$LZnK=BSaK8Kpvj?3~g2Kwf|<A)_ug&a*<0(e~aBJMGRC
z?kQ~Tpw~Z%7)(Y>Z?~Yw0%4H{RkT$r9R~;@S?hgo0ht(}N%Zr95gZzOP~$vN{u><y
zU@A>PQzF;ZxrruHg2ojJNj^x6)cIwb==^N&EaSHN6G0KJT+w&&ku$8bf_b@~R&Xa4
zy(;TU9au%zsp20ft|Oo%NnI77UL*84;U!qceb=e}ta&EyOc;JwAE<we0U^ni8l>75
zw)YuXy5I9r6S6*W{uCI0d<iTb{A=ZNoSTstcAomwk5rQmN*jJ!@vH9BQ*^WMqotgQ
z%8$^0G-fCk&l@}U2gB>TxxS+7`GM|2PP4!XI4Io1qVHqrx}|{aJbEh47+w<2SAyFI
zf!%VIa5h&TSbg^JJOEZ9zbb`s`HS0-*lW+zA|VTUN~67um>oCMueE9xyYlt*cylf*
z%H}ePH>oSIQ|ng6r%y`pbM`Pk=&fGlv?rWWi;ZA(3>=b5)&oSC#Hk5ixx!c5b)tz2
zY63cV(Q0kN?%ge8<lB^T^N>-A)WFTaw-puY#rsUZJ@e*T4{8eF5Xa<1f?7p*t@d1?
zcV#VD&q=k4?s7X*KI~q6jsqhbiP+|~9_eaN)1>Ureju;}S3W+IVOG5m=f-ni<)W*}
z=JD>T)DNOu(w^tepI3~H_-g<0Zpu@|k`a|rdLHjqt`OZ;ZZzAZbU&i=H5-B_kD~U(
zq<iRvTl`x5kW^MySC=X=>&zCDzu39eEC;|D@z)o|oZQdOUFF{ZOIMt}qzkPv=bhx(
z8gI^YlsgbP>_BkAm01GZ9GB@n|LPVQLUe{bN5KJf#3qdSh$XVm9B=92KEnHP66;eb
zFnCU$%m9X9f<-fvV$N}t>QCV^__AGBYU1?JVZogHDnLg7!@cP84P`}Al)`Jkf;{0q
zr?jCK^9Ors_RE*l(WHs~ME6v!@qinFPPak?8ZjL6v$LadO1!iAH?R40^FBb9b+@k=
z{t%+$oeWUtT5{TBP-v~j62HXVr0QF$0Cvaw8IR5_k8|!Cr%S_ki)TOoSVUL(MN!jF
zhv<VyGQnO&CW<Y&tN=`45}9rMv8}Ifck)QGdxC7k*Sd-29hF_?ok)D?+4^kz^)T!;
zt#xf9G_R0DNQO^JB#u_{S45_%mYjs2iUPREICJNR@<hqe0^zE6o}A`I425LJc3*F5
zfEcfqw7F(YeUWo1t}7Wr5Kx3%Mt{Dk3@Hr}+Ut1wu5iij22_0`kMQ%Q9`DSm-EfA7
zUf7xZ3&Z&$Dk3D8p|;QR^J!AwmzGWEie6QLi!snV8C}IzA?&oY;7omfJJGE5T&~pO
z;v%M)r#l~<^_!sr(F2|YCtnZSKUemCfnD#?Tkon#n~`81)$}sHQ&|CSWh0FlW=L+p
z?s{phTw>kC&%Q@S(uUG5UC*!NyU(YmoxgRRPgB7^{lc3@eR};>k1Zpm42w7L8<i-z
zEl&-+zW~TCMtY!eT9biIS$5|(CMM`EK0lNh=J@T__cin9&#nCf-BmY)OJ>p>ekV|N
zOls&+;wU}8ex(-roJC?0hK>4IF(ZNQ*6!}fGZG6knL21+xaQ+u9OYZ}yM50o=?Z~<
zWe;VNv{h49=3sP$c<KV?030If-{kJyT)9%1<zvuIiS*5A$~vaob-0faZ?(Wnl}#E+
zaBYzQ@{y;gY8A#l{f<EthWz6{-<<F@1AX+B$D+k8J%BU^9-^3}4uSOvZf6HvFHMNP
zSy^xKlm<;zhO|Oyynj(q2RA5<^!{|DA-_MAJAhX`Fq2aruf-#)7fc2~I1F8fGQT>7
z3x6ae+8vm3la2A(j*mXovA54jPEN)`&;^0lA{C6!9#{)4eyE$cU}>qJOqxaQoS%~p
zN@;v^`z$8oeJm^q?fZ7_EHSH=CLH%=uux`4G6sga?>XjYXQ}a@KPfE_wOb7}e_mP=
z=A^<6-}%!cg2)r6HmDsxMHS0Zu*rz?Qsq-1GEgeJ`p0{(nL}!Kmb5|9IS70y-fZ*~
zS`FHiF7yGBksG^#<q^Dt9UFo5flA0(Dy)}>6Qkk_!TB1=7)R%n_eLG^{p%x3iaK?H
z2Ap&s%C4lBvB~}(8seyr(KO8MNQ~~ON>xY*>l*wuuC(C`Zce68CN>Bu9Et6Bif*Ad
z4|&xpW@wwuS#m!@421PV75zbjM!v@nHcaLIc{ZyuU%c3Tbo4g-Q&b*}7Q0P^C1N#W
z(N^?S@}+ug!TFbil)Fc-btXO7dmbre=D!<S8TSt~W(fN7=1WiZ*6g+5-Onk0!hX0#
zTidkfQ$C}*ZPyDFwn7)v$aDjK^(|Xwq2UaV;E&%<&$X0mUaQ#%5bH;Ms)Ta%()}~X
zMMbk!BG1A6LUhazGd*?6gZf!Q!z7pM$HYLrob;*V$Brpvf{SlN{{H2Qc2>MK(}aXx
zqp#+WGy>gGo*uHXIhyKacFM(dnq3G;x&JA?s1RyF+ukq57|l}D^RNAK;S*NzNOT;L
z*3Gw#-0shEB+b}nxtcE!E5(}eh1n`%FfV`MIZrx^y3v4i`3Fx%G0l*&-)6lO&`x7L
z;X>h@T}Af<<}7h!>9vfyA)D+#K6Q408OzC)B5bhT;z`UaFiTos*zXyJlD2Bqt+rRG
z-#rOBf!Cfn^qyGVR9_W#lbc(fTA#JxXgw<2?eF9~`@Q*G)vgZ~I>hGqDpuy#tW{kj
zoui|7zkdD7X|st}?if8IalvYB+yo~<$<aM<dtXmYSmi#lXnZJF5Z8D0vBzvehvl7*
zXR*|juK5z|xh?BptAn&doDh%Pq1jDAPHmhL$4X9o`udgk4ZTOQel^Ny+MPN<CZiIr
z{Pz`YK~KV+a^nql26s7}4Eph`tK87Pw4@-P;?cI`9~+dp<1P9)e!O0?4V>Rjok$ls
zY`__CG?08kuseSuK5N}<Uo=@PWGYYf_JBoP!fW2g0Zsy(m%}5Pxh331hHQ2RklG9?
zhVFIk4AWmPaW70s$GkA#jk|QaRG18HOZ{JOtyk@*{j$s3Z*HaiSL~kbdi;lMmSITe
z>^cvN^ganV{jFPDzn>-jpSyq(QqAp$4{daHUr|8Qa0)lP;;s32Io{L+*GAM3cdRrP
zKfqv_R>b(KXGS}IWt$1}XN*?~-$$FD8t3!;yyM6ZM};?@cmMu{c5qJw;Wi-ULPSr2
z`+Qp<2hVo$l@GKX)D25Po3<86Po5hT&IYN@aUZ)`*A1cA_T4in<cdpxA75ryWtvo_
zV<IU}vMC8~hEWOX67WTv_LAP_+{fR(9S#vF6t`-A{e31{Y#SqE!R2q2K(}`B{`?wq
za__FNOBVBhA@MUo7x)C!;)(GV_57(rSoHjOxp-};c{39eQ$Mtbcc5&e*M_XEmQ+93
zUTTJ2>2~sNei{xSdt?_gGk6-2JgRP7CS3aj%+;QSC7Mk}ojC4&=Z>KMD{#r))@I9N
zvw;n_%uI|9ruNLtOzeQ&r#@xCU2U&q4kF;G5B9n`oUm+PI@|G<j*NI+AMmbVWDw5i
zIo!E0TT18xVCo9Ymh&QJKEvkv^rFAxjyiPUv~frI1+k`72@3r4H5cS#PyM-@cGxEO
z^z?wU(S&)bzlO`M>%}*JiW6qmn~-9I2OE+|`HhWB2gWCWN4VB&*Q}95HJHaW9cgtv
zWZiNVh^jMx?i<W!IGuH$59SwyUjF{#!KS0fcezo^&R#NmeB?8f1ZEd63Z0;Beg)4R
z<>#M!C^Mxf;`aY`<O2aBia7c3j0jH3pZ~FEfZw3h<I3j<<ziPyK~h}6txfXK1f8J)
z$cYR2nl}a&-Mv#YuCI9QS@A9wAlu@d%|9ks-QA;s0{rby2`^x5`jE|)=aJ3^mx~uK
z9(P=VrQ#OnCnsDFOG-9Zk9bRJ6Ym!A!TN=tsp^J33C1Uc+ZL`Bl=q7Z3-PP?hQNK)
zs*MTI0wmcWI0i`tcH(w+0vair^mNP*fr%W++z{{_o4zs0bvGR2jXyTf*n6vDZoZK@
z$u1>zsw7VI@N9eFZE$vK9$k>1{J=;W(_jN=4LwE_coLG@%bR44jbqEpd2`MBiH+zP
z#YIF!NX-tS1M>Z$yce^ONP^A8__XI!_Fvo9-&87Ne?T#Gq^=YZbdJ>6zvhM`ke?z{
zY%EsthDTn+8hh|{g7v9-Q$+-BQ-*XKCAlA|pF4Q)Am<u%U$Xl|z9y*~96x^EAuX(t
zsWn)naQkAN9_Zm|S8$|ff)oE>&k@{Y$fM-XoJkqN@)dN6VEIY&=jZCdKMDJUb??B;
z$kxEj^<J+F6PGJ=@67)28B{KzDvU<xtXQ$UpWYTP6^2bxGz%-MPKu_-uMb0jX1i1;
zqE5_nJ_XZ~BoB53)HyOok8;B2?P|v@N;i1AI~f^Spoen!J=|aG890%2-Im(b1o)%M
z>=8-?$_YfPwl#e{+EYu5XQ6}%8|3j-H%&g5OJQ`3xO5Va3>Ziubj5DWFI*<&&3aFP
z*rHuXvFBeFhmGm6L!<RD!QDYVB*ed(yn*VYy0lPXbbgl4liXdMnV%23z;SBx1OJf5
z{LHxsp3SRXdsdf~#hv!i-neri;Yxo?{!oe*EBbx`-!E_W!^Y@D{qMq81qIuAe@@`2
zME2`Izn;McN7zV&B~pF4Y}%v@3STxZGTVH67D$%!T;7F)4u}`8`m-c4q7EMFR%~c7
zjeh?031A9HzDZ?l>~n9{jSzI;oe;F|-VR}CORCo_bLgHwKRMjm9cHw1hu}F~Q_X;j
zo8W}FT{g(geeubY!H_)m_IvMr^8QjHiHjD>9+mCd{mM&QtMV>W)%6?`!~-IW+?aWV
zug~(b8z}%T?icA`<vA@Z%y$0#6+1h-{-Mv3gfIz_8xkK1kB+OAQbNy!#TZa;EqrS*
zVC6ob61V1M*$D;Z>JJ|z$41ooZvsdz*k|9BXL|W^@K3i>aUXt^Ub9cyx@zQ6kx#wS
z<x$~TFQve(O_ZXPZdV51n*}<B%_@;wSBR|k-RVo?cD8<7qso-i*Vq2}lo6$0T_H++
zG@S-e`X;UW_TJNTCo3akWxYv2WchDB!+L77wo#XtETF5~f7sNE+u0Ri<CRB=?|TrT
zAxgt{(Cz_ZV4Ut|b~r_LrmXFr+{4Ohb?MTxgg0yCfWeNc#PM%6&982d-5H;7l7l1m
z`}bG;L`}^zfT_O4kx!A$Evyh^K{`Pvw_JA;zup?3W^_0?aofN>uL7l{vdFx>O9S;X
zy-bW71G~!=b@q{lANcx;h>O>k2Kc2*DTu6D@pCT@I`GnOXSrExcV;}<xnswUo!l}9
z9Kym6KQNA45l#YShmnmgw)0G-4E+sm?qz-LVA_tQTobIjgcu`ErK{?u=6<Dny*2d?
zynTDh-)|{7lUFt&u1!|XFgr8zFm*u7E++j*66jF8469a*rlTHwI`HOZ?3`nW`a_P8
zhu^8{$3;Y>4jj-vyHaHHqT>7A?`MtHYhHVSMPK-4ps0RbcG+Z^+)YV}x2evOJw`;g
zz4DQdbniN<>>8@u^}M6Bj-0d{+<64Qd;@;@8GE@?ll-v-tPQErarKm#F4<fIo&B6!
zJ0ojLZSFmrepX*!;2=211cdpg0SE2dFWrnKy2Z<F_8_c1MORK{T=#a(1kdWf;9$9Z
z-C$y$`^yFyV>O*)n&n>Q<caYpkI#or5(325uaNCI$-YK}W0EP`BUvqsk&od(kfNJD
zuR0XAN)Wh`4e5#A1@hjqca;u~Rf&%sf`FEjcHt7(mKoh%ax)!ZB8p6Iqg(kia&*!?
z3Y(zJ!)!Bwj6%zs$t&rF$^&Dzl}j1U7tr0XH12r2BUWA+)G(Ec5x@??WIov~gOn2Y
zikkzYPma-6f5~ytDD~(Q_?XQ*%lhG+QOQcbabuXcW}8aq4yUQXS+uov9oWpeFE5?u
za_!i-nq8nHTO3yo<dD00(?Qq)!LSn5l0r;?A5ik8_fIekalFGy<`Xv71Q~Fn<|Z`O
z;q~LvaGB&sPG{r}{$LHPD+e)50UkY5k&vZI<D|f92|mvnw1&sezT<5-DW15Uk2C{g
z=>plAiT-S8C1}wGI0#^2T^%NzVeL}E4__(RHf4T_Z?A4EUI&QU1pI+#a<Ld}{P!H|
zLrZ|&#_!g`RKLk-PxvrWw{b{^bpZa4Yjc{PDh59S<fat0{XFIX+y=fxy2g(~R_EAX
za~%nFX4QrPAMw{hF*o)*LlMP~Ujuys2#^N1{DXqr$9w!SXR(hjQLCN--dI?iR+lN=
zg*}i}%PYgm$AG$?yng+fPs1ZX8XgTH<Y>t(ZY=AfqQuF%*S~=kgQaTXkxK4zeP9MI
z6MaehzPQX%bHVe17oON<wX=<<JBQ#~7<tStJ<-geNgeDtM_XIn!s}IVAjZ}kG)R6`
zY}~j+;T;pN8a@2w3!UTe0{oLip-9~!5c>OjX6|5@*z+3$gH89dPLpLtI=tvPOk}Uq
ztTV`ourz{>Zf=0=!w`Mcw(E?V+Eo}%BL?DN6)Ee1{dpbd;w>y<XZGP3Y7mF~N8W0J
zO05wG%Zq3Q<D%=gnt%r<3Y?CX-YYSJ$(j_U4qp>Adm!I_Gx9iwqm2)Xif{fAhb}&o
zyg&Cy+Wiht;1xxCE9gzC3W(c-`*!Txmwp74;drHR5>Uf{HMU*lgw`_Ztai<X`jlb%
znix(l!a;yd3qNlgdM>*wr97zFy<^8-mbvQQ4g{rD>?XQ(BZaIT6R!JYeSk%M3%HR8
zZrQKiJKf$0^CEeE3`E>I=`8{JoC54Ohl-~qtMvEpe|q@vH<6KNasph<gclQ|Nw1v7
zi1YyipcM%dsKNRZz0vE6i=yIQ&|mubdWq!1EYii~ORktqX4=L>+WP?Z`WrXuus+;-
z97a^FD_74cQl(tP(wBiY!=DTZDRV|{hhP8r!E<O-%k~G@al4o~eK)gC!9JG`%e4bR
z{>-9E&w7woiwTxlasuR=TIke>lErqtQE^|ZWtJhFEDc!CQ<{Ohr{cZA1p5~5(#!qY
zR_Gain4{lQtcq7`<lIdB_45rI(&?~N|3wU?eCg0islhYfa3Vy_>=Nb0dayj{paq8$
zAs(Y6Z+K@DXcn*)4pCix=r(3%dySwP0rl})hLI7dfb>34=+r3x9MqqQeJHKQhOQj_
z&Wam(?C%8#TS%9(va*87w*56)xvj5Xv!jViIZa{)IOE;SD>&Y}tev0)1#l`?-`Pq(
z<%l{v`y9Nfs<+ohF|G(Y|12&HktoSk6^yAm(=ReJozaUaWe9z1Y0*z{hWUG#OBneG
z*76lT1<vSj*R5Me1HL|d0O$1{NwV<TujtNuQn}gLAp@7N3@<8<=FFq#uQ+Eq*0tJm
zgL{HfC|9oZI-dnJ@D^)A&KRUWNsUt@*k_%oaALe2)YNtqu-&H+fkeyXv=lEh^|VLX
zYh?5UvOOPF&g~L5wEr6Okn?CcnW`ajF+y85?`=)Upla^<-1u|i3=WAE2f9pR%IN0D
zv$UtCX2~b18|#brW!<xvCg(u32q6|;+Jj)a04YRM2&~Crmb(0d56)l0ps9dpOLMZz
zG+wvJ@fhkOLAno6b#2&r@X@PrPBU;Z$rmoXhNg_#Tg{_d70d@2dFT8zTQKif^{zwI
zRs048IkeXXeh&u;-)!cmWXLm1i$2(XQ`9)$ftlH!WA3Aw9_PfngU5FrvE}5`bzNo%
zlwzFb$mB<dHgFXahlcL6HE|fuKm|yW4v7G>SXeQb7Ygn9&8#m8f-04lA%<7M3(Ll4
z#Mj*~bUHxB)38-e17yUym4Ls>%agi}>{rHR-WkWLHvVWyC7=(%J|Qhrv^hztmM$AR
zI}l%70ep}YENkLQ%1$lP5%L|XLL+e-4?jpOZK+F>-7w)8agGjO@Sap%q;P5k$Js4h
ziiBQSUcxN+=%n424QZhN^l}>FmYkB=igJr5H&OX<!_?FkaGrw8lA;@k!B+!q$I(mr
zY-Wv!>FqM5!OdQ(;+y%$xGEX2t68qzjVmbUaMaVowKW)5?ltRC$6?C$wed%}--%mj
zHkB?1xZT3cr@MAjpD>&B^4#wctalWfh`y<BwXmrNsDJ0;JL#ZGiigZGyXK0rfvXpO
z%B+@`zf)kW=AioQ@`Zoy0zN)~RrK$!uA`RU6X_euK0o)9ic{g@Q;~MUm*yR79uSuE
zowr=ze>3YbM``hr=+mG)c6pSvq+Rq<fN$E{%ZoFw7{zE#mFuCyNZV8Q`B2hjgBL&Z
zK+b(CgOu*lI1g0j3l&Zn>zGm06Lu&BQR0bpDSBEKe#D00FFt-mvLm3?Ir|p%STyd}
zu3vA6zgiEsp}4g$1LXgv&K>$SN#=;8WD1@Xtl&c>FW$P($1U*-I4i_)$y;DY>;V4>
zs&0{!ueChE4~!>uHaxk1j$(<)iDVlraLuA80i$T_!wk)5P|%fcw+l{XJzoqCbaP`Q
z!TDw1TSwqhes(K(t0%}Aw_G&=&UO8K6RWPSE`op&HVxLHq45(gU0lqntD@{v@p+m*
zvbpVY)J^DmMz=9kaXBl^c|5FQP(=IIlY%p#pU1>3?=nZ@&()=0;->7Idgnx;ZFj*z
zi3(*!YbN`&=YsW2dyRf1T6&9BKA><WsDwTNnZ4Y!#AzG*yDSOvUdoTQHKNu(Ue2R~
zpiJu<7?6z!pBrjwPVGz_CN~Lg*)k=fT{Fp=c0;-;9*jP|iJ#|EycXu_y1_$oTV8sH
zV!EWm?BJLIG1>^;wE)frSnaLJ`vR%<4aU602fWvI)Zc|!0J;S^$Ec@D`Z<@?85pKP
zo&!rsL|n9|I@-wbeFXM-aR=N6>i8C!6~nF%)&D->00!b2+IFg~4#tFBD+k(#icfiG
z0XLbRNK-Fy>u2+rssHeSc+c3Na0yCCc*&s`^9EnQsy-z-J=3uGoNCmJ+xTZOH2Eyz
zQp4?@oc<WMQ_kl#zyl+wQmeH<yq*u#0nnTHxQ<V*5){9p9e69Q&Y%l?W{r5=15f3O
z51FInayqw_xKCrLlr&zMGBvW?c5laTxXuZw9=E?7?>VIAPHIrR$aE%BQXJ?%M+Xui
z?(j|PWnP-yxGP=h$x(!#x@CECcJfzTy)N`U=452JsAr%RxP;*nHv2&O;LMXa>HWe|
zPp7E{1(GlrOitG}Iw8ehc?!&h^M%(ZLD^BL33|dkMj{we1Y%@vu2HFQYIhTLK<+4E
zioMEZsl_PtiiHJ#ByB@mLE1!0icat?T}Gk+56t1-ynAQ-=}`upQb6Mmp=bI4Zh=*I
zWqauYbt4Z?B0lp2RtZCHp>txx0$zoVztY*8^G4>at*r+J8CPMB-nx6nq9$%+aA>@}
zbos*Q&uT;-Qr`N38Q7X>+>7W=(CHG&jE-M^>t!RLZ4aZ<+l-ze>af8DYl2Vq06deZ
zi=ot=UB7u}1vuIjpp`2&(OJ>v_g9h!D8TKBOE#+mReo*TbIU2A&^b!o*Sc7O27$O2
z#e}-jsUgjXM`cg^k;<I}DaE4GoZATtwWVv3YZVvA&G(>RmD``9%vk;SLYBn$HIoqn
z1v?b-Rh#Z<wyjq$2zfZ>J971rlPgm|<x{VVi$A2w+tiE{v!X<_FWFgGuL^A0&{wWo
z;mS7+5(BqD>;li9mFv=uQ`mz;2MrN*TYYY@+qI`M2=REual~g6bJyTtT3NK+F?dJ7
zPl%Xa8-4KXmd9{tv2M;eCN2sYghq-tz?{j6G?Ob=TszAuutf&;+~2c#{raQm%_S|Z
zt<_UBxeM$tj;+XIs@P{vyiHu-)A3~ux-aWn8@8sjtV#HqB4wPLuUlDRYdUFIG{jtO
zw)avL!7H;d-L6xseuoVgHz7@}&6>`hq;lJWVOftw$%xt3cn&xX*VchVkr1&;n|N?G
z2Q+*ikQ9nsCR2vX^!CDa2F@s9EOS@Pa&mGOW_~@ylbi#8b7%g^*9_8q!g6v3I?!C5
z%OZzM4)*n_rPPJd_NxKm3RLrkw419IdTWLPzB#I-<dE1stgf%Kr^)ly(*8Bzv}?5u
zy9S%cT)IL?DCRi)lN|OXFOv3y733ZNq(J{&CUYG;xUev*NMzwUrUQ{TmcPMucs)xp
zM#jtD&DhYW*eh0)wbt5T82Uqdn?w8V01$!pf63AJD`|fyizDWf*1}~f)rIux>P;bo
z=I&4CJpN}NJi&QDc5-r}^@J}iFI~8Bb#lNTT`OoyM?Dt&lxkCT%;4Ew5oA_T2CHkp
zBd&o5ym2xY0%)?aiH2?jX@1Sva){gYXMF0fg{Rpvu!JJyI3VBJG4B3@2cVtw#w+ST
zatU7mwR~G|U{}#6Tu<%;{URqjyMFWZ(2rlh`!H9Q@9eG!D#QZGd&4nodLc1rtj(Sq
zZk?Z-8Zu1N-9~5QzhOVVPr%-p`BL4NmJUPB^{@?s67CI*0yzA!_d`m98W<QLv{b+I
zF{F&e9me8xZW4}py{wWGwP*mqB~X0(Xw&0}hzI*lXugfJpPV20%_=s!Fp#<*93*hC
z2%q)m1hA$CUXuIfw#>ly%zBJCICwbykz;_2&_F#*SezB3VB|DBe;mrE0Rzv3k>W-@
zPhC@^q8UeQ(y~_7r{u%0SVT$+X1dm_iwlOESf`RLW03d2z6ReR>o&+da5F)NU~FyO
z7DreFDTo-my#>It&Wjigkj^0r1j~uep%aYpSA~Uy{Oa25JDS_$EiX?oXe7@Q4!=M!
zM0&bVLxVP$31Dg6**<M}JZ!15?865{JS#B9){W7yp{u<9S@y}3po4MbmI2-;#0GCL
zF-3EX@3`23^>GCwW=b?*dc_4k{{Ej~yIUXiSp3Q(0Ueca-IFdCWM~~@)6ItuGlECz
zF8Z2Ly6ZkjI#{Im)3_`f&I3B!lxpnl@2>^z#Iy7$SZ;TARb&rnBsXHUINF>)LC{9D
zOqk>o37aSw<b$_z-=;M3=@HnkC~_-VU#IuN8RW+zt}Zc#Rx<L*9&#b48^40gpI3qX
zczH;bioX?q@;3s1Rd}t?p+jm`^qbu9dATO@8n1_lCO$7KKVlWpFX7@m%bU!t$gpV>
z<=nGP7<?-&bkCiG3>=kPf5W4UNCWNH6&2UMzfhfIJ$>rbjyMSzpwRBcYQPpCVNzIP
zHo*dY$cL?`LKYMvXuu9=olK@KV&CB$(K5*R9b3dYs5nzGtEY}pAw>t~p!`{%e$UaX
zx|g2D!Bkmghp^$9d#*Ll)BG5XZ1oY^0C<M{y|Pk-m-kGhoWx+?Ww!0x?SFl+;*wq`
zr2Ar_K9!x0`Nlt<YwSj0hxIGk<J<*PQ}BvwW6$!KgJ2qg_uZGtY&Q$b(PPJOe2M2b
zarrqrX+n_;gF`Fe{eb#!M|&Ewcb6fsYs=nq@wP$+g~2NY4}SXia9J7_Ea!47aju1a
zux^z+Xi#AB)@uY^*Tx-i9OE5+dkE0!+)$o4H13OCLDF;YFeU5f+ZKNk5>U%F-NDLw
zh2M+$jqIx8RhKFM6qa`>3eQSoPkxY{y-%=k)u?Gvk(;H}^KN4wIH7=yL%CiQc+>H|
z<F$gIy@-vqw6cmXl`+|c-G5@w;Bop3bEO;mi3i%Rc#6~a)X+0Lgk(_Z>dM{b!O`^E
z+<#)RImcdj$%d08bz*vHN^nhDvAZ#Ny7T7tT1GLJ_llnf>EAvc<`*%KP~@ptA3=^4
zTFJfpCC&6A@TkxK7lT{D0zm_A^nV+|<BwhS^tqMF<YALa&2B+hqK<<wR2?m&`gLiv
z<FvUa$On|2aNCBaO2Ih-n`|lffmGUGBzrwf{pMBJ>Qa*s906@ZNZ!{><3tP^40~qs
zJ&f(`?XgjdbBB(QcuqkQ@&bd(+PakPd^jG_9?2D1$Bns)7Z<1ZdwP0003t$^iJW@`
zhmSJu49+Z!7;K({lVi>nHqk~_O@-5{{Y_uKsL)P>6-CMR>03P(C%=OxK0UlxGWTkq
z>U0ibdPQzh<bixZOo{zdNV*B+jNrAy481;g4YaY$B57{38+Hg3Ft9C|C@9>ut^<+}
zH)}o6N4)6UK|mX5HgSTon8a{UvpgR=H_+!)i~3ft+ftX&{`FgCjL+G6lPV8dv%i9!
z6_eNul;|jeN7;YMQ5cxHn0U>}moBxuxOls}N+(GbrvPxuD11s_fysh+YS7rh`}|6V
z;Rp=zkUQq!J~x3V_E2?^h3+s8XkK9=cCE8)41IAwExW!l$Gjb}?w9aWj>9duhzRj|
zwPYL54LR{g)OumvLm4W2ft#?|&x~&SdtL8O$dK#4ejVK`AI}af<+RUr$~5OgniU<q
z<7#RWlwtU6n!>c_`1Qe`Z*HR=!I&pk3V2#M3^hO(m__H%`(+U^Y*rAwX7xeNjF(3*
zQZ6g{leBfqcl>3%s<62_ha_WsB3L`9=e4j(q${QjHfG?MRz{|fka=x=y%z0e-55O3
z%I}3?Y#{%Zy81QmLWIH-2+DiKuXW}PypSYvYg9QVLn$B%4-D{zD@R94m*G*f2nUY-
z58(c`y?z~|9xFdki%^{R5>X-X`hOX*7F%<3awbM+c(y_vucvJa!4A!#V;?AQ+MSF)
zmkU>z!-k#~y$i2B*h8Zvq@AJPg%jZ)R|#56D5U#a=iQlK0dHE^w0?cv-kScQ#WQ=Q
zJ*BOKyO8^QUBLVzLhYZPUKdVFb;EjYsNs3)()XV~*`Y2l{^gkx38<7R%E`&e5AZJ8
zny8_X?P*3I8hvaM&RnlQKQHpgV_XIk>M;CNJUl$G=qhq^&TDMTqMbM^vI6XnlXJ9E
zL&4dxw6ZHGEUePdX(Sb>7j#sH{F0|zGb3Q$2+a`0QJ*6wZv%@1`+D*$%`oN`%{M(&
zb1Wbc3#@xKY3zry&iFE7ze(Z=y48XIS9eiDLV}O~`f!VSrKd#|AZr|EwIkYdU_UMK
zM7te)h=8S6g{}(MY~On2wD$e^KqAlm3K%+|EY(!4Ry?%ufm5mA)hielJOgmGb7#+7
zEC~F1IhVh^L9QM`SFn0xk(}75qtggIcX<*_@)du@5!$glGljtb%ErJ!*b_k5JlFG>
z{<x#S5o7d_TUQXyoYWkq)JZ^OAtb~FzF=(o5d7LwwNj;Br-adUw&dA(0>Ob3GbtBL
z0yIQB;>P7n0EWXi>oN2K@t!Np&Q11xLwT_QfiyJc1YR6GgCNLa8tdb9C`HGDD4A-Y
zCi3oM?+*zJkAO^;YN)2!)0+D`dZWLP?xE%E>a}h&9cQuJr|g3~K4s@22TmoT+!)+l
zF#F59%>TT-gsw;9?{oZ?{lI}!1PI5Mq@6|sy5@q#X5KMmb2joZbMW$(qqVQ85jk0y
zrV1GrMI!6rg9jdSb&YS{7*fa-cX>HE(D~|cMX=~UIo0|5cW)OtqsSXeS!a4+3jgaY
zv=E{)EbLtA#Ibs0=g6g>n~N4%&+<eHcri|i2#pkn=H@z3h7!god$?S`e*1Qk5CwVw
ztZV+<#3mK_$kTt??((kxs5|^m865xP)8j7z<bV6OPqx#&MYc|JbB`1RDSy60`5M2F
z<w{87A<1reCYOrnO;j)e@oYd3Z>y>VuDP}q&0+<ZNcMvk9FIGg0nh*H%QcqlmX?;#
z<ip=x^@9}$?fK#DXI;-VSf9Q(Y=U#XKTlB$*-goFLGdC?!{0N<@f>hkvjK1Zo@pHH
zci6t~1x}5IWQ~vDz0PKU83sRwm&PBrh(IS8UJ;ZC!?-L|KH5CAg8T^92b8t(Yj?9P
zC-fbNE|W1QY+WYl?YC@9e;#oN`WU36K7^xEU6#p4XA3L`$&cLUw<s{4e|5El%61Nh
z<Cd0wEbD=4+b=J*!gz$A_QwVU){O5t#kYyLWz%}6!xnYr=vjHkdN&hUfV@9dNnmvn
zghlAvF-T&9UvbEdr$7Zdh&ZO&(q$jeIS-QJz9aW0_!WCz#>w0AQ&TGG=_V%m77QdS
z0lgY6?ViQydCB9uVAj?InsL24RyKWg$@j&Ofi;zyArHQUO>2P`_texBV3SCcva7P(
z*eKmQm<lIslv=F9Ay5vAUx0Z>KLUn)FigUDF7J}uG%P*B_%za??}Ic3qP^6M?>>lN
z7qU||dM?GTq6SP(%rk+fyq~}v@!jj!vgYt-^Bs(b0ZQd526)gx>jvT4o)a!gktPr&
z;xh*6VH5GnteP#OH68C6Ouj4S39fiWqou}Z76>cY`Iv3hnF)8OYKq>BTk2h6g!Uw4
zNj(xlYeBdHH;UQ8Y}Kj|0r=GAf(z6G=&G&g7;LUXy3=(tN!<7E-W?qqV}^R-zM?PA
z9K^-s!>6x)A9)TmA53Y+uWwXCr~pfH2JjTvB&^f?vR=FhSh;K0E~pvth{Am8O4(gu
z@Y0ULol<6DG)S`WVRaC!`0#R9uI<5t%*)${JqXgMSS9Ug^jLYn-S9w)MlscwM5aVp
zlDZM!n7XnHoCv<aVuD*~cPV-Y;ZncjFQ>+<myaFP-ie3B7piQ%-tzMGT+-ddE;yIz
z=nNK5yCk1H>^%gVzCn~dR8mQ+X3gX@tf+4Od6@_mukTmF=}zk{W!UYMI2V6E4?n*}
zb(BG9XsE~@X6AgWAKH%7L}>qUvGsB-CUHh{@+E749&%<CMG`!q@ztwV!9xXJDdX^M
z%C%`%X=W9>3^SL@R#tfMq^=LXLYIT3ta3At^4u^k()`q7KiI=Eu4Q$}wXh|jA)HY}
zKFr@*1(N_U!^O-m!BCRrh@~1bnfjf}1K!klKxKs;A>Y_BjfA}1T&;~!fXp<0CuJR_
zuK?OTaEeQJU~U0+hj5rgD;mI6GHqB56GDP|j=aA^g;kin2YA-u@d%591u1sd5{D0K
z{p0y?_(7k$PZuewT<`Gu5|wYi1(oA!$0_V*;5qaL&+0gpO0kc7oP~s~fgA8yv9uh-
zq1n@8idP*2QWHEzDR;S!5o<1V%3&Q;0@0!ci)Lr_@J4$2l54*b=5m0-(kBR$;_fck
zU%mQuar>7q-tituTXyklg4=u>5BNY`GA;LMQb*)4;Sn59EWgH-M97%1VmfuD@xxv!
z-hqn>e=Tyu3@Fc|quIjvY28Y|6Tb~!bL;M>)GSJS-MO>2paa%2T1jfOd`VN&1j^le
zyM)ta;#rcswtu$w-?;PBd3b?EMh-y)+SQ|d5pAaLu5EkvkS|_LceSv#-Y<jMkTFBH
zbBW1yX(7KW2drqc$1W}n))2>1o|PZn*3+|mer59EJ6>KyHKmJ%ZJwpmXo9eeL~24s
zZT9eJhtc0M6}*YwYe3wfu6Dh{ezho~w5G6RN?acNjlpFf|DMUw?kS_psDAb8=oK?C
zfJ?TwYp3g9Tb!%M`Wb#6S31r4;jr9Ysb#Q=rs@T81D0zc5?MCjv_0Hs)m~!t<%!YS
zEqgF5rpss(-RKh}L`Cf!98Ne>gVW`-V-T===MLXu176xtVWTA+@$O@tv#_B-Q?6NT
zznOOPIRm~-@7G*ccmE^rSYB9w<kOtrVH;}gZRRv>uU>^E%2B%>OLQ7>Dt*7kBNVSl
zyUl!UZH+~_=a6^n-;sf3kS`D9Kee6j6{VMEYGGgq6o0%o+6=qwrj~`xBdSRV@rElm
zUK12bT0#Uc)PW?h3Sk6$a^MO4WWGhm!w}=$9ryh!5f*NWMNuF<%23eT1Dsm0a8ugg
z3v?m0#R(S86%~Yin>W%vc)#9$%@O9K7Io_vi+H?GR(K8YM#9(Nndh<xUND=Qxa8C;
z=E4~t_wC!qrz)I3)*J2FoZb5n8%9K$ltA(dMX-ugcn+?G?j<dF>69+mo<T*0%j>#s
zWi5Ca5wAngis|P*S&{I#Kpm48sFl_YX|p|_&j&A;8W?}@3*|S$^8@1}(QBP+Cf|xy
z96ogD5zwwPXT1K6Umw3F!d7k@KJg7xW(6m;C4qslXZ?oz>Hw$aqc4e!G~iDRb7>CZ
zk%o(gi`6%{Fsl~SM`lkSL89)eRjc;y8Dx66Vbi9Z%uE9H%o!u2c9?`*b>8iJi?Ujy
zR3N9Ku@O;UhRz$QjPS_XvT-AluU)FrR}?Y-8((RbDU#~jQqkeRspx#s{hJb_f6OC_
zhR&?&cV&CaiM1P#a&1+K2E#A6=a`!W`pZNNDY3xM16%a5bUj5%|5GXX=0>(~V;glw
z_Vs-~#oM&Ia6_zPP=xk_ue|?PHcuvL<T!-0R8`aDV}Cxd68CBWFWh^pZ_h%c$g+P%
zX0izL?)8`sM9@m0m#VmNj^E8#T3QtYt|zpD=tH{&XXfV>CDEno{P`W96?;$1JG_4l
z!L%X^E{PYTXL%pZWoExW@`*^S8iWJ-u(smboT3W0<V)M`4VYZ`KEckm0ty2t>htI9
z5rN9cfjN`?9hPu`_UBSGE8xBUr*gzt;qeX@<GrRxik1p~wMSROicQ?YEB)~E`nPz+
z+Hs)ve%XtUw>Vy1jFSnDjo?=iF76~eglkc4JtHvBET^$c4v<XB*D#p>*@gt$%aAqi
z-Grh~gN?DGWTsQmx%@`D`tzL$C8v}7^9u_xXmSAegKZRI>5tm9WneHBAr?d;u=V-5
zC~RdNe>W`Rn65dBAf}2ZB0oDx7J&OONd_*^gh3Q8gMZ(maQC$qR%4n%%1JX$BJ4Zs
zWxkEU@vzvXcw|sN$GUay<HP6xXV@7F4#6kj_BsZLkJ9{Lir9<y;cpA6*U!8@p3~`Q
z6r*E#-%}hAG)C?|5q8y(8OCRR^;%mrXypiy))TS*LUdYH8tc}%()-|OBD!T>Yt9+L
zZu{`H&Y9zmal?(+SQViWhLA2a6W~xfH1E-#(y~Kl@QZ*UMF402uU|~e%umbM{E*0P
zPVWV7=v7<W;5OWu^s>YfxH(|IY5()}N|Ji;SKe$dSjHtG<2)VD*Y_7sG2a)v%@UWF
z*l3u=iU5=N-eX>*MOJZ(E+mmT4kqQARJ{b0MmVY3jQy^#D)<i14NbX~9iPs0-oFTP
zG341n<Wf|}(&;u=bc>>g4+jqN(8>Bb<8!KUr;_3=fC-|6(K>J}A1ZEjC1TqKH=~0>
zM~=uxRgx`ssGp^@b-eT8G=yVF{25;g<0>qCocq3Zpe;ayP`OhuqDl-N@yyZ-iVky#
z<R~mCfcd~#mvks6e0`JuyzF|~bL~EdyfxOe|GeXcITiK;#}Oo&%mn-fH(MQr+$h^L
zgq#ikeE8U6Id)nibLpyuLV?D88iXi>lm20~26GA42Z-xH^{h9C8Zz~93BEJJVsOP=
zaJk@eCT#w9hCC>6f`K`NH>qKT$t&f@+LRWkw;7lN5{V1-CT)W|w}UPbFNAL%de~Tg
z8I2YqQed<YI`zZ_XW-8sZE59J7Uo5p@%X;PEec=iJS{F?j(Ln;-W6taU*E-2!3vN%
z@q2*Z=g+O#5pTmTbwFHpGMy1`EU-&Ny}pMrJyp{;V{1bHGZA#qnA<0Cu-OZK`SOJ-
zDkY_#Vn=C`bR3=;%44ec(cFg18vmHI{J`71!1W^ZHn5Vw(l|!?gwv=^YZ4edIEj|S
zjDQL_mC#JtLl17=w277=v4Z^yvE6R{6&P&D-S;Gg*R4hgNGQ|U;@~f$UwGXjZ-v99
zf9?Vp_6S0CjRuJ3F^{<)9Ba@+@I-S0JOrx9!oosan8yl%=1XVLJek+7{pr!+Um2xK
zY5GmYP|JyoU<qJyQY2FfW8gcqGjL4~itt896RIaYZz)^q;m&d304{98OT`q>Ey7`9
z@#I*xNk7ao!m{FWb94Vb5E^raCOM%lMM<28ot2^%s{QxWQDT~t3eUUqLu!>Q??3SC
zgL`d`c{b`Gx=4$WwiA?(<homQ<1|}W*pcVwYw1H73soA|W}+)oh1KVXExQk?QR1YA
z8Z)Bnb^vrJK}=EI!Ecq77VqwCrX0aSdjGZwm_4Tqkpd8(_3sW=ns6<ho_00Ka%(A9
zgEz%!(;)(h+gz>k4pv6Nd0Y4H9l}39e?m6(#HkMbDxms;>?KW<8tfbs5|;JXiyb-y
zUJ&;iu?obZ2k0gVDHeNvfPWMxImMW3191y5DwzJy&dnV=)+Ataa^M4X!>0fAh<zMg
zDMO_n1w1R*_Wm`i)4aq3l{q65&3NsN^&E2bSsgzDh7RIJ+QwokWz0LTtJ^2@nda#&
z3G&oc$LWA9GD0-qtpZJLQ$s^TR8+15Q&(k(;-CFWnlM(;yK&CAFw9B3`cZZ~7@#Uz
zCm`p^uG7;P#StelHPX&Qclz%JFKp8$FQWGSTatLVmwr8L{aZ_~=>J{t{X?AczrCCI
zAMVxv<7Pxedx;6mz|d%vHWKZIt_VN<VeP4koA7Ufo`8{UJ??A5pZ_6p)9(a12Vg%{
z<J3>6giT_u4@snLh0q<`j#-!+^C_Wz!#c!i>{Nvk2x;gtpVEG(Y){b5n^!A?lZkFD
zSfrGr9&<9mPT>@bm6aX8xjlvutmk#0phSaQp*%j=WEXA<H#DN@fgflKkN>%>BGI_4
zU{`2wygg^Gb|=JBl~1V{R~T}Y*0weetdRd)XZ9213+#0=4r;a+pppeiI8Gg8QrJ4d
z&zCkYuDLmi`i$k-kEZ;~Xg%>66OLe<2o^TFNV68KfGM#HOjA%dwz0C}Xv=^H>g@P&
z%?!iSIx0^@&8*{zA=Qz`8)3eJAP_{n2#bknN`Rk|jS43zxidHu4S*(Vd}@EK8DIrH
z1Q>vf2Q_2HV-Ku`#4YL$8n&2#ieMu0_j|?Tdlg){m(shHC|wu-M$Ew49_iKKpdk(u
zEpI>80pOiIf2nBt8=2uSQboyy;Aat08A(GJl;LKsTkPVXq~zC3ogYaBM+Pl>zGagQ
z<~ob!oQk*J<CrD)zZt<fBXV;>xCw;LWSBywK>vZ=b?IzRwA5^?BW!LLUc!MI2LrMa
z;>mA89ugQcsWz`I0k`Nq+*L4S<8I8qcyX1h<k9S3SRnp@%U@LBPlp%4XHusnpQz+p
z_$mqL5amJF(=sDd?&or+e08}Xnu9O`3kEAoOSJ93I@I-iWjJY(4YZM2lUtQ*1SZ=d
zl8P`C$Gx&0{62=K0$F8*OI>~6uF*_6g)3e_(<GvgB~J2IWPFj3Gmt?Lb(`5`QH_cz
z1JevVBR-1G@J{m3Nc^z3{~R{<aDt>;yY}4qAE?bVb1K?t-u&-z0{#HdNd&YHN{ERK
z!vALbz8$pZwmevbb8AZPhLqmT`ySYxu?kzCSmyJt&T$f&RlclZ%=n3_?%m0Sh4T<7
zCMwN-DJwfei9$<Ix3-=S$%C<vQ`KYd;6QH6F%Mev7S|l1ym^<m?PB3lMbw~5wDd2?
zS#eech2FTaqE+A8y1RZQ1H(grES2y!4CCSj_d(an(cT_@CFUYmv4BcS;`L3CuwEG1
z@Js~7%pIT-hG_-(FB+u=dnF5))6NUo1j>?+-$3F?=1>|F-aIgxbV%v9`+AVs4#<E`
z)6q#H?E?=lfD_s&Xyf<CQVQX4UB}1O-`_)d#rys>G_vo(T}pldwi(vzH7H{;^~oAg
zqPc^@cYCdS)CIkQbWXFB)gWC_H6nGQo1-+ULABvjm47cPzStfC?Drp!M7*8%p_43i
zn+0qvhMHfcmRtUKDYx0YqhlLZYQZ)701jx6z>Z^l6VOm=$<tb1&kqpheu^%o`K$t7
znjQP7XYmVmVc7Yh#}i==ooW;U*=j>p3#wEy&k4N03SuGq5JC|L>g@xNn6(pwSDAvb
zNsa;dAX41Sn~Fc@*gsx4EJjiCRNBShYlQ~(0qhmaYHKwbzh|30M28Ca8s1Q%o=Xd8
zijn<c10qJ<k9`AR0w^AVyi*CrtM-jA5VZ=^(kV2GfLu!FEIwV)VaKu`o2qbW_XK+q
z(prIMfoGlxegRIuf1nNjS*u{c9|XrVbC8&z(9S{^Yhz;r8t*^q-h>o+Vzh&UvA9NH
z^9Fhk46a!GG}u_;W;i*`U?N6Lb~eVG@E9PC(H?V6-!qMP9vR&80)T;-#_Zv(U&nrZ
zMA%Tx=jWGDC%GEqFYO3+9`^{jEa5cz703y?G#Ev_r-;V8zqvIF3h6S<NFWcH=!i_!
zs)@<*9DDx)K~&hPw#-ekO1t*J<z3?M$K$$<uoSLH1#g;j6NSG1xKfb`i&8PF2PC?R
z#SauMoSdD3e;*$UzsZNZB<kd3ZeE`1i{QS#KD<8h7m});@HeII-@m_Zt>`hDIF`p1
zaY@tLs4OrI`d<fXu;tcx-qY}v5E-=|6I$E$nkML}84pnRy)_`n1+%=sgyWk_xcGJ?
zn7i=s@NoJ2`TN7nk14N8`1QAM`>z$6Oa1-enf4_~pFFj9{DG&7;wMUn{``ntk^R50
zNc_KY+WtS(4*Xa4kpKGb|3PH@e@h?tuN(LO?`it4hxT6&?Z3GK{C8ehPi>F5f9?Wk
z4dK5o<NxR~{_E2HJ70?b&J+0Gx^#ZDsfGRgD3z+dB989Q-`V6<>~2W+bp>0r8By|2
zw8Q@~ynu5%@Ey3t#;BhIIWyR@O!v>aBnO!lt)Lxa-By>Vk>FSFPbn93nTSIO$Ve$$
z26-F0()0PYi&!#4DhSJbm|wlT^nNZTCg#zj?{kw^oLw5!I`ghf54$6C;>e*xAh2RY
ziX0rY3`v8J0qrYV!Nj|-F(dK5VrE&a%9Ep4E?%_0{K#aB+{7P!sEyz`v8Bc7NsFrH
z-18W7^@|HWrs|x8k&vKaQ4;JIKn&$t{c!hTg_pyycEEU>>Nt{4Y=E&e{`9PrQQq#X
zypGc{t4l9%@yk1lez-%l7Km3H{+{*VuxWDDI>z-uX%Fevt)rQoMoQ*3K|4#4!@#p;
z&&*AK|6HN1YuEX}##nZ3++j17<IX8ZU?+RFCT0^X{}90KN__bbB66I7>L!ME5#FH~
zO+m(>M(&0(1!vK~Z<X0PYaOGQg-%##rk=56_G#p-La+S#wGN_ZUwJM+CC9<M5hMxC
zv+xi)JJhU&EefxmPi}6=f}ihfySA%~cKb^!><q-=t*X8K_5ryK1mk4Vdq@_k)9q)0
z^b0=K`M}?_>dzBW?xNBn>c)8CYrd_LN|kQ+kOIX%=e|SEeWBmvtD^}Q)gC?N{IoqG
zY_RT`+%J$LK*O}_ENhBa^weR9D{`GKK{F2`EPOl?$R^kmbIuQa&y-+ik8yEe;D~*d
zB<OvniR^m|1aCm!*nE?+=>D9?0q+%P7T>ISeV!Qu6lu=$#OU)vy9vvDb@b4@*iUBS
zQGnkzva{E5Dei24b?vOrmgiYtn{E>z+BC`{*UyhQ3ZAPwCM9(VL6X2SLUmu+v_Hl2
z1w4FxY6pCfb_yFFbD8*>R+72lFUdbE6t{L%@V2DT;r_>KwQ3S44lY)aC>(+P!>#KI
z5&>CfW>yaUm<DPKd2B*OkSAy_56C>s>lqkyvLZ09z(bl73bn`D=}&$ayE2$S!grP?
zg--RxyuO8=9s*?;lK-JkU)IFN7;aLOdi|**2Zv&c76YGE1V+Vs>Je?3z$ZqAxV}FD
zyCG05^#TvjLHoL8-$Lg0hA#M8yE1dF2Dn7*!O-trCb2__QtV!$lX0uAOyK4ewVM^b
z7v(R4g5JT%<k_>%TU4k><CH*yRpI*mix%Lr;_`#CM>5M&Ge6&O(9<LO#;P%0?wl(9
z_@q1c$t3;!8uJJc2VF^*Y_AK&6?yx3tR+PKn*QB>$Bu#fAd3fyXUe!bj$x_AvGwx8
z^=^|STWh79j^*eK-L^+e)0<j@^pt&_Pq<z`2Y;kE4&+$E3KWEIVj)r(99A`@LT=X|
zRbp2iHM{rd)w0%BL2;(X;o-&09(m$djvy=d%-N5x@<WpKvQv<b*q49t-AiAlMEI@f
zojV6xaSql!!YO|Q7BS+a1--1UX>5J+%xe#FbDNH|t%h8jReB*?EF>EcIF#R+Icwi?
zoK=AxXsHSN#71puGpG6>Ma-$=_p;8Y{o~z^Zn10LmxW*b$Q9e~8uB4NB-f0h>op;)
zNH_@>neJ^ncVhVy>Xe4UpkuUIU1W2`vXGFRMwEO_>va1=9Uou^$h(Yr@!}A@&)VgE
zj|7Atg34XKQGP>JO*(nk9ueB&(JJtgI*98uF?W8v>`LH6$7z~E_@v20Cu!T1RSyTq
z@Z*lYaqAuCAPt+u%#H<Rz!aqEikuKO*1%r_mZ*4;5n^T+-UB6YZQ`<sbxR%e849fj
z#l$R|bD|%zJ=}P{txcMV+iiI!a~i)#*r0&lz<qhq(!3OoLwM?gbMD_$CwcnNi*F!u
zD}5af7QO!N>|ybHTqnXNq9Y1fxWm_qK80F?xL23J!RNukDXFYsYkZw}8$Js7BIm|u
zGQ;jyEmH!*!}}AXr@+5Ong_6$QrtJJn{qFlJWIHPJIgob$Qf3olbhlSl`5)@u(_J4
zqhkhpEI_t!82082wicE`n2yJ!;QCNcwCBEHkqgj`I1bHeq$tr`!tMoes;X8GAb1Gt
z5kPyIohjZtWFi-bJBdg8o)_tuk{hqN_o~DBX(9s$%api|9GOBj0OwRYVEdmMBE~5q
zLIsVVaLxBDfv@^wuX$to5F9t5H1P$^1XS%hb-b5C=Noe2q|3NHKJ+rQ7SMPA(&6ku
zs7LfMyAsqXokm8aZBX{WpARgZbK=vm6hI`T{#<Zd9G6b|6OlrxI1xTolap-jb>}M-
zNc)OL9qe!YQplC}FrwZsH#I4?FFWRii}!Uac)Wz$q`9CJgInsbVnEr0NMu06b>2-{
zdb#C7D^fuBmIuC*KVWi;8Jrcthv3|Ol$lQ)G`(;^4VV_}rh;KRvx?j)e)xVO`)v@o
z^3M2*u?eT_{aaP;2Tuwam1sj7Fu5r+Cgvx+D2K7dO4q**Xazb=(nQeIjT^5u*ZQLF
zD;8No?^$}7n;T58AV9B3g#_tEffBxT`6ix$Bk(6UDFSg6K6`Tw>~=s$&ApN*<<jM_
zycCN>B*m34bPt>H@SNSa@xDRf(gucy;3QXq^Eas~uJjr!!b?$i{ryA4oTy!TuuWiG
z1yXpf`#hV-8>mG$Z`d$5`pyuj8NS7IshwV_)3%s~-CV(lT|ReGp5ippJqfDQstpwQ
zX@Jo15<cn3v$gi{SSnq}x;)(S9!N6K%Yc-aO(+Za(Rm}!#nw>4;{b5O-!AUQt{bX9
z>{Su)<b$<UXy4H*4J{cZb5nRR;G7V2b><`6I^?98T39rfxK}|uf`jCIPYNl%20L*`
z=%Mrwyg549w2|1%%*r3g?4}(vVe{mYT7V!<8AWSLD8I@BnSzx-lln;7dPIacsin6Z
z;(TO(EHk`Rd2ew48$4CAEx5FY+IZ;SYcg<Nbj!?_?OLb0xvl(lVMxiyCD-{P^9UV&
z2V{l#)}Fe2IVpI9M(u64(1zAxwaVLBECYhg8r(Y+L`7@AJK0>d8&~f2OWEmrEl1JG
zA69Ql8N`mM2?Eu_{Ay>^#lm|PJzr2d5g0j-#UjBrEiRd!sU%v&B#oLr)V7FtB4_jg
zkS$0(4&X!+XfylaTgRSLxZRh7!CIgUB`ZPL_qo#H9pexwXl=+0s{!wrPNZ}8L#ns!
z$2MovzRO{Uo)fy}ziSY7)s!CO%FhIe@XCdssd(<JzdgGKkt%S3<&SLh(bAKG+Gz^&
zQ-Wz}X%jpU*p9XqGJyKY{|<tM(1N7x#vnrX4i9q+0-{bfZ2g522SP09aOQPM>5S9Q
z7qjv7Bc}B;cGO`)R`4K+ElS2}y{9r{JU58&D9iyKB`FK?z_Mwp;#_2*3KU*n<jOCG
z3Jk{Onw=SX1<vCtvnW3XK3fFu?{o;wVDMPD<^e}2GEdR6htAov^YG`!<9OC^6S5nG
zG!lX-`Pa&6l!1VdU<beaxiik&sM-!sw<}ct`MUJdi#ZwL;Y~3o+3M2`hCoz+@CXOj
zz}KhIJ>?h2f7o1^Oq9ZEG+Cn;P9QwqX?u@Pq5mt_hj;;Gk;Y#i+lX%ahvDT3&?)(R
z-WFO6^wd<KJiR8R<imr#hEGp5#hz8=w|T1ebX7sshlC41UY@`k05kOEpSP!%mgbXO
z+%hzyqNUxrS<mOD%)<_aYbP<b>)nPOmHuopr?P%Wh@TIB#gf}OvV6*vO{B|MuLTa0
zT!s%=#N#v)k6_Usc#+EvrZ@PKdcNVAq|`HmZyw*tWWEZ+UJaMfrOy<ZV6}l~q^@9}
zvLeXvkmK_VL?_Bxfb0hx-oj|54o2a_t)7H3QpOAT8qy`RRgys>l#=3y$iX1;Q)}_9
z$jImS6%QxBOungBX}@jTwX@^IpIG(hQ{Y8b`2D5TM!q?Ol-a<Q+kO`lh4d7SGVD+)
z92ni><2{$7Xxiq@)sH3eG{x)3N63lrxsx>w>r6~@)6}#_KL~?fnfbJK);)|1Y=1i(
z_WOLlwlZxuebs$SeQ(&KC!zhJ8{=uF^KXu5&#87FMD?AeF4_$wctr#EQ_y;T;Uo`V
z1}1=-=H_#Zuy(Rx;A2pU5L1jK*#?tOIq2%V30gThmkLGSk0R&9;O5Fu2bu@Wa7%_v
z&$w0ND#6$P+y#^uc>A2~3w>7D8y6=%`LknYrJX}-Toj*!3?Ds_c8uLUJjS#;#b@P4
z-}~Tbf-vBR;F8Kp#e<q65`VkjNwoZS-M$^owRht8248YErZ$&F#Lbc-mhbv$M-_{_
z8visp5cI0qcmSquSqL?X88(-Fo%-aMReeVw$2xc*&!HY$etVV~AMahaqjbpyaY(aQ
z=FxC2Pt=yw48fH|JEM));RqK8VWq}1RI<A+8!jWr&bIe@iOY^0^tTK$gF}P*Y8H3U
zJq6P<)tMur1xC_5-k;%mjP}%R@OuZ1%fpS3c|1E=oCNFl<NRU8n^jvx(Puqto3Io&
zKFyV<)skxg#*%Spfg5|~S$+@aaegl1_K@$O%x)&!fdNmjI*Air>_I6JbuD;&Cf+fW
z?i3tAtiS;c;<pU+2#oQd^g=YxY))v&_A`LfJ<3QN8^nPF{cg;}&gg@E8Kqm`KCZjr
zG1@;^b!bx@_XIkCq7z!gpIv5SY1tWj9TM2n+(?~wLnGE@uB*HIPeUVnCt#t+koQAz
z0F`ZgBCP~WKS#&B1Z7q+o3_hP<WmBnq(jg0)W|R>_&W$r$tjzesn^1Uh7eHkIgTL8
zrM=@|pJtL;jl})1O9uJ2@$lQf2^O%ft`n+Mh+kvA-D9L~AU|P~ULNQ}gwP;4o~Ta^
zN6tc~1XvJEONwbwQSsAH_`3@*HLRhd16uh5?xYnhuNd~{+@IgNs%gda{xw+zj;?H{
ziZ)lMWR2IWajvEcD1080eEaTKjnA-O;daTe4ROQvCChibWSzH_TyK5*?w!dbsqH&$
zF5plP@q6R`N0eNoIA?xVkRib|z43#f!T-bCS4LI2cI{e(AkrYHl+q=Qba%TbB_t$O
zM5IfkK~O-tyO9)-Qo0*ykdlz@=FElfJI?vWI6u!g`^O%8Y-Is!-Os$|yyg{)7uKW%
z*#h4NI#>6?&JGwank)V-I{sgQS?!l|e=!Q&E*S4iFPA42v2P%d>k1YUiRi!S`w>}r
z{(r%<|9+hJ3J<`fsjU_)7{7Ev4lVouzb8Qx4I1Lx*q{79erzv@R_Raj_b-Z$&JGU`
z4^hqFeL65QJgj^PV%ST}>O-3(@`DjPEFj?w1U~G~NSJF{Bfx49F7Bhl!?Cfk*8SQY
zX0C29c)MnXH|+!8quM4k<l1#lz(YU+V)Qbu3;X$(L)ryVNASf%dRj>K-Fuuj{fcHj
z<&wEMg;fRx>k$}(jtXI|gaw5wMqovDxtF)J;Qjj~?*c9D>ea7r|CFk8%5v*)>)U<U
zUjHXOufDEEf{B4qR9rlWc%_o~vf^d!s+Yai!-to3-U00)inp)tGp#5_Qkqy+{+auz
zVz2p;zuWKop9u&cLCL}*#ViWG=EkM-=M_$gAdzj3swo4iaN`}@Dltc5Fv)|z?toVO
zcXDz13L&y*xFQ2wS>@xslOO&4kW^C)bYTtl8UQDN=R?hS`O%A1foJC9mm|aAy}HcP
z9bMwE)XN5KY4-9AOgtSC`AV->VQ6(fv(5fc4uX&outZ|kKY!+lx(6xV%WG@-#%W*x
z`f{ooS`A>fe=*B(241YD`%49dPGEQQ@$!z2^Z)ufy$M`Kxj&bc>3zoN$VeO*i5~32
z{S0>}274GZ2w0@Mj$niCettyj2u9q2>FHf{pDGaFpsl4o148t3Fr5gy`*&eM(4hVh
zsCc=bphz!&I$JBB2FVS835me+><Xhr(kOF`U&mcamlVNM^MN{`0~XoJF!X3<C}cx7
zoU5Gvy97E9`dvs;a&*!-*vxtu1QgD{zg|_kotf0SIKmKF@E01FD$w@r?C;a7rkJ$^
z=f8THN0^3YYHE7Z91k5lhv<;89y(jIO?$LvK>e`f*RHag1f2o|N>O*W{pgGy067i_
z4ZFw$zsn15Le&C&K(ye=A}s8&?(->RfM<K_RE>K@#TS|0Pmz(4vCkaaJbZj)5yQY1
za6dHA02(`z;`b|6$~E2i^`)>k$sDXV;am$i;Mkk#gH_NCF@L}BMaZV@14!=N!PXpP
zPWxadAWaJFR6zZNUXDO)3>WXarNpHrNF4`{E*`VrM?;$8(E9x<m`tIFSBTkNgHZK!
zJXorK1r@H#(E?y!<IBSEC_P!9fp?nRWiwf#7O)+l;GBbQ4;TUc>x+v#j@yHf=qd=L
zQrDAx0O=Ucvj*4YCafIAA#wnJ7yr(kJNNFL0wDpo(_caLQ+H9z@bd;9I~=6++w$3k
zFq^}<@J7zEq^3yQ1AN+U(8z3pn*knkT-?2PbCBQh$YE0&INx6&v^D|s=MZZ`gVF%z
z?vVS#h#h?Z$B2Ca9H$}UaBgKKr7_$G=~+O}$M;m!$qZ)9wQ(Nh1Oe?Vl^GzlGnkh{
z(*%;6n-LJ!dj$mqJzuK|O(R+2;j^Z^4tQrg&|}Hn;}+J}-GJ2sU((c50sN-%@ATlP
zDRj0Q2D#))38(RCKOqkc(3xV`m&;c-f=VZz*Lr)TsNuf{{TEVs{@CU<#NDI|&^3JD
zPfB{8eFF&l@~$99*1R?YFej*a0e;B|f_XsWdh(~966h`=@Koc~Cx3s(BX$u{K430D
zXZGqtGiXu;T@I7r2V&=57zK6*Gvq+Cs5NR|m?=++CbN4O*8}W$%mE>KTfND3Lo+mr
zF_1IF?s|N%GSC**0l{pq;NA1TJ_DLA8l_XazrUD)i>daXCa07|Ibj0Ai_~U8q9qkb
z6lA*w#-gG3AScIIBmwnCb$j%Hk`DmIyQJ5L{HdvcS6iYOYXXP?*a@`WF=}>UR_C<^
z6$YW2q=LaL(5-;;Ab#I%cPXUNc9L$AOTMPM`sJ%Na9`_7w1zCY?Ows~#=~L#6CjEj
zzq}Wj1~>cQRabC=IRpJASovr|N)PqG+~oj7Q6K~SjVYj!Ea~5r`k)V1x)-NAz*l?;
zX{FFWgC7kgZjl+=qU*_dgp|KGm}1h}S<~Ci)W0ZW09*~MGlm&tXmN3I;hF4rSBTxO
zN&892=mx4Aa68|C$TYR}WZAH0;7XG4tjB^@`}X}~?^6@oR1mY-0g{50rh#~t6#R-i
z4j?nMuCC7QH6l7XT6QFi9^4QrjoU)urNKi`e+;y=`v=p$#=m!$2f!8)pcQ-Ip@9qa
zgHMR5x_RB?OOIqafFi+=$EL(22(J`^9$vSFs?W8!vyO_08HF=gFNWLx9Rn>BA<(b8
zMn<yKsCo9d3E|;~X8ZSIB5_nyl$W<RAZl`=e4}NS_B{z3P1q|RbS6mNgBUL|5x6nB
zrDoRcf`|g0BZwRCispd$6G7majX)L_3qClK6u|@sPezD2aFy~K^-D^D1Pe5hsS;Cr
zFrC^vDJm&}p<?0pPjTvJM06@5?eBrU_W3I+K(%;yc(cpeC!k*e&p1}U%<i{;e_<gR
z93||ZOY^TRi`Jf^V_<YuXnp}fbD1rk<Pp!G|HxHQ9CxI_WcvRmSB0nHe7GjN<t~Xs
zd2xG{)-{kr%YGQY1?+JE3~BY&;0f9*R6}Wd;%*I3s(Z<F%zU|FlN=J9{teVBM2dtz
zAWmrl9l$jNydk_|=jKL5r8=+6;RY~(zgK)AWt;6ldP<?9LQAj$dYA6@c81C+<73b!
zEG4wl&hVT^F>HJ|J=#fIW=6_CAb4Gde4A|Z0Q+;Dzn$IVFCTHi=`aw?Hn{I|Py&6+
zA}ThP`Zd_!$h<YQ{A>K=Mt`8EX9KXLq&|^7DEkShr|Zd@*O$yX>p2t9z<{h>FHI%{
zNI|j$?`&)ag2ENTDX<u<O+RPsIu9y)QvG!kS@7iQ_Z>u~#sc0M1Buj{4w12`X)2UR
zk#TU3i{17%-VJA3eha#DhzbM;?^8&k-sn#+dAe~Q#1A05Ofk42miEcd&+lU{)`|=b
zu&`8+-9&#D<jaE+L$-G$Q<+?HoV`z7>WSle^w+N&?vBX`@87?N)&Rxo=lJ+y-vidk
zC;HQ-2OGjj9(Ix=>;t~vZL|z~d0r(r$tlR_1(f5dGRseR_Sy+F09h*+Q_CXbMqCd4
z9tu8tHV&G3Fwvs&j%NokHl!%h!80<e3dA8$1A(&p`?lS~BKQ>GC@J^=3}x}+#Za=i
zGm6!Gk1#e|UM*nQH6^6~_m?6FxvkeHBq4qeT05{)Nflmzwgx<GfSmc91nA;F!9WX~
zZ)WD_li(+%;1BINZElu=`<%pSOqGWAvY#@k-_663+h<fwsSp^%i87Wq1o9W;90~(Q
z0VbjYLdQ!DAkr+*ucP!%|9F>&yNxp{7;s0|`Bq$8(2SD7BlTo6qdT!~BLCTmkn49~
zoJz`7ffNS7tOi(aRJomLybYfMEDtbqVCQ~8Iu?D_&BkqoWGPNgg}z6lE~7Ww>-gvE
zBF`6bV1P0PW1p2m1UlO7)0gmE(kp;aa~(t@uy>O2uS1!Kd~0&3M6ivL)m?|@3?TLI
zD#;b9z!7IvNqP>Rry!2Y<px48K+O=f8CbkQ%9*vXyqrC~2GNQT2&Gi#<{I?z<GUc(
z$c<Op41-BSTztIqo|AG7r-}=S%>n5DV2^>!m^nXl&ed$0l-vc1BaquvGs?ex1B=k$
z(tE)+4?zk7YDQ>ULKmQhi8sq(7c&tPN5bAEChCs-s3!N(;nrNS4}2cb24$xhfHfUZ
zLe;_a+}|Cjd)OEl-vNf)S#*QjMrQk|f~smC<Pn0S&$DDPZ6v*GG}0vwav&Y{JEzCS
z)M6t;B9&Wz{-lKclZ!85{qDp@SBxydL~6!QQP1<o`cF_nsK}BU8b=LLu}n;PD#;(d
z6G3XRv-1fYKnTlY03!vs{9i@3L1<n0;YIQ}kl+9L1<Z*JHA6(BOu-!i2Nem4M!*`V
z6>|Di;mX}^^v4ITWI-b83#prl;Mx$<1P`ezz>WYw?HwGz7Rww8yIcelQi2GS@-`i{
z<WSC$DtlJybq%x`i<?MdDIPoMJ;135dQMV*m(X3~ywZcEzRAY4qv98Jvbw4%00ki@
zZ4x~DrBqIhg4F~bD?Q2F7#^#4TeAz`Kq;%_w%@7j)^3$Aa#b2e-$winegiP7f^=n}
z(@odQw=2eFKkU=rP*nYD^i}|2QUr@<EbesEc&L1s{^4Owiy?=83M9<q>un(d5gexV
zA`l?YA}s8_U<)E-j(1Bq(ONz)L>O!Vf@XJt`}(Fc9s&NuV~LbMn)*SZ9^e@-YX-k*
zaN=Q3Zmy*_hV@Juq!y}~aKb-4JWrN;+(5t%%>@C|ok(z!vI4TAVc9ONtQuCz`ue(_
zo^_;>Dvz{bjxoYNGT<8k_u)+1Vs8AAENumLkk?_Ct;PZxDe94$oZr8HgMEbDJiJ>@
zqs0Zt)l4y~rvuo4gVnp*<JRaW;^nasV@YYEZ4JdoD{d-NA@<cR;G(#(xJXMVe5RK0
z^{W+lpFc@p17Y;VNELPkUH2*0?*}iIb<+ah2fW9USZyZa+6PTl3Jp!AJcqq3i#@#*
z{sxO6+r=HDlxD5Drq`VNQ+Gd%RQ2;StrjyKx{vg=nRra1M4Y<_yBv0QcUN<))~4>P
zTJ7IYFaFWBHiHIJDYlh@Zw3+bF)p_Jw6<Dx=nh=;C@2i3rkS&|hMfv>a`i%fm=qXP
z<zLDrnMNUv(Rys4#JIdEAl=jREY-D;__~3LiV6ZTNUZPT?+VLteFS20>^^UnT|7T=
ziR%fOrlx5%7rZqMfp*~78W%TFp!?utcUjx%XnBAZbX`^*5%)z!nW6o;0plx`MMWBw
zfm<!r<Hudy-M?UKK~wTFYq7`gA%l9dSaN4aM|nw!C~0HjbgvXilT~t_yi~`%7X<43
zX&C^{q$q%B!1_iG1P)W-93LP5)~@E0ah(n2)904l>zSCig+g6)D@*X{-;<5HlbxOp
zSc38yHlnYocP9!%rg&wf-Z5i905nb@(=Sm`3wqbq-X0p!$Fai55Is6NI{OYbMk%R>
zYd!tF^?=Nixw~A^3xJ95flEpN9j69Vh(w_?dREp?&`!T>{@AAPb~MS+qfl=NHybwW
zqr}ftoDFu-oSmx*3%S|YtifCiRuUB=0O?C$MLMhp)l;M-m6Z`18fa+T#<+>Kr$=CT
z<y$GIy^Rg`aMt8@((^G9x?uX_c1G4^9rl3l_Y&~F(lBEcfoq{U@aF?RegyleNtk*<
zGV=2CQ4}d}qX?EphlJ3(<*Gcz{7R|@Ib2n6T_kG|gTN>Wd`~<)t~w~Ha=ZMAHWfNq
z<v^^|*Vm`1t3=rL;m8$S2r%0fLm6e&IdlcmZwQ`|5$ozi<=+i=_sQ<=+T9v7Ty5}j
zBPS&dP+T1=!^G}zzK_EXMhSu@ol78pPu7Tzjb-FClvxGHUt4>W4sVvis;_?I^oUnk
z**;n!Lzn0m+slz8up5OURid6N;sF=EA1Mpl?U_!<@a+8gv$~?<(8H$}$A7CwA+_y+
zSU&q1b*i7c8XFG&vF{ykSh>>?9KlEvxy}n`DeZ9Zhli)z;f$~Sv@3aZ;kzrboaVDI
z<e2uHUy09vZ<3r$DYwwTK(*o)Mx!X!4K|oOjW^H@3|>K!>v5m-PGR+6Ok(0RXf<k&
zS1hADb1Ev#z<u)r&B+?Hzh?)g7jxuRvaw(aPQ3pH<~fHQ7Z;ZdMdys_Iy$<n1;|}C
z=}CB^l~vEEGRf1HHAm)N4S7jbxMT1Hy!VBT`^2|b!_gdl;y$-}mrt{(0(dA1IESZe
zce<zl9se7RIuG^oe8XOe+RP*%fA6os5~8a3;d0bbGU-+dto<Js%?a<jo<o5~ckXwI
zx4N?;g5D^v{Rf@;MQF!@me!($^1F%&oyTH+`&Az_QPr8^hl)64@|#~m-6SvD=x63c
z(9<t>cL$5@b+ose|LWxQR53_&brJAp5a|((6rt_xj?gTkr^<;tJbVb8XiLk#a_(rJ
zXzZ$Mv#JW|T!Wl+?6SA>jy)b^N2p5eb@quXXw%&ZFmjXIO%ugoW#Q6`ZfO2333gY#
z(b^^v_+NJkKR&m#WW<4i1y>b?>klr8WkU4jk(ZDN!n;lxjf#<jf<jYuS|KnZF;|HZ
zi97>Y-`Q|N%}2(^=?K~_y1dNp#s2WQe1oXiy`R>y33A;bA|fg%P<rdwmT%;>;xR_S
z?SXX@`5Z|YV+fSfgoz?Rxs8K-DZi|Q-_)s>e<Tq^aGetQbKt5zXp)x#?+8D?^WMUZ
zfGPB?0-s|x96aQo-ISDUa&$aGK|%5MwlJwjy>1RpHudf8?NE>=;xwfrlJ~DeEh>b*
zLgfuB3yVfJLQ5XJaHyzqNE_=;PeVicLr4JjFlLwk^@a3Sb>(I0f>H|Zx?sIE6Pw#$
zO#c`*o|%ae)HE~!*!XyOpdozT8367M9i5$=CT&1EDmoh+9EAH7)3)K_{2*6_3m`eD
zOhYB_pXS%vt;J+>gU_dg1l|pwiHYh{mvmq0CpS<T8A+~-i+`}k-=Lq;uC8;4w6R%W
zx>$MiVw4~;8<48+DXi9@Oo4eKNSmF5<L~*Ig95lgg1_7oGtR-46xcDLBVW~6&G1!W
zk_Z3??audkUOKpMu@Dmw%-%Pp88m5kvoi9es(N6d4SiIE2@NeR#H^+i7WNJdlt_PC
zhYrow+8T!IA5WkST^^*T;yVTnBP|-5FX(M_DsX&nY^<*bw+^RBVx}d*X7o8opc`CV
zT><oBH4A>0=LV)EpmI$fh4%i1u`!hz71h(HPuIuGryEj9V(P&Z<_wfP@9gk$;rj}(
zv9<O0r-0H@Nl9sWnFQ=mdpbI>(ams4Nc>-vmXCvt5ezi2bX}OAKRk2*$)m<Zil?Wb
z2Jv_cxh-%bUY3KXG+kH?@()`W4ms<8{rU!}>Y&EUdIOm+w`_%9vVqOfQ@pjL%x_lH
zdYRtS?iYfLjFwQl#eD=+ooqne0#tuyCd6D5SZ4j0YHrd+&}}bl3snE^>+6HEHzN1u
zO<U}TMmK;gs(BqMb#!!)M>$0*ucCsNkrA!zfd?rXF>%ZMJSRLSHa0dMoC?~Mjktuk
zxNhezx8BBZa!^w*6ty^gy36w|NhCTZ2If!DWixkbGN=}HiPF$BAt=*cn3_UHE4ZQ?
zK!mc0Aw7ebQ4<IlVMvDf!G|AGz;pmsc~IU{QuyZRt?{AZ2S0wXIX%4u_|N)#r5XqX
z@a2}kt~K28zKN5Q)9cskQEaI&R(weFdJMM)tovKQ5NHe1<xlv=n`#Y|3=OG@bsQWj
zN}GU17t14mjx#UlH3R@@vUb{Z|1+>SF`MMOlY4l=BOTmy&-gb?kcQ+?*9*&M4P}xa
zKdww4ptwaQFw)hfsNl&L+rWUH3x)AMpr9aL+RQPu3c0z(PK8Cr`z8rMA_w)5J4NfT
zb>IAMPzALdnN^IeBZGc3oY>S?A+hHd>Rs&WVTYEj+7cN$wlx`k?A5ikXWwoG`1^;L
zczc&g`uGP1ioa{?2um&SUiE$Z3*ZdZ?ocA}*Nx)Q3O?7M^jozhL`U1Mj<5*{UCqwB
zVy>3WR3rE><@ayys2^7JA1Q5S%fW_(>dCUYN&vJ}q9S6}*f$kfBIgX$)cVUTHJc{s
zY^t)fQff16nn1Yj<LzyDjsN4Of9=BBn(iN>kZC9kpAP_Y*ur>zyMGca$TlXchHG8X
zwi^85d7-c%wYi_y{YOnL6qg<}zt%u;OMd8L60l};^|X1~Z(%FLPw*V9*P5EJ3-oGW
zs`l@td!c%HoX}}ypmU33xj7j1`+mzww+J2ES#K`%l;WG8J9Zj<!FQknSRbMORVNKk
z1q|<CSZhh~<D?W&>%JUKlWo(Z^ao8ZVPDhG5K2f!=PSyosOa!K?`bp9IQn4PKpo$P
z>Rkrlm1IRFqpgmX9Kif;QTCMXXfbIXt*xu2C9`u)?u6!*YRYJDgFpMpP^C>DI17kk
zPEF~}-WyZ}i<Qmdm!rj!3NPedT>YkQ;-Tu>{ipC^gv<H@giiPFt$GVjS}rJ8<<z_Z
zB_7J<uXKynD@(1_IN}-?jYEs0DekKbY_BXuNePLhhjeDQIllb<Zoffv=Z+s=a>bPl
zI3hviKfx~KX~*Q`8E_S&{8R49nSL-)P&IDd+zi&!({psB-oler&dgd^U1bX9515W(
zv2o`db~)d2Gc_?u&&YsB9K`A@S!#ylD#w`UW_=lok5(M~0@KT%{UPe}<J``?E%9WH
z%qPlsm+;=i)3GC{Ebyr8uTNqU_CZ8;r#XyRFsuT6kfA~+SN>jDC!mTC)Kvkb6n137
zplKU%Pj;bWpt3V;gU-r4W+8k4d4y&B7oQ$>u}R*&TRqob#j3(J=?l6hB48Ebak9dR
z+W<3y5WzH=x!Kv!xHvDdlzj&9{CPFzl@#aqaeiTe-mJh`B5DGbd>RB+kC&F0ZO>gg
zA&*_vh+tSOYrO8_%7@QSbq6zhj9#pFj+U5$M-k9d9tf3w`v#f!o9XhAxclGV`PY-p
z9>CiCk$yUZ1cSJ7|7ZcXb>N}SRc}bsb_%a-0_*^0Kyi#L8GRV>OG-+(I5^77m`S`)
zT{p_7zs<0g6^B+<R5Z6l-ii-cz<mPV5S-v35KjboBdP@xm$ulS{=UTYDAeZo1T$%J
zUVtKCD{6H5W@bws*U|cJ+vz#~Ccpgb{T!3n=BilDQ`EA(EPND`Uef9Q)uO4UCLxJ_
z{hIn95deNGGc$CIcTrM5RWet+`C^sKF>NK~JKlyd*J~LYKg@9-<B;bGjF%7_D0!dY
zZ42OnIry8@CmxV&;Z?5p*pPiGA5VXV(|+7QZ3c}V5QW8ahb%a-lKbRkWe>Kt2y(8R
z5p7^zgLJ*>07YEYg~k?ID5-Nh{HK`Om7k6rDe#91#`pr7%0j~i9DehNE!mQhDKbtj
ztbE8J=M9ayqb93t7fO*17jOH-1YD6g9nKC8emnA+#r?@L%A_|WMB_QNOiK9pvoFTv
z1>JG`=`qsyIJ&sxy0S$uKTI(Sbalo=MU$LpyuHT^?+FzZ-cb0<_bWgO@!Zrg`vT0b
ze^@}@Z3fNe8!~hL<wSXGGMON7#K}ooVZLm+a7j{M>+<-eWSS39AiJB8o9UURX=!Ps
zCB`Nu8cIq9Ds$W0+mIk4*P}`I1xA?RT7!x<YU*^laFlC9jHgr(8~|UX8W0cw{vlP+
zi&%QGcw$;jot^;s$&1wb+y#In`^IIPMMGG5MfP`0)Fl?059|*PzDpj1<@7A9)i5&N
z02W?iY6P>{EiX9m5)x9CE=MuBxi&H~Z*)5t;0pR#yR4s~p8Es7gR9lXF`HjEFlIol
zO{uascS!Z`YaYAu0S5W4yZbhT&MXb(=5h)%GMY|)?}AGh^oi@g@@?weYTlu`3Aml^
zLSlNN^XmZKtlEcMTv*<XfN2966l%NO?ou+?RMOL%V-hhXJl-)E@GjQth`1U?6Erlz
zzXtn{zOOa=A1Vr-=AR$V9cjIQtZl#uYarGQEP1C~b_lmd!A@^=%vOXYQd-LH9{0=7
zD(tmRvLzR%i%eic2i!`oS1UPc*<f_Z7}kb*d-X1EpPmjdQk<a(H(2TGZ`8Uv7igEb
z?XQ-<JC9?xf9Ap<tY74?)eh!tC&x~E8y8xCe~HeX&d-0DcApN60{Rl9WdT7qt(#?L
z23{W)nFGQXM|=#?z_a-o2f-B%r-vah$lS=`&imKLl0XHTn`MES9gm0zk37-O>w)0j
zPLJj0NqS@gz^kyZ^JUSgNUJe?w~O*HjyCaLdKhY8KmZVzP}qk8SwSc4iYMnXOP$fw
z1g%6R5QxMI?{S!n)HrX!2Dag}u<$orSr4cJa$A~o+d4X=C#~weAV+mS>lu|eRR{*P
zzJ6z|!xq?SHvk>0*8L&`(qm=20uH91&=H`Q`#C<z6dFzOp3YIPGch){(C7p|H}8^?
zIh!6u(El2*jRmFGp=wXP4*d3da(QDTP;d+E_rAYVfBUxWfEha5Kq6qDnm=|ueuAFm
zz*T4)uZzct%R?(2d~+2NnAScc`jnnO$Mnd-XY{%}K0e8Rd?XfU`fd$C=PHp#!uKxe
zkbprqE7Z~1d3JHFT)(8eJnWa4-tj^tR*wJ&8%0v3l4n*9<&(#}BmVX%fqqMGU=y)C
z3QN!%Hx7*elEd^CRe&ZA4W*3No&~jxKY70D16x)%<qLzzM`(nP$;nx*b-$b^xV(Kh
zCXET*uXIUB$PC}J7CSVo72lh}!jPaf2e`w=%F5f7!N)IABp(|~uD-Fe>ju6lW9c|0
zWj^XHhg<lq(J(;M1qI(bx)CF(2D>><L*wU3bx(CmZ5D+diYG&ahSFhRq3tqj%1Q&q
z<%APr0A}yEFfice-yA4@@nfceHmzUdU_CzMSR?OnI+|ng)vH%&m`uP0tugB>zJ0$Q
zs-wC|te-mEIY(>d@xo`N$3Q`(n~+s@bmGRR{k)sTe*f)crA^UDftvPvLVo+(tR<t+
zEy@kQq0$b2Jd&Nc*l^<ZV3^DDPeSao;#&-fhj-J@q#f`XD#pi9YLb$E93F-`W&Eih
z7D*Gec6;-tV|Vu!LI)-1x)$X_WN~8$4_W+CRAK2)=WP9LaK@W9T7ePcprsWHt5m87
za9>#d>C9~6^<D7veAd*gN6PyMe~%}gJ6vvISf7=Fg{ApBykqh4@$i<?3g+&V3E~zn
z0C^Mc^vH;a_4#?a2pstVz4APhc3o8d)EbxQlO*@@bP9$q5{f(ZVq7#B7>F!mxt$m6
z^2TEpHCItdK6!jb&WNp7zMSjm#F=(Esm7Fm<pdmKe-E4{7I$~yQ{XfJmNE~qrm0d`
zKTi_`t6*chd$QqvyqwAPwU+Nmb+g)sV*qsaCn~K14Iq~IKB|2~dpiWGd>$DI%qk4m
zB+J8qqfk-7C}U|z&`1`cCw1{UwV6&A(`iGmnl~#uF%eJ}cO4CQh+JVuB`uA%WgsW#
zwDU(ON=Ci|C#!iY6xjh%QC(L`3|{X~5A*b_*##qUghHp}U@cU4fInEpC<08PqqPr1
zYQ@b=Oni*FUbKh7Lk&3=1LpYDLWs6T0xzm@F#Zo3#cyQ3Q4ePIX6|S`lQrgIVxe;B
zp#_Hd_e%ZG^vhO;fu#jh@y&@!_Vt2f_wubx2y3?}J6;`yMP5bl{qdXB-d*3aEFcO+
z2l@!ZiRz;R7G0`G<k8^FY7O@QodcDig%y;)4D=d@S6ew4i1_~;fqpc?{J}v^ws9FT
zaZlWRL!&vW2Mu8OUt~S^4K{qw-A?umz;j|i5ASF*+LQ))yZjKjfZ$Y_9aop?!g*i~
z1hyxGe~W|!+L|S6hiA;gP&_%uvEd}UjVVxr>rcBmuiv$*W<p#YbJ=P#2b3Dlx^8W)
z9{5Rt!O#L<$I|p#vN(Cm-_Ic-=BB2BD`vSG9#P8+3tOEW_`pI4*1RdHRE@4Iz$T(|
zzMM&$r*l*XRiANCliWG)B!=s5;}M)eS65d^5}KQ7K!Y$4#UzV?8{`ksC4$uC<i3AW
z4qxvIz@CBo^o!h!|Jhl9O#`?(@z8GsvO8^w(B$Zr*%Aa=QqyKeul$hq936e!>c%(h
zP3o0Gvho}d9I5l8k=|-Y{ag1&co-PO7U==j9UGI&B1K%JZJa=v_)|V@2Z^l8$sekM
z0_Xy=(i1~FcEFZBt?$LdEV_uJ@02;u-If<}(QCRJQq9w=baYkru1nYdt01cCGimo0
z*pp`g$B6D6Aq1DKp2Sb$F8%bH0XYe%U<3~C5HGS;QBcaj;TH@^A2HazV9ACDY6ESh
zx0cfP+qPP%0u6pvjJgnx#@4kLR8O+&$k&ifiF)hG&|hX|<_u+b3`d15)Y{r9nEOV`
zEH74umeB#t|M@`b7EzXH?i&gw7MAWF&6F>B8pLe)YWd=%rG<~mVWKZ9<33urfh_B`
z?eKv<M1UxRZ%#T%Di!2KTgu6FQ1}2vfoOrPq8p4Hh`+te>N#TGV$l&1=2ljwMn+Aq
zWszTP{Ltt+rBc<-Hi1Ri7`zFRb@cKGSDcHyJmbTn@^auwNTC2@&L{d`A-E%@Ye@SG
z6%%s^g2EI$5j@GJDekizn7itFoeGz)cPsT8We&?*$AnzV7tM-PIkHfjmvXB;=r7wS
zwp(aoijFF9vO2~nhFq7@mvWbinD8!fClX@>1tNQpoBP)_RoC~m0c0H_GM6v;c_xKi
zDGzSuoMjDK2^!!3^N&0*k{vXHrfEpNZ2?^gdZ25nwqp9>$NB#dwgrwHF}kQ$`)TIJ
z4avY-V!s@c%Qi4t&c$UGP-+3oU;1(J_nRI=x&ICiBtRO$%P>VGuY`n!-Mx2@)3{Z{
zIvQ&6W4<wLvI%{ib6@fZq;J%-@@`nH1o>AE=BWQj5cECXUG6KlQeMLX=-jj;Vmd5T
z4NxYZ+pYqfoLX_@#P&zOe;SPh5iy^_f|HP7@ES)S<QK8A*77Rqm<$)3nVT;|`=ux=
z`>gOe8x8o6AbrFqY@VdYH(tAX^*mJ?+uGiWp`gsP=jYPW$j6U)zw$l7bYXTLQM{wA
z{TK*O&D~(yXOsv$>n3L>uIExg>`%>s)L{ARRBfsRc>P3}m(Z4kZPcevk?HBwAHohF
z@n`}qftoF!(hT%MrS==IK{yCqFocOzCy96;VF;)Y$uPrs<-Y@zH@GSxe<a@@UmCUy
zO3sV`5CVMlYKQ@Lg~V_jO8=2)Z9Ii8ll9p*RFAdF#S8}r&S%vQD0rzO1TjN;g2MWg
zX0LJH6T+ACo2k@+fvCj>WGV<+T3XgT{}~F_+}7uPskCUfmN<->pNvdX%WDLPmjOA1
z^t8F&&rb{0Jx>HnbMN-O?>37CBpeB#S93Yr({?z7eE<wDTiL92rz`RHQ@X{*Td)GW
z#7k57nAnTwDs9-ZmJRs$j;}EwMT+j5zpt*m^|OO~z9tuU_i1DSYlM%JZ^;U5MEv2c
z=i^Y#Xvlthu&$cL=HyTzEl~<?FgS9C<3Cw+`Sv!Z?+%R6<+uQ-?YiBjdd%a&G+bTz
zHL3EYoHMQJV`#qLsj7y6rx+9;lWv!%c|1<e&fN)TTQDem_;5|d2+WM>{`~$=%Y~mc
zlQSj4Yfv9{^X5%>NePNZU!sGJ79$#=&p)J@q8?jKNjGPThRY#in)-LZU>9Bkuo3U&
zA3v^KZVXxnanNxSahhYeZN=F?e!SJ9aDz5(7P>|?9VwbHaE+g?OH2~Rp;CxY^8CH9
z;8A^Wv^Y(L;p1H<DytIbzM&^JTo9k$^uhBPQX%pvO}oUG*n4I5A@^jeG_k@%+RWJ-
zcirU`6ygpEX6cBeD8Q>{hqdly#k*w-8JWLu<83?j`Q(pTG5gW^CBjvm$o)#{_3PVz
zczJoxcLzeT?*7uux__esoCL!Yrh(4^$;J>e)d4s&I5QF>I}ASsP;3yIgKY{XC_C$b
zA2gV)j6tnwo`Vy?#C*Y<Dm5xz&57_0@w{8T-QEe)N1QNu`MYHX#NzpO<Z`Q3R)!h&
z;U~o`1WL12%C3@7jD9}|WP&P>8dyWH?v0ddbJ#1~BH8A}TZRz^Le>_)y{b}?+}(Xi
zqjFsx{~$)1R*DopmHA<P_aI-Gen`o{6AKmu?T1o;&4OPUg%aqnpdD+3GV@3`S?cnq
zX2=Ab4tQSL+HET0HrCceax5jgk2pBQQCOjQPO9YHnW{O|tN9MUNzrIpMuz-fX!P%t
z+)P&+Ei&RiZCwDen5*@2KgguSTwJQxr-GynRCN9TWv;eXXqJYZy%?^^MkgaDr_tEn
zQP~Q&Gn#tlYqWn-ulVgZ9We|w%xA06ot>R+dNva?X}vu?Tn6JK^g$8z;Uspbg<!{j
z%?-e^a_0lGLDUdb>(k$8_zo5J8$xR@ZgHC#81&8Jy0jWtZBQsVJ37jC<muI9fJP+$
zDN0Z5ft9(5o!vg;*Xmyxie}HBchp^+VcpZ6bz$1?;<?~)J-%gc|H&UevHza!#n#>{
zG8~+T!9EOUl)&iN+cF1p!Iq6W{l+3j<dT7u);JR;Ip|_3NCIr$d?3Z`gB4{yJ$<&^
zi=U8LZ!JfEn|p3?(PnSOcJTPE%>r->(fT@`pFl4To%+DZ0sfnM|7nKs_Mge~9nQMn
zB~~Y$ap;xuHCmeWzSvz6sc|RyFBTB1LPr3e$t^S~sYY;Rcf8barVR`X1QG6W19k`Q
z5$6s+#LKWjtNl#k#rCBAq5&T(tNZ@y1=S71na)n8Q@?4-#>V0omi_(xdkRln5xRt8
z=9_okmE|xQRYP&h(=Pe5oS6xf3NnvJOibWa9x~GSL|GAR{C@rY+SA_AaWWsKytUN{
z8>&JVK!~r+q{-p~ZF3LOxrO!ypJ+iG-2o_VJSIkff%*IQFL>%xrGjpPXlny9TERSN
zSpVX#5Er-^eZRcKf<Bg&an+N3cmmB|e<zHoWlnp?thI-?O+)qc$a(~MB&%)25r{^J
zwbdv%O@wfh_g6oW*t9{SiDlm2kS3<;>5t_teC1mrK}vMl3R3g)t?=ywvwWIi-!he<
z$k=IbZx4Q*bZSc=UMP|e3AvB^pyQ?Xm@MKH&{}9x+99=oj%34V5c)e<la52BhADq*
zP8!0^pPyG)KY;rRstu7s>VjU4Ty43xg|W`W!s|(@SZ-TJtEWj$SvQ58dv`d6m__Q^
zT3h!4T4Klr$lP(~%9^|s&&v^5YTO6jN3xpAz+Lb@|A2Bq+eN}|yaY^4P&s*D=MogG
zkqrC+JN6j}Sb;S>1hzKZCKtMci|f&(GAo`1`KF{R0sH&Bam`H6_VNGp#2uZ2_4(Y~
z#$$ednBxH_6$&JB6@JkU>5IZTKmgIv$&1%*Tcn~ROnH6>AD>xel88KUer3h@_3MHQ
z{$AJ-sxOb!r(T!HMwpm(<c<*Fs^1Q_hlSwjoYm%MR%~qJlri;Z(nS>-Z{I%kzI_Uz
zH!}xMl!Jz%zm9rb<L4jm-%-7r*E{X4j&lJWhWuA=xuiSurT*@IY<q-EK14Y5woj#~
zadvPC$`(^cS6A;1qLw{t4pqx8sa|%v`ac>{HGDXdi&)U27>|{b2wzm|IB;euqz^oI
z6cZQU3P7jUKeENVbqh&WD0N_Cc$;*{4(oyYb&xecrDqn<)M#5%Qv*Ar&!}woaa7n5
z**YvOR$iT7z7P=HYHEVj+xu$|sF1BHvZiJA$td?!IP;uOR7MT!IVbOy@Y1u!qc$Ch
zp%@Sn6KAp~GQ^{bGSOl*m#wbqNOiQnHB^6+IogkDnOVD?kv)~YFLDSc{l0+1n+Bgf
zx|{1T%G&^8I?xX+bfciC1|HCI-dvkglxv&q;?vd9X?(1z8o%`*yada~+}w6+2E6XQ
zeD%v;P#}k53yJ+TewVrCwIU;5z=bd+uw?d7>$xo592ev57rRbmdOv>tyS(gy{ixAe
zGz4{vK+XoAMt~j>ySW)^H6e5`VZ;0^Vxm=&rAPdzsuNqYodA|f;3K?RcUUCt<n%o?
zHMPw$7TIMYV9eqXqp<MHDX$&}Lo$GbWnTQ)sC{<W#e-dU=o<}8ax&gc>tsHlka9eF
z^rrcvDMV&lFSLU}TjFg{*`Shgp&JlVZl*`-0qQdgj)5=|ZB$qf-O<0?wE9`7?V*b4
z>+1`m{P4%8mC-cPz=xd0u2`Nn<6^Kl28($efX+d@GTU0&4DkyC0ffSd0*(yq>=r-X
zx1622EcRT;T`pRwEO0Cgzo<e|MBdYUBG$P)gCkO4q!ThwKX?GMwcI_+FDpX9>~ez+
zZ@#Fe92d9+vCCmymnIp~z)$@s2b&ApLA+;J$;Hs3A{Py?jPvmpZ~WJVFTiX9Pz~|Q
zm2kQ6$jGmPXk0ycc`rS(K3J5BT{h$h<?Nvq5cvj?>$6XoiFz;y3W~>B85up9ioc%Q
z27)|ptEuzf9=$cri<IJW&1Q|=E*EF)5)#0Hiqv=O{vCg_>_C4Isv;{Zwg)LWs@Ua^
z(9j(p$i`ubM@sr}8T=oabt(|mJX{}AYHD;Z&TAm5fo9O}I$AK838tGr8CDiLGWqdd
zh&_5?d7uwqKOb!J-MLSU&|-`g=w_W0HJ%OE#>SMD?ZrL5=q+gn^1?trI~CO!W;kpH
z;!;yxMc&tm*!rt_;E>-*Le+JzvylzLIAK5zXTDKU@~_5y{K_+lTzC8GR072*szFG-
zy<iE@%6J(jZVri(ZE=Z>fWQP`NS|-QEpz=^3}_C)&^BSD93UYR6O-k<w~!reYDx<j
zN&L~ypBkgW2s+RtXh31ixls@5hQnhg4xC?HKF(LV^P%}c<Umc07C|f~e@$s&$A`}%
z<R(0C`c-ywFlK*o!-!^hm<CK>(MZ-*PU2#_H5y{##nMtvf<`^3Wo^Ju8XM>1`41>L
zEin9R`0RsmGzH$yHv;Shq0>d3hg%OOCgqzOdfMBy%U|!nRRKo_k~b#4>a)g|kP58!
zCQtUK=N9$>L5agOB?NU~fFtC%(Emwh_t_lz*OgVu6<-ezW;wKa_T&{mxd&rEr^idP
z$HSC^0bUs?HRo>+b=ddB79taNdzcdfxB9Pqew83528Q5|tB)MsxL4o)58BLWzS<l#
z4x!Zv&aZO@S5J=ufruEmpd81$^C$M}$ml2yZ6+8t>&+{`Y01j+1GW@O4i+kEIPOWJ
zw|AvjGJ)U9^<DK{tr^t~YB)DJ-{bC8%B73x7F46WK{b5!DnD9fb=v*T=*FmNCdFLa
zf+Gww6F+~tL0B)eo#HwY@ru14l|2W6-aW0U?>aR)3K0YPjdpJ5j#zFFWI?=XyfGyX
z)J=w(d^RH=D#ncT7X(B(xD*5Z{cIj@{K69J&emALbzY2c{!cruzPPw2tuooC(78}*
zMz#|BjdgHS4{I~#Fck`V>CZsTkdmFfj87X(!f&VbZr6L-ZJgT7ki!n#4{Jbr1JNHz
zb|v^UAL|2g@bEqoeYPzMmke}+M7KDhv+UN^VDvbdd@<d<A8B5E%~=@9pnlWPD5$B)
z-{N|a0{o&}$f$^qzaNDP1*X;Ot&Ppr-H?pkCt2Z=(k&25@E0tj@fS<YW_Vl<pIbX^
zOohSaX4HJEfz#q0tdZ!-lItVl;{L3xOeBjxiz`jS$W$W?=tynlcG^|3vQj>+KHIlM
zk4P`~izCAABNLXDZKHdPdgIXjV6wl3?C;cfTluvnLnGGpX??X{;x}>W5uFjrf?Px=
z4_G$)r1fPmAwd4Bx2QE~nY0(Df|j<n>rNMy7Y{KpEi3@w#shdbd7jblpzqJ>sFmSW
z(I*ciU*F?iHMl16<<-=LrfH&}Kuj`<zCLRa3W5R`6SxgQb<~e~_48T8FbH{`+S6fr
zV{X;Q-=fr=lF(%W4t?}*6V}5jj90EVEaj6~9&LxJ+T6XH+u8YY&;})i?^X?gYnk4(
z$rrfgRw%Xx#ZEB2Hh(=Mr@$m6Bm{aJ)pprS61r|;)^mc%y2LkU$6Z)=-SEjFd`$i{
zSl{=y0koCS+gb71y$mFur?&P0uZfH84j%}3qzX51bIjzFNjB3y)kPpa78|>`gx1su
z8m5(g%rq@opG>`>NC9*Mg3L0juAo`6?wCe%(?wxaxp1GmgbjBC-1ua9g~(zxAaVJb
zOH|_5AAz3}66l2>&pZ1$y4_vY$XzE?wDO5k^Se2DGX7%s-}C9|h=nx_dmBC(-oarC
zvypRCn#OhdMo?dE>Ar~x#>rX_J9{)U($cEF^A#z{*y31tl8}s=m{7Z_ua;gzF0}kP
zUp-YL7Ug_vYa3!xyQ|iQMFz;&E<zCl0|Uo7EpDJd*Uuqhc4=vIy~<tKX?GA3?0{c9
zovT?M@*wfYDWy1>^x0;ke@WfhHya4^LmqgY%z;19uY;h<he*Xrz+p2gJp7iyD!}Mq
zAS_;R@>k!~FY|9}x*@0JRgOo6C>HPe)+lTu91U6HrNixoya9=xu$r48_xAU=e$s9n
zG3#PPK#*11!rSz{^*IFR*izycDl1J`yxlKQ$;aWs*2AAiQT%>m@GT9e-4|6C2jE!+
z4F<1p3tjv9%)2~jaRTx8O=Awidnp?DOuv4y?<z!~A)l1_P5+Xbn)^9##yonbr-z@X
zHx3VvcXonF!}+YZF&P{B%)N|?L(xPb!A(!6-=KC!ZXq&9d2_c84jQm6Uc=h#F)Y}!
zRK?$o!8karf6jit=?BpGu*ijEs*NEwR}W?==4apjoE}y5kM@+Fo>oKug>$V5PoM2P
z6b<{$?T9a53|%mxk;Scq4r$}}Z<Qu1;TSKiyLs!JbU%Go^J4~I$M=qi_)W)PO3S~c
zxaMkN;&IrFDN%+IkAH!utrZ1`RJ3KG0P;p2x?1_SJ=~J8rbq(zJ}Qmk1%V$|{YsX=
z4$9G?0=ks9Kr#iIkNb?bxnIn|deZ~ylwM!#ip9<&<IX4pRaIOhGA@d%oGGdp%JdCF
zgt8HIw*t6Cyc(Pj@W5Ne|HwhZG#rux0<KRj$tWrk`_2xSrCf{~fErEE;n8(xKZ*C%
z0h=%bL;$K|SiV&bS(<10<$Acg^#wE!9~zWzwb(87+FhJKfDP-XfR!&XF%SW@0h1iM
z?fYUCUKiag*%6)3RnMO|AJ{zFpH-&EpPj#3*TmT>B2%XH(cOepkqj5vo+{*<_7nh3
zOR}awY&sDxABR8D{^$aJ%DmpUZ@;G2zy#8E^yklqKhenN?xB{oWF{s&PiA{P;RhkS
z1_n$6wXRyrv6FKMw6eyFle(s;rHRKn_iQtq53(c!Bkn(bTR$~*-bO3^H;>9yR29D3
zE%j_OkW~n;-Pdg8?_baR0P4Tln3_y*KVJ@KbZ-(rRh4mq^3LXP`&W&#Y2Nn!xXrY~
z+>3`=)l9G>Y$3ON@xnXw4-8*87O`4nOa-HUo?Qm1@u!ygG9x!gYQz}LK1H@8e@B70
z48$l;)cP-(h(9QSQk;fhC@EP`e;MG%Kr1BF*49Rr=%RW2)|#wUqAd4Yu%UJS{Cp|K
z{li3;ZLAOX45L)60d>_v9ZbkZ5D^d&t=t-=nsOqORaV|+s-gNNC*P5^&PEY(zfiOP
z`J)^>?-#edpOURU4oK-2uZC1UZobq#1kWxX_NR>Ws(X43dy6p-7ty&o8&vP$>lKM;
z0WhvMGh>i8@H#^@=YbX;bmu8CY_NOu3lU5I5*>pRR5}oXzQ{dh<Q9>=8=#eox{gi}
z*7lBUrISs@w49NECim_&rSH{5N=yR_)UgHmHe>Cdh}%ovAe%o6gah_BR0Ssc=oL3l
zLaNuL-`EX;h)n;r%~|WuFJ}SxYiW1T|NTGG>~?qG&z|in_kVsZLH4bxx^v49Im?Jy
zXxo_<{)+`PV%q9>UpKI}wsxz9d@hxI7DJk}r@owke7rU{H@CFZZMaT^j|8T}edzAY
z&^qv0k_q6jJVdwE2D7Z$L@`y0$VIpr_#QuoYLwThk}qD4$i^VVc=7aUMomq8P!M4i
zHS)`c1lI0F<+|{e1ZRr=JQVR8Sg#iFewx3(X_m7{6fMDZYpbVS&WGID8LG@nMB&=%
z%cz_1i)87wc7^967<hPw0n~*BSQzam{H)r(ZVy@Q`fpl4C-s)@Q9Lvr`n2`*<Cts_
zx0Y6xoxQygY1;Rjg7|0niP}kDw+&5@T@Z0FxiI7*ODRCW2s;hUIslK?hVWZG#K$l=
zoG`@4!UZI5>%7$(v70d<6|j}xv?Ic^@%rAA_0BgZP$$86EJ*}WURl8ls}^l-?U>kD
zOyo$k=arwY2%KRMPV62W5N36Y-zFd%x*k@15jEYtXh2%p8yApJ#W?8db3HjjAPaH>
zUcCCeBDAZvt6tQyU60(!u@ja(t$_y}`l)&ezzU(Gf^T3@tEOFO`!^VFPT1-LgW!%p
zg>bhNFvy6Qv;=Ja3}^w9*einhI*lT!<*QfJ+>j|c+Tg1U;905F^sk>kmBu7ux${Aq
z;$dTz&@f2Mhay6c)!d9Z)Ad)Hl;C5fF@nR)7gD;PQsiLwYW5j94$;A<6x|DN3z+zD
zJ8oByaL~}wWPlv=S#KOI49eVGT&}Z?Y_J9k46fZAx2n3)wP5>i=?|(x;*`06OMm?F
zN+2nWmBrRKj0>Ku5(o%@#a`*n`DXCIE-iiMu~JR#E5Dr(Y1FotB0d(;D7?mr9`!{3
zjyfgu!l7+UC@IHRTnPmuF88Vm=#s)Wz9l7HQMg!O9bjUX?+)6S3aYdH+YS9tz>wG=
zY9y03Xu3tL!~gfn{cmTqne`vwc7VurEK?a<;pF6ml2LAvNl7Uf=8n<P%Jucr6b-@m
zA`VJBiejvpzFW$)Sid4Ml08J|64XoHD(;~lGn_CZ-w&WXHYy9}D=GJY<@54jw&$U4
z&f(#WbTxVnOiE#W59M?i1Dbpj61p01LK}v_Y+Cm6YMiR6@*m(;y@_s?5EaEF2&<^@
zj-4Ah!lA|TZUvd>a}T@`N8~$y<>7;<hLui^)rb}H()EIs=EYIZFwC)_R6OaEPE6z{
zW;Cl6p);#3pgOOptb{$D=J&#aU9<sSVc>LHV!LK?$oR^o7nhe4X4ST-N8EaZKXb5Y
zAoyJmk<}Zt%xFB2(Z!1j!Feo~RG%Rm*kS$r`Ff<#;}FsaTM`7(8XCrrjvU8FMksE?
zM291^0|Enak3JuShN`u{yph>5HI;C%PF-p~AQ$IJn!1}OmMlT>a%@mB$!Te|CUgTo
zK=U&OR-TyF<1iXQ2&jE{iMD5*#|pdmeYbsvGXnPyEPB=e#6kmIk<GhzKU}s9`?_M?
zFIG#e_VhCd$fn#jraYk`lB$PHyutiu?(;rCae4OiDby4U1a`O%|8bU#)~9}uHegT&
ze}=z+pQ)Lr6+8{BA%_YQ%s>ovOgNq&imO1TdI<+2#vwfbf?F=898JmE-vdw#OB-T2
zpW-mVi_-x}BRz(@&#1P_dB7jPWr@5#N%Ly~H2bi${t?ZwZ9H8o2nvM<LXbCH_U)B8
z?=`Wry+WC#3BT(z`)hT|(d_CR*^{5h-K0VjS&2WwBoGCWI{CU)QvVp<uexGS&j0Fv
zUHsDy3(UOyiwg4Cz`&gjR^dzrRk{c)l&&}I`Yu}`r3&!0yI-8>F3+@vDBrrvt&*%F
z*C8(Iv9db4!&?0a-eURh;;v^HUK!QK??9U;<EpJq0veXio}Q*2{*BWoy%Ik$(nXQC
zLkb^g$n^NJ<Wv|2mF!VLRPmR|9rjiPx6aO7QF3}B?y($Y>nmK`uLp{Ra?I`^pbT7A
zQ*~QA-TW7L3X2etG1sEJxxbH`me}S-L5$uhV7r0<P#ZYb%JIjgpOkm5UPm=#GY<#Q
znt*Vq4B{y_YEPyh0NKmj+AUY(C;U$7yzwzH0Yn;kTJ&a8?#KJ%DEIlis=jlBFmJ5F
zI_zggVS5X?JCI=QR|)MlKxU5YvvEWE_-t1;>oI%KCAhkGQ$NCh`F5)M)0AUo8dET*
zS-nV9VxlnU?Od+xjG89Wg}1w({nd4;*lxfMR7p|>n#0A}D0toP?Ct4RJG4QB2XLx_
z)gj1X=lHKX%#TZ*(LMQ~<OiGn{$UreL0j1Nwe0}$QfZP3-6P;^DO=SZ{mT7X+Yh84
zeK+ls-GLsEvVVt=VW$|e^|R9*)+vWMEGw%X_<MDbV*_lx;!b6x<P`o{3AU(QyAc}8
zYhZbjd6I=FdhYkj?aVeGqGij=dB}hvPM|KjJW88z=k(VzD?{M;ZB}g%nV6aywV`0v
zVq#-oEJO}LSqh^S9x5`D5Eb<}&j(Q^3nynO&`hIX_CJHu3>|8)h?d?HzYOSQmZ76I
z>2kuthH+~Qz$C!6l%qD&{_S%SzR^NBa+(2Db^f;X!}^KTT|gfuMh{<D9CiT(5D?BG
zn4H&PGbue?!HEHg>v3RxFXkXGC-<$S1l9n~ke|`W-|*ZWX9sZ4EO&eu<TW&kk-><7
ziUD62Xxj2+Pj&U4z>W2zBv&IJB36nATOo=1a-B$(^1W+!no{81(r1Tsy0^cp9m!qy
zM;B*Z(nOc-7t+$xC8g}#PS)K2%+K#G?~Fh)Ls=ph4-YYIT9H#ASE=th;hc{7Sb5;l
zcE?vBo5MO+kCl~`t$oExj-{u;N>h`#&GKu_7&OtBrDlaYZgRQq6$O`oL(AU8ctiE~
z*8>I0`7aTM#~3pkbykrXxLIl26mA<MMXtR`w4d)VYCZ%KY!5QKBvFV2gh{@AeH^>2
ztYK}1^B|Ts?O~B}1M(R%f-J$-*0$yirBWP7_F_2Q+d|V}3jvv4C>g50oFfPa2kCd<
zX_kOgP4FUVpA8M-$Pxf^bmkk7^?|4(JX|43>iP!n)WJ4;a%}wPP{zSW<rp7TES-k7
z?~C1s1r)j$$b_L=e`9ZTJR9g96d1@=q2c0kI#zZOMz#;Ci_?|gaO5T?CxItY4i6nv
z(vIEXy7PsjMg2QG>#_)f^4Dki(7HM0fEEN!gxFOMUS5aM;>7f$k#<-m0;N94`(o=;
zITkl495^As?_er+5|%W*y@jCcg!ODD+U-?{Yb?1uK(?V#Xu#+27Hbn3$wIQkS<G}b
z>F_$5&I_>B-o~PHVcun~5$4LEX%7RxwNw?nA5@%m{J?3(loa!{gn$r;0$c7^26fLT
zvPo6%lkw^E^$qgPz2O~Ng{bF+A@omZAj5&G?E9Op7=2{$s>|V<<?N%KIx(qu!4uEN
zHh%)<e)<U=o4tmILQ88L@XFhFdZ(i@BAAYF<zcs?kXQC*CIuFEAI*`Bi>%;=qw=62
zTRpv60D7~me>ex(PmGP_bnbdb8%$w$T5v}i*o>IHN*6T)p75?f&=(y9;!8-#+T0vH
zA|gM(X8(*9728eha3?&SFcgeQ!oubj7GBJ6FE1~H`{wK}=*1S^9`&WVe^kstFmzN4
zH$t%~ih$MWmg0=JoRU&=@X+kIYzl~>G&N~KoN=}x2}Mbr@7w0m6;amq|A?jT-P=%7
zqCW8Fc4&?CMQWvTno{pD5&=ZH$oNGrys9c!BuK=<!l$gP^VhHD&d$7d?#@Zpl(lU$
zce(6^ra6{GpCyKhXeFQPBj=1YLb0uJ&oTShAG?t4`;i_mq7CB64ml4KFI+%C<_k6<
z&jW21-5d@#XF%;|!KyMfc?~#6w*5&zGd4{eoSiwakVC-`<}5vLfFzvO)|+|w+?P6@
zxf-Gl&jodKF3I}Y;99Y+A3lYZ0U4qLIsO<1%s>wUX>J2-0;s8}f#0AM^=PJxXPV9`
zua6X>g6;y5G6)U+wWqsA)?_G&u6k9nenJPLRrA4CO~It?)8XA))ph@sYTCaMQ4Z6F
z)T^7%XR}J^?zd1!-LDx<s~Bre;<BWAhwbv7lMXc?!0s`=2KrqGinL~bkIz|KFzn=P
zSe(%jaTtW48X6ef<l2zzd+uk{1}Y#bj2O#1Of9m}D%y07)SQ*E<`D_B1caD02Cp^P
zGt6uvXCG~#{fZD<fPSK1L<_)v<lBHdq&VBg*_~r;5j@@0q+uvQkR^&Uml!P-CVi{m
z!|nGAuZ*$zj)eWp^xiTTWq<bqnulQa-rG`D4;2?xExt@A57%%wiwqJ1T*S(hjR9EK
z4Lnu(-jmdUtuNZm3=Qd&q}DeSjlr|{_*2DUD?kR?)iM!-T9Jc8|L74G_oHwj<}Ze^
z=2a59{EA#S=uMMlg^#}OGV=#H9yzQl(Rcx&hp|u}eo)o)O@a^aI9FK=96l>pbL!1m
zjUN5($uTEPVPCErMfUKxxaJ%TI544%k7&IxG5M?A>17?<_L%_-3GS_=BHLPATrN~8
z6tN;1ziHUwrT_IBBA&W~+2*hmy_Be?|8K8E#ojuiDy90isH{wb?n_&nc|SA1Hz}ow
zSi<y^=u#_gi&xCzJ;sjzNKY~l%q42$OvHvpM3BYK{srj3&0jWPka!0PFqp)Kz^@Ds
z4W)|gU>lg4s)g7i=BGDGUyZXcFytu4;{4<l=%c+qyV*-bWD*=~CpGmF2|)V!Ni<JI
z>9u>!9+iiy7oGoo49yAL>NN%pJ|I$h|NaVCe1oMEgt*L5CX@l=i-9uG-yaf<u9E@5
z(y2d97W`YAH*STfWXA?we##-OBO-JH0S2??<>$}rSe}+Hja${Nfs4@d=g%Sg&B6i*
z*$B&|0y=KPWCLK4fWmua#R<Gaz@M~sw_hHLPBrdHy@Cw3`nt(K!QjI?<ml<EnHLf9
zpuPjw8Y${W3=9~LA5l_@CaZkWyH%u;9+H^&$rn8clEJkW;CsR5CXT~Y2~Zf62am3N
z{_*->&#EnjQqNwZzg)73b(gz(f6NkeS=Eq$3woMp)j|aftV*5r)zww7Ap$i9<oLne
z*w>ub@#sId{$rRhLwMY@;4%h34_Kx{<!3>hdIjJc8HkErP5BMv1grT55PXp8U{<v#
zT&}4k5Cso&*#3(J+(ca$H&Y;OWY5B)!jh7dge>8jx8^DzhJf4Qm(fcR!}S*J-xW`l
zL*eSt`@9zqjTFkD>sr|`DCFP4)(`r|<n~_ln3bs-{us%*=81%af3!Hitd#Z|<H6^R
zcrBRT5MpTsG7Gq?*kwrx{G)NYQmhAWqC8;1S}02mBAT{`2ZJi5ot__OMb@*`<LF2(
zTrORM*q{g;b1SQOfKjeT_?3Ve3oAuCx^pFvwKk4#kHk9T=M#4m&t}w(3fO|Ar>E!V
zmpSkdAYY1#U5&(}u$t5F2t!izb-@IvG~3!#X-YsV{tQCA5C{aA|EOT~z7!F;!o9WK
z!8$rVF2A#vDP&SFg)*s@&VZo%Vs0M2zi$W5ZL3$1gTI6n`?r)20Af^!Qi=cw&&SXI
zRJ-lX7(}lM19^*$i)-kRUjcy*Z^Fn8?z9q)Yayt|lui$hA3D)s3@@dxlKp#?ek`vS
z2?~K_qJsu-#WOLT(=mVm8?=QQERmQ)s6j^fBcGo)x{<mBkUrW~*i|lj8dTdZborSZ
ze-uWk-&RV6o(-7ppmZJM=t&g*^g#iZw&&Zw14;i^Syvtpb^6EK<jR>NM~E5BG$Lk*
z*0^RyB<q~0&3z}86&)&8M#h~YhTPYrEVi^QA@^A_25sbwq*RVvVSb+({rB@HUa$E+
z&wQWH^EuuJ2+S1afPZ$Mz@g`Vj)ppzu^)x<@*}>*(!2;-88G=_P&pJ)QepJ?@uNCZ
zCPfgZFP#&`0oPefTH5cMN3WDNn=H+sX+ll`cM0FM_0um@E0h8fwUPu0hfG~fle{k|
zarSs7$(ZhYkaqJXVc)*9St>o*2GH3nB4fBG75C0|cL0OW++0(duaZB2FH_uNPC1T3
zmR&EkDDvUu)J@p-z^IC6&z{lg=Bke+_FH`T50nB1hp!XPRYdibSckJVSLmYoR&)bb
zjWm?1s;nU8&8~Y5)4`W=yQ4`nfRX$x&Dl~O13^k?odG)KV$Wr-Bg`-H{FDkXEpH}x
zH3B%oHX~-YlI#IA`gOeq@PXYs7WTfjACjQYo487jhF;pid0jT+*M;3_ebkH4P;X5d
zi9qD#{u@YM$L5_>(*C&swTrscPV(I>%4I|4QfJj8JZz>9LZO9}>Q-v#D#n-as3J8@
zFoCjryc;l#N<x}Y4n!JLD}22KLNEPkN+=Ea96-|PdEX`vC<)otf^@o=<xo#Tt=5e*
zpaTfrc|JapekL2(yl;Mg%8>bh|10S5bL*(H%GdFpJ_Chx>Pod@=^4E*flIW~r!Tl@
z^yzuDYUwU<1wA*1j|;gaB_&|fxm=5m&)f7S%<EHlcvBlxEAoKw3hddhV3)<ncAJ2@
z$ME8`<wpbNV)Tq7NSZ>#h9Z-n)Ou!tI$w1j8dP$Z8Cq!aFKj$VBj-s&#;6!4rIZB_
zHYoGLo-*Z9qDm#^o3DO;+#`#VRX(hg_Ccu-9Dskt;}Q7heE<~DG}6}xzjhHQ+*Q(d
zx(q=5+27VyZk-b*uYc<wf63>5y&^n=)u1;3U(!`D35}4|nn!lr+?i@j(h+FOI&)S4
ze>=usI>{s7LUTL<nIgrPuy)G@n8^^_{4Wz)l*IG#tE-bq$P=<o(wWeJr-AGY;JQGv
z+#47m=ZEjYodgVEP#^)gr1kf&C0aH`_ch%aAYSC#6UOSM0eEPRO)PzMsvKBKQtOW3
z3A|kMweB*=dPc~q%|Di*b=&1>E@$5-d13x<)9vN;5Q`AltXX2_r`{A66x8OXKGTd?
zP!vl61jX`dPLcZ|kp8)I`*yB@xQOj2F`uXpUDul~8X6kt=9jd^2<ToUCG}Le6QOPO
zaeO?Y)4eTm4_ynC%OvCGM#IO-!*6^n`)9;3WL7&vUd!V>TqVxV&LvhirdLM8%@Y0q
zw1v^;(&J$#*uL7}!+(IaFC^1ptj$IlTyYIp0j{qDlXeEA?gXU5SS$6cm&3zy+{CKi
z-+^P=!TT8*01M#N)zy9f0$99m!Y<KZCThhlD?_+Oyx~aWUZPN;d%L>qsq!_9!sXs6
zn8(lm_-p5$e(J_`Zo^ki4H{v2wG7sQ1;C}N<6~nm4P@TLLXUs4UJn45>GQ6jWVkG{
z`&$kP-OC1w`8p`_AYMTi!l`H04`Q;0n%Xr`VWdW-L;l@gV0O6@OG`;nZtaEY2sHc1
zK0X82zSd4oPp=Q0X1%bVFc8CG8PF%I0yqK8Fk<n50(}m8H!}fKaOSQYu$5$HAA#Z`
z#TcXq75&avqtm)t*3ee@e?$>_p?rK2a|9f}!^Wd%J9Qjp@E{DqU?5N^N5%Y%n@Hg{
z`9wo|=YUo?Rkt{&s!u_WK#O?2DsTwY(UP3JF1U8c3P4CuVB*LJWX=3O4<A|hRQ@44
zs)}uf32^Fzn<3+pY7TCd0Pd_^oe&re`w<RR=U~|0wYfCc0RU-sfpfM<`MdF^=n#h_
zP@`L1ycoREXIu<gH52wzbEl1s<G_U7b7wuTkgT$er^=Rym$yn&u!BRQF{$4gKM*)f
zTPELuS|VZG){@MxY7|J>Ercn!QA^j;^6r#)uL7vGO;dsaIQ;>s;@!fR^GQCvS3s>2
zWZgVH@&RBfaCxPewc0iWQWr-zfHP6k`}ABo#EsR83!{c_d%(SrDrw5ZadB}ai-a70
z|7GML5=lhy!+*qC^OL5;%SZN>TR|1uXr>JF!<~Chpya&u1_GOpId-MLA2MSfSwZ%Z
z6%~;?d-g6I5v~ZE@G8-%8b_C_rVq%_;p0!uXJw1~9Y&#eLBK(D*{3@laDv64&fyCt
z>ws=#jvT9!UHg`lMl5+x-J$+l+FGe8iPAL{lvU~O;psVFV_(9T6?L`Ao}r|WFyn)z
z2}*7N>}m@|BHswSK8|jxyoI#dxXvV3al=?hC(=yIR>hn*k*x42YImNnmK1z7acgU9
zAomS)*_+4mOtj-#!836SG(n1_2S9=#&+AdY(YsfM_~%H3M^Mn;tAU^|Ksa^nbT(Ah
z<KCNt^&`o9iC4cp?lCkw(%aQ_e3&L6r63$;zpfD#PgM@XoN;$|_w-c1o4SE&jypju
z<w`s#=c?Bk_-LGp>qz^k!rrAF>|LS{aJ9Xu;k#GoLS6u8WMN?5FzL3S{zWjc*5n2q
zIps>IyWms5Lo8T}6qyEv3z!*##Gx9LdXy4S-K|>j>P+eAy0?k<Xr>>#tLmW(sjw=U
zWMea?J9<4qC_yf!-V=_}G(i6V_5%GQC5_jR6apGf3Bkk5>q%t9o_o7%QXNPyqZP*+
z8p^o+A2oa0ZIJC2>yz#BjDOqTa*_A+kcErQZ=|;ii;}DLHlnd*W!?h=D#VAh<we^F
zcpr5p+3%xH;Mj}<pPKDwe^CDdAV~;htiWhSw)3C3b@Vma(oztzBM@GPa5coczgq^s
z8lyY9Vdm%84zPg`jom^50;lW4<R|`vXNB1?L}^!gE{HRM#GG!>)e&}_-k3*iZK)5G
z{g6B@m6K(}dU*Tx?f)JdrQ>|Rz@Lwu1^;^1=GSm=_4!`m-o))cT&Q+Jd(@?(cX(yO
z#KGZ`hX*!nG8|b|O>OZ)OvbqKzNkdXo9Pt?dX3MNCbEQ0;k&V<vR@hIMnoU!!`tIo
z$U;t%f<_{ThK7i~zhuQgRtkw1AhKTp1@u*WyC|lszhAQdaA5;`(X-4unZHuQH7_Bx
zwDwr%AyBou-irV1Ei_$S+}i9w<&4x^Hv7?)aI`M4odUf!>;=~XGNz^BOmJ@KDVtnq
z?u*mUQ<JO#h=A2w<xqr@O5E&3w41qj<%wku1sBG24U3t0HPPhxW~6kq#MV?>efO&R
zmaAXm1x8v7FE;tXH^>YqvW9{2kcH<SurCJTl%5QoPnB&7M4F-gzMKX$hPl)3(86hO
zJp~dI<t_Lq7d**nIX?E`gX2gwfbM1C&H?!D>}Y+slhZITL*5jat#k^76rcuEX*>;f
zM8(jhe<QCvi*@xh9(}<&x@t{d-4j8LcU$I5L@t^YvIHJ}#oLWVSb8DYmqXsP$bAb3
zzACA{Z1H{jer)~tI`sA}LLV6Rol`-c9!mL&jfFKe*Q~6Bg_)rB5Ig7}8(y)TQ-(9U
zHqo|U3S#;<Fc<~N*Bk5j<qp*TPfqo}m$AOsWZA_@5<0llC&KX)PnJ@QNmIACn#57f
zEU8StJ^s5PiRt7-%c_vEbUo2n@i>sSn$ElcXD4}y(btzM>n}9FD6O?{v+7o6=Dr|L
za2V+V)&$57etK_!<QmV}D*fA~JY!=p+TYQckJ6YU63gHf-Xl}E$;w~8pV15#2Ih){
z_z8m0em&J6!g;TVOdbFWu6-)6hvUk_%?;DN2V_h$0S~f1ClS1zUf2M3hxdveglP!(
z1y<;k*sGxv`?-`-A0+M~@UteBO7p9~iRi(jmyU4`*2OVtNj@CzBHrL#i#!%9y8Cyj
zWZ)$T_Sb`89tcx@n4b11j*N^1ykr-6Qh@p;T=8=PByJu;sci7`=4J^H6R8&8o)pij
zHbr)7ACRdYv@F6r`TGvP<e(K1{mEWNRl8J}lUO@%C)OWFqAR-XGPf~iOPCv5W%d5P
z6~&Gp#Y0sijtaxj&cV%kJC|?n9uw1h`1I-1&K^g4zkdVuZh(P+G|oJ6er_>1$AWn1
zC2)b0yjOl^{&ZtMXtjBIrqXC-I9K1s^pegY%7YB-Gk*U!uaEaS3WZ(c^ckqTA|q@t
zGchV@DJj8~RwqXqr>YcZ&W*MgW1cws2fW7h8Wq)bx|pz^*X#DUi8sZ}l%TJlxpCbz
zC@3Q<Oa0Zqz}%eUhAF0nwYdOaxPoJAx`*3$Nx=sV#wB*_xpmRBg)J>1L8mK{v*@E3
zr0A^Ik#XB~hLfIug4{`)+|F*Y;T4;WndNMe)Vf8A+pxN8MoRVf>knw*mb0f!(MD*j
zk~aB@FA&2H9_*HrpX=5+slZ0+BCvOC|H(3@-^D6f)y>z?=`#%ldVZR`vpp1^f~+lC
z>u`jPn_|GT=2hQf_rP{eDS}}5FjWc=^NqbQubAJc309QAxa?z|ab-Q(qMn>48sHwd
zi;g-S-JSwjp!G%XZSmwT+59>emK)OG*N=0T{6z6K)Yi+9<*BRZEGg9<7-8nu-lQ{d
zQASDok?Qs?*Z_~Ece9@)M&&`2ZuS_-gskSQAOWfwoS#mQ-a@7*7O`pC$RNhdo^sLD
zxTD4C9zx$txk<Np&^nxe!^Wq&*jYd3d<4l$OeHPep~xJa5?)JRmYbBJ37*>C14L<l
z><PYy(mfbv-FzmJv&ejlD|+<!WXM!{W|=%f!l;72#H}Oi;)*}N1SqOL!z^>f24+7N
zNjASv?^WB}ejljuOJ<5pdqHiVUAD-xk)aEj4Zr5uBx|?lZud6|U8BAd(U`|#Ctc3j
zuuc@Tx_;}3-!6H*2rQ8uJ6NpfS>`oZH4l5$Tstc7$?Q)4(Ap2b*>TL&iu4!3?dJag
Dc#09N

literal 0
HcmV?d00001

diff --git a/screenshot-09-notes-context-menu.png b/screenshot-09-notes-context-menu.png
new file mode 100644
index 0000000000000000000000000000000000000000..837d1de4c8d2cba71952f89eba751600432b5e6f
GIT binary patch
literal 109855
zcmeGE^;ec()b<N2jYxNgbhm(XcXxM*bf<JkcSv_iOSg1)cPiZ_?B(}<?q`hm{Rj3h
z+i{5k7Z)e%Tx-r_evUZ_SCp4Pe24e$&6_ufQj(&|Z{9#vgTG(kAizh4cj&C%yg_**
zB`T!q{{1);S`||Pzd!U8%}P-g1L18ezRvOK>FMLj+S(f7V&39fuwfwF^x8(9n{)dH
z1v%rp%a?J!yV3D~e@>6b+0KF-Wo6%g2-6M!@uM?1nC1gq010@6twxajpZ|jQ94W}*
z;Q#yhzjtW<zjqvIhUw|TW6UpV=#~6wN?FY?#ZjPy{ymyw`}#!1B^4DF4bwhgo15>m
zF<{mzqIhPhp1bGZRE@n;m7-TB6QW7BvSj@~D>_KgH$W8>8Y&?%(AVD|M`?;?l%JPZ
zQB+h`SXfw)*wGQu%*n=<U}Z&G4z;!L>7Csvt=Lfw9E0nIh|sS{Eqp4`0agy~C3q7P
zlMf$0xVX6B{&yu%LZ)mvnmxTA0s=)E>e<1^Rn^pLX9p8h1RMMMa`1@vc6Q2(ivvfc
zWEyubM@Kb_3NtJ4MD9-lg$rzrQ(+JmWFsfdvq)w2qQrjHjMmw0yr@?$?~Z76Ew>n+
zEW22Yr4yo~_r8!I6Y);YunlG`+~559IQ@cvMIZE9s#5HSFQTcrIFj-sARs^!&)%8d
zpiC8)(yo?T`+t6J2#)*7N#@y2IoZqKfBy6|ide@6dJEc;D8#Z2X2-@>Z!ABeyy<py
zGB+ognHE!r7p4$dgux_p(JW|$hzv@9Y(h(pJ<4!9oZRyL`?%5MkT0L9t=HoGaJe_q
z6Z}m)n&8(97qe0{9!I(voW=rO60I7)>oL~{<^2|@|G8Ol`J4L{hle;HK8Tp@Rb*Cw
zI0*PI^wL!o*d{Huem*M7JS>~MFDt{OMFGbkO?9YEB`$>Wo4gE<d>NOrkCK_<mu%tF
zRK7$Y3?e5Bi^uihR+ZkT6efem$D5JmhR<iK&7a588;&Q8ZEca7YyDo|ikrT@+8?u9
zZ8`$$g!A7$5{)J!B_-wJn(Y#dLG6TW4r&vQF2wlC%0|;UR)0-qA%sKRyPc=yjG;1T
z%27_vr50g#8q2)OqAwB$Ely`iTX)EuY~*^jj*f}h;IQM##-?(bUsBTKan;}Eab>$y
zoAe}`&7bdn5l=)!l=;bRD7#Z|t>xyU%_22ncuLB`;greo2_XU|Z2<GxM(4o`Bcp}=
zW)hvo{)EBip=O8a&~yTof)qu*PJ^|Ttu2e$@N8^stSMwyP*_RqR|x2LF285Bj-?|o
zw%hFA<8u;NJYOH7ucACU9gLUjwN@3Hbv)i=R_V9XqOXA0`8`{j!j$cj!Fi&qr&s89
zvhtHSt7%a@3h#$zjdDu^Ng?~-R~dUp>%&dO@wLAUBQS!9WFIMIaRhvyxx`VH0`JZQ
znwpvlW`ziuus;6$%w*8<+{?EJ!cy2VjJ2_m5vsO!y6Lzy!XU*irX#(U7q*#sZ9$e5
zZg}hvd;t|tECp>X7ngBbGLnj#47-Ywq+vMe)Vpx$@NoUnlUQX%vY9%gy)p{wQVMHJ
z7O_I-@7r6w5<EOSbLAQ-x1-?t3#BnhU2?3QU0ebK0@~W!TU`F+R#vVR$^8L8ZwxM*
zx|mp@M9e810Uq9Riwiyz(-{_nHVIt}0k?9wdZyRiDGn~Kn7H_MSEbHRkzBPBMIzKH
z-R5_31qD*u+uM{1SzPv;Ia+n*Oq$FBR$oa)LQdCOe@G_{gQxR&-4Z}iRisDZe{{63
zX40(QY;`+}U2goMvxC8V?hgr@!EU8nsXYg-lH>FI_WeaZ_-9v%bcvA1nO0|hyuXMV
z&GlsY#_2$JI1yF+O%D%``*|#xSVX<u#_4+d6G}-(M@OCcm@FUS^igC)gzZ8VU-a5f
zJG-eovBi!3Y^A_Ea53%|mj@Hs=a!hslQ}{@;7{_+{nL}(Mu*69v3`3?p>&co9va^M
z%ipJIevwe5p~kaSaFd^&VC~(`*4sh+i4TeEa794)1}=rw!~UW6^Gwm$`Lc_%v$Inx
zS^J;uUowB6kk4;#_cIXjIeESBN&aOZN4k4WQ3;7ZM^k;FR$?L|d|X`QEJ}1ogM!1O
ziINmEtY25HeObC?r83*O^R6F*1N?oAYs%pJ#lu_D!{Gz$<y2J-C$ec_$f<+=RNK|a
zGU?{l>l;g^22@p5)5%>7^zr(=tgd(1Oph>X)sl<O?hM3;Rccln`e%L$mfqSON}yG*
z;5F*$W7OlxPj5Bs?$P+6pUu4kfjC62&aXKK?lE`)Uf-OUn2BHC4w4cRDdoQ_=84iA
z4kemOIXlY^L=$q_t=C%3?2l)DN@CR0_B?yI!p`YK0Wp-rnDz1Y<nCxDv`8+a3s$@*
zjm^UOY#q_|JG6QS2%(X99P#k9w)Tb6YT#A9ul8e5o&Ej&Q6&F9-UPSm{Imt@l+NSA
zgYkj={Cw*}1QvtmNqR<03*K$xmlYzOMl%@;FRv%n>8}X8ECT}rcZX9u^OY-q7JdYp
z8~SDVi69EUL&9Y}KAI_Jeev{s%omTsVYkc)2?;sGB_ev+{)KSbSW`1KlOPfk25xhA
z2g6C=bdAZtZ2{>(O!im3X?{ppq`}63^X@>249+jxwkj$ryem?@1bm*dZMP0P{jA&$
zTRqV0aChfhz5fEtSVqcIYm2_sTp5S#g|Q?%6$?lOWY~dcV!FC*WwZ=knd-3`gEfit
zL5XQY@zO<RZ<<|jqhd_5*D#3nHSR;+U3dkTGhyWKP*5ov>RyVKQHooVhwRI}pOcGJ
z?>1vryXhNbzpDxmLuz1jafvEuZL$y*EjXMh*HAe9Dg;9bk!rc#<}k1iLSdYPwRIUX
zg`f_bk>&P}cMjjM#+o$)zP!c4^i{1TA(EUi8%gfsbKJE|dvdrt)q4g>F3c`38F>l^
z3+wjr=1+l=kN|Ud#a?MZINBB|+9X*IB#D$R537{R3=mdB2~_ck0>X`(#?5$%-yL#x
zkME}AVfqA|51CUD4@T1%m_(#0OSK!`jcgsSw}aCIBQ-|?hlB)fruNe<VNS2u1lVSC
z6<QguwyT3>ED6O5twF)TBkmnOe@OFT>bR#Bj^aK@Bp^CH-~VV%U#_<r+ZA1?(qmv?
zP(m|G!<Zvk?DP}R2#kn`05KXI@lVHHkwDiCR-V5j{XxM>_J!m}pLfFTguQvcZZqY}
zqJXq?S~AP-f|;sP_lOKBJ2JwI2Hc!QOb<pn%}d!0St(^>IPx>*hnqBq7g1OhBO9Vb
z4QFrdorT$1diBx$r8)~KHwOhAWU=h$hpUmMwY7~zYNMykZpfz3b7dcV?n9A@MSs@&
zh-+w2@xOdTFzaFl7uY#hzHq$SEW_UF5Ax=Ar=UMX9<p1f`$es2I2vo*dDoYf#)OMd
zR(fU8!(J<6<FcY6N*}Q%6afK&zT{&q_n=NW$YaS?*Aw&j7Wxq))k<y5eIXq9G{d%G
z4{_ncau689Z^?M;tF=?;wIHTPe*Fr5GH9}QSZ%uahQ(m&hf*K@oy$SEzrb}<5b4j7
zX0szjNiE1LT|P(Cg|V@UY5Ms>LP8opS{&Riwts#3@+Iv%wSL>;p9LnP@{jE7iMO2&
zJCts-KMY<6<3#>j-kXA&0DimmXAtoIa^le1mEhIr3QA)MC(A=vb0p6DFV9d}D`X75
zDAi^LD=IN4wOW!D7>4;8mk1fZK)}-q+@Qwep^uGLpnc+uI#cKCX#LXGVyYnvp&~tj
zBMb{03J#GICOH}=rq97Rp(=V*RFs&4-PsRiTO*s8BsG4@qxj<T@~6iex}%MT&$jgF
zvgz!o`+Xp(^lDOhI%0x-`@{79{=WKEqm1m~65guScTJAcC@=Zy>MAMv`HzO3oE(Fy
ztcMLhzd@nvUmh9l>1wkP^Y1>xiKR;e%20%Z9Hjb*^u<%HZU#z-u1C{LBY)ULdm?dP
zPu5zWwt8XRr5~zX{>+O+u??+l{fvbC*a!&`WaKzWWZ*}pvg|<IEYS1JDP;^PI*sdq
zO!Q0&r&OyP{?;NCrq$<Z9OSfwOmlen{Ud+j9e(QKYA>n`UKZv~*|?Gt>I=_8FGK0T
ze&(q|*r(g0nc4*MZWP+&#Q93IvA~y?m+CG75QdjL3^r*fzh>AwL}Yxl^LcqrgWqxQ
zwI6ZEIqJ&F%6hh!R3V1vq9rF6rKGhA2n<wdsRNo_lyPgZW{1suG%_sg`NVF2R0~(9
z<bAeHs;qvy=Py<${uGcNrT%8~`?T0^k#UdP(HJzTF~|JDo#|tK-h|8Gr($#MX`-6Q
zi^=TsTP^=c&tDl*5oFiF6|_gNO9{tOuZbEObcu*YZ=>}v9e(ny->)U-kX7tqQg`oD
z3Z_Y3YAvhEoUE#Xp~D3|X<YC??V+gA`c(Z)Z6TYD7Lc?_`qMt=o1`T*L#i)*wk9P%
zbLZh!2uA~DHKW!@>FMcNS$jrDF$7FZ@~;ji@_qYR{gadDdx8-ZwRqjnQ+&GC*R!N<
ztVJkp?k~`XhljmONPkj9H0TrE4<!`ys@<=(y50SKy4zM{4B~a#fA7}&da*;r%tK1&
zo3)qfzWzZXnmO0k?sbKoIUME7T-n}yrH&%q$$Gnmr6u(UQCK>&MWu*4h>^BQ(0jv4
zIyJ`4^?E-Qa|8a&|J5Xb{xPLeEH6TfL91Gz*LrK53WQBhvCmVqeKxPhJKL9)nw^FB
zETKq*jGEQVcLGlP$95`e?VcQ`_AV~L^5}oTv$jteufsxy%ajWpr9(j;YInA3%@g}J
zSEW~MI;7m+U*z+28(15UG?Obrm6dfg^NN6gAOSy?GSMO)rLC_1K&M)=yYI@d)OE7_
zH@o?AwfSoMCL)kFA>Q+c67N=?PD>}XvtGL=Vr*8KS~&<rEOz=kK)9NYL;Rwn?3%eE
zOn0}(1iM<NUh)vD!}yo91CuSm`@mHOA|xleQv_cSse^UidxK1uCQ3%(t<f72RVsoC
zw$*76LYZEx>+>xYj673SmBu-yt37q-t!}a}&=hSBJ4FRA_x(col;xPOWLpR+(07Li
z1|2X2i;=4x2pRX?-FGmYR>5)|AN9O{mSY^QzJ1;JLfC<;3B}V8*8KRiY}JPpLizl^
zEFgq|i`?ZcuGf|8eLx|-7s<rZhk6dJv1#}@bo4|FtwY%0j~bX{*J!;ri@kR5JbExj
z6VYAj(*l%@HQB#uC@Lz+v#ZL<YJ4dH>g*df6CR6kL1v~;CXdVIE=!a91zN?)SjNX}
z&Xd=oNkKVOvSQgZRuI%Z9xms){2}kzi2`Af#ram2n&&2SMGUK!+P#nqb^@TU*tlEG
zclx8w16_o#t)>fD$h!le5prt{^MqIp12T9$(1;uU#a+o@uu$dY<v%T_2>gxma5=2m
zM-e2ifPMs_`<(*RPEB_ix9f4x!jFx^qoXg&^|*}~1;j70(O}~SHp4q2!G9$YngUYU
zcCJj#F9QZOY?nrbQX!M)%V4b0O5+!!rNHlt2C6M$hNr9C)7G&nb>>kZNniO6dR*>G
z@ikWIwQj<1#k()pziKzy6z1m>5)twHK0^`ZxSnVajhB&$fV%Q05LLLi;aG3Oq<EQE
z4UU<#%T#Ij+IJ85f8}#H?owN2hlRlv4FB4T{5C?97M_?|FlE#qiR(UnPidE7GgEZ3
zRL2Nph1umBDhBmY7&CwP887{yEu^I$H&Um~-ZfWO*I)$fZQDg!5WM``r;kMY)yq`P
z=E{-=4+<=r9ruR6b318?`(qJ)awQn1NvMDOiJLpTb#-kcZ!D?RNW}cVSZ02E%>C;d
zwuM$NP~zpPrQ1hG&2DEMQVEpI+$>J}kt`<SBW6gv5AmB%e7Eb6QKy-+cpqbLHE0fU
zEWdwrT(NBsN7Q@_ji=U1r91q6NW3zUm%pRm5xrVNRV~EU-o7%MnNc%}>a)dKk)mx9
zQfD*CLw|4t^^3+dz*{RZOE~E5x5<z|XjW*a!oEYzq9U?qoDoBb(kwnNLD5`&gd0pk
zLg)u}&+8JPBnKk{bXr}<njCgOO$tXdSE=*S0T%|Y6O<1ib>TKx;~<0bphzKmzSWH>
z*~*Z-&G8ol@AClbx5;c+q~pLF$E$sYYAJ0kt?u36%icQx5=2sS8>8Or@9zWQBVJ}m
zsNLZ$CMg*f5%F%6<ZAzKS&X)(rtEhv-_5S>Sl7uK#cJ;|WlB_{>W{*2AVpU|1W2Mw
zahfsyZ50c1dAZ#1C+zJ!`7ZMa(Jq(VAfm0Tu@jwEt?Bd|cWDRWUvh_qV2w9Yx_k`l
zzRZ@O+Jt+fbM{AI(rpQeeIlS&b<Y5`ZG@YD|CnBlF|-UMmsJ!V$9NW|P59Ft@n!(Z
z7)74<m&qJo8yi+V>Rg;D$?i3G=E=#;y*)(q`s{22LBX!CZv$6XtEm6_WuL(U4eIka
zyS%)-xR^R&)kprV2pqzj+0q1Ac|oJ`?=*>)>!0g=o`?hOCbB!bIB?J(zcp@0gYX1S
zRYbWEK7NMzSUTC5B}{;T=@zK{bIN~JwUMDy!UZB;-yn{Tjn&t)CltLEL%WNHPxr_?
z9P+8CxZGk3-^Xbys)ko#mM7PKYNkqXMwk4SMFmQ;7pX~tm?9&%o{bRE>i44tQ6ZZ<
z0}45f54V*A9X_vAaNjU$gnl7sTg?`NFdp={1-MK!5#RpSmcMGQ@enrW&L#p9UpU_W
zY^lmQV(`T8xzC0_-Jfp9YRyI#Dzv<wZsh>bqQuqNI@Cn^lF4OdZ-2f!q{5`z^pz*F
z&gt9h%aekR&NnlPSTz*iDaM2A#wrEQH&CQKCG!>i)88U$9jAKkyGwP;f;>me-^w!x
zOGKhW8_jO*pnm4;TlXumQBk#6e?Pa(VQL~N`#z(N`Ej!59+_CJOk+xq$Dq{Ee^Lp(
zC#9lK-k?rcTLjipjvxUCgMi0Z`g#c=oTcV>rOx5#g97O{HaWatdTnv;u5X#Vr5L%z
zC{+nKx#g3+r0bF#Ec|g+rL4_gO?R{umibw{?*~DU;`e*OnE3hgP6MQD(}T&F$jHmP
z*Jy1$b+;v9y~%|I<hkL3Rz;e-yStRE8kBciAg#xSO$JHzf+EiE=@!u|fiEs4B_%CQ
zt9GWhAU;Gl`hVbU0{Y&t+GaZnc>e3}xo_-5&>WiWo^q$+t#6=muh((e%r9#aTUtDS
z+HI6*)<{c+P4+%?z7|oHpKt@&>+Jk|aj{r$^<mT#oWGrn9|oO4$8A1O@+ZpzMd~fy
z57VF|J$F3Fc>8u^YQKk^_&u+xz2Hw0v<_^n&UB8?`G?)@zJGaacdRFKwi-SQJO;~u
z=Xz@ZL7CQ5@B0_VyM!F=_2v(@{(N7TWn-KD*7sC%@1H!*hl6V$?es&#nF`CVuDvzN
zW|4PHXNu(R&NfEY)>`j2%@w}GJxqk|-~OJ%H(;eqGwGkZVa*PLA+EHZD|33g(d<-=
zh#wRanz6z`RUE=gyW0i0$kZ`e2eJ7?)+eu9n^Po2M69Ihni?8yolP808*2VMW3mfO
zoAuSSR)uVSwQ_a2Q&)TYAgrWak-&TjWHwNgZf`&|e3A-2@zSQnNl#xs7|$$KXYfc0
zn4sWKM@2QF|4YE{T_BTErI5wzdpAA<(jEvKBPp*+ER*x|!GnF~fEGPnA4OqV%(74F
z>$W%_HGE$1dA>h7nvp2UB-8YVfTq=`Qf;y~O2s-C@_V@CE=z}t9ERr)zK`VLf`c?|
zGBexg_{-;Y+u}LbV6#*^mhls4tiPa;o+SB4Awm!{8*Tr}5wkNf5u+!x-M2|EjLsyb
zv1n95&stliQ=4kc#-aZn!_WUs;Pd!By)MVZ2c!O~DQoB}$u*r}xpGmWA?Y*xuEAhV
zTz>~KM$~1$ZWF;`Nug&7QW&@OMsDi2s*o64+7xOcPAC1vS*;?6Zp$}F8Ju+9FKCtU
z`AMT=Jt<Yvk>Nv6&-$yq145ZzzdBz_e!65j9>voZ$_QKZdv(m<@$sVG7A_&oX0Xq$
zWX8#k;AnBQ7bL$e|D9;4M$h6Ww69CME-j-N==gn9SxxQc=e)IKPNKT%%%ozd)+X}%
zO(6(nWn-?^dOTA!6Qp|4TI*OT*>^OhLX<381?*auv{od$VT&|Mp1%3A5P#gd0|L5H
zcqZo?$u$BS8ynq+idbOSVY{>``0>FFOnJ^mPXO7Vxd1)83u$PM1YNeFvmzZ}tANtj
z*0T*i5~oD)Rb1%Wab&?d^_JahlCJ$Q%;X64CDGB*t3DUoVz!ul6yHDHnbZ^UJL)3V
zX3JDF4@J;#Cl>JVEZ;-Dv_(8gDX_Solhg;A@BdY7b^YSa(X8|R{Tt!Tav{niv{4W<
z;kKy&Fg^wF)7PYb&<Is;unuV1Z5`b@b2&Y|HE_eF&KOjR*q3u8qVP(KieRn`H#&T<
z8MMQYXF!3q^3x8RfS@N(OXomhhY2qSn?9A8kdWbOO+u#J)P6pue+<ZVEE?qk-DXF?
z1KeENYrXEq0U(bi;D(S}1ZgKWYv&vpWwz`CyV2~$j6cKP2Cl@C`r#h_ou;NCy-mOF
z9E{6NW5wLzveN6Jz8LyW*xu&?NGfr$;0dh)zR&5m_2GCvo`=M%m}d|CkAv_@!<ZZ`
zF2Zk~%NJLE>9!L&9lg7?M*3aO;R-bx80UpV?*7^=J5q*OqBffv_qMJv;(+0(=7OG8
zsar9;X!gU4maMGoJsKqlHpvSRqReUxI*s*Ob^Fs<<r+VvOXo;vB*RNf0Wng$-(}RO
z(hbJy5!hI%HIuRYRp6u-!Sk-(dQSUMyDzK8Zherk48D+dExca4q3qAX>tQo07UcxZ
zH^51Ig9&VsECnkyeyq29-312vjdD=jVk5%Ap;){nWVal=+@nj-hdz#)*5l!}WH(C-
zyo1wg(@c%s?+ZtlNnsS{|CUcT#lF(y@Zmq}KwxTic6WwATvW7r6cq=@{qg$9cCF>o
zmnS+JNvF|9tI57Y(*wl<+wb;R%f_Z6VI~IC*~ne9)-(<WIXf#Bo}qGYaboCqVRwpc
zPf$20F7fcvu^Dx7KFY_|#t`ut3xCW*Y`Z+at%OA{6SwPgo&GK#kj*ScTu&?`8P@EJ
zaJrcVd0%zUr0?+K<%cWA-L;3YuI}!5y91No0|I*Ti$D!>knA_jcK;ZvNH@Qcz|t3*
zZ}PxF5u+%|O~WCojLjiYjWP<K)sTCJG@*n=BG^1$T^*FPrNj%6{IH$D$j*M<8yW-s
zPLs_;u_mvAt2-mJFae2h*-6O#@1u*i6%oJp;NL>3lSG&z`l-LSCo87Cn|Nm4rlw`e
zE$T^9$g$o)2W-|=W%79;1t@+WMQ<rrD^Fhi`}@^kI1ernhFEw}*la$qJ2c8HT|Se?
zK`89(0x&sJ)?aUfEdA8fl2pz-{vDNULr_%7%AadBfsEy!edzJ>{LmkT@APxgj+$Qf
zaJ8VSD$a&?+l{x7({`2&AX4Y&dw3jD6Juk=B}0KvvbZ=n=lLX*7b6)9v483M_&kbo
za;t1~=r0aD-$r=6ZxZ=Dt0+V*9Y;N61Qm;vudD8=-61-3j!qg$K7&D*tWm0|e}QbS
z4OWhF7U=@rGh&-H>1Fnsn>oh9aab{65C@n8pInaz&`44k^`v>UP~WTnideeb6ZgFN
zoz~xQWHFjbx&yfSGN}km-Ss3m=)hADmymdRcp&6;4=e6oUgjxu_zk`$?6l#tMtKQ&
zzW!wL5bImC5A8JLunAa(R~1V6E#-eODbr*^;C&>RF7&E{jhWn57BMi9g+#2R1KBTk
zhvKmrFDIv_;&fOqc!9|fKAryf4Gq)+T0n*MeEo=>GNT*+t55W!-D#V}1iunW#NtYd
zSn4OY({r)1oITg$#icy4D|YRx$f&44v!y%Rj^YLez<Ho;b4i+@TW@u<<6ry8ZeeVk
z$3@{T4{Ocr{R?j{eJ-uGHlVgPLeGj?BvVX)5>@j2p~%vjj8OmAIuf2jzKKp0KVLj@
zLTcC>S|s5jtJ||mRnb9qA@QD^TUa&*1ZdKO7%8EE`_?WS4&cjmFh7DSfRNzWY+hTl
z-jXHzD-;(uhosDRa2~W<ZwGjjKZw6KXi?P^u;`CW1EnZ>=ujavA0HnT6;%iS!EjP}
zlLe^rl;2H!3bh|jq)8aYU^)^bczgl`zpG2Io+KiJo{!{07sb=lv%~vAx!yyXNh<xL
z-8!(b+WeT_8_?^w-DhXd)ybrc>!Rql|EAQpvV#8y^+;;J0+q1V=HYaGsKoL4CH)i)
zF%AS$fNPV}zCtGRSy&u^vQ0}%D~U$MvpXOdz>JW78LzW(u(fZ`1l}MHTphfkh=CBs
z0DOgstadE=)EK)B0AtQ+yl;LN-V%RjLl>;1AVf`gi<WPa7oGjD)?#6&zr9_vOmUJ{
zPxk!eS20;KRjxBQIYqliFq_U9>2uE2Bx84io6yi7^_=wHhc8!;Iro2Az)kX)FqLfJ
zo?>&sm)(6rBPT4pbyu}gMfqk`c&M;dC&31Djyb%!#CMo*zgJb<j=Y0;J%lCX!rHwy
z4*!k_a86mO%h8IUG$Rhiboe~kyP2Ar0^81T*vZW=BQ|z(Ym3`-5P-qtt9G#nj8gq}
z9yb{`!t0mUsosl=3jhN4*gDv)rcL)paT^<ZAb2dh@HuUuWT>_;-^VJf#zm0S*Vkj5
z*noqvMVlf;+2i7BySF=QKbl&zQ1#c>Xud#@$_ch25tyY1I~2AX9d({J>CV3(Gm2AP
zoc2d|nhPo_j*nM`c>p*ND9YCQY1@9i8M;(=006MhW|z=EAgm>x!CCp>m<W6;Cx?d`
zd73oXe@<b2*MMgMHk<$)Y1$9c<%<0Le6YRJ*`JH#@bNgE@pzn514X#m4Ng~^Kj`V5
zq_bN^@+e43R@Ys{T;NT9r;;Za_}C%@SzK#&!pF-CK*>YsT#l7-YPypOH4FcdrMcvL
zOiCfR)A^6iqkZ=i28MkjPFn?eTQPG59I$tR5bq7@SAW<aZH~9Ix42Cc@CZ`EwCiQ4
z{aJwjJ-zZnu{3P%kBbI<0A5h1c0!1?9DeXM9uB7wp0i1o(*UNb8l*KR5L^7~e=A@7
zGyNQw!s&mapoyLu%~zy>%(xdZva;fJeaIr4rz|Q24b~V0<_{5RfVa?4Q=f}h(5Mt`
zoug4m%chc4bi=KX5T{j^lyI31lRv-SZLlB8Ql?Q}Z+44J;?s|HQI-}LGmW<e)Y*Ha
zp#e3H%Vp1u215a`$rpmEsw!XbZL-Kqgp`bmzB%ssE)f}(uhv_!Wk*VQ5*TWC-4zK1
z!cZx^8^I^yzBH*#)^4!I!+SA!RY+Bv$l{AZ#+3Ij?{cH_dwB*tXA`!k%F@K7xAr}-
z6u(~pAB%;BWi>1ODXYf&p8@#7SElh}K1WDoU5`zRQZ9XPdMK48KY>wJ?We7t!$U-M
zHOi6ReG>qKh?q&>trU|XCE<Gm>x=V?odKyI7?ruXan44OU>S7V-1&tAMk61!<VKS|
zOD!aSr5d58%-v8%&f)VQ@P%JDz>K=A%}$`PRKSfPcB3mP|8urP%YOCbt-|^dJta5v
znT^YVgoP|X%Dhp9R+V|80bx=0eGE$8V_j@;EXgj+dKoZCEA?8F>x=90>Z_|4Tiq0Z
za{v-|T6mqYaHY`7@fsa{#ogXW3aG^#Ux8=<Z3*w9K~7sJRmt$`5y!^B=$n2ot2TWS
zOe072As`_Fa+UP^{%G1Km*4DFFx`h!`F-5O)6lHNz);?%OvfahGmH(IH#;IP4ORgl
z^B<N2j-x-EMZ7+H^-?tc$1ET{AJC8qxW1ZEc$bQ!u6FZ!Trz{~8i2Ad_9-D^x3}s&
zTu-Eb{~uK><`Gcrr28o&z9VG%td3AJHz^^cvk$9qa)i!SOY4)a6f`a41LICXL4n|u
zZ0bn_Ehh(EI&Qr9d}SRQ_iqId%AN*dh(FnHZtjoifS>M{oS!>9K))qgbwz*z?rn>v
zW6~vm{`}{7x#8Qy4FnBb8awdV_%~6^`K)T{EvNE;5+f=2@#Cy7JYl{9;LG<mDj=+z
z#2@u2A2HEF)D-0B*V!zwI<&}RVkX5?$c(44wTegmrq8d?Zs_R}e4Q<w@s7uY8v);D
zi&cxqYPN(l9vkn`L<j+ABeqv6P_04}n7Zfy_BVOXMQtGI@*f8Q$$U6hZlTU3u3aoo
z2u#eHpVkXing6xXJnzOxb*u^!EwItxLe{AwzCcp<_4P3a3?|(_KI&+u*3y5VrTu+%
zz{J8b1+u`t$&m8f5K$<35H)IRM{Pf&2~N0scvx9k0evTFKGZR~d2mo%RK!??ojnHy
z3k!|_?t^ZDWL!Zl@1GL=cFJt+{?XCVwZAU&mHq!(M4nwHFL8*8W8Q_NrPTyLj8&vk
z##$M4KH}lyZ==&>S|z5H#wr(?y{`q4Ks~prO20sIiybCpl2)-R-AqQ7g4x5w)U@w~
z#1m~Xdk@H!?e`^XEiM!sk|<CY6M@UkwYAE!vK8rg4BQ!%|GZaIHAFLW>4JDG+^<li
zLMTDsg}#}WDx0yhv-9%u8r}rQ<mPUHBJ^MT%7sEN-61V4ZCspEfzdSFrL-998wK%o
zMe`!ze`cbkGA`I<+)h{fmB_^WUA%(>!NRzp8$?<|BLx+xlUJUSoX=KPL7@_o6SNWq
zP>%2(!2~ix!jfreiL-1Bkg+7>Z~?Jw1|8lt_4PqW^))qCGetLZ<yAxS?jrwI#w#bf
zs-U2tvJ%L=(Xb7FU19w~c9dvVHZA3e`uBnf!zj%u6<Mkw|8jVkuB5QAu(!9jr6t!3
z;`{4eF5;C=s8L-MPDKtL9_@Ptt0{zGS*z((tD|5d#eb&*JYw<l^ytXQE?0h@f!-24
zyx(PIwCrk>39>P`=;-*kxW7K}SzB8d*dFDLnjTHmUkhUilih(g|9yFFfGGS0T8^o)
z2{fz$(#Mou=&XncGz|{j#e%9Y)NE|AR!0H!L0}#JJxCSY%`)A7&rB&vOG<8*h3t7Y
z#VaM|oF{A$^*Fly*8v3$|39z$Z%x|fk=A<3FJ+C7jGKw7OsC7O9X-s=>1U>q{_m3p
z(faUsONHXz%cQS<Pt(eU6q7{xrwPGBbUwZi^Kli%tjIgp<^QF=KH-<Xfq~HAV7Bca
zX!!VlPEW(VNFVPXeB7K`J#K!FrKT>%#!iB5!_vIHb-_<Y7XPn1%K7Q`uT0A7^IypS
z>7Me#ECf02-&q8k==X1Hw&u(8tr?Z#abh0l?d@OXwzfa>@=Y!eeyReBkOp~UK8Ww)
z!jTNWizbD%Jzx0*6!6b__Kz$qJ^RH9`gH0xU*UrAN;Rj9USIO56tXJSE8_t+9zh8Y
z59jCa0L~dL?eJod*HW!ZO^pLU>}HN+?CkWwOq7vHFoS3oC6iF3#$wX{dw+3tetxc8
z7y-6-;e{Z#{$QKONT(k%wR(l*@9y#M%}s7+TX-C01w^v@QvdDF@6cLs@WQsBlf?S&
zG|<7JW-Oii=Fb9QS?}D<ax~$Sl7VTO$wE~iBO|ufeyj{RHymu}^vN>!%Hng$wSdQ^
zu9A|&a(zu8%#E_5qUB<>d<x?UI|qlRxc>?0z({I3@<y+%GZ|3l_^fVr33)qu^XF&X
zC~1o1?qI7MF$4qzVClfX5Ck}~o;Y=lQB?H*UKfW2T9Ehs?U>!&sR)G(*4b44hdV&h
zY^<!_e!z?*1tQRx8){JFkivnDl=Ll6#2)oMg{7sXYRM*vXGn0cNL_bi??+Ox=|XW|
zgz>{e&1BThz`LTxdUlilHlrzI$q03vSDamn(#M}V>+Ag0USaW&scC8Mo*gma;SCK9
zTm13-g$Dp%?46$CVq;sFnRWlw)BBOl?KIWXbKK=`5{jJd{csr-9$wSYL1aAv41w3%
zv4xeVKbfD9!5W~#Y!UOiJN};a2oenf2YB`B?^6t&hV5v=z*o2U_lSr(wWgp)h@CSb
zN;HUAGv_NuMOY|O=KbZbR{JdoeSL$EUzS~t7mq9^^!F$13d_rTAw|gao9y>?hn%S7
zzx(`sWH7~?9&-D#)^hMi12{m`y3mYQy`c&~8Uv=ahwXlxDpM#Oy)AVxVes}OnJK%_
zS-QjT&Y<41!QY>s(coIQ#uyT<x7FD9`995UxZPogk#%61hxjaxZm0{v)3arz@dRKY
z$4YIr2Qkn<1VLHq@~3fIfQt(%<?QrjygN5i)-zV4SRp%fVyP}A*2c+6<;w}N9xiB{
zt9|VP9g6Y>ExW)n$Nv184iWJNn@RtNemgfOCzdN|pH^EFBCo}`Zb5nZw~TS8BXDX4
zgJz1EykCw%^Qn<#D%Fh_!<A^IRvoSzH!JJAi>JrO6lzjlVN%lEu=B&I8Iaa)E-%MZ
zCZvxck9T%jy(V%^B=l@on|2QF2;ES)6Ku#Gcft1tT`hdR&+o_MV^LyShjh>b0)(T9
z-MF0($*ZpC=-fm^AbFFYjXL~ZQ6W~_JkB0(R+4CwB*;`+iaW;;SCMv^nV|jsg`nT<
z%9MI>5~;4Pf)(B}>L2sDJyu(93o%ZaN<`b-x<CrnK4wj~sV-0mNKQ7VH4FN8ylU}h
z%@Rp=dk>iOAFgyL33Fk?7h7CZPJxPDI$eX!W&fUu55jpK83OK*o0ynbuJ|`R(>OBd
zKl7Duk7^xuqR-FaL>DX4&>>1nO1k`MnG#BdfxijbnTlQhn4kMU?T@vdGbxhz<qAXR
zaDt+u27U>JnAo7*v(WTI9LzL3HT8X8IGfpUqRmtu>MXW$K!JLdE>iK=oV9AB*2N3V
z25Z$lQU^eeDk}2Ytmnj4(;paT;{|*!TRg6iWSy8(JlxwtMKPF|+1XVe3nn?IrdU{M
zggEqMWd5wTOXMMw1qtuCxEUC9BI3IWZgYN~uhwm@ElD|B^Ae5RSb18B`%o;CNZrqr
zY=BX=AFF@9WdglbqLd#m>uGFk%xSy&us^mEfk_B1AfWtf{QLLslfPd)EjQ>Gn;36x
zl&PuMki9*Z_&%0_VBs$-_Fb1@$2lxwAiVX>mPU1sOPx7l4i-rzDV1{P0;`r%xjIJ}
zb=JP)-ZA-+DDS6S8^G~&JALH<r#9v1twE5sdbqrSzkvU;!a3lNLIq4M1x_^X?bFk@
z4_|C;=L=<4Sk0sbp9N7bz7IeKQX-SrsuXjgNH%%vvic!4S4*6BS5{Oc4)e+JeYD>M
z+a%5l5r4j+fx+|c6f*TN;Uo)jt;uZU^gbvEivce$*mxlNFDh!M<EJQiNgB;s1>yg{
zJ&`h@56Ha&#hd!24j&0xH8gT8PC~*HMYkZ#LYpOJ9-e^Q=?#G#nG{#hFT*J!Bja?4
zA_+H3b8;*VdIr$NVYpHY8r%I|l~e-&JBgO_dYT4JSIoMCqh0>*sOjwv#+&mZo_B|?
zUjBNOl)}UCq)EmX3PV4E_1RKXQ3=GeSr|`qYgX0J*r+kt_-W@`RMdaA?$hS-=X5gH
z$B3xA3b0NloyPTFd%|bydhX;U-U=C<$=MjM)d_-`WWvej!zoM%R;Z|`L$LRJ-uF-s
zz0jo1d1OWZ%L2&RZIaqOUAE1sRa6pAR_=Om1`#Vu_K<NVMf&gI4ZnA*b$Z@lxjdRO
zy$&bgFLIcV8rt^JsSRUI`M$oabqOM;Og1_2t#a7ji%A>W1gZBiiZ)nG7(HKc<?{Z5
zi<5~x)N5_rY0ZgRs9b@OS#EL=@%Wl}+TdJ9!hCL%gDNC@l|;87BHR-z&tLPd2lTF@
z-3so$Q6;-<Rx77$Bc`W!nVM1>5+{?0Ed<@RmS<fjg2wjBsjeRCvlUu}hTYGxck%2P
zY0O5HvU`KD<R3UWkvK)T+>?uZ6;y^03BqPTp3Ky_%DIk>s@BX?5~0kjM(m+oEOx_Q
zf544lA+mF@!$XgiW=^Bp`uTst0VWt=5Ju`^M8(F=e)LXaM(t8oEtH0yf<3LXVDfo6
z{+0B`IVCBHdqb@xmcuv@CIJ;b-o1mA$P!+&ya}1MiJ9l&3AX2VNp9{`k(|@w9w>A)
zYK*xTb2QV1d^92zFYPX83=ZeuudttUbrfSjj~vECbOLDIqY;Ndr_cz@(X7ckm}n&{
zkX_?(IX)Q?L=hen4k0xm7VzEQGz=}{UCqiOCJFre{OloVveR}S%9k*JJo8zZBNdCp
zn3U@mV<yOBK9A0OwtReR)^kwb$mo?eI$_(~FYr#ketiSiqe>>qNcv6m2m)TIQ2GJf
z^zM$nFN0QX3sQN1A?lcI!t=OMFE%f?HrKFYhy_5?gv+V~BZtbtp9MRRMl7sA2~yy&
z^Ek~9Dw-zG8yH)4kiby#j33q1)J9UUwXw)Pd~m4i@V+n)fI*VQJFq*mlHL?djmGCF
zqq;>EGnSP-_x6oL4N@!)tF%&~a-gor)RV%Qn@RfWTzK{Wdlz#0k!gC$_i6keKccsY
z?xXq`9{BqPzA6ZnP>$~h4AcEi9J=+px<K950{tP80+I41ZaqqQqAaQbMof;5Wn<HU
zqxW=2rDg?HJ+PF+9#_dj_q_@D-UXk=gtb_5#j`r3)Z-WiV}VEzM)7oSLx6{8(2!59
zpkQVWLmul<;Av}0&b&SxbN1JXovsk5{?qg5`TDYRer~_W{jfQ@F^=~QuF#G>!8v&E
z8@i?rLfNONJ8hU%PtyR|{i_j)qMPHTqtUc)Ku?JB#JK>5iykUOiD2vY`>knL9qkTe
zd1jqc0?@1^2u2lvfouPYKze4(;e&A15a>MPLa1<}K|Fan;gf?W2&2-aOt^TyQl>;l
zL!_Q2jl*#eH2^!e%K4=+@;}+$7{D(NMM`W)4g3b^>p<DHyTLe>64!+v26PHUxgQC4
zqb$QC!o&T|V(w~XKJh*;)`*xDm2Un<SZ%#S!J;aG&^!PjW_VXRix&nQHFV1NDHpF_
z<ggzlJfqyh<v17%yQ-PKEY;$B+#F6h$;cq^%YCb=LL&2raB!}FdR4J-O_MMM9=v63
zE6}h|UuN>eK3J-fzj1AQxJscaPJBgP{Vb_vMT~>fEHI+WbG26oVw={oiqeIIHOa&|
z@b&NJ%70c>Ef^K!u@)%M)^zvJb@<36!;_eSr2#Onc_O?0;yjzn0p{mF><ug-KKFC3
zg;4ipR2!h*hWcZ-ydof#Chd8w6igkJ(OGQTB;Opb<RNGAU39TilIR_c+T)V`tM)pD
z=jCY=BvH}=_Xq$C4%gn_>MbtdTU+A;FB(NlgB}v0l_URfy!7MOaF&2y)Mr_lGk${9
z)O(Y#ba3!FmDWO&!e0&B0!}2quU#A}rL?$wcKtJd3KIS4DbbL4yityqh=_=T_{Fgz
z3G2<JsXsFuB4S{8q}?S_J<Xai96kd>B~XkV?iau}C;rTx!yongrC6bpQCCXpVyzYV
zs6mhtnik=aftFVLn%iNUJ{xj>1p5b>*gN%#!$B&9Epfvv>#VJ55!k{HK@eMd6x^Vt
zqsN3~d^X)2qhLp3-^<G{7!K8G6Np)FW!%&<lA+XUf;@+@bhY2}mC<^jCYSmU_W?wd
zi|gk%Mlf|$*$n%0<sZ*O`9Z3&n=a^xQ_>G(;UzLMG6L&5?)CUb*ghvMt@L`@@9kTE
z_mX(mO;Jfu4`4H`hw&2;o&D+$11o%E$f_V5G6MInj(o<fE$C*Y4j}Z-@g5V|swDmv
zVFne)GOMPE`a!+Y-WWfW%SSGGOehnlC<FLFx%(QmrYxyvif2K1^xE~zXBT0fMkmX2
zU@Mgr6=^rw`-5^1TrW%!GyjG7Zwy+~zlT$7k{E-ui}*%f+@9C$Ww~LnMU^6<@+6}r
zN|0N1AnC%z0IM(O-JeZEU=U5Qn1onbmQY0nnZe;_^aQ`dT&y;NjWjQb^LxIxdVMju
zy*2AgQ&kzy_MU`6>y4{+emYq}CV9Y6u5KVL2oy=XI`|<fDoWxwwJ}tRL>~&Ag6QaT
zRW7gF>5&w>{utt-vUHje{83%dhqKgtC78)G=i<_!r)Rg??6fg1j}u{TX6Es9+y2vz
zPfkwGegxouDk5moM1f9Bc6g{a6<?;yIWBdDg8=LUHD`b-=y~;p8FgqfOJQmi!pz9X
z=-~}>=J&n_Wv-7T)hX-r@wQ{`=Y?BI+UZ8GyKeI_ygZ}rr@OPCwrioR7-y}{<g&gb
zDMSLk>!m86!wSLjwR`MzYZ!~-!^&<n?J5`Abo$*5IAtlPC?#ik(K?aJ%QrZX6nq-i
zFf^P5m4X9yeCDTO+cmsaSHiA#5lI6BKdyq-&LWn#rBDeTXso*8|0u}z4-yNZu-g|A
zWVQWlm9Pn^B0{o^fcYSc^?RC%&LY+-A>+?an!y{lb5G@5Jj<lPB}K%a_R-MM1EnpZ
z@RF3=unUFr#cvG71;;R9payfN3uOvwqBTpE|DAUAs#VaSVwP%*_pvH;I)s*HR8bcT
z%q~D!G`svEk_`|Ez1_>4Q6$b3@OzlbFXnNz$z(@MCPi_Y$jT)7l<TT^B%#(M3=PI7
z@Skr5KYZvN&s@oQ>;PYjfN-T=nSQ)jBan1n(h8(Fq*mVn-rnN!vh(5O?`evUaFA_Z
zP%O^YGufCNQAD!&^+1W)U_NHPN@4>}x<6BF*a~dxOpD8kJ&z?b9IvJC1&hsO&TXm6
z0Wjm|THUZ6ls-{TMeupK2H|bA-q|}lvtw|bLfc_WV#i{k^n*1GD*duM_}1eR=lWy?
z^UK?E4ZG-=m;uQB<JDAz1)%DDp7vpV+_(F1dC?}RCas3Vdv;+RKk)KGu)?PW!a~wm
z&C9x@fte1~VtK?}s_V{(2<fYRM3tJD!oOL=x^PHA{r&!c`wwWn!>YC280S7}VUlG<
zXF~fraCEu%8IUPzdM@&IcuBt0>x8edxO5->RooXEiYOXm!@T$6dD|T?+KpAU=-eqp
zNlUTmERM55)tH+9kR}NuBO@zo1QTT(y}y6=<73NFJC-DZYHMK>19POMmDOd^1{;A?
z|5y8-B_lXFJ5~3C0=n)YG%T!f@|g(MX3(Eb2yDo2@y#4f8CzRhlP*K+wP9hBi`(&Q
z&`Ti&m;AlBFfr(kIy^I={)o#eINJRPjjTUSAdeT`CTI*m9f^A3mxAZWw{L|!E)R<x
zj&<?QtfmqC7e&g2w8sNRw?y8tC45y47~+M;W&EEXiz+UIWVf-K+d>KvO>0n;%3~S6
zPX7NAuV_KrgyA5Gx`zWv@M(msnjE<Q9oP)gjg27*^01%a!^Hb2Y0BZ=kHoJ!q*WL5
zzqG7T%r@Y>1vU*fT;OdMJKFz6cG$aYBh<8qc0Ra5&u`BQ;{M^v|F~f@2`mEXk4%YQ
zECKhB=TuSbfTR8o>>z5^f&<T{IrRA7+1h53pIYK<U!!Q~j7M1&d_~j;4`00#F|~|L
zihd0JpVtHVEb%@gpt^zY^PfT1i9AjlFNOJ>KBjEmWg8vj`6i72eX#%%<!!rn!Vj$V
zNNgktByor!Cpo#@o!=oF`r#M64VR)2bat+9ZM85p#TY^1ItSHLO-&8`!q?~PtE-fY
z>zf+{WQC2#)G#W#tk@0ljMUVyPed3PJ*>k(LPA0Y{ttC~efJth()OGV9a3lHlCYt(
zm^x<Dts7F??xQ8+RYY<GYzX2%20Id8v(y$ZgoGDVa`O6+ZY}<nu?0vn5%YWN*IV9P
zA6>Z}b1{3}#sicA4Gqoafr5tS`Ec2Ajg-Y}zj<G&bEgbn?e|&(J`LR35VJ5QgEk;l
z6I4kG<G?}M=dyA*Sq4}HX~-S0hO6#CDtbOabwVzC`Wt54!R!t3ZwGJPo}V8^=tXj%
z-@5VkB7+e=ruEL(!T%O@Q2zNtfTC7-W&7}NEDN=FBOuzMJ|_0KHw`DP`3{KBo5+n+
zH$mNAd@6rrV~%E>HNSm;`dNv~He<rnhAUL?4Gbez8g!1$&+m7>_D`g9{G)GxBY&Q^
z3ICSR`@Rh&xmZ3k;mn4oWZojjl`%5}WcKllk8`W5iDq!vDF_>#7K*a_FuPd--QA?c
z3I>X*vKyZb9;3@kOShJ)lnWt7P~6V=LAM3Ne>a!x6KS@V_>3g#&MQ8<=CbsC_UvKG
zL~iJD6!OR$+KA&2*w(A8sImznzn4xuhU3&c2z;Mdv0tpWk$ZFIgtXP@3X7F)!kfI>
z^pw$<EU3{96BE(=XfGx^OFq`WD5r-CWi&uR%V~YxD_>b$yi%3P78wL`F^%dVUOx{c
z<X<p%(ksbosmMe}_YKGzy-wdhR~B|EDmx%4Y3t}*K(4LY>Ua9WzMJgpYw~a^2EzyZ
zK99yLjqQujD<;A3kU-9hiHHc{_r4kC<LB?5s)<ZcAv80~rO!Y0eZ2Pg4#r?}T~Dk_
z3$Ti^K!&fkS-M`VnHhrlM@qqs1LHc*r>lFs9@n5)A;Q9Py*@muu0EeG{Ni9GEiK*A
zv9VCG1g7-t5217o*V{ZmSUFwyDJd({?(}5<B{^>vEOOTE*+!;>*H#Z^7=dn2JjG{Y
z6M$6Lw5xM&HoMzv=$795f9H4DJ_aga6O8#-jwH+3Go}>?n}DY4p@D;p#zu88Vp*pC
zmsA6EhI^lWr+Z;w7z5)?Ep{8ICC*?M9|ttwOyyftw=OSYSkL~OskE(417-=;p*PSY
zRv7KPBA_wE`+PI}>sLXzeUP+vhfGM!!8ouRBm{(X3S)Rb#051d44T9hCXi#T-Gcy_
z0(0R7EPl%2oHU?@q1ULg5fwG14L@6~!L&64enxMIi$g@aS4<aD<UoVY&s+BbRGW)!
z4#1Bw>C~YP#Nu7rcPIas1rQJn>o(bAPK4y=>m^Vk_PO7y_>TeQ1ja<YdxB5_0T=Y$
z&TV%(=uTx30nNajzJFa`+UOuQ`{znkDs{QNvf{z6%;NQ!9~i*aS^!*ty>^hC!zy~q
zDoB86d}ly!z3l=tK!PTG_*3Dh+wu8%VHE&1I>4T}J$JV=HP!5B^Z6BViPI_nFC@M~
z`OOO7uY?@kLnY%T>l;4eb@Bu_Mx?zfvlHdx%#Aw_#GM=#JjC`KQCZaCB(AG7&Q&^|
zMORl>?iBtikxl+Pj%2#`U_!ryLgq=ZAeR=IV=!pTH4Y?2iC@^(-GkIjWo=+|mR4)J
z(V+9R<V$b;V5ke|DTSMx_q?%=#$m~EzaY!_costYmC|Od1^4#$bPcl~x1<B0<NJpP
zurg>3>tNKe_qcZgj^qA(O9gPcMG}Pe_RgY2ZGwQSWLh=e!Z%Y>HDERf{{4GA<{Vfk
z%-`23jLj~mt1tmuM>8ovtx4bv%3IRf3V~6`&Q~1Aa+#Dy6tpHDYBC}PclRdM`Y9B0
z6i86d|1zH`lK-;IZh?jvYZD^KEO-Wb*jp?n<bmJU(xjUxMYTJS%+MMKCQNQV&z7u*
zqgymBq0?-%d0;2%12`m|Ob^=HS;&)!AvoNDi}HJpZp)GELq6x1Wn4nS1a{aQVU4O)
zII~)tr51(kHch-uTnJRPeDS^0wUrOr1q_tp?ipP~2)SyFHZ;6%7QqNPqX5)2n9|il
z;RJIQz<Y*d#2S+EdMUv8qC8o#xp#v(A^tnO)9uV*q3Q(SFW=+Tk(a*%B-Nz*4y22_
z-NGWhO;h-8SlSnRGH$#<z<%s-+=Ds$NcUHjIlKTF9u=mx@$-VPghZ>m1HNv0NC;0K
zz9SKc9M0YCU21@5Xrq0(ZgJ81hC##b?d~_I!5$p;kuiy2=SAn|DOm5**;2Vcn1*P=
zPdjJCT?rBFc8k>_|BYcsqf~+W)?GLJU$~DwmtY90ei?IpXc+nuIL)87D?_s4lHu~B
zr^@U3a#j)ZMZ~W$JllivnU0Pn8|C)p6P*c-CLFOZny)8b&n0H#zReo=4G%{UF6yd0
zW23Ul@Q`Uik9=+hZSI(y<<@hwJ(&WX6a@>JpYHJ4OAx&fpvZsH;Ns2&z+BzFguID0
zJ+G-}7vaO9l(5XQn(4PkcyCIjDv>~WL)yQ(YTF&J0)WPSZwZG<e~+ok<yNo7>>4of
zdz7I$ycPpcz5vxnC6|tv*%ifr5|qu~jl#5Ihq6zj3qhbrADb^(Y)O#t_LcwvflYPN
zL5z}8ywnu#S|4=Iy~Ct^^ZFLDWd|j#Br@tM8kY?RFT;Qp1J%Y8fb`J%5GgF{cSitR
z8`#?q?u~%q2GQUow2*uNU@x7<GF#s-BXctW=Rd3*FDwEWVtXSN-P7X0hj6z^PR6P;
zXYhTRM|Xol11*>lz*&m>KKpJAR+oj8j>IO`WwrmaodL{|!oS^8`F^rpBKo`aN@H+(
z`tLI|1I(qcZ^4DwR$n=AvbdNMJ*K-*TmTT3u#VdT^|fN9RGktOmK|?@6Pf5p&}lw0
zBH~ro?ubhCejrHxB>4~!0kK;E+lHnNH1v*Fl$U=XRH)_dhYCE$2544AJbx)z%JZk~
zVs$2QK<HaEjE{uBiUCP<aJXn9pceU0`SlTF1^Io={HfKBR*|48chi8(HfQp=sv1g)
z55A0vR~ttJ&XC->9t$dWgbj;eXx-an>?Ae4b}}Q8WI7nM<^E0wzj2_ShN*H$4B_DB
z^IdE#ii7nqpbJ9n%-s=HVav?c4;vj1-C2-A5F;6~y!!g<N=iz3mG5CbE{X#O^CHHi
z*%hJ$ON5?64kn;mcfLePZyk~u^Zom4cUT!PEYDTn;3xa<7j#_x^<q`gN>6{8>@6w9
z$Hx~Ut7A`44oPIPL&isy<)e_s2wmL76NEuTi~>gW4vInN8A#nBTt>o-K4R+U*N}r>
zN8-a(bC`_+0c#j|V+<f(P-v`VnJEx_1*?zrV;J<7V}!szofHTo;DMdjUhHlXSSXQX
z-Uw>+&qdZoQU@V?gTiY;c{p1&FKHhbUrnP0K1>PmR1-0D{||F-{g(CCb$uI1cY}0y
zcb7;?r*wBJE!~ZDD2;$fNq0-9C?Ezchzf{wJd?ez>%O1&{R^Js@Rz+6I62SnT5GN`
z$N0=aS`1lwZ&^4`<sNAInyQ+aoB!H6eo;zd6&Llcz4&3!p+0Q=Q?}F6uThuCp*@Ph
z938-F*q}aZnL5EOhdcpJ?4G}|-jwZTHbh8jaCAxpF5jaeVM)0$3CLA%nc{`l?K_S5
zHkJJ3%tzylFb`kLTevz`QBGHN>FYwM)j*0c#ttMO<^4Wj&lo--`r9BgcGol5%$_d#
z$?d{B!U#BbR;Yg_vD6e6Qm3UiFgA-yTgUv>(Dymmoam=Zl>#$s{gZ9n+R`4O{wT~*
zYyyG_1cJjgeW9I?HKmo6xVX3xq_xjyYhErYDUIN}>3#eGR~mKE8k1ID#gC)lC|;j%
zL~h3$BeS@Cy!uE&rT*x(HV*=+4IHR~F3Ta(H~L_$dpi4h5L$duHHhst#4pSgs?@(o
zNN~J7@9$uKfynKQE#UUL{9=@Zc=frC=&%knkBBX)m05JoxYyB7^Z2*|zHz$5k}9t1
zCMG2G-&-|ZGSzOHJ_1=n%E3KjbuezVOKPsZVMC2&M(OTd((#yKk-&HE?e56SLgZs)
z_N{Bow+%2O7)&%OGzSM4BGI@1z=uej4QJC`&yC>Q;w3e#rDUnCYu7>5#P*+fTr%i>
zSSbE`dpbWxpl&%1G4^907aH~bo31L%fzGx(qg5U+aW+o);=1m~HW4AoSXWe?>+=V#
zzd9^Gv!wVY4^u^;8pt+-AQ022vf%KcYLUm`Jr#*GQ{DPHr_N}Te8T85BLhPQE97*4
z^V_MvG7&eYVsjWDnN)YMw#LjQUPo>ADWHg7Vy`@@-J;rrcuJqj03A8`vuBq|Y03Pk
z_Ye?Rn3yQUd}I!NPxhEszb`eCkKHk|Lq$doHF*9b!%A;NnO@e7fD4J=UX!vLOaaDi
z>kPEW&<no9{0W-zUA`Nm7}cm%Rbc$|3CmmI>7V;^7t74WB{bmtVlj6M_fF6BK)c0g
z@cBZGsUV3OaZQ1;tc=WHV0_CMh-MwU>_|WFEVo5JzKcfTl%#Ms9ODs7B2Pqirf70)
zLBTf?-XYJyP)Donk^Hoxbi|~P#6++vWu7ny^1_P_*m=**hSo!#nfE^5yI%D})_C|;
z!zNttA3b_{!myrQzDRYtyQ{Q9L`WzBmn3+|l(4*1ncum+b9aP86>f3aRAG{_Ys4B>
zAQ;gN?LmjtDq2NN`{o8Z+<2iXjhy=8xfnyE{o6+$Y|l_u7(M!BPqyuAzqefHvNK48
z%$uG$;+@s*1ju8P6azV?Jj`XO;jQkQ%JSX7v-PJJEoe^90tV9130Q<6B2UO~gN%|@
z2<(WZ4qsZRr$G{c%}qw3ATZ!yU0BG+N48%KTRR$0=hMaM8}-Zx>N;p20AK<6Xfxp*
z=+Nqt0M|GH1&8V<6=o?`CSnH7_5=wpAr07b0<Cei=OE_=u`W&M!l+FhV=I@HNw&?C
z-rpJ|AYijgP*!G^)va0xMt|bvg07X7l$5_ftuCjgb__NK9GsNlSa9S1nGD&B;(>y7
z@}+pxXa+mR#L@Q|EeeVz208!r;R+7prSCgCCaoUim9*^7n1w%l(6zBCgMJ4fP71*~
z(A<pWg1{l&!F0>O!YWNqPw#wLSa12xmu;L8H}}?CcX`%-K#^_M*#B&O`(0<G0}n56
zNNHSB)j!418$KaINq0|hNN^>OiXnO+U@`I>tq!t65e~qY7~v_p&axCsko-C^{iY^<
zet_GwJDf*h+;CeeSIxb7xEJdzui+Nr{?%O&N8e`WeVPY)GvbEJSjK0r{Jz-0Kbyug
z>-uFXiVgVCOKlJEMUs%Uk3c>8$DfRh5~PLgcTz8@=tf5yT_vld)9C%1qgIbh<jEaE
zI)47f(eyD<;rT}bZl?!F)70fBtCYFe%3fZ5WQ+-<^Pf6=Kc4LKnk|>>)s&TOCP^D%
z`#>M#Q?0o_w7|hny3p*Zr~L!^LRg(4N?zwj?7p9yWur3StjU)Qy0;8%dS$PRdCH;T
z;o1jrLtB%^UQatQedCuT9Zmy?IQHOs?}1rEMu}v$?de<NcFadPeE0Pn?Cob-J@03q
zP(L;4^vD-^%CQ^RVsby1#^@g0iKe@QyoZCqhM;el)95gdZ}@`p4ts<5?-Y9F4}BNN
z8o(de`il7qKjbADU-`$Y%ZIR$p~(`us6$5QRIY%g(Lv{N+Y@#<WpD;Sx_zC7P+nod
z#@(~ftzdE5p~qG>Vz)x~%`BK5aCmoPZ)9PPV*8tgdf8r}XaNo!&n*tw=VtTE&A*wB
zYm8dSUOpE40?DvQ=eKahnzm7Y-_qLRzHAtMF)+ySxCt|f@1VrIzl{f1u#_y!>DT=0
zKc|1Hi8$M&6Pg{j;@f+$dX0x#le6C?wicKbozkW+>fX@QXqpRy9T3LI%3Futz01t4
z=|x^ma&tAJV+lgtCT~bX06i8h4xOX&rAT?>AI!XN3=%T3JH1rm=<$jfg&(J<6-21%
zP)RE%EvDLtLl#Qpd9xn6ZI=A_d->qxG0h^5i^7|>vziiyT<XF?b1sL9*RO<DSwUTV
zl{|vFZ4&MMOHAn5*+o1F-aw}U)+6@G+~+24B46CK&p7(Mn$3D+g*_RHpWaejeMVH;
zt7y)r>^J5{i9>O;QZl7tc)(a{cg->V2~HL!wiZ<$HPLD&Iy$yR^cA{X%USP>bMGJ~
zP5nvp;dBY2{Og#TlN@0m57e*ubOUWNcu3{N8RPv`{pZCDKBXOAWXv)tVhiff(_t_e
zf0|@)b5yHux6;gYilo!g<)NE@S}R*^+WmR4)xA*W!;MGi?Z|jx-$Ud2_)u1*!D{4@
z6sH{bS*v^u9UTIl`E^&n|GYl?j<u08GCexp1Kr3H;m8ju&>qyQ`i{){#Ln(yFiuY+
zv1Fb~S*`a*xQkv63t;(JexE?VVyc@bbl739#QKYX!o?qW1O*+mkNYB6{g2Q36Kx$G
z=fDXvW<h0nu*qMt^`|CyC<Vx4?JY(f0jH$9;ovaApjeLj_g5BOpSDg@Y&&-9sII?i
z!=;U8D>I!xk<hWUZX36bulm8G^sh3AEqvz`y;LgB=SO{A?0dFHR@_RcRleK$^*#Uj
zdr&EJsraTXEO%z9WM~{oj0Gq4Guz_-qfv$jz~3Ug86A4UPC124<JdD7VH+>$^zZHf
zzncneGs%68hkEEQ7Y+Wa1!!uL8u2d4J+vONPCt>8$3BqJ2uY|U|1?Cc%kf(EKR*_s
zH)X1XCl8#A`}-j{yL+_r_kX8}U)r&w(yW!UzLk-$QtA~VM#SJF(F^my59g~u|5xfv
z8B2LZWhKc^t&rUFIi89KAu}iz7e5dL?*AGTX)<ZI9(4JplhY)BTmx<byye(NSJn~u
z|5Z^#M~tyO26jX%q-j!<G5_;_qpN6@5ekv#H~)u5SkHc7;PtQW`p?<t{*P_+A00My
zxb*+!|FDXo0@Rig#NWL1K=O8SA{$fE6c+uDRt%odqVe_E*RR3G=KU-nAT2$eoQ%w{
z!LGWnu-E(a{G3wUZ@j-B><}N8mf9fTCm`_Pv>IIHIk~wIdQcXr1f0qZq+>iwBO@cD
z$W}_~ThR4HGNvx%?Ki=><l*J*4gJ`Uqa|;(E1vVb`X3Q_*m+nB`=zkw(e9!rxYO<4
zmlt*i-4XzoAR-27v@!6fSoNxPH8q`<Tk6`{&H&K>WiHf6Ux6o9d#D942PTnU0(|4S
zXN&A?Y=E2zy9F^DKcEtL|M>o$D>RwX#6;r1kLDFVAz_&c#jq+i?16Bdo|%~`1f0h*
zQXiH?awsAqBG+<6I07iYlM4&P?I4jgLiQCBdA2IpIbaf9S}MET72AVze2>$UN_zO7
zFM+~;9)^=t_@;jT{_h3{0U@DzSfO1(6S#c2J;w;OMm1tcPL3hu(euUqhj<VsL6Fw^
z#i3oEoROisV|$Zr|M$;x8bRrk%X9CGezMHjFJPQkIH$7m@sYE#DiIpy`q}d(n$jDK
zT!c7>>+f5<e>DD^g`)_)2tIC{w(--`QwVBqNq~VA77z%PsHmuAWo0HNCbKIznrdo-
zcO9@HC{qqW=4A}aHP@-h|M|($bi>YzC|X*0kcI<~RJ5{0p18lu`*Ln@!MSaXWlnwl
zdJURPfS#S*cc4Xl8{r9$jjbF~!zUmJ^8eojLBs6v7F#9@aB#cRh5hgk!7$rUQ}eY{
zIdf$=_2Ks+gI14Hh!Qw|>1g!(TS-cK6N!pVNO<buKt(}8Ms{(sZ~04rho`BQYwMSw
z>$0!6I)lmstsGG^C;Yo$fcrQ*%k%&J)wk;LAnBBll++EMW3{orS<P$xIvL3FoN%bB
zP5>@Jx)v&NQX-;U0QN{c^Hb*JI@zAvf>gYxHxSX-*#g<vp(&=wJr4AcmbG7>{ZHJz
z|L)BDh*jjh_|M0J9I6m21K843LFjYC#dQSpi?V`3u#=XChPi<}3w(g~0naY&TmSQJ
z(g@P3p%q3)M*1nW<I~qx(WU=i9~O<l>xut;*PYP*yFtOWX@vU!)_=tE&?3{sDXOSg
z0o(Hq2+l{%g`q0g*&#~Y(pJHeT5e$RmeZvU^ueX)I>X126Ir2@*`8X-uhG(!W{4h_
zD$Sze>7nEh0{at<vciR;larCQ_7f*3C(w~)WbQl*L#9di_URRv9Klv!R8&-5T~<_-
zcX&5@Uj2W+KA-dE>t!aRzfuJF(9qEAuW0D$eFUMm0``P)%x5;pG!KJi!X55AxPnbl
zTDtdy4_cAm=F0c*GSdI~KC=J34){K(5cG)$xNKL~)y*zYz2}P6B|=SYUgz%KCbGoT
z9}g#2*qM=nT~=&;eRZ`!SE7MoZVCLx2Dj5KLWge!6?}sY-h<PFDE#72*k&FeyZE0z
zeI`yWj~#A=0!@d+*xC7c4K1ySq9r;4tI%Q1a(p~F#NpXc*|A61;Q;^=la{7lS~5I5
zrH-z;MUS?DR*G(|nnx*<c=JN5BL8_`+1P~+C}p7)^S9(BumY?R_J8*&+ZY)cxw$c+
zpFuDHUS<^l%+ea6J&~3kQIpj{s#HORH<17D=TgNg<Utq?3m{+A+oZnzQNDy?ee#K3
z?-nDVKk4XHjExf{BoR{P3(^LMh6)F^fBb+<#b_Oi;=OFDD|GEx6q>tM8oeo=nHuH2
zD0o9iNJz1g-=!Gpu)(;=XRu~&xVL}0xwEsgy`8O)ih#G6l%JaQU~q7-H~;{%^%QCR
zX+mkDzJK#>9+e<smO+G++v_H7`nvJd5SdZZRCA#i4`x6|MuzZBX@V;E#iviAB0_2Y
ze|Pw4qn++@CfFqb77N}-8?byZtFNm6qWckJeN?P)^YT#td3nQi-`uXIOL%U6M=o=+
zkKx-QZVR<5ki~lHE_}Jt-wr$>=*2YI&k=rv^5j!+5iuSf9%a6imLa@L2=tg6n5Aka
zP4`%a5%!}BHC3=lq`K}!S*K71K;9PsD0}`FC){%1!co?4V*GU+#n63ob8{=#EUky#
zu+<~+VG@Nwcc8I~3ftFqfR+MBgpk9i!FKA)uV1dMTY#o;c8Udb#-9mDkmyxk^xGM9
z_>92W2du@pfq~tzOil~*%}rg^T!Emo!wR1-c#MyF-p%ruzA=2dyu923{nB-ar8zq*
z8$Kr5eP8kCV+|Z&bfyIWkHx@vDvv#oe{Umks(FY91D>)IR&{2EXmqM~q5bs=*h7PZ
z?nwE!Y%fmSXV*~X9)PD99vvW4^#9Gx&SoAcY-=N3hE(GVVNWpG5x{S94`r!R$I;Z(
z^aSz|rzaQB9iT<n)fKq>bL|fSDi;e2E~yS&P~**eLwx~Hryl&ZJLn-7tU(HKKTv2J
z!L=?c+n>Sy_)lOZ072pY^SfMw7C-^l7pHLm`{bhWrmgnBPecUQJ&?yw-WDtu9)^rR
z$^GX6!TI+A(R7nr@7_hIeft*pJp8Fh*#0OeD8TZC0IPWnZWBPswm-LLLiqx=hZ6GT
zKU-+2IU>URK>6*4w|%8Qs+7XKLbDVSh-gtN=)k@(X?tR?pr8P~Ik3U2Lvs|G0lnP-
zs1y~Ag1>&FU$+bRObAu{UVIw`=5Qd1X={H^kd3A+L=ek>B_@eBO0Go72{9<A1XLdB
z3-*83a<X3U3KUXe?yFW1!6r$4WV8wtUI_RYh|J8*f$!);GPSH3qnO{}0_1HuOuasL
z2XU%|Lfac`qg%aIZ{9#_@!(r;|5tfCSJx?W9`3B%++GS~q{EvNX$5eYTwgbS{@nO=
zg_sDx4Ay;t4w(q0>HIf_jci(Fz|GE2HDYDHEW~L=kd7``-q-lcHg~gkbl>@Bhw@+(
zVv9p4Oii7GFSZhc4<DF_&oZc0R8`F~`(0Q19zX~-@btji$44mjNj^b;`D;h8Akm5I
zGQ7ek2pWE0!tGXo+uGmL6D%5uPU2)`h42unJMfIcg=l3srI^bQzHyYJ0vvIMI~$Go
zP=DJ;Ws3Svs129H7DO3!vxVLAB_Ny3ca+nB7|ixMz+oV84sc+d!w~vpML++g#YJjb
zU_`#V1bqv-xLQqB<ja7?>XnqE{kpNTFR(alZ4sOmK6`#P|4>!+jdq150JyUG9T~2B
zC4`+8)Wi4x{NWW4FzED~pL><m4n6y)KLqkJaat*S`KPeK6Si*s*bH_L`hU0I4}^U{
z%mtvDaoN~+;L3swt?vhEIUYW~Jc&z5{hv_g{rq)hvpK#97$-=W=xA#@ed#zYdZ3Jr
z$l?xxN)_VYAD^SVkQrMI0+u5{NCQsxW<a4xO)!FR**h~xZr=lD*>ec?y{|S#I~oSO
zS3J2W=02a(_rsI@H3&7U0U0r;Ryr(_l$6x*Lsj3RX?Gw7UQv?(`;(h++07rhNA$`F
z<`8}j4ZE9qW^1+>18i7K3NfpthV7J;l-kefoTh=F+xVv~7a9XE+kiF+I93`lvGEU0
zC%-<6?oH7ZBfx_W-8K*8R`{4e$$(g)@reASC9y;Rodp*^|K}!W<rJC+-#}o`|Mu+$
zy{wwWr2!o*VCKPr6DI5qt-ia6=v9ym?4zQi<4{9M87pK^gxGwta|o4($iMsVk8Hi@
zm>BZ|S+yy%zHo@WCMkRUhW6dfc3GvX^5W#g$JN!9mzTFIF@n$C-5m~|j@)uSSkeon
zm1pNMQaIxuKN5v<RkXoJ%;;(&o4s8L^**+yspMz8b?ilq8z}-!D+A?(?jv+DdV9^Y
z<726!<5xB|ieJ5Y1A*X@lC-)yS?y$$)!#BV$Gg-fT4Hn_dw2kb--RYh&n#B;9K@#<
zjgzARbc)B2q@fZ=x_-0P7~99j*|NQr>i@3`i2JYscAr4BDT}e}Yuz{hw(xE$zi20^
zjCg9g`G^0#ou*tC3TymN@%H}%(;Lh}=mS!&h1t_6G`Ug{+^JR`46<+}GXBG_uMaOk
zZu(8(=|8sI%`7*_LlXy1QyjS+b@Mc|9hRzcl-DNVjhyce`5^{+jsDM<tfN<9pZ{hZ
ze`>yOl>jEw(WE|~$U#Ofnp7!e$xE7x4<^=lr1f5jF;-kEw1I(vZEbB(`mlY%CMJe>
z@)ca4@Y(c(VOfyMLj00iP5rj9m!kOxd(AL}{mfGxVnvKmf^|j@0$*igH?6IS`^Uga
zOy_XUlnlBpD_aa$G3YWIE`O@Cv{hC8S^O}m?g=y}4uE$K0%EO7Eg*(9isgZMhw-bW
zMMy6Cy^Vyk9A?BnAw!R_Tv`EBTUdm~<y<!W!;g6_BqWpms|ASPtH&!FfWv~6&ki3K
z7ri+l0fWs0s0Yq-WdOLo4~&Z*o?d_xgB-XB&sC?t_uKf{u4gy+Bq-Xm716U26E`r>
z4}5%|S;$p~|NA3pnL;PT`{9K7p>BS0cl;^NLAC<w673nF6Zm1Xh2!Wg9Cr}(dLiU~
z#|wj8giS~&>(aTZstVFECe=p5^4R~r?Ga`vEw7|r%z+nCHe!DYJAXKN>b*N3^UIgN
z&8Xkc&wuLlXQV87RZ_y|dq4-2)adBwx3*I;)G7XOu)cl!wz-jA*m_i(n-`)vuq1we
z`*xF1tIGNbA!Bf|uSi0+Ityt<DDc83g+>56ubC3R0Y?2z*m>zm7i@&gPEB?*&t1C!
zVwHPzgb7zUKnz6s&z6k9p2K0(!h|PJfY@UTD3@;4`}@D8LzAhHWhA~?ZXadfAnboE
z>^pfUC6W3_VH7TG`%qNO10z@Y96rp0&!R~HK#!4tGa4>p1lp^BRHWJh{Cdyj`QINv
z!yF$TE(d5E3o9#RKso>-zX#S)oFsO`hG>8iJ-L7+`SHPlhx@5HSvRmr1vrh{@JUG{
zCmcUko6ilE5x=*GlVusIBoUFe2XTZ1v}uWwr42aO6#u@ncO4%5>Vm_y8<Sv267e7#
z!CbS2ip{t!ExsETbwx!*Vq(*G5Hq&`Xxruc$6<GYdqM1}Qr1%j0f8ns2cWnJ+WYne
zh@jP`-eKWktyot;Hwwq<;{ymT+^NC8kdfF8Nk}ebuyOHFQQgXQadCk_!`{))$0{_)
z`@h%UOPwX}%)f4J$qVi8p~9j8u$KOgJ?)j^&1L3@o`d5T6a^4i>-&_4vv}WxzKDJj
z8AnpG8>-8Dh=`*n?*;&5oSZBrPWl#sB|ZrE<x~lZb+9$owY`CD5%Abye}`K)6fD5-
zE^*zfDJp_a)G)NG;r`UxYW%6|8IlPRY-&EQODOI;#lW%D`x8hcWl2d%?d|6Pv&23H
zTz?i7a!o&YvF37{s=fhgf|0(bH@f>a+z*Enzm<Niw|2C&ob%XV5fVz{<>vmeQ0M7I
z9Qml^j!q1+{b*Vpr+R@p9QI$kuc>|p{oT<yS=;)N%Wz-!$&*8fNA1g^;n2<^!bgCz
z;iXAN{&OGJ#_x@UkdWKn#H5?%xQ-NG!4+5V#(6|0A{MYH;7EcY3vA8?6Mw$|3Z)Qb
z1ymZ1I*Y+?LvhGI)qx{9`$C2{LqNFR`O}fbpc4>K7pjesF240Jh>`5uQcEjfFDAm;
z)v46p*j;?<CMqNZI};ZT&FVs(CERh;9Gu~75h$yQ=1!&cZM<<KzDhA9wj{TCA$V$h
zijf`Ta?sxJKI;Vmt3#i58gYs|ETbrl`$Igv0H^|;YXAI=d+;!w2Xp*To6PMrL~Et8
z76KlNvXS)qL;`(x-i+)&m9K|iE~zBp1W`PE`0zqDa-?D1>-+RbAI(=FMQTZ2z?%-K
zM^tol!>)kEFr?$Iz`wYSi>~(51rkm-0J{)|_wV0VsTT&kG31A)Ue9@)fW!M_Yb=n`
zAlEAb2m-Kc$#h0WMXe$s39Q5zBPS1)7ijnQ^<|3%(-V5L6E$^#XEWLfAUWrqot=Qr
zhPJs6IMRXP@TJ9F^}&O|xw$_8fMU}N<;*TCyV1kGQSjNh0hg^L2s9{5;fxPQRc~lh
zX?Y*lI*TtPi&R8xYecX+W?odEzR|xXt$!Jd>ZH!@<wg8>KE-)^@)4Fbzcaj993~wN
zu#}H#;81$HLqLRT7Lt#Ojq2>}+Vq-e?rPC@dN$bk_XufvhB)@^Gi^%@WmK2)_D2Mo
zPC1GhUvwh=B$l5Cy+nKbR^xAwrx`QaijmxoQEKwh9^lL9mC{bm{=)MAET`J?^oMT1
z0LWcdh*$I*KzUbZfC&P-bFXf2);LK|{FCeJYh!)1wYBTtk&=)UGM@s+8&*0Tx`2T&
zgaV|fxY+wAE+M;0Q#Vr*mw>>g8mT|vqQb`@pLPaM&hGB0QRc0G-`>4XHxYZd7&tgN
zIapXY*xCmDG_)b2cm~gVr{7=DD+fGCVB4Yj<i0UVa8axSr&hr7D`4Bf=anVsS{)G)
zL5$8G4V;J?^+L_AfDeE<{nGU;ss-(93_Qg9ut~oB9<wQbGX6r;RHO%PZAj?Eb}lab
zuzgePLK7Tb@H>tM3wRDrz<@YwkA{kx!)pr+XABjU@f+kW;DWa!`8sl7mo)$^C@n1>
zG2gdHtTBZ0C#z9YZm@O1Y80@4&P6VeBSw;Prxvlm&-;}BwTAWw-DDEOrMF%i3-MZ2
z`=}qRdE2)~Yy^mQ8V6kMznZ9jv3!@PJlK(>v;g1>poW^+XV-XaRKi8_U~g}|eea@J
z%Dp*3)g51@ZYZ)I<+g5%+YGGb2KzZoYXgx-L`0b|0l?rfQA7P`(yAvgYBPk(xyn-f
zDZ_)#DLGwrhhpjJP$kdvQ&kU)kH3sj5ED-1R9lU4pt^X93luQCownUBHD}&TmV6eK
z_Lgw+f%4d^I~4w67d{7bfzei&S!*9Ye1NE~Tx+%Nn@HG4pztlY==*;B=}|817AjfK
z561zaq+4S$*I@6ty%Jq}Qc+pi*4o<p+zaj-B~bvHeIO^-!-DKcjmIGRrVMgHt=6C%
zxw_`_iSf}*0u}#5g;wTQL(Yvp@bAOWi#E@#BOdEfH_EHX6&D{1qB|E&znM(lz$A$7
zz|TK7#<r3dCnwoY11d=nd9KDX)mq(r<*nth<plaiM^Ufgn1)mN2|Nq<_~D$8F;y+?
z|Az5>{XNhziToQI8WI&x4mQwgN>@_<fTYV1FA<A_C2i(|c<-JPQkIx6%kSLLr{t3h
zg|hFU_~l0dOW>d@$cw<fu*M}>tklT`BPlZrOJDG*b|{GKzyhY*ij_A$f)fo+44+b^
zvi?OkkR3rA-TUwkJ=l-2tM{!fTH;&Vpz-2PH}f)^uAx_-Cw`JnF_8o@oVwNLsfa%&
z#2wLXtv3`1We_`F{aF10v&x<%<6+#3fIj>ZhaeUuCk1ESM&!5z+aJ|*l)$Y(OSH-~
zLHTPawE4pP9YtMqJ{HlVbtB#HF2@I~q8C!haedUAPSw1*etF`jG)}s#eexe|!;We>
zLqfCSmCb&4qtSQ{(gQI(UjKMhCP7#v<AvW)(`W2Q2&nhpx};~zN)VC_Vt%oGNLf!N
zs9OP;6rdcocy3`@QN(K2n*&Ry1MVh5Fn@zWSqKJ#y#7I-#)HqwO^nLy;I#Y<3Lku(
z1#Ga%#Bo8PBLRGMB^o8vRAL(Szv0DZy`fBRpatOjrwqt&Z{uYmxDz@q8LH+nb-Ydr
zYYjLgJ+B$?Io@52PZ;m@dQwoZ;}h!BeiEuJC0eX)+udgrI7a_8qs%02BJHG$M!g=3
zDPvFSui)0tkff<Qp7spY>_>Gy5@o7zqbXDS-^2t@3*%-w-dC7x$y`@@OjK+XK3n3C
z{U0Fnwg@<KR-92#j$?|OiMpWl7GU9^yCQxRbn3hx7jJHWY9)32OWeTgUId^#>H&re
zQVLVnUau{Ysg*+g`x``n_|u(rsQ32B!v(_R!ijUa*ScYV&*f1GR7?i7W>>IEXLjRU
z_k*rgfyH<Zd&KEYF91gCIA5M&0G@_dP>|KMt7CixE`Xr56OzG$(=RD83PN}U-$tim
zs`wfdL(qzeh#df~=}kFZpXCeVJczkfw8Ip8IS{03;UZj$i*--}ZbGgirPaJRJ+kf|
zXncTc4--+=@yCUaDmA*8`#G?He*FAt4B`rO=|Ms&eBrY94ZtsYhlfv~oCaA%O*^6B
z3v901<?7NcI3sY7Dy7wuO9qm4yF))``)fBq9Nzu@-2Sz}ehvQl$|OTV)CS+M%uP`M
zLpxTUCgqp{bHEHw3Xh5<i06eY5V7xt=mCEkj$NqmVMC=)4bU|wG}~U8e9?Y>^z-s?
zyT8TVa{tcHrN;a3zXjjElzes;ZTB#qIFSpF;X)tFdv{@9J<LZHf>>97e`G>bY5JpJ
z%aiQ`koRkeMzI~R3B%ynZEH35J)XQv&CWLdwQJ(U!>k<VrKmUJ-v@PfScpm<(>$Qm
z_R<iv7S21PU-*1HE*Rc<gtOdz;k>xlHZB_N+{%%K{hIKq(a}o$Ltmn?Z-1hgRc9q?
zEH^WeDfeAffj1Rg!O4o71OXS>_Y@+X(l~o;_-tp~oi26EJ)3yJ@+qW^pIs=RbtSx{
zu4=HL{XD?)34eI8dhh3;B;OO%yQD<T)~5%xsvi;Dk*yb$X%OO{EEEa!`4+mmcH_-1
zHlUBW1Be7pC#0uoaCR}A2Nx#x%~K)VNBx{DSflQEcyQqGNf+C-TmmSRxlxCQ0dZxH
zauG#KZytM>_d?}a#MK9>wkuGl0HU_SE(-mcL9m5{sT0FxA^r@TMFr+KvEiwktI*oL
zZMjZKpJ05_fT$kH*%^@^mKL$s%Sf2t!>1GRsPL{MiYmJvy&-o^#y6DPzGvCBzMHMn
z$bEG39oIQvag`P?dVsi5D&=7r%&)z$`D0v4`MU&5SUpYd1{;1`s@mcyQ6HMQJTG;G
z-q+e1X_;HmDrr3Qid^_p;@*oP=Q7vxb@nfkdBW(P-Kr<xn(lox=+6t9YqaRJ8TS*r
z97IGSHvL<sw)p*6lwY1*|3Z_^XdqpFYpW+GNBmpv7AQV-B-nc|T#GKw&d$K+3!^7$
z3T30jeB3Dg2Tf%9qp(1Kz88B9)z|Zv%}^pB$5U!!9190t5DP%wl`(SrV-05j0HOv3
zVVX_S`U=65o%b<c%h*%J!0&DN8kF1$B-vXC%Fn)N*nI?jF#)jCM?XceZQ#}ff<H7K
zK;Da31FuPK8R*iOEP_;21>jN__j~g2@nad8i=l*EH=)B7_yi_jcxDSY?^GGQg+TV6
z$)F^QOf&-fw{kz2dGV>Ymjc7h^($(PdQi}{&g&0{yNi~6;qFk;EH%3Z)$iBlAp+Tj
z=2M8;Fw`sXg5O#UvJhW3DMB#?K^SvT1hcF@ka&9+p4ED6pn7_GGK^z<hSxP$``5U|
zP0?@g(^nqf1G$-_VQWSjxy$tCXRGrzR#xFV%=usAy>EhXFTvMH28td!@wDr&WnUpz
zU|7w+f1f?@2>Be*Q2y`XA>`A0c~tpPW+kA)k^ii>gp_VvZ9GRz&C=L`+NX-wG5blm
z=f7Hj{2gyi<p;Xz11Hx*%;|)?y-v^HtBM{bckY{$+;W&$Qs=6<y+CuOjrX2B)7hD9
zG1t{;R-^YI(r~k@OA>QN-C9)%E#tQSPEUW5lVg&Vg}kc!_Pt(xy;nl#6b#?{Uo?lu
zGJn^N>HK4fmx#=r@5h3kxMLWTAaash!opk|(jG+2?WbocvQzaNbCWe&x<@i^P@#=l
zwyda6<g9>hf!Dk~50hXahLO!S#PGpjEP=YCbo&U1ybqo-dh8cXKfK`*E(ZW6rqN=s
z9&ql(WQCi(V>#${NAenjsmqP8xrjPqV@H=;-$JKzm-<^wXhk&#J_Ihj?F9N>TTT~*
zoYbkv!eO@TKea<hwEM}YWWW1QlNoimIGHn<p@U2X{&^e=OZ}<s0&mT=C>e&J?aR8M
z((vmj88uAvX-+3UPx^^x>PhG4DD-~428(}+E(ay!ox4ZQbS*PY-s+hK{baGE&thVv
z#LEf16`!n?Q)^+<SFtbi-9Sf3uSl+oM*sIunK<0&cmh%j-FDPc307=Z!LjO-lM^9f
z;YRy8!zDa=$Ms<iHt_=D`ol0z*N{6ODiC^*az@e{)QnR}Bm%HerLuWSwXlZnQn^)V
z(rcmKHE^`H7WO|{hCZ;Np&@wjS`<@<>=0p*&6g?@&A-=H&R~lf5^6B|SjCK<_%MTz
zMf>|e%-Y3XON-A5Xwp(=9)IssTv>XM${oO1D56ZQ;dQvQ!_#*&Aq!;Io@y9`wHG^g
zb%_M=kkB)=SsxFwn_^$I==E#fz>5|jpcd1^><zSsiDc4))&9p6dk=YG8|;g12B1A$
z@$s;j^{UCjvkwb;8`O&iI9YL%nx1UWTBs2V4e&e6tln!!z$0B3=?xwcZ=G2A>sS~Y
z(#*aS>VsCS!S4E{!>(MGeqpio9#N_Xg8Z;bbq}?!_~~YTRWOet0oT)2-Zl|q*%8v=
z@{z)!)AcyFB1HOyFYTdKELH=U5+^fQcxO8if~?dHbhUl*GRHHblCNL6K8v7urPv!1
zMTx2#HyRN>ng3=tf}^6GUj~nmpFkx}Y_kQy{FaXR<D<u4&aZc7p=j|vyHpRmwWEFb
zE+W4C*b>i+Kpdm+{$nRhqjbCkHkhtw&Td+7We|aS{jobP)8OGlq?xEpX(q*88EZa!
zr{mvfzTug&+p}Ipj6^nerIA!}^xL2t+XC9(sHObP8)vZV!R;$qGDzfIM(J&q_>luk
zV)MXWT`a1d)l~zT&^>g=$}7~Klnmz)M$M4)4E@iH7uuD5Y`u}pkzc(th10FpUg%H#
z>~7O9=A&moWf#qR{5<gUpz6K3Qa<D%I?Kq@kW;!Hs%~>2-o6J3&1R91ZxwJnTA(+=
z*c2!)BBTSiXRWzr1np-B=H@(SiUx}xzEUH^tq9iq3W!GdcZXfKNfl2(;R4t{KnpLv
z&-BAgmELJv8=J|ybPNoECwsjEB|qVUX4aL<W9<O?I$V7shmOtrBRl+$t5rxu%jFuZ
zdVev>$0?|%;?Ot0d86LB;-WQ2DJwNGK2Aduu4coszmETpKJ-9Yc}%en3Ny!r+I^5j
z1)LTTq=z5ZTIqJ^=n)AF4!z+kV$z|GjYiHKD1Par;Qq+A<F}kNvLN0NFLEQ|h}cKL
zW4Ol#UJltpq&Qu@Kq}<EVD<KoS3xe}bkY5>Ji<;fw8j{hsRZh`!up*m5<8d4xJ92C
zKTEycI3$3pN^N*8wG|smrLBn{I4i<(w51|d`8=uT`lpfs<b8|-*)I|$EF4AZ+M4<l
zWSAQ4Dp1;1bhWN#3^)i%Ue(X3<3wUIJdo9Vih0SbKBXWs!@Q*;9UXfw-UlY(>BGSY
z;%lk*{`1npea9Er4TU}5k)*R`<#x=?CExRM2G6>vs!~%B^A)gw#btHXBQohPj8XYK
zp3NJHaes9EHo?$)=^sN#L4^~8a#5Y<9O%sWlYdpGpYE{85KVAu;-S-DxENK<PGvUe
z6H=Ytq0vN7^2&a&6^;_}V(bdHfk{<JV|l6`kJg>;g?B7bTQbuS!AhJ$;Xaelb8DQU
z7$N^eYCfLPxJW&6a%1q`1teydIQ0>RCz0nkjZg5l$tYC6TWY&?1;Za4Y>yp@Z&5@>
zM|0U1bKi*$Nu?JN@q?xg*oT_yn8EW6#-0vfe;1skaGFYVXaEb;YN;5~?no70Ta%wr
z@E9Pj1(OXe;UWu&$xBeZp<n=KjAp$R%1lNaVM9+(56p=&VLmvzGJLH&kyfK1@UrBt
z=v!fX+;DIhfYAVdXeg4+_Ra$+W#?g(By?M%!!Tf;Bdc!JE$Ne=p9C3*??ya&1k<Dz
z@EKYC_g5oY&>9u3t*zw%LYI+LY9rH)*4vdiS~6R^T_~+>Q{4ym`wVu+C_QJ`gQr7o
z-@Xlt26rv(_SR2^+j{N?>lMI3?GC!8aJT7d&pAm+UK7K+NDX7y$&*Mye^q6*(>JFU
zq)Ineap$$VI<e#7RXZ2XgAvL%rJ;szPYqJ{li3myb6E3>`}FmQw=>gJKZm3Ks?w4a
z=vH!)sl;_Yn*6Ode#_<9^?9o;U6_e^_B!{La;scl$zpAZy5NRDztX*kHYOF4J;9r3
z%SAbNzZfwEySA4n6Ud?R2El1CH!ih7(&@Zh9>{Z!SCsfVU+VkgJT=v|VNsy9f1N3g
zGC(be9C!zrF#nzR+i(jsskdU@4QDE0^MooCt@gGqGhIANz=`J(5q`MGy{w$s>ue;g
zD7EVl&7-4S^;>$aS9?V5p|1wkrgnEd3;%cxPt|SJbffmwXOZ}GY`+{8MeaB{?e<(*
z>p6c{R2ZeK`(2ifnue7zePr_T!OR7Cl5$H+AF!kBk%(w#y&i#SOkFWhTdQm=z-sR`
z97Nz<<FMT#ED8dyGVGOb?`VLzG9`gt0lhE*8OAYcWGw#HZ+5waW@#JPq7zZl(8{rd
zL^2*)&b_rg*sX%8w2F33P;V=t$s|5W#lAzO&jLT0E%2;i3?5Dp4l0U^J8dQm-@B2K
zlNYS;^YfecMbu#mzJ@3y5VJ6`uzoBxo)^j@v1&7!R%Kya;K+hP2>9JXx*zkeVGC>k
zUy24cG~_?@^q8F;Uc;!*03Zy5oHd!l&s&;CcXR!kr9<{~`J6-LL1q^z*G?-T1KpU#
zc5lJo8*ndhmS`n$EvT=n<K`O1BPI^!x-U@m(2+hrBN^q7DGKj<SqwNs``BuoKVb&U
z!W<V3yk{_vYv<MGyH&IX$W;aCWt9X40P1)joNfVV{Q7kk4~U3}I;;vGoemTNtKH}P
zL$T-9qmyqyv3oj^^OTT~5ZWNUIz95-0EffEN-8Lz%Fytc$D5avAfUc}WaY8&oNuv}
z<GIOBCN@hVD+gL-%o_OsCI+@&LUlV!{MipJRpK|^{j$(Nuj-ef=YP;}`Sp6ZP21wD
zOt@)HrR31>k-c3s$Bmvl{Sm@g)Z=a1_-t4K0yC*<;SrO5y5=9n!vjmKs}^?WLa!Nv
zsOg=_Bk&3t3~4u5CQdV}9vBEzaDRICnAqwb>jZ|HG`5KkGdeBV*1*wMTf<5x54<D#
zZ^y-WZ`qk%vFfscnz*_#Ry}(K3tq(U@TTPqyu&0$VE`6xkX|u0b)5XzzSK8Z{`m3Z
zxJvRt#~iZ>nvaGQAy46-CR=Ddm=olQKQ6DoNg!{}*+TDU{m<`09~o@m8y0@E(#O^`
zS0Ot7f=1}?`K;-D5-UF{A0bYBAuTd}R^klpL6w7fVGYCbtCy&$GM#5EX{PtJ%ul|S
zId)q-%9yXNQZg^Jtw<_4Ma0D+byd0BbWpEO5jBsq6l0=r7U!q5*<EfsM)3?c5M&Yu
zt)_$LR18QTam&zLIyoE}NeAB?AB;}dZdXB^AQWEMqc+^IurOItOJYHn0FXmlLb#0~
z$SNJb^7!}0-<V6!cuGl^Z#}&*SW(fwXa+KU(CoQrKJ%J-`Pt|1;$r$>?%eDwZf?Mr
z7qkyC!6Fd^HwqP=N$esK2?+|$PcVY2_$V~_aT79zr(L%^J<?MOhU~aPNP*kET;u++
zvjg3mT4;5Gf()iXQ0_@;Xz7(_ee@rNfmvCu$r9QWKu-xDdfP}~I0H=s4V-XE6Hntd
zWKRVq7M5R2js1(Q^j2TslhSbP0Hw;rYa)jq))#9Mh%uYk;dXQNb<CLTuPQ5JJ1c4&
zla|(Dc96|@R?J7Rp)3tmn-V#2)UxbJ6x~d1$OB1%(|D;m;MAi$401BqG1)@yVyP;)
z2_NK$S)eIm<!X8a6{~s}*r&kJVL@__;GVmMUtL$$sk!nsMdfJdsth^b#YdWZeR<*K
zd-KiK_m>wEb3>7xwwT6OwvTkb2O2aECz;J9qB$<gM)qPh?~~4{R*!M1;FZ6WQS@Ts
zT=-$;N>*oDt{z&P6mB5<ID=rbbPt1|ve1^!vyXb={hE`JtUy<xI>~3>I91n-fK~G}
zso~rF_eANO@D;w`j;v;uUp*4$P)X}9e)aA8JMZHsFE{MenZf7VFrF6+4ol&nt2<J?
z(z$3#V7W|+j2r^tRF^P<y+|ekm1zy`!JL{U!>yjS(@(_RR}uJH8thi$SukT6Er1OH
zt)m*4f}7DA8_Qxs3K!xKgS&s}^z@`do1C`uvaRn{aFwBnRimKv5kC;S$a`fPE_3@l
zpq^EJ7@N4)>oZQQ4xslu61YP39vd?~ll_4#?~(bcJ94QE_pV{+&_y0CA6rg>NDqUc
zP24ABdU91UUbXAmkz#8k5xkAV14n^B`1e~)?OqrxYGh^MlX{HSv6*_&h|Yn66|l6r
zX1z3mZzX@{)g6SJVb)Lt_aZaH4(_$TTFPPErpWn#=?;Iiv5$3W*Cqm!QOh)tfy)_y
z-l#Ygtp$UXLE}e2M09X;{G-bSz-qn%$Z>!<!-(t%QbyL^#~-J^2xSO*K7Rc8p<H-O
z3OIyrB`nSMn_!zfp%kj+EQR|E_!C=O3h-L*|JVKiR2%C4JyKLm%rPr%o({jiegn}s
zpwX?MwHH6Fgv9}O{PdR<=tFJRW4clYh4`{~eYh=Vy<+ZW)UyKat8`5A9oYMoIUpW#
zL=TgTLiy5Q)*H|vj)4(TI15i}>h^Uj_*UR^m0hAneD*91oK!`qtkp*Azpe;ppew~I
zB!v8uUO59M3ZYb%1k}K2h;jpocjzX)Amf8DDMy?ktd22pMGhD=GeOqRrlEa9GGUjw
zlCu)kMRbSb=m|<TnN2xnX7P#Vs_62#a~9ejvR9frLx^>xf7<PY5pz&XE@l6#1<2fa
zexw$rihDKk5<l<98hAYt%8&wnYZ+RwKCLgO%FTTYO;m`rJ<iLHQAF%a<1|gF89ey)
zBC4Xotqr>Hpff_a4(I7ZBV@zJ@<|lN%`W8o<>1yH&zGb;>VX;z3cRHy)IUc(x<Nqh
z=j)}qEI$Md<t~PZ(E;>>z@<Z?`*2{KjuU(Lg_y7Armas=-w9&~otDOxq<DtjW8##o
z?8Ld8=e^;I%6MPU?GAB}zFXjR7ew<7p89wgMJiJw5%%pG#PXv5<}qydVqe&qvGX|o
zMgHXvuYKkWSnJ7!Jq|&{1pNdyk{h$UT~CB!H?&OyqLG$Dp-I5+T|J%r1cqnBYAL2B
z{(1%ohl#vXN<C?dObsTTfPon?gtv5)edqYWQ~8pd2KBoTy9dV}zk@bttj#AYh$m%#
z?7)!*iG5*<0j@5JdX-F#_kw09Vc&$^%(@Tryhv#2=$^o@-{O^54J$U_(apvTDM9Qe
z>GEFaRQIdAi%uH}=*5A??Yc?*TPpmuYnZei+a{#W#hmN~^(r|0neV}ho|~Dm*+y_L
zBEXnoVGzWibixG1AAClNP503!PyYVU10A{BxcS(WrvIrrO{&#n>8#u8UuM3i&JH{(
zm!zi~7*m-EC#2NAQukN(`)ThRa*+z&js9dR6;z^d5Dx$?yaLT}fL{2XHE<z6mdEy>
zMvB?^{yln#JZ(e3+0gY<6G0!O@K;>FAisGnM7V_YQwbVKa69Af>b4uYJex;aDWrzp
zeS{i&(z~Idp}9FcL_soWAKAFN2Cei7Ly9>#I2bx;ZSC!AxtO<s(Z(ClKK1hH3c0Co
zgPj<QaT}k+B{=A#w+=SqkeS($#l^qEpky@8Joq#fl48f{K#-5RN8rjb!w3yV@Isxx
zaZWb#AP8^Z5|_3zRqrrAQ|{!6@_xqRfNdp(0cJ_rjx++TtTgf~K!&N<t0PRp0Fo4=
zQbZIPj)LjZ62xpP73EnJe+~P7jS<~@vj=ymk!gOw<GuT-Sq;Wn0*x4sJvkdr!$)vK
zE-otaxNN(RkQMdrF@Wx&u<W(dg@L9-MAA~E#Ooo?*E`W+UJwyPSr67@@E8-nwtFMZ
z?t@AXBeV%=!%1N>+674a;$q7hM}W&|3F@wOI%}}Mmd0pum_L}v)${(fYzQbd(tz{B
zQ*LVhq6ktW*stOG^7*r=sHmu{+N1odpl3$Z_>UXhh9uF`J+#AAX1xzVcZaY10{+K9
zH?!3D-}0jnZUFDg>QlSuiEwE~0`~;s=$3YLTpS?qVc4nui+f&uwY6^BO}Wqo>tFs@
zAbmG$GpmICX;1K#+j48_cz`t5g!KDfRDjX@!{oV(Y21Nu9mU^q=4Qg{VZhpcN-ekI
zb8%8ZTqtx_Y}(xgqvu?|w19*84<LXJVLsXf-5UkyoMtHYLu<jX*#)g}5$+f_({k7f
zAeEv@U&8Z>DWz0B3KbF=r@?CWIJ8IOxnQdC{?}AvTVJyznUtEU1=eHOhXJ=|vE9Wx
z^%4cojezaM@rC%Wz^e=2S%ragds2P}wx8F~Z<t~4v@#936M7Emh3Vvg2Y+D#%z<%>
zDU3S;k~V_7Op211L7ZR;Qa^P75#A78l>4*t()4|UifAWH&~ihm)^A<s=(1k4KPW>9
z9kwXvx>EF!NM%rY0V3AU_wQh;&YAi%P}fBGA$@=Uls|3;+`?=Tr3-(yh;~Duw+JKS
zGOj>QF-Bk8*r0Fg?2OpN*2jUH$_YC6bx=`_O3~d^<$k@ug2Sv7xZ;8vze>OEU`Iz#
z{vz&QCO%d<ZsXH<y&^vx=?iE0`6S8xlh$jB7*~Xzo_}EMX;f4c5YY7xffhq{1+iM-
zj|nnlze(Wq0sIPWY87MrHKb`IJ~H9w0La`ZkIUK<MxO1XVPZn}UK1v!6R*H#2WFL9
zNL8U?EMG_(jfAQDpfmc%4B*iq-t%YPdSho{aYx!`f0e!~6KO5V4cq2RN2`LQCXBqu
zhj}~l7oPuptpp@?%<*sXW0+S^LX(lSiLcRz%`J`Z;fC9r!*c{s<dvO7Em&}1Uq(Pg
z)d~ih2j(?A4o%I?uAkd5QmY6pZEYb44gF=J>R&eFCs?7i=Kb<oWh$4yyGg(aMJDW#
z){-oOCr`Ztd${*>0X6tq{7?1@OG~X`3QRUvfO}O}S1)w<M4o&P?}TllpB<dRgpv-E
zd5a6Xv!(aF8ePA-gRX^$=nL~&Y30Y-TY&~w1hh;p85&~RD`C)@ZdS-Wlv?E{HFD49
zkyl-1BKEPS>x^hTvTXTj1EZclpRLqkwc7k;QfILU3k7CSf&T<b@LW*0C`7&F9-qHM
z|1$SVEkZ&JCN4EO%XCkJE49j~RR*eyk>{l_LSlM)8verZg-GMzf??AWmrqR-lP^Re
zWsCV|4epmGOM_tW0R6NQhAYR#jX|HCjh!8O3NQ)zaiDe-=Fb!^G&Ij$5tw-h!Z?o5
zHcyxWpq=l-T1$BecUj)muc05PAuzERL@q<~E`{lKLJQI_R`!kpe6^=DRa>TpQOU`)
z+Qe@$>F)`YnTWkFsIRX#LRjf;#x(caKROcN=I-5K{7gVhTwYpAFMeNDO6pcM1W~yb
z%b}D{!3ya0BY{LntzhZh%gak@9)5oN%`CDovX9gy2J$xx2Qi4Y`1$*4qkw0hPVQo*
z)%deOY`I+M#y}sATD+{GXA_ZNFfW7ROumZVfS;C@HX_Ev3HMp8rF8A3jgi!-()h@5
zD{p%xh3%fSaGI3+RN!O+Bc;z@<cX(|A~Bbh?~W@-$Jhzthe_|;A(o~?BalDs+sH2p
ze%_}B^fKZ6T^eLC0YZD^`R8;%cECu~*)LWxz*G>8Rhy>6khlw-q3zgM2<LY0`Qe%f
zbsP-PaZ<tyq>Mr>CR;g3DxreG6Ob%JL_oMY{)+w!<R}&}#lO~N|NHlEHW&M>N>ETC
zik^<nU|(Mms6VUvI!w(VRlwH7BP29DKHi~OiV9s<qP4^0V@Z$o@~9|VZSAy}7<ceE
zfC|s-$pP~=`EUA8bYrh}Kes1MwL)Fh1u#jl=x{4GZ-X)jNmCvM1_4)-8=HRylld5U
zVC&KACglj!!5It=R-%%-D69E$lZ1Vv>8!wvXW`=d4l*Ygoo~FB$IVTXV7#N^;n{&C
z;C(@t97t_EF$@TRIY_yn$?L&j9SCTYH^LA&`G@b`zt+oCM4W+|+E7EIP%%~B&+kmg
z4LJMIO=2@@sr3O~nUY6yp}7fz@61|>`b~f@B2o;zf1pAFxF*^dMC-%7z3<b7VURF~
zU*7!-1Tj21A^Zw^JAo2MiFUeLTBtSO=J-RI3lbiKoN_K$Z*&hPL$TYcVUKZ>N`n6N
z9R>*rIh}_Oqt1bX!fw<;EH8=N2T_oYz{@h(C@<h$4RDCI^S~zvm2{2PtEQr&)t{fd
zWn@C%CEQ2)M0M0x(EMb(9=5RPQ0%Sx#!E?7(`YF>2#d!NyfuH0bAvRH@?v3T?zM?l
z^*^sysU<V?_4Aw63xUVs{BA@BJTMd#Bmg%AyN-74iZul;ZX)FvU-amw^ZT^*^ev(=
zA_CHAhK8i&bkh&>zyxYyHBSsjsQLwrwjMhHX6qpMDmkt|r3w%Ff|dr{pBN|^&QAis
zL2!O?$}2~!7pB6)6abUPt|`-xVY_H;S1*)-o(;fA;edh&5j7tldZdz%OwhqC>#-&1
zz~BhTBO&=K%)y7i4W}f{{r*N%h$t#3WR;agzI>TjS&2FlY!qij7`y;xQYgKC>^L~u
zqomT${*i(Yz;~Su+1S{4ChN!6@y#edt~u!v_iIqYLHO95do=}bf}tTkhY|A2o1BSb
z{>@-bp?t%SU#~?GsE^7dYJS0ny1(`dHYnMvUU1?6MkC^Yn8)12&z!C<6Bvfp(l|Xb
zqNt|_p4vFDk;tYOnajQcgT>99Rhq|r^Jah)c5=$At23Wf?2BGTY{<{aVF_GX$_WXf
z24s&N?YFmsHv@}k@P<$E?&ISJz@bA<{sNwCe&;1^KcaBT_f)BN0uocNva{_WT%)d@
zER-=dHHCEzS<8#BV`Iu9kzfL1;3hbjU{EF1d1IK~J{TiQEe%6HzmzDhL99_NPpHm%
z>;nmJ*&l-YuXSYiSh&Q13%qi&pQ@{?3zHnoZ}I>FVXu3k9x9inEf$NXDv|ne>m{mW
z_bsuT2w4dVY;Zg=G^woMYJzwVKlHr77OPzIOTAKi1Uj&o_XWZg+5DI1Mp-DY;AZen
zaQ{&d98!=<gm;VH|INkaCA`B^$MW*>s(C`dtG#QH$HG!cD!JmRNV^A{ed|h{9Lgt1
zGs(dO!E+=zdHFs{U8MkCkitK9`0^gT{lfyeg_Jkn9Iz)M3JX^d5!>Rap5L89e2Fc_
z7{7^04`>jwpa#50P_x1l@BZ{@MBO7TE#9E306-uZ8%>5sMjGhri#<CV_<ZRM$BB;?
zrBnPg5L#T{m~>V`@E1nxb{xAG5Z~X8f@*8i#ZCd*FL0TKKXgJuEhe39U|j$!3Kge$
zRJhUM(NUyPxI}p2!4kh9nI=ruxXBpT<8|0f*{1ZO<@v?pGKbjSRYQJ>2O~@aHbx%7
zW}aexb=cely&w>9+MjHDKznHK7pSFpyZ-9#;2pNHu>qlCl{b+G=4n8hlw2Z!I0R~L
zAnrm{jq$dScpd<6duzX-Jt>V1p}4<4KW#zu6)v6NbL8UYCgCcO6r|`20*9pk(QZtV
z+VtF9#BO*+@=aoY@p)F3zW7amkh!>`0ta|`@QS0y3$gL=`s;7kepdA6PDfN7<T@^G
z5Hx^<WWim4DOq2bTMqo~69Qf*_kWdwX$Eo_+O)+kB*d1gfrHRH5f<<Q1z(Mq*RuW;
zyCV4E#t%JHOG{aI0#rXU4<-mi`}r*e3`NC%mOCTEYfT;}B1_qwz0XL{8AbH0?LC#U
zODkGpJ;DvS%1RHHP8~~XwHfBsPavr{^a<ZAjm}};f5t6^4s#WyB;&{}71+YuBS_Bw
zLnXbEu!xY*xI-J=Kz-RWoeBY$l-uRkbT>~+XMuxwir060z-ABASyA8Q?Ca6qUnVJV
z9*$#c$fF?rR||ljjQbD#RIVx5;Ye<%fH4Yw0Izzc#?8<7m*)4U`8ho&1K(2d#!7@B
zy>2EZ{`K_aq!xW2K8xh!!#7S4=Yz>OZW+RWc!T?ho)CmgzI6RnAT<LY1TsVg;5+@e
zaVOt=_1V$SW{}-8sCPbkdw6;(f20QYk}nMS93#VHP%&(KLP7@m$<A!)>+vts)3xqv
z43LmcymbHdwHsP4w=<}z#-J;vbR+_wAlZMo1H<y)zuWoyK7;wYSm$dkVE=A$#~Z_j
zdt$bjFRCfSO9+e%OIsOXGl2Iz7@i2O&0kkd5IKjU-F~?xrnOZEz`iBzVSPUL)?UWM
z82s6sRP?up=kvAwoXzSc2vz1j>n^6IHzsBX;~B%iT39}cluw}-1Wy0loE%619fRPY
zm>P}{4=zcm5E<V;q-!0?Ds0Z$Rr;r}N4lYt@*yw-GesBLtD_lDh1|ZG)vo};_;ahL
z9$H+$U|gntS3pF3ce>7%VdIX|rzX`yZ#O1ycz2<qG%(zJtx@~|BA4I5E`z|-20x$X
zzOj*!&l&8+E|yvy>V-551Ox>4rr`Doclx|;f0z`b4{?b3*Dj#?!@kcD;8q6-q?-{v
za+B1bQ%4K-IcaDZ7#KJ>Fy91g6ER+ippK5lR#uMY<W$DSTJ1ALFDnNG<Rv9d&6bYI
z#}lt?Z6O)(z(5;NFDySo<qfs4xaVd(F1=G>CaHiENIZBL7#RBt(b34jyIi%=*VmVl
zq9TLs16Y)rnwm>(PnFfxr=e*hhqeHwWpFB7ehr%2{{)v3zS;h$V?Ya(r1F9CdlOz?
zZUNTgZ@?Sueyq6$pR+z`FlqweM(;9y?(|n1%a{a7;B%ejLl~?9(=u$Go!RlgD_{*L
zKZN(c{rri60)n!LnN-kB(ATa`sJ6%iT|xmK3h%}VHH0w2aOxdDazJP;$_MU~+fd%S
zx5SNQ0}*BozhxFS_jdzwfPUkkqqBlM+He8{CK5<^NoVm7>fv~YDhe!?K(zNWGy4`x
zFm^K^)KXPN<p!sl;;9ftCFf~oWu>C8j}L)cIhf=t7Knp0v$V8BN?Hlg1&C)XD}nD2
zs0#yhc+EE@q2dyhIHt8OpACmuoMc`?(*|Qn-VnQN0EQcbiTz?{9?jCy(#gTD9Kbjk
z_umn+=?ev%xP9kn8B1r4N(OUZ7N33S;R>A8fS_1^2cfod=TBY=Dt@`uDk||%vmr-y
zK3fD|$EqAps2gmR5M^qSLe_JF`>PE0=!ss1CW&e*ydi6$*nD==!R_G41^y%O)CE~t
zSwVzw{aph$yA-4IPLR-m1OP*C@8?2o1i`^ve#bJPN&^QR%ERi{uf30dbwW<Vl2h#G
zZg?^FT{Xm;_eD$LHPyf|r<fS&Qx|#cMS=!hIyyQB`-&6>x@e=gH_q<Af+Y;vo(QKt
zp^q4>dGumw+4R8!`k(!Oz<#3HV5d?2T?!(kgT`Qb20#4k?rW^}Rag@TTT_glLM8YX
zK)3uqY<+h;*LxecQdtdI4H?;6L{?^!y;mWbWn^ZRk<6lOMY3fjA(TY+NGYR|Y?4t%
z$o9N{_x;?@U(b1Uzs`A`yPV(ne6P=Sz1M|oy%wxhXJKP-go)_l`t#OADVKCupW+{@
z-^TY=r^MO*0@p3uj5%z4U={b0kjzX?Sx`6Y{xN^5Znw#L>Dc>0uxIEnfm(bNvnUL{
zhovd!K4+d!d13<3-cxLd*Zykxli*jAh!??zFM2jnW$S?Xcv!rnpF}ge@n>#n_>u*O
zh1Ef0!T&oZJSYx&{hUL=kKzxe3kGiNr#}OP_>S<x(yz}@RH#L3t*orTp+VTksV3V+
z*JM59Xkjq|xqj_3_Ke7to>YC!te&hR92`o{da8*c7;3bI@L*@93ls)-ZcO~AL6BC7
zV^&vIPEXBL)ZEosken>Me36Cpj$Wy?N;M^>aMOI<^MBlz3rsLXW;aFRyF!%am0e@8
z=vw~$sD&tp0`8OW(e`PuVLzBy$iLKMZrFcp@!Z&53q^PUaGY)|jPCUxgw?bxzSqe1
zMWx`a$&U=K)O0$K2{<@79NR%;*Sme!Y;6;p5wy!+SnPZX^u)F#t?fZ9z<Z*D`Tx(@
zSQ+#nfItk2FW-+0CVYm;Ls8blKjoDuB}mSeh-`4lQ=TBL#U55n>)3Vw4;m>jN9B%v
zJmTWUlKc6*>+0lz4DFz;#gBo8vV9Az4^ff0ea|nTjF6$Kr=C48^33D+cbmcLy%2=m
zQAY}OPSJIhByKsJ=^Gx)t9w!h2M59H+vrwYkid}t9^$^|CY6jU9cX4fetkj^wMW-B
zWg)Hz&`Y|Qo%Es#V5W!C{qMhjVVh6}r{w1^ys%*1O-z6VT)dm^CAgH}&N(LLRFB;O
zSJo7__a76EWHL#Y+tq5<s`<;FaM6#S04JQ4HFgyLG~XDDi(J9Fw;%yXHTK-{Yo%6$
zWCNO49H~?2GNOP-+4zm8^o;?y^dvoJTem!JygbDC1M1O+%{2<xl4iPd#jF`C7v(AO
zVO2YPbqX(oK>^R>&$ut)?_N|uEeDas&kqi>!`d}ahw(Y^1*6voOO3>_p!|HFyHq*t
ziRBw}wNqW&FDPL4M!x3AOFKQhTlt{%Q~Ob5j$Rm1jbe~m2j<{7N(GzCEB`IYUn3ZU
zjqqaOMj@^BUF!l(vDkJCo7XPfKi*eOs3K;BRhu#H+Hz&)(<eWrPR}tlBSpgETHaRw
z<t%77kPg8|E$5keTk-t)y(D2a!aR3cC&GCnGS%xEX=rG8{t1U%vmg=?6VtLw)k<L)
zYP4=?LiP%x6e6rha{`w;TU)vM%+wbTY{7FF5^`R3*LZkwadBuUM;eX(aW)yk?LMc>
z#K;KKn?Ps_hhr4P*&6RlTIEdLF4?*yP@q9uUzcn($u=C}jBK?VmYJTi`<p9Z<rOW{
zqA0-jckhL9F)Pxx4ux^k`6b;Cx0y)~x9&r4tiOBseoPl1ceF1z!`_fK-F-uLNd_#X
z58|5_b7EJm1Fvh_>NRuHt}?@yO3FgAu%Tk3Oid+m_@>kU4LBOD%(k*vfBAQ~ZY$nX
zLR=h?4umd=@Vn`;m*JH~gCzX5MDqBcIS7a5zrQxGW2m#B2R@Aq@87?_7K^DJLWFlz
zL<GNXcHS@QBS(PAOQFyZ6B8%e4c2&c#&JevSR^;M=W5E`-uXAT4duJd|9%>!MBtF1
zREz-g+IT<rjc+gH86;mK*nxe0bt3>d)W6%}TJ&V+@yWupVNsi<m%9Rb{p#XyYfOW(
zF>*x+UH^Z6wUWWuYkL@F7;zKIUr&OftB)eI-T(c?9ZkH)0!|?`23WBWJv#{e4^kh!
z;>$(w^g~)6goeG3wxS(>PF$iFOSc$(70#WT>`3Z;X?Jdw&s1ENg+(Fqq>KzMX$im&
zzrL4ez2p||dnAEN2tC@lt@U#3aNZed*vQVmxxS<_)~pGqRHzgW4|#60EnpXLRA^mV
z{`Z2JOLs}gQG%sFMVrMNbaFDX@myQ?r<c6(39k$Q_EiTH%f3=}DNo0s0LYZQiB3F{
ztrcY(dgYphNxLsc?H}Mw#M@bZOi8k2BM6reh=fQB$U|^t+}v0x(zo0P33EtSSs8DC
z+0{7|K4xRN+qE|e@NCQat`e5Uugr)MJqERi_hbzbM@!_ff2e4%tPrN+|NJ62qxqyx
znlqE);X=sg1kP{ke(kev<1Wg|tt-FZMBdl%Zbb+?7=Uum-;$(B2v5pZ(OVsQdyAx&
zL23m_N|t(NW>$4~UN?l^A9q*=Re_L<q}W(pBovrbddj$5F-P6fy(fVl@Mj&OARjPF
z({01y;M`l#gx6B#F;f>eJ~Ja_-AV+O2?=`I`ZP;t6t5s<2|#LAdb)PSv$ywD54O7h
z?^U}IOIYncc~r_%0j(ZF3Uj1U6feGVIsCj&4!u6kCkA3p_gQ>C^RSuLU_2jb;e32J
zNJ3Il;Xr*xL4je#GeW45?%lQDCSKR-A@_BIQC-bpX1CzwYRXR0D{@TuD^DI&#Gmdw
z9qPs}71s%?fngJBw^7pj-wO%vh_iZTfJq-0+_#r@#Lq%9k@*pfTlH1`^XD83k?|6V
zQAg1v1l>RQ065E7Zt;#)FS(5ktx)!VGBEUcg#NYyRctaNrK6?gPGGBhYtgWdtR>ep
zAan^_I+i=zZ;uG1V8`1nbYJKzk%RJqZJSL-M&`^J0U4P<X9S=naw%);>gwz0D7il-
z;FZ?91_y`ce;exSXLIuN%K5_u3|AJqI&29*A=o}&sz@p0?ILToZI^xPU+UG)s&K0{
zxrNaRv@5~;x<7roQm-$drL#t9w427EgEVx<u;}~v`-f3mpTh3K-{(6Qaip_p-sK3t
zeVl5CkWh&?VJ-{yx_p3wBB<{LV)!j%aaWYU$c2+*l&78H@5jmUOzS97;c!p>4m%qg
ztPV4+G3OA#02tJE&w`X9Hz`B-)k9G*7M4DJI<G!T@c|GI)sZ7iM~<`vKfF#;FjY{H
z_ncSH=1D6{#|Mr1V4d!Bbb*H`@44T&p^iWuMeK(<s4BurIy$7Vedp9$wa#1y5p4_r
zuJgmYGPQ6v4>HLhw-B)oZwLiI6>W8MLBSo-Vz{4Ce|(mHSs+m1_iqM1{-USqNx12c
znwbqi<a}=RiTFrnetsJpgQ`){C7nXU>qj1TI}cT%_=_eyS}4@Z{qv>hF%+g4Er#W=
zT97_mMHi@5cP<_hF92c}GZj_b-6ICyzG<MoLrKf3rKNS0XU&I<#p4xCFll6DWaxED
zTYIN`4iH6`c)f%6rhd!IySDi$Gb1CTIm|%M?+LRTCD#ics+Z;E^$o1Zpat~sxhvCt
zzx<|NYruXB$i_g|rp!8Tt!wbP!@g5;`K|dhg(vRFBh|MiKNp!yhEPoQ7MTQeW#{`E
zK^KOXiX!AQ)wLIZ80-hb9$zY*i@y{-0m3NmJgA_PfYqgIYk#kX*ELP(M=`!dfLzke
z4s5?JxKzHLB5@jq{^^McWX8loFQUdtm5>T^Gayi{N2d-huR><hP|^L`J?sHPKZ)s5
z+5fNrG{S<HUdDgDN6JF$e|(?S!mdz{^XBFcdzfRW>)a!9k93|&wLaU~)1SobCIC28
zNhuU**&`!|G0OyyhCF)oNZ<3Xh1#xNBYf9g{$5e7pQ{VnASJSC9oNv-rc@752{FVT
z8j#xGm>Dps9y?}t<w~^U{!jOPJ(FHGMmoxm0}kc8E=SICEd1W#fZ($}FTD?C>ev6@
zmE7v@C`eNahlgLNE3s4a8wH&z%FB<jh+aMNu3`WDsjTY)eg1wsvW92QaB=BBu(`Kt
zw6M7N`RmsVfvf<kqnmJfpl4)lsmXd31ylyopxP~$Ttzy+2T-%et=(Z|nH0!6bx2`R
zLh^eKjhyWOsZU06aoV%m4sB@<vZ;F~*#oTozV|XK8(l#v%a^-ZnU+{Ov$KCwrCIO(
zis;~y60O&r*1PY9i*s}7si?>`u##kzGrEj9cra+!sf0Ewqy|wn$`Uh)ag`h>h&|4>
z&F*hse+@xHGMsD(03*rF$vMo(c$k6V+}{UOjkWTL9m1*wQOv@j-!6*C$jDy^>tS9f
zuFFlTqkayV)P*P5KQpc^BHGK!nnn1@wYxqzDNy$9b-ncY(IfFvyfhx~iiO}YiCi*d
zcTMi*ezeX;gZ7izt)qTvPYnGqugpl=o|6m3_4k9lKTh;I^mP9<Q*7M%;A;y!?%K81
zu5<eOJ@9>F#c0gR#q@@T20SoE1^V2H60nNdSXks277|RF_$E)EF3YyS-4%e@44@Ef
zVS$Gg&&XZ8h+8EUw650t23Ev;Q&qKAW^<$RwsgN{B!ZYkPEqB}{`rFJ>W(0A3x&El
zmp&wyHw~euzbNUmv+Wl`o={(3-{s#5(Il@yLA|iX*19HMoQwLSQ+D9>RETGX0<O#t
z1E~E@S;fccf<Kd;WE0+TLTyuJK8Bq_R(|vJrqa~HrSf~od}HCPOZ%3RL)O%Go|=m4
zsQhMkdK+=4M5?FH@^Rpek7{evR&gf@ZiKz^{9T1`pUm?VpjPVKb~`zJJ>%3dT-uN%
zk%+6g^{8DbWkF$gx&;eoAm<s*OQZn;4IJN4+Bdt0B|4{tf*~MAIJSgr6IugcvTtu1
zoN5dS#bA79_hUoDHIf6zspvS~d=fZ&^+PhhlcZGT_i7&suc6oOl|JrQPoI8|!OL%J
z-C#Wr4V%$3<Gvq13fw23V_;F~{<~6i0VM)sB_H1+(lySWIg_|`FeMXc7G$duZsVi`
z{LIZOfT9J6((G>r*!(^O@n0;Zsb~i!zWisP1<-l*Jrsm`-(<03S0p77@812w&MpZG
z?U{-9Mr^mL;HP9=P`(UAKD)ssz#4_s14wnVw2vz0@GgLBrXB#yFcXddmI!W(%Y~bO
z`WDcr;lGO$YK%oso@@aOGj8|doGL*V*vQ0OWTqr4GG4LCC2!3=J<TIg^`47bvWFYH
zl)Of?ybb?}(Vw<m0x$9EHk>ZmSy@&vMOY-wekqc&?!b>k9LXA1uE_XVf4GZuEF|5G
zJ_R1={fhZG@&<oYdC;RRhqkfKTFkb?Sf~To6xL&$MS>;5Irfo|lwa>>T+x~mCk$%O
zK<eV$;=H;qjGjMH?|%VEJsL2_t5*rfTO4#VP~OS0vD3F!QdHtN2(lpAW%#I(^aAgF
zVtV?OJVgOlS6Uc8^GsiNp-Xa+P>v02=?A#RJRVF&eX`5?<HXF&%<K={bLX}`We}s;
zGJSF7GxRUnTmOFdBkLs$z$U1>Bim=$0g2NKSvJCe6B7qr%hfxS4A^7L3+S8em1+VH
z5@)n~z#ag)sDEA;6qX|6Cz<nx)t!&ffNzu5iYam_%dtzz$eiQ|-A75?cig~$UF7n7
zSmK1pwXX9lMkiZH5NEWEiSMu&n0E`<yRTe%abqeLXgs8yfYRnZvswh2{-Q(J7$~-S
z%`lB?^-yr-F7S!(ops<f5-`%&e}<gRrIYbTH%|&9A2ML+S4@Gy-UE72Ss$Ho8mtEU
zVz6Kg)I4117Yo`lM=StYK{r_|orO*+N!W&&l$vUE<aQ?-;dw-w_;PXiPp|zw^30^N
z0%>86iM*4@!S2Hc2+scCW0<`Vaw>HK3~R9K;@?RqAVVSCT1L(phS#o1&`jtk1Tybn
z&5;7j2jOi<142u|Sfz?r63o0A5+kciQ{DLO!$_b~xP#3ui+j!$W0t)#)z#zz=L%!9
zob@I6(Bs}p3AYgPb^}61meu2qk|n%+*+WBX1(Fe+np#h9f~bi8!n2=0nm(Y)z9x~7
z`3-l~%#YVuukryjF@P2#*z0rDzM`9vW2v8nI1Uf(ggqq<k3MCsNGka4+-ToXk!(O1
zKks}R*y2|Y2XP8vBG(WtRucdDBfw9(tA~(2lCCU$_AK;_m$H>D5_Me2egx_vE3VG1
zRScL#x;`OlVXsAvui=j&B&x(+JIk?_j%8jhk8?%D$<Ih4{8aq1PIE0NWoU1p`uK_6
zMoq69K0faNdW)?j2#_)=uDX9*G}#%BT=0?<UYu{G2#=@v$)Y>aWT(aISMJcAo496S
zfNPx_@Ej55a$4H+qM{kOTt-1Jzl+L`^Ds{X=zTORaP2h5v!oTPpO;%XaZ(c*6-Pj1
zb2qcz)my%rQvXeYnAp#CX%69j*Bu?RS&>PVf3eIEfs|QF2e3@#s-2xH0D?rj`i2H(
z?Hs+3LN!SqVc0LN-Ibcn_4J63Q5`;9CwAT^rOQMN)M#I3adD>@Fvfzs)k3xEj)68^
z@HFPNo|R?qXN6DVP3$n*J$a+h6YRY)7WIXOqm;~an_E>Iv_gq?5{uiRfMGkFi#LF>
zp%V{1$Ux9;J<33$ycCqSzm5sG0mZ@nHaR@Z>=zGgtiO_R^d}yI*IDXGUC=gDZUKR<
zXMjdC_@`Z8*TvaiSiJ3q*-}t&4rW-pYuB#0!&&d<qc_sCD$p=X*1#NRJq4K<$^KuR
zT~UBtfiHzWej!~@P+)9g@_v<|!`Y{Vn=?H<T|}u6`877})-_~0AKY)VdwCff?zX$R
zl=q+5((vqTD`~Ql@Ao?o$@uf^iIINS-TIhky!@jmptA_<oKhBFz#h9!0Nj!EViri5
zz@g;P&pTz^dWvJe74KCir!&5*q_VQITzkY{)rvfLumV5?<>c@3@)J>qifjKI2CMs^
zR73LQ9s~E8FTdeUa1ZeCSOx@l@VLl0e7n)s5U7;D?D)4Zc40~!SC0!#Bj*o<iU5Dl
zHC;O8=peofRDZDA^$;1^d3#s01N4$5OWg$qYDf89b(AMD6+@-d%9(I@E5i-OAz|0i
zYyj*}84ZA{y5>OZi2O3~A0Iwk2W5oVo_V{$A3iX^^Mw#9of^apKl&=J&&6}QLuJz$
z1vKx&%I}TU%V+7a*Nb%j{$wdHd<DM{;)q>Ldv<2N&b<q0kAF?rZWFP^91?DUeFpA7
z`TVvwX;C&?MYC@O$_r2gB$Jbk3bM-FXWL80g58bp6NPPN8;6ob@5CNMA`Ft<AYR-1
z5BCq)6Nr>$+V&@20R2VFZE0m|yS*@$i#?HTjb8wEK_m%t&HK+K)z}XvuKsaw5Jk5f
zh^ok$Gr&0d;bl8wE`>23LibB0mNvx1=dL|Q%+o|?nz^Lr(L)xm&fTu|xewR<AzIF2
zqc2b$p>fEE>MSRxcdA<e;7G@}_2vH$bl0#~b)!K585%&1LcyzQNEhroFx^09f=tH~
z29P4aI|lXIzR$>?BKlbeAz2B{p9dW!eAnUqd!hN{I5Ek}`pSp7pBfpgPNt^5*djPY
zF~UGc_q@1R%xzrGz@Qi6ke{8-&}{OywmJ=b$9eB;7;7kZsNW-t%~Q99Q_lM6zw!Kt
zvYN$i0ri|TS7T%2sXMI+|F3g@7<=K3n~Te%>dbo)Y6$y4+^QBe4Nc~=XQchfU7Z)x
z{hv2*(*%F}_ANdAlX_x)4+_TJ2M^#jP~|3)dGO-EJ*)BTH6Z@^`F6VJ!{P(5cDSR1
zkG+J1mEO@DBZZsuJB0^zn+cp+jEQzvj`V)|)bsgs;zHQ(!wbCJIUYJGASnF<)_x+V
zp|@8QqnfabBagSwn&}(QGMo1tq_fjEKYaantK~rv@MJQZZ&+2p@$5L&3&+0oq|=-*
zTNGa^pTbhWI%>M}w>E@x)F}Qwt4|?a6Z3YN11J)(Jv)$bPL024>AvuXa^}Ai2FiyM
zQd29IC{Dg@U2s>Yln4R&d-&2$GNFI;_%*%#v@b-kDw;3aw{3kaE~UytQ*ZbC-Qcpv
zGxy1>TCM3G?rh7<Sq}Iv2p25hht?C1B{N$abxKNP>?Fpq7G!my&GD1KJEl+`10JmM
zSgGBiGd7uY_>}I6Fnx8#9~;q;S0x;P9me?mM@@w)UmFw~%aT?bPuBfSk^R6Gy=Th3
zJhZCuTpYj2EU>78_b5Fc%o^9R2UFcG`Gr?K*SkfHg3U`Ee`}UTGl$PARJ9P~azOR0
zP1H5+%Lc40uB;%n7^)WTe+X?tRN>vIsIWKQB`i)(m9I9ih7wDmN5p*=XM;$zn0Eso
zyhjX5-}q_Z@e{^z(rMc>Bn+)=boGq=v0{w)$(ug^Wta)CG{Yh_S+r2Vyk_v7T&?W~
zo*#N@YGtOcOHW@Fz`CjP<@O0R0f%mzpy5EOqQh5Db>oJt)dvh4oloAJprgB-tLfqA
zC(UsvR+LzQPJwdtf~NuqaAE}6$K1+Lv4PHS;VWmt$?XHx)xJy19?a9LL2Pen_!+aa
zskM<TemBY#y{)x%d<Ts%wk*u6cnW9i*LJIVHXdX^DM@L2&b!_}T;tIJcP>IS{-)Wr
z|C02~;WR3qvAV7XDnz{xZzz1u?k==V6_atyeeq)NjIsQuK<yyz1AO4(S9$+S;NvLp
zj8X@P$FuRTQU<S<q<z8546oHpB(29VjUi(2jh8GNTVq#OeP7>2({B$6xS)Roa#SrX
zGk<)YVclkTYp1q!Xtpg!5GQ3H-5Nzb?tb*L99&$l?0efG=>k)R*3;sR=k;9mBug8c
zHeql%^#n&ld_2CAmHu}%RM;@rR=VH$;p;Z(|6u{nbJ5YC5YH6*r~Y3X0<-W3nj-p>
z9~~{@`-zr%713uzsHCe#a{T5xIzk*Ah8h|PhZV_($y6j&Ptm)Lu+zKBeR01i^)$B*
zFS?W%VaeJ-u%RKPWCO+UYxjoGIc!$*LL$Q_G=&%d@1;(SVtR!1Gk9!aEUcDR7W^)f
z+%@Ii{j+X4)EWZx6ROD(D4vD4J5#06gw3EVuG#{86}$dDx<pNr^<3CNE#+{)B!um$
zcyYAmDk?%OEU|k|#*lj}%%@lf$QyTu^4sywT+HISwV4E%+L~ni^+5~7jyncv2Z6Lo
zFqEg|(MM`vUQ}l##-SJcU16<)EGa2D`Oi?mZ5yM}(NPeAsNB#UOQohd19f+YlR(I-
znSkT79GFj*-hot5$%ARmK#8&~@G7gYFnK50#tuPSfo-XaG{KyjDf`LEL$9Bj68O~+
z!+HVRirBcg!gHvr7Y@6}LCz#<4^RNTpza$_Gk5nwWY9Sd)v!*L5RhKv9%3Wuu>ctO
z4l+ohtTSV91I8B`9PF}#$p;rJ2%w#NM+6C&F?#BVuxIAA8Tc6?6i1#2Ss7YdT6VcZ
ztI^ikS!~yh(7*G5M*8z~8VZffERIavg4qlo?8Q=RJNn0?gl6*4p~-D=QAJkGtM>Mv
zvsKC<w!6oTU|0=g@Mx%aAOx^JSkztXjPsw!i1WgLka_&<ttrmBw&IF88uK0r!ME+!
zp%4__2A{qLyRYhnrj{1;TVK%+Z|K3THd_}&qW(NR|Ju9Tf#FFu53mLl%s2}@2=8MH
zMkDX{!AAxFE8{s6C1nRGi^RO6GTmeC(YH!vWyh<hKPoXsZ@u1nT`7n<=Nz5OT<tYi
zWBudGqBI+N#(O(>H>Ee+R%Vl4ym*1jQ4D#p`07$ZHX6piA><Fi%78+@=IQwT`egC7
zcqm$C9<(F6pNBjKZeUuwwh;^qC)vXMe2Q$qVC1o#C)iO-{`+c*ImpG)$;p1`;~-Xn
zI%I@TU3X6LC@cbKx1sFlZ<<i=x`Dw1H%TePz~2D+89mYteemF*dRH`<gi4Hmzy)r+
zyS)oM2*Vl2J+kCHuD}e@J6<ZYHITa<0BE@}p6_C*2tuOoe(mjj3!Nw-Vfs6w^zYGd
zf6uxgh~#L-MZnyY!A~STN?)8x6La2%4&-ReV;7INx)}=WBw=peRM}fko|qtcNWjkf
zS}I1#OUB0VSoD8<?udX)`ZJE!7xy1m+}?18+w4u!<~N8e@cjbpd6M*T1VOqGWZVr2
zvB^@pA9LT+a|N^F)nj|Fi*Z$?$?D0TlDK`Trl3GoL7}?1ShkOh%x?bdaQ?fpKu*QW
z6#HzsJt8O~4zzDhZ~Ck5L6MUUKHEa6uy<-|D);3>il$GWv=cR%oAGXRU%6O7Y{0<4
z(3<NuaUv=G-{pq(&oGa1=I+CYHT}I@ZDF+br|@~{Vz{xyUHU7EgqP2QT#`xt{Nu;|
z$B;(E8pfXbQ*^QH_`wtX__)7`P_AL}Zja|KbNH(1dkZ}373aA}j=Co`a<z7xfgeH2
zfkA!|0Y?^`!8`b`Jja`!Xt&`~a>Pa>9A|_UAH!lPjPWN#?X8iNJs;Lb*;3#22#|>*
zwuO>UjSE4MPij<owbRK|4N)x+Tk!esjrlzvW{3xuf#)9%3Lv3ltZoM|RTLvTGdFh<
z^C{B0qHhkP+9Sp$Q`7>|b!c};(L)E;kKMa-cQV@M7?%?)5Es^L7Kw}4ketkA$d@Je
zT0%m!-obk23qRN6?d>6iWDh>ocys!yDG%f%U7eueVMiVv9=`pMmbHs4%`jf&7#VxA
zwgd;q3N}0?Cm&yxC(^EbXG+0%=<I$h+ltKyA~!wI{)nV(WXyH0VTWH`uq*<#Oo~}c
z9-F~kN9vp6S2FAG1?UeO-$cJ1Eb(0J;YTQIEvZF|U^|7e-~xuldldEg;Gl7ypBWU|
z!nr!k%?Rej{pA-FZn{N5yO(Q=7ok;N1ZIMmSD^hIe#~DT(@kHyt%A;{pN_x~Gdonv
z^z{l@8tv@N4Bg|`T47Om>%Fju{DV&f9T5PK@8O3VFb>!6dHw2cK;e~?#@aU<^rQ;Z
z)MGf5Fi9L;a|hGQQIa$NZT9!?*Q_T`j-Xk`9rLrDE++kqU~12oFLd^l2al>z&~Uxe
zNLCcs_45xTAJ7d<{Wgj6+wd18{e0O4yd;cUnPx#7K<#Dt_-=f8)`uJB^{s!G@rlDj
z4(py(P38HBL|4}murrDVj&*lJFj;M^F6e<nqvLyI4t?ZqSd7u994msB`C0HJBquty
zf~MjvhiXxhJ7)1=6`E8&&$99niHSVH{jC{y-Wlh?-Ls-19jC8-dWUSX^tM{ZizG0_
zU*nR$4Ws~wOJCE(jS|Z<lqC@4;0w6_je+5VG+>aw3kw!^Y-(JfQvfL%l^6s3f#B9_
z%Ep;KeRVrGCnrH9WHclQdP|>Mw_sDMgw8<yQPJ0%lOKNrq>%PqJ#{3Q>#=e!jDQfI
zfn?oFAuCJCFGw(5&5sZ(z5;g-g#e6AcO1YJQ?DSNqqVJV3Y<}-vaBiHsLlJGgoFfk
zHHyZJw|v+*ucE(;)s5Zz%$=ZfH32&aNRqc9Gd-}V<-X#`J?!u)w{*X>c{I{>N9R~N
zYv}L*pr<6b_~HiMxKBE<vRXYa?K(JZ9Bbu8%WoevgcqspI$lc6^9Mydk9B=xqhZ*v
z>P8YOcQ}cXqT;Ex8|f-zjg#5PbU#&^u@4s&wxCR_&Kc;g$8e5*W!Jn@FkRgCN8g~=
zxc%J^F$~&xlLVt+U+F|%4MDauG|UM>W$6A;{~*o|(LBYQ-rmD`IIgNKL4pikjpU7a
zg@v5AB!%iCLwhD=KAG+wV;sLQ)_maeQx|jtJq-<`_rtP*9d@PS0NsD^Aapg~xMcSw
zrpA~mnB35l<rx&xQPX@s5zi5va{B7i+}sP@Pd{X427mVfQxD*lnPx#5XRH7cs25?i
zK4TxP<jP2S7I3Jn6a=rOy*QP@EEgnyb$x9u!zR~%>n5vGq$2O3du8|U--m~!bH+{H
zn@fmeDgr}l%i=`9TgfZVDMDkie?lAD@?}&>zng==hLHIyP|$|izH$dIkqI`940We;
z>5xMCgZ7DN$xLx-YBzs=c!I<Q^eeZ&Btc1nkfC^zAeQqR4~mPOYyJIPb*?2U*uRhG
z?k;yY!lC?$kZ*3Gs1(DfM5;a4GPX-ELy@g{<RLs6OiZlXF1Zj6WM#3Aj%Ma;b#FHW
zil2yKE{JT3UgB)Y+x~5?t^MvEtpmH6zva)5W+#sR>fGu~tHrW#dGVDw*`?vSbN(~<
z)14`=Z%^*h+8c1Tbd5;i*W1bNzAt~cw+U{Z7>4NFkQb^6?U=dYEjU|XbMt0Z*Bb~5
zUqj$zP}n8?{#PKe!obpa+t{WD69WSv3WuH*v|FSxp>#LDotQu8_qi_P2X694`%wrI
zG1CeGA!_Y`)KRs?XRUMw6$UV>odfR;Aw-2aPupqh=><(4YNoEadx_(QbJrC#8-cB7
zZ~P)M-+h>g2e>qlALi;OPZ)f$ElDRYT6<YhPi$Hgq{ZN%In1SiLw6f14-*#a#8VM%
zggzpAVb!7ur^3amFDx;vau>Nk@4?AsvGk?4ccAR5`P$-y9@!4MC|=&+&D!UWDbM>J
z=@{c8;Q!}uk@JmE>Tr3%7ZkJ-<U<+ausUx+dJ)MGG-AdahaZvgb1WPYOr88G4(JJ$
zD1+~vbr{vn(MGa(nX~V@a{FJ}ohENWLWnDA<PH{8qcy8WLDSSc0QTZwLdg7!!K|F0
zu&vP?*lZx#dogmCUC=K{bfxHRhObcRWf#sQ02Hab_Bn;jwqZAPA4mo|=^PlVnIVF?
zq*+C;op<~kwEU0zX(=cuI9|R_uaG>Xq~Me%Cfxo8x+0GKv=xBr8sLXX7P0%0ug4j$
zv5D5~NgJ8Up%Aeg)xJ{G+e?;9u?d|1OLvE*iK*F`iMD;bo%r<)LQHAoRwK!X8-skC
zYYXh3-RL*B9nQB@Bu^hUul^Mp#VixzZ8YqJZ0S)ttaoiCP7kkR3@>FmdeqU$X&;Fb
zvT83Xho73?lN>E}jB7L4W{l%={D0Q5SyPW!9~_D2)`NW6q|CMmiR|wl-469Vbf^>X
z%7PscD3os6$BGpLj6#-*%hR>?MtM67XT7<^#a9t9jIZ{w^esbpfif1ZuneD@6MvD5
zHiM3CpS}>oiP@r}q9!xnU&FXX7v9QCFQOE6nJLBXP56GX%(g-K&NQp~lT)t0X5K$Y
z1d?Na<;oSrqHwAoB{AXBJP-)($X&!5=QBqxa5uX8$5LJg`GR+><^<kliT9t`uk}M^
zo|GzO4;keh>K_B;+Rqd+jJZGQa%tZ?x0n0R<sWJhG+tg0<w)5m!)JEbx}A5fNA8J@
zwSNBB*sY`H^xuyiwqmo=o#Eq3+#2wwpTsFEO%>kU^dX#U&9u~CO;kC5gsfYQbTeZP
z=3M(b;FaaSwR~iEMswT7bx0x>2fbJLeu|GQP7FZ*BVyB@%{JJ%_;Km)-)_H2LzVkx
z4D7P_NlP=ur~l2aWf>GE#?G*PQ$8Vy%okrPlXClI1Xg&s54>8?k{@i!c_rYWGJu1!
zj(#;-j*Cg)V&eA6WS+i0!F;X3&gt$T5-ScIEFd8@XSX)y&e75RTwGgU9gCW1pzn8k
zfd%mkV<|Fi{-x)2o%PcSgtX|g_bF_NZvHEb`P)P>)VLns2gWnwsr=`3`5?f(?S_SG
z7rhiKFIDMBnQKr0?=mj6HYl?_0JrqhYj@Y_dY|liP7$m+tFvUEb(~aVyDcc6l2k)o
zm!Go0A&2=e7U2q*5B?sDl4^6lzP)J^n^tC99%sbI#-=}DMN3J^wsT8W4UL9%TKu}D
z>hYH)B{4f<%iZa_iM(a=Pmp3TL)ST-=D$7>A-Mkj-1T_DWL^4r5hx(8`4mVUnk-^l
zZQJ?8Z?Zi@#f>W+KE(-S6~pn#mrylV%f!0Y4#%2S+Mw?BPieZ_mBz1J<a-NxArM$@
zVS3{+6pJbA2lT}m=V}v+vq7$+aKx!9cWpeqcIkgufWu<1(YfmC)Q)7)3)5`6B!F4F
zpPRV~iU4(ej)#4D=ATXRWxw$^A@L599@FAB?KJEwq+<DDzS}-SXmC|s_>Er-cjZL%
zI_H7PJ#oe{xW@;v3heBSd!k$oEZZNw9q+G=H_TQ#Nx!lD^;~aIce)L|So04*Yp}fQ
z|4d_&%l_<tx0?N8v){QEgcYJ+?o>5naN-u?{MF2MVogzbxDTxul&zYnXC<5mP1#qT
z?_WG^Qt^m5wfEw<9-m%8gX{A}PNoh_HV{6ZlQAr1%66Mjb^Rj$cJkhH-eoJ^rd@p*
ztO@g&1(cbeomA;5t77ZLhm#`daY?%56j@iU@1RGTYdJ^$o7ZZVUr)x9ZhbX(EmkSR
zQWSUh(|5~--)tXiEj3*Co4%uZDS(OJ?7KnNaK-gEHpUOh=6>9Lo#~jNus2@)LalP1
z?jZ{O(~tLGXz5C8YHVa%-fdw#y;p%JSS3Qh_|ruhOMn{z>pd;szA4I7=#mYU&vYW>
zw@qdUiTUI2C)otEBGgd2H6QX#v8>Gx*JZ(?oUkh>Ku_FiH__lZ9ufuiGn<i&TLTzq
zY|^%%q(a2eawomI4#$bJ-qAP7$o(LrTlu$>+a>Ng8qDN>lyl<nty{MS{+%XMThtD-
znS%qzYix;GZ+r2*7B%PgueqJ?b#<37`L9h}_2_y3aK~IA`gX2K^rqI|Zmn+iYQ#n4
zm)AkZ#l3(M`E!1x7HKt`o4y_)dlP&KaeziHE-!pDI$~JEo||Rbp|44m@#7JUfA;9l
z!DH(Vna3rUczu*zb#1@;b;2qeu`QCTRXaf=Y|T;1B!5?8z$t89gNu*v<@pFh2u@X4
zDBA}qeIEP${ZI*hUUxF~6Co?SPi16yI9-!f^esAG!{VBTt}b1kF4c~N#P-%kXd3}M
zg-PD`{pAKd(J%{c{A*Vq8mv5;h4AM>RMc32TAcR!a2;{}??MR;L%EgIyo;JVw{(9$
z9M}PBm0)SrS84-wK3CfD{Eyr!u`)TKKG=QOR<fusU31B(QB57K8KGHl|M|>+t47-d
z&Eg<fL73jvnB!$Y;<GaudklTRP(I;s4Kcs*l`6}Hsd*CG56RdMd`vFa7ORjC`o5?w
z93xKhKxrrHk8pN-t-1B`4dLZUDH4Swok4}^9M$-q=zC^1st9O7(z#zE-<L(7&bStx
ztpgR#LvAe(WDSefr7t{~O-(gml=0=epPHJmwRu@1Nf@fJcb`9xWJO8-N)uB)zUTJ8
zhlV?5D)t3tQh&T?+5+>pjZC&H!>QlKwh0^Fv(@oZsPz!eXJe~Sr7IZ~Y3E?uVOf5_
zU9HY5T!{7tYI1%1ujtc1iK-4DTi>J9UAm+{P}O4ot9bxSIOfn4gv39AYyey-?|_GV
z!XpX>k7x!l-Dj9wlFB{Q>0$@jj`{x^xR!7ArYh06>PCKiJ9N!y!=jniVgays2W)vf
zt*or<=^E2wuG6(2F!%jj9I)eGs`peYO^ckC=cSFBdb!@6AuZW0z5sTp@mRD7v0OIo
zJ=j<I>+5N1{kJzgrn1dzw}GZX#C25i#v>Z~UYAFExHTEYU9L2SJ7dV_5mo8yU;Nuy
z+d7z2<0ormPI9qROJ>dSQ~EC5`FPs6<N(XBp1QPxm(^uHg6)sKVfM^ehkaT3An4m{
z0cs>N1YKgQ_S+atl@>bxQ9Xrh*`#MgJjR44TxkcZt4~!hv6l0)i)LFICF!m$mNw+x
zfZ}PJ`vX8_-1WLaFWJtmz0ax%MVObvK$QwS`bkOo0=u40nrINoH7}aa)ow1n-zLBP
zkE2ejrU^k2y0s<vy+A3E^4#6R6p->QQdrg2w8nShU0@K~pnjp@?}z68p9Ou}G)c&k
zbo0BT-0@wk&X#q;YV#K&RlbXkxf+j?8)<`bnqRq$)MNb&$I<a00|Pjr91EqsYvhX>
zAG^z{^k;i@FinDQN)*ZY!;+6(<(OxB-6`TYM4S0d&Zt!Y&q`Rjh?5NQTCGP^l)8l1
zA7|ZZTqd2d>}ob%TC-G~s(%bD=j6(u4v%52{k!yxdkgT4{m%~bxId>5{iAD^BIUJ>
z>k5cvMm98RM{GaXn>;hNFyqjVI${u@DjrXUhAYRK#nnkI?|qo-9n0B0p^|eaNPFLy
z=9zKlpQL@${%m}?q-^8s^TM~c4te`XFVAz$%xnNGps*Lx7AyJlXkPplIStXf4IxtO
zIwI0oTv+gMD>WJnx;d?*tQ=k&AZPDEd-$-;)raR*ZtdC?So&tG$Vk77(*b?kX)?$B
zMfQ%)PObL4D(3tgIfK<?(ay_rpK_l?X4mYAS^$GuURI{&U(SgLB60?MS5X7y1KNzb
zwDBY8U)4CC>E<Z(SL_71mEWYaYnJp}!ge~O6_%=v7TLUA4I6H@gGQ~Qyj)Y$NQIB3
zT&8v1A>oplUDzfIvXIt)#XJlNc^#o9L=v_mD<Hk?oXE9WmoxhKte^kAz#D(IWW^;@
zMu@KUNU_naMa11B;lKJmQA6cAcE`3$saV?dm_P`x!pEMV{4Gu-Pwi$Yg&-mXE<~lq
zr&T$0C_kBx5WK0v0jsy%&o^C>e`F=h4n`WCjJ)L+<7Lu*YbE+h7`d*(Wg)T3*hS@=
z$M+IN7mx-MMGvZUbsxC;!Je14Ui>S=TfdFe*gp2eJ@~(fst<j1A-cV!#^WEmua~!l
ztE5f4bg0}xEL(vq3EHd%`!_UHIrkoMJ1g!YBI=?Eq$KJpukpL3LJEgpMz+jd-|pNU
zW?3)|SzpL{)gP@n$>8^G)1MF~Cz^T^EJqeRonRHeGhnT-IC7u9lARhM(^KYF`-q5`
z*9fm{m+}*r&Qw3D-5&oK^(~{A`3;}Bq&RdC5fQO51yX*hf>$&+jMHT!3CGjTAo9j}
zFYUaWMmHw{{+-nC<kVk!E<{X36s^8TL5}xJ@s6~lWR>5Br|WmviPwI8&RXr>*r-+i
z{G0j#ldLP?3E<V-%2uudj9EYB+Ja;Et3C8Iz<(<Cz8vYbCd8m-Wm1s_2W*v#LA<_C
zW~X`%O&0j_{EFNq+nf0J&e*{Ur+xPG)uA}`N30jl7=5)QCnAzlbxF`+&Wd##!s7<f
z+vsp~F1D-3PQ-s3lZ~L^K4aCaH7x>Zu7J_UEg<UPsMpZtq9_X(znHHJ3Yhta7K?Gx
zn2s)yYWI_!3rYxu%vXCDm6EcE!~k0azg0;E&GlCfb(h&bH(jxLUxjcZ#Y>@wm`>Vh
z?<1$-!nP%vy*saUb4>3?M$!-w-HuOJAhp&XYuORM{(Y&qX1)FM=k2fNSI;<n!7iXU
z^d1g<r6G~As>5R~mthUsnRuA?dv<o;!4sc=s3bXHxex>~Dw;b4J4RorM}|TOhvw!2
zJ|evRGoqqXxR)y{y-=n={lB^PSs|YspafdHdgO*e+0_ra2~K|#NR9Rq5m~eN`xis>
z&nruP;xYeYGxSswxp(%5%aK|uLlveQ9(RLNMJv@1?(Bg9tM`dTxcPw;zTA&RahlsM
z!0cXM?POH#xQiuL(uKe*p)6xhia^$b1=c|#mlb=eWY+U$x^o9l+ivm&&I38_+HT`~
zOD}5QgIvuh*+1CI$&=HB2UIymdwnumhlofxiLEQ0iv9@ggj0p%1dX-a9tGxeRmi7P
zRBVKJ9h}E=hiccc(9M?>73*u0$F6^GOyTtg9pUxhD$3yU!oo4(ao*)AoGHjup?Sm~
zN`|ft&FUGuu58cWmw@W4PxXc3sK=?W2(Ub1rQCf?S57XS$~{=gFr#As(fORmj~{Ov
zTU=ZHGf76WulYvijQPFb#nXIzrn@Km%5pJ!;htK7XGe|O?d$U=0s>96MBF&XSw_WF
ztK<gha`J2G-1#HWM;|^s!mhTx6Zm6fWTcd}4WU=ieyA3ZA2<ND$O=-|p(s2l6&e4J
zIiL}1PeFxLz}}kMV5SN8IJO?<0E4<&RStk?4o49dh1Iz5j$E|ty2NbDHmZcrhR38L
zGJad~#<d}sEz2jcp9T^NLrc%kYbqD#Fz28>{Q0+Y15%v}M<_guLR21LT#)gezp}Z?
z)YCT+p_#~car|+TJ_qbCf?My;?fdbg{W<m#b9D3HIj0n89lOPi*8Sd4&Gr5-k{<TF
zZ5(UX(7*u{!nNz1q601`@z5gZ6AYf&6|F<}a1HLvH@wPrri%M^-#+%#m3Qw@s(YSY
z?C$7L_c4Mc3|LR+NW%rTS3E*}uiix->z@8vTwERZubSaw<S|)XmHC8m;(N>e4U4r!
zTD+rL_sK-8+IsHy?zTMiD=#Z6Yj6Fl*ljJ)SK7z!t@tZddV|K=#ngtTHQMp|byS%J
zOwN$by3P$E0f$L1T`mLEU0WU|vj>rp$7Ous>>v~$8LvNQJrb$dRh2Koi<5=JrTLMC
z?Yb)I=4gaJgqzZyv)=cQmw&IgUfk%fal`B1>cm6y36q~lD324o4iBr5rIWR}f<GG6
zk5Gc{ir$Z14&KYtHa`0qj=MV|IdP*W7w<<?M|SbTmGRa&?2vr;ZI5|?^eq0cswyrF
z7ognS$>+D3U*a~$oddm)!QkC^bv(cXy9`Q#*=x78x!OaR2A-mN0YK6ly!$M+TA2I$
zk*9P0&KI_qznYUhXpe0&EO>*)s;9j5<10*_xi<%BiMoylQnuzHcwD>E>B;4{>+xJV
zi<Lt^0i^aeG>k>bZbwTmQFBB-H2Vsk_7}dUJe@4|*KJFHK4Sa`>OAyDdT#4pUS8%1
z?ZGh6{;(K7>MdN{n~Q241AN)!C(G;RYUn3MbrouC{MV;)!7#+Fz{m{+l(Btmsp4Ka
zVP$Xaxy4Mz$NXufI|Ibc^+PbN?Cffacmpoa*nYce>|GAuP=NtGXRa^G8`Bv_Z|INE
z%3#-CUZd|mdNev`wsjH33mp4-an14MVM(-UufdM2ElS{P8k<ZD(4ik2%Ht?m)@hSe
zelxp2)=WW|5VP5MlMdMwn1qv<{CZFXPs9=}ZxD9d;&DQs&rw$@w+k_8g#Ca$O-(ip
zp$Al+70pt_g)kx>YCYaaiDjb5L}+i-YGs4Uypy!<Ok7`Y$1yrO4yjs<=PV(rcJYa5
z9hr$2C0l$3O0RYTJ2F_Vkt#q(uUh^BYoc5)CxMs$)-Tmg&Lr+K-m*CKKP*7|dc4N!
zc%0URb9vZ>^FE@@QEBP5CrkS^{cu|z^nvw>VJ}e^RaoTiV+pTcuf?)Q!0!V><0ob_
z#=MKQ{#)tkL<1sJBRw>nAgDRs^yi$tW@Qz3C5&Edn=v=Xm9Ovjb)-SqEO#E$fJF;=
zP>JoKm<0HYyym3VIF>f%X71d%gFV^rZXv7f*N@i``kN5u9zA-L%R)&eR98gLvdgSL
zJiIk6AoV1ZT%RDTM*-rNJZ4rtL*NBUiltA`-x=mwh(8m^YvZ>jsEcG(Sxh77imZ1&
ziw#9W{JkE2c&Ifk9_6^{wT=eWOcsI);<(wzmE#ivEt~Ffd?};4rTq(s+a{{Fa>(Dx
z!J)8L28A5i8wjw8ehxZwesv*BrMSp3z4~}5F9F5J!a;bTbTIqk9%S6{6ek-jx^VfO
zgu6feS?^ZdfdOk1UvYhQCY@F@R3FInU0b|=V(t2-tOLq0G!fB{_>&B!b-jRy;D~pp
z=}yOCE`7L-G>uaKtvURT`0FvgGn13I))w{Fy7_BgfrV4GPw0iXFRAJzm1=JvX#I)&
z>Q!>0Z1$SUUB@1e3thO-GOm@zu13cmf)9tTR;OmE^+@sRZwRU|bg(u(M;CiSX4C7n
zo6yzS)<2JMeeA4`d2_R=zD49rC-fPt1hJrpn;TM$6RS@KYWsi58#z`hMs_rom@toB
zd6#bATQCy^1bYGEH*2GqrL4x_lowzU4j!GiNulp;ZD)HWQ>v!?J6CSkRUhAt-^y*u
z(|lviThUiKrv=!=D!WQ|xV8(hFs8<$Vc*@ie0PhABr9~XLQ#-JDx^(!r^bt*Ps$6B
zN@4r+1(I#`{9%O4BG=lE>Lz<UkB~>T02S%P)jM7@ckkW9i<$V8VUDefqo_j4k=0-Y
zpewI%8Yp<IWT@qTp?2%ch0qBj!&2)hSZ+I$mkZA(WOI&augs{J-tZLQYBDAZCXY_V
zpy4+^ynxFjR`$I~Cuh7_7mA~+o11oYDkbSIB4u-&IZjzX4Y`Kfy~NC@(y%6d0OPW?
z`BzX_9yd`=4V&GmBtP7s0}WYsXlRiikm+#N{iowyD)t^<cGQs<SbB|{Bk%67qM0m;
z;05-9vNvyT-Ep7jNFqR$@hkZ<1`P$#-^YM3SHDeb;+ExbtxScE^acz9aPgL^sVO{(
zJ&UXLxnAzad$dA<+LjqbMP@kpHv+Y(#y)2Wm4E1z*)Y8xL!Rq&Jx7zvPW!IJlE^J2
z$*?o=$W<LiD$nolAJ}9f=hR0h2zfMb{Y*{oAvuUknMpj163za3ukIrTA>@p@B=2Kb
z-%#nXo4mpd*T#tEX?FUO8w?$7vt_vZ!KLB&kDz;4I$~|Hurt)g$JgPZruB23t%OWv
zDdii3Yx_g5S|t6YGy}%mT4-T%{;lV=deicV<d<5LDAgS&>60hxRNIT=Ha}l5V>;{2
zJcEYDGk@2#`DKH*ss)+<s@g`u7@W9zJ<fQ<tA_62d}<fhfobK*QqsLsN~Ju(GBS3n
zsYG20&rSPiiCP~)`^zhfn2DlP4NeuM(!fjmAsX>VN*lgZ4*5L8B1r(Rf4-FjNq#l?
z+hAmV;4+HG($wi2{BXILl~^X+$Vp}M9c@&xvKoVVuxaYl-DMT^E@{rEIAqwV{Rl}P
zwf^RL{D=mb>&lslJ{bgeNt$t*u7rA(iRe#ud{-co)n0;Y0%SI{xjGgsWL5JuP3&$e
zs8yB`-;XInjI#bea@4MF=};X6-1&P{*S9{HX^c-mXnJ7{y{t~LI`q2ydsjPse55tH
zMe<_Lx84!=6nUa-$UOc=l!$0235qIOs86s22e(ITJ5D<*j-21`?*`^WN1U8&u+T=#
zvN60xs2W?0a~dxTt7d)%H+bU23G_tC#+6h$AkScspfHOFZre*i=fBu?6^%Qb$<4rC
zz|UM*)^0{O0ww=8+L0X91a(J0Ea0XxF{F~_lqYwB*c}o7kMZ<>$<rCb9VWZ88S(b5
z-%w3jtw~x{|A_ZZLoYWs-MKGu1gpVUD!fsI!nVUZ#;)tXa9*}8lPO@cByH$Dx+2hZ
z?{UEM1nbd@LFqm*GLpfz7z?+7Ck`!wKGBC+rj#%R{P1gyE(WZD=ZBEW4(>bP-+(e%
z<=vv|P#l+9x3Tzq`}k2nSlAMYXXNu~x8{dSoQ!urE_5hqR9)wWsmWt``aoM?)!xIT
z-DC%k?ImLND=9BW$&G*n6(0aF7%!-G;W|}YZ%>omftdq>A-$@Xpoc!ZPvAXm)6T}e
z(j#^E7&=j>?@RngIAW$VZ^|D}h~G{WH0SvYl;tN*6;eKWJCbS(vX-3n<G$f(NN2mL
zc}IW#=f^FL_8{;lz%3^q30bk<{oPk)!t&$I^0CSPTprjx&x9b+)tO=;v65B5L_ohc
zmbyE8iDhcnY#U*nu<yxBXq0A@UFZ54dm3%X1KH`aPML%~Ty^DGnMjq3^IX8u-+1)c
zG3;pvPhaXhB*@lS@U?Z<w$-{(j7pP8ULzx~00YM>W?$odRfY7#m&V4%X2z|HtHThu
zvz8_WZQ_tDb9vRh@bJ<ywS^G5z{rXJLL9pNG0yL}C2e?R1O=T<OlJN~@zBZ=;0+$L
zy-oMri`_4dKof3@Pf^oVU0D6vHRCP`ej#Y5brZT|OEhu@^OXM8bG(w7`|{TWo`03s
ze0BZbvR`T~dx}$C>&<oj^X0E0K{ftdD^7QDBlgG#;OI%+@82vG_4XVRC?6bGy}3o>
zkhq<o0JlL=cE!s-=2C+@L0Jt3N~q4cd{#|%@jI*3)qRmFd=pQsJ5%RhpLBK7j~iaE
zHtBRu7(U=USkx&#lhXBOx%%pH8WqzAqViL+2X?orlLpI$a^6y6wNz9(f1dmM6)YWg
zbYy$8IpqHED5mA+!=!<c8h5T-%lmn7Gw~Na9Y>VQ>C@eNqPT!A$hpm*CvSbnc6iFk
zBS(WO6mnP%jiH585&#~2FJIPz%siv<vNK1CLomnH<Jr7~=^!urOx^;X>?87*$uR(D
z3#r`HDd}nb_pzH9(=W!}&!0aZKdUPuw5VIX!(Kr|^ogVV>BAJ>!@r)YSdNaXXXzG;
z7YshQb7_=Bk$I1BcIB5w%@lDTFuq%fg0-{7)|VIWRR3M3-9_}N)cR?iNahzRvS21k
zLI;P?P-`kHG$uwqzfzk+8{*da*I~^^C`G{zR(tweO2e{t6&f*BawOKtd}JA47>lBg
z9cqAC3`g@(;~te-W`H8fl(ZQ7ZqB4uqo({)y;H@-MSQoHj4;(BwA(`*DE?g!P*Noj
zK8QGelT#ss6{&XnJ1;Q->8y0#K^qzG{ZCBoJ067EjX(Wpj@ZuxdOE${MI<-v=E1+R
zD<XLMWEQ#137%lNpGIK2^C@{s0<{^!1;OB~?OeETk4P90KYsXx2L_~pb{vLV#YU3M
zRyV&8IjoS*Sto<-gOcSHFwmg@StXwPs*Y}PBb_occ%rYHO+J14)V>pVDDsk~Uo?K4
zpPvT_jKrKGrTfWv#ACU^+L+|)CZOW9&trhk`HSre7vs?CA2=p_19&qnzT|?GloP1P
zh!VZ-!zP^*Tq#aGcjmsTSteid*m+sL-6x~%(8=MV%v{tf2wBwLRte>#N?C=I3Qvm;
zQ(awM7dC^dwcUaa>ett~2=sWsPBG3F;D7Nt6m%UZrSZO8WbW8_1@QPUra6Mg5Y7yr
zzZ-M(re<aY@TJH>+;jF7zQ^sQ?#Nxl`y%Q8HK3qE<jPsNju8uz8Y~<y0&R#+kZ^C@
zg?(&gZ8D9Ah-jENMmN>s8JqphwxoSis>vsWk5f@u+S)eL?%Y092yg`qQZMUyYN`9$
z9gh~`oV+0`LSfdm^c)b)Gp|jhawi|Ez-^#<9NK~<G+Am1Jlr6|ou+@h*2C6cn^zbY
z@x9}UkKX@~--JWr$P09Cv5Y@IKGAy``S|P#U;*SdwWSRCZxA*$LRDdaEM4?gZSfdA
zu^F7#tV*9Sf)L$)$&piCY4|tx^ntDf{e!`}>>#|dF-;(m3au3WD|~!>@!!tX_7L|X
zxdd7<IIwUJvTLD9&tc?z`WMI#fet>XmT!UOT*9AfcaA_rYiL=M`v;5foKr&DANC+j
z=oekaY3y@r%OOuU(53IGb$O3TLfLW@H~<1}IW?_5rbzS#LgrRzbIvc!^1~A;t-Egz
zgn~U?nN<}g1nr54ER99oDv*lG4#VMT6yVKeljGJ`HMFj!LfuGK{UG<s;Va(xKmF&X
zC9Y#i*mt?u*x5-yOA4&uz{)m0eE2XzYnCxEUNSK;z?Mjc-lrNfCnUDl_T`)J5)atE
z(_v#}#Y#&iN|`7)H!?fRM_jv8BVT_RvIHArs;5qerEmH^d;G-V)48!F-rxc@p5VE6
z4O!I?Dq>cBS{;X%-<Ar3-Y}lmNV9g}{ref1B4L^_tM<0rj0AXjTR+}D@RYFdVyEm5
zpZVZhNQdnsUcY|*63M2zZ!KY%kBNwg*bgnM?(RW+<sN}AuGH<uWOR3E674euEl)fE
z8G;EAX4BSIWmS^JXdPQysb|mlkY%}?`|y0D-L98>=V=wVXHj{K7(QZ6kL8i$34UUW
z8U9#E3|NTm0Dz6>P&H#EAOhv$Z-_z9#@?r{p#kyTYQOVecxzcE>H>*LFrlm7jCk9j
zo^Y2s;F(_TAn1{PsF>dTI03^~ytHa54eBjXK3i|iC24#^EG)Y9sn2r&^DKtT=ENUp
zs8?7n77sxGWv3s8rlsiM>c$3MRxVarV4pnt9$<dWCJmQi>cF||g{*Z3c6^@Op*eX9
z;y0I$4$MC^U(uRndk0MiE&rv)hOALMfihc5)N8{Kw4deUQ@7tZZL6-Q`)e}o>JnJ?
z9909hDR?c*@xVjJDekj~!~`k!n1c-Ky}@L05SZe5`Y7Xf6Umn<O1Rb4cXdf44W{oy
zols}%Gw)jtiZFGX6w@Sk9i+{c&8H(ZulCMh^Vukkj*iACdTXWQLOVrbA{`b|R_UM-
zHXs>yey=6_K|2gWEJ}tV<vk?UsAH5wDvI*@IzrgW2w5yb6mB^%@28+Jf8|mlX_~D(
zLSR5|tE+CyaV{7c@Ho5v(I}S0gLm__jvr=wXv-pp+K?>j(SUKwgdw_p2Zqi&K|#IU
zLAVn(w*F-eRr??wI#=_Q$21MQt83=d4)$GI(o#CVwRwUUwOc%=dvqA5UBDAUjdJp}
zP)VxZzW}~r>0|WtZT$(Sk3?T=Vl1}EW<HIvG-l^Z??|DMbKb-K2D(AM&M^m<k7P6Z
zDVNJVlJe@f>k9>zm*>agiq^p_966vB12SxCYHBJ$svS00E=fpk@AQV%Y?h|Mlbmw!
z&<Sy7Sp-b6$U-xY{u8Dj66&~Y!*4%+sMkC$Xz-O%{K>IH9TviVn3T8ikiV)UquLAU
zoSylov7N634%7rVtDL%*@Xfd;nb}N8R5W4dHED3`v+>{j&Te~?bP#F|%gfV)w|t}%
z!eY;yIN`>t%mg9H_x?!$<uI_RuPy$u-wlc_>MSyC68KHj`?Sd^fL_gf%Gko)h@x$f
zQNLqEnj?33k{<86cyrS-Gwb2QhtHAL$P0Og%JUF;;o6J4k3B&NjBkv4#4I7^->NQN
zNjY^7WK-=9y@Lbq-quKXOdPLs&sl3~Y91UMlo7nV%465o+*~EM%ZWYVa`ty4uKZR}
z=fTZ?Lt+2~TR#-NjOzT0E1Q$p{&-J}F+!_~5YjtX<x!{{!(u;%hrO3o^L*g$y}&v<
zF&a0Zh1M?SM)2JF?@B28Bp%;jMra)tR#pG81F0CB$4PW7dDc_tbOg6NS9o8(b$cJ5
zveCFSY<`r`YuPk8sal^|Y)-7KtZt*V))f#qUu^a!$usE`=<okbeD;43G4%ElP<?{&
z75sZ|J>1k4*FK-!woXk=#pC&-#;*mTf4zwqIH#IdrhBu124H0GjBVlw*baCglR#yO
zmFoB@JZ-1$noy|LSz}8{RW88C%9k(oalq{@b#y)hpSf3o<Q;8BMM<`uh_~J&oICU!
zex=0GCD<Fgx>5TvhV}8Cj`wi!3=DjDKLb~2l*c6XQ*wIxwVP>S{a<p$_90Ed+=BGr
zK_M|Qt1#&<2_`0UPR?5s(s`WiaCNM1kYpPg9X_n%>3K0$)=E(^IB_PpG$L8#(P0Se
zzJL4n>BkS#owI+v5Iuk0!C_0rEN7HN;=#Lj>9=pEJNC`C2DhGIJFvd?wzQ(+WvS{1
zhCfqldi%3Y=632ntHkYOVicz(+9A7pZZV9RMJe0!`A^4d*SPxm`#(P5%)UDP@aJTw
z-}UQdF0)+1Rqx(i$v*(?Vz$%qJ@a)Xom8#!Y&1!Yx<uKh7ke+tJO<JcV~>pX*O$6&
zFYFU0&#%sJ$=I_u<mmC^<E=3tdg6B+Zg+&rkrK%rj}`p1D0-<zmxLs2&)zjPA@dq*
zUO6RZDZ$A5_ffBNPPH0X-|o0a_`S(-g5ADp`-rm7{dmiOqD&-0_}BRB_<80%gumZs
zq1=tX-Bvmb^aU4Y)~j}|=n?FVA=$SNpI~U%1?%wleJz9HpYf=6Akq0#G<_+4r|&87
z5mprY_xmrm54E@dANJllD(ZfH7q%752Qg4lQHB<jRHO`I29Pc(MG!$k36U025d&c;
zX@NmNLP3xQm5@d$1*Ab5ly2T@c=q1sJ!hTY`n~Uowa!^<??1MWO9#I*^NIVu?kjj@
z_a0PH@!fX2@Fp<{AR&ey!2VHEq^G7T;^+Qm+O@@P+i+FLJ#X)KKeMd&A2g=aq*BzU
z!p#~R(bnYys;?v$U&c@V=;~#SR)A#cPTmBw$$*sFS7KV$S}Rmz^}W=KW#tUYJtj$M
z=>mt|2*gVhx_y(p%{`x#uQ3+KdokptPD*IEY)MN^l`}Di6W0V9p0Wrr4vs-I+PLjW
zm&tem&9-f-)F*4lC%~XABNO-Vp}oO1Ty6oZ3SzRdLpaoyrs24XZ7M@VqnwPX;R+tz
zQ(h6E94@9WCa~Hr0d(!>=WXtDLixY^u)B93#K#lwN5hOB4xNDz6?uveBA)}}M@4ed
zMNc{meBc1CsND6@ZT)d+m%u13Lv6#S7#glw%%Jv3^zg6w!N?LC7KTqz>#bhvY&6v4
zNZ2{R0Ko-JUS)B9kM#JBp)b|g>PaR4*Y+Nl{*uehO{hN){_W0+09y=FlDFZWN^x0w
zv}1=oz+QOGjX`bo#u>sR(nw#Og1D~>%0F?0ouf{LAgTlJ=Ffthx0&ptO!s404lEbY
z`h;NrBWIiMlM*}?Ff8QlfUlMHuVDZ%&-R}(!`Mby)vpA|_$?r0;I%>cG3arm1cNvc
z4i1tFsd6hVt!aCHw7-7?#EFLGXel;q*bwIoPPFQXF>JKRf^f@(E0M7YMi3YBo$R}3
z;_+D=Z9Tec-GK%mtng(ASxyp}+uS;tM^8X_0b_?>zxE>f4lHLcmp3^7?yGLy$MsSp
z`cWUo7y##!Is0Kpc&^|GL+|LQ-n%R3>`g5!!Y@YP2hVnFd2mmvsijYSGw_=G_YEx8
zpN8Ejs9ZuByfLJ#6PG97$`)gW%IV0(Ajr?pr5bmIZmC~3N&zo+x@B^3%S?&#8p93M
z)z$bOvh61vFg{wC8gd=)A-2ZBEd;vP_>4sF<__S%Z3X{$)t)WAPp<(k$ApPzCxgtl
zq?$EOyCR&%VW4^e<SN~_db)tbK*sNv!VRTPdoRz?)#`UgI{@3tFJD+aT`<d=>U#Kg
zLup)G9P>Q3@5jx7>Tb7yiDH$&{wZ0+@Cq=S^0QgDyMOg+0_URHvBSmVFuX^sQ15Rn
z)v4`D4aKbo-z{m(un}7`jX@^j%CeO}eo*fBeYoS$>C%#t*C?z!b-PvhP3zxXq=B3E
z1V+JJo?=sk+ux{rhQfG_U=9k(r-lXsdQe`j^)sV{nKkcE<E_p7?z~{DS-w^IHD<%%
z@84UGJH9-9yY`6daGuN38?uAT@?0RgSqz$$){4PMx*Hba=<|zMZZxM66%{2yOCTeP
zUoT{-_gw(Kl2VLuaG^=VTGA2A8o#Y#uyeNF7CO9at6r<!yM0SbOM#&w@qshN1ue<)
z{7uU%S6)FxA^hAWf`<IBZCSo%pMN|Yq2PQ~9U%??Cm4p8Xh7f0$SvU419_J1VjE{~
zAzT4k3qO8uRD-i+XmS!SczA6;z<)q|`3nYX@JYj{hiky4p8w^=i1~l)*;-$KI!7Y*
zL8(NuWsB->mt_3{+nLd`0guVu&_S;J31WA1JBK>(aXWXrDGa+%Bqkf~VmP`BfG`Zm
z-hzINVE}{3-LJl^RDq1Lw0wkEA$SIzpC!@fI0I>G<$^CHoPOS<y<l9p5L!4`uXTuV
z0#t%7jF3&c0g!s^SZXegd61W<0zt%Eow?Z1{f7>T-0HZZ@ts^<y%FP%`N{YUktchs
zeUw1$3UEWb#%vv%M6+)u!SxYxD*RS(XbnVOa0Mxyc&D7-;^!=8F+eUAl|9WKnmu*7
zw_#0(yW{+1(*qiD3>9wz=Zlt-M|h&H<_~fGKdAjV{#+nN+J$glsB7;jSe{?_8hMQr
z+>~uQlke=|R}Vf~HtF}z(5?HD`@Nh*>_%%LA?#L|fUEoo?K`5bqX~w);*V?z;Wr5=
zio+4cImUGQw2Vt|P!MN|(6_@vqaLX8ou?YS!F0(msZ-DUS`3%Hf@O!7@83^g7y)!9
zACmIc;cP94xMoqel|A6mD=Kmz+F+56pzB9h3E>Auf#<?p(3PUhJIrhN8<EYZ9&2;#
zj+{N)@-14rEDj64{2sk%mqPR!lbWwzCEA|jgjHYWY;05q8zuN;=NFLP>}+gQm0wUl
z88e@CYb556UWK>c9;k}&=Q-b^3l5*LDh0I)bDxOyMR!JjE_6vgDHtti(P0Q)Mww*)
z!lG4}jp0**#xgn*;>lgurBb9YVvQa}=9A}cY1nCTGF;?{NV7hzPIqmO(M$6AR6Z7F
zX8vQx7Lg?kaKRP^aq5Y2e!nP<tojNN&au@21bPJ+24qig^*)B4DL@m6ZssRsg0u$!
zziTXb^2y@7K(ZG`xk!px{9SmOXhR@jI$zxW5$teyEGm|hadh0deS4tky$4pVKZif;
znXwrtH8tX6oZ`JqbzdT+)-LZ>SKkYLXHCR{QB^QuU_Ec$iTLfL1N?k^{^lTe$Ou6T
z&b$XxXq|k8@;cDoT&C0tU?&jIh~=%l=~tze&bwFE1ul8LH{TQ;W<OM>A#VZ&!^7cT
zRRa>eb}H!J&F;?z+w!`b(?cfv=4VprMwxcRYY~a0aW%JfbD+3G0<>f44pbV&v;r17
z?bX~*`NM^6r)y(wj*eO&R2#;cZ2I|fb+5Pg+${8C=Q}9yru&z=a+n=hRj_gHZ^;Ox
z)BXf26LLg*0&J_`mHVSnP&PDaw(F^${e&>$(7Jwi?jG+dy_IvPs-fZT^5R4Kew?v9
zJQ_i~1Uv!V{{8fQ59gO=%(YTAh0HXiJ(n(nJ#i%U1|mc3eQ=iDG&E!$@nv0UPSkS8
zI0;BND@tt)?QL$AGLC8Z_E!-8x}@GcIbaRpaJ=R>RHh_TM}w!nNp(r&m*TGWW#r<d
zL@t=OpHL`RaUt8(Qi#s2QLb}FZMa=fyaSR9ioCFp@Er1}MpvJh;xB#0$g7opwjYMV
zEc&*F{#f2D>rv@Ltp#*W*jL@-*<~%Q0Sf`9^<&m2e}HIg-S@%Hs+?;7Zm(hf<9AMO
z1BIEbaB65};vm`K3Xp%`Fr1c?)M3OMHI=1FoLmlf7k6*zuI%dXKWS9nbARKt(YL_L
zxp{crqQt=1_z(K32HSuL+|k(UI=JRxa62+I#OYhCpVuR|p7Pfm=XDd4Kf_H=f%SPj
zdK5EnD_!?EF*Y$N@qJ=eVu9I1Y%7Oj0&DgK8i0eAZ#$Gc-=2UfEr3gqych8XED8`Q
z|47!|$^fmTha8;wLIB&LV20PU(g+TZ*^h38)IIB9TNTJ-8JaaoXml4NI>YB{YBG^4
zzOuH~X?j?4kli$UI$5`6<7N*Gd~}vQ)C`U(&O+4)qHEJ@c@>2k4m3UJBJWdPt=l*r
zCg!a7J?Y}xW0JH9ONT@qQjt@Oq9?!w7X;E!_84<AFSO>`J5Kxx+kT*a9!zj%dv4tW
z)*mTOODIDgI?Ws$-{<#FEMR%~Jy^ju<aNQ5dsiNklbI{nQ}oxPBJS&*qL{b*B3I!l
z{w$1XH%!@2uyni-pU%nNJ5(DJX2X{7*Gh~`S1&|FT|gX=<f;?%#KUja(AQTl)WTm?
zc`sQ5HjwvuV?@Bg(QbINlKsHYW5)?|v&7!#Od%{|n+d<zSY4O)X{E;Tm&>xw={UEP
z{wm#y;<6=NG)KgF@V#|k1Zm#4T<swybL=VpANQUJM#e}k?om?ZSu>a^yR%#hrGy-n
zWbRs7oKP5F;8ssWK234`&AJL6InO1-K^8utj4iZJ&cu*j1~0n?Ro72O&>wc)8-__4
zC`biBf&m^QuJSi%x%JZ^iRod=h`}o)(*pp{=6Za^$V}apA)zMs(vGJK*lSd@XfIEq
zJv4kQ#};9*d-pYH2%1K|_(Wl*8m|)Dh)s_@6SU|-Fp5F3S?=OmrixZv`9`_#7bd&W
zP~ITbLgo<SCGV@mjpVB~Gs;$XsyT1VjL0t+G)Bnk(}~9Q#3vGAXHs7dHw<&|hEANS
z{P9DxKor$12tUllZ0y_0>);*~A71?E<04(pXq)rV5jfH;jbs$lJ?LpEgd1D9=!8#p
zz$8zW<oQdH=c`F_4Mi@K{X`)CY^re*p-JANSzt4jbs0`koMOXO*`Io|fy@ze_^oPk
zXbUcl?gB;O7l-Y!jQT<>HzgFy#cu#;qEc>SDz99ABb7v|JY#UZU|Cq<Sk!zub6+pn
z@*?Be59&f%BtP<3>H^SlN=*<}2!E+^&9JJ0*4Ha{t)X99#q0PJSFc{p-ZxkByd|}B
zoOY<@Si@%!3gh1P;KSzPc}!lWEML8TTxwgy$*Z++xx`h8>`p-wAAU`2qB0L&5-|%f
ze7Z#|$E9m<C+pdVl9yfJYCdj`dE0n9R~E}K@W^FygoB(^DNcbMT;#(b_kY8M`lIIK
z5poxE1#tlj%vRPOm<^RvSQX5E4q2C<V5u=Tn&U&K=>J3Emv-#h<%8t-o*IKt@jxKw
z&N3(AAg&Z99F9Z#wC&&`j`En&<HZT5eS?C6NK*qpQdEGnkow6FUP%cMejRH$Lw=8W
zpdv92DUcWpyqj0;^0=G@#5>C+NA)6efXr3J?GMmSDDHelf9aCf;M7Ts0C>*zcNHh>
z;mnp5mA_AFO#D#$f=e|VB4Eidy+O`YMS+rj%ZDM_o~Qv7!WVDi0_crA%X_Kzm1-Na
z1L_yf-m_XZbS<1WUjpY92xm{3t3wpdfrbaK&q}Fo*G(-rTP+mItj8T+G$^P=>rA#X
zQmuXJs4&lyYAAUmqVF~fJY|292?@^5OC-NrKJBveB41dib}}%EiTvU^r`?hWJ|Wen
zK!o{`fJv>K!AoHdHJL6`#9}~Lgs6ul{DOWWp8tadql&j#-Rmi!wIwfB{-AdQj{pIS
z#855td#*scc?u4lHYgHWyVerz6`U)%cgv=oby+N$91xGMlkI^FObNquX!CEOY(RO5
zFG{UVg7*#D0Zd52Gi32JK_}q-O-ozb{;uCpONMa_=`h{NE`@hiz4OISHNg6<4*4E$
z(RzSXo|o={?tQ8wIOButT9T-ts;B5->F>!0{iNaxh|?+tJmi5+CBY97FAG^t7`#k)
zF+X*a`1nZyi&p9ngn}T!y?!Tw$+C&gdZYw+E22f9o)&_|(V(Mg1kqc7UtmciQZBqi
z-`xG;4kl7pFR!3r?RMEqzNXI;m202Y&FqlYBFr8e@)g~JrClB(R8!__>^gfjIQJKh
zH<rF#B>R&eE}d2~h!kPoPV!ec;IAqGPCjNt`%hj`1pg7?qj*=m8sA?YJnw`86el(`
zU9oVxMDb%YSkGR~rTis9HGUixoKz^i_oB7+dra&tno{8<8wEC6(zP$H+^)<89q?i)
z*W0X66HLtvotsNS;N6KsI}c7z;ZsEu?6|VLRP-7sh{Pt_zUrloTLXsL+t{VO%>Jl6
zFl3s0(w?C49kf=}w|aAoPcD@WeEN1O!zmB4Z_ngj_*$o0+-{ChWD>~EwQsi~+@di{
zwH?1Z!Sc#xfG%aJC1Ibt$&Ytl^KrT@DxyyOJG205+u(Z@Ur6*woQS;eW!-vr3Kjb-
zm>+x!(|VG6y@C-9nG~Fn@nZDwVUYY$1}nd)bxNS<bMw57&F=j2BG0O)l)H(?vzYjo
z=E|>K<MMh$^YNSHaU_~e^-jfKPXDa$x|Bo_H`$|0*$+KbstXsx-M;1yG-6=S1$D5|
zSb@QOclI}m5Ifuomk}M8u6zHdg19_*gVpYvXPCpQUY;6(h1KorS$9UBhy)8+CVv1U
zd<kARI9vSK3FYOqFdQK@R|MLL+YUaM<k7_)oqB%bPFsg~er(@mIGk^!rI#@~fE8<~
zNXGG%opZHNF#aMj0IaoN%S#@ZRV8~>`E!0L^w2|1i<u=HBL>amjLJ92J{Hc-nmp)R
z=Z<v9EUOq;s*QF}=)BQG8G-4o{jFP%T^wa(sJv9>ks|Rp0WVM*a32`gy=IJ&%|ZLJ
z{MI!CYPW^CJik)A&d<F*$G=qETC~qFZ{f54<wPU{2&EH?Im#|7!{Hl?j)fABA5CQE
z8jwe?`nEFlYN5K8HjxbP8XK5}@fqJCFpyocfWG8gwlmE+mu18AQ9&=1vX51u1eE}$
z36e0U8!fPrWVH9BeBAF^<^N;-jR=uH0j7$)Z<~Kt@J#gRGS|skO;5XUZ!{(>5nBp1
zt$Sn|ed@+8w0(kL>uI~i0nQYyu69ZJ15i?ibWGArzb!hn_vS+5>aOoZK+WV>yYbZE
zbLi=O-Y$=)oquQrFBr8ijR_jo7;Vx0g^9$s59SllF@UO}eeB{$a|7WoLSyW*PWFZE
zga^#A9*_i=m&-+nNgsoek|3%e^_s-GbXh|ACnkKqy1ptge#at<3ih5jFnAf9=d9~h
zufdEbrt$Id0gki(V5ZewqnV(d4!1g&l_h2^^D;qH*WPcxQZM{O9A5$3TAG?jAL`BT
zFS85@`@GSO5Id5jGq>>a)G6bDJsdg`94?zSm1P4L;nDEt*n_%0!@5sTfaCjHea?a6
zvN4$5Y{rN>FiNR4TVQx(<qV;=yj<BKT*%VI=h(*Hm_~g!4mA-<LTBL@YH!n%_%3ne
z$)2Htr8~LIb0YSk*)Wfyh;O3P^yjyp8#l7I3t(4~T3ZVbc74{^nQY^@#hpy9ffvr7
zUtC(RoRIMNF<YyBjl^~E6mMR;cA=?)b0v&*LRP{cH#gVZJgGf4L3Q!y`n#J47F7-%
zII#E7q0o-!Yh&10&z<+otGeeG&g?mm%tPMLsxwb+ayNTjpK6$Tnn!i`mj~&YQrnBf
zN0U5md;|IqxMc0Z6d2<xh=0lD7ZybbeUkSw-+79k|B3Z|ectbUo`JIJ7X}0V@U)YE
zboDg&hBCOO$LQ|$>##kyyCtfqG~s}wv#m8@DtBeGG^;u10~BynOz7S-V$?$i9V4e~
znWMLleR8;5Yds))edl<C_@^5jBV!Sp8X9CSxhV-UEvw6X<rPSmH=DoM+<xjPVabXx
zt<3x(v*>)LQsTvIQd3oL-CRsZ)*=ml>Y5u=xeNaHpW@b3A<ddKuaq{N$1g|u98oNn
z?H-GZV_TBa*DnC7#uopnrG*vpVd8ciW2B_?^SrB=_r1#DuaVv8%tY?~j&tdrpVD5Q
z9~z?=JI((717($eMv%bGPRwNd>)+W9je@MpKD+bp7s>(uyEE3dUU`q)HysS;&RX?6
zxGz_wiQ{{XcRbjJq6&v&vGLLD*KA<*&IWiKs8`^klBgM3@_eYJ$p|~``zLp4!}^(a
z1x(K+J?V<E81R!|i&cemLP)<42qs=LTT}?%LQAWMyBKrqiJseWDzQ@Eq8`>y8`n7D
z0a!mNtG~kjL!++Ig8b$T^98ib2SK=~weBvlg&d_Tu@*iqF>ji3?7ri4Vwd4l-Qs3b
zgk;*aX>N9B*DMCYfgOe2pUL<al*HL<gzcos@yW!W={IvaI=pcUp*^#APzNjB4=gS)
zFKPGMU{0);@6<ZcmygoZqVDy;+(aN~_z6Q-7pBD#EOcB&SXdbTT!T&T`$)rCPl00j
zmZEr|GO%SnBUUdrEkPIbJCl|VSr-9=SS~IvG@ediUaCMqZwB-B*8&{WuT+9%-<~~2
z78Y%2pQ}Rbva|PAkc*{+NL@{Bd7FjrnDwHc4<{vuoa~GRl$Mo~(_7X})!mkroofaa
z!fC9{9VB6#!euJ)+qo~NrJB^un;O*=$H-t$8-8p$14sKdy0g#`;37YRz}SH%I8t5t
zv<Q$H^f`TUXSB2)puM?YA)k~z{Iqc2iP;Xy#S1kzUsuu?z;XdK9U#RuAQJSHQ{d4E
z9~0O;7tQ6$z31oz*)B7;CVtntkFGU^(TUN~OOLj<OdfQ0(tGge5&A_<XAZ(A^ptRe
zX0Fav{<@WhrYUQpMn2?DDaff$aTDd|^E9L=pRbqK0x=;-a}&iE^*ZT*YRl6-oWnyy
ztb1fkYWz84gEu`)B&VmRTX+J!gNao<%2XhOY%-1*hUA@mOjsD8KdSQd@ni3qxs|rx
zYwoS6!h8r5I;M>h>)l=NOWe5ea`BwtskxQon*sJvPE|h}d`_Tr#fkw*zg*yQLPce_
zZQ?S+y^<0s7}uND)cPmuvIH>R$K6$%9HJyd%D7153nm@xLV_dOWjC6<kk~>wJ~-1|
zpY6NTJKSf}+79>9u(QTVmm5HGN?JHO-2YPh$=w%+msDQ)R!;Z(Xtd>e-M;R(7ajyO
zZqVuacx*$`YF%};I^$69l&VlnCAXxwZ2&kfL(SkwnSuLGcq$(*;)N+I22Q4q5)vI)
z02C$X%W!m15F22bz<hz_&XHrad);=)@YLV;^zmVGUGUB-<KAf>p~AG`-cHH;I);Yz
z(8Sfpf-;Xn7rsPDn6;kUoo8GlM!b=nTx<y1$QdW+C6q=m&c(9k)UqgiWPa}4Cww{D
z8KZ!k0w~hyzP_wAc(HbVAvAgDfH{E!lBFO4L?ElM(`=@pIPn>;Z1Iy`zn69N6IeP;
z@2)0r^*3-@xrt&T@i#AEMc}5O@Y%kKAikVte~QZ7&M25cV=mZ~W)gd!zeLjLp3S+X
z>t^(v$ByYNAA)X)UE=leG4na~s|E(gENyw2Fi#kl&Xf<i4pWi3^fXADaY3UU^|{#B
zL7ng<4^F{r{K>Df?#ZPYUn>1(Kue3(j#FcqTcMZ79vBZcRMG+;B&(ujPh4DhfI9)>
zQl`k9Gx1A?k!z+=MKU%ab`v(5fT^m6r>I1lLc|M7!l`R4vO6Er?t`x6X6VXaAhP1G
zpS;=l8DgP|XSB7?&LP5J-3{`K7jJ!i^TrPwzI{2&gysHcX6N0S<odRrnwxj;-W_I&
z-jvOk<W|`OHstvAz$M0U+l#H66LXKOvLSC;TU!fU<zNrYK4Q3ry*T#t(qm_a3xsdQ
zCV{y})h@QCU;S+GK=#VhcK7;8Gqc3*mBTS~aN&v^Iw$RN^U))z+tsWWt*G~w2Q8Dg
zSJ7c!Q$tV?U5(l4j!k%;*eO-+x;VB{uy4)LhO#4lvmkZnjot{2y?xnca_o8}&!<T?
z<{GxyuNcrdM7oFvgc&QJ@zJ%xQXo|xA@MTt(h%LplVQDD->|6+N0-yBGFp(Q^J%>!
zd%%1yySHqo%W%Bu4=(OwJ0HqDmOEE_Wq9FCbAA1@_nSek6esW5!q;zi^XPH1Wtp<b
zDM3L&K0X+<VS1*FNpy$7P4`n{hV~i>#*yBe@b_6y8`8_@+XNo;KNh*o<G};!Os#J>
z-BzE@Qf-aHP@|F8R#jDHWwNbVGq4?7z|JN}k#Wa%|FOEOYuB#01~GK+m!kFNmb`e8
zBSq=tF{#X`i(k}ps|?!GDd(UwWx$m6@BnY5!v+(4GnGO^zrP~7w{XAIAD*AvD7%$T
z9qWzAeHz2ec1H2UHY+9uyo3oaxir8n{N`+eV%~flb75TEk0VM-wBFVGmtQ#i+3(Ly
zOQt@#B|gIW7#BBOA&o|#e>BUg+Heu3)pG~e{QfjB9xnW<<otS3@S<c~sh@T10y(KD
zK;K45acwPONi(h;L*CVYYHh!3#IGCyUfQ+<%%og#(jD(SD2O{l`LBH(7?1t8)9rh5
zrC<8+b|0)`_FSEUQ-0jv$ccQ$eGCjiMf@RxBeN4V?&Yri)nN<d^$nf4{dMykREVPR
zFQBENQL2T5zX}-Ges*+pbR0M1awBFrF<yQO?p1uD%InHp*Of?e7FEUo@h8U14&yy0
zou4;a{>)6Guzv9htBnbSdP+GvErIL+qq3=a+k0faJp0}6OzJKX(upNv4wHUld!z7#
zXJE)a^zaA?3Sy_;fS0pxby~r4pO(JV^;hLa2wqLQ-y7F_PildX^gXHy(0YWy*UTOu
zBvgjw07{$Z4RirV|FDS5q8~K#Ffm7&07BP2T(dCdNOqj@;%%%M>s_3y@Yuef{764<
zJkX(gq-6%T8w~LvJP)Pd6idK6^RLED^E2{71!9rVa-2I12nHoYg=N7Blg7kIxq-12
zhwhRQI<wHwVW8dct2-QI*O>SaO1RmDF~pVeB&a257Pur)gswKHHQ_i5KmCVw;Jtd1
zDa~~J@tX$MuJsORNj~Z&KnP{wu_LKos%b+|0`#o9*=YiTUNpzi<RJ>G0I>yO!U8s;
zMeS`J9UTL8ec-<b?0aKeQ;l*T!i_BZ39pzKIC5_99e6;)XIP>X&4Te}6K?qGFjq`h
zSh%=y&6<?q0}#0Hj3nnP1j9$=9_76?)Ce<fkBWP_r?o!}llLW=HqZjNRcAfxG+X3z
zoE4$0oT_Xs0Nu3$$hRrY+2sqikS2~JLh@ZQ6<RU<n<oT?q$xhajP6P?c+BWB0HA(p
zkBq>;$!DLxf4775@3@o`#A$`Baxd@pmhWkegBMBs`?wc?EvaAg#|58I#Z=1Ei|0J`
z!1yzzR-$kj7Q0?~l6X|wE3{sotKE{YT|Ke?Fza@bGPwxT{O@AU*-J|^r{aZ4V7D0F
z`Yqn>fk1b{HMSK07jXSJbGC2cR|qCJSqOmQ<>!}+s(zzZka6?-c@8&}hp@2m)?wy6
z>NXPnqPao`Cz+Cx5AWFLhn$3F;=9S;Y>*X`XuJo1;65Ra`{_*fMQqN?4QENAiE>?O
zQ+8nB@3;0e^qh*{z4y2dqZiUkX=v0ABJxf*!=ei2YO>=Z4*aiIuzi5Yr(7*;)^~0g
zLsgDyocTlEw{NF>&XIq3GdV-P<=FA@uOPFYQYJcqnUS-8gr`*<pPWI@L@)J@qQdS=
zqFn-#p1&~4>3M5>f%J`*DkDp^pO6}V8eq||m-r%k-^ibC)>^B9S^=VaEka^rQAdm0
z^k<SIDOPs{czGe=OB;=UAiUc*Q?e9q=w)y)=<6euLGN!%m4!cIJWH1}!E(AA!$o*#
zG-AFMENG68SOM{!G#;RZ)XH}ZhpyBqEX2KlX*nnL8*}vT@@L-6eo9MAi^Pk{=S{Q4
zl`9BE=Wbw%e+Gs5MRUIZ`-uPqUL|6vb9>&0_nP~r^h1mz*1hFQv0kwoJ{ASA4G?&F
zl?Sa-i^}~)kugE_AE`@_MS5SLsUF~lm^MOC6<BiPkrsLwG9z{xZFYJ}3T8Tqe$_S}
zS>-Bc&uYhW@8wYKfM(Ov{5~l)K#ObcbHv36qOTD#spb<?Mov!1fpY|<K#tyH?5cEO
zTuQv*MI9GE2uVdt*}}$~Lz^Rkqf?8XqlfF0LSy;xk=LoqVCx<_*`Y$SgEwf=Pwr*Z
zp07#oYzS{-o0FQA<H;WLQDw(^%wH94SeQsvpPtS#JU70zA@2z96IC(8G|iMKjC33U
z@uH-F!<WU+%+4<5MXH}38*Jcs;0lRe8>Bnbf(Pe%2c-PD1~@jB(C!f#2kcZZvB6m6
zc302P_hm>lE5gnOikwjTY>OcjiYYebo(RU1<D0B(<*VFdanimrQr03zwNH<@mj1>(
z3?)Bvq|77GGICAocEsxt|0r@?qTA{B(*69-(wc1Bn?+;N25NY$`p!dVQdtopE~60P
z@M8a|OU@huWq9g6?8>l_YlKUd@8wXxZ)nTHJIYj0WGa{Y>QKbMK#m=aViy!tAH0{I
zu7+fJgAng1F<+LgwcF$D<yIuU`;Cl@{C`XfpE)BVQn&Fv4Cw(kIaa<bQ<i~0%7>!!
zOB;z<wiN+kXev&5#T5MPNtB?Q)aOs9b@<b@$3BiHKhYE*qTe=x|N2PgUJ$%VSKmRm
z2ezp1U0uY%ElKo`jX^IQhH*?w%h^MxZz<A6yIkf(mZ4t=L{mbBr5&e5Sp~Z>Lnk=B
zK^b#GX&UEcJ70eO-9J&np=UGlEJ#?t9gN^`5NX|&5BYY&4jrLDGWnm%Rft^hA`IY(
za9x_3DfcgsZ6bNbfA+s^&6(ve^@!<0zIQp<MO^EBb6L^g@1gH2+n|FP^g7qTcoy@P
zBwycdZ0PPp&k$`Idzmnja;VcEeEoWh=?(f%=q6fc<wGZyCJC7|Fau#0nmVbplyvu|
zhVm$i9Fm!%`~CY<5v0R#sFojUl#lr;?7Ex^_0ntcJAkt&E;w=}%I?DY1ftx4s68@1
z2E|WR6D}*6J|mU*m3urR86t<PbfE5(^z-mD)+O-%4*aZ!)5rTjBKXr6rGqrjM=$><
zEqx5%8#vKu4nA0E>HZzS0FsmsqM2>)!uJ440D)hSGHA<3G64FWG7kcHC@PLMx!~wK
z;W8+gjncp*V*Ey9q8n6CU>xAKt_pguSuX$KgVvM1Cn#rQFL9XA?V&u#G;3-;Jrjrd
z)<?AY$B!K|M9PBLYeDc*9VSa<dBZn|45*vi*rdG>o#p=ZPOeN6=ThLZk(PDe3I8Ue
z#0_U`J=N6%P^~@TzjSGu&I+6Ub&+aexPF$EZa_%KYr+Q_Vesb$J-s0M`*8k1??W>4
z>q`MIL6<JQp6@ikQ#fu~DvY!C_Vu5j<^=KWV;;-Or1$?$GW`Iya_Z?R$$-FOSX7me
zvRyp(d}ZZ9wAd9o(M)=tV+CTiS+K`I-o`r|q04Ggt*sT{5)4A!OD;mb1LM-zwMg)K
zUlrvlOZ&ZiV)_FY*;$+ZS7&P!SzxO1%EMy;MhxgOf<qa=UP;O^K)ZHH`7gB3`hgD-
zb~Dg8a@-ct1yoy;HEj)eI>OpF8nLSW>?-4cWWvMMNP%~j24dS$%TrD_rgRr@>wZf!
zS;Ai&22`i@{!w-b2;HL2gSZ2I0du@j{gdgs;=_NvCOiphO7RsD4Gs-_v1+mWr%nwt
zBqaC^*KbWjUhFwqva+4ek!WcJvVrG=y;GklpwRpF*e^`Cg5nTa&6&`gGb0V+JCZAN
zM9k}62Q8;xm?CQNc*^fW+oPNBl=Pql7!FG-tWRSwCE>OBS&u@jZ0Pu38pH?ht=r(9
z0Ay44!?)rXO`JB{wr!*P*>-x*XEH(8P!@?7tSKtwtjo@D-QnD7-kuL_vOmW6Ohg5%
z;38SVZJOkJ%NyuU6S|#OmM9qRv;J`B8Y<o@u9XaH1e@9<?ahP>r(~jBf??~yg9OZ$
zWZi?XHHTXer(P~K^|!=}(Ryky9slLLG^GJHGJ5?3q7KjGU}|5<{UFEgTJq86_kCYL
zZ5|w^TL%XMxEzK2>2^)asBvCdc6VD}z@_*~f{qW;2|LuTFcU#mus5CK$g7lVu58+k
zNuU6chSj8CI1Mpq%$h$)8!lfy(JNXy$~MP&+>ruIv+X_Snz53Kik8O4W-x8@FBQ-6
zhy=|ZU4KNKWr1GSnP_@r@EfI!IcCT4;}_=EiCinO1cOlVpwUz2@M70<%=E;?x`Iv8
znwpsu7Iv=z1(xSz`L3FS#;JBcHcSO`X77>7R%oJKQj>Rx92d}Q+eFH>^?ILoTc%g>
z^Sfp9!#xd(?XvJ(R5!4;vRLQygSNj^v&@k=vkMIvXY?W~RoCV_zvnz0JwYPFSxB`>
z9M1fD#CBAt@~;put#94Aqi#@>wK(141DU$NPOP{VkZME${e(HQ)peLkz5(m-#O1C5
zt*XYx=^{^GD2;$4)Kv}Ph{pYA3)XBD#JOl@)_8AXcBHUv=SYdwDYlg3T34)~Pq)}*
zTrhirraI&mMTp6OAsk%Uzp;QznWXF*!`J6}Bc9r`>?&!?u7)B&BiH{WbIN)9f<0e}
z!rR}7E*hJhw2diyK7h$bphR3mxoRz2fj<bZ2?_*Z5)-KF3E8`iZAC;AU@)R%+HV>5
zt+sX?oYB_I+jYxJn|tEx*CR0Tgruad2FUrBbMM9r5BK*g=FWa!ec*7Jag+KuuXT%k
z$|K(2c3ygurhL@p=AF$p=sZg|Q2(!gmVW)%QQafF^N}+C0sO1f;<CW<j4-@k%v$JI
z(bzR#+14>pe~*mJ$;CNY5-s7hhN9x{uaVLIJz3U$`7dgo&KAyEu69mqihkBv*1ZlR
z(dM=2%wr;iIanU`PYuJLmQ#Po0mw)5T60#$#~tAH6261+vQd>O>vL4dr>%Mnp(?~&
z7T7<|v0FetaG(NcJ>#<YOs+0T+Y#ymn%&n+i$Gi({uXTw%#Jz>GOo#IRmg=)5KQ!}
z4;~!qsf;P$g>VdR@;kR~ooG%^u)kaM(+8?oE3i7i&=U|8MBMWwVES;raG4(7XpcM;
zDpn-~aZ?~BXpo^WY5N_Qo)$C@?ycyf2NlnG{*XdVIZ&9PruWvc-=WVH`WxW9-qANh
zEnC4a#$fRVRt?l!oX_#kfEcD2dnpO?IqF=B{D*=_hH-3Dd}aqkGA*ZvwKB|_2v_AE
z{i9HRKpX&5qkX9U&myXR1h}FtB3A3nbMA&LcWyl0ZM`@wubTo+<czhuGCzkuKDt!0
zR<?}^YuRs9&uC$|l%np!q*Hu8E^ql=W&VwC9L9Z4sq6mLL2wBRUq9&VtiOYyRzpzn
zoGBQ(_)da8H6#e>>O9HJ@;@mgWQjBtkXd7tXf0qtS|0M9-MD%f3N<Q)M))>r8|aHE
zKl{-2aXe8L<X`ZJuV13<hnXGCzQ8E(b>McIduQYk{Y;y1;BxszX=x!7Wd*wE`ad||
zy>GESPqm4kGAc7To?b+|r<@q=M{9H)ED-RmmO4=+RnXmRcyryzNGmJV<N5O{_)<26
zgZC8zN^OwlInxeXDl)*k-qP|2dwYB#T@7<Z{BxY?Y6o#gvG4f+f*OPR7ibI;e*b=a
zS65WrVX_G0;)Yn|w~kZgD@oP^zKJhkG;Vv^xcU&jqwQO^(2FmglsAVC&R_23k72qk
z5n@wtvkkTALOFTn%$d?V#938uht&av#C7izAz=qvRF$KBRRaVPS}|I02tYrisij3+
z8cEW{TIM{JD*04u{<)rB8!5G{R=;3}_vNT<n5PFcyh}?vDImZo>JUeNvRybQ@!sF%
z*3>~1PJ1YVRJk?Yn>(0npkfhC@9{d}TaR!F=3EcH`k7lDk5xCul+U1x>oqZWFM9=8
ztIE#p{>dO!Cze!T=!n4x_ZjPA1b1BZd`RxX?o-RWwU&L9n32j$GAp~iG@pb{$Onq7
zihK8t+U{+A7ai>^A@LCqs{fBesFcQqEZ5Of*8XE*d$Yc{hB+{(YWYDyL_<SWNbxBt
zXobYYc;J(A{l<-so}RBs+Fy#U2cG=ZsdVROW;~S`XM3XY-PJIC*D#*mBE+d+4-u@n
zb#wgIp5Utd@+=4uX9(z+gVR<_ib|}YY(V1Svv)|CW#>C#OBU<we~n=XN;#OUjrK*%
zd_6MSkO0YDLB(+DI;im8rKG$*|8nm(=C7RhSmtJDh0io`j-9*XP`3Qe+k2Pm%DtIk
z+K)MZ8_Wf~WdzfF)22<N@;~P`iE)V)$6wO(2KxtUpQZ0AdQmV;=?QgaT`RX@$D~W_
zaU6QfQmrEl%mpE@x4G9Ge?HDvUH;(V!;s+Mq9Xyj*i=Y;w3GjUAn{#!+slY}8(a>R
ziq<R(61{Y{PFIpe(t3b-|GC{}^@NY73sI%f*3$L;HzJMyYS{I!<MltCmBpwXO-rwO
zBSvLy<-$0|0t1{mtc=@KM4fE}sswfAF7Otx9%US;;#?8OU(tBVH4@jUMDs6R=Hu{p
zXa>u{f95MJS|PZc8C!{Qxn^i+nCGya;yl@ZibRqTHg8H*tF2Q__;tp0*@?O&*YKXb
zMo34M#)LFATg{|l^R`?`=U@Q%Afx)z!&0IJ1o5e9m+O`h+U89;GYSJu)zz1%bs_3*
z)#P2Uyo|eE6>K-QoHCzzSav2&EkTgijeH(WHm`tyHjL_%jWB({w~HZ2Lpp>R4qsm}
z#mEM-Yd0dC<Sq7xO*DkC8Zo2>uxF8YbOB{|vhE|K53o#q1m1PlcF+mri`l1Qw>l(X
z&B@3(;c!<K#?3+018z-_49Dir`Yv;}z~Ppcd3HOMvIR*HnZREM2boJh|Ge`&?p=)M
z_-{7yi-?>zr`fr44EbfC+vM0T#9i>1Mu`PW0t9JOo{>A>799RHJS+kTX*a9a*v~B4
z?<2^+#2~vCUTIK2qL$1ss%T_likz?T4@O>vIRHN~Bz7JU5Gh!+`Uuf6RV}inluLQV
zTM4(C-G2WEkOcslAh!96fLhT2%MhaM)4f%&txUdjYZ!(cn|GprNCN|9JPnj{s`3CA
z2}*|uzCIx#p$u3uR73&s!^Fehc5j&r?*haDQ1BIqBq>H3z@P$zg~nuE?N%!wn%wcJ
z8gIivk-1SzNukK^+qduU?-~8ru160aCiKxtT`Zy>rP|{W1Z@2*G#LrL@x3`cH|yhk
z!opg?<Tkns=T|&rwLfQ|1rWu)?c27YV2Kq=(l5|6>(<gL$AyTaJbsfBWQ99lxUTEO
z-!w9UsAi#f-%<}8W90}eYnO-CQGhj;0VTxIgzGg0?l0h=1;2a=;2S$ki*orWZe>KW
z9I5ySRHG-hVC7~jQ&@KAMBg<jVm>t!lS~JBC1g52S->R#&NP5+H~0b%1W_)p;BsuU
z2^do1SVYGRf`WqwU-JtHEVOgEjq@dhgK?Ub<=;4_-qntsQ}S%C?fdtcgtw0ZxJRZN
zwbiMQAhC&T>hTO@{rdKmm?U#`IBeMub}8!!k%VAvRmtY+Do&u%IMd)O%E0FW?WM`j
z%#`IgFtbR%@r5|SCuV#S=H@BSjhLnOvMcxWl&K6FDxU<eHdJ`{*Dn^yVp#u?<`m5B
zrz=@Oww-S!MIf;aq|BP0KQQODv)jpj$%`>0^`P$R17-WG&oEIfQU?d@Z$D}edQgUr
z7mFhbF5)o$o{z@PzKkI#_+ucFcR-eWKxCG4-@ZUN$d*zUnQZs$A93{9*Gs)4A^BD^
zhR26FQa)zdUm(0EkdjYr5-z9x7^pLz%xQgh^%|BBD(ETD^x>xG;o*UG$D=hwtuogz
zoa4|}Evc`c#3Jx~?yoez`POUP6k*aYmh+)$zTN!Zuq^d<_gI8;V+JOp$}=z?_zdrM
zFwza{;RNz$+=2II<DsehQM^b-S<$&+gAxk9w`0BvV$e=JpF9Z>a{9ga<5!hAp1`5t
z7aWX8mT)~=?vGAheFDS15E5P`4QgdsHNX#+Zb+rJ1L9q8omk5Ad-v90q>eO#(<7;3
zh|r~JD;0xMyNU0}=FN^oGR-u@Uw?ta%m?uhG_V_kp8j*f6%`%bdxD;hu50Yb?{M9<
zcZG1DfB4V{UeUOQa7sZBvD<x{lcv)XH@n}<M-GMIkR$z&&B>inM|eEVhmaD|Ex+9R
zh&v*6LDm-*8v6Hsx2YXGbbj?a6qY{v-<feh!S_FSIs8)q_`mk$aVy-rAj~Lh6ddX-
z^ne5!+d=qB;-UslhCBUVJ7IG^@*@SxY}2wJI3)!l<>OBaWPkpkk`v4^C9e+Rn*kq?
z>Oc51(`P(lVqyaS>4HpzT8o3!3qpd}D#3R3t;5ty3Tu->f$p38kgwN9a0Lb7!V1GW
z;Bi^-X1V~8Pdw#0!kZEybH{J6;mcj&0rwm>ASjA`Ix#0jK6VP4H8=rK87*s$R#C1W
z_2Xv~`1oU1NNL|3^D<F3bT+V(_9{qf4G-++#{B_sz<+2K+W1lxZEbBr)o_cQ1Q}zc
z3BQ%E*i!)G>m@M#$U}G$?k_d!1K&&Y3kK)#s-o4af|ZKDjz7ZXd(l(WQnB_G|C^n*
zysaO#0Vwyr=<V-+Rdk3wSjE}Y*!VlN%WZk$L4xKEZtEW63`{86kVUm4f1hDzb(@{N
zLe0_JR6E6hJCzqEK6Oo5SMb&>+VhjV9DaA4L+CW+TSIz}P`lH?0|#(psRzxL?S6~u
zyaEcu&4#JC>q}Fyxs?;tsdZPpwvbkNqSpJEmY-RS@KO>%qI0TID~=TXsEbe;|3pZ%
z&BU)H{G^H>sN|@1LN!5ltUlg)d2!=-uk~nMpD$Qcve!@+^r#72^~7;aevQ0<BOqQi
zz8qP<^;)0-G)75s2F2J8eQ=y!{L?r>yJH7Vn|Ee@X?6p(Qv)iNt5*sgnPs29k0IO6
zbXB%a#iY%HpRe*(xD&Asd^cnQUFXT~hsS9dc#DWYhO&Mbbv#b-Xf8WQ4tTXNcFxF{
zfffNY!`k$lfgl>&4Na#syUV#Eab}<{7Q({f`y00!SI)*m#ta%JS!wUyy}S^4e#3o?
zVcIC}@WMyVx^Qj=zOpb7t6$%gmlpvysN>Acnt~@~1Gv_%U5n2qg3ovqoOoc^d}co$
z!yqh|=vz`dhsH|k*{qc3bJN-u@QASDVIuMprGnFvZDmS2ii(=6DXCvkmY`0o5XRxi
zp2Gfl2ff=ru>g%@5s;W?8-PbDzx@f(>^o$v2u~IT&WkIDXq1kG)zx#1nRz=82jA7t
z%rvsu6EqEeag=a){Xv|db@_7nt-E(;KbUI+#lsZ_Ik&;opa2NPJ`~C&kP+6?$P60d
zlbe{C5#r;6bhO$y!nqj=NRziJv0lEu(Wt8+vw~$LG#3bNWi>ehO&l5=3=Lx;@gE+>
zlu>@PePt_7L3@svkAU5V8d*6wOc!Tw!<8{!JL3{8_$Ym_!Xqu<8V33wQ}jzNsEyk2
z-9-T}mlR#z#mp=%Egiqr|4RIjb-7<WH#av{rZ>T5Qt3N~+8d%$8p(gk(>&0|1u0`e
zF)&R*X^z`p@YE@_)g8-ZV%tKKepnO6jD#wB9z7j-_s?)RLK%v$AFljhmI#iIkCSaE
zA*p6fyo2{VJfv-GCf^&2{rYts`+gDTk@CU(zK;oKNVQiMC8?lLLxY;UJ88Jd`P?}-
zkUv!;0^qk*Jqbpscf^hzJF+7_H=QY{-`UWKW(!Q=TeH9aLj8z*yo6;^2`kM6CdAmM
z>JzbM*U$vlV4hKQrwnHkqfsz~kg};$Q&YXlG1SMW^Hq0KT)6@R@pcfVze)&!*qZ{|
zF2q25t*lg~Q|kQua4J@Hy}x%<Q1b2N#Vk&Bu8jBZm*)EPVdM%YF|p-i$YZ8D#3@u&
zo#-)ER8(Bt^SIsB3FANS&}ldZAdYTiKr0Wiyd?7HYY&1#R#s?bo}Xf4)4Xp$*E03z
zOY2TX;r>n~m+lhz@NfaB3aOgxHTND+h(}f54n&1Z#cg#PR~?UZ_@+ciM_3#Sv~_qd
z5Cfz#M}7SGF{9dQW!afMAI#=1kapo<6U^6_F<a+%LVFsvC)peBf`$&AE6k)h#teb5
z;3RL(cW%MuKR+{OeEoW|xH`${_G_#{>)W@_*pK@qORB#@nDnDZ#HGe?AU>QLqlk9_
zuQwmSBet^=k1i~t)~vZr8F${&uy(5J6lr*bK)J*=G9UAqzBNQF2qNFbr6sCa0&?f#
zcRM&1^wtIg@Pf(f4bY(8UDbCieuJO6SO!-&MDTRMyy)x|i4}B6-~v|eU~CQvDd=9J
zX;9gWrw!&a_JWcdhihw5(M3kJs0Tx11(x2z#${x}r13yoUW+%AKJg=_9^YQeYa8B2
zmBgB|h3F3*DfxUCN(F)tSb(}#R`;a~slA1Ssrr@%$4y@QPsxdo5w9xpMhcTyZR=k3
zx8`UJ)W#g-ztP{-HP}1#qp<M!zyLuAj|4;VMWtk&Im|Hv*;TH?lj;wv?=(6&V&WU!
zoYC+4JK-%|jIxcAn}AYVw#))O5NwM$nv`o_TYx>D2WdH+nW4+r+uPnEVAYeM+?$}6
zR|2#iyxj!7yDX=$vq1gb4*Y8}Q7b7pHX<UzPr^5ujrz!6xz^L{EO(U@)#Goda2Lkv
zIw>gl0gmp!CY2Q&=j+d6{$_b%er|rAl#y*c-6oCTB2?X*H!sXa<Gq`Myw&0PSWHX|
z1I~`|lXM#in^{(3zOww&zM)i`4TblrOIn9$&br?ge=}e~XX#b2sb#fdeYBJJ_tih_
zo7z4txZbj<{rzG0ZOW+gmfe8dyy)e5-iA5s@6$G_3D+eO0#fJ>AyX}&=od-p06p1i
zwFZ%?b+tR$iE4ClN&mI(fz?8avc))Xb*=x)3*molDfABz^gr#=|D!_e8sP+^n3JXp
zvOMIe&k5%U6HO+B7%Tg-RP`{eU%dj3h7k)TPG9|8gt`JM3HeR+%AIE?rd>X`t}LUK
z0GP%(_6f%PwF5ZwR$p;LkK+jM8_rEs6WrPkd?fI7lA>C*>@>mDKDha%99<`bGbc<G
zoi9V6f{8+ACcT0|0AhA=YCCm&<Y|b-wA61ug2oRrAWroer4H0XNGX+9pVC~miZ+sR
z&QqH_-xFEX^YM-80#XQVp0g+I-Le1VZ(Oc;E{ttPBV0!X1O&{#Cp#m~neM%e!y)*O
zCkJF=Kf)<E9%{tzzAiHE)OY@hGS3vPyzOVowUBvlndt@%eRx^hJU2~0ImbwnuW4<~
zGi~6&hQ@fMz@)Au%i0xCSD;euNPT?W8?}kbz?v)&esN_7mRJ@rvInVb!rV>_Htld&
zkXaV7>bZeR3dW+s=rQ3P1VaOs-8N%w-SF0?x+IbO-@s^LO2G!_vr>iybi?~lEKTF0
zH*5oOO~&!ot>5S)baiFR<KTBL<~*20eQJqE{=sgFr28J%*iU&pJ8asVHWzj_qnBy@
zxT@y~rgBZ)-jipbpoi?P8iN?8#n}`Q+gtAfZ{4u4cwMyj;Qt#PIBr`&1qV<SQ-jc+
zEiEs6gM@r;yu!s)93>2gPUd4~qNU~7@82g0(^u-zM#&x>Mv@RN@<|k4cL;)0Fh>|b
zgO9<E?~|wpQb7bZHW{hsht8OSeh#$|2s5=%uRF|){*3_P*-^AkSr$F+M19?y65R~Y
zhHCk>QPjk;;Z3?o67Cd-pdk9zhh1oYFG@;M9b3s%CDT%W^b7nPBd`>k6lm|!O;AAv
zIrYf%#W0qzL=dTN&IjO?<c(zt@LU2Ep`~ME<0s-@R?iXT#hiyRHZd3Y#RZ>Z#mpPf
zMx&A}ghE*>-PFjJ<+)KXbj;fr=hKCkfDeG*h{ehz3WK?(q9WDR{k)BHYV5+xBKG@Z
zw=SI5)^5Rv+Yj+!Jq^_?%4zm7I#S4JFQ;n3b{+>H`i#gBP1n<Bm|NqEOK>mkV^jRt
zvJkWl!irDe2E(p$kRL@*y*zvrzQ6@eJyA0Y9=pH~0@C9D`9)(IO|N?M9`Da6Nj{<l
zqNhBzm8uY?2YJWtY^8Nv_^BKS7vPFgpY~-~wxW&#*x)yv=zu%0@0Yr;Wa|NjrIlZ@
z-xL_VL*rNKsl`Cmmm_u{w7l|=o`Wrry+dQY+79abJ9?bdDslIs>AgW+!W)gZh`nsY
z{1+RdC!S85N$#7Z5ylFtxtT-gM{G}kvp&wp&#(H%n%sojZlQ2zcfE(|U#RL{hbXUj
zJ!H>zyo$>lWLJ1Wyb=?=``fZL4y28~a(_qIWFZ4@4DqW-OU60=_o^=O%kJBy?!WGe
zFUtyrH-0m)6D`lALxTs5G99LR4xff#rwyN?>&ntgnEyfjM>VPXnfV9oKbW8i@bml4
z&MeJbL(|tgIEbq33A95?Q{N+cD{=zaIyoki^;dGZWLN@#+vIolf4hdWT&DUwQV1%z
zsOdI<p}_yehpEy+P!qiIwe<6614IO*P6Aq&)vAR8Z*>toW4C?Fds$voPnG;qghg()
zPiluLQPI4<HAyT8mAz^VsTZPs%OCH)VRgY_JKt{XaM?9pQ(y@Isg_~g-TJc}dK{|9
z2YFLWo?FicsqOIm;2|o9!vaZm@Cn9(a0`^R3b<ipl#ca448i=yd&_)_rFH!scA4rB
zAt6*|uysf`4Tq5m3R}hRs}~RNvGv5$qyvfx_s`xj^W|qVy5PDJSnl}v*)u0tyup1M
z!lOl{n((>Pr+*Ap&#P?Qy!jv)i^0p*OkdGtwfy)|6vT20CO33j8;s&-YBcdrJdm?Z
zym+q6?arM$w7jSPd9TW}YPPw-!DV@Q?O4;Ed;jn~G6%TjI^jDfEw)3f^rJ^{?Ebr(
zS1pc~5}v)OH;r_l#9bD2I+7X&=uqCwFFN|d;vJl)OR*5FE0O!qwU3S-Rt^|$&H4Ux
zUp{21kUcgd3&-L<ME_K3+ZyjbfS&2GkyXadt?aN1nZ1{Ky$V@tU4T06Mi+gM-V+ki
z0w|4gC2n;C{USedQ!Kloq!{ZkH3%BM_Ud;i_xxrQ^^gCHThad+H*`t4D{KM^$KM0S
z`1=-imT8e-J9F#v1ET2xRfF}N(9*8rHxk0$9{>eHz3D>Qa_E#n<~G&0%U*jv1G)tu
zrk`_1)YIg1VWCkle#0?<?oI(_B9W^f$-M6)w_C7HCYc?;p;ZdFn6MjWB60`dFvY=c
zgFG{Ub{cO~=b)tXlt<UGHRw7pXOhFQmX=f_&edMJHiCcK1KexsTixeP6d(Dogekvt
z!e2tJa%x`Q5;8mfeo9lBLWwxn!B;&W(XGapDH0<g1A*HY)Zc0N%5JX%ma`Kx!kqWk
zpYS3a1(<))(sJl#S7L+O_#!#00dND}5&)3C%DJl6*5h^-9;pBO%RPZ)vuh+T0(-_`
ztAw})98Xx%L)T%i{3zB~9yUh2)2JX!qiv8+mS)-@G66uLK7ImMm2DmRr?<F&(LsWc
zx;aR0bz#`BZ(kod8XPrv<^g%9t;tErz=Mdp(~yvmaNjhAI`=MGecXWwBjhHeSUce|
z!CGsGS8)W9(=;b0#t0`KFcpkRV?JQ0-&|Zw^|gUF;Xyz%AfX|USOd%}8W(U11869&
zWdXPY-vFluaD@r*?9$9iPZ<o5PFnoji2^BD#J&r71oLk2t<HO%a74IX44f6gZNQth
zz+?(4AO9Z)zfh-J-?<a;q~CM*7w9%tdq9b7KXna;u+yi0bwy<-l*$N`J;>E`wg1Ed
z=p2KB{Pxli48T*P058Ut1Q`&ePLhYTJz?6r9>+=|M5W3>BL2BBs1_RJf&l}X(F)vE
z@CCu3nc(Tu?sAatjeJNWc^fz`M+*VYl4&~;u@+-Ym=5N@;NcQ8?F14Sis^DFL*o24
zqtg;FQLgk!##tB+e+QhcNlE5_y}((HgBvc-2r?xSp@2nk0YIH|kIdf#1)xo^J|WV+
zSlt#BSrfV~4b~eQCN}N-aysgR>;n~p!mHys4hTP?Z=%M>peP-$Z*6r(D~0^L8>kqF
zHBc#;x)1sxN9Jpl8oaP@msr9pXk90OCnSJ|@O#ocC$m;n%3+ps2a6f&i})0DVGC}U
z;8Q#NFYuH%>VWKsjvmkb_QP3WVYwh)txe$N?EdR7rf-ua&sPfW$8D3Al7ip$6xHh)
z4$h4ngsX$3VCvrUPNpm~MN@aoD&75ZPb~d56^A3AVPsWWgCdFk#AUg|@QCnchA=gP
z1Qi202ia-$?1X`VU*t@-;*Z!nFf5aee}}XH0PMBP$WE(|Q@Yun?+nY!^_!d+jJ2|p
znT_A92f=e(B}^ltIb2Nv^C)HosUlv1r4<3V9;#5E<)|*Hm-cEXf80U!wuWrmQyM;~
zyPqDYJ%6DPp&6VpStZX8`g5o$b66?&Ly{cz40)i>mY-n}z<GEXjcO*!%Np?-#e;AZ
zX+{Hx<GcJ_T7m5VBr86>DEmmF1Hc1hqT(kzFj^SFKo<Ja9N`%HlXxXzJ-{5Ffd(n9
zJpAtO!<{?k`cWK7w+3H-f;<QRlGE2$=U^3>U4mjc5w|y}+nDv>?~C5*cm-2(SaV#=
z8;SJF$;mN%j{-ah$xE#QW=LBEa0m9$66yrYe1^HkJ*9vNfZV*k6viFq$DxLjc>qm0
zAlv|VcV`%e=dZY!RflH5o)@j~DV$CP%k%G@?Cs*^mVXz{qR=z@@$S=jFK2{^y#ahN
zsUM)kyl*h7Z*1%+4bzx&OrLm=SOtr*`RDkOc5L4c(*;?tLub^Jb(nVJ@Oce$Z>i_=
z+||R%%y0|Qf_J&C$2~6wzF+v_;RBC7#ht~?knpN9Y$4=g4$xHU84Rowupl{<eFWU*
z1l^oz)(9t#ysCed4@)SK5h8T0G4Tv`l=Je>SR7CP*dwd62o4`w0BTjtyWiNoyj#Qn
zl8WGz2Al|SU<~Z}JwA?!spBHwdf#1;d31MQ1DU~?o$AFCJ}2`@G4PDq_#1dtDIJvS
zb8>PD3mx{KIl6GXM|9VJZyJI5_U&bQ*4;-8I|{p0w&l9dtaS8KelbPUZEVmc!QhQc
z((Zthf-;BPw@L8GNVG5u#SSX54Aj53S_;%@{{7(B;+>R&RuVZ@NkDfM;$2&4RzL4Y
z68|?0D*k7?^S>ER|HIAwzhD0EkM94k%K860@#8;&l>WWy{=Mq{z3Qm9)PLxQ`+r7<
z`Cs#B|GjAc_bplms<KPsbw_V+(i$0>)dP~3#&IE(_SM?9wi<uc&rGX$=s%1m{%4Qi
z$DI89{P0P*6rG0QFMH7A6zX_o4LckS=Vb$v5ziK<z<TLW%t3<BK#S!U%!U<$c%{mY
zQq5niddH~JB?dnD*wudNn|rdSVDp9z0A8U1s;Ybcgf2%Hbf~kpyVBg;uA*|yxnpi@
zY@A@|^!H+7pBVIa1x**_HN9)S=Wb(=E4OdwtBiaMNdZJNjTGXNT7ruPsQxX=h$VzP
z4KcnLq+f!jm6378vNfBN;qH%jYg26j(73|$1?($TUa{4W%v<T96kA}#ez8e`-`iD>
zMfurXGmA6KP#!mW!9B3wC?MDAsN2a;^O{$#bif~|HCgv5D5RVWa3D3o^bmRvTep)Z
zPr|!Vg!kxks@6y){S^4N<V{8(ndYJkSK;0G_dmp>Yj1jYHoz^xT{%TU^-{=<-N$=d
zA4qf5wD13EZ;{y(r<8u|8{tqJnG1tyOh4b7)Ojt;93e@Wwr0n_x7M?*|6uNliP*PB
z!KdWgn%dfBHF0q(?WW*rgC8BQ6kQG{K>FfW5^helnz?s7*KhV(T$=fYCRDcHKZW%A
z@8Xs>eD}<@i1~wQJV*Q+crV+FlbIPuq8LYx$qF+Z$~D=)%YcoB&vSrq7G1QszE~_G
zAuzbPQ$|)Bbn}DRjq7+(j`PA^7{_Vw@;WZ)keBWZ|A2--A0%cUCAs>5^HFB07te8W
zHmq@N`6m{@xqiJnL~QIq>sCEdO0Q4^*-YL&)b3eH9wZAhYm*|hx%U%Si1jqEbg-F9
z0gpZ6tQ`iFn?aR?TY+?lU={DzCU+W$n~_B^1$>!H^XnOYezVb^gfA~50yHx%+arNQ
z0oha??|isb1C|wYBN^^|^CcWV?@(82spk3PeuWv^OzEGKS`oG*7Gpf1A3)ykDF;r%
zS5W~zzUN-*n3T?72o84x`Io;ZAXz4yEu+E;<Zs}OT(huXfkdq}4RqeoR!6o%i2OL<
zGjjO^mu|BF8{3bXu^957)dJ>~65J-x<&dPT=R6}5+{c%tpRh<d1S}h|d&*zAaRY=k
zD*+Z*0L_3+xRJKU_D=QLTOG#An!eI7^fU6?2FWMKKq2HqUG1tT&q1|_1+BRI?FKkU
zS@x85A1#EEcps0R=i|pT<)C)^@|wV7$p6`k3sOLtUY()4w!Ape0T+5^W_oU&cWMbN
z?4pFqFMU}XBJuDl{NKaQ&QOYahC>zXckXoFPABqZETdq1-=SyP{EN9#lg8mRM;5cj
zvcJ6?DNnf4`?FN0(6vT`&A8sv@zJPf;_ISZm{4MDu2<`mm1Pfs71xOqF|AN<3cKZE
zI^8@F?s5x$W1z?swYHu(vm5eo=f&HxFj&H|ASopU8X~-sqtd=74PhMd;db|Hqy&KZ
z0bU(p_aUA)tMZCh0?Lbs#8d;^4a*byJ$pbNaRXxyNf?q(%C$hDgoI0zw7wI{XB-Ia
ze7oj1ahx%yW4l8<ko&u}fHvHs+rZ1x@6~?s-J_X?{I+kE+tsw}SllFKR#N?#Gqd;l
zO2bP%D@$uJ#mj5D-HA_zD8#%1jm*gb6XsR`gHnueiTwTeuk}=W*h2>v$3E)VJHmTK
zs_mq*X22c7`wnU}@R}P>>7N3Iug$f;P<Fz8{4`)B!JF#ZupQ$aMCXmekwMg<EA-4$
zf@ECX%4D4-#$!-NK1_S7ouPH?6W$Ue_MJmRLf0#MaGI6!1NMv%wr%YH<_q!?lkIyT
znq|JOqAnsVW}^08NPqRik~eG1ov4jTsBQ3r!{E~Nh$BQ<O3K{FNW^7EmU=d}pp%z!
zR2uuYM@Xr$`~B9bb+sBbeR<`8oCnr8r|lKOL&~hlt}%Z3vgbkU+c{Pb+8b5Kcb0s*
z>`KSW#|JRQ7@`v#MfgPa96tOF<o8^AMgoHv?2n7ue00Y3ivJ(p-a0JnZF~D&E)k?8
zMM9*c8wqKpOBw`}Zcveu2BlL(8l>wXr4<lRx*I70Y3c5I$Af#H-}|2HT<5QIo%Pq=
zYq{1_-#O=)W8C-W4&H!Ko{;0px6H@!Fv$!J1yw9`Bi{^^g8Ug3+X|AGH-Lx>R3YV#
zx1f=os#sOZ<pRyMJd@%_Az@)=fL`%G90d)PW>79s@(0G~@;#R@3r2jo1&)ifOw%0+
z(=xgIGTg!FKY#uJB!G}5PXDpkRh`rK0Xi=r;lJP9OhKC^WV2}wY#%1|wkpd()HiP`
zVd$nN9nH3`Q<^CchPC?)a;*Kp{<qP~f$dPX>j5vX2ms9%I_?2$7GMSR{6I(O<dV;l
z+u*k|0V++^9%HSnJgh0xH!d=!s>vPRBIo5bA7e6woM&p<9=1kUg`L&S--&4NaLo<0
zM{*QWslcWV<CZ;ojhcrU5Tgh&)4&!P%7MlEt@g6&M|D_Og}?{ekT8jkhYyehmV1z-
z`rhL}X{;M!9E_UnfE;V<$VzvO>mnhpS@lB;_<f#b$^?hs8NPLOfRsyixWX2fuT$ae
z>aPV5nfdnmH_HRO&v*fS^cyVgj3=@+^_QzAs6hbgk^fep)~Z&|d6gv)dAz#>X_hJm
z2Fl*?xR>u>+ykLS;*Y7p83j-9xawy;kRs57c-v*KZS~?@8Xnq+e+>W#3dl)l1J=Ab
zzYYD-nTBZaS+1s75rbbPx=9F+oSfAXsMKY^PM}2rhM+Y7l}x<BIZBF)yVXuV2^{z;
zKv7+Go1X7v)$15XDZ8$XTHdgfovn=>83Y+RgAB^mi7*Z+=%;hxf}q2IK*`rVpCm!$
z1R&3dyi_dM6^?;0Fzs<T7sDzDl$V62b1HztfHxI<f;#{q1;!d%zimq>|FrvVBT!$U
z=R`ZR6)t)UlyPlCL*<UE*|0k5Z09PwG}6SX{+<(@U}papNzRChdcdpRFnCn(XnFc!
zdn)BKkivc(9ZgOB4YV|-<?pbKW>LN{iCW7qy-+$C^DQ^SB_hiHCt?0SNqJ~vGz?zd
z3!l^Ky}rA>x$%3_*~MjITnDH(on8mq?6;Edx_@|w!|W*9d~m?8#{F4+1q?WIIex!?
z8!+Cc%RxJ4E39!#i$XKy8G2Su|AgrS1n%^gOwBAVCiakMu;4CO+&LsoL!XM%i*8z9
zCfJ*g{sH@NVFz7;U~5?7$(T9CQdd09kCKnsE$@@KY-br3#3yP`*+C9N%9F>$80E=J
z^%x4m>0QXi<M)N1yN>~Q^e7XN@u<<GiP5Y6wBxk&VD{syRyO)9u=`4XVb?UgZueJT
zKieyv$hO1yoR3VIUfOa-#$G4OU%+vp07y{)b-+q@1@fcl#pvZ)yb}1tz-nt`YMLdw
z{qB0e=9EWYt(!Cn<imU!lFTB024p5DCq7F^FS3PY2V30X?k-^B#cEx7qT^~0df~sj
zvVP723m5X-yP}x`c8Z?shQQc$zc5lZF4hsS@OfuakbeY@0m+JU02jeSNn2G5-db8Y
zLN%k$+K_IbcpT4@ubasG1e3@iW)cl-wV!n=<aVgt&ul@hcRKAg4Q+RFmj~Q0b?PO8
zX5~&=u4?2*QmO--D=TUXrhRV1ejh1?<>7>Aq66r5PJH~>+iNMHVO)l-9H>n&MwtcP
zLzzj5cIAttizx8k0m;!FXdsy%DvVpFzJI5T&j-3M0GC|Pj)L%?1=hTt*^#EG0Ayx2
zz~z&HZ77AV{;>{(y*k+n?O^O>+N6T&vAVN`&Tyhq7*fAro&l=V3|K~a_okVnmylMm
z7NBX=nRQDA`3*1}7c0c88n<9Yu2sKTC!)=kDm(&U;}{zDi2{)mtn#2(fQN$Mq50i)
zX%j8k>8lO%k(7~HfjTq3$5ytX1L-d<y_2ZqEU&UA9NMUA1R?(d6(^WL5<!^7s5`DP
zU;xg#OvR&>=z4+p&~bR0g0xm{YxXABQtpe#ca8C<1W1p;{3buLswTFitPH@lAJiv?
z9x<3!7Z=B6xX`|aLA92w8)QYmU^R&F98x2O>%Ax@n|(9YfgcRQK5e@s34P0D2zndN
zyKT}4Gj%qNC;MlDF8u(Kqk*VNHBAv}YAz<GQXrhc^n8{47WzfFZ5z@m@!?0*>p+Z~
zoWJaTAf);c1u?lXm|0L!_Wj`1IZ;|<0R}>q-MRfrwr|QOetQ`WRvSHf#?SC3ku!Gu
zRD3rZ97Y@fCW|Mj+C`a&Ich!q5qWL@Bp>X2FlWe#8kdW4$kngcJXo_4UEK9(tM>Ev
zUyezyS<1{5+5bH=dd=Q(GBcUcQIru~&OzNMFHog~fH*JU8fH+)MCCc>t6$}?wRLpJ
zv#1a7{jL4C)md;I7jkE+2mOm~$)$Z#;eVO_MAe<K+w1?j066bkDy(xJTPn+FcTHbb
zY~<EoCKhPF9G;nJL@UzS2RV-yuchkrz<}6F@U#bC)30A=g&qO|<A>`LYSoipHv1BI
z$g+B}GiezO<f5>F#H4gB?EQPiwO>7OOoHKI5BB4vq+PjgkbT;68GaHdjE>fTYBRIg
zWqURn$a&$UJVSu*kZt|@y!hX5FMO@IutU%Y7Y2{((Sc6F&$>sI+h5(bFH8u}mx!lj
zr;u5T2-ffUBnOO1NJ2%ZNPa|asHRbb=srH;nR#?PU!YJthmz+8ra%q2`5CkRj6g7A
zkSY+27<8+B%bPZ}TY6IJzd5eb4JaW&frG~bQB9)SefnPHFhZ##<b_8FNUIenn-8g1
z&5Vp#Tr|vrCP)7qNw2?}z6elIE_%KU6WF#vFvMMb)o;0}j=P2RqufLmL>HH}T^2f~
zCnu3`!ojb$wNOyYNR<{B1N$q))8&b((dhweRvt((%wf~ffuNeB?Lk`2h3?fTcKrsv
zkXR$#T-BobGp_0Jai;tC%Ym6IHx84qX2A9%sk{ZxfP+Ze*`7Y9WM-Y1^<r!QMuGPo
z6=loNr>2z6fPHWdR~R5Mzyb9NF0`38zXEW_n>}v6Q+Rs{Sw52iwK!B$0Veb=+r!HD
zukSF+^sEbri5m|DY=qX_7l_5k+;FJ7^!I(_LQv;83Avo6`yZ!9;pZHpQHd`9;c*p&
z<Suh!Db0#QXI}KBg;jUy(w3C4U8r)fYi&L9{E+#w=j-~FbmRZ4PE5xYG?MFv&E^uu
z+o&s3EoJ0uyV9rsV8gUWQxzSV%J~1E@Zs;<dFwzUAfVI!4d4Y)d%jo1tly0xp`jS?
zHvmh96W&%352l5npc2q;K;}w>O7%mX!O_;%r&mLH9En+d0|U@~l7U^6Mf(LrQw=;L
zVXbJ30fQK1S2??#j*gGF9e8fB@_-4f=3fhZH*xroA`jbTKI@}FKV+dNsd4mSB*k}z
zZKV#Mo#M($_u~Qm;B<&u@ETQUlQe}t{f|4b)l208gPu=g4?IYR=*gH9S;*KDFAc-P
zX|G(9M;xGKIy;{>>9)$Z`1s=Mi@I+&I|3lr2>#uzYci%Rl$32ibycf)>`^*XdJM<f
zcWSDu^65JoB_jhj_fSK_^L~yocNaVn1IqbI0_2N|{3H7q0Fl|*biw}Zi=82l{E(E=
zxBdt`8BepHf(rK|U({`6DT|<7Ibr`1dE4cBc<l7|PyK^`u(v#@S9_wRqf=8I11N#A
zj~j4*1Hmm5$+f?Q8(^b50JQ=X(?|8TkWm2DQfOeHj3N&5mQ(HU#K;)tfiK4G=l<IZ
z0F{wE;kT3s8fm!yT7xkiB<CBDo(&3;sB(w%lQ5W7-{-BAjm*Y>;usE!%a!o3;9ydL
zJrL#6yScT3iUUUZGXFW&`nbu+62TC&nhXZfj*$_i$F8Ly#JP684oMaNTz^5W1ZrX{
zOUvDQX$2;bmjKZW<YF9l^G-ow`{2g{g9C`<^TT1sUJge(C;YL=4%bg1R<(xTZvN<O
zw+^a=zhx6Q-xqukA8X_%oPfv89?A~LAo+Ttjv<oBw;3gt0yS}txhYP#-2gEW5gg+&
zP|+`TM3;dHth(s`!M$&NBlic8U&Inn8bBu3F$nw^xEC6pqm%Mj9sN`Uy{V|>fC>0e
zgY3CDJWhrny%Nf!3i;R`RUD*m6yzReJ!fzQdkKcgh-Cl>6gzEFfC4pWFdPB_6Q5bO
zzw`G;S090KwbzNI6i5|Jze02+(7iG;ZPc%BEtZfS0uQ;cGp@abJ{V0=#DW5=OQ3p*
z@t%R~N)Wh>y(f3GnfgW(2B-oYY;1C_`4FkFmAe9aN)CIwZdF#pn~p2ap1a+Y%*^><
zkYSLaool@;emz5-ivs$?m*DAvSSTpLHBWHV)CM!%Ao^A;MI=RL{@FL@{>}Q!3oxPp
zbKUZAe?JLW{?OV1cgg{10|T(h@Z8j`%xM?De1i(<o9&6q`H3U+;Xp0^kw&^m%r6)e
zFakX&_*~$#%7y^fVhD(mJCVA2!b#1Q>)hiB=zA7>Q$SO5iq8tcybg0Pg69C@7VvDN
zrPs%k;dEhv+Jz9S{v<CYDXCD%WD0Hv?NLuZPa)5z5P22aZ0?~gXlR1uf=LD&%D-<O
zr;8wW0yTm@C_8Bv;6v(`Td1JN$aS&3{RRS+pSq)E;G)&7c@yytO1ChI%Q;XnymoRD
zeY55aB!46GU&!BVG75}c9;cpqkZg;7**fL%U0P+)<{vNFu{}i@`up#EaVh<91qM(u
z58wYA>}r0kwk+v}WYuX%a4<a+M&MgY`T@6qzGpHwYsF<Y6HUq(&r(bbbotuNB43>B
zp3j%1jE%)RnK_voB%gPG+fDJJ!4|nZ!vqsE$d+~6Y1y>47C=T5PL6rUk?cAZWX<96
zydf7vW!Ku8Y>V(wzSmT2_3e4GpIoYsPwn2&*cjeBjt6SVv9ZvYr3rIzaQN`A;q&LS
z{TcKi8Db7&ha^*Z`8%2PMMXt4QlWjsE)ZY<JzdxuXEfH!pqoklPMP#z$12UUGG`@I
zS>dfhTtq~!2(aMhL7|m71L9POB7?{+^MS$3vz$o~?0|_^j|;a*dv~Ih!V6%y5MY-W
zQXTg012}~ONo%s7kU!T=Qke~TU&rPA+H2Suh`9Fy3JP9e{kC*<%}z>U^@o6_bY3p;
z1Y*4HAo^--ii;@MPEJl+@4QyG&DwCLPu$<EhUL`pDiqch7Aj0TH7$=okrud`7pv|O
z)6&!gz#quj&Fwwv5ww|6+9wRMg<B0sqj<QO<W%9u8+cm{jpX{H*=Zv7i!|x*jr5*5
z9$yLMUy_mypk3y(*(jPK!17K>(eD&?y9H719DGk*wtn}+(x#$zJuM&ovWY82O_Yvc
zcmjxAq$4et3DT6$Z!`bI7$C?}J#M8~9ll)by~MJFbOZg;vV~p|!MRDN>A|Unx7W`9
zO4g79ZrJFQ+{^M}Juh64HhD-axm<|Vm&Gdry_KwNJ0m0GN|g$Pk$D#fFb)n3fCS|Y
zz+YgI8Jy*$^ng~E0~K6i!j=P3=E*LQ-86r)Pj)o8eL-8{cUuf1x2UP{2!~#+k7Fwd
z?`O6gp%X~4J*zy)2p19OePn@!$y{CZV%Aqh^t^nh5oZY`pZ>lma$j<RP(k*vc$07X
z3<A^(l;=U6uKpqU#dMu9IHsC?@+hA=-1rSft*ueepn+J{%7zL;l4JE_*md?M0qFqo
z&xIhR%jcSbW<Ko8cw}TDmPD*4pBXmFxG7V^z?=($DZsa8PrWZJT!-$HS+6Jg*udl@
zx#@Sv=04*tc33W5TSMmmx$ky+m6Zb2pRU_(ef&0Pw^g3<JRT>KIC)DUI=}O2Wg^{#
zD?ZDVQSw+$UPk7Py*-h}+obwbQ2i-q=5*$d65?qnDkyvk3(Eqq5nvBbdTXoa-Yclr
ztaR#yzNL>OvHoR7DJa<5)m1)k)w!TOV43CJLFZw+y)7Gk`t!rIySq*rZy@*4{s<=Y
zFe*&i!^h2m#P<>OUkugBTT;-QaXtd|qJjSOPn+8P#ZZ#L2V7jh*&E7{E-EW7X2|DJ
zumQNbYcS1>97VPf`)fNZoiyFl6~Xry%)XfvqiCwC1KT#~g@qM}dsS6(EDcjrQsME)
z)gp5Tj(=L|gv7*XffA4qGJ5YdH#eIO=S6SUo!+zZ0fWTZd}P&lPQBfNRroz6tb0Oj
zot@TTstNQ4l~>-=h+OW0REBDA^@&47GHTkzz0{rW347No9%nu#Ac#lss?KSBC@hSo
zgy$r^<>h=E-nigLm8GR6@Hj3{d+EnUMeVKRe})^EV%}lhZqGANUJ-^7U#D6QP|Yo<
z8&AdHGSt!WNB-;7d8x3>K^tXFN&|OmHqtKwL!F5CBgsJI88VR;US5W)qqcV*92#HU
z4vo~62=MW3preW06A=B@1DQc9sM}!#Q=aR3ukv~^X26O8GZ@C;>IITMkQS=8My-IA
zU}i@818{d=czb*MW04drh#zly)ssIka{$ehd|gyh()pAd1&h{J6@v7B4Cv!xSUor(
z>X{A`GX!GS(DR~THG=@J5kmdOs*s+<#zv)2f_K1sZ}##f&zrT^`;1^5gTCj!;AU6L
zR^c-z&7!mEP?E^WU(Zpl_F9RDi;xSV&a|7iUz#Cs%Z7qNjMYrcL-S_DIWp2vlo2IH
zAUhLejnF_f2V-K22k)ido#c8@QEt|M9xRRGw-;gH!CvVH#$xzgerjx(wz&YYz?+Gg
zdbXh{C?i`bg^+|KY+wVBF!WDIg<p<0LHi<FWBG|v@6q~~eer->CZv#fO>Kq9ya{mO
zPmvk8VZ>7+A}HHO*K=J?>iu8;{(cRq3-?!{a$ks!g)vXA=?VODLWjTXlasq8w^=F8
zd)#03e8NG)cExb4vZ*`X1Z{BwAG_=F;k1{N)8U_ARfFl0)3P+6!3Oy^cpLAF)WD_#
z9X++$F$kvty3^d4xj6)3<w?OBeFbwYOUqois5_r5=c<l8YBud6hr`>Zzrnu27ae{`
zowDpdZ0T@<oz6#wbJl_$_OqUnfr4`c4Tj{a*RT7E4aG}-fje?mqx`KYG!qr$xtd2u
zZ<^|VTbOGNH^zoM#giem>yk8!tE*+Ua|bc3wRo2ejp3aOJG)C6ksm)M@;R|ruxFp0
zd4oOX25KcXhSlF^Yo=kQ+|N(j$S61~%Vlm&>Yj9)w)WVQ#PMMxKjoB^Q#B<jjE$&)
z-v!#?MI%j*Ab5UTHMcA?Cx@9Zc(Gep-53%Zlai7EvpND^WZ09uz5lfoqU-GJBxqjp
zlcV7SBkprB1+&1e--r`}N0;^ICX~>CmuxD~{+yTdxGQjr->|`%<rU!RAs#L9p{<yl
zTt}&?C{Rp)_V(JqG!j(It<Mq4RM;ZBU4!X=G|{S5(FK{9FsSTXLYE;a#QNu%e_KFi
zz*A07@CLNB_{6YZ-f)zZke+V@QD5zWPJeDVF$wATkN$oYZcQIlVG<IT85k|JwFd>Y
zJ2!n<+}Hr5ia~o&3H^(SN<lihgX5(fbmXeF>U+Hw(CC=?V`#`hS{kkY=y#aB;n#O4
zVkq@b^%$#_ajCXeKi8{MFktS)B_)|rR(|=Sq^O9u0HCEV_y_($oT1m$SM2QUIG|Py
zD-K9S*e>BpbbFnzl4H#;EYPGunoza#YzSBf9zT|xG5P)d9m4~dIm4VxX2@LB<D~2D
zwd+Dc!KJHkoW!u{GDTl}xSvId1i-|_r5CAXe({M54h?o@B;^Bun`ph}(VO)2EtON?
zmex92PcL>)a*OE6YHI!jcMl#CLHnz+u>NX0^Us&%gp3?W%T~X&wno~&o~=SAK`L>t
zWg=DtO-0`7n83--PEJu#s#&QvDi#<(8PYiG4>}g?{HRBM%=F`+YifqSQV7U~5&>OF
zeo9+aAQA?PgRntAdzRSHAQl=L64EFjLqLf^{UxeGLSd}NiQRH^tjeMyD>y4UdSTA7
zIO^ZD@Ngw9Eimir8<7L8mw@PJ$s562dAdtIk}%F0nVKTf?}k*Itu(&?iq5vSwO{<@
zPd{(a=73Ip2S$A`Us|3UZ0PDz02L;lN@ErizM1(_Q!Bl;RvgUcI!s!y_m4;-Byzht
z+f__VO`mDSQDM)n^OfsKZ8OLTnwAggNvTwbTUER6Gj%wChgLduWiW^D-?W+<GQH*;
zpCS4uxwa*Yd0zhhs0<9UrjPcgbVQGS*Xny}mp}*Cu+cxa*Y4u%7<9F@djr!d>fh`Z
zR-nR@P~jP1V`Y896BeVVuhOodq!jBvIQRgUJS$&RUJMhgtIj*^o<|Ix=Z-uL^m&2l
zB^WrO;M==@=T1(z=!JVrXghe)Cm-}GG?{;UJrfSq*yD3$52F`203*6~t&oN$0~uZ8
zx~KdYS(IVNI;@2?P^PEm=As+HfrE;Hj=ir(sQM4^%N<@9^RQ^vEIdw|e#EfPc+$bl
zZuyBTxcaW%#~wOX^pcmudHTSoAp#}=+~gVq8Y8lyOCV`Wb?b(3dHlzZOu8C~1k4mt
z)t@jL24X}^iheO9fx%|y>gG1{Kyqv=-aPpjC?_hpm^W`KcYBu>=yIw!Tr62y((LZ<
zgDs8%jAvm{#J3#{fm?lf)M^dnP})u5z_x0y%XcscG{A#;x@E9b1g)tD)<1OXN&zB-
z(11cTSPCmhn3os6N^(iDwRu(@=TD*(>uYNak?ljB4Ww|y!F_BN(jO|V7Fe%N%9)R|
zxbLyR$yHE*1)DPk5dn4t;U!iukBh<((|HP4@KFvEs?j62I~llygmJ*Ze>F*wC)ne(
zM$A+@RDbyvq|w{8ha!*YSV+DDqX}7N!GY8yH3&Lt-j`>$gQYbjhR)%i1b#YhA-jyi
zr$j+17q*-KL!V+tmizp_y@0O9y}X}7LPGwx$aj#|NE13gzZ<X>;WdxJq3%K9&aqVZ
zWlEj32>kO}jo~5*A?&@~-5{Pe?{JkC5n%<WC&105U0mec{~h*-3>DaDr*{KLC0d%t
z@9&<@<M~eyp$t#qC*ZVD77Yud(2!WB^G!cGn{b-;(7jp<G?WX}%O=8iUxdsO97>4a
zZ>|>rkMENxxvaiOx#>7P)n6$&vJy?l;IN=t%WbiKZiu)>g-c<YD;yOi#};dB6jml&
z^25}u15a$I{<b?8!pO4gee`3iVN=_&u`z^4?2EKCIT@MCiVC7(c2?F5?FZ)$Vt$T)
z%S%?YL=@hJJqMTDiPY&GK|w)fB_#mtDcs{B{uL2qb?4BCDK{<qagd&!!LZZaXscyY
z^-f~e%qTzaw4tS(V4xTdv}aW_S4<GQ2Lhaclt#YWZXmu+3=PmN-pJoMkO{$g*rv6M
zbyal06;BQeDn$kaBu1_8&6OJ9g)Ol>NABP0D=m*?P7EzAV<IyUKNSL7N^Y{qAip5I
z2$7+ku;ttzz!xh0@+G1(<P|wh9-5Vp77Ee*tCx_WaDMT`)dyi_ZB2XiHxS9c88eXU
zO+q4!@bA?UPlcvgO$yWsfq@r8#hbxXH@A!Y$2oC<kA{aA<n7&1P_Xvv*ROBi+|3$L
zuUqzwj<z*5H8nK+>ib|W9g}`=-4N!Gpt$k#b~7|gQ_XF9e)aJXR=Ag?Wg)I|(q_<c
z``8|;t!BlswZIhZ!p|T4^()G=XOP42z_W^UFXkh%_P=m(fqTf_9)Mv1Ava{&V%+*Z
zD?59I%hc7iddSnrXcoY*l9OBYm*;GGbimF58;}lNTW@bY#4y(pNh3cJ(@m`Sc<r$<
z4Emhxn^<&oT&Vv3DAROxYVKu6p4+VEW*yoW!>PTcjGk)z9w!cxqO-7JjZRFga+z9L
zjh~-#62G>yTj|fJvEbg>#RQTOHS$}L`J6d!@TzE_zd!j<;MM5X`Rucv?(Rmu9tDJA
z%0z8EN$}cF1hSyXlWJ*g1x6+{JA3cgSk<#Hur!i^cX4=d&>#=x_Ie-Hed<|v3kx)8
z$H0W<`B&U9l+8bX0^3G_wU?O+%`k(G%9qyxYzT{oGWhUWmnYCyVcDjRfm13cGm~1C
znwpf147iKm+jB`08eYRf?C$E~*2FJ^*A?RB?HL_Kz>C7B+1}0wlCR#54!GFkk&*^m
z4#iGDag&*u39tiG6O*r1Rp7GG)JczyrZtNlZ%wR*8aieINiGp(G&MIjCORWEgut8}
zB^xz0HT8#pEby<Uh#|(uPfx&KH;{*wTq}hs_-0K;ULI_dr>T#XqM!c)D{%${ob2pu
z8@jr<7{1KNU|*a!fg9J+cK{cI!mNZ)v_75vM$kDhZ;oDXAr~UDNJ*C}C@$t;WxZZO
z^Ek{WDap~@{bO!!5M1R_jZO-1jlw}(B;qB4&;Nvni;8L{h~5>v69RlsBjV!bH#Tfn
zf3k)?Wl%2Zeni*asYacdm6M}i?cnmKj|%2>;zo=NkBt3DNS5JCB;z!C=$-E8CkgZd
zX#O`e2+Y!2;z2RzU~Bt$j*YDc{$~Smxu&u*v?1F7wiE4o&kSlGGqXj63Ju`hd^3GH
zrQiEHL6-=u7tXFw+J!9`O>)rj@)BvYJ$$HDAwfZrlE@b_b#v!l!%ABOO&`mEO*?IN
zX6Dh!i6N0v?_ygCu@BZS2&ymedH3$xPt61@Ms6CKG80l?@O=nCTD7IJv2EN9L&v_<
zAK;<pciOlsqEW!gMI|DY3CjcLU}KUjg$bW#vDS7DRfLZP;>Hw#!E*a*RTJOZRmO+!
z()?xd_IIZ+o4eD3A-+r}>y}GtP?2}Wh=BAdPvzRRml1}*mcr95EuBYLQ=O)Lg0OMj
zs513PD!$oV1v>F--Hna47Ts7_a1S#wx<?tkK>dV?kTy0zVt#3a^t!XUAE$|;kgKyZ
zC0F#P8(D38dsry<2@gN?&D-%Ow=_3Hi%ml(Of@znn0Cc&MIJ_trjH(xVHx=0iIlvo
zs;-WymYC-Q{^5Kr8jjI6x&hX}BnTmpC3u}j>fT%v)C;&gj{G>9#<q~}5*P*cU+^4N
zGGL_Ss-DLE6Yd-ycTYdKym`9HKBstV1{5stnBtLYXh*@4Mc_4DQ+-v0A0Y2dO5i?s
zG(~b#V{dxj3a%KqLi0N;%gfN4fK$xJWcJSyf+(EWU+iwS3XU(rI#;ps#XzP-;fE$D
z%)I{?+1LcgsI8RZ+F)S?FE-HVe2|hmZ>JtH<YVU#2?|1IG8_FDehv`RRGgi;tL*hY
z?x*+&>Vjvvof?ISRzXb7n6BK)D{mY(o;SgGz0W&8KZG0AQQgbS%bf)}qcN)SVi6&x
z(K-f0sU;5!L^Yr2T=KsBx1fNfS%0HqCssov1?jXx?x+a7#%ol0gk13@sVyke4>wuT
z6))f6R^-BPEeb_)`;|ZbbGUnbtF2X`kD~j&1sb7k9_W%G7VR7ypf5@!mCg__5YMoo
zMo7Z-@L?O66PfcF^r)9D2`gT_e3|7by&X8CI+AnrsaLdq6NDMC$pa1!429?#as}7r
zy!7-~b-o;kljGQy%-hN9Qj@CepXFZbSNFga?-D=R+1=GBJcITY+@oNtdlzh>qeI#P
zPdqT=fdFU>1XJ2)-^rdf>tX})SrQwUIb0N~{epT1vf$vrq_}~RFB-OGLiP#pNl6)(
zwJ^ii)XGbK@D-gL+|U^GxCt^d+wECel`~s6=da-QCm$2PZ3#EE*||Ao8TFLrsi`_g
zYp*DRh=}LUKS^%8gx`#Wx6vFrz>1cXq}!7c4pJy?tI&bxHyy!ZCxP41%l>D0HAwa8
zB8ZMaMFXy_nB;_n1mA!F*f~fHfmg&)Ky?p(*syIm(|f8U)R8TA!?N;Cn-~oDArK^E
zh!(2*S}6AN-UjahGs+WMoY$|5+wZ0;S`@ECSRwZ2P?Ln2xj6-a+K?ktwzPsUnA^aW
z#-jt26R9egy6c{wisqKEpfs3ue}cW(zm$onztmJ-r4lO2yF$)4*9{hi1uv+OS2*7|
zG|~s2r%cG=2Vtg#(&3+HPcHBG`93Y}@Q<`V7X)Cfv>t4sxFLX*VSrHC7fX7QQSMir
zUSb>HPGrc!%}qEgx*tKC*epk#W*PsevxyW8rvSo#y*=V6^-ZGabTux(wD3(kk%Xnq
z^BYfY6A}G!7IyITtb5Ga{|DMTHC6l}OyA#xY~HvgD6Fg3oE?a;gCqIH3zqFu@(aI$
zU%h9@s_5y<_2z-+&{g}jO-A*?QBm;;b8Y+Z4UK7Ab*prFTGlby8;lEk%W9CK<l^EI
zH`U%QORCQm9gQWaGeAj+VU_tqHE~!=c6~|D%0*fxhv9=&C^w6yk-`lfT%F!6ZVn40
zgVfch?VjcEl)%BP`n2>~p80iDtnW&Ki08}rl#cY1I>jxNNiYNpW<t1PB6mayiE6~N
zCG7M+xzpS-$p4!u4QC@ddQi1Od_qD@L<FPNb4|@RMn<ab+fbTpZOyIlVU5&4iQ-57
zRJpbRv;FGD98{H+K^p3GdFZ82;}9*lo&7}cU|o>Ks_A&QABnT|?@bChS%{sMQ?v*2
zIS7&I>F7eNcGthigZY|qZwBTZ=DkuFd7fCl$af(jQ00D{P+MDAU$3v*$ppvFk7~=5
zYz^kk%hP(C=en!X^a7x}0qB`;>PqW{<li@8cj6#%dhiljjSY=TaQ<lXh_JF6PgXxc
z#z25Da3ISVTE*M~o{-rCrId7v+pFNA+&VcUBYcb?z)taUaNNYOf`~x_pndxKW=e*{
zbbUJJ))UkIY%2dbh(P+zwBS1IRCr}(wUph7DJhrBIhdTC$--!`Te>X|48zdo+ja}{
zKt8A;M{7@0pR>W-iImIaEyId_En>`RD*mOBQR$oYmh30%(Q*sW;4<aXzPzXv7aNy<
zFjZx5108f{2PY>86F*Jh@#>1-&2E`sbgamVEiJPLsI%kl;!7u|*gB7tt^NH7sHf<`
zW{tzy+uu*c!jfsfq#UNvFbKD$i;L41rzscg=q?y)8gvCvc!DK+>+Rd0-g(%}f4|@b
zxG+md>%W?w5~chuN=HY8F1<g%USIHIPM%#@(5NXDQWycoA?wi+7>FtJ5QYbRGCntM
z+<;Cwe*8-F9cXci;L(aK6Am^sG=zqBK`sc5)_YQ(`Kj7C_<0T8AHAIh{u&-$)>uZy
zXSkYYZ18!W-DGB#A7YK5ija})UkF(SAuzeHs|+xNpro@q+2hwJ8#q6Nf&%vy-fp%c
z`AE87D+~ydKYr8^G9Ld(%M3p){AgAal^5_S8C*zAwDVcv?2OIH5&YRSJPc`%`g3z3
zMPItQqS*D$LP|=u_m(4ZmA5SomPzyP2h+Tg^1pjsYdtmfjZB_J>qL!T>Pi#F)eK4H
zSlM1Y-QLd1-%x)#CXgFaabxwwvM@Eco<21{t35wpk(b9De%>Zue_nYJZ%*gz!ZTul
ztHEQ!#LSGjTx38+^$wnMjoR_TXY}msN?1@zrf~#bgWMR36e8$$q`#pLF1j5m;dqM?
zGvAjJ(N<MeC9|8p2anzB@^B)^>3(k}F7Cq<^M2tLaUa_Cd-q-~^-9C}Jv}uA#(aA%
zj9|OAV6B<Gy-@gNG%SGh`wXypD5xJEK*Ls<lw9PDkvk+)z_3B4Nyf&e7y5u;iKQV4
z<{BLv`%P}RoaZDl9PoD}lD<REZ#U4|D$my2px+szH#0-8o>f?+D@eT$(XI6l%zNOF
z&Q&ai#xXzwIsq610yzz<#6S)B!N#f`M|wp+i`dPhU^wN)eo9J|y)NUL$3<=jR8keK
zA~>;01m9q>Rg6J>nAbBSQOZ<Nre?k*eRwWaWc{;?^Ff&fsk+GaJ&o1yEjp&J<106W
zDJV9f+2v}s9rSrh#%I7;v_1xQA;edVyz5$UD}cY4q~+w8O0h5A-#ahMiG&|tZln#H
zbkF3`qg7aR)HHyXbX)Ao$$A*De14__u>F;3(cAlcVZ667nn(26*;rVbzFl0@RaWxC
znXOivXFHaRGPV;gTKTKagPoCatffVVi7F;j#Ky8aiXU53%Hu?J<ngIhzBhs)IKkh=
z<(RmwTO<8rE-8B?3C*D9>h>*1vH$i0usLL${<Cc@JX-FBz|w=YI~vA-tZ{=!nh`gB
zbYXe<T|JbFu%Q6y(X}b?G4XV*+foD#+T~Uw428cf4nH-QThhu)^^A*&5pmj>P}LeQ
zH8rowhuFb^%0e&oAxZVo4kjE;zkq;e4tuvVc^EN_AbvZ;qe8`4JqgowQ!jKVH#Z<)
zb$!AsSrZyE9?Z<lP(UtQiirVG{}r)}oE)C|oO1^Q^5Uw(ubA@w&rq&Ubad7Vh`Ec~
z+CmT>rlzL7@w;9(-!UY>-Ev0B5jzbk@Q<L=o&!=CY`59{baL*9kFtz6B`YC}aix?l
z@YzjYm^drfqxSZfEc>9@%4MlK5?L>#J}J0_h3g6WEKs>72|n$Z<SGBmn+#n`VNub`
zwK14K{DD=Njwl`@(&&a`1<DBgIXE>095H@4n}}Ikufn7v^>@%7qV6j^NYs0?Wz9KE
z2!Rr@zsD3dlTJ{OtZJnSj8}0C*_oIGxVfFX;tT<k1!c#BmM=CG(9pcI&lrJ|;$n98
zWtwgK;9#wfN||S>yZeTk=XUcK#9d&hK&D?_ikmjk(EW%g<qkDbH1LYQ&(}P^IGC`%
zJnoH^yq(&8NB`5C-`^u(7y@qk(0jsrIVqYJ3h>>d;dtVwh|9_4`T6nZWfbbT7-xor
z3_@3L^sB9)2rVK1HkHu6x~SzzPRhM{tKrLw-IUMD`W~}Eun-DjTTV|;t7~dJj%IRT
zrU8{!NUGH!is=2D=~9eTRAb$Ra))Nk;jdxS#qgv4KkEtzBY@Px#3;wKP|g3Nv^W{x
z?l*9CMJ-KfaY<Vc>&J5BfL;Rmv<MM5RO}b$ZUKIN7T+?J=b@Sl%zM1A<XAfmzNE@m
zlMu%)nC_h)7R(Tgpw<7_Sq5!?_1aEEYP#0Sl0U+Gn>Ob&_5WG5{AX?EG2M;IcuvQp
zNcSM7-64q+y6b1h7ESbFc3GJ#mRk^lA$nGPH(D4rLY#X|>(dnP<#cn^tn^<F@4q7*
zvS~{zDj;NyY)8>3>p*K@N={YCWZyr`AxB<(F|=z>aEy&JmIvvn!h@`SZ)^xyDA!Nc
z;1uX3g({C^hfTu>>jsa-?OQOf_k-R>)W_Xj%sBMipH$eSBqY!cfSqjR+~Hs3e@tK@
z<<ebNy^Kv)U{*;vL*?D0z@ym6Nak2`=q68$YR#FWYnmZ`8kWIu%g&BaRyG%!v1Vp;
zzgVvNKMtAJlud?CnwpAG`9-P?2J11(t9#&HDkzv7m6dZVJ$WL1V*<{?tHC8qE(MZ|
z=!a2vcXlAYB@Q+BRYOeBIzhd*!Lx<-uB#fSx)1h-73x^?v5BYI)A!R8Ow7%FUPkkA
z(89Z=9*{hKSNv57adlh$up;szYgDtOxm4!r@mFU{`ZrBA-p0&~DRAZbi~La|lABj=
zvO~kO9|!FxJTt=%`2^Ipjg`TyF@J>zi02FHH?uOVgjTX9THx9wDJhAbzT*2*qhb;R
z`GV9;iHf(y(&$01E`09}`^95ijR)C}k?$lnE^ZY1rltpL^<(2Y^2X4Pax61@0>d->
zMz8`%4TINWu(#K|FZE)88}{b%%F4SBi$8Ophl>^g{LwL%jT}&<WF#)R8qA+zKR8?&
zE_B-5SiuD0bI)S8;Os2^+WI;wj%Vo;GEqx+hrI>yfcJ(xI^|oyXAB5e!VHyAGw+e8
zJDTOTOn@IB>UyP54+W^GEc?@GiAReK6McLp?R%eS6yB!;DIc)PK4ciHSr)-dK@??H
zW+t?s0J6~5l5MdtIKTyFJKt!i2b%>Bmj`_g_pH7<teBP$sH&-r6dV^8JoP$#$x4TN
z^%FV9B_=`@!RZ~j$NfOfbEbiov5?AwT*$fHyq8TaJG8r9<!o;-_}6pVmZjf8)K7=S
zAWMo{gpY5tCF~h=!xK0RO_Y@d_p{~~7a>2rRI|_>2K|7EF)&f|RS2zz19oS@8h11q
zD$z)_GFo{}YEHQ)Y1;c^Wo7mf+t~kd%t25lD%PI|AQah;c3;ji@9usAzLtd8So$!?
z%`gG(u~}D~?>;EjqK7n2krf;b9dO~foy)vQi&oYjI>6g_U?xOHMs_-GUADa!{Zy}~
zw>MVrWT*4<l*eH$0Q`Z;tasHi9X3o$dyFhrvIAzI>_dF3u;@Pnl?$SiY8*z2&CW_n
zhnHtd%uPAB$p5YQ0yi-f0C$H)FbvKpS6Pp63=t=Nx(mfDV48!{N8dn(_ALOvHE|FH
zGfk(7O9S>Y%>%E^t~;?NWOgun=qY}5BRK!=5E4SZ88itXc{3-=H6uTN_Y;2#=<i!w
zTQPZB;FL7Rx|s5Gi^<CJOZCrpy*>lf5hMi`I#?)TXBM`Xo>)?|Xy|86-VwWt9_enR
z>X6c1^qi4@>esJ^*4ER-?q|dY2M739Kk11-EPG#$pXIsNKN?zCa7a-<oWUI#`I5yQ
zra%X)6%t0@9Xtx;(B{JS4hbRHnYyFz9>PG3+eb?K*zyb>DWJ$B61sXnFO(SPNV+8O
zxH+gITI7uSK@`~V$laa#R`IqTHBClVEUq*s=f5x$A%_R*JWKxR`MHOW_xO%`zklJl
z4Qn7nU_EpY6cTx99z3{i44xa9x<l5rmpXzRrBgAfI_fS|e@pQFeFKX8jT?S~POt9#
z{RE4@4Z_R8tmOyPRQNMCD?_&Fe^{Q-Hhe7EPLUpBaFfaLx9Tgg_j#%p?{abG2Ls|*
z*3;X=RrTjD1$M~t7+1(IjPc}5i#9?Ssy>Fd-r+HVS&YTeAL>##A^5Bp1K&ONNtU1%
zww+!3Sy%(N?=YtHGW!RQvDKgavc5;gIq<tJq7f-|5K7{)CQ1hFQ72$p52c_t3lm66
zY=|<4;tbNdC=9=fg<U;b8j7v&e@KTXb8$wb`NPGZIasmGfs2FV(T(2D{3-?!{$02@
z+!GcENiQ4i!Y7E-*oB_ppVFItVxZr-<z?sc^P3AMfF6GqCDnsJWwM5o0ZVT1SFIa}
zq@U<W$jRvdI#}ICL6OY^kCYi5suhW^lE0gr3IFM@<JQY{j}o%CBTP=dcO*UsZd_rw
z00!dupztUU59cbVs}BJy=q-}SybdaGq&Q?v^r-Ql<c*0h`W^{(WZYa_R@=m$^N<bm
z(I4=K>Vtso%r<USEYvyfPCT?3h6djreAxgCBD2|yff<-+iIeOc=NJfxoKE&gK+O&?
zE2gQ{i@A-dU!9%OE7%(QQglkmD~ms&`;<!Isnu1-jNHIU=}mHuj(nk}r6iFve*Kmd
zf8YYD)cg1EGZ9vSq_mMLYiKMqAYcN9{3@%RT~Poaz0;rn>j1v@oqp+*$@<HG&^|fC
z0?^cyyaNJ9!cv=Qs?4uvXJ-gRNZ#%5)Ns3cvnlcxHb#l&rly$jf)hFD@W67~14bg{
z&h2m<$XSA#hAAenW8Q7EyYaQA=D{ca%K+TKAdo?B(d&u_zFX)Vflb(&B>MzW&E%Wc
zV_cl8VM;m)stDum1Rf<(VaLg8QQVu5O9|1x?<ExyxQ}5Gey-&egsSx7taod-3wk-6
z;6i5kccv+b0Mg{nLH4DXz>Q7-HRun3Hb;;_Y}VY;(kTdL@MxqUMCNSz^86IkuAgfU
z1Uz}-A(!=P&MgJG284z<KXN@z{~2zxos%liJ8$*AF+C$Q(A>OSwUjO6^y(%iCS=z_
zFze+59-ifqO>|wws=dR*=I8nz`@+E#4~0Beay=3KLFpYPGE)BT&A}CcRu(`WO@q!?
zgR``B03Ho0jo${8E*cov*kYk96{f>->9gjbnSr4$TxwN@rdtC6Sm||f`~{jf;HWch
zy;b(*OXCsfzg~_OL(8k1SgKRll~DJKpOpz5acsI`iM);s)>_KKLn!sa7A_?9L<Tjo
zva(Jf;EIk0R^PX(*b~MKkmACY^uDB|1VK2o2bpsa80)2BjEYU_zSuPen}VVA6Gg>W
z{SA=Vp?|bib_~vIVj*W4kYqvgQ^6mfLTnPGHp)-S%bPa1t&Vq6I6W7;mLP!DQK3s1
zP@RK0N)VQ3y**2jtq>1!7p*Wc40->)w3y*U7bQ!K5DQLsl;M{kKRh_#_4oH5|NKr-
zMy9C4pY`4*<^NWh7S}@!HA``6=X6~9TAD6Tx1!>XynS;ky@o~W<^G7H^Cxc0@|L67
z+iexa9PIq}Dt=(pvUhnOnOj@y+Oetsn?;$U=t@&P^pt}{=TYX61xfUyP-$g#if}WS
ztSghL+mNW`$t9U$k6@0jeEO82=^B}jnO8T57;572J*u5qN{LlW<eiJv*9>e;>QEQJ
zj>&>v>XC#*KW+W3si`SjTU+87MJdT!Q6kykYM9#wWYs`WcAP@O$nfxRR~MEgZlj)_
zq;51QAcUw*KuVZu!0_Y^sDKHH@zPAW;{QHuH2nMv8<TPNOVsAwu4(i64;k3wQM0zw
zy*WaXlAh$UM=SVHMicnGVx1U|8Q?1Yq&_@kQ90kVlKZ*9FwZGZ7}xW7;VGENbm}i~
zqEO(A58;HE3@HgHTGYXso^?vF;&*b9E!RHKEdYb?Oin{X^6eZZ^H{QMjWT&9;IC2N
z(|y(X2w4UW1+Gm~07ZPgKO+Dx5*X>InQ%BJ@YL6yZn(ioNFD6f=J@7K0}iojeX5L)
zGkR9l_FQX_6~W!-4$bTKy}~1<ru|{hq2(V{FMn>ErA|fl1FpwEPUJ=1?$gu5DZW};
zDT_RF9Dl`eHlnDAtJf|}ZcNr7(;GBU&o*i{>yH=v{k({ga=?r86vE+L5R<}}4F!iA
zn8;v^r<io&kjQ&2@4Zx~UvV(*(SSTVM1gLPmdq&$^+RN<Rp@8r3rI-t<hou5Sw>CF
zzrTIa=QPZXH3^`4ho7*+q!cu^sAvJt>peXn)LFH+s`?KAL?LbJlaLD&H+O-4J-x8d
zuRCmKa#u$U9?wml{!Rp>RjEUz?m%je-O2W|+)_;i#H5U{GFA06)DKHyRnl90YD4jd
zo%Zu%Rji0dI}z0he@xZ0U^bH;6L*Io+SJB|{i?ATNJ{huPagRuGb2Io3GNu(p=)wk
zT+GbRJg}^i)vGr6|Jw_&v|RQ^cw3eKy``!vEi5g8k?+;oX!?efy?r!vH3pm^3$b+L
zuGSNPxPGx5JP5!6nglr-Hq%N59`kM^PA49?Q_1x_kE`r96%ch7AAt|~_3J})D|h1m
z)cBA-llks3c&yJj+(DSKS+7qw3E{&KJeY1Xoh<C?fX4$?Kbi+-3YOzTo)>2}pueY$
zBuNn=$HVP&{nK|1DR%`6Hk4fbQ{LqlD^6;#EdoOLOL>>w;l_DpX4Hod2kE6S7^tkQ
z+}qh9RFC~bcyrt5npNNaVS>Ds`qx5aK$v4-=(iz|8#%aHwbQ4ZVOBguX@K&-NUH?$
zRVsA_y;QniBO;TNXXfXDuk5ctOhB-@Fnsp2P!J5Vt<|tyf@a`}aSZ7H!KLEt>S__1
z!nZkTXC1@@=Xdb?y64f40A)|&<n$D^p*s7F^`F+CAk>jFO%4iDz#Vo$UWm8|;GIO=
zgPy!z&6~O9oYq)(^!SeH>5-9<r5)3##WN^>EzHdmqoRDhN1?U3Ix|B=Mpkb<;_2Hm
zD`ph_o?JYW1ayda_dKaVg)#^fzpnlggy>m$d8p$mFOcexx>)(x_pnO)9_IZR{Qmt-
zXUuu9pP7kCGC#pP?zm5%f`<YmA@Y5r@QdECmiQ1(ZSAutEZ;1#VZ3Oma-YMA^4!L+
zwlpw$fw98-())VnTa8MfMS5?QDHc&<+Nr2c1JS(V;-DH@3+V-PEb>}IK>vQ~e=asW
z;KiH;Nu$xpe_G4{INaVwhXJ#A4@lbKcw7F(ude)(AxDkG@)Xp!UF|A2(@*}HV5-#G
zc3wqZDD$dAv8q&aC3K4l&|jk%Sy|}_eX#%i=waz}S+C;bmdMUB&l5{O&~0_atHE%{
z`)i;;BEv=sYOdw?w^N_%PQDcu?(Zzr%dSH;N-9Jx3oLz$>AFU+Co@$QsAQnhFw@ay
zAr)_r=xAw;|Czx>6NL^Ca)_yNBR<})X#^fuI;DFdALro7<0v)nEqeTT-GpnbD_)7_
zS-M<MFpwyBe9<$c!tdeZ*&0G(eELIPV;(4T`3xSV{O~!==M#hmvir@83r~w{+IQr&
zza8Cy)+e+E{QOa=UQ<^DSFfb$1qn#yV5H^d%IfH3XJu7w@R+9SL;zPmI{Kxxb@SDX
z!!;^CK1f<3;UjyRCJ`Q<<6KK2paaE72cg^Cmv%jC#^Y2`;Nd9flu#NG{cwFuAM(d|
z1~d2CT8O-ScDFngBS(Evb}*xj7e)pDZ4aY#ew3F`#6-6YumAehIqGihH=+8|S7QW9
z4*UBrb49e(hnlaW1$VeIP*MBIjoA%k_G?jCdMk-&rzU(A4|qg~nq@e24{w0O0KSH9
zz7V{rwY3+&CUxQLgIHHM!~zfd7eDda82qd9oJR81U9NeRe<h+`PW{p~PD=Wekaok#
z=}ztqbxJ%;dIjR3!`b!q_!RxOgiNgE8_M%Rn4GhU!7?#??d*iEh9;DES^RQpEmr9i
z!X$N5=NL2mq05n*yNp=ENEg6*##lM*>XE2|d}e$y#WD9WZ_ae{iAoSLF)%<gLVDhM
zY~UFwd(s(WmDlBu{Z&3#t4zYR;2LrW12fup809SWUeYljST8=rW}<`B_h`aqm0h<w
zSlxfylzf2FFWq#xBsCS+v^_5FA>@uV$qaM%^mJFh!6s;a*Vo*vO{!VX!x!xK(CVZA
z%a@mH3>w3e2*N4ly+N4<PEM_IBQP5e46d!+b-&r(o;xrI?ZMz3gNkk2ToEPc90R;k
zJo+}H%Fs2$oTR7)zNaqXN=<Tr0ZEF=p3}+uKU1nGUw?Wo-4VDUmMasNR44-?r!QX&
zlRm6a4xy^44q#&iS87;hTnPqTAuCQr7p1>#YD$r3Co4Ai)s_K};<Kz^j2$wX(ZRny
zek?D|2ok2v+QV?LMC;bMgH+%;?7<|^kPoHc{v$ht1I>yW$JHVbboIhG$u3DM5kh*P
zb48}}sCK(A%^0*ez9lr$ig!iav8pyUy;7*ii)doy`U!6+*lZFZu344)bZM`=t6h1R
zS1`wjqN3tZA0};saUC26G3}vQ+ttvU&O5XXc8T}_;*u3H%BF-*Ux(+{bX5v*d2n<I
zc7D+%eY4^xSQ+nR@DzgdP)RFkM>5fOzw;YLT8v-iIgT1fcL=?R2U&1-HrI=I798ZB
zIyH009A+NsGeg(Ya&p|NqVZuLzJ9&&-StyBr3jZyN?+r+hK2yx${Q(G-a$g-8r0Qy
z&E^m-gM-(-5LF<C-UC-EIJyTc>_>{uy-p__2(QC_A>{DqpXI3jIuEyUtA#R{^TGX8
z-c0m-XX`b<Y{YLy$+`PE)8kOg60@+eJw7A?yX*ryU=2@qbmRp;6<zUDCo9<CMtI-Q
zPT<a+6i6$2ha28Z|DI^!5z5KX(DUVxI}#NbWb_xb(6t726$eYp4ka|bHPGgZpdiuM
zYr%(|N4ZJ72ooE-L1nMhv>t-w!L;EH!LvY#_nPsu3`{uOXr`o1?+c*#DtcmZflv_#
z#j7e@e*&nJrF@!YOZ(c|lylY7IT(ij!Mn9N>Gped0)K8huZ2b2e=k<xTmOf+I2Om|
zrv*U=`HjF}cKxG_@e?=bAD7!R$g2QMms+jnY5`Gn-p!|vr(>u=Ar#nXHP?-bS_uGG
zDBib=i*G@L8|=n^h8QJ=t_2I>dFl?`XX$BGi5s3ezw01;tQL)KyA>wQh|PtoS{ON-
z^0<U9{7Td8u{u?|8+_YZ<#T@Dz8V{wVz1DHYwysu(F6KCJqt6f3^%7H;q{QmkS&(a
z_}rjUI3E+QSywSOS*4+o!eE`pqxQtfIc2nprppT_bX0*iSTU|i%i}yRwr3Y01Q@Qt
zcllmrwy@-367skojPb1~-C;SBh{Em%t}r$;{J!6lg=>T^&jz89{yxW9O~#dgE|lqz
zxBz<VaSQ8TmY@;NPV-~dcntdFQw1OukxNh#9#$IS%@xwpD#JqyX%rK5{;3mDjLzli
zXQsT#9{uivRZ{tqIvWNQ=6~nyY>>Q@s?0DjxS;VOIFJbj$~`SD`1S5jPaJGF+9WFS
zD-Vn;i;j*mG1iZEm%Mx^1BjtV&DQ&|<LwH~?O@RC35Bse%Y4>Lvur7wOl#isTvnEG
zcoOY?>Ghv-!z7`lGJ3hXX)!mf-=`y17)6LckQX-PnnzYC00KH%K7Mz9uTR$aDO6T*
zkrl+ZpO-w++9#LJYM5+9+^UI3&3$hmi*&G9wIC;uG?H0S2?@AiLxT}0t-LE9o-ujz
zp>g@B8#gH<+qsjiLK$OQte!F`X!4<aGI3$Ot3}rtLZthwwLE&0JxY28S$Ym3w(h;a
zj#J+l7&%8}me8?yY1%-_+5;;U{!*FzadjhrKPK}ZaUvd%YIME-holZ=@*kbr$ld~?
z$hH#i32U<-u}Z7PLqLHLnVB=gh5>56|69lW=j(uG<ZDXMQepTz-!z|?rN?RZLrZ7N
ze?%#9*4f@3-B|{l{g*EaOu3BzUwY<<#oVRu3e6c2jzZWNlh>(k)s&Umffxo3EUPL>
zIu&g3vj?0JGra=?LJ+xo`voTE12Zw?xpRl>!Gc`Yz>gn5QeYA|>6mXfMj7T?;pbp`
z@*)KPeN1{rtn&v=(G%-_OWLe)13kUEjEw7pl*3O(xk@}{`7mGP3&qF7M_%!R{vrfV
zfUCBS6-3n#1Ims_est^ZkY?8(Hq;7c*WkNfxu3tN*<!#>uBLtdQu2jA;?zOT2~pj)
zppC%BNU!eh>7f%5X$MnXU!OAaelbh{gcm5C`QNO8NunlI0Eb^$s0ghk>yp1NX(EH$
zLfxIgb)yJz+JWQSyzm(268zRa>W7BR&6P|qON4BZ60AL1QBkkKY;xEQ8{XE}Z^Hhf
zprF8^m)15}YPtly!v84<Ga~*+iC_jN?qe9(LUG8;!xNDp;JEU_`KUcADhk9%I@;O@
zqW)^feBj8;jwZHp?E6VwQ;tT>Fp_w^dlG@_$CeXH<TM`fzYPssej>+#%l+U=fmmW*
zmz_A02Xw71bl{PYCZwSMtW^T3UoH*4Dqsx=3jA8^xcW-P-BnjgYVqPc0NOL}{y1;y
zb+v>|WWHh3`-T)Y{Qmt0jD9ziKoFU$gJNe4eMME((o_K(OJ|iS`w}(*eFx=<^rM_)
z)N95om`O~&FsT617G)kzaiLL&DJ62)D=gNJ^R63uzm0HYa2wC18_(4^8H0Eo2GeA!
z6}S~Y;0wYg8PHG2g2XdDy<}n;Sy@4QIx$kDLvdqL5atWmjnM0B3(hl!V&57VZhLzQ
z($abe4IE0`Wahe$ea(w1XM-|6`&nXIij-0B^R%n7T~Q{OzC451ANX8c{2|3l4+0_a
zaeqVOI@N(yL!s-spBR+}CY7KdTD=@SeU6+`5_0stvB8EQl52#)*1_7CBx%dL;Mk|T
zqodBlYWDW_RYLO0=XkMtdrrcSL$PlM?TEIH#Bwt@2$`zm4)gtb1*=jfe7t<yZ7FF)
zNaz=sW=`Ab^}&xt8_Z5g*c_WL<8|xS8#v}QleC`h1X$ipfdV_<$s?y<7W`-B<=l7F
zr%jlG1>(@Ro%hP`CBYcf!T1CNc2$CdcVJ$)n(L&yvWbeq*=f}F;o=B<<V#bv0p30n
zF3w*Q;^V1MNQntGv@tL-@s2+n!XQTOB}zbRQBlv~hOotCbu>3BkJNBJKR*Ua1K3tk
zhQ-Y{Z|f>CBt2##)$%L01D!m#VS~h#NkRRR_4!w4INWZ&fI`C7HYg@Wvew7d)fIq$
zhTj}Y|G;z?oV?H0a~N-+eVGRC2k1m1IKTu1rs9;UnZ@pjmX;P?-k;tpY3cUT6nD^9
zAx!F|5Z4F?Bp&(PV7<T)f+Uv{=@3q?JmrclXy7o^xVgIi{gmU#11y^P@^GVOR~Z#V
zG>KfM1q>@4iU()AN}mBk0xFnb2t;`T^>J1$rVsR*K{L#zU5YQ=(-v9l=2Y*v`hE|h
zQ%1%s_swx`?vG?pr@f@P<qOxYIFLYZr=Gky`@{Ef?L}4J7^DLtGi~3jlm7ka6A64y
zmm~Fhow`^QB>(LNbVb3?1tLUTM0o`TCt~$I6}9gxF_8t&ZkQ0kamf<~3m*jA$t%lS
zGfMD0i_%M{CET;Kj|Po0vIy~BVI3x4S$#@5w8WSJ>Rj;^D3-NrT{Ygkp}T<54Y|tQ
z8_ZFtS98A=FtN+;Ls6uf=331h3)0}0J=k2te)J6v>MDCwa)0~t*|YzW#~0MdDGzN2
z;N9@pOx170w{?ksV!uAV4@0S%YS*t{zxKv$zW`E#RI-3$$3)G-Oyi7Nj>tMRs`cwH
z;uLr~aYR{eVXprA<`Qx^<#st2F8ZUGyH10-{sv}Uls_cI_cws}T*7u!Y1*@ffrDdo
zs?O5FViZiUoi8!U+)tLzK-_FpSnLXN8KSF0Mqss%Y6~oacoIB{m$jjAv2>sMrZna8
z1;O&38`1g*d{@FoO)_Wy>>e-ef}W%PV*j4!^W*K-W`@4j=4OwrAD_Uj^0lUhUAxp_
zXPyyA_pL0@r*T=Y7y-4sko}@Pm_Axz(4`T343AjHLikDyY|9o@^z>+raG5`AA+xDF
zSz(458lV>|ltj<F;veLI*EKhbaej)uPHU^z>tb+t_&Cw#0?>WM&@qiUSw)_^$dgxv
z^-IztyGYco?n^t0XeJ`8{&6rmLSlriqhs?RNXFAaY`34AgIagINJb3y)Klo24Gs=+
zE`Y=E1{&Js!Gsm;P~gmmArH(6t@Jy<Gz>ulgAf6U1=c}Nz$LVXQ%F;?<TFYP9`A}K
z3La*Rm6^|2B2B~&f53{E4Sl_<(hsKG3YYJc9kUsB64mM5*DJ>IwuRje{!!7scdr|?
zM#Ok{kT4$xdIJ)&PIY!aUtgK)kjs11#@2Ql3IYgfWv@T`=wMD<fMYcE!zZAey<vR3
zqe<dmIcFEn(Km}-+M$mtyLx-s^K(Iw|9e>9OV<NX7#cJ%aKpR$IVBtuFFsQtbGIF`
z8SH+4b4hW(IKDIBocVazcmbvce*ded>yD>-|Nq@9vWl|ziVzvuqK?Q6ha*zPF_InG
zWFOh1>_X=l9V06vu2E)Dw{VP>EfGRwcYd#P-0$z79v(f8kMntd-k;a|HJ&5JFJy1o
zACmK+%^+MD@y}uvh$!k&l(hxXC6xMqJ=@*%fZ)mY3+4e380>+$4i=Rr>BHmc!0Oiy
z4pz;${+wjx#7z2YsK%-9hI{T5rBi^0og3$k8TNhT=kDT&72mC5Tp6pel25!;EY2|P
z1*07bstcGdizdM-AZ&uc5`c5wzyx#BS+k3Nd8pq()&Ne|2<5x9X%jFb0m?5nXn1`5
zPY33<^Y-GfYuOsft3<}GtE#=SOL{SNPJxA+JNhcgdlU9UR!>)Nud1>#`5}~b-l2AK
zb1Oo9%gKIyRGxFYXRS3WgN8>!Q=<frKEd)GdyQB&$Ek4~i9}LI12YgDLVSGOcBd1<
zQj(L!{VTJxv+G@nPlG-cYJ<e!tJPH@FmeKh?*!<Wz(}BYcW;6SVNEKL<NOJhZs^8-
zo0}`OUWBG7G-r`7H-7!P(YDVv93U}Aic%h5d%A#^?bmem<JcHIpE_u(&Vz+|#nngQ
zU`+A8fcO!*E6_?3g~TKlZ}?z6+~5|FYHj)5P^(EZ!E7$`EP6%WHBS#Zqu+|)ZlSTl
zqfdJXnt|(}Zg5KLFNvb<nogLL7@wB#uY?gAv}~<5*-oAW-9>ZMly%qvUw*!|O<3!l
z{q40m1+dzj<qNy{xS*i%);muC@Pj8Fez6!s*RF9T@BBQ8Ds^`An9vTex`C|@NPJ)w
ze5tarvC6e<-Z*2hv-JGD%;?sH)Su~u_c`R)x2VJ&23){fj*h_FrgPz5wVL5ll$RHi
zzlU}R|8Y4g_no5!H>>3hXU1I73_VFHAz>Ie13ZsZMfAxkHlo^zT`wby;@b1CTM7V0
zn}dS`Hk^uK!Q;nElau_%K`hnyTo#|&uG2&jEe1!}yZi+N!S3ed<SdLctK+w~11c;e
zL-S6PSWu0PG9YI2#|q|k=8m1LDgKOZS_=#7;tE=t8BqscdrH2m56rEsJ5G`4_by&i
zJ&9!4iZU$*2sGBlLQpl@xrm=vR6GyLyiKiY5`F?Dy4y*)s`)=xepNraf#k3F@Y{w|
zXM8#vJvbb-=>O>DDo{mz#ZG1RL4~>{w+$E<Fu0opQ;(Xirn?tUFfj042&mpY>iAXi
z!`H7?LdP>dGq=&3o12rd9k?Kb%2Dl_*JESU$`QUDF~=vQ+8jehO#-VcXwhD2)zYu6
z2=o%v3FWsr301jx#u34$3qK&{LvPX^8k#97TQG~C2$(5w+?2Ppzl!v=$E4!dY~i1_
z@~^EHWz+)VPjs?##2Txm!EH3-P2vtySX9JM^ZzGoUPtRcgcWzDu{EiBF3O{QQCcbJ
zxh}eX6XE(n(`Pd@R!)>MKHkGSsDe>p^^#5!6NLbB28tcj#PF`QgkwjfT`VS0YdugZ
zo(j&#k+Cs$<cDgDra2`u5!7tl_hVOAN;pqD#YJjh*<z@)?!_xKo~6HY@3xDCcor4L
zngV@wLspL*NECIC4JnoNV3m34=&lyUisBKehb47}DxJa+15c6Qu~)y)0NK17w^^^N
zqi=5W&{9hK2Qzgs1E%<H8QWn?9HVpp+n_)+ss_#PCap&${dN9S%H7ltjU;Z~+%b&`
z(NLKwN!8M}mn2*c87U;L$-<sZ#g(nc$699hC{!`7*)Q7?a?)#~uU}UWHZBq7W@c(s
z7fv>qxz$8|W`QHejFv$_=W^%x>As(*O&62Qw{G~U@0YveV(_R>o(kl<(OmSQ1!M33
z`g)ckL-vpDWsCGWuf@C9FSbgOPcC^XatAE7H#&Oufp5nmoo6DZNYyQ8Ox^6W_#yiZ
z+2phA$Sllu_wLYRZY}75E@tN8uIS{X_HLoXHy<VC=Jr)P)?PS7<Ox|(U`5;164EJP
z&><!k58KhI&mTl-R07v$F?2{c$$(Fo+CRtc?Cksz%p6%ITVSWMv9gXd*SCK-&aj~y
zMNq3tON*$l$0RFqkx@{Bag~ZC=8hT*+n>9NjQ4gP!wU*WJGf!pgTx=Sf`HNn^Zc7P
zZ>};|k>Fm;X(03D_T>ey5s-eAy{0vRB>L4nMhCTc>yX-adO)5rzE{RTWoaa||6kx_
zgzYUif>s1ftzbL^FENZX+u0Z6O@yv=15p-6G0V%#kfi=T*qUhH7}O`hHBbELFwjXs
zt^DtjJ`B-iOHU6n^MF1Cyl{lDw1fn`@+#1gNX(8imnBfF{r~>kV;X%0GPt+i+pAM>
zl-}DI&;}j~n~Lob{#Wn9$-%c49$WFP_6OQi;G$Fj0}_xW0M<`dX67{)W(hMxnWmc_
z0F9iQlJNnz+4es{v#-;d-}XyiBA>h{W!Pdop8M5y-SJ@F^)H-rph1A&j*EY22W+)-
zxJgJiJ!d<CE10RucI{AN1490(z9t6jIcLV9Cm{0y3Q!FII_WD$u)GEQrj{IrYM>(d
zEI;Y{!Dl1uC_B8PG6@5>0W|>+5h{QHaI;KIq(?g5K6=#`6iVLVysSKo-W!m&g(eE=
zm@jMT(e+@L4g=x}VQ}+62OiPqOxMX_gpU$vFejeItbZA}k}#o4&Zy?nd8zA*5VJ3r
z+%P7kZ{JJ3bN~}(e;+qLIJL#|#Vk*8YCf0Ec>|<!m@X#D)qc4gb}OofYT`v&8W!f{
zO--dfip)^RK`Dn6i>R)Uiv{jN6AU4Mg#zVZ&RZowA$+VYhQtT9B98OPbtx$+iD^hU
zYU}DyNu&9@*)&`%Zkc+H)`rP~Vq(LCgFr!#<~l<9dTGf%&+wDgs%OjbbjHvLYG@dN
z{w=p3alKy(fk40pYMwyjG(Jdh_6k<>CuN+}?5^gqbL~=ylVrlUx)p!9Kwe0nA`WVO
zwd_onD14`qiV8c&!F3b>FP;G`{N_2fVX7qilNPBT&}#kn;y9&AFD00<*F5v)B1?@7
zcH8`ozJ7lI4iC7i;9#!JG_a4<Mu;dYUk?sk?Y4vbU)Y9}570@qglkJaFZ7c5o33M8
z&e~3-=m88CVB~9-LS}_(7HRE3Um)ukOwhh9)*}+ZnKibt(ZA_TLYwgtobVDkGza_p
zz;lkTe%eY&z6|>>{LL}F8YtN3Ml{I5v+^PZHnYva`|dBG>dTjampwG~;xw>~%?Jqs
z`@@`^9YAq-QwXp|P@=tXU3vgx6h_}L6aUrp7kOlxQNB+LPXi4Y9)nvFYGyo6AiUJN
z{f%j7uHg>o2JnS$|HYy~pc(E3y$j%NkuT+3t(3$9ly`Dy{31<W*1k<qMwg}_<8-h0
z{tn876(5@DRd{iQSOu8?KA2FJhG)d3!9ZpCm)%JV#u5qFza{IhB9a&y%ofV$smQNU
zQJ&!_W2Q=?5=57$!9RIKPsL9&X`8Vz>9KVD?-q(HsgR{E-a=D(3~?@5*1r*?hGT57
z3{v>J>mw=JXq9VYeR?q}8kjrZ-sZ3y`$|8Auy!f7`l&sg<+X4vjWXXaW3evz<6Elm
zi}H!&U-VZU-R#*ACS@Q{H?pIiP%hYMti6chKvBa9ZtQ_!On4btt%N|GnVRRIh!UZs
zY#F6QUhNFM-)dx2Pf5B^3i(1_y?;gNWdXA*4`9N>Kee!Qn+Y_<uGIa@C@Q!_u7Z2B
z=foetmEcE?QUCyE6S#MJmDo&0oD~A`3hEGGe~QHV49&`Xb^WSYBsKOEwf6-7H|Z8J
zhqu_9hI*la?=uHcu?KG)SdK^Y=PAVtPJydixxQzrMKmPpsS0*ouR;HNa`FVoymxE^
zKnk)E>!x*cEW@@1h##0KDyD!y-%(1+Mwhw9fVGsle|>=f232H>|Ihp<R}6M_WfjfE
zV)3`o?L(gK5vsDt<1^L<D4L)zUYge<jI+*eL`FqHlLh$?6U%*r*!9VWM(S~>>nmLr
zns#;_P(Fdt87QxNz>E;w^k92`8XJSE^&mk?eW)$J`BH{AAQZq_Ecg6;)Ojbv<%xFB
z*Qo-}o!WnQv(eSP5BM>%Oe$~zw-m{FcA=32!p0fx(O~aWX>GRco#RidKK<?QfXnS|
z&BmYFsGrfHp9mw~TQ=o)M5m36WNJuy39wUeA2~wzSXUE)LLZq!oECL;b=~}PQNP2|
zW4vVtPKQOIHResV(<*gLphsO-`~3N3ffbOZg0=FwdzVYr;SPjv=t3DQgYhFGsRs1(
zvX?+JD~!0O51KW<A&w6$Riith$aVAd1U29Dki}n00zGM`i+fAI-Wmh~qC}3>Yx~Z&
zHs8C0srx^j-e#|WBKgXS!kx+R&yAj8!~+IEtNnmfL6rU5{5(_}luXb`Z*XP%J~<f<
zq?}pN#8>mMi$9Vo%rdT3Nl3LhnTg&w$J&YtZs*QQIkUa7+4Q~(3qj@xO?g3Rk6oNc
zJ7t}_U9}MwPr|0tZQ0@UK8z+8n$&zY#DfT_+O@x%UPGMdUmDbk67D5}IWKtHX+3rw
zZ)wW>IPe1a$Cj46u<nd>GQgFECSRqAqb!Uu;tL_0$N@8M;G^&TZ2vK7OZ@i8b4qxD
zH%?6K4Uohv!LDw|$Ve;yF)+SBrb9l{``cTNkaRq4Sqis`kEq@g=!r0PD_W)Z&kY7J
zpBV@Mw>4W^{!d-mVx}VPs~rZ2Bo+nUeHU9dw{+mX#o|kBQx0FSGmpFg(}ez#5GRgk
zS4|d`XIu=Oo*S#NPfL)HJbT?9A(Gw~W!WsQHA9`mqZ$)>u-OqF?gyeQ2T<+nTc3mO
zm7YOE=s`2UNvA%05<l0wns1teOXQyWyR%g-EgoNqs~>^g;rf;r{N|>n(C!CW$p)Y6
zoP}CZBh7(<_1PB!WvNz`Y+oKhBxP(|OpS}9?{s$Nh>R^OsH=ik<R|ttY)8&c@^);S
ziKX=wFAQzN%Sk)-G0zHXYiloSX-Il}dEo_ns&>UA<<>xegTpKU?F5B{+V;I83hjp)
z$Af~WyWYfxEt=ZNe`+{>2aGfGfxxSOU<Q=jQe13MNn@kpI<_a0o97YC#c!VmWQW6o
zFao8pu;jk5#C-ld)4t||j10+Gyb4;Xvn@u=(6=Gcx>9`_>K*$RY)od6bu-zyi|)N?
z=}gr1=5)xm;JFNQW?D>AQWBnddF%0|=THoQLPK=5qJ7T>l#*>*<Np9LxjA4Bx2yMU
zUWo6{j@RvU?vqc<I*UVH0I=lUbhFSi8;=*g;P;&oCnMt-pvPI%dh$^Y(6lKps;NCB
z(wsEoTe2DJudYI;JPhR<HYW#@cax-GQpTfg##@1*#Zrl}wZZ`bjC*iZ1hBA1)d&7u
ztr?qp^>-Eq9n089K!gBE7+tjSaN>iyKbD=3Pf86&b>X7!?)}g;WDBVv?vDOb_QsfZ
zA1ZTWL!iv3UHjI7(axJlZ_yVJ64Y(i14;svjeQPUM4B}R7TjXE8r>e-Z`mc+v6&5T
znO0iT1AIw(fMveD1Dod}h2OK8?QGAa+^6S|wd;z71_buWnT=PUK5^>0K~v~PgWJyD
zgbmm*HUZ`ka#%==b5ysOT9~=HE80X%OAM^r_OsBPR}3C2{Z;O@@m&UaQeAx<wC3em
z<wBIkdt(U%0(is7OG>(Lt>g_J<x%k&YYkQu#1$0qu@>dl__|&U5e7O<xA@M^4y{W?
z(LIx0v)b)2AuYobF1w=nH*y}CuSdHGnq=kWMG@&RqH^*XIk~L9&q^jHv?<|kTzW`%
z<6_%8P{DW&H#Q7v4FDw}37NIEwNZQH`aV$S#wR9fKEEB(8FLY!0_#)v`HpjM6SzEE
zhD(x&Fh-O!q&-ee4U6C#>(u_I`P19CAt2nPNeO#n`LkzxTK{uE)GrSi%?AfHSTwHq
zOIQW@PIXl69~^)w?rLGmH%No^<+BP4XD<F(+Xeq#SWI!emuX(9Nyuj8^|gCayZ{vG
z?dh30N#vTFXRFROC{kVUKC+}*c0j$y{99tlYItn|8?7pv#_J^|QWl*%;gx&)ad2tP
zeP-yG9kvphRh$i;$o!XggWlL0%wwRMz|{h;0qK63Gh}nv{HdX2b7|B@ObsXGr~x!A
z%EQ`E)Kd?e3~G6bKPO;F2^lWWW&)S*{$wf`$~Y8{w_U*+>*NjHzO)I4Atb8;c#l|e
zpFyngS8;T-gQB7n)|??hSM`KKB5>^8xB|M~r*~J;3J&Jg9kb8sXy4z?;z$`JVuD&8
zw4opzZ;+30!fJBi53$0zTv<m@1)BrzQ9-~oP5Q#n&>EM4A;$93qE;w`;~g+MMRI|M
za`bNbHZ{oI^yO|rQVClx3_6QYC4f#hbmR*_I>WN5(xYy+*<^^HosCH|CCoq7&wN3a
z%8hG#f|^LfqAn7vbBrnleNi^VU^5I29SmB?CxSZ2+at8M)B$6BPj*uV8e)7Qs}W62
z%C)9;cDS48Muk}gX$1|yz6tPFw%QO+D}5?UHe!Y+8hY3_BML$-*CD+Fw{sXumYP?c
z0mVtw%>J;;f&cx*bju3HvI{7ogI=NI<<_S(QB=cW0fXTiL^~#VTnP!H%DvL9nPGfG
zH94OGD_0$`HVvn$h>{Y!t`sEFNQw6Bjo?J)z*lwIQBf4$p!nI<58Y9aLUNr|<Dr<c
z88>q-Fu(fe$L0F+b4NASM)Pp9$(J?fOo(B~dj?lYF^`3GUSMPVxm&F+<JXw$UxDxu
zC?@@c*Hv9z9k7Uc#iwc*jkMO3Ghau@=FsZ{BZMj+)H`mi&%VJk#h;Qf(%-k|FESZU
zyM*r`2E>-(&+SwE%ael_Cq+|@cS}ktlpO>Dy_1u+GscHLT4VY2AZWv2cl|-zV|#lW
zj@iVz+FEF6y1)<xCgzZg5sVmF=%Z2cW2<)dOiN1@KMcuZH^H(;eLqnpy2#Pi{~&fy
zkl5ksY#g&c;8kpIbhGw9OCZ;PH*>cHB<cz9M6yA9&obk}pAqZ&vyCO@3lu>j5m!!-
zP-m|sBgmh<Ks9F=QRrf7`fzFKG3-!mC!!&f#%JNQ_SWyf7e>P9v+w%)dRY74MIBxm
zdJ;e>Ie-2k=&>cOaZ)t5phg5YhEYukPaxm{G|9V)m&^ziM0)U}ST>3t=xb=yqRvRT
zPS*kt{_|)}DXnA{C)a;{jK;&^kaxyJX=1?5({<I-P>9E+7}Zuw_sTRH+^SHIAUGMk
z`D^&-bk#xMcN6-Gwnzba_Az{VUkkK6)^c#*C}Wy=j67uVLFw@mUVBe_?TV{=5tx-h
z6E!EdEMU8Ob!}OVPb_er2K!mkCO7@XW=LFG*a?>$t#lsd97ay@kmta;hndRA2y0BY
z#o_lKOf!VJ0p8S6gF9pf;82rOGfEa7CkXj8{YieGv=_aPX}r2Lc1L&Z{S%8OE5NCd
zYEP9sLyim`z`C%q>h(?tQ(*A{?#6}pmODQQ*_9gACl<vZcD*?$$=_BSyK%{4o%YhO
z=`echay`?P@_d?di!&0N&P_9==*cZIpcSRef@jnt{F5Z6Y_eZZWFMAu6z&vJnRwPV
zIEQ%k^1r?UXQ7C2b86acsZ*ItdZ_*ljYgfGL%9G=)Wg1ZnO46~Ou5PEirI9_+{3nw
zV5_K#W1YB`2J-g~ZqeT7slBX2AX)!579THuO`yW=Lb>r?vs5y<YKs-0LOzvMVWp{W
zDMNBeG^%nW`PHQi<R7{I-?J_|YUOEQ)ASUlDSr0jW#>};iVah8fiE~XP!M6PFJqj=
ztLa;D+~tku+z5@9)*yeB;Ngn-v9vK@iwJtQ*Xt3>PDzWQ9cRu%hDBOT-h+!EC{83w
jsB@*k4^*T)o#Ke(ovq|4g=gXLKSy-63^gk?Y$N{<-&^V+

literal 0
HcmV?d00001

diff --git a/screenshot-10-after-exclude-notes.png b/screenshot-10-after-exclude-notes.png
new file mode 100644
index 0000000000000000000000000000000000000000..7d944fd02a345a45c44a66d07e8aa9ca5a958503
GIT binary patch
literal 109855
zcmeEu^;cD0+pbD?cO%lFlyrA@Bi$g4G}7HA-Q6Ia(%mJYbazQ}rqA=e?>EjLaDF>`
z;25%zz1Es>-&ajT739Q`;PK&Ky?TWtDIuct>J?-)_+tb62D~%8NoVou73wQV5kVE#
z^rH+Y9n3M3{@@er*RT5oFh$X-2@qPr%d2AH1iZSiTe%elt<efvUnYL7xxeJCpS|<`
zJ>hjy_mLaCS{=D3c<Sng6%`dDNG~Y(_&RoW3L{8i{r-Mk(1!izudsfD@iC+n|Gp2t
z$@~A`4CYbSl~eF#_K8(<^d}^w#KFJ)cX&d0BzRK$0wAHFpprN*^bJfqCY4ALpw>Oq
zMgM5SueX#-%()&;+rvxANT;De3ZjB95n?iSc1BiKR%T{eF0LR}vUpemEG!c?HdO`&
zhIa*5k*cG0fhj3M(g>RGVB1gW+B!;54YE-ydx$+1CaDMEx5E+O%$D$F7)8XzgM)()
z4-T0BnL#j9rUEqqK|xT^&{h@}2L}hmrKQFtL-EQ2H6o%pcqHq`$9Y9X{@s$&HCyN1
zqZ&B{8RhOlXAd5Mu)5f#LqcpDJ>S2Xq0UU|E84@S;9Nf39NVt8*!=JdtSArT;9kgJ
zvvN^U!F&kk@w`=#pCHxicsx0=&F{gX*9bXNE|M!s6_St`EK{$7c=JXB-_D^_-%LGe
zD2-k!>EAUbfWXJW0m<Ns5$}0_-*V<6f#jfoOpTNPCk4HYfr%Mcx)2N-l9Y_V0uh+R
zSSy7}OHlWo=m#<4g4$Qo(PSnATYGwCLN2E!pO@DkZGV+37r87{>UMhG)!MD+D&~pR
zbt2ObPvs3%Bd+hb6gX_t4nz@|iCnD2bp1P34wx(BVG$9`?CeTv<4bVd4vf@z2`HXK
z399fHK{%ATiUzf;I9l#Qw1VcJxa5iyJRu=-<k~_t+bSxvAvZCZ>pKUcNl=J+dV71f
z&NszdU5<4+JWE<1=*-M^Gq}H0Xx1e?>B3`DziO@pcPM83`f_K?cBN@QlHeoWzY`xt
z&dA94{{3Q?Kr~v3uab~vPH$YeKw!!@6$FO%K|R#|fgij^2TSEHiA|KMM#~(1*YsFr
zxr2{ADPcmMuGy$$Mt&}TPI%GK&<H+Oeq>?UCJPG-OZ#XG2IqGYgSOk?)jo?<68-V|
z`c#4Rf>0p*LWQ<ZPf+A^sOQtY^XRu4WMnzfaILpd$;mh<Uz~aUk*ai>nSGw$P!+)!
zNGGT8xJki7t+qIqy@47nl1ahG#7r=T)CiG)$D`J1GT$B7?aj#_B)bU@T<;OrkIv%r
z>ShjjUTMBe&p6c5z%1AMy?roO#$3Ydb^l#1!yO7itKMe$*Vve>`&@_D16qi`&1~^`
z7#3ZD2SVJ4KOzStPI6FG)b{TVuYuav3jWlQp%_#$-`;1UiQIIJ9Qv1)Svf$=o)0)2
zFI}rweR|qPJNmnOTp$=~Vq)GiFv!-{O}~+XGYLeOo<7a(mWfM1V0a71e1}FfoZExx
z2a!^XJTo1sz7X~?OhrL06eZj=_I&iT!f#ixPeHX%owmd9+7)WsRhB5J@^x1<G4K4;
zREc6<kW+R}j=}bDBB^t>rIWKWSj*t%m)bq#ZETJkY?jlxzjz-l+SAg~@_O6|Y^|-W
zvD++pKiyY|hGSC?zZH*~t<>FperoOS?_XbEU$i@%KUOfuqEi#_qf@UGA|JAd`}XbI
zP&^e9KCA0|`A-DwQF%gxy-5R)KPP2c^-^i<6%(1fFhAhb>+CnhqN0#R!!X@mo_QUX
zD|HEu{KWa}*7V~kBf%zfx!5W(9n&J@_x`R{p~XXE+-fv1zCHYNc@a~*zf!N${v_S%
zXKgpeS3B`wL_A9yo7EiQhlf8T0@?Ssx1*_SEZaO1yDa47wO$X%i!Q%A+WW$_>t0fI
z@}N(Dclw-fY)@qIuTRrb<_P-VgBShb`StZ`hgYzZM7z85@zD|bKtPb&*_yA@V6}m8
z-LcQf&GE9A*VC;7SQlX2&<A4qTpS%Q!Mh*a?Cxr{X9~y88V|R&oQ{{U_EmA1KH<OD
zUu(4eeLE3^L_o~v8S}S1x?!!*lfQj?ePs@6QEpBSF)l79Nmb(QkO1xImPF1Z^VbzE
z?+@$rYZ=`=?Na=Pm?~id>Q?AhhJ;l`L?n1`c|I0b4D+?pL6=bn;C?ujfXbWX(2l=d
zQ-IPv{(hi!)!ONL-u)v-XQPKvw}n+?Hl9jeq(UQKVm*U9P;7l`=tZSe#bl#bQn%Gb
zkmU=gd{ug_S)7~jNJA8iBs%qAj=`uz+wL77d!28%y?a+68Bdu+YXZZYl1?8Q5pghE
zvbi&+4OYZTf%Go3$*@EfFW6oQxa8%!tzx5Mo!(FUUiXvVEieMQDAG9{#iEH<Ya-ga
zw$r$rhxexPzGZI&sZ{DXPv;LcetyRzxO;kv;yc^v!%zR^^jEt<j~J-3!G;0Q#2*Ze
z&o}z2^g0VGD}(Bfmz=*w+02y|`1=dPyLG+3NH8)o^0+y2d$`HCK3ouFseVaa$$=(=
z3PvV+KKjX$V#mw-G?gcgOw1!8yg6aqnv;{mq}Q=E!p_d_?(Tq#cD^})a=ScDR!qe0
zVl7YT*c}k6@s5bue6q`$4wi(^v&~|LvcuZaGR%tGK0Qx7I&^@~`;mi^iczPji+i1z
z*Zt~np~@3ZUKC*hqVe-8v|1Z3#;W9Bd@<Ow=8cAdQC2F&v?fPKO_!kIfJ}yE8ketN
zjwkS0SS+vSXYfPVuPJ&7{%2uKk1Np+JYw%(&8dDXgjZHIHW)t7aX%-!KPPKBpDN`*
z#IC|6N!zKZvfG+GP*RuQsK?@YPfxFdxWC$pqxY2zBK#Hh7^siumnW+p)EsPVbK>aP
z6)9)t8(Gly;n-u%8h(wh!~<;;DI{Q~oqpE7(;#NEj2OLZ`f^I#0XEI3Pi`X06fQdY
z#>q)02hAP~Wo$i<dNnl~3HfVYa-KJ}y#;UMSw9{hAA>bdJ9KA+iGZ9`COAY4BYES^
z&)_C--xGusY{OwTZtaFglajAhUrHZb=kX`g{TiP_&7buBd;No13nDJ30Aw5py-si4
zvLu$5m9`Ys37Jg3V|;XUT8!J1jNl0T(H#lB0`Vw9S?2NcO`jc0%jE{7cnnaf>#C~-
zWCK`eN(HNZUc4)zv9PcXXYEg>@?bpm#Q@mYQg!u@X++11Wmix$Y?cf*YkHqose{8$
zpB$%?V}jVM`P%**{`mtuSrEO5-s{o{aY-^Y4mUVW5j9z<0scrO#2K@sz|D~~SfTfy
zVhf&NS=rd66RO>wAKf-oc~Ez9aFvP`$Wpe!Hcp^5c{p1arUxxq-2D=TgfC=d`Z=Pq
zQqI~MQ5p@`9|HPHuibrYJfl@)8L7?v8vb`60uHwD?ZrrPl~f|_yLi~>l}cTY6gz5R
zD=P!UqR`Ni)YQ}~v~>aR=f}|5xD^EX_j5d5;!E{bALGB9Xx?ON)mv7>7@#x%Xd8B;
zB)gi+7W5bGgvDXdIh-z#7IbfJX}LH<z+sFc;WwDd4LoA<<BP?hk{i^pghAe_j*V0;
zRSBYfxY$NWV$yBF#Kfd$v1BDBT|1bw@@zI9ifd?SkdaHE*X&+>!fJDW`}Xbr+255E
zcz=CJ!s!t5PqE5mWuM#~OM7{KdQi#BIS(pC8-bwMMXhz(P;brojy#*mC+V?7kt99j
zf}E49)ux!zq|b|8PC`;X0lyustQ3Z`6CEo<hJiISiqQAvGww{4sm#Cz+>HdivVzpa
zGZ7Jy&(nRMYK(-4$kuA>mnoUiEdEa1+vDXgB_``XiKR#UWSA-B)zuePpX#r6@2{=s
zF&-}`C>BHOOvi#Wsh}OO?w=mAtX(}k>R!}K$)OP7-CFH8Q)T)^82(%qMLTVPIzKZz
zE7X%vv~&EVYdM$Ip8pO-yTQ8u7wG<}Ug_j}0+n#*;zJJjUiViRbNXOzJG`F|W8WL~
zcY=Q9eYHncsnlV)+H$S1DdXUBOS7qu*ZK4qFtC-)+wme+*s#fSVb?3kCT$2KvVmuh
zLM($CP^?Ll|FvD%f3?~1&yz<LMUkdZkehe*q$}(Jjpr#v9hKNlFbz5y8X0lb6|9WK
zBpzj|_gSNSR#FB9oLI4j^3wO%dKfP+uk|ia%E^b^^iZiyziKxv_El&%^7}lG2JE^D
z+YP%C?hj^WW_mhGDBHp<(o$1PP|{eufq;nTuKNdpuP@eYvY3t{A|S|LvpDXQN3<6s
zHd<>?f{JR2_oh*rge0qX9W-L?Cc9X|-Npo_6)aXKZX<jWKNM`C!ik{>dECn@x2>A^
z+bFlEpm!}rRN^ZrB-Y&y$PO3*2U_LdbUl0eYZ5ayT2vz#j4)p|b2n1(hJ&%`ez%t5
zVvNnsrqtpqhbV@G7#d6+sR#H4Ie4}pu7N(@J#w&ApLRvJ3d&CycACtlJRy6K3xQVT
z*@-?1^SaGZ6d4)W`nrLsY2oeGgsmsoiQgwQC?}_<wVLc+<A=kbJfFi55)yu!EoNs`
ziYDRDDK8%-VcYtYyLhl23(8c#W8lQo!=JXcwqEgO)XUKn7Eio&`AnX`{eaxt_GF_C
z?`T5K?tq(i;Ziq!bh0IY2EoW?t1jh<SFNq-C-I`P8H~H5thamoX`(|IPG;&f>~pZt
zYc!uCKb(KpMhNATS0tAaq(ZGV+X9e<VS0{mFj>BEu$%^;+XZIQo!LMXKTGdl7%vfP
z$n!XwQdhE5Di(R*`D1JhiAxsI=l*Jcxv@LMytuqnwTz<i4giRegc_z#Z2@(T8Pf&F
z7rP&i7pnLZ5}nech`28wWwM@aB_yaV&42i*v02SGe5Y5bG2FIVsHDPc_Ih}!qnpU!
zW+JY-RWLDBB4!Jt)6q#HW`frRh!SF}NUI(ni&h0Z1=wkf%pSfQSS)M%cf`6p9APca
zhYVU2hzNQ$h6PR7RLK3Lde|R>SHmv-Cg#f2Yv{!~?AHBcC}S}?N)3AYS+he(VaaW~
zq2?-exs{$mVrRnBma$d>iHJt>_>&8=q!LT5SDI+-IZo^+izO}lUScK#N8Whc{HajD
zK)A*0@WS!l@Q3P{@07H9+_IYKV|o~VX5ij<NUqpKfpGLm##U7S{NN-0A1y%HHY3Pp
z(N9(hJ7%i!B!E$4xE98NfH^EEvQn-sl8X+Xq^h`={5M@&YaVJL8cFFGvA61b`doeR
ze%?re(Pkb+U|tn|Rk|G8!O>Bh>v?YMTk)UE+_NRh1Cx_$8-3Dt%b?ov*(|-t=J+O&
zi^%<~H32pK;$ZGj&>#B3f+q+O&(FnWB&i}8i2%OU6tI$*D1c=rwvJK(-|2=q3BaAs
zmo$>_gF?U-GWn4!$gclGHuDk1$FfE$aX1DZuqQQjb=#?2PV$~yJYILiBdD#r@eFS1
zBzjTO-1FHr%P4}6Q>#yrnVG)|Wz*IRNMB%soe1A&^B++TavHz#gH#2;qGhgBRhkWj
z9Cb*!P$rYhd1*4Ir_pA)yB3DizOC3Px@)D`F@KJ<NUb6jAibT<7$hVlWjU~(E1QIx
zC^FfPe}gS|xMv<56eRcUeXO{hOJ&AZIW4nFv4X*J1K?5XduU(3^+NUZ^quFrxVX5x
zOHO!&Nn6bpPfe2<7#IvDmL1}$FDNr((0q_A>WRQ(u`4*wYO}4iS#~j-Xi1_|j~aqF
z`Yr-TFbhQ~bLxiHPZSndCA3Z&z_h%)j6<iEz|>P_{i_XXUTPNuO1s%%PPI%eHyz^?
z@DDo2olz4!C@rUzrt{(=nQ54#jSccj_lFyzd!0LG9^-%7yMgIMrgE*ZWD?ua@6Jxk
zxl&N{KxKZ|%?g!~8%^glI$HeTkOCp!(R=q8*72f{CvH~XkCfk|I?PSGGlA1#)2NjP
zP5%@fN1cMBFgZ8H-;gCL*5BrU^1EiBQ;?;-eR)=!-6-YlMYl;)vX+r}we=)7{lq?`
zJqLa%+(^d{dLdylRuY661GE-;4b>k)Y<v`c7G*40?~)AMuMgnR0$mtp)s2lIw`RV5
z$Qy_xpu5Ce0Uf+QI;$F>S&5R9)z<JTgRf`YPJ3PaFEV0f_&YgKQR7$pGoTENF(b)z
z1J)E66m*s~nFWJ<<nPh!c8Tp8mz0!L-KOAks|6YXEX(%>v>XB7H_itfZ`JLBlbH0-
zFfsFUbKejc|7znuRs<vjpmaohR>)~&E^PQDdDUTxZV2zUknaU*!BY6t?7-QGtvv3}
z8k4+G^;-bmE?%LV-Xms{mF(lnw_Zm&-4>?}*d{4^;=Zg&X$WXUS5n{Lt~$VF(b`0w
zF^G){q!R6Oa!HVpv7X1&%QgCf1va-THER3{ULSoo9ZNNvfd91d`~=fPD)J?iT91IW
zn1m>!7gdT{%t`6YL<e`z{PzBufPOEF-{=1B4vCQCcB!6jdSZ;(0DCeRw4l1$+TkpI
z{;Zi0$xo?(Qp^Glz|8qNkkheHA@8nu3YiF<xZ^L&SkRZjWm-yQYV$t+l`Cph32kF-
zoyukv#*;??yB-s0)E^O8i5+|qCX-IhW1U@PtC0OQB`L{tgC|>RW95S&OBDu$TS$S4
z;0omwk$)%6V*pkJQRruW6yrF9Hx^TufBR-7<m&kzeh{e)8)dGE{<EbMBniLwn~Je7
zr#v^u5B!4WHa7l2B%f!@r2);sJ?;SzkBHZOw5JE6S*Rzjb1}l7o8yW?>l=84AH0}k
zfW`XSo}a9ynT#Y=Y1ZA0XJ`Z3EOTKU7_aPh<!o5w>+1{lZM)t2o2B;*+6}jVe*4td
z*K4S~(S%yZ*>{(-J-nxQD}YKKWm$1R-(E~jhr<+vf}MCQRnlm=vpY@hy5*{fDn`gh
z++Zqv<u5+W-sikCrr=yjlP2WpIhY<88ywZ=eOs)QS9&siCnX9G6P=0MV*F0+{u|aD
zKD&a|^y2N;t~EGi@`+C&(P3(~GeTzLo$#7E=F`;1Q&tHOZ9mWRqzr=KbGXh8xZwTi
zdhv_<VFKuIEr)kg@Qeu-+&7*>(cX&L0EE;RZr0S%>GhDw-)SG`xECBOetZ8cRK{2q
zY@Nffw|R*%Hr!h_N&V;gIx({b6@LA4cOoWaG9Ywwpuhk5_8h`0er0N*N^fj*G%lT(
zGLUD>-qX_)Xe%k{)OsD{B!L>m3OV5Ch4ysCKk(Ts&rPln1W=`_GCmkl`Xni-tDlZ%
zq$Sd-BEh4JalAa7UQyKZ?t(rhCkOX2S~iWnd!B&Zn&V~v<Qcy95`gsaaX4i<-44%v
z&=PJPcln<ly>li4B|qaf6<5Dn^%J?(;_$Aw<jgxTa0AlP%BJOH_WJc9+@=tfY-$Mi
z>v$Ohtxj)<=VA)xm!}7uPYb<+dkt-N>*?RjRvNinj(U@UviLfjsX6cR%G1^?Sziut
zW~Z0ucF$(<=**Ry-YA9V$ElTH?GI~m{S=O)P0hMH@sn$Xs_pJbjBBk<`)vmPc9%^q
z$1UN~!kL&-`pXR!doE}%B%mI0d)!!e00=})yZ(45JGJZw<f`CxN?KF&FFyb|zu2BB
zk_TNnoQa!@OE6q&IOoSyUhrRqF1A(RP;OfPAu$O$sIc&++0m?2U0$nT%_TI=R6_$+
znm-tYWPhoC8T|gQ&Og>aYp)aOlIc_=%yG@F4uy<2%s|z?zd80NHv7&xsi#vYlTvTB
z;PrUB|FdquJcC?oy*sc>r9`J(<AVl5Q%<M*^&44P5wT6kMxhlkBBDST<EFY=+uzTh
z+THcq57a7kn!(++`JA#D_S!iOGHO%<oh7+KTN%&)=DMsgRFZGyQ-Su*KJ92R-NKXQ
zN7hK3FuILFxa*zBDW@nNFS&|>Y@>Fp??|iT#sa9%^wwoc^Ky2uJ`i^}tgb5FStw!s
zce#u@H@34<?N;LXgf*uMv!WmK1{xEj6A@E5nT!wUXTAwIy$Y5|!{YJ@o$vi11vM&^
zTp1P}HvDJ9do+*gwXXYsyVvY;i(IpeMIv)S4vP`*Z>vZ=G!!3;n>W{#NY^fA`IF3I
zYO+iv1rwI6A#~ORwl-s2KL_wjBzHs;vu>4CRb}TYf*_?%A}#Up52~S_yCHZ61stRh
zJ(AV@Wej%&q$x_EQ+kyo<dB#{O=4G!b7;1FW8Q9Li|pS;GQ+K$l8Zw2pmI&lH?XSv
z1Il(AFKYz9hx}Fh-6w+G@r-28EQ~s>9HF~jjI6HUEz1}<wPO<XnelOCH8MT#v$dR2
zwWXz{4H@(K`97`h=0B2Sk0W@yVkqnsGSbs;FZ#l9n(0D>IleHiTkx)IHQ^g~>iy`Z
zur)?2qL`bS>Ss9nqsSxC7EUG%okzmT@`5rxKHg+?VPenx3f8$2I>lJx{a>3P<ToNQ
zPrhE~^KAqXU2yWAP$m}BC&E7)fWYn_9Gv{DlXtfP_-Yac=qA)`Y;24EPxsf_-_6NB
z%YYSkG@0Y2ua6pSYN868(Yg2aQ?<Ugv2p&W7YT1gTyPya*GB-@fxHJc>)qjkE!ZhP
z+da$xCl!mt4`n=hdO(qwu)oEDHD85GeZO&Q@uGG?5|L+37jY5kM&71RZ``jl2km^_
zP(HUeFZr_fNi_b^U}Ql;JSsW_Hlt3$W1jWcBA)gBW|qH+ZhnUDVh}EoHj%aEix{M5
z8ONfyZabRuKK#5T@<|cfXNsdAXS^^Q9Z&5-Bc&e|=*m94h1gNrk{4#-fi9$zEfL?+
zl97?QrIT4%UERKZL$0AZlEh#$U*7Blcz0RcA)5rEgQ2CRR)v--U-L*JoqA5-+1NsZ
z<s7`$hjX3e+^9F8VaM`e+Z!LHeXM1g3s6cV7SU>VufIOT5c?buFz7g(>vFv0Kn7EV
zPE>q-FxTqyBB-z5t)sl*s>sjJZ;w6s!#|i&uY>tqvCB4rczQ^%h-QS)Q)F+WuRDO1
zN-kZa#p%Pare_PfZXLj}hM?&|o)gH*%JPjFXlUS$5I#RY7s+Rx{Awp4DcaoHY66`r
z5Mehw62{);e0L&CTwJ`hiK0yqr@treU3jn4?Nxxxo(02%x4aq?(uot$A1=<%rzR&s
zDeS&I_e%iP;R8kxn$22dFzBJ*CRyFz-o)=XZFs{gUkN_cG&L0yG}aI<T9N8uJ#1Tz
z9==!+_3?P1kzinSINFYu@vnCW6uih^3Fl09tJ$tiVDtkmJ+I`ML7b`#k_=f~_AMW&
zhM+DHgAq2?K<)+>qH3KEDl$H6waLg%f4@VWIV^c($cxjDA3uPoN3XLOHsmjrXxs<)
z{8N)_f3XGvC*b4fm9C5(pcV4yxKGPj=$nL&03}kI897RkQbeq9n8$!xob--T=G&l|
zE-1W&kU1PFR8H!L^A)!jhc7S6*rM62O=#T+iEbo_pRMU<oK99!5QJ8u!H2-a((nm{
zJgcj!s{X~YsGXXC!Ny~FVxItoW9=<;CcjUI{bs+XCgDd+baKScO6m&|%tYsWnK~pN
zwb0@zpBx`=;l9NHH`Cm@`Zq)&A|m3g8fyIQ)`(fJ1HuRSEIRXIy5*#hm#2<bqQVdz
z*=+9LNHGgSk`vyOOAIJ7QgJirwQZeakVWNBV$!K9l&A=vGhu6~!3kv-j$^8ByfxBD
zx0C#k*J+5-O+2xckOLX}!E(0P`$(gkP5{Wq39hx|xN7gD7B3beuTEC!B2NpmJ{Seb
z3<A&vgx2n9;c#pQu?So&JiI&5&HZ6e&UrL6HQ)V7cMnBp-?&(+FH=>CQ()Q~F;01v
z68lUu4ik^P<~Coh*)w(wA3yr8C!i)T`Igo-M`I+}#yTuKEjy33IhYj@scs7e$7FA7
zt2aYN2L&Le-0y|wxqtE5e2s0^Syx)wp#|emZZ0{XaLr~De2S=H92^P4>8)Q*FOpRR
zM~)Y3>O{kLESxScb|>_T<cQQ4SnluL0rl8!FZ29#&gXT1w%?J%xw*O7NAtsxOTj;f
zZoYWF^hZJ>Rzjlc(TD)v0lm~W5z_I8;M|f>Cr>OG4|ASKxnoczWVqx!dB}@7-~$Ue
zv!mnc70mr2BBIrA!vm87{ZNakO)TXU{RRcQ8t^}U=JEM(e|wHWNJM1(tG?QN%8>6h
zoSnTzOcE<Vm2ECI-8@OaPtj;marGGo)CxQeB_Cxn_SMyuj*ial1E+eWP9MZ_y;Yiy
zCm%<Ea)b3x%tBX5rj5K#`7FNcKYzqga&O}cV2m>ngyiKX0O1eKEV`nTyxbm9Z?ZFB
zVp>1%i+d;i{G`bX*l0J@`dryU?^}kqzJIkn5$v=5nIi4R&yjd6Eov3~GrGBN9bTRx
z03v0^u<QB>td;HVz;Jp722jE3^nY{<2O|q_7I-<CfwlvUh#L~Md3T8+q6lhG7$(hh
znffUd!p`Qej|SZ$EAT+-EqKD&9fee|3e5@`dUYPFh&CV}e7cB1LWu6Q`zimB^PMz8
zdj_1X`Rv{*ulXWw;zg9DEP)umC;DQ2^i9Oj&G+L^|Iq@pHpQQYf;uwY%S?Y@6#d{-
zVYDIWa1#gcR_x1)3T={l16?5Ox(70t!Ah;V7Nx0f(75**Gph8>ae3Sgui9byKUF<1
ziR5Xrl^_akv61ovjdLWqr>AGR!3Kry6zoQOdwXKyOz?<$4c44`R-oDBi6M2+^E#a^
zzwq-C5)g1355DKyl#ZvAH62eku%c@dfFW}2363`27xCnU*uv105Jc6|&<NpMF4uHy
z8a9awwF5fi@y4_r@X{8lik=PUdj+U2p_&qaX}UWh4S4&P>jSoZDVWS64JW{aHw*I1
z%U5bm5cbWtN2p}@>pri#?+5>dd&(7BkwB9;1+tk5p3QQ@dR1PV&r3&{Rkw%K5b@s>
z!}J@U`M2!?w}P-kD@apjM0j{^S9?>v=O1mBCaZHs02BSI(mXiqjuY+UTP^_E;=7xl
z-y7`)8P`t`sh7Q>n@!>$&DWGF)BS^k2Y|lwQj5<TiK1xr6H_Weo+}k^!#_|G^-b#^
z1Y&NQn@gN;u0c3*wD|AZWVIY6e5ku7MMr$F=`a=x8pWc=Q+uF?^RpYR>MWnQUh6(Q
z(p%y*xVN8#i7NQRs#{GfR9NI?|MC~2l=J`0%JW4>P<5_Ktw--2k>T%-8UE@^+YT3U
zD<UDkL1kd!T@ELf>DYTc+}HqbS0-0UL=fux_wPV3dmENQE*b`8&ojAl8s$QROQixS
z*>vhQf3#nuKFr#RiuS_^K4(v-oio`iDaNUjpf(BGR<lCLE6L02rMp3StY0v50@(#P
zKB&fsQiW;^X4aLJl|b<Qkom4yP|=_;{9^mXHTsMejNvHNW~?{zdxkad86d&OQw1&%
z5Oc=8*OWe9s*i|xwtb|so~tvP*c1!YU8A=9O{-Eo30mu2&>0pWs2WK*RaMcv!2hG5
zr44&X;W)*k`v~F;<bQype+`X<f3cn_c`?Bsufc`K?IN>*qdZrkt?ub1Dj^YbMZ2;B
zoQI&GVW4y7>*-SxA$_s5zl6i+m+qv|5*B`Y9{vGrKF{-wyZ3O+EC*(6it3eA-i?rN
zG{ru^J;ypg9uIAvhd$isPH~Vt@TU0PB*5LCnLs%^Kk;e@e)c{k0f@JEVN&=RFP#IG
z1iPPtWtj$x!O->Tjdy==5S-+b?jRWjY_qS=9H{SH+zUy_32Od3J3Byuq0y|($Mxf5
zu~(BRW;0J~_Xxx}^t!t+>5oX^X#+n8Vv>gWN|SvC*EkO<v95r?D`}SM()<U6_%t~&
zNNy|=yI{Li7PFJtl9?uaNWk5(cd4ausMCSB7Q#PO0b2qsjINbj5Z{Yjbmgk}SDuR|
z;(miRPLXH6_7hkhzGZ@x%@`>7tT86<9#tdBIsAiyg8m8k1h`F&=ab%5(?a;YH_E=`
z3dH$lf+#CH)>#4_=$l+$`Y`u-uOge_QZW1GN)peF&MQ?hU|QM@+V$PLcb9MIr>=P5
zQ&ZuU{QJ%>Ps;?wkjVrGaajL=8E{$a`Z1Q)xYFU3rtNc!K@9+PovAFyObqmeveK#1
zFU-&Xthd6+I)qX}Www|t{_yB4yy!k{Xfc&53Pe~D86dh##y@M;nX*Z<oD~AEy`N$x
zu;BeC6-Yx#ad9*7j2liFz<38yg-jMRm$6hf4KdAn%Rpb>=Mv?jI|@3~BygD?gIcHQ
zVntzNCJv7EK<xLw6}m(7fZ21tHG}~q|0dwQ@e^@)-Uj4}MINoTs;hNIfV2WvVPWBh
z`5cfG-~SEM+>YtRd%C?AZe$rs@zpGac6<&0f2F4AM?ykEZXfTYRaA^?4Et{DjA>rI
zMT_0s*Z>`&c9|P4+YC4*r3D4L<r<19>Nh4qK;9`WDG5IfpRfcz1aK-M8~|UDqaUe@
z`b*bKOh!jXe|0!dv^3iP1w${Kdu|btk)jYiqx3#%e>ivW70iEkJ^;x-Ks(<l2kbxr
zhrpx{VEu)Z3+d{vF12XjzZEveVzln7eOHM7t?dIlyQvQvFWk}T1#pJ!p=W{A7K;zc
z;ox<)b7grsCKgsjp;%SAEXH3GHm)=Xo`qA1`a7b4UkoX%(0I1^%y?xvSTn)FFgkhx
zxOjMxxF6F0cE)D>Ujpiiif|~=q)72%3Tm`*FlWYFNLZ%u6zb-9{*;MiuzoQtK%9L(
zTZcFjeAb~(SO?%9L<0Wd*vo<ty3*2bSy^S=)i}vH6{P;_0UIhY{`c~pcNcx#-EX)i
z`}+%Rmf6*-THbN4BmL#*4*~?bl9H0z+B3iTWByIiy!%5+_}4<#F~|D~E`PzO$qO3U
z-%)gnX=-X(TwGjRQ}86f-5av!YgmD_W`rdu#wQ|T@TB@PjX*17F|A>~AIPZiKOw3Z
zg4`-BZ0zUF0Va?!K|*p?RmDoBjh8GOhzJWqMu}eYCk7l%$)%<Ez2-g0?ZgO6Z2eOQ
z{#GrzkYrT4*HV;RS{iFrJ!6}8zD2pYy{bq!>@-#cw4;caS}ml(V1WO*))t&?`K6#2
z7nc<1uR3$pJSghSVd$9N@duRjwm7EH@C>^Do4n)f(LSDJXrq~+ki!|dw0jr-Ni}`|
zfyF2=$wdMc9Xu=e5=kO$Sd&BwGuD{i+U_2OC!!YmJDdMptTu_>W^$LU`299Q`+x5M
zmOT1@|Hc3NZ?@#Et*wDq^Y&ReH!tsZ$8~QrsxYv3osX9)%G7N|MMYttpnPu6LWi(W
zP^zk{?Zon-rS``&V3HYiFR!nS{&~vBB5K(b=0G%&ObS+39d-4zp+q1VWpFt^Pv&5N
zSV_Cfv5T>>N{$e=l#~>`WA-YdTV7>lKeMk6`jFsC$CLi<_!BlZl#EQo`Q=Pe6`h*(
zSJ(jj5|ttQm*+ex`OJz>?X_WH@FS?_=jXqE@eL0T)6x##hHjgT%!`T-07p1|D0FQt
zCOexHERQ6(t+)_E!2*po*XwvHCLv+r<0C0c3yT7KVNT+~Hn$O<rwcm8Zmw-}vvHl3
z)<1S*sjA9Rl#cKInXYj^LNNRUz}o^sm%faQQ=KUz@aDcA*g3X#7!7!T$I;wbtUt^y
zI}}ag+=`Px?w+cVdAMP)u|~&#lF#Z;P*F)|w^>>H(T;_QiO*g>Q*Y%VD~pt*xW)^T
z80b_PF9AnKvn9?IT65nXzh*UiKe_z<oDf2gDDuzBddU`S7mvhG0E*<&$I;I)<mCUo
zuND?KA->1kbH_g?!l2w9{j9@4si~ncH84Pqhc}gIc5tB&esu@mPVpQO9_}Ay$O-Qa
zi;s_wMaLE9OGcJ6X<co9D=!i2R1&N5gE%97_yalHt+^!v0?R*4PlWwzPz1Ug&K)uy
zn5~;e+h1qAB15l7M`d_;+jDbsZES2@LyTqio8OAdwR;`nVPF_pSd90qu6zcWnW>eP
zqb^^gV3aJ+>x0NpNpCMN-tU>aW7^M~!4m)uoc{7EE-4A+2zfbMpHVIve@lt3qN=*?
z`{@&jdgY3_xp^0iBs5Ggy=E;XIXOCiyo^YItwvKdmQF7)DM8(-(5UGK0R8uOi-j7a
zB2czfi(?8ZE0LoSLtWRq6XU5SGC1t#SD%QCu`Y(xfwa5(@a43+8kP_W`LZWietupQ
z5Zb%f#N0bt&9(7OGk2Hj0<Bo|=42W1dYzs)3|cn&+0i{X5bEWNUq{b!z5%YY<L_Ym
zt1Y;@rj~Y4d`k-c%r7(Zq`}5xBC}nm)rHMl!DKkW?_K@pRW(l-Xz2AbkeEB&(@>-2
zr!Jc*ns~c)^iz7!#rI9&(h{679>4cv?MoM6>~eZ7PRBDvOloRLKwD$dYpMFw&dJ4v
z-+?+!uQ?6v%VNejJvY}Uxm)0LzM+cQy+4D)=kpADmVvSHw~OYa=3J0Zi>M<cCicDZ
z^7NEWL}$#&&eo@Jz1rJHz^VM3dD9n^wnwaPY@9gZ4UQsmZg;ypnaJw2gH~jgq$C&5
z<n?H_{XMlgFrm+6Z(qZa*7lK%lyvXbegTa1h6EU7D`VrYBXN48AXO<Apxt=#yUD)D
zVH<wX*kPA-Zn|q<0Pa$2?UY2J$?nHiklChC-w?0oEheLB`U)VfyCY^4$au1h5X8i%
ziY0wyd6Ht%p6|>pED9CG|JFS6RzYDgu#7#QFX|P@!h7ZS1j!pLW)hgd2zmZF@mIiS
z&<24gb|GPG=D4b`kPrdD*CnhD$(;}91Dt*~*^8T-<Dy&7k3ylTsHjwbrDTdP9&YzQ
z0oPqDlw}Ffznib{fMwEYQULLi9Ci>9Imf64(cT8J$YJpKNck250&AfdX2VGgtGS|Y
zi<!0{H7k?~cwAl!wi@)f*ssxP&6y7iZvc5qLsQgkt~An|^-|UR9dN*}=PO#Pcl49p
zTwMjp!(ea;3F+IF&C>=4sZ-LkQz{DzoL`=eK0v|=<(xOPMo&y25x59!uv^Vnd)_&i
zC!el*h{(JwH<E})r8BCQLh@^PE10JWyORa*(}e`4veAufQPI*`ZuVz@Rad4mRH9l&
z$pKF->GL8mMC?<c+xm`+7Jt1$`(vNH@vC)-IyXlHrkE0m_%f3tWXW?@du-CjFw7du
z`SRDZZ}Qo;M22^@3aKp@Dv{CpE_FKE+9|Rm%%~D<BJouZ7OJkV%Ra)B_-a5EeD}P&
zZ(0PJeX5agNW4ExG*t?yL=W>27p(%X>ne4Z6B)GOH(<g-l6e?$o!m&{Gq@WA1-jQa
zWA2;>19_!TMuvx_XwqjAq#+1EzLBV4q1r%KdwBzR&jF%YTW8jL{S4YJ1O0vV=2NJ=
znA|Q$C<qVAOBSO74pVV$=t{+J|MrjA)oijnNHUTR&u6UysX$C}fiysH^BqhC4cCj}
z<9U~&>=cI+>t?3VBBb>6I>Bw>&{MkxfsT<aOiDIc_`R{Q)%_Y<2Acl8q?HF~8Rn1+
zCCU)|M1;fCw6xt#U%&l$gP(2pYdphI7~>A?DG+>8QN}>zN)d_6Hxv!N*e0sZE-Zv*
zTkP<X=G#)z)%6;P@&Zeem2C`&wgbzJr$_|zC^xWbK>joZ9z$g%4)8*UF$6a~mcHA2
z7TpHPzi|$O)J!c=$RW%Z)zBzeiu3x97Qo@tbvl(-L`}j7OO~^)dULXxvaC>8NC`eQ
z5N|M2?fV6AQE804-+W`?0F(1OM>cC~U9Z^zqpUxQs9TnYn_HXW;c$To0)m%NXtV#?
zZocU}JiW_0K&_XSqTX!6!1Izdho=uxQ7UF{wWWTyEIV?cVi}ss=JD2mN62AUi%T69
zw~2i+lyv8AIFUe5kZh1DO9Sd0M8x6vQQy5v3~>Mu8;%49p@@;0nS4lO3pPweTpZ?!
zh=XVl(FNWr8AlX|zu}lPkZw#v{@1;sECz{rgfWqOd$_Ja8f&7d7o4&=tkq;L3!OeF
zCp&`sIk@W@xyr(nS!dAe@HfXZi74LvCJ`grI%)lg`KYoxQWEu1|1{eMKS)4TUf-gB
z_)tSLp$-@RN=|XE6sr%FK8x35|8loV2TtINrWW>ESr~S`kmaO4Gr3^gI7&VQ!|TSd
z;A~%nnW2RRlFGcGAhG3!vGoy<h3!--xH!w!NEP%@mr=N|x!~5por8NoSf6AtAFu-H
zNRI)z-|d%}7`~!IbEMRYxwm(hpF?P78szX`f@@I&6zXCOs22g`;O1J&qlq?=pFoNE
z0bJmVZ$K~X`S=JzfaMFlmhTw^dWG!5gt<Up0rpaV^7WNdnK}-kD2HOF_g%Z^ev}E2
zwqd(5(M4!-LPYl8z$pS!biDlMhu#LU1O9|_u5o7<c2F|)Qm6z>a5NO3=lSh<9Vl{L
zZd*z$CLKO6_V-tANv5Fv;(x4UB2p^XSO;iq!&tTQ2$GC;M^9C?UI;43jEskekO~Mx
zwlb4l&!ICi*Xfin>;cXz#frT45!B2^hJJ^a;Sr<(T%wk;X)Phq-Al{KK_!`$i1~C`
zCG%*1QRtxBUqH+G6`MaF);5(2X6d&KF1iJEP}i=nxA3j4U@_(Rj$c3BQi5cZ&*csF
zv}UVInGA;v)pzb1g;EtbR=;(e<|dB1E7Hry#H(3mCGmBnaED)QCd})wTS3uR*_zaJ
zl-~zuJ`T}_K|x*YO|ifVp+x@?6#TJ0f)HPS`v7w$UUwE7#ndq(cfUX8<f|OBQqF(o
zyxzg*dIr!WCLfg#2g{tMQEc{AsA*hI_2V|AnwsB%+-7sq>muSnQsvvnGevWdf97-C
z*#PT1Rvt5>&e8e&!yv_veK}4)#3nTpp|z!Y>z`ZG1y(VE?+-y){8SS6mLFj+`s?Za
z<u20^)QOHm^i6@gTs#E927EG&vCd0d(onAmOqi35v6yErQzV{*I-hdIztyTDI}Jl{
z5C#_tV1WSd7>fsDP6zn06F}(*@Zt0JNo_?yDW`=WCnhmTc5!{Q-wYa(QT{Q90}e@`
z5mFVuX>tU0+{B@8a#8?L=#5@9=Jk>WryQUB-)KzdDn@bPh&~o0NvqUl1JQaK8s9E0
zv;a|yfyE4okAHeO<*KW46N!a}hNfyh7)_C$WM|M~^%E0?UfUeY>g1s*c=TD*5gwKb
z?$X~{r+2)g*O<)pdPth~4GV*7_T}l>9YDzfMW(rV^{YIallgB<CI5lB9AUa7I8qbf
z{i_s6-2u3;zQJ$5fheb$C+57m`kRQyHT_Un=QxDj`JjzLdGL(0FR0jjF~f-zp0h?2
zF&YQ&YbQg{+7iY`86)WF#0kWOe^%D5{NR$L$p##`V|BXl&)R~iVQ@$#!D(%|F%wuA
zg7FD((P1fhvUiVnS;>j*uIo`oG9!C@*0>~DXCbKtCa)hw97z~4Ub@=+zEF&xxLy@o
zf%4Y!#n$I=zP-_wH%^A4N8k@M42)6q#;+U!<E3rMHwLJLgm1zlUbZ02<GK4#*|oH^
zz|*+jO}7gL27KYn=8fC|UXc&7j-=!{aN+iyNiiT2p`NhO&}f3vIqZ`rUjJ310p3WY
z<vbq}YJwYe97E8#pAy`M%n`U%kQ@)ksj|llVW}^~gWA7RyalK)7#2+$9F2IJr2?&n
zMS+L$DfnBbT1DyKy<B>B7SbC!7#mH}>FVzN^}YY`kXbnJ=8?K{Q0C_5(pXDut<zBq
z5tGFwBqZW!@-Ne$IZ>_6O-*T^4nX<v(NPJ7u_HHqe(VQHa5P~ap0?ic5LQ#tZF6RI
zp`b(9zXbD<%2+bkL;#ojR^hHCxVtrro;(#zq+dbZV7|ZHz2>$d>cf31eVRY}hw?OD
z59FL}^%f_%#V_VxgpjbAK1D>kinLDtY`#xn!I_&?3CE&)T<_Th=&%cZ6T>!NW-3<=
zs7S#gzU6+uVNbXBre@58$cZ$xgOM`?(m|q`%oucARN{Iobx{m(R>S*uN1o9D^4z3?
zd^+q1Dm!~$7&b$jK@ajbQ}bA#M__b58zCc`^rfi8GiCWrLZfd=xH>;%aHEjjVaA;=
zq0UUz906?J-Q6A2gnP1~1T&rk!c*}WZ?MKQ+piAh(%>+H%1TX#-TcR{0h0i~2%-?e
z>gvm5$2+U7C`ZSE;!{BEIaz6bImsw0DS?ywS)#n#TR|ECk5wB$>HF&IGUZc)*e5B8
zYWvN5O3MBi%P%K9gI|e)m0j*G*orsaK*<=OkY|CDC(9jPBp0D|5j?FepZ4Y}AZo+f
zj(>SoYt{wreY*t#{^MnoY{b4x#thha66yjf`A@(_gErg;Y{T}K>)FQ-xzP~wACZ5K
zkKZgX>FMkaA>o<qa~3hfY;0^qAd#&qc0N8qfQO2xi`iP?1dC;*{_xc}ks&w-Vkqc-
zYlY7eBgC3QN7myU@K-E&#@M2Vo%-#w7d!mu2w%fFv_w`*vnT8Nj6@Q6y`b9vF~oKg
zwIb#~qx}VwippaPb?nM$KqoIZcXF>>vkrdgBv-|JwwTx&^1F@!sQ_{!jWTVdP495x
zh!0@;+ryD;mMXqjGfnoqv+S&r2Ez85i<P<vN82DkR1F!7bT|N0l*7yA^L&vfF7JFW
zOKDF|FHE}qshvyMMd&ztD!S0FFDwcqRwSH-jg0abb(eDQI-C!Q9WQ}5{PAavkq`X&
zlnV$~P=<v}unpJL*8?N-8XSirMLe_hXMMQZk8_Ll#{`YkeQU6U&5C^!a^39D3DF$_
zy8ZncH}IE{TK%E@yZm=>n0la*(&aO_I?bm_`Mg@fnCgwtD;CStsfy154G<R-6Y|~E
zIrH{)dTsIApv`JQP{Rh;BH&=(-a-|@{TsEaU%(j&M<_QL>DOsWqBHxmIUv8+gF!XE
z7Wb9US5BH4jgnshADlLdk)$Tn!5x&WGwn`PXmg$7a<<In$$3##QAz!1`^}F(>Bf=P
zk#rFipMU_Q)gU}*lx9nXACf|UKXg;DoRdQ|r2|X5vam2{*iUvk%{L)WQV%X9rG`uB
zFYtMRgWu4uV@5fNHE*iw%&bT|5*aTr!(#ugmO#ix*7nBHQ8@_;oM{UP7C%dtqzLWw
z$?oX*>>dp@{bua5MIBUsNKz7|&!tBY#t<&5+#+|x<P~M$OS+Q@hoq2@P>QjZBBeSx
zIXSS4>=l@cpv_o7A8lbAQpU!{MrL9hQjM`0q$OcVH?ZT(`Cfp)Kue2%Cz&qqtz@_U
zj&U7SECgdpYHC<R)up%F9#@wL?^$Q%H|rcNc#1+%APrI4p)GzQzz6dyeM|Wl&JEfT
z0fCV;q%(8{lI#!kZu&bm31hN&ovnQg(~SQdS`8ueU7<{bi!{ER0GeklwvN$jga4jx
zZ6+lVg!QnS@WOKc95ZNX7fIxqA6I8e^6p=uEW|o|1#%q;r4}Z%^K~UFdcZ%b6DlMb
z&KAoEHU8eIC$8WllwCpWe=Y{wObQbm(>VUt@b3?96U9>hqq#9huMi4}q52@S{QCE^
zVTBk6ZIY%C^^JzhFY88?2Sc#fo;y)ZMAhi|XBLeA=So1xb9hYltB!=Q+U;eY$ZfFp
zV4BaK%|aEnX{eyGvL5)K4+EpH6*Cbtb<|bOb(D#7S(H4B_QLk#2ifmV4+1>Ajh<&^
zPp>B+emFaQH|Yi?5s!d??pY+D*M7PilrwAVFg)D7x;8;$W6ZGG(NPh>^@;r9*ROqn
z8W|J>Z6Obk#lZqoC#X{?I+Bb(&(7=sL)?#vIL1#N11Am%iAMfCc<O-GEQ0#U#Z2^~
zX5IPc6^3LvLsFJ=RW~6*Z5OP|*=z3m5E`1=Rj-sZZtX9sA(LgaR-Y$=j*UpXQo_)e
zXOeY2`{wnGAY&Q%Ja0YsCgF+&k&q&*tE)Hq!kzafmGtzYO;WS7*I-aG!Pz=lt+4!I
zUx<Nl?D|r@&IXy=T9ZRkSS&0IXxP~@^)k5(eEJL#F)?C(??TD=d*Eps@9*x<B)7CI
zfiR*WXE10nRoactKm7KGhkc$oCo)<Iv9W*EnH7C6y1YL8qguw!@QH^dkOPl8Yby?f
z+^7B)b)HT1RPHbE()=JO-|2kV;V+!xq#KYPq1*M(ls!T@gp#VL8Cq4<-c|ezR6i;l
zc&T8XN9#}UJ~t~{`Bo1{pc>uRTZ<w8b3m_Ls|Hd~qaK%K+7uZIO3>V@fAnf`#5RI-
zIxu;m2#KHp7}aiFUx}BNw0wO9%>zL&(qyG6XZoJZs4Gawvffg4%+mw^07~m~cfk7H
zB|*`b<=b1=4-l4?mcVXNQc^O++xXQU3<#@366s^wV2vlJ{=*40z&G<q;>2gQtJH2Z
z?XMKz{Pge54<>ig!d6_q{1)~%p$|Ou!GD6|yb5VQH^mbWRh;zw(!RKNe>AlFqCMB0
zNkd!x0Y+1V)o4PK&t|?RmlW2v6Nj9@vZfeUklIi?Sm<caXq}rYiT8F8mRwh-#cA$W
zhZDecck;Zvt2f8m;L^uHSFhgJp9f3t<^CFBd;+MK3=CsHXY<<ZKL!9QC3VMkzC0%}
z@!jvUrFw0E-b5jmdMSJ^cNqJ^u-tBrwt+HMV|jmd2h>LP&pP}-#Tx_1&3=O*1Se;r
zvwcYq8x`d8{>*MocvBOH+3tbl&dkIF$#0tI%d7LddegBTxeTqh%V+2W?B(G{$EzM&
zfYS`RfgWJz6w=^&o@zR#Bb87Mco7=%000Sr2<pN@Lh0#8X{;8cg)H_Pu*Kqk1*E4O
z;Q=Z+!e+z1AP|iwd--z8N676`oRqZl=ahdu>x(d?`97C(X)@Dkm!rewj_xP?MO(le
zBO)({jIV)y1=2>>SC6lHFt&f!niy3of{R3xeDS*M7uMEpbv~p7>;0>?m5C~9*{2St
zPM2f$M^-|W<E1%!mpFPzAWh&ft;otm*ng$Bq1UKJH*r4wmG?*gi1+zFTEHnk0Q7Su
z%5@;#?}@cyL`cdbMkrAr<?{?<PphlTw3Z-PfJ0*lqL7Xn!xl_nxhF!K5iTeVa}I>g
z&&&wQY(YXzmnf$Zd^}l$c-lGAfe=Erw@U&^p`d4E?|jgL0m(RT{gQcifd_()-J_!c
zMG!_9I27_OKw1K-vB0wlqdw(qvQ;(V)8iWj5kMX`)Kz3;5XW}_w5?I7H9iNy{4+Z7
z)LyKB;I}MITHZh{SMF~Rc+Fxg^W6pjQILFfY)W8f7bRdTt*WXT`KR&$b1p+g>_dHf
zUw_SL_0^l11$_w1XFYv5Wx?yn@&QVAbiV4>3`ha?IgPx5_1o~w9@5x^Kje5#wkePt
zL|h*wbBW=|dBM>cRWVM1d?dW-;KRtXvokvN&)IChTfg8Gr-BJQ`RQ2fWU>7G<dIDS
zj%_x4{Ypw{G5c52{M4@XRvZ~fsP30Lt5Z``<`+O!M6?3PLap9Xw73J5*2l;FWx#VJ
zG5}Uf=kxMCMYBAc$}^j!n9Mc*>GN>IYtOfilN0N8FzfbxKSv$Vo_A3YyrJ`#PY?3o
z+=)VwTqJ;0;4Yw#AwQtv;RR;#XxZ7p;-ARi^5G*@+#bwnZxx9}(gH!-^Y*OdThwhT
zst7VX{0|}E4mde|mrnY=zucG>6vWlLTqw(pHr;5ufX_xNtRhfHwzS+xyr}LET@SEU
zu-GGjT_zWBH7yo1j1oUyL%81@{X`q^E96J{-QpbG=>yyno0_{CBeU!iS2Z#sps&NA
zO&7`IP=}4BeR1=6pwN_(POkLN4><IAx+h9vS0Dw#JiW@`n*k_UKOW#9D934$x<D2z
z6v?Y=Yo{3v$c3j7^19<QqbzysO?CjIMPU`JJ<Pa7PHaNHgu7hPGKEZq%+SrX`+%rG
zvQPwO9v(wLP@B4{b=ut%0eBLKx~L<>$EPKx37~cfLl?Vy+wl#VqVgO4#-?9v^VbxS
z9B?kO>hmgy1v+oE_7wQp<%h;EHan&P2<h{3vU%XHNSP(6h8h4c;tntpZf;ySD)!KT
z#LU3Ty6)?6bO=V5x)A_NLp^Fq<IumJC**lr=K*T>Q`+(UF4Z6C0%7JM9G`|m<U_^8
z)fjxX(i~b(m|&_$o=cruH8sOuf}@8xbXH^>0nvPLB)mxL*H{fui!F4Z#6uaQqz<l7
zNFv`V0*&Ns8|;JmO5F<gYblK&@7t^W5x^`!i4Gcqem!JH{eis_31=G!xgq)nim%At
zXH4D(ZSQSg+b?~uS>f?L67gsOJ?_1uzUPk)Iw17M%Mdaf^>_FF6kyfhIykUYa0deK
zG7z#my;nhi>|InSA$hDH)EF7o=-8Nk8!4)rSQ)RqaR_#kws|;M9D{=Ah3_9=6L6zo
zgZ+(D-t%0<#>SEzkxE)<bQiS%NFB8SWP+fedysk*%Ul-}6&<>n(f<<T$Hk?!Lh5Ws
zeYkxc3WxIG<tvcEY=Vf%5g+k6uyQjE{67gulvqBd=t1jMdL4G@F-<bVU~|JENGo6h
z>3_$JmZ8hPRJ*Z|!hYoRcl+sz+hm)YaQ-W4Y-B3rd~nQ4!F-V>8bul-E=c|Wf+12F
z?kT<hLXu3=0%XB}UqncBOg4x5niprUNP@=+!()s1Ej$btMjYZeF|!@mZ8}+@RW=;1
z)qZa0AXWW(!N)-v!@|;1La&QMKu2h@rL78bVez}grM)DuXK<4oY77HwzMlC)coY{G
z4^kxRKneP)l&OVsr%;opdl8d7wAih~j~eKR#;IaE?lSsANGfmsMcM%pCn+Wgb(hFx
z>S4}FsaxHvX(<OaZ0Z{6y#-$n5F(8~pwppK=ENtG!s=$#b=lqQ1i!D3NUeRJngCWt
zYMc3fP(Z-8ytjGgm7VyPKaGNdg1MouVS=L9MabXR>YI0I-rrwyr`A>L7*F4Ugs_N6
zfO%#>U|<g_Fh>VIHf%>)ykbZIsmb1-)VeJce4cn?h8!&BAE;<x$@+Wq{Mpw=T3Way
z@#z<nZ+UW>-F!jQtzq@wX$>Cma5Z@>3J%8kj)V>D3aBy|xx#iY3(q*hKd@}DUtq~$
zqOi-^y$2;wW1I0ICyR5RfsmqIAhq2$W)IHr^Gl?c`}$_iI&c*#GAQ**=`d=2A8h?1
zbc!kW&N$**Fu5pv=r9P;Vp07c=H4=@%B~9=RY7Ukw4{_Y(p}PxAT0=jGy>8fCEYD0
zC5SXgw;-L;DN3WDC@l?V;`2W5`+evC8RIw{4s`%~@B3c&T613WihbB_V)N8S)$9af
zxNtJ)b;OwHSg^cg97ve$0LPPW``n0{AZohfjPd<-mIEDjYKXyIRqa=y1~oYk=%Sn^
zB@d|EdSU>u{SzOu*eFAF?<+bXIWR>q#H%z5<Ld?R#l6xDZXWNhdBUL8gM5`l#!vNn
z3%fv0R|JE>d{I$R{cX!K%_}G}_FJnLj<Gg^VjwB~!R@oYhHb^$azgV#gq-HC-=0bF
z8~-N34$N}#X~S#&dH1Z-Ey8iLDr=DkPrC8`z~saPGMi@V^Xe5d^D_&)=^G1Rwn9pZ
zc1M7$wzdlw)%e=^-p<N*uVYLoF#`VBEPL-zdo0(=%HD!zURz7cZ!|EkJbo-ou{8J9
zi<k#tcwNWk-O4n-1m3yLBY0*<M~Gv3hssRhBcw=ssb-3h22*ang))Rf+(*`23U#F`
zVj4~r7&T!(%!i4O2stx<pU9h4b>LEPB2&V!3Qvj=W~htPZKuq-BR7cd;H;AMuN$Ae
z;;YQHm{r%-4v!}4E;Py4O+vqPGIZS%t9SW1|M4T0l9H1hTiyq+hw^-aR4K-M{fCkH
z&l`Plh%UsBQnaxA0%_a97(_s_;z7E=*x1;OJZShMV19Y8$~K;m&d^`^x6c*}`mv_^
zu?Clb9*^m(D>xyy&la1y{?hNUqlF7TE8@?IaGIlmd--!Y_H38kBW`_XG2_W9c2<$s
z=jg`bf%$baUk^(>&7k|jyz&0qw@*!~s(&mOcM(TEHdD_)C|F+owUds`YKFkowYFJr
zIFP^hZow-U9r9bM<r|7h+<x<Q@Q!Cf+gRnb*JGAadxx_3&))E2Qru8NVd`LJGSE#C
zl38v%W7X=HHQ&pBVASr1o1eb3xA$O7{uM?!QR?E@5fQ6pbdXW&S$w3qvHE>=b%pdW
zWT6lxR&ru&Y-^G$KogcKM!dp4bLy(!$CocZl5o>+AA#s~WeK4JV}1e@PRR$3Z7+BI
zG7dJzbw+W|_ctPff;^U4sm&vZqPFAu7^J76Y=VPF1UV?O^XJ4d?dk~AN0f(LeNW$=
zMfu)DPw~DulZgy)>LjMJ%=QSz+!%O35*_z0-z#28oAf9O5V3;CO+w-WM`$eUO2Yyr
zk9P92jPNYT&Dt%lEl<%TG+wA@mU{u_7lSkO4X_UwXeG?^^`ZMG1kw15V~Y0CC1a_g
zzo&p#dUCy%gWb5KT|wdW+LON+J;qrw_R<APdv#7~{x2cEKO>hx%HnNBpDdcT=+Bxr
z+8XW5qjbt&D9x6C*gUoGpy!L8H0l?!RX#%V4lUI-FhP#H4s(PM*<Vn37&W_NCGKv{
zvalvIX(&EBP(+&k*&f7VP;j3g0I4IWiBPAfr_XmfP)Kp2zQSyMCzbD-0foF6BMHws
z2H<Eeu1DJnV!HdCVO0@CrLsZ@G$<@ZUhGf6K?3qjm~i6pC(9}+A(?C}b>uHC;lhyH
z!KsOQ{96)jZ+=<X@2&`)*t<NPuuAF6xcG(+f2FyBhmj+;_f3`qV3t@efcCT0sP%lY
zZ6!1SPq)UJ)|rA1!Pj%WsPH_?tSCP}Ld(FSo!7s#v!k?xH5&me<E#7G<aTG-T}HSV
zCVF6CVC*(C4HKkt?R`Rxo7UxC9wA65(JQ8H;~kVhgbFx|kb0iFJ=Pima2=IHC-g9P
zlcUZ0XC#~E8(nZ34t7tRS7h5+c{%Ez5cpo+8!U}Pes^a`S?QQAxrC?w*_#pUJ7Ru@
z*HR`u4=G2drk1Np&2Ppo+b_I$Gk)FT7fk<`o9?}1e?ss!Kx!6VIGg*1T!<5o$L=$+
z<6q%~WY3LP3LH}A=f%4uT50;U5c{Qz+tBx7s(<jkR2Of(MtN^mhh*ZWbM(hYa)Gh2
zYGq_-R|{bg)<Jd%&S@HQFt>lN&`AB(cs|QBtlL~1#uF10MVf_+%ggDetFQr&aD1(J
zD&DeFWjz_rp<F%!6QQFg`1FJKrLKzQGpl>_9&a!*=Yz54N=qa5H)jitTJ7Khz83Qq
zBkfefrVy%L_RoLXqYYC^IFfFHZ1x^|%ieubv9*=H1Pkb^P}{VjB(|Qc9O2lQDiw9*
zar@1+u3P>2@Rx9ZN3kYTjMT@tXcBJZBz5TG-aMne^<0{dZ|VzH@#Ch?P_jCtj1Z38
zl2<g>r0aA&_>l-Kp{VCT8|lRi<)K%X_~7a0*U|`$Us;(e)XzXR8sPWK!9Yi!ZP>d;
zhq7<_b4q3WLK|%)PenuEBctd#|0Y4d6I8Eb?>S#OMZA64+{Ofaa86%M94@r)>-!sf
zYV?dw`xN)9Ir{J&1c-IJD`<xWx<oFmSg)F_Y`K_ddF%P+wfchRM7OYh+!eLdZdq*i
zxxAnqs&8y0-89e`59|>$ySE4(^P=K?xm&rc){4+M9*J-=Mm=uAzStXnMoynT2PJBM
zZkEAKCMf;x;q0R}yDwquG=o?scFjwx$(4;NAemJUL(taT{HkKV2*<d(t5gE$3PVJ(
z_ntqM&9^^3CXJ-JKtJpWd3%t4%x`ddbo4qct&;T`R}9V~h&-Kd=0*?x{A$c$ZE4wC
zZ>-EUkAr2l6IR3Mx88XVJsq(rxP$S<^d(I^rBCX+H*A@!_;$U_uL6$n*OF##Ns~KJ
z4$(<aFY3PO&&4nx*Xaw)E^1NBUFpV3%uJ#W(&HSz!8biI5i97RkvAAL;b+`yp{w9^
zosJ~hDV!TSktTsuN&o5*z!bPSqaOd@T|b3E!AN7+9<9^$rzBmdOf2~Le!$JzR!vY6
z??b2Y?mpZUB%q)`B4qnuL-5V0Y4K_q)1XlEhp0VHmFeX0@3o$AYIk}cCiBRV&Pw~^
zrXp8mJn~L{QDEn2?p<m0vrpX)j(Zusro4TQQt7W^P<@h%eq1Kr4&=fF(Rw-{0N}3!
zWUX+T#ME3KZflOoPt=ZMl-R#I&nr4}-+4Wp$>6a{b(A%v)2=nC-)AOwkDvA}%BOd@
z3Ct^CW#cR!l9G_PyEg+A=h5W)$;?&7`Y%)%FD<5myuU@nZO+~TkDB%KcV_csbdLNZ
zeL#V5aQWbVyz5dg8-%WhO){2jCaOm3+v87bTA(}Hw;=u;m@LnU_tv<9k70bgi~Seo
z4CSE;p}zmUrR!fT;H@$jsl^Ib;sO7w+Y+Xn=fz!rN{KSkZ^qrLwCiQOn(e^vRn#kl
zlRS-YEr+nLmb&ux-J4U*$~=Pq2Leiuid8)`)3}eIj;o0*Bug+#1|rwrZ$<=q#imgq
zmk!9d6e9*uX>2}D2H8X!J^L4S4OOPC^Y}g@tMl+7=|h$=X*sh#v&0#9S;VfSx?hxQ
zwB66!Y{_*h|GX0fa$DSRE?2rcT17?0h4JS0)5)~0L{Z<dCdSanw`GIjq*X;SCQmR)
zExF2WtudlnJtX<Nwt>P(`#_@C$3_yt;KvS^5@B$`q^Nd;m2ig+_3x%e6)F;)ZlpDs
zwu$g-rWmHfi^G);UfgA8$))<wRX`~J_K&6ITTsBlOAU1X_kT?(^k`6J3V0v<`v&7|
z<A!Y*{)fbpqo7It^Bw?}6+!?1@jn!kP}{HA%ST6aI$d2|Kx!;6p$qze|IclNKWX}v
z%j#ih`@wT~ZcblMZ+3LF0`x+_@AFE0{~q`yJt86^K;SGbDFF_N{Zozf_pdphn)}_j
z2}BjPj0r$Z!LEwib<+|91A}v9c=&R`*Fs*-$+c{<*<+93&jmaSptb2=1&VR?;P3xl
z!(Gx{f<TL*bg1qP*7^y_c&*oe{tUU}<KqMRgmz|M-%FsxurM+4*?rM{{P-N)BFOmd
z!1o}lriNEZ{L0TKXJtTE_W0p^Q$qt#9KCUurb_1kQd}Gm5)z7}TJ4#BKmYG~ydVPe
zOJ&Ml6$IdhhA?#L>#G2PiwJT%4t1<QjJ!F1g9d~_`8J$LJ|)Z=-FDyx21mnC3Kb79
zNNQ?SPUk&L-46MWl4fJ6R{fiq>Hf2T&Qw<EQ9<cVgpaS^=xoKA>$s+Pw7mwJB*5RD
zcv0c-1QWbJXU9%S)aCCjhBJ58a%3W|NTbbe|E?fZ8cr~h0o<vbf3tpd3NF232$i{|
zrLMbs{ZXv(XTOC|93x7;XQ({J{ht3@g?P055|$=3n5n17d-;i4)RcI4?%W|GE6&Z$
z1?HZ$H3)ljHjY9I^YhcL^P;}yvC=Gk#M^>d#X0$b`+qNu>*)C_5Ga&IMg1KiI9)no
za7XO+*DEeAuIqvf`3(SZU?6BjNKStC?GqVtC1!R`PSFmTj7*p2q3XZShXkFh9X53!
zu=zj10T1^*snTrV=;*B3d4r1x6D!C#9c~z4tQR1120x9w>}(IP%3EKzBu>7y{0(GQ
z0JSd-bax+r`h>B)27ZsbOK+4@!t*eVUd}Sg4kfc^1qI3c-=BSWT2=GCAsZhb7zqf2
zq|47pr|@Cdw@+z1T3{swJgkr>P0oF6^z@Bt*^;1|iSub&1TiO6XhX>v88)eD49$<W
zJHrx8(m|`W69g)am5yY1Z$sk>##{e=I;2eq0CGra1_HdAj*imq(g#49d-=e5E6FUk
z+|56>yQe4Fkoey{)ogVG5pHQ&z)+{Ceq%uK;f(OV`wTL5e9h;7mm_dvYX3*}{{Nrn
zDkH3q$`lwh$Reca)zs9UT=Hthq0w-wvC)TOZo4sK!-m((+)4JJ8CkZD#$TS{OqS7G
z`0UhHv8We0j--GHU;5V30AUDluuRc*TEn8F!$LzNqobpvqM{-q-g+V=a&f<$f+!*J
z)hlRVCnhH~HDBQ`P*susAK!oa_xpQEcIE@f9_Z={*oi>j4Rex$Nkzr*S>r)auc4}i
zjXab3$p+r4R8)vMS)fCIAtm(bsKmSaIUfJKk5fW9YET;ig}k$;XZp*RSAB#&TWyaS
z7#Zn==w)@}$Xrrzk>jjJGBMDx)z!79CMUbUaw_R3Tzz7eH;<GNB#Z2t<amM7^D=N&
zEclFMfPHBRSn<8j?*L?h<+@*694;<kE!NgWdK0g6!<7+w=#wV?z1Q>}Ijq;<1O2db
z?!o>0v9+~CUwuF|aQ~C!xg?v^WBl(Sv9wpOQk;GDDpX1=(PvrI&EN#N{1MDuIQ@G+
zY`+FNH2&?|m{LYcN(t~bdACo38qF;W@=I91bgfRRD-xzsU0`cQpwS?iKJJREqDtqt
zzcT5JH*h)GSBMXiw!2xE1+s`YZxAjnyp87wY3+bVL=+SOr1|gP7Z(&T_T<rNnff0I
z|Gl-bGK6wNQnJ~%U|NB=z0U6Q1}U|Z8mx@0;=dU`+WvE~1bU~94Uz{5$oR7{3kfMQ
zFiOtxfx%!U<pl49z=W_zRC+dC0AG@#F6azb4IOl~MWl3rlHTd}g>vvE{r=vb&1g<y
zlnR=cuz-M|P?GQY=L}rwTEA)8eYxNune`vmu=Xy93LFaD;t#{j{^ZGDeM0=dw=(u=
z*V5TL1v7Zafkfn9hBjWaw7o<-|H1S7j~6E$A%{@vt7&P0ERZ5P3x4QzEl!|I@$p6H
zRnv#IqFIywps>zrZoUbNV<-9VHNW3N7-AMj1){O8kA49=9=oe((u<v8_}{=ypo01>
zz?II<&Lxj(!eKafysIh~L#YSGeVUp)Mop%DV<6=Lug_+k_hR-7Eh~ODQzbPOOt9?_
z_^PJyeNaq99<PM20`Aks=-cG5u-RmGqfP>Jg7RmdtB*k=*Lj{P;BbQ)W_RFU<@D<_
zFXe4YN->j8M*X=lZEYDLx8J+xP5iW|eH4sbT#8as8Mw$hZW13>_DU<1rT(w0Vys7p
z`qaea=tkBxi}t{sv0?nY2tM0KO^uC1nW7;-!8}$YR0{4t>u@T!+qXeII9W-#&3Wi7
ze@@wgu?T_^Ob>sZ%N2o_@bS^v>cIT`LiROUn)YmU7Z;Z<0wUHFVg%ya%_HE7N;^3@
z{hX}=x6CB4+vDKkf|ZJOCtt{8_o@<zrWCbq^FM~Nc@wzkw7Y!Ep7!v@fB*z?AYbAM
z;R&(WRAX*f^vmLb)|?Wi*BUg*agSSFZ_Lciy?@;Fx(_K7cG!BLO2L?`T$2fmP@Dd2
zjO)wD+~wlJ8^a#h`;L+Dy0M-I42R1thUal<gY(nhWMlw8)3bsq!N00%5BvZF{QY;=
z2Kaq1{DoY8lo)<MUn+f6Q(fl<{Q9rqgad{xUg~gXz<L8jlbVGO^<;uB98h=Y2|@<q
z|GCCezg8wWxD!g%W#~gM(f?V?S`GqG6#^Irx;FmqTyEl4n`u=fB=00uz@<T&%ImzY
zb`%IpB#py(d2PV%^l&Ta?rjQ+$E`lzl%M+hi`*T4g2ThR*KYy>kc?s#vSILb<fr@c
zq8Xgih;HFfw(Gz#b?|GBUw0jxtzcm@YnNc2&w?i#9Hw0UN1}Z-@nc3WXp*T=aVLZ?
zG(`t^{$5DGzZX(an><Ozf26C+3>2bVen9;3KH9!MfB-)5_S!b6?MH#H1E!3Gq@?|H
z9Tr^z0AhlvRajjj6O&9Aa_Vb=o7kE(MjRX*ix^NEfugKi5)4a$=?s9$Qg7T_4z^QJ
z3iHy%CF5qi@c4ipOch$)@iU|O8-wZ9+juWklS0MyvY8qC`<6=%BNJ1F^DZ!3@$NpW
zdp64){1MGGeiTr!Ka8Pp)b4GAq6W$-aIk$kJ2HY;Kty>ZhV(Si;U_CxH^EcfI(4%L
z-4(c)1Kd0Gnm56B@d3ahm=2&HN)>PI1Bn?7=f+^g0foo7HL`cFx7ZWjP$V_GJt(?&
z?nqp{nftY_sNe@T4g8%{>bD?>ADf<jy3qz;W^b?M$-eK>XP_&6gA2}WF?3Ju&HV<)
zH8_(%dER0<ir49<XwdA=iJy6B(-kO@y|yjta~25FW3cTw0v(0|eOYnwfCdm3UfzJO
z>jO)*^bDJhn9ZrupY;waajG4`_n@fRn6|&Ny7H%gHu5GrIJo;YZ*jRB{L&5m{CPiz
z?B6oXkr|d&8lNrR?e#1H5v2DS0zPN!vD8xeDruCIl-OHkVDAhr3x1RxMF1*axd|U_
z$7N?z*Vf*J;@i)j-b3;Ej|nDFr-#J;1Pc-PTDM=H6HS*zg20i8`lg1)IP8kL`ueoZ
zMy)MSZ-LR)YXOJ&@Nh*?u)|8l5q9VZK0rdjE>eF>v`j@$cW)Rit|$ARg8z{{wY?ve
zqtM?oruXM-ozU=blU=C?!%vnw(eUXbA2|Mkdhg19C0AQH736oY7pA7B?i}jM!_fst
zWoJm3B0e#3h*nWi;REDwOEEDqL}1wD*Tb!Om?ifq>#TkM9+Gl$vXMy@(rX8e$`vS~
z{E?v{Iy4j&6SL3sA+m&N<a?tJ2m95)ZG@76>(3_Q>d><P=iJ;Ql#?F9ruIb<6=RZq
zvVqcLWo4DR$}Hd62^KI3J&buWSi7+8GRCelb63$_XvBY^__r#Pj+PqoN6b@+F=1kr
zYL}A!$LAfIl*;RRyO`94V*lQu(9H))sQ>hQj*MHrl{hV%atMs@ClwB?X>W3SohMVn
z?p1M_$V6W09;w;?qtc_^z94S;)pw&qj}LilLR|T%-jiDtOS^%QB|heA)R=lzB7u{G
zBzHExpuf%5OvHOuxodqd{@i4-9kSNVx0fo4Or=ZUCc#6F6Q!1r2SvkO<iHB=!ywr|
zb9c~jM<aV_h7Qc6zX=}3dt4~%PHCFm{iOSX{^o~&u>fjX^V}}YSGs)ELP^KLl`$=w
z2W~|49>zqgHtqyAYRm_=g<SnNT?n<mNF$ag`nkPTpyn&{yLwxJ>3$d$mwxRAIz&o#
z$Z_~DAL30uA;HjY2;Kf@=!!Hpp{a8uKxk68P-S5hc;A#P^+6khazUg;<!DE&AhD$t
zfv^~GWWuoYJoDYTFvokrOc{<77^mpgwk<69F0`D(LS}rJ%R##<GP}i|1@H|+z^(O4
zCG;xQ1X4Q3TU);8ButNLZWn8_3KvOO#fqBZ>8(-i2?Wv|Ymg{l^%K5gP$V={l6tNI
z6+s<rTI?F#Eo#~Ava;P^ekBOT<n^^0`S)JG{tUbF(+xUC#&s~kGHUTMPJIFf)nH|u
zD&#_%1P4?sm1Ej*Gp-=PUjmq8z#MLxJs?O-U;ZfTzU0@P@?Rr}o#bkDVxjcs(IlxN
zeZ{7j!ei_x0xx0y=`-vYf3~;FD=PYcC<O=m=UUrVi($hg!J%})pR1b2n=?DC_|5<!
z!m|oJmKh!rJ{kzf&7=*3{$A%VsHjh!hOb_)`7)IwzaX!O;~|fQA13XbGFQ*wX;!68
zA=kytZ;j|{%5=AcfGz~HLO*P5Y<5Et0GG1!zc+#9oyjCv8z3Pe&H6^Ydk5ZB0|UwI
z!>Cs>2t;5rf;{XLokt+5SHf#sMVHYk>8o5g{VfvNTES(%=LK9B6ecSq{i(|Bo$fDM
zLZk|ci|afORWD*Q<KxG`CR+f43xa|&L_Jj_!^YCMEiylR2q?AP0Iz}YAQBQ1LAT#t
za&io`v@5XLGpL*}h#0Il!<BsmEcWu}XGab;Hb4c4R@!pgS-y)38b+Z@D72W)o{i=Z
zUU`t+0yzyicv!=Z6}9Gjk?IA&f=O36_fnyxc%X8+0MleMZUfHWJF|P8f52wzw!|ux
z5At1B0xlClT+X?FJ_4`WP%b{+-eMb)7jUXdq3Ii2f_~5Ia{eut3z+nRDKxlj-Ap`M
z>OkpjINl@P-UgpOa82X}ctfu$52T;4ecs`CLe;LKtlViEL0kvC<2cn;*m^;{=HjBl
z(F5|Y&@6xj(6O=GhJl5&k`IM!!T89C8tdsP%KG{`5T6Z{)r8JhcV$<_{_X+2DAnQf
zCva~ikY(stZ(CKQho;!>+!xR!xg=$@zzYmp@-J5=5l(&n`0-;64GjtkTh3MR7XVjw
z&%JL4^$t&W_9mE&r&6I;hSLxX0Ytpqfu_#JZ)Xq?81OY@yDb2P8rcD;qdq75g+ear
z@5aIAAMaToT!iD}<E8IF*4f4q-yX`CQ>H=P0TYh<FA{*n(A1dO?(gSEjYrOD;@<B;
z>v$J1Gn!L8eEdBqoxodeWg#7RmTaCbM<*SZ1{CaPJ1Zfrt*y%L(68a3IXGONhsrvr
znf>utc+!ZdViOg5#k{f*n9OY@NwT=PB+Ryzx;|S4<Cb85e@U<sPUYa-AoGHbBN9qP
zm~~#iejWZ7Snenn_kd8k{XX8&dK(YUt$=Zdy>D#x_FDkuW0Ua_gn>*j0nLB=R+1UA
z@r%7ALJ{AK<y>S|j^);uu((a-w(}Q?w9>%*4MsET>$>xuoe&mrZ+3~(ndWAJg0#Fw
zZHd%Uy9_YUf3F=#2%SOgfZEg3!=OT`ZECvubNctun~+dktAMMwuPDr^s)~K&vqR(J
z@$|`)kHnFYn5mtgR>X101uSj!8!gpsAjSa71%IjDG3^P1EnuHuyhdO|0pCVF2RUg+
zF3^Y3)6;W9BAa9&jeHi!Yhie`&?Hzdw9ty_etdw;wY+sD!mgwMcitj{h99$478RTD
zwsYm<pq7Bg1W1gu6?6Ajou4VEy7<t`?OIit9H(Z=Dmv``<S6!1c+YIwsqCC!`0icz
zCYzo^Li!K-bB4eWs4T_O&HQ190oCVHLXqHoQ@jSv?z2Y8o3C!UDCRX1@|x!<OjfEA
zUMeRfRGb$T_x}E@9E0n7hk=2?ODec;f7Nw!X7)?-lOp@f=Wf2^APVxme7QD|Eb8Tc
zd3yLhhfgUH<`*5~O~8WS$<E6&2ZA05UVttyC1zL+SqiM42m%7I!mpDE2(GsKivEL_
zhv)Vk)<uRJ73jEQDFm;qK@FaO^4!E>YWK+&*%gN1x;a+|+C_Vy4@0rk=yU!ff_NAP
zu4Oqn%NrXWP+=r7v}Gu3Xn?=Hpf06|yF8#|@5Ggo?>!Yv;=?Y<z)zs%)-SgeogEQk
z>e|ptWV6ZIF9KTT%h#2D;poqv+q$|6=ud{(ZnUZ5Jgs?lJ5KhVVRJPkb|mS)=}+N0
zP(&vz-?qPr8dTeaGdG!LbxA2=Y5cMF&?KtA*De&*ySOU&U65Hp(-2|8uh$CkVv~XA
z(Px+ZeQeJ<WTzjPNeMd{8%g&YB**?a0)q!I2R#7}8DLB@Dllc&{?Z9VX;aEGr9n6q
z-hklBZl=yY3v7sJC^jyr%*@QZ<fNtP8cHiFI2+@ypvSHGb6B3mg@u#vjo7)k9H+~^
zvW_AJj-koQ$(^fIxsAMO6BvZ+HJB+nFyFF?g?6>1ObBUmU&{kb178h($-JDLHFa+F
zKB86Zl-^+1_~FF?%tHrvZ(lv&a}I#DdcD<o|D?@dB-fz9QP}Nw3cr0>Lqo%DEYVQl
ztQY83ID)w{NbF}pf>Muu7zVrgP6L?i+z$OM8#tIDY$VhUJ?$-Qa?Lj{*TAyGy*h%J
z{m+*8wc?S8*#h+y=nLh)vr$n!8A|s6TOSTiPB233hfn=Zcx-!G#H6zTosgM?EbZgS
zM=nWS`ulJ3?|ca+<FV8Q4;bGI+`JCiWCq&!>vq>(yCr|s`?OqXC}D27_VIJF1-EKN
zH;eA{r_CgWv{?hoX}rR*?0`4TU^ScN{~<<p2GGUNbz7Fk>g9@w*5DbovJ|&n<YI7H
zpyoB(okz!<H)A68HSijXc8U9F&J<L{a*vZ#$0sLitj5iu<7Q>U$UcF{k7zUOqDZUN
z3zVff>ZRed#2QnFo%WukL(>GWNpJR9EGZhj@x*7dGR6%rDamvrQh!$MkBvkN5-Bdw
zuayRRGjY)9J)d1!?n%u0qeAEOk-V<55=cZeKV0By*xD)qsz7i+oM%)Nzz1OhsT_AV
zQlTLSCxSey@o!@>wCy_@T3R5LCrz)0R_X5im#(h6tgM)2R9__Nm0cgfK|$fj0vj?^
z0AVXqQYJBA5)P3xDw7{xVStH~xZ~<N?DlY&4M-h{V;ad)X;VuUJ(b&;KDqcX9Yr<`
zeed<uua#yjVp-O~evy~EYZ{bZqHnoqQEAeQt*pYfoW2ib3Ar=^5QUE3p3w-0<Cw!X
z&ieA$NKX%nO-*%mw89Zs>D#|sO4{2PXP_7HCb(<o-;0Wgx}6-&;jybJ#+Ue0XtM(N
ze=yOp#seBw_%Ij&H@a<g({WY0{H%q&U0YK#(C=8;KP_zz0#fKs!=?5AfE@yW-$zP`
z${|%(HX?^x3u_-@NUr@-{Ssg?Ohh!4sgfe+xzw)w$tz0#6izk|iM~MYzNmyX(;u^y
zZ=TooM@`n^@+>tZ`)b!Xn5qnLNwK-^GHJwGpBFM#WDk|R=8cFp`&mYpQ3Ambzqgd$
zgJm(%w+!PR%Bu1OVq({c%5;t|zbD;XkFu$VgH+JV8`x$iRyH??mn>Xt`0~WannS#I
zh&xS{$@fm~h7J-Y2PzZsnu`{pvVH5dbp0VX=c+M-%lQB1!>`p_B*MUMY3*PMd|6^W
z3KSK(kH2U2!7b|X2Loh$G!z_4N2jL1N5R&2Wu@-QL`1P?iFlxE5mHKm&m-bHI3!=$
z4XQ}17~|32P<g;g!1NHgCNYf+D$gI_+&93eNiyEsbf>-Pb9O(rIG#@ud*}QGf;m}(
z+Vxi{!vCiT&%*-N=d^P|mG6jWw;MP682An`=SKAlB#e+|N{A!}2`Pd;^Zbr2$9zCp
zQxeE@y4o}K*bGOUzT#(A+vXonzWE@Rx%kd>q32Y_7dou0%_7@n#QL5xq1>IRF0nk`
zF*wE{l$8{9L6##Sp~1el>iD0X^Ab^ZRTA{Rgqo#d6P;N{SJxeU0KL6@a!hED>mGlJ
zqwae+KQb|~KT((f8%Ucs;xi^5uF13RNMFF`^Bc#PyGn^!Q^dh4*7<bV@C^K`VA))p
z)Ce2dSXv4|>3#5%{~1`pf}R{Ul-_6a<;DRpfiTX71%A}6((vNIIyTRX$12_v_)|Y3
zNvcL-L0_c<7I=C@-1hTlakL>3)*PI=L8zfqZ{-dN#w1dK_(w=zME9xTC}IWWXlJDd
z)^G<$btQ9PD^sTgmFfamQoyiB8;}A}rlqB(W@p*;#v0q%>Fn=2_e7FFa05F})SG$W
zJ8D*2;<D1l!O#jKV}y;{-F=pU!7KFSek=4H3$2%Ltj4=x8*NWjNyi?r0$&-#Y&5*!
z$`&OX(7!)-;NK^vBK748kOJdSEI%DMTHtJlWGC2C6O|qHgV;Wfb$o3)gz4Jp#&`&P
z=MqjeFr(B0pos@=DQ!H3pd<3Ka(c?P*cXQt`ukYR_9rWH>~4oTph26M=C60&*oB(7
zoTwjRjfif8a~Ght-HQ(>Ca=?o-4E}ryhoCX*#6SMZOI;vrPe_86`v{iO+`d4)4<XM
zd)IFd&Mc~Lzu8zX(dx`-e^lCEe>Q;CCRw7rIb5WEpo`(@x`rjZ8+uSi&)D5*;PnZU
zXSO=89Vt+m>-}QF@Zf{pUfH1bXR=O2Bpp*mgg!%def^J6F_^;#<<poheLkzH=pFSL
zd6yMaKMT6``{H!4L(ct;gM+a4NUUw+y-+E}j(I%lCnX(3HH3dKygk2vh#k%|(~Ab9
zp=ZCp2wJ|~oT=dM!@#s9D7!^HqqZ^M>=C8C0!8gy4Spxt>zKpeUza#VMHjMvk}6~u
zxo*uPSw9B_Xh9?@ImeUx&d&P)y?6`{!Ev%9YTElmvm54iZ$txcC4fKD05Uvls3)wH
zUZ!j4=t!m4Uo92exA&;`Q+pjLq!4LoXx%0dDySWqbkxcr+_OUSL&WB1VTcbmBZMSU
zIy+D6NcOPtCTL%nsu`g(9AK6QqtAH-kXWL1$eF2Wn^rwSPyD^g?RxQUJA~tHYHUZb
z{mkJt>KoGZ)~WGyq($E|JvToh8K3>AuU3^$mB2H)Hj94SdAsn)vKv~a-J8z3m}E(L
zC;_0Uk8I*DS_&bZ$rb(=3&4Sfde<-RZt1PV%~^0gYDdAn2A=9?`+KKdzBv~sNA8fX
zwhXl%1le4Hhg0Ei1Hsbr;^aU{^AcK2`gwa;_z03a1*DXY;AMJd(CU+MJKy)x2Nj+>
z!b`x$y-jg^C4e0#&ugE$3Qg9?BRFMM1W9SA9`)}<OE$q8vjh7&x8GlaIGh|E$EKzr
z)XaK3kAeu8kGJ?CLhO%P1I&P-XaTESl#|cP%O)TS3H+3ev(W6}^gI1$wUvg&r`P9u
z-yfX4Unaw%rt_zK&hr7h4`7`55*xyN0$bILj25(tr$E-}wA{G^6%NpXeB(FD({BO0
zA@0{lw$;hvWI*fnDohBKTW#^c7!y=~?SPnb_myzlFQ9)4fdiR<QSBv~lhmPz$1YEE
z3lud9tvh^L^ba!WUc?x<(nwSrc`Ptod<NgHQIWO1w4J55(6@1O;mzNAoD=xzqu)7T
zVj<_QzrQG`sAMR3Ngk1{lT40}H+i4Z5AaOhl@9@*U}RgP4Fr#CgR9C@f6Iwodel04
z_Xy;Hu#E7Mk3yH1qWPM#+X1uU4;g-q(EjO8GrLy6%R<{`h_p>}qD?$Ok!)+5F_U&@
zGwZGYUa<DJ79X@U%YsUJGh~Zvsub?~akjrwrTZ<J?tP$2adA<sG@|ww`{JQ*nd1LD
zaTc;-mT{@qG=>91-ZpBPzs1Rm*SdR?&(h65Y&2hJT;1Z_mE%qy=8cwYRz)sM5-vil
zDNdBTqnQ{9YtALTsv>5B7}d<oT1BDS7$+*h*c9|d!f_GAL7e^owJ-n401N_<b_n(G
zdl8s~^4^B)%^aB)p^jsnUAw_HOl6?PfTyx5<Rt@hUSp#g2|SH&=TLnqu7>|1W~5j3
zR||2m{=@A$2Za^S?-Xs+fp?<Cu-SOCwZm6r2nlD;xHpfdFXzZ9_$@N4x?S53X^rVZ
zwnx}SJ~YJt7AxpEKMx}PuvoI`GkUp9)?T|{a$Z!W^n3H*P`tSR5jxS@>Ql*SoR?^V
z@6cF`={HGzQ9l%+orWj(>PY{rdc3ZFV`)@UZqS-Pd&=VG@`m{=p}oC5F>x}$(efxc
z=FsoGeuttdmE`mMJDb4_a}a911b0LHpF$fh0C*&CGJ>6C|EN2%bZr$&h5>o+BPFGX
z*{bhldR0^H?IwNkT`I46Wcg<RLV!4;g1o#(Kpk-I&i>x0&9=1UPH<(C2ZM$o{+O^Z
znb5|@Te<8yt=ZXV3FB08Fhpu>%#@^_E>J%|JH`M*336U*I&H8)@#jy6Dtvo?L!;Uk
zFF#?03h=^N+{ceIz#|cdLI_zj4nq9|99L0ET>-?F7HHi0y+AzgUR+xGxY88OAp!b+
zsT2iqo)jWzV^(N(Ob1>u(MAWh`5#3;+IMeDej*uSU~xM|B-RuA_issjq{~`MjAf(S
z8P>qSmXf0&Z3EN(MU#io9|H$h$pkv{7%q?b$=)cBAp<NN*^*I~y-Lw**_YjQydP2i
z_SU<Zc~AcmX6r$0G3DDKXx<0AWGr|0>B>#I+qXxXTGR5kyaI9a!`gyF?x2;)B<8d)
z4o_jX$7)uSW}`)<p-<5~5TsXie_52trbNiTATIS;F@<Y53(XpFKO=leAU5s*&!=5y
zbQ}>}A@luXonuZy*W>}~m)*NcNm?aGzAH`c87_{F1XAu4f$^QpJhJ%te-{1JWRIK}
zHM$KkSKBc^OdtX+=^(i1JEZ17t6Nu71EG)IZzPZ~2o=9qnOVJLei~0FBC9LE{o}gy
zV`bKe2>dc*l}T}2fw4-q4Q1wXF1%^)W&3x`gLuzgJv;M0Oi{ApYYRH~d|?sFYpvnc
zJW|!sz(z9tcuceW-a82%dJppydtJ30Y;+Q{L@MbkWBVjq35Fq<Z~%z}NDjXH>*}|6
zq4y1tS;$qu2bWt&sEZ*<5Yv;-y=Ltla0`o<w`TklXGFdoszu^^2H>lj433Pjmy*h6
zrRrU$q!tsqfb~gF|BL9J!L?Jn{#S({>`LXcB^6o#00DZ}(@L{n*?6M~Hy0i#6NSCG
zORH$7ub=JFk*uPEPkEh}n;QcI-!7FYH$mg?>LP{^Q)0Bs3*k~o#R0J;lwdIL-fD~Y
zSSf96+}7CqqDUM55G$v=Tunjfhe9{OcjxZQ3`W!nNNyqt)DAGs{HYJEJscb>uz3zE
zLh|JHr?lyVgK=?wNt(`{aIWJSJh?`a6Ie*sf;*lS`hEBkos!X#-J<YP`>B3d9^$L`
z$h&wd)I@@ynCj^83sL;oqE-5B-{SaW{n+QpUxS86d!DISXisaq$0N|$9$Nd`u@*Bi
zU?wSD-zePV(F~MB!GB9_C4_QGRA50Du>Q&^k4n1Z2L1fY>qsz7hUh!l4XtK#E6X#F
z2dF1%PfjEd^!#xz<mLTed?QqQp{JoCj}m-Ka}By%gU7?$7Ty4A@jHEsgb)HwkNb(7
zW+P2IZ93~toTJ8DzGyK7=%**t>q0Js#-ZPc3(<m?A9~)?-Z;#v)+MGoK5LJUit$O6
z`5uVor=N66YpI@A{x)U7g+Z}0)_tDIaKoSGwoV{>N6^sQkI$22LWvyycm<El2;31e
zba8eDznJI3=JAba?5O<0&a*J?808OK^(ZMpUx5PA;?EynN~Din2qGdHTT)v8+ky&^
zya;h-3)xaAWNFKgu>yfUbCqToukS#JPp5cMOiZ1!@BYi{=hTy6fX?r*oC_l^5ZVs*
z_y0KBc?&4Ip!51R6iTol@4jeQm)JWzj0p{0jLLxl5L^Y8W7>EXhMj<n*>oN>$vbz9
zWD$blXU9>xL&)J}(4KR0a>5V_affeYa<WvjkOp}P)=$clTj&AlUf$k28tEmQ06r}<
zSJNjZCdP$^^ax+D^5S<tM!hgZPf+X_mkKEuGzbEs0;|ptrEg6ThQ0&}M5=ts6jf5z
zxV2f=giPMmmyi#0)#bIdARcaU1C?flUWZIHp8*MC7u78JU=39+m!%C0U;6kBgE%c#
z8WEe-1ErME9A`=U!Z%aTeCkX^=-$i94I~b$#~JCkkFj&6HDX|W(aXp4@kw@<EW)$>
zbMZav)%B!>i`YR?T90+YA-V?*Pj-3nlFU2CB<Egv1}8?K+N$f4pz=>XwJD>kPBF#_
zmPL>HO0EbONR6249pqrpQDEEO`4mdbeld6%P}J|~>h7Y7S@Z+On@gt<r;>6P>5=@I
z2lc)+coP5@eH=2Af*yn__H&_Vbyr`*DYsT%O8qF;YT+v(!)TOJ$aJ11n!@FEf-_O+
zCLV}h-_J&EK#rbC{y?m%iaoGxPNFqS)a~*f>HwbkW{{~n^Bt<i-{-!k?VtQ&Vr1lS
zl1oNHdL?zWRhbhqdLnX8!O_}=i0E6*T`JQV4&yTV2g8T;46ZP046=nb;#OTa8sAD8
zq|t^h!7ejjXMYLrusez@ZFk-Q1*DIq@$p<gxRjz`8XZH*+X!QrWo|#m>%Xo;2JQN@
z7Z(PZ0SDlrC{+bUFlvtwj=4>Ni0h*dZ?lKn?TqI?-ulu|1$;URieHfRl@kOO{HR#(
z!F&UQ*qlOD8xT|&ErU96tW-Y+ra#&xy4euE6i6EcZgr4}ETu42tm6imi(m<qL&d67
zmhR`*w!d)+mF6*QjnD+7@!FU>3MyPRV7Us2Z(nM8B~}GSu)=)gz63&{SLwE8C)WS-
z&o5ywNA7tEGni34d9uE>6(RsiA36KGSxK>Idq!y76H-_ZEYVIhQ)`Q2XLS>u;J(s6
zKp9M1uk9m*N1$YQZe$$4vja@WcHgr6@4^Lbkbww^h070!e!O}>E@a%^33&jG&Kr?r
z^HZhz(<OQqc6N|Ei%Wh}BwWzx+Y5JhWMt&>$o8~MOZweH)MIa&gcvr3gp4_wjdwmw
z*-Q1ym2X}PEZmsM_G>Q~b<qjRzkvEMbE;{BT7)OXDCDNnqww`p-|aY;(m@|&w5<6_
zyv&7!rDNi$&vC~g=uVW9DK4dS0ytiLqX`d!h%*j~`t96NSL6pCRnF!IZ9iy{RQ)W7
zCM>B`ZN97Wdhfk1=%cc_pB+*xQM1(Z@QdD*a9>K?zP;p5Tzh$a{GnMwS~<H<p?F4$
zt%T^~3KNg6@WgvYt_j%h!9okX3Zan|wH&!-&<EZF1=FZ<HEWYb57?JJEyHNo+}!`w
z_W;$Mx|ibUy^{2p^MAm$7ssG&wkn7ocACea25SM{h1ex!5d*TZygVwiYVb{Jt!`(B
z1*PYk80%GE-S8zTz46FB%bBq36;Ib$G%KvT0xMqYiXAAY5d1iB%f9%Wf*x~e+jzmS
zMyL0yyNC#1HtB^@qdgUF_D(n76Bc%i0|$4C?5y>7rp*QUrWX+}YBzTnmiBmGs@V2x
z8{&1Y#(r*hZnK>-`z8HW-~d7d*DE$k^5x@bfQG1gMt@6Au7@X&1Ly+4z;p=Ue0+9x
zjBkQ@c=FyzyuzR-5N!noi*yXU=2q#iq82yC-VJC>*1<8@ZIt!FTky;YywevMvfRG+
z#z}#dP>Qe{WrBzWsyYSui-^zduCcs1@K4dNMWt|BZ<VD*v8AL>jmQRV^?K$C6Xb)F
zi+PnBwO%jQE(N<opt_LQ)818BcGgu50QR<Y?Ne|=hgpGtcU2AHi_!Luj!}fPz{R&l
zSHf?xU@`io#zqc;-l+DjKs)Uf05o<iU_n-ak=u?mm^@=kgo?3|rNxgpg1$~SZP)YH
z=<9UIvjxlk9eymUkd_KE{=g&*gPUTq&KqN0@_T2;dmw(%DNv)d9f9Ycnj386pTsNV
zjHaQ!tu*QC$Hra*TpyLUpsWn^F*Zr+BWehSJmR^CRNrSzhuKA}jQ6S~q%NCt@24an
zuv$)PpLOuot|U?20N-UNcSBDG%+?a~4211xho#4VVvV<#_zW!?6|hKxdHudIy)x}V
z_cuamby)SumOzUZBQnRb)lyAKZfDT749<)jL<_Ohh^gAanhgw=eCqt&mhXe!SZWB9
zUkZ{9ni!o3x~YBG>RPhpg{t5^<yWn5lMxqJ8n(<e%MnH}D32UW4~Os;QHbNZ-zAZS
zVI5UhR|h1IA@K4i3L;joFp-(q0b_N2ef=z9w_A^=;iF53D1q_hXs5)1G&&@4K<PX_
zNjPr?1CMa=C^!z<r|t{)eNu^i18vmcpbb(XS008znS(<+cX<7g;BX6S;*AThc>753
zj*I-&$f8;Nny+M%bP3JS)+PH7RxxeLYT59Gh;^DI`Z^lvsb};^tUTYzwX`oOY<4W@
zyf(W3VgVD*&O3u58H;^yEkHbbuwN;h<`EwCnSFn#WRp%=868V-O*g64l}30RAgwQ-
zO`e*a^bwe5BCB3Ujr7?2Hk>XPfcp@Z(mBKjLVj|x4`DXy1eNv@JIk7z>Px^P3_tt`
zHh&1J)%{2TILM)R&4%$|Z7tu{O^t^SB~eZw^bQ<!yLt?Zv`csYlnPgaruFL=ZEbC1
zV`>u`C<dhSYxkeBhqB+hBT&xX;Os~auG}8=IrtuAP)%GJ*`O`2tWbAs^Ap^@9p9I0
z>VE#&d$l(X21#q|u5w$NzyW}GIA&1|lEFr^0qy&{*+f$K?Pvz&Pco05Q19|tjfty8
z9!Yf?O|JGOxJgL=o)I+dUA#(eSQzh>ch@`t(l*zMIFx}9)Z`;CoC`5(944I{JjPx8
z#2<jP)dw9c3kSzFKTxR|g89|!T(45dfh^Dy>%qM62W%f^uweq=N=)+l93_4yqRmIU
zaSOR?7lY!D{e|LXeRw<v7q<XSnAT@&|F+vC35w|5cs86gg>o11WZkzaNE07bk|U{5
zBZc+kw<Sos#|z*5e)8hyhSl4j*AGuu4J#74^fcoz2+9F>&*HYI72w8C5ZQm2EqV9i
zUee)~sIp4X*Px&v$h7zk<|>xL%lAj-xXcGrz;hr}|7*R2)5Y2GHWIKOC`IZmY*+^8
zkltSa3v%6G;$n1tW3re5Vmntc(9q5Ss(wxp$CYsA_v9DQ0q8Q9tUe_M21(TDKI#ol
z<lLcN4ed`MqUzIpb@?D>ZJa1mesJ)kl}cYnV3-a51<A+;t=OB0tRv*WcTArc5}tAy
zoC-Wgt+HSn;_&J%sB*G(KUn8!aND|f=Q!297iJet(d2?J4u5}u!4qU`Ur7s`7u(0|
zr^}FhJCVHGY(H0L3hS)P!?>^;h#%nH>FEvChxyQ1axs-dFXJm_yXAFCf3~m>+nhHS
zp|60FsR=~)PoAiOi#%+&wDa}Xe{YEBAt9YZdP@|!V0tT#o_R0hXR_z*RPNa1Gwh=I
zkGoOP(J6T>Iie|=Z02g&vNWKwu>hPtkRO$|-u#pGjB})X=AaHa?iDlmt}uoqCzv#g
zWfw)@pwr(P8v>zYdpk`7Dj4(#34LbGpi<e-q1Nll&07lizPNVKHZeihXUs9P0wa#n
z67+W`^YdS%gXi8z)A!Z-b0EEGc{|R~5SB6G6CM$fn3{toDrR|>eUNlCGro%wZzz$1
z75A2kj_Vd$d*^cr-D2%ekg5(j0NJj;9_2s4z%d>G@1a$y3Q#ePGz2t$skKc57*6sC
z>yFs+C$ele!a2#)Y@-cm_pr$Ly3dKf)&t#uR*Yx$N`X|owgD_I_ZKhPpLYbqXbHwl
z#P`yH<gmTB2da)!(5ZbHr>25&WwhtvY*m@pBFh7!3^{NuZY#Y6L__}j?pj1B6B{Z(
zI@3j3WWEA`z{UD7b0q*+Pl3&RQP>#^L7@=ADW+u~`^1qjaNp#Ge{aj17ab=`*_=Ie
z3HW($Zb{slpaOPjdsd|hS3)IiGbGOTi4ypU60zH5<WEpZ^xo8LT%Djw5E+kmZ#U%m
zT&@+b;#Ym<2Mj3}P{|+uoUVfd8Gw194boH*iRMG9f|j~^gTo3batbsPEG)$UHMQ{+
ztG{h5E~cWw!o<v`J7x@M@jeBwuS^k`J%?T0oFHdsH{U9l4{}Nrv|$hr0TpDjV}<R<
z1)%tUwulYWAU3sCEdZKyFbFyL+EfQByhv=|HQ>|d%2uicz>MdE)Ay;ly5E3~1ZJj-
zonLm>OET61!*GFvd946)!!`?=PK$w^2;vsvt8sZ@TPx0AMNva`<}3+0P%CL##;6!t
z1_Kn#^qJJ1f`O^v*DrX}#KZ)E0U|cM`Jo$G9CUP=ja%P<(o%j(%42!WCR*X-AqqD6
z%b+H=gcNqvDROBFgAt&pK-0AxkV!?~oVf3I8)b;vw_aUGhggyT1NKdz>t$W6gT@BV
zVi+v}o5-W`#fuZ5r5eW@=0ZGE@9Gi&3h)31e1^&W)=0LLF3}SUoyNjIf^P(OD+x%|
zuGnvPp0m{OnGd%DgPm!;2%{?I+Jc&S(SRd)OY0r|#8k{M<`pBPwe-FU>jp}|)ZiJ0
z0reFJd+e!2rZ_SEBJ;!5Vb4EDyD%2QW1wkC%~OBdJ+`#9;2AbB_I{JaKv&miubYB2
zzEvI4B5Aw`hjf<Owc+WLd99Wkucf`LusT|fX4DmE5ieCQHZj(JRH7-(7XtR{RH%X<
zxAG<<-u;QU^6ynmIV1AB<Miz`xa(P(e4$=Zq%XeVP%fH=`Ob0>h=`zs`nD(HP*M_j
z*zfLnncB4uwA7@*;u#D=ytDgYTLt_gd0#+y?{y!a92D1|{Yo35xIwJ0pb$2U*t--y
z8KM*7C=~JfPNpc%&Gl?X4FnIs1%dHY6mA3T8$bZuy{?kus#>8qagW9kTf5bW`|PBN
zqtA5c28qwPsPXKN%Y|g+#GS2|cy@aCk|v%M0Vw^X|5aahb~c1g5g`G`D`pFz>GPwV
z00ncK6?TylwYD&Yd4|ZX^>s$EX-0xau*p9)31mtGG42v537$i_310i0ZIE{4;o<%9
zhJi#T!JWuQEzPluFr4(bn&pF4AVKW4QcDw)8xroo*=k9WTS<G4u$XUd=oNRI0U^Dw
zudnQ?(0>U|nAHT`lfzb@tZ8sGI(6NPQBWhUXo2ZBxdx3M`b#mIocR`CvCP!kk6j4m
z5qUv=NGPw^^plE(Rd<%BpfB1#B+k1=0U=Q>(DJP;E`s=0pWZ`1^1}yjFt7yJvY|1J
zbHxa?9riiM12_PQS+(UT<a3QKM@*z{6XZaqhYM`ZFe^KNB2!OSx7v0t7%hf9dVHE6
z?D`dYqBAOLm6Cr8m;n=GS^rZiH<>t8>(N>iLe2obruz9oNcht((_@ZlV2f$LH>9Aa
z%i*M%miQZxA;u{Gl6~|oSCkg5BW7X*J*&uRd!~=E;7!wm*{v_(AykryJM1HcULuMq
z#Jsc*r4$sbz-*Yy$?d&v#k1{22}l!xwd4w{nrf?Y;P_bDFbpn=dY@>ncfh}F=jbCb
zegSV7Dx&>^1K2>o5b*{qFW9rE3RhV3ri!!%U?d3UlY0<SSbhh<+>Z;7pV`=WuJ&ew
zx~#FW(GC>D?d@Jbtok)qx1#T|Idh$ao1guq7EG=HUBRPa@cBgL*y6D#D=O-}Y5|*g
zWbfk<Pt>qxr9Zwn)Nw1J$uCvEAmO|sGE@tHS8F+ykTx%MWaRLR!gJ?z=`9ygiDMic
z{jWi>&Th2%HwCwp(yB<O6r|twr?@aOl~){?WZwdqW{n2bX~7e9d;kWu5dHW3C`{-0
z^b}fgg<;thVEL}_f{=l$5WMAHA^94Azy$ueZrYdNmX;Po>g(4$PRh{|(OcBHda|J2
zT)lNECrexCeLQngTY*B!ys)jgzio`m8A(;ihR|G6AKc3?$IK35sm&!}G3|`3P6@{w
zpqK7JcMA8}C(I<nJpG#ZctXI6x3_@H{Q8gn5?vqdQcDBjp4&)lH}BpB%ZW7^&@jg9
zC+dDCAtkL`9gPKkunJnAZA!Wt-R_OQ3R1}Ipv-O>l4oe~jhbnh%xTbQ3oU6Ij=@dM
zmnak$qh6irh-qg?OGxKuluT4_d48PF_$GIo3>dUS3{9x*y}j~)$o@xnDaTO9r;zjZ
z>Gqv22Fv(cb$(zs<9t^J&MQNAVKiTX<{hv-6N693kI*5ywOPx6foU;I4t_!nZ8XOZ
zV-ynAqn{tkJp`ue9S{rp_*?+$8o+L2V?)UFFc-K+CnqP$DMVIz@86FE6&Dqm*xAhk
zR=uOA#aIVN70?KnIXFHJmfQ#a52)Oz^EQ6|gyo}-gEI^?Yy5;WD2>=2H&zd}2n-F?
z0G)7%?)`&V(CueA6#`cX_$6F?M0u2;@tkYD{0M_<ki}i;kRg-1@L??o+h_(5bIKFf
z?mD8!>K-*;_K6);-jQHsq#^qdA*rD5e%c&XwjGR?Dk!57#Qe6Iib5XIfF~#%2)e*~
z8r?$+;)@VF0W&!eRny?qRWh$Gk5P$;ECU<@6Lg@ei#R`e_G}ZHsrgo4qdL3CKrJt*
zfy^;kSy|xpCM!_pJZ^BT$;pvSppODQM#T~gZvp$$g#1+pBUjgV$CYt$BM(BwUu+UE
zSHmGb5(`tx&*jD|z|L<kf|)shEY6!V>KYn*Ks=e*f-z%*A(%w=J}f|!S!JcF8!N7N
zMAsyNm5E1dA%Xf>2ZFd+@5fL;Br?$*Uui8lxsZ_W!}gH%Xp-WC2!sHNFJBknC$>Nu
zm#&$;5g+&~LN5%t)hx`+^9@e?jEumI-PyiXK@>a>5CC-QOz4uE15<x44O*!Dt|BrM
z8I3#W9;{y+En&?T=H?;~Bd(0+IokxQ;S=UI-T0Tq?vY;dA{YvQ+gHvsTuV@V^wgD=
z-D`nZ=0JNf^j8{S-vB;3aD*|cecXhC7!hTF#nmUZ1U1pcWo`>>z>(}=hNP*ar1apy
z`{%~RK=DIH3HewcO|{PuqgIxF4x`*9PB;?pzy3Ts%lThYd~;O#&Fr)^eJ`&spuB|*
z3MmbnCMpEzq9(v~0)Q^q$<o-^uq0(0Zx${(6AKG0*od^fLKkmuUkQYXZU5d6kZ<AK
zX%TrggXk4!-TyWB9g_BdLDvXzzb!3>J<${m`s>TfImN|5AMS$f3>G)fv-Rc8&B6a^
zi8&mJ0>R4?TD7s!(ZYxC9LMui-swmjNkEXS`O2Qx>(tcl&Q1W)LWg(H&zPET_DxK@
z^7TDG(Gm)pnbD=MKtCR)S0M%NWfXe^eu$($)Mw2K3EkkRCF-!;2>_?XV9L<KjP3`a
z9G##Y_lvV2pvr*<^do)!|7vMN!7Ctv1<Je>QO_wrdFHCEXwO|ygqy|yMIjUOVoVV5
z6d4(-q-p_n@31c@N5x<4%S%a#0+t?MlLWh<p`oFdt-E_?uEOQ!g71B04H+4&6@IUK
zR?_pew!-|BN{N-FTE*rN2>brMk-NJ<`_e;DFcE-M%45%b^Ken?zc)r?z{nfNIF3dJ
zybT?koC5T~vskY{O#&svv8>F(KR~L+#;odJECBq$09FH&+@@%XxxEd;MNUZ;AYs<X
zMp=V28ldWsj8LquiN!l&9=n0;Qc{3V-6kc4;7A@0j&j2fjbMuhg*FxYl9c2<pVL2B
zj<_cX*)<TVlq*18_FvH}4bEPjk@5o2)S+L7ob?8)ae9Og{3W;*g%HT!FkPyG8T=lJ
zT&n5zcbGf?OcmLSiyH?LCMZGuY#Hgn_R!nw$T5m^k{b13e;@EQ@RfroYJQj~r=+A{
zk_)^{3qf6|u{i|%+~nyBuyUw{jS2s8E`{Y1DiSFPhA;!SJ~ky#nlP&v7?5watWMD@
zNJ}F-zX3!`SpaMk*#{M55s}CLQKBIJs;VP?vT<<GB`AOfle5L=04x)~4ToE7dP`nu
zpIU>iBv>z@8;ooHg`k&1e}OZ0@3D34-GfGq=t|_jF*tuE#l7DDdKbW*qRIaozxB^O
z`~NhXDQA#N(aTGOHuTv`kh%XWa-liT)kk!9b%C@R)ZC!tlz<C$6r--DtqnG^Qxlq6
znshyBS1uy(drU$InVPk2d%GYu7F8B88+w$IqU!}MZcWW3FOOy)$5r;?)fMK6*Oox#
zh4m4}$4?u&iT;8GjHzp?C*<+}&8>PQKaLRojTH}Gz2fzX4y9vAW&hDz#}SRup+c;h
zWiDf!M(k0b!@p}MbVB|y!qGDpS9-`#`CsP+c?>JOz_>W52pqBNO%(o{i&c~>R)|SD
zRZ+onEv8ptG5qe8ZszY^Sr{KKC0}Yy^IcMh{Xd&$uJY?E*Iq%aM!SD3BT#9y#&%3j
zs`s{+0#>zwO#R>84wZ(C%0i;vxI@V6Vdyo9dY^Op|J~WM>0UiVJK5&6{WY<^(q9X$
zI7&G1ICFA>g-=&kEG$lFCduH}?c3$bd%wTxOF?AeTQAn}qvPX?lQsQjcZdJ}usD4A
z@raFaY`QEjlpyF|>!0?xmX+mqB8(P{GK6Y`J$Bvu$sjQI53sXXc|j-oeDR|XJr1BI
zk&&Y;qyPCF(0svLGRK929#pqV)ATUmZ4dctaQOGL_r)S18v||<6&Xpy_9%AsGr;oD
zl-C-5_zbM}`5GG(oXyE%vgUp$s2l4iytfy{B>e*dU>rVKZ6y`RY9Jua%Brjk#$>J+
zXM$kf4br!SYQj|0{&eu>cH0=M@bUf*tRb(X#Y6#};Y?B6FEeJ~XsQdku8(Cq<FgIl
zQaEXW$J+PL%7H&CuM6Hs0M!|XgbOh9D%g1v_10GQp3aoFL5Bz(XKSf#A=nWDy$fpz
zHjeMO<;K~P+Ob|MJuxt-*PbpD1;MA|kBPAVhp6`s#Cm_@##P8jW`xMzqa;aX%ih^5
zAyJ`_Y(hpUdlX4Fi3kbF3@K$Kl9e(_bZ5`s%Xyyf?>T>-<8a@f&wE_g>w1lo?iZsX
z56J~AK--4P{d0HsBX9r#Zy2gEKeef6)aV+1ZCPUNkIN_IQb54#?rH*oz;g70Dejo{
z<--vf=&bOa>>*)6R?0RyBal@8-!XDUKB@MG;%j-D&-wb8PzfQ&G}c@GZ(D2=q&aAe
zJ2FN>-y-nQKUwTsTKX@Ji%{7D{G|oK+sY3-dpq2M84zG%=E^4PmjM2E0L#IHpr&i7
zs~4D+|3rs<+U>jzNPqE~C;9kDm(D+wnr*$y96pbE9Jux4h&KfJZ^8@#)66m+j}whD
ztKFFdgeZJixk^o+KLH$Jq^Bof@<Bm`cW=VU|G!WOPW!u$^WX`W3-a=BAQ8&h13{?K
z)0E@=R~|d}Im2Sh+Ir5R($gz2dM;$|^81vdK#T_N9(>>44q^pmVWIPnj+1C2_`(uK
z>U=4+A?!ZR?&9KN>tM99Gpv10y8rjD*;%R`F#m%R<k7c!LHn(^(9#`56j<GPN#lQh
z5wYIa?^-xGISpi~c7cKLMwDR>nDRg~n(<Ve<KDQXUR|XRdG*R?eySAs0_kD@&Cn`i
z0pX&Eqwq<`<k~<jl^-7HV$T#`L`1k1h>*X-NG?OdfrT2KmnSNKC7=akjjL>@DyuH{
z+YY@XhaacbhU*2m$Y<H%W?0e1Ax1|+4le<?3Qf5fu28+pQ8PJvEmeGeE<b-NCZ-fl
z4@d)aaNt!@$r-XZsO+*Q+0D}Oik6m$m>o{ct5>xxTeS?{x42G|q&nQ<xK0cWC;W0_
zp3O^kXQ`HyJ6g3kuFAK^Rie@iB?W+XzVVz`*T)r_5n_Si6k4hgyd_c7QVz|J;eQ`I
zF!!6qnrmJ$6|)|~^Zgqh5%>z#4xyn47+fh80**v3PPfI<pYn2nBE}z#lwbW`wvFrL
zo1+vu>1*QVdqAm@xjymnv4YZziV9|h?Arn)nR~9yj?ozy8-MO)c&08X%&cIq`SHfx
z$Vl79jH|@vF_&Z&nSUCarKGVikl13%*!%eQ?FWU0q}&l{q=ir8h>sudLz@CO+)Ikc
zMl2vx%xTRL`|L9P-`6EDg--h~`VHzE8KDa9j^W(X5`+F63)&4*B%C431i~#kG#k$g
z3rBw*5WeV-IB>v6W)@6dZf-A1OVcDAx~D$bK@^C=-o7!f@z5e%_3`@ztYED>JNN--
z9+nx7yIux^Ry@R4z$~PW37>ayxksXmP^jP(UQf?OAa*15fv!uxQ?Xsd^xo9!X0Vfm
zg2mC+(?frjcSKwvd!MVJBJu5T)kfA(?f2=<x7vO_uDa!AIvN!n5z)N&42z!f#`Bq>
zUIQ&7Dn+_1JADfa$^b#`h(r4y*lK8WOc}i;c~($x?^UO`XEz9hJ+a%Oa3kLZ9=|%F
z9JfHyNhr0?l?)$VBsuK*XNUw#&tq=bVXV;`bMNiRi~>I+Y~RlJqA0OEr@Kkm*wR5y
ze0=|vP5m%-`o_Za_gZgC6{F7uhRICgkGM%p`VCQ&yL@_L)FIfFa<s_2f(5C_Xpp{w
z!wO=L!HY{rr?sAZItK5Y4JVy6Y4+I_=3^I|z5?8_%hQ<!aEEff!$O5Pc6WVr!_>!*
zZZCz`)?Q_kMy8QHv#_jtdHWjgcb^Z7S?M`_99yeON=<GhoX6EBSlo_&k82H!erHkJ
z>+Y4q7f~C8dg&ZR(W;$hKtQI*RX5)wC&!kN^{E^rVNc-W;2`>Jb0PBp9o>_h9Nrs-
zD#~Q(6{s22bBVsSIVP)Xb_g)?Jj=^_+fACyQ5Kwi@UICh|HrAtb7&yJ+A-sB*ln%g
zW<^4J+g?I2)xMe~wBkwb*;bBN);BHt+>U0s>b$mtq3uq+Wo%-iThYO<dRzE<obJ9T
z?z%m@Z#@pRErhnt>hUz$*Tep2x|JFXZx$Xg+G>KK#>wOzbp9kYbJ!WO_Q?tR3`^qF
z<+E*+{{EXhO%CjRhRHF{7~&{ZKjm3b-SSZ3BS?&I9Hphz$3wE*Qy+KDC@V19tM11F
zt%HQKp5;$9_O)n!JR%J@TL8r0xhCm5j}**^>}Sl;&mxWui7Dp@9S+%*(l~JxW(?$9
z{ckc@6K;kS;<pVoyJ{aS$jsbtmhz6}j>MixF7B-6N(qGtSvPM@n~82}R7SDi+v3d5
zsxKm7g=X&^m=sM<#Xthf>i2-za?I`E^%uc0LrR9-$M#%yE`-xnj)1T*%C?9Dob9i)
z_&60N7^c*{ZncR;^hBLiX^A<ZHeu{`^*hB|&qt?zK8Z;+QDO*1CSO$4g3Cd!{#)-@
znW}F#ly8@i+~tTkM6x5qIy)-MLQfy!ieZKeNq^<d^zt-yilxUdgH+1SMp*6>bG4jM
zmsJ<0id4GQMw=~0X1m;zFrfTlx5<_LY`I)c0&h{xT|WU0<;xH5+L}lIW=q`VAncRq
zKW()Q<*>TS^k3tODEMS?@i&xwNy{N`X;(p=2O+2P#~;DJ4w?AsB<pUwlDFo~B+)2~
zg%lDgOziKTpeZcsX&zA4!JpCbAZu9{+@L>;NLtx1A|{nA1%g@=f>XEnBP`|3!|ys@
z`nZ4(ByVNKi}JxCZs03^x%J9{M|b)-j>krx-fcBc9D7PFo+BY8RH(49SB<yq)Ju&|
z-VNgBNj+`Fx5*WF)c@3s7Hs7*C77Z`(3I2H|MdFx*4;L#k1e`1Cm%>gYsII8YM7fl
zM@8w={)a>H&dhYMuoS*Db{~279wFATN+mZ^ukZ(4igLbY9&zVR{msAdRMLf65MaGi
z9+!5Un3i^0t!tAXnmCo#N*CrgRxcwHNb+*BAFYj4%1s46H1z{XFDMlGI)}*ScETl3
z8r&=@ou?DTbw%`oAD^tRH#GK%B~^D_I7h^GOy{LWlagUfYit`@TVZSXL?oH8v08-I
z2^>{DZS7gYkIR6m=XwjYJ07alw>PyHK=tKdDg$20lT<T)y3p&P&Fni*TgEFapZvgq
zPd|-2kIymiU6=X4ZfftI>!ouM_E%3=&=bn`az+mgxwx^tbf4TBtSCBps{ed7E$hPz
zyc(uO1>}aGQy((TFKh_V+rk1LU0&^tS;n<Yh?2IZK9wW5b>`PE6pAu7vRNlwPh-e3
zj95I8+M9n_{)~t0)h(@rj}|HE+PHZ(Jq-=2-YwgvHIOcOrKMqtw@AezZBk@By}5p0
z;Hs-@#uJs|2U4CWuNw>8-D^mD=%~^NKW5!8w>y$_4|BY8GW4S-Zs-;x8<<NvQL=Q&
z@0fEf-2hR*_jVG1Xc1{)Lvul|UkB)gynlG&`t`E6x&mq6-&$d4yN`;>ln=p$<|q&G
z5wnYn-z&A=&zOhhCn6-DZ|`^Mfv|Ra<uAReRk68BDj9r8F$`mq$eu&I5&SFRO^m=B
zC7A95)2XwnVT1@OA_#6?%OA>Zn|wk@7jNx~piVn`O_aVhw>9kcZQD%UjAxXLPa&9%
zFK`OTZ^oi|od5p)dlZB|8!M?$bKUgz_uE)e+1@(ib`e@s>&mAYFze=)pn!uwY>3+O
z@1+an4|_RcwI5sT#|jGHH*#pq_^9oX>@(YuBxH?qBZ2k?G#4FT&gB&q*<FZ}`)lsI
z-i@G8RBfl+2TEj${)Ywp1mT+#C=)mx)_f1{-9y-TPN^QU6Ja&VTP2QyC?$HH2PO<a
zw+03W-S|JZ<Ur=G`IvJx9ii?N`|U?wTQSE<sjbi|i*bA}IhD2cpNk$rQB~D#{xQ+}
zPOX(&2UAow*5~eG8U@|J1#dV3V45N8G4%$7y-L>+{hAxa=;_Zrv-EDgJB{RS@3jRd
zl$t=s_i69AMNq*i28@aBip$BFO5x}KU3_ouF*~^Wd%zt-tYVXrKe#F%*BHE)|Mu$m
zU;NKIAresMJjq@NJeFZ+qjgiml5C<x2;Ru|?%$7BSJu=tw2Zi?(^KnpL=AbG#3wrf
z8&&pEP*ehk96eu!BwZ`3*+L^>r~>$oy+0(-iPg(-3QiBomEpsI|JfLBpCO?%PY^O1
zhqbKRtNDLO3tfqn=c9gRT}N6KEe`85D>Jj3Rc`o4OY7Dx3TkR<GO{;{;78Qd_yW%`
zd1@*PjwKX1`&lGQt!kuz&7E@psfEsB#|{ne38n1%%Em#-OKPb7g6iwHK`cW{XAPnV
z_A<zC&mG<|3QkOZJ>fcaLbm);szlB`wo_~e4+@BjGq6ZVNQ_-Y8d+>4_tf-sW(>+@
zVS4MD8;j6_2dvDabuskukpZFjB6G{PZ+0WEn>M^v(2>U0{bxIYHFYaV^dUk%c2XKm
zpCLz7C;fqzj#j#i_Mv`yMn>ZT0}UaPqv89Q_n8^h2h@SkhS_?Q{L~o{I~X7wE$uCR
zTvU`*Ts#ZG|1BCh=skm0Or>E204&*nF|-7(yf_RIKydz;tnZQ{GV0&RXS7EGGKGls
z+t;sen|Zde1)JSOMG+U{Cc+@<T;Vlmdr48C8)_>BUzGXdtN;436OlG=4ctlk8Qg7?
z$Tbqnf>}<(LN-Z78*cjKBS?m^52S^_oaJ~Z<uu`kCL<$Z+6Hh;@_)k~bfF}0@}l8c
zIpXcUSop9rTS8Fztd^`EM48$P2LR}!he(|t9mxVu77@B!ILsi<|70gACH0eX_20uc
zuJ(ckbv`*rFMxj@-6<fFGoOp=4rM3>_n={Fp<=C6np4*`G0f3u!KNDc`W0a<=!RQc
zqfZ%~OBmw?3n)n4gC$|CF|6pqg(n#Aoh!4ysOo#2O~6?(A1wPDk(blci<)BW&AKqd
z9v!(bwxghg<)s?ke?vuL&b<;R`&o!X9)9(lrcq-ME>bje6e!5g$Bf|bkI~UlNtff-
zC-U)rT)vcAo0#+uRExc%0s3`yQ1Z^5JK@<A;u$dte$%yaapRq-@hfFvD#4jb>$VM_
zKi`&n#4mOva(~(pTWK4V;8Gh#?Y|;Yvg{g9pMjYVLS3UW`1XcNtc2da4b%PWf`!G!
zef5D}YGzP7uOw-)%kLeo-!|<Hm8Nl_+gW!6hcU}-674V9>hX{%D7o4NJ1|RDz}xN8
zf73;p=D>Z~91Oef3Qo&M>?OXKo@js7>Ngy^uqj~h?1ky3qzj4W`@umL=lRy?hj{%L
zQ;B>;)sG7>+2`i3*1g@PWZ=)H{e<p|V25Z4H$l*^M4T1H=2lO9C`s=BgP@3Vk&9q5
z?aVN||My3=t~cJNY!RUgogJ*G^BX9Jod@*YrT5`(n3hxwQIxD*YbUe>NrHAJFD~hy
z<=F!RoPJdoSDdLz^lPgml9zur_K&BTn~{g8(TW!NH)5VXUW0MT&Yuz7F%?98q7GQ#
z{d;XQzKHwx@53AKKf{|?6N95iuc2B8u62CZE`^ScD8TxNH%~p}w6s`M_2|)!i*Xtz
zDvWQ#2w^t`fvz>X@+2-rb!Lds?>*ab#GxY%n5_M`H=l66F5HW0<^v{yG09yu(f}Qm
zSn9sziFQgkxxiF!Rqq!fXFy&MHGk3E_}otQM-jRH9sNbUX&xna`qwHcz3c4;#VLW+
zu=D%F0hb*f%|nV2o%H-Vc!fkK_EA#)128@~nDl?5tn80T%-0^0;yj+h`1I-4-CZcz
zMQvWEb=GE~Dc<>!?c-5e!wAh8`dkTKdB||>HEK%A8q7<6bQl52-NuXo?7y)!kd^vN
zzV*-zKy4grW=w!V6Re`tpD7+r3=e;cGdN&l-q!4X@_)GMgz4!12B;K7EpzKPp6urO
zH=1xj%u+3lm#pLCyI<dt2#Iv7kD<_zjg5hHw6@WBAoPTQmoG|yq0lrE&ffD#6oxnE
z@99;>ZCOa`>#qNRZ<Qm4DCo87-@K7e;=~!gGgt;`H&10_hr|-Q`umGnGi;AmiS{uA
zh;wnB8=W!*Fp|`A=PM@9vQ6P>XVD5DwQtkgLG>o=4PuA`Cw~x!4uMy7OnEd(v?g=S
zEdchXp{}@yf4n;t@qmVZSv+l|knSL^6^S-OnzJe@pl($<cCmv)0^t~a(~fR^V@2O}
z?l7z_&NGjLtcCHJ)bZor@IKx>1A_bF%D|4@C8*7d3w~8zbB})YyWV9xb?-maFLrsf
zD~yn8w=!{b<;%dp^$gfwmIuCFhx(@-&wS@P+xfdNrIX;`m>&tu<F_X9mv-)LYq^uW
z!$0<*LpXQ>a*?|8^|_f9Zeo(?IQfc%!W1mKYwJsFkyY^HdIVz_T<Y&aegB)MA-1>?
z7b9HF#03N*!f}K9z;muAchjQGzMvzq2xW%(kUfGc@kK<9pRPcq8|OFBi;5LaUjr|k
z=%GyjM-m{ySYMILyvnM%X&Cp}yFym4?nZ03gOLJ<5rW%qmM63|$BrL&?am&+qiIfq
z=UcAoeQQ3xi#D&xvaX^kApcIg_s$iB(VX+?7hoj55D&cYDA#>jCZ@fYvH1EW#{T?q
zl?~8Znr1Ma!t)F9?Al@k;n;U&o-<x}N{B_;jmF?&DmM?$0zS4tD~^1;Sx&i8dYMxu
zldd$W5)S)iKZeImlC%983FNuQ_Fe{@gs{p6tdi$%fNjPpK8o)cg6`M6La2NAu_WfL
zY!dcUn9Zi8r<?gm`z~pL>VV>~xVR3s^S9~}#OFfYOz+`(FF>$;YxJ*gLqk|o);q+9
zzO8*xH~;;-il+|f;mEad;%Q<4XuwA>9Rquy7M8!T=MfSV1jb|>_j4KkNC|>={cxYa
zd}?W?Z+)OV4_FJrI$Msr4CRBUNMm=&nLmJ{9;_+22R)Pv3<ms$>chj+GjrdnP)ayh
zo&a=MWc^GpUHSqK+l`Hl6ITb{gs#@8TD^3$h40|Six<hj(%XEO+~uv4Bw`lDt@1Or
z7o`j5ei*xypKqweU53aZ3*=dW&k(V?RmVhZ3z;OO1h)e>405i3klz|{8uwOWu6Ee5
zt?`zBNE5j;hR<A9UVh5$e1?|arAN@A9G3BjSPn^f`0zg4sa!aki3lr%x7BZdnEI3z
zo|VNNPY*hkf~!s##Q}|^&XqJH07US!pNnQaQOzI%jZt^b9Wd3pB#75s=50PzUS-AP
z6H|Kvm}BXuy@B>Fzf6TbG{=B<tdgCL4KmVH<ig&)d$%Lu`R3C58YAH`s~H>|wZ6;x
z_Vx+sR_(~>oqWmkSo5xeZE$_!qfK_s&JmS{?4K#^6v$Y)eExh8$=<ztcM2*7_#R)f
znVFvEuS%k9867>Jr1SAjS!Jb|@zaBYrkJsUoH2Q8{ynSL%R|^u*RMGd6<`c*GJS({
z&>O3v^)~vcu;F+eJtZa7X?1P7!MiW6c*FHia&Jq;k!5`D_n{}2%z?lkctlEPQ*(oD
z%K+mw-2Yz+3|05;&EqMjaFX#~tN&Pst@P9&r{hiVo>6*<_UtaK1Dt;n4BYXx<X+I}
z!s+J7v194SFaN}oeLPOH|0~VcMkf(dy_ZIhkKgwrBmj&G&H7sIc;a4;`=rkH#xXO$
z8nGz0F`&3G`md_2toHmRMc#P21zbZ=VDPO$^n4AIrxX+*`T4j`Gxs=rNE@hd?nAu|
zP56(fsK{S24$S#3hvj@Sw<K1Bt>bo+P&_t&es||sW=cN0!a4xcotfN{xe|1kRad`m
zbu#x083~myeE+d%3u7sox*Y(<0j%;TPoE+^0tHV@G^<yFh}ogsozzyq$9t(}X6Fu<
z25x`4MIwqoonKW5`k4NhdBDZ}?Y-(()mC0No;6(Olh~tNy+4!>A)loc6}D!3w(g-}
zh3P9toa!T`v!WuMh6kVACKZ1DDG0WLBO@byi&{Av2Ld<d$;rr+H9;G_S}T4yin6f)
z!hEbL@GxsCJg+(RKZDW7RPjjVRmusQaeGR}7omzUjpSkp#FRef(OTGLDZSTz-hSvY
z_sq87oglUC&gCP>)On^xzlW;YcNx)oE{&g?ZnK@bF&;7iRaOUa^-HJuQO=e5<ZXi7
zCGa^gZr@xUN&WU}F(|B&$C^S{`*$abJ72<tS-Q*z%Yi5E48^M`0SOf-Y+h<#*kx5X
zf8u<a1XmYP4J*@;-^+a34=`~N?^~G?$KmuFe1wk{!D6H<lSi6Awj4n|%ef-dG+>|n
zUYM5S&arrLsV`gIkS|r1>5o^AhEZpyh~DMLem6tKtX?ht9=HrcZ8)7mcn(X?a3~TZ
z9wLeU06EOKY2WGS96%-Up$XL+m=PxK|87AtfZKOhq}?3eaj;bvHym%6SP9jBoEO06
zJq}NZqh=n<=S7L<K{YBp;&|_f0m~WgrrXh_6{1%iO>Xq&A05xXl6puZxfQP9F^vU=
z{1z3?W-m(<<KuhKPwR_>Q}fq8S_hx%OYM1uB8*iu<aS3tO2$FSQH2KU?X~pNg8Q0f
zZv4I(LfR;t$0~KD7i89*L!vidKgaV|E-Jm3ftm3OcxPmOi!<8aTNg9;fy;|Pi`#N(
ze-Rr3fF$+dLpY>en2qNbHxt|a00vK=kzI@{zBw@bG>I*?GhQCz1?zbF!Jhc~MOx0p
z%xUjck@m`(D5k20Nl?Ndlw%Sjo7HTqha1e+`kaT2jm<$9&}|a~4k%+1AFs9df%JR4
zZlkBB%zUioF^JqPF)4YrV9uKpDnYw9r&$fAxCg%H7ZyIB2>y2BV&@df9AM3RMbAs#
zz!;LoWuA4a9gXySvUI~mb?vtQVFAykdke~8c~FV|<)McRa=w`(7$X|59&7&=$$Zi2
z=CW|?J9#hi&NCo!LiF{d>j%bZf^WmWN8cfy(U&Q8>dBo-3|~>`qVzf3%<uWh=-OB#
ziL3+?QBLM-N1Sy0prxyOACw*yWo3?`uC8TB2{3DH;<d`X%l1liG`t=KRUVPA91Plg
zJZ<-%LC+RLlgT9?qTq<S-+j3DBra~&lh+x1y!FzrUb$jvWfgchS$G^rUbK4aldQY~
z#V`Of^Q?}YE6L(^4J|pc&SYyg=!!qr`BvfVd9$QUO_||r$`>w?6TFoG)j|~K)B-Al
z&!~r1#&#NS(CKzm8*`no3dfb!k);s(BoNs3j_ZN6fQKe$73Ps3?+MfMT$<e4EWbe}
zrZD00+W#L;ijkpeO|Rcy!nY6ienu}k<eW+BO{~-ux=U47wjRllf1xPjP6_|?>8J?P
zE?2#ahv=~`Y|i3n!BN@$+P?<=nvc!+w({J;+OLM3#;B<K%)6=JJ&Io!CfdJS&LH}<
z!sQ!jaoyQymhlgN;cR!1ZRK$t?8E{vZ@qBrFM_nEK85G)N*#RVDLgGHZgXQD4K=>g
zm8)T#xey;|o}@;UXz3P?r>?;9*CgK_N)L`Tsd7kwW2gsFI^UEeFC`@caOSvP*VUb&
ze<U(z_9Fk|La5iS#Qfso&DpQZ;1j_YFG#MT0wj$I38H?*P9ktA^FowPzUJl<4|#=<
z<7=0HT{u#QK@ax7Nv2{L!?>I`p}Cvx=(g(=pE9itiSHq!n~)t%=?2s9rw#Mz&s6fg
zBqx0(-;(?6KGjZC-kGl&QkCub7E+pVVpwZxQocjA@x3)#)hb2OX}9xKBt5_0y4x<z
zITtuP<}+X&weq22S>5{PJKg;Q(-e<uPDlJ!$nr&+1J@P=eVkF$-!2Sx4SmdYN07sn
z#tLPKFSxFZDa}zH?lonOU4Ixw9~>JC9&W@X?7c8WI~N@HAyX2%lm?x6Vc`TNj8NeL
z1MW=fM{)Y&UVmz#`Td*AYMzhEqG`9s6+l{tPv1mi`yJZtESK?`i`vyxPVsm3ZrV9I
zA~S>O+R8ln-o5JxcFELrM~J4@%@jq-L}3Aelx>C8b!e17_4g}r*noc@oSy%Lt1Fih
zb6n2JWg4AS36itMI6H8ww}i`rxu%n`HHY1k^3iB6<5@3H+3bh5SnkVj+T!)9T-aW0
z!v*?I^QWn&=L!gLWB@IUIC}4$AUU763Q|yQn^a%tl{}isniK!y{(fk%DA`*YLc+Tx
z<``Kjj_}*Yy)ig=#z#ctUh_5l&p+qpMv6=_P__<3LGmH3nkK*0B_T1f$f(HtrP~;W
zaZR#V2Uhpl>rg9&i{S25mW}1Retq)8H(t%SbP?LuZ&4B2eyR<aeGT~+jvbg0q|kb^
zTDqd@Z&lg){+3#eiJ$*1ioWdAx_p*C2&_+ax<2;&pV7*n-U9Atofvc;Q$M^nlxl*e
zQz^d&FL(dJBQ%F)ZxY@=BvyKD-%j`B^R2lZ-(}eeIxebp#aj~IFwCVrH-c&7O=n!F
zVM^==4)i?^K9cwjE>f;Y+$|{?!FR%|(^Py0`mgBow0P1%>cIm6+}rIA>^Bmm!?$f%
zTI&N=`I7mh#El9WOhO*R4OoErZ+;8yx1m>|N^NDgVgGsM+pD+lXE8vvB!1-tLos=(
zwUrI!5dr$MFCP~&%6ZPD;V*$<fMdVa&fJ0t^%1*e!^@W|@Y@^X-=XGAM1fP6lhXo6
zYuu?vZ_a<bMN+)5u<sCCI*R5!t~5)HFkS0j6jIDT{=(AY#Y(-P0ov08%*@`uzg&xu
zycweR@Wu@XD5HC;To1pb>OT6Z|0QPjQ_sPP(yWSu0AL798qP-GqWhuu2E?I#oF91O
z?U3g_i{|L*<O0{gTs(U15b6l*3k-N?zty;YZ`DS8W&d-#a4;^9wv(M$;Vdi^A_Mxi
z`$0Xf6ctJ%E32ywx4hlVW8z`-(h#LCwg+bn<hB`TLlpKXIp1SFkwmS-O^{H%N9KAM
z26L)#X8fyAMP|=>dXhmZ`1v6^I(QHzdqB3+*j#z<-mOMKi%OAwP28&Y9`}F8^#Y#v
zg}5rDQV}Oh&kPWqWxhao-?ADl4T7pqbO7b@i6aL;QSYu3ir>5Ck&(hsC~9ygicZF3
zG&JiNNyY=cC&vqw3P6S>KqxU~YAbk4Qh%f+FQS@XQ1+}qyb`V26lU)2#OQ(Jk~yW4
z19qD!DOt&AUyCp?zTX3)YNeB5GJ?xAE-UKliX$6*!W6F0zXv_t5Ot3y4$tbbU<?#O
z&%AW(8iQ~XmZQP_#Ttnn4<GzQJlf(D72!R5LLNw6-DwHQs=2nWG116@tjH{Dd9z6w
z;4nDJ*%_>%e9b2Y1D({taF1PSBL)ln(7}{Z$qx@tczu4FTB@q0t=+Q3+)Rhm$GY{y
zvbAu{J_-a`%60hAka=gP7H!!Dl}1aZt*yY{yU9*pQ@!*LyNP&Q6gG0hB=pvWNzJFM
zG3vm=XJls|o17G8p*-~BF76C^cJ_Ou4tPM#ZfdBLP64-OBMG}3>Dm_af!q;mV&!q_
zz4tA9S<q68u}wCFoMY$YzD|#p#j)}Gjl62U$f&3*NV|G;W*u&aX+wNdR1FS0N;~|-
zn1zA|pr)7TFmZOD-ha9d2&z#@fVrVzxwpG5@x|)vOA$k_{ZDz^nU~J@;N#;{|MSFF
ziOJtT1bxVx_PK#_)eCjR`fD(|f^Fut^xONUW@fI7?scRtW32QBDfqk;iZ7S%t?%=X
zyG@!#acD=_egW}-g8Sm?%FMY*(-QNF8OY0Ubne(XvG3;n3Wp2`k{c$KA53*BhW+@%
z_1k|zY+zvEd9NDbOin5URnA)Zza3X4vO&mw*iwNR)b}PbE>-=?D+Mr`A5SXG$`U1g
z@(WXt{X#79oplApqUX+Rggw^H*3a_6;HR7V-%i#JfvbpgT<JJ(zzB!O<00RkYm+gt
z)=tWXim#;f6JwkurODeJ)Rk^&aqQ=ujqlC#dSJ{|MVRi%L!IAH^USCy_aNEG&F!r{
zu<mZJ+YbnU3$ba3F$?(j^9aFWWqlnFho6IEv@y*6!XfFtsh6oRghfKQcgVg11!i0r
zq99tqpc2!S*XJAH-}o&qjho`np&?(GvJDTb`%Kd$!G9b*QyWA*9|d8xR*xQ^T~6#}
zI!(ZiQC)pA$f5J)fELljqg_2)X%>Y57Pd%u19@z1c!R?PEyJXHes1l7&UPF!aP9@z
zWirq6>1&zaD#d~r+@52S_Yek3MuK3y)-<o&I=ae#qKZBbqWyD|J$brHR(DD`6DdCi
zgZ@i@d@PQ){H4;=*jUSm-Ps2*ZP(x_uTi7`0m~xBS<=#9R#!<*2W-?Tg(n%rCSLk^
z0OUgvMZ{MaI(#Y3Tsd-!Lt<~};k0~o7HWGD+AJd>K|mKPc;yQYdVDa%uiiU&^!nBY
z39`08T2UKZQOw(;oO?G7HW-GWuRwxmQFv||4XlWDtw0!a$k@>f{~)*E6P!52#)i9h
z7kyWIfg(CA5mC|6FaL~yVSWDm`KLG==rK>3n3&#Xh-xw4ybH=plNV5D@PYR((@`Aj
zV?Qj=h03*o9nSwcV3=)fdXes*f!D#uIxPa}1F+Q4yA_^|HpiKKwXg68CQpVsAHRG#
z_-7pRq176hiM9vFA5!gG0I!?l9vk-55!oU3P-$f#q9@aU6d?&`xWC^<Tf4%sOUKxl
zWXF>{c2PiCMFo<q_?7=lY$Z}>1Rs%>miFL5u9EBv7seMBJ<UGv(T*@qUif;-kmMvR
zfA{_tuQuI;Ay+BA;UiJLI<Ue8goNxlwCzcK;_e&8H}v<L*x1O;{!vCyhP^$*36meY
zPs{s_Qe0qmrg=cqQL6n=j@sm(LiWkazb_#JrL2tWkO{*TKJmQ&W9WV?{@g2}GHIR^
z@n+57Ey};F>YM4v57|DD-;(c>?-8}~b#qg+F`NClPQ`_-A7FJ<hx}ibEjSa}K^N4M
zS?uHVE#|3z9H0LRALiH2G(hGYMYQet)Q`9E80O_(e#)X@bkCXQ0=2W=IiIP<V-gaz
zp1&R~96DA?v6uQ!^d-rjegE;}ro*g%D&aYO6EuEW`cmW`n?wENL)*A;a%P2%`*rI<
zMTJ}2(g9z5r4`&p<y*p{UbfV=gjw`xT}^qwZTK!Nky~51eCUC%YmbQPpStC?ustNi
z1OK*zd*-%WMHG$(|MQV`@%Xcx_U}xH@88#RllzE>B<@jg64_fBY{pCGTc13uu5~+Z
z6S8|gPsL4NeYLB4g%J|ZcM}oC&=M;WwRNv8&vA3QE&V2mTjL@4FMl&3lxrkLt@Wpj
z{iG)%8trpy6Ckqpq}$C)Q)qHef6FVLygeL_unAgIbB7-XMl%x;1ubyX?3S0}@KjtZ
zJNn9(S}0OACJ7_U`LXYq!+lQICBq*JAXb$Bh2ofzExmEp5&dVf854s_?ngF;!kP#9
zKHZOfWHX<5{rBrUxM+5pKL<}AD+*vIpOb4(?ktQi;&l%*Fr;Lz8vt(oJwMh2Zw~$W
z+q~5`?>^YWORpjER4?=H&i8V`pAu#iF{NQjR^-_D*YyppuEhK&)y?g#^$)mwdYA4F
z=gfD>E&FXQ_AA}qm-}pGBwh=4wSOcWGz5u=h?pCU&IbS1=<qkp)q;QOPAJ(9PtHt7
z{q$B(UqvrW3HqF%0x_>Hdy6&&VE9VE&EEa&r%j)lMsBWechBWP+aeYzA|k>|{A%O=
zUD&h&JfD+3#q>-sa~x)m4v{k=06!K9g~@XDb~zgCVACcg0fAI!NeIRPshhr5d~4fs
zmEZtykO7bQ?qfwVdlQ?$&G!q_BmQgCc{)1x<hG>WeXUt+kADk5xesU~GjHOXz0`iN
z-&t;=9{Kw9D>eIuI^LE2Gt9t}MW!D-+QQ5Pb|UNOLv<f*yhlrVdml48wQh7`I8Uma
zdMcq)!$}-dcple66q7hm%&)lQfuA_SHW?+hArX=Mema`@4FDj7V=d3C-M>N~p%oz1
zcAG3zzLJ5KmNQIR-79Wk!U--fXHK6+yW3suo`=G)<4q_z{SRt}L_N;`VF6yClMMTo
zRK>YHIe%HaMCRJHzh`_rbSJrfcG=LdvesPt?gL4!*YNb;sZZaTkG)Qo$9%xZDR6u9
zHR>T(oMJU|OCpB3cM}-#6~t5&r!$n!?jmZl?N$rXxL|oM0avk!aSRnLS@4x<eCr*1
zAmgXCK8uCV{(?hF=ouWGS)X%6j9r@WP0$NX?m2=Hxb*KItJH79#T_a0p541KRf8k7
z5xlfrzWHDlQl=2Hh9<CmYT!1}IfGVe3XQQnNdUq8XtV5Zqt<^nLb3Y!Y(E_vn`kuB
zsjvz3B@#FMQ;s?QL2GAGL2&u}w1B_@n*xYS<4<`#gU!>$hWaCrY9P#@>iKg)%a^4A
zH5;*h3sbSrpQ{%b@E(x2>yEh7HZC1b)0U*DsF)baEqQ&~kI>G6)Q`>QjUVUxM!pk*
zwE||=lDRTPxP*kvWz*7S{Ru@Sd~54+tP=M54=v0Jn1zTWTnH2Dcr&_N($~iAZ?DDr
z5x(Cq=dtEH+*fhA3L<_mV~qQ`Y!=$MCVpkVSO?wsJLUrkcUKmA#(-J)tSumi105e)
zjo;sU8u}{iQG_|1!7K&lvw=b-GZ>?mIVPCETSpgbN_QCY4hFL-Oi?>BlsA{gn&jed
zK>I+_c1@Z~a&H#awI(bT61r{B65wtuu7opUb3=oI`bLy_htJ`_q3wxw!^8f)fy;la
zUYX|C2x<9%!Z8hK0ox%_rUv#8#l^+h3I$Sd-%(vl4&V2(#>BkxN~%__1#$S@-P4i*
z8!KJ1>sq8qVpcNlKbNtW-Q3#5b+L6bG6N=xVU$C>TCP|6*gcBgZ}msAL08wq6D4sj
znn@chOicU*BAeyVP}hTWS-(LjClvDZU{4q)38%N6utc04!s&b_(;w04pjXYcN1?fn
z6(n>1&D)YCFZBS0jDR(8hmGRz$JK`$eEU{$IS+0ggLEJwq2E01Em0aDd_}qYe3WYF
zpTP=M1u4}qyy4%!e-9!{{ztOijyLV{h!=1$n-`a^t%_OVvB*eCxlFXt;&hVnS(w6c
z(r1QYfG=Jujzo+D@*HX7q<Dz~HvR^I`+NB0bx^z4phz{Kn{!0rv)V*0*Wvh4ZhMFx
zF+$mDw7g?ymmGdf0<6q7%_LF_#|vQ4v3JeTRDU^9QohzZG;~@(K#jsBQP?*DW76LI
zuD+-`SYke6*wjc8F?xO>N4)+J{ec6p*{lT1pd%j*rPr^dM)gKQ6&F-U8G&0WQNK7`
z=b`PvJIGa!&n<V{j{gDQ7jI+|p$Tj22J1DSXDCJT$D)3_jM_Tv<S-`{-!qeQ*YLL)
zUg*Y;WE=2YO-j#?@fc~7w_>(qUFA|tthw66Wuy5%L#_mgODHvU?5@JmN|f@9-%9C%
zpl_~`@EnR=_4SmacDz(V<bj(V@6%G<W*t^rok4sD9Y{dG(dc^a25o#RWLoXNAq+F5
zyXO;)EefY!5vPPCz>V!ezbARtMNOVr9(V3Fg|7FR102u^iK)pZ={&x<{=ON&_})<*
zmUh#-nxK79+U@a%D9(0%-|t^t^QK)RHoh5WY%P7&@%F(ug@kCBXE$ezm8hk3J?!n#
z$;Nld)Ne?5fsOR&(W83YQWypDX|I{fUh1eC#D9;yuRIg}C}4B#0BSOr?n1h#rMu0}
zjtTB2h+L7d%an5NeW{muOKu}(KC;m6?S2E+1l=btE)H_*SDN=8_WM|5qU!|JnHlQE
zY(7EFb40bI1x@wK)){Eou}<C+7%l32D*jxtj`YLXy4+h}D7!Y*1Wt?p_9it>{W*Zn
zcW1hD%6(`HcqS|!;)RR4Zr~8)W#*-Q23;Rc`Hh7hTlD@I#Xt24a@gM5>?1#WpWW(-
za-`&ERo-75h8;oG)nWTyzDiOncI5s0_+#p^z?}@y-{oWQZ&};KLT-Iu?D70Ui-#xz
z9so<HN=`qN{46CSGXo}yjsIdrQBl$FDBP7DgBmqeUPX;z^sk?>96L*qO=W+6rq?x3
zdtGPCAe!ye*;~fI$+)?>vDc?YM~_^e5Gc^vLM?zTpIm>1kn`}B3Z{5*!4u0KvHsm<
z4w`~dGZG**3fl{|wr&UhPVD7hU-YfVHI5^%11JCvrxI&z>7G+Zj?CjcLbMvt**o#^
z@!6kezj{qcDSI7sR#tv_+GviRlE`&G&Ygk8UK#{<FtD-;XB<RM&|`KQOfuq2OKHAI
z(v9^p@M|QCE%w{2XP>@gXBU4V9Mmbz?rtu9dHEn5uz%>72-haDd^#qNt)An5*XOSz
zas0Sdm5a8iY0B0lCsD~LqPzl8!TkAFulYMR4_15FNQX|iJUy4g)7qAN3i|H^V%$dJ
z*BS>0&7X{-=HhkjeP(sa+tuKk^WcjDEs>LX7vDcv%L>@^oc=ed0O5K<K(Am9$LIQO
zRltBxjf#?pd8W+<x7U8jNB#OfHI=_)$ny#Q)tGtYe30-aBry0IZ(m3dw{ZcTuia!3
z#-W&nYF(|$uB@E-0_7uiwW<2PH#ljN<8u8}`GmQzX)fK}2ut|Q@2RNnMMzB2`Z;Y@
zf%6hWt>wQ?a(1m=1`QA4?6Eu&D4uDeSP*xxH0K`wze0<I(BEm`JLQ}h_}3I3D0Gy7
zJ{g9>Mp@|^#=1Awspb4iczRvGcF;M{j`*LjQa{~>D4;q*UWH+v&dyZh!WFce3`93s
zSB6OKT?x|~n^zKaFr(5SZD;!0&dR&k-ap*_^+)`Z-J^>z>(>bY%SvzaiRu|5!rCIM
zwY8^tl?x!jE2)pss~S+nOQw8~&C^P?%+vW6NngJ<5wGy76(#^lg5Pu3SwUsU!mfFD
zt5<oUd+`%V<3#r#GpeL^{JZ`UIgTv<LfvoQwx`QA4%~<95qO{KiMoMHDC0CMu3~~e
zLy~HQ<1abmfY7-q)LF?k_nw!Q#t^dNWLH5}12Y$pDG!Z?NJ5MH{AUtH^}92+`5~nK
zPb$^I46V}Q=Bccl)I&7J51XQ0Y!9c1X<1p5edW8{fUVOl_fE5mKcOTWUd~g$E#(!A
z8#%Lxi0nnxpZ&Ff)Bz>WWPAL4UuTzG7clYX_V>-o0|@i;mQ^nPGV3DdFY=Wez)+fc
z%V`#ac!xg)VJeNKy{kR-vQAeNS<d9$*kw<Sy3tyzTYy%x?&GCF|CxKnYO`xc)hiX-
zjIma%+0Yzj@}$}4+fNaW;RwO#_R-USuJyACWyJ;4+cwrlUio=j;}|05O3lm#_a>!e
zz6;uwDj*`V(Ock-U)`?9qD4Ke_bTy&11&|_KB3T^k3S=7KkQ$X>?4)V!`x2ld~_ZK
z0=i*js)rG0LbZ*A31m41x?G>{Uf~FaFSqAfm2C`BCG6a%HHv35q^}u7ZO@QAVW^Xj
zYhBCcn|%cQ=pvQiOPD%LhEU7uSpa(+29^wy38^bzj#S9PtSbIS)lA=g;d27wa{hjU
z_5VJca;`Z?+ei6|9ejqR&b!Pb;My#Gb*<kVzazddshu?mR}xL>3}nHTl(^zdSx{A%
zhJ~Odq(y+tlkKk+v?mI4+F^!iRwwZuQ$vQ)t1qwrSSxqj>R{zgf5&zD^w0r&s%Z*H
z^<C$W@2Vxo^qN4GylYgBySlBV<ww^2wZO$bWrW433*y5ft;$|rULLAxm{o62=Qa8H
zAEpo&7f%J89Y+@placAEsnMC42j*3D`ng)E-32|{lZ@m$&iTwo&W{G|+5<M;R*!D^
zDUYeg>>X1-e^$bh6-Y;tpdnwy;-_@;G)uhnOf22NP0#Z{it%NNK`g<KAiQvPbaZ}e
zebc&FcYuO-Y%PNoOttBW35-17mAqb)v3b4W;*ygrY9R|s>VOlSAb6hU&<?`epO{p3
z`{zT~+PXU7bNMmSzNt9e!0H)n%DV1c^8%~JpgeK+)4V*#xaW{TZ{uheHY)rA9}HAg
zi*wt5BWSrvsaR4#BNNacYHhuUk;07|OF)xw(3k{mr<KfQop?ZMR7Pe-^Y-3FT0Bs{
zN>U;`MU^~2_i6;(`d2+XUW7)&xXX<90j?%&LNhRkV`KG!Z1-6N;Z2%2U&4ioTrPAO
zjy+S=I2lj^^;tQaY6RlUOFv@!goiPb>+0amqU6)Gb-wk!xZ_>tK9?zzO9?*HWuer_
znv_%{nF~MsI$2^63l=WSV%Lf=000}V4X}UF;s7jpQ*X|X?$}eMo>|XBE#>|3u`asy
z?eP{$3yZJn@vmdE;iK9NpOSp0>eZ<%Y6u+pdwvgZ)<j0OqfbWV{Sj7s^!)cUd33JP
z(p})C;S;1TL^VZ!=nzkX=faeDP8Ak+VY}3E!YQlL^IM}0O3G-=Ztq*2*j$#=3)=n+
zvqX<3x-T6Gf{BAihnWvBF?p>Lj<*NDBB3QKCkvUV`n*e0QDfx8hkG5D{~zm+f};KD
zGax{}XOH=PW8(1j-Z~8rsE<QKma@C*2iclDu^PV)nAPi;F#B--+Rt%r@AzVyBilFK
zX(7YmHs}W7<bm!<y=*_`W9Zzy;>J^ykFTCMGn<ygQgB9tLOZ~nWbsw=E4GK@YqjQG
z(<w(ke*VnYQpD)^Lf7mnH@BUkA^l>(#;eVZ4Pa|MtGCE0C^WA7Ke!t=lKfk;J#;!v
z7Vuq8UvHJpa0}scyuW~x!m^?2r&A{gIqR!(0ZiOi*O+cQ4ZXC!n4^%m5rzpz#vd#V
zDu&v^{=n~3Zu`;6nkA?_;fW?t2L|sJ^ec9WQ}gB(wAM0JzhO1b&_CJdqx1G|wM0=D
z&o7a~j|_%_3%uV;3Ut3bbUCUlfF<;-y$g#UJsX$dyu~g+4@A*V&=C3l{rmSQ`2|Q>
z7_P>Y90Y|EcJMa;4wCQu0Kk@khr|tSYVXs@MLwMn(qR8|@nWvvqYK14P|RouLrk<f
z7hTkC^@I2B-08Ox1|(8@^7ZTcVm7b&_TVPem}SYFP9-&?n8Yti>?J+^2-|?(-b4Us
z4^@0NQ?gpLU&(2zG6tcYcK-0;k_K)SL++aK#ggiML_tyo$Lkg>BjrzMv(V=`vLyQ4
zp~S4;IntFW7=4SiIXx<_74-TG7TA9I6P9I4)~mPHiHI(l$@Gk}KKV>X9_mWFQym#-
zX<cElqd0SL@PAl9;L4b)_tYc4+fCosMAty4(M%91*oIG~wey(~csRnZM}rh`aZ>GE
z6Mx^Ii0>Y0!ri#DYg&n&=4eLc<fB<0wA?w|_BkKltXs3b9rNzOXFU0LZb`(Lr@H~a
zKu@X{?*2n#G2kOO?q=wy0A?rN6)?>0%n1CG6l@b{1$E>w=o>=qE;rLF|9<C3N63Ua
zSm)~Q*`e!uh=Mwea<vMoOnJ^xGaJn>>2VTYe~m*;Jxou1U+9edb==Rw1Uct(m%qKj
zF>!f)VfxqD*h#RG;0Gbtqkbe_11iMhE+bnOxn?jBD!(WSv{lAs=w^YWP-MIIZMluo
zz&al)kMxHR9u%JWIxvu$l9Jy<cPc9@3sM7%@{6-*(LsP!%tcC|2hMe97Q}WaoCzPA
z8XN7kK^v95@?~B>>$M($n%wI*#6G^fR+p>I+QvOA$Xm<He6zyo+zg$=r$gdvH-L&9
zx{Og7uSP;bhJk28I6+t9bkcY;Xszf06V}M6sgskyRc-gh-eW&9`h6!FWuUAADi(aX
zM17ob?l*44`3aD_x4}7bV}28(w7@l|%DX-gJmZ7DOSty%^y<UpXJbHqkeMn64{Kf7
zRr~Sg62N8WpcpdibA7$aCm?WX@WnJtFOdR-Q$9*-sK})2zU-Pj_JnI>0%0G0j((43
zmt>p4a2sb9uw_ho4(aW$wVJEzw_u+s^~t{EoJSi4vEs~aP$P^%4d5Lss>y{PzA>H7
z*jFDQY3d=UrldV*JV5-+Ml5MGN&sZgKH3Lb=6b(PGKd?>w{eN2Jfi&4+|r^>?f!Ga
z^7)gR(+Kj|#1*doa|4$+IK6AbzW$&N^kJlwTIMlrfb`h|LJ7LxWAurL=5y5r=W_aL
z7qmh|c;okEo+Ae>WNYOwJbvw{sqf>aFf}z5hzt)X*josHAVeVg`1nX&(zAI4I7RV{
zj@IPn@;XKf#%xIjO&BZNpC5g5ANwGa$4}?m^UM8zcqkL83()EJi7GnI^tQ)o9*{4}
zmdXztOX`w4oY>lo64d!iscl><hLHt(R{x#KcTn=*ONS!HM7@^k_OmmXuxZGg_FI7q
z9^sqUh++NdICd=H)R#~F;)rte1kGaS5@TlD?ig>+5=~s$NF==;)VVLTezOu6s}(pv
z$l0#04-7gDF51e<_pKRI9I=ANAPGbN<%x*B&!3IaNE@lHuDs}axSXLIvvwc|AFACF
zwy_4WdV6dWg&v8CiAj_KOC$Fk9xk>wrOS2Mxg3igreFT3^nF1%v`|tgwB$`sc~mmU
z?}z>KYvVvKd3Qop*jS{<vbrpwrle$tz=fBEkyYFT^MN)lvH*D&vM70}IH%wvQc_Fz
z<+kz-TCz}<INw2)`hu90w9sUSHE`YCJwEvQj}G-WXm?(T(J%@dzd)DQzJ40DJr*r8
zBO!eKlo@hAHa0e4{{&}NXJ@5_nHlPxvw=Ql%5jYH?<CG~CNyqg_S`oH$SLPWrvB=m
zv%|eR*j+_MqU1}T#Rr%L%A7oj<!9FY4V;Mt573B<jf)4x>pRnBH!W7rpTPhgAv@}>
zk;$nAC%p+LV3`Qr%vInI^vMsgBz+0daUv?a%IK^jEk0>RcJpmdav!}ew3%Ebw$99B
zKxBU+b?MU#$RS6MKBrsq5XGxWRwW4LTse5)KtW*3DnJ6YEE&s8MG{XAB$R^ci3;L|
zhe#;^C3LTKlD}J8T5wuevsIRrK@pa+`;zHxp->Fl`l+Z{B#%_Y6QOyuDa$U(bF4t$
z;y>T8PG|+<>Ur*5LhllcYo6JETpsB<c;vhujv?M@fLuj57*Joy1#C2<oR3kK@mtA5
z|6BlS1ZKbBLql}Uz+7=<poAi(qTTTVZjM!c_1ACD1*NH34->ffw|?A&d9!$(!KJgO
z&c!U+n{)U<fF1X9_8r0;1GZL^`E@t4YtK75jZIG%up(cL(Nlh_6lt4EY*6>4`EB#4
zwBY1|FAsbfe&z%p5fbugxTP{vT68&b*B)8pphH4`zh5j2G|C|)O$;vpDY;ja%-ZL8
z@!}2GEKZ~!k}kD5vGGp4yl+>*21u(yr%zj+Idc;?2RK3gu<xs@tCMMX;WQ#tph<V!
zL5%$7%s`}bxB+KExJ>2celdbxIQjsPN6%ijb3Wtvr`}ZFIqr~Pp$Xkae~_}mYFvVR
zM4HAj;j=h3AG6wD!7^El%2pk%*zkBB__XWs9&4LqoYo6epeVboMH#w(KRG`EhHkwr
zIT3?g+gz=!d>eHiH$_WdyhxDD=dmQsO^@%{w(-C8@$oJl9UXO<AuzEwPT!o5*}&XD
z2KX*o3~jA$b6a=!W2;vR_y3!wIr;GUbNzGYSb|HP38Q&DKc6#vJ*GkBD&&3tSNG_z
z<s{N9<$~x$wkJfci2=q5fyG>0PbR)<k+eku1)oq#{v%i*&JSy_(Uv<Vy|y+Zssz2^
zySqsaG1yb3GLo^ev4KN?cHSr_DtyfgBy20f!BaQ1{tS^jC<%%nI;R|bUU(b<dsgl%
z+_vFN*sT($8;Y$%O{Nxc4+!|HR$!LZH8pwFjHJ^W_T=_nkS!a~>Dt{|7+T@v9~)A%
zCvoOW$RJRKZD<M{exR-09@^$K5w=;+<lQ)Vru+Q<@4qca|JorccO&scJJhR}^j&xp
zjqC?i1q#~0YxBWmm6B1!!>eR;a(Mw`pthg~q@FyCIE4ct!oc0<=ILp~x}ybTza|vL
zDC+F!h;(~qW_F1Q`o#xNa4y*R9bE%i#%XWk%a>npxXnC*R^d^TXN+OH+#3VGnDOdc
zq2h^JtID@T6qCt+I50CZ+S=P+v2UgoZaWE=h{h&vQPKD6AtzHFTI|fU>#KLhPwZx)
zw?w#))f<)==G}lR85jg;jX3)n!I8yMmsz!k^9!(c5Pa8TI79kyO;pabE=~8;AWIgS
zkBW*4L4%2mEZv+?V3gB%jG7W!-#_0nID$ea^3Qa(x{Zaoxsd#R-s8`~48lND<tyy;
z1gOW0Kgzl4UHv2%tvADe@giSlrmeAYlD*=@zBtk!yrSY)76mqW`kAz6B^B*YB_)B|
z@dx$fpJD&Ur!tNhe)-b&cKy~+rEJmBm{;|21Nd@audTQTiG1kl8W|YS_okYOEW@3x
zpum~hXQZW-R#$g*%@J-9pRT9tMIFg*_&v4y@4TIzlDoV6=D$vx=#n|RQ>T9QPYY$a
z+Hc<J$Zz_)&B$-lx8W-Px&Z6Cvh>LJFZ%Xggh+ko5PU+-z(u;O84^#bE$vk=4y~>l
zLVY09o|A8W)nD@%ZrdwJN$F1VCQxx)Z+vl|%F`Rqeu^Acu&;6Wx;jq2UDxZPo{@b%
zpIy2zz#~aZz-CB|FQLCUGm}=_!k&o`g%Ub3(5AQi^N%8`O~bu5=5!Ofk};z5?`2|U
z+v{KQMKTa=i+*Dc>DZ=wyd~ht@mG^oX;rQG^S^2;rZT40vr5))$VV>noNZtb^jVFe
zA+tY)p(~LDUo=;yObpK<q3t_iuavYB6ZW4W8Gbe~a%n2Ou2+%chXO|p%6y{vR~{;g
zn|bYd`dy;EeFu6TvEQ_a%TwUZG0m4dQ)0`pj!7v|jP07^zFhu(-c;*tQ$x0yQ2b22
zM^7qwJbzQK3~`JDE!i%jo1*GM0qU|8zbHa9gq&hzILq!OvmY<qIK{}9K__3S#6e8N
z;eL>(=9O05nr)n9%7q}};a3dt)&#A5w^D%^ZknCnaiG2FQJeu^Z^j#r#iF?DwF3Ca
zC8nFZLK4JyAJnR)TreRjlirPvs6-%IYo*(4U-vaOmeKm;)|0{Qdu&<CiQ2?=Mufnm
z4kM3|mX?`~EnYNgA1V0>9Z9JZC(6spBqS%Y_LNoiN@NC{IkKvLTl{@6!@j?{b&}ON
zH=;P4XxeP?3zisJSilU4NleTsE{-lJP_JBhYbrYpVN-axDv0^b!^0msIuv)6l_!5D
zH#~Jqa#r@h=&X8;PRf!!Q5h4k_vpHtv~;wzKSpEvzet~|Oa7r0f|1tgr^TXRQK3@1
zdbRif$0<$g1>fnhto9NKids+7f+59Yt6zFQoFtB!r6I$3cxUbX`|+;W-XhM<VKYOP
zD&}gYPQ-69^-tn05h)u=?orWiED~<;X>}PA4N&fMM-xiOU{)|-Jy%w5S$zdjj2CTf
zKdgqf{fTo_^yFx9=3GvbH%@wFnsSyq=t`(O24kF@nb?WUXABk~J%)<5qP$#lasgK)
zkY1D%GpuKLjAW9pl2cJtJRf_bZ|^Jk=upb|r%b=QXK%zl;?CG*Z*!X>=!yUrmw|?J
zK{V1icL?*MqQ&@<i(l*NzQW^8PrV99kfh7d1QLk~wDrpDr}39~oiHRF1dBTHZp_tK
zQG=jE4f1na-wL9;^N7sO%Gf-q^$AW3rQnPaRZ)GL^58+XG>XVR2tOA7{sl?MI!+&!
zBN%1scNe2$pk^O>mww7FPw>wUNBn69Ad~nlGkXjBI}99-pXy(AYVz+XBe8xa|3PVI
z{MG%EChX3gcbIIWib?Q0hb{?>H{Ly%zL>)w@oVL5dOGD!yXee$6kc(@%U)?|6xG#<
zMwF4LoQlr1e@9~|;RiN1)CLCx^xP1ph&c-EWNr;Qo*#9u$e@;8(OZL{Z1!VjlMAHf
z*=nCK#^;$krXpTPEEnUiucq+fjWBat0oI$2Ax0x8r*ou*I5;@CxD-h@HaB;|;)Z?e
zRHIp*drV6R3Tb>lF`@-?!9f7*uy*>_XJP|FtfZKjPJl)y>@9!w7TifpM2#eD-vMi)
z@X*kFe^gz{vyKC0KjNgI1Nd0yd%|hQg9ifLxa9((2hFih+N^K3>>h03%nCZYGhFk$
z?8<Cf=d&}n=V^hp8VfUX>O%`KxXsu#8q-A;`y#=$<L_(47!cm`7())?arYlsfS1?P
z5#9Uj-!P7cotHWKE+?&Fexd^zrMrmCb{$ZZ&jLKs3!Vc7q)PAJ@Mr7;?*=!d>Fe6{
z#<1;I=Q@Gw6L{imVd;V?dd{c&uO-)jH@vY}zPM-Xk1|Ej?>8+i4*z~eqhy@znXKEj
zhZGHs<%z;epPnF-8&Xk?@##Cr=kwo`MNc>XxvoH7;P4@Em%z#9_ihVXJ4tuNa@OI0
zSb)6o($@N6aKJhn8Zwa>iyEMzLEIw?qb?qjH{ie{>awIumK7w!<g;>Ux&xOwZFbvR
zT3WLB1MnCv_B9N4Lz{##;Vbva%G35p4L;c+TzzA9twnh!YMq)oFpM22?M>9KByDEH
z%?>9qK;7Y*Z>+Li?q8Y#s#xda>6vxq%F~>W{FF$NiHMHYM%&vXy;%TXMDX(k&*is)
z)!sd2Xv4y!O@hbq@L#T&5Il9NB^-v(Wbigg%rB2jpLrt^iSBZ^#!HtiiEt}H@Ml-X
zukrD?Eq0{A5Z32vP-#B3e>7LWoe9P*IAn%FRcNTBg@gt>J0&Z~@h?$9#ASoAAUyL1
zS)-oOurxK;iybF83kpG^*R$Gh3C(+CJ=0+b2b`z3xtT{w3UWUJ6-%#f@nKNyG3{kz
zVR3eF$kE9fag6$J>j6#Ls48nvahT~Z2^?#zE_c-3sd;&Lvc3Nq&z$KQesa{V6?uuO
zyN21_-OK0a$$n4)m9!yDFoNa`jw6l-OrRjwdqD-&?$VM@&Eexzxu5c62N(yqNQi=-
z^2o{#cg+nz2nEi<f!ar4BM-gajN*N=K(^0s>u^RY9Sh6S!gTq>ETQ1%XhRk(A2p<6
zsdj^?tb%Q@1Fq)lH-XH3+HVTJTO^*nUL)`4356z4l-rkwfB8b;`Ar1R8=Qrt7rH6)
zMsZCuy=FKJynU-qLa#V@@X#Ujy2!n8fIAY#R{qo7azC2q=aFw8j+X92OO7e@cEFoO
z?i=I`+4m+08ai;m)L>PTV*aQ4P@J3+7$dN4K%VTI;Cdh$LN*=fImf3yH9^f|BoTQf
z?8=>hAmW`Bw=mV7t$r*|ciZVl$D&=U7B~pn=X&K1|6QJw6Zxyu{@CQ9utm?vgxvPV
zuQ$Qm9jxUJ?>?OI-7k=;a4W|nalHB@%H?jh)tf&%!vI93`#k`p>oUCYwI^>2Ph~Z@
z)IoDj@+?-Oo;MY+Q9@5=r=@yr<Wh5_O&?<WdUV6BYHxmen-}7fc?U>Wz|sI2Bs5?Z
zVI=GE_TGp``LBzqGM)s$HoWw*zDYE{ct2sz=kq4$KIq8@Xhug0dgQz`S<m=%VpteX
z#R}KE1WW=Tv+Wulb^%RSq7X7*2@aL}6FmZN9y(sS#8J}v=FRyZ^%t&Q?L+SYFnW4q
zn;Y5hy#Lya+bY`_!KbpPq9X+z%lP?)Rs8our<Tegr`+6Jt{Vy5o+Nq>v6-B2(%Aj=
z5-F3)-1>G<J!%}geqU1^pX>?&V3K%&1ANSc1eu;k-})-POtjmjr5#GV!WFMOcrryG
z`gxRuVmrsG1Rocd1RviT%&al+6aN3$d-HIr`+i?sb2KP4NRwL2Txw+~grr#JSu#~f
z2$3N}C`l^CGDV@V%tJ^r<xZJN844LPXC5Q-c`f&O_WnJ;z0Y;d-q$(T?_9rY_s?_R
z&mF$L>odIHulH+Ec_|6j3{`+LOMLd0h)IQUXe{!k!K6fPP|wc~kqZlx{39bH7zrXx
zKJe~&kc#TvC{?u}-vdOFwLFGlx#4X=RVMwW43of5qBe}XkBtG`QVY(v>yJXXw9Dvk
zp<~D5bu#b!_#_|>V`>%zvz|CH<2l-^aWAT<I0P7?zs>_UeVzEh6P1+amoaBfoKSDt
ziH*T`7}to}8B9%kCS$~^!$rTxMQ(lY<VkSzS1j=0JCW`N8p+Qv^}5|-l=x{s_ug_D
zMKj2zd|fLO2!UKeeHAABSsPe!RD?7n2@ll#9yOu1oMlqWq)-C8lRzMQV*v`!`~11#
zj4O~1T7Ql5DJV!00RMch$cq>CJIGRu^z@iIT}jeX>@oV7-Tv9UE&o-X%PD*OmW&2D
zwkht*;&NBkjSe+!TD6Lnbpfx~O`@Vd2)g6rrMDS&*uq$)@q=fnabMYu(kCem4WLhj
zviyR>?%}+oE5)`rDPegdpAn6#*xbURHCg8@aolM3TS{SNl%j%yF=zI*uVt{ZZjMu0
z{Q4uW--p@Ms^wjfuyq8kt({yy{f4vy21Y0wIg@NAx>+&kFmDh;Y)9(bxVI;pL|S=#
zpyC28ySbvmcDyra!mi~VcP+UxSkdm$QipdAZkjxd&7c>$&v+nSC_>ax)tyuRQDl2&
zQ|7M6djuQ7W)~kQ<H3eGx4xxC4g_YoJwbfEiu*{kGcvE?-sb$zA1>iFIo!Bm=Ww(>
z>YTijCg4IP19LT|zzz<@rP(dy)31%m-?7{(H!Z?S1=B|L_5#e|BO;d977;Q}p4#ze
z`bR?XLt=~Jj}PpH0IlHe<1+2)xbTO5K%}w;5=L+yVqwDuM(*#KnUHcynt^lds<v&j
zyjRW4#=FZiu>}qvjwUVUMq58fj!RBS&P>ipF1+rwnod&dkRY9KwwlFvD@3ZlovTUm
z^2$Ly9D|rL=L&V}(X0DJ-}>M2Wy`J<Xw9A7ytlCiW)(dZTg(|TSb@U(4QBLpaZpNl
zQL3o?S^KBR1MuK}9iqL3Y!V#Yn`z3gp{!b$HS_E1aWSzgOAFKq{$$FwJ5f*{-I|@S
zKM<*9U?4a%ENVAUe~NqtB_nuV$*H<N2C1pUdN=rsw#BO!;E?86gfv<VkYBl$>~x;n
zVsEUXXqZrn#I-N;6tNIK^2tkT;%=~cRuFe_|8p5x-g$DX6rJVYN5}A%+sbv8dQj!R
zV|+dI<yDq(CS>@)-OlMp?&6nnTfS`#HyXshbM31zC$#S{8%hPEANE*LNLUlJaF+8?
z7CJRt+^<C@ny@#y5an0`xO>dn-=DT<nEOs7!1B<-$mj_F<|YBB(_Hj2r`Gk48ka}a
za^)#a<jiIGSNrd)EpYM1udwvXzx~NRcP<@e4(%PF0;UkOR{wZ2ZUrz5C}Pk(?Z!6T
zQ3?@a=Y-GPm;D3=Pw2$_QO!hDX4HC%x=MZpva9I;#|h!=jhp08Qsth7ExCt&uAhoz
ziE!N+j%5HHOg4xBP{<!qjrxR0n1*S`_F>H&TPi$w;HEM@Kk9yKdC`r+9#Hi>!puWh
z#@u2eF*qc9q2K4plk%ORDs9Ca93{QIS0}O#$UIz4ml2B~FuY6JG1hZ{kDC`qh5Y-O
z5QQF${23IXkN^daGk`3pkP+IwmNi)8AnSQYej*sNOy2cv-R%~OIaAcHo^lZtVfZDK
zQikk@2X0RNBKurMB{nyF?jg$y0kc?^=$K<%%4emdsLsK=S3i>VLke-~8_>l2LkxG4
zw^5WCQGbEWr#x`6wy=9A{i)(dd0h0G%*a2FTUeZFMJdVA#4yVt>}chp^CCGSaI`*v
z$7DOxI?L<H^<6<c+78R}qb}u+fu9%W-$P10w=nt2{J1*L9f<KLr0|OYfuyix3gyO=
zXH8EfJ_kLB9|@frIyx&|PnCDE51>kO(<{;z0Fl#B6Or#X%pWJ`T)bTCzsut>#i2<c
zi^#(xmmL70hnwxF%LVtH2|F<?)@ThlaC<6sXd7{`eBomiB#@`fY6GEdL>2-H+?3iw
zX0HKoQ5a1EDK>B&qje9I67csc_<{2?n-^`~y7j%Y=0NL#3i;B82F>P%^6r#FJ$Wpq
z{!<7?&j1k1`F?|22n(l<QZtMzqI4^uQJCy={L>$&!!(5}KNs}{jbF7&6RYOE9Xe?C
zP`M>Oj@g@-{~36%^%SxU6Tbe-zNaD!W<YN9!+hKmvg17E#ux*t-G)~uh5$=Uxdirj
zRYmf<GKaP)J}%$=8caO2ky<d{EAgN|ue4I(L6+ElbjNldqS|haHJ8y)H>^4Am6;jf
ze7Xv3HrZ|Pd$7$i->;?|@RGtC5<Yc!Q&3!AjiFjx$lOCd4d3H)x*a114$v5@$1Pn*
zzjDgy*OSKq0$f4DJ_gE>bMmuFJHtz+EB2t)RrWQNyRwAyCiuMItNth3HP42)wug5!
zEA7dX=Sk0143>(F(PIso?lcHkQVLG~)i)zhz7|6S&`+p^?vhOzRueAeVSRs$m)N5Z
z%W%9PUNa3DMB@g5Q;_$k*NDO)-cN`oc@a{<K2&%<-P)Wr2oQf39fYjW{51VK@`1={
z0B7@agVy-y1Ti1O^p7Ldq&h4MbcKBa*T&*iBfanCmw_XKX@LUY*AdKKKqFEQH#lU7
z#dh0O1e~A|P>uj)SA)Es?_sQg$^fUF>qK{gKrDJ1Ne5F)%btFn9QWm!MD3YC4}aIY
zJ(b^&UVKC1;(DjT-gn-2fQNOac0YU?>pd+DnvbsI`t7Gm9KW>}>E$YWs7oA8%H(|6
z*f>+_CpV_8&)>*iN)-<iNZ@DZnGI`fZhpM~v_er#JtL9by6we{;SzA?kR1i(ji`{2
z(twM3q?w<ffZ(F`D}@LSLrYJMt?Y6}j;w5K{r8D+<gD{r+&BtdyrPrUTFU3T+3taR
z$ikyB_Gi2fg^vDo4&`^g|ILk5v1b=JU+|@??5C`!R&e^t#fF{e3js~cZKB){n*q+L
znEV@729n>ge?rkR2m=CTiN%(eXQJbj7tsKR8ShN!(o8exg8Kt%$3WYtoSdfmga8l(
z)ljvA%H2e*ln9Za7>;3h(yhCJKg~JI!e!mswS0!}6^`tEx_i6{@q~MXuG;~;u3vex
zLg3zp&rXI6w6}3vx3!e3-!o>Peb64K{1oCLa230DJXGrM|4?3jM%(}<LMq>FVPc|_
zO&C^-_uHfYN{T;+>D^kPCJ`sN0wBn&>C@7_hDRR+FbuveaP22`zj)X^zC%ZkzK0>t
z0k=loZ?h=R0fN>x0ImUl*JkirHGy{^E`x<k93D54KpTyAX3d(&BpI{!8qIl?-)H=-
z{(M-2DEUd*X?Y_XwYA?0Pu+8+Xp^2VAib?QQIokzBFkKJak8c`Fu70h+%E3*>({Ll
zA`{l6>9HZ(p#`Dl>U)W2tl%v?GlJT<JsW+xUZLCVEd9GJRiW(&j2;Bhj~D^-<i&x8
zN-|V!Jrpr;(o){e3^WXW@N@y*62eWas9->cX3(6ZF%FFV*%ZHixR_JExu&wcbAkZP
z+`Fwn6nC|v<sNi@#_E(T6kP>wi&_cN<X{@nsI6cFisF<fVAPHlxV(qdEH*Z_x3_n|
zGTx+uMgD<EZq5{2U7crox($qaK!ob;o6$%#fb=v%*xKyYt$S`R($d|j`YwcFf<(Na
zkC>A!%sg&%l?-D>di=zRMZ@J0m^?6S+!$DfBCYsqbYXBu_aw?jw6snX0_NOASGhAM
zO||>}fd!~J`)P0}N1m3KRfm^&h}wnb=Xx=+?4jV`9?5u1A!w&G|LjydY4{$4&6t8b
z9Bi23ubRDGo;%!<Bjcdd{3u`#ZE{@`o=4DqbF(ipH|ojIA?{-whBt}hbj>&l<OR9H
zwJrakZk*tu^b=2EfTh9kS?=59RYoJo4D@A`3b#6~!*UdL$}@|qze;x7C1}Q{5wG&F
zF0QeVa^pgBt9%^o2zYCB`SS4_mkNV;g%zHSrMOOo#Nix+<F3ERTSyt63omnQ2USNE
zCMJk$>Iyz0N|X|~rXs_nYJPj5hALXGA|>nW{Hs18CArG6eUWc_@wacWC}svi?Q<Ox
zq<3)r{E}_`bV`GpD$6yVruh77ZZKRYQZHuNG{1=?G=n#ah#sIldgZ3DBcDc)3CKT(
zl8!XRn$~=t*xuZf<H0f*tGrCU51A%GcR=Wjdw_koYy(JMju>GGySWyHniR{k1U-zr
zb0+sFDP(#iQ73aCMb~|_F<sZULNTmf*~Ml;6fuP(uur01gK34nOsTt)&zp>lzzFoO
zodXvY9I}=e>XZAq^^t+sQK!5i#?;Hi5~Gay;$4RF6#ffea%7%9k^5$J@Q$XF5kN4m
zw9mLdc_hCf%x83H;o{8ZAb0leQCn$gX%!XOtM)sXnd3x90mem0Fk*@vXzkP!Icev%
zQTAUa1<dVbbOvX3y6=LCu9vrW+$|$X?h3M>3X}DTgH%rPmE6HcF=vEB-rG$de9oQ4
z7s^-uM6P8)*5`P|pnrqk67fdt;v+wk{?y5Y!}h1R@0OcB>z<5#SMD>s{r>&)WTi3r
zKIho<JY&HatI&msBMC>8rX#wmx|5C!XS`%d+Z5KklX`yIyz_TMbx_shob}#tVO@4w
zGBBVhI%8#~BlTT80d?nA`!I8VtE-KWHxzO4d%DDZUfs-nQ6N6`yfee&4EpkHsk^}m
z3Hs)BakWbiS8)%w1~sS3TG}Ld-M~oBE-3wZrRli*hnusIWzo@n;i3WU;MK6)*+%<c
zfrpZiS<%t$IR_{oe|%}90T6=D)6jpc%;=3^NzzFwO?RFv!?FOiXo_udam`&%L$1&c
zOv@fTkR_e~>8>U@OG;$rYdl^I{dFfAmtQlw0=KT_tmk0arM)rDcO3oDU)L8DGTR@w
z4yU>n=_A(h%+RTqKP9ABez@&P7neNT3uMh>XK%LV&(6F$TguXXt%QO0Kzl)65nH!O
zBuyu?Kl*8#yv^!_%J5S+*-!pCm!MV*Y5Emw>pZ7PYn&()RcOQe8`BlhC!=A;SQRzT
z@5aV=Jen=Abh>tZK{;&WrcH*gFU^93&9Ia2%j?Un6yl?#VdaQFw7q|qnk?Cn7z8WG
zsJB=cP(jQG@qWk5E2eMf5rC(xL>+3hjIx|&rgi&%5Y4p4N<iqz*aoBPbzjyS4AYGn
zK78^7^skX<88=D><!O)r*VoF*B+%OTef)SB8YO&_o*vE2E5#EyCc$6f)2bqhi@WvL
z3Ze#rRZ?4NTmw2zs5nvvFaLPk4$>``y2z;=7v5Ye4&YP{`gC(w-{(cmLx!Vmtsnw%
z(NCi3t4($28JvH8*83aNI>_MPTD1lfk_d~HQ%GqbZh3E}LHkHO_M)Zw+|ts5-WeSg
zn0Y1^7SU|P@#`}qw~@GX(~+N3nfM(PgvrigTFZ}jzHZ$*QPEv~)5u?<mEVxuKMxHp
zS5Me-RPSBBW)g?FNlkTi7NQGDI8Y&KEoBk~LhIJ~i4`-n{-!Tq5CU)re1pQ}_u7<>
zf33;YyaRP6daF-ZHuEJ2H#apUCV`pc3uFS8VAN}0ix}FDflRjZkRbDHG@tv?9S8d;
z+VAo|Cv02&mwQcJCM6)CYwox1Z??sSh;!%9!w*I3HV^RwU<{11kCo@EeR=fYL1TK?
zQ(80IHPt_fTWM+O&cFq3_JLT4XrC$Yt*IsZFclNFBo2eZJT}AV#}M-dTz_RnPbsZ(
z(BHE^>1K~qh39>0Ex6uao6688hB1)lZUSYrpXH#;BOf3C@3YGWV{{(N8s1w|@X|Tf
zNv`p9zbgqFu7xu~$7h!hZvbi$bG-cVfG;toGfsS>yBu`>+hD)gCoi#jl$4x@;fi@p
zZBVK{M=<|d++$RI;b^NsD<38f`5;>)3d%`JzPu~^6muQ+fxfP)+yF+uApiBNex{%m
z(=K!yPSJH7SlTLj>XhvE(WOOq20KdANc+qYjWX`?$F)}wU(5a)aMOg}9Y}Fu@0nn9
z`}TqU*uW<0uei^)Q0wW>1G%}5KbDpZJMEko8u_6DvjohuWwYy1-+?+vI0~2DltU4C
zr0LVn-dT+!LdWakvEw9CxAg&Aq1lSF27OptKP~+a?qXwu5_!w-gnzo{m!zQskzu-s
zuG?4x9Rm&!DGUTUJ0G%e6LhQ==Ta_T?!bqm`*!Gs&@d<YsW~TXjNUs8$GYAJ6B#6)
z5FRZ)e&3Oi9@rAOkNs3Fccbh!2{v!w;iZq`-U&B0{X(}#e3%En)Jzh3_m1T=k_elF
zV$^3hM9Dl=!U#afs^!(sEnQJ0$>5i6Bq2E#X67UAPhe`ya<J6@`&-w<W5<vChlqr3
zqibWBJv`Lab=tZuEjJjL5+tx4d82N@(%LUQ&H@CeAIy7~6U2AnixZ%uwzlg0d~?|j
zD<B&a8cUSE%8+dNkm+2BE|@b1C-2_2?V5>6Q>wna_V+8bT>6+SpciaMyK(vI)!vSd
zwtT0<s3pF-Ew=fm!qu7QGz-7#8zcshm(INg&eD)HsVs4XODp+7Rs2ui;}0G_RHIXz
zn4ENUaL_RDbmiq}_k&x}+I3#}SGCQpC;9~8*Ea5_x~4Vso21gjg465##-91DvnQk6
zHYDfoH*7C;aQKFz%)Cg0bo3^!KGH)+n{WQ_*bWoF63s&L4{A!cW?hbAl9s<D-{x6A
zg&9V`@_s7QH8ZnUgJ)#iENGY7XHIG7{3SLSZw&Fg2>VIq#@DYC+)cTe4)u}w7)vT7
z7Sfi}cF`TID?iZJZKgubAGt<}BVV+e8om08zj%s^P{VcW2gYMsuiV6g`D<cq4;g+1
z5XwvM&ILvWJ7G&jQgd0EiZ&a88I$a9RNifKv$MRCZz&S)`-yCG?e->*yB}p^sNlo}
zs=-FedS=6#@z~g_FHUcyll<nND)~%NLU&D*zpGqurw<lYXsDU7u?EyHQXJAkAs5&b
zZV@Y!E}q`xC4j%b6EiZ&Z&7(I@htQvCqWh>5Ts8>`dxT%UB)1H;(?D(@aAh)R-cQ{
zK^tn0hYpUeyf<*eIL0;N2?PD?a%I(S&SPpGeB2xyTI9!fkJCr(Ad07VS_Y3L61QN)
zUW|!vvTO)_!(mx$Y-VvC85xY5_i!AObL+Tz@X-VLZM@6nNf+eqQr0vS9o$7(MR#x$
zZFdEZL`COjGBhMTl_NcVB)_nI7pA9=JC@^jJyq?G!ay4{lKVIi^anQl`t#?OK8Heb
z!KY$QH74ugq^)$;;YUXk)|m4Ne1Sm2BiS2&(LR^4N$$$*xn1ja9F(tp>NR(S?(ZMf
z<gwIeCa!xp?`IYRUZ2dtwHeIfm)GFGGTXcY<>22`3}tr~79uc1<dO{gyEM389a(t2
zKA!ff%@i_ix~3(T8q*fMX@Kr2m3=UI=|DFdRCRND$P0$DJ&Iu`ZJN7E-70u}9y|yX
z)G$z<*Z~N*3AJL<$96Z-K^Py&eU@4&2uSd{8^WXv2psUTSW3{|Q?^ne2JaVaFL*JS
z1Xdvk*BXh&a$3Jpoxra+u!@6qeyoF8?sL%1R1!p(yY}s~1iC@{HLM{f-X$O604ZD<
zT=#JAQH6j!+Es@s0&KFmQT83ITbwlgu_4JM)6Wzn*q7<eEe^F6EdTn-3|$#EG}O#B
zW&V+R?_GysJB=})e>!5`KwjK;{EFXZtWU!464dJOMS+2?V@J{FT12z;U{E37hwJ56
zOU^Jt%`kZ5d`ctl%oxlVy6FrJw<^TKY_RS1<>zbJOifGS^Tfifrqa8JGD*-vYjH5`
zBQ7lnfGuic+?t;syFE7q3&HXLQ@KbW$4cqS`*fJ072{6}Bk|?^>aG3(FhZTpgxMJK
z;74eDJ~W<Wf2@~(%LL>-%u~0peQWsb=jsA~&cgW-Q~tC)8PQNuKhL~*N6<nDzHODY
zwNdtiS10UhV^~RD&yEK`P}ke3cCGY@1TvkG9-yC~HoJA-#Y&~mUl`(*BE|VdrPrey
zJbk%Hmensj6E#>y9Y%~0qOP&e@Z9he3Q|4-;f;BN9A2Tn33roBY)VqTfyAuw12M39
z<1NH6E^7WYIGAMN3aVT)oJ6Y$nNL|yXldUUcOqRzXTBsl%<2V?aR|lE`_6S{)|^)g
z6PN|8lB>$hp`c-^dH|S?Ha=yK?}tyl(mN&WbC;<AuvJ4zmW41n2&f&mQzS7<O?`er
z9Eg3gR`p>>=3@vxR2;UbzZM454y)M*mOOjbI5y@k&In62`4SZ--UFL<rQWdNUYPAW
z3v33}mlG~_>F^!A-_S6f=eYw{7)*r&^a#8M?+k}Kij?c&CPTIbY4q;8N@6ql_0&}I
zn;RXr^nL>%eDTXp1nNzd9+<}sOiic1^7F6vYR;^r?!!LD3BMDVgAQKY_r%8s`$B{5
z>E2UKz`<9onUk9kb3OTL8KRsNy_{D%nd>9nM1FRBEXAd!_M`33pL=Bo$=4fSLn_PC
zoIUENAmluC%qPrcdM`{OSw-FyCM5LlGTa<w$77;Ke&xBoV7VtGQtn<ryY_u8$v6yL
zkd75%_{J{jt*mqX@EhQWa+O}2v<X|}x_*8*(30=ehiYE#Ev3App{(o|Z0B<0m<ALS
zC_CA~889_Br*JBdV3fhhN^BRn-X38dE?mrtI@o<-JPsZ5Tl0nt<;a<#;bG!lICPyA
zzVk@lpHci*oVcrNGcP`{zbyPZg9sbAkL&2@$dPhxbYwJJUAnXl68Hx8gvXH7s96RE
z=iGD$XH6qqq#<DHut`a*;vlLW0EF3>&+^lIBpgw#mB&?8-(&0}Xnw1?v9Tp@Mlx1=
z{HrDTA6P&LPVu7+`4~^i7RZyH=j4QTpKZ-|bE|=v9=(IHk&!-Cj>sL}zx8HN-1M}A
znm+2oUubyLeyj~LK9VUtaYw>eypE%ia?$Y4>a8e?&DRD=>%Y%`9-~6G%aAU=#pJ2p
z)V3B~KUAL~*AtQx@0qIRzk9S+LWeig{aM9a2$$+mfU>yX&w~Nw%H{W1FRp53kk`(T
zXs~JshTlO$IL9NukUNxZLp2o_Pl@z~tSjf&m~k#UN}Bciip)+BVS8Y}0}lEodV0_i
z!k+8)KiajNr4BPST3XwN4c^fH*!}u>xKOM$9vlMMJL%?{HDLG=N5zU+VNAP!?_Pl`
zpEhprUYLLv0SRUe`8WGglLjRW|0>%QuMk=#c8iAXT;vEMa?e@*n9keWo^x{)9CxON
z#_ueD>;$DIq#}rgk=jWZmn6e%FmeIMzSV>qK?^ir?R_})l=sL7dceE9OEsD!QJKmy
z3tL1KKIkfNt|ZlW#ytM^@=Q33as-M@WjQCxqx!h5TW9TdDdO%>+mM`+5*2Nv_T%2>
z-=RV}epZszMsuQPqC$d#G|hhuV*bz>dh{8XFqW0U;h=&BNnL@UhOl#hU$!FUx$r0g
z@Pcg)E%wABaN}iRT|Ez~!I17(Bd$7{y1KeV-STcpF7hlOUbWq@glYl=N-zlF>PS4W
z(ev(I+*S>-iWV}ZtAY21e2S0!rl&72m*WJM2gIU^wKvUA&}bM%abfF&J~5fV5NGMM
z(HQt64VO1;kZBF1tz_PlH+%20tf!vj_=s~GeXNJ;-Jm$ih4q_%@g5MTHNm(D$xU+P
z_##a^NB(S}W|u#T2Uk$sBywz<DnAX}xG^TN=KT5lxkf7XrB8Y*O!|g~1g>9LCRlWi
z7-;QRi=(h`9>~XXec@{PJ0yzWD&*$h?J9Ab+p36nio0C#w1S2^uR(KA;CxY05zYqW
z5-i41N^|WeF}w<5x!6}dZ{PB6`<#*E$b$NS_hFf>!H=_zN)I3pn)TwH&D@&JSq>@Y
zYDO9vaSGzb8i!oUDXE;w9D4<w2kN<Tnd&oWLq?-y{u&u;O#4i((EHAT4`u{X)=jh#
z3Cv5QY~CSNe?U0{r$6B%d^SSG7e$>g#*-C}CX`@!l<*X+R|tma{z`J5_{0zQ>aM5r
zh)*RlT93v;V+5N8S3SL!8VP=iZ9sUqWjUqTzOSB4RE)YCxD7%<dy0!jAeXA$^3q3|
zIm@V_`#x2+efuWc3rBfbl~+gDB?*B(&#~V%<i>^A?kJ3U<(4y&Pu&bD8zO1leUU58
z%UkK^=YDRFsi_S8DM&(9nG!E6^XupGR4UrkVXyDAu#o>PT^cgYt;_D45l!$(2%yGd
zFqnZz?lUAlm$Tp4vxXH(;E9RCE`ZairaC2Nh&Q1L(W_;h_2GPZRLNB`ti1hmJG3Mt
zhibok`6A$agLjyxP~1KTM=KV^OG=9IlIHo-Vm$o1Z(*R6NBIPa<$>i<qgOM-KjH{O
z31{V`&I!T|BLL!=Z{em~%)5BCs_JM#-R=1Wx>VEiuxe=CVS!#P_~Doj^KvfV^-vNt
z#_yxIvavn?`|W~(kxzhpGcXYd@xGHc>MN73qGY=Id7-$ZMDC%He(u6x?GA*PgbG?L
zJ=vF6Q1HBe4|w~F*t|Afv4AHUlKY+dKHoO03g85xDGMFo6OB|fBvd7{D_3gclo`33
z5_Vln&`e5XAy7vSNt8SZKUB;_e`LUm4EYpaIWBQzVAbn}Ying$w>yG#oOk)7kkdd{
zSBm?v%5Al8@<z<kt+`n+b~w`U_S~cMW-~eoYF@AeP<(N+8e{LF13vHMc=Yrb1g~G1
zK?6pyw7bb01dJM7OO|Y5ve#?e^G&t-dDF5(fySv?hNn;SmP?7+o9o6YL46rat_^s>
zF|J0|f5`h%;?7#7@>@WKSjAm0Jv?2O5pjBxUr$(Am>lP67YD739i9RMajY=cIO(=<
z@5#Q~Vy92bJY9lFrxv$+*s;qCJ(b$PImeq!BSl0-ktggr)HqJENxwpG$lmfk{KmSk
zGi@&4TU+(R^`$OFpWou?X$X@b;U`bF0;{GGZ@xyIt9xbxk|EL<;qxE~#YoU6iw%mP
z9#Q2+#KpzsIyKLSzjy(0Wi(wmLO3gDbSo_U(xSW59=jgi!NM{TroZZzAn4P>L&@k`
zd%83z?nQMz!lW^Wp4X1)^&v6$WA`hDDX9%WpcBaW*NLkOB%4mIEY-KNojMcy4!x4?
zj9d~t2{JxWkZhyiPBII;PH}A`1QZl;#DCZOnj+bJyF%+%ntAi4pr_*#Bo#`^P0FyM
z6puI4{omG;2VKtIK2q*nalxm$KZjo0ocHBnBjPBv^(>J4<i`_{w-$w;DD`S@tgfn}
zS&H;l=?G`nP854B#h)-`deXQT6nGpU#PJuE{O@<)9;i1fx1S3@V2^-x+jSaP7n%;`
zi`o&rcQ?{Qv@JzN^RU{zy}dDI(-F2-QTYOcy#|O89--s|Gl=dlwu4QF&!V{$>)~-S
zGT+YSG)MUvA~sL7Cfl^JPz&hEMVigGV^3`1S=OsM;dN}f)?Vp-Vs2;3CxXw8iop~Q
zrDijg;SLFT&(J~NmS^wfb}-W4n@dn2`cCLVr0`%)BPyDO32;ubsEt->WzuJG>Z$ja
zYFUpQIRd$wCqy^cxyli8r(eVFT}`9j9#O!H=N<*ee^gRhCl|7$Km$)Rn8@NN2sAvF
z^<wvt=Dv}Gv=~0|SC4qmY#vV0(bSClMz8$bVcdWAeEZIXTFQFbR~=j=&Awg1YCVST
z{u4O+62Lb4sWas-S^5|@ZNdyOnIaBzy75VuVAtKtTUL-=k9#h2mM!mAXk+s2{)ah%
zUW(2hTVgxa7e&Ii_b8zutDnQ&=jOzD)M766eIB;$$p|Sq>-_|Ux)_O+L8}Qb3JM-O
z_Re*-86f2Fuq8SqVjZ}|<%sU1wFTpUw*^{nu63X+0JzhKf;2U?Sj6s{rIAs1M9!3U
zF969OZx^jDUq<k|rE<+Z(OMimR?Tm^io7a827p}wyxu$SZ~1{1Vx=L1@l^l)c9*ny
zOwVY=#*vDD>7&3rX}>*_8KUhQE;^GxV~`C70M9MUzX8n`VAtL#r)XlR4$a6d|3hH1
z*k=hCyt`pi6R}1=@9px~$F`Y~S-Fw`T73^xSM+4}0g*TE5n?$))=P>-&o)Ce={8=h
zLLX4ufFR2~LQ`N2uxn{)VdA7zqc_Kk#S8Q+=!2)kuP+~5CVRuNtwTxxydf^DoDY=G
zK;u6@KR{Oc9Fa54Kk}MHN9}441UF%X)zPVTLF=Wn{Zp(CV9CX$oY$iZ-G9EmylAp!
zhw=KA&&-b*EoEzUbwg`Ga!!sD%9^>Ues*8A8?=`1mDFcceQ;^-LEBpIV`*u5TC9cI
z($}M@&ht=BNMPPOp?)!D_k~wd*mD%f=n$I&4pSJ*jDbkVQpKmz((LO^7nq{!$IZV@
z1>WHD&9F=OjjbnpB;CBBqLzy)724F&QuXPRwEG{Be=|NII{?D9Z}A;wMn*SB+ty^k
ze1NUzbGST*mLF^5Q>-CLrLjNhkzie1_A#aO)R#bHo8XH|E~aQF3ipo#7cLta?EpzX
zIf>Q-h`KGjnbR1suZi4HV0ZL3We2e8l&wI@X0Q^#RPRhmi%s%{JcdHA{#<``2P^<&
ze8b|O|3P{6`SUvCJc27vnHWv~KzER{Ec}OouO&~yS29m!P^I|ElNT)Mx4K<MEb8y<
z5C=@y!#|aQ=P)RY<*ik#7>ug-P?j|7RtARP2FRa|2@0Yef5&pnP$VzeBQvuOpTlpq
zk3~g0jD@zcf{IILdlzkU<f)ry%sohGM}y$vP$miJ7tAM0;!BO$r9Vc6Vv3dy^w&`~
z4ZM0)3qtFzhFeZEBc31}#h9iNriVqj(pA)2u=nHwxp<0C_iJgLC-a?xRKBOgSC@3%
z#DtZJDfV*|n}e<G=9Owbmhx;(U$yRB=eY-Wg*{-y2Rk}u7QSCFJP0`8_6#~RCN{S3
z1uimX$?9>rV59jk$FV^MD!L0HZSv-s^1COek_Bu!-vF-!Jr%RJ`*3+vuJA#^7O1rS
zFXX=;HIW3@cD$?57sNw@0y!vKW6~|OBcaDqdNyXMr{@a1!fO+!-tJf|i^8Scx&MBF
zyT3z=4E|I=lgT=?_2x!Kie6)i$NVJI=)$^bgSVmh{PnZ7^6wdewr^x$aH>wF%ir@i
z);N*=5nMf*68L0W*<U}3^G?>4Z>6WFhsl3!dt}C=D_5@6-JA|zdu*}Y%Z}(jN-Yc{
z-0X*sIA$yyIdqQ&DryM4aEP)*pXqu*>ZJmAIPVwQpllz_yn{~iGyAyYLo@OoUnZ*Q
zG@(P$aYyLpYHGlhwTkJgA#?$op<Cj*6#(-y{N?|}Q5W4y)s?08Zzp8~itD6A^YjLc
z5b982fk?hN=)Do27#u^BFW18TU=8u`-_-D|H*qwB^Z+E7(0+2aoi)!k5PmfGqoEbQ
z@$==x9ud1=7m~EXVG7bOjMEVCv_>;DoN31QVrVvD)YG7h8=!`QZ620=+zBnx4-~r_
zH*Qq%Zm4Jjfx00M=11@_RUvWVFv4VI9-?y;9OjiHt?sfl5Erlf=%1P<wq9eE{H3>C
zvPT*Q^?%z4`j439If#?)P|g595*8HH1zjxF1gsQr$bqESWv$(?0g>0qQeF>(c$_vL
zSkeJ_YE=))Ax7<*;9}4-zkm4j>G!P4G5BUs_g{GTS{`nJK;{EnzoLDz`0~;}K%HH=
z#vD#)iL~dJ+)63GGv<B3P4CUM%PK0D9x}2LnYmbvuUu&XO&f~b1b||<LAXC^J*q_;
zhsZ-kfI9~VS8ZmWDC*#gnO7}G+eUGNRB*8_4P|b}5DU&8Ct=g{WM5%_Zn%KiM14X#
z;0D{yPvf`~!MeIFEgiFDOXX;Kf7|=odET%8zycujta>gSXQiKZ##8(hM31zAC*7%Y
zy$49<*RK6xh_2nXYgb=aozg@^cRIBAuyQ<q5oi_!m5u{zp`d9hbYDgx0usd$Wl+uM
zz!$>Hc?(k>xNIP<?l$I*88k*K#3$#%&t*hbi8~BEJL9>&q7GVDa9oU#KZ9fF%aIw(
zRwz94Q%;y_#scE-d(+?By8>5AD*2o3D2k82_FM16vuF2;pazbPiHUtuyCo^wn3Uxj
z;)cp1J3AXTX*rwIkg<(#kMr`oFP<_Py$W=v4RILaDP0#kBA??rYYUL8{-C*;S%3em
z@<AFIIk^fCBe8VLLkuh(DuM8qyS~R8{3A>Yz}*L5sQ~>E#`3ke8EAEh$BRRCt2=Or
zIsbOnUJp(Krvw^jdvCje`!x}YyNR;{+3gNIthB*KSJ&a2P{|M0QY+!O^7R0Ysw>72
zGA<}*)xpHW?Y@^+F#)zz4T=b5n=aIm>M=cf8oB5<9MfL5r+g|ze!A}giO=or%iyMK
z$NyZa)zzYXMl_kW_hV<5Yz78~H<^_^9Ubh-tu1nc=lky`X^?lLOnzw$zajlyd>4*^
zNRMs^QS!f@Vn9k+TL_9Lluz8s$}dj(H(pS^5|flPh%HlJ9&-uIc~<*Il<yB8!qD4q
zBC>g++b7cVtlOd$wFdkx*Qu}G6Yr370)_w!C#OPLqwi7L^Bk;nR-a+tD{$?lv$FxE
zL!09=va2W%k3%S(0$S}-JeCiv&91|Tg~lW6dMe?)b+Nv>It2$QsiHKlK)?-c0t7dp
zE&YLaU4srB{NP<v>iZno9M+UM4uwC7#^q|9$`Q4r4p1#LBz=D-I2Z>=cDN~1SVRO4
zp+)@{X~-vC*;dkQ6ba*GAcabn$&YI#JWfP|<SOJa^bVgIhZ#iXtr&EBADEsQ@8_~F
z#53SiEG;UMIuB>iV}|YC5{pxr&Sz9ZXR_Oua=!e^ce;u7@fSFxWAKdWzYG+>e3iOP
zQH%ylsW01d@vdkp!YJq7Pbx9eZcaK|2G96-F5)BzSyvGLlJJ|`>;~Q}WiU_}K~<m7
z4A<6@$a%@i@G^KPoPmhB+Y_JC&@huJ+|#Vg%%}^PWn^SvzqanwqsYj@%*^PCJ)K=$
zJw&*JZvVGEP@0{&dwE?68|$sSTf5ez{rug2QY2K5J@EBR??jutj;?N8qg5DJv1-PK
z@D~hR2`7Yv92^{07Sh2|Cw17E&>s44<>7yn5b;00CH|NA6#wxrUv#{41NV-DLk<lx
zr#(1b2Axq)A<4G;0d~&Y>;2%?e8X~!Go?9i7#g;B52I{!yit~x&x+bgVp$AEjl3X1
zgH@C>5xHsOMw&wksJ`tjLbMm*LCLwJQe+S=LQhuCh;+--SjVXt7A2u0a-stTjrh_n
z$%*O9aKB(Zanb3-{jK|8fE9)<9u^wPy&MFV6zWVzppPH1RN-}D3kEZAA>_Eynzew?
zJ1Vs=>*<)g+Ku(Q1O9LxA$J;z@Y2!@HJN*n=Z0^zR4r_nZQh_30UiLiHS%@l2|gf`
zY0omEE94RvSK4w9$JzUveGVAN!rGRO?p6S4a<3HkX1T2xpX?Ph?}j!f@YCda;ug8+
zITg;jE%^w7(Dau^M;3VR@VUtZWssL3)@scjov({?M^NH8NLIY`XRMU*dqL;Z+EP(&
z+ps^TSt~K{d2&_W==;7-H8>#kf~}$<(~6K5qtef{7h)B1Y9y8qkw~^+yphH~dcVhZ
z54r;hSh+Fa0*c8F{*jA?ZXXZ0zo6<0>r^O9R0mt_+sgn_!lmh<NM6l}#ym%B$oDEk
z9HHBzQOx!TnjbO(us4fiM<j%=0OWkY`A75`sfL9!o}Ql6bbvA$G^-K5O{Z`C{0k9m
ziP~vS2$8T4#zzV}aiy!k_&%oU7Z%#(6@B~&tciz>2zvO;t*Ku$*Je68Zl}Y$g8YrS
z7_&6EI#g0N3=~}!sq{3%LhxJr4hc|CB}QnM2`W7>^NFzgfIeyjUWI&)cvO;(hDJS(
zWsK!jGGZ(s2?X=LF|#kvoRNgomF&WKt2vKV2k?JhDtR0V!xVI4j~{2ieC`fRYQ<gu
zd?}6Vf)?=n<3H&7<f3KVK~QHL7=l03+(;hl_U#=RcVMc=&d!cvW_Gsk6r_ld$^Cq=
zJz9KWEE?#MY#%~Y*aQb|5|1a6t?`M3kxVA;(RbnR|86p+Fa5T4&s5Fj^o%b|M7`*!
zD3fpuTmwG^^7_{l73t}xgFl+EzF6R`#ni9k7{2Wlx(>FSdQ1keH;I+QOKoC3KhFuX
zS{8cw+)4U|z<A>bh~o6~+%jRB(1GkqyysiDXz_-~3#_gPO2UUhAd|y0aC0;H)tC2H
zg|e}*fJ^O$%bihT;pOdlhguBv&YGHXT3A>>Pz6z(vx|%4;5W_Y!lk+ApqY#|O?n3e
zsCN#j!jpC1$uT1weNH^ozpyL^zHuHsIx?8XnVXvnlg`&D#%d>_-lr}?sf1_;6{ef9
z3f88kaXZB@DvJ81YGT7g>FVmL_mX>E|9f^g8y9U0AS(`e*S_%mP;~`IU8@eWQ2%kX
ze*tlGq{@F1BK`LTqMjYDGKf**ceS=>C~%U@RPYKgjJyS}AJ6q$Xx^r2X=yQsTLa;|
ztFZwn8Gd4<*!T%yVWf)<gG+DTRI7U^xSNaYS-#7rx2lO`QV~ysY4Z5__@;op57c1<
z!x{P>^3I7&$vdlaBa7fsQP0=_ImxEs_CojWGF4PY;6*%IlH=f{pB!qM1lXc78F$?X
z6%53f0VNLQH?Yl&!^|7ZWiudu=~JW9*0<VZ?CMubAEFW!3K?I$dUeO@4~#Bx`GUN9
z2P$ns6cbVImvX{-9`<u5^t*7kVNsb|ThG9$3_h`XC@?3^Atn~J?qCF_D`hpWU%&3=
z^~+!G2Ij(XYWNX94S02NY5=dxpA!3Pt!i)Ya^Y$<BP5T8ynI&TP%v+mwr0b$i?deK
z>&ww0+6AyI{=0l9S`)S<ez#LqK3wl5>BKXuQt&ID(gef{>7l8B;cw3mYmlY!(EQ=(
zvqjZhb>F)-H6(?A2fYO9FCj7(dj`MrH{xH|gRuSx;nh}hBEkv0z<qh?t);GM&63&A
zzgD62nlqw)3Ndy*aRQ%7Hl`%ME*h`n(MrB_?b$c$VcGy`QWSox$&m7aV+Bv1;sL4!
z?d=`(QFzbzO5~-1*m-h(!M%EVs(zuyvsW&4aq5uw-o1Ml1bAAmVgj?c+X6-20@IM1
zj~_G7Ziw7|SbS0u(F+CL0YG4osdWxq=;Z+A^{}N`EInXqKhjd(van-RIX*%Ju{Rx1
zL_^ID%M42lPY2>NOe&LgvkeAbK*Z7zN!3n^_;~*|&#Jt0k9q+D1=G7NIXUck<fno3
z&70f=OuOW5yC6y-a>m^f;G;dc@l`LC0@I%e0iBwRU|COOPK>rA32%7_LuD{+Uzyci
zg^Ck~aR{Z4JzdaUa=?Az^7qtsy!l!fVt_!Z6d}evYg~&pDdnSyj%p6=1w_-cP~%i2
zC4%lAICP(JIa%6=LODXT960~Gzpk{nnCdjS6TZP(O9lEk&Db^H19AtU))}5J174<T
zMwc!fa~yerdgxzx>az3#!w(P99=V$2H}-NtyT0q(i2|{Btnm{Vqqw-t+bQw?euHBU
zjNy6eISF@n_kJzM&uxPsD{f+7II8m3@!5DJG@`C$QI?*XoUDwLSQFyy&&74>*kYd4
zb3|Z<hwlseevtna?D9bKfBDky`w+ulN#nn7UpF<i#0b<qs!rTrR50KFPWB_m<6{g4
z%f8W*>#arorF+}FkDY^-sQSxP#%TS=lZHGr$0v?-g}_cOsOai@D^&KdP;7V5o?o`k
z-SJol{E6<~UEQv?XN5RwywNmdrA_!}=IDRC()lOi>HoejH|kLoxrMi$3_x(@xGTHT
zcFBuYQ-K~(d3OCuNg=s&a{ZbPxa~rppL2U&i&aJ5D{Tl}0t)T|`#~*N*Zhe+t5>fk
zgo`_M#?fAdN3Y2QdvxxVpXlU?TR^^-B8wSM!3c4}uSCS&Jju78uzjRpW=?L8MkHK)
zvG`43U0L_62fReIl9&zn&Do)_XF4ouH|E~~ZYNpfh<>gHw#Uk={_?ged7Ipxz<0z1
z<^6I}Ta&48pY9Qq`u^;zc?ab7?~yqREyHL_4z^kzA{k+$$3n}$<D={coRE}61V!^2
z4%dMj0UW;61GNWf56u<oRu<2)2JF&AaRLR!zv+bED*fn-M-<$>)#@h4#^N=TuA<Bm
zJDqgB<=y4aFAOm^FbT91wQR;AUcj)+p}#o`JQK&5ah!_sy@9k#UO93}A5cEgeZPp^
zI}Pq^RHd+FOGKFn4A7t6`S-vgq^{^IVUK!5INNrPQ>3lX9d<j8`g#x1*ZhQZhBS(c
zH3n`2u46x6VICNu`v0t8nzXL2m*S@1uMk7nOL7L&?;9HZK<~|E>csSWTt@amAEyA%
zn&S7S1s-^AVC*)#v-%0sR?JHRKV9ki2R<<OFwNs1SO5(xAh)IgDlo>i4VLX8BeXU@
zfJ&gBj$eF?JXdLYZ88OQ3LN>>m>AEWw&{#nTLko9R8*8~jdEI@NgWpS`iuv}#cuqh
zOW=~b7N~>yt8qPk9{>QSt~Y)`xdsAGf_3}faFDTXsMFS08q5Ep5wn2YE(_rRYF`4T
zVFgiHhqEL;B((gCK9~5S-33fUXWEw!Hl<-~Kbk+OgfM7ukqPtURVr5iuCFo4_$OEa
zo?S_NvTl2J?|zq;SJ{aMsyjg;R%^RGp&!dlveP8wXt=(<JbB~Pw3YqOzdoQ}O}UVs
zZ&JCFq=<{xn{inod<iuIro1$pJm=KE#mXz2rb(-}-TRoY`dY(|`}fdI;YBw<utQZs
z9UBY9IJ#2D-vdFEY9M>K-);{#3$}im``FLkuXIGH7w|GJe!NTn4!FX>$4=<l7s>Eg
zNE&kc^X&R3$~iq@hW|BLM;*c|iqOgiD0@qq^i%b@YraM0KD3j;-5gnG;QJt^$&_|<
z(mea+4Ldu(+!i437}#~f{kafW$F*zmZ~AIa;Nx(dVPGBjR`zRI*zlp-fJe8&VjKdv
zbIsarXMex5X8tr5c;oA@l}Qn)wi{_Xqe-=QebHI9H5#Kls%Xn`4Y2SVNbM&b1m&9H
z@_m>zz@Hqj25qMO9R$`x5-8cIBAlV{uH8x#e&3ee@%6_KU193dzD+0WW{PmXloS`E
zLRP+=>%MH5s|uv6I<mbZF7j%)g!@};2Ovnu)cd<Fb*X5%xzU2W>a|IwyIN@dnmEPh
zi3F{!_P!+eMLRR@J%SqzIu*G3AAkk_D=9CGY!zSp$wCncf*Ewv#3dBj?C{4msd%?I
zH<*DNe|fg=fM(*Yz$3cndx6G;^T~1q$6>Kcxc-rap+{Y&3i2~Zm8Az5f5CtwKAu+S
zCJs}0aJgZ4bKGT`PiGDnE|t#=_BOP4Bsm?Jqs^L<vY(%atgt_TWAWzU4OxVEp@9*t
zNF@yY(J__abb}8w>i!3)Bhh5aPds}ZCTwkmDzeRed5z<Y9B!KDaBPe@V`j~hlj4*K
z=MOnbU>wc1KKBYJb>PUph#+3n(Sdl{ptcv7DDm#nL}iV69t#2YBS2vg=+hi5(>y#p
z&`Bj&{JlQ??-2I(Y*9(N3kMUh?oB?vd@0!@_^G4>&+-}tC$QFXnbS_4AoE6#Bui-C
zy7dm-aYDbuuGL$%Zhec?43eTb${oVa#7ec%NQ_A2=tBoC_<*5_?s13lO*glt6}MWy
z-1Pj_P#4_2D`k+$OP5yieI`9TJPR_wg=*!#1G9u%hu2u|qK)@xWLeJ1G*Y5klGlKL
zlzG#beVM~f9t{j<(V9}SbuV1_B>@vI&05Z5$G&|0s9r%qFX=R0wT$WsC<aQ-uZn(9
z9k28$8HK_-HWuUVt#|oSSk%hV76r1!5uJ={@W#xucPXu^ss{o&+ICv)m<H|BI%w+T
zc}Jz(N>zmxF9DobedU(k>uV83`_KO`p~wHe`}RL0Gr><Usc`T7`N4A{6X)OxfPK*7
zR^}ZQ+n)&Yt%rBr`XcNlo|Px(`&qr8)SN-hUI^TVTzFa5c=f&=y!YU81mH5?w#R%=
zowSThr2s<8<g_MWXpG4pZFo%Q_dEZC<Vjcx5|3{|#Mrgkm~sj|E@O6Iz$<~9n+x6D
zQ!d)0!5+tX5+_t$7gu8(26UE7$LG2=`ka+gq0G7M(m|Z~FE8${SN0?&FN_8jO~GfC
z=EJ^s-#%<?kZ<va^pS1zy}7upa$5mr>nh%tTkqv9Lo-7~lLs!UEYrqO+;N{p3-t6J
z3SRs23m}cT5dbp84AABQ&xhdUAH=PG^w_au;^Iq4N*Ny;v%A5i5`A7#|C9|4PtZ=a
z1<GbUDg=EVzLzqVwAJ+J`{x}!ng|5*dwiN^Xu_or_n-o7mm)8Hs4X4(KJROt`r83T
z%ZG``sqjaR<L_og-Wlt~QBn2xUa4~LTmhJ<`=TY+MH)Ofme|7%Kr%r!!x7O0w>XFH
zGJljl0@oXV1}NW;ABK$qdM-VP7WMRAG-H-5hdyLwg-#3t!p5NheQ*nUbmE`Zd?$4d
zXsC3-<)o4WN-&LRe|`DmI~xSISicX&I7=Jml#%~xJTk37=5tXBpR>f9<5b$~KKN}I
z$AXNsG>=bl70uKK=kboOU=EBljz3>H4s>dt=T`jcE~nqMt3m(V`C5Omz)zJ`#&2Y~
zwpTVZWJ&ul;WcNZr|V>yXT_QBAddUh<2HoSNI@-BEGS>tyuNRMPe0cV*Wx5@H;aZu
zC%DP@z{t=47!AH9d<2MEaRWdbRq7T@%=>l7`5e__9g&Hr4dF))tubjED=T-;2Q(uJ
zp_Cgj7B~Qrp1XbTUZ^cjV4#4fWd(lxMmyzV3Sy{HPYgGvdukkPZEXc_74wKjWUX_H
zt*m%IVu8P8d<1WNgz&9nAK0_>551u5-dfkLdFj$imZmnRxKa$9Ch9+aGy=UOfYaUR
z%9TUp8lZvZo&$l9!ZuVlyt9eM_ya|q>gtaBTb_e*r~6i6qc4TCx=I0;jT^=WSnaa%
zDk^?fM{#)$c*Mo^!HU-SCnoMpEYAhZqTY)B?N33v0b7k{&vyI7eotLo-XU#r62>L4
zvpC@P=T6KSV!9SLy}EWStvB%CBTh21Hei?V5zmz0sXZh?z4Yws{5FsQbll)#kPL)-
zq7gPQ1bDJ9t1vOL2DO+N8^<Vdla+--KAq!UkDLfWad87VFI>p!uaAXH(>#wrY(NKW
zW5+j!x`Dzc|2?Q%!Tz9tfQDP*<be8*oBgaOZ+LW<Ka-A)T`uH+LSW@QF(v~dR-ml6
z|5%Z9F_WW%hlF>ob@n27y-$@la93wt`<jmuLd`!w$`Eo5<9ZY=Q>H_;)JXs@5aDCh
zrHmFvz7m1}F$OOc>&5@FnR|aNyp*{rPlG??T#NntOj^DF111X1qV@wwQQ^0j<Gv(v
zvO8pzwzhVtfn{KWC@hWtUZZMP*B7B!y=t{5AKg5b8QknUdwQrAaB`dnW`f%YtE>lc
zB$!pf^%&-&QU$}WX#5!COweiIynd!t@H*U!T0r#!egHS5NO$o$D(@u=iys&jn$^7z
zP^t()*1()248!31>4v(vt*s5^I((Vj!5+iB_c}NS?n|>WK|K4_LKg;-(r6$R=0W&?
z7GM|qkAb4`=}@P#Uw~Q(&L&!WSeO=2U!qw_X>Y_D$FLX241&a<^)?|P8AN<>-d*f!
zRS5ZN$RS#DgTgjObgkXOpYc0)YFb-)LFbgQ)fdq^gE9Lq9|yb!OxsFuprBXcI;Gx>
zZ}kJ-Iw*f7p@Ow;17-(iGVJXCt$;j{cG^k?8*kgOgKEr_unmy-kx-R_kDn}JKTKhv
z=wLwEF!(OU8wm;{El!k3)@S#zd=cj>BU4I{_gR@nC^Ov8txBL2?Af{VyydY+lm8;M
zIl!KF=ilq7t*~yom2E`E&#!Mg+E)A*?+O#@>V6WBs!9R%6Hp0~UEGK71ZvS{MU2Xm
zjs3uNMY%TNFuM*$FS2b`VX`Y1G9O<6KhI>O<~rKH(WP-uT8pmyQ`ycHnZ^I-7xVvM
zDE@zF-0^=11o%%DCI9ui|L0`G|MxH2q_)){G;O0JOP|qLfwBI5{qz6*zsP?*{J$$)
z|E~`Ym&yNMH}8L~`TyCPH=;oXW!o|R;H4w2kcmC^7QtG3mB2yf!ug-H<ca@X%fq9p
zyKjb%gX4TTC1WDDV8_axd94yMILwUqpeC~jh48c8y<Kxm0<1*S8Uq!B2ABkbWF7HJ
z=l!C?H&A<PPxOp;#lhVwD1sXSs)Y--l!@lS;LMeB;N>|`aa8>f5++4cbLS_*>`LpE
z6f04_qGE7bYd1|!=223gX6ORiFDx7FY;EhUpFVm7D}qu;f#3}WsrD^rEhSR)<K}du
z>~1QiYIY+n->Rzkign=R7yjo>>}K?vBY%r11I{xuccHs}{_NS*=yF^2bNA7f**FA1
z9XiKQ(WsX*WYYQXke~M*IKY3T^hx-`M~~7}qva3<7LZ&EBMXd+_p`F<q+iK_vJ}`X
z0SYHM`xN6GVA$L`8MkIe_93h%U}kK==?m;YV{TVHD~D$i@5MLp93_27_w)M#6JTT@
zfJbxe(4i~UVbyRp%XstVT5GOOj;+;P(o`k?Bj`AG935JyQ{H6$EqU&{A^bAefSvFS
zjsuI~*Dt+<X$*~Rl*<bFXPm;UP0PEQ`nbB-#rjOsK8Rl-PKK@7ER2D`B?~y6_FR1S
zA-M}0Fp%-sKl<)zP+Uq<c4-xOutHH4D1{H>Y7gVhKDu+m(C$yoFzyzJk9_(x`x7U<
z*qjkDIQc?)s!^$snh7P@zP~oB{;H4Mwv^BCWntdFJwXWeshIwijK2RN_&0-_;)P*`
zL5%DxLwEfY!v0RKMfjEdhW0W!IhkNXj_%G5;H-h6l=s>Du3R?b{p#+EnqWXZB>aGD
z9nA#LWyX~#!lCn}@Vmr7nSTHtnC;lhQS==^=OeB#LfCiKdm5BS#Hzhw(lS|1uMZI~
ztJoh;=*RY+yrI!cQ&4v2!e^8m7}R8P!TrqNa?XLjz=Jn7ppSH4NH?raTiQSW)6<a}
z30vA<R|DJ618+8vxNKg7<q(iBa=o#X#`@Qm)Sv9;<rts;Gp-I)^Vj#ZxS@N-g|i{a
z&)5IGo=;KMSk#Z<Q$KCnea|iLlh5?9F6O_L#nc;~>kZ({uS|-pZ;y(O#sGtOMl)59
zeP8B+JbXDpE9TJ50#hR|Cnq;ABq%jZ$nxN-^Cb`orbu~ZSXmK~YzxMsLr;aE&RLx(
z%CjCq+?KtK*lS{Q`w(%VM6m>|ytWO-1UjLFO>!Bl)eHhUFZ@H<DA(r6_jTw%tePph
z*XwX+-n(xS;eL5$b#q{}2j>`vJ=?95*VtLCzkZ9e;gM=;yj+l6MsG$7Kmy>bvhGjG
zk)9je;|<5<eFK?)WLXdw%g&SawSC9AQyW2-Ho3r1sHUxuysaeetL21!-N6;=wZ~3!
zO#hcxzh9h^uLxQ0dz|6tr^0=foU0NkBGM~Q8Hu^}jVeD6Phh#<Y2eeZ-!dRAQyOzx
zo@wXK-T@58-M~O^xJ*{3&@r=7%^io}PzJEL6y`saPw-bW>#Z^z8oCa|{K!Xh>H6R5
zpl{kYeqfKR-%U&#;OC;ZKQrL5XQTSy8SDi42|qioj~VIUq>xmSv;?`QKuFZQ@_Ow>
z9Wrr;kkE3Wbdx^WA;Z@<Yl6gYaIcJ~r@|yoJm}}1-G9Wgc1%K%0i}|C1#qL7)|(W2
zbpf9hDTgnQ-n&c14}0Lg$C&k(iHQmK8W@IQyx@7)AinQ+e?VA-7%0T~HeC)0>SQmT
zVjZTMj7J)#^o&ns-_r!-#G(EOIc=s%!lbN_MO~~D#fNA^P6sAYsGZt!$=X^sqkB1|
z-q_~DhYvJ8;U->QUhFpFVT0zg3AL$N7Mi@eZ{N5@6XLB}U1Pp*?#OYPbVGK<y__5!
z=ba(OoJnk{Y!=4GT*og=yiG{(d8{_`N`brX*Kqew0WAd~8R0utd4B8v{<s`)7<JcD
zEtrG?KZRX}Z7z)(FYRAe77rh`kfXzi66qR|y;b^5I7Yj>X_=8c+6mR2zn+0So20ho
z(Zh$ix5nirdf?l#P!+mK?McAp&`Z5lr_7_fc?G%J3g$1t4u^z@c`wE14!c=dgSb?y
zN=iT%Q(1H~wxRLySBG_T>G%?OU+m|eMz{;R#eTNuH&VlO&At~di9~IM<EY(en<weD
z{orRr3z9cNKo<I}<xp+T$;HzgF1Fv2XEUPhjHoS~USEJ{RyI!d@h1sy4y4mbepeZB
z+MOJ|5DP!RXr&jO5Ank_+%}P-uRnRLIYwF$p1jnjxB?G-ceR@1w;6t4a7|CSEo3us
zik;@wOqokddfZzXQd-jNJk-d26&8yrP|ty@uaT&M_#b)vz?(>uK36tBb31@9`_h>>
z+zSh1AH`0b2!K`5NUNxv5%wt1WW?+`sYM5LKEuH(u#-Q+?*>?*TBPTjL-?1|2A#eo
zsOw*WT(EA-mMw(n>7k}`&<DBrr36^|{~oPRu!M0TP3?ABo%=`VGiZ2pIJmSw4}Uk*
zrg^eRS%185fMc=WFluRkfEz(=;3*(B>VgR2I0PUGNnad>Yu%O>On?*#3JE3ZHMJs!
z)TUbfLON6;63$Z>VgolKT(%lFGp}sGouz%JRw<7E3uvN9G?XjXzJdUcw5A;%+FgV5
zjh{a^g8{tM@m=B<*CK61qW#Tvm;CO42mZ}oYM3%p>4LhQk8poJ#LMv`sN}A34^agp
z5Mq;qna0zA`YhPYgZ@%^NNq@FCoEiek83(<a>JV|VZK22)+WZMDvZtb{(BOfH^x(J
zGD?}!3<8QoDy{sBiS70o%zS)R0YgbF+6swTP}vSB3fjid!uVj_gvw!wI9%632qH3G
z<^D`@*rUPpG*V$aktbKa@E4)b;2LFJft`+-eENn(Nn!#&`IlO)Bl%f<OnQJxcFem|
z+#~l`w1@07(!Z@F`~6SZq+vVvE=UzH9~O9!v;qRMj!pHSAge%6pt#J3>Il;VaJpU1
znIE&BIK{`uPC@2Uf};)SEXmGB1>eVqvol2;t`Eb#Zn*sI_1Wr*ibVaqU^%5XSBhcO
zyy;u2{*mGG&k+SGxo?s%k%~ILQjHy415Wx)Sn6$FSM+xg<$wO*i({8#77!R;o~$zo
z#BWniVMB_p_xJn|{jINIudz74>);Ae_S6fF4$S0iuo&piz#bkm?fY)gzP>>){#CB2
zsQvR#H3#)meGGXKP%?<^<nv^XKo&Ry@!kZ3s0oW317*}_u7AeHDMVh0+3vIQ@{f#4
zmCCse92g}BT;=jH`3rWwNUc5@J(y4^*ZEXp8foNG3_eFL3bf@+J_RR7HX16JEo^UF
z3rBTh70BE((9DB_^e{E48(;FW-EIDa&2~YPKVM!MA<@}=NldoWVt)FF$sCI|tUX&N
zrh2OjiThD$=DW;nC7DP|e+pY0f3oWzSb*U3G{ZvTkG5R<OxvCogWOZx)6o*zDk`t9
zhYSs)^aJ8KGH_9EPtA**gKYbE@9yqYi-*w=BpGl~1hkuf=gupZxmcxrA@79W!ocG7
z^(M6py{sg#V=G3L)UrL#zDLPIbDGKygc2RZGO%sxe&p#a&Sjb0c7Q%RmR~h0eqoN%
zzLUh+u~!N!^cv`<qNwL^@y&eLFgk+x=z#{dIbS9^0#!EAzXWn``rR~Bl9z{$SACyR
z#We$of&pR&0TS~tUvJIj6@b?I%Mwkm_GS_s6;94l5H}!Y^{(Pwl)ajnogF}r943=s
zRJiYpoCnfsVKYKBg&ld<;*1MMWda03hopMB3(N!fwUW!?RXs7iK4f!TMC4*2?Zrz7
z@ti4|LXFUr+2?VOifB0|78ZDlN7QSby?WBN+c^6CZ<-wbL;qMuS1p&QdhK^O;)^(1
zaW4L%T-fvcztQ%VQB}9yyQm3BNP{4ff;57FN=m16DBVbjbc0BDw{$H)8dQ)_K)P9g
zNJ$HVgp}l-3*UGD&mLocIb)pTc)mO;$Xe_E&3n#kUJ+*`%s1SMvd*aMDg$;J$Yxng
z%e%!iK=$+=g1jXFw{AY&50VGAxX14)`iZMmyXPA?q!YJcj}wnky#L;LV;NGpfnt!O
zlD|XXzDLUa%0U0YgK8Qvq1ZffJiL!4UEqppaJY4ufCtuuMT;-~GpK;L4!EER{4VTF
zxj2+3sQYa9wyqB5!xum3ml&MpnbnzPa^fst`Zxk!VNp*?S{gl<`bw-TU8TsHH!Sm-
zT(?8HL4dN@onQsKfD*0R*hMjL!T|S&;uUl=N5MT!86!o|_T^0i3yAlnj$--_n1afP
zsC<ssN{r_=wf6KJE{iQUw+8}$oB}wdCwk}YjD55_<=zipk824?$0B;Qwe>0q!OB*Z
zPtYsAJ<kqy9+@V_BePMFL`UFcL5~Uha@oY&k9P=*1iQu17RL==yod&C^dQ_!1fkrc
z_#A|FZv8{BUe|!<SJ%5Il%TvUW6|U}OHlyBV?&ks`lH(rVo>k-w>~Yc<detq)#9gV
z%LJ<Vdc})66kMqN2@a^YBErK#75?D}+1}3QmYZuVq^na|`FG`&hzu!+cVy}bP{y!c
z%!1Nmv6s7u^W{FtrYLmV$ug7{zD$7TlYvRv2EIOtFKZSto3ZcCa8J4T<+RpX1t=zB
zmotX$NHblvj0Pe|YW!uG9hqYkRZ7}gl3pr=p8hP4ibr=^c_=FymkC*?ke}wtG%5j1
z9NjxAx^q7Jl1&2jb&ehd|FNs!0=LtbaDxt(%I~EA_z|stCvi8KL!Z(jhU0oX#Xsm8
zCq^sIvl|x&C+;#mr>?ZU^zbdBU0O}{<0NPLeC8rnNQD>ZN{|LdPq|K=UcF<N*YQnW
z+ZhOJEh<%+X{dt-5;W>vubzB%a5C!Rh0v0Ew|sDI6XnnySTw;$^<i5q>tr&HV5Tlj
z2Hv${f0j=nxD%tOprG+Fhi+z8mcg{DQ$l}cv*Z5y*C?Siwy*7wDPuET|Da0;wk{$A
z=RWMZxS)hYJvoa1^^w4N@HJq$-=<uj0Q;uGc(IxOe?FfWaphvQ5b$8)SfyoPFoPZk
zh@+#nkbi~pV~jsk`6WUdK{OTLwxbO03i<PScQZENsY$&3kf1*-j!O+(0>Hig6?k^n
zF4D)ycRz=Hg>1`nhasSpCrA|fz%efJ{L7_61q9H8q1=1$msRg+MByjwfBu{WZa?%z
z)%ou;y1Hmhxb{xOiuPp2x(732R`XxoqZtIV1bHfa{O#dBnY8L^)RxTswUxn-KOiVe
zkTsT<e~0{qjCS5xoVbhL!SEX=2p-VRa`iy)MW2Bk`6v!hStP)-1-f`sTd?GfHDO2D
zHJF8S?L+?vPE4}%hGjbsVBIa-FA;#!{Cx-Z2{1`DBB{<x{r#bm-)+2W0hT=R-$fEc
z3uZqZ{P<|63QqsuYD)&d?T{V;0iLAn>#R<Xi*RO|yjH3Q(7+oN9%>UXkc6T0E}6>F
z+eda<g$g$Gz1EZa9z`l;u>6%dcVE*e(&CAN{TIw9;GW>_HX7}CFG5mMlFD-sE}m)7
zw#7^>{nq2{(!C4Mc&Hpo$SGa`I?lA@TRrYg$1lgRH^?SZU=gQfU)1(K5T`Mg!Yt*?
z+Y#o&<9#oP`>9Ri-H4`!K!mGIqQG5VgAzLH`9SO_hRb@VE|20nggSsPQIB5i;mU74
zg)2pQ^O(fly>I`9MMS6rzYRLnxL$QI{sl8?uv#wy%Y~h=<GCO=AVjICZj5iHzx7hQ
zdG&9Z=w<G%fdTy{XBDuR`%16B*Y!dF|7_v3&b}n#ik0u<^4gmG*l-WqG?KX<lH|ep
zbod1bH8bRzI}2ajfOysThIoHf^rs^k62))U%+`JjW%lnO_32X{va;$3ZYs1CBDW>O
zZ{^*kyu~ypm2TD^t`CVakhD>ES2y25(9|a|Na}9gxaiSAIMFQfs(6B<wE~|^OHGBe
zYs}9Nov^)2&f`q_jiG*L!ebbb@hJ6ectTQKJyC6og`r`#iA?!<`%tzhir2+9oIbNZ
z+)lJQoD~}xoIgBm$RTFO*u@O}2>9{cfjw{HH)lBVOt+XrWXxt7@)Z;!!E+vrrZ=G{
zqn9I5oKfc+SLKr2;or>n8OS5~!1X<<Y4KNFhR0O~89&+i3`OI;T_29vsw!*pUY&p4
z*5oS}4l7$*mRb=eL$JV*Z8Q(On*uC9Fjn42r7S62hol!Hi=vSGe&gV~20vz199+Cz
zbTYYWtRS^4zC_lhE{R$K{>O#&zhL$YR31gr3>w}b#>GOb#uR2G=sN}mS^s08wwkg7
z)303OJK2GF6w+op4Nd$KxQ)HLWPA0(`1SkFQc^2$ka8Pr(s)lvC@69o-h-3ebysyA
zQxw1DJMGdV$btyK;y>RVd6UXha<(^a=yU!V1dBWtD*7@Fg|pxunrCVL{|-}9-MpF&
zG~90hh=CP07=<9KObJgXr=DgC@jrUxy0e&4#Q=t?iHRTrpb~UvhB}-f$X~<;+Ho*7
zIEAJScw-<sU}Irrp?)w{qKSI80x%y#%s{pKUIDmke5@z=HChsOR*LWI2$|UMQfzKu
zVF3)Njt&hmwQ@1^dw}B1g7-Ez&<aLog$-aIPUX4v8)TwodX3p>%CdGq#dkmTmvN6r
z<zRrd=*`>vc7K*}a48-YM?!4}*4ipCRB>O<G~`-o0<bdP+iTq!9o5i4aAgI|G$|-{
zaPNE<R?N^*d8|g@unO5Ja7Vy$JsO;zU`zxcke-E_iIbiEtcL?d{Ynw^FwB+I%ay_f
zo;NBF<BAEzzmEy*LFhd^_?dnYbLj2PwfaACT|?IW2PYchJO_)eHO&(hx}`RVP?Zq|
zqr4K8{2X`el_FJh*q7f;m#!=ShuVx~N))@9g}^<qSj5`j+B!WmGuBg5P)`nxCj^B9
z%kF(bf@uVK1~?@XkSDZV6}Lhnj36;}PI+i*N<NXXs{+bCS0nsnU|a!b@)OE(>#~(q
z$<Lq3fYgA2nUpm{WUaRaF5n?Ryn?KmLZQAS4n+t~qo<+QiwzPNB1;qk|ALX9;)!M2
znILYZ=fo3o-*pA|K+8|NTi_ODzH$Yu_COdg41!TG>KzDjvj_>pQhyze$~C-n={(y0
z?cFj!K*^K{dhF29(CRB=zW@*OZbeFJY9|8Rh@D7MBp(8QrGn4ye*lji*}H~d+ydTr
z`pukBd@gelU%UwTelIltb6vV|{Lgh6kzk*hp1uLq*>oMC<IyxS+1IQZQ{X4joTqFw
z2bnX-kZIXZ@Jz&f`{o}<j7up1O3N>Id#c{Qk6%^QCWOv9IyxF;T+AVlUqL-l302c;
zpB4UrEONk%e)-S0;(YvnE+?X^JqZwF$x<W?jHX1eorrCFmK$hZrn7HpJkGuW`3We6
zxUq3=cfvG%f{gLMp+5PMU1|}M@Tt7}{`y-J5n!We)jK*RFeiXFkZcn<mt3ZhAmC8<
zDph4;fRR;OS?O&NumwXytN?gO5L0_$!^BPWB<_C;2lTIXk9+@%-26W$_9;Mm&nwDy
z7b375bf53*vXaS<0o9QEE4{3S8V6dg;&5s}fLm;7G!yt6BXecq;wp!=cgkWNSxRE|
zxn+)!&CS>UpVM|M*TaW$Hu0Wk3Y;0wwY2Wq##<+9k*jqubHo{au%O1F6?3hFkNf{S
zdSW<=OiV4cwdeKjQs=+2X^#OeP}c`v%b)!A6Z^l_+5g`bXQuB^ukA@9J{48@q7Iy5
zS&e^&ms|Uwa0gEj=o=s&aS<ucXffE<2BAa9?(XhRMmdU7i}jV2a@1FU)~4O&;O1s!
z{2B1S11&XJa!pAlhJnMowH4eEbqbA=iO1|wA~_72QkS_yY{lRUXZX6L!88-xD{kI&
zi->SIyc|w&o+rSFYh~5*`7<?BDA*o1Ps?{on4<ofhC7xvO2Y<Co^JM@<j8xsS<+Z<
zv!|UqM@7+JJdm#Z@btZTqqhi8`-@oXkJe4=*OoSD{{0zN9v2A#ftjgkQPKA-p@~-$
zo)b50E2X6`F1sxfY0S{@@S2MIn%wfd`pzxd*#1+_sE7QsHZ>C?1H%{+DL!-`^)(mI
z%cU2=<i3mM3XQGed|k`GoC9`v{~<S9B#X#T1I<@1EFmsMSAl>ABsv4b!}anh_5jJN
zR5gGcW^ho6p8o>Mc=8ES#USiH3F_3(hj1yp`Z+iRc4DimbN{(CZPx3(mV^I`1waAt
z`D<GFX8eKsZZdp7R^1~jFolB$etT<9Z0TwJzrah?+mltMEFlH;9YCPo>j2g_4p=An
zUg?jFQ~*^Gu)mvPYyScN7EogW2^bXwhvna!R9Vz4u)$dZImgbn#W{$?J4ZmPrls}$
zWHTnZ8-|S>lMG-4M^K)cTB6LG6_W3x`1xzO(lISZ#*m~p4iZuj%5{MACtQ!mAhSq#
z7vX?%`_8iX{o6FZ8*HL&_E1q-V9w+P_Q`uiM4kZV&;&q^G&qNnXJjPgb3*3z#`ive
zo*-3OAI4ut-RX~Z9^++#usm^gVjIgAv$}oT>UzqTuU{oZQ?IpvF0XS0^d}I0BkJ=8
z=-iDpaUe8QNa2EY&Xf7K*q#T|H4vl;UjHQ?2QO7{AsN)N+U%)$-;rHUVksy*<5od&
zQSWiENiSE=u-Y*`K0e*}X7PzwD^al(<WhrTpApRPu|HUhxFZn*@S6Uuol2Ex3K0mz
zCl|t-8(~pVNlzH@l^;5TE1=4Kii`cz0obgf@EhR5zYGfxr{G;*01F$+M_Y=H*ccc(
zl}5UNdICkRt-IS2_Gp+~UE}&bwFX~Ai>~ee9CG+MNR#Qs+W-R2BV1M0ks6Ojkc`mm
zy(zZ{65Tn_D*v8oybV|Q#@X2!#FV=oOzVNX8n%v&kYg$<z+9UayQQtC|M6A!-Ba+=
z2nr1JK0n0;Z54;!l+)MH1Q~|t=!yE;4}7foEg*|wetw(y0^fNnlE6$1PK}T%nhl+d
zbj>Sg_N?13aN&dT5M<0G36OJdp)B%Xa66A`JboRO(>r_VEVgPjJz7Ef$_<()m^6-g
zjMR-TL`q10te?*n6^WL9gPV5-f|2^lo43-NcSLPzXm)SXG}^}Y6>Rxb`TeSw;Y~A9
zmCo3_mwDRT-{0`y6aUpe>$b~xh_FH1foeTY3}<$CvE_mIy0pLHcjfA-gp9?D&!0B?
z*_fFLOfcvqv74PYx<d%>r9M2kiG@X+0Dk+<AYHpAr@TY>S`&<WNAGw<-hK#koy;w1
zh;imWm_<Q30Lw*E3X+hJ6r|csg8m1o3R?2h(@h^xBp(j=oJDXSPB{#Guo{04s)hWd
zM?PnyfCfBr=T<@5V*7&?mN@d8)A}u-6Mul8LEH_mb#2?;?IyD?^zOr|nwsX<TGp-I
zL_~c3{L;CHCnjVt{cqgp0-Cq5-F!HA)5njG=;&0VeL*7w=Uc~WG39|d$f)k%<NInl
z4S0ia<(jC)w~oSq<%x{7I8n~aTo7*kemPuOc?f>;_`u_XO)9(}=imq@t9bq=(;1H1
z_j)Jo)h8d__sSs&Y8ylvupMAudx$0qzS6Xo>#4j>_AV|GAsj%H%@R39E|k7wjiIo&
zx95Can36Ja^XC4om&17>?VYR^M&fN9l)oS)B`%e%<10NzG1+G00f*XL-W(`KvqBNZ
zMpRUpeQ6)0TfyL0LPxVX?{_t1#`gF3&y0;pI<&jYxMBIM6-tK#?-4rb@DLf9Sd<tW
zjT<EQzXC|l-oF?+5OjAW-J>k0xr_Son3)Iw94>KlQ0&Vvz&p8eMGJDefryX(_iy)A
z^vIf*)0p@}<K<r==Y^A?5>G<H!pO&`8B{!S>R;fj0%ck<+Ltk*d)7z4@GlTG3#I*7
zG)~^8vG^>ftZp_PXZ$8PI@kmdnBQX`9WokRH)_YX`-=6CRtrr5FZ>9vgH+#>NdmSh
zsrg`ZlAmv}EE$rLLe@fA(A(LG3ML1Y2T;%bwlh7sHUYf6^$6sq;F1VIJF6hog)R4j
z;=pkdl2`)+9CU+&#igY`K{*0=nNSN<vs93`TMW8vqKQk{oRCdlUv*<a>g;eK6jvzO
z+{lQ6goJgvprxnB`19)~IQf1>MMa`9!j?!p5wt3BLxq72fi@~qwut!|7`pS7P$og0
zJ2Wlo>Us!vmD(S-CLv3r;dEacenwUE7BGy%y~8IUBt$vFs&lBHy;jZ5h=@o^IsmmE
zKqdtfk&TU~u+TT}bH|w&9vLAt{Tv;Qcfws^(lrdqZIB#;fuN6ry}h?mj9H!gUKOx?
z5#_1WHdwS`pQEVk-Sqlwl(|xRzt@N7cqY)(=exUp47L2+udk+-r^LwhU}@AkG`N_7
zo&C$j#%1c;w`YG=^iJ)h7>c!{y7j_e--}DJoHnC=_z?8*4ZD^-OOJ;w^51md^Rf#G
zVNyRHi=I6>(aPox<~|(N#DXN*TGwsddh<HhZ6jctGuCBnxxacPZL;_U?p2@jG26zy
zWr&}vs;UA56YfH(vg)cT=5ii+TbK{LL+R$2sS1oZUfEe_73pRj@kf%g_?z7Nh7NWh
z+qOB7Fo_`h`&X8=WoW4XbxJgRcG6T3NtZ7LuA1?WD{GzVnBHK2?d!9F<RCaol$L&A
z`h0k}@VLGZ)Lybtlu>ZM4t8{ygFqqp4GMA7j47%ahM)3{+V}w?1#NCf@X3-d4;h-J
zpR}Ku8JDtgUVA0AhsSLZR2hkw490JDa=Dw!ME&`^H$}Di^gS;<{ZfLa9@)c}@6<NE
zR?<K4Ij=L4bE1iIVdtwncc>NNF=+`8XTA7xH5u6U`)t%|)=Da*@jm5#xrazn7AzN(
zla(#*i*)CD@Blu=YwE41$2VLy+lw+8=;>$couu%f%~sAG&yykC!<oN*ui>=5aS9nt
z+ydtqHgIC`jy)sIkQHni$ut57j+PFWZgpZ}BEa7tn^Hi!BWP##+#C84#Qw%)k~h=C
zhX)Xum??bzKv__l6|9umw2us3!PNph>~bX|h}7sIx&vaG>cL&Q#Hu=53|(B3QrLs{
z`|xnf*cb>B3{zFxJMNwBjugAhqy)^t=ve-2yLolwo}25(8yDp(_*Jj1k<mLf668-)
zsXdArAt8UhUjM*%c(ljh8%5xwg2Cz_Zvj%zi8_aak9Nkwr;am!283NeQ84SRU1H2s
zZQiVJM$VlD3-~)ip3lfZ$2JTyrfcfzYRJDg2vKhy>=8)vry-n9{_P{nHRKIIF4@Y5
zA!}ssSNX3%Y_iYX(x|epB!l0HL~?T|(vWjDczI&XN8#q}lbw;bfLk``b9Bii1Gbiu
z^rv8;k6Z<jEBHkXxO+S#E!KY0pS-=kK0$>|ad>yl9v<^qur%Sd)!P}iZ9ZLIT?H?<
z!T_x11W6K7(sD@tn5ui>=?tyc>O^&+Sv5*;4}Lcf2IL>|@@hnZLB={NFPv)_+JbGQ
zs%l=DubOG^29z?Zp%xF|xC6CEr?GyKJqN1A>ES}u{l?l_r*ge0LwS>sR!j-+7cV*o
zv&AZ=ppySkuX%0y_xKp5@d+gInyG%n5=cV~ap3wqT8z6YPPe?d`N6RDJ@jw*=d^TD
zT}wL-D@Lj+DrpZ7SgSb-T3T{I4~vHW0q2GV3#$Af=33@z5)vfr?Ne)OO&8WBDWy6e
zKdyV4#)mWv7>v$5j#H$?{2e{~qc;V&e7x-mESI)bQmVngf|)3Exvvpv%*w{5tE&s*
zy-8?!peE(y&{_yEurM;>75@><j{%JONm(+FRe?&;$=R_4Mx2VHKP<H=guOkNdo{U7
zsLjL=;eRMdpnY2g^%QiiLTqd{tHYV?;beq(conv@GjPBS+0_uy;Awuuq-<Z}=UL=`
zhmg=O8d5*F9UT6QmiS04iVe4x+!D4J7FQkd?MXZhucytS+nMW%yQl9}yNHwu$Hv|K
zvA)hqUgCQ-GdNNR1RA=F@Jmf#Ui;6k<K`gE$KAGXgph_qOiFq_<)C^Uo;-Y>7mxN^
z=lF&Vz!d<(3txC{wddcTdUA#4&1?@xk`7}q9@IVk7dPY4-Fm->@Z<6G@qx8cNa$N3
zucO*=y{~Pz+AlFXxw*OBij0Vm_$H==tarf3Sr$J3dlL=ZsbU7fRUkk0P}IP{Kw4Vn
z5!ro%OWolx)<In(=$ioV;Av2qag@idL+)ZHy<DPnzVKZcreJ62J=x3hei5y1P#4hV
z(&~k__d%jJbrx|`dh#t#<Qc$xR@2{`-5hXBqckA^#{qZ{;=f@ZS8H>d@!#ienFFwm
zvYJ|Wx38ZVUHvpSs_J#Nx*iX&P_Ief@tFtjG`QUmhZc!Dv9Yo4yFar%B<pm_lot6P
z3!cz?X<wd;SRI7qTH$$%Rem{HbNdWFCuU)N3tL-F9i8wP*Z@64x40rMvY5D&7|aCH
zczT>q^@;D^t5w!Oz>e{qcll3#uB?#a<8wmK_AChAF>!IncaxERYhx4DLm;5DbFAsm
zbbvX;^F>UI6kHYjE;lzvOFULrL4)K7h#n9=4*%A|t&WE((8yOsVL(uEgNsQ+BN5m>
zTqzb}g5HvMm6@@2c8K6qYiN*2`?((DlqM+)gjOk#u~jE2t8GN5f`<JK*Yr?s2Oa{{
zEfG(CuCDrOZm&}B$*5ZDT8FM>R#xI;%BqklReu-*t>5NKW)euT-F^;cr&hlOP6Jq3
zb2J^g5D^1&stV%dl~p1f0pnLv%*`FwRD;s~Ab$?ngW^)FYXifBEw3-1X1dPXc@j0B
zRAJ5$s*4XjlaQnYAuS|7_efEB@p>KQ!S~x=Exh;RfnLRrAdrz~c_SWkzDI|9GAnCr
zXs8mZ4keFeFf|n2oIp9geMv(+<-w^b?8^IebXWoYf$kibOqbG9$@w2o+%7@dxGCM@
z#gp|4Z93Tr(<%(lVGl~mtCo=yv(~QLNkZ-DgMxt3w?CLIoyP<KQ#Ny3c2*GY$S_cF
zFh?EcRK>c%GwJ|rY9Q;Kgk1+zSo-?<RGtNlw}no3M>4(k$(WrWHDc|#QlgU*KK+VM
zMl3IvkIy;W!%a}=APJ3g1!ch#<<kHG$ht=}e!=gc1G0rZCrPE%IJ*Gbro)qUph1m6
zt%o)uK+DwG`TdKw=x+-Pgs^K=zT2iSlM^sr=TKQz*3Xq9U(Nc?bnC|%76~iN)snDQ
zeS<pH<m^m0=Q;=By>D;-`0?YRZ|IBQyhHQ6;YHjW1+uev<u+j_PQ0u2pKb+2NB?MO
zn5wn%(VVqwGVXY_nh!M_EMRe=g%;v6T)o6=*m4L@Tz|&tW!_YfnbukmB9sK)(dPVq
zXxMUXvG?JOtFG*8JR;;iEPAPY1m21TPW%@OARQ^u{<E_~&SkQdr0-21mjX5AX$seK
zMAa;KK+gL3>}%UL7U}6gHbO-pmG>ib{fwZX4rGxcG=9)e{hsv!3n&12;}5S{9x;&Z
zO%W>Yf=|{%(c{;bqZTa6^`_y@a5{2Ce)f&BvN=J}%08qaD*j^&?zcSunw8h_VR><T
zuPWHo?)?r4ln(XTyNfBC%9tQ)NUh$)*(g4mS@>KHSqIH2?Rrs%m98P;It?C`X^LQc
zybODiu~BKYVC5H6^B#Or?q*_7E`WIZA`?U`N6qbkD1z`xdYPRqD=S<3;R7)b2OV9>
z^9QYtq5)3(Td#;mU$dd7UE^)(m3QMwqs=J}36ra+uI7FCuzZK-)>KT$8p(kXb7^*g
zNQj8N!JZ36E%~acTF0$BdGP^nvXLu=sgc|m!(I7DEY*{@JcEHMp+(ozYd@UQB#H~F
z(Tk5cn7N4ap!3;r_%&3GhAJ(K4UHlrVtM8E`tHJx0e-{^s}8Ci$w_U0A{}UGV-u59
zh!~O&Zm+~(l}5Ex_%Srd?TFQ)FOcU1WhSmi?&TdiOKAL_T_d@RI!VEuc&^q@(fkl*
zwzhN^zws0Qi>l<s$Pi4<^lw<B&5;Z(3@1Q+ztbYaS>i_gd0iYQW9o}hi9kZ)E7Y97
zfB#;;9?<KLgEpK6OgY#S0uEQnIS|PzHjUoW&>#T!m+bX}`FW#!m5{oN7o@yLeYUim
zxEmkY3(`EgxRj~_q`{9K^@}og<A%)s{`<s4k`w#dTdedei;G~?Qw2Mj)z#DE16Vy|
z4TJ-<^;A)D+`JoN$cs+lk^^dM$kCk7`SDXVMMuY7uqk(xS9<o$b#F~wj4cxN@{oA9
zs;V9A9f;Z4pW@%@?KQ#1#<|h-)U)u=Z2NRxyT3oN`lRG*w5jSzfjtO1yS>|htZL`z
zh&1os-3|9Rn7{vHettMt%4O&U5eW%sVV|Sk<`@x~+Ak-b`PJ2Qn@&>|bH`slyv@{q
zZTmJwDURlY2No95gpG2~&cT6Z6j)UVIIp|HAYM{p1?G$cZyzuG_yKV*eo4-oGb7nz
z&)~RjZQTS+3@$ezA0d((GZPbJG36j<mKFizvLoJR63xxs{r7CMK4M?H*L$gZ6bucs
zCICUo&(Eh*p``^UckmRN{hCjf+VTqQG1ypHYcvR|sra2)g@nE!k$L6=8Q@k?RAd2z
zU{6=q-nIokC1s=qcM__%iI0zm3lv~VXm$a-(9p_>h~P0x`reUN?|q7vI0=Tt!@^8U
z%gaV2C*+0}788Yvwopse9)a^#XgyWpEx<4`2sRAlY-XDpHL$>WV4$<}TfNidXJ5rc
zy(vJUzzqYMf^Ea2!$Siw$mUpFTIybUeE1oR%Af{T#=m|Y%W*yA6pZ!`Uv1eve)I?f
zb;c#%U4Rr=wR9p8U;<}jWE2X)C9sdDCKl7csFZ@#tPFnAh_?llDe>{U-;BYto-!e`
zTv|b4dv~|q?GHmc3lZX*8BH7!5hMOE+*Tlq=Qip5(Lv=y5t5I<h#)pMHNAP8*YR-6
z5F->u1&}Pmj~N>LGdL+v0`}Z3eSJ6)z%kBvWJh2;s0GkRFg_hfxHXpDlA(iuc?3LI
z!AFfSmY|(NhypU4J}Bo(&aF0j9MmL+IkhIk={2c?32~3$^yK8_6r&qmrw2v}z%^3U
z(#`ov$&eSnN%i`9Lt`3UhY>ax_<E&R-h?jcnYIO2-r&1;>%$g!XxO)YEH2*77b*Q}
zNa8;V+E5Vfqe3PQ)hge2`XAnkL4${55G?gPi>1Sp503VJ9ZpqDfeseN3~|(9<uQ8H
zD<<=~yF0e_OZ(MXo+dlbO;&<pviF7Q=woAJFe^z&NtH-lzg{a52r^I!$F8oJ+_Hf6
zAbZdxxG43jC<aai7jmUwU+3oF7>MP0z=e6^Mo8GFD7C~W?joglJxT)QCr_-fe<<H+
zkAA%Ub7?7{Q_Y<uo)&mVc+pBzVxn<9ORlNW(XaN_h%I=!b=a8`5t|n5mC*i*h}hhJ
zO)PoX_I~O2Z@p!Lm{|~pM<4v2jq14fnp4^ZtS&wQczV45WjKluE?P+>az)@-=~sGs
zdRi4o)PXaj4M`vcavR211m*>e+&!6wNqpc2o}Wht_k0;eMX48%k92XIFwmu8%%)(!
zVJW{AvEX4&t@glkyaX;lv90JHhrB}Y4*KZyi#Il;`cJEtfYB{XyJX1+csXVHLK9Uo
zaj~_c1R$k&kQ0`hdzJQSN{?s*Cl_-HR@4g-a;Cj|VLCz64ZEynW@d<FLo5h8f`(2L
ze5)k7gwg4Jq+e1}Qkt@BHojb=FD@e4eU;U_v9>;efC%&4>n<)2EwI-R;L~vU3{dI2
z`CI|CR6WeqpAiyPcF%m?rPiF;e7`pF?O9m!l+_YPN%3Plcw10yyfR(jRZ%r26E0Pe
zh#O6IGtb52=C0CMsu~&^GTy)(eHlogGhU|a>E)$-FP`D^7M#y5o^KNqMJx8s&P`6g
z7$kETgN9R-_LxGk!Hs5qc{wpom4G8=w<c5zm^UiTxvp)mQhw#~t^66-<QEjAgR&3P
zARG$O1cG0$hclxT!^TRlDs_nIur^L{B?U_&1$`_<xJRd2@cu+MUAb~H%Hjit0h*fQ
z0O(}VrpCnhasp@!6;{Z8@r9nA-YUsf`>36!93U6USKGQ52HM(g{o?2j%Aqy7SFn3v
zn{SzDt^i^QWjgvhR&z04p}f3@?W40zS>*M&hQPf8<cv{`>O)e}3QVHWg2<S5SnY6f
zUJelNdk!uX+8=I;KgK8P>g!WS^m~XWPr-89EdJ%=pKEK*zjby2)KW5zUlv77HlJU5
zqhx5P48v(c9mJo#t*olDoUX6kMNUnza&hg<f0e`VNavF<z}fx?RF-f}W~}ILyp)>6
z5*aO8Z_Ot(l~8+3+3kQA3C6#w=xTZ8Py_&o04|KSR-&V*pN%bG{;q|9zM!LbeEb+&
zrphU3w3aOv1kY>X=$oP<rtSndfa~L%H%d)u@OZ73tH5w8UcE9HxGtePwJ=0}_Vs&#
z&Qd<HjeGIYw+Rd;Z%=Ak<)|@B;Iz^z@v3G1ddA>M4<5$~3iJn=a0YGDczqcM4R2i+
zD=j8nv)0OILlQrI+Vk{1hA~76AkHizS*KYw2yQ&>xW>mYRs~=H{1?((_F$ggep<gn
zfYG*A?gMqV`-0_*;*TGt2YzM4iH=Yc&rOPtUz?j_F1|d;)<k-3{r_x<+BaPeNvkY{
z|2Uw~Hm6!rIR|=%f>#~3{uQHjAGu3+7&NKWd^(g%BG?lgP44mJ#Y2D=IheW;5gE8c
zOooN$s+tBL(W<oHYeqx@T937c6}?lYN72F^n)I9}#XQ5$@{!51HPnt7a~3AZwod8U
z^4QZC@SecEoY!P>Rc!#E)~HNprMlsJPu3LcYYj?8_`uzUWK`*t<f7#X-c@eyzb!sA
zQelCD+k!h^tEi5^EV!4#1*e>aMH^ZF_U+W-V*K#JpB<u@m=12+TQ6Thhk_~5lqH49
zaTknlXlaM#;6^z4J9{>J?iDboKGy~qIB=?>5yUI~Utx^WCKvMHT?We%Ho-nP4G*oq
zCBA*jY}xy8mKCx+1MmC8gq8l7kPWfSiFeU!tuDb>5*fMg>w9^RtpqM0@?QlWsT!r8
z=b*oGaq;2i8>$0>=Ui*Y^-+O+4pG!_n3tqlm;=mBVA>Fpxiv^d^{;J%&I(rVAfk8=
zOX(!`JIA}L*`wPFmBxiPDIV>tSI6Zm?2X38sVYe~KxkA<jIy-!Bt9J)WZvJS&j)KK
z*Y@zjErM=$xEbV=@5?%E)+`h%O7*?{+rVuLf}neute;s?fEwruz&;;R@lM-sbI6rv
z@Vj`AmtD256A%zEff*(z&u1^zY}U;@5#aq)p4+ehP-9L2^Ujzq6EL&9iDkvn=L*yA
z9sd2fp^=eBm(AZLn&(0u`)OLXg}tMRdfk0}knObu925b;>7#wG-q~42^33Gq8n0u$
zHUTjI3=Xd7Pj9W&xS<H#=j}<`+cRz}>S|nYABJ-RrKKyGv-QmzEv#bBcmLjCbyf~V
z{M#NyUdNxavOa(O=z5o8Pfqx}fjkPv(%!APs|UXY9nVfA`p9x~`swDt{!E7jhlH3I
zz$;9XVp6?iD9_j85A#&z!@|N~Za>)I_cwTKzxd;m%K~gGLbpXkF2f}yCLV7V718)M
zE-tJd9Bx}ddZ+wBJW!mLm_CWa3>D0QM0|nZo$2QDEg-6l_Q@X1_Vo0KeU#`;<1)1l
zBhhO<*#YnVddv23c!R%9P6{2b$G^9^I{xmt{t;K_j)r!X+aCp6Tg7)FpFT|v=QrPF
zNYt@SNoUiq`DqR-JBtwp+N}AJ&%?DEG6>q28i^EFpKU}(J4+Y8=otSHkd@koNrQS^
zl)oxDh~+rgSp)*NDKVJa4{a|_Pc$D(oy)~V^Q7@~U*5`!WlyJ54rqD5R|`9i54p!J
z@zi-tm|<_aT4rEq_yu+y%FW+PweL|;*<$DAn`Ye)z6>^@!p$V+1CqJU_hie6!zG<=
zGGUeYb0RvS!<6}xv-{9_{eDdp3A=t%pjm6HSZ!kD(*EWw`c*wW@P7OX%)^19p*aXp
zd4?Hk-x>N0Fot(fxiu_nuU^#_1ewjPC;j13icc&Yzg65DVvSup+@`~$^YUthA>R4-
zRFDZ{_uLPIAQ%7ql3DywivKJ`n4J%|ZU_rg)d`?OoZb;2z?w<#!3!uD`N8PxIi#?d
zL(HqtmmP>yhMNWJ=1sT&)KhF|HGn1O2HREP(;5`#ka4O=-`>fF0f&0EsK>F>$$X&Q
zpbk?)$ZY)^XHBme1Z)=z1rc@?_x3C3>Qc=d+^#Eo{s5B9Vl9;Zwt1+P3%8^p7A>tv
zc27<`7v^QxQi=)ny<*Vvw=Z92gO5(hj#v%1LKFq`imUn7)Hs^lKDqOF$6WEAX8BBX
zS<LN6TOojyz$#Eg5*BXb;be+3b~i`RuhoQx)O{=0=UcPYvH=LQyh%$9&?>j9S5LvX
z3&Iylyw!hI3Erq$+HAIkyZ<G?^XciOYND)99cHRhnOw-<g)i@#mihf2)j(HPCg6zx
zDi&vSX1O@Ms-Paj1Brstq1y%`@zm%4#R8(wZvERdF+(Td=Xd(<IR~Nxyw8`BMb#?Q
z;*~v<lUP0y5)v?5Ja%43!qdgs<Z;js-7h2t0N`n{$5P%K-CwCDb_&>zL;u?k`4u&8
ze<Cq8TjBGznf#objD@I3(4>5KlY=Ab+qWKRD;1(P^27|u1IyfYgb?ZO@99THs;V3u
z2ihOb1WI=yITeN|7_5g!^74?&eS-I+V`CW*W83kl{*N{X^DQ6oXpt&9Z1MN>KfJ^r
z8X{FX?(XVJ7d$@4yQ0i3r#SFA^N3s&EbZ==bj5YRL<AtXddbuHLnZn+6}(Vus9i(m
zPw_tBVE`Gr%nc`_+F|7QfG}P*|A=+0SS0P)xxV+`4TyDt_(=he_u-$ce(Ko>G<yEk
zg0h+N0E}rWX=paYWels?ilG_mi0{5~7xttdT-JyJw>$koZ3nwCsV{`9$_{qG+m`tG
z)jUj5UFoS&z{NEsO{!J{WjoJ0cdX#)r4~JTd23hKpFfAhKnV*6nIYVERtRJm?5V1>
zQ~+Onv~7C6{_EE?K<w@fK|!|*PEP*VDm||G@Bwb|F@b|B0fY=KQ+9lz+fB>yvOAh(
zCmS0dRvONZ<Z{Rdm$5kHQS~X2?GqGVuxi{{i0Y{=7;60PhbHJdK*Pp1-Q7(vIs~^9
z=P(3vL3ObGR)LdA5c>8IFT-=k&f=&rgB(Ks&d>g2awzM2tyh+T0a;u-I@*zkySwMs
zmwRG?*bv_mmPI~tP53TGjwBNk(`ak1)`8jAs8?`qFau~GsOt3<1S2fx=Lx_&24tYX
z)JuzZ$qrXQ;Vl}v8()WY02K}VzCC1MW=2w#Ip&s4EINekbl<~6TX0s0gd3v%yieVw
z#QiNA^OP3T($YfKMD`TD8fQUg4e=U}&HMRtVoM@I8AB2I`msF@0Qw^vdl1<<&z4sL
z5pTBh3(Fa-od7#1Y3Le7ADy*BKKr*YE@r2Q&(&dIR%CdP(6yV6;xbOvJ!`vHYM-BX
zWU&SEJ@8`0P7s7bc(8eIeUdapRyRd;P0wa;&sU4vwllk^fru@x>)L2VF?x$-MwYw@
zW7Ka&e$->1P-Qu~Sx~?LO|dv7A<yTL5w9PgJ0MrQ*;1WZR5y+HGEDw>$Sid}JlNB$
zEHf*~va_-pG34<DalbG!vbMB@oQs!RBR5d3%~}F*JCu<X?7DpOib}c4Ay0x2lai7+
zl2)EQe-2*r^X4}+%n<#C)oK?g3=`8TL@1Gvm`$->Ktj8Dw$yEgE(!{IKq(HB8|l_#
zl2dcQI|m@;u=@RbdBp+o>yzExZ!XrBu(xziH@Y{92BjlCJv|w%$h##mWP`Bzxq<dl
zS1;<di60HJ;N`5*CapZ;)5xE_oAZ4UDz#0*!~66XEtS+)UnO-)HTc=8c%}EK-m6%b
zd^37}_X2n-j@I*4Dq;o36sdUB71SS){igt_*$v^MkHMMYaV#OE^=o|}%9iMR@yH-V
ziPbRjb1enP^CsINe6hW)4I?Mj-$uQ08WZ&o(lTf25sMm9gJ9|oB`MpH9^UBv0ulIq
zu6Tf1!OP2S>|HaY#>*N*!BPkI4*E^cE3F;}l%k{1C-PH&w*B$hdzc#-ix4+Uc|WV1
z`xIB06}E6r(09Qyi|~$Dr8*0w<lF?3bt!Z>saW-p5nb?fl8_)4CKM15=R8fjWZ`MO
zo)78)BOcJZuT6gn%GAdS7gvR@t9h$M%_0>b?83Y}SRpYpF`3S_e7*Gy0!8EETB`>X
zl*{ijY;A8-avEh-JE&Te!9OJ_@fB|3!{cKdDxtytGLxkTTvcOb)4>Vg9oE5jusY&*
zuxt5wcg?h>8&>a{<!7}GnvgDu!*H=~5Z_A<3QB{4<W1ZzH@`M8rzMz5X<k5zBEU%O
zardISdQ?vi7j{lO>DyQ4LTL4;MS*g{EhOCh<7h7pZYkJ$0r`NxFCXHOd=93EHA+v+
z`rNaPJCsZm{N=+TJanwev;_ZKhL>|ym|Qh<IMkf7PqUx*O#o!*zlL@>*{&n95kNmO
zU^6YtHXY7C0H6e}5hg~)=yp)T&2M*j0Am{e*C&%M*`kvDOdq`nDf#f=V2drY>pVI<
zlXgD=HYiZ^VF1g(QBCu?)gF#!h(Kp--2F<b-*o)jLoSh(QrP<~YRf=d+|kl1)}Ij}
z`4qQRS$Rd-4TM*J!HG*LNvsCz=F70{nVF39zXM6Zig);~{d#G$hTH}hO)Wa*g4S&N
z@iKe_XZ^=VK>@XpFM>~BxnWSKa0g-xLkwAo)SKWVMKzHJw2-#=@PMdzq<~wKAfXk+
zeh?&`lAOFgRc8y$cAk6gr%%7uCo&;#cyeF>ou?hzaYO908E=n*+S-Jyz!I~obFft2
z1c&&oA0pR8PhQw<>QP9}qu)4bdlTcZ;{DEt9C~X25ZMK1hKIWc1`gUI(r)eV?crZM
zb%BBK*!$lfs{yRa(AAYulJ?OY-uP^DK6ivX!=LSK*kv^ReiD5DIUmlOv^1=p8JJr9
z7;h0F$>~KbPC$GDqY5H}l{#x_D7R2tB9+I(RRu97YcvGYZp#xRBd(hj+j@{*o1cUy
z#mRXE494%kftrSo76?;fqThEshXPC6ZP|hugPUQ!5Bonsets-tYinztBa5zjr)JIK
zJJ)&?((B_XA$1ox<Sxy-!*T#L^E+D;{(A+>i;KZE&im_-z5N{^PM7ZZ%A7^kr}Qnc
zMXQ-oNJbCo!a&QRY6rh0{R}&BY=rf268q`((YoeS8}gmo#Z0Mp&W!P8O`Fcb7#m}K
z!Z|G3K-Bc@a83d>jJzD{h1h0vAzyL#lfx7?ZD(KuVX2F2j+?z9M|}S{F2HM)_XVFW
z&}(m0(-k;q@&b(xD+K_0pGAPNI<)k9<Tr7nZav!Sdh8(7_9~y8=Hh6jM&1zvl+?nE
zK@6ww%NM=)w`Qxr?DogZh*EUO=6n3-_w+|fLB6oq>Tj%Yvyc7(;?HU|Mt~?j!SGEV
zd$)ct-2>F}dzo%lP!Kpy+c9Fxj({v<U}Qv0OI%A!Qdv1h%~t*?n+LuY%MD1Odh$`?
zN1H3rrJ*Kny&}(K0T^FrX7mol7XGITyUwG;Gg<_&bg#pJU{o^{Md0(H*NWtctP3Bu
zUdlivJ36Fd-sa}ywAe;J>4Yr<9S)$NMTKA!3BkPSTD6$TKw?{qftSzGEKm)YSyL0+
z`F7NJrHjl0=ft@Fxy$#O)&72VFyL3)a5~@Kwf?=ZaBnZL*qaUrgWFp#pvCVznB_2<
zO+bCP5rkE$5UL7SatwAp=c6Y$SXSr9n`v>evBaS#FdfcEtE^eK_w+1)v=Ffe%Nrmy
z`2AEjJO<{}*;cC}xPC@mRS;lKkiDH28+O3wggN=?fLaBz$PMLtukT?R;KQOCm;@cP
zIXOna*9AnufgUC}m=kweaeMIpsxA1zXqB0m7)hVQ^>@a@ffHsoU}~MyTr-*n_TP!j
zIG&NgMAax0QxRX_s<N6Yv8dAu=Qm{WgNU;-h`<CIV_`;WmGj0XhCi$eA<C$gmO<gI
z<3f9%rha-tT-*bogdMt>tq#*CL)s~&@2eL7?P{~Wqxmon_<O-2<^$e7e|LyGBLEw_
zfw2V%TW7F+1Jw9z^Zd*Uh!~psUO3IE^1!gUV9wAPzkC^45%dGu<Q46{_^q;4v-HU8
z?8MgYE+lAOjQIQy#l`(m4A!OYa}aBy#-^jU_GGtyM%BTxl%GiWmFvl3TvV>)Jz3^B
z!{^Vzx^kSlIC~q!#VEGh0$kvr4D%<dx7EL^!6YDXjkBsZag-$_G_$m{uf~E9hFS?3
zAF5X1b{tHY&jNUpoRR|ZILM))%L{;p!R}xT(&r6tu^s$Wwx1>`j;X9ns&~9$`yE--
zU?>um#c;SG($RBRduj5imR3PfPzj<Ki1^EWUfhagps8<#ycsZbmq^GecnA!g0Ic&8
zO0cxf0#P+ETL}4~%dre2Y2s+uIw{QTho!?g7$wrt;X=5UAy@n%-Wq%^q4hbnJkEtN
zK%4O2eqbhW(8EzOKmYst<YXpTvx71yjKoXWZ6^<&S*<D)3v27}1of^>T1Mg=gIjm*
z&?CIV!sK2#)<AO7m=}(tii)KZul07v&7A*Xn4ukiN>ArG+b(~V#DVK#l2fm)=~2n8
zX=Egu?|cG+qp*$;LMe*~&C(}LATL?nM&M|yc^Q(l343@<4m)HMFkXNBbolmAVbhzg
z!7H@+8a;?>MgnhgmR-4l_7m_u%d96^MR$$W_AuskY5&)Ji-d=DM<@oFmW_^B@a%19
zO1h9mBR*$tb%(jCDa?gmb|8}uEi;(0ZgIS8eEcB|&E?kNE<~sAaEBv=c?*Do^EuxT
zQJl=5`cI$0d6^o=2uPlJB`S3~ky8G>d3kq<u=BeBCVCC#&NcE37sVI(BCnuex{lCg
z-+H$<Wgy9$7=0;!B#T>5jlj(ARRznReArXu+2;(Fn|d5`X-Ou=6{l+TC1yN(u$S;q
zKI$zwuD`zL_7bou$4igz(0_sZ#6Uh%s1YAuD*P5i+bXV}`J-jmH5aK?IaVux7~Dc$
zTwLm;sAqyW&|+_Wc!WunAuK3qlIsG+;h{a=m(XkW27L}qM#k?qh|5J27pzm*$<IvH
zQDLd$)|Hj9A6^z)BPFuH<H+WI_;Tu*vazU`T-isj{RwmJ_pEg>VLBOpJ1!~0W${c9
z%>p#CXFjXuQAng3gr)n9^P-wxM8<7FcLcR%u;u%PNjQxV)Q9MK4V~ijxV~`17A_sg
z=cmeN33C|sehy8KkGmZ0nuAxY_um~bEY7eTVUV64dJ%x9fqw;FeLfUm3PJbv$`1D^
zN?pJ01XOb#jNl!$rrzD%MJiu{uIcTObuYP*x%mgX1+*0TvF7vFgM%nyC)m^LtUcDG
zy2I!Ata5$@SVo`>6gWF1)YHqrBJpIp_*TK>{@;I^s<AOJ6jW3w@kLZ8E){dzd{<MG
z(b58DaSC#ranxtsG#;^Sz>zB+RWDVNq-=TXTMwcD^<||%GR}#7RvcVx@90Q$apQ{P
zV0{Yy*Om7qu#5v(!?1QaUnM0juH-Qq&p>$c@({ST|MLzEmlsi!snz;78o7%TlaK)Q
z#JM*)_P6ApKMAmR9Cih4X6HA>Gch0reF9_>9akKh1oWG%tGW0re@+j2@bIDH=((>>
zU~bAI>ds<;IsdV)4#U#(zbJ$AzI9EEavZPCmHVE68g4deGf$_Hiwu4LUTiy?0c>9U
z+WF7Et*}yg`5kFD(@;+3(~u-@=Dwz;rlj<XM(pSu*sfuu<)Fuxbio=vvYL6?H#K$A
ziaR^Z*#qWVDk{S*E#Je6`CQmxEB3vkLtDu!N0Yh@7Y!jITtBX(lG|c~`qV5%9e2M1
z7?(e(DkpSyn2GpGg9jG=#(#HsU}>`P{dy>QpjbN4Vn|8N<>atTS^#IH%0z`|{T?mh
zA1j5xq}5e2Efm29JZSqTC*`b8rs_5|p2?}f9c2cCz}mGI_>4W=>mT5aJtVfh{OCR4
z8Y;|KFm$~^%v?-27xNZ20%jC2t5Ou?DchCnRP*(P<%)L_dp0*I@QBgS(U0TfiHO?t
zJh#aJK{-5ZgI7tzU5ptb$mfh5XC~kY>&eCK@Njwg2WGuW<}0yhTmL2nhzhrXv{aZG
z!TUh$7XnSu&u@}V_Xvw5H6g+4$dPE+z|xXWg^I)u#L6FL+$F4Vl!bTqY?S%%5^tzW
zsgV!eoB;}qf^o-97Y7H31G?QE>$>NMD@69d>{f9Mro`EDAHPxrD>L&=TwIu%ID~@o
zfF^-Os+fG=^7N=wLE+|r5WmFq`kU)v(1`i1f}sHlW7dBDoPmJ>*36`jM<6DRmiC<k
z$nKr8-zb>oZNTp65pW`dDX)LisQel#{9X@Qu$;A??pT%tS>#f8+9fIK<>lpK--gp;
zx|q`pH#07-44sTWfNQ{AX5O1TTy0L;CV`yrFZLnND>ys#Xx`~|08Rqj9?Z3W{tT3C
z2j6|{dH5Ni$aG<!%H1l-NDBXV$+58-N=m_(QetC6FZ+v8oHXozM=deMc}#$1qCZ)4
zBbnO*TQ(BZsBN7Yf}aBYYvQ_0;4%uZ4q>Ke&gtqZ0(v&&x4i-$C^Vio)UDes*S}SM
z@HrO(Ja)v|dFtcbA>Ng%R|l_Du_so&7#aX39$*95xVR!e#4U;UMz8u2?1jS^>)=ow
z9&Qbq@KdX9ai^S$iu?EOjnB*kUMxAV8Tt8dM+I}|>x-7c8@~**nxepVGIxOlRymCr
znlucx8L#Z^DIVM34^+;TlarGw!XbX&)<z^Hb^PPU`$sQCh!u)hqYI>BY}$fFe*Z2z
z^f=x~!AQ(c3VusMGDhhGJ7LDhM~ALH#~Z`I-e23CRdJ{S4Da|LDSl5$R2(y*YN;(G
zw?b(68nBA=1?_@vet~wj6(LBQXZX3dcl}p6DNV!UN8jAs>ml(MpyH5NIlRs6zKQDD
z&(}oN=_FoK2pk$-5s$Z-nNqb%*VReQzOJbFu;{uPH9i&)8+;GufBn*Z_ROD%nXTqb
zi75Dw-Mn+EbizX>RuVKrqq}e41$@YT@r$PSsf1V73R7-7z#OZqDTozJP>gCby&si2
z;?0H9r-myNM3PF1*OF%I{hC!xP0hsAG^BI9D!-gtkMFOlJw%<udIeIOB-}wU^mLWH
z`Nxken9%#u4xFT=wNGd`WC$HMzHg7~kLxzLUN6F4=;6;3!IbD3Hda>V?2fgwy8#6z
zIA+a4M>oxBgPcaqcMvv|<YNsy4?{g3S;hu#Y@Dw%s!vZNh-Q>_M`T;<?4H#a{TiDd
zhEy{FPmH3X)!`8k3WSCl)Nb1q2@kw}oe0L(5(&gi%E+sTg|9QV1a41>Zr5i78Kfku
z@3^eJ|2d;_t!~_Fh1C7JXpwYsT8Xr*tdnDnaeDL`4H9i+m@6V&_Px4AE-|X~qYc+s
z$mm`h>Kqyp5#0GoD)({=?4`1EEn_n?qrT<#KZYVFE5!szD{#u9=%f^&t1tx@bg02(
zyz4UIRFAf9AaUWDtv2oHhm`QX<ZUARbd5AH_RwzjX3=`mxc%cxF04ZRD_eu2sQ4U-
z>V9wfWU}8Wqf3$<BDyZGKTCqRY+38q`+V8A@#s-;!vfPaWo7&3h#*_ct1zu4cFE^&
zA9W6BTJGD0y2X3}*2bC`bz3S$^TcBB9pzj+9$Y=*ofC$1&$UN{Ym+^U-U1ah+)|cO
zPPc`9f0VS0w;R7KcKBwT(0#=^1(w>&%Usqethlg*i}^A~Y7R>ewK?vq*&jZb2P6<E
zD!S0oEdaM#Rx!pckJ{fj8Mp=DGt)}7<_p(}EBI5rN{+}Sx3%Rs$zFc{YAzPWdq7^4
zO8TJQo&pz830tSaU?`gAG+$K`s0l;G39|rz45Wv#rJrKM;%B<0<qC}w^EUB9x`69z
z;|hQOyQkW)T^s0hTIm;rxGPJ&(-(LuHWdXUS>z-pHe-1&fB7Gwi3$`eP_T9RV(dbw
z?Jy}v@EQ@X!igNj3Y%D2nZ9e;p@tRD=(WW%aLUuzZzllgS*cB|3=0?ci}EfkjeuPf
zMfSjYqyV5_9gnlWMZu}S(5Io#84RNOD17p2rZdKmj<#iZ<iS=DZH9(l@!jXvC<;8Y
z@~wEw*BC*-e>^y_4cT^8w@UotcPw*f=7o%cLPGt#szuK6S_K?XN`d4+9&y?ydJ?YM
zpPWZP^;7ZPl><-;k3W4$0SeDX0X&D_ss8fC=3rBpg3OJTHb>0fzPmkQlHUoFaPM`_
z6LCGl+8bei97sr<T!hiR6wlPmMJYTNlx6*}{nb|f!+}JR=Q;;LkqFlH<j7ylPN(s}
zI2}=plKLUy*+S#^<OxfW7Nkxd93LzQAO0YuXwBL`M5->xt4UrADjM?P7T-VMGJ92f
zP^@Jo9?qV#w?FBK%vLFXp!-RZRjXzl7C-RJ0wsMgRl>_RCs9%ORO`>`$zQ6l9hy{k
zcXxvTaIGJ#Hcwi~@UUF!p4}p{#gwr<IgBBu^mE$yj$aMZn74q$-nc<R)f0#_xn<VZ
z+p9F}xzp7lp&Qrj_qF!6UBx5T8b6nG;u~qyxtf+}eP=3U7)AXu9txv51}ZAWs0j&e
z{mTCh8Q<=4Nl+wRiIi9Sux81TxGXC#UxbVlww)Qrun#uO*;(A7D8fcOR>|(<U}PLz
ztCFbS6Nt@-Tzu{>*_#0O*NE2>T7H94Wcn9IIimOpVoSG*Wya9r%z5L=nwr72(!v76
z64(-IxyQAdA0AIIggnnltos%klbwL&kHW;6rv<~0D$*>X*KQ<UgVq`041+2@r;3_P
zO3{rW=?8aYURmc(teB_B4g}X(&P84VqU*1sv1Ck(Qs?{@lc!>zWfI1}_?i|sm<%~N
z$!qVOiMkOfph{5$=H{2N*D_1&V$-%2DtQ58>J0Bj=fNWk^=p*spAZiI8qw8@g(eV1
z)c33~CW^2}2^-#C^w?{+HTj2-T5qEW_jK~F8bUnE%d(uTtgMQP;FRb!is7t~kV+tP
z<>$Mxxjcip1L{9{jzMzLt6EJ#H|qXb(!J;OS7_$-_4Jx_GK@`4EzHeXfVs#e=5#X+
z#4yoGh0-!IAKt&Os<^*kCWHF=TEz$GW-OGE?^Z07eo|rBeM^sv(}a+l`C+vVHm(p$
zviZ!E6l|Zdu|(AEV*pLfeL^TbLv%F!+GT3Y>2E1=bBv6PITTa5wFYw~AD}as1ebEQ
zOlUdo;vYPqj5yQU)siXVeWs-JbA7#yTY8W1y}WhiVc(TWW<@gw=y{}CVAVhN?s?Q@
z*y_U03E&dK-QXuTDZXjQZ?dDkXK@Rq_;^>vTJZcnPDTUM)P{s-BI0~k)&)`Dx%3!;
zgPC&#U==$j=T}f(gK`RmI0(|hY6Q5_4!b{Zz~WhCkJ3KtFqbkp`tQo2GbQdwR>+#t
z?)n|&b9D*~^(7GyWz$>vshu0Le0|SsQz>8<505BzK6rG2{~E~o+nyL?okM+rr{KO`
zcIRw^TL*xJp`oFzt$yg(Kf`ik{xyUHaCMl~xomp(BnlBSgoA88E|t%1N8V&Hq^70@
z#<uU@o)wV})jO2{Xa2{xw2u2xn59>;_;A|WLI#(kB*}@6-f|VM)#MIB3@V-=W<{w{
z*wS;<EpPG!Fil9^TFaBkg^P)ZDzgT*qS<^3;3E3e-X676h7>#sVkh{gbw!=rbu~2h
zK~V!ddf%U}2QQ}rakTTDfq&Fs))zQ9=sY0sfJ_mfzHGf~_Qt@qg!O8cyRD3g%#1@d
z+hcu4gUQ&#!W6X2#+1bF>KI`Dh$3z6GJgKws|suk3E^wJu%E_0->_AE`cy75Vsk3w
zliMG#G_;i-6-A=KxcS)im9RzP%W1y9hpxudY-|g=tBe+lzE`E7_Dz*&KE(F$@StHS
zj)EL*Yp|)}dQhF7?v_19cgc6_-I}cE!%somiYz!n%)~92SF#<|`nq`pMJr0}KcU9F
z*3e*#<JCfSnAU)-3Rt(?xXRbB)0&J#Dz$j_4u7^v94#&DcafvDDcnC+R|74xxjoOl
zJqI#$^9(5vhlkuzQHpB9wGbEE<8V!okAO?=tc*T{bB^};*~+05Jr1UzA{nuG6#2^!
z7w<kWDH{Itm%s=MTh+gZ3j+fg5%|Se7y)bc#H#~cUD^80Gi!vuWY6zMEW|;|RA1R<
z4d1E~a{@d!Zzy>tLSt{5wKPx)dHMH~5+~GidgViu8UFESP!wH|jfd#UDk=us+by?#
zcppx}`N|MP7ZaOwbE`wa9@ogp64ai9NiqK4=mP?R*lz1<K^@T4!kuP2U7x^>#v{2`
z;^u~Vt)<{;`Zd8f{Znjp8A^P9YTOl=hNHlWu{$}ualzUCIrPEcOAa7iG!;vWiwt+~
zYHKI$-dx+*FtxJs+aB)90anoYdbO=%W&siTcW*G{gl(;8i-7y?B3LRf2f`nNcL!|Z
zFx{^uyyZWVirK=K^=qjh7G0+S9a>DF=DTN+9iS^cc*V)UkWfql%@&!di><BgKl$A_
z>Iwq_!;F^;d-v;%3`*G0;M40)bY*z_E=pkW0jplc`!f@Dt8k#5Tnq<urB-TccHv?B
z(Mjf31sf?COcV9MiqvxQz3=+vxuLxZ=@+xXSLeWq14Q~c<jAQ=sx!&hG!|0#+nh!w
zFrz|gVY|Q_*0laCXPlp`lo(<J?*11Gn3%9vRV8%zBfQzM{KMdUSZ;t>j!4>6EPGAC
z?Cd0JbmSV^(fRT0W>F^C$}Il)ata!jwN)BneYfS_x|PgK=ASY7O=73H#27ek-9JH^
z5px6@Gf2||6f>gPW!6gykz<fQjB0N1l?6?VjZ0I|MwOV6@-D<&0Mw<Po%{`ByaiFi
znC|gxA*_ErYHoox4!Dm`lkY=bV-re%eduv8?St7`2i672oC{OajnG#Y!oG-w1&a>0
zcB{W8cLuXN0ma$bdI2KY)B7pziJQ&(MEFBs7)t_OZ+Vo^(XH0uLygia%LC`4<RI6V
z#QI-FU3WaxfBbI|S3*WcW+i*??d%bbBO#J(sYp00dwoemMpkEZW+aJ>j4vU@xhomT
z-q{&-{9dQ;@AvDk9@2e2_x^m|ulH*_2gu$r7Jtua+;MieeH)kO*bg!kAWeWCV07M@
zd>jC{$$zaKHbFJ#!oliofTX|*a0EqS-Lu95Splv)0PQQVlGeX+)~)w`n7EvrA6Q&(
zAD*uIJT1T&AG)`$^5-pdtP@OgP4x8q_etLXjR{z1FjwpZ(@v92`RFUKP9!j|0Y<26
z`#&zB`=l+PLKKOuCxTEwH`f;tXnXe|0cR5p!;!f}x$i+!DXC=d!G)I|*_e6o%QFEw
zqnWPxhXxP`*x&qW@8{<SPI~*NSS2?A>Fl(JAs=yYNQM$V+`O1PoPXG`yJ=XrAcI2l
z^{=5@9>9Mc9vNBP0J;kfQEVT))_E8_dnn1Iutw6acL3Zss=Yl{0}4ZcDeC(00o=#p
zcz7IuO;DFA30y2dSb-)vbt~AM*~6r;(y@b%s@nt62Od-=Gaq+ue<@A(AA}JR=!ts`
zRDghY<zMCmj#Da#8=WH%|A&uAZ6ECW6a$e-MI8<LoMZ=OEp2V+aFKw~U05i&X$X@6
zyt<awu@)O75(_Tro}P<_Vh#Kwtdt88X?{Q6Ym6koJXb>MG2DMWz!pHZkJ2$&1aK4G
z9`hg+?!TF8ZwX`o{gDqq%RXS#(W6Mt+a6T3V2hn45Pudl6FPuCR4dKtW=gV>0c^wA
z7zgwYvp~z+u7ML+pgGeeFh|7SuY39ZI#W-1V1fMQjOnH8Fz)R38o>a-`)g0nrTABM
z&j6ON0tVc<vOd#7!0tWxzVmWtN9G!Da?2=hxBCtcwZ1L%>Mu9U5=Qr|Fp(|diel(-
zgeeW>p97U;q5BsfvXoe!2lVS_cn84-udnbDyK-WDMtLA6-6&dMYiUR=@Sen)jh)?h
zSa9M?MMcGIH7+3<`&w@cm5|Oy1u)RqpGsw7(cyU2QV2?m75aeczXuZA__Ve*Ex>FZ
z#G*}>Q)8f?38)q+sq|c(qoeYTTWgZfAE)SbF;{;qI;}!rvrDwq#9iRyqYMK>H!u!k
z`t<3Nz5m#9Wu*kuCm<8mIQQ%mOaeD%q4&hX8USGBfaUMO5F_!*POpuC=rIamZ3h@_
zSnS(?^`~IKyJ-k*(Sd4@Gl(=0AB0{_Dd&R%TY&OU_t>Oum(_ePuMkjDdI!K((t>>z
zz_S25(+j%mAQZCkJ}emI0S?-oXfgc&bv~({ZgX)uS;6i0)rJ#^>xc_xwF5(|8fNzx
zQ12>w@eAf2?s>{Pt+Z<Kj}9>xVis?&PhVoB7RrR#Z54o6&G#WY2N@zJi??6xe#g|*
ze7<Zi!XoEo8<l7TQ6+|p89Jk-cBBP(4}s5%4RLD@7kh{T`|2O9v@?37W<AwCe`6>o
zOihR2F{$nO+XrV@znauF+W9CYCH~cKRAl$h`sXxCa(jAS;cTdlRT>awKtuxJes<;R
z1iPG^oRCzo!;R$MNAm`IoUG0=TVHmgBh#Ze#Litf12zN&PGqKhF$m{>so!tAf7m3x
z2^5F~6ciKytqhi@7~`CbjCmj&&}=Qpsf(s^0rqS(9}$K9_*--Mogb~w706^q8C7xc
z+)J%ELbA>S59+@e3F+$j3k8-gt<0f|+yn9dOTs6QNUnAUV}*vNx?4HYabCnRyMI_A
z4#Bja5djpMyj&e_1%;krTW2>nhZ{H05V~`{Rm=4!HwTrnmw#^Mmg(wqmlA&2lQ?wC
z+Jz$V#E1;PXYaumAZA10^wZ9+E`xpP?VSA}FtlC)q;^Fc%yU3m=d84A^7OH(5s}{h
zesduj%K^s5lMu}g;2l`q@Vit=*B=%YQF|X*h@@d}v=8duE-zTS7QlqGcvvCdW==RI
zOqEdL$tGPoh@<<$Q>#3a_dwOUDMS;A4A03~2FKU${u7&PyKH6Eg}A~>q#nT^aC;lL
zlA#8xVk#cNT)ng`k(yVp0I!nTX|%%-8WFa9xk&g!w>c1(1_!PgJ_Z25EY&r$msR{6
z9pB{?z4P?%ByMVW5VY=Y2H%(Fr-<+J@}?}MlU-5QOJq38gPLeoCx8BWgH>0gwqR@&
z#RWuwSUjcXydh`>F`{~{3R=7~6&VB(T8kt;KYXH@j~1#@oXRopk*fAHCC1~mYT|NC
z7KRZmxnUKu7}kT{esNBIgxgt*iQcmh{{7e4OpB4gt+)DFub`7lFq4A)P+?87%Ipsk
zcWFRpZCmu<`TPQpa{a8-yiG(TKBfh)pmO?c8PqPQ0=<}NJWnLL(t+Dk+~Bx4Y36k3
zB)5YrnVlziD$)w|=X#6HJ$xS2C~vHsk&tc{Gx}b;#^!mgILHc@bTfM7{QQuEJ4KkO
z^;OVI7aV<M4n_(cKX0g$o4E+D%j6^Hf^sCc2u<K)+}p=SMRIneTi<qmymWVE#!AjL
ze&Z+S1N3fqAv!j8cGwpMFI?u+KHk5R)R|m-(A}HgdUJ4c5m;uKs0w&_I3GVUGyF>J
zAzClN{AjPj>H2T<t&;x=N+x_wD(Z=?ut*OK&;emKZ*wo+n#T#rIclCReM{EeOSJWA
z=Rtpk{$ch8O(fDckXhjP^o&qHo)NUFcb_bSZJhsjTip7LBQ&sqpL9O8TLM2gSa${7
zpRKoF-y9N!Ld|zU{W%xs>|^GlKvxEab2c_YDz{_}4({@F@GYa4pCa+AHR)F>f37Ql
zhyon#)$m~u^SHRU$b3~1YnYIX3E0WNA0eKEq@=+L2afC{7K!UEk<`Fv+I@NQAr9a3
zm)xg^y~WKK+9p0%VY4NobVkH_qepHO<avJY?gHrG!o`b1jPXb&0#kvG5&C0K4-8{C
zI5@!fVt2%Ev|)QZ;j_wCCg(znkshtZk~6u0($YG=K^r;0_~Q4|EI>8_jzH%EICC6P
zSlJ`}hJky*MNMIJ@#OUMxBxP*x?09r;qGiN(2~?Z<sAyQ6Ds0|l7BeEDGX260z=Uv
zS!F+$w*t|#CsV;^puz!C@tzMK_@xj}1x&O>Q-_9z0s{hQSS2S*UN*8xT#r;;mpn<X
zOzG(@E&*!nGrJmqPlKAnDPXP+h3Xl>5bRpMRT{J``L~xt_t|%DcRdkc`V>WU<U4?q
z@fL?8ern=O*xICVG`uuAT3Vh%Z_3==Olhh>yXf$x=Ni%_GYB#hjr_KrzZzE2l6%2d
znvH=$3XDUk8Ti1~^Ma6&A)1{{!yJ+e?J8H>oS}XxaxG83Da+ay|5&nA=I<fL?Du!S
zg0&}*ZJm;(`5#L1WN1&|7!WGPG*h*CiOfxY<V#?S1(fLKfvO%>TZ@3s0yMHaLA`Ez
zad;6R8AN6C*V59l&Q6k5JL^qpl2dMOH=<(pK2j#qG~Quga5OhJH#GE_^WrD3r&j(8
z$s-N{ZgfCjSgWd<0@^sRj)69AZ2So%Vc}vxyVIgkuL3NBRU2eJuHbFV`BG_9f<abr
zKsco<yk1$`z@QGWM^RC%a)-#b$Ez}DgK8#20rk)10w8i}>1NNz8}f^LJ2N>D5`l}q
z+0?34kb6ZsN&A|Hwa~d(bOpzCk2cvj5r!xa&w^p)ze#UC2UWLn+Ee!kT&uj2QhM5-
zD`?v)=R{yK+KQf$p-gn7w@U7HR1pe_V-xpGA5evytFp|S{Q#<k@34oj71IY>45|!W
zU8SCfz=YD&;FFQD@C#U>NLg7~!HfCM_Kv|#b>t;|>yu{=qj0!mEhfQW=634TJ@0^|
zx{d?#1~2~kxVg^XPDO$9O}cZSf&^e$o3T#p=Ms2BX$zzr)Yac7^Jvojx?6J}zLM2h
zM@|bWm=jodRt{Sqd>O$F7j8mds!>Qt7>GB2c>=^C2`MRaenzBPY?QU*tEwtMY}q?-
zxA9hR3mZSN)@P<JlJ+byaN_y9rdWi9Esrqh5eN!Cf|mA+`H4js_ZE4nqO2TFfKd$q
zrI%4WT3Mz(^|qo99z1v{PIsL?jWVI%I!rR>w1dsR%-u8*<U7G3X^%cnDmkvLuoa~H
zRCCEVN1X~d(;U}%B*#vO)#q}?A$Zt8)%L537<oau*7$l+LyUy&Yc?s37_UPI?@ZmC
zFO5TbYpf3i1;y^x_b}e)rdjgEjcKOEbe1esKrp6C5b}|U?Lt3er(O=yL)V;qMe7X=
zAI;%}xZ?MwLqYo7gsK)xJ4phAU?dC_-`}r`NG~lFK8B1`QL*W*JR*GBENh}&2mSkG
z<0x5($LZidRt(iP$`y+BKrT!m5I*2ei|CzUh*wig(}*Gm5|A@GxHN;-=IM}Z2}yS|
zbX(w6I-=~N-@xya7B)Yi>G}KZ83v26!+vMQi@gJSi9{k;EUeox?)KKFnbt*Dv=}>8
zPzmGQ`U^p;0m|1p%q4NMKuVTsaNP#my#Kj60OMuJ-x=>pDGAq8yR?@ZTJ|jVB*pJ6
z3>PEuJ)|t<x5fC1k7zE*KQg#XMce_qc}vOk(pO=0`3$<K^Fh<;E*o<+rxSohNQVc|
z3_TkgGuz-8xWTYMrw=g3x}XKcd-5>X0&KPMu`yr<=766O)Q-#|yU$x{VSCGgR0IS(
zCPJ*fnm(K(6!b*VMZf4Wk=y^bQ1_LR_{HeveWL7KU0p*$RNeisYsu6o&Y<zQi^+mQ
znJfvwe9Zud(WN1|t;KInFrme43;_QcvR`(&^5DIl7j<9Fxo~D6M&>Zpl>&k^p}QNP
z=l$yxNZWrYy{xt$)cBJX1RyrQ2krw(wJ^8cVE3jDIVtYn%Ffif!9TEEvBg^ahP))d
z?)<kTrzb)ov95ce-qpejQ6x%7Pvu(Hp+hG!$)1AaEr+@y^h^QRo<RzI8eKgM=oA2U
z%IJ;@%m?b-b-f5eGP9FEe%wb6$8d%G0H(s&n1ugIF09DAw{LU3Sx%phW^)8uti-oH
z((%2$tuv!R>r24;e*O)pb5P{Mi0V$)lNZq8Ok#s(*yo_#IhSwW)_`v4Dl!fwJgr(L
zfD1+eE!qQg-Tr=%x7q`Vf!&|)mdSuM5SK=Y3kwT_zwHS=sNuc7iVk#kQY+kUi+#uv
z@p%kvDL}x739a_S=1qmToEga*>-Z`&Q`xPxT+;XVz$BD9bC}B-TGhOAa<pnQ4lb#p
zt}oX@<H_)J#MX7Jpg18Z&$4#N*wuZsQN{8|?T3~YWXB?2JEEWiWWAR`j!h%e17y@8
zRK0~d6a-Shu$KOWM0-yUbS%ovoFsX8G~)9>2`F3K;W`G>-n6$_{`m34vs;Z(sriBD
z;phf-vNwQ>0R%u1;0;JIa<OFH1(p0N3M+_H@cxj@!ylHd7HWs{s^d@XE?DI^#;(@a
z*Z=r&?RA_4tR-e|hc%o{$WwWn_?|#G5A-)W)Xiqj7}BZ0oae@}6R^X&4|bS?-&vG1
zH(|f6Tf(uO`^*)a%a!fnM*JzqeeYVtx6`vJ-8;EIUqYdwv83qtb9bp`G^Nqj|KE6~
zH1J-iCIhwPM*o1IU3tb!-X`cN%!7o4+tT3vSQUsA5;9Z-1-oDv_T`rtNBSGLejQ9v
zz3=*}n}i$w{K+4c0EmNooD1cal46Ypl)^E3qOzNPYlzE$rvA?lTGi2k5-28?pbq+!
zd9==Y5X$Y^+GOVkLy&~4ONdki`9cz;9#bPDoITi8D5jxm*VWYxUi~-7Wu_3+yM9Gd
zKc?H4e$nRs`X>A2{Jfyb(#X5i=@KC2nrYK-8i6Xvq-Gg~f|49e#$h5069c?qI4%hP
zZ3zEO00zn1apx~yyiA9>)M6JMOcMxD9@Yrk;5OJPUk-wYTZe?4+(6Q~B5pvYF=K<a
z*1E-n7!jb|kGfE|tPti5bTWuiR1UXxH{9S6`Y$*50hNsGx80K>EUcyaXMLhqP=Qyy
zB&Pch0p6l1?^?@IP<fE>U+m>E^0@we<;iQkz;m)vP|+hooSkL&8F-5o2AV2T9qd~<
zFOpQ<af3$yp*GmukcLALl#=R{t&TGxMa)DoV^L?keS8`k8X)6~(tx}tp&hK}n!y``
zC{YSB1latS#HQg-s?yTO=;4AW42XG#puP+~eF5&z+g1RM_9H%iuDlImfO(m-)6;xq
zA9vPim6`;CQ;|Aak3v!aN=mk^?ljnA81EF+k~tj6{7Y=nY2a%`2kYc@j12h!-X}jm
z!faCB^3`L8Iby}X`gFO-_Vn8;W1xetrD4JnUREaZXaM-K(6Rip)zq}neB1}xO5qU^
zz{XK_`PAVr0Pfd5m-tMwUweN03?zvhaR+6~3GiLVN&?#o>|KO}T?fSLAB@e-%>l*E
zP)Db|{Hjtuwc_1bz*&iEwcWpeNLWwBapBA1ZG$(S-@+{rR4Zo)R{Fp5H%jv7L(gg3
zak}sFXAfCfTdqdB^WtI57_)yOieFYPHT_xY-7@EaQC$jHWVUwlBD*_u^p(?DJ|7_K
zHHg6lp(zFk9V&0^U@uihd{UB5m1_`bcNET~wdUhor&v}d*>BYo3orcu`=e@O1PubQ
zOWLZAbpbt{u9g<>UyEDX7cONfZo=+=+U*0N`pw5C(*c1sR_}hv317wdLN@^%H~woU
ze9VwBS4pj^T36d!9fYHel9rPfcgH-Z2wR6~M*5B>9A{-sUtNv!Z`;?2iqaP5W0*6k
zJA3GN5=N~>HA>|~;N?qy{P@R`jBcot59-`sewlpMGj{GvJdl1tpTo^9{pU|nYX(=E
z|MG5VrPKpw8Q^9(LD*dAp=3(?fGNPj8F<ZeH#n5)1O+MEA+?Q3^sc7>P^hS&pl>qs
ziL_N8kOSf|HtXX$Dr)jKkWx}t(raF#VC*m>ZEf1{@$+SC8yo6kE+7G&<yaD23_9Qm
zwOX(cjxxD*G)JSXtYU8-eXyNwwpq;0OVSS%zbEjg`$1^>DnH5I^}WzsH|)X>rsN2w
zA+jvLn=NVm9MrP_=l3~7W}&i!Q!`yvilM1_(xR9m-)^!7lw5(ybhx^CtTo1?G5*2(
z?(UNM0FbzrhPMRJyhJ!`Ku{OBAs|*%Zm}@0qgyT{MH5~W&%Hb0cihb{Mbz>Ao3Q=F
zl^oMmu4D9b&9k%v5B}ND-D|3tPC5s#2k+4_J0mnjb<+g85{Xktp9UrWG|*of#p6$Z
zgI3HH(bNTo6Z91Hd{Bjv<3ir2bSYiM%jTHYj9WGy|4hGspeDKpN0`^}+c{7tDf#NS
zJ{^qp-E&Xed#AZ+z+p*6<aABmn|K&a6r<)9jM-IFc2nOCt&F2Y*}Of+U_nDZns6l?
z9q+?T*{oi>_Q7PDgN-ddKQ$wx*i-=hFyz5QUa_<ic?AU?IWR?R05Cqe{<HkvFGaUE
zbv0!(fH>Wx3e#pys3}JT43_1!&^$f+XJk4Ee6X2`2QkJyphIFnCeqpj#SW#?6iCbg
zQ0m9b41jwI(Sr0RR?)amm0G8sbl$LnP5pKC?#65%z{8PQrcdGn6vw%a@}v}HA4AIQ
zb!eh5ZH{r>{{K&Q>F5)pD}3QnTc>C!l<&gL$ae7|rwWFV*aXK5v=^OSTpaU(EC%>p
z5O#y|1oShp0pYl7-1+m((Py}FfOTXOdgLz&mW00ZLh_P9-A|dn7(49RU{UO=kQ4`G
zUdH{KOg6$bP^&|IhHx8=srYF2EH3VjT{dzSy}NDWM=Wp2uuGwxO+Ut_KxQOS)Eqnb
z-FOxYd5WZBpsc~<3~}N_6zB18ihR8<9-k!*&5Wt0M3+flym-b&SdRAZN6#@)!R?9&
ze+0Beb-M@6?7CS%f;iyJMZ?)-Jqrdbh3YW}gr-=ns4&y3y^jq<_4SL)vMTE1x;->z
zJ?%di3Rc^?d;ZtP7#93npOC-V_ygYOAcW`TWd{N(FqTcKb&@piq0U!zG@!*@qzhfT
ztdn#7S`X97qUQHH1!(5UDFL)gd>6QdUEw?^l=0@QVWvXeaccO~`8Jf#<oiECPMEs!
z=7@1MujL)nIVBS+lGhGCpHMbqnE1!Xv_lyCC-*~Suj$w`8K^TQBwkflOIkVv{N*s3
zU`Fm8d2XCVeP<;Ry13Zmp>53wpWL5DRt~TGRm^gf=n#}G(T4G%I)Y61t{hY*S{WOP
zPH5gNd23r+VUEz$Q<2!UYK^jAzO)NTu}-Q)iAQXdbKOpie_3MTuZ}v*2^}Ju5MxGY
zrHxt2LikFZvnoEmU`l!s9X2XPF3wRzG#1I<w<ue<p||>V&ympoB=zL8+2ER8!PMgv
zM~{+!haPpsDC5aIQV07^&#F!c#nFF)#LL=$Fn6Ly-7Ma2->922cEv<j;?3t>pB^lD
z>`Cn8lfHRIYVDnw1ox!Aob1lzDGl-?=Eb@f+eTGntd^QBEi}m={0KS_F<D)+SI!ew
zi!E<fwEVpBdazGL$M49EziSnXLu@oi1QWC4&5BCz(iS+0R(6??Tfd+XY7$C`<oH)T
z7(+*_lEs~Cvaq_yn4%wXGXC$1)miMSMm~}h3Y#KQ`sT<K?^EY|^#A)$lp8?dJ+!~y
jHrJ;Ff1xDj=|>NxKWFv%lNlHXKRKkYZLC#}ycYgHXWS`r

literal 0
HcmV?d00001

diff --git a/screenshot-11-after-include-notes.png b/screenshot-11-after-include-notes.png
new file mode 100644
index 0000000000000000000000000000000000000000..48e0594a8b732763a9262c1ad07a18ee00e56121
GIT binary patch
literal 106831
zcmeGDbyt;NxIGT5fOMC1cS?76cO!zdw1_m)E!`m9UDDm%p>%_EZ~C|VoO8Y};rZ)f
zY{zgDd*6HAYt3t3bIvPNMM)YN0UzPjt5?XfG7@U9UO`uZf3|RMz;}kX7_45sLVG1E
zA*$h;ev|=YfHg+aAAEul!zGG^2%~X?(*nM{$`?++S0_$&3lx?OQuN8Qu!sNQQ&dn7
z?)L4DkmrrLg~i^ki``y|g^Ls~A73iE#LwP=fr;hi0CZ?kH1Lr4AQ|(&{{_$7FfaoC
z=llPjVEzA}xM7(k3Q|&5C9~p?ltzCSHY+F?!oqs@-_k*gZi`|}@=#OKn(AV2cXewF
zD$ykv`myqb&=s?59tTvBjJ^c>rK<YHz*~v=k-~uoIVw6XE(s0}4mLIsCZ>F9v}{0R
zSXfPJYDr>ZVys$!KmG3S?oqky{9qgOfNFFF)dady_9*|bs0q5DgDO@-^EHlk>wH&g
z8WR%}a&mI#uV3;0?^0N^bh^8{{r$x1>NviB{i>m<i8V+NgC+0Gk$N7p*72}^aFFFN
zt<LDy%F3>7c|fE8lPn_20%3UcG@(1UHq7`BBcY#4aE4b7ghB;Hcdg?^B#rAB0f$ko
z(P4`3>))}Tf;3?NJc$wuc@`B~L<{@8{`L*^;4Bakm+bNCfZeJ94Ilsh@7!T$r${0S
zAt8Mto%)ZVG#k0Z|30{%2%-=rB^HzGr>)2P`{pwj8Du9F6k6nXc)7Pbn1qC>1q;D&
zA&E(d?3jUxWHlCQc#=T^-Y;2b72&vXkJ@kxs*rcFb1bK48x&A)ky_m@%~zW1TfQFN
z?2IHyhT}vL3kE$oepLN|$DU}0puJG4q@?+SM7S#?zKP8Df428FePaeTHny#)X;E3a
z;e^GGiwYYp351WfRAU>NML{CB+w_3BE`r=bbdbHEY`D8SIZRcoQRz)<m&$Q~N=AT#
zZ9#5EzNfJFqw8RFc7K0=6p8SkHjjlc?2+Xaqq$;ri-n4n&kGfwd~n#=*#{G#U{Tn}
z36h0<MB}K(?3Npc{@s5+QYY;5^K(&AvbS&DBV-WcF@_PS64jvTNAvP@E%7An{8*Xw
zl4Ypbk^^DsBqUg=u+2?I6o@dzuCcq3u*jXU(&c)SIAlVijNivFG6$LY33}W}NlDrL
zsq31Z4G5;Cr?>lEL+A7SsNZ0>MaFJE%BWjYS6KM((h#ue)ha*uM-p($(rg|d3%VRN
zB487SVb@Bf-=3~rI^ZVN@|^vhD@DX%bap7xX?Ffir(RH?Hfj5(j*Fc=lkcmZgM&j2
z`bRQyI@2tf7!$*0XYAlu@?ahoE~$ujq3quGSMW<{_m{h4mFk5*10}oOBB!q`FPo})
z++SI(G+%?)U9K>M)z;QNFnqWr5g`?_+3Hu+sxY8h(T`RmHtm#laIrJBKZWd$=_f*c
z$Ct2DNab+c?1hgYb$WZc=HuY#C~Nhd&s(R$u;m$Cr?7xu23XKRt1K!UeEf?1d|4MQ
zcM-bmG8L1ddqa)np;-59Gip(4RE$ks1zPpFPa7myZ~T*8L<`DCW;HNUxg!}K={Dr^
z{PI;>%k9KuUa2dg?WUopDyS;R^NZ6MgDo{bHC3#d8|3`4-SaLzonHK}$lU(lzi;2Z
z^?v%hk}J((YkTZ+{O6~zkMVNjIXyjnoBOrIc64;~FWV(I4<Fm#HB@02`%}5~pBLJE
zUMgZ@R3#*!QI>z%!eZ&=%VEc?muQy8$jGHqa&fr~#}E0#qNWIXjCThj#!9{8vVpXF
zJ(OydPyez_`?5DK?$AAFGo4r6<`tMD8Q$)3i_&Df*3P8VML{CqT4XgtJy)vD|Mjo)
z<t~$QI*(SV7Sm6xnw4Vpq>G(n8=EkSPYac6JU*-W2D}^aB8|D?!6>!Aew{2<_dGqI
zlB#%ldYVuCOmHX8yTrr8o68oLCT#I}Y2WNC|Lrqolna)>!{=Z+VIos_W4b1GvdS3B
z%gZbA337LLyjZQym*@TDZZ;e*i;s!F+vN{CP1X~PI#S)y#P4!+c6qtC<n?efH#aAX
zFMVH|mX`KyfAZ&$KZCYG8t3O9nTD{i!Qj-$oi;lkTy*;Sw|hSguW?z=?hnR@NBq0L
zrR(PC*x31n(wHO#xX8%YSy}4=(B*l`Z`F(oB<KSZ;kRcl`~{1O##dWtg_`r;nRJ>c
z>crhR?%rW&BqWQ+xWdY&Cp+NaO>{qD3w=<#id30oAu(!~Yc0@oSN8S3#bx=RQKTYt
zFu-is%poxwN24rJu2W|jW7rZPwGmJEqETUBHk~)L()?AD{o6*jWTjC{rr_Zl<RMCC
z5`+4_@FYeZ)=Uz})5EQN5;H9wo#Ib{VvS<9$vC>9*rKBS@eF>j5x#=^V%XwBr~j+$
zY84TeSuB*SyZP(qKAWpk;q{q9)Ui}fNjQaW-CFaTqu)?VJctJERx<?v%~Ij%?TX^m
z=Z4}6mzxtH(1s!+ub`*DzkaF)8!$>L5??uu3n~m9-*tOXwJ#jE!}}?<xmhLtc<Ecf
z58IVy%|HZfwIL{>kDIu-xC^D)l}in$Hj7onslHDOk3`mJY7UE4=o3E$<KP!&W=Po0
zXQRpdIXO6bJFBXyl30u`YzYVm1O<5`LLlc`u#dI}XtO^u_`gv`@;Yu(9>t>I3An2K
zzz#qq5n63^V_)NX|Guj}gJZn<(?H*Zka0JtQ_LS)2l+RM1>LVM_a+|iE-xJbI0Hxt
z#AfN2_=Z6N5b=Vw(Wtk-zqq7?mE0=}9A7%#fPcqVF5B$Q9TJ|R3Ywa`ljeJgsK9+T
zBhH(v;4+)=NE2)8qbc*gy-I8WsNV@RVNt@SB2(Ql;-&J2h7<?P#P5iS$%3v9X433C
zqkSb`h4=StA+N5sd7#1+78Kmeys6{FBvyP}Aq8*=gDZcAvtD$T8~ZW{4<B7HlEl(?
zvp@C8tUb!(_GIH_GFu#?Uw1)<FD@>=va%9K4fE7VS(CVjfJ3z@PMIYgAT5&E=xiFh
zTab~lGE=Bb#p@Gc(iOa8t>V<*6<fQetV|sJ4C>ZL0<agPKS;^p6l;~!kL(=%u5Ivs
z3X+{8g+o9{=dyJl_>qy-)7QCBX|zzH8QfvFI$B{tJ(2DRkBl4#@A)vVE`_}7kXJbk
zZafviUT^5y7ft{zi9?|$D=qpuI$6}+DOhu)JPzxxwEe@v!oD8PAN;PR@%$(Sc;2?A
ztABI@240Miik3-}Y_LT$Yi{KST%#ivs(i5#!i(xR@tV4>wBc;#*(Hn`%4CD2qSr65
zU&u<Q9FgP>^#e?bM8!hd#fn}(pylf%^yOb-rKYA*$t?=_JPUy3hPzZjqSGjf9=%E9
zCeD}pE#wJ7TLKrCAoK{ZVDnd<aBgWSCNA!X8chFsr!UlenQqJH1-mI1sLBs*-7n;l
zVIgFm4?82;`Em)dvH{X|Ywi9DJn`A}^{hcNi;EJ9ii-D`8~%{{d-8hIiEc~<cGR;N
zm($fAN?YAT_9Crv{3Fri00q`cr%YKmFHYApv?-QuNyG&JDr(Umn3<Uc9yj~sF{u>{
zT3yi}{Iis|w};}`6907hH`$neN}yL#F*9oS?E1$h{QbpEr6K{yH#Zq>Em6rQ*45XW
zIpvrRVVs;)uFnzR<I4rFwYr7db68HU?@#so2U3@LwZ1|=&wk%dSM%|ZBe^*ub%;r+
zf}_pQUj9Vpea*Uw82U3qQ`-@rzJn&#P+C%pfxPK|g*Th!wgFxEcs`ZQ$o5?lx;lgv
z2YX0^1NzQNgHA{%Gw_{E4))-pMO8z?%iSf7wkSEMA>b_}*{el--<YfeOwaojXyL)g
zgvd4&EnsM9`0aLKy7F+LvYPR1LO9NtX8flhta-+}LCyUJ`;OZ4r-yGhFLIiBA4SRR
zx$O+%hLVeRJiWZ~FkfztOA88c@CyX$0oKbN-+LuqZ5toXGx0pk7SA~SP=_WO<RtT^
z)wRpDUwh8MKbkKuZMd}v2}ogoS!uAJ$dyKQOt>&ST(JL+ZxL%B>|;h~v(?toah6P2
zH_%`-IP2mWB|zvnJsP|CI>uRQSv(j6hRj-vo^JhU^5eIYWv|;4ubLS~vK|3p6-xo=
zYpnKfHNP<_E~Dr$@bKuoKOCSZPiL_!a6GNsXYx|;%VI>RR2S6QGJHn8zq{-5^*P^^
zthsC_RT+KN;NTbr$Pb`EDex2LL7NO)j(HRwZf@s2WQrZ~ovK}3U2L+lm{?fx)7<j^
z4hA~liSNJcmYto2a2VB^kBu*jnKhdAu(>_mbB<s&8s0-7l*m2+mO<U!;pxct+^F~{
zv`|Y8pY3W);oQGm1_`KE&Xgt+4t%Mu6x1<r_bP*s2=N5$5O13!7Z+6_xSW6D>-$lH
z%iYb)OqMQ5#mWg)P%*NJp<~K1GixGOGFss+)`SmF%>^GhJg~qvwAeS>{FT8~7gU_2
z57S=zlg5_SLmbb&#-A)3vghDVQEo^vwLUeVA|pqJz;SbOc9n{}&IL6k%d5ZUdt%~z
zjwIrgj)3!igRn}r7z{OM33B8tCXEt31H+{>a#IrRFL$@?LgmbJgN?5*&uxJFg-1D&
z?f$N{xZ~>16mUbBftNf#WE|+b1gISkfBb-8wd*SzV422M-e9{Fre!tpvrSw~OlMqV
zHlXP<Q8&OyM{OJ)KE4WrCb2&YOj>38_t&A}x$72Jpe=|-=nK;Y6<;-i-Dc4t!1-tq
zZ>dlzqo2#?c=^sFD7hy%3X93QuLsniB=ZXE*`jf714F~?ncg#SiS2F_5g|dtC3^L8
za>1vI)wwphE#Mf>7OOWnAF#n7B!lYtYFLg>sZhz#)!Td&!p*^f#98;TtDE!l{I5Dj
zjpEoD077w*%h^3IzZ3Q*jL?KDAu48SY9yRt3<k@I#4HGg+8y5F+l6}d_}C0u<Cz^I
z{%^<GEPOYy+1GcjQ49qjSl55&j9PWx;j}yL&^xlU^Stx-)E6LhVQ9x~U0z<UVv=fi
zJ<m~~j=^j%Rn4X5$O-{%o_#mW+{p_6jAv*JdsykA=5pZiG0{}!2%FN*uqK!7pL7nw
zTOP|<)A~&xnZ=wP(YCh`&9YGB*2u+b0{ipsw`&BGb;zq1ZFrl78R{bINy<PH_#Z8x
zR0;AjGyfdy>-PQ2h-E{ae&Gf|!)Ej>jOl1OzcFG`b-Hi5MbxB5kGziloBL?1nh+hF
z-F&p82@WPQI82V&<UrNd;uuyJ4ou{1(AI(ez;(80%Ebly?|gY0OJ-NTeA33R2Fodv
z`>U5UF(@X<kaVY=VIp3qtGUtzKv6emT#<<Qu#S(k%Kspd2qC$E#?XU|2$$I)y6-n<
z8i!Q`?lS!QJith!p~0r~8}^g*x9RjtW7{Elo;3kT8;#KN?Nn7;+a6S2@}3+#c5}uf
znC&}I8v%b3C(SvZUAG2Da%g2mTv^#3@TN1hXrBOaJ`_TpS1y>_glw-w{Yvyf*|44~
z$xner57{nOFH}h5@&Zg|slnci*MFJkgGRIT$JN%RY3pe9Qmrx2$ecM2-d*g-3)X{L
zxq+||>w16X17IRIH<t(phYPS7;%udiKSSds<l=o{*bVk;=;-La#IHkS4Oj&X2wC(B
z6z~Mww)cek@;TkF-W^1rojGg|_wAI0k65LI#wX{^81IgzG)_bGSGj*z7(RU2GZ;={
znb>}<q?Z$b{PzuJ!EGz_7D`|Dw`>Qr?uO%|qq4HFb6eL0CcV1e4+ow(A2ZTRDn7I!
z?4(~YYFB;$B#U^2aWZFXKv_i4ELP~Fg@uLVLK?UI)ZTEz1{wQ*QUbfh_;M_je9h4Y
zsHmEyTGtmBe;VvxgkKa)oJ{7+Qnvad6GjMKFQ``cEJmM#@daCoIIU=jDmE=Ebx3`B
zZv?F)32GvQ<#J5z3bIObeI8$hhlP3V5LbV(7wOq`fB03}U_D+VHQUGFz*65IY08`R
zjYq!#Q$jk(4?|tkgawsOh`;n*K_Qw=^!lv8>JT$A2`@w8(Mk)h1lFH=6(d#Em}uos
z13&PDz0*h49S-NqGgyr``y<mx^WCrZ$(VayZG3~Ab@@D}_-S#DiW3oK;IS9n9xnx(
z;Ux!vML<ME+_BFVMkQWGy>%K%EI*@UVq!9O%YHs<yT89jGq<#*@JmVghm+9^jp7Vi
zWk@I}TB@qP$ZS5(r#D4SO?TTvn6RkC2v)E}h%h6C^kx_vuRGA+yd(V$j$oNyy`O$~
z@t!FD;0UN&q%e)Lw8n|-gI`ml3G5U$n-Z7}`K+J~@*%{14U_VqoA)I34eqS9U2c5e
zD)Ed%{Ap)csZnJL6*d^5W0yg@Vplxtd<S4)Y(7+ao%vYm-Z=b+O<yS3CQ^xSp|nN>
zTsCN!aieH*v{KG$XSN3K_ASqDo)HlLEG#Unt@%u5ku6jhCV1N=!q<KWy4{iP251Da
zXgl{fOkyR~3zRZk?yu;mX|h-?#xSfoNI3sgf7<M60LN|{KLUPBa_KB`p>jq4mrc)H
zR%E0i=)$8doT11FYaEUi9Vh2DRX)VX#svf;UtJ@Qjw;mGam4Mu*2GvN!sNJge;*yJ
zqleRLi?Q+^lG3fO)5R0Be{(59jYl0#ET{}><YPh>Ke1sCT7Xr*M4iH@QRI(xP*8H}
z?{3QXo}XT5;L6KwC(n9p@of(Zl}U2F8ZD<b!F~5|cPH1j)VT;8<7xC4SI!CKwf&>9
zERJ4dKBfo3v0rm%G-@|F{__>oe>OHYlUNG|LPEl+h0wUSFffWKY{#2@;g&sh)^itY
zJ}-0g^CrLHO|b)v;z!)tYzbl`Ux|kBl+>5hM&#s_87w2P*w81@<*zn3b$l6#R>hPM
zedo3<0r?a89+jAG32PxmSiN3J@i!I*hS(l+7@w!WNsn{_zUJ2?CKY-;O4HH2s{GQb
znSr|G`7=?yxB)8Yw}A@j_+L*<#GE7CmlFBDyl4*Yip5Eh@h7VOi24+Rjzqk%u`!(O
z&ZrOtgI8tg#Z@TH7>7B?RdJp7gh?U&V-<)1;kXkHUOrFv<)A>D?oCF8gj`)dglZYO
zp#B!qpBxy#9UIPTnWVkFyo~!<jfSuRTBPU@ditT!3Ibf*+pPiABgGqu)z#GkAUZ0c
z#>o+1@CXTc@9t77DDm)VZRVmOV$)yUUynEw!*J^4N-?!ZdcTGfJ7@#IusNaj_wV18
zrZ2TlJ0)FR-Eez8FBvgqzxG<)uZO$H&UdTbE~yvYLHS*`Us*8{by;ot(x8;lTbuy4
zuqRM#9vd$ko}Y!M_PQy#kqk5zzuSqDd$JIA=+*zt`fKdb6Lh`2WxZH6b$uARB}SwC
zGl2hfoPzP6EK%|2B1*QG<0ae=3%!H;zgk_-Tazu88$hiYZLnWyejUz|ue`T&U7?U7
z@udbdys#)oTT4L3+WbYM6mYQ@wR>|ggZqt*I^|RU+%-aGz+3L}zjL1*Ua!@EPKqQ5
zOd9|dJtKqQJWu5ffP3+VaL5Cz#ds_4m)*1D=x9<^cwE|#eycb(5%1m;a;v_NYef8I
zITZ$I<CkWaV?EEM)z#N}8fqxWQAGURp!*EzK&(5VME;d|VD-_`+B#F%=a>8SwkCpI
zQlnK+aBxk;m+iqRyOm~Pulwy4{z_2w4BFiDP5OF+e1H97mY`nc<JCM_sAO?ZpPCl&
zar|9lwotDBa=uk)F+rUBHOx{n469hJZ)kWJVg8NXJ}6rv>X<Q8JYD5z4XPd<8?W(B
z%8u52vc8=P+1XWq_QQTEX9pBW=^uo?D8GTY%4xmbYO9a`X|lDggMeUf;8?TS>}Pg&
zM7#S+hYLj<bao?o)K3ljDQLyLBKEyGJ$SyG7C#q2P*czX+9ho?hZE2VyNyJiVNmf5
zJNNu^RG;_5wcp@3Xr0c((@CEQ6M7BJot-o7s8NYqjG<<5Em3m85p`zISOhcalyF*=
z#im#-*37|AP2CwSM|oXQR(;NFyd}B*Rj$pfua|FQwLi*J`AzSWG<By@YOP9}6-Aq1
z3SHf34AYD}Jw1HoE1y6Ws6Z93z;#aqV@PE=8gb8dU`dH}svRe#iX20Um1R*64g?DI
zj1-EF?tQwU9x_{K3KUaJ8NMloJQ)?|AZ4PYTwGv5EUeg%5PyvPJ?>$0hmLR@Y$Wl0
z5&flU1LQw{{%lHfWzc2uzp_hkwM_?t>%~iJ@?01;QJj+J8<N;kQEHv~4#P1vv*Awq
z?Il!Vfp}gyeSQ6O__05KO3X$QJqdn~FGC>>y@8$U@@283kHFulAQkGqy9`x6+@Kzq
zBYmicMvN;PBv+Cx$<2+_U$0a?Cq1AGLLu_=o-BJ50(=zqn<5b7-oDBnpCgS!f;a!?
zp`3@4i3i;PhFa;kwOtj$ysdk_+2_bop;?+(QE{@`_K<&@$e@kmHTkJOLQ7rUUvRO*
z=LKju8~x7PgV{fb_@QB7E-k?p5Zhzn%K}J`hK)`2WldVSbbF($cYF-U0J{46{Cs>L
zI=p-4uK)fNY<Y{cFYJCr>ugNI<DlaHqeoceW7_y+Kn%?|bY0@hM?y1w<9PccOk>~b
z$&^bCg87-HW~E#Yi>FTySdoYUl{ySWyku-_HYX;>zh~+TmFM>t<X<LFcq(sIrIkxG
zip!>Q5y{s(<X~DX8wjS7DorYPqo4J*q`QbC7Cl&>4>K9+j`V!>4E^bnscH54U<YUe
z4yqiOw5It)<FpbepFc!IM&4mi1H<Y<?>n5<+{MmFDz`luQKR|T-*|WASikh-<YbLf
ztpw#0r|S}eI<)7@wsQT3AT0&Hh5VviU`W{J3y1Tt&G(4As4CKG9*E`v*>kCi%yC=F
zvPhti(R!_&2-oS1e#%!5C}BWlhK8XU=cM|9dwqM0Yw?<h&2%vgyEN7t0TMYa&d0mY
zVW#UJ1!q_zksQ4X1c8x6CQ;sSW$m2LzhvY3|26ic-r2>)LxsFZsHhgY6r`l<qbcly
z?#_E#&V+<V4FDD_r`}Ybla4b#18plg`JKgHFSfI>0Ha~EjzX}q@?gMEE$N%jHSSgp
zg@78@L`6jf1?_@+OrwC7ceFJSmBJcfNntP0>UB62P!JQmsGPbKdW&7K?|<{@{CtYr
z?h}8}EonQ$N%*&;!<WxQeL@~FXaoe+pN)=6*EYHX@?Vrk#j_{77i_jCF#FrwMskav
z>7;2|pvhF!jhXm*GrhC+v2#^Qbi~4Q4l+tO8IXttiZn}cq@<i`E#b&BLOPtu$jC^9
zJQ>yUSmR(57)HV{A8Trnri<03nc?i08-4lzZ8O)#tGtZq&S8v(wRW#G8$wU16g0dP
z`pbZ9Lf`E)9!HGKugA+xmuLZ-ravbQfx5T5RQd8Et&8P5y)FgEqG2xhZh28B@nAY1
z5jUWbWDUr0<m#T^(Vi+xN=p7`nX4_Q#HeW?jLSeX?v+Psb=VM#qgI6c;<2OU(0I3;
zS5XmT!?)=rkS}CcM^3H$4CJpkRx&`}rxrhUyj8$^_wFp0l=^%)b1nLbsaMFWA}hPX
zMxT6R!TojE9TFsHK6%4WC7xVVtviI2NV=)@sLm5Uc0f6RCss_o%s@5YNwQB^$MQEV
zoanPBydc3NJQ3|14}oy?APkA!BGugc^Q}<%?*{Fjya%R|tYvcXRXZb*Kwjj}_&hU_
z&Z|ys3V2LU5V9FwHUJb*{(pppU0h!aI`6Yihyy04?yl4(0Z-uQvC_;53Vadnm01nr
z_feS+>^*;3)H8w4^JN=<-4kSYV~x8Pr$#(+TUCyBmbke3`ot$yQ>Vr8?=H+nP??7(
zySjY&QyPgQA|fQL6t^VdK><7Z^y0nY%Z;1FZV)ReEnROpWqrE(ltYSDtdcFTx!mTF
z#G(en)bM4mB9TcyZ)S`^B})WwW<!JVzlVpK<$4LX6&G%O4>!jng%3fy3NkWih0qhn
zBFI7I2BmtXZ`HN5RJ63J84%5iYQe4cg`5gwDMsXPm1<P^_s{Gvf5<he+}@(3B=rkx
zQ?X2idZ5=u45S_$41f;&x1tPi@Z_hjmaHEk@Set3@R-zpmb9aFKO3KKQhC0?SU*~3
z6|@opp4v)tuN$LuBz}`kN|pEcXiBYKoh7pnbrSK_)m3^%#@&57Fhh2IkCz(c>4ZoK
zyXmwm4CvKcO|j0W)__#-78*JWR@HNa?G4)mOm<SzKdoD0Lfu_<8XQbqI<@U5kB##_
z&@DaR=?Vhha2O^#ZHe<dE-|4KoN_pF0tmR90Bibx5UH2WpB^wzp}Vbjc4cLeroi*8
zAJtpWSx@Ek0h4xTIKdD&q8mNZS?ANj&9(AL<DfSX8#woa3C$^TzqST$<nc<&1YqwD
zr~l4|U0|hA$Mm!R7xOno^?Ay@rhWlM`-7Mk<Sr+QaPW~$Us#5BT4VDAS1Wq4@j36W
z;E08^`lddV>*gj0EBiHH&;8_;{M^02_Iq+c-F`*DMEh;`|7iiH)6P7>!}+!pzmAYH
zS_aR4l*&;_@37^gk(r!|&gso*e%8{a*8(Nme#HzC>tY8HkDYFJ6)N|(@_A7r_cvQH
z5^%6dh3{`q2O22I$^X<JzG65XOKSiQ<<FlVdV(T#+C5>`KHJ(F=1L*AGYLAM9li()
z65`@=JMTLPZOP9RC|ZoAT770<%<@NRMW>LeMj~gPcy-syt%e=|OzxZsE{_|73a1oP
z@?}7rc=);Tx$PdW53N{6Q?d3<+g~R+JwL)cx`pz8JE_pE<q|*Wyu=E(J6XPKjgL=A
z(66_qBO04}?|7ebeaI~%{0Mm7GPn@{#7u8b1R0ks7b=*Heq201Juowe9>&KC%7A7i
z5B9lCTFUp#A1$_tAZLP)p8oG*^(Waa`_<NJRf;`u;})0ra~_-)Dl+i!trzO7Fzej>
z{QZH(<oN+A^%As<jndpU`{1m@C@W8_w0wIq=Cq7OE156Bi+`8t%)vkz02fCJeZ5b@
zX6LlL$HIDkVJMJqncSFKw>$Y-<-2jXHbgH0`R^a;TnpT>4S!R$$)z^QdeN0mJ1?*B
z1bCxb(Qi9IP7f&Mw9T6@b9Bh;%8n}#=icS_5fjy%>(I*0q+;l8b1U_6SjaSR@go%T
zizcYGm}qvNi)5$(dkHXuAF>)@v_=2KzUL<o$@l7YmhWL;U{*spfdfeR0aR+x>v6u@
zK)#@<1(tWA(i7~<%hNYLXX-cwOm`qC?jtAKt;_yBI0$F2TxT@+P|$mIpbk3aun5ti
z*%D3I;L_4k5`LF-3wUc4jbyy;sq=<gxJoA=#(1(3AMCxFfjZ$vCg2kIDyOr0wm;Q7
zq-VWQVP*;O*%CG`{mK9BH8*|wo6I-2<zj&dD~*nEBydJk{ry2^1fXx{*@~f%2Eg5v
z8G0)CW#^wc@#r;Mq}pcOBjwp>Uh{Z4VVWq~A4!nrY+T}g{Wo+(J0R$-{Au@?*T9cs
z%c4ifxw!jl_5;gC_3&Web&9&@TLLLG5AhQglioHcF&h}B=Cc!aIh7xjn}0#S(KUaM
zau?$ceN2aW7WQ(lI7KV`z?tHAGaKr9ZVU7E>r>lOfZg+{aQvu3pV>ay3z8DC0vxJE
zY|3$b81~q=C-PP5fIvjqC*46ZO1LIpqd7#}ap3mr^Qq_|r>3QyE;Tfm4#k?l-H-O_
zzR#Y|vb{OR#F>8p+y;P{t1GaPhvVt|BdHZrXUp}2VY_n?k&sLe-fAT{`xwj3427)c
zZ9<)(DFKfc&>KE&|BpwD?>7m}@ZJQ@)LJN?Gc{wA&3%*+JFG#9o!y8hW*G*^w|u@O
zP1c=aiiIq&1R&K3(ByBMz<I4c3SgO|^|NOMX2ySYHNb6Zyny_!iUHG)^-I<zUjoc1
zTW~?aZl;ERcjt)S+|y_7`-&{4OR;|rMT%~M&<d^CLB0@FYiw+66P`SqV3c1$f#2-M
z_pMKt*3mKIGH4etV^5egKY;6O2_zXHl<m%wcteL_Gt9TT)xu-;e{m!q8%|)TtN#k@
znXx^0U#tKHd_i|cpLMifKkIb#T3sFc!V=JC1_mrHwteO+411=LTZ;j#vky5N7f0Y?
z`|3<jP3g9KHt`r1hK0!i(y%w4p<Zi_oT#f+`N8UAme2hap3o3N06^lA^Y^-Mt(F_n
zYj81Q8?#_Wx#JzCEfW~DLASXLsM^YM#d#$Z35n1Ku;K5o4l-84W9G~C7kYao2+Kiu
zL;K(EL+gNiie+Jmp18J=GynLjq^sjq;Qqd)6bM6+kO+VIf|+P5AtmMg{7A*eH#|HX
zCM=(bz>0y+D<rf!JxyL%F8fMw>-e}lKi}3&Q^9<wy=?vP5SS^<6}XuzfWmt{KjQ7!
z*xF`jBwCPgTF-8(k0ht2w!3Zp^eT1y_x3Nm`)(28;o?v|vvndax4h4sS(EKvmvkzf
zXbmz4V!7Q4f$<1TU!uX{{|;<!ZmzG_<f9O`#HLeA-jPwDWOe&wYTElu>W;CPxpRHE
zu!&Rz7%B}Xz{2wd|M{kx8Z~F<h*W$g-ZW+vE!t{RO=N6yxjZ$?l<&}FqG$o>qEY54
zY&#qr90G!Z8~5bBlamhHgXsUZ52SPh*%=!<AtXd*n)LwMET7!%m9o^TigAIMTwo%v
zr5YY6oxEQT=Z}E{+)2DW5h#WSa9mGYJLzBM#)scB>$8<rKwzN!1if?~v>d!yAcp)9
zSzfn-++Sea%b;OEiw>r+7`5x@=!n4nSzN69yf8mD#`zoG{=d!~wQedQKEAG=6Y7oM
zyBHi=s(4K~)NWN{YWaVE4&I*pG<GF!_}?Nz$H0aHb{!s$2oK-m0|h0>J3es3{W=Y?
z`)!Gov^3(2y55x^f_kbmj-FIDV*Ed94<6e=`=0}Yr2(X<%gd{aiyLZc1{MsP#vZ)S
z&HV)ORd-p^ii(l58O-zwiRWS?wA*MHZn#cxfOUaj0tyCYuk82O&`@+Ph*P5*A@iAr
zMtoz*MmP0WTk*h@P_Yp-@caL+4Xm=jM&wtaB4uf5Iw7H-rTB?^8*);re%&n70s%Y6
z-J=rOW^n&6Y)59{T1wO$$i0)&dtl;5Tw%&qVtwIiY+f-rjSBz2K{CHVoL(G(V$m1{
z`P5c}<los)lK(B|zc-V(i7iLIZ+(kh;F<mPe=hdlhrOVs{Qun(vFF~tzQCZM_nX30
z)YQ9U1T3DoCLxul6TtOtYFY{V@dF+O<?d_)Gmhcs&(oeBihuVvAE@4-?v71NWd4`g
zI?v4E`1)4^oW$6wDmX(!TWW3KNdX}=uqRmgL-RHW-yDO8g;*eCe0;plyhsb)g_NOT
zq}l5x%GmHmuZJ#>H)3QQ1zqRa%?!<H0t2@gv{<A@g^ka8XSI6axMt-^UQSLoo1~an
z_wA_=INbE~!>-}SJ0lANy}gNyy6Hoq(b1FZ>mQkz6cb^#V?zi<^L1)W$Kq&MK-Lc6
zdU1Y!!Z_3pM09t;==`$KClq78SeoDCX1d)=+Iqe$)tw`S!S~<dJK=)85U}iezIpvq
zFxceNr&R85#H?8~8o{N9*BSh%S#5(g{U<BI1_sR4Wn@VbPUtr`X8g{UW}o5~_W|Ms
z=HzT%9c%?79pq+ZO%|!H*sbsZxvFaP&8g#5jwWRKPJeKGJYxw|@5mukND2Yh(MMfz
z=Fq_ype#WiV3CNIEw1*vU=ZHrzjUVGh)S4NK>xRk4OPBTiw*{p2z%Zh@ftKc4}ECk
zy97NZ10v#=WDQnvU}N++!ADn4%5N?~Ag=qgiKXi#qT=GYYE&NYS%Ke{ip+)LgGd)k
z#u-b^lj|?;CY1+6qG)SuJpA7o8+<((txA4MzDAY{LTJzT*ZiKSs!p%e)jzRR-cC)u
z|MiPYK!UB{>TxQ!aIN(`EHV;^(|a2g72M-L+f423+|Sm}DWsL!+;@y^3`C5KP|Nr3
zF0~&a8<*FI4K3eDtgWrdQ8tA=A;4`!3<-tS)YNoc2c5rm`JZ@}%-1B8co-NU1@LEZ
zkhWEk3mx72V+?uV202JEUW_DFYH3LVUCnm2^#O9uK9Si$uQ8~mtsN{KBms2Gzs2f%
z%0C76PM&dU5bm~HfTH_wymWhZCgX|VISL?8S07hhQ*(#p4C07OLj!xBhlo=a;KHCY
zDaJ=5>~qibp|!tLgoMNh$)L%Jf~_am#QPDFf;!yhc1es-=&<4EDN&L4iUrUx5O+9T
zZepnati452V)I+ADsR4WE$Bs5v<m_OytTH0g(i+9elCR_7tQHp+01llbW}p0-;ow5
z2u3J`0xn1UDd59+-CyN97|Vl<R1(X|LfLN&OiU;vIIBcPEB{X2TAahbe>dg#@|_Q2
z2@p0$Q^GTaJpekt!{3#EYDsL$nXg#!v*#rz$2fR^KoaPw48*#+$YjnItJ!f`nn9e6
zNoP`x5bE)%1^B<gQ6yiQ+%79BPnA9WX;VxwV<^CPmpfh-LoqEJ6Cn^D&$L!<GFDbd
zFMJX>s~d43*3~~b`6`L3BN<SK2sogfbU1GPh*Os|Wy?S17@O`~@Wt4zCnY7Vl8N!7
zL!Rgl3}d++jG1XnKHmY!3O*liamPVRIlQwg&tN$w6g)*Py=ewfd3p8(KCyqG$BT^5
zCWm&hafy2h@E}$w8#Z+Dmo0ny6Xg6-&;v!(3K$8!gM(<ux`Q(93~X!|z<DDrFAtwD
z)yAAQn<>aJHr|k_a{FQ-p`xnV^)|ItA&36<m_Jt7ryV5lD4>_X6^pxqy#uJun|eHK
z?7)U-WJgCwPHP^jv=ENy0$*QIAcHe$S2&L(MrOB1W17~>VN0jK@pIYgC)(`Pt}B^}
z5AFq-tk9aUi@$Sela{+JlXA~jLl5)iEmgZ8lib|fgC($pKg!62T*+qJ=H%p<Ir*74
z1Csyr5Y>l92^ZMEbRs0wPQZN<&<nO~OztPQx)E@V^aU^1hf%rG6Y=z#em*+S*^?Z>
zS7LBJT4)5EpZSKiL2lQ5rofPx*q%Y##d4*YP6#I6R750tJ3@G&d<h?u$p4JXHg$uE
z?Yl$X@0>sfoI#Dep*c3C;5^q<2oC9E7!K2NtDATcjLhf3(Akd9DLF-kEqoGK6ScXy
z8I+ka7P#@Yk@%YU97Q|FPeg%HB1e8|detW4o(7%|H%tzsy+hgJG_i^jKU&?k;O}hB
z&Ht3^KRE5ki9U*;pT`cs_%oxL*2pKhpvgcWkikd3?QY`yU|Tb@e2w;*S>U|cEmlG0
zFBGW?>Mw1AzAr#B^XSZGzrS4nwzqGf!R9xdAQmVbaHubae-1`P<fdZVFw}}E{uSPs
znJltgXfl#^&zlOhd=q-~tT7<S{@tdOVQl^CP$j;E&MXI%6=!GY-06vl4*doc7(|4h
z*@1z0&Ty2_f8t$S%$Aq!x=cIY#?}2oCFBW`asUF(*)Orc8W6BzWhOPR@_kF2-f+2R
zI3)oBuzj7rZL_n`{z}v_rXU39m-`9Erl`1B6xn5eG7PmzLtA^T>B~zLNjo()3=n`_
zA8y(<dLDX+yDC7tz--js)wg4^*1qCOZt1C<DfBZF>t!QOB!gTu(T-k=5!DKvn7E7N
z%;RdGZa5fGOvZ95imdYgv;fxxuY2bWuK3W<^B+VHAKyCVVwXRP`nwM$XTI7+5(31~
zeyTwEX3MC}9kT^=SHp^}Y-TnwM<COQjC6H|p2|@iWgkh<F$g~@Whr?irsi==+~xC=
zI=(QOR1O}a4J1xIaqG_Sua`FR6q8xgrDYCU634Nj-&P<ylZUvqyI)H=IM7}U(P)W2
z1|n*Ap-RAuQ01gA)maS>bafX4XIX&@o!5_iZfZ)@2euu>^es(b{YZF@R(T0fO#E7t
zw!7S?^K`3*RZ#||6ciW*#BI*V6`%MO^En(ymAF5OD4*<#9%R4U(8*C3r_MZkyMb_X
zxD<)%-ES5#qQ9Irj+BR?xGN`9`{O?f^urI3+rifmjOuE~;t6f|@K;Kzb0rDAXf~Pr
z-|j9g>?@$NS{RweAQdKk2o#)_tave`vU{-8zKP%Uf#%j3c(A>P`)WZI6gtBeoU<K(
z&_+!)6aut~c9W~vnDLL?&)Ccne*>NZ9rkhRwm3OC`)arHfTtN6+L^O$jTTR<`q&Ml
z-5YPEU#Jv_utN%$ZBEvsQU&TsLqmhOI`Ptn4<w}iUS3bGqi<j?wuB!QehQT><XN){
ziu8&(go*QkLUw<BINor5<y@+bODM^s3Q9_c=fMwKA0HpMZVe0xy6g~%gE#Q1_11kv
z{5L&Do5W6h9fy=d-o8voEUI;wF(^VpT#&OqOqy{ZlS8dhB&8N#9xp|)TQFBSf3mh-
z&Xa{YKw~H+x3l9uH{<2y6$uHu)7I21*HPWq4G9V9Ou7b%JZj7J?|D`QcNqoHC;?xW
z8y&qIBWT$^*+d*(hDVSF@JU*arSgVHb^rOD5LEm#8_AS5(`p|5KW?EKO-c#J`yEF(
z56(Wd5c<!W!aIx<WhCDTsHdPaBR>_z^f8!7?K-+RqL-Vemgw>3uS=%g#(dc;p^<9&
za#`p|9fQA{P)6X`CX8g2nJBL5+Iw<<ztg0^^QLKoLeLUtI1HZYB0{ky%tX{z!2Jrz
zZ*u0+(7_=jH<wjcUPOe{hXax20J5p)GOcWH4(AC&H+BzYgnM%6533CL+xnM_VD_1G
zP8@hSpD6`4tV9+imBy;9=9xRgk?)nnfu!n?$F1B+_uCVvo1=WqQZBMg+Gf75CE-z`
z)QIgTvlN5hKWkD$R~VLRDS{^Etu9<`h0F2Z1cs$c``1tCXNF#0KAVgVdur}=EMun}
zR1TyS4k=>&*At&p6cn7ZWCkS6dui^cQ+$zj*vJ02iXk-fq6c_>S3NuWEx!+&^6M1P
zqNyXh$t;(4&u&Y;L4v7Jz@39?2c&=JlMwp=9>g}I;cyLevgQLl0AKRz#2}4pEZJZv
zX+lI=+G08{hHb;@mvgpH-a<%{Ye_YoWKc)l*F)m?xvc>fK#lJ>n3|jUWS|jxySh$Z
zlr!ech*k5zbi&XHpT`Ybo#MYzrW*4a;tH6Jj1t`o38aF|EMNR1>xDyNy(bQ%<y5vf
z!-0roU+=QW&yDM?;0b^;hKBZ?h4@@$M)bv9TR?o{9C;I619o7ATHpEQUS%T$9D?x5
zGRH0VlM{PXBEGI`vI-XopniDQ(3#%z_xToC@?<!ZBJdVVB1PfieeYljTK|KIs$lV!
zEq+2_;lI5FQ65~CHN$`-|6H{!-sF@&H7ww?UFW=>#{GfYZdo)g9zH58C0Ft8@$R&5
z_(QA1fQ7=uz7Sz@bTlL+H9sG3HKz$RDYWC`hc12$i*Euhqxm1&^g!R-`1No#jr->i
zb*xpE2Z*^jNSz<4kg^?LnEJB9!NUhi_OD&MuA}qnL*vrZ(*umr{cgGqxWV;=lRu@t
zyv!7?kr>Fzp0Bi^;(aBJdy@e3goB4i6_hUE_G9Ap<xY4*{nx4C1R{tj*)sHQ(=H72
z(|(q-p9-mG5#?TA_(CI6Z;IYbq@VLW?IV!-L<2&o&Yqv7g^H2N=w;Zb8H07Q0APYd
zT4zN_$Y36z_faGru5Mo6S^bZPEW+KM{y=R^1_S3`F^!9rZ5Z`^&<F+S?0;jiK{B47
zNqHt`XC>SZgneFK8EDADI*^<DzL8=vat|Q`O<3P}h_gBAwI!RjSivFOzqa*}##BDo
z>?05VmC9XnVYj{!4qgu&`In+n*3T4LEA-hJUS;jnBO6(YNQdSii)(oYGBa;(i2h`#
z`1ghDpQA@v;?5VVKY^`mZCwJWHb@0~ZuaWx7<+C;&eCa>oox+Fkg1ZEu5)*L@VXo!
zrDn^(&d+c3(4bq4CU?Q{I;_77kUsvSITcXf(69v9Wus#c2ght2bvIjJWTa-bi6ocZ
zGW-k@(*>BtA>wgp6$^CQR4AcKQWmv@3U#DpT=52z6EZ@9Sgl;Wbqy>azCQ<oTa?T}
z{QL`nUy2F~_tw9Q1b*3L?r`6E@3;x4ImgIrU)2PfgXYf*T_B*p|JS;ud9~H!);A;L
zj23L1z6}1`wf1Ya_wW0)K_lvRP79X}_-3{&>8tf$vX%3L^6>CnR@0q}i*Rbk;~B6i
zRa<8XhD}b$C5xk@&^M$Pcl%Sd0Iex9A&D^-xJltaV3yE|X#f<J(|#3>2vgYSxz+38
zb$m9YO`fKE8&>XMC=S=Kxh_!W{%j*IIGDyL6y1xks{K4>B)<CTZU%M1O-@`&SE^k-
z1$Fbt02WrPIoBHo8XBmuFl%BpU-o88wZGh+_(M+qX>O<l(>+ErDZUyxLk93E75|Z>
z^Gs3;(U9loo+u5RbnTE4#d(w%aZ&s3%Su-|o5l*ZY-6z{g!c$mKjt2k9RX=VnNkq;
zUIt<qe&l#6XKB_kvs_?*<YAAL$O!h^H`^+|Yx1XmOF26^JwE>Sm@84_wAS#&p2?H-
zn&sk<H5PZ&U2OM~Pv5yYeyD;DMm?Q?EzA~d{@4}vX+Q}ifw-*58P!R5R@+)cT*QvE
zrlJZQ^5t&8e1yWK2n9t?h2c{6UAyhlhc91h0cky1b|X!IShln@tw^AsH%ak=b~1yn
zzRB|rKj5{uZM6AXyJ0P}Q?yuz_sS1q!8Vs;98Xc#rCe#6b`kP+A&3%ytAT^8F4D8C
zyS|Ys;~u_3Wh0$d*ROzu^-3NmOEBD=tl(LDuC-IBs;a82LzrDVM1sE8eP;#q4Xy0g
zR4(k!h{a@w&$la>GTmA#W@Z#z9Z(J$9hi*TM*-2B3<ga>AJuEGHyMdG<O<$d9H8)!
z#i{T#vPQ@4js-GgyPlhXq`rik*h^_qQJv)!Ew&Hi(^~N;Y?trk;=hS30v`D(lR$nK
z%LL~YT<VliT)fU5=bhoNfOBZz5XMd+<q<31%ZZGR&iyYks-S6)4f8ch=WMiZxc{)L
z!E8$Upt)G3H{~=NaE35Crl`XO8hiqD^da0hnZ)nkNxi&QBD`^A5II`%$8g?J=;@_;
z?%XQS#PX7+JGi{d##2P-;Kdtus0jdi&QM*BLIu!6B_$-*#fLmOAzVG(-C2jRPs80k
z6zhFdEr>P9x;vkO*pZoO;z8w+lpY`zmc1P6z%p=^mFKY{zj%`Zq@N(2gd3SVyr(Cq
z%bgkJz1lAak4kagXd!}E_<4Jbw1m$x##(IAazH*IoB0~>PeFO6bixc+CP?@AF-sZ~
zso;`WsGRKO7ya)?|MV3Yr!);}#xN!xW$Wm{4-SzqLH|OM|2?+-JfX>sy4r3v_nSn?
zTe>)1_G9EuQoa691$1HrugonlL`?Y%-8lXKWV8T-=n2ML%dC!TW9W0(&IGCd_h#FE
zgoI+Nd{Gf*;0Np4`2RQE={Lyd^aT!2^pS4g{oiEEzef{kgRT_2ZzOyzb7zebnYh;I
z{)<>Vc8ccfg3A9L2?W0u5)Wa4F<wF_Yl9l$3ty@xYSZme>kz-Nsy%MgiDUau%m42M
zW#GX`%osdU<;Y2!#p^m5qH`lm42*j)?<3yh>014QB`oX%m?II9ZOR$Ybhb7(dmBQc
zIh5QRzwG%&Mke_B3XKp*NJ{3)0AUjw%UijG@ZCEs5|T`oOws$9&>ugZ?`GCUM+1fu
z;$tI2Lg3)wVo`>ciyeP^-d)VCwiEvMu{K#YS<nNtmvyHeZ6pM_woKVP$`PuFHIuzW
zaj=F^1V0WCzo(M?RY>yXtHt3;09;#X4UUTq#QSC{s+hLA?P)Pz+op$83Jq_wCwL+l
zH8TKzc5)I96_w?~a>=Iwt^0d-#t~@PU;)>&JeOnZX*Ehk6k-9@GM$aL$krnPfNBx@
zsi?kp{4VlzUk_r-U2HNM8nZxo02D%{-kK`W@u!eiacQYxo(x%{2LuQJpliWlPR}lT
zd`P-{ykpqdKyP#Zs^r7By1J%Sx!P(vRHm_Mn&YV^2Tr>*aFcN_BjhbtTZ<XD1l%qj
z=gS|k>Ep*HB?pI=VHEzg7ri9wU;&2ZY%&P+CxZ+<`|RAG*O)1Yj1>-&Uj6!$pi59Y
zb**bd$bT2_^*B_bONG!~qBW|Lrb$Z+C#J7%UNZ2(+YCB}Y_;R14yYi1=Q7@+92J+B
zV`E`OXhHte>kmYcP?wXi!P?N~fmyz}vWCL!4_Q0ZN`$Ie-&Lie6oE<4o>fo)>{U}L
zDyl@flNAq3W8=gY=#5N?A3K<6Xga@aia`Lqs%)ytI0LxS<|hd8TmN(M0iJicev{3e
zFM=F8^J<V6<*hZcV3PMyr;M0Iv<Q4>Cmvh{uRSjAUR>(yK7}FJ9Fc*tzxXB5DD7(r
zC0zH?X~5uJosM%EDVC#6pxDvkrwtzkLXWc;bcvuw&);L?70z4z*ARU{!4(uDy>g?D
zCqOl;4nEG~z1x3zyu%!yh$iy_ofk;jd2RI{0}7Rzj0F~3b)!4+u@lI{z%ax`w*0j9
zhDnb{Ul-f!=IFm#@wq<&CV~Dpx79Q$8ymtH7;;$y5;H$f{1=ys5l$NDC7_NugaHKs
zFm#$UWk7KrmA%pnqb4TmKQ}m^EWiC7l(Yy$1XKI9_FUkPNsfa?Iz&0xQa-WFc6GT)
z0{#%lh8tUpOGz!RQ%rzobaho&%><e7#ZgBFxc7pv;Tn;Ur^$4lDucG&Bap5yd~Q#A
z9Jhk3tgO5rZni+XC-FV8LcgIIwEaKh(zs7AraRrh6qKE5yb*P2d%N&IF>&Ymbr8*P
zhh{0YL2gh`PzKM&=EerN^(zI6GvdKY-Q`RMjifGZo(JB?e{3OE5EUQ_4m8Bskbz;#
z4%ZDk8=C;s!RdkSz)}@0AclbE#6K_)%-5n{A58t97Qh*f%hLa?ORyg{U?2olt?A-)
zP1G}inHl#yK{OwiNe@WlI92g8MnZH{49M+{2J*#wghq8gf1;R>)6hl(6?wJM5td~i
zWHzlu2FXy`cfc9V?(p}SHXp+WTNZMxU-@{43>L)7+In=xw>lItmZrsOreZo@p7ezc
zmlgBx2&c}E=VxEqoJ1yqO9px_E}XU9aNNpj)f&@tFlTVVAf1|r9S}^x-l*sOe8r+a
zKR-H(g@<Xo1cKCH!kUmdKT@$8s1*B$hiw1hsQ0-vO@gYzp^f7?BLid0;1%a$XX*>C
zPPc@LSMJ|h*~ma#8xeUZV}pHL7GwK6ztQp7K#7_eWnDK}e?oL(pV%U4zd<-4d5+M+
zhSX(?KRC64gumnUU*x*ohpPhw&C8RO0gy{dVz%W6S_8)px6LB)yLY3Mk$*sNX13Dk
z^K6kQmAoF9TA-n(eya%Ly=kAoPFew}6zI8z&kLeP|D1V!@xK5uHi5eO7@^`1ykCE6
zUmVGiXFxM#FX21jB9CSYS+W#S+y0(Bb6FAY%hvq_qs`N89s_`E5(=L<t#>+F(uDXH
z6<N0KOo@q!O*vR}pH029?9;AXB^3r#s>%I&7bvQI&b?-0XuLc;SOi3Tb+c1b%(~MB
zMja>k_<zyt!PXO#0gT6b*1@mnySaEBx4nR4MG*35RFYMaNC*)>%HTGp37AP;iS~nn
zy#d42m_mrD&jOxHzuI2E76ojxXJa5LGq8C}H_&;x`jfDP4B%1Ow7+bAKRvZ5*W}mP
z{C1a-YitK+(D(of#%X)77?9wzrYza$e@+5bG0cX9io4f?OKp8UulHkw>tOXK3)0K1
zwqWGL!lI&Aa~aPUvQ)Y$6Mj*sW?+2AI-VxpVw$H>DEpJK%%)#NNXT;YS5#(J8!!d1
zvprNBo%^Vdf{2JIOcy|_6ow&nN70^)LRpc_xVhyQ)AT(>A{zvnK(<z|&Ewl{VNbrF
zLtZFLwS3Yq@ciy(Y@lx^RzWDPoD|OIdU$KSYYXUlXZ1PK>zk4bRaL#P!;Z|{4f?bV
zfLv}E(8`*I{*U_<F8mj*`zdYf;(_V*ZN7NTAi(wqltbNwm1um<l5F}%)KD2ukDI15
zBi&FhRP$4x8Ydh-amaq$+4KxrVr3QQr^8A%zd^KUK}+&4ag<c+(wv`nM;llSok|T`
z^sfIVR3kr~9n2&F7lXq_2bP)unldxHcd&@dAimPbhtv<qkYXSCvd@u6z~ElgOkvd4
zF1#ttpBd2GeNTbfLcB37R-;Nb-HZmvM>X~~r)wIF)%Z_ep1Fd<I1Z8_i;Fr`k)ed-
zF@7*(WY~cC8Ml(6xk;4@TA7C6H0oQ1i))Asik=s+J;24k6G9h4i8bp!8<Y+Ty88$#
zE7yY|l#sTh=ov;L?7cfuXjEZfwT(xt;aq1UjI0DpSCpIEhdhmdJq%{sL*Y>$ynID6
z_`Wh?@x(>g1y*bY1J47Q8r#PlBWPnH)7v3Ex=~>mw3-3IH1uI0YI12$FWBi{qFq@)
z={N!o(puAHmSnh;%<Du(LM6{=a!CZS?2SADAx1?Re4%30I*xX^{XOSIW%?nx+`>X!
zKyd8sVT*&{_M1e6C8x8~cqne)sq##wM4LL?MEim<=Z$*>ciWyWf9%olZ*wJ)jnC?-
zsWR&7;`eX*VSA~d%SRsM93mAn+g~L)gGTZr9Vj(jZ@XcU{}$)ukjH7rVMD{HmFt<E
znC66>9bZCt7W%@qjZwDfV~=W*x$SugWm55j|1ms?=byS#ye%hH_xU=w#j?!H9qgEb
zzi#NmlNzy9yo^;DwM-<tDV=E<;lz>vv-NX(L@P*CRmYKv!;lCPiNj@DnVdX(Lx(yR
zM|`q>@=VRcqr>rjz4PpSx(u`w4iYktJYXr4>47`saX%Vv7X}AqrUc+oqrQ{v?%{ra
z;Ys8!cwMLB`{pjrJQr9yAk)GTzA>8BmtIC1@D5X$sP6UJJea+o|Jc>ky9YluHs<N&
zQ{(Kv+fum4?`rl~UbyFBNnjJtppBq~ny$d#GVMyme}Zm}c7i5>Ldc|J`}qGc_timJ
zu3f(hsC0KXNT*WL(jrpQT`EX7g3{gHDIqNl(j_7wh@`X#(jg^r7VdYy-#6#~Gjkkf
z&!C&<dARTEzOJ=?>lbu%64I;BvBmR3&wc`WlfWt*8no;;-+Dp)tQt%#RA)$%Wq@<o
zx#R+ualVznqi|P4vNzbBS*IqtX!h$@^}T?()>l-c_$;IY81s39QiXRDuJ0nE;gi|G
z&@?e0LDkASjsY{V>Jw+QdH$>37y&a%hXg+DC$tXZp`tNPLmFt~K}fI&L4&DC>AOMr
zrojosK9#Tjh@PZ?Ubwp_<#2H(o~1vDa~@`{1IyII%&1PNyN(?=>;@ux`<faWJw4)%
z1=pi^f4-|9LjF?{O60m8H1@kpKbKgI$=8uAHNOTYa9ff!qd5-SQJ<HhAtx?;Kkn2$
zx7E&kbwrdd15dG4V`?&SUH}VTq)W?S_?6O<&O#foF#=_l(1rrbZ0wOFiN&wH&QAn=
zF1;d1#~=RTUvE5#7TMF1lJbMP^<7CxyOpGxmi)SFfu^cLb6=r!$dZ?qDPfFDI**Vo
za_XklT3A+*Qc5iU3r%C(JwfvUVq%ZVC_;9fSAdzMAku^<v1xm*4)!!OxXDq-_U((1
zv)rE&$zFM)z|6{x1P`VYj})_wjm^SD#~&805d=aitd%<hYsM`J_p0+Pr=DnPhKAtu
z7BA&bCZb+leAt|Fw3?}V1vAFP#MN0HC7;v$SZf7wt}g5No%@*s6BjQkcdt77N}nUs
zd(-N*dxg^B|H+rnV`FDG3Wd?^%HHx%o<2rh30(UAmF<bf+?dA%3G)nooMD0C|6FOG
zG%4h5AETu2+8?CR{6AdwzRkp@WSgDRwaO5=93(W9oBh3s78YzQCN+h%xX$i!OtG;j
zeMB82zc3EtriqRYObk6rgn8So=`zz^^q9J|<a`E<v|J?;-MLcBPE>~wmLE`=V~~9-
zGc?4$ZFT>kZ_cc;hEGb3)W)jyB~mw*PS*%crBgIdX)NtS|6(=z@-W+C)q6ZaAmzZt
z3>Wwj-sU4-Et9MFy0#xFskg#N!qNKtd_BvW4-Jj?;X?*{M%*=Wj;h_p-No$0J&%jC
z&x!2KG%3;*vGSD2=;-LFf{wINFq(I##I$!l+GMcDraPo3LT9F$)Xoxh4~tv_C;=eW
zI13bR&}D@uDT&fF&9(lne$Uz^rP43g^78w<BxVMJ7d1nih~~i4b8wBhI6n;|zB7+A
z|2jKhl|-n9>S|z@L|bNnslcq@&Ai*m?#JoccL%m4w#GlqH|}G;)AZWd$r`*L$+O6N
z!~R8#y#5vQW35&=AKKC8SAoR<!+W|{*3|?^hJ>NWmt2SRaeDVoRNc0?czJtoTN@j6
zP6lu?Tp+%_CbZCU?ivdD-=Rbv3$@5_*_dkRx+3CPrhixWdaE(*<mfHaMqL2E_QzkG
zrd`KXwr%KX4Q}6zNH$vT?y(=zMC!Pw;7BuCjpmDz)<XH=vA4vpKJebMqEf%k`fk-Y
zD~4VL)PD{+2;T)Phhk-;GHLV-4UhY<sH{ZzTpni#4O>p%uydw9%{Cj!=2Y*;{WcXt
zS9oIdC5~wr#^|@##p&ZY^!F#L#$X5n&;$7c4;>LbQg(KX-~uR4Wu&EBJ$?X#TI%g*
zcG>91`ug7$lgeoot%9MLRDywd{ME+9&X+G=`UMXOO25LiF#8p_Ftr+YMMBL@jj3St
z``4op=V);Oaw?TaTUTsq4<6`mE(zh4<5)9L8Z=Zg;CFs2^Mtn2{&-u;%izlpa4b6$
zSSRd+(l>yPFv)rr`V4`8ZB1)&p#$%vdSQJre5P*e;bjj^gOb+aP7dI9xU%V%!v+rP
zT6LxDH5)LzjGj5(5&PZ{BcO<Z&OzKW--_bMN++=nBMG&?g*gWqa}6*ba*1wO{02Hn
zZEfv|^}DH?`6qx+uQ|2Xy8siwzD#i)jkrfEN3zlHPE;N*LKf!ym-xGmCoA>Pq;v;F
zJdTJuy=blwSbIuefa=>y;B^jrxVSp#Lk8!?qJtENGzgt<X3$lB!=d5h3*V6WTWkwl
z6-ceEcU{s;01d1fi*Fmq;kR`W1JRX;`T1*EG+2a$C*<!rfKYaX>wDwDjmu>ln5`Kl
z8|B$ApY3)qDyN48IzVrJGNz}rFHR)#A%e_ROP6SC{GH>~<#*tjh?w>w@CE0P3%OW-
zzV*0Jxy*G_pwg&A!CF{QF!TkbTvwr&i1V*mV9HQWLWBRLOy?dcBOs;iAz%)KNfD;`
z=klV@%`Jf?@&x%L-?R@i!2D~TtSqx`@J%mTGO`!jf#c=+TTpbLB##h`+?G?YP^a&9
z`Ta{7dOeAT)>cZh+tQ?QMcJaSnj{Uu$mr42r_EA9nm}k=4if)z>rT-2v@>=rqDS?k
zG>dgZ4TKt-8FWl81*|g+rht9&d!<>2Jh$y$?%k!f-Aw>$xW8D*ofQ9_wZRlL6-H*q
zLkjU4u8(;3CmfX#!;vD(tgEMwEl=~~OVJ;Ax=5<R4QPKDU~9a)FgNOF@dJ%x6DT@M
zWMGWsm+`_R_GGef@YZaOl%gKWTL0_#hmW33lnZ7t-7cu|Jk9~FtX~w$&$<^AE<Edn
z>JkbGEN?y`K0x3!Xy_uS(5a<06PzChc(s3_KygAsIW3hG^t1___J2ueNU}6jQwTgr
zF9+8So%OOike8zDd?b-{hP4eBr~fg9Ge?Ye_qt)3%ALbX?QE9l8q`sglS8u%u%DY4
zUwjYKx7=GMu}#c&l6I^4Xbm54Jfwec&Z8@#D>B728?C{7XODe=y%-}{U`ZtXqpxJU
z<r|hb4m*222E4$MGl>|Gbt`%3q^eu=C}9ccK`pi#mL}v(nU9GsCEBGhibg$U=T&&p
zo1<!`YP!yv6(5^$)9|Kp{H9v5!yO`)nwO*J{d(<_GTf2_1KrZup`ko2WAUSp>wM*W
zmSI{Q84?l@nkdSTdJv_*`*->u7M&(lR6a;+N+Mx)|5xK;<3v6!J3}l#tC0%>nYO&|
ziKd3+sMRPgEy1PPvOvM9vRQSibt8@PuPkKmq>^7(3B>+9=v6ST0kIEI#5nXFq+$k?
zR8tA~lUEn91=q2HT$V1iR7cfBi_?`;50wPzIAd9Kx%E7VMBS<<d{PY`jiSPH0OVGx
z_8qX*0q)8%pixI#y8Y>?U#YKe3VoPYD)QQVEsqIjE4Od|OS=N|?_~6sFSFyCot|wh
zIjj#PY}iGh5>%7JY4FKATjnzSmTbRDajcZM_y{~73mmJ%wv#RHbh3S@e^J6<C+Z-Z
zktmygu>hJpB_2}CF^mL^`|-pQX1s_cJ-^=(#>L)>p{cg*XZ~klNUWf)@P1+@PpkW3
zivO{WrkaG|*0)@1bisek0BML;7?Ck*CL25sv1wvHgqIQNiYNVZ&|g<oUeRgPNHznq
zt`)?6$h4mA;{h+i4Xyu0ErZ$U>fL{i$UIe5CDmaa(2_M@CrD^OlEL1WeDWru7;kJy
zREFc-qibO8`l};mIG-mS2?fYCHy1biO~=!A;y-vjV@IVuC}MqYB2)VOix#op?bPsh
z5`w6bsp^6Mz`Xs-{c70NhN;-yiVHL0)I7J6d_r;Yy*pO!{L7i7jiUQm5b7RBK^tAa
zoFYvNy&1mVrFjrO{a<JmUgo1dwnO)-aIpk!STyE;{x*1%P8TT$xpwt0>+|}(9N6}?
zUH)#Ae}Asu`FhO#pYQwg{(t_)EQ}hILm=^yb9w6J<png0Ps*x-!v9$W*hn<FgDau$
z-fetuK5hlaveHs(Tif|+b2JPLjMh)X!(hR&oSB))&CLy}M3_mxiFjn+3N5X+g@pxp
ze8njLf~kn-(I&<Hm*D{c0mN%NRJ%KEyajo{mwyK=kK*);&uRBT>lF9VGKHtWTv_(t
zdmb|pT}UnBc{JPT_%kD&h5zMj|L`!C?fJz;5IRY?{>_^=0cUxlstOipAx%wZV2=O_
zem)~{pBFD)B-)p#+xzA&&p_X*Ce{qHf3U~GUi?-z1K8rijF6B}IQ2?U{juv`vNx<S
zA5<W9Gh)Gt26!A?zg8BE=BrF)DG?Tfu;nBW5fO=9J31sl;m)j*eZwVzUDpC^zrYRa
zV>&h8y?b@FwU4f*+|9uK@H|N{ntH{zg@yh<SMXdOUKEsvq-11Io1C6;cYiGAG4T2W
zrchwgr-y+6BO6xMcRz=--YdOv1kH1}EfK4xlA<E(@Ar8BS^W~&@-b=DAX;L&?21%;
zW((GH`BK=tY-}R5w31%^To>)O-C?#sKEzMu`oDjQ?;c^`;OW^JA%|XY5IsFT;G=ip
z4>L2!D&0Ii75ikB0F_lLk{GFZwhZ<edp5}t&oVRqq8)#K1NrEgYCJ~9-jWiQ>vu@<
z5^&u<Pv%}mKtQO{uQZYn6KlKn3e*SDASERwvRR7c!-pEnM8JiDm-**0g#XHg&XP+a
zzhC{F2FgM+I8=eD|9fxmgV!nQz5O3}f%clkOHNmp7wo!q<3&#%Nl6{Ry@EwGG=$O9
z<>%|0DdOH)9}$k4oR+p{gB5k(OMn^gZSLJq_l@p_#(+lN*4Q}aZ0f&{V{m@I<5UQM
zSUo*GAb7Vt-u|$=!Sb~HYwknGRz)>6$A$Kr*w#s$&EVOH&!S#r*w#9Vh7N2k_nA5h
zuV&>8oz>M4MKpL<h4A-wi(akvJ9DpEPF$dga~CR3|KGotq>~e0+<hFJm|wr1e-v#Y
zqN2i@dJ7EV>In5AW$aM^pT9W#=W0qD$Yf&X1P2CsC^X|URBqBI{I6R~JN54KzdHtX
zFge=4I}{9pL{R_#`X-cz4w*JhUQW&kNy6+VsEm#br3g}}s}aUceEX4n-Y&s@7rZIi
zvPUmx<ituFjNWPMKU&`<Hvcw1R0&)A&2w%EGhZ=1dl;)p*G2D!B_~hz_ZPu}Y-nfz
zK5^3>9BHAB507EGDlaep@Zm#!{YMWU3a(@DH0S)UpEtbzdH-~rod*qj{z0+}y?N#3
z<z;07I%WC!$#}hk*wW=U5|BUNtC<7ZBqE}p-HWeZzqXe>StMc;{`)#X|9lQZd;HwI
zJQ9f&c`vVX0K}5@7LO@soqheJOifIkook*1fuE}O?XAXzXcYo;bD*5hQoOI_m%sjv
z;p9Y$LAey~p^=bV(O=;}KHa+WT@XmJ&wu?o^MFkTxe=EbAD4gxMo)Qf-=;n)lP~E<
ziYZfJXAD+~E+Ys^gr#&!J?D*p=m*98+L09Y)XnFFzlffb{7MxN^C!Rlpi>xsuj`bK
z{mK>kBA9i?-i85C1WxxnT184#RTXe^xDJ6K4Igs~vBI$E#p(X~T~;(#Zg=N+)rXA1
zVu=6z{8RfCHe@h7;<BAPH*?JpbPP44*{k=Rc?{dWon28=6X|zvWZGs4_OOtUhY@2F
z6B;01Fjb3X;gL8eDI&y^X6%0(O81i{PsI;(xag>;*oGr-l$Nl8+rXxM!1ciE>aq(w
z9Y1|yeZz>t=s?-V$Q=eed#MXESSDgcFN*AoT=z)@ub0XtmwFfqEnfeJrOHjWz)GFk
z5_!bN2gxXp)^>K_aCt$NhI?X|<Lmd~!}7+&Hn@GFx7^DW;}H=7CUzPQ(q5r>gw%()
zQl`Z5G+GTa-;>ALI!f3n;*kVF2SJPpDPley`SN%TjDsU@=w!lyaatDkDFuLTDC?hS
zXw>RAADx_Ezi3e?^ndpDdwd1_66f+N%PKo6e^!35t6X0+^uHHvzf6EF4QUaEC$}+3
zeJ8*Pk{W^OQK|r3!a)p@SGx;2A3nSqFVTSBpPYgMWOz-+U1w`+#I3IDqvoLOsjg<3
zYj&N#Z#%c&4ki^-lkp(yS+<3F;*$b}+-KU=X6xWf1t`|c<m4f^44R-?SR{T<t#v!v
zOmUlox1;Uu%rycbafN<!FCqvsWg^LKUg$R2E#|^6b8)mKOo#lD0z6)Iq@-Ze-m{eW
zuzXNf#rF3i<Ndv9(WX7dQ}oEDrlzO2vu;>|d+O*go<%S)*WqykK~&PleKj?_U@2#3
ze(T{3VcTz|Q_9K-eUTK1DAR8r=~7Wq`3D6CdS6}YmcXM9MDYDB@Pm`M3CEXs9?*(H
z@3QF$h;eaYqwc~f7QFiF*YvxmS-!W}VX9<hWi{F4tShSQJP`j3Iz}>Hi$hSs8nn1g
z)!T~6tk`rr+nSm#10o2E*N5<{@K@331Y=(H7?dS3|LeySp;4V2=af_U=H@2&%jtHl
z-0U`h#}o+HV1A%p5^n<(?6ae-yxd$|0)ku5g0^m<`O7~7FAyOC^;x*^{V{Z^k1Lf@
zc>WykbOkD*I{*5rU1zNgwzZ(nCt}mmf}aO)jjqLcL(|3O2>gf)8y!yJMkpk*O*Ol6
z-ntdQqLHqyzD5*;Z7aFg!1mwIX@K#bXNvTC@m2h@_zVbw;@Ew6S3au2;K5Q!$PooR
zJ9xN8EJ>unv}!1Q3bf#UkKHyW_d@WP^c$Bv7TQI%eBq44Amv;5f(pM+OT%w4Ul~=Z
z1c{`V6yq&kUbT}qldrGIKbZFd(MbkeUtRpVSdF-IPsn9cz@)ohAt60m4Cu7_<$8iL
z*lmoBnyP0~k5_P!XnZ~TvPvwq1FxT5roX!lbzf*#wLG?vurQQt`izwZA3WeZH%jU3
z?j~*}HwYtS2h*-0kVpd=CE4txlvoyAGety1)~k3J3W}1M)#Bc^zfo8r0~bUu)5*#l
zxc!rBQ}1Pg$O>~Yx5G8=<V3JnSSF3_{}inJp(W9m2ATF^*Mq6z6ousaGA;k}F)Bj4
zP8~Ct6%-WM{JbvDVa7TG8tV`mJA@Ron!=0>3e+X27)3+`1SY?K&+~E@w*L7k3G0f6
z^pxZAaQ#O{jyQyF`uI7RypDhU3UZq<@csp(x;>)vk2rLJbdePmwr>!6p`Zk8SRSTr
zu+Ae7cxZ>|Dz-tI#uL=ia!Urg+Xw0I<1IK%18$XG@V}V{hHp>3*EKYZGDlKWRFsnH
zBH_IZc<~hGTQDgD?<P|V3(Zz9_lFOA0DfgNXu-G7#s&1X)Bop%4zIC_mHT-XI9V-p
z_)$IZIA0(8X@)m3KK|qGwT$g1hj#TLs10H91yW6Y@T}ikW}?oJiAV=)z0tO-cIe>I
zA5B&o(}8C7TJNz5ZWxu=wYAT3$o_3999XAlk-;376dymDPXzCia=L)MHK=yS3WtG}
z``Yzsl}Qiqxh12FCjv1xV3xvT(p^+psiHd*3&nT052L$+-E>VcC_-LGZ%kH60WAWw
zm>JefA^{-1rMrcP7Y8k=j;=0Ui_ev}goFgt)|uc=0cy)64*lEc#5aWPmwPb)wJv{>
zN4P}INY62h64RH%0Ufg~jqMw12jPEq^o`V~!I6;``%;gGji4}xidoKO=lm26D!;5!
zO{EOjbAZGMMxp!8Z22J(5g3@5t6kCsAk^#Q&={{_LU_mrI}UPZ{;zEq*qk1a4JbYR
zv9lAEe0D~XNgdSx3<|20w6sdLcBaP2@NhVVKAWh*`GRS?v*Y104f_$StQ1d|;OmuN
z|Ia!5JCu&rGAO!2BI+p%j#h8S&zhPVB^M%k6IK3x|Bt5lV|lmTVc)g*xXr`=X!SnB
z)YyN^-xVP^GZ!(I5(Y*_pgQLM_kJML-ic-(#*Y2<FQ>=1{}ei@zdavq(*97=t6ftu
zUu`@3urNzOB!-7?-wlO3Ya2_!P~rNu_phnw*NqOsj(7Ep0gQlth*Lj8><mcy<NCI+
zBR#Y#_Y`&-q!{PF)FU%aK0Kiq)`p|R54#qP2y)*XIklcSYIX^k-cdClqy<e{G<9$~
z%5{|(Y)!+JzSYLbS3Q5O5*%(Ueb2s?imrO-G->eDeS2NCgakhGNmnA}f3bi7^pqSz
zwI?Qm{>cKXM7^SCRTJ}C4Q3r|{S(1f-zwFo`&7;2(SEU%HdIk}3JdYPdIV38A>!YH
zR1lG9sU0!Eor5iM7Mb?`jRN|Tj%vce;-cMl17*a~uhLK51o2Jk=c_CY{l(45QXcm(
zDV2s>I*xQjHxgMr!xuK#n4Qd*DfN>=APHRWo|pi<>nU)Meh@=*0ip~rmF@zEO)lEu
zxC8HfDDEA2tzL7qm2&+-hj!d`cl+l~OfFE<`QN1%-7b(gik3G^@EcsFqyMxsAopCQ
zJX_>R39~M#Z<-M3Tmmu3p464<=SV(8$B2Mdz+rWe#NPJjkUqed;QKVhBWGu~3)>$w
zSDn@EfGPHdlL*^PJ6ZSj_R>nM+}m)cbGZ9gExB^Lo~~}z2q{LlVJo5Grfp^VtxxRK
z@63IEXr3dFs+bSHRH<V&9`(Pw2mTSM{4anX&@(nR*4xVn4y0ge3D(wKu*GS86YxAr
z_mk?eUuLXi8>uo45`A?B4prgu=t}fjg~|_PRy6+J{r-q{yL&rqbiuQo!t>pN5BW6$
zVsabN%!sEfVg)VcP6xIN22SoI|D=uQjlo}A0e?C8qfw-?*c0{>NU(?d9>VVX^qZuj
zUeYQm*ncXjYHIXqp9kdS(b4@QFx{85qu*v7S>U53+Uwx7&&z+NOm#OEAKqX!n95%&
zVQ&~asa<8r441Lz(*^~(q`v+KKrQ!z4nbo1R_U~FZcbE0<Q&{yOqAk*HFL1F$uc>e
zm?`9(s+9~yJXi!&*1Li(kmX6I3kbYvY5j-Nz{>g<c#LFB%ITGLbwCL4KXixfG_-wv
z%yPH>+75IEtVs^)x3?+XbaQ-P>FLb^p{ep>SWImwUC`8ABOT>2!5N(y*l<5vjX3#3
zEdk<Y8Y;W@Ek}ts(i}^&c1toeQi)_Z@7cYvF*SO{ZV#k5NvcwcxV^pt-Z?866FZ%x
z@D|Q}IIx~=s3NYm9G(NeL@5UEliiyRFFSk#M7-KxzX9{t(BNR}xt5gb>izv6thX`A
z{q3NX+M5I;bY~~0{ILqHs$7t7gem3<dV_&U3$(Nja&pXb;J`#-YXj4>jKF{ZV_|A)
z6<OJO(0ZEqj;<HR-(TAC`zy8f5`VWAfkhXrCv9i86qrN!DI$1^Pz*VUWtj@`hmtSX
zT|I2L4l;~-PoG{()MaIL(Sg8z(CljaK*Rv<E~f3{EJBNnkdP2?v{ZuCMJ3wOW;64R
z?0&gKXUDeG3AlIT_zHlsO~7&02`ZEPF;|BYblrWp2$z?aZk}7y{O3VbZa;@?7;*eh
zb~a~K&aSBp%?;_jfo~*4=>;5Cg1;WfoF`m2b?J)M)|*fr8Mb*x7&^+VSi8jqCkoI>
zgJCe}4sfussqrW&C@!QVz0Q5aa-Wc^r#OBi8^kuLE07IRH9wErbzpqNjF|r5{PD05
z9$4c8$4^B?W$jxT89)rb+kHS-&TT3KwXP5s*DiRETs!{^KQuF=_tsE-jA38`6umuX
zm;?eXYX?M-B%)r#xS$zi#6w!du>OSH8NSLc>~?wHa~EaOsN3fz>{9(93$ks_8+G6e
z3;uZ3^{xQdfHBbvWjFK;xm(Y1aYkXzodekgnwmWja6wJ6y}BA`*W%?h`okDn&kx>P
zkwhNB#4(~pJeTrCHE~M|DmSkTTjX@-h{0b70~nS{ORIbJaN<_ivg?;7*S>em0|&b<
z8nboQ=jF#>2X*UFa0Jknl9-<$%$(3jip6JSWE^IX4E}f&X$`b9sDA*l2RmF8PU{7B
z1d=^V=q0fQBSGvXD5&wkb(_3yYikS2Gg3-Q(2DMX*$KTfS@3M+U;5~ZoVSgI#_RQG
z`Gke9F<H~aPW53&uX?%PT=O+KgMsyBy6*S<D}SgFz>1}kZ5ME6PtQ9oqkMOQ*=Umn
zw8Wnly&lb0{-|DWA~Q(esPnCHbmy4^kE?+*!IWCsFYcw`<%NaUSJB2i4;q2W!F``I
zd368}9!d~@p&%pcRhgW21s%7&Iv}joPUW+nypcHvKwJ*WHL9giqSfqD7KBB$zn2SL
ztBIiB!a_7uYv8t4^C<0`N`<j8jhiu|El#k0aP&}qwmKAD$s(`u!fe^Gj#^`2xsmr>
zUfcnh=yPM^y_Ju78x!B5b8tCWbp{6$PR<HwkE%sbw#`ygryXGkeiTh31#~^?3!OS^
z!B4d{W$n|#T!K9B7-r_eFy5u<q#I~V?PGr2(HRNED7{NoRMZ~$)#9g2<#@)_x6I8!
zJIzmlIP2gR^63sHxtR}|I*D4Lw|ou);c3B*oROnL^X5NXTZVpj*wH5==SuChrx0;+
z44uCf)l_0QPZX$z>hpdatxvU^dvetlJDXc)t>njt$!5xt9wwKufjdey|Lt3yda)|F
zWo^uT2r5DW<K)0JH)-jHK|ddP_oGdcczGZdg1k$&+Dty5?mJa}X=(UXOiav2$`@v4
z{^cvsT+KJTwt@W#=$kP}zea_If?Wlc;{J^sCuk$S_>68+h`1q(u5QiT2jf{A%ct9c
zNY_iM3JqseiC#dULAQPz9s^>sw8<%r2JZ*&(4yelHhEv%hJD1s9UaUDVwM{`ezRQW
zJ*_b6@D<4if^W0S7RakI8yg#mF&+eiTY9Pb$6|0(hP(W|%CxWn?KlLN!FsO=q9KTb
zw`KeX)9S^AI^i6Je%ac>0_;7VD7SzF2nj9S9ET<#&R78t&rx@9JV_UJ^}aa60BcfU
z_*H{@^LixTIbRgHV3SGDfQ(Ep7hh!rcH*s(wQjWfML50z7`({x0sFWwKRyQIzb1RV
z`kla4^L<0<(`W*nr$!XyQ-for9~HjYpf&&Kv8ctKu9Z%8+GJ+lfpR<FWG4@&&ivCi
zObQ`wE&Ni|g6WlyS8g7R9JP@fR0N^6Gn4VsJ@~rTMQPYZuoZ+6yni`Sj`*wEDHWXJ
zL2AIM*HBboPNSX$VB`Bzi3IM9*(>Vvis+N&&jZ@kCrFDLixXyXUK1C`)pr7Asx013
z?kjfIrBITohox-14<9W;f6p0TB}I;g_EXhJI&`7BuP2IC>>@~R^|j!W2D@v7A;$oy
zZDZf+4x>R8=wp0VAZRr<G!%)V7MrPG`}{Xl63_t9TnNyTi)m<#Llw~>4;`k#XcufK
zU0q#^sGaO)oo0mq!Hm<?qvA7z)ptPtUJi{tsH{f-(=J#y7zhAXI1I|IC(0=RfnBCK
zCknKs!*0f=`COHE@(e83FCxe$pf$Xi^1Vdkg=p6Ew{OC)_J62R>SaDj!9j}Ys;sH$
zzB>5HnJ)V3Eg0gVqIPC9LGsS1{Vv+t=4^jo-yP4|nwm((6R?)DEm%xESRZ3z6nTZu
zP6=E~KuMw_xy%RnMDHbR2&G^9Ex<(QIc~XubJq(9?*XxuB`(R-+eghnBxPk`>1_96
z>=+;a{k1qQ*70Eu`yZe$!`$IKU*T=n)Y|H*%hjd++@EBWk?rmWZbRh8%d?H$?lna0
z1EYfz4Yh{NE*V7eN&<1S0@^R%wz8u|8okrkwjq<i%k(+*e5&jDt(5#zVUO|yb5zwb
zF#?8rrI_z5KAS8}p1u3X^x_3e>BXzl+L7{}-t+gHC#Hm#8%v!bItfI9Gat@+BSr96
za_xdi(k4P533p_A<IHK+TbPnn(s)iK-H=e~?R|eNb}OcFzdHIOOs6afa(c)Kx|GE%
zXKYcK5HxRTMX?OFQlo{M1yNR-MroCMY8C^J7HFRhp2r+!lqIUw_LrxY15j{O=H%ra
zNO$H)1?lT^<|XFngnUtv|6;Oy?U*j35fB8SOWxgJbUFy*7ZtoGYRTQf;$wJZFj;wM
z^JBF)kv$C}VETE`G<u!(kAf;Sh1I8GWIJ{HBsV`}<v2ijJ~4+((=gPP>py^SzdGZA
zu1iQnQD3H)$-z){#w&l)6^ed~dVG`eP5Q5I_ksd!-1dvi8I&fOeCp;R9-Jo+7Qd33
z+;X+{<=trIPZ4xp5br#%P?y#c0m^vYb_uqn6~(tFqlXW;<0-uRUFHaLC8%ggy-D;Q
zOa{JSqfIqujlKyp4+}v8^>Q%VhXNSdyId1mq<a0?7@Ci&Vk6z%E8s(=n8?=i3VRwI
z7steUb<k(yYjMV^d>B!^L4#cfILeP~g?a9^T@8V$S0CVoUe^;6i@{{za`Zx1o0gKI
zS*rD9br+&hApC%g3>xJ=pV|29P3qZzY#gI!FPKb!P8TG@2muB<a415|d0~kY^FQ}5
zx*g}MAN<-1KBOE2MZA3Na}DEMh0*k&EP>0LKqL`(Ig3Ob2-m)I7=MWx+i)JrU)WTC
zt*q3%{7$N-rgk`nK_N6d{<|bI6QXrY!Eh+zEzZ|J39LzB1gxPp^bX6tpH&O2p$u+s
z6JRPV0q(6B6g?2Z1J66SB0u+fFF$77hye~Ww0+#hok-`ic|RsvU)^y-SVNFrer#bU
zxADz}dKbti`$uIk()tN-7WYRRg1Q@@kRcahrp*Vu@TeG-h@+@Rpn?|1z$E3{1>&fj
z%h#fqVBTk{OCAkiDeh0&J$%>~wFAb#5X_=tIKKdk51@k{17@ir34z<31|o12{Aza1
z41V_V<<XJNY7(MU*zWo1dn?XR43$Re?|63uv#Y}D?tc2g$J_%-6w!{si{{D;;n~E9
z(!SQ))n)gQ(5h0$cl7f%-Y2?jmfR6O3;tcq$lRN+=kXbxZ|cyZ6VYFZr(z*)c+haa
zU#5rF+5(M`;M2VZ6x*LQCO_ExF$f-76n&2Od0<oYmaXN7V%ElUWZ9fIo(rM}hd7j0
zdZU>HgMIf5iMnaxjj2Mgxkin{W>9_xw0<~H?zepJz&3$HNGNJMr&sd??s3BAt-yPz
zPyMj1i<~GaE51BGJUV(gZ-8xUB?^dbP#?5SVdXFA14^dzWFHrGz?#Y7p|yjc5<u)A
zDrxzFFfh2fuHeDU<`MNgLfWF?O9r<jZNlt<WaSady#+c}Llt5xjBIqnR|Ez}s+fyi
zk2`CMQcF6sM>=W)$_ej>Xbx5|AW4d6x^uKV_#?T7WQ>cqGrzj&S(#1wh0gCxmA=vP
zHNW~~BH5t0BC#loUo~yocZDLS!ptf(&HyU^l+OX=P41PpZzPd|mA>*Y$n&WWe>k4(
zxYKzuzPFwc%@are;f4b~*V=;G-j{GV)J|>-u?1p1p785{?V;m4$@p$p5CM0=)W2AO
zD-fyL`(rizAin_<3+sm;^6S=C(YdofS1Yzpd|r9Awt1Z{&D`Hv><W6|b#lYA=ZPfP
zTDo1FF_c_^RcdTzJroSV;Y8{fSP%vzFb5_L2I0Igk@YXtZ%%Eq8Ogp`9h8*~qtCY~
z^=$iq3R#tbUrzxg1`am+Z+F=oeeg+!)!zW#f0D^SWVd?p0^BR1Qlca)RHg_@n+Efq
zB0V3UD`=k&e~sh4vf10S2Pmr-1g<cA{5jmLlqG6&v?<uy+Iphj<HP44jqK6><q$0J
zqdvU4<<$P+73;Y_#DkO>e5iw?6UG>mwJ(mL$c%jy^y415xdoHoc}WATaXnb<0}1bp
z&uo&w8uJa<v(`erCU249ejsBd3O@0pgM;BHj#9_qDu&+D3a7VXg<BdUv|xlEWI2Rm
zsHZDhcJRb(0424`+&}$%vis#0+A0|->N|-fW@BEfk=O1AtII8b;e*YuC2kh><!uj{
z--n0bDe$pc$r)u7e1g#*&O8-DiqJ3DA4{Pot!+W+EJK;2?Ql^oq!q5@*!3B{n?P`G
zbQJY9$>jv+;ADvB=2snKsSX3gUD`7ZqOTN5He2M$eOO1s+#T*xtd2fc-BNt&+GEwe
zyf+FlMb7%`ek(AV*Wf4V;}149F-#4sNKkDzvGXZOU@;vHB|Q>i$@e--*|k%5WxBVj
zLaMEyYUFoJpGy4d9WRCRHy@^hm_h0VqTXDFu4o#yFGduea=2TKT-wTo3Y#lxiOu5g
za>38Tsy2JxY_f7Ow+XM&NuHPvrU5Tr&TH%FfTef~1Z)(^TDk8wF(Nj7c%os?;JU*x
zc&j2em&bN49VWqUsBSqXCGXG@z5wjd6tO$TZPstpqLr8fPuO;w<!=Sl%X=Kp&gY$F
z?T{CP@}i^^9~C7mxjlLKux^3PbNj+4C~tXn)A3t=`0iB<SFDuV8d2t)h`cM+*X1`i
zB_j;nl#g20eD=`Hg<n=(j!&7p9-YnX=>K5573MHtpR;kN-9LRgK7orsIfBZ6ZrtCI
zL2iXL_xE?2L*_TZ#5r^p5${ws-Xrd9SO_M-L_}Cv7&IT6LfHH-01RiN%O<T3_Y<}S
zdl<El*JONgtm|1#jI3TK)atJxJ>xB9gsk`qkGVo2{+;S?qoXE6>F!X{y|1i<m_2!L
z(Hy}zf@T1E?c(C%L=Jt@4Ewdlat%c{0m_FurCL?c`|NhX=ma~ry!__+r*T^?t)&${
zxfQSr=in%O(hstbHoL_o$ia|_q72Z7tGR+v2(F}X#Nuyd<*%;@T~A+?rJp{%o(REc
z;^E^Ja76_qJTy=rjC-&nU$*=?4j{0Fu_T<nG?YtgYskio7b8X<%o@My!@A?(B})Zx
zZ<8&N)~@aOa(4J*Hga%rxl<pL&wdYJyzOoCg|NGVOK5!m=WtY{5T7qtcYf^2Cx3&I
z(nBE7{g%n+4-;9o(kK#O!h_|?6LQtJd2}4C>_snV(~FGn*6n0czY8U)lET94GnO>`
za6X`b@&ILUK#o|{<M`>pVObQ{65m~c-F~``+9FjY;`6DuzFhPKWinQsON_p?{c4dB
zM3mVjwx32<KFsgX*f1z1C)wtbBB>Ob2#EF<orTygzFT{S+%;+9uvn75W@c|Mc&FZL
zee_2H%f<W&hk+#p`DPEc!JQoXDzu0%`Na?1sN-?G$p;c^@emuiq&WGJXh`Kjn=I&g
zRGOe+ud6!)=QX&H7OCW*i|Qs~7V$7DE}8lVAXQL`f9>h5I&oVh{ic3F@rI6lCU!U<
zftA(%JJW?~Nhe!J;N9MNpD4j33%m^N9g4Oft-N~-^vDl{(`RDszcV~S+E68xHjT9m
zJbiPE;a7IFu?vc1&HJB&#)5=SOQ4BSeDr7wwo(|_`O&mlPdR8E0@)XGKXh8$K2BDV
z#05yRWPgJZ4G0~C^V)7iFu>Hs{Yx$b>^-l}Prg7EWPF&Cnz{#81}H$z;JWv+4UCs3
zUDXPeVT!U280ME#QIqaUC?*nEE$<`*XR@7mn^emov6DP;n3+cXOx9`x6h&k(wRz^&
zVE0LhA!8Qd8hL57diG3E@#J`ZJ%W_q9iR({`Jh2|$4VRwt^f6_Q@6^I73M(v!JS=Q
z^y@`TWNPVSByFy_)ZO>+GA*%nFk;=yZNWCzwJY!uIMRqQ0ZK!A-_~GaV)$ehSst5;
zbzsR<k$l}^Ez9~f0x_mz{_P_NVH4%vz%xcforo>^R7s~R@reOnYIRk7gHa)t)d?l>
zlGwENt1SiXmlB=&_CyAKl<#ZxwI1j$%1biWFc+gVRh7L>7trD$$S<rOQ^BF6Pznvq
zUnk#J%+5?e&s7`B@WsYJOLl|jNT=HDBg{1NUH4K8a`rqkun%+E5B;c>p3(ju8Ik@y
z$eMjv_x5cxCOSsZ0OaR1HKhL-J_8}3H-xaz$)H>Azh*K0mF>Fhmo@U!q_k`90-y3O
z{?Ko!5$9hlo!Fl_Rq@b!3V-XBj#f}TtKtyfKMg7*rn=w>8%D!JsAsv-9m&17C|%X|
zOS#63ZoNgVW%QOTPdT!o404971P)soHv3ZgDSA%K6K|)MUu$dNslDJbNbihifc?^C
zt(u$n(<Um7duC@q*aG-d3~z3Fi`{-5Mk6AkKFueC#O+WGa^TNdZP}360fy5Mu|mX=
z4k(%?pBSXS1{<nVW$o}>e1XgGTD{rxcrIT)4s4p8m%8_0xSJ(le+>}=?n5Hvqy=7`
z(wsyOtbncsSVqf}L$GL@u6<E(9%42oe`aKf$)xWKu@_M|(&f40H>DDV-{ihiEzkj&
zu|$KlCkO-LYyllWk~o3r3&!L(ozzTXVqz@>Ost-#`vnbXW%B0c=JZSJr-@>UpZ)EL
zeA|)+@<(?MM`&1hpDsc|;y_Y;*JB&lgmVxtE-ro!rm(-gi#RkRg&^7kdm}K(&Oj8E
zpYnV0`O+iF$OENaUCgE;$3N0M>HD$8Xu~3Z9>gdmDU_-{S=7!u77GYrR$w|xM1B5w
z^{Ha7S~Z`LPPtcPC_+<boVWbctd!NlkZ8uqQCc^iYJ$~!*VZ<*+mqf0Qas1uD>+XE
z;zWM<-kp%sN{vuJvr*e75h5U%&aLFZewo|%&ESzWcNZmk7%pjZV?3aSxg6pOVCbbS
zL_Q~)io<Deo_TdgBjI>+_g6Z;`Z%C(9mfEUA}ijki9R`yTpQ1XDkz255>ATSS=b5j
z<`^a6>o+Nl#!WhT-$Z$TzVr=U(DE<7dy(}ZS;*@Q>uYtrm_KU6G(Wc<Icg^EW6}4H
zoc<j%9c`HpT(20BKjFUJ3@~$Jp`u=ZFqff#G%!pJi=^bx&cTWa*xgK5XJm>ZdU*T}
z{Ib!|4yJLjdAu69p2j6j2+!g{@s>VN1=~@OZVytLy({F7_UuBz29Xv<z2WQNPp5dX
z+2Gd(m6W_ZiE~Op&)IJ>IHdks+op&&zCL>GC-u<j-UA<w;f^!N5Dl~tc3O+Bp<a=5
zMWI2+E#NW0|Gs27)BwalOQ2o|2~ESnDTUV8(LqUS08|D-jzJ+WZ6F`cz~-o>Wd)L0
zm~;d7)&octb|n7UF;#X!0S1G1oA(D8LqOPQux}+)t}xl=wKx}scLa<Fpf+1b+`0RM
z{+SS4eGG?0vggb<q?iry`}AiN_IRm0=D%8Bd7dy|r)Tbd{OoooAtEB;jYR9~8$R7r
z4fcp0tfw{pO37CW$vKqIN4|X{tZN6dhP@&vI;0d2VOJ~8N~H=D9y!{Yu{Si11uC4!
z?_S&TqzT=k4)DrtZfIDLCHxitm|VzyDZk$K0o0?uWY+;QV2^A2@+Ba_PrOjw@WCSZ
z;P4P|6|<Cp`wzY-t*GJb|B)u7(v4+gs(;9%;HN6tW&eXfg5MrGur5FUCwU;gFT8~M
zF!NjU`dtw|E%BfLIi1k8KR&xL&W<Kxz5!3Oo`($YeB3=pdto|^(CIITMKjo>L709=
zG;OW8uv5|!r2Ax<odTl{iPl3TH0N<y(Q!wZogpK*WhoAEtDUUhszv@3qRcqTy7i-S
ze160!fo<T$AR;5skwW3tUZXx0|8_IXXZkVIs+P)QaBP24toj3zUkke4soMjuVG?Kv
zx3MULS;0(~@;B*XQC-W~#yUee+xGIZ>2nr2chNO`F|?DM*KB5;3pN!{&vX)`^U7LP
zJAw1()cc<Ri7g%M<akJ8gOoaV$xH_uMx@xs^JtMDQbcDQ?{lwwVd|*5lQveRIxQ=f
z6RPnZxA(cppF>__)uM@c|FajSv?7=Fr)N9yapn=M@18S+vt4kkx4x0~?<JdvE^DIw
z+K1yD;GLTkyO(Pad&>E1rn)c7KgpFk?OS+R6I<}doZ5hO-<k5^xe%GXaZgXnUsday
zg;rm3;e*LH;R2=Um5^F8m$8Z8?ca?Z$uuxJq3N}&I6k`Uz7ztP1ee?H^`a=?`?3a&
zQWCpv%-dF2E?C}Yo0|j6Nn@Rz2)3s!!m?46lw3v&kb0f6A}AI7tD!;Qd{RhAQ+neT
zcl}EOq16$e2pP<25hWfXsWKh@FAw_EK=UW)u%dExi3m6&7zEdt^f=7PC?w{uSI*wX
zAYlNwJ(=4SjBb!3EMKr5=7Odsn<m)qe9(D=agZjbs0hHRA<Z%!sa5?CzXCOv;ZyCI
zPQWLC{ImmU0Nrm&1dFnhrNxdoz<D#7cGh%c^+-AGo-?q4Pf`MFq~<3h$Rt1ADo3EA
zYqFlg&3A_sglh9G7ELE<vcoTVvi*bLw4P!XYjw!jS#*svO9t%2u)v=bO!92U-eP=W
zvtka$8w=a&DHW?bJcd+KW{w((E^kg%>OuM7+lGj`b$g^U?uyuND9HT<MJhfJ1R83-
zR}Q~-;a{2fz>L_d;n76OO9!by<44)<s0>rZxuA=)C3hCLQt>s73ec9)O(I$?*hRrf
z&9P)~?4+5l!Lyd6yH^!6Lj2u1?Xy*;*Q&7s^=h_`FBVD^!jvwH_Brn7`C=yjkbT!9
z!cHn5i!jbgJq%KY>y)(=wJKmz0ILV7NMOxTqU`kYqB$_Iw_HDjHLNqNNWB>Mm)m;_
z_R_L4C~m^aH$KKO<#ZL8f6}yC%J!fQfXHYV^KJY>eUSnlFiWy|HZv}j{3FT^&II&U
zKvSx&wx-tTMSt^&U(~=&28T%O=M+(nYJ1jWmmXvigwCn$X35%;XI(lK1eputnncg%
zcbk0WxA!-X^XiK8UuS09x2+;$M3|UjR^NRz8S5hXNS0_g{(__CUo4=MHzZTU!zG*d
z$>WNK_u7S1YlxCNgC#?q-T5QYYEhPds__I<L|=I<e<LJf8hiYf`heb!McimGtIY^1
zobc#e$T|Y%$o99gphH!ES{1*^fUMH56X`bqhnSt!`=S&Y9v+{G)A!}e-j}=}s16{r
zr-evKULJ*F4Y()hpzNmdEY_(VNV~s1GAEGe>Ij!o016Z(P#FfTeNFV<ytUV}<#*?}
zFkZP_ibhBX>!}m1?eg-n<;$0y)#8$p2xi3Ifxf<y?~~)vA)q;ml>Zmh1760ihsqko
zs^&eR=A*m`9i_UhUJUe9&$;<%(%S>jeuiNY(%Qx`T_N@aQ%RqzL*|(Ied(1UeSmzl
z8|-d+Kfu5UkS*ZU6X4{%bo>}w00XDjHBzW&XSeBOF=g>I^%~b8EkW)G2m}%mZ;&DN
z<*?dZ@eBPAPksFg$<O<O7Q1-XmX`GvpIN$%wGls$q>Dv|8=||s=k;Q$WTAGN^gNHb
zv?pLNHnWg3<7uuLNAlxlxfg*SPXEos%pvN$fG-@wgkPx4Oz?K9<n7qV$9_y9yJnA3
zhmQZ07Zyg8-<jP}(=lOnt}docOVNfSZ4d&6(^Ep^DLsm{s(1{;etZ{xjEA@Aw79qk
z)m@v@I_`Aj3H6!{iLi?`j8}W|AeX+;r~~2T4NyxVXYYM2!RpqVr#`z2G)^7VS5}9I
z+uzYBg!J~o$@$`77{4J>E=As3ywY_b-Y0fwx8~^iQtyHe+k=(%f#gHFmC%7?O6rg5
z@mG(deoPQ%$_);*KYR4C%U}Klo;S(JI-O{CSiRe=z(Ur~Oll^)`hNuMkR2`9hxoku
zt-!QtaXfEq1$>{pRxC$p^56^<^*EdaB?5%46vH&D!QOP_4Vq%xt3Q$FI9P|b04cJV
z6Um`lhl&EwISE;=?cV_0W$|wqmiu-CakZo&B+nDMj((`K5C1hhcbxi7v!Az~tEkw)
zhzEFttaA-Fx7S6q5fLw-orAW;w<3s**9?CPL%<kY1ctoPnPVJ|;6nqQ9#R%XAru}I
zS!&QCSq4G!(|u(A2A3_;NvCkRl+vf<IJo}Oa|}#qlH3<C%*`nY!$M`eH99mrJlxqy
zTYyYMlLMs-n;-R~!(1Beo|U(Yem}w3?G7H^vRP2aLO4tcS@jxJQa6q+ADJ~_D44~N
zvm*1}{3R^(N;P#7WvdV@byM!9jx782Qt8;ri+Or@i}SD`J5oE~`%AA<OC;lSAio$d
znS!Vq$OC|~VPlYFk;a-tqCbF~KGDw)QOH##39Lw(U;Vj<+y>)e4>xe-5g?q#x=;W{
zzwOr|l<l^)-fNEOl9be3qa#_pPG%%jIY~)G==aHqNlA5Jzyx`AFRZLi{`{FJR)d_7
z`wfLs;^56oe!LBNmnZE{Guecq1`^rBbld9d?~gV*{J=F)K$GOGa0QKAFV;}GzHmWS
z=pZdrQLp_%4OzJJVeoiO8XF^{Pu9Cd!>;rgTaZZIR?DZDZ#CJ>p;P@Ub-zC;5}fTP
zPc)T`RbBi+F2Pq2L~GXzjEsYLQV3*tt&kK;Y8Gp$6RSKKCPNmfP<J;vlM36Hx;hGm
z3=j=Mz^?NZ(y@T~W`30W69Q=MSy)&g{Mhft!J(HfOyl5b@8W~#)~2v9YHAGheF^#f
zC%0i%85|mV9U}mH_4a%l+WOk|He}`za!V9-00OAjw!ON3dfWL5j<P$L$e-Rm&bs9M
zY6Ky<K-GYNBhU3whPB<T2~K;-=k#d&4PK|!!mckrxG&E^tF!hI_=dLOto|k-j@YG=
zDIkZ`uy6`zS0Cr&?F^U-ECyh-Fz}!Jyk-X=(cJ&~UdWG5;`~WB1BS!038fOtjDmbB
zuR6&Uy82KtSb0I(K%HAvr4X7|=g0`xdTSbNRPEa@CM#)51sT^BDfq0Y?`_XLvS_8&
za>RDFlQ1<gxt_wIJ&;h+N;rH&d}oNprvbbph$QjJz@r8a4?pXYm@B)jygW0gFAXwq
zGD|Zvz1zHBrQ{PmJ3p!7afdi~SrEA9-1`H`EY_1Mi5T&B)tXZL)mQNustHI{fX)W|
z9M;-<Cc|wYvtnN>L3<x{qm9cV_mcyKcN?W{LJE4wU)oE0Pt|ju2SY<c*Q^!$rEZAm
z$?qEy@!?Qv*Qi<BaXvaZg3BGtNL#Kn)?kmfz6;Pq*vzQn5y4$rYfrZZDXD#e@i6?m
z1FnmISXA?2+VMDs5x>~%sqvoT$`?E2`5u4ESgA(QucHI!rRvg{L6D~cp#|+bZ^z3<
zb<9$!9dLWwq!;>T8|NyMZA|a-D<<qc?);R(XMCNFD+eZ;zkl(2Wilx*c6K)L0Ba<(
zXAKrGTR_1i8UgOPIM6tO;4Rk%*fve?-q8_ZeVaEylhgt&%iX(sBqo<v((}pEcNmj`
zY|q8lEoB0+s6a4M4N=1P>tBSQko|LqsYd9Z?_d{7Z_&~otDH>mbXByW#3`+EL@!Rv
z<JO~HU3q-GzT3=;nm?B1Fy4lwq)b8R9FTW0sYGdSgTiSEg5#2amD550zIN{x7OSR{
zQS5L3Juybc)M0+q08N0kC$)?REMB}|ZSnO*01GX0N=h0=Hz+PZglvRZPW?C(OUBs=
zA9wb>C03LRtX^Pd@}i7{f@lWY9}f3bPj^0V<U97O!&yP+bV1N@p&=t1bsPSpt~-6L
z8S^Hw^W=78nf9X<<4{tRcOI{Itz7<4eA1`x@`}Or^3RpIst;pX&brB<C;s#elCcLd
zpOq2p5e-et_?$1l12pyehB4|0%<mVjfN%gposl{lVMcBC-k~85KE4{oq?dZ%Kc}B^
zA{pn&M8HJ!2&84O@xug**q+9jQ6!*9t^VZ)z|tYp>H;212q4;;t~Kvm4qN{H8w1?@
zr;F8yHsP=Cv{nl`S{&r94rTb&e{cHTUJhJ-PTjiMcIx>C`{i!4Q?3d4d5sDK3P$=|
z?xl+Vu(wpAZy4ql;zelCIbbOF;NH)CW&F6Uau%WbZ1d^Mo+xU`ggva0DejvLgJG#S
z&vNqfYdn4{q%<}|-y>?)zp%Ep1`)~)&7OQOzHOfD<xNkA@VX5rb7P$C!s9ekkG3oc
zZA0DjaRqP%1{jH5t5QWu%Jk2X4fq4%sKLx!16cL2&VDcTpiM>r=CbmFXl8mEA`u$E
zE*Gc^Fi5Yj<bqMSa}eg%=@a1aNcRqY{#>~M-7|!u$gJdlLZ|%+*KBlbOx7FPuMSAR
z)Cr32Z(ccfMh?-F^+j@8qV&qHS<6)=uYLGFtL+&@=T#_>8p8~+s1j<8lpn^W)bReq
zCgODS%Oz#A8G5e8gcreLdX$sj-a8)UN2;!=nHWZW{^uLbAT#jB`0w58?R(tBN=+>e
zJZq18q+ng_WdPJ4vp8Vdi3{%D+As&-x4yY}%)^5Nzy7aZ^HWS6FdX!PqAf@mkRkZ!
zoQNbMA2ZS(!+IH0RK0bv0CefsdfpW+>LS|Ql%$GEjGO@0y8OGWX8q{3$)UKPXu7*m
z97DYi@iNKKuf`Mf2btaZ`-^xi5PuB}mfU!!$=3SeRq2~V-`H55DZl;B!9lhHefa`?
zm?CQpSb;Dy>8*b}rjk4}uKUfui5&a>_oGJiEsNr~vSswzo^#I@8%ZB6><kB&j#YlO
z&BAurSd?8%=#u|PhMzOQY}jzFhOeS}atl;b$8l;%#vrRnP1UJxUV@I+#6)#Ejg6bT
z>Lg+bk5ArjM%>BCDKM56!bF%`GW@B?=iE$Usi<VI1<8V0(GXo`!frjRB#+Dt+?_T0
za{jC@e}GxG;hgTS9JUV?SQcJh-n_aLj<W>~Bph<rG%JW#Qc5O#mY9__5&(uHCNE#k
zRT@j}X=^aoL;VMAMHXgeuz(%>SgZ>5PB-7h`8l{^uCA{WkdQpH*2@NR2Q0iqK_Ym(
zbl@e8Vt=SXe>(hAk43A}D2XE@BHX{Y4=`NtLO%h;-P&3*7=b~Kwth)GJFuhs?*X36
zFCH?BKu>6}<27|h?1(P;mh5VFEpt46!1&Jy=KummvsL^@cqQTczE0GTEZjduQ>xli
zY(2$u^X3~!`q6E6`3`5Un;Z0t=^13;>@Wvoq_MZ3VSe{oIV>z}2AWWKPT<`wt*y~(
zT~_+5AOi%(C)^*UYOYnH>grb0HC36JqL{PQ<{LnXEGsSTc1*admTC(#xeNc3oId#+
zNgx$sVYpw9=*jLwX=}DA<hC1KSZE2qIUhg&_t{yyx%II^`wt30%q~;G3+>kze`&66
z|AVlI2kcGg9}f9qH<d&1)8uPPVTccB6TJ*BiHyX=;#6se{-1&Cf*KhPi-qm&FU4v>
z0P>h7W#~7;7Jx>?0Xa~zPoC@zWi(&QOc|A4-w*!4bqLJQOGqexg1w|yS9kSuAH*%{
z6$WLH8p!A_c?{F~=nP=H@1pO4`~1F=9VYvSmX@`0@&71jr74-3GilH<Fgkpkot;y5
zfp@<M=QqbC7?hw~oieK^7poRfih1t?*?^aK49a0CzU$a1tN`FcuU^HSoo!C>w(6H^
zaRUJS;K2v*UjljrH$6SR3<E-rn7jY}k1Y<p2BfGjbFB#Z&!AHx{>y0xTD$a|%#iQM
z_&7fe&D_NCPuRPS#w7ChKp<oYmZ(PnIm3r#8!RjJe`p4z=;G2+=!4lQhYG*_KKO$o
z5&WTe_#F(PAGDkt?Ji2uTvdLlFr0@oANZ>qKnn#oNZ81hUgo@i|GvC@4%R1tM&%_X
zqeU@}@DKm<F(~0<aB*?10jUp8M2!*w5L+pE5cyMmrH-?@CpuhMTr6*GZEa+feZrPi
zQBjEs(LE?vJ6l`q8IpQ><Z)U7=Qd++Bi?De>#gqzk)n}+jq(e`!+`=7JX~S;G6Mpt
zlhBCqcXS>a#8J?qir6p37ZeoK*7E<4GT<FEPvdBb#wR#oAe=16W~OfRo$z&WBpbC2
zvj9_E%cwg#khXmV3-F*G#xO928y!)B8`5T0QIM524}X6;2j<Qn<F3E}IXn4nXlO|<
z=ZW5E@U=APrAQ)+xh`bd7Zov!iCuw1r+-(0x{3-jJfC5NpQkE1-oY*T=gU1&tO?Wj
zOYTF(_)2?c=KyWE0@_6?9pKpoj9&~C6#o17eU3KQ(?}T=cmBl!?%M)~sJ+nhO&@Yu
zgZZaApa(;^CXC1_Txc=z)%<);0Jmwyz<35CTqq-;_JOqS@d`sukPVOjW?5nIlI!n*
z)hEdzN!3}@0$OOyyAUq=KNqO$d_7>DjQ=@!$XzF}z+s5rS@B|mWA`|F2?(PW&!11%
z*^r4YGsmG{k_*_iL*b4s$ip+x-Q57n-Aas}e1M>$h~`0?B7~F!IfbAkhBBzyxQp@O
z!&@*VmGHamaDcrCd&Csrx_WvonVB4BOr?_l%D<6ff}UK<Rs?UjxsFOHUCU8|z9)^&
znT3Rh`(vtWXe6Kn^#u>3ImY53nf{Zv&4%`mntIU#?f=rCoNMn5mN7|R%N%w8kxhE^
z;GB+O8Y|@I9#e1e<lokI_@r+a&%pIxHHqZ*e<G{?-lxV}|IK}pz;?&~fB21gqBbrr
zF0sVQ4San3|2{S(OkKWQqM|_Rhll3gy?c};(Ky{c;l9<?xg{mlZ{L>W(hAP~XGz7}
z<e^43Mu9y!C{PB<dI|dO-rhw5O3H$=vhti9g}{GwE|9?(cZe!k)KOW<T+;|=wfcxI
z4pkQ5@G`0Y`t^=VH3d%E+eU+z??Hz~=!*nOJ2>yJCFH?}(Hs)QR8)`Y9)`^Nb~A-r
z{=1;_A5Qy5&-j6u6Uz+u+G7g7q&?)4sKY};!A;e(oj~!w7QLhNTk_^3m62h2H{GOP
zB0OdLD`L5R1GzXpa>?f!c#T9&9{<sh(>jm-z=q$)X2e<XKhMsy*f#;|W5ZoRSgO<J
zwma?rORfDn{njG*UGFI{ARqx%HSJov^Uv3wA)TcJvTdc$)f=~h8rSyMt!&p4D^aL|
zrkfgwammQ8NsV-Lbl@?NXb!Guah!&tQeEe4pP;9{IA4DX;duYEO3CCVIuF<H#6E8I
zlavi7hD=^hqNFjC;H>#!u;|PZa;E)_2-uYC<+*kuAq;rIF84;<9l(kudadN0{#|Yk
z|A(pfj^}z0-^VqLmW;}ZWQz)svS;>Aq9i1{P&Nt4sEq88y+<U;DkCctvNs8pz32CG
zKHtyx_v@c?9_Ogu@7K7W_kG>hIAn9es~cmLKg<+(?VyqLnY;VHSCmwWWNfeajS9DY
z=*hr)VJU%Ki~!>OGW9DSuT0;9Y^;9YE<q@F9>865^U`UdkFS7M24Win9|xi{psJ&P
zJE`&9-(NTH4pv#0@Y<cTlxB(MG3oulb*tpD+4r~2s2HLy4sm?ikStiXRy*Ryx}fK(
zPM`ar9214k1W~!h|L-#iKG9<!La&5;?T5pa#pa!TMvvE4H&2PU)WH^aV~OUDxvm)&
zf|#de9XfM_9rn}SNK-YqR*v*RAQzdsMX@-8gpt?YS6omn1@#<Sm?Ck{XIN3A-G(cB
zZ+g;UemE{Bo0w>q+s~9Ewu2$6q9V>NXQ0Ae)MjiJtmR{;E)ZF3XWejGUrYx__7#o5
zF#Z&9e*V9UC-}rd=dnb&7->hET3da3!{(Z;@o81$Q0%IUUec8uqPQ@AQNXh2J7`Bh
z5*Y8n&l8OdsoTuJtx~Yk(6{+xIZlm0Nt%my-v<R9AD})p21<BwaIiXrG^m4*W{0*L
zLSxkB1!1AOd<P>pc5Sa<3U2=1v~3<#Sxi48I`eaLRQwjI=$L>+;$WDtd@jbBc^5&<
z8aNsB%b)tmbF<n0?-Mb<w|JCF;)2^|(&x{gA%nR_i0~F<pGBGT!#%kW@&O=1^|XJc
zx2boI(e;QzN>aLN#Cw+yN~1J!i?oc4(DT+a!^1)H4e)LBV9C0kO?^y2pomTHV;y$E
zHMZcZ&)^hO^@KoADCyy7%C&6QjSfz2Zt%bZ8v|1Q-<{TB?fj^POkEHzdthPHCvout
zBcq;@l9EeiP7VukK%iil=*6_mOu|=3X|SoQQP3BC_>;ugnDQbHMR`q4BM$b3YA8c%
zZaqiJ!kJKJ183+K!DaY;1~OB2t&Db$eH+}jOY>}hzXY-c`yrSVf0A33*3;8dRJ733
z6LN1PVw6o_5SNn!k%+3_lBD8}V>H@HoWJPRy1FiBR7hFvxumV5BL`P)1OzH6g+h5P
z5Df9}a1|jHi3%$|yoi0Xv`g5r*XK-~*B9CEUjS{HMe*1C;TOjqGK<Z<^uND42%7WL
z1BddZTqEA5r`N1t+K>o%^>3ucQe95)%9VqnFY#*p^3;};lr*4uJk>7!t@TGDtNp*8
zcW@wvWaQHQp>JMG#9PB8%F)Z#5Je+w6O992c~v<6$&i|!kr$s3({ujlh1}drm%Po%
z>=9roNJbP34^WoPE*W5685s$gN`mJbB{T=1%~*Blvu`hazo_ajcbdHTK;IM9m>)66
zDJT-s(%xofdQ!umVznf&g5ldl>%t@<ohJI!(^u>QPqn70jRO5{iny2!&m~Zye8|lE
zKKg=lFs`GcgPw62&`?K54X0*aQC{AgE05;kAA-d`mRoy=?dOyHQ&Lz$4zt}Vb25g~
zT~DtWUCliR#?zAmv@wfg>3P@8?4Fg?%Og^7n2C>Ie)MPws)fD^cgU)BVE4$+%Ztoa
z*1czleq5NJpMR=W-=aX8UX{!sbw^5yqEx)Ay)T{RIqgv=P6wX@IWU`GEB&4rA0Pjf
zKC{{UCfm7lv|OfecY}4D3~BKZ%^Q@&Jv}!K432{j`Db$SzNs4TGlp#rxGxxBd4{aA
z;J@Zo&zjDeYi4K`yKN0l9TFKRbv!g!w($2y;-3WRg+D*dXIn(uR&(&tqoZ{f|8yez
z)gOl`5RIA^ot<r0yvIwEZM9%r`DSFnO&IiASrQPpoR_BBFrl<-#0uIzE;PFYJOV;3
zdu!_%Y5%YjocEYx<oKMR?nq5a5;ASw|9;e@`HkoFFksY2(|u>y*zV7b7?)~Ek*3c!
zo(lMK<kYlZc{w-4k^=C^)IOhMpjZDfcA@9KN!k}gdY(NisqR^=Prz-c_w8fSLj$<u
zZ!_+iVQ6$W(d*8y95bBs?Db?Pt^lsUu=n+u5CIPlkG$<*l5EJfFcZ9!yu!o7!^l|q
z`7=W|#ao)SzdVz2R5eelL1etK{)9q`Kak?=HqqL=>6}lvy6^w)W(aZ_KIZ(-Vn#7v
z??~lMHI1`|fvYs1YYsoSm}sqBZYWz;R`F-j6p6#BI=?g+qd9m!?KMb!yGJQRf!v+^
z!Y05Fu*z6#-z5rufG>qI%O6Tvsb+ijF3&)hqemaJO9$!*NZf`|G%F4FLR#!6ufxfK
z>X-dQw#-P4*m#1%kN<v!#*XFEwarVjoK)JE);k?Kd-X*h^Ig7iie26;aJBI>^NT|?
z;R1YT&JvB}iZu&xObDNPlCF3<L<#N0Hub8lCz-WsXgkB4z?=fPjOqO}$rIcCPcLwA
zToDoRkntmPXa1On5QK+8ZKa9(=j;Qygu|28k(2V=QyK<CkL<1;A#<m3iK5aQ#;WvV
z`_5gZQ^${k>DNp&a{fTL0JjaAzBzlbf@o4HW$`!H`L0|ED-|EHKG4aZ^FZ&n`^tXa
zA3uy@N!@urmTJU#p+nN!ze~9ipQVhOjoZI#>tU{2+T1+|z22LA9%12Yn}tL3U!|Mz
z26JB1CB@9o#vWva_=JylZ6{Uv<Rk?Vp)hA(6&>te#IRXHSWUK{dq$|x>#+D{e^UJ7
z>XxFk_x>|M(L>r6(`GMxL;Szi*770@Ry>?A$5!v3qovM&A*6L4NsVVTwNnYtJn!3|
z)794{5En?47<8{%|5%Q#y60|{4<f%-(qHcrV0J%EN~-$8)4DlS^RX#-lATgbttJ|o
z@zx(sI#@uw{rsMVg))`Z+qAUj*0fuCe9yvQNNEzxEzWk4SZictBr$Pv&s|2@#EcBD
z=0k2j^7{@_u}H-}<zD?uAb}fU(zL}EDM*zIdqOShZOp_$`{X*SJjg;+<rEZ@ZpFAY
z_`W%mqoSAm@w%<GC|}_#-_m`z{@D;FaHgh<n+6Jusb1ONDK^d%-~~5wLws^Cp=;rv
zN1M#w7hK}ood^=Ww7k8glm2U-DJeBIDSozl1tsVmY5mNEU{&hbgAc9m3DS&_R&>o0
z|9JM`VX?!?^x4v;@Rql-uU=w;om4^acq)>KV2#DrNCc4myjtbWTetr6UQ$o$oFl&!
zpTOAD=jXl^RViiV(I_fSjI*ftM23dcfJe@<k>mDesE^M{e)-URcAb0&>{;IbT>dRC
z@*~V)bG10U)5m?ADmy0!UBxd@*jJ|enV0q@YtKKhu>pT{ZzBWjyy=9xUjHXUJxq0K
zZ$os?F0^JXQ)J6X__>$R-DB4U?Frwf2VX+}d{&Bn%zt0Cx4YQN>8O`*oz1a2t}!cM
z!tL!|m$VO^c#q(^7{xc2%s)U+xjt_!P(9gG*k9)SYL@51_Zhf6!j4$KZ2qJB&P5k#
z3mBqH!0WR)#;2<nixH?OM{XyL&d}$<F`k(G*?FCO{>zsk<otykvCf=ZM@-<-&;Vy~
zgfpU~>dDH|C{cU$A#O!@Kw0_d<T*#Y0ToXUi;}bPm&hF<6WrhGfvBPbtLy9HM_`Od
zX0{)uWo{29zCR=+ECD>#CWNu3hJ6sjWd~eBSXEA&nwu{KVo$cdzKyY-cjJ|q)g`|D
z(b(4Qz^V_-a*6o*YIrQ~Mn|m9RWbbgVAZdYee)NJIKAlf-lo1XXTl^><fnw#*t@qS
zNRJ{02KEli)xHG}sB6j;TdxxzIa2jC&%hNHuooO2So89dr&UA02P2Et*4Dn7U#(v}
zS%E!)%eIYw11?Z4jtTpHQ4ueXe90KblI^`b6(gm4#m5d~Qj?k{w4x+GD0yYJ$fc@x
z!`bO&(-}_1B=U<zd7~J8)6>%Kn3=udiz;&!MC-xITKoC)TMjMS_%oc>&+Ux*<SO#r
zx^=7COYTOZ45jsqHG2#mX)Prnpk(K&v9SK)`?I6N>__F=lKHET>7(^G{uc}Qc-c(=
zksuwNoizMe^y%Vw)Q|F+|K}OFxiT>|bwPZO8?S)CFPgh|_~(GeqiMg_66^gB7!$3C
z%h>F&C(yJ3Sib{w=eOvZ7#riW9S``CSPLT0`|H_J3gO%yS@SC^wH~<d+G=W(9oc{K
z3@X2IW2+7am`0ev;j-QYbqi>Uq<wOv2j;HPrP<*&5DQhJ`LB<YK6+#z#_lfVovR(6
zl@+YHF3~=BgpMvdBEs%S%oe;xk*x`6X~a5+h0o;OU2i(NMt~N#Ra8#CWd880b=YA?
zlE>qvH%2(AW{>}|Y1mw$U{}x6D{h4?JMb%xfltN#)w=t69EZjqzj)QUAFEo={7M<5
zbgs@CNJ&ZExx>KEc=l|6e?KAu%58r6LE5=8@xy#}NE`zL-POmNa4gY%fBzi>iTJz!
z_7zvv{;nPRA_>hb5xfsRSPx#jTm2k{6HPH!a{=UM-z-#Q7DYmZci<?m|MfK0<<B05
zfktq*ix5&(SI4lszEsQ@B6H!wcgZtF_kUbtDMfA(GQpr?sjwbYyYUj?Tko>oEoaQi
zhgk~CogmvEr176*9x16$kx>vM?7a3pp1dpPc7M9s+2SU19tbyo%#a*AmJ8E%j-cbV
z6EIF5N1o@-a<<9BcoQj6nUAGK0F6Lcuib<5Ac^<)3o{T!zD=QK6yaBn+5NjS+Yb!G
z*i^)A6HYwH5DbOIFMP0mH=2AN^YWGRXo)L>FP@c|8K}X$7xi>?;b=!ogORiMgQay-
zl-Ap85Lns3>e;HlM--VW2!`R(<^Pb+k&&2)fSa%RhuepSZdNMne`b*T?<qyKdn>Fd
z$4LM4OdyqdDW;@!<mvwNEY_f#7_)@RG4tG=_lU~KFiXe<RhjZ6tKzK%n6f~-CG5V<
z=<Ze(5pn8=As-LV2n`~UtE`RE)l-#UAXi~?V@Bc)wtgk<JJU8U47AFI**AY)&*}nd
zsGoUV>mqH=5OgWDv<=uGw{#azXJ|!hYHBi`P3(DpoWdFo=*SCgdQ(h9PtuEt#b};E
zr=F0VNc<XrkLR?zOlcqxt21-+PC!B_CrRtb5Wl$El21rUsU?c2SvoSZ;AX71sBgiH
z0LV06G9;+IGA6ln=_mKCo-d|e>m&Xubqw5Ba<N{ro3tpul@?gzMO^g`eivM~TWJ&%
z_MuCxD}qplz&$iqMYq^yL`eAM%U}QgHO>jP!Z-bi_Wk=2VPPzt3Ez`Zc!-X@QoVlt
znRR_W`84f_DBrL@6`agQD$oJ!f*PB(Vk9F6)>!H4nD16Sdo+8u`$=KpPwd2@$ltY9
z1_yXj2*U*!J=A8iAbn#3xTiz#luPFl+sWXVpU<wwF^+igF-ApED-Jlgn3PNt(Zp~P
zyD@}6#W5>L_&<2p9DPXe?5M=W==}y*apmYegjH}+b~fNxC9pYzV-w+ob<uV_3*ay8
z7*lS%yBl!L|D%2*Kc}2bjh_nT{BPpjnrXY+&qkJtM***eNLl>BgFJ6<N9+VFEPwHy
zh+`Og{_0g+aWQe@Uf`|}qk^O?E*?KGk9?Bb`ugF=tM!%c+{pv-g-k??H|Ioz#{X^I
zQc=0eDOdlFQQ<eomfRO&y@GrGmoKP4LoVZCs#ew|k3`r3M&9<jz``OU&1`s<=^@ed
z%(G{adg;gbV^;5v3@S}hr3*9H9Wa=t<B5v*7ivnfxdTTyTICMTm(MrpDxt><pt}k+
zMcU0m4kxGeljm>W{P;i(8$1+GGgH$qJO`$2p;A&;SBJHbR8)}bt`&BaF%9->Fw|jJ
zt7Mtv-ehugbaVwMVkD<)IJ);-wBydUFgXinOAf2zE~fV8Rerv@ogK>o1DT%;qD*aO
zfpRvD^JFLW->DHA?+drT<1|knv%Bh`f(1_eK_ugJXKJ^&@5IEXrq=G887RAIP?-cW
z1?D}K!{11)tgN62`T8}4^;Ii{DAwT-ye2snJ1vV@e$j&CE&2~&m}$SF&4c6z(V3pY
z4a^j)y}Kgufzpe%^nx*m=|y-%M5ez*w(WYv*2R3@@+6FC9e|rrl3;E?e!h*J-Qh;&
zS*`JfqlFe-t;_iym;4J@b({!77>FdS*m%~C)6pHVCN+D2@ZMIAG!#u%W!ha&Xn2L`
zq+G^S9Lk~0!ospE?iUR0>gu|l-2>~#39yT9-?j$E<-E220v<>IMTA`o)nw9lI?VtS
zT~$NFxOk727Nua$h25v$h|ZCu66%`+2M>OsQT%jh{lVgd8Wb`|z`><rLRL0A;2k75
zedT!yOePbaPrSSZc6M3s4Qrc|Y6r@kTcGfU(Y{fou&^+2b-grIWN{o?`O_(S`ErC0
zJW!kf>9nQp0Q6yJP2~WZe*9Q>o`GQ~hgNo$U&|Z8XqB5>Rrt?fjzSP_W~hPYXcL9O
z#@5#Re8UQ`_ZQI6+fC;4^E0EzBRvuJafD0x$dBi3kr5I2aGOYQy{p`jrPEtr0{68x
zoIn@q)hn>utMrlP$KIR8)r{iM-iLMAs!;{i;sx=!w6(ru9{IrD{uQhOQtUM0#sUgD
zhTg_)ipDT5_tn`mA)FH&)O`0ZsNd5;yyV|0EddHcMa7)C8$=QZyR0HlZLayK1$~}B
zWo6wp;hCRn?mpcaj)wlo7&{Sk&kT-M7uJpkH$@*hQ~{3HbK^iTn?dqHi||(M>~9b}
zhR+Gnh8aTZigpHHLbc%Di{UC+WY21>i(wr@cg60UM#>^=|B|a<lh^a!^!Mas;his=
zk-R%F(Ga5O$>poC?9Tt$*_n!+0mxUo9D1FIq<-JaI09lXKdc0w71#qylL^)%0Ie$E
zasaT>)|=RPV(3l_)3`yAl`sOCh3;0*VxItIigopKwN19PU9s+Ax+_NidVX$iyFp-2
zY6~}m{JJ_KqubirD_HcAB7V~hkY3RT?tx5gdbk{&UI2@Y)C&;pMF9Z>UVK6MqzVdu
z@Tlx&dT>Zt+1Z@^le6I30%JU5>T*98GE)Ev9T{4+%{irog-xicH~2k|2H|xC8hV;V
zbk{-<-uj)n{RKRiH?j3sisHK@P;|fVBeCC)<{XK2)<G4Lbt_fNg3HH6#f_*VtOdJS
zr3UhyT`S(ml?7LRyU3IK$yCJ`gVLN&;P1<BX$-=`Td$XG;v=?`t)&^hVnK(cDWV?W
zdczP$OXn?pPgtmL*aqY`3<U=8t^mw?J%4PbSn)?QhzUoI_LaLvD>@@C*;BOX{=IvC
zMQC-yt_NRO0T->x>p)Z%_<RRd_W9=O7L}vPz;9RA)I=|&;Z1V1{vKtk-PZtj(CYYY
z#?m;nG7eMok&2wD#2GUQ;s4SUC7Vp?&(>DjtB?D#ba(*}qRqT?@7siWvKJaanvolq
zUmQ4eqPmyIxPc)~=ob{PqiwingmE}9ns+vNrS%kvYhFIMUxNq!?L+rJ9seNb;bm;u
zmH1|8WjZ-JqE*|8b7x6D4K(f(-rfnNh^zL>AX9sKN~*>`C{DOLa>c0oU`8(%v1;y-
zn_}ld!lBBbY&@rG)!h7IjyK=3_j<dMXhj?-UH4)7)Lp=h738~sh3zdLxb^h(_Kw#2
zVY9NwMWT=8?tu{=;h8j-Fa0D41WuCmgKZGKpiM*n7T4h_ynV3zjFkJ73I7TNZquAi
z#9JJ`HUG;zRk?C;5Bw#|92ahbSP*k-GDV4IJm+}oif9slBN}rlWihzU;?U!eZ2x`-
zqS&DuGRW|ILZ^+4TqHBWdh~m1Pr2(=`i=uN2Zq}*vw=QhIat20JaSR&^}VK>Z;Oy+
zmL2FW7s7SpI~j@PNVVMk&6vv%$(Fr8`kV8E#qxXyt(utg9Iz_5T#isHYG{OTwkC;5
z!cz}f_R)Du5ANXTTD$WB1&K$T+v+rr5!-E->{NK`%?@^bd{R`j0{uR`qFK*Tu*|7D
zm{D?Q4$*u}N8gua)qh2=d*t@>4i}I#*KX_T>H>29e2z;!iKvLrS7`5FE4|NogXnH>
zzHjr5CRPlA+XCsDjP-#}r|{%_1lQc|;<s2~!k<$B!=?Ri#t1GrC)weyMDtUYZh3j_
z|2POP%*9KEV%Z+^!^b~8{)g9e24w+OAzn-U<*v23<bFQ-puO)0Wz@@((8mvZ%Ax<x
zvexA2V#hDwv7=T!uYS0UT{HUM7qU42P9L?iKRHDtWdWiv*nnqP{HIU<^(NR}U*hB+
zZ>E%yPc$)Foelc%A-VB2yMWW;jfa{a6ptn=7~%xDHVoebK-M6z<#~D{<n*fQIoX#?
zIbWAS^`X6;cV`%gzr5()7qNg*KQI=7S3Os(97A^R(G|B%sj6qqUH9A59->|%ds24j
zv`0z&vu9VX(A!oX5)^kc((H@5dW_*XRMor=4{{4k&J*q@5-0~uAS)yDf{GV{u5}Q+
zUIYXfRkqapfdWgC>L_j3pElN+h2Ok`gp0q2&A*4o25lZHS$(=|2*1NMPvHehrxSX4
zRJP#$5>%zLiF@^olj+~TW2&9zzTI~)7w~67@4|?5ysIzGH{@{bY}r4Hi=#hWlyBTP
zH-45?Na&4R%08ti5XwY3wQQc&KRaOr%Vp&Hv6gAevA<KSE(uS{ymVb_Y2`Alme!>(
zp1h5(FX?PImYYBfNH`Gi)#}C#w#p-JdxQnSKol_%_!|XEg@cpRNE$Z83aN>38TL5k
zasScMn6@Pu@3|Ng##c|K$s(LVHblXch-<{Dp#JJuEzL>d_C&io=(xWx9i8)xJ-I0I
zTxBXDa|CN3JmL4AN<{njctzll0^V%VktJxIxwf%^a=r#X^p8n66FsdCtq#L?&VeLv
z1qTwodb5|>_d!WXZ$E+~2V*Ax{JHAB4c)~Qi0Ra2LTSxFB*53I5D7mt0=m`<xvvR{
zsp)rX21V&+X-t|o!>tXgx{LRi5v}WEX)%x}yMn@1xh!?;&?lSVan%&Q?{RmHmz<3)
z?bdf6|N7vX%~4E(Q{d#HTLE_;_Y}AEYod5if_rUkt;y#n+pDS*VG>r22rVgd7GSyd
zoqONGU8pNb5!<*c_Ew&!b^ChW7Zy5bk0YWEl%9;-+=e8*&;N@BU=?;;wziu42L`)c
zYzQz$U0ohx4AGz)7ZXmDoeWMU(r|*46A>dTL(7>&Y?da!$8S~plK(i@*0xa*T8P1<
z&;qA&Ca+NA#1~JA-o^HGa=j_Y4~tCOPGpzCI7>Xq6_#u=gtzaX@9DjY+o)~9f);^5
zczu?SK?ClmTruOJoH-aW%3U|Yva>H#zqcOTPX8^A`L6@C+m$ul_dM~=Au?BO#@M9B
zv7%Wcd;VbI+_`hp17-fJj~_oKn#3Ra?yf`|`M?3qgbyE<fi!{Gl7|GV?Je)|QCw*C
z1_Hf97x&$PUm$WnTRI9)`0DMMl9&VMI6M1})1Rp+e6WhUHGb*U?(<{5$;@}R2fr&l
zXDmOod^uwlUgqE9_OjA4k}TyQndH0MgD%x#%r71hyA-@fp1i(wiW3)oOYA0}hJ~H@
zfWr)B^2w(Qj`LFO-*NX6mWTI-iS(m*sj}n4Je9=LjtGers6}9d(AZr(412Hme9|4z
zlP1z1+Lk=a@Yo>|mp-8(Ho)+yIZkwEq(;Hwf-mLdl+&Y`0bvx3JC*y&qyaZ=O#C=I
zu#Y)L(iBXfry(ht*V%lq0|c=>Dmt1sUZ2HjpmYs0;cuC;Ahm5IEAbAi8ARhl2s_LI
ztz*F>FWz6h1GfAH!826xLux4jTxXwGJV#TB6~<iSNozVfy3NYB!Oy(BMr8My1<Jw*
zaCT{{-m9D`4pGtbVupri5zJ{v@GB?MRGpe<cjAx?OqC=`QI7E&D8E@~hEXH>nCs%=
zV${XaL1u+8p7=}=2FY|equv;`M46vYf>`5kmwmdw%Md;4oA^VgIKK_05qQ%67d}__
zyDz@<v`~z=FaY2EsECouC$!rWL#V4mYP47ERu?DVpPZ9SJTcCsNOpt7@N0l)O%R_l
z3K>us<Y+qo?RrNeVAYIbxtFrz1*Q-fz<^oYnmb6)m5N>jiZlD}{KtXbYxBP(MS@st
zY<@TQCo5>YId{Cg7B~0Kk5adPK!7p~s-B5DEk+!7q|vj+L;pp38-mtrCkY8R@L5ts
zR9N(!K!l7mwHbc5aBFq2*p^i<@;Ai3nQ#5XyTp!u5t5R$ga<t&x0U|KVi#wx@r~`u
z^3Awb2X_5~CArVEKHz3zLmK!odhsQc@UYbJ@$rK`pm4yF`d}A){+94fuoGGN+l}zs
zKf$C$7*Ci(ZCk}Q#7ioz$E=ILRrv;w&+aHxP5f4=c->k(jMdtRSs<~-j(}AC^SGO|
zKbo=?E_<DGc35l05mlCxBXCN5QyRle*VnIRUjvBol^Wv)NpF<{@$My~czt=YsKR~Z
z&Dg<%>m!OoutiU6bbJu2j^Wb+WV!EfJ-{jq4<jv)(G55*E-fDZ`;QI;gG1J&%azz>
z^S-Az(@uRe2Q;`r3U*wmm*C&KZSI$%E)`E}LT87XU5sx20Zo$ONCys)dlT<&m#tqb
z3XXa6#tAMAR(%efnIo9?;j3{gN)Q^C!?Xe5fFXRM1%m+A!g8ahXii>s-_8Os6eqG3
z#b^2nj?y^5b94%#<YYd6IR?jY@sEjy(tPgrf4iQQP{&=OP(EbSnyqVp<08B9TkAm)
zjg-v-$g}R>xz;o{T08f}RO<Hlgqp!p5RkqT?COWl+xd%qNEVS}3HXJ@S>)O^)T);|
z%gawI*|l?M4_771zDnpE#b}5p_+GFU)vTz#$iw!6Jpnw`V?O>1G!HS%ZBlQYm_B{s
z)Q@9(%Q!*^x9#F0C^ERz{a>EAVmIWK$a^3+N;Tn9hGaU{$n#K<Ox!R?f6AveSaXkY
zg{h{N$k>K$FYy)#eUYD0Q0925hg($`%<rcuq_Qh(h4zoWZwxE6?D)3Uo^IP3^}X?r
z@NIBvxK`hBAb4wu=-|-rmVt>R2`vtdlrf}mxwvj2w(OI;=sU?&gyd#wTaU1url)tG
z45k^_4QG|esk5zPBOEaSQv$_9GR_s)Xk=vMqOIq5uhmz}`cA>r!cG*oc|5>lCMJ=$
zqlUYkfb;UXuCo}??`|BvOMJfk#lRLk+v}5_M1UuNOUCWQh{{NsZ(}^7cXH33ihp~F
zgyy6^sv%aLVuVXbh<4xr`3WuE%HTUDCibIW!CJWH?k@V{#?V`1m+8K4@Z$K`pzJ;W
zOfm{&_FtHh*w~B|_0C9MVSR&neZ>3Tm7^ySKK5wJ%kB-~u~rAKfYs=(iX8&-(?wUS
zF3H*1Y5JeYMjZ4Yj?&jh#jT0B3&6<hu5dpuN|Im>^G^&JFh2bCaA*>Vy>Qawh0ih9
zO`@|G8pDeu$BxqVB<gzAiYN2(^D8e?yr35R^M~e*u=5FJx7^#pAydrHTQOZXNAgDh
z;WHA`)($rpyzCrUnAe2Kh@{{h?kjp+@obN)wdw~<6I_XVOVybTs?X8ub459@tD$CL
zS_LR{4@j-he)$hbJ3~Et*5b?eBhs6sv0u7tW8xO>-(dxRqfYiF5;#p8N*IgQ7M(fJ
znbplWZP}Hl>~w;g^*OC~fo(sR?qeKkZ!>H9gyw2faj*hE^JKO%GQz?j^cB4~r5<uR
z|Bf!$c4RU8`H?(_t+nhfPpOV_?U2M#O^ui<`IZzDV#O;diM}jn%UXR?ybjYPaGYtn
zAKV-5NK(QV-0bA{DsWqFiuZ~V=UmY|jxKZ<UrKVcGE+_w4X%Fn@PrLDI~O6`PJW<q
zfa2=C^r2I0T>Ib+Jl#)o>J-dW9WNezV`kR})!{Brxu@sp2?;aRXLzm8tG<1bZJCZ2
z@Ej;8O-+}&1rvsvzm)mF>}O-esLYP25etRGR6KUDGM{)o*_rDO2W{myq<zXn6~IS^
zwD10I{^y{JJp*nkMvk++=d|#RUrK?3^Z~HK$B$j`9i0`_)DR^ZAH&>(RDjK?pPUZC
z6P7yf?lL=tL&RL&xMvNr_n|bkvv(XA4QDqsqI!Kb61<LNEI_OOHpkM!k9Tbk9V8dR
zYUJFvu0&t;ijAFFOY%=5_U-e=>IT`H1_r~eulQtTYx%6Xg-pJ9oeo@ZiKpIVK>k=3
zXsPesJrr~dl}1VJQ+P~ViOg1)Q{b65imiU}#r`1K4g?`ftN<V3Bm+q{#g5_e@Mi=d
z1kehS%%|XVMQ{I_zx?|oK@f4O^37(;{!flWpT%9*7Y`jh3dJx`sD~W92dfN0oL0bj
z5KL*ayu6Gj(yP?&LE7__+vv}SyB2O?u*C{ZQfZDm7>CRG8+n1Ex)E1qPl51y6tIgi
zXOa$t9l-CCyGK1Eusibk={ViD2DIdDiLA}nweMw$`Foo%<)kP^-b|F?N*et1C=-`8
zIrc3`P<=H=X!z+w-A4ZD9%B*h$mzd(=dFpMA+uQ}TCNM?!-sax96gToG?85*ASls1
z<a(&3-Mt&piH44%6;B|3!v00=O8&Rt%H36Nsp>A<bAJ%)+}s?tRR%f)4IF5`!De7%
z)4VNL^Y!bWKY#N7vhwjA?*B&>6}v}pb8eJyf3#kf8&2si-}IIfA!?v*!H1M5h=ph0
z&)RHas?E*K#igaT!Ba2b#_Q)dKAxfXgz))EJ#mYYPXkX_;5m7>_d^AJ&ba3_+s>{Z
zpFiI*HkP)NdwZwALD13Jy|b;YSzg^HtFE;;SX<qZ(B(L?iqN6?0|v{^evzJj@vO}S
zo6<VSBmXZ{To?D4i1=yU86$~zLnmcldWJ3hYOEc5@$w~qBh*gM&QnFXX);|9-1Cm`
z5*vrG-7ppPc*&zbr?(eO4n<b8(()u7<BJc~IzCNBCS|q%NEB}HaLq0<EK0Pylz9H;
z=<C>zmUrF~`l!-gZP+I)Y}%^!A7PBg^G*1F5jbN+w4!O^BDRM^*d*^)bmj^Vk;>;v
z?>T#%o3Z=9Wxu%5|FBmDqrP}<i0#L^^+3k4VC%`&?$w#0JGHJ7ImD)O|HHWCA%p}S
z!0)8kehJd~NW-pNX_mLggoT9Si6Kcy{vC1VKfdKP(f>TSZT8F(<MQl1&Xyxw$8`3Z
zrA3y}`2YV$7;{Ibr;n2_h%Qg>&B@r<8C{Ln%_H6?t#(26xbENS=E;D<<|vKSwshOC
z0p4xhR~|iH=?m!Y@882nLejdn^SOIEj-HuKai}!*73VA4ir;T$h^K2d%HzoE``l76
zu~6AK6B|+Vi^oshnhbTHkxYwKNn`r>^)LZ}81-?YJ=qABa0Rm*>IJewj55m*56Pt-
zBXS7J>1CzGgN)4+M22dC^<=k%WSTsJiJ7Uw&d+2J5D+9$d60hhL)EFNW+ErrSvR)^
ztaI39zCINze9SYcJ+TAPlUqxj<=847q2h`7G~%wpV}NV|y;}<G_yZ=tXvui|m2YrG
z9YpK%Eaq0ca?Gb|VHzW^cA#Ht&(aZ1YuhcS>dY&!a_-3N9Ga;(h8+8k4s&FL$F^hg
z;t)U~_!U+a;iMC*=cyjS#O1W`fb9b|b!;GET-HeTQwIdfnMs`@u|2(hl>HbiIk?~j
z7tF`Duf|VMDSEl==?*Zx90-s}a7mn0&+O07lnW`3zGygpQs2eE+InN5r2v*tC^Yr3
zhlRVEjEo%f?3`gPP`k~=wpSR3JqeE?>9OS7C4))_li$InlY_mzC6>L*%F4<bDK7Tl
zHbU8jT&-OuRc&pmQuGH@3B6K>Ak71!TXs)EG<-o800H$MYCbfjY}z?ldkF|^NZohB
z;oKA&SO2mpr1ool`o~Spz$3?rJS^DHol_)v7(C51S>J}@SzO|bJ6#C85Q6>?53mCo
z=%>*%V_6{UdsQv3FxBKAvWrkwlO7(2h{NyY%YpZ%p5ERy&NE9c^VKFDS@g`Lw@V)1
z>Ji<{a|f6JlZ3hLjWWGkx02s?CCVOSCzIcy<sl&uI~pQStvNE9kkHo@k{bNf;<*@+
zkpgZG8s7D-6|K%({mx4RA0JA(-Mo2ob9FT9DBVaiCBo6Z(bN|3nlwY?bChP;dwmi4
z6L9rLj6K?cb2s1bdY@p=tcGI@*CA!aLXv<Wuquh{WKhk2-<OT;hVNC0vqh@92al}x
zH8pV!--yrM8UIa8NLc$Q;g7zb*E}yHqx#<8-36&wLgho^hf6NcZqu0)!_EC%@o)S8
zVgbpN1e3cN7vbka)`+ySZaj2MWTzSiY^J6bWZbyD<I#uB+PrjdOw6vV>h)nT#J3yI
z+wKxDK<!_vyykdlUiL4*WISH%7%ER}HcX<KJ`biQ)>JA*9dio{3(L#=e0(D+j5eoP
zQ%BVIF)jVNwqJrlH{-^;r?0osB=^DTvJjMvR6IkPBjpJT;rRn5ajxL&MyiOc*<tei
zbR(^VL-8hvdvjkr2}4+1Gn={T?cm489QQ4W2OBciN&VA2L*v&UBFU5|(&{+wPEwFd
z9MqXJa=p-(_q-K%Wo}}MgQH=NM(RsogvxvwI8Wzg;6*BqH?;l4nl75LCF_cqh;^mA
z>Yvn<II!j_HTyY*sXZzpg3TH}1gu*d?hjUHj}zy}>+y5*n|A~N>EN^;<FfYQHSahE
zTboQo*C#Cdl2_n*Nn_J8(^qV4VUcA{&v(BLKMRT{=HhGuL4{Z${`%9$Kbf?M9O$Oi
zraF+%Y;OJsQFty}OCQnyVE4WgZT<Bm=eXTeJ3G}Sm(}neKQ7{3jQ|f5SNL~RbZ)bH
ziXs*JAzDEjKB#55`~%;!pP4OaIj9Fy8sJ&jVIec5fNbaDkN*DA)Ht^=l}PukLKTts
z(3olZmIS#{trg?pK7aoF0WoUD*v<Z*nc=@Kx;XT`>jvppBMxL};agjE^d1)t%gdct
zZp)Lqto?d!(h|!)`3}k`T*PGa6KkH|%Uw&*AzT7<=Xh3~2My^QPH}9+Tz)nDs@M_P
zH8e&ggMYE2<Jo-qe3RCtTQ?*yJ+1x8tq7)rr)r_5J%+S&^Puyi;84U4Khh?sv%n)#
z0y8vB;78V%Hr^^m=2vWAafcNVEF;}F=X_iwfig3#O??8X7JDw5tB>C>2}Evt9uo<i
z>47Sx6edCM7iXrY%kS1$qYci`E0(W%_5z7Li)|_o?F#}qyxI>|Y&&K7D^RVyUi%?S
zzck&i(1YC^7|gcmat&mZ1f~qb;$@BgP8J_Z8@I~{19Zg1KBL2x4}Xj(W3TqjN3|Xb
zI_0-YjvhTK{U%1?)v1dJyK({H8xyY9$be_l?n2d$o$ktev{s)_>K|5lOov?*l)1T#
z(zHNp7Diu*roWK0)(mM~Pcx!Rx>bHSIM>VQ4no=4m(C&0XbJUp&^cE-R%nfB56fQ@
zK+*#P0~mrr?&xGi7{U!2<z{?jBp=sFv*UXCp%8D7dvC127Csv^-;w=s@2%F}VJ7FI
z)9Fj~f6c}No<9#fUx6q3jJLe$>#&*f=yUt><H-LNVQJW&p`}qa^U@3|X?3nF?Odw_
z;WqGNb#<L}h5=w?yvQe}cUukG%wC>N<8U@agafgFRQU&uI85o1vCu%s?s@VJb`4^W
zjm^yPS_gx7jeTcNcXv9W863nfGcjEgcp-K9QjIT;j{44j>Zjl5=gWVnf_F8mndxbj
z@@0M~D)Ux<2e3fIFjEo75_$yMWu2Vq0sDEm`-mY%S|N|e-XSgkjR3?XIox2kiEAHr
z;jFbJdldV_$s9vX&Ba%u&A|e1UCy6<lmU2eX=-V}x`Jz_yTHe&BB>1aIM5M@b8M<F
zhuhm#s*w$2>Bu@r@4ECe4L9T!^-}1j9Mu)OYY8+zlk!D41Ox;k)g@j^=}@t0H3%lh
zhOT-_RP4BYaxuK*w5Z+D(Lvk^doo^x*fGmrp1g@x64PMRdQZc_hJnD`1W<4EVJ?Wi
z0G;f@SpBG+wNJ?3ekUWs=9rB?-{Y&G+T3hY5yhbFHr=OhRMXCd)j?gv#l(<p9shs;
z3+ULYE$ZJ-1$}A^+rk@}=%pd=ny;NZ(CUtb55l!TNZ0K?QD1~5X83v0AkqGL|K2=<
z#H8ywW%$48G>q|@F~WR&nz0Sd+5`-|bHzvM2AE!T_x7f`uH&p{pL~s%Bk9F_ysU@=
zvn9T+HbE&J`{REYfM$m)IJNw)8p@Wxq~bA}upd+kmPly#7ui}20hD;n8LuV+b+KM#
zw!X&jI_}Yw1Is_9z0bxzgZ2Wy;w0?qiDmJo?Alw-YXvPPR(rpB4mX#>)QgU|ymbvs
zB_i{ofjuhk?!KHqCF~Sn#Plc(wNvSX$r2}%K+*jCmRjp>n1T!FBkDa|?Ah5@KIjyr
z=(`CDl?$uyjeX4rjbGI4<ICxN*?{M|)xT`~3KxV<G4MNQyrysF=u)5<n`lUxu8N|f
zV##AmpJO}oMT6G^P7BN59m7TuVD3Bk<Ms39JI!BRU+OI8IaiSnKnfK8-{JahVX483
zOtcLvPGl$P==>EfUf&zP*NFM{ZI#nP4wxD<-?z;7ED-<VoJ^2DBzU=ty-uFUi-5q0
z3+-b_9N1RcoI6u{0s%{>;cWsP#%*(sHS#Uo^VRi(`69lG;3H2Ct4aI$L7dcf3Bc<I
zM4p+Ilc9R(e6s5XIiOu?v1jSWfyyNH8FabA-NhhK?`#(9J8fvjWf*8(`}eT<O|giG
z3VA5KMzOAnHwmQ^Uf;Xb*Vg0}Bw~X3aiUs$fBVIc@}Y<7-FW1k;#1jqsFH!__^`0)
zmFTvVWe`cKm1VLro2jbr)kQvQVB^g69AaU|$;h1k^)zV?1XwGM{6Ye~i;K%Gy*Euw
zO%z5)-bfM=h;<~CO!{ZYQyxqA#QoLw%?#$cS>_aK^h&3|&F&FbiPKUP-}2;`rVBE%
zpf19C?q=nI$jGf76COmQ^|!Wt6iK&`;1Eu=lYP?=+K-+g;=j!oihHg3Mmt@3Y^(Q6
z@_}sG&{->C1A}<^_1uun0cT+_`5FE|Yw$RI4@+rjhEu2}^B1>}n!@`(gnsm-<X2j|
zaM2EN8LLyb2Q?cXC&>@s(;{+p<(<2<$LQJK1M?gNfx_r?)ZCV52K9xbm4gF}_7$FT
zm>Jl@RtLFq@=sOEoQ}Ay87qUz*j{`)n!bGX?gWtXd(Cf>&C@m0NBk%&6tt)0D&hXk
z$H#XLrT_^?HFV-$Ck@!jn{{LryR7+j7r0Yh7~(Db1=%ZvJ+%B5_tA`MOlffVq}ykH
zE!CXv05#9Rw*waNrv>LTQHX`yHU)@(D<%JieE8bsxT`Cj&`6<Z2oJLn```lGKV%nn
zoVWKq5l*(Wx{3KeO*^Id(Vwuro4-p-V~xzHHR~CT#A&ZaNhh(B&UaH2JlRnMThs64
zd8DpY;4qXoHXW-|Lq#rs{4XPJ&{m*`1m`q0;toeI--h3g#>jap<{$SVOTuy`Sza);
zJzMHELQz1OmFZ+OumKYY^?wdB>>T}yxvFELkN<RN3BP`aXBLGMYnuDTHpUt^=@k_G
zUx$Utx1<L??M14Q%!~CYyesHN;Hj}aR~u(xX(@^dBJfAU{wl3XOAiY8RKF9F4~C|0
z-UH^)mf{NAA~)aHajyJg`4by66*DtCBWQ-;(+kBk$&~VCm(@DhKqBVuHN|67Y(t^o
z1tnDz1V1UmLHCN4JOllYB_&v|Bi_gs&B4z4pNnKx8aH(@j{wgI7P2rjB&VY*gbU1p
z)fVhTZU~(7X!=>GDbKvM=;!NO?6mZ3OsxMYk(bVXpMbptfrU48b*=k9)pT`zlnY6r
z<h=d~J+&WYBeN@dDZA!3`Y?0QC@+PaHydQo*{v0g&{d5Yrh8d>#Tmwpoq7>c8U9lT
zOf}WlVO$j{bycP1lfKKv-G{iqWGCyTyhCEt>kih?1Iewn97#{{!E=#$^!TqsoQNxS
zN(^!qEwTM%!vk3@QbkpA%T~f@fma|~igSNi;#>1O?if(6c3FDYgwwNYKeZD<1kg-X
zF4LTzTODwI82)AwAa$!6z58YmlNfQ1absA><^BQ_l}p_z)qpc<{02d`!!6+@em8Z=
z=E=^D%FH^WI~Z(UQHCE4xkWm_CEWk>#h&cBr6t=3d0GP!XlOTE=-|phO8Q#u7P9ra
zx{@{|-ij^H&l|suk1ub3JVyTDlXACwLt|rYPtUyNr-si0HkE}9fjJT*%%3`ovu1&2
z&%+!b?J^4$i;xiG(wi_cIE1FlGYh>_N*+j)DKZSX6({g#tq@wrWWBJzmKLqOsZLjE
ziQiAPN!kB#%zpCZiBxB*-1#-vdSzZ79{JJ5c{3NwOG`10X(x+=wFYaVLTBaUm7?0U
zd2ZfY$)&U2`TAp+BN63UZG4XGQiJ<u{eZ<+w%B=@`EjM~zCbB~47tay16jX2<(Hoc
zSa+BtJW`(NcN*Y1;-|@78<mw6cW}=b6PnWA5Nnyl5vkhhYPO!Yh%LN-pFw}E;+OVa
z%<$B*4Eys1h@TD*M_rxOO|X{o5@J+R3<wcU0K!0E`h}34fhI&MspMxUzuYOL++X5%
ztEw8qq}}7_D7^d7k-3*ezRo!w6=oWk{2)|~p(MEH?bo)q@{gbXB{_i4&Lih^ajv~?
z<!c**Lc9cqO}Kqg3#s!l=W`Bhlj#x=+z+|grqCElWY?C&^YCVhTDmr^mbI)n*Bl)q
z>E7;EbMw2XT2Q-7Rfe^Q(x;8-<x38%uKVFP>QJ}cVNo;p-Ct?{Tv7&8HB>R7@9<a@
z2-&HORt?vCaS?m__=K|!znQ)0zWwyIQ#tnN$R>Dgcg20%B|*Awv}A@Q75w7f527xs
z7ea~E2hZSJUpqmGVbAHGfFt1GAEEmnsi_`R&mcz=7BBN+YU;r>s6$iB6F&^G7y|{*
zH~2JqDa<L_2i-O-*RUK0N|D7>T%j}d^;O*LQfDF-dBLswdy0P@Bp{$_{8`w3^&DA-
zPXLF5eH!UrL46Ei$r5SRgc6S!(oybDZiQ3-yjf&bf=L=DZ%K(WFjS5!S8g`gk$p>2
z*T&2TShSuG40iLL_m00Bw941+m1<Ilu8y%(;gvCkl<iRr4Xl}jfhW^YQKeUr?FxTU
zCbbh~vY`ge(OWA~L=;drGM;vcZO`0yTtn?nlaVo+BYUh7jXAgiH}~MfHhlR4t@|fD
zl;N^d8uAVbe6#o3(%P9D5(IBA_TvT#c3|Tx|N22#oI2NQpLrD?p`gFjIFqmy4Ok~S
zawIei<NUROKOn0-*%OCJYnLek%mBeK*#Y31dU$%4jY-Nype^2>Or?kVa|hG9Q9Ec1
z9l3);Q&U*J+2`J>0w#jFcg}~tE#gGo|6&36u#vn!QoWl<uAZ*Wtn+iGe1n^T;m-OZ
z6}`*%!M;8hL{ah}QoBrKZR{+b#?rIu4Q;Q&<(1BJ;c={gEhz)-6dJ9MBlNRYOF&yr
zPvto!-Iq^2?uVA(`w`5-{q^;7z8h0HaySiNf7Dq00QI0&>m96N!I0F=(bF;Ay@Hs>
zabj>*0cBeISM&>rThK80ph>^>VnDdqT7~(HQ}aQ{E-e$nO6EvgKp1G2CVPwY;f;aV
z09Fk+>Nb4+nu1if^j)NefG7I({B7MPg+{(Qb)L(l@}Wc3z9A6H1Eoc5Cmz|0=t)M7
zZK)sAM1*odVd2v3Eb_%;g>dG+c6t-h>_fkNULz&o%DLoc7Y)BQU<`~4WmA*z-FWlK
z7RKwoCphTU;lYGeQS*CK4W@98C)edHFARI@mam&>a*($~@|J*p=u3@NR_;*>HdR$F
z8WuY?AOs7ctG#z7deE3<CV3PU**iF_Zp^G`RR{&2Ml*4|B5O04AX$}NCuk-VZxfG}
z%)woLBkn?~(^3X#A^=#zS%DtKxh|()>FDaZ=0}P2KJ+d~WX?=ZmIeW}T@4dxOZZHj
zN+2;O0o*(Si(%c7#2A0DvLRHMmX6N&4qVd6ma$i0uL{2K$bX{kw`>1jJ<rqB;dv5i
z^2rjb2Ze+<oSmH9=Id)4XxOo)aj{+8nBfFZ>vdj#W8)vBF5pzu%Qw<#4Z!7oa`?4@
z$Av3b)>}k(vh=#k&>)!kLn!yY)L~Ad>~4H{xd#kj4!`Eoy}ow<x9*Wgp2OT-w6F3#
zzt<LiV-F0+YKN)zbj%q@Y`Zoob{f7BMn2x&#hIDrm6OKDeQy$QDQJ7El57AJ)bhb-
z71Qc1^Q(l$Q3H7wJZQ>-4|akqn{Rx`*?9v)$F)y1f;L{k_h5sCLIfaojrX3*`CnhY
zc=`ZzP<HaK_@?-RU8CIm``aHFknv(uRP?#P$n>@KYa@1iCjy>p&s^WnFE0b#3(HG2
zhnPG{C|H@@xa#@ySugEfr|mGljH=yUm=HV!)HO^k=DNBi7@h$FjuslgSz{ecq$zOO
zlS4Ef9{8STr$tozf+m+{dvn2qJ!bz6Y!uO=oIb6E&p!u9qJgFYViN#^>b-H7%%24-
zi*8>w|NNu{W6v46T;$v0<p*K27T*sY2)nP{>g;(Il~~lfe)y2O&x-GWvDlDC$?2x?
z<eUnAm5&can2c$bmR@3HVHq#fCQ-8XA<2(De8>yrEp7EOSDhO-y84PML|mshe;u&3
z<vn)nSbrLpZW;ULi+=gg-%GE;^Yi?LR#IAofVBu*4+~6M%J@m)B*A_2y%ZgY?bRqv
z>|#fm-QQ}gWpacTNv))4gLbH1)^}e5Yhutz6?^LAB?%u@0nm}93v2)lB@=S#pKYEv
zn`WB?MxoL-HZ)9BzTmpPBHutJtrV%SH`eKKLQlLV(XaTI|2ncWh1!R)m<6&YV`C^U
zZ1Q*K#%Em~KEA+kP7`j1R6o(%Rbt}GM#jd>JK334n3h$~Q)L+KU+ZI}W6=wInsugX
zufdn64_W7-`Tq9fU0M(0;Av!*U_CieF3BSx5YCrYed}OKOxf0szU#z73t?ApFYDCo
zXODgJ3$w##=Xr&MM%vTcfOuZyk+<~5f_tnW{mQpg$uWz0(T7q}93FY{twX8Rzuy`4
zwkaI3=5T!Vr*)`zC5*(=f&Im=MB;pk-DK}Lf3fFp<ZlnmGinEtqm!HfGju91yp!CK
zEwZXP=k0$VG(Ou>99IK)v1ZQS9G1@@>eU${{L*p0I`l|#-uDvwTr44hIt;@}PAg;6
z9WMoiugGx#wylGr+*iPfoutNwd1QP%Z0hDj@>~dWU_TW#wY;2AC~>RJsLvZO+e1Og
z5s{Gx_m}3sf3N!F4I2~Fx1OkZ<>s-WJHJOqH#Upof+I2K`%{iySJ#n#=IRyfr-y2X
z(H3;8yO`9=%UibB&EpQInX1a(H9*Uacghhz0TaNC7f?%TzPd~aY_{OT2N4*JA3jFK
zbFD1pK588fek6lNJ23?K`oe*-blMaRx_UY*L3fnPzq@zIw4bVyt|SLvG$~+E2<l8K
zFTah@d+!7K8jPtyCqI;y{*umN@UeOL5JSzqapOv?+Zz}ujHsyAVlciIqOrw=0RlJ!
zNb7pG8C)Ghl;M(vW$70zF|kR$VcGrZQM8psg_~<b_<46MH}#6M{7!8Bp3q=FgHvQ3
zCsFWWjpD+$6pC=3OL4ve)X~<~_CQ^H63Yp4^4*T$el(Vyzr>Bi=PSAves9lL7)-HV
zCFoW#GSU<iyMq-E#hBjs_`T_AtN+0cvaZHmki4N&U%MgE_dz7{hyU}sRT4>vdD7E~
z^}EjcFZ|y|`>9ic#cmR{n5xWfcA}wS2<Jau8EI+LVr4dcwUC1a!0q=PIkJSu57`Ub
z_ex7$va-1bQ!)>`oMk1Wr6r@F2xfhCB$8CnGf5olld!Py6DO$Fyq&MRo!qC>(OdD*
zj^|ee8&19hpWP)!0yob*_ao1a$ppjUPvhgp4+}Nq`8-RK3k4=_9UaA&A5(PS!o_bt
z2=W{c|B<~8zgL^d>Xw-(sA@C_j4saq&>4vK@W@TNdEd$^qvQP=<GyZh&4Kn&RSAho
z;9}^73@yIxToO~3WY|x@KweLHf9(_(eLAo{*#0I(oTtyHWVjl5{ye;|0$#jGzEG!S
z^yH177@&rfkYjBwu?Go^#QVzVP>BincK<VeQA^{G!mk%-p74(+GFal_pJIt08`uK>
z)l^p>gipM;H|Vj({*B$WgO`86G_AU_QbIqDCLcdp%8QQP89Q^=HJ;Cvl|tIwoOsnN
z9#)ylWkU@VA8!DGZ{fRlAM!3};Ln}qCdIz#@6XJ)d3n#D9$28FzL&a^pLBgG)&ke|
z{O$cRva-J$jMMR>L!z~UUSf}#3&rI;aiZ1VHob60$5v-&c9y971ezy;9l^b40=clW
zE_a~{ylT(Qyb+QeXzA-)f6zn}-(~CqKAA2F2?_pc6>CdGb}hhe*)&cBWxFmY5l6iI
zy<q$X;-g2e?|!nu-Tq$v#*L4Wk*4y7sQ-`~9=Ek^1PJT(4?;v8=oW+Tp)G*6aSn1!
z^{CI?#fx}7$u8Zla5DsEE$>wKq3*=)Dst8OzcmxAn!38!y4BD<QeB>10EeB4?$O$O
z4OTGhrq{9Y2SDNE;J`Nd5afI82$Va|<#Xjr?;e%gy1Sp=4<V70N6BBld<oRSqCL%^
zRSh90`miQB3_~<q%=&1&>>ser0~JW~u10UWI58Jn=4x;<oX70U90IE-IX{6^r~M4z
zP!}4*t0fX>Z9y#FS)C(q7tt?uNMBySF{vPm27~5`9ZZJp0W~3OG&{+aMd1UpZlCyZ
z0s;n~Gw7|AKmtVf75A47QB-+(7pP_z7NUinl_3KKUJ0TO2|I`UC_v6~(28P(ui{|d
z_*WEyJt1E6v!cx7-d<jI(|tcHEAK8%4H`G#P~3muK)Ne38WsPU)cA!4^V9I94JOLk
zn-0D=l|*<&$nx%!z|hD*x|jMVmYTq0kDQv_wY~sPm4Qo5?FSaEDJl2R&lTIxC|7Di
z8-5`D1RS#~l<8Wic*|R&1#)xVb^@vN+Nxu-w_ic`(1>`tHqCWB_Mfj}+~jNM`0(}$
zxKk&|$n0r8qsN4R?^CfBn|8D1+{jL`<~I=V=D&s*xVpMx{g%EMqRQcl=W8gYu}|!y
zK<r+Is}Jn#Koe<eitdC5?A1G;cd2GmGHB<%4G!v;8GE-Mgw$tt`Tzc|EHO5ETJU!}
zp$2xW6Z>T4dT=Oab++o&v%^%^^X`1XwZyN32g_SuV8fR{L9ns1GduL9qGHp=3*$1!
z7MkCoHCs{QK=ktIi^O<q?YRr~4g+C}6>_veHl$<SXSBty1$IOB8s`u>MMh1%eo)xK
z*%?AP$vrk<-#(r*K?97Pk=olQmf1IBF({;iW@rV=lw^u^qj;>K-{t3H8+Tp4^D-s$
z2V5Fo3m*(8z*0#exy4Jp_&x`249~0hU_lVgF&72Hf`}^2!+E9E>4^>__HRzBv+-BX
z{W`#|aZc~@AXabxgn@G{y%Jr<+oDx}S#*0<V|U%Bm6<^>^E@aB`r#yB--q(#FhgTx
zVq#Mp#a5%;1NZL_HD0>xquAd|_QVN0v&`r@maxwex=dZU$is8H*rqrrNDbzZkvzYq
zI&;I-MUiNa=~v+L<t~(|7#4%L`e4f-E_Hm~*};Z`CqvWG%_J+F1U<OqUenauw{Nk+
z%UDr#_5r0Hy_LuT2YW>&B?-x@*NRA)+)k?JVq{DJs|=uWG~Z+iR*c~EzBl{HvE<gy
z7a<=<T>n3By%9681RUd_$C6V}WDWh(t8n`>-7j$NcrwJj=XXYVHJ*A(;%$h1e@o;i
zRN+EAJnHo<`Qi+G0s@@sN!P%{qUN`_U^hW(ZJmp8Iz17H=`WBCq=<iGj2|p@R1j#y
zjYR=s|3}W^5<QW3<<SY}jY?FfVu!he9yIzu_7H?+Y+*@<oxAI=2GL*DNI^x5{^?WL
zBfE3p&$qCuxQwY~y!H=>LQ?r*FCQP)7@0jhan)RFycCp_$(yV=JC4z<mpHFj%_l2j
ztU?2TJ>o@X&${b%AD9jYqUzhCs>cYe`B3q?=@gn(b-fD#DW2x|T#M|cC*dpkP1V-P
zrtyXjGOKxg_bu0n?-!ZdEc!n=W6vco6L^RH7PGTev-crwJ6Vy~tM-#cgB?sU<8y{H
zVBZNlkEa@uQ_&M)e;?YA24J7l`V1eRlp9va9CHFcVlU72qN8w~tI2~{4f)Y(W#4N6
z5|`ucNK71ssTY6|04v=6e?RG@C`AK7P^d?5UR&cNXSZ93FANnxLcg)G0p}R$7`JZ`
z?|?btx=&#01be%+Vuz5QzXRiSs2UcuVSCt}nEtyy<>j%Z)cU1Fn%kTptAkA!Ewomm
zBDz&QFmSv6az14~7iZbh(Enlq|5b4vPcIK?|LdA*s#f!3xwS7gY`#SpfSRy5`pW$%
zX>YMDR3($!A9wEA8k-Xftc9qogVruxfAn_w;jVI5m3)ucv3g$hDMi<1c$TR|@^lOg
zT(4*0Sxt(mnp3CBWIOxXF8I75ypIzT7!lNa8QS%$S4-5B-z4*~7K*Gn?2cfODPXIE
zk-Y{w1>WkYt1H?tsG{TyLyMvyo~WMOU?%E&FI~T48w&p<{s>$Gtnk@<a}=qxnR8ZY
zgiy}Ft(MoBZwPG!R}8T2kG8g5kMN+Nce~WqwR+aL1{KG;MY&Y9Cp%u=-a2-6iv=dz
zI3ne@o_sr}VCETo5E!1ZE(HNWegMu5xdYIHhqZ*v^TA6JC@uru12b8)=RqFDw&4`#
zr!ONraV>)5oh*s$yqd;MNHWe2+HgE%_TwtH?Y;I-Tn3BgM@>;m#J|@EjhP1}8PyAd
zgI|wjf)oeW3&=uUh<lA|<U?)D21?((P~tWPxAkwbLT6up|MIl(DGCbBVjFKn#Mae5
z!;-W=OJ|=zQT|jZ*m7uszoy15Ym9I@U`m@`ai9GAxBY{qt@$54-wz`NE$fure;<t1
z`9dCF*BmqqYuL=pIS|3wzxNm0>Oa=@CNYM!{Bc^^;QO-K`W0N-+>MZ>vCYvp7Fljc
zp0Gru`_*E{g=aXnT16~-TA->Ed^FVuQZ<@8JP^89OP<QPU1Fc+_I;2~jYA(I744rH
z(;%&C^lIFEV-aH&TK)7uBZM}V1_tGJlN^rgO#&LpA;?Mpb7HGaWdSFR1J+LDtj$ms
zt6G*m7`Ca5Imd;%^!u9*pIQ4Ia&q#uw6mFZYx9?=9z1-A-E%S@hmPVsIv&K0$Cv!{
zI$YZH<qn+gAbRWg68`{=&6rl9L6wtZx}2QqGa7;I-vUfaVwkeAeG5Ig4zl8(pP8BE
z&e&`T3vCm7`QCe1RJ5_ZVOrx~+pk}OOoiLGZ$sMs_vfE2SX!t3IVTDQq!Y$_lz&*R
z!fQl@Md6c^Y2?8=rg`meeSLo?+kT(dKlsc?)@b#SEU#}?YF2huK~`~Ag@yNC0<r6i
zmk3UV11z#EfAlA3eJ~RpTaMoK;1eRNZ^MNwe`a8#VQF-yErpIpX=R%3;L%MneSPbn
z886I^!TbtB=nwDTPju#*pur$-3RRUCW@1X88TyhK8~c+vG%`B6IkMn}u(VR=K!Hi>
z_wRY$hr%0o^5pgQ`?+j(ZA|@)1{Soqn1!A#h}VSs8VSesth)ch-g`zxy>8jwsM`Q$
z#DEw;DRNLmMNpEURFR=bA|L`v6p@?_s2dT5B8dnnP(%R%$!UX1RFNbCl0h;klH;Al
zKBq_D?$M*)+v9!5dq150;T*>~TP&;o^*n3MHRo^P1>3igCV6zyy;^F3D}&J!76Zq@
z>%Y2#a7%k<NvC(9+`(L;IfhsWO-F^&pKfBaQK70Fc{{C&>*G%)#=vVo&Ha*SO>_*j
zBj_l3uk6EmCb&z+0jiKcg>hin{FH9vl=BqN0It#eyx^hQ=m0yeB!4@tnDl(y!!!=D
zxO-kxd>0!*yt%hwZ=5b6DDb}VIE1##v4L?ov=ViGdkU~MQ{{DedF7oAD`G2$rM$(e
zxLLcDg86uS(}&q3lLT3s4>Yr3DfLKec6k72k(lFhg7G=#%Np?-Nx_T;^cbmYAVi1<
zJ@tKI>GXDFfU5!%^62Yik1S&%%33^*6gos_QsJq>#nQl8$JiS}>gpMOemUxiUTMEp
zLIxlEt`NJ3*K5JbK~#MKmJ!V?%TPuF>EpBG=dC<fmf9h@y*O>XjJz*qzH!?n7A1v@
zqnzu7w)#28WO1aLJ3CiLMpRV9Tl&-Y=~)^Zo0^*+F<7vP;i6-;fO&4Iy>R0mzFEcP
zca(HBq`LZCJuAsTWT~0L*q;I)vrs7c9eWs2$<L6uo?>V>qjt-VkIzPKRB^djNkmIJ
zVe%y<E}cU!KTDn074%&ZkHxp|kD<}>8if<#`PsRR+!u(3DiH{s%TMu%|FI{C)p2HQ
zof)Vh-KoU_h<-&LLNSJ_Dzzaq#<P;2@z#qM2ZC}Ey+=`nkGHvY_LBK(H7ic%I!}D7
z=r*2;af^!}bNl#lnVOiqI+RLIpa2lGJz$J0{NmGs8|?+Z8@0|iUX3NM#hJiwBAUs;
zZ6d5gAdDS29uVmnA-Geu?Sxsg-h?+S7}G->^4@BU&n<5a`N)%s5(UUyV-5RsY%@z^
zjtbH-6Gqd`%;jZdyl!v;@veL7^7PG8otR77Q8LHvl_5_qq@NFb&Dpd41S~+ky_M=H
z60^W8L|ldF6H|g6cJktZs-*eG6ul%&-@NzplH*y6XHoGc(4RPV?B~3Ff}<y&U^p5h
zQod+tfkup5$Os?h5L`AiRd9CZufvpX_G;n+Tmp9TQ2ll8tX=OpXOi{D5~>uaUz5YB
z<#Li5-5sH+;TvYH<zgukKHkfh*V5h2W-EEA7zUNy3Esk<hJ@c8o)Wr`&Z-rVghRc(
z)5wv~I;WttcnJ_UnUmGK1=7O>`8SiO8-u(a{rq|JdOzcky7yu8z9H-_p>L%gIg%#B
zaL=5TPlYwo<w^_)8Ct0ibqbtR>7~&~VHB!2WX4Fo)t?pYVf<=hvik$?(4?Ay|NX?{
z99^0@xk1fvn7uWV(27^lJd}5|hkYxlPcf<qt-e}OfNWfPVfush482-Cp^T9dfW}c(
z6;1PuWE#H^IvhFYy#lJnD5Tdn0;pd&xwS4(i*m99Z*t0OPENT8o8INo;NjQHtE#Cf
zR$$&cS7`jn)=g;Huh#!)&u7NBS)bi|D{5i(t2}>I8^H|r2MN(aUhFBTOR)vm7Sk3a
zj+fC+#H6_|<lHp|Jp+jHV`g=ZIIqFR%z;E6rGqRwl>aG=u+Ew{Xh}(>Vwh-TZqBny
z{;inD;`@)G@XE^fTGYkpAc~IK;wFqzXd7Y7(AAd|N>pHOg8wW++?^xH4288{8&=yo
zIg#fl>x&u_o#p<L6D`5N54mUejvd-LZ_b045;*B<wY{rr=TOPXRI8A+fi4yCjGkwo
zr0AXI@>TN;7>Rptz+V3@`l_3R%|pfKAC7ArMgtJABgjtiR$u!56W5-35fcuRq}$U8
zV=cahhK47ueQZuMvbM8(+%VH1uFhs*YPl$JU&#5nUFMXUh!<B-n~ACEOP1gl9F6;R
zs118VzOWoH2^vvSk}HzJigP*GXq6()qCq`j9LcMr9Q)!tS6|7jXcv?B{Rux|E)8)r
zvQR^Tb1~jm<1a7SV6k;U7giNioSRqHwxioe@B#d{FuDA|VCZM_i4Kg%2+w7QoY2%r
z*bRKCqxw)^;8X%o2qJw}Fjp6>7lnBaOZ^iUCpJe&ct*GlccQk}<X1*Fjaxqce$URM
zMQ)P=HupAc1zaSuP8jcOMJ(<~Y_y&5%65djrd-FwrXwfb4Qxh+dfX|L1)le!)GxWb
z$rj`~EO_|b#Mexy*;-%uRr8s6VlHUq{Ip2<L*R~LmeQeA{q;eD1{_76x>Hw=K}AqG
zJT>f^`0y#m5uZQ3z0u?TC_g;oZ!c~)pndb^pLSCdCh*(2ea*91uY5$Wu9F@^`O(vp
zl>hLeipo#4GmX*02E0>keSK3hr?Ce`3nCq1ftoJDy_U1!jF%flOX&IH^BA|5bQ7ay
z37qdVuVT<^&WtD@rgiJq>I*;NTxWfmrNC~mbi6oK!6ERETr^4IZm^LQieWUEtd$zk
zA|N#e!5kpk{*rsHj5Sc}ZI<R6Wio)^mOX@5tl5e(WeHd^bOKd@j3y@cQ7&<gVvQh>
zz|!*}DN2#zI@CuGMGMLM1@+Ia{OnpniAWXRiZ?c$yOJjIx4kh8BS*2z<44-AEWblx
zs#(5=%Wu5veCoh}DI{iy1yiRQgiO*2G6&l()3emq-Git_CG|m*9UERyNYuxAB)vCR
zoJ~!&OQ+ww`3XUs*g|wsu{c7r^s2>tiB%M<3UNGn{P=RVXLhE=>4k-2zY4gx`;HrN
zRNky}h6aDab$Tt40;e#eIF*(AoE%R;96A<i0)8}+n{P@HlYuuM;ZW4n(IrxlI<vFm
zqeyt_6Sk^#=wZhaOp<<!MaFFyYH^BjPJJNy{`&E$6`l@%{+7Z8K|R%r4*pF00#b4r
zJ?WCOv!9ah)j2gji1c_an0h2spOW#k<^;D0z5_oFl|2_Uc>d&t2g?M*XB_Eu4n0oX
zpD2?8=5^Xw4`dvtoaIRvd!s$vq_hsQgJt>0kCvT(ZHG-w#IST`qShcnGeIo@_3h9%
zjHYiir^_Gde(xPEiWOVeKE<NSmG{C-FpE7Za9%+qWK88eJ)7C!E8G68bRm@gL4Q(s
zLo_1A+Zs;{+l{Jur)ThfEB35;OXjA^as5hF42#W!p4^h6UuZTzX~5nBtP8xoqG%$B
z*I~B|&YlUdE(+yI;%|=CN)?#c*-}!X^vE8&EswlIM@Qke5A(YjU>`2mICgJ)J7`dN
za%`>#p9$jP*e!9cP*~4cV5&_6F)wWL9Q~fF<y(aVNZ#FMLJVPQ+Hn?R+VIBkpl++D
zlK0y;$3h~|A!s5d)Z9p~_42~j?StmM74)=rhM$+uBLC`#Jk)_iiXge-)%6-B(${Ft
zI~tY3xCVo@u47Ke#5%lc2XRVreNeTsW5V$alG&`RT+w-t9zCiJpV`t&MhU!s|4?;y
z!9<7ieu+O~-v2u@h|ulRejhqM;5<c1TiL!(<<Tuh_Q2WJEpmfI%CoWgBMDzn+U|Gt
z`xJO7SRvT-;s<MwocH_sMk~zaRv1OpS7a;F?V9Eq{PSKgmGquasB;cz>z$oG=I(w^
zhI5u`b56ZkFMYpSwt~xCaNr(JSLIvR>KcO`bX3xt)+?I%s2y=Vxja7<ODc0-IQ>NF
zhvp`9BuV&M(KQFiY@W)gim~&T?3PKNdfU)X;_^LLadE{sI^k`xJ9Zi#<zIiH*(*ku
zO{)6aH&N=Kx~b>8+kx|ABr~m;w>g2*IZ_2od8Cd{eHpXV&fG=lTQFBJ-Pu9=@Bdb|
zruhfy=w7P+A&viH<#e6mslea~Q!~Tp$VksCoxFsjv$L~cjPNpdVNVcqrl#D{wKSK7
zUjR@#Zu67P_|7SQ%em1OT)aFlHpPt9&~DQsvVHb2wAEtb5%l<t{qPvp4{*<JU)9QQ
zANX8W<}%*CPHneB(`5)qFmid_9rK+1H($VkPbxG`-7mVYCNf)v?IF$p&k16OF{fW1
z+*KiK*BJ!y^x>*8VhOvfn>8Zp^z+Zh^FP88um}#rM>}op+38VNBnFrd9#qdw*TqK2
zEn8QJyTJ0n^<UsR<MB$`0ibCc2L}u}#iu}@jQm4h=MJg}=yy6+7(jMpjXt$#y0MR$
znOK8~H{9-WZ%O4(BZCvK0geTUCz`dM7FF2+Hq-hq8}vu%ei~p=p?O0*PJtpyI^{`_
zFjsALeTGX-L^zZ&D6BA%cMa-9OW(hRc`)n^NlrH9pi9B$DDL{BDbr$M+rdk?<(#o=
zCGSv{^-46BYYR~e3)?7!VhQ(o1#byQo8`q0_6gjgg}3?`D93P+367d;>Fc*26vKV#
zG&ST4wjswQ!k|GcoDckF$1+seXv2zIIY8Dy!v!`G6s>x=&d~kksWR4}xd&ie49)xm
z`4(2ENL(&*`_$H!tirZ%`?lo9jbdi-#r;BEjUd5|t5=UGQ%@oLgEeg|NkQlKhENdm
z_g{0dyi_@2R&E4cPIH2K|HqFC)awB6LO90YXysSA2l2tvL(Xjl&izTL4@d{qu2qHz
zj!zC|P}@zd!sYd-!%f!7IvEL$<0%-|A?O58jn1D93cXL$7jwzCU&!lsO^C)xZ=zc{
zxBcm(>FF$%Q<n1I28I`4#{1r!>ord%-NkQoU;HLkTcGx3^XAR1xxZ^bA+6{cY4)kD
zt@ZE_Y)Dg+Zcv0X^fE{An!y+u?{3P5#%VNNvvYIu>(yE|GgYL<O0gvwo0%o(c8812
z;H3KTLo*hZat5KpcXm|pOm<h!*fID;%gV}D4lj1>J&SQmW10~y(JZ${MR`1ubqAJW
zdHVT2US6q?f?LN-K{(pQh(2L9;VH}`G~yqO5(mS6Zjl7%2w>^V>w}~wfnC*m@8TA#
zO9@jwO@eG0KqUp?iho|bvUz>zQ)GMChWdLR=LKx{3-aHvrZb#N`<Q2;OD2^4<OMNH
zYXg->PEQXlslN>PI6dI6)m1v}eJyYg@>ukDP_Xzt+#+mFZYnFgba0qfbx=PF$V%7;
zLy{hD!MD`X!~{tQjaSms;^IXZJ(;`yU8qo1-7h6+W^R`lA^gUqL3CM6##jK8BaQg=
zyVk99U!G>W9*}yr*Iw!V4!ZW;^tT{Y<7!unga)sfNcQL{8-;e#t2`NTZh`$(ZeB1&
z6=gj<BipxaL*9`aH?wi>R+cQxHZZ$_#Sz?d1NL)?;V(czE%R-iVE%#64Gl$t%BvT`
zdAUJ_o-4Io@5%`a#H)ciiJHkV@55uYzqN=qJ=m&iB84;mwSHl3ZJHdm)i<WFhgW&-
zIOpoHZHrr`S-sNw(8oSibUJtEE5EUVdK9yG=G4iPs<#hZ)Nh?gD6OcF(;qUHrgP%#
zeR}iZwq#lZ+*Ak2Oe5(OM#Nf-2qBd$FS#Z*IfD2nK(6QtvyR1*t%mxHJf<<tl*@w3
zeS(;v%;h;)r7oOkkCHuF`Dl4rkdN;pdVN(~b!LGnphM)DRHu9jbA%uZk0_`DD&7*3
zlekg?QeZISI42Us^)=O?MrP%x_N7bMn%Ng(uxGcRKKUBi&usF@kt0l!0m#uGIA9r+
z&D!y(^0YCE`88{#teb;c!WNyu-gzuxOjdS`J?R%v;Ks})=rC7wUi?XX#~NPi^3@x#
zuAzaf_>44fGQz?v>GDh9vuL-YQ4V{a%qV4V%%k}HQwlOK<mfGlu71xWf`UxyI-<#I
zAx_zy8>p~WH0WTho%53O$@c6SpdERBv*$11Jl)zm&L=C~d-hjfiRs+amC==%wRFZJ
zb3HGFxAOdII;c1)tm>mwny<qiXz9X4xz1Ezf%#mLip1gSkn3t^{8I;ziVez<2sD=N
z-9g#Vr-A%vYSLB;{Te!_{yHYur<a&mb-7hoQz=`QT=kgO&2{q&3o9IAz-akyOv!AM
z?d!BO`s>@_l(mQZ_*#9<S4ju<ND9^Is;Q~z)vE^%9fF@c%8%av(}$)FJ^GasiJCRi
zY+Lc~%igTu^2;0$IL#v~&Abig1p|Xx4JZ4aBdz`+DQBaiju6%%j(^KW6*cdEJokMA
zLa#&*91@6(J9_u-@`})j2R2)nSmjZ5Xm&?mA-|B5_4ZA53VUB@PP_-h<Z=8xdFxE1
zr#979R8-_BfA#O$xwC8DW(!3>hq>a&)oz(;3FqDNM3q}FFYW7<7Q%0l!f)}Z)3YNx
zYQA!rQYAh(e*Blj)vHXbKD8?$F2D8#2{2GLtf8wg-{d9vmFjUD%QYKKN@rW-6)evZ
zmNg58=ze}4oQM#8Stech2Sj7PDGZHYE6uR!dJ7g0M7>;VOr$q5EZu|uXFYAs%G%X$
zCa!xlzcUkw!ml(3=`L|Y)TgZLY+ljI0J<++t5^I#tB8s_Ztjs6Wo5Y~6IaUx$vj{S
zt~SJb<8)0>$S|vaBC&Ede(@nXFTpb^2O~~g2jJ^;&|}->MJnWL!U@F}B5md6TFyri
zQcr(S)k@4;i@-y%ZGVL5;?hh8B-r>~zP~FFcZ_@r3L^u#R2Oj=kTh?NeB;)0nVTOr
z?5ob_VFprG@6H`5lIGNq2CY#Ddd$HLG>tmxbC7L{(0*vO*hY5sY835n5jt3UzZ#QF
zKF!wyp(pkt^_t*|I}=;Nexp?1yys&_vhD&5o5QgouZ67J({Zg;U#4GZ&Y$W0)e{H*
z046GLU1y5?k8Xr%5c-KN+<!r7_=4}@(-yz_zF%l@!sK=X3pQDxN^Qsey_>t6)fYz>
zwCz+o{Y0`is_(IHX&|X=p1{V}YaK=BJeKUuk~9@fs&3!@%a<iv{*BGeH&*QhHb}P_
zw;OoqkWo(~!Zy@D6Q!A)xLQ!}y7uweE=;OSs<zi%$LUWQRloT4eN|Oyea3?=)dDbv
z-v|*HZMe|<M`$&oPoRcBcwl4L3ulk(^vL#2n@qpFe3J4orj=#?eo@;Wmz8UV(xd06
zN5?v^WIK!ohn*gO78aIyqm3Ma_Fn!PKzSsz6bBD(9{)bqUm0*6ClFZB7`|FGR}NlU
z)7YG`*W_WvUuaG^74~tjOSjFkY$k{$V^J~9`^+ikHv8WHDCga~caz8o-=buVbb=}F
z#^3U)hV7vWOkm#jCgm6MOXkrbAt5O=5}bJt2zt9di93vl=rJS6p5r{;mLD?zxU{Cm
z8W8{>ZI>si{qd2(r}OAWgBSg-MxBQ8$-xtN)ag1$<&?N|zsg3vlu3nVm1)zK$B(8I
zkRmU3zoQqGhB$(2vMC#qH0_lGHxRgqSAlTo-*|X(eqr25%|5UU3p>7i@f6=)URFjb
zQ|abC?6Y@eY(TpgwF)`uN0D)575o$4qQxskMbHn_=)wKXyVdug_lV9Kddu;`CY>J)
z^z;bw2RrZOzr<aubeH<@;)f4DTBO_La+GsKN?dOgz8wR7Q|v*CJFuTMq^{bJEmDqM
zK0!JBPZ9s2n_vLLMA70j@@)_h({1~{7*P5VmRXW;opyr;kJWrD-9BsD+r{B@QEO>O
zAfN*F{BLiR;X82a{A*{ZC5B{-Cuc^*0(nCkzr2b>(iuT5a$Q0ok#OH*dF~-biuYwi
z=G>_k>+N{RT&>`i&&kSXoBPCEY*TVw{HA*e_dJK0%6^2p2c}0CpkQgG2W{Dwim3~<
zv9ITXRIVEb=4_&w1z=XeMD@iP+f%h%bFqfyPnd=aDnHMn+KcpD{(#)IN%bC>vEX3w
zzX@Iif7>5Vp2$kf53HN2eRbZIW<zn>tX4qjWhHQI-fT<cfb6Z&iaij(U{giegVK=M
ziTAA&@?5sYr-;Dpr6`Y>kKba5=UiP|@m<9-6Ye#~s05M=;Nrn~FZj}2?6>psCSl@M
zJvqb(UlR4XR)U&yf+O+TiIXS&-QvTVnr57D-o#jDYw~M8q*%D9C)x~CCK^x|CHg2S
zeZXlG^Ol~c@)F0d-gTZl?y*Y2giLYFmEfK-|0767FXe?#j0({%U8d5B@t*p(b`gyC
zKL&7STPD0t^t#^F+sjp={I#n0a9R2?fy8uJc;G1gHlfhPK!s;1yT2sAu_G*~k7`;a
zXns21W|qFmnVHL`WVzsVP_oq;9lu3s`_zXcNA7KB=GUm21C9#kVl|?9Dk@)KQoVec
zWKgsyA=U>k4#MonR$(wlhT78`633#E^*V`ZUlREjmgn58`y3Gd3kKsmch(%e@E9B2
zZl8q%!5-Nv>}ciEnTQm;(!0KQ=(+z!WgPU9)iLSpvc;pVD}G%V;)y%`l#}+~0$l~M
zw}WcAl<rsL7wm_)Y&PCM<QIt|pV;#BeIi~%!aMk;6-~Su{UXl(Vm@geHBUCDU;qkQ
z0JbTOVw*2VrU-X5R=SBbV}-h#8#RzKSI+&?n=2k|vg)w&HLO8a2UCc^Q*3&8qxZzH
zsQlJ04QH*brmeajwZHi$z$td~HOOC>A<WGFs*mx*XYcNPpMEcUA0%}L*q6(X>6iA!
znygpzzZsXH@x^CvYQ_1sx%5Pui;woydQk$czvpn@FM<38^MF#fy*DFa*M?H$Hy~7i
z7S;0g>liY%lzqEmGbw~{>i2?cpITs==NLLerM0hIUFwSWNN(N}NcPTlFt39ZD1O^s
zKGUQyM%v@M4s16{=}V?^<D3h=Jb3#k%5NsfjPS=V^}XxIcMaW{3%4$}jYbZ`jT<If
z$t}k$zg<_;A$?OG`+iC&P4vLN*_zvT?i7vfBe$hR(`J|=-?p<%n?;?pvE@CwJwcuL
zC}4X#+D=kl7JW$6d-qcwK?82ZUX(Vk(*x?1FqdbhrO8fKT54mP>FJ4PuIHttcZmm`
z{aWbyaC%gi^vb^EZU-U-GNow{+zC_faDT~{(V8NxXR=F{%nRhvOV|9AsAfb?kJ}<{
zOg@sIVOv=r*YjlmIUx3<qoW1xCw-1AW<9CBckf>BCqijnWnM=3pRtPuAatXIUCRr;
z?<}slq2R`i-`EAU_Vcsj>W5IY*M8#i##Kfb>cK)Qnl0;RY=rpKRtARUkqi&aA*z7(
z<48%NV)nLg*RB(eW1t}G==R@oaHtDc=L{0|W>Aw}94$_l+5S&oK=w)RF;&$lnKalW
z&`(xkCz`v0)!R(|p9B6O#%JlB>XKVbt*u!+f9icV45j$sY8F_kPXF=AfFq+?oBq}i
zBlbt$ySvO;2Y(Bx0#Ui=j9Ob=9r~*5b#A1G1=n#5XkU7s#3@>orQFP57I=_AR0!uI
z;9M|10rP^NVKYnmHf}5HC}w;;+<$yrU+F3!@Hss-=9<Ng8yr6Bj_D(N#Kd%&c?ajW
zYO-QbSW;4wFxjb=7qd9u(02%82vky17Uh=~v%O>LTlhj@@b+W>3V+JCm2-RMVeln=
zj}VP|uR%Tvni!aHd)u5J2-)D93v4c&=8(s$-+si3Mya;l77V*@`91oXpuS?OqYdzr
zeqp=%Lu`>=y$BV<&)BLmzI3rCX<(|3A>$b21~=y>MCcl;s-zzo>E$oiP<df<0S}@S
zO)feaauW>T$uPL!d3lby%6I=EoEMZb9P!vRI$VCZpV*gpqwV=n;DrkpaI6PX!d>nJ
z!#yo0r8Xom0aI{-8lV4{DE((|NkJsaS(HKxm7MMk&L$cQGoIET9@&E>7ZQg7Fv)53
zi&xC+kSdNpMeWTINxx8Pg(F#gJmczz2`I0jA~r51ch?)Q$i3H4>m1O|k-8^(;`;KD
z)`4y{9vBo{TwE$|SVu7!Hm3`uQ&HFieB-XXoLuDML=L<UZc&!Q=n&K$zZlLlirrL7
zy0I2(*B^``gdX?bpBlh&<Y>LeH#}$SsgnZJkzHMq)?R{ctvuD^xd7@pv|(Qo)HiP5
z{uHJ{+=Y`EFK{UA^PC#W4C3`%nWz>#aNvM`k=q$?;zFT-<fQHxYxm8+YuZsXo}ZhW
zkRiVb7qZlqP8zx-Ba`20W%*voJqbb0*V;TMkO+4ye}dKQ+ptkZtvmIguwg0uBzg7&
zU!=T?tKtg_-LZy}iIv{KKw{2A9()V?z{Mbc>zK7`@3yD&(pi`NTN5X)M3@&m>+5uM
z-MHp9*S+%YM03-j+88r->Na%db984dzNTUWpBjsa4|@cmjg9dU`!b<m!$nxdVmP>;
z5MC(kCxo$wpRP5wenUTWQp=9l&m}T_H@()$sryysPPm$gU(eJ|a~ugePydeI`ZufV
zd3XLwmnv=VPiDFFG9=!YM~w*M)OMP4`1Rw7NGF<>S*Eo~Q9+?9klS|byYt?Vx`_|6
zrK<g(KO9UuV_d;{@#00o@{4LL?m*3;c}uUf64NQfOh6wFs~0lDRZ6{tcT`Qe<`Saq
zu;Zh(OvW_#Mmx@Hm?x9o!LEoRo@Ph8t-#uRR1dLXi9Q}PBhpSTvw2Eqi0}fzis;a8
zOf91KF4Y)vk3GJXXXWz86QReZTkMtc67#x~-?Mw~u4+xbtu$n&GTJ2}e~+10{f2@;
zZhHP7rCtdN1m6i==o0bs<fv#SMi|!<#cVXo>oc&9tepB_xrG_cFzk2HxRDW3my95t
z`+0BsygV{5jqe^lrFpcswYIhf2`o`zbEGpSP~2cGd`Y*GyG6`+GCY7Mndwi1u(mY^
zw=u83MTh@L7i<6U7fVIm!^cIuYE%N6Qd%I-<fj!UegQ>z{r{%jO44uM3|k$AqEz{L
zHzT8{+pGw|3J32vB(T9_%PgyX6P?Y>BrK9~6ea6ZTGDvj@@)I{>kJo9-})?TLi?e<
z`R)ttV{M*@{o${wf`$QuTK_Us$e?+EAyFWGKOIaBSe0nLiMih)R+hH_(z*~k*qD@2
zRJ7b%nPJ?WW)uhVN}+bz5!xgu<9cLvwlV;+Vh)y8CMKc5xr`|vG2+X%UU~QN<6DoV
zONS2GIL7#Zb_4N`Dz611JIHh@@Dic(fiqF+P*Y0V+qAT=TS3a{>8rj?Q|<O3&XRrp
zp{DF35w8aiAj34(XUvbaEzmlaUa~@oZZxz&xRw9F_ZGorI9aD`dLE$oo`ow;t_Q9q
ztn0(!wE%<2@1L)5N0?#lNs-6WH5@Mwwk-);w||FdOgYB!4ni#0Izh*{^_G?w<~M9T
zTRd<6C#XCvnYwjCTBSjdt8ibmbe0?j70tXlxNY@p1X$>gjSnmM;P;>y&(5Yf4u4ey
zmbooaqkg7+_{B}_YX$|gju*?1q^|`U2rG*4?jAXH>ITcwqW%_^=>*G{cOOf#uIjRP
zAs^=D1lrm1VwBtxLtOG$av?=CecyjNMGHe<T(HoQY;ft=cLSV|o1ah2twGaAW};e}
zPHZ<ySRfvU<3$J;5*&6`Ey9HkqYs#7^u=he-PhNuHp-v<LPAd?>@8g?`%MPbhO2|B
zN#@=fiDb$J?%h=%V`DjRuG2q6=$AvDHW32-dur&Arluw$d77>_zP>h$IGby7bv^T)
zrN7^FNQG)e>JJGK#9(!n;f92SQ+xQH8Sq#_#1wk{WVfc~9+*psc`go<1Kt6gHHpep
z{TU2KE&54v=~wX>G<2biM2O`ih(c})qgyhMpFMk7$dHsF&q@O!K~u={#`>DU&MTa)
zgf4ZdGWe+RX`hh-y~f;9o#?Birh_U9`{m5#F`R&UlTcikmGnI~nQ$S?te(#hUFB2C
zwe(4>noA&5-ISDk`T9X_ZfIKCuN<3q)Z23{%_i#)92j}HbwSwBNKP*P?&C7HX#5G1
zN}VGkFk2H6)>Qq3DDN?A7_kM*GA91Ib5w12AWui6=b^wj?oR@D;BJ*ZCrr-EyV;e#
zUl4470z4ycKL%CYS@)2zhxACyVTA0>_#q~Tv#qL%>ldNiemDzz$S*!vEkvXnbnM<i
z#Rjtws;OqTZ71Am289f2e)JH&SO2O|WbsWzoN_((f<RrRJ!oYunMrf=;*laY58$i3
zcTX=>Ur+tHUg<M*o8G(PP$ztatdB{D$FlRCz+H$%irJY4mE~eAxIy^DiGvc$3-R&s
z@Zg5<_Vf6nxYo|IYxJV;K&W^RcehH6-1qy2iR6UIR%;6w+-P?=<2KC9ZTqUGgz{fY
zV#^My_k<nSHk_lMWOzv|D)QL2Evrh`Pq46e;SK(|efwqh2*Y1tza}Qqva$l79z^Si
zE1NX`>%xY1{`L>dN)B==DsPYuEM4Nx=R(q#|9S_JP9A$AQ`jd8r?mo11;Wv3uUoey
zv-h_Dg}G2u69^B!zP^-g@|yy=skZCs3zk?eK4e&(J=w~g^}Bj0>cTxIv(R&@PW5`S
z9D25c>?~3NRt<!|WZohB!XUJ(|35@D{<m4ze-yd?>rt7BCM!%N$>PW#Bo^F9L4!(Q
z4haiynu^Xf3b(Ij-MiM-1t5VEl<|%Q#VNb*#wSTvF(|~l1Nx8RA%x~c?FQaV>=DJo
zk#TMG&N>O@Z~G1&Y>QXjWp?=VjRMLciV^^fA@jnS=FS4zZzO30u-h*_t5lkz;H`iy
z{-7qWYuIUP)yN-JCK|{N5yIg>`CWe4)!i+krDYFUcY16|-6bn64Z0=%vF5qQ>t*11
zE=wZ`jX`m$cuINwIjg3WdkQaO)PZYy?5l{i5mXB>C}nX8BVc3Ck8c&i4!j0M(jOj;
zy?f}%3<Z_tB$x(3Ho%W@7Ih1Xr#uH{_*fn^tn*>A!KSSRnB)QkXm#w=@aebNf+Jn3
z_RZ-Xw33vrLJG;(<;nUQB(1lBX*Y8ILggPMQD$b?YQ7<ZyL+e}aHmluOJS75!C{U7
zlQFWb06?@PHM!!Pph3}aI-&b83Ebj2*S86POKkOiA!6f(HZ1Q3NHQ>t%%BB%CStP)
zx&+?D!+Z8b+{{%Au<R%@!jZF=@0nKIlYTG@aCQDk`-;(>ku5tc1W5VHhG?~&yLQ#T
zIxkk~N-3wI+~93D1G-}BG4qK=dibLp;9<dy1bysM#2#MF5l|>Zfrsg<8nf+R9{TYk
z>*|MFI(EnpBbfU7^O0udYxp=v@P`G);h0U<OrFQE2EO8W-7$!H1dZw8CSd+J_%8{E
zydCWBj-tIBNhN>7-KD_LPF*gEkIyM>L)<1NCiY3))}&}-p-i_B2Yf;qX=xy1Qn#!u
zFN}koK?9fG7-`PvhjxOGCq~@rdycAGkB&~&Km4T|RFN6m{?v1A7p6QWCYq`GznibG
z>pku|ZAlPVvs|-Y4z_sJ7&(7rAMx_957wCw<V6uK<EFhNKXqemR#2mq$J@uN|AMc(
z_d1T!F+ZiYpL4%$qS*})b<-to-?b|MA)SiLIDgQ7n`ht9+w}yCg@ix{6JCsKF@r%$
z0_|y3H!};%aIEmDQ*(~NSLQ;+?f}yPN0{=r<oCr8_8uQz@x}Uj;Hsdbj%H@RroDvQ
zmhA7gF~gl|BKg;5i{bA`O;0p@puW8kcq8XlUykaUHOr)VK$&pO$!1(z0wl8$ZHrel
z?4?{Kn1BA(NOY>G2ix$&X-&U<I_bussVOG}5KDeyh&=QrEG&#^Hv|E$J_(@U)H|?S
zhkZnI9{uGqXQUh7Q;fB9@?GU@Zk2jXwhgR4HtDZF=56o7XG>PDkr!SpV^<Ir6NCH_
z1>57bYq9hf(W_;EHVfOhIM#ze5Ibo%uooV1JPH1^M07|Q`U5c#Sl$@ED=aK*)WNb8
zunng^o!*5OhLB)g>SY}sE+3BT*f1M&P6P<&N1BVzy3O7Mp9^=a>?0;(eID(_NILkH
z><v18>XbM>P?C`expbXKebU9JV?AZ=^|1QLjN$`n$+1}~KkV7^>O5z{f=2Qs6I2vP
zdk77|jD@97XlyP|-Hj3&PtjYsY-(3>cMbrQPCVg2`UFiLvuYt{-cC4bsK)cC!|j9z
zFxhpjP)<F^3nOT)JzX!83v$AwGM(Is8CVfx8scI~4tqQ!<SJDj!1V^!Ajsn0Ehg?5
z^-v1^-C=XDk1KL;$fB?ZjGo}(fvqquD=P~(1;ed9Xnr<s)a~QPR`@D;u2pNt0Du14
zpWWTAs9$%`5oM&v|A-qx<m*edBY9S;m$NWCWjpO%XWcp4AtK6rnJw^5h_mx}CbrK6
zSe<?nGQ!n-Z+hB+RE4Gj+^E0LBpadO1JbnDFS!S!585yOQ<m?4cv1W_3i$u-Z;xLQ
z*r60E)Yu|AL(8ZA{mQSzFKU4$Wi#-lYY+dW(Qj!uX)c+C_Q4Yd^Ek2fcfX*@n=5Mw
zwur0Lgo}-1F$^9G_+mpRB7e`!Kw*@^u_|QELc3=qE5Au{8Kydn=EQI|3mWE=*W*}y
zeluP8S}6`dkLl*yF{2=Fv4}Z5rktU1jiHy}NP7lG;YtvEeyF1zM!rcsz;NXR;01qU
zIyF~sFogjBJ1TWA8|Zp^I+*l&17<n-y}J$e^LpX@(Af0@1m!%(@n3C@0gxrwlyM6M
zDP&l8tRY^-79_3Z^N^HK$f~Y0M7(6Iqc{wqDVl^#C!~HM;yl-VsmeQR)(9g1<qSk3
zVYvXw$GUj&hDy72sV0Vos=^V4h2e~jF{U0<2?z!Pi$6cJa<lAlDA1$H`h^#~H{V(S
zfx_5gxU*YLGdO9QwJ}SLdfC{d-Lp6~+UOTr)V3mb-Gfu0Wzxu~(McA~sYUw_9y$ac
zy=Ev9+Sp%YFNCl9n$QufZ%XImjH7^tH9Oajh;IOOaiaRbVAd6>e8d)kW5~WLJA=zI
zgj+r3@|kQ5=;4V-GJIDilm#k~a^!rXZDk#}yZXpY9+5pDG28j>ufHVCkYe;6p@PF$
zB@Io-4m+Je{Wt)$VYmtII`B&ZbXu~<bFSAMPHjv1JGxYLfk@lU6M6R6YAwKeCiIpn
zGx5QMiu`@XZH+E31rEffoqZ+>LNW0+N{YFW3}yHLU7>bBm&0}=$M%9V5G{iGQnb_5
zID7ybz>;`ueSk~|K^5TCT&>iZ#zV&Q;FzF6GXfp}1{YzAuiJ4`;`)327`&~3HP^3S
z$3AM@4|tO--v23x1%e{iJ~l}#{tOV!e_9g&wDtY__p3Jiz+1<~H2_~b@Gi(y(wwFj
z9`Bn%M)R#{?PXD{40<20YQX(VRnY}q>}Q0|A<h)L&O`_nKNicH{#~<jhEH?Pr6?>P
z_)|`&9}Bez;(erE_#ia2Mha(K5~Pj?jlvN-g8T#?V^JJz39qNeSMIEy>Xnu6eX0~9
z&T5oW#@wV&5_p(7d3elgBJ^;22_0Z&&c${n#~BhHa=h6HZ%v{8VCPOyhtE}JEk(2$
zmkv<lppek+oL}XKGr@LfVG%a%?7U)aW;Qr5AmT8RgKsCUD#aE~#rZM3Nek0UX4ck+
zC0ySl(~rExM|{!|B<`D-YUWL$?F<z*yIM&h;0jPFa$7&>T;W$z=h0RA0k;|VuQTeg
z*;!edn<Fp?P#=y@7oo3AOFKR!P0${iUtC@o#D#+~haaJ6M!yE70a5ks1z&q^s}MVn
zzABSYDiV9B%ukw=PYVgrg1mHiKI~iRGY@HFE=j0I&vQxf9=s9prnN`#{hM3-U4m!z
z_rwInE+#Df>Ia6Q+YcXJw6q+-VU7k8f!ZZJ@7M}Q`IB&lRClFL_Jx>Zdt;*pMD)dG
zcQ&>XG&<x+ctf~rC*jlyhy?8`FR~O6gof>nT}NaY&_f|3q#7=Y!qLQ{G)RHO_yZfy
zk!?-=q1;@C+X$gIfuK<e_Lt{Z3B#lnVm#d6Urr^_&X^eXjJ1ZP_hdDgJq}B|yPs?O
z39*TX9RK!a*O6VjjEFJ>QlOj&b$`4U(<eJ$jD2;}uIBpsB3ZfI`$N+Zo8*am5kNA&
zb}iA>+}xalR<KY~B<q#~T$UGed*9-x{XuJHzTRkve?>{G5ZM_UyHdPX&1effebCEi
zRStzK9^)X!K#2r&BOva2Ti3f{@;}~K#!ZbDdGT>OhooPg4RVXuw<A}YB2<S(Av0;9
z9IkjgXOHUa>}>js7^*vWQ8MBX^HWKf^`N?ZZucAv8U!{qLg)}5G=pI_%TlM$7b%k!
zV4{(i2|Ljrf=UVpF~<R3LXk{;7%V0^IdIaDnvU=SgX-+Q)ZjszDe<bj>=Z2iSmgA}
z4TfQ$QWN#_Kr^DFW3234*pawy=z|f=kn(cjDlNN$8S3q==Y`WVGB$78Bx3u+(*KBT
zjM6~Q@8|Ls;%>8F+S;PAoaX2Sx53@1FmV$(hXEb|Mo4^lwjOC<ya~ViBd<FG-rX>{
zbzC_<LevSk9Q6GMMQ+{%ln|1`P`r@IWw0Dr?LQ;d!2W{jIIjQhfjirpeBk+^5&6?&
zp?yHr5q6DJW_1b--YA)ZzdJ3>+gDar9@@H@_QIKU*vR9|BIXT$dO0gI+@sJps){m)
zZIFeQ3g0(YFR1U`t0kCP4&PmZvS9A7{z%W3jQ*!!w?fD-0@Y1DRzXQL^eqG$?W-D~
z(I74?gA*0;nT>sl8tAV{4(Ne&qP#MU<%wZ=s*t~J?d-6_X%72!0$18njvHN&55lb}
ziVqa>^<9^)(7=Jg!B3GAg4lImpK${@VPJC9)+!c8(bN;kj7j#hTr0b$oNBiSZXZJI
z?mN!wvN8_ediissmAkO7c%mR{pufMLvu)^evnvbWqifdOLBT}4h%J(rbaV)=N1~8u
zzO!~P=j>w{+<s;qyIXpPhx<FPBo(Z8rUy_2?1A-v{84D4Mc4iqQb=Yd6%d?7Z>1%f
zvA~~y_u_xCtm?KL?G8u$9~W*nOh=S1BxTT~BjKS<ktRB(pe<Jq2{x;ufFzlv*iog}
zxV2U<bMlho#$8VioH@eUDf@#eMf(&a^KLpY(|++kGo1cEZ^HkFwUrQAs2){Q-*rTO
zSIa-iJptakOJNhuGOZ;Y5_(B{?R4qS6t;MwJHSY@_sPLlV@dwqMaK_E#sNwUlZq1P
za}#@jg(ILaA6hl--u_|olPx;$YA5zB61L(kk@l7_o}_VF{GilWB>0-K?@YmVDcB6-
z@MXqveA9+Iyo!&8LUS0I?JS8*QpU8D>v%f8NkVYZG85w<a+|kiC9mE|Ey4b~rHS_#
zv)QLA&wE$jIoUXk6-ER5>vj1L2%G*yDTjW+W@WieV&%JqrR8_{E^!EuulY}k0DG&)
zkMR)!XSe1<s1@u>elQQws=S})FHra87?q!zV)GyI5iAOPxMg5}qq$*=Sm5&raLUkS
zVlB~Vm#Q-uu)lvS?cceRJ36Kn>7RzgKAo69X^;m5Ed+fLW%2*Wz3%g8>h+J$nxSD-
zMqYe!02A!KFR#ucHIty3T!v%Q_-=dQ0u4xyC40%L(Xl@A&0d_M*vSPt=?wU$P06}6
ztb))u?qw>7v35T@U!|m&n2`T{@zPpVA<0E3dG{+Y=lq53SOPZxIlOhkZ;f-}`;Z+b
zuTyS4+k+zY8`85e#Ex?wi`o(3|B^(6;q&YE@deruR4O0uUF99QN9~KJVL-y0hj>8z
z<E0;AHYi?a7k{rYmq2~VuNoD@PCR@#l2$(~UunQyE6+Mo8~qT7vq?1Z4g~Qj5bj3-
zFUKs$?@^T3g-`-Jy9{j)o&!2RRLJ3{tcFn1qRRYRzp>;!TEiAN)PcPosHpRdE+#{$
zz;s-h!KJP}MbFjw5)iRdLMI0EHh)0#>*MV`hoXmlA&9$Yz8!4%@s1jJ6w@P_=m<aD
zm**ryUz36o@ke!JS?K~oiSmnMGbIwYIhN|C=Y0FN&zUD6K||&s(FJ}8ic@o@MF?VL
z#7&lsiG6rd5w@EELJPJgf%@L+5Nn{D8VB(|j&yg|Wm_K}%tZ#_!iBQc=FV7`+4FEI
zS!t)+Jr>4Gy1L5GCr6?2P?d7b>VKdDf@Q}OsvzZ4R8$nS1>2sot!?k=AJ$9Pg<rD#
zh^i9dd^fj<s-MsfV5LG7Dpg4x`as(x6#Ik1rZ*cC8*$Lr!4yIa`{$qNToErLmAQfI
z9V#tKFGr@7bH(km8r`V^zprJ#e3Qw~WshPk3)0LyE^qA3F-HdNZNJhL6yP^*^wl>e
z-zizKE@E10SW_8FA2~EUJQ(YYY$W_FlRx7Nu!jW{%)BZ#+E?EAA~VaTr*d0W3X^2e
zi@=6H)Jv8=B*dy5G|OO^C%{A7`CUiVgPSYL!p6=nFtV$wOD#O$<JVl<as<BP#bX|Q
zOVr?P3#1>{ewLEI7xWW0kW%m-4b|V<xboH4<=>)u(;s~L5xglhuB=0yx7xs@$2~sx
z@J%ceo$lLN&LHBsoAZ-qB)2}5Ca!mx7I9O5)nYj|i0d<ekOCzWENHO&;}Z*Z6QpNn
zr-E@&R8;i77}*W*7S>=6+~J`MMBHN-@H1|i%;0J@X~({#>bu5Qoq-^HfUhf7Uvuzp
zo|=5kpW%jn4qQU;vu?CzDO!b)k+4OnObhu}*QFX13z!h)<>mkRDhsPj`KO#ziB~6{
zot=whITKHi%2ajCo)<<?NgX>~5Yk6r{u<_BT$r1JkH`MBGJgH$AJ{~&0wv*=ZBova
zlDjk*?Eb)M4od6ulLwDodC5+6Zb>zeNZ<w0o<=V>(}}{|1+_W573AmhM+Q=hKWns7
zS<isagndl-*dU9}XZb%d`llAKuz&|wT5lKav#fYB$=<~kDw)hc6I<(E25v=Qip!c!
zR1~XITd}h7%a>z=@la()M=b5HFC|EyKaVZU$kgWUFvW8ApdgJXGd0E?J6O|H^nzVh
z9z#JRR*=g{Oo0cGXo_YH`!_sNgKyvNeXAJK$zZ)TPAByB#lL<Hj*X3-I4$Ap*}JRD
zcT0h8fzO@OKc}q^gg?e~mz2CG@#3RIlXux{tvZMV1zrFM8`SF)C*)^^!CWJ?08m%j
z)^@&%g5J<|`TIC(C*4bzP;Y)!^y5@M^!Eo*{E@-yYH!8Pp>qQroi}!kt3YtWK2IT=
z?ieilIC1>AgRO0Av1cUHmcNx}9iihpc$)bch8j}zFbQ+urM*vn(Kd>!m*9W!cmCJX
z_y6$L{f}&<|3(n0Qkhc*-b331dyD01R~4P{)=-vBgpDvH(z*yY*6(RXVXGHo#af{m
zzgkEhmCE#Y;0z4B(~{ZoMjB=kTUe98<cSkfG&YV=_>JYK1YYoeG5CA1`a5-$IX2Ml
zeV$)tKXFmxw)a;Mxz)SLjHd0!)B`buTS_na(iFa_RN+s6%$YpLRl%d<ZE1})tAA@p
zE_hpMw0r(7918b@UN5?m3|o@1;Q<FHlq~!J4ce=xV`kg6&ahN{BVi-0%20ej621T6
zfmK^xGDx`a^(ZrK!sGy?+(OzVh%_YB8FLJy<e-QnX^|Q>vM?TpxVrnVZdvqM$TQ~U
zyE5^aY5^0icZLSwM%o)xv&%`ER*!bu4%NpQn3~4lm_|eG?D91;TaeF)=2<#L(gK(~
zUZXlgZf7|P^^RgsgVRfBS0VhOto@DgPnGfCM=vpS-zNJeCJo$HZt?Q>2J^lTz_tJn
zC-&T7ZE`(sng~(*OI9Htzh+v@7?nTSdO+l*)V+BmFI8JH9Y?154causOfvgsI<#_g
za(X|9yJ8FgjjHjjSpW{R5H3}<yB)YTOx6w>r1v2xjoJiIrb0~BJ$`?}Y6ZYtm0!$S
zO${~vI}C}0R(Ey8zrV$8QNGizagy8d-_?Q_MMOnOvXk$<dm!b~JOXsA@>Q>s9xH`1
zI@+kVX&AE~L;(fRqKl6gV;a^Q=tRkQ<80N{(SZU~_AWY|(Nk^+b`QAu*%A~YNbM{q
zhj{IS(P(0&OCOe6z^|W!9LW2M+UTAO@NDQ)3~>V+=U^bK#s;o!%;f9$1_9S_mo`M;
z^z=X@%e-m(_K=Ay=tN?be8uWAaoS?13&WNzZ{NOsj>R@PHbxRFZZF@$sF-;va|lfb
zCaKY6*0%58;TTCtO~v+})7)oyXn!3)f(eP0T(g^8!*cdO|DP=aJC(e*KQtR3g3_mE
z><TRw%2Aa%NKL38l|m=Np%Swrm2@s)Yohws1oexj0gc^?#8N({4)k7l&jE9=tUV$i
zOo|XbejJmWGCbv<BhGR1gZ7n|`~7=W(mM1^csm2{ASNoWVhQqJ%MEMmnWdR}<4!nt
zK>}k`wEjN3!uw|xNKTVDF5!+iO2ij6S&cC^C1y2&rbEJv<@vF#Rc`|SAZ#T0EC${+
zbQwRN1FdTgQ+0;x{b~~;H#={$rxm)ckh`}t2YoleVXVYWR6ZT@UY2_Uo>=}<r!-0T
z|7N8IO@ob_pcL+c4idCf7U6;4GSzkVgfr>~H(?<|<WK>9!f5WUeIhq+_g2O`m6fd&
zbD+2S$MX$sSRrtO{ky8LOZlh9c!cnttDZ*!TL!fORk*3ZIRm?0NU}-{?)Y$nXv}h=
zh!HSKKWYr#-~_?Dfo(c`nKqb`;O)WyFm#Ljf<=h_E9vz*V_;!61RR2F!2X=H9i>=Z
zJ8A@6g-Pn9H5tHp2&tqS6GQc_0vqvjUi^I;se!5rR?l_I{YWs^rWut#+``;FIGA98
znNB%!|B#g6lF<R)3evjUOj|ZWv_n?g?SW(=g!vvi7mMyb&*B?2NSMuOObC4L2JR<+
zWb*o<+xR=%t}cqbk>61+L4eUN_Bbad)(RcU{r4xY#ktKnd3lS|t&f-y_nc~qL<Csg
zWTMp?+vz6tKoLd7F*rJEh1-wz5K4Xx@PGIiW;U59WbdWeN(4`xqS3|ZSs+3jh8*hr
zI~W{9s29>4v<2o^{c_4-q{;hQ$dN8UI`FrCE%t}q;_NRROLn$N+8NiZD(%g**PFB#
z7!X>vV#O4`2KXc{<=Lh6Dwr9-FN$s(LgCRtE4ViBdJv}@MO5@PB<A8pp=^94H4$^b
z!7I|Pi`#rebllRFtZHnQwNXLF(o@@ZS%+?@AH$H=d7@V}wTH3?syKeB=yL4}4=PqS
zcXuqt*~L!)Fm_PgfP3GNP#kI6TuyFNW(nWtrly*b5=|Jf+`S4mfEM(hj93kD7t}^}
z3wQtT*Zo;za@0!~d2h68F~dsttcj%igU{PbN~DOKpp60w8#6kw`Av4Ve9Mgk%74Fb
zzI%c^zaur)uikpr+&$J}tG}w)^WR*V{~e9+U%&kyk=Fmu6^8%ATIXLM+<%SG{MSSK
zuZQ+Oh0p%~ZchI7h5f(s3%j%WhU7oB0MK{;b#(mSa&(-h2^JMQL560c8<e6MEF`xX
zT7(&_5&o;ZKa?URV!YZ)|DS;={>xk38w)}Z-QzG142Dib*m#_bKb?;C9Qr5>pfu12
zO$`Qe8`(#*3!!M{77~I0TF%@29*r?NzLj3@n%Q4RKYse;?jD(}ohHu3#l^vq1?O@^
z#L2+f(UwBj4!A2}u|fj{zcVKbiv?lf=&G$yE)pngtS|=fFwm~Sd)M_(9~GviGCsZf
zb2T73n=I>7hSZ?Gl}^5cJp43CS~E^lJf_&zgpgQvc6K39e8!zSk8Y^^y7a4j8QCU4
z8Z|1HSD$1_huw#$m#4pa4#f5EeJ%5W%eqX(pwi+MQzeV;SMf4-t2xQFhUrsj7#%|N
z%SSR1jh$9Hy^&E5tcBQw*|5H}v(pc=)ymt#KR#O>Rc<W90FJmnunU{Rz#mqw-1+w(
zlx5fFz1*eilHx#Wyn1{t`Ks@hz|*^!lh3+R9s5I<>!LSglFEY9TouzFKY8+Zs{RQw
zPoxXx;2=gD8QO#P=n0Vt_LLBcI|A$#HP4={beJP$3e^NVlgfI^+aE=NcDmDyPcQHN
zopl$NmlsSiWg<*gX%jAjRE!U-xyIXdUU}`LsMeE8t3ycz2Z@yFQ)$zuYE2GKZfkGY
z&QKrX6<Re(3CF6^%Q1hRzq57@)Y5#r!SSIxfsW(tGt<+9-*Z3VQw<#X_%-Xcaq&U1
z=?#DUK~5brys~3&Ce@ECj8F9o__oT*Fl?PAJ^9;#oz9%Fm9*coXV22OhMv#^WBEbb
z>h<deC4xj>p`S_-*DUrJrJ+&tXI_#M7+Fq_4Sac}aZ1$nm<|*O`QX<sD@!RKe8d1=
z{1}!!iM$%)X5=t|KC4bMdMGarm}C_&Xdo^;Z#%8ol|@r4C8rq=Q4bVRwaU+M7-7-Q
zd|(9CQ-?%i7iue9keq3F|6b&jW-iS7P@n+b6?UF@N+W%au&;vvO>+1RLS90GcZ?Ll
zqrNK078K`KTRMtY;=vU$&wPWpkDs54=gMBv^s2Y%_61o?TQ6SZZT@6p?XD%(H~N%G
z(R-3_saj3#ISuj%s*<?^+D)(&YcOmc8PIn6+4+?EhU009UTZZM^D%Vb=?{QyWG_s(
zl5T0Wxxi(242M4bTZ~w_$Q4Qt4jvd0&@W)zy?bw<AVQ=jbs#G9HXo+#u%eT+Wye$3
zUqYiY$#JPhIpsU>*SV6OrH-GVm+q^|jkQQYYe@92tWEoKV$Y%ZL4xa(j#SU#nsd)`
zOlOJV-=3ZekeIdYu)p`KH7Mj&RqpZH`4zE9_2p-~W+vOzwH3XcfqJ-<dn-KVDDWow
zg?UIa%jbvdN!hP$P6EeaAfgDXQsyvse&5!{&%X=f@q!hP?2{I!Agaq;EQbX#K_?^e
z?P<$_T*G%+_^J;Nv*2f7mCVtN2Luy$(Ae%TPpU2Ir1#FiJPqe29|y-Zuxp@MvxqNd
z*ac-krT|noZE`~?vJ}rlLyJsUCpT+O=n~XND8f!%!z<iQd5Vw4id64jty9S9p_EJ(
zl8m%WMnjGFu+ct-uAxh$LwK5Cr686=ulAT~+(D@JTO1#`e0Iu=z0G}P$;mzkPak9)
zhRvG;ZpP1y-^rbr82Fleui#3|8@^GJQpu`?{mUNiJwXC`>Gs316kUeh=@|4I!55AV
z0LBd%20|`AcjJ2?06KDyRN_{;9vZ+@kZ)ScU}li-kRfvy&pCqV?`mp17iZ0283-|h
zbq9NZ1bfO9+uoWzZ1@C_O|0U=-0ZKMH+`d{CqS@zde{~8=HGSHq`JnLj+)?UkhS!3
zZpspi<M$Cp9iOR0zcenD8Qqp^blQzc{T=sQZp_Nt?~TWrg`cg5wMuK~FOn$nm%3o3
z*>ehut=fL_>Y?=IdHK`A7vU=s^r6r8dCr@4078a`SWth_6$=h9ncuuOE5vwqBs7xI
z^Wv>aSB<2+)0WyZ031>_m^e7jFbE}Lkq!-gTa5u^m~cV|z@)(WEYI~zajyf(&%G%{
zf?D;~q*@?Bgg5~<=?#F(u3vABMp!B3l9O~SrpBE1S3%JVdKdGMqRGV+P<|xiv-C%`
zt42nEQK|rXxV~~Vnjm=|$z}NWDNG@Dfq@ekd0{Qe=gP`7lWGn?w4m^-Uknl)zm)Y_
zezc{Lor}a@TUuIh)9@j5Sh<fUgoV%A{%}L)LO_7vvzzzG8DRITh2%5M#~^2iOL*o^
zau*WiX(0>;XE_tKh^o8d^YPh~(3rD$v<76#{mp$Bi+cC^zpHX#{?m5#ab?3dp0a^D
z$*GYq6O9ZmKg^W;{0*>Lu6J`=&MnCUvRu@UHzY`=O6CO28oGxTrVl>xoK|jDR8~$k
zZzO>eYh%w(SR*v}{MmbTze+sey6MJwPxm%%Tg5`Wm926C@E}Pi<B`h)Z9roHb;R1h
z<I0D^;Ae=B=i;6xx?&B*{(CYomlO0)nRbT0Ilj6@AOJ8>kDr~YH*d<NhwfOpgU98R
zsmetuhQF(Vmb!RVJ@8vIEwazL^xCg1N1Ie@%CGrSSy@|B(hhc7Q%Z5^yQ5&)PyFoa
z@rv8ean;0x?YJ^bqon<CPrQ!o*i3&1>7JINrR|~ER{j*cQTJKHR3yhinpx<`<wK@Z
z#o{p|>FGhSWY!bJf|&^ywYR2h>$z7iB1zqm5eB$&PD@Cv0LCEfICfQCJpid3ISrK!
zNFYI$N=_|azEK?<j-jDK-|`M*Z}7$fy9$=vJLvfGb}vp^jA<FTyZ-(Wj(vSZ5x}e0
zA)9jo5ulEuKEQF2PUg4ONKhLDPs^xWi56s+bebMnPgvSA6;z=h&Z{ziTHz#D#U8lh
zsKTe%+3mndBkh3^-H3Y=%f6Vo#MdiTqG5i`{|OGWsmj21&SKw=9shAU73p5*b1!ba
zwQ*-#)i=kqWUFPnPrN~*psd800Txas-8UPQ5|<wy)931w(%Cw-XEY&zfrgj2EI6H$
zI~QxaLBr?6w^sI|3#RF(W3{NaT<49QiyOpjl#BH~FxmFM_pXNoyo3^iAf{OdL_-JY
z+nUZz4&%$!h=M7FKPQQrge%GgKds5gcIz3qxs451p>P#INX^s2u~LNPYkhf!-VSCE
zkr#ah0%wyx7c^g-JK}6Kezrb4oA}}@`-J;Qg7Kz7gJ4SCH$+-b9{Y*Gf<(4yEzo1n
z;XhyLdAbBCT=dLti;g0^bF!u0z<9dNjNNN5%&+>1{qR%)o)6#3e1~Z{s_O5#@`+kA
zB6b5g#l@b!`!)8TOiX(3Zm|ODdNS6VZf4^8LY1cx2e_@PkgUNs&_FEI%ULHIVEZcT
z7{mdv+(Dxif@Zo!lL4g_HttKY3fzR{=Ts0i0wZzy0BV`;WOH$Dz7sjxrbG=zhth>{
z$IR?(y<(46;4^wZd`UOy5i%k1>aeWdmvqfUorPyf%7J^?tTpzM?*HSS?yOf{06Pdf
zY*lfD=)-=A5Hm8k+YZjtFwVtGS*N-Jp;$}U54j=N7vq;{RNmg%xg#`5H+xz)d&~ud
z2XDdmIG5)NXGAd=HpGY(Jc&B4JEXd%Z)xv%$y~0J1H?XlCT=x3$L4Qj%hs%N+yj5z
zUOw#hv%SOfu*TEzpsL@f5sZyM(l97=iGD9_7U-t^N;>yf&qX;0y^L!<j9Sr}i%SL-
zBj+Eu@%e~3{fvKKts4CR#6b+jj|#muw)#VwR-20*KTb9edVJ1FUE<WP8+?N9q?)>7
zV%0-Nk{<cdiwVDH;H-Xvhd5YpoX6}9^5SZo$hb*{D_j_DUkZ`on_@`1UZd|f|4QM<
zfcE=$(cMA3O^ub`+jzfy(-spGBW5aY^-_z4YgO#I*4pc>S)YPF;_>(Z%Y<BQD%ALO
z8$Dj;Kl2M@01o2Zxg`0NfB{~9%wB<We`M(dhdebgA;ObWEZMAngHS$`gh^j?RFu)x
zC|sfQ&DWROJN-IW_Wk4YQee)1_VU;g|K2S_BIUiOYTjJtqOD(X_?lMdx&QjFU%&WO
zIwRFj6Bc`GB9#-(?{5~9bH<X4py1$O3SH2wtE-&zO(0{30x8k#yAt2!F+^;MZ!)j~
zN$tlcF=~S*ZjGL@sfi!%OUEOv&wu4VdsaG|sqGvmVG5|r^6k$OhdHJc5CbHtL`5@d
z$v*aulr%WEMO*IjcL40rlQ8jL($>_!`iheIH+pX*&OGfIukvJ5#8<~m^%oQ6z1fdW
zl4hvFD?9(K<ZtA($t-^xC&gxx1_)eR{q5UYU=$?1J9=^3^3u#yzQa;;l&ldJbtUk6
zEKMCl;ng$^GwZ@&oIAA@oIlLfREI3FD`su1OtYWgjwz-u;M@g%9(6<eGc}}m*yCGk
zZQ7fLEf=4>;M&EJSbs@d+itW)i6IPL3yjF;@I=DmAISH3b>oh)Jmov7S4+TkI5H=0
z9L-SSV6*vyd6K?QjzwdE!BI3r(}pbP|EUGcNnU+QUYzLH!mLjq4fK-zlr2aUaYe_-
z?c2YfL*ryZ?$k*0;KRcn{QBQ(KYY-M4U94f;Fuzi;5muLgH}g*dz~2&_6e{Q<Rm_S
zRvH>~3ng_&^1+j^4fZ2#hA<R=u>5JJJ09@2$0pFg0-lWb)|Qra(GG~dp67@sC%6sP
z5&F!uwfC(ic_m~07JulomlggwarpP->mu+W938X4xknb&bb91I#sA~Sk7y<R-xP3g
zr-AONrokfA+XHye(sb){V!$=hYo5#BUdj3QTJI730Q}5l6h(KCrPJ1S3K6gh`q-3f
z8-}fIv_Pd!HVzc|-~d_9@Q*E`S|1+u#VO254ZWaT3n(mn^$~w|9(aCOBLjm*D-bA^
zEjioS-uf(HT@Bp~@Lu_ju7{-ywpJ>o|87)aUpK)kS3N3P`mU$$;n?GRvS<iH%$Qx#
z$^$P+=bc3kZKdztnM|p5eA7z3+i+Ah=wpfd>NcbTdHVV%|BJV`j;ccM)<#W0kPf9m
zX+#uB=|;MxyAhFYPys0^Dd~m<D2*tobT>!{NOvP0-(32h@0@eTxc}X88DsCU2OHL6
zt@VpJpZSCqg>0uzQK)uR&*dCD!+`6H+@SU~`qQoF7om0&e@BG>U(pbv(~&*oJeq(&
z?|)+sGr)<wLh^fIA=3m0G}rJ0|9|N`{{1;uG$nvH_`zXiWrb1m*57sTy&6)z@xe*}
z%*lv}V^p4`XMt6qD3Fvv$9moOfn9k{dQnj-^2I>JOH(~`@UZ!ah!(%uYl48vw1Q1b
zB9bLEFc9P{dpkQ7U%q_U@LJNg(nu51yV*xmhY8(^>k`d<Ad5oiJi&vHy?u`YD8Do8
zD0KMl7MHX8?A#Ly&VUE2n~-h$CkwA3wX#thFo09f!IMN*ic_6alT(NDa*~2l=C3wp
z`(;y8(~TQ79mx|~{WN2*#yrPvbyOqcw7}Z~OUm>C0|SIx>8Mov@H1&N-7}@HX}m}M
z@5S;`F*1NfV^^1I|0CqDZ9T%V|M$6Xz0OKQAb?tPU%b%-eg|yj;NjA!t!{is<$>9q
zB~4<{1Yt+D5I77XLx&<%wgfIw{>fv7cEKioplBKuvgLp)$YnGB$;1tO$iQ|(+WBu&
z|JoV2==P(<MNpMXk8+#$%%+RBiiwM7X9s{H`Jwigr`aWN(m)<#Hu@A8ml#83SmAkW
z3yz>${h7G{&3uT5yy+5{X-2mIe?vJVZ_{q6XVTBu*vRM|_T@lN&ySH2B(DT$ipr&&
ze`{j)?v9St{gu6{T&M{4_x7Gg#C(DZp)ai$bhwv$y@Kt7c(jmZ{`tbIDI0|LUzmuO
zfGTF(;+Z_40Tu5p{1$!qV7%bKrkNR?h9KI;ccGvXa08AfOjf;sL@7Pe!s7?;M;|*^
zC7bdBoItTB`(R22K1o0(`Ff&?E`Y2&L{ej7{BzBnu*0PX?&9Kp17lWj*aVB_dgvjm
z3Za;<Ht!X%wM~VH6tJov@90n#mVhySbOha-S3rZ@-3QJY<R9FdxdD7oFB^Iw)g(gj
zO?`cR6A$r69tU^$A$amJh@Hwqg>0f)AQnKTbPdRyfn(Ud4<-IY^&vLoT?Czg9N6B0
z8BF2y1>;u}YHQE21-qEEzkIq4owWN9qA2=P=wCrE`{!4Nr(jQmiam?95fU02BgBBK
z#0B%+N##dpXM5OB9W9VW4ZJ?7xg5EP#>PevaKnX-5`cA%Pkw%`54wl{E#N0Gi2$vg
zE@){~uYp?#2=O9V>&d3-ysG`M0VNyq04`PoDy1hwq%AlY06h_$PK8}v{mM^|kL6PM
z{+u6rfNshhWOv}F6fDS8QH^(~Jq1GP8L@Ma13=2#<<Xo15O!YKGaa9972wHHQI~-#
zXtg*R9a0E0O>9*Ec4Kz#KrZ37n}xx&KQ!d5{S9EU%(dASkKv2z6HTx1(ru_{3w(6M
z&CTf<?|SbvUjdBKt*r)@Q8Xj4W0WAQ?am!@+CugrN2t+YrK7Wn0BaPSR$!jpeos6Y
zgcVB9>VZ`W#g9y}>TKOL2Ax73w@H6~z{fzsiB0SZrfNWrJqHE@@I-*U^BlAo-YvR7
z=N*v)x4hkz+|+0$HLKnEEgDSkqZvuiFtb4CIzS8Ro;7fl0-=fee-?Uq4^&)T@eW{2
z@Nhwxc%%Xq5*=tC*-r7Ts%TG~;i18<11H=rI4^9vQU!}h&_JI|&hI`81`<{tva(&B
zaaYmV0>ShIC>Z!0peNb{cNU~TvLvt9`}Dx(mfz~D5~HwN;Ri$H1Wfo+bhmGN#=L3)
zK^w)>{mQ4mvYtgjU{9{XrJmPQH~VkE#sKeWW=kraTKDdzAf&5&wp8Rj=@AL!8TEPu
zsO>)?1xVTxm=G5I86}02a9n*51;_T=ZU0J}iMHaD6uq}CLQY0Ofe;!GKDL?-DYbxK
zn}mTKOe|B<(;D#G&AXSwW(TBJh?z{s5_I2}nyq>ny_t{=#Db9#PT0G&Np?dB+}%F@
zn5Ltj`lp~0HnF%Hmjze*&>O!4aIgSsFY+A$hcoF|i0Xr_ETj|pYN@9dRGreUw0CcL
zgZt~zUav2Rtih)mP%{WM$P#Osl@EiHfF%?UBO8H`Uk96lnFiAeCSZ|+XU0#aHY!kI
z0{km|^pSJJ<C!nB`WX=(-cXVLG*Ga!rbMIYLV+sD_VO1OB)O11-N!iYUX_4HUWf1#
z(5|O&tf6u=5dMou1804|Z%U?M^=qgAQO3IqKp%ej>uZ0Su$LuR#E(NO@Zk+GIskGl
zgMWaA2JVAld;_kRA6)$Z?&LINcoP)xaCS%!O;uP|)5@raQeM`YT)!2nmfw{8eB`tB
zDI~af?sc<+6Rvd3ub~N5f`{vU<(9swK6(ZwCIm!8Q|Y42H;GNa9faSb?v5Y=!`{yP
z3cT@p-VkW#(x1_scL**b3qX72H1GKZ=qw~`8v)&_N_G^OG$WrU1l)GTa)1u^1<$8@
z0Qj&NcOF)m_in<8Ot%i>0<+=#7!c{kywC*FF5`8e?h4nDXw<kqladO|HQ#`M5KxQO
zP^CQW{H)Cd_jU9qX@!9=*C5Vy_dWvy`<|W>sKH`m+X)t?Kf;CW>-%|^Xug}0ocv!z
z{r{u;hSTC!{iYo6RNMFJ7~QF6yln^!!<#gtqM;e;>SAB9f-O`K5W^%De-Z*_xW|d-
zBQ*6qJTcMZX&|Tt(vwL$_*$_@dBws}4AeRXyCwW7JBNZ-N88hondj*Ikl&~&4sxb$
z0mJOe7kTd5`KK5dA<^zpE8s?u?ZK4lH+^KBUxR^8)D>4)`5l?UiNLvM+~)CpT2SbM
zZhUlJnN1STz6bXdDAsOwAy=lQp_SE#^8R1H9*hOCu&Bu5wlRQe3z$WB`Q6_Sp@2;B
zV51UWITaZ=Q(^tnvOmKOxi@Sk=#=`pyXCml+0-&1(KcB)VSMYcAqm0Q;dLg;Pmzza
zI2kPanwm7)*{zmJsYpqgk%iefKynj9tTa)IdCEOt2mqH#BUt|kUY>yg@za7oQ$VP3
zh1f?D2`aG`xFy<Z#?!(~8esl{B)d{22NN)|!TBy03aNZb<t!MwrtG0hDaR)#7jbu1
zZ=s<9KTLg_sHWD7f`4~_|IZ&U=gW(~W2%H)_^KAJ;cQ>5pBR*TQYzvK>@wZz0|vXe
z1xsb13YuttZ~}f7(3_<OAWF6nSXW@&t~|yFH{JkX{2-m7CkIy^HnXnL_$Rr{wvu=<
z1_lN}c=BvDfL+1I0HMLmuJ?T|+_s^mgYa)aiy%h<(*A+~a7{=|1Wn#>o=T#h3anX2
z7+C?#8$081NbyOd1Qa9`kimnbu-V@`?y|M8z`@0h&&wq@wJSX?#h)^y>uN(!H>rnB
z+9rzmru_?z6C|Ag5K|@-*8^EE8=2t(V0XR=#uUn$9l$z_lJg~A2KfYtHIxG2R_w3y
z;=O6R3Xmg|KwE>kr(j%}RqnAnKejo^i$uzya>!O)!9+vTDKk?6c_7l^_6ko7$r~^o
z1~ixeGpai-Iqj@k^umMK2g?wMT7Z6j#**;|O>8e9Vo@FYKph3;t`CUxqmQ(Oydfak
zZm!M}gvdh+;8o%b`M4njL8M5IBxtgp1G)h8Rx4w;D1ZbCKp(?tA@EF7Qc`YJpRW~p
zK_?Feo<-nPQHYEYgYkj;@veVnrg4$pR$d%RFstz<2-Qn6jr)PY2|*aPe^$R%2ZH^|
z8gSb>_Mz_v{39~9(Jl;v*I+1>4p(;RFR-a^(^wIXU07d7dLBSc&Uo5EM=9v7Gg1ud
zVmQmx*t^EYEIVU$VR#pJ<Z`sV138EocMAD@HlJrnrJEErLlj`G)i4TpsS`3qBWb`9
z4(+X$7#J|dIb&hzu5crEJNARK1pE>=T{Nh>+Rmpw#f$ymw;~~9UrycQFijH+!ee6^
z(}W~%;GDsl{$%|alIJQay!MxsRtB<>J_?zc!_M&!ApR{#@S&>BuNt?I`Cwo!L$wc*
z3;l*H67puG%Rv(NV~f6}TZ3s`3^QfcKOdHU1rFubXi1rNWg#fiz>Q-AM6{4xf3P)O
z`C^PMUWQ5a0}7J(+%&mLrNd&VU*-5r1ng?PAlUJFk>34Cg%2t3V-6_zt4N7C^uMfg
z<uOY;MtdUj(y2vfvAm*NI$|ba%NALv?Jb7FKnPs#?zgwY?4@1d_%k7s$=2p(tfP?|
zJ&>7ycCNJtP}UV8x2|MVulKH<?!fPmJ6D0Mr&cb>se{?bLxUr|P0IafQ%v~Q8^|AL
zo)MC!318?*=Eea-T0o}s-I8G@cANaE7+tI(afGxk(4TKZ{Vd*)qAZ(w|G%(+8_i-a
zSdob1;pdqqkeMfqHxBd2Ir_TQ*;(au5gl&J@$$TA;y-_oamK2*%#kkpQFL<XcfvXg
zfu{^vuO(V1Q8aldN-i!gtVLgCauJF5AFHwDH_3=kKnn&^LdN=JnK+Z@ybugk?P$3K
zvTeK#J+)V_w&8Z6wFjK6_J!sh<Ppacr^n~uP`12$H;-(-=X3gmoDB3`Y4e6-o=$=c
zTW!2kbKvd?jYCwheuHufi2MLwR!Myf1L+43_-v<q>ZFQGPnKF72Zn*WxnMcKE0Zs2
z5A5Bie0&WpEl<HIh{Vg&(}aBJ77e=e%V(BBY^JsDPQ!-U6JLkbnPb(}V=oJRvq{h(
z=pKB2*c=ugXa)e}@H}sJ=OruI{!6e<u>*8{cfKT2zZ<UksAT7(?UL``AxuxL5RzjC
zR!;X<b|CZ(*w@@VJTT}&`h>K7a};lgi0A|KQCs6<VthP!&n^u0_ToJQ^Bze50yAeY
zL#M&)SX?SEc;BHw`%P3Ls<s26x<SJM>UWh6M<^}hguu_H_R@Gu;CCj&9@p#otQYR|
zS@?L;QX(>FwNm&IdN*$nC=T(GPUS5n-xUAGTRp2UMu3xNuPlzE=w9>&$30*_<;90?
zGyDq$X9FFs_D#Am_FYfG<M}7Nyn8(+hvXm4eag0|a86E7XEbY`N_h=@aM$M)|I<4#
zaP1~--faZ0790=t$Bo#XoKVObHK9$aK@yG^tnQ_hQ|91cXcxzU#m<l?QDtgo*3o(Q
z?jORKE^tJ$e9FvB+OKqSU~Xw)2n__bAm0_%=8l*G904V90?gry^MG6hpRU%{wc100
zl*h)q=BZxiP54pUB)y4;HoYm6ih@JBch7(H_fzxL{E2^3qW$Fzn6s~h#o!D3;mR*k
ze_=6UZEez~2AF;j;86^DC`nx%9UmWPY#dfDaPIVNsClDEqO$LQCuOkOgusc1k5*Ss
zi^OOGhPk<NiA02i6>uU$ZE#<1Y<wKuh8pW8e|daL3bj{(q8>&OiSkGod3`A87c&_X
z1bw`rhVu3G-A>4Oanyvb;CZ&wiWmZhMQ1_UgS8x5>B39ChfbxyA!gComV?tF63^JE
z2c{ZxTRuKxKYo<#*P`NT0(=W)&^x*H(UR-fogU;kyg-Y8Y}U05ZfzOr@ljFtNgmN0
z`1v(;bv+=sWf#F^P4w!-@l$1Gu1I<x3&t9F1NGIoVZfMvq|~&S3KmiZY8*kpD>Dn2
zlFplG>gaerm*ES{Ix<fmUKUU)=<;c2m`&BW-Q+hzEdd?q!SS&h6iQKB+|zj~(fdPS
z^;!ow8rQTZX?(Hcl|**SSr99m^?IWw=fJTD8IDZDwM_R`y<zW*^mzUmex7v$ZDz&>
zi;Vl|;?$v}=9iX`(D&_`MuE#S4F86luU{=zhZsc?&q0EDd@xaVxfA|#z8lCJ7#>HP
z)ehT>$IwA09*DX5C;?Cimmq`{Rr~u})m$6)ihBQab0*;Q#pDU8$m#DN*SCumQd3}F
z#cg-by)ELZdorb(*b1GWh{yQ`sqL8@T=%$2*Qplntr+nqy};P;_m~x?X|8{Ycat`B
z$g1K|l=SpRy$tf+LAs|<H|{Or9?T!RPd^&+#R-fn?ZTDr$Wmo0DV`cmS$@UCBkhMX
z>2kB^cD{ytfw6gnmfV<*o*sqObhfsuA}xLHx2mTht8wx1lUYG-DCrFXr^jv~OhUcF
zaYFQ69m?t@jQ8@BzJ3+Eb4OBJdqUa=)fbgbX=7GNHk%(|sb~~Srt#;xq&iFHdy<dF
zucJ#9A4RvEMH5T;Qt9egRj~zx{s>uKU(ezy>v}-1yTUAMU~9_?m0VyT;w{N;;Cqf<
z5#(!ySL@p(B(?bFt(EYbv4?^Wu{rx+6*kbq8n~DL^0uD|MOc{g@o~OYx1R-B;`etq
z{{Bw9D9iN66pFiGTerFSP};Qpv$5D8Asd|k{(<YgpW9#H4D0A7|ND(${2G(!e^39$
zh>8aJ@b|3JT-zCtkJnF0v0k0QB~(+8Zg|@dxe>)O5D0EAt|GYdixnGXkG>0$K%HG$
zQUc!XmF4rpk*0`qp^vGlw$|3#>A&@KbUvvUl*A%e?!A1Hruv$i50L|r#7W7?1nAZy
z(G+)G9fnsM&OFtOj7kd%%4%!Lr*-(vWZJ)d`!?-U&rVG(?0%P$vfjLxLPed=aamD9
z;vJ)mnW^csjohp(uxHm9!n{14R>-h|?%V-{zSl7<*b_jik!bCJ{9|cE4cgk<yE|3f
z+&Cl*ic6FpJ>rwvemTqE%o}oeXUkqb?8AaS|Kfwh*(Wh`t>Mr2X*YisrB+v0!;_ep
zOnt)-xW&o}$b)+@ifASyxZGv@eI;cdtbA|Yv{F!TnOZyg@ecV&!ot*3c4i{Fi|dEZ
z&J3lznXzzLFuR#4D-X;xN&;B{JdR+n<h?upjEn2=_irk`KXA;ttluRj_j<~dpBWW3
z2r8D|lu+@vhx_|t^Prz1R_+@sGcPeo<eY&*1!_m4@j0RbC`Z0Qy0V2coH;8i#DVbH
zfmtYoq8{v8z0G+vS?}Wm;74t8(<<m*<)x(H(^;LYt_%s0(b77JydU7;um@5m$Zjzt
zp4<R)v8Nmyf55C`Y;4TiyAE*w$S=$D^MS+J2RoAB^p82Q0g{%L@aWy$-C}fsP+;tD
zLCyL3GYeA^H02_b*xFG3M#qWqF6Y55J!n1iQ{Sh%s|zB{*CMFHqo;mBM`UDVgpR@C
z`q=mF+hTA{TiV^*i|){=`3(S0e7xqUw3JkP;@c)~I3a4dT|ss83%N3tuB+?lB*n*v
zjz^}w`_bLa!^k*1GSV_Ipd1m)!|cbM0bB#Pn0%AydS&J1y_eIckh*0C#q6xClT%cP
z&nDkfV^V!l7WoVvV;Id+Q&SUyZ0-tpj=sKnJwhWmxK9Hzk47N!8H(DVwB_Hwkr(&&
z_BPm2%rIKw15fGC&W`Y$fWQ>|XCqm;x~eL>`~EVWTtc)PxtW%hmb^RwrkQ{%z0LCD
zLB(1Jz_b-w?j7VKxKA|K8On=@Tr1Uqu*{lfFp|-)R^JVv+M@mxM!}EXeeXPW$_T{D
z1?toqw2z7z?H?>sT?h9}!czl7!#A}tM55^3Jw1%cC~%Yh011*Z$<PFuy08X0o5?a5
zW`R4h|8qi*5ZS;uT+3HLP=Q;mxgfYH&<Pf6@K5;E#w$9(4ddqDH}c&eU-S(ydekI+
z!M&|FN8Wncb1%KC=KjVnCopm7&o~BjU|tiB`3OVcbl~dRJH#NYsZZ0Bpg&-VE}L(T
zAl*?+2a`1-oZtGT=0rr`y%QJ`BFV%ol%Sd?ZHpbmK$FEmx2=t3+?I4ij)U{MP1T(+
z`d(RSDQ<+~FHsQ{rWjYy<hvg4(pqwL{Cda~i`ZIuSpw+j%#7j3?^yReGi;$njr}G*
z&jr}ueC^TEjhbs8eH~o@tpiz2rS(s}lUK7NpA!QUa&%A&D!<Lo(};Dz%?8{#(P+Qk
z+j(9OUQZv9mhepx<h4TBdD+*aO%Q>xv9aNhEIg2gqhRRD%#FM>q0m8EVa!`ob~RhK
z{n+-fYr)7{`v!J4+jDnhUjWe2y?9smse<PF@6vGsOdYRNuWIc!$A*%`tP_41?G?0@
zaI|xA5zS(B&<^AxBBHgP;nIpQlb&n8_jBeEYi)37C?=EH@>L)^?m;_D5-JgW=AgLi
zJHNQJ^nB5I!7HkgVesYhlvw;Z6jaL~VotlMuTN=-wTgf!HdjqZC@^P?$y2>Ksvdt+
zg5N!{@xu6L);Tr?hKs#Dflt-Xj#Otg7o_zIIvl7OD7WeT5XuY$BX3FYYUXOn0w3<7
ziVWqz&QQW57;n5y`xTUnH&IbD<r!FBufU7@Z3C&zkw1av0}Ak`W*H0t1Mz)fjKQ~w
zar=L?w$gJ|(&*h=Ss|>@(bdhiliVR4G~En8Naz)u+5#LiIyxE(D5s6_n`+YQ*QI@g
zg}b#Xv4qL7?Mn8YJAd6HiIlt;^0mmHXvEozs1p&<YUlOY{KW&tM<4)8zXx@45D$1y
zto|(80wEWi0y34a1$Dxz-ATA!z9*q_rVxbEeAGutfPfH}x5T7Cou#6Cx5M)9g_PyM
za<=#}0~2$~?s)Q!s@x$pxQ~p1(}DlN0v6gf7#lE`29R08;ql=Eo|4p%Zu8_M&`K4f
z@gpNWJ!||AswDl|VU|G7EL};qe{jI#b<zd+n38eyhzMc=#(-}lBvgiSdqqt*yP$0Z
z%nOhS7XI>zim`g1OK{-9IjC}6dC%Xp1r4%6otAE(>bthAN?qLnqMdKo(1XB6lF1<i
zY{fRfC4o#avJNVu1#mqwG_<tUXG6n0nPRPf@k8IrIP;Z*LwE=?@l(Ri`#GDixPO0t
z<IbX?t(~a@g8qXy*C|IPh^`q%(dlV_c_FMxm<UL%KZCx8#wg&!{aDU=F25=Ne)fTG
zY1DJotkzlT1>ziybc&qOMNSX!r#|fO-^LFAaH;@ffS%%FMS|r=p>NamhB2HtYX^u{
zgGWXd=(PPxfSROw>1ZDNl886R&&=TJb&R#KuXb~A9yX^Q67S%B+w67NjIEr=*2XbC
zpJ8KH)6p@RJxu2y3H6V)*!~bTcy?AJPM9`5>m~fX=YQ8kp56gI)XayE1+h&s#?`bX
zOUl)im6@>5P|#|7It%Qwt95i0kp&XIC=+p;JX=;Y+`JG0OGrdy<i^U%YU#bAs{WJ!
z>ZR8Vh&Yta7wWe3nED=;zgb0|ioa2{&B<2J;~}&VzFX5U*pLzF@1JK&+u9Fr34A@%
zZAU?*V3M$-QEsH!n@YcCPj<BaLE`H;UgzbZbW_dt&EHC=jlgNGN|=DZI}s%a`He0H
z78ZUUp5|y;7-5%{If#XJc6ZA>d&a^qD5ziIb7?q9`YuryN)%}|Dumw59q`tIFIi<(
z)%}%R{ma98eJV#{UDv@JeZXYst(sN_OF+sTouiN(d^{6CDZ>iJDG=eKt)e_2R&l&q
zAPxfs{KZ#mBgrs@L(BL6PiaN>4QzC)tF0|8q;xx(AR_mB9kE`HY3J|Di$fdz>66ES
zJ;3h(CeJ;@iJd3z-&Y((CP*<^s7w0%IV5z4@2?K4rKHBkgZXg|ko>^?1Lj6~`t^G5
z4rE)c|Ahry7espT_onzN@N<Zhr~-}XL$Js!#1sKL4yH>_-1ik_WIE^PhhW)vCmnOA
zh-emxhon7=YO&f%cAjqvT8`6mm(Y5i+3&gigYOeaB|QKbcY=f?pncYytYQq5!Cg98
zVjQlV_da+PA|I%f*y`M$m0g}KJs>58#BSh!trw~nz|b&HkpTq@vbe_NwUD`^z>{vU
z_3?q)#si`{UmmRg+`mX-bJ2EZVr2!~j1XY(?Zd;B>C1Eo@RQk#`tZT$+=<>OB{x@c
zsV7pmT4H4bj{+pA8@Z{R7kjC!nIFEH_g?LCTS~@m38y5cn9@?LF!YZ=etd0Tq3nFI
z?(e)I(%2|EH;WhXYCadNjyb#q4}V1g^a!WRG?<DyJ%1l25aPGDoSC^lV4$Sb?=sCI
znd5#i29}KqB0&mOP32#|a`W<<|19)Ei#2Y!UG2sDa;}BtBZxum*G9<2#4P`ej)r{u
z=7u<x`}nA%y&cy{#zcxnS!wrA^Ctj4L&<qR0WetYLJ3LX(Z4=9Ue=zSdHQKL)#RyA
z+KfCfSm;O{7<^LBYzAH}zlMj8^Kx^(SmIZib-x?X_kCbnNedPu*thpvQ;tqfAby06
zF>n4fmWQXqAH%2k%a;^^^T#(-Ye+_`rXJq1Y3lA#H@a3mnJ%hLqgIYj_DfdL$>=|C
z2=~yhh~=7^1cNHI0-`{6@bQXH5y{3-V*_&ZS<S_X46xpJwc2FBZ{#9~o(|<E$FMby
z8ixrJJw575p+RKi26VTyf<PUOOG^`y&B`^;cocYxi|Z$pKVWEvQo*aVtNY^#qKDel
zFzyj5A&;OSrKN841%;O*&A226APd4}N=mry+O5v0n5zLnudmb(<{AU3c5ZVMOcfbl
z+!W_A5nq3$u6_WDdgk(p^mG=~+pcK%ZSl8m1u=w%ksYHYh$|;^+p!y&yn2-;p;GR3
z`jAFc35$#C&YAdV)!7}TKmYgBzm6KlX-ko%x;UE)iyJmiTlQywda3`g=wH;s%?x%K
z?RPYw_BWns$ljO;fC*t~7bk83_yQhvvQE@rdJhAEU-4^H>h8hIdva7O?WRxXt5kB0
zigjc1uP{5W5-6FK$tAGI7R`v2GC35h*lu|oo=X&34>UcY&ov=d71-hGI1S&XWBNK#
zb+dM{+jnkOdNqC=L*F+NCHt6~nq^>MK*^3!6}4DI3fat<h`GC?lwx{gQJfiPMRmp%
zJ)4dMZp_T~_6X32#3aClq_rzPT*eNoGr+I>eGre}D+82OTX&m$)qK`E4GkTg_fDds
z+TW_G04&w^R^PJrz%%J|TH^%7j+cX@8wfy5)Ui3$FEzWPt8Y6?xE!+`{@8xmDXbbT
zCfC^@f=P#tK7=so*ds)@HW|07y^0ba_U7MKLW{om^-IUR+g&}S?8R8ZT&u#fH#p6O
z-@jiu11z{Zwf+b=s<5SgoTczrLjeqP^*S)`9cHcLR;g-Hes^MMW;T+<QzT<(xwmK|
z;R1H_0D1R){OEuvj(JY;DHxUl>>(*@Wr8M(SiP3*mzgaL`WWt~&PnVDOQF|Wp`<=K
z>h7@H=;`U9f?P4Qx7QlX@%|_!CwE76?myjZByMZCBuHWU+uM~cR{Asd;-4%jo_2J1
zC-R@xqrG8BFf}ommAt@82j8#{!_kc4X68$u^y|fo<f4xhX`_^Jf?vR)%x<cHQ;CBH
z4FCL7az2ILmYtm-s|u~U;0pUbx&t5BtjHB|y5*se%rv)2^3H`68wS`J{TATh;jk$C
zA^^)q{Fz}HW_|)_N7M^2BJXn9oK(ofNp(rmIXXLEY*bD%xZdMmeOU+xE?TXt%}zdg
zzWgT~JY+*o{5Du!S~@@427(W%(L5eME`bdLjn8PYVdr>-ps{zg^9*2}gSvRf+pt9e
z!2wIX@8ILrxp#i%Sv(JRzWyEQ1qEO(?J;T1+Uc7>^8ruVt?FkQfHRiO!Kr#aUOmi3
ze60CbYy?i%%O|U`!MPL5$0rpAJU)k$Y_+Dhw+{N!vFDtm6nepONYV+Y;|5*(J3H>P
zK|xSrHW&Eaqu2A3q#&kZ0a^gQ`lq95pNl=7)dFn(A+JBHe+JI_`qVEjytiuher(V9
z0@6;07-w%lz4aC$EG;j;w^uMwtGPq1qofomoehkP{|&cj!_6eI;HA_;MbRc!QSc?q
z$ntYmmZ}5!k;NmxAIB87suVL7*+t2_hKI+R1Sv@qcn=5PTt9W*B+EODmR2*cw!WW_
zGAwv}>J6LbXd!OHVew2w^;M-3t~hSRzKXPIVQp<PU)B5Dgw1UFTw;V>thJtm=|2HL
zD0GY~z{vOh-KIhP7beMPN{Y_Zp<|LyFIH!e)qVW%;mrPuMiYIleRkHWCA5J@wso4p
z9eSXbnw`T3C@@@FH(rKh%I5g=jk}|5TY5na!DmH=8){`8s0~bdX|j+ZeV9oO*Lnsz
zcxxtCR1EL0gj0tHS^eJH;x%b|4c=ZwS~2ew?+_8O88sOQW0#|&Hq6e>*6<NZx0A@>
zKA|3dnkCH4EMskL?ct$arY|o9$A)Td&2EQ7MglZ*w*=pkyhpzw(o}zTb}gIjClJY-
zn~5o9irGXfuqKs1KkVv#o}FU`J|d%IW5wEkS6qDCkWk>@=C5C#p%QZo!(TI|qiOR6
z0)03+(a*S_j+>j9q`%$xZO|(F?~Fo^dRP)=<?HWHqM(4CBb=Yu_oQENC;sLM6RQ~=
zvSMNLhoeF54m|s0E!!L&?l27;&iiUp-~WP8Z3HdX)4%W`>|Yg|+eEAi>?`l9?Q0O-
z`dg;GXJf?4A12}D)fQHzOe@N0W&6*jFs)e*z+VF|1FNdxTajbw|MP!ki7+Iq%~fi?
zvq9#C$;!T`%9md*u&*aX9;srg0#QtU4YG9??pM88b&f)*^37y@;rk{J?d)zryU_Sa
z)5p%qDR$BG@;skTjs%-{_fZZMc>(#7&dz|Y>`{xNNOuDJrhjbAZu|Ge!0xnn^(V-w
z1D{v$x1Wa-M*GX{lk-C_n8z+pROW8JgXZmcueTmzr2%KcBtLnjp%KU~$a&B(RU1%D
z+MRH7e`BHmtRFuH<$$hhZ@p|V%M@<E<b(w9e;oZ+l^Gf}zGI=FcnJlZ+SIcLI0OXT
z?)x}!77b`Y>&f->DIGt5nOeaj9JzLOjAO@LUF#4WZD_u}{-UH8>?CISYbgxqLfNz|
z!GFHs`K88G8C>cp7-+~(DC22YZ*S}PILVJ^?jNHvAt9+IdIYEZV4Y{Q+NF|FrDbWU
zpzidgrtlk*y}cbFHLA*p#6;$9RtAO|_dh2<!=RTZL)I6Qp9u&E9%vM2nRYIgnek8L
zsoY?r7ol5(QIPS<z%bei`0JZH3)(ZpJ0tIA=k$HrTy=9h7V+@C@(FtJ9vF3El0Q{+
zp-=VLd<KbkP>jODm)?WSsHX-(sl-nx8ZThFCPI>b9zdx+$3-L|*2H#Xe3SoczRT}E
z=+e4A?wE*(G<34|HZ<PRbJff2ms0RL7+bQf*;#~)K05g%Dr6lPxLS-rU;#T;SPpxz
zzu#QR4Y0Qr@cdPZ6D<e+Jmw-Q%E{%DVCsDVh(4KmWet;EFs~U(3}Pdfj{#WjJqZMD
zz&_xGi$@7>;=p-jpv32L>SK$9(gLu*erJY<vDMr%`IaMh?tf6qIGHTA0Io}O0KoxD
z3#yL<o;|y~spYjbevboG=o?;4@u6{mXJCL4mbaeIIjy85sxWrpDyAPk9UlpRq2LdC
zL&Vd<Zb_cZZ1(ys&!)HW4oh{m?j))O!%#y#;GdqFN_X4)4e*HZQ*Lglzi4ti={4$E
z{05D=77D3%aA$lB`t7Ik3&s~xoeTuQX=&eiU1l*+Mf}<aEODS;jyM!Jo@W;O0ks9g
zE$Kbm>9DQwil`b5DX9?AfG`Z>1om$(N{A_Wqd`dI_#vjOj4ofiQ<=nr&&==79qf;b
z2Jg%MT=-gVYCQqTc)n-=XN}(e5A}^oA~Axd-jUDs@`;@H>FG%wl9H03lG=gs8`BWh
zThq9QlhVELRBJuS_58qj5EpL-Zq&cMy0|zq6ISlLIy46N8BEMPR)-|T+tm`R{AjJ$
z1bYxl2N4f3hmB`{qp;RI+JjW>T!q$$nx%Nd-|EjypYD?8Gge){FvhoXdb5(qP#bl)
z6vu7^zRZ?xTQVjPMrkw9gpV)!4$MT|=iA!#y~pZIJF!%8YikqH+=YglY8U&1B2fSf
zJO+Eh-!n3-wSG_%>H?nmxE2?<Lg3ddJ*cFV9B|vsq$kPcv2MD=-_^yGtCAZCfo)@>
z42q%<LqJFyr|GV#p^^6X4#AMB1#3@@7jNP7qQZ=MCeG^UXm+>B{e4Fj&UEEGXvIP(
zv)SOZQGmDc*B2W^YHIIiZ99hB(w)DmoLZ-+6~>_?G=qy$)mB!9*#qC5_ZD=PqF=>-
zH-X}~zm8r1b6p(Y-kusnAsz|O0dEZ0kw*w6(Hs0}`PPc@fXRV94T>Nv{*#T$X(duI
zlBOMBO4;8tP{KIIJswB;!IhnEQwL;bMzL?q&E01$vl?Cn|L^h_#PEmJFT?|`%38Cn
z3_^+@KUgj<4xhhre709I8mE6T4XLDj{IzuQp0XZ8=dIKAmWqlFmh7s>*ztUB`KkJY
z;1&zaCy_ASXK>&SJ)-8NrKP3hvA@=?nBa>))Yb;As|^^2D&?UAmnKL>+Ojwv%0SSZ
zq>aQyWr9=BG;ZztFMu#LyG)-0mBTgZ)oi8KXJ;TG?&`%oj08f2c<`VFI6E!PlYgfJ
zya_m-p>m*gY-*;B9{aQ@Pju(b)|kWggl!!4uH{mtewmpll-OSaJLVH@dzu|zzMNVg
zyA(%jY9J<#KZ>jq4Ge<hrrewy;*U8eh$<$(-QSOwt<*GI9Dx@AVELc9a0R5J<26H9
zS9q82mjty^BzkU)|B2I2iAhX61t?%<E}m9~$oSaL@5YUWXHj%L2^?!>y#gNVC9TEV
z>tnX8+F!`Nm4I~?HTCD&xjD&Dl0gv1LH|Du9kuuILj8<N6!e`K$aC7t;DwD1?g38H
zcm+nBxxmRX0`g6~PF8+$M<L6x)jY<5WYVWDVKvShi@}7KU=&6C=r^^>!*5%HWTXFu
z1>DB8@vjiL^t>8O$<6OQA9)qgAM~Na#KifF{a7hSpp}K^`Y6&Sw8>LJAsi$u_xv}<
zD=4c82#2peF71k4NEU1E1vbdZerr+^nRvS^WhOXaLejlHz&YciqwgsN!O#zLuQimk
z#IP~8!rG^WU2Ai=VBSL;A<@#Jw>-j<Z)Y67n{#tmG<18+_f77O<<%28clX%T)JnuB
za9zuh^L1n;)~)xROXlSQQ+)C4v>Yz)v!mm^ONEptCT)GtssRd2j%o#%e3{vgUV+mt
zNlLG;);~940J<?<57ypzA?Zy4iY|XvO@|1{$?dp9HLLbLx>9-eR)CP&+&t;*<OFW1
zu3(B!^zh8ABf8yTv8K{>=L5Kiq6U2E6<1_}ldvn^LfA=LM<=7YIwU(gduB_Bo<3JC
z+c@MDHSoU+RWh=zhY!P!TBnz(^(p>mi8_Q%egvGc=B-u=(gH61>gzYLunw}9GC4KU
z>oE$bE@0*ur-u<E#Mrj-;Q~ixm09C93zhO}#d~S0#rq7aJ(6Xbnqvse)i3X97nIH2
z2LD`hPmX&&C++gBDs2@t>=PX<&t6i{>+O_VJ^>gb{;MEDHha*(4G1*b!GRx&&fIUH
zqSDjR8EIABCFD_bkB8vFx6=?e82ymF*=V2&d^Ca9CguAP3!RA=coC|zTq0)n_H5|y
z28@6oCHw{#S1VodZ-rp>2wGFy$zWcm)h-!Uew7o=r06(#-vLi0VU6bQ?(D8y>0IH6
zj-ZC}SY6#t3t~<Ae5+LsZFj@Tq32WV!@R>3Xo9Efd$k^iKrY9k{ei?~9pDNG34}7{
zBY?#+hxF_ilXG(N?E~FU!3r*m2RIoG;W|B>BsmMi*#Y23i+fo2vQr3IbPl~<AFsGv
z9VP|;;KRd1LNV+JxGbTnIcg!b?MXhZ>kErm+t~2Oew1Y=9Eq|+AngD*DO0|jm{>d4
z%T(AXL@d%T=QC6nGtP7u1DH*Lv-{O;kM2PKWb{7Jm0&csULl9varw|`kx~azhz)B`
zZGbl!(8d?oe*e^GJ=*Q`&_8SJf)O4j*-<e<9u9-sSXe2K=h}fT2PpxTt3$02M78in
zB2+{}9L;m{+Y(T!K`cEJK(WgEQir4EIr0haWhAK9zUiBuo))_LYPRXt?(oOqrsif-
z@E}I_H|k6Kfr}dnC%h(juCdz}GD3y<)$<q|E~Sv*RX&67jgSMgx9Iio@5K{HfyVK;
z0|6p!38;MH>_&?DKEt0MBK=H30dB3x7Lx3$@XYsk9Asps(TKVN{ml0RzHc($ujU6S
zNtnVggs`GXPewHss?@(j&wK90uL3px{*_TWRgMcF=Fh-VEEoo0tI9!f54gQ}VuY%h
zgd%@m2V}SP18vXw?C8Uc1P1yLxc?7$^72;iZjx!pL6%U3<={xQi}>MY^1IuN#F@Cf
zd)-_zxVT_ak>Yc~nCU_{H0kpUOf8`nxxvBrAAqz4P^6ZI3?&T>v>bqiY7KtitxOG}
z1p_VxqBS^H5)rr_2V|gQke+MV1ZCvH>#JS_=xcMWnT?IwkmI&oy%h_2A9*$tj~ZE|
zPK!LaIADSg*GIq`HDF6eB_vP)5~(@@0B%oDn6U7hx2t$j*Qf;^31L=UcrSe*AvjQj
zmzR$P#?H2bbgEVS74zqZm;PF0*Jhyb1y;x0>MD$s5C}8w;r5P>gWcWo%1TkX_aQQ9
z=vMCMC*1;G?ncw#B$*T$nOE5XcG9}Ky4S8>-(T!aK7H4(l>ylqYb7Oj^6}6B9G%(P
z>J-xWd3Wn7cO_UADi&baydZds=n>Ty4>zSlHla_L9zKKwu2r~s7|sdU)GRCt02tN(
z`g%ZTIe~+8@|TW^ii#4B$L2Ts>(|ck@IC-@*uM|KLURDT4P~tzP$L2g(cab7zy>J%
z_WlE6Y{4f_JT}JV0BJ2RE87_PtOA6j{T{3BVz1LLVDr!<0RXvtQlJEhtW2lSY9k$d
zn18~3Y7mtH2uc)GE@pDHPQU#7OraL2KDJP8h6_CHXl=EgYx&F|Gdt!ob!>2U6p4_?
zSG@_Sr6@-!&<U9G&wu|o-+4+yp9@*L76Vx&5caUM{mNrCFVDUVITp5?BZ?KYpKmHC
zs)Hzr)adB5wIbfgC$L)Jep?^skXE#L#D;i3bO}5pD0ki>1ccx%B0Th9MGioRP0g8y
ztvFWg7g%0D!O_;%-VnP04tnHyil;p~TZ(f0>7+|1Twm~^j#s;IHHi<6`8j)%WaU5$
zQg<{vSXkI26L-N-vDb)QutWOHeh5JgwFNI^lCRi+;WdHgV-AkmVnyF8@d*j<ZuyBO
zot<si`oMS@Pc0%UQ_K?+0|QDPFxr58=I>n~!G(RVp03yh(0VCtel#L5Co4-XiQ8;_
z)DZd)pJUU2z816fmM=EE0E2QlE(=YXLA<>G9Z)CVV4+$wV#c_0VPIp!?{#9Vq(qLx
z9jPU*>-6)J7`d^sf8WRm-IFJ+{ryw>32aKA`z+XDe-;+X|LbZcczAe@LZwtr7>7DC
zGK~RZzu0cXe&&$CfdQlOV)j~xB_(X^!^g(&3`sbuV3HI)u4pJDE$!suVgsF!yq2QB
zN&!apf|3a-zdNF+i0f~Ia-(xVTTDLW{fmIqrY4$bGT*n?>Mz{eMX{Z1hx7e6ji3N?
z-g?NmmhKlwz+~D97huSFB$4aoxx#`!<Yk68q_KyN-xndFd-38$-I+ag1LRSK)Ysdp
ztA9yN4QDt;pCvEn@i-{Z5VEk&Y71?AH!1Tvuv9MbWNo7??m2!rz$5o7UZc|(%`^pN
z?o`4xXT>fql|CS`hNYIyO-lbVCxqSfzFf&83}%d(8HQ_<;-rFx)-0>n@L7o~V3D`C
zwTbXQ#~C(U&R#C~bHbU41O`x_<q}otQ~CYW^FY;vyuh{}KPVz$3}Rqe=eUy#mafR#
z{ImXL$o@8L*#Vcc@k;FJ662qsrW{KbB|W2JeTLz<HMP=8`4di@TY0zlI(f5&(ZxFl
zwlXq|qG@5^033PT`wONuwTbY9nikj7!^11tKYLieBshFELL*mQb@5m+pYIofU`la+
zP^Q7oZnPYdH>a}#piOqg9T;HC3IKeWsKuai$G*MD9C|az5>4v}j%HZBGPGkfN4ime
zFSuK`SF~8R<KZ!nx61wt>IN@spKXk&Yw4;qU7adOu2Xe&vAmQMj+O7qiY837z0_9A
z-@*mbCQHKgFfW9P1b(3XNvcQTJPJ1CN1^1?-Mo1-kl((?a)ML!sSK=g_r30Vh%H%f
z@RxzSM>vHi+9JaZE+VM0Gre8^Zz~lR|AbPqaL{@W^zpF0g)tCZo0A@GEfQ}YIsg71
z31V65pXYyyo@5O=%_}n|WV|LO`*oW`sMa}xr<1QFt~axTH&q0OkoIum>!GBf(eLkd
z=>8S#(*(f7nS3l?@{mo#(9lp9&2Kd7{!h~68rpoqjK!%=5zRh?j3SG<h>9d}a{wxY
zO-gMbUe4XesZn#CaP5(+z>@p~v)q*U#6)xJ0-;_LHzc6lg_X+9`}AoVdM+t4g)vlJ
z`s~~bydzMtH(B|`79-!{^cV(*Y#po&UKd25!c@ld`|E&L387^PNW?pBk<;g57ViCU
z5)QGVZa^Z=7gz_CZYOcs&H&(<B_jb@3d5zQd(cdz3Xp3*J&k`Z^tvcHnOr1Ib(XnB
z-~RAn&ksEOC^_4imQcZa5Dnl0ZF2t6hGbcUmG5veis@)Xrd;OuXZ!>bv>k1a8H;CF
zVrji?3=vbV!m0&*JUgtBAbcw;^UWseM50-$<Pp^XmFV=7%774`NStrJ3Lp>e5WP~9
z?6|lkuzdnf{sjCvDQ;#Y8H*bec2YqM`!m-!;bwf*_0ceyR}$z@v#8>HwI~(ON=E^e
z{j8q(h++5&E*3xou*+{Q&S}=FfoVAdrfViWEv+0$utGuPjBNmi<p9*xj_cHTS9h5j
zCIF*`<R+Zz(0XM3P*i*H_7Pe&31w>FWDDg)omV2@&Fj-XUmcdh7#Z^tInT$lWwH?0
zRsD@F36-LXzb&RT6dr6Y8LT#^+S4_)b9u{HM!bozN+!5`P);&QkF0yTKAZOzcE)}d
zt}PUqPTl>7OQZ1xDscN_-Lhm<!vIwSF=gs@4=?3!GL(weR?1X^Y>t<|0x?Oy7#Kbn
zEYx*fNt~QhMXhMMJgpc1xD5P85~m!G!yXXM@W1*Un3*{Th|Y+%_{H0dlyHF)<-?iW
z)H>FV0E^YFtpIWut-jitnoRLN*&$^1ZV)|Fl5&R}>c{R_kUdHNY4>E!LC<Z$jYgy9
z0TL~zv^F;O{jhjH{5DR791}Lt&lgQU7K{7C-c+d5yzqOkmrm%|Dq~8OrA1H96BF{b
zz1`B=dnyC{6&lP{@>KIbJuoFqyqD1t6e8njXV*kO9aE>1gk&S;f6mm<VrFEl5JA0w
zBPoa~;4UE5d0jCbudAM@<-Y~{r&?<5EbZR=E5uSM+0UD_^72-O`B7*}uOCQL+?LSI
zDDFyE?DXZAR8sX0jBB2nlD92SS$(Is1Q@VmT%+~ZP1Ve-7fOvaNzESvgKswEQ*xK0
zV`JY>b$)`WO#b5oQi(PEer1qS^gTh0vYC|#`+%GzUed&J*s*5L0JG6&lCSq)1IyI|
z!PUx8J6Wjs@zYB*Zp#iW?h;v**cVk_dMud*^%!~^kkBtec!qzJ!a(_3r_LeiCmhSn
zikMs0<=ir`w&BYO^*S{?8<I2D{I?^3o<K<Lg4d5s_1!9(cXAAJU96JW-svAzN(#ky
z((%7;XlG}qmy!?sh)hN!x-6{#b_-KeOYp(9wbgFCPK1wqw3v4ccZsQLbStnogUfa@
z9u^2uiJf)!vMMq;fYXz%P7=())Xfkh>Du|j{=mc>0vW#~DladovkbBX&UdTgc_is%
zYeuf%+pzyXG4#>zENnqmcV|;WL$3*jg&hzRYa$GIxkn%41LCe!3pE2Ec@z|zkar8E
zAo$+XBkKCQ-vq@Q$-LioBuIWM=4p0*x2QQQIr{${Y0q$n!)DHU<i&R}Aky?C1=YIk
zg{8S)<9Q`T`ZzQ9?!cFMYWv@_)cWHs|Ahsd8+DF(SZ<Fx&8#uum5NWAD_4mQi|2KT
z+bH4;+q``F@Y%CG@bLlR2=anJqyQPvdV+JkFFo_kn~S%reDgwf^%NgJ{%Jk?;(a)f
z7IUDwKg6PRNQ~__zMIzZ<3~z`aQ<nZO#kz2icSnk_*~m`*h#u`<m!RhLV=&2{<-Bn
zu^DWKV<xp9zy*L>P*qixjBprSaxS<@pUKOE2~a;wIE`Zftkf<?gEAUIBSVLVN{s0t
zjyfSF1%gCKVHoX(4~PZ0ZP{=iF7n8Fr9ZzCJ!l}C6lkF(IFR;e;e*mf8u|YiBkblY
z!RN)62`4oegMgIO?unT!fcsOW3tZ{^3VL5&$Vp3&Hw78Dgpm`GdmY5-JELtZIE{_*
z0PPawvUf7(;K+pC968S8vN;QN_x*e0fS(fZ@qzP4&8_(sIKGF5*oB>@X3uHedRxEE
zyZ2MufRVyWk{exltg`tyKu%`_8rQ$N)$}h7_lZb9_M6XcdsMQQaD9CGEYlMTEqAr|
z`QrLmk@T?05DI|3k6(-mS;l}C1zZe_?(y@(?P_7Un8J?=9s78$0=6tF3JMi-$I=7v
z=7FpRO--JZl(P(V{?|gT(x-AFlyM$A3apqTap>uhLNF&OvzPmWcEWVZ0?R-CIWQ`K
zgv$in7(Tvo<JN-#mpqs@sWHW<viO0gp(j&vY%DeZK63hfbb6Ym#UKY1vi;3TxrCM=
zX+_0BKR=q|bl|-z$1@`?q`H`nzkPVnA{j)mK)JUjLqb5O$Ho-6N_wFE_suUZj({=Y
z!s{!SnUV@H9Hxh`QnZabX#NLlOatKo0TbWfcr9S8N&7qs-HU1v3Ek{-arbpZ3|mP`
zdI<lK3(Gfo9pCoa1ADFiPez6aS58p`nCZ{lz5Cec>p%AK5<5v~R8(WJ;q{#|x4kdZ
zKGUSQ{hU<afA;iXQTH`uWOXRRguE@FChp@$9kct~{0D#jfF`WYX)ShuZ0PQSIW!h%
zexaluX!!y1QxA^?(j9N+xqfHzi+N%>U<@b}-rvLM53mn0eioh+zhU9xVtxF$xxd83
zu@CA3m=1KsJtUeeU-=1%EgjpY(zv)Az!HP3K}?!1K-G2YFC<@nh1l|nii(hsvNU(Z
z{CNMVc!PU1ioY8$UPU-<FT@jo+(PVKq+NM2W%lV4lPU}N>fP(u1Q8f=PX;2sz^gVo
z-o32dY0-(kdVYSMBTLLG{jOAn?|gp_<goj2?-|tPn$JND&|Qj#G(et#MGTV4*7zs8
zCewBNK;dBI2QJS7r;P~DHIZ|tBB|x^*Vku|n0-8(8gJf2_?DN%hqzn<I_Lpp0iFN(
zNs|Tn+<{iwgE<$MCqFxZU~g^BtUV#P*$TmdCue&Kc`^jjrlRTO@{5BC({XXPFm3*9
z`P4HClJV?D8aARVE)~o#q^Aja?ar^5r^M4Crao*b>epXO=V2u#=dr(`tZ!y^0(@$a
z&~NXxkX{muGiao<|D8ChqC!uznj=gs?O(Oh!vJwDwF^Lq4S#EBkXD~|@?z)WL+VNM
z*)%nhlAQG{9614kKsi!D7z42y3V?YRF~m6**}e`BzkE-uU}kP^ya>d=x4zntE$0KU
z&G}gZ*4;-qA?*c#RyP1J4u<mU-CWb|TeXLeS-Ne<*yaZn1fz0Pl$HA$b{ClaocD8!
z>Jos$<X7!6hd}f|waY$Epnm+@7aPutu-b-AKr==EO=Uj8w(8~E^P|eQTck8~9706G
zDCe?;l-ATPOZW*&LrqN$2tMboe}pBYn5}%irf)mj7-L(n8+gsj$Y^%Lwig72srB`j
z8R8)jt7N~wZ1|}ZAbP;xC;sM7d0N3F5}3~s^^1uS5oxMZ1=@gmXZi!fNS0M|_Z&Lv
zgV_*P$F-3S=v4SFj$k2^*^ZU^zsZU40NK#sb3M1_pFdAKSuY_Y2?!LFEPI3Zk@wrZ
zjH*nnm%MN0>EuQyE>{GY)E?Z;s7UqJnu9}PZ7n1K_~Bw|irxp2k|^~D;{_i<y>)i7
zb`vHB8uk}wMercrXLd1=bu-@{?zD`fsi<h+$_xk_7=Ww+q@4q@`bxvbcaRKlA1C%F
zK?c&OhTXiUy37nlFMzW{((52dZs}xQRsRVlh7A|7{dQwA+H94Rw-@5f+xLK6a5JOy
z+O-7Wr#%LLdr%|6w<^A<w<&-bq%=N2a1yREva<G|fe#IZSgEBf-bMo-oV|nfF>6<R
zaJ=E<48|5X+D2+y<&&DoOk_eORP<CpnA=<i{U0a--u`L>)DKCthP!*x>|zTCNSz8*
z$^<;GHh&$002SX-U;t#H_R1<MnHf)OFHQu@%F0gn-7J9kS=9@mwKV>&Ms2fJmFS_g
zT_OAAL^GrkE%CeW!_+ugKtMn_n&Vfra(u}2=H|;%Al{V#*Zc2YU*$}iB(Afe;&<H+
zBmG(#VCpoPGZ~>ZhUhvYY|!_aWKy`V*uEfqHU*g)X~N-DkJSsMjzDxU4GPesolIz#
zT<?<eH*W8u`(Kj*R3EMkqxs6SvomO2+Ip+1t5f+&ndLxlpqWw+U^uKp2sI!ZM2M2u
zFx|_zUIo@>;lRMxO^Aw)o?lp?MIHeNtVYJ9ii#L5T?^w(oFRkXKsMLYquYOl)6SFe
z&P~<8PiwCrb_-_}f<1+)Ksc!T<;6ERjm%TeA-nB;e+8@^NEJ*yD}G*-GVmM~uJzw5
zD?sxtluPs;sWmB=^?^MA#dW;h9EG^J-QJ=;Xe$<Skw_@OzXXp!85;ZWTsS5Cvku^5
zp!U@`qP%pSv`~R0Pza9oT>Cr*J@YLL40v701yv5+0<h_CAs2LhR2E;Fq6Un&@1l_s
z)Xcd~`}a8c<K^j)EqinE<VGSiM=e&)^B!|3r9fQ7me{i^Aww6N$S6jFTcL$umyie9
zPMv}vYk;AsB;ls5&#8xjLEjzyuEa-%Z~G;3WaG~^Dls?`8iose$T(jtgOF+=cd`4F
zjM(X5-DS$lC5)ZoJphVJ5d99*MG(5Ky}o)bXKA%FyHz|NrO?x)g+cV-Y(6SH{x5NL
zl{?92Vr&e~SW9*iVa)4O)-`iqzHpl6uy)-(thH7u`*u6AQNo%TQ{;Yymd$U=ta;!_
z?C(Di6tq>+JU9reI!wLGcZ9pM#4N)MGz=~X#b|A9ZCV%{7~tdM%US^i0dq_TBzWCT
zRLxe7aq|fT+{=Ik^d*Cd4Hz-e(SGCw&6QC!c6LFaHiEkF-E_$Oe0jd(3%koJ!mR&A
z-uXKdp*;-ZbZ?6b_}iQ`XWnIoV`yn%p+FTWqY=gwl9sOe{JCLjs;8kL!_lX@z=^Z4
z|Du4yMPRz@c#_kb_D!+Kc|CH_G0yBaP>Jfa#rb9h1_<%WG!LRcr?+CcEqHmH24XX~
z%UXz*y4-9pFV2C&IINpiQ+*TUj%(S%nQ}AT+kgI;k|3ee{5x4HuLwe*f{eh|p!Y1E
zId86hf2hTT9s8Vmi0D=b?@>s?8%#q7LOI_>HGIMbEuae49Zq?`aSj2uFr;^F@Vix1
zcOva(96F+*qB;q*AS-V8SN@jOAww*aNFX``-r_t1^a_x*1-*iI)8+T?rv>VF;I^}O
z*h@<48zcY*0LrzG?5hu?TT6C`P>VR23cozIU?B<G{NVyDKq006hvqHlGuJ85@(e+p
zWyO6LEoik`OE5TFRwK(_LqkKP(L;&vQC5iwjK*+pvQ)f}otu|MFcFmOguXP@$XW=_
zFft^HC89MB=5%7lf<<A?!W4(%uX){2?mZh)7a^v~^^AUyyPzeH$NSEm2`OBqzU#ul
zK15ofn@_6HpI(WrRQa`W*OjZ(vb~~daTRZ1#OW|=q_dyyrpSu8;Y!l#&3}+M&dQL^
zQ~wAi&f9+2?+31S?N>CNlhJg24igg&+7SvQZ>FcKF{K~Avs|!T(&dMIUTS*-0}{{g
zswd@&VK$2!cupJa!%|ey&ObXkN(U;}*%ub(zVXK6o-nz8GN?!1H_|hVH&)z=tNnI_
z*|Pgx<?2nBCIt&})B-z9j?9ptotRiwXO@tKrKP30c~oSislnqXEj)Ch`RqU=8qN>@
z^7luEa6S^CW#6OrhVflYA-=l4tMLPx!F2NspAN5>|L_?Z04@@5ho+ZPP#=~#({!oI
z5E>)??paDlmPeVAw)RbTy1&SZm>3-!2M+qihGrI-hGLq$!gInqcM_HBs$b2VK`t%m
zxxU%Wx!c>9D(5xHN=mkZe2CqeXb60JKqXZ9lAKAl5#MXzJ|?z}sp-u6y1{I>#9ykD
zl+kMF%7QFIvd_dQ0cl;z6D}?n5R^f)!TR9AZFF=9qy?5re0VrE#jGaKy%O<)pO|NG
zz0?U0fP}jgcFPaQJ;5tV!{k(kY;Nw|`|yzjt@->eU9vN2o#_(9KGmPB794C$prWE8
zogcEY5UNa}pbt>KudW68UEngXxw(nVp@G;PhhF}}{XvDqV%9D{M}>u#oPQUN7<9D^
z=7Not>%eR5f~+2;TOetFVs8LOtKQz;E6q3<!&+``ZmxlS%gf7wYVc&0aCf;(dsV{i
z-Eiaf6`D~@<fReF1fQCQ*#WZ`5m-r`z#V5f-xdimggqdOeS#j#s4tVJT2)mACf2tp
z1<oL?6P!278Q0iu|GW3q!gho#W<x1q`~sTg8qG2@C=IR?3M$ztKLArMA%e5R`pZyH
zZs31qS{ojI{KqB>WctzOg$6bb8YmUQSwG<OK$>6KTPnUAhS6L=P9IeQhaKuaktD8K
zM7od#yT!BXp)E~KHTwfHAdrO%L>U5U5p3*lb0E1r%&h+_V`Z-S-?<DNF9>^9Vh)m$
ztR0b=&y`aoJoXT$%G>n;g;tqPtjvPUNyM-rJH5ua{KxF6JaS>G@|dEET(`vGdBm!a
ztzN*9aPPsF7h}o_y>#$S6wbzEWTy+W7buQ;o~)Rw<O)!Cv%9bMzUb@wO<q}A3M#)Z
zm6b7@??nEtaXKa_nc`3$3kud#(MzuUHrSe-{RB7L;vx`Y0A1^ekB`qFNgGQ`qk1uW
zyp#%IzR^ph${(-%ymAG5^qH8js=Qa1A0~QLwwCV4)FNrQZg9maE-N!c{o6~iMdlF_
zCOI!H#@@cVx-dKnR7=2d2ayvun7LyyGBV~&8)k^~Js@eNE2geZ#ud|A4p<Idj#`dq
z(8-J|_4rr(N(th`y0NhgqbLRJ?C*o7KNIoQteeEc!y{XnF(32qFB>*^lXwMF7%ayx
zr;>!Cc*S_VMy{AP0v~k0g=C34aEZ(_Oit=Lnu7rV$<6rka`wiBALbQs(MbyqLm_XT
z;)YU>`6;ZW<kkzc|I^fUMm3qOYe%KGKqwM1G(ij?HPU-PK~#dlp(xTpih!WfLMF7K
zBMKs5q(%aalsPIYZ9o_h99qDOQJP2ziqb};=Dfu7<NnJ^)=GBvx650eQb><Z&A)8}
zFdRH4Y(_Y1@2ir#_f6-e`}f9UxVWOn7&1O+-4GdF-O>5Z(tbbU)?x!y%l-7}Zn&$3
zzw<ZzcGk^eRLT=Andq9@l8WvfXHU4-urzt#FGo!djzm}yQ6N$rIrR76R#bZ)x{Ub3
zKj74yl9i={;%1KlNxgZ;(i|f|ba?!>?f`o#B)yx=0iS(|Kq$9!JR>x-`UQeZzhL7M
z4MzL&bXV)f>|p{o{@5_3mViNuh@^9x2k!563yU(ao3)VJLrC7_XK(VduN>wFCeWfY
zA6Abz2|hKruwNDcc>C%R`AhG7i*kKS&6BNod3pJ3)8KD7{@KLAKYWq{YdBv$<kBy=
z2NuP7-M5~QRS83d*3{JvtPL929TjEpotjZY+K8E#k@tASbuTn;#nWuD@2n%{EJ_*P
z_dIXIovsS>X9Cac!m0v!po7;X^7R0Yh5%A761lQZ3p(iB3Ea_&&)nR&9FLYeclB8j
zR^P;aST<FxayLv(!L&8)d>B4V&zt@9$qR~b?s&3zxf(Kc>%g00bKw65KQT|<oA(DY
zRd<(`(-SSrO6A5s$I%{5J%2UmTf^87OrwIXvimfVHxZM+SyFrB$H&KEN4#7wRZsky
z$3y*wKpi1)!r*~v)&#*M%x+I~TnfnQeC$X;Qr8FmlJ;-}Y6l$Ifa_LCwx!P-(*wo;
z2CDn@lcycwmpv*|JNpN2OrFMElFeCl0PPzwUQ5dZvZp07OHcoR@T@=+b@XHjVOFj@
z1BKOxijrLEG%(RMOq7)a`W~!<kJ#}yzo>l%@aO!T1kg=e1&_!%KjU|LzT{FC0M=!5
zkViH`m$jJFcJuU~#ipvsG@q&GTERhNm|%hFy$SX)48cW`2Xcbv_f!o<MT>79!wBXh
zX4)W>Jyba~-#&`7u~~U?m40o!X?N?J0Yo=l8PPyc8SU(xVLVkXido5?+R^5y%0VjH
zI)h9RV2+A(LqSZM0-n8v*v~WPjW>puQUQh-vHDK~U{z0m(YtXWUg?k3)w9jVjtS@U
zWg18kXRB0~;NeBGAKoRd%#IZ}<20KN+KZnA69}bn5eY>*G%oHsP;8H|{-gb62Bum{
zTDsN%DTJS}D77#EU9WZ-2suSRjuY1@U<C_D6(oC*chP%$`Ep;u)Zjh8ynU=J4&=Q4
zE3C~A0kzGsUq(Z<4Lmx!;go^=<UD1w0~DxJQPYsP$F2=_0p|t4Bg`NVkgEIEVlY=2
zEdJ)c#u%MWpO^>+Ns2x1x4Ox~R@P211glDi{Iv_9>+e1V#72OaMMp%)Z~-}iGi*u!
zfo|ya_JmU$BLWe55WT5BDSB|oQAJ1R%ED-_Vnf!6ii;996Su^01bHAvFNdN9Z!-B7
zb9c{Y!;=b{Vs8cg5HGRD#e^E5Ou8Stod#NE{C}JvUaec(1|;?o!w5uZ4WtX47f($K
z3JL-b+Jx04S&s;V%M)nECma-!NF-G^YO1}{`YyV+yBjhW9gvW`61^xLVe|47kcSyS
zI0mp4NZDP;J~ju1iL3PfC>OoZj|W|C2pl(j1*MIp6b3+Zhj;O;M6L~0Te{O)`(aVh
z9=YmCiXM2r$Ij;G$DuIc=oo+KC+AWq^2xMElgY0_e=qC5BvJVPwkKDnk`|&Mc53Fw
z@^p5Z)DdMTPcy}wo_NkAjO8?U21VbJxZK&awDb&ab`~W0)YcPCF&o!az(0fmIv=yu
zwY#;DdB5zJYlZPH030`Vk-?gJ`o5LaI=%oI6BsV`^^s8B+A1oxQB_SuK3@Nmkt<%d
zlk4EEc@Rq&VwnQs+}78}hfl65cBnpSy059?j^XVTfBr0wQXBOxvOGqcmj3nM(xHx=
z;}>q{85$W0Nbm@NGx7oygL@hqjS4KMp~LS4mukM&U=i_qCFGr??dg93h9|$vJdrZy
zM_2st{=G}oC>Z&T`GQRyHC1jQAJjCve~&u6vKDyf;lrA|1W1m`D-Pl}%Bvfw)fWI!
zy(DaX?b<_`(uIUF{w`Fe?uNhQe`2<hVI^d+SHck4Ga%sEfm0qw5vUsR(wOyjJ~aro
z;OfF3Px_`u_JMl9-o@Y^{C7GNe4wGsqysRGSfI|1QHK3)3$Y^f)@(Al2Uf!KYn>r8
zw67dKd>HWKoUH~o(}!K|>li8+4Gkt=dt|3%*Vf<DGet7Tjc|2IWNJzU=zc8kKlP7;
z%Ou&BpcNsCbcl<Y?4D_JrXd!xuMYzBurM!A;?SXa$lu=Z3Y0o&Lk(nAT+LOktIp@2
zf|NV;7g^y3AV(>foNR4vJ@g82(P@8ve`W|(rB}V1wWMZQwWJjg^(Mt#FU`uzdZOjq
zKYn=o(b{ERNnz_v!cb37Pha1~5~Ypv$r9BF2QDcm-IkD?DaTjBzW3DVy%93Vk$vb+
zT&~??uFT3?!YagO+Lz|_aY(X8Y520fB9pARhw5Aa(>+=*0B?>rZPb#8yOdkAAdLr;
zv^zvi1F&9J1zdmO>s|oe1Ehw!M+Xfas)vps+VCi*6rj**t=sz#qx3{bT{Ms@0MMV0
zkI$YzvU4#gKtj{n6vxlQ)0Xr}%%wrF&1I!mt<^0L_{%*0v~o}TO@jSaYc|G28cP)I
zr+isdjx@sxGkbb_yI6_lqVE})z@Rfp7q!04mBqm`$Fk39Y{=yNuiVP`FaE%2oGT(h
z3!@Fd*0S9x7z=s71#k}a6VC`9t*Zek2Oz?Hoovej;-m?5<w#pWjpLRjU~mG`nU;nw
zFRsJB+<{{{jkf?QkD#VsNto>`_;&>aI}aTi4P0at)!ksei(EAp5)hymZBcGbP_zQx
zo>_5*5S|3$7-0W{4IB+I6DW+Krhb3VcayQ@`T-;wKz5-$cssa!P_+KOt(QLY^FH01
zpQgFHL^D;SE{`lvlq7IzW=k$BDOM#En1rC1m!m6hC5XbR6%(UY_-<@QF;$Co>cJT{
za&;DJA56fOfxd6)pWw=g53)eTEO$y&oKt;K8NbHmsUspHvLuSRzH+A6Ap71u0CLM3
zJuq0GfPisu@x9KC)(?Ik`F^*Bnvv4#cPu8?2KB&7s45S7`+MN`8x}uNmxFD2KZ(bQ
zPGci?1f|0HGpyoU$P+*A+i(3LBS*JBr7n1UyEluJzwENvI*>jAF@%tpTo`*7Vq+%n
zN4=)u;n)KUb1)`&YawKmph>(aZXEx*){gIVb9eCB!jogqL*@PB0eCh<6jw7dH8qX=
z3>^C4j^u2$R>Nu%YZopqfGb|kLXRoy3}=up{py1{7@%qv&I;pVhUB*V{aXu}m9bQ0
zw@i#nwsi}Y&Xn)n`o!X^{$^+oH>M_%z1UZ|&M7D-yi8;EK^-g-V$8+G#cYbby?u@i
z^>{r3k8mHN(?PN6FxLX;nv@4%sV0u={cj7)43@`krHQLJh5!#Alu3+<=uH6dtkqn3
z{FZc!cCNCMx8zHWAkzeW)j8G%f!F)QS}NyZvO2Bwac8IC2+-TRuuGl^N@;PKU-g)3
zPrMSl;f=!`yyNQZTwrsiOo51&w{)!=Sy@^#y#_8vAV@G*6uWt~xyjc<W}AM+;q7OK
zyR1#S#VS6s-S$SY5^)ldjep5fTj;B_hSRtz?vw^zVR(t``3#DDM!2Am&QvjzowW;4
zZ3G@vP+;J&Kh{GQ&AW)b*G-1Pqf09g=h2zaJOc$+8Zy;hqu+GfQ>I*V1R7G)Btx77
zL1OopIT*Sad+0ubQg`>eTUkN2Q}M(?k<+{+OqdDbfZa~x^%)zO!E@&Xef0J8An$w%
z%z4O0;H08An-bI!_9Mm93P+DNzR>$W%Fi}2K}S-W@Cg5Upjq7iMoC77IpLCvD*kPS
zrmY|0$iT0Ip6?pj8AAF{tB`v>^`x?L?{-YCI&E#EVXBHUSl~)MKc9aPrMnk_w>|tB
zKc^=SDui4N3JAEHmsdOJm%wxE9jCau_iZWq`#Gj@ZjvkL9R7~({mPcL^2)I$4*-_7
zuTN24{!DPoc*61XxeYvFSnqJ;nwy21<rVDaq8U517qL1}a%teM%?W@2*i-775_<#8
z4h2qhJi<J=?C-b7vYKh>asA)7E}MCG?8ueG$6t1JjkUM0ijOzydjTb=F^+P;MxO8H
zOE$?;_O#Kc+vH7J`^&V#zM2oZTMT7OF-TujgnkmgXz8Z3yqS)jHEMInu()1bu_-0H
z<YjcjkKIM1Z^wyqJnjtDE2!L;|Hf42lWb9rmO0X*`3N*2!WW=20K|JhIim8^5zXex
zX=YnDP)uoewPeq=EH~0<^Ivy#{j|AIeF;`&l&SnjAINs<2;=8_LRQ}4-RwUsH{?B}
zP$t4`AN=^ygSp)pE+Z;dE3oi1ID!#^Q&}w`=dZcl9=~M8o}N-0B?H90UC!cdJLAQc
z>aaGy5iNJI&k5ef+WJLk{umOws)DK5FJ_+dwN8WTn`)9JEw6ULRWs0QWo$wDGFp_M
zpPf46yzBi5{@ju&Q*!Ri5}bgFnr)gF8$AafV_*NsU<znG7_jB{q~>W4sIbfa!ugi3
z70Miri=?j9N{moE^^tdF|5qJ?<y+6|E;j9y$j~9OC5a%>=UL~>)u=!1H|f;OC?1^h
zT4QJ!c7^Q!i9LcEx`=JF25|<RYG3)s8aLJZTK$j^d-%!SIMP9Lz&Kp6LSXAp`pL9P
zK1QadmYZ=}{+zK_m>6ku>-^lmR{Z0WYEjsoxbr@SKR?piB!Na9izP&U<^?Y}_j3FL
Z`=+>zlkPA1jKe$otS!&sYRui@{tK1#Cj$Tg

literal 0
HcmV?d00001

diff --git a/screenshot-12-post-delete-notebooks.png b/screenshot-12-post-delete-notebooks.png
new file mode 100644
index 0000000000000000000000000000000000000000..7175693e80f0d719dc258086ce196605574df704
GIT binary patch
literal 71677
zcmdSB^;=YL*!DYuAc6?OpmZoPlyrA@m$ZO%cZ0Nmba!`2ODmnyUDDm%@9p<_pZyo?
zANKY*)KL~|)~t2kSDfePB3NEl3>6s{83KWzN{9<9LLkq7fZvu#aNvLX*QiY)5Oj!y
zuz<2l>i!~v2c|L6i{paBLt0vdIYC=wgb<~L#WWH;-c-wNn?Q?SpABANA08emE>O}c
z7B-pBU3t4Uey|R!k!k8blHz^P`k1hl?yqInc9&5|PDaM?Rgn?~o9OP2eg@tQ606$(
z>fhfGh$Pu_!T(--RYdkd|L;|1tRV68|6alJ(2@Q-9wJHk|BJ&U<FLNhFvsI}D3VE<
zp3B9VnlO=(A%f2$KQd-Q`#kfD0@V)|QyRK1Uqu1YB41>Gi70827&0-Y<$`_*v%wn0
z<N!xpMiTH1Q1oC@7FO1e3=9k$90+?q<)h`X<&~5sM@B|QM^zOR1|L1&*jhxqXu6Dd
zMWiAlWrFoHPbS77n6LKUHZlrX=G#b0NJvPJDy{|~>#cL;;q9rcI;f`-hE5u2-%9S6
zK`#$dQ&aJYh$<>7h9Rd^|M%gDQ<_~Uyi93@AQRBG+1j4Gd81I%SelntR9+rP_C^xp
z)}MlGwAdQX@|2!=VtQ(-f0!awW8PiYw2zYfw^7V$U>)M1S<mf+gwnp6mX9)$5}CA!
zpXbjU{E`lT{=xx$$5~GzLwD+z1NA)amxs&Vf2YdkgM(kPm`^!4Tl0F}GCMjts(vEm
zcKLg_q$neE&>glHN2LPoq0?>EAI<LKaz5OisTBG{+u7N9eeF?ISI5ZA{6$x(KvsKh
z=4O8uGhZHIf`-5H11)7IIXO9HZtn4ssFouE0fC5RC&Jg%(P%sZ0wG5M6ci<uN#D7P
zmw)+$`97Wx2(oEw9~>XUf`zjS3R3FD`3DA)LnTwJ>0#ldMHVX(n?yy-MFH=b^nQC-
z7yp=Ge*3lpT0ock+l433rKRSxh{NqKAHN(i?~=T{$tpt>Ow94|0=bG$CsO?UzZxCQ
z)mO4HHexB2<kGqS*d3j2P{Y4?eS0y@A{6vmFER{|&Ht!aGz^#FtFHiGNKFw7BV)28
z^6jk~G9~3VJX?4;-&e2B3k_o_A;{1QR7G57CMF{Y8G+?#W`vuKO=5_o2jQ-NGwV0z
zPYa_@nQ=bRaC`p9OJ9fBDoTp0XFlcc#U{756<TT35SEz4^q+2x=7<^egjfIg;c~vc
z5>7Dh{or`9H%+&=xL9w!d~$b$_h|*(*!<2a=ObQ3gwH!;h6J1rjkas#@G$J=T>ic=
zN#wx5+nQMwlI3EL4<A{?hZNTo6d2eeUuN>><>!kE3*+Fdpku&9w&CT7+;5MowL-ob
zNXat6p2eqPJhEYl==sP;lctK3lZ14MP<Hh&VX<uP#~Z0p(~4$vVZ&6Y6Q+9KxB1v?
z{n38;@?{F^gPviW*Fr*7)#>I?inNT()1x~I5tH>2obgt%j*gD9FSTZ!)<AsO)4hF+
z#fR3`R<IoGZHtt$d_TyXJwCYeK28*kpLbHLmD6a}HOr<os+6cc?G(&%(3tYLIn>wH
zCGoh+Dl03;W6HmbO3r>AORc8&>#GliY%0`U{4CEW7?WZY-_ygxgq@Pov@bdjgv5c^
zO7q3WgUJ##rkcz3zL>YP8nd&rSG$v2ryB!RXa}>^38G`6mdmXj)@@~R+INHHXgDKM
zCi8XL2Xp1=>DKCR_)R01!qlsc{-kpFJ%d7Y@T8@s8JU<UGYJNB@oZ&GM)Pq<FyWx+
ztu#uMgzh1NMS?^ww=-LpS0XSpH<-j}6YpygU(&GAr~GVHdMGB+xMD!4bm1-|Eqs1{
zTs*0s+3uh`U6~MOUv4<1y(TGI1x?nlZnl5di%K-M*n6Hh{TzQGRQrvU4ly@3H<@JS
zC<0Rpi~UX23=Cp4qc?BfczLx71-?Rg{d#Az#Q5{)zcr@g^%k@J6yf3FhqKkwt)6#y
zEM^mVQtznvS*(}dv$H1>hD1aZP*}}Y9SkN_U+hliQBId@*L&QA>~qFMN1u+%@yXwz
zy!+U1=X<h7L8H?wtgT&UJWME;!HdUia@-eFVB&Ew_i<w&q2QUP=fhHq`|j@UX|Smd
zE9=y<2NO3bX|DZNIaH=AzmVzS7WGF>4TuCCi%rgV7kJ_~k$l3FqoX-(d7tL%tuy@n
zg^>##?#zh3j8@;C@9eGEdhd*p$;yWBw*@jI1$?c$5Ed21!@>ChCt96}v!VClBc#_)
zHPB=rJU$+*a>H!{Iikk}#CCHL{Q*80;)C_uGJf$50W6vP()RQtc@9poi{Bh^BjS2j
z)Q(t2`5muV5-|*tcWKrG#u{#lr{#+AIZAIYW9*c_N8eZYvexi<KQ^09QYAU>6>HQ|
zwGc!Q@xASdrPDp!pB-<zuUfsmC{a~atu}h#zX_8VzB}EW+-q^ay1$%HRw?nCZLk+}
zak-{zD}`oYqodobv^Rk5y4dLGXXJ3X->`oxgrfKK_+U0&{xGeZlELelyfSLP_2+1*
zC5W8ead$lgYruNpr;({ChuMTlu<%%sQV#;k<~TFoQ}gG?dsnE5=||;_yPX1}dh4g4
z?o=-4?uCW>AR;de%^X?TRCXV?ySt;ktE1(F*jRSsKiuSH`!dPrEip0UVR+LCw3==^
zV*#v|bMoPy*T;H)Jkd4tSM)jp7h64pG^{3z$?hshPz6acD?$?!1*s^H!+tVzL0>*Y
zhND&Q>!Yk$jCmHzcwRYt&@f`6KTM2B2JSVL*?}O#o{*^|jZ9JtSI+%$pkmFNGq;L$
z<5KRQT~BI|@x&vZJaL}42EVdV$ICtBaW^7y6FME3*OL**8rRpq$jFopqMby6?6rzr
zTz&FPNT`F?)2%}NY%hf^U8PvL)%}XF#TFNLmz(j#G9-e~QzBZs$w@&$A?q0)UW(ad
z@o06`9$KwXu<cN?%209xh}swTH`P@UOHIxZkKuT1@yjgq^w{h+kgn0`3SG4#MKU2J
zLPA1mTyxio>vKAtW^rlhi4pWAg57ABTbyE@sZ#YAH6$V)H(_g(mQON6=WMnMKN*aN
z(_5T}JG#0yN<1?!DWnr!b|-eoq~4A<b%uNe>7YtK^ik=fPIG6_KpgdSndbE1c&Y9a
zSIYs1v^>(~5#RC7I0Y_DDPI~q=^5`Ylf{!BnO<OL;Qp)>B&DS!#l?n>y%9U-!NkFd
zi_iC~9)Q5!>SC_)^}NcA&5H0WfBTG=p`7hg^zoBSfX53ea`fWj>Ytx3XVoa@61%Xe
zL~yGkv3F+^_{E9ZJD<mA59@z7fz!h^66X+`309V!o0|iP+2e9weKY7<{9S^^YGRe)
zfD!iPxrdO?@o&Eu%nQw~D6<9L*T(|*`4gnC_xAQANGWN=K+Jr)oFA=;Z}Yr+ole@2
zK&Q*NBiY6th}PzE!e~#tj(K&sNYUX!L_{Perbi@;f+Cgvs!L6njugZgjRCul&A%%y
zN$BZqdcxDB-C*R@xVS84!W#lq7-Ke-)EJ6c7X=wcXL`jb9PC;JmdH5yH#b`W9?P3k
zWtv;G=wseI6(@>2^HWpt8-$ZJ6}oM*@ThpK_h|50*E*w5E-NqEW1$jRaZnRcW-etU
zuu$V^U>kOtBwysKpk>;k0WCr-iK<;SNSJS}lHVF6sul^F=`)9-8QZ?0;Z+s)qbe@7
zNMknY$j-xRe;Y?CQ6x<+<Oza)t&pIg3o-^7DJckS31$SFo13fRe0<(XdVII$=H_DF
z)T*V06%|jn7u2)!V0(Y!y}w>VQ<l~GY4c{8I&O_}V);pm4Gs=&=7~ZjDlKiK9*?cu
za62(^!`IL63*Ob$)%esDs1;Yr5T0KTaGx7~JUw4IYGWH;0L$z{Q^$dKs2%aJzf{6U
zgRZv^-k|2lA`Zs~IgA!7Z$~tR1bba)B?0<{ZIuz!o?qXK>gAEJux!r3CR?=4ZX`=x
z%WBf&qe;7&!~Dkw#m7DgM$`KQJI?+37_C=EijrKwzE?n&PieZ9FF4!c&Q@%Qip$LY
z{=FbRht<M02=EvCvr10=Ibso~KDoKMF%)u&2jTsG(m!$C4-yj-udmsusihi|Qc}{m
zoIf%$MsN6qhyMX#t7xvy`{|i&ZfGdV1CPTteVf$D-|bNYWtQxa_c4cX{ka8@xU_4K
zIhxfR&W?Xxfn0wAp-4VG-#L$YK7QR3k)d3s5wH~Ey=5nydXyy;lz86EqI&=zgE&ga
z(`Y?=%2rnJnt+p=lQS6$RiAu4;XO@0H#c|T+n&trJ|X(1kCSzlO(LOh$HNjnb)B5n
zd}T%gcSj_~cev=UD#v74UOsvC`t$CZ*_5?@Ybz=;+)BHlakB~8$%!wLRHog<H0s%%
z%Hz@#<94;dON)!18~wViPhNII$scJoYUo*68*Nrro1Bjt9d;O<4=rXXDG^3@)xvOD
zUK4VkpKg>e7_^R$VT3c`vso>Gl-cOG$Dr5lLPd4B&=8uv1`3T+SEr%Z1aspum(SA)
zxSVVp9kp9M5b{c?REp)<3ZGwrlzW=<7LVCxd}L&%(x4ze-w32+6MZT#*(Am|Dwl~Z
zP*0a?)Fz9D+>I)z*x#P3gAKtzPoMccDl(G)!MI)4FMipJ%WbWj5B5jl#o=O8z3I3v
zt!CZ&JNw}VwD-t;)y7ZE#((}@p4H+l8#S(Ew}j#5VA6DhJ%yB%6h}e9$l=;qFfU?v
zcej&M9S9m#5rF{#WaQ-CJq1M6dvsm7cj5iAq8T2#y34~Eo<&Ah*1D?c4?YI^`aC?#
z%Eii*9r#S&LPPJaM}t^<MyRW5X=BcC)Z05cKtWd6QIn~zsmXLBzvW7hB7tI#v&1>q
zdUkoBS=_|Q&VEeRXmgA%4iBoE{A=ffxeJj{e{J~f?w$+|zfjI+5Pk{O(den8Sxu4D
z7*Um^*_5iEq?=cHtsUpgNddff_~k!x@KM}8c5}85NeNKwR5C!F>T|;%)R5QzGTe5;
zihg_xk{td+8B_ubfKh6D<nC|K<?^Aj7!`I&*NmM{ej>b_!R7Us2}EsEItU$mC-MPV
z98{*WH9HZn%v+d;x<V7W!wH;0>Lw8iq|v%&B9i-k^vlOHHU|`ilTFSUV6zUTusL^r
zv;Neo5G5}rrq(QFUUGMNU^-d6u{q=&fy;6W$|dE~WL8Tm?}?F-NMCgu8~Ql5qs6n#
zTAN*!fp}W4hl~1j9{17Ze;H8wE@dV;ENrOCFx2!O6m$j#29&>@b|<3vYQFTXRvPrk
z2jVm6ueVCwB;Wn77T|g3e!gAldB@tCpKed|MWNXOB$}0upsoRqw+OK>U8`uraao~%
z!ZES1B%TaUrR7BaHrQ{)(H+Uxn$^bBYBv0w_^8xvwce{BAfVf7>UMRgnbn>^`%XD3
zzsVtnmdA3wuFUNsSynb~VNp|FX>+sP)lf)Cs5-@3SvmGRgj^Nuhsw&zgPF?ljR7@A
zInh4*>tkyZ-?`eo8k5l~$+%+XWdszjcpihY?ZZX)gL&u7$EF4ri>blI-@l8TET=)A
z$;d&Y_48XBta0>(4!&HMWpZs%QA3G&i`&J*;2@1j2|Cu3`tLOrfqpMrTL$R;wkSL|
zvYGjwBKsGJyvN8pBYF961qE!DNCpUW#KbTXlBkDw`UY#henN@wN4h2X+93Oz^8FVM
zdM$hO0rZoGnn9HW%k-LSbRY1P(M98#3`3$b8qO<vif26xlmD>z=f`3>ocEpA?FU`%
z^C=S>YpbamO7zk6%2EFL+O=Ex$@6W_FmE@NiV^ZP>&|i;(PE)0e;&rH{jc6)<)YP&
zpsR=b`=OyB#tDYPw_+s@CnqnnvPhscoonCR&bMXRW+_3z5@onHA^7D>H<Fyp&5dU?
zfsjZ#sBy-oP2}Z&)Yhs5?oj%L5%GmjO~}Z|+;oC4kU7><AeT{?nw@{S;qVTWdu#BZ
z>qC0=YEa%Hi?rG0<b9)p!Z#`r9ADelp6DrtV~VfH6cIy&o*LM!mvWy`4Zg-@{^7Vc
z#UU;IbQJpl8y*PH<)l~nk-_ci_IN+L&%1>qU*>YUPFZD8m@gKv4R%5Xr=#G4$|vEr
z!-qSxpCAafNlkL&=F>voeN2r>OQec{LUmi*Xz#S<QY#&Hs)jT8o=$p1XZ=oqJTOwE
zw3V2MJsS*;xENylPzW{=V)gz3D0(yGzRAyek7fsWxO9I{GM_GwNsC@$kdqtMX}KM_
zB=&lf04G=!@qT%>x&V*OiiRs)GC(Fdbu)qy0wceFfCpU;77k8cS(%8pwpKByMauYx
z>1w?mHhDc8Rm*k<p}V`2nxKebWn>)GOBRbrUu<#r?vJgcSr!y*_qs7$T<zjBHCuIy
z$fVybwh+~1^?FA=LW}B}GLUFwF(7j}m=H&Zph%*u`o>D~Z7h6T?z^PSFNI&M+M(jw
z+7Bh>eNdmO`4Sl^scPvY#sC}Dm%IF%%)O%vuDDQzRM6>`THwa!WoJislsm_YSI=|M
z2l4VhvvqQ^nl2|GN@q4@M5x9mPiH@IXF!doRs$O^>i$~p^#10|YSHbu0EEGfdF!?~
z&((TGk3@|`MzWTBDcb=3vF*{Ep~1mK=26e9#hJm$W{{T@;c_`%V~;E^Eu}}~(oDCw
z4@X9xAM}roGJrgdHJ({gLhUHWP4^~mXlJ}_e?jVZh5eQlH|iLM<PpTOiGdznRUPJ`
z$aCKtl|zG9Z?*V%*u>!RQ#Os$`|07`6Sq>BGPmdJFx@sUT9J{rv<o-b#qYiDucNTA
zb?^ow5pS+RS8>9ec%uM;`EF~PoNW@Yn5$}5eYsp{827$4?Z3O?1qy+F*T1Czsw*6R
z+qwtV68$00>A~AkBdpm9&)HcCi}BB@nvG)$ebEF21GpTyazBde<sa6H=aA48F6ip*
zO?Nw|&h-i?s^VJ4Gh`jRa>mMF9k|HwW>o6VqQccntf^_Kzc!up5j8k!2Y1YV6qU_B
zj#>=EE<LI9lP0P7RP-ah8(M9s>roZ%F`An(^vo6M*h&%#NS?TvqNXaDr%*k94~2**
zSy&AEBAoq6;}T=o?+8LuzP`QLLQt2zIb6ION*N#K8822D$PpWtdjo=6G$=Vne}Q`(
zPQbNPZ%yPS(FdaBNe5C<Z?nS=Mr9h2_kHluun^9EMH}l$6gZvb)L>e^_xbi{xpq^L
zDkYcsE*{I>)$)#g!F$5V?ZorWW>97COiHmUjAseG=o&Ck?9C0qk11EHwO(G?RarT2
zj-3LP3C6PW$p9U7M@L7Z!+7`3c)`NLE|cE4-M3IFf?KKT6dw22U2`<c{y?WwoXwCJ
z_LaIYJ3;>qq^?j3^E}x0zE&_IXt#MlpJ`waQ>;=_xW230)$lt4Etfy>h6JA(Nq(P{
zlvG$)ShYwo*xG`Tl{J~uG1bMX-rv6ylj2XS+XiJ+?o^Rdj^+GY4?jB_o8C$T<K`B=
zk!rK4(z!Ct7msPx9yfEUWyy=puG7PGUnPy1H^=h!lw)&JRm-(ztrq7}lJcyNWu&EV
zw=!C+m)%m5lh1c2yXH986gKWI30PQI^67qo{%<V5W~wYjX(yTwijD2CIY>rVab;vg
z?zq=DQK3sgMddbGyj(Po$7(^TyX3X-^NsY+>!}hDF1&BojZICL8tl2;@95M>-H!kE
zB{99**-I#nP2;M^s*gTfQZ&b+RyA2}t<B2va<U&B(YzJ7IUDxI$M1LE9tk-d<FZ-n
z)^;<nw6t`)*rjPT`&xk<YVd*xx%Q{#63z9KocXrd@TRkovCfb2VRb2E5+&66_xP=a
zS^c~525im#pH$S`$i3W^E=l|+DF?pS%-Sz63<YR>8VOi*?Ros!kIPjlvN)5=voAwD
z?-KVg<AWevHN=)k%Ch&T`N`RNf5&pR;hmsWE>uj<Zj~@TIo@$Vju$0}<>P)g{@_gO
zUAs*M=b&W95H~5eh;TLb(Z}<ZOD@$!<YPDoT(i=WrY~m3eW~%3JOfyYxcE$)O+ZRa
zOiE(<`t-U?Q@Kddu=CrS`;S;vg>K#cjMm*U^jC+Tv(C;y4_ZAw-%;xFJ#KL)q!ELz
zczBMtAsPQkr3|l7Ez<y{%FQuI1B~3EW~1g)9!YD(D%7Uh{%D~IBn|Fto>Q^ou<H{&
zDysn}mHl*fexI-c0YSs#*=q0Aj-{ogBs7!rt1Hk5zaWy^5Dv+#N{CcYd8oRu*yxX2
zT55ksdSSmeMO&i!!02&JPjyiZCsaF?N)h=)lLI+k&K{Ef^9Sqdi0}0BfUEUJT1rYu
zS2sd}%?{{ybnNUk*2{-LC-k_#zUhnEN^&Tf)%8Begk2xhcLbvDUEN-2_A4~kZf|2F
zN7kCD;4$c<$846As9Cd^uChAqv(3#Vw>>@9W3vEVK()cH>lwV80+;tw3zK~hOn<TM
zDX~@U1?sMhI*8x!dU`7!Z=o&Qp>8uj9vyclxZTc~W%6@!c<ge29C;SVT2ksT>iNxy
zxk*kI$B9J{N*3)$@YMmq^(4Nd{XOi*#r9~C`ShjrQZtXsF*_06rPJSEI-oxAeyB}T
zG<UL(J)p`{P5$+ZzfGHK#qCdex{g?Qs@Zt{jsMFWn4;A@`E=!~ycT<MHPO6xgGxP?
zRh0o%zk7dkslvB8w-~bgACzT`yuy<WO-HlQO8bNMtb6Dvp;%RzhSlywV<-+R76DP#
z@JXRIE3BJ}@jO=s3NIT{2GH3qKYlWK>NQ|p`)YHT^xLYv&j@z?=2nU=#7x~uR5<L(
zUh`WxUil9Vr@`Oc^YO0rlueIzvM&A0Y_rKIr9SW_q}6CdEu8(?F9?66IjfUU7b0i%
ziZ{te2s+u>4Q^2iJv)s!%HXhGN(G_t1;WdOs8m+V+hEKd7Ul^iY05xYzaS`+F?+`4
z>?Vs<Zd8~Jg$&}qU>Zaa@)%wPT%Mn=!-G5a=eQIZs~@Noq0XqUUYWdF<~r|-p?IoG
z<=xwzEE$+urBZbm8yyV}3)>i%UyQ&Y*x-3A{5e3aRx*{~$pYHOxjIYgyKUfSbm~!+
zoZ@B{%A`zzwntA-a3v}v)uFnwvIq#zYu#a-PWzwAQ+cTA$KVm#Fp!EuW<G^H<BtMT
z($(2kg~i-?M1DSE9C8YaxrrW0Y3t4Pb*uN2?cstcE-tRLTPgxseK>*Ucmkn_01pp=
z&L<#spFFli%xH83UTk;gx<)4-%-3s%;i}}>@7Qkr@w~<Q`{Jv-c2qkS>d4j8Ty07r
ztVgMkCRrqfwLSefb~~Nh_2gvDnCi2e3wL&}<d9-Cjc%)jWXSqL!@xvrSQu8VR{r<6
zfB+l$UjZm;DQwmgKP!KrmRrm+^73YYEjO&0Qz#J?ksSR;Fky2kPm0Setg0oifJVJ)
z^X5#g)_l6xD!e(y!MP`V@!SEqytyA28(ZJPLi}JPLiT7$J0=?H;3N*iZFP&blV~;P
zVF<Q(Fl24|V4rZap{A-onWyPy{NNsqWzS<o$8)$}S5Kc;86F9raZ?qEtvV1-;N4!V
zff97T;q*~9et)Fnd{;}7>g@WLhRUDo1$@qq(Q0<&u+C9I_9GJ~TD7X&3Y09n-o^NG
zW)97&g!V>4`zmxNX|gu$F98+5;7Rz4MBbR+oEidS#-RP}>;Oocqmz?E^h0~o71#Vp
zj5u;8hUVsXN6Z!Wsc7yur*Z7}mk0AS1vkeeYn4v1rHm0PK9TQMuNyS0_6Z;E$2;#8
zc(0}_mcK<970w0I`OBq}p!d(UdiMO#6EZ}5$b(x0N?GfTQD>9$&T?j}BJdm%S@wdC
zTJM}@tMX2@G(MoM2fKo%T@3d*>|;%BE$mIL$>{oI2^%3{gj(q*Hjirv)$+~lEfAJc
zIURlE-oAS$XZw+vd0}B8HhXR$0eEVsdAB5SZ%x0?B(vi~q0xzn+v~Aj7MNY)gisD@
zY82kj1|Rm%qYQ~_YNRs)TOS68hOP~L_`EOeZD4d>Z7QYPHs{-vRNIC>ohJ6C(}7G{
zS-B%te0TREgd&B3nfb42<jdc~@witPKzJjWT`DdqNuXAX-xTqoZ{j#@(yZIho@q82
zm0RupjmuJ;%IEERb6N{^+vy%>iN&^to5`k|R>G9@6?XbAnCkhPQ~8}!^!?s)i>318
zgG7XE+u+-Id%2mj82Q+2ei6sI<huQJrnk5q<n=~>RNIpbtX#L;J}PtP_Gf(yWKj-y
z4r_upex0_WsQ6_4Riih{kk&ElB-UGQCz6x^9qmKzGdB_P#!^SDtd4+JKIoZ{i^E0p
zo^XP9ACWZO-_q%17bMv7WGa$v0k3H67wCtWxIxakbu|a-T;iD)mC7ySZxHh*CnlKW
zVs3E#i1=>5V6Uyk@QMMcQrkxr1z4&&tsY4Y?lmI!XItkC&G{7bFDkc^j*MUsBOB1_
z8xE)fVUK1u3M53&`|GT8iwxtVWpDmTDX(~f{*t}vC!KPw2B7>HAn-Te6UV5cFcGmO
zb_fJQ<iG6f?*43S969*qv!?tkhrhSt6$v6OuE}C!Lt`UuUZ<}2Lrkk#Ve0n&zVOZN
zT8~`PKTj#!@{5_7dWC#&lf}9XF4ycLXQzOf>LscD1kvrPjI3-ts=vpw8t4LTN#l5A
zWX6Z9=$bTN4EeT>#l$EvUd1P_%mD}ff4G3nc4wR+t8kFsAv@0N`?FHoP5IN3u-V7+
z@mS4zZdk11WTmYETmSqk;sn)n%<|=te6!odFTp?Pwu9vBK0c6c3rf&SyCo$avtM%Z
z&+LtjrY^b<zh6y^inkfjmS;YD{pUh!2>~Tf<PEAjqL+l9hs0nOla^u0`FlMqQzd1>
z!K{txM?tO9FL7Q!KX~`=otMy|^pL&2(S%{hS`O)4V_mYmd;>(=sfxBoje>A<5087G
zpoE2mF>!0um+y6l;U%4C2k7W50b6S;TT)We?Q$Q7s9dc==TCK}Xy*!0k|%&x-?#E`
zclG=C?|bQ7X*aT$mB<u2PT5wAjoj$}9BMK$k<vwlQAKV?s-yJaV2J=^tZSVdG{XDk
zlMpmQ?${l(#X+8vv%7_#wn~o+h6C}nmh+8H2Xj@JBfFs`B_&Pn_T)TFoj{cV^3U+J
zKWK<l_<bUY@WmDA2YP`<Y99$&(bu5t)oS(d+#c~-y~0MIu(sA?qtnzhr=_Ju_GxAp
zeHq!R1CwcSIpKW&-tM<=5;u7oyDcklLCa{jgEM$<;;4;#dR$yvs_W|q4!O7NvUPwz
zV_2OQF>E}So0!!oz8t2!T%uZLH=d7rjU8gS8o=D%-rg0WZ)1b>Q2I$zQ!z=ouKrxI
z=&|pL9XxbpM#Fa3vY^|$7ZwXY<2J=>1s=8BN?^WY2b0vpLn+QR7PHD?VkytoyL;s8
z_R?(@(zZL5Sc}NqH-@d;UW!ruIfN-+Uh6s5FIQ$+(GXMd&?(sLYJ{e_L?<-hd$;G;
z7<J$w8yA`CD8RTs-d>${L+Q+8_2S9`(m3q5UzG)ZxBSDZWoXuKp=EzbsRb+9964Q+
z6Ra<&)ibAi*=M7VLh`)zSSrKR!51BOi|C!KCTAPUol{dJEsD&ubY(<Hq7B*0yCkOZ
zilJW-0WoBFk*&Z+KIv}*g(nctpPZBFT;)n1PdZQ<7!CVBY2*_vwAifZOImp(s+t4k
zbrdMUrsMgbS^dyaN`}#w$gp<J!M$^IeS+CVp;){Qf3cf4JlE5+m7uG7s<*qID-mO;
z<7*!1<9T<v-0T{Pru66jX6u|9Sy4ZCAu$UN^h``3O4sbjwNi<CUT>yE>Cb63*r@>j
z21ruLEau&ELXz|CcUMPro1ainP*fue87X!21Uu=tqO?_?e|`T=e}2CH2q?vbI5;9j
z!El2c18jxoJ-JOviu+kX*MG8sJ#w>=aB(hT{5ezZqB0VF#XZH$@9L0eu*wkG>*L2s
zGy={yP^k2Bo?6AyT#aed&jQ2r$wGyTjvzT8IA<;0-rg!z>`qGYanCO-O!V|55S8jw
z=vWs2Y4LuF;@m$X`e`!SAB2_>LI5rVI9?VmF6%z<J)qAS9f&=kjT0?e6~mNIV&39l
z%vvhk|0~}Lx;pnu{MCeJKCk=zM#q%w9D{A`Y-NecBq9nq>wQpN0GAC9G4f)Vc9ZC2
z<M4OTeg$5su6CU>bIN#dniqMhaX`}nE&f6;+RO*%C6p%pepkUiuk1PQzgaf^X`J}t
zjfO=Pv`1HvAsZ+mhh<PS{D|La@ydQzTC&*2EipiQHu|ug($a`fdRd9NDc%5MHrA8o
zV^rCGSNsLK6M9;eE_+y5X(ToYk7^D2pYIxpvDch$`6;1LsF^`bTg;cf$d->lNZG<=
zwIJpd=8KOtyABp@0LBs#hut?cxzy{2e3_khAwR0C&1b8~RAxHI8-F%55b${^FRWB6
z<dENUqMwiN9UjW=QES#)>5UC2$TzOJj&*hAS<bUUQ(qJDo^FqRAYTjtMmUy^Qx0i|
zx$Xp<<M(K+p;b_3#4cRZ!0Hx%+J@<F#i&B(>W@H1@qCo0Edq9L@LecyCY?a-;&DA$
zGF_%oyP1`M3+md2%F59qrGlJnf2F0-%}WBVI_I6SB)QVEG%xmzQgx;qQ*mGs37tel
z;PbeFURm%lR>v-fh)5!@7w8Y$+uNz!uBWSA=OsY|>^~~Na+bC_e><w7{P}aQ+S4AT
zIMWUmd8en?4Tq5ndoB#-jeCB9`r`+Eo^vL8xhJx`TW=e?eFop%!ICG8m^d<Boa}d_
zqc*3bSqGa)K#<t}g6mf^{n+inL1`dt>(p7`B!3qiz1XX#6vn~DRW4o^ue4e19F@Lq
z)p+mT<+_Vldw+jJjhi_F6u5WE>>XduJ-H0J@B3nUVkytO6QE0VmS~<ap?7-a>eW$j
znla?<bVzwqIbw1_{{ChrCKKh_Ihysa@441@#@{jXGBE6HWf+epN+oPdJ+OLeGwl>v
zaXMQ`(d~AJHG%fP(SgSMWR=B@M0pC2F}I?;Jlw+C6h1XB4&h?z&&P*fM>Jc&k+1Q%
zvA%CVpP10~wv71pEt%Prd803l>q==be^z0j#ogJ_$w|MR%(redbR(g&*9sf@UXAag
zhig#-eMEry3;V3X3-Yg6<VxClZ6mR8t%?GHE&L*lxPtz7X2#o=S(G2v>_@BW&Of(5
z7fB7=Igz78R&U}b_8%)5fg@?~ypsh%zY{Lgf;bmQLEhEQN3DaFsuem9fGyxou}xun
z;_<qFK5N?CvaF&0l7jZ};R+RquLkN#td_fAHDCY0Mw+j)Oo@&jjIf68?BQv(xHagD
zP}oYlxVV5*8;+Nn9RC#n9_hzB7Gb?w?WWiF-;t_Jl7WZVtAoT~Pn>&{9f*q8<`U&a
zdQoX02E!Xq881=GP%5b6{ho%a)pW^rVuo`X>5UrQCUu|6z&vPAjCzcpSYqEtj1C9&
zUqBQLw^R1;;6`X3L?e3{?P?Z{lZ20lXKYgVG`W$$DYU^T=^UaxM!9qHz|Hi%fIGja
zh-4|RpW=f1EKhxhOoFrsM^>c6U5fTgLy$30TrgM!f!upEKskO*N8pVKB1!;kkRM4T
zCL4~#2?qi8%F5~@=ruv|hENT*_1yW^cbxIAMdGCMXmx0PAuB8eG0EoUdL{HNEi*km
zG~;el<~EqW=lhLpvjdlyAt%*#8n36Mv>(p?Ty2T>lNYzV0(2jAeJdR=49AHX7#TTT
zPp`i|doZ2<!9LdB?rS%Cd$Gsp@j}5i`gZ?tNz2It_~vyMH=3-dM!}7hu4m*Yv4{X2
z6H||!%fkJe;r+Ps_b+jIn!KFZM4>>Qf?G?2q+i2(cb=EHf5`->uva-TAzjIVfo}1p
zkrHhIjJX0k;w&FNz`IV>o78^SP<8p6_0ceC=*u`U<{$I23=UMrozVVN#H5<~S%Ra4
zMf_^v#Yh=H>Dvxcd#be3pl6xl0s-ifbX}@QXA!K6o{#q&V4E@~rlplxKn7@tiNDsp
zP_m>y!x`Km(bd%@AkcmhgnXJh`L*@=QrnY!mf%e)MZV=OXa(QDe_vWkV`*VgrFDib
zA}V@&eJwv=*dMDfq2~oSE<kFTneCo8+NHa{z9v_^t*EbJq)S!7-0|TN*xV#9M2CZ^
zE>ZbI$PlUgziNv<J1r?h5QIG+8(+-}3=ABfa`1Ze^NmkT6dqmd?EF^u^8@$>bU2b&
zJEZ>(huDRAn-&)pZ9L(BwadmidH5WK_#bAnx-tvNd*Qi%c3hoZ)ScNW|M!U;jsz0>
z@f@W%CkG1;k3z>N=kEy3Kf^y);H&SiipuoZ+;7zv&!E)jl?7<t<z8AQ`eID~%cj5q
zN>%dR?WMAU0%#3iqeXl{_--V?)IRD5LGYnd-Q5jPJAMJ<{D%;EkzXBBcvN-2h7}~>
z-+L>OP-7$cL*yHenHEjW%@t$;T}7M8Nx~u(HV)pNy`GT&Sr!?vO{;B?A0Z+ymLL3i
z?;Fa{FUvnD{2o>a=6{MfZwp2yf$$RsiwLr?O#b>6`R!X_XD4X@exPueywU_QI8_ce
zl6>ZMRcS>99wA{DL=yG(*LV+aeH$HfWmNds`4oajmNN``{v`gC5~A_@S3@8qb7Dm|
zv$(jJlXEUP85dwP&=pb)iAN?9T^<!BB>)vDM+v&3XZ}6j2#wbVR4P0BV6V7ty7>VF
zs;i8b%PfwEzhjUwzx<AuCob+jC$?^>8%>FUb%It#gHTxjpuD|Yj|7rFGV1E;a&lxq
zf|Uu`KznLXiC4UR2mckWqrTn5+?<@0RKYO4?$pH86m*b!qkhr;Ug^=%(Q9j%z-v1{
zcL1OFtnTimt`0e~T-}6{x~-0g?+4^iJS;NSvN++H3pEiHpJltBuSsHcz#sHG6{Xk+
zSQtpNZI$SIIgkK9x^@i8kbpj4s8%SPB!-uuHn<Q%gtO|q;GfO@J^2UjnQk4Lv((?n
z{t_=_%P7ThBvy-JDY{R~GK?uGUO$Q<`OCYJp!?E@l<~fQ0SD!^9gr=K75w+0g7lsF
zexEAtL(d<@W(=Va{;$L@<ULL%KX?^cY3S*P%y+`eLt#!=n1K706*%(t=l_Qhkoo*9
z_OI21xk3rye>6ks5E^H3{{x^Uq0swh>p>d`HU$5lBcqko1tg`U3?Mg|xw)O-LqH&z
zpP}N!-@h5$5f$oODZ1eeVnpNcFPRiGh%rsgkd&z%K!q&-0niXgNM3AgY$r5G()R^n
zF)ddKsemauR7@mz$RuWJoJ_qEp(8U>9uH6IzoX?fC{M8kCH=g$)HFR1!GYg-70w$p
z+(ihuNZ|jS4HnrBM^b_MXiFgGAs{eo7dmSED(OFdoL>R@7Rdl}wyIj(PyWX?)7v*a
z|GojjPXaK>B9rO?AymLq3gisWcmWda-&df*dOpX2@B01ZvA1Ia|9d)+O!Sb3{pV$w
zZK(Q?fUmr!VB`M#g`D*jnM9XMPFxTCulHEw|D51dP7g~EQU24h>wniKkJR<Ny}8Jw
zPf<zz@rs4kyj?ji$@w^e!C`tSHlUL}H45Vq)5pih;}^&e8}rF5ZJ^fvlftGZCKg1g
zY-3|%W>(zT*ccTRwSNtGnd4&{TzV!ZB~{h+Nl6i4zuDSWCK;FU2L}fOP*Ymq3FY6F
zktzC=?)DWGpzLV}Z7kEZ%+#%v%EZwbe0Q9k(km5WL6pBH<Z)9j*Fx}e2l>1_T?%It
z6p9W~5)#WVQ?mb}@!kLQdN|tplV%*EniGiPIQIMZ4p8K))+%&b`tOLKq(?7kL=FB|
z3qZt^8?K)?C@eJLD9{CETkUe&6GZj%bqP#&$%j%yUjBHoiQ{2d@y*>_ttQkB2V5cl
z=%p^AU{~^pFODhj3l;!F+O-1g`Kkq%yGzT1Imd0$S}tB7nHqI}-|<64wHR$r!}@-G
zeGLHIs(Vx5aW#70o|~#7gNk%%nNPl1N@Yqe!(&Gj-s3xn6a@uWanx-8^G2$Ia4UJ!
zG~Dqr7D*R5uQ&I%%J(Op*SSOY4%=gM?_v)LhFUF?d4C@V?r(q6n^wxsZ@=^&5M|SY
zxbo*^0Xlo^S0cmms4i~2I4O<y=AX2)9wNMpiwkw12EgnrwcKI%k}xyx1AP<VcBf6P
zt&c#tovGO&Y8-_uZmi)k7rNioi76^F{#y^Qc1dw!WfeWV@~ZehrF!`-9fRloo{~i_
zKMxt3&cbD^x;Q64Qx@$TAeo;Zb)M5;YH#XOyi%*vS4G?pAcF7p1HKbjAfS95Oyv;L
z*5;w7KL!jrPQL5I?a+4|roBmfCbs%g-L~Jr80-^T%N7aUn<^VFDEc(opqSSWrNhL)
zF!^c)2u0@oRmGG*KzWnQe+F)t$@*%S)Xn1A)-XUx<^V1sh|mK}@@9`4#x35fgZZFG
z*$iGkpg*MnZr9`Pz?nG*phaOgOqaWp=BxWAUxfXS7Xa)z4xaVZ`q9fUi}|{=ygZo_
zRZGwm(QQd@WbjXc4%xK7J1pfCjt1)-)TQG93zU*F$6YRv;{!`*-#neq+tSKPl+DX|
zAYMBRcT)Gq=eLWvtffts^Mt&u`XVn@+_<e<{(G)(R0}EMY?+_h{18j#k-fbwo(u<l
zg7#$~1Mn<{PUE4Ap2I*$h~Rrz7Sc9nG$dnn<de#zy%<g``nabSLEzqQ)rLvVI;AH;
zIXEilQZA+LbRBifrrv(&{RQIs>*}55L}6A@5#>XR!_Fz-^fc=%NMw%zRnpHVARqwb
zBCs|A&Gztk*9QQJ<(i%0&Q4+5DiGEZu~(3ok+FDrd6^?4BMXa))N@2psWt%jXFihY
z<008kuU4*==c8KY-+<5Om95+M2z4xkpZE(LhGAgz-d|Ue%itPMZ{^FRG<!d-0MLr>
z{&)?LL&h9KVD%TNBbUcI7D<7walXNR8feDbdBNHnCW%{`u5K9k_+#bTL7?X{G~7s0
zJa_0H(@iT%#q3Sy^ZpHpc}E8ar^5v+Bl6CMHy=a+yq#dAU8cbja?%q)RN&%zbw~gz
zIvV#19al~+u9KDAT+-s_A(QQZSI*$DkFw)>kSi)IWM_}{ez>)aql&}+x04lA3bEQN
z(#zzd`%eunT#X7Z48`Qjqw^wfTdli{YTsEYBi68BT%xqlF52i0giqEOj=tRQ#8j2S
zl{fVj;~hIkij?Z>>kC37%J%_FWqcXvW24K!O6=+K<XE%>Dg_L+v7y1$t@ZJIXDywl
ziIPM9dluYZ;GrKaHg!;(U3%T!RHFrSzpBQj=VwP5xY%Rs9B;wrbolo2qA;Yqyqt*7
z3!m`|%<u<jQ-F1su5o=iZ(XDY?3Z`LiZSXI77Nj2p{6=d_tg&oB}$^mG<tzXDA=&q
zbkurra<jd5rZ@9LZ-OSE^6OWKTN3jJA)%EoS(<hCG96&Y_swEbp((oLAnvg0cOv1Q
zoeiVt0z_sqsh`QGbSUKs^sx=a#k=7IPoUvU=?1VlAvdhq@m$yD?s5o?XbH&9q0uBF
z4)Hl7BlIYt=cmM2K8uTZO80Bd89eT$rlurIwKdErFHu3b1;F8_EJVTLM_SH{jmz^G
zn;3$%xHc(ykJrXrhd(~DsB?_deW;xXXd6A*sUIJnNq2AmnEy;+-xH}sK@`a!&C@@{
z=WWU7ZYs?JW09{5jez9AYD)ZpRv>?UI8zCaSzdwe39uaAXOp+wJUphK7aMC?Sy`D!
z0Ktd5)aG50las?;ZR2chWoRfOum|u<kHIV<!RH46Oo~Aip^{^<T5tjR1bRF%F%eIr
zF6`a%eAcV9Xi%lii^t3-!~zJ>k+jNo&FTPi?GJNvYXqSTFz*YXY-MG=1dgkE9i_3H
zgQKJO-GSN%(8$31VNu5e7*vS}Yy*m6>5U^SED8#l+w`^r%ek7B4{@=vMSRk3sx#Nu
zF2$HYmIWTK6qo}r;0Os1&zdzPJX$-uS?x0a=g0SK@9c<(tqA9U+bEwKms<VZZvKdV
z8HqJ>DS@E^{*yfO-9w1YE0RSM-!L_GkLY7`gtlVV_MtVN(C^09Z~^p1SycNn$dNBR
zycJMUQK`UoYXxw@*fiT`#x2~7<DbL1l!c0UA*<DauW%LsTLI8DS0jOjJl(cdW}D+o
zo89Dk>lP5<WIwnPH+$>;eA^D--V(KnKI`)Gi$W984?rA@u^)hzeE<G^xz)4DY!VkM
z?rA<L)wv1K0m|rW1~oM`fTW=E?ENq>wZ0!56BFZNE8@0XtoE)P>uh@z)76N|xB{m4
z8k_#xQJ3V7GCmmS>KQ1Lil?cqrJXNU0XCvn+*TD%tTmHv3Ih#|$Ju5Ytp;<E@{ZIG
zHPw8||Jl%QRL9`-s{G416I#zGoFDUk5bb=gD{aOpG3t24AB?{c_x|Rak<%cL(R`=#
zQ_8z(N<X9BU-ARLRaaLR5T2tYD#$)n8_{}&hJ<_>!^}ADC&8*nbl~e4yz}jk=t%?_
z4DrPaAd~qA0t2yoFAOLzuKB*-SrzBzG&tDI&CDc4xN$!<*cmD-Pdv3TXU#+Fzled1
zC%J{4VrXu6DLiPGnw)II#=szup47igP33dy1CZDL@TZIENeWqfYcOgM&<)Q0c-#>I
zV8ZP%Lk>n3maO86{luA>pL|dEJ$*$UC8|STdc;J!MmqmZA7&y^oBBk$czk}R>)mkI
zpE1NsmD}naSiSt>$1m9BK*M=Zx|h*OpWr=8Z27~ICq=3k;)XzP%6P%>v3<!W4Gq92
z`7h(+`zy^V8h$4#-`u52RS9m_`}{YdWJbHi?Esk0t7QAF{j&|xfMAyKK3uq|HV%+u
ziujf*OOWN6d;}x|rUi{!vx~|27pS;1KWz;p>%1Q>682q|X!vR(a-IW|i24M}kla{K
z2MEtP@qTmb)tT8D+)Qz8YQVJE#F_x`vy1!FGREQI(ml`)eS98)YgPQI@;$;ea9%6%
zlag`oZoN1}qaN)6r>FPj%S^rX)hmwW>1nk8nvIa3PmJh?Ep(}>%ujBXU&deGFDJV8
ze9AGj*jhYqVr!Yn94hUwE}b-E)nhx0kS3y&Ff3E6eoPrVQsm7wesGF<w*IUwTo-J?
z<(9K-hu_v9KU$4sKD%?SPzb>n742p|UW?#UaMK&}<aNK;)h>`-tTrAV(}stKUrKiQ
zlSqS#4<r565frh|<SZvA2M97*504f%$DJcUa(0%`xwyKrS<Zm~9*h&>rJl`w2H-Wt
z$-}X{fvUB|1^-Yz7dJPn`MR)(*`Ft9L_{m8Y!`b4x)gpGQ5N+Z`x3&!*U@A<Y6G9z
z9-X~-C&9h$V^VT;>(Y%aDf!RVkE0d~_Uw(!@)%Ze+e>D%R>+fN>E8m)aI7}4d?^kT
zpARU2RSCuf+Bgv&C_u#IV`MBg=$Tqsc|$^y<*+tQn47tG@bG(SDgIwC0o8jlBtA#(
zUlSoeC1)hudL7`4frI0Em?~ci0F*UK3Aan=r9vwZY(egejf->MzYf9x{%#Wi0X4{h
zEdqXlv5LD>Wdm~3X6ELa73t_woQ}I=*&-$TvZ!-S&U7p+wLrZaeGUR1ApSSkC?y|`
zJ4!*90M6mKJz_hO`5VkLoE{$^pPj{=HC|#-bIPQ!vUG@3%?>3or69K6Sy{BWSwVFR
zq~GMLH#!98<oN9mfT<syYNJD7Uqx2`8}R}Wsz|HB>|&RtK<-^Rt3X~eBI?3=QW19x
z#?H<TnDI*TT?Vkl*03(WL9uGtEr`^hA{w_B3&#h{JeQYa&olVjYW&GE%}@;DHb_f`
z?yqWNI!a{VZF-%oPTp@G(C+&^?$1&u7rFTS8%X||En#@MKTET0!gQ0LV)iOi{<~SM
zU>_A<(28wk<;m@Bqx73XZkPQ;o4H|t0iKvI1jE+Kw41`?-*_3e+imQFE8g7O+uGRZ
z8fND-8Tr-rc&qfv@%8K1vB^u#u0mbqfcOU!U$nZdzH+K{r34wGQc`<h_uTK(P^;3^
zS65>iPv=TtqN0X@gfFQJ=1sGYZw~5nz;GlBUyczXaD-*W#Z3TKY9SF8;tuq~%@;gi
zJW4=K%_S80hPg#W5(vNE(dqd6`^#geFdCj-pR9EnD*$PaQdglL+$4=OPDi`Lmsli4
zUgA4fTNztK+%CP-)6*b4sa2$#Pd|!QhSlFpCT(*2)Yr3N8SU7gf~_;6jfaPan;)_P
z%EZNm1z<1(FY$JBXb-#<uj^@N&sI!J3(rtmMm5EYiI&2`Z7{T{TCxe`pXvNC_rR2-
zq#r5Uj}Ky?BM1Z15m=$NlB+v!Prpw&kYPxy#c8~xe3hALT3ofKw5p=4d`g7m=PPJw
zK{M-3%FFwBW~|G_r70<sM3mPXl}r_NHj$%_jD{8w9-hyh{KO`yYGMM*vkfUy=apQh
zVAe%J3DvsrZx!P8ew6l+;Ycx$+vHYqCGUN9akC~yBqcRKLq{H!2R?9S=3l#wej~PL
zE$`_noS}awCoA**h2#)s&^d!bB5R&G<BsX8uj*uoB|&s%B=U+k-v3O3KiVU+2S!#T
zu$2<)K@cLm$Do=Q|K`^rur#Q>B8~>vkvcVw+UG#u{Ory~WjRsY=l{Maj}(9)_<?}6
zjO_J$e_xhb!;l8ve!qWTfrMoJ;1_qBki^w`#}zIpkR|udv->(I>_1_EzqN=FA<NML
z3oFic2!r-~LRDKaCYJ#sqM)j;v=HMyDXZGsC-UE+UzL8Ti;9>kVg!?NhZA_@dYz>e
zJJWa6!ia~NRn!rfrha%JV<Cps;K=zQzw&1vfc<;#Si6u{{`<?)y>!9?*Yxncn1oNU
zd9jaO&=>zR3NOhKaKPAqqT+<?<H3_I@!|b{hakU4{_hh*lw63{J13oU1$rsg`Tw2o
ztFIEVkGy}a>%V`1F&-&~gtY%&LcZ$%-%~>V-<htLoOs?F^1oU@9Jm9qxS(u(1*t0d
zCk$mW1KAH|^XVBvuR2NT*N{-XWN3%)%j2hOeOMFydmOk}44|hVAW&yQIH+r|Mrypt
zC<*`>3Vu+46lwIt1n_I06v0F!fKAlY#wRAg;QLUs3mm^h06&sEF=Odha*BeAukSJ7
zY--Z`)c7YSkZll@wJ=N>zK4b7<V6|@mo!sR;W9ge(`4(yH24)2727*7!9andLyhTg
z<$tncG>Q*8|L-qq{A;VLlrPMHG`+h!qCxl2xoV8{HOJ6@iq}+ALSJ7|SeTSd$kLLw
ztNiOJSycS*!b0p~WW_a3PBZXfvuQ*$rE6-iY3XVvMk*3pTR+mKyvh^&iXlTuNf}J3
zAt>k@7$_RQOyF^c>ACm=E~aDQ*%t(afVr7Zi~-Tw&tzmJMyJQ~9JLT3x<Z<A+1UmY
z$|^U=CjYcoY)VT}QPGm(VxWjJLVCllul-}8!9G6efq|U6KqgQ0^_vA11^}?$p`!!&
zR-?)30OSA@)4U4Qpuj*vUXRX!fzY}a^S~ztMKW-79!Go;_%t;&Bd|}xER?PeUH2Cn
z%;#z-fkyvE3{2$=XSDG<F*;uvX*W9b=^du0r|(T$_l^vMiAbYF0{+Kf>P(<{<0dDQ
zlZ(EBtP7>cZohqlL-6)(Rs~(@*D4PvS!Y0$Sp+VeBO;_hI7Q)F@QaB_<gf?^B!p1}
zu^rS+sT}rGLuER^=@S&{*p~hDX$FiXZD)aG1&WoDLKpyK1(cNjVbUqAmbg4_u{k*(
z23kPsfsLN%fuZ`;Eh_^9Cbx6(<bOXmU^ty;s{>3gzv9pOqRO9B*qN1+GXx<{c!hed
zucBf?!pJ-^e1;6u#a2>OeE%UQ67kuoA02NE3<nQyY|1H68c805k_KIpG#aQI6Gci*
z*2}FPuMqffg%n15d%qz&D=0)U8ULYYV=D+MR;#E3lgy#-=r(B4H9ma;GMf5h!&xxk
z0ffAnxZm)T{JR3+IQ&2Fux^PE`?ec|GO%FWILC<jc}E31-@)djb4tH|Sa~K%3<44#
zUmF-U1WaNV1F)oax`V(>)8OEs3+|WpgwQ}gzYb6;eM%o`PUrRP5298s%*@G&Ia_#!
zoct4xipLxQoV0aBFg7(cx*lr;Fix@jv?EhEh>)B7ygW*t9%<kB__wsWy<n|;Z->(p
z7e{)?v(s{lz{SHG2+yK4Fj!k%TkG<BwIOyP+IX_^60=)@e9-j}f*`5&EUyeBKfn7G
z<TNb%Ge5tLl^Xv|ySSz?P~uJZUco~UvJgVvQlI2{{yTYaJ6sl^1M9l~{{8HJSLN}F
zZ~8r-dTL%?9_U2&&zbXle7p$9h<9cxJ#$3EuIWA5JRJ{TW&Zj`ooQ?P5+(+Lq0`DU
zFjO{ZKg-)-0Q=^xgrlRD9vr`(iBC2vbB&FunVJ3&a;Cq+jG-&QU$zHUfdFFqq~mf2
z2F=0zD+*dfrXCkp6Zp{>pa?k&%Ff9FU6s%W^>iS_m_LN-s<Ur3z(ZlJa8yybtH_uT
zWMLF2t!j-;u<rip-z_IaB_Z7B^7I;|CM*4ur$~@4-*zg0=pd)_p~v4}zd<`+u8`vf
z1WhooW%6t0(@a>k06ZH=f<r0w%%)@FQc`zdF#<IMK>BYo0FH5UePY0CVPpi>>QK;f
z^T~RXALEKL^W+T#3$H5}pjHF1l>a?PsP3~al|K+@c*aHg(aTenRTX{!U9Ec{Lwe;@
zR9F}oqTVvJ(h@p?fFcx?kY)lnbWfRu27BY4aBby^65TePgpX-ALSU*64Cy7q&4UY6
zQj7*f3zywG(k#lW+iQ=xDnmRXCueITgBUN<-#}mq9S3x0EZRcTmH->?Lav0tlI&~y
z7ck;gWE05{VL7x70SLnQh&;&fQQip33jvxUB6@di5QtbP7Oj>CCAd>CiCCbvCT4f_
zP?(sReYr6d&?P$`*U98MTc>x1s0#>Wv9iX~5M38j#5Hwv<N#-1Sw#i=|1kHKQB|)|
z`!0%tBB7)rf{M~5pnyn7gLF57bV@gfh=hW~qPrWU8x*9w8>GZV$D->@-0yq7{l_?;
z&N+P8V~?#{VXgIho;l}z-`503lZEL`T-@iZ1DQI3g$b4j=5MG}Vq#(w<E&m74L^RI
z@-+}=Xn5HA?B<71p%5YgIoy*T+BZcXKk*zS1t&kgBFq0P;8Wb-?!<Kvjl9#blNM=%
z;W}{f;|m;9#!7ncR@5<!MWd{A1&fgQ*@sZL?;bX6t%4Z#-4E_3Lb6MM3=LN>`TyzH
z<1j9Vwa^y+zloob2*1KFj(`XC?p<R`%YwYG>%3^rcKhMSaRh1?vZN*@Z0{CSH^k+~
zeOZWzme^evhPu8LR3_Q~4hhX5o#cM?Q~sj!+5-+_%+~KxXJI*$X^T@Hk}2|UON$Fc
zVtlmePGUw@ODPw|{WtNu>>7BBPWSnS4wq6SB3IUYUpPB|fghJeSL#kuTejAul7<El
zEX;~2!S(u@vi0jd(Wd0&WOhjo3HRv4jn&o3I#(I`T-K#dZdFy)GLyj#7`jO&gWply
z7A*W2ow>j)*p3W7GBh&k-Ffo#sn5&(KY`TfvbWv46{&4otR_|(@6vmtYKSD&W<Isj
z9?YgZv&l5X9enbnWH^#tEn&(nQ)GSl2nprdM3TS_*%Y_)(<<Gj7I5N~mzTrbq{gv#
z0mSrf5KP>TLQ8C)D(m09e_yFkJ07pW^?-?rD#Lud7y|?2^ic#gDra>l+e}}7ZFRK?
zjqqo_Cf4-fRz*!2g}Wg^3{{Paq~Z0=4h@Hsx*SeND3z{$gpX1RSZHHx<lvMFqTtI(
zPJS(1(i2|;wyeFr<R-pzPWq-_if<L=<vTVky-c4r`@%TZ6$XmUUq~SM77lvxc}NHM
zEA|a{*#L>R;rU~S8U9OBPfwGBRhOPeLP1-S<)qw$z{yXXsub9<XD&1G9sVm9Q$HxO
zt{gr<#r~yt%G}JzVT0&oDdl)Wmv)6tt&2mvv3$C}_T=@^ySurD-Rg>xNZIH9Ef*eA
zwv$@Avx%Jv0w-b9VX@pdxAzX&_P$stCLXie@{A<sq<O{*5k>QSYSaslh#&MgjSlB9
zh|f*8%Zqrzi#jY>nWJ7g;A7>HQqDA=;2#wlf1oDwiX_H;qjgP6mFHyW(H{O#@ydF=
zFX`lFHsYCnZgs0!cIGp9gd_+XI{yadv7pfq9&AjfHbA?X#4d&oJu~!Nt3bN}JtDmZ
zASck$;*xPjJ=TLZ^3rApQ&N*tn5ILD(a_MaAM#|NY!#Kk&<2O%T<T~C7m9%BSI#Ri
z!6=T+F0l<a9X73nZ0H7P!w}%iG8z065itU3UT)`|C!KWw(U6W|uM!DVFE2N!v0vT3
z9F`=1`0xSZv;$<>XNKKVGVw2kDNUGgai!UBlaq@ST94#W+~vRW<*Q1}cb(neluxnV
z5T<X`8VQ!09e%pSmlvw|!o23s(P)>zx92%Ocs~_q`wqdoIovNsZx(lMN6OOQe%w}P
zLzOK>Hn#k}d_kMo)gvRL$eFtAqB{MQNk~l3k@x%cOeMTm_{7cx@yym=CPqUt3eWJK
z6DP>I-}|9yt|s|d!%@kgoy%ezV>xcfiReccYK%ZfL_ymrwWYOTOC{Qg|E%kcVP2D7
zSk{Ad|C8sb_yZjG<x2PxmFrGk|Mga3nY2@IKBrypGJ(%;*>I#HzQS1Ei<@H5%?Jm7
zq`!>#LrBgf0x$lRb6gHFHX4?Ex<sQ#GGsuipyz@%GDQ_!UHly9#u5_6g@v17a{r9`
zz|hi?oRn1JRvu_swa&X>c>cSvU<*-h&<q~Ds!XKX-`e^+kZz`_sR>gllMWcG!;^nB
zkbX-<<f7tDX2n4b$cu7cr|QorjFu%74Nt+-2r~{Qo%-6?*vWj23Ycf^0-)shV6$}*
z&i#=pTNP&JLQqIF)YY{s-_JqH!f|sZnMB}uFUUm$xyCSnKRez732L&$Xmg?U8%!R!
zxwz__Daja-i;Kp(x<Apd#y+pc@XoE(v}6meQuk@)q%rbjR-fnmDK4;PMpyJsiH^T>
zlA8ElIh;CCsn9joB&TTQ1?}odn!{L9c47O-UeEp~`kU?M=3&2LH`&W)<SbRx#yfsr
z*eo=2n3Bx0+!rjj^^<+?N|46tR@2h)g|0guaXci=K13}2X>iJ)as6>A1zBqCN+|Sp
z7x&1l(&C8|)7bw~<S+E9Qjidd?xOUlhBrKr<f2?wn}UH#BuXQi@@BNtj1K3tI4kX?
z5upiX__Xb3?<G$L?w4;@|3N8lKN>Jp3LlSn?JxZ&wDL*%6^$|)G!9z{Po{$@8H1ji
z&y|Sw-&8!|rW8)70I8f%_$QHodR5$WGedp-N~csZu?1QzhrfNaz3Gh~KJcp(?CtOO
z>=2ToJtXCJkc1wAra=xTU-BMzPCjI+!vqj(?2!3SZiAOT9txNNExL>cJT8kp@fz^v
zrPM$uB~t9u@UIX`Q3X=X62s>_i^!vDIQR%F{&Z_RoFwedG8?rVcv}^<x#j%($7>01
za2~oGqqbqT$*lcKCfN=$xV2JT-SONP5KDo%SCzwh2SjhP@f7XjAW+DI`u$T-0)P)e
z%e{%y#Y>wIy^u^etqTg04x<W$2lzF?-Fx>SMXWcF=8v89f#>weP{-QWCkO6|NW%i^
zQ-QiI5^_2#x_()MM9Q(1H|ltN*)P?^TAl}9tlSh34pn^WN+8}aVWOz2@sx+>>)Omz
zubWR`Rh`z8+TY6kngdC-vM=1`5}QS|1N2eB2^hP$a>>&5H)Q)Gi67`-xB+}ecKXST
zn^mNcg?&db!z*cjIxmW*Pt^Na;WTz1ijwzyyo@{=OMB0J3{C2#2NbjO6GYDLoV3*8
zzE!|A>3gHv_ekx06c-K6M{>LM_6yS?mR+#`AHo~Rh{>0ah_F86QM@(@p3Rp{ZiKEU
zV5sUDS^(jt$J<qLN&_yQ^f!?`5-{i5Kq13gT9B?ez&lV_3dDf0(HqaQvNBq!e*Q1S
z8!<64;L`!a0Em>(w_#v>rW6f&+t`sc0Qm)4Bt(=|;#A(geW<i-{HD7tgc78`R#8YX
z`ihebLqdA@nZG;*uUnpM@~bdBANk`q*_$2Vx$JM>y_53XoNbWtjE|2;J|B>Tler%-
z0TX3fr0nnCq4@;O-(Gskx~e(V^8SBk0Z}n)P7(^@w2k#KCF+^xwaL}XUIPi3D~RIi
zVX^!2%s=_*Nn)RivP)KOiLAzu)Evku?T@`GeETSL{H_OW<@jCs5(({}bW&uj30t3S
zl2FX|YgDuxYOQ`nGB%D}C_l{BqIcJw$J3>ALuVL%)J&r;^0L+OQKMO=vv{kUGuMEq
zlGAJ@$7>`yDKzM40eJ#1v%6qgY}g%Bq<=G2Qp`Z`D3Q~8{s|o+T=vB_21d-xn?SDs
z<7+G(US%mM!YMmDn`^2&8V1CmJBEgZL2mD`36GE0b^mL}2hY=@5Iza70K6<Q8T#a$
zm~$TfY#HIF?)ke%yCkRzO)l4McDALCo7Nj(P}P&6dAZ}3mAbp+lt#k*iP{nox;_Aw
z?nUfRif_^wB+$_@un`Y7mzPED1>D{1%FH}tL9zw6IWi+R_oSPnDN`zzu0`uZV{+aT
zGK#x*yU)p^vNDf6pUFs7i<RYu4s~!LXGF_d6P2WS6=smHzl0h_WCphfMW{~<5w|Pg
z<yzDh6g&;f&chk^mSJH3^9F?#f~#>~f16SFX&kypw1o3)4Ru@4Xe841{nyZ{1WpFt
zFBM(-)Ts>-z`ly?dBgQYnYJmF@S%YmHt(qra(U3S=5xkflXnz}nkOjaAb?zq7f2dh
zcmGIHkv&bQUpo8cPf%*#+tCql1?B@@zjEN2_B@zYtp*Ef)QVS$VYen+O*0Pnz(Rh-
zef+uk*pIfhw&AiK07@9Azo4aczx5Zyu2^=HKfiwqDG7l;z-@7}!759&Uu}xdVq?k~
zhcwO8{w24HR>S!L09`axRl%{SX8v<xqFf=93B(7YW!JT_XQT=lU$u7sFcxUNX&}>t
z7zp_BVS;OFrIVnnbasXgML-saBw<XV#gxthxvKrN%gY1QZc80XFmhtg1Bl)8A37dK
zJ~w@8Y8W`y);n2|NR405&d(bY-a9xr6vw`!lDsQp3j^Y^c_o6*2%-eIz<PnZ5K&iE
z)vnQ+DyyC$d5^TxWzXib$YHb%TzUtmM}w52xN^8@{D-TB4f(3ux6o<qhCdBFccn<t
zGeSskpm&#cS`7)lqh%_pcujY|z%0QveI`kBC#vP9f(90!h8u|jk-;O9^fXrIdAWDK
zi&VIcmRU1Dbwrel@Esan?a4n^nh-M18<@sx<X1vE&3Nbqa29Qu{U!O?Wk2Y|H+wDT
z)vi)F&((#+UDW*CbLO(FYaIby@_gZzR4*BxL`<Ir*LVL#*cIm}>m0vdu48ee%8yL&
z$fgTgeyM1{rqNmx{!X{Z{HF;cM%8GFa3>f)3f0R3#0TGw7EJ$bc{kS)PLE6m2g5V8
z52w(Y(U5=tMUMv)lwh6&78OX^Sg#CaL$rPO)X=~{d=6%Ms<fK5PVK#X%yzc9eD*7Z
z>h>G`sYbHF-(9hk81+Z>C@E7vejM-=L%(`Tdxh%BF9ng|(NPi&)p|D*A)#wee*_2L
zj#&c^PSa=icSc4vdd)Tj1YuBM?$}a8Bq<Ig5}9aLh?^OdI`HcK62p*11BFM#lh(l5
zwPE2MlV;_Q-eKg%%&X;PP-u1c*SO#)Bx%(IQRK|E_}<YtXp^d{eJOTxjl#T!V2qN?
z;u#5vHw2U%U~hz;3#yYHBE?sS?ocHOJm!nWnKr(YQG>W2Jq48vy~W~ltDgX=gu@n`
zUWx^2rpr)PfvIK|o^Qwyz%?0qvnC4be(WKMw2ciu?u*Zj&q_T~3NSPrwC#~x`4*1s
z4U?&RC-zI+n?AjdltwCM<g{I+?f0I-FFk*uO~QMD(|OB)gASoo{MK50%{O%-Qzy&Q
zo=HK2O4eC+pKZE@D_Y%YCpvH<U26T?Shg^2kg2snnvsQd*&8_pT|Bq3`I3p=GsQKj
zCl7Lq@pR2mmiY}<X7Vb_35pu_$cufv>Obl1x()laVH2p^(+~c}Xp_hFG58G3d}|$w
zj2lj{7IHn|G3W?56>BVR$=1rfMbdk>>dlv97MsX@1)V?U?dmGW#l1N>c0}(SYMdx7
z99HAsE6Zazhb}p)Cu=>ufhJLVb=;s7j^_I>@{9ubb-#@~&%XK{=4^CIba<rf#z4L?
z?q-F1E#(0Yvj$b%P$}djAQnAcW_F;``$P_2LmpQLHl(#wF=J&-4fxbzR_HP^GN9S8
z0$3=tipFlxq5wOf4%*0B4~^aVW?LhpWjJm6E8cr!SelyZTs*>T^9HX^zb~*DYRXKj
z6rr6gx8BmC0f|Sx%yc*|@l9ec4E~tZOZ~2<g@r8uL=GPG<e15%*XU|YjM}w+dNWC{
z1&wKM;NYZV1b+Prr#6*zQUMdg)i7#L8Cn#4A24{CEi)5M<gL3nHiP+Q4Va}tUvyk(
z>4q7fyz_U^J$HJcZZZK$Ee`Z_-&Xet_De56^x^|;K!Y0?5S_(PS64?>LqO9+gx$Ty
zq48%h^iim#T~L~?pkvstjXhFXetx|TUDURHg<O2KAUn~i0Kp(PplsAME$>@%)79{0
zlz4=LxVEjDMK8L#8A;E=PN2pL2hM=w1lcs_QSW`z$X9Akai%qN;#|GW0?hXMg6&o+
z^<+X>`3dD2MyK;7>WJfnqnoa-`}y%Niky#ovM|(5W}io_d8XN*XxWC9a!nbJiY(&F
zt4G2sBs`~X=R^`t8kR~UroDETrNwXcW+_DX%YLzUl)5j^SC?o(PyICQyE~p@Hmwqo
z^7Q9GvlzvmC+?VW_wpCmhfA59>H5vm-cAjLbeqOE8(>J;4S1NxzS;|(uu@UdTvMcr
z`ZIqj|9)>J9K1VQS|WgJa9V8B-QQ$Ng{uj|;VH~K7-+$K|46vj*w|mQu<sHR^BVWP
zZPBmLN{9M)x~+|+qV=}Tl`CF~`kZcuZP0>dF?@I2+<<g_RZYdK_isIOl^KuN0ce&d
z`%@QuilxP3M9ts7-}Yc1f=fjvj&pA5X`amed(mzeX9u=_PJex}CE{)CyDEAVMwRO2
zg^s!PjN4%?jcz`gEfWUuB4$~Dhe$gePZd1?*^q^%=i@)UO^vrtS;Jo_6wb7J_riKJ
zSOIz!%j-@>binI&n3R_%sqvV`xPSl7IZZR0hK6o$*Vx$KuKWJ*nSb%FMUt-LDK+)r
z2tf`GlUi|9Br&aWe?}M<5#1}-{ZHZtA74CsmTKzE|AE4@AUawYIG@YCyr;pn0P+IY
zpx5Yurj`~7(`oeR25YI{bvKpK<B*U$rB999f*&d7X1*6ws>#X{bJ5F`jt9s_NR$1;
zLm#B$#?&KM-D8M;$z}s&^#t`G9T-UtYf;f`Mq4)kL{x+vG}`*|SYG68e^QR`l;sQa
zrMFb$`&)SW@PHj^w=s1OqdBqA>Vub8K}H7E8OgFHeux%14$hw1BMC{l0Kd$)5iwPs
zayKPVS<#lnq6htg>ZT@Y+U;7>*(MC^%3Pf-;!bh+K7t0(yw`>4S4}edB}?LX*_Hj}
zQ*4wspVhsTQp$+#Ch&fTkg}5xmn)>Z4nxL8P4X*AcWHyMbRqO|gj_QyGauji>3zZ=
z!@$Uxweh-wh~7gDpnLgW2VT+>^aO4%1=PjFsF&i#A64CRD3v`wpr*IIMV2qPdu3bC
z47$?P4)m}QBTY@yv+dSII5RR*ma^n1A)DQUhV`Mme81Yhp`Ray@9yP*HrA(rsjmN*
zFYOyupvnU%i`YFBqSlNGEg}v&-Ee_+@`kLK-<yCzDWZ;BGGK>VN?fa>ARaP_hbNxI
zoAPs(7w2`Q7Cx-8Wo3IRj>O%pRsG6Qw@7;A^wX;*$Hv+Uob4dqWjQxDhoUKCKFJ%A
zM+FB3;iA(pkmi^WyQuj-MOJCpIML|*#bm5uZ%aGLFuW@m5^f-~pR#}N?jI+cA+lo_
zf(q-*#pf!#a!o!pwkQS@DF7>k$=+F6^`^PHUg9j3Zv$lP_d;q)3OG{~awEPkTq`t}
zHD1JXcCPC#-o|E>jY>;f-lRxMPQE;*wd-8uo_(5aftii<{57gPdd%2Z4fyPBAO~9&
zF~*Ax==tn1`F}op{=7RFV@c>)o+j6c=7Xxp2OWvUCbH6sV?gdT=jG;qjTkVDm`pYa
zllsg~b8@@z>7@|L--DGV-~{dg82lKH8Q3lNJox+>gMq``!ooz#Zl?A~aWzZ3t~zr$
zHqldCDE9*#>M8c!Oj^~aJDqefpXKK}!W;dcRy%G=duIEIdKz^_aT#_+LHm1j=+;qe
z?e6YAb2Z;m{wfRthoR<7s~J{<+@<j`>fVraje`X^4PTiKRq&l3q8l`VC#Zh~x!F*d
zTGilj7Nh(U-t<fBDtwpQiVwZMD`W<#k<&!^c1lCq&S|Q08#>}Iz|Eb|0-!60<!OB4
z-uXAa7eV*f9Oi#*0-%jf#bKsum*Tkd6aQaUqn<TzbEQ8Vt*}ajY0KJJ5oKqK^Q|x{
zsSINH_*Ph+P4@SPw1AtJm6g>79MzXd*}Xux9KMqC#F!F#o*%V3&IXzcq}>bCW{rK!
z#N>M!ML<Jqj+~dFV>27+f~Qyi2<AMUVC9SP4eJnlg3rgtM^8_`jWv-1M%S#Ytgg{C
zX(_36-^Fo@uT;0Nuu}M=xTcRzFr#8(^v9MN85q81umhA^wu@*ftOE^Ag+ZDQT~^|E
z8Y|k<P?%4hlA`Q7b+1OaqUzq6nZ+&%65e6Ud`-pUA>QNdm*uk-Bvf47p-05mIsQ*q
zM<e9M!u<p>6Aj#&&(J<!&hp`l|Bmd#*4vNw{^$3&b5dWrNZ`NIf<*l9-()2o-TqG|
zN67z=c^@sE5RyOt|Nm|2biG0#qhKegKH~sO`sG(JW!2S3Bl-XRxDw=RtpEME{~!I3
zMB)6v?TnfhyzG@<#iTDT5{5dvL3LsoD;|j0``=l>e=k2xwqo?hPygiQ4|uC9E5JRj
z7yY&Yp)NbepC1!}&TGuCrPbZi0<FV~o}TbS1Y!!Ju&49Qoo#J5=;_TkDlP%lcP6oM
zaDW2(Ju=b}bafveXShzlRuiME9arO80*`awhlYj=DE}|rCr!|$p<|#p*w|9%Dl02N
znWzI-J1y<_&`_G|!3I!(4gbBaXz5XqBN<Kd(txREV-qFdxOaho?s2F~OkriEQw{|u
z@N?kao+w2Y0<K$DI!x>dc=SMv*i<h!H__F7ZL<FRXA^J$;FwFx{N(Ffs8yq_rk4G#
zbsxqss9&HTl5;zJ_4fAWECeNe2Xt%&Dn_&cNm`#E(&quJi{S4*KeZkF#&^z-2P3lC
z&Q4JFJV4X~hhO>;Ooe=xmHvIN9|pvKdIj6Wmz1#K$dYrrpzekr0^#8=0L95EtSl|d
z^_nH<j^!S@U7R<8at~#vLW769OO|0bDXap3SIexwQA<q?{>Yk3Y1^<XY2qP|#PvEz
zfq;2g0Q(brVMq8yVF$@mKg+2~aKaHG3(Csu-@Zj_mL?)1%DFe71)N{WEV2m~S66yk
zS`Y)^>w~=HPcK<Q0s<*dNK~<XJ=opNyv(zpMq68b&v)whs~|G~AS2F)5Bnx2Rv`FJ
zNa{@bgm5K8I)3Lu>WIhv7=fpfCHq=bwDrf2Bsln?B8GpLO%4^2KVKvm%2C>#s=B54
zE>COHC&dH~?@I?dJn6`c-~3KTJ4>adL%)9q1Hw=?I!J(&;$m%lcW>46VEafYyouGo
zoQ#aFuMMgyB_$;-Ev;=Nm?|VW?N~lteZ*sGZXVZEyD?KI%E9|ew~;fzlbyw8(QkK|
zc?y~|u!X}l0u$(k;YRoztUxjrntZ5gR#r^G*l+LXX!P$JfsfEfbX_5#MW0(Fdngo4
z#z1)rTN5NarNLn}F$DH%(iM98PB=XM{BCTk)`LubY-VE8egQ91NBP4Lv8YnTwoQk%
zv3gLR+@d(dXg-1yF#TOCuGNeae00_}8!8x7S-xR~qw-n;O?EyjI=yn-IPFhu1%w!E
zHu#_G#U%ZAr?lPbh&@=;py~b#GuFEUVnC$w#lH8-dfo}R-P<AM<qoLPrY7%M;0wAQ
zZY4)VK$tcgB{%s$+PNsi?K}?WTH$%|w}3RI+1VR4HK#}H+n{he%@s+6cYyc?255K`
zFK?}F#dMIvic3mX2h!P29RK%oDxaGa^r%Z7-Wz(Q9C(Wi=tdy#7|Ce1JTDKg%^*aW
zz+w)=nr)QZWT6g)M>R>#GkIkIM!$iXFF2vW$0EHX<dQN*I*bR`YnLyrU<9o~%h(ve
zeyL%~36Gkjv^2;MSj}&81m!hRySu5C0D;E}hk12sCW79m_rJGB;#v53i4mJ{64ngN
z<Kp81t~_bv^cPf4@QpArF|mV8?*Pn&05|YS_Uq)3$&&)odK~Z{*?FUI9zm{o%P1RY
zUfJ@^y}buN(do!|GgyB^y!XiKqnmbpy$4h@a~v*~OC3EhgC%68;Bk>GNzxZ%d+@@X
zhL5R#eEbNWY2YbTI`(?&=^kuoWm{vUYnYqYf?24OBFB6%BjDGsv{R1jXwm&vpE5FD
zy0;Hz)D<Q?P}d}f=LvLka1o`Pc2c4dl3eyNc{h@RscODt=YdO#?!e%{I07FZ|8H)<
zV}sAzr78S{kpW@YABz4<(na8v?$d^d{oN)0*HWN8d{bY41p}k{RCX&)h2J1jR8Y_z
z11*5~&Yh>rm%azF<PFvsZ?YY7;Tp~K*Ac@@Oq@!zpfOy2Vew^O8uZ|ckmUb#od)Ok
z^=$<Q_hD1Q&I<Up)U<tkd|H3~D!xiUMz*uqzN^Wzbbi))=S~RxQ4$o_1U{s6_A)<w
z{5XKf2!1pa9qYHu=W7rt8-IrH|0zRKTwJ%&#Mj3NtR&BTT+WWyYaA(>Yrv#BUb1{U
zAG5WU8W=0oTwKvh-%=)M*(rDr$vEGy4Q20Q7lV_?AAmRuyGDHDA&^}^+nC0TPyt#e
zptSDLvjBSirR^X2o;SDaQZi+9wsh6!r4#FaBazJ@h@&peYbnO|>ybJm7BjV4JxGur
zw!uTG9K6GFOGoDdaO_6ppg1SPDcc$39~6{6dY_O`pb0*zDY^lElF2}Ar|Ln?HD#V0
zP{76(7M8xuiWucSZ*M`{*(bZ(N0L(8bEl;Whgo6(7B$2wg7(LTH~lv6JK?a9khu^_
z>ZhTK%952e90@P&HG5R9J6+5y1KHF~RZ#HEmx2ml@Ud6m0Q5FvK_iq?Y%uLhngPTC
z%r*1#80uf1)w$vUkdz7bU3Bu~JZZBP&OYr*p*h^B(Vg!^?R#vltqlQ7(E~UTTy%7F
z3<tHfGr(S-Xik5L!~HU%*OuF76CfaPoqJ>KMO@G}pP>gE!9kL_GG1m@0V6cTk=#Up
z_0f(!9dB&ZU2regIjqM-XC@1;0h<9_WKbSj45Zbs33_?`R4JI++CK;9(sY{t{q8T{
zG96EP;xQG)VC@Fj&*HPQpHV=tDBh@7TRx$pgnqEzou1cYeL@P(nOfI_*Zll_GJI0W
zn>Z364DF}NpU!%2lCdO>0v8f)YdXd6R@2p7OOtFyOyKg3OsE7D!;n+DL{P&;eU(-X
zF)r>>bZLagNjawb?%2cxyQL=3OoPO8kB5emUc3LTIzPX%zi$A9<EY6m0`QXFNn>^0
zH^-2rYi?-)6kPFX@?Py_YW4C7efnjD^k9uk$jlW!tEJ@1MJebMGPwz$l-k?cE~yN;
zo$OC1dRkgcjjdPAo}+dEbv%u!9%yTC4<^Q2*w`-t$u|vyM&bChJ*RDCsRwu)B7o2Z
z;b%C5&-X@gW4<b1F-gB1jMhOkJh_U3^ZnP1<UQ$_n&M)cKWfm-uk<A^0CFWwNMBdi
z(%AS1x48Jb+4@vp-1wx8=;&y`6QxMqKfq=VmLMoqURhLpO%@g$?6kMije)bWf<!{i
z1u@M^rCdXH9qX%fFACK6T)Sh2ovGVL@@w4P(X;NjY=lr|{#BCo1ps$PWW}-!Fo^QY
z%U=X$ifWV^7kge50i_$@!_XcGdIirsc3}j+1>s!QSK9hql+9n-A<q@AIvTbT)K$_Y
zuXt`eNW1ML2O}Zi-_jzYi1*6#+y)$#WrBr>jP@y9DM2gJ?&h(vU=d)?!H<V;Z`B%f
z22|G|e}8)$o3~g3(Tj<m`vYWftb)AxqejRI*T)M~!$CKbs{z;G#6>lTGyC#t4ef4i
ziFLG$*ZHP&QG8&~Noo`pZ8bK{8Pt$CJ6bWkW$jGJ_vA>F=q<=BP!~b(m1DCMKsagq
zM7T0XDIWPC<KlIII7&AOkIUT-DK#=WT2ad0+jk@VwS+NY3%LL0=eGTLT@ht8#_-92
zLt$`Y;v;zq-lRW)5vX-phHnyOT&!UAh}4~DG&E76+SAocl49N!R?|C4Yoc6%SMS?<
zcev2ebwo00Wd`U##>)6+ibK}>b%3Lv$7Z<_KIC)Xf%Ktv{LAM^^sV1N7u3sg<nWMz
z>3*E%V`%jBwl1#O*VPe!2hZoc@!We%?u&*|;edaS_Pn11#8X_WfSE}U*kya+3?e5c
zevS8xM(Xbuf%Bz1XaTpNTaYDmc5xZhadp*DcTbalv?R!zfRUy5kepO#wH|i&u=i!k
zsHoqwcPQYrS$xX~$^GFIV3vY?5pZWRW?lp65#(QF4z`?LIlb4x5+g+0-{2XjbzZP)
zcp$OrY!@m1Z7J1HjBg)&Xy#+zJqQU+q@L|E7<bzM)DobF(5uqqPn>VJDg(DG{R`lt
z`sk2;cf5_)kJ>`QBww4G=lvxDjp*xa`ly&%q~Yt$mi_e;0BnO(RQl;Hbr~M#omx(u
zeBHqnX8X@KTMwHDC$RJT2Hzxof+k-Wy%e9}q(DB|aI&0--DYjf3dk7}tH-CmpQ-!v
z+5W*d7}{*O=oudmQJ#nRlu2NfVfUrocL?`s7Q^JdXL=9Q4P0ch?3zA#mxX5kjAZ7?
z&PAbsojh>CtndjoO$FYs;C!hZ#g5ca8C6F_9LdEX#%QC#YxoXu#idvkt_P2(&SuRg
zN+03K_R?xCZjlGDx}g=jdOgLj<5LU*$`&gl<vrZ4)HSKO5{-%=gU$(g!_?*geEZLt
zgP7j(c0l%o&zPiFtxTe&xOjVQG(6+7!4NjVVH85y1=vFW@vc!MT2|eU##UW5${so3
zakzC}dmrV6>`NwcPctczKG=wld13KzLrn`9O<2A|fn8@-W8cZ$qq0liT=<8C^rJih
z1Z4%vOQ5QnS|7&Maeru3*5~EDdE-!_v`Yh+v5&J3X(08TOjaf`w+peoOZ~K=c9S({
zYnKOYQObWxO#BEcFFMpf)=SaVAOxQ648DxnBH}$<HYr2D(vUvN<M4)wR28@#71Pq<
z(}~EjE)qcO$WQs&`kHx`r0C$F1YKa-M|3GcbVa6Anyk#srcTXLQ?YR0t`exN>B<Cq
zQ|4feh^+8DfRRg&oi5HP>CT`ti+-t75ceSbVHSQf;U}9Oxa??u^s)F5({=VS@Oqq{
zLRC>^o4H*#nl*`-f9YV}?KqvLq+8woLSO;;w9hPg*zR1Nh9lsccC}rga-K<9!e<jw
zb=pkF(9a<Gyw2TW7bShcW(Lue=X?$PE_3Ws`uc=cz8J;kz8$oRf6@<<9XAW?BIy_b
z=96sMhgF?PO*G9bzc5dbtwPunP4<^hMNm+y_RSLM1ph<E+en3gBrLq)GGn(2%Lg<y
z@)4=J>YbS!zV&rS7gTj*GrMuKf=o@A4}D2g<;yHq&sPgQr>b^;bms?g4)pdWo>S18
z?A8!Qz@{n)6F-bCrkU>d#Bo<X(wcbkXyXF8Ov1kj#G~ayE%lMZ%q)p;3B@ywntkwT
z$K@(ozu+JVs6$aH$VD3dq|RteT9fnCi;ecD4LSET89z9{YnwayR4sHX#wpUUm4n(^
z@$E7?f*KYCbwcHH*lGVTEj+xE^H@AZhl5V-Awi?3w78OznwA!r19_UrEt^TgU9v3s
zg<pB-xu}0jOL<-3(49hx@D_C5#z|Imz9dC{+pd`}a0l(oO+A<U!T-(zE;t0{UUxl0
zVCdAl?IOdN^V{UD{R_VuZXK5y!R{?{bFzljO$srtU~$K_wBJuM>;h6DCxI}5N=+!Y
z844r>w(~DY;HU0csoz>2{MFp7(EWs+J<gH4vuFADAa%p>o>p^>o?<FTSp8msb{)~(
zyOM<=tVF~2m#loxZ&}XP_xfhP(d#QNDuPf@i2LJaZ?G@2arMO<L(<>RF?&exC(wfT
z2(Qyh`_(MS8>dzH(J7+p<qp#dtz0~vCP<b}$^YzMk5GipJYS;*;Pv$q;Q{m1apj}3
zbLw#-FXJNO;vQ?*hb1^Ei>n>IsaBQ~_q;GkPW=`UMGpQ6r}8v3KIa|PiQ?V;d=91S
zApZ=4JRL&<I{!udD}8Ss9EF48*wAv6ycJvR<Kr$r$D+uGX#DMAUuKDrShDhxl2_4b
z1O~EBg)1s6VR@DmBjX<a_j=fN^5*!Ym(NvSRN~uI@WFQ)^-hFVx`K*I>XJ%N=ObB`
z!@W^HlR-QmEOnlAe6>FhnhtTVmJ)a78hy%fsO5icdr3;(kDl(Jw`Uf7@KulHjZR`u
zMClXN{r=Qt!t2>8=$QMV4ysNmV+5D5Nv=Bm2-j1sj-4vPEEt2rWS1x>R89&UkkeJB
zqSear9^)^^zZw6Lp(nbukF_iYAJqW@Z4r|0P(~LSbTZLh1I9c{3@EB+g*vW)oNFE#
z$#8Q%aX$&tx1_7s)a_yZel7Lm5!9gBybSe6DBi&g0_&?2#HqQtovTHU=?VrsUk)#=
zt#z;<6K3YUekxj~e`>jvFRAJ#KQ#0yV(?lv&i#?}SO7u<Jvf0R0sp$JOBxorm9IDl
z#n?ndh}L|u(4-kG)r+<Zv*hQ03#{Cd*ihc!QUk9SxBcwJT!c}i&{ZQecQ6EwO#%X?
z((ElUWEJ~I0)~dzA3O-0Pq?``>nSOmz@#;?TT_Z#q2Erb-e0Iv_+l6p_1-c{mYe%N
z)tUftgu$)y@)2lD{2blgcvq1~Ih<fRzBMyII|2ipNtGqcs06U*h6y6o+{WV&xQFAB
zLa^)>IbL3VKGbpy(nm)no)Nam#nem0E+%^S!ss4VSHI+1+i$6=9;tTTB{z82@xl#L
z+NB7Jb;7q!3PV)xI!o({iKuGh>(i~RDzCou!WNwFZmFy@0CWQ7uRljgfvUUU)Wv_N
zLh$0cLB|*im+Zi8ncgrB!arssc_JJ+jLhn#pkP-71uen7{laoetiEABS0zD>_Zhr5
z9@=k<M06M-Tn!+)FNasM)Q6+74nYmd)MI7*ruZ{r`bt#l*X6Y}*!55~Q&-dfSaQ%$
z^!nhSi3U334n+6T1*SHpeY1|IffO9mGI??q{OAnk#aWM~7_)NCWVceK@PUH6I-L8(
z-+w!vo1BD66P%3LjGSDKC-cp@rTTL6Fv@$`9b<YZS^WjMJ~?M?ZCz?0>TrOyasj6z
zt*!hJ3Wahx+!DVy=lS<G+N|rfnt1~a2GyU5;LUA5MjLHwqk-TV4(U+pWAujp40nmw
zr!3@H_Aruxzb_dJefTN->~y^SU0nzX%u;D_=0rL)a7e)xMBF8I_1ISqYm#*?Og0W5
z3`LtM$e(8eA~c(!iGd~_3Va_dLUzeLU*RvxJDuBddtV<v&3~*wxjB0xOHmwm%ZJz{
zUGX4E1)%WIAHcf<-NTt_RAwX<4|3jpJ6Mb^yMIz(iMu|PvTjVrLoIQ+7p+bX>c-TI
ztEN9YSL;y63yt9i*f@KTluyGvd@8TfOypu~3v;ILV`H4wlAj%DxS*B})lOQoR=Yk2
zTu5M(B)Q=3#hnj$h9x8f!AB^6L%||IoKO9frN3*@4e#OtU3QH5yB{zlQt@)ureW0u
z1Ui2&C#nD~PFkW3^5Wg6c^lK*$iIK{v`&_b4I1PN!Zwu8mXL^>@Pbv@Aqz{1KC9fi
z|2#)#kXd8@KBF4&)Kg5H?gba8L`UCzI&l3~#Gpt3Y-n<Oj<YiYpDF+mm`<z>6zbsB
zr&flAp<C3e)w?mC&9+Nx=0?2tkjr_(tonU^DEk%=3$5)KV4#z<7@8{}M*nh5fiU3K
zah|Dh7ICE6PlNs6KM8XF_%A2^&U#yEIjsW_bwz^vuPS?c;!m;-#pt&clO{`+SrRi|
zqmM#I(iK<rc4f#K7JvzUMgj2<1r1MDBY*7aWSJSQ5oXrTU}e!{NBF99c1Lsi=gQ8k
zHHMWDq8{T5IAV{yg5YFH#m6Ktm3rZR;*hD=mMln3^Um&XpXugIQ}nXHDr77?Y=8eK
zn)Nsd!@p5i00U}J7*V;?sS|Gj+D_xPGyY81S9MP=6+@vFER-TT%7p4!=*|WBHPzKZ
z!p-Kh_1{wN)S+8URKn27zXf0|rm*?~H9>nzPNl4D@LQdogF{Nk-R^3I%<^KD{@atu
zd1Ci!M88R2cmL?Ia`P-R56FiUh9VaWsGG@i2|V0`o>vTBsnbkN-#2oG?QOGy<9PgY
z4L>eA+Cscpzb4DmP5-JvT}X4dP-Jz`C1_Eh<KWn<+oYce)3+yJ`H3^@h;z79mtseq
z-)^o=7Ch-k!Q#H+kZ<P%*{^6q`o7s<GwRG=^n)g-Kbf}v+>T%qtixh^ZpUI5o(dgs
zccfT|xE-jB6UVSyr`~6rC?1TBjXgWv#Vam6Zl$1R14sEeLLZN~H`LCk|5GJrRgVj%
zETOSk?&@D-kLUQ;F4J<0t7CW7U($44E{_mtSuDw(N-36%@Le|G912!O0v3Dcef0x%
zskG;cbYBcS?z44$T#+sviQ@7S6&6---p#$Zg%X%wAYdi44d)R5sPBwLwUbo+bdRoS
zH6^5UAW_#Rp*Kb+ir$tRCX-ms_BJVaPnJrtFRT&US<8fz_0`Ej2?s1qm`O=GN&oa}
zreUt^T`tc!{YX(4%)2*cZGM6Y_ISIM7OR$p5&`Qo<!qR~p~-%As}m68EAsb;i0xsL
zOkTNzdi!~P$A&)RJ>`>~xFATo3=QKfMqlSs6E-}J!PF6E7Lv0T&<daxi@@A5aJ19G
z-DT_ok(THQW$M@Xw6u<I6{mF0GfmhO9|SzSg6UDtutlsTfEx{Mk-vbSCM1pZ!@M_d
zQKd8$+6Op24`w}~szWP22!GK2T^XmDgtzYB1dl5$SD+0o;J%yXKRv0Qj)Wv5a@HI3
zpu{!HVg2R*%=rS)u46XxT}+8pkWnS^AGT6>{x|SPJ1nH-ye)6>ekjWd88Mv-Yu(;f
z!FcQhfzTHf1#YB-L<guN5M=xMb@8Q%cF#=x9y`o?pFJ};0^c_&KK{z$;;(<-2wH%*
zrcOMA5#bSGjl$nw{_jrqR^3;IZdywk8;gO^4a3!#T>>EF*zT{H>^}!V2UgTVPX-=g
z`Br%aYZ2vte+&&dA=!;vZ6Kcm!q{dH;f;yc7kGuxGdWoo-cT+{egj)r(iA6(dHK6-
za_?Sigfw<+R21mHI}8-=CnHd(m;e$70@*)+*|K%HQYAxu3H}K-Tjz^<%s`m&Y1caG
zW=gLccfn%1`T6-@#82?sVUZS0MP53+_Z*kkk6^R~k(!+IyUyy!1{fZ8VN+AI>mC?)
zVMm+g*!P6bmmH=MyV2=7<WTl3CMG7^hpDlO&A;oD<Xn=s@$vUNnOE@%2yCNTT9@H}
zmiaf>|L|4s_6_J-TLWXAHm0JXT`_c`p`m%-_^Ak5eKIZ^J1{MRBEQ$mr(tsX!%Oh+
z8tPZE!8+|uchs{zFkApgYaRA1!#V_F=5sak#lQVc=jZ3M?i|XZqK-4QTyS;wBpd7i
z---q~oTp}XxOE4Dkjd?hjRFR)d+@f3hf#5IaRri}J(vdFO9@~b6fevVOHJ5j0N^z!
zQ*xI-d3VRfbN7$dzftkSRDLGzWL3f&;No2QGXm>_oA2SuzOwuK7SJBR2I%T$JVd}!
z-)HZCzjZtyW;cM+1z5$#r_fs=_j~zj=u`?M9RYI?0gEB6=k?jx*s3ANQ){zC3NdWZ
zu25^^u$Y5qZ?(o?)J8%AD;(2xe~rg}#g25g(mD)c{^Wcf=54{cwQm60w9x8lWToTK
z9=g=gAuyA1`|oerWYKThV3P)`S5`KW_W{|t2C5(C3sYg#%<>8ffZ^%nUEHLA7kdfL
zUSO`nMxL?Z;itQUfabAZXjzv@JY`_)=619+va*87Are-73<!eP6iSviz(<0)H<*G>
zR>CudLe(>+1IsNmvU29bZo)@Tc7^cUyBqB&WC_^6Mhec992Oyb@qmoX*^m-aG_XI{
z^Wt3V^K!k%S-|<mY=hCyk5zUH)UkJ{a}_di(_fRys*GkS<?cgb#>V()T|=hh6KqGD
zU$8Lm7@LfA-JbX1EZnTWfA98feiN7?hJ7=ct*0y-sc}32@7sercM5{pVg%YnOtxS$
z4GPxUVCMa12%&oN@={Ul7dDhbg&IW0l_gG40i}37pv9YPXX{QX%|^Xo84KWWhX6S7
z-@cLOCId<T4N<_-%A_-saCQ0r9@xMrx)sVADE1RBj~9NVg89|t{QPyuP{Fdr-|Op)
zL0`XpgL38eCd97AL|crUnE3Q$b!I=zg7;Utj90J;m8+bUljE-d3KXmgT<l}Dk`NSB
zaPy;jBjy*03}rc8PW1G92ab&*+hy_?B-kl2aMxhfuslXEPY#xLjl<=A2#D+WI67?d
zDQd9X@Y!w72oex1Kn)YYXa?53=?tm+Th)nqw*YTpHIrq%a15k&<VZd`(M^a{Tj}e|
zW_&G!<rmYXrR)&Pg|R88o0F$#>kh<qGn}FJ6@47Sa(SN67+~pB7h&RUESuKGL6FAd
zPZ#aBD)0Q7=Fu<z1;kI__e8y?i_BD9B`CZ`lVBG@mD&Jh2Z(0xkVh<18XCTQ$6!me
zb|H1J$%zu|g!vDAIzb$p<1TFZ^-FgAyH3Luy-0ZJ%H2=OrDD&sKo?#ev50=}-pG=J
z)f3H@sEmqaP!o%G=!&uiY#{bSdYHQ_`V`0}lQjTu{+(rlwi2vh>+M{fo@=5$(t=e-
zKrgwMaQ?ro_pwPBEIteTip?guu(}!<9Q=M|=(-076H~&#TVvx&PRf5j=Tkz88@8@U
z=OfU=dZV_RDy?Vz-$8uGbL;oH^X?yP@>h$Xn<0Jymm18Eio0ZFWRTE4``a%Fw*tux
zABK_todrZrK;O}maMpyN9YpQz!OtW9b91an0Xl2RYC$A8rk-1Ec&rSyS6K1DrY~t+
z#=(5yFA;FMmKUeEe8Iu#`vrNTJ2k-E;IdgX#{1^_h4@S}T|x=`BzGu34~SuX>gecD
zoJqrfn#jx_5gO(bh)YMOlXE~vhwL=b(|hb5koBu|6EGQ)3LU(WR@ahyV>zWt3~{8S
z0@=DAKYGnck<E#NQ))R4#<+hZ2!7hsLw-(h`Pg;tJj%KKhmC0@SEWHI_XVixbB@_T
z&;jm%brAa=E39eEH0T_Gw4g8F5agD?0Ut=l1)^dVr0O*)HXJ1!Q$^eb%SbddCez=j
z_+{sLUU<RlG+n)C#lr(W)q3PanQIRt6u<8Q-u;E-LNdGsi-=4)PgU5{fLlCw4Zy_6
z(ZXIpcb}iTPJX=p#drj&tW@8Qh_Z{N$l+6cHZ-;3;^L&J185$rYy@7%@)o^*{ZlFD
zhR-UiL0)*c65MJ(Gt>TNW$b&>1|_J%;w<Pr0kiYrTXKxUpEM&gGpTedEU(j4u`)A>
z&{Hw>fA7E2W$f3+DN30Dz#*!t3}JY^uAZmcDiPmy_+e1@F2fjTl#0ilWTkp~dNe)$
zN(exq0HX_B+zc8?{87&FoHY?hi{utquM_3=n36L4{t%(JfUbF-;6>~`EaQ9sN<GzL
zx8JvJxEDO8e77@>$jjGo^!4$<BcFl|8z+a`B_RHp^rzfh;_$rq0VQ_Hn@9&R1cM6#
zg3ggXK5B*9T34@rj9|X7*q%?!df^0B`McI0x7}_uS66P*2J3|g=-F#36+O>ShXGa(
zhk(o;KUOrH;g?Hqd~x$(XOIao2=7vfyu8a5w|?`@t=@n8Ht9{`dLdJPac63>F70t~
zx)r*5@IC&YU;O++ZJn=u&=Z0XRt}E*Vrtp&8dcl-=^MhZ8Kuj{?X%z>d%DfAfWrbZ
zSN5D;%;xzsgw5Hp{cO3#CNxp~-(zEQ!xXObCIt9GH<DiKxb@qbZWVT}&?w&$hGk?h
zd_Ldp)du$$!Qx1+S_vINz>G9JJYBIBc~JjL#Z<xt;I!O>ZWlT6jExPXW^Rv(E5)Vn
z=Q`w4Kl_P}!9qPG><fW7M96X#9tAHL6jGMxJ4N~2wt!v?emh;8w&Luhq+nRa+}hI8
zzcUHc7?_8s{k(DWW~xO}X|(_6(fpHK+vRcx2Lo_kAZ~yi3vrNz7S+`L4hsm(h$pa?
zh;R(9J=)avg!PC^W;+L#D;({5Qa=U;+=g>}=Giwk0+Ap>3$MoL^~Yj}e7ze5qFNz`
zvA#a1<&@u(*Q`=4Xi0s}uz<+#snNr(0T5dOqpn)#vb443hjafNt{82ZLjE3Ak@3Ch
z8oXEF?Bc(v@X+X<@CtexpGQ#`Lp#A7Hg@rtfi&<jo2Iefq47(DaR<0#CNs6$Rko2P
zCKgkb9{Dh>K>fZHOB>u*EdcuQH_D^>cPYEWTw^%Q-214a;7L&MS%<b$Cb2&0zSMYw
zr;PuTJ<ycFX`3wdVq-(fNtdrPLkMUmF!Cx;FT)SBoKMye6U#Dx2<lcqK)}vq#b#sU
z<B2kYeJW1(<Hy7J-1epl=>c1LK<9yRkK9;Eak24mj#@P92)hmRcJMw=)vv$q1qr}m
z_fH_u9xmsoRCQg*u4sa2*=THD+dnCGS4mtjqfm-UP%G{4xD=+R50~fHl$3;-t3X}i
z43p~#30O@8;B}IjcGx%s;mmlE7p9B*E8#|wOzT<Lu`v>xO+Jy#vwv4iYpSYtDhNT;
zSM<6}#eWE83S6;)SzHh~&nFD%0L038v0hQjBxH7+z;G12TbtvyQHc*$fYSwoFDN>{
zM@0PLyI4#01KQIUi10wcNn_W44U{`5VlFmn=7xq~^hQexX*I)fgkMU0t{EdQ+3nke
z_wGr_gv5VHc%y6e<AXL-=QR!wvSgD1L@*1st({-~C4@H=6b2nOUj6<p8#Is|Im%5+
z&b@zsVod1u!FY*^`>`EJqtjKko*?ofxKdL!<bA%&Bo@>zfoyYh4csyi<_Y-&kt8jD
zA#ly!^}OK6N@15*<8o)VbI~F^t#+`mdiPFv?x@ix7c7@aYp}v^o1EumzgS0rhsQbL
zbrU_49&8}h-QIJCwFoc}BBC3+Y*NKIr=LPKqb(a)0DI0A11l;jQgcYdtD@dpOpZQy
zS(*_75VU-yT++nQ&!T~(u;EIGwr6aNg@r{-Ny%qr7xvAYnl?s^Luur=HuhP<2%aZR
z&79>vMMK4S_{hAEebLRfrYjv6M+WX1nv4M*EH6S)sP|#FmVmmLm>48)J0qlMuR*aN
zn2~%;?n&JJ#ZW>`&c!l^-@w3Ng?jqe11uW9ots(j5W>;y@$w;ImMFrGIz7ON_*j%e
zU`cAhgcNF^A3xrbLY7vm%0^fs78MGrrLb<O%;{qLExNbzWnnYEErHWnAHlkr^ufJO
zppDsIWOfHTDJn^ZK|16rT0mprR<v`J$0OQ>?MDGG;jsV?v6Q&@9mlZ@QOd`UO&&5a
z0kreh%*-b6q-e2L{+`Yb!#+sbnC5)Vs)X6}j)X670@q?XK6u1uhbq^*RWTeC5K@x)
zy!1F_!RZ^N495flRaP3UhmyP$D~PFhU#3&N78em+-RBqA+9fM#6fNjB@>Po>KBm{W
zz8g=)K|V;udi0dXMN4seAsj+MECd9pp4{0jj^3FEUKz>kG!Fg}m*y3$F_o*2F0y46
z1Rs8y|HNCgHY>x7#_u6JaO>vHvhOSljs{`aKJl<s*4>?liiiALV=M^Y?z^(509s24
zfzPU2^%s&tx$0O>Yj&b-h!1rLBK%B^5mRuBFuN|Y7?d-_cKn7##RybZTZ@gq>F56b
z{&}qxKEBT^Ry6naVL2aw<G>$r4!bGY3?*-OhAS=u<6sza&L%-KGZZ}ub!}-!5i?4>
zR}6ZhqBu#DR3x00+}h>j(pPsLp`l%b7jCjj@QKC5aIRk?q(=D*1Kr980%@1CG-G4V
zums5^$T5b~dvd+&0FgCY|1Jduv=ph3`<6e-H&>ek!^)r--7$~bAwq^KL=5^ET1u#}
z;hb&n{E8qqA*E7WM}Vs$Gb4%}Q@#b9l7bFW?bS9*B5&Wmhh=RBj{OLNJ>L|PSq{L!
zqhL?R(8U^6#wQVi<-Q3Z%fc=>Y35)ZD(Xj%<lOwUxrs22$|9j3YoX7RmR_Qz0n66s
zjsyr2ET3g=uEV}PSW5h5hJuc0rrN%@zvwDDkQk^SzM-yey1m_woz#}vO9v|((1cAu
zT=fZqX@tm65h*F~lTX0u`v(umw6fRKi}V<kE+AZ{2A^nBSU}(UfP0@==R7tiM*^<0
z#>P)i)EYb<kRE|jV*0D2<0Id6bNVs(X`s0g8)kDEfq676?tO5*5y~T{A|^Q9i;Aoj
zoxs`#O+OLEV6j1oNZ`t|BUvr$-#=!+(*x}ynNO*7{6ti=f$J6Q0B3|sHZ_nSx@<m5
zgp(btbK4*Xa5@U$dTvixs?-w}#rq}-B?h2kV53N{XiRLZTu}N8aCfhcI_~XD^SKql
zQW7vXX%>B)@f`x`zh46eBuO7=`!}als8co#j&Z&ON=ZtDvV3?fsih?>D(XElfCz8U
zKEuVrDl00|KjM!qGU<my!td+Xb|VF};HNsXXz1u#0Gm-Su$}3nta(NJtKc)?5B+av
zsX4!)^nkrs-X0=Q4APXeOG|!}Pc-0`Or{626BO%$&zZTn)Swu~+tpdbCh=~cLg>kz
zK%c%N8I3^X6%<4?T?1f`;(k}LruZg#9g_#f1E!ZRKkImYe93?F{m$aE`Rn#D$w2ai
zESr&GsR;=o;w}wrlr~xp0_sl)M@quO!|?It@A8L037?am9;8EyMswp{&o#=99leBT
zN@90L1Lt9<XE+_R2)*`Mj~<iYB`5zO>`iU3S$@XRI2@Nq<nuJJvZ6kj>dJg`9l&Rl
zRuA<D+~1|O*5y)B4PZ#+kY+sl@c2Wy$Y6#(4vwyjTmlAc21`nk3pSgch<}}Mmy{IH
z*{84u2Ij?JZpziJ!-7xWg<ma61_@hoF>Agp{Vi+RfGek&PNxe0Ru!PpyamVw;D1@$
z=yPyhSgy68q5W>4g1`8pz**tO;_58J!cr94Ir^*fNB<Gp7GE=6eMDX0K#3!8$BXQr
zFFlx}3is3FJfHtqGlXWGnQ*zl*Z%|K`l33tE|>q`hk1Z^Cbb>S`TBTyy`G<jQ9GPQ
z@;%ElH3#p(12N9CvVQi6hUU{!D(%YH&XO6h0(q=viZSsLzF%7L=GV^>@CsFnHkvRg
z{>^LxA`UvG(fEsO0b1^Zwg2Z&218-F)$C}ofdWb73XIW!=>6V~;gT$ig=PThgIT34
z*`R;jy%!`sp_sE<8?(myb^_^Hs7}F!nh(ipAW;!eP{`cN14|OrJy0=K*KpX_+v_&s
zM*`)#f3%PXoJ6oz^EW|edOFY%=U{&;${1=i2#dNcwq;*dWS8s3fF%Gq1kzpDIH#lp
z6^91Uy4Y$mgoX@Z<t3#1B$}wGTHvD#T~4vr7WfRoXai6K0QPPUq%#I`xuAd#FaM1^
z9(*AJj?j-lGyPh(x22^RW`EH3Cx^hf2-MOIu($nH0|dF*boHhB2oJIVo*b3t_qS9y
zhbNez2*pqVm4c}bot^5@BV90FB_zy%&<$c(zWUxpy*~U7hd*6D;6-wEo%BL?-IazZ
z$}xP~V0nZG&g1-42@X*PhAssK1*E&vF)BSF0Wb%ar;OL(ZKb*Fu)mRU0q~PueF?r-
z2#(G{tQ-bm{h2bGU}T+~h|qNwFf#`SJ**!Aw+?F9-#ZOV@EurR6BBh5745*Z&BiBW
z)-^LT15b#9LxJRKOx}k&Pv$iRl>)LHnsfnmQdlRJ`Gn16z?iPjV!U_~=CoJgC8mZ4
zHdFH6eSG|Ci%D%v%(>m)>t{1CGl1Q&FvEb2s=kkj(=(tR-&tCxg<=m18Q82B3));d
zFs~g|)ng)Q-^Cj!JPvRGl9AikrL$9DY@U+)iUoGck^IEhprE6Z&3I{PBEwc|03!Ui
zQxKf?_y#3{zCj8P)2_o9As)d-8(;6d8$lKI(mpRC!BSK6bfLBPGdA)*DEd6v^6B^n
z((1pmF2I{O$2ge#hv0N?)FI|WwaZe6l<8JxV#eX|G0dI{z~9x;fjs%4;7xc6Ry>JW
zE>s^p?XaJkn2@m8Z1g8+QD6z|i-HvbV7H7p94lf&8A?a7g#M|tU$q24?aGVGhmGa|
z43}wfaPP6&jeSoBR(|Rp9q$fgMZrLSxi1hP0nH&mYFHTt*Ye<xg;u-<Qjc=W>2l-#
zd58&uabB4PnodBlAAvd9@Gkh%OCS~KdAQ{@YXMz9xKyJnA{jDo5>TaQNJuBV`k7>x
z#0a0zQdV~MBpBZo5Qfp*mbW(p(aP-!(J{?lKLTuxFox~^RIPVaX*a7;1kc3S7+73@
zJL^A$haA=f$iXhY93$u~WEBv_#pZNuIX!2)y))AB>I!D}$ZZ@PVE1-PY)FVMT#&Ru
zBZWH4TXSKA12ooPZ-Xa4^rJ!i%Q9F|xc4WJq)>7|i+2z%>!YKi$uU*APWhGEaj;t)
zT|-sVe34hl4nYvo*-BiN4O8@!n2-~Alj?;)5W)l!?#e-yVPSx?O6rDw21pMS5rVwW
z>hK7^J10(0$3iZE(CfBP>99A9>py=!#zuR1ACQ=eWDreA{|RbwXAsEhGySQ)vCnM*
z^*jrXf^Hj_PoKdt3?_At%^7zvyT292&v$WH9l0!Yz=4#$x9NKD3eXzQEGAHZe)hhy
zC~s=29?^vO_;;|`x4TOcS|;(b%Ed)}N=k1}(U>hl(cuPY3c(|nD*+?lwsHyr!F~qi
zS1LG4*J%k1M-?#;KeIwbvS~Z(=xLj_ujGvOyB(p~$L2U+xdPjZ4B5M=FSXNWZmKfO
zb*@9b|H{=4>0ksx68%y!oS!*8>Rex6pD4A?RHc!YEQ+T4gh2g$<6qv^mlus<cut6W
zbPX(NiqVUk=yeX;jDUZK4WDS|KEuZF5!@zpj_8LBv8a%cJnUi;ER}xYymJ6Rg8)Cj
zw^c%WIHpzbtI+*t^3$C3h107{O>3xYOjcKqOqQ=FcJ;z5r42FxD76UP+Q>*1h^9eC
z+Q`U=&t?%4T_}qmJv~Yl=Hr*hJELVfOG_Le+tTtbK_<n#FDcpEd+_7+TPF5wyR~j^
zZXdn9x$Rd}i&Da}vrXXD2D6Q%z1%tU@|Rl=!R)48l(LILvKec|ealo+Fism+Q=fqQ
z;Rx__dNL!07qHWEj+prWV(-1<x$gh=VV#|oB$U0=K#~!XtRf9tR#ZfGqzKs!BO_#l
zviIInSw%Kk$&6%#Y_iAi_;g;^bzi^Vef|FV-H-cwKOXnvI{)f%Hhezs_v`f>$Mbj|
zhX&%4Q3aVxP4R>Ai@Y!2-(Q*4>(*-Tl{zwh9OC7M${Q+oUx?GDm<Pr->!_)bvikY@
z#&I!)tZ?e9Y*1dBe+<s=)g2b2jaMW$1rr^9bI}`}7ZN0q!6r5Ik4}HXh=-tcjYi`Z
zD&Vv<vzx_ljNe@-4Y3e7b*cxP(-G=pm52dYtw^_>V!%WqC}4I(mJWUY!;O_yyMg@>
z<1ni6%e4P1@e3^jLp4WCpPWj-?y+O4IwAITtzWJXQm3*R=P3#-@`bVphy7*=B&aKu
z17<OJ2T%ENtVo@<&@O@_H>3yzX(c2M9m;WBj$&tL$4_f5Fb%?;?}tn1k{19c&}55H
z`9UKin3<K8bs+u{FQiG3oxl^>hR|Vf%a%nurYz;yB)aIwbiN~Su(CY%9iORJU{Y>T
zQS#a_eh9ooBi}_s7BpKu{VRxc$kZPx*^gDiZ%@E<?p{j_8%hD}msi*gIOB6odr_AE
zY>o?lYuwy_f2ewEYyEvrP7CZ!o{4J}n%PK6iP`9Y@7|UuM@5EZ1SFz~u`xmOE@5n?
zkE+gBj6d436WmRZ6R^I*zq{&2q1k89=>Z)XR&cP5fekKr(P^<hgpq0=WL7N)mhRo-
zykwu`v};{1G^_P8$!WM4uNW+*0uV`PCRP6c@<i38t6T83sUR2kk#*9{BK9GrZdsa<
zTw2PsLnnd*npf`H^8I6J)y}11<J-6CX=!UjDdCv(qv{uF4QG8^mUpj0-h+)5`m`Nz
zB*&<njN|ChXXGjePs6IXbs9uLr=4U9OT%?O_@EFy1*yZEmTTOy%9{+=Ba!AHWe^Uu
zdTQX2Kfzy!>Rkh8;-Q^S&4sfTV(6Heo2<Ml!r+O3w~(2ciOs7j4$aQ9^0kiHa0L|}
zAhqm$qu@z4g@yFt$qmEA?tuX;3a~5^0BeIYVajrHKCDe978X@*lyd_w6#~`z);E`b
z3!ZCcK69@HbIX)D41&I<s1UAm!NI<AS4rB?vs$(xapO>rsCmvPY1+1oU375yEmIXQ
z55eEj9+~HaCXb4~L7UJw7(HUN{+G6{?%Ua)$5q)uAqd~QzEag@o!Vw%Y+U1}ru=-Z
z?z&Fy4_XHsh(RTEp1O5z8@4f5ZZIboMOL?)-G>VS6Y~l5W5rlaCH2mKdGhsD?{!ef
zj(-90FJykr|Lz9c8WB`!KS!58VM&8DdZAebN3!m~G$h7u_m_;MrE&4_2t8!ZxPQ9{
zg#luGFb(CMJ91l#aDLocHO>a8lNJR%zuVx9?W4)Kte}vepP!qb-;{OyfO<#D?B(cE
zR#*A#_c*<2_6rx~B~W%Bxk%cRdwV-px<Vye+~L6~Vc~|m`t_E;v%-Wey9-Q*@*`r*
z)QufZVv`_F2PWBW2V+*0L%0eK^<6J{C}j9eHY8#N4cNl@rw*#SllIFmjzT(qZVoJt
z-aJF$(nP^rU{nr1f9y?CV+o{xDg%f}K#w7&D`+Gh1yyi7&y6!bCnoBLX;@h9TI#yM
z+9lt3-yT-%@vXsIc*hPGpq>x{{c;Qc;pt*k;%l-JtF}s#DXz|W@mL4u5K8bLAq*Py
zPRm=T#*f)`e%K4rX&?it-ielQHmKmSV8=S|D^blb+K%1WEhupKoyI1;`}+0J)urCn
zAN@I)=O#%Rjt14=gD{a8{D?=oK(TFnExf!w!;z`A&<lak<F#{fe^YbJ;FptKFR;hd
zR=<Ym3lgOCOfya*LO2+o7gYir<~NrIn!^_;gJ|wS763XEFYN95Ks;5}8{SyW-?%%~
zleO5Fd41dHkSBJE(zJ4&V)71dlDD~@H!zTwcwK)`hPnIpb_&-SyXiLS6Qimp<z$X+
z5{q|VGCe@y-!k+qUP`zyAof)#5}`;CxvHxCnOP<ApGi~@#{2p;&{%fu$yH6wX1%{0
z9y=8^H<Gs&U&{80KJN(|iP6sJ7_!Fb@(q-9vq$!Z-+L8t!9i(WdCBd`=pRTv9g6GM
zrLDH)>v{aoERn|?0;jI-o!DRJ_~U8|qoFE-Dccy<LA4~_!z5EcU;#T#?BW)wi|<4u
zBDmV7Ko?M>i|x8{#8ey;zvAE*Qqt0?-!)1do)Zk)m3)0Dmwc|jf1ovbT3SkKqQg4=
zFk{D8pwfM5>T>vg;;+e{4Lmr0HSbR1!~_GkquTWAvo`fpy~1Dw<Qg?)x0TMgJuUOy
zlA-=QH&hcIMtsTr_f&5=gpYJ|bQUupVcYN~J|m+4vBCL+&f7*JqPdlM&K`kmmEpH8
z1Y5(_kzJe{oRde>SGVeztUd|WzOE10oo_CiJ1qZH-eD;;f+OZa=uPi<JEhb6Jv=XE
zpq&G1U1aG96Q<seu@Par_jYtakr+4v)zx91c*K>l_T*)3c%#M8zcuT6-I$hpg%CY{
zeci0KG98c@<UR#mu#xm+wWcvpKT-Vw8ob0d1s=qJ^YY1WAX;Cp$^~L`@)}>XBoyA(
zA^3>P({MZq*w)QAO^_aRMSZ<Abv@+7zTz-HI)1L75~xhioITrL{PW{X8;wbQX*h@I
z!&wUVM$D|{<PNn}=L4nfD|HM_%GOdnle>l4G?yBMqOsENE3#ggW&)EX$VTMquR>M9
zbOVc+dA}YZTy*W2Z<g%6dBco)tdJ&_IPOqqsw(4ddwon4?B~O<=;h(&29l)J{nU?0
z(?qi3yDSf&>N`!H2Xo~zgxA{I%k1C8tsoD8Ix223CujCXA^UR+JNQDcv#ZqxnRVw?
zeR#YR3&GOQRf*Dd{}k&mcmgNrSv7g-Pzoa;JUa*%K}>9};t`YNgMgXncNpeTa+J9o
zkn|2#i?~r>GKZL+Bp*Kd^Jl32D_k#kPv{Cr{J^)wP9W5e_U-~FqW9{tWQ=QoA2W(r
z35F<%iw~gwCrDpX?L&)|8vTX+Hx&7bQCrnz?UeQ)EqgG2kXlT))M2yN@(%j2+1bG(
zyAw&BU*dRvIF#+{OA5A^YD$)BGR?$e!q=A{eBAQ&O(S|0gr&2#lMh8j9e3`G$BHX7
z1bob%sujORIi)@|Z27#6LA~w0?Pj@Z0!HTI{QPsZFXE}%Qchns&DSnufS>?jMfUvD
z-SvuBgx+JhInHJbL(AB=oPKuJ){LhNY70!;nVBNKX5GY&bawWV!Niy2mB4JuU7i*@
zHhljc<FdJC7*$<Su>pfxl)M8@0(ofvpxrXrnLUH$oUlc=vv^1e^JLHMY%+h1jKDvg
z279h9Ut2&mQc>EypP>)>2a{*{^gjtpZY~bJJbC^2PSr0F63#u}KR*4p?O+Mc`Giw>
z;8{Qj9cde@vL{)DIZOFAZ^(L3awy&+!7%e6M0ZV1!w1#kbg5}+Y3b<=4MTh=AGbKl
zG@laOs5h(!XACr$e6er^CnquL-9Xa}FSW_dE-xnw%SMHstGeQ_rb(Xhmp#=cLFs^?
zbMW9ForA;vY{4?Ab>F^;S6;4vOtQTe^VhAHt-sO>60Lqy*`#JGLZUnTW@tgeDc^+9
zTX*g>3`@UzLBLZ`>`R^BRWT_a#`lLk0buBWau>l3Am$82Q5@)F=8wyZ2r6p9cuQI)
zJlrI?hap+xO|VHyQr#-|F55%R&V+f+AF==MCv<kD^f@GJ)Ls3deY#3sSY60&Po{D3
zVZD$1^)piHwtej;$`ak(SLZvDIp6HG|AmSt`0}6SPLa7;mHp4urga2bFJI>m5%jj!
z*q!<y-8|f?^7={kD|H<_?$r8w=3Bt1;!M4Fj0Zo{+<teeGTpChLRTK^$zQOz+VDk!
znkfIZ2MgC*vf6IKAN)u`uyDwG85Z~8n_Q-f`|uOdj}qZBM%cOh2MZ{apBivTzPO;T
zW%G!ItA)&|kQ^0uo?fU5{{4(nQsq>G<8^t0%d<iCl}g)1DmE9M4o6(~k-OTa(HwW&
zEP7OGAx)iKW{YfCK`JjWNqd^0WO9s=p!sm_tAzXU;+IW_4{h4WO+EIPwJ2Vs%x&Rg
zt>vLC+j}+KQEJGUQ=mm(dg99Nx9mn?F(qD~hT_dKPrV!a06!A?i+<)|5z?IE3s*O1
zdefpSw1n=QE;Nh_dUxTo1pf89KdzAhg)L_c1-@lu&z>{ovtEmfcxia_wZrB3LhGKS
z9ecAk)Y+NUvW+sezm0C|voyJn9&_EpxxYV>hC?)|pJa;Z?Ce=(!$JCvnQzCQa~-vO
zpDMDDQoY1BcXnGht1;`(qkyCZ)k!Szf=`$a*taVBXh@y)<2|&!YS>ddFwVQbxNA#y
z?xe(()JsiYvV;!)7Hpg7Nxn9g>bN`AfY?nil$-Y?r}3UM-cP8A^Bdiab<;F+^~KFd
zLh9<K=PWw!h_5Bc4k}0e`&Uvf2=?tTdDM2R)A_kBZ@RoW&$uo}?wd&E>+ymsvq4rK
z=TZ`*P8YcR#p*JceUMHe==j!|(ii)K>|X>J7XD0AdV6(O`=Ue48;4hk63@@`;}rk>
z=Xlwl7s+vrTpY}fQt@!BIllSuM!dhAw!LbV?yjh_AJz|5OKGw3XT+_BGGEwVc+G^A
z@CJ$hoSyk7n#5JbYFq}~z0N#Cfx+y|EnLPG)xti;?tZdQ*m89b-ZJ5S{&6~%i0II{
zL-78n-PcXRw%mELkULraWzP7eg5cn;ABuDJ+f|8MlfJ4mWlH33YAK}8^xs_c&c2GV
z^8G*dtO2xE8pNvYUC=(W{HvSyTcDJF$hC|>KZjSjeib|?IsN_AgO(&(HhyMZ^zp9y
zm2KKXFF-4L!}34AqL!+P(eXg@=7r<N?z5_I=iP-XKBRn`aFYLNHd*s#+pd-Pm5;Yo
zmgu2!Xs1cOQRsf4YEx+w!lhw;-t)q5c?+XX!j<X%=gJtxMKUnOn;Qn?PS<1$ys&rZ
zPVeyH^fi2IbjwJP_EqQxbAWiV$*5-@(?GR|*WI}~StupFn;_h0^FI$<D_=;_nKms@
z{ZR1iFL{G=dfb&l9K#o^W9{n(cFaY@y$iX?&=~vgM~sNbATuw~pho<8{mbJQd+4pz
z`sc5`tQZQ`*^@$=@j5J>j8lW`Pn_BBN$?&uP>>eNJij{3*l%XKi>4;U@XuA$-<H`^
z*7Kjf#fbUwT*1rYb2lQ*OypZr6wJbVlHcWQ$L+LQLR^sL`y*-+K&e?Aths~BljV*Y
zoE3#%gpDVSE)+x`KR8IrgP?_vpnP*W{fhh`bFDNh!eW9Hwzc0w1ld}5i7nW@Iw!a!
z>eqSo@bIxyj+7c59;UUWpH3KjU7g%{uJycqYKiGY0}-{qe_HJQ`oN8oR9y8H<I)z-
zRrh>V2)5=`sIom|N%&?5uVks`qvGAIoDuf=b&meDJ8SXMOZ8l%-wguR;z=(%pPb8c
z+a)6~b8Bf?;p-<AlbjZ#$Y=>7Dxu(4W+7Kn)jc*fw-$hMp7T1Yd5C+*udhT^4Uu+@
zl7YW7D}5halTeAs=cl^ck<m@9L=$=FQwbA%$f7H$1%8Pw<6&S}xrdNWhLs=t;r6}q
z_BC+Rjz67hXeQ~YrOKeTl40F}CyNszi1#Zar|+FpY$U*uq(;O+l|cAo(W8M{c?m?u
zCynup@Raxl7s-fZ8mx5(DT=xGJz!yVd!51GbnUJR!gN!jZMQGE_-4dZ#=@ids8=Ma
z8ud5-?XUd_IIL3n5@plNC!`o26e^WB1hGAD<e}7Ysv2c6K5&0>oGEEzyZA3PK1x58
zMy6`3Frja!VpffWe}(<MG^7GoPSf=KyM<lLC-cMDixFAyO!NrvOk3)<8>OR>S6fWj
z$4_oA4cW!!f=@~|^r-1MiszYl;%wAP-g#BEV81P#G*M!1tYE}?`>~4own^;A`^Djj
z62CMx`~U5qtKcU*1lhD3q4qKNIBE6@OkR?$r^`KZ`&uQ5mSkv8^L*PAtIw~7RQRk%
z_)fowbUm)Nt06q^?2`F8aoZLCpmLmiWSTJCHt!&dBKHZV&BSxHcC6Gvu^F%4G`_v1
zNLjDKkZ{-F-HGu_<LYwEP3<#h!vt7w)PO`m6q8cH6HioCM<F~|ZKxT4;_n|j+?)nf
zw9dCy=t^fU7JKw?v%jd~;6Djp6#OT%|1Y+4_oWIyQX7}|MSk_57W(Q@F%Up!l*LQx
zR!tmEVTvF^6k|eoMv4X}-1=OvvNb-A%)OWR@uy4UO$OrV^}IZIbKpO3c4#R4NEp*3
z7V5ZG^vZndn9*&{Ns0H{J6;cj6OPfjRzx%9f)uWNgDY>0*VQh&2lQyFfBu~@A{>A6
zwN2RmF76wi_s)rb%{}`+Jp>xco3S}Yx5Mt2q&t5#{vBMZ?Yw(B<dlwNK>U&^&wTT%
zXjMTuEgetgOHVhyh8{~I?!KyZ{1?ZcpoK#zzw00|$j(^nK_5*=G#psEcY*BlSqdZi
z4bDJATH<`^srDPg(S;8cTW_=~H_83mVFRt4pec@?ZO4us==s5@o9-#}dHM3*+A7+P
z_J<708X9>81u%=Wv9naPoB6iT1!|A^J}CCXg^`36D$-ly$s&S$E*satuVy#{ZWy#8
z1R4vj7iB?FfZCW%yUgkM$W>fxwL(4D0fUZ=aFwKedq>$q3~5*zbXIZ)_iJStWnL>G
zr(bd=3}qfwB-ft9qz1xRpWnahxHC|8)5L`C+unWq7)5PKUDa;hv;c4kyB`oCBpepQ
zva%FGD_NBWMj<Suz)REB-R-p>os(M>^zoLVb<INj>&yK@0CpGxkX`M99?FsZsufhm
z{N`QCbK?LINMqi{R%laRvaJfT$*iN&F;tSH)J|H;=N_OQ%Me&T&)6A9c=ur8|F7mX
zzF3odzL%U__|z$VDGTMQ?(Xp27!Jwqm}z2E;->%xktH8~D!dnVdiUK)sJXeh#l*xg
zYm1GG(<eCaI$V|>O7QcuMI&OEoUCO)w^Nx3ArIEAwYR@EUU^Y<HmyPBVE!qJ9^PRs
z<FTjjbQBRQ@r<P6bIy&S#R)tdo5SIE-#T5Xs8RK5H{bE&D!RJ5Obh4;8R|UKHI*cf
zz=ANLsK^e+B_~g2!VV5rX0Nk7O24SpK^bT@$ItJsJIM$=#L~)3a#Tm6)}`*H-C{qQ
zA{M<NpmjLnW0mMNlYj{;T?KuT2%D&N!cQl1m)3jCcl4;+*1Y~Lf*Q(c^Da6%I_R^a
z=GWBJoQs7P_S}wR$KHUkEU~dN7gQj4QAP$bOpqExqv0$>0pBSgY3}5rXV3aF3cuVz
zbv^hMQ=|L7;sN^_soU3Nxf&SN4F{c~me?!qKV_IdIp_V##)VK^;)kEpOE;pSsd(%J
zn+j-2tcHOw>~$e7F79yDUA61iU$-5iRNUF#)YBvDH0`!`C?iwgB`LnQlq(RJE3Oc%
z6%(6Y9&f*-a59+;K9~S<Ldj2@7-BG1o>Z|-yQ%RuBu$F|MV^aQxn_pLudJyF|Lz?l
z=Oi!-`8WHU@8HV|LFcE$y!#**xx>SUwGvoJmj0#dBo9#JS{MbhbK*)ZKwGCwT3LP3
zGv%CrKKr@PR2pmv-Z#)-lQW%pYrilcWTr+=LV}^?!TofM+XIRTRQoWcfnfFoh6}h|
zPQy??b@Erensq}2>t_(jY@J;mP#XS81yP_42q3bEJ-mk7$g~#lipw6h#t(sMo2f+`
z{P}rA0n{=qP3>>*AMv_ig&zt7PnE(PmrVyyV?T>&0r$d#arp76Zl*l?Qw@`-?G2~J
z*OneI_}GNn(b}4WVMEeP_Qeq_-g03FFfdS$EU`QxVHi4=UUr~BCuC+e{qutko%o~q
z*@^~EP)I14WLnCI$eV(S%Ix;-y7|YfoUi{~X7fKZaiArUcPYX6imkn%;1^?r-~U+R
zp{iZo!aM!5jREx=i!;<5|2)0_Qfh9O6)77L(FfPRINlR+Dqs6VB+G&ry-|^U<lN(m
z!$<(i_i`FIAL%DR(}qYnMT}cR_A2B*NQtQ6s8r^}PsFK(EHv-q!W<G3a`a%vqrW)m
z2wp{X<$u+8YUGOjMfLZ6`wQ%UbLtWPn9R5?@Wy}s^8Eur3&+JMV2#E{q|B+EVO97T
z;y(KbKmEsv7zmX8`D5u~YQ!BK9XXG8pBpsEjdR~eE%lFAj_xPwmX(#icN3Aw_=Ien
zh;cfF(WQ`(1Bslh6#L)GblNe5Kkh@rZvZ=@-7wdgfe%}CRh0mdGKF@`e9m9>v{$@e
z?A_aSac2x)!MRrbD%y*?iH_|<vUAydy;mJlk@O&WoK!BjHe$OA?mr;J$!p&-APTT_
zQi-b~0i)ppQeG`@H+9RiXPh7pRMRH*Wj)$*e5qoXb^>mgxTQnibsjmzxj&;hM)){a
zx0VItNr_}B@Ex6A+}zR8*7nTb-~ajZ+e8861r)7uV3)k`q*lIv>8{OVGbyRRPO+Vf
zYW;EKo0eJ#4F{7rvGUbaSgWz(Ct_e%ds(kW1xNwR%PyG)&>Ys@LEZ2arc@)nCNMC<
zKrVc-D;cUw60pVc@mGrZ5%d16#q^hiUEY?FdPK@U4pIEY`C&Wz5qrx7_c7c)NGrVq
zBO1tpk}03$iI|P!PK^7@x#XYZXup=XXiGb}^HFx}h>Szutyf7&?-9Bcc}SG=P;hac
zOQLQ8bNbAhkPu%B$Y=UQvqHf;6FYvZxf9Ivj;`A|Du83n)O19rtN6M@76XIlQ+A@V
z7^(Lc0%flYU|XoY?W*ZhUk{HYD41EiIuFw(LMK6Wq=E2k!Pn$WlWVa|d$5aky_YCK
zPEIZ;%bC4BQ0ltU7*D1(7r{*LXw_dXva;Tbi*#x{37$De|1x-aQCRz$pkTom?*PwJ
z$~vOphbTQsg1(WMn45E#U(nNL*hzFiw=($aVKsX)wMi0A%g064v{%e@55H)6628W}
zo2aeIZRqvwGxx7t`1cRA_e2bl6;}kcaz9lFYt@U)2+M!R0%QVtJxs64Yp2LpCNXeU
zeX3FrGkr6u|BRDZnStsL)mCiNq9cuZC#O)(UnBwf6}mg9jcXFl!v>I^XhY66HJEuP
z(J>uhDfqe{pL*)NvvT)<7cw@Cu7iM1cP{lYweq8Eu10F*?w7f*_66+ZK17tLfIp96
z>Du}_=JS3Yy#=Pr*n5+YmWUkbN93!ks}OP@|CQ>rI<Kw$PC_sKKS&q!=LRcCI3Goj
zSnv2)0iw^L^q9W}F;Rwm=jl_Y;`A5@QWgzCz*JXPP%nVSg1Crvs_3PqrTL<q2jh8|
zwqPt9c>HsA`IZKX2_RwoL?X9#5h_d~?<D<u)JaH{l8#Hmb3>jW=7Du-+L;x9;jrFz
zs)+R{lr6meG!8^m##M(Xa9z5)yD<p{S(OGd)G!%XpX?UcYWWX&eL<%cV(9DtP~BP?
zY6hm(wz6v<jnNr1AIYl!5Yrzyf?JF6!Sv*fs<yTyFzI=95<)45hK4v4UO^63-En;$
z9tMlc<T2N)ygx6t01P%g=dhaL+s^kVMn3v+Ztii8w5Oto*n^?!{V&Pq=I$>dH3e-!
zB5U|(G%ZRhC@Iu~R)JM2dMc_5Ly$<9bY3HMbX-Tt1z`9m1mk|RS0#g=FL?OylT!pE
zyXVOlivHJ;<?J|CMLvU<kt`ox0s#^XZhYzZ+ge&~P4|f`24rTQ+>f0iqbQGmdrEsq
zBs^w4)X4l#oqjq3gGehWDScVlc?d^`@@`kv*QdcTk*i51(-JD=Kp17)AwCYt!uJ4B
zqXbQVKpF1Nmz3PwHMWL^5H(wW_x8)+l)*#q;^K8I&!?US9pgPL0fNWib|gOpsvm}T
zGebkthIO>OQKF)vK!KremI^01At4(`2$?Mu&s4YQzHeO&PuBbM?1-w)pPxFF79USZ
zPhaP0`e-_@<gDvfiMxB^^XC@pOU$sQz&6CWEB>-i1ff@WM`C}+&d3NREHQGvxQsfw
zyTo4LmB-%V*Jj1<llD}QD&@X;1FEDwWcf_HDk}OqJMFeMqA{q%zxr3dF{GR=2awP^
z(tn;d{@mBnqWp^6dU-hfPtO9c?5p<<nSV(+5Tx-J2KLYx9)YQ3`}5sn(-4dOwAV^T
zSJ$=SWqFZBFEaa-u%(Wdjo4Z`j0hE>Fo+l!dN?s_D^Wf<E9>K)Q<5@YiY&LcHuu2Z
zS!D<iIZX{Y^V#9G-|1Ax@e8oQ^G)0H-dcHxwg2-dsLp$5Q+$3UWL+0%2<IV*`#-L^
zlaM`#f4rS*H!!HKX3zS;Q%#DRV*Ht`=JCVcg4B%O#J0IbHqM$VlkeZ_SH4-wdvmj)
zr=^f>DT|8wLQYId%r%qqA8s8AaGPbZ`c~XcbmfD=uAd871N=$Qz-8CldaLWATJb|&
z^Cq)~%&#n^=>9!SIorUOMIV?%J2|;x<}Kw|;pXL41^X|h*Gn>xK|3WNfQS(^NxrL6
zx$OE7JDYgFP3Jc(mqv;^em;?n6~>SwEKakJ7e0&HEi_#}YA230l%~^n9;{ClId9Ab
z-}Vz3EnA-^7nRMBl}JzWCG6WW=GD8B53c@<7B*_^f-0r^irqJx&WlyMDxvD@(R1q>
zwR)iPX(mCF7W}A|IEW5pYTtxFY3#zIon*w(dsrTRpw`4i_)(8leuvqQp2kpAsbhZ~
z+?N2hRqx&6DX?m0zo;sK%X<f_MWE_PKp%K@VGnk^e(x9V3+|G6=Hxh4Xs4m^bzsZ(
zI<|X(@Z*eYVjPjfMRgD}qwSA-g5KNo-nF=mPkj2Gx)u50LbE?l7NriezTV1SQ$Dp-
zDPy(N>G!`rQ>-dVZu)++8yJF<xAV%NtL^0533m$PXy>o@YnbiUr|cGg6|HZqc4N$O
zys$1u&v<Dpw>^yi_H_Anzp`S6j`%{)oop7NiEc<zve<lS^<-XZIC4>1WNx~6roOp(
zrq?bM1P1USX9qo5W&2*yk$4TbZdc-qVvVA)kg(3x^+A1~9(&rUJ**{MH#UFi`pc*%
z<>cI(`%#6VG;as1OEzqG*v+1%TLwl(V%2Xbu<qmoEZQZTwiDzs6RSPLXfI|-s4FTG
zdc6jgN)K*P$Mg9{&yNrhJxi}IHz-I@5dJ2ZrVq+vdh$n;j(metvJ%=!U)b4JGW)yn
zl7#$phc?ci+W(Rt*X!0(^}@%q!Kz!lYW;@^4^T{<k+`Va=r!`lqy2$3(fEI#f(f$5
z6smu)Z27%z_+R|T2>QnVlHX9%me~!boM*S<^SX`p<1@y{Q<J!rT}NNCvGvvfDe6$t
zpGA_eg9M0QU-l4?*JsBGV~hWj-*Az9oC6g|1gZo0p434!>VeQ!z3DJ+7<+&A<DMlf
zakh%!kh*Ry#I~GS?#oABe+jn9&uHHFV?SEx&MpRj&AcAkS913oV%x$loK<phRwusk
zk9$}dPEQt`eA5-@yZ<Tjo!I80fUdKUGZe@XR(dSUA78gDwbAb|482))>tn@mEzQYS
z(auX+gwGK|M@)$YVGhNOL-fSbDRN3mCpbB|MU3i${ZE~0!=i?`X`AOU>ze^V`75hG
zb<fOx*!lI$DuXblfUTKD{ZWBeEe4$TKzY#)s+F$W>ylfG$=i3@lN9vNrE9#NDeR2$
zvW4d{p4_=y*)oFy@RbCNT|^NgT0S>5ZT|4#l~PLOhu>+pS$gK1Z??Vu5^E+^-qgo5
zE%Fs=kcnJiKyW9*={X}tm~K@*)>|tzl3*1Tt0r40ogF7fw?$kN(8u+6t>5-b?$bCs
z%5{(VsHUY}@KNoSUautQ$iDF|&*s<ZV|#{&ha1EAk0g9rn(F1%$`d?V9e4+ktrsV^
zhQ(3L{F>Qlp~VU=F&unyRN|Ws`smHLu2ixvb=_V*$jGy`GBDcI;D=|%sZkf|3zG`u
z&e5mj5?zinTj=s2gRG8qdpWYOQzP*Kzt2KGBj#h0-aX>yvG+o66zj_jBF^3|Tm7oc
zkpWFynbYVjSwWGArV}vxk`J7K{5iDlm|ZvSdwmX|+n)1ZKRD&QG+y4R<0yk4s^)Nr
z6wzop){_OC2}|jNqTe6wlnq(ycleb#D}s14`_9RJ>ysBNlfzi-_;@+fMY@uam)C7)
z`lsA!bs!-+;BDTOq7o0e=VR4^mi<sxxA^hN>zFWRrIoFhSVK%eSH6TFM3uhLsrUf%
z%_B!P3p;gSf~k!xAe*%|o*YfXbAyT@-}~5E$#rwHRC;_4WtG<Y<$-AB7yGfuntN}s
zf?fbd)p;gG;!9nnIrn662snx`Vr*I~GML9Hh?(Dc)yQb{>vc=48w5i`pcA#*a2gbF
zJ(~qSpDBf|UTd1v!2CYm5|g$BatI*bu(}4;=5l}WcDs_K>Wlr3zbB~E+?V?uT?fia
z!O3RSH_*}Px9znE?K{oEVO$@4+{^a&gce$R_<$0nc%P#)FLy4YAeKwYb8Dfm=pTK(
zeYI>~Yp(P95-vga1aI(6Z&9=3OsOym1S?^@o9a4_?YY$CD3^t%q6&SS<?UHdN;wII
z#p0Q=@|m(d2d7Xy7FfF8C7fz1^@iqVe-~Qp$dT;Z2NvGpl(5OkUBKmVR1RgiNG^X#
zOh_OY84^)zu96d6#c#!<tNIrOx&Lj1Ra4(pfy{f%C97=h)tKfAZX(9c?O;vis%?Wv
zN4w^_GU#b?6XSKqo&w%_76HJH_6vE)29E}c(@5N!B_+>pECSYS49jiJzSnYo4}4aQ
z$6DHDZL_ZB>idf?k!)6a>M~^d1Sswy?=PR^M-Ni^Gs+Q>7XLy)N?z&0=P-mo_8zbL
zet~9RS?;g!tA<K=>sj!xwoqDt7*_%c(lG}e=ih~V3+%7W590CVlySY2S_v(`A$IS(
zOAV8?`4405+~FTv>#TIUFZ?p;ylK}|TkEvgdMQYpTzpX(UB|@N%-54zkOQYTj_62L
z4F#t;()#l|Fgp~o-v7!fhSWj_?p6a&u|813x~-NnBz0-=9K!|;X%8kshV8K1#F0fc
z;n<#Z^1a=_+~Yl4^!O|reri^S2={EJc&0xhLgvoK-t>w`CIs7%sj~IE<Ps~&`uDds
zR(VSo=RZ7N2T7aVfrNy_Pi%e+#lg~8y#Lw77HJmO4PBH88{X6>D$-gcmirdaN7-zx
z{w&?za^x+U)wk+N&w9Vsb7%YgOxaGJ@{Klnfif1cl}8{_hW1&eTw%HQ;XDX*Z+}J=
z!&qU)G&xcN5dpdN`*PeoFFh97wEWc#Ik~vb&VJaG?%!vhVK<|LH}r6fUeKf*#$9au
z-x2tnQL?e3l!LhmFZbQtDjJT+#hSXHWWog!oqn5-ZVpfMR@d)APx5Zm9+a=$CTUL-
zRPEap85wBoy7X#T#BE`5zKEO@+&4q3E59#w-i^`^`<2-{b}sET1t*>iY3IX?OrkpR
z!ot3T%Oo^3SzLXQu3Nie6JB1kSsl?l+T*3JcP-9I^FA)+GG6-pY$dtp(h+~LHtat%
zo$lp+w^T`<tcLXse1*&0)9-$=R7J9SlsYYS8y8Q%mpl9nT*G+BW!=99zobTcJf#<z
z&s9|v5!&cOlxR)+dqtQ0&=eLAz!pZf2}6N8jl*Noo@4?2Y~1NtM-|h@vm>Fp5~E?a
zrHA7EB}k%0M0|omAAF7y=V*;OW!RAxkgel1muPa+z{rT@;rGXS>4<ysk!#%nY@Q)E
ziVd#7g~?32hqvQ1YD&*$R9-YR5dPnpS-|%1Sioh!#@gDAWp=p=<I;m3Wa5S3_#R8%
zKWACtwv6Kvh(sRYyd;7R5}xG{YJ?BQ7qZ0$559kJwzi__$h@8nze>Ga=m*!S*DWpe
zW^0E8<@0IVd9q3jvu>}{JQwa)Lsy3gmpq(?1Ml%&7y*~rc8rAvN@Umix{rOTg|7!F
z8T|a*RHWF8jWB^~iU<`oxyW#g@|N6U<Ll6GDXm8MOx6Sgf$goC;n{_$q5)9S#i=-W
zi_O33JRn@hk7;Sk6j8Q4EuW_B6MKH0bgKjTM`Go>^!kkCnG@*_b?UhIJys1TJ@+#%
z;TDxH_53o9vbTk;jBS^mXU@cjo#e!kM=stVR6qHj&l*Fk+)Dv>R`lNY4{|*3CXv5L
zQ)luTvP^p4eA~k+&m}Syq$JT1U!z#`&2}BfcDb6-5?8ALM#)mx<sr)9PZ{>CH!v`8
zLI}HaolzsC<dOAF=KG)E(xVG9Pr%hpLNJ?1<xrGZRYEs$FJ*n|?GPFMDNPhB*KBZ*
z5Wv@$dS@<+DGQpf|L`dnGg*vsoR$~~Rz=z25B|M%*dS{5D^z?zQemXjRrsKb75jKe
z@;3*`IZ(pC_~)1xZftC%%!_Tz9;x(*%zYyw%}_F)#3-HRlXmg$-Mi4lz^c3KZ_gpE
z_YcMybPdY&tGp3pp)$i1ILz=9!;A=Yomj%dZp{%F-MoBS!8>2i{6+NWZQAfTV#Wg~
zMjwTxr#TV|)UFTz>I(Y5NG`w2_ql26IxAoYq}q>}k#IhCq`ZudX5GvtrQ_rKyW(dw
zD=6JF-oCo1Aff7|F=N?v51WXmebTDodN=cSD9f~6V!*O|6E9(A%=PYIg*)C$Gx{h^
zoAM)jySw*+>&66G>l=wOAsoY{63!aON*9_XvkhE{A8X#UQK-|SZbWw4t~j0?@!nxu
z%Q(_zu8LMheW+2O*<mub#;)J~Cv=>~Tu16SqP1Zke0~ozT@Rs>PD{@MoAev%G(wi+
zQVplBNY5^VZBDM2k5teLUKMKj>he!Li1XCp_v!+V!5!zeiPPHn7dUDDs6TOOvUuiE
z&Nb-TDxB^<n#RC<)*PGb&E?yh(_^lj8zCB5+zx~8KPi1;1+|fto^d5f5fhzjR38<0
zi{+!Ux<%|rd*j|#SME^Uk7r?TFAB~D(Y-VehC%kL*R*$f3a%7P$hLZTRR!$!7a4s^
zsU$YO_RF$M-zW2;pA&b6^U!l)gg1Y<47*>TU3wkHrq&B490l2E*KL2x4zmVy%2>j8
z(C;W3aB)P-?D5%;xoCAEnipc&tNG0mjJqM&@k@7mP1B_0_t)!sUD!vfEPK<F)|6E|
zZTl;;=$QY>$&sbrZJH!#I@gg)Zp;>ye{02dnec#<HGUt(`)4K85TUv*h3nIf9);_Z
z0=N20CO>KD%^;1It&U#D4V@r&J!6WdG}f9>A-E=jq3;<9XCR}tgeyoKOp;sQKCy!m
z$0BI5om01C57Xj&Lw4}G<H*R!enwlPl|-rS1DBXYP^%%m-BL&!jy=Uj?-BjugiJQs
zAfF10yhkNT|G8^#P*`~Uz0xQUuP8F21Vo?-`PQYD%~Qyv<$G4~mMtQK`=-QVOQqhm
z6j%6>EVs$=-syeQ^x_iB9AV_+yqN1nU$Fw*a?OJ=OY-*@)vc{%*S?2C3W&%INO?J2
zFc1=i>WC=Hhn?hND>y1=XG*LQbRAk{T;Gi+T|f95DqlZ681LSA!_B+#1Tm+ssVNe;
zCbM0i&1kqWZoo##0?(P%;cZ5~ThV;0NO-Ovce(m`$7_dKz>2B!hV^fBZEN^!(T>w;
zckU>OPK7q;S1Ka*2Sw{r_`Qp{r9N_c!;fv=&`@28sY~S&b0o31;f4<F%?EQxTn=Bg
zjCCBRgktj?et5Y)Ll*g(aB7B)djv;)uikNcNxj3zE`}t7CyI1OXiH3Jsi=HeHqDFf
z_8J-(kTM94wO+d9$0*EmH1Sg{ju6R?<NT925T7xjY0QwgUF{pBv^BJ2&m`-bU9UwE
z&gxeb^r+%#b;X>%e|U^^bac_5?*0hjWK=U|3t99OJY3kgll2aE&Z_7<EA=^d`7y1U
z%s)g0ebM)A3H)+UXJ1cNyjjs`9Kp}M=(^Zi19GFUx3v+SE-u%Fj|-?(6uzibPD@?Z
zd6&nT+fKn9WWDt}yVC|sH~>gU9K|M5j^MR0d&h}8Zr!mc*9>!-_@Y$F4%{2-99YHd
zJ1#DM1V#9@pfrc63vn!6pmnCy7g!ERyx9E|N}El>miDMVB5iwe2p0!STbD1@y}-Qw
ziXar4%CM4!FpbO2B=&F?eemg9A3jjzO8JqP-ur!1K1vKmCw^XnbdxAeP-U*7xTf^M
z<GGnScilW!X2l$beO|z%!)!rWQoaD4(;Ql<Xw*P^Se?dFRGMFk)poeMi5S+`6i<ES
zeIZ#n^A=?){@r)J11Ac|MJIFkj8HI=)Y*P~vWrC>DKA3-^?V?$54+l$BeCk$v}3(P
zHRZjD4Yq`y91xz=VKbmQbuYZmQM<)y<t-qWp-<c++?_DpBs|at!a)t|cIQO#wY;Ok
z$k|r84!<*Ip@7-eL4ND^s^;>LzobWm?Vvj?tRdgxDLGE&I;tf-QJ+uO+-~0C#xT^D
zXwSy^a?X+2agzUbb;-BV^(7_o-wy`LiX%{J6O!R8wJV3@#oCYEXVg3Ow?|a~IVCys
zbFN-^i9%#-dAfLLYpwH+^kMBhgDdY|W7|)FYJkOMB^KGB7udk`+o8`LH4k9_HSwi6
za4)3d_5z6NHP2Tl(CL3T)C4i~t#>~!ZckYjkuy7(85#W!yd&+E{bdEA9=u~hozqQ8
z79$s`c>K8GW_lAAwep)7zPYShu)2zkpa^_7Q?^d&pM{LYnHV@A9cFTrg@uxVZHLEM
zy)j-bu8b8&;uBerjS~?O31WBdA_#hOM2HqeT)N}3{LKyzS8^<7XS3)`pH`J^w_#|9
zC$m-UN3^K}=qAS(+dW<8szQtU9eUBgUoBm8D2wL1|LZ$UE*VevE#d^Zpp0#6Z>LOu
z)Bk=5!JU300$<LiP66=g7^))Czb8@4t&b;Pa^GRsH&=AZ_Q2H<Ty16&FW2>63pQcJ
z*QZYo4-4t+2YF2ynd{T_ao)GzO9JhA0fey2XUL}Y3DQM8{IM7D3x&%T^VtUxLccsQ
zTL=}G7_LTLHi8&HDC_r-OW-;2AdPoSR7!0_*O*aXz1*c3A;=!E_WRY**KxlK+Z9FK
z1HXy<jOaz{6mU|yM?UN9pc^GR7c}eZVhfEaW96>dK0NP%lddgx+Yi^)pmWLl^wjuk
z68;dO)^c%i!TCTBX@?{q`?t2O49>~3%z7t&=XVD?eKZ{G`Nj#8Dml6I6;U)~7M~;D
z5x~r%v7%capYU1CN0sW{9&bxTasFCRt8%>sdtf&Ze}(#=g+)e|b{qYgeHccuOPVZW
zCHinwNf--?rS*Ybgrq)-0GRb&koXq?)jKr0l}s(w6+>VZeu^k2$V>h|Mf?6wfkRoJ
zw6?C?+m*)H-arvTbed278e7TQ#GT!wbaXCKgphS>r>gtoS$zJo?@tz@U0oiS9F=wd
zMevcfM2^M&Km07|H%a!<@{o?hC~y*a^3YP+2n@MHIJ8Ka1dPn#*oyk7q=ihTqJ^hJ
z>pWWpU?(rO{p>VFJ!a{itS%{ND-6x&x7I29otGisr6|WOu{x~Ec9G>l%j4M1`V-ke
z{MpFG?hO!XC4Jui3>0TjcnH#YKW6*w9&OT*`Ly)lCaM~pJnNh3?#a;-lX&)oBFOmj
z#v0Hibn3)jS=iR}RgiLEl5l#M_wpga?l&YtuO-B&1EYVIJ>p~mKikdp6EKH4%ER5=
z#?g#;7~S-{eVIkGeo(s1eoVmR25TSrkna9gY`MMIu7rs~<m&1!J@v39H2E|5zYQ-l
zJxE2IKrxA3Ak^yN0)+gHxq>jtLLD|&<hin&#biio;ew`EtrxHHcNHc*Ga5FuHM707
zh(c<4vO8Vc(?Yg?Yy~?;tSAyPwJqK?@ND)w&TQsP#ryk_Zra=1qt@@v9XhSo@t;bS
zc=hnde8GR$(D-QFWIk(zuH`lVZHJY;&vWRgLn$hI3`TMelbs#=K&$gm@6)pr1oS1R
zE8)rz1sT$eueZ<hPM!5m=Vj)5t0SSG!wyWi?16ox6UyXX2!U1h$nnr)%2JGkmFi{h
zL0*n^@6&8oP}mg3-0D!z!)b^(GxwB&*#FFrXUNhX-532`c(@duJz35gfIcMc8O6Zm
z%_iuffVFN0jhhcztI!*dp?J2RD(ocGxRgp8(rAuzTGJXk72PHVcF{(-cBprXZ9C1N
zZdk^kg>%duxl-~FH}F}Gxv+2>hkaFeQxME~03^+Avgr3$X8*GjDTr=t;^N{4<;p~)
z{4)jZ9v*tgXt(`YM4z*WuYG??es*J)P4ChmRx`}7drDS(9Z8<sL(hv#|LSE2WY)cN
z^Es7d7VSwliNQCU7R3+=JAxAPwUs+}Pf}K!zaLNf8DV`_e*^75%8bF4A^&{>%aiX^
z9ULzH^A$FhDPG?9`R-5>kb`rB-jg42tuhC`r}1aW?I*(h4;ON4SoU{kV1k0cRR(x$
z_<P`#H}N=+iaEB2Khj(`=Lb5~vIPhSb5_i?L+SDXARVn?MN^A|ZjSss0oVhT;h}^k
zLamAe5bEo}8J4ocV+k(Hd|~%+zyH}0kha=a_;Hq!L64uy<$dE?>65toLl<LtgdG-B
z5I|=`G<8-d^P6E$b8zif2;YOTR6G{#WK&hu?S)^Sak_B_tc>caf`iTK_<>{t<hDeK
zvZ<;h{;g<+r>>q2$+tSiYUkiv<(={+>T!@^Y!+Xh)VN+qCK-ExCjJM>;8}6C(RFyz
z50nj+F87B{ngYyTL1SQ_^4Y!7ww7(r&HGg&UeU@j0FrN68Po~WWVQG1!_4%mn%W|I
z`eQWEt&1E^gJ`AY8?AUu!KQ}%lbNg=`H>s9e^mJp8mi~2BmL4{C#Z<_kggmHad-G`
z(|MDTT9Yg&GB)xdhn@_|;W+Hzgx;_+g~%!Nbjmj7eHwUKu~ZCGf#Rfu1h*Btx?`b2
z=5MvIWw^E4?3sn~yi?cJVtuOEqSU4)XR3Vb_k}JMIwqRvhd=7(h6cVFz0N$52Lq;c
zHwAP8UnmvNNJy67S{!Tj+6v%W?zuCQk&#ipIrS!I8FMiAJOg-v5CBSiRtdubyB`j%
z0iP<G)ipQg4|`s?!q-Z_JEPra{L*uW_r}eUxMm6PkZl(ES%R5D`PxJSo4>pIa-X#w
zNDqpD3GkW-h-X&m(yM^o(%U+0MN{9lzo>e89HpmGIy2~|tl8%{;~Zsgq$aa;4NKA-
z(N3oln(#LyF0_cwlpJYgB?<h$B}#N&%0Dg>a>K<AsS2;Ob8%cN8w>H$45WsYXiZzQ
za{wX$-V!!#I|`8hxB9}UA%1<vzEf8UTY3PdE>`oB|8=wE;eF_(%01V59T5>hv5#_H
zwnXywaP1}OTKSCqDtyBq2wklHk<iG}7_IzjWadxmBa()KY$_+^ZybNc$+*S9)`OK)
zeT#H>wB$Ls0y(Lxg3QMS>U_LNTr1DKVK0uTSzNxmrN7_cGGkScLxiv@MJNZWv(vcT
z_ImB{&Z_BUcex(R^>B6Mh{Watlx`P6qszuK1CDfIV>$(3IfXT*hkDZNe|{O|g)I25
zpBjeHY$_q$oOU9N>IiwbQn~Ok9uuHh_7}V3f1D${g+Do)NZqk+3|r)t#>9`2{9H^R
zjvGZ?0s17N3tDJS4&hIVi8<t}RbZl0z!om<xKv=OdjW5hF^Y@y4}78)u^T7cu0vhZ
zQ~n`<VE50!>Scb70e+kANLNCrbY5r@zQZWsy5+CeNa)@zE?3N82XTw=Xg!iib`D~?
zOzHkH(3Gzr-gV&Wwfm4g$c_@XGlM<vZGUkV)Va#^X?zqfOKk8RFm`7T)GP3tpMNR7
zJ~@Vx&kpePacbgn<dk^7vq|ddC)a=XI`<SbQ%0gTgqC2#>|iLn=O&@+nta<tn9*n5
zut(4XJXop{&n`OkML<h&qjzAs3neAsMWFRDm{Cr=9a5}qXpp<>Qn_DvX{uNbfO<s_
zKHQmB`lR>3-N6FF`eizsG+DHWwUO1vO}lU3@{O}G7}v4wrq;Vg2;k?_D$a#DC7JwS
zsR$qsGQAhcB24I!M@L7eF>!R9`L+#AI|}*kf@`h0C$sGeI!aN5O>|Q;i|x&q7drtE
z<7<FJ%gx0lyC^na8;^PzBDDQG$u|}@7I?=Hx(UDyeyrPfVdu3)zC(?yc_Uy><l}ly
zqM$%`^W|9RMj%Ia$$VM^Z@GSQq{9uzsSdnh)mk?KG^BQ8sbs0A93%Wk`27dfzS*d(
zZ*}L5sNCmY=(BFVgCLvo40Fvt82>-tD=pa<!;UmhANJ_Olx-?2Uf!$%`B^d*6uI!Z
zXvZO-IjQ|6>!u@;62=e`TxCbm52X@9!ev7}{^8PnJS*1vL6u~p55A<Rprg^r))ALn
z9S)*6!dr5$BaM)aj#dJGU@IWtHOg%8ci*cwnz9luh>U5gKZ+noprQzZR?SlXlq2e4
zg-~b4`?f-iWsnqy5XteWol!B7vbxNfChy<B`9G&_66#vi9FmJIPr)81H2+jAgwVhL
zYRKOepGu#2t?#bMI>pn<diaJK6WIxg4xAgQ7gH(mei6dFqTDz;Q(MSGYZE8h+uNnv
zK*rEc+0TA)x@6&VT_#}=3r-it+wE)=62HF)pp$3dyQOYIYL5<g2=8QjB0XDT<DS(R
z(1|N|JK&yl0ds(9j8LQqI9)OuC%UXCuPw~)HgIq~s-f+HshzYS2GQGM=LHMka6X5U
zCDLi0Rhq%q`%Va(9=qHt!p#gOFdz&VNT-w!l8W#xx-~2F-RNAVkU*a^yNa3x`<y%*
z1mKL#s}$wB%G|MdHoHU+ATN3(g!XZLs!}G!e4-WHHPXZi>`4Q!A>RaY*6>+$W)1kY
z;N8Aq6s;!;vxn8#jM*8W7P2?m%R)|evGar;pc3gQZtj;a=Aw_()z<nFg8$`^8*JPm
zyMv}ooW-|R(voZ8hRt=L?Imxs<m`v1Ql@utfeB+#DH$HBHHXD6{tT2>SB?pbP3B1B
zU_{~FT2=ef<0IUTTfqFI3y>?S`o}F~n<LYuxEy-rl<e~IeT#2_0#GPak`hX>O;0AP
z7XBKhAUb-Iu;&aGGz`FV_6|`-4$iVGMFEv1G7sPqpzwpeg;o1^NcBTDb0+eBH9e-S
z3briv!w0t4Iw{dYmpc507E~*kFgNT+sO{|=4rYtX1M|OLYlH$=Wnr`_s5uAvcy+$?
z?Z%%Yw3L-+e@g1AP456IY1|TX9#cN)Fatm;rCV!^Q4SNSE}OQnXPm=wGw-|MJdgdt
zzcAO9++J<@-3d(dSGGmDbCGg*$q(-XsP?+cw{<X^n}uqTaJNAap*pKnMRkVH&2u5U
zUiRsEVi&wAfIH=Zk$af#eE>2YZEy4?>Gj<;45Qq4tk1Z9kKTGvUq!o}_+>Qq@)<Dg
zrO8B&+V34p4ApsW(yD}~HHAoBYeRj;Z47`JX)Dz71soT<Oi`cV!C2OY$8Mv;nZ{oJ
z6^>2*MqAWmh#x|1`#rW0(0{!h@+;n45?w>o-P)LBllJ(NAQH@=SEO=mFLechDJ38F
zu<}#3{8MTIJ_EfY$vLJ_?=XN>aDUY(7sw%nRVf&gxY0a?q0}cdFw$Wr@u+JIr`Srv
z8&+rR`v3-v$=8hgh(7lT4GLG8C!hB3S08nLEhe2`QTWpl-#E5Ms_WT5zZ@yIMe2L>
z{K@~9%$@&Y?(nap4gL2IM?Z1yU(VM0@5lb%kNsat5BygiIBr)vSZVx&1^oAG{{QW3
z{_j`&|Kh7P1v3E14bcw{3k-HHP{?fw{|&s~x{mW-m97$Hl&_$hu(n>9Us#Awd-39h
zO1g%I_NyQoA|fu&nXhVo0lR5=8tdxQ%Ier{;?i=R>|MHKV4Pqm1)?Gq4}GGQThFb_
zPs79MRYLX#dERtm2J`crAq8<N6RJM-SGy@Ic+#c=)i5M^y`PgpW7fyT*49=}Pj9gt
zdlUHvb%D=x^<c^|;3|3IU09^J>uBQ)9?AD2jqqiCct31b(dv>t2f&vOo#{K1TJg|u
z@<+*gv=oh{?Rc9ZsJsMPmBmxb;;E&lWM^|!lNHmmwZTo1p}px;xxZ7UT=6ou4=wNA
zZw~1#1im`B7~ntcIPhzvu(N+_zJVS?x#x_QZw6d8Yy6xc1m=I|OKqBJ^3umW<Xj?F
zpCjy-2e!v{(UR_)!n9&3)^p2dW9|}2Ek{vSrd>4DAeLSNeb{E@irWXFrHs2kE6`u}
zU}!eqS+28QBN?@bf?jg&Q;^}L;mWK}XV~r&t>_W3h!SeTiv9u%4X&ToUY#0g2ZC^B
z`fa7;)<ZMSDaEi^!esd2WUh3Q!n&D72-td6U?41hc)Xc-9*_TO$aX<B;A;nr=?+dQ
zvoV2h9jfE-&UX%EtTy0SZ&yc8N;~E^onEhGRb-Ob2*fx}^vehV+B*Mq=}xy*M;cnH
zIQs<}afitjP$OQ90b6iD*D1L+Hl(cBXHn#WF6gAl6tD@5NPP)VBsN^Tp?Dmm`*5%-
z+C}>dX6KmNr$O<smDjK_6xe{LM&@bB$(%}~&l^T)`lYuqmb0m%4)vTv_uFF_8Y$h}
zrCyC?(ULozJnK`!e3Q#)amnvglIrPNKsI^4_6S;O!br$v1k*@fCOyzRz@~Mjx^2;W
z7gDc2nb$4pe++cx&WwzXx-7PS!H66yPYXg4+yy!Js_=2T-z}WJ`QDsz2N98a>ZzTB
z{f?fTD^`d1N4c!gdwp(!eX7m1!fFL8D=VxNL7>scKnbiS2I0FKn2})r#swofh`wE3
z^wit6YnRHLO{~{v<0yJ+tEwEm<exu(4q(ZHO`bjOHlH52Z|E5beQ@~hN)I+C7Tc~^
zJ-hfzlFPtkNa?M*D%|&hYPkj4^;-<%afGS?X;8c&p-%fliy1TNNGE&A5fw5IZjW1l
zJvi1_v~|XVlN#Q4g*RjW<|U^44;|Jd$i-%xl{HCQ`G+gLC^@3;SEtFbO8;EywY$@m
zqerE=KAB&G$>Uk;(PcJRyp|tw@^CH0rWybW``;hgZkNwiqyw)N8Be$kcq7JJ-RKbM
zN6WDmbzu?@iid#aUYchp)ZQkj7~0g_+Fbih%YBV5#290LFyAiHG4;eA;Igr|PuIE3
z2mFR&NlKYis5)>+`pX6gImFMOJgEq1VOQLUc{pnfTxzV%Q2osKK)EZY06=iH?5J>M
zs|9k2umW(y3r%vlioyTfftPC;w@4dkaQGQMrN!3_b$`Vx8)w;)JbW2`7*bi9nx+Eo
z-Mf7@+Ueld7mM;0eTVfW3vdrKCYoR8Aa<bt=eaQ5Eb;nH(`jaejTo-YYTlK*=+dE+
zDpi$jaGY0Ev>3w!LrbWK6q|R?1B^LJgB^iL6Svgqvh^9gT%f**r?1?oTLl4>TQ{m4
zaSp0?Qa_>DSIK{Lw;Ly&RYT7b-9_MhJYKd#)#+rSD!Caqi@%op$7&p=xLeqv0XzxF
zU>}`dEHEe0$(B-I<Kc~Ig{X}=AKo&Z@-6nk=+Q{K{{5~6xwi*ymaP0_5q~pa7}}ri
zFFF18NZIDndTYFHzgfD5mKI^dLD`UNA@&sL_2s|6_EOUNcr+UvdElXbr|+oRl$6=p
zd;_oaI_M;hKfE}ko4`-QOLmV6I4C_K=iAtDUBjwUc~ee7;Yu0BVYkxZG<<}V^H0|Z
zt$M1nGl65wp#)B#B*r6#P(F}%E5Ib^q)tQ-ld4tJRjFeF96v)}U_34TKwe2ncc_-n
z8ff2hy8BgN%xq%>dDNx2i$Qd$bjVM1V>rlvpKBHx`NL}4ej-M-VDT>YI|8553}#^Z
z><Rq*ZmG>Wh$&kY`?3j%K|O6F*_S=*!2amEi``1}-v|JX%gT%Kc4Kpl1u;hL2NppX
z3VL=?P}Ba9I-d<WUs1;`Trpj%bc*+|xmpHb=1#1sto*RyWRVM|d?{z7J@N*D@GM}W
zsRZKvFuPuqLsgu5r>jdqtqUT`=4@phoBPG|>4O`Kpf-7HBsOWMmpft~k_^{TgY%wy
z+YbzR8E86}7~Q*8v4rJ$1gN4y3hcTTnpJ$=$0R`B!u<IZ)m}_C%{$VnF0m>^iVBND
z!`wjYZ7{%Ru-&rD)+T-dm`OPm;#xN*$6FfVG;+%%c=K5+xCx)_?d77K=2M3me-;A;
z%{9Xdc@JEc2b(e!$2G}sfp2Du2e6;j<;rCfu)i#TroTM7p6E?C;es8ky&?->r6?Z#
za0|ROdITzLlMxRE<rBskAlO>IA0PGgZH$YfzQk-}pcb(S<ny@?FN+J9gY0%tijThM
zhTNb9`X+*apZHQ(;pWBb79DHgaj-~iv^{yUF-w~=5o%!m9hhY(t*+Bas-5f01LEA%
zd2%zrw`|%Hjw8f4rtUKZ)ie0vUOhFZP3&nz5jf@QsoEe$s9pKGUbVQls(GO?0t+R0
zUSe*g2Ck{1q;h-N_|*1wuDAsX)i*Wme=2u#iayO<ayx=i>T=!d%?e$1wOm;X7BcpP
zuile)5qpu6)0<}<Ln2FW1u0BiP@lmf2c~pSQ%<?vzWaY+KLKYbK_k5tuNuBgSWn0~
zZ~%1&Jw1IxsHT0P$mC%O%|R$hsZ-+r7MdB3jGRnwlc!@RFD4fC1|n2H%UB*3HSip&
z>bL?x;(^lsNHIe}(<RfT0(ePn_dsT<AX}P6-jyl5*RIR|+ZC(S0SSuHkr5cHSVf*b
z&c&tu##{^kz=v#Q)5iqbB`Syy5hB(Hee#W)T|ikskv9l@zZgR&Z{J1$zm1YuFY=<4
ze0G|YfHt;fFJRNg6?xr|l#`o#14o|gjvXq+y&+m`V4zlmbd{4e0)N7_4iL-_AE7<D
zHtxx4<bDyF4^Vz&uDYl<=xy3w_6&cAOWhC%*@^UvV9`jOOvinw`;3)C+_iP&HUMoH
z&-?^~;u_=~P8RhY&Tzo^yck=ASg3k4P<9<5xE#Y|CCSKF;o*QkD=AiSv8k`NBuBe2
zT)dm#^c9l&t~ixaqJMwRSp}D}BmbwOUJnWe?i+78FVs^UKsq0ATF3-tcAu*I5{4@;
zVR$idsB)BW<MCYZ`)kl90aFeXa>8^0Q1Ul@9}U84BAu#LIW}Xq@jxWkCl|2gDSYSa
zgVz>su1x0IPHF2ceA*ZceZ@cYD`x;!-KYgKzp!8_l;QO1>d!t1!()x{4w9O*yY<G3
zo%A=}$@|4qZ{++)7ohw=7({#_B~(j<DHnp<bbfPx`ph)Sovq;@C9FMEvReC`d_#N*
zO54V`!PeHHZjvj($5ma{j&n>V-Yiz%=48ut#kS<2Kjqd9{2XlXJfcf)B+*k*X|?UO
z*~GA2T2ao{$k-S}%K;Rq_g3c(7k+McmDu|r_^>bXUVk%*1#D0GtI7eaQre1&pMORx
zF=F`%Azu9GOYBz|$oSCyBxNWdFju6M@%l%3iYN1c+t1`kFXwRO`ar%~5R+5+esC}F
zYmX?tUhHKop)A4bf%)@JJ)UbhFp+kZ`2J|quJ3+LK(JKv+xxe%mSpq&@g9#VR&dt7
zxK!r4M}g?+#@z|MpJ5gPuO_=(=eLhr32nv1);c*^yT@Yj8o>v=>y1TmPTlD1B2tml
zi*BSPJ%<G$yZ8?l(5@(6!JmM+cf11WzT*$z{-&w)^gMQq83j!OE<a7Qr9Hh@&nDV=
z_y1_^%j2nB-|jngs!c@6kV;fay9^nkkRl2VhHa|QcF0`pN`<Iw8{rg@6bXgQl&QqA
zQKk~23}r}^dA1GN?|Pi?@AvtB-oM}TPbbwLp67n<YhCMFYu!*D7oilb_HJ}}DaOZ8
z`|GF=p`ZruEWD5`wuj+tTk~Me!g*>juqh5FW8nex&#StgR8xi3mvjD2BOZ{bffo0E
zXLUy8{>u*jQo8rM8Lx~hykes!aqWC*#x&E4VCtT&Teq(Jc<QBHQD23D0r~=2$EJb1
zRrmem3lb75=!Y?yn)^tKsgx0rwPiWg#cBE<OS!OCXR!nx<Sc)4_ap7%#nLXo0b*KS
zMoo1sj<s6f=OI2#*nrdWhJ=JWZ)mW%!rx#-lkR#)tQdYB<?c7gJE9jK{K@fa2zYcB
zBO)xJsD}@Q-BI3Jc@=iiHaR{2YGYfwDrBrb!`5?du*MGhg|G)|T%?%JD_q}8)pWY{
zf5RooO|pZ^&8q;L1+VZuGnhR66RW(de&)8G-*D^5`JvFVF3jpwF81V!Manzn+sExF
z%hdB<^_R{Hrru{A3n#O*mgIO&ZKsK!z3P{qTNYdR%R9E2_$%(*nUc#HLuDMcb#Tye
zJ;^##`ZXvrGBVamU}-%bfYC-1OMU?Xt(5ew=97G(r%^VV^4q(!#HSxn3gaz>9Sg71
z#=3XHM#w2A@7%Jjj;}8Xz>nm8zb^jB4g)wjt4oWTOwaCq_GySY>ZhT*(fi%sr{T*>
z>8@j(t8~^~J%qoAO|tCtkCjZlM=jVE)V0CpQ>DW?pmw!KdFQ&!EW7a$tMZ)0S`1ng
z3yhFp3LVz=ON_WP649FFwd=Uo;|vL@;}7M{vaO8@xwJDV`i}RG@6}ehBJatV626nj
zdRWW;Ge<Mf>!F&r7Ze)AT#2%?bPv70UEuUf2joa4efQ1JpY{5j|4v4GtTN^q-R{&_
z<$kdq-w7Ng(b`?&4Ou_2O}6HpO!8j<(vM9fK*j7JPRe=>=~PNBuh*z`o1{&{aYb&0
ze_Td7cSuSqZ1jHV7MmnwWh>O2>-?z8-Vmr;^eutxv?17-g*Ya@%fKj5;62eu-Bk?@
zNq`OvLnLnBvd~ALu&d)Fz}P4uS%Z7qgX6pUMKm6GVqZpwF;0IB#XQ_%kQjUMIs^rz
zsV8}0A!_iFcc00smQv0bJ$qn&q!fKFPLMc|W%|aw2l_lUw&y952Ru<4O3aZN=;0U(
z^YgdvR;gQ)bJ|1Kdel@L<?$`U7MkjMN4kh*1-XCd9|})1Fhj+y7v8z^xq?HgJL!0Z
zI|{ox>p0E>hEYh(u_^gTB4bo6fe^$4)9hBzfF()71VWfy9zz93o?rJpnBROZ*y3uZ
zubwgYYohgf=>`uhR{RyFN@s`e0TvSU{1X?aMEt8>lWa=6bN+T*$7uxtn8U}jjdMFJ
zynhE{&P88pZs&K4`aIbr=|wo%+4q%|`|PQE&ZNJHGLf_pK5*uGi_2ZH*zi41f=ZqR
zVeiM(t<HP%MgIt~&%dwKR^@D(>XSR{I9q;?Nzv5Y#oW9v`36p^#-U0B|2<O@=VuyJ
zRh-Zkd*(S(QugW7%Uic@$rM2`7O>E0*xVPJ6eKT1moO!Br@OWotTda-iLja15{qUm
zwSWHMlU2%OYAKg~q{-EUrxac7=RehKmS4oJA9+1poWyI~hQ~tvNAi|G)_SS(t3$MT
zzLYGG=2a_#LTywQY>i+3Z~WxXH2WRl3|!;11P!_XFk1il=w(DvLQDke8X$TFeZEIs
z7)sUSCr@VR$Ghv?zO4vVw$Eh}U2FkZsrJ3O0lf6s<Pa5>QZw>sRicfT*CC5<*=V;>
zXWyr$9!nGlO48F@MrF0UvDUT#uM@BJDB)Qe+c!b4Kz+WtriP@3rr-3X#12ZPV^d8i
z#~(|cY$0C?Fpt}7s;7s>b(#HLZbK!x(wX%OwOgW6q|U8aa^rTAo+y`5L|dCUq_e?i
zOA*8J)g_%FM|h>H4825mOYunI5Kcym=!PPf`;3bUQCYX?=$q0xmow+*nW?FLYn-^4
z1;QUp3Fmv2kyo9xXO=~lm8O=K`=1+ph?g=J1=B_gHxxVOnX)=2eC*3x_<6n2g0G=G
zb4lM`+lq2y`kK>-6t6>rLWEI^YPIVYc{?}oWC3|1tZowL%EX0i-F&*Wg|K3C5lD+A
zNpTkS{1I*fZ3unCg~FX#N>FgHr@eRVXo(%ibkrMOLA0q$yjB^_Z4c1kQMHC~Y#2&`
z^|oB6;c4MftKp0WD8s3Mu@|AJT#aUu^F(+|3>!39>Nm@Ht@mlUEvOg89D@W@!}WM#
zmF)Y(=xtxwRxJ>9_Q1vyy9!xdy7*A@wQAC<f!_Mtp!kBq#5?-j18k-5{%%eEhGQ-6
z;K_DIAx<^bhharpi&qoRd75Q0;R9^u(Wv@hF|zBV6JT$W(V%!dN9;DC`VPPVR8mAq
zKmy9i=$F^Vh6PmCP)5)vgcS7f94ISd*l&8ph@V8rIPRU8{fiZ;a&62p<Bf=e58=Fl
zT#9%F7BmF+HyRGnf%elDB*U)5j~;DDXu$UMz{24+T=dtYy@N1V$TmmbyC-+)=dZ!m
zD{ZvuCfK9gQ1=dd3lSzCNJEIj8up_J*I@gvF;TeijRwr7qr$B)6S&c}O#l7EoB@b`
zpvoC+4hJY7)`IZ>{~g}?XMv?$LKoapduZJi@po2trkRoGwJLJJRD?eYYG38=LDa;@
z?p64$EcBLTECL}NB&77zQikszfXyr*DL;r;H3J326bZ#VwFWbKLN)^vEtsz#n3zLN
zVEfIR{hLraAv;x-k^l;#a+(`zv0UVU14z3kaWl$4k^-^JPGkQRFS<7Zz~(iO71Eeu
z0^gDtM7#SyEkcG7yk2e!1_<=v(Sy0IQbEt*k0)I=vDmjo-=xhxQ3P!sd{-;VFF?Cc
zXZE6~-TL0~S8jv#5LUvI;`BLvu${ed2cvbUQtnYpA(aBhSwQGVVOSHyPT@44Jhd~P
z16TlU_b^1I>{{>iSMAcHdXaZm#OpL7;sDaXc<3HapD*|UV5Fh!x~C79H~MORg^A^H
zo|uM&>mejM)zqpLnCP61jjy~=3tS|9`p*gq3OX;sC6DBIjS`tX15k%q<hxMOJ!)w!
z3SC1|aEdXEVQ^Y21C)Q_QS+RG_TTR@)DqllT-m>Qe&Uc$JTHM{Z7kI6XwTg4Q1O%@
zp;R1S9cSye>6Ks1aYbi6hc7ML6i@DEY@xpFTQ0Pm$m<wUhWd@r#!3~A#I4zyPJ%GT
zsV!gs)TvWPeW-h$mSmE{dRD7W+)b*2X+y#D@zt&XFpd0a$#ar8($EHv5;=c{0QIoG
zl#V7oO?}l&gPVouA|_h4<KA9~bFfsdgD(dRhN9VuLU1G(K(-!Mz65GQZL00!oh0()
zuLci58<hnXAAa~7rFINjqM<LY{oOuV)%;8c(#^yuS|8!Hh7e`2a6EnGCW`MU?6e);
z&mERg@x)b2EFoCN%9K4RM^R2=uDemRwBA~HOb)kPe*LQ<k<c<>*G=u{!Jm5kjP=H8
zTCOO!U#?H9;_>yWmQ*D28H!gmg7vR9eFJL{mc#Bd4;oU<zW+3tBU+zTtN0>Z7w$+(
z=Ke}}q}6W&y8{*kbQ<#7W37M|=P?9;!?U{RxICov&!WDd{SKM6RI!n_hr}h=YpcR-
z&Hj}C2q%Yi8!cpE`T1vsF81C3pGZPpM}qGv7jIA6yQ1@q<eZr-I3o3#n=+nxCypPl
ztVPnvU%Ve0UEWqLZtt|E)UMN)aV8~d(Bi+~wso2qej$k6<`K4PP%~$;t?f~S{@jrJ
zpSn;litOc-TM<DCScX!k!uU!Ul2Om_Uen<dcrQxH!3Pp+8MTN%=%YJ5U`DS0P}^NV
z2AOcMpq?x%p}!3dGk3h*wQ(;rURuV+lR-h3+6!jhqt%yHD;AB4EH}A*jxJ|-4V8wR
z6o-#4V5#(qyiy8OqFvn>;wOjWIur#@d_V&0%a>tjR1yRXMNoV=ll4S{bgY>pKa@SU
z*FQN}aY1Sg+u*j*TpmhK(v90Im_OUw3;8bmUTs+v-<2}Cg>_uKD@Fo;*iYTGl&U`F
zm?vMcLVYz}YVyU0n=+Mo5NF>AJ~fjOjeFa1Mf<<6bQ4=dohO{StkcaH7fY>wBMBTQ
zWb?*)dU~e$>f5^&1?$h^!eZ;ev3q<MG_Vbj?eI4K-Vi#W>;05!7LOE{_3M9;<>q^s
z_K`7`cO&u!-fb3yB2aGEt_FKdgZU|S2Zf5<q|HK2OijNe)g{>5_j||gq@?q*p>|`Q
zMAnFaWEBVhz(a)>)&M_A{+#Ak5lP%ILL)2mps;o6x(_ujUJUjNQg3n~f^z{C){!(C
z#TBn;W4Uepl8MbwF)F1qC>URLENn9=u-c~@2M@;XtzbwKx0TyAbqk*KuoU&1GHS&j
zJ^oj{x13mInF_@m23;a0Z$*ih;s=BD<jfBWiLX7mH1XZu>?~5R!&o8l4ml}$zB0Fh
zgU2xqt1^mB3`+OYkAI9IN*y-xB^#2H-CcgdJx`eB35W-Q+rJM~^wqc;rtdx?P@{@3
z!5sp=&-rBNnu~w0(Bg-KUC_*|5p{5!)busg>>>hH9zA?`YU)h}#(`v-)iTrwBTSVn
z;nqijKytp>*lCt@9xcr<#|7Kp7YO7wdwW{rIXc*wRO3Nf$=xFTv<RaZ*3WnzY4h2O
ztb!5ds<<wRpDp_M65Pjss8M=|Ko!~U5r7hV;EK{(U%`ca$tsB4`3)f;1aX@8w!bG(
z3+NTU4;U|;FR<wcfkOm4p?tPs<0#GS-j2wt>D9^;cFoz1nu5Q7z~)LCJnW4keLlbQ
z?O_iTJZi^~B{1Q?TmZvQ#9fJ8qyw)%yQ$#f=h;a`xYsrj;_(7Q-{a{8JuNt?krB`7
zH~n5w4p;C7w*@}zxsi@TP`tUqy65Y5)CYM#;B)pvC=6x~BDz5o--Y?!KsYgn3wnpp
z#1vfYMYO@lSGWGpIGxFR{`<GBe=E^2m|<?eb722iklcrjGH3tUyx`IWgTdrXZ$s#X
ztq<gEPn;i;zFZB7vy28r=63B@+J8e)Is}R6R}k4E9s`6O6((OE=vd9)QpBdwhj3$G
zc7x!Q*w$|@o1W|N;lP@_L)`qcMq^=hciYwi2|0ufu)~*^%Cy2aVgXhQRgh7R$)#WN
zS=!(?k7+ds?$zU;Jn8sbc?k3$$5!@Ko-%6mEc`kcmjJYMVtSQ_c*E>z8e&Q=Bk|_Q
zolP2u5IRu{pBlVIf=fGF5;*H7kg(wn@80SSZtkW7XsGdSkor%3)ZhtN{7~VWN%u@{
zGv@Cn@nK|?X^jY)>$mK#gEpo?Zi^J7$OG5kLb!kL@#By)IS|;23uBz2LArqC3}EaY
zh!=6q!gxF5x>VL%eM75dI3<OG7abYt`d;C)*JPs!yoEyU>bY?KpJ}DUc+J|I&Q)x^
zLzw&aRf0%fLqLizWVQ$s3u;^XI_`ZgSc2erW)FKG^{K3#9LE6ReDU?^@!I0EuvvrK
zBD|hvG@J|X5EtUva8N%hR9fU{SwW+?^a9uU!cla}vxN{*qU+Z_+?<_Q_1=8#0X#+#
zmoU1#j6?|F;xCy-UcMukCLGJvc%pNEWoa)+l6*{`{L1pZG@1CH-@sbL{X;Lx6=;~S
z(Q=9v6ci*gMqsN0g%aI)g@uKfP^lH<qKd_M?N_M7us9?1H-1JiahTl3eq4RIf|l3^
zO9JUO)_Mg1RK(9n#2<i$1<t?0eLB2N!?X$>iM30q2#<hRH5NKg)tPR!<I%I)1*fq^
z^pCz{ho2c}NW9Y3R03#)D5nu5VGzn&aq0Eu@oK++u?b_w%1xJ!CP@%UD`*fZjfl#Q
zYp?Og3k(&B(V(^WmukSxNjyoV9RN?oZO@573cHU_isx-u=N>sXWqohLU;HQM^TH%x
z*TA<o9@s-N|45nF)iSwKtLlBnczNdFZMD~gPCxdj>5wroDVqB7JyZ?L<X2;gZ4xv3
zT94VI3q|F)Mzo)?e)p9tVLo@QRlOo8AP}^1=1bAsY9YdI(}?b5oopZU_Gge57SLO=
z?F`0Eh_xg5I=8m0cYrp=A<u{2Ob=7LId;s8IbH6JzJen-FB1hjvoi(x3zl#Dh}=vB
z^K>$!z(5@7PtgiKCEl)9hXlGhZ%eaRCtxqizB<~4bGj%l^BDOFgJZNCF0f^{wY80Y
zXOBD8BW@;b^fxaMw8j^>-&48_ebqi;lVIKqFKoQqUiM%6Z?UG^)Gf=4#Qys>y=oUd
z;Ppz~BIhkH+ppOk)4WZ0q@X>zomc|z1TN-&_V>-x3{~j+f56?fN#^Xq%0C=EPM-xj
z(|uM#OXM7l#{_Bd%Ve=EDI{-=f&yKbNyjinRzPS8(Z=B!Rqc&>@p&q>j@?Y5C=h%=
zl7IU((QS_jFJ=;HxfIsW1K<QMoBN>|=l!_NluW)>5`|XZOO&fU4ftzpeASjOLUf`9
zmR&4-QGyLSii{A9)$>ELx@LE;<cK3Bq&{wVh!VHhLengeLvf8v5krC>QXHQ_ZmYjM
zb^e0UOO8~1CEZe@YbJv4tBgu?wG3Zm%L+<X?flDB{O!KVyORPR>Rr<B&v~M*h$f#E
zJ+_Xc)D{=5v7c@v_^nKxEEN^mIe+YN3W2u6cBO6cS*ytuR!HvsA^Avg_#IHAwT)42
z#nC$pJJv>ioc3svh!TO_v9o4(k%9cysK_cGH1UV{x#^uRSj;-3eW1$ceOE;w|JdlM
zr=oL9FVx*E@NW<nY)5pbqN3s@Soa+vaBysN2z1VEc7t)k4u`8z_7wdz)KL<L&8@!P
z0J~M>sbl{FG-6J*+;6*7$L`s@?2KOE#Y%#n#fu_EzzO+57{OKt`j%(zh28IkDPp=%
zsQCnl5kK_IKtV6I9O>#mpdG-9Fi34FHgakGujH&IF<ve9Z>5iRgBfA@XaNX58`c6i
zH~s>A7Mq0RAvM$VXejldtF~=85wnwO3fmQ;b|7Ln0@Pony(5|uvNeQ5`)CwLzwmNC
zVjWne$K7<99LRes&%z7@d8LK0bc_A*Ax2FNSKw($l8P7~kzjy^l$s*508<I9E{2pp
zti<Xvl(_$W1@&p(^gVNEvgZ+rb^vp(mE6J;kU9{$1^$3r9M{U#-P_P7qC41w2pc@&
z*AQZtQISh5s()s8szJF^&IA2<2Oex$gv}9>4t%G&SGr|P9CPU>aTT-&!}IDV{UhP8
zjg(X(v4qa5hK-9bZ$B-O+5TyThHx9zZxhON`J}FoHg&xAz})U*{M)%2j7OGWt6b8g
zZ+0`Y?Me96S2fr!Y1qhl*2{Kd&&J_gt`jM~+Dr;eM_dhz%3Wjb?u##Po;DdP`$H?W
zY+T(3-=!GOI)>)#@SGBZK1kF-Tw#Nk`ozJf`oluFuchwlm>$BzP1PJ%(`}xX++7A#
zA&?8sbPYq5)v*lo-nr3tGf2(~AfE=SUEd(*hFJ;P<DQ7paE_S^ot7$~byZd0;0$^=
zMfzW+K~R3MCQXbtT@nKL!onXIXo4mW2LA+{j1kr^SaCq%j9|B<%tyxYM}&vxlnb1O
zv7ZWA1v)gHsfg%VYo;m3|6|s~b?@U=5_mfB7hvfv@+o}|%h!lhpCo<6^z5tkz5S3{
zbvjPNCQvJ7{;DQMt(aVYmNMT~Cv%OMT0Zv)cw(x=Q`#)_q0;3XgZ-6c`@CTp(VAQm
zJ@Y-{*I{RwPgLQ(PIvE5#V8t~3H=T|O~w27!O6!Ss0?fwkVyW=_5SPI?OFK8<1a9L
zk4pJ~`kmy@=A=8$37f+^IbKUR+9jK35W(krs|MR{l@!n8Gfo(5T3$B-{vh%W8MU%|
zc^36xzF)&niSuQ@LQ-H)kCgU-QFJg88Z!|=0ud`C8qro*JIh@9dxPS6G{w88t?JYS
zUSlk7TuVp0jWJk9i^#=?>)h73t#jMaqo4ktw(bKExx{DhrPTGcp=L#eq5%5OL%_vQ
z5!45G7<Zc^E0a=7OrQ~|L0d*8F3lJ7mo10LYqMXur1$g+?#H(R>^C7AA>+k{;IZj3
zuUaB+X0&<-XLWQZA=p8Lg}SfICl1}I-ku&Jd9>}IklUKK^snLjZzxEqE18t8?=Qn9
zP5Zr;RGsf3ljSyfWX5l|pu-h@4tfbRAM35C6?9@jXUkDYrQ50_q@_JtGXpc@WxriC
z)pC~G;>9d@$V$Aj6llJge2J%1xK-=}|GIUQ`Cpr2j|%ZyDm^TWl+hR4t;oxOxX$-$
z+NjLg;HYf`+i7$&^A>+@j(902CqGkdzLO_5#PgpT_?<LFxu_Yp<icE+5VYu${^U66
z1WR*VPs~{j4VtKoviJ15;>|LAWIE>2QhDn5PPo1V_oH{spy{>Bmwean*q$Oh1vNFp
z@cynm)B>Jx4$RG4E;Sr)M|K4i8{6(|lRppH0d}J_FS^bA78{%nSWf5Q1NEPRo7^#d
zK6)3u(z6lh7r^Q=H~ml-vrccD3L+QCWAYW5fgpIro^p#6dVfxDy*$`5I9{v9^BYc^
z2y?d?)W)?&3^4D2pJ`?<1YQr+XW+0}v?{NW)Km4f57b+JCu0LLH0JPTXa9Q9bI>$I
zc>*Z<6>ziO>%b=S3VN(cK8R2{#cZe}GjL}71>|#tX{ZN+Jh0w~ztBL03t$q?Rc*k`
zH^XMLttOrPBi3*AHJI5!>s_sX8h|nFTMX@#oxZGxaaW^x15y@i0;OiF@jF6c=Hz6+
z9*ZarQ{D13wXo0zbkJ>`ZRsCLKT7UCLG3Xdn~6!mSi0qBT|7d6&9mipGiEK0UZOsR
z16<1{8N8K58A4UXiCq^MW9sXbgNRbtpy05M?1wf$&>;xU#I0P!jE6muX!t>Onve>R
z8iw-PpTJUsSrHoy(zRdDBGiLNS>I2x`Yki&F#LvtIIN`{rb-OBvyn144pTXy6$3_@
zoo;tTrT}uKKEp2`iLoRn&fxV`9(-viqyi~|bKYRvlS4jtm!U-5_{g`g8W{g70N-IJ
zA!acREC|?)M#~6;`cUy}0el-EVYUBip{#F!`I>r`RCgR4%CdV;w#nzavvL0vyyjWF
zy@V#>Z4Y$}FkoTA@Wao#T3=Hkcbt@158~#q4Q;5cAV6t9x?>`F33ep!nQC8d;ZNw5
z#+k`w%4;!rhT5(yWa|+m9qEgm#IcrL&9+A(TB>1*Q>T%PN<yO{XyOw82;NYh?DY$0
zshp2fTeqXM8$&w63U-n47!7sT9q)f*0rbr@L{nM55fD?jRA}Znq}c|GTQd(|%M3aa
z&ZyL|8~Ap84)??c*L@J@aDrzpn0-VRK?se^0LrKeQ2aN9v7jvNF4)_h_fBNPKG6Lq
z56oof4dGB4r|0hxfnE>0;Qq@C{f83JXB<mC)tcp;rI~{Mbc;N*7hx#;!~&u;b;iny
zX9ymbN6ccy-3V;ZrfwmbTsYbuCkziaO}Wj<I6s(2pM=<mm5_&4p+oqX*_i;)yl_|S
z2%Tj@vsMZM0(ymTs(^BEvCq0&kRh{;d^`4W0m2>`o~8~*xHp{7Mc%1__EoT!0Y-~#
zwEn)EnF9_~iFR%bZ!xrm%r>}5w|O{<)PQJsC88wI-{6ghaH$co;0tMM6?$OfF;SQh
z56stowR)!WcP#mVQ^sgQ_F!)R!$*%!_chBv>ZHxu)?IaM$&wX4+J_HO2AZ5-8~D5#
zz@UqD-INWKN~?q5u@Fu@l*dA}So+U6`55-4-HKl?RYMjM5k$qDlr!d;g>8F|V+8M-
z-uI6pOg(Wk;uJOwwhX*%I3XqvL%ra3Ki@IJm%q6xfM^Ie)+EL(jEy{MY&Vb~1|%Ee
zZx?C0O!jNuBj7h-6CUX(L2%JEiJzL`v5>8b1*ncAXH9jw4feP`@rW}Z#Xf>kkS?C@
zLV_PD1zXCgv7@*%{wqaTy<T(NBC_3?E<#8v+K?7V0C}VdtX3A5mzWpv5tKYNf#!D}
zxC(MGn$<znL%3rbdDpb&I10LjwPoU<W6V2Hnmm=Bx(&8yVT0aqr=FiVDdFY}WeUE1
z10r@>bDcNbI`c2?LBOf&gT2QVYUEB%4iq%t6SklO0#!jAT#O|YZXoCjO>YzWbZdXx
zJ1S###>T;&rP6;l)q%YCKwU=RUB7oAh={Nne}5Y7Cm(e<ASbVlW{9Q~kpSHQjT`n3
zOmrJ#kfPF`Du+^9hu{vO#l@K%{%R_lA_{3RV(ZI6Y$5N8tnh^L9g0aJNEGQ(MBpgm
z%d{35-`Ey``VKHCZlCm1Ec))|_e*bl3y}{qSuaHQ+e*{yEF|G9>M)N4<&S~Cm<4#d
zUs#YeU{Wvcd+b4EWXR*kMYG9(bK)W=40Vz$z@=JZ-ssO=`d{sunmalVqAdj5WWxW(
z`sJA;BG-s41e^$vi~iTv+8Xi6-4JCpZ~@ed73VlL6O>2nUZtxe9ifh;5pysmr#iQy
zNWW<J^7)|j7h(I}i|yNEXvPC3<j=$UiZ<P^6cS2A-z<8#_04KIsg+c54<yUngRU|k
z2g!;lBbNz4Ja0>u%;6H=?KnR*A1x`yONiFk?V5HjuFx>M!Z10}`ungq`yC*`41(U}
z9X{Ei$`wtuIO>=epDN)LD_%xMt=3x;zLCTiOfVBzRH)dFN8MKm>^3z<-_R9K7?kbH
zlLZ|y*RBXgQ@#%wZ^(9hYH%&%*3FS(uM~yyB{yXbEOw9nI<NgQKUpPl6Iy_iDx-%F
z9V#(C?HmpkAK8XhRMVi_8CmcJLmo459j;pH=o6@uy8O4QN6Va&><M4P{!_i_s3_=V
zVjPR`Z0s!DeC=twgh=sg1w&8}U&qc8HgjmnaMpQk><g@Bg8Kq90c7pgVxJf)=&!X@
ztoVe|XirULx=F_0gagxN7duwAbJt~vPB2ZzDDdS_uB1TPFJFPR!bV~QBYW8mEoy;I
zv7bxuv)q?2KcS}TM;fyi%-tH(+a7*%_l}MD(@JWQ2982AtoJyKc7%SR5d?*l`9m<z
zLPj0BZtIsNhi8gBiV*JTKajG@_E)I5F0dLn{~I(T3EqT+|I7mnlZz?wTT+^G1FIe;
zx0#R3{oCStOp9V!g>N9;TmI&7r8p)WaVPR~OB^4GkuNTAp2#^dCw~4v!-Bq4;x)tB
zdXYcdHJM<x?@K`sx7h8{huhEyh_BrCc>N3at@}i0hkL6iPlZe`FW2x=WNL>ma_Ffn
zow^{j4F5L2jwJfC>@yR?6Gon$c9ZB)q-&8n*<2N_xyxkX^FNL4Dr?eyb;dcieeWA&
z56z!^5p+B*XQd`b=QMe~8q^^~Z9p7yIS<D01t@yH7RqbX&1Lx*((RoWkx{;jy=i6j
z`<phlOj^8ob2R_8Wz=oF3tr+~mO5Fq&4gqzj1sG>#kW@QZvlRO@gnaG5mNl+4DS06
ziwE4A*SH1;+FTl&yUTjVzZ|+t)zp2w>0T?(()P^cc-RE2((=B(eLnm$Q$gx}YwfU)
zx8>rjK~L<M#LSlmjmq(CFRx>?nwC&%4rg(i*PCjekbjnd?b&YMXzW2hrrxZ{Y}_n<
z>MbkDD&&|jJ`2l|%r2j>*`*w7BomZ&AUnt&`%%)m6sh&U6*QT4gP#NM4?NH3+^+HC
z5blAc{Z}%*SoU#R!#sccCcJQeXM|rBCG)81+ZKbI658e+h7OOjJ*rOJATITi{#XJP
z7nj@RP;zJabfEs3w7`2lxwXJYs+L$`+|3ckpUQndq`fMQPpdz4#d3_yZe*v8dyx2=
zOgYY+cFr6~(c0xzk{AT}ieA71&dy`AU5q`*c<mKL#ap%{Y3bS+@#`)F_{kD&%@c>y
I)z9AgA3nI?7XSbN

literal 0
HcmV?d00001

diff --git a/tests/test_transformations_api.py b/tests/test_transformations_api.py
new file mode 100644
index 00000000..cec9c8f1
--- /dev/null
+++ b/tests/test_transformations_api.py
@@ -0,0 +1,242 @@
+from datetime import datetime
+from unittest.mock import AsyncMock, patch
+
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.transformation import Transformation
+
+
+def _client() -> TestClient:
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _transformation(model_id: str | None = None) -> Transformation:
+    return Transformation(
+        id="transformation:123",
+        name="summary",
+        title="Summary",
+        description="Summarize the source",
+        prompt="Summarize this",
+        apply_default=False,
+        model_id=model_id,
+        created=datetime(2026, 1, 1, 12, 0, 0),
+        updated=datetime(2026, 1, 1, 12, 0, 0),
+    )
+
+
+def _create_payload(model_id: str | None = None) -> dict:
+    payload = {
+        "name": "summary",
+        "title": "Summary",
+        "description": "Summarize the source",
+        "prompt": "Summarize this",
+        "apply_default": False,
+    }
+    if model_id is not None:
+        payload["model_id"] = model_id
+    return payload
+
+
+def test_create_transformation_with_model_id_persists_and_reads_back():
+    client = _client()
+    saved_transformations: list[Transformation] = []
+
+    async def capture_save(transformation: Transformation):
+        saved_transformations.append(transformation)
+        transformation.id = "transformation:created"
+        transformation.created = datetime(2026, 1, 1, 12, 0, 0)
+        transformation.updated = datetime(2026, 1, 1, 12, 0, 0)
+
+    with (
+        patch.object(
+            Transformation, "save", autospec=True, side_effect=capture_save
+        ),
+        patch(
+            "api.routers.transformations.Model.get",
+            new_callable=AsyncMock,
+            return_value=object(),
+        ) as mock_model_get,
+    ):
+        response = client.post(
+            "/api/transformations", json=_create_payload("model:local")
+        )
+
+    assert response.status_code == 200
+    assert saved_transformations[0].model_id == "model:local"
+    assert response.json()["model_id"] == "model:local"
+    mock_model_get.assert_awaited_once_with("model:local")
+
+    with patch(
+        "api.routers.transformations.Transformation.get",
+        new_callable=AsyncMock,
+        return_value=saved_transformations[0],
+    ):
+        response = client.get("/api/transformations/transformation:created")
+
+    assert response.status_code == 200
+    assert response.json()["model_id"] == "model:local"
+
+
+def test_execute_without_request_model_uses_stored_model():
+    client = _client()
+    transformation = _transformation(model_id="model:stored")
+
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new_callable=AsyncMock,
+            return_value=transformation,
+        ),
+        patch(
+            "api.routers.transformations.Model.get",
+            new_callable=AsyncMock,
+            return_value=object(),
+        ) as mock_model_get,
+        patch(
+            "api.routers.transformations.transformation_graph.ainvoke",
+            new_callable=AsyncMock,
+            return_value={"output": "Stored model output"},
+        ) as mock_ainvoke,
+    ):
+        response = client.post(
+            "/api/transformations/execute",
+            json={
+                "transformation_id": transformation.id,
+                "input_text": "Input text",
+            },
+        )
+
+    assert response.status_code == 200
+    assert response.json()["model_id"] == "model:stored"
+    mock_model_get.assert_awaited_once_with("model:stored")
+    assert (
+        mock_ainvoke.call_args.kwargs["config"]["configurable"]["model_id"]
+        == "model:stored"
+    )
+
+
+def test_execute_without_any_model_uses_default_transformation_model_fallback():
+    client = _client()
+    transformation = _transformation(model_id=None)
+
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new_callable=AsyncMock,
+            return_value=transformation,
+        ),
+        patch(
+            "api.routers.transformations.Model.get",
+            new_callable=AsyncMock,
+        ) as mock_model_get,
+        patch(
+            "api.routers.transformations.transformation_graph.ainvoke",
+            new_callable=AsyncMock,
+            return_value={"output": "Default model output"},
+        ) as mock_ainvoke,
+    ):
+        response = client.post(
+            "/api/transformations/execute",
+            json={
+                "transformation_id": transformation.id,
+                "input_text": "Input text",
+            },
+        )
+
+    assert response.status_code == 200
+    assert response.json()["model_id"] is None
+    mock_model_get.assert_not_awaited()
+    assert mock_ainvoke.call_args.kwargs["config"]["configurable"]["model_id"] is None
+
+
+def test_update_transformation_model_id_is_used_by_subsequent_execution():
+    client = _client()
+    transformation = _transformation(model_id="model:old")
+
+    async def save_update(transformation: Transformation):
+        transformation.updated = datetime(2026, 1, 1, 12, 5, 0)
+
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new_callable=AsyncMock,
+            return_value=transformation,
+        ),
+        patch.object(
+            Transformation, "save", autospec=True, side_effect=save_update
+        ),
+        patch(
+            "api.routers.transformations.Model.get",
+            new_callable=AsyncMock,
+            return_value=object(),
+        ) as mock_model_get,
+        patch(
+            "api.routers.transformations.transformation_graph.ainvoke",
+            new_callable=AsyncMock,
+            return_value={"output": "Updated model output"},
+        ) as mock_ainvoke,
+    ):
+        update_response = client.put(
+            f"/api/transformations/{transformation.id}",
+            json={"model_id": "model:new"},
+        )
+        execute_response = client.post(
+            "/api/transformations/execute",
+            json={
+                "transformation_id": transformation.id,
+                "input_text": "Input text",
+            },
+        )
+
+    assert update_response.status_code == 200
+    assert update_response.json()["model_id"] == "model:new"
+    assert execute_response.status_code == 200
+    assert execute_response.json()["model_id"] == "model:new"
+    # model:new is validated once at update time and looked up again at execute.
+    assert mock_model_get.await_count == 2
+    mock_model_get.assert_awaited_with("model:new")
+    assert (
+        mock_ainvoke.call_args.kwargs["config"]["configurable"]["model_id"]
+        == "model:new"
+    )
+
+
+def test_execute_request_model_overrides_stored_model():
+    client = _client()
+    transformation = _transformation(model_id="model:stored")
+
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new_callable=AsyncMock,
+            return_value=transformation,
+        ),
+        patch(
+            "api.routers.transformations.Model.get",
+            new_callable=AsyncMock,
+            return_value=object(),
+        ) as mock_model_get,
+        patch(
+            "api.routers.transformations.transformation_graph.ainvoke",
+            new_callable=AsyncMock,
+            return_value={"output": "Override output"},
+        ) as mock_ainvoke,
+    ):
+        response = client.post(
+            "/api/transformations/execute",
+            json={
+                "transformation_id": transformation.id,
+                "input_text": "Input text",
+                "model_id": "model:override",
+            },
+        )
+
+    assert response.status_code == 200
+    assert response.json()["model_id"] == "model:override"
+    mock_model_get.assert_awaited_once_with("model:override")
+    assert (
+        mock_ainvoke.call_args.kwargs["config"]["configurable"]["model_id"]
+        == "model:override"
+    )

From cc8bfb11ad20b7f118ee2494fe7b4c2de85c563f Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Fri, 3 Jul 2026 08:39:14 -0700
Subject: [PATCH 127/345] feat: Recently Viewed section for notebooks and
 sources (#979)

* feat: Recently Viewed section for notebooks and sources

Fixes #850

* fix: export RecentlyViewedResponse type from api types

The RecentlyViewed component and notebooks API client import
RecentlyViewedResponse from @/lib/types/api but the interface was missing,
failing the type-check build. Add it to match the backend api/models.py model.

* fix: harden recently-viewed read path and index the recency query

Three robustness fixes on the recently-viewed feature:

- Make the last_viewed_at write-on-read stamping best-effort. _stamp_source_view
  and _stamp_notebook_view now swallow and log their own errors, so a failed
  stamp update can no longer turn a successful GET /sources/{id} or
  GET /notebooks/{id} into a 500.
- Stop leaking internal details from GET /recently-viewed: log the full
  exception server-side and return a generic error message to the client.
- Add indexes on last_viewed_at for the notebook and source tables in
  migration 16 so the ORDER BY last_viewed_at DESC LIMIT recently-viewed
  query does not degrade into a full table scan as data grows. The down
  migration removes the indexes before dropping the field.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* feat: register migration 18, add recently-viewed i18n keys and CHANGELOG entry

---------

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  |   1 +
 api/models.py                                 |  15 +-
 api/routers/notebooks.py                      |  85 +++++++-
 api/routers/sources.py                        |  14 ++
 .../notebooks/components/RecentlyViewed.tsx   | 126 ++++++++++++
 .../src/app/(dashboard)/notebooks/page.tsx    |   3 +
 frontend/src/lib/api/notebooks.ts             |  10 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   5 +
 frontend/src/lib/locales/ca-ES/index.ts       |   5 +
 frontend/src/lib/locales/de-DE/index.ts       |   5 +
 frontend/src/lib/locales/en-US/index.ts       |   5 +
 frontend/src/lib/locales/es-ES/index.ts       |   5 +
 frontend/src/lib/locales/fr-FR/index.ts       |   5 +
 frontend/src/lib/locales/it-IT/index.ts       |   5 +
 frontend/src/lib/locales/ja-JP/index.ts       |   5 +
 frontend/src/lib/locales/pl-PL/index.ts       |   5 +
 frontend/src/lib/locales/pt-BR/index.ts       |   5 +
 frontend/src/lib/locales/ru-RU/index.ts       |   5 +
 frontend/src/lib/locales/tr-TR/index.ts       |   5 +
 frontend/src/lib/locales/zh-CN/index.ts       |   5 +
 frontend/src/lib/locales/zh-TW/index.ts       |   5 +
 frontend/src/lib/types/api.ts                 |   7 +
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/18.surrealql          |  10 +
 .../database/migrations/18_down.surrealql     |   6 +
 open_notebook/domain/notebook.py              |   7 +-
 tests/test_recently_viewed_api.py             | 181 ++++++++++++++++++
 27 files changed, 530 insertions(+), 11 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
 create mode 100644 open_notebook/database/migrations/18.surrealql
 create mode 100644 open_notebook/database/migrations/18_down.surrealql
 create mode 100644 tests/test_recently_viewed_api.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 07d1fed3..03e49480 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
 - LaTeX math rendering (KaTeX) now also applies to source content, source insights, Ask answers, transformation output, and the note editor preview — previously only chat had it (#269)
+- "Recently Viewed" section on the Notebooks page — a collapsible grid of the last 12 notebooks and sources you opened, newest first, hidden when there's no view history. Backed by a new `last_viewed_at` timestamp stamped on read and a `GET /api/recently-viewed` endpoint (translated across all 14 locales) (#850)
 - Per-transformation model selection — each transformation can now be assigned its own language model from the transformation editor, overriding the global transformation default for that transformation only. Runs without an explicit model keep using the system default as before (#776)
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
 
diff --git a/api/models.py b/api/models.py
index f5124606..96586f8c 100644
--- a/api/models.py
+++ b/api/models.py
@@ -28,6 +28,13 @@ class NotebookResponse(BaseModel):
     note_count: int
 
 
+class RecentlyViewedResponse(BaseModel):
+    type: Literal["notebook", "source"]
+    id: str
+    title: str
+    last_viewed_at: str
+
+
 # Search models
 class SearchRequest(BaseModel):
     query: str = Field(..., description="Search query")
@@ -456,12 +463,8 @@ class SetApiKeyRequest(BaseModel):
     base_url: Optional[str] = Field(
         None, description="Base URL for URL-based providers (Ollama, OpenAI-compatible)"
     )
-    endpoint: Optional[str] = Field(
-        None, description="Endpoint URL for Azure OpenAI"
-    )
-    api_version: Optional[str] = Field(
-        None, description="API version for Azure OpenAI"
-    )
+    endpoint: Optional[str] = Field(None, description="Endpoint URL for Azure OpenAI")
+    api_version: Optional[str] = Field(None, description="API version for Azure OpenAI")
     endpoint_llm: Optional[str] = Field(
         None, description="Service-specific endpoint for LLM (Azure)"
     )
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index 3b026698..2d2575ec 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -9,6 +9,7 @@ from api.models import (
     NotebookDeleteResponse,
     NotebookResponse,
     NotebookUpdate,
+    RecentlyViewedResponse,
 )
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import Notebook, Source
@@ -17,6 +18,42 @@ from open_notebook.exceptions import InvalidInputError, NotFoundError
 router = APIRouter()
 
 
+def _last_viewed_sort_key(item: RecentlyViewedResponse) -> str:
+    return item.last_viewed_at
+
+
+async def _stamp_notebook_view(notebook_id: str) -> None:
+    # Best-effort write-on-read: recording the view timestamp must never turn a
+    # successful read into a 500. Log and move on if the stamp update fails.
+    try:
+        await repo_query(
+            "UPDATE $notebook_id SET last_viewed_at = time::now();",
+            {"notebook_id": ensure_record_id(notebook_id)},
+        )
+    except Exception as e:
+        logger.warning(
+            f"Failed to stamp last_viewed_at for notebook {notebook_id}: {e}"
+        )
+
+
+def _recently_viewed_notebook(row: dict) -> RecentlyViewedResponse:
+    return RecentlyViewedResponse(
+        type="notebook",
+        id=str(row.get("id", "")),
+        title=row.get("title") or row.get("name") or "Untitled notebook",
+        last_viewed_at=str(row.get("last_viewed_at", "")),
+    )
+
+
+def _recently_viewed_source(row: dict) -> RecentlyViewedResponse:
+    return RecentlyViewedResponse(
+        type="source",
+        id=str(row.get("id", "")),
+        title=row.get("title") or "Untitled source",
+        last_viewed_at=str(row.get("last_viewed_at", "")),
+    )
+
+
 @router.get("/notebooks", response_model=List[NotebookResponse])
 async def get_notebooks(
     archived: Optional[bool] = Query(None, description="Filter by archived status"),
@@ -115,6 +152,48 @@ async def create_notebook(notebook: NotebookCreate):
         )
 
 
+@router.get("/recently-viewed", response_model=List[RecentlyViewedResponse])
+async def get_recently_viewed(
+    limit: int = Query(12, ge=1, le=50, description="Number of items to return"),
+):
+    """Get recently viewed notebooks and sources, newest first."""
+    try:
+        notebooks = await repo_query(
+            """
+            SELECT id, name AS title, last_viewed_at
+            FROM notebook
+            WHERE last_viewed_at != NONE AND last_viewed_at != NULL
+            ORDER BY last_viewed_at DESC
+            LIMIT $limit
+            """,
+            {"limit": limit},
+        )
+        sources = await repo_query(
+            """
+            SELECT id, title, last_viewed_at
+            FROM source
+            WHERE last_viewed_at != NONE AND last_viewed_at != NULL
+            ORDER BY last_viewed_at DESC
+            LIMIT $limit
+            """,
+            {"limit": limit},
+        )
+
+        items = [
+            *[_recently_viewed_notebook(nb) for nb in notebooks],
+            *[_recently_viewed_source(src) for src in sources],
+        ]
+        items.sort(key=_last_viewed_sort_key, reverse=True)
+        return items[:limit]
+    except Exception as e:
+        # Log full context server-side; return a generic message so internal
+        # details are not leaked to clients.
+        logger.exception(f"Error fetching recently viewed items: {e}")
+        raise HTTPException(
+            status_code=500, detail="Error fetching recently viewed items"
+        )
+
+
 @router.get(
     "/notebooks/{notebook_id}/delete-preview", response_model=NotebookDeletePreview
 )
@@ -160,6 +239,8 @@ async def get_notebook(notebook_id: str):
         if not result:
             raise HTTPException(status_code=404, detail="Notebook not found")
 
+        await _stamp_notebook_view(notebook_id)
+
         nb = result[0]
         return NotebookResponse(
             id=str(nb.get("id", "")),
@@ -331,7 +412,9 @@ async def delete_notebook(
     try:
         notebook = await Notebook.get(notebook_id)
 
-        result = await notebook.delete(delete_exclusive_sources=delete_exclusive_sources)
+        result = await notebook.delete(
+            delete_exclusive_sources=delete_exclusive_sources
+        )
 
         return NotebookDeleteResponse(
             message="Notebook deleted successfully",
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 9e24e1db..8dd3f0ec 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -52,6 +52,18 @@ SOURCE_TYPE_EXPRESSION = (
 )
 
 
+async def _stamp_source_view(source_id: str) -> None:
+    # Best-effort write-on-read: recording the view timestamp must never turn a
+    # successful read into a 500. Log and move on if the stamp update fails.
+    try:
+        await repo_query(
+            "UPDATE $source_id SET last_viewed_at = time::now();",
+            {"source_id": ensure_record_id(source_id)},
+        )
+    except Exception as e:
+        logger.warning(f"Failed to stamp last_viewed_at for source {source_id}: {e}")
+
+
 def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
     """Generate unique filename like Streamlit app (append counter if file exists)."""
     file_path = Path(upload_folder)
@@ -655,6 +667,8 @@ async def get_source(source_id: str):
         if not source:
             raise HTTPException(status_code=404, detail="Source not found")
 
+        await _stamp_source_view(source.id or source_id)
+
         # Get status information if command exists
         status = None
         processing_info = None
diff --git a/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx b/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
new file mode 100644
index 00000000..dce80d85
--- /dev/null
+++ b/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
@@ -0,0 +1,126 @@
+'use client'
+
+import Link from 'next/link'
+import { useState } from 'react'
+import { useQuery } from '@tanstack/react-query'
+import { formatDistanceToNow } from 'date-fns'
+import type { Locale } from 'date-fns/locale'
+import { BookOpen, ChevronDown, ChevronRight, FileText } from 'lucide-react'
+
+import { Badge } from '@/components/ui/badge'
+import { Button } from '@/components/ui/button'
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger,
+} from '@/components/ui/collapsible'
+import { notebooksApi } from '@/lib/api/notebooks'
+import type { RecentlyViewedResponse } from '@/lib/types/api'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { getDateLocale } from '@/lib/utils/date-locale'
+
+interface RecentlyViewedProps {
+  limit?: number
+}
+
+function getItemHref(item: RecentlyViewedResponse) {
+  if (item.type === 'notebook') {
+    return `/notebooks/${encodeURIComponent(item.id)}`
+  }
+
+  return `/sources/${item.id}`
+}
+
+function formatViewedAt(value: string, locale: Locale) {
+  const date = new Date(value)
+
+  if (Number.isNaN(date.getTime())) {
+    return value
+  }
+
+  return formatDistanceToNow(date, {
+    addSuffix: true,
+    locale,
+  })
+}
+
+export function RecentlyViewed({ limit = 12 }: RecentlyViewedProps) {
+  const { t, language } = useTranslation()
+  const [isOpen, setIsOpen] = useState(true)
+  const locale = getDateLocale(language)
+  const { data: items, isLoading, isError } = useQuery({
+    queryKey: ['recently-viewed', limit],
+    queryFn: () => notebooksApi.recentlyViewed(limit),
+  })
+
+  if (isLoading || isError || !items || items.length === 0) {
+    return null
+  }
+
+  return (
+    <Collapsible open={isOpen} onOpenChange={setIsOpen} className="space-y-4">
+      <div className="flex items-center gap-2">
+        <CollapsibleTrigger asChild>
+          <Button variant="ghost" size="sm" className="h-8 w-8 p-0">
+            {isOpen ? (
+              <ChevronDown className="h-4 w-4" />
+            ) : (
+              <ChevronRight className="h-4 w-4" />
+            )}
+            <span className="sr-only">
+              {t('notebooks.toggleRecentlyViewed', {
+                defaultValue: 'Toggle recently viewed',
+              })}
+            </span>
+          </Button>
+        </CollapsibleTrigger>
+        <h2 className="text-lg font-semibold">
+          {t('notebooks.recentlyViewed', { defaultValue: 'Recently Viewed' })}
+        </h2>
+        <span className="text-sm text-muted-foreground">({items.length})</span>
+      </div>
+
+      <CollapsibleContent>
+        <div className="grid grid-cols-1 gap-3 md:grid-cols-2 xl:grid-cols-3">
+          {items.map((item) => {
+            const Icon = item.type === 'notebook' ? BookOpen : FileText
+            const typeLabel =
+              item.type === 'notebook'
+                ? t('notebooks.recentlyViewedNotebook', {
+                    defaultValue: 'Notebook',
+                  })
+                : t('notebooks.recentlyViewedSource', {
+                    defaultValue: 'Source',
+                  })
+
+            return (
+              <Link
+                key={`${item.type}-${item.id}`}
+                href={getItemHref(item)}
+                className="group flex min-h-20 items-center gap-3 rounded-md border border-border/60 p-3 transition-colors hover:border-primary/40 hover:bg-muted/50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+              >
+                <div className="flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-muted text-muted-foreground transition-colors group-hover:text-primary">
+                  <Icon className="h-4 w-4" />
+                </div>
+                <div className="min-w-0 flex-1">
+                  <div className="flex min-w-0 items-center gap-2">
+                    <p className="truncate text-sm font-medium">{item.title}</p>
+                    <Badge variant="outline" className="shrink-0 text-[11px]">
+                      {typeLabel}
+                    </Badge>
+                  </div>
+                  <p className="mt-1 truncate text-xs text-muted-foreground">
+                    {t('notebooks.lastViewed', {
+                      time: formatViewedAt(item.last_viewed_at, locale),
+                      defaultValue: 'Viewed {{time}}',
+                    })}
+                  </p>
+                </div>
+              </Link>
+            )
+          })}
+        </div>
+      </CollapsibleContent>
+    </Collapsible>
+  )
+}
diff --git a/frontend/src/app/(dashboard)/notebooks/page.tsx b/frontend/src/app/(dashboard)/notebooks/page.tsx
index 08daee41..56549bd8 100644
--- a/frontend/src/app/(dashboard)/notebooks/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/page.tsx
@@ -4,6 +4,7 @@ import { useMemo, useState } from 'react'
 
 import { AppShell } from '@/components/layout/AppShell'
 import { NotebookList } from './components/NotebookList'
+import { RecentlyViewed } from './components/RecentlyViewed'
 import { Button } from '@/components/ui/button'
 import { Plus, RefreshCw, LayoutGrid, List } from 'lucide-react'
 import { useNotebooks } from '@/lib/hooks/use-notebooks'
@@ -102,6 +103,8 @@ export default function NotebooksPage() {
         </div>
         
         <div className="space-y-8">
+          <RecentlyViewed />
+
           <NotebookList 
             notebooks={filteredActive} 
             isLoading={isLoading}
diff --git a/frontend/src/lib/api/notebooks.ts b/frontend/src/lib/api/notebooks.ts
index 6e0a40d9..f1d2f669 100644
--- a/frontend/src/lib/api/notebooks.ts
+++ b/frontend/src/lib/api/notebooks.ts
@@ -1,6 +1,7 @@
 import apiClient from './client'
 import {
   NotebookResponse,
+  RecentlyViewedResponse,
   CreateNotebookRequest,
   UpdateNotebookRequest,
   NotebookDeletePreview,
@@ -13,6 +14,13 @@ export const notebooksApi = {
     return response.data
   },
 
+  recentlyViewed: async (limit: number = 12) => {
+    const response = await apiClient.get<RecentlyViewedResponse[]>('/recently-viewed', {
+      params: { limit },
+    })
+    return response.data
+  },
+
   get: async (id: string) => {
     const response = await apiClient.get<NotebookResponse>(`/notebooks/${id}`)
     return response.data
@@ -51,4 +59,4 @@ export const notebooksApi = {
     const response = await apiClient.delete(`/notebooks/${notebookId}/sources/${sourceId}`)
     return response.data
   },
-}
\ No newline at end of file
+}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 74f26050..afd4bce2 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -262,6 +262,11 @@ export const bnIN = {
     createSuccess: "নোটবুক সফলভাবে তৈরি হয়েছে",
     updateSuccess: "নোটবুক সফলভাবে আপডেট হয়েছে",
     deleteSuccess: "নোটবুক সফলভাবে মুছে ফেলা হয়েছে",
+    recentlyViewed: "সম্প্রতি দেখা",
+    toggleRecentlyViewed: "সম্প্রতি দেখা টগল করুন",
+    recentlyViewedNotebook: "নোটবুক",
+    recentlyViewedSource: "উৎস",
+    lastViewed: "{{time}} দেখা হয়েছে",
   },
   sources: {
     bulkContext: "প্রসঙ্গ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index ff044d90..11bf2c8f 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -262,6 +262,11 @@ export const caES = {
     createSuccess: "S'ha creat el quadern correctament",
     updateSuccess: "S'ha actualitzat el quadern correctament",
     deleteSuccess: "S'ha suprimit el quadern correctament",
+    recentlyViewed: "Vistos recentment",
+    toggleRecentlyViewed: "Commuta els vistos recentment",
+    recentlyViewedNotebook: "Quadern",
+    recentlyViewedSource: "Font",
+    lastViewed: "Vist {{time}}",
   },
   sources: {
     bulkContext: "Context",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index bf9b7dd2..a0e2c874 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -265,6 +265,11 @@ export const deDE = {
     createSuccess: "Notebook erfolgreich erstellt",
     updateSuccess: "Notebook erfolgreich aktualisiert",
     deleteSuccess: "Notebook erfolgreich gelöscht",
+    recentlyViewed: "Zuletzt angesehen",
+    toggleRecentlyViewed: "Zuletzt angesehen ein-/ausblenden",
+    recentlyViewedNotebook: "Notebook",
+    recentlyViewedSource: "Quelle",
+    lastViewed: "Angesehen {{time}}",
   },
   sources: {
     bulkContext: "Kontext",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 750141b5..4b6544e0 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -262,6 +262,11 @@ export const enUS = {
     createSuccess: "Notebook created successfully",
     updateSuccess: "Notebook updated successfully",
     deleteSuccess: "Notebook deleted successfully",
+    recentlyViewed: "Recently Viewed",
+    toggleRecentlyViewed: "Toggle recently viewed",
+    recentlyViewedNotebook: "Notebook",
+    recentlyViewedSource: "Source",
+    lastViewed: "Viewed {{time}}",
   },
   sources: {
     title: "Sources",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index f7cbc47e..38db5dca 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -262,6 +262,11 @@ export const esES = {
     createSuccess: "Cuaderno creado exitosamente",
     updateSuccess: "Cuaderno actualizado exitosamente",
     deleteSuccess: "Cuaderno eliminado exitosamente",
+    recentlyViewed: "Vistos recientemente",
+    toggleRecentlyViewed: "Alternar vistos recientemente",
+    recentlyViewedNotebook: "Cuaderno",
+    recentlyViewedSource: "Fuente",
+    lastViewed: "Visto {{time}}",
   },
   sources: {
     bulkContext: "Contexto",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 4f0ea77b..d9538320 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -262,6 +262,11 @@ export const frFR = {
     createSuccess: "Carnet créé avec succès",
     updateSuccess: "Carnet mis à jour avec succès",
     deleteSuccess: "Carnet supprimé avec succès",
+    recentlyViewed: "Consultés récemment",
+    toggleRecentlyViewed: "Afficher/masquer les éléments récents",
+    recentlyViewedNotebook: "Carnet",
+    recentlyViewedSource: "Source",
+    lastViewed: "Consulté {{time}}",
   },
   sources: {
     bulkContext: "Contexte",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 21aece9c..593651f7 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -262,6 +262,11 @@ export const itIT = {
     createSuccess: "Quaderno creato con successo",
     updateSuccess: "Quaderno aggiornato con successo",
     deleteSuccess: "Quaderno eliminato con successo",
+    recentlyViewed: "Visti di recente",
+    toggleRecentlyViewed: "Mostra/nascondi visti di recente",
+    recentlyViewedNotebook: "Quaderno",
+    recentlyViewedSource: "Fonte",
+    lastViewed: "Visto {{time}}",
   },
   sources: {
     bulkContext: "Contesto",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index ae89e464..93a22e0f 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -262,6 +262,11 @@ export const jaJP = {
     createSuccess: "ノートブックを作成しました",
     updateSuccess: "ノートブックを更新しました",
     deleteSuccess: "ノートブックを削除しました",
+    recentlyViewed: "最近表示した項目",
+    toggleRecentlyViewed: "最近表示した項目の表示切替",
+    recentlyViewedNotebook: "ノートブック",
+    recentlyViewedSource: "ソース",
+    lastViewed: "{{time}}に表示",
   },
   sources: {
     bulkContext: "コンテキスト",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 3724d971..c3eb85cf 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -262,6 +262,11 @@ export const plPL = {
     createSuccess: "Notatnik utworzony pomyślnie",
     updateSuccess: "Notatnik zaktualizowany pomyślnie",
     deleteSuccess: "Notatnik usunięty pomyślnie",
+    recentlyViewed: "Ostatnio przeglądane",
+    toggleRecentlyViewed: "Przełącz ostatnio przeglądane",
+    recentlyViewedNotebook: "Notatnik",
+    recentlyViewedSource: "Źródło",
+    lastViewed: "Wyświetlono {{time}}",
   },
   sources: {
     bulkContext: "Kontekst",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ea607e2b..279fb7c2 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -262,6 +262,11 @@ export const ptBR = {
     createSuccess: "Caderno criado com sucesso",
     updateSuccess: "Caderno atualizado com sucesso",
     deleteSuccess: "Caderno excluído com sucesso",
+    recentlyViewed: "Vistos recentemente",
+    toggleRecentlyViewed: "Alternar vistos recentemente",
+    recentlyViewedNotebook: "Caderno",
+    recentlyViewedSource: "Fonte",
+    lastViewed: "Visto {{time}}",
   },
   sources: {
     bulkContext: "Contexto",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index f640e0e3..96737305 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -262,6 +262,11 @@ export const ruRU = {
     createSuccess: "Блокнот успешно создан",
     updateSuccess: "Блокнот успешно обновлён",
     deleteSuccess: "Блокнот успешно удалён",
+    recentlyViewed: "Недавно просмотренные",
+    toggleRecentlyViewed: "Показать/скрыть недавно просмотренные",
+    recentlyViewedNotebook: "Блокнот",
+    recentlyViewedSource: "Источник",
+    lastViewed: "Просмотрено {{time}}",
   },
   sources: {
     bulkContext: "Контекст",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index a40d063f..78ad760b 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -262,6 +262,11 @@ export const trTR = {
     createSuccess: "Defter başarıyla oluşturuldu",
     updateSuccess: "Defter başarıyla güncellendi",
     deleteSuccess: "Defter başarıyla silindi",
+    recentlyViewed: "Son Görüntülenenler",
+    toggleRecentlyViewed: "Son görüntülenenleri aç/kapat",
+    recentlyViewedNotebook: "Defter",
+    recentlyViewedSource: "Kaynak",
+    lastViewed: "{{time}} görüntülendi",
   },
   sources: {
     bulkContext: "Bağlam",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 6b432e30..35cdcba7 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -262,6 +262,11 @@ export const zhCN = {
     createSuccess: "笔记本创建成功",
     updateSuccess: "笔记本更新成功",
     deleteSuccess: "笔记本删除成功",
+    recentlyViewed: "最近查看",
+    toggleRecentlyViewed: "切换最近查看",
+    recentlyViewedNotebook: "笔记本",
+    recentlyViewedSource: "来源",
+    lastViewed: "查看于{{time}}",
   },
   sources: {
     bulkContext: "上下文",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index e74db4a2..a1acd91a 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -262,6 +262,11 @@ export const zhTW = {
     createSuccess: "筆記本新增成功",
     updateSuccess: "筆記本更新成功",
     deleteSuccess: "筆記本刪除成功",
+    recentlyViewed: "最近檢視",
+    toggleRecentlyViewed: "切換最近檢視",
+    recentlyViewedNotebook: "筆記本",
+    recentlyViewedSource: "來源",
+    lastViewed: "檢視於{{time}}",
   },
   sources: {
     bulkContext: "上下文",
diff --git a/frontend/src/lib/types/api.ts b/frontend/src/lib/types/api.ts
index 2991f1ef..cd454f62 100644
--- a/frontend/src/lib/types/api.ts
+++ b/frontend/src/lib/types/api.ts
@@ -239,3 +239,10 @@ export interface BuildContextResponse {
   token_count: number
   char_count: number
 }
+
+export interface RecentlyViewedResponse {
+  type: 'notebook' | 'source'
+  id: string
+  title: string
+  last_viewed_at: string
+}
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index d993cbfc..38148c1d 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -127,6 +127,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/17.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/18.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -180,6 +183,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/17_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/18_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/18.surrealql b/open_notebook/database/migrations/18.surrealql
new file mode 100644
index 00000000..8d8de329
--- /dev/null
+++ b/open_notebook/database/migrations/18.surrealql
@@ -0,0 +1,10 @@
+-- Migration 18: Recently viewed timestamps
+-- Adds optional last-viewed timestamps for notebooks and sources.
+
+DEFINE FIELD IF NOT EXISTS last_viewed_at ON TABLE notebook TYPE option<datetime>;
+DEFINE FIELD IF NOT EXISTS last_viewed_at ON TABLE source TYPE option<datetime>;
+
+-- Indexes backing the recently-viewed query (ORDER BY last_viewed_at DESC LIMIT)
+-- so it does not degrade into a full table scan as data grows.
+DEFINE INDEX IF NOT EXISTS idx_notebook_last_viewed ON TABLE notebook FIELDS last_viewed_at CONCURRENTLY;
+DEFINE INDEX IF NOT EXISTS idx_source_last_viewed ON TABLE source FIELDS last_viewed_at CONCURRENTLY;
diff --git a/open_notebook/database/migrations/18_down.surrealql b/open_notebook/database/migrations/18_down.surrealql
new file mode 100644
index 00000000..c9b213f6
--- /dev/null
+++ b/open_notebook/database/migrations/18_down.surrealql
@@ -0,0 +1,6 @@
+-- Migration 18 rollback: Remove recently viewed timestamps
+
+REMOVE INDEX IF EXISTS idx_notebook_last_viewed ON TABLE notebook;
+REMOVE INDEX IF EXISTS idx_source_last_viewed ON TABLE source;
+REMOVE FIELD IF EXISTS last_viewed_at ON TABLE notebook;
+REMOVE FIELD IF EXISTS last_viewed_at ON TABLE source;
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 87e24194..8fe17d45 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -1,5 +1,6 @@
 import asyncio
 import os
+from datetime import datetime
 from pathlib import Path
 from typing import Any, ClassVar, Dict, List, Literal, Optional, Tuple, Union
 
@@ -18,6 +19,7 @@ class Notebook(ObjectModel):
     name: str
     description: str
     archived: Optional[bool] = False
+    last_viewed_at: Optional[datetime] = None
 
     @field_validator("name")
     @classmethod
@@ -359,6 +361,7 @@ class Source(ObjectModel):
     title: Optional[str] = None
     topics: Optional[List[str]] = Field(default_factory=list)
     full_text: Optional[str] = None
+    last_viewed_at: Optional[datetime] = None
     command: Optional[Union[str, RecordID]] = Field(
         default=None, description="Link to surreal-commands processing job"
     )
@@ -516,9 +519,7 @@ class Source(ObjectModel):
         except ValueError:
             raise
         except Exception as e:
-            logger.error(
-                f"Failed to submit embed_source job for source {self.id}: {e}"
-            )
+            logger.error(f"Failed to submit embed_source job for source {self.id}: {e}")
             logger.exception(e)
             raise DatabaseOperationError(e)
 
diff --git a/tests/test_recently_viewed_api.py b/tests/test_recently_viewed_api.py
new file mode 100644
index 00000000..4f20c98d
--- /dev/null
+++ b/tests/test_recently_viewed_api.py
@@ -0,0 +1,181 @@
+"""Tests for recently viewed notebooks and sources."""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.notebook import Source
+
+
+@pytest.fixture
+def client():
+    """Create test client after environment variables have been cleared by conftest."""
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestRecentlyViewedApi:
+    @patch("api.routers.notebooks.repo_query", new_callable=AsyncMock)
+    def test_recently_viewed_returns_mixed_items_newest_first(
+        self, mock_repo_query, client
+    ):
+        mock_repo_query.side_effect = [
+            [
+                {
+                    "id": "notebook:old",
+                    "title": "Older Notebook",
+                    "last_viewed_at": "2026-06-26T10:00:00Z",
+                }
+            ],
+            [
+                {
+                    "id": "source:new",
+                    "title": "Newer Source",
+                    "last_viewed_at": "2026-06-27T10:00:00Z",
+                }
+            ],
+        ]
+
+        response = client.get("/api/recently-viewed")
+
+        assert response.status_code == 200
+        assert response.json() == [
+            {
+                "type": "source",
+                "id": "source:new",
+                "title": "Newer Source",
+                "last_viewed_at": "2026-06-27T10:00:00Z",
+            },
+            {
+                "type": "notebook",
+                "id": "notebook:old",
+                "title": "Older Notebook",
+                "last_viewed_at": "2026-06-26T10:00:00Z",
+            },
+        ]
+
+    @patch("api.routers.notebooks.repo_query", new_callable=AsyncMock)
+    def test_recently_viewed_honors_limit(self, mock_repo_query, client):
+        mock_repo_query.side_effect = [
+            [
+                {
+                    "id": "notebook:1",
+                    "title": "Notebook 1",
+                    "last_viewed_at": "2026-06-27T09:00:00Z",
+                },
+                {
+                    "id": "notebook:2",
+                    "title": "Notebook 2",
+                    "last_viewed_at": "2026-06-27T07:00:00Z",
+                },
+            ],
+            [
+                {
+                    "id": "source:1",
+                    "title": "Source 1",
+                    "last_viewed_at": "2026-06-27T10:00:00Z",
+                },
+                {
+                    "id": "source:2",
+                    "title": "Source 2",
+                    "last_viewed_at": "2026-06-27T08:00:00Z",
+                },
+            ],
+        ]
+
+        response = client.get("/api/recently-viewed?limit=2")
+
+        assert response.status_code == 200
+        data = response.json()
+        assert [item["id"] for item in data] == ["source:1", "notebook:1"]
+        assert len(data) == 2
+        assert mock_repo_query.await_args_list[0].args[1] == {"limit": 2}
+        assert mock_repo_query.await_args_list[1].args[1] == {"limit": 2}
+
+    @patch("api.routers.notebooks.repo_query", new_callable=AsyncMock)
+    def test_recently_viewed_empty_when_no_view_history(self, mock_repo_query, client):
+        mock_repo_query.side_effect = [[], []]
+
+        response = client.get("/api/recently-viewed")
+
+        assert response.status_code == 200
+        assert response.json() == []
+
+    @patch("api.routers.notebooks.repo_query", new_callable=AsyncMock)
+    def test_get_notebook_stamps_last_viewed_at(self, mock_repo_query, client):
+        mock_repo_query.side_effect = [
+            [
+                {
+                    "id": "notebook:1",
+                    "name": "Notebook",
+                    "description": "",
+                    "archived": False,
+                    "created": "2026-06-27T09:00:00Z",
+                    "updated": "2026-06-27T09:00:00Z",
+                    "source_count": 0,
+                    "note_count": 0,
+                }
+            ],
+            [],
+        ]
+
+        response = client.get("/api/notebooks/notebook:1")
+
+        assert response.status_code == 200
+        assert (
+            "UPDATE $notebook_id SET last_viewed_at = time::now()"
+            in (mock_repo_query.await_args_list[1].args[0])
+        )
+
+    @patch("api.routers.sources.Source.get_embedded_chunks", new_callable=AsyncMock)
+    @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
+    @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
+    def test_get_source_stamps_last_viewed_at(
+        self, mock_repo_query, mock_get_source, mock_chunks, client
+    ):
+        mock_get_source.return_value = Source(
+            id="source:1",
+            title="Source",
+            topics=[],
+            full_text="Source text",
+            created="2026-06-27T09:00:00Z",
+            updated="2026-06-27T09:00:00Z",
+        )
+        mock_chunks.return_value = 0
+        mock_repo_query.side_effect = [[], []]
+
+        response = client.get("/api/sources/source:1")
+
+        assert response.status_code == 200
+        assert (
+            "UPDATE $source_id SET last_viewed_at = time::now()"
+            in (mock_repo_query.await_args_list[0].args[0])
+        )
+
+    @patch("api.routers.notebooks.repo_query", new_callable=AsyncMock)
+    def test_recently_viewed_reorders_after_notebook_is_viewed_again(
+        self, mock_repo_query, client
+    ):
+        mock_repo_query.side_effect = [
+            [
+                {
+                    "id": "notebook:1",
+                    "title": "Notebook",
+                    "last_viewed_at": "2026-06-27T11:00:00Z",
+                }
+            ],
+            [
+                {
+                    "id": "source:1",
+                    "title": "Source",
+                    "last_viewed_at": "2026-06-27T10:00:00Z",
+                }
+            ],
+        ]
+
+        response = client.get("/api/recently-viewed")
+
+        assert response.status_code == 200
+        assert [item["id"] for item in response.json()] == ["notebook:1", "source:1"]

From ad6464d45b62e199842bfe00fae782be56c0fac1 Mon Sep 17 00:00:00 2001
From: Georgij <grigorievga@yandex.ru>
Date: Fri, 3 Jul 2026 18:58:45 +0300
Subject: [PATCH 128/345] feat: make API listen host configurable via API_HOST
 (#986)

* unhardcode api listen host

* fix: keep 0.0.0.0 as API_HOST default, document the variable

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  | 1 +
 Dockerfile                                    | 2 ++
 Dockerfile.single                             | 2 ++
 docs/5-CONFIGURATION/environment-reference.md | 1 +
 supervisord.conf                              | 2 +-
 supervisord.single.conf                       | 2 +-
 6 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 03e49480..2013963d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
 
 ### Changed
+- The API's listen interface in the Docker images is now configurable via a new `API_HOST` environment variable instead of a hardcoded `--host 0.0.0.0`. The default is unchanged (`0.0.0.0`); set `API_HOST=::` to serve IPv6/dual-stack environments (#985)
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
diff --git a/Dockerfile b/Dockerfile
index 4f391f2f..446a583c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -100,6 +100,8 @@ ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
 
 # Bind Next.js to all interfaces (required for Docker networking and reverse proxies)
 ENV HOSTNAME=0.0.0.0
+# Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
+ENV API_HOST=0.0.0.0
 
 # Copy built frontend from builder stage
 COPY --from=builder /app/frontend/.next/standalone /app/frontend/
diff --git a/Dockerfile.single b/Dockerfile.single
index 93fe7491..cf0f7464 100644
--- a/Dockerfile.single
+++ b/Dockerfile.single
@@ -84,6 +84,8 @@ COPY --from=frontend-builder /app/frontend/public /app/frontend/public
 
 # Bind Next.js to all interfaces (required for Docker networking and reverse proxies)
 ENV HOSTNAME=0.0.0.0
+# Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
+ENV API_HOST=0.0.0.0
 # Point the app at the pre-baked tiktoken encoding (see open_notebook/config.py)
 ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 11434400..bf7d0b79 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -14,6 +14,7 @@ Comprehensive list of all environment variables available in Open Notebook.
 | `OPEN_NOTEBOOK_PASSWORD` | No | None | Password to protect Open Notebook instance |
 | `OPEN_NOTEBOOK_ENCRYPTION_KEY` | **Yes** | None | Secret string to encrypt credentials stored in database (any string works). **Required** for the credential system. Supports Docker secrets via `_FILE` suffix. |
 | `HOSTNAME` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies |
+| `API_HOST` | No | `0.0.0.0` (in Docker) | Network interface for the API (uvicorn) to bind to. Set to `::` for IPv6 dual-stack environments (listens on IPv6 and, on Linux defaults, IPv4 too) |
 
 > **Important**: `OPEN_NOTEBOOK_ENCRYPTION_KEY` is required for storing AI provider credentials via the Settings UI. Without it, you cannot save credentials. If you change or lose this key, all stored credentials become unreadable.
 
diff --git a/supervisord.conf b/supervisord.conf
index 6bc872be..79831251 100644
--- a/supervisord.conf
+++ b/supervisord.conf
@@ -5,7 +5,7 @@ logfile_maxbytes=0
 pidfile=/tmp/supervisord.pid
 
 [program:api]
-command=uv run --no-sync uvicorn api.main:app --host 0.0.0.0 --port 5055
+command=uv run --no-sync uvicorn api.main:app --host %(ENV_API_HOST)s --port 5055
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr
diff --git a/supervisord.single.conf b/supervisord.single.conf
index 90e3288d..b1c95174 100644
--- a/supervisord.single.conf
+++ b/supervisord.single.conf
@@ -16,7 +16,7 @@ autostart=true
 startsecs=5
 
 [program:api]
-command=uv run --no-sync uvicorn api.main:app --host 0.0.0.0 --port 5055
+command=uv run --no-sync uvicorn api.main:app --host %(ENV_API_HOST)s --port 5055
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr

From c0dfd8d93c8ed3fda0dac6fb47e427aefb466371 Mon Sep 17 00:00:00 2001
From: Davi Ribeiro <104164579+Markus328@users.noreply.github.com>
Date: Fri, 3 Jul 2026 13:57:18 -0300
Subject: [PATCH 129/345] feat: add markdown syntax highlighting and restore
 typography styles (#980)

* feat: add markdown syntax highlighter

Also fixes the markdown rendering, migrating old tailwind config to v4

* perf: use PrismLight with a bundled language set, add renderer tests and CHANGELOG

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  |   2 +
 frontend/package-lock.json                    | 106 +++++++++++++++++
 frontend/package.json                         |   2 +
 frontend/src/app/globals.css                  |   9 ++
 .../components/search/StreamingResponse.tsx   |  31 +----
 frontend/src/components/source/ChatPanel.tsx  |  41 +------
 .../components/source/SourceDetailContent.tsx |  35 +-----
 .../components/source/SourceInsightDialog.tsx |  28 +----
 .../components/ui/markdown-renderer.test.tsx  |  34 ++++++
 .../src/components/ui/markdown-renderer.tsx   | 110 ++++++++++++++++++
 frontend/tailwind.config.ts                   |  17 ---
 11 files changed, 283 insertions(+), 132 deletions(-)
 create mode 100644 frontend/src/components/ui/markdown-renderer.test.tsx
 create mode 100644 frontend/src/components/ui/markdown-renderer.tsx
 delete mode 100644 frontend/tailwind.config.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2013963d..236f01cd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
 - `SECURITY.md` with a coordinated-disclosure policy: how to privately report a vulnerability via GitHub's private vulnerability reporting, supported versions, and response expectations (#943)
 - LaTeX math rendering (KaTeX) now also applies to source content, source insights, Ask answers, transformation output, and the note editor preview — previously only chat had it (#269)
+- Syntax highlighting for fenced code blocks in chat responses, source content, insights and Ask/Search answers — light/dark aware, with 25 common languages bundled (others render as plain text) (#783)
 - "Recently Viewed" section on the Notebooks page — a collapsible grid of the last 12 notebooks and sources you opened, newest first, hidden when there's no view history. Backed by a new `last_viewed_at` timestamp stamped on read and a `GET /api/recently-viewed` endpoint (translated across all 14 locales) (#850)
 - Per-transformation model selection — each transformation can now be assigned its own language model from the transformation editor, overriding the global transformation default for that transformation only. Runs without an explicit model keep using the system default as before (#776)
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
@@ -22,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- Markdown typography styles (`prose` classes) are active again: the Tailwind v4 migration left the old `tailwind.config.ts` (which loaded `@tailwindcss/typography`) silently ignored, so rendered markdown lost its typographic styling. The plugin and class-based dark mode are now configured in `globals.css`, and markdown rendering is centralized in a shared `MarkdownRenderer` component (#783)
 - Podcast generation no longer truncates on dense, long-form content (`LengthFinishReasonError` / `OUTPUT_PARSING_FAILURE`): episode profiles now support an optional `max_tokens` that is passed through to podcast_creator's outline/transcript generation, overriding its defaults — settable via the episode profile API (UI follow-up in #991) (#639)
 - API no longer freezes for all requests while a chat waits on the LLM. Both the notebook chat (`execute_chat`) and source chat handlers ran LangGraph's synchronous `invoke()` directly on the event loop; they now run it via `asyncio.to_thread()` (matching the existing `get_state` calls), so other requests stay responsive — and the source-chat SSE can flush its early events instead of stalling until the model finishes (#704)
 - Windows native install guide no longer points users at a `start-open-notebook.bat` that doesn't exist in the repo; the Quick Start now documents starting the four services manually with `uv run`, plus an optional sample launcher you can save yourself (#846)
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index eacd17e7..c8d0074d 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -28,6 +28,7 @@
         "@radix-ui/react-tooltip": "^1.2.7",
         "@tailwindcss/typography": "^0.5.16",
         "@tanstack/react-query": "^5.83.0",
+        "@types/react-syntax-highlighter": "^15.5.13",
         "@uiw/react-md-editor": "^4.0.8",
         "axios": "^1.16.0",
         "class-variance-authority": "^0.7.1",
@@ -45,6 +46,7 @@
         "react-hook-form": "^7.60.0",
         "react-i18next": "^16.5.0",
         "react-markdown": "^10.1.0",
+        "react-syntax-highlighter": "^16.1.1",
         "rehype-katex": "^7.0.1",
         "remark-gfm": "^4.0.1",
         "remark-math": "^6.0.0",
@@ -4318,6 +4320,15 @@
         "@types/react": "^19.0.0"
       }
     },
+    "node_modules/@types/react-syntax-highlighter": {
+      "version": "15.5.13",
+      "resolved": "https://registry.npmjs.org/@types/react-syntax-highlighter/-/react-syntax-highlighter-15.5.13.tgz",
+      "integrity": "sha512-uLGJ87j6Sz8UaBAooU0T6lWJ0dBmjZgN1PZTrj05TNql2/XpC6+4HhMT5syIdFUUt+FASfCeLLv4kBygNU+8qA==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/react": "*"
+      }
+    },
     "node_modules/@types/unist": {
       "version": "3.0.3",
       "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz",
@@ -6907,6 +6918,19 @@
         "reusify": "^1.0.4"
       }
     },
+    "node_modules/fault": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/fault/-/fault-1.0.4.tgz",
+      "integrity": "sha512-CJ0HCB5tL5fYTEA7ToAq5+kTwd++Borf1/bifxd9iT70QcXr4MRrO3Llf8Ifs70q+SJcGHFtnIE/Nw6giCtECA==",
+      "license": "MIT",
+      "dependencies": {
+        "format": "^0.2.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/fflate": {
       "version": "0.8.2",
       "resolved": "https://registry.npmmirror.com/fflate/-/fflate-0.8.2.tgz",
@@ -7025,6 +7049,14 @@
         "node": ">= 6"
       }
     },
+    "node_modules/format": {
+      "version": "0.2.2",
+      "resolved": "https://registry.npmjs.org/format/-/format-0.2.2.tgz",
+      "integrity": "sha512-wzsgA6WOq+09wrU1tsJ09udeR/YZRaeArL9e1wPbFg3GG2yDnC2ldKpxs4xunpFF9DgqCqOIra3bc1HWrJ37Ww==",
+      "engines": {
+        "node": ">=0.4.x"
+      }
+    },
     "node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmmirror.com/fsevents/-/fsevents-2.3.3.tgz",
@@ -7608,6 +7640,21 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/highlight.js": {
+      "version": "10.7.3",
+      "resolved": "https://registry.npmjs.org/highlight.js/-/highlight.js-10.7.3.tgz",
+      "integrity": "sha512-tzcUFauisWKNHaRkN4Wjl/ZA07gENAjFl3J/c480dprkGTg5EQstgaNFqBfUqCq54kZRIEcreTsAgF/m2quD7A==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": "*"
+      }
+    },
+    "node_modules/highlightjs-vue": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/highlightjs-vue/-/highlightjs-vue-1.0.0.tgz",
+      "integrity": "sha512-PDEfEF102G23vHmPhLyPboFCD+BkMGu+GuJe2d9/eH4FsCwvgBpnc9n0pGE+ffKdph38s6foEZiEjdgHdzp+IA==",
+      "license": "CC0-1.0"
+    },
     "node_modules/html-encoding-sniffer": {
       "version": "4.0.0",
       "resolved": "https://registry.npmmirror.com/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz",
@@ -8771,6 +8818,20 @@
         "loose-envify": "cli.js"
       }
     },
+    "node_modules/lowlight": {
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/lowlight/-/lowlight-1.20.0.tgz",
+      "integrity": "sha512-8Ktj+prEb1RoCPkEOrPMYUN/nCggB7qAWe3a7OpMjWQkh3l2RD5wKRQ+o8Q8YuI9RG/xs95waaI/E6ym/7NsTw==",
+      "license": "MIT",
+      "dependencies": {
+        "fault": "^1.0.0",
+        "highlight.js": "~10.7.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
@@ -10334,6 +10395,15 @@
       "license": "MIT",
       "peer": true
     },
+    "node_modules/prismjs": {
+      "version": "1.30.0",
+      "resolved": "https://registry.npmjs.org/prismjs/-/prismjs-1.30.0.tgz",
+      "integrity": "sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/prop-types": {
       "version": "15.8.1",
       "resolved": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz",
@@ -10563,6 +10633,42 @@
         }
       }
     },
+    "node_modules/react-syntax-highlighter": {
+      "version": "16.1.1",
+      "resolved": "https://registry.npmjs.org/react-syntax-highlighter/-/react-syntax-highlighter-16.1.1.tgz",
+      "integrity": "sha512-PjVawBGy80C6YbC5DDZJeUjBmC7skaoEUdvfFQediQHgCL7aKyVHe57SaJGfQsloGDac+gCpTfRdtxzWWKmCXA==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/runtime": "^7.28.4",
+        "highlight.js": "^10.4.1",
+        "highlightjs-vue": "^1.0.0",
+        "lowlight": "^1.17.0",
+        "prismjs": "^1.30.0",
+        "refractor": "^5.0.0"
+      },
+      "engines": {
+        "node": ">= 16.20.2"
+      },
+      "peerDependencies": {
+        "react": ">= 0.14.0"
+      }
+    },
+    "node_modules/react-syntax-highlighter/node_modules/refractor": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/refractor/-/refractor-5.0.0.tgz",
+      "integrity": "sha512-QXOrHQF5jOpjjLfiNk5GFnWhRXvxjUVnlFxkeDmewR5sXkr3iM46Zo+CnRR8B+MDVqkULW4EcLVcRBNOPXHosw==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@types/prismjs": "^1.0.0",
+        "hastscript": "^9.0.0",
+        "parse-entities": "^4.0.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/wooorm"
+      }
+    },
     "node_modules/redent": {
       "version": "3.0.0",
       "resolved": "https://registry.npmmirror.com/redent/-/redent-3.0.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index a91e9bda..87d7105b 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -33,6 +33,7 @@
     "@radix-ui/react-tooltip": "^1.2.7",
     "@tailwindcss/typography": "^0.5.16",
     "@tanstack/react-query": "^5.83.0",
+    "@types/react-syntax-highlighter": "^15.5.13",
     "@uiw/react-md-editor": "^4.0.8",
     "axios": "^1.16.0",
     "class-variance-authority": "^0.7.1",
@@ -50,6 +51,7 @@
     "react-hook-form": "^7.60.0",
     "react-i18next": "^16.5.0",
     "react-markdown": "^10.1.0",
+    "react-syntax-highlighter": "^16.1.1",
     "rehype-katex": "^7.0.1",
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
diff --git a/frontend/src/app/globals.css b/frontend/src/app/globals.css
index e02e3b86..9a1e0c8a 100644
--- a/frontend/src/app/globals.css
+++ b/frontend/src/app/globals.css
@@ -1,5 +1,8 @@
 @import "tailwindcss";
 @import "tw-animate-css";
+@plugin "@tailwindcss/typography";
+
+@variant dark (&:where(.dark, .dark *));
 
 @theme inline {
   --color-background: var(--background);
@@ -189,4 +192,10 @@
   .clickable-card * {
     cursor: pointer !important;
   }
+
+  /* Remove blockquotes's extra quotes in rendered markdown */
+  .prose blockquote p::before,
+  .prose blockquote p::after {
+    content: none !important;
+  }
 }
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index 9edad660..3a25914d 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -6,10 +6,7 @@ import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { Collapsible, CollapsibleContent, CollapsibleTrigger } from '@/components/ui/collapsible'
 import { CheckCircle, Sparkles, Lightbulb, ChevronDown } from 'lucide-react'
 import { useState } from 'react'
-import ReactMarkdown from 'react-markdown'
-import remarkGfm from 'remark-gfm'
-import remarkMath from 'remark-math'
-import rehypeKatex from 'rehype-katex'
+import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import { convertReferencesToMarkdownLinks, createReferenceLinkComponent } from '@/lib/utils/source-references'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -175,26 +172,10 @@ function FinalAnswerContent({
   const LinkComponent = createReferenceLinkComponent(onReferenceClick)
 
   return (
-    <div className="prose prose-sm max-w-none dark:prose-invert break-words prose-a:break-all prose-p:leading-relaxed prose-headings:mt-4 prose-headings:mb-2">
-      <ReactMarkdown
-        remarkPlugins={[remarkGfm, remarkMath]}
-        rehypePlugins={[rehypeKatex]}
-        components={{
-          a: LinkComponent,
-          table: ({ children }) => (
-            <div className="my-4 overflow-x-auto">
-              <table className="min-w-full border-collapse border border-border">{children}</table>
-            </div>
-          ),
-          thead: ({ children }) => <thead className="bg-muted">{children}</thead>,
-          tbody: ({ children }) => <tbody>{children}</tbody>,
-          tr: ({ children }) => <tr className="border-b border-border">{children}</tr>,
-          th: ({ children }) => <th className="border border-border px-3 py-2 text-left font-semibold">{children}</th>,
-          td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
-        }}
-      >
-        {markdownWithLinks}
-      </ReactMarkdown>
-    </div>
+    <MarkdownRenderer components={{
+      a: LinkComponent
+    }}>
+      {markdownWithLinks}
+    </MarkdownRenderer>
   )
 }
diff --git a/frontend/src/components/source/ChatPanel.tsx b/frontend/src/components/source/ChatPanel.tsx
index 79434162..17b0405b 100644
--- a/frontend/src/components/source/ChatPanel.tsx
+++ b/frontend/src/components/source/ChatPanel.tsx
@@ -8,10 +8,7 @@ import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Badge } from '@/components/ui/badge'
 import { Dialog, DialogContent, DialogTitle } from '@/components/ui/dialog'
 import { Bot, User, Send, Loader2, FileText, Lightbulb, StickyNote, Clock } from 'lucide-react'
-import ReactMarkdown from 'react-markdown'
-import remarkGfm from 'remark-gfm'
-import remarkMath from 'remark-math'
-import rehypeKatex from 'rehype-katex'
+import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import {
   SourceChatMessage,
   SourceChatContextIndicator,
@@ -342,36 +339,10 @@ function AIMessageContent({
   const LinkComponent = createCompactReferenceLinkComponent(onReferenceClick)
 
   return (
-    <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-blue-600 prose-a:break-all prose-code:bg-muted prose-code:px-1 prose-code:py-0.5 prose-code:rounded prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
-      <ReactMarkdown
-        remarkPlugins={[remarkGfm, remarkMath]}
-        rehypePlugins={[rehypeKatex]}
-        components={{
-          a: LinkComponent,
-          p: ({ children }) => <p className="mb-4">{children}</p>,
-          h1: ({ children }) => <h1 className="mb-4 mt-6">{children}</h1>,
-          h2: ({ children }) => <h2 className="mb-3 mt-5">{children}</h2>,
-          h3: ({ children }) => <h3 className="mb-3 mt-4">{children}</h3>,
-          h4: ({ children }) => <h4 className="mb-2 mt-4">{children}</h4>,
-          h5: ({ children }) => <h5 className="mb-2 mt-3">{children}</h5>,
-          h6: ({ children }) => <h6 className="mb-2 mt-3">{children}</h6>,
-          li: ({ children }) => <li className="mb-1">{children}</li>,
-          ul: ({ children }) => <ul className="mb-4 space-y-1">{children}</ul>,
-          ol: ({ children }) => <ol className="mb-4 space-y-1">{children}</ol>,
-          table: ({ children }) => (
-            <div className="my-4 overflow-x-auto">
-              <table className="min-w-full border-collapse border border-border">{children}</table>
-            </div>
-          ),
-          thead: ({ children }) => <thead className="bg-muted">{children}</thead>,
-          tbody: ({ children }) => <tbody>{children}</tbody>,
-          tr: ({ children }) => <tr className="border-b border-border">{children}</tr>,
-          th: ({ children }) => <th className="border border-border px-3 py-2 text-left font-semibold">{children}</th>,
-          td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
-        }}
-      >
-        {markdownWithCompactRefs}
-      </ReactMarkdown>
-    </div>
+    <MarkdownRenderer components={{
+      a: LinkComponent
+    }}>
+      {markdownWithCompactRefs}
+    </MarkdownRenderer>
   )
 }
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/source/SourceDetailContent.tsx
index 26d3ad82..54c7222c 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/source/SourceDetailContent.tsx
@@ -3,10 +3,7 @@
 import { useState, useEffect, useCallback, useMemo } from 'react'
 import { useQueryClient } from '@tanstack/react-query'
 import { isAxiosError } from 'axios'
-import ReactMarkdown from 'react-markdown'
-import remarkGfm from 'remark-gfm'
-import remarkMath from 'remark-math'
-import rehypeKatex from 'rehype-katex'
+import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import { sourcesApi } from '@/lib/api/sources'
 import { insightsApi, SourceInsightResponse } from '@/lib/api/insights'
 import { transformationsApi } from '@/lib/api/transformations'
@@ -535,33 +532,9 @@ export function SourceDetailContent({
                     )}
                   </div>
                 )}
-                <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none prose-headings:font-semibold prose-a:text-blue-600 prose-code:bg-muted prose-code:px-1 prose-code:py-0.5 prose-code:rounded prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
-                  <ReactMarkdown
-                    remarkPlugins={[remarkGfm, remarkMath]}
-                    rehypePlugins={[rehypeKatex]}
-                    components={{
-                      p: ({ children }) => <p className="mb-4">{children}</p>,
-                      h1: ({ children }) => <h1 className="text-2xl font-bold mt-6 mb-4">{children}</h1>,
-                      h2: ({ children }) => <h2 className="text-xl font-bold mt-5 mb-3">{children}</h2>,
-                      h3: ({ children }) => <h3 className="text-lg font-semibold mt-4 mb-2">{children}</h3>,
-                      ul: ({ children }) => <ul className="mb-4 list-disc pl-6">{children}</ul>,
-                      ol: ({ children }) => <ol className="mb-4 list-decimal pl-6">{children}</ol>,
-                      li: ({ children }) => <li className="mb-1">{children}</li>,
-                      table: ({ children }) => (
-                        <div className="my-4 overflow-x-auto">
-                          <table className="min-w-full border-collapse border border-border">{children}</table>
-                        </div>
-                      ),
-                      thead: ({ children }) => <thead className="bg-muted">{children}</thead>,
-                      tbody: ({ children }) => <tbody>{children}</tbody>,
-                      tr: ({ children }) => <tr className="border-b border-border">{children}</tr>,
-                      th: ({ children }) => <th className="border border-border px-3 py-2 text-left font-semibold">{children}</th>,
-                      td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
-                    }}
-                  >
-                    {source.full_text || t('sources.noContent')}
-                  </ReactMarkdown>
-                </div>
+                <MarkdownRenderer>
+                  {source.full_text || t('sources.noContent')}
+                </MarkdownRenderer>
               </CardContent>
             </Card>
           </TabsContent>
diff --git a/frontend/src/components/source/SourceInsightDialog.tsx b/frontend/src/components/source/SourceInsightDialog.tsx
index a4945700..17e1e6da 100644
--- a/frontend/src/components/source/SourceInsightDialog.tsx
+++ b/frontend/src/components/source/SourceInsightDialog.tsx
@@ -5,10 +5,7 @@ import { Dialog, DialogContent, DialogHeader, DialogTitle } from '@/components/u
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
 import { FileText } from 'lucide-react'
-import ReactMarkdown from 'react-markdown'
-import remarkGfm from 'remark-gfm'
-import remarkMath from 'remark-math'
-import rehypeKatex from 'rehype-katex'
+import {MarkdownRenderer} from '@/components/ui/markdown-renderer'
 import { useInsight } from '@/lib/hooks/use-insights'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -127,26 +124,9 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
                 <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
               </div>
             ) : displayInsight ? (
-              <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none">
-                <ReactMarkdown
-                  remarkPlugins={[remarkGfm, remarkMath]}
-                  rehypePlugins={[rehypeKatex]}
-                  components={{
-                    table: ({ children }) => (
-                      <div className="my-4 overflow-x-auto">
-                        <table className="min-w-full border-collapse border border-border">{children}</table>
-                      </div>
-                    ),
-                    thead: ({ children }) => <thead className="bg-muted">{children}</thead>,
-                    tbody: ({ children }) => <tbody>{children}</tbody>,
-                    tr: ({ children }) => <tr className="border-b border-border">{children}</tr>,
-                    th: ({ children }) => <th className="border border-border px-3 py-2 text-left font-semibold">{children}</th>,
-                    td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
-                  }}
-                >
-                  {displayInsight.content}
-                </ReactMarkdown>
-              </div>
+              <MarkdownRenderer>
+                {displayInsight.content}
+              </MarkdownRenderer>
             ) : (
               <p className="text-sm text-muted-foreground">{t('sources.noInsightSelected')}</p>
             )}
diff --git a/frontend/src/components/ui/markdown-renderer.test.tsx b/frontend/src/components/ui/markdown-renderer.test.tsx
new file mode 100644
index 00000000..2ec2d55f
--- /dev/null
+++ b/frontend/src/components/ui/markdown-renderer.test.tsx
@@ -0,0 +1,34 @@
+import { describe, it, expect } from 'vitest'
+import { render } from '@testing-library/react'
+
+import { MarkdownRenderer } from './markdown-renderer'
+
+describe('MarkdownRenderer', () => {
+  it('renders basic markdown', () => {
+    const { container } = render(<MarkdownRenderer>{'# Title\n\nSome **bold** text'}</MarkdownRenderer>)
+    expect(container.querySelector('h1')?.textContent).toBe('Title')
+    expect(container.querySelector('strong')?.textContent).toBe('bold')
+  })
+
+  it('highlights fenced code blocks for registered languages', () => {
+    const { container } = render(
+      <MarkdownRenderer>{'```python\ndef hello():\n    return 42\n```'}</MarkdownRenderer>
+    )
+    // PrismLight emits token spans when the grammar is registered; a plain
+    // fallback would leave the code block without any token markup.
+    expect(container.querySelectorAll('span[class*="token"]').length).toBeGreaterThan(0)
+  })
+
+  it('falls back to plain text for unknown languages without crashing', () => {
+    const { container } = render(
+      <MarkdownRenderer>{'```notalanguage\nsome content\n```'}</MarkdownRenderer>
+    )
+    expect(container.textContent).toContain('some content')
+  })
+
+  it('renders inline code without a highlighter block', () => {
+    const { container } = render(<MarkdownRenderer>{'Use `npm ci` here'}</MarkdownRenderer>)
+    expect(container.querySelector('code')?.textContent).toBe('npm ci')
+    expect(container.querySelectorAll('span[class*="token"]').length).toBe(0)
+  })
+})
diff --git a/frontend/src/components/ui/markdown-renderer.tsx b/frontend/src/components/ui/markdown-renderer.tsx
new file mode 100644
index 00000000..212e2b10
--- /dev/null
+++ b/frontend/src/components/ui/markdown-renderer.tsx
@@ -0,0 +1,110 @@
+'use client'
+
+import ReactMarkdown from 'react-markdown'
+import remarkGfm from 'remark-gfm'
+import remarkMath from 'remark-math'
+import rehypeKatex from 'rehype-katex'
+
+import { useThemeStore } from '@/lib/stores/theme-store'
+import { oneDark as darkTheme } from 'react-syntax-highlighter/dist/esm/styles/prism'
+import { oneLight as lightTheme } from 'react-syntax-highlighter/dist/esm/styles/prism'
+// PrismLight with an explicit language set instead of the full Prism build:
+// bundling every refractor grammar costs ~600KB of client JS. Unregistered
+// languages fall back to unhighlighted text.
+import SyntaxHighlighter from 'react-syntax-highlighter/dist/esm/prism-light'
+import bash from 'react-syntax-highlighter/dist/esm/languages/prism/bash'
+import c from 'react-syntax-highlighter/dist/esm/languages/prism/c'
+import cpp from 'react-syntax-highlighter/dist/esm/languages/prism/cpp'
+import csharp from 'react-syntax-highlighter/dist/esm/languages/prism/csharp'
+import css from 'react-syntax-highlighter/dist/esm/languages/prism/css'
+import diff from 'react-syntax-highlighter/dist/esm/languages/prism/diff'
+import docker from 'react-syntax-highlighter/dist/esm/languages/prism/docker'
+import go from 'react-syntax-highlighter/dist/esm/languages/prism/go'
+import java from 'react-syntax-highlighter/dist/esm/languages/prism/java'
+import javascript from 'react-syntax-highlighter/dist/esm/languages/prism/javascript'
+import json from 'react-syntax-highlighter/dist/esm/languages/prism/json'
+import jsx from 'react-syntax-highlighter/dist/esm/languages/prism/jsx'
+import kotlin from 'react-syntax-highlighter/dist/esm/languages/prism/kotlin'
+import markdown from 'react-syntax-highlighter/dist/esm/languages/prism/markdown'
+import markup from 'react-syntax-highlighter/dist/esm/languages/prism/markup'
+import php from 'react-syntax-highlighter/dist/esm/languages/prism/php'
+import python from 'react-syntax-highlighter/dist/esm/languages/prism/python'
+import r from 'react-syntax-highlighter/dist/esm/languages/prism/r'
+import ruby from 'react-syntax-highlighter/dist/esm/languages/prism/ruby'
+import rust from 'react-syntax-highlighter/dist/esm/languages/prism/rust'
+import sql from 'react-syntax-highlighter/dist/esm/languages/prism/sql'
+import swift from 'react-syntax-highlighter/dist/esm/languages/prism/swift'
+import tsx from 'react-syntax-highlighter/dist/esm/languages/prism/tsx'
+import typescript from 'react-syntax-highlighter/dist/esm/languages/prism/typescript'
+import yaml from 'react-syntax-highlighter/dist/esm/languages/prism/yaml'
+
+import type {ExtraProps} from 'react-markdown'
+import type {ComponentProps, ElementType} from 'react'
+
+const LANGUAGES = {
+  bash, c, cpp, csharp, css, diff, docker, go, java, javascript, json, jsx,
+  kotlin, markdown, markup, php, python, r, ruby, rust, sql, swift, tsx,
+  typescript, yaml,
+}
+for (const [name, language] of Object.entries(LANGUAGES)) {
+  SyntaxHighlighter.registerLanguage(name, language)
+}
+
+type Components = {
+  [Key in Extract<ElementType, string>]?: ElementType<ComponentProps<Key> & ExtraProps>
+}
+
+export function MarkdownRenderer({ children, components = {}}: { children: React.ReactNode , components?: Components }) {
+
+  const { getEffectiveTheme } = useThemeStore()
+  const isDark = getEffectiveTheme() === 'dark'
+
+  return (
+    <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-blue-600 prose-a:break-all prose-code:before:content-none prose-code:after:content-none prose-pre:p-0 prose-pre:bg-transparent prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
+        <ReactMarkdown
+          remarkPlugins={[remarkGfm, remarkMath]}
+          rehypePlugins={[rehypeKatex]}
+          components={{...{
+            p: ({ children }) => <p className="mb-4">{children}</p>,
+            h1: ({ children }) => <h1 className="mb-4 mt-6">{children}</h1>,
+            h2: ({ children }) => <h2 className="mb-3 mt-5">{children}</h2>,
+            h3: ({ children }) => <h3 className="mb-3 mt-4">{children}</h3>,
+            h4: ({ children }) => <h4 className="mb-2 mt-4">{children}</h4>,
+            h5: ({ children }) => <h5 className="mb-2 mt-3">{children}</h5>,
+            h6: ({ children }) => <h6 className="mb-2 mt-3">{children}</h6>,
+            li: ({ children }) => <li className="mb-1">{children}</li>,
+            ul: ({ children }) => <ul className="mb-4 space-y-1">{children}</ul>,
+            ol: ({ children }) => <ol className="mb-4 space-y-1">{children}</ol>,
+            table: ({ children }) => (
+              <div className="my-4 overflow-x-auto">
+                <table className="min-w-full border-collapse border border-border">{children}</table>
+              </div>
+            ),
+            thead: ({ children }) => <thead className="bg-muted">{children}</thead>,
+            tbody: ({ children }) => <tbody>{children}</tbody>,
+            tr: ({ children }) => <tr className="border-b border-border">{children}</tr>,
+            th: ({ children }) => <th className="border border-border px-3 py-2 text-left font-semibold">{children}</th>,
+            td: ({ children }) => <td className="border border-border px-3 py-2">{children}</td>,
+            code: ({ children, className }) => {
+              const match = /language-(\w+)/.exec(className || '')
+              const isBlock = match || String(children).includes('\n')
+              return isBlock ? (
+                <SyntaxHighlighter
+                  language={match ? match[1] : 'text'}
+                  style={isDark ? darkTheme : lightTheme}
+                  PreTag="div"
+                  className="text-sm border border-border"
+                >
+                  {String(children)}
+                </SyntaxHighlighter>
+              ) : (
+                <code className="bg-border rounded px-1 py-0.5">{children}</code>
+              )
+            },
+          }, ...components}}
+        >
+          {String(children)}
+        </ReactMarkdown>
+      </div>
+  )
+}
diff --git a/frontend/tailwind.config.ts b/frontend/tailwind.config.ts
deleted file mode 100644
index dcae9060..00000000
--- a/frontend/tailwind.config.ts
+++ /dev/null
@@ -1,17 +0,0 @@
-import typography from "@tailwindcss/typography";
-import type { Config } from "tailwindcss";
-
-const config: Config = {
-  content: [
-    "./src/pages/**/*.{js,ts,jsx,tsx,mdx}",
-    "./src/components/**/*.{js,ts,jsx,tsx,mdx}",
-    "./src/app/**/*.{js,ts,jsx,tsx,mdx}",
-  ],
-  darkMode: "class",
-  theme: {
-    extend: {},
-  },
-  plugins: [typography],
-};
-
-export default config;
\ No newline at end of file

From 8889087e317177d7b6e286342ab34e0c9c01d43e Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Fri, 3 Jul 2026 10:15:09 -0700
Subject: [PATCH 130/345] fix: make API startup resilient to a not-yet-ready
 database (#977)

* fix: make API startup resilient to a not-yet-ready database

Fixes #708

* fix: bound the database readiness probe with a per-attempt timeout

_wait_for_database awaited migration_manager.ping() with no timeout, so a
hung connection probe could bypass the retry budget and block startup
indefinitely. Wrap the probe in asyncio.wait_for with a per-attempt ceiling;
a timed-out probe is treated as a transient failure and retried like any
other unreachable-database attempt, keeping the retry budget bounded.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* docs: add CHANGELOG entry for startup database readiness retry (#708)

---------

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                            |   1 +
 api/main.py                             |  79 +++++++++++++----
 open_notebook/database/async_migrate.py |   9 ++
 tests/test_startup_migration_retry.py   | 108 ++++++++++++++++++++++++
 4 files changed, 182 insertions(+), 15 deletions(-)
 create mode 100644 tests/test_startup_migration_retry.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 236f01cd..17993930 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- API startup no longer crashes when SurrealDB isn't ready yet (e.g. docker-compose race on host reboot: `Temporary failure in name resolution`). The lifespan now polls a lightweight readiness probe with bounded exponential backoff (~50s budget, 5s per-probe timeout) before running migrations; migration errors themselves still fail fast (#708)
 - Markdown typography styles (`prose` classes) are active again: the Tailwind v4 migration left the old `tailwind.config.ts` (which loaded `@tailwindcss/typography`) silently ignored, so rendered markdown lost its typographic styling. The plugin and class-based dark mode are now configured in `globals.css`, and markdown rendering is centralized in a shared `MarkdownRenderer` component (#783)
 - Podcast generation no longer truncates on dense, long-form content (`LengthFinishReasonError` / `OUTPUT_PARSING_FAILURE`): episode profiles now support an optional `max_tokens` that is passed through to podcast_creator's outline/transcript generation, overriding its defaults — settable via the episode profile API (UI follow-up in #991) (#639)
 - API no longer freezes for all requests while a chat waits on the LLM. Both the notebook chat (`execute_chat`) and source chat handlers ran LangGraph's synchronous `invoke()` directly on the event loop; they now run it via `asyncio.to_thread()` (matching the existing `get_state` calls), so other requests stay responsive — and the source-chat SSE can flush its early events instead of stalling until the model finishes (#704)
diff --git a/api/main.py b/api/main.py
index 3fbac5ff..6d062080 100644
--- a/api/main.py
+++ b/api/main.py
@@ -3,6 +3,7 @@ from dotenv import load_dotenv
 
 load_dotenv()
 
+import asyncio
 import os
 from contextlib import asynccontextmanager
 
@@ -63,6 +64,14 @@ _cors_origins_raw = os.getenv("CORS_ORIGINS")
 CORS_ALLOWED_ORIGINS = _parse_cors_origins(_cors_origins_raw or "*")
 CORS_IS_DEFAULT_WILDCARD = _cors_origins_raw is None
 
+DATABASE_STARTUP_RETRY_ATTEMPTS = 12
+DATABASE_STARTUP_RETRY_INITIAL_DELAY_SECONDS = 1
+DATABASE_STARTUP_RETRY_MAX_DELAY_SECONDS = 5
+# Per-probe ceiling so a hung connection cannot exceed the retry budget or
+# block startup indefinitely. A probe that exceeds this is treated as a
+# transient failure and retried like any other unreachable-database attempt.
+DATABASE_STARTUP_RETRY_PROBE_TIMEOUT_SECONDS = 5
+
 
 def _cors_headers(request: Request) -> dict[str, str]:
     """
@@ -95,6 +104,60 @@ except Exception as e:
     logger.error(f"Failed to import commands in API process: {e}")
 
 
+async def _wait_for_database(migration_manager: AsyncMigrationManager) -> None:
+    """
+    Wait for SurrealDB to accept connections before running migrations.
+
+    Docker Compose can start the API before the database name is resolvable. Keep
+    migration errors fail-fast by only retrying this lightweight readiness probe.
+    """
+    attempts = max(1, DATABASE_STARTUP_RETRY_ATTEMPTS)
+    delay = DATABASE_STARTUP_RETRY_INITIAL_DELAY_SECONDS
+
+    for attempt in range(1, attempts + 1):
+        try:
+            await asyncio.wait_for(
+                migration_manager.ping(),
+                timeout=DATABASE_STARTUP_RETRY_PROBE_TIMEOUT_SECONDS,
+            )
+            if attempt > 1:
+                logger.info(f"Database became reachable on attempt {attempt}")
+            return
+        except Exception as e:
+            if attempt == attempts:
+                logger.error(
+                    f"Database did not become reachable after {attempts} attempts"
+                )
+                raise
+
+            logger.warning(
+                "Database is not reachable yet "
+                f"(attempt {attempt}/{attempts}): {str(e)}. "
+                f"Retrying in {delay:g} seconds..."
+            )
+            await asyncio.sleep(delay)
+            delay = min(delay * 2, DATABASE_STARTUP_RETRY_MAX_DELAY_SECONDS)
+
+
+async def _run_database_migrations() -> None:
+    """Run startup database migrations after SurrealDB is reachable."""
+    migration_manager = AsyncMigrationManager()
+    await _wait_for_database(migration_manager)
+
+    current_version = await migration_manager.get_current_version()
+    logger.info(f"Current database version: {current_version}")
+
+    if await migration_manager.needs_migration():
+        logger.warning("Database migrations are pending. Running migrations...")
+        await migration_manager.run_migration_up()
+        new_version = await migration_manager.get_current_version()
+        logger.success(
+            f"Migrations completed successfully. Database is now at version {new_version}"
+        )
+    else:
+        logger.info("Database is already at the latest version. No migrations needed.")
+
+
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     """
@@ -115,21 +178,7 @@ async def lifespan(app: FastAPI):
     # Run database migrations
 
     try:
-        migration_manager = AsyncMigrationManager()
-        current_version = await migration_manager.get_current_version()
-        logger.info(f"Current database version: {current_version}")
-
-        if await migration_manager.needs_migration():
-            logger.warning("Database migrations are pending. Running migrations...")
-            await migration_manager.run_migration_up()
-            new_version = await migration_manager.get_current_version()
-            logger.success(
-                f"Migrations completed successfully. Database is now at version {new_version}"
-            )
-        else:
-            logger.info(
-                "Database is already at the latest version. No migrations needed."
-            )
+        await _run_database_migrations()
     except Exception as e:
         logger.error(f"CRITICAL: Database migration failed: {str(e)}")
         logger.exception(e)
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 38148c1d..cf823c12 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -196,6 +196,15 @@ class AsyncMigrationManager:
         """Get current database version."""
         return await get_latest_version()
 
+    async def ping(self) -> None:
+        """Check whether SurrealDB is reachable for migration startup."""
+        async with db_connection() as connection:
+            await connection.query("RETURN true;")
+
+        # Also exercise the migration version path. get_current_version() already
+        # treats a missing migrations table as version 0 for fresh databases.
+        await self.get_current_version()
+
     async def needs_migration(self) -> bool:
         """Check if migration is needed."""
         current_version = await self.get_current_version()
diff --git a/tests/test_startup_migration_retry.py b/tests/test_startup_migration_retry.py
new file mode 100644
index 00000000..175e949a
--- /dev/null
+++ b/tests/test_startup_migration_retry.py
@@ -0,0 +1,108 @@
+"""Tests for API startup migration retry behavior."""
+
+from unittest.mock import AsyncMock
+
+import pytest
+
+from api import main as api_main
+
+
+class FakeMigrationManager:
+    def __init__(
+        self,
+        ping_side_effect=None,
+        current_versions=None,
+        needs_migration=True,
+        migration_side_effect=None,
+    ):
+        self.ping = AsyncMock(side_effect=ping_side_effect)
+        self.get_current_version = AsyncMock(side_effect=current_versions or [14])
+        self.needs_migration = AsyncMock(return_value=needs_migration)
+        self.run_migration_up = AsyncMock(side_effect=migration_side_effect)
+
+
+@pytest.fixture
+def no_retry_delay(monkeypatch):
+    sleep = AsyncMock()
+    monkeypatch.setattr(api_main, "DATABASE_STARTUP_RETRY_ATTEMPTS", 3)
+    monkeypatch.setattr(api_main, "DATABASE_STARTUP_RETRY_INITIAL_DELAY_SECONDS", 0)
+    monkeypatch.setattr(api_main, "DATABASE_STARTUP_RETRY_MAX_DELAY_SECONDS", 0)
+    monkeypatch.setattr(api_main.asyncio, "sleep", sleep)
+    return sleep
+
+
+@pytest.mark.asyncio
+async def test_database_reachable_on_first_probe_runs_migrations_once(
+    monkeypatch, no_retry_delay
+):
+    manager = FakeMigrationManager(
+        ping_side_effect=[None],
+        current_versions=[13, 14],
+        needs_migration=True,
+    )
+    monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
+
+    await api_main._run_database_migrations()
+
+    manager.ping.assert_awaited_once()
+    manager.run_migration_up.assert_awaited_once()
+    assert manager.get_current_version.await_count == 2
+    no_retry_delay.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+async def test_database_retry_succeeds_after_initial_probe_failures(
+    monkeypatch, no_retry_delay
+):
+    temporary_error = OSError("Temporary failure in name resolution")
+    manager = FakeMigrationManager(
+        ping_side_effect=[temporary_error, temporary_error, None],
+        current_versions=[13, 14],
+        needs_migration=True,
+    )
+    monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
+
+    await api_main._run_database_migrations()
+
+    assert manager.ping.await_count == 3
+    assert no_retry_delay.await_count == 2
+    manager.run_migration_up.assert_awaited_once()
+
+
+@pytest.mark.asyncio
+async def test_lifespan_raises_after_database_retry_budget_exhausted(
+    monkeypatch, no_retry_delay
+):
+    manager = FakeMigrationManager(
+        ping_side_effect=OSError(-3, "Temporary failure in name resolution"),
+    )
+    monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
+
+    with pytest.raises(RuntimeError, match="Failed to run database migrations"):
+        async with api_main.lifespan(None):
+            pass
+
+    assert manager.ping.await_count == 3
+    assert no_retry_delay.await_count == 2
+    manager.run_migration_up.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+async def test_lifespan_does_not_retry_real_migration_errors(
+    monkeypatch, no_retry_delay
+):
+    manager = FakeMigrationManager(
+        ping_side_effect=[None],
+        current_versions=[13],
+        needs_migration=True,
+        migration_side_effect=ValueError("bad migration"),
+    )
+    monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
+
+    with pytest.raises(RuntimeError, match="Failed to run database migrations"):
+        async with api_main.lifespan(None):
+            pass
+
+    manager.ping.assert_awaited_once()
+    no_retry_delay.assert_not_awaited()
+    manager.run_migration_up.assert_awaited_once()

From 3120b0175111d79db78bad41c7439b5aa8cf09de Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:26:31 -0400
Subject: [PATCH 131/345] fix: prevent SurrealQL injection in
 repo_relate/repo_upsert/repo_update (#1002)

repo_relate() interpolated the relate target directly into the query
string, reachable via an unvalidated notebook_id on the save-insight-
as-note flow - a crafted ID could inject and execute arbitrary
SurrealQL (confirmed against a live embedded instance: a single
crafted RELATE call wiped an entire table). Bind record identifiers
as query parameters instead of building them into the query text, and
validate notebook_id exists before relating, matching the pattern
already used by every other caller of add_to_notebook().
---
 api/routers/insights.py              |  4 ++-
 open_notebook/database/repository.py | 50 ++++++++++++++++++++++------
 open_notebook/domain/notebook.py     |  2 ++
 3 files changed, 45 insertions(+), 11 deletions(-)

diff --git a/api/routers/insights.py b/api/routers/insights.py
index b9e2c714..1518a02b 100644
--- a/api/routers/insights.py
+++ b/api/routers/insights.py
@@ -3,7 +3,7 @@ from loguru import logger
 
 from api.models import NoteResponse, SaveAsNoteRequest, SourceInsightResponse
 from open_notebook.domain.notebook import SourceInsight
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import InvalidInputError, NotFoundError
 
 router = APIRouter()
 
@@ -73,6 +73,8 @@ async def save_insight_as_note(insight_id: str, request: SaveAsNoteRequest):
         )
     except HTTPException:
         raise
+    except NotFoundError:
+        raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
diff --git a/open_notebook/database/repository.py b/open_notebook/database/repository.py
index 15491ee3..6a760de8 100644
--- a/open_notebook/database/repository.py
+++ b/open_notebook/database/repository.py
@@ -1,13 +1,29 @@
 import os
+import re
 from contextlib import asynccontextmanager
 from datetime import datetime, timezone
 from typing import Any, Dict, List, Optional, TypeVar, Union
 
 from loguru import logger
 from surrealdb import AsyncSurreal, RecordID  # type: ignore
+from surrealdb.data.types.table import Table  # type: ignore
 
 T = TypeVar("T", Dict[str, Any], List[Dict[str, Any]])
 
+# Bare SurrealDB table/relation identifier: no ':', whitespace, or query
+# syntax. Used to validate the parts of RELATE/UPSERT/UPDATE that name a
+# table or edge-relation and therefore can't be bound as a query parameter
+# (SurrealQL only allows binding record/table *values*, not identifiers in
+# that position).
+_IDENTIFIER_RE = re.compile(r"^[a-zA-Z_][a-zA-Z0-9_]*$")
+
+
+def _ensure_safe_identifier(value: str, kind: str) -> str:
+    """Validate a table/relationship name before it is interpolated into a query."""
+    if not isinstance(value, str) or not _IDENTIFIER_RE.match(value):
+        raise ValueError(f"Invalid {kind} name: {value!r}")
+    return value
+
 
 def _get_env_or_default(name: str, default: str) -> str:
     value = os.getenv(name)
@@ -117,17 +133,26 @@ async def repo_create(table: str, data: Dict[str, Any]) -> Dict[str, Any]:
 
 
 async def repo_relate(
-    source: str, relationship: str, target: str, data: Optional[Dict[str, Any]] = None
+    source: Union[str, RecordID],
+    relationship: str,
+    target: Union[str, RecordID],
+    data: Optional[Dict[str, Any]] = None,
 ) -> List[Dict[str, Any]]:
     """Create a relationship between two records with optional data"""
     if data is None:
         data = {}
-    query = f"RELATE {source}->{relationship}->{target} CONTENT $data;"
+    # relationship is an edge-table name, not a record value, so it can't be
+    # bound as a query parameter; validate it against an identifier allowlist
+    # instead of trusting the caller. source/target are always bound.
+    _ensure_safe_identifier(relationship, "relationship")
+    query = f"RELATE $source->{relationship}->$target CONTENT $data;"
     # logger.debug(f"Relate query: {query}")
 
     return await repo_query(
         query,
         {
+            "source": ensure_record_id(source),
+            "target": ensure_record_id(target),
             "data": data,
         },
     )
@@ -140,27 +165,32 @@ async def repo_upsert(
     data.pop("id", None)
     if add_timestamp:
         data["updated"] = datetime.now(timezone.utc)
-    query = f"UPSERT {id if id else table} MERGE $data;"
-    return await repo_query(query, {"data": data})
+    _ensure_safe_identifier(table, "table")
+    target: Union[RecordID, Table] = ensure_record_id(id) if id else Table(table)
+    query = "UPSERT $target MERGE $data;"
+    return await repo_query(query, {"target": target, "data": data})
 
 
 async def repo_update(
-    table: str, id: str, data: Dict[str, Any]
+    table: str, id: Union[str, RecordID], data: Dict[str, Any]
 ) -> List[Dict[str, Any]]:
     """Update an existing record by table and id"""
     # If id already contains the table name, use it as is
     try:
-        if isinstance(id, RecordID) or (":" in id and id.startswith(f"{table}:")):
-            record_id = id
+        _ensure_safe_identifier(table, "table")
+        if isinstance(id, RecordID):
+            record_id: RecordID = id
+        elif ":" in id and id.startswith(f"{table}:"):
+            record_id = ensure_record_id(id)
         else:
-            record_id = f"{table}:{id}"
+            record_id = RecordID(table, id)
         data.pop("id", None)
         if "created" in data and isinstance(data["created"], str):
             data["created"] = datetime.fromisoformat(data["created"])
         data["updated"] = datetime.now(timezone.utc)
-        query = f"UPDATE {record_id} MERGE $data;"
+        query = "UPDATE $target MERGE $data;"
         # logger.debug(f"Update query: {query}")
-        result = await repo_query(query, {"data": data})
+        result = await repo_query(query, {"target": record_id, "data": data})
         # if isinstance(result, list):
         #     return [_return_data(item) for item in result]
         return parse_record_ids(result)
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 8fe17d45..1025247b 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -475,6 +475,7 @@ class Source(ObjectModel):
     async def add_to_notebook(self, notebook_id: str) -> Any:
         if not notebook_id:
             raise InvalidInputError("Notebook ID must be provided")
+        await Notebook.get(notebook_id)  # raises NotFoundError if invalid/missing
         return await self.relate("reference", notebook_id)
 
     async def vectorize(self) -> str:
@@ -662,6 +663,7 @@ class Note(ObjectModel):
     async def add_to_notebook(self, notebook_id: str) -> Any:
         if not notebook_id:
             raise InvalidInputError("Notebook ID must be provided")
+        await Notebook.get(notebook_id)  # raises NotFoundError if invalid/missing
         return await self.relate("artifact", notebook_id)
 
     def get_context(

From 3cb86c4bb316fafd8820db7e131ab12edc2a6694 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:27:16 -0400
Subject: [PATCH 132/345] fix: use constant-time comparison for the API
 password (#1003)

PasswordAuthMiddleware and check_api_password compared the bearer
token to the configured password with `!=`, a timing side-channel on
the single secret gating the whole API. There's no rate limiting to
blunt repeated probing, so switch both to secrets.compare_digest().
---
 api/auth.py | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/api/auth.py b/api/auth.py
index 481fce48..e0f70b19 100644
--- a/api/auth.py
+++ b/api/auth.py
@@ -1,3 +1,4 @@
+import secrets
 from typing import Optional
 
 from fastapi import Depends, HTTPException, Request
@@ -67,8 +68,10 @@ class PasswordAuthMiddleware(BaseHTTPMiddleware):
                 headers={"WWW-Authenticate": "Bearer"},
             )
 
-        # Check password
-        if credentials != self.password:
+        # Check password (constant-time to avoid a timing side-channel)
+        if not secrets.compare_digest(
+            credentials.encode("utf-8"), self.password.encode("utf-8")
+        ):
             return JSONResponse(
                 status_code=401,
                 content={"detail": "Invalid password"},
@@ -108,8 +111,10 @@ def check_api_password(
             headers={"WWW-Authenticate": "Bearer"},
         )
 
-    # Check password
-    if credentials.credentials != password:
+    # Check password (constant-time to avoid a timing side-channel)
+    if not secrets.compare_digest(
+        credentials.credentials.encode("utf-8"), password.encode("utf-8")
+    ):
         raise HTTPException(
             status_code=401,
             detail="Invalid password",

From 1b7202f14742f746dc529a1bcca4adcc6fdc90ad Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:28:39 -0400
Subject: [PATCH 133/345] fix: stop compiling user-controlled prompts as Jinja2
 template source (#1004)

transformation.prompt and the generic pattern-chain's prompt were
passed to Prompter(template_text=...), compiling attacker-influenced
text directly as Jinja2 template source. ai-prompter's sandboxed
environment blocks the classic __globals__/__subclasses__ RCE
gadgets, but not an unbounded {% for %} loop - a trivial DoS for any
authenticated user, and one instance of the same "user text becomes
template source" pattern behind a previously-disclosed critical CVE
(GHSA-f35w-wx37-26q7), whose fix only added sandboxing without
removing the pattern itself.

Render through fixed, developer-authored templates instead, with the
user's text passed in as a plain variable. Verified byte-identical
output for legitimate prompts and confirmed the same payload that
used to be a DoS vector now renders as inert text in under a
millisecond.
---
 open_notebook/graphs/prompt.py         |  6 +++++-
 open_notebook/graphs/transformation.py | 14 ++++++++------
 prompts/pattern/generic.jinja          |  5 +++++
 prompts/transformation/execute.jinja   |  3 +++
 4 files changed, 21 insertions(+), 7 deletions(-)
 create mode 100644 prompts/pattern/generic.jinja
 create mode 100644 prompts/transformation/execute.jinja

diff --git a/open_notebook/graphs/prompt.py b/open_notebook/graphs/prompt.py
index cd80d10f..a38a4143 100644
--- a/open_notebook/graphs/prompt.py
+++ b/open_notebook/graphs/prompt.py
@@ -19,8 +19,12 @@ class PatternChainState(TypedDict):
 
 async def call_model(state: dict, config: RunnableConfig) -> dict:
     content = state["input_text"]
+    # state["prompt"] is caller-supplied free text. Never compile it as Jinja
+    # template *source* (Prompter(template_text=...)) - pass it as a plain
+    # render variable into a fixed, developer-authored template instead.
+    # See docs/7-DEVELOPMENT/security.md (GHSA-f35w-wx37-26q7).
     system_prompt = Prompter(
-        template_text=state["prompt"], parser=state.get("parser")
+        prompt_template="pattern/generic", parser=state.get("parser")
     ).render(data=state)
     payload = [SystemMessage(content=system_prompt)] + [HumanMessage(content=content)]
     chain = await provision_langchain_model(
diff --git a/open_notebook/graphs/transformation.py b/open_notebook/graphs/transformation.py
index 65bc5267..1eff8c6c 100644
--- a/open_notebook/graphs/transformation.py
+++ b/open_notebook/graphs/transformation.py
@@ -30,15 +30,17 @@ async def run_transformation(state: dict, config: RunnableConfig) -> dict:
     try:
         if not content:
             content = source.full_text
-        transformation_template_text = transformation.prompt
+        # transformation.prompt is user-controlled free text. Never compile it as
+        # Jinja template *source* (Prompter(template_text=...)) - pass it as a
+        # plain render variable into a fixed, developer-authored template instead.
+        # See docs/7-DEVELOPMENT/security.md (GHSA-f35w-wx37-26q7).
+        instructions = transformation.prompt
         default_prompts: DefaultPrompts = DefaultPrompts(transformation_instructions=None)
         if default_prompts.transformation_instructions:
-            transformation_template_text = f"{default_prompts.transformation_instructions}\n\n{transformation_template_text}"
+            instructions = f"{default_prompts.transformation_instructions}\n\n{instructions}"
 
-        transformation_template_text = f"{transformation_template_text}\n\n# INPUT"
-
-        system_prompt = Prompter(template_text=transformation_template_text).render(
-            data=state
+        system_prompt = Prompter(prompt_template="transformation/execute").render(
+            data={**state, "instructions": instructions}
         )
         content_str = str(content) if content else ""
         payload = [SystemMessage(content=system_prompt), HumanMessage(content=content_str)]
diff --git a/prompts/pattern/generic.jinja b/prompts/pattern/generic.jinja
new file mode 100644
index 00000000..b4b063c9
--- /dev/null
+++ b/prompts/pattern/generic.jinja
@@ -0,0 +1,5 @@
+{{ prompt }}
+{%- if format_instructions %}
+
+{{ format_instructions }}
+{%- endif %}
\ No newline at end of file
diff --git a/prompts/transformation/execute.jinja b/prompts/transformation/execute.jinja
new file mode 100644
index 00000000..a8310f54
--- /dev/null
+++ b/prompts/transformation/execute.jinja
@@ -0,0 +1,3 @@
+{{ instructions }}
+
+# INPUT
\ No newline at end of file

From 9045ea50196927eac7de647bb5b7009349236fb4 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:30:56 -0400
Subject: [PATCH 134/345] fix: add SSRF protection to source-URL ingestion
 (#1005)

POST /sources with type=link copied the user-supplied URL straight
into content-core's fetch with zero validation - unlike the
credential-URL path, which already blocks internal/metadata
addresses. Any user could make the server fetch cloud metadata
endpoints or scan the internal network via "add a web source".

Reuse the same validate_url() guard at the point the URL is first
accepted, before it's ever handed to content-core.
---
 api/routers/sources.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index 8dd3f0ec..1e424463 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -17,6 +17,7 @@ from loguru import logger
 from surreal_commands import execute_command_sync, submit_command
 
 from api.command_service import CommandService
+from api.credentials_service import validate_url
 from api.models import (
     AssetModel,
     CreateSourceInsightRequest,
@@ -360,6 +361,12 @@ async def create_source(
                 raise HTTPException(
                     status_code=400, detail="URL is required for link type"
                 )
+            # Block SSRF to internal/metadata addresses before the server ever
+            # fetches this URL (same guard used for provider-credential URLs).
+            try:
+                validate_url(source_data.url, "source")
+            except ValueError as e:
+                raise HTTPException(status_code=400, detail=str(e))
             content_state["url"] = source_data.url
         elif source_data.type == "upload":
             # Use uploaded file path or provided file_path (backward compatibility)

From 4be96d8d43e15f34f4816fd49f9b2897c17e2df4 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:32:04 -0400
Subject: [PATCH 135/345] fix: re-validate provider-credential URLs at request
 time, not just save time (#1006)

validate_url() only ran when a credential was created or updated. The
actual HTTP requests (connection testing, model discovery, and real
inference through Esperanto) re-resolve DNS fresh on every call, so a
hostname that resolved to a public IP at save time can later be
repointed to an internal or cloud-metadata address - a classic
DNS-rebinding TOCTOU that a one-time check can't catch.

Move validate_url() to open_notebook/utils so it can be re-run from
the AI layer without an api-depends-on-open_notebook layering
violation, and re-check immediately before every outbound request:
connection_tester's three providers, credential model discovery, and
ModelManager.get_model() on the real-inference path. Also close a
second gap in the same validator: it missed AWS's IPv6 metadata
address (fd00:ec2::254), which isn't link-local so the existing check
never caught it.
---
 api/credentials_service.py            | 119 ++---------------------
 open_notebook/ai/connection_tester.py |  16 ++++
 open_notebook/ai/models.py            |  34 +++++++
 open_notebook/utils/url_validation.py | 131 ++++++++++++++++++++++++++
 4 files changed, 190 insertions(+), 110 deletions(-)
 create mode 100644 open_notebook/utils/url_validation.py

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 6661d634..207e1f2d 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -7,11 +7,8 @@ Extracted from the credentials router to follow the service layer pattern.
 All functions raise ValueError for business errors (router converts to HTTPException).
 """
 
-import ipaddress
 import os
-import socket
 from typing import Dict, List, Optional
-from urllib.parse import urlparse
 
 import httpx
 from loguru import logger
@@ -21,6 +18,7 @@ from api.models import CredentialResponse
 from open_notebook.ai.model_discovery import classify_model_type
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
+from open_notebook.utils.url_validation import validate_url
 
 # =============================================================================
 # Constants
@@ -84,113 +82,6 @@ PROVIDER_MODALITIES: Dict[str, List[str]] = {
 }
 
 
-# =============================================================================
-# URL Validation (SSRF protection)
-# =============================================================================
-
-
-def validate_url(url: str, provider: str) -> None:
-    """
-    Validate URL format for API endpoints.
-
-    This is a self-hosted application, so we allow:
-    - Private IPs (10.x, 172.16-31.x, 192.168.x) for self-hosted services
-    - Localhost for local services (Ollama, LM Studio, etc.)
-
-    We only block:
-    - Invalid schemes (must be http or https)
-    - Malformed URLs
-    - Link-local addresses (169.254.x.x) - used for cloud metadata endpoints
-    - Hostnames that resolve to link-local addresses
-
-    Args:
-        url: The URL to validate
-        provider: The provider name (for logging/context)
-
-    Raises:
-        ValueError: If the URL is invalid
-    """
-    if not url or not url.strip():
-        return  # Empty URLs handled elsewhere
-
-    try:
-        parsed = urlparse(url.strip())
-
-        # Validate scheme - only http/https allowed
-        if parsed.scheme not in ("http", "https"):
-            raise ValueError(
-                f"Invalid URL scheme: '{parsed.scheme}'. Only http and https are allowed."
-            )
-
-        # Extract hostname
-        hostname = parsed.hostname
-        if not hostname:
-            raise ValueError("Invalid URL: hostname could not be determined.")
-
-        # Try to parse as IP address to check for dangerous addresses
-        try:
-            ip = ipaddress.ip_address(hostname)
-
-            # Block link-local addresses (169.254.x.x) - used for cloud metadata
-            # These are dangerous as they can expose cloud instance credentials
-            if ip.is_link_local:
-                raise ValueError(
-                    "Link-local addresses (169.254.x.x) are not allowed for security reasons. "
-                    "These addresses are used for cloud metadata endpoints."
-                )
-
-            # Block IPv4-mapped IPv6 addresses pointing to link-local
-            # e.g. ::ffff:169.254.169.254 bypasses IPv6 is_link_local check
-            if hasattr(ip, "ipv4_mapped") and ip.ipv4_mapped and ip.ipv4_mapped.is_link_local:
-                raise ValueError(
-                    "Link-local addresses (169.254.x.x) are not allowed for security reasons. "
-                    "These addresses are used for cloud metadata endpoints."
-                )
-
-        except ValueError as ve:
-            # Re-raise our own ValueErrors
-            if "Link-local" in str(ve) or "Invalid URL" in str(ve):
-                raise
-            # Not an IP address, it's a hostname - need to resolve and check
-            try:
-                # Resolve hostname to IP address
-                resolved_ips = socket.getaddrinfo(hostname, None)
-                for family, _, _, _, sockaddr in resolved_ips:
-                    ip_addr = sockaddr[0]
-                    try:
-                        parsed_ip = ipaddress.ip_address(ip_addr)
-                        if parsed_ip.is_link_local:
-                            raise ValueError(
-                                f"Hostname '{hostname}' resolves to a link-local address (169.254.x.x) which is not allowed for security reasons. "
-                                "These addresses are used for cloud metadata endpoints."
-                            )
-                        # Block IPv4-mapped IPv6 addresses pointing to link-local
-                        if (
-                            hasattr(parsed_ip, "ipv4_mapped")
-                            and parsed_ip.ipv4_mapped
-                            and parsed_ip.ipv4_mapped.is_link_local
-                        ):
-                            raise ValueError(
-                                f"Hostname '{hostname}' resolves to a link-local address (169.254.x.x) which is not allowed for security reasons. "
-                                "These addresses are used for cloud metadata endpoints."
-                            )
-                    except ValueError as inner_ve:
-                        if "link-local" in str(inner_ve).lower() or "Link-local" in str(inner_ve):
-                            raise
-                        # Skip non-IP addresses (e.g., IPv6 zones)
-                        continue
-            except socket.gaierror:
-                # Could not resolve hostname - allow it since the URL may be
-                # valid in the deployment environment (e.g., Azure endpoints,
-                # internal DNS names). We only block link-local addresses.
-                pass
-
-    except ValueError:
-        raise
-    except Exception:
-        raise ValueError("Invalid URL format. Check server logs for details.")
-
-
 # =============================================================================
 # Helpers
 # =============================================================================
@@ -541,6 +432,10 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     if provider == "ollama":
         ollama_url = base_url or "http://localhost:11434"
         try:
+            # Re-validate at request time: the base_url may have been saved
+            # against a hostname that only later resolved to an internal
+            # address (DNS rebinding).
+            validate_url(ollama_url, "ollama")
             async with httpx.AsyncClient() as client:
                 response = await client.get(f"{ollama_url}/api/tags", timeout=10.0)
                 response.raise_for_status()
@@ -562,6 +457,8 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         if not base_url:
             return []
         try:
+            # Re-validate at request time (see ollama branch above).
+            validate_url(base_url, "openai_compatible")
             headers = {}
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
@@ -588,6 +485,8 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         if not endpoint or not api_key:
             return []
         try:
+            # Re-validate at request time (see ollama branch above).
+            validate_url(endpoint, "azure")
             url = f"{endpoint.rstrip('/')}/openai/models?api-version={api_version}"
             headers = {"api-key": api_key}
             async with httpx.AsyncClient() as client:
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 3d358e79..f5ce027f 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -13,6 +13,8 @@ from typing import Optional, Tuple
 import httpx
 from loguru import logger
 
+from open_notebook.utils.url_validation import validate_url
+
 # Test models for each provider - uses minimal/cheapest models for testing
 # Format: (model_name, model_type)
 TEST_MODELS = {
@@ -61,6 +63,10 @@ async def _test_azure_connection(
     test_endpoint = test_endpoint.rstrip("/")
 
     try:
+        # Re-validate at request time: the endpoint may have been saved
+        # against a hostname that only later resolved to an internal
+        # address (DNS rebinding), so a save-time check alone isn't enough.
+        validate_url(test_endpoint, "azure")
         async with httpx.AsyncClient(timeout=10.0) as client:
             response = await client.get(
                 f"{test_endpoint}/openai/models?api-version={test_api_version}",
@@ -86,6 +92,8 @@ async def _test_azure_connection(
             else:
                 return False, f"Azure returned status {response.status_code}"
 
+    except ValueError as e:
+        return False, str(e)
     except httpx.ConnectError:
         return False, "Cannot connect to Azure endpoint. Check the URL."
     except httpx.TimeoutException:
@@ -97,6 +105,8 @@ async def _test_azure_connection(
 async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
     """Test Ollama server connectivity."""
     try:
+        # Re-validate at request time (see _test_azure_connection for why).
+        validate_url(base_url, "ollama")
         async with httpx.AsyncClient(timeout=10.0) as client:
             # Try /api/tags endpoint (standard Ollama)
             response = await client.get(f"{base_url}/api/tags")
@@ -121,6 +131,8 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
             else:
                 return False, f"Server returned status {response.status_code}"
 
+    except ValueError as e:
+        return False, str(e)
     except httpx.ConnectError:
         return False, "Cannot connect to Ollama. Check if Ollama server is running."
     except httpx.TimeoutException:
@@ -132,6 +144,8 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
 async def _test_openai_compatible_connection(base_url: str, api_key: Optional[str] = None) -> Tuple[bool, str]:
     """Test OpenAI-compatible server connectivity."""
     try:
+        # Re-validate at request time (see _test_azure_connection for why).
+        validate_url(base_url, "openai_compatible")
         headers = {}
         if api_key:
             headers["Authorization"] = f"Bearer {api_key}"
@@ -160,6 +174,8 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
             else:
                 return False, f"Server returned status {response.status_code}"
 
+    except ValueError as e:
+        return False, str(e)
     except httpx.ConnectError:
         return False, "Cannot connect to server. Check the URL is correct."
     except httpx.TimeoutException:
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 076340b0..960885a8 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -12,9 +12,42 @@ from loguru import logger
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel, RecordModel
 from open_notebook.exceptions import ConfigurationError
+from open_notebook.utils.url_validation import validate_url
 
 ModelType = Union[LanguageModel, EmbeddingModel, SpeechToTextModel, TextToSpeechModel]
 
+# Config keys from Credential.to_esperanto_config() that may carry a
+# user-configured URL (ollama/azure/openai_compatible/vertex).
+_URL_CONFIG_KEYS = (
+    "base_url",
+    "endpoint",
+    "endpoint_llm",
+    "endpoint_embedding",
+    "endpoint_stt",
+    "endpoint_tts",
+)
+
+
+def _revalidate_config_urls(config: dict, provider: str) -> None:
+    """
+    Re-validate a credential's URL fields immediately before they're used for
+    a real request.
+
+    validate_url() is also enforced when a credential is created/updated, but
+    that alone leaves a DNS-rebinding TOCTOU window: a hostname that resolved
+    to a public IP at save time can later be repointed to an internal/
+    metadata address, and Esperanto/httpx re-resolve DNS fresh on every
+    connection. Re-checking here narrows that window to "this call", instead
+    of "any time after the credential was saved".
+    """
+    for key in _URL_CONFIG_KEYS:
+        value = config.get(key)
+        if value:
+            try:
+                validate_url(value, provider)
+            except ValueError as e:
+                raise ConfigurationError(str(e)) from e
+
 
 class Model(ObjectModel):
     table_name: ClassVar[str] = "model"
@@ -123,6 +156,7 @@ class ModelManager:
             credential = await model.get_credential_obj()
             if credential:
                 config = credential.to_esperanto_config()
+                _revalidate_config_urls(config, model.provider)
                 logger.debug(
                     f"Using credential '{credential.name}' for model {model.name}"
                 )
diff --git a/open_notebook/utils/url_validation.py b/open_notebook/utils/url_validation.py
new file mode 100644
index 00000000..45e59a26
--- /dev/null
+++ b/open_notebook/utils/url_validation.py
@@ -0,0 +1,131 @@
+"""
+URL validation shared by the credentials API and the AI provisioning layer.
+
+Lives in open_notebook.utils (not api/) so it can be imported both by the API
+layer (credential create/update, source-URL ingestion) and by open_notebook's
+own AI layer (connection_tester.py, ModelManager) to re-validate a
+provider-configured URL immediately before it is actually used - closing most
+of the DNS-rebinding TOCTOU window left by validating only once, at save time.
+"""
+
+import ipaddress
+import socket
+from urllib.parse import urlparse
+
+# AWS's IMDSv6 metadata endpoint. Unlike the IPv4 metadata address
+# (169.254.169.254), this is a Unique Local Address, not link-local, so it is
+# not caught by ip.is_link_local and must be checked explicitly.
+_AWS_IMDS_V6_ADDRESS = ipaddress.ip_address("fd00:ec2::254")
+
+
+def validate_url(url: str, provider: str) -> None:
+    """
+    Validate URL format for API endpoints.
+
+    This is a self-hosted application, so we allow:
+    - Private IPs (10.x, 172.16-31.x, 192.168.x) for self-hosted services
+    - Localhost for local services (Ollama, LM Studio, etc.)
+
+    We only block:
+    - Invalid schemes (must be http or https)
+    - Malformed URLs
+    - Link-local addresses (169.254.x.x) - used for cloud metadata endpoints
+    - AWS's IPv6 metadata address (fd00:ec2::254)
+    - Hostnames that resolve to any of the above
+
+    Args:
+        url: The URL to validate
+        provider: The provider name (for logging/context)
+
+    Raises:
+        ValueError: If the URL is invalid
+    """
+    if not url or not url.strip():
+        return  # Empty URLs handled elsewhere
+
+    try:
+        parsed = urlparse(url.strip())
+
+        # Validate scheme - only http/https allowed
+        if parsed.scheme not in ("http", "https"):
+            raise ValueError(
+                f"Invalid URL scheme: '{parsed.scheme}'. Only http and https are allowed."
+            )
+
+        # Extract hostname
+        hostname = parsed.hostname
+        if not hostname:
+            raise ValueError("Invalid URL: hostname could not be determined.")
+
+        # Try to parse as IP address to check for dangerous addresses
+        try:
+            ip = ipaddress.ip_address(hostname)
+            _reject_dangerous_ip(ip, hostname)
+
+        except ValueError as ve:
+            # Re-raise our own ValueErrors
+            if "Link-local" in str(ve) or "Invalid URL" in str(ve) or "metadata" in str(ve):
+                raise
+            # Not an IP address, it's a hostname - need to resolve and check
+            try:
+                # Resolve hostname to IP address
+                resolved_ips = socket.getaddrinfo(hostname, None)
+                for family, _, _, _, sockaddr in resolved_ips:
+                    ip_addr = sockaddr[0]
+                    try:
+                        parsed_ip = ipaddress.ip_address(ip_addr)
+                        _reject_dangerous_ip(parsed_ip, hostname, resolved=True)
+                    except ValueError as inner_ve:
+                        if "link-local" in str(inner_ve).lower() or "metadata" in str(inner_ve).lower():
+                            raise
+                        # Skip non-IP addresses (e.g., IPv6 zones)
+                        continue
+            except socket.gaierror:
+                # Could not resolve hostname - allow it since the URL may be
+                # valid in the deployment environment (e.g., Azure endpoints,
+                # internal DNS names). We only block link-local addresses.
+                pass
+
+    except ValueError:
+        raise
+    except Exception:
+        raise ValueError("Invalid URL format. Check server logs for details.")
+
+
+def _reject_dangerous_ip(
+    ip: "ipaddress.IPv4Address | ipaddress.IPv6Address",
+    hostname: str,
+    resolved: bool = False,
+) -> None:
+    """Raise ValueError if `ip` is a link-local or cloud-metadata address."""
+    is_ipv4_mapped_link_local = (
+        hasattr(ip, "ipv4_mapped") and ip.ipv4_mapped and ip.ipv4_mapped.is_link_local
+    )
+
+    # Block link-local addresses (169.254.x.x / fe80::/10) - used for cloud
+    # metadata - including IPv4-mapped IPv6 addresses pointing to link-local
+    # (e.g. ::ffff:169.254.169.254 bypasses IPv6 is_link_local check).
+    if ip.is_link_local or is_ipv4_mapped_link_local:
+        if resolved:
+            raise ValueError(
+                f"Hostname '{hostname}' resolves to a link-local address (169.254.x.x) "
+                "which is not allowed for security reasons. These addresses are used "
+                "for cloud metadata endpoints."
+            )
+        raise ValueError(
+            "Link-local addresses (169.254.x.x) are not allowed for security reasons. "
+            "These addresses are used for cloud metadata endpoints."
+        )
+
+    # Block AWS's IMDSv6 metadata address - a Unique Local Address, not
+    # link-local, so it needs its own explicit check.
+    if ip == _AWS_IMDS_V6_ADDRESS:
+        if resolved:
+            raise ValueError(
+                f"Hostname '{hostname}' resolves to the AWS IMDSv6 metadata address "
+                "(fd00:ec2::254), which is not allowed for security reasons."
+            )
+        raise ValueError(
+            "The AWS IMDSv6 metadata address (fd00:ec2::254) is not allowed for "
+            "security reasons."
+        )

From 7f744f62d5285d8bf1402f18b543ab97157d69d8 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:36:13 -0400
Subject: [PATCH 136/345] fix: batch source-insight lookups when building
 notebook/chat context (#1008)

Building default chat context, the notebook context endpoint, and
podcast generation all looped over every source in a notebook calling
get_context() -> get_insights(), each a separate query that also pays
its own connection setup (no pooling). A notebook with hundreds of
sources meant hundreds of serialized round trips before a chat
message even reached the LLM.

Add SourceInsight.get_for_sources() to fetch insights for every
source in one query, and thread an optional pre-fetched insights list
through Source.get_context() so callers can opt in without changing
its behavior for anyone who doesn't. Measured against a real
(embedded) SurrealDB instance: 14 queries down to 3 for a 12-source
notebook, with correctness verified. The two router call sites treat
a batch-fetch failure the same way the old per-source loop treated a
single failure - falls back to empty insights rather than failing the
whole request.
---
 api/routers/chat.py              | 22 +++++++++++++--
 api/routers/context.py           | 16 +++++++++--
 open_notebook/domain/notebook.py | 48 +++++++++++++++++++++++++++++---
 tests/test_domain.py             | 32 +++++++++++++++------
 4 files changed, 102 insertions(+), 16 deletions(-)

diff --git a/api/routers/chat.py b/api/routers/chat.py
index 103e0aa2..459c8d61 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -8,7 +8,13 @@ from loguru import logger
 from pydantic import BaseModel, Field
 
 from open_notebook.database.repository import ensure_record_id, repo_query
-from open_notebook.domain.notebook import ChatSession, Note, Notebook, Source
+from open_notebook.domain.notebook import (
+    ChatSession,
+    Note,
+    Notebook,
+    Source,
+    SourceInsight,
+)
 from open_notebook.exceptions import (
     NotFoundError,
 )
@@ -490,9 +496,21 @@ async def build_context(request: BuildContextRequest):
         else:
             # Default behavior - include all sources and notes with short context
             sources = await notebook.get_sources()
+            try:
+                insights_by_source = await SourceInsight.get_for_sources(
+                    [source.id for source in sources if source.id]
+                )
+            except Exception as e:
+                # Match the per-source fallback below: a hiccup fetching
+                # insights shouldn't fail the whole context request.
+                logger.warning(f"Error batch-fetching source insights: {str(e)}")
+                insights_by_source = {}
             for source in sources:
                 try:
-                    source_context = await source.get_context(context_size="short")
+                    source_context = await source.get_context(
+                        context_size="short",
+                        insights=insights_by_source.get(source.id or "", []),
+                    )
                     context_data["sources"].append(source_context)
                     total_content += str(source_context)
                 except Exception as e:
diff --git a/api/routers/context.py b/api/routers/context.py
index 92dd723b..ce4d74a1 100644
--- a/api/routers/context.py
+++ b/api/routers/context.py
@@ -2,7 +2,7 @@ from fastapi import APIRouter, HTTPException
 from loguru import logger
 
 from api.models import ContextRequest, ContextResponse
-from open_notebook.domain.notebook import Note, Notebook, Source
+from open_notebook.domain.notebook import Note, Notebook, Source, SourceInsight
 from open_notebook.exceptions import InvalidInputError
 from open_notebook.utils import token_count
 
@@ -77,9 +77,21 @@ async def get_notebook_context(notebook_id: str, context_request: ContextRequest
         else:
             # Default behavior - include all sources and notes with short context
             sources = await notebook.get_sources()
+            try:
+                insights_by_source = await SourceInsight.get_for_sources(
+                    [source.id for source in sources if source.id]
+                )
+            except Exception as e:
+                # Match the per-source fallback below: a hiccup fetching
+                # insights shouldn't fail the whole context request.
+                logger.warning(f"Error batch-fetching source insights: {str(e)}")
+                insights_by_source = {}
             for source in sources:
                 try:
-                    source_context = await source.get_context(context_size="short")
+                    source_context = await source.get_context(
+                        context_size="short",
+                        insights=insights_by_source.get(source.id or "", []),
+                    )
                     context_data["source"].append(source_context)
                     total_content += str(source_context)
                 except Exception as e:
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 1025247b..ea615b78 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -79,8 +79,14 @@ class Notebook(ObjectModel):
         notes = await self.get_notes(include_content=True)
         context_blocks = []
 
+        insights_by_source = await SourceInsight.get_for_sources(
+            [source.id for source in sources if source.id]
+        )
         for source in sources:
-            source_context = await source.get_context(context_size="long")
+            source_context = await source.get_context(
+                context_size="long",
+                insights=insights_by_source.get(source.id or "", []),
+            )
             if isinstance(source_context, dict):
                 title = source_context.get("title") or source.title or "Untitled source"
                 full_text = source_context.get("full_text")
@@ -327,6 +333,35 @@ class SourceInsight(ObjectModel):
     insight_type: str
     content: str
 
+    @classmethod
+    async def get_for_sources(
+        cls, source_ids: List[str]
+    ) -> Dict[str, List["SourceInsight"]]:
+        """
+        Batch-fetch insights for many sources in a single query.
+
+        Building notebook/chat context otherwise calls get_insights() once
+        per source - fine for one source, but O(n) round trips (each paying
+        its own connection setup, see database/CLAUDE.md) when a caller
+        loops over every source in a notebook.
+        """
+        grouped: Dict[str, List[SourceInsight]] = {sid: [] for sid in source_ids if sid}
+        if not grouped:
+            return grouped
+        try:
+            result = await repo_query(
+                "SELECT * FROM source_insight WHERE source IN $source_ids",
+                {"source_ids": [ensure_record_id(sid) for sid in grouped]},
+            )
+        except Exception as e:
+            logger.error(f"Error batch-fetching insights for sources: {str(e)}")
+            logger.exception(e)
+            raise DatabaseOperationError("Failed to fetch insights for sources")
+        for row in result:
+            key = str(row.get("source"))
+            grouped.setdefault(key, []).append(cls(**row))
+        return grouped
+
     async def get_source(self) -> "Source":
         try:
             src = await repo_query(
@@ -428,10 +463,15 @@ class Source(ObjectModel):
             return None
 
     async def get_context(
-        self, context_size: Literal["short", "long"] = "short"
+        self,
+        context_size: Literal["short", "long"] = "short",
+        insights: Optional[List["SourceInsight"]] = None,
     ) -> Dict[str, Any]:
-        insights_list = await self.get_insights()
-        insights = [insight.model_dump() for insight in insights_list]
+        # Callers looping over many sources can batch-fetch insights up front
+        # via SourceInsight.get_for_sources() and pass them in here, instead
+        # of paying a separate query per source.
+        insight_objects = insights if insights is not None else await self.get_insights()
+        insights = [insight.model_dump() for insight in insight_objects]
         if context_size == "long":
             return dict(
                 id=self.id,
diff --git a/tests/test_domain.py b/tests/test_domain.py
index 0f6e61aa..b3062728 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -18,7 +18,13 @@ from api.podcast_service import PodcastService
 from open_notebook.ai.models import ModelManager
 from open_notebook.domain.base import RecordModel
 from open_notebook.domain.content_settings import ContentSettings
-from open_notebook.domain.notebook import Asset, Note, Notebook, Source
+from open_notebook.domain.notebook import (
+    Asset,
+    Note,
+    Notebook,
+    Source,
+    SourceInsight,
+)
 from open_notebook.domain.transformation import Transformation
 from open_notebook.exceptions import InvalidInputError
 from open_notebook.podcasts.models import EpisodeProfile, SpeakerProfile
@@ -127,13 +133,15 @@ class TestNotebookDomain:
         async def fake_get_notes(self, include_content=False):
             return []
 
-        async def fake_get_insights(self):
-            return []
+        async def fake_get_for_sources(cls, source_ids):
+            return {sid: [] for sid in source_ids}
 
         with (
             patch.object(Notebook, "get_sources", new=fake_get_sources),
             patch.object(Notebook, "get_notes", new=fake_get_notes),
-            patch.object(Source, "get_insights", new=fake_get_insights),
+            patch.object(
+                SourceInsight, "get_for_sources", new=classmethod(fake_get_for_sources)
+            ),
         ):
             context = await notebook.get_context()
 
@@ -203,12 +211,18 @@ class TestNotebookDomain:
         async def fake_get_notes(self, include_content=False):
             return []
 
-        async def fake_get_context(self, context_size="short"):
+        async def fake_get_for_sources(cls, source_ids):
+            return {sid: [] for sid in source_ids}
+
+        async def fake_get_context(self, context_size="short", insights=None):
             raise RuntimeError("source context failed")
 
         with (
             patch.object(Notebook, "get_sources", new=fake_get_sources),
             patch.object(Notebook, "get_notes", new=fake_get_notes),
+            patch.object(
+                SourceInsight, "get_for_sources", new=classmethod(fake_get_for_sources)
+            ),
             patch.object(Source, "get_context", new=fake_get_context),
         ):
             with pytest.raises(RuntimeError, match="source context failed"):
@@ -477,8 +491,8 @@ class TestPodcastService:
         async def fake_get_notes(self, include_content=False):
             return []
 
-        async def fake_get_insights(self):
-            return []
+        async def fake_get_for_sources(cls, source_ids):
+            return {sid: [] for sid in source_ids}
 
         def fake_submit_command(app_name, command_name, command_args):
             submitted_args.update(command_args)
@@ -501,7 +515,9 @@ class TestPodcastService:
             patch.object(Notebook, "get", new=AsyncMock(return_value=notebook)),
             patch.object(Notebook, "get_sources", new=fake_get_sources),
             patch.object(Notebook, "get_notes", new=fake_get_notes),
-            patch.object(Source, "get_insights", new=fake_get_insights),
+            patch.object(
+                SourceInsight, "get_for_sources", new=classmethod(fake_get_for_sources)
+            ),
             patch("api.podcast_service.submit_command", new=fake_submit_command),
             patch.dict(
                 sys.modules, {"commands.podcast_commands": fake_commands_module}

From 832b814e7ba1995bfd7b08907655c2b4d89200c4 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:37:07 -0400
Subject: [PATCH 137/345] fix: run file upload writes off the event loop
 (#1009)

save_uploaded_file() did a plain synchronous open()/write() directly
in the async create_source handler, blocking the event loop - and
every other concurrent request - for the duration of a large upload.
Same bug class the recent chat-graph fix (#971) addressed, just not
applied here.

Move the filesystem work (filename resolution + write) into a sync
helper run via asyncio.to_thread(), matching the pattern already used
for execute_command_sync elsewhere in this file. Confirmed the event
loop stays responsive (ticking normally) during a simulated slow
write, and that errors/cleanup still propagate correctly through the
thread.
---
 api/routers/sources.py | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index 1e424463..1e475629 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -97,18 +97,12 @@ def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
         counter += 1
 
 
-async def save_uploaded_file(upload_file: UploadFile) -> str:
-    """Save uploaded file to uploads folder and return file path."""
-    if not upload_file.filename:
-        raise ValueError("No filename provided")
-
-    # Generate unique filename
-    file_path = generate_unique_filename(upload_file.filename, UPLOADS_FOLDER)
-
+def _write_uploaded_file(filename: str, content: bytes) -> str:
+    """Sync filesystem work for save_uploaded_file() - run via asyncio.to_thread
+    so a large upload doesn't block the event loop for other requests."""
+    file_path = generate_unique_filename(filename, UPLOADS_FOLDER)
     try:
-        # Save file
         with open(file_path, "wb") as f:
-            content = await upload_file.read()
             f.write(content)
 
         logger.info(f"Saved uploaded file to: {file_path}")
@@ -121,6 +115,15 @@ async def save_uploaded_file(upload_file: UploadFile) -> str:
         raise
 
 
+async def save_uploaded_file(upload_file: UploadFile) -> str:
+    """Save uploaded file to uploads folder and return file path."""
+    if not upload_file.filename:
+        raise ValueError("No filename provided")
+
+    content = await upload_file.read()
+    return await asyncio.to_thread(_write_uploaded_file, upload_file.filename, content)
+
+
 def parse_source_form_data(
     type: str = Form(...),
     notebook_id: Optional[str] = Form(None),

From 58ce1dd5d025c3c7007a90f9be7964a791b8da71 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 09:43:36 -0400
Subject: [PATCH 138/345] fix: make validate_url() async so DNS resolution
 doesn't block the event loop (#1011)

* fix: sanitize raw HTML in the note/transformation markdown preview

MarkdownEditor's live preview renders through @uiw/react-markdown-
preview, which parses literal HTML in the markdown source into real
elements (its `raw` default) - including a live <iframe>. Notes can
hold AI-generated content that echoes an indirect prompt injection
from an ingested document, so this was reachable without the user
writing any HTML themselves.

Add rehype-sanitize (default schema) ahead of rehype-katex in the
preview pipeline. Ordering matters: sanitizing after katex strips
katex's own generated markup (not in the default allowlist), while
sanitizing before it only touches the raw-HTML-derived tree and
leaves not-yet-rendered math nodes alone. Verified against the real
preview component that this strips <iframe>/<script>/<style>/
javascript: URLs while fully preserving math, syntax highlighting,
and GFM tables/task-lists.

* fix: make validate_url() async so DNS resolution doesn't block the event loop

socket.getaddrinfo() in validate_url()'s hostname-resolution branch ran
synchronously on every call - and this is called on the hot path of model
provisioning, potentially once per chat message/transformation. A slow or
hanging DNS lookup stalled every other concurrent request, not just the
one that triggered it.

Run the resolution via asyncio.to_thread() instead, and thread `await`
through every call site: credentials_service.py's discover functions,
routers/credentials.py's create/update, routers/sources.py's source-URL
ingestion, and connection_tester.py's three provider test functions.
---
 api/CLAUDE.md                                 |   2 +-
 api/credentials_service.py                    |   6 +-
 api/routers/credentials.py                    |   4 +-
 api/routers/sources.py                        |   2 +-
 frontend/package-lock.json                    |  30 ++++++
 frontend/package.json                         |   1 +
 .../components/ui/markdown-editor.test.tsx    |  74 +++++++++++++
 .../src/components/ui/markdown-editor.tsx     |  14 ++-
 frontend/vitest.config.ts                     |   8 ++
 open_notebook/ai/connection_tester.py         |   6 +-
 open_notebook/ai/models.py                    |   6 +-
 open_notebook/utils/url_validation.py         |  11 +-
 tests/test_url_validation.py                  | 101 ++++++++++--------
 13 files changed, 200 insertions(+), 65 deletions(-)
 create mode 100644 frontend/src/components/ui/markdown-editor.test.tsx

diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index 8e17a5da..1c0efda5 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -178,7 +178,7 @@ The Credential Management system enables users to configure AI provider credenti
 
 **Security Features**:
 - NEVER returns actual API key values (only metadata)
-- URL validation (SSRF protection) on all URL fields via `_validate_url()`
+- URL validation (SSRF protection) on all URL fields via `validate_url()` (`open_notebook/utils/url_validation.py`) - async, since hostname resolution runs `socket.getaddrinfo()` via `asyncio.to_thread` rather than blocking the event loop
 - Allows private IPs and localhost for self-hosted services (Ollama, LM Studio)
 - Requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` to be set for storing credentials
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 207e1f2d..2d75599f 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -435,7 +435,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             # Re-validate at request time: the base_url may have been saved
             # against a hostname that only later resolved to an internal
             # address (DNS rebinding).
-            validate_url(ollama_url, "ollama")
+            await validate_url(ollama_url, "ollama")
             async with httpx.AsyncClient() as client:
                 response = await client.get(f"{ollama_url}/api/tags", timeout=10.0)
                 response.raise_for_status()
@@ -458,7 +458,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             return []
         try:
             # Re-validate at request time (see ollama branch above).
-            validate_url(base_url, "openai_compatible")
+            await validate_url(base_url, "openai_compatible")
             headers = {}
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
@@ -486,7 +486,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             return []
         try:
             # Re-validate at request time (see ollama branch above).
-            validate_url(endpoint, "azure")
+            await validate_url(endpoint, "azure")
             url = f"{endpoint.rstrip('/')}/openai/models?api-version={api_version}"
             headers = {"api-key": api_key}
             async with httpx.AsyncClient() as client:
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index cc2524d6..94838eb2 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -152,7 +152,7 @@ async def create_credential(request: CreateCredentialRequest):
     ]:
         if url_field:
             try:
-                validate_url(url_field, request.provider)
+                await validate_url(url_field, request.provider)
             except ValueError as e:
                 raise _handle_value_error(e)
 
@@ -209,7 +209,7 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
     ]:
         if url_field:
             try:
-                validate_url(url_field, "update")
+                await validate_url(url_field, "update")
             except ValueError as e:
                 raise _handle_value_error(e)
 
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 1e475629..1ef25c01 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -367,7 +367,7 @@ async def create_source(
             # Block SSRF to internal/metadata addresses before the server ever
             # fetches this URL (same guard used for provider-credential URLs).
             try:
-                validate_url(source_data.url, "source")
+                await validate_url(source_data.url, "source")
             except ValueError as e:
                 raise HTTPException(status_code=400, detail=str(e))
             content_state["url"] = source_data.url
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index c8d0074d..ecfbec1a 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -48,6 +48,7 @@
         "react-markdown": "^10.1.0",
         "react-syntax-highlighter": "^16.1.1",
         "rehype-katex": "^7.0.1",
+        "rehype-sanitize": "^6.0.0",
         "remark-gfm": "^4.0.1",
         "remark-math": "^6.0.0",
         "sonner": "^2.0.6",
@@ -7483,6 +7484,21 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/hast-util-sanitize": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/hast-util-sanitize/-/hast-util-sanitize-5.0.2.tgz",
+      "integrity": "sha512-3yTWghByc50aGS7JlGhk61SPenfE/p1oaFeNwkOOyrscaOkMGrcW9+Cy/QAIOBpZxP1yqDIzFMR0+Np0i0+usg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "@ungap/structured-clone": "^1.0.0",
+        "unist-util-position": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/hast-util-select": {
       "version": "6.0.4",
       "resolved": "https://registry.npmjs.org/hast-util-select/-/hast-util-select-6.0.4.tgz",
@@ -10929,6 +10945,20 @@
         "url": "https://jaywcjlove.github.io/#/sponsor"
       }
     },
+    "node_modules/rehype-sanitize": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/rehype-sanitize/-/rehype-sanitize-6.0.0.tgz",
+      "integrity": "sha512-CsnhKNsyI8Tub6L4sm5ZFsme4puGfc6pYylvXo1AeqaGbjOYyzNv3qZPwvs0oMJ39eryyeOdmxwUIo94IpEhqg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/hast": "^3.0.0",
+        "hast-util-sanitize": "^5.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/unified"
+      }
+    },
     "node_modules/rehype-slug": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/rehype-slug/-/rehype-slug-6.0.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 87d7105b..4ebe8b09 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -53,6 +53,7 @@
     "react-markdown": "^10.1.0",
     "react-syntax-highlighter": "^16.1.1",
     "rehype-katex": "^7.0.1",
+    "rehype-sanitize": "^6.0.0",
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
     "sonner": "^2.0.6",
diff --git a/frontend/src/components/ui/markdown-editor.test.tsx b/frontend/src/components/ui/markdown-editor.test.tsx
new file mode 100644
index 00000000..4dabeabb
--- /dev/null
+++ b/frontend/src/components/ui/markdown-editor.test.tsx
@@ -0,0 +1,74 @@
+import { describe, it, expect } from 'vitest'
+import { render } from '@testing-library/react'
+import MarkdownPreview from '@uiw/react-markdown-preview'
+
+import { PREVIEW_OPTIONS } from './markdown-editor'
+
+// MarkdownEditor's live preview renders through @uiw/react-markdown-preview,
+// which parses raw HTML in the markdown source into real elements (its `raw`
+// default). Notes can hold AI-generated content that echoes an indirect
+// prompt injection, so anything rendered here must not let that raw HTML
+// become a live <iframe>/<script>/<style>/javascript: URL - while still
+// preserving math, syntax highlighting, and GFM, which are real features.
+// These tests exercise the actual PREVIEW_OPTIONS MarkdownEditor uses, via
+// the same underlying preview component, rather than a hand-rolled pipeline.
+function renderPreview(source: string) {
+  return render(
+    <MarkdownPreview
+      source={source}
+      remarkPlugins={PREVIEW_OPTIONS.remarkPlugins}
+      rehypePlugins={PREVIEW_OPTIONS.rehypePlugins}
+    />
+  )
+}
+
+describe('MarkdownEditor preview sanitization', () => {
+  it('strips a raw <iframe> to a live, embeddable element', () => {
+    const { container } = renderPreview('before <iframe src="https://evil.example"></iframe> after')
+    expect(container.querySelector('iframe')).toBeNull()
+    expect(container.innerHTML).not.toContain('evil.example')
+  })
+
+  it('strips raw <script> content', () => {
+    const { container } = renderPreview('before <script>window.__pwned = true</script> after')
+    expect(container.innerHTML).not.toContain('__pwned')
+  })
+
+  it('strips a raw <style> element (CSS-based UI redress)', () => {
+    // The style tag itself must not survive as a live element - its text
+    // content becoming inert prose (rather than a stylesheet) is fine.
+    const { container } = renderPreview('before <style>body{display:none}</style> after')
+    expect(container.querySelector('style')).toBeNull()
+  })
+
+  it('strips javascript: URLs from links', () => {
+    const { container } = renderPreview('[click me](javascript:alert(1))')
+    const link = container.querySelector('a')
+    expect(link?.getAttribute('href') ?? '').not.toContain('javascript:')
+  })
+
+  it('does not execute inline event-handler attributes on parsed raw elements', () => {
+    const { container } = renderPreview('<img src="x" onerror="window.__pwned = true">')
+    expect(container.innerHTML).not.toContain('onerror')
+  })
+
+  it('still renders KaTeX math with its classes and MathML intact', () => {
+    const { container } = renderPreview('Inline math $x^2 + y^2 = z^2$')
+    expect(container.querySelector('.katex')).not.toBeNull()
+    expect(container.querySelector('.katex-mathml math')).not.toBeNull()
+  })
+
+  it('still syntax-highlights fenced code blocks', () => {
+    const { container } = renderPreview('```python\ndef hello():\n    return 42\n```')
+    expect(container.querySelectorAll('span[class*="token"]').length).toBeGreaterThan(0)
+  })
+
+  it('still renders GFM tables, task lists, and safe links', () => {
+    const { container } = renderPreview(
+      '| a | b |\n|---|---|\n| 1 | 2 |\n\n- [x] done\n- [ ] todo\n\n[a link](https://example.com)'
+    )
+    expect(container.querySelector('table')).not.toBeNull()
+    expect(container.querySelectorAll('input[type="checkbox"]').length).toBe(2)
+    expect(container.querySelector('a')?.getAttribute('href')).toBe('https://example.com')
+  })
+})
diff --git a/frontend/src/components/ui/markdown-editor.tsx b/frontend/src/components/ui/markdown-editor.tsx
index 4d258283..0836036d 100644
--- a/frontend/src/components/ui/markdown-editor.tsx
+++ b/frontend/src/components/ui/markdown-editor.tsx
@@ -4,6 +4,7 @@ import dynamic from 'next/dynamic'
 import { forwardRef } from 'react'
 import remarkMath from 'remark-math'
 import rehypeKatex from 'rehype-katex'
+import rehypeSanitize from 'rehype-sanitize'
 
 const MDEditor = dynamic(
   () => import('@uiw/react-md-editor').then((mod) => mod.default),
@@ -14,9 +15,18 @@ const MDEditor = dynamic(
 // concatenates these with its defaults (gfm, prism, raw), so syntax
 // highlighting and GFM are preserved. KaTeX CSS is loaded globally in
 // app/layout.tsx.
-const PREVIEW_OPTIONS = {
+//
+// The library's own `raw` default lets literal HTML in the markdown source
+// (e.g. pasted content, or an AI-generated note echoing an indirect prompt
+// injection) render as live elements - notably a real <iframe>, not just
+// inert text. rehypeSanitize (default schema) strips that down to safe
+// HTML. It must run *before* rehypeKatex: katex's own generated markup
+// (katex-html spans, MathML) isn't in the default sanitize schema and gets
+// stripped if sanitize runs after it - order here is load-bearing, verified
+// against the actual rendered output for math/code/GFM before changing it.
+export const PREVIEW_OPTIONS = {
   remarkPlugins: [remarkMath],
-  rehypePlugins: [rehypeKatex],
+  rehypePlugins: [rehypeSanitize, rehypeKatex],
 }
 
 export interface MarkdownEditorProps {
diff --git a/frontend/vitest.config.ts b/frontend/vitest.config.ts
index ea285a3a..449db414 100644
--- a/frontend/vitest.config.ts
+++ b/frontend/vitest.config.ts
@@ -4,9 +4,17 @@ import path from 'path'
 
 export default defineConfig({
   plugins: [react()],
+  // jsdom doesn't paint, so tests never need real CSS/style computation - and
+  // without this, importing a component that bundles its own .css (e.g.
+  // @uiw/react-markdown-preview) fails to resolve this project's Tailwind v4
+  // postcss.config.mjs (string-form plugin list) outside of Next.js's own
+  // build pipeline. `test.css: false` alone doesn't prevent Vite from trying
+  // to resolve the postcss config; this bypasses it outright.
+  css: { postcss: { plugins: [] } },
   test: {
     environment: 'jsdom',
     globals: true,
+    css: false,
     setupFiles: ['./src/test/setup.ts'],
     alias: {
       '@': path.resolve(__dirname, './src')
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index f5ce027f..b33d65ba 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -66,7 +66,7 @@ async def _test_azure_connection(
         # Re-validate at request time: the endpoint may have been saved
         # against a hostname that only later resolved to an internal
         # address (DNS rebinding), so a save-time check alone isn't enough.
-        validate_url(test_endpoint, "azure")
+        await validate_url(test_endpoint, "azure")
         async with httpx.AsyncClient(timeout=10.0) as client:
             response = await client.get(
                 f"{test_endpoint}/openai/models?api-version={test_api_version}",
@@ -106,7 +106,7 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
     """Test Ollama server connectivity."""
     try:
         # Re-validate at request time (see _test_azure_connection for why).
-        validate_url(base_url, "ollama")
+        await validate_url(base_url, "ollama")
         async with httpx.AsyncClient(timeout=10.0) as client:
             # Try /api/tags endpoint (standard Ollama)
             response = await client.get(f"{base_url}/api/tags")
@@ -145,7 +145,7 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
     """Test OpenAI-compatible server connectivity."""
     try:
         # Re-validate at request time (see _test_azure_connection for why).
-        validate_url(base_url, "openai_compatible")
+        await validate_url(base_url, "openai_compatible")
         headers = {}
         if api_key:
             headers["Authorization"] = f"Bearer {api_key}"
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 960885a8..9d4d9ee9 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -28,7 +28,7 @@ _URL_CONFIG_KEYS = (
 )
 
 
-def _revalidate_config_urls(config: dict, provider: str) -> None:
+async def _revalidate_config_urls(config: dict, provider: str) -> None:
     """
     Re-validate a credential's URL fields immediately before they're used for
     a real request.
@@ -44,7 +44,7 @@ def _revalidate_config_urls(config: dict, provider: str) -> None:
         value = config.get(key)
         if value:
             try:
-                validate_url(value, provider)
+                await validate_url(value, provider)
             except ValueError as e:
                 raise ConfigurationError(str(e)) from e
 
@@ -156,7 +156,7 @@ class ModelManager:
             credential = await model.get_credential_obj()
             if credential:
                 config = credential.to_esperanto_config()
-                _revalidate_config_urls(config, model.provider)
+                await _revalidate_config_urls(config, model.provider)
                 logger.debug(
                     f"Using credential '{credential.name}' for model {model.name}"
                 )
diff --git a/open_notebook/utils/url_validation.py b/open_notebook/utils/url_validation.py
index 45e59a26..f3bd73ca 100644
--- a/open_notebook/utils/url_validation.py
+++ b/open_notebook/utils/url_validation.py
@@ -8,6 +8,7 @@ provider-configured URL immediately before it is actually used - closing most
 of the DNS-rebinding TOCTOU window left by validating only once, at save time.
 """
 
+import asyncio
 import ipaddress
 import socket
 from urllib.parse import urlparse
@@ -18,7 +19,7 @@ from urllib.parse import urlparse
 _AWS_IMDS_V6_ADDRESS = ipaddress.ip_address("fd00:ec2::254")
 
 
-def validate_url(url: str, provider: str) -> None:
+async def validate_url(url: str, provider: str) -> None:
     """
     Validate URL format for API endpoints.
 
@@ -68,8 +69,12 @@ def validate_url(url: str, provider: str) -> None:
                 raise
             # Not an IP address, it's a hostname - need to resolve and check
             try:
-                # Resolve hostname to IP address
-                resolved_ips = socket.getaddrinfo(hostname, None)
+                # Resolve hostname to IP address. This is a blocking call -
+                # run it off the event loop so a slow/hanging DNS lookup
+                # doesn't stall every other concurrent request (this is
+                # called on the hot path of model provisioning, potentially
+                # once per chat message/transformation).
+                resolved_ips = await asyncio.to_thread(socket.getaddrinfo, hostname, None)
                 for family, _, _, _, sockaddr in resolved_ips:
                     ip_addr = sockaddr[0]
                     try:
diff --git a/tests/test_url_validation.py b/tests/test_url_validation.py
index 843c70bf..59b8a71f 100644
--- a/tests/test_url_validation.py
+++ b/tests/test_url_validation.py
@@ -9,122 +9,129 @@ It only blocks:
 
 Localhost and private IPs are ALLOWED because this is a self-hosted application
 where users commonly run local services (Ollama, LM Studio, etc.).
+
+validate_url() is async (the hostname-resolution branch runs
+socket.getaddrinfo() via asyncio.to_thread so it doesn't block the event
+loop - see open_notebook/utils/url_validation.py), so every test here is
+async too.
 """
 
 import pytest
 
 from api.credentials_service import validate_url
 
+pytestmark = pytest.mark.asyncio
+
 
 class TestUrlValidation:
     """Test suite for URL validation to prevent SSRF attacks."""
 
-    def test_valid_https_url(self):
+    async def test_valid_https_url(self):
         """Valid HTTPS URLs should pass."""
-        validate_url("https://api.openai.com", "openai")
-        validate_url("https://example.com/api", "anthropic")
+        await validate_url("https://api.openai.com", "openai")
+        await validate_url("https://example.com/api", "anthropic")
         # Should not raise
 
-    def test_valid_http_url(self):
+    async def test_valid_http_url(self):
         """Valid HTTP URLs should pass."""
-        validate_url("http://example.com", "openai")
+        await validate_url("http://example.com", "openai")
         # Should not raise
 
-    def test_invalid_scheme(self):
+    async def test_invalid_scheme(self):
         """URLs with invalid schemes should be rejected."""
         with pytest.raises(ValueError, match="Invalid URL scheme"):
-            validate_url("ftp://example.com", "openai")
+            await validate_url("ftp://example.com", "openai")
 
         with pytest.raises(ValueError, match="Invalid URL scheme"):
-            validate_url("file:///etc/passwd", "openai")
+            await validate_url("file:///etc/passwd", "openai")
 
-    def test_localhost_allowed_for_self_hosted(self):
+    async def test_localhost_allowed_for_self_hosted(self):
         """Localhost should be allowed for self-hosted services."""
         # This is a self-hosted app, localhost is valid for local services
-        validate_url("http://localhost:8000", "openai")
-        validate_url("http://127.0.0.1:8000", "azure")
+        await validate_url("http://localhost:8000", "openai")
+        await validate_url("http://127.0.0.1:8000", "azure")
         # Should not raise
 
-    def test_localhost_allowed_for_ollama(self):
+    async def test_localhost_allowed_for_ollama(self):
         """Localhost should be allowed for Ollama provider."""
-        validate_url("http://localhost:11434", "ollama")
-        validate_url("http://127.0.0.1:11434", "ollama")
+        await validate_url("http://localhost:11434", "ollama")
+        await validate_url("http://127.0.0.1:11434", "ollama")
         # Should not raise
 
-    def test_private_ip_allowed_for_self_hosted(self):
+    async def test_private_ip_allowed_for_self_hosted(self):
         """Private IP addresses should be allowed for self-hosted scenarios."""
         # This is a self-hosted app, private IPs are valid for internal services
-        validate_url("http://10.0.0.1", "openai")
-        validate_url("http://172.16.0.1:8080", "anthropic")
-        validate_url("http://192.168.1.1", "azure")
+        await validate_url("http://10.0.0.1", "openai")
+        await validate_url("http://172.16.0.1:8080", "anthropic")
+        await validate_url("http://192.168.1.1", "azure")
         # Should not raise
 
-    def test_private_ip_allowed_for_ollama(self):
+    async def test_private_ip_allowed_for_ollama(self):
         """Private IP addresses should be allowed for Ollama provider."""
-        validate_url("http://192.168.1.100:11434", "ollama")
-        validate_url("http://10.0.0.50:11434", "ollama")
+        await validate_url("http://192.168.1.100:11434", "ollama")
+        await validate_url("http://10.0.0.50:11434", "ollama")
         # Should not raise
 
-    def test_loopback_allowed_for_self_hosted(self):
+    async def test_loopback_allowed_for_self_hosted(self):
         """Loopback addresses should be allowed for self-hosted scenarios."""
-        validate_url("http://127.0.0.2", "openai")
+        await validate_url("http://127.0.0.2", "openai")
         # Should not raise
 
-    def test_link_local_rejection(self):
+    async def test_link_local_rejection(self):
         """Link-local addresses should be rejected (cloud metadata protection)."""
         with pytest.raises(ValueError, match="Link-local addresses"):
-            validate_url("http://169.254.169.254", "openai")
+            await validate_url("http://169.254.169.254", "openai")
 
         # Also reject for ollama - link-local is never valid
         with pytest.raises(ValueError, match="Link-local addresses"):
-            validate_url("http://169.254.169.254", "ollama")
+            await validate_url("http://169.254.169.254", "ollama")
 
-    def test_ipv6_localhost_allowed(self):
+    async def test_ipv6_localhost_allowed(self):
         """IPv6 localhost should be allowed for self-hosted scenarios."""
-        validate_url("http://[::1]:8000", "openai")
+        await validate_url("http://[::1]:8000", "openai")
         # Should not raise
 
-    def test_empty_url(self):
+    async def test_empty_url(self):
         """Empty URLs should not raise (handled elsewhere)."""
-        validate_url("", "openai")
+        await validate_url("", "openai")
         # None is handled by the function's early return check
         # Should not raise
 
-    def test_invalid_url_format(self):
+    async def test_invalid_url_format(self):
         """Malformed URLs should be rejected."""
         with pytest.raises(ValueError):
-            validate_url("not-a-url", "openai")
+            await validate_url("not-a-url", "openai")
 
-    def test_public_hostnames_allowed(self):
+    async def test_public_hostnames_allowed(self):
         """Public hostnames should be allowed."""
-        validate_url("https://api.openai.com/v1", "openai")
-        validate_url("https://api.anthropic.com", "anthropic")
-        validate_url("https://generativelanguage.googleapis.com", "google")
-        validate_url("https://api.groq.com", "groq")
+        await validate_url("https://api.openai.com/v1", "openai")
+        await validate_url("https://api.anthropic.com", "anthropic")
+        await validate_url("https://generativelanguage.googleapis.com", "google")
+        await validate_url("https://api.groq.com", "groq")
         # Should not raise
 
-    def test_azure_specific_urls(self):
+    async def test_azure_specific_urls(self):
         """Azure OpenAI endpoints should be validated."""
-        validate_url(
+        await validate_url(
             "https://my-resource.openai.azure.com", "azure"
         )
         # Localhost is allowed for self-hosted
-        validate_url("http://localhost:8000", "azure")
+        await validate_url("http://localhost:8000", "azure")
         # Should not raise
 
-    def test_openai_compatible_urls(self):
+    async def test_openai_compatible_urls(self):
         """OpenAI-compatible provider URLs should be validated."""
-        validate_url("https://api.together.xyz", "openai_compatible")
+        await validate_url("https://api.together.xyz", "openai_compatible")
         # Private IPs are allowed for self-hosted
-        validate_url("http://192.168.1.1:8080", "openai_compatible")
+        await validate_url("http://192.168.1.1:8080", "openai_compatible")
         # Should not raise
 
-    def test_ipv4_mapped_ipv6_link_local_rejected(self):
+    async def test_ipv4_mapped_ipv6_link_local_rejected(self):
         """IPv4-mapped IPv6 addresses pointing to link-local should be rejected."""
         with pytest.raises(ValueError, match="Link-local addresses"):
-            validate_url("http://[::ffff:169.254.169.254]", "openai")
+            await validate_url("http://[::ffff:169.254.169.254]", "openai")
 
-    def test_ipv4_mapped_ipv6_private_allowed(self):
+    async def test_ipv4_mapped_ipv6_private_allowed(self):
         """IPv4-mapped IPv6 addresses pointing to private IPs should be allowed."""
-        validate_url("http://[::ffff:192.168.1.1]", "openai")
+        await validate_url("http://[::ffff:192.168.1.1]", "openai")
         # Should not raise - private IPs allowed for self-hosted

From 107418a7564f1f781456c70fc75c998ce7c74d92 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 10:04:20 -0400
Subject: [PATCH 139/345] fix: allow the preview library's code-copy button
 through the sanitize schema (#1007)

The sanitize fix itself landed via #1011's squash; this restores the code-block copy button that the default sanitize schema stripped, with a regression test.
---
 .../components/ui/markdown-editor.test.tsx    | 12 +++++++++
 .../src/components/ui/markdown-editor.tsx     | 26 ++++++++++++++++---
 2 files changed, 35 insertions(+), 3 deletions(-)

diff --git a/frontend/src/components/ui/markdown-editor.test.tsx b/frontend/src/components/ui/markdown-editor.test.tsx
index 4dabeabb..0015cea0 100644
--- a/frontend/src/components/ui/markdown-editor.test.tsx
+++ b/frontend/src/components/ui/markdown-editor.test.tsx
@@ -63,6 +63,18 @@ describe('MarkdownEditor preview sanitization', () => {
     expect(container.querySelectorAll('span[class*="token"]').length).toBeGreaterThan(0)
   })
 
+  it('still renders the code-block copy button the library injects', () => {
+    // The preview library's rehypeRewrite injects div.copied[data-code] with
+    // two octicon SVGs before user plugins run; the sanitize schema must let
+    // exactly that markup through or the copy feature dies silently.
+    const { container } = renderPreview('```js\nconst a = 1;\n```')
+    const button = container.querySelector('pre div.copied')
+    expect(button).not.toBeNull()
+    expect(button?.getAttribute('data-code')).toContain('const a = 1;')
+    expect(button?.querySelector('svg.octicon-copy')).not.toBeNull()
+    expect(button?.querySelector('svg.octicon-check')).not.toBeNull()
+  })
+
   it('still renders GFM tables, task lists, and safe links', () => {
     const { container } = renderPreview(
       '| a | b |\n|---|---|\n| 1 | 2 |\n\n- [x] done\n- [ ] todo\n\n[a link](https://example.com)'
diff --git a/frontend/src/components/ui/markdown-editor.tsx b/frontend/src/components/ui/markdown-editor.tsx
index 0836036d..e6caeff4 100644
--- a/frontend/src/components/ui/markdown-editor.tsx
+++ b/frontend/src/components/ui/markdown-editor.tsx
@@ -4,7 +4,8 @@ import dynamic from 'next/dynamic'
 import { forwardRef } from 'react'
 import remarkMath from 'remark-math'
 import rehypeKatex from 'rehype-katex'
-import rehypeSanitize from 'rehype-sanitize'
+import rehypeSanitize, { defaultSchema } from 'rehype-sanitize'
+import type { PluggableList } from 'unified'
 
 const MDEditor = dynamic(
   () => import('@uiw/react-md-editor').then((mod) => mod.default),
@@ -24,9 +25,28 @@ const MDEditor = dynamic(
 // (katex-html spans, MathML) isn't in the default sanitize schema and gets
 // stripped if sanitize runs after it - order here is load-bearing, verified
 // against the actual rendered output for math/code/GFM before changing it.
+// The library's rehypeRewrite injects a copy button into code blocks
+// (div.copied[data-code] + two octicon SVGs) *before* user plugins run, so
+// the default schema strips it. Allow exactly that markup back in. The div
+// keys must be the literal lowercase 'class'/'data-code' the library sets
+// (hast-util-sanitize matches raw property keys); the SVGs are authored in
+// camelCase, so camelCase is correct there. Worst case this permits from
+// user-authored raw HTML: a decoy div that copies attacker-chosen text on
+// click, plus inert static SVGs.
+const SANITIZE_SCHEMA = {
+  ...defaultSchema,
+  tagNames: [...(defaultSchema.tagNames ?? []), 'svg', 'path'],
+  attributes: {
+    ...defaultSchema.attributes,
+    div: [...(defaultSchema.attributes?.div ?? []), ['class', 'copied'], 'data-code'],
+    svg: [['className', 'octicon-copy', 'octicon-check'], 'ariaHidden', 'viewBox', 'fill', 'height', 'width'],
+    path: ['fillRule', 'd'],
+  },
+}
+
 export const PREVIEW_OPTIONS = {
-  remarkPlugins: [remarkMath],
-  rehypePlugins: [rehypeSanitize, rehypeKatex],
+  remarkPlugins: [remarkMath] as PluggableList,
+  rehypePlugins: [[rehypeSanitize, SANITIZE_SCHEMA], rehypeKatex] as PluggableList,
 }
 
 export interface MarkdownEditorProps {

From 0a17c33797b87f606d182f35ea5641f257c64b61 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 10:07:04 -0400
Subject: [PATCH 140/345] fix: don't leak filesystem info via Vertex credential
 test errors (#1012)

* fix: don't leak filesystem info via Vertex credential test errors

Vertex's credentials_path is free text with no path validation, and
Google's auth library raises distinguishable exceptions for "file
missing" (OSError), "not valid JSON" (json.JSONDecodeError), and "valid
JSON but wrong shape" (GoogleAuthError). Echoing any of these back to an
API caller turns credential/model testing into a filesystem oracle - an
attacker who can create/test a Vertex credential could probe for the
existence and contents-shape of arbitrary files on the server.

_is_vertex_credentials_file_error() catches all three and both call
sites (api/credentials_service.py's test_credential, connection_tester's
test_individual_model) return one generic message instead.

* fix: don't classify network failures as credentials-file errors

ConnectionError/TimeoutError are OSError subclasses and TransportError is
a GoogleAuthError subclass, so the oracle guard also swallowed genuine
network failures - a user with a blocked network would be told to go debug
their credentials file. Excluding them reveals only the error's category,
which keeps the filesystem oracle closed.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/CLAUDE.md                                |   1 +
 api/credentials_service.py                   |   9 +
 open_notebook/ai/connection_tester.py        |  36 ++++
 tests/test_vertex_credentials_file_oracle.py | 177 +++++++++++++++++++
 4 files changed, 223 insertions(+)
 create mode 100644 tests/test_vertex_credentials_file_oracle.py

diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index 1c0efda5..faedfb8d 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -220,6 +220,7 @@ The `/credentials/{credential_id}/test` endpoint uses minimal API calls to verif
 - Uses cheapest/smallest models per provider (TEST_MODELS map)
 - Returns success status and descriptive message
 - Special handlers for ollama, openai_compatible, and azure providers
+- Vertex-specific: `credentials_path` is free text with no path validation, and Google's auth library raises distinguishable exceptions for "file missing"/"not JSON"/"wrong shape" - `_is_vertex_credentials_file_error()` catches all three and returns one generic "Invalid or inaccessible credentials file" message (both here and in `test_individual_model()`) so testing a credential can't be used as a filesystem oracle
 
 ### Migration Workflows
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 2d75599f..4002e348 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -265,6 +265,7 @@ async def test_credential(credential_id: str) -> dict:
         config = cred.to_esperanto_config()
 
         from open_notebook.ai.connection_tester import (
+            _is_vertex_credentials_file_error,
             _test_azure_connection,
             _test_ollama_connection,
             _test_openai_compatible_connection,
@@ -350,6 +351,14 @@ async def test_credential(credential_id: str) -> dict:
         }
 
     except Exception as e:
+        if provider == "vertex" and _is_vertex_credentials_file_error(e):
+            logger.debug(f"Vertex credentials file error for credential {credential_id}: {e}")
+            return {
+                "provider": provider,
+                "success": False,
+                "message": "Invalid or inaccessible credentials file",
+            }
+
         error_msg = str(e)
         if "401" in error_msg or "unauthorized" in error_msg.lower():
             return {"provider": provider, "success": False, "message": "Invalid API key"}
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index b33d65ba..9cea89c6 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -6,6 +6,7 @@ by making minimal API calls to each provider, and to test individual model
 configurations end-to-end.
 """
 import io
+import json
 import os
 import struct
 from typing import Optional, Tuple
@@ -15,6 +16,37 @@ from loguru import logger
 
 from open_notebook.utils.url_validation import validate_url
 
+
+def _is_vertex_credentials_file_error(exc: Exception) -> bool:
+    """
+    True if `exc` came from loading a Vertex service-account file
+    (credentials_path - free text, no path validation; see
+    open_notebook/ai/key_provider.py).
+
+    Google's auth library raises distinguishable exceptions for "file
+    missing" (FileNotFoundError, an OSError), "not valid JSON"
+    (json.JSONDecodeError), and "valid JSON but wrong shape"
+    (google.auth.exceptions.GoogleAuthError) - confirmed by direct
+    reproduction. Echoing any of these back to an API caller turns
+    credential/model testing into a filesystem oracle: an attacker who can
+    create/test a Vertex credential could probe for the existence and
+    contents-shape of arbitrary files on the server. Callers should catch
+    these and return one generic message instead of the raw exception text.
+
+    Network failures are excluded even though they'd otherwise match
+    (ConnectionError/TimeoutError are OSError subclasses, TransportError a
+    GoogleAuthError subclass): they say nothing about the credentials file,
+    and classifying them here would tell a user with a blocked network to
+    go debug their file path. Letting them fall through reveals only the
+    error's category ("connection error"), which keeps the oracle closed.
+    """
+    from google.auth.exceptions import GoogleAuthError, TransportError
+
+    if isinstance(exc, (ConnectionError, TimeoutError, TransportError)):
+        return False
+    return isinstance(exc, (OSError, json.JSONDecodeError, GoogleAuthError))
+
+
 # Test models for each provider - uses minimal/cheapest models for testing
 # Format: (model_name, model_type)
 TEST_MODELS = {
@@ -337,6 +369,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
             return False, f"Unsupported model type: {model.type}"
 
     except Exception as e:
+        if model.provider == "vertex" and _is_vertex_credentials_file_error(e):
+            logger.debug(f"Vertex credentials file error for model {model.id}: {e}")
+            return False, "Invalid or inaccessible credentials file"
+
         error_msg = str(e)
         success, normalized = _normalize_error_message(error_msg)
         if success:
diff --git a/tests/test_vertex_credentials_file_oracle.py b/tests/test_vertex_credentials_file_oracle.py
new file mode 100644
index 00000000..3d11801b
--- /dev/null
+++ b/tests/test_vertex_credentials_file_oracle.py
@@ -0,0 +1,177 @@
+"""
+Tests for the Vertex credentials_path file-existence oracle fix.
+
+credentials_path (Vertex service-account file path) is free text with no
+path validation (open_notebook/ai/key_provider.py sets it directly as
+GOOGLE_APPLICATION_CREDENTIALS). Google's auth library raises
+distinguishable exceptions - confirmed by direct reproduction against the
+real library - for "file missing" (FileNotFoundError), "not valid JSON"
+(json.JSONDecodeError), and "valid JSON but wrong shape"
+(google.auth.exceptions.GoogleAuthError). Both api/credentials_service.py's
+test_credential() (POST /credentials/{id}/test) and
+connection_tester.py's test_individual_model() (POST /models/{id}/test)
+used to echo the raw exception text (up to 100 chars, or the entire message
+for test_individual_model) back to the API caller, including the
+attacker-supplied path - turning credential/model testing into a
+filesystem oracle for an attacker who can create/test a Vertex credential.
+"""
+
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from open_notebook.ai.connection_tester import _is_vertex_credentials_file_error
+from open_notebook.ai.connection_tester import (
+    test_individual_model as run_individual_model_test,
+)
+
+
+def real_google_auth_exception(credentials_path: str) -> Exception:
+    """Drives the real google.oauth2.service_account library to get a
+    genuine exception object, rather than guessing at its shape."""
+    from google.oauth2 import service_account
+
+    try:
+        service_account.Credentials.from_service_account_file(
+            credentials_path,
+            scopes=["https://www.googleapis.com/auth/cloud-platform"],
+        )
+        raise AssertionError("expected from_service_account_file to raise")
+    except Exception as e:
+        return e
+
+
+class TestIsVertexCredentialsFileError:
+    def test_classifies_missing_file(self, tmp_path):
+        exc = real_google_auth_exception(str(tmp_path / "does-not-exist.json"))
+        assert isinstance(exc, FileNotFoundError)
+        assert _is_vertex_credentials_file_error(exc) is True
+
+    def test_classifies_invalid_json(self, tmp_path):
+        bad_json = tmp_path / "bad.json"
+        bad_json.write_text("not valid json {{{")
+        exc = real_google_auth_exception(str(bad_json))
+        assert _is_vertex_credentials_file_error(exc) is True
+
+    def test_classifies_wrong_shape_json(self, tmp_path):
+        wrong_shape = tmp_path / "wrong_shape.json"
+        wrong_shape.write_text('{"foo": "bar"}')
+        exc = real_google_auth_exception(str(wrong_shape))
+        assert _is_vertex_credentials_file_error(exc) is True
+
+    def test_does_not_misclassify_unrelated_errors(self):
+        assert _is_vertex_credentials_file_error(ValueError("some other error")) is False
+        assert _is_vertex_credentials_file_error(RuntimeError("rate limited")) is False
+
+    def test_does_not_misclassify_network_errors(self):
+        # ConnectionError/TimeoutError are OSError subclasses and
+        # TransportError is a GoogleAuthError subclass, so without an
+        # explicit exclusion a blocked network would surface as "Invalid or
+        # inaccessible credentials file" - a false lead. They must fall
+        # through to the normal connection-error handling instead.
+        from google.auth.exceptions import TransportError
+
+        assert _is_vertex_credentials_file_error(ConnectionError("connection refused")) is False
+        assert _is_vertex_credentials_file_error(ConnectionRefusedError("refused")) is False
+        assert _is_vertex_credentials_file_error(TimeoutError("timed out")) is False
+        assert _is_vertex_credentials_file_error(TransportError("failed to connect")) is False
+
+
+class TestTestCredentialClosesOracle:
+    @pytest.mark.asyncio
+    async def test_missing_and_invalid_json_produce_identical_generic_message(
+        self, tmp_path
+    ):
+        """The core of the fix: two scenarios that used to be
+        distinguishable via the response message must now be identical."""
+        from open_notebook.domain.credential import Credential
+
+        missing_exc = real_google_auth_exception(str(tmp_path / "missing.json"))
+        bad_json = tmp_path / "bad.json"
+        bad_json.write_text("not json {{{")
+        invalid_exc = real_google_auth_exception(str(bad_json))
+
+        cred = MagicMock(spec=Credential)
+        cred.provider = "vertex"
+        cred.to_esperanto_config.return_value = {"project": "p", "location": "us-central1"}
+
+        from api.credentials_service import test_credential
+
+        with patch(
+            "open_notebook.domain.credential.Credential.get",
+            new=AsyncMock(return_value=cred),
+        ):
+            with patch(
+                "esperanto.factory.AIFactory.create_language", side_effect=missing_exc
+            ):
+                result_missing = await test_credential("credential:test")
+            with patch(
+                "esperanto.factory.AIFactory.create_language", side_effect=invalid_exc
+            ):
+                result_invalid = await test_credential("credential:test")
+
+        assert result_missing["message"] == "Invalid or inaccessible credentials file"
+        assert result_invalid["message"] == "Invalid or inaccessible credentials file"
+        assert result_missing["message"] == result_invalid["message"]
+        assert str(tmp_path) not in result_missing["message"]
+
+    @pytest.mark.asyncio
+    async def test_non_vertex_provider_still_gets_detailed_message(self):
+        """Only vertex has this specific file-existence oracle risk - other
+        providers should be unaffected by the generic-message guard."""
+        from open_notebook.domain.credential import Credential
+
+        cred = MagicMock(spec=Credential)
+        cred.provider = "openai"
+        cred.to_esperanto_config.return_value = {"api_key": "sk-fake"}
+
+        from api.credentials_service import test_credential
+
+        with (
+            patch(
+                "open_notebook.domain.credential.Credential.get",
+                new=AsyncMock(return_value=cred),
+            ),
+            patch(
+                "esperanto.factory.AIFactory.create_language",
+                side_effect=FileNotFoundError("unrelated file issue"),
+            ),
+        ):
+            result = await test_credential("credential:test")
+
+        assert result["message"] != "Invalid or inaccessible credentials file"
+
+
+class TestIndividualModelClosesOracle:
+    @pytest.mark.asyncio
+    async def test_missing_credentials_file_returns_generic_message(self, tmp_path):
+        exc = real_google_auth_exception(str(tmp_path / "missing.json"))
+        model = MagicMock(id="model:vertex1", provider="vertex", type="language")
+
+        manager_instance = MagicMock()
+        manager_instance.get_model = AsyncMock(side_effect=exc)
+
+        with patch(
+            "open_notebook.ai.models.ModelManager", return_value=manager_instance
+        ):
+            success, message = await run_individual_model_test(model)
+
+        assert success is False
+        assert message == "Invalid or inaccessible credentials file"
+        assert str(tmp_path) not in message
+
+    @pytest.mark.asyncio
+    async def test_non_vertex_provider_still_gets_detailed_message(self):
+        model = MagicMock(id="model:openai1", provider="openai", type="language")
+
+        manager_instance = MagicMock()
+        manager_instance.get_model = AsyncMock(
+            side_effect=FileNotFoundError("unrelated file issue")
+        )
+
+        with patch(
+            "open_notebook.ai.models.ModelManager", return_value=manager_instance
+        ):
+            success, message = await run_individual_model_test(model)
+
+        assert message != "Invalid or inaccessible credentials file"

From fd7dee7cedeb99fab28ab0c2e26c6a33cfce17ca Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 10:10:41 -0400
Subject: [PATCH 141/345] fix: don't combine wildcard CORS origins with
 allow_credentials (#1013)

* fix: don't combine wildcard CORS origins with allow_credentials

Combining allow_origins=["*"] with allow_credentials=True makes
Starlette's CORSMiddleware reflect the request's Origin header verbatim
instead of returning a literal "*" (browsers reject a literal wildcard
alongside credentials) - defeating the origin allowlist for any
credentialed request.

allow_credentials is now tied to whether CORS_ORIGINS was explicitly
scoped: False for the default wildcard, True once an operator opts into
specific origins. _cors_headers() (the manual CORS builder for error
responses raised before CORSMiddleware runs) is updated to match, so it
can't grant credentials the real middleware wouldn't.

Not independently exploitable today (the frontend never sends
credentialed requests, and auth is a Bearer header, not a cookie), but
there's no reason to allow it for the default wildcard case.

* fix: key allow_credentials on the parsed origins list, not the env var

An operator who explicitly sets CORS_ORIGINS=* got allow_credentials=True
with a wildcard origin list - the exact reflect-any-Origin behavior this
change exists to prevent. Introduce CORS_ALLOW_CREDENTIALS keyed on the
parsed list containing '*' and use it at both the middleware registration
and the manual error-response headers; replace the tautological formula
tests with ones exercising the real parser.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/CLAUDE.md                  |   2 +-
 api/main.py                    |  24 ++++++-
 docs/7-DEVELOPMENT/security.md |   2 +-
 tests/test_cors_credentials.py | 110 +++++++++++++++++++++++++++++++++
 4 files changed, 134 insertions(+), 4 deletions(-)
 create mode 100644 tests/test_cors_credentials.py

diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index faedfb8d..bb1c23b4 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -99,7 +99,7 @@ FastAPI application serving three architectural layers: routes (HTTP endpoints),
 - **Graph invocation is blocking**: chat/podcast workflows may take minutes; no timeout handling in services
 - **Command job fire-and-forget**: podcast_service.py submits jobs but doesn't wait (async job queue pattern)
 - **Model override scoping**: Model config override via RunnableConfig is per-request only (not persistent)
-- **CORS open by default**: main.py CORS settings allow all origins (restrict before production)
+- **CORS open by default**: main.py CORS settings allow all origins (restrict before production) via `CORS_ORIGINS`. `allow_credentials` is tied to that: `False` for the default wildcard (combining wildcard + credentials would make Starlette reflect any Origin), automatically `True` once `CORS_ORIGINS` is scoped to explicit origins
 - **No OpenAPI security scheme**: API docs available without auth (disable before production)
 - **Services don't validate user permission**: All endpoints trust authentication layer; no per-notebook permission checks
 
diff --git a/api/main.py b/api/main.py
index 6d062080..6c820f11 100644
--- a/api/main.py
+++ b/api/main.py
@@ -63,6 +63,11 @@ def _parse_cors_origins(raw: str) -> list[str]:
 _cors_origins_raw = os.getenv("CORS_ORIGINS")
 CORS_ALLOWED_ORIGINS = _parse_cors_origins(_cors_origins_raw or "*")
 CORS_IS_DEFAULT_WILDCARD = _cors_origins_raw is None
+# Keyed on the parsed list, not on whether the env var was set: an operator
+# who explicitly sets CORS_ORIGINS=* must get the same wildcard treatment as
+# the default, or credentials would combine with a wildcard origin - the
+# exact reflect-any-Origin behavior this flag exists to prevent.
+CORS_ALLOW_CREDENTIALS = "*" not in CORS_ALLOWED_ORIGINS
 
 DATABASE_STARTUP_RETRY_ATTEMPTS = 12
 DATABASE_STARTUP_RETRY_INITIAL_DELAY_SECONDS = 1
@@ -82,13 +87,17 @@ def _cors_headers(request: Request) -> dict[str, str]:
     browsers reject `Access-Control-Allow-Origin: *` combined with
     credentials). Omits `Access-Control-Allow-Origin` for disallowed
     origins so the browser blocks the error body from leaking cross-origin.
+    Only claims Access-Control-Allow-Credentials when the real CORSMiddleware
+    would (see its allow_credentials comment above) - otherwise error
+    responses would grant credentialed access the success path doesn't.
     """
     origin = request.headers.get("origin")
     headers: dict[str, str] = {
-        "Access-Control-Allow-Credentials": "true",
         "Access-Control-Allow-Methods": "*",
         "Access-Control-Allow-Headers": "*",
     }
+    if CORS_ALLOW_CREDENTIALS:
+        headers["Access-Control-Allow-Credentials"] = "true"
 
     if origin and ("*" in CORS_ALLOWED_ORIGINS or origin in CORS_ALLOWED_ORIGINS):
         headers["Access-Control-Allow-Origin"] = origin
@@ -235,10 +244,21 @@ app.add_middleware(
 )
 
 # Add CORS middleware last (so it processes first)
+#
+# allow_credentials is tied to whether CORS_ORIGINS was explicitly scoped:
+# combining allow_origins=["*"] with allow_credentials=True makes Starlette
+# reflect the request's Origin header verbatim (browsers reject a literal
+# "*" alongside credentials), which defeats the origin allowlist. The
+# frontend never sends credentialed requests (withCredentials: false) and
+# auth is a Bearer header, not a cookie, so this isn't independently
+# exploitable today - but there's no reason to allow it for the default
+# wildcard case. Once an operator explicitly scopes CORS_ORIGINS to real
+# origins, credentialed cross-origin requests to those origins are safe to
+# allow again.
 app.add_middleware(
     CORSMiddleware,
     allow_origins=CORS_ALLOWED_ORIGINS,
-    allow_credentials=True,
+    allow_credentials=CORS_ALLOW_CREDENTIALS,
     allow_methods=["*"],
     allow_headers=["*"],
 )
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
index 5eb394ac..11e7d805 100644
--- a/docs/7-DEVELOPMENT/security.md
+++ b/docs/7-DEVELOPMENT/security.md
@@ -146,7 +146,7 @@ Open Notebook currently uses simple password-based middleware (`PasswordAuthMidd
 
 ### CORS
 
-The default CORS configuration allows all origins (`allow_origins=["*"]`). This is tracked for improvement in [#730](https://github.com/lfnovo/open-notebook/issues/730). For production deployments, restrict origins to only the frontend URL.
+The default CORS configuration allows all origins (`allow_origins=["*"]`). `allow_credentials` is tied to that: `False` for the default wildcard (avoids Starlette reflecting any Origin alongside credentials), automatically `True` once `CORS_ORIGINS` is explicitly scoped to specific origins. For production deployments, still restrict `CORS_ORIGINS` to only the frontend URL.
 
 ---
 
diff --git a/tests/test_cors_credentials.py b/tests/test_cors_credentials.py
new file mode 100644
index 00000000..c5660621
--- /dev/null
+++ b/tests/test_cors_credentials.py
@@ -0,0 +1,110 @@
+"""
+Tests for the CORS wildcard + allow_credentials fix (api/main.py).
+
+Combining allow_origins=["*"] with allow_credentials=True makes Starlette's
+CORSMiddleware reflect the request's Origin header verbatim instead of
+returning a literal "*" (browsers reject a literal wildcard alongside
+credentials) - defeating the origin allowlist for any credentialed request.
+allow_credentials is now keyed on the parsed origins list: False whenever it
+contains "*" (whether from the unset default or an explicit CORS_ORIGINS=*),
+True once an operator scopes CORS_ORIGINS to specific origins.
+"""
+
+from starlette.middleware.cors import CORSMiddleware
+from starlette.testclient import TestClient
+
+from api import main as api_main
+
+
+class TestRealAppDefaultsToNoCredentialsWithWildcard:
+    """The test environment has no CORS_ORIGINS set, matching the shipped
+    default - this validates the actual registered app, not a simulation."""
+
+    def test_default_test_environment_is_wildcard(self):
+        assert api_main.CORS_IS_DEFAULT_WILDCARD is True
+        assert api_main.CORS_ALLOWED_ORIGINS == ["*"]
+        assert api_main.CORS_ALLOW_CREDENTIALS is False
+
+    def test_cors_middleware_registered_with_credentials_disabled(self):
+        matches = [
+            m for m in api_main.app.user_middleware if m.cls is CORSMiddleware
+        ]
+        assert len(matches) == 1
+        assert matches[0].kwargs["allow_credentials"] is False
+
+    def test_real_response_does_not_claim_allow_credentials(self):
+        client = TestClient(api_main.app)
+        response = client.get(
+            "/health", headers={"Origin": "https://evil.example.com"}
+        )
+        assert response.status_code == 200
+        assert "access-control-allow-credentials" not in {
+            k.lower() for k in response.headers.keys()
+        }
+        # Still reflects the origin (wildcard-equivalent), just without
+        # granting credentialed access.
+        assert response.headers.get("access-control-allow-origin") in ("*", "https://evil.example.com")
+
+
+class TestExplicitWildcardAlsoDisablesCredentials:
+    """An operator who sets CORS_ORIGINS=* explicitly must get the same
+    treatment as the unset default. The predicate keys on the parsed list
+    containing "*", not on whether the env var was set - keying on the env
+    var would reintroduce the exact reflect-any-Origin behavior this fix
+    prevents. CORS_ALLOW_CREDENTIALS is fixed at api.main import time, so
+    these exercise the real parser plus the same expression used there."""
+
+    def test_explicit_wildcard_disables_credentials(self):
+        origins = api_main._parse_cors_origins("*")
+        assert origins == ["*"]
+        assert ("*" not in origins) is False
+
+    def test_explicit_origins_enable_credentials(self):
+        origins = api_main._parse_cors_origins(
+            "https://notebook.example.com, https://other.example.com"
+        )
+        assert origins == [
+            "https://notebook.example.com",
+            "https://other.example.com",
+        ]
+        assert ("*" not in origins) is True
+
+
+class TestCorsHeadersHelperMatchesMiddlewarePolicy:
+    """api/main.py's _cors_headers() manually builds CORS headers for error
+    responses (for errors raised before CORSMiddleware runs) - it must not
+    grant credentials the real middleware wouldn't."""
+
+    def test_omits_allow_credentials_header_for_wildcard(self, monkeypatch):
+        monkeypatch.setattr(api_main, "CORS_ALLOW_CREDENTIALS", False)
+        monkeypatch.setattr(api_main, "CORS_ALLOWED_ORIGINS", ["*"])
+
+        class FakeRequest:
+            headers = {"origin": "https://evil.example.com"}
+
+        headers = api_main._cors_headers(FakeRequest())
+        assert "Access-Control-Allow-Credentials" not in headers
+
+    def test_includes_allow_credentials_header_for_explicit_origins(self, monkeypatch):
+        monkeypatch.setattr(api_main, "CORS_ALLOW_CREDENTIALS", True)
+        monkeypatch.setattr(
+            api_main, "CORS_ALLOWED_ORIGINS", ["https://notebook.example.com"]
+        )
+
+        class FakeRequest:
+            headers = {"origin": "https://notebook.example.com"}
+
+        headers = api_main._cors_headers(FakeRequest())
+        assert headers["Access-Control-Allow-Credentials"] == "true"
+
+    def test_disallowed_origin_still_gets_no_allow_origin_header(self, monkeypatch):
+        monkeypatch.setattr(api_main, "CORS_ALLOW_CREDENTIALS", True)
+        monkeypatch.setattr(
+            api_main, "CORS_ALLOWED_ORIGINS", ["https://notebook.example.com"]
+        )
+
+        class FakeRequest:
+            headers = {"origin": "https://evil.example.com"}
+
+        headers = api_main._cors_headers(FakeRequest())
+        assert "Access-Control-Allow-Origin" not in headers

From 5316b1a8f389588589acebf6b20b51bccaaf5c7f Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 10:15:18 -0400
Subject: [PATCH 142/345] fix: reject oversized request bodies before
 auth/routing (#1014)

* fix: reject oversized request bodies before auth/routing

No limit existed on request body size, so a single upload could exhaust
memory/disk before any validation ran. MaxBodySizeMiddleware
(api/middleware.py) rejects requests over OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB
(default 100MB) via both a Content-Length pre-check and by counting bytes
as the body streams in, so it also catches chunked requests with no
Content-Length header.

Registered after PasswordAuthMiddleware (wrapping it) so oversized
requests are rejected before spending any work on credential checks, and
inside CORSMiddleware so a rejected upload still gets CORS headers.

* fix: clamp non-positive size limits and log rejected requests

OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB=0 (or negative) made every request with a
body 413; fall back to the default instead, with a warning. Also log each
413 rejection so operators can diagnose failed uploads.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .env.example                                  |   6 +
 api/CLAUDE.md                                 |   1 +
 api/main.py                                   |  35 ++-
 api/middleware.py                             | 122 +++++++++
 docs/5-CONFIGURATION/environment-reference.md |   1 +
 tests/test_max_body_size_middleware.py        | 256 ++++++++++++++++++
 6 files changed, 410 insertions(+), 11 deletions(-)
 create mode 100644 api/middleware.py
 create mode 100644 tests/test_max_body_size_middleware.py

diff --git a/.env.example b/.env.example
index 919625ce..4f8fe6ef 100644
--- a/.env.example
+++ b/.env.example
@@ -54,6 +54,12 @@ SURREAL_DATABASE=open_notebook
 # CHUNK_SIZE=1500
 # CHUNK_OVERLAP=150
 
+# Maximum upload/request body size in MB (default: 100). Raise this if you
+# need to upload larger audio/video files. A fronting reverse proxy's own
+# limit (e.g. nginx client_max_body_size) still applies and should be raised
+# to match.
+# OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB=100
+
 # Security
 # BASIC_AUTH_USERNAME=admin
 # BASIC_AUTH_PASSWORD=secret
diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index bb1c23b4..bba838b9 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -35,6 +35,7 @@ FastAPI application serving three architectural layers: routes (HTTP endpoints),
 - **main.py**: FastAPI app initialization, CORS setup, auth middleware, lifespan event, router registration
 - **Lifespan handler**: Runs AsyncMigrationManager on startup (database schema migration)
 - **Auth middleware**: PasswordAuthMiddleware protects endpoints (password-based access control)
+- **Body size middleware**: `MaxBodySizeMiddleware` (`api/middleware.py`) rejects requests over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100MB) before auth/routing - both via `Content-Length` pre-check and by counting bytes as the body streams in, so it also catches chunked requests with no `Content-Length`. Registered inside `CORSMiddleware` so a rejected upload still gets CORS headers.
 
 ### Services (Business Logic)
 - **chat_service.py**: Invokes chat.py graph; handles message history via SqliteSaver
diff --git a/api/main.py b/api/main.py
index 6c820f11..36578ade 100644
--- a/api/main.py
+++ b/api/main.py
@@ -14,6 +14,7 @@ from loguru import logger
 from starlette.exceptions import HTTPException as StarletteHTTPException
 
 from api.auth import PasswordAuthMiddleware
+from api.middleware import MaxBodySizeMiddleware, get_max_upload_size_bytes
 from api.routers import (
     auth,
     chat,
@@ -69,6 +70,9 @@ CORS_IS_DEFAULT_WILDCARD = _cors_origins_raw is None
 # exact reflect-any-Origin behavior this flag exists to prevent.
 CORS_ALLOW_CREDENTIALS = "*" not in CORS_ALLOWED_ORIGINS
 
+# Parsed once at module load; OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB changes require a restart.
+MAX_UPLOAD_SIZE_BYTES = get_max_upload_size_bytes()
+
 DATABASE_STARTUP_RETRY_ATTEMPTS = 12
 DATABASE_STARTUP_RETRY_INITIAL_DELAY_SECONDS = 1
 DATABASE_STARTUP_RETRY_MAX_DELAY_SECONDS = 5
@@ -243,18 +247,27 @@ app.add_middleware(
     ],
 )
 
-# Add CORS middleware last (so it processes first)
+# Reject oversized request bodies before they reach auth or routing - added
+# after PasswordAuthMiddleware (so it wraps around it) so a too-large request
+# is rejected before spending any work checking credentials.
+logger.info(
+    f"Max request body size: {MAX_UPLOAD_SIZE_BYTES / (1024 * 1024):g}MB "
+    "(set OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB to change)"
+)
+app.add_middleware(MaxBodySizeMiddleware, max_body_size=MAX_UPLOAD_SIZE_BYTES)
+
+# Add CORS middleware last (so it processes first, and so it can attach
+# CORS headers to a 413 raised by MaxBodySizeMiddleware)
 #
-# allow_credentials is tied to whether CORS_ORIGINS was explicitly scoped:
-# combining allow_origins=["*"] with allow_credentials=True makes Starlette
-# reflect the request's Origin header verbatim (browsers reject a literal
-# "*" alongside credentials), which defeats the origin allowlist. The
-# frontend never sends credentialed requests (withCredentials: false) and
-# auth is a Bearer header, not a cookie, so this isn't independently
-# exploitable today - but there's no reason to allow it for the default
-# wildcard case. Once an operator explicitly scopes CORS_ORIGINS to real
-# origins, credentialed cross-origin requests to those origins are safe to
-# allow again.
+# allow_credentials is tied to whether CORS_ORIGINS resolves to specific
+# origins: combining allow_origins=["*"] with allow_credentials=True makes
+# Starlette reflect the request's Origin header verbatim (browsers reject a
+# literal "*" alongside credentials), which defeats the origin allowlist.
+# The frontend never sends credentialed requests (withCredentials: false)
+# and auth is a Bearer header, not a cookie, so this isn't independently
+# exploitable today - but there's no reason to allow it for any wildcard
+# case. Once an operator explicitly scopes CORS_ORIGINS to real origins,
+# credentialed cross-origin requests to those origins are safe to allow.
 app.add_middleware(
     CORSMiddleware,
     allow_origins=CORS_ALLOWED_ORIGINS,
diff --git a/api/middleware.py b/api/middleware.py
new file mode 100644
index 00000000..ecee7986
--- /dev/null
+++ b/api/middleware.py
@@ -0,0 +1,122 @@
+import os
+
+from loguru import logger
+from starlette.datastructures import Headers
+from starlette.types import ASGIApp, Message, Receive, Scope, Send
+
+# Matches the file-size guidance already documented in
+# docs/3-USER-GUIDE/adding-sources.md ("Very large files (>100MB) - Timeout").
+DEFAULT_MAX_UPLOAD_SIZE_MB = 100
+
+
+def get_max_upload_size_bytes() -> int:
+    """Read the configured max request body size, in bytes.
+
+    Configurable via OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB for deployments that
+    need larger audio/video uploads; falls back to the default on unset,
+    malformed, or non-positive values (a zero/negative limit would reject
+    every request that has a body).
+    """
+    raw = os.environ.get("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", "").strip()
+    try:
+        mb = float(raw) if raw else DEFAULT_MAX_UPLOAD_SIZE_MB
+    except ValueError:
+        mb = DEFAULT_MAX_UPLOAD_SIZE_MB
+    if mb <= 0:
+        logger.warning(
+            f"OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB={raw!r} is not a positive size; "
+            f"using the default of {DEFAULT_MAX_UPLOAD_SIZE_MB}MB"
+        )
+        mb = DEFAULT_MAX_UPLOAD_SIZE_MB
+    return int(mb * 1024 * 1024)
+
+
+class _RequestBodyTooLarge(Exception):
+    pass
+
+
+class MaxBodySizeMiddleware:
+    """
+    Raw ASGI middleware rejecting requests whose body exceeds a configured
+    maximum, so a large upload can't exhaust memory/disk on a deployment
+    with no fronting proxy enforcing its own limit (e.g. the shipped
+    docker-compose.yml, which exposes the API directly).
+
+    Implemented at the raw ASGI level (not BaseHTTPMiddleware) so the check
+    can run ahead of FastAPI's own body/form parsing instead of after it.
+    Rejects on the `Content-Length` header up front when present (the common
+    case, and cheap), and also counts bytes as the body streams in - a
+    client can lie about Content-Length or omit it entirely with chunked
+    transfer-encoding.
+    """
+
+    def __init__(self, app: ASGIApp, max_body_size: int) -> None:
+        self.app = app
+        self.max_body_size = max_body_size
+
+    async def __call__(self, scope: Scope, receive: Receive, send: Send) -> None:
+        if scope["type"] != "http":
+            await self.app(scope, receive, send)
+            return
+
+        headers = Headers(scope=scope)
+        content_length = headers.get("content-length")
+        if content_length is not None:
+            try:
+                if int(content_length) > self.max_body_size:
+                    logger.warning(
+                        f"Rejected {scope.get('method', '?')} {scope.get('path', '?')}: "
+                        f"declared body of {content_length} bytes exceeds the "
+                        f"{self.max_body_size}-byte limit"
+                    )
+                    await _send_413(send)
+                    return
+            except ValueError:
+                pass  # malformed header - fall through to streaming enforcement
+
+        total_size = 0
+        response_started = False
+
+        async def send_wrapper(message: Message) -> None:
+            nonlocal response_started
+            if message["type"] == "http.response.start":
+                response_started = True
+            await send(message)
+
+        async def receive_wrapper() -> Message:
+            nonlocal total_size
+            message = await receive()
+            if message["type"] == "http.request":
+                total_size += len(message.get("body") or b"")
+                if total_size > self.max_body_size:
+                    raise _RequestBodyTooLarge()
+            return message
+
+        try:
+            await self.app(scope, receive_wrapper, send_wrapper)
+        except _RequestBodyTooLarge:
+            logger.warning(
+                f"Rejected {scope.get('method', '?')} {scope.get('path', '?')}: "
+                f"streamed body exceeded the {self.max_body_size}-byte limit"
+            )
+            if not response_started:
+                await _send_413(send)
+            # Else the app already started responding - nothing safe to send;
+            # let the connection drop rather than violate the ASGI protocol
+            # with a second response.start.
+
+
+async def _send_413(send: Send) -> None:
+    await send(
+        {
+            "type": "http.response.start",
+            "status": 413,
+            "headers": [(b"content-type", b"application/json")],
+        }
+    )
+    await send(
+        {
+            "type": "http.response.body",
+            "body": b'{"detail":"Request body exceeds the maximum allowed upload size"}',
+        }
+    )
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index bf7d0b79..11bdc50a 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -15,6 +15,7 @@ Comprehensive list of all environment variables available in Open Notebook.
 | `OPEN_NOTEBOOK_ENCRYPTION_KEY` | **Yes** | None | Secret string to encrypt credentials stored in database (any string works). **Required** for the credential system. Supports Docker secrets via `_FILE` suffix. |
 | `HOSTNAME` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies |
 | `API_HOST` | No | `0.0.0.0` (in Docker) | Network interface for the API (uvicorn) to bind to. Set to `::` for IPv6 dual-stack environments (listens on IPv6 and, on Linux defaults, IPv4 too) |
+| `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | No | 100 | Maximum request body size (in MB) the API will accept, enforced before auth/routing. Raise this if you need to upload larger audio/video files. A fronting reverse proxy's own limit (e.g. nginx `client_max_body_size`) still applies and should be raised to match. |
 
 > **Important**: `OPEN_NOTEBOOK_ENCRYPTION_KEY` is required for storing AI provider credentials via the Settings UI. Without it, you cannot save credentials. If you change or lose this key, all stored credentials become unreadable.
 
diff --git a/tests/test_max_body_size_middleware.py b/tests/test_max_body_size_middleware.py
new file mode 100644
index 00000000..806ec97f
--- /dev/null
+++ b/tests/test_max_body_size_middleware.py
@@ -0,0 +1,256 @@
+"""
+Tests for api.middleware.MaxBodySizeMiddleware.
+
+Covers the raw-ASGI unit behavior (Content-Length pre-check, streaming
+enforcement for chunked/no-Content-Length requests, CORS interaction) plus
+integration through a real FastAPI app and the actual registered app.
+"""
+
+import pytest
+from fastapi import FastAPI
+from fastapi.testclient import TestClient
+from starlette.middleware.cors import CORSMiddleware
+
+from api.middleware import (
+    DEFAULT_MAX_UPLOAD_SIZE_MB,
+    MaxBodySizeMiddleware,
+    get_max_upload_size_bytes,
+)
+
+
+async def _echo_body_app(scope, receive, send):
+    """Minimal ASGI app that reads the full body then returns 200."""
+    body = b""
+    more_body = True
+    while more_body:
+        message = await receive()
+        body += message.get("body", b"")
+        more_body = message.get("more_body", False)
+    await send({"type": "http.response.start", "status": 200, "headers": []})
+    await send(
+        {"type": "http.response.body", "body": f"received {len(body)} bytes".encode()}
+    )
+
+
+def make_scope(headers=None, method="POST", path="/upload"):
+    raw_headers = [
+        (k.lower().encode(), v.encode()) for k, v in (headers or {}).items()
+    ]
+    return {
+        "type": "http",
+        "method": method,
+        "path": path,
+        "headers": raw_headers,
+    }
+
+
+class FakeReceiveStream:
+    """Feeds a list of body chunks as successive http.request ASGI messages."""
+
+    def __init__(self, chunks):
+        self._chunks = list(chunks)
+
+    async def __call__(self):
+        if not self._chunks:
+            return {"type": "http.request", "body": b"", "more_body": False}
+        chunk = self._chunks.pop(0)
+        return {
+            "type": "http.request",
+            "body": chunk,
+            "more_body": bool(self._chunks),
+        }
+
+
+class CollectingSend:
+    def __init__(self):
+        self.messages = []
+
+    async def __call__(self, message):
+        self.messages.append(message)
+
+    @property
+    def status(self):
+        for m in self.messages:
+            if m["type"] == "http.response.start":
+                return m["status"]
+        return None
+
+    @property
+    def body(self):
+        return b"".join(
+            m.get("body", b"")
+            for m in self.messages
+            if m["type"] == "http.response.body"
+        )
+
+    def header(self, name: bytes):
+        for m in self.messages:
+            if m["type"] == "http.response.start":
+                for k, v in m["headers"]:
+                    if k.lower() == name.lower():
+                        return v.decode()
+        return None
+
+
+class TestConfig:
+    def test_default_is_100mb(self, monkeypatch):
+        monkeypatch.delenv("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", raising=False)
+        assert DEFAULT_MAX_UPLOAD_SIZE_MB == 100
+        assert get_max_upload_size_bytes() == 100 * 1024 * 1024
+
+    def test_reads_env_override(self, monkeypatch):
+        monkeypatch.setenv("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", "5")
+        assert get_max_upload_size_bytes() == 5 * 1024 * 1024
+
+    def test_malformed_env_falls_back_to_default(self, monkeypatch):
+        monkeypatch.setenv("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", "not-a-number")
+        assert get_max_upload_size_bytes() == 100 * 1024 * 1024
+
+    def test_non_positive_env_falls_back_to_default(self, monkeypatch):
+        # A zero/negative limit would 413 every request that has a body.
+        monkeypatch.setenv("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", "0")
+        assert get_max_upload_size_bytes() == 100 * 1024 * 1024
+        monkeypatch.setenv("OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB", "-5")
+        assert get_max_upload_size_bytes() == 100 * 1024 * 1024
+
+
+class TestMiddlewareAsgiLevel:
+    @pytest.mark.asyncio
+    async def test_content_length_precheck_rejects_before_app_runs(self):
+        app_called = False
+
+        async def inner_app(scope, receive, send):
+            nonlocal app_called
+            app_called = True
+            await _echo_body_app(scope, receive, send)
+
+        middleware = MaxBodySizeMiddleware(inner_app, max_body_size=10)
+        scope = make_scope(headers={"content-length": "1000"})
+        send = CollectingSend()
+        await middleware(scope, FakeReceiveStream([b"x" * 1000]), send)
+
+        assert not app_called, "inner app must not run when Content-Length exceeds the limit"
+        assert send.status == 413
+
+    @pytest.mark.asyncio
+    async def test_small_body_passes_through(self):
+        middleware = MaxBodySizeMiddleware(_echo_body_app, max_body_size=1000)
+        scope = make_scope(headers={"content-length": "5"})
+        send = CollectingSend()
+        await middleware(scope, FakeReceiveStream([b"hello"]), send)
+
+        assert send.status == 200
+        assert send.body == b"received 5 bytes"
+
+    @pytest.mark.asyncio
+    async def test_streaming_body_without_content_length_is_still_enforced(self):
+        """A client can omit Content-Length (chunked transfer-encoding) - the
+        middleware must still catch an oversized body as it streams in."""
+        middleware = MaxBodySizeMiddleware(_echo_body_app, max_body_size=10)
+        scope = make_scope(headers={})  # no content-length
+        send = CollectingSend()
+        chunks = [b"a" * 5, b"b" * 5, b"c" * 5]  # totals 15 > 10
+        await middleware(scope, FakeReceiveStream(chunks), send)
+
+        assert send.status == 413
+
+    @pytest.mark.asyncio
+    async def test_malformed_content_length_falls_back_to_streaming_check(self):
+        middleware = MaxBodySizeMiddleware(_echo_body_app, max_body_size=10)
+        scope = make_scope(headers={"content-length": "not-a-number"})
+        send = CollectingSend()
+        await middleware(scope, FakeReceiveStream([b"x" * 1000]), send)
+
+        assert send.status == 413  # caught by streaming enforcement instead
+
+    @pytest.mark.asyncio
+    async def test_non_http_scope_passes_through_untouched(self):
+        calls = []
+
+        async def inner_app(scope, receive, send):
+            calls.append(scope["type"])
+
+        middleware = MaxBodySizeMiddleware(inner_app, max_body_size=10)
+        await middleware({"type": "lifespan"}, FakeReceiveStream([]), CollectingSend())
+        assert calls == ["lifespan"]
+
+    @pytest.mark.asyncio
+    async def test_exactly_at_limit_passes(self):
+        middleware = MaxBodySizeMiddleware(_echo_body_app, max_body_size=10)
+        scope = make_scope(headers={"content-length": "10"})
+        send = CollectingSend()
+        await middleware(scope, FakeReceiveStream([b"x" * 10]), send)
+        assert send.status == 200
+
+    @pytest.mark.asyncio
+    async def test_one_byte_over_limit_rejected(self):
+        middleware = MaxBodySizeMiddleware(_echo_body_app, max_body_size=10)
+        scope = make_scope(headers={"content-length": "11"})
+        send = CollectingSend()
+        await middleware(scope, FakeReceiveStream([b"x" * 11]), send)
+        assert send.status == 413
+
+
+class TestCorsInteraction:
+    @pytest.mark.asyncio
+    async def test_cors_headers_present_on_413_when_wrapped_by_cors_middleware(self):
+        """MaxBodySizeMiddleware must sit *inside* CORSMiddleware so a
+        rejected upload still gets CORS headers (mirrors the ordering used
+        in api/main.py)."""
+        app = CORSMiddleware(
+            MaxBodySizeMiddleware(_echo_body_app, max_body_size=10),
+            allow_origins=["http://example.com"],
+            allow_credentials=True,
+        )
+        scope = make_scope(
+            headers={"content-length": "1000", "origin": "http://example.com"}
+        )
+        send = CollectingSend()
+        await app(scope, FakeReceiveStream([b"x" * 1000]), send)
+
+        assert send.status == 413
+        assert send.header(b"access-control-allow-origin") == "http://example.com"
+
+
+class TestFastApiIntegration:
+    """Drives the middleware through a real FastAPI app + TestClient (real
+    HTTP-shaped requests via httpx), not just hand-rolled ASGI messages."""
+
+    @pytest.fixture
+    def small_limit_app(self):
+        app = FastAPI()
+
+        @app.post("/echo")
+        async def echo():
+            return {"ok": True}
+
+        app.add_middleware(MaxBodySizeMiddleware, max_body_size=100)
+        return app
+
+    def test_small_request_passes(self, small_limit_app):
+        client = TestClient(small_limit_app)
+        response = client.post("/echo", content=b"x" * 50)
+        assert response.status_code == 200
+
+    def test_oversized_request_rejected_with_413(self, small_limit_app):
+        client = TestClient(small_limit_app)
+        response = client.post("/echo", content=b"x" * 1000)
+        assert response.status_code == 413
+        assert "exceeds the maximum" in response.json()["detail"]
+
+
+class TestRealAppWiring:
+    def test_real_app_registers_middleware_with_configured_size(self):
+        from api.main import MAX_UPLOAD_SIZE_BYTES, app
+
+        matches = [m for m in app.user_middleware if m.cls is MaxBodySizeMiddleware]
+        assert len(matches) == 1
+        assert matches[0].kwargs["max_body_size"] == MAX_UPLOAD_SIZE_BYTES
+
+    def test_real_app_wraps_it_inside_cors(self):
+        """CORS must be outermost so it can attach headers to a 413 from
+        MaxBodySizeMiddleware - i.e. CORSMiddleware must be added *after* it."""
+        from api.main import app
+
+        classes = [m.cls.__name__ for m in app.user_middleware]
+        assert classes.index("CORSMiddleware") < classes.index("MaxBodySizeMiddleware")

From 3887346206f3823b61666bab44f98fe5241853b4 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 10:32:51 -0400
Subject: [PATCH 143/345] fix: harden source upload path handling and cap array
 inputs (#1015)

Three small, independent hardening fixes to source ingestion:

- generate_unique_filename() checked `if not resolved.exists()` then let
  a separate write happen later - two concurrent uploads landing on the
  same candidate name could both pass the check and clobber each other.
  Now atomically claims the name via Path.touch(exist_ok=False) (O_EXCL)
  as part of the search loop itself.

- _resolve_source_file() and _is_source_file_available() compared
  `resolved_path.startswith(safe_root)` without a trailing separator - a
  sibling directory that merely starts with the same string (e.g.
  "uploads_evil/") would incorrectly be treated as contained, unlike this
  file's other two path checks which already guard with `+ os.sep`. Not
  reachable today (source.asset.file_path is only ever set server-side),
  but this closes the gap and matches the existing pattern.

- SourceCreate.notebooks/transformations had no length limit; both are
  iterated with a per-item DB lookup in create_source(), so an unbounded
  array let a single request trigger an unbounded number of sequential DB
  round trips. Capped at 50.

tests/test_upload_type_mitigations.py adds no code change - it documents
why the adjacent "no file type allowlist on uploads" finding was
investigated and judged low-risk without one (downloads are already
served as application/octet-stream regardless of actual file type).
---
 api/models.py                            |   8 +-
 api/routers/sources.py                   |  24 ++-
 tests/test_source_create_array_limits.py |  56 +++++++
 tests/test_source_path_containment.py    | 177 +++++++++++++++++++++++
 tests/test_upload_toctou_race.py         | 127 ++++++++++++++++
 tests/test_upload_type_mitigations.py    |  94 ++++++++++++
 6 files changed, 477 insertions(+), 9 deletions(-)
 create mode 100644 tests/test_source_create_array_limits.py
 create mode 100644 tests/test_source_path_containment.py
 create mode 100644 tests/test_upload_toctou_race.py
 create mode 100644 tests/test_upload_type_mitigations.py

diff --git a/api/models.py b/api/models.py
index 96586f8c..c39528e7 100644
--- a/api/models.py
+++ b/api/models.py
@@ -301,7 +301,9 @@ class SourceCreate(BaseModel):
     )
     # New multi-notebook support
     notebooks: Optional[List[str]] = Field(
-        None, description="List of notebook IDs to add the source to"
+        None,
+        max_length=50,
+        description="List of notebook IDs to add the source to (max 50)",
     )
     # Required fields
     type: str = Field(..., description="Source type: link, upload, or text")
@@ -310,7 +312,9 @@ class SourceCreate(BaseModel):
     content: Optional[str] = Field(None, description="Text content for text type")
     title: Optional[str] = Field(None, description="Source title")
     transformations: Optional[List[str]] = Field(
-        default_factory=list, description="Transformation IDs to apply"
+        default_factory=list,
+        max_length=50,
+        description="Transformation IDs to apply (max 50)",
     )
     embed: bool = Field(False, description="Whether to embed content for vector search")
     delete_source: bool = Field(
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 1ef25c01..8bdb55cf 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -66,7 +66,10 @@ async def _stamp_source_view(source_id: str) -> None:
 
 
 def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
-    """Generate unique filename like Streamlit app (append counter if file exists)."""
+    """Generate unique filename like Streamlit app (append counter if file exists),
+    atomically reserving it so two concurrent uploads that land on the same
+    candidate name can't both pass the check and then clobber each other -
+    the loser's claim attempt fails and moves on to the next candidate."""
     file_path = Path(upload_folder)
     file_path.mkdir(parents=True, exist_ok=True)
 
@@ -78,8 +81,9 @@ def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
     # Split filename and extension
     stem = Path(safe_filename).stem
     suffix = Path(safe_filename).suffix
+    safe_root = file_path.resolve()
 
-    # Check if file exists and generate unique name
+    # Find and atomically claim a unique name
     counter = 0
     while True:
         if counter == 0:
@@ -90,11 +94,17 @@ def generate_unique_filename(original_filename: str, upload_folder: str) -> str:
         full_path = file_path / new_filename
         # Verify resolved path stays within upload folder
         resolved = full_path.resolve()
-        if not str(resolved).startswith(str(file_path.resolve()) + os.sep):
+        if not str(resolved).startswith(str(safe_root) + os.sep):
             raise ValueError("Invalid filename: path traversal detected")
-        if not resolved.exists():
+
+        try:
+            # O_EXCL via touch(exist_ok=False): atomically create-or-fail,
+            # instead of exists() (check) followed by a separate write
+            # (act) elsewhere with a race window in between.
+            resolved.touch(exist_ok=False)
             return str(resolved)
-        counter += 1
+        except FileExistsError:
+            counter += 1
 
 
 def _write_uploaded_file(filename: str, content: bytes) -> str:
@@ -642,7 +652,7 @@ async def _resolve_source_file(source_id: str) -> tuple[str, str]:
     safe_root = os.path.realpath(UPLOADS_FOLDER)
     resolved_path = os.path.realpath(file_path)
 
-    if not resolved_path.startswith(safe_root):
+    if resolved_path != safe_root and not resolved_path.startswith(safe_root + os.sep):
         logger.warning(
             f"Blocked download outside uploads directory for source {source_id}: {resolved_path}"
         )
@@ -663,7 +673,7 @@ def _is_source_file_available(source: Source) -> Optional[bool]:
     safe_root = os.path.realpath(UPLOADS_FOLDER)
     resolved_path = os.path.realpath(file_path)
 
-    if not resolved_path.startswith(safe_root):
+    if resolved_path != safe_root and not resolved_path.startswith(safe_root + os.sep):
         return False
 
     return os.path.exists(resolved_path)
diff --git a/tests/test_source_create_array_limits.py b/tests/test_source_create_array_limits.py
new file mode 100644
index 00000000..534bcff3
--- /dev/null
+++ b/tests/test_source_create_array_limits.py
@@ -0,0 +1,56 @@
+"""
+Tests for max_length on SourceCreate.notebooks/transformations
+(api/models.py).
+
+Both are iterated with a per-item DB lookup (Notebook.get()/
+Transformation.get()) in api/routers/sources.py's create_source() - an
+unbounded array let a caller amplify a single request into an arbitrarily
+large number of sequential DB round trips.
+"""
+
+import pytest
+from pydantic import ValidationError
+
+from api.models import SourceCreate
+
+
+def make_ids(n, prefix):
+    return [f"{prefix}:{i}" for i in range(n)]
+
+
+class TestNotebooksMaxLength:
+    def test_accepts_up_to_50_notebooks(self):
+        request = SourceCreate(type="text", content="hi", notebooks=make_ids(50, "notebook"))
+        assert len(request.notebooks) == 50
+
+    def test_rejects_51_notebooks(self):
+        with pytest.raises(ValidationError):
+            SourceCreate(type="text", content="hi", notebooks=make_ids(51, "notebook"))
+
+    def test_none_notebooks_still_allowed(self):
+        # Pre-existing behavior (validate_notebook_fields): None normalizes
+        # to an empty list, unrelated to the max_length addition.
+        request = SourceCreate(type="text", content="hi", notebooks=None)
+        assert request.notebooks == []
+
+    def test_empty_list_still_allowed(self):
+        request = SourceCreate(type="text", content="hi", notebooks=[])
+        assert request.notebooks == []
+
+
+class TestTransformationsMaxLength:
+    def test_accepts_up_to_50_transformations(self):
+        request = SourceCreate(
+            type="text", content="hi", transformations=make_ids(50, "transformation")
+        )
+        assert len(request.transformations) == 50
+
+    def test_rejects_51_transformations(self):
+        with pytest.raises(ValidationError):
+            SourceCreate(
+                type="text", content="hi", transformations=make_ids(51, "transformation")
+            )
+
+    def test_default_is_empty_list(self):
+        request = SourceCreate(type="text", content="hi")
+        assert request.transformations == []
diff --git a/tests/test_source_path_containment.py b/tests/test_source_path_containment.py
new file mode 100644
index 00000000..1c46cbc5
--- /dev/null
+++ b/tests/test_source_path_containment.py
@@ -0,0 +1,177 @@
+"""
+Tests for the sources.py path-containment fix in _resolve_source_file() and
+_is_source_file_available() (api/routers/sources.py).
+
+Both compared `resolved_path.startswith(safe_root)` without a trailing
+separator - a sibling directory that merely starts with the same string
+(e.g. "uploads_evil/") would incorrectly be treated as contained, unlike
+the file's other two path checks (generate_unique_filename(), the inline
+check in create_source()) which already guard with `+ os.sep`. Not
+reachable today (source.asset.file_path is only ever set server-side), but
+these lock in the fix and guard against regressions.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from api.routers.sources import _is_source_file_available, _resolve_source_file
+from open_notebook.config import UPLOADS_FOLDER
+from open_notebook.domain.notebook import Asset, Source
+
+
+def make_source(file_path=None, **overrides):
+    defaults = dict(
+        id="source:test123",
+        title="Test Source",
+        asset=Asset(file_path=file_path) if file_path else None,
+    )
+    defaults.update(overrides)
+    return Source(**defaults)
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestIsSourceFileAvailableRejectsSiblingDirectoryBypass:
+    def test_sibling_directory_with_matching_prefix_is_not_available(
+        self, tmp_path, monkeypatch
+    ):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        sibling = tmp_path / "uploads_evil"
+        sibling.mkdir()
+        evil_file = sibling / "secret.txt"
+        evil_file.write_bytes(b"not yours")
+
+        source = make_source(file_path=str(evil_file))
+        assert _is_source_file_available(source) is False
+
+    def test_file_genuinely_inside_uploads_folder_is_available(
+        self, tmp_path, monkeypatch
+    ):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        legit_file = real_root / "document.pdf"
+        legit_file.write_bytes(b"pdf bytes")
+
+        source = make_source(file_path=str(legit_file))
+        assert _is_source_file_available(source) is True
+
+    def test_missing_file_inside_uploads_folder_is_unavailable_not_error(
+        self, tmp_path, monkeypatch
+    ):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        missing_file = real_root / "does-not-exist.pdf"
+        source = make_source(file_path=str(missing_file))
+        assert _is_source_file_available(source) is False
+
+    def test_no_asset_returns_none(self):
+        source = make_source(file_path=None)
+        assert _is_source_file_available(source) is None
+
+    def test_path_traversal_outside_root_is_not_available(self, tmp_path, monkeypatch):
+        root = tmp_path / "uploads"
+        root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(root))
+
+        outside = tmp_path / "outside.pdf"
+        outside.write_bytes(b"not yours")
+        traversal_path = str(root / ".." / "outside.pdf")
+
+        source = make_source(file_path=traversal_path)
+        assert _is_source_file_available(source) is False
+
+
+class TestResolveSourceFileRejectsSiblingDirectoryBypass:
+    @pytest.mark.asyncio
+    async def test_sibling_directory_raises_403(self, tmp_path, monkeypatch):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        sibling = tmp_path / "uploads_evil"
+        sibling.mkdir()
+        evil_file = sibling / "secret.txt"
+        evil_file.write_bytes(b"not yours")
+
+        source = make_source(file_path=str(evil_file))
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=source)
+        ):
+            from fastapi import HTTPException
+
+            with pytest.raises(HTTPException) as exc_info:
+                await _resolve_source_file("source:test123")
+            assert exc_info.value.status_code == 403
+
+    @pytest.mark.asyncio
+    async def test_file_genuinely_inside_uploads_folder_resolves(
+        self, tmp_path, monkeypatch
+    ):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        legit_file = real_root / "document.pdf"
+        legit_file.write_bytes(b"pdf bytes")
+
+        source = make_source(file_path=str(legit_file))
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=source)
+        ):
+            resolved_path, filename = await _resolve_source_file("source:test123")
+
+        assert filename == "document.pdf"
+        assert resolved_path == str(legit_file.resolve())
+
+
+class TestDownloadEndpointRejectsSiblingDirectoryBypass:
+    """End-to-end through the actual HTTP endpoint."""
+
+    def test_download_returns_403_for_sibling_directory_file(
+        self, client, tmp_path, monkeypatch
+    ):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        sibling = tmp_path / "uploads_evil"
+        sibling.mkdir()
+        evil_file = sibling / "secret.txt"
+        evil_file.write_bytes(b"not yours")
+
+        source = make_source(file_path=str(evil_file))
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=source)
+        ):
+            response = client.get("/api/sources/source:test123/download")
+
+        assert response.status_code == 403
+
+
+class TestRealUploadsFolderStillWorks:
+    """Sanity check against the real (non-monkeypatched) UPLOADS_FOLDER."""
+
+    def test_real_uploads_folder_file_is_available(self):
+        from pathlib import Path
+
+        test_file = Path(UPLOADS_FOLDER) / "containment_test_file.txt"
+        test_file.write_bytes(b"test")
+        try:
+            source = make_source(file_path=str(test_file))
+            assert _is_source_file_available(source) is True
+        finally:
+            test_file.unlink(missing_ok=True)
diff --git a/tests/test_upload_toctou_race.py b/tests/test_upload_toctou_race.py
new file mode 100644
index 00000000..7f26674e
--- /dev/null
+++ b/tests/test_upload_toctou_race.py
@@ -0,0 +1,127 @@
+"""
+Tests for the TOCTOU race fix in generate_unique_filename()
+(api/routers/sources.py).
+
+The old implementation checked `if not resolved.exists(): return path` and
+left the actual write to a *separate* open(path, "wb") call in
+_write_uploaded_file() - "wb" truncates rather than failing, so two
+concurrent uploads that computed the same candidate name could both pass
+the check and then clobber each other, silently losing one upload.
+
+generate_unique_filename() now atomically claims the name via
+Path.touch(exist_ok=False) (O_EXCL under the hood) as part of the search
+loop itself, so a losing concurrent caller gets FileExistsError and moves
+on to the next candidate instead of racing.
+
+These tests use real OS threads (not asyncio) since the race requires
+actual kernel-level interleaving of filesystem syscalls, which release the
+GIL - asyncio's single-threaded cooperative concurrency wouldn't exercise it.
+"""
+
+import time
+from concurrent.futures import ThreadPoolExecutor
+from pathlib import Path
+
+from api.routers.sources import generate_unique_filename
+
+
+def old_racy_pattern(upload_folder, original_filename, content, delay=0.02):
+    """Standalone repro of the pre-fix check-then-act pattern, with an
+    injected delay to reliably widen the race window for testing (real
+    concurrent uploads don't need an artificial delay to lose the race -
+    this just makes the demonstration deterministic instead of flaky)."""
+    file_path = Path(upload_folder)
+    stem = Path(original_filename).stem
+    suffix = Path(original_filename).suffix
+    counter = 0
+    while True:
+        candidate = (
+            original_filename if counter == 0 else f"{stem} ({counter}){suffix}"
+        )
+        full_path = file_path / candidate
+        if not full_path.exists():
+            break
+        counter += 1
+    time.sleep(delay)  # the race window
+    with open(full_path, "wb") as f:
+        f.write(content)
+    return str(full_path)
+
+
+def new_fixed_pattern(upload_folder, original_filename, content):
+    file_path = generate_unique_filename(original_filename, upload_folder)
+    with open(file_path, "wb") as f:
+        f.write(content)
+    return file_path
+
+
+def run_concurrent_uploads(write_fn, upload_folder, n=8):
+    with ThreadPoolExecutor(max_workers=n) as pool:
+        futures = [
+            pool.submit(
+                write_fn, upload_folder, "report.pdf", f"content-{i}".encode()
+            )
+            for i in range(n)
+        ]
+        return [f.result() for f in futures]
+
+
+def distinct_payloads_on_disk(upload_folder):
+    return {f.read_bytes() for f in Path(upload_folder).iterdir()}
+
+
+class TestOldPatternLosesWritesUnderRace:
+    """Confirms the vulnerability this fix addresses is real, using a
+    standalone repro of the old code (not the current, fixed source)."""
+
+    def test_concurrent_uploads_to_same_name_lose_data(self, tmp_path):
+        n = 8
+        run_concurrent_uploads(old_racy_pattern, str(tmp_path), n=n)
+        payloads = distinct_payloads_on_disk(tmp_path)
+        assert len(payloads) < n, (
+            "expected the old check-then-act pattern to lose at least one "
+            "concurrent write to a real race"
+        )
+
+
+class TestFixedGenerateUniqueFilenameSurvivesRace:
+    def test_concurrent_uploads_to_same_name_all_survive(self, tmp_path):
+        n = 8
+        run_concurrent_uploads(new_fixed_pattern, str(tmp_path), n=n)
+        files = list(tmp_path.iterdir())
+        payloads = distinct_payloads_on_disk(tmp_path)
+        assert len(files) == n, f"expected {n} files, got {len(files)}"
+        assert len(payloads) == n, (
+            f"expected all {n} distinct payloads preserved, got {len(payloads)}"
+        )
+
+    def test_claimed_path_exists_and_is_empty_immediately(self, tmp_path):
+        """The function itself must create the file (not just check for
+        its absence) - proving the claim is atomic with the check."""
+        path = generate_unique_filename("doc.txt", str(tmp_path))
+        assert Path(path).exists()
+        assert Path(path).stat().st_size == 0
+
+    def test_sequential_calls_still_increment_correctly(self, tmp_path):
+        path1 = generate_unique_filename("doc.txt", str(tmp_path))
+        Path(path1).write_bytes(b"first")
+        path2 = generate_unique_filename("doc.txt", str(tmp_path))
+        Path(path2).write_bytes(b"second")
+        path3 = generate_unique_filename("doc.txt", str(tmp_path))
+
+        assert Path(path1).name == "doc.txt"
+        assert Path(path2).name == "doc (1).txt"
+        assert Path(path3).name == "doc (2).txt"
+
+    def test_pre_existing_file_is_skipped(self, tmp_path):
+        (tmp_path / "existing.txt").write_bytes(b"already here")
+        path = generate_unique_filename("existing.txt", str(tmp_path))
+        assert Path(path).name == "existing (1).txt"
+
+    def test_directory_components_are_stripped_not_traversed(self, tmp_path):
+        """os.path.basename() strips directory components from the
+        original filename before the traversal check ever runs - e.g.
+        "../../etc/passwd" becomes just "passwd", confined to tmp_path."""
+        path = generate_unique_filename("../../etc/passwd", str(tmp_path))
+        assert Path(path).parent == tmp_path.resolve()
+        assert Path(path).name == "passwd"
diff --git a/tests/test_upload_type_mitigations.py b/tests/test_upload_type_mitigations.py
new file mode 100644
index 00000000..c4981ced
--- /dev/null
+++ b/tests/test_upload_type_mitigations.py
@@ -0,0 +1,94 @@
+"""
+Regression tests documenting why the "no file type/content allowlist on
+uploads" finding is low-risk without adding one.
+
+Investigated adding an extension/MIME allowlist and decided against it:
+- Downloads are always served as application/octet-stream regardless of
+  the uploaded file's actual type (locked in below) - the classic "upload
+  HTML/SVG, victim opens it, browser renders/executes it" vector is closed
+  independent of any allowlist.
+- Uploaded files are never executed server-side; content-core only reads
+  and extracts text/media from them.
+- content_core.content.identification.file_detector.FileDetector already
+  does its own content-sniffing (magic bytes, not just extension) and
+  raises UnsupportedTypeException for content it can't classify -
+  duplicating that as a hand-maintained extension allowlist at the API
+  layer would drift out of sync with content-core's 50+ supported types
+  and either give false confidence or block legitimate uploads.
+- Upload size is already bounded (see api/middleware.py).
+
+So arbitrary bytes can still be written to disk under a
+server-controlled filename (a generically accepted property of file
+upload services), but not served in a way a browser would render/execute,
+and not executed server-side either.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.notebook import Asset, Source
+
+
+def make_source(file_path, **overrides):
+    defaults = dict(id="source:test123", title="Test Source", asset=Asset(file_path=file_path))
+    defaults.update(overrides)
+    return Source(**defaults)
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestDownloadsAlwaysServedAsOctetStream:
+    def test_html_file_download_is_octet_stream_not_text_html(self, client, tmp_path, monkeypatch):
+        """Even if an attacker got an .html file stored, downloading it
+        must never come back as text/html (which a browser would render)."""
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        malicious_html = real_root / "innocuous.html"
+        malicious_html.write_text("<script>alert(document.cookie)</script>")
+
+        source = make_source(file_path=str(malicious_html))
+        with patch("api.routers.sources.Source.get", new=AsyncMock(return_value=source)):
+            response = client.get("/api/sources/source:test123/download")
+
+        assert response.status_code == 200
+        assert response.headers["content-type"] == "application/octet-stream"
+
+    def test_svg_file_download_is_octet_stream_not_svg_xml(self, client, tmp_path, monkeypatch):
+        real_root = tmp_path / "uploads"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
+
+        malicious_svg = real_root / "image.svg"
+        malicious_svg.write_text(
+            '<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script></svg>'
+        )
+
+        source = make_source(file_path=str(malicious_svg))
+        with patch("api.routers.sources.Source.get", new=AsyncMock(return_value=source)):
+            response = client.get("/api/sources/source:test123/download")
+
+        assert response.status_code == 200
+        assert response.headers["content-type"] == "application/octet-stream"
+
+
+class TestContentCoreRejectsUnrecognizedContent:
+    @pytest.mark.asyncio
+    async def test_file_detector_raises_for_unrecognized_content(self, tmp_path):
+        from content_core.common.exceptions import UnsupportedTypeException
+        from content_core.content.identification.file_detector import FileDetector
+
+        garbage = tmp_path / "garbage.bin"
+        garbage.write_bytes(bytes(range(256)) * 4)  # not any recognized signature/text pattern
+
+        detector = FileDetector()
+        with pytest.raises(UnsupportedTypeException):
+            await detector.detect(str(garbage))

From a5a1f9beb0d40a43cfbc821491c6887e85876af2 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 12:34:46 -0400
Subject: [PATCH 144/345] fix: restrict CreateCredentialRequest.provider to a
 known allowlist (#1016)

* fix: restrict CreateCredentialRequest.provider to a known allowlist

provider was a bare `str`, so any string (typo'd or bogus) flowed
through validation to the domain layer and failed later with a less
clear error, instead of a clean 422 at the API boundary.

Add a SupportedProvider Literal covering the 17 providers already
handled elsewhere - kept in sync with the frontend's ALL_PROVIDERS,
connection_tester.py's TEST_MODELS, and credentials_service.py's
PROVIDER_ENV_CONFIG (a test asserts all three agree on the same set).

* test: lock the frontend provider list into the sync test

The frontend's ALL_PROVIDERS copy was only cross-checked in a docstring;
extract its string literals from the source so all four provider lists
(Literal, TEST_MODELS, PROVIDER_ENV_CONFIG, frontend) are enforced by CI.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/CLAUDE.md                                |   4 +-
 api/models.py                                |  30 +++++-
 tests/test_credential_provider_validation.py | 107 +++++++++++++++++++
 3 files changed, 138 insertions(+), 3 deletions(-)
 create mode 100644 tests/test_credential_provider_validation.py

diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index bba838b9..4e68c93d 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -172,8 +172,8 @@ The Credential Management system enables users to configure AI provider credenti
 | POST | `/credentials/{credential_id}/register-models` | Register discovered models |
 | POST | `/credentials/migrate-from-provider-config` | Migrate from legacy ProviderConfig |
 
-**Supported Providers** (13 total):
-- Simple API key: `openai`, `anthropic`, `google`, `groq`, `mistral`, `deepseek`, `xai`, `openrouter`, `voyage`, `elevenlabs`
+**Supported Providers** (17 total; enforced via `SupportedProvider` Literal in `api/models.py`, kept in sync with the frontend's `ALL_PROVIDERS`, `connection_tester.py`'s `TEST_MODELS`, and `credentials_service.py`'s `PROVIDER_ENV_CONFIG`):
+- Simple API key: `openai`, `anthropic`, `google`, `groq`, `mistral`, `deepseek`, `xai`, `openrouter`, `voyage`, `elevenlabs`, `deepgram`, `dashscope`, `minimax`
 - URL-based: `ollama`
 - Multi-field: `azure`, `vertex`, `openai_compatible`
 
diff --git a/api/models.py b/api/models.py
index c39528e7..981940c0 100644
--- a/api/models.py
+++ b/api/models.py
@@ -570,11 +570,39 @@ class MigrationResult(BaseModel):
 
 # Notebook delete cascade models
 # Credential models
+
+# Kept in sync with the frontend's ALL_PROVIDERS
+# (frontend/src/app/(dashboard)/settings/api-keys/page.tsx), TEST_MODELS
+# (open_notebook/ai/connection_tester.py), and PROVIDER_ENV_CONFIG
+# (api/credentials_service.py) - all three independently agree on this set.
+SupportedProvider = Literal[
+    "openai",
+    "anthropic",
+    "google",
+    "groq",
+    "mistral",
+    "deepseek",
+    "xai",
+    "openrouter",
+    "dashscope",
+    "minimax",
+    "voyage",
+    "elevenlabs",
+    "deepgram",
+    "ollama",
+    "azure",
+    "vertex",
+    "openai_compatible",
+]
+
+
 class CreateCredentialRequest(BaseModel):
     """Request to create a new credential."""
 
     name: str = Field(..., description="Credential name")
-    provider: str = Field(..., description="Provider name (openai, anthropic, etc.)")
+    provider: SupportedProvider = Field(
+        ..., description="Provider name (openai, anthropic, etc.)"
+    )
     modalities: List[str] = Field(
         default_factory=list,
         description="Supported modalities (language, embedding, text_to_speech, speech_to_text)",
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
new file mode 100644
index 00000000..4afcb624
--- /dev/null
+++ b/tests/test_credential_provider_validation.py
@@ -0,0 +1,107 @@
+"""
+Tests for the Literal[...] constraint on CreateCredentialRequest.provider
+(api/models.py). Previously `provider: str` accepted any string; a typo'd
+or bogus provider would flow through to the domain layer and fail later
+with a less clear error instead of a clean 422 at the API boundary.
+"""
+
+import pytest
+from fastapi.testclient import TestClient
+from pydantic import ValidationError
+
+from api.models import CreateCredentialRequest, SupportedProvider
+
+KNOWN_GOOD_PROVIDERS = [
+    "openai",
+    "anthropic",
+    "google",
+    "groq",
+    "mistral",
+    "deepseek",
+    "xai",
+    "openrouter",
+    "dashscope",
+    "minimax",
+    "voyage",
+    "elevenlabs",
+    "deepgram",
+    "ollama",
+    "azure",
+    "vertex",
+    "openai_compatible",
+]
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestSupportedProviderMatchesOtherSourcesOfTruth:
+    def test_matches_known_good_provider_list(self):
+        assert set(SupportedProvider.__args__) == set(KNOWN_GOOD_PROVIDERS)
+
+    def test_matches_connection_tester_test_models_keys(self):
+        from open_notebook.ai.connection_tester import TEST_MODELS
+
+        assert set(SupportedProvider.__args__) == set(TEST_MODELS.keys())
+
+    def test_matches_credentials_service_provider_env_config_keys(self):
+        from api.credentials_service import PROVIDER_ENV_CONFIG
+
+        assert set(SupportedProvider.__args__) == set(PROVIDER_ENV_CONFIG.keys())
+
+    def test_matches_frontend_all_providers_list(self):
+        """The frontend keeps its own copy (ALL_PROVIDERS) that a Python
+        test can't import, so extract the string literals from the source
+        instead - adding a provider to only one of the lists must fail CI."""
+        import re
+        from pathlib import Path
+
+        page = (
+            Path(__file__).parent.parent
+            / "frontend/src/app/(dashboard)/settings/api-keys/page.tsx"
+        )
+        source = page.read_text()
+        match = re.search(r"const ALL_PROVIDERS = \[(.*?)\]", source, re.DOTALL)
+        assert match, "ALL_PROVIDERS array not found in api-keys/page.tsx"
+        frontend_providers = re.findall(r"'([a-z0-9_]+)'", match.group(1))
+        assert set(SupportedProvider.__args__) == set(frontend_providers)
+
+
+class TestCreateCredentialRequestValidation:
+    @pytest.mark.parametrize("provider", KNOWN_GOOD_PROVIDERS)
+    def test_accepts_every_known_provider(self, provider):
+        request = CreateCredentialRequest(name="Test", provider=provider)
+        assert request.provider == provider
+
+    @pytest.mark.parametrize(
+        "bad_provider",
+        ["openai ", " openai", "OpenAI", "opnai", "not_a_real_provider", "", "sqlite"],
+    )
+    def test_rejects_unknown_or_malformed_provider(self, bad_provider):
+        with pytest.raises(ValidationError):
+            CreateCredentialRequest(name="Test", provider=bad_provider)
+
+
+class TestCreateCredentialEndpointRejectsBadProvider:
+    def test_post_credentials_with_bogus_provider_returns_422(self, client):
+        response = client.post(
+            "/api/credentials",
+            json={"name": "Test", "provider": "not_a_real_provider"},
+        )
+        assert response.status_code == 422
+
+    def test_post_credentials_with_valid_provider_passes_validation(
+        self, client, monkeypatch
+    ):
+        """Doesn't assert overall success (that needs DB/encryption setup,
+        covered elsewhere) - just that a valid provider clears the 422
+        validation gate and reaches actual route logic."""
+        response = client.post(
+            "/api/credentials",
+            json={"name": "Test", "provider": "openai", "api_key": "sk-test"},
+        )
+        assert response.status_code != 422

From 9113ab58750474a22b67c202331551ac48c06531 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 12:40:27 -0400
Subject: [PATCH 145/345] fix: don't leak internal exception text in API error
 responses (#1017)

api/routers/sources.py and api/podcast_service.py interpolated the raw
exception (detail=f"...: {str(e)}") into client-facing error responses -
inconsistent with the safer pattern already used elsewhere in the same
files (e.g. the download handlers), which log the raw exception
server-side but return a fixed generic message. Internal details (DB
hostnames, connection errors, stack-trace fragments) could leak to any
API caller through a 500 response.

Every occurrence already had a matching logger.error() call, so this is
a client-facing message change only, not a logging change. Deliberate
app-authored messages (InvalidInputError text, "Notebook X not found",
result.error_message) are untouched - only raw f"{str(e)}" interpolation
is affected.

tests/test_config_endpoint_no_leak.py is a regression lock for
api/routers/config.py (already correct, not touched by this diff) rather
than a fix - added since it shares the same "unauthenticated endpoint,
don't leak exception text" concern.
---
 api/podcast_service.py                   |  12 +-
 api/routers/sources.py                   |  34 ++---
 tests/test_config_endpoint_no_leak.py    |  76 ++++++++++
 tests/test_error_message_sanitization.py | 182 +++++++++++++++++++++++
 4 files changed, 274 insertions(+), 30 deletions(-)
 create mode 100644 tests/test_config_endpoint_no_leak.py
 create mode 100644 tests/test_error_message_sanitization.py

diff --git a/api/podcast_service.py b/api/podcast_service.py
index e7c6dc20..df37ea3c 100644
--- a/api/podcast_service.py
+++ b/api/podcast_service.py
@@ -108,7 +108,7 @@ class PodcastService:
             logger.error(f"Failed to submit podcast generation job: {e}")
             raise HTTPException(
                 status_code=500,
-                detail=f"Failed to submit podcast generation job: {str(e)}",
+                detail="Failed to submit podcast generation job",
             )
 
     @staticmethod
@@ -133,9 +133,7 @@ class PodcastService:
             }
         except Exception as e:
             logger.error(f"Failed to get podcast job status: {e}")
-            raise HTTPException(
-                status_code=500, detail=f"Failed to get job status: {str(e)}"
-            )
+            raise HTTPException(status_code=500, detail="Failed to get job status")
 
     @staticmethod
     async def list_episodes() -> list:
@@ -145,9 +143,7 @@ class PodcastService:
             return episodes
         except Exception as e:
             logger.error(f"Failed to list podcast episodes: {e}")
-            raise HTTPException(
-                status_code=500, detail=f"Failed to list episodes: {str(e)}"
-            )
+            raise HTTPException(status_code=500, detail="Failed to list episodes")
 
     @staticmethod
     async def get_episode(episode_id: str) -> PodcastEpisode:
@@ -157,7 +153,7 @@ class PodcastService:
             return episode
         except Exception as e:
             logger.error(f"Failed to get podcast episode {episode_id}: {e}")
-            raise HTTPException(status_code=404, detail=f"Episode not found: {str(e)}")
+            raise HTTPException(status_code=404, detail="Episode not found")
 
 
 class DefaultProfiles:
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 8bdb55cf..aba398a0 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -332,7 +332,7 @@ async def get_sources(
         raise
     except Exception as e:
         logger.error(f"Error fetching sources: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Error fetching sources: {str(e)}")
+        raise HTTPException(status_code=500, detail="Error fetching sources")
 
 
 @router.post("/sources", response_model=SourceResponse)
@@ -362,9 +362,7 @@ async def create_source(
                 file_path = await save_uploaded_file(upload_file)
             except Exception as e:
                 logger.error(f"File upload failed: {e}")
-                raise HTTPException(
-                    status_code=400, detail=f"File upload failed: {str(e)}"
-                )
+                raise HTTPException(status_code=400, detail="File upload failed")
 
         # Prepare content_state for processing
         content_state: dict[str, Any] = {}
@@ -502,7 +500,7 @@ async def create_source(
                     except Exception:
                         pass
                 raise HTTPException(
-                    status_code=500, detail=f"Failed to queue processing: {str(e)}"
+                    status_code=500, detail="Failed to queue processing"
                 )
 
         else:
@@ -629,7 +627,7 @@ async def create_source(
                 os.unlink(file_path)
             except Exception:
                 pass
-        raise HTTPException(status_code=500, detail=f"Error creating source: {str(e)}")
+        raise HTTPException(status_code=500, detail="Error creating source")
 
 
 @router.post("/sources/json", response_model=SourceResponse)
@@ -740,7 +738,7 @@ async def get_source(source_id: str):
         raise HTTPException(status_code=404, detail="Source not found")
     except Exception as e:
         logger.error(f"Error fetching source {source_id}: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Error fetching source: {str(e)}")
+        raise HTTPException(status_code=500, detail="Error fetching source")
 
 
 @router.head("/sources/{source_id}/download")
@@ -830,9 +828,7 @@ async def get_source_status(source_id: str):
         raise
     except Exception as e:
         logger.error(f"Error fetching status for source {source_id}: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail=f"Error fetching source status: {str(e)}"
-        )
+        raise HTTPException(status_code=500, detail="Error fetching source status")
 
 
 @router.put("/sources/{source_id}", response_model=SourceResponse)
@@ -874,7 +870,7 @@ async def update_source(source_id: str, source_update: SourceUpdate):
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Error updating source {source_id}: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Error updating source: {str(e)}")
+        raise HTTPException(status_code=500, detail="Error updating source")
 
 
 @router.post("/sources/{source_id}/retry", response_model=SourceResponse)
@@ -996,16 +992,14 @@ async def retry_source_processing(source_id: str):
                 f"Failed to submit retry processing command for source {source_id}: {e}"
             )
             raise HTTPException(
-                status_code=500, detail=f"Failed to queue retry processing: {str(e)}"
+                status_code=500, detail="Failed to queue retry processing"
             )
 
     except HTTPException:
         raise
     except Exception as e:
         logger.error(f"Error retrying source processing for {source_id}: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail=f"Error retrying source processing: {str(e)}"
-        )
+        raise HTTPException(status_code=500, detail="Error retrying source processing")
 
 
 @router.delete("/sources/{source_id}")
@@ -1023,7 +1017,7 @@ async def delete_source(source_id: str):
         raise
     except Exception as e:
         logger.error(f"Error deleting source {source_id}: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Error deleting source: {str(e)}")
+        raise HTTPException(status_code=500, detail="Error deleting source")
 
 
 @router.get("/sources/{source_id}/insights", response_model=List[SourceInsightResponse])
@@ -1050,9 +1044,7 @@ async def get_source_insights(source_id: str):
         raise
     except Exception as e:
         logger.error(f"Error fetching insights for source {source_id}: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail=f"Error fetching insights: {str(e)}"
-        )
+        raise HTTPException(status_code=500, detail="Error fetching insights")
 
 
 @router.post(
@@ -1105,6 +1097,4 @@ async def create_source_insight(source_id: str, request: CreateSourceInsightRequ
         raise
     except Exception as e:
         logger.error(f"Error starting insight generation for source {source_id}: {e}")
-        raise HTTPException(
-            status_code=500, detail=f"Error starting insight generation: {str(e)}"
-        )
+        raise HTTPException(status_code=500, detail="Error starting insight generation")
diff --git a/tests/test_config_endpoint_no_leak.py b/tests/test_config_endpoint_no_leak.py
new file mode 100644
index 00000000..37bedf14
--- /dev/null
+++ b/tests/test_config_endpoint_no_leak.py
@@ -0,0 +1,76 @@
+"""
+Regression test for GET /api/config (api/routers/config.py) - an
+unauthenticated endpoint (listed in PasswordAuthMiddleware's
+excluded_paths).
+
+An earlier audit flagged check_database_health() as leaking raw exception
+text to unauthenticated callers. Reading the current code: the exception
+string does get put into check_database_health()'s internal return dict
+(`error` key), but get_config() only logs that value server-side
+(logger.warning) - it never includes it in the JSON response, which
+carries just `dbStatus` ("online"/"offline"). This test locks that
+contract in so a future edit can't reintroduce the leak by, e.g., adding
+`"error": db_health.get("error")` to the response dict.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+SENSITIVE_MESSAGE = "connection refused to internal-db-host.corp.local:8000: password auth failed for user 'root'"
+
+
+class TestConfigEndpointDoesNotLeakDbErrors:
+    def test_db_failure_does_not_include_raw_error_in_response(self, client):
+        with patch(
+            "api.routers.config.repo_query",
+            new=AsyncMock(side_effect=RuntimeError(SENSITIVE_MESSAGE)),
+        ):
+            response = client.get("/api/config")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert SENSITIVE_MESSAGE not in response.text
+        assert "error" not in body
+        assert body["dbStatus"] == "offline"
+        assert set(body.keys()) == {"version", "latestVersion", "hasUpdate", "dbStatus"}
+
+    def test_db_timeout_does_not_include_raw_error_in_response(self, client):
+        import asyncio
+
+        with patch(
+            "api.routers.config.repo_query",
+            new=AsyncMock(side_effect=asyncio.TimeoutError()),
+        ):
+            response = client.get("/api/config")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert "error" not in body
+        assert body["dbStatus"] == "offline"
+
+    def test_healthy_db_reports_online(self, client):
+        with patch(
+            "api.routers.config.repo_query",
+            new=AsyncMock(return_value=[{"result": 1}]),
+        ):
+            response = client.get("/api/config")
+
+        assert response.status_code == 200
+        assert response.json()["dbStatus"] == "online"
+
+    def test_config_endpoint_is_unauthenticated(self, client):
+        """Sanity check that this endpoint really is reachable without a
+        password - the scenario the finding's "unauthenticated" framing
+        depends on."""
+        response = client.get("/api/config")
+        assert response.status_code != 401
diff --git a/tests/test_error_message_sanitization.py b/tests/test_error_message_sanitization.py
new file mode 100644
index 00000000..6973e4e8
--- /dev/null
+++ b/tests/test_error_message_sanitization.py
@@ -0,0 +1,182 @@
+"""
+Tests that internal exception text is never leaked to API clients in
+api/routers/sources.py and api/podcast_service.py.
+
+These previously interpolated the raw exception (`detail=f"...: {str(e)}"`)
+into the client-facing error response - inconsistent with the safer pattern
+already used elsewhere in the same files (e.g. the download handlers),
+which log the raw exception server-side but return a fixed generic
+message. Every occurrence already had a matching logger.error() call, so
+this was a client-facing message change only, not a logging change.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+SECRET = "connection to db-primary-7f3a.internal:5432 refused: password authentication failed"
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestSourcesRouterDoesNotLeakExceptionText:
+    def test_list_sources_failure_returns_generic_message(self, client):
+        with patch(
+            "api.routers.sources.repo_query",
+            new=AsyncMock(side_effect=RuntimeError(SECRET)),
+        ):
+            response = client.get("/api/sources")
+
+        assert response.status_code == 500
+        assert SECRET not in response.text
+        assert response.json()["detail"] == "Error fetching sources"
+
+    def test_delete_source_failure_returns_generic_message(self, client):
+        mock_source = AsyncMock()
+        mock_source.delete = AsyncMock(side_effect=RuntimeError(SECRET))
+
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=mock_source)
+        ):
+            response = client.delete("/api/sources/source:abc123")
+
+        assert response.status_code == 500
+        assert SECRET not in response.text
+        assert response.json()["detail"] == "Error deleting source"
+
+    def test_get_source_insights_failure_returns_generic_message(self, client):
+        mock_source = AsyncMock()
+        mock_source.get_insights = AsyncMock(side_effect=RuntimeError(SECRET))
+
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=mock_source)
+        ):
+            response = client.get("/api/sources/source:abc123/insights")
+
+        assert response.status_code == 500
+        assert SECRET not in response.text
+        assert response.json()["detail"] == "Error fetching insights"
+
+    def test_update_source_failure_returns_generic_message(self, client):
+        mock_source = AsyncMock()
+        mock_source.save = AsyncMock(side_effect=RuntimeError(SECRET))
+        mock_source.asset = None
+
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=mock_source)
+        ):
+            response = client.put(
+                "/api/sources/source:abc123", json={"title": "New Title"}
+            )
+
+        assert response.status_code == 500
+        assert SECRET not in response.text
+        assert response.json()["detail"] == "Error updating source"
+
+
+class TestInvalidInputErrorsStillReturnTheirOwnSafeMessage:
+    """InvalidInputError is a distinct, deliberate pattern (app-authored,
+    user-facing validation text) - not the raw-exception-leak pattern this
+    fix targets, and must be untouched."""
+
+    def test_update_source_invalid_input_still_returns_its_message(self, client):
+        from open_notebook.exceptions import InvalidInputError
+
+        mock_source = AsyncMock()
+        mock_source.save = AsyncMock(
+            side_effect=InvalidInputError("Title cannot be empty")
+        )
+        mock_source.asset = None
+
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=mock_source)
+        ):
+            response = client.put(
+                "/api/sources/source:abc123", json={"title": "x"}
+            )
+
+        assert response.status_code == 400
+        assert response.json()["detail"] == "Title cannot be empty"
+
+
+class TestPodcastServiceDoesNotLeakExceptionText:
+    @pytest.mark.asyncio
+    async def test_get_job_status_failure_returns_generic_message(self):
+        from fastapi import HTTPException
+
+        from api.podcast_service import PodcastService
+
+        with patch(
+            "api.podcast_service.get_command_status",
+            new=AsyncMock(side_effect=RuntimeError(SECRET)),
+        ):
+            with pytest.raises(HTTPException) as exc_info:
+                await PodcastService.get_job_status("command:abc123")
+
+        assert exc_info.value.status_code == 500
+        assert SECRET not in exc_info.value.detail
+        assert exc_info.value.detail == "Failed to get job status"
+
+    @pytest.mark.asyncio
+    async def test_list_episodes_failure_returns_generic_message(self):
+        from fastapi import HTTPException
+
+        from api.podcast_service import PodcastService
+        from open_notebook.podcasts.models import PodcastEpisode
+
+        with patch.object(
+            PodcastEpisode,
+            "get_all",
+            new=AsyncMock(side_effect=RuntimeError(SECRET)),
+        ):
+            with pytest.raises(HTTPException) as exc_info:
+                await PodcastService.list_episodes()
+
+        assert exc_info.value.status_code == 500
+        assert SECRET not in exc_info.value.detail
+        assert exc_info.value.detail == "Failed to list episodes"
+
+    @pytest.mark.asyncio
+    async def test_get_episode_failure_returns_generic_not_found(self):
+        from fastapi import HTTPException
+
+        from api.podcast_service import PodcastService
+        from open_notebook.podcasts.models import PodcastEpisode
+
+        with patch.object(
+            PodcastEpisode, "get", new=AsyncMock(side_effect=RuntimeError(SECRET))
+        ):
+            with pytest.raises(HTTPException) as exc_info:
+                await PodcastService.get_episode("episode:missing")
+
+        assert exc_info.value.status_code == 404
+        assert SECRET not in exc_info.value.detail
+        assert exc_info.value.detail == "Episode not found"
+
+    @pytest.mark.asyncio
+    async def test_submit_generation_job_failure_returns_generic_message(self):
+        from fastapi import HTTPException
+
+        from api.podcast_service import PodcastService
+
+        with patch(
+            "api.podcast_service.EpisodeProfile.get_by_name",
+            new=AsyncMock(side_effect=RuntimeError(SECRET)),
+        ):
+            with pytest.raises(HTTPException) as exc_info:
+                await PodcastService.submit_generation_job(
+                    episode_profile_name="default",
+                    speaker_profile_name="default",
+                    episode_name="Test Episode",
+                    content="some content",
+                )
+
+        assert exc_info.value.status_code == 500
+        assert SECRET not in exc_info.value.detail
+        assert exc_info.value.detail == "Failed to submit podcast generation job"

From 4d8fd72c1bc0a14b56c2ef25bcb17b57afa5f200 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 12:48:24 -0400
Subject: [PATCH 146/345] fix: contain podcast audio paths and batch job-status
 lookups (#1018)

Two small fixes to the podcast episode-listing path, plus a doc note:

- audio_file is only ever set server-side today from a UUID-named
  directory under PODCASTS_FOLDER, so this can't currently be tripped -
  but the stream/retry/delete endpoints didn't verify the resolved path
  actually stayed within PODCASTS_FOLDER before following it. Add
  _is_audio_path_contained() as defense in depth against a future code
  path (e.g. importing external audio) setting audio_file to something
  else.

- Listing episodes called get_job_detail() -> get_command_status() once
  per episode, each its own round trip (no connection pooling). Add
  PodcastEpisode.get_job_details_for_commands() to batch-fetch status
  for every episode's command in one query instead.

Also documents (docs/7-DEVELOPMENT/security.md) that podcast_creator's
configure("templates", {...}) compiles strings as Jinja2 template
source - the same shape as the SSTI vulnerability fixed in
transformation.py (GHSA-f35w-wx37-26q7). Confirmed dormant: no code path
in this repo calls it today. commands/podcast_commands.py gets a
matching code comment warning against wiring user text into it if a
"custom podcast template" feature is ever added.
---
 api/routers/podcasts.py                   |  57 +++++-
 commands/podcast_commands.py              |  12 ++
 docs/7-DEVELOPMENT/security.md            |   4 +
 open_notebook/config.py                   |   6 +
 open_notebook/podcasts/CLAUDE.md          |   1 +
 open_notebook/podcasts/models.py          |  40 ++++
 tests/test_podcast_audio_containment.py   | 235 ++++++++++++++++++++++
 tests/test_podcast_job_status_batching.py | 225 +++++++++++++++++++++
 8 files changed, 573 insertions(+), 7 deletions(-)
 create mode 100644 tests/test_podcast_audio_containment.py
 create mode 100644 tests/test_podcast_job_status_batching.py

diff --git a/api/routers/podcasts.py b/api/routers/podcasts.py
index 042f66a8..fb284e41 100644
--- a/api/routers/podcasts.py
+++ b/api/routers/podcasts.py
@@ -1,3 +1,4 @@
+import os
 from pathlib import Path
 from typing import List, Optional
 from urllib.parse import unquote, urlparse
@@ -12,6 +13,8 @@ from api.podcast_service import (
     PodcastGenerationResponse,
     PodcastService,
 )
+from open_notebook.config import PODCASTS_FOLDER
+from open_notebook.podcasts.models import PodcastEpisode
 
 router = APIRouter()
 
@@ -38,6 +41,21 @@ def _resolve_audio_path(audio_file: str) -> Path:
     return Path(audio_file)
 
 
+def _is_audio_path_contained(audio_path: Path) -> bool:
+    """Verify the resolved audio path stays within the podcasts output root.
+
+    Defense in depth: audio_file is only ever set server-side today from a
+    UUID-named directory under PODCASTS_FOLDER (build_episode_output_dir), so
+    this can't currently be tripped - but any endpoint that streams or
+    deletes the file should still refuse to follow it outside that root, in
+    case a future code path (e.g. importing external audio) sets it to
+    something else.
+    """
+    safe_root = Path(os.path.realpath(PODCASTS_FOLDER))
+    resolved = Path(os.path.realpath(audio_path))
+    return resolved.is_relative_to(safe_root)
+
+
 @router.post("/podcasts/generate", response_model=PodcastGenerationResponse)
 async def generate_podcast(request: PodcastGenerationRequest):
     """
@@ -89,6 +107,17 @@ async def list_podcast_episodes():
     try:
         episodes = await PodcastService.list_episodes()
 
+        # Batch-fetch job status for every episode with a command in one
+        # query instead of one round trip per episode (see
+        # PodcastEpisode.get_job_details_for_commands docstring).
+        try:
+            details_by_command = await PodcastEpisode.get_job_details_for_commands(
+                [episode.command for episode in episodes if episode.command]
+            )
+        except Exception as e:
+            logger.warning(f"Error batch-fetching podcast job statuses: {str(e)}")
+            details_by_command = {}
+
         response_episodes = []
         for episode in episodes:
             # Skip incomplete episodes without command or audio
@@ -99,11 +128,11 @@ async def list_podcast_episodes():
             job_status = None
             error_message = None
             if episode.command:
-                try:
-                    detail = await episode.get_job_detail()
+                detail = details_by_command.get(str(episode.command))
+                if detail is not None:
                     job_status = detail["status"]
                     error_message = detail["error_message"]
-                except Exception:
+                else:
                     job_status = "unknown"
             else:
                 # No command but has audio file = completed import
@@ -112,7 +141,7 @@ async def list_podcast_episodes():
             audio_url = None
             if episode.audio_file:
                 audio_path = _resolve_audio_path(episode.audio_file)
-                if audio_path.exists():
+                if _is_audio_path_contained(audio_path) and audio_path.exists():
                     audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
 
             response_episodes.append(
@@ -164,7 +193,7 @@ async def get_podcast_episode(episode_id: str):
         audio_url = None
         if episode.audio_file:
             audio_path = _resolve_audio_path(episode.audio_file)
-            if audio_path.exists():
+            if _is_audio_path_contained(audio_path) and audio_path.exists():
                 audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
 
         return PodcastEpisodeResponse(
@@ -202,6 +231,12 @@ async def stream_podcast_episode_audio(episode_id: str):
         raise HTTPException(status_code=404, detail="Episode has no audio file")
 
     audio_path = _resolve_audio_path(episode.audio_file)
+    if not _is_audio_path_contained(audio_path):
+        logger.warning(
+            f"Blocked audio access outside podcasts directory for episode {episode_id}: {audio_path}"
+        )
+        raise HTTPException(status_code=403, detail="Access to file denied")
+
     if not audio_path.exists():
         raise HTTPException(status_code=404, detail="Audio file not found on disk")
 
@@ -241,7 +276,11 @@ async def retry_podcast_episode(episode_id: str):
         # Delete audio file if any
         if episode.audio_file:
             audio_path = _resolve_audio_path(episode.audio_file)
-            if audio_path.exists():
+            if not _is_audio_path_contained(audio_path):
+                logger.warning(
+                    f"Refusing to delete audio file outside podcasts directory for episode {episode_id}: {audio_path}"
+                )
+            elif audio_path.exists():
                 try:
                     audio_path.unlink()
                 except Exception as e:
@@ -279,7 +318,11 @@ async def delete_podcast_episode(episode_id: str):
         # Delete the physical audio file if it exists
         if episode.audio_file:
             audio_path = _resolve_audio_path(episode.audio_file)
-            if audio_path.exists():
+            if not _is_audio_path_contained(audio_path):
+                logger.warning(
+                    f"Refusing to delete audio file outside podcasts directory for episode {episode_id}: {audio_path}"
+                )
+            elif audio_path.exists():
                 try:
                     audio_path.unlink()
                     logger.info(f"Deleted audio file: {audio_path}")
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index fd533be8..8535715b 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -230,6 +230,18 @@ async def generate_podcast_command(
         )
         await episode.save()
 
+        # SECURITY NOTE for future work: podcast_creator also supports
+        # configure("templates", {...}), which compiles the given string
+        # directly as Jinja2 template *source* (Prompter(template_text=...)
+        # in podcast_creator/config.py) - the exact SSTI shape already fixed
+        # in open_notebook/graphs/transformation.py (GHSA-f35w-wx37-26q7).
+        # We don't call it today (confirmed: no code path here sets the
+        # "templates" key, so podcast generation always uses the file-based
+        # prompts/podcast/*.jinja templates in this repo). If a "custom
+        # podcast template" feature is ever added, do NOT wire user/profile
+        # text into configure("templates", ...) - render it through a
+        # fixed, developer-authored template with the user text passed in
+        # as a plain variable instead, matching transformation.py's fix.
         configure("speakers_config", {"profiles": speaker_profiles_dict})
         configure("episode_config", {"profiles": episode_profiles_dict})
 
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
index 11e7d805..44f32e9a 100644
--- a/docs/7-DEVELOPMENT/security.md
+++ b/docs/7-DEVELOPMENT/security.md
@@ -85,6 +85,10 @@ The [ai-prompter](https://github.com/lfnovo/ai-prompter) library (>= 0.4.0) uses
 - If using Jinja2 directly (outside ai-prompter), always use `jinja2.sandbox.SandboxedEnvironment`
 - Never pass user-provided strings to `jinja2.Environment` or `jinja2.Template` directly
 
+### Third-party libraries with the same shape
+
+The `podcast_creator` library's `configure("templates", {...})` compiles the given string directly as Jinja2 template source (`Prompter(template_text=...)` in its `config.py`) - the identical pattern to the vulnerability above. `commands/podcast_commands.py` never calls it (confirmed: podcast generation always uses the file-based `prompts/podcast/*.jinja` templates in this repo), so this is currently dormant, not exploitable. If a "custom podcast template" feature is ever added, route user/profile text through a fixed, developer-authored template with the text passed in as a plain variable - do not wire it into `configure("templates", ...)`.
+
 ---
 
 ## File Handling (Path Traversal and Local File Inclusion)
diff --git a/open_notebook/config.py b/open_notebook/config.py
index 2db8f748..b78c53ad 100644
--- a/open_notebook/config.py
+++ b/open_notebook/config.py
@@ -12,6 +12,12 @@ LANGGRAPH_CHECKPOINT_FILE = f"{sqlite_folder}/checkpoints.sqlite"
 UPLOADS_FOLDER = f"{DATA_FOLDER}/uploads"
 os.makedirs(UPLOADS_FOLDER, exist_ok=True)
 
+# PODCASTS FOLDER
+# Matches the root that build_episode_output_dir() (commands/podcast_commands.py)
+# creates episode directories under when called with DATA_FOLDER in production.
+PODCASTS_FOLDER = f"{DATA_FOLDER}/podcasts"
+os.makedirs(PODCASTS_FOLDER, exist_ok=True)
+
 # TIKTOKEN CACHE FOLDER
 # Reads TIKTOKEN_CACHE_DIR from the environment so Docker can redirect the cache
 # to a path outside /data/ (which is typically volume-mounted and would hide the
diff --git a/open_notebook/podcasts/CLAUDE.md b/open_notebook/podcasts/CLAUDE.md
index f2f225ac..27682fc0 100644
--- a/open_notebook/podcasts/CLAUDE.md
+++ b/open_notebook/podcasts/CLAUDE.md
@@ -51,6 +51,7 @@ All inherit from `ObjectModel` (SurrealDB base class with table_name and save/lo
 - **Job tracking**: command field links to surreal-commands RecordID.
 - `get_job_status()` fetches async job status via surreal-commands library.
 - `get_job_detail()` returns both status and error_message from the job (used for retry validation and UI error display).
+- `get_job_details_for_commands(command_ids)` (classmethod): batch version of `get_job_detail()` - fetches status/error_message for many commands in one query against the `command` table (same underlying SurrealDB as the rest of the app, just via `surreal_commands`' own connection module) instead of one round trip per command. Used by `GET /podcasts/episodes` so listing N episodes costs one job-status query instead of N.
 - `_prepare_save_data()` ensures command field is always RecordID format for database.
 
 ### migration.py
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index 92176d8c..39beba4d 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -270,6 +270,46 @@ class PodcastEpisode(ObjectModel):
         except Exception:
             return {"status": "unknown", "error_message": None}
 
+    @classmethod
+    async def get_job_details_for_commands(
+        cls, command_ids: List[Union[str, RecordID]]
+    ) -> Dict[str, dict]:
+        """
+        Batch-fetch {status, error_message} for many commands in one query.
+
+        Listing episodes otherwise calls get_job_detail() -> surreal_commands
+        .get_command_status() once per episode, each its own round trip
+        against the `command` table (see database/CLAUDE.md: no connection
+        pooling) - O(n) queries for n episodes. surreal_commands has no
+        batch lookup, but its command table lives in the same database
+        (same SURREAL_* env vars - see surreal_commands/repository/CLAUDE.md),
+        so this queries it directly in one shot instead of looping through
+        the library's per-command helper.
+
+        CommandStatus is a `str` subclass (`class CommandStatus(str, Enum)`),
+        so returning the raw DB string here is interchangeable with the
+        enum-wrapped value get_job_detail() returns for every comparison
+        this codebase does against it.
+        """
+        ids = [cid for cid in command_ids if cid]
+        grouped: Dict[str, dict] = {}
+        if not ids:
+            return grouped
+        try:
+            result = await repo_query(
+                "SELECT * FROM command WHERE id IN $command_ids",
+                {"command_ids": [ensure_record_id(cid) for cid in ids]},
+            )
+        except Exception as e:
+            logger.error(f"Error batch-fetching command status: {e}")
+            return grouped
+        for row in result:
+            grouped[str(row.get("id"))] = {
+                "status": row.get("status", "unknown"),
+                "error_message": row.get("error_message"),
+            }
+        return grouped
+
     @field_validator("command", mode="before")
     @classmethod
     def parse_command(cls, value):
diff --git a/tests/test_podcast_audio_containment.py b/tests/test_podcast_audio_containment.py
new file mode 100644
index 00000000..b3331839
--- /dev/null
+++ b/tests/test_podcast_audio_containment.py
@@ -0,0 +1,235 @@
+"""
+Tests for the podcast audio path containment check (api/routers/podcasts.py).
+
+`_resolve_audio_path()` turns `episode.audio_file` into a filesystem Path;
+`_is_audio_path_contained()` verifies that path stays under PODCASTS_FOLDER
+before any endpoint streams or deletes it. audio_file is only ever set
+server-side today (from a UUID-named directory under PODCASTS_FOLDER), so
+these are defense-in-depth checks for a currently-unreachable path - these
+tests construct an out-of-root audio_file directly to exercise that defense.
+"""
+
+import os
+from pathlib import Path
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from api.routers.podcasts import _is_audio_path_contained, _resolve_audio_path
+from open_notebook.config import PODCASTS_FOLDER
+from open_notebook.podcasts.models import PodcastEpisode
+
+
+def make_episode(audio_file=None, **overrides):
+    defaults = dict(
+        id="episode:test123",
+        name="Test Episode",
+        episode_profile={"name": "default"},
+        speaker_profile={"name": "default"},
+        briefing="test briefing",
+        content="test content",
+        audio_file=audio_file,
+        command=None,
+    )
+    defaults.update(overrides)
+    return PodcastEpisode(**defaults)
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestIsAudioPathContained:
+    def test_path_inside_podcasts_folder_is_contained(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "api.routers.podcasts.PODCASTS_FOLDER", str(tmp_path)
+        )
+        episode_dir = tmp_path / "episodes" / "some-uuid"
+        episode_dir.mkdir(parents=True)
+        audio_path = episode_dir / "final.mp3"
+        audio_path.write_bytes(b"fake audio")
+
+        assert _is_audio_path_contained(audio_path) is True
+
+    def test_sibling_directory_with_matching_prefix_is_not_contained(
+        self, tmp_path, monkeypatch
+    ):
+        """Regression guard for the startswith-without-separator bug (finding
+        L14): a sibling dir that merely *starts with* the same prefix string
+        must NOT be treated as contained."""
+        real_root = tmp_path / "podcasts"
+        real_root.mkdir()
+        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(real_root))
+
+        sibling = tmp_path / "podcasts_evil"
+        sibling.mkdir()
+        evil_file = sibling / "secret.mp3"
+        evil_file.write_bytes(b"not yours")
+
+        assert _is_audio_path_contained(evil_file) is False
+
+    def test_path_traversal_outside_root_is_not_contained(self, tmp_path, monkeypatch):
+        root = tmp_path / "podcasts"
+        root.mkdir()
+        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(root))
+
+        outside = tmp_path / "outside.mp3"
+        outside.write_bytes(b"etc passwd style file")
+        traversal_path = Path(str(root)) / ".." / "outside.mp3"
+
+        assert _is_audio_path_contained(traversal_path) is False
+
+    def test_root_itself_is_contained(self, tmp_path, monkeypatch):
+        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(tmp_path))
+        assert _is_audio_path_contained(tmp_path) is True
+
+    def test_real_podcasts_folder_resolves(self):
+        """Sanity check against the real (non-monkeypatched) config constant."""
+        inside = Path(PODCASTS_FOLDER) / "episodes" / "abc" / "out.mp3"
+        assert _is_audio_path_contained(inside) is True
+        outside = Path(os.path.realpath(PODCASTS_FOLDER)).parent / "elsewhere.mp3"
+        assert _is_audio_path_contained(outside) is False
+
+
+class TestResolveAudioPathHandlesFileUri:
+    def test_plain_path(self):
+        assert _resolve_audio_path("/data/podcasts/episodes/x/out.mp3") == Path(
+            "/data/podcasts/episodes/x/out.mp3"
+        )
+
+    def test_file_uri(self):
+        assert _resolve_audio_path("file:///data/podcasts/episodes/x/out.mp3") == Path(
+            "/data/podcasts/episodes/x/out.mp3"
+        )
+
+
+class TestStreamEndpointRejectsOutOfRootAudio:
+    def test_returns_403_for_audio_file_outside_podcasts_root(self, client, tmp_path):
+        evil_file = tmp_path / "secret.mp3"
+        evil_file.write_bytes(b"not a podcast")
+        episode = make_episode(audio_file=str(evil_file))
+
+        with patch(
+            "api.routers.podcasts.PodcastService.get_episode",
+            new=AsyncMock(return_value=episode),
+        ):
+            response = client.get("/api/podcasts/episodes/episode:test123/audio")
+
+        assert response.status_code == 403
+
+    def test_returns_404_for_missing_audio_inside_root(self, client):
+        # Inside PODCASTS_FOLDER (passes containment) but the file doesn't exist.
+        missing = Path(PODCASTS_FOLDER) / "episodes" / "does-not-exist" / "out.mp3"
+        episode = make_episode(audio_file=str(missing))
+
+        with patch(
+            "api.routers.podcasts.PodcastService.get_episode",
+            new=AsyncMock(return_value=episode),
+        ):
+            response = client.get("/api/podcasts/episodes/episode:test123/audio")
+
+        assert response.status_code == 404
+        assert "not found on disk" in response.json()["detail"]
+
+    def test_serves_audio_file_inside_root(self, client):
+        episode_dir = Path(PODCASTS_FOLDER) / "episodes" / "test-serve-uuid"
+        episode_dir.mkdir(parents=True, exist_ok=True)
+        audio_path = episode_dir / "out.mp3"
+        audio_path.write_bytes(b"fake mp3 bytes")
+        try:
+            episode = make_episode(audio_file=str(audio_path))
+            with patch(
+                "api.routers.podcasts.PodcastService.get_episode",
+                new=AsyncMock(return_value=episode),
+            ):
+                response = client.get("/api/podcasts/episodes/episode:test123/audio")
+
+            assert response.status_code == 200
+            assert response.content == b"fake mp3 bytes"
+        finally:
+            audio_path.unlink(missing_ok=True)
+            episode_dir.rmdir()
+
+
+class TestListAndGetOmitAudioUrlWhenOutOfRoot:
+    def test_list_episodes_omits_audio_url_for_out_of_root_file(self, client, tmp_path):
+        evil_file = tmp_path / "secret.mp3"
+        evil_file.write_bytes(b"not yours")
+        episode = make_episode(audio_file=str(evil_file))
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[episode]),
+            ),
+        ):
+            response = client.get("/api/podcasts/episodes")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert len(body) == 1
+        assert body[0]["audio_url"] is None
+
+    def test_get_episode_omits_audio_url_for_out_of_root_file(self, client, tmp_path):
+        evil_file = tmp_path / "secret.mp3"
+        evil_file.write_bytes(b"not yours")
+        episode = make_episode(audio_file=str(evil_file))
+
+        with patch(
+            "api.routers.podcasts.PodcastService.get_episode",
+            new=AsyncMock(return_value=episode),
+        ):
+            response = client.get("/api/podcasts/episodes/episode:test123")
+
+        assert response.status_code == 200
+        assert response.json()["audio_url"] is None
+
+
+class TestDeleteAndRetryRefuseOutOfRootUnlink:
+    def test_delete_episode_does_not_unlink_out_of_root_file(self, client, tmp_path):
+        evil_file = tmp_path / "secret.mp3"
+        evil_file.write_bytes(b"not yours")
+        episode = make_episode(audio_file=str(evil_file))
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.get_episode",
+                new=AsyncMock(return_value=episode),
+            ),
+            patch.object(PodcastEpisode, "delete", new=AsyncMock(return_value=True)),
+        ):
+            response = client.delete("/api/podcasts/episodes/episode:test123")
+
+        assert response.status_code == 200
+        assert evil_file.exists(), "out-of-root file must not be deleted"
+
+    def test_delete_episode_still_unlinks_in_root_file(self, client):
+        episode_dir = Path(PODCASTS_FOLDER) / "episodes" / "test-delete-uuid"
+        episode_dir.mkdir(parents=True, exist_ok=True)
+        audio_path = episode_dir / "out.mp3"
+        audio_path.write_bytes(b"fake mp3 bytes")
+        episode = make_episode(audio_file=str(audio_path))
+
+        try:
+            with (
+                patch(
+                    "api.routers.podcasts.PodcastService.get_episode",
+                    new=AsyncMock(return_value=episode),
+                ),
+                patch.object(
+                    PodcastEpisode, "delete", new=AsyncMock(return_value=True)
+                ),
+            ):
+                response = client.delete("/api/podcasts/episodes/episode:test123")
+
+            assert response.status_code == 200
+            assert not audio_path.exists(), "in-root file should be deleted"
+        finally:
+            if episode_dir.exists():
+                for f in episode_dir.iterdir():
+                    f.unlink()
+                episode_dir.rmdir()
diff --git a/tests/test_podcast_job_status_batching.py b/tests/test_podcast_job_status_batching.py
new file mode 100644
index 00000000..b284f3c0
--- /dev/null
+++ b/tests/test_podcast_job_status_batching.py
@@ -0,0 +1,225 @@
+"""
+Tests for the podcast episode listing N+1 fix (api/routers/podcasts.py +
+open_notebook/podcasts/models.py).
+
+list_podcast_episodes() used to call episode.get_job_detail() once per
+episode - each a separate round trip against the surreal_commands `command`
+table. PodcastEpisode.get_job_details_for_commands() batches that into one
+query; the router now calls it once up front instead of looping.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+
+from api.routers.podcasts import list_podcast_episodes
+from open_notebook.podcasts.models import PodcastEpisode
+
+
+def make_episode(command=None, audio_file=None, **overrides):
+    defaults = dict(
+        id=f"episode:{overrides.pop('suffix', 'x')}",
+        name="Test Episode",
+        episode_profile={"name": "default"},
+        speaker_profile={"name": "default"},
+        briefing="briefing",
+        content="content",
+        command=command,
+        audio_file=audio_file,
+    )
+    defaults.update(overrides)
+    return PodcastEpisode(**defaults)
+
+
+class TestGetJobDetailsForCommandsUnit:
+    @pytest.mark.asyncio
+    async def test_empty_input_returns_empty_without_querying(self):
+        with patch(
+            "open_notebook.podcasts.models.repo_query", new=AsyncMock()
+        ) as mock_query:
+            result = await PodcastEpisode.get_job_details_for_commands([])
+        assert result == {}
+        mock_query.assert_not_called()
+
+    @pytest.mark.asyncio
+    async def test_single_query_for_multiple_commands(self):
+        fake_rows = [
+            {"id": "command:a", "status": "completed", "error_message": None},
+            {"id": "command:b", "status": "failed", "error_message": "boom"},
+        ]
+        with patch(
+            "open_notebook.podcasts.models.repo_query",
+            new=AsyncMock(return_value=fake_rows),
+        ) as mock_query:
+            result = await PodcastEpisode.get_job_details_for_commands(
+                ["command:a", "command:b"]
+            )
+
+        mock_query.assert_awaited_once()
+        assert result == {
+            "command:a": {"status": "completed", "error_message": None},
+            "command:b": {"status": "failed", "error_message": "boom"},
+        }
+
+    @pytest.mark.asyncio
+    async def test_query_failure_returns_empty_dict_rather_than_raising(self):
+        with patch(
+            "open_notebook.podcasts.models.repo_query",
+            new=AsyncMock(side_effect=RuntimeError("db down")),
+        ):
+            result = await PodcastEpisode.get_job_details_for_commands(["command:a"])
+        assert result == {}
+
+    @pytest.mark.asyncio
+    async def test_falsy_command_ids_are_filtered_out(self):
+        with patch(
+            "open_notebook.podcasts.models.repo_query", new=AsyncMock(return_value=[])
+        ) as mock_query:
+            await PodcastEpisode.get_job_details_for_commands([None, "", "command:a"])
+
+        # Only the truthy id should reach the query's bound params.
+        _, kwargs_or_args = mock_query.call_args
+        bound_vars = mock_query.call_args.args[1]
+        assert len(bound_vars["command_ids"]) == 1
+
+
+class TestListPodcastEpisodesUsesBatchedLookup:
+    @pytest.mark.asyncio
+    async def test_batch_method_called_once_not_per_episode(self):
+        episodes = [
+            make_episode(command=f"command:cmd{i}", suffix=str(i)) for i in range(5)
+        ]
+        batch_result = {
+            f"command:cmd{i}": {"status": "completed", "error_message": None}
+            for i in range(5)
+        }
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=episodes),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value=batch_result),
+            ) as mock_batch,
+            patch.object(
+                PodcastEpisode, "get_job_detail", new=AsyncMock()
+            ) as mock_per_episode,
+        ):
+            response = await list_podcast_episodes()
+
+        mock_batch.assert_awaited_once()
+        mock_per_episode.assert_not_called()
+        assert len(response) == 5
+        assert all(item.job_status == "completed" for item in response)
+
+    @pytest.mark.asyncio
+    async def test_episode_missing_from_batch_result_falls_back_to_unknown(self):
+        """Mirrors the old per-episode except-block fallback: a command with
+        no row (e.g. deleted) must not crash the whole listing."""
+        episodes = [make_episode(command="command:missing", suffix="1")]
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=episodes),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value={}),
+            ),
+        ):
+            response = await list_podcast_episodes()
+
+        assert response[0].job_status == "unknown"
+
+    @pytest.mark.asyncio
+    async def test_total_batch_failure_falls_back_to_unknown_for_all(self):
+        episodes = [
+            make_episode(command=f"command:cmd{i}", suffix=str(i)) for i in range(3)
+        ]
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=episodes),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(side_effect=RuntimeError("db down")),
+            ),
+        ):
+            response = await list_podcast_episodes()
+
+        assert len(response) == 3
+        assert all(item.job_status == "unknown" for item in response)
+
+    @pytest.mark.asyncio
+    async def test_episode_without_command_but_with_audio_is_completed(self):
+        episode = make_episode(
+            command=None, audio_file="/some/path.mp3", suffix="noaudiocmd"
+        )
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[episode]),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value={}),
+            ) as mock_batch,
+        ):
+            response = await list_podcast_episodes()
+
+        # No command anywhere -> batch call still happens (with an empty
+        # list) but must not error, and the episode is reported completed.
+        mock_batch.assert_awaited_once()
+        assert response[0].job_status == "completed"
+
+    @pytest.mark.asyncio
+    async def test_episode_with_neither_command_nor_audio_is_skipped(self):
+        episode = make_episode(command=None, audio_file=None, suffix="incomplete")
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[episode]),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value={}),
+            ),
+        ):
+            response = await list_podcast_episodes()
+
+        assert response == []
+
+    @pytest.mark.asyncio
+    async def test_error_message_propagates_from_batch_result(self):
+        episode = make_episode(command="command:err", suffix="err")
+        batch_result = {
+            "command:err": {"status": "failed", "error_message": "kaboom"}
+        }
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[episode]),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value=batch_result),
+            ),
+        ):
+            response = await list_podcast_episodes()
+
+        assert response[0].job_status == "failed"
+        assert response[0].error_message == "kaboom"

From a2c1e55b38da4683c6a939e618425e427407354f Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 12:53:57 -0400
Subject: [PATCH 147/345] fix: surface silent command-submission failures where
 they matter (#1019)

* fix: surface silent command-submission failures where they matter

Source.add_insight() caught submission failures and returned None
instead of raising - callers (transformation.py, source.py) run inside
surreal-commands jobs whose outer exception handling already
retries/fails on this, so a swallowed submission failure meant a
transformation could report success while the insight was silently
never persisted. Now raises DatabaseOperationError, matching
vectorize()'s existing contract.

Note.save()'s auto-embed needs the opposite treatment: it's an implicit
side effect of save() (not an explicit dedicated call), and the note
itself is already durably saved by the time it runs - so a submission
hiccup there shouldn't turn an otherwise-successful save into a 500.
Wrapped in try/except, logs and returns None. api/routers/embedding.py's
explicit POST /embed (item_type=note) is the one caller for whom
submission success genuinely is the point of the call, so it separately
checks for a missing command_id and surfaces that as a failure.

* fix: collapse duplicate error logging in add_insight

logger.error + logger.exception logged the same failure twice; a single
logger.exception call carries both the message and the traceback (same
form vectorize() already uses).

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/routers/embedding.py                      |  12 +-
 open_notebook/domain/CLAUDE.md                |   6 +-
 open_notebook/domain/notebook.py              |  43 ++--
 tests/test_add_insight_failure_propagation.py | 217 ++++++++++++++++++
 tests/test_note_save_embed_resilience.py      | 174 ++++++++++++++
 5 files changed, 435 insertions(+), 17 deletions(-)
 create mode 100644 tests/test_add_insight_failure_propagation.py
 create mode 100644 tests/test_note_save_embed_resilience.py

diff --git a/api/routers/embedding.py b/api/routers/embedding.py
index c4310a64..f7641838 100644
--- a/api/routers/embedding.py
+++ b/api/routers/embedding.py
@@ -87,8 +87,18 @@ async def embed_content(embed_request: EmbedRequest):
             elif item_type == "note":
                 note_item = await Note.get(item_id)
 
-                # Note.save() internally submits embed_note command and returns command_id
+                # Note.save() internally submits embed_note command and
+                # returns command_id. Unlike Source.vectorize(), save()'s
+                # embed submission is best-effort (a hiccup there shouldn't
+                # fail an otherwise-successful note save) - but this
+                # endpoint's whole point is submitting the embedding job,
+                # so a submission failure here (content present, no
+                # command_id) must still surface as a failure.
                 command_id = await note_item.save()
+                if not command_id and note_item.content and note_item.content.strip():
+                    raise HTTPException(
+                        status_code=500, detail="Failed to submit note embedding job"
+                    )
                 message = "Note embedding job submitted"
 
             return EmbedResponse(
diff --git a/open_notebook/domain/CLAUDE.md b/open_notebook/domain/CLAUDE.md
index 504c5e73..5c2ec150 100644
--- a/open_notebook/domain/CLAUDE.md
+++ b/open_notebook/domain/CLAUDE.md
@@ -32,7 +32,7 @@ Two base classes support different persistence patterns: **ObjectModel** (mutabl
   - `vectorize()`: Submit async embedding job (returns command_id, fire-and-forget)
   - `get_status()`, `get_processing_progress()`: Track job via surreal_commands
   - `get_context()`: Returns summary for LLM context
-  - `add_insight()`: Submit async insight creation via `create_insight_command` (fire-and-forget, returns command_id)
+  - `add_insight()`: Submit async insight creation via `create_insight_command` (fire-and-forget, returns command_id). Raises `DatabaseOperationError` if *submission* itself fails (matches `vectorize()`) - callers (`transformation.py`, `source.py`) run inside surreal-commands jobs whose outer exception handling already retries/fails on this
 
 - **Note**: Standalone or linked notes
   - `save()`: Submits `embed_note` command after save (fire-and-forget)
@@ -95,9 +95,9 @@ Two base classes support different persistence patterns: **ObjectModel** (mutabl
 - **Source.command field**: Stored as RecordID; auto-parsed from strings via field_validator
 - **Text truncation**: `Note.get_context(short)` hardcodes 100-char limit
 - **Auto-embedding behavior**:
-  - `Note.save()` → auto-submits `embed_note` command
+  - `Note.save()` → auto-submits `embed_note` command; submission failure is caught and logged (returns `None`), not raised - the note's core save already succeeded by that point. `api/routers/embedding.py`'s explicit `POST /embed` (item_type=note) checks for this and still surfaces it as a failure, since submission is the whole point of that call
   - `Source.save()` → does NOT auto-submit (must call `vectorize()` explicitly)
-  - `Source.add_insight()` → submits `create_insight_command` which handles DB insert + `embed_insight` command (all fire-and-forget)
+  - `Source.add_insight()` → submits `create_insight_command` which handles DB insert + `embed_insight` command (all fire-and-forget - but a failure to *submit* the command raises rather than being swallowed)
 - **Relationship strings**: Must match SurrealDB schema (reference, artifact, refers_to)
 
 ## How to Add New Model
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index ea615b78..505c3588 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -564,7 +564,7 @@ class Source(ObjectModel):
             logger.exception(e)
             raise DatabaseOperationError(e)
 
-    async def add_insight(self, insight_type: str, content: str) -> Optional[str]:
+    async def add_insight(self, insight_type: str, content: str) -> str:
         """
         Submit insight creation as an async command (fire-and-forget).
 
@@ -581,10 +581,17 @@ class Source(ObjectModel):
             content: The insight content text
 
         Returns:
-            command_id for optional tracking, or None if submission failed
+            command_id for optional tracking
 
         Raises:
             InvalidInputError: If insight_type or content is empty
+            DatabaseOperationError: If submitting the command fails. Matches
+                vectorize()'s contract - callers (transformation.py, source.py)
+                run inside surreal-commands jobs whose outer exception
+                handling already retries transient failures, so a swallowed
+                submission failure here previously meant a transformation
+                could report success while the insight was silently never
+                persisted.
         """
         if not insight_type or not content:
             raise InvalidInputError("Insight type and content must be provided")
@@ -608,8 +615,8 @@ class Source(ObjectModel):
             return str(command_id)
 
         except Exception as e:
-            logger.error(f"Error submitting create_insight for source {self.id}: {e}")
-            return None
+            logger.exception(f"Error submitting create_insight for source {self.id}: {e}")
+            raise DatabaseOperationError(e)
 
     def _prepare_save_data(self) -> dict:
         """Override to ensure command field is always RecordID format for database"""
@@ -683,20 +690,30 @@ class Note(ObjectModel):
         after saving, instead of inline embedding.
 
         Returns:
-            Optional[str]: The command_id if embedding was submitted, None otherwise
+            Optional[str]: The command_id if embedding was submitted, None
+                otherwise (either no content to embed, or submission failed)
         """
         # Call parent save (without embedding)
         await super().save()
 
-        # Submit embedding command (fire-and-forget) if note has content
+        # Submit embedding command (fire-and-forget) if note has content.
+        # Unlike Source.vectorize()/add_insight() (explicit, dedicated calls
+        # whose whole point is the submission), this runs automatically
+        # inside save() - the note itself is already durably saved above,
+        # so a submission hiccup here shouldn't fail an otherwise-successful
+        # save with a 500. Best-effort: log and move on.
         if self.id and self.content and self.content.strip():
-            command_id = submit_command(
-                "open_notebook",
-                "embed_note",
-                {"note_id": str(self.id)},
-            )
-            logger.debug(f"Submitted embed_note command {command_id} for {self.id}")
-            return command_id
+            try:
+                command_id = submit_command(
+                    "open_notebook",
+                    "embed_note",
+                    {"note_id": str(self.id)},
+                )
+                logger.debug(f"Submitted embed_note command {command_id} for {self.id}")
+                return command_id
+            except Exception as e:
+                logger.error(f"Failed to submit embed_note command for {self.id}: {e}")
+                return None
 
         return None
 
diff --git a/tests/test_add_insight_failure_propagation.py b/tests/test_add_insight_failure_propagation.py
new file mode 100644
index 00000000..4e2d09d8
--- /dev/null
+++ b/tests/test_add_insight_failure_propagation.py
@@ -0,0 +1,217 @@
+"""
+Tests for Source.add_insight() raising on submission failure instead of
+silently swallowing it.
+
+Previously, if submit_command() failed, add_insight() logged the error and
+returned None. Both callers (transformation.py, source.py) discard the
+return value, so a transformation could report success=True while the
+insight was never persisted. add_insight() now matches the sibling
+vectorize() method's contract: submission failures raise
+DatabaseOperationError so they propagate to the job-level retry/failure
+handling that already exists in commands/source_commands.py.
+"""
+
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from open_notebook.domain.notebook import Source
+from open_notebook.exceptions import DatabaseOperationError, InvalidInputError
+
+
+def make_source(**overrides):
+    defaults = dict(id="source:test123", title="Test Source", asset=None)
+    defaults.update(overrides)
+    return Source(**defaults)
+
+
+class TestAddInsightRaisesOnSubmissionFailure:
+    @pytest.mark.asyncio
+    async def test_returns_command_id_on_success(self):
+        source = make_source()
+        with patch(
+            "open_notebook.domain.notebook.submit_command",
+            return_value="command:abc123",
+        ):
+            result = await source.add_insight("Summary", "some content")
+        assert result == "command:abc123"
+
+    @pytest.mark.asyncio
+    async def test_raises_database_operation_error_on_submission_failure(self):
+        source = make_source()
+        with patch(
+            "open_notebook.domain.notebook.submit_command",
+            side_effect=RuntimeError("queue unavailable"),
+        ):
+            with pytest.raises(DatabaseOperationError):
+                await source.add_insight("Summary", "some content")
+
+    @pytest.mark.asyncio
+    async def test_still_raises_invalid_input_for_empty_content(self):
+        source = make_source()
+        with pytest.raises(InvalidInputError):
+            await source.add_insight("Summary", "")
+
+    @pytest.mark.asyncio
+    async def test_still_raises_invalid_input_for_empty_type(self):
+        source = make_source()
+        with pytest.raises(InvalidInputError):
+            await source.add_insight("", "some content")
+
+
+class TestTransformationGraphPropagatesFailure:
+    """open_notebook/graphs/transformation.py: run_transformation()."""
+
+    @pytest.mark.asyncio
+    async def test_add_insight_failure_propagates_out_of_run_transformation(self):
+        from open_notebook.graphs.transformation import run_transformation
+
+        source = make_source()
+        transformation = MagicMock(title="Summary", prompt="Summarize this")
+
+        fake_response = MagicMock()
+        fake_response.content = "the transformation output"
+        fake_chain = AsyncMock()
+        fake_chain.ainvoke = AsyncMock(return_value=fake_response)
+
+        state = {
+            "source": source,
+            "input_text": None,
+            "transformation": transformation,
+        }
+
+        with (
+            patch(
+                "open_notebook.graphs.transformation.DefaultPrompts",
+                return_value=MagicMock(transformation_instructions=None),
+            ),
+            patch(
+                "open_notebook.graphs.transformation.Prompter"
+            ) as mock_prompter_cls,
+            patch(
+                "open_notebook.graphs.transformation.provision_langchain_model",
+                new=AsyncMock(return_value=fake_chain),
+            ),
+            patch.object(
+                Source,
+                "add_insight",
+                new=AsyncMock(side_effect=DatabaseOperationError("submission failed")),
+            ) as mock_add_insight,
+        ):
+            mock_prompter_cls.return_value.render.return_value = "rendered prompt"
+            source.full_text = "full text of the source"
+
+            with pytest.raises(DatabaseOperationError):
+                await run_transformation(state, config={"configurable": {}})
+
+        mock_add_insight.assert_awaited_once()
+
+    @pytest.mark.asyncio
+    async def test_successful_add_insight_returns_output_normally(self):
+        from open_notebook.graphs.transformation import run_transformation
+
+        source = make_source()
+        transformation = MagicMock(title="Summary", prompt="Summarize this")
+
+        fake_response = MagicMock()
+        fake_response.content = "the transformation output"
+        fake_chain = AsyncMock()
+        fake_chain.ainvoke = AsyncMock(return_value=fake_response)
+
+        state = {
+            "source": source,
+            "input_text": None,
+            "transformation": transformation,
+        }
+
+        with (
+            patch(
+                "open_notebook.graphs.transformation.DefaultPrompts",
+                return_value=MagicMock(transformation_instructions=None),
+            ),
+            patch(
+                "open_notebook.graphs.transformation.Prompter"
+            ) as mock_prompter_cls,
+            patch(
+                "open_notebook.graphs.transformation.provision_langchain_model",
+                new=AsyncMock(return_value=fake_chain),
+            ),
+            patch.object(
+                Source, "add_insight", new=AsyncMock(return_value="command:ok")
+            ) as mock_add_insight,
+        ):
+            mock_prompter_cls.return_value.render.return_value = "rendered prompt"
+            source.full_text = "full text of the source"
+
+            result = await run_transformation(state, config={"configurable": {}})
+
+        mock_add_insight.assert_awaited_once()
+        assert result == {"output": "the transformation output"}
+
+
+class TestSourceGraphTransformContentPropagatesFailure:
+    """open_notebook/graphs/source.py: transform_content() - the other
+    add_insight() caller, invoked during initial source ingestion."""
+
+    @pytest.mark.asyncio
+    async def test_add_insight_failure_propagates_out_of_transform_content(self):
+        from open_notebook.graphs.source import transform_content
+
+        source = make_source()
+        source.full_text = "the source's full text"
+        transformation = MagicMock(title="Summary")
+
+        state = {"source": source, "transformation": transformation}
+
+        with (
+            patch(
+                "open_notebook.graphs.source.transform_graph.ainvoke",
+                new=AsyncMock(return_value={"output": "transformed output"}),
+            ),
+            patch.object(
+                Source,
+                "add_insight",
+                new=AsyncMock(side_effect=DatabaseOperationError("submission failed")),
+            ) as mock_add_insight,
+        ):
+            with pytest.raises(DatabaseOperationError):
+                await transform_content(state)
+
+        mock_add_insight.assert_awaited_once()
+
+
+class TestRunTransformationCommandDoesNotReportFalseSuccess:
+    """commands/source_commands.py: run_transformation_command()."""
+
+    @pytest.mark.asyncio
+    async def test_add_insight_submission_failure_does_not_return_success_true(self):
+        from commands.source_commands import (
+            RunTransformationInput,
+            run_transformation_command,
+        )
+
+        source = make_source()
+        transformation = MagicMock(id="transformation:1")
+
+        input_data = RunTransformationInput(
+            source_id="source:test123", transformation_id="transformation:1"
+        )
+
+        with (
+            patch(
+                "commands.source_commands.Source.get",
+                new=AsyncMock(return_value=source),
+            ),
+            patch(
+                "commands.source_commands.Transformation.get",
+                new=AsyncMock(return_value=transformation),
+            ),
+            patch(
+                "commands.source_commands.transform_graph.ainvoke",
+                new=AsyncMock(
+                    side_effect=DatabaseOperationError("insight submission failed")
+                ),
+            ),
+        ):
+            with pytest.raises(DatabaseOperationError):
+                await run_transformation_command(input_data)
diff --git a/tests/test_note_save_embed_resilience.py b/tests/test_note_save_embed_resilience.py
new file mode 100644
index 00000000..d69ec579
--- /dev/null
+++ b/tests/test_note_save_embed_resilience.py
@@ -0,0 +1,174 @@
+"""
+Tests for Note.save()'s embed_note submission resilience
+(open_notebook/domain/notebook.py) and its one caller that needs the
+opposite behavior (api/routers/embedding.py).
+
+Note.save()'s embed_note submission is now wrapped in try/except: the note
+itself is already durably saved by the time it's attempted (verified
+against a live embedded SurrealDB instance - see session notes), so a
+transient submission failure shouldn't turn an otherwise-successful save
+into a 500, unlike Source.vectorize()/add_insight() which are dedicated
+"submit this job" calls with nothing useful to fall back on.
+
+api/routers/embedding.py's POST /embed endpoint is the one exception: for
+item_type=note it reuses Note.save() specifically *because* embedding
+submission is the explicit point of that call (mirroring
+Source.vectorize()) - so it now explicitly checks for a submission failure
+(content present, no command_id) and still surfaces it as a failure.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.notebook import Note
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+class TestNoteSaveEmbedResilience:
+    @pytest.mark.asyncio
+    async def test_save_does_not_raise_when_submission_fails(self):
+        note = Note(title="Test", content="some content")
+        with (
+            patch(
+                "open_notebook.domain.base.ObjectModel.save",
+                new=AsyncMock(),
+            ),
+            patch(
+                "open_notebook.domain.notebook.submit_command",
+                side_effect=RuntimeError("job queue is down"),
+            ),
+        ):
+            object.__setattr__(note, "id", "note:abc123")
+            command_id = await note.save()
+
+        assert command_id is None
+
+    @pytest.mark.asyncio
+    async def test_save_still_calls_super_save_before_attempting_submission(self):
+        """The note's core save must happen (and succeed) regardless of
+        whether the embedding submission afterward fails."""
+        note = Note(title="Test", content="some content")
+        with (
+            patch(
+                "open_notebook.domain.base.ObjectModel.save",
+                new=AsyncMock(),
+            ) as mock_super_save,
+            patch(
+                "open_notebook.domain.notebook.submit_command",
+                side_effect=RuntimeError("job queue is down"),
+            ),
+        ):
+            object.__setattr__(note, "id", "note:abc123")
+            await note.save()
+
+        mock_super_save.assert_awaited_once()
+
+    @pytest.mark.asyncio
+    async def test_save_returns_command_id_on_success(self):
+        note = Note(title="Test", content="some content")
+        with (
+            patch("open_notebook.domain.base.ObjectModel.save", new=AsyncMock()),
+            patch(
+                "open_notebook.domain.notebook.submit_command",
+                return_value="command:xyz789",
+            ),
+        ):
+            object.__setattr__(note, "id", "note:abc123")
+            command_id = await note.save()
+
+        assert command_id == "command:xyz789"
+
+    @pytest.mark.asyncio
+    async def test_save_returns_none_when_no_content(self):
+        note = Note(title="Test", content=None)
+        with (
+            patch("open_notebook.domain.base.ObjectModel.save", new=AsyncMock()),
+            patch(
+                "open_notebook.domain.notebook.submit_command"
+            ) as mock_submit,
+        ):
+            object.__setattr__(note, "id", "note:abc123")
+            command_id = await note.save()
+
+        assert command_id is None
+        mock_submit.assert_not_called()
+
+
+class TestEmbeddingEndpointNoteBranch:
+    """api/routers/embedding.py: POST /api/embed with item_type=note."""
+
+    def test_returns_500_when_submission_fails_with_content(self, client):
+        note = Note(title="Test", content="some content")
+        object.__setattr__(note, "id", "note:abc123")
+
+        with (
+            patch("api.routers.embedding.Note.get", new=AsyncMock(return_value=note)),
+            patch.object(Note, "save", new=AsyncMock(return_value=None)),
+            patch(
+                "open_notebook.ai.models.model_manager.get_embedding_model",
+                new=AsyncMock(return_value=object()),
+            ),
+        ):
+            response = client.post(
+                "/api/embed",
+                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+            )
+
+        assert response.status_code == 500
+        assert response.json()["detail"] == "Failed to submit note embedding job"
+
+    def test_succeeds_when_submission_works(self, client):
+        note = Note(title="Test", content="some content")
+        object.__setattr__(note, "id", "note:abc123")
+
+        with (
+            patch("api.routers.embedding.Note.get", new=AsyncMock(return_value=note)),
+            patch.object(
+                Note, "save", new=AsyncMock(return_value="command:abc123")
+            ),
+            patch(
+                "open_notebook.ai.models.model_manager.get_embedding_model",
+                new=AsyncMock(return_value=object()),
+            ),
+        ):
+            response = client.post(
+                "/api/embed",
+                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+            )
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body["success"] is True
+        assert body["command_id"] == "command:abc123"
+
+    def test_succeeds_with_no_command_id_when_note_has_no_content(self, client):
+        """A content-less note has nothing to embed - save() correctly
+        returns None, and that must NOT be treated as a submission failure."""
+        note = Note(title="Test", content=None)
+        object.__setattr__(note, "id", "note:abc123")
+
+        with (
+            patch("api.routers.embedding.Note.get", new=AsyncMock(return_value=note)),
+            patch.object(Note, "save", new=AsyncMock(return_value=None)),
+            patch(
+                "open_notebook.ai.models.model_manager.get_embedding_model",
+                new=AsyncMock(return_value=object()),
+            ),
+        ):
+            response = client.post(
+                "/api/embed",
+                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+            )
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body["success"] is True
+        assert body["command_id"] is None

From e74eee5f0699c647218804df1156fe6415044daa Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 13:10:01 -0400
Subject: [PATCH 148/345] fix: prevent SurrealQL injection in
 Credential.get_all()'s order_by (#1021)

* fix: prevent SurrealQL injection in Credential.get_all()'s order_by

ObjectModel.get_all() already validates order_by against an allowlist
before interpolating it into the query string - but Credential overrides
get_all() (to handle per-row api_key decryption) and its override built
the ORDER BY clause with a raw, unvalidated f-string, bypassing that
protection entirely.

Extract the base class's validation logic into a reusable
_validate_order_by() classmethod and route Credential.get_all() through
it. Not reachable from any current API surface today (the only caller
passes a hardcoded "provider, created", not user input), but any
subclass that builds its own query around order_by instead of
delegating to the base get_all() needs this so the allowlist can't
silently drift between call sites.

No test currently exercises this path - worth adding one (e.g.
Credential.get_all(order_by="field; DROP TABLE credential") raises
InvalidInputError) before merging.

* test: add order_by injection regression tests

Covers _validate_order_by() normalization/rejection and the Credential
.get_all() path, which raises on an injected clause before any query
reaches the database.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 open_notebook/domain/base.py       | 68 +++++++++++++++---------------
 open_notebook/domain/credential.py | 11 ++---
 tests/test_order_by_validation.py  | 50 ++++++++++++++++++++++
 3 files changed, 91 insertions(+), 38 deletions(-)
 create mode 100644 tests/test_order_by_validation.py

diff --git a/open_notebook/domain/base.py b/open_notebook/domain/base.py
index 45459d45..d2a74c0d 100644
--- a/open_notebook/domain/base.py
+++ b/open_notebook/domain/base.py
@@ -1,3 +1,4 @@
+import re
 from datetime import datetime
 from typing import Any, ClassVar, Dict, List, Optional, Type, TypeVar, Union, cast
 
@@ -35,6 +36,39 @@ class ObjectModel(BaseModel):
     created: Optional[datetime] = None
     updated: Optional[datetime] = None
 
+    @classmethod
+    def _validate_order_by(cls, order_by: str) -> str:
+        """Validate and normalize an ORDER BY clause to prevent SurrealQL injection.
+
+        Supports: "field", "field direction", "field1 direction, field2 direction".
+        Any subclass that builds its own query around `order_by` (instead of
+        delegating to `get_all()`) must route through this so the allowlist
+        can't silently drift between call sites.
+        """
+        allowed_field_pattern = re.compile(r"^[a-z_][a-z0-9_]*$")
+        allowed_directions = {"asc", "desc"}
+
+        clauses = [c.strip() for c in order_by.split(",")]
+        validated_clauses = []
+        for clause in clauses:
+            parts = clause.strip().split()
+            if len(parts) == 1:
+                if not allowed_field_pattern.match(parts[0].lower()):
+                    raise InvalidInputError(f"Invalid order_by field: '{parts[0]}'")
+                validated_clauses.append(parts[0].lower())
+            elif len(parts) == 2:
+                if not allowed_field_pattern.match(
+                    parts[0].lower()
+                ) or parts[1].lower() not in allowed_directions:
+                    raise InvalidInputError(
+                        f"Invalid order_by clause: '{clause.strip()}'"
+                    )
+                validated_clauses.append(f"{parts[0].lower()} {parts[1].lower()}")
+            else:
+                raise InvalidInputError(f"Invalid order_by clause: '{clause.strip()}'")
+
+        return ", ".join(validated_clauses)
+
     @classmethod
     async def get_all(cls: Type[T], order_by=None) -> List[T]:
         try:
@@ -48,39 +82,7 @@ class ObjectModel(BaseModel):
                     "get_all() must be called from a specific model class"
                 )
             if order_by:
-                # Validate order_by to prevent SurrealQL injection
-                # Supports: "field", "field direction", "field1 direction, field2 direction"
-                import re
-
-                allowed_field_pattern = re.compile(r"^[a-z_][a-z0-9_]*$")
-                allowed_directions = {"asc", "desc"}
-
-                clauses = [c.strip() for c in order_by.split(",")]
-                validated_clauses = []
-                for clause in clauses:
-                    parts = clause.strip().split()
-                    if len(parts) == 1:
-                        if not allowed_field_pattern.match(parts[0].lower()):
-                            raise InvalidInputError(
-                                f"Invalid order_by field: '{parts[0]}'"
-                            )
-                        validated_clauses.append(parts[0].lower())
-                    elif len(parts) == 2:
-                        if not allowed_field_pattern.match(
-                            parts[0].lower()
-                        ) or parts[1].lower() not in allowed_directions:
-                            raise InvalidInputError(
-                                f"Invalid order_by clause: '{clause.strip()}'"
-                            )
-                        validated_clauses.append(
-                            f"{parts[0].lower()} {parts[1].lower()}"
-                        )
-                    else:
-                        raise InvalidInputError(
-                            f"Invalid order_by clause: '{clause.strip()}'"
-                        )
-
-                validated_order_by = ", ".join(validated_clauses)
+                validated_order_by = cls._validate_order_by(order_by)
                 query = f"SELECT * FROM {table_name} ORDER BY {validated_order_by}"
             else:
                 query = f"SELECT * FROM {table_name}"
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index 49827976..57462f84 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -171,11 +171,12 @@ class Credential(ObjectModel):
     @classmethod
     async def get_all(cls, order_by=None) -> List["Credential"]:
         """Override get_all() to handle api_key decryption with per-row error handling."""
-        order_clause = f" ORDER BY {order_by}" if order_by else ""
-        results = await repo_query(
-            f"SELECT * FROM {cls.table_name}{order_clause}",
-            {},
-        )
+        if order_by:
+            validated_order_by = cls._validate_order_by(order_by)
+            query = f"SELECT * FROM {cls.table_name} ORDER BY {validated_order_by}"
+        else:
+            query = f"SELECT * FROM {cls.table_name}"
+        results = await repo_query(query, {})
         credentials = []
         for row in results:
             try:
diff --git a/tests/test_order_by_validation.py b/tests/test_order_by_validation.py
new file mode 100644
index 00000000..2581d2fa
--- /dev/null
+++ b/tests/test_order_by_validation.py
@@ -0,0 +1,50 @@
+"""
+Regression tests for ObjectModel._validate_order_by() and its use by
+Credential.get_all() (open_notebook/domain/credential.py), which builds its
+own query instead of delegating to the base get_all() and previously
+interpolated order_by into the SurrealQL unvalidated.
+"""
+
+import pytest
+
+from open_notebook.domain.base import ObjectModel
+from open_notebook.domain.credential import Credential
+from open_notebook.exceptions import InvalidInputError
+
+
+class TestValidateOrderBy:
+    @pytest.mark.parametrize(
+        "clause,expected",
+        [
+            ("provider", "provider"),
+            ("provider, created", "provider, created"),
+            ("created DESC", "created desc"),
+            ("provider asc, created desc", "provider asc, created desc"),
+        ],
+    )
+    def test_accepts_and_normalizes_valid_clauses(self, clause, expected):
+        assert ObjectModel._validate_order_by(clause) == expected
+
+    @pytest.mark.parametrize(
+        "clause",
+        [
+            "field; DROP TABLE credential",
+            "provider, created; REMOVE TABLE credential",
+            "provider) FETCH (SELECT * FROM credential",
+            "created LIMIT 1",
+            "provider desc extra",
+            "",
+        ],
+    )
+    def test_rejects_injection_and_malformed_clauses(self, clause):
+        with pytest.raises(InvalidInputError):
+            ObjectModel._validate_order_by(clause)
+
+
+class TestCredentialGetAllRejectsInjection:
+    @pytest.mark.asyncio
+    async def test_injection_in_order_by_raises_before_querying(self):
+        # Must raise on validation - reaching the database with this string
+        # (the pre-fix behavior) would execute the injected statement.
+        with pytest.raises(InvalidInputError):
+            await Credential.get_all(order_by="provider; DROP TABLE credential")

From b38c74cf2986a04376dfe7529e57973c9bacf50c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 10 Jul 2026 15:33:19 -0300
Subject: [PATCH 149/345] docs: restructure documentation around AGENTS.md,
 VISION.md and decision records (#1032)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* docs: restructure documentation around AGENTS.md, VISION.md and decision records

- Consolidate 17 CLAUDE.md files into 3 AGENTS.md (root, backend, frontend);
  CLAUDE.md files become @AGENTS.md pointers
- Add VISION.md: product identity + current posture with horizon clusters
- Add docs/7-DEVELOPMENT/decisions/ with 4 retroactive ADRs and 2 PDRs
- Add 5 new engineering docs pages (credentials, content-processing,
  podcasts, prompts, frontend) absorbing knowledge from removed CLAUDE.md
- Dismember TRIAGE.md: label taxonomy into maintainer-guide.md, product
  jurisprudence into VISION.md, operator heuristics stay local (gitignored)
- Add AI-assisted/agent-generated PR guidelines to contributing.md
- Convert README.dev.md into a pointer after migrating its unique content
  (make workflow matrix, Docker publishing, add-a-language playbook)
- Fix stale docs: migration path/format, provider count, locale list;
  fix broken links (docs/index.md, PR template, CONFIGURATION.md)

* docs: fix README doc links and add markdown link check to CI

- Repoint 9 README links to pages that actually exist in docs/
- Replace literal (link) placeholder in maintainer-guide templates
- Add scripts/check_md_links.py validating relative links in tracked
  markdown (skips URLs, anchors and code spans)
- Add docs-links workflow running the check on PRs that touch markdown

* docs: add documentation restructure to changelog

* feat: add cubic.yaml with project-aware AI review agents

Three custom review agents (vision & principles alignment backed by
VISION.md, known mechanical caveats, security & testability), PR-contract
review instructions, and automatic ultrareviews for auth, credential,
encryption and migration changes.

* docs: graduate issue-first policy by change size

Small obvious fixes (typos, docs, tiny bugs, i18n completions) no longer
require an issue; features and architecture changes still do. Sizeable
PRs opened without an issue convert to draft while the issue goes
through triage (1-2 days). Applied consistently across contributing
guide, root CONTRIBUTING pointer, PR template, maintainer guide red
flags and cubic review instructions.

* docs: align PR template Related Issue section with graduated issue-first policy

* docs: address review — generalize ADR-002/004, unwrap hard-wrapped lines

- ADR-002 now records the general delegation rule (platform/media support
  that needs heavy coding lives in focused external libraries) covering
  Esperanto, Content Core and podcast-creator
- ADR-004 now records the durable decision (long-running work runs on
  background workers — heavy content, varied machine sizes, never lock
  usage) with the queue technology as a swappable implementation detail
  pending #381
- Remove mid-paragraph hard line wrapping from authored docs to match
  repo convention (one line per paragraph)

* fix: address cubic review — stale doc facts, make dev/full targets, link checker query strings

- credentials.md: only PROVIDER_CONFIG exists as a map; Vertex/Azure/
  OpenAI-compatible provisioning is inline in _provision_*() functions
- content-processing.md: correct ContextConfig priority weights
  (source 100 > insight 75 > note 50)
- development-setup.md + Makefile: make dev/full pointed at root compose
  files that don't exist; targets now use examples/docker-compose-dev.yml
  and examples/docker-compose-full-local.yml with --project-directory .
- check_md_links.py: strip query strings before file-existence checks
---
 .github/RELEASE_PROCESS.md                    |  27 +
 .github/pull_request_template.md              |  14 +-
 .github/workflows/docs-links.yml              |  16 +
 AGENTS.md                                     |  45 ++
 CHANGELOG.md                                  |   9 +
 CLAUDE.md                                     | 219 +--------
 CONFIGURATION.md                              |   1 -
 CONTRIBUTING.md                               |   7 +-
 Makefile                                      |   4 +-
 README.dev.md                                 | 462 +-----------------
 README.md                                     |  22 +-
 TRIAGE.md                                     |  92 ----
 VISION.md                                     |  79 +++
 api/AGENTS.md                                 |   1 +
 api/CLAUDE.md                                 | 263 +---------
 commands/CLAUDE.md                            |  69 ---
 cubic.yaml                                    |  81 +++
 docs/7-DEVELOPMENT/architecture.md            |  16 +-
 docs/7-DEVELOPMENT/change-playbooks.md        |  28 +-
 docs/7-DEVELOPMENT/content-processing.md      |  55 +++
 docs/7-DEVELOPMENT/contributing.md            |  39 +-
 docs/7-DEVELOPMENT/credentials.md             |  65 +++
 .../decisions/ADR-001-surrealdb.md            |  27 +
 .../decisions/ADR-002-external-libraries.md   |  32 ++
 .../decisions/ADR-003-streamlit-to-nextjs.md  |  26 +
 .../decisions/ADR-004-background-workers.md   |  27 +
 .../decisions/PDR-001-single-user-first.md    |  26 +
 .../PDR-002-provider-agnostic-core.md         |  27 +
 docs/7-DEVELOPMENT/decisions/README.md        |  50 ++
 docs/7-DEVELOPMENT/design-principles.md       | 239 +--------
 docs/7-DEVELOPMENT/development-setup.md       |  32 +-
 docs/7-DEVELOPMENT/frontend.md                |  45 ++
 docs/7-DEVELOPMENT/index.md                   |  27 +-
 docs/7-DEVELOPMENT/maintainer-guide.md        | 103 ++--
 docs/7-DEVELOPMENT/podcasts.md                |  28 ++
 docs/7-DEVELOPMENT/prompts.md                 |  53 ++
 docs/index.md                                 |   4 +-
 frontend/AGENTS.md                            |  34 ++
 frontend/CLAUDE.md                            |   1 +
 frontend/src/CLAUDE.md                        | 168 -------
 frontend/src/components/ui/CLAUDE.md          |  64 ---
 frontend/src/lib/api/CLAUDE.md                | 158 ------
 frontend/src/lib/hooks/CLAUDE.md              | 192 --------
 frontend/src/lib/locales/CLAUDE.md            | 154 ------
 frontend/src/lib/stores/CLAUDE.md             |  68 ---
 open_notebook/AGENTS.md                       |  81 +++
 open_notebook/CLAUDE.md                       | 226 +--------
 open_notebook/ai/CLAUDE.md                    | 331 -------------
 open_notebook/database/CLAUDE.md              | 124 -----
 open_notebook/domain/CLAUDE.md                | 122 -----
 open_notebook/domain/notebook.py              |   4 +-
 open_notebook/graphs/CLAUDE.md                |  79 ---
 open_notebook/podcasts/CLAUDE.md              | 104 ----
 open_notebook/podcasts/models.py              |  12 +-
 open_notebook/utils/CLAUDE.md                 | 229 ---------
 prompts/CLAUDE.md                             | 190 -------
 scripts/check_md_links.py                     |  75 +++
 57 files changed, 1174 insertions(+), 3602 deletions(-)
 create mode 100644 .github/workflows/docs-links.yml
 create mode 100644 AGENTS.md
 delete mode 100644 TRIAGE.md
 create mode 100644 VISION.md
 create mode 100644 api/AGENTS.md
 delete mode 100644 commands/CLAUDE.md
 create mode 100644 cubic.yaml
 create mode 100644 docs/7-DEVELOPMENT/content-processing.md
 create mode 100644 docs/7-DEVELOPMENT/credentials.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-001-surrealdb.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-002-external-libraries.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-003-streamlit-to-nextjs.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-004-background-workers.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/PDR-001-single-user-first.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/README.md
 create mode 100644 docs/7-DEVELOPMENT/frontend.md
 create mode 100644 docs/7-DEVELOPMENT/podcasts.md
 create mode 100644 docs/7-DEVELOPMENT/prompts.md
 create mode 100644 frontend/AGENTS.md
 create mode 100644 frontend/CLAUDE.md
 delete mode 100644 frontend/src/CLAUDE.md
 delete mode 100644 frontend/src/components/ui/CLAUDE.md
 delete mode 100644 frontend/src/lib/api/CLAUDE.md
 delete mode 100644 frontend/src/lib/hooks/CLAUDE.md
 delete mode 100644 frontend/src/lib/locales/CLAUDE.md
 delete mode 100644 frontend/src/lib/stores/CLAUDE.md
 create mode 100644 open_notebook/AGENTS.md
 delete mode 100644 open_notebook/ai/CLAUDE.md
 delete mode 100644 open_notebook/database/CLAUDE.md
 delete mode 100644 open_notebook/domain/CLAUDE.md
 delete mode 100644 open_notebook/graphs/CLAUDE.md
 delete mode 100644 open_notebook/podcasts/CLAUDE.md
 delete mode 100644 open_notebook/utils/CLAUDE.md
 delete mode 100644 prompts/CLAUDE.md
 create mode 100644 scripts/check_md_links.py

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index 083a21d3..b37f3c3d 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -36,6 +36,33 @@ version when the branch has enough validated change to ship.
    Docker Hub credentials are configured.
 7. Mark shipped issues with `released` and close any release-tracking tasks.
 
+## Docker Image Publishing
+
+The publishing workflow, from local test to promoted release:
+
+```bash
+make docker-build-local   # 1. Build for the current platform, test locally
+make docker-push          # 2. Push version tags (does NOT update latest)
+                          # 3. Test the pushed version in staging/production
+make docker-push-latest   # 4. Promote: push version + update v1-latest
+```
+
+| Command | What it does | Updates latest? |
+|---------|--------------|-----------------|
+| `make docker-build-local` | Build for current platform only (tags `<version>` + `local`) | No registry push |
+| `make docker-push` | Push version tags to registries | ❌ No |
+| `make docker-push-latest` | Push version + update `v1-latest` | ✅ Yes |
+| `make docker-release` | Full release (same as docker-push-latest) | ✅ Yes |
+| `make tag` | Create and push a git tag matching `pyproject.toml` | — |
+
+Publishing details:
+
+- **Platforms:** `linux/amd64`, `linux/arm64`
+- **Registries:** Docker Hub + GitHub Container Registry
+- **Image variants:** regular + single-container (`-single`)
+- **Version source:** `pyproject.toml`
+- Build issues: `docker builder prune`, then `make docker-buildx-reset`
+
 ## Manual Verification
 
 Before publishing a stable release, manually verify the areas touched by the
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 71e18da6..5de0aba1 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -4,9 +4,11 @@
 
 ## Related Issue
 
-<!-- This PR should be linked to an approved issue. If not, please create an issue first. -->
+<!-- Non-trivial PRs (features, architecture changes) must link an approved issue.
+     Small obvious fixes (typo, docs, tiny bug) don't need one — write "N/A (small fix)" below.
+     Sizeable change without an issue? Mark this PR as draft and create the issue first. -->
 
-Fixes #<!-- issue number -->
+Fixes #<!-- issue number, or "N/A (small fix)" -->
 
 ## Type of Change
 
@@ -37,7 +39,7 @@ Fixes #<!-- issue number -->
 
 <!-- This section helps ensure your PR aligns with our project vision -->
 
-**Which design principles does this PR support?** (See [DESIGN_PRINCIPLES.md](../DESIGN_PRINCIPLES.md))
+**Which design principles does this PR support?** (See [VISION.md](https://github.com/lfnovo/open-notebook/blob/main/VISION.md))
 
 - [ ] Privacy First
 - [ ] Simplicity Over Features
@@ -96,9 +98,9 @@ Fixes #<!-- issue number -->
 
 Before submitting, please verify:
 
-- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md)
-- [ ] I have read [DESIGN_PRINCIPLES.md](../DESIGN_PRINCIPLES.md)
-- [ ] This PR addresses an approved issue that was assigned to me
+- [ ] I have read [CONTRIBUTING.md](https://github.com/lfnovo/open-notebook/blob/main/docs/7-DEVELOPMENT/contributing.md)
+- [ ] I have read [VISION.md](https://github.com/lfnovo/open-notebook/blob/main/VISION.md)
+- [ ] This PR addresses an approved issue assigned to me, **or** it's a small obvious fix (typo, docs, tiny bug) that doesn't need one — for anything bigger without an issue, mark this PR as draft and open the issue (triage takes 1–2 days)
 - [ ] I have not included unrelated changes in this PR
 - [ ] My PR title follows conventional commits format (e.g., "feat: add user authentication")
 
diff --git a/.github/workflows/docs-links.yml b/.github/workflows/docs-links.yml
new file mode 100644
index 00000000..3b95cf10
--- /dev/null
+++ b/.github/workflows/docs-links.yml
@@ -0,0 +1,16 @@
+name: Docs Link Check
+
+on:
+  pull_request:
+    paths:
+      - "**/*.md"
+      - "scripts/check_md_links.py"
+      - ".github/workflows/docs-links.yml"
+
+jobs:
+  check-links:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Check relative markdown links
+        run: python3 scripts/check_md_links.py
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 00000000..11c8152b
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,45 @@
+# Open Notebook — Agent Rules
+
+Open Notebook is an open-source, privacy-focused alternative to Google's Notebook LM: an AI-powered research assistant with multi-provider AI support, fully self-hostable.
+
+This file holds the project-wide rules every coding session needs. Component rules: [open_notebook/AGENTS.md](open_notebook/AGENTS.md) (backend — also covers `api/`, `commands/`, `prompts/`) and [frontend/AGENTS.md](frontend/AGENTS.md). Knowledge lives in the docs (see [Where to look](#where-to-look)) — read it on demand instead of guessing.
+
+## Stack, ports, startup order
+
+Three tiers: Next.js frontend (3000) → FastAPI (5055) → SurrealDB (8000).
+
+Start in this order — each tier depends on the one below:
+
+1. `make database` — SurrealDB (API fails without it)
+2. `make api` — FastAPI; **schema migrations run automatically on startup** (check logs)
+3. `make worker-start` — surreal-commands worker. **Required**: podcasts, embeddings and source processing are async jobs that silently queue forever without it
+4. `make frontend` — UI (depends on the API for all data)
+
+Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
+
+## Commands
+
+- Tests: `uv run pytest tests/`
+- Python lint/typecheck: `ruff check . --fix` · `uv run python -m mypy .`
+- Frontend (inside `frontend/`): `npm run lint` · `npm run test` · `npm run build`
+- Docker release: `make docker-release` (see `.github/RELEASE_PROCESS.md`)
+
+## Hard rules
+
+- **Async-first**: every DB query, graph invocation and AI call is `await`-ed. No sync DB access.
+- **Never commit secrets.** Credentials are encrypted at rest and require `OPEN_NOTEBOOK_ENCRYPTION_KEY` to be set.
+- CORS is wide-open and auth is a simple password middleware — **dev defaults, not production hardening**. Don't build features that assume otherwise.
+- Product direction questions (does this feature fit?) → [VISION.md](VISION.md). Past decisions ("why is it like this?") → [docs/7-DEVELOPMENT/decisions/](docs/7-DEVELOPMENT/decisions/). Structural decisions made while coding should produce a new decision record there.
+
+## Where to look
+
+| Need | Location |
+|---|---|
+| Architecture (3 tiers, workflows, data model) | [docs/7-DEVELOPMENT/architecture.md](docs/7-DEVELOPMENT/architecture.md) |
+| Step-by-step recipes (add endpoint, migration, i18n…) | [docs/7-DEVELOPMENT/change-playbooks.md](docs/7-DEVELOPMENT/change-playbooks.md) |
+| Dev environment setup | [docs/7-DEVELOPMENT/development-setup.md](docs/7-DEVELOPMENT/development-setup.md) |
+| Code standards & testing | [docs/7-DEVELOPMENT/code-standards.md](docs/7-DEVELOPMENT/code-standards.md) · [testing.md](docs/7-DEVELOPMENT/testing.md) |
+| Product identity & current posture | [VISION.md](VISION.md) |
+| Decision log (ADRs/PDRs) | [docs/7-DEVELOPMENT/decisions/](docs/7-DEVELOPMENT/decisions/) |
+| Contribution process (issue-first, PRs) | [docs/7-DEVELOPMENT/contributing.md](docs/7-DEVELOPMENT/contributing.md) |
+| User/operator docs (install, configure, troubleshoot) | [docs/](docs/index.md) |
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 17993930..f84e70f8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- `VISION.md` — the product's source of truth in two layers: durable identity (what Open Notebook is and is not, core principles) and current posture (the phase we're in, directional constraints, and the horizon clusters under consideration)
+- Decision records at `docs/7-DEVELOPMENT/decisions/` — short, immutable ADRs/PDRs answering "why is it like this?", seeded with 4 retroactive ADRs (SurrealDB, delegation to external libraries, Streamlit→Next.js, background workers) and 2 PDRs (single-user first, provider-agnostic core)
+- `AGENTS.md` files (root, `open_notebook/`, `frontend/`) with the normative rules for coding agents and humans — commands, hard rules, and gotchas not derivable from the code; `CLAUDE.md` files are now one-line pointers to them
+- Five new engineering docs pages under `docs/7-DEVELOPMENT/`: credentials, content processing, podcasts, prompts, and frontend architecture
+- Contribution guidelines for AI-assisted and agent-generated PRs in the contributing guide — the operator owns the PR, issue-first still applies, tests must have actually run
+- CI check for broken relative links in markdown (`scripts/check_md_links.py` + `docs-links` workflow on PRs touching `*.md`)
+- `cubic.yaml` — AI review settings as code: PR-contract instructions, three custom review agents (vision & principles alignment backed by `VISION.md`, known mechanical caveats, security & testability) and automatic ultrareviews for auth/credential/encryption/migration changes
 - Documented the flow-driven release process in `.github/RELEASE_PROCESS.md`, including the `ready` to `main` to stable release path, dev/stable image labels, and maintainer verification checklist (#938)
 - List view for the Notebooks page — a tile/list toggle in the header lets you switch between the visual card grid and a compact row layout (name, description, source/note counts, last updated) for easier scanning of large collections. The choice is remembered across reloads and translated across all 14 locales (#885)
 - Documented the `ESPERANTO_TTS_TIMEOUT` environment variable (default `300`s) in the environment reference; raise it for slow or self-hosted TTS providers so long podcast segments don't fail with a timeout (#937)
@@ -19,6 +26,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
 
 ### Changed
+- Developer documentation restructured: 17 knowledge-heavy `CLAUDE.md` files consolidated into the 3 `AGENTS.md` + docs pages above; `README.dev.md` became a pointer after its unique content moved into `development-setup.md` (make-workflow matrix), `.github/RELEASE_PROCESS.md` (Docker publishing) and the change playbooks (add-a-language); the maintainer guide now carries the curated label taxonomy (state funnel, `area:` labels, consolidation rules)
+- Fixed stale developer docs while migrating: real migration path/format (`open_notebook/database/migrations/N.surrealql` + `AsyncMigrationManager` registration), provider count (17), locale list (7), and 9 README links that pointed at documentation pages that never existed
 - The API's listen interface in the Docker images is now configurable via a new `API_HOST` environment variable instead of a hardcoded `--host 0.0.0.0`. The default is unchanged (`0.0.0.0`); set `API_HOST=::` to serve IPv6/dual-stack environments (#985)
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
diff --git a/CLAUDE.md b/CLAUDE.md
index 8e2675a2..43c994c2 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,218 +1 @@
-# Open Notebook - Root CLAUDE.md
-
-This file provides architectural guidance for contributors working on Open Notebook at the project level.
-
-## Project Overview
-
-**Open Notebook** is an open-source, privacy-focused alternative to Google's Notebook LM. It's an AI-powered research assistant enabling users to upload multi-modal content (PDFs, audio, video, web pages), generate intelligent notes, search semantically, chat with AI models, and produce professional podcasts—all with complete control over data and choice of AI providers.
-
-**Key Values**: Privacy-first, multi-provider AI support, fully self-hosted option, open-source transparency.
-
----
-
-## Three-Tier Architecture
-
-```
-┌─────────────────────────────────────────────────────────┐
-│              Frontend (React/Next.js)                    │
-│              frontend/ @ port 3000                       │
-├─────────────────────────────────────────────────────────┤
-│ - Notebooks, sources, notes, chat, podcasts, search UI  │
-│ - Zustand state management, TanStack Query (React Query)│
-│ - Shadcn/ui component library with Tailwind CSS         │
-└────────────────────────┬────────────────────────────────┘
-                         │ HTTP REST
-┌────────────────────────▼────────────────────────────────┐
-│              API (FastAPI)                              │
-│              api/ @ port 5055                           │
-├─────────────────────────────────────────────────────────┤
-│ - REST endpoints for notebooks, sources, notes, chat    │
-│ - LangGraph workflow orchestration                      │
-│ - Job queue for async operations (podcasts)             │
-│ - Multi-provider AI provisioning via Esperanto          │
-└────────────────────────┬────────────────────────────────┘
-                         │ SurrealQL
-┌────────────────────────▼────────────────────────────────┐
-│         Database (SurrealDB)                            │
-│         Graph database @ port 8000                      │
-├─────────────────────────────────────────────────────────┤
-│ - Records: Notebook, Source, Note, ChatSession, Credential│
-│ - Relationships: source-to-notebook, note-to-source     │
-│ - Vector embeddings for semantic search                 │
-└─────────────────────────────────────────────────────────┘
-```
-
----
-
-## Useful sources
-
-User documentation is at @docs/
-
-## Tech Stack
-
-### Frontend (`frontend/`)
-- **Framework**: Next.js 16 (React 19)
-- **Language**: TypeScript
-- **State Management**: Zustand
-- **Data Fetching**: TanStack Query (React Query)
-- **Styling**: Tailwind CSS + Shadcn/ui
-- **Build Tool**: Webpack (via Next.js)
-- **i18n compatible**: All front-end changes must also consider the translation keys
-
-### API Backend (`api/` + `open_notebook/`)
-- **Framework**: FastAPI 0.104+
-- **Language**: Python 3.11+
-- **Workflows**: LangGraph state machines
-- **Database**: SurrealDB async driver
-- **AI Providers**: Esperanto library (8+ providers: OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI)
-- **Job Queue**: Surreal-Commands for async jobs (podcasts)
-- **Logging**: Loguru
-- **Validation**: Pydantic v2
-- **Testing**: Pytest
-
-### Database
-- **SurrealDB**: Graph database with built-in embedding storage and vector search
-- **Schema Migrations**: Automatic on API startup via AsyncMigrationManager
-
-### Additional Services
-- **Content Processing**: content-core library (file/URL extraction)
-- **Prompts**: AI-Prompter with Jinja2 templating
-- **Podcast Generation**: podcast-creator library
-- **Embeddings**: Multi-provider via Esperanto
-
----
-
-## Architecture Highlights
-
-### 1. Async-First Design
-- All database queries, graph invocations, and API calls are async (await)
-- SurrealDB async driver with connection pooling
-- FastAPI handles concurrent requests efficiently
-
-### 2. LangGraph Workflows
-- **source.py**: Content ingestion (extract → embed → save)
-- **chat.py**: Conversational agent with message history
-- **ask.py**: Search + synthesis (retrieve relevant sources → LLM)
-- **transformation.py**: Custom transformations on sources
-- All use `provision_langchain_model()` for smart model selection
-
-### 3. Multi-Provider AI
-- **Esperanto library**: Unified interface to 8+ AI providers
-- **Credential system**: Individual encrypted credential records per provider; models link to credentials for direct config
-- **ModelManager**: Factory pattern with fallback logic; uses credential config when available, env vars as fallback
-- **Smart selection**: Detects large contexts, prefers long-context models
-- **Override support**: Per-request model configuration
-
-### 4. Database Schema
-- **Automatic migrations**: AsyncMigrationManager runs on API startup
-- **SurrealDB graph model**: Records with relationships and embeddings
-- **Vector search**: Built-in semantic search across all content
-- **Transactions**: Repo functions handle ACID operations
-
-### 5. Authentication
-- **Current**: Simple password middleware (insecure, dev-only)
-- **Production**: Replace with OAuth/JWT (see CONFIGURATION.md)
-
----
-
-## Important Quirks & Gotchas
-
-### API Startup
-- **Migrations run automatically** on startup; check logs for errors
-- **Must start API before UI**: UI depends on API for all data
-- **SurrealDB must be running**: API fails without database connection
-
-### Frontend-Backend Communication
-- **Base API URL**: Configured in `.env.local` (default: http://localhost:5055)
-- **CORS enabled**: Configured in `api/main.py` (allow all origins in dev)
-- **Rate limiting**: Not built-in; add at proxy layer for production
-
-### LangGraph Workflows
-- **Blocking operations**: Chat/podcast workflows may take minutes; no timeout
-- **State persistence**: Uses SQLite checkpoint storage in `/data/sqlite-db/`
-- **Model fallback**: If primary model fails, falls back to cheaper/smaller model
-
-### Podcast Generation
-- **Async job queue**: `podcast_service.py` submits jobs but doesn't wait
-- **Track status**: Use `/commands/{command_id}` endpoint to poll status
-- **TTS failures**: Fall back to silent audio if speech synthesis fails
-
-### Content Processing
-- **File extraction**: Uses content-core library; supports 50+ file types
-- **URL handling**: Extracts text + metadata from web pages
-- **Large files**: Content processing is sync; may block API briefly
-
----
-
-## Component References
-
-See dedicated CLAUDE.md files for detailed guidance:
-
-- **[frontend/CLAUDE.md](frontend/CLAUDE.md)**: React/Next.js architecture, state management, API integration
-- **[api/CLAUDE.md](api/CLAUDE.md)**: FastAPI structure, service pattern, endpoint development
-- **[open_notebook/CLAUDE.md](open_notebook/CLAUDE.md)**: Backend core, domain models, LangGraph workflows, AI provisioning
-- **[open_notebook/domain/CLAUDE.md](open_notebook/domain/CLAUDE.md)**: Data models, repository pattern, search functions
-- **[open_notebook/ai/CLAUDE.md](open_notebook/ai/CLAUDE.md)**: ModelManager, AI provider integration, Esperanto usage
-- **[open_notebook/graphs/CLAUDE.md](open_notebook/graphs/CLAUDE.md)**: LangGraph workflow design, state machines
-- **[open_notebook/database/CLAUDE.md](open_notebook/database/CLAUDE.md)**: SurrealDB operations, migrations, async patterns
-
----
-
-## Documentation Map
-
-- **[README.md](README.md)**: Project overview, features, quick start
-- **[docs/index.md](docs/index.md)**: Complete user & deployment documentation
-- **[CONFIGURATION.md](CONFIGURATION.md)**: Environment variables, model configuration
-- **[CONTRIBUTING.md](CONTRIBUTING.md)**: Contribution guidelines
-- **[MAINTAINER_GUIDE.md](MAINTAINER_GUIDE.md)**: Release & maintenance procedures
-
----
-
-## Testing Strategy
-
-- **Unit tests**: `tests/test_domain.py`, `test_models_api.py`
-- **Graph tests**: `tests/test_graphs.py` (workflow integration)
-- **Utils tests**: `tests/test_utils.py`, `tests/test_chunking.py`, `tests/test_embedding.py`
-- **Run all**: `uv run pytest tests/`
-- **Coverage**: Check with `pytest --cov`
-
----
-
-## Common Tasks
-
-### Add a New API Endpoint
-1. Create router in `api/routers/feature.py`
-2. Create service in `api/feature_service.py`
-3. Define schemas in `api/models.py`
-4. Register router in `api/main.py`
-5. Test via http://localhost:5055/docs
-
-### Add a New LangGraph Workflow
-1. Create `open_notebook/graphs/workflow_name.py`
-2. Define StateDict and node functions
-3. Build graph with `.add_node()` / `.add_edge()`
-4. Invoke in service: `graph.ainvoke({"input": ...}, config={"..."})`
-5. Test with sample data in `tests/`
-
-### Add Database Migration
-1. Create `migrations/XXX_description.surql`
-2. Write SurrealQL schema changes
-3. Create `migrations/XXX_description_down.surql` (optional rollback)
-4. API auto-detects on startup; migration runs if newer than recorded version
-
-### Deploy to Production
-1. Review [CONFIGURATION.md](CONFIGURATION.md) for security settings
-2. Use `make docker-release` for multi-platform image
-3. Push to Docker Hub / GitHub Container Registry
-4. Deploy `docker compose --profile multi up`
-5. Verify migrations via API logs
-
----
-
-## Support & Community
-
-- **Documentation**: https://open-notebook.ai
-- **Discord**: https://discord.gg/37XJPXfz2w
-- **Issues**: https://github.com/lfnovo/open-notebook/issues
-- **License**: MIT (see LICENSE)
-
+@AGENTS.md
diff --git a/CONFIGURATION.md b/CONFIGURATION.md
index 6763fe44..84bcc226 100644
--- a/CONFIGURATION.md
+++ b/CONFIGURATION.md
@@ -13,7 +13,6 @@ All configuration documentation has been consolidated into the new documentation
 - **AI Provider Setup** → [AI Providers](docs/5-CONFIGURATION/ai-providers.md)
 - **Environment Variables Reference** → [Environment Reference](docs/5-CONFIGURATION/environment-reference.md)
 - **Database Configuration** → [Database Setup](docs/5-CONFIGURATION/database.md)
-- **Server Configuration** → [Server Settings](docs/5-CONFIGURATION/server.md)
 - **Security Setup** → [Security Configuration](docs/5-CONFIGURATION/security.md)
 - **Reverse Proxy** → [Reverse Proxy Setup](docs/5-CONFIGURATION/reverse-proxy.md)
 - **Advanced Tuning** → [Advanced Configuration](docs/5-CONFIGURATION/advanced.md)
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 4139d205..682f0a89 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -12,7 +12,8 @@ All contribution guidelines have been consolidated into the new development docu
 
 - **Want to contribute code?** → [Contributing Guide](docs/7-DEVELOPMENT/contributing.md)
 - **Want to understand the architecture?** → [Architecture Overview](docs/7-DEVELOPMENT/architecture.md)
-- **Want to understand our design philosophy?** → [Design Principles](docs/7-DEVELOPMENT/design-principles.md)
+- **Want to understand what we're building?** → [Vision & Principles](VISION.md)
+- **Want to understand our engineering practices?** → [Design Principles](docs/7-DEVELOPMENT/design-principles.md)
 - **Are you a maintainer?** → [Maintainer Guide](docs/7-DEVELOPMENT/maintainer-guide.md)
 - **New developer?** → [Quick Start](docs/7-DEVELOPMENT/quick-start.md)
 
@@ -20,7 +21,9 @@ All contribution guidelines have been consolidated into the new development docu
 
 ## The Issue-First Workflow
 
-**TL;DR**: Create an issue first, get it assigned, THEN code.
+**TL;DR**: For anything non-trivial — features, architecture changes — create an issue first, get
+it assigned, THEN code. Small obvious fixes (typos, docs, tiny bugs) can go straight to a PR.
+Already coded something bigger? Mark the PR as draft and open the issue — triage takes 1–2 days.
 
 This prevents wasted effort and ensures your work aligns with the project. [See details →](docs/7-DEVELOPMENT/contributing.md)
 
diff --git a/Makefile b/Makefile
index bf75f3e0..7a857532 100644
--- a/Makefile
+++ b/Makefile
@@ -127,10 +127,10 @@ tag:
 
 
 dev:
-	docker compose -f docker-compose.dev.yml up --build 
+	docker compose -f examples/docker-compose-dev.yml --project-directory . up --build
 
 full:
-	docker compose -f docker-compose.full.yml up --build 
+	docker compose -f examples/docker-compose-full-local.yml --project-directory . up --build
 
 
 api:
diff --git a/README.dev.md b/README.dev.md
index eac28b00..32f3a7e6 100644
--- a/README.dev.md
+++ b/README.dev.md
@@ -1,449 +1,31 @@
 # Developer Guide
 
-This guide is for developers working on Open Notebook. For end-user documentation, see [README.md](README.md) and [docs/](docs/).
+**📍 This file has moved!**
 
-## Quick Start for Development
+Developer documentation now lives in the development docs structure.
+
+👉 **[Read the Development Setup Guide](docs/7-DEVELOPMENT/development-setup.md)**
+
+---
+
+## Quick Links
+
+- **Setting up your environment?** → [Development Setup](docs/7-DEVELOPMENT/development-setup.md) (includes the make-workflow matrix)
+- **New developer?** → [Quick Start](docs/7-DEVELOPMENT/quick-start.md)
+- **Want to contribute?** → [Contributing Guide](docs/7-DEVELOPMENT/contributing.md)
+- **Making a common change?** → [Change Playbooks](docs/7-DEVELOPMENT/change-playbooks.md)
+- **Publishing Docker images?** → [Release Process](.github/RELEASE_PROCESS.md)
+- **Coding-agent rules?** → [AGENTS.md](AGENTS.md)
+
+---
+
+## TL;DR
 
 ```bash
-# 1. Clone and setup
-git clone https://github.com/lfnovo/open-notebook.git
-cd open-notebook
-
-# 2. Copy environment files
+git clone https://github.com/lfnovo/open-notebook.git && cd open-notebook
 cp .env.example .env
-cp .env.example docker.env
-
-# 3. Install dependencies
 uv sync
-
-# 4. Start all services (recommended for development)
-make start-all
+make start-all    # SurrealDB + API + worker + frontend
 ```
 
-## Development Workflows
-
-### When to Use What?
-
-| Workflow | Use Case | Speed | Production Parity |
-|----------|----------|-------|-------------------|
-| **Local Services** (`make start-all`) | Day-to-day development, fastest iteration | ⚡⚡⚡ Fast | Medium |
-| **Docker Compose** (`make dev`) | Testing containerized setup | ⚡⚡ Medium | High |
-| **Local Docker Build** (`make docker-build-local`) | Testing Dockerfile changes | ⚡ Slow | Very High |
-| **Multi-platform Build** (`make docker-push`) | Publishing releases | 🐌 Very Slow | Exact |
-
----
-
-## 1. Local Development (Recommended)
-
-**Best for:** Daily development, hot reload, debugging
-
-### Setup
-
-```bash
-# Start database
-make database
-
-# Start all services (DB + API + Worker + Frontend)
-make start-all
-```
-
-### What This Does
-
-1. Starts SurrealDB in Docker (port 8000)
-2. Starts FastAPI backend (port 5055)
-3. Starts background worker (surreal-commands)
-4. Starts Next.js frontend (port 3000)
-
-### Individual Services
-
-```bash
-# Just the database
-make database
-
-# Just the API
-make api
-
-# Just the frontend
-make frontend
-
-# Just the worker
-make worker
-```
-
-### Checking Status
-
-```bash
-# See what's running
-make status
-
-# Stop everything
-make stop-all
-```
-
-### Advantages
-- ✅ Fastest iteration (hot reload)
-- ✅ Easy debugging (direct process access)
-- ✅ Low resource usage
-- ✅ Direct log access
-
-### Disadvantages
-- ❌ Doesn't test Docker build
-- ❌ Environment may differ from production
-- ❌ Requires local Python/Node setup
-
----
-
-## 2. Docker Compose Development
-
-**Best for:** Testing containerized setup, CI/CD verification
-
-```bash
-# Start with dev profile
-make dev
-
-# Or full stack
-make full
-```
-
-### Configuration Files
-
-- `docker-compose.dev.yml` - Development setup
-- `docker-compose.full.yml` - Full stack setup
-- `docker-compose.yml` - Base configuration
-
-### Advantages
-- ✅ Closer to production environment
-- ✅ Isolated dependencies
-- ✅ Easy to share exact environment
-
-### Disadvantages
-- ❌ Slower rebuilds
-- ❌ More complex debugging
-- ❌ Higher resource usage
-
----
-
-## 3. Testing Production Docker Images
-
-**Best for:** Verifying Dockerfile changes before publishing
-
-### Build Locally
-
-```bash
-# Build production image for your platform only
-make docker-build-local
-```
-
-This creates two tags:
-- `lfnovo/open_notebook:<version>` (from pyproject.toml)
-- `lfnovo/open_notebook:local`
-
-### Run Locally
-
-```bash
-docker run -p 5055:5055 -p 3000:3000 lfnovo/open_notebook:local
-```
-
-### When to Use
-- ✅ Before pushing to registry
-- ✅ Testing Dockerfile changes
-- ✅ Debugging production-specific issues
-- ✅ Verifying build process
-
----
-
-## 4. Publishing Docker Images
-
-### Workflow
-
-```bash
-# 1. Test locally first
-make docker-build-local
-
-# 2. If successful, push version tag (no latest update)
-make docker-push
-
-# 3. Test the pushed version in staging/production
-
-# 4. When ready, promote to latest
-make docker-push-latest
-```
-
-### Available Commands
-
-| Command | What It Does | Updates Latest? |
-|---------|--------------|-----------------|
-| `make docker-build-local` | Build for current platform only | No registry push |
-| `make docker-push` | Push version tags to registries | ❌ No |
-| `make docker-push-latest` | Push version + update v1-latest | ✅ Yes |
-| `make docker-release` | Full release (same as docker-push-latest) | ✅ Yes |
-
-### Publishing Details
-
-- **Platforms:** `linux/amd64`, `linux/arm64`
-- **Registries:** Docker Hub + GitHub Container Registry
-- **Image Variants:** Regular + Single-container (`-single`)
-- **Version Source:** `pyproject.toml`
-
-### Creating Git Tags
-
-```bash
-# Create and push git tag matching pyproject.toml version
-make tag
-```
-
----
-
-## Code Quality
-
-```bash
-# Run linter with auto-fix
-make ruff
-
-# Run type checking
-make lint
-
-# Run tests
-uv run pytest tests/
-
-# Clean cache directories
-make clean-cache
-```
-
----
-
-## Common Development Tasks
-
-### Adding a New Feature
-
-1. Create feature branch
-2. Develop using `make start-all`
-3. Write tests
-4. Run `make ruff` and `make lint`
-5. Test with `make docker-build-local`
-6. Create PR
-
-### Fixing a Bug
-
-1. Reproduce locally with `make start-all`
-2. Add test case demonstrating bug
-3. Fix the bug
-4. Verify test passes
-5. Check with `make docker-build-local`
-
-### Updating Dependencies
-
-```bash
-# Add Python dependency
-uv add package-name
-
-# Update dependencies
-uv sync
-
-# Frontend dependencies
-cd frontend && npm install package-name
-```
-
-### Adding a New Language (i18n)
-
-Open Notebook supports internationalization. To add a new language:
-
-1. **Create locale file**: Copy an existing locale as template
-   ```bash
-   cp frontend/src/lib/locales/en-US/index.ts frontend/src/lib/locales/pt-BR/index.ts
-   ```
-
-2. **Translate all strings** in the new file. The structure includes:
-   - `common`: Shared UI elements (buttons, labels)
-   - `notebooks`, `sources`, `notes`: Feature-specific strings
-   - `chat`, `search`, `podcasts`: Module-specific strings
-   - `apiErrors`: Error message translations
-
-3. **Register the locale** in `frontend/src/lib/locales/index.ts`:
-   ```typescript
-   import { ptBR } from './pt-BR'
-
-   export const locales = {
-     'en-US': enUS,
-     'zh-CN': zhCN,
-     'zh-TW': zhTW,
-     'pt-BR': ptBR,  // Add your locale
-   }
-   ```
-
-4. **Add date-fns locale** in `frontend/src/lib/utils/date-locale.ts`:
-   ```typescript
-   import { zhCN, enUS, zhTW, ptBR } from 'date-fns/locale'
-
-   const LOCALE_MAP: Record<string, Locale> = {
-     'zh-CN': zhCN,
-     'zh-TW': zhTW,
-     'en-US': enUS,
-     'pt-BR': ptBR,  // Add your locale
-   }
-   ```
-
-5. **Test**: Switch languages using the language toggle in the UI header.
-
-### Database Migrations
-
-Database migrations run **automatically** when the API starts.
-
-1. Create migration file: `migrations/XXX_description.surql`
-2. Write SurrealQL schema changes
-3. (Optional) Create rollback: `migrations/XXX_description_down.surql`
-4. Restart API - migration runs on startup
-
----
-
-## Troubleshooting
-
-### Services Won't Start
-
-```bash
-# Check status
-make status
-
-# Check database
-docker compose ps surrealdb
-
-# View logs
-docker compose logs surrealdb
-
-# Restart everything
-make stop-all
-make start-all
-```
-
-### Port Already in Use
-
-```bash
-# Find process using port
-lsof -i :5055
-lsof -i :3000
-lsof -i :8000
-
-# Kill stuck processes
-make stop-all
-```
-
-### Database Connection Issues
-
-```bash
-# Verify SurrealDB is running
-docker compose ps surrealdb
-
-# Check connection settings in .env
-cat .env | grep SURREAL
-```
-
-### Docker Build Fails
-
-```bash
-# Clean Docker cache
-docker builder prune
-
-# Reset buildx
-make docker-buildx-reset
-
-# Try local build first
-make docker-build-local
-```
-
----
-
-## Project Structure
-
-```
-open-notebook/
-├── api/                    # FastAPI backend
-├── frontend/               # Next.js React frontend
-├── open_notebook/          # Python core library
-│   ├── domain/            # Domain models
-│   ├── graphs/            # LangGraph workflows
-│   ├── ai/                # AI provider integration
-│   └── database/          # SurrealDB operations
-├── migrations/             # Database migrations
-├── tests/                  # Test suite
-├── docs/                   # User documentation
-└── Makefile               # Development commands
-```
-
-See component-specific CLAUDE.md files for detailed architecture:
-- [frontend/CLAUDE.md](frontend/CLAUDE.md)
-- [api/CLAUDE.md](api/CLAUDE.md)
-- [open_notebook/CLAUDE.md](open_notebook/CLAUDE.md)
-
----
-
-## Environment Variables
-
-### Required for Local Development
-
-```bash
-# .env file
-SURREAL_URL=ws://localhost:8000
-SURREAL_USER=root
-SURREAL_PASS=root
-SURREAL_DB=open_notebook
-SURREAL_NS=production
-
-# AI Provider (at least one required)
-OPENAI_API_KEY=sk-...
-# OR
-ANTHROPIC_API_KEY=sk-ant-...
-# OR configure other providers (see docs/5-CONFIGURATION/)
-```
-
-See [docs/5-CONFIGURATION/](docs/5-CONFIGURATION/) for complete configuration guide.
-
----
-
-## Performance Tips
-
-### Speed Up Local Development
-
-1. **Use `make start-all`** instead of Docker for daily work
-2. **Keep SurrealDB running** between sessions (`make database`)
-3. **Use `make docker-build-local`** only when testing Dockerfile changes
-4. **Skip multi-platform builds** until ready to publish
-
-### Reduce Resource Usage
-
-```bash
-# Stop unused services
-make stop-all
-
-# Clean up Docker
-docker system prune -a
-
-# Clean Python cache
-make clean-cache
-```
-
----
-
-## TODO: Sections to Add
-
-- [ ] Frontend development guide (hot reload, component structure)
-- [ ] API development guide (adding endpoints, services)
-- [ ] LangGraph workflow development
-- [ ] Testing strategy and coverage
-- [ ] Debugging tips (VSCode/PyCharm setup)
-- [ ] CI/CD pipeline overview
-- [ ] Release process checklist
-- [ ] Common error messages and solutions
-
----
-
-## Resources
-
-- **Documentation:** https://open-notebook.ai
-- **Discord:** https://discord.gg/37XJPXfz2w
-- **Issues:** https://github.com/lfnovo/open-notebook/issues
-- **Contributing:** [CONTRIBUTING.md](CONTRIBUTING.md)
-- **Maintainer Guide:** [MAINTAINER_GUIDE.md](MAINTAINER_GUIDE.md)
-
----
-
-**Last Updated:** January 2025
+For everything else, see **[docs/7-DEVELOPMENT/](docs/7-DEVELOPMENT/index.md)**.
diff --git a/README.md b/README.md
index 056fbce2..91e92770 100644
--- a/README.md
+++ b/README.md
@@ -250,26 +250,28 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 
 ### Getting Started
 - **[📖 Introduction](docs/0-START-HERE/index.md)** - Learn what Open Notebook offers
-- **[⚡ Quick Start](docs/0-START-HERE/quick-start.md)** - Get up and running in 5 minutes
+- **[⚡ Quick Start with OpenAI](docs/0-START-HERE/quick-start-openai.md)** - Get up and running in 5 minutes
 - **[🔧 Installation](docs/1-INSTALLATION/index.md)** - Comprehensive setup guide
-- **[🎯 Your First Notebook](docs/0-START-HERE/first-notebook.md)** - Step-by-step tutorial
+- **[🎯 Run It Fully Local](docs/0-START-HERE/quick-start-local.md)** - Ollama/LM Studio, completely private
 
 ### User Guide
 - **[📱 Interface Overview](docs/3-USER-GUIDE/interface-overview.md)** - Understanding the layout
-- **[📚 Notebooks](docs/3-USER-GUIDE/notebooks.md)** - Organizing your research
-- **[📄 Sources](docs/3-USER-GUIDE/sources.md)** - Managing content types
-- **[📝 Notes](docs/3-USER-GUIDE/notes.md)** - Creating and managing notes
-- **[💬 Chat](docs/3-USER-GUIDE/chat.md)** - AI conversations
+- **[📚 Notebooks, Sources & Notes](docs/2-CORE-CONCEPTS/notebooks-sources-notes.md)** - Organizing your research
+- **[📄 Adding Sources](docs/3-USER-GUIDE/adding-sources.md)** - Managing content types
+- **[📝 Working with Notes](docs/3-USER-GUIDE/working-with-notes.md)** - Creating and managing notes
+- **[💬 Chatting Effectively](docs/3-USER-GUIDE/chat-effectively.md)** - AI conversations
 - **[🔍 Search](docs/3-USER-GUIDE/search.md)** - Finding information
 
 ### Advanced Topics
-- **[🎙️ Podcast Generation](docs/2-CORE-CONCEPTS/podcasts.md)** - Create professional podcasts
-- **[🔧 Content Transformations](docs/2-CORE-CONCEPTS/transformations.md)** - Customize content processing
+- **[🎙️ Podcast Generation](docs/2-CORE-CONCEPTS/podcasts-explained.md)** - Create professional podcasts
+- **[🔧 Content Transformations](docs/3-USER-GUIDE/transformations.md)** - Customize content processing
 - **[🤖 AI Models](docs/4-AI-PROVIDERS/index.md)** - AI model configuration
 - **[🔌 MCP Integration](docs/5-CONFIGURATION/mcp-integration.md)** - Connect with Claude Desktop, VS Code and other MCP clients
 - **[🔧 REST API Reference](docs/7-DEVELOPMENT/api-reference.md)** - Complete API documentation
 - **[🔐 Security](docs/5-CONFIGURATION/security.md)** - Password protection and privacy
 - **[🚀 Deployment](docs/1-INSTALLATION/index.md)** - Complete deployment guides for all scenarios
+- **[🧭 Vision & Principles](VISION.md)** - What Open Notebook is, and where it's going
+- **[🛠️ Developer Docs](docs/7-DEVELOPMENT/index.md)** - Architecture, setup, contributing, decision records
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
 
@@ -299,7 +301,7 @@ See the [open issues](https://github.com/lfnovo/open-notebook/issues) for a full
 - **🤖 AI Installation Assistant**: We have a [CustomGPT built to help you install Open Notebook](https://chatgpt.com/g/g-68776e2765b48191bd1bae3f30212631-open-notebook-installation-assistant) - it will guide you through each step!
 - **New to Open Notebook?** Start with our [Getting Started Guide](docs/0-START-HERE/index.md)
 - **Need installation help?** Check our [Installation Guide](docs/1-INSTALLATION/index.md)
-- **Want to see it in action?** Try our [Quick Start Tutorial](docs/0-START-HERE/quick-start.md)
+- **Want to see it in action?** Try our [Quick Start Tutorial](docs/0-START-HERE/index.md)
 
 ## 🤝 Community & Contributing
 
@@ -318,7 +320,7 @@ We welcome contributions! We're especially looking for help with:
 **Current Tech Stack**: Python, FastAPI, Next.js, React, SurrealDB
 **Future Roadmap**: Real-time updates, enhanced async processing
 
-See our [Contributing Guide](CONTRIBUTING.md) for detailed information on how to get started.
+See our [Contributing Guide](CONTRIBUTING.md) for detailed information on how to get started, including our guidelines for [AI-assisted contributions](docs/7-DEVELOPMENT/contributing.md#ai-assisted-and-agent-generated-prs). To understand what we're building (and what we'll say no to), read [VISION.md](VISION.md).
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
 
diff --git a/TRIAGE.md b/TRIAGE.md
deleted file mode 100644
index 083722e4..00000000
--- a/TRIAGE.md
+++ /dev/null
@@ -1,92 +0,0 @@
-# Triage Rules — Open Notebook
-
-Project-specific triage rules. The `/triage` loop provides the **mechanism**; this file is the
-**jurisprudence** for this repo. Keep it the single source of truth for how we label issues.
-
-## State funnel (outcome of triage)
-
-Every open issue lands in exactly **one** state. **Untriaged = no state label** — that's what
-`/triage` scans for.
-
-| Label | Meaning |
-|---|---|
-| *(none)* | Not triaged yet. |
-| `needs-vision` | Unsure if/how this fits — strategic call for the maintainers. |
-| `needs-design` | Wanted, but the *how* isn't resolved — needs design/spec before it's ready. |
-| `needs-info` | Waiting on the reporter to confirm or provide more information. |
-| `ready` | Fully specified — the dev loop can pick it up. |
-| **Close** | Use GitHub's native close reasons (duplicate / not planned). Link the canonical issue when duplicate/superseded. |
-
-## Type
-
-What kind of work it is. Apply one when it's clear.
-
-- `bug` · `enhancement` · `documentation`
-
-> `installation` is an **intake** label applied by the issue-creation workflow (not by triage).
-> During triage, installation reports are routed to `area: deploy`.
-
-## Area — apply ALWAYS (one per issue)
-
-Which part of the system. This is the axis we use to route work and surface contributor-friendly
-tasks, so every triaged issue should get one area when it clearly belongs to one.
-
-| Label | What goes here |
-|---|---|
-| `area: chat` | Conversation/chat, RAG retrieval, agentic responses, citations |
-| `area: search` | Full-text and semantic search |
-| `area: sources` | Source ingestion & processing (URLs, files, content extraction, chunking) |
-| `area: notebooks` | Notebook features: notes, insights, transformations |
-| `area: providers` | AI provider integrations + model configuration (OpenAI, Ollama, …) |
-| `area: embeddings` | Embedding models, vectorization, semantic indexing |
-| `area: podcast` | Podcast / audio generation |
-| `area: database` | SurrealDB, persistence, schema, migrations |
-| `area: ui` | Frontend (Next.js), UX, visual issues |
-| `area: deploy` | Docker, deployment, k8s, reverse proxy, infra/setup |
-| `area: offline` | Airgapped/offline operation (tokenizer caching, no network) |
-| `area: i18n` | Internationalization / localization |
-
-## Bundling / epics
-
-- `umbrella` — a tracking issue grouping related work.
-- `tracked-in-umbrella` — covered by an umbrella; follow the umbrella for progress.
-- `bundled` — part of a thematic bundle.
-- `upstream` — root cause lives in one of our libraries (below), not in this repo.
-
-### Consolidation: one issue vs. umbrella
-
-When several open issues circle the same topic, pick the model by **how decided the work is** —
-not just by shared theme. The trap is filing many half-formed issues for a topic that isn't yet
-decidable work; that inflates the backlog and reads as "90 things to do" when it's ~30 themes.
-
-- **Pre-vision / pre-design topic** → collapse into **one** issue (`needs-vision` or `needs-design`),
-  capture each request's signal (👍 counts, interested contributors) in its body, and **close the
-  rest as duplicates** pointing to it. A topic isn't N issues — it's one thinking space.
-- **Already decomposed into real parallel tasks** → use `umbrella` + `tracked-in-umbrella`. Children
-  stay open because each is independently pickable (e.g. the multi-user umbrella #712).
-
-Rule of thumb: if the issues can't be worked until *we* make a call, they're one issue. If the call
-is made and the work splits into things a contributor could pick up today, they're an umbrella with
-children. **Never close an issue that has an active assignee/contributor or open PR** — link it as a
-phase instead.
-
-## Ecosystem (our own libraries)
-
-Mark issues whose real home is an upstream lib:
-
-- `esperanto` — model abstraction layer (LLM / embedding / TTS / STT).
-- `content-core` — content extraction.
-- `podcast-creator` — podcast generation library.
-
-## Community
-
-- `good first issue` — small, well-scoped, newcomer-friendly.
-- `help wanted` — we'd welcome a contributor to take this.
-
-## Rules
-
-- Assign **one state**, **one type**, and **one area** where each applies. Multiple
-  bundling/ecosystem labels are fine.
-- `/triage` output must always carry a state (or be closed). Don't leave issues stateless.
-- **Don't invent labels** — the set is curated. If something doesn't fit, raise it instead of adding a label.
-- When closing as duplicate/superseded, link the canonical issue.
diff --git a/VISION.md b/VISION.md
new file mode 100644
index 00000000..d5fbb1f1
--- /dev/null
+++ b/VISION.md
@@ -0,0 +1,79 @@
+# Open Notebook — Vision & Principles
+
+This document is the product's source of truth in two layers with different lifespans: **Identity** (durable — what Open Notebook is and refuses to be) and **Current Posture** (temporal — where we are in the journey and what's on the horizon). Triage and design decisions are evaluated against this document; the reasoning behind each rule lives in the [decision records](docs/7-DEVELOPMENT/decisions/README.md).
+
+---
+
+## Identity
+
+Open Notebook is a **privacy-focused, self-hosted alternative to Google's Notebook LM** that empowers users to:
+
+1. **Own their research data** — full control over where data lives and who can access it
+2. **Choose their AI providers** — any provider, or fully local models
+3. **Customize their workflows** — adapt the tool to different research needs
+4. **Access their work anywhere** — web UI, API, or integrations
+
+### What Open Notebook IS
+
+- A **research assistant** for managing and understanding content
+- A **platform** that connects various AI providers
+- A **privacy-first** tool that keeps your data under your control
+- An **extensible system** with APIs and customization options
+
+### What Open Notebook IS NOT
+
+- A document editor (use Google Docs, Notion, etc.)
+- A file storage system (use Dropbox, S3, etc.)
+- A general-purpose chatbot (use ChatGPT, Claude, etc.)
+- A replacement for your entire workflow (it's one tool in your toolkit)
+
+### Principles
+
+Durable, normative rules. Each links to the decision record that established it.
+
+| Principle | Rule |
+|---|---|
+| **Privacy first** | User data stays under user control by default. Self-hosted is the primary use case; no telemetry without opt-in; no hard dependency on specific cloud services. |
+| **Provider-agnostic core** | The default is portable: features must work across the provider matrix. Adopting a provider-exclusive capability is allowed but is a deliberate decision that requires a [PDR](docs/7-DEVELOPMENT/decisions/README.md) ([PDR-002](docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md)). |
+| **Simplicity over features** | Easy to understand and use, even if it means fewer features. Sensible defaults; advanced options behind progressive disclosure. |
+| **API-first** | Every capability is accessible via the REST API — the UI is a client, never the only door ([ADR-003](docs/7-DEVELOPMENT/decisions/ADR-003-streamlit-to-nextjs.md)). |
+| **Extensibility through standards** | Extension happens through well-defined interfaces (transformations, commands, prompt templates), not forks. |
+| **Async-first** | Long-running operations never block the UI or the API ([ADR-004](docs/7-DEVELOPMENT/decisions/ADR-004-background-workers.md)). |
+
+### How we evaluate requests
+
+A feature request that conflicts with the IS NOT list or a principle gets closed with a pointer here — kindly, and with the reasoning. A "no" protects the core value proposition; it's not a judgment of the idea. If a request keeps coming back and the principle starts to feel wrong, that's a signal to revisit the principle through a decision record — not to make a quiet exception.
+
+---
+
+## Current Posture
+
+> **Reviewed: 2026-07.** This section is expected to change. Updating it is not a reversal — it's a phase change, recorded with a short PDR and an edit here.
+
+**The phase we're in: get the basics working well for everyone before expanding.** Priority goes to making the core experience (sources, chat, search, notes, podcasts) solid across the full provider matrix and deployment surface, ahead of new product surfaces.
+
+### Directional constraints
+
+Decisions about the future we haven't made yet — recorded as "which door to keep open":
+
+- **Single-user first, multi-user compatible.** Open Notebook is a single-user tool today, but multi-user is under active consideration ([#712](https://github.com/lfnovo/open-notebook/issues/712)). New features must not gratuitously preclude multi-user (schema, auth, data scoping) ([PDR-001](docs/7-DEVELOPMENT/decisions/PDR-001-single-user-first.md)).
+- **Portable by default.** Provider-exclusive capabilities (including paid-only ones) are on the table for the future — deliberately, via PDR, never by accident ([PDR-002](docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md)).
+
+### Horizon
+
+The big clusters under consideration — direction, not roadmap; no dates. Each has an umbrella issue where the thinking happens:
+
+| Cluster | What it is | Where |
+|---|---|---|
+| **Platform v-next** | SurrealDB v3 migration, possible frontend/backend Docker image split, possible Surreal Commands → Celery move — evaluated together as one coordinated breaking change | [#372](https://github.com/lfnovo/open-notebook/issues/372) · [#378](https://github.com/lfnovo/open-notebook/issues/378) · [#381](https://github.com/lfnovo/open-notebook/issues/381) |
+| **Multi-user** | Deep platform redesign: auth, data scoping, what "multi-user" means for a self-hosted tool | [#712](https://github.com/lfnovo/open-notebook/issues/712) |
+| **Content modes & artifacts** | The output side: generated artifacts, videos, explainers, presentations, mind maps — as one coherent product surface, not a pile of features | [#203](https://github.com/lfnovo/open-notebook/issues/203) |
+| **Agents operating Open Notebook** | Role inversion via MCP: AI agents use Open Notebook on the user's behalf — the platform becomes the research memory of agents, not just a UI | [#878](https://github.com/lfnovo/open-notebook/issues/878) · [#693](https://github.com/lfnovo/open-notebook/issues/693) · [#973](https://github.com/lfnovo/open-notebook/issues/973) |
+
+---
+
+## How this document changes
+
+- **Identity** changes rarely and deliberately: a decision record marks the old rule as superseded, then this document is updated.
+- **Posture** changes when the phase changes: a short PDR captures the why, the section above is edited, and the "Reviewed" stamp is bumped.
+- Engineering practices (code standards, anti-patterns, decision framework) live in [docs/7-DEVELOPMENT/design-principles.md](docs/7-DEVELOPMENT/design-principles.md).
diff --git a/api/AGENTS.md b/api/AGENTS.md
new file mode 100644
index 00000000..a758413c
--- /dev/null
+++ b/api/AGENTS.md
@@ -0,0 +1 @@
+@../open_notebook/AGENTS.md
diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index 4e68c93d..43c994c2 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -1,262 +1 @@
-# API Module
-
-FastAPI-based REST backend exposing services for notebooks, sources, notes, chat, podcasts, and AI model management.
-
-## Purpose
-
-FastAPI application serving three architectural layers: routes (HTTP endpoints), services (business logic), and models (request/response schemas). Integrates LangGraph workflows (chat, ask, source_chat), SurrealDB persistence, and AI providers via Esperanto.
-
-## Architecture Overview
-
-**Three layers**:
-1. **Routes** (`routers/*`): HTTP endpoints mapping to services
-2. **Services** (`*_service.py`): Business logic orchestrating domain models, database, graphs, AI providers
-3. **Models** (`models.py`): Pydantic request/response schemas with validation
-
-**Startup flow**:
-- Load .env environment variables
-- Initialize CORS middleware + password auth middleware
-- Run database migrations via AsyncMigrationManager on lifespan startup
-- Run podcast profile data migration (legacy string to model registry conversion)
-- Register all routers
-
-**Key services**:
-- `chat_service.py`: Invokes chat graph with messages, context
-- `podcast_service.py`: Orchestrates outline + transcript generation
-- `sources_service.py`: Content ingestion, vectorization, metadata
-- `notes_service.py`: Note creation, linking to sources/insights
-- `transformations_service.py`: Applies transformations to content
-- `models_service.py`: Manages AI provider/model configuration
-- `episode_profiles_service.py`: Manages podcast speaker/episode profiles
-
-## Component Catalog
-
-### Main Application
-- **main.py**: FastAPI app initialization, CORS setup, auth middleware, lifespan event, router registration
-- **Lifespan handler**: Runs AsyncMigrationManager on startup (database schema migration)
-- **Auth middleware**: PasswordAuthMiddleware protects endpoints (password-based access control)
-- **Body size middleware**: `MaxBodySizeMiddleware` (`api/middleware.py`) rejects requests over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100MB) before auth/routing - both via `Content-Length` pre-check and by counting bytes as the body streams in, so it also catches chunked requests with no `Content-Length`. Registered inside `CORSMiddleware` so a rejected upload still gets CORS headers.
-
-### Services (Business Logic)
-- **chat_service.py**: Invokes chat.py graph; handles message history via SqliteSaver
-- **podcast_service.py**: Generates outline (outline.jinja), then transcript (transcript.jinja) for episodes
-- **sources_service.py**: Ingests files/URLs (content_core), extracts text, vectorizes, saves to SurrealDB
-- **transformations_service.py**: Applies transformations via transformation.py graph
-- **models_service.py**: Manages ModelManager config (AI provider overrides)
-- **episode_profiles_service.py**: CRUD for EpisodeProfile and SpeakerProfile models
-- **insights_service.py**: Generates and retrieves source insights
-- **notes_service.py**: Creates notes linked to sources/insights
-
-### Models (Schemas)
-- **models.py**: Pydantic schemas for request/response validation
-- Request bodies: ChatRequest, CreateNoteRequest, PodcastGenerationRequest, etc.
-- Response bodies: ChatResponse, NoteResponse, PodcastResponse, etc.
-- Custom validators for enum fields, file paths, model references
-
-### Routers
-- **routers/chat.py**: POST /chat
-- **routers/source_chat.py**: POST /source/{source_id}/chat
-- **routers/podcasts.py**: POST /podcasts, GET /podcasts/{id}, POST /podcasts/episodes/{id}/retry, etc.
-- **routers/notes.py**: POST /notes, GET /notes/{id}
-- **routers/sources.py**: POST /sources, GET /sources/{id}, DELETE /sources/{id}
-- **routers/models.py**: GET /models, POST /models/config
-- **routers/credentials.py**: CRUD + test + discover + migrate for credential management
-- **routers/transformations.py**: POST /transformations
-- **routers/insights.py**: GET /sources/{source_id}/insights
-- **routers/auth.py**: POST /auth/password (password-based auth)
-- **routers/languages.py**: GET /languages (available podcast languages via pycountry+babel)
-- **routers/commands.py**: GET /commands/{command_id} (job status tracking)
-
-## Common Patterns
-
-- **Service injection via FastAPI**: Routers import services directly; no DI framework
-- **Async/await throughout**: All DB queries, graph invocations, AI calls are async
-- **SurrealDB transactions**: Services use repo_query, repo_create, repo_upsert from database layer
-- **Config override pattern**: Models/config override via models_service passed to graph.ainvoke(config=...)
-- **Error handling**: Custom exception hierarchy (`open_notebook.exceptions`) with global FastAPI exception handlers mapping to HTTP status codes (see Error Handling section below). LangGraph nodes use `classify_error()` to convert raw LLM provider errors into typed exceptions with user-friendly messages.
-- **Logging**: loguru logger in main.py; services expected to log key operations
-- **Response normalization**: All responses follow standard schema (data + metadata structure)
-
-## Key Dependencies
-
-- `fastapi`: FastAPI app, routers, HTTPException
-- `pydantic`: Validation models with Field, field_validator
-- `open_notebook.graphs`: chat, ask, source_chat, source, transformation graphs
-- `open_notebook.database`: SurrealDB repository functions (repo_query, repo_create, repo_upsert)
-- `open_notebook.domain`: Notebook, Source, Note, SourceInsight models
-- `open_notebook.ai.provision`: provision_langchain_model() factory
-- `ai_prompter`: Prompter for template rendering
-- `content_core`: extract_content() for file/URL processing
-- `esperanto`: AI provider client library (LLM, embeddings, TTS)
-- `surreal_commands`: Job queue for async operations (podcast generation)
-- `loguru`: Structured logging
-
-## Important Quirks & Gotchas
-
-- **Migration auto-run**: Database schema migrations run on every API startup (via lifespan); no manual migration steps
-- **PasswordAuthMiddleware is basic**: Uses simple password check; production deployments should replace with OAuth/JWT
-- **No request rate limiting**: No built-in rate limiting; deployment must add via proxy/middleware
-- **Service state is stateless**: Services don't cache results; each request re-queries database/AI models
-- **Graph invocation is blocking**: chat/podcast workflows may take minutes; no timeout handling in services
-- **Command job fire-and-forget**: podcast_service.py submits jobs but doesn't wait (async job queue pattern)
-- **Model override scoping**: Model config override via RunnableConfig is per-request only (not persistent)
-- **CORS open by default**: main.py CORS settings allow all origins (restrict before production) via `CORS_ORIGINS`. `allow_credentials` is tied to that: `False` for the default wildcard (combining wildcard + credentials would make Starlette reflect any Origin), automatically `True` once `CORS_ORIGINS` is scoped to explicit origins
-- **No OpenAPI security scheme**: API docs available without auth (disable before production)
-- **Services don't validate user permission**: All endpoints trust authentication layer; no per-notebook permission checks
-
-## Error Handling
-
-### Global Exception Handlers (`main.py`)
-
-FastAPI exception handlers map custom exception types from `open_notebook.exceptions` to HTTP status codes. All error responses include CORS headers.
-
-| Exception Class | HTTP Status | Use Case |
-|----------------|-------------|----------|
-| `NotFoundError` | 404 | Resource not found |
-| `InvalidInputError` | 400 | Bad request data |
-| `AuthenticationError` | 401 | Invalid/missing API key |
-| `RateLimitError` | 429 | Provider rate limit exceeded |
-| `ConfigurationError` | 422 | Wrong model name, missing config |
-| `NetworkError` | 502 | Cannot reach AI provider |
-| `ExternalServiceError` | 502 | Provider returned error (500/503, context length) |
-| `OpenNotebookError` (base) | 500 | Any other application error |
-
-### Error Classification (`open_notebook.utils.error_classifier`)
-
-The `classify_error()` function maps raw exceptions from LLM providers/Esperanto/LangChain into the typed exceptions above with user-friendly messages. Used in all LangGraph graph nodes and SSE streaming handlers.
-
-**Flow**: Raw exception → keyword matching → `(ExceptionClass, user_message)` → raised → caught by global handler → HTTP response with descriptive message.
-
-### Frontend Integration
-
-The frontend `getApiErrorMessage()` helper (`lib/utils/error-handler.ts`) tries i18n mapping first, then falls back to displaying the backend's descriptive error message directly.
-
----
-
-## How to Add New Endpoint
-
-1. Create router file in `routers/` (e.g., `routers/new_feature.py`)
-2. Import router into `main.py` and register: `app.include_router(new_feature.router, tags=["new_feature"])`
-3. Create service in `new_feature_service.py` with business logic
-4. Define request/response schemas in `models.py` (or create `new_feature_models.py`)
-5. Implement router functions calling service methods
-6. Test with `uv run uvicorn api.main:app --host 0.0.0.0 --port 5055`
-
-## Testing Patterns
-
-- **Interactive docs**: http://localhost:5055/docs (Swagger UI)
-- **Direct service tests**: Import service, call methods directly with test data
-- **Mock graphs**: Replace graph.ainvoke() with mock for testing service logic
-- **Database: Use test database** (separate SurrealDB instance or mock repo_query)
-
----
-
-## Credential Management (API Configuration UI)
-
-The Credential Management system enables users to configure AI provider credentials through the UI instead of environment variables. Keys are stored securely in SurrealDB (encrypted via Fernet) with database-first fallback to environment variables.
-
-### Router: `routers/credentials.py`
-
-**Endpoints**:
-
-| Method | Endpoint | Description |
-|--------|----------|-------------|
-| GET | `/credentials` | List all credentials (optional `?provider=` filter) |
-| GET | `/credentials/by-provider/{provider}` | List credentials for a provider |
-| POST | `/credentials` | Create a new credential |
-| GET | `/credentials/{credential_id}` | Get a specific credential |
-| PUT | `/credentials/{credential_id}` | Update a credential |
-| DELETE | `/credentials/{credential_id}` | Delete a credential |
-| POST | `/credentials/{credential_id}/test` | Test connection using credential |
-| POST | `/credentials/{credential_id}/discover` | Discover available models |
-| POST | `/credentials/{credential_id}/register-models` | Register discovered models |
-| POST | `/credentials/migrate-from-provider-config` | Migrate from legacy ProviderConfig |
-
-**Supported Providers** (17 total; enforced via `SupportedProvider` Literal in `api/models.py`, kept in sync with the frontend's `ALL_PROVIDERS`, `connection_tester.py`'s `TEST_MODELS`, and `credentials_service.py`'s `PROVIDER_ENV_CONFIG`):
-- Simple API key: `openai`, `anthropic`, `google`, `groq`, `mistral`, `deepseek`, `xai`, `openrouter`, `voyage`, `elevenlabs`, `deepgram`, `dashscope`, `minimax`
-- URL-based: `ollama`
-- Multi-field: `azure`, `vertex`, `openai_compatible`
-
-**Security Features**:
-- NEVER returns actual API key values (only metadata)
-- URL validation (SSRF protection) on all URL fields via `validate_url()` (`open_notebook/utils/url_validation.py`) - async, since hostname resolution runs `socket.getaddrinfo()` via `asyncio.to_thread` rather than blocking the event loop
-- Allows private IPs and localhost for self-hosted services (Ollama, LM Studio)
-- Requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` to be set for storing credentials
-
-### Domain Model: `Credential` (`open_notebook/domain/credential.py`)
-
-Individual credential records replacing the old `ProviderConfig` singleton. Each credential stores:
-- Provider name, display name, modalities
-- Encrypted API key (via Fernet)
-- Provider-specific config (base_url, endpoint, api_version, etc.)
-
-### Integration with Key Provider (`open_notebook/ai/key_provider.py`)
-
-The `key_provider` module provisions DB-stored credentials into environment variables for Esperanto compatibility:
-
-**Database-first Pattern**:
-1. API endpoint saves keys to `Credential` records (encrypted in SurrealDB)
-2. Before model provisioning, `provision_provider_keys(provider)` checks DB, then env vars
-3. Keys from DB are set as environment variables for Esperanto compatibility
-4. Existing env vars remain unchanged if no DB config exists
-
-**Key Functions**:
-- `get_api_key(provider)`: Get API key (DB first, env fallback)
-- `provision_provider_keys(provider)`: Set env vars from DB for a provider
-- `provision_all_keys()`: Load all provider keys from DB into env vars
-
-### Authentication
-
-No changes to authentication. The `credentials` router uses the same `PasswordAuthMiddleware` as all other endpoints. Keys are protected by the same password-based auth.
-
-**Auth Flow** (unchanged from `api/auth.py`):
-- `PasswordAuthMiddleware`: Global middleware checking `Authorization: Bearer {password}` header
-- Default password: `open-notebook-change-me` (set `OPEN_NOTEBOOK_PASSWORD` in production)
-- Docker secrets support via `OPEN_NOTEBOOK_PASSWORD_FILE`
-
-### Connection Testing (`open_notebook/ai/connection_tester.py`)
-
-The `/credentials/{credential_id}/test` endpoint uses minimal API calls to verify credentials:
-- Loads Credential via `Credential.get(config_id)`, uses `credential.to_esperanto_config()`
-- Uses cheapest/smallest models per provider (TEST_MODELS map)
-- Returns success status and descriptive message
-- Special handlers for ollama, openai_compatible, and azure providers
-- Vertex-specific: `credentials_path` is free text with no path validation, and Google's auth library raises distinguishable exceptions for "file missing"/"not JSON"/"wrong shape" - `_is_vertex_credentials_file_error()` catches all three and returns one generic "Invalid or inaccessible credentials file" message (both here and in `test_individual_model()`) so testing a credential can't be used as a filesystem oracle
-
-### Migration Workflows
-
-Two migration endpoints help users transition to the credential system:
-
-**From environment variables** (`POST /credentials/migrate-from-env`):
-1. Checks each provider for env var presence
-2. Creates Credential records from env var values
-3. Returns summary: migrated, skipped, errors
-
-**From legacy ProviderConfig** (`POST /credentials/migrate-from-provider-config`):
-1. Reads old ProviderConfig records from database
-2. Converts each to individual Credential records
-3. Returns summary: migrated, skipped, errors
-
-### Example Usage
-
-```python
-# Check status
-GET /credentials/status
-# Response: {"configured": {"openai": true, "anthropic": false}, "source": {"openai": "database", "anthropic": "none"}, "encryption_configured": true}
-
-# Create credential
-POST /credentials
-{"name": "My OpenAI Key", "provider": "openai", "modalities": ["language", "embedding"], "api_key": "sk-proj-..."}
-
-# Test connection
-POST /credentials/{credential_id}/test
-# Response: {"provider": "openai", "success": true, "message": "Connection successful"}
-
-# Discover models
-POST /credentials/{credential_id}/discover
-# Response: {"provider": "openai", "models": [{"model_id": "gpt-4", "name": "gpt-4", ...}], "credential_id": "..."}
-
-# Migrate from env
-POST /credentials/migrate-from-env
-# Response: {"message": "Migration complete. Migrated 3 providers.", "migrated": ["openai", "anthropic", "groq"], "skipped": [], "errors": []}
-```
+@AGENTS.md
diff --git a/commands/CLAUDE.md b/commands/CLAUDE.md
deleted file mode 100644
index 364f867d..00000000
--- a/commands/CLAUDE.md
+++ /dev/null
@@ -1,69 +0,0 @@
-# Commands Module
-
-**Purpose**: Defines async command handlers for long-running operations via `surreal-commands` job queue system.
-
-## Key Components
-
-### Embedding Commands
-
-- **`embed_note_command`**: Embeds a single note using unified embedding pipeline with content-type aware processing. Uses MARKDOWN content type detection. Retry: 5 attempts, exponential jitter 1-60s.
-- **`embed_insight_command`**: Embeds a single source insight. Uses MARKDOWN content type. Retry: 5 attempts, exponential jitter 1-60s.
-- **`embed_source_command`**: Embeds a source by chunking full_text with content-type aware splitters (HTML, Markdown, plain), then batch embedding all chunks (batches of 50 with per-batch retry). Retry: 5 attempts, exponential jitter 1-60s.
-- **`create_insight_command`**: Creates a source insight with automatic retry on transaction conflicts. Creates the DB record, then submits `embed_insight` command (fire-and-forget). Retry: 5 attempts, exponential jitter 1-60s. Used by `Source.add_insight()`.
-- **`rebuild_embeddings_command`**: Submits individual embed_* commands for all sources/notes/insights. Returns immediately; actual embedding happens async. No retry (coordinator only).
-
-### Other Commands
-
-- **`process_source_command`**: Ingests content through `source_graph`, creates embeddings (optional), and generates insights. Retries on transaction conflicts (exp. jitter, max 15×, 1-120s). Permanent failures (`ValueError`, e.g. unextractable content) are **re-raised** so the job is marked `failed` (and the source becomes retryable from the UI) rather than completing with a failure payload.
-- **`run_transformation_command`**: Runs a transformation on an existing source to generate an insight. Executes the transformation graph (LLM call) then creates insight via `create_insight_command`. Used by `POST /sources/{id}/insights` API endpoint. Retry: 5 attempts, exponential jitter 1-60s.
-- **`generate_podcast_command`**: Creates podcasts via podcast-creator library. Resolves model registry references and credentials for all profiles before invoking podcast-creator. Validates that outline_llm, transcript_llm, and voice_model are configured.
-- **`process_text_command`** (example): Test fixture for text operations (uppercase, lowercase, reverse, word_count).
-- **`analyze_data_command`** (example): Test fixture for numeric aggregations.
-
-## Important Patterns
-
-- **Pydantic I/O**: All commands use `CommandInput`/`CommandOutput` subclasses for type safety and serialization.
-- **Error handling**: Permanent errors (ValueError) return failure output; all other exceptions auto-retry via surreal-commands.
-- **Retry configuration**: Uses `stop_on: [ValueError]` (blocklist approach) - retries all exceptions EXCEPT ValueError. This is more resilient than allowlist as new exception types auto-retry.
-- **Fire-and-forget embedding**: Domain models submit embed_* commands via `submit_command()` without waiting. Commands process asynchronously.
-- **Content-type aware chunking**: `embed_source_command` uses `chunk_text()` with automatic content type detection (HTML, Markdown, plain text) for optimal text splitting. Default: 1500 char chunks with 225 char overlap.
-- **Batch embedding**: `embed_source_command` uses `generate_embeddings()` which automatically batches texts (default 50) with per-batch retry to avoid exceeding provider payload limits.
-- **Mean pooling for large content**: `embed_note_command` and `embed_insight_command` use `generate_embedding()` which handles content larger than chunk size via mean pooling.
-- **Model dumping**: Recursive `full_model_dump()` utility converts Pydantic models → dicts for DB/API responses.
-- **Logging**: Uses `loguru.logger` throughout; logs execution start/end and key metrics (processing time, counts).
-- **Time tracking**: All commands measure `start_time` → `processing_time` for monitoring.
-
-## Dependencies
-
-**External**: `surreal_commands` (command decorator, job queue, submit_command), `loguru`, `pydantic`, `podcast_creator`
-**Internal**: `open_notebook.domain.notebook` (Source, Note, SourceInsight), `open_notebook.utils.chunking` (chunk_text, detect_content_type), `open_notebook.utils.embedding` (generate_embedding, generate_embeddings), `open_notebook.database.repository` (repo_query, repo_insert)
-
-## Quirks & Edge Cases
-
-- **source_commands**: `ensure_record_id()` wraps command IDs for DB storage; transaction conflicts trigger exponential backoff retry. ValueError exceptions are permanent (not retried).
-- **embedding_commands**: Content type detection uses file extension as primary source, heuristics as fallback. Chunks >1800 chars trigger secondary splitting. Empty/whitespace-only content returns ValueError (not retried).
-- **rebuild_embeddings_command**: Returns "jobs_submitted" not "processed_items" - embedding is async. Individual commands handle failures with their own retries.
-- **podcast_commands**: Profiles loaded from SurrealDB by name; model configs (credentials) resolved for ALL profiles before podcast-creator validation. Validates outline_llm/transcript_llm/voice_model are set. Episode records created mid-execution.
-- **Example commands**: Accept optional `delay_seconds` for testing async behavior; not for production.
-
-## Code Example
-
-```python
-@command("process_source", app="open_notebook", retry={
-    "max_attempts": 5,
-    "wait_strategy": "exponential_jitter",
-    "stop_on": [ValueError],  # Don't retry validation errors
-})
-async def process_source_command(input_data: SourceProcessingInput) -> SourceProcessingOutput:
-    start_time = time.time()
-    try:
-        transformations = [await Transformation.get(id) for id in input_data.transformations]
-        source = await Source.get(input_data.source_id)
-        result = await source_graph.ainvoke({...})
-        return SourceProcessingOutput(success=True, ...)
-    except ValueError as e:
-        logger.error(f"Source processing failed (permanent): {e}")
-        raise  # stop_on=[ValueError] => no retry, job marked `failed`
-    except Exception as e:
-        raise  # Retry all other exceptions
-```
diff --git a/cubic.yaml b/cubic.yaml
new file mode 100644
index 00000000..8783e718
--- /dev/null
+++ b/cubic.yaml
@@ -0,0 +1,81 @@
+# yaml-language-server: $schema=https://cubic.dev/schema/cubic-repository-config.schema.json
+#
+# cubic AI review settings (settings as code).
+# Docs: https://docs.cubic.dev/configure/cubic-yaml
+
+version: 1
+
+reviews:
+  custom_instructions: |
+    This project follows an issue-first workflow for anything non-trivial: features and
+    architecture changes must reference an approved, assigned issue and stay scoped to it.
+    Small obvious fixes (typos, docs, tiny bugs, i18n completions) are welcome without an
+    issue. A sizeable PR without one should be converted to draft with an issue opened —
+    don't flag small fixes for lacking an issue. Unrelated refactors belong in separate PRs.
+    Test evidence must be real (actual output), especially for bug fixes, which should
+    include a regression test. Many PRs are agent-generated; hold them to the same bar.
+    Normative rules live in AGENTS.md (root, open_notebook/, frontend/); product direction
+    lives in VISION.md; past decisions in docs/7-DEVELOPMENT/decisions/.
+
+  custom_rules:
+    - name: Vision & principles alignment
+      description: |
+        Check the PR against the product identity and current posture defined in the
+        linked VISION.md. Flag:
+        - Features that gratuitously preclude multi-user (hard-coded single-tenancy in
+          schema, auth, or data scoping) — see PDR-001.
+        - Capabilities that only work on one AI provider without a PDR justifying the
+          exclusivity — the core is provider-agnostic by default (PDR-002).
+        - Features that conflict with the "What Open Notebook IS NOT" list.
+        - Structural/architectural decisions introduced without a decision record in
+          docs/7-DEVELOPMENT/decisions/ (half a page, same PR).
+      file_paths:
+        - VISION.md
+
+    - name: Known caveats
+      description: |
+        Enforce this project's recurring mechanical pitfalls (full rules in
+        open_notebook/AGENTS.md and frontend/AGENTS.md):
+        - i18n: every user-visible frontend string goes through t('section.key') and the
+          key must exist in ALL 7 locales (en-US, pt-BR, zh-CN, zh-TW, ja-JP, ru-RU, bn-IN).
+        - Providers: any change to supported providers must touch all 4 sync points:
+          api/models.py SupportedProvider, frontend ALL_PROVIDERS,
+          connection_tester.py TEST_MODELS, credentials_service.py PROVIDER_ENV_CONFIG.
+        - Migrations: a new open_notebook/database/migrations/N.surrealql file must also be
+          registered in AsyncMigrationManager (async_migrate.py) — no auto-discovery.
+        - Graphs: LLM calls in LangGraph nodes must use provision_langchain_model() and wrap
+          errors with classify_error(); model output goes through clean_thinking_content().
+        - Domain: Source.save() does not auto-embed — vectorize() must be called explicitly;
+          RecordModel singletons need clear_instance() in tests.
+        - Async jobs (podcasts, embeddings, source processing) run on the surreal-commands
+          worker; features depending on them must not assume inline execution. Permanent
+          failures raise ValueError (no retry); podcasts use max_attempts=1 by design.
+        - Frontend: FormData nested fields must be JSON.stringify-ed; don't re-add
+          Content-Type; check hasHydrated before rendering persisted Zustand state.
+
+    - name: Security & testability
+      description: |
+        Security:
+        - API endpoints must never return API key or secret values — metadata only.
+        - Every user-supplied URL must pass validate_url() (SSRF protection; private IPs are
+          intentionally allowed for self-hosted services).
+        - No secrets committed, logged, or echoed in error messages; credential fields use
+          SecretStr and Fernet encryption (OPEN_NOTEBOOK_ENCRYPTION_KEY).
+        - Raise typed exceptions from open_notebook.exceptions instead of bare HTTPException
+          or generic 500s.
+        Testability:
+        - Business logic belongs in services/domain, not in routers or React components,
+          so it can be tested directly.
+        - Critical paths (auth, credentials, encryption, migrations, data deletion) need
+          test coverage in the same PR.
+        - Bug fixes should include a test that reproduces the bug.
+
+  auto_ultrareview: custom
+  auto_ultrareview_custom_prompt: |
+    Run an ultrareview when the PR touches authentication, credential storage, encryption,
+    database migrations, or data deletion/cascade logic.
+  auto_ultrareview_file_patterns:
+    - 'open_notebook/database/migrations/**'
+    - '**/credential*'
+    - '**/auth*'
+    - '**/encryption*'
diff --git a/docs/7-DEVELOPMENT/architecture.md b/docs/7-DEVELOPMENT/architecture.md
index 3ef2f8a6..2575b490 100644
--- a/docs/7-DEVELOPMENT/architecture.md
+++ b/docs/7-DEVELOPMENT/architecture.md
@@ -39,7 +39,7 @@ Open Notebook follows a three-tier architecture with clear separation of concern
 
 ## Detailed Architecture
 
-Open Notebook is built on a **three-tier, async-first architecture** designed for scalability, modularity, and multi-provider AI flexibility. The system separates concerns across frontend, API, and database layers, with LangGraph powering intelligent workflows and Esperanto enabling seamless integration with 8+ AI providers.
+Open Notebook is built on a **three-tier, async-first architecture** designed for scalability, modularity, and multi-provider AI flexibility. The system separates concerns across frontend, API, and database layers, with LangGraph powering intelligent workflows and Esperanto enabling seamless integration with 17 AI providers.
 
 **Core Philosophy**:
 - Privacy-first: Users control their data and AI provider choice
@@ -156,7 +156,7 @@ Response ← Pydantic serialization ← Service ← Result
 - **Database**: SurrealDB (multi-model, ACID transactions)
 - **Query Language**: SurrealQL (SQL-like syntax with graph operations)
 - **Async Driver**: Async Rust client for Python
-- **Migrations**: Manual `.surql` files in `/migrations/` (auto-run on API startup)
+- **Migrations**: `.surrealql` files in `open_notebook/database/migrations/`, registered in `AsyncMigrationManager` (auto-run on API startup)
 
 **Core Tables**:
 
@@ -256,7 +256,7 @@ ChatSession
 ### Why Esperanto for AI Providers?
 
 **Esperanto Library**:
-- Unified interface to 8+ LLM providers (OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI)
+- Unified interface to 17 providers (OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI, OpenRouter, Azure, Vertex, and more)
 - Multi-provider embeddings (OpenAI, Google, Ollama, Mistral, Voyage)
 - TTS/STT integration (OpenAI, Groq, ElevenLabs, Google)
 - Smart provider selection (fallback logic, cost optimization)
@@ -698,10 +698,10 @@ status = await response.json()  # returns { status: "running|queued|completed|fa
 
 **Migrations**:
 - Automatic on API startup
-- Located in `/migrations/` directory
-- Numbered sequentially (001_*.surql, 002_*.surql, etc)
+- Located in `open_notebook/database/migrations/`
+- Numbered sequentially (`1.surrealql`, `2.surrealql`, …) and registered explicitly in `AsyncMigrationManager` (no auto-discovery)
 - Tracked in `_sbl_migrations` table
-- Rollback via `_down.surql` files (manual)
+- Rollback via `N_down.surrealql` files (manual)
 
 ### Relationship Model
 
@@ -746,7 +746,7 @@ All I/O operations are non-blocking to maximize concurrency and responsiveness.
 
 ### 2. **Multi-Provider from Day 1**
 
-Built-in support for 8+ AI providers prevents vendor lock-in.
+Built-in support for 17 AI providers prevents vendor lock-in.
 
 **Trade-off**: Added complexity in ModelManager vs. flexibility and cost optimization.
 
@@ -852,7 +852,7 @@ Async job submission (source processing, podcast generation) prevents request ti
 2. Inherit from BaseModel (domain object)
 3. Implement `save()`, `get()`, `delete()` methods (CRUD)
 4. Add repository functions if complex queries needed
-5. Create database migration in `migrations/`
+5. Create database migration in `open_notebook/database/migrations/` (and register it in `AsyncMigrationManager`)
 6. Add API routes and models in `api/`
 
 ### Adding a New AI Provider
diff --git a/docs/7-DEVELOPMENT/change-playbooks.md b/docs/7-DEVELOPMENT/change-playbooks.md
index 6bddc14d..37c68684 100644
--- a/docs/7-DEVELOPMENT/change-playbooks.md
+++ b/docs/7-DEVELOPMENT/change-playbooks.md
@@ -22,7 +22,7 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 | Step | File(s) | What to Do |
 |------|---------|------------|
 | 1 | `open_notebook/domain/<model>.py` | Add field with type hint and default value. Follow existing patterns in the class. |
-| 2 | `migrations/NNN_<description>.surql` | Create migration. Use next number in sequence. `DEFINE FIELD` for new fields, `UPDATE` for backfilling existing records. |
+| 2 | `open_notebook/database/migrations/N.surrealql` | Create migration. Use next number in sequence. `DEFINE FIELD` for new fields, `UPDATE` for backfilling existing records. Register it in `AsyncMigrationManager` (`async_migrate.py`) — migrations are not auto-discovered. |
 | 3 | `api/models.py` | Add field to `*Create`, `*Update` (Optional), and `*Response` schemas. |
 | 4 | `frontend/src/lib/types/api.ts` | Add field to the corresponding TypeScript interface (`*Response`, `Create*Request`, `Update*Request`). |
 | 5 | Frontend component (if user-facing) | Display or edit the field in the relevant component. |
@@ -85,7 +85,7 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 | Step | What to Do |
 |------|------------|
 | 1 | **Identify the layer.** Read the issue and determine: frontend, API router, service, domain model, database, or graph. |
-| 2 | **Read the module's CLAUDE.md.** Every major module has one. It documents patterns and gotchas. |
+| 2 | **Read the relevant AGENTS.md** (root, `open_notebook/`, or `frontend/`) and the matching page in `docs/7-DEVELOPMENT/`. They document the rules and gotchas. |
 | 3 | **Reproduce.** Use the API docs (`/docs`), browser, or a test to confirm the bug. |
 | 4 | **Fix.** Make the minimal change needed. Don't refactor surrounding code. |
 | 5 | **Add a test** that reproduces the bug and verifies the fix. |
@@ -113,14 +113,15 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 
 | Step | File(s) | What to Do |
 |------|---------|------------|
-| 1 | `migrations/NNN_<description>.surql` | Write SurrealQL. Use next number in sequence. Check existing migrations for patterns. |
-| 2 | Domain model (if schema change) | Update field definitions to match. |
-| 3 | API schemas (if new/changed fields) | Update Pydantic models. |
-| 4 | **Verify:** Restart API and check logs | Migrations auto-run on startup. Look for errors in Loguru output. |
+| 1 | `open_notebook/database/migrations/N.surrealql` (+ `N_down.surrealql`) | Write SurrealQL. Use next number in sequence. Check existing migrations for patterns. |
+| 2 | `open_notebook/database/async_migrate.py` | Register the new files in `AsyncMigrationManager.__init__` — migrations are hard-coded, not auto-discovered. |
+| 3 | Domain model (if schema change) | Update field definitions to match. |
+| 4 | API schemas (if new/changed fields) | Update Pydantic models. |
+| 5 | **Verify:** Restart API and check logs | Migrations auto-run on startup. Look for errors in Loguru output. |
 
 **Important:**
 - Migrations are numbered and run in order
-- They're tracked in `_migrations` table — won't re-run
+- They're tracked in the `_sbl_migrations` table — won't re-run
 - For destructive changes (DROP FIELD), consider data preservation
 - Test with existing data, not just empty database
 
@@ -171,10 +172,19 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 |------|---------|------------|
 | 1 | `frontend/src/lib/locales/en-US/index.ts` | Add English strings first. Group by feature. |
 | 2 | All other locale files | Add the same keys to: `pt-BR`, `zh-CN`, `zh-TW`, `ja-JP`, `ru-RU`, `bn-IN`. Use English as placeholder if translation unavailable. |
-| 3 | Component | Use `const { t } = useTranslation()` and access via `t.section.key`. |
+| 3 | Component | Use `const { t } = useTranslation()` and access via `t('section.key')`. |
 
 **7 locales total.** Don't forget any.
 
+### Adding a whole new language
+
+| Step | File(s) | What to Do |
+|------|---------|------------|
+| 1 | `frontend/src/lib/locales/<code>/index.ts` | Copy the structure from `en-US/index.ts` and translate all strings. |
+| 2 | `frontend/src/lib/locales/index.ts` | Register the locale: import it, add to `resources`, add to the `languages` array (`{ code, label }`). |
+| 3 | `frontend/src/lib/utils/date-locale.ts` | Import the matching `date-fns/locale` and add it to `LOCALE_MAP`. |
+| 4 | **Test** | Switch languages via the UI language toggle; missing keys fall back to en-US. |
+
 ---
 
 ## Quick Reference: File Locations by Layer
@@ -183,7 +193,7 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 |-------|----------|-------------|-------|
 | Domain models | `open_notebook/domain/` | Pydantic fields | `tests/` |
 | Database | `open_notebook/database/repository.py` | SurrealQL | `tests/` |
-| Migrations | `migrations/*.surql` | SurrealQL | Auto-run on startup |
+| Migrations | `open_notebook/database/migrations/*.surrealql` | SurrealQL | Auto-run on startup |
 | AI/LLM | `open_notebook/ai/` | Esperanto types | `tests/` |
 | Graphs | `open_notebook/graphs/` | TypedDict state | `tests/` |
 | Prompts | `prompts/**/*.jinja` | Jinja2 context | — |
diff --git a/docs/7-DEVELOPMENT/content-processing.md b/docs/7-DEVELOPMENT/content-processing.md
new file mode 100644
index 00000000..47ace643
--- /dev/null
+++ b/docs/7-DEVELOPMENT/content-processing.md
@@ -0,0 +1,55 @@
+# Content Processing: Chunking, Embedding, Context & Encryption
+
+Design notes for the utilities in `open_notebook/utils/` that turn raw content into searchable, LLM-consumable data. These are cross-cutting: sources, notes and insights all flow through them.
+
+## Chunking (`utils/chunking.py`)
+
+Content is split with content-type-aware LangChain splitters (`HTMLHeaderTextSplitter`, `MarkdownHeaderTextSplitter`, `RecursiveCharacterTextSplitter`). Content type detection uses the file extension first; heuristics can override a PLAIN extension when confidence ≥ 0.8. Oversized chunks from the HTML/Markdown splitters get a secondary split.
+
+**Why the 400-token default.** `OPEN_NOTEBOOK_CHUNK_SIZE` defaults to 400 tokens — ~20% below the 512-token ceiling of BERT-family embedders (e.g. `mxbai-embed-large`). The buffer absorbs three error sources: tokenizer mismatch (we measure with `o200k_base`, the embedder tokenizes with WordPiece), splitter overshoot, and special tokens. For embedders with large windows (OpenAI `text-embedding-3` family: 8191 tokens) raise it, e.g.:
+
+```bash
+export OPEN_NOTEBOOK_CHUNK_SIZE=1500
+export OPEN_NOTEBOOK_CHUNK_OVERLAP=150
+```
+
+`OPEN_NOTEBOOK_CHUNK_OVERLAP` defaults to 15% of chunk size. Both are **token-based** (not characters), minimum chunk size 100, and require an app restart to take effect.
+
+## Embedding (`utils/embedding.py`)
+
+- `generate_embedding(text)` — unified entry point: short text (≤ chunk size) embeds directly; long text is chunked, each chunk embedded, and the results combined via **mean pooling** (normalize each → mean → normalize result, numpy).
+- `generate_embeddings(texts)` — batch path used by `embed_source_command`: batches of 50 with per-batch retry, to stay under provider payload limits.
+- Empty/whitespace-only input raises `ValueError` — which background commands treat as a permanent (non-retried) failure by design.
+- The embedding model comes from `model_manager` (see [credentials.md](credentials.md) for how provider config is resolved).
+
+**Who triggers embedding** (see also the domain rules in `open_notebook/AGENTS.md`):
+
+| Content | Trigger |
+|---|---|
+| Note | `Note.save()` auto-submits `embed_note` |
+| Insight | `create_insight_command` submits `embed_insight` |
+| Source | explicit `source.vectorize()` → `embed_source` (NOT automatic on save) |
+| Everything | `rebuild_embeddings_command` fans out individual jobs |
+
+All embedding is fire-and-forget through the surreal-commands worker — nothing embeds if the worker isn't running.
+
+## Context building (`utils/context_builder.py`)
+
+`ContextBuilder` assembles LLM context from selected sources/notes/insights under a token budget:
+
+- Each `ContextItem` counts its own tokens on construction; `build()` adds items in priority order (default weights: source 100 > insight 75 > note 50, see `ContextConfig`) and stops once `max_tokens` is exceeded (no prorating).
+- Fetching is lazy (nothing is loaded until `build()`), and every call re-fetches — there is no cache layer.
+- Token counting uses `o200k_base` via tiktoken and is an estimate (±5-10% vs. the actual model); `token_count()` falls back to a coarse estimate if tiktoken is unavailable.
+
+## Encryption (`utils/encryption.py`) {#encryption}
+
+Field-level encryption for sensitive values (API keys) stored in the database, using Fernet (AES-128-CBC + HMAC-SHA256).
+
+- Key source: `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` (Docker secrets) → `OPEN_NOTEBOOK_ENCRYPTION_KEY`. **No default** — credential storage is unavailable until the key is set.
+- Any string works as key: it's derived to a Fernet key via SHA-256, lazily on first use.
+- Decryption falls back gracefully: an `InvalidToken` (legacy unencrypted data) returns the original value, so pre-encryption databases keep working.
+- Key rotation is **not implemented** — changing the key orphans previously encrypted values.
+
+## Text utilities (`utils/text_utils.py`)
+
+`clean_thinking_content()` strips `<think>…</think>` blocks from model output (extended-thinking models); used in every graph that consumes LLM responses. It handles malformed output (missing opening tag) and bypasses extraction for content > 100KB for performance.
diff --git a/docs/7-DEVELOPMENT/contributing.md b/docs/7-DEVELOPMENT/contributing.md
index 14ecb1fa..38e5ec3e 100644
--- a/docs/7-DEVELOPMENT/contributing.md
+++ b/docs/7-DEVELOPMENT/contributing.md
@@ -2,22 +2,35 @@
 
 Thank you for your interest in contributing to Open Notebook! We welcome contributions from developers of all skill levels. This guide will help you understand our contribution workflow and what makes a good contribution.
 
-## 🚨 Issue-First Workflow
+## 🚦 Issue-First Workflow (for anything non-trivial)
 
-**To maintain project coherence and avoid wasted effort, please follow this process:**
+**To maintain project coherence and avoid wasted effort, non-trivial work starts with an issue:**
 
 1. **Create an issue first** - Before writing any code, create an issue describing the bug or feature
 2. **Propose your solution** - Explain how you plan to implement the fix or feature
 3. **Wait for assignment** - A maintainer will review and assign the issue to you if approved
 4. **Only then start coding** - This ensures your work aligns with the project's vision and architecture
 
+**When you can skip the issue and just open a PR:**
+- Typos, broken links, and small documentation clarifications
+- Small, obvious bug fixes — a few lines, one clear right answer, no design decisions
+- Translation fixes or completing missing i18n keys
+
+**When an issue is definitely required first:**
+- New features, of any size
+- Architecture or structural changes
+- Breaking changes
+- Anything where the *how* has more than one reasonable answer
+
+**Already coded something sizeable without an issue?** Don't throw it away: mark the PR as **draft**, open an issue describing the problem and your approach, and link it from the PR. Our triage is fast — expect a call within 1–2 days.
+
 **Why this process?**
 - Prevents duplicate work
 - Ensures solutions align with our architecture and design principles
 - Saves your time by getting feedback before coding
 - Helps maintainers manage the project direction
 
-> ⚠️ **Pull requests without an assigned issue may be closed**, even if the code is good. We want to respect your time by making sure work is aligned before it starts.
+> ⚠️ **Non-trivial pull requests without an issue may be closed**, even if the code is good. We want to respect your time by making sure work is aligned before it starts.
 
 ## Code of Conduct
 
@@ -51,7 +64,7 @@ By participating in this project, you are expected to uphold our [Code of Conduc
 Once your issue is assigned:
 
 1. **Fork the repo** and create your branch from `main`
-2. **Understand our vision and principles** - Read [design-principles.md](design-principles.md) to understand what guides our decisions
+2. **Understand our vision and principles** - Read [VISION.md](../../VISION.md) (what the product is and where it's going) and [design-principles.md](design-principles.md) (engineering practices)
 3. **Follow our architecture** - Refer to the architecture documentation to understand project structure
 4. **Write quality code** - Follow the standards outlined in [code-standards.md](code-standards.md)
 5. **Test your changes** - See [testing.md](testing.md) for test guidelines
@@ -72,12 +85,24 @@ Once your issue is assigned:
 - Have clear commit messages
 
 ❌ **We may close PRs that:**
-- Don't have an associated approved issue
+- Are non-trivial and don't have an associated approved issue (small obvious fixes are exempt — see the issue-first workflow above)
 - Introduce breaking changes without discussion
 - Conflict with our architectural vision
 - Lack tests or documentation
 - Try to solve multiple unrelated problems
 
+### AI-Assisted and Agent-Generated PRs
+
+A large share of contributions — including our own — are written with coding agents (Claude Code, Cursor, Copilot, etc.). That's welcome. The tool doesn't change the contract; **the operator does not stop being the author**:
+
+1. **You own the PR.** You must have read, understood, and be able to explain every line of the diff. "The agent wrote it" is never an answer in review.
+2. **Issue-first still applies to anything non-trivial.** Agents make it cheap to produce large unsolicited PRs — those get closed like any other unassigned PR, regardless of code quality. (Small obvious fixes are exempt, same as for humans; a sizeable PR without an issue can be converted to draft while its issue goes through triage.)
+3. **Tests must have actually run.** Paste real output. An agent *claiming* tests pass is not test evidence.
+4. **Point your agent at the right context.** The repo ships `AGENTS.md` files (root, `open_notebook/`, `frontend/`) with the normative rules, and [change-playbooks.md](change-playbooks.md) with step-by-step recipes — agents that read them produce PRs that pass review faster.
+5. **Keep it scoped.** Agents tend to "improve" surrounding code along the way. Unrelated refactors belong in separate issues/PRs.
+
+Disclosure of AI assistance is appreciated but optional — responsibility for the result is what matters, and it's yours either way.
+
 ## Git Commit Messages
 
 - Use the present tense ("Add feature" not "Added feature")
@@ -180,7 +205,9 @@ We're actively looking for contributions in these areas:
 
 ### Documentation References
 
-- [Design Principles](design-principles.md) - Understanding our project vision
+- [VISION.md](../../VISION.md) - Product identity and current posture
+- [Design Principles](design-principles.md) - Engineering practices and anti-patterns
+- [Decision Records](decisions/README.md) - Why things are the way they are
 - [Code Standards](code-standards.md) - Coding guidelines by language
 - [Testing Guide](testing.md) - How to write tests
 - [Development Setup](development-setup.md) - Getting started locally
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
new file mode 100644
index 00000000..9c143e3f
--- /dev/null
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -0,0 +1,65 @@
+# Credential System
+
+How Open Notebook stores, encrypts and provisions AI provider credentials — from the settings UI down to Esperanto model instantiation. This is the single reference for the subsystem; the frontend and backend halves are documented together on purpose.
+
+## Overview
+
+Users can configure provider credentials through the UI instead of environment variables. Keys are stored as individual `Credential` records in SurrealDB, encrypted with Fernet, and resolved at model-provisioning time with a database-first, environment-variable-fallback strategy.
+
+```
+Settings UI ──► /credentials API ──► Credential record (encrypted, SurrealDB)
+                                          │
+                Model record ──credential─┘        (preferred: direct link)
+                     │
+        ModelManager.get_model()
+                     │
+        credential.to_esperanto_config()  ──►  Esperanto AIFactory
+                     │
+        (no linked credential?)
+                     └──► key_provider.provision_provider_keys()  ──►  env vars ──► Esperanto
+```
+
+## The `Credential` domain model (`open_notebook/domain/credential.py`)
+
+- One record per credential (e.g. "My OpenAI Key", "Work Anthropic") — multiple credentials per provider are supported.
+- Fields: `name`, `provider`, `modalities`, `api_key` (Pydantic `SecretStr`, masked in logs), plus provider-specific config (`base_url`, `endpoint`, `api_version`, mode-specific endpoints, `project`, `location`, `credentials_path`).
+- `api_key` is encrypted with `encrypt_value()` before save and decrypted on read (`get()` / `get_all()` are overridden). Encryption requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` (see [content-processing.md](content-processing.md#encryption) for the encryption utility itself).
+- `to_esperanto_config()` builds the config dict passed to Esperanto's `AIFactory.create_*`.
+- `provider_config.py` still exists only to migrate legacy `ProviderConfig` records.
+
+## Provisioning: two paths
+
+1. **Credential-linked model (preferred).** A `Model` record has a `credential` field pointing at a Credential. `ModelManager.get_model()` calls `credential.to_esperanto_config()` and passes the config directly — no env var mutation, multiple credentials per provider work naturally.
+2. **Env-var fallback (`open_notebook/ai/key_provider.py`).** When a model has no linked credential, `provision_provider_keys(provider)` copies DB-stored keys into `os.environ` so Esperanto can read them; pre-existing env vars are left untouched when no DB config exists. The `PROVIDER_CONFIG` map in `key_provider.py` defines the env-var ↔ config-field mapping for simple providers; multi-field providers (Vertex, Azure, OpenAI-compatible) are handled by the dedicated `_provision_vertex()` / `_provision_azure()` / `_provision_openai_compatible()` functions.
+
+## The API surface (`api/routers/credentials.py`)
+
+CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and two migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`). Swagger at `/docs` documents the shapes.
+
+**Supported providers (17)** are enforced by the `SupportedProvider` Literal in `api/models.py`, kept in sync with three other locations (frontend `ALL_PROVIDERS`, `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`):
+
+- Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, voyage, elevenlabs, deepgram, dashscope, minimax
+- URL-based: ollama
+- Multi-field: azure, vertex, openai_compatible
+
+**Security properties**:
+
+- API key values are never returned by any endpoint — only metadata (`has_api_key`, counts).
+- Every URL field passes `validate_url()` (SSRF protection); private IPs/localhost are allowed by design for self-hosted services (Ollama, LM Studio). Hostname resolution runs in `asyncio.to_thread` to avoid blocking the event loop.
+- Connection testing of Vertex credentials collapses "file missing / not JSON / wrong shape" errors into one generic message so the tester can't be used as a filesystem oracle.
+
+## Connection testing (`open_notebook/ai/connection_tester.py`)
+
+`test_provider_connection()` makes a minimal API call using the cheapest model per provider (`TEST_MODELS` map). URL-based providers get a server ping instead (`/api/tags` for Ollama, `/models` for OpenAI-compatible). Error messages are normalized for the UI: 401 → "Invalid API key", rate-limit → success ("connection works"), model-not-found → success ("key valid").
+
+## Frontend half
+
+- `src/lib/api/credentials.ts` — typed client mirroring the endpoints above. The `Credential` interface never carries the key value, only `has_api_key`.
+- `src/lib/hooks/use-credentials.ts` — TanStack Query hooks (`useCredentials`, `useCreateCredential`, `useTestCredential`, …) with toast feedback. Mutations invalidate `CREDENTIAL_QUERY_KEYS.all` + provider/model keys; test results are kept in local state, not the query cache.
+
+## Migration paths
+
+Both migration endpoints are idempotent summaries (`migrated` / `skipped` / `errors`):
+
+- **From env vars**: creates Credential records for providers whose env vars are set.
+- **From legacy ProviderConfig**: converts old singleton records into individual Credentials.
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-001-surrealdb.md b/docs/7-DEVELOPMENT/decisions/ADR-001-surrealdb.md
new file mode 100644
index 00000000..17110e55
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-001-surrealdb.md
@@ -0,0 +1,27 @@
+# ADR-001: SurrealDB as the database
+
+- **Status**: Accepted
+- **Date**: 2026-07 (retroactive record — decision dates from project inception; long-form rationale maintained in [#372](https://github.com/lfnovo/open-notebook/issues/372))
+- **Related**: #372, #378, #381, [VISION.md](../../../VISION.md) (Platform v-next cluster)
+
+## Context
+
+Open Notebook needs document storage (sources with metadata), graph relationships (notebooks ↔ sources ↔ notes), vector embeddings for semantic search, and background jobs — while staying easy to self-host for privacy-focused users. A traditional stack would be Postgres + Redis + Celery + a vector DB: four services to operate.
+
+## Decision
+
+Use **SurrealDB** as the single database: documents, graph relationships, vector embeddings and (via surreal-commands) job queueing in one service. Stay with it and work through the challenges; reconsider only under the exit criteria listed in #372 (unworkable transaction conflicts, performance that tuning can't fix, unpatched critical security issue, or a mature alternative with the same consolidated benefits).
+
+## Alternatives considered
+
+- **PostgreSQL + pgvector** — maturity and ecosystem, but loses graph queries and still needs Celery/Redis for jobs.
+- **SQLite + LiteFS** — ultimate simplicity, but poor concurrency and no graph features.
+- **MongoDB + Redis + Celery** — familiar tooling, but three services kills the self-hosting simplicity advantage.
+- **Hybrid (Postgres + Neo4j)** — best of both worlds at an ops cost we don't want to impose on self-hosters.
+
+## Consequences
+
+- One container to run — the biggest infra advantage for self-hosted users.
+- Younger ecosystem: we document more and contribute back; fewer established tuning practices.
+- Transaction conflicts under concurrency turned out to be log verbosity, not failures (#362, #373) — handled with Tenacity retries.
+- Major-version upgrades need deliberate migration work (v3: #378, part of the Platform v-next cluster).
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-002-external-libraries.md b/docs/7-DEVELOPMENT/decisions/ADR-002-external-libraries.md
new file mode 100644
index 00000000..088d1e92
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-002-external-libraries.md
@@ -0,0 +1,32 @@
+# ADR-002: Delegate platform/media support to focused external libraries
+
+- **Status**: Accepted
+- **Date**: 2026-07 (retroactive record — decision dates from project inception)
+- **Related**: [PDR-002](PDR-002-provider-agnostic-core.md), [credentials.md](../credentials.md), [content-processing.md](../content-processing.md)
+
+## Context
+
+Open Notebook's value is the knowledge layer: organizing, understanding and generating from research content. But delivering it requires two areas of heavy, ever-changing integration code: AI provider APIs (17 providers across LLM/embedding/TTS/STT) and content extraction (50+ file types, URLs, video/audio platforms). Building that in-repo would bloat the codebase and pull maintenance attention away from the product core.
+
+## Decision
+
+**If a capability is about platform/media support and will require heavy integration coding, it doesn't belong in this repository.** It lives in a focused external library, keeping this project centered on the knowledge layer — and keeping those parts replaceable by other frameworks if we ever decide to swap them.
+
+Applied today:
+
+- **[Esperanto](https://github.com/lfnovo/esperanto)** — all model access (LLM, embeddings, TTS, STT) through one `AIFactory` interface. Application code selects models via the `Model` registry and `provision_langchain_model()`, never by instantiating provider clients directly.
+- **[Content Core](https://github.com/lfnovo/content-core)** — all content extraction (files, URLs, media) through `extract_content()`.
+- The same rule covers **[podcast-creator](https://github.com/lfnovo/podcast-creator)** for audio generation.
+
+## Alternatives considered
+
+- **Provider SDKs / extraction logic in-repo** — spreads platform-specific code across every feature and makes each new provider/format a cross-cutting change.
+- **LangChain provider classes directly** — workable for models, but couples every callsite to per-provider packages and quirks; Esperanto normalizes config (and we control the library).
+- **Single provider + "compatible" endpoints** — simplest, but breaks the no-lock-in promise and excludes local-first users.
+
+## Consequences
+
+- Adding a provider or content format is mostly an upstream change, plus registry/config sync here (e.g. the four `SupportedProvider` locations — see `open_notebook/AGENTS.md`).
+- The libraries are independently versioned, testable and swappable; the boundary keeps this repo's scope honest.
+- Debugging sometimes spans two repos; issues whose root cause is upstream get the `upstream` + library labels (`esperanto`, `content-core`, `podcast-creator`).
+- Provider-specific *capabilities* (not just plumbing) remain constrained by [PDR-002](PDR-002-provider-agnostic-core.md).
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-003-streamlit-to-nextjs.md b/docs/7-DEVELOPMENT/decisions/ADR-003-streamlit-to-nextjs.md
new file mode 100644
index 00000000..9e7abe70
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-003-streamlit-to-nextjs.md
@@ -0,0 +1,26 @@
+# ADR-003: Migrate the UI from Streamlit to Next.js
+
+- **Status**: Accepted
+- **Date**: 2026-07 (retroactive record — migration shipped with the v1→v2 platform rework)
+- **Related**: [frontend.md](../frontend.md), API-first principle in [VISION.md](../../../VISION.md)
+
+## Context
+
+The original UI was Streamlit: fast to build, but it coupled UI and backend logic in one process, made external integrations hard, and gave us limited control over API behavior. The API-first principle — every capability accessible via REST, the UI being just one client — was structurally impossible to honor.
+
+## Decision
+
+Rebuild the frontend as a **Next.js/React application** consuming the same FastAPI REST API that external clients use. Business logic lives behind the API; the frontend is a pure client (TanStack Query + Zustand over axios).
+
+## Alternatives considered
+
+- **Stay on Streamlit** — lowest effort, but permanently blocks API-first and a polished UX.
+- **Server-rendered templates (FastAPI + Jinja)** — simpler stack, but poor interactivity for chat/streaming-heavy UX.
+- **Other SPA frameworks (Vue, Svelte)** — viable; React/Next.js won on ecosystem, component library availability (Radix/Shadcn) and contributor familiarity.
+
+## Consequences
+
+- The API is complete by construction — anything the UI does, an integration can do (this later enabled the MCP direction, #878).
+- Two build systems and a larger contributor surface (TypeScript + Python).
+- i18n, theming and accessibility became first-class frontend concerns (7 locales today).
+- Legacy Streamlit remnants were removed over time; migrations assume API-driven access.
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-004-background-workers.md b/docs/7-DEVELOPMENT/decisions/ADR-004-background-workers.md
new file mode 100644
index 00000000..e0ac04e2
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-004-background-workers.md
@@ -0,0 +1,27 @@
+# ADR-004: Long-running work runs on background workers
+
+- **Status**: Accepted
+- **Date**: 2026-07 (retroactive record — decision dates from the async rework)
+- **Related**: #381, [ADR-001](ADR-001-surrealdb.md), [podcasts.md](../podcasts.md)
+
+## Context
+
+Open Notebook routinely processes work that takes seconds to minutes: ingesting and embedding large volumes of content, generating insights, producing podcast episodes. Users run it on machines of very different sizes — from small home servers to beefy workstations — so the same job can be fast on one deployment and slow on another. None of that may lock product usage: the API and UI must stay responsive while heavy work happens (async-first principle).
+
+## Decision
+
+**Long-running operations run as background jobs on a dedicated worker process, never inline in the API request cycle.** Submission is fire-and-forget (returns a job id immediately), status is observable (`/commands/{id}`), failures are explicit (permanent vs. retriable), and the UI polls or resumes rather than blocking.
+
+The *queue implementation* is deliberately an implementation detail behind this decision. Today it's [surreal-commands](https://github.com/lfnovo/surreal-commands) — chosen because it reuses the SurrealDB we already run, adding zero infrastructure for self-hosters ([ADR-001](ADR-001-surrealdb.md)). A move to Celery is under evaluation as part of the Platform v-next cluster (#381); if it happens, it replaces the implementation, not this decision.
+
+## Alternatives considered
+
+- **Run heavy work inline in API handlers** — simplest, but locks the product for minutes and ties job success to the HTTP connection.
+- **FastAPI BackgroundTasks / asyncio tasks** — no persistence: jobs die with the process, no status tracking, no retry.
+- **Celery + Redis from the start** — battle-tested, but two extra services for self-hosters before we knew we needed the features.
+
+## Consequences
+
+- A worker process is **required** for anything async to actually run (documented in the root `AGENTS.md`; forgetting it is a silent-queue failure mode).
+- Features must be designed for the job model: idempotent-ish under retry, explicit permanent failures (`ValueError` → no retry), status exposed to the UI (e.g. podcasts use `max_attempts: 1` + an explicit retry endpoint).
+- Deployment has one more moving part than a monolith — the price of not locking usage on slow machines.
diff --git a/docs/7-DEVELOPMENT/decisions/PDR-001-single-user-first.md b/docs/7-DEVELOPMENT/decisions/PDR-001-single-user-first.md
new file mode 100644
index 00000000..7f3520dc
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/PDR-001-single-user-first.md
@@ -0,0 +1,26 @@
+# PDR-001: Single-user first; new features must not preclude multi-user
+
+- **Status**: Accepted
+- **Date**: 2026-07
+- **Related**: [#712](https://github.com/lfnovo/open-notebook/issues/712) (multi-user umbrella), [VISION.md](../../../VISION.md) (Current Posture)
+
+## Context
+
+Multi-user support is a recurring community request (#712 tracks it), and it would be a deep platform redesign: auth, data scoping, permissions, and what "multi-user" even means for a privacy-first self-hosted tool (household/team vs. SaaS-style). That strategic call hasn't been made. Meanwhile, features keep shipping — and each one can silently bake in single-tenancy assumptions that make the future redesign more expensive.
+
+## Decision
+
+Open Notebook remains a **single-user product for now** — but this is a *directional constraint*, not a verdict: **new features must not gratuitously preclude multi-user.** Concretely, when designing a feature, avoid hard-coding single-tenancy where a neutral choice costs the same: data models that could carry an owner scope, auth touchpoints that assume exactly one identity, global singletons for per-user state.
+
+This record does **not** commit to building multi-user. It commits to keeping the door open until the vision call in #712 is made.
+
+## Alternatives considered
+
+- **Decide multi-user now** — premature: the product core is still stabilizing (see Current Posture in VISION.md) and the design space (team vs. SaaS) is unresolved.
+- **Ignore it until decided** — cheapest today, but every single-tenant assumption shipped becomes migration debt.
+
+## Consequences
+
+- Card design/triage gains a concrete check: "does this preclude multi-user?"
+- Slight design overhead on data-model and auth decisions.
+- When the #712 vision call is made, a new PDR supersedes or extends this one.
diff --git a/docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md b/docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md
new file mode 100644
index 00000000..77729713
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/PDR-002-provider-agnostic-core.md
@@ -0,0 +1,27 @@
+# PDR-002: Provider-agnostic core by default; provider-exclusive capabilities require a PDR
+
+- **Status**: Accepted
+- **Date**: 2026-07
+- **Related**: [ADR-002](ADR-002-external-libraries.md), [VISION.md](../../../VISION.md) (Principles + Current Posture)
+
+## Context
+
+Our philosophy is to support as many providers as makes sense — users choose their AI, including fully local. The cost of that democratic stance is that we don't immediately adopt capabilities unique to one provider, even compelling ones. But "portable by default" must not harden into "never": some provider-exclusive capabilities (including paid-only ones) may be worth adopting deliberately. The current phase (see VISION.md posture) is basics-first; that phase is expected to evolve — the decision is to evolve, not to stand still.
+
+## Decision
+
+Two rules with different lifespans:
+
+1. **Durable principle**: the core is provider-agnostic. Features must work across the provider matrix by default. Adopting a provider-exclusive capability is *allowed*, but it is a deliberate product decision that requires its own PDR (stating scope, fallback behavior for other providers, and why the exclusivity is worth it).
+2. **Current posture** (temporal, lives in VISION.md): in the basics-first phase, we lean portable. Expanding into provider-exclusive premium capabilities is a phase change, recorded as a short PDR when it happens — that will be the principle working, not a reversal.
+
+## Alternatives considered
+
+- **Hard rule: never provider-exclusive** — protects portability but forfeits real capabilities and doesn't reflect our actual intent.
+- **No rule: adopt case-by-case silently** — drifts into de-facto lock-in one convenient feature at a time.
+
+## Consequences
+
+- Triage/design gets a crisp test: "does this only work on provider X?" → needs a PDR, not just an implementation.
+- Feature requests for provider-exclusive capabilities aren't auto-rejected — they're routed to a deliberate decision.
+- Slower adoption of shiny provider features, by design, during the basics-first phase.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
new file mode 100644
index 00000000..87e25d61
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -0,0 +1,50 @@
+# Decision Records
+
+The project's decision log: short, dated, immutable records of structural decisions. They answer *"why is it like this?"* months later, and prevent settled discussions from being reopened without knowing they were settled.
+
+Two kinds, same format:
+
+- **ADR** (Architecture Decision Record) — technical choices: `ADR-NNN-slug.md`
+- **PDR** (Product Decision Record) — product direction and scope: `PDR-NNN-slug.md`
+
+The **current rules** distilled from these records live in [VISION.md](../../../VISION.md) (product identity + posture) and [design-principles.md](../design-principles.md) (engineering practices). Records are the memory; those pages are the law.
+
+## Rules
+
+1. **Records are immutable.** Reversing a decision means writing a *new* record and marking the old one `Superseded by ADR-NNN` in its Status line — never editing history.
+2. **Write it in the same PR.** A design that resolves an open structural question ships with its record. Half a page, written while the context is loaded — not a documentation session later.
+3. **Keep it to half a page.** Four sections: Context, Decision, Alternatives considered, Consequences. If it needs more, link an issue or doc for the depth.
+4. **Number sequentially** within each prefix (ADR-005 comes after ADR-004, independent of PDRs).
+
+## Template
+
+```markdown
+# ADR-NNN: <Title>
+
+- **Status**: Accepted | Superseded by ADR-NNN
+- **Date**: YYYY-MM
+- **Related**: #issue, other records
+
+## Context
+What was the situation and the forces at play? (2-5 sentences)
+
+## Decision
+What we decided, stated as a rule someone can follow.
+
+## Alternatives considered
+What else was on the table and why it lost. (bullets)
+
+## Consequences
+What this makes easier, what it makes harder, what to watch. (bullets)
+```
+
+## Index
+
+| Record | Title | Status |
+|---|---|---|
+| [ADR-001](ADR-001-surrealdb.md) | SurrealDB as the database | Accepted |
+| [ADR-002](ADR-002-external-libraries.md) | Delegate platform/media support to focused external libraries | Accepted |
+| [ADR-003](ADR-003-streamlit-to-nextjs.md) | Migrate the UI from Streamlit to Next.js | Accepted |
+| [ADR-004](ADR-004-background-workers.md) | Long-running work runs on background workers | Accepted |
+| [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
+| [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/docs/7-DEVELOPMENT/design-principles.md b/docs/7-DEVELOPMENT/design-principles.md
index d243a6fd..0a86903a 100644
--- a/docs/7-DEVELOPMENT/design-principles.md
+++ b/docs/7-DEVELOPMENT/design-principles.md
@@ -1,127 +1,11 @@
-# Design Principles & Project Vision
+# Design Principles
 
-This document outlines the core principles, vision, and design philosophy that guide Open Notebook's development. All contributors should read and understand these principles before proposing changes or new features.
+Engineering practices and decision-making guidance for contributors.
 
-## 🎯 Project Vision
-
-Open Notebook aims to be a **privacy-focused, self-hosted alternative to Google's Notebook LM** that empowers users to:
-
-1. **Own their research data** - Full control over where data lives and who can access it
-2. **Choose their AI providers** - Freedom to use any AI provider or run models locally
-3. **Customize their workflows** - Flexibility to adapt the tool to different research needs
-4. **Access their work anywhere** - Through web UI, API, or integrations
-
-### What Open Notebook IS
-
-- A **research assistant** for managing and understanding content
-- A **platform** that connects various AI providers
-- A **privacy-first** tool that keeps your data under your control
-- An **extensible system** with APIs and customization options
-
-### What Open Notebook IS NOT
-
-- A document editor (use Google Docs, Notion, etc. for that)
-- A file storage system (use Dropbox, S3, etc. for that)
-- A general-purpose chatbot (use ChatGPT, Claude, etc. for that)
-- A replacement for your entire workflow (it's one tool in your toolkit)
-
-## 🏗️ Core Design Principles
-
-### 1. Privacy First
-
-**Principle**: User data and research should stay under user control by default.
-
-**In Practice**:
-- Self-hosted deployment is the primary use case
-- No telemetry or analytics without explicit opt-in
-- No hard dependency on specific cloud services
-- Clear documentation on what data goes where
-
-**Example Decisions**:
-- ✅ Support for local Ollama models
-- ✅ Configurable AI provider selection
-- ❌ Hard-coded cloud service integrations
-- ❌ Required external service dependencies
-
-### 2. Simplicity Over Features
-
-**Principle**: The tool should be easy to understand and use, even if it means fewer features.
-
-**In Practice**:
-- Clear, focused UI with well-defined sections
-- Sensible defaults that work for most users
-- Advanced features hidden behind optional configuration
-- Documentation written for non-technical users
-
-**Example Decisions**:
-- ✅ Three-column layout (Sources, Notes, Chat)
-- ✅ Default models that work out of the box
-- ❌ Overwhelming users with too many options upfront
-- ❌ Complex multi-step workflows for basic tasks
-
-### 3. API-First Architecture
-
-**Principle**: All functionality should be accessible via API, not just the UI.
-
-**In Practice**:
-- UI calls the same API that external clients use
-- Comprehensive REST API with OpenAPI documentation
-- No "UI-only" features that can't be automated
-- Clear separation between frontend and backend
-
-**Example Decisions**:
-- ✅ FastAPI backend with full API documentation
-- ✅ Consistent API patterns across all endpoints
-- ❌ Business logic in UI components
-- ❌ Features that require direct database access
-
-### 4. Multi-Provider Flexibility
-
-**Principle**: Users should never be locked into a single AI provider.
-
-**In Practice**:
-- Support for multiple AI providers through Esperanto library
-- Easy switching between providers and models
-- Clear documentation on provider limitations
-- Graceful degradation when providers are unavailable
-
-**Example Decisions**:
-- ✅ Support for 18+ AI providers
-- ✅ Per-feature model selection (chat, embeddings, TTS)
-- ❌ Features that only work with OpenAI
-- ❌ Hard-coded API endpoints for specific providers
-
-### 5. Extensibility Through Standards
-
-**Principle**: The system should be extensible through well-defined interfaces, not by forking.
-
-**In Practice**:
-- Plugin systems for transformations and commands
-- Standard data formats (JSON, Markdown)
-- Clear extension points in the architecture
-- Documentation for common customization scenarios
-
-**Example Decisions**:
-- ✅ Custom transformation templates
-- ✅ Background command system
-- ✅ Jinja2 prompt templates
-- ❌ Hard-coded business logic without extension points
-
-### 6. Async-First for Performance
-
-**Principle**: Long-running operations should not block the user interface or API.
-
-**In Practice**:
-- Async/await patterns throughout the backend
-- Background job processing for heavy workloads
-- Status updates and progress tracking
-- Graceful handling of slow AI provider responses
-
-**Example Decisions**:
-- ✅ AsyncIO for database operations
-- ✅ Background commands for podcast generation
-- ✅ Streaming responses for chat
-- ❌ Synchronous blocking operations in API endpoints
+> **Looking for the product vision?** What Open Notebook is (and is not), the durable product
+> principles, and the current posture live in **[VISION.md](../../VISION.md)** — read that first.
+> The reasoning behind past structural choices lives in the
+> **[decision records](decisions/README.md)**.
 
 ## 🎨 UI/UX Principles
 
@@ -189,15 +73,8 @@ Open Notebook aims to be a **privacy-focused, self-hosted alternative to Google'
 - Building features for edge cases before common cases work well
 - Trying to be everything to everyone
 
-**Why we avoid it**:
-- Increases complexity and maintenance burden
-- Makes the tool harder to learn and use
-- Dilutes the core value proposition
-
-**Instead**:
-- Focus on core use cases
-- Say no to features that don't align with vision
-- Build extensibility points for edge cases
+**Instead**: Focus on core use cases; say no to features that don't align with the
+[vision](../../VISION.md); build extensibility points for edge cases.
 
 ### Premature Optimization
 
@@ -206,15 +83,8 @@ Open Notebook aims to be a **privacy-focused, self-hosted alternative to Google'
 - Complex caching strategies without measuring impact
 - Trading code clarity for marginal performance gains
 
-**Why we avoid it**:
-- Makes code harder to understand and maintain
-- Optimizes the wrong things
-- Wastes development time
-
-**Instead**:
-- Measure first, optimize second
-- Focus on algorithmic improvements
-- Profile before making performance changes
+**Instead**: Measure first, optimize second; focus on algorithmic improvements; profile before
+making performance changes.
 
 ### Over-Engineering
 
@@ -223,15 +93,8 @@ Open Notebook aims to be a **privacy-focused, self-hosted alternative to Google'
 - Implementing design patterns for 3-line functions
 - Creating frameworks instead of solving problems
 
-**Why we avoid it**:
-- Increases cognitive load for contributors
-- Makes simple changes require touching many files
-- Hides the actual business logic
-
-**Instead**:
-- Start simple, refactor when patterns emerge
-- Optimize for readability and clarity
-- Use abstractions when they simplify, not complicate
+**Instead**: Start simple, refactor when patterns emerge; optimize for readability; use
+abstractions when they simplify, not complicate.
 
 ### Breaking Changes Without Migration Path
 
@@ -240,15 +103,8 @@ Open Notebook aims to be a **privacy-focused, self-hosted alternative to Google'
 - Modifying API contracts without versioning
 - Removing features without deprecation warnings
 
-**Why we avoid it**:
-- Breaks existing installations
-- Frustrates users and contributors
-- Creates maintenance nightmares
-
-**Instead**:
-- Always provide migration scripts for schema changes
-- Deprecate before removing
-- Document breaking changes clearly
+**Instead**: Always provide migration scripts for schema changes; deprecate before removing;
+document breaking changes clearly.
 
 ## 🤝 Decision-Making Framework
 
@@ -257,7 +113,7 @@ When evaluating new features or changes, ask:
 ### 1. Does it align with our vision?
 - Does it help users own their research data?
 - Does it support privacy and self-hosting?
-- Does it fit our core use cases?
+- Does it fit our core use cases? (See [VISION.md](../../VISION.md))
 
 ### 2. Does it follow our principles?
 - Is it simple to use and understand?
@@ -282,56 +138,9 @@ When evaluating new features or changes, ask:
 - Can this be built as a plugin or extension?
 - Should this be a separate tool instead?
 
-## 📚 Examples of Principle-Driven Decisions
-
-### Why we migrated from Streamlit to Next.js
-
-**Principle**: API-First Architecture
-
-**Reasoning**:
-- Streamlit coupled UI and backend logic
-- Difficult to build external integrations
-- Limited control over API behavior
-- Next.js + FastAPI provides clear separation
-
-### Why we use Esperanto for AI providers
-
-**Principle**: Multi-Provider Flexibility
-
-**Reasoning**:
-- Abstracts provider-specific details
-- Easy to add new providers
-- Consistent interface across providers
-- No vendor lock-in
-
-### Why we have a Background Command System
-
-**Principle**: Async-First for Performance
-
-**Reasoning**:
-- Podcast generation takes minutes
-- Users shouldn't wait for long operations
-- Need status tracking and error handling
-- Supports future batch operations
-
-### Why we support Local Ollama
-
-**Principle**: Privacy First
-
-**Reasoning**:
-- Enables fully offline operation
-- No data sent to external services
-- Free for users after hardware cost
-- Aligns with self-hosted philosophy
-
-## 🔄 Evolution of Principles
-
-These principles are not set in stone. As the project grows and we learn from users, some principles may evolve. However, changes to core principles should be:
-
-1. **Well-justified** - Clear reasoning for why the change is needed
-2. **Discussed openly** - Community input on major changes
-3. **Documented** - Updated in this document with explanation
-4. **Gradual** - Not implemented as breaking changes when possible
+**When a decision resolves a structural question** — architecture or product — capture it as a
+[decision record](decisions/README.md) in the same PR. Half a page, written while the context is
+still loaded.
 
 ---
 
@@ -339,12 +148,14 @@ These principles are not set in stone. As the project grows and we learn from us
 
 When proposing a feature or change:
 
-1. **Reference these principles** - Explain how your proposal aligns
-2. **Identify trade-offs** - Be honest about what you're trading for what
-3. **Suggest alternatives** - Show you've considered other approaches
-4. **Be open to feedback** - Maintainers may see concerns you don't
+1. **Reference the vision and principles** — explain how your proposal aligns with
+   [VISION.md](../../VISION.md)
+2. **Identify trade-offs** — be honest about what you're trading for what
+3. **Suggest alternatives** — show you've considered other approaches
+4. **Be open to feedback** — maintainers may see concerns you don't
 
-**Remember**: A "no" to a feature isn't a judgment on you or your idea. It means we're staying focused on our core vision. We appreciate all contributions and ideas!
+**Remember**: A "no" to a feature isn't a judgment on you or your idea. It means we're staying
+focused on our core vision. We appreciate all contributions and ideas!
 
 ---
 
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index 6a537bef..58303d31 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -200,16 +200,27 @@ After setup, verify everything is working:
 - [ ] **Database**: API logs show migrations completing
 - [ ] **Frontend** (optional): `http://localhost:3000` loads
 
+## Development Workflows: When to Use What?
+
+| Workflow | Use Case | Speed | Production Parity |
+|----------|----------|-------|-------------------|
+| **Local Services** (`make start-all`) | Day-to-day development, fastest iteration | ⚡⚡⚡ Fast | Medium |
+| **Docker Compose** (`make dev`) | Testing containerized setup | ⚡⚡ Medium | High |
+| **Local Docker Build** (`make docker-build-local`) | Testing Dockerfile changes | ⚡ Slow | Very High |
+| **Multi-platform Build** (`make docker-push`) | Publishing releases (see [Release Process](../../.github/RELEASE_PROCESS.md)) | 🐌 Very Slow | Exact |
+
+Local services give hot reload, direct log access and easy debugging; Docker Compose (`examples/docker-compose-dev.yml` via `make dev`, `examples/docker-compose-full-local.yml` via `make full`) is closer to production. Use `make docker-build-local` before touching anything Docker-related in a PR.
+
 ## Starting Services Together
 
 ### Quick Start All Services
 
 ```bash
-make start-all
+make start-all    # SurrealDB + API + worker + frontend
+make status       # see what's running
+make stop-all     # stop everything
 ```
 
-This starts SurrealDB, API, and frontend in one command.
-
 ### Individual Terminals (Recommended for Development)
 
 **Terminal 1 - Database:**
@@ -222,11 +233,24 @@ make database
 make api
 ```
 
-**Terminal 3 - Frontend:**
+**Terminal 3 - Background worker** (required for podcasts, embeddings, source processing):
+```bash
+make worker-start
+```
+
+**Terminal 4 - Frontend:**
 ```bash
 cd frontend && npm run dev
 ```
 
+### Performance Tips
+
+1. Use `make start-all` instead of Docker for daily work
+2. Keep SurrealDB running between sessions (`make database`)
+3. Use `make docker-build-local` only when testing Dockerfile changes
+4. Skip multi-platform builds until ready to publish
+5. Clean caches when things get weird: `make clean-cache`, `docker system prune -a`
+
 ## Development Tools Setup
 
 ### Pre-commit Hooks (Optional but Recommended)
diff --git a/docs/7-DEVELOPMENT/frontend.md b/docs/7-DEVELOPMENT/frontend.md
new file mode 100644
index 00000000..b05aa799
--- /dev/null
+++ b/docs/7-DEVELOPMENT/frontend.md
@@ -0,0 +1,45 @@
+# Frontend Architecture
+
+How the Next.js app is layered and how data flows through it. Normative rules (commands, i18n, gotchas) live in [`frontend/AGENTS.md`](../../frontend/AGENTS.md); this page is the mental model.
+
+## Layers
+
+```
+Pages (src/app/, App Router) → Feature components (src/components/) → Hooks (src/lib/hooks/)
+                                                                          ↓
+                              Stores (src/lib/stores/) → API modules (src/lib/api/) → Backend
+```
+
+- **Pages** — route endpoints. Router groups `(auth)` / `(dashboard)` organize routes without affecting URLs. Pages call hooks and render components.
+- **Components** — feature folders (`source/`, `notebooks/`, `podcasts/`, …) own page-level state (loading, error); `components/ui/` are stateless Radix UI wrappers styled with Tailwind + CVA.
+- **Hooks** (`src/lib/hooks/`) — TanStack Query wrappers. Query hooks return `{ data, isLoading, error, refetch }`; mutation hooks invalidate caches and toast. Complex hooks (`useNotebookChat`, `useAsk`) add session management, context building, SSE streaming.
+- **Stores** (`src/lib/stores/`) — Zustand for auth and modal state; `persist` middleware syncs to localStorage (auth token under `auth-storage`).
+- **API modules** (`src/lib/api/`) — namespaced typed clients (`sourcesApi.list()`, …) over a single axios instance with auth/FormData/401 interceptors.
+
+Provider tree in `app/layout.tsx` (outermost → innermost): ErrorBoundary → ThemeProvider → QueryProvider → I18nProvider → ConnectionGuard → Toaster.
+
+## Flow walkthrough: notebook chat
+
+1. `notebooks/[id]/page.tsx` passes `notebookId` to `ChatColumn`.
+2. `useNotebookChat()` queries sessions, manages message state, returns `{ messages, sendMessage(), setModelOverride() }`.
+3. On send: `buildContext()` assembles selected sources/notes (token/char counts), calls `chatApi.sendMessage()`, and applies an **optimistic update** (message added locally, removed on error).
+4. Response updates the TanStack Query cache; related source/note mutations elsewhere invalidate broadly so stale UI refreshes.
+5. Model override before a session exists is stored as pending and applied on session creation.
+
+## Flow walkthrough: file upload
+
+1. `SourceDialog` collects the file; `useFileUpload` builds FormData — nested JSON fields are stringified.
+2. The client interceptor deletes the Content-Type header so the browser sets the multipart boundary.
+3. On success, `queryClient.invalidateQueries(['sources'])` refetches lists; `useSourceStatus` polls every 2s while the source is processing.
+
+## Caching strategy
+
+Query keys are hierarchical (`QUERY_KEYS.sources(notebookId)`), but invalidation is deliberately **broad** (`['sources']` catches everything) — a precision/simplicity trade-off. Frequently changing data uses `refetchOnWindowFocus: true`.
+
+## Auth
+
+The token is validated by an actual API call (`/notebooks`), not JWT decoding, with a 30-second cache in the auth store. The response interceptor clears auth and redirects to `/login` on 401. Logout is client-side only.
+
+## Error handling
+
+`getApiErrorMessage()` (`lib/utils/error-handler.ts`) tries an i18n mapping first, then falls back to the backend's descriptive message — which the backend error-classification system already makes user-friendly (see [architecture.md](architecture.md)). Mutations surface errors as toasts; an app-level ErrorBoundary catches render errors.
diff --git a/docs/7-DEVELOPMENT/index.md b/docs/7-DEVELOPMENT/index.md
index 5e5f9a95..d4a1eae4 100644
--- a/docs/7-DEVELOPMENT/index.md
+++ b/docs/7-DEVELOPMENT/index.md
@@ -33,7 +33,20 @@ Start with **[Contributing Guide](contributing.md)** for the workflow, then chec
 - Key components and workflows
 - Design patterns we use
 
-For deeper dives, check `/open_notebook/` CLAUDE.md for component-specific guidance.
+For deeper dives into specific subsystems:
+- **[Credentials](credentials.md)** - Provider credential storage, encryption, provisioning
+- **[Content Processing](content-processing.md)** - Chunking, embedding, context building, encryption
+- **[Podcasts](podcasts.md)** - Profile system, model registry, job lifecycle
+- **[Prompts](prompts.md)** - Prompt engineering patterns
+- **[Frontend](frontend.md)** - Next.js layers and data flows
+
+Normative rules for coding agents (and humans in a hurry) live in the `AGENTS.md` files at the
+repo root, `open_notebook/`, and `frontend/`.
+
+### 🧭 Why Is It Like This?
+
+- **[VISION.md](../../VISION.md)** - Product identity and current posture
+- **[Decision Records](decisions/README.md)** - ADRs and PDRs: the durable "why" behind structural choices
 
 ---
 
@@ -57,10 +70,18 @@ For deeper dives, check `/open_notebook/` CLAUDE.md for component-specific guida
 | [Code Standards](code-standards.md) | Writing code | Style guides for Python, FastAPI, DB |
 | [Testing](testing.md) | Testing code | How to write and run tests |
 | [Architecture](architecture.md) | Understanding system | System design, tech stack, workflows |
-| [Design Principles](design-principles.md) | All developers | What guides our decisions |
+| [Credentials](credentials.md) | Understanding system | Provider credential subsystem |
+| [Content Processing](content-processing.md) | Understanding system | Chunking, embedding, context building |
+| [Podcasts](podcasts.md) | Understanding system | Podcast profiles and job lifecycle |
+| [Prompts](prompts.md) | Understanding system | Prompt engineering patterns |
+| [Frontend](frontend.md) | Understanding system | Next.js architecture and data flows |
+| [Design Principles](design-principles.md) | All developers | Engineering practices and anti-patterns |
+| [VISION.md](../../VISION.md) | All developers | Product identity and current posture |
+| [Decision Records](decisions/README.md) | All developers | ADRs/PDRs — why things are the way they are |
+| [Change Playbooks](change-playbooks.md) | Contributors & agents | Step-by-step recipes for common changes |
 | [API Reference](api-reference.md) | Building integrations | Complete REST API documentation |
 | [Security](security.md) | All developers | Security practices and vulnerability prevention |
-| [Maintainer Guide](maintainer-guide.md) | Maintainers | Managing issues, PRs, releases |
+| [Maintainer Guide](maintainer-guide.md) | Maintainers | Managing issues, PRs, labels |
 
 ---
 
diff --git a/docs/7-DEVELOPMENT/maintainer-guide.md b/docs/7-DEVELOPMENT/maintainer-guide.md
index 6fd94fed..8f6f9d1d 100644
--- a/docs/7-DEVELOPMENT/maintainer-guide.md
+++ b/docs/7-DEVELOPMENT/maintainer-guide.md
@@ -15,15 +15,12 @@ This guide is for project maintainers to help manage contributions effectively w
 
 **1. Initial Triage** (within 24-48 hours)
 
-- Add appropriate labels:
-  - `bug`, `enhancement`, `documentation`, etc.
-  - `good first issue` for beginner-friendly tasks
-  - `needs-triage` until reviewed
-  - `help wanted` if you'd welcome community contributions
+- Issues arrive with the intake label `needs-triage` (applied by the issue templates). Triage replaces it with exactly **one state label** from the funnel below (or closes the issue).
+- Add one **type** and one **area** label where they apply (see [Labels](#labels)).
 
 - Quick assessment:
   - Is it clear and well-described?
-  - Is it aligned with project vision? (See [design-principles.md](design-principles.md))
+  - Is it aligned with the product vision? (See [VISION.md](../../VISION.md))
   - Does it duplicate an existing issue?
 
 **2. Initial Response**
@@ -33,13 +30,13 @@ Thanks for opening this issue! We'll review it and get back to you soon.
 
 [If it's a bug] In the meantime, have you checked our troubleshooting guide?
 
-[If it's a feature] You might find our [design principles](design-principles.md) helpful for understanding what we're building toward.
+[If it's a feature] You might find our [vision](https://github.com/lfnovo/open-notebook/blob/main/VISION.md) helpful for understanding what we're building toward.
 ```
 
 **3. Decision Making**
 
 Ask yourself:
-- Does this align with our [design principles](design-principles.md)?
+- Does this align with our [vision and principles](../../VISION.md)?
 - Is this something we want in the core project, or better as a plugin/extension?
 - Do we have the capacity to support this feature long-term?
 - Will this benefit most users, or just a specific use case?
@@ -55,7 +52,7 @@ Great idea! This aligns well with our goals, particularly [specific design princ
 I see you'd like to work on this. Before you start:
 
 1. Please share your proposed approach/solution
-2. Review our [Contributing Guide](contributing.md) and [Design Principles](design-principles.md)
+2. Review our [Contributing Guide](contributing.md) and [VISION.md](../../VISION.md)
 3. Once we agree on the approach, I'll assign this to you
 
 Looking forward to your thoughts!
@@ -75,40 +72,70 @@ Once we have these details, we can discuss the best approach.
 ```markdown
 Thank you for the suggestion and for offering to work on this!
 
-After reviewing against our [design principles](design-principles.md), we've decided not to pursue this in the core project because [specific reason].
+After reviewing against our [vision and principles](https://github.com/lfnovo/open-notebook/blob/main/VISION.md), we've decided not to pursue this in the core project because [specific reason].
 
 However, you might be able to achieve this through [alternative approach, if applicable].
 
-We appreciate your interest in contributing! Feel free to check out our [open issues](link) for other ways to contribute.
+We appreciate your interest in contributing! Feel free to check out our [open issues](https://github.com/lfnovo/open-notebook/issues) for other ways to contribute.
 ```
 
-### Labels to Use
+### Labels
 
-**Priority:**
-- `priority: critical` - Security issues, data loss bugs
-- `priority: high` - Major functionality broken
-- `priority: medium` - Annoying bugs, useful features
-- `priority: low` - Nice to have, edge cases
+The label set is curated — **don't invent labels**. If something doesn't fit, raise it instead of adding one. Assign **one state**, **one type**, and **one area** where each applies; multiple bundling/ecosystem labels are fine.
 
-**Status:**
-- `needs-triage` - Not yet reviewed by maintainer
-- `needs-info` - Waiting for more information from reporter
-- `needs-discussion` - Requires community/team discussion
-- `ready` - Approved and ready to be worked on
-- `in-progress` - Someone is actively working on this
-- `blocked` - Cannot proceed due to external dependency
+**State funnel** — every open issue lands in exactly one state:
 
-**Type:**
-- `bug` - Something is broken
-- `enhancement` - New feature or improvement
-- `documentation` - Documentation improvements
-- `question` - General questions
-- `refactor` - Code cleanup/restructuring
+| Label | Meaning |
+|---|---|
+| `needs-triage` | Intake — applied by the issue templates, means "not triaged yet" |
+| `needs-vision` | Unsure if/how this fits — strategic call for the maintainers (against [VISION.md](../../VISION.md)) |
+| `needs-design` | Wanted, but the *how* isn't resolved — needs design/spec before it's ready |
+| `needs-info` | Waiting on the reporter to confirm or provide more information |
+| `ready` | Fully specified — the dev loop can pick it up |
+| **Close** | Use GitHub's native close reasons (duplicate / not planned); link the canonical issue when duplicate/superseded |
 
-**Difficulty:**
-- `good first issue` - Good for newcomers
-- `help wanted` - Community contributions welcome
-- `advanced` - Requires deep codebase knowledge
+**Type** — what kind of work it is (apply one when clear):
+- `bug` · `enhancement` · `documentation`
+- `installation` is an intake label applied by the issue-creation workflow (not by triage); installation reports get routed to `area: deploy`.
+
+**Area** — which part of the system (apply always, one per issue):
+
+| Label | What goes here |
+|---|---|
+| `area: chat` | Conversation/chat, RAG retrieval, agentic responses, citations |
+| `area: search` | Full-text and semantic search |
+| `area: sources` | Source ingestion & processing (URLs, files, extraction, chunking) |
+| `area: notebooks` | Notebook features: notes, insights, transformations |
+| `area: providers` | AI provider integrations + model configuration |
+| `area: embeddings` | Embedding models, vectorization, semantic indexing |
+| `area: podcast` | Podcast / audio generation |
+| `area: database` | SurrealDB, persistence, schema, migrations |
+| `area: ui` | Frontend (Next.js), UX, visual issues |
+| `area: deploy` | Docker, deployment, k8s, reverse proxy, infra/setup |
+| `area: offline` | Airgapped/offline operation |
+| `area: i18n` | Internationalization / localization |
+
+**Bundling / epics:**
+- `umbrella` — a tracking issue grouping related work
+- `tracked-in-umbrella` — covered by an umbrella; follow the umbrella for progress
+- `bundled` — part of a thematic bundle
+- `upstream` — root cause lives in one of our libraries, not this repo
+
+**Ecosystem** — issues whose real home is an upstream library:
+- `esperanto` (model abstraction) · `content-core` (content extraction) · `podcast-creator` (podcast generation)
+
+**Community:**
+- `good first issue` — small, well-scoped, newcomer-friendly
+- `help wanted` — we'd welcome a contributor to take this
+
+### Consolidation: one issue vs. umbrella
+
+When several open issues circle the same topic, pick the model by **how decided the work is** — not just by shared theme:
+
+- **Pre-vision / pre-design topic** → collapse into **one** issue (`needs-vision` or `needs-design`), capture each request's signal (👍 counts, interested contributors) in its body, and close the rest as duplicates pointing to it. A topic isn't N issues — it's one thinking space.
+- **Already decomposed into real parallel tasks** → use `umbrella` + `tracked-in-umbrella`. Children stay open because each is independently pickable (e.g. the multi-user umbrella #712).
+
+Rule of thumb: if the issues can't be worked until *we* make a call, they're one issue. If the call is made and the work splits into things a contributor could pick up today, they're an umbrella with children. **Never close an issue that has an active assignee/contributor or open PR** — link it as a phase instead.
 
 ## Pull Request Review
 
@@ -123,7 +150,7 @@ We appreciate your interest in contributing! Feel free to check out our [open is
 - [ ] Are there tests? Screenshots (for UI changes)?
 
 **Red Flags** (may require closing PR):
-- No associated issue
+- No associated issue on a non-trivial change (small obvious fixes are exempt; sizeable PRs can be converted to draft while their issue goes through triage)
 - Issue was not assigned to contributor
 - PR tries to solve multiple unrelated problems
 - Breaking changes without discussion
@@ -247,7 +274,7 @@ Sorry for the inconvenience - this process helps us manage the project effective
 ```markdown
 Thank you for this suggestion! I can see how this would be useful for [specific use case].
 
-After reviewing against our [design principles](design-principles.md), we've decided not to include this in the core project because [specific reason - e.g., "it conflicts with our 'Simplicity Over Features' principle" or "it would require dependencies that conflict with our privacy-first approach"].
+After reviewing against our [vision and principles](https://github.com/lfnovo/open-notebook/blob/main/VISION.md), we've decided not to include this in the core project because [specific reason - e.g., "it conflicts with our 'Simplicity Over Features' principle" or "it would require dependencies that conflict with our privacy-first approach"].
 
 Some alternatives:
 - [If applicable] This could be built as a plugin/extension
@@ -313,7 +340,7 @@ Thank you for taking the time to contribute! We really appreciate it.
 
 After careful review, we've decided not to merge this PR because [specific reason related to design principles].
 
-This isn't a reflection on your code quality - it's about maintaining focus on our core goals as outlined in [design-principles.md](design-principles.md).
+This isn't a reflection on your code quality - it's about maintaining focus on our core goals as outlined in [VISION.md](https://github.com/lfnovo/open-notebook/blob/main/VISION.md).
 
 We'd love to have you contribute in other ways! Check out:
 - Good first issues
@@ -392,7 +419,7 @@ This will be included in the next release.
 ## When in Doubt
 
 Ask yourself:
-1. Does this align with our [design principles](design-principles.md)?
+1. Does this align with our [vision and principles](../../VISION.md)?
 2. Will we be able to maintain this feature long-term?
 3. Does this benefit most users, or just an edge case?
 4. Is there a simpler alternative?
diff --git a/docs/7-DEVELOPMENT/podcasts.md b/docs/7-DEVELOPMENT/podcasts.md
new file mode 100644
index 00000000..520324ff
--- /dev/null
+++ b/docs/7-DEVELOPMENT/podcasts.md
@@ -0,0 +1,28 @@
+# Podcast Subsystem
+
+How podcast generation is modeled and executed: the two-tier profile system, the model-registry references, and the deliberate no-auto-retry policy.
+
+## Two-tier profile system (`open_notebook/podcasts/models.py`)
+
+- **SpeakerProfile** — voice configuration: a `voice_model` (`record<model>` reference for TTS) plus 1–4 speakers (name, voice_id, backstory, personality). Individual speakers can override the profile's `voice_model`.
+- **EpisodeProfile** — generation settings: `outline_llm` / `transcript_llm` (`record<model>` references), `language` (BCP 47, e.g. `pt-BR`), segment count (3–20), briefing template. It references a SpeakerProfile by name.
+- **PodcastEpisode** — a generated episode. Links content, profiles and the async job (`command` field → surreal-commands RecordID).
+
+## Model registry references, not strings
+
+Profile fields reference `Model` records instead of raw provider/model strings. At generation time `_resolve_model_config(model_id)` loads the Model, resolves its linked credential (or falls back to `provision_provider_keys()`), and returns `(provider, model_name, config)` for podcast-creator. Legacy string fields (`tts_provider`, `outline_provider`, …) still exist as nullable columns for migration compatibility but are **ignored at runtime**.
+
+`migration.py` converts legacy profiles on API startup (after SQL migrations): idempotent, skips already-migrated profiles, and auto-creates a Model record when a legacy string has no match but a credential exists for that provider.
+
+## Profile snapshots
+
+`PodcastEpisode` stores `episode_profile` and `speaker_profile` as **dicts (snapshots)**, not references. Editing a profile never retroactively changes past episodes — that's intentional. Corollary: deleting a profile does not cascade to episodes.
+
+## Job lifecycle and the retry policy
+
+Generation runs as a `generate_podcast_command` job on the surreal-commands worker:
+
+- The command resolves model configs and credentials for **all** profiles before invoking podcast-creator, and validates that `outline_llm`, `transcript_llm` and `voice_model` are set.
+- **`max_attempts: 1` — no automatic retries.** A mid-generation retry would create duplicate episode records (records are created during execution). Failed episodes are marked `failed` with an error message; retry is explicitly user-initiated via `POST /podcasts/episodes/{id}/retry`.
+- Status tracking: `get_job_status()` / `get_job_detail()` query surreal-commands and return `"unknown"` on failure rather than raising. Listing endpoints use the batched `get_job_details_for_commands()` so N episodes cost one status query, not N.
+- TTS failures fall back to silent audio rather than failing the episode.
diff --git a/docs/7-DEVELOPMENT/prompts.md b/docs/7-DEVELOPMENT/prompts.md
new file mode 100644
index 00000000..b72b2773
--- /dev/null
+++ b/docs/7-DEVELOPMENT/prompts.md
@@ -0,0 +1,53 @@
+# Prompt Engineering
+
+How prompts are organized and the patterns they use. All prompts are Jinja2 templates under `prompts/`, rendered with the [ai-prompter](https://github.com/lfnovo/ai-prompter) library — prompt engineering lives in templates, not Python.
+
+## Layout & rendering
+
+Templates are grouped by workflow — `ask/`, `chat/`, `source_chat/`, `podcast/` — and referenced by path without extension:
+
+```python
+from ai_prompter import Prompter
+prompt = Prompter(prompt_template="ask/entry", parser=parser).render(data=state)
+```
+
+Mechanical rules (path syntax, `data=` key matching, parser injection, no inheritance, cache → restart) are in [`open_notebook/AGENTS.md`](../../open_notebook/AGENTS.md). This page covers the *patterns*.
+
+## Pattern: multi-stage chain (ask workflow)
+
+The ask pipeline is three templates orchestrated by `graphs/ask.py`:
+
+```
+entry.jinja          user question → JSON search strategy (PydanticOutputParser)
+   ↓
+query_process.jinja  one search term + retrieved results → sub-answer (parallel, one per search)
+   ↓
+final_answer.jinja   all sub-answers → synthesized final response with citations
+```
+
+The stage boundaries let each prompt do one job well, and the JSON strategy output makes the fan-out deterministic.
+
+## Pattern: conditional variable injection
+
+Templates accept optional variables via Jinja conditionals, so one template serves several context shapes (podcast outline handles list or string context; source_chat injects optional notebook/insight data):
+
+```jinja
+{% if notebook %}
+# PROJECT INFORMATION
+{{ notebook }}
+{% endif %}
+```
+
+Watch the loose truthiness (`{% if var %}` is false for empty string/list) and the for-loop assumption (passing a string where a list is expected iterates character by character).
+
+## Pattern: repeated citation emphasis
+
+Response-generating templates (ask, chat) state the citation rules — `[source:id]`, `[note:id]`, `[insight:id]`, "do not make up document IDs" — **multiple times, with inline examples**. LLMs hallucinate citations without this; repetition + examples measurably reduces it. Keep the repetition when editing these templates.
+
+## Pattern: format-instructions delegation
+
+Templates expose an `{{ format_instructions }}` slot filled by the caller's OutputParser. Output format evolves in Python (Pydantic models) without touching the template. If the placeholder is missing, the parser is silently ignored — check for it when adding structured output.
+
+## Pattern: extended-thinking separation (podcast)
+
+Podcast templates instruct thinking models to keep reasoning inside `<think>` tags and emit the JSON after them; `clean_thinking_content()` strips the tags downstream. If a new template expects structured output from thinking-capable models, include the same instruction block.
diff --git a/docs/index.md b/docs/index.md
index 942c251c..cd871f57 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -172,7 +172,7 @@ Welcome to Open Notebook - a privacy-focused AI research assistant. This documen
 ### Path 3: DevOps/Deployment (1-2 hours)
 1. [1-INSTALLATION](1-INSTALLATION/index.md) — Understand routes
 2. [5-CONFIGURATION](5-CONFIGURATION/index.md) — Reference setup
-3. [7-DEVELOPMENT - Architecture](../7-DEVELOPMENT/architecture.md) — Understand system
+3. [7-DEVELOPMENT - Architecture](7-DEVELOPMENT/architecture.md) — Understand system
 
 **Result:** Ready to deploy to production
 
@@ -209,7 +209,7 @@ A: → [6-TROUBLESHOOTING](6-TROUBLESHOOTING/index.md) — Problem solver
 A: → [2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md) — Architecture and concepts
 
 **Q: Can I contribute?**
-A: → [7-DEVELOPMENT](../7-DEVELOPMENT/index.md) — Contributing guide
+A: → [7-DEVELOPMENT](7-DEVELOPMENT/index.md) — Contributing guide
 
 ---
 
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
new file mode 100644
index 00000000..9c914627
--- /dev/null
+++ b/frontend/AGENTS.md
@@ -0,0 +1,34 @@
+# Frontend Rules (frontend/)
+
+Normative rules for working on the Next.js frontend. Architecture and flow walkthroughs live in [docs/7-DEVELOPMENT/frontend.md](../docs/7-DEVELOPMENT/frontend.md) — this file is only what you must know before changing code. Project-wide rules are in the root [AGENTS.md](../AGENTS.md).
+
+## Commands (run inside `frontend/`)
+
+- Dev server: `npm run dev` (port 3000; API must be up at 5055 first)
+- Lint: `npm run lint` (`eslint src/`)
+- Tests: `npm run test` (`vitest run`) · coverage: `npm run test:coverage`
+- Build: `npm run build`
+
+## Hard rules
+
+- **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all 7 locales** (`en-US`, `pt-BR`, `zh-CN`, `zh-TW`, `ja-JP`, `ru-RU`, `bn-IN`) under `src/lib/locales/`. Missing keys fall back to en-US silently — keep locales in sync.
+- All requests go through `apiClient` (`src/lib/api/client.ts`); never create a second axios instance. Auth token is auto-added from localStorage key `auth-storage`.
+- Data fetching uses TanStack Query hooks in `src/lib/hooks/` with `QUERY_KEYS`; mutations invalidate caches and show toasts (sonner). Follow the existing hook shape.
+- FormData requests: nested objects/arrays must be `JSON.stringify`-ed before appending; the interceptor strips Content-Type so the browser sets the multipart boundary — don't re-add it.
+- No automatic request retry — handle failures in the consuming code (podcast retry is an explicit endpoint/hook, not a client retry).
+
+## Gotchas
+
+- Zustand stores with `persist`: check `hasHydrated` before rendering persisted state (SSR hydration mismatch), and keep each store's `name` key unique (localStorage collision).
+- `NEXT_PUBLIC_API_TIMEOUT_MS`: default 600000 (10 min) for slow LLM calls; `0` disables the timeout.
+- SSE (`useAsk`): incomplete lines stay in the buffer between reads; incomplete JSON is silently skipped — don't "simplify" the buffer handling.
+- `useSourceStatus` polls every 2s while status is `running`/`queued`/`new`.
+- Cache invalidation is deliberately broad (e.g. `['sources']` hits all source queries) — a simplicity/perf trade-off, be precise only when it matters.
+- Dark mode requires the `dark` class on the document root (next-themes), not just `prefers-color-scheme`.
+- Dialogs don't auto-reset form state (parent clears it) and auto-focus the first input (layout shift risk with conditional inputs). Fixed overlays use `z-50`.
+- Provider nesting order in `app/layout.tsx` matters: ErrorBoundary → ThemeProvider → QueryProvider → I18nProvider → ConnectionGuard → Toaster. ErrorBoundary is a class component and uses the raw `enUS` locale object (no hooks).
+- `i18n` runs with `useSuspense: false` (no SSR for translations).
+
+## Deep dives
+
+[frontend architecture](../docs/7-DEVELOPMENT/frontend.md) · [credentials system](../docs/7-DEVELOPMENT/credentials.md) · [change playbooks](../docs/7-DEVELOPMENT/change-playbooks.md) (i18n / frontend-only changes) · [code standards](../docs/7-DEVELOPMENT/code-standards.md)
diff --git a/frontend/CLAUDE.md b/frontend/CLAUDE.md
new file mode 100644
index 00000000..43c994c2
--- /dev/null
+++ b/frontend/CLAUDE.md
@@ -0,0 +1 @@
+@AGENTS.md
diff --git a/frontend/src/CLAUDE.md b/frontend/src/CLAUDE.md
deleted file mode 100644
index 2383003d..00000000
--- a/frontend/src/CLAUDE.md
+++ /dev/null
@@ -1,168 +0,0 @@
-# Frontend Architecture
-
-Next.js React application providing UI for Open Notebook research assistant. Three-layer architecture: **pages** (Next.js App Router), **components** (feature-specific UI), and **lib** (data fetching, state management, utilities).
-
-## High-Level Data Flow
-
-```
-Pages (Next.js) → Components (feature-specific) → Hooks (queries/mutations)
-                                                       ↓
-                          Stores (auth/modal state) → API module → Backend
-```
-
-User interactions trigger mutations/queries via hooks, which communicate with the backend through the API module. Store state (auth, modals) flows back to components via hooks. Child CLAUDE.md files document specific modules in detail:
-
-- **`lib/api/CLAUDE.md`**: Axios client, FormData handling, interceptors
-- **`lib/hooks/CLAUDE.md`**: TanStack Query wrappers, SSE streaming, context building
-- **`lib/stores/CLAUDE.md`**: Zustand auth/modal state, localStorage persistence
-- **`lib/locales/CLAUDE.md`**: Internationalization (i18n) system, translation files
-- **`components/ui/CLAUDE.md`**: Radix UI primitives, CVA styling, accessibility
-
-## Architectural Layers
-
-### Pages (`src/app/`) — Next.js App Router
-- `(auth)/login`: Authentication entry point
-- `(dashboard)/`: Protected routes (notebooks, sources, search, models, etc.)
-- Directory-based routing; each `page.tsx` is a route endpoint
-- **Key pattern**: Pages call hooks to fetch data, render components with state
-- **Router groups** `(auth)`, `(dashboard)` organize routes by feature without affecting URL
-
-### Components (`src/components/`) — Feature-Specific UI
-- **layout**: `AppShell.tsx`, `AppSidebar.tsx` — main layout wrapper used by all pages
-- **providers**: `ThemeProvider`, `QueryProvider`, `ModalProvider` — app-wide context setup
-- **auth**: `LoginForm.tsx` — authentication UI
-- **common**: `CommandPalette`, `ErrorBoundary`, `ContextToggle`, `ModelSelector` — shared across pages
-- **ui**: Reusable Radix UI building blocks (see child CLAUDE.md)
-- **source**, **notebooks**, **search**, **podcasts**: Feature-specific components consuming hooks
-
-**Component composition pattern**: Pages → Feature components → UI components. Feature components handle page-level state (loading, error), UI components remain stateless and styled.
-
-### Lib (`src/lib/`) — Data & State Layer
-
-#### `lib/api/` — Backend Communication
-- **`client.ts`**: Central Axios instance with auth interceptor, FormData handling, configurable request timeout (`NEXT_PUBLIC_API_TIMEOUT_MS`, default 10 min; `0` disables)
-- **`query-client.ts`**: TanStack Query configuration
-- **Resource modules** (`sources.ts`, `chat.ts`, `notebooks.ts`, etc.): Endpoint-specific functions returning typed responses
-- **Pattern**: All requests go through `apiClient`; auth token auto-added from localStorage
-
-#### `lib/hooks/` — React Query + Custom Logic
-- **Query hooks**: `useNotebookSources`, `useSources`, `useSource` — TanStack Query wrappers with cache keys
-- **Mutation hooks**: `useCreateSource`, `useUpdateSource`, `useDeleteSource` — mutations with toast feedback + cache invalidation
-- **Complex hooks**: `useNotebookChat`, `useSourceChat` — session management, message streaming, context building
-- **SSE streaming**: `useAsk` — parses newline-delimited JSON from backend for multi-stage workflows
-- **Pattern**: Hooks return `{ data, isLoading, error, refetch }` + action functions; cache invalidation on mutations
-
-#### `lib/stores/` — Application State
-- **`auth-store.ts`**: Authentication state (token, isAuthenticated) with 30-second check caching
-- **Zustand + persist middleware**: Auto-syncs sensitive state to localStorage
-- **Pattern**: Store actions (`login()`, `logout()`, `checkAuth()`) update state; consumed via hooks in components
-
-#### `lib/types/` — TypeScript Definitions
-- API request/response shapes, domain models (Notebook, Source, Note, etc.)
-- Ensures type safety across API calls and store mutations
-
-#### `lib/locales/` — Internationalization (i18n)
-- **Locale files** (`en-US/`, `pt-BR/`, `zh-CN/`, `zh-TW/`, `ja-JP/`): Translation strings organized by feature
-- **`i18n.ts`**: i18next configuration with language detection
-- **`use-translation.ts`**: Thin wrapper around react-i18next's `useTranslation` with language change events
-- **Pattern**: Components call `useTranslation()` hook; access strings via `t('common.save')`, `t('notebooks.title')`
-
-## Data & Control Flow Walkthrough
-
-### Example: Notebook Chat
-1. **Page** (`notebooks/[id]/page.tsx`) fetches initial data, passes `notebookId` to `ChatColumn` component
-2. **Hook call** (`useNotebookChat()`):
-   - Queries sessions for notebook via TanStack Query
-   - Sets up message state + context building logic
-   - Returns `{ messages, sendMessage(), setModelOverride() }`
-3. **Component renders**: `ChatColumn` displays messages, text input
-4. **User sends message**: Component calls `sendMessage()` hook
-5. **Hook execution**:
-   - Builds context from selected sources/notes via `buildContext()` helper
-   - Calls `chatApi.sendMessage()` (from API module)
-   - Client-side optimistic update: adds message to local state before response
-6. **Backend response** arrives, TanStack Query updates cache
-7. **Cache invalidation** on other source/note mutations ensures stale UI refreshes
-
-### Example: File Upload with Source Creation
-1. **Component** (`SourceDialog`) renders form with file picker
-2. **Hook** (`useFileUpload`):
-   - Converts file to FormData (JSON fields stringified)
-   - Calls `sourcesApi.create()` with FormData
-   - API client interceptor deletes Content-Type header (lets browser set multipart boundary)
-3. **Toast notifications** show progress
-4. **Cache invalidation** on success: `queryClient.invalidateQueries(['sources'])`
-5. **Related queries** auto-refetch: notebooks, sources list, etc.
-
-## Key Patterns & Cross-Layer Coordination
-
-### Caching & Invalidation
-- **Query keys**: `QUERY_KEYS.notebook(id)`, `QUERY_KEYS.sources(notebookId)` — hierarchical structure
-- **Broad invalidation**: `['sources']` invalidates all source queries; trade-off between accuracy + performance
-- **Auto-refetch**: `refetchOnWindowFocus: true` on frequently-changing data (sources, notebooks)
-
-### Auth & Protected Routes
-- **Proxy** (`src/proxy.ts`): Redirects root `/` to `/notebooks`
-- **Auth store**: Validates token via `/notebooks` API call (actual validation, not JWT decode)
-- **Interceptor**: Adds `Bearer {token}` to all requests; 401 response clears auth and redirects to login
-
-### Modal State Management
-- **Modal hooks**: Components query modal state from stores
-- **Context**: Modals pass data (e.g., notebook ID) to child components
-- **Pattern**: One store per modal type; triggered by button clicks + data passing via hook arguments
-
-### Error Handling
-- **API errors**: All request failures propagate to consuming code; components show toast notifications
-- **Error message resolution** (`lib/utils/error-handler.ts`): `getApiErrorMessage()` tries i18n mapping first via `ERROR_MAP`, then falls back to displaying the backend's descriptive error message directly. This ensures user-friendly error messages from the error classification system are shown as-is.
-- **Toast feedback**: Mutations show success/error toasts (from `sonner` library)
-- **Error boundary**: App-level error boundary catches React render errors; shows fallback UI
-
-### FormData Handling
-- **JSON fields**: Nested objects (arrays, objects) must be JSON stringified before FormData
-- **Content-Type header**: Removed by interceptor for FormData requests (lets browser set boundary)
-- **Example**: `sources` array converted to string via `JSON.stringify()` before appending to FormData
-
-## Component Organization Within Features
-
-- **Feature folders** (`source/`, `notebooks/`, `podcasts/`): Group related components
-- **Composition**: Larger components nest smaller ones; no deep prop drilling (state lifted to hooks)
-- **Dialog patterns**: Features define dialog components for inline actions (edit, create, delete)
-- **Props**: Components accept data + action callbacks from parent or hooks
-
-## Providers & Context Setup
-
-**Root layout** (`app/layout.tsx`) wraps app with (outermost → innermost):
-1. `ErrorBoundary` — React error boundary (catches all render errors)
-2. `ThemeProvider` — next-themes for light/dark mode
-3. `QueryProvider` — TanStack Query client
-4. `I18nProvider` — i18next initialization and language loading overlay
-5. `ConnectionGuard` — checks backend connectivity on startup
-6. `Toaster` — sonner toast notification system (inside ConnectionGuard)
-
-## Important Gotchas & Design Decisions
-
-- **Token storage**: Stored in localStorage under `auth-storage` key (Zustand persist); consumed by API interceptor
-- **Base URL discovery**: API client fetches base URL from runtime config on first request (async; can be slow on startup)
-- **Optimistic updates**: Chat messages added to state before server confirmation; removed on error
-- **Modal lifecycle**: Dialogs not auto-reset; parent must clear form state after submit
-- **Focus management**: Dialog auto-focuses first input; can cause layout shifts if inputs are conditional
-- **Cache invalidation breadth**: Trade-off between precision + simplicity; broad invalidation simpler but may over-fetch
-
-## How to Add a New Feature
-
-1. **Create page**: `app/(dashboard)/feature/page.tsx` — calls hooks, renders components
-2. **Create feature components**: `components/feature/` — compose UI + business logic
-3. **Add hooks** (if data needed): `lib/hooks/useFeature.ts` — TanStack Query wrapper
-4. **Add API module** (if backend call needed): `lib/api/feature.ts` — resource-specific functions
-5. **Add types**: `lib/types/api.ts` — request/response shapes
-6. **Use UI components**: Import from `components/ui/` for consistent styling
-7. **Handle auth**: Middleware redirects unauthenticated users; no special handling needed in component
-
-## Testing
-
-- **Hooks**: Mock API functions, wrap in `QueryClientProvider`, assert query/mutation behavior
-- **Components**: Mock hooks via `vi.fn()`, test rendering + user interactions
-- **API calls**: Mock `axios` interceptors; test request/response shapes
-- **Stores**: Mock store state, test mutations via `act()`, assert state changes
-
-See child CLAUDE.md files for module-specific testing patterns.
diff --git a/frontend/src/components/ui/CLAUDE.md b/frontend/src/components/ui/CLAUDE.md
deleted file mode 100644
index ff45b175..00000000
--- a/frontend/src/components/ui/CLAUDE.md
+++ /dev/null
@@ -1,64 +0,0 @@
-# UI Components Module
-
-Radix UI-based accessible component library with CVA styling, composed building blocks, and theming support.
-
-## Key Components
-
-- **Primitives** (`button.tsx`, `dialog.tsx`, `select.tsx`, `dropdown-menu.tsx`): Radix UI wrappers with Tailwind styling
-- **Composite components** (`checkbox-list.tsx`, `wizard-container.tsx`, `command.tsx`): Multi-part patterns combining primitives
-- **Form components** (`input.tsx`, `textarea.tsx`, `label.tsx`, `form-section.tsx`): Input handling with accessibility
-- **Feedback** (`alert.tsx`, `alert-dialog.tsx`, `sonner.tsx`, `progress.tsx`): User notifications and status
-- **Layout** (`card.tsx`, `accordion.tsx`, `tabs.tsx`, `scroll-area.tsx`): Structural wrappers
-- **Utilities** (`badge.tsx`, `separator.tsx`, `tooltip.tsx`, `popover.tsx`, `collapsible.tsx`): Small focused components
-
-## Important Patterns
-
-- **Radix UI wrappers**: Components delegate to Radix primitives; apply Tailwind classes via `cn()` utility
-- **CVA (Class Variance Authority)**: `button.tsx` and similar use CVA for variant/size combinations
-- **Composition via Slot**: `Button` uses `asChild` prop + `Slot` from radix to render as any element type
-- **Data slots**: All components have `data-slot` attributes for testing/styling isolation
-- **Controlled styling**: Classes hardcoded in components; use `className` prop to override/extend
-- **Animations**: Radix `data-[state]` selectors for open/close animations (fade-in, zoom-in)
-- **Accessibility first**: ARIA attributes from Radix (aria-invalid, sr-only labels, focus rings)
-- **Dark mode support**: Uses Tailwind dark: prefix for color scheme (e.g., `dark:border-input`)
-
-## Key Dependencies
-
-- `@radix-ui/*`: Unstyled accessible primitives (dialog, select, dropdown-menu, etc.)
-- `class-variance-authority`: CVA for variant patterns
-- `lucide-react`: Icon library (XIcon in dialog close button)
-- `@/lib/utils`: `cn()` utility for class merging
-
-## How to Add New Components
-
-1. Create `.tsx` file wrapping Radix primitive or composing existing components
-2. Add `data-slot="component-name"` to root element
-3. Use `cn()` to merge default classes with `className` prop
-4. Export both component and variants (if using CVA)
-5. Document prop shape and usage in JSDoc
-
-## Important Quirks & Gotchas
-
-- **Slot forwarding**: `asChild={true}` on Button passes all props to child; ensure child accepts them
-- **FormData in dialogs**: Dialog not reset automatically; parent must manually clear form state
-- **Focus management**: Dialog auto-focuses first input; can cause layout shifts if inputs conditionally rendered
-- **Z-index stacking**: Fixed elements (Dialog overlay, dropdown menus) use z-50; be careful with other fixed elements
-- **Click outside closes dropdown**: Radix dropdowns auto-close on outside click; may conflict with hover-triggered actions
-- **SVG size inference**: Button uses `[&_svg:not([class*='size-'])]:size-4` to default unlabeled icons to 4x4; be explicit if different size needed
-- **CSS-in-JS conflicts**: Hardcoded Tailwind classes may conflict with global CSS; specificity matters
-- **Dark mode class**: Requires `dark` class on document root; not automatic with prefers-color-scheme alone
-
-## Testing Patterns
-
-```typescript
-// Test component rendering with props
-render(<Button variant="destructive" size="sm">Delete</Button>)
-expect(screen.getByRole('button')).toHaveClass('bg-destructive')
-
-// Test Dialog interaction
-render(<Dialog open={true}><DialogContent>Content</DialogContent></Dialog>)
-expect(screen.getByText('Content')).toBeInTheDocument()
-
-// Test accessibility
-expect(screen.getByRole('dialog')).toHaveAttribute('role', 'dialog')
-```
diff --git a/frontend/src/lib/api/CLAUDE.md b/frontend/src/lib/api/CLAUDE.md
deleted file mode 100644
index fd4f9526..00000000
--- a/frontend/src/lib/api/CLAUDE.md
+++ /dev/null
@@ -1,158 +0,0 @@
-# API Module
-
-Axios-based client and resource-specific API modules for backend communication with auth, FormData handling, and error recovery.
-
-## Key Components
-
-- **`client.ts`**: Central Axios instance with request/response interceptors, auth headers, base URL resolution
-- **Resource modules** (`sources.ts`, `notebooks.ts`, `chat.ts`, `search.ts`, `podcasts.ts`, etc.): Endpoint-specific functions returning typed responses
-- **`query-client.ts`**: TanStack Query client configuration with default options
-- **`models.ts`, `notes.ts`, `embeddings.ts`, `settings.ts`**: Additional resource APIs
-
-## Important Patterns
-
-- **Single axios instance**: `apiClient` with a configurable request timeout for slow LLM operations — `NEXT_PUBLIC_API_TIMEOUT_MS` (default `600000` = 10 min; an explicit `0` disables it, empty/invalid falls back to the default)
-- **Request interceptor**: Auto-fetches base URL from config, adds Bearer auth from localStorage `auth-storage`
-- **FormData handling**: Auto-removes Content-Type header for FormData to let browser set multipart boundary
-- **Response interceptor**: 401 clears auth and redirects to `/login`
-- **Async base URL resolution**: `getApiUrl()` fetches from runtime config on first request
-- **Error propagation**: All functions return typed responses via `response.data`
-- **Method chaining**: Resource modules export namespaced objects (e.g., `sourcesApi.list()`, `sourcesApi.create()`)
-
-## Key Dependencies
-
-- `axios`: HTTP client library
-- `@/lib/config`: `getApiUrl()` for dynamic base URL
-- `@/lib/types/api`: TypeScript types for request/response shapes
-
-## How to Add New API Modules
-
-1. Create new file (e.g., `transforms.ts`)
-2. Import `apiClient`
-3. Export namespaced object with methods:
-   ```typescript
-   export const transformsApi = {
-     list: async () => { const response = await apiClient.get('/transforms'); return response.data }
-   }
-   ```
-4. Add types to `@/lib/types/api` if new response shapes needed
-
-## Important Quirks & Gotchas
-
-- **Base URL delay**: First request waits for `getApiUrl()` to resolve; can be slow on startup
-- **FormData fields as JSON strings**: Nested objects (arrays, objects) must be JSON stringified in FormData (e.g., `notebooks`, `transformations`)
-- **Timeout for streaming**: the default 10-minute timeout may not cover very long-running LLM operations; raise it via `NEXT_PUBLIC_API_TIMEOUT_MS` (or set `0` to disable)
-- **Auth token management**: Token stored in localStorage `auth-storage` key; uses Zustand persist middleware
-- **Headers mutation in interceptor**: Mutating `config.headers` directly; be careful with middleware order
-- **No automatic retry logic**: Failed requests not automatically retried; must be handled in consuming code. Podcast episodes have explicit retry via `retryEpisode()` in `podcasts.ts` and `useRetryPodcastEpisode()` hook
-- **Content-Type header precedence**: FormData interceptor deletes Content-Type after checking; subsequent interceptors won't re-add it
-
-## Usage Example
-
-```typescript
-// Basic list
-const sources = await sourcesApi.list({ notebook_id: notebookId })
-
-// File upload with FormData
-const response = await sourcesApi.create({
-  type: 'upload',
-  file: fileObj,
-  notebook_id: notebookId,
-  async_processing: true
-})
-
-// With auth token (auto-added by interceptor)
-const notes = await notesApi.list()
-```
-
-## Credentials Module (`credentials.ts`)
-
-Client functions for managing AI provider credentials (API keys, base URLs, endpoints) stored encrypted in SurrealDB.
-
-### Type Definitions
-
-```typescript
-// Full credential object (api_key never exposed)
-interface Credential {
-  id: string
-  name: string
-  provider: string
-  modalities: string[]
-  has_api_key: boolean
-  model_count: number
-  base_url?: string
-  endpoint?: string
-  api_version?: string
-  // ... endpoint_llm, endpoint_embedding, endpoint_stt, endpoint_tts, project, location, credentials_path
-}
-
-// Request payload for creating/updating credential
-interface CreateCredentialRequest {
-  name: string
-  provider: string
-  modalities: string[]
-  api_key?: string
-  base_url?: string
-  // ... other provider-specific fields
-}
-
-// Model discovery and registration
-interface DiscoverModelsResponse { provider: string; models: DiscoveredModel[]; credential_id: string }
-interface RegisterModelsRequest { models: RegisterModelData[] }
-
-// Status and migration
-interface CredentialStatus { configured: Record<string, boolean>; source: Record<string, string>; encryption_configured: boolean }
-interface EnvStatus { [provider: string]: boolean }
-interface MigrationResult { message: string; migrated: string[]; skipped: string[]; errors: string[] }
-interface TestConnectionResult { provider: string; success: boolean; message: string }
-```
-
-### API Functions
-
-| Function | Description | Endpoint |
-|----------|-------------|----------|
-| `getStatus()` | Get configuration status of all providers | `GET /credentials/status` |
-| `getEnvStatus()` | Get which providers have env vars set | `GET /credentials/env-status` |
-| `list(provider?)` | List all credentials (optional filter) | `GET /credentials` |
-| `listByProvider(provider)` | List credentials for a provider | `GET /credentials/by-provider/{provider}` |
-| `get(credentialId)` | Get a specific credential | `GET /credentials/{credentialId}` |
-| `create(data)` | Create a new credential | `POST /credentials` |
-| `update(credentialId, data)` | Update a credential | `PUT /credentials/{credentialId}` |
-| `delete(credentialId, options?)` | Delete a credential | `DELETE /credentials/{credentialId}` |
-| `test(credentialId)` | Test connection using credential | `POST /credentials/{credentialId}/test` |
-| `discover(credentialId)` | Discover available models | `POST /credentials/{credentialId}/discover` |
-| `registerModels(credentialId, data)` | Register discovered models | `POST /credentials/{credentialId}/register-models` |
-| `migrateFromProviderConfig()` | Migrate from legacy ProviderConfig | `POST /credentials/migrate-from-provider-config` |
-| `migrateFromEnv()` | Migrate from env vars | `POST /credentials/migrate-from-env` |
-
-### Usage Example
-
-```typescript
-import { credentialsApi } from '@/lib/api/credentials'
-
-// Check which providers are configured
-const status = await credentialsApi.getStatus()
-if (status.configured['openai']) {
-  console.log(`OpenAI configured via ${status.source['openai']}`)
-}
-
-// Create a new credential
-const cred = await credentialsApi.create({
-  name: 'My OpenAI Key',
-  provider: 'openai',
-  modalities: ['language', 'embedding'],
-  api_key: 'sk-proj-...'
-})
-
-// Test the connection
-const result = await credentialsApi.test(cred.id)
-if (result.success) {
-  console.log('Connection successful!')
-}
-
-// Discover and register models
-const discovered = await credentialsApi.discover(cred.id)
-await credentialsApi.registerModels(cred.id, {
-  models: discovered.models.map(m => ({ model_id: m.model_id, name: m.name, type: 'language' }))
-})
-```
diff --git a/frontend/src/lib/hooks/CLAUDE.md b/frontend/src/lib/hooks/CLAUDE.md
deleted file mode 100644
index fc56b403..00000000
--- a/frontend/src/lib/hooks/CLAUDE.md
+++ /dev/null
@@ -1,192 +0,0 @@
-# Hooks Module
-
-React hooks for API data fetching, state management, and complex workflows (chat, streaming, file handling).
-
-## Key Components
-
-- **Query hooks** (`useNotebookSources`, `useSource`, `useSources`): TanStack Query wrappers for source data with infinite scroll and refetch strategies
-- **Mutation hooks** (`useCreateSource`, `useUpdateSource`, `useDeleteSource`, `useFileUpload`, `useRetrySource`): Server mutations with toast notifications and cache invalidation
-- **Chat hooks** (`useNotebookChat`, `useSourceChat`): Complex session management, context building, and message streaming
-- **Streaming hooks** (`useAsk`): SSE parsing for multi-stage Ask workflows (strategy → answers → final answer)
-- **Model/config hooks** (`useModels`, `useSettings`, `useTransformations`): Application-level settings and model management
-- **Utility hooks** (`useMediaQuery`, `useToast`, `useNavigation`, `useAuth`): UI state and auth checking
-- **i18n hook** (`useTranslation`): Thin wrapper around react-i18next with `t('section.key')` pattern and language switching
-
-## Important Patterns
-
-- **TanStack Query integration**: All data hooks use `useQuery`/`useMutation` with `QUERY_KEYS` for cache consistency
-- **Optimistic updates**: Mutations add local state before server response (e.g., notebook chat messages)
-- **Cache invalidation**: Broad invalidation of query keys on mutations (e.g., `['sources']` catches all source queries)
-- **Auto-refetch on return**: `refetchOnWindowFocus: true` on frequently-changing data (sources, notebooks)
-- **Manual refetch controls**: Hooks return `refetch()` for parent components to trigger refresh
-- **SSE streaming pattern**: `useAsk` manually parses newline-delimited JSON from `/api/search/ask`; handles incomplete buffers
-- **Status polling**: `useSourceStatus` auto-refetches every 2s while `status === 'running' | 'queued' | 'new'`
-- **Context building**: `useNotebookChat.buildContext()` assembles selected sources + notes with token/char counts
-- **i18n pattern**: `useTranslation` returns standard react-i18next `t` function; access translations via `t('section.key')`
-
-## Key Dependencies
-
-- `@tanstack/react-query`: Data fetching and caching
-- `sonner`: Toast notifications
-- `@/lib/api/*`: API module exports (sourcesApi, chatApi, searchApi, etc.)
-- `@/lib/types/api`: TypeScript response types
-- Zustand stores: `useAuthStore`, modal managers
-
-## How to Add New Hooks
-
-1. **Data queries**: Create `useQuery` hook wrapping API call; use `QUERY_KEYS.entityName(id)` for cache key
-2. **Mutations**: Create `useMutation` hook with `onSuccess` cache invalidation + toast feedback
-3. **Complex state**: Use `useState` + callbacks for local state (see `useAsk`, `useNotebookChat`)
-4. **Return shape**: Export object with both state and action functions for composability
-
-## Important Quirks & Gotchas
-
-- **Cache invalidation breadth**: Invalidating `['sources']` affects ALL source queries; be precise if performance matters
-- **Optimistic updates + error handling**: `useNotebookChat` removes optimistic messages on error; ensure cleanup
-- **SSE buffer handling**: `useAsk` keeps incomplete lines in buffer between reads; incomplete JSON silently skipped
-- **Model override timing**: `useNotebookChat` stores pending model override if no session exists; applied on session creation
-- **Pagination cursor**: `useNotebookSources` uses offset-based pagination; `nextOffset` calculated from page size
-- **Status polling race**: `useSourceStatus` may refetch stale data before server catches up; retry logic has 3-attempt limit
-- **Keyboard trap in dialogs**: Some hooks manage modal state; ensure Dialog/Modal components handle escape key properly
-- **Form data handling**: `useFileUpload` and source creation convert JSON fields to strings in FormData
-- **useTranslation**: Thin wrapper preserving `setLanguage` with language change events for `LanguageLoadingOverlay`
-
-## Testing Patterns
-
-```typescript
-// Mock API
-const mockApi = {
-  list: vi.fn().mockResolvedValue([...])
-}
-
-// Test hook with QueryClientProvider + wrapper
-render(<Component />, { wrapper: QueryClientProvider })
-
-// Assert mutations trigger cache invalidation
-await waitFor(() => expect(queryClient.invalidateQueries).toHaveBeenCalled())
-```
-
-## Credentials Hooks (`use-credentials.ts`)
-
-Hooks for managing AI provider credentials with TanStack Query integration, toast notifications, and cache invalidation.
-
-### Query Keys
-
-```typescript
-export const CREDENTIAL_QUERY_KEYS = {
-  all: ['credentials'] as const,
-  status: ['credentials', 'status'] as const,
-  envStatus: ['credentials', 'env-status'] as const,
-  byProvider: (provider: string) => ['credentials', 'provider', provider] as const,
-  detail: (id: string) => ['credentials', id] as const,
-}
-```
-
-### Query Hooks
-
-| Hook | Description | Returns |
-|------|-------------|---------|
-| `useCredentialStatus()` | Get configuration status of all providers | `{ configured, source, encryption_configured }` |
-| `useEnvStatus()` | Get which providers have env vars set | `{ [provider]: boolean }` |
-| `useCredentials(provider?)` | List all credentials (optional filter) | `Credential[]` |
-| `useCredentialsByProvider(provider)` | List credentials for a specific provider | `Credential[]` |
-| `useCredential(credentialId)` | Get a specific credential | `Credential` |
-
-### Mutation Hooks
-
-| Hook | Description | Cache Invalidation |
-|------|-------------|-------------------|
-| `useCreateCredential()` | Create new credential | `all`, `providers` |
-| `useUpdateCredential()` | Update credential | `all`, `providers` |
-| `useDeleteCredential()` | Delete credential | `all`, `models`, `providers` |
-| `useTestCredential()` | Test credential connection | None (stores result locally) |
-| `useDiscoverModels()` | Discover models for credential | None |
-| `useRegisterModels()` | Register discovered models | `models`, `all` |
-| `useMigrateFromEnv()` | Migrate from env vars | `status`, `envStatus`, `models`, `providers` |
-| `useMigrateFromProviderConfig()` | Migrate from legacy ProviderConfig | `status`, `envStatus`, `models`, `providers` |
-
-### useTestCredential Details
-
-Returns extended interface with local state management for test results:
-
-```typescript
-const {
-  testCredential,        // (credentialId: string) => void
-  testCredentialAsync,   // (credentialId: string) => Promise<TestConnectionResult>
-  isPending,             // boolean
-  testResults,           // Record<string, TestConnectionResult>
-  clearResult,           // (credentialId: string) => void
-} = useTestCredential()
-```
-
-### Cache Invalidation Strategy
-
-All mutation hooks invalidate:
-- `CREDENTIAL_QUERY_KEYS.all` — refreshes all credential queries (cascades to filtered queries)
-- `MODEL_QUERY_KEYS.providers` — refreshes provider list
-
-Delete hook additionally invalidates:
-- `MODEL_QUERY_KEYS.models` — refreshes full model list (linked models may be deleted)
-
-Migration hooks additionally invalidate:
-- `CREDENTIAL_QUERY_KEYS.status` — refreshes configured/source info
-- `CREDENTIAL_QUERY_KEYS.envStatus` — refreshes env var status
-
-### Usage Example
-
-```typescript
-import {
-  useCredentialStatus,
-  useCredentials,
-  useCreateCredential,
-  useTestCredential,
-  useMigrateFromEnv
-} from '@/lib/hooks/use-credentials'
-
-function CredentialSettings() {
-  const { data: status, isLoading } = useCredentialStatus()
-  const { data: credentials } = useCredentials()
-  const createCredential = useCreateCredential()
-  const { testCredential, testResults, isPending } = useTestCredential()
-  const migrateFromEnv = useMigrateFromEnv()
-
-  const handleCreate = () => {
-    createCredential.mutate({
-      name: 'My OpenAI Key',
-      provider: 'openai',
-      modalities: ['language', 'embedding'],
-      api_key: 'sk-...'
-    })
-  }
-
-  const handleTest = (credentialId: string) => {
-    testCredential(credentialId)
-  }
-
-  const handleMigrate = () => {
-    migrateFromEnv.mutate()
-  }
-
-  return (
-    <div>
-      {credentials?.map(cred => (
-        <div key={cred.id}>
-          <span>{cred.name} ({cred.provider})</span>
-          <button onClick={() => handleTest(cred.id)} disabled={isPending}>Test</button>
-          {testResults[cred.id]?.success && <span>Connected!</span>}
-        </div>
-      ))}
-      <button onClick={handleCreate}>Add Credential</button>
-      <button onClick={handleMigrate}>Migrate from .env</button>
-    </div>
-  )
-}
-```
-
-### Important Notes
-
-- **Toast notifications**: All mutations show success/error toasts automatically
-- **i18n integration**: Toast messages use translation keys from `t('apiKeys.*')` and `t('common.*')`
-- **Error handling**: Uses `getApiErrorKey()` utility to extract error messages from API responses
-- **Local test results**: `useTestCredential` stores results in local state (not cached in TanStack Query)
-- **Migration feedback**: Migration hooks show different toasts based on migrated/skipped/error counts
diff --git a/frontend/src/lib/locales/CLAUDE.md b/frontend/src/lib/locales/CLAUDE.md
deleted file mode 100644
index 23b9eb8f..00000000
--- a/frontend/src/lib/locales/CLAUDE.md
+++ /dev/null
@@ -1,154 +0,0 @@
-# Locales Module (i18n)
-
-Internationalization system providing multi-language UI support using i18next with standard `t()` function calls.
-
-## Architecture
-
-```
-lib/
-├── i18n.ts              # i18next initialization and configuration
-├── i18n-events.ts       # Language change event emitters
-├── hooks/
-│   └── use-translation.ts  # Thin wrapper around react-i18next with language change events
-├── utils/
-│   └── date-locale.ts   # date-fns locale mapping
-└── locales/
-    ├── index.ts         # Locale registry and type exports
-    ├── en-US/index.ts   # English translations
-    ├── pt-BR/index.ts   # Brazilian Portuguese translations
-    ├── zh-CN/index.ts   # Simplified Chinese translations
-    ├── zh-TW/index.ts   # Traditional Chinese translations
-    ├── ja-JP/index.ts   # Japanese translations
-    ├── ru-RU/index.ts   # Russian translations
-    └── bn-IN/index.ts   # Bengali translations
-```
-
-## Key Components
-
-- **`i18n.ts`**: i18next initialization with language detection (localStorage → browser)
-- **`i18n-events.ts`**: Event emitters for language change start/end (used by loading overlay)
-- **`locales/index.ts`**: Central registry exporting all locales and `LanguageCode` type
-- **`use-translation.ts`**: Thin wrapper around react-i18next returning `{ t, i18n, language, setLanguage }`
-
-## Translation Structure
-
-Each locale file exports a flat object with nested keys:
-
-```typescript
-export const enUS = {
-  common: {
-    save: 'Save',
-    cancel: 'Cancel',
-    delete: 'Delete',
-    // ...
-  },
-  notebooks: {
-    title: 'Notebooks',
-    createNew: 'Create Notebook',
-    // ...
-  },
-  // ... other sections
-}
-```
-
-**Sections**:
-- `common`: Shared UI elements (buttons, labels, actions)
-- `notebooks`, `sources`, `notes`: Feature-specific strings
-- `chat`, `search`, `podcasts`: Module-specific strings
-- `models`, `transformations`, `settings`: Configuration UI
-- `advanced`: System administration strings
-- `apiErrors`: Backend error message translations
-
-## Usage Pattern
-
-```typescript
-import { useTranslation } from '@/lib/hooks/use-translation'
-
-function MyComponent() {
-  const { t, language, setLanguage } = useTranslation()
-
-  // Standard t() function call
-  return <h1>{t('notebooks.title')}</h1>
-
-  // With string interpolation
-  return <p>{t('common.updated').replace('{time}', timeAgo)}</p>
-
-  // Change language
-  await setLanguage('zh-CN')
-}
-```
-
-### Functions that accept t as a parameter
-
-Use `TFunction` from i18next:
-
-```typescript
-import type { TFunction } from 'i18next'
-
-const getNavigation = (t: TFunction) => [
-  { name: t('navigation.sources'), href: '/sources' },
-]
-```
-
-## Important Patterns
-
-- **Standard t() calls**: `t('section.key')` — standard react-i18next pattern
-- **Language persistence**: Saved to localStorage, auto-detected on load
-- **Fallback**: Falls back to `en-US` if key missing in current locale
-- **Date localization**: Use `getDateLocale(language)` from `utils/date-locale.ts`
-- **Language change events**: `setLanguage` emits start/end events for `LanguageLoadingOverlay`
-
-## Key Dependencies
-
-- `i18next`: Core internationalization framework
-- `react-i18next`: React bindings for i18next
-- `i18next-browser-languagedetector`: Auto-detect browser language
-- `date-fns/locale`: Date formatting locales
-
-## How to Add a New Language
-
-1. Create locale folder: `locales/pt-BR/index.ts`
-2. Copy structure from `en-US/index.ts` and translate all strings
-3. Register in `locales/index.ts`:
-   ```typescript
-   import { ptBR } from './pt-BR'
-   export const resources = {
-     // ...existing
-     'pt-BR': { translation: ptBR },
-   }
-   export const languages: Language[] = [
-     // ...existing
-     { code: 'pt-BR', label: 'Português' },
-   ]
-   ```
-4. Add to `utils/date-locale.ts`:
-   ```typescript
-   import { ptBR } from 'date-fns/locale'
-   const LOCALE_MAP = { ...existing, 'pt-BR': ptBR }
-   ```
-
-## Important Quirks & Gotchas
-
-- **Language change events**: `emitLanguageChangeStart/End` used by `LanguageLoadingOverlay` for UX
-- **No SSR**: `useSuspense: false` disables React Suspense for i18next (avoids hydration issues)
-- **All keys required**: Missing keys in non-English locales fall back to English; keep locales in sync
-- **ErrorBoundary**: Uses raw `enUS` locale object directly (class component, can't use hooks)
-
-## Testing Patterns
-
-```typescript
-// Mock useTranslation in tests (see test/setup.ts)
-vi.mock('@/lib/hooks/use-translation', () => ({
-  useTranslation: () => ({
-    t: (key: string) => key,  // Identity function returns the key
-    language: 'en-US',
-    setLanguage: vi.fn(),
-  }),
-}))
-
-// Test locale completeness
-import { enUS, zhCN } from '@/lib/locales'
-const enKeys = Object.keys(flatten(enUS))
-const zhKeys = Object.keys(flatten(zhCN))
-expect(zhKeys).toEqual(enKeys)  // All keys present
-```
diff --git a/frontend/src/lib/stores/CLAUDE.md b/frontend/src/lib/stores/CLAUDE.md
deleted file mode 100644
index 1214b7ff..00000000
--- a/frontend/src/lib/stores/CLAUDE.md
+++ /dev/null
@@ -1,68 +0,0 @@
-# Stores Module
-
-Zustand-based state management for authentication, modals, and application-level settings with localStorage persistence.
-
-## Key Components
-
-- **`auth-store.ts`**: Authentication state (token, isAuthenticated) with login, logout, auth checking, and Zustand persistence
-- **Modal stores** (imported via hooks): Modal visibility and data state management
-- **Settings persistence**: Auto-saves sensitive state (token, auth status) to localStorage via Zustand persist middleware
-
-## Important Patterns
-
-- **Zustand create + persist**: State + actions combined in single store; `persist` middleware auto-syncs to localStorage
-- **Selective persistence**: `partialize` option limits what's saved (e.g., only `token` and `isAuthenticated`, not `isLoading`)
-- **Hydration tracking**: `setHasHydrated()` marks when localStorage data loaded; used to avoid hydration mismatch in SSR
-- **Auth caching**: 30-second cache on `checkAuth()` to avoid excessive API calls; stores `lastAuthCheck` timestamp
-- **Network resilience**: Handles 401 globally in API interceptor; graceful degradation if API unreachable
-- **API validation**: Uses actual API call (`/notebooks` endpoint) to validate token instead of parsing JWT
-
-## Key Dependencies
-
-- `zustand`: State management library
-- `@/lib/config`: `getApiUrl()` for dynamic server discovery
-- localStorage: Browser persistence API
-
-## How to Add New Stores
-
-1. Create new file (e.g., `settings-store.ts`)
-2. Define interface extending store state and actions
-3. Use `create<Interface>()(persist(...))`  for persistence, or plain `create<Interface>()` for ephemeral state:
-   ```typescript
-   export const useSettingsStore = create<SettingsState>()(
-     persist((set) => ({
-       theme: 'dark',
-       setTheme: (theme) => set({ theme })
-     }), {
-       name: 'settings-storage'
-     })
-   )
-   ```
-
-## Important Quirks & Gotchas
-
-- **Hydration mismatch**: Server-side rendered stores must check `hasHydrated` before rendering to prevent SSR mismatches
-- **localStorage key collision**: Persist middleware uses `name` option as localStorage key; ensure unique per store
-- **Token not validated**: `login()` only checks HTTP 200 response; doesn't decode or validate JWT structure
-- **Auth check race condition**: Multiple simultaneous `checkAuth()` calls return early if one already in progress (`isCheckingAuth`)
-- **Error messages from HTTP**: Shows 401/403/5xx status codes to user; helps with debugging but may leak info
-- **Network timeout handling**: Network errors in `checkAuthRequired()` set `authRequired: null` (safe default); `login()` shows generic message
-- **Logout doesn't invalidate session**: Client-side logout only clears local token; server session may still be valid
-- **Double authentication**: Both `login()` and `checkAuth()` test same `/notebooks` endpoint; could be optimized with dedicated endpoint
-
-## Testing Patterns
-
-```typescript
-// Mock store
-const mockAuthStore = {
-  isAuthenticated: true,
-  token: 'test-token',
-  checkAuth: vi.fn().mockResolvedValue(true),
-  login: vi.fn().mockResolvedValue(true),
-  logout: vi.fn()
-}
-
-// Test store mutations
-act(() => store.setState({ theme: 'light' }))
-expect(store.getState().theme).toBe('light')
-```
diff --git a/open_notebook/AGENTS.md b/open_notebook/AGENTS.md
new file mode 100644
index 00000000..0a4cbbff
--- /dev/null
+++ b/open_notebook/AGENTS.md
@@ -0,0 +1,81 @@
+# Backend Rules (api/ + open_notebook/ + commands/ + prompts/)
+
+Normative rules for working on the Python backend. Architecture and design rationale live in [docs/7-DEVELOPMENT/](../docs/7-DEVELOPMENT/index.md) — this file is only what you must know before changing code. Project-wide rules are in the root [AGENTS.md](../AGENTS.md).
+
+## Commands
+
+- Run API: `uv run uvicorn api.main:app --port 5055` (Swagger at http://localhost:5055/docs)
+- Background jobs need the worker: `make worker-start` (`surreal-commands-worker --import-modules commands`)
+- Tests: `uv run pytest tests/`
+- Lint/typecheck: `ruff check . --fix` and `uv run python -m mypy .`
+
+## API layer (`api/`)
+
+- Structure is routes → services → models. Routers stay thin; business logic goes in `*_service.py`.
+- `SupportedProvider` must stay in sync across **four** locations: `api/models.py` (Literal), frontend `ALL_PROVIDERS`, `connection_tester.py` `TEST_MODELS`, and `credentials_service.py` `PROVIDER_ENV_CONFIG`. Adding a provider means touching all four.
+- NEVER return API key values from any endpoint — metadata only.
+- Every user-supplied URL field must go through `validate_url()` (`open_notebook/utils/url_validation.py`, async) for SSRF protection. Private IPs/localhost are intentionally allowed (self-hosted Ollama, LM Studio).
+- Errors: raise typed exceptions from `open_notebook.exceptions` — global handlers map them to HTTP status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `RateLimitError`→429, `ConfigurationError`→422, `NetworkError`/`ExternalServiceError`→502, `OpenNotebookError`→500). Don't raise bare `HTTPException` for domain errors.
+- Requests over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100) are rejected by `MaxBodySizeMiddleware` before auth/routing.
+- CORS is open by default (`CORS_ORIGINS`); `allow_credentials` flips to `True` only when origins are explicit. No rate limiting built in.
+
+## AI / model provisioning (`open_notebook/ai/`)
+
+- All LLM calls in graph nodes go through `provision_langchain_model()` — never instantiate provider clients directly. It auto-upgrades to `large_context_model` above 105,000 tokens (hard-coded threshold).
+- Missing/unconfigured model → raise `ConfigurationError` (not `ValueError`) so the API returns 422.
+- Credential-linked models are preferred; `provision_provider_keys()` is the env-var fallback and **mutates `os.environ`** — be aware in tests.
+- `DefaultModels.get_instance()` intentionally bypasses the singleton cache (fresh DB fetch each call).
+
+## Graphs (`open_notebook/graphs/`)
+
+- Sync nodes that need async calls use the `asyncio.new_event_loop()` / ThreadPool workaround (see `chat.py`) — fragile, follow the existing pattern exactly.
+- Every node wraps LLM calls with `classify_error()`:
+  ```python
+  except Exception as e:
+      exc_class, message = classify_error(e)
+      raise exc_class(message) from e
+  ```
+- Strip extended-thinking output with `clean_thinking_content()` before using model responses.
+- Chat checkpoints (SqliteSaver) live at the path in `LANGGRAPH_CHECKPOINT_FILE`.
+
+## Domain (`open_notebook/domain/`)
+
+- `Source.save()` does **NOT** auto-embed — call `source.vectorize()` explicitly (fire-and-forget, returns a command id). `Note.save()` DOES auto-submit `embed_note`.
+- `ObjectModel.get()` is polymorphic via ID prefix — the subclass must be imported first or resolution fails.
+- `RecordModel` subclasses are singletons — call `clear_instance()` in tests.
+- Relationship strings passed to `relate()` must match the schema (`reference`, `artifact`, `refers_to`).
+
+## Database (`open_notebook/database/`)
+
+- New migration = new file `open_notebook/database/migrations/N.surrealql` (+ `N_down.surrealql`) **and** an edit to `AsyncMigrationManager` — migrations are hard-coded, not auto-discovered. They run automatically on API startup.
+- No connection pooling — each `repo_*` call opens/closes a connection.
+- Transaction-conflict `RuntimeError`s are retriable and logged at DEBUG (don't "fix" the missing stack trace).
+- Read the `snl-development:surrealdb-queries` skill notes / SurrealDB docs before writing SurrealQL.
+
+## Background commands (`commands/`)
+
+- Retry config uses a blocklist: `stop_on: [ValueError]` — raise `ValueError` for permanent failures (no retry, job marked `failed`); any other exception auto-retries.
+- Submission is fire-and-forget via `submit_command()`; commands must be idempotent-ish under retry.
+- Podcast generation uses `max_attempts: 1` on purpose (prevents duplicate episodes); retry is the explicit `POST /podcasts/episodes/{id}/retry` endpoint.
+
+## Prompts (`prompts/`)
+
+- Template path syntax: `Prompter(prompt_template="ask/entry")` → `prompts/ask/entry.jinja` (forward slashes, no extension).
+- Data is passed as `data=dict`; dict keys must match template variable names exactly.
+- With a `PydanticOutputParser`, Prompter auto-injects `format_instructions` — the template must contain `{{ format_instructions }}` or the parser is silently ignored.
+- No template inheritance/composition; templates are flat by design.
+- Templates are cached — restart the app after editing.
+
+## Environment knobs to know
+
+| Variable | Meaning |
+|---|---|
+| `OPEN_NOTEBOOK_ENCRYPTION_KEY` (or `_FILE`) | Required for credential storage; any string, no default |
+| `OPEN_NOTEBOOK_CHUNK_SIZE` / `_CHUNK_OVERLAP` | Token-based (default 400 / 15%); restart required |
+| `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | Upload cap (default 100) |
+| `LANGGRAPH_CHECKPOINT_FILE` | Chat history SQLite path |
+| `CORS_ORIGINS` | Restrict before production |
+
+## Deep dives
+
+[architecture](../docs/7-DEVELOPMENT/architecture.md) · [credentials](../docs/7-DEVELOPMENT/credentials.md) · [content processing](../docs/7-DEVELOPMENT/content-processing.md) · [podcasts](../docs/7-DEVELOPMENT/podcasts.md) · [prompts](../docs/7-DEVELOPMENT/prompts.md) · [change playbooks](../docs/7-DEVELOPMENT/change-playbooks.md) · [testing](../docs/7-DEVELOPMENT/testing.md)
diff --git a/open_notebook/CLAUDE.md b/open_notebook/CLAUDE.md
index e92860a2..43c994c2 100644
--- a/open_notebook/CLAUDE.md
+++ b/open_notebook/CLAUDE.md
@@ -1,225 +1 @@
-# Open Notebook - Root CLAUDE.md
-
-This file provides architectural guidance for contributors working on Open Notebook at the project level.
-
-## Project Overview
-
-**Open Notebook** is an open-source, privacy-focused alternative to Google's Notebook LM. It's an AI-powered research assistant enabling users to upload multi-modal content (PDFs, audio, video, web pages), generate intelligent notes, search semantically, chat with AI models, and produce professional podcasts—all with complete control over data and choice of AI providers.
-
-**Key Values**: Privacy-first, multi-provider AI support, fully self-hosted option, open-source transparency.
-
----
-
-## Three-Tier Architecture
-
-```
-┌─────────────────────────────────────────────────────────┐
-│              Frontend (React/Next.js)                    │
-│              frontend/ @ port 3000                       │
-├─────────────────────────────────────────────────────────┤
-│ - Notebooks, sources, notes, chat, podcasts, search UI  │
-│ - Zustand state management, TanStack Query (React Query)│
-│ - Shadcn/ui component library with Tailwind CSS         │
-└────────────────────────┬────────────────────────────────┘
-                         │ HTTP REST
-┌────────────────────────▼────────────────────────────────┐
-│              API (FastAPI)                              │
-│              api/ @ port 5055                           │
-├─────────────────────────────────────────────────────────┤
-│ - REST endpoints for notebooks, sources, notes, chat    │
-│ - LangGraph workflow orchestration                      │
-│ - Job queue for async operations (podcasts)             │
-│ - Multi-provider AI provisioning via Esperanto          │
-└────────────────────────┬────────────────────────────────┘
-                         │ SurrealQL
-┌────────────────────────▼────────────────────────────────┐
-│         Database (SurrealDB)                            │
-│         Graph database @ port 8000                      │
-├─────────────────────────────────────────────────────────┤
-│ - Records: Notebook, Source, Note, ChatSession, Credential│
-│ - Relationships: source-to-notebook, note-to-source     │
-│ - Vector embeddings for semantic search                 │
-└─────────────────────────────────────────────────────────┘
-```
-
----
-
-## Useful sources
-
-User documentation is at @docs/
-
-## Tech Stack
-
-### Frontend (`frontend/`)
-- **Framework**: Next.js 16 (React 19)
-- **Language**: TypeScript
-- **State Management**: Zustand
-- **Data Fetching**: TanStack Query (React Query)
-- **Styling**: Tailwind CSS + Shadcn/ui
-- **Build Tool**: Webpack (via Next.js)
-- **i18n compatible**: All front-end changes must also consider the translation keys
-
-### API Backend (`api/` + `open_notebook/`)
-- **Framework**: FastAPI 0.104+
-- **Language**: Python 3.11+
-- **Workflows**: LangGraph state machines
-- **Database**: SurrealDB async driver
-- **AI Providers**: Esperanto library (8+ providers: OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI)
-- **Job Queue**: Surreal-Commands for async jobs (podcasts)
-- **Logging**: Loguru
-- **Validation**: Pydantic v2
-- **Testing**: Pytest
-
-### Database
-- **SurrealDB**: Graph database with built-in embedding storage and vector search
-- **Schema Migrations**: Automatic on API startup via AsyncMigrationManager
-
-### Additional Services
-- **Content Processing**: content-core library (file/URL extraction)
-- **Prompts**: AI-Prompter with Jinja2 templating
-- **Podcast Generation**: podcast-creator library
-- **Embeddings**: Multi-provider via Esperanto
-
----
-
-## Architecture Highlights
-
-### 1. Async-First Design
-- All database queries, graph invocations, and API calls are async (await)
-- SurrealDB async driver with connection pooling
-- FastAPI handles concurrent requests efficiently
-
-### 2. LangGraph Workflows
-- **source.py**: Content ingestion (extract → embed → save)
-- **chat.py**: Conversational agent with message history
-- **ask.py**: Search + synthesis (retrieve relevant sources → LLM)
-- **transformation.py**: Custom transformations on sources
-- All use `provision_langchain_model()` for smart model selection
-
-### 3. Multi-Provider AI
-- **Esperanto library**: Unified interface to 8+ AI providers
-- **Credential system**: Individual encrypted credential records per provider; models link to credentials for direct config
-- **ModelManager**: Factory pattern with fallback logic; uses credential config when available, env vars as fallback
-- **Smart selection**: Detects large contexts, prefers long-context models
-- **Override support**: Per-request model configuration
-
-### 4. Database Schema
-- **Automatic migrations**: AsyncMigrationManager runs on API startup
-- **SurrealDB graph model**: Records with relationships and embeddings
-- **Vector search**: Built-in semantic search across all content
-- **Transactions**: Repo functions handle ACID operations
-
-### 5. Error Handling
-- **Custom exceptions** (`exceptions.py`): Hierarchy rooted at `OpenNotebookError` with typed subclasses (`AuthenticationError`, `ConfigurationError`, `RateLimitError`, `ExternalServiceError`, `NetworkError`, etc.)
-- **Error classification** (`utils/error_classifier.py`): `classify_error()` maps raw LLM provider exceptions to typed exceptions with user-friendly messages via keyword matching
-- **Global handlers**: FastAPI exception handlers in `api/main.py` convert typed exceptions to appropriate HTTP status codes (401, 422, 429, 502, etc.)
-
-### 6. Authentication
-- **Current**: Simple password middleware (insecure, dev-only)
-- **Production**: Replace with OAuth/JWT (see CONFIGURATION.md)
-
----
-
-## Important Quirks & Gotchas
-
-### API Startup
-- **Migrations run automatically** on startup; check logs for errors
-- **Must start API before UI**: UI depends on API for all data
-- **SurrealDB must be running**: API fails without database connection
-
-### Frontend-Backend Communication
-- **Base API URL**: Configured in `.env.local` (default: http://localhost:5055)
-- **CORS enabled**: Configured in `api/main.py` (allow all origins in dev)
-- **Rate limiting**: Not built-in; add at proxy layer for production
-
-### LangGraph Workflows
-- **Blocking operations**: Chat/podcast workflows may take minutes; no timeout
-- **State persistence**: Uses SQLite checkpoint storage in `/data/sqlite-db/`
-- **Model fallback**: If primary model fails, falls back to cheaper/smaller model
-
-### Podcast Generation
-- **Async job queue**: `podcast_service.py` submits jobs but doesn't wait
-- **Track status**: Use `/commands/{command_id}` endpoint to poll status
-- **Failure handling**: Failed jobs are marked as "failed" with error messages; retry via `POST /podcasts/episodes/{id}/retry`
-- **No automatic retries**: Podcast jobs use `max_attempts: 1` to prevent duplicate episode records
-- **TTS failures**: Fall back to silent audio if speech synthesis fails
-
-### Content Processing
-- **File extraction**: Uses content-core library; supports 50+ file types
-- **URL handling**: Extracts text + metadata from web pages
-- **Large files**: Content processing is sync; may block API briefly
-
----
-
-## Component References
-
-See dedicated CLAUDE.md files for detailed guidance:
-
-- **[frontend/CLAUDE.md](../frontend/CLAUDE.md)**: React/Next.js architecture, state management, API integration
-- **[api/CLAUDE.md](../api/CLAUDE.md)**: FastAPI structure, service pattern, endpoint development
-- **[domain/CLAUDE.md](domain/CLAUDE.md)**: Data models, repository pattern, search functions
-- **[ai/CLAUDE.md](ai/CLAUDE.md)**: ModelManager, AI provider integration, Esperanto usage
-- **[graphs/CLAUDE.md](graphs/CLAUDE.md)**: LangGraph workflow design, state machines
-- **[database/CLAUDE.md](database/CLAUDE.md)**: SurrealDB operations, migrations, async patterns
-
----
-
-## Documentation Map
-
-- **[README.md](../README.md)**: Project overview, features, quick start
-- **[docs/index.md](../docs/index.md)**: Complete user & deployment documentation
-- **[CONFIGURATION.md](../CONFIGURATION.md)**: Environment variables, model configuration
-- **[CONTRIBUTING.md](../CONTRIBUTING.md)**: Contribution guidelines
-- **[MAINTAINER_GUIDE.md](../MAINTAINER_GUIDE.md)**: Release & maintenance procedures
-
----
-
-## Testing Strategy
-
-- **Unit tests**: `tests/test_domain.py`, `test_models_api.py`
-- **Graph tests**: `tests/test_graphs.py` (workflow integration)
-- **Utils tests**: `tests/test_utils.py`, `tests/test_chunking.py`, `tests/test_embedding.py`
-- **Run all**: `uv run pytest tests/`
-- **Coverage**: Check with `pytest --cov`
-
----
-
-## Common Tasks
-
-### Add a New API Endpoint
-1. Create router in `api/routers/feature.py`
-2. Create service in `api/feature_service.py`
-3. Define schemas in `api/models.py`
-4. Register router in `api/main.py`
-5. Test via http://localhost:5055/docs
-
-### Add a New LangGraph Workflow
-1. Create `open_notebook/graphs/workflow_name.py`
-2. Define StateDict and node functions
-3. Build graph with `.add_node()` / `.add_edge()`
-4. Invoke in service: `graph.ainvoke({"input": ...}, config={"..."})`
-5. Test with sample data in `tests/`
-
-### Add Database Migration
-1. Create `migrations/XXX_description.surql`
-2. Write SurrealQL schema changes
-3. Create `migrations/XXX_description_down.surql` (optional rollback)
-4. API auto-detects on startup; migration runs if newer than recorded version
-
-### Deploy to Production
-1. Review [CONFIGURATION.md](CONFIGURATION.md) for security settings
-2. Use `make docker-release` for multi-platform image
-3. Push to Docker Hub / GitHub Container Registry
-4. Deploy `docker compose --profile multi up`
-5. Verify migrations via API logs
-
----
-
-## Support & Community
-
-- **Documentation**: https://open-notebook.ai
-- **Discord**: https://discord.gg/37XJPXfz2w
-- **Issues**: https://github.com/lfnovo/open-notebook/issues
-- **License**: MIT (see LICENSE)
-
-
+@AGENTS.md
diff --git a/open_notebook/ai/CLAUDE.md b/open_notebook/ai/CLAUDE.md
deleted file mode 100644
index 5e8de94f..00000000
--- a/open_notebook/ai/CLAUDE.md
+++ /dev/null
@@ -1,331 +0,0 @@
-# AI Module
-
-Model configuration, provisioning, and management for multi-provider AI integration via Esperanto.
-
-## Purpose
-
-Centralizes AI model lifecycle: database models for model metadata (provider, type), default model configuration, and factory for instantiating LLM/embedding/speech models at runtime with fallback logic.
-
-## Architecture Overview
-
-**Two-tier system**:
-1. **Database models** (`Model`, `DefaultModels`): Metadata storage and default configuration
-2. **ModelManager**: Factory for provisioning models with intelligent fallback (large context detection, config override)
-
-All models use Esperanto library as provider abstraction (OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI, OpenRouter).
-
-## Component Catalog
-
-### models.py
-
-#### Model (ObjectModel)
-- Database record: name, provider, type (language/embedding/speech_to_text/text_to_speech), credential (optional link to Credential record)
-- `get_models_by_type()`: Async query to fetch all models of a specific type
-- `get_credential_obj()`: Fetches linked Credential object (if credential field set)
-- `get_by_credential(credential_id)`: Class method to find all models linked to a credential
-- Stores provider-model pairs for AI factory instantiation
-
-#### DefaultModels (RecordModel)
-- Singleton configuration record (record_id: `open_notebook:default_models`)
-- Fields: default_chat_model, default_transformation_model, large_context_model, default_text_to_speech_model, default_speech_to_text_model, default_embedding_model, default_tools_model
-- `get_instance()`: Always fetches fresh from database (overrides parent caching for real-time updates)
-- Returns fresh instance on each call (no singleton cache)
-
-#### ModelManager
-- Stateless factory for instantiating AI models
-- `get_model(model_id)`: Retrieves Model by ID; if model has linked credential, uses `credential.to_esperanto_config()` for provider config; otherwise falls back to env var provisioning via `key_provider`
-- `get_defaults()`: Fetches DefaultModels configuration
-- `get_default_model(model_type)`: Smart lookup (e.g., "chat" → default_chat_model, "transformation" → default_transformation_model with fallback to chat)
-- `get_speech_to_text()`, `get_text_to_speech()`, `get_embedding_model()`: Type-specific convenience methods with assertions
-- **Global instance**: `model_manager` singleton exported for use throughout app
-
-### provision.py
-
-#### provision_langchain_model()
-- Factory for LangGraph nodes needing LLM provisioning
-- **Smart fallback logic**:
-  - If tokens > 105,000: Use `large_context_model`
-  - Elif `model_id` specified: Use specific model
-  - Else: Use default model for type (e.g., "chat", "transformation")
-- Returns LangChain-compatible model via `.to_langchain()`
-- Logs model selection decision
-
-### key_provider.py
-
-#### API Key Provider (Credential→Env Fallback)
-- **Purpose**: Provides API keys from database first, falls back to environment variables
-- **Pattern**: Before Esperanto creates a model, keys are loaded from `Credential` records and set as environment variables
-- **Integration point**: Called by `ModelManager.get_model()` as fallback when model has no linked credential
-
-#### Key Functions
-- `get_api_key(provider)`: Get single API key (DB first, then env var)
-- `provision_provider_keys(provider)`: Set env vars from DB config for a provider
-- `provision_all_keys()`: Load all provider keys from DB into env vars (useful at startup)
-
-#### Provider Configuration Maps
-- `PROVIDER_CONFIG`: Simple providers (openai, anthropic, google, groq, etc.)
-- `VERTEX_CONFIG`: Google Vertex AI (project, location, credentials)
-- `AZURE_CONFIG`: Azure OpenAI (api_key, endpoint, api_version, mode-specific endpoints)
-- `OPENAI_COMPATIBLE_CONFIG`: Generic OpenAI-compatible (generic + mode-specific for LLM/EMBEDDING/STT/TTS)
-
-## Common Patterns
-
-- **Type dispatch**: Model.type field drives factory logic (4 model types)
-- **Provider abstraction**: Esperanto handles provider differences; ModelManager unaware of provider specifics
-- **Fresh defaults**: DefaultModels.get_instance() always fetches from database (not cached) for live config updates
-- **Config override**: provision_langchain_model() accepts kwargs passed to AIFactory.create_* methods
-- **Token-based selection**: provision_langchain_model() detects large contexts and upgrades model automatically
-- **Type assertions**: get_speech_to_text(), get_embedding_model() assert returned type (safety check)
-- **Credential→Env fallback**: If model has linked credential, config from `credential.to_esperanto_config()` is used directly; otherwise keys checked in database via key_provider, then environment variables; enables UI-based key management while maintaining backward compatibility
-
-## Key Dependencies
-
-- `esperanto`: AIFactory.create_language(), create_embedding(), create_speech_to_text(), create_text_to_speech()
-- `open_notebook.database.repository`: repo_query, ensure_record_id
-- `open_notebook.domain.base`: ObjectModel, RecordModel base classes
-- `open_notebook.domain.credential`: Credential for database-stored API keys
-- `open_notebook.utils`: token_count() for context size detection
-- `loguru`: Logging for model selection decisions
-
-## Important Quirks & Gotchas
-
-- **Token counting rough estimate**: provision_langchain_model() uses token_count() which estimates via cl100k_base encoding (may differ 5-10% from actual model)
-- **Large context threshold hard-coded**: 105,000 token threshold for large_context_model upgrade (not configurable)
-- **DefaultModels.get_instance() fresh fetch**: Intentionally bypasses parent singleton cache to pick up live config changes; creates new instance each call
-- **Type-specific getters use assertions**: get_speech_to_text() asserts isinstance (catches misconfiguration early)
-- **ConfigurationError on missing model**: ModelManager.get_model() and provision_langchain_model() raise `ConfigurationError` (not ValueError) when a model is not found or not configured, so the global exception handler returns HTTP 422 with a descriptive message
-- **Esperanto caching**: Actual model instances cached by Esperanto (not by ModelManager); ModelManager stateless
-- **Fallback chain specificity**: "transformation" type falls back to default_chat_model if not explicitly set (convention-based)
-- **kwargs passed through**: provision_langchain_model() passes kwargs to AIFactory but doesn't validate what's accepted
-- **Key provider sets env vars**: `provision_provider_keys()` modifies `os.environ` to inject DB-stored keys (from `Credential` records); Esperanto reads from env vars (only used as fallback when model has no linked credential)
-
-## How to Extend
-
-1. **Add new model type**: Add type string to Model.type enum, add create_* method in AIFactory, handle in ModelManager.get_model()
-2. **Add new default configuration**: Extend DefaultModels with new field (e.g., default_vision_model), add getter in ModelManager
-3. **Change fallback logic**: Modify provision_langchain_model() token threshold or fallback chain
-4. **Add model filtering**: Extend Model.get_models_by_type() with additional filters (e.g., by provider)
-5. **Implement model caching**: Wrap ModelManager methods with functools.lru_cache (be aware of kwargs mutability)
-
-## Usage Example
-
-```python
-from open_notebook.ai.models import model_manager
-
-# Get default chat model
-chat_model = await model_manager.get_default_model("chat")
-
-# Get specific model by ID
-embedding_model = await model_manager.get_model("model:openai_embedding")
-
-# Get embedding model with config override
-embedding_model = await model_manager.get_embedding_model(temperature=0.1)
-
-# Provision model for LangGraph (auto-detects large context)
-from open_notebook.ai.provision import provision_langchain_model
-langchain_model = await provision_langchain_model(
-    content=long_text,
-    model_id=None,  # Use default
-    default_type="chat",
-    temperature=0.7
-)
-```
-
----
-
-## Connection Testing (connection_tester.py)
-
-### Purpose
-
-Provides functionality to test if a provider's API key is valid by making minimal API calls. Used by the API Configuration UI to validate user-entered credentials before saving.
-
-### test_provider_connection()
-
-Main entry point for testing provider connectivity.
-
-```python
-async def test_provider_connection(
-    provider: str, model_type: str = "language",
-    config_id: Optional[str] = None
-) -> Tuple[bool, str]
-```
-
-**Returns**: `(success: bool, message: str)` - Success status and human-readable message.
-
-**Flow**:
-1. If `config_id` provided: Loads credential via `Credential.get(config_id)`, uses `credential.to_esperanto_config()` for provider config
-2. Looks up test model from `TEST_MODELS` dict
-3. For URL-based providers (ollama, openai_compatible): Tests server connectivity
-4. For Azure: Tests `/openai/models` endpoint with api_version
-5. For API-based providers: Creates minimal model via Esperanto and makes test call
-6. Returns user-friendly error messages for common failures
-
-### test_individual_model()
-
-Tests a specific Model instance by loading its linked credential (if any) and making a minimal API call.
-
-### TEST_MODELS Configuration
-
-Maps each provider to `(model_name, model_type)` for testing:
-
-```python
-TEST_MODELS = {
-    "openai": ("gpt-3.5-turbo", "language"),
-    "anthropic": ("claude-3-haiku-20240307", "language"),
-    "google": ("gemini-1.5-flash", "language"),
-    "groq": ("llama-3.1-8b-instant", "language"),
-    "voyage": ("voyage-3-lite", "embedding"),
-    "elevenlabs": ("eleven_multilingual_v2", "text_to_speech"),
-    "ollama": (None, "language"),  # Dynamic
-    # ... more providers
-}
-```
-
-### Special Provider Handlers
-
-- **`_test_ollama_connection(base_url)`**: Tests Ollama server via `/api/tags` endpoint, returns model count
-- **`_test_openai_compatible_connection(base_url, api_key)`**: Tests OpenAI-compatible servers via `/models` endpoint
-- **`_get_ollama_models(base_url)`**: Fetches available models from Ollama server
-
-### Error Message Normalization
-
-The tester normalizes error messages for user-friendly display:
-- `401/unauthorized` -> "Invalid API key"
-- `403/forbidden` -> "API key lacks required permissions"
-- `rate limit` -> "Rate limited - but connection works" (success)
-- `model not found` -> "API key valid (test model not available)" (success)
-- Connection/timeout errors -> Helpful troubleshooting messages
-
----
-
-## Key Provider (key_provider.py)
-
-### Purpose
-
-Unified interface for retrieving API keys with database-first, environment-fallback strategy. Enables UI-based key management while maintaining backward compatibility with `.env` files. Used as fallback when models don't have a directly linked credential.
-
-### Core Functions
-
-#### get_api_key(provider)
-
-```python
-async def get_api_key(provider: str) -> Optional[str]
-```
-
-Gets API key for a provider. Checks database (`Credential` records) first, then environment variable.
-
-**Fallback Chain**:
-1. Query `Credential` records from database for the given provider
-2. Get api_key from default credential
-3. Handle `SecretStr` (call `.get_secret_value()`) vs regular strings
-4. If DB value exists and is non-empty, return it
-5. Otherwise, return `os.environ.get(env_var)`
-
-#### provision_provider_keys(provider)
-
-```python
-async def provision_provider_keys(provider: str) -> bool
-```
-
-Main entry point for DB->Env fallback. Sets environment variables from database config for a provider. Called before model provisioning to ensure Esperanto can read keys from env vars.
-
-**Returns**: `True` if any keys were set from database.
-
-**Usage**:
-```python
-# Before creating a model, ensure DB keys are in env vars
-await provision_provider_keys("openai")
-model = AIFactory.create_language(model_name="gpt-4", provider="openai")
-```
-
-#### provision_all_keys()
-
-```python
-async def provision_all_keys() -> dict[str, bool]
-```
-
-Provisions all providers at once. Useful at application startup.
-
-### Provider Configuration Maps
-
-#### PROVIDER_CONFIG (Simple Providers)
-
-Single-field providers with API key only:
-
-```python
-PROVIDER_CONFIG = {
-    "openai": {"env_var": "OPENAI_API_KEY", "config_field": "openai_api_key"},
-    "anthropic": {"env_var": "ANTHROPIC_API_KEY", "config_field": "anthropic_api_key"},
-    "google": {"env_var": "GOOGLE_API_KEY", "config_field": "google_api_key"},
-    "groq": {"env_var": "GROQ_API_KEY", "config_field": "groq_api_key"},
-    "mistral": {"env_var": "MISTRAL_API_KEY", "config_field": "mistral_api_key"},
-    "deepseek": {"env_var": "DEEPSEEK_API_KEY", "config_field": "deepseek_api_key"},
-    "xai": {"env_var": "XAI_API_KEY", "config_field": "xai_api_key"},
-    "openrouter": {"env_var": "OPENROUTER_API_KEY", "config_field": "openrouter_api_key"},
-    "voyage": {"env_var": "VOYAGE_API_KEY", "config_field": "voyage_api_key"},
-    "elevenlabs": {"env_var": "ELEVENLABS_API_KEY", "config_field": "elevenlabs_api_key"},
-    "ollama": {"env_var": "OLLAMA_API_BASE", "config_field": "ollama_api_base"},
-}
-```
-
-#### VERTEX_CONFIG (Google Vertex AI)
-
-Multi-field configuration for Vertex AI:
-
-```python
-VERTEX_CONFIG = {
-    "project": {"env_var": "VERTEX_PROJECT", "config_field": "vertex_project"},
-    "location": {"env_var": "VERTEX_LOCATION", "config_field": "vertex_location"},
-    "credentials": {"env_var": "GOOGLE_APPLICATION_CREDENTIALS", "config_field": "google_application_credentials"},
-}
-```
-
-#### AZURE_CONFIG (Azure OpenAI)
-
-Generic and mode-specific endpoints for Azure:
-
-```python
-AZURE_CONFIG = {
-    "api_key": {"env_var": "AZURE_OPENAI_API_KEY", "config_field": "azure_openai_api_key"},
-    "api_version": {"env_var": "AZURE_OPENAI_API_VERSION", "config_field": "azure_openai_api_version"},
-    "endpoint": {"env_var": "AZURE_OPENAI_ENDPOINT", "config_field": "azure_openai_endpoint"},
-    # Mode-specific endpoints
-    "endpoint_llm": {"env_var": "AZURE_OPENAI_ENDPOINT_LLM", "config_field": "azure_openai_endpoint_llm"},
-    "endpoint_embedding": {"env_var": "AZURE_OPENAI_ENDPOINT_EMBEDDING", "config_field": "azure_openai_endpoint_embedding"},
-    "endpoint_stt": {"env_var": "AZURE_OPENAI_ENDPOINT_STT", "config_field": "azure_openai_endpoint_stt"},
-    "endpoint_tts": {"env_var": "AZURE_OPENAI_ENDPOINT_TTS", "config_field": "azure_openai_endpoint_tts"},
-}
-```
-
-#### OPENAI_COMPATIBLE_CONFIG
-
-Generic and mode-specific configuration for OpenAI-compatible providers:
-
-```python
-OPENAI_COMPATIBLE_CONFIG = {
-    # Generic
-    "api_key": {"env_var": "OPENAI_COMPATIBLE_API_KEY", "config_field": "openai_compatible_api_key"},
-    "base_url": {"env_var": "OPENAI_COMPATIBLE_BASE_URL", "config_field": "openai_compatible_base_url"},
-    # Mode-specific: LLM, Embedding, STT, TTS
-    "api_key_llm": {"env_var": "OPENAI_COMPATIBLE_API_KEY_LLM", "config_field": "openai_compatible_api_key_llm"},
-    "base_url_llm": {"env_var": "OPENAI_COMPATIBLE_BASE_URL_LLM", "config_field": "openai_compatible_base_url_llm"},
-    # ... similar for embedding, stt, tts
-}
-```
-
-### Internal Helper Functions
-
-- **`_provision_simple_provider(provider)`**: Sets single env var for simple providers
-- **`_provision_vertex()`**: Sets all Vertex AI env vars
-- **`_provision_azure()`**: Sets all Azure OpenAI env vars (handles SecretStr)
-- **`_provision_openai_compatible()`**: Sets all OpenAI-compatible env vars
-
-### Integration with ModelManager
-
-The credential system integrates with model provisioning in two ways:
-
-1. **Credential-linked models** (preferred): Model has `credential` field pointing to a Credential record. `ModelManager.get_model()` calls `credential.to_esperanto_config()` and passes config directly to Esperanto's `AIFactory.create_*` methods
-2. **Env var fallback**: If model has no linked credential, `provision_provider_keys(provider)` sets env vars from DB credentials; Esperanto reads from env vars
-3. **ConnectionTester** loads Credential directly via `Credential.get(config_id)` for testing
-
-The credential-linked approach is preferred as it allows multiple credentials per provider and avoids env var mutation.
diff --git a/open_notebook/database/CLAUDE.md b/open_notebook/database/CLAUDE.md
deleted file mode 100644
index 3f2c63bf..00000000
--- a/open_notebook/database/CLAUDE.md
+++ /dev/null
@@ -1,124 +0,0 @@
-# Database Module
-
-SurrealDB abstraction layer providing repository pattern for CRUD operations and async migration management.
-
-## Purpose
-
-Encapsulates all database interactions: connection pooling, async CRUD operations, relationship management, and schema migrations. Provides clean interface for domain models and API endpoints to interact with SurrealDB without direct query knowledge.
-
-## Architecture Overview
-
-Two-tier system:
-1. **Repository Layer** (repository.py): Raw async CRUD operations on SurrealDB via AsyncSurreal client
-2. **Migration Layer** (async_migrate.py): Schema versioning and migration execution
-
-Both leverage connection context manager for lifecycle management and automatic cleanup.
-
-## Component Catalog
-
-### repository.py
-
-**Connection Management**
-- `get_database_url()`: Resolves `SURREAL_URL` or constructs from `SURREAL_ADDRESS`/`SURREAL_PORT` (backward compatible)
-- `get_database_password()`: Falls back from `SURREAL_PASSWORD` to legacy `SURREAL_PASS` env var
-- `db_connection()`: Async context manager handling sign-in, namespace/database selection, and cleanup
-  - Opens AsyncSurreal, authenticates, selects namespace/database, yields connection, closes on exit
-
-**Query Operations**
-- `repo_query(query_str, vars)`: Execute raw SurrealQL with parameter substitution; returns list of dicts
-- `repo_create(table, data)`: Insert record; auto-adds `created`/`updated` timestamps; removes any existing `id` field
-- `repo_insert(table, data_list, ignore_duplicates)`: Bulk insert multiple records; optionally ignores "already contains" errors
-- `repo_upsert(table, id, data, add_timestamp)`: MERGE operation for create-or-update; optionally adds `updated` timestamp
-- `repo_update(table, id, data)`: Update existing record by table+id or full record_id; auto-adds `updated`, parses ISO dates
-- `repo_delete(record_id)`: Delete record by RecordID
-- `repo_relate(source, relationship, target, data)`: Create graph relationship; optional relationship data
-
-**Utilities**
-- `parse_record_ids(obj)`: Recursively converts SurrealDB RecordID objects to strings (deep tree traversal)
-- `ensure_record_id(value)`: Coerces string or RecordID to RecordID type
-
-### async_migrate.py
-
-**Migration Classes**
-- `AsyncMigration`: Single migration wrapper
-  - `from_file(path)`: Load .surrealql file; strips comments and whitespace
-  - `run(bump)`: Execute SQL; call bump_version() on success (bump=True) or lower_version() (bump=False)
-
-- `AsyncMigrationRunner`: Sequences multiple migrations
-  - `run_all()`: Execute pending migrations from current_version to end
-  - `run_one_up()`: Run next migration
-  - `run_one_down()`: Rollback latest migration
-
-- `AsyncMigrationManager`: Main orchestrator
-  - Loads 15 up migrations + 15 down migrations (hard-coded in __init__; migrations 11-12 add credential system, 13 adds model-credential link, 14 adds podcast model registry fields, 15 adds the flexible `config` object to the credential table)
-  - `get_current_version()`: Query max version from _sbl_migrations table
-  - `needs_migration()`: Boolean check (current < total migrations available)
-  - `run_migration_up()`: Run all pending migrations with logging
-
-**Version Tracking**
-- `get_latest_version()`: Query max version; returns 0 if _sbl_migrations table missing
-- `get_all_versions()`: Fetch all migration records; returns empty list on error
-- `bump_version()`: INSERT new entry into _sbl_migrations with version + applied_at timestamp
-- `lower_version()`: DELETE latest migration record (rollback)
-
-### migrate.py
-
-**Backward Compatibility**
-- `MigrationManager`: Sync wrapper around AsyncMigrationManager
-  - `get_current_version()`: Wraps async call with asyncio.run()
-  - `needs_migration` property: Checks if migration pending
-  - `run_migration_up()`: Execute migrations synchronously
-
-## Common Patterns
-
-- **Async-first design**: All operations async via AsyncSurreal; sync wrapper provided for legacy code
-- **Connection per operation**: Each repo_* function opens/closes connection (no pooling); designed for serverless/stateless API
-- **Auto-timestamping**: repo_create() and repo_update() auto-set `created`/`updated` fields
-- **Error resilience**: RuntimeError for transaction conflicts (retriable, logged at DEBUG level); catches and re-raises other exceptions
-- **RecordID polymorphism**: Functions accept string or RecordID; coerced to consistent type
-- **Graceful degradation**: Migration queries catch exceptions and treat table-not-found as version 0
-
-## Key Dependencies
-
-- `surrealdb`: AsyncSurreal client, RecordID type
-- `loguru`: Logging with context (debug/error/success levels)
-- Python stdlib: `os` (env vars), `datetime` (timestamps), `contextlib` (async context manager)
-
-## Important Quirks & Gotchas
-
-- **No connection pooling**: Each repo_* operation creates new connection; adequate for HTTP request-scoped operations but inefficient for bulk workloads
-- **Hard-coded migration files**: AsyncMigrationManager lists migrations 1-14 explicitly; adding new migration requires code change (not auto-discovery)
-- **Record ID format inconsistency**: repo_update() accepts both `table:id` format and full RecordID; path handling can be subtle
-- **ISO date parsing**: repo_update() parses `created` field from string to datetime if present; assumes ISO format
-- **Timestamp overwrite risk**: repo_create() always sets new timestamps; can't preserve original created time on reimport
-- **Transaction conflict handling**: RuntimeError from transaction conflicts logged at DEBUG level without stack trace (prevents log spam during concurrent operations)
-- **Graceful null returns**: get_all_versions() returns [] on table missing; allows migration system to bootstrap cleanly
-
-## How to Extend
-
-1. **Add new CRUD operation**: Follow repo_* pattern (open connection, execute query, handle errors, close)
-2. **Add migration**: Create migration file in `/migrations/N.surrealql` and `/migrations/N_down.surrealql`; update AsyncMigrationManager to load new files
-3. **Change timestamp behavior**: Modify repo_create()/repo_update() to not auto-set `updated` field if caller-provided
-4. **Implement connection pooling**: Replace db_connection context manager with pool.acquire() pattern (for high-throughput scenarios)
-
-## Integration Points
-
-- **API startup** (api/main.py): FastAPI lifespan handler calls AsyncMigrationManager.run_migration_up() on server start
-- **Domain models** (domain/*.py): All models call repo_* functions for persistence
-- **Commands** (commands/*.py): Background jobs use repo_* for state updates
-- **Streamlit UI** (pages/*.py): Deprecated migration check; relies on API to run migrations
-
-## Usage Example
-
-```python
-from open_notebook.database.repository import repo_create, repo_query, repo_update
-
-# Create
-record = await repo_create("notebooks", {"title": "Research"})
-
-# Query
-results = await repo_query("SELECT * FROM notebooks WHERE title = $title", {"title": "Research"})
-
-# Update
-await repo_update("notebooks", record["id"], {"title": "Updated Research"})
-```
diff --git a/open_notebook/domain/CLAUDE.md b/open_notebook/domain/CLAUDE.md
deleted file mode 100644
index 5c2ec150..00000000
--- a/open_notebook/domain/CLAUDE.md
+++ /dev/null
@@ -1,122 +0,0 @@
-# Domain Module
-
-Core data models for notebooks, sources, notes, and settings with async SurrealDB persistence, auto-embedding, and relationship management.
-
-## Purpose
-
-Two base classes support different persistence patterns: **ObjectModel** (mutable records with auto-increment IDs) and **RecordModel** (singleton configuration with fixed IDs).
-
-## Key Components
-
-### base.py
-- **ObjectModel**: Base for notebooks, sources, notes
-  - `save()`: Create/update with auto-embedding for searchable content
-  - `delete()`: Remove by ID
-  - `relate(relationship, target_id)`: Create graph relationships (reference, artifact, refers_to)
-  - `get(id)`: Polymorphic fetch; resolves subclass from ID prefix
-  - `get_all(order_by)`: Fetch all records from table
-  - Integrates with ModelManager for automatic embedding
-
-- **RecordModel**: Singleton configuration (ContentSettings, DefaultPrompts)
-  - Fixed record_id per subclass
-  - `update()`: Upsert to database
-  - Lazy DB loading via `_load_from_db()`
-
-### notebook.py
-- **Notebook**: Research project container
-  - `get_sources()`, `get_notes()`, `get_chat_sessions()`: Navigate relationships
-  - `get_delete_preview()`: Returns counts of notes, exclusive sources, and shared sources that would be affected by deletion
-  - `delete(delete_exclusive_sources)`: Cascade deletion - always deletes notes, optionally deletes exclusive sources, always unlinks all sources
-
-- **Source**: Content item (file/URL)
-  - `vectorize()`: Submit async embedding job (returns command_id, fire-and-forget)
-  - `get_status()`, `get_processing_progress()`: Track job via surreal_commands
-  - `get_context()`: Returns summary for LLM context
-  - `add_insight()`: Submit async insight creation via `create_insight_command` (fire-and-forget, returns command_id). Raises `DatabaseOperationError` if *submission* itself fails (matches `vectorize()`) - callers (`transformation.py`, `source.py`) run inside surreal-commands jobs whose outer exception handling already retries/fails on this
-
-- **Note**: Standalone or linked notes
-  - `save()`: Submits `embed_note` command after save (fire-and-forget)
-  - `add_to_notebook()`: Link to notebook
-
-- **SourceInsight, SourceEmbedding**: Derived content models
-- **ChatSession**: Conversation container with optional model_override
-- **Asset**: File/URL reference helper
-
-- **Search functions**:
-  - `text_search()`: Full-text keyword search. On a SurrealDB `search::highlight` "position overflow" (large/multi-byte chunks) it falls back to `vector_search()`; if that also fails it raises `DatabaseOperationError` (never silently returns an empty list)
-  - `vector_search()`: Semantic search via embeddings (default minimum_score=0.2)
-
-### content_settings.py
-- **ContentSettings**: Singleton for processing engines, embedding strategy, file deletion, YouTube languages
-
-### transformation.py
-- **Transformation**: Reusable prompts for content transformation
-- **DefaultPrompts**: Singleton with transformation instructions
-
-### credential.py
-- **Credential**: Individual credential records for API keys and provider configuration
-  - **One record per credential**: Each credential (e.g., "My OpenAI Key", "Work Anthropic") is a separate `Credential` record in SurrealDB
-  - **Fields**: name, provider, modalities (list), api_key (SecretStr), base_url, endpoint, api_version, endpoint_llm/embedding/stt/tts, project, location, credentials_path
-  - **SecretStr protection**: API key field uses Pydantic's `SecretStr` (values masked in logs/repr)
-  - **Encryption integration**: Uses `encrypt_value()`/`decrypt_value()` from `open_notebook.utils.encryption`
-    - Keys encrypted with Fernet before database storage
-    - Requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` environment variable (warns if not set)
-  - **Key methods**:
-    - `to_esperanto_config()`: Builds config dict for Esperanto's AIFactory methods
-    - `get_by_provider(provider)`: Class method to fetch all credentials for a provider
-    - `get_linked_models()`: Returns all Model records linked to this credential
-  - **Custom serialization**: `_prepare_save_data()` extracts SecretStr values and encrypts before storage
-  - **Decryption on read**: `get()` and `get_all()` overridden to decrypt api_key after fetch
-
-- **Note**: `provider_config.py` still exists for legacy migration support (migrating old ProviderConfig records to Credential)
-
-## Important Patterns
-
-- **Async/await**: All DB operations async; always use await
-- **Polymorphic get()**: `ObjectModel.get(id)` determines subclass from ID prefix (table:id format)
-- **Fire-and-forget embedding**: Models submit embed_* commands after save via `submit_command()` (non-blocking)
-- **Nullable fields**: Declare via `nullable_fields` ClassVar to allow None in database
-- **Timestamps**: `created` and `updated` auto-managed as ISO strings
-- **Fire-and-forget jobs**: `source.vectorize()` returns command_id without waiting
-
-## Key Dependencies
-
-- `surrealdb`: RecordID type for relationships
-- `pydantic`: Validation and field_validator decorators
-- `open_notebook.database.repository`: CRUD and relationship functions
-- `open_notebook.ai.models`: ModelManager for embeddings
-- `surreal_commands`: Async job submission (vectorization, insights)
-- `loguru`: Logging
-
-## Quirks & Gotchas
-
-- **Polymorphic resolution**: `ObjectModel.get()` fails if subclass not imported (search subclasses list)
-- **RecordModel singleton**: __new__ returns existing instance; call `clear_instance()` in tests
-- **Source.command field**: Stored as RecordID; auto-parsed from strings via field_validator
-- **Text truncation**: `Note.get_context(short)` hardcodes 100-char limit
-- **Auto-embedding behavior**:
-  - `Note.save()` → auto-submits `embed_note` command; submission failure is caught and logged (returns `None`), not raised - the note's core save already succeeded by that point. `api/routers/embedding.py`'s explicit `POST /embed` (item_type=note) checks for this and still surfaces it as a failure, since submission is the whole point of that call
-  - `Source.save()` → does NOT auto-submit (must call `vectorize()` explicitly)
-  - `Source.add_insight()` → submits `create_insight_command` which handles DB insert + `embed_insight` command (all fire-and-forget - but a failure to *submit* the command raises rather than being swallowed)
-- **Relationship strings**: Must match SurrealDB schema (reference, artifact, refers_to)
-
-## How to Add New Model
-
-1. Inherit from ObjectModel with table_name ClassVar
-2. Define Pydantic fields with validators
-3. Override `save()` to submit embedding command if searchable (use `submit_command("embed_*", id)`)
-4. Add custom methods for domain logic (get_X, add_to_Y)
-5. Implement `_prepare_save_data()` if custom serialization needed
-
-## Usage
-
-```python
-notebook = Notebook(name="Research", description="My project")
-await notebook.save()
-
-obj = await ObjectModel.get("notebook:123")  # Polymorphic fetch
-
-# Search
-await text_search("quantum", results=5)
-await vector_search("quantum computing", results=10, minimum_score=0.3)
-```
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 505c3588..869222a3 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -342,8 +342,8 @@ class SourceInsight(ObjectModel):
 
         Building notebook/chat context otherwise calls get_insights() once
         per source - fine for one source, but O(n) round trips (each paying
-        its own connection setup, see database/CLAUDE.md) when a caller
-        loops over every source in a notebook.
+        its own connection setup - no pooling in the repository layer) when
+        a caller loops over every source in a notebook.
         """
         grouped: Dict[str, List[SourceInsight]] = {sid: [] for sid in source_ids if sid}
         if not grouped:
diff --git a/open_notebook/graphs/CLAUDE.md b/open_notebook/graphs/CLAUDE.md
deleted file mode 100644
index 1b4660aa..00000000
--- a/open_notebook/graphs/CLAUDE.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# Graphs Module
-
-LangGraph-based workflow orchestration for content processing, chat interactions, and AI-powered transformations.
-
-## Key Components
-
-- **`chat.py`**: Conversational agent with message history, notebook context, and model override support
-- **`source_chat.py`**: Source-focused chat with ContextBuilder for insights/content injection and context tracking
-- **`ask.py`**: Multi-search strategy agent (generates search terms, retrieves results, synthesizes answers)
-- **`source.py`**: Content ingestion pipeline (extract → save → transform with content-core)
-- **`transformation.py`**: Single-node transformation executor with prompt templating via ai_prompter
-- **`prompt.py`**: Generic pattern chain for arbitrary prompt-based LLM calls
-- **`tools.py`**: Minimal tool library (currently just `get_current_timestamp()`)
-
-## Important Patterns
-
-- **Async/sync bridging in graphs**: Both `chat.py` and `source_chat.py` use `asyncio.new_event_loop()` workaround because LangGraph nodes are sync but `provision_langchain_model()` is async
-- **State machines via StateGraph**: Each graph compiles to stateful runnable; conditional edges fan out work (ask.py, source.py do parallel transforms)
-- **Prompt templating**: `ai_prompter.Prompter` with Jinja2 templates referenced by path ("chat/system", "ask/entry", etc.)
-- **Model provisioning via context**: Config dict passed to node via `RunnableConfig`; defaults fall back to state overrides
-- **Checkpointing**: `chat.py` and `source_chat.py` use SqliteSaver for message history (LangGraph's built-in persistence)
-- **Content extraction**: `source.py` uses content-core library with provider/model from DefaultModels; URLs and files both supported
-
-## Error Handling in Graphs
-
-All graph nodes use `classify_error()` from `open_notebook.utils.error_classifier` to catch raw LLM provider exceptions and re-raise them as typed `OpenNotebookError` subclasses with user-friendly messages. This ensures that errors from any AI provider (authentication failures, rate limits, model not found, network issues) are surfaced to the user with actionable messages instead of opaque stack traces.
-
-**Pattern in nodes**:
-```python
-from open_notebook.utils.error_classifier import classify_error
-
-try:
-    result = await model.ainvoke(...)
-except Exception as e:
-    exc_class, message = classify_error(e)
-    raise exc_class(message) from e
-```
-
----
-
-## Quirks & Edge Cases
-
-- **Async loop gymnastics**: ThreadPoolExecutor workaround needed because LangGraph invokes sync nodes but we call async functions; fragile if event loop state changes
-- **`clean_thinking_content()` ubiquitous**: Strips `<think>...</think>` tags from model responses (handles extended thinking models)
-- **source_chat.py builds context twice**: ContextBuilder runs during node execution to fetch source/insights; rebuilds list from context_data (inefficient but safe)
-- **source.py embedding is async**: `source.vectorize()` returns job command ID; not awaited (fire-and-forget)
-- **transformation.py nullable source**: Accepts `input_text` or `source.full_text` (falls back to second if first missing)
-- **ask.py hard-coded vector_search**: No fallback to text search despite commented code suggesting it was planned
-- **SqliteSaver location**: Checkpoints stored in path from `LANGGRAPH_CHECKPOINT_FILE` env var; connection shared across graphs
-
-## Key Dependencies
-
-- `langgraph`: StateGraph, Send, END, START, SqliteSaver checkpoint persistence
-- `langchain_core`: Messages, OutputParser, RunnableConfig
-- `ai_prompter`: Prompter for Jinja2 template rendering
-- `content_core`: `extract_content()` for file/URL processing
-- `open_notebook.ai.provision`: `provision_langchain_model()` (async factory with fallback logic)
-- `open_notebook.utils.error_classifier`: `classify_error()` for user-friendly LLM error messages
-- `open_notebook.domain.notebook`: Domain models (Source, Note, SourceInsight, vector_search)
-- `loguru`: Logging
-
-## Usage Example
-
-```python
-# Invoke a graph with config override
-config = {"configurable": {"model_id": "model:custom_id"}}
-result = await chat_graph.ainvoke(
-    {"messages": [HumanMessage(content="...")], "notebook": notebook},
-    config=config
-)
-
-# Source processing (content → save → transform)
-result = await source_graph.ainvoke({
-    "content_state": {...},  # ProcessSourceState from content-core
-    "apply_transformations": [t1, t2],
-    "source_id": "source:123",
-    "embed": True
-})
-```
diff --git a/open_notebook/podcasts/CLAUDE.md b/open_notebook/podcasts/CLAUDE.md
deleted file mode 100644
index 27682fc0..00000000
--- a/open_notebook/podcasts/CLAUDE.md
+++ /dev/null
@@ -1,104 +0,0 @@
-# Podcasts Module
-
-Domain models for podcast generation featuring speaker and episode profile management with job tracking.
-
-## Purpose
-
-Encapsulates podcast metadata and configuration: speaker profiles (voice/personality config), episode profiles (generation settings), and podcast episodes (with job status tracking via surreal-commands).
-
-## Architecture Overview
-
-Two-tier profile system using the **model registry** for AI model references:
-- **SpeakerProfile**: `voice_model` (record<model> reference) + 1-4 speaker configurations (name, voice_id, backstory, personality). Per-speaker `voice_model` overrides supported.
-- **EpisodeProfile**: `outline_llm`/`transcript_llm` (record<model> references) for LLM selection, `language` field (BCP 47 locale code), segment count, briefing template.
-- **PodcastEpisode**: Generated episode record linking profiles, content, and async job.
-
-All inherit from `ObjectModel` (SurrealDB base class with table_name and save/load).
-
-## Component Catalog
-
-### models.py
-
-#### `_resolve_model_config(model_id)` (module-level helper)
-- Loads a Model record by ID, resolves its credential, returns `(provider, model_name, config_dict)` tuple.
-- Used by `resolve_outline_config()`, `resolve_transcript_config()`, `resolve_tts_config()`, and per-speaker TTS overrides in `podcast_commands.py`.
-- Falls back to `provision_provider_keys()` if no credential is linked.
-
-#### SpeakerProfile
-- `voice_model`: Optional `record<model>` reference for TTS (replaces legacy `tts_provider`/`tts_model` strings).
-- Legacy fields `tts_provider`/`tts_model` kept as optional for migration compatibility.
-- `nullable_fields` ClassVar lists fields that may be null in the database.
-- Validates 1-4 speakers with required fields: name, voice_id, backstory, personality.
-- Per-speaker `voice_model` override: individual speakers can reference a different TTS model.
-- `_prepare_save_data()` converts `voice_model` (and per-speaker overrides) to RecordID before save.
-- `resolve_tts_config()` resolves `voice_model` via `_resolve_model_config()`. Raises ValueError if not set.
-- `get_by_name()` async query by profile name.
-
-#### EpisodeProfile
-- `outline_llm`/`transcript_llm`: Optional `record<model>` references (replace legacy `outline_provider`/`outline_model`/`transcript_provider`/`transcript_model` strings).
-- `language`: Optional BCP 47 locale code for podcast language (e.g. `pt-BR`, `en-US`).
-- Legacy fields kept as optional for migration compatibility.
-- `nullable_fields` ClassVar lists fields that may be null in the database.
-- `num_segments` validated between 3 and 20.
-- References `speaker_config` by name.
-- `_prepare_save_data()` converts `outline_llm`/`transcript_llm` to RecordID before save.
-- `resolve_outline_config()` / `resolve_transcript_config()` resolve model references via `_resolve_model_config()`. Raise ValueError if not set.
-- `get_by_name()` async query.
-
-#### PodcastEpisode
-- Stores episode_profile and speaker_profile as dicts (snapshots of config at generation time).
-- Optional audio_file path, transcript/outline dicts.
-- **Job tracking**: command field links to surreal-commands RecordID.
-- `get_job_status()` fetches async job status via surreal-commands library.
-- `get_job_detail()` returns both status and error_message from the job (used for retry validation and UI error display).
-- `get_job_details_for_commands(command_ids)` (classmethod): batch version of `get_job_detail()` - fetches status/error_message for many commands in one query against the `command` table (same underlying SurrealDB as the rest of the app, just via `surreal_commands`' own connection module) instead of one round trip per command. Used by `GET /podcasts/episodes` so listing N episodes costs one job-status query instead of N.
-- `_prepare_save_data()` ensures command field is always RecordID format for database.
-
-### migration.py
-
-Data migration for podcast profiles: maps legacy provider/model strings to Model registry record IDs. Runs on API startup after SQL migrations (called from `api/main.py` lifespan).
-
-- `_find_model_record()`: Finds an existing Model record matching provider + name + type.
-- `_find_or_create_model()`: Finds existing Model record or auto-creates one linked to a provider credential.
-- `migrate_podcast_profiles()`: Migrates all episode and speaker profiles. Idempotent -- skips profiles where new fields are already populated. Logs counts of migrated/skipped/failed profiles.
-
-## Common Patterns
-
-- **Model registry references**: Profile fields reference `record<model>` IDs instead of raw provider/model strings. Credentials are resolved at runtime via `_resolve_model_config()`.
-- **Profile snapshots**: episode_profile and speaker_profile stored as dicts on PodcastEpisode to freeze config at generation time.
-- **Field validation**: Pydantic validators enforce constraints (segment count, speaker count, required fields).
-- **Async database access**: `get_by_name()` queries via repo_query.
-- **Job tracking**: command field delegates to surreal-commands; get_job_status() returns "unknown" on failure.
-- **Record ID handling**: `_prepare_save_data()` converts model ID strings to RecordID before save; `ensure_record_id()` handles both string and RecordID inputs.
-- **nullable_fields ClassVar**: Declares fields that may be null/absent in the database, allowing ObjectModel to handle them during deserialization.
-
-## Key Dependencies
-
-- `pydantic`: Field validators, ObjectModel inheritance
-- `surrealdb`: RecordID type for job and model references
-- `open_notebook.database.repository`: repo_query, ensure_record_id
-- `open_notebook.domain.base`: ObjectModel base class
-- `open_notebook.ai.models`: Model class (for `_resolve_model_config`)
-- `open_notebook.ai.key_provider`: provision_provider_keys (fallback)
-- `open_notebook.domain.credential`: Credential (for migration)
-- `surreal_commands` (optional): get_command_status() for job status
-
-## Important Quirks & Gotchas
-
-- **Legacy fields preserved**: `tts_provider`/`tts_model` on SpeakerProfile and `outline_provider`/`outline_model`/`transcript_provider`/`transcript_model` on EpisodeProfile are kept as optional nullable fields for backward compatibility with the data migration. The app ignores them at runtime.
-- **Snapshot approach**: Episode/speaker profiles stored as dicts (not references), so profile updates don't retroactively affect past episodes.
-- **Job status resilience**: get_job_status() catches all exceptions and returns "unknown" (no error propagation).
-- **No automatic retries**: Podcast generation commands use `retry={"max_attempts": 1}` to prevent duplicate episode records on failure; retry is user-initiated via `POST /podcasts/episodes/{id}/retry`.
-- **validate_speakers executes late**: Validators run at instantiation; bulk inserts may not trigger full validation.
-- **RecordID coercion**: `_prepare_save_data()` converts model ID strings to RecordID; command field parsed during deserialization.
-- **No cascade delete**: Removing a profile doesn't cascade to episodes using it.
-- **Migration is idempotent**: `migrate_podcast_profiles()` skips profiles that already have new fields populated. Safe to run multiple times.
-- **Migration auto-creates models**: If a legacy provider/model string has no matching Model record but a credential exists for that provider, the migration auto-creates a Model record linked to the credential.
-
-## How to Extend
-
-1. **Add new speaker field**: Add to required_fields list in validate_speakers()
-2. **Add episode config field**: Validate in EpisodeProfile, update briefing generation code; add to nullable_fields if optional
-3. **Add job metadata**: Extend PodcastEpisode with new fields (e.g., progress tracking)
-4. **Change job provider**: Replace surreal-commands with alternative job queue library; update get_job_status()
-5. **Add new model reference field**: Add field, add to nullable_fields, add RecordID conversion in `_prepare_save_data()`, add resolve method using `_resolve_model_config()`
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index 39beba4d..0a6ce8cb 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -279,12 +279,12 @@ class PodcastEpisode(ObjectModel):
 
         Listing episodes otherwise calls get_job_detail() -> surreal_commands
         .get_command_status() once per episode, each its own round trip
-        against the `command` table (see database/CLAUDE.md: no connection
-        pooling) - O(n) queries for n episodes. surreal_commands has no
-        batch lookup, but its command table lives in the same database
-        (same SURREAL_* env vars - see surreal_commands/repository/CLAUDE.md),
-        so this queries it directly in one shot instead of looping through
-        the library's per-command helper.
+        against the `command` table (no connection pooling in the repository
+        layer, see docs/7-DEVELOPMENT/architecture.md) - O(n) queries for n
+        episodes. surreal_commands has no batch lookup, but its command table
+        lives in the same database (same SURREAL_* env vars), so this queries
+        it directly in one shot instead of looping through the library's
+        per-command helper.
 
         CommandStatus is a `str` subclass (`class CommandStatus(str, Enum)`),
         so returning the raw DB string here is interchangeable with the
diff --git a/open_notebook/utils/CLAUDE.md b/open_notebook/utils/CLAUDE.md
deleted file mode 100644
index ec4d0832..00000000
--- a/open_notebook/utils/CLAUDE.md
+++ /dev/null
@@ -1,229 +0,0 @@
-# Utils Module
-
-Utility functions and helpers for context building, text processing, chunking, embedding, tokenization, and versioning.
-
-## Purpose
-
-Provides cross-cutting concerns: building LLM context from sources/insights, content-type aware text chunking, unified embedding generation with mean pooling, token counting, and version management.
-
-## Architecture Overview
-
-**Six core utilities**:
-1. **context_builder.py**: Flexible context assembly from sources, notes, insights with token budgeting
-2. **chunking.py**: Content-type detection and smart text chunking for embedding operations
-3. **embedding.py**: Unified embedding generation with mean pooling for large content
-4. **text_utils.py**: Text cleaning and thinking content extraction
-5. **token_utils.py**: Token counting for LLM context windows (wrapper around encoding library)
-6. **version_utils.py**: Version parsing, comparison, and schema compatibility checks
-
-Each utility is stateless and can be imported independently.
-
-## Configuration
-
-### Chunking Configuration (chunking.py)
-
-The chunking behavior can be configured via environment variables:
-
-- **OPEN_NOTEBOOK_CHUNK_SIZE**: Maximum chunk size in tokens (default: 400)
-  - Minimum: 100 tokens
-  - Warnings: Values > 8192 tokens or invalid values
-  - Use case: Conservative baseline that leaves headroom below 512-token embedders (e.g. mxbai-embed-large). Buffer accounts for tokenizer mismatch between our `o200k_base` measurement and the embedder's own tokenizer, plus occasional splitter overshoot and special tokens.
-
-- **OPEN_NOTEBOOK_CHUNK_OVERLAP**: Overlap between chunks in tokens (default: 15% of CHUNK_SIZE)
-  - Must be: >= 0 and < CHUNK_SIZE
-  - Warnings: Invalid values or values >= CHUNK_SIZE
-  - Use case: Control how much context is shared between adjacent chunks
-
-Example for embedders with larger context windows (e.g. OpenAI text-embedding-3 family, 8191 tokens):
-```bash
-export OPEN_NOTEBOOK_CHUNK_SIZE=1500
-export OPEN_NOTEBOOK_CHUNK_OVERLAP=150
-```
-
-Note: Changes require restart of the application.
-
-## Component Catalog
-
-### context_builder.py
-- **ContextItem**: Dataclass for individual context piece (id, type, content, priority, token_count)
-- **ContextConfig**: Configuration for context building (sources/notes/insights selection, max tokens, priority weights)
-- **ContextBuilder**: Main class assembling context
-  - `add_source()`: Include source by ID with inclusion level
-  - `add_note()`: Include note by ID
-  - `add_insight()`: Include insight by ID
-  - `build()`: Assemble context respecting token budget and priorities
-  - Uses vector_search to fetch source/insight content from SurrealDB
-  - Returns list of ContextItem objects sorted by priority
-
-**Key behavior**:
-- Token counting is automatic (calculated in ContextItem.__post_init__)
-- Max token enforcement via priority weighting (higher priority items included first)
-- Type-specific fetching: sources → Source.full_text, notes → Note.content, insights → SourceInsight.content
-- Raises DatabaseOperationError if source/note fetch fails
-
-### chunking.py
-- **ContentType**: Enum (HTML, MARKDOWN, PLAIN)
-- **CHUNK_SIZE**: Configurable via `OPEN_NOTEBOOK_CHUNK_SIZE` env var (default: 400)
-- **CHUNK_OVERLAP**: Configurable via `OPEN_NOTEBOOK_CHUNK_OVERLAP` env var (default: 15% of CHUNK_SIZE)
-- **detect_content_type_from_extension(file_path)**: Detect type from file extension
-- **detect_content_type_from_heuristics(text)**: Detect type from content patterns (returns type + confidence)
-- **detect_content_type(text, file_path)**: Combined detection (extension primary, heuristics fallback)
-- **chunk_text(text, content_type, file_path)**: Split text using appropriate splitter
-
-**Key behavior**:
-- Uses LangChain splitters: HTMLHeaderTextSplitter, MarkdownHeaderTextSplitter, RecursiveCharacterTextSplitter
-- Extension-based detection is primary; heuristics can override PLAIN extensions with 0.8+ confidence
-- Secondary chunking applied when HTML/Markdown splitters produce oversized chunks
-- Returns list of strings, each approximately ≤ CHUNK_SIZE tokens
-
-### embedding.py
-- **mean_pool_embeddings(embeddings)**: Combine multiple embeddings via normalized mean pooling
-- **generate_embeddings(texts)**: Batch embedding with automatic batching (default 50 texts per batch) and per-batch retry
-- **generate_embedding(text, content_type, file_path)**: Unified embedding with automatic chunking + mean pooling
-
-**Key behavior**:
-- Uses model_manager.get_model("embedding") for embedding model
-- Short text (≤ CHUNK_SIZE tokens): direct embedding
-- Long text: chunk → embed each → mean pool results
-- Mean pooling: normalize each → mean → normalize result (using numpy)
-- Raises ValueError for empty/whitespace-only text
-
-### text_utils.py
-- **remove_non_ascii(text)**: Remove non-ASCII characters from text
-- **remove_non_printable(text)**: Remove non-printable characters, preserving newlines/tabs
-- **parse_thinking_content(content)**: Extract `<think>` tags content from AI responses
-- **clean_thinking_content(content)**: Remove `<think>` blocks, return cleaned content only
-
-**Key behavior**:
-- parse_thinking_content handles malformed output (missing opening `<think>` tag)
-- Large content (>100KB) bypasses thinking extraction for performance
-- Non-string input returns empty thinking and stringified content
-
-### token_utils.py
-- **token_count(text)**: Returns estimated token count for string (via tiktoken)
-- **token_cost(text, model)**: Calculate cost estimate for text with given model
-
-**Key behavior**: Uses `o200k_base` encoding; may differ slightly from actual model tokenization. If `tiktoken` is unavailable, `token_count()` falls back to a coarse estimate; this refactor keeps that existing contract.
-
-### version_utils.py
-- **compare_versions(v1, v2)**: Returns -1 (v1 < v2), 0 (equal), 1 (v1 > v2)
-- **get_installed_version(package)**: Get version of installed Python package
-- **get_version_from_github(url)**: Fetch latest version from GitHub releases
-
-**Key behavior**: Uses packaging library for version parsing; supports pre-release tags
-
-## Common Patterns
-
-- **Dataclass-driven config**: ContextConfig used by ContextBuilder (immutable after init)
-- **Token budgeting**: ContextBuilder respects max_tokens constraint; prioritizes high-priority items
-- **Content-type aware processing**: Chunking uses appropriate splitter based on detected content type
-- **Mean pooling for large content**: Embedding handles arbitrarily large text via chunking + pooling
-- **Error handling resilience**: token_count() returns estimate; context_builder catches DB errors gracefully
-- **Pure text functions**: text_utils functions are stateless utilities (no class needed)
-- **Lazy evaluation**: ContextBuilder doesn't fetch items until build() called
-- **Type hints throughout**: All functions use Optional, List, Dict for clarity
-
-## Key Dependencies
-
-- `open_notebook.domain.notebook`: Source, Note, SourceInsight models; vector_search function
-- `open_notebook.ai.models`: model_manager for embedding model access
-- `open_notebook.exceptions`: DatabaseOperationError, NotFoundError
-- `langchain_text_splitters`: HTMLHeaderTextSplitter, MarkdownHeaderTextSplitter, RecursiveCharacterTextSplitter
-- `numpy`: Mean pooling calculations
-- `tiktoken`: Token encoding for GPT models
-- `loguru`: Logging throughout
-
-## Important Quirks & Gotchas
-
-- **Token count estimation**: Uses `o200k_base` encoding; may differ slightly from actual model tokens
-- **Chunk size semantics changed**: `OPEN_NOTEBOOK_CHUNK_SIZE` and `OPEN_NOTEBOOK_CHUNK_OVERLAP` are token-based, not character-based
-- **Default chunk size**: The token-based default is 400 — leaves ~20% margin below the 512-token ceiling of BERT-family embedders (e.g. mxbai-embed-large) to absorb tokenizer mismatch (we measure with `o200k_base`, they tokenize with WordPiece), splitter overshoot, and special tokens
-- **Content type detection order**: Extension checked first, then heuristics; high-confidence heuristics (≥0.8) can override PLAIN extensions
-- **Mean pooling normalization**: Each embedding normalized before mean, result normalized after
-- **Priority weights default**: If not specified, ContextConfig uses default weights (source=1, note=0.8, insight=1.2)
-- **Vector search required**: ContextBuilder assumes vector_search is available on Notebook model; fails if not
-- **Circular import risk**: context_builder imports from domain.notebook; avoid domain importing utils
-- **Max tokens hard limit**: ContextBuilder stops adding items once max_tokens exceeded (not prorated)
-- **No caching**: Every build() call re-fetches from database (use cache layer if needed)
-
-## How to Extend
-
-1. **Add new context source type**: Create fetch method in ContextBuilder; update ContextConfig.sources dict
-2. **Add content type**: Add to ContentType enum; create splitter getter; update chunk_text()
-3. **Change chunk size**: Set OPEN_NOTEBOOK_CHUNK_SIZE and OPEN_NOTEBOOK_CHUNK_OVERLAP environment variables
-4. **Add text preprocessing**: Add new function to text_utils (e.g., remove_urls, extract_keywords)
-5. **Change tokenization**: Replace tiktoken with alternative library in token_utils; update all calls
-6. **Add context filtering**: Extend ContextConfig with filter_by_date, filter_by_topic fields
-
-## Usage Examples
-
-### Chunking
-```python
-from open_notebook.utils.chunking import chunk_text, detect_content_type, ContentType
-
-# Auto-detect content type and chunk
-chunks = chunk_text(long_text, file_path="document.md")
-
-# Explicit content type
-chunks = chunk_text(html_content, content_type=ContentType.HTML)
-```
-
-### Embedding
-```python
-from open_notebook.utils.embedding import generate_embedding, generate_embeddings
-
-# Single text (handles chunking + mean pooling automatically)
-embedding = await generate_embedding(long_text)
-
-# Batch embedding (more efficient for multiple texts)
-embeddings = await generate_embeddings(["text1", "text2", "text3"])
-```
-
-### Context Building
-```python
-from open_notebook.utils.context_builder import ContextBuilder, ContextConfig
-
-config = ContextConfig(
-    sources={"source:123": "full", "source:456": "summary"},
-    max_tokens=2000,
-)
-builder = ContextBuilder(notebook, config)
-context_items = await builder.build()
-
-for item in context_items:
-    print(f"{item.type}:{item.id} ({item.token_count} tokens)")
-```
-
-### encryption.py
-- **get_secret_from_env(var_name)**: Retrieve secret from environment with Docker secrets support (checks VAR_FILE first, then VAR)
-- **get_fernet()**: Get Fernet instance if encryption key is configured
-- **encrypt_value(value)**: Encrypt a string using Fernet symmetric encryption
-- **decrypt_value(value)**: Decrypt a Fernet-encrypted string; gracefully falls back to original value for legacy/unencrypted data
-**Purpose**: Provides field-level encryption for sensitive data (API keys) stored in the database. Uses Fernet symmetric encryption (AES-128-CBC with HMAC-SHA256) for authenticated encryption.
-
-**Key behavior**:
-- Key source: OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE (Docker secrets) → OPEN_NOTEBOOK_ENCRYPTION_KEY (env var)
-- Accepts **any string**: always derived to a Fernet key via SHA-256
-- No default key — encryption is unavailable until the env var is set
-- Graceful fallback on decryption: InvalidToken errors (legacy unencrypted data) return the original value
-- Lazy-loaded key: initialized on first use, not at import time
-
-**Security considerations**:
-- OPEN_NOTEBOOK_ENCRYPTION_KEY must be set explicitly (no default)
-- Docker secrets pattern supported for secure key injection in containerized environments
-- Key rotation would require re-encrypting all stored keys (not currently implemented)
-- Encryption is transparent to callers; unencrypted legacy data continues to work
-
-**Usage Example**:
-```python
-from open_notebook.utils.encryption import encrypt_value, decrypt_value
-
-# Encrypt before storing in database
-encrypted_api_key = encrypt_value(api_key)
-
-# Decrypt when reading from database
-decrypted_api_key = decrypt_value(encrypted_api_key)
-
-# Set any string as encryption key:
-# OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-passphrase
-```
diff --git a/prompts/CLAUDE.md b/prompts/CLAUDE.md
deleted file mode 100644
index 976a1a75..00000000
--- a/prompts/CLAUDE.md
+++ /dev/null
@@ -1,190 +0,0 @@
-# Prompts Module
-
-Jinja2 prompt templates for multi-provider AI workflows in Open Notebook.
-
-## Purpose
-
-Centralized prompt repository using `ai_prompter` library to:
-1. Separate prompt engineering from Python application logic
-2. Provide reusable Jinja2 templates with variable injection
-3. Support multi-stage prompt chains (orchestrated by LangGraph workflows)
-4. Ensure consistency across similar workflows (chat, search, content generation)
-
-## Architecture Overview
-
-**Template Organization by Workflow**:
-- **`ask/`**: Multi-stage search synthesis (entry → query_process → final_answer)
-- **`chat/`**: Conversational agent with notebook context (system prompt only)
-- **`source_chat/`**: Source-focused chat with insight injection (system prompt only)
-- **`podcast/`**: Podcast generation pipeline (outline → transcript)
-
-**Rendering Pattern** (all workflows):
-```python
-from ai_prompter import Prompter
-
-# Load template + render with variables
-system_prompt = Prompter(prompt_template="ask/entry", parser=parser).render(
-    data=state
-)
-
-# Then invoke LLM
-model = await provision_langchain_model(system_prompt, ...)
-response = await model.ainvoke(system_prompt)
-```
-
-See detailed workflow integration in `open_notebook/graphs/CLAUDE.md` for how each template fits into chat.py, ask.py, source_chat.py.
-
-## Prompt Engineering Patterns
-
-### 1. Multi-Stage Chain (Ask Workflow)
-
-Three-template chain for intelligent search:
-
-```
-entry.jinja (user question → search strategy)
-    ↓
-query_process.jinja (run each search, generate sub-answer)
-    ↓ (multiple parallel)
-final_answer.jinja (synthesize all results into final response)
-```
-
-**Key pattern**: `entry.jinja` generates JSON-structured reasoning (via PydanticOutputParser). Each `query_process.jinja` invocation receives one search term + retrieved results. `final_answer.jinja` combines all answers with proper source citation.
-
-### 2. Conditional Variable Injection (Podcast Workflow)
-
-Templates accept optional variables for context assembly:
-
-```jinja
-{% if notebook %}
-# PROJECT INFORMATION
-{{ notebook }}
-{% endif %}
-
-{% if context %}
-# CONTEXT
-{{ context }}
-{% endif %}
-```
-
-Enabled by Jinja2's conditional blocks. Critical for podcast outline (handles list or string context) and source_chat (injects variable notebook/insight data).
-
-### 3. Repeated Emphasis on Citation Format (Ask & Chat)
-
-All response-generating templates emphasize source citation rules:
-- Document ID syntax: `[source:id]`, `[note:id]`, `[insight:id]`
-- "Do not make up document IDs" repeated multiple times
-- Example citations provided inline
-
-**Rationale**: LLMs naturally hallucinate citations without explicit guidance; repetition + examples reduce hallucination.
-
-### 4. Format Instructions Delegation
-
-Templates accept external `{{ format_instructions }}` variable:
-
-```jinja
-# OUTPUT FORMATTING
-{{ format_instructions }}
-```
-
-Allows caller to inject JSON schema, XML format, or other output constraints without modifying template. Decouples prompt from output format evolution.
-
-### 5. JSON Output with Extended Thinking Support
-
-Podcast templates include extended thinking pattern:
-
-```jinja
-IMPORTANT OUTPUT FORMAT:
-- If you use extended thinking with <think> tags, put ALL your reasoning inside <think></think> tags
-- Put the final JSON output OUTSIDE and AFTER any <think> tags
-```
-
-Guides models with extended thinking capability to separate reasoning from output (cleaner parsing downstream).
-
-## File Catalog
-
-**`ask/` - Search Synthesis Pipeline**:
-- **entry.jinja**: Analyzes user question, generates search strategy with JSON output (term + instructions per search)
-- **query_process.jinja**: Accepts one search term + retrieved results, generates sub-answer with citations
-- **final_answer.jinja**: Combines all sub-answers into coherent final response, enforces source citation
-
-**`chat/` - Conversational Agent**:
-- **system.jinja**: Single system prompt for general chat. Uses conditional blocks for optional notebook context. Emphasizes citation format.
-
-**`source_chat/` - Source-Focused Chat**:
-- **system.jinja**: Single system prompt for source-specific discussion. Injects source metadata (ID, title, topics) + selected context. Conditional blocks for optional notebook/context data.
-
-**`podcast/` - Podcast Generation**:
-- **outline.jinja**: Takes briefing + content + speaker profiles (list support via Jinja2 for-loop). Generates JSON outline with segments (name, description, size).
-- **transcript.jinja**: Takes outline + segment index + optional existing transcript. Generates JSON dialogue array (speaker name + dialogue). Iterates speakers with for-loop.
-
-## Key Dependencies
-
-- **ai_prompter**: Prompter class for Jinja2 template rendering with optional OutputParser binding
-- **Jinja2** (transitive via ai_prompter): Template syntax (if/for, filters, variable interpolation)
-- **No external AI calls**: Templates are pure text; LLM invocation happens in calling code (graphs/)
-
-## How to Add New Template
-
-1. **Create subdirectory** in `prompts/` matching workflow name (e.g., `prompts/new_workflow/`)
-2. **Define .jinja file(s)** with Jinja2 syntax:
-   - Use `{{ variable_name }}` for scalar injection
-   - Use `{% if condition %} ... {% endif %}` for optional sections
-   - Use `{% for item in list %} ... {% endfor %}` for iteration
-3. **Document template variables** as inline comments (follow existing templates)
-4. **Reference in calling code** (graphs/):
-   ```python
-   from ai_prompter import Prompter
-   prompt = Prompter(prompt_template="new_workflow/template_name").render(data=context_dict)
-   ```
-5. **If structured output needed**: Pass `parser=PydanticOutputParser(...)` to Prompter
-6. **Document in graphs/CLAUDE.md** how new template fits into workflow chain
-
-## Important Quirks & Gotchas
-
-1. **Template path syntax**: Uses forward slashes without `.jinja` extension in Prompter. `"ask/entry"` maps to `/prompts/ask/entry.jinja`
-2. **Variable key convention**: All data passed as `data=dict` arg to `.render()`. Template accesses variables directly (e.g., `{{ question }}`). Ensure dict keys match template variable names.
-3. **OutputParser binding**: When using PydanticOutputParser, Prompter auto-injects `{{ format_instructions }}` into template. If template doesn't have this placeholder, parser is ignored.
-4. **Jinja2 whitespace sensitivity**: Template indentation doesn't affect output, but raw newlines do. Use explicit `\n` or trim filters if output formatting matters.
-5. **Conditional blocks are loose**: Jinja2 if-condition evaluates any truthy value (non-empty string, list, dict). `{% if variable %}` is False for empty string/"" but True for any non-empty content.
-6. **For-loop list assumption**: Templates using `{% for item in list %}` don't validate list type. If caller passes string instead of list, iteration happens character-by-character (bug risk).
-7. **No template composition/inheritance**: Templates are flat (no `{% extends %}` or `{% include %}`). Each workflow keeps templates independent to avoid coupling.
-8. **Citation ID format is caller's responsibility**: Templates emphasize citation rules but don't validate. If caller returns wrong ID format, template can't catch it upstream.
-9. **Parser extraction happens post-render**: OutputParser.parse() is called AFTER `.render()` returns string. If template has syntax errors, render fails before parsing logic runs.
-10. **Template cache**: Prompter likely caches loaded templates. File edits require app restart if using cached instance.
-
-## Testing Patterns
-
-**Manual render test**:
-```python
-from ai_prompter import Prompter
-
-prompt = Prompter(prompt_template="ask/entry").render(
-    data={"question": "What is RAG?"}
-)
-print(prompt)  # Inspect Jinja2 output before sending to LLM
-```
-
-**With parser**:
-```python
-from pydantic import BaseModel
-from langchain_core.output_parsers.pydantic import PydanticOutputParser
-
-class Strategy(BaseModel):
-    reasoning: str
-    searches: list
-
-parser = PydanticOutputParser(pydantic_object=Strategy)
-prompt = Prompter(prompt_template="ask/entry", parser=parser).render(
-    data={"question": "..."}
-)
-# prompt now includes {{ format_instructions }} substitution
-```
-
-**Integration test** (invoke full graph):
-See `open_notebook/graphs/ask.py` for how entry.jinja is invoked inside ask_graph workflow.
-
-## Reference Documentation
-
-- **Jinja2 syntax guide**: See existing templates for for-loop, if-conditional, variable interpolation patterns
-- **Graph integration**: `open_notebook/graphs/CLAUDE.md` documents which template is used in which workflow
-- **Sub-directory CLAUDE.md files**: `ask/CLAUDE.md`, `chat/CLAUDE.md`, `podcast/CLAUDE.md` (if created) provide template-specific implementation notes
diff --git a/scripts/check_md_links.py b/scripts/check_md_links.py
new file mode 100644
index 00000000..1f800e6b
--- /dev/null
+++ b/scripts/check_md_links.py
@@ -0,0 +1,75 @@
+#!/usr/bin/env python3
+"""Check that relative markdown links point to files that exist.
+
+Scans every tracked *.md file in the repo and validates relative link targets
+(external URLs, anchors and mailto links are skipped; code blocks and inline
+code spans are ignored). Exits 1 if any broken link is found.
+
+Run locally:  python3 scripts/check_md_links.py
+"""
+
+import os
+import re
+import subprocess
+import sys
+
+LINK_RE = re.compile(r"\[[^\]]*\]\(([^)\s]+)\)")
+FENCED_CODE_RE = re.compile(r"```.*?```", re.DOTALL)
+INLINE_CODE_RE = re.compile(r"`[^`\n]*`")
+SKIP_PREFIXES = ("http://", "https://", "mailto:", "#", "<")
+
+
+def repo_root() -> str:
+    return subprocess.check_output(
+        ["git", "rev-parse", "--show-toplevel"], text=True
+    ).strip()
+
+
+def tracked_markdown_files(root: str) -> list[str]:
+    out = subprocess.check_output(["git", "ls-files", "*.md"], text=True, cwd=root)
+    return [line for line in out.splitlines() if line]
+
+
+def main() -> int:
+    root = repo_root()
+    broken: list[str] = []
+
+    for rel in tracked_markdown_files(root):
+        path = os.path.join(root, rel)
+        try:
+            with open(path, encoding="utf-8") as fh:
+                text = fh.read()
+        except OSError:
+            continue
+
+        text = FENCED_CODE_RE.sub("", text)
+        text = INLINE_CODE_RE.sub("", text)
+
+        for match in LINK_RE.finditer(text):
+            target = match.group(1)
+            if target.startswith(SKIP_PREFIXES):
+                continue
+            file_part = target.split("#")[0].split("?")[0]
+            if not file_part:
+                continue
+            if file_part.startswith("/"):
+                resolved = os.path.join(root, file_part.lstrip("/"))
+            else:
+                resolved = os.path.normpath(
+                    os.path.join(os.path.dirname(path), file_part)
+                )
+            if not os.path.exists(resolved):
+                broken.append(f"{rel}: {target}")
+
+    if broken:
+        print(f"{len(broken)} broken relative link(s):")
+        for entry in broken:
+            print(f"  {entry}")
+        return 1
+
+    print("All relative markdown links resolve.")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

From bb0a454d8c42db064b662684137a8d812bc1f6d3 Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 14:37:08 -0400
Subject: [PATCH 150/345] fix: validate Host/X-Forwarded-Proto before trusting
 them for API URL (#1024)

* fix: validate Host/X-Forwarded-Proto before trusting them for API URL

The runtime-config endpoint's auto-detection built the browser-facing
API URL directly from the request's Host header and X-Forwarded-Proto,
with no validation. Behind a reverse proxy that forwards these headers
untrusted, a spoofed or malformed Host could redirect the browser's
subsequent API traffic - including the auth bearer token
(lib/api/client.ts) - to an attacker-chosen host.

Reject anything that isn't syntactically a hostname/IP (or a bracketed
IPv6 literal) before using it to build the URL, falling back to
localhost on rejection. X-Forwarded-Proto is now restricted to a literal
"http"/"https" instead of passing through whatever value a
misconfigured or spoofed proxy header supplies.

* fix: make Host-header port stripping IPv6-aware

The split(':')[0] port strip mangled bracketed IPv6 literals ([::1]:5055
-> '['), so IPv6-literal access always fell back to localhost and the
IPV6_LITERAL_PATTERN was unreachable dead code. Strip the port bracket-
aware instead, so the pattern is now actually exercised. Deliberately not
new URL(), which would extract the host from userinfo/path payloads
(legit@evil.com -> evil.com) and defeat the strict validation - added
regression tests covering IPv6 accept/reject and confirming the existing
userinfo/path-traversal cases still fall back to localhost.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/app/config/route.test.ts | 158 ++++++++++++++++++++++++++
 frontend/src/app/config/route.ts      |  67 +++++++++--
 2 files changed, 215 insertions(+), 10 deletions(-)
 create mode 100644 frontend/src/app/config/route.test.ts

diff --git a/frontend/src/app/config/route.test.ts b/frontend/src/app/config/route.test.ts
new file mode 100644
index 00000000..1c80a8d1
--- /dev/null
+++ b/frontend/src/app/config/route.test.ts
@@ -0,0 +1,158 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest'
+import { NextRequest } from 'next/server'
+import { GET } from './route'
+
+/**
+ * Host and X-Forwarded-Proto are client-controlled. Behind a reverse proxy
+ * that forwards them untrusted, an unvalidated value here could redirect
+ * the browser's subsequent API traffic (including the auth bearer token)
+ * to an attacker-chosen host - see lib/api/client.ts for how apiUrl is
+ * used app-wide once fetched.
+ */
+describe('GET /config', () => {
+  const originalEnv = process.env
+
+  beforeEach(() => {
+    process.env = { ...originalEnv }
+    delete process.env.API_URL
+    delete process.env.NEXT_PUBLIC_API_URL
+  })
+
+  afterEach(() => {
+    process.env = originalEnv
+  })
+
+  function makeRequest(headers: Record<string, string>) {
+    return new NextRequest('http://ignored.example/config', { headers })
+  }
+
+  it('uses API_URL env var when explicitly set, ignoring headers', async () => {
+    process.env.API_URL = 'https://configured.example.com'
+    const request = makeRequest({ host: 'evil.example.com', 'x-forwarded-proto': 'https' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('https://configured.example.com')
+  })
+
+  it('auto-detects from a well-formed Host header', async () => {
+    const request = makeRequest({ host: 'notebook.example.com', 'x-forwarded-proto': 'https' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('https://notebook.example.com:5055')
+  })
+
+  it('strips the port from the Host header before rebuilding the URL', async () => {
+    const request = makeRequest({ host: 'notebook.example.com:3000' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://notebook.example.com:5055')
+  })
+
+  it('accepts a bare IPv4 Host header', async () => {
+    const request = makeRequest({ host: '192.168.1.50' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://192.168.1.50:5055')
+  })
+
+  it('accepts a bracketed IPv6 literal Host header', async () => {
+    const request = makeRequest({ host: '[2001:db8::1]' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://[2001:db8::1]:5055')
+  })
+
+  it('strips the port from a bracketed IPv6 Host header and keeps the brackets', async () => {
+    const request = makeRequest({ host: '[::1]:3000' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://[::1]:5055')
+  })
+
+  it('falls back to localhost for a bracketed IPv6 literal with trailing junk', async () => {
+    const request = makeRequest({ host: '[::1]@evil.example.com' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('falls back to localhost for an unclosed IPv6 bracket', async () => {
+    const request = makeRequest({ host: '[::1' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('falls back to localhost for a path-like payload inside IPv6 brackets', async () => {
+    const request = makeRequest({ host: '[::1]/../../attacker' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('falls back to localhost for a Host header containing a path-like payload', async () => {
+    const request = makeRequest({ host: 'evil.example.com/../../attacker' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('falls back to localhost for a Host header containing an @ (userinfo confusion)', async () => {
+    const request = makeRequest({ host: 'legit.example.com@evil.example.com' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('falls back to localhost for a Host header with embedded whitespace', async () => {
+    const request = makeRequest({ host: 'evil.example.com foo' })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+
+  it('never trusts an X-Forwarded-Proto value other than http/https', async () => {
+    const request = makeRequest({
+      host: 'notebook.example.com',
+      'x-forwarded-proto': 'javascript',
+    })
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://notebook.example.com:5055')
+  })
+
+  it('falls back to localhost when no Host header is present', async () => {
+    const request = makeRequest({})
+
+    const response = await GET(request)
+    const body = await response.json()
+
+    expect(body.apiUrl).toBe('http://localhost:5055')
+  })
+})
diff --git a/frontend/src/app/config/route.ts b/frontend/src/app/config/route.ts
index 15844b20..bc16a618 100644
--- a/frontend/src/app/config/route.ts
+++ b/frontend/src/app/config/route.ts
@@ -1,5 +1,43 @@
 import { NextRequest, NextResponse } from 'next/server'
 
+// Basic hostname/IPv4 validation (letters, digits, dots, hyphens) plus a
+// bracketed-IPv6-literal form. Host and X-Forwarded-Proto are client-
+// controlled; behind a reverse proxy that forwards them untrusted, an
+// unvalidated value here could redirect the browser's subsequent API
+// traffic (including the auth bearer token - see lib/api/client.ts) to an
+// attacker-chosen host. Reject anything that isn't syntactically a
+// hostname/IP before it's used to build the URL the client will trust.
+const HOSTNAME_PATTERN = /^[a-zA-Z0-9.-]+$/
+const IPV6_LITERAL_PATTERN = /^\[[0-9a-fA-F:]+\]$/
+
+function isValidHostname(hostname: string): boolean {
+  return (
+    hostname.length > 0 &&
+    hostname.length <= 253 &&
+    (HOSTNAME_PATTERN.test(hostname) || IPV6_LITERAL_PATTERN.test(hostname))
+  )
+}
+
+// Strip the optional port from a Host header, keeping the hostname (with
+// brackets for an IPv6 literal). Deliberately NOT `new URL()`: the URL
+// parser would "helpfully" extract the host from userinfo/path payloads
+// (e.g. `legit@evil.com` -> `evil.com`), defeating the strict validation
+// below. A bracketed IPv6 literal (`[::1]` / `[::1]:5055`) can't be split
+// on the first colon, so it's handled explicitly; everything else is a
+// hostname/IPv4 where the first colon begins the port. Anything malformed
+// returns null and falls back to localhost.
+function extractHostname(hostHeader: string): string | null {
+  if (hostHeader.startsWith('[')) {
+    const end = hostHeader.indexOf(']')
+    if (end === -1) return null
+    const afterBracket = hostHeader.slice(end + 1)
+    // Only an optional `:port` may follow the closing bracket.
+    if (afterBracket !== '' && !/^:\d+$/.test(afterBracket)) return null
+    return hostHeader.slice(0, end + 1) // includes the brackets
+  }
+  return hostHeader.split(':')[0]
+}
+
 /**
  * Runtime Configuration Endpoint
  *
@@ -35,26 +73,35 @@ export async function GET(request: NextRequest) {
   // Priority 2: Auto-detect from request headers
   try {
     // Get the protocol (http or https)
-    // Check X-Forwarded-Proto first (for reverse proxies), then fallback to request scheme
-    const proto = request.headers.get('x-forwarded-proto') ||
+    // Check X-Forwarded-Proto first (for reverse proxies), then fallback to request scheme.
+    // Only ever trust "http"/"https" - reject anything else a spoofed or
+    // misconfigured-proxy header might supply.
+    const rawProto = request.headers.get('x-forwarded-proto') ||
                   request.nextUrl.protocol.replace(':', '') ||
                   'http'
+    const proto = rawProto === 'https' ? 'https' : 'http'
 
     // Get the host header (includes port if non-standard)
     const hostHeader = request.headers.get('host')
 
     if (hostHeader) {
-      // Extract just the hostname (remove port if present)
-      const hostname = hostHeader.split(':')[0]
+      // Extract just the hostname (remove port if present), bracket-aware
+      // for IPv6 literals.
+      const hostname = extractHostname(hostHeader)
 
-      // Construct the API URL with port 5055
-      const apiUrl = `${proto}://${hostname}:5055`
+      if (hostname && isValidHostname(hostname)) {
+        // hostname already carries brackets for IPv6 literals, so this
+        // yields e.g. http://[::1]:5055, not a mangled http://::1:5055
+        const apiUrl = `${proto}://${hostname}:5055`
 
-      console.log(`[runtime-config] Auto-detected API URL: ${apiUrl} (proto=${proto}, host=${hostHeader})`)
+        console.log(`[runtime-config] Auto-detected API URL: ${apiUrl} (proto=${proto}, host=${hostHeader})`)
 
-      return NextResponse.json({
-        apiUrl,
-      })
+        return NextResponse.json({
+          apiUrl,
+        })
+      }
+
+      console.warn(`[runtime-config] Rejected malformed Host header, falling back to localhost: ${hostHeader}`)
     }
   } catch (error) {
     console.error('[runtime-config] Auto-detection failed:', error)

From fc3f35a4fabf1744c77e9acbbd098f0b20f3ad2e Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 14:44:44 -0400
Subject: [PATCH 151/345] fix: bind SurrealDB's docker-compose port to
 localhost only (#1025)

* fix: bind SurrealDB's docker-compose port to localhost only

The surrealdb service published 8000:8000, exposing it on 0.0.0.0 -
reachable from the network with the default root:root credentials. The
open_notebook service reaches it over the internal compose network
regardless, so the host port mapping is purely for local debugging
(Surrealist, `surreal sql`). Bind it to 127.0.0.1 instead.

* chore: add gitignored compose override for host-specific tweaks

The port bind is now localhost-only by default; ship a
docker-compose.override.yml.example (and gitignore the real override,
which docker compose auto-merges) so users who genuinely need remote DB
access have a sanctioned, secure-by-default way to re-expose it instead of
editing the tracked compose file.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .gitignore                          |  7 ++++++-
 docker-compose.override.yml.example | 18 ++++++++++++++++++
 docker-compose.yml                  |  7 ++++++-
 3 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 docker-compose.override.yml.example

diff --git a/.gitignore b/.gitignore
index ac560860..4e255e36 100644
--- a/.gitignore
+++ b/.gitignore
@@ -141,4 +141,9 @@ specs/
 **/*.local.md
 .harness/
 
-.mcp.json
\ No newline at end of file
+.mcp.json
+
+# Local Docker Compose override (auto-merged by `docker compose up`).
+# Use it for host-specific tweaks like re-exposing the SurrealDB port;
+# see docker-compose.override.yml.example.
+docker-compose.override.yml
diff --git a/docker-compose.override.yml.example b/docker-compose.override.yml.example
new file mode 100644
index 00000000..95ea645d
--- /dev/null
+++ b/docker-compose.override.yml.example
@@ -0,0 +1,18 @@
+# Local Docker Compose override — copy to `docker-compose.override.yml`
+# (which `docker compose up` merges automatically) to apply host-specific
+# tweaks without touching the tracked docker-compose.yml.
+#
+#   cp docker-compose.override.yml.example docker-compose.override.yml
+#
+# The example below re-exposes SurrealDB's port on all interfaces. The
+# shipped default binds it to 127.0.0.1 only, because the database starts
+# with root:root credentials and exposing it on 0.0.0.0 lets anyone who can
+# reach the host connect as root. Only re-expose it if you actually need to
+# reach the database from another machine (e.g. Surrealist on your laptop),
+# and put it behind a firewall or an SSH tunnel and set SURREAL_USER /
+# SURREAL_PASSWORD to real credentials first.
+
+services:
+  surrealdb:
+    ports:
+      - "8000:8000"
diff --git a/docker-compose.yml b/docker-compose.yml
index ca316508..a6f8841a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,7 +8,12 @@ services:
     command: start --log info --user ${SURREAL_USER:-root} --pass ${SURREAL_PASSWORD:-root} rocksdb:/mydata/mydatabase.db
     user: root  # Required for bind mounts on Linux
     ports:
-      - "8000:8000"
+      # Bound to localhost only: the open_notebook service reaches this over
+      # the internal compose network regardless, so the host port is purely
+      # for local debugging (e.g. Surrealist, `surreal sql`). Exposing this
+      # on 0.0.0.0 would let anyone who can reach the host connect with the
+      # default root:root credentials.
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     environment:

From c04c52cc0fcaba63746d2dc0ac1897bf7d83058d Mon Sep 17 00:00:00 2001
From: Pico <kwp3000@gmail.com>
Date: Fri, 10 Jul 2026 14:47:40 -0400
Subject: [PATCH 152/345] chore: remove dead auth helper and fix stale
 default-password docs (#1026)

check_api_password() (an unused HTTPBearer-based dependency, superseded
by PasswordAuthMiddleware) and its now-unused imports are dead code -
nothing calls it. Removed.

Docs across api/CLAUDE.md, docs/3-USER-GUIDE/api-configuration.md,
docs/5-CONFIGURATION/security.md, docs/7-DEVELOPMENT/security.md, and
docs/SECURITY_REVIEW.md still described a hardcoded default password
("open-notebook-change-me") that PasswordAuthMiddleware doesn't actually
have - if OPEN_NOTEBOOK_PASSWORD is unset, auth is fully disabled
instead. Updated to match actual behavior.
---
 api/auth.py                            | 48 ++------------------------
 docs/3-USER-GUIDE/api-configuration.md |  2 +-
 docs/5-CONFIGURATION/security.md       |  2 +-
 docs/7-DEVELOPMENT/security.md         |  2 +-
 docs/SECURITY_REVIEW.md                |  2 +-
 5 files changed, 7 insertions(+), 49 deletions(-)

diff --git a/api/auth.py b/api/auth.py
index e0f70b19..6e62b0ca 100644
--- a/api/auth.py
+++ b/api/auth.py
@@ -1,9 +1,7 @@
 import secrets
 from typing import Optional
 
-from fastapi import Depends, HTTPException, Request
-from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
-from loguru import logger
+from fastapi import Request
 from starlette.middleware.base import BaseHTTPMiddleware, RequestResponseEndpoint
 from starlette.responses import JSONResponse, Response
 from starlette.types import ASGIApp
@@ -14,7 +12,8 @@ from open_notebook.utils.encryption import get_secret_from_env
 class PasswordAuthMiddleware(BaseHTTPMiddleware):
     """
     Middleware to check password authentication for all API requests.
-    Always active with default password if OPEN_NOTEBOOK_PASSWORD is not set.
+    Auth is fully disabled (no hardcoded default password) if
+    OPEN_NOTEBOOK_PASSWORD is not set.
     Supports Docker secrets via OPEN_NOTEBOOK_PASSWORD_FILE.
     """
 
@@ -81,44 +80,3 @@ class PasswordAuthMiddleware(BaseHTTPMiddleware):
         # Password is correct, proceed with the request
         response = await call_next(request)
         return response
-
-
-# Optional: HTTPBearer security scheme for OpenAPI documentation
-security = HTTPBearer(auto_error=False)
-
-
-def check_api_password(
-    credentials: Optional[HTTPAuthorizationCredentials] = Depends(security),
-) -> bool:
-    """
-    Utility function to check API password.
-    Can be used as a dependency in individual routes if needed.
-    Supports Docker secrets via OPEN_NOTEBOOK_PASSWORD_FILE.
-    Returns True without checking credentials if OPEN_NOTEBOOK_PASSWORD is not configured.
-    Raises 401 if credentials are missing or don't match the configured password.
-    """
-    password = get_secret_from_env("OPEN_NOTEBOOK_PASSWORD")
-
-    # No password configured - skip authentication
-    if not password:
-        return True
-
-    # No credentials provided
-    if not credentials:
-        raise HTTPException(
-            status_code=401,
-            detail="Missing authorization",
-            headers={"WWW-Authenticate": "Bearer"},
-        )
-
-    # Check password (constant-time to avoid a timing side-channel)
-    if not secrets.compare_digest(
-        credentials.credentials.encode("utf-8"), password.encode("utf-8")
-    ):
-        raise HTTPException(
-            status_code=401,
-            detail="Invalid password",
-            headers={"WWW-Authenticate": "Bearer"},
-        )
-
-    return True
diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index 940e0eff..0c9a37ab 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -302,7 +302,7 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 
 | Setting | Default Value | Production Recommendation |
 |---------|---------------|---------------------------|
-| Password | `open-notebook-change-me` | Set `OPEN_NOTEBOOK_PASSWORD` |
+| Password | None - auth is fully disabled until set | Set `OPEN_NOTEBOOK_PASSWORD` |
 | Encryption Key | None (must be set) | Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` to any secret string |
 
 **For production deployments, always set custom credentials.**
diff --git a/docs/5-CONFIGURATION/security.md b/docs/5-CONFIGURATION/security.md
index f3179634..5f4ee67f 100644
--- a/docs/5-CONFIGURATION/security.md
+++ b/docs/5-CONFIGURATION/security.md
@@ -30,7 +30,7 @@ Any string works — it will be securely derived via SHA-256 internally. Use a s
 
 | Setting | Default | Security Level |
 |---------|---------|----------------|
-| Password | `open-notebook-change-me` | Development only |
+| Password | None - auth is fully disabled until `OPEN_NOTEBOOK_PASSWORD` is set | Development only |
 | Encryption Key | **None** (must be configured) | Required for API key storage |
 
 **The encryption key has no default.** You must set `OPEN_NOTEBOOK_ENCRYPTION_KEY` before using the API key configuration feature. Without it, encrypting/decrypting API keys will fail.
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
index 44f32e9a..af4befc5 100644
--- a/docs/7-DEVELOPMENT/security.md
+++ b/docs/7-DEVELOPMENT/security.md
@@ -144,7 +144,7 @@ Never pass user-provided file paths directly to file reading or content extracti
 
 Open Notebook currently uses simple password-based middleware (`PasswordAuthMiddleware`). This is suitable for single-user self-hosted deployments but should be hardened for production:
 
-- Change the default password (`OPEN_NOTEBOOK_PASSWORD`)
+- Set `OPEN_NOTEBOOK_PASSWORD` explicitly - there is no hardcoded default password; if it's unset, auth is fully disabled (all requests pass through unchecked)
 - Change the default encryption key (`OPEN_NOTEBOOK_ENCRYPTION_KEY`)
 - Consider deploying behind a reverse proxy with proper authentication (OAuth, OIDC)
 
diff --git a/docs/SECURITY_REVIEW.md b/docs/SECURITY_REVIEW.md
index 449b1678..32862769 100644
--- a/docs/SECURITY_REVIEW.md
+++ b/docs/SECURITY_REVIEW.md
@@ -52,7 +52,7 @@ Security review of the API key management implementation for Open Notebook. The
 | Item | Status | Notes |
 |------|--------|-------|
 | Password protection | PASS | Bearer token authentication |
-| Default password | PASS | "open-notebook-change-me" when not set |
+| Default password | PASS | Auth is fully disabled (not a hardcoded default password) when `OPEN_NOTEBOOK_PASSWORD` is unset |
 | Docker secrets support | PASS | `_FILE` suffix for password |
 | Security warnings | PASS | Logged when using defaults |
 

From 4e96a274f289365b0d3a584fec4ca60747d76655 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marcos=20Garc=C3=ADa?= <thiamath@gmail.com>
Date: Fri, 10 Jul 2026 20:59:56 +0200
Subject: [PATCH 153/345] fix: remove deprecated gemini models (#1027)

* fix: update Google model version in connection tester and tests

* fix: updated the gemini model lists that references deprecated models

* fix: update also documentation. This is more prone to not follow the maintainer's directives, so PTADL

* fix: forgot two references to gemini deprecated versions

* fix: use valid, longer-lived gemini model IDs

Several IDs the PR introduced don't exist or are near shutdown, verified
against Google's official model/deprecation pages (2026-07):
- connection test model gemini-2.5-flash -> gemini-3.5-flash (2.5-flash
  retires 2026-10-16; 3.5-flash is the current stable GA and Google's
  named replacement, so the #970 fix doesn't re-break in ~3 months)
- gemini-3.5-pro (does not exist) -> gemini-2.5-pro in docs
- plain gemini-3.1-flash (not a GA Gemini-API id) dropped from the Vertex
  discovery list / preferences / docs; use gemini-3.5-flash or -flash-lite
- dead gemini-pro dropped from preferences and docs
Ported #996's #970 regression test, pinned to gemini-3.5-flash.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/credentials_service.py             |  7 +++----
 api/routers/models.py                  |  2 +-
 docs/0-START-HERE/quick-start-cloud.md |  2 +-
 docs/1-INSTALLATION/windows-native.md  |  2 +-
 docs/5-CONFIGURATION/ai-providers.md   | 16 +++++++++-------
 docs/7-DEVELOPMENT/architecture.md     |  2 +-
 open_notebook/ai/connection_tester.py  |  4 ++--
 open_notebook/ai/model_discovery.py    |  2 +-
 tests/test_credentials_api.py          | 12 +++++++++++-
 9 files changed, 30 insertions(+), 19 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 4002e348..9edc5951 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -515,10 +515,9 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         # Vertex AI requires service-account OAuth2 for model listing.
         # Return a curated static list of well-known Vertex models instead.
         VERTEX_MODELS = [
-            "gemini-2.0-flash",
-            "gemini-2.0-flash-lite",
-            "gemini-1.5-pro",
-            "gemini-1.5-flash",
+            "gemini-3.5-flash",
+            "gemini-2.5-flash",
+            "gemini-2.5-flash-lite",
             "text-embedding-005",
         ]
         return [{"name": m, "provider": "vertex"} for m in VERTEX_MODELS]
diff --git a/api/routers/models.py b/api/routers/models.py
index f25bdbd2..838c0ad8 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -104,7 +104,7 @@ PROVIDER_PRIORITY = [
 MODEL_PREFERENCES = {
     "openai": ["gpt-4o", "gpt-4", "gpt-3.5-turbo"],
     "anthropic": ["claude-3-5-sonnet", "claude-3-opus", "claude-3-sonnet"],
-    "google": ["gemini-2.0", "gemini-1.5-pro", "gemini-pro"],
+    "google": ["gemini-3.5-flash", "gemini-2.5-flash", "gemini-2.5-pro"],
     "mistral": ["mistral-large", "mixtral"],
     "groq": ["llama-3.3", "llama-3.1", "mixtral"],
     "dashscope": ["qwen-max", "qwen-plus", "qwen-turbo"],
diff --git a/docs/0-START-HERE/quick-start-cloud.md b/docs/0-START-HERE/quick-start-cloud.md
index af157d57..8615a330 100644
--- a/docs/0-START-HERE/quick-start-cloud.md
+++ b/docs/0-START-HERE/quick-start-cloud.md
@@ -109,7 +109,7 @@ Your provider's models are now available!
 |----------|-------------------|-------|
 | **OpenRouter** | `anthropic/claude-3.5-sonnet` | Access 100+ models |
 | **Anthropic** | `claude-3-5-sonnet-latest` | Best reasoning |
-| **Google** | `gemini-2.0-flash` | Large context, fast |
+| **Google** | `gemini-3.5-flash` | Large context, fast |
 | **Groq** | `llama-3.3-70b-versatile` | Ultra-fast |
 | **Mistral** | `mistral-large-latest` | Strong European option |
 
diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
index 2712d436..9cc8a63e 100644
--- a/docs/1-INSTALLATION/windows-native.md
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -234,7 +234,7 @@ Once running, add models in Settings. Common model names:
 | --------- | ------------------------------------------------------------ |
 | OpenAI    | `gpt-4o`, `gpt-4o-mini`, `gpt-4-turbo`, `text-embedding-3-small` |
 | Anthropic | `claude-sonnet-4-20250514`, `claude-3-5-sonnet-20241022`, `claude-3-5-haiku-20241022` |
-| Google    | `gemini-2.0-flash`, `gemini-1.5-pro`, `gemini-1.5-flash`     |
+| Google    | `gemini-3.5-flash`, `gemini-2.5-flash`, `gemini-2.5-pro`     |
 | DeepSeek  | `deepseek-chat`, `deepseek-reasoner`                         |
 
 ## Upgrading
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 86571c08..900b384d 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -133,13 +133,15 @@ Opus: $10-50+/month
 6. Click **Discover Models** → **Register Models**
 
 **Available Models:**
-- `gemini-2.0-flash-exp` — Latest experimental, fastest (recommended)
-- `gemini-2.0-flash` — Stable version, fast, cheap
+- `gemini-2.5-pro` — Strongest, best for long context (1M tokens)
+- `gemini-3.5-flash` — Fast, good for general use
+- `gemini-3.1-flash-lite` — Fastest and cheapest
+- `gemini-2.5-flash` — Previous-gen stable, cheaper
 
 **Recommended:**
-- For general use: `gemini-2.0-flash-exp` (best value, latest)
-- For cheap: `gemini-1.5-flash` (very cheap)
-- For complex/long context: `gemini-1.5-pro-latest` (2M token context)
+- For general use: `gemini-3.5-flash` (best value, latest)
+- For cheap: `gemini-3.1-flash-lite` (very cheap)
+- For complex/long context: `gemini-2.5-pro` (1M token context)
 
 **Advantages:**
 - Very long context (1M tokens)
@@ -217,7 +219,7 @@ Opus: $10-50+/month
 **Available Models (100+ options):**
 - OpenAI: `openai/gpt-4o`, `openai/o1`
 - Anthropic: `anthropic/claude-sonnet-4.5`, `anthropic/claude-3.5-haiku`
-- Google: `google/gemini-2.0-flash-exp`, `google/gemini-1.5-pro`
+- Google: `google/gemini-3.5-flash`, `google/gemini-2.5-pro`
 - Meta: `meta-llama/llama-3.3-70b-instruct`, `meta-llama/llama-3.1-405b-instruct`
 - Mistral: `mistralai/mistral-large-2411`
 - DeepSeek: `deepseek/deepseek-chat`
@@ -225,7 +227,7 @@ Opus: $10-50+/month
 
 **Recommended:**
 - For quality: `anthropic/claude-sonnet-4.5` (best overall)
-- For speed/cost: `google/gemini-2.0-flash-exp` (very fast, cheap)
+- For speed/cost: `google/gemini-2.5-flash` (very fast, cheap)
 - For open-source: `meta-llama/llama-3.3-70b-instruct`
 - For reasoning: `openai/o1`
 
diff --git a/docs/7-DEVELOPMENT/architecture.md b/docs/7-DEVELOPMENT/architecture.md
index 2575b490..be0c1792 100644
--- a/docs/7-DEVELOPMENT/architecture.md
+++ b/docs/7-DEVELOPMENT/architecture.md
@@ -470,7 +470,7 @@ response = await model.ainvoke({"input": prompt})
 **LLM Providers**:
 - OpenAI (gpt-4, gpt-4-turbo, gpt-3.5-turbo)
 - Anthropic (claude-opus, claude-sonnet, claude-haiku)
-- Google (gemini-pro, gemini-1.5)
+- Google (gemini-3.5-flash, gemini-2.5-pro)
 - Groq (mixtral, llama-2)
 - Ollama (local models)
 - Mistral (mistral-large, mistral-medium)
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 9cea89c6..add3192a 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -52,7 +52,7 @@ def _is_vertex_credentials_file_error(exc: Exception) -> bool:
 TEST_MODELS = {
     "openai": ("gpt-3.5-turbo", "language"),
     "anthropic": ("claude-3-haiku-20240307", "language"),
-    "google": ("gemini-2.0-flash", "language"),
+    "google": ("gemini-3.5-flash", "language"),
     "groq": ("llama-3.1-8b-instant", "language"),
     "mistral": ("mistral-small-latest", "language"),
     "deepseek": ("deepseek-chat", "language"),
@@ -63,7 +63,7 @@ TEST_MODELS = {
     "deepgram": ("aura-2-thalia-en", "text_to_speech"),
     "ollama": (None, "language"),  # Dynamic - will use first available model
     # Complex providers with additional configuration
-    "vertex": ("gemini-2.0-flash", "language"),  # Uses Google Vertex AI
+    "vertex": ("gemini-3.5-flash", "language"),  # Uses Google Vertex AI
     "azure": ("gpt-35-turbo", "language"),  # Azure OpenAI deployment name
     "openai_compatible": (None, "language"),  # Dynamic - will use first available model
     "dashscope": ("qwen-plus", "language"),
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index f168acaa..3527faae 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -265,7 +265,7 @@ async def discover_google_models() -> List[DiscoveredModel]:
             data = response.json()
 
             for model in data.get("models", []):
-                # Google returns full path like "models/gemini-1.5-flash"
+                # Google returns full path like "models/gemini-2.5-flash"
                 model_name = model.get("name", "").replace("models/", "")
                 if model_name:
                     model_type = classify_model_type(model_name, "google")
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 141111a8..98c545a3 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -264,11 +264,21 @@ class TestAudioMatrixWiring:
 
         # Gemini TTS preview is classifiable; plain Gemini STT name stays language
         assert classify_model_type("gemini-3.1-flash-tts-preview", "google") == "text_to_speech"
-        assert classify_model_type("gemini-2.0-flash", "google") == "language"
+        assert classify_model_type("gemini-2.5-flash", "google") == "language"
         # ElevenLabs Scribe STT must not be caught by the TTS "eleven" pattern
         assert classify_model_type("scribe_v1", "elevenlabs") == "speech_to_text"
         assert classify_model_type("eleven_multilingual_v2", "elevenlabs") == "text_to_speech"
 
+    def test_google_and_vertex_use_current_test_model(self):
+        # Regression test for #970: the connection test used the retired
+        # gemini-2.0-flash, so testing a valid Google AI key failed with 404.
+        # gemini-3.5-flash is the current stable GA (gemini-2.5-flash is
+        # already scheduled for shutdown), so pin the longer-lived one.
+        from open_notebook.ai.connection_tester import TEST_MODELS
+
+        assert TEST_MODELS["google"] == ("gemini-3.5-flash", "language")
+        assert TEST_MODELS["vertex"] == ("gemini-3.5-flash", "language")
+
 
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From f59694431209b11a282ab8f719cf925378632e12 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 10 Jul 2026 16:26:22 -0300
Subject: [PATCH 154/345] fix: make the provider connection test resilient to
 model retirement (#1035)

* fix: make the provider connection test resilient to model retirement

Two independent hardenings against the #970 class of breakage (a hard-coded
Gemini test model getting shut down by Google, which made testing a valid
key fail with a 404):

- Use Google's floating alias gemini-flash-latest for the Google/Vertex
  test model instead of a dated id, so a retirement repoints it for us.
- Reframe the provider connection test around what an error actually
  proves: only a rejected key (401), missing permissions (403), or an
  unreachable endpoint are failures. Anything the provider returns after
  authenticating - a rate limit, or a missing/retired/unsupported model -
  still proves the credentials work, so it reports success. Previously this
  relied on matching the literal phrase 'not found' + 'model', which a
  differently-worded retirement/deprecation error slipped past.

Unifies the auth/network/rate-limit classification (previously duplicated
and divergent between connection_tester and credentials_service) into
shared helpers. The individual-model test keeps model-not-found as a
failure, since there a specific registered model really is broken.

Adds classification tests with realistic provider error strings.

* docs: add CHANGELOG entry for connection-test resilience fix
---
 CHANGELOG.md                                 |   1 +
 api/credentials_service.py                   |  15 +-
 open_notebook/ai/connection_tester.py        | 122 +++++++++++++++--
 tests/test_connection_test_classification.py | 137 +++++++++++++++++++
 tests/test_credentials_api.py                |  14 +-
 5 files changed, 258 insertions(+), 31 deletions(-)
 create mode 100644 tests/test_connection_test_classification.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f84e70f8..2155d721 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
 
 ### Fixed
+- Testing a valid Google/Vertex credential no longer fails after Google retires a Gemini model. The connection test used a hard-coded model id that Google shuts down on a schedule (`gemini-2.0-flash`), so a valid key surfaced as a broken connection (#970). The Google/Vertex test now uses Google's floating `gemini-flash-latest` alias, and the provider connection test was reframed so only a rejected key, missing permissions, or an unreachable endpoint count as failures — a missing/retired/rate-limited model still reports the credentials as valid
 - API startup no longer crashes when SurrealDB isn't ready yet (e.g. docker-compose race on host reboot: `Temporary failure in name resolution`). The lifespan now polls a lightweight readiness probe with bounded exponential backoff (~50s budget, 5s per-probe timeout) before running migrations; migration errors themselves still fail fast (#708)
 - Markdown typography styles (`prose` classes) are active again: the Tailwind v4 migration left the old `tailwind.config.ts` (which loaded `@tailwindcss/typography`) silently ignored, so rendered markdown lost its typographic styling. The plugin and class-based dark mode are now configured in `globals.css`, and markdown rendering is centralized in a shared `MarkdownRenderer` component (#783)
 - Podcast generation no longer truncates on dense, long-form content (`LengthFinishReasonError` / `OUTPUT_PARSING_FAILURE`): episode profiles now support an optional `max_tokens` that is passed through to podcast_creator's outline/transcript generation, overriding its defaults — settable via the episode profile API (UI follow-up in #991) (#639)
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 9edc5951..3628e01b 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -269,6 +269,7 @@ async def test_credential(credential_id: str) -> dict:
             _test_azure_connection,
             _test_ollama_connection,
             _test_openai_compatible_connection,
+            classify_provider_test_error,
         )
 
         provider = cred.provider.lower()
@@ -360,18 +361,10 @@ async def test_credential(credential_id: str) -> dict:
             }
 
         error_msg = str(e)
-        if "401" in error_msg or "unauthorized" in error_msg.lower():
-            return {"provider": provider, "success": False, "message": "Invalid API key"}
-        elif "403" in error_msg or "forbidden" in error_msg.lower():
-            return {"provider": provider, "success": False, "message": "API key lacks required permissions"}
-        elif "rate" in error_msg.lower() and "limit" in error_msg.lower():
-            return {"provider": provider, "success": True, "message": "Rate limited - but connection works"}
-        elif "not found" in error_msg.lower() and "model" in error_msg.lower():
-            return {"provider": provider, "success": True, "message": "API key valid (test model not available)"}
-        else:
+        success, message = classify_provider_test_error(error_msg)
+        if not success:
             logger.debug(f"Test connection error for credential {credential_id}: {e}")
-            truncated = error_msg[:100] + "..." if len(error_msg) > 100 else error_msg
-            return {"provider": provider, "success": False, "message": f"Error: {truncated}"}
+        return {"provider": provider, "success": success, "message": message}
 
 
 async def discover_with_config(provider: str, config: dict) -> List[dict]:
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index add3192a..9c16b14c 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -49,10 +49,18 @@ def _is_vertex_credentials_file_error(exc: Exception) -> bool:
 
 # Test models for each provider - uses minimal/cheapest models for testing
 # Format: (model_name, model_type)
+#
+# Prefer a provider-maintained floating alias where one exists, so a model
+# retirement doesn't silently break the connection test (see #970: Google
+# hard-shuts-down Gemini model ids on a schedule). `gemini-flash-latest`
+# is Google's alias for the current stable Flash model and moves forward on
+# its own. The provider test also no longer treats a model-level failure as
+# a connection failure (see `_connection_failure_reason`), so even if an
+# alias ever breaks, the test still reports the credentials correctly.
 TEST_MODELS = {
     "openai": ("gpt-3.5-turbo", "language"),
     "anthropic": ("claude-3-haiku-20240307", "language"),
-    "google": ("gemini-3.5-flash", "language"),
+    "google": ("gemini-flash-latest", "language"),
     "groq": ("llama-3.1-8b-instant", "language"),
     "mistral": ("mistral-small-latest", "language"),
     "deepseek": ("deepseek-chat", "language"),
@@ -63,7 +71,7 @@ TEST_MODELS = {
     "deepgram": ("aura-2-thalia-en", "text_to_speech"),
     "ollama": (None, "language"),  # Dynamic - will use first available model
     # Complex providers with additional configuration
-    "vertex": ("gemini-3.5-flash", "language"),  # Uses Google Vertex AI
+    "vertex": ("gemini-flash-latest", "language"),  # Uses Google Vertex AI
     "azure": ("gpt-35-turbo", "language"),  # Azure OpenAI deployment name
     "openai_compatible": (None, "language"),  # Dynamic - will use first available model
     "dashscope": ("qwen-plus", "language"),
@@ -281,26 +289,114 @@ def _get_test_audio() -> io.BytesIO:
         return _generate_test_wav()
 
 
-def _normalize_error_message(error_msg: str) -> Tuple[bool, str]:
-    """Normalize common error patterns into user-friendly messages."""
+def _connection_failure_reason(error_msg: str) -> Optional[str]:
+    """Classify whether an error means the provider is genuinely unreachable
+    or the credentials are rejected.
+
+    Returns a user-facing failure message for the only errors that actually
+    disprove a working provider connection — bad key (401), insufficient
+    permissions (403), and network/timeout failures. Returns None for
+    anything the provider itself returned *after* authenticating (a missing
+    or retired model, an unsupported request, a rate limit): reaching the
+    model layer at all proves the credentials and endpoint work, so those
+    are not connection failures. This is what keeps a retired test model
+    (see #970) from being misreported as a broken provider connection.
+    """
     lower = error_msg.lower()
 
     if "401" in error_msg or "unauthorized" in lower:
-        return False, "Invalid API key"
-    elif "403" in error_msg or "forbidden" in lower:
-        return False, "API key lacks required permissions"
-    elif "rate" in lower and "limit" in lower:
+        return "Invalid API key"
+    if "403" in error_msg or "forbidden" in lower:
+        return "API key lacks required permissions"
+    if "timeout" in lower or "timed out" in lower:
+        return "Connection timed out - check network/endpoint"
+    if (
+        "connection" in lower
+        or "network" in lower
+        or "getaddrinfo" in lower
+        or "name resolution" in lower
+        or "failed to establish" in lower
+    ):
+        return "Connection error - check network/endpoint"
+    return None
+
+
+def _is_rate_limit(error_msg: str) -> bool:
+    """True if the error is a throttling/quota response. Being rate-limited
+    proves the request authenticated, so callers treat this as connection-OK.
+    Covers the common phrasings across providers (429, quota, resource
+    exhausted) rather than just the literal words "rate limit"."""
+    lower = error_msg.lower()
+    return (
+        ("rate" in lower and "limit" in lower)
+        or "429" in error_msg
+        or "quota" in lower
+        or "resource has been exhausted" in lower
+        or "resource exhausted" in lower
+    )
+
+
+def _normalize_error_message(error_msg: str) -> Tuple[bool, str]:
+    """Normalize common error patterns into user-friendly messages.
+
+    Used by the *individual model* test, where the user is validating one
+    specific registered model — so a missing model IS a failure (unlike the
+    provider-level test, which only cares that the credentials work).
+    """
+    reason = _connection_failure_reason(error_msg)
+    if reason:
+        return False, reason
+
+    if _is_rate_limit(error_msg):
         return True, "Rate limited - but connection works"
-    elif "not found" in lower and "model" in lower:
+    lower = error_msg.lower()
+    if "not found" in lower and "model" in lower:
         return False, "Model not found on this provider"
-    elif "connection" in lower or "network" in lower:
-        return False, "Connection error - check network/endpoint"
-    elif "timeout" in lower:
-        return False, "Connection timed out - check network/endpoint"
 
     return False, error_msg
 
 
+# Substrings that indicate the provider answered but the *test model* is
+# missing/retired/unsupported - proof the credentials and endpoint work.
+# Only consulted for fixed-endpoint API-key providers (URL-based providers
+# are tested via their own handlers), so a "not found" here is about the
+# model, never a user-supplied base URL.
+_MODEL_UNAVAILABLE_MARKERS = (
+    "not found",
+    "not supported",
+    "does not exist",
+    "deprecated",
+    "unavailable",
+    "no longer available",
+)
+
+
+def classify_provider_test_error(error_msg: str) -> Tuple[bool, str]:
+    """Classify a provider connection-test exception into (success, message).
+
+    The provider test only asks "do these credentials reach a working
+    provider?" - so the sole real failures are a rejected key (401),
+    insufficient permissions (403), and an unreachable endpoint. Anything
+    the provider returned after authenticating - a rate limit, or a
+    missing/retired/unsupported test model - still proves the connection
+    works, so it's reported as success. This is the durable half of the
+    #970 fix: even if the hard-coded test model is retired, a valid key is
+    never misreported as a broken connection.
+    """
+    reason = _connection_failure_reason(error_msg)
+    if reason:
+        return False, reason
+
+    if _is_rate_limit(error_msg):
+        return True, "Rate limited - but connection works"
+    lower = error_msg.lower()
+    if any(marker in lower for marker in _MODEL_UNAVAILABLE_MARKERS):
+        return True, "API key valid (test model unavailable)"
+
+    truncated = error_msg[:100] + "..." if len(error_msg) > 100 else error_msg
+    return False, f"Error: {truncated}"
+
+
 async def test_individual_model(model) -> Tuple[bool, str]:
     """
     Test a specific model configuration end-to-end by making a real API call.
diff --git a/tests/test_connection_test_classification.py b/tests/test_connection_test_classification.py
new file mode 100644
index 00000000..5b1c26ea
--- /dev/null
+++ b/tests/test_connection_test_classification.py
@@ -0,0 +1,137 @@
+"""
+Tests for connection-test error classification (open_notebook/ai/connection_tester.py).
+
+Two semantics share one auth/network classifier:
+- The *provider* test asks only "do these credentials reach a working
+  provider?" — so a missing/retired/unsupported test model is SUCCESS (the
+  #970 durability fix): a hard-coded test model going away must never be
+  misreported as a broken connection.
+- The *individual model* test validates one specific registered model, so a
+  missing model there IS a failure.
+"""
+
+import pytest
+
+from open_notebook.ai.connection_tester import (
+    _connection_failure_reason,
+    _is_rate_limit,
+    _normalize_error_message,
+    classify_provider_test_error,
+)
+
+# Realistic provider error strings.
+GOOGLE_RETIRED_MODEL_404 = (
+    "404 models/gemini-2.0-flash is not found for API version v1beta, "
+    "or is not supported for generateContent."
+)
+GOOGLE_DEPRECATED = "400 Model gemini-1.5-pro has been deprecated."
+GOOGLE_BAD_KEY_401 = "401 API key not valid. Please pass a valid API key."
+GOOGLE_PERM_403 = "403 Permission denied on resource project."
+GOOGLE_QUOTA_429 = "429 Resource has been exhausted (e.g. check quota)."
+DNS_FAILURE = "Connection error: [Errno -2] Name or service not known (getaddrinfo failed)"
+TIMEOUT = "Request timed out after 10s"
+
+
+class TestConnectionFailureReason:
+    """Only auth/permission/network are true connection failures."""
+
+    @pytest.mark.parametrize(
+        "msg,expected_fragment",
+        [
+            (GOOGLE_BAD_KEY_401, "Invalid API key"),
+            (GOOGLE_PERM_403, "lacks required permissions"),
+            (DNS_FAILURE, "Connection error"),
+            (TIMEOUT, "timed out"),
+        ],
+    )
+    def test_real_failures_return_a_reason(self, msg, expected_fragment):
+        reason = _connection_failure_reason(msg)
+        assert reason is not None
+        assert expected_fragment in reason
+
+    @pytest.mark.parametrize(
+        "msg",
+        [GOOGLE_RETIRED_MODEL_404, GOOGLE_DEPRECATED, GOOGLE_QUOTA_429],
+    )
+    def test_provider_reached_returns_none(self, msg):
+        # A model/quota problem came back FROM the provider — not a failure.
+        assert _connection_failure_reason(msg) is None
+
+
+class TestRateLimitDetection:
+    @pytest.mark.parametrize(
+        "msg",
+        [
+            "429 Too Many Requests",
+            "Resource has been exhausted (e.g. check quota).",
+            "You have hit your rate limit",
+            "quota exceeded for this project",
+        ],
+    )
+    def test_detects_throttling_phrasings(self, msg):
+        assert _is_rate_limit(msg) is True
+
+    def test_plain_model_error_is_not_rate_limit(self):
+        assert _is_rate_limit(GOOGLE_RETIRED_MODEL_404) is False
+
+
+class TestClassifyProviderTestError:
+    """Provider test: only bad creds / unreachable endpoint fail."""
+
+    def test_retired_test_model_is_success(self):
+        # The core #970 regression: a shut-down test model must report the
+        # key as valid, not the connection as broken.
+        success, message = classify_provider_test_error(GOOGLE_RETIRED_MODEL_404)
+        assert success is True
+        assert "test model unavailable" in message
+
+    def test_deprecated_model_is_success(self):
+        success, _ = classify_provider_test_error(GOOGLE_DEPRECATED)
+        assert success is True
+
+    def test_rate_limit_is_success(self):
+        success, message = classify_provider_test_error(GOOGLE_QUOTA_429)
+        assert success is True
+        assert "connection works" in message
+
+    @pytest.mark.parametrize(
+        "msg,expected_fragment",
+        [
+            (GOOGLE_BAD_KEY_401, "Invalid API key"),
+            (GOOGLE_PERM_403, "lacks required permissions"),
+            (DNS_FAILURE, "Connection error"),
+            (TIMEOUT, "timed out"),
+        ],
+    )
+    def test_auth_and_network_still_fail(self, msg, expected_fragment):
+        success, message = classify_provider_test_error(msg)
+        assert success is False
+        assert expected_fragment in message
+
+    def test_unrecognized_error_stays_a_failure(self):
+        # A construction/config error we can't attribute to the provider is
+        # surfaced, not silently reported as success.
+        success, message = classify_provider_test_error(
+            "TypeError: create_language() missing required config 'base_url'"
+        )
+        assert success is False
+        assert "Error:" in message
+
+
+class TestIndividualModelSemanticsDiffer:
+    """The SAME model-not-found string is failure for the individual-model
+    test but success for the provider test — the intended difference."""
+
+    def test_model_not_found_is_failure_for_individual_test(self):
+        success, message = _normalize_error_message(GOOGLE_RETIRED_MODEL_404)
+        assert success is False
+        assert "Model not found" in message
+
+    def test_same_string_is_success_for_provider_test(self):
+        success, _ = classify_provider_test_error(GOOGLE_RETIRED_MODEL_404)
+        assert success is True
+
+    def test_individual_test_shares_auth_classification(self):
+        success, message = _normalize_error_message(GOOGLE_BAD_KEY_401)
+        assert success is False
+        assert "Invalid API key" in message
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 98c545a3..869ff707 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -269,15 +269,15 @@ class TestAudioMatrixWiring:
         assert classify_model_type("scribe_v1", "elevenlabs") == "speech_to_text"
         assert classify_model_type("eleven_multilingual_v2", "elevenlabs") == "text_to_speech"
 
-    def test_google_and_vertex_use_current_test_model(self):
-        # Regression test for #970: the connection test used the retired
-        # gemini-2.0-flash, so testing a valid Google AI key failed with 404.
-        # gemini-3.5-flash is the current stable GA (gemini-2.5-flash is
-        # already scheduled for shutdown), so pin the longer-lived one.
+    def test_google_and_vertex_use_floating_alias(self):
+        # Regression test for #970: the connection test used a hard-coded
+        # Gemini id (gemini-2.0-flash) that Google later shut down, so a
+        # valid key failed with 404. Use Google's floating alias, which the
+        # provider repoints on each retirement, so it can't go stale.
         from open_notebook.ai.connection_tester import TEST_MODELS
 
-        assert TEST_MODELS["google"] == ("gemini-3.5-flash", "language")
-        assert TEST_MODELS["vertex"] == ("gemini-3.5-flash", "language")
+        assert TEST_MODELS["google"] == ("gemini-flash-latest", "language")
+        assert TEST_MODELS["vertex"] == ("gemini-flash-latest", "language")
 
 
 if __name__ == "__main__":

From 6bf15d0a42f1a259ff8380dd999eb478cafd50a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 Jul 2026 16:55:15 -0300
Subject: [PATCH 155/345] chore(deps): bump soupsieve from 2.8.3 to 2.8.4
 (#1029)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 59d0ef6a..a3eb759a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3307,11 +3307,11 @@ wheels = [
 
 [[package]]
 name = "soupsieve"
-version = "2.8.3"
+version = "2.8.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/7b/ae/2d9c981590ed9999a0d91755b47fc74f74de286b0f5cee14c9269041e6c4/soupsieve-2.8.3.tar.gz", hash = "sha256:3267f1eeea4251fb42728b6dfb746edc9acaffc4a45b27e19450b676586e8349", size = 118627, upload-time = "2026-01-20T04:27:02.457Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/47/2c/0a5f6f8ee0d5589e48c7640213ed5175d52cf540a06725b628cc1a45d6ce/soupsieve-2.8.4.tar.gz", hash = "sha256:e121fd02e975c695e4e9e8774a5ee35d74714b59307868dcc5319ad2d9e3328e", size = 121110, upload-time = "2026-05-24T13:55:57.154Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/46/2c/1462b1d0a634697ae9e55b3cecdcb64788e8b7d63f54d923fcd0bb140aed/soupsieve-2.8.3-py3-none-any.whl", hash = "sha256:ed64f2ba4eebeab06cc4962affce381647455978ffc1e36bb79a545b91f45a95", size = 37016, upload-time = "2026-01-20T04:27:01.012Z" },
+    { url = "https://files.pythonhosted.org/packages/5e/f5/0c41cb68dcae6b7de4fac4188a3a9589e21fb31df21ea3a2e888db95e6c9/soupsieve-2.8.4-py3-none-any.whl", hash = "sha256:e7e6b0769c8f51ed59acab6e994b00621096cfb1c640a7509295987388fbaf65", size = 37304, upload-time = "2026-05-24T13:55:55.406Z" },
 ]
 
 [[package]]

From 37aea9622c8a5ab2fee724bd237e2f01e15670d5 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 10 Jul 2026 21:10:17 -0300
Subject: [PATCH 156/345] docs(changelog): add missing Unreleased entries
 (#1040)

Catch the Unreleased section up with everything merged since v1.10.0
that wasn't yet recorded:

- Security: the July hardening batch (#1002-#1007, #1012-#1015,
  #1017, #1021, #1024, #1025)
- Added: sources table sorting (#895), EasyPanel template + guide
  (#189), CI coverage measurement (#942)
- Fixed: SSE streaming through the Next.js proxy (#770), insight/job
  batching and event-loop fixes (#1008, #1009, #1011, #1018),
  provider allowlist 422 (#1016), silent embed-queue failures (#1019),
  deprecated gemini model cleanup appended to the #970 entry
- Changed: default-password docs correction (#1026)
---
 CHANGELOG.md | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2155d721..86b194e1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -24,15 +24,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - "Recently Viewed" section on the Notebooks page — a collapsible grid of the last 12 notebooks and sources you opened, newest first, hidden when there's no view history. Backed by a new `last_viewed_at` timestamp stamped on read and a `GET /api/recently-viewed` endpoint (translated across all 14 locales) (#850)
 - Per-transformation model selection — each transformation can now be assigned its own language model from the transformation editor, overriding the global transformation default for that transformation only. Runs without an explicit model keep using the system default as before (#776)
 - "Refresh content" action on web-link sources — re-fetches the URL and re-embeds the source so its content stays current, available from the source card menu once processing has completed (translated across all 14 locales) (#259)
+- Sources table can now be sorted by every column — type, title, insights count, embedded status, created and updated (a new "Updated" column was added) — via clickable column headers backed by new `GET /api/sources` sort fields (translated across all locales) (#895)
+- EasyPanel deployment template under `examples/easypanel/` — provisions the app plus a dedicated SurrealDB service with auto-generated database/encryption secrets — plus an EasyPanel section in the single-container install guide (#189)
+- Test coverage measurement in CI: backend via `pytest-cov` (terminal + XML reports), frontend via `@vitest/coverage-v8` and a new `test:coverage` script (#942)
 
 ### Changed
 - Developer documentation restructured: 17 knowledge-heavy `CLAUDE.md` files consolidated into the 3 `AGENTS.md` + docs pages above; `README.dev.md` became a pointer after its unique content moved into `development-setup.md` (make-workflow matrix), `.github/RELEASE_PROCESS.md` (Docker publishing) and the change playbooks (add-a-language); the maintainer guide now carries the curated label taxonomy (state funnel, `area:` labels, consolidation rules)
 - Fixed stale developer docs while migrating: real migration path/format (`open_notebook/database/migrations/N.surrealql` + `AsyncMigrationManager` registration), provider count (17), locale list (7), and 9 README links that pointed at documentation pages that never existed
 - The API's listen interface in the Docker images is now configurable via a new `API_HOST` environment variable instead of a hardcoded `--host 0.0.0.0`. The default is unchanged (`0.0.0.0`); set `API_HOST=::` to serve IPv6/dual-stack environments (#985)
 - `docker-compose.yml` now sources the SurrealDB credentials from `SURREAL_USER` / `SURREAL_PASSWORD` (applied to both the database server and the app), defaulting to `root:root` so the zero-config quick start is unchanged. Set them in a `.env` file to use your own credentials before exposing the instance; `.env.example` and the compose file note this (#946)
+- Docs no longer claim a hardcoded default API password (`open-notebook-change-me`) exists; the actual behavior is that auth is disabled entirely when `OPEN_NOTEBOOK_PASSWORD` is unset. Also removed the dead `check_api_password` helper that had been superseded by the auth middleware (#1026)
 
 ### Fixed
-- Testing a valid Google/Vertex credential no longer fails after Google retires a Gemini model. The connection test used a hard-coded model id that Google shuts down on a schedule (`gemini-2.0-flash`), so a valid key surfaced as a broken connection (#970). The Google/Vertex test now uses Google's floating `gemini-flash-latest` alias, and the provider connection test was reframed so only a rejected key, missing permissions, or an unreachable endpoint count as failures — a missing/retired/rate-limited model still reports the credentials as valid
+- Testing a valid Google/Vertex credential no longer fails after Google retires a Gemini model. The connection test used a hard-coded model id that Google shuts down on a schedule (`gemini-2.0-flash`), so a valid key surfaced as a broken connection (#970). The Google/Vertex test now uses Google's floating `gemini-flash-latest` alias, and the provider connection test was reframed so only a rejected key, missing permissions, or an unreachable endpoint count as failures — a missing/retired/rate-limited model still reports the credentials as valid. Deprecated `gemini-1.5`/`gemini-2.0` model references were also removed from the connection-test model lists and documentation
 - API startup no longer crashes when SurrealDB isn't ready yet (e.g. docker-compose race on host reboot: `Temporary failure in name resolution`). The lifespan now polls a lightweight readiness probe with bounded exponential backoff (~50s budget, 5s per-probe timeout) before running migrations; migration errors themselves still fail fast (#708)
 - Markdown typography styles (`prose` classes) are active again: the Tailwind v4 migration left the old `tailwind.config.ts` (which loaded `@tailwindcss/typography`) silently ignored, so rendered markdown lost its typographic styling. The plugin and class-based dark mode are now configured in `globals.css`, and markdown rendering is centralized in a shared `MarkdownRenderer` component (#783)
 - Podcast generation no longer truncates on dense, long-form content (`LengthFinishReasonError` / `OUTPUT_PARSING_FAILURE`): episode profiles now support an optional `max_tokens` that is passed through to podcast_creator's outline/transcript generation, overriding its defaults — settable via the episode profile API (UI follow-up in #991) (#639)
@@ -44,9 +48,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Token counting no longer raises `ValueError: disallowed special token '<|endoftext|>'` when source/context content contains special-token sequences; `token_count()` now encodes with `disallowed_special=()` so such substrings are treated as ordinary text (#667)
 - Single-container image no longer hangs at "API not ready yet" on a brand-new instance. `supervisord.single.conf` ran the API and worker with `uv run` (without `--no-sync`), so at startup `uv` tried to sync dev dependencies it couldn't resolve against the `--no-dev` build. Both processes now use `uv run --no-sync`, matching the multi-container `supervisord.conf` (#609)
 - Note editor now expands to fill the dialog instead of being capped at `500px`; removed the `max-h-[500px]` constraint that overrode the `flex-1` parent and cramped editing on tall windows (#932)
+- Ask and source-chat responses now stream progressively instead of hanging at "Processing..." until the full answer is ready. The API's streaming endpoints now declare `text/event-stream` (with no-buffering headers), and dedicated Next.js route handlers pass the SSE body through as a stream — Next.js `rewrites()` buffers SSE responses to completion (#770)
+- Chat, notebook-context and podcast generation now build their context with a single batched insight query instead of one query per source (14 → 3 queries on a 12-source notebook), via the new `SourceInsight.get_for_sources()` (#1008)
+- File uploads no longer block the event loop: `save_uploaded_file()` now writes via `asyncio.to_thread()`, keeping the API responsive during large uploads (#1009)
+- URL validation no longer blocks the event loop on DNS resolution: `validate_url()` is now async and resolves hostnames via `asyncio.to_thread()`, so a slow DNS lookup on the model-provisioning path can't stall concurrent requests (#1011)
+- Creating a credential with an unknown provider name now fails with a clear `422` at the API boundary instead of an opaque error deep in the domain layer; `provider` is validated against the 17 supported providers, and a test keeps the frontend/backend provider lists in sync (#1016)
+- Podcast episode listing now batch-fetches job statuses in one query instead of one per episode, speeding up notebooks with many episodes; podcast audio-file paths are additionally verified to stay within the podcasts folder before streaming/deleting (#1018)
+- Transformations no longer report success while silently losing their insight when the embedding job fails to queue: `Source.add_insight()` now raises on submission failure (handled by job-level retry), note auto-embedding degrades gracefully instead of turning a note save into a 500, and the explicit note-embed endpoint surfaces queue failures as errors (#1019)
 
 ### Security
 - Resolved dependency audit findings: added npm `overrides` for vulnerable transitive frontend packages (`ws`, `brace-expansion`, `ajv`, `@eslint/plugin-kit`, `postcss`) — `npm audit` now reports 0 vulnerabilities — refreshed `uv.lock` (`langsmith`, `pydantic-settings`, `pip`), and hardened external `window.open(..., '_blank')` calls with `noopener,noreferrer` (#962)
+- SurrealQL injection via record ids in `repo_relate()`/`repo_upsert()`/`repo_update()`: a crafted `notebook_id` on the save-insight-as-note flow could execute arbitrary SurrealQL. Record identifiers are now bound as query parameters, and the target notebook's existence is validated before relating (#1002)
+- The API password is now compared with `secrets.compare_digest()` instead of `!=`, closing a timing side-channel on authentication (#1003)
+- User-authored transformation prompts are no longer compiled as Jinja2 template source (a DoS vector via template loops); they are passed as plain variables into fixed developer-authored templates, so Jinja syntax inside a prompt renders as inert text. Output is unchanged for legitimate prompts (#1004)
+- SSRF protection on source-URL ingestion: adding a web-link source now runs the same `validate_url()` guard already used for credential URLs, rejecting internal/private/cloud-metadata addresses (#1005)
+- Provider-credential URLs are re-validated immediately before every outbound request (connection tests, model discovery and inference) instead of only at save time, closing a DNS-rebinding window; AWS's IPv6 metadata address was added to the blocklist (#1006)
+- The note/transformation markdown preview now sanitizes raw HTML via `rehype-sanitize`: `<iframe>`/`<script>`/`<style>` tags and `javascript:` URLs are stripped while math, syntax highlighting and GFM still render — closing an HTML-injection path via AI-generated note content (#1007)
+- Vertex credential-test errors no longer reveal whether a `credentials_path` file is missing, invalid JSON or wrong-shape JSON (a filesystem oracle); all three cases now return one generic message (#1012)
+- CORS no longer combines the wildcard origin with `allow_credentials=True` (which made Starlette reflect any Origin verbatim for credentialed requests); credentials are now only allowed when `CORS_ORIGINS` is explicitly configured (#1013)
+- Request bodies are now capped before auth and routing by a new `MaxBodySizeMiddleware` — default 100 MB, configurable via the new `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` environment variable; chunked uploads are caught by a streaming byte-count (#1014)
+- Source upload hardening: unique filenames are claimed atomically (closing a TOCTOU race between the exists-check and the write), path-containment checks require a trailing separator so sibling directories can't pass, and the `notebooks`/`transformations` arrays on source creation are capped at 50 items (#1015)
+- API 500 responses from the sources and podcast endpoints no longer echo internal exception text (which could leak DB hostnames or connection details); responses use fixed generic messages and details remain in server logs (#1017)
+- `Credential.get_all()` no longer builds its ORDER BY clause from a raw f-string; ordering fields now go through the base-class allowlist validation (not reachable from the current API surface — defense in depth) (#1021)
+- The frontend runtime-config endpoint validates `Host` and `X-Forwarded-Proto` before using them to build the browser-facing API URL, preventing a spoofed Host header from redirecting browser API traffic (including the bearer token) to an attacker-controlled origin; malformed values fall back to localhost (#1024)
+- `docker-compose.yml` now binds SurrealDB's published port to `127.0.0.1` instead of all interfaces, so the database (root:root by default) is no longer reachable from other machines out of the box; a new `docker-compose.override.yml.example` shows how to re-expose it deliberately (#1025)
 
 ## [1.10.0] - 2026-06-17
 

From 5882acb5ed36f17779333229a7d70869ae4ddf52 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 10 Jul 2026 21:10:21 -0300
Subject: [PATCH 157/345] fix(security): force pillow >= 12.2.0 past moviepy's
 cap (#1041)

All 6 open Dependabot alerts (3 high, 3 moderate) are Pillow advisories
fixed in 12.1.1/12.2.0: PSD out-of-bounds writes, a FITS GZIP
decompression bomb, a PDF trailer parsing DoS, a font integer overflow
and a heap buffer overflow.

The only constraint holding Pillow at 11.x is moviepy 2.2.1's
`pillow<12` cap, pulled in via podcast-creator 0.12.0. moviepy only
uses PIL in its video modules, which the audio-only podcast pipeline
never imports, so a uv override-dependencies entry forces Pillow to
12.3.0. The override is documented inline and should be dropped once
podcast-creator publishes a release without moviepy (already removed
on its main branch).

Verified: podcast_creator/moviepy/PIL import cleanly, full test suite
passes (397 passed).
---
 pyproject.toml |  9 ++++++++
 uv.lock        | 59 ++++++++++++++++++++++++--------------------------
 2 files changed, 37 insertions(+), 31 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 8c3903e8..021a2a22 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -102,3 +102,12 @@ ignore = [
 [[tool.mypy.overrides]]
 module = "pages.*"
 ignore_errors = true
+
+[tool.uv]
+# Pillow < 12.2.0 has open security advisories (PSD OOB write, FITS
+# decompression bomb, PDF trailer DoS). The only thing holding it back is
+# moviepy's `pillow<12` cap, pulled in via podcast-creator 0.12.0 — and
+# moviepy only touches PIL in its video modules, which the audio-only podcast
+# pipeline never imports. Drop this override once podcast-creator ships a
+# release without moviepy (already removed on its main branch).
+override-dependencies = ["pillow>=12.2.0"]
diff --git a/uv.lock b/uv.lock
index a3eb759a..53a644da 100644
--- a/uv.lock
+++ b/uv.lock
@@ -7,6 +7,9 @@ resolution-markers = [
     "sys_platform != 'emscripten' and sys_platform != 'win32'",
 ]
 
+[manifest]
+overrides = [{ name = "pillow", specifier = ">=12.2.0" }]
+
 [[package]]
 name = "ai-prompter"
 version = "0.4.0"
@@ -2439,39 +2442,33 @@ wheels = [
 
 [[package]]
 name = "pillow"
-version = "11.3.0"
+version = "12.3.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f3/0d/d0d6dea55cd152ce3d6767bb38a8fc10e33796ba4ba210cbab9354b6d238/pillow-11.3.0.tar.gz", hash = "sha256:3828ee7586cd0b2091b6209e5ad53e20d0649bbe87164a459d0676e035e8f523", size = 47113069, upload-time = "2025-07-01T09:16:30.666Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/1c/3d/bb7fca845737cf9d7dbde16ed1843984665ff2e0a518f5db43e77ec540b9/pillow-12.3.0.tar.gz", hash = "sha256:3b8182a766685eaa002637e28b4ec8d6b18819a0c71f579bf0dbaa5830297cce", size = 47025035, upload-time = "2026-07-01T11:56:38.965Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/db/26/77f8ed17ca4ffd60e1dcd220a6ec6d71210ba398cfa33a13a1cd614c5613/pillow-11.3.0-cp311-cp311-macosx_10_10_x86_64.whl", hash = "sha256:1cd110edf822773368b396281a2293aeb91c90a2db00d78ea43e7e861631b722", size = 5316531, upload-time = "2025-07-01T09:13:59.203Z" },
-    { url = "https://files.pythonhosted.org/packages/cb/39/ee475903197ce709322a17a866892efb560f57900d9af2e55f86db51b0a5/pillow-11.3.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:9c412fddd1b77a75aa904615ebaa6001f169b26fd467b4be93aded278266b288", size = 4686560, upload-time = "2025-07-01T09:14:01.101Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/90/442068a160fd179938ba55ec8c97050a612426fae5ec0a764e345839f76d/pillow-11.3.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:7d1aa4de119a0ecac0a34a9c8bde33f34022e2e8f99104e47a3ca392fd60e37d", size = 5870978, upload-time = "2025-07-03T13:09:55.638Z" },
-    { url = "https://files.pythonhosted.org/packages/13/92/dcdd147ab02daf405387f0218dcf792dc6dd5b14d2573d40b4caeef01059/pillow-11.3.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:91da1d88226663594e3f6b4b8c3c8d85bd504117d043740a8e0ec449087cc494", size = 7641168, upload-time = "2025-07-03T13:10:00.37Z" },
-    { url = "https://files.pythonhosted.org/packages/6e/db/839d6ba7fd38b51af641aa904e2960e7a5644d60ec754c046b7d2aee00e5/pillow-11.3.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:643f189248837533073c405ec2f0bb250ba54598cf80e8c1e043381a60632f58", size = 5973053, upload-time = "2025-07-01T09:14:04.491Z" },
-    { url = "https://files.pythonhosted.org/packages/f2/2f/d7675ecae6c43e9f12aa8d58b6012683b20b6edfbdac7abcb4e6af7a3784/pillow-11.3.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:106064daa23a745510dabce1d84f29137a37224831d88eb4ce94bb187b1d7e5f", size = 6640273, upload-time = "2025-07-01T09:14:06.235Z" },
-    { url = "https://files.pythonhosted.org/packages/45/ad/931694675ede172e15b2ff03c8144a0ddaea1d87adb72bb07655eaffb654/pillow-11.3.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:cd8ff254faf15591e724dc7c4ddb6bf4793efcbe13802a4ae3e863cd300b493e", size = 6082043, upload-time = "2025-07-01T09:14:07.978Z" },
-    { url = "https://files.pythonhosted.org/packages/3a/04/ba8f2b11fc80d2dd462d7abec16351b45ec99cbbaea4387648a44190351a/pillow-11.3.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:932c754c2d51ad2b2271fd01c3d121daaa35e27efae2a616f77bf164bc0b3e94", size = 6715516, upload-time = "2025-07-01T09:14:10.233Z" },
-    { url = "https://files.pythonhosted.org/packages/48/59/8cd06d7f3944cc7d892e8533c56b0acb68399f640786313275faec1e3b6f/pillow-11.3.0-cp311-cp311-win32.whl", hash = "sha256:b4b8f3efc8d530a1544e5962bd6b403d5f7fe8b9e08227c6b255f98ad82b4ba0", size = 6274768, upload-time = "2025-07-01T09:14:11.921Z" },
-    { url = "https://files.pythonhosted.org/packages/f1/cc/29c0f5d64ab8eae20f3232da8f8571660aa0ab4b8f1331da5c2f5f9a938e/pillow-11.3.0-cp311-cp311-win_amd64.whl", hash = "sha256:1a992e86b0dd7aeb1f053cd506508c0999d710a8f07b4c791c63843fc6a807ac", size = 6986055, upload-time = "2025-07-01T09:14:13.623Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/df/90bd886fabd544c25addd63e5ca6932c86f2b701d5da6c7839387a076b4a/pillow-11.3.0-cp311-cp311-win_arm64.whl", hash = "sha256:30807c931ff7c095620fe04448e2c2fc673fcbb1ffe2a7da3fb39613489b1ddd", size = 2423079, upload-time = "2025-07-01T09:14:15.268Z" },
-    { url = "https://files.pythonhosted.org/packages/40/fe/1bc9b3ee13f68487a99ac9529968035cca2f0a51ec36892060edcc51d06a/pillow-11.3.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:fdae223722da47b024b867c1ea0be64e0df702c5e0a60e27daad39bf960dd1e4", size = 5278800, upload-time = "2025-07-01T09:14:17.648Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/32/7e2ac19b5713657384cec55f89065fb306b06af008cfd87e572035b27119/pillow-11.3.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:921bd305b10e82b4d1f5e802b6850677f965d8394203d182f078873851dada69", size = 4686296, upload-time = "2025-07-01T09:14:19.828Z" },
-    { url = "https://files.pythonhosted.org/packages/8e/1e/b9e12bbe6e4c2220effebc09ea0923a07a6da1e1f1bfbc8d7d29a01ce32b/pillow-11.3.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:eb76541cba2f958032d79d143b98a3a6b3ea87f0959bbe256c0b5e416599fd5d", size = 5871726, upload-time = "2025-07-03T13:10:04.448Z" },
-    { url = "https://files.pythonhosted.org/packages/8d/33/e9200d2bd7ba00dc3ddb78df1198a6e80d7669cce6c2bdbeb2530a74ec58/pillow-11.3.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:67172f2944ebba3d4a7b54f2e95c786a3a50c21b88456329314caaa28cda70f6", size = 7644652, upload-time = "2025-07-03T13:10:10.391Z" },
-    { url = "https://files.pythonhosted.org/packages/41/f1/6f2427a26fc683e00d985bc391bdd76d8dd4e92fac33d841127eb8fb2313/pillow-11.3.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:97f07ed9f56a3b9b5f49d3661dc9607484e85c67e27f3e8be2c7d28ca032fec7", size = 5977787, upload-time = "2025-07-01T09:14:21.63Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/c9/06dd4a38974e24f932ff5f98ea3c546ce3f8c995d3f0985f8e5ba48bba19/pillow-11.3.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:676b2815362456b5b3216b4fd5bd89d362100dc6f4945154ff172e206a22c024", size = 6645236, upload-time = "2025-07-01T09:14:23.321Z" },
-    { url = "https://files.pythonhosted.org/packages/40/e7/848f69fb79843b3d91241bad658e9c14f39a32f71a301bcd1d139416d1be/pillow-11.3.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:3e184b2f26ff146363dd07bde8b711833d7b0202e27d13540bfe2e35a323a809", size = 6086950, upload-time = "2025-07-01T09:14:25.237Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/1a/7cff92e695a2a29ac1958c2a0fe4c0b2393b60aac13b04a4fe2735cad52d/pillow-11.3.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6be31e3fc9a621e071bc17bb7de63b85cbe0bfae91bb0363c893cbe67247780d", size = 6723358, upload-time = "2025-07-01T09:14:27.053Z" },
-    { url = "https://files.pythonhosted.org/packages/26/7d/73699ad77895f69edff76b0f332acc3d497f22f5d75e5360f78cbcaff248/pillow-11.3.0-cp312-cp312-win32.whl", hash = "sha256:7b161756381f0918e05e7cb8a371fff367e807770f8fe92ecb20d905d0e1c149", size = 6275079, upload-time = "2025-07-01T09:14:30.104Z" },
-    { url = "https://files.pythonhosted.org/packages/8c/ce/e7dfc873bdd9828f3b6e5c2bbb74e47a98ec23cc5c74fc4e54462f0d9204/pillow-11.3.0-cp312-cp312-win_amd64.whl", hash = "sha256:a6444696fce635783440b7f7a9fc24b3ad10a9ea3f0ab66c5905be1c19ccf17d", size = 6986324, upload-time = "2025-07-01T09:14:31.899Z" },
-    { url = "https://files.pythonhosted.org/packages/16/8f/b13447d1bf0b1f7467ce7d86f6e6edf66c0ad7cf44cf5c87a37f9bed9936/pillow-11.3.0-cp312-cp312-win_arm64.whl", hash = "sha256:2aceea54f957dd4448264f9bf40875da0415c83eb85f55069d89c0ed436e3542", size = 2423067, upload-time = "2025-07-01T09:14:33.709Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/e3/6fa84033758276fb31da12e5fb66ad747ae83b93c67af17f8c6ff4cc8f34/pillow-11.3.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:7c8ec7a017ad1bd562f93dbd8505763e688d388cde6e4a010ae1486916e713e6", size = 5270566, upload-time = "2025-07-01T09:16:19.801Z" },
-    { url = "https://files.pythonhosted.org/packages/5b/ee/e8d2e1ab4892970b561e1ba96cbd59c0d28cf66737fc44abb2aec3795a4e/pillow-11.3.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:9ab6ae226de48019caa8074894544af5b53a117ccb9d3b3dcb2871464c829438", size = 4654618, upload-time = "2025-07-01T09:16:21.818Z" },
-    { url = "https://files.pythonhosted.org/packages/f2/6d/17f80f4e1f0761f02160fc433abd4109fa1548dcfdca46cfdadaf9efa565/pillow-11.3.0-pp311-pypy311_pp73-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fe27fb049cdcca11f11a7bfda64043c37b30e6b91f10cb5bab275806c32f6ab3", size = 4874248, upload-time = "2025-07-03T13:11:20.738Z" },
-    { url = "https://files.pythonhosted.org/packages/de/5f/c22340acd61cef960130585bbe2120e2fd8434c214802f07e8c03596b17e/pillow-11.3.0-pp311-pypy311_pp73-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:465b9e8844e3c3519a983d58b80be3f668e2a7a5db97f2784e7079fbc9f9822c", size = 6583963, upload-time = "2025-07-03T13:11:26.283Z" },
-    { url = "https://files.pythonhosted.org/packages/31/5e/03966aedfbfcbb4d5f8aa042452d3361f325b963ebbadddac05b122e47dd/pillow-11.3.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:5418b53c0d59b3824d05e029669efa023bbef0f3e92e75ec8428f3799487f361", size = 4957170, upload-time = "2025-07-01T09:16:23.762Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/2d/e082982aacc927fc2cab48e1e731bdb1643a1406acace8bed0900a61464e/pillow-11.3.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:504b6f59505f08ae014f724b6207ff6222662aab5cc9542577fb084ed0676ac7", size = 5581505, upload-time = "2025-07-01T09:16:25.593Z" },
-    { url = "https://files.pythonhosted.org/packages/34/e7/ae39f538fd6844e982063c3a5e4598b8ced43b9633baa3a85ef33af8c05c/pillow-11.3.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:c84d689db21a1c397d001aa08241044aa2069e7587b398c8cc63020390b1c1b8", size = 6984598, upload-time = "2025-07-01T09:16:27.732Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/c8/0a78b0e02d7ac54bc03e5321c9220da52f0c2ea83b21f7c40e7f3169c502/pillow-12.3.0-cp311-cp311-macosx_10_10_x86_64.whl", hash = "sha256:00808c5e14ef63ac5161091d242999076604ff74b883423a11e5d7bbb38bf756", size = 5392415, upload-time = "2026-07-01T11:53:47.162Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/5b/a02d30018abd97ced9f5a6c63d28597694a00d066516b9c1c6de45859fc9/pillow-12.3.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:37d6d0a00072fd2948eb22bce7e1475f34569d90c87c59f7a2ec59541b77f7a6", size = 4785266, upload-time = "2026-07-01T11:53:49.079Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/98/766667a4be768150a202836acd9fad19c06824ca86c4286d3cf6b274964e/pillow-12.3.0-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:bcb46e2f9feff8d06323983bd83ed00c201fdcab3d74973e7072a889b3979fcd", size = 6263814, upload-time = "2026-07-01T11:53:51.32Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/2d/ede717bc1144f63886c21fd349bb95860b0d1a21149ff16f2bb362b612b6/pillow-12.3.0-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:23d27a3e0307ec2244cc51e7287b919aa68d097504ebe19df4e76a98a3eea5bd", size = 6934408, upload-time = "2026-07-01T11:53:53.487Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/48/9c58b685e69d49c31af6c8eb9012055fab7e665785165c84796e2c73ce72/pillow-12.3.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:4f883547d4b7f0495ebe7056b0cc2aea76094e7a4abc8e933540f3271df27d9c", size = 6337160, upload-time = "2026-07-01T11:53:55.457Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/fa/dc2a5c0ba6df93f67c31d34b808b7ce440b40cdbf96f0b81cde1d1e6fa93/pillow-12.3.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:236ff70b9312fb68943c703aa842ca6a758abfa45ac187a5e7c1452e96ef72b5", size = 7045172, upload-time = "2026-07-01T11:53:57.736Z" },
+    { url = "https://files.pythonhosted.org/packages/86/a5/444817a4d4c4c2417df00513086ca196f388d8f9ef40c2e4ccd1ad1af54b/pillow-12.3.0-cp311-cp311-win32.whl", hash = "sha256:10e41f0fbf1eec8cfd234b8fe17a4caac7c9d0db4c204d3c173a8f9f6ef3232b", size = 6472232, upload-time = "2026-07-01T11:53:59.767Z" },
+    { url = "https://files.pythonhosted.org/packages/63/c6/4bad1b18d132a50b27e1365e1ab163616f7a5bb56d330f66f9d1d9d4f9d4/pillow-12.3.0-cp311-cp311-win_amd64.whl", hash = "sha256:8e95e1385e4998ae9694eeaa4730ba5457ff61185b3a55e2e7bea0880aef452a", size = 7233653, upload-time = "2026-07-01T11:54:02.066Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/16/00f91ab7760dc842f5aad55217e80fc4a7067a0604535249bc8a2d6d9870/pillow-12.3.0-cp311-cp311-win_arm64.whl", hash = "sha256:ebaea975e03d3141d9d3a507df75c9b3ec90fa9d2ffd07567b3a978d9d790b26", size = 2568195, upload-time = "2026-07-01T11:54:04.622Z" },
+    { url = "https://files.pythonhosted.org/packages/37/bf/fb3ebff8ddcb76aac5a01389251bbbb9519922a9b520d8247c1ca864a25d/pillow-12.3.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:ba09209fbe443b4acccebe845d8a138b89a8f4fbaeedd44953490b5315d5e965", size = 5345969, upload-time = "2026-07-01T11:54:06.397Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/66/9a386a92561f402389a4fc70c18838bf6d35eb5eb5c6850b4b2dc64f5048/pillow-12.3.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ffd0c5368496f41b0944be820fcb7a838aa6e623d250b01acf2643939c3f99d7", size = 4780323, upload-time = "2026-07-01T11:54:09.351Z" },
+    { url = "https://files.pythonhosted.org/packages/25/27/ac8f99618ffd3dde21db0f4d4b1d2ab00c0880595bfd17df103f7f39fd0c/pillow-12.3.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d9c7f76c0673154f044e9d78c8655fb4213f6ca31a836df48b40fe5d187717b9", size = 6266838, upload-time = "2026-07-01T11:54:11.71Z" },
+    { url = "https://files.pythonhosted.org/packages/84/21/a35af28dcc61f37ed850a2d64c65c701321dfbf25085e469d5559360cbbf/pillow-12.3.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:78cb2c6865a35ab8ff8b75fd122f6033b92a62c82801110e48ddd6c936a45d91", size = 6940830, upload-time = "2026-07-01T11:54:13.732Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/51/8b08617af3ad95e33ce6d7dd2c99ed6c8298f7fb131636303956be022e25/pillow-12.3.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:e491916b378fba47242221bb9ead245211b70d504f495d105d17b14a24b4907c", size = 6344383, upload-time = "2026-07-01T11:54:15.756Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/72/cf78ac9780bb93c28328f408973845a309d4d145041665f734572ced1b52/pillow-12.3.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:0dd2064cbc55aaec028ef5fbb60fa47bb6c3e7918e07ff17935284b227a9d2df", size = 7052934, upload-time = "2026-07-01T11:54:17.721Z" },
+    { url = "https://files.pythonhosted.org/packages/20/20/25e0f4dc178a6bc0696793720055519a0de89e7661dae886992decbd2f81/pillow-12.3.0-cp312-cp312-win32.whl", hash = "sha256:dbce0b29841537a2fa4a214c2bbf14de3587c9680caa9b4e217568472490b28f", size = 6472684, upload-time = "2026-07-01T11:54:19.839Z" },
+    { url = "https://files.pythonhosted.org/packages/45/89/da2f7971a317f83d807fdd4065c0af40208e59e692cc43d315a71a0e96d1/pillow-12.3.0-cp312-cp312-win_amd64.whl", hash = "sha256:a2b55dd6b2a4c4b7d87ffa56bdb33fdc5fdb9a462173861a7bc097f17d91cb09", size = 7227137, upload-time = "2026-07-01T11:54:22.025Z" },
+    { url = "https://files.pythonhosted.org/packages/de/47/4845a0a6c0dbf1db8456bd9fc791f13c5ced7ced20606d08a0aacfd25b49/pillow-12.3.0-cp312-cp312-win_arm64.whl", hash = "sha256:331b624368d4f1d069149002f25f44bc61c8919ce8ddb3c45bdad8f6e2d89510", size = 2568267, upload-time = "2026-07-01T11:54:24.051Z" },
+    { url = "https://files.pythonhosted.org/packages/75/18/2e8b40223153ccbc60df07f9e8928dc0c76202aa4e55ae9f53962b6510d6/pillow-12.3.0-pp311-pypy311_pp73-macosx_10_15_x86_64.whl", hash = "sha256:b3c777e849237620b022f7f297dd67705f9f5cf1685f09f02e46f93e92725468", size = 5302510, upload-time = "2026-07-01T11:56:25.736Z" },
+    { url = "https://files.pythonhosted.org/packages/46/3e/51fabf59d5ab801ceab709453d3ab6b180083496579549de4c45ced6528a/pillow-12.3.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:b343699e8308bdc51978310e1c959c584e7869cc8c40780058c87da7781a1e94", size = 4736058, upload-time = "2026-07-01T11:56:28.041Z" },
+    { url = "https://files.pythonhosted.org/packages/bf/20/22fe9384b7949e25fb1293bcfc84fb82590ff4ea6b37c95b24d26d793d86/pillow-12.3.0-pp311-pypy311_pp73-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:fbd139c8447d25dd750ab79ee274cc5e1fe80fc56340ab10b18a195e1b6eca3e", size = 5237776, upload-time = "2026-07-01T11:56:30.263Z" },
+    { url = "https://files.pythonhosted.org/packages/08/14/f6ba68107680ffa74b39985f3f30884e41318fbc4250caa423c79b4788bb/pillow-12.3.0-pp311-pypy311_pp73-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:e7e480451b9fa137494bccd3a7d69adbe8ac65a87d97be61e11f1b1050a5bac3", size = 5860358, upload-time = "2026-07-01T11:56:32.68Z" },
+    { url = "https://files.pythonhosted.org/packages/36/54/0169bc772ec491108b62f644f8ecf1fe5d8ae5ebafde2ee2142210166903/pillow-12.3.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:04f01d28a6aaff387bf842a13be313df23ba0597a44f1a976c9feb3c6ff4711a", size = 7231786, upload-time = "2026-07-01T11:56:35.046Z" },
 ]
 
 [[package]]

From 9857862b295aef5d9183ead190f98ba08b81709c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 10 Jul 2026 21:10:24 -0300
Subject: [PATCH 158/345] fix: sort sources by title without tripping the
 SEARCH index, return 422 for invalid form data (#1042)

Two findings from v1.11 release testing:

- GET /api/sources?sort_by=title returned a 500. source.title carries a
  SEARCH (BM25) index (idx_source_title, migration 1) and SurrealDB's
  planner fails ORDER BY on such a column with 'No iterator has been
  found'. The query now sorts by a computed alias
  (string::lowercase(title OR '') AS title_sort), which sidesteps the
  index and makes the sort case-insensitive as a bonus.

- POST /api/sources with an over-limit notebooks/transformations array
  (or invalid JSON in either field) returned a raw 500.
  parse_source_form_data() builds SourceCreate manually, so pydantic's
  ValidationError never reached FastAPI's request-validation handler.
  Both cases now surface as a clean 422 with a descriptive message.

Verified against a live SurrealDB v2 instance; regression tests added
for the ORDER BY alias, all six sort fields, and the 422 paths.
---
 api/routers/sources.py                   | 21 +++++++++--
 tests/test_source_create_array_limits.py | 47 ++++++++++++++++++++++++
 tests/test_sources_api.py                | 34 +++++++++++++++++
 3 files changed, 98 insertions(+), 4 deletions(-)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index aba398a0..c1299a84 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -14,6 +14,7 @@ from fastapi import (
 )
 from fastapi.responses import FileResponse, Response
 from loguru import logger
+from pydantic import ValidationError
 from surreal_commands import execute_command_sync, submit_command
 
 from api.command_service import CommandService
@@ -41,7 +42,10 @@ router = APIRouter()
 SOURCE_SORT_FIELDS = {
     "created": "created",
     "updated": "updated",
-    "title": "title",
+    # `title` carries a SEARCH (BM25) index; SurrealDB's planner tries to use
+    # it for ORDER BY and fails ("No iterator has been found"), so we sort by
+    # a computed alias instead — which also makes the sort case-insensitive.
+    "title": "title_sort",
     "insights_count": "insights_count",
     "embedded": "embedded",
     "type": "type",
@@ -165,7 +169,9 @@ def parse_source_form_data(
             notebooks_list = json.loads(notebooks)
         except json.JSONDecodeError:
             logger.error(f"Invalid JSON in notebooks field: {notebooks}")
-            raise ValueError("Invalid JSON in notebooks field")
+            raise HTTPException(
+                status_code=422, detail="Invalid JSON in notebooks field"
+            )
 
     transformations_list = []
     if transformations:
@@ -173,7 +179,9 @@ def parse_source_form_data(
             transformations_list = json.loads(transformations)
         except json.JSONDecodeError:
             logger.error(f"Invalid JSON in transformations field: {transformations}")
-            raise ValueError("Invalid JSON in transformations field")
+            raise HTTPException(
+                status_code=422, detail="Invalid JSON in transformations field"
+            )
 
     # Create SourceCreate instance
     try:
@@ -190,7 +198,10 @@ def parse_source_form_data(
             delete_source=delete_source_bool,
             async_processing=async_processing_bool,
         )
-        pass  # SourceCreate instance created successfully
+    except ValidationError as e:
+        errors = "; ".join(err.get("msg", "invalid value") for err in e.errors())
+        logger.error(f"Invalid source form data: {errors}")
+        raise HTTPException(status_code=422, detail=f"Invalid source data: {errors}")
     except Exception as e:
         logger.error(f"Failed to create SourceCreate instance: {e}")
         raise
@@ -242,6 +253,7 @@ async def get_sources(
             # Query sources for specific notebook - include command field with FETCH
             query = f"""
                 SELECT id, asset, created, title, updated, topics, command,
+                string::lowercase(title OR '') AS title_sort,
                 ({SOURCE_TYPE_EXPRESSION}) AS type,
                 (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
                 (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
@@ -262,6 +274,7 @@ async def get_sources(
             # Query all sources - include command field with FETCH
             query = f"""
                 SELECT id, asset, created, title, updated, topics, command,
+                string::lowercase(title OR '') AS title_sort,
                 ({SOURCE_TYPE_EXPRESSION}) AS type,
                 (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
                 (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
diff --git a/tests/test_source_create_array_limits.py b/tests/test_source_create_array_limits.py
index 534bcff3..901c11ee 100644
--- a/tests/test_source_create_array_limits.py
+++ b/tests/test_source_create_array_limits.py
@@ -54,3 +54,50 @@ class TestTransformationsMaxLength:
     def test_default_is_empty_list(self):
         request = SourceCreate(type="text", content="hi")
         assert request.transformations == []
+
+
+class TestFormParsingReturns422:
+    """The multipart form path builds SourceCreate manually in
+    parse_source_form_data(), so pydantic's ValidationError doesn't go
+    through FastAPI's request-validation handler — without an explicit
+    catch it surfaced as a 500. These hit the real endpoint and assert
+    the client gets a clean 422 instead (found in v1.11 release testing).
+    """
+
+    @pytest.fixture
+    def client(self):
+        from fastapi.testclient import TestClient
+
+        from api.main import app
+
+        return TestClient(app)
+
+    def test_51_notebooks_via_form_returns_422(self, client):
+        import json as _json
+
+        response = client.post(
+            "/api/sources",
+            data={
+                "type": "text",
+                "content": "probe",
+                "notebooks": _json.dumps(make_ids(51, "notebook")),
+            },
+        )
+        assert response.status_code == 422
+        assert "Invalid source data" in response.json()["detail"]
+
+    def test_invalid_notebooks_json_returns_422(self, client):
+        response = client.post(
+            "/api/sources",
+            data={"type": "text", "content": "probe", "notebooks": "not-json["},
+        )
+        assert response.status_code == 422
+        assert "notebooks" in response.json()["detail"]
+
+    def test_invalid_transformations_json_returns_422(self, client):
+        response = client.post(
+            "/api/sources",
+            data={"type": "text", "content": "probe", "transformations": "]bad"},
+        )
+        assert response.status_code == 422
+        assert "transformations" in response.json()["detail"]
diff --git a/tests/test_sources_api.py b/tests/test_sources_api.py
index ae9e7540..1bd251de 100644
--- a/tests/test_sources_api.py
+++ b/tests/test_sources_api.py
@@ -216,3 +216,37 @@ class TestGetSourceNotFound:
 
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
+
+
+class TestTitleSortUsesAlias:
+    """Regression for sort_by=title returning a 500 (v1.11 release testing).
+
+    source.title carries a SEARCH (BM25) index and SurrealDB's planner
+    fails ORDER BY on such a column with "No iterator has been found".
+    The router must therefore sort by the computed `title_sort` alias,
+    never by the raw indexed column.
+    """
+
+    @pytest.mark.asyncio
+    @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
+    async def test_sort_by_title_orders_by_alias(self, mock_query, client):
+        mock_query.return_value = []
+
+        response = client.get("/api/sources?sort_by=title")
+
+        assert response.status_code == 200
+        query = mock_query.call_args[0][0]
+        assert "ORDER BY title_sort" in query
+        assert "AS title_sort" in query
+
+    @pytest.mark.asyncio
+    @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
+    async def test_all_sort_fields_return_200(self, mock_query, client):
+        mock_query.return_value = []
+        for field in ["type", "title", "created", "updated", "insights_count", "embedded"]:
+            response = client.get(f"/api/sources?sort_by={field}")
+            assert response.status_code == 200, f"sort_by={field}"
+
+    def test_invalid_sort_field_returns_400(self, client):
+        response = client.get("/api/sources?sort_by=bogus")
+        assert response.status_code == 400

From c4b5de63e03f34c791bb47ead6359e7b5ab5636a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 08:50:14 -0300
Subject: [PATCH 159/345] fix(frontend): keep the note editor dialog inside the
 viewport with long content (#1047)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(frontend): keep the note editor dialog inside the viewport with long content

Regression from #932: removing the editor's max-h-[500px] cap relied on
the flex-1/h-full parent chain, but DialogContent has no definite height
(only max-h-[90vh]) and isn't a flex container — so the form's h-full
resolved to auto, the flex-1 wrapper (min-height:auto) never shrank
below its content, and the inner overflow-y-auto never engaged. With
enough content the dialog grew past the viewport with no way to scroll
or reach the Save button.

DialogContent is now flex flex-col, the form takes flex-1 min-h-0, and
the editor wrapper gets min-h-0 — the standard flex pattern for
scroll-inside-dialog. Long notes now scroll inside the editor pane and
the dialog stays within 90vh.

Verified in-browser (Playwright, 200-line note): dialog height 1089px
within a 1210px viewport, footer visible, internal scroll active.

* fix(frontend): give the note dialog a definite height so the editor fills it when empty

With only max-h-[90vh], the dialog's height stayed content-based, so
the percentage chain (h-full -> .w-md-editor !h-full) resolved to auto
on an empty note and the typing area collapsed to ~90px inside a
420px-floored border box. h-[90vh] makes every level of the chain
definite: empty notes get a full-height editor (895px content area
verified via Playwright), long notes still scroll internally without
pushing past the viewport.
---
 .../(dashboard)/notebooks/components/NoteEditorDialog.tsx   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
index 6b5d0c98..674fdd0f 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
@@ -120,13 +120,13 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
   return (
     <Dialog open={open} onOpenChange={handleClose}>
       <DialogContent className={cn(
-          "sm:max-w-3xl w-full max-h-[90vh] overflow-hidden p-0",
+          "sm:max-w-3xl w-full h-[90vh] max-h-[90vh] overflow-hidden p-0 flex flex-col",
           isEditorFullscreen && "!max-w-screen !max-h-screen border-none w-screen h-screen"
       )}>
         <DialogTitle className="sr-only">
           {isEditing ? t('sources.editNote') : t('sources.createNote')}
         </DialogTitle>
-        <form onSubmit={handleSubmit(onSubmit)} className="flex h-full flex-col min-w-0">
+        <form onSubmit={handleSubmit(onSubmit)} className="flex flex-1 min-h-0 flex-col min-w-0">
           {isEditing && noteLoading ? (
             <div className="flex-1 flex items-center justify-center py-10">
               <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
@@ -147,7 +147,7 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
               </div>
 
               <div className={cn(
-                  "flex-1 overflow-y-auto",
+                  "flex-1 min-h-0 overflow-y-auto",
                   !isEditorFullscreen && "px-6 py-4")
               }>
                 <Controller

From 85336f49fa718e58a8cb2f2275a36dd51c54f644 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 09:00:06 -0300
Subject: [PATCH 160/345] fix: actually clear credential fields end to end
 (frontend payload + API null handling) (#1046)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(frontend): actually clear credential fields when emptied in the edit dialog

Clearing base_url (or the Vertex project/location/credentials_path)
in the credential edit dialog silently did nothing: the submit handler
mapped an emptied field to `undefined`, JSON.stringify dropped the key
from the PUT body, and the backend's partial-update semantics kept the
old value — while the UI reported success.

Emptied fields are now sent as an explicit `null`, which the API
already accepts and persists as a cleared value (verified live).
UpdateCredentialRequest's nullable fields are typed accordingly.

Found in v1.11 release testing (pre-existing, not a release regression):
an Ollama credential with a stale IP in base_url could not be cleared
from the UI.

* fix(api): clear credential fields on explicit null, not just empty string

The update handler guarded every field with 'is not None', so a JSON
null sent to clear base_url (or endpoint/api_version/endpoint_*/
project/location/credentials_path/num_ctx) was silently skipped — the
old value survived while the client saw a 200. Combined with the
frontend bug fixed in the previous commit (emptied fields dropped from
the payload entirely), clearing a credential field was impossible from
the UI: during release testing an Ollama credential kept pointing at a
stale IP after being 'cleared', and only an empty-string PUT crafted by
hand actually cleared it.

Field updates are now keyed on presence in model_fields_set: absent
keeps the old value, explicit null or "" clears. name/modalities/
api_key keep their non-null guards (clearing those is not meaningful).

Regression tests cover null-clears, empty-string-clears, absent-keeps
and the Vertex credentials_path case.

* test(frontend): extract credential update payload builder and cover clear-on-empty

Addresses the cubic review: the frontend half of the fix had no
reproducing test. The edit dialog's payload construction now lives in
a pure buildCredentialUpdatePayload() (frontend/src/lib/
credential-update-payload.ts) used by the component, with tests that
fail on the original bug: an emptied base_url (and Vertex project/
location/credentials_path) must survive JSON.stringify as an explicit
null, unchanged fields must be omitted, and emptied num_ctx clears
via 0.
---
 api/routers/credentials.py                    | 31 +++++---
 .../(dashboard)/settings/api-keys/page.tsx    | 21 ++----
 frontend/src/lib/api/credentials.ts           | 22 +++---
 .../src/lib/credential-update-payload.test.ts | 73 +++++++++++++++++++
 frontend/src/lib/credential-update-payload.ts | 46 ++++++++++++
 tests/test_credentials_api.py                 | 59 +++++++++++++++
 6 files changed, 215 insertions(+), 37 deletions(-)
 create mode 100644 frontend/src/lib/credential-update-payload.test.ts
 create mode 100644 frontend/src/lib/credential-update-payload.ts

diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index 94838eb2..23f6a991 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -216,34 +216,41 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
     try:
         cred = await Credential.get(credential_id)
 
+        # Partial-update semantics keyed on field PRESENCE, not value:
+        # a field absent from the payload is left untouched, while an explicit
+        # null (or "") clears it. `is not None` checks would silently ignore
+        # a null sent to clear a field — the old value survived while the
+        # client saw success.
+        sent = request.model_fields_set
+
         if request.name is not None:
             cred.name = request.name
         if request.modalities is not None:
             cred.modalities = request.modalities
         if request.api_key is not None:
             cred.api_key = SecretStr(request.api_key)
-        if request.base_url is not None:
+        if "base_url" in sent:
             cred.base_url = request.base_url or None
-        if request.endpoint is not None:
+        if "endpoint" in sent:
             cred.endpoint = request.endpoint or None
-        if request.api_version is not None:
+        if "api_version" in sent:
             cred.api_version = request.api_version or None
-        if request.endpoint_llm is not None:
+        if "endpoint_llm" in sent:
             cred.endpoint_llm = request.endpoint_llm or None
-        if request.endpoint_embedding is not None:
+        if "endpoint_embedding" in sent:
             cred.endpoint_embedding = request.endpoint_embedding or None
-        if request.endpoint_stt is not None:
+        if "endpoint_stt" in sent:
             cred.endpoint_stt = request.endpoint_stt or None
-        if request.endpoint_tts is not None:
+        if "endpoint_tts" in sent:
             cred.endpoint_tts = request.endpoint_tts or None
-        if request.project is not None:
+        if "project" in sent:
             cred.project = request.project or None
-        if request.location is not None:
+        if "location" in sent:
             cred.location = request.location or None
-        if request.credentials_path is not None:
+        if "credentials_path" in sent:
             cred.credentials_path = request.credentials_path or None
-        if request.num_ctx is not None:
-            # 0/falsy clears the override and falls back to esperanto's default
+        if "num_ctx" in sent:
+            # 0/null/falsy clears the override and falls back to esperanto's default
             cred.num_ctx = request.num_ctx or None
 
         await cred.save()
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 8121c502..b33bc204 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -53,7 +53,8 @@ import {
   useRegisterModels,
   useMigrateFromEnv,
 } from '@/lib/hooks/use-credentials'
-import { Credential, CreateCredentialRequest, UpdateCredentialRequest, DiscoveredModel } from '@/lib/api/credentials'
+import { Credential, CreateCredentialRequest, DiscoveredModel } from '@/lib/api/credentials'
+import { buildCredentialUpdatePayload } from '@/lib/credential-update-payload'
 import { Model, ModelDefaults } from '@/lib/types/models'
 import { MigrationBanner, ModelTestResultDialog } from '@/components/settings'
 import { EmbeddingModelChangeDialog } from '@/components/settings/EmbeddingModelChangeDialog'
@@ -219,20 +220,10 @@ function CredentialFormDialog({
     }
 
     if (isEditing && credential) {
-      const data: UpdateCredentialRequest = {}
-      if (name !== credential.name) data.name = name
-      if (apiKey.trim()) data.api_key = apiKey.trim()
-      if (baseUrl !== (credential.base_url || '')) data.base_url = baseUrl || undefined
-      if (JSON.stringify(modalities) !== JSON.stringify(credential.modalities)) data.modalities = modalities
-      if (isVertex) {
-        if (project !== (credential.project || '')) data.project = project.trim() || undefined
-        if (location !== (credential.location || '')) data.location = location.trim() || undefined
-        if (credentialsPath !== (credential.credentials_path || '')) data.credentials_path = credentialsPath.trim() || undefined
-      }
-      if (isOllama && numCtx !== (credential.num_ctx ? String(credential.num_ctx) : '')) {
-        // empty clears the override (0 -> backend resets to default)
-        data.num_ctx = numCtx.trim() ? Number(numCtx) : 0
-      }
+      const data = buildCredentialUpdatePayload(credential, {
+        name, apiKey, baseUrl, modalities, project, location,
+        credentialsPath, numCtx, isVertex, isOllama,
+      })
       updateCredential.mutate({ credentialId: credential.id, data }, { onSuccess })
     } else {
       const data: CreateCredentialRequest = {
diff --git a/frontend/src/lib/api/credentials.ts b/frontend/src/lib/api/credentials.ts
index 032fe58b..f108c8ef 100644
--- a/frontend/src/lib/api/credentials.ts
+++ b/frontend/src/lib/api/credentials.ts
@@ -46,16 +46,18 @@ export interface UpdateCredentialRequest {
   name?: string
   modalities?: string[]
   api_key?: string
-  base_url?: string
-  endpoint?: string
-  api_version?: string
-  endpoint_llm?: string
-  endpoint_embedding?: string
-  endpoint_stt?: string
-  endpoint_tts?: string
-  project?: string
-  location?: string
-  credentials_path?: string
+  // Nullable fields: null explicitly clears the value on the server.
+  // (undefined would be dropped from the JSON payload and the old value kept.)
+  base_url?: string | null
+  endpoint?: string | null
+  api_version?: string | null
+  endpoint_llm?: string | null
+  endpoint_embedding?: string | null
+  endpoint_stt?: string | null
+  endpoint_tts?: string | null
+  project?: string | null
+  location?: string | null
+  credentials_path?: string | null
   num_ctx?: number | null
 }
 
diff --git a/frontend/src/lib/credential-update-payload.test.ts b/frontend/src/lib/credential-update-payload.test.ts
new file mode 100644
index 00000000..fe0241c6
--- /dev/null
+++ b/frontend/src/lib/credential-update-payload.test.ts
@@ -0,0 +1,73 @@
+import { describe, it, expect } from 'vitest'
+import { buildCredentialUpdatePayload, CredentialFormValues } from './credential-update-payload'
+import { Credential } from '@/lib/api/credentials'
+
+const credential: Credential = {
+  id: 'credential:1',
+  name: 'Ollama',
+  provider: 'ollama',
+  modalities: ['language'],
+  base_url: 'http://10.0.0.99:11434',
+  project: 'old-project',
+  location: 'us-east5',
+  credentials_path: '/old/path.json',
+  num_ctx: null,
+  has_api_key: false,
+  created: '2026-01-01',
+  updated: '2026-01-01',
+  model_count: 0,
+}
+
+const values = (overrides: Partial<CredentialFormValues>): CredentialFormValues => ({
+  name: credential.name,
+  apiKey: '',
+  baseUrl: credential.base_url || '',
+  modalities: credential.modalities,
+  project: credential.project || '',
+  location: credential.location || '',
+  credentialsPath: credential.credentials_path || '',
+  numCtx: '',
+  isVertex: false,
+  isOllama: true,
+  ...overrides,
+})
+
+describe('buildCredentialUpdatePayload', () => {
+  it('sends explicit null when base_url is emptied (the original bug: undefined was dropped from the JSON body and the stale URL survived)', () => {
+    const payload = buildCredentialUpdatePayload(credential, values({ baseUrl: '' }))
+    expect(payload).toHaveProperty('base_url')
+    expect(payload.base_url).toBeNull()
+    // undefined would be stripped by JSON.stringify — the regression this guards against
+    expect(JSON.parse(JSON.stringify(payload))).toHaveProperty('base_url')
+  })
+
+  it('sends the new value when base_url is changed', () => {
+    const payload = buildCredentialUpdatePayload(credential, values({ baseUrl: 'http://localhost:11434' }))
+    expect(payload.base_url).toBe('http://localhost:11434')
+  })
+
+  it('omits base_url entirely when unchanged', () => {
+    const payload = buildCredentialUpdatePayload(credential, values({}))
+    expect(payload).not.toHaveProperty('base_url')
+  })
+
+  it('sends explicit null for emptied Vertex fields', () => {
+    const payload = buildCredentialUpdatePayload(
+      credential,
+      values({ isVertex: true, project: '', location: '', credentialsPath: '' }),
+    )
+    expect(payload.project).toBeNull()
+    expect(payload.location).toBeNull()
+    expect(payload.credentials_path).toBeNull()
+    const wire = JSON.parse(JSON.stringify(payload))
+    expect(wire).toHaveProperty('project')
+    expect(wire).toHaveProperty('location')
+    expect(wire).toHaveProperty('credentials_path')
+  })
+
+  it('clears the ollama num_ctx override with 0 when emptied', () => {
+    const withCtx = { ...credential, num_ctx: 4096 }
+    const payload = buildCredentialUpdatePayload(withCtx, values({ numCtx: '' }))
+    expect(payload.num_ctx).toBe(0)
+  })
+})
diff --git a/frontend/src/lib/credential-update-payload.ts b/frontend/src/lib/credential-update-payload.ts
new file mode 100644
index 00000000..f17bb973
--- /dev/null
+++ b/frontend/src/lib/credential-update-payload.ts
@@ -0,0 +1,46 @@
+import { Credential, UpdateCredentialRequest } from '@/lib/api/credentials'
+
+export interface CredentialFormValues {
+  name: string
+  apiKey: string
+  baseUrl: string
+  modalities: string[]
+  project: string
+  location: string
+  credentialsPath: string
+  numCtx: string
+  isVertex: boolean
+  isOllama: boolean
+}
+
+/**
+ * Build the partial-update payload for PUT /credentials/{id} from the edit
+ * form state: only changed fields are included, and a field the user emptied
+ * is sent as an explicit `null` so the server actually clears it. `undefined`
+ * must never be used for a change — JSON.stringify drops the key and the
+ * server's partial-update semantics would silently keep the old value.
+ */
+export function buildCredentialUpdatePayload(
+  credential: Credential,
+  values: CredentialFormValues,
+): UpdateCredentialRequest {
+  const data: UpdateCredentialRequest = {}
+  if (values.name !== credential.name) data.name = values.name
+  if (values.apiKey.trim()) data.api_key = values.apiKey.trim()
+  if (values.baseUrl !== (credential.base_url || '')) data.base_url = values.baseUrl || null
+  if (JSON.stringify(values.modalities) !== JSON.stringify(credential.modalities)) {
+    data.modalities = values.modalities
+  }
+  if (values.isVertex) {
+    if (values.project !== (credential.project || '')) data.project = values.project.trim() || null
+    if (values.location !== (credential.location || '')) data.location = values.location.trim() || null
+    if (values.credentialsPath !== (credential.credentials_path || '')) {
+      data.credentials_path = values.credentialsPath.trim() || null
+    }
+  }
+  if (values.isOllama && values.numCtx !== (credential.num_ctx ? String(credential.num_ctx) : '')) {
+    // empty clears the override (0 -> backend resets to default)
+    data.num_ctx = values.numCtx.trim() ? Number(values.numCtx) : 0
+  }
+  return data
+}
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 869ff707..a9037543 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -282,3 +282,62 @@ class TestAudioMatrixWiring:
 
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
+
+
+class TestCredentialUpdateClearsFields:
+    """PUT /credentials/{id} must distinguish 'field absent' (keep) from
+    'field explicitly null/empty' (clear).
+
+    The handler used `is not None` guards, so an explicit null sent to clear
+    base_url (or the Vertex project/location/credentials_path) was silently
+    ignored — the old value survived while the client saw success. Found in
+    v1.11 release testing: an Ollama credential kept pointing at a stale IP
+    after the user cleared the field. Now keyed on model_fields_set.
+    """
+
+    def _mock_cred(self):
+        from unittest.mock import MagicMock
+
+        cred = MagicMock()
+        cred.base_url = "http://10.0.0.99:11434"
+        cred.credentials_path = "/old/path.json"
+        cred.save = AsyncMock()
+        cred.get_linked_models = AsyncMock(return_value=[])
+        return cred
+
+    def _put(self, client, cred, body):
+        from api.models import CredentialResponse
+
+        fake_response = CredentialResponse(
+            id="credential:1", name="n", provider="ollama", modalities=["language"],
+            has_api_key=False, created="2026-01-01", updated="2026-01-01", model_count=0,
+        )
+        with patch("api.routers.credentials.require_encryption_key"), \
+             patch("api.routers.credentials.Credential.get", new=AsyncMock(return_value=cred)), \
+             patch("api.routers.credentials.credential_to_response", return_value=fake_response):
+            return client.put("/api/credentials/credential:1", json=body)
+
+    def test_explicit_null_clears_base_url(self, client):
+        cred = self._mock_cred()
+        response = self._put(client, cred, {"base_url": None})
+        assert response.status_code == 200
+        assert cred.base_url is None
+        cred.save.assert_awaited_once()
+
+    def test_empty_string_clears_base_url(self, client):
+        cred = self._mock_cred()
+        response = self._put(client, cred, {"base_url": ""})
+        assert response.status_code == 200
+        assert cred.base_url is None
+
+    def test_absent_field_keeps_old_value(self, client):
+        cred = self._mock_cred()
+        response = self._put(client, cred, {"name": "renamed"})
+        assert response.status_code == 200
+        assert cred.base_url == "http://10.0.0.99:11434"
+
+    def test_null_clears_vertex_credentials_path(self, client):
+        cred = self._mock_cred()
+        response = self._put(client, cred, {"credentials_path": None})
+        assert response.status_code == 200
+        assert cred.credentials_path is None

From d9ad3917df581f6af4f9564f29e62dbdcd77a0db Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 09:07:08 -0300
Subject: [PATCH 161/345] chore(release): cut v1.11.0 (#1050)

- Bump version to 1.11.0
- Date the Unreleased changelog section as [1.11.0] - 2026-07-11
- Add the two entries from release testing: Pillow 12.3.0 security
  bump (#1041) and the credential field-clearing fix (#1046)
---
 CHANGELOG.md   | 4 +++-
 pyproject.toml | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 86b194e1..03b21f1d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [1.11.0] - 2026-07-11
 
 ### Added
 - `VISION.md` — the product's source of truth in two layers: durable identity (what Open Notebook is and is not, core principles) and current posture (the phase we're in, directional constraints, and the horizon clusters under consideration)
@@ -55,6 +55,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Creating a credential with an unknown provider name now fails with a clear `422` at the API boundary instead of an opaque error deep in the domain layer; `provider` is validated against the 17 supported providers, and a test keeps the frontend/backend provider lists in sync (#1016)
 - Podcast episode listing now batch-fetches job statuses in one query instead of one per episode, speeding up notebooks with many episodes; podcast audio-file paths are additionally verified to stay within the podcasts folder before streaming/deleting (#1018)
 - Transformations no longer report success while silently losing their insight when the embedding job fails to queue: `Source.add_insight()` now raises on submission failure (handled by job-level retry), note auto-embedding degrades gracefully instead of turning a note save into a 500, and the explicit note-embed endpoint surfaces queue failures as errors (#1019)
+- Clearing a credential field in the edit dialog (Ollama/OpenAI-compatible `base_url`, Vertex `project`/`location`/`credentials_path`) now actually clears it. Two mirror-image bugs made it impossible: the frontend dropped emptied fields from the PUT body (`undefined` keys are stripped by `JSON.stringify`), and the API ignored explicit `null`s (`is not None` guards) — so the old value survived while the UI reported success. The frontend now sends explicit `null` and the API keys partial updates on field presence (`model_fields_set`) (#1046)
 
 ### Security
 - Resolved dependency audit findings: added npm `overrides` for vulnerable transitive frontend packages (`ws`, `brace-expansion`, `ajv`, `@eslint/plugin-kit`, `postcss`) — `npm audit` now reports 0 vulnerabilities — refreshed `uv.lock` (`langsmith`, `pydantic-settings`, `pip`), and hardened external `window.open(..., '_blank')` calls with `noopener,noreferrer` (#962)
@@ -72,6 +73,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `Credential.get_all()` no longer builds its ORDER BY clause from a raw f-string; ordering fields now go through the base-class allowlist validation (not reachable from the current API surface — defense in depth) (#1021)
 - The frontend runtime-config endpoint validates `Host` and `X-Forwarded-Proto` before using them to build the browser-facing API URL, preventing a spoofed Host header from redirecting browser API traffic (including the bearer token) to an attacker-controlled origin; malformed values fall back to localhost (#1024)
 - `docker-compose.yml` now binds SurrealDB's published port to `127.0.0.1` instead of all interfaces, so the database (root:root by default) is no longer reachable from other machines out of the box; a new `docker-compose.override.yml.example` shows how to re-expose it deliberately (#1025)
+- Forced **Pillow to 12.3.0**, resolving 6 open Dependabot advisories (3 high: PSD out-of-bounds writes, FITS GZIP decompression bomb; 3 moderate: PDF trailer DoS, font integer overflow, heap buffer overflow). The only blocker was moviepy's `pillow<12` cap (pulled in via podcast-creator) — moviepy only touches PIL in its video modules, which the audio-only podcast pipeline never imports, so a documented `[tool.uv] override-dependencies` entry forces the safe version until podcast-creator ships without moviepy (#1041)
 
 ## [1.10.0] - 2026-06-17
 
diff --git a/pyproject.toml b/pyproject.toml
index 021a2a22..d51663c4 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.10.0"
+version = "1.11.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}

From faa2b16e77dc3fad464bcfb60c1916b644c8af1e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 16:56:14 -0300
Subject: [PATCH 162/345] docs: codify the release confidence process with
 executable tooling (#1052)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Captures the process designed and executed for v1.11.0 so every future
release reproduces it:

- .github/RELEASE_PROCESS.md v2: changelog audit, risk-based test
  matrix (buckets A/B/C), the Docker image gate, fix-loop re-test
  policy, CI-based publishing path, communication structure with a
  mandatory credits section, retro, and the gotchas that cost
  iterations this cycle
- ADR-005: why releases now pass a risk-based confidence process gated
  on the real image, with the v1.11.0 evidence (bugs the unit suite
  could not catch: SEARCH-index ORDER BY 500, credential clear no-op)
- scripts/release-test/: the harness built during v1.11.0 —
  fresh-install + upgrade gate (release-image-test.sh) and the
  browsable RC stack with optional dev-data copy (rc-stack.sh), plus
  compose/nginx encoding the API_URL, host.docker.internal and
  SurrealDB import learnings
- make release-test / release-stack / release-stack-down targets
---
 .github/RELEASE_PROCESS.md                    | 156 +++++++++++++-----
 CHANGELOG.md                                  |   5 +
 Makefile                                      |  20 +++
 .../ADR-005-release-confidence-process.md     |  69 ++++++++
 .../docker-compose.release-test.yml           |  43 +++++
 scripts/release-test/nginx.conf               |  18 ++
 scripts/release-test/rc-stack.sh              |  75 +++++++++
 scripts/release-test/release-image-test.sh    | 150 +++++++++++++++++
 8 files changed, 496 insertions(+), 40 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md
 create mode 100644 scripts/release-test/docker-compose.release-test.yml
 create mode 100644 scripts/release-test/nginx.conf
 create mode 100755 scripts/release-test/rc-stack.sh
 create mode 100755 scripts/release-test/release-image-test.sh

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index b37f3c3d..ca1e532a 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -4,15 +4,18 @@ Open Notebook uses a flow-driven release process. Work moves from `ready`
 issues into pull requests, pull requests merge to `main`, and maintainers cut a
 version when the branch has enough validated change to ship.
 
+This document covers both the **mechanics** (how to cut, build and publish) and
+the **confidence process** (how we know a release is good before users get it).
+It was redesigned during the v1.11.0 release ([ADR-005](../docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md)).
+
 ## Release Model
 
 - Patch releases ship backwards-compatible fixes.
 - Minor releases ship backwards-compatible features and improvements.
 - Major releases are planned with a milestone when they include breaking
   changes or migrations that need user coordination.
-- Release candidates and community soak labels are no longer part of the
-  process. Use the `in-dev-build` label for changes available in development
-  images and `released` for shipped work.
+- Use the `in-dev-build` label for changes available in development images and
+  `released` for shipped work.
 
 ## Normal Flow
 
@@ -21,59 +24,132 @@ version when the branch has enough validated change to ship.
 3. Merge the pull request after review and required checks pass.
 4. Let the development build publish the `v1-dev` image from `main`.
 5. Cut a stable release when `main` has a coherent set of changes ready for
-   users.
+   users — following the confidence process below.
+
+## The Confidence Process
+
+Releases keep getting bigger; ad-hoc verification does not scale. Before
+cutting, run this sequence:
+
+### 0. Changelog audit
+
+Diff `git log <last-tag>..main` against the `[Unreleased]` section of the
+CHANGELOG. Every merged PR must be represented (entries reference the issue
+number when one exists, the PR number otherwise). The changelog is the input
+for both the test plan and the release notes — close the gaps first, via PR.
+
+### 1. Risk-based test matrix
+
+Build a matrix from the actual release diff: each change → what it can break
+and for whom → which bucket tests it. Pay special attention to
+**"does the protection break legitimate use?"** for security changes (e.g. an
+SSRF guard vs. self-hosted Ollama on localhost) and to anything a reverse
+proxy, an upgrade, or a big upload would exercise.
+
+Buckets:
+
+- **A — automated, high confidence, run now**: full backend suite, frontend
+  lint/tests/production build, the smoke-e2e agent (full API happy path + UI
+  verification), targeted regression probes for the release's specific risks,
+  dependency audit.
+- **B — automatable with investment**: decide per item whether to build the
+  muscle now (it compounds: the image gate below started as a bucket-B item)
+  or verify manually this once.
+- **C — needs the release owner**: real provider credentials, real TTS podcast
+  generation, visual/UX judgment, and the final check of the pushed image.
+
+### 2. The image gate — test the artifact, not the repo
+
+A green suite on `main` is not a working image. Run:
+
+```bash
+make docker-build-local          # builds <version> + local tags
+make release-test TAG=<new> OLD_TAG=<previous>
+```
+
+This runs two scenarios against real containers (`scripts/release-test/`):
+
+- **Fresh install**: empty DB → migrations on boot → in-image worker processes
+  a source → API/frontend/nginx-proxied checks.
+- **Upgrade**: boot the *published* previous image, seed data, swap to the new
+  image on the same volume → migrations apply, data survives.
+
+Caveat: `docker-build-local` tags with the current `pyproject.toml` version —
+`docker pull` the genuine previous tag before the upgrade test so you are not
+comparing the new build against itself.
+
+### 3. Fix loop with a re-test policy
+
+Findings become focused PRs through the normal review flow. After each merge:
+the cheap suite always re-runs; smoke/image gates re-run only if the fix
+touches what they cover; manual verification is not repeated unless the fix
+touches what was manually verified. Pre-existing bugs found along the way that
+are not release regressions become backlog issues instead of scope creep.
 
 ## Cutting A Stable Release
 
-1. Confirm `main` is green and review the changes since the previous release.
-2. Update `pyproject.toml` with the target semantic version.
-3. Move the relevant `CHANGELOG.md` entries from `Unreleased` into a dated
-   version section.
-4. Create a GitHub release for the version tag, for example `v1.11.0`.
-5. Run the `Build and Release` workflow. Push `v1-latest` tags for normal
-   stable releases.
-6. Verify the published images are available in GHCR and Docker Hub when
-   Docker Hub credentials are configured.
-7. Mark shipped issues with `released` and close any release-tracking tasks.
+1. Confirm `main` is green and the confidence process above has run.
+2. Open the **cut PR**: bump `pyproject.toml`, date the `[Unreleased]` section
+   as `[<version>] - <date>`.
+3. After merge: `make tag`.
+4. Build and push version images **via CI** (it holds the registry
+   credentials): trigger the *Build and Release* workflow with
+   `push_latest=false`. Local `make docker-push` also works but requires
+   `docker login` on both registries.
+5. **Verify the pushed image** (bucket C, final gate): run it locally with
+   `make release-stack TAG=<version> [DUMP=<dev-data-dump>]` — a browsable,
+   isolated stack, optionally with a copy of real data — and walk the core
+   flows in the browser.
+6. Publish the GitHub release. A non-prerelease publication triggers the
+   workflow again and pushes the `v1-latest` tags automatically.
+7. Verify the `v1-latest` manifests on Docker Hub and GHCR (both arches, both
+   variants), and mark shipped issues with `released`.
 
-## Docker Image Publishing
+## Communication
 
-The publishing workflow, from local test to promoted release:
+Release notes follow this structure (see v1.11.0 as the reference):
 
-```bash
-make docker-build-local   # 1. Build for the current platform, test locally
-make docker-push          # 2. Push version tags (does NOT update latest)
-                          # 3. Test the pushed version in staging/production
-make docker-push-latest   # 4. Promote: push version + update v1-latest
-```
+1. One-line verdict + upgrade recommendation.
+2. Sections: Security, Features, Performance, Notable fixes.
+3. **Behavior changes for self-hosters** — anything that can require a config
+   tweak on upgrade gets an explicit callout.
+4. **Thanks** — credit every contributor by handle with what they shipped
+   (collect via `git log <last-tag>..<tag>` + `gh pr view` for handles), plus
+   the issue reporters collectively. Never skip this section.
+
+Announce on Discord after `v1-latest` is live.
+
+## Retro
+
+Close every release by asking: what should improve in this process? Apply the
+accepted improvements immediately — update this document, the scripts under
+`scripts/release-test/`, and the decision log while the context is fresh.
+
+## Docker Image Publishing (reference)
 
 | Command | What it does | Updates latest? |
 |---------|--------------|-----------------|
 | `make docker-build-local` | Build for current platform only (tags `<version>` + `local`) | No registry push |
-| `make docker-push` | Push version tags to registries | ❌ No |
-| `make docker-push-latest` | Push version + update `v1-latest` | ✅ Yes |
-| `make docker-release` | Full release (same as docker-push-latest) | ✅ Yes |
+| CI *Build and Release* (`push_latest=false`) | Push version tags via CI credentials | ❌ No |
+| GitHub release published (non-prerelease) | CI pushes version + `v1-latest` | ✅ Yes |
+| `make docker-push` / `docker-push-latest` | Local equivalents (need `docker login`) | ❌ / ✅ |
 | `make tag` | Create and push a git tag matching `pyproject.toml` | — |
 
-Publishing details:
-
 - **Platforms:** `linux/amd64`, `linux/arm64`
 - **Registries:** Docker Hub + GitHub Container Registry
 - **Image variants:** regular + single-container (`-single`)
 - **Version source:** `pyproject.toml`
 - Build issues: `docker builder prune`, then `make docker-buildx-reset`
 
-## Manual Verification
+## Known Gotchas
 
-Before publishing a stable release, manually verify the areas touched by the
-release. At minimum, cover:
-
-- installation or upgrade path changed by the release;
-- source ingestion and processing when content or worker behavior changed;
-- chat, search, notes, and notebooks when user workflows changed;
-- provider setup when model, credential, or API behavior changed;
-- Docker image startup when packaging, environment, or dependency changes
-  landed.
-
-Automated checks should catch regressions where possible, but the release owner
-chooses the manual matrix from the actual changes in the release.
+- **RC stack on non-default ports needs `API_URL`** or the browser talks to
+  `host:5055` — on a dev machine that is the development API (data crossover).
+  `rc-stack.sh` sets it; remember this for any custom setup.
+- **Containerized app + host services**: credentials pointing at local
+  services (Ollama, LM Studio) need `http://host.docker.internal:<port>`.
+- **SurrealDB import**: `OVERWRITE` goes after the type keyword
+  (`DEFINE FIELD OVERWRITE …`), and the exporter can leak a log line into the
+  dump — `rc-stack.sh` handles both.
+- **Multiple local SurrealDB instances**: check which one the dev `.env`
+  actually points at (`SURREAL_URL`) before exporting data.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 03b21f1d..c985936c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Added
+- Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
+
 ## [1.11.0] - 2026-07-11
 
 ### Added
diff --git a/Makefile b/Makefile
index 7a857532..e896f123 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,7 @@
 .PHONY: run frontend check ruff database lint api start-all stop-all status clean-cache worker worker-start worker-stop worker-restart
 .PHONY: docker-buildx-prepare docker-buildx-clean docker-buildx-reset
 .PHONY: docker-push docker-push-latest docker-release docker-build-local tag export-docs
+.PHONY: release-test release-stack release-stack-down
 
 # Get version from pyproject.toml
 VERSION := $(shell grep -m1 version pyproject.toml | cut -d'"' -f2)
@@ -43,6 +44,25 @@ docker-buildx-clean:
 docker-buildx-reset: docker-buildx-clean docker-buildx-prepare
 	@echo "✅ Buildx reset complete!"
 
+# === Release Testing (see .github/RELEASE_PROCESS.md) ===
+
+# Automated image gate: fresh install + upgrade against real images.
+# Usage: make release-test TAG=1.12.0 OLD_TAG=1.11.0
+release-test:
+	@test -n "$(TAG)" || (echo "usage: make release-test TAG=<new> [OLD_TAG=<previous>]"; exit 1)
+	bash scripts/release-test/release-image-test.sh all \
+		"$(DOCKERHUB_IMAGE):$(TAG)" \
+		$(if $(OLD_TAG),"$(DOCKERHUB_IMAGE):$(OLD_TAG)")
+
+# Browsable RC stack for manual verification (optionally with a data dump).
+# Usage: make release-stack TAG=1.12.0 [DUMP=/tmp/dev-dump.surql]
+release-stack:
+	@test -n "$(TAG)" || (echo "usage: make release-stack TAG=<tag> [DUMP=<dump.surql>]"; exit 1)
+	bash scripts/release-test/rc-stack.sh up "$(TAG)" $(DUMP)
+
+release-stack-down:
+	bash scripts/release-test/rc-stack.sh down "$(or $(TAG),unused)"
+
 # === Docker Build Targets ===
 
 # Build production image for local platform only (no push)
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md b/docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md
new file mode 100644
index 00000000..6dfa983a
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md
@@ -0,0 +1,69 @@
+# ADR-005: Releases pass a risk-based confidence process, gated on the real image
+
+- **Status**: Accepted
+- **Date**: 2026-07 (established during the v1.11.0 release)
+- **Related**: [RELEASE_PROCESS.md](../../../.github/RELEASE_PROCESS.md), `scripts/release-test/`, [ADR-004](ADR-004-background-workers.md)
+
+## Context
+
+Releases grew from a handful of fixes to 50+ commits spanning security
+hardening, features, migrations and dependency changes. Verification was
+ad-hoc: a green test suite on `main` plus whatever manual checks the release
+owner remembered. v1.11.0 proved the gap empirically — the unit suite was
+fully green while `sort_by=title` returned a 500 (a SEARCH-index interaction
+only a real SurrealDB exhibits) and clearing credential fields silently
+no-oped (two mirror-image bugs, frontend and API, that only an end-to-end
+path reveals). Neither class of bug is catchable by mocked tests, and neither
+was: both were found by the process this record establishes.
+
+## Decision
+
+**Every stable release passes a risk-based confidence process before cutting,
+and the final gate runs against the built Docker image — the artifact users
+receive — not the repository.**
+
+The process (mechanics in [RELEASE_PROCESS.md](../../../.github/RELEASE_PROCESS.md)):
+
+1. **Changelog audit first** — the release diff, fully represented in the
+   CHANGELOG, is the input for both the test plan and the communication.
+2. **Risk matrix over test list** — each change is classified by what it can
+   break and for whom, then assigned to a bucket: **A** (automated now),
+   **B** (automatable with investment — build the muscle when it compounds),
+   **C** (release-owner judgment: real credentials, real TTS, UX, the pushed
+   image). Security changes are probed for the inverse risk: does the
+   protection break legitimate use?
+3. **The image gate** — fresh-install and upgrade-with-data scenarios run
+   against real containers (`make release-test`), because packaging bugs
+   (supervisord flags, uv sync modes, migration ordering) never appear in the
+   suite.
+4. **Fix loop with a re-test policy** — findings become focused PRs; what
+   re-runs after each merge is defined up front. Pre-existing bugs that are
+   not release regressions become backlog issues, not scope creep.
+5. **Human gates stay human** — the pushed-image verification and the release
+   publication require the release owner explicitly; automation prepares,
+   people pull the trigger.
+6. **Retro closes the loop** — accepted improvements are applied to the
+   process docs and scripts in the same session.
+
+## Alternatives considered
+
+- **Keep ad-hoc verification** — free, but v1.11.0 showed it misses exactly
+  the bug classes that hurt users most (integration and packaging).
+- **Full CI-based E2E on every PR** — highest coverage, but a real
+  SurrealDB + worker + image build pipeline on every PR is slow and expensive;
+  the release boundary is where artifact-level confidence pays off.
+- **Community soak (RC tags)** — previously abandoned: slow feedback and low
+  participation; a deliberate confidence process front-loads what soaking
+  found late.
+
+## Consequences
+
+- Cutting a release costs hours, not minutes — deliberately: the cost scales
+  with release size, which is the point of the risk matrix.
+- Release muscle is versioned in-repo (`scripts/release-test/`, make targets)
+  and compounds: bucket-B investments from one release become bucket-A
+  automation for the next.
+- The upgrade scenario requires published previous images to remain available
+  on the registries.
+- The process assumes a release owner in the loop for buckets B/C — it is a
+  confidence process, not full automation.
diff --git a/scripts/release-test/docker-compose.release-test.yml b/scripts/release-test/docker-compose.release-test.yml
new file mode 100644
index 00000000..7887b5f6
--- /dev/null
+++ b/scripts/release-test/docker-compose.release-test.yml
@@ -0,0 +1,43 @@
+services:
+  surrealdb:
+    image: surrealdb/surrealdb:v2
+    command: start --log info --user root --pass root rocksdb:/mydata/test.db
+    user: root
+    volumes:
+      - ${DATA_DIR:?set DATA_DIR}/surreal:/mydata
+
+  app:
+    image: ${APP_IMAGE:?set APP_IMAGE}
+    ports:
+      - "127.0.0.1:${API_PORT:?set API_PORT}:5055"
+      - "127.0.0.1:${FE_PORT:?set FE_PORT}:8502"
+    environment:
+      # Without an explicit API_URL the frontend's /config points the BROWSER
+      # at host:5055 — on a dev machine that is the development API, not this
+      # stack (silent data crossover between environments!)
+      - API_URL=${RC_API_URL:-}
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=${RC_ENCRYPTION_KEY:-release-test-key}
+      - SURREAL_URL=ws://surrealdb:8000/rpc
+      - SURREAL_USER=root
+      - SURREAL_PASSWORD=root
+      - SURREAL_NAMESPACE=${RC_SURREAL_NS:-open_notebook}
+      - SURREAL_DATABASE=${RC_SURREAL_DB:-open_notebook}
+    volumes:
+      - ${DATA_DIR}/notebook:/app/data
+    # Reach host services (e.g. Ollama on localhost:11434) via
+    # host.docker.internal on Linux too; Docker Desktop resolves it natively.
+    # Credentials pointing at local services must use
+    # http://host.docker.internal:<port> when the app runs in a container.
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    depends_on:
+      - surrealdb
+
+  proxy:
+    image: nginx:alpine
+    ports:
+      - "127.0.0.1:${PROXY_PORT:?set PROXY_PORT}:80"
+    volumes:
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+    depends_on:
+      - app
diff --git a/scripts/release-test/nginx.conf b/scripts/release-test/nginx.conf
new file mode 100644
index 00000000..5c5c908e
--- /dev/null
+++ b/scripts/release-test/nginx.conf
@@ -0,0 +1,18 @@
+# Reverse proxy in front of the frontend with default buffering ON — the SSE
+# streaming fix must work anyway because the API sends X-Accel-Buffering: no,
+# which nginx honors. Host is passed through verbatim to exercise the
+# frontend's Host validation with a real proxy in the path.
+server {
+    listen 80;
+    server_name _;
+
+    location / {
+        proxy_pass http://app:8502;
+        proxy_http_version 1.1;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_read_timeout 300s;
+    }
+}
diff --git a/scripts/release-test/rc-stack.sh b/scripts/release-test/rc-stack.sh
new file mode 100755
index 00000000..0ef3d9b7
--- /dev/null
+++ b/scripts/release-test/rc-stack.sh
@@ -0,0 +1,75 @@
+#!/bin/bash
+# Browsable release-candidate stack on the local machine: runs a pushed (or
+# local) image, optionally with a COPY of your dev data, for manual release
+# verification without touching the dev environment.
+#
+# Usage:
+#   rc-stack.sh up <tag> [dump.surql]   # start (imports the dump if given)
+#   rc-stack.sh down <tag>              # stop and remove everything
+#
+# To produce a data copy from a running dev SurrealDB (originals untouched):
+#   docker exec <surreal-container> /surreal export \
+#     --conn http://localhost:8000 --user root --pass root \
+#     --ns open_notebook --db <your-db> /dev/stdout > /tmp/dev-dump.surql
+#
+# Ports: UI http://localhost:18502 · via nginx http://localhost:18080 · API 15055
+set -euo pipefail
+DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO="$(cd "$DIR/../.." && pwd)"
+TAG="${2:?usage: rc-stack.sh <up|down> <tag> [dump.surql]}"
+DUMP="${3:-}"
+RC_DATA=/tmp/onrel-rc-data
+
+# Reuse the dev encryption key so copied credentials decrypt; the DB name must
+# match the one the dump came from (defaults to the dev .env's database).
+KEY=$(grep '^OPEN_NOTEBOOK_ENCRYPTION_KEY' "$REPO/.env" 2>/dev/null | cut -d= -f2- | tr -d '"' || true)
+DB=$(grep '^SURREAL_DATABASE' "$REPO/.env" 2>/dev/null | cut -d= -f2- | tr -d '"' || true)
+
+compose() {
+  APP_IMAGE="lfnovo/open_notebook:$TAG" DATA_DIR="$RC_DATA" \
+  API_PORT=15055 FE_PORT=18502 PROXY_PORT=18080 \
+  RC_API_URL="http://localhost:15055" \
+  RC_ENCRYPTION_KEY="${KEY:-release-test-key}" RC_SURREAL_DB="${DB:-open_notebook}" \
+  docker compose -p onrelrc -f "$DIR/docker-compose.release-test.yml" "$@"
+}
+
+case "$1" in
+  down)
+    compose down -v
+    rm -rf "$RC_DATA"
+    echo "RC stack removed."
+    ;;
+  up)
+    compose down -v >/dev/null 2>&1 || true
+    rm -rf "$RC_DATA"; mkdir -p "$RC_DATA/surreal" "$RC_DATA/notebook"
+    if [ -n "$DUMP" ]; then
+      # SurrealDB import quirks, learned in production:
+      # - OVERWRITE goes AFTER the type keyword (DEFINE FIELD OVERWRITE ...),
+      #   needed because RELATION tables auto-define in/out fields
+      # - the exporter can leak its own log line into the dump (starts with ESC)
+      sed -E $'/^\x1b/d; s/^DEFINE (TABLE|FIELD|INDEX|ANALYZER|FUNCTION|EVENT|PARAM|ACCESS) /DEFINE \\1 OVERWRITE /' "$DUMP" > "$RC_DATA/surreal/dump.surql"
+    fi
+    compose up -d surrealdb
+    sleep 4
+    if [ -n "$DUMP" ]; then
+      docker exec onrelrc-surrealdb-1 /surreal import --conn http://localhost:8000 \
+        --user root --pass root --ns open_notebook --db "${DB:-open_notebook}" \
+        /mydata/dump.surql
+    fi
+    compose up -d
+    echo "Waiting for API..."
+    for i in $(seq 1 30); do
+      curl -sf -m 5 -o /dev/null http://localhost:15055/docs && break
+      sleep 5
+    done
+    NB=$(curl -s http://localhost:15055/api/notebooks | python3 -c "import json,sys; print(len(json.load(sys.stdin)))" 2>/dev/null || echo "?")
+    echo "RC stack up — image lfnovo/open_notebook:$TAG"
+    echo "  UI:        http://localhost:18502"
+    echo "  via nginx: http://localhost:18080"
+    echo "  API:       http://localhost:15055"
+    echo "  notebooks: $NB"
+    echo
+    echo "NOTE: credentials pointing at host services (e.g. Ollama) need"
+    echo "      base_url http://host.docker.internal:<port> inside the container."
+    ;;
+esac
diff --git a/scripts/release-test/release-image-test.sh b/scripts/release-test/release-image-test.sh
new file mode 100755
index 00000000..95642896
--- /dev/null
+++ b/scripts/release-test/release-image-test.sh
@@ -0,0 +1,150 @@
+#!/bin/bash
+# Release image gate: fresh-install and upgrade tests against built Docker images.
+#
+# Usage: release-image-test.sh <fresh|upgrade|all> <new-image> [old-image]
+#   e.g. release-image-test.sh all lfnovo/open_notebook:1.12.0 lfnovo/open_notebook:1.11.0
+#
+# IMPORTANT: `make docker-build-local` tags the build with the CURRENT pyproject
+# version. If that version matches a published release, `docker pull` the
+# genuine old tag first or the upgrade test will compare the new build against
+# itself.
+set -u
+DIR="$(cd "$(dirname "$0")" && pwd)"
+COMPOSE="$DIR/docker-compose.release-test.yml"
+NEW_IMAGE="${2:?usage: release-image-test.sh <fresh|upgrade|all> <new-image> [old-image]}"
+OLD_IMAGE="${3:-}"
+PASS=0; FAIL=0
+
+ok()   { echo "  ✅ $1"; PASS=$((PASS+1)); }
+bad()  { echo "  ❌ $1"; FAIL=$((FAIL+1)); }
+check() { if [ "$2" = "$3" ]; then ok "$1"; else bad "$1 (expected=$2, got=$3)"; fi; }
+
+# Each phase gets its own ports so a leaked container can never answer for the
+# wrong stack (learned the hard way: a leftover fresh-install app once served
+# the whole upgrade test).
+set_ports() { API_PORT=$1; FE_PORT=$2; PROXY_PORT=$3; API="http://localhost:$1"; FE="http://localhost:$2"; PROXY="http://localhost:$3"; }
+
+compose_env() { env APP_IMAGE="$1" DATA_DIR="$2" API_PORT="$API_PORT" FE_PORT="$FE_PORT" PROXY_PORT="$PROXY_PORT" docker compose -p "$3" -f "$COMPOSE" "${@:4}"; }
+
+compose_up() { # <image> <datadir> <project>
+  local OUT
+  OUT=$(compose_env "$1" "$2" "$3" up -d --quiet-pull 2>&1)
+  if echo "$OUT" | grep -qi "error"; then
+    bad "compose up ($3): $(echo "$OUT" | grep -i error | head -1)"
+    return 1
+  fi
+  local RUNNING
+  RUNNING=$(docker inspect "$3-app-1" --format '{{.State.Running}}' 2>/dev/null)
+  check "container $3-app-1 running" "true" "$RUNNING"
+}
+
+compose_down() { # <project> <datadir-to-remove (optional)>
+  compose_env unused /tmp/unused "$1" down -v >/dev/null 2>&1
+  if docker ps --format '{{.Names}}' | grep -q "^$1-"; then
+    bad "teardown of $1 left containers running"
+  fi
+  [ -n "${2:-}" ] && rm -rf "$2"
+}
+
+wait_api() { # up to 150s (startup has ~50s of DB-wait backoff + migrations)
+  for i in $(seq 1 30); do
+    if curl -sf -m 5 -o /dev/null "$API/docs"; then return 0; fi
+    sleep 5
+  done
+  return 1
+}
+
+seed_and_verify() {
+  NB=$(curl -s -X POST "$API/api/notebooks" -H "Content-Type: application/json" \
+    -d '{"name":"release-probe","description":"release test seed"}' | python3 -c "import json,sys; print(json.load(sys.stdin)['id'])" 2>/dev/null)
+  [ -z "$NB" ] && { bad "create notebook"; return 1; }
+  ok "create notebook ($NB)"
+  SRC=$(curl -s -X POST "$API/api/sources" -F "type=text" -F "notebooks=[\"$NB\"]" \
+    -F "content=Release test content. The Turing test evaluates machine intelligence." \
+    -F "title=release-probe-source" -F "async_processing=true" -F "embed=false" \
+    | python3 -c "import json,sys; print(json.load(sys.stdin)['id'])" 2>/dev/null)
+  [ -z "$SRC" ] && { bad "create source"; return 1; }
+  ok "create source ($SRC)"
+  ST=""
+  for i in $(seq 1 24); do
+    ST=$(curl -s "$API/api/sources/$SRC/status" | python3 -c "import json,sys; print(json.load(sys.stdin).get('status',''))" 2>/dev/null)
+    [ "$ST" = "completed" ] && break
+    sleep 5
+  done
+  check "in-image worker processed source" "completed" "$ST"
+  FT=$(curl -s "$API/api/sources/$SRC" | python3 -c "import json,sys; d=json.load(sys.stdin); print('yes' if d.get('full_text') else 'no')" 2>/dev/null)
+  check "full_text present" "yes" "$FT"
+}
+
+fresh_test() {
+  echo "═══ FRESH INSTALL — $NEW_IMAGE"
+  set_ports 15055 18502 18080
+  local DD; DD=$(mktemp -d /tmp/onrel-fresh-XXXX)
+  compose_up "$NEW_IMAGE" "$DD" onrelfresh || { compose_down onrelfresh "$DD"; return 1; }
+  if wait_api; then ok "API up (migrations ran on boot)"; else
+    bad "API did not come up in 150s"; docker logs onrelfresh-app-1 2>&1 | tail -20
+    compose_down onrelfresh "$DD"; return 1
+  fi
+  N=$(curl -s "$API/api/notebooks" | python3 -c "import json,sys; print(len(json.load(sys.stdin)))" 2>/dev/null)
+  check "GET /api/notebooks on a virgin database" "0" "$N"
+  seed_and_verify
+  for f in type title created updated insights_count embedded; do
+    S=$(curl -s -o /dev/null -w '%{http_code}' "$API/api/sources?sort_by=$f&limit=2")
+    check "sort_by=$f" "200" "$S"
+  done
+  S=$(curl -s -o /dev/null -w '%{http_code}' -m 15 "$FE")
+  if [ "$S" = "200" ] || [ "$S" = "307" ]; then ok "frontend responds ($S)"; else bad "frontend ($S)"; fi
+  C=$(curl -s -m 10 "$PROXY/config")
+  echo "$C" | grep -q apiUrl && ok "/config via nginx: $C" || bad "/config via nginx: $C"
+  # Malformed Host: nginx may reject with 400 (correct) or the app falls back
+  # (200). What must never happen is a 5xx.
+  C=$(curl -s -m 10 -H 'Host: bad<host>!' "$PROXY/config" -o /dev/null -w '%{http_code}')
+  if [ "$C" = "200" ] || [ "$C" = "400" ]; then ok "/config via nginx with malformed Host -> $C (no 5xx)"; else bad "/config malformed Host -> $C"; fi
+  compose_down onrelfresh "$DD"
+  echo
+}
+
+upgrade_test() {
+  if [ -z "$OLD_IMAGE" ]; then echo "═══ UPGRADE skipped: no old image given"; return 0; fi
+  echo "═══ UPGRADE — $OLD_IMAGE -> $NEW_IMAGE"
+  set_ports 25055 28502 28080
+  local DD; DD=$(mktemp -d /tmp/onrel-upg-XXXX)
+  echo "-- phase 1: boot $OLD_IMAGE and seed"
+  compose_up "$OLD_IMAGE" "$DD" onrelupg || { compose_down onrelupg "$DD"; return 1; }
+  IMG=$(docker inspect onrelupg-app-1 --format '{{.Config.Image}}' 2>/dev/null)
+  check "phase 1 runs the old image" "$OLD_IMAGE" "$IMG"
+  if wait_api; then ok "old image up"; else
+    bad "old image did not come up"; compose_down onrelupg "$DD"; return 1
+  fi
+  seed_and_verify
+  echo "-- phase 2: swap to the new image on the SAME volume"
+  compose_env unused /tmp/unused onrelupg stop app >/dev/null 2>&1
+  compose_env unused /tmp/unused onrelupg rm -f app >/dev/null 2>&1
+  compose_up "$NEW_IMAGE" "$DD" onrelupg || { compose_down onrelupg "$DD"; return 1; }
+  IMG=$(docker inspect onrelupg-app-1 --format '{{.Config.Image}}' 2>/dev/null)
+  check "phase 2 runs the new image" "$NEW_IMAGE" "$IMG"
+  if wait_api; then ok "new image up on old data"; else
+    bad "new image did not come up on old data"; docker logs onrelupg-app-1 2>&1 | tail -20
+    compose_down onrelupg "$DD"; return 1
+  fi
+  FOUND=$(curl -s "$API/api/notebooks" | python3 -c "
+import json,sys
+nbs=json.load(sys.stdin)
+print('yes' if any(n.get('name')=='release-probe' for n in nbs) else 'no')" 2>/dev/null)
+  check "notebook seeded on old image survived the upgrade" "yes" "$FOUND"
+  S=$(curl -s -o /dev/null -w '%{http_code}' "$API/api/sources?sort_by=title&limit=2")
+  check "sort_by=title after upgrade" "200" "$S"
+  echo "  phase 2 migration log:"
+  docker logs onrelupg-app-1 2>&1 | grep -i "migrat" | tail -5 | sed 's/^/    /'
+  compose_down onrelupg "$DD"
+  echo
+}
+
+case "${1:-all}" in
+  fresh)   fresh_test ;;
+  upgrade) upgrade_test ;;
+  all)     fresh_test; upgrade_test ;;
+esac
+
+echo "═══ RESULT: $PASS passed, $FAIL failed"
+[ "$FAIL" -eq 0 ]

From 7a7d90c9137af5353d6c296cb25dcfd1c385e96c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:17:07 -0300
Subject: [PATCH 163/345] chore: remove committed QA screenshots and debug
 history file (#1053)

These 12 QA screenshots and a local debug query log were accidentally
committed to the repo root in PR #978. Adds .gitignore entries for
screenshot-*.png and history.txt to prevent recurrence.
---
 .gitignore                              |   4 ++++
 history.txt                             |   3 ---
 screenshot-01-initial-load.png          | Bin 49861 -> 0 bytes
 screenshot-02-notebooks-list.png        | Bin 75293 -> 0 bytes
 screenshot-03-notebook-detail.png       | Bin 105068 -> 0 bytes
 screenshot-04-sources-context-menu.png  | Bin 109783 -> 0 bytes
 screenshot-05-after-insights-only.png   | Bin 105634 -> 0 bytes
 screenshot-06-source-card-hover.png     | Bin 108632 -> 0 bytes
 screenshot-07-after-full-content.png    | Bin 107004 -> 0 bytes
 screenshot-08-after-exclude-sources.png | Bin 107117 -> 0 bytes
 screenshot-09-notes-context-menu.png    | Bin 109855 -> 0 bytes
 screenshot-10-after-exclude-notes.png   | Bin 109855 -> 0 bytes
 screenshot-11-after-include-notes.png   | Bin 106831 -> 0 bytes
 screenshot-12-post-delete-notebooks.png | Bin 71677 -> 0 bytes
 14 files changed, 4 insertions(+), 3 deletions(-)
 delete mode 100644 history.txt
 delete mode 100644 screenshot-01-initial-load.png
 delete mode 100644 screenshot-02-notebooks-list.png
 delete mode 100644 screenshot-03-notebook-detail.png
 delete mode 100644 screenshot-04-sources-context-menu.png
 delete mode 100644 screenshot-05-after-insights-only.png
 delete mode 100644 screenshot-06-source-card-hover.png
 delete mode 100644 screenshot-07-after-full-content.png
 delete mode 100644 screenshot-08-after-exclude-sources.png
 delete mode 100644 screenshot-09-notes-context-menu.png
 delete mode 100644 screenshot-10-after-exclude-notes.png
 delete mode 100644 screenshot-11-after-include-notes.png
 delete mode 100644 screenshot-12-post-delete-notebooks.png

diff --git a/.gitignore b/.gitignore
index 4e255e36..d10840f5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -147,3 +147,7 @@ specs/
 # Use it for host-specific tweaks like re-exposing the SurrealDB port;
 # see docker-compose.override.yml.example.
 docker-compose.override.yml
+
+# Local QA/debug artifacts
+screenshot-*.png
+history.txt
diff --git a/history.txt b/history.txt
deleted file mode 100644
index 90bdbfb8..00000000
--- a/history.txt
+++ /dev/null
@@ -1,3 +0,0 @@
-#V2
-INSERT INTO credential { name: "BrokenTestCred", provider: "fakeprovider", modalities: ["language"], api_key: "gAAAAABnSomeGarbageThatLooksLikeFernetButIsNot123456789012345678901234567890123456789012345678901234=" };
-UPDATE credential:cda9ffofbi4g3ia4edwr SET api_key = "gAAAAABp3DZnxkMFugjpycLrM8b92Dq3luM5TrEdrmdrP4DAEvQvlK30CvYEejWsIn7W-BsT5UL69g8R21p0h5_JuthntwMGURn6J8AqYG-QHHu6I0y84v8=";
diff --git a/screenshot-01-initial-load.png b/screenshot-01-initial-load.png
deleted file mode 100644
index 27256e0112a7c87ff8afa22834a937247e3cd5d9..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 49861
zcmd43byU>-*EZ^HVSp$KNC=9Alt@dPz|h^HNJw{=h=72A3=IMz-O>$8cjwR@GIYnx
z*?2#{=RE8E>#TLodDrV&t{H}5=KKA`-q*gaYkz!Yq(tzpkzPA@?i?OM^p)JXa~FTY
zf72`H;g!}|M#FRGZk|KDdamH`ZFL;SMRFh8v}taqL#-oBRewe2HsdD(=k+Rshyhe`
znt)h@>;UQO9+dMynt+bH^Ys@mKCW(JsYT4!g&q)?9o0DsQ0`k&P96(P7OYhbY<Dh>
zSu;JPqPp{49E17i@nfm8i|A&wz61~Fx@pcoID1^W<8kxs(Z=uDm9t0Q*Y_`;J;qYq
zJiEdVQn#-B1CP&AuY5Xt`MdnZ7iW*%^#6PQTs1?1h%iOxU07Li{!bV@xS|pfhRd}}
zPY5YY?Dj*iakICDa?_g9hCQx2yWVq^G;)kL8-+9JN;;%i3QBFYy@oTtK3o`xezj;5
zAQ>+l^-5P)_x<~{s;d8be|Y~9-do+YE$pa7?^J;e19hxZxE8wf%`HM>qT87h-Mz_e
z(VWJ?>;`7sCH#Vd15JVVh;Q9Wz`U%kuD)?2FpAwkz#a3^5<Ax-pX7degqN#P+m|Zc
z6?=TVIorfQA{Oyjz3{!Io>6+C%Gvd;f9=2aiIsI_O|#(Zj(&n1Md;#=KKHwhb|#(4
zCpRB!SI^Yp3!zHPwTp}t`D~Ufj`z^?^3|A=ZOn=g9Zf6d6en#c-+J*eOYXHy<y={Z
zvZ~EH@Ub5hLexB-FeoKk`r{!e8H;`!EbGLl_;)N2+`ea=GI9SVg^=4xpR}`HTR8e)
z^PN8t^T}F;d1t)P;_PgJ#q<xjjdW~yK|w)%m|mNkvgoDTbW$10xxXi>j{p7mcQeoK
z9z9)){t+D9Iwm&Ha{G^(99zP*Jnn+dETg9luLNa-yA+oCO8?1yyE!viTU)!(9u+H4
z5i<DB%nZ}UV$EjI$#1{LpKZ{e)<Z$@8g6u~+SNy+%t|>|YdbZ5;V#QuXDr`^%eYL6
z88#D@YitXsB4agdV?c~<qh^JjWHd*a&2s*0zdK}tCvA7>ZK_`t=u5`NYF3|Ey|S>_
zxQ-)wRhEc`>?@!BgdG}1CPfp*9J(u(Xg=wd-x$MfF2+YirBnOK7behpu35D}A3a`S
zPp5)v38BkW%nW8vRre>#wp$xB<TqUI)$66_Q!g>ATCc%A;Nsc~8~yrW^#vMb%P-KT
zQR#rFx<rlFTES|w^!35Z%ZyWKTCCW~>HeYX@t$^-Q^!G#AWVn-M|u_pYpd$RT{8U#
zff=ugBF7wcO#2#@(r?NyMP1{T?<~%Hkf48q<Q<x6fZd(&P6nHvlD<B@S|zXDs>9LF
zGNW>i$ygNYJ7JdGEdpEWf#K0nn8D$$b*WS-&E913p&zfenbnJLkUwp1ZOssm=wv&9
zd+CTNDYb6OwVZ7X4-bcr$Wkjp1wZu3*KHvnC1qgmj463WpjKw3r{^Jb@<fwpD_??u
zkdV{mfH>Y|Yk4?tmR340)Zy9sgljmHs#>0o*Fr~(=|tu0^Qj7)e+DxDEUPj|$MM6A
zg=L$L<d<c=AUio;ckj>D&XuECxBWB7Z8Gf85v{10q0mD_6EmJ7S%IVxzw_v;HkV0P
zT$OsU36mE88u16Yd+348l8OrFKZDtU<U9=j3`|bCuMV>!%sn^lyuG|ij0V&eG|O!e
zn3J^?cl5ZVCjkn3V(l{sE5ts8HsE#;42-^mg9E_@%mw$8ypzFf_1@;-hazp^%>CHr
zLc_`T0bBEJ%4t){6O!^NE&{eI9Cg}Wv=VnGOUx;EiLPI}b~GPRrdDBxR`a?>2w~;f
zqy*6wb2Mv(Ti*$Sc9+SsoLqm6fbgB^tv_EM4|XcOW+XgS;L-QR^OqITSJyZiWqOpT
zy2;x^*ji8Rekk{n&w4>3U5=)MV7{5^wV&u`Udx$J4;U9(LY${-wUb$04xaF!$a#1C
zZ`?zPpZ~`1=y$^G-j@=9e4ywOCY@oV?Ji*3o8*i7vcEPyTJ4(Y<<&r}jmxZ2nl{%G
z(SY38_*`r{+MF=ZC4}v*cCFB9@FS5PFSm`MW+i!IJSb78zq5Kc-4QcH#*xM%AV*Ek
zu5Yv08Jomx9LzBJ`Ih$HI=0MD+_I{&lEH1WVdL~T9{X{vCsBmptKiAc)IvVn6@^r(
z@mmjt5jvrD-EOCXZSg|bI05$&6soyDoLOBw&=ggONS8}S4qqO5Zrak*(*v`^V=*<g
zIwCZfCaZaxTh&+e+>tCfBdch>Eu3XC?#F9?+Pm!f?JCUt{aLEpyXO;fb8}scdYj_}
zDl#)O#dr=I*G39NNC_F0PAD(GsB@;F+*c>K5-;Fvx3{XAt@-`gKR7r(NlihNLYAw;
zd5r?|tzq)!CBJ@&c-w1XZVKOrBt^@o$HAc_&~f*;UvSURiO?vuH#q<=KyE?5bx<t1
zNN$jT|J{J+1%2YKs7rilbR;_5vF!MgExw6z!Tw*q6c!bU^CSM?UcJh>WAkTF(O9?n
zYl32CxZG(4#KTH{h`lBzSpfmNc@B0+rCGOVhuSCaW*Y+vf6mR!P>F1#G+3zHg5MvZ
zOZt*d4;L>Gd}FXX*m&!>Ht<ItolLGO_TB}y@!|I3ZI%^Sn+$@3M(Q*)Vk9g$DQfhH
zW?I7@*@k<T;moo>KHW*2DLE;vWX>;8BmJU1OSfq(g#2dub$)-jPr225wkasY9)eC~
z6=TN!N0-M{PP>Si(Agm+2x1J1E^`kWgfE309k16E?JH3n?^PY`XF_=IB}E-x*=iy_
z^bdo)=#Uzj^<qhmdQUB@99z%S{+zIdz@D5uyS-m%=qqc9oOFDKjNV?qtU$;2kK`RM
z`kK6(9#!bF2tnArbe-s_>ygb2LM?SOK_y3{jG&N3t5T-a;z4?jXob;$QDcF2joWxP
zSI*Vp(bS;8Ksf}mc1ncO^^woQb>hctq2u*s){6=!h92G&*{*x5Wwl<{=~O;*mFl%A
zT|J^9DX(aXt&3ug2?+=Y*raF)<agM37QR<o^!~cbJl9x_yL-=%1_n%O<O+HUjb`4Z
zq9+hL*2MmkFz1rqu)8|)a@uunanax)b=IH7d+*PXGN6@8PuR^J*@|ISJ@YzYRk417
zGSao7Uh~@=j~WVw4<sVXEF|h_wwneS>II86f`@Ur=+(VaQ&Z=14*0j%4W-_`o%XqL
zuN4ByV3sOgtecxX-gD8w(YcWU&Qw1kyj2J{KKPVJ?&=tQ%lE@SS(I|M*zH!IzEqVv
z4SBIXQ3d%%D|>OG%6SD#r|9{OXSUdMeWC_3pw3u4jktdH=9EW`!Z#-7cy|^1^`m4&
z2$y_{1gdv!yuvtger?=+2xdQ$Z$CmdvHEDM?bdu-L`ZF-)Ajc}8>h{m9twXk8vf}K
z5+cvm)RyY9y}*1J$)?{P$)1{da;x6K=*^q&cWjf#va2e|q#NS-jQAz|2JF|y%3O~F
zPl%@%!WntA*HfkATeKyv5iv!+3Ap;{)2Fdg%WXg_`64+vJh<A;#7;X)!6&a@a;acO
zZS3rnS{{<+x{7-#Olcns3OG{PuF>`W%+GKA##2yy8u3^&6iZcz4b?I~o}KJ;7G_y*
zF+P0x#f6Av?89w3j6lJ!i3zRI)r(}`c5sX;Syr&_fsN~)O#Bd1R^nMcaP+1~(z)j#
z8|!@Vb2Tf%S+oU3L_~J2wu0iagfY9$&X}DG=gv(~(DDiXl+3KH?J#MdzbpDWIz2T{
zUrDUtRpv(O3gWw8pu%!rMthXP(4H(FLzB&BpkXXGua~imWDHmEh3Fgicu6OFtCVvm
ztV;VT9j#}BjR*N_8nj=%s`thtOR`JVYwk@JnE&;NgM-@Hj?PiHBU%q~)AQ%gSMZwi
zP@(i8$*8?1$~L^%WU(;hVi=>cA<KNJMMrdz)wzt*ewj=fVT^UQqUlCUNNQm=vI$b|
z{L?OrUkneqO;Jfj$=G_|5P&Y>B{T6wSzKB65X=}J^F%n!bEO^JM`fw@Ic_hs_82U7
zYR2<B{+PIdyimkDUExew>qj`->56yb2I*4^8LP%N5q_(=G=9e|LVCGEr(M!yF~^1G
z-~y4LI1C2k%?fa!GiHA>6VtpesnuF{U^5SU_YR{H72s3AJ-V{01-!efhi{)f`_(o`
zMovDKBFRUWx;iltrm3OvXUP1g^<qwa9W|*f8YOwz!6`gPDcfnf_O)(RqDWAWTSw%t
zgqJ=rDs-dk^NM+5gz+wiTh315s^vCOVwVr={EFqb4%RBxwVy6PEE>AppL5UNF==y_
zZlQHvDNiT)<E85@vtIV!9q0GNUplE38JR{V+pi1u_LbX?){7r6#F*>KZ7*Qs^q8^N
zS`6s$UusBqo-LTICxX9KFuv?NWI6vlj1L`r=w2U;%Y-FZXkXs@jiackX&uJ6xI3in
zOkloJYI$3C;L<gRW|676ITIB?t{*&F7(VIiZ$+#Qf4xF@E4iInVUHv4?Sqw++$gMS
zfdP?zlz)9G;b%$n++I|gRhibdkD{QUpnR&^>4-sm#3R`ZxKa{!Ub9Ke;y|V{8K)74
z)m%j5Lz+u1vR0cj4a!+6j%#C+0H5+=HOEHMAvmj*n7M|~c0llF_VRD=cMn;5>bRA}
zU0JSQ<zzdb_qI;>rS$31Zfht#yW`d!gsRtd;_!~IPPH4;b%ol@N@-IxVLq?@iAGT<
zF0(Pw%i@~_?%03iZhtiubl8{zY$KXFEk-6sb(iD)(&08SIXSr-<}l*t&nF{pgvxRj
zM@xzL?kAST^*kdVU`usHZCmfI3_!J`U50m=09kWlb@2JtL+AZ9K6lKhRpmj>&}H}`
z`Sgn9#2%oNp)6H)-`~iK)C?z>W6H+ZE&8^7d5pwQ)6sBct?^e6CqH!wt(%WM<YYaJ
zHXSQ9oNe5_n&X@_(<Wm&T0ELJd#EXqbVQA=^9eGUtR8Uqc_)SX5$1FsdwlrE69=DG
z>YEJ|G$RG>9Mzp6xw+<^m+|Ji9yfYoF~{p><K=BzfJM@@%vzAiYI-Wo?){K&6%oig
zC2pseXWPm}C9Qsa@Ysr19Lmvza3fi(K)KY`OldD1M8T}hj84v4+ga{oRx2E<bbQx>
z#K!Rm0RX8xPM=vxlct%!LB=Hk$>A>RyeZw>PloIs)$h~x?SUOd4o0~z$V1J)dIh;k
zxMfD#v|tCO{F^P~$kEK&)h~LL9ULO-Q~$Yegip%x<afGEfqn-$zeBUMP)G2ifpmGg
zI@7z<2h7@-<DYNqd~it^8tULGf=D^@o%hXF0uaF#Lpe2Z0?uyaOo!Y1lM!O$&oI<1
zO>c8@a^$vPUw`1@eCdr#&_1Hk|KUGez}$xB<)?gn%9#rf)oGfH<OqWO0>Z)+GnJU>
zq`tjTDfRbn1AKTm7otUgrfw4ZIPh38V}`|=Wmov>uNOq4S*it;ZU<6~%(PW_jnrBI
zw3NeT%B*N+A1-6F?RjrIIXLvE%Zp_G+55A9*puiJ@|3K=e6kC7`T-;gf@K<|dwg~h
zT5&wq!Wg$aw^Ow!O^n@r9&{6>J4gFLj|e3RD*xhP%*Vm-E?FY0#lU!lFEoduR7VH1
z(%2*8h|MkyMGgA(ueuDXi6_f%C#z3UEHiVNy@iI`o;dr)2JZwNw+i3ZHF|T<xa&Lu
z_|rdNK31AAlarCJk{{r5Sd>n1Lds?GBl)?pvGHMMK;k=y(Oj1<350LZYriI8a^9@v
zev8Fipmaa+9ek`=zB5)PRI_y=OrO~D*q}X9_S%A6IETh3L`FW`MmL60bYV}NHk5n&
zJ-=yEe-{KWNY8Qgf0*S{3UR~nMJvogAg8Mfni0C&s)nuND^xvJMWxH9j*X4w>vtFp
zUp{P_ZetP2(yozmrYCzN>bX^>oF?;pA`LxSBK_^D?B697qLC!`T%oi)zwTti&id-7
zF7i-*VkRQ>zK68$)cVFsRk`>$I5;*bQS(#I6P1nzo!^irvy1lJ#)C{OC&}{f->W?P
z_42A3Ez1q+`|fS~`|eY#-vl<Pd0ySPa;5u51?N@-1`1Ndt5AtZhf4B_$r^X8o={V{
z^`g|?>WH=jZfrf*(zhD-5B}m-?o<0>jhD(#kM~=BRH|Jrp_A${r$UtM`h|YS0Z|3h
z#kVt+n-m>#w5pVnnzt+D`_p7yJE9lq&IOTizXc$m=DaqhtybdZ){!6)mH&Q`M(hhW
zCex$B`JclZqKT%XTtZlWkw2levSAE@C<l5kM7A7hk<mbp8Q%llynKsn=GXk`J%;E@
z*B46O_wZNeJ*!O`<Z;?j-r6T7#13SumrMY{F+7c6(eAGf_oivyw-_zXMs;XX2)d|b
zC>T11+ra=y#|x%+gwaa!W<PLGeLs{ljzg)?BV`(9QRKWYH5-4C?upr$gX4Sj%0TAn
zX4ATyc|`YUnRNtu6x)A<Pd=PFp2q%ql*RC;)jWe*>Pdj``2?pjz|jz`5yrVHn?6KW
z6t4-%%(^-raSU%vu0w*;(1@Fqe<i4g{&H>>e+{r?D`i-c<#O*lkUuRoxD0Cw=Y1;d
z&5f}soJRc)qs8bmOlmxo6I{caexQ9Tf?mGU;#%G`BP@p<CeB>eo5YtosPP(wVpNAS
z@AhR&uHfhLqs6GY+j5-W8W=Dp7xznfGF0nq<WticbHh{26SY8Z?a0fDC-H|NrB8i6
zjYcRcK)scO{P}YOAhZ4Ygr+lnk#>4qdMQ5ZG;y!YwCtvk6nh~K9_gEd(xT(f)W5sB
zq{TfMa`JiWyR{47%hF35q7y}2Z@1G-7Mj<b+6VNdNQPmv3X7-x=zVSoXcxJ#3ms?0
z4~FOFY^IQMb#;FwC<(vp<<bI4qI9s@YF=!Hk^@j|iD93<T8-yRZ@@j&!Iy8}Wt|a6
zpRbg|tn|)L&J-sV4Gp`6JZZs+F0@(hMfeS(*47S5x!v4ewoOgl_f1qAwcw7Wm5hFG
zDAS<5Ej+;r{No$yqVow}MXhVM{wPoh8+l6iH3{o}W?sJY&hTyY*8Pp}zH6R|!U5g+
z0e1|GGTVlSRp{;-HeW`1ZOt9-Q#?Qp`rV=5>WZvG<aR!N!(lvF`N~($yQ$o^tLs6f
z#e->qC)*1h@66539q8TPvVMDzKEBlJFwo#f$Sycr_{`%3mCS<oj=Bdi(dSfnos=Y$
z>2Up$Nl}FvX^fEj?*{)a^8;A1kMM&&GK^4flA^*G9LZ2Xd`K?u#rPovyORhR6q+5h
zzu0S3=%=4}JY#IhaDU9I_vS<un7Fk5>!0MD3#4wV7a2)hh>!H1f9LJ=nnxvbM~R`x
zb*rTb7ELFTri}3N{aw-eXnsfJ;6&a#DAy~JibLMCA8xxF2axk<5J*_r+MXJ;JBB4$
zFJia~S)k(X`J8|~+9kWXfXvuxbAnPVW2WmZ7t@2^3y9#3Co1a4fCq5plTUKA3Lmau
z&5d-R{z7hKAv;RH#Z3_-8N5c#8E6lmg@jL0f2`-radnBl7;iO$e-BvTZ$MXte8|pb
zEBRt;?-!=#o9rcKKoWCg@V-%#YXOgi<XWT*uq#B&YDuTXrY8qimx1Jb^8L;8ARy;5
zOJf?wrJgK9U8I)y%;P*FH~GzPcbxWU&broC-p$B*W!5swS^bZ3G2HRFJ>vrLenLJx
z?wAv}Y4J+Oyu7>;bD{MfBd5mEH^W=?EFq82Q3yEM^d`~QdE+UjeEosu4jaNetE;Ok
z@_&$dAdbx7{_g5Rir(T8W-(`gA%B?e9Is<6u4kS}ZaQn^iG5CbapJ|K>wc`=_Zsub
z>Wd<aKTJm0)E+*4y0kUV=#BaO`7>O-G1_Xrm8R-i-HTTM<VK54Lk@xuw&DO=IB!gO
zOeYuSYPo8uvW?lnALpyhLdI+?;!C&m`t<3pxmJoq)Yd{r=I+4}re>1y=!k+H)t}FB
zOQ>el+mTK(I`qvRckl_Cdz@5$!-EuiQ;nh7yLdWud}wxVE|f-`C_8p)-!DZ#hzN>R
z969cr=bK|kJ1njT{QC9lqI|%GUW0g7{nECRBt!_5lgC|=?%Qz*M~hJBF115#p?fY{
z09eA8TfV-&hP_FuKuuo0L0)LkHE}UBFfb4UxBzw9Jzr+OUhPd%ByN*Yy0qmoz->Np
za`Y!%O`R)WyQV9^E<xgBBQTtKK#^uM^H{e>E|y#i?WZea{jHA+NC!ZP^}<P#CLy9Y
zLA`{+yKv82uJF{`cqOg0WIxA=nf~aRfPes=C#2l;@xwY`@P>a*uXKby+B~^E22cp%
zX3<`e@ldivHcZi%n^!y(hH|yF@$rL*rCLMi?1Lx-3ismO*ETjDjb$oRvgG=C$22=S
zI&zu}|9T>*UA-8_!P6S?bEs^4TiiI1{4m*WU@U-)TPc0!tk!N33S)5n32b%^2E}f@
zki}t0Fma*3wN<S5#oCx7<Vwaa;~~KyJc3c9!K{R$7*1oYavQ^J0jHfvKSIWq1;R&D
zZ%eVybG710AII^$c{Zl`&w$Xr?R$W<kZt^km~$H5T)%$3?%wkNLm>}F?dosS4Bv@a
zw8**IIf&~ddiEAuLWV5nr&(&qN2*<$uHL3iza!Rz!;sgp;rR<#O2Wq)g$|oY$L;b|
zM2M0zowj;coB-}I6uYC>2rJ1r-mCn0g+NnK!_Zv5_~QOR%X93`vQXtJ7u}>AUpCNC
zYU<Zitrt5vzp<)hspN$*Mv!4oa)IVmd&tHnR~y$qQ&=vaDiw>%{aMIvHS*3!;V*X$
zOOI<m{Bs)MFB@$%kfE5XCCT7Ga0zcQ5H-rjq>b^JR%nC(ougXN`c+@gBj3?md(w7w
z_-${JySdHUw5$ahHGo>D*4r)yByO|JhOYL{UuQSyeBYl2*%NM5tJLCcwt(~ADj=Us
z?(iSzh~FJC+<mC$&x4d97y-u|X4QgyhF)FO?}#=$&=LJwZL^HzNRh@)lxiH3Laycp
z9N--R81}0T17+){tFweqq1`(FU_*Oji(wLIB4Q~d{}Y2wX{Z(0PS(U5L@xO<0%Aj0
z)O5f_1(I<O{(j*3cH%m5oVMt8h_qmwz_G}zc#`N%X4U+;6iKq0BcuN7%BQ2|HASYQ
z!fg};mtr^!^Nj}l&R^Oh3$nDaft3jX%M||M#g63bk#Vj1ldz}IiI$xe_NIHA=|*EL
ztmYGyWx16&<tB|RHSMel?Sdy8vm!wh>1X$RR;j?~=nP->4a}956Nfop#|8;?BH2=u
z=xr@659cG|{fSvH`Oayy+E`4y_!zTt&NsWqW}t`YWkPM3e6|}RU%z_w=vl<c=>-jq
zZ~f{Id3n_cnyZ}mY3k<MmyO8Z5LDQ&Ystu10J=k?`{?4%=-fiXK45~ldCFd3Zk5`h
zod6~wDVTbe7CO{{CGCtGM_7r^RNT7@>^5>Hl8HwokQ`avuYUh<l#-AT$a!>R<Xz<<
za&x(Kxagy~mcH)po9M={6vDfA59V4zK#HM<*?4v3Q+I9&^I!1~%PK|kS1kNLL=61@
zPKx}1t(uym8_JzjICpNUMlbzbWuEbn8D^tSn&q29nUz;#z#lVI;c0X5>_cH(h4tJI
zAD)Sei{s!phgr2n<W^bED#6q;-1ZF!sIu=8dU+X#k8f1@24>oa2e^V_;~|Zxeq)xw
zxpiS9hmfFSFQsgh#Y+DO>$_^vkVdIfpFfw*JzIpZ-^v<we&Rz^RFo63Zd-V=@sOR`
z@zn1`;Hln^7Dw%|$)|h~qa<QJdI)ubDT+hU++%5JiC*6AeP4=d6dMhpoJWh$8n0~z
zA&VCEGDq4(el7_pj2;SCKLx$)r>qWlejKCe^u3mfaKp(YJJgv-kzU*6dRH2*VgIN^
zppO5Y&2AL%cU6wtfzx^n!8OH|jD{qlH+&tpWd07z%(F*0>1{!(k|-S_NyD4w5}0TU
zlr)8Y!M+M!4&i8}!dwM~$H~bWP<fgwK2lPupg*7&7K|e2{y57~!06i8w96!mH4qOL
z<!DyqSxm3X`Dv7xwGCtr;ovUOgtbIQMxsaU<N54=Phu1N#rK?cjYwJSy5cT01;tmp
zW1q+In@L9Z#|oY<hBK29GcDyXXV|Y(<nx-&<?CfqJxm0hG@+`}a&|CI00&5E6H`;o
z423*W&I}b*Rl^XeSl$ZjMJ@Cv36|Vmz;FW2L~N$0_NE|D-5l|V97yPzqZn#Cv0^2z
z<619qJ3BkYOsAUFdws>*ebN=cXZ%^OVM!K`D3(hGH7SA%x72aFcy+eHUwIXc)~hiZ
z{4&~EV9*7~Of2QGYW|CfjUd4lB&YF0(&Qr$E$CI-;I~_gUCP;N^Q$8TB+^^E0+y#o
z+2lOm#6us=%quoNSq8$8ZOH3-L^7@F_h*8X@nS4lS4CdoQ$1V!4;S#NJ+@-Fy}eRA
zf@>?BHZpprVzbt@pOz+1ek(W6WZ3t%0e~f@$&hke<GHSQ?%zngy}Wm+T;>xSd!|Ao
zA|uT@4cEAh6q+_DQP=m^mir7?PD*bx9eR<`PJTN*#&_RBaEplGIMR!Uv&7x88Xw<o
zrXE3c2_B28zu2nLhjk#S;sQaf_0`<L%Nt`g<8OuUell#~7Q5DYtA|K${D)-Z)p&vH
zMJ3Xy66ljdajQEqQ$I0V^QHOI;}!e!X}tDp8gj4sZJJ9oc%+%hn)6Cu5l1N`yigs{
zY<U78(%RM*@pH}x|H9syfWv(2E`*^_W_1RGPI3ZVAcO69mMo>a2na^kj)jIR4J+=@
z>Ddv+UxppBG%fp#=okXmcm+Oa20tA(spNb>cARdt@SX^M*i=_rD<1JUVP>nvGm3q&
z^@ZTU_aC}tRnGV=;cZ{o5L7c=LM#jlX>WE{D2GQz%uqY2o}N`EzPNmjTUjR3+Y5NQ
z+r5Cl>ZJhibw+Ob&-t~6F^Z~vMTd6lynRa{v~{V1ocx6PT_Y~k73J=e+B2UjJ=B(v
z=x?m=a*B$=nCM)O3b(>1%IE1u>DK{;L`lVCM(ZBd=-wqJHV_wYqn=0unoPjq=6#Zv
zg0~Q!TURM~Z3-3AXSld5;{&Nz8vL;q)@`bJI%UnxqE|(Wi;K&w8XCwDGD4WA+Qk_z
zhir~pbIAJ){zwwNkirJBUm+cVett)Xi(VccK^3;fEb9^<T_ujj9YzF=un(wVz4U;R
zCbEzrlOO?#xi{V@b!&=b%%H=-R?r@*D5kFNAwX;Z`Sk9$zM6(J(QPvMRuvQ#Ax<pm
zhSMWVRRYOJ@X4Pt+)_RQQ^{icp<*@v7D)rv$69u)#${e^hf^L_O9u!|X#<xH)~Ct2
zlENL2744ie?MtK%c9!MS4d>cPB0eW|L&2s&Z*%9dhD`6rI|yB*Lb5KB{83CyOs;l~
z;>w#|(Moc9Y1fVCm$I1~8ZY4703A$z#;=k|HGjBdvU8%;Qhk5z-rRe)j%Z0FPSVuF
z5PkvwHZ=%Dw2MAfj7nJ{zxuM(`Ow*RR;|TveiQhX5-cW3L<qV%@sLL#K=ADj?4dCW
zdn9YKzjjK%nf#!Dx=LQ|FxaT;`}3;ggNO1^Hf`(<v4d)Ul8+9Kr2hR(y)!~v>g%r*
z!U|nJJv61;@JMa#3$5~s#V~tC261GBF1y>YsTaTTXh=O-ayHeIjUGVotE;QjrdOpx
z=-gQ@<<Ls5AoNU@d&9Qk#7QJ+5pRl1q-*p$8j&>qVwEFB#_<=6JuWyK{-a0)3lKks
z8#|JvdZDhdjbNcmo57<%Id_fCe5OkLXk1i>GGv0jMH%_KFpDN$;rGWwn%L?MbXcyR
z%iyN7venTJ-PWx(96FYe;fjlt_U92Mk-B9-dP&6#ium~uT!(4?GRf$v>(+7Z+^-n+
z5mUN2uS|rxsHdpr);(wP9}}{2N>F+Zq5!+L1aCr!P#AMe+D~4ie%=F7de6eDm6V8x
z=;p?fR~x;`llTPYV7WkKveb``M+LeqNCa<DgIKzVn3nf%xg6P+`|e}GR7oZox_3?U
zR0|rtLip_0TCJ;H%94j4>CyOJV-PgF8?R>gbw_Hv8ci4Wk{NsDs*qKEd_659LE2b!
znMIm{+jJm5R?a5uUOy6947LM3NWXS7G}N2IhWQ5ey}jQ>BOYgmDw>a%->!MMuPc(o
z_5LosscI3IB9-Ltk89r6uk?hkhBT7hBqJ+u*xUk84g7e-7m|D0rS^zQGQ|43UcNAH
zb2CJz^B%d&)?9i$gKxgt{1ev0n_)fb*;Q37BNY({r#h>}PI~v$gWVxLg0dK{Y!-jX
z%1{3pMM*E2Ks7f$ord+x!KgXDy(ZR7iivgI;O@b}#-Af{G$9Z5(QK8V?nf-D7A(-*
zrM!9bkx!3r#6xyc6fip>YGd`jleBjq#_q2li$AnpaCh$tZ~qf3=(MAPoGUi1m<xX6
ztl;wIeQy#b-W>xZm>@k$AzLlo#Zh`zvKN+bzG<=;A@^EWXv^jvx`Jht+VKyrsj+cp
zbMqrpKG@a)_A(90=@Rf=(v_d6Cmxy3>RtG9te0odd2&x^)^!&<*$DVjG+pwDCb_vF
z^coiXCF%wRzftL27i5z{3^9>2=YIxEF;SS%5Voq`K*lZ-{0CV^<R@Q9YO1#EuO03b
z?J@4J>1iFBi5IC>3o+z49L&7XX8W5+I-;0vu2o4m-o#!yOtH;9(9(P(Uy;@J{kbbH
zCsn{6UttoWhu-yQ=cUh{csGkrCkcBa^WNs{eV)%lyq+IFe(|oa@&N0B_t352uG}jo
z=J8q+T0G=KZqn}y+e@j!F2;z3wE{J}FvwgZpV|qCgZ}9OV!V7nQOr&(1%nL;M&l~c
zQ;*Wyva42D8pz1}1jJGA8RC$L%T7B?fyV0x?aBM;y<4{)Bukm%%-YXkO`lm<{Insh
zj$iIg{xe>2ygG6nwqtLqv~*p=n=dq*X4F+dh;@Z%4!Z!-fpo>TMN|=)&y7QHYt^1X
zfrD~3gv0zqRXgJ(8jq}4tc;C=V|A{D9c3<mTXbOv7m9zLzHe*{9vjG-^Oy@;lFnUg
z=F2N9Od`YFW@E?~0ecR6t5FKW$lFeunwoL^j#RUF+hS#iHvG;`%cyC%8t>nWUD|Ag
zML+rgl@vuFam_VqlB@Ep`X4*aE_Aq;G}YFgtPK2NWwn$Cj@@;>)fPc-W|o6THW)6}
zIq5E>?PUTk2MH@Xv2gdpEzWdTLr+NNJ)OTKZjE%Vj>H!7#?e062#%i=K$ml({BRp`
zVC@97zX#qo3#uIB1V)h?#H#(veb}7&_NeVGVZ)kBVXdR!y@B+LXFgkIO<aVChT==F
z1qtOH*Z#T?aMI(~?Wuk3A1=E}=%ng4K}9v=iSth{eY|X{RCZqy!g_7&QWybZJ$ADx
z_F3=x-ble>5IN68nf0jA00WD5^&WsG--xg6XJFUCn)b>k)N@^xP#8cIH`=xJ6C_Gd
zN<g-&o33k`v%o@X0|pJ`TjP*|AS5@?Hm7~kHLX20p<ziAR1Il07~bzQT_!tQ3>Aib
zd!9H!ptD(EF?GF9+8^0cIIfPBE&lR&Xw_YFhF?WFUUj32GC^4|s`ECrB4<G?luRly
zsr*z3T-WPOcq!t3s25D$Cyw5%_w6HotkD_9n98L*QE3K<<?Btzf(1$Tt)mqh4i5FT
zUhWz-ZsIG-HJI}D))m`Mr8Lb^5jz(&sspxZL?OF7rWe#W;|Q`~reMa1%vbcj(gYhw
zheXWb9TQzjn#gew5;kY%k#Y=*TfIlFE(|TBkIX|W1CY8(IU3r<CiK~B42n!GEn901
z>j!8Wai!+bnOS+B-*yYl(_=}9s)r(hEiVYxU-zyH6C6j@OSOoU>35_67;Ry@aQ=LW
z=_nxq!4J(DnnUCS-)s=y?=J`w6;aWp^_tvZ?kDzZ-w3YIq&!wH=H1K)Iphq908=7n
zA%=3YK#1U<a~s-hBlL;a4st8qCrbd<H=CJGoTQRtS`%C#_=6MdTYYXPZqmp8BI61$
zg0#pwtEfaKeYcwDhZ-VT5-JKU1%;%G7t#gw+LwllO$#X9znQ1;K|Q=Vr0pI-5I|kG
zG9dKT)8u7#icG?JD2|S|yK3xK55y<XOsZ_Q>l0dhh<vT8Xt`QsqQ!Dh&C0uAZ@l>2
z&bG`ip~Y?oZ>8p236nAa-syEjCtEKL8V{OaFvlakvuI7N3|**-WFb_Hl-tUWbZS=Y
zsi~^YxBM9_SG--vGGjEbrCQ_mXGmKb$T`n15;Fk=ul*cEpB`>DIm)R6fHL;E!Hkz0
z2XyF5USQoGDCR<JC1O;9`eBi{F?2skB<KdgEeO4@CvIMK)2t|Vot~GT>nL+OO`+B$
z37PVyLe!8UR^JiCS65Eo<10o|v$TaqKz)Ko+8>TDp8TrUIbv#-D~{C{Pd!g3)<iu~
z*tY0xwmNr|;Hd$ch^bLr6f-2@?d9!Vy=4#ppiHlwii)Z~CK!7gycH2qx)Hr3*Po_G
z-rZeTj9zF>V(J(O!@=$~i<h*oOv~@CX$2D?p0YhvxWPJka?mv?^sAu(Q6+g+W`tGM
zb3b;cK`^nId*j~lZj&W#c8~l0Tl(I;d(`VdTgwLa)12H*X{|Yj$dY2LrLMlA`|6c0
z1kq3J_34VWspP-O%!LW~2+2=g<#!mbn$OH9A>QrR`Ui?4T01)jH%t*Qn8CrpY!knK
zW4w$VcOE@@dHI;wZ4(TodM(~Dyw!0@lL6FwtiG|x@nGp!*SB+-eXGO)p<34=AM$7y
z3_G+O{<#WqAptx8dNex1&zYh`wkjc4J#F=dQM*&o{OWexm*xJG$3}yXiw?e?pLme#
zI`tT*o~7b*8aanJsmsV0gijvv1i^i`$BcDFMg%|e@(|syOsY1jU2-4z&QpJ8MO4Z%
zU`S(b++e8+mnJYz-1OqrRzKTB@*%_YBd6S7(ivL*$2GARIDqlGGG~7=H^Vi9zKP?^
zhJEg<#5&^sn5CA0Q_4~GT=d*weg<p6K%<}$LVBQ3VQhYnxnm$7e?WwipR&8?huXH`
zSbA!0>x<LP;G>`U=O@_Z=s|CNOkb6M=GvZk2Om~gC{tjUxk8blQ~fC<KPiYWRl(1v
z&pyLbd0>%K!E=UzL3rFDtrAPZWUVKbD%L<rN8Czbe||+(=u)Kt6BE<e_;&Rw6IA}^
zmb%@K$X@JcW#}!tYZF-qI8!L?PsYtR^?Nz5aH>RQx<(8n7-zUk+RhAOWBN-!v2n{^
zz{tD}7K>Gi>PzRE??;8K{2D0zP12X~`O$nFv)P1PS%1c?Wmj;|$`amRMrpkS%W<=M
zi`SyZ+^%HWyf|IEqA~VL`NmXD?4{Tlxk&@gxSCM5@1B}tjtMw3EGt@Usn>!Oq-*<+
zLM#tu$Sh9uU7WxIc<#eK%ANE|@{xgyq--|V!GbagXX&XZGjAHNvVt=UcGQsA9j}2d
zp-bD0_ujsVVZz#_Ok;e-O>#@Z+IQTu6a;s+^<}-j4Fpx3xtz~c?qecKVny-f$g*Tr
ziWv9JyAGXOTb_4}CF{(X>pxCkS9KUOzv6Z0s(3}irP_d0MVYj63vEt@1QVv&PTI2@
z`>;Q8Y{x#?{GQV^lVSPDysOxn!84XrLw&yGhhKSGJZ}b~BTgDQwHU{lL+!AnHYV<9
zrXe?e?Mo)dnSK42^SbNxPczN7yNieJ+89@5*D~AJ&+q<+3!r_xdx}!*FiBm*$;>Sg
zjJH`Sz83Js-@TXqhGsy;3GV#!v%BDZO9Te>2?-Mu6B`?wD1;q@*Os0l(L%1HYR}Nr
zo7CFGQnmKuspcseV7S@Y*?0B-<sr|8;JY%mZStnpo-#K1yUgF2dg6dD{Vxkh?bC8T
z0ex&&C0ChzkOD&IxfGq~XYcj(!&&_Qg)iIM_-A(^LwofTs>iXRvgewpD~dZn;%tpp
z@`NZ}iHZ2av3T=ddV8$|Cj$|J^lS<xYIQxjS+hx11jPPHH+;66mbDj(bN1<dPgL*U
z=@1jPVQTYD6lLB*BiAGM^q|Ou1s~axGyJG&2?~*_j86vQ=A5QJiZ)s2B^t&gcK3Zv
zrb!Hu$30*iJJ<b}Y6Yf__};zKN3XJ<f~`AaJ`9K9OP}awxe2r41XG4i+#`Bi-V|9i
zQjWLxclPluEG^Gk4L)c^vE9sYXG{3(n_5J;p;mZcK+&~I*=qB*6{4Hx_T-#8pKip>
zw0ljN2cOeE4E<=R>Hqxk?D|4mE+jNs97vJYlTqQE4M{qk;`xMsM7Ga<xiQGrVM=%Q
z?A$u}|DHCAWU>3W*RT5r1h`Ho0qF)+L0B|Wh41VVe*Kb*>IY*r{ykoo^$7u>Ii;n$
z8Ux5iMn()n&YwT8l&$7^xHS(P1UGjHh&n`I=Z@iU+PQ0Bun3Mt5|)*X>4*NrST2h<
zSaKe#ySx`JP`d68yq|q5D5yxvX%t$I0&4E*yT+`GqpF4PgD+;DP0P6|R=xXUU<m>C
zy0Wqrd;xU#@5^XiynNa1Xqk>}8QjU>PzMlMsa53!hz<vz;u~lYK9qYl_V&v3$_XDM
zsClzv>E#!ahSp|gwx)dqbbmo}1XQ_+MIi3wo_)t(S9fA!Vu|^rR(YWT2nj_LSKWFa
z%69kk$X>Jm{rfqHT%FOJnGy_2SxeBsfjO~m`g5rk^gd8{9~~MGU5*!We;#+c{cmeb
zxnBOWrNu>JLPE_X(OWNrB9tA$f&gw3{TAeFanIVuMq2G^7w}dp<-Q)YUFoOKj)m+G
zsh_sW?(gO3&|d$9PbnB`K;KklV$}GBB*0mBuE5|yLPCN!B?)bOKiPaj(echQP1KX+
zqQ9d=z^;0~J-h=EN6GInwGb};2N>soz`$a#d$F@yTUmhvByiJ#WO?chmef!NjQB&N
zqw2=ud7ELz%4c8s;gy8l=vBH@lfgkH=vVPp7c`luOm@e5fch40*ZGYHfF2Y|DUwcG
zb1h&*OOmf5Vq`R~aF2|Msj));{fK%Ar3ayJ20_vTSbwtBHa64Xe|Ri(u-$d9w>gq^
zjiVD3EwJ%#wXtk7DDM>)h=XCxqq(^m8aPPw@vmJwGs6#p<elm7Uocn==4w0MG{1^F
zlC0TaU9OvI2YL<+(*J$OV9x?T3p(bR-|ffi8bno&%b`^ODQ7<|SY;Oyg9Jl=?JdUh
zCH|nYo^KsU6tSNr!v!(Kc%t%>+Gta%pMTr7`gORg&L{d?bG~Y`us*lCQD9!^4G*bD
zokf;&zENiajQn*xJRrCnr-Sx&babeTRaI5f70%xB?tk`6$tzvKTU|BL=4#=O6O%+_
zfm{v-hOgx#P`{mR=KnJqrT$lKB)qkMZ*4rLv=0`<-&>xbrM>Y9x_Y9Yyq&pDXFB{d
zQ04EcHpjmm&&FVAvDEzlggjjQ77vE%7b>}0p2S4>A+w-917lMOUJx+Dp9QjWksp`c
zUoN3FSuInQC|m+0?%usSTx!{O{?fHpYiJP=5NLyD7{|Y<!{Hsa=d~V~{y1!w-Z0-z
zdEZ#=dJH}Wa1G*t7Cc_<8dFqc3ug6qIy!&z?^H*U*nNKMg?6x-F$BTIie4e-wQ2rz
z^|tnUD1-!8P@I9^n_5~@Ns(BFDz7u{^xdmhNnEz5LURV?93+c21}0t`nsokr<FQuq
zI8OnD0jdq0+=^)%mG76QWpx|BM1elr5zc%JGA5q5g`J&g_xBz!eBu59WiWeZ4ji@M
zYIi@~jTj^$B}L^<E&^p}Y2DVBqj?On9EfB9FAX4~e)03`B@GX^B+e#b)BU-*epNon
zaa*5^+l-vstTKEO$SI`7dt>8=XfVNkAz>eE%RB*jmgXau@!;6xr1nufFp}U4mt}tR
zXm}FqF<5QCo<sfX=TDiIw7tDOZyJd>{!MUYBhOI^x;(0b=A@Bi@se*mnyC^|-{|F2
zfV(wbOus=XsMCU^IX!j<TU`=_NW1lkmuD0Hi?3~`B=#naSZE}tu{YbLtIn*ftYC^b
zg*bPO_;Ej&c_DnmlK1lQ5ibncOF~!@b7pH+C_(>|`>`pa#?3WE>rKy(*H8;l1zZ&0
z*xWn>lkP`PPxumk!`?a2m^&g_HIHJrOyz!jTFg=va>JgM7<9#LZfq=}iu|LZRK2cg
zDJc#9#k&)#=>%86TQLMRa&r5ZBOPL9wWX!V=gD6^J?ly>-+>90*|rv@6rY66rYSHM
z%BW!E8|c;Rh~_MMYi4G4xLt94MBzMtUObE;nUjF&_Xtl#|ApiShugnAJbMpz`m|8g
zLN$D#(SH?&NDnqs&|M?ux<HF2V$st0cSsl&&%Z^Ziinva<G&X;?XFZ;iwqcBTD8*J
z@;HK{V;5SWAQkSfj<7G66cliN$tx<le)TGX-~1z=Vq}a^P`Yo#_u$YpPV#&AiiDy1
z1B#d`0RAG3LD6b&H6H42n%8Y$_Iyu5aJEb)USoR{g}vaP7<eem2$@vggFC^SBK=~<
zL4g2>KyUT+p=sn+w$Rh32PcQuX~e_7+Cg5JSACJlwY)Vi&Z6P)kw!E!G|7H{O@NFn
z2HI+h-}mT1uN3O#N(gkE1+(H)@Ha<uj(#EOlaA#*TgTufZ*u}+9UxbXT=EO(vj_(z
zjP9wP&F0K&61Jylp%%8b9ijAnX|mdgfgF`Q9T+p{)%jLXU=1s&qoV^{&O5t9eY#(g
z>f!S;N+*vw6)ow!!b2B-d-}L+wa`HiWR2tY;B{g%bMsv02WLw2IWQv>Lztk9&yWiO
zouTggb5A`U$by2FGq1YhDDlYlymV{TidH~u>3~H%=!Q9Qq<@ei9wGI2YARZosHk2<
z1$ufW+TkA&OF?^{d6g61$Bz{0y3Wv7ldDx_k4D{tF1DhIe7!cz!K{R@1sgpR(+SuB
zfC&MuP5L_F)?Fbt4e&k`l~Iqo9;5AhdRW16h@1i|;*YinmW<MZXY9M{*uyig_1i{q
z3oEN=Ha$7885JR*PmDPXAtWTk$e0Nogp%K${_gDDTauj&62i>QG?czBtElMu#*+w6
zqHF6+?$~q0#B^s-ZYgZ}!gO~6APJI_+Vp<|td8IL1X|Ga^HqVcC^}ZT>+k1x?Z%Bk
zsoR`Hw{JfT$;#GteIP@!u)faXA+zFkm3F+!nFU(NkXHlvE?l^vr|XSNU;XUH1lQkY
z+of;57ZQjLk$1no(zu9u_kX{p4=a!*W+%S@;en<2+s4Zq!QgSzf$rv6&+d0??D&7d
zOmo8jJuvfsO+x<<dxi5QI`6}PUaFJ_$8FNt%B7}P_4xYE`0S|z)}r;%*^~djJC&=L
zJ)ZFMpXh}E7C=TGy$BALrLuH~B1(+-Z#G+J6xX8yX|4LmsBlm!;;|_ZvVe!9p$XIx
z?1GWt5inFyS1&6q?axqbt4sXOC5If%P|WO%6Cl2`^VHeSfF;)oPzV<j`~CZG=35oP
z0(<rP^)tQ*79bcJk#96fDdQOc=^z_n`A0CRIvwws8ZNd+6#z%1ny(vdCo0;UuU7+t
z`C}?7Hdrvw-U3~MU;ifNdj$so!NTZ2d3&QLsw!Sw%7p+|UcRuiyDQ*!@(K(ty3k_e
zj`(IgUat82BL#T94*|o$>k<&cZESYF@d!cx-JU1D;Ktrw;O8ro#b{~JDJvbfn>7G0
z9$}7`!NdgSB=3lbA?PgthA@srdje7$>7ZhXS?pO0O|X#rKZpdmb7wt{+1aM>!H{cQ
z!29y9DNr$oyaW#_1v@AwpsTP|BR>r`Cy2aK!VF8p1qKOwd&~dUptPAcjbM{6Oiw?+
zOJB}bEl?73iDJ`3Mu1>EbOZ)`HoaB_`Xj{j8mj0IFyP>aP=pWFlk+8L0Bw>QMtuSL
zj@>q<5~ilU|MtWYj|@$h>pp8Tp%GYUi|G29^TG?G9mevsGej(`@;VXIeU{kR*!9U8
zy1YJ6_Kdu@<UXePWs;X`f#%xYe%3c|?n7YI)0?FHu1BxpZbwXk+SpnEZ58~Jm5%ap
zMFr0|<px8_XTZY~8(T10ZY%yG5xlgY%As!ni+z0<%WErUyx0+=EEag<#*H%T3J|i;
zz+;1U946HgkNN<OvL@r@rxDr<PEO&-_iEtZ{k!Up^k<%xf@U>59EpRkHy-i+KU@F>
z1;2w#s|`VKA*L_2t38tStdx@DX%DWW(XOuSg%I}=CeLOWBVf=4<xaz?%|^n-7g5oy
z?;5EGZI`;=LhS+o1aT4q?GxiLmteTSfSWGlf#*w@wnC$`M2SY<D+YhyO1~j!NxZg3
z#|H<0_hL8eZJb&#QWTqG*+H=(WN_eo-~G!0c~J=A$skxTGCVB$(Ah3EEiDZ?IE{zm
zZb6p%YCuOvhdzXC*(m-wFi>eT`2||<^vD(lv8cHC*@Ih!mb1dUe}<s_at2BVa6Exs
z>=C^}t40_@%Z8tv!x(f5MRWeq(9|3sAOD-+mco3^`FfHNv(WH-gM<zE)dlabwBX+B
zO_y(~c6H7?XpI|OUWt~E0|DVj)t7((@J&X>#+t%{oJ}pieDR_Nw3f$^l9KK<5Z3`D
z9RDftU*%5|`ZI2vkh_PH1CvInOc(>@Cm$c2ix<7Uy~S!2=sVimtrprx(qv!mcC}=l
zMW^rT>APgL#Ncd{{{8V1fHnGtat=UAtziWU=|}*DP+_G*-v%^{Ksnr>BFTuhVv&0n
znsxAR*<@#9bMhxwKu#)@1W!EVXxjHSU170qGgQ>N?U9>cbAV<vP9ue&FJH#M=w2_L
z{!&b1XL~!O^wFWrwJ_(s6Pkj#PISuIr95kra2dS{?qxttS834`r^?Wa1gMDynDKlt
zq9{{odz?R<S7q=)UIwGR>&}ua{U1o0ncx&bX$%eyLLs=fT`~KI(W~yZ++~xYob0`q
z&rLP$*A8NzTFN;$S9)D@97dtUn)%&MK4rZ?CS(<YGZD2;Ai&QL4H<<XUx2egl*t5D
zn8&2?e6kdM#`D;8o@IDwo=+l)*D+$Er4?><Wr;a@@%HUoIl@rUsPEcFU-E0@zA1c=
z`yb_3CUz&ZhnhNgpBk0?2rq+peC@?M66v%3cuvAi78D>rx)mS)-<@62Dp!>Q7V}G$
zm)hIg&mz!=P;txqUwnP9UiAg9u%Dk_utM4gEGxUXxV5oy8;4<5M@PEDS%FUf_2aWg
zG{3vMKc`C9-Ps`W4e;{|7ZDY8D7PuLvm3mF3m5u9SIq2wD96F7YALxj<CH0ld-i8v
zUoc*H|K-J~Me?Qc`iwl2o>!jEsWVI}x=oz{W_bDhTL}qV1HT!~TiSGAWZ|`QTJr-Q
zGK}~PQ{&Hr&ra<S4b;6<3kKRtm3(t#;`h%+S!;QKI4t<WpQZOwzv?PpRp<T9!Bb&c
zvJd9cNY@`%SHYW}^&%A?DEzAMUT21%HpJ*lSzWgdk0@M6sHMAl|Kjxxq9>O3PnJ_D
z=Y#9dUHw#GfX#xpo;!y%hB8u)Y;|P&p<|`ViVvloGQA~4inKIQ`~4H|IN0)VE(I_m
z4G?sy^1y-vy{WA7DeWr(mo8uCce(pj$ldMVeELy$JW}wGdMj!#sk_=$$h0qI9(;Fr
z0{{Gj4{q!-v+?L81K9K1;mk4pnT5tfN6<Y*FRudjJd?X6uW-(;JO?gPf(DGRS8;JA
zdYBlMm?C`sCd0~lzMEH!`_rPJP|B@|17rqe3^|+bn*dTpK06b@gSl!3Lpk@7l^j<i
z&B6H!364qtJpLp?ZYG|WZIcXILlF-iJn*J@B_bjn%~7pZgwJbdVyxlkGL7WiUO0t5
z{FrD?*XjeEW{6n?=4YK?a72QD@gT0DkC#_V#(Z*67tV#tE_+kIFZ{h<a}WFbH-&|T
z_f`h%{|t7xpBC}`rgq03yB@hXL7y9ifFP4X+D6Hw)bZ}nVee$ME1l_w_DIHvm{--1
z!N~bbYhL<vf-4QWt<R3|z`YKqSPTG85W*bv0m%fgVFtbm!KB(ACm@d0@+F{w^9|gV
zdoPg?-M#y!@~mm@&rq&3=HyW5WaFLV;kbR@AP`1yl!V6x9Brt|4>l71E!EDaTa8}r
zLq1a}+rrV(BBYffkDtQvgX1Kw+_<6j^Ns9a)<|J6ROx1u)rmpUoFpV<Wa>3;7nX%w
z4!-ico$i*r@VeF_uC87ICsOR7j~(GKiMiy&ca7=tHAO#vLdUf1_JX7v*46NEON&L_
zN<kqs6bEQDo;SblFXt+xTNUUB3}vg2rpptXhMb(9I`3nKJD7()T@C5znB6M=^a~nK
zp@yz)Z_m<gkyBDy|K)rG7Q-|AiGazQe$PF<1>H^#d?>5g*WknvjcS)QHT~O!j7~n@
z-dYuQoWCm<yRgh%aBPGPbUANzKjwOOR|)PO;o1AMxR_qGcN@BG5KM=?$^OWzXSvCZ
zID*{FtPG%!vC2>r<$kICdR)?Tb#?XZRI~A;{6bisQ226#2bZmdQ1UD?O?6bUdvp&B
z6oDklsQkFbYThq_or9ykv9WQZcW{ulnw{f!C5q)TWY<CwXm3v%jCfGDU7@6+rbZ$R
zQX^F4G<mwFvRqun-Uv33X8PZU%%Fr$IYzr-rVASUBU;5EVWVIP!U!|KH=c92p47VR
z59O?Uf4l_n8&DA?PM5gU)+Kfy?f#+m1U5IlRJ`mPQZ0U3>I1Y~c)#5m%To0RmLy~G
z@Clb>bRnuA?230A#i23uJc5abimJE0eYHP51l5uWSt2a|Z44J0H>S{P9tHUUNV^KK
z>TwzmDp~H+;f7{R!8sER_4N{wPn6iubn!cI?oI63PW*tS@58ALop2I7%*xKj!N>ei
z&JDtY6FK@d^Jao%6NPP7hnFGUBkNZNvkgq|DR%%ob8QQk1mIw8-=&=qY7j`CqwRM1
z8e0C)Xmrh?e#XU`B4h3pM2K)hybQ1F(Y|8lk;z!;G|bpp+R<s*N>j={s&uT;?OI!f
zvl{S7Gz#>Y>uBLPi@l}IX=tEm3Luj&wYX(q5V1DSC!Tuog|)Rcy}6jLoI1<dV4j#q
zVM2T21cZ2<cIvNFp2fZii88Bs<NgC~SHwN@+D|QT2FhB0`e`UVbkpVXm<(Srh2~{u
zO%1D^rJmg`p^{|jc(<dSC?zE&IMD)_$rf<R0}-Ypss}q*$a<lW=`FO*0vBcs9S6PQ
zpsi+=*v|vo0}lO7fJks4KpS++Yzm8Q0CxE3<u%`(;0aVV*wE>08}`tng{Gqnj~*@k
z$*t*m%=MQm#;WVzx^)X75f~5<CVKnsfdowu5Ok^=+q(h`7pO@X<eg6r@<K5LIN3l^
zpBeuE*E*Acf<j8Vvb1ziOCxI5pYu568%^6N)pdId3z?ROvNBvRiIO+sf#%J2iS`b{
zc>PbM2oizXoVd=1RD)&i+}r1KU;UeaTIxMyLh2jd5sZo66s7sE^dmRVkeCDq<G@Ni
zwzR!{_T;~hkm}F8kN_TNuS;dO)(H+9X;1$=Kl}Ykn1>8sMsYsX%^A%fuJ2kt!E1jL
z7o6Oo^sC}!bzaih`=-K>&aG*&v0>*YE)^FmePjFY?CBER-HJlJ_{W_4FuawLrI022
zY(aia(mj3pq+0ZSFjsa!wrR##$;~HM58YZzcEa`(&yvb_gwn6R|BJo%jH)tSw?wTn
zYbho~K>?K@Ne~c_C<Y`6k_7}*l4L>2VVM;HQ8JR0AQ>cQPzjPG=bVw8bGmb3?LNEv
zp1!wxjC1<*8ROKCUA3!J*80BpeZrjcna}?CexBBfik6lZc7A?#c6K^CI>kRs{&@J1
zgNf-Og<m?ywG>X#&F|}WCWBPy3LPi6x2Ew-I?plbKQ`o4RykaC=ShfRpZd7$gFO)z
z5iF-}@~wMO{&{MBFnRI%k<C<n<qhHReV$ReeLXC~`#1kh<%kB&%a8~7eX#7H9bpV1
z{?p?HlK)MQu6P2~cbcnLug0iljTgTU`S$JGMYD8NqoFrXZGNaNR(?LYm(y+LK3snB
z#%{Knp6r}I$?o0FP?~uwy}-fGHXli~Q3GIzN!6v5iJ6k)qrfVjDd<nn%pg8|-%DRu
zRHUA3XN{x+$y#)sB}?GuZTH|XMXl2mDL06)qn2T2IybDa_h@-*iop+P5Q&v9g3QN{
z)N?ApDb-*LFx{WycGv-`Dr(~KR*3RNh1pwl<In;M(@aeD1qNz^L~=tVj@h%E`E&Gg
zL4s>&Y-5Q}hPq$!_%1YjJN`P>6ecl<A;%(o*D4K6qg*ghL~h*3n#fg(?_cQLh`9N!
ztfWM*IkB_8m64G#O3YmcH=5UOu?n*_Ud&5IFerl5bkkyNQjuMo8l6FV?+;-O`wNUy
zG$pSfyKAnCtc8tMj4W&-B)y>BS<5sZf&2(*c6usud~{Uhvt-8hy$(0{CjhSQC1qr{
z7){?soOCs={cMEK^l;$ONOg!V<PZ%LK%zUcm(E;w=<k+kDvSP(xxT-W$^+Nr05;F`
zmkHU-HsP;=kxcY7n1&(ejL`UaX&qq~nNfFPJV2JL{<C=G7ff<F9br)X`1l9#HgxZw
z=gOjJIZKEA{cjI9nm|5wG2aXIR}!oppq$LJ=NmU{#Vm+ew~U1%mnMq-qG+$QYrNWC
zm|)sWB%+jZJHA61WMiwu7PpVw09GUXR2T;jtAZC)prE}<wBk=Rf^fQ0Xb7H@C`r((
z9YAaTfkSs5GrHro;lzP8XWi@v-S?suV}b3nKl*i`cfG2rO6R8vlCd^?jzX>zQmki=
zirwE}o*Bo8js4`;yz8#xsJ>80`o&x;^ggTY?C00|?$k4|lIf<sp9@-j>7@hFBTIeY
zw1y{z%6AW~Tbaq>Z&)cUepL-s3T=$Grd5J9SZy_tSe{>#^plY7fpeS9-0~wBMLc=(
z2h1_p4NG93@chM#(xTSZ)`_NsE8joG#{TRpISkdi<xq_gTF#bY#B(uf^gIDhPBXCW
zXoyqW?C+?LOImx%hzalCe_WkQVecD!SSW<<mbbSHfb_#KKcETkMfuN?dZgY96_DAW
z#!G>}6wDXKni8J9`jOYj4sZY`;ipy+T!EBt-8#lvRZ(F)R70C6P*Ks`-;XlP**)~g
zf=-41seQg__AC2A*(FXYCpj>yXD<d{+Y4wGg|S?e{1BOOl!e5L@BhF8uGYdT2J=;x
zc@9Ae5jVSgU4`6uKg~|GrkOx<iu3ud;4CYqe>v`a{R&Gl-O6!J^uZVlX9ajPE75#&
zz*AfkY+%1O@P2K+6k2KD>6FoSlROqLd%ecEF>rs{5_Li*S+f#~Kq)-4Y@a|E%xTzk
zlUVM2jrL(b08Lq<QR}?-jT}@v{Cs?T(H>T)uRMBrAKi~vORlZ0eTd5QF#X%K#6-6O
z+HaAXKcr9uM5?5S<D7)nvS~is;evuP$9zP`k>E(?#}PgPa7PLt8%RFDQpYMIw7FzH
zOCGldP?1|u0Zhbxw)&OI4hcAd(a2u;RO6#nT<Am=AYhA!e8Ww%HCc~Ozpl7aaKv(T
zQH+#~jKIagA!kY-Q<OtWWC<?$u&6eG%V37dLq`zi<)atfB~row<%=5>6cqULm`342
zsU&*7aHiUr5c`6Q>Bf0>AA{FGMSv=k9x>c~W%8Z&sAg1%IstFCs!#c>{+R$T&}Hj0
zFfG9q=&;a4Fkt;+O@v7q85xyPk0X|-vg32fNe>*L-kt^{FN)4Rr)g-e7HaJ0oMH#j
za|@)!k>=1;#SF7B46;y2r+l$m54_)fqcCWa0Tt9f&6rrDx-zj0ldq50ckUm>!)r<F
zbReUkfI3xf$a3{nUkPTm#T?u#8e(x;TE{WF!mb3w-USJ2-EQmY-mB={b03($+{e{{
z`3__nT2P#z)v5qnp1SffMm?wH+qVv@nqSqLxuAR?zPIzN?j*Qoy(!0#Npi$tO3G?@
zdSNmKwEgwVE$DyHgPgI3c|d+`QaPe97v}t0obfZ)U<iY8SmyI7%1NJ#%GxmK49IW)
zi6)JRn{5oAF(D#pLjj02bQaI$;8@s^zi1ceC{ynhitqL<^WIPg&ra%H%WT$HYzltz
zxJK~R-9xArB|!HotVVuvJ5-CXKWK@&7K@4rMi;MUS#N#m(x&L@?!Mc!WojgTFMyB8
z*iEKW-PLj8%3{B_hWM#yanC5CNtTp-w%t-Gh>#lryf<0^?#d=7FE&|BCRGYXGr!2T
zg5`@rXKp(}pLX}5uch7#9|Y}-P|DHviXFVMG87=fr8(IptghY<x`{rc+A5(%dgsDK
z=SJ7JXF}_@avj!|m5d#)iZe)Ibg`qcF%87HgM)+P4=Y<+MED4U#&P2N%d+fToH|VN
z5wWJVrlzJf>mK}?Y-bm5mWJb?4!30(B;2E=If_PFCRNUhLDdYnre1BXee;e-!*!;3
z%(9d4;hX6sY+QkL-`kUXam3f!wa<s=0Px>iFw#SRDYTYsS>bOC%gVsOFfx|q8~V>=
zvnbBr(|Tik?X2DnMm-mbjXa4^PDm;F`R(S0FC3}~<vOdEbicai$}0zuuM4n;p>Xve
zZ)eS0Wwwry@HRd~wr@>cT^-ma(Vr;SZi%pX*9LgDdIs&*9kUaNzs|>#?Che1thzc;
za299+)6LW_qcboVF>bf1i&i2u#8Bay3TPHRA|(h1fc*o2E=E8;fy_7i&bMszwfai?
z)RJ^!4aH!|1rBX4ao?|woK_Gxcqy#MZv_v06yC~bG5YcEuMA#4LVj{_suzH>fc10%
z8lTB5VX<d!yJ?T3Y`*R*DlcD$%O2qGf9SUOtmkEzs6Ks~q-!a@&OEJNavM~xsLd@H
za@@J|7;v2v-3#%%Z0L210uqTH44&MK7qh4f#eCZrce+>^t*=j?59``X{Mp&MFdoe<
zN2x(w2}o4&>jwF6N@hW0=jE<3VPdiPxWadln^?!fAaeWvW=;3M$ff)ns}Y#pIf^@l
zF8wj#0V(n(^(`i@NZr>&PW%!bLcgo+e|OVZP{)u0-P6?EM18whbRs47k*skdz?lbz
zg@uKO>*9!G;3jk<t<y_1kF)&ePk(=Zcr5ky$|<PBTSN=4q|V+|NxBPY?+wOKP5ebA
zc$qxMmhb_VV|wTxP0PHDb}P03O=eUOWQ+NJ2jUSfF0M^TWb*Xqzn%jXN8EApR?0x#
zw{6?DQYVb-OAD=C_0u;ps!uWS2KJS=A&9A-7Ibl7I28TheOQZ{O>Yc+Hu+Jjo&qsn
zCLE63+#ku8a4(N@b93tv^UrtnXFKM?Sa#Qbd2>#UmqG_ga<dYB><tZ^^V_!_0JDc`
z0uehKY%t{*Hi-KOg$!dH*ZppgBrZhL$*)A;!czxeI>`q@*3sL#r@#^1jSd`NA+JHu
zO8W8zOtBNcmYd7Zm$+F+h%Oe{F{gz|h%d8C8>V?{tE<7m!L*~tZ6L}jJ2NH9Kp}GV
zIjSWJ8vwgB0V-Lbi&f5`@x(A35T{3GrMU=V7?{dtA1y4n8bqWy!f*JUGwI;}{ooG$
zL-Q1SY>^1{Ch4qMZRF<F{Z$*9z=ZkMyEVi01}QIneV6B3O_JvUduwWX9wFt>E;ZED
zv>$DnQrhwT_3L5{2jB1%lxcIrbCJZ%yCwU1$)9&q4NZmmh;9vjs^?<q@v?Y%Tc8w{
zG*iz;w<Ag}Z|eO-uV>W1oy{ajFvmY2;4m}XnAE1TVLWENpTw2NtnWSoa7>I_%N<o!
zKcEr%Mh_p3M-Z!;En?@D_07ymb&QPqM@9_Ny9>atEH6+kA}x-Ef!hj~I*HUq-Tw{M
z^07(-O-;=OlGs7C@K2tYR!>Rs$Ii56B*nMv;m9{j&)sBAXntyuUXCn=!@+~4Y0|t^
z_B5-hd+X~Yke$8aWY<|G(7zXFo}G%!bXY3_a0<fNAOJH2brn3M7@n|r@PNl*H9Z-g
zE%6pNswXEW@8-XRB!Wpj+v-s3fy0OGdkS{vmq8*RZZEs}4b%%f(gGsnOZa$smywa2
zj;_(we@8h02OGAjFL;9!Eh)CJEDo}7kRDOavIw}VpJuEEe*_B{eAuqcW|#>Gt;m<!
z!$uBBnm<iGjX2@p!S?_<*s}fE?%w{usrOs9bB(Ak_lShx92m<n2i{%T0sjmXe2zIl
z4%&aSzxdkfB4N7OD*gvMOaITfY6;H|sG8_1@sNmGX!uP_>Tm!4@#9D2RXi_=7P#9k
z0igwr_xpr5h{no^c(bTlpwtGyT6%>XEv{mG|MwS8x;>~yxi~rH!~BDSI^oXp`*CeZ
z#O~>aC<uCm2ag_kq;f*D^hsR;&(*jiJ2HiZg+&4#=}e_iMn(oLVK+1dEug;8G<Xcz
zEwnGdJ&<TfvH1`!8~7f`_=3AZYc^frsEO>0_@WoUJBMz%exnXvZ<eD?pNL<iOKpDt
zw(p#JqhPLlA?iZEV86bk3wKM1CSz}W;2QHQ^^EQ-^UlMKM%}?)&Tcy|4I!k*dUePT
zV3*{qH~b2ln^T0Ji9qa8!~5*nvz_}-^r3$(DG75}d#PI~$Vv}_46b6<pDtf(YnujW
zzdqh>JAL-%*DG)U;#4L_v~v8hc^Rz8d;||PL^o19ib4CMU_#Bwc{R|;(6HYchflM}
zd2X6f=+31L6zCWi-PB7FHr8B)pY6!X$k=zBeGzyVkTLdhV;^k<YM`%Pl8fLxhrF+*
z!6;fiM=;>xLz_EyE|q!3CQktuyp^aWhM|4*Z9^c`QF#`>`*ydl_#k^peZ2x?Twee3
zxsao6duh)rM1Es@frE|I1Fa!`;|1&K#^xkl)|=FM9s{8bjj%=%bEhly0etCsPHi5U
zXLh8~5;YA*qjK+8167>CQSx9^P*Ih7s%&RxhjN-Cav%CTYbbc!et{aNSp%*N-e3Xo
zIgHtQe)KpDQg9r6e0>!ny0o>mjdXSC%T{5n)~8I#E;x1UZ|bCuR~waDGDtxcRq|=@
zSAZ2kn8TVD785xTUy?F;Nz}NzeN4uDUZl%=n>+AQM%oDu38@U=Q%cb%Js#2{#SM4l
z@|jCMcaG`~j-r6BaHn@oPSP&3L2^ZtQj2mOe~UFr;!gwAjiRc*)Y|3Pd3I{*OD}0V
zviqEgVdin#JLpr=($e0<Z{yOhy94nSUbW{d&c1&1&wp)|E$HZQfTIRrAU><fuP^oz
zD2A=34Rv)5j_DW}kR3X7h_te0xsyF0CB>ydl;25sqyb;X$Z}~~TiFW5?Y=eO*)2)B
zX;*RXl@#J`Yj=GWb{xD>0a-i|`1Z}c%mXiO02sKLdTYyo76#mjKOM3`Z8z}@5d6s8
zHPD!W64lYsQPBl85^7KEH?%Pajaw=1#e7#&vv+*l_?P$7PaYHMJWioMU{aWAyAT-E
z*^aFHmP*LD`}=kPF{Pem^<Rb|M}{!XsK|K;H{lm>AtYMuYb`XG7;!tciN>06)ONml
zfHMZa6!QlUJQf$`8r>D_zI{>8*&$2eAy#@d)UYW+CIsZv!0_<!zyKFqn1{faM)JcI
z4xl(FZ5J4#HXw{3E3<1A-{F^l$`<4{ulaB?p2YH^Jak+j=0`@>seeuX0}B{g=@RY*
zS0m*&ADg<z(GK2h2}wzQ7awM3WGo?uU{nW96TN%ryL1r#o0>|A9K%g5Yj(eEKlgJA
zt{A8I!%`l%&XR~dlkInx(v}4Re)fGlECOK(PyAePwPcY$JO1*(zgFgNOPWOh0JVc}
z?khxy^EeE*6&Q=Bqb>q-WBIEp!F*)U`<SO$4?Gm#zJ48XJL3(&ZxmB#-}QuUcwFwm
zBZn<J+NU{hm)~d1-}m`(Pkoi-*L#&f-AIOgK(W=;)dleh-7oL8J-c^T>pyeUomyD1
zG&5tDGOn>+7+2HP)rIJNTQBWENpXSGo;`ca9y}1W`Kv?cpZH~_+8}m)W)%30p2{jJ
zbZ}xDS7C1`^7ayAbJ~_y5CCL{^~A>a{=HYoCGY)yN-1#efJ*&`to7zB!s9gQ;T_*m
zfo+Dhud0q^LBxakAH6x@f0p0=R)TqGo9$Ry*?G1r0FD)#qbt;6C3~KqP$iz;uPd+Q
zM2OG*-+S%D@Y-%HLpYDDu$fEW@q3kC{qy(yfL`+b>hjiB)e-2I*5(?o)xhu+9hp<Z
z62uVQ`PW55EGMLal<M+lJ$tqWJIoZAE(GE{6Dy{8jUdP*=+B4j+O_LeivAq13Pf>#
z|3uVYA0KpoZwW<8LkUkVf(H2*+sC}kn$m~ufIiqZ+%o-L&kqg9#4w*Z6XN^>NKj2n
z3*+y)-T7g_u04A?zTDNs{sE2jNwNwQgdtQ8KG3Kt<~az!wH&g{wbdC`q9<%tRu<RS
zpDb_yxsZ|yh0*4ZDd3o52-&`;4*+rzB1-5Q{6bMdi%LH|4{M}iFrh%<kZz8jJZZ!q
zDf<30@*`j|$Sv2u9|s@`%h%cNS5%5oeQGhcKvUTsVeC8AddElNPpwacV{b6<hrbT*
zyv)!h_WtIcXElQG3IoOhBD82LdR+j~rx_CNe0y3M_(Jp^XW;O7U}t^3IgoMfqHPim
z&CVEFC<oM<YN(vzoj4C_3Ko&=_lvsZHqv2pK|B^)dVCi>WGE;`R+rjAoU4RO8EI%}
zU_JzW4><{sX-}w@0P>imFMHXY-7d1}9FiDX&~Hnxw(MM^Hb)IoL!(;+3vD8zK>;~e
z3$&RM`PJ14294)b!fA>&t9@WPYH&Q=On7Y8)JFhYzzSy!qbY6$AGnM@e5^~uFSqW<
zvJB#X_3Ap5GRXiC6csDEuk3(3SGeTyO8A9cxPMdVA_uVv0;|^I17|&E78a<1?(u7W
zx=cxQ2yOB5QrtX!2Pz?$KC2kxlaf+DKSucA>+8v^{N1Vs#*vt55$pZCq~GmT_2q7e
zk5AK;SNrL8i=btNWHbJDMsQDJgf8a5LxO|b+suv+fa?CT^6HfJ<~x_9dWTm))WV^<
zK_0?DIY;25)kRb5_0gnU2z40as>lS<7-)2AA_{U->X-!ON(Ho_JCUkzhD*MOes^2O
z43pA4+JJY*AWT<@l4r=zMgf2`Q`M51YJn>Kcfne>>v`}aJ?Y)giy|e@1RR<->$g$Q
zb^mqi%bjlkO=)vK*`b2OaK9Cfl~RQd3Nu&1<p&TXq9}CpuBfPh`5t%fhhJDGftKfE
z3IuIr%sir-FW!UQ>GkWI6E84C6cKS22Cds^T#3G;PVU67IXk?zbR!@m<Dwo>owCKP
za+b_<^S5Om{*PH7^ZyeB|Hs`oo+?kOzI~IimGtKk%Xxx32@l+X?)+D~mthIUu!cDz
zMTTzRjq9r~LVx%JlwP+d{4U6{u+;^L)BROi+5&E5J;i;j%_w~1X|ph{*@la(79zqj
zM0IhR$@7q#6zW#D*<&UXrARxQx}M40B>B(t@UZ@K>(-Q1#b(tU8<+W-4#6B(S6A^*
z$Z;?~gQjyuN~$?I5XDiM8;4f$N8%&i5?@w8`W@zM)gOiPA@eqHotgTJ6{cr&TjlpC
z#H!S{v_OkP`!W!Y(h7(cM0)Hnd~2F@*PKY1WD-L$+x`p~*kA5CmFtmU10kcN60pHp
zjrpX}g1r<9!%t8;q+l{0gr1{P4z3(k&~QaXoOY>)>X$C1-(UYA<bd!Jyo)jqLnP{p
z@5I<Ig}w9i)CT==^xW;x9J|S`Z#Yb#v8aw851YFxA_83@Q8$Dec)vcXAHTU8N|ax}
z?)%b={lAKQW(%xtfwC@ABd^2fyass16p%u&=`R}b{GbI&1#khUZpA2xU_@KEbSHS0
z-%}bIKI<MbsKOh4Jf7pkViZ8M!<~O%OwAP0E-YLo<Rzp-wL4DmJh+4A4euM;luy~^
zs5hZl2i1pbRQWITi*`L8J%d72GMAH<kgq*@2c!fqZ|LipG&&%vHD^)b<c<NpG~>pY
zWj=!SBC#MU#am`4CpRzVWG<WX3%1jzWmjVF$jjgEHZJ!`kd>{aJKoYlbNsXCgj+mb
zAn?aq*;Wb3gq1OFDykq@Ig@{;<g*}(T|`{STZp@e3M?tzQ~dcX<6wuNa^QwL-3?#%
z%B|h#Otdt;(1#3#=k%S&$_7&JEgPNNMVaIy-l2;^`wG5Adwq2~>{$VMY__7=tN?w|
z44a{s)YXG#SGKUdt2?gSL+Z*(fn&OuTRfLhON=Zg+de~V#NLRi6Kdwh&o>NuBhj}I
zBV4kb`WOg#&%t-^-bGkJJoxf`Lj%`F`Ltx<NtfC2_GmyHMNXcJ|H6B)frJ9_kvHwN
ziRMl2KM$t>OtzEkvFYpT`ZYAfz$(DMha8V3Oyb84RBiGMjj2X{kbw02ndII8FN{a+
zLXX%i`?M2Xbg3818CFE}L!HW(?}cV%t)MtazAMWHabkMIIrZ%HBc$*fIM*)}JGgGY
zf!RKCRz)vsl$H?oi&Da9V{(@HOkqiNh@3^pCX#Dq5Y}M73v+m}Yy7OjD=A_=<=BUU
zIvjWhv2Ecm0YVR63Ks$yC=RB>tE)4AP*PIjBzTHpUd6KlMe@q>^8AEQ6+C(U3cr2(
zgfk68TX+|_hvuU80O8&BOGcx&5c3y_cGmIm<$`PZL-bCVen-%eY)B;r)UR1z3&=bZ
zQd5z`o60_y()1qYk&A*F9GH_nSgxlIwzexEunFMsv5nwerUsV#5SI0bwT2`)+sBOn
zJ_l@JsX2F+aRwGwtCvII={bu7Vl%&rWd-z!&+$Kc+a<T|c9)eoabY+bkWyI<)<1N7
zx?=nLYVS>Y{d$)+FLc`t@twM?s-Hu@f#DG`3lKjES<nS;ZfP9Arw+}5H~?fF#e%?^
z@R;EpLL-*@z!$6+_z=|OiI{7$%3EC7nV!x=yquTfB~R>nV!7+@u?3a9Q$zv8mhArj
z6p3Q4bNhEdl^1z<K(7*4jsOh*lPJF#&XbK--@2Qa3ufl$r79L7*l9;4YD$0z4xM$B
z>~$-vMcnGjpp7g%Y?O5}8yRSQf*d}eE%UBxy?+0np);@2M>G=(QAfOIF<)ZX#(L_(
z_vd0o`EI_uv1@4&FY?d=o-d)`bvL8A-MaM#mUnG*JtIN<t|Mq8|3K*lWWjyDIwbcn
zog{opE}?zfymz7GVEs@#z&2KWEcE7;zS^j#FBija?Av4G;lEuF%^MP54bQ^?LzrC`
zxl$>ixV0YY>LM<^^5o^`e<L4rt9vkrAiHtO+8fY3mKA)=@u-Oa?sS<k<T8<Q3*hKC
z*%iii_TtU&9hi{8JYsmynP7{z5%X0qkCVrHAh_I~@()OghMXqpJ}d1$i{ZL3^xO!_
zWdVFd{zz*WVGHP1cVFLWN2!Kr7U3u(;(mvsN8@evKUt*Ve2YzDF*h<H9mfK%(4?E6
zPHWhmX9k0X+`^7^SryO(oN~crU&$B1a;2Hm1LpBqibWzM$!+Ktqm606#3sZ9$SrLL
z%9Uv)Y(Tvc7os6wYM^z7)($-{gB*%cOTgA#-Z42h{9we^U*TIDi^Utrr!~sR?bhBP
zmspwFlXP9N)&S@(?*7N0iOAa`E+2}SF{ja)s6E28z{JU!49$jicxWDMML;NRwvdyj
zBh6%vi@ltFEhP6S`1zGs{`<RLm8|}8w+00P?H}-JAE=cUVo*sg&Ui>bxaI{`gKvX3
zlM-VI0U^8Oa1avM%5Ze`QupGz@ISDCnJknn(5Z1C%QkpX_hN{O*Qliq;21U*X#kCC
zMIeT4$7MRuWMXGv$qaT9aU>meJOE?hA{Xrzy*nLNa=2D<Y%RlYtk5wt%Ue`+bgUC6
zG0<gQFu*7-VPN<Jc+gK&_OqtgaiQG}c!ZpHb}uPay_O#2FTR|5J-@0oz@BJVeN2C7
zurh1ypb`_qsUf)V`n72DKyh(;Y3yjoRY5*JRik{~N53Mr7t+id0HFa6I@Gx_gCHfQ
z4c9Bm%{m>hcHSw;JGcmky#C6guagaC4*(j#qRNH&V38ICP`s_VS!Qh`qjn%H7^)kG
zRll1XS0eNnhu$UM1)Oo@$Pq0~O<NSgsC~a+M7u@<JsKI=Aig<JSAblJh}g*Y@7EE_
z!R`Zz8bfJ3m2_PatLV^rvM@9Eg?ao5S@FH5Kol4FW$9U2&;`ccN;s6*2iXDr8dxS?
zv%c4FDt(EDCc;cslspeEMTe9Q)6f7=z0c%%NAK2v2ZM&Kl@%l&q76--uB>2~I_#{<
zr|(p(t*pw6#H8-^&v@Xb?y2jV>`3Zi6@jYOtYGmADE#YcJ`y+bU=s?O1gQO$0Oq5b
z7v*Jlh8p2{!&w{{L&MRvmG#tAE_6k3DjfpF`|dUEMe&+DJqpk-1mFC0S%v%v6rH<v
zTU$V5Gp3Dk-b2oS3)A>9)!9DD+}36$wszBCuzU!}*f^vDm_^jbaVetk^`R*TOpURd
zkbddrAGopj6Zsw2+$``aw4t3;cQeGOdAd9?^gs3%i@kK;E-|90Z{ZXtH#bKzY@u!j
zUyX#u3bHblLo%R}ov-UZ5f`m4ueyl34wq4<xNEZAvJ<#;4=7gA>^JyGEzQm3>X7J_
zJQNib?b#=qy;=aK@9aekH+SP=qFRZP3CR?f)$-q^+DhQQr0;y{)Tcv7+?(Rj3t|gN
zmZWbDkg}-T8KtO#e-}ieQQIz$eK^-rxoh94o9g0%b?11aB#qFnfo_A`!jD}$ktP^F
zJIBlmV86ta5r!%UD}x}`oWKMu9i<#bLUA>ZAL>H*1d<PRR<L>*q8R+?QlJ>aqD53i
zWkp2|R#6^{hn&+A5-=~zW4HMF({-+oR~_#S42aq5|7$~?2HtVRMDuu?q#f1e*iUNw
zBIIsc!lcfw6@`88>wLwwl&D)tdE^MZSDB&OlcfjAMe5xEVDfXgt}n>)eU$vaq_QDa
zp`mO@)OG@+1pN#>zzU4y_aGjc)JKKIju~_W-CP;!T3=g%n_o7V0H`}uiEgUsU6bvW
z_C!8B${^chMI0$bh`aQs1&T3PM4Z`*;@Y=>kw&2*O5yq*M-E*n?=~xpc$So~@>9U(
z9OD|wr|QPVg)j=<n@#^hxa4^Y&DPq_!qq_05rrT{YlT=Dhpi0jmS(L=T%b~4BQBrw
zWNgQL`5{_ybY-We*oK0*P2vg|(S%@mjPWL>U>~jSjlVob;ezhLs^L)L<;JxShNvS0
z0|ScKYzM#Dh>biAjI6mcYJ`bXF{@=7mitt<ywFuIg2p*KNay<1tMYNT3tO|yus+M<
zl6%})V)a$UBG=)w?wLGu?S?ufrxlbtVPV?S6UwY}$ruFJ#$1l)wY<lVw<yPSbK9Cg
z#zS-VERXFxSsRG}4-b~6&9bhZ3eL-e%7G!B-}$O=$&(TS)2t&!EikrAgX>wBh)4-=
z>(A=s+hl+5UkzB1W_tcr^~L5uOF(a<Hu1^*pI*B9zt}aG%7%SLt5uo=?0*yF$kvuk
zxJ>*`*iBV@Wpn54mPs$M!b?1NzZXCfY1s5did-dfG6l*^0w@N!hQrSS)DIim&6*(u
zr_J#GsPgwD@TX(xaI^<{kEJ@yMp*mCC#=gZ_8h9PtWe=GZBX$D24J7q9F?)(%dYF|
zH{iwhS+V1T;d~-^@0yNGb8Piw!LWBD!2j*-Gym-Dl6d*7-pw~p+?M-3^*Hd}k{O}m
zee~rMM_B#$f5oF9g(edbo<`^WEEr?aD=em%;s%sb--2lQuK(Q*;=R1&yXqlhVln}5
zJv|afEo?G%d&T)z0Q((Ca!NG1P=Eyn1_H<d<Hs!bc{WOcNw;$SJi0-;l6!gUHc>#p
z{V%q+B<q2ZH6J>`WtgrdrPo)f0pn;raFK4S877_Ue{Sc;L~-xPh-$9g3rO&aA4>&f
z+O1B}mwBzJgL5NsJzXU92<lx$bQ0}t({Pi0IN5c|*Ag3*YN-C3o56cAR7ZKJw1}_m
zv85No)=wVW7K-FdbzhC6$L>Z)(SK^6b!3mkYxeq^7bV{!d|=y?X<Paf3JNdp<|IBb
z9&~*&Q-wu9+5oqjl>5ZT-F}~`QHymY*w-^q>M8O0EtVj``wbVN#)|`a&~B-XRt$I@
zD?9r*b2ExwbTQ(8Yb}$QjoLHk7zO80bm?rYui;?1y$OCU;!6v49NoVE50?XQ-0y}v
zQD4$Y`Xt|dwtx{qXpY2%rI!JNFtRc!M1`v9&|S0q1e}*3DOqmWY0ugm|DgNwNmLqG
z*5~QzsU^g)MZA2ZHazVwCe_s2;4YB1461{z!9!_Xn>N(ZQOve7RaP@Jbk6p;t3q0R
z$*lt-I~w&=<Mz__oX5|<?$|dx(VPV1fTX;&)O7WnOm;eeI}jAt6hW0+l%F30;3TmR
z$vq|}X0!gzPLd?5v>i?_l5^8Mdhp;Fx3M9#vtd%{`t`%et>aAz51SKd-F`xlfvz4I
zd3*kyUJEnP%-T0DP)L=+rvMKr%znC04C4z_R8&Ti&@TSf3z1ZNnhAzZvh^F|>SL7U
z#QZkzRfqCter@^SkBVD8EJ8%~(PW4j-K4B}=gqi2%pPyKcMn`*WWDj5e?nV@??o(x
zk>|wnLf+%6!eN~Gnp4V`MazY-U*Q*MbjkCGncI1&Eu$7IJrT2^`-}pAe2noGF=S1i
zV>hC1qrY%zEbb6Kl}eris=uYa%|pfXoFOx!925^05OQKC@D*2B{{q5&C1Ebb4*$HL
zApJrFLf<q&*_AKa%Xjqiukjb~vB1<EjB>r_%@)S<{&EL?`R;;2D%|@aItfP0fcaOF
z{reR+f4VXIn8_|C@jt+}4Ms{1KLL=XT&T2vUqDU6xR}ogkUDsR<mh+7lp^`4Wn0}X
z_c29%hhh=m%X^VqzwQ?*r=yI0&=5L(mI_!N3~H6|p2slgyYdyR0@S|7eoGy_$32Xt
zV6~rAg*Yk+nk2hry?A2LfAwmdYMRuDx4d#RwrTNY`ErDpwNwTPv1*r~!u*X+ar@3Q
zhIF(n1-ljWoxl5ihT`IVTH#o^9ihL9X2IG<-TY?IS1f}S8pnAaJit&XMt)9POVa)H
zopE<{l?FluUkfv+b^(k*n7WoilU5(u9<5{|<~E&(_b96rBNq;q-@q-2=<N!i;d0FY
zWaczaVV=MotFgxo6Gd2y9E>GN*Z~L-8}T&MXgBczW;>PBbVta4RM^gKc#B@|X6Z}7
zdUX^S+nt}8DZ>j#BJ2@^@*fIWt;PBvI!?|y2ya@JmtI_gEC2>fL3hf_wr$@o#$4AB
z)-I$8mGdEXZ1&ntyHlt5opATb!3nCao}N(R56fX+QxLhJl5&$zPM(P(cekSjk#zIx
z!wM|ZJOCL}61KLsp8Oyhrh(LGm!Rbqusb%HPg0AHSqXd1@*e{tWhDMlRtsT@FK&jY
z-JHEJ&NY=stMCou&JY4L6cuG!P4(bOl?HXHb?01pK?JCIy))sK;J2CXK0dsCcoXpW
zzibhDqWp&Af1hMef_@a=5B-gs*A4|cYHYOlO)F(@mtF9vCZ^t`=fqWwq9L+jjWGv`
zAY}%iG?7<Hf1VDzLyGuqW<_&utgfzB1m%4sKD4ee_cu=-K%2%WxDU@3<4ulkyNO9R
z0Af+b7ymM-fj(qDk!U#LaUQsrg300LPVDFYt>#z>y+_@aq#Lhzj8p1ajpD{?DBBXo
z;#?8&AjHFHwb~|1B6*5*>!&H{owPe4{kSCYlJUjmEBVm90$o`9Jxu}jX|(E-yPqm0
zN<56}#hSl-{v2B@@AVbO|CRq)aw!u%KF-1$7ngtwBiE%X*)iC#FdcR0EIsZ*w0vX@
zCdW*wKFT0RXFVFibd$c1{cn4qp3zZ8Ik=>RnU@CV{*Ng)AH5a<-stzxd;qjz%KzOD
zc*>qXKpw{swf6Gn^rut%KL0Wc0YPU2jSc$6k-A8GAlyVSZq2P3$_v}BuTKyy(FfJ0
zP3Wo+fEbE<oK3)$$MTKXK`2D9wVH>Q_uQ??5dbN8igS?p^p_2u`!+$;X<zbUZ8k$=
zi@G8LUMXnkuDjR-(qkP08&(-&6*x{X7^DQP?_kfO783_y<}=(F&#hCggkp-gknz^7
z^f#<J`^h<*e*U~6Y&HJ$A6NimFyxZR;hRLw<1|@)HSI?|1z06W9(Vf8kSHbNIy(mg
z%OUXsGfT@#Z`PpbXah8oXm1sXGYtgsVYH$M5HyjJ>f#*~=<bcYU~md=h5__WsB2K~
zCKnXn&F`VZhnIJ|3m`H~4K4<e2ViS|%PXcQUX0^G*A}A^bW5GcPn_TL^TYU?HZ?Ro
z6_4iro4pV&wGb2z@N5Dvs=5qClTvPWBMt{V5zdho!+nfZCAq4tEgQS&WUb_hCwNj(
z-1Abzn&Qos_O1?|m1GCU2aJLz=m;`6CvK-zU+o{8=v?sjMgca1pUz{Njhs&-0PDlZ
zefnpF7Q43Q-^OfxB|LG^xzZc}L&}TMyt(1R7a}F@TwD!EA9L8bj=ba@h~cID+o0%b
z$-#g$r<;aw;@F)LPC);ol9%*wo<WXIBEPYbn~_mGc<9C64RvAp7MM_>++D$HPTGA@
ziz;C>l2^nwXW%**KMQHs@$3^<6@TisHSBs|*d3pml>-2LL;}HMd%#V@dK98FH(21d
zDy%YuxMhK$PJZt;``1IU+aCA2Fd_l$EleI3TxWou3~fMgFSPiP2%CZJUKneo|Cafe
zlbe6!1+Y?dl`Yvt$qv`g5Q{7R<D0S@7J$pYIVeST(-&;Q<ebU%Bg<<G>Cwe8s%av7
z^}4$c0@C)bxs65-;*-;)7a3+f;n_iVQefDCUlWCr!?Iol_G;m&O`}7<A22h>3Ld2!
zI@?f|wfNh%klSeG;Jj8l%pN;*=ybKb*G*JYLnh6M)=<wRznA@5?!^+#+1B2!o!!9T
zhiMJd%}8uQi%}$e)DK+yP|A<sm<8F-D+99G7Xa(7m0s6=u%9@2_}v&k4sxLqg49kj
zYwXh#>~hvh0=f!cx%>zFC?Iaa?SLBJMoX&?N&!Ouj;7XDVu~M$4==g=-$`nI2DV53
z#_Hi%X8?*A?#%Zwr$SiI$N{MuDTybGu5$`$Stb2JLQs$ffZ5-n!d}w46b0o9jg2qk
zzCF7gfV~20;T(skM-QMcGBH*_XJb#r@v2a<Bx%8=M+L8050{_2_I+hxf=I$V*z-$C
z!+!2pb#G6hgd%nonyImK3I7aS3%Q!*uqFtv6$7v?IKrO(3~K=L`+9q8lLlWUCKCyR
zKz^~BkFzAls`4Nm1?G>DwDqnh1W2F$4rH4eO-IoeL<N%D?i4=B?7QTWxqq|pS#KrG
zh>8i#B1uQWai8ZPcL@XnJ$?8#1IM>-bHV%XdHJ$D^1bB+8k*-VU8)toU4e-)-A23g
zQbZ5oN<@z_$F1|%EXlX6)BnRE6Uz6Km#Km5L;1d*x_RUuTmJc<Lizrmf`_<9e6|4E
z|BY4u|MlJfFNIuwgGB%C^A`UxvnKy(Pu<sz1k1s01%-u<uiVGQzEcZt(>ica*z`}C
ztFa9#BR8)VwlMCGZE3Jkjcw^jT~K7I*Pl>r<xNf7A6w76pfdQTL0N|3&FR;N&+<^a
zm&0yw*MzG-my4L_ejoV<1VNHY>-lEgu@nopxgSf@t+qy6WW|ZsUX+0tN2$YzFYB?#
zA)@8mfBlF5dL;jK82;-T{NENC7)`!Cy+#C<hTPK%kG3BcrQM+TbIYaD3@y~A|7RlD
z^r8D_E?l^vtxc++pdhw#79(tRk!M*eL$_~voZ6jr!RSm)S5INtn>W11smk7=_Ax37
zq*pw=EIfDrvE}29bS;n6gDKxcpS^goT`bG7Li6>pvxv7XPcMnKMnpyFH*)$Mypr5W
z8wr0AE(#gy@@c2_r`z}H>+8D_hypQBZ*O|Lzo_ikCUO=A>hjdS+`;yq2|5UT=wn$X
z3O}HLUz{Q-EIRe-1n2##k2(vSBh9)&0c_pAqBhVjoa8cWy8G&63s4>N3+q2k9BgN+
zHCn6(1N<D|$5Z;SQeeVO!okyy|NSl4DGJ`N;!3cu6j<=`@UR<_xK3;M?mDG4UsNvV
zKd^x5pWL0LWo0Av22S}TLRR0O=jF}T)b;cPWB8D;RCb-y@S^27?CA35@-|jtngTD3
z1o#;*=gCQ3%#{x6z>BOBY)QO)tl6a1XlG%b<Ss)CX}L=NnbFSm`Qr0G?E1a)vKLi5
zdFRH`I&*v9<|VV0rkf64@Y~T^rE2oiZopTUy_Meo!K%!47qO<Ba-Xwdlp#YOWY>m4
zijZVJy&9(<Cl|uprN~#7M>rZ3hSX9Gm+(hju$lc<L%n57a&)Rj>=aZk<U;G;$}Qw~
zRr2)mkq9o{+&e~PH~G!Pu9rg9s9q>Ft?8bViNg#<Z_(PUlLkM{u$hwjlHZxPJlTYe
z6smU9A16V6Qe4n?-B|1F)V6?jt;4)gjWv(|LaAfW#_IaYc$P`NF+>dsX&p8rBN{@q
zP&hjbI<e-?e%;y&WQ6_B*T?Y=a|OiF$c?j_f{Put6C}sJ)F=F)<g=ZRX*FJXI2r^1
z@&(yCbBiT-oV+zb3R}9EIZ5sQDA2<v9TtBbTUcM&AP*8DIo|-qg)~q1^VQXCASeZ{
z{H8qxJo!2EEhF!)?3a=?oa{0h&(K{3D1K)Bh7VgpOw4G%cQ|3OI~ZgwSJtijH+~MQ
znyi(b%Npe|Y<f$4OMxxy2Pn-%uYP;Qt~XiEQCTtS?1JXD@cK{6M2KEWOH1)v>n9k_
zof`*7YCDmW)^5=n3tuOITE1)5F`1dXky+<BlV*S_INmmGP}WscP*Ag<yKs<>qxw9A
z5JM9%F!R-QNV`k!y!DJ7rS0hX^KJGE?Hi4Gf@~I}3B*mfy;SiV)82XfTE*{R&@uXw
z!uWMa@MTiHNdt`){ls~hozd(DVXz=&xjeuS?hlKAAFak&0;e@-auzw~q24iFTGGhw
zekpWK?R>CiUq0j}kW4qKFCXKxY&E({M0k>yd&u(G%!iqhbo0nA68%A@$O$RA_Gu^1
z-}C<Laz;~V@@qcm7=gJucla`Y3`o(YcJ8t)I&NTc#QA^~wp((w-SRHh1j1qP=*JyB
zy&=ed+#AqRFWGkT@sa<qFuWQT7kqDQ>+a9eL6mn{pWdrGMv>|ovD8boVQDC@)Ohu>
z?fMegFnM0)+I%YsMJkv737kY3o$`{Bp{4}3knV2QY__G3&-TNV#mGWnI3gr2YdlkO
zh}BJt?)BSa=kHbcr$~frIrzVhd@plGoo>j>+nZ0TICZMgmy5-r{#mD$=72@(zVXgH
z=@1PQ5o_xuzKLv#_bc^E8l9#;#?V-Q6tMqJvIqx+L45Y$p2ja8X^{Ba&o_tnZ!Ie=
zWn@yqP9%YuRM3{bF29C97&uUwz!;?E*Sm60f7a~D?@<a0ent&&;^eZZ@Z)B!I8{p>
ze5cRL+~pXH&_c!<duxtOtiYILVdBF<sSW;DQofhce{!`t!}s4!;+)IFCQRpDf7_Px
z;)0proVtzP@ZyxKmzVKT!iVrcn{y6&hw1p!?3UihgjirXb0wz{VY=i;-b{rp<{7KF
zTK_r=xD1txMXi@pX}SN!nNlW#U&bv?^%3rSx^{J=r({x`>SkfzS~UN#@<ujd%GIB2
zf8K>^>z;IIfvCN&7b&UdJ`(3)4P#@ewXLU4kJb|&byyEtOsLyztSxYpkHGf9VJOTy
zcP79@!>W5bjI=7AC)d;%WAY%{r1ndYNU&RmVY8457FzKKYeEK<#1b+HE8JhfPUrZC
zBhHiXPhJ`bmxu*jA80pi8XjO_wwft*v41gQ-G0nKGjF9`4r037a!Hvoy*?xXyq=?9
z@+}aC7M|>+6vH>0ubYo{)`>gl(zxv6rF2|ibu!;1cgf3_qqD^*tsT~2R_jYbd|i*X
zp5~%4f02InSAAU_<a(1i3mpbl^3UVI2=cE^o;lbZ6>Sig-czci?i*OAU3`|pVa!0o
zk7sHEoQsK-=xlAQRO0+{B^i6O2_)C7xr?%)Ra#?ePvdW!m1vi=BsWJ6CGCV^2skXl
z={>h)RO}YJU-gb<It0HCu<Wo_@-InkHKs@@1+GTJaJ1SUD0+O(yv~u`d=|_n*gkfa
zu}VXL0pLwIKk>ntS0^p1M&c`d&i4{6KJRlI5lVjHp~-I)e`~sL?O4rb*mRDRlnM8r
zZzPB(4-r*ckazOyvp9q`WG&Xy+O=D_5GNYd7JiuaI*{)+!h<E}eY8?qN{~MoGR_Uz
zYq77;;x~fMp*zGB7-T)ryq7imY)j(;%nS3XLrAhl6U(sj+Q2|5$f{?znA*JUXu^*Q
zK9e?AhuQq)?)i4hAf9~e2BQX;1;HwPz-)^7+SOJ=j$e-SfhV}fSBHnA7WXADTw&)j
z(^&lO(ECH^P~lg63F?mVv`$@0tFCTP+;&q=J2^AorNVB&_tgP9^Ty7=hZPINU?O0S
z0zkZ_c!!XWV2H6m<#z@-b%(K(MjXKjlSi-ao;mnuh)UDw9@?LbOiWHiE^+hD`rU6x
zwGUn<?-(V^^NqN7ftO#3PS$`cACZ@xl{H?EBuEjK#4UzN=fqZ2GaoG-RedDga@qeO
zX4vr)MWa*ydLHUaREYTbr)IxG6ZrVXYZM}=X>O%NwMYLvf7K@LJL;Nwx&t*_yylEi
z5fO%slE(sm95{ayjDPYA>BVoecKUt&{hnSHEKJdGBCxIz4CXp^rQi}VZ5*{r`~35&
ze5+wn1^(|B#|I_gcrJ<WevS%`ftI)$Jk*2u<KM{!*-^(tMBKs%kIhM0SRyJb`{LJ3
zo=;Y$W@cs0TVJMtS&pCe%D0_V{7ZfA%_kPy9#&#kJB^<gaQ(8`Jj`Mtpr2~yS?%0t
ze{aVR9@oCtg<JLhO*uIZOaZ5o!`hKLgoWujEo~t&Of7q@%){seHYtWGSh_sBwlG*A
z0#tONd5}X)zpgF@{*&BzN{_kfy(&*JGct|?xUWmxK|*;u@3#ZddQN6$CUkm8ca6y9
zO|hy&U!SP{xbDh7{p<C?EGggVY2z%HUl7t!m}F0tGSy;B5){z~-@|d|kM~d2t@}Oi
zXY{`1n;mOiz!7>qw#(mi(a)r!$sk@Jq%}Oq!Dgz5_8`NV(*uKp@WnX{Kca(bh4X_#
z8%v<_Md**elEy?C?$y$gHL=8iApv$FtS;n9GqY-B%r$JaXf;Z^U;ChKEVXqU<(b`F
zeIu&6j_^t^zVUQTodSs03cG#Rdtcd%#HMMs5o0_?kz7QOx3y0s-n*u3YC5&PLWqL{
zicGiNeDh%NIN6!;%#pY`mXM(A>}=fg3>gv>OkH?1R91IZ$?~j3Yr8ufR>t&Tq^;Cg
z!1@q>^4p{U!L|A~Z#=cN`=|B>L2&><?mdrFR~pu3PA4FCXHAtkYA8W%fX7W;h=TAI
zEI&u$@--Z+_4|^S18{~HM|BqjmVdFvswiYU=q66a`N5cNG(INgcEUYtEjQe~U3xeP
zwzx3YT?I!UZ{7d8AkoJBkz$tJQX)#V)#5X*uRq?Bl}$v*8vByJ|IGDqN-FJ_KAd{8
zP)mf&fNi_+Vb*Tcu>*cf0vIS`No@*l9$~{HO$M_c@|Ha52c_****5}}{2X^tey`Vf
z=N>V^5n2=JEy^eigbq%`i$c)OYV9=+{LfaC_%-3v6W4B?<QORa#Z_Zcdl0M_7EHh6
z(Ta{;zW&xl;Qf<@wukcmSEQt*{Ea><hgM-P4(E+$-Ka>%@p0((agm?f@Azf8kd@K~
zF)L@bMq*0UB?+ri@`^;C0r&446kNzyj1{@(tl5coxR_Iz9wIU}g#ry7!KKWUv0!!s
z4EdrH;KF@~?M%tv&nNQI7jE5Gy{D%WBMh$1JDD}W+K!?>W?APwMXwRU@e!iYXV!eV
znHl6aT)GuI-<K+0`(S8H>MMHn%1c8siYXPUqSFtH48XLWX1^dnBmN!_-u3a3!W_~2
z7&M=<fTD^+C)@X;i_Q<1H`;Xz<ZpS<i=4DLMowY+{h(k-Vp_kKDi`0qzBIH6*E?3a
zo@Go?ycT#ru8z@+g$`Sj!2rvWpFdp$CURG#uKqNPduGJh_H_Hq8QI*mdDV$*4nAcH
zL2s>P*Bw*jLYm30LgE9w9mqN1sTMym*^z<m!Mj}Ml+hB3hNo(1KSC;a(<P&*7-+px
zb%g{ph!l-Gr2tpusN=DtFVgSVvK<gni(bE1w*O>9paM+-?vhZjgq~j7YtEl<NvG)O
zb;o3;$OW`4paQHLb8OTZ*8z9t{6=|O=yfW4L#)|AKUmT-BHFm_)YpLApz|YEC~f)R
zNd3N9R~O9R*$ss;fNy<Enc9|UsUuw{Lrj~CDQyrC`N}IQXD}A&r+#e`4e9P#?X6=U
zgtBozM7R1@sR_-KO)p)pyO4VlTi%BGCv5t1DEACJwz+3g%m;5vYgD)0e}ac?__^<n
z1Wb{Qo;`$0EM+|cvz9RLWwH>FIVY|w*8U;*{VDJ>4G<enPp3?=yQzl+H|Y2oc_~|R
zs%vI7&qQVo%xDN3LEMGer8e|~*Iio9M0uF*msxJL8Tq5th?{2E>L8il+t$(7)naR<
zK`vK0jnWgP3bI8tu&^RdXbF5%3SuFiowWQ_v^3<lh?LpzNw7uSfKTFw`2#{$_H9O5
zGe5aq$?y2vt(KLQxy(p6u)KM5kT0aa>sxDsxt|{~F*KlbtE0elPjq~)SDj}Rj^hgY
zq%*d4*FQiK^AqBiJ&yZG7+6@^jkCr={Er=vw46{EYd3d2NJnMeSIxu5E<HK~D+H7n
zFs2|2F7mm^c)9(sH2-noh|fB64lDMl&F<Dyg=7-q;wVzG%3I%_+)FR%GudJgf4!+y
z)AhaS%c<qGJb@D{(NR%nJg;f#a~faqJ-BzzbjZ7OthDFk>w$*>PU^(+WAdR9v}vpi
z3>76MEa%j-cHPj*$y=X$vM7ddpJ~n%z@a-<6Im^IZy3sZ`>rQDxrR?+IY_A|iNI{y
zRuW9oB%D5AoN%pjC#4m2Y1H`w_%FJdQ$SLNeI%r71tr|K7vUx<8or;1H}E-~3O2k&
zh}BFArcSk*avN`N6eRRiU#G%vSUFo&XmR8(3Wc2DiiU_}QuD&qRdc%5U7A^AsjBiD
z<lqmD{IzJ3kCG=>rN6fw&lr4t=B=opO~pahGmZ9-DnFP9SkzLw4LD5NR4W*b4KLEt
zD@Q~|mPERTc0Aqg1QH*|@RCZ3#EUQQk0#3Hh%&HhB++0-{lFHntHScxlXk|&>gML=
z$q=yV>JVz>8#s@oyxVc*>NgR+FU`gj0a|5^>Zy~5ukpJ4sTUHEVg6xM*_G1mX#8Y(
z$<RA@_pu=MvNlu$cEf9YjL(~+V`7|36}bL5Bq&G<WLnm^m+|O@99?(}J+|l(VaMP8
zZLsQTw|yz#+_!Q42_2s({@A&+jwf(%w&*V{g`vWS5B2P)g3?8wSzE*QV5zY1<U=$0
z>_4{L5s0}??YyWYlModXlN}nG4qe{%?MsXtc0Ko0(A_G@%R4M~yGaFzV`a+?i7i`-
zWmBK9<yv@qE7jH2&5mYRt9QKAxWC7UsYm1PUEx(oK&(pKv}L}XV_<LtRzyvqtai^k
za-X77Bdmbc$hCTpaBvLht_EEzS0Llqy5$mA;-2R+<_t_stSn<6z7|0S7k6Gsvxpe^
z4OB>;oA-Y!b#uFyBFyD*UP3dj$XS7A+m^?Q+N8Upqx6AJ(S2cfok7l_NKO2=DeALM
ztPOCiJa@KO`i|UzhZl5Wh=p0Ke%NK7CB>8RMu~>K60A8ytB`Fia^>~Q*2Jqi;-&C{
zP45hP7KJIBpBI$qt15_Ay7v_nqn(YvKmylh(K<G=JUidIabh2m`xe37V-&kK=F?tD
zU+f?8R<}_e7(1@(zfQGbs-nYZfqsaAcq`BWJeIz^A}H45qnSHREcxc@<aA*!1W`o?
zfgm*+6Bk!eS?L-;ruL{Cm(N{W33mfEmPqYdVIeI_^2xC@-NJcPWAyl;TH#l=#U2%`
zU_KA&Rw9xgEmb~1vcN|*4Dfk(#XNV`ZNi%Qs}p9EHgjx<qMxo<8fFqOtnMl>UyPdO
z*KmCbi2$eI6B>x_)%Elm+uGW^$gZe-xl{eazX^q{m_et62uCo@F}(-nK4&nXbz<Y*
znGTU}4{~^iTGJ*F$J~~bZr_GMu12Y0r`?PTs^Kjo@i~8XLr*6qFsC{-5r(JH_x^ea
z7ZF7uJ9@MrujzFfe!f*cSFDAPw>NiJQ1ECi>~PB=qskd+ZL=9MLgN0B+PXjES8!0{
z#O+kWW<1M`c8e=8)0thH*w9s0w$>qVW=)rN`s2w8*v#_JH}&4zxJI@n-I==vEXuE3
zKVnX(c<M(`Q@Hd-fF-2`O2k`PcvFjY_v0_!l9O|9eoeh#+M+cPo7RzuIx=^;ewT^;
z=>r}13j)5U-tvtv0uk&RO{(Nwo1JL0n_<!QHx>E31_i*G1M~1Nj7h3^v*X7}%QlWm
z$z$B(*-%zrGqyuv9`bW1mE8k;W2~K-+*r#CqO$5Ds}NkV#a3o}GzOEARq9TquvW`n
zw}w3s2}Go2zPf?OQ@&YIP)yA~-YOUbC#08^G^qayf$22>?&*C?!H1bp-9YOBRC`v-
zL%T7VS@3+f^cZT^>d&E}G?&{e2@W!!<I)EMLn?$e!b@5xj_9_VmBl_B$WCk4@q;|r
z5Ub6A!3;vTwz|@}aTf@dW&4~r&t$=2X&*kz4!kG_Y_1|6EWg}&HEqri2$h#d;`xR`
z<<@7zQx;aVk9s<C`XomJWECNIc7YO(1cSjSiV^}cj?E26$CoglW7jMyx3Wiv!TyBp
zgZ5i|1Qx7zI=!!GzCkr!Eh-t75$g2P4yI6R%CMDl+Ttgodc2Kee)Hx#{Ak0T7J&om
zHbdIdz@pSF+n3f?Citg|LlSg1)`Z9onwI;7pkeKV{Unp#8O$NgwaytxczMU?XnujB
z(^r64{cdn|X4{77jK~tK28@pEc26Ps8gUft-(%?~^ZT9y!CSdF=x<wnjjYJRW1H>V
zu&=i_nI2mQzLRS(r)Bwh4Y3xY#J6{jqI0q6qi`#Y!H7dY^rn#V%6Yw-$Q+qOO-5fK
zg!<{H7xeSP=o0)Ixd3+y9voX~a;&t|nGjl^%3NmensBhJ_f%S^OFGFHpEXXhlXCGz
zsK8iKr7i|BtV$U)f`Cileh)a(J7D9?$zd{bBZcSnyPk9|RSd=FE)N6CSsm3CvYf3R
zJ4Q5?SPy97K7c{Gv=@JNAwb9xF6i*V?sEhnh}_Ma52}QBl2GN2z);U5bEpU*I+5S5
z;PpZ7_StYT_rOl0wD&ttOuoQbRW~iv#$Ejye)&~YRMb&Hbu_53yTYqLofqGy2~mv7
zjT<)x*eeK0p5|P*+FH*rfR&DU=1`heni6^gSTu!&sX<q*ntS6B$O|L(1mupxa}&3;
zlRKpN#yspUzZs#Sh)Pc8#OGdoq=!g?e`vb@&rPzt;*&4v%<yc*h`~9fKSc{6(z#*l
zUAwdjtPqKclKMMn6E}gx>eC+3$yFHa?^l$U|2xccEe(!B3)Mgyz31+aw=eqpnGE#x
z4>hG1GP@9y0QTo1HCUJ2H<pp<cB3u(`@ggdpBch=peeiL!*Hl*1VupI?q;6Ca_1#w
zA*Jm|%J&u2xm?(<eedac3*2mGkbnm3wtQW}N9s;XV?k4VV0^Z>zRH$i_l3(PiCcv?
zv!MFOxf5!BTa{v?R1&omjErJ+WhNb+N_^ej-Mzgb+Y>WB`TN%@K4H^)x4XB@GFzwS
z<E3KybB8y~h9514BSRElMmk*@<en&(%fl~_wM<d}GbloG_3(B)->t~a<q;b#Ec+7Q
zzuSs`kso789W$uPgLg?6JNH8hS7<Vl=ARJ=3I~!;*R-2N(*vNY=PI|^`5gmcp4j0A
z{i42N*>gMi{}1%{qZcP5vn=N)Zl5l$vDx<hHGz~g8UVP2_#42WvNzwwv***F`>d^?
zV1Dgd|0}9<Lv@j%5fN3%c*M-w6uWv2EUm4t;m}kD`VICQEx!0%m3n%elo;`)0^VR(
z*HO|@H@DNiKw}c$*V9_~w%jo{zk%W3FkvpK^BkHEMH|Wmx6RLUAhDf^zI05%J27#(
zrY3H;Ay%A>kRx*&B77!)p1X8Qi86+nfkBZ%tCuW^b3niR*0s%7hQkyU^*JI!^H0C0
zKGEkjf4|6)Yk7<Ja^N%Y^y%t0uI<E9Vh?bdswhRq=e{QOQ~J#!T%_lfMh1=W$H%BD
zl78RDbzy)7KZ-G0L4^COz(N~<kOf*|aEfU$=&nl8bald@e;G0FbBUkC{ZU!uNeV6p
zIYulclj$-uu_uaaMMhn{qx+RB5p5hXIYMgQrXL-9=oSGmI}-{UxOY$I!~+2+)w#D7
z7g0e~an}!5!sPSAQZcQDi!7^DX=brXDagAa7A<<=z(!Ju<->fn*TMlx(}M2z%b0nv
z8;RwHvC8T7fQJ<XdUKholn{I<3cpkh`GF@pi(F6Iwjr!rR9_QvB@Ft{^oEWR*I<=t
z2<nuvtjvwKFL=o1Ld`qfw6r=?iD3R~D4gEksz(W<{e-W7>=a2_z7m(a`~gbSxe1}J
zwugl2q#(6pt-fom#(aH1wSOAIADhi4edx2FduFs2VWoAWUE8}mEX;2rwY3;&JiI=x
z=bgrCPmfH<{F|gVwE#CP@R+|;8?0Q@e#<}o+UZ>8r2oSTmod?2M#pwRglOIOUK5rE
z4s+2?OiWCK)n0^{hX7bVL`4n5w+zrsI#S&RW{}pqNg7WQR(E5%-ua4g&Rl9z<$A}b
zSCq@3|9UI<ChP#2j0B0WVU1g2BB722UMwN6u&StOlW_S);;`605tuL-XbW5?C~vtw
z{sy+-pzP596kSa0bZ9r0f;KYxy>jBRr@2F}Q^C~Vofod)#Dh@KqU~8NYV7OM)6?^E
zMM&oxn@v{lTOll9G%sUGb527qWhlRWL`b0T-7~^sK2?E;x%nJ18NlE-xPN1PV&WwU
z74Vw0fxf;IU~uwZj%8w9sMqz2%fCV(L*~`5qfE$|so+D>ZpYlH^QH8-xYHlh?WR~+
z)4NuaDtI|MFg&DR@Vb2>W3WT>?UFe0u^u#7xpa#VcE2x8GGG$LOH^kbpoZsKS1_Zv
z5okM3oQf&;H9=~XTUy#aM@6h3d|mK*MXaFNb`TRQfub0Ot$YW&-7@))pPwk957M`O
z4KxFl+iDLP8Gvlf={_<|X|1vkA3oqal`_Q_gr~KcjerYP?<@fz_@4ND+FI5rzXR#x
zeTWb9mH3jC@|MkY2%+DW8~4q?n`s=--Nu~8Mh;Hj+Wg8WNPwovTGXHAB5UqD^hY@D
zCNI%dTu>lP>88)tl+Ab81_6_Z!92L{*;X?pBI2f^(h}PNYR%GH%|eWL7mbZHPJvXK
znrl56F<ka+YPsr4FA49jccRV|iZpg8$%qe=Ox*{|cB`!Tv`ZOS(pb-)eeFdorqWGQ
z-gly%r;}Q>T?>a{ZhSVoK+@WPAII>5hGjbyu+L&u;|zw>kp0d2N*I)M`e=np;UX|w
z4%-0;wlUI*`+29g;oQOjE_SpNyPku`S##m;sDqhBc)<J^2EtQp>M&}szB;%OO~|Sg
z3@T~k#pE9cDp)IE@`y6IFTI_)Mp`@9UFD?L8mg}oXc^yNnzs@C+On&N^RX!mbzJ}B
zVez|D+-;NL%WLOLG1!47@1zT1He^FTB^nb5hz<vZmP*or^W8&DVVvIm(usAwA6<7Y
zPz+*yN0E@4r<ELO5Wi-h$n|(kWr6ozLyWQvjp1Abs`a5zcd57yZiu&0RWL<8=v?Vo
zNNdp_DPzq;-||*3#r?1p&pIH5$jHcCl+Gl4qg8O*Z6rJ@B=x=~a*}&I9Ei2Bj)0Fd
zh=@Bd*Wnxe(o1RU%-i+2Qn$9=ym3uX<^SpH%EPJ7+kVS4W=x4*S%!*AX+p|!CQCGQ
zh_PgMtdS*KmMjrYyU@vG$u^c@29YIumQKk|A{>;Zh;Z8M>*4+UJo8-ddtL8!y?<8Z
zIOqGjzxQXkKX)*TIdnHYuVOO6dVSf15UmTQm}iZQx@#J6xl&NC|0$=gS;NCR94X44
z-=2qv2vrw)S4YQUV*V+HcLyn@*6`0`u3!2sNCpoIr4J>*#qBk2Er%3NP`qCo^vGm#
zpC1oB3&DO3p|Vxozw2V!V@C70N|0Wqt7XW1>S%~3u+Br5g&%FkzC6FJn|S9lBsuxS
z{We9Knwo_%ucuP~!v*NxSf5d*_j)#1u6+w(+SYD6y4Z&l#T_SS+i!C)=8B)8E|D~E
z<ofbVokt;v#^B>s?K*n8$|5_&jrG1)!M@P*TJf+Yy0PuO)OwsyZt`4mJE-O+#lH}A
zKx2KTB3Gmi5khCDdJS<a!haKZ*uiOW+_yKb&ccW2(CyOaPVo=rqB7$4;qKj4YeD--
zj2niL95er8L1X4VR#q3uWP2MMG2LtK#-zW=Ljz8#8z6cNO+fLX|J^J_ia%P)@|FKr
z0?)tiQX-kkEN1jz`V%tw7UBh5{-g-j%QgMZ!Atym4l^8uM&rS?V+JC3doWlpo6B8l
zeVKb(lT~YLT*}-fqYd0WYTtR-Kt%lL7gIewIqF&nv<WhK4|t|1YPi;+Syr+`-7Hk0
z|F?sxDldfAnm9dx(n7*&76^JIm<I4Oqhn&~+Av@3_PCCBE1PRIv<74}c!3VmEgT6~
zqSZz>HZ?W1v|uP*r0m`_4wv0SRX~gf+R}U;j5ULno=cFA31-=Ez{dntjA8C>X=qrS
zty4wQotc^0#xyiEY)z0A8@z|73%hy`9z59hM`->^S4%DZ5BWW7KewFc6F2QbtBhy<
zwe!g>Hq#xWr=on6^@kH&@|HfkQ!C*z*u{r_y6S|!HOOP_q%)Bnsd;}DVeWL#0WqYh
z64L<CT-VzCo?e=KnCWookkr1P;^PaR>K#+Xdni0w$Z=D<$hyc0^Q{k&Ny5ZTun59I
z`5wf?kOj2NxZ?}JeWP^1EP$|z6zB~Kq7<%e8cOvt#CqE^Pab{Q=So_UW$_00So$UT
zkHxF+_N*m544AfYO*^MXPC65j=vGPr-;E8ILBQt`2#ZWSZ;xYmm7_BNCY|S;zYJa;
z;W62;HV~35{0ce@>qESGW+g|`-o2u(%`}FHCSSJAQLmfWSU@D08uO9MA&M<syNm4r
z2a*E4Ru`uPAFwg&-UHA$d-Lp3E2AWz!XbJV;QTXJsX(z*P7BNppF!^LMoc}ybK_3<
za6VioEe9f~SOu-E$X~IV000F~8Bemba(0RpSzW+BW-Uy?66<%4yWF5fKX`zVo^e1!
zn!JsJZcgm&3SXHd@go={7tB~X)vF?KcXzp$z5Q+@gChBafy*Nt`4HdG#Udu^;%f#{
z$dXd53m}A`{pnfrtdQC##6z8`s_MrW7(jrWoE+1KV2(~T%X0tF6T^0%O0LW15o^}e
z3=0pF=iT)I<Mk1+DG<xi9bPsEYj=F&;o)(so@1arNl^6n!XU@wLfIe7b~T2fP866#
z^z<lJPYVq)Bh%7UI5WN{nrL&q(ENeXQJ2_FpZhM&yd*L8O-;G1E7xZ;m7!R;VqoO+
zeKw5ktEbQK?`L!NmSXP;_2(}-K4#b2x;R9O`y2laj=HC?>wJrM28rJ%Ztuy8kE1N6
z1`j@{6l6of=n(14y`ghP*7=t%?@X~JT5m>ISFMFCzFAmMi2WvWS-=uP6?8ICLbnx&
zT&cs2;%3EJqtox4d<gL^LkRgF!{$TF##N;rm%aBw7Cml}9$}}FfE{Hnpl4WN>Y(ek
znc<qrQ#7UM>-QIs_!Xc{$76>}X~5(0vPla_TH4a@G315ASDk0C!>oh)x?OavBRlSI
zqE;oK2XD`&epkcGh@_NcSD>*^e*nGS79r_)q9T*-+@j4tGJQM@Df)seS3U9Fu`+TR
zWR--lCuT-Q=W)hR5c9d<Tf)3hMXIp!OzGN{d7xwFUM0OwXHG&cg+XKwPfZp#so&bz
zn1o)@c&p9!oo=?}YNG9*%n2ruQH#gHn00`w)MMe?SZBs>OX?58-&m5a9kcN1Hrl!E
z0CzGv^f`re75=10W+mC9=V5-!y7h5)>DjkhXHw#F;+3ljUQD88a&L`8*?~4A6B9>z
zfI66oif!sl_d~6QKbUjeJbrrnt{1Xb1lq-;P*luHNL&sS8*>w>R(-=C=u0o%>(y9W
zq+!O0IK^)x*|OK{#AX8ZT%C*gd}AVU62ufN89HqNv%f!y2YlQjt+#I#dYf79KW_|P
zK)bIOsa&xaY$!%_NP)a$lE9!=+>?-kZnC}Y9sUbYFsNul9NPkO*0gL#3R{k*;NW&j
zyT1S4sSoS`!rb97kp}L$s#`gi$Hn-V17}8QYU;V5tu~DoCj`hf`BWCO?-AQiswmOw
zXB4IzkG}}{iXBpSAm~WUOPZH{y1p&gw^O@J#O=?Disji(`rAxhIxIm{%tH~N0_D?f
zE^7hmBj804IwInyX=~41JC>+0i=O!@y5y{ZgG@;&o9OT9-)>2s&UP*F-2T|({q-mv
z`H3Vy2dJqpz-Oxqv0?yp(GNjeYekb0E0N+zO4IajJ$@d(k}=PbwnW9HCBkq8(Nux?
zs0c6pH!~#<>~8#+yb@J5luU?IuFhW6>8O<A{{8yKxKXjQFOn@(jFhIx&z_AjB95MQ
z*K9Bt3n)C`{n|Yot7ywsA{FC~fPxy~0Im??W?rpN7{loT1r0xGRyt)#3wnII7ffh*
zdgr0{>vepBPQE%{MxS{hwAKSJ2G_ve;KiLGdjl@OYXx%XGsxn*0wX_X2C`!5tKD!%
z5Q0?tzU1J58Uz)2%ypY2c{MlTHW<g6Cw#FC=-!;Xie)f;RtV4BwH>s`Jbu&#?47Df
z@_q9+@@ejGZMZ9UWWM&R4O;pLxiK+z!H`8UJ{}*KvYeL7qi;92h)Hn^;)Zi#?N#V#
z2d3IxSJ8-$iY&1^`H54(#2QRiGw@;3PV~^J>%2Q6+MqlUv-s$=)y40g#B3V0q-v>{
zCO|j)VPYBIao<m#=qgxEx@{AK)w3bWt9pUa{%XURT0Ep3um;&`Wzt0VuA)Eqxq&NR
zgJ^2;ID{f0SwE8c<?!nrzV>vwSxjR<l@GN{Y9;-|Pf1WDU~xIx;rL1J{ml{jT&_E`
zf=!9h4qI&I`5?WvSl_dNagvQ;x}V#j`G$nJkwB9A1;T}Ql)f6a$G6w1E2}zqp)w~y
z>EUoj;>9orf*9@8Sz)+SR}ygt<-E_lKXj4KDwS?K!IGpd(GM@cU-)OodxQo}Aml0b
zs1T(QpyJQ?2!_u^bN7?)7Dpl?XqQipr{35&zs&*SM>?TCwbrwX{=wz{5aY8FeC+1m
z(05ehgJcF&1bGW4VeodYUeNsyd7oyW_Sb+7%F7*8+MX+cwe;H(BQn1Io*`D%0rrEz
zUoNf4u6hGLzB1gEo-F6_?pb39jcu~yd^iz}s#yb4vN<psZ$h9z$$$M|p2w@U^yRK}
zTNWIVh+;4N)hu}Iv^NX{)3`>$3jCUX79G0s^(3Hh8w{#tgyi{NgVA+bX|-p-mZo`6
zkLS_Q#rcdvOTRr<#>R{bZgH?d)G^@&Avu4tSs-}C7q{W=i3$htM<j1wEa^4|hSEq3
z+mZfue6_G8ul!4eGNYkj^H#Q6m-L1{P9Y`n{llwEGt%xbC58U=q{uQBM2ob_NCY)d
zC#dK!=h~zR{hpUCGy!Q*nBCS*S2HFIek7j;#xjWhZ1Ar{D@n7jj>;>2@I3hf+dZ9s
z<D%F8+Zz>VwEIH`@Zl0gq>LW4tV<2}6+IqYpVRQiS$I6ZHPr!nS1`GWU353~1qW3g
zwlVC&A?b|ZDF4Q2fZMKWy1C_i>VbQAQbrmHxd${hp7tO(!K66;1H(>ZTke_dhSYcP
z9irJ>VOp;XWXjkzzC-yw*V$37Qogw^50Bae&L+fSM`V8O{`KfmZ(7v2Gg`V1H}7DS
zjV~oV$;zyWB~*__&fst9f2x*IKisFwRvh-mFIGO&MnA1s30nbJ^ah%OBt=&=$@{fC
z^@=@(vP5xAVuf2<RCOC~U4wzlcD6MWomwCEgeYI^*Tv4a>mUk>HdOP#^_8K@r7?3(
z1y^s}iv=1J?c;A+)Hd`$C;@2e-g>np(*$JRluy+Q=9dqLp`ryLN`+|nNQO>MPKIyy
zbKoHvIyqHa!s*l4KgXAO9M|RI;Uivi3!C8&{RfJ<OID13<g;FF!K0t~{v}O9IWo`6
z4%r9S(Mn|q85tWp@Mb!RWXI+h8zIp>vcNO$f5fNtaWG<&otY+hjZQJ252okJzrV>1
ztA{tNwL$YmDH5=7A$OTft_zquYiPJ@DHj>-aGU6Mu@Mmcc1nHh3i$0@W-lPz^0yZe
zCssZcDXlNPg0qeF#)V49t8(kr|3%_Mg+u4L#{4Lv#_N*`RC)_2FHRyblBj55;o%1q
zpx+cgtw=QG*E?2Y2Nx|YMpgy}m!5yeXP4LA8to^*>o4%xseB407M{brfR)b_SQYwV
z-Xv%m0ZV#<{jJ}1H*bJCHNo#|TI*$dEG~`4nCuWzQj8pg3-t)ItE)-T>loI)=j$}c
zqrs2pKLOlLP%vEvx^B@6h1+imEj>&K-@L^pfSCUJokpq*Dd>2c#W5H-^U|;1QynLp
z^w!nD)YR0-i0ARKK{)SB)pm%3*XSSs&Se<k)!`AI(i7E6sIB51PC0d^h!}`!R5QNj
z(G)ofq}>RzU5e`v$I<;k(9YAAe*r}axSVhLc)u_9v=bpGNRkqO#U2z=-?uFtr-eU^
zgogg&_vJcl3&hK6FJ$n=gywf4*ccEVBLGdyZy)Ns?%ygQBJ)PIwL9*y10Qf__SB^x
z5+zDT|4raaI4`p*N3$(+WUD#WR3zE|vLL=Nl<>#pHaV4$19On@g4E?OFij%il6?{~
z<L%Gbb`NG<%U_Y<DJrfCv~M*flA_FFjD)eyNaDy5i$Xg}I*UdsT)JSXT5M#JyW@GL
zdF$)AoZP{azz-t1Y&FZ*tuj6oo_n6AmE>Vb>*-c~ZM#nKEwLJjByDuUuZ)Ut_RPAM
z)1;b|!(pl;i<ua=rmWj&Xm|#G95^uHyJ^$rNx~NZN!h(uxX3}PleWy(q}~(Ll)>K{
z{GF<jtgSx4CT=B$<<Dkk4ZHOG3C_DqOV~AfG?JQ;kFHNaZHGlkwsTWtv#g7A&!eR?
zFEVtK&m@>z6!+~+yh!!_NGF+}5TW>;jpkCy9hOY|zXC!;(w(y=DH{?3n%jVv$|L7;
z<O)W$dYy}1{2fWU!dm~T(aqOdZF$%^8A(PbtV*$zO1S^TqZpuihE?e#ti_;{db8Fa
zl$qbV^YW>ijcCe_c;&pqc%KAQftY4@JX<cCv##usDL*$m;#d<w5p|t+%UN0S{<Z+?
zBuCL+o|?P2Tk2&7;sd=|amys8=IuR&!DcMB*zdWoLF!4B^WT#ozAvi7>wdw6ewswF
zZeh3`!Sp<%8!$OD+$k;W5-rCV#rE3<@Q$}1VpvHndxqU?s>tVaD;K>&IiyNxC08Sy
zSVwLONhjx;toLyOqC8_;Y)F%$@UojP7VEhcbdTBz%ymvDKj2O!fc`VK#`)*7g7YM&
z$mWE+vu{4#5nM&M+EsCu7+2}p?X3>qb%?v%koZt$%)HsO{MWC)?!*hVXR>zJ+;tGU
z#?0m@4eY)!&llKy8OP9Vd>zMYeLd{5yDk36Mttg9Hy!^={<z`HkP-f7lLlGmbe_t&
G>;DautFBl8

diff --git a/screenshot-02-notebooks-list.png b/screenshot-02-notebooks-list.png
deleted file mode 100644
index 8311551bb84c9bd5bf152bf0913d6bf6790bfc72..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 75293
zcmd43bySvJ_bsdf(k0#9-GX#WgLF!lfYOaf-84vdcY|~Z(%mT_-Q9h*zQ6Yy<NN=N
zbIvu!!x)eEb=Tf|tu@!2bKSv83R1`j_y{jvyg+_0Ew1w71#~6&&j#)l_?Llo2Fn*O
z&|bV37g2RhJy?Qq#grm|Jqd1p2~YOzwTnwg^E*rymC_%1KgL9(vF);$^76Vvo55vG
z8YLXouz1~`;^?s=0nsHTdtPx+OmA&%oo^f*IczyE$CZ?lLd@3f@9kZgpI1gh2iK<h
z-8aa;%bx1Bzxcna5fe(3{O^^m8}gFu?_KE1%-vt3{@q5KU?eR4@3vT3Hd4xe_YLIX
zqP_Wd-=+!@T=0Khj_&{V%i)DEVv|s;t^22EvG$#*{r!Bw{{GM+7lz}LlNeflhg4F1
zO~}F~mcof>H2MZJ=Wh80<_u>E!S$8s*y`jALWtlQoBChAoEjRgDl03qu~i+cPXs}C
ze2tFI3Jwkq2x#>6wT(DNM8er;366>E60>XV!xfoNDvG9!HsGXXc2~!#+Y;Tr$j-@;
znEAX?;$mDOk{Ac6e8c7@zFqz$pSrV0hDT_Ojg1Yw(ag-uH`*Le&xf=$BADpp@}@|4
z!fSH(?J@6PzbIZo`Hkywb8v8Ra~sL#qQcjm>{vK@QLt?oT3g%L+Qug_5$4%6l=3)K
zK-MeYEBK9ng)bA2w1RJX3?3{-GW?Y5`dM9QNaYW@Azi0@7n5D<p2S*?aln_YnMUu&
zK=~Bz3;_>jdirXWJehC;p1ZsKFFidyYkH0Ln=<P?^5J1&3K@cG#j5X3pHg`p3KTP{
z%!c>sY!-9%MJ+4}gL)BZ3SQOK)vehStCje6jOf(c!leyl8wJ}FI?0eR($j0x&;|Iw
zehFt{WOU?$$ch(<4I;zCOX#!uJb4BN@{0rr3ePou9Q_uQm**xd{8?8wH7?GyNA%T?
z1cQhjCIKc|nvhT&p(FH)Zx@1g*@KC!CEh&iMiQCn`VF;w_&+8>D`nu&+;8F{f^m}I
zm$>bg*+0z{n3<V@FV>&Jv(n~uzcuo>d$~W`{@f<qq9d&wL3BTzF3>D~NA%9QMKPnT
z{poJ->&r)&ygwI~({^gD?w8QYGd~s3#mYoP$fW5sb#!(q^D>dv+Pn{qjg14oC*_k4
zsIc=uEXI}vBT4VZ4Evx`nktS7p!^_68}O#KQR5#Kf}TIVBoH9lg0Hc9@s3;nt!g-`
zhJ+vaZ+5aN6-);?VIw|{={D!Xg}&&Vv+Yrz!-eVT5{<{Z{fGPOV{Y5uuG7WSJ`bk_
zuJx&@sc2Q7<|>tyuoJngom03E!ER7MssrWdNbSXBI%a0@f0gsys>S&=(4uu`pZxiw
zl-?&Eo42;U4h7|Rc;Jcvzezs#r)u7K9cLF4m)YzH<KksvqsHaR6c!Pze^qpGI~$wm
zinMBBj8cott5=<H)~%9xYqGfAK`rALtK{V3wZgAUwQ9K8+3io)+7U3N`Hy7{419Jc
zx^K@mb?QDfrgE4L{Fula6!3n)rE3rk2;sC@csOpyvBqB8-MyXGST9yBQZLo~!nl5P
z#JqjH)QoD!@BMIdFz)~kjB>edKrjYP-o!+c<L<%62EXORbw@`>Kl4{i@(@v&5KOwO
z(_Sy<<K>(wwEga`M79j$aAIQO#E6K9bY2H_a6a{P5x}0Gbp>N+=PfmS$$1}R27`!w
zG*i}FW!%eYpxy2bWw!RK&UR_5eg)g&O7KImAGW7|Jd=)EnfBxAFDY^YVNQshai{<3
zdan;y*snv#k`fY&i`&E5P(xFG4Q}H<s>pl%#kIuiOmo-Va%nf||1M{N%X792s{TZ%
ztPAG*dGv`-H+Fl)ep!QGPgd0*1!|DEpUh5fe2E8YtKS#ukv*kwS52mLd76+M6P21L
z@sRZx98WW~&a!Y+^Xj*{4-X6!i}<}x<~ZNz|IqBrB>t716%h&P;_U2T#V50(!l2$(
z4`lM*@O$^$Gc5bnsHmuNy=I%=4MpI|M0}3IuZop(sN34wT<OTkU)kxld2T*E!dlIg
z`cmOA-gu3qHqxn4b8|bdb=fIDMG7e>I{S|22&J$Y=T}uJ&z9@iF1JkA+qDaLTp4*!
z7psL}GljrgTkjt&HEU~Y4+K;(o0}IX3gT^SZ_l=QN%`l?C>P3A=##wT+p=4%8xBCk
zalhR2yHRTMKiH`>%pfm4oUf5GF~NML%D=1)EAOfiNi4vk*Tio<GxUZkB=kCboU|1R
zcOM=Bp{k|^T??t?X9znh$PAXgBWRM&Lql>f%FKSl!~{O>P@OUJMjIK9P|w4kaM0S?
zvR$5=ybH_pzlJaSDLoeA3aE}Pu)oYQG)aYoVwc}yEbETFdnoBBf_nYV8F$$uy)CDP
zb<F$z>d=03fLfrmM7PoYhOgY9y?lsH`$wNI)V=qe<x$ZG8U##QR>RJE$cq166U+6{
z(n_V_qh0$WyWO&)^-L)W9Nf)rLB{hvW`zNXpy%h+&Xv)0fp9FMx1U+_?lRG@j+RQS
zri*3c8C%`X^Jhw6QHizdZ3VFBnq5YJH#&fT-QC%F>$p?d(9i&4ULl1WYw+RZ*N>tP
z1*DnX+EJS+Z%>=mN}f7W{a~-(y?yI>e<+^EscJuzII6TL^rYEfIoY$bQ+V8-K|Yn#
zIx6&>Egt*^B;sTNkD2kDAe|o;zHhJgrb~)uMd<J*p<q$?U5@x=Y-dV~Tvu?BC*FO{
z2pt=9iB*a6YtST$0Y~{I69Y9h_Imm^+Jp|XjAiRA!_^?cZ-Tgg&#+5Y&6AR5E?j>M
znh`^1>E+O{f1H}AaDzT^3^XFfbV)Q@@z~^fgf}D{t`?n)8=mL!Vh}4>*5ekkV`O9`
zCqMkXjnX_YNQ%}W$~*=G6b1oz$LGxi0}_5$&ALxXh&aq^p&V>%@nkWCA6lFb+oh|G
zdr@A$ex3N)*_qj(jej{##Y+i=yvM*hX|~dEou&O@Z!8NcxkA6i72QWF9G@;@VQ%hX
z_nfVB9OTLbCLQ&XLfHgncqdH;YpR5HhiwH_)!5+Ry?wE`*uha!53M2<sw6V-PWWxu
zo|+#%VBGE%DpQ~kzWsc<mPfBv+)|4|`&={HbFkEGw>5-!6EDuKRH3gIZM>RcztN}6
ztCuSst&qk?t!K8{DRfd>Q2p~=rRC%n4vYTB&hG9!k89gCfg~Qgw$wtk67@8`+U|F`
z3UuQ0b1gX>5hw33Ffmi3K6aE0qV2{X!1pgzkq($v&KH!x_XW7Mcc2D8*zIlbD4D;^
zGTw!5{=7<5j$_6ov#miyf>lv$w5Dcq5iYKoh=xMWDC)lu^6{O3&iw_En5nI;ez9sl
zsI*jG??*~i@~YVjl(Iy%Cs9cRg@s)=2e9OLtfs`z55Xz@kdMwqH#sw-{^d&*xf&L|
z>dnQZ;m&4-cCEJL_lc!umw=|pilOL9m!seE_-F$G%`V4TTr0nR<+y&CW=p+2e>c#l
zbSr*C3X%&g(|m2;s}*fnJG<lQl3BRRqC|3!LX8UI2|wvKMtr?g@X;1&Z@+v`mDKMW
zKE&+7{1Jb<8bq>LH9VZcGpZ>J@o618CBHn}+oPXA<vsjRpkSD7yVP{dMylGz@X)*B
zC5%fza6O`epoy;Di$tcZ{&6r{m$?;BRD>k{Qv%r(54QYXuUf=R4W}%tJX&<$H(W|d
zze0NAyTHy`$%jkVM`5VeR{<DS*wWXqh1#|BYs^mkA0(6T@bH{gJ7G5X2nh*ell1i~
zVukw#2N8Yr^bptV`oB{}6EwP>c0Nz@JFJemtavqh-A9o4q?YGWb+;?;lxS3hU@=f{
zw|GBlKltPp(`qWI)lU{EZVj4O@UAQiW~826UW!mF@wOaJGq5-~gtoYy4@~H{d*`)m
zPM18-e2?d2)TwhEh%Jht_A)3@m!~9_;3i%FNr;a@fAWmawO3=@8?nPb2Qsj!xIaDK
z)4X|(`EW8FZQ8Pz3|XsR!(Xs{{C&i|B!7#XT!kf4>svt97zd{Bm*BL_LNs)2#y4vL
zae1^msjMxszx`*bjOn|#xZb+}NaaA|SOGF04lZut5FwWpr%?;28CJ}VAl!J-iHKUw
zM~OF%Opvt7w5P|$#vqWBS1^R9pFdX$xt@GfQi|$>Mnnv4bl4_cth1anGc}8&S37ap
zpRqZk>+}P_i9B0OQn?WICDxwoS1V>uP>8h{_?h*Zc8-q9#lLFWue5cALK{C_?(+=9
zF@#pEt<-+fm}z#}SI=s*9oE?=o$|FvU`|V5F$naT`ufsOR8&;_>g!vjE%?ncIETLh
zO@>25d*A=_^8#HhDAw{Bf>5YQMrvCHdC(Dqpxscu%B?}lN^h&IR!~ZNk6Tt?9`(^W
zIWvQ_oN>a(UXf);vO;e1#y)P1sVtfclbf2{7@x=X;e1rc>$E!od>6}!-1q7H&OxXo
zZg&@!K`2Djis`wHl-Z<??eyxU4W@%LAQHlH*?tenIi;@_D(8U2y;Sr8$3!DaRky~B
zNwk;O!OZ+@FWF|{M~~R~t8|;iI#7-807OPNjbqZmo^J4dyz2^H>94`wpDMC3GOBjJ
z#Q*SNGJ@#cM?*@X-iSv8JpQTMhuib>t>Ip|&9{7@;#Rb$e|~;~A|N2>!i|oOE^JpK
z;@knX=NC599pWk>J;+(z-JuBpVW}<;30(5gqERX)bDrKG(|{6d)*WI>?s3D)On?4(
z{b8ZrZhL1Zv1b$ghlgv+PqQc*#q@75dc(uRTn1j}Tk;@F%Aq1S9pU)j%_$FeS8jT^
zySI7n2B*5Mb_Ps*&qhK<_P99_DN@P%F;hsz&;M}ifQr=n2cxm6Dc4&f{_EElsHmu_
zxX8o({qJ*;=~>R_MAI}U@Ag>R&UeOhZf;z8czEWsSCH|bjj~1j?%<vk()qc(n)b$C
z@NYak-n)IEAt%3!igUy~Jza}tE`M)a$bztqu{z$l-~JF$$&Phf);;(lEp0P#+PdF3
z%bkB_T*5uoMlDD!+vqryIntbC3}<GGJVQcM|AV0!DL?9tkXI&2yc7$6<l9r}6&g7f
z%E@a*LQac689q<Gzj3lz{3YR{+U~3l*1CNxFWsw#qA8@LA_$!TihX*#f4*5qwHJKV
z4l)&a1ip~B==G661hD|0>A*&ZpAdRdAZ1oSK;9W<>vTB5ERXe!<L-p1SP)9H$2GHx
z{(6rWl|gN7t;ENz{r%93EwDplh*D+A+%{)mN1YBAkbOKZcG^C6*vVLqjEvNnkN$l4
zvfhS*h$sfVSgxmYJ28~RAsIpFi)(-Khm3&7b`QYmVl~Fw@4x@c1u&Q@g6*~tb)5%T
z92_;edWRttG>m~hZkl2p4JW76KYvIc1}CcdzyFM(QKZwJD${K|107I_N?viOYzLWG
z;N8u`wd`c8$EZ>F6G5Y}B);P5n4AE(ty(ldhDs*Z>URTti2Y|JJ&l=_6`{P#*RZf9
z#}+D?`mL`=M#{lkzH>fso#;k$L&3j*#|HUTJBC_*FrF#sQX%EaZwt#B3x`?v(^3=i
zo<XzoQXn!xb7LI1>+bH7Kpg+!X5H~N>*VL_iXka`f|8Mh(Jc4NWG?HOy86*bWirZV
ziJ2HJkuLAm)hxJ&lb`-bFvG)4=!6L51H31GyX))MC#x7p{=uc!ceRSSdzi`Bq>PNe
zXJ-|6UcF{$ZP7nx4bm;Q#u{%;9t-x2H|iFyy2Dsa-fmBF3Mn$f?x%62;;`P;`w;8m
zJ;;8@P#iKbJ047GP>;D%hkdN9uID5`M%?a4KBVri6UxefZpQSme)(x_Q;U<F!~Oaw
z0M;HxI?h5LO7a7M5*7Nb2b-4z9Ub}%k-oZwO^)d3(N9m_a6e){xPulZENJVy$JK#C
z-RD>|%v_?*99otNoMeZn4XtKpWN%3?PtUYe1Pi7}+)o!f$~#5dg9(bvEoQ@3xq<-S
z_&SC}kNYGvH+bG=r&>(rhu7EFt5?HBpM>E}o(ikLC6Sl?d>h9{+l}Bv{~EoBbg4t=
z8l0R&VWT>`6+v)x6-^BvR?zRs(q~hH`B~ZLcx-?3JMIX}EH+|qgtR}{mu?YmTtq>Z
zn_X6xTbtv=0<bK?T0ML`FLu~&G3WW^jQ!V6R{fF@DL8_KPnTQolaISU_kaUu(B^qN
zYY@sg8rlp<foA7JF)=YNoHm!^Wtt2m$=k>KYYaMoMq2q@Fr%(A1Rte%ABTC?LF=LC
z@ZQrHppt``GT0u!4SC&axNJdxPgs<L5`*@(Ezev80?s)a11#}au@?8uR?pjo%*>At
z4jd0<DtRCT)2c7-Q~+W;9M3Usw9gAr0PvztG=SaNxvq%O;c%f0JQhjxPQ@fSV<jcS
z`_8K;EI2>EWrboltSaj!KM%K6-DFo<tY?NjJ4@4B^7k2Lqm;Uy{+pLsPG8V%bDDN6
z62tcj#~<q8JB4@lu7&{bVRuMH0WGsz2>6x{I5-I|pM7CfNi8{P4G-DzRY_ABR12fb
zI1BrK{v?ePJ4TDncl`X3-YJt&1?;_gnRfp!K<96KwdfHe@y-L@AY;?1nDj-FojoWv
zc-=b}DCli0f-pJ(&4g9k=?5;}@HagX@^a7Qx+003pXOLSJf=-U(8iHT1lcXQk2?bp
zAup<WB886h8a^BHVpQpFkLW!<yy=Y-6BS*oKQ0va1Ehh}W$gYNvW17c{b!UTi9eu0
zqrpSY4p<}jITs!tUOf2i5611u;i3x!GgZLD_T~iLzDc{*3IuNSB8Po0BF<CRkU_)e
zm!f0T^7w<iedK~ZPr4>}Nd!|NuQwmCnY8;YSa(arW06-iEOsZR<LKiucpWA-`VACQ
z-_9&8t^euBA%|UPzK+VsXeS-$S5Lz*O%uPzWVV>A%)O~Ccze>Q`CCy{&4o{fH-v~n
zLZH42X3I&#^f}jlq&Q&@Q}$Y0ke<wYm+UGWUC2ez^W9m<yQv&nsQqH<Fr@DlVXsQ`
zd8H3-<>YK>J`JfbXjOBf8*t&I1O{J<b>j^CTiWY+n;6wcV%CO+xX_ib``-m-f1LL}
z!~PPKvDdr(en*MAEmPu~L2mlXiYlo_VNK1QAC@0bi1{I`2lF-N(w>i?4Kqpbyqogc
zo#?V2<pi0%H=;`x8sH6wyNlh#w?0n~BWca<R|jNvbbt{XFsWd_TXMnJJmrUU#4~C!
znxo)zW*YwL(R^B{wYHuu7b{nBm@Xs;(W_(pawxq<CPg!avn2phXT5DPBA3lllSHEc
z^*1?_4gV&C=_aQX3>pQ5%QUR^n>7bs)ze8uAz0`Z^u4TbuluW+ay{9?!1zbNp9HpR
zF6F*op(vHVk_FY3X5vZI3rlySB<=(B_2FWWXJ)D-t!9%Wo!rIFxYy2@q1)L8lSX;z
z)}g+mY&r?#E9<T-zhx9{Z*W)`5)u-<PF*bFr-7K>qml|qIt`c5u&{;J`=6~IsOxKM
zC2A#e)utG{nFss(^$y!l05+`Zfo%sMCj4PIiNjo^#teBhweip9C4Ldd5U=|M=68F@
zBw%W$iauCx@&U4R{Q03~6?{riS`TN+{9<CRv^EKNj`|W<P`zKU=(mJq{n#2NAakNK
zIJ>%<Z-3rd?>)M@a<iT)R4Gxf{qrZv?fgl&_W8lVZ9F>ww0w-JJS$BucNdK~EG>jY
zL;%^SHJtdkP&V0b_B=gGot%d<n%-YA#VOls>BOp6n^et|r7SLJ7yOVcTQCYbyIy&2
zXvDIa%*RV#BY5j|_o_`(Lu1=^X@Mald8cgIKa@#Bt+Am-(f|0_V5ZXDkgc|L&PVE?
znJGD5y;~J3p+v!elMRzA1Tq<^W~hdIISdVe%IJf5t!U?n?(ZwP6>X)?A1G@NA5LfC
zmD~Ljm*0D~>GPjphblmh7a+4DM!S~iI2oR%zn=vN@Au=^{t&7ChR~vPY$RTi3zFS_
zw`);No4GNjSv6zf)>oHzDWOKt3_aCRvs3<vl|xXn_xY&EHKF?CwPVi~e4GrW+#&wG
z@%o(m?fPTRg&cCt!;1@aiooOFjZ4eRB518bJ36sUI?gA5I?m|cX!WJTt0ilAz-_H{
zKSwO33Hh|KKVHrn(7~^U;;;m(lKG!s$UTq|3VFA%w|n0HMGSG10F;lr<Jgb4Kb)=L
zZx7$&d7<-qJ>EI-epwY=D@HFMJBgW;wzXDQD@teg{VFf%_m%S|_dUku1wbC()5mTA
z69Gb|?^c?I9D2GXAS`RuC&ygq`Qbc<rkF%}%Aq@C^L*=((_&0G_f8^Sq@3##X2Ls8
zncTgdbx5_zv0px=PRRX26(u7nDM?#L2mX?Dwpfk8%j*#o*57%ui~F;7$MX)-g;K*H
z0K=6|CKX{(2<P^}Nr2>-Sdx)t!I3g(FblbUHpq&oP)L2dm??4?O(Dd_!}GWvX)06b
zw$azmZYtyb@P#L~=F@y~E|wSsz(A*m@~gu|qN?8uwJ9qt@KGhgI{_qnzEB<-CF+*F
z5nh@@ot>V2Xwy~KhYPjhu5_wUR->o!ASECXaKBKVH}ENgLqdwDYInncd@Ykra3*?J
z=Y8^LJf5j}!!xhW>&`J00@1BD!OEVAohj5(6ED;J+0)ac#xVVu3P`0Eulr?eCVa1}
zc_sf?295k(-7f=lA@3l^+RxX8e~R5LM(C1eWVfhLMW#YH$m!L?Z1Nx9R6F4O?jCA2
zdbVLREOEui4@pBy(esQ?%q-a{PQLBaQB_`QkXNOnwDk!7(|1vp=VNm^rJ?q8wZE1!
zTx>mhQBu}4hxAJ5rvX1&F_jJ;48rqvD!t>wc|)PDQUh<UW_2mI(QF1v@pAP+*v)2T
z;X1X9CE>3i#UM?`bF8YZZ?3)7^kQ)NX5?h_WVE`dLLqmrJBL_1_z`F03&n%il3Gk?
zmACrWISS-%y%+0j1O<y1r6UNgF9ESACl^*5ulkL)OH?8hTY1YkLAP9&*9}L0IFn5)
z8QnO6S&u6+!29MTE7kSnPuom0=)$dRY|8j+tExH(-5hs-Qt`yZ`(+w18e>D<ag17>
zot@;2jB?C=EhOZ8T^?s@n^77?_M6WU(+!ThDxltR8R%6R<*|qVC?0xAul>U!9b`5h
zJJnz*O5RhzJ(UA)@bT_)q0UApSK2VzbczO{jfzwpyQ(djH2YJ9M#Ttd5)E2zNC1Td
zU<-F?icov;{nqO0?$MLy*~S-Y>f*snitxa`GMmM%n{hE(3sX}v3~L~qIJ#Ub$&~2S
zQxl64DQ3^53%pY+)l_JWXWkw)=+PHWfAOt_{2PPZpKG6vZ{5-Z{j{nW>LBs$NxO<W
z0tDyw^g#6{5iE#UUx*R<dr*>Txw()2bQseP%s0M}asEOVCDgu``xWd9r<H1jx7ReT
zZk8xBF)<5^ZUdvNSYdD!szi~7VQ{U>&KN?5a!sA<;80Tg?>4UrtLYHBGG+BQiW(LA
zLG=`$<FwT6?ArO=J}IL(^8s!sEMjJSnvBlFbzfp&o!tvx(;`;WRZh-|0pI%I_VQ93
z=2H6D--o4o?IRV!wwipZN47S5WB@%%%O>4}sD!CT)qWuDb}rv0ORF{ADs7#<{Ln~u
zPpIsucn$l)v3wr;n`J683;(rSwOJzhq79XZVuG5CXP!$Jg(XY+L)xR_JNImH?`hwn
zlSTB?BU2lQnb|j37Fmf#Owm%%eWT*CDiuna008LxdtySxItlQB{qQ(AhltvsNquS_
zdQ_dII9hHkkOS$2cHT5yU{Y`vC0cEQmz^{=_^sPvyh%yWk`Q)$#X#*!`?Ii{8iRF#
zCt72rx^ST-5MTh2I>vvA1K-1>!|ij{|EE9^!$(A58i)}BfGhqL<iqE2Rr=$%HU-qg
zo2@i{w~%pCWd%c9+dxR+`<U0DfdmKd?ssE5D*grAgiCt5KIrH@u8HGA1A?STQ_rta
zKY#8EQaU_Zf@RTnCHH|$k#EuF(M<{pdIP<YN`^9h(Vtc2b%=`ZtJ_Wgnwq`LNE0Yg
zsopNrll|>KA6e`WAI|a;QgoCzuggr{*Au<FBF`#tIxf7wCIP)$PykhW(bHaBy?qs)
zjt&7HGJ@Kl?T}6Z0RuyxTrC}A<8^Wg1VcSIxDVPno=u*&+Wy0U)>3^9%b?Eau`^c1
z>wrzV(=8@Bd(q)~qAmA)>}^#XOKLGP9t`Coo`O*9N15>8@guyWz4;=lYw=U?C61bu
z_bX94Xw|+NHG3=%Tli<CQ&R`!rmuSgY~~rc9!%22<PL>De*|aIznbFz$`LmpU3L1*
z<NHR1ZhlBp&Gn!?!4aaaNLzqz^eTh4BF{o!U2WBcao@pNyipTS^6C}(UN@CiKg@f=
zlGN1~9=`&)l0?Y+6$StlQ|`Onp<VkkpdPSa*2dCbuDtSjY8>n9d%Mg2{+R9Np)qKN
z5H+%k3!9~Uk0Db>2@vRj-k~ldmh3WUlS`#=a8GtpvP!=wQh%j1xH*_$KAL_HP#&lG
zOsUrT-DSyMi5D^G$`Gm(&gkDkG;o+7a-^flDI}3_w1gWUGnLE{W72sN2i^yY$J%IV
zYpYi1!$c0JxR5~wepOn=6NUf5I^N<&VQfqx9t_k*9&f8C1xCFl=(Q4%0w|eS>FM!}
zO(Z4zT?%8xxK$d%(zXnV1}H<OTlxt1{79A)6LGgZk6HiA1q^>xBEGk>vML@DU*Irk
z>nb_0CZ6$C`$Ho@P0ej-Q-$r;XCY%9s~G*F%X{OeZw}Er>Ma?xc~A+j4(4UyWTKr)
z4cfWaY(!!egh*7E+Os4Yy9(I86dQ|V+=i}TuzV|*fp1e@p{6F){q0l6w^!ZZ*RaF<
z>Q_Ko(q8Vn47AfOo+WFyy%HHFde+CW`*sVZx-M0Eia5HcL`udIW`x}iRhhPD87$^_
z`Y6|?9M8eWu4a~!5!r)wxj4#);>L#c%kty*eP5$!t%2fM0R*Q=2;{B9mRvf&+YkLR
z<(#{0iBSK${D4Rjp)U@yE!b*~ju&M*^&5`E$y^@{U=Wn^8GxV&n(^q@M@L71nLd-r
z74@Qlr$Q|F?VK$cj?YdCXjrpPpGv<si%qCBIu@7eFSodb0wOmOzZKMk5seo6&0<M4
zYs#|VgxSHnOQG+_X#yV3gYm;9>Se`^FPd0DXJz-hAzH}*&j?fn3aN;Afvi@KYcpkG
zT16Cb+Qd(NK^mJ}(lF?o(2D8&ps52aW^3#U8?=IAdLhcWy^|9=2ZtCMZHzJG#p(Gs
zi@lMwdtYA>(9|awPJodA&NSaoC$xOC7N8ML4zros8<~O4tjn6WpIU%!b$KxF^UE1z
zaJJmSIK3`AiZc&zC~tRi`0P<Sxi=;8?Utcw@gxikgbvhGQwgJ~r%Rax>CQ6FAd|5(
zkk}$6y;=94fV#$E()Q&d=b>E*tw127B?c);x5?3IGM_|CGZ8WS!u5z{Mqf3}rC`qM
zgXgm9Zx5;we)Y7Xw?$?2H8hGP@2*vm3Yqj_X?kSgQu)-eo9#?Yn3`=NRm0txO~oZs
zob*L9{0h(4S3Phn3{4Prg<?P64@F2#WE2F!LW*z{UTnqDuIQOECHX36mpH{%k=A6`
zglZCj#>s`>e!kNWW<U;Bg$e)QQpBvoSL=7<7)M{{X<mJj%`Q%<>hhhI-`jJo6>p>Q
zb22AXE=${uXyf@Y5RHN2d3ntK-0dNArI@Zy+t|?XmXA99H-L5=XpQ}rj@EomdlS{B
zC4gWPblUqdQw(|<$uL~1iq+uu9H~g<Wk{il!c=KegB2=jB;X9R6mq@;iZHK7s<51^
z>dSgQhxy2WWml5WLzJtOh<F%;ptkt*a(4ZbjSUXVla6z@QV@_rv&B<{p7|@(%lNLY
zZV9+Q(XxnzRGlohdN6$X^z?8mp)P8s()i0?blI6aPcs@)P3CU{7}}+3Qw=30)@*8M
z*4~IT$vwqF)B^E2zl4pB>~}6l&$|TyH(51RRg&IAql%Z!;lKZMhib$y;rSZG(PIGx
z`*3|dbY%jAW`tS4MTU2R{TIDD<MqLO=w!iYPF;F>g;Gf}7lz`f^XI<p)m1u0^$M*T
z`f7)xqfzBmjf$26#pm0-=@gl6;4dJ?$HzuP`{8!3z*A3tlbBp9VTFk&#Q2rda?cvG
z*fXasMF#-a6p$y>me0Ir%b|dG;w>d5=E|FF8UNukemBpmAk>VgV;Re2=}95;?vkI+
z>9&pZ@u}FYRuJT0UDt<QZ92vKrPAB!g$lN@GzT4SF4I|wmMx?OGum}}7@>;6C~;lY
zFN=p(JB@=AV$k<wyWeVuw%;R|FHX^85L7hr4@DAn4~-PdE`+Uocg?ksp$d`=t|E|d
zjlF41NnDa}`noeGUpzQxafYZS5lMAkQXY24yxT8`t<1c!zJ7d=+8AnLIo87RkR=AY
zKU0>|;-5y9jqjGFT;z7XwODT#H)-7CS>^g=Eu0(yn{f`X0w!~@gH2QAdLFaoL<27~
zF88>iu6=)&*MC{>*{LYitkNyClk(kB=!pT4&T_sQ=2Zb8MFH0-Unms~QULR$EyTp+
z2$3q&2vS-Z;;=nJW*<``Jm-9O@!l;%(Ge3!!Vb4*rnf4lwSKUu^u3`G_+0iQsq^-C
zfN2AnEkT3@!EUNh8K@E-*GGsb>Uw7=zYakZ1O2mAckVa;sp9}VM$h12ltS`_K&KF|
z!(64|`F6>g;w2N0dw-I&1Tf|Fbaom6)lVvda#`Th`Bpeco7k3t6>zPz0NB+(?W0R0
zUJ_Bq8cS_*nVEcsD6t-nXBKSl0~KPGz!mmdkZM3+VmUQ0fu(h(Z1L`{mS-6f`!O6}
z4UijTLD{cfy_zkZ4@<=*=kvJt1PPN_wGSqgj246(;Wt_xofMV45DG>@4zon1NB!Zc
zmUaGO-|u!SZ9(wRdP_}CKRdNUSFf*9?DD;DH{oy+o}2Sd2IBTlWy=YJZU<RH(JHwt
zG8g<vt(K~cGXS3y9Q=N|80(#r6@`x&5Xk&)0kt6X!1~f5g19^Kj`u+q@iNaAumQoS
zPIngp*0Z+QEczFH(J?oq()*XkE0YrwqBV86Um280g{*WcKdu2Wru_8M8W33CF+BNF
z%ChmL2uMgz59fvu8t}dRSqVzS`T^_(rP*I;iQIxpu(X9rQf4w2V|Ssk?@DF27m2!j
ziBR=@8Ei#&bL^;!ldeT+xvf$9tFjznta$2Tw4<`Pj@fTie&iF%)s1&1ozi-`fxCBI
znrRozxM(Uzmm{x4-?|)mPUa8CLT8!@Lz4VndsPGWDA!cIP-*q2uNOOaOgyt5xBG>8
z@*uz4S)uUDX^BuEPK;Kx;nRHQu>Gw8WYg$L8DYTD49?Brx_RexE-Y+y1shYz#w%?>
zLqh{?NS7m7?P7oS8gP+g4|t-L3!r^=lYo}jG#k$r;<EEk<Rk?~kfo-}<KOT3W8Ak#
z4k6*En~wW4#>dMWipEmDh}aMLznLhQCYJqTSH8EHA?2GALg4XW^Y^vcfyJ*{)E!C`
z{)?)(IP|NQTo#FvuD-(e#%6Mwnhj-TmpY3q^nQ+b+3%L>9L3$w-YS;eLVD%o<zox_
zJhQjn+YN_AV&dRbIMLw)wkGNTJ)N$MO^X)VFg<SCCqXX8gYT9qms6halo?8NAl(rQ
z?JP<;+a=5SP#fwslJpf7=X!VO^V3#JMcgmafV+4txcVr9sj$}pdsnA^`HIiuJw57f
z$9}NEIIoD<j2i6so#8F{C@(-~Un1_O4Jft6W)~JbB{Ix|siH~H>v86YRMyli)|k)s
zl3e%9RkCvc#t)cDm>=}^dEolrPc?p7mrOnf{bRG|E&H$qt5#vpL|$l|EIw%a39D!a
zL{LtS+n?<n96q?y6u$2c!HUN3-j>(kOk_^Jj``^?2TyL;cQ1#wX+cfh(=X{K`pA%r
zg<NcoKR-X8o7Wy-izhSV_S27^iXg=jJnE!py`MXtspM1m_wOus-ua`7wsEx*^00+c
zp^F@T!o+*;WJooZ864g9giRppIjiIK+2-JEMJu`=7UNDa-dC#2yG!dZSPGuR3xqA#
z{>jP7&d!P9GEMDrtFI(4U9Qc+N0j$63@ZYvARsIlm41%T&-2cw2a(g#_Wk+=Mb+HU
zu(QY6-q+XH8%aWdhqvyK*LJ1aN2c<ykBIr%l}8WbGFU(m1;s6ijB=tZ%oHwI5O)ae
z4JsbhK<NQC+QhreHb(uHcApoLlbe^Q)!M46oTAq)ZilREBVVJWgFqZG_kN9X?W09k
zZt5qIr=Z9gGJs+YuOxRPWXuuCF8vyxmzpjg>+!K>^rvn2l=K*^SkSXP@RP<ie?+x1
zG{nZnF8^&tvHub4uTQ`tik6|zqf|<2f6dBEoEL%H<I@9(){m=eSN}D%bO7_JJ<fwW
zJ}$1Nb}}q9bTDI}+D8d~kH1efGyU{%^yW!?9`^4u$%lh7`nva;+0vd?qn_o{99e<4
zRr!d#!qFV`b#I4fXN5w~{AsZRjKP~%lu5-(j8y}_(u#a%2JL-RP{zk~MZ3UCkJ`6T
zM-hT>H$rRe{YYf!%CG6(i&9XCffW4n=byqti?q~0e^Dh&1o0}`)LoHmMykc?+FDa#
z;Y!j0uF4MM8pY!$7{o=b9j_(+P`e9-W9X;IfA+EtYh-lgata?|WMpI}#vyrm`OaSy
zXuyWjZ7N6|yYzvA!mq{626-xxm~w!x+A9mIx4ZlPt_`@X6b4(JA@<B0uhEf>exj#%
zxnHx`yXD5|!|a#6?Irqv!ky{-jZeVhCs-=l^$k1PSKMA+UJML=H#axXT+zJtE+rND
z*DNC9T9Of+i76?Pl9Ci0k;=qCBmqqgx4>Q0$7@U?A`EnNJZx-RQ&USTtJJDriY6Yn
zrOIJBaUH+KUVq`wVJ%=A!&p!5E<$<aVx3y8AUqb6Zo~n9L|YToL`Bk|{nu71qaH!H
zi*c{M<?;_;qpxbgf$@^wfN=sgR1@07q+g1$S8vebD^EjKcWLe-y~HUMJBOF$kONZu
z3N;wpJf=0@Aqu3C_;h`ZvS)eipZi{8Nvg+J{5YMx8lxgV#$QPJDr@nV;+(#HYN_B8
zBq;0+dJ$_B#XzIUwe)f^0TFdpGZ}IAfpC3LMrG^9TP?2#^nZ5fJ2YB7sw>;wUpeQj
zUk|Cw`zH*o|5=<bL=3^+AI|ARuF3x2^Fy;^YSEFAiJ+N&OHWTH{pac~ji!2O__1Nm
zvHN7oxK*l+oLv&lGz_?wZCUo3sT@o2t*x2=dAOzP|9Y1Lj!3B*Zi~kcpxnR6A%8!@
z-3hkSrgSWOle6fb6&cxHQ<L-WbqC5E-B8G~JK7cShUZ2tq8yQQFzZTSdc)n&*nz<r
zJsM?~ku<guJboI+GC)5#itx!e4E~>6+)={(rJ-hQqSx1PQd6c+#=finF{L|-^1LMb
z&TY+tcPgzsU^Umn%?AAP;L4@oLxfWlGINhwhWTXqKb~`NcYT^L>|=B!sXJ_C-v7AM
zC*X-p;7pJC+11fnq3mUi<^H`utQ+4T8bY>9z#_rF&!(_LO*)kLJ%U_N-{eViQq(OV
ztIc)oeua>qDOK?%06{<c`!b@PogHtqkdJq?B_PI23JSJk>0*GV*<a!I?yje|7kD-n
z=jSa)A|oPzU+||t@N2fUF(0cJ!@<KNqoT?-SrLVVgaEvO$#=){*M095Rh?UsAgNaZ
zIhq#VdYqCkC8X4jeY8^`maQ_%wD_Qp)(W7g9)n75q9@=csq~H|kQ|Pez4)b#Fe?7b
z1sEA)pms{q-W=AiFzMd(cK8MPmjiYYCeG1;VfE-q&fy8TYfT=#JSX@*o}a8zr~-Q-
zW%wX~hy<J0M~_u~>}MY^nf9n1hkJXkI|HVkYNU-a_}#EYD*o>3!1A)WaG_2H7rOJ-
zx1H9-hA%Pft=^BXqlrN?Q><N!Pu#cE&kHOKE1u_0z-gV#X~|eEDJ~9ty2j#LK+(jV
zUaq&x=!3aB;JpA`)ETChy5gwD(Gjr>Zbd->Q1xThdq?5^4jUXCLczmDF5|p3G?JU#
zFmQ4}6LQ4#5W?6G3>i`LPrpl?0BuD92^BMIVfh@Jiqj4qE*?ZaBg7CHTKP387ieX$
z<-%~;2z}UyaByhY&CfQDpYN=rfh(hr9hiLPD-ClpIZv*A9PY1L`J9Re3q~{AA6A1h
z0G)a|Dzr}{pL`1_Ro-@mG<=}4hD1c5|2=8*bFgpF@bMu+ije#~i6u&@pn0952s(+g
zlWXI@f{!W3czHG?9B1@VywwM%r}<1fgdRq1(i8#mihC_0fpp+2=*?W+-IEg&!$_XP
ztE#H%>#u<?xi-Gh=edJtB@DD^b$))vW!g?pcl&mDoWLuZBN?u3pY)wdHi2I4^{T0f
z2_^LjU=rWtm#7wn>;jXaHTGPS6Twg_n{m9S`_5QamRL|@V;rq|DbN@N0N<J7o(7Z>
z-*y9^$8df-Rx0rIpDrd>HI?V9H>JXG-PXF^n>r=p;TF0d|Mc}^^;+%h{xJ*90leIs
zJ3GHiwL({X3=(_d^1WWlgNC`|`{lk5B}Qf6!Ena2Y>uQnAyFD@yHun;koDi#f#vjq
zh4tV!fgen$C^Bfj`eC_FqxjSWIB*7y@&vce?^H{w*XwQ<;(w34sqyheHhVYG({XMG
zLV0ofO6`-~$X3Z(hjsKz$-A{7<1Zb0VK&U=?KkZSeCluR+}BFv$=^_1){6_uj+f-m
zxrwEE6l=eY41h#nb)T0k>*PhvIm=)2P%G$qGeg*giCMHO^p}8+wR$|B)64y7ZtRC8
zhN*9X;u88ZsAN04yPN$n+grma2A-#zfKdSr{X2Sk87(9c35&u#Bu;3ozut04SQtAO
zSD9uNxr!T5bPpHnBX!@f4V|vju#T4|Sup|s!_jmJ&nqm|7cfWjHQRqW{J=kb8q4&S
zaeCUx0i4t*vu?u)2+7CWZIXWG8bJDDhW^B=VlMt+)I9)PFShg5cqH;g#r~FfEBSfA
zxb0o0T?_is@V2%mJgyd^stX;B<Q^DK`7}P8-HAMacz_GJx?Ur|0d$U9z|pR**XHTw
ze+u4K)D`%(+<5AZ$V~yg^S5(3a~w)kwE0weveNYfu*04z4+V@&$jC@YCl^2>GaZb7
z^Y3I&zZ*ttyR-`Ua!SszMe?T3?3oCTKF(fM!pndY14FxnSQ@Hnp(p}Tpn$lcLRU%E
z9*Zp6=o(pBizw5`*P3{5Cz>`57=A&|85j&!blnaxXD2Qoc2-xP^^WQswwWQX!RkGp
ztUltfq*oZUqeMe>;!?gSkWX<xU2|)ki=m0sZ@Y*x49t%dQr8RE1bBR4Qy<VA^s2Xo
z-vR#yfVdkl!=d>xX<uxgZy(XF0(o4b4Dfqpsmt-InwmGj{8Cx&^Q7f;wo#Oem^lX=
zcN9nXf)5{1Be#i(M_;25LX6PEK*qu+!C<JaRnud11RZ!{`G*2$eCux)q~CZjA-!Px
z*tUa6yjwua4wgM0hLcIJ=@ZCUfq{V~8qXhUt<;8qRehma;&OV`;PcV%B)|>>5db-w
zOw=)&-shR;_Iz>B5<14&nfpw%6zGrlS45I%7M4k_Y?@M19zxGNf9n}7fk(khvTC2n
z>!<66ThYt0)bqCv^_i}Cr0N+sMD)Srw@)dSW~FxoZ=!GJTx3hz3;DV(oGL$GV_@m2
zzFbv9o&MD$hgpMTn)=3ABKv~Regp2io~RR20sZMxoee=&2!<%2cNuVm%a2!o1ts1*
zUc-RIoM^GqMwHKEv!K-CditX@8#FU82$;f|wZ^>)yypArYH$mnAId_(q@bYKpRHJ_
zFff321?Y~$T%mWRm!8gcW_*0S)@oWDUb;G*_%X>WTjhH<A1^PN?T_l}A9Zz4y9K=9
z;36X;0s_mk+BCn4IzB$W{qd@V=o>vjN~420C^(rYz%4B|C^M<gKuH6HV8q+ndW&(<
zk*Uc^DKG!K;!2Pj;PwEe3&ujmN7CK_UHatL-VZZily^DX&;mgL1$(7prmdwF0DUf+
z1CDQOnb%tlyg2nVoOIu{_2lQ_#%Jvte~3^-$p~2&6e1%Z8F{uE3)u<7cB#9rJ&p+a
znr}UQA}5<Fk-SXo%QIJH3=E9iGGakbOe`!L8ygDFaxQn^=*x=uCKE?r)KcQ}><xUK
zRkgM9gY;<i7kkqf7&>)@%zD7uxDLo8<9sAI76bJq#8u#V01D*y$h~Q6a?8LZRAPSV
zRug|UXJ<EJ0e4QjWtP{kpIulROPvD{u)@N_Hwig7YCykMWY84*$<ng)eefHq*c65}
zj}j#jr;0>CVdR?TS(ajv4*}N?L!^;}WARXZUETNH8DP9<Y{CX39o@hYpB%qvM%pIt
zZr7tIxXbbRqn(b<KHxB+@HBWo7?8;B!T+tOpAN(j;f&Y1TKs}xePn`;iX$i<^Ydt}
zSO(q!qAhq{?~Q@zAC2E4ac^4wl)Hzt6ETG1*r_H-W?vwnqOP=hL@KSwR;uI;oS_pE
zQcmFrMkk3;R-E9xl$$UXnN$d50|N-BmzPUzUhnb=xU6W;!?Uu2PvzK<nWlz@hgDd(
zfoV*7&2Viy!v_Tg<>@&xznHs|X*h|RI)9HVkV;1z-#WX?{(E%vo~5d)iMD$3l{Og+
zJq?g~a(JI-4YrS$TT8TR^5O7DQ+dxpE{&sAMldLqRs)GI`f@sX_dqujG~{4lB0M;_
z)t&1!a}ta`F*5#zuGLkjOr-v@qg~PW&jPL2GI9%9A$L!BlutLBuCSpQDAa9^=Xnr_
za)8hB-tuukLGj=ytAI3Kjopg3n+=wfRBxo96)B0WZL#b;IR~|(Mv1<jlNuFt(DL&0
zQuk3;a11cMg-0sx<Ne5!O(<5$Lx=~S=`mlZ;xes3h*DW{v1h5vVjYuqq}gzCYwZS@
zK$`-CBhiPTrgLr&8f_MNy&*3I93Nc<Z4u|p1{l>Du;Eq8*M<4+ZK-9sVC}Tl#g-)U
zcs5w2nEqgZ2y}??2%^Q-Rs&Fq>P`B;!~OYdt;?kc(-P_F!P~U%Zmr9ehACTzu;@qh
ziUI<y{{}LZxvvGGI*}9960n9_Y(u*mhM#%N2Naa;>NFk5PIr@fvyWBAw|K@swcUJ5
zbH$2%E5xkNnZe@DqTm^FgLZs(2q7JK;YQNVZaTp4b%#41;Q717trd(ytgYloqTA2S
zZ+3LKtjLRBkWck`I`7Z40z3$e7(YJ%B&?NeKb&ZCxtkO6qTXiF`*cl$fuRI&F#Wfn
z`u$u1nU=xD!1dv#Uy6haU%)*~eS$>`V(xu^s9|ylY`6Km?ansS!>k}c8-U@E*L*y?
zou6NIwxvjo;ZzV0*#DBJ6^!LyK|z^~$hGM7bO!kJ?H8#72LTg<ylmM<P%&^~15Ps(
zlkOX&)#v%;S)ZDxQ#d{solYJ9ngehzc9nyqrm8`wlv^wvEqZ-Svz$h5r{4?$5Rke&
zw6wUE{bE51H+Oe&bUA#)xV}d*G@}SO&RG8eh4)BsB=;sK)EIaem>t$ZD(av<@VP3*
zmF`cyzyD6D*IXQ-419DC!0CH&d8twH1dBeqP`e+3!!loGybah=a+xCKoWK^=qLLEp
z;pF1VT)k!#`D9Mn-HA-VKXS0M|INzSJHH!a8XFr^BbD|R?P$cMq+AZ>ihw%?c*B65
zU>O{~mX?+YSA%<Su)+wg<7VV?589r+-%tmll4#YK+4xr&_ZG(|aao(4uGuD&IGk<J
zAro-7ffdEKRsr?k_S}c=L%wbRLR{OEwo^TP?%Cc{QCfUlex5o41H)e(l>DR_jCO&_
z%vu0i5XB5ZCl{Aqk02zxg=$j<H<w<JrI=LIawJXteSrSpf7j9r=8;-lS8soz3dyJQ
z@9#|${0h8Gm?dp>+9y^ocJo8{mznxL0{1=nWYoT<XOA>mD~8y9H+l8Ikfp1Nrlx;w
zZQdA6F09Lus@~Okg27h5$8S2cbtcV|cMFgf4#Q~j00vds<K5lMn^R-A?r{)Zj9O>)
zZ>GRXky*K){CW9ZPp`?buBIl1!@OL#R4MD5Js!xqz*ap_QZtnHuHa+Gw}Cx;PK&R!
zn_wyw(gq-N(4X^3#UP+Ydb&x-GXZ5sh@HLqeGGLn9T(*_fF#t4?t~m$9I~?08bI3>
z`0(Ka<qP1rTHoFd`uOQ!jzubxIIjhf4Od^nGk~@P08k)m%C=HVivn4H=Q@ZaA0WQz
z$w>~N6967uuksI%zfJW}eL3eP3=loPbure(9Jk%87b=`P^l-Ar168<Cuh|(C2R`S6
zn?D_optvqKeEIcjT>_Z%tDN12(^WIwJ37d~j<6WC{ZKMU&38WB3&)=Z9y;$|fllWe
zRWYHUf`MM57;tl7T!OoxK-ZS+*VtruXlTiEjh0C%>3~&!;M&w29GDXwg7p^^d>R>v
zSQ7v(x$Esj%|{UparyTK5`E|-BndsTk<<*Nq@<LT(5n_(?X>bwPfvR($MaP8^xle<
z%OKJUN~mv;-EPmQUU5HS9;qeY$xK!Y(<^Onj|u?CUd*x_ITe_r78Gog2*H%GeCe4D
z^iJ}xJltE-cz^o>>n3=(_4RewQqI;#88p*cdzh|}r)a)@w6>N1OrGzwPImD6R~zWp
zYo?M8xZBH4+ROky6@XPP6T=dwWABc&c>`TO=9ijf((tK53_1Tp6kq_N;E=JaA)h}u
zs(MC4-k7K~iTEE)Gl852<3E;X@7Rvd|2eiAp^o{JvAr?I-}n}fwG0%M8k6E-WyPIl
zrEiZLZ^@DT0{=}~<KnVwu7_=@xMyc$E&JcCl)HcEb3&kN!DQdp&sCerr%45Yik>jX
z5+ZnJR<t4Wp-mFT(YQZ2aM<yu42Anj0N?a?p1xr4tI`7j#sGox*HmnAJn~;cUR<p{
z@JojOnXYe49YMj1Gf5y4$vo&qbb`=A*u?{Vw9pa$J{vuH%uSe<ZplT`FZO*MSGmJ~
zxqvXJe{@Q<LOirT!qwKl|AAC9E&X=>?~p&?KgtSx@c-RI{;^r4*^Kc~QKS%BQ+Idw
zH9bQQN*SU>3gxR)+XV_J(d^RfgY7p{(AS>g&x%LeoY&4;_1nh(-#yHWIUj|kV<p}^
zVPRkZ${GB{z`?;GAsN*pj`r6}0TREjuP?CA6cq(WM;lH&W|UV7yvd6=jHbPJO*m8r
zKT42mJW!5u-*|EYcd!k_1|}w^v0`MTi<Ql+x8n173vhhCJBVPe7xwjQ!_mK7u0Y0e
zyFc^aSAqGTkC{W=y0c@EWewhjnwq*_9fv{~KuSl6`1huV;>rJ+%@0uM*CTSa@94;4
ztE!q&kGJ^s4YK^Y_1B*$B?>VyYirqq2gmAB@Wlpj>!h*|C>R!Uu)&mdZv+t-?pp%@
z8xXgkPg<xlhUKW~nmIZ?Zns&y0z5m#GLvq@XD|r_hDgZ_lDQ9IX=n<-<jFYW-deXT
z=>CX!Y)eB!L)p)VQ@(<^QA_3-kPlFZ_;RbSK!4AydsCn;FqptnP|G(E;7E)%&`K2O
z@Xb$5PEOv&rW6`IPwJzRw5myNZEaj|@E7W9w@;DcNnKacv0gis0@QhfasbBx`;?GU
zv-9vwna=Hfdq)h9-EtTq?<*D<XlO>w%CVoq?Z6(IpP#=ynqdH{N2Q?{@Q^Z3R4Ak^
zKz249ms@UC44P|d&cOqfKS5s%X8V{5%1Uo!#rg6N4#BS&u=yJs8Ztv@)5heHI5>qV
z0O{Q$sAzH#3lA1+=<litI!+VE<kfs-WoAA)S^WjFC>SL!NcH=P>VSr@Fh5WB1&5H3
z)BAx3KuXsl(SS3Dtsw#X4U3*vogfJ%(0!mjv`#<-X08`Lwae1E81{BJ0F7W`cD52J
zoAqt^<;T)Q0-S0^6SwR|yhsuK_ZXRyB-usMjcW<-Y;Ix^5NH4tVX6Quo+nY0fDO31
zx?;zN2IrB7ryh(r1S54c0V$HM0GLV43=O027J{qsubfX$Pr;eU&!_&qh;I4@Us+C$
z5g)Th<nr>8W9+4=2jv9TzvB>d$VLS+(&NL!3C?aqto|_Qfwu@50cTE(j-HijlIYyW
zvqn}RbpHv{sB>yoAvW)+)l8dGk_xm86cF0U$`X&q1)O1od$=DJKaS7mh=U#f#X#R@
z54nJmziXg|vke9k!C8t*rKq5yVhLQ|*#WdiQ6qo+kE*H>VNN)JZ^|_)(o-d?Ps^-v
z0HJ?$$ohasOl)amLkE$T8p{+F`xRRvS+Log3c@S&-vZ%TL>5ir@U876uFTEtfPp^v
z=VeVt(3^wdMMOBbF2{~<FprOqOG`_evSegrpbPpb7fmK9*<<!BT6a-qO*5b}w+F~%
zV8w8Qu^}fC^%JcTU6+v_eJq|Q4z7OnHv*%pt`ZT_OySTIYXJ^F-(mtYfF+t$-y$QA
z!K4;jG)?3l>j<Bdl|hrE<?h5LGX4|?2ZxZym9Cte98l+C>tSJF^xD1k6c!iXy?ytt
ze-}()5Bw4d*i+%e+JOEZKF|s5=nh}Ly!Sd3*OJlaA08S~MT=I*(#rbMPa!e^`Tu>{
zu}vGAz1a$ogIs`{0}Q*88vqyZFbdJaU;^lFgdQDnU)2FqP<KxcCcUafUsOjj5AMZ@
zYnA7%3@`W<0x|RLE*-?9-;J_bW+SOu_G=)BUHf)lBkv8`t7yGb##Xki0SD9Ew0l*N
zoCu6Vqkvz;z=(nM%k@@80;>^k^fwqLrioW%dU^5_0B8bQ&-XGdPfz}0Tfhib%h6lY
zOvK(2Ob*siL>&Rb84OZcTUd}nq+Q110OqW(sp-*QFH89FH>y-Xu+K|1Ev)P8vWpc;
zZ_d5&;);%QHF?!)Y+rBwF{+k;TbbG4ETAWD*&!Yrs{h##->bwBMtHbjdsH{ou(739
zkzi@El(>n3<q)t|`~MEcu1#c-G05CnP59|#*(P~B6l4(E!G8}mSsBT#0YL~{n<@Z<
zm|{x_2UlZqya7_%-~H|Y!q~sd6ycx3@_*<DXV@{tW5Xq+q`+yJUtC0#@dLZ)?g5&y
zCD|m0r-uO0nt*}f%e`q1yZ=SqTgGL%Ztc5@BAwDm3j%_qDBXg9G}7H6D1y>RcL_*O
zx+Nu~MY_ACq`SNJV9xj5`~PWw-M{^9&AH}WKI?hz`?|(B$9W!Orq*-SRZ>#&*SEE~
zxs;;54{D%@>-;pO?hNgBy@X^RWN_vd7Zr2laU>+Np)K$1>yuNT1D)`;KMV}ST`PGv
z_37hBX+B6EH#Idq*X8-R{M`iwOIKGn;>f_z5E97x_6aX+2Apz1PmR4fThR?X6!HKJ
z0|}o)JGjl35(RIxhCy}TsZThCL=~cfuX2F~ndSnB`p->!<2VR8K+yFucXxN6c;9ao
zSwB5A^yA}7AtLHe5cR(ax_f}UJq^~@RXjJ;;^Y0Lr-8wfpo9-zmXiY{gMirc*gufp
zVOJh|t-WSezTwn>3AHb#Z@wjnF#cfrkCdLkgGVh>_mPm&FCi2V$oc*QgTFytZLPN~
zNOCdz&f-x_P*F?_^rtq}pZ@J?@(Uv(B7*b*LE{uy_%tf43dBAn@qW&IThO}D7AEfN
z?duEHZ@G`Xtsx1`HO6LU<G@~!v6`(H{U{)?0J0U^K)EGh1Udct<4tu)RjQO4p>Uf*
zM*Ec4u=OyAu#baZa);c>!+w2us=>V>B*Y$WOqdMHCGm_D>(dx_Qzx`XwiW(vU}9!w
zyN$%}n^)Nyi~H(np)@FfV;o<MXTP3Hc{92-<l>c4J6w4RZoad!ht{l=k2^nsruW07
zM?>cFc&Z50LkKg!U+P?f6qaEWjw4EhIS6Oi>#1*zF?}VWsWo}`&dbliuiAbiumRd$
zC`IK>sL@-MluO}0q)vK(LGsdm9d9Xzk9(CD64m!dJXe#NiqWbQ;MuBiJUBnz(&Xp+
zL&|lDOzZ_N9a?R*r;V{z^=v_qLE5}L`?0S82FFzLR}pgXYyy|W@8oAH94H6<siK~%
z_cAZO?AqDFy*}}cIZu=xo&o`f-6v4D#6Hvc^X~dGna#s3BRN@j?=P*fbunZuZM8mj
z$Fi_~Yz<bw`BscC2OUMcRdOlB7v8>oJ6;KQd^<PPArd7NuEUf90<s@F;F@>8K8wMB
z`u3AOGw56~@RD?#f$A@E29GA7gPi*QsY^;itFRa$8QLF#!NkG{Jf}HPL-npm-C&#W
zefws8v|wRz5s!f26NHkC>5gkor*f4fh{uw6?45pn@c?oNvwG=ajzThn{Wr@verHT_
z2hegEV%5`MF?SyxA75Wzbj13Hg|&4<B392$Qql}&7;NBaP*NZB$Dv^}g)`lg9!;y(
zK_RE|<3xBw^EISf+;3ckd*Vl08n$xelHH)w$dOM~OcfD#JDr#429^qcg^KgVrP=S!
z2Q0&F_F&I`J&<M%pZ{XNtEenge@F{17-N`c&>w_DF(`Qb@+v)ygqw%wxmo}FzJG!b
z6O_&wzKj*=LcMgyQtS+RYDiSFm>4jFWF+P)^o!J`73E<)zL+{o5Z5p~@bfGr+EUr(
zde?_*93;;z{w^*Cnm}Jo!cF0v=5Y^6-vH`EdR^{ECQF^}Ja((z@hQxG2`?xNOXD-o
zPEYN&ChLUm#?ZZqzdGn+?1@pl!TDv4lT2bS)TVcS7zg@n$LMjNAYm#yvql*z2F61%
z3m!~lfCx-yy{XB-A|>VZ^${}%;T!+*c9gL!6C5nydVbqgt}1<_SJ3J$tE^;E%wVN!
z4Y@6qI6rS|flK5xfa1mW2IK<X#O{WGcfB;<Y%l}m6F$T^V&s<g(!dix_QxG;wpqYS
zfI6_Eqy)5tZg_{mZFjR8!H5m%Lt(Y0`FXbYb5BloX0cFE1U~$I{K*C?c?bNv<T@D0
z$jX6ESCgb4ziuaD@7u2ps)JWhMkZFT;pgWaw^SY-<!HWI$ZllICIOv7B~`=`67n#=
zcy2zZ{EcSJv;Xt@usM)Jva(EK1LQ*DK79CacCeyapNUH=h4=JrcV}lQbm9*7V70Ur
zsHe|(Js=H_PbOt2LZ(zSZk}jNjP+!h`X^eppI&^QhO+WLJemjvEx?Nk3;KI^_ZyI0
zK@qSa%KjCO@ol!j{bsIF)L6j`4S+jZ4Q^guUZP;&hjXr<?|GB>T1R9y$PS_}K1`P7
zf->_vydSc$acqWks72Z}$1t~nlcMC)7Ec6u?loTXXweOhKvGbUbpBiBomuxUp_@?T
z6ny_au)R1nfIC2rs6fzFjZtpYp$J_(r1?57&l(=P;?sng86zX(xPN0*!QFt*F+S_g
z(kdN~nC4PunJSQO1MyC%UvuGS)6?q*q4HJOwagD8Zx{F*_O^^LyWnODm`+SgJ`cMS
zNXE4}1eae5CVaVZ@I-`DiAG|g8oCFPi-57~RTi9~_aov%?}==7)5#D~;Nhk4!GOW%
zY<v}mz~m*Jn9crpiJ@8G&OSCt+6jW-_V_T)QAc40LP=zLd_ln$5VofO{PAA@QZ@}D
zscdAEto2|<z^d@|ZWC6+%{8xQBFrs8?d6|PX>M*VvmASS={!u2i##rxatR%XWvCJW
z1C9pLB_f}=yYDaV!3Y2pQ5Pm|AVhT{j2pg*V?P6DJ{HAHWqJ9*(NXkSxLpLzE%72|
zdI^$fhz}mjEewBGzb6NBmG4>2Co0RI3xk<xpue<)KAN^%+5+!5=r-`>;-u;J7yt{v
z!{&8s(<#12rR;N^i@mlwAD%A8m_}r_Pl0fEd~55+U3*l~1SwxCB2kOqEt!-Lb|QHC
zJ0Ivp&XgJtwFIreSMQPCuCO^?as>xC@F1K#;Mx6s$4|b}XLt8Kr)aG=!5G|lVxN_=
zWQLefpRSLWMDi3TdOYG?wwkF$OlKyNt%j=sY-yp7xV^QOU_cyWoTb1hhzS4F;xd}h
zbpdpMNw?l=W3)%t?aar=N8Ibd(cXqP;^yW)(fzV_|EmS0(7Iip5eY}Nlv<01_#@xU
z`<aik^d((9{2H!NM6KsVEglFEuGQ6nCisM`?Cj?tHqXq=oFe{OFP4Fzle}9bT?pLt
z08B`Pmag1V6(Cy<3$6B>JrS(6_8Z?6^&+UnOOzlFJ}4*HBi^7|MX$jqh(LrcUZS?M
zHuOXRX*dHwNyuNyLuK0pNQk8&aRLc-{r6JXSJEeb!K3-AFV<x2+Sv&n8q{VRw)GMv
zG|mE!2dG^9HAz8o8Jhc6Jfh`xbsw7j=YiMpdwjmkTu{%H!+t#~D(1~Ez3jNS33x+`
z+kSsBc>n%AnDkk{<#I23{*xn5%Ncl^48bxreUjR#qw|)a9i9h2%q=z#R{RNZ8KV?O
z_z}y^2GVkV0rbn~{POjs_#}48BZCEKrPEddk>8G{f=H-gFZA-Z>gO!XH|`>UDHp%{
zH6MaW>h{y1$8l=V#XJ=){`|MO1axh~NP+ircNCG@HT1@^nBdCueoLu5mCdLGe7;cG
zJo(H$Qkr)}BqV{04OVDeTot0e=&jQ9>rg}fZuUXD(O$%UNBkNK{Rsv!yV2ola~Fz%
zWt*;1JKL})0YJCHa0tYL!LlKDkuABDodWEM(_pnVxaYi7l)tOZw^6uDI!8VpO#MD3
z&*tw{HU)g660dJDegk~xueh4#n*^g#Dj`1yzu+VDCTOdkFr#wp;o8Q+i!V;Az|YIe
zn~JJlMBhcJ7QK|;rL1i?+}Fo)L~&Q$Du{rYQ90*J_S?7L9EwhFlKo+#3kNj@#a%W=
zQU-HJ3BqWQm$_PZjAddAUxX4LaJM=G4eMZYVyMXvOJ6x%vvPaCmNE?s*U3*(O<(H(
zisLn>bhrY#D}<YTDfHdLJAVV52%1u1B_5a4_C~L~gA+(w=T_bM&ARFA&6q!$ZNI_g
zV7L99$M>N#-SC@dG@lJ|Jw?x+MY!z`vhPbO9LBaZj1ktsHKZl<_D)!``#*j#nyP-f
z^Jc7El+7uy2szmat^j0VEHWPNq^I>r!iQWM7fE(ozTp5Na4X1OL0hElFA!rCI#8xP
zR9f=(@URH`9(+Hw$?p|&wy`F?Vn*>GhB&5hj<4P}!*k(PdR}(|f@P`s&)YdOKg|ZH
zGjTf3wzuWPCo`^<zUY2MM00CG9^PqSv6?7ViJ)%T9pG%zPW!w-W|cGRdQy;|f6G+^
z|BUZ;4*Lx}JEy?!!Z8j_the9zG$>-ES?_#OIQSTNX^*en8{YnWPsQzV{LD`nZi(>o
zurFGwgFNlkuOS!sOD|mhYB?4)?IwoyE>%SXu<ZVRfSB%mkB4-@;BkK2ib)Ja1yo;I
zxRJdIO`-0DVf{I99MaMa7xSTVw&_nvP0$Pg@|>W{sbufvLYN@PPX%@|kc@;|*I=;J
zZp{`50c?7|QZCQX+MR#5<0d9*O_gteQuW5T4r<8eM}#q+Fj(PsWZyehB6@pvdBD;Y
z#i080y~5?+TBjooY-0~VqoEviY{zqy^u7P|Oszm8Bx=UT70%26LJ4l$MS2AC2u8=t
z$6PyLZKlSd!eUiQd9wcZuP4f5_<#Ac@GLy0P12{92<*i<>`$1O$~nfOEkmdueER$u
z0*=Kpv3QIblQ?NL-&H)Ih6@b-n(PEFDd_%1^6uxini7gJ05%}w^u{gvv{E(u&)j3$
z@dZ6RQLb0P5|l`%U@1UR`MbSU$ujhq*Ps0dGsH_!-3Qc%Ylp5(lS5iH+%DdE*p4-e
z_$b?mv5V#7j1(q~N}tvrWv6`J(W$hVg&gI^&kwp(348E1_at3JQaV-6H2Q*3mCfd#
zb!Ir}#p!h8!d$<}C;!Rlj_COz8S(oyTExZk4D517Zj)|z$otIr^>;~E*o_Ul-~Z}-
zR9<Z@&N+77@gx~}#I-=c^~Gn>tVfTf5k!{mqi_#$gZdS}@-Pbx7ZD2bBmr07;8|3>
z_hRqOEb=U-I83_1)kFcW>CuR)VM+e>U}k<;SeSg+R|~EHU~5n$H*W!yN!9-j4E(Xv
zAzuBI7F-lhSy{1hQfl{Zy-5!+FYou*K&j9!s2Bd49QnnEzbEhnk@6mQLFh951*^j@
zwr~`pQ5sfFB21z>3}1rPjg1Hgdp8T*1-8VZqAKe`uSZer$*<vb9nY1CV<&#2_uG3%
zQCAv}G0+Qt+8p;uZG%fbUEGYBvhQzGt8VR2QgS$9Ct#Xv@paJ00#7_B&zBjR4Mr^Y
z7J0Pad=dM`hwxx2f%*fvot7XK)A_EhZsa33%;!-JPf9U`g+1T~N5KliCRTy+ZZK0i
ziTmS&^je3>Y&jd@s623uppNkC5%4*FjaA`wIW2xvq%dhH1q$jdauSVzNqPAZzmxK%
zb4gs8s17v@@65&|*SfeZM{{I@T3+TZvqNu~$Z1YJh&ayQA^oO(fOZkv2<`X18f8B5
zKlFo4(a8u#ynE8+9~S8B-ovHJ4!^!Zd$w%u19xL2N;<muCpSYidzf6qTu{-0=nImb
z<Q@aZ(%L!vSdnW^-*IXLjq90oC)B&>fC}{yE-!Vt$J^mkV_FyBE?8>bo_2<Tr`5Zy
z;ukVk5<-O={i!r+HS!d{DT~Nd(p%jHaa_+`YV{h6AWI@@L(G;+IT&6a88w&#K}q-P
zD*06ePkyUWqIS46VH#x&4Jh=bPsStl%_vgIvP}ElYMVB|J=dP7x8c4Kw*k{X-3FZz
z$ucRkKR@?CU1bYRfLRmhx+z7q@8@?!>@Rj?;bMlSL>&AcT}ix^1MkQ<%_!ZpU|{&p
z$cV|m^bX)d<!9XmtE6MB$M5PL;;`X+KDBb2bx(G9L%2DD-3~CWaRTOe_mk<$+bUG>
zhLE?0kLW_I(-Jx`2>Ai)qK1!{L7hmh1p$p9r{Vw-R&?5P8%1sUJM1RiE0BtA?KNxi
z4H-u?FezO@vCM<`UUYPHZQy74763W;W%mA37G8%4I-mVIr#f-Z#eiG_mpzopPym35
z>&d5l=w0B!>nYUcosExs-2#^>AG9fl=;3F#BU(x+d@k8dt$ss5M@oT*gLRocOoo&-
z#T{56ita4Oghan%1zdR$+5v0{CIIXtLC!k##3~-cRy%J;csts3I%a1n5c8%kUK-zZ
zM4yV$b@QM<gl-xtZ=IS?&nHh|c02Z6os@`38A=Us3sT~T9qL^iuf24ofk$c+qvZ43
z>^&R3(^oS><p2xl2nR*Fbl&~)!z`TUl!BlP4AxA@M?4mr6gnu5fvd$Z8Qgyp&@Sqq
zRGRkbh<#{p!GD@XLfYbwJGtBu`2@6r=Xyedn|A$|ss$R;;P(Tx84PUz1vU8R55kpN
zrckhIb&a5S%cm_x3@x`kaf3dtXo|a+wdep%goYc6VSs5I0p$vEX#RKm0V~JQLPC<~
z>v4VUtN^*GJ>Fuo0o`Ob9vSRh<JZ3L!4wAYQ7$e=PV!H-KV(@*NfXwFZhOa8c&zr9
zdtSI*dP4?^QcO&Wm5%O#t3ef!Q@0s9)V!{i9%kgWBKh}$G2D(s{lnvTUlMOv7CYP;
zeD%OHiiuf)I>Y<?aX!36Bk(oy+jF*Do{`-GeC6AL;2C&%?*T*q!{^VRgGXht#84tC
zNDS%#JWUn^@y$i-rv`FfTeko>=mLNb5feiP|5%v`DjNe_NHd;PO&LW7heqJ#fSW}d
z90P!7z2!7n-BixXV%r#6TISb#s(-j|1MX_UD^4Wdis9M80?og&T|GSo1}%Y|m*7Zy
zrnXCp+PsVL%A%N8x5U5^3Ttt?!_5g%+4eBGD4tDU__aV;paj|wguSS-bStdX(N!+@
z+J0A>bm4s7nyEw6f9z|;`oLqGA$|mmARO<P8C%8NZmwP!;j@nZaKE_*pbwB`h}WzO
zT0r}Sm%_@>Fz635Pkj63&Sd#LbBxEL;rU{2r66u1<B2<E>?=V4W4gMWNb>6H#Alr2
z{Pa{dmX*Ay^M!2OKL2r5PDda<v0!%seaK9YZ{Vy)z{8uJJCDE;089(2kN$ryz;L0b
z8+>(C)X*DKWPrtM+-W41YF34Wm1q4fEIAZPPVsnXt|@@r=c_$a?^>hqBJ)@DQ`Mg}
zg14NgfB=;JM?@>p2TC_MLNf-7?Kq%foCXuISdSG>gD@63qlS>)9Yk>D5dgoTEJxq#
zsze>B%7Sj9`)=bOMspODX7-enpg09+!yiyNQc~_jC;+SGa3O36>_R@FCN-bP7F(p3
zq>1n#{4fPPoAb6?C+<P3+&`g$Cf$TYVvd(;&r>W-W583vVl3Ti7V;Jam)#E&Gc;Dd
zaFA~Jp5*?n^<l%!`Nj?)dj9&EtoBp+Qz0&?{WmA4eu!-cu?wnIR8-U+BL#-W2gG=I
z-mb4pi#lsMO^yn@vELiqZ=RSqE11@0o}ZtOf1+XZAfB&&%T8N_j`nm=OG^t_(i8%<
zJBy2t>75S_UEUcQ2GqWA8&sM_m=$(DJUD1tm3g4?=-i)0*QxsF%j^xc9-~w?1Ea@v
z%xH#5<L~sn`eYCl&lr%wY@Xl2MPF;Aub=9OgV|YCs^TouaWN^s=Li?G(qsX+SPTfW
z90yq*$guqhh^DLI3lv#V`sgUWE{LF`qvL-bC9ODs#I&`wS5UebK44_5H`F|X#$cau
zfrLRqztYa}c|iP?8%6RX?hnMhR6(Be;W#wPeqvquWSt&rGSEiSPy8;I66(VzzJzj?
zkbchp1?Us&aFT{gJ2_vp8&Q({@DjcDL33~W=jfoX0r12vz>A6e$5A{(l!#J>fdo&T
z0##~!uRZc;NLqCu<+M`U6j!8?S+n91?<e$o`e2DM<dj^?<PJ=JhTH_CAtpO2!zSw0
zx1DI+Mz5ed{$#;W_t<|X^`tyCEj^*rnszOM9a&wxlhekch!z@|?MeE3rH?83-p>ia
z&??+*I5wsjpliTIh#)U4EF53WmWc~289~Ko<a0Tl1G|QyXpvSG`|&%FSb)ChsP;hN
zZ=Ya(FV^-Sb$jMOMis_|9q7#|*bJIsHpIuL^H}pG0=GJX+jH!@5GSk!JvXlidv3f)
zcebeE`oU6}#mN5o(T1p>8?d8hsYS=r#GhVv!YjU`b^-9Ty(xWja|VBUzn3njyI|7y
zK5tKhTl!yLycUZz!f!aB>72F99$522eO956{tA2~hzxESQWnEGC1wK@>>k%p)<en}
z>PbR)42(M~zlpE?uNDxc^JAIf5`X>2{e~O2L6}nn3KatU6Vxj8I-auwS|gP9qtyFg
zd&7VF4WC6vE2p=Y1Q!plOs{e0A)QN*{&bk&wF6{LC7)bho#?K<;WF!&&)IPa#C|cM
zEP!Jy2WtFGwLJ%WAu=+D`yxy-aR!itPFAoj{>jca9{oOX8>s%p?G5rAJZ&JN%Wse8
z`-g;JU}DNTy}TW1=}2{z%&B#^wISWrA6$iNc?@ouk@c7Ljt38<CnqOSJLheixxK}z
zv_fB+2GGao-44e}ceuUx$qyYeO20@7y2z@kjv48S_{VN`i2F|rI+(CZNv=6;ARvA{
zLmBF*lKI!HA-0nQa@OL5J;|kh`2uODf87)~17M$8!De5lfhijdc&;7Z;Qjlb{{OxI
z;Q!gqfId_j4nZBtPK8I0_HX@H)YMWc@dzTv1^+oj1o-%jqHe7;{{LTXcgWqu#RhLi
z=AojCiwk2B-7TE@Yp)!P-fR^9`{5`UMN?@2dLWa;^F~%vLjw<_Zt0j_pi4XOyqm<j
zzP4f2x3XH?-24N2EY$uTv^Z6uDQp3U3K|1M)R!ZL+CQMrm5KxB65K$}m#43djEt@?
zF+mcCphDtkbq2`aFr~Qr5D1SD)xH8V1)FxUUL#oC-r3lMt?lma-U|J7&M$a)=ydCA
zVXpN|vm*H4@Dp`siyZ;B6ubz9@~JLDLUaESMf+?Tk|<XIi<tv;HTZVGH?Cdl(BX|T
zODPLp4$V@d4q&b%aJ`F%Sdo||1TcaE0|DF3FoTPY4S%$Vt7{!-fm7q-e?vgFA?3F9
zPDn^7EriygV-3nD6ng~hr{Z`pGLUZ$2cF6G#ZC)I49q%{KR*n?z|Hw+9Z=D3f16Rh
zgO7U0xK`@lZ!?N_?Iop{mMXMTGL+;~C5BHFU7!SRQF{9HDfet+quchM<cLF2q1El{
zP4K2dLkwtZ0w7N38UTo+(F-Yo)BJl;5wu7?Fc-C{KYLImTpQ>OHn0YuolBq~mlU!a
zU$b-(e#cd8aI1s%<8N+cWMt)urFRm@_3gxe&4DN9!}xLae6iypKR>_le;+FdK9(|!
z2<M7&b8|;sSc+6nE#JKhX#f|->C-TT=+1A<&Rdg5kaY!yCP<+O!s)>e?g~$<>V{n1
zq}Bc(whVnkL!}JKc>wtMczaVT1jP9ZE+Ihq!Q-&YY8wo-oUoY&_=x}K&#i$!m+#Z2
znuthkQPC`n5F)Zf!|7ILtL>cu`3<K#<;T^(e>a!kqH}<A1Gu<gE{d+4nwUTt$@OwW
zM&7dk51*p?7)-PF!iSPwxlrdR=zP(MT~_<&!2t^YW#{N<7D({ynvmL-wzN!unsv6;
z5%Syc#eRcwn&7{uyec;I-tS+(Qecj%rmjAct5gFfz<98+i*nKrvn4>)L<gNd*vKKw
zq1?L!qIZj~goMP|7|g?dcmoI{RTjVVmP+ui!Q&euf=EBmhN0P9hFlnkHCh!`X8<|~
z&uOk%A8Y$-AK}0UzGd(xX=!WUT6z9G1pIBElFfcfQ_2n<%D#CCVgq~z6;Doj-FmH?
z>#NpaV&>sEe(s@>a>{F+YP;70ZzLsuIvwT3#hC*nbhxPc{Nkdfrlw03j#Fq0Yv7$>
zG$tV?PPl@t5l6zsyC6gw|1GhaV8<YJ1NZ&X&J7*xEI5eBgfzfYwPHQcX<HhQivByB
zmo(JvG4)GfA%O+}&%td%r4HsTogDc_xPxJp1k2;c!%$=aO%S94;LiEg{z0=1_Q!`3
zcqT;{l+7AYeyNiDUod7;xjWo4>_UhJTUu!0{se6a85I=__2x1%-Eghq=ul$?ydMBE
z_&oJr(Z`H1Qx2%aV^CDP4K9I)!C;4z(i?PRNI`YMtY)g*GU!*4Tyj{%tSBD5T^$IB
zs4%G$*ZH8FgLQogkac*S8-GVcD1?Td!2}|>ELCwBS|)H6fptYf$js1?!)`UaC!zB4
zXv_d!bZCVjr<E&1Zg36lJ_OZC2?=cs4MU0_=8F8^F9;YHf~@XT@%D(yJa1`hqnVBw
z%<l*c4i<Z42DF>!6x^>|bRIuJjKKciDis$O_wV1o#dU~?J|?B~)KcHFS1d_Mr5za^
z)+^C&O(quqdP63s7BuTN(DkJh15U6fGoO;+bxd!Iuq*%PhZM^=2<rUrYfzBAO;i8B
zUKYl>5P^Z8<M_m#M)EV<Hegbvc=(VeS-^R@#POgPFq8V{kVJyNO&FJzZ%ePax9>zo
zM8srU3jRBnz>EWU%V4<1xzgOyqTew-u9jMj{&QU$1qDSUyDYvV`ss_&qFGpkVP8NH
zuV2l$k~DD1oED|0d9=4T6d$k!?rB9MyicX$Q-MqiTU$XryxKP0?$@?LLMfC^s$h*b
zmVm)ElyyEZue@GK4uQr1Bv^4hz3}!Nz*PRMF=Z9#=yv{*4HOKJs#Z2O!q#5cAOM~x
zFw_u^jlEmO1SmWYiEaNjs~g`W#o2N?I@E&NnbjWNT^sZDw+Xn38$iKj4C!j{@{ROR
zad4_XKU?v6y;7uEsbU#~fr8Ss63xG}(zo~VkXJ-3RVlvb{?vNb8(uIo-Tsi8W=`hT
z$8iiR(?jRXQbAZdZQRVo1-<b{T?Z>H;QUB9X-k)o6MqFOKo-DcMBN1gNz0Yqt6Z#H
zGwW)=hmG5T21@BagFoZtK|l53^U3MOPBgfkAqaT)+cyGX;l`TJ6sLeg)OF|QF+6z#
z2>igHASEzYi=Ahl)Qztg@0+|-FL2mP`(fg0qo)VF_R6?8_1SuGc){t_{eFq9aAz@U
zwzrona>>l;a{LPTMgT^^UW<u4QB)+FD^ki{F1LK4TetsAp7KUBrcWka+K{HRo3Zp>
zkIDXGfb-fQEx5U8k{Ovf>o{LH_k8>3%KVBTQ(SiT4m*<^IUF1nA!NMN*_R*T$N5vX
zCXxHXqUQ}E4UORS={wmoyF-1}SWfe=l%3H4{`+3QEWVtwK>(gAeEg)dG(63UO(tNI
zxB_#_FtxfU>vbGEt<7|`sZBDA9JxxZ$8;+I9aue2VImLz4)+1bq+sG085`5Ba~f*&
zY6BCTRMh*X%UQRJi@k+xHC&n$NTjiGafv9vNCO~&Se+fov#@=KPC$VC?i1gf=|6#}
zN52mCmn=(60WMfI>KrX)U=K;KMh!4AP@uc>@bWr3IZ=g9SMC&tg|RRO$G6i)AdOeN
zJNbv-k5x}MLsHn~QFkJT>D^E3Y7Pg>NtM>q%*yQ}ol-}L1{udKXmaWpYPAl)!Ya$p
z|52)w!LX~tw7I%UxdKg+6If_+$g?8dIMuUaVqWmT))K2{>Vp_JOpjk%j1`840ijSm
zDol<L8{7MO6`nJoo@w#6nt^`pw{r$?Z8tX?)}em+a_4&Yn}Ix)1OQ5d8_IaI7>&RV
z1rsxl`yd8hdhkRTMpeHGVT@mLaK1>v=CcO2O93L;OZBa&`n!nN4KO(rH6a>lYM5!H
z(lvUVS4Jp4Pvht73+K0*TL--HH!H~)x2RlA2+OIxTyqu=#mB`3mRWErw##^>?`!n|
z^1B#DSLX!<nlGA0|HAC6K(bc?;obHh#PM&7k{H()?l*M^qTH`ZwM!E`TxudC7n0qd
zwcQN=`P1Fr{=Vbuh#GnVto&#(HiU3e(_~4K9x<olcQRdZjmh%wkEt;@Jqk2Gr#p=k
z-2!E{b4QV&kYH?Omx`j#>TYa>4LNb}RO<aWJi+=^0os^orUIIMDUNv@<igseeh1=j
z@bT-WhevTK16^l%IW|lciXqB`05328cq{}F7x7c3Q(@5`UzwHN^7mITk0g5bQa86A
zJ~T6{H5&j?;-}+5p_iym8C^jSdDmm+Cn16fJP~F3oh$?$X-6BC`gLk4Y9+tHWP563
z0dK=08RJ*$I~{I9NzOZ4I8zot_#eRD?Sl;k{)quM+L=;I`zw`%3^$7wDpq~}c#R{J
zL@fACPfZc(#xP;f2#k;S|0$+^_|VXF1!14rv{y^W7I(+#bocfA??M=1*<KH%XG6N-
zhvgXD^YBZ5J1FO}w=#jF0d&-_R{LrLgPE4aa?QP%HjP3;gSwl^ZW^&KY{=uD$sP+n
z4Pw-(CDOP%>Up1ri*&|<xAL{BvkciS2jo+6q>!%sM@)^290jidd+fZ_LsO`-C5kL}
z=LA-dAzulM5{gt*Jp=3y({&fc(lHfqDZ*qUn9n>_A}n-uF#4IcZF{(ziAmPDd4YCK
z6?EfGz8FF&;O=<}PU1bK!8{cuG3)W@G#bxoeXj@QC5A&zMJCb3JewXsDPrpm<KJHH
z;oUtJaIFU1DB=~^;+}Q26#w9Z9Y;f17)TiFWH>lgRud$L1wQAh=r!+~Lnz$;U|6=f
zRPp_0R2EW~R#PM5c^JPTZi=HoTb<pRC>>LX5BR_)+KU0BI4~8xDm;pmJJ-_<LZ$Q;
z^}Cb2ogTJsaMz{U7h}VskgTXs1J>h!p0x$GYLA=tYI{v@CyL-ap!>LV$Lb?vecJxB
zvVHwX7f<R}KDdp6knUx|eHx1#3x2i-n42LpcaB%3dX&x|;GI5so2N|fg+TvkT3DS{
zSN8@8q6@k%SLg2zpA6sl(>HIe61ZHSWy1mWD*I8g>_(j@JCe50r8rBmh)=26TP>`8
z>HpONY)J{$g%qr%_ZiOX8yoXDBFac)rQk)n$dn$tINAu%p>eVYoEdPauCtRdf0=}3
zi|`|OV&iDG!(TpnSxkr^Ud9kn@hPMQTYK&a!iV9xM%R)OeM-?)WS-7bF(UM@a(l!B
zH?53{lk!XK@F3-ARq-*>T)(3$J)3*c+>v{SZnrDztbkGQGmV6sVu=Aa=flfR6#IPe
zY||SIv(yuX9{X?G108nMB-x7F{BokZ)`*mDnZ`iED0H?1(nTp~eng@<Hwp0#;<+w<
zs0A35nOLX7fdK(q<0a31*NdA5ofx8%wchw|6zbFk)aitgC$ZjHUpkWNl?bmg>R@y!
z5%oQ6k;SHAKyLM3C!AxOGz=mL5xB6*0d`SmH0k2LS@09t#Fnq)0zEx%*xKp))JG<V
zOXBo(>8{`HpJuxsDkR;#=ad#_7zs<rUY`er;4Tu^GF+J&E5MW)wkWu*^u8;J1dD$W
zWoJ%s813rirEOYp$1)Oq7NOhUk|&Z&v1M?116dM(S|W8ll|ZZ>L9`1rF1+<5^^<L~
zVJao6&0qZz-!;mqKT)k(RsF;Zr%4(Q;JSsoUTMU>BF7b;_Cbq@V58S4!}c8nFXG1f
zx;LAH(SzbIqt4}ee#7;y(k?e-JZ0zGHEXNGX#%lfU;3LCe6XMIJ@tr1a(+qNN&S%B
zao<Wz-j<S}DQ;XJ?P#72pid!k1<};fugfi>2Zls!aPQ?4^@t}6eTy8FP;yr&^dBwj
zj7Y`|@X1KV<W+6H19v0s@s&ehY=2YJ!-qsaA)*lVXsxYH`1{88wug=8r_ep|4k`=8
z>Vnn$qs<8vGAEa&l9CUnB1Z3K&*5kLvW|#|*tHI>3S8ak#g2vIV)-zflqUlf?+&2c
z8nF3wgQn6l88KE~QSlogerMz|#vE~+LD+|l=b0piYbSKU21*j2Fza4ek!px?X~2`b
zo^Y2-!%A8bkCMh?2~uKSapS=y!SZ2WDDfb!9Bz066-qN*j2%A1yIVu6=sJ{R$2okj
z6j?pJlF?FW{6F5#GLV$8%TgHh;UCJ`Kdr2`xBQ!`j=a1;GxtMpAu3t?V4pl*@Uz;3
zh=NCPzgbA#REl58OijJ`Z59PLufWe`ldu4zuGd|CS^KT%FXEy|OtNL)VRN*93uV2d
zi|O{H+$~7)29p+^+i0xQ`PY*EZKmI~st_K?W2;&o-&M4+#J$dj`TNFfgDIHRyw77?
zCd;b!Y0HEcm#}qFRCsO0$#EIPn3lJ;{AwThJ}!Rdl7EULuSzrDpSqw%xV&Hv%d2{m
z8-j5jZK8?UCRC>>q*vRLg7N)&uPvE^-^o+u@kJ2x%yDuH<04zr_zXzsfKFhXzDq@-
z=-^;y$LY4pD%KerKEunO(Fv_)PftjBXii5e*xq-Ap)4YM^i_AR1q~KR<vo=f5LFrc
zfUFut?)BqGB<!ghtc3TN_2tW#OiWq=;zG1?&R(Ey$i=c^Xs4k(6p)jS4e=L$W@2Fx
zh$7w9EPC6tTwW@xz7iL}5F}V-2S}$xy*CABchucf+`~?7O6qye2j1g7Q{!qho6Xj^
zKIxppkB`FWM1Piv4*r529Iw2>S#))lq_F%&O2#DS1?t@Z>mhk{pFC<|`K|H<`(EE~
z%4hr3rAi5fHh0!KfoTQZM_2azJkF})=><{>_93p@wIh{N;;M=n`B4m>)9rpTeDk^G
zw?@tWa`$tU_*IK$emNjfBk_rMdwF~rz9+)W@b1BWuB{oxWWDVp5>F&rOkqxklkI!x
zij>CQi;AU4ce2a&oSo`L<}x@<%gD$cc(0mLynK(xuUv*%CN{ApYc3i+BD*utr6KrP
zD#w@Qp&*@PFH}>1Inpdcanj0SB9D`M{(W%hJYTtp!|d$$iSOLQhVWCjvd}~6D_)r$
zq)U1Im$swdb%7QF4wiSuChLM#xD~`!e4X=IP~CSD22~2WUE-;0ogMBOes;_)4#e*w
z=drWuO+*CcMTsIIZ<60o*OvlmiOA4OJRV1n@rG$B2Ls5~-iK<r=x-vU&)wg0+aoMd
zYC`mkk?d~jInoOrPR<3wW7<vx6e5IX8a}?x!NK9~?w8q5&<8l)+jWOM!>qQBKPZXm
zOnAW}f*1VE@}Dlh#`e|KW<#dug3hJ7UNW0BZc4|YMALmSEMbXn3#oJR`$>4EQ$thG
z(Q(nh0EdIXTrionPa%CQ1WORK<?Mt;?#?quG0Yqf4C)@3^{}XW@V{{K^PlZM%U4gA
z(z5!a*%guAg4-#^zef=jEz|WPCA=+#F&XpW>0IeoBASK|3l)3^57VciW06^t!3}nF
zzqxuD@qmv|+#?m~@@ggdD4t_)N4_`7IX{ZatE`sLqY?D_kW@80;t0i8f#^-x8eJKs
zdxp&We^ePV-Jj-VM<YdssQ#FIovY;O17}6ZvA@RA+R&Sf>eQ^5%Wq#@SrGC7zORxa
zPvD5ZsI2;3EvC?R@cKtw99^VU6YPx|y1EF%(fe7=L&G}$^MmtX+TaCQ*7aRMWg>p_
zsfw24E$0$q`kUrqcUxM%mi<nh*Et5<P42VgKGVsiFni53?jTBud-(yDSH!UHdw!=B
z>Bl6~(ARbtX{VnSjE;}f`OX6n;7r=t^W>{vq2XyK^aWFFT%E<m^oLc53ZHxi0s-iS
zh8CH4{V)LMio^6-N?7LRH`bY(Hj1v+P_h7JqBI;VEV-pp0-(=oYb6e;m7W)uh=3X3
zU;3=9-Jv@#DSD7WU;GQ3f9y9ZLLZ&IUT%1G=u!N!#Uam@D0q4OtIy+rW#hlIwXd(q
zgP|r7uw7h)^fYYvQdp^UD?1cndFbq#c|W+HW<|X?<pA1wRD9dB!yymb5`Y0^T+>!n
z^YA+_r}DK3c6D}2k#m33p+`-9e(uArCE@)g*?6Kvs9Qc)(UC9wcf5cr2(n@QVXrH&
z4<*1ABu@fh6tdU<z?agMeY$Mgdx=Qq8Z4pr5kF7NL$CrPwOUkTKfzKe;cms#J+AR~
zh`wgMA!Vtlf=WfQT85FdAyUZ$s4z7`H_+>R)kYiq$6s@IAgVD%BJ3Z^kNcxk_+`!T
ztx<EmvZBG7lQ9;3!{YL+Ah`w-yF4!!#m`pbfozeX{v*u0`XNhSg_JY5`OQSPOyuiH
zR#4bH*}j9PU=FPf0az_E$02K1m>dUpKbDa^&jSlP5R{svIRE*Uto7JtFC>+@{l@eB
zC;lu*hNwp@4fXZHUEkg;enoCIs%bh2b4O@Z-~Htdc$kql32uvvQ4}|nM!QDbBK+1t
zWxJXZL#%U8Uoc*p!geHc^0e=?W7no@)6z=hLdy?`F%*ye3h<^ZWCa_`-z1o<c7q9j
z9Ui?^G-_cFb8mk3?|JG!I$?oF$wH$w6s9#GVGAcS9U*LO9XLAHg@(R$<ydW@9{%vz
zJrqc}pc69fxZ17sx<-L)6=c#wa(>akZNKg^coJy$+pR<@I*<s#{ebR{jRb|$-{!Sg
z*(GM8=kBMwZ0A}2hsQgDUlj{+6)YP)pRFTT1l!KYN>MQ13nwTpDFKhz6DQkMYidFe
zjxbYsNJe?+>BYz!eQd~4M3*!_06%@YVzh4Z|KQ+yh06W{DPnKup}8;nUIQ{3nnc50
z6_LsZ&m$})6a=rzu#*n~zpRwqt1|ZZuKQkcX=!P{Q&CDV402y-<|}1qMMr14=#dHq
zMXKiga&MlTJl~yPaC5u9Wwcus)GGX#H!|V)wch_UI+d>U{pvMcO<)w48z;7R)UDZq
z3fNXTqNSF?{ho5wPDgYusF%xnQ#0ioLa^d@mWR<h%(wRtinr*YGN_Qnedz^1)6ef2
zo<PorZpYZh(sFBSD_x+G1yx0bYd?zX0{zm;M6ncO2vDB^e?US;JIbP!d-#SiWOn|>
z=FZOfJrksHftpY6!ro}pm5EQf+2SmK&h0c+F>O`>swHR@Zz~8m@4NWH1KK*~U$9!#
z@YZ@V<9w-&>-b_Ps6<tSSA<j;Wqc>+^LzZ=Pn>t7-v4c$0PHY>pJ%p+E3>s=Fk$-}
zRdU%xS1#?&q`@ev=Ftusafa+)6&3~tvFSE*Ub0Ql14N*X*E*WMfA0^>)+C<i8Wl3N
ziY`a%DiA?cEtvG@N8$<6t}b)lSd+0|SJwSua&Wpg1m0piUuB#{*vj|7QAByV`gufS
zlPutN$qF={i>LU+jkg$h0BbY7DfLXp=u(X5XmtP#j_+1`^aKO3z-Qqc_ev5a&ku7p
z{&_<9$6wgrZ9T;l#~G-HH~UjFmz_ZkiJ(Gm_d{O`!U7cZqsu$gr;k`uV&vNriO4~e
ziSt)3A!Jc6{W+-rin7kItsa;-H@i*uGasRgLtx?I0jMKEVPO$^E*<8DKI?fLMCkvp
z8-IfRyri5t{B~x7$|!OQw3n7(R}H?#{?>>DYfi;uUm+nbrN4+fgeL4hx4sck6#5r$
zojI_BHugW@T87k&-be9XY+YVlyYa~-b`6XtO$m2>Js@ldMk+MpJX9K{PO5a9cVi;_
zzdg5%ps8Q2pl<!8H{^>k^|g@J-R%NanKWYcf-fQj`F=9m6bH$iX1?DijY2Jk!}jP3
z-{c~r7s?S-oqc2?G%oj;H8{VSYL;71qpOp+d}<cS$*XewTNM+ZP`7+mMtnNaonb_p
zg|4^DB9!8pq`c626iI%EY4DQF!urn6^*xh^ry(sn3AKlXk_U3uMLJ2Ug@0I`k8NUG
zfBBW>wpT7Rc$qz#<#U@it|(SWcamJ1pY_mnGwK~!Hzp}|J_&_&kx4Ih<jP3OieQgQ
z_L9u$tC01+<eMkQ0WjeuV@-L1ipOwcurhhWRA=Z!q$%Z!a@3d>F+Xo!-ASPENzdBa
zN?-qc^cf_88h(7Nrg`+njBFf3FOh|wo-<NB^Zqn18rp%8p!6h57lV1yk@ueYrr#hD
zclJhbZbq@G_`8w@8N&wbSql^EyvV|^Z#<VD!G*qvsp&z+aebu0aicA8#)5hy;aEi(
z;dUDR?K83BKL)#+mRqN-{pLcGVjI#!PByZOYiE<Kt+<Z(m!e9uk7tCPWl$dMMDokZ
zSUR`wntZu=Sy7#FqZ_gOiJ3+HaFojj%M(wc+D%Qd@FP2^g)fy&fQGs2vu;if4rwRu
zKgwJehu8nU(hnQ_a=3X;Y_3A2x<2QW-!(cy>c-hp$S5e7&u@AX9%K9F{8QY6VGW%s
zk?(XaGA>)Ee)Z+9b#7ZQPPgGOkrC?-BS<RC+5EAl7z&=S)3-K#*lDjN#9L6)67Ok#
zuX6nD_o39DQQPBio3so8f3r?3-k6TWqsuG*f3*O-_59%sOZ&LsrNQ#T;rY*8YcflU
z;T_D$m*DEQW~;{3kSkwC2D%zcdHlIELr{j@X!z)H_<YYD21`T3gtG6{nIVE9riFjK
zR`Z79HhtsuJN{{p8Juv<{eD9BIXCiM>?yy@l@N-!M!jeO#uqlPsBabDI^CEjDh<z!
zW<76go#Z%MxWYHx8857=qoy(#D1(C*80e!S^@5gM*<m<Me<8FQ3-!GYNmOZS<$do>
z6{TLEf*8RX7?(wnjZdvy9Z#{`S2&K$LQkdaH2*pM@6f1D<=Y>p)6VEFhC1bPi|7B%
zPQ)g@z-+DIM#o!%5si`((wnsZ14Wp50RjDX3{0|f26Bcv9;<P^2y#e<l$5Z+v_^ip
zxwRFtF~g9J=zaEva7}7DT>=ZXbVE2^Ai~^c=Jew1EQVe|<bQ@l_j&5M@kIot$?<qh
zy4!W?s$oW@8Mm;rGgkBY1O{mt*R4P-qIg*>SK9-;;Xgk=c=h{$TO`F`Z?Bg6>3@?Z
zbnXS~7GRK^Kwe_a39`)zd)Q)CLV9|;h1wS{tj3`<qnbeh?ikEja+$u!)W?ij>P-3x
z@clUr@L#<bc@N<?fQMFk5>B#{mmgoO!zYGhAD9f&-L3=xj6=cw5m<HYDnQcDH15iR
zM)-FkY!oNvaI+dK#9szP3NIg@76a9@XV%A?#BbtVfL>(Nqij@4D-A>Ot)XmHAk{To
zeFD7A_G?RsV1{tL)3`oc5s{I2^~zwxVe;pmgs$t6Pf<}3<zOz{Y_Le}BY15%IEKoY
z+~Iite6m9Q5GeE?w*O=*6YL&1-;PTpzyMGh?AO)>ix*JS9{G?80wPlnrZz+mA97d>
z$HMmpU`mk<S_+DtJ^@m&$R5B}%V-9rV_?L<*@@b{GnCz+b;pKDIfqrG9>&t^5W;c2
zz+9cK>D!*>HSInXW-w|CeFyV>5&@SCAD^WthS_96_h->x=b`Es%TUc#T)OqbJ00E$
zs&iZ@Qh)mS^DRUBJ8atq@v&`4*FC8c%=r-63n4w}0X8C?Y$Bz<-IJFuo5#i)O#2`e
z%PG6y3b3<U+nZ~ey?TDPO}FK4MB%85_X|&eaY-X>&6}!;j7-XTngdZVa1{6R2!GfZ
zWrmgappOE$pCv}C_Ou9|xaZb??n~1>ehkxF*_`SI!rjxA<Z|QAs7A=9{Qw^}WGyo5
z>iGYeoLD-8+%Rl)o2=aFFSpEw{iLuii#PKtOg<vWHz&(4RCQfL&R`Mm>R{#q*j!;h
z41GQ@@;RIicOl%`lgKThtBY?#gAB;f(M;(VcBAl742+`g)qiwq0IjvsY9b(mg53==
zKtQ6Z4?cukmNW3yVNeZDOCCG3wdJ?4G|v@8vqtG3rZ>y$>z6Hrd2IeP60)!ed7~%c
z7no!1H^<==)%dY{J5ib72m>af&d>M8fVKi5dS*rdK9xAu$c%suz~(JRq?S4L%CaC2
zN?lGwK@oOtRuA~l6PU{YRn5ZOd?4fX6-;{{yE+dtGCWU)OS#gT4D12;#Kh&!CwG;Z
zo;|DAC=Y~;A{(cXVd@D>B<W3o<_WaRCx3ln($hsRjthY1wA3mGh)=2Bmwwpw*G?jO
zdUKwL4Hmt%@Ea#+ejxrK42X1?U;dd+wx~O~zH&aTF&{cNAEH~JV&O_>f?4o$F|Sxw
zF0Ndys&xqXDKeaaKIxCL0lwlD7(L@X(^>?YU1v4mn85yJDdv@x6@at@moY)6{m#r;
z<?J%xNLCjEvkvtypcg&mwOxGTp9K6X`-=*Td-Zl}B)==5nx<ZVs$G2wO8l@Pt-Zim
z29^%l%iRSKfejJ5lKGuW%!hm-1QrV0#VV{qMtwq^4p(9KlsaruqY^!*nnOoHxw_bK
z5B^tH)-KSXwNn8f_djJ)tJpB?`k|7a1smE$`o_C9q7x}dNGd=h#d~QaIr{*^0)FoW
zD5f=b-c-QaG?+F(rc)s#O&l$~ug+rRm3`iik1@~Q0oxIlNmB_&VHlY#v=#Tl{<N;>
zryN$}chDzbxQ&W_^6%4cMcWoETwPs_NyG|snuZ8wWs_H8-U+d>^l|_<80IK1%BSih
z0;XVu`8P<a&*@txIE<l+iqaUrwhKy6qgG;2C$KiypN-Q{V`66)Nteo7Yq+_#9L(sj
zl?9aqe*PN$rfSH?T_5yyf?3|}>c~Mjik*T2n68sAxw-$cxm^-Hrtn@T{|6uF9f?oE
zENaRtZM+i`Vq!kS!mRW2yn@M=mX6-u2mI2DPy4%?zs3esf>U5>`pU7yKs@Sqgm&}q
zXU`B5lhBau69bBi;f<FxgB>fdj|-EQl709)*569#bYb<t!(4Rr%`)?kOVV%{+%9GX
zO_)tPCwwE}#a&6)_LdCgJa3Eppnh8Lf%?huM2`H)6xkq+KPkj(pCMWL&%|_FUA{lv
z4S;%Sq)1n~E;tBIM$o39yNta(8I38_aj|u(Y`L`$hJe~F3_}K$-X$+cNpFH*m@O7o
z=gDh#F3}yQbSB-24yx5>yWASg)C5k4xPeP76joHabstwMO8K&+qv+$LItB*V{276G
zK!v3Ph#K+9V%4IsXhtv<e;mn+4kEl!fwOA4M-z4A3d~DS0WPUDP!h|1&<10=Fd{aP
zf)uecQ)H9YVRisUBz+j}f<fa65<7M=6|XBy$!%<O0sK3z6&dPE`87B+wEhzYsg=Pf
ziA|#ntTXEBiqWyQ7GIk0kuS}d3MF%nXd9{(z!>$njS|65fyP>C<{BCXNKLe7hf&l3
z!rdfA3PQ<{&c0o!CD+tM11^Wlt9w!SICX?^6Q@4wr%`@zsOswn#IQLZbx!s6zO^K_
zz7!KXbXyakl-Vg*8R{J$KTWWyCwp%3lRaA{e-!*0@$5?%;MfNL3JtF1bT#mLEy727
z3Qj%lU4Yo5QR@%@3B~H4KVbm}OdA%y7Zj}Y-4J`sf`9~jwSCUN49>dWzyhOINai>m
zuFk{y?`%bOav-~bEMe|}AbU&X{Pi15AM$xd78X24?J)X!CYyXM3bFRY#6$=!eThRx
z9$0bPUqr!;wyhImFb7}vJ~}ku(*T+UP+7RnM>{*%Au$M#JEJmv&>s;WRAWGA#vF$1
z|Mn$nVP%y>-vx1IaZWF}vpOv;ErLk(9}-ehs^Q>(fB|&mJv><HO$V3;M$2a30w(a{
znirr=Wt2!oMA()z+p>DJ$P)`6>KL0W#CUx@y;A*VK3;4MriZe(jUmbY{xdAoNHFbk
z3zR5jp%RVlcwYj<gr4~Fmk#e6Tmt!Ky5l|)Fr8+)-v|J-7H~l~+ci5&(op#{xL%Bg
zQ+Yuw;ZLe)HhfL@2B!N{ll8ujjf~ijey@^JhK1|NV9hI3D}m&;#oRABV4o#Abqr-)
zy@V~?P@M>6m8h{*!b<x2A`{vHamZbmKzx`^=G0`OG<qoOO<Uf@;To;7A38ozNzbIX
zeCgFC`|%kU1CekM-7iZ3s&MOH7jQmS3?g^~o21CtL;j(!Sj@1ov$bs=^~p%%!@~$4
zlC3jcTVFrijPu(cZd#xv@dRYjGCLybqJ-SZQkSZDV2<tPI$pBPL}{KDPnwdes}~e#
z?X&~Vqv$L{I<(67glWzjOYJF>LVG!};?hr^agYkmsAWi|!o0%eP=Sow@89=V6f*ii
zg8J66AW}{lmi-*onyEX`%Ryy;9QNy%P{uXqy#fg7!e{_=SG@T|`K>DL7$$XcfRo_h
z=$o2mGkx0otHSMp+mAK+2Ps>b{i}D*9jA5rKdr5=;vk74&$noIeHjWh%FN?**aZ%l
z5j0d(k(E2*C~3-&8wPt*HXH!YEtF9J;FE4=KBCZHQ85ZP@hVf=Y?bBM-2&+rNkHJj
z$OOt%=bLN(txYR9A#M)>$aS@IVBy2+quN>>35k4LFR%{tx?Og!4XpryZvDT_vGLE#
zi=zBn02fsEZfYAkUp2K@%R=x2?!$aTv|R(PqQ|6AeZnF|SGd0i6={+DT%O3)H?D|F
z-5+2{lg|*EDl@k>FbGxwpW5k0kwo_1D-tpF#~h>$@)!nh#S<9S`m5g0dlu<lFlm(4
ziu#Shhn@TPQuib0@yV?X{vahLU^C+#Q08cfiH)<M>&}cLrVj2BH1Ct#lbrvUUgC7^
z4?I15Q&Re62r^L?@PO(fKIgZFir)!95S-~|)uLLklaW1o<QdInIf~6c03&6{J@Ek~
z^6p~B>xIot<)()@edkA0faeISgbU4XwV!=0b2s9zkn-_gpB3;YiaY?EsUK_!J2*IK
z+Xn+8Y#(_uxP!rc>t^C}I=nvw)s;l-`ucisqOUxe-4(L7&i%+$dicd_Ve=%!Z&xpR
z;|`{Ri66pUsg#Gi3|IJeqn89sjsZN))hSjGo+iePtPas1t(@?n6s^9YgYu9NTCR-B
zid80yu-h~7oUsO6OK2D>TdyF`2T?oeU{>3O>__W$m2I0?4Mg#(w6He9+$PK>bK#4;
z6z%IAdm30y@iqOPh&nqpzqB-3!Bhmq>fvso5|FvtT7Bya?#iw3&KKCk#I!8QPg9#L
ztgXMD?{zz%bxMCyg^iLiU!__U^KjifcZs8qUcsIiw0ztEtD(C+-K|)q+?Hg>ogvA#
zi6=AUU=?g*GxS~V+o4Q`>`|LuC#<v?+Sfs^Ft}6Ze)CU9J$OYq&{s3|3}ib9mbSLM
z8q<r5SzS1YHX85bx04Wg|6VPw9Up;pi=Q_}>*1mBw55RAi@I&J!Yfy?IB(x~mX?ur
zZlxTNB7{mCZilaLx2?FIiS2P|*t{N_Qp)=ZaQ0E90&cMhVG}Mlc#5KWz~Y+=Zj899
z>K)jilfZSABNdGbUgPDSiyz>O(s;7Cfod=Y%5awL)%&!=PPYG90U^Z*jz%^$7%P9?
z5im0`0Xr_gqcuY5b^_PdPxqTtFE7`QuK_W4#ExxuW}2WvXv~j(8Usn4D-dC!J@G)=
zcZ0=1!GGwM|5V!(a$nw_FwO^bno$VGked9Vm}wi^3q{3D?I$2A#^0R>2N62@AtZzs
zcPRQ(z1Ay?;8AOvvx#}O1=8r#;Wiwr>1xtOa@;()uVdOmAU9hko7BW6p!L66013R3
zEj3V6Pt-c5Lk9-ITQU|Zx<sxw_PRg;sfCn`A0p6PJZyw=Le2c)L}-J3qc9VM^-Jo7
zTIM}@kY=;Ixo*09SJ(%w=6G#L`|UoIj$o<+vns?CuD7O6sz2|1;j{w7f4yJAiyaMh
zbxt#R-Zf(S!$zS0-CAI|)kHiUKq!vrUP;Ch^|S_$AEe!o9U$pOhL8XJ)25`L;0?Sn
zKdW*}E#&_B2}7>KAAP>@adFH#mslc9VsGx=^?-e{uljuup})c=Ah=$Np}{r=!^z~p
zKx0b_!$cY$@)kIvo@IkD4%K(f&zF|Zu*t|mj;JT0P}Z)ndJ}-#Qh#;)vDpN~QxPHm
zeuyGI_vgS#0>BP3n#<9MB;=rWcl|fUY;Jc<f!F4iDvM{(J2!_t++Z_HUTWlGQT6L9
zZGQ2cJg3W3V!W3h{;EOo<9z&xNhvGC){F;LY;LU1SwdBnu(r%*cAlJ{=j`+pTrQcP
zcb*j%_QoFk^)b~-TwhlQ&u&}H*@UTRaV!4Q(TVZ#lu1tkF`I@Pk5T4W|58D#l3F1O
z;7M+KJkn0!>VXw?;I4(_w!Qc3*nrKqFnDGg>M5Ydb=}`ii6!SSA=-CXWt?MSw`#u+
z8wq0L<J%M3fa`iMfH$KTVl`^%ucDO$rBElT+^;7f)_0K676(TkHMsFae6-;Bhuxrl
z@5|m6Sortv3Q58ZKU!_Cbl(FoeXr;*V12^bGrkrnoTq<3!jwS7%<t<6ZWwEkN`AH0
z9ehzH#$oM~akUKY1^A4?KUELb@3a$#QV2c}U)#71n~rsLk#a;37RaZfd%kvAgqnRW
z#8%%03v#96Nl^L1xXcUiyr}0wb+n@N&Lgj0o!jPop_lkY@br4x3DlxhFC2>G@XfN|
z?ZvV>*LwK%s0j(dcgoUO@J}3}xln3--4K+Puxr^MC(EAXy&1j8k75e<OLYP9x7cj@
zQsU;q^gc2qgJvD%+PPZMs5tSp29N0E-x(d~G#r0;U#xo044`+z(8P*Tsqf_L#1A98
znf;#=`iH*NPOi0{j+fj9TtAYB7QFU21dM1jq2j*S5#;RO+D|(!Rw08$^)d>Lh?JCu
zK6>_^K+S$M56>hA<>i;Ut8fLYq^zvgh=>wTdcR);U1nggUA^b^6S1QV0dc=8J3azk
zBnjZwnwlesiJqRG5k5bPStU&GfXjSQrV8-U65&Fmg4Z82CXcuIzuVWjF7{*N0ex3?
zhWnMsT$Gi921Jha&CG^N3@syMa|%r2goUZ%s!q_Un`Y{2D62j%v~IyptvL22Qd(^Y
z0wlqs4gOthM?vpq*f2o29!b9UrV|nSq;qO<E|OYj<g}eCCnE(*Sp$psIR^mUxbIe|
zkh4R$;BcNnxBjr+)ejuJY$1;(Q$^d@Bpd<MJA{k|H9Dj*7MI`N-;)_I@BsiqKpe6a
zK(^=zgF-@><$vL@;j-)Pzn4!9bqAY)509lE-t69jsW%VipEC0maLgz&O5IvBb^b5n
z-aDM@zJDKADpJxiGt!a~N|IeDMOm2%A%yJg)i9$}h_XVmM^QEzA!KDHd+)v1?|gUN
z_xF3>$M5^k_xK&h=Xd>a9oNwn@7MeFdcGdxe4LN-%%2@;Np&3MGnaako~~<WmzCrT
zk-#v)r7tz|jcy6YJl{$glFq#(E+rv&tg_M5(#GexU2AP_zUpCvawDibU*{8ezEHCU
z!uAMFMJ40m%{Lq)Hp|ny1NKu=qF-r)k=>rvOEIkCaWV(#u;_>FsNGQys#{x$+7tfV
z-wB}3`O>=!8>I4o2m|By=q2KC1neq;0K~u$3VGHi2)YN#1x~cp<4x&v2nX0P)4hLR
zE=KAKpu1qTLYIjcX%+Yf@^Et2{9v77^hPbV0(vA|Pp>Q{sibmZ{~5a>rcO>`MNevW
z?#cP67_eQ9_XOhsGMA-}hy2jR(1+shAw&FDl;2&jq(HxRL^k)KA?$%88j8KT!2TE3
zs~pE#K1=SUY|EG#HE_6|-G+eDr8y5JNGX90*Xv6=cVG+)dtx;YA3hvz&lJ?@uB(%C
z;-_Fb6<*MqZV(H5u^#sC#Tez5shk)lUU+llm-KF<`xmh1C1exu`OK|b;ygUM_O>+{
zJKWk<%H}0b==mS{b?8-v%*27n7lYZZ6=Z;nj3@uZSLo5woCuGMU18I?@{=su0RZOd
z%j_Z43=B^%-jazv9VswVdvPJ^;hq8Pxx}FF@4i)N#VYb%Xq;z6dU<g=yPxvm2gF(X
zt=)=uM;rMMvAhU0I7rr{XBjmecJJuKb+rkNu3*g+apCzVCbh8Dg&>;doP=i7(lsru
z+KOvkr4rU3?*ERy3{<BwG9zV2bltPA4<DGRR(JpC<kj@v^-D9rG$wz&G5T_3POGn;
z6qlj1BT@?N>eX^>tOW%_@M>gdQ`S3~HB`kkc(NofF)Qkb`R?!bW1|OIekyS9)_l|a
z=1Fj6Pq$n;3j3ZtmuYnj4Azi_&_Rw2Eq!!Ys6>@|IH2l7U)lWU#OFul77N`4dN{p0
z*#{a8Jf0v8X8T7*g41ZdL+`NVQ{Z{j0qQZwj|K#o@<m^+JVitD7v|QxkwYxD)3Jw;
zH<3B%xM=_RuK?-)z54Z62cEFJpztq~Bri)=2=)b-f+2ov1G@oum#8E@+@dx1!w(;X
zPVa-Eb~9H9ugQm_3flr>=+|<m4|OU?LLxCLz+VUZ`dH4%A7;B?Q1gVAXHfR-xixU+
zjtM(CZ=fnVe*Qd%#*~ywnD@g;aTC9hCuM8>-npUSf=f#VwL&}a(wsi$(!Tpxr3FF(
zq-(TM@E?nY9&Ri6-MB08=Yi~E1mp+7`I72$WS}26__^9i=!YZ+$8H1&=XWgzb9!lj
z#&kPL^#GuKrcfwUMn^|OJpj5i1Kr(ssi}vcQ4d`B_I~+6e5?1hEm2qcI&vvcC0sDQ
zlj^X*Cf3xegOF&kwJ9!f=cIJb5BEa{4<dFt&Gb^{-OjdLflDA<E0>^NZucj5$-M5p
zACybEhcF38Lj+V2f`$rGS6JorF|%Y>V)G;{WA*<u9_s5$Y}<xL{pI7w*Z}hbAOU#P
zn;*p(R&>T1Vl=?tmEUShr@rxamiN?Ptybg5n>-wT=LBsYpz>fHP*Q7@6+JWFl3I>N
zig%2jh6eC&c)4H4+(4DjIS_QqUPF|(BX>#e+O^Ycf1)KNAx!&|%-DH1z^jsD`<O%?
z7hL>^Ci<)ERu3fTzTG&S>$-IS;0tVCPs1c#Y<~<#Y^J0TIT;yNHu;_i8yG-`BZQi*
z{|SNllzc0;?1#U>Op3#T5!8Z)VHXS8^m1vh-LW^1_<8?V9Y|z#?D%mk(aeB7Ze^8@
zt?f7LORj<&$kCCJkQ1cj9EbFVt=bP1F$Dh8^BfpEW1>3NnJ<pLJ1FKZGuFi=Cvni7
zk2_PSfEQ9Bhk_J;VWvr?Z~Bl{swM**wE*YUzU9f3^qYiq2uzg^&^{3^1y>S9C6JSa
zW_RaC^p`B3eS?Bj%+0SsGSR=lO?Vz#Kbi$jfIw--+a;*1Y*iRaZhat?G_i7b+c7hE
zlgL3P!c}DN?#BpiPyvm8`UMSYTwEOV0ajO5u==}g##iq7aPEKCmpKoIWAMemWv2-f
z;z%=Yd7PFu%~eSMShEA`0}KodckYC~J|p!w<sN4J0~tXrW8W?{dHD@O6sy>wKKF{<
z*9UFy0EIiRO$-h1fjaUY2DwI24vrfx`y01lOA7E9_RJ;|zt3RBA$d08FeBp&k5n}S
zA)Jjf0>ALBam;G4VNm9`MXz)_*Jkb|^G01X++UFVC|;hCC%e9S@_mH!%Iv}(>J+Eh
z>rBUwmw;66?%|<(-RTp7fX$bG?bQ>>7om4P>2!day;Hu@(!mkFm^ly0dv82ggm7>1
zb}eV#hRVuwLPEW(3+mWTF6|~YdQwDJ8rnJ#xd};&mnZvfRqce;y8BMKCNOs1fAc<6
z?%+`HJALRbwk!s^edN9jknV7~|8<zSI|c)orQ!M?<>eIQh5uRJ-Vvhe%(fCOsKzYk
z32zkb@4v+@ygOdMsAZNo-&(l!2vt8UP|epCP1sd9@hFCip01&KJCFAI{rjV@m@#mO
zQ_mz=C+V&G=Rl`YN89)7GY%f;XCm>P40A=7D;1ak#ngOwIh>RV0F_13L)4Pad9iH>
z%J@_P#&=7%dGo@z7FrF^<Y4GH7b)`!TbxupSm!v_U34zkdjwr6v)Lof<C{7XOm9i<
z)k0hxP<k5F4ESE2{w60Z_8#n=4+@G36}v!W@UWS97kxfCNGgaEip3g{Vkt1I05~GP
zl!>x=_&{&u!e#Dtzs?~^rl!lH2Zj6YseDi~m=~!}Il`M@psoGFB@OZ=p5@X3ZWI`N
z=^7dRPE;{~?Pwd<HXgw7PeVQY{i9LdVlGg55<5PsIS(!7U(dMXrjU&l$Gtf!rS!to
zkMsxkj$f$F&zBfAu^kU^p6>qSL>;aZ<3%}>4akN$L;QzPndM_}IIDKboh^+LV+boN
zi+YSMLz%`R^&t6nOAqXiUY1{7b*Pwdw2yzsJR3#H7I2x{+wV{Ots{Ct&!-}R9>rPp
z6z@cYFrWB+6Tw*RMi8yo-mAy>E}C~g(sFs5%3p{<B!Zi9YuXIzq{WRTe~DG>EXAX`
zheVfIYnsLSvYEu!!+6snFbb!U2Y<4*t*wD7MNW6#?oU?g*5(=)eClUrcK?v6>iiIT
zRmf_rS;KeZIQ{4J^c7ouP1-xm?P<E@ov@>(Nibv}qNRJ5ayQu0WbZxZI+C05r_T)M
zX!kRgEdF5p8AJccn~}Mhokh+>!ug%E1Tiu3{LQT}ZWze$@>0f&zg!$`8ryxyMQ#*<
z7ppe)7_k86V;2zk2vr%vTutcS`8KYimKKV9h3re{zAd+pNS%!FbLdUi-IoKkU}6)$
z)?y^BvuCI)BDxr@`ZEHRbQa`fGk$*fZp8WMqo+66#K*GvtVij0SkjnZR*mEEy+}nX
zCgCuA;%J|zlFyczM_E}Jsno#IquLawm=`Y=_mW=s$Ijm6fH{6a!DkPy25sv>?&SUm
zLQB90E^Vgifgr7;K?`jL(IzG)R~(S=qWZCRJiR<~DESfo-3R>C4x$G@451saIMpRP
zmJc);N-lDMq)y4K%UEsVQ44wU?ff?uz;bhS6GrQ;@{q_|hkeiIuV1MWiW)89C)b31
zR>XX-f^OR`XU_+*PF48Bd>D!_F?9hrKPh-)3}P2!W9`VG5Vq+y#49KhdXehj!DCui
z63k)K1%<t`eFfs4i;#6R(~kTdxr>AZq#Hj>4T{1sv`fGzuwkz{=?7Ho&>iF<5##lT
z%{xY!#y?)`1wZYWfZmq%=)BgmgIZNMR&@LKV?rGPZ|pslJ$16h-Oi7<uMFJ!8Gh(%
z{y%NgAl>1^zVfags_J6IZ4Vu?{CI~jpQTA-Lf5o+VyeTDM&s;HrMuOPVQD}7%ikK6
zY7fVqR1bJ_GsFg>eHdNd9u9c?ScL6SP0XiH2SoJmeOL^fujjcc%_L~!*6j3QVfxZL
zo%XN7cDm4I3<!F?aS&i{-_+KwmHm+d3g<t0hOzi1>q~(cy`wAn=&E`9aic^veK|QV
zAy01I{j^Zb+xa6O?-7^gdM$?1r$@k{ox)0=<MQ<5iZ$jFonMR#<s#<2%oI2ubwuSY
zbBnO{Dn0kB*1xvJa>ORuTV!vJ(7nT-o~`B;^_MropvtolTrtWKAZG=r<=spWBb`>~
zS(}dyq3!6%wrW8p;nZAjf&I?%csjw#sotp%BTUEnVYLD${$v_f$Z<ooiInSrGf;eM
z93VXCpM`n_NEL5WQ)>a`pA`_iU&o^ABNu!6(+${?9C(3&t_woa^)a=K`}Ii6kSsK4
zN@yaT<0g5<tRoaD!w7wlt%_I2VZD9<QWsy0Tb|R-xjVJskU>v)mqfbj`pjAg-zK5L
zF*;|~xn5C0s>oP03KdY2y)<qcW1;-%Fwr3>%0e>NU%Ik%1S%uG1+z(N>8Jo%PkXZe
zum00rz{+~K&Z1ggQ`lwwd`=`d-<T3wTCqRby!G$?bNCuWFm7^sB&S^3Ci#Ge#v;fw
zVz;%cboe<>Tjm(^^{j*+@4K=Mf7Jlv`=A)`@hOR4zQe$;R4v<|4<lrb24c_Ld89!p
z3AJx-T%mGUSSbC>t)qTMCFL+kprm7U7^O)pDz<BC%O)DU|K{y@kR1BKes&=tA?!t#
z*|Hn-wrAN)G-D_z=3MtqPUBEu3-8H5iZ8-ZW(<ssoa|3O)u4JZ4vUW4t<)s+osZSc
z{{F?~N0675qZpQ8<6=HoMwGaBf>W!2lSJ`T>+>VFbq)2y$eZkk0+-b>O6w_MkrPu?
zocBItARWkt1@F^7kbw6(T~T)Gdyx?BX*SyQ3~_GdJUa_MK0Xx{6(|6>$)eFalwddI
za_7z;NZ1;+eZCTMAsNd->Nz0)ju50|v5jYj5+b`<ZxS;4&8aG336uSbm*P0ron?4l
zR|j!*F}ZS-?&xffmF+^=@qQX45XDbA-|?HZV||=-1KFBhC$owDf@1Ko16YjJLh?0O
zo|b*ZQo0U$Qz#I#<(X(N8h3}<RaAp6%i46SBq)kXT0d!3CLOiOwBtJW90KNt6Ev^c
zH{N<9WIHLl{16gQMFuO&eVtv-eDZA@ec0t1_W&R+pJ#XdgD~C-uG1{Wzvqw7)46Ue
zm_0o9iW4qMrx<5X+CPH%pw)~*^6jSm?RWK4!^42Pqj9De7k`Q|=CKX;w^*IUw)+A$
zTI+A@=lGG?5+^?p;d%k$H;1Da@*S+zP*7ps+t+u9jOrn$Y8`J()M1+Ml2OF%o$$yC
zvU>RfbCK}6SCDT)ieu;~`u!!5{q44&0<N>yBcPz!mwwz;HPe)won5;B<TTt%+h7-d
zUk&9~BL{MSr2fx@Wd|@Z+(YkS*{y!1>;^S;>{pYJt;KdMj|<;3^w>L+NG~Os{m1h+
zBPO^c6q8Vx{)k=2K0~0u^z`GmZqv*_>me2}gs|zIS%c&tb``pao#JQWl>ASTpQp&=
zRHqXB=mP;k$t3jz#oheB>gyxTx+c9IpRIh#HPlm5`imMjGs9^`z$r!*EB}?t&(P87
zofS?dRyn7;I!}w`&#SHe<B1rVU#5q~S`px6pY!mCIDIDzHiXWnZYqR1U3@s42GI+I
zAvl{JK6L2mc8C<ILs~0Nz69isyXC%mgVk?+-W}EQeAwHOn;8}s=1=8QhvjAsBp$oj
z{t>vJ$o+;Ey!+_>cX<Sf^8OzQ*35jWpYO#(y8)PN?T;S=aC2gnEJ3)T@UFyc{FM3-
zUZlzPObUx}gt?D5-h!eMu{B#|hECz?QI_1`Yck;w;TWo!U~-;6AV2~wL1EiTp@Imc
zqt(^ba1rN&kw=YYzf)^DZEZ+IGIHD4aN?_UfAH-4idh-)Cw%#rvKZ*SSi%7Fh8!L2
zMh#|{5AD_M6ZLYvEGKtgnZEK#O5kAj)e5m2|DYi>f|A_FYe^fNC~sck@x8q8@~rso
z+ik@5svkqI%8Lbt@yO)I+3vC~+Z8dd>Hg08>Vlm1PrYe2hyKAq{U20u3n$+@1spAG
z#RMFKr>zh(ky}({uD8PfTx)atXUkt=WZ5sa;O1vx{k@g4Unfqu?|X{<E4Dq|#FZr?
z=#$JSBBV7hOOox|_i8EP($0@EVLX7U?N3F@X`Esq>+-Il5Px4?B{K2KtDzH46hVbw
zq2`bWF(N2k_&ZxSCGajT?i+cw%YF58%;-`Ir+m~2MuLWXCWSVOzD}X#Oz+OpYY<$y
zmW73g8G_B-k&+Un@}BB<yn=>rU0hsX26y!}dG;6hV(=L^E6yp6w+y(={wzx{oZR{R
z`Avz+my>IwiJyjQ!VE$4fO1iS$Ztt&nvjmdmpufv#?HKibUDy(kuUJMqGh?O3u}c|
zM_<LiJam?={v+!hEAjX={jiaemkr6&b*T-b&SVRQ*KQvn3Xdub%(xXZFQO-ZJHPgx
zkAp#4=e?;rXtoq(jcN1VDfnF&2{MPLo&DVAMf+L$bBu(kAeESvHcXdZBS3#VO9%R7
z;fDgEV>tm)7o8m6)!&8g3&u~VCYG_1kFaND#U3T`^sbRnF%aG1u=)Y!XzQ`&k^1O0
zlx1jiO?7pXR~n#dTpc00wbbQ$Xe0wjU8DfNw&x!Pop}h{qyTQZ-;qQ4Bm*)c<V>5a
zjI|M>l9mrJ^~1b7&<v6TvnYTrV6@;Ck5tyoF*jVV3;G!d0uSDvOAx;SM!`D=2B-=k
zZNi4{<jUdWnqH3noL}{-ly|(vP&gp-l7wf|_wNLs1JweBlTBwlp!%hn6g=u8RUvy!
zDkCFfe%8Tyy1NL2_q_}PJLVwE_f}yi8k}TBqRkZpC2SO>&ujVwkVp2l67a6Kw?65p
zsjD0J@2cM`XloiW@6sh<ShN^Su<g@w;qL`Kh_G#b`WBE-G!0YUFC@D`3viQAhK?fy
z!Oxf#EiKRZBR4=wODM8n!74}UmZ!;3;c~Cfu511Aye7XtKz9QSZNK6Jk1%^!Tk4{A
zu(LZ_CVuc{xC2Wh9l?znx2Vi_h2A1s|I=*aWqYT=k2gbXr#d&9-yQuRVQGnQh3`Qt
zXcG$Hpg|9j3ajzl_v^Z$o&rr({W9OTq;g<{c)#j{0Ui~r!o7-@+SejPoR$e}8(4md
zsRo0!(|AZP>J+H;!F*Fe0c>^fqyQ`MSdTqEsLMs2+hN`S>GDuO)m?R?y7w>M-(Xj)
z_@Y;J3d}LR^Vew07K5*24<4O`q#TG@dV?_V>O9V{wIeqtCrPU?1$rltiR4sGOMCuY
z1BDcBj?bT?mbOsTq*cq!2=cg3F22klxY>15LBMvBo|5tly6qi?739Z$LnFKwIz#(t
z&t;i)iM*3OCYcEf>G5<Dh`aVgoh!skjNHP+H)+h5c@UeQSfk0zZ0=7?EdxRf-EL7-
zqZs4=f+FFEs{Yz3^X_jV;7-em&^CO$*^YGHn5a?<MK|ivJ);lWzwRvg5ezcfbG(H>
zPyQ4ai)r$L6BrhEy{ljYFX$_Uox3PD@AZ~Wz2VY&OhXen*rMeJJFL`y$tUg5&{Vv7
z3j{n=2;yR5puz;q?P}ut7~xxCUL9QP_5w6qxU>jDddaa<o~^i~<mr<qdk$YK_pVt^
znNG><lstRv*zC_ETlcv1;W_iT^lpLEmMy=dlN;`TkB?N9BsSm8T*tiW1E|`zqRvT_
z`l#;LV<Kpuc<$q3i>|UF<z+U)^6sbR8>Np0M0pr@f4e81nt4t|x<%c$sWS(JDnluy
zbGINc;@3So%GR*U;ve7pV-4;}WTdxd(SQ-A0{BOdSm=4kza&x|T4=?9H6M$r_IgH{
zDg2$swTFpKr|*hB&8Sb_n<#Tl`5Lw057}BtC1m%q_DSRvKL?G^%gfSNP_wuHxP0^V
zMm9G3Bsclh6t=iCr)1zq#!{fuMqB?rE1}i)&ST%E$Jadn0eR(X%s1ohC{H*jAF`nm
zW7%KB-=4rY5LP<ldF+G&<zRjl*}eDpfbUkM7?pXQCb?v^uSm6ADraxm;nRmsMmr@9
z<SQP1Zhf?Y{~wRIfQ~EQ6ZSPeP!$_qrPANJ{Npr}aZygE^v=%PBvDD<#IOGSHMzMH
z@dDYLZH<3o3=%v)9w5ImS{&u(e*N5>yh!sCYo#**FUaoQxaZ5wdvGLySYG*GbKbTN
zo~{1cq_w^*Ho7Fui!<@Qd(ZO31W$LepLIzbCFA@$sADdC_Wg^+?cc|hSjbM1mnp;(
zG2TvFRD9CV!S`K@<-3)ue7%xW%k2Qm8^#P?pSJ_L9{&!?!_mr>&@hH8HRX%fm^>(=
zg;zZjI7i-cNIaFAk15q>{q7ds?A<)@eN<MFHA}X|>ltU1Wzm*85x!c3=C-8a#el7l
zTc%P*lv!gZPfhIaQ-9_s758Sv>1peFeA@ZzxBmT610}5{hn#5$UP*qf%jY|~w-qr*
zaSWus<_{>2zEV3HWvryF$7V!*Xy=1cVzY@y`;D(JHa{^;dgLZ2r@zm?%+1l%n~XC`
z(z<D$k93dgL6z{tCnXt;k598t<8b1ifb?Xc*vhJ&)Pp;EQ=7fr@0xOWG*a6PCXA?u
zCyd!ES3M~?cVI`<xgU&DY>l4bIs7MN)Pv)mC{!~$_ysc)91f#GlU+@k#9v>}zW4O(
z_Ym%xrc?E?gRY<6?qg-yU#TnkW!b~4Vdti!kum4G*p7O~(tmV)EHCuiJhxi?Hx{sK
zh;eypB#SEk3_VqhfMZ%*K27_LJjb06l+H#Lb1CwA4hzG4k8s8OA^IM2Qmo=MhgixU
z>~|1b|8sM=(9bHCY>3hz;)Kj``4zTnhbxaG!2RohrN^8Vr-?Xv>VZ;+z0T#-((_?4
z-WA5IoiQ?jrSJCWj2PBOB?Y^xQZgB7tauDFz-Ef@F>PUy1#H<t4b~#Rf|=*1sn@3B
zPOYAi4*iw=EVy}d>rK(^y$ioI9%rzJ%HA+ZP3TOOl(45ho14xp)4(JfzfVH#@wUId
zQ+l=)eJgIHLnmU}e+b?<LB4f<N;&ls_ebm6Zy(a$+_UmvRl1~k>%1CkM@Yd<`=;Z^
zZU@u)JZ!=ff>#jX_Kv5RYtEGNtvupx6X!hOt2ZupBWdTDl;h3-<7XdLr0VaoSs$$=
z`)BTQI+uNj<4xFsfiSl)_eE)1pYqp~`%g{Ud0)1^lEe01J^t^LpT0*36_t}W_Fj3~
z+q*3O>gCbTq*7N`RDHaA*5bdZk6j9&{MXCAPp<j;;j{zosfnNyc%GC0{4~($%v8*F
z!zAKYH5Sv4Pp>`uuXs~NGny!KgDX_UI!XGs=aH_y1n<wWp`DC8Y9vt)qLk&EdIH9{
z62(61EGD$F`Uh?Jdf(D08t_g{Q0*V+r1Kuh+fExt{K_=OP^G)CkIT#QFo`F<E9Zqp
zG8U%zMY7hVd-|@?<N9yHu8)}x3a7j~?YK(xTUUSdQb6+EXlpCE=dVLu6Q0T+)bqM0
z*O9UB)$rHtw28#8_Qe=RuMw>_OYrYmJe&GNqSi>@q7_4jq=9-<be{ichTF?)N}1;<
zgTlRowoMr{NwocPeBdW=$JzsTf}GhX;r6wKiZ7H$8<@kzuLVpTWq!nYw_Hk~;03Le
z_}kO81F@ftB%V&`5q@sX#82(hC?21emxvvn$>*Rr)utY8a%oaw;Yh200^rH`;H;&u
zMp5G<!e7fdG_2{yE@2e6&F|K!N=;M81R0rY7nsdQ-i}7H65DEu5#r%>hxb)KgIH5;
zvnZ(X$}i3{w(GJb))19CUfm_8#pP^$^jOrNN86a?7iX(QSLW<DFQ$w-D|3Y|D=tbP
z+=&doa@3jSJV3)~>cTa@wI%lmcmI(8Ynx5{HUv9OhJWA4`yZA~Jul9w1|RW}3H(ld
z(_hVl+~4aoAHjJoe;E<(L@>v^NT5hW!|@wmDRS0623uXqIL&_Hj?_o`0KYFEoSRg?
zPq1$B#r`?Wkcx*>IWlqJ)WqS=BAs8{N{^$PcS{=ACtkh%&-blmK2fQu)A#G4n*GD8
zfgjwOEsVQ$Sibu0xAr-?r5O-0&inaSmeF+^VSjzLbA;Q)8k<?3cG_Y%g^gYHL`0mj
zs?(iY4{|vhG)Zun$#Gx@PO#U;f8Mt2voB8Q&dm{TqlA98*?VpAkHk9GBzRv7KRlDD
zax=jB-qzys9cSvE-hJM(9rSJ_Q|wUf-177E#V^<}PGnS&;(u&=iC_CVW8&2SLA|ZT
z;X_fY#>Q`!8=LRAAsyY<)+e}spFnuw-)(uoiei1~;hjB~C8neo&HQA(CKS3v78l*-
z?O{rIwwspx;DJ}C2!GRC|Eib+7wzt22l*p~sj8!Mes!C0)vGe>?_50WK1+~by@~T;
zc~BpR#&5if@#b@hSSg(%`JM-f0!|NqQJ(#hj~b={(et$9*+%NK7Oa{YaxApF1I*$g
zCY8n{q!Le6hKoE}T)ruNRy$<bE`C(Rjj83Z3A<ND3r?dYF)pG_T2s2|QbBt1;`*q&
zf8n$DgB_o~oac;jE<Cq;K=+KH)|WgF?avB1)HV*dQNqqd6ZORs>&>?$z9;BNJLmUz
zRd`&N2nf-;eu;*b)=)<$DmIn{E}MwFvQGX}k50AMOHgyi?7J@|C(`_SQHi~UyE-pG
znedyqC+bVNkN-WWm&&*GKn9QVPS!GZ6~x6$5|k35epXa{!#aBmNS(IGDQHX6Gccee
zgctE~p?tfUhIhQiywWrR56vMcKk)F{wF)qvb#>;4UzwVk2Dbv!eN60`q5M1kR=Eec
zsDg52FpmLMufpYk=m0CKsv56ZnPSc#&#N9D4BYAFEvTs@r|~KU_l%8j&pK~9HVRD6
zCnq+axp3oH)EyZh-!N>0=hpw*qg1TG=)r^Y_v^m3wxS)LoNE2_tDzwZlK-<YoEic{
zRY4aos-@k%9P<tRRJR5U&rtgZZqo+pfT5?aH~82`TY(;(`FKE^Es^G;`J-7I*dtsH
z_;vSa;bjYp^~hn>>%&4-;V<8_(GIYLaN7C(bA{2|d@e1CGPg<oUZJ#s<0JS0Lu>%9
zF<;QJS-yymXC2(JV@E5rB9%<*2+l3Rr&Utux96cRW80=(A9V#n(68Uv!@UM0r~#}-
zLcA1g>9gG2=H_YT#9VKK$3LZUbKUyrJ2<QA-b^1A8kgix>V3F9)yL!H!?*O87>R@n
zw_iw@P46LubPkil`;@05g^ijX6Cy;=uYbFmdft_NdkdSZLa#Z!GqfK*4EXZp%ef)o
zs==(W?26a&w%?YMs{<B-dG*w=YB#0_m<8Gyr@@2Q7G59xCfeF+NviUf19+O)5(K=A
zH}sSwlY{dUT7r9g$jeIOQ)p&NRg{j-5}8e`<d-WQ(vxMn>R4^g047t($Mi>awY3zk
zdgr*+z}SZuK}CBz3BNd|#^}4)xlFnWZpjRfc*D?$3EMlGO7>gZ)?YGwd{l8zLN9Tz
z#nHrPdq|$B|4D3i)yVpC+k#^BYjcyp=vUJ}?N6Q^dqPIa_U!4I<20lvwrz6pFJ2&j
zx#QaHX(y3d=gGOwr96WZp>zE%D`6J5{xAwI{u-!?mQ#GtY7W|N61tgN+DAD!I9A)c
zCVkrB%OJAQc<Wf}U3W9XWInZ-qa&}nB&=qmd-dvn|G1`ZvGq-vT;<Mj#UJU#o1Tdt
z3%^pk?d}Ab5Ou30Rc;<WZ<^OD27d&DOrtMqf6`$+2AuX|Y;3G4-))elU+#*g%zWHd
zsFwaQ-d<L8qf!57<tFuj;8fnBPDx)ot~@R^g^Naw<(`ZVpp4od3HA4P9*Gg}wYmMy
zfbCP!p01`GldrvjaY`ktKW0e3r78r*d^~lN&OlEO3qu0^-?D}RRWyay#;vgU$K+c5
z;|Kp>aCB<!<U2V=dN7Md?9<cJt+q~1z7=)d{FBWd)z^5?V#sZGAN%iTbnydOg{O&#
zF0CXaiP5lGu1#ci`OAtdWEOU`XIsU>O1^MqP(8B#eUWRZ1f7m{S3z#xbg?vc{FFdY
z>aDr%U*KDNk^BPsZZyl!X?ad%)C$e{E{8|KP9}Re%16>~^8>W!2Og9_%mB!J$ZFQl
z3+-;J_jV8weM?XrXd;HAASMeVm<=#F48M{)Gv4W3zKwWM-Ci{U8V~kE9n_k3Gu1pK
z<-)b1q8z*nZiils!InPwEG90=>23Ojp-hJ=ogwBM!L2QJ&0`>7lWdO<b`KsmmK&#J
zCtwVDfQX1FQGq}jPB7ZJ)5ps4v$0~=Q~&pDK%-*q=T6lNcyR?lo);q3n*y9<sxg41
z(c}uUu*A+&jwJTmxs49mxh+Tz_?43>Rc(B?w6Z#eU)gMC`h7PM(M!4Q%(#JKyWQ|-
zyHD=lPDFG<@yj2@T?fCDTSwkbu4l#%8x0VCff9obo0}Xj8ezt5N=C^P?B&N5`OA+d
zi6$(j9VFG(aNi2QE}i)4;mBvwIE9`xGLn{e$|vak<QVAv(l%9n`aaQbXHN2`+fq<e
zJiJYbjb1rkJn38?gP)x9-@ovy?~@b$LgKRPr63Mg-$!he`x3t-Uc1N`S;^0+z43{v
zT$g``m@3Q6*3Wx-dQ^uwUi|$l=H|(USBhsyn~G*g$NYGO8LL?K7ytJ0E1934udX(~
zan*;4QsNTjZW6_dNySB!`#x2!|FjYkTd)u+Ue&#cd$QXtEoF0ok4v}cNyPE@&)kS{
zWiwj2m9_ZNquu!8<-ZyH2KM6%es`V5@K(%mbA9K5w3=RVR(fUQrJap4q)HWp&;BC9
zSjD`*SiqZo!O+k!(mWz0L_<z4&AcayRF$OXD4C~%jEv32q=w$a!Iu7aCvo?f33sn~
z)s7?L66qM5b&Lced|da?z{a>4W6~G%Ww)oN>80YgHt+m;=GJ#0;aT5-W~MPap*P2m
zZ*Nvxk9d!ritKED`HYM7DOaw1KVqWDx4pR(hDR{Js;IneaoU}jZF8#jJ~=;Qq|`;+
zL-~{CeWRpqayxr<&uz-qy%u%x*+V9F)71il0HfyW=Z~Jb6<YO#=o~&%_2Wn7j~{A5
zA+fmk421hH?~b2sJk2qmA$Jhsv;0^N^G>LlJqR|-8BR`31s$-Mdd$hUg8ak6G%Sf!
z23&`}?Mm*ytEP;{{UTs`g4=1YYxieqx2?51ONBNsB;$nso}D$jJ8#LD72h^)J^fho
zl69pD7EC?G%Li^$1xa3#S|56_GOO2f*L$nx`__!wN$N^LM(yW+ze{p?U*!(5IH?(C
zI;NDFt~_(1@-3E}ajj$T`?<ZpZ*|d1Z^S3Q{`*NM2%ogMr(Bn|=?E$2feX_GYm>Q>
zFKK2z(T%Rf7uwHsWiPwE9o90ak$9;XUua-)d^24oIv{Qor_bqyq^j#WpI>=H0{i~K
zfdK~R`A<`Mb29hwuNv2_wGH@F`5Zl~P;R9-D=Hi>YJFguD`smva5BDt@(O;I{O^Yw
zm+L0wZ0~_n6?SCjS#K5Wo)BL8GnSG&DS+P-#mi^d5On1VyQ$+Lmp$qaK3y@Lr0aTV
z^gF{47#EzHa!EIHrI>P>9B4{BCJW6U;ksTE-kRkp`lC&hq~*RV8M@{BFzlh2s9Roa
zpNjfoS$CNPszFN@g2#_XqegJu80)|^HDUc=O8#O_i>4#kqPyjrvIpL%+y1dApX{*p
zeSdKM%hLr<!YRXbGkv%+mak#cHZWH!${@JtkAWqJsHkgd{vrTd!+BBbA1B2-9mbML
ziHPosf8DmD_#LkmfXD2W!H}u1?I{Lf)`QS&7TsE(vuk+H*V!0bTZ4sh;mzekh3m74
zjU2We*0vziibH%tOKmV|-tG-HvgW5myVGk$d<3aERLv)|hpdOwFy;BV)L~mV)91>{
zLUs7?UPdS7@)znzR^Jau((^m7`c8uvFCP4`!&+QCx_{=VUbzGj(T}yh)_-FGL`R+^
zP`Is)|0)c<e*CJhS2I*(qo%{d!VYz&7OcKwPsy^34a<qJs%h&hdoDQr?J1%z<!Xdo
zFVj$%tqW!&oLSxL6r%Ji4boh(`m#UIJskcrH&jdUb~-k~g=~YlUU;#!FE-qvQfqT|
z2xv3CWkux7vJY25f4w9VGF!UGzI^N@%&>$nw?Ds-z<00Wq&8N$&WNE_(;YaA0RPS7
z{j*eNdiki(c=?Ae86L<1R9u=0ckaxO#72-aI5-0}hj8-|DXYk4+g@*$JGLEPv~OU}
zZkpM#&rfJ}xVy*z4>1gjA1=d@Bq$>Hi8|GNZ8xRnimm1V_bGqmV~CiEdEaxsg4s%T
zv8Z;V#21mS7=Gije*?m2s(cMH1)P~mX3CjVz%gPJwyCVHuKf9vylTC0Yt7k?B9+_a
z-`AQWLz|3UAWcopKl`3fpS`UPEZ?E8>?YRtJ}q^wK^<Foq0ygt#QpW%`%|CF8E1m!
zC;+zp9IlT5v-x4M+wR=)&sH>tk}q~-3@)~B9VD%)Zb(x5CAwiaOr`$d!0+cr%+7(%
zRK=OwI~?toKmNI@&t%_}CxcBZ5~s}{i&$w++H;t<az7aOnOIFjMD%Duj*_Gp!T?uJ
z27cQ{yjr->+>YJhOLp#8m+dCLw8ZR6dIcX-%rx^Ugv`4tUNPNxH-9DJ1$C#Dm6bw?
zrKKg-VHNKjV;}3%%SlQa&-ygW!HUmYh9}t!v^zcBF<z^W-_-RJ)?c2s760J0I%2Ro
z-?s9{N@b?sx6*eT5s@l|lC%4C@gA<M!FOX0OOqSLduq+H^~R>jo=?xbGfpA*kK%=#
zLMrjTR@d%tk0Em?+Yz3H_!+rTFB#qI2QRPSixvvt-XhCjfy{rDVrPk5f%*Ukvv8+%
zO9$khgD;q@8mH#lz#~m~xtkdDgHHXBFV~WRRJVmZXuzAlwcci+>xU8w0ZugOba+6H
z%1wS<LcTXp+M+Ms!+8<<MF$YFC}yTs$2_l|+*#thIKpJ~R9ivuiddWZw@2IH&j@A7
zGw|lIE+OZ0t0CTZ@n{~CUH3K>P5UM#6^)M6u5b#G<>?H=Ul)Ggk8VhRkTdeJ{XzOq
za=t&y^S@-5CUT|m^H!FYSMh#3E`IyrUzj~p7SgBWR*^Xr?l>?wxH-V(DkCi&a?wHu
z9R#8i!zp*M-nFShFn6PKt=ny^|6a0HlO=hN57$2S_(PgUbhPc<&(kD0Me-ylAa)pd
zIT?gn44URnY{HsEczwD{(B{s}B`>QQ{<W;W7r7gYf~$)iCh+5ax{I8RrwVU~^;E&H
z>7EjNN~fF*3Qb0V`QNx6_!oYaWU!vs_S~@ash5+<!>uFRvuAC-En6j31m&MIPC>8q
zA#vszPbQZ?coG=He$F|In>v<F$6PJZG}!%A#Vyfwy>BM&_hD*kF4eU6&|}bBEvY4#
zb!J`2n&m(tZPf7L`ba;O07xsH;C-MzIoBs%z2~@!rXt=XxD`|~m8?GaS8639IvSs_
z8BpJF0q&)7?=W*t3PmBl^!f*zv+>(=>2BSbmIk=X%KR>YRTK(_X`z3wCwY|IEjD!4
zHFA~;Co*j_zVlMnLbJLgt~Dv>&nC*&qmetr@V>YmB*kAiD0LKnbnW!x{r^+{;~X2$
zeSF0O59BViebB~-2P7&yuCq19C229m`Vz{|fJ;az|EIe2|Neh8rn2mZ*~J4mu@lPZ
zK>q_uuMnUKSuN6Hx`+hCIrd2mWaqoKHs$Vz+IAAk8b3kI=7$izPn?$#oCv_;T2OdC
zBvD+KOWgVS`6Gw={3Jz}yTzZ9L=+&|1@Y)|BNQ2g+b<@j7Qki80!CR&?WtSJ>L!%3
zIqS3R;01)xwMBjZI23ASgRgvva#yjcgTrc^JX7p;ZBpyEZ)s7!#gzLptQjgR>%(Il
z_QxL{rtF!WrOI3Gl_p`d`^H9HP)Ump$+q1jGd8BF6*M;Vpi7;OQ!uk~UE7%2N(J9(
z=8<ypg?6i2;a(d68HA7WW)soN(8&FI>!TANSP*qJwY3rF4Hbr2dGulTt8SV-aH0Ld
z9I^~3YZ>z&k~1eS>Xdphfw>a6M{B?r|55*Br+wjC#}p!3Q~a+BEMfClbQg3px%QKC
z`@M44>y$@ukm7nT(U93jUZWv<8oBX<MHfv1c-kQi#Iv)rr)0zF6?EWl4Eo;TgSsQ}
z1RufrsPCwS4(M~F_c#5-T7DNFcI_<sZua_VPZVxUnBn_nD)4YFk8A1Igi_)Y<f5L*
z(*CTeF+v_eDU#Qsxq<M~0k8-3x<K$6#$%bsK%9!yE_q(ky`N6Jhm#k~`d)~h{IRSu
ziIh>rD_B`g@XaKcmNCx#v8qKS*b*sU=(2%J;hfy-J!9sY%Vj#1Z(E4kj0b1&eI>DW
zU2^+Z3gP(*ToLu_)@>y8avvL)Y6Pd;mJS^6+%qNp=I{%;g_%fC#&>U5s`TB8P`!O$
zY`1kBi3!4hH}f111Y_*rEI1Q<lg}jl)vL4kq76JisCtmvp0(4`z9k&ZlL?!j4&ljH
zR#rM8OM`S%|HU|{!G92gbKA+hy5QT#CPTTko!*`t&+K}H4H#E=!Uw+n1cMets4yXW
z%Zy__Hto(!9nXA%zM_#g>O_F~<9hw1EPi`}$Wc851G6tp%DQE~6Lpc!m@-St(m{>M
zPIRuC2ce!a`Skpm|7dw*Je!i$4N~)0h3Bf%@i{<+B5&JG<u5Ib{7OWyV!nz}>_P6t
z*LeH6*;yzs9?3+&2Um%j@T?dfbGMr2nlkTyBcu1Jj<y(CYD1x5PyHv9B8N`hP+fUE
ziz=8ACaTb}XA8wH{yUb4^<0!wgJ|J*GllRPFSd7utFD?xVdK8Uc}aMGCjRVq!G=BI
zX2~lO+Tm3tRXEPUoe5pjjzF-dLkE9`NFa157KR&-HZ(MRxQwV$nYbEKiJwWky#N27
zi1(l2HX&!bHUfQL%a;~S>g1=uALv020;r<+aSPdxVgp<;-HcNh`CqW;{V-eZ3p?n+
zYBhZ4Z>bvAJBz8c=&1;q0y;nv8T<AL40neMJ4V?29*GgezGKeXq@%|svpA<uv&6Mn
zVv<R%&0xqT;h+ou^Bb-zHf^rd_Ta!gZ@18!YBPxN5k+{51y!}44uk$8)D|MTWz~RZ
z%7szWT~(dEdc@=~o@m<Fge<Y;a#76&SaFrpTRm8Rr+RF`Vrzq9FL4xa1`0Lw<f5y?
z(edHHf#PslP+~|gaHytrSM$_PHpWZ0q;%8>FXds$HRe<Yawvi>c6%pK{AUAkQgpqK
zzKlGQ5k@nKm!Ix~G)`q@q6_M8B=KambgFi<!aib(bz!`e%arlGm+Z!pGm-c6?d|83
zSIGQ}AKfR{)7KwI<AKsdZruU}QEJ|-5op*{l$7PdSFT)<WVD}0E8{v}FUjCA%q%N3
z<Jb2>&}F0{MqA;2gl*>vx}%)#Cv&3f=Ka!K`JuPRd0XxXJ{*o%?68eMkMLl&-)z@D
zp}QcX#IzhSdQC!aE(dj`sqCSYuJw<#2%&IQbNqXwuQWxRd-vweS1SKX7{+`iruZY;
zpZ~HP7!z22vTor3h;n;8j`VF~a+)s6ohn%CeoBGY+NGy&FvQHI;d<c_L}#0J>s(wQ
z=wIt~;uIcA2*vMBGCMfKPu?r!UVF(L6zZ~S*weR9aJ)5tO$JvYxZM3zVJz&tq0Y5H
zmQZsiv<H*vwVli+aED?h+_x`rpUJefwdI|X?^?_}EAH4yeTPQMXy${WVEAE=?*qA&
z?Rfr#k`86g#SA9<{#U@QO+WuQ6(1krbnYu)X<V!0x`m&x4cEx}i6p&$74q~F#t_2T
zSS;L8Ot2+?Za@C1T$X>Jae8$wVv9cc+M_KC;s$W!G9I+eBIcnu?VH3ZFgBU=_4Tjf
z-7KV1q9O$<*QEP`|H65Zjrm{G;X#>4t)&bSgl)#3U5Dli(rEp=ikcdc>2Jg(cL4Y@
zin<iPzw8+po@1`<0vFJ$Wn4`);9pD^pycX3sHUbC|4L1*ZR?$$wq2@LrD1H?Z$N?#
zKIAh~(S9O%<DaF6p!re5KV&o7m|ZNXjLUd%DPcUI9$s-jt3p7(*ubWXyC0!UzbW-4
zv)%OjhrGP(`gels)0bV>+Ph41Mg|3}N5}J*I%8Ns+u_|&cviP;GOc8>r!P)ET1p_-
zjiwE6vY!YYCB>edCHSAE@bwb(jOu0fq(5BgYEfJLHl2>I^TWJO$vLnaXI-~!E$tA&
zZ98&In4b9uX%*;G<lwqg&6HZKND(D6mS^+MO?;s$hO?&$&Q9dU5>s$U$Sns2=!s;u
z>iEFps&KAG&@69eP|YChSEM+hWn#V|fSV>Zgwh=^-7wl~Ti^;a9C$+^*1Z)Iq`8U4
z*0a%eWk3ZK+)0!-L7L;YWQ99$u3R_gCJ=%*)XnlW6crmk>s3jau>aGrnz8u@1}?zu
zImy&0SaEen4X<_S0Z$5A%Mnz+mGdnSuEI+pw9?;&=AkHZG83oykMoj7c6PRQ1OHH{
zu=QvLUhCrpk@tg_27+9(>xYqcohw;m!yh(Gxu6D1bBh#D_1P25%6!A)SuZZsrv3`G
zXUxW8CJUo=<Eww(wdcjf#c`uT>(j?kkY(rSd7QVK`^o2ihg!*ReSIA?uy>~2R;VcV
z6J3|MtjKHpW`v?W9cM&Iq=NABgSHEp<@&YPiFfoZEN0*-4P%Vg;o*!kW9R-Or6|#p
zY7-v=Jo?hS$(o!QPi2h%f39l&&m8h!CHto1<LTeVsTgf-dL1}^442hR%!}qFdg~3L
zt=mrMo*?U`qE}W6&K#-`_9Z@}jO%@6AreixsEPsow3K>l5rU87RKCi*79Z&7c*}>-
zLM0YNylPESvqD#Ya2wGj1w9ERmj3+Ce3cXVXd??Bx{^L_xnrd<q8(W6##OM~z#1Ex
zW4VQ-;{4+zwPaIYQhJTc`V5Q9Tu9eF0|UveGqS=9^Vlz-5E%Yex4GO`kDoR{S-5K-
zJq=QfVn{;Leoe;-Yq*Gc$&%f?Qjo<K{LFQxF)z<PP^}v@KiAcf*g6_MQ-V>r1zO;V
z+$oVBU8F-o%!+dWLDw40{ms>u+~}>SX>~ZIwIPtxxbBUqhl!=6A`hh)TAmcPROY?z
zMK6iPTXWH^U&RQ6&D(2+KWc`Z@r{vU9OThL0@0%wX7t{uzdBR?au*_2)*)G;5sxFL
zf1KvdFgcFTa4#fhcK${h!(m}OsG(|>=O$-@K32Rn7!W~$QsNoNs*J%{{RIo*g(hKg
zx<5SLYB46d-V=3F`i&4!F>N%^x3*^dT;0kDvlNf#Orj!5##Lw9fp(;1b}SAxes%xy
z$7M~cSO=W8Rg|dcnr&g#HGvYT(<ss8Yum>;9?UC{LMOhqGir~b8Q`%ROtMQ!TSN-&
zLPw6)X90Co#@(VPb=idKpsN9onMqjyOAMHyfmhhKu_WqcKzrdq>!WRJo@)CpcE5-0
zUUG3nB23q(yVHv)C|CV1_EwDiGC*mCLBtupz}-K%^Q3AH=U;Fu$r1`C^9;;;l;(t@
zf_(Qhp1$BfK$lti&t_O~T2wH5@;+#tPRZT0L=Wx0ATnQ9qOBU|S`&P>?{gKW8EW}g
zl8iHL27NC?R$J|MYp?TlIa#6p4Rsi01!DO($YLv&oYwMsa6m}N5jq0R5sBk53FCT`
zidLBGrah*P`OCecolbMfGvlae3jsAyadDE0-tEY-hHMQYt7SQZZJ2fQ+cUQxIBc#^
zhda$~O&~LB_rS`-uE*WgODgKN>hBgU*@DR&W3Y8U1L;`En^O)|cU&DQ45d1v{2R?o
zadA}IPhhlcnLP%3UvcsAv2><IzYq}E_iSMO4*1nSkXIZQ+YEr$X~ZRk+x40qNByZ3
zUujHQMSz6FRHZazX<|#`Mu8C&u8vlLMZ9+cN>|z?;Zw~f?MX>V+lY4wtq$v=%+|an
zHB;fTvAA~|E2B+|hV9V6fS$n+2-qwA{;sy)@T@j900P?2>0`ug3XbK;puHoA<~^Pi
zWE(0P)(eoC>~a`;j><Z)TGI~Ls4RL}v;@;<1GeJ?*EcS5sDB+#NKCo^>*G(LD42Bz
zrS<dF($lYsZp^1+=jzHyejeXcB*Ht>>nKoq1&mZRNPj>{(?^BwiJsA0*VSJOkWsY5
zlP#w66Bw;Pig%B?@5i{M+EGhMCE~K4#a;DZaN;wZAmx}GM!^Fu#PE2eRSE&oz1)zy
zqPqIegY-A(X1hjWDJEOYQo)t?co;y}h8`&E6G1IitH23`Fh74Ayb<#zzKTwz%Wm!e
zB=&;L(0oA2mzL)%IHwkLdly@Emr!Ct=S*+i0<H2H9v377iYXM-H}gr7Z<|n!dRpY7
zX+qI8iTcNGy2w*x>CapYpQRqN_6vr!wv^n(=W_<jw6<+}LrB>Hb5`z)+MWzlW#d_W
zGR$o?Z+Xg-rM3}0YKl*}q`G>qUNunEllx5a)r1YWWnuO;p|!P|i5cxnFPL#^INYO;
zdm?vU+Pc%KRs&sR_thg!xq#eJ)y<Y3+ETTr+(SJ$G&uM{WU#;AgK+7|dE3~zT=nn_
zZdDjkYdoBJvU3k~Nb><oT^V4z9m&ly)OBRPkuSztZtqoVYOPUh?Pc1WTx>U6n*UWh
zKaxI|Jrqvp!jh!E>?mFi=bX`Vi{DQp;^9Qo_3(Uxk)QCQDnK_N82P|k?_ZMul_1Id
z4QR`5z3n9wqUSAo-OgnGnSCKRdB^?+&`4MYy_9+c{8Rqw)v{)FGlt~A%ua_j6p46u
zv|U%KCSt>EjBIRVM&ct&RrH-~Y;3SpAhLR2F@fd5r6A6*hK9;Dl@K6-r$Wv{p+?ko
zv8@%A-XI=<pP2?R`o*i1xQV8ve15y1za$b5<DL)Vq*UJIcMEI*$e5RxS062E2&P8d
zp_*X%qGVpkC$5=xd=(vjPYjvUy!ewgn6w6ZGFVm=5zf#LmaR=+9+{ByBUSCDYjbGL
zU;C%Osb%ryV!#r_(h-=~huL;I_qbD^<KgMMu5QvagDQs1x&|>lVV(o+%{=1Rq3w$Z
zs0(Oc+_%~OnF+E~KA<oV?l?(F=8f+hA#RFoADxOHi9$!H02HvXyUpAh;mVs{Z?NY&
zyi5F)FH4M~3Ef^9p&2&>u!(Gg!hH+^GGVKIcu-oK%P)_Z<xVss)SBRw9=SOE2<_V)
z#|d6`iai@h7-n8d&TEr|uSG$BvHOj>>5JxOfKi8~YyenlLY`Xu>s~`1-VwJ$GWYTF
zBW-Ssr`KNDTCvh_nz<5L*^;|t#)v$HzD1~Drh2q7PQDLQWi}3u@m~f*XbK^g%NKB|
zD)lrP18=23ijS#sP6hV^gGg?<Aj@J=xKcD-r195BEZCu%BlB^w8m!*!b5kQdlM~Qz
zKv3p;!(U256wVN41W>Ow;O+%@<@Y^*-Ynr8UQd`wls8pg-C(>yL3F8jV`+O2`d!<f
zye-OFbZ)$aA@fV~ttK+&Bo#tobFijK4}sxd!{`5dknjKFPv}WB8J2n-=*dT<Lq$n6
z_SWd1Is^kF(LAx^xIuS?Z#{oJ4G2FU1%sxOh3fs%nBp%N&?yt@CU|HfDEc)Q!9-SE
zAdKHi8Nl01yT4^vf<N0Xs2fDtPH9r#F?YG|c})9$&`8pU{XH*4H%njc>hmK&aCqw)
zBgNM&^;fV^DzbdHzq=^5oGHR#bY%bWztxfpMi}U8Uy?9pnPGHrz#Cg9{|oI<Qe)n0
z$bFbtd~{Fh{qHePh5I)5a0!VvWq)ic=Bc3}<jMT`1|J}Rb7e<T!Mkvmz(Uq%Oa0v=
z78Ng<<8Sw(g|S7>DVx9`OPE8F4%hFMupUqkr~#=pZJF{|8|rmx&B#}ydx=pnrOxhI
zNBxHUI@XphiC}`;kP85G72`~>QqYd;06p-)F+<A-T%iOx_@Dq+&T#Kbe(`7s*YN!@
zCmcuG*&&o8T`3x#Jt+DZg>$eH1a$r~jd}Ii@{O*o4TAO0aDB9a=RWnIf;s~Hei7+W
z{mXBip|CYrcxVSNVZ^p)1Aa^>{+mAaHETEgYbZz<OFmT!e9RrNLo&ciIg~-b2^Pa4
zLMwmgF=yFWnLXm;E4B6LAJ#qQ!u>&aM1TQ3{E#Yk_i(eY2(qzWfVg%n>bIe1?3^J&
z{EZv?uwDJb1vHa3{Sf!~AWeaLnH@I52-ST9dr_j`y%c*LdRF(UeEqZZdw}Hx!HZ$u
z&uCG40J!oV=_41$-Q!Ly0DgFnncG&zFBx*m@B8UWH~{36`EwR5zm`Op#fwZQFrNcI
z0gNF3))3^%N+LGL6t_6@rk{WnGWng_5uH+6fwS%Io%wZ$h9qu&Afmi5<4M0N8+mak
zG(8ArE>&kTJ;pPelo^nl<50gc^YHN8E0iPJdv*#_nmr{pt=fdKFCA*XA`+&D%RNtv
zpA|bkr{g8;WGH7kt$dz7yVobti<NogIn7z2(yEeuf*IH>X5O(lRX7E^_cA}Gt%~Cm
zQ-o5gy6lLV69%^5F-Bx+LE}k)R5`LG{ld=iq#r{aM6TQ<>X{ZQy`!b~u^U>?+)>yt
z2~K3lu{aIBHQ>tXE+!-ulndl-Nm*ITm>LprY9sRz8$Gv&)YL~H(3%Cby*BtPPX?0X
zFEn;QC(3jQF|u(Pmp1Opvug@DdSi9MzWXtWTLvw1;DfY;*?{`}JNxMF-lw3c6FreB
zcVusB9Vt`v>)fiOj^n4_oj0T(wJh-vww?J-oxk|om;g^^nQIUKZ_I!fRpV-*>$=>$
z&k<&WH=Dt4l#lZcw(9!PimZ2_7N10yi}H9#aR5`4yW)yp9#7}X5&K54)q_U}`j1Q1
z8Ff#U`)+>n*WJyZo3hQ}b%%V~46=*#LI!jWz@YkkLUBk;U$Fn>)0Di~XUmicUf6Px
zea^8_TFmR<pbc>E%^CGYpw6XCIK>h1*RkH$dC$Krvukq*LKKd8U;fy3ZD54xg%Eb(
zhLR(>cC8%IAA<-j1+_R5P1lXOxDS@WqkAWo-?{~YzUSjXenit@L=V6iQ0LXzs_QCu
zEC^z`IS_(?6;p2)+U?G``cn*oHp^>WOgX@-P+~uy_&W9#N2(-mYq{KC`--;t@^Zhw
zY(9=45CSDVWk{z?aaW-gbSU0kPEAFH#XF8kig?Rf;Ux@{H>$KY>6=9?dQ0WrB%yFe
zph?qC_?_#!_^g(i{5nToO7>t734iIyqAZ@hs?j9BM1jK#JB**dR}q8fYK;Si{j*IB
zWXbJ0ZsZJw=c0df1YkDyCwq*5**_e%W+wO86c#saPwa}14X1j2Z`rPRH;Y?N?>{+m
z%-UM&-&jDclKyj0DIG@RW5s?up&St3kq`8wcT?`=|9J*@1}Ca@e-r6$mV{jvO4Hw|
zJu#82^Z*7KWt|3&q~WiRSn@hgnCf5u7p^dxP^fzO@?`*2%FSGS+hNRpnSk>9s)eDf
z*}tdH`g?7y-S{U-@e1EqkJB`kC=g8!e|ikCTL$z+yg1hq5(=yCbEHs}89Xb~E3rNh
zr9l|`@x_CW$G(Kp@y#aoZ#&{F0e-h6w=YI=*n=PdALmfiK32f_p)DImSBE4{h=?UB
z8kEJVPU7`n?0%PSDaVm%T6|Xm>!G%$X7o??TwP=f6lG5Jsz|!;$BZzs6TBoIz#Na<
ztYi=4CH^0u8pin!7h)duAKBRx6HaClO{<^Q7IeN+e*q339C=j=#VOY4zbV^uKk8Cy
zx2sc~#%j!v7H`Y4=qp&((c#y9_Uu`4Fofc+jQQhH-3-0RisY`krKo!}Z}In7)a&z@
zeK`_Pi3&GDwjPF<8ORu&$N+%ZZ81G2<hh))(274?Mrh&dS5K_x0cU3-RNJlzXZIu3
zALHEnM&@ZG!^YU_;!4L}Z`b+ZPq&}}#OS*2jVJIZLGJnEwE38)%p{X&VJ^~MHI93K
zcV@1Zq8$S!!aVQX<7tcnL`UOvZ-4n6W!BXJt&3xmcQWqF$I57U?9Jxj9hY^@f#*vy
z#({{^vx1XZ>FSvi010w_$p|Y9loqZJyZ};cS{;0LV~wH}kcFS%q#FeI8pruM?QTVg
z2%>yAc7sqc_SU4u0i}q<p!<yaSGx1V)93>}ly&_VKu_y&g-{p880~e7cYIdXvfslg
zSn8?q!`yoG$^761;pJ{MPIUo|@+W4R<r~cDfE{}X;5J~_oUs(=+KYYFSp-cLus;as
zFoGG?lF)2LH2TLlt-?(p`x{U8aE`Z_)fR3pOg1OCyLB%SXcybGSD4ia58HA4(;8>)
z_$)G)mcs~_{p@IBYIg54cH7_aYdEzv5u&2^iX&WBS=m?}|0`>+gghpuK-#{ps8B5g
zsufnYDcPb>NX#O@y}<WsmTs~Rsy9y6u&}Cc)VL=mK$aTUe}TvN_KCd*5>X6*v}B5a
ziMN(eP$S-Rvhkm^USFP}5M7tMrq`oe;Yh8y>}mG~IcOfO7r^{i=yjGMsw3{3HylOj
zzfWlT(aXJn+C1wp2s06LpGF2ClYSvJdEE*TtyDT3x&Z`Sh7PpT-2+9))jc_5%Aq6B
zDD4U{%`rrgjV?bMA=q<oc0VC`ZwQX3=`KwQBD{{HHz%X4K(Qe@U-uNuLr*4=(}x)e
z*u#PXp#!{Kw476PfIW|T$&-{i(5<AB%Lsmjkrg(L@{%>7{OnGU7iz}@)^*~Gih;hq
z#|HxcNA8HP<mMn>;q{+i(0LL-oVNzyyB|*@*Fo@eQDiNN^f|MvzJY-T#x?}#o+ZL}
zx3ImveS9{`hr@hdVV4l3>A-rv?D-MuC%w3J2bOT^=4D;!=;*L(%E`&Oul`}f2iLC4
z=QEJr1hk9Y{AD*au055%o_y{^wc_<d2v_+E3$ea`UneQ_6dvKzjAS0htMtXd7&-F@
zGkCy3ds1yX?O9HI0&V3u8^7N9{uH1bcK5D1#Al1$+57$5Pz2Lgyd`pM*blvAYAQ2a
zi2mDkE<}SsUc>%wxJB8BUUT4W#frBUx?n{02#058WEHxw61v(7|L-S1f8NYLiBSRp
zZgz-&#_p!qa5sS=IhiF~)q?shz#AX&->*-)V@fY~`sW0o8*pK)<0{<6wD5pDt~0p`
z<;?p6h#$thY7WT~3YRPB=$;9p)O`$WV+z$5=|r7Y&+lBUx;C#7$Ur`f;3FN5GE@~q
z6)C=jfx$zh_|oIz+tM*47mLQZ)OPwqd%+Cv_&?XhM%)7gIN<{MCQcWV6Zb3{*Kr6I
zB+OMD_rv5ayt=9i)w%(KJqd-#99|!e)2j5Mi`+3d-^?Kz59_}Zj@l^Wg`e+u!%!w8
z5P-<F(L+J4lC=%{-~Ug0Umi_m+yC41^gLyZ24f*jvJoj%rl(CBM8q}=mAQzbWU6c$
zD5W;35He4@$UKw`wM}K7N@Pxj%r?&F?tR|1-rqTAt+UQL?>c9#v);d&toFU{`?{~|
z`~6H`AsNe8lPz8Rye}Yu?mYMAHVBCeP*m@Rt=V^J5f9rVR^#yn@Y+9oeFuS+5->dY
zIMc+VCp`L4Uc0%0ky4rY{Du&-*~Q)_s=~=*lt|fq*mXrOQz(KQ<WbXNuh~~u=V{-S
zK3`dmtgdlvQfCXtDu|bjpN=wPadA4q%=Mi}RkiRfDh^qt-n(kY6Rw<aZ?pc{U-P3g
z&#^ADNG(03Y@7Nom5@8p7!U;6buJXjo@%um3)7wFFCy0A*uJ5QR`&Qq9X1dg<a2d<
z2S&hA0805W*l{rjHw$4-M1yQ3-Lzd&GAQ{_A~&&V-(~$Gb~N>rU}_;YoFpiH#=Ol)
zrvR?w$IWILuUvue)jg6+IedScb@L0<1>w7F{jXV(&R3K=yJ0JF@cWu)oY}wI`O}u)
zmtA?5%=n9+W~RoUcB$I3PVRF3M&>aVDs(VrJS)kqSN`$aCRKM_#}&?N|2}QZ|6$ww
zuY&Ra{8ys?y@vijx8y&!<o_L}^`Dm$yXC)ANcf-E`TxV$`TV+oL;u7A{^5N3&tv}I
ze#`>EjBcWhIuseCC2!Baf75IiV6Zi{;<5P4|0|e2ZS{U0ab%I#N&hO+4nhw2tvydb
zz}*D8RKa3XJvp-A6Ga6OwzjdihcyV@Ln-|hqMP2K%F@~TMD|D%%gfhySHNc&<FJ-j
z*kH8*A$g<h-}ua79WSqeqhOFfMZZft38?<=ueuvkd-)b%E#%?jgQfu;4`IbMS_u{v
zL}*e{Fz!br#xbGSpRq_`I6g04ockJP;Ul*j;9?!rb{Q{hX`i5|A=IOXF*M^cdg3<p
z{*Z+}&wowmZB`0hutX5MK_t=$V+b1wVEf=^twWN4_v}7iu6pl-uF<h6*$ptKdMXV)
z{dASInC<D)yX{{9ot|93vj=J;l@#M$0EYIh6j6FQLGbtZ&{)0`d-h~uW=X+y;kinH
ztse?K8gQkF!UT!X1_^O<H_!D~l&Mrg)`W&oVU_a4UBZ^}!{=f>xOt*~p=E|bV`ywG
zm`X+#<^mv#@^71im3po$p9(fI1rNJ^_uv)O(ag-citF{?0cnH$Ux^Oz>CLqzCgyPp
z($24e4mXtes@h|zBvYEY(w<wCD8oie%M~I~(RVQ<G73#<X8<qsm90HSaKq6>@3uW=
zLin=^`XYQJ&#)_@k${rUvCXyonOKyUYlD{Qg&)OVEEZi4cIJWL03p#2wJ&>Lnfb+U
zNc4-U5A^<7lLI-j7qChATNC!F&YrG@L<F<U3L*P|vr89^&TSv@Q^n(G(IKO41NAF!
z&By_1sy?`crip-OWr~qPr1*pR`2DVv{?jn()Pts8nEEQxJP-FrK#~=!l{p$y<?*+h
z0l5=?NuS<(n-2y^jeLl$JmEPRxF+>%hg6j3_rB(|9F{TXvK#kiXJ?~)_AO%WW!9Oz
zA(At%iCH0pic!Oz9$$BuX9K6WGOSO#dM=}gyv|Eb+Yi<Un@#~iU=yqE8|>9QapF@?
zc_7pt_lAKB+5m3y!D0ltE^U%!2a%JDFF#?!qdnmhyr=@Jt*9YfR2o)R-OvySm7d-p
z<QJ?mH;AvS^d+c4GvT$&DV8X7tae5p=~mK&1l@0ikUW$@fC82PH#kAe3FX%0tL0qO
zJhDIO*=x|b`%K0X{kD!39ajM|#w`oEN-pGhmBOA%>cw{_N*mw%LLFvn^L^pfa$hdD
za&93t75IA_!)?>|Ozynklw+O)f#HF}FQ-2hfFRBl*Yjc7>oGO5w_BN+ayH*S6H7Tm
zY0v2qG@9PSjYDD)7tR1a*3V4lpo-2!xVPV8|5J^nurKuS5d{OW-se#Kgyo&2qdNn0
zd7C6lDBo)L?c!MV?L7-E|JpSkt}XnkK3*)IqT2%mPYsQUIxM2q4baflbva}gtKn@X
zdx;DhJO6_5YHj>qe2gGKE6^W2uP4Gj38h-*fk2+N$t%lO<pQ?*Qg3l6#D)7CpcII#
zoFdjN?GcR+2omhEesD%WU<f!Y>(ag`Utyo7vxuq9_nyy29J}<-ueYVlaz`P!;=1Qq
zO1)|7{E<*<CO0h2{ML1Qy+Y(JTkXUd+KxW-<S9_=^wm9#iYmD@76SCXLIg(QwF;#%
z-;3une#xL1)oY^O&El<wBRltl#w3BV?X#_ZxH?-@m^;SutyGHXDgL~w9g3CTwrLrh
zaW{LOs+TZTk{#{7fh7kbc>=Tpjl<UQ9=H?!Q2fNRmkC?+&$cS*lD4O>HM*nvqn4N(
zne`e$GmsQT6<q9c8i?>rQ(A;vZ037`NC2m&8`uswd?4%m>tzz-F~bWQdyr(FUN7t}
z9g`#5KFnemlbd!ti-*oeHcJ&`Cmh>6m^aJ~^x^0GwZ~5$@*aD8?OJ)9Ek{$y#6(u(
za#3=trdED$NFX>M!e8~kxCKga461#or#-s>_xPt0-=#gz<m_~OUtcS1d{|#4zFA-P
z=eUnRI8>zSmDSbNlsg=n(3RAsr00)gpYnw`zb9(PbB!Q=55RI!UgIv^EpE)QgVf=!
zos}H>7AEd%+}U7mR+v@&nXcNHZtj?p*6s|!6_`Q|V$~%OpuE=|;wv#qss=#`PJ_C|
zckP7~%c=M6y)bk4a;R!}Ppau3zrp@z5yt%C#YA8*SKI(wbPBi+LSKF39E=~}y*dC<
z$A)kSFajVxsD?WY^JR)BB(3&NYN|`rE;0Ai`d~v@=)J#F)L%m)ea(i8&`2GWsJHn>
zi&Aa{+Xi4-Y+Wwdp75%1i5O0=^>3Yp8iXoE;M|E61k%;%Uh^M>_cRDnJ=t}vu#p1^
z9UDscf(3%)Zc4tSSp@_cdtG`UN|@9lzU1R%RqF}dUM*!;nca+%a=Z6&ngiFa9e|GS
z!tl+X*a6Iy?6ETzLX$v{m)zopt1PioxPwcEV$1%J9gr|B*yeeq7vpa64`VhIC)-}a
zcyV*BCB4bOv;<~B?C})-C=(Nq8gtWK(-1(vV=zu+pBd6UC?r5TU4pywHAFMu36x$*
zO_M_nif6j5!^|T?Lz@u=46U7wo9c&9(`-U24sbLzF;RxOB6(g^;A<Y>w%NY0E|&6F
zJ`3*bA{Rg9wP3GTxjfN|vn{RqCb&%bJ0fI$+7n;T4+m_4asTC(tZQV%Pr3KfN5(s~
z*C(>=RHe@xvNNgluwm)*{#F8_e*`#mlYZ#DID#G9>RfoHvf9hhfvBHqEaKkJEoN${
zB!lp_Hx<-Ilkg@fldSCo6||L!L4$Jts6CwF9fwg*CYjCZF$9^vbd?nAja%LkLWtJS
z`h9Y!Ngzc2gPg2kV9*@0wdus!RVjyRjdM||d?fxBr43R5QsmYK_+O_`d5Ei~%!sHy
zjI_8-OiJY(?i=8%jw;!hEF3M*|Ibq9^+m_zqc<Gj5EsMtBG0WY@aO;B_BHG)!h&&o
zIJ1g1G9eH<GuBi7OBC^x@jI|lb^@{-YJfN)LF@4p7<>bp3g{9nfhW`OvW4+U`$Bk+
z-E%{l$l_SASghMmC~35y#@f65R$w4RZz;(pLb&8q=w(2?K}8VUlGWLQ{bmKHpuSBn
zo~bX>#ldbj{IbwY=$>51CmjJ(B$lI2T=Mu{YF?fkf)my|7~_4=aszyQzV|Ix;H_KW
zaqBZ}gO6d%ECQL~!SQ%FfxXQAYc>X6MiHkAwAx4UQ}E%owHbruX1j+8PX?lYVw>F&
z)CnwD{^NxP0!q$O`^=H)3o$f^$924lkV?Wb=6^_F(@7hfek}Ti+_7y|y3s{2Z})?K
zYkMm*kN5}F7x%)$Kj0V0{A<E@O~2tfh)f#0pEai7V%)8c4ozl*y2QryNTxdw8Nh)5
z&cMWQr^P5i`<sksA#+qsE0U>Y<cxT8*nf0wZWF42OeXWZ50=mT)W@x2Vq*Gxpd0Yh
znPzwFbniH;xA~2$tgI})nZ6Ax><$cw{=km(VSPLHHKEv1K+LQMPP7?oCs@_293kaG
zBEfc5U#l4?+ZEjxnT7OF_iqNwSZWzzqr7gRJ>!PCt*TfhYlvrrA>JMC9qGV1jo;cQ
z)nW@<=vVND@#NK3P2Rf5g@*XY*>IgYt1Y4az-R4$yXC+Ef6-@seSO|z<z>*)f5f*Z
zpES<jEqSI5PO{}IMidaT&%F-y>q|na4o?!e4DW~QGJ2q&BpmNXm#}9M^07fyO;coR
zEP@V0@s~QTRK53nKNDNo$_?}-;I#Z9#|J%r6s-o^qD0sNU<+eDufF^y+dmR(^txmV
zNRviE;$(9!HXie%7V?!2FV1su1ab~t?2`jwl5@7h-72(3-ci8y%pj}4C6HCu&mO|O
zK-2YH?BW-2!WnA&?T0@M8VUY{*Rm<>nN)f{Hmwny*l<#@mNd~{imnZ?ICaR65EO!-
zTH})<x--B7Q|UJNI9nBcEch{lY8C#=zg|$jX<3ItPgmgfRZ11EaQzlI1chX)5vr<o
z!8lh&wecl+ioGut@0iMi%;Rs!P8=ecFJ6#;OFIy#Wq8Ke!~{GEvTk{gw}sr@X6VKj
ze)k5vZz6)-$~+b1evTj5a9Hly_ZgGLWu=|>vmA=f<y&KdwAz_HxK=pbWj_T`(iQY2
z)x0w%1cCY&fyh_eeC8ZWRP+l>S<j@T@9fQiriWUnaJGG7bUll*=tpm;!Bnv{(T_AV
zG^o{qCgO{+v99%#%FM@V2skubqj0}u-swozCa>DSFp(A1>Cs&QW8ETKRf4B+m#~G*
zqWjs40i4`|dd47;55?o`9E9s|?X`nGi={JP;F{cL&A2EUzS|+orE~2`qwQt>JL8sH
zB|64wXQ%3(DmU=o0*wm0Xg<d7sj5Gsq)U`N&dTCB?>|ka=I&BfPJ1R+n9<`<F)}iu
zvy=U|p&ErQY&03zaAJ7|?xkPy?<LL(eD#-SljPzbqz;BvkfftFz+(e#(VI2Mf)bpz
z8uSbJCl)~6=YYzuG{d@;ZskHU1$SuFLShfHeqe0gx=6Plo4PoXONrR`Qq%dYU1(&^
z#OLoH3;ywhy*F~aOu~YffAB|a2>TS7H5~$&Y#1|i#DZ2*ryhvwk?+yb@+IX7$~o*t
zUlF})T_1T!l9ZQV_x3J|0{ix?p;CW|9_vGwt#6sEKbxiN)%9UixILvaGUU9<l29X9
zepUE5At{8L`BdWZfU_)dB{d4pO~{DQsbqI?>6=V<y=^6$r05&EI>vrT@hkNqU%g?0
z`&qs9s^Hi_cun9C)mI;=ixRoq4!=jvj~!TX&?vlSXtJnYB7F~iK31{*x}at2%qZjS
zA+8RQv=iG&0j&ZW_~H1|&xddx+_j{5=!HK(&!qKm^nm{HWQPwY8&H_<Jsqt7ED3}z
zY!qbC=M$1(M3A7Zwp}bBs1c6##NNV6?rmL{zSPK^daD$jaQJ>aww5-K#@7W;DH*c3
zfuMC_A(xkH!jGkp()p0s&+#e9#|c*L?>&u?%{_tA+XCo>mxL<C@dIfTmj|UGIZKjM
zkC*)_C3WHy9JJfFU^0Ox&Cv_zKW<hyTcW6U5fTA#;vCh~%rHJ*u4PAV_8cn@D?Roo
zB7#!l<Cmmo*tt(Gh-)YEzq>&;9}M4m8eFJrA692}rEo!*u^|hUu-Jn&X0vXh-$EyU
zFr@{-W02k08fmxA)GI6kH3&&UTV<tRQ%WMY$+)F|A^Bfxg|I?U-fWC{6Ag3<VmhM#
z;%kq#G>RYQ89rlu#56knVR&Bq>Gh?p*wXoued81jPn>Ced-pv<K&SSzEF`CS(1oin
z<<*Fu2r!$DQm!)0X_Jr^HEH6CT*LeFOk4e^<{eUWZtk8m^#_*#KiGdNJd6YLFhz=|
zRF?5hTU<2Gi#e7!F%bl@xlA#HWiCsMq%(aw`r4q})=A!9VVKt{yWV&)FRYKLE*cT=
zyM1`=#2Sgo)YofbT<b=UYNp%^HE8o?93jg3&xSurbVXAOG3@F(gJS*rmQ=-Gz6z%W
z5^tJUjWFt$rZWH2|2Fi;THVoccD!$O>PjFat8t4Roo+Ahh7k!mR5N{jeX~OSZN0ub
zp1lqVLf{WVk<QoG>lgmE%#t&8|3;3njHi}|vCY8Z+MHsjAR(b=9k7%~H^mG{o^_I#
zx9ovK0?MRp)8Ci<wUr{z9gy*nosSm`o`O@Mi$+CzlpPyIqO1gp?$KoPg8o7ekLYXW
zDF*3B0h`ctlk`S<+AVRy#%gfJ?QcG2RmU-JJEIy%&)63(uxuGA_V`s9ee?03eDZcW
z($_GSXl}B!Sa7P9z+4WMU!^}&%FQ)Md*tAkx>R~XaH@%3Nm_#o@h9=Hu(Jmun_^Qd
zH`QBi<T;Vjq@UOmV=;5G2#jKCYBh`eA66Eeo~Z;Q$dmk(%<r4B>IcQOqXMdRFPNuR
z>nG4N;-@<B&qhT@C@irg!UhpQY|0YX9JX=(`WPr5Udm%{Mw{;Crib(Mrp!j1{hxiK
zFE8(g8;~&YbY5tv8LMp2R-9Z~{Lz~$v=3^M88it}fB#_A7MH>3>qjvo7R}*6xb3PF
zFHXM;R@LT=fVd1ZccXv8WuP=dSChy~gjWl!Xj-R5rcD||<~^8W&iPF$yHyGQ*Hc#q
z>QhQ>?+kD3`GI~pu%jj`(Ihe;1zh@B$4)NLj>yOH^8*NqY3$ac;j(eiz!-i<xik;$
z84)~!aFG$HUGHqXg<}%B<sv8n#+?IpLoDmo`5a5a&!8wFsDgZ0=Gkjl=VY8ebrRtm
zJJ)fv*olJu9zv{Gk0GipLUfzEfM$(wC#L2Nvr$n<%^nt8*il%4v4bcq1KL01`a>cj
zcuqvGRw>5j5?868`wAtv!O|Lr3KrGP4)hmVw>>64R6-0<3Db(XTT@d~Ep%VFm$BaS
zcTCTGm;=52uFisg`nnYXXJJ<>#uRoyFP8>OhLauTKW6ozBNFK1l$-S1;8Law#SbPh
zR{^&9_K8Ngf;Hd@MsJzB`dVjxP*UN$`(mo_KpYeiDmDGd%@XB3m3N5;ve~lr&V?@h
z;eKe{9^j9?ke&us9*a^@{-YEq!75>;Jsf+Oqi?!Aoy*`X1@5@1w*u~Dj#Gpc`P}E<
zAU7<YYEPMly#kh_uPDiaac6vZlE22w;@HwscBZ2shZ0=*OVBRzS!6xk9(6(4izyqa
zrM7E`{u6+Zk+ya%3@Q#y4uOD7pk)3HvfoSd-!1}A7(m~=zM?UiB0<f^o=ZxX_@1RV
z4P)_c6PK$!IYh`!W0LBbtPdLaJVI^>hYIfUREF<D2eJpFJo=MlzMy9$0)g--`+!Ig
zx-faKCeN@BM(*yI;nanFy>e;cheY~xpfhQ0y`_E}Mz!<TTiWeLuwI~4Ho|2z>?*}#
ziL{lmnghji!(T@sR(!UHJHTqJ5bL4}c{uhmS=h(R(~iJf^kyEBHrR3`)^U8XA}T;g
zz}eZ^QMGL%*m|><D@$=Lv&4IW+Xj7cR}tJv(J)+_lhr#hOCHXS^LQ+=BsdNu9TL7v
zVJ!G9i4{l~7nvR*tfVi;Dmbe+Od}dc#wvBT1Q{qTi#@avo4e1S$qL*m$Q>dqA`n*y
zv`24g#ZYf7z`HBnz_j+}na(4{iT7$T4j9qhGU@|SV760{bym#xoO9St@u<>!M>?E3
zCb1u|cSMC|_nfRkdEE#|k>U6lcW!BI(|qeq6f2)#vrdxzEOfEcqvNdaosQ_ApFEd{
zGx1<k5_&Wu?*KAw8Q0$H_qTa_KvYDON5dMiJZx5S)K_}id)?p@CKM?OC2f6A{gQVU
z<7H<mP@FenXVIz>UncC{8l9B6GvzR>e33|5gb_-4dZgv$*K8uION~p}sK7n#NbM(F
z8er@BgCe)voeG3-SWfdw$>UsqOlX}f`~@)`zV9f;=gne04Aj;*;uy@TCD2H`ATzsb
zmtGv$N~EdSr4i-_Ma2SxG{&~Wi#h+YS4gjofbfzwg6Jsv)j8)*>)qCm&t~6TJm?U5
zquBuP1@Txd!iJTt2{q(o=)bBlC?xLYMBP)wQFVr;wAf^^2xs6Gqw=dVUOC#wj!8&L
z-m+BVCboD672Rw!+wWG)w0)a57d^Ff`D6VxdPab<{9MZ?c5FD>aU?3BMi2|69Xsw=
zF7Qs(6aQ=gVg4013Ixp)ot-1dUD#w);$O6TB!x#M1jp_Tk^sw>O;(qp<Q(tp6aAV%
zw+&d>^)iF)*QW(BIBo?}<sAFht&@!0`!fOOA(~g1_UCGAmOA0e#Boy^Y3v$rXVAKf
zw(_@SPeVxSS>AZQyBRCt`Wf=3pZ!wC*=NFSbw^eC+-sq}4hqV`P_Vc#9bsJ6k!1ai
zK}W1hNBa~DEA4eQ;y}LRYroZjsfo3!PqtoeHId=`X-u!=P1ujb-ZMokiwQk5Vr;)J
zdu3we_ZPpW_qWg$#>d`X#eH{g-oqU~!@CN<-Jde^95S$FOwzv++KufNYJ>5zsbXfe
zY^Vlo{}<IjPeL^Q3tHBSt1@LJ*RE}yon=SwX`FH5V`}PAn!w^fsgtphk-iRn2IzZJ
zy19gcLWdKQ5o!8ufAJT)OPd+#V4zU$ScQOqqi>A3ej4`@@|j9gpp*XD-{;Tfo@SCK
zOPtOcaoW!V9sPjl0bO{o!dTT`dDlo(_mX63@$hLI9QZ*;{w&pT!*<__qlu;28F6jw
z^A4@2uza6xLVQ)o_~#xxmt@Wti|n5Et%h%eQx5$)-1Uj9&)S-rn}08$e>~D#fj-@V
zlUVDSFJw3WmoniR8?m$s3(js{f9t>00GnIiw>sn5l4<!>gC>_iBSrc87~v7UnoG`i
z+OW^=eRsF_hZrV472-j{S?#*5^5TPVMTHC`P3j&fjX80tyPTrUc>A{1xnxl{j?mD8
zSIexC545bo80pykewT-ahWae#_u<fG5HHfGBZbCOiXN~JLNt<n=pyf8Rh*flz7(<l
zWy44z7I{gMIQ}ma=ojz-zT;iY+4C?$bRP)xS(OpEBVUGe^IEMCAS<IT{RJ&+=+^sS
za4kWmSw{Zw@M!*EjH)_i0H+4jWonR4f5;k&2N+Na>l}FiUi|FVm`V5*?(7>L?5{EX
zPMBql96}4e=X+ik%7+(bxF>MwQaO)dfO}_GyjB6uN^vJRi4`Tg;T^kkq&B1o;RYAJ
zcfQ>3cN;+f*C9VlFFoLIoL=B$H~n3?)WE-HeyT(Kmk=*w*qO8o2nT^Q#{}+J_3iG8
z6dCRv;9)+$TEM}OUg9$dtYm5QdLSBVq(^**uT)@{4K!_c!BZ9BOD%qLo`z@So{0Bu
z*=iy&A;P2I7=S^Yv#)0l7_EhJzO{PCHa}GHzU;Fo?N)^}82_#7)~%yXL8<JEhZ=!o
z2v{o`z_PiZ{0I_WaDk4s%2@wx5#hXnm!~1s_&%Wzhmp=3us33jeqDU3$#+@75Yx^?
zwDv=bZj$@~amus3Yhl+w!h`Y549@-Q$(9boD8b-aKCc#=m^cU^2GT<I%}e89iZBn%
z0n&?)ixYAw>o(6nQ*ioS$ao8pMTlW^&poGw)C%+xwClh@0WwqDX!bFNyjy7B#4#+7
zHY9XWgE1@=Uf6jc%8N+7Ac*DWQxp*vJ=<FWOx_mOI;HdHl1mVvwLdExw-oVfb+-{t
z_%%ap30V^;|Bq<3<6!tw0Y3<LX$Op<c-Q58m@|ko*s7kJxaC;D!)cIMlD<4(`rg&n
z=6}zRCgiI)$ElHbr2+#34RgYa%0K=S3qU4Og?|!JeU#l?tH&M=PYPZax=+fSBMU|X
z3P*_xx_-v_>#;DYP_`h-8ULxJmPl&&=-y#*?zKM{+g6W(F4P^uaS6!Ot-RfMe?=&5
z`@-j|dur1p-NtRtHE1bJkF?DLv>?E*4c1i_`si0iKRw;Q@L*T%o+22liDxsHHY`B}
z#^;(W^gAV4iT@L>x(_Ur#FmPe5^IW4RuC}_SoN5eUODPA()y)JB#K7k(SYMpQ7u4{
zeKrk_Zh)nFdh2)F$vAb+<SxKD9ybTDz8E1%D&ud}qJ@U<^6W@<Y}p~YT^JcD=oid7
zVJWYMh?j^E`<mmB7eEh!=Thm9QrH=l@Vea=JnJ?7t^^Yaf3gic0u;IS7<2RFa})++
zaekXM3NdgjmT>mW4qT_HSYM#|EX^+|4n6A<y6|2!I%WoR4gy-@w&7`fBe;t{tHG@*
zkG|^CTd<NM9!yS`Hme^#@fsT+1#CGwVdhw{nta>o`*(zLE`tFNShdiA8V0Xu$FFOA
z4%Xs=H9Wm7b_bSqWcL<zfE-zWi^@|g2gV4D!H!8mjP}I)P3HNIjDk<_$vfxuHKWeR
zD)rys(Yu<^hq}0Yz>gNArknWDr7AZB-|H#?x3_mSr6EF}@sW8BhT03Tx9QoJlXn!|
zyUymAOJpV@jmweWqm;FT^ZZ9-|KepU+Ks(5b%_uXgzoY{ae%x(R3F54`k_79IMaP-
z;Mm019K(qy+tBoTm`{bNIj~m7(>ACgRE(hcV9FZ|i;BXVx>T$%gssDH*6Rj3wVl<p
z$B#{C5BOU&0&RH{Kr3#%yL1!bzd*^Pm6eN_zJU;#rdHkIT()d|zC#9gg&|j{PrJGu
z-jp{IdRxrmaMn;%I0<z<c*j{}Un!)HjaOyxBgY0WsNUsQ!;!qX*pEUF`|<1`l?6k;
zf7lO8F`x$k08@lfXF+V5O5l?*e67{BN(y3u_Xr!Zb(<Dk$dI}<98boVr;SN)QMcSD
zN+nwKD{SI-b!cqV=<4HhAHLC5*yoca_Tog6C9R@%7r0%%Y=VHAzsn(mZNKWBQOmg*
zQ#TEb%llvVjEt~F{$6r~CN4GiU7LsP*XcRWgTwdPah}pAPeyP930($_&Qzr|NYam3
zNpliE6Sp77ug=zE0$O!7HIWL^8BeSz`~zFmnoU|Y-xQm4FC2iQJ2B*{%#Jky)5Kjf
z6H6@~-Nt*|<5xrPV8MgzsHbEBn!q|fR>$UQ@$E)R=lhQVPpYn|0bdogDA99ta9%lO
zoqI456JQ(qMEnuY)X_fTbDuF*l#ZTo?HRnaA@}s*?#{eGxbqCc$3G%?!wV$;mkMtc
zK!E^m7)TqBK(!8Mmln()UZ4jE0YZDu4{pjG>A451-EaPng%=nrqj%9`tWT;I<Cs79
zB4lj_M}`Vwz0iK6zxHr)`W~{T`_x0s5f3+ydHVD-I1Ek^!hi^J9Al_bWKDa%s))NV
zH6?VvSdjMq_?OI&wEY`{7Js@w{V*&d?gC#jRQ=x&GMbKiM7Ujt0gk%3+`PNx&6SXl
zS~eUbq7w3U?=2y62Cg>*8<=bTVKIu0=4tZDu}FHnuFSSy=3g2oRl>G}68{<}!5Mf^
z(PVP6o&$9RR!x*sgNHSoj%|P-Y0mqPfl4(7{2X(HoBd|9l>!mtbtw0Uxmqq`BxgKl
zl#qD@!RHEjIz-|!zKcwT`fH>8H}487AQl855nkXW=<VCEJxc7#AaEPHJ60RbYxIpD
zmkJRih5mO2n@<#`er5Id80F&7;{FqW`S4vX!aK<}!1h>dElQMBf3`?9qwwAQ71Vai
zLw?{b-hde|bhnq;TCD<bm7Yj{MQ=Ug^cPW436i9_4fwNq3aSV+27-+Wc(96@<5l2(
z)W1qfZjnqr7%Xh{+^U=Ap;Ywivf>Rq^}^XU8+etxw}eq0Gkp8tYACw%^0h2*)c1hq
z32vZ~^-Cn%F;2JdcCvX%9Js0o%F0sLdds(0K^Uz%&x0AnZ-l)@uijiMwm8u+0xIMn
zB@J6jc(^gFLPU@Jv#Os#WhRVDBaSW-f1PQgZDP_cSR?W4;iRxoQ#AdeOP*T3t5Y3l
zNv7;V)P;luMkf2i@!Np~i6f<h(WRF)jx2FP6a?{z-NYaQ>squY!=mO+m#VWCSmQm$
z3yT->@0!|g=vPx=s>^CofJN%U{=VY2!Y8}fe9&>-j?-OBi_`GHS4S!r>_cbn+Vz1x
zO20*qkzK!b|4q6`K+(>T`*<0b3RX`YFIb5;{&?G8xeVzBm$NdBRzTAq-W&TNMo}6o
zTZ>qY>bkn%WG$mhMhA>^^>2PlJ-4Rh<gYgwX>qNF-<G5Q5?ETzVmK{#8L<MYOHaB`
zk=I9H&Dw8&i`_JVIsW<GRv;1uG%@02x>z!Aeo5MP>K~Ux&zHS_nrvWD;#0(A`X?z0
z|F&#dU*gPz4}TZ%q3N6fwFJNcNFj0b^oK55F6tSBS}If^MB>u0)A>hh2x`_qtY0^p
z9u`0Vd{amfNPJ(i+-mQ1i1CYO+Z7ZNs^0?s-lC}J2@+Pfk7{HTKY)5YQvR%o|5cgP
zO{v>ccbM33=3zB9ZZ$;v_6;YrPBi=}Anm}L5mA!Nos-J*@OSO-m{E7}*PKCZ_5*$_
z9Z?Rq()tCwY%qvq$Z!Wxs5`CPtmQ3fBBCQHR>3b%fv@uSVWsw&Df1sQpEXz%t@3X-
zxBlJg9BB3cBYxR#1SUKg=HMx%-$k6w1660@PVcSTE18fja8Jp~;`Y+eugfX^^`5%l
zIFG%ER^oYZ`x=d{Vt3+qYzva0A_bFp!1R2I(~8uP2)r|-tWDeoFG{oXPa7SMCeL(q
zEz0jcuJDi;fx$u*9ih0g_MN%13BA^<N6908Lxu*}7EtqLWyu+ly>_C-TwhIP>qcY*
zDV6w6JpN6f$Cv3xWWC(MC2wE9g^0w@+)j#}D5s9eQF%V;Z^K=*gOtJtn*bt=T^%&Z
zL<E}va<UkvMzvhWi!lnp2YWQMX%t-GsAEnAPpN*f0~kus^N&`PZd7sEy^i(Ro^C3m
zlT$Wz6R1@ddsqUyfL;Kong?A$_JuqPrPkPcwP1BhG)m@1y<@;!%WD;<ztzV%0yu?)
zCz5So4$>V&cf}*=jZgu#zE9o9ZP3qF1j=v+9Kwy?W90Z`t+sRFr@xC*4EF3vJ&AZ*
zK(`~156<^L&VYMM7-bcnKQZeBZ>IMfPG6F*qQqu>aW3Tx?+Jky!lz-sx(p9Ha_zca
z`_&b~R#p`?*5RCB<~1gQfe8d+Y^ipCu~K#MIdiqBHE{BD(;Rnwl8e8_cCLUwC{PvF
zPcNAfBsvNd0GnC$5#6T}fB38Oh3-PFooGe`k^AQYyt{zT5ID>%u9z6fhdS~)18(My
z0KqTXif&wQhzSXJ^B?@IEwF4%41RNRy2JSuijM~DmB`lVhx&w7t^$2bH$0Dv5L&>^
zYHq^=*f19{Nm$FZ__uUGfsdWq3!xz-!hWzsBfO`K(T0L#F*763R{z(8U)ttzEiRX1
z?>WR4vM6^?W6Yr#(h3ii&51H4h!B>zxHM+&gL>W_k~c1%A(%=z&k=QdP;G4G`F8`c
z*;R!r7u%idBUt=7;E7x=>FB-ss)cz^ASHbE=TGRLM9WIwH(&|EF<M4@hsLhV<w8%{
zVaQ@sFc(^NaV!S+3`w)IR>zq^Wl$EN1V|*FAr5Uek8wcdh$ynMZYBh4cQ=qJ^b592
ziwkP37dmrYbl<7*0d@ScsPlw_U3&ZWL7c%xHiLU1H1wG+=pw-C^$#e2lro|&c_7{P
zx|x2#lu5G@d0SAGUteePZb>C-1z}jnY4{NVQu!BuxS+&OXFj`y+pwL(vp+mRTV?hl
zVJb(K&x1(8@ebTx_jdaP%okB5=Rv8s+S&%Q!_VNP8E#$(ULTGe)18r7`DZ)4ei|Iy
z;G%9vohE$P#PWTb`dZ8SNR+go!W~#W?}lNM*7vzb-+=JGMKqFz(--FHt@Kf%8GOA`
zggKJ=T;bz|Q?VNBfwljM`?b2qV(6aLuIx{jQ@~o5i4ciA^?FET<ThNVrhFcoE6Xgs
z`j((v`)S~=)*+)1gY+CGdZi5AKd;i64p!T{pbNAQ<daTEwnvr$!?$1EXat}@DXH`p
zxm6JvWCYv@h3z2nNgiVW$Ixxb9jj(Xy9@(q;(G&<Et88FfsE{r*^Xe*!#&>+2YGjq
zY0lXyjw!k)Xp$DIZz4xU24Wy#^FYl5tdK~Xjv?{z^7F3eMf6Y($bau7{$^BJqbK@Z
zrm!Wju698n@K_}wH8E*wPOl|$UC3WV7SHKA7;Wc*Ri88ZNh?;+rBfBR=ll8<Bvj*c
z)Uo-<tJA!1eP#><#+$j6^FWIE<JHyW#Bfoa_kqb|9L;KLJP|)-0rxXrsYYm>3KJ6(
z(LREHA3|NvaUbou$z@GEjT<Y4XXbt8IXCPcq|*fm`ZsG^cBg9~4!o_YcCW6Cp67U?
z;QR@yURl&rs6pg}-vfQcZ<N)`P?`Dj#MzwbDmF(T5bhqod=e6di5njfd&d8q)Gc!&
z4IB+E6OS1h3;93t>>~XAsRz7qc|^g3M}8q#SkWB$1An{vFTyr>Tj7Mn`Qw8SMNGot
z>VIhpcu{|U^9I@85IasGVE5?bOwk$>dltI($7h>i+>hjN3{HSVtOibEe%ao7>^WYe
zpLZQU4{7NjAd}08$({a~<BR)8-=C!0-&rMll^FW;cN=D$Sz*26fjt^oKSF2*C5x&x
z;{o1E4M)U~u83||xLn`3Y}p@kM0Ox={b$%;eHwKogon8;Ci&zsJbK9Lc;ef*^yQKt
zF(Qgc;rtRzq;I{C_MPj#{^N*6r_ti(q2uIj)wQ+A(>L>|M+5ieal?bv$zeziZU)?V
zazVyzm=JEoB_xC`1*`l^vI|YwI*W|l($gp$FnEdixQn?Blg_23GtkQ44!w&&v~g4H
z_K*_i>8yvp)p97QyUH6cr-8x`)up{&B?~K_c=Ue;T|^j`iJlnSQtHPvC&oLsl%sz8
zZ3s)crQeHCp3?d^N2ZDO9cJcw7)*zn`y*vfcPxABlUB&{IV$haXa^f|d3iaY8V|2@
z8?#U1=Dp$#dii55C5zvXOu@v#2@g7kVw4CVzC?B)!{7z^ZN?QgoY(pqfH!l0H4s2&
z@Dgwyc7}E<P;*__4UxSMLqkJ#Hzla!?x{I#P;?)`W4(;Nf%eXm#z9>g(@P_*V4=Pf
zMRod@wSJo%)mjDg8xAujw4*=|&SHo~TU#68e^K6mVBL3nLq%8GAm-*J272%HQW|{f
zcV|z}4M;EyZb473di5@a2tP;5$-^>GWBUHt;n<l1x2?;q^oO_9L(R5Pe~HlS!?a1z
zR?(TzT0kR)Fi<z>Z-~vXUhIa(@1kF~ja)(`e=_FX61{C-%1pd$x5VEath>8GR)4nm
z>a^jjylVuT{!vw3M2ez6L*@E8T3j~BYG_<_^9&Xj&3&5EOCNnQ@r@4qW6cht{<=K^
z{8{H-7TZCpa}$UFWPO2<K1iDhF|WNM7?)Z;V!dJ}zm8FQA|KOb=#}ltfKSQjs&VG!
z<+TBprVU9qBvwCbN{dP6rF4^K+<pPd5`~u`xW7SykN?^UGuLo%9cE%?A3rxqiIOhP
z(##qK)54yydfK$A>dhw?VGk$ik7-%Q`0}tiHZjbz5-t0yqa2!&1&YrjMJQC5yK9$C
zpN7L<6H(K&q@z3Ob8G=j2WmtzosLKYmv`YY#+XjS0AiqX7(Ipc3$uxg35sivo%Y+S
zSo^h)b1q@FOI6rX<ttj05^hz0Op4hT#<!&r=Eck>#xYGR53qK(keF3~6Rl6<yO>H8
zQO7qDrGFeE<jCfvwE@yy-QLi*S1s|Zl&HSiXIsh^Yd#x6^Z4Cr3-{vX@-gW&b^ja!
zT|Sc1C?5NKrtAX_?DDP>!&TG|k6Kn#NtQ6(XIHz>M5=~*TSONtdHw`TEQPu&-Rn=w
z;Zwto)8og*g3>*=nN{xVCaD^<)@AtlS^$Vvbkq?Iq7|R5W<-4O{iM20&c^K>T_Y~a
zprpC)^&v}~#749rL5Yv#Z3aH~&h?qz4Be%YY_{e83iJw#k4ey%&N7bK(Kt>?1WVdJ
z$B*mZ<Vgrh*SsfVvM?JH=Sj*4d8gw+1j-1d8T+3T`qCySRWhD}&c#xS>8clggqO7{
z+$3J!sQcS#hGYUWa(wMm;@-S6NknDb^8HlSagyomsyN(H6Jqmw8nP(FQYF5^pnp{i
zEtNC$eitcqt%hUBia${zUl~suJI`_|CH0T=ba|si<5-$%w_XK4E0Mg!1txGw*U#)B
gu5ksi3oc*woA|=W&XK<=@i)s3AJA4$CtF_oZ!p@IDgXcg

diff --git a/screenshot-03-notebook-detail.png b/screenshot-03-notebook-detail.png
deleted file mode 100644
index 76a8355d931f950e88bd772d5fa9065449d26bcc..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 105068
zcmd43g;SMX+Xt$2NOwttba!`mcS#FKHwbJ>TDrTtyAhF)MnJklkZ$2D-}igZpK#_d
z^UQ4b?78>7?{%%~`qg?ORh4B>kO+}py?TWrCo8G`>J>~K_|E|W3cNGA&0zcL75XbV
zNij{Ytl!zNUO0S2p&FiINTFNG_2N;T|Nh3zqXZaR#+Xn4^QT|d`C{$3;qpS5Y+!Tf
zo$I}<NR#;eJ&mW!h13-^G&C&vcT8(*JOKd%F$8i5y11;1ln%Q1e_kTUrKqA~{`a*k
zduVX{|Goc(4jTeK`R_Ad6!Xcb{`)%qJrXSWzbk<EsWjdpApZ9?Rl2yC?0+vu{v8`h
z{C}4&`TygkucQXhacP46C1vXnW-<6521Yaw4iNr(%U{UN%80RW_|LUrzq4|<W2(zj
zCy~9mLiZV_*hu^lF2mnHJV2wOo8e|Q_ur>Ob&rmTd9=Nag^rGojjgEkPIF+mPjr1`
zWNLg|QH90BA1BelYM6G`Ts#<Iz%(%5f~;p{roByn@~61zWiJaMC)#(@!e&}LZ0w!=
zeQR4=y8m00_oDT8cXvKsUg_!S`uh6#goFoE+y$d4eWIG%e?<b^S{fQe_lBqpzIa;=
zGtHVS2S<~?LBZ&N+j>?rB6Z!gpgH?FD{1Ikm~HQ{(pK)gU6RgjIq`+spjcjuMk#|B
zAOBqd#m^d}#s>KWe)o)UG*a7#$uu^sXW!e?N3%C;YiqZEL_T_Y;<5F8FV_u%3Wc=D
z<=Omqwe8M~jn~ThOO-O0mzObHNGik-FJ89?35xw73ltRU4zxLzcm<>IBb^{zF$xEf
zqddAsl+Z}Rt;l=or}(!?^)|b0b%R#N<F)Q@?XLUuIyH+e4!>HR)_-L2*-z#5Z<Ru0
z?QZl-NM`XmZ@vHirP$+ig<5tlON;zJPv#5uOcoA0x{XDmyopHuur;-NJjV#>qI<l~
z^axRUI>PWcHrtP;#R5yQcUUD(@BI8A4%1V$!BdRmV}?8Oc<YkuZO(<Be}rvkOS+x6
zAC{Z#pC9Z`2g7d}v?`jcCYHZOz2J(ZULDR#)O=WO(u;>NU2ZyTw*M*Qdy_@>ukPj4
zAz@))U5aJRs7K;NnaOM8E!1F5t)zFt({T-&Xb>czq&|h8-D3B=<qrrDpA=n8MH>5!
zzUM&aSLG(Zi^PyY-xF!v>e$`e`x5xVB$xU_`{Cf|h}q!A<Y=xumBobIe>g5Tp2z9A
zR3*2?c9z?9uS%;z^YM25g_F|z_H;F#Tp|kFc{E3ecA(4aT>RnBdf+SC96@iFhbsbQ
z<*yg}EWAEfX*TQ~&fC(5v%g{pI2LASIc8q5l2g!Ak=ZZ&t~O{@^Q4wSayH_9xF!9>
z&=c^N&=KKpxkf4Y9%_j&#rcYPUiTx-wnfL)4y|^VdByYwPKV{Ep-8NZaBjyH7?qU|
z)%wl*lO}mf`siAO13?C5YK0|*7SrG2aw8;P&5^lS?2KSgO25H_P@x)kd9??=JeTp8
zZHMn(9dg|MS%3L1v<OOxidz-y^5%w%gQJ*_frczKUT36U_QYs>TsBg8b_+9q3eGH_
zV#EMnAJIrCBA(UB#LS#x9A&^R8L^z0QSl8Vr{*l&{0+wITDL3{q*=FtW#;ikMMP59
z8k1f#Gc&asLq4U+Bsz^0Mm;EX_=@3~nVHqqzkeS+PkwoF^6)q<H+|2S2oFaku`)HC
zs<(iLxw*Kon<+Z%^!!7_Y4fRSrN`g*>*wTJ!}j+U7Tf##;aECVy0D?zU0!UGZKnO=
zl9<Ufh^VM<g?uz?jk{@;G6XG#uOePQ+?=$U4Gzx~D{$G)+<`(y&#JRqs4*Iwu9t23
zu#_Vb7(2&pzW|dOAH?Idre3Oi(qK9Ed#SP2xErq1<D^VAKR6ocyW>)W`{n>D*dXEq
zU}N|mOg)Q-CSiQ4i@iCV<+1*e#iY;K>#|D^Q_<LXStN&5s1jnu|MxF+29HyaE05z!
zJcEw%dF8#s+(t5kPV8Hu=e-I0E`2^taH|u`%lcG;%*@P{+SLnJ<@(L?K~S(1VUVzP
zpX-VemEHh<tP`ix3av^*L&M@ug;eI06kLo!o3+mDY@^G)2?#fDz?0-^$Msp`@y?Fh
z!<F2GgiPGq<LScv$J;-<juRPNtq#8^{>=xSvw8#sgt~^Up>VdZLqm&$gB*<Gj9Vk3
zR#uvliMGz70$d_#@a{1<?w)}mr<FfD7GMY2`9hbMAOuH<gHB&27gf9XD_#A&b3Exc
z9jY~I9P5nq%^V13o8L{H27s+VA%!H<b@Ft7DIvMq<*iYT(`Y%?VHKlJM=bOZhe<6T
zL(Es<@Qb@_??)QjWq(LGJnHZ8Fl>4T(ki<~tBD+8{|v$N?Qe15_Q4h*;<9_+;|H5Z
zTlj_g_3I!|;f5_A?q`a}mYZyi>P*EZ3PG0)!j$;b`(j+BEZyq3YSJ5^*Xl@e*Cz{F
z6$F)Jc`&B3Z<NR5cUpf4JfhUsYdXD#E3h>tb6@y_e@slEK$ZL6I(`JbuE%OZ-{M<r
zxH$ywEvu<%jbS@jWQPwQAcYed&7Wc&=E}?xD5MJHpdHVSLy!><7wfk}k?~R)@8L7V
zp6mk9xDe<TTb*7&+YG;KZD@Ea=w<q6ty^)*_yUELG#B)6InUFT_UfvpDax(cQk6O<
z`-eQYD&uZ?^MCttE51af)>sIunyky?<X@#0|5{kU{o^sjD&X;3bN%sba}bik>#`H^
z0n!=p_W|@IP^L_ORkC=O+MKb{w&uyFv#9<pu*F$70xBvSCnq|U71_T&sE3fAo`9)T
z^7ZwJ8v#m)^ehHT+<~!B`QwUGR!6bxl@%myaOly1-<U2mHTkRwsdKl&{sZwI(e|2F
z-AMj|<%bWL=kZrp*Vh`4Zl^19{HF0ik*{bnzyev^f|VHIrKB7@rq8PmW#>Hi4Q&$(
zc~EEUZ+R8<S&-qv05v3OKAp!2btME21@Tsp*`z1B*Z<)vrL$~Tg44&>SH$m*)m(E5
zO`O`^vcj}L(klX{DPrW6?3biiajjLik00CIk5lM(dE%Mc^vdD1bbc3iJS3+Ty*|G^
z{z+;zNT)$#KNgRvGMYrk^o93$p}JPT*+-HKK~QkzTP(@X0x5-qkInlb@M!d!WmK)M
z`<Qm)J3ao7-QE5J-ooA&oLPj5J2pMVzgqu9aE{j)t?%2}EjL9@VV*2EkHwQi%Tq8W
z+HoOpJ1kSp=hf6W?v5t&yB)j|r~^~yi(vwexSj&`zo$HRUvfygKmJD0Te>@PJ*kYH
z$<gK;b{-gY-CsLf`Pb+mo=7BdNdrq*DyP2HcycIbc>Q#4U4KJclg-KJ>feN1AR)va
zQY$JcUG9AM-~W*v5ne<a9d4I9p3V{ODiZMY&P4dp{%1|UQN6k4#H>k=U%7|<vNa<U
zlel<5yf8kT@6|z%&GZ(R{X)fr<Hqyf$Gc1}d+p{pxAjg>5%BR%ii9BW&f6cPqpa4-
z#c0;cO)b*W(ixr*qWh<N4)drhdiDX*lGh$ZV5}l)8EI3Yf=3E{Nfr$eXEUZ2q9ni4
z0u6QkhN7#fPJe$g7j4G=<@xW-%Sb}uV0c^_mwm}yWS-J{u>Us|?J{|2>vLj?<&z=w
zzK=Id|CZwN>I&(n{TyiabLF!$**s3hzP`Ts)E9dbmuH*)i$@y8^2LXNrz_rvW!lxt
zHzx+L<dFFHDsLDLW=oU;pP%m0Lh>)dDiUPjBrVCY>xY`nm6S+qgaeZ9+tjvrsGao?
z@_(VkgsS~uz119G(n?Ep*Nr944_X^oSGw~-5FwR9IXaB0`YP^z0!eK~w;hnTLP9~p
z@~J0~I5;@C+a1Fz51zYwgg5MPL!2Mtw4EsvTJL?y+tePuc|V>eSJttkr>`&UcPHv9
z;JVio0U!9phO{>%mq;_HTY8g3e>E8X=lk8=dEs4PaRrSA4Yh;yWDaU7Yjeuu(~=&?
z1sdsEW=2N7IlaZ>-Fe7x{vVx4Il>ecld#G-0uJtT-OqW@#WX``#j<v8hcimmaKBm{
zE>Bm9A|QxZ&ntCitJlXr&r(JuUY;6Z><r6tV*TD@w$=YRs(6zaa&vbU^Rbv@Qtg3q
z94)cP@lymZ<!K6&2`st1HYeN0(Ud73i?Pr1lT^_xBY8i&kgClL{4Tb~AKAoGR7NL_
znBLyrhX5{LQ@h|{*5+xnn-l-X0hKQ>5@j7loVJ*2f(Kh$P{>cKot~80x3D=!FtS+8
z%+AkGp<qrTSQ6LryiI>oNN~5*Xno-(I~zy;F{QNBx~+`!{Ol~^=sTb=ax}kJ+U*A*
zkv%;DA}ch?S=g<iqi5g4zVCp3OrgBtdieV{@$}2h$uAD;A2VA|Da%s&uo^kMrbK%&
zD5!tVHMT5h-}JcCn(n`SLJ2sNmAosFkvgEY&Z78&s?UK!fR9khp1*4!W;Mz*ij8Fd
zfd~_wCR!Z<O92D3Wc*#oD_eF*a|Ovvsn1BRWw1lcpr5$gxP?Xjhq*HH4|)#2T4oJr
zx>a&}%IZTapUOL9^4G%jDL;6!q9IvwdB`|9If;m@yB&V0FP5`#y*o3To0Jq}<>1KV
zbA_XiGHCH@MZ>03m$bRElc0A0S+n}^@ZeIG-$Y$u-_3poAf07Jol(2X{nseGqkKaI
z?~T6KhhZ-hnXRU7;@W<lqsrIrVD2y{J@_Y(mWY)>Y_^AEw5xPu^=-pZv%9*wB)3GX
z5fc~qA)wo*XzQsq*-YPGzRWZoTTSMi<OcRI#|Gz4cl+Lo(Z8R}Y4pCtJ!18Lya`c>
z!mZv|YqVxraWUwAcznYKko{N+Q}~t0$Bhj%4XqkOy+be@Vcas7Ulytj;z${U3i2D|
zQ<-t*4*~w5*PSBQsS!-3*ZPs$E1JRCvfAMu-Z1lKw!zXqJ?DJ;<?7}}3~?ffPT~Fn
zhr?>zu*>WFZ0V#VVVn2m3y02Iem7nJ-XpPOjL4p!@76vx8#MO5b29??H6e%HaukO_
zo5KBw6Z{jw6X%_=J5-L4Z!FE*6)Et2))VR-p_AZC{jt$d!^94?b5UIxa*$gzN|pPo
zQT=vC5<W&s%J1Z7aM?FXV1QYtQk19P>2Zz5<G!)zvNa^<7fM1BRUo7@lmmdq-`n+>
zi08Xuu|nwzoIrA6j(u;p->2$Tg2ap02F<vgiyQGWt4Ex}HG+f;J-kV7_KTQ-y^8_?
z@@D(mg<>1!q(7DYUyNck3h?5^_E{dr(-<(}^>c&@+>8o}JN~ByJWtJdIfY2Z=c1Qv
zJ!`M}TDwE3AMVuP9&O;;y?+Bsh>Od(^5lMXJ*Z9)`n7^zvs}Fx>=hJZ-jV)%SujpC
zN)(;14%l>m9sjHqaa?&($`8t*kW|hW4+R7);N>~QxZ7vcR`B8KFvQ1WFf8Wr`WV@D
zqQm`|oWy!O?d{|e7Z?knC<}<qD%t$a<cL<|X^6?NSSVj!W33!a2ac#k{cFRTx}6@`
z_4UpnaMu|4G#LPO^>uyXH0knk{*l#wCdo=bRFwfP?ss>VkeoaZhPtVO*uy5;;bNhT
zXIduNe*7y0Ozc&9tqK6$_rh&ep%VnH#t-T(zFnXE3fvvtrEreNevGnfK~T)*m(oCy
zr`LQZ;&WxQgvMt%nl$|lAZ>##a&^o&qFd`i=@=%)aeqHQ>1cd9Xw3>uwi!LG0ktaK
zdH{;=@9*=aUYTREL|^IL;xVb_eM;8aan0SDC*-uLD~YSEWl?Vqd<pvdcpH`}D_2HH
zLZg`WiAU*lwB>t=QYMLDTkprs0db;@0`H3*X+8AOs~j1#Hi?!Ii4o#E+18K{iCE&L
zVxpGOhijsZGAsUsdTNCf<F=2lFZi~!lyd~Z-D+a!<Vl625XHLCYdZ9C+0Chv`aIns
zE*lmTalZ#T4HW^0_eD~d_vL4Z8JJAP3aJ4%zn8*Lh+gh2il#8JXqEB#-6FL2`evE)
zf0zW<7;+p=Eth$?D+PuW#CF)KKUN!BYgTqd{8hyi>b&Al!CesGiTw0w;}PwzcCBZn
z@uc0L{C3#2<P!p~3-N+NV?MMbg$;>v{2|PAe10K|u*qDvr}EEl>USBREj-<-Il^}v
zP&nAJ7n2CAwj@iHNyrOSYeOH95YEE=2-)AC)tN~Q#soh;{`m@~^c|q9WW~#^PPN8i
zuLqot7bd_MBW$+AM`L1S9F8OXS*&1<;bclB=zY-?7uUKH`n=NRO<9%tuXiZ1TMS3D
zdgnil6fP_*pj(wWP>O=0WYDRBX!i48{WQ505)wjr^Tre|o%_Vsf9}T*$GI|$ZlCL*
zrjXds;AD+tq~x<t-55~#WXr=bL@c^zshmvGxo}EkER$J$QTV1x;;2zWVqaz<GaEFT
z+^v8=$h`T~ian{;jodv~C=*vnUxfCdrP*#im`Uw)U|6?6Qm(7aCOjk*sdw*kpC!pC
z@BAacB`oHznDu-7?nB^l47NZ`6q8B1M(X!y*BUdud-sJoNj2K0DBiIP-^Rx4_Ebo5
zDpw@X!`=O4sqyx3miGF&ck&hhAjkEdY)}~h28{5<K<uWI*er%mS36~F5Z{eQVkKiT
z`Np)^oV%Z$Y!1p4!C}b<P7lwVZ}bnsp%5x?r3rYR`dlATOxVB$i@e_i%0PbQypi{O
zG;#SG?z$G`1Yv)E4vyIfThWA}My$_P&oU=;{_IxckV&cxi!+W;qqJaW^5$j}A0#cF
zptJ*Tpn>&L+r-MuvchblNl@q#@6}36oYfe0s{Qi2*f|`Id7(vc-5ZbjOe#EErm)`O
z4t+hC&S8DBSbupqTPlk~pW<T1f!MP#l~`sLOCkWbu6oC)--PcGMXU05BJ=j=*4IGL
z2-b#&rOSr3dHHap3}~5;HaFRPt`;d}V)IaE>&!w#UY=%GRurkI;<eBNUO%GgRqJBf
zzCsX(uvMvQ58*=l|25>R>n}GU%XKdFso^5@LLsifg*^ZAxMzOmIXH6vyVA~BqQqLI
zDeU*g%xq1=3hu)y!No<gSo=(hYw5A&*b$dk(PS1Z??D!Gr(SQ4Rbg0IyRTOaKGw%G
zSzXh3=R`PMjpsSJ4aHeWTJjV%R1}Qoo~`GA)y`Y@<j_N=<aDV@Y~<>ADSMLGgb!WE
z7{6%Y-rzTxfBoF)>9qY9^ihcnPVR&s`G5BJ|7=~rHg`Zy8$vts8ZWIi87SY17q5K%
zD&;yX{tg0QjVOgUmh>A^Ow0>V62viA;()~g#%)wIJ1ChL_CB_;F)BN|dJ0o23OBVI
z9iWz{js9-@99S;h8bjDa>CRU$`FqodSTv*cNhvAXcq};#Y6VTDr89%~lOo?_Do&_@
z+T!W*@Nll%aV3&={cwHE;z=spg|_5<z6F|fk8-u!(_K9n>s#N9PCGgR#4@8){aMe{
z`(LjH%kHS@J^?NRDS*HILj593q;q}5HJNq4%;GjzmT-rOFppg_U!j#ML7i|1K<8*f
z32L;}7^Mtq`E2wb?Xi^VqQ|HEM%HsFchAWjAr{q*O6LY3C}nax#Gj&)@XI&SGDDtH
zC0s!b2eYKBPO!Od4LS26q6q6-j-@0*^(bX7ygXO>2`c9bYZOW=5#YF(?vCQvc&NPy
zE9MBgU+jFJIoaLK*B-E)SuALVjRj0(ld?jYswepRm?!BJpc8;^#5zbwvh$?0?p6K2
z#X1C|i;w()weze%`jwid$*QO{fkwiw+VWwC9yV9OkJI13Tk7{xi-Yg4mJ@KNfUPuw
zZksFU-KAS!iv#WIst}?08^}oo_CJ|zoTZhZPrkw;<32t92?Uc9d>_i3G6tjlLKS$j
z;|Y}TipY0)>%D<^T1qg|yD+)pe$pf)$*<XG8XABctDMcB%kN$QW(c@juji+)pI-l+
zCKIq29tVh{O7}cO*yhigzhWjgmvC(c*QKtd)y8*@8XWuOFuJAPUjJ6-zsqI(@V^D#
z&#6w=le&)s7>f=scE?xQEtU`UIrNMuJ}{>nzSudS+&+>2Y{a=$KPLKDi{$t-Q7hbA
zp@gGh@4tTD-L%S=Zw0<{FG8dAt!>lXE9P2oyF?g2xCy)Bg~7s=^!QTWJt*CBXG<7&
zHRzwm1@u3`!Cp#OhY9*Ra=#bF|E-W{jsLUUwwakZ9hV35y^oxcP<|zgVgsTR14)^f
zlRXJ3L$(`T6Q6%@e*Pv}^?bajT6LL~x%r#MJ{A1F5E#kgp^xrLT<<i8iEScf=krw4
zu?y5g#4Q^l>>8$QW<;AJIy4IQo}|xV7XEx#!VV#K%j@<JD2F>aIXR~!8pNL>er2Eh
zu*&OpP<Ql)++95ihk?*}3u}?Qm=ODO`Aw%*qi7HmD~|l_eC5x9Y)ePSnjAzX>mS4@
zgq-n?R059B_!O|XnzXdEhr&KrWlcz1xTqu#{Q795eC2RoTd8#+c2c<4NkzE0dv`Da
zol%t-EYqbbPE8@h`?vY(#qxJ{@~uAXuMphJ;X*4E{xNm&p6O1{Tu?j~MEsh_Q3v8V
z0C*v<Zz18(>+0(RWm4_ZCSM$O8cxXTjEs_!G7Y}d{TRrBihgMTgv}I4xuT(|5HKpF
zjN3d(L0?4^%tAv!4fx+q&r}d*T{k<sKHiY<x$c3kdH@<PP-NO2S2Mu806z#_X%XzL
zg{<u}+Ksg~9M1fg8h^)_rgZ|Db>qWbB0mj1({bMc&A}tBs+1RpnVRJ5Sd<Ri*}Lav
zU5<}wy}gr3dV7h(>2XAsGtGt9Db3`Q#xNh&9aJkIa*qoLpL*e>h@n)nQ3O3OWt4n9
zIf%H?_r!XyGbPqvx)c@4aLQtoBvHesc>1@-iHuC5>MCyX+pBqV-`;1-WpY;=4(x0W
zhA-=XLMW;5zT8`=)G?WLoh}GfYbKP0p{s9hX3{8W%39go`K~b~e#a2UZ8wLY&$eZl
zYDWS~$m3Yx&2p4eANMxYL=#J1s}aj~slhUZ@qXEL@RvcR1}@MdG?Dlg>8C&GgQ*RG
zf{&M9w!QqS$=v+BmJss4o%HfxFE-Tqsavg4p%f;jgd$+%ZGNLQ1J=y%wQk?jm8B8u
z>jQbt2>>4z{+V0rtXy2lv&4X8eZJe=+iL-m9iWZh1NfDdW5-fia`{|4Ixg~ZjGlgE
z3y6t{aoPD9iQ$EX^SN4;Zzs%RAr%)lm)&veb<^C<01<L@X=!O_=xQW^axk1h{RV&%
z@k8mW+A2W+e>C4|70MiW%oHgfSX+J;wh_S~B=ow0T6vr8Gb%yuv<@qB*SoBCcG79q
z-ydMl4YU4oTC1r0@B(9`!9L+R-RmM~HnL62p0+vJa6pwr1|tnuApL!c{;T-4MPrMk
z;Ng6w^<dbw!-poT0&=RbvcN+?_KbV{lDX`0^HJoJ5LlGY#+c3J0Prdz6ZE}d?BV=b
zYm)k$k?3IurIE7ycjtSe?BK@R!FxzzxsMN`)&=?fKR9h|B;a+14wLW0u5wTVevsU4
z$jghGc9f{n899WBbH#`Ct}fDRw!__?4&hv=$L)|^vc%^V`LYQL3JTC$&@W;@{UR`t
zTW=aS+i`I>?}PFH^nz*iC_rLuO@5!o!Xi<2TP^Tgq20DLllfekh{wq?3gvrKQ!;v@
zEralKK!!&e$!O|}m9yoam|@mC3N6g5oN{S@|MGd=L8l=bzO)hWS#^#~F?kRnk3hQj
z<DKn2sD70s)(XX0CbjWANw(G8G+V@X2))J|v=w6c8Qe5E8ey22Jfq1Bov!;osYL;V
z!F6t+z^}U4sZSk?0g5DDnEk9u8Y_9$B!DuvC%<Hd!T=C^gU|YojBMj_f6}1kL$dA2
z7itB~?KvQ?ReQYry`_K-k)1<cW|tBaHRtr4zw94^Srh~{<OxV*eujedJAawD?-F&P
zTV-xQjZ^SPB9t#AEJ|Rv41U_6K+Dd`Dx${v6A}{>qpuIxEs&}p7TeO6eZRoGE22Vv
z^QO$CcN36|`CwJ01d33MJ)q~hB+%QmgO<l>qbd@%&;`JyW{siu%QN)Cf;ONLDb<xO
z#^=mN9V3T5`Fw)|19KX|wC;Iu{(CIkRjSGd$Hxc9M7-D#_NKIJcg&!vxLh}fS-UWv
zcU!MwtY<3H<$lH{gd-wLyn>dYo>la9n;t8FpFu%6IN%mwUP9eQMn#qWs&T%~Y;bqr
z0C0hiZj6|Y)uDQgR%3{=qA`T?7MS}nL_E*WkH>;3(D0~f0y=sk)<Cua(vt>SVicmb
zwl-ix@yD*rx^=2PpgVF_oHe*c6shKmPb;2d8q7%qI<0o>?(K!)N?zAQpvZP%Ljc6+
z41DQX-YajXvIRyO(Dxs<LfQS;oYuNT0<|YWca;_MI-0Y+&c@aJXC=nNY=G|rFrJkC
z{l`$G_0mpBi5-CAg#-l$l=@ze84re`0G}lp;BoO#Bw!%89xpgdd9nRjUFvYJ1g=lP
zrq{z&Z9&<GC3et_j_1lRLAO3XA!0M95)MUsyTbDl>1qXK8Pv(j6s?VnjBvHyJn3}(
zz{>I`FDe!KhID2ut>13qCk~+!f9vgUo}s+5LbcTlv7e4UO(*8UW=%_HV(W=!4wfrr
zIX_37>xhrCT#6t6rv>b{-Ws$l`;Lxl;;G<cvs9RnkwV>7uYb_ZuQI!D@L6i?Xgz$-
z=h>k=nq(Xz183A@ce(Yfl4-*!Mw1MPCDi?NwSmsz&E=*2auc7TcO0n*A_@u+%k|cK
z{_amaD!iQl+q2zex5%LJc;oSfREQW8bEZ^9gl}6Ro8KKsYo<=MjCmn&UC)2vKkF74
z=e)j<<1fH~5U{^j{j~%fW(utuRVB!;I<sv;E;|7CevhY<vWydA9K1jLl<WdLRhO=z
zuTiPEO!~x?UZ$6t)~iW$v+tP?kB@miEQ)gIP8XPz=HBn;QfGva(x~L9mngOakX38c
zsZ52hl*yeire@skV)^o1dz>^Q2%-m6G$ZwI>tP4b#NVy_M0Z$t{rWX9Ga~Q<4rc-Z
zB%7`^36%L(VAEsRXysnju{>X{LFE2cMI|l_r8oBHr@fVKU%Z}auw~vEwv7PC1X$yj
ziSv05X{~C59jfLoGt+nId&P>u8`C|RKd02loz?~-QZGi{u4<a-Byyk3k|0f4FPP-I
zVqe+JE)_}G&jtt$el>0ONH=R9J$2~x`(fPYIgL4X-<Sut>7-d&qPD7^lkMvrM-0E3
zb}_|FA|de;iK};q3G?DE@_LU;#B~W#9|3WiFp)+H%!njS!$0f2pis+H%dwmDpscK{
zh<IvrqS8MsH5?xtj7V33D&4&DyT6DbF0blG_?1VTUR_x!U^Py9_qd<CoyQSsmodd;
z&?4>>fe)Qol$_k`vxj3SH9A&?&*P|AYwRD-`Ys({lub8ab&?2pj8ciARNz=uz0<$y
zJi%xg1x@4ocQ4LwuZLm$oGNr`d#vLcx;Af4Ola-Pb?e0|G+%zcU|G!r^J7~gRAGbp
zY;`n??{cYee<!kzVedz_0Tn)=@@-pS7lJfOu@KgzkmJ2H0{PBup<#Oic<f25T$H<U
zBGQq%>~06~5y%=^<?2%1exa?crF-OlD>~Ksk)KC_A<l`%I{PM!rTO6sgEGv%2HU~h
z9Mjn>8axNEBNug~+6b<(GWrs&DQcKrt6=EN`1pSo{&at^xhTFKIMpo2)T2~lDr^PA
zeYn8J-D2D;ZoBt#C&%K?f6aasA4uongnD_6Q;~jh)nKjQy@%j2=;xPQ7Qozuj#<EU
zR_Swh)-Rt-Z|7rIAtoTui9)onKar_(62i@KU6rP4KgCVN{SNuK+yBu6G_#przzATG
zus;=o!3FfDFFAG7?VX)b_|O{3R=#GMv){}5rRJem$g@fm)A>Dq^OnQ)$CHQ5yC!`_
zdan#@>A6lDZHQ)w7^c3?(3c2Y<%#ElFQ5~hthAF*7?$}=_gM+}-5~(vd8DvXsiTq*
zKT=FMzkvv@rv4AXjCR?;7bN)cV#AB!^Gtb>Oh8#V56;b9SyzY^Z(D{o04@<Q$A;G0
zKkN5Y)>b7?YT=fDRgnAISVd)$xjTYYC@!|VJXYG8?f0`E*E<_>D#^~gj$ZqpKY*sp
zXwdRB5Q;o=6;2uitm~hZI-WqVR?o6w4}3P++rtHeJlVBd6iJ*0;8ICcUWlHG1|u+r
zD|PF)5P%3TXg5b1g~x))2G>#!9u3mGo7wago)&cddowf8um!K(vf<$1?l1Rq*)3h}
zFLosj_1ZoLe8ye?&Sqj_m8kBIToJTZI&-;deXaySmfBim{l2>};#mAD$;d6=o8LLC
zW&<G3u)E!NGN{aJGt~!B8ugWV5%{i_=4P#1ZHJ#VG5<m9=d)BME@Zor&}szGSehu$
za0f7Oa7f}`sDJ!m_V8$-=s&x?4ZPfQFf|p8CFa}FZLs-7ju9jwApykb_{9aPPdOlx
zk)59I4b;9trX@U5;lSq)@84G$vk2z{U&8Bh59NXnj1de=?*WiVfaPme>~K4LD-w|Q
zvC<hV)BSGVE*ljU3{Es~W2oFRx1FHbPX^)lIc?Q9vC7kJ$H#3V=x4X!m>>`;?BU^I
zfc+!POcAQ9^co{1Bdd|}foc3<NM%Sq^sZgd>r7M#+V1h@qzn#`e5Vz@*%dI_zCOS+
znE8k({}Zp!LgC<`FZkZXEBY_5r4PrH0ZNpejm`Vvims~XOfH#z9uU!ghS)lxo)`}+
z>)GXHX;>ur2m|!|tFDh1Vd(@YYL@yd8%698^a4wu+MiwQDx|^hwyC}w1S$oHDk1$-
zkp#-}GSkyRg30a&y-WdAJETiIR?3q6y_Gc8gJKl)zi3&3<ywz_Cb<OMLElQdE04qS
z&RjWGg0h#yzqSDF?gm6YS62-l9yGB47#BouoOw}RE2|>OTwCW)iKFp53gRmC;G@8~
zleMw2k(G@|O+|Yyku@v+dcPPzYq}R)7gSMS$2z!PhTCmwWrsPa7{%l#_TL24G@)H*
zN^R|Wsfr0mX(=g215nDVRidgCM}UtHa#$<^LKztul1_)_R-YHG^*`i?##5PqEdcnP
ztT=iJg(Pf}qH6qB{MaUqYf&Eu>r`TeG*ae4GkCbD>9`F4{UidpWah|d$L~37vwS>4
zLVB$j*&A8v!b<UdA`w9;sz2k=5+z@e{+E?&imqywXdS8OQq}8_Y>=T(U#!S@pOfx9
z)|4jkf6+SG;JliC4U~$=#v-{N>FMbFssKs<H-Cqy5UhQWNHnf^GT{FIRVFXu1`!eQ
z{N@H@ClwPL`|9qTLlC)n5~PBFU=w&WcMl3rMWq(lNyya~SBJ<ZCL;e9@^I^G<+s>u
z4`*kbe`%`w;sX#+l1Bf+cz%A~*u;sazx#0g%lG!}T8I1XbYZD-ZVx&-dK&P+KsjKD
zs5*spv2k-_o{KUhP?0kmwslxdl)NFBDOIu$S^ZhNK9T#vB1twU8;Kd4$$hfexNo}D
zKn<i~$t(n9<j1>dJrk4lK2g%nkCU0VDypg<*SgvvDQ6cKH&<7j92_|RE^C8<{duVo
z59CRHe*0D`8q@`bEt{ZP6c4+@vWZDg+urv?jt5hCRN~b-GlTn!;zBgsQ>A~s<O}Y9
z#>DBGf1TrM%Em^X&$XS~pS9N&+e48Yl{!x1{%S*U&GxOo*8??&(5fZBKmaga?D8I5
zY46p30D!g<Ol-%My0vZrFw^I%^x7SM?Uj_!P}KC@@Vf3n3A(i-FD+GQZ6o1~BAmST
z-TOjaDfu)dPo=+ef0+sr1KmFEZ#m0!fcnTL!dAZ;k@3+93Y5o}CR0}$^5sq7n*jtn
zkt^c#Ew;Ky<#dIQ{e4|X0@83iXyp-9P&*7)Uwn8tIkEZWspxi?($dnfSx(DtfCCp~
z6+$3$D*ky$KIRGCaQb_B9hr#uP05dV^6Y;<T$bXKk+j@}RHu<Na5vAM|H>>1&3%C`
zQb@f44>Bl7?B=GuIIcqFF#qJ&t#H5-BQGzng|xt7;MUL*G<@vxQt_`Y?|mS<ovsHa
zaXS#&+cV7Nlqx+Q&(iLL6e94+C+6m`&Cs8hn+-r^NXtrs4NoQnl;md9{y;j7lK5<@
z?yj!=alPMvNI$L0QmRp^02K|nD#D=kG~n^ZKbBZ;z5B7w?Ql6;;C8j$Rm62K8ibnI
zS*f-XC~0qh^ELV2_J^b8ifWT*Urc?*IR;4)K!V~r`y7D0&u{(XcUV~11ssUfm^2h6
zJ`{i_8SXKbL>FQu-{a?;&SkF#MpK)A^ZwKQ3k6#P!yZ`e_oXYY`^=QC4e!5G`R-J(
zpG71m11X3I^{t?By*Yum1}ySkh}=<bp!P;>csQ-&%lY<xY;5R2F}!!P)4JImv7pzR
z@5;Gr3oB3dI>S1(YmUoZ7T<1wikS@}ISwg|1fXsGS@mtRnQq9-BU=nbw+6+$$>+Sq
zsGy)A=$5V^6PF`S^ZS?Q&P1lCl@$$e1EZhy!hH*IS&YL<fA8<d-GM;Y#jb`ixrz#l
zWShme9!eQyAO#C+ltdp1_mPV5*BbP?@5lb#|6%m-bdQ`v=0Y<g+cW|e5rhEi?SH;D
zq~_#=QPF6jY3uYoU2YCMUJz=Vg-3f^DxVBhTkMw(QXE0AKttg3y)pm(<!k&%S<WGv
zD|8$*AEQE0W~T2#ReHfuP7EFnn&+>UZm;z7kAGIY<N4j`-BYK_Fwd?IU9s)JOW6=9
zKP=Fv3+X8TRhxN;ku>5os?%D}SQeke5Qa~Dgi^*_@+lF|X_Y}MtbC!_;4(LNxoSda
zbW-@!-@j^wQYh@!KRy6QG2HF`Pw%|2a8E>?aW^4?sj2BJ_=+y^VtT+iQuy6RX_Suo
z;ZK3ZGbm!eFb>Sq(B(G>2z|`&C1hn~+g+$BV<fR;H9S4zRy)zK>63cJLiANlWD&pU
zS7@pkLIvNf2kMjy^b}~vR0vWz7D_i?qg>%JKcOXCc_TFMfcBIv5{OvBmo^5HXRjm6
zdc;^*SSF&xf5E`Ogef3a9D+`xQ?sJ_NGAS{Q_s`W<N4`NZzZ|&@qDFTla1Nj7`V%t
z*q6VLDj-7y1cbOQJ#US&3<;lpnOGc1q2K+N%^56w{JZr)djN*j3m`x?cmIf|`o+=l
zZ3RQX{o|iqu^_QCr<FElkAzouls_J>lPg6_D3r@nocScFw}&)7odFq0q1$IZAD66}
zoVFlvVY8vY{A&Zc8vBG)6o1)Fq}PJzQVN4kg?=*<5Y;622C>5Pl0br1&PLXz(dycn
zV(5DcQzu1?WRzgQ6ZVCG|AQL{;4x^vBOOA+P8j#@Vzs#tr2ruTq#($zZ%kvisz|;&
zZ&w~3e5M6w4_u*Xne`fw+I1SOaC{#P!R!c$6rMR<nu-}qtwlyeahS@Z(SN61yS8)u
zDAa0^_Ngpb>VZa51273l{19AcG-d(GT93C*g=W1ClxQYMK6k&DlQK8^`ThHAcNtwZ
zBs^wQvwVDdBSS+Fd&!|oH0KzPCl_)<pn^F{LPdoIqC6TUG_knWueByyc>4ZihSWjF
z1PWMpcXzY4PiaBWII6m9fXoKbUsM}-f*_R5`y%{<0Vzy65WAq$Z$cmjK_}IaiA<g(
zBW9r3fNgtsIBRY2ixVUbIzDc?^aiY&zU|Kk4fjW8>-(2yN~4aZ<b=EnA;%R~Z?&h;
zY?vc#jL-NQRk~)f|0X71-=BwTgAr1Y3ePvI1nHJ$PKl-E5~Jo6)oj`SX#sZ7(Lpm)
zpY;PKb4UgWL|#X8v>n5v<>V=o9-aX60yR7g^@K9U3l?dSa+$@Xr%2W;)S%3$lRhVd
z^NE6*m0O%)3%x+UH-PAQls8{+9)lv4Z2DKTJu{jZ(aYteyzWdG+8<hI$?GaE4cMR{
zPv{tgBTjJLf04<<B&<rZr)UCXQ#46bQEG}@Kuakf`v=tV&^JhJsq|s=?99x9ZcqhL
zso?NJZFQ`qLXnC=Nb`+%t-Qn!(0m6pWBo+ggM)+3I3N;MwpWv!87qB}ZHBj}Bt=|k
z@@Pv4QPhN71I1V^V!E)M9<~euBHLWU$JN4wgD{d<j4PREgX{orLa6A$S%hh*It3W`
za7hspYDJhj>||ym!xQM+{*Z5LUEZ|GuiSKoqYroU0bwEIwyFC_A%-(aI|R-2+CKS8
z3>HtC77vd{mqbZXF@w7rt#c(5Sw}wU9THJe1Y6mk3QEntN{<sJhx3S+cu)BTs&PDA
zTv{e1c>WhV>HL^!?}`awKn{T4?+!*htkOV61t@W32>DjzgYosi=5uy)6V-ZqYCUNz
z4j1_Rn?j;QE|D<MY%=M5@QP3kWf&$x7eU!QRartJq{ir%Tx)W&<x<0EDU6gd7866z
z<PlmcD;Z$SIKk4yOW7SlA*yw_)oWF95A;wujIjAFU=;WxH?n?+v~#7{>OUDI?_@b$
zcCV99cJYc;x09X(qwVHIfYBUK4_iRZN)8h#Wfn9_e{7m1GakZ_S19-9=bP1=%Z~-;
z=90c$0No|DAZV3h_<qou5Qi6|WLv+vqT(@vg3Wez>#rY?GP-y+MGH`N%fbivd3VCq
zgtQSOwD<#c|FaDxVF4)Bf5jCbi=oFAhcwq4Iz!D~ybSO0_JHRu5DOxGv}CC2EtSna
z^Xx<_LVy1B_xAJ0XIB3FHAI;nKW|mUu<kPH7<meA2vJ}$Uvu=Zksl-y2u9wUPn&co
z!Wr3C`Be~g%D7dk$`Rc6BiF~R<OsRK{-=kBT1{o_dQq8~ox~ZTN*rB2Oac?rne|X{
zWEFaWrawckuaD+4g@uLdTu1xUMY6bXG3<nG@{f=h@MuTANU5!Y=eXHdC_@7o^YeZj
zX;RMCC*}R<)*t*5ul(MqSl)7ekc<*GPT=9yW?v`a4|wg)FqC6r0T03k^x=-rIAbaA
zHs9q!EmN9${sqIb2I|;QQ{pk;PO%V*b_)e9^}E-LB^@#zCd#`E@&x?rh#q_zGVQ}B
zGlG8r9uwz@7o&j0^j(|(<J&8VwvInHC%$SYHQLqYqe=2k{3Aro)by;Z=qW-=W6XOa
zXF$+L=1~gOG}#zUKCa^x!|CJy+2(ANuLWc>5PfHJ+4=PGS)}Sv{KcjQqqd<OP6h}6
zrg(SkCwZ;oN?Rs*NOo4q*O?ip1koT~KE9`y;_c3H%7(eYL53L#fNVorY^U;YIq5N9
z39MZm21=DAy`Tx&%jzkS;^P<hMwsw(SdLD0c}pm%7_HWp2MG?|9420dz^f={@gfUo
zt@jueMxt=n;4%?LdcC3pl6a(g@#h}z%eO2qr>pR1BX;u@7iXJ^Oa>lu{t>Mt{ll@@
zxVCSc14?)?U{O+MuOw+?I57r?qhR`as&D!`ONH6O{?*sE;eYDOM0`M*9!pyG30*E+
zJoKV41;AuurAct~AX~^6LrXpX4Njv(_Qj9vKT*l6-H+(E_=#)&yljlWkI|cfKx=_F
z@2{J_1GkOyLFQ<Q#Pj!}NwIwB%}FLmXWXA}mnKMKTIcx!IQdcPdOlxtV1A4ecA#%;
zjEIK4ok3tq`Z|LA!}$0(NLL5`SsOI}+EcUp>4CH25$KD(&O$<~0PYMgKoMY+F&^*)
zzPxIl1V4F~m=*X(W9b|Qk(kOZ4d}KoDdi~yHGFQW9OCcLm$cMfZcm}R;EvMuEuv$s
zo<^Pk>J^2Qxo&)o(s5BINUI?G4rw4Z&p^VF*C|&=4S#xiqLeO>0($7<?<EBUjx?d&
z4{T^}1%pMd@<H+{n}7bp2X%?)&Fiz9n^?{;UE$e3Ji%DA#f|fZ50mrrC@fk-s96Z<
zG%*w1zHxKH0JN*}NDr~To`y%hr5S3E{wE*xLSSs`+-`9UY7TR~D=v2$&(JU-Lns!|
z3A55k6Br9~Y>Ug9R4%HtVTV?KAF9jlcPDe<_XOqy^5I-}N6CE!3ygKk)&JppLIQ%l
zk%a5rF`iBjl23Gs%3T;j09v&>Z=+Hny~p_-Q`h}_u^w$+bqIQPVWGMc!|H6q_-qLb
zV2I4u&&6t??rv_2ZO-4O^8EqirIe=Fk_6nP!Fuumpd&L*iI^v#9|E?=s9qHBLo;7?
zNsHAKH2SfKaW&w4i%V8G``rfzgu?^f15k54Jv|YICnkl`mb$3bRaIG88|AKN8}*O3
zq%ru@>r<@8DLiTIAn(#_HL*9EJf^3gk<06RI#XPUiaM&=6ivVZ0*Jfc6RlfXY|lq-
zPKAnuk;UHuHZeto{;ICUwr1g-D<TH)5SbkGiDa9j@M?$qiNj?)p6+bRwyq8x%-%}!
z*P8Tp+s#WCVW|+<uJyjic6u<yYZf`Ib})hdBsn+)Ko8)xNS0**rx^(dCqafC-j|NY
z3rb`uz_t5(Fs;#!Nx95x`Y_Cd_s;ZXHwt;}vaBQe^P=GFM;`S;Y3eM5!`KVpjRc%+
zI17f#?*9P5|7p27^ZYmZ%+eAp>cnX+o1!RZ|3EjQGxI+{J;EY37L0!K*Pxb2QKSg#
zOOm1hRYLFrMBq>TAtRp!YnP91B83>g$nVNq1!or*Q6x2`^>)|5e@0yP?pUh$su2?o
z*wRQGP<Az}WTL1zjA<-k?n7Uwqrjeb1pO2EX|NiKC(BxD%c|6&1oEQ;RuhC9^mxpM
zL2`8_y^am8ghz$5r7z7E-`2FNGbE!WhY*KW$~Ejql*>poAJlM|jaTX&SC2#lr-x~@
zGP#x1{7vf3yR(fRhGUMwp$58)v$9SQra;xB+9yn2{Iw4b&z#p=l#;(Wvk&3zbhE_@
zObEg6@Nnq#e_R8e!{%$VR{zHommo<&;l=FdduwWDcoeuG_=(y8luDi2CeJ^cdX2aq
zhcnvUW!b8>U%@00i*Z`4V<IDag+x3l-hw=YB#Vr&4Y+*Y9Jh_?ze7fD#|x+qucL68
zkP#94kr(RB9Ow*@@tDs5`a2i|Y+)n$lW>r76eniBP&^SJAn|e|#9jEZav*V;3C`-=
zfMTN*$$tS-#nI1Nf*60sy-CiMm<>sr4_RIpJ9>uH1~-gM89dQ#r%|dCLs2jr?)(8y
z(Fq9{NXW{O4p0SXCHFLB?^i|v6hgmHm{P0FzzIByk^JiaJzdhsl2$G?wpel<DM)_~
zQirp+wDcK<jF)$Da?*sE27?aJgN22Z`ffZ~WX(>l7$(-}wDk1R<n?W0xs^{J2j<NX
zVjMK@CL*<hDZl>uB~w;{gQNd-U8HYv5{(Dvbb7<~;qFfKr_{rUpZ{OesHiLS_e5Xl
zAK!c<=u#eWm{0^3rMM48iH0zCmluXBuQ}B+ROI>96-0NwDPfeMqobo#(UxSe-j&U-
z1j7l&9IYCTtsRM729+*a1*!lMh$|7U{~3}2H2PSO8E)QPvUxH&QR(@ql5EyZnEw;N
z<e;jR=(n-RN=OR`sSuIZ*gQ=@f)Z3W!Zgw{280!@rq{gBIfN>|U!Y~TLu@9)Kj~kW
zgTzZlEx>Fpm2#qe$$h=X`TweM!5&rwQm}s`8_9NPKk>x;?^JAc9xQTxRrVu1vUmX0
zg;F8Se~-mdJ=;u(zeBj!JM;gyqk!_qVB?T7%^Uwqdq<ISOJz@!qI2Tq{^0mCu`Q&z
z{GVv@@8&RZdezan=_oSzBJVgV%XR1FG$(IYX^Y!+m(=E%$^Lu)<PgcPwb+p5ViU`R
zU>dP62tck1c)BZ(imJSuCqt1{EDDE$h6dB?dULS!?yC3i)!`+mOi7omF+4oL?3Hrk
z<Kw|VfrJ0%i0#f9M<Yyig%x;rhDd?&?>6pZrhecLnEW^or!cUa?){A4EAXX|ZzkfV
z7-B)QxyjOEh$B#gEM!z)Q^|X-`s6B)I91+M_J{1j0lU@^5|pF6u0`C<l9GiB8Ty>c
zvi@PU;}KZCG&D4z)dK&}X1XB1xj8w42b~;{A&|U{j#Xw{@LcNh*17qu2M(Fx|9F`x
zwg-VLpw-@9Ubfb;f|FzxKu@8#0f|tcs4z%<#*WsipaOmK@5NV~{m)ci!%%(!4q@2o
z!POj>nmSpfhaCRqFj2VMVSGFCXu2%Y;2Hcx5s%+Z?d=3EqC+`U4?{rrjbG1M9}+LC
zrF|BruGqmTc7=$%x5&Su3qAk1iRgUZj<2aT$3zt@@wJkrV7#@Dmm#_R-4{9MU!_=w
zRYTpk!STB1TVIc<6||Rs?LS{mVkFYUfMg23-5PK*;;K*HsjsXG{Tm6%OK!peZfgye
zI+Hos!_fr6ZdT(qt=?nI7_`7S<Mj9)&s!!2#EmGR4<Ta0>W}B%37&tfH3aPKAM4tJ
z$>jyL@rC!k9Cskg_StF5v_E=uUBu4+cFD&`@ZsIor=S|%TTMeBayT6<p7p2od^l8b
z9ho;v6i*?LHcIu(sFbf?PYt#PT&X|Gb70^zx|C@BVEUr>yDk3-1qnlEiQ)6m7mIJo
ze7rlgT9uzynj0EEtaWXQyj1yJA2CI9v#$2hT!O|9#Ix(uRf6OT0nfKtLcW_IzzN3Q
z(R^h(wSu(w*5T~_WKK5>Y#O&i#>2He2+W@V(8{3W*q0Ar6dubd!evr#;H#_65coI=
zaq;Xdr1>&6puf_MmG%7j<%yq)fPzx3S^lBuP?CK(mc-81_H`=|F<U<9ft)x#8$RX-
zOUuopqp-#JXD}4N4PX%M0I0SL^4>A5IyHv99w#1gZ%MMUdl`+ps_cJybb6Bd{a5S*
zkQ4ktSUId1%XDg`LD+f|6$vRr&|4YMN^mSJ;AoD|TL$C{CsSEeG(C4tPXUHJ1;{Nu
z4L_Ap51R)^8EBJ#ALGapfQ{UiYBh1BkjU5o^$e&S3L;{VC5WP<jac)3L?8#^A&6vB
z0#nnFFisI{H*?gx$479+_!~F`-k<+TaU4yo1mpn+zJ0qrnkPz0N%7JJ@y7V@0&h-?
z+`Aehc=I$7eZMU)b)Yo}1U_E?uJ#$13AohBK(<@!yhW!4`3Eu}Um-NQAHP*la5WU#
z%;C+s&JltqHwTG+wN8)D>wKmEX#rYIb&_7ph}Zuq_?_=6&FDwZ2X^H76vE>|6je%+
zaThQ9>EE=~{Gls9Cp0IaSoKBIB?aW;<<Q9>TVtXUgr@c``YK>+YmH!R4BIFBP*HJ%
z0J^ev@O)nIuTmAfGP<_EPfsAfZtv*0(C$h^lsQ*+4PtFvfdRgA$>gYJ`j88Z&qE!~
zXB+1gS`2T97df2PvOpMABAE~=UoO#ycez-hbEY_|aH|twtjSy>{U)2aHfNH#Pq!xm
z6txHrAA!25xtlMgX7MjdJLCr7qrAf_)oT&|2l1lryLeO0Es*Vq#(ucJ2Vw@Q4y5zL
zk~&!XzDV(MYxw)SyS~?4TZf14TSEjkU!-G>$QXeC%Cdcaak0>pK!JaB3{=?QQFcyF
zNP%d!aE5?>w-4pBxHylE>M^h|z{zlg)E^`QH$vVQU0RjHz{{PVpI@po>%3a;ygi$*
z<VnC`GT`p;y(NdhYX+%)hci3|$>0%ngb)BC9aahDWL#lD1|EmCs@kO2;bfVK!isDb
zRP@H~?tHyPC1670XJy}XrLS!${I}R9NtuM51?gmGkLDR#99LoFy$)x%2-u6hAxGc3
zULPqP5kcN!A>Is~M+2B5^&@Ku{>{N_wa*^$A1S$|f`y#H7@=Ca&|repJu9uf`0Fgg
zartk3H{hwiDL7Eo&+>m*ogGrWKi<7{zwIO0t?kLVJD@Z6!w6-6hdXdwn>;Zpsn;_g
z+<muSL`J2ZxBS`XBajFR5uu4pS39_h9s$~{Gm^bj+Z!h^?hWugoS6sr$;Xcy{0ZU!
z^UTeS6GtNO_xUd^jOaYEFu3iIP<Wbe;0zc@_sosRvW<v(h*yK81xg9W+%-6>`kDyg
zX|}XAo7K!pGt$}PS<rP)d~Oc#T=inVBD0UvnAF&r!f#|iwVceAH>anUXB%|@5JlOK
z;e>0B1BHpIqjL)q^PkJ)5(bbGe7(FVxPME#%dl?uVS==g!wPZ>2IYf<T6h$aOnx3C
z<M?LSQD3APJ=r*C1I6l4WaE1;*;K$2V+grM!2h_Q6F9^mYfC<^QFmY`{Rog6B<U1{
zktOs;n*O4fu|yCT5$nCy*!-Tjf2K&DTj0YvEqG447q^hxmY663PM5#005U7RQf#~~
zkJFFPYF!$2tZEVGA!s%|aMDCDyUEsp%y3>^TM6oa>y)WTUuZQUrN)(OWAxNHIT$yv
zAkQdFC$42-miOQXmBa>lB`sdc_?c`aP{!*nQYJU4+%ozqd94UCgruQ?CClaHw9cu<
zQjIv6xBT~P(?Uf>1p%%dxicnf2Rb27-0x`48{rG6;JggvOvN@Y(_>&>gQJCIE7#Z8
z5=`q~zoG;>JA$!WEYhTr!C77?|Azh+2(&=2xCBz1S@_{pzU5H<rz39}MWtj!zkIlJ
zyna<Yv^Q^}@k^^uerAS$3_Xz@N-H}>I1JBrm@Ofxy8-6HSU-8-kfivh%`0TQ8o&E3
zs7?mVFjsQQa~_%4TD_no2_xBCASulj)h8^AmPsbHxAO@OeurjYKo&$s;PZZDb%;z$
zpwp0c_moWYKqD0<pT(LllxtF1Sy|D{#u1-a<1o+C58Se`1i8A|-%C+su;eE$yQ6Q<
zS73a$0ECfk*uB;B5XZ!(*du;kzSnTs>6wXh^Fm3OkjAdVdTGI$B?=UR*-Yh#F~{t>
z5?}hd4j1~BNayQ}tZdb%$iW3}Ci<(*r+*UC-X6ve4dppAFg(mJ+$&Y{o4Wm(y$Uiw
zDmxgUmm=lt2CIqDgd=o4E}h&=daciP^Yny-gnb`^>3ee4ZpEuhOG%Z2&B9z<=z*h6
zq}vB@0Pgu-c;lEP7p=0UC(I-e(r&;^y{~gx-vq~-q!sr&+zqs=7GKS33`cv|4W?qd
z$R=1F?eu>7Budao_<MlEunAx(ASgq;k@zdzk7<q!I9L%#b#D|Py({xSUxay4M$zej
z5gW5NeHIz+y9F8+kiAhAPZ_kUOzJjzBV5_3r?6<jbNa&6n;D93=uH<Zq-jN*EO<vY
z{97Fkx8}5HPT8>wqY*Vw$nF1O?k%ILPQ$iugV=PZASvA~N_Te%(jX-zDF`TRI-~_e
zU=z|^3L>2f0)isaAPOQS((#-)Gxu|Uc)z}DJ@aAKEFCs`|MwMV9LMiGuGqpMws_OS
zYPXyAYWHqEugY)wC??3(Z~AT|B`06ycr}LU(*`*d=-X~7M4y{JyfX2l{Ei@`qTu{x
zUxoGq^Urd)NlVOIA54_03R9>ujZvuz-cu)d9fDn7>7>t7+NqsBa=kj5ex=Dx%66z!
zJw3+r#S5wL?<j&a<DZLec3QLwJgGlJM|ZU17*~GsYxlQ3#cI5hOK<UpGF#}U6EHzU
z;_cDdu0V0*n$UqHL2A}MdN}XHcYMsM!IYVVWaF>ar4efDMOwoTe{(S17PM6+AjuH#
z0v|T4D7&ZA?xfr%l%`@@ca?|d^NwAVcavE^SZ0Q1CAVb8U4c3c2;9hckh}7K91gmB
z&ZRtV>tRM*ncQ*!725Clj^r!oJEdCcBdnSbo-=C&6^6NgG_W%nJ@~jw$M5y?{4jQo
zdr+O?=i4Fopp6oT7WMIL-qK;RQ;|r5Ib0D2RNmCx(Y3a!mXQcC=QDm8Wtxjhyi=Ci
zv&z>2`%hY0`k=kGz+=ppLnA~Mzt}^oqY}8iNVe875(jS+NF5?46&2h%i3+F2!n}(p
zHy?sT4g*#FXMiHWG(+=7dp7}nR9mGMNI8cy8xY&=%BfPpvv8jU9WE|@{|<St`JdHH
zX$2a|M_0nxkurgSKR?Z|>l){W@DPWqXRL!LbZ_UI^LXcn?9;bv;K(fT@YbJB?1w$C
z)ED<0gD8?ujMnrOKeD>0W8`QdR6vwpUGWv~>eDv>a#>y(YH@$=M+iZn_R~w<4dvxr
zfP%oYdfZp<v9!l^N8rn30WtqoS#%0;Qoe)l+Fjfg?`etcK%SE+6_*<v%}-9GA49zO
zZq*dxBOQtD^yLqm``th|+5Mg)IQKS?K=cfRK_<p0i+`X0$=-=7&VnAd*PUqe>p>w2
z$g2huJZ4iHP%$TSg<x!4NiCJbFki7y`6>mcA=<=8xW5;wv^9no<`XQ6{gru48-2PX
zv5E;nUnWECi7eH$fSOhCxml{9ePcYWsrS!MAmy)E>eEu1nd)Wnjv<dLpa<>wXsN;T
zms&XlqWY=@a@B-#WriA1V1HxxjwdiM(AWeJAk<9_Xg0E~{=!hsX@V|wHA>jU<b1J*
zb4<!@_AZsc<O2EHr-~<~j|zN|Ev{n)v%@crQ8ez@<K7@x5N3+dL0kqBz-5KYDv!Cq
z;q|jt5P&SAf`TnRzsMid-v2`Uj3?0LQHaClR0DVAA9y(KQR_Er0hPnD(v%}op|Lsp
zVmtEthjR*57P~=GKlMz{dRX?$(2s{OMP^nOuk_ag9f{21Y(MoKr4t`58Y^v~m7!xy
zS7s=EaU^(VCZ3=C`-p$Yi{F$lZ~ttR@!GXHihjAs-R>3LTF7?Q*v(rle`^Vs1hjm<
zA6qFK-?aRL-NZq?P6=n0qT)hCGAb9fSAM;cyqJ*GV^IU@p?41>>a07>(TI*c$!&4)
z@#DSNrKT^POw8~ywKAP__TP<m;+I~=dVp(4KNKKi&Tww`KGJHe;0qxE;q2O_v$M12
zX8#4nXFY52Pz3!3_5g73N7{nU8OMk3_S;CT__a~_KixJ-Qj1Lii+(=Y*|XIz6b(Xx
z2L2v_K}PlW7=%7ioM8#Gge7cJvW9t75tXg$5UuJ*JV5=5{86I4NnILAsa{ENCYLMS
z{eh8#n}X*wahAyGP{%G3jhcQj8d3drv71_$W9dgKrzkzU=l5Y0Rr}<marf0}9WmkJ
zsH{X`#)~KG%ExlZ6x6~R|Lpd3^;h?kq<<b~r9;t!xDW35*F5$^>7g9)ym!NVIbyuZ
z!gGHk^rC)*jScQ-7szbDiM(ZH13CqMHyrw@Z_jRDM0?Ak(l};{VWm~W!S;A*S*KJI
ziOK>+0T~IEb|Lj+zql8gWB*}!B{7c-bLCf03bE4^sMX=ASnhhspN7bQMCEVkA&(45
zMSAH`C<C#`1ZFO|QnaEP+h;m||4z0(^b;C`!(Fjzvl>Df<<7@VIGgE@zM%arr!X+j
zI=J*Ij*tG?-96GrC_7v6eSamRoK7!q`eQA!BQ+#b9K+GB0qdVvij=>VJgD5Mk3=G0
z9Y(u|;(n0$9K4s|tdsD{rkuC-YvkCM5GzV`D~<x{@jUwF3sD*TAah2(h78+VM_IyB
z*=BSG57|K}Gcxfx!l}@I>oClo^>6x{%4_A&2L0b?11C*6D`AJ1p@9CMw<zymMyNVI
z;ae(0tW|vVAIX=B7_mHIsg+CiKcyF0V(zIsKHvxYTVzpA`tOzDn*4u;dzM5WGBP(O
z#l^)nCWk_yWMn!R8KPF!{yrl3*Z2>d3NWHafnPBA<Uj|MO{1eVKtzGPx04VP^A6k#
z5Y$kUlBR&a6biK8z+7-Wlh4W;ytFM|tL0P^-`*L4Ctu3z$2=~TK(U0G+05CAXUIKh
z9CE;dl*%jv8i?O$URzfo*r-kxc$EIFNDbh*V0VIWAFwmUwgZb`x$*Mw=!q{Ya|ZjO
zd;idoOGk);zkf5>TSY`f-ui7X2A`jPZVhP4y6G7`saLA6!Y00|nabh4Yt&R%_j9(D
z^GcRf@WSwmmN6GAD+a{qb<h@&{_{CcxYpP2hlz}2(&J)b-2{_Xa<UC<lL7)H-6MK*
zy#nRST`!7?`XY(CJ{G8i%7Gs*o!@2!?BYu-2rx}MySdT*E_>Gwab@S6J1a4)djtA^
zR>Wb3g9hQ-U<jean1jzwoN~anVVS%E?w7BVlgh$~*x1+y%l#hThiQpe-76q{QS$}+
z_0aqGd2QnVtTSXnB)mk>;SPGRRea2v17J*q0}03a`aXa7pe51Ix6(cvsnHBJ`l}k0
zrxXADRw(DmJBRSOm=wO72J=Ck?EqI`XJ@CZtnBXYu9uhBeHWLx)_@|a>kJj;TuZqa
zGGMib*JYaF6FJ*j`=14iR^PaetZ*@bjxls}OP)Ov^V=E$*i@wokL-W7fSKv(h2a$T
zWLOJOqFQF)<*fpcPKRDM*43+W$!-80gID}-H8JK1<1irafQuUPP~cSUfYez0R<I-p
zlWExXIA+A)CVdF0v)wzx6i%aFa5F)d^RM$s-zaBeVZr0~ipFYVjf#!^GxKIT34gAZ
zP;5Jn%#g9mHu>W2V8{@(?I---58?Sc%@l4^7G~z<#hw`W3=yrBAl?N_MsftOX+T?n
z-{G@983j5z0Mq#Xno{t5(g6}0C?Tpg1FOx_e&5@%15)qeuJ`Hu8sbpa3DIbNm&(bx
z^uP89V;)4LZ1r(DIc+sHIt8KovT||^UvWVY7(z5Ofi>Fw<xAK*g}<jj!g8z#H_}O6
zJvLvwpiGvTdGzj!e~*XAOytD9{~i=E_x~$g#5`UE1D3k6aXLM+`zkFh?RJ@!3=6Yl
zH7N-(W{_qFFdLas+QELE`iP)tMAVHPx#Gi{Cx_mu<hHVlSJn6#Jmy&`XrSUvjI4G;
zLq|V8#)N-|!BGujw`=msxE)PeMn*;;2XAkO3$DLiT51tf0QJ9qN6^LZkbhU)CULNJ
zaCEfLWdoU$t82I}Btp+AkKPj|F-tSZHsCchK|15>OYn$VLqlWBar`h`S=l%ND@uy1
z2ig53$HLtUD%k%QQHe4D?Xm@}meywOyrmkBXNr{!B1*LQ!$bdv*M9soHOXB1nV#FA
z0w06;N}9FoV!IX_n3b3h^Sou)q@)~%p}8O+Akx@aONb<_Sln13o8NSEbhNUyO_%=X
zr${e;N;-s`hUb<{q>pxR5L9l5hK3Ff8JHQQ2V@Ur+2!u&eIP(7z?)QYFpkEGx{77u
zUN05C1=<lJ2~hqqAr1o*ZwNvUrK<}EBT!IKPX?hvX?qBeri?LF3yZ^O$1+q3dPYLd
z-v>><fE}NPzEJP@u}Jd;`6>#W0ovqAb7YT#U_DAmw1QOV;+Laj*x~wDjH+vF1mog_
zwL#MVeT66R3N5j+c%VY>?CR2JmBGYL4XgI~)tpF8VABbqGc@0~;qCEh5~~x_&9U(R
zCcwv+IV1(U7^WTG4g7DKrV{q>c@78uu8(?icX`=Z1}?pqUh-Ow*JDFjyu7_ZUZn$A
zq^%}pB33ZVKt~xKE48hod_X}}Ra;@<YkK4fm-eFehW^i}p8fp(5cPiECxz(=V!1sb
zOouATgJ4$<T<%}cCFx!324fI7S3u(w$ZH`9gpNqin0$OW<bEEKAb&O58nk!H%4|jT
zEX(#G#1Ri7#)`PVUcnJykfOTyavuBO#4FRw05@R<m@PIf4}Y`B&x3suY}4dTJo!dd
z=AK?&TxQMs(WLCr<la*?HpgI52kHJmKJW>+jVfj1X<mzauk9RcldQh>+lGeacc|PZ
zwgB~p*I=z|RKRWa1g?>d5tJTykwA!E7S9lP6bk`A*ftuEngIeBt`&}(!C_eb=xEn*
zb@lsqQOkDvfa8-pwYJVP%|pO~LuV-E)s~jdjf$#)2Xj|@WBHLY<7_oO$&Q*OI}0<u
zL(P078Zok?qhpMLwVjIJ`qheGr}1ck$`U|Dw6bq2tTh4dhXEhH{dvIEtaV2vtEO@B
z+xA;3kMzbp7rS+<YwqjU<E6e$-J!0ok6#Y!yx^k0j155n0rkY#m@aJ>2pXnmW>A;f
z9vy~QvTA1in5^-9sZIrk14s)?72`7dgGvEt0aE3z`HoNkwg5G+6>>c6q&GTM0oQ0~
ztZi-C5DZcjDYsH233FTpx%!bOvVT{+3A>n6ecL*kySw|r@uq_8HR<)R@bI%gpHHX+
z@2$MEp93!skD2&2N=lF~N>6o21U3tlID)(HMOHMFKCRjxpN%RR=Sn|;VqiNFPdEe>
zLoaT91{9_D+Bhg^i|@YP$y2~tm@C$i!^G@sJ3q5OJ9!9SI21eFfGz@EfA|qc%XSNz
zyfZ}DVgoGY9GpQ~)f}$y?Tq_zur(~uFHSLOQ*<Q=mE3``0gNRQSwRmgxK5x%Xwps0
z$yqj#%nIdt3ZG7}HN{i%U#tkQNk3NMV`D1@x3GXQ82X`{^zhfzA38<j0%f9A1ce-g
zNR|Z1t4F^(!(!ZbH)fQs`=6i904i`E8d?fqq>QHE#X1EVUOrrtSh8<59#j<VCo3)!
z%Z}$x59s{)|5yg#Xf$qcvJ?9NUktRa47#yQzt&g3vjV=;rvjB^@ON!4EiviO*iTr+
z#%VkX3}ni_##7|w-8MKL$*-JCT*w5Cu(8o5H@a)ru8E0zIam}ZFWgW&n|T|E8Jh;&
zq*Ur8X8Z9pe;00aIYiXW+G$7UAlVMsqgoMv_h<#|(T8zt{{H@qX;9N=(Yk&N0bp^U
zB^GJvY&JeVet#sWER}=dz=y?6#<PCO7XpuMiaed`{y=#wNQ{WNY)!1X3GF>lIf8A(
z0d@|cC%<7F!!AE11T@MA$FTyldWVHyUqvBaYP0T9y=#<U`?N9B9>L%tXWED^gE&<9
zd;SnNgl&zW<N(Eq_-yAj)7${gR7MftpYa2ObgAzgtIVt;1f5PQNXTPx8EC8^7BDt4
zY69sq6#r!?i@TvFg=6=|f(hk?%^lkY@977qKmerxb!rmFW$3dAghNm(eR()r!X6wk
zKzu?<)S9(4f~!;MHu%K>Aa$?FRpRWxhE&K3z!sqU17UPz8A!hgS>!!EdAu&nB@h6p
zlrl%sgRnS0BEnSuT#V}$D4*jc1CQdbiOxa?ys-tyAE&=RSpVRsF{xe70Z|S#TSxl(
zzRpT+f>Ctas8|sTLh*aEZ`$aWq1iF}$^(=GpB1TJ$HE?wiR}3F$p^4TVC+E#H@TXD
z{gj-`7~qR+SFeUbbnd%3OS{qyC5f>*`zio_(&Ng?E)J$7*y2BD#yV^mX_Qvh{rCIz
zHD~4H({>=>EF%S)3MId_Ux5-pdL_Nr>XjR;cj01x1JSNov)2P!9F36BP;gY(iRx&;
z739%BveifOgfYFYP7uvX-g|$ct8ctSFYI~c;KT$OLq&y+gbcpQeX)P?eLs5E*L(Z>
z`&(P__WH<#SKF{ZI5|CSY;52vdlg4(EyJ?>xl>nNnI<y0Lnq%32X!~}x~b4*`Sp%K
zID+`c<Psu@fc3!gbTlrCI)%SLD@SrnZgosy=Q;7}w|{dC<^hzQ4B{(&qeF9e8dQh>
z4aE>DXw3bTvZa#$ByI?m6L(G0|Ni@b)2468{LO@Qx-v$vRG6#zdXxQzZIux!Sr<fV
z<&gOeP7!mWqMXRS9Ium5G!=S$Z!)Aj0ZzUlp9taWvFHak6=L!_r}PPBgRWgruI1mg
zW7n*f4v(KQB0nKygV-%_mM#+!b12__lJ@r0@C)>m6+e*<z36n{i)Dajd}DpRkbnSj
z6o#m16C8j5G?XxHEDvE05DN#uc0CqH?(g_j^(iG`<$m6k04qp;Ir_DhId;;_-1EPW
z=J!E_zzb|NVE;lvDuqqQ35s89`M@OQ7Z#oaZA;{h?CflSy96KaRYYP!3V7|dUq4Vn
z=V2c!B9&cEJ}M@$T_pRFpAuFg?d;JR;4A4&AE9^qcxQD)ladVZrKRSrK+wa4QuX(6
zg$=+PfUnk~dAH55!X(<yeZIW|mhA-S+PcEM87qMYcLLiBV3kB1S6?RU)qwy0ZNR=s
zf-M&Jg_%ouI<RN_Y6#)ZJ1eUbEcKbHWx*)K6qEn%4}jGaC?~>&I{nH6;76=L<?2Sk
zMuz@Pq=g1F$SJrE%HUWHA-qsujFLwyEJowsDkA#(N;i>6tYyJl@rqEo`d&>4_A)@-
zDdLZP1o5%N5rLAD66C#LJ1vo8+z035%Di^>tmHYQfD;*1goJ$FYhFr9MbKpi2S1(g
z8iACQ)B*IY@K<ESE?k*{_8Tv5`8t|IVs~?kM%4Aq^bDZvd;tH;449lpNC3>zK<^p^
zU6}iH!LhSVZWa(%AO%WC$RuHl9a&BFZ(?3}upBTSacM~rArma{ah9~M9;&|}Oav*>
zq8m8F!Fy1?+U7Qw4e8#eQUkSLb*?i<kf+Mt0CNfP16RN{kF|lX1$bV&zkgR5RaL%y
zd-mpG@Sh)}BxiuBHpqDnFkc)ToS_52n?U=Z<@C6Xy6-8?&FC3m$Uc1d&}JV}q)E74
z3C2sFJ|&oTb=@E*PXqOZu2L~ou)ZTx8{J>S9j!K}|2h|F`)J5}b1-%?LiiYU3E{M%
z&w}8tu%e<OEbR3ZSXxCt<VZc-{m}tLubLL$DuJKs+S=Lx2?idiJ3KWq&a@nf0BU0V
z70Cm*uW=+1dTl|cuwo4>@2Uu%K^oo81+alYNFLU~=>S4!0svKqXk*EqROsY4udqWJ
zInx%*OT(^PAdkF?vHMigWw{9%l914?=I*`)78EEfJht$ZAr`Gw?Y=P_nF;SF_-J=v
zXox!tbZ7IdWGK}7XgYm0-<i6tq#jB5)ijBdxB+nzxZ?Tv`A0`b9lthKXtS^cBHN%`
z49mmhjUTF|<)X(2i#sj{Cpb9xq*R{n+WjcFZhDu*d^b+|p3=c}GhJn2ArF|fn<zwQ
zoqGfcvPQ#H*8ThNj0DF#;j$69CY7zxq>iA4sFK{<2pH7(cm*gke1?K>Hy`c``Kx8}
z^2xGc(Y8aG5=!xRdClL9?@D>Ek)G7tyw%qq4&?GJ$kOjSFc34}yLkKQUx_>(aD=q^
zZk`#>!Zwi=2doUc{-@ioA?78Aa1)k&xlaBH#D<m(r2OxkO7<_juNnv?I12!QbX7Dc
zas>YyWXWIHg<Ks!G6MW$Fu4zEF2qB+9Ls_K)dHS3bz@-qEU@=~0K$KQd><eH)zY{E
zx8`MDLFNc*nw6hF0eUeE)I^1Pk%R(GSJOnnxDm#ZA%%FM&Ozp8K1VM3wDCl`!7SB+
zhS-yYj70Z-wg-h|82%yMgi=y%K%<E9+gctVQBq>PFC~PZ;Fp)$ncl0*{x~yNJ&e=!
ziwn}lwy@m5BT@84<OlCKyiN=87pe48bO7Hu3B$$tob(l#kGERXe|~n0Jlll`1j58G
zLqn%kZ7XIiKHs_`e4SkO<Um1#@%%!>mx~3tB$PD_YplZ{+#5K{gEACp)K#z?Lg5^w
zltq9)*RGP3G@qPr=eg~HxNJ>HmQvc(^mGKHx_hzYM%O3Ni`<v?ny4$pc7YHrxX!)_
zT6tdr7_XdLzP;`3^AKaeu|+;W{Ad7BQLI|oSKu}d1R!GNYuIdB%y%+LiH5R}<QbFF
z<?C!mhVeY=ePh<<zxxR^+_?Nx2sTT~nEZ`MF^^-yD!O;@tu3T<7@Fw$mw$}fKnP0S
zhQk#*swZ5fd#Nr+@3FSS&*sR67h#7@!=Y5Vkp?g1D?%2u<R4esDGZ%NUt6p6-e!A#
zkFijV>Ra>GvXh+e?^&$f8|bo(+cjU4M`a6gSYMx=ot1<(9GqMZpDSBUNGgqMuF!b^
zRn-0JIpc%lJr}lQ;N8Q)cLSgpkxF$E$`%%P6sDoZIOYjH;*pd`03d-F5b83Y`uia|
zE(Q6E^Jk72a>XeNeMOjWa3C1h3MHam7a$q>>@2I`<A)8GKEB$r)y;r*V8sk~5`^Gt
z$-N>jCZ?DXjP}Fbz6+z^2-B}H`2~;|#ta$QKzU2RlsSkoY*o(?P{{!=Ox2w_|Ec;C
zA0MAJO9vTfP04RB-T;mH80;#8GQ%>0g<FZNPbC^*Z5K<7P9t)lbMK7tD)<~6FRf!m
zAH<+YMYaB8G#|=A?F{wSaLOJ-vY6@U>FWy)auWc6!X7oslP`fN%SohQq39t*Uch#*
zu2I1W#hBhA+P;*kdH(<x^2$2k5d@#0)Fa|pv}E!weY&K-881cp%`>cttUE$cLH>6h
zv@di5-a=<DE0~4llhInkazwoYifz-XD_qHDR_O+?2)=<w9*jkLCAxNsaYsvV?CcQE
z29vU_f)AY+`(<-)crDiDG$y6W^)H^VT50U=2o6I|__@NAS1s*6<X4K@H!m;<bX>9g
z%Y$m)+!Cv#X7jWaiKt)RS9q%-!cJiJkmyW)^OBD5lXPEwkD?}G2~NZ<XChN4a>Dow
z8(-B?uEB;^^^b(+8~WZo6_r{kDqeZ~B^3(6aBbz?ea3AHO9ce%fjU7}yT?{V8km@v
zD0LNo%Z`vRNQ)~?o8GRt%Nw8I;^9GXhNm_KdN8JJ^L#}-3kwTlbSrMsLE9obNL(43
z#tKxR3Y!?YfMW1aaC6)IRPps}#J_|LE`x@^<9I+rlX2)PAN5;Mu7<PXGqe*N$1fKB
zIs8ol*kY)@^4MOWMwcIzdSD2g{rdWO!2O|OAQV$<Ar~MD20Ysv-_5tMYFB@-S*$@P
z%qhHs*AkB37cX9TjK6<>zbG28wu2_rk~cvhNIv)@U-}O_0$0n|S9ItSWWK3^dWDr;
zWS|HmBPO;kSOmV*<k?w(2c!f@RYmYI?!x*54Jx1Itf2=K(<K6Y$|}hoH?Ko711Z5)
za%m?1_c>_A09#k3QL^{)_^oZc?Av!dXl@^PU;mXMxFq~rSn?N;DH5s3hAoOEvl!X+
zCd~bgqQY3^d#0mVZhLJWqgdkeTp1F_)Yo6%@Dg$g#_-Q`yP?BUguo^`&x*Zma_rUF
zr9~5vJMO%Y?jybahT&0L>)lt{U7f1FEyr}-jn2_`^)*#^Uy6|0_(qw!rOwpe>`8FS
z+xOr8q(PM2fm-aLP_P}AddV!%68A$}wS*rNEvnVGd(d+*OgdgDFOYp9UB&MphTEto
z{wL!=oB@Z$+i5sDdCi*9G9vOw9n+=GC?(uxE!>Tbji>c%?B0DMVU0(npo~jGQ3-jy
zEHi*qP|yj(V}K(WQ3oyZt_XsB=DY$#D#H~6Eiss15I)8ccMZIQE?;WHA~`Qs?EtG?
zg->y<%jeXYyo{bDE!BkwgIt<YhL5(gkI~q|&_DIRjJMv<0mbR7LlbogdP84B)sb7i
z{3TC_9|Wlt3gLY%ePxxb#Qx5P)4U}*SToAGit+WXJ+H^YYf5vudeiFzS>n~wod*`T
z%WD1R3n>;ilU36tQ{{0CCVY+PYW`#z2g+b!1V&mO*okc`bKT@VxuOtqg$i;`)<k2O
zg`GcteonuJ*$MWf>Id_6F}woIcXnA}o(Y6k_Hg|l;LARjVU&&4NZ+zAR3!`c8@>Db
z0YHEPr(bP5?DaGq0ACUK?`wd!-MOgyL-f#OJJ1FvlzNUNkkflQUzmd*5~$rBIt@++
zCp}89ffJPQvR2fwz=%dFXdQ`_tetoO?1VByZiOp?E>pWtt{#_7SjxL2E)$l^MeL1s
zhu#KnvruetsaO%TyJzPipbW>S#SgVg<I30;4CCACUV08?Bbd4XSNY-oTnvz(B7B-5
zH+>=IF*Z2(pg*Al!dux1#M<e>whi27q1O^YNXY|$cc7=d!!)Y3UA->R4EWBUgQ;au
z`!cV0V937T?I*7rN`7%S!uQ<wLBc5r&>ayPmoy$1pM?FS87tPYLA-%51tfAmW?Dqy
zydW(7!14YHqX<~FA1?Lc!A^ujoH9rn^sEHJlXdn_p{c?!_2eoh{rmnzi_cxOBKOh8
z>4RQcwEAyvEu2Cya>uj?PVob{TRlhz37rVZLocpj$-te%-$e*V`)6kZ$**`Z!>Jcg
za+ul{`bN?XA@|e@rZ7{@#x)d(i%cXv4#V8{NC~7kHa5@ptfk4eXU({z%F+qnEgu9q
zXd8^S%Va%bZnU6y@s2H;pHYb}lJuqZT{F8&DD5Fmzu$5026$iC(hSs#d9Q@@B<T%q
zEQjZ5WAs?%a_VN_oVw-X#qFk=Nlb|Ljmh7{A)D4P>ejQjlU`cC$Ec@Tvm48ZkHWoG
zhI||smOi2XnrHV{&v#YvpX9_U_;hr0a9icZ*ZTj-RJPz7*D0VzTFRlIzj4_q4%%ga
z{v&cLmIQByPWYp}b*#)vBC=>;c+lozoF9I7BUSX<`!UJ{wJLDw)Y{p9sU<rA9i|&;
zFBDkvB$3!30am1N+tMnQ!J+Qekt*qMfmc0-cKH4r=kxsVu&pU)NK)1DQZ-Sn92^?l
zMfxWE4H=7AmtSwj*9Od2jv*NJ72inxjCz_K?JpmLJE-=lzxUE}O2`-$umuZ`9mICM
zdkVr;QC~exY2Fr{(5n|06>N<&ZFiVqT}q77eOZJZzWDmAcJh(IYMVIMOA_7Q#7JK0
zyek;ulO?upy)-v#)i9~Kj{d}qw$H=GxcD>H8W#O;UW+WN{xSVf_~t>Imi7YixS>JV
z$IPs)-z>$#{`*r%D?s382D3<j_!OPLW-be9Lh#o7_2~0r9VRC8Cg5fwV)059kJhIe
zNLtj=PV(_Twg!kEfEHML!?4T{Z=g$SWVW>>IK9#D0T|dFDgf=JNQZlwkn8B763XoS
z>^O%(E*yr_V0FG97#NtI=Hlb4R!P3+4mEU=Pvh`^%YB1;!Dns!wM`$sgEI~u9(czK
z#b}SVM)Q>-@PE;Xx~@arPAd2;cFy2LK>?ANi%w%u1yCRmNXlHDPG%j{Du&h@R1j}@
zuR%d)3#v}wzGENzpY3&koNfzt164UV&XJ>Th0y?N18_kdq!zNmKi@C)ss6F*2ss3_
zF2&&V2<`s*7fjQ+M5aC=qc^7vaJlJzy<WI3k1TE*Y}7ib|1vq5>(B9BG<ik|uA?*#
z0}e4r5Fnx5hXuIM40*GFfB-qiEr#`L4pboe20wCEq^O;N!x0oXF}*D`==6OGed4T;
z#p8n<kwO~%)L7F*++<iX!$RkxnkBi`1mwXEx9clD_vAli#FwtHQz=aUeCa-s**lIk
z&B4Z(nv0{X+kN;wJK-iPy{;Bo{QRWe*c@q>jn~@$7+EXyDO)RQcx({$7#rQJI#{gu
z(Irfg63y;lp?mwBOVQQHdN#n6ie{p+fbz{ZOqGd`M6I6!g{{5V;Wkldn&`YE9Qrus
zDMH^H<`XG|dH0hWRNor3y~!ODGt(qLcBLVj_(pX8rx2fH7`ah0@gg%{DOEBA;)JA?
z7O-tW&QztI@qkUK_+fu7IlfRpe(|D)>u1djoZ0qv%eC<VxVr*Mw{X!vP8zev0!vP*
zjwndne}5xPqx%|pFXe-8VZ}*CHEv6(y>r48WH=1#3l2+sg1V}O&27b%mFYp!(+~H9
zi}Dv%+G%xK9`Ecok0r}d?czM2)i>~@8((_4p&FI#!FS?4dbYU8ZTNy>W-!`@peK}I
zj(}{iIGs&tQ$I84Qfz|FTIB836tyKxlpfVL6Dy9xXiGCgc5c;nUS-F~J6^Kvf3Th$
zdBk)N!hPdBUOZawNTQ*YQZ5sU5i|MNn$4Qv?Hj=CMX_9x9FZ;SezcZ(u(eaDdkM&1
zl!1Iym!9B|_R|?q_D{hhxnSsSFSbEjmJa|I;@(dARO>J%0p@223kbZ=k&>cb8hK!b
z3K0;yekT*AU%^<0fscSSpNA&jl~vA(s;3`54>%GIK)SxSITxeOV^p~gjB03+3p$KQ
z(>RUfJ}DP-nW{g8B4+Wqd@Sq0MeJ|gJvL_D9k~G20vWYsl$;WfHRGer0C%<U^xhjz
zqZBeX=)}R8p?t|gs0k6?%M8V^k$wAUu0mO0Dg+&;G@!E`Wu8yYZC<U0D3qxb#!Vm7
zo1(ccsb5NY(4b&O*w*Qw4+=hE>NRaF*U9Q9q{${|iv50-?Wjus!I_*pm&r;wEO(LJ
z-rmibrNRk1$#QYOKbd}$o%kJv_l)dL>Wt$3*Lw|gEV~n}`;0kbN%RjU*=Ce@1Iw}{
zJq-P`6wz2+TPlsYRqc$#gGG4qyi^n_h%)(}Ral#(@MA`BTrDo0ilN)-{1))6@pj|l
zm+w_hgwiicPd%8fmIcj(ne`0HulACspc#FWXL<)MGAr&JL3{J<#q-Z?YH4>^S(O@|
za)oLqi6I9ax+g2m4R#Px_~<y|#S(>la-70w3>+#TufFX*4>YRR>%V>h1p?q(AKqu!
z+-&5+sOD1~{A`8HATyPCT#SQHghCD8y6<!#@mOB3p=g`qzgj?}Lbfukj<%gQ-JwPa
zM;%&Gw7^O4yFA4p{=D!X^=knX&M7ae`3min9>`2o-KwgvZXQSLKsvpzzRjPkN^7f`
zsvSc3XMG@9ArC!H42oK!0s>GO+Jb7KWddZ**VT6+PJ9Rp0U%WoxKS^-m`5M$!d0)K
zr}umE?8><A_R7$6zzaeNas?cGP%eLrf>?A{K-$=N5<bz#mo6~$3^#ofYJ)(Ec;T_s
zi`s4lxFeK-c=h`)a}aUgsXi{rS70t4D8A9u+N#@{=xX}4N>2J?q1yMKWsd~%qgYEW
zN;Qi;@86e)M@ya408!!>Wct8r)<wvE2_bXsF}1O=Gn#otCg&y0A^-NRWT{^)6JAO7
zN2)eoCmBSOcCR2?1IEPd&)*?-X|o*&2Kvj*Vn#p-LXKS17=JpAAkrq_jQ(DIBkG>;
zuDzl3WnBDZVevgx&+g?(?>}*9<J8Yfg~FzeFsD+q(NNiywT^4Wxo(1&sY)fUocppl
zy++6KJwes}dc{EAL~gL2nuyePxJ*sr)#Xxf-cWZ}$U)Q2-Z~eTHa0S<bZz~QM(%ZO
z@4Sy%nIVK^IF#E^SiK2hd7;|*$J@+mX;B0F-m)X%SMur5tn^7r0s?{!KGa@vYSz$5
z^|Ks#T$%;4Sy*n%#-Im3vtR7Sf^?H)>Twvq|48%pn1Z9HiZerYunr8z`g~OIL)_+S
zVa$qY99Fn&un>>o=GUk7&0Nwuua6X|uKyCK!)GVCBFc4QHj*c_AlorFsF^!R<T1;B
z=f~~SFn#3yNlGshfmEV&u|{{4CoU>Z!%66kiLo&#rRP1l^zBF*=^w3+*d|K`-Zes~
z?7@gXvJ0H&ulcP&%1h=L78Y(A`TSRkuPUiZOSePI+_c^y@s@Ap#VMZ7?*cTq;vn0>
z6s)%5;bFS22BrNUqqMreV2%W2w$x(o^Oa_|KvYu;O&UlHFVve5H~~pc@9TrnkQMl6
zbCZ`-0Sf2Ez%3m2C6&yMyn2h|CO<I}h;JbY%nBfRl^;WkuGB9PfX*!r`FkS*k?Q(-
zE}c9vv<0|Wk=D5S;x}KvdSz)Oapw!1e&Z3^&&NN1R$_)sInkyhY;04uW>Z11MCiW1
z10kNM(E`X(u_=7owOl@x-^smdW@ZMJq=I-snpds?WUpf2XoZ^YcL0b)3ZBhOjMHIp
z4+}C#-E_#)Tq7A!#x8rwGwpkPEH6+I6SMdwrACqWEgOl>^7)iWX>r5!oRff-fm(k4
z3di?iWt)=N-I)HdJymqyvDvB?I(-oaxm1yWv%`S*mp1xx^gTZmW3+Y(u-goidPgBu
z>h1*<x^lRL->75v)=3wbcXPf$o^xVi6aH|7Rk~!IMQ5tfCA9VudxO`iu14_Wo=)7W
zfc@hWDYnvDJ0<e(k-5cS{JHGYMtiF<icK0%C7wdIY!7-6z{Q0Lb$2JRbd(iNATq_O
zzMM8(8H@Gi%w>;)6q$D?EOGWc12bPq^ZbeK-g2_;C5r5WwW<y5>tv#Hk)gh+!(X%K
zdb6cYauM%tuXdXm?CXD#nP2ETZy}e&uMOs+_AjsvlawcZMDjp4qkGzdbf^ks6~hS~
zm3i0)yFZKGPwYZn<q?T#gA>`%YoLH48&uiu^)}#L6VX2Qg`;VyR|8tP*F^3+>>Bk^
zoWKY;fBz%4cZ*6Vzdt0wUF!Q|L`H%|n=@B(epw$kPQ!P@p{_3I$(2LY7f?p!u_JC|
zYRDoUTLQCCq3!?z4k+`&M8GRJIKN?hq#|D5zyJ~TEHJBB?o$5Tss`X+^P@unI=W4t
zU*cepEcDy923SbAl=Tm=yJuwFOtA%yK6v21udWu7BVo{+W+G$H!FDjr?K^^m6(q#j
zLXOt@>`|0Ym7Thk30c6L!=QpMB$qcsM2CWI(f!G4&AlB6=<>3r)kU;H=?CKc6ri0W
zes8v^jhL_(-5?!2F&f1EqaC`px5tN5e)lzXPCfKh^H~7x^!o=d_lF(|2dK**R3Z${
z58x<Y5Z#Afjdth_)s)G$V5uNml;*c?6q8~s41#b3p!ar%DP*~eJ?EeRzCcp?UcS}?
zK4?hU);2bH7Ng7k^D^0r7*pn={P0c3nE5{|SgSQWQtk0L^H300nQe)wkVrMpKhM%t
zJoV--i~V$KU!O`Sy;s(+#3|b0xa~-_o||3rA&2RA0gJxPu%%(s(Mg?GhisnLWz!qD
zQO4Jo@8<=$vg5q)=HMQdG&o8mA7o?M)H|_gVPkh(DY%Oe9^KI~a>Spbz{8G_a*FY$
zNR=_H9?J@NiRfh7PqjjJIY(+3g=L^9&6M7FpKkx?md6=fJvj^}<27Fdi9qHVnD(YY
zMhF=xRGprP-UKk(H|jIC#@YkZJAr0*roVi-X(kQ?Rn4M<JM9GMwkU0JHz}wo;FO0X
zvvL}wL0u1ICHB9jgddzqkZK`hVZak905W9BdyPH5g<02Vxp99oJ6iKRZLqGvRI{np
zo#Lb@j7%Ls?M@&AHeKv=i!td^cAkGVq&jQbeZQa1WH*YXBOWnUx0_#jh(Sz5?dITJ
zGyh8W`mvGWRMbYvQH-SCP_WK~`Ltif{mto~$!6;geg*Ztl45m=>E#^c3kTAtXEQBg
zc+WNcpk&hs+M!5Jelc<JUcPV$-1N%~4X7z?df-B5=-sLa-rs0A_;t}l20AR*q^Kw4
z^WnnIytQ9NxAqledJ9D#I#7H;Hz9z0Y<6>V80M%!v78^~EupCG5jwQQ#36KF^AuuG
zdm#z$o^j%NI<zU?!1TV3%8Y@DLpu)H$^51!CilNK7MeC)2bWiEP0iuYs)x1lr0hgX
zL@IbbR5zGM`Te%$p}H@(^yMpOg+owKP%)yDPRi5eD~G2t=of+1&}`MEnD7uzRN0Dc
zsDB*PK$XNCRPwgWc+}$&^zzRQLD7Wz28B!yp(F2KI?n;w@*ZZLZ42T#Ml{yc*{5dW
zlw;RE{Q=b=q6-K)4!IYbVL97cF5LS{){1e|4Eo9P`NBlugNr?C<m|c!YZK1ep@8Cq
zwl28`IvM((?%lN`>yrrX(;&(<&S)HO?VQaRQZ`TGyiTJb^OFFRa>=U5_7%-Rn(U$+
zwi(`c%O}+Lr+MtS1N!+U7tU@maWVZA!2O6;TBM!C9mBpSK6wq(RhJ{hvJcPh(}-eN
z>O=Od))c27mnX8^5h6a%D9!a^i%awsKi?%>`l*oZM|p#=)*ihFAL|-=lBiO{!Hv>3
z8y|L(Z&e!w2XlT*_h`vgsP$E$azyN^*#j5ib;(C)x%0V0=!GkA3W8eL`O_n_JEV<~
zpu^0Mg&MRJ$cG>xm;U$%a_!Oiv0NEBeGl#1M4``~8G(?Kn>)4PJ%9?f^Fhj_moBWW
zCGH`cm<zd9?1$PXT(LD*s+=8)1r&*R+m`oC3$@!N=~knO7TkZ6IrFmjls<ADb*K>t
z`8;jR9(c;Zskn36)JD({$AVFhhIcBWRP6hh^39#tO74522CCwjek>cuPRUB|@V!_D
zSGOaq7tQ${lE=jBa#IEP*@c$VUtqmmm$!cD`Cap%9;A!TtRJyNiN&bt`5=Lpgt=of
zLO(`Or*K5VT~_s)6h&PuL({2cxa+L>7-|y$jkq$w49&nHDi3ho`kx*Ni;9YRdU}4r
zepyr$fw2pazT<;~;)vE19<#OWrHGMPF(VOAdw|(}{%lG+5O?kKNO8r@b@YXa4QQJx
zl4&K$fd+$$!Yk>GhmTK9T^-prJr@_Q0IrnW_3N|Su^coYs-uA@1sVj)of{4>Knyf)
z5j-@JRf5|KppO-~9Tce?Nhh(GO|Q_OcG&`$1S*wFxg8prQwn8=s<6nrtzbNv1w&O|
zm3^uHp!O=%=)!)ULoApD3sPo^0mJzxDHKcO$P8N_jDmB8@E7#=C2mhIWI(9`{xesV
z<7u{-2eFgkFn?%{B_?JBU|Z>9Bk796S<d2ZckJBLNq_Rn#0#m0p62I_NxJ41?Y`gL
zdAgkNI?>t^7jY(oE5h+HFW6S@EN`tBqlWq*-{A(kdMcXydJe{O<`bq?HnH(P`KhTl
zGp}#8K6Q$!_@R;;k|i0a=<C}AGc?QW?-7^E@Iv<`!MWyk@Y(n$!`E3=RhtP6U2xw;
zH#51SRdCCN;{vv%_Ncth{)0x2B<)`N{5;e@dB1+;{Jqz1*ap2(p$_`f;$5$`aUwi%
z-JOTfD&6jLFs3D{(>{GX{{!Zcbq9yDLZ2IpIpfLM`D)Gh%3x&ofmfD@0Uk@Napu;$
z$BJ}+E}5-cd+x{SWQi(a_PyR!v1CxsDij;;=gGei3{_l@V}Z*zNkWRrhsq2x2r&78
zcrJ@oYXg`j(3_ydd&RdZ>ikI-e_Ptr9e@Bung-NKFv=A?$pS)XOQsgkl#C)dPvKCW
zu_IL_qw^3V=-`Sf>z71_6(9;yMJNpwL`2v_R0~l;-kJN=M<4C#!H)&M)@r`}?199x
zyP2ZS+~XU#A@-oK&h(t>!GjhjsEn3oJzm2iAH1mm!E>wKJMu{k6b2-RXo4^3bx6)b
z^1~sTwIHse*Y7(Ae?F=AAL))r=_v?YZTk}#N-x0-Zy0OBm`1NzpT}S_)BkcIbZ7w@
ztKjix`h^k78FaA40Aom`?l$fFG7fud6KfGy(8pe7+jQ8Ca<XO}&jH;~r^YCfoKF8t
zJ0QkylmGDYAvcIW2DAwk<*_?~Qu?|44h%9Rf-!uPO<Gh)T1`S#2F$2$%ge}K+LUkb
z<{=EZ(peRJe);Kj_KGqwiYbC$s$lIexl<?dw#}gzN`OqAaxi<w?{ba_6%b2bgYEz$
z^qM9xNqKY&pv4!VuC9L9%nbD4pzE`F^pSynbNY3t8!+FF?fQ(UxT&9FlXFFCox{yU
z_+fiViAYzEP%>ce4Rq)aI-pY0uu|ObR|~Q#W9@CV!o2}t(1Vj8*x?$pY*|PG&PS3Y
zKbh_DRo<gPnxLQgI-&IVPJ{)jsn}A3%{uCX_~%e8R1jvnV)Q<h)4o<W6zPCY+FU%I
zs~zVUC1%CT;UdO4Rw}I?Bn?9Ch^i_J(04(r-Dk0T0NSJxx1!TNLJg9dk`jvY)K}JF
z1Qdu%K{3J^d+)DA!h$FPBofG^lvdnkpI_Gr39Ib^C)MH$y(p})ZMd^R_oJtT5cUJj
zt)RW8MBovn9eme6pNp`+dkF*ZSjR0v?+PYm_tmj57)_Gj(d7KOie%vIr{RCK09_`N
z;tn`>;2EF6`34~}GMh%~?EL7JESreK2w|{Q@pv9JY3bX181dBRwF-02u2pwDF)QuJ
zA^0nN!CN{Qo>xYU;&a7HVXk-zp<!ZPqoNwhEG!?satj6R_IqE40K09qQD)vMuI?#2
zkv3IlPawu)7H#{MK7ECL%@Q3C8(aM04yi~z8kU{GSlJq1HO*j097y;G^W1>}VoHnh
z-&KN&Fc)_Pe3tcv1%`YmUjlG6M!SI#-ZArCYUp{47pMpp4?#o#LMA2VOX%3kRb@a{
zQBVo##0S)H9_<$UkR#K^8wwEV;QSTo(0q97)FuJCOqif?20sXsE-SwHt_;)KU8%hP
z<!x0R>kRb!<0zy2?J_|r>U;zTsO+y#cWZf_4SRsZB<G;~I?w-8`Ilve+f`8Om~QsQ
zft#=t-%dwLo(i|9Urv@Pd7b+YD&x+yeIa8M4G{eq<Z=3|9KX;=nb>9$Cbj>kU{U-4
zWiyzJN6vGX`TN5pa731K{@z~NzY`0CVA=AFqa{4=^;~zbwtfI4s3Di3OoKH(XddXb
z%(WS1%2_ImfBcv%*nM&yCW%PJkLALnTaL=KQG})7Y-!0Cd=>%?Oq`utvKJufsmlg=
z_cR&&%PEL<%3!<Rq>s2pj*p@~VSqX_o!~tf$M*qxxZ~MyE%eMmQVmlfREqC8C*xcv
z=Uidd|B1EarmdZu<xGmrt&u6z(J`1Z1a0;9m4$_%^+|q!R(c~Lh75)lK20_DV6m<J
zc%DKk0^$nRP+AH9afq8+u^oCKv6m%;uT%YcYR57=F)~BMg=6d~DNvUthK4i}=J5ZD
z!SIX83i&=#8FF9O>m-q_zl^i=;quL_UfqZgJ{Cyw@?j!~?u-h^cfZuwD2a;NVUIu;
zerXeu=@?S>i_SF4gu55g_^)4K%u=K747BrD(X3#`Hk6iNFain8dK7XPvHT;uCQB9O
zp!51c>TK(A8jsl?JUSR<0SebB?QmZFx<*ZYxM0(`O_v;iG`8IjUSQ@AnF4kKKEM%u
zD#vY7pLxsI9K`4lH<iX4`gqa`IRJXv&I&2dClhq*uY&N_kK)H>d2%Xy229IFot+0H
z4hBNFH@WIe66jDxMbObWarg9v5?7V)ruma6Paq_Qc>_8i?1jpctLvFJ#wH}HvUG3?
zdVW(av~XzgaiQQ!cXM%(upgcVi2(qc;XKWI@J)4X5@v2pmf!gZ9fym-7At)frlRi}
zVqj_()I>lFwGGuDm}@T}htUF$O2lneJ$s_o4u|>uFpmU2?QOqm`6yxpjYoz|!J{v=
z=jG+)iP@mTz}gAu@J6WY+}N&?Q%<6>;uwi+IV_!h&*aZg9>a3G?V~tSKBk(Fg~ngp
z+F^pQ7|g|i6^PC`H`>n09nc5CSH8H%bp3&+ryvX^%!=y;ZRtMP=u4IJcYgntlk7+T
z*|qTVXH34%i;GFXiH=T#88%6{CU+we>cG_qO2)SSVrF4pYTY48+uy>cbsxNP#Bt6o
zK~$Vk&F4gG6PU;p$CfNnpJC&UEl4XN5txbDpa4?td~s5psX~~GARiYMtxS+n8oAb8
zjAT^7ztDn4iX=`j34JcCMf^19DR9o9cPt@fwsOCagJR?4`y}pY8OdmUzZOE6w5!4u
z!beZv-rvvmuOUxHhc+%HH`nq+aR3Xpf;~MSAD^KPk*xCl#6Qd@^ZkR#+NTEySx{hy
z>BJ}>DzPi~Z$^AVLzR_%%?Z{_aP{=8gQl3U>oo8vOxQj$YIu3*WV!>4etmr%lunh`
z%do#Sg2oTV9t8NkDpGs)7VLI#HR$!NE-u!Bx&rD^hsVbt@_lLE+6+}L0$*+wXjcP6
zj933%5tIdVhF?Qg{t{~N&>lh<G_8Wh6K2v$@$s>Np%`NJ!Dk=LfuRtBsuZlbqS{{-
z7N%pWjY+&?nrDY&Rib+Xhn#EvFHEijN*mXOoeFk8B;D`?nLl7)V6mRh1*<8=)8M}#
zCnm0i5eBgH0a17Z>i*gnP$vWeQEt)@t&NvwR&AMBSqXq$aD|t9EJ6YbA1W251^#Kk
zChg~)fpCw!l+OPyDMvljd`A-CZ(*qJ`Gr0k-(~jAH#nSNeu<E<umq^-DuI)3Tw;X9
zz${}$7M&n}1&8UvR|gooW*(3>xl2C<o$56f$(!;MV68hUQn3;AT)9tqN{;|&_~F(<
zej4}lXKXrGB4}u^(J?R}BYFkf2HJfPKke-9Qc6A&yB{is9XdPx8fIg+6p<rerL~@(
z-#NTZ_GU1RJDF9>6-A8#IiXU&Ca9<<acfM0s*5tl7lhy<)&l)sSE&Fis+SN3&o5K~
zl~L>*3f=Qng@rfHz{XD<Y{#pu0s>Iz2wq?(p%l~l@Ha-D4h*8ACY7}9pFe-PcKYjU
zQ{gSB@&XtdW+Fkn0;(XGb0CVFx`jMTxeQfBF}NP?$ASovUIT}e?LTA~^TT{Q89$J-
zR9BAxc^IIDMEArag;s+>$Oy+es5LRtx^Su1!QY7g0Vp~EJAeNCd70KTy`Rmm9zCJ&
z9{ursq7`O#iL8Pjl3<yR1|)blA1wcXB?eVa8y6QiF4P>kL75m{SU3Th35Y^$92~Uk
z?!|#=<6rYHLZ#Q?4q<ak0F8wI`_9fh{gNcm7);zoTfl^gf0-J?zcYAVxVXDlx3skQ
zbIrlh+5QYRfU`iDsBsUMfq_BRjw7W7dI=mrB=;&~#ScRRhf)wMA@CQzfdvBg1@&}3
z^U6u%My`-&;R~Q8V1m?t0OY?AgI`P;yZ9oQjl9AP9Ve?hKy?O_%Vxo{Ff>66iw-2!
zEpRMhr`l=xU(7NNh9i;D7sg>hS<}_pItzMY6Qi*_JUmd|OHhLKt`v7<0~V$=G01*3
z-ZFeoQk;j-My1Q<?V~+1juZj}!rjB;&+p%%QspV);^G+scBK|=*$1B<rv9s5PvVyH
zrtQ2Chz%qkcSn)%eagtpyf>UxqMX<XzI-6NHP+PurSKEvZ6=NPd5Qv_#1WZzK+_*K
zy$Tcs;h4A7?2cNSw3Gr1$4f6cxqA@I!{B2m&FpM#fn-lrTYDsmgq4BUDgt@;(fOIg
zGUF}-ZYreoz3i}n{xaX-!6d~Ve!=;85uihP1bTi|rcL-r3#jW^&4or^P`e==$rN(r
zvZo;{9nO*P_X4}mwJTr|oSb?Idkg1%_*(J*ST1p79PI2SDoo*yZ{ohQlLPyFs@@US
zEkj(ymPL!t4BVz5qXt7O!!0Y0e~rEH7DlmfaY>^tO>PLaq&pE)Q)7Et=qoYx%+1k>
zkBp4)Wl7zSePuz(iq0VWpYwo_oE#3CkbUq&-O7f8cCi=8PZj0wzZq}8s$lH~vrARj
zh1rD=@}CuZQ$#)^bt|SL1*b3@qv?ihUX|>BHiFTkf4%0gMv}1qe{^&nF;*hO!mwnC
zFT;xX*S<>}V9kwy88U%^zzqw9o+=6(ouQ4AHZaf({!mX(&dki@%|CYGDD)aaBp=q%
zA-aFSF^()TkyS?r!{npDtM7;6G}Lh&`ThkEhIfNi0q^JlEq9n3p;DgPz$hdHnA*rp
za2voLNJuBl=kXa6Q5IGvmhw~Eu6*#A^Pla(&!8B>CnS_2p`fBGW5<g7cPa<`0Nu8Y
z4BHUc;tQ_EfxiFZMY@rcSe=g_TgoVpU3TNTi2g7BSZcX1c`(<Smbeq&kD2|6XxhIX
z{RFz5t2hkK6U?ifP0#*$6F;I7!?X#L#^(dn;N^fkN)Xl4xy%23s-aAW_JNld@jt%@
zc*vJc$dMq?AZP@PJ0T$9;lus?3B=(994Vb5lNF`}_jPE0&9=rw;=%Sr0G~BO@Yxir
znAicFQQ$g<#EEblW_9$z?Wdl~(GV$GSqTgF)$(BK-vN*CtCV%=6>&cH(I`v)^1=Q!
z*XH{!Z3tS~WqTeThaf$z11+FJ@Zv%jCS>~bLGnL8aYLlUT;Bl+MgkvC)CB+r-j)gn
zydxGuC{%!hGH!w$0>U1afBp*YBpG5tB!o_2o}K_q4x_};^1u>kuRw)fW7hHsN}Flf
zaGr%$>_Cbx?4<wN{}1*f7|;k-2K^>ijf3}DH)lS7Hll_31O2<JdK^YPbCqVC8hW+`
z{Aw`W_R~v^cfcTmYkcwBI|?E_Z*YTvRuYifjIT~lPdyyh4NLWd`V*djexCf_hns{@
zz7ld_e$&c11C{mdz$5)va>K(put!e;?gx3$*RS8ff;SAPuZ6jn8Ua+7SmB65PjZ8T
z08AKm``QS+6Bp=NN!Sg_do#m<d$6@22TEM9#)B*&V0$sl!5RZ3Ie3NN=e1wy74d-A
zQI^lhh+;^;6<QzdkAuLPur}Mu>H|YLhhh9COurI>1~L?JW3Nm69bR?u?J&~Iq`es7
zAw<I2$9t!Cyxvi-6Hj{@W(E}%eJ?d|2ERY2+}ZwI5>(nj#ZScmCpVNQan7NIY-QT&
z-`d(L;S(390Z02(+c`bB=GI>-CqCF)e+U*h5Qw{t6)da_T~kY8qcV68IRYPnh~wD(
z{sgNnUem_AAY+3L_RQNrr3_|!`|oc91MUqZJzN{7YHp664M)Iy-vDSMfk_c&3Rqhv
zpzUP+vqY0<l&NhHV4Yx^nVA7+i`vKEaL2&inUaYIMa13@A0RvVzAzkkuyy$iK(!v7
zNRP>7TfsF;O-)VhP<KjdYOvlNfSB3AI%sE^U&sosk%G1tX5n0SYG+$~wE`<((jfpq
ziJV4&I&w5#YJgb-alXUZ$?J^`SCfp<f54`MvWr?tHHLQY(`)1+;?<s=;W(qFK7RP{
zxxZhz)%pJYf}LF)-%6VMn`!<3)dKh(939cG(b9mmult_MsrLjn98liMa6~=6bnalC
zmI#S`836-~ip^0>BHeF0=K-a1)~@4tu?GY)@GZDQ9b%%)2;PnLWHnJp0wu{_9Kc6&
zbLSHhv|n=~R8oEvk9_<n%r~Os`FvPZeussge&oXk2uAtD#E{>fF_URO067@c>H+i|
z7mEv~C0}M4w1oy|Bb#q@av(DB+L{mgV=S2<T6GHRCbt91KS+VpcP{#p<D8dE+g>5U
z+n@?M1ki(nQi3iJ?Jti)oKV`;^@7uA!@(LK7q|225=2$D-wmK0la2?v;0n#Ly<aVG
z6aIlv7Hpm76()G7a;+cOW%H9Y!7%s*Vpd1kS0H=m7Zs&Io*=-9ir?K5VFc>=xpDo6
ztlMGaNM==fKd{t=?b!UR0uF{l<V%s$WiA{YKd{8f%5Bf^iwM@qvcJ5|qJsYDv3AyI
z*22O<VOg1tqvI1|ZgAvKOi>_f%={%+a-TRs)(1Ja{xOUIf*6_`iu5q9>=XpMx!r*A
zaB(O${tbcK!yhA0VA{g>_Zel%M1A0OjHeQG+L}i}-2{9b;agu@1KLVTO0>P%%wTpJ
zlw09w+lSK!YT=3`f{h^f1e5|;sCPkj?@sRyg~|yP0TB@>s~iK0682&`uf^H!>MsZc
zE<yK7KNgJG7;=Sgco;^RVA6eVj>V<>p?rF3YQhXrH1&r47&vcg&dx4Rj^tTcTQf%(
zu!?doFD=Dn)~BWxW@JRsGnYKM;+)$#J^j9~Z}T065%Avx1r2QwhZQ4dl%1|K{&!pb
z1;<<lk_s7vNO{fkoF+EcaD3jB=-ES&xIXY$1S(vBPn-fDR%!%<Cim>0p`1T!LhMpg
zU2Xizoj+(8dUewUDqYaHfh<R_Vi1ZpK-Hn`t`0t*g_fqM!wB0^I;(oRJ`9tDN;Kdl
zE~;suj2Ot4h`7h7vzl@HVQF^uS$|@e&eI$|D}l_2ul0^FatVeqKfP18GH61?FuFCw
zM~NihE9V4evVJHtd&oYy8}F>un*qO^WK%bLn0oDIaqYRje(193r7C{&dvC`4YG5IY
z%0gp+FSF~xWKvn#(@3hZ+mxwWaCUNBk*30SS=!jZ|7anP`u6LW%e{LqT@x<+mA`+h
zB{C`$@JovhezCJA7OX{2G`({tD*ZBhq%A#%Ob|A^UgkiD+9>kBR)aJ-;TxlW`V4pL
zb@4jut!?GI=nrYz-{Ecv<hy9L1S-KCB#6~q@83V^Vx%L((oYyAMR;O!jAY%-Jke~Q
zKR>KfTN`I@nDiAI1s^`K;5IL~z)w;`9ug*f7#M)E@xrIL5ptO2n0OR%t<=7p(U4#M
z+tc!=uc^^$u+@_U*A8t?POp|=47i0pO5Qfi57ZE8J>3gbl8{Kv&bxRfSF41~@4uNH
zL4sA#H1`_;+3t1R$D``klcm9zG>381Rom{GPysb_8_ArI)#Iore%pmjZUhX$mXqt6
z)Jr)@oA24%-tJKweyD_XD50E?rUqWn#qj1j7y(xthCV@mIFs=4{X8BFvg$57yXGt_
zB^9ivXCu?^hHdWlW*H*Alk4t2B(lUfYmN$Vv^id5ZsYW8+74fmIB#W5$HFbxMxG4M
z|A`MG#+Fqk4!LkkA@6Qu1+yatHnC@2{siy@S%iej?f$vxpK#JR|EE`t2lg+z6gd(C
zJb(Z3xQif2B+5rY&mcvv7-L{Fu3YtOHe_pmgHR1&zG>Tl#ARp`mD2X#3AkqoBBdna
zoj48fb^ck-1ISNE!W^~G!+D9mui4XSH!gxZVg~+NLh5Ut^k^!o^Klx{F2AiTh}Iny
zg95g)_3(%xE{b|W_xYCHGaV9=t5R+BGRk><laur+zEotY5#kau{hKk5x=Jue5I5!j
z4_WUWj&=WsjcX7}icm^MwrCOAduCI}NVe=q%19_QY$8I)3Q>^}B4re^$%x3_+3Pv4
z`#HYP?~mX8&wU)-Ze7>s^B%9)`8o&uD)L<go7>xKs1-!$Hku)X9b%P#pkcwvPfA8c
zabTF}MtH_K{x+FE0iHH;T7D$d;ctHLPdp?^O0t(Vx0q4)0*BdtkVwr}_Mz_a|6=Ww
zRIiv}Woc<{_dU@i{Lbf%prRwQwk`ILEVrJsGOiZhWC+at@|r|IswY(Xumr4nCI1o9
z0eeopexPA1O-(JMqGERH6pV*%Z!!fDmp#41F>g7v6=@sF5JAdZM^T%al=MZsU=LTM
zOJh@$PkYu=Ka!`QTNuB&p@%*m2EAr(^$=__pCSYnat3DBsCT^8{MCUkm^k3AY8tK+
z3iKubH%)keMKIw5DbynY4BaCMqDG3rGNh?~7aAMXeKCWqC8*@f1L7T;)7FVx+7F+{
zzbbzC?fE%B=aN7QXwPv#sDKzm_-kqd<>)l@+oLNQGCcQtH!876c2Ifm;R3P>os)>?
zs(+jB&Q?(gP!H5|&+3Advgz2gej&CEF?A9i3!=Tr==8vB-v8kVdY2<SS5mEiR>9TO
z*?omm`?V~>8xH+ODi{!(Q`+pMa*v}iiJF3^Hy@t^oZJ+Q2RTJYG(W;u&rbzC@UFu*
z?!o9kT`dO<7VO_B+jH{rLdx7+Tws0@J{7d|T+;2s3)@guDuNMK#jZq&Qb`J2)k)?`
z9LZfDa#4X$2eSbRk`NUX5~}AKKzLtYrgqE=!8{-WDv1~}cy4c6Am?s~&bLiEOU`ZV
zvmXb8@cTEq*%K8zxscA8t;|e&d2PWxE?qCb%BH2Ol7T*}_w)&vCEE;?*8rk|+~~y_
zlanH)t`jMh0}@P}oF5Ut1(hlgQeSKTQJlV>o}T+CCWwy(y|c4#m5su(Rucc>6@Ij%
ziqHqy@0$0k(4tV@w|5ZF%#4MUx{jRs9P4@;a&!>SW+&ZlL%V)fj{K$_THJNm`0h=%
zROCpn0-Df82#NsnjkGE-|1*`fxw*NW9YVzK_u-KfG9SKwZ)<7UO{>_&%ms9wRX(Dg
zP{*-K`O1DCfR$>k(Rk=fvM)gEj*8uV;)?97OpwH-^OL6o%znPA0W}j5e~aMYqxJof
zSaBWvmpyx;OoMZCbGJ4qISsq=_428Jp+%;5W_Ml(%NT+TXV=rhH@?({hJHMwMZCq%
zkVSl;;^MW*$>V4gW5Q@@En7?-97xQPRu4m@bsgq+$YuKiwH+eCD8niZJ&x5O2qlP|
z?-aq|e)I12y@=P^LBa#--lu(t^)aP;DSaI1MbDQndL{5PAo3!96cZD3cP=?GF%ejc
z#$AJT{P9~T-4;i81YCwQFxOn3Xn&{wjva$n5wJ_Q)|c?ow$bUJp1UOCgT_D|JoWo8
zUi?Dgu)Z>Df(`|p6)Y3VOsh$T(o@pYCubR%`aXs^DL|Ns67Jj6<F<Bor@hG^t8-sV
zeKW=sOaLFkk0vqwcd8Nd8t{Y1+J&^R->_kXUiMs^COi8R1`#!}=IYMQB0$hT!Q2)1
zx?3#?d&YKDBpumT>0UP9bE-b)I(Ddgl)6LZ)~!YKFj9wZ6rrLgJ#*yvpO=us>`+M&
zT*>i<5j=u%!WOKwG5PjShox{)QJzNZ2}G2jxGpBx_|d}0Wb$|D8IYh^KHsOG(v|9N
zs}${WPGcdSk3st!uK2%C4A%>AN~+l3|H#zls8Z#oR=w^Yc`N8RJ$>eM@axx>1*gWq
zi?RCt+ygKh>=QCOY4%>cXtHlLO(}wQS$>`;<4R5y%<kc%c~CXO_<f3AJ`0ipVXol;
z?{}1<WiBHR$*3(+b6V7!$H4R;tWuVH4Su(znPg<lL3;@!5$O0AVS<aA{^q)Q(@UBv
z5+AuLnCSp9=k7B$Ha;hM^LM2b<a#?R18k@Tae5q{PjVc{9rPrpegBQU4{9Xc4fn|o
zHDSbpQ8(@~C~{z7KwchDT%y6O;w#AsM#6WXn*L1TwO^mJ(+)NUM=D5dE`2evt}6Y5
z6L8ajFwVdf?LaEi#aanfb*{tU-1w`q5@8I~1wteqb#lr<M)4EX?~-1-{QXWQaA$d{
z7{@{27ll-wPCT!SJ_&tt@paA)L!A>j!92^7T*TOW^SBKOEBeMODsL@L_E09fjyL1;
ze>l({nxm)!#}AvVX86snJ?rYv&pN|Y8!GzRmtwp2{ocCh?|H3IUtJ(rTP#cC83!vq
z-m_=%at5VLjSz)GyVVZk8H_s~QXGeUKaD@@`S=7QILpb2A{Z2z9rOSBS#(^{`TRK<
zg&pA<c1N$}Wdv7?qql~Nv!?$q(Da8oigtg2W!8<8G^c%`e0p)gN-I@i9|b)M$<Z;9
zXX|Tg-#oagkjPjpZ}LX%^NN^m7UP-Fqg()&Cz69I1lPVP2r6rkSEc^4;J<QajWR{q
zAApst+UEXe^wZZ!G3ya9uhl@r;CTyWeSLk#OD?WopTvSJa2%WuOs!<&E8S<%QG&6E
zvF)1abt@VG9&}`1vF_1pK=Hvaf5<x=#riUKZ<)t5l&`0#o};fJwJ2Edr#B^>Zu2R5
zd2~mQDo7o@Ccvp4^bP~ww&39}VH-Do|DAie7`LB?8fQz;F5dmp8Gt)PT&KDQA$UXe
zsnmp-GX<k~0YG~2sWt9>4aRIyz`B_f-o1G{8k-nF*)9xo<>s2OFvum*V8{<5LD(b8
z*++{NVCi6b2B{O5d$w+Nq3d{sbLq&@mb`)c&CQ`u1Q2QiC2GB$>wBI|ST9XPc?;z|
zL5xH^KbumLv4eQ526NH#*3)HHYlcIXH%{DFB2{`eMm~M`=u!BDwEZsgxFw*gfl~@*
zar1!GE4Jg#41M|g;~K$6=;qB*n^wy(J+gxbp$c&R`#l!0HztS?(CZ{#x^;W3*^~gz
z1w~u4np`G1G%+@|S#{}xSpaMoMN2OphA#zQ&k=vn2yji`w?8|?JXQ^&D9mNP_4OHj
zp+b@Q#SjY=9Y+AQKaQ$5I+@BacEAcLw{4#Y95pU+?S?T01VhzpaI$|78$B@K(Wt6)
z=Jtt-iKY4Um#tlWqj$-nHxciZ2Y3f2k!|Ux^%op58o4!GD_~lc`u6SHz)rA~mVlK{
zcH~5W7L9WT<^zj}PJa8iKIP=elY2-G)Z-!otcz*>3@n8J0|m+(Hg<Gi`T|8u-_>+;
z+*}O8uF5Yi_CZA!V4FFxzI1%Z(zfnO?EkQUFdW3Ut&QoscdN&r2d7Ue{1~d!v#Jtz
z=9uDlV7CJX3QfB{KzcA$fJOwZ>VHoVfg9~j>FlJ;3?$tJ>VKhhbWFsog!#DNgYYL$
z145lDr)VERigRoa4NI)^ME=qDmo{&&k8Z6~0Sat>&4lwW%eMFWuox>MFL`wK_XO*?
z%>CX4Q8Dfx;AelZ(mw|OdsLUNnL@}jMF12VPCAIlc3_jhukQJ83^s(kfc7O^hDlX@
zU`qfWEpP+uVBtm0zUeXdo0;>yqqDbOq21bOQzM2Nhy|E|H(@S|&XSscT{v3<=pWD`
zKwIt`IQ|_2-@&Q?R51CLKMXR@CLc(MKM_!Wr>oF@15>%B*?~NWm|<8jHsF&ax}O_D
z1yywJ;8I}1rvjs*b}qc++=>cDDj3jtY_2*7%9xp@9J}y(1YNt?w?;U2g%aFic1d+1
zPEVxtA2uu8AB&jk0O70Qa&7sU&)L6MbqB{51%t5YjXTyb)L8HCws@nF9PTGG2t&=C
zjaeTSUn##@)F^uIEEAefVr9%WC;x%%#h=zoo8X7RZYcj<g9cDL^Atasu;=RKjECR%
zC3Uek2CXW&5PdEBV#gud!{6zxD6UhN{rv>BL-yt$uEV%%IFf&OZ)!+gxzeG@5G8%?
zugXA{?@<JqS;2<xJYr2uO?R#7yw8Zx_}4F^cS+cNMkhsn35$T>{OQ;~dn@+U%TCBe
z<1t<fc3P67rl!6WcMj8qu1`*b4_=4+J45{@C#|2vWd%b7(^ko07=@~X9ty{m6bwnT
zbQ@UY;#pL=Q^!GvULJ3Cue|RIV(vuuyM0ssa}qc$p>0DN#lf0DBg~Y+rhyF}vyt#G
z2ybCe%4s5Q!C?HH!kO>%Q^06d4lpqZRXeu$J@%cGJC;rLr}xN}3XzaM#Wr-Uu$s{z
zU+(eWj9$EvWUTK8tjAF)>i_`3Tek0dJC7ffXB2`?Q10;+Yt`q-rVk(=!J(^>G*|NK
z`jFTWGLqn5V5w<%2P{kSC}Hxf`9{{z*Ckssh1Odhc<r--@u3Bancj-Hi}v22cR@rO
z+_gAV(*RHgMBJfo%7+$s?k5~d47wf=D%2#BWi<Ce`c>%JA1_}aGYa!m59Ib7c&M8l
zeMbAWzlOk7=&dJ_Z;9(0bb;07>5XXKsPR28Qgxl_9l3v>Xy2nv)b{EIVrqG1PaLA*
z@2hmcx>fo)v!4;aQJaQojfu{0Sv#j&xBM;<+&2@&FO`<wOM3kQ)6njm{lWXIGXLY#
zxZ?t)nX-&y(1dAqNXI$=BAIQuCl@i7)3637Tz13}$Jkku3`(URBp^}-SD+4-_L|2%
z1@c!Y{r9#u9qyJuNf{UmEN`yeIy*V|1$(Qm(N55zmnzuMum`uR9X!;49}hZWb_8&5
z1@w$xA0~;YgEhLf%<W))7Ix6H4bxq)pV%_(=6Pia;mivQ8Gw1)m`<FHwgf9Cj$i5g
zuD=dtm1iqDfgFMTByk{Q`2n^9pTYY>IW*QcIE~A?K=u9k<*ZGM`H^fuWmXN*W&`E3
zVrj7b(Mf-H;}_-r{eDZOvO!woEf$iQz6)Wy@QFHMx&*ir<2JI_vp5alXkp~FUKf#m
zXb|Ji!P_p}Snwt-JD}d9O8M}vLFa8!H9QGfTnxoPz%l#!Bx)B}Bf->+;yU%DvPj%n
z1A{p48SM`-A@W_D+gta95ax1MImIFsqKf6^HH>pXO*!P2H|50D_WdcIBg;cP6@J^c
zvo||V11yFVNxIPP*Rq>HA?~H2f0ttmVBBGRi<IBM7!UVZ8;alkD<7;v&S$q`MSxGR
zO99LmP(xVY!uI>PZ(cIs6?#VM>W7g`VuL!pFw|#0{O!rH-t4R2klR;W%*9v^H~RIB
zeFskV0;<YFqV&I&6}tMS8oxi^nk0`wnLNKV>Hg?o%_oYn(NmpCO%mb@6pw}<U|_Ux
z^XF?OoKjW5W5Jm`G5!;<F#O-cxOx62JxddIx6d^!&QB2ap!)Gr;Th+WisyBVXJGUG
z2jRTeop|)#hQ1M3h7DeTt#EUoGfZ|Nn+QK!kW8YVYY0d#+xldC>qZ>ML|#l*ra)Ko
z+&zgCGBT$Q3!Gh{ICg%uD&Q7Iv+@*2ql_3C9aqy=N&cB*-a8!MceeArZTmXt1VY(3
z|KsMzCcIT8L#31Qorkk8W>UY2wG6*3d5i4HJpwVzsFc0O5TEOW*B!mG`EW@w+q-DY
z=~QPANmzSGP5RwU<%{FSS*VqNLoS)~Jr}1c=_QN$FE}soW9l94hDJspwSvN-R@Q=I
zRq`G2)L_U-vFLM^WwWEBCI~x9{`X*eY&z%2UhA`C-$AHQe{nGl#w&1Fmgb=h#&otA
zE?+y-<;$lw@tFg%&IlXC1=DP7x9+<4$DhncS?~m41{pG`jRved+~%F|RD3S>v+BX?
z_&}}$F~_ad>%#tQ)c08bgAL{;_=>~RaM7Iul?XmuvXju`r=S?(@skRB<@K$*yZGLU
z!$&TD73L2C<TSROxj7oF){{U<frYi{<QnE86305fCjCb*bS4)4C2o0|DZ=Qo;Vr;x
z@b6{>8lWP)o9E|J5}vANJ*2pa>8}baLlQ9fXqG3oDd_!JN#1u`yoaQSP}82fu{X=&
z%9Wj>f@N^>p{y%)GJRuptglQz^TkZ}I~C=G`}ZqxhbI+Yg~xv2dlVa0&At>%a<C`G
z`F-^&HN<(rv|e5OOxh?%Q;&_JUqIULt-&gfd-u{F+r;qoy;Ao>PTpl7{J&wP85Ytj
z@(0lJ-46UtAVskqGX2p2>T#M%%%T3zpLdBT2)liMX_R@l>h`WEYtXK?w;tgJZHm8?
za!oL8{UZSQ3@W1R0O4KNVH$`-Nv-(<tx`CV1v7Z7=zs42{MFLpvbFxSCYa_i`zF5Q
z1xwl5oyih1O;*a!qR&{$JlDwIr&m%PJRIPHcXi8JLa$5XBguiWkWff%B%S>%sC)xj
zZcw@W8#4t>>LVnLi2Zho4A4xGPx7DX|8zW!^32=6BOs|gl!iX#Vth-X{R`MzBS7FP
zz;LL7`zv;cGEVzfxJ}X;*kXF|^p$VLoRrj+Z};CzxuWhHgCNa`G>U5hrc!u_H=C2n
zHAwzhLdDa7{?%fCq$Rlk(mC1r=yi>m8R0Jq%7=}W6-VUl*h*ZtD0|fDC+zLC&gd_M
zXgnkzb@=&eq&>S6vp0~{ZbqtZ@|u*#D=O}OnefFVWr}7mvr+_TXS2WDhhg`K0sd-$
z6!X%;!q*Uzwxk20h*1GWg*1(~uGn*}rR4&WGp}A1<R@awiM4q(ab6jH$X<H`($64u
zH1}Lhmaai<QJ))v&vaa3y9sq4X<BAK@0I*a^ItV^n27dcR+o$7j?&x_L8;23koHbC
zD4f8h1Gk_5WceYNv4p*KAo%E^*wd)dIdgzBOlBYU9p&*F9GV~<&9iuCv{ea_og%wT
zj(Z~@=+q6|^z|Q$i@`*(z!S#ihV2ITUhd0+>+9>_UNk};gX_;!+-q}H>CwRia$48>
zr{QhH))FKX7LK{ik67vv^Pso);QMicJq|EoV`2qba&K(JL#!TtEA}{<?$n_z*gHNn
zJp2*2+Sq8Fe^h^ayFf30@!R|cnN^fRDrK>cpuEgZ3Y6-SJox!eU~mu0cIZHZRByjT
z>6<Mj?$|GCn?qdcj$w{@j7lKC;r_!9RjTp8lGjNnPqLVSZGPnRFvx{Kb*g{DgcZc&
zj-H+pnMVgf5Yb$V=e|~WS@u#o*?Y$KJX23yuGWhha^4`{kr1>i_jC^8R*QcLGv7>-
zfb&Z}Zo^O3bKAvA(#EN1rRTNhg#L|AN(m>@>Jp5`h?$i_LAd<em|(WKI*7PpRfMX<
zd75&_-hBM%Tc=V5tR5PbUa|yyxXbQ@ppM89b0KvuaCJB__{TMiyjK}N5(=~{FSxX6
zVQBg6nHrw)Bl|;t1F-08Y`LT}1lkOd|5CxFg&XY%xY3By3*-k0{vzS#1gM2cc4be}
zF{;F91g=SkxJ`BGzl%03Ft0;jjEVkf*s}qcBVY`a+UH@qt9O=`cfC|AjXP07qzL@|
z8_z*lJR$5_+1!lZor|ZqhEf}}oP6t_(#aEpB==xxyo=x>{BU9xS!Z*)5$_&WwLFM?
zZ~yDy>*pC%%}^u%Oxe-Pzrn_THuW#u^ejgC!{fWljr6^s_-hAN`R$?Q;o8D6jyiwS
z?q9z|dJzXQ)BD*(K|yZt2)7O?Ni}AbDeZq2MjBxEMwO*|Y);TZ*)4DM$k|BdR8b?b
zim+6-$t#r24)b$|4?MBn=W9$6LvpD^oq;Bp_s0GMI`ppB$rQ}U3l}tAjnqqLVtzae
z{LWhM@XrTAnpj`5HW50Mrw+tO3xqafj~*Pw`F}F@k&w}?y#=r}wv3<1%<{IBu&<Q}
zk@=I86{7xYL-zG0Q>W`d##rU%%%U#cl8-!flxU#L<B>e~ku-$kIQ%LcU9=($5RHl#
zK1ku;&`Z3mRuJXq|A#!WE&{>ieelK7C(2CTsDN54d`#YV-}CTDQ%^L$)yu@sy!~pM
zE+T`3f<BNp-U_pSQPFY(dQcpNZCYfXE5IMWed$6Vn_bJ(j;)w8i7=&QMmH>I-*e=>
z>}wUP{fTRf6^(9#f0z3ViG0(`4~gpl=l8v{xU>{7EzS8j>j&*&SQ-o6TYe8y`0VV*
zJ#U$$eyslfyoaDJ(}2OW!8D~!4@QYNQ<+ji&n}T4i{lDAz#zQ$c-FX(kyw&*(@Uc`
z(_G`N&xg)0h~(p-Og>Qbi$g%^`gP!@6xh^yD3&tRq;8TLztc?F##;U)y8ji*wQk_u
zfKL(*?0M1u<k-9V=sqi3TZ4-7mObyBO!w`D|J<=SIrF1OO0e+c?*`#m(St3H({G~F
zYv{%UGh&#OA)^=YSYXX;4JA@hQOO*+-tG4$pu5bd^y1lzAdjzB>_jKGRSI*wB6fb|
zP4>=Xen>e)zq`V~{>$TF$m8I&c6+c&4ozybxJCgA)nlS}4o$@eQa{z_eA`k&x+rcC
zLk=FHcXHzyvj1TLvZ<4iUlZ?Jair0|&k|Q#SKKH1^j4(Rie~ux49%1U*!J=A@;0~K
zuv%IAmahMf1hu>&@_A7JppE!+H|@=DtwK98tI;#m9F3UGNY&n+HXsGmV<5NjKx22i
z4mx?Km(9Kgj;abYyz&2nnO}3?a0^ZjW+c(}>YsWgWKQMWq1`L}og*`3nm=dQeFV1@
zUiqWx66gqR)w`bJ<wF&4xZNcQb;z~1zafuVZ_A^U@!kXXRs1k8Z{TQ(3?$LE{Jrof
z{{*t^-@n1M(smjTQJAYhxbw-Y95kID&(9H%l(5Fb#FHo9ti1gMzwL8c*M$8?pfAT^
z)C%`y{(4uW`hnb5dYh|5jTBO(?W(*lAj{-KZybfz7`;7p9qmtiXMNe0boBv3+2+3&
zCyrrbGX0kRS+uJjnBQxnu6v|PmBZ_^CBT@Y0(wE@+I`pClO1Mg4A0(SF@3wHAW#&+
zs{XQ<vk`V>ekCaIVw$<P)zyO>Su`kakKB=#4yS$gEa1e61&Gva588m<kabo4m=$y6
z-$of1Q2LqpZM2F^s|~;z3-XAPL-$u=UEDB6ISzjCMVRU{9`b%GD`3|p*-G%7f!QC#
z(t&@!9K`8p@V@fbFDta$xFu@iFEtd}UlX7(v39**dw^p!`izMIqBv2m{RPmR=(COJ
z^(*`rNUFaEw&K1!nHdUuc0xYulRIi^HCZ~Dap%lP^rl9V(eTE-c+nuI5Wqs34V=3^
zKj7z{<A0#ppD&W~dk8&&-x3x1;v-)13~N691<LP!7``DLycOU^r7CKdLnT);t|Z~)
zZ1>x@(h!w>*1WbE8cif-Gp&=t!|=M1VUdHMVYbZV(b0@UnH6op{;a%6)~Hf-azoH}
z#g4J_{7^fX)97eZoCbHt`DT&;diHH5P!auERsM$x-)H^*gTgF>zU;EZJXcyTFa@B$
zeXyp&^V%CGr_ZTV5_#DR?|67jPE34ZR%0c(s};vyH8?bM!`?n;CURTm!Gj08ckfPf
z)_q(_wQ8eTbNN=)ih`GzqQW~y8?DcMecC1_bhKB^?L<w|F>^A|kNw8M%}Z<kL&t_E
zYk1GeFBn=P;Opj%8#iE0X;kw50qc$TtKl4t@K|Qy*d|s`m3BME=FjRfl%zNJIHg9d
z0i&5CJzuM;48H_fQ=N)A@bnT1w}0WedgEQR(xWvrt^b6Rmm@FKvtANVR7_2h)_!|k
z+z$9BEQqb#@tY1&2{LVNCcf06q}Ndw=Khb(HUy3$E@+DDtp1zYAxHTeHO0AZ)8c2P
z6<<9tlE*`=OXAu|qAc#&OW?%~k^T4M$3)e?A6UO*^6BRFn~wU<8UIBe2k}f1>N@-s
zro2a>icy*o1&^7NGknBqVYDePYJ@G27D3sB|K3CJD;=&vZ3cQ5L5JK(U@rp(2s+wd
zUCn!?fdlMj2)7qeE*xQH_7EE@RSx-h`ag1_;v0-^Sc~6+aNFFhxOWg55pZ+{$GYEj
zVwEDo?#z~1>GOUR6u6-<j3Vlxp+55B*{>>TncvMn+o}Kifb)K4_<&iJy@JRGpkh--
zr;u#Z`nTCdx_t-KkzODO5vC*uj_RZarT{zv(FUdIEpW%|x?M1YGq~^)+#GXFkYdOW
zKOZ?R<ccl_`kJ0@3vRt;)4FgUXE~30bS=1-L)o9&4^};ciJX5^;NerrB!jha0vj;C
zAXYkinVkPTZ`+aMC;sD*vU)d5D=KPP0BHyD5Win>{a+!f8Tgd<w`a#J!uKgj%Im}f
zwmFpCJ0Q|S*{*->8s*XE3LwuyH>><5FakRku?j7~K$27n`a(3GBWPODcp@7WIRc;^
zF#_7u0Ne(Q^)q)@_SHn#DiGu{aM}lY9xvo94NrvsXx84R42}8{#qK?;2s^17+ai2#
z*>06bk&58y%NkTsA#uQ2!(HQU7q8|k{}i*I=({luvV$MA6ZqSQC3@jYIn|b#qCrC5
zfiG`oZLJ3;ve}&=JZp%0vHw9Wd}IIXBAiX*MOMy`R-uNjs<>9f2Tb9OcKU7Dals77
z)BxrR0#Ez{6A8-^dCyO*A;qhcV}6-_Szk7kl@u#dDI6sb$-aGP8wVlwwrxTp&R||~
zaW_P`_Pu(?c<yYie-LVThhkGiL<C}8*_oHZZg4>t0PJ@;wgu<ALwlAgDA3Rxb`@AW
z?s|5SFwd-Yl;?K|V|Br3Oey@%y$#Z|NAl!MUYL|#&Cp=}ks^6jaORJ{muIA6+kCZR
zV1=)*)S-9~m5j<gYXElbJ9uKR_And(QLCIHWzI*err^v>m`*YRCm%jwfBzYXJC^Rk
z=uUr_2qz~gh0-`~b1+Anxp8Wv1oeiKuOG?M&+Dv1yS%^T8h?u8)~!eW25S|2Itsgz
z;$nS0z1qPJTSG&`{tBPGJjcpJ*@cZTv3nQ0h%(o`RsQ?nM_~HjYJ$&zksGHMkmg7j
zxhC`fEUtRf2_tBX`Ie@-Cu_rGZ1po<(y+51fgB#K1Tg;a^psa1vjxQ+I~{?wA-mc2
zn^Pxa4p8vn%U)yzE&szLF^j&ErNdjWF(W{Dhs~1I0hzVDw~4?Ce<;!h%H)w@_}ScS
z&r19E*-;JxG7i<aqgyQJG<kKXDKJj&dTVM1SOURJvW8G`$i(m&!K!QDAomgbc(<9}
zZn$VrJF~oO7{n+d5A$OzE7DO3=b=<Alh^;D#vHhFY!Ozl&tagvucKob?t&QgJ&xqc
zIW>Lw?pU+4RJc&QMI;t&RFp2}EI`BX^vW?kd&an9g$fQ5fd?{ZmvB2UoV&3KPA<Xw
z1I~{Nk!agKpLW9B1px}r4R_m8v%JM&j$6LMY4FC{0?iA48+M&`Ss)j%dz0i{#1_kV
zZ_ya9&$+*Qw0Z!PHMoGQ9g@CLiJ8vKK*eMGF^x3G<sj;BBMy+%n9)#r@0AZZxwyIZ
zIAiyL;}<t!QOa`hH0H*@Df5MiB}l;o?)`960V7}8`1^J5m7{F&cuewdtbMxYjzeku
z_wVNSHjDV%1BHB9nXPWL)4r|)oemjKdZ~|~uDssYht!6ieNUZ1nrtuWgKU9{9z*AF
zZcqzyw9*JhdPoM}X_DB%<cr|hj^Vrf{;jsmh@Y-TpcA4(A-Jp8Qw*X44lY~<6a;h0
zQ|$91!oq0B))z*2{$D-taBVTF{q*&K`}R)YsAA?N!}|_@EgBv_ANWlIXd!;Vnu~Cf
zb3{W@xeF{CmMM{5*Y<q<QeB<mII!)p&;{Uj&qW_M2`3z@7wzn<Vz{p6iejTcbktRR
z>niXWe=QQQs@qtHbdl7KwH${5fqdLU907$kt$f<APop#3nao>jxiBOxpqZxdfWMOQ
zsgyO<gFmnU(X2Uu;q|BMpQ`{DK|MxKu5sZdU|5*ede8QY9g0R3;_TvL@Xk^fh!Y4o
zw5qm0X&*j*dFd9dGm8}ySE8uq0oTJZ)j_TwPIj$3m9)j9^S0i!h2o1K;Aw&|Yfw`B
zQ9}_bU_=}k<d&X7q6qby0Q@DSF&EIp7k*F;*_$Zpp?r6U79Gj6fe9FDoDu|%oaJ%K
zx-g;?53G6y6&kKwR#sf9idr>YU3W(6X)u^WiGn1-gsBYu90LKkD!Cn16v`Zud?{M|
zv-jX)Qb2%Q>S1gHfp~RZ8tdhY;B{Tt5Pqd(V&a3i=eKsApcr=oVl5FBww1=TcX??^
zjtDj5K2W96j6SS!{9U<ATwMIn1<r?O<H+Rt1Tb5LgGVvved`$C1iboaoRUVc{lZzE
zyv6dB_UKWBdF<6&HC<K+>JZ&acD2G=<~`$9$fwf#*%RA4Lf&Hs_eh;REBRScZfa(x
zWBkbnhp+J^Ypt2To@DZ*gV+++Cnjii+uc1W@WFl8Z3(C4(w&VI*-w{;%U*`?gxsna
zjh`i(so5w`q)zk^pFqi;BJaiLqXp}W@CkW=*f$~d-@Ylljto7ed4)tdYT<i^728Ns
zvtva9_kf<)e9b7b6V@kh!5j+{N4VIJ89aIV6kXu+wVryC`u@<oSM(R{G%_@ju~>14
zO^*GnwsCwEG1GU~d|zYSQbTic^}&<9JAXnX62MyNc#~*R)5gmUo%+~Mlhmzuv~+Zx
zsG@_q!)@A6xuLE_?77(%SDJV?8m93Iz)IOya?m{|*gYQp1w;46QO5d2hqam<{dZTi
zvfmivF}72LX=F8?q@iI`w;1Ii3Qbt;B`ND>4Jj@uvGjt_?A{15tfvL-Q#{AQD2;7?
z!P1|GC{I4v2rIt3VrN!4D!i#HEYA#P=j%TNO;ngQC*&BtSEUfQllBP!ql1IP?c0Un
zf~<$?o3P$er&V`990vY++-spO6tnHgkT?k+_^JhZ>auQe)-iKH%C3~?x!|02yuG$Q
zwN!i|DzryE|HjP1>d@n#;bCq1?3Y)$`(C!^g?f6{H>@bwTwQ9*Y{mBeVO?bYzHp)o
zPH<k!-E)!4LS%QeTHajA$=aTFI$wMZmUb6XAFM1kUBFbGJ^8A1X1L+ENiJUv@7MQ=
zUVi!V1t1Ou<97EeIhFF&8<AgXQHDJ|ap?voJ|#BhOT+H}8qT~k*Ymc(4o^fNAdW0n
zb+&OOp~%@KR=$!_x|kbp_DU1iDs65t_7~s6{MbrAain;Zy8dbl6ml-Ncrutcm=EnH
z3VnwnPT3phokGrL_C86l7t*}9?t%fgGx&(n;sJ09MK7h6>$DrNxF|_9q2b~N_2qIW
z)OU4&4Kvo1`QhzbG(c-y>>{Ts+hoLO#B`Zw@g=metqBcvb>nprNp#cNURe)ynLm6(
zc|p8aR9V;i`>=x;e6!)NyMjt^gol^RO}RrzM1+6^*M$#Da^^RG{!ExwmPm32&Hw&9
z-18UUR8pa0fOb)#7Dpt11}o#;xI9EJhEvioeG7c@1Y=BFcE_(V?DGqoYbv{T`5GI)
z1aeRALej{*mx#&gXWu_L-L&Auw$CWR(^;?9{RNDBx!{}oK+Qt4<NvULt>4o|w{e;2
zPXSjQLYNMeBK;`S{?VCREbS!LA@bKvrD<s0ynrnBU;Ix7XYQ-ZprY7iVG#*#&3|KT
zn$~t-y(>>A+);5YM0v+S?B`F-`o|_5YdJ-C`-*QVbYOG+(Av{hQI>T#N=MGIqHYL~
zTbQl=1^vO8a@vD)!3A6t6N;k+q{Nrxqq+TkeY;oVhzev-i5?-kb3ylwo~HM~qh}?>
zUZ{mXG2ipy=$*-qX^hVSsTe%a06ych?SbGQqxRyLFBrwQT*rcGcwVdTsC8;(YSpl*
zc*o?nMff9I!xqR4CR92MmIdO+>dHo+fQ^3(CCLTLO>_zhwhj2w00GcEH?yn8nYX3u
z9K0}l<*7$(Z;sVK`4&|U0M&CY!=nS97o2-Po>?0Gkva<1kFrprz+?=#IygXNd?Nj;
z0qx!Mh<YhB|3c?+L*QM{ZP<Uc@wB3OR^7Gjw!KaHPJklI{BQx&Gln0`1xHBN>?nvT
zD_#RafpU8m%m-*4(h3N8Ckl3x64!H_V?iP60Z8Twp%<9&KEFdkF~P$X^Ca9FoRerc
zXhw67#A+5%X_jv|+{Mt{jhBkuXUna>bhcc=yp{t)lC|v(#uE40*C*@sK=Q*BjX}tX
zz!f}}6OxmoD&J6_I(k|0vpq@+9IxKs+u)=ShfmWZMsLJ`uFX|b8t1C_O%pO7r~m$a
z-Jg>#>ASnX-vaQIkVSnFuB>RqwVw)m*dCW}E&uxbS-oP@#Sj1ow@yaVj6cdef<qGm
zH0!R%fY3VLY2t&nK^C+%?WbNF)8f?+y(T6n3C>cO{4YULE3tEockp7$2L#f-Eh>r;
zof;c^9(st-B@(Z8Vo8|@p7#Cmt5ipxZHq4I`EzUunmXSS;=`o3NDm$(#>#hgaso!@
zS6u7?aVG-bTv7P3snDvda~r%L`yML+#Z!u>M<SXwoh+TfUyd9+T<QHv-}Opd^|P-u
z6`u{#p=;mYl9Bqa=+3-!&~1zfHvY8^;)F;%_lLtRa{H<6d4t5uw2?|pv7zMsQ{5Gc
z9>~6`2H^=Kt1{Mn_~)tk-zyf^?mNiQSGwf6wIm4NiLLSU;TL+IoAXHkO+Kyk@0-|_
zNVwL}EkH%vG<-6|@l%v%T`W8lQW=)EH)fS~NB+iExfIk2EJ-WEULN8YWSd2XhR)%n
zQVP_~3){2V@Gp<Wtdc(?^#l(e!|PI}GGqCY?Bjb35R*Cl_wTE+2dSy7Yl$e=g!%b<
zHH>P$aR>{S&jm>O3aTh7KF`d|Z@WEAJ-0uhAS$}T=f0ocbhfKSrC`Cf!Liir+9R1W
zZhSnObA#0caVqySrH4U5K|e&(Em%1@6|=O~ISMn|j<=89wkw%jbP<!d3h8fTL(8Y9
zKOQe<_8(N(owLs0-goyU4?jPD`;v`u<Yu`!D4Ves&UZZo#EatAdyY-W<qo&G=Ua}O
zaA8A}1Sea#@AS-1IG$k0Jx@*~dC($(MK@*hTjI<Q%kNs8XV@@NZlX|fONn#s938pq
zo$Km&XVJy$wZSOer)y0-ucgB3M)X>v7F(I__xekcmdy{p__=CMhEE-Q@#yj6FXG~A
zuWsk9Mja(0y8rbssjuLRy`P^S{lT!x`&01Zm6Oge&>26eNrM0S=C|LGIg$w3)YA5-
zi%Lh;E?+(`=u=lcOhhEvv9=)r%Z1=@mrt=zau3Hv*@UJzMQQ$4W&0rYG+iocYHv3U
zIT2B<W%xfT?ToP5v~;Ow(gBC=oMK~Rvzb%;`J^`Y&XS7VE}|q=Th%i>S6P}>BkI2B
z$I7P}JL`O6ApY>BGZ3FW?Bz9T5lFPdPAUAmCcb?qH2hxOL67lCp4~)A7W$X{x@B|N
zs7OstVa@j|&d-y@KEZLEIGlVhj_P2@MA6vepdc>&7VVvLz%-uREeDqg#J@;7SFl)g
z9*2Gt9Ju`bE+q~Ogg!a2Q=6B|5D^iD@^SlD9v?3r7}m`(kh@CNCMR{QHbYIwv}%=J
zAS=5XE{Am)zc5AP)tkHa&QdjsZg6^ftJ6fp;yNg3=n=N3i`JCmHeOgj20y>E)<lPi
zYMu4&>0XyTL`2mK%X~}pkNqc@Q^<`Ox&0+)uHqEPJj9JMfI%@^a##ARoizCm;OL+p
z&4P<idAT?IN|Y59L(eDdy^z_44+UEKwevq5D|j*IksGPkE#GvB*P)M!9A>Yct=KXB
zbeF<40Yvv~F%co5=b#5yQ;GZ;8X_3arpV{uVB<AfFTG6o8n*4WfDCmX`s{ecx}H3C
zjO!*971epWt~t$=at$m1sp4W9AR5N4uPKJZ)*`9;wJ6GZ`MKSK3ap>ed3_@Fm&_Fa
z4<wvTY$RQ0|48y?#DS1hk$Fs&LKr2I#b3R8l}hk92w#EIk1#G602_TDowZTAW2n!O
z;=SdTi;p=hqx2jU?QLA7w{b+EJhEs50CXkK_|NpTfK7{FlTkIWB+$Z^H)bm~h9lHb
zfT7{tgPt&4ckAy9M`;-uR8-52B75HC<fLDYJx#qb-n!vO*{@ARRC$vnP4v%^*tUNK
z=P6tw?Jk+~3k&yDRXyO@-j#=H-D@QIV75ZAr7L~%>P+dZTQ%AOK0rF*o9#xe?5gxU
zb?I~VC3ogurGCb>mMG+0fNP`WBa8--G61kc{UMI|QiLWY%RH)e!i2oQW!H-@Uu4Hk
zm#6e;xL0e<fQ>;v8}WUuhRy_L=<i|7L!f&#Cx5!EU*gK8pzsa9*utfj6Z^$MtNxyY
zz!{!aCWUiOOp)B5vGSo4LU=H0D<luxw6I7^J+Yp4GQ-l&Zg^;DXmqp_pqK|HrstM~
z&Ly}HFlZnv(@jsA0$%E2pwNkP>ldVkZ(c&D#UP^1t0SHY#`)DE(gcXbl=yUsa>9F(
zwgaw-?|AC4QxhlwFq_GwPl%6i1FtN;y&$>Viwh<~DXG0AGM$7;DcgP|SskLLUR?gQ
z)pjN%^$`Hf)YA=0R7pp;*?1N{QQ>$fJa5j_3qm1w8z?$GujCeCDB?kN;>6}p1;#8h
zxM8R29cE<o8E+YZ*AWsb&@IX_wC9^W+FaXN+nZ^!O9;T^cMA;YX~+Z)UCEsqg#qUt
zU^QWHJ4@Vnjz#-tUXvXtcbv2wrT^C~v_+oG9YH>*GPjsbV60M#-!bvvg5)#Q@tOCI
z7u-Xl{{4b>_>AF43@#yXpnd%#16%zplOJ&vA_OINHs85e5R7#*c|k94SpWpG6ddsN
zD?7;N=QS|&AiD!9L_2X6>;zH4a@r??KS@|62-^VCicnVA7_p@7@u=n8|CsmU#SWwv
zt+zI?Xni0uSeB-d=9(J7x@Ty7A*e1-M;|roFsuqM$s3N2XKb)!qOjGWvqr#0cxowL
zIH$g)gM%?zWfSjMglH6Lojf6W#~OHGT2W-f_qON!<1bMBA*mw^4FXrg4>({Lt;s7z
zzrt6llsvHf6A2#sa2irAyYdo{EQKDfG&>yqDLyr8zyOs}gbm9*J=~ZuyhH^H*Dhyg
zu8&qt{eUS&1*h29*)c)C!cdr>j~eCUZtJf7x}=~8q#xg2{UdcOVXq!Gjk-FeL`4?n
zejc-*+((`cAk+xL-OOp9l|KFv;;p%A_dWZ(4WT+!x=VmFb+iBC%p$Oc?0;QRO09n6
zBa8@4$Qv$Qy7XzW@jjT14H+m;xFnxhnVYkk+;aMU!G*`TpFZsQ^VMFSfO6|c<Sr-i
zvVduG#`c$=hAOS&jmb$d^2mh;A3j7u1LDvI;z0YZwO<QBhBK@2ew388QZpd<^oE5k
z&^$50Lom36N1-Ic@*L+S97p7#Ds_xwm$$Q&M|j&mjq5@!pnFCztEsALXniT$Mx?vQ
zG0$N&#>6sfkJcI>Cl4K+$h&vv{K@{Hx|_lgb%KGRo$R&R)|EQFtPHMON|oA8YC0m3
z<jJCK`QXk+JQ9Z6>LX-RDLbGquig$JE@RQwruHay`McXCJMxdf<s-xLkg6^Wln8sG
zgj)(v4rZ<$r5)GskwOpSM=WhMI!wKG645F%#ya+4jv+XoQ31IQFa!8jq1OpNv!}Jc
zeQ768{NMaHf(x^@8(!qewPIWxYsaXm?@e{h1EY$IwJ5BLj;3Ac)?xVD%IqSzmMC=b
zVuYj~oBf=&)`DKi^ciIeM{bXh$(G;QE74>TM~*!mNg;DN0@uj3#K)3>y~@V@3oKVd
zkJIoPjG@z-cw4a}<H6aTa$U-b_>$k}-N}z1zXRY5hA(;}UFzT1_`~OJPdzX5h-i4I
zr8m}^?%tVegw^H);G0`_yF!|iI9Ml<6audYei11t6%`e^sJiz9dx^~r(4>{n-|Z-@
zt*y-!WOZKZio<5;3nvF=mm@qp4b9C~g@qT%LyybJ%ZmtU^w%Zy_L7tA-7D@vm1@o*
zBJ%4-&BrJmHPg2t8d_mD3C<?%H_?#K{?QgcJ2!9QGabH50KL{}yXK^AtVu+1z~n3W
zB05=Ju^}Bu*C3l81Xy`q6rBUuP-Zu7pc(&%Z+3ywKPZR{3#&s6Va$f?OM8DmWj86+
z(_@WcI>PFcY2Mg<x>j>oz{bw*$l=2lX4RdMwf4gSyk{Ie!gy-a%F0AR!jAKbg?E`J
zq0@WFT%nD>{))786;S(_(`!aq0YH1PA60wm&}d+R^<%kW(xPV%3@yUJ4v}sEEqx~1
zZ0_AFMP%=#bsgnE^lat0o>;3dJMeN6N8oUqc&Qe@`T_s!9@f&LR=IpR`0-=y_ZT-k
zSzvNuS~G#o{q?nhvx^Z7_XSl94LvcMKuR&qurXR^n8u?&gW+JFNMbY7)YR}FFJ^~p
ziLFO#zS5Uh9ipMJx3T$5w_H28dyijluVLiXq?eq>85kJo=^Zk1hyGAAFigJ_H}mu?
zi=Omfpb@Z{Q$0dOWoc_`XJeD;^Kz|WeuWYhvR72@fmL}mHWrriqN3*=jTO!_yX;f)
z!$`NVu;b#zhnrPm92Jj!PfWHC2nlyDm_$Nvz5BNbv$Nv%p)VXN&5iBx$my~uwfMC*
zM0P25JsEaGO#AlTd&W@nf{%qo+1Bsi!P^g2{fLZ3%HQqnze5#_%9+UJ=-Sxn*&lD;
zT50jVFD%r#+2a}JD;S{jkuG-Te^@|&+aC><Qz`iEKn!j=H0}sUI>;~qOE_M)&wA}B
zFJorPt5>H^$)r6$!&pG`Tb0Sg_<3C1bI1x!L$hm%ifMcg5#6`rV0^tMN<mcX`|+L#
z4rL<iBlu(d!yhb3O87Uu9DXJKdCCGb28EWqGiv9jG0&f4;T&dQpr)hSfx1C_<ZIAt
zY+E>geEr%RN<l>Q`vc$`$HKtC444lbKYsJxJrUS#2@XB%3^y<{`-6fD)1=|CvFm1L
zY52Xr-I(y>Fj%ZgNij=ESbPyzt~6_*lrtgLZD*fD$Usw6M0=@=ADzqlb3*#R@?FVK
zP0eHA4S$Auhhc{VJNuPFxm~zdDxMMQ@$m3)X=&-j;ry%po&_`oyg@;ZmE9ru|BDa!
zqPh=wq=0Ln!rFcg-cQh0=qHMwJ2zkH>o-3?uY5Z^C)7SDFc6g`(cCP)xnt_s*imfh
zCtp!1XKEy~baWJwk&&%WgTs*^=vW?ZfnkVk@5ee2^v=gsw!Zs^R$og1Xq5#pkNU@<
z_F=qQ|KBhB`0)-NhN}V~o*T_cAsG8VzumUBXtj@WTehwMxD|qFI?;oB90ta5Ol)1^
z4F6-h$97?O1NVLC2p=EKiG}MUGI#eC;10-9<DAX_D;m=XLlTrR#mMJD9s9AE#$#uT
zvQ2sj3dwuRo(=6E-o{)#_92uI>>f<x1vw>GHGy2;lB$p7Ilz(~6+8FQdSrVcH}uu=
zV*kBa6$#w6^un%P05&n`y1g{<;l0;umBNvyAN^QRKk;G7xxB!*K={(7G!bqgArR>e
zNHB4S??-o@$pBzYgaXM12e+*L5TwTZroil52MQ6-rFKH;jZQ5xk!q3U)TvU}aZ59^
zcb;pr=SOfqR#jKGi~DTYC-*b~3ud#wXxEj5`=X^BCfF=;<muDec-4~6q?q>dXJMcT
z$Fq|{b1BdoC4duUfbEUT2QwA)5O*g#D7JJwAP35%-Cm!J#~)pOu}omEyAprGl{2w&
zDg{JmjHLP0!KAq`PK_6p$KZRYnUjvr$}I_@d|_dAMY}eKBc$L)B`!`=AGH`OvE#!>
za|;l=Czp9wSJy|tak2kW&P0ggW6kwgI5PFdO7EIucXD?hcx&2+p)f!vL8sqIsC6gg
zF=03@B&7GrBA|@~^R2}RFTB~`9~yEcIT=r&0!L;Qokwlu{=W4Cl{e>6>w{DM9qeFa
zYQBE`+SIhkH3dKkCvoMjJ^g?vXPd;2Lx%NSNdkrBods6K-R9sbu>Zeb`Vkq~7!|<}
zUHjzuvw#Cf($GvTc?N@+DJv)UNtP0mR`4E!cMtP*JL@-M@`#yzn&hq+M6CV8NC<?T
z5=}tUT4NCb&~<!iY|I6icFgFH4!>jno6E;$k+OtRn=?Xu$-?EQ4xXPmqc+<;K(}9E
z8I0ln`O|xf94wZI-szwK^<0@Ta?`8dul0I$sq@mz%#8l5X-jII&u0GO!pP&`!Ogkq
z5U_!AfJW~wV}~CD?Ay@lA5(3HAf>i;PUk7^G_8G@vc9>A?@=ra-!lpuaE0>AZjDU8
zPCYS~Ir-)LchB*b8cRz{Y*Ua#!Ls$1-_q09-&*Qy3=AZN9gQ3PmUt`MFP3Ym_`JUd
zmPibBULzM7J<uhu_2FQehU)5Sz^iHf7p4X1FIY}tsT}#el>h#HU~ur20^f)T?Ve%U
z<HynJ6hUU^1K0@n;o~PyFa>w}yOm*c7EhzDu$GpKh-jEqNlD4qR~;Yu@X3?OzuQsO
zPXGN8bNaAFO=~*y&O$8L;lp9r4obiH5^a}fB~H-MrI#`H-<Pzux7S6yBVHf|X-;F!
z%#<fr5%QwOAmFv`4ycPqzvUeS3ou=8{c#>1nIK~-Z>-LnqzS)KOQ>o8;56AmfC{rO
zJ`4x|U>}R^Pe)gDC8x*m<DB}XbKKkn&k~@6eSMD!GnK(=B9BP!5w;Y}xLEd_J9o||
zUGx4FhqKD|ftqjMcy`F4`1RV@p81(l>dDm#5D?^S=%g;6JJe0yO}j-zh9-6e27f`+
z6^R$8M-gR+;j(jGcvOD=j^~$w(v_qylq1BSdJP@<w^X+$^D0)RMN-XQJUw0n?V9?z
zy=2iXx+SB3(LhVN5C6&39;M|q2)i8z$v(^!r*U(RP?)YtV(>qCSss>ACLY9^nqdpA
zRaII_#X;b(n;_|Xx>fyAf`m^wSpO3Ne8|CE>b5!s8Z~NWXE@~G#2&Zo{DDI@H8k{4
zoj<HZzui@GMegcR93Yqgz(Ut;yhS&`8;vRy<CtxZ0ptZq`t0>ek!Q~iLV6aa379x~
z7uVg?1o>SBiTU|qW%RhCw6}Rt@WK5%5qL7C#AaoCyY9IYgeTL@LQHf&UaG3H%tHlD
znV|EK&(~*Lb|9I<Id1Duh|j@8ze?OjBRI}%I`549y_+)bxUi4$-*jJT_5wT1A^OTZ
z6iR&O5J{~y@!j(_WylanbIxvVn*E1JKo0i_zWkNDo^*t`E(Y<-=jP{~0e>f)x3K;E
zfLJAJA+jaDZGHI9I2`!Q<Dk>QGZ|SKh@m*SS@%Z2Vs&*D-bOgX^vLOfQ(W0l5>Nq~
zr+i~ZB$MKAQ{ql`9=qZz9__E!l=!yg51bGJfxT2Ky3A>?436~Zu%1470<DIFrKN*~
z1)G=m+~-FNIA^?iY>xakF*P%b0s^|~?DSG}IhHXr)=bG>qXpB?V!Ow?aekwO;LS_|
zvtz+S>m`cc(N^_+Uu$ZVrV)!4dmd7o2SYV|pl2}QJXuy8R1~*WMk{AOa!rk`ST>(o
z{iH&sSZxMIKRJ5&YCgF;MpxFwQdtCexRjL2aYR~gEc3?4FH9CS1mmk=y|O=hw%l@O
zs;drk<+b(osor8iQBepV$$|7lg-{H5i==ogJ`@+XX!igJjIKY5QerAERc8*y40I<>
z42|o*GAgA#cyKwha402YosMtn_V3CtSYgyQh7AHe$;h6^?3$|?;L)|)R|Ci`03RJY
zd^pxtA;<VrU4MU}{=0|D_1_j$Uu=iUy@-viQv-cJ42b7@_1Fb%xC>)|?>61@6pSh?
z!rbdpqx=<d2i#+1h4i1ol@KiDt2q<bK<)b=mQqvKF@8nqdqU|)yY3cr@)cW!mtT6X
zjhK(8S~Rei$nC8DiT_nJ3+?MtZ5TCns@8F!CV3SRX>4cb>b}P=g1KjBYRb&$W*!Af
zJnJ5eqyU?T%d<VI%axG_ozJx>F4XtxrK5H@6p_#4;1GZ`Ag;VDq{=p^s471=-<w(|
zQNf(K50+lwBWW3rfvWKari<${9|{YX7dJQ#y^g~v^t)(4jmubcZM&zjk$7`!3ljY1
z(v@GB7GCYt_Xg>58f^@YeE1*RX=sFAj=sGF2rN`}IPdv~5A7)m>S#Q0qfvPG{j_75
z<hsc-dHN>b<e6*9z(6AuDJmPX;lnkF4kdGY#n!^Y#?g_(W-!71ZbNHF&I?deu8?4Q
zz|sl=v~zQkJI2c3vt=)%MfhOV<bCbh3&_7{xU_`Y4cE_4NF}D0f4WE6k*RH@75m`>
z=%kD7+HJ1WpYFOn3l831>a1CicoTlYcW7q7#|dP{XAIZcGquf{UhaXMH0+4Z8@({R
zsL7J3v5`Sdt?AL<pHpDh3ZciNe;0hVTQED-xyIZLN$n))T_{_&zcE(u)Il*byoY_{
z&q`heUszNBY{dYGFEd(_5&bPQoa4#`@!<>SuFnreq2qxs=Be(fp&A~T7wB}3cE6jG
z*zTI1Hp;SUYHUe<Bi~~bRyTudmeBUEFHgfGG%<43JmP{$yhD_Z7H#+^<c>PWYP~#o
zw7Jys$4;@od1vl4wD=<d%rDsU_OY#TrfX~^oYvQ&x9C(7ziM)^;8KCi-Q}saJd>tJ
zl(@&YwCg+$80uz#Vi2xHh6oWiNLzb~W|LSes&0d5YmUpjgv>Zlb`!&GWA6cAT9BYc
z-nGBG7Qn?dd%4d%I{FGqs&pN)TZ=nqT4P`AL{zmlzG}_676L2+6U{R4|G^%L2W6yZ
zd-<0aOp3u6j|W-{ye4F}eB+sUt<IvQ1wGS-qP?nd`@%xBgqXAQyrV38q<cPa<g~N^
z&*^VruW;yQ-di~+;yx2A;vTm7h|MDH?vic&%651rdU54sl=2T68`aLo>QuA7P*Mvu
zRU!^IbzRYNaX)j~S#er*yP_je#e`ifV>t7TQjx=Sd%ZCntw2iPJ4X;zR(ygMftthn
zObsX3f%?|DInvCRY5tY3sD?o%KQ)cv-R4LPF_r&tYc+^51PrJo`rnyiIcc>Zsu^XM
z_AeGViEsmOX};3S$_aIJS^Vo3SyMNmw5BGOsYT1I+1%JDFJ=t-QR20tnb&=q!Yeat
z;Gq9mY<iScb2)P_<V7;|uC}UL_0|Q-$_tln&`NCaE3mvOu_`Di9j4YSa$smvjiyRt
z<?kN;P8SpHscV#>v5<ML;ID0fl7cbOdF399*0yMz{e5cXE+Zv&AE!*W^ivJ=3e3;B
zspBaBRUi`?|84G3EXYkRn5l#A)Klj12ZQHSxt8lFf7ux8IY(;RbB(eQnwv?_qm#i@
zv5F!$lkCFj(^Cr;neG*5&M;6?QrcYQh$sq<oNY;vYx#pL7l=9|7EZ3pXvLdfvN8GS
zl<dHT0*Ftea&0uxO0k(y^v>7=;)<<Ni4?XZZm!wyqiTCLMOd}#5^HpP_;wLhW`|yH
zF0@~KNHK}n+YxY-adyiDi)xiA3&i4j(Mbf2dU;qW)Spj@)K*73{7gZD1ke8Z)O}I@
z!Ox!`Rc{KP&<<j>9hrdmcYRvxaF`xTfRw-?TFy`tv9nsx8)bD?qjSmFn+%JiD>)N9
zOZ;Tq9t%Q>5(OF_*bc;QcQf;9rQ46DRM6nQz^oL8jOy^Aje0awE2QM7<pDX~s&i=M
ztohGaySz81zPr_IMS)?ZgBHS{MW*WhB!j+Wcw<H<(dm4*kycQ<eZi4+){***?{q7{
z|J)1AYbq<hWwK{zrL|yyvY(usPy4Hi_nAwJCm5?4&kMUGrw4ZZ4+}6~(0_37pvS=z
zLPF3Oc_<#Z*<JAA%UQQbDa9dM2$#Y7fQgG2FgEuAFLinmS4BQW_^+7~2x>lCKL8m4
zrrrMi*-z&k93%+b9Y!C~J8c<F)zyihv~;$#Xt76IyTeLiytU$LdQ5F6m~24l(QN%i
zf;Yz2jS(CnW%tc>V$b)39V+U*Da+nUsH;`2Zr=PedUd>-as$vR$F5V;dsSj`4c=bY
z2bMEf<$$wM*SPoAy}+O#UCLY!hteZSZ8Gvvk$;?Br%R-4BG+G-OR$Zw#Cm(vXs;`Y
z+qH1Vrmb7Iq?Y?<yuS%pTJY|_vt$uk5|RF8rZNj3j;ExgK&(=1(a`AcFPk}=>18S1
z(cHV~LvFFaKW%&5!iiLqy|kgNO;+&qCDkl}0_E5<Y6B`KETU%AIyeTHp3n=VIt@xg
zYP&g+ZBx(`70+?4kvVeVx^jY3_!nspMfynYM1F1(fqTnmz@yn3j$p>lC<nUTlJ>al
zQ-mYw{CIjbj@^yLrgyNn|F`N4zHXoP4;HsFG|98LkBbKWs$BYs9M1YkB@~yZ^;;G}
zzHpyhZW;+0rW1vq(ppC{ydr?AgVKfDJIFxj<hdaNI}h}eF)(kAsbV~LU$6~jGq?l!
z+tUd^fL>gbQ=|<KS>4)LndmLHpYCZlc{LUpb<)r%VdT#UZZub3Xk#MXRNDCh$TNS^
z@NLHP_^Mow$cgy&&T0@GW2Nx{xlczgqnBz|@FQ_+t5(nslVfFP2QI(3wX#t!3<)78
z3yW3>IT_j3zt#|JV0L{?iKsLcZX57fO77k9f21G^+~8!|nqllLpU=*tlEICYE$}2c
zy3a(^C>_?@`Fm(V$@m=qnt;;Ud);jI0w3FsHw&N`@LW>AEl0;i^6;U!eYiA<ammFy
zGrh3`J|=N9oMbMrNrL(Vg}VdvU~kc**_Q4to~=mq-dKJr;_jd%x-nB~gEe?r0JIRg
z;hzY}`0xpgOOQVy{(f_rOY_Q=kLVOzjEf6q!9q{<8J}34Ptna<&1_Xko1f}#MXkpN
zg8=#emMjIE{v`aIZg$v(D@U3KVYx#0S%DgLq6-46flrf(p`q8o)dEh~|Ipy|<s$!#
zlou)$=Xk_`uMr$yr+a?*`i7)Ud~l!rTzrd8K~8S62(vTb$to>sJ$?q-bunig!&m}P
zlxUTg6$J#W`E0D{7rS^l&1naDqI72zTfccsO=R}9st8~d9;Neqd}>wcM_AMLDOoK1
ztBV-scN=XK;|j1SuLD~uS|7|<&YL_+E^7-PW@hA2@N(&guFYW521tElc!h1U&})OQ
z`x2JA?Gv<$61V<7u=}|@?K2)MT<|!x^7-u_QIUJB8AVA$Z8d1~dglIw+#1$pZB=nO
zNP6cqu@&2BU4OM6-eXHxYo4?*A+SXCm%~ez6#bTdIaPX~2=O!j#+UP08EGfydTp@n
z=f36_6wvdJC7=TYbvMWJUrahoVr^0D3Ku&6xr=ol5r{c;hFU@oh^r2NzD`py)AMKW
z263i{FO9Y^*m5$n@`%CFUhRtI`agXtO%TkntCC;pr{9cG*7^LP5p7nza+FrEKh+Mx
zrC#40@A=TTFfxf5hyJSsuq#I!?HB(3h`9X~*1lqQ=H?pCa5UJe6po{%^7Oxbi-)tO
z#HQ6d+EhVdUtM&GYV&}(5r@`?d!q?O(DsTs7%s$Guqo3<1Sf`RM)RGIS)0kyOsU6?
zD|G0~lpkSNov<nwT1x=+)C$d_7JLCRavwKHq|5en>8Ui``g{7{94B9?fe*25+gwDh
z{Ie4~<LP_e6;u@zszkq8A9|d}R!7G@i~%Q}?z!;FEb|w5z75&$qyxywLl^gwkQ5hx
zY7vte@gZF+#qj3;q1JArVta~p|1TNDvw>$P!D?PcQXZy{Cr;Rzr19)258GAde`1^O
zSy0f^;9%vIulKbgBbbs?do3lE)x*EIcGA`PJMekwPf1<Ww$(qcpT!VWuy&5hEb{89
zZ00SM-`_Xsm>XJ*Mzs|tT(tH^G@Z2>Rdol{0i0P?E8%xc&C+*s_c~j}zVp)~*UlTn
zPl?sV+FZTXV<9zeOvj(XTOT;p9yytPjr-vucp(W>IfqbdUjZma)PI?Zx9tyiYm40O
zAnNgs*7K;WXzzuFY>&%p+xRT;XXMIXA%9XpW>X~nAiB6%M!wamc{_X;*J5AP&)iyT
z=VJj*nD)3X-4Kjv8jN``y1;>7O7wr&d-Hgz_qT6Ug9asSLxr88EVGo9Qidp5iwuhh
zVJmY<$(*4Ql4M#)WeS->gfdqOi)0Q75i(@ROosDby7zfr&pFR|o%1^9Ip^Ge+`oVJ
zZ@1H0eZQaKy584&h}B%LK>KH%;96eVKmSkh>%TVP%iR15$;J3arnSs0EYtAExn1@y
zTF7Vn_U*fN?~dQ~4w#IOzKH2xt5A4l4Ms%A9ft1X3>}in(9iA8EM5NO2J7=NaD#PR
zqGLRxot75PeAo^gw&YTaEd9!!)$bBieN<W+9p>rO+v1Wfkmlohe#)bJkOpGY^;)Z`
z%`>ps8RXk7q0?7!TANZ0@%ui}pL!_w^m8nG1}sZW%JT4`mC53zPY^rO4o@l^Bk->H
z-jJBKd9z=b$ZyF@pX-{YVkG}!XFmisKk%xZ!rCuP$_k>R2~9Jn1J|OBAiO2(#FD~D
znAqsFV@Pz^W&wYI2(Yn+>;5|e0F;u`8@kIX5>t=<BcBN#y>R7W?M=7-eh;tWH95C*
zkI^kY#{3>`x4*|tViTU{TqH1(rc$+%Tr-WLFk`?SbWK(DGE$!bZCF6G|LIt<|4t`$
z5(!x+ecvli01$(srFpRN2ZX&T!zPpca&Rf((<&&~asI`(S!h5+gnsP%6!}tlk8xLt
zjIeG7&*sUwUyThJj(uY*v06!ond!mv&vu<I*G}VGs-A)dYcHd@l<*xqNcnvjM!-6`
zt-zrX&)D@wME0v!jR7IfdDnkLU+MVrdyW#86f(@Owz!OOAcjWX4Ec~DfG<LsL0`~S
z;9voJE$HGWw5`2B&bMh!_0w;goS3l0j^6sZaHq%Ie)$U)?Rhn5&CSfrgk*pnqRo|*
zmF*6cb5xNia;jY!YUTtvOnWFuLIs}!6)W$w5{5huVKA@AyYQg^00l7LlP3<xD{SiJ
zAs-ButD5*hUSlWj;$1!bgn^fC@%Q4QFigsjV?-=Huz#GWs(L@kf;gQ*S?|v#0-HxK
z?Mc!JaSW4(Kg+eCnGFmTsO9J5TTd@@wt}=-Q_9Sb`GeU7_8>J<xadAB4IA;Zsiqnl
zFSL0Qi{;k{9Aae9BN!MMbT9++M_`QtcZ@`$$_>FvkM#;XN&88>U5!HW89TVS#WN>Y
zO1`b3TS>*q3~ARXhMP)CE9-APe0Xl&>$3UG%IR&7A|r_xQ`wt2Rg^!dyZ2T{BoRXw
z`uoj?&Mh6JgZUtqN^^9gh+(0ssPQHmmQ#2|sY9@XnV<^p<F(PRiQm2@F=TV!+Fp60
zskXwWAe1R6G<d_BZ@E_;9TC_7Q}uQSPhUgBsKmRtmgVTBsh8390BLz-tz?C3C1g9Y
zbrfAH<-eCt<78}t?J<*sR@G1Pl$J%l(^yHy(rCwTjH+j59Pz3#Z^bM<Wds6M^%x)J
z_=OyubnCH_c7y(<kym{}UA%j4fLZoLK@9mlyCz>T<v(`o<ITK|r8Qol9E7P8z@bMA
zO-)TX<iv?fEmyW}brbb`>h!afuo<jI%6(xC9#0L8t0zy=Aou#G-h^rp#)Tv#gn4;Q
zaI0x0EsG9nj`R-HhXS;YsND}*00_A_<@*xqE0TV~;0186Xq!57{6})GHGwcM`QaVl
zB@`bNdWf&Eem-{;-woB0%@rXgO>m#gG%|emE*iDa*%ODqKb4Sw5bGgvm<Wc7fae2D
zFIah6f?M+3QuiM`7#blRxt-2v%lux9_J>i24C)uyTVV%&L5v0QsmQrHmp3<!hNcZM
z?%l#>_j{t63QLYOt)v3hQCxvy>V4w*p<2sVI;01d@8ieLWnVyj!pS*|s8LsE)(EA+
zRP~rExXBGlJ<`0ry)!e_C;I~^lyxV&Tz-fRVj3pYpy(I!0V1rhA<y-IS+EP17blCr
zOsTrhkR70T`SSC%mgIl_33~k4e}bXc;J~~O=n|klF0vJpZ-mNaUIX33_ddtqr<@IT
zp+Q0WU9zfYcTZe9xwP$^%OSX3Z`+m!5{&gbZKEe9U6pi3tYbY-_L@nRD?de*>vAIX
zZo#Fp_x%2$Z^H97rVO^VwLM#sArb1nd?B@XJy`sFpLV6G-+k^pE%jg<n*z^9;!)G4
z_vj6lKau%Pj)s!CRD)LLjF&vc>2AKIa{tJ&(jexKTBatY=-W??na7EDObPPU3OaXy
zUZxi3Asa4Un_#!cxE}L<A*!b!^-d*$kFhF^W(2Cs$;YymHW(7x4s%DLH=K#`x7?~Y
z2TEJQ4g`yLVjS8R7qmH8M43a?MMfa<vBA|D9y+?Cr^DBFb1t-TII~cbOogIRU+SNG
zSn>WnyfB4L6^gpa)?U<1Q<t-87I8rv*3eb*9x-LD)U%J^4BHd8_4Mh}zP`R`KUkQz
z{3;KQ$T;5f{X5?}eSLkqYnpU)b{uPYgT4<)#7Y0nvNtB_Vp-YBip0TZR8>}<)As_^
zHONo@amzk(ibzUvHsC9@CVJt{+K<yhputRGdQ-#e*ROlkKVLhLm35$;s@h=mn!S>j
zIh0T-=fb8!)Ub=y-_@%ifgh2_kN7qi+G{)M#JNsu(m1I?a?C7jJiZ5(#ix4?2ph8U
zF@opcxE;GtWr;3|LP@B;Ba|EQK7o}~mG0b(gQ2lc#z8*7TgjCbc;6)LH>%C@8W4p_
z2cE{R?NwgL(kP|>^HJXzV^>@r)qZx?8rKK6_{Uz1Zkc6G&@R2X`C8+DR3P*!U@n6P
z!^WevT1b5JURoFqfx#UgAD^j2O@V{K^5XT(3Gsq!-}8Fq9i00=&g1YuyY<J^;Pv|Y
zdXnR#{U+A(^05=-r|}m}8N+l#9qGY>vHM;w<}lZ8Yk|N7U8><G+D-MwA0uVA@oy%`
zFU24<qn8hHWsQjuD~lHA<|jJubpts?2;F&VO0>)t<5ySGE?9<Sp_hKvYn1;(I36G|
z_5&^|uvMWwLBx)6LC$G7AF0E0?GxGIUo7DJh#|=ah9tkL!iH%x_MbnSif{OWA!pyH
zq7x}|!vt17ru&vWfLPp^8$W<yJcb;YLSE{vRNrS*WcRZ*1sj#xienleIXcga?AtbP
z4s-pE+ZBB#oVbSfocfx8w#gr$6y+1bHQI776^a=+LRqiGg+Vwhj(&)jE`Ba>I2Z{v
z>t*yq%$GsIKvhG|vE+?}x7d&7WX-;@Ql<^`GU;d2tV8*y4|d&wMI^>lXC6%zPwAC<
zq}%^)3O<AoSIpFXwpQ;e@K`bjQrWE3wm!1D@#V?d=qS}Qp=FixlM#S2P#}MKVPa^=
zWc5l4Q!Vria9)ep-JEI6B=zdHi0+lwuG2obxo00AuIU|o@7G1Wf3aM3sQs01;SG$0
zR*t()oxFVc{D*seG<fycytj_L11x{rcqOjl+atQN>gLZUjGTE?wKTn#B(O}Is5rOn
zfc=k;-xWS9j9~JU;fX~@x8`L`xYAI83B-1TD1?+D>pzqsNL;M(2wSvjWX(UGGh~NP
za<2=rL&N6p?-3LnXfgf~z%l*7A|?PpdIQEw_VML`F|nVX%A%ThhBpo&k)1+Ywh=Qu
z!S%!Y_sIbOUEx?g_4?XgzFWw&)t1U~D+!Z4mz!#vDk(@LGOMgC7k9cO&31Wmhor_!
zmRAUzJhe3GazsdoDB%-Ao_{E}0{Xxn)GZ16hq|ClD1ZN+)HJ^|+Z=W5RTwEYGP2Ek
zi!R?zDuePrH-^*qN$8rIYG1f;`{Oa&PO_gPv*^;IFvbSjYZIhruo*&*6Lv1m|1d(^
zA9?xqE=kLq6eFLl^YVN2l-!4K2y6L%|Nb51j;3;$=So>?)AVa0$C<cPM^`|ZtqxDO
z`TYECQp`5DaULEN!Ak9qDU`q2`TQ6;XH0Of&i*{g6B@uJqx!TTJuSLHpKVKZU%xK;
zi~EqI!z5A?>H_6FX607qwf8((EHSdAw?{GB{_M>4`BN&dto;*Ccc>M@RWj$vF(+a}
ztmHPX#ZIhej31vDX>R@7=!~i=;H-=r!f~HIiaPuSTIE5MG{}XOxz=NvsyT6{EL@EJ
zvrA*tFR+B=mZm1bs)iz~4OwnDW;gqSGS+zJ+o;hLqyn1UunVD4M{er!d=MdSBVRzc
zcDSkC=+{%Z9Z0W3GoPwRX1~-`lK4eX46PypwzPrQkf-;Wl|MT(Tv$-RDj0;~Uz(Zj
zp#IZ@h&y-Ir&Lp!({yKFBA@EUY>8^-J^)DMR2MicMYu+o9#&D=LiH_hS+_3c<jIpc
zmi3jNKIOslku2S~yI)ux?PEg0xu++yfXtcaY!;^K?-1%;=gIGGt`<(nExAn}1<G#I
zCSkvV^GC&raUlbyej&g3HdwqUraqFgrAXOwwUPDCZmxZLa<kKBk8GVCEBhm+kqI*=
z5K|=Z_5^=uOvq+qJaG|GL+Y}2;aLMXqG~xk5>+tTK(c!wCw8f?hb+H?uT-OBxciLB
zH$^4PBtgk<0CffIT`)ax8us*^T>zuDP3V71R~0Nh-jSSbR-E|eT;e@r_<=S$Mvvad
zFqd)57HEL)yu7}~MgQ6TSxn4uh<)$=Rl9Tl#M+6O!@X~5Xil9(iYT$(7A=P<3>pjJ
z?-Q!QR|eqv+^Z}8+8GJXf@}hQ8%Yx<;%@X>#49;8&g{*qq6(EtKfwrDHC%AbV0YO~
zTnEYOiTv!$%st(jMab%+VMF>)DD{9WqDHA&fWOF9q30819UL7S3?)ARwcq_BH`mYK
zzt)n)D7p3{^|t*wYp%ww&CJD@FJG4UVuUk^xz_&ebMu;1s8G12uH0i~2D_gp3w%oQ
zm5vuCuwa!^)fy0&5)ld7ycG3J=L8~tc$gf1RHuFcr^1$X-9`ms6>7?`cmF`L1y>Wo
zuL4sd(~>+QY+Nx}1Aq1PYu2wXEi(C(mU6%x6zc0o53-H(u;kfV_8L%t3^&JEb7+%E
zl(C}8Pb;5xIf4f6(Aw5^N{WC7H_nXVf`Io4p$F8f0UT$+cNd8Hr!R#s94=p#zO|*x
z3pWrJO3ovPq+Ml$ybvzp=B+OR6S5P!K=^ndktO~2j+t6SNMw!f((cHL2XqcleH(Uj
z>Y-o1g!VF}Xc6y)GIhd;T&*x~K}9n}j#Ey>p(LinUaFh0K<RzP#h+TrRy#tfat{s;
zX1B35HKi<TQ7<A5?PpzF7^^<G#8Z6{d#5U{bS+0TF=0uFvfH9Pf@d^Vqmgn-16QuK
zP8di0gt^2xZ#;7wvH~A)tIJwX;Zz3gq<}R;8r<!se~OEW_@t}eGjmK=@bkS#Nbd~H
zf5`%iV^Z5{BY#mt1)xCC^ac2O#O8~=%g2~fd8v55a)e+f2ZC4yeh1x~YS$^j{l|~f
zX2MdJ&z<H%B|SZ}4+M=i4E*$7?oiIBzJ1%-`0~!^6X}!$qIM8-&(l*P<c|2Krql~C
zeYzhQ7~z7*t)MRhJ>+klGM-dt=J5oB-1_EbLf^N--ZBZo&YGyga|;n>HPJ6M%p<ax
zdz%QrntXj%)Dx~<zaAWPeR+{U$mf`W`C@hUS9>Y3_%n4`xw$&(_HI{Vve_C0kC8$i
zO6w_+D1!Wt=clZaw^nxsIaFHS(5iWD)i?upAmvW9y%cxCA%jboMD(5%gqpo#6&=`f
zkziQ*o?#%=kOL$YB9l>~Om9olKBtxCGC&}@oq|54RmqvQiBRvsV)_AJ76vbTOJiAe
z;I3(g%r>nd<Ui&34|?y=r-KwfFs(*^{GcVm!tlb(Ov%E+qJ!-cu#nJu<5?G1uIrt%
zwax4-?jrl1Ia7m@kM5fp2<JM?v91oJvlyx4&<1rrV4|<MbY*$xv16P<4;+SP<RUUG
zn^URx*-Jr=f9Wu6Ua*S%x$PS7i_ikb0UQp|e$kS!%mJTCUv6=~fiOhs&Du$l2M-Q+
zl}1p0Hf_m)%<vRL2-zu^8}yOz3x0QYOutJ2av9R=vb0dcBs-AyNhD4BpEm|T@$?HF
zUml0RK6g1+ahj+n9(rawq+w{9z3;T|5aTfGv_Lsg`y_wA$vbU}A8WHc`Fe!euR4i;
z1tDy((KFm;YC^cLm(qnRp=0FCSzb|t&nkKL6%P!Vj}ao%nswz$?`7BRGyH<#ntNvv
zA!Ld#iCCm95kAT=pw4qkOQJKvSPj{k8U-?y+0n;0hxftTM@0Z;17|x0l_Hzejg_yC
zH-gQFGq1k3)^=)Og|g3Z0pl8+yM;J@8xl)BXWEj0WJ9hFR!b<}jQTPIQn`9X?#>L)
z<^=`@N*CUF1Db%3x6JQ_VcYZPpWuu==saEl^+>g8Inorav}HTg#omH>q6Rr*x1`6S
zE}O^#49hi%`BlkjX~Q?yEV1zfym`Yj@1f#CKjA=G3=6hRP*5y0&Jv*$ujrC{^Y-m$
z+-0(Ai3{S#{hjx&%hcU>W2cHc(b{sTK0%K!aT^QE#d*5L4yRJMm5^*GVj<4qj=su*
zA#+Kdj1O8{j}Xt0|89&?<sdvxh>~hH70=o{bV%1;B*+D;ej)AAyh7i_qN1%7$>Ar~
zH?)GQ;_jF%wI8qS)G$`bj+W55a9!uh+TePIfy#5#8<Ddh1&E2nFNzo~1;k&RV~7Ki
z4C`VXg(H1u^-EsYaigr9`0KHvk6X{^Xhy=5>(I)?qXHMoSM!tr*BKlZH0QD+2R}d8
z(@OQm=t3t+O>E;vUr3{rPMyM1B1+j>S`MI$Xf{z%NrR6F?EsNK9Q5;-0{Y9NeZn>u
zmHra6SqS+Sark$l4biF7-mGME%Dc1u?&b#=g;&mhJQ%fq=BtBRVQN87`g=Y<wyL!B
zn`-@58YA7tDqcQeVp7jC&$sEWjq?!JBE~Q30BcK?4I2>jevh3ur1k`Kg`^qqxD$Pr
zzp`T(+2y%XjL|yM{7y%cWX7YMHYjUqwlsrSxI^?@^0vZ)9ioN{2hm~CRTBB;!T8gF
zG<L%=)2ZB0;dIu!F^@ae?1rq(ZVgS_W?$rgD<UYKiQU~WfuzDg;|||^esJ7o6|AMR
zW%%z<+MCR~cVAzaI@(8{cnsBL(|GsAu;*YoI{x!5G^cFNX*&(8rQ_>rM4g;owZ%0*
ze+nj4Kg$CQtbBisRm$uPqy2Zu(S>P)_E#&w3SVFzZ&;XD8(N{s!SweL)aUiUbr{&H
z@~oSiDk}%Tnm~QwWS@fojytN2g-$!s{(!6&>Q`|;vgws=Ac%I*{$9r>Wa3)y?94jW
zloAjXWuw#IU>pfrhi&JgZ&;X_*M{81#gH-Oh@c>hqducedi3bg;Y*)ifJg+4NY-WI
z{&7$qU}GQ4IogtGp{zWBM$**(zqL<j_@AlAoP~rI4ngP&;!pZrU@&55qhZ-RQk%AU
z6kP3|KrkaP$07vO`0q#$D#yp5Zpj3n0rU`D-?$?hc5%mCou4?1<3-We0}7I8^eDt#
zp(fzziI?mWHX#=*prD7#{`}%3FWA{=get4fFNlOfiMza*_|~gyxG81Yhp`>|S|9-N
z0C(@+rRZV2ElM4SPm9eLNfE7Q_QRiRI$hKJmtTC8^;{mqh{=>5B_1+`t$_QI$rFds
z#_c}*Q?X5+-bbE?_Rj6R{C8%$y12~EQNWnI{3YiEx{(A;hAU?tHHn{Zt)U7TgPMhX
z6R&m|b`QhDd;3bzc`2XLtn#6imjyAb>mVTb-q(lhfW|zVmzcsSUmMH6KA5RWCX=hf
z0|*C5yEBy-<u>~^2&zQr#}pSwH8H1Yr|<=kg(;DM!jQi?<%_T(Q5E#n;Q;{-(?cGB
z1%WB*-T*yA6Qdi`3-ms3JpO#&n>Xc!pvGaY<*QB!z&WnX85I?k@D8>S0%b$zOe`!w
zb&q+LR)HG&sOwb1g7%ODFK=9JluC^02Vmx@Wx(@mqY8I%aq*TcSU>u*i-l!x<o@_J
z!gg7=UHh$@)_1(eF?;0-y;&ijoACa>|BMJYduxW1%MXV&4e*8aQNQonvEy0Z9dDVJ
zpcF2&UoWf*tvGSP6xj1L=hD(TifCw}ueY~~n5GZnxJ(a0Lin+!27;%3^dEnG+9!gf
zXz9zXTu<$J{>1`(7XpHVH5s-BC@Nv6-24h=`g^b{6E+Bz{irowSpMB6p;3@i0T-VH
zVZpN{aw}g&)DJ!~Tx$Sm&eby6-l6}a%ON8;G$2ntOfOO-4A`ZLD23H&pe`$f;7`1!
zUJw?hNhUo&Gg{<0;<L4#R*{@eeL3I*iO-+PJ|m&`4bVrq8#^+1I5l8)KwBLO-sj=h
zH-SN;nCM4Hg-|Pq1|Vo~%T_lDlXsFAFYZN!jH|5L(sA=e%>EG@_a#x~nC%!DQ}@Ne
zq<pd(VwVS7vmAE(XvkGzudAxE`}*1zEheHZ&SyM%C5eLd*Q>7Z0PYo=3m3@2d#;?i
z$7j3?K13vJrq>=z{g}EmbHnJT1;Z3GN4;B*4yB>^CG&pVro=qJCLj8*Y=p<yl{#wz
ztS2t6JF}JTX2ka~?r-1z5#c_Dssd(6l${lv?9Ro`J2{{H3<3qnzyR+`s8CQ=mRH20
zi%8eFVyLXkJRki#jd&;meD~+TaZ<OuQI20!&6NPP8GWXeFJXNZr6GT<Oy+WVeVhVK
zdC|+o%#`pjJhh(hl#aPNTc^EluuELNeM3O(;Nc<We^O0QqtUndU0*#S<>OZorvIDM
zFgp48Y?1BKM|w56L;26>7`+8?i54ynzNq#H_Dk3d$m=5FJ<#f5%1(8Ago*EQS5}%X
zkxu?fgyF5L)!}C*zz6$`bg(epI;=1#Etxo`vOF$AgMnCvL{LwzK?Y&}1<m`%q?EI1
zpD@s3qx}JuBdTnQzkiRp!`No%g?<~*WUqy$&dv-NYE^BidMq`@?fG--CTB=UpXdGj
zI-fKJhk@0PrZWn^C2|L{<%bxgBcdyB;q?=RS!5MHkhnE*8zJnrSFU7%NoH6L1p$Z#
zFkp(kw0X-GP6<=sZEV6iQ@dpsUt-ABkqjT>rew{Rro`G`-%Cj(QbTU_I5;y2T;~$*
zf_EVUqn;?odMr|_y4c{fOD0eh;u+8s9dtZ9A%9(jmV1ZjLvD@*$qwK9A)6^XP0h`}
zBx{y^@Q+AV=a%y*!nZ=T`{BcfG%=ufun6dc{mfXWEy$i`5Jtm|0JDZ5O^L<-9a*^m
z#cu;es0&w^9nwl+*?+kuL($&;{<2*ne_Nbl5>B6*sAGiy>bX4^sW`Q1H8WkM*jCTV
z<gBb;D)*~SVm49nV1zJ6<ihsohv!COBK+JCccCkA#D1U-rUn2tTfv)f(Z@I*93k9$
zjTkS&SI0jv5DE-`vwHMhnc6AY(*CA$k$9a4zz|Z7)=44fLL`9J6{M5UEBR<h!?l5m
zl!9gqOiZES8KSQsZh-8@`>pUDEcc=O+rNHMy=m%EBJs>_<f`Zny^tpHYgIexwZJ+Y
z6He&Fs>Y!Y?~Fa+wU(Y?pd7&Bm&(dy)Urb~p>vXCG$j#rb{3pqthfKmG&OpC)kp`B
z4I8(+qz2bP^N$)KEZ<hn-^@Y%3SBz}|Dc4p(<CLnzBFHhf4|k*ZXiDhfil<tNOi9q
zPF8zgdpK%n?3Q(xcA@m9fz~e~{tgN1sF5XFXomXdUn6KqYANflzq<MP`JX*o(LRO?
zrw@WqQ#VlLuXj-T`**BF5fnW7>knGi$#cg{EOd|-kGW1&zP@I>fu7!dVQ_q+&prA^
zH4V(AbN1TxGpHWx!`nyJ;cDgg;b9T=;v&+p(x8ust{N8`2gmcG*AQ{nVmH7k<kicU
zmjH<^C*wtu#^EY$A13TEG1Z!NQ7C|oPs!EU`EMCl)hJa4A1I8;zV2>r3CXRADgr_)
zDPn<K^wP(6){W^bU`ftw<Sr5q#1wRHVS#wfZgFmBVLh$Rqw77_=D__fP>w4hIy%A{
z30e<f;)y3tgiabBGt;LrOMVF}51?S3pqavg^pO2P5+ul|Z-X@fe+89eNZyY=8y+>D
z<KJ#c`y*!?$taMcE@HRxP2*e+OR`8oO*P;I8tNC2qiP@ingsvTY2?f9ojY}*dJs()
zp?#U6&0F0x*-_Cz8fz}8qcq6<X8tKk6sR^M@cY%9uh`m_I*ts@cCEZXstb8GO+UBl
z$<deT&!58>CT82@tmin`SWR2*RTZ`8EnSbRM?{v}RQ(&;ItMJ<PzHW~^V(+*?hsQ1
z!JmGO%1Nx4CiZ>RIh08I2J%--SUEY<c7fzo3P7GOUY5Y<v9jb8GEDgiK?m|Y;foxV
zYWP_IHeMZ^Z329JI3Lfwi1p{A+W$sx?>RLP?C%ec2fy223H$d~*3_JGp@$}9g83d4
z1&oZIA2R5Q{`Op<+qlsH#=`R=QT4_XAAc!rFcR<l@J59;pn8C_j(H|qd`u=HJ>8~Y
zq+h6EH{nKIb8c+N0mx6Kq@-5goL$sUY2Q@^Ur^a9)d7e5|HHfC|J@%S>e_M#w~pi0
z%9n6<Tm3r(t$QfE5{?7nXZtG{W_||g6n<tpI_3~@rIeO>esL5?S_>vQ9zF}p!AqZi
zqEgJYYJ3JirmE6?M~*lnn+%J)ro@I;Y|wppaZBT!(a0AnQ9V1xqfnb3MD6EtdOHqw
zgPJ0@VENCN88`_9upiW?a=}~BAnO905*;v!p?Fr~9t#Z#0h?N|tRgVxAvo@EeuS-J
z((1CvJ7CH~krX`ihB7Bb+&Ry;OjJpoi}=7`f^E`t$7OlZ8}=|BlQk`n%~O)#Z$`?)
zs3edt%h)q2e$l_b);NelN#5`dXBs@{4+1w^Jq}C-6r&Xdy-!eY#l@+g4&b0^qzQdR
zCx~7R$+AsU`*pQu7cXi_dZ%4FL6}$86qrr{u8y;9<5p*<FFAvd>7Ofc^A7pD*Af0m
ztsg$rRHr=`)g3vJYLiHEp;i?wIm$WB_Mni0OHYCH5Nrd{$cHJ}j%8ybpHfx*2=%jB
z&qk(2a7GF1aO(wAX%4^D!kX{kgy92<vEr*M*%a_zggS7T6nU;JBhm-=X$LB{NC}vR
zPwIiyj8Fo|k@j4KW?+6mGgdl66agw+Agqay-!DZubppT*El0XUl@S~_Vnyxo2=Hc*
z(pUc0%eP4n#v)C5Ha8*@6@Ar?IWGSCI&$ycJ&xnf$(JcP|Djb{T`divVmrfvO$C{9
zwFSF1(l-vhGuct?6}e^Gw(#|+^Lzqj7ij)TxZuERHGu379uaNvr=|2pQ5KldgfBO5
z(nOCpTwSMznkRp@O(MEEeTJtIuIgw`tzZu@HJmvKJ<M;oU!WmVQqt4YquxXeI*vbB
zb-JM|`)jXk+PSQrf%+Aie^YbYy0u(tG0TSb_LR%9#l`N<&U28_S=2m|u^$Km0u!+7
zz|hjHoMl_Kx4j2gwVLs=y5y&irW_Gn0lYDQTkgv5ncXq&;ck~lD!5m!pL;HvV@eDJ
z*rE61_3Lv4LLaI3Wp=i<?oUuh(@q=+9pR91{g`c54H~aB(hF0bZ`(EgVD*L@q?Y?v
zsXjTP_bz1AP2mth*oTFiyA;V4mo8mmf8g)mo?{iCX-mNI3d9&7?&6zU>q00^LXQt!
z5?(`$x;*pqDCDs_c7&twaE6zyw7sSH2&^#duV065+ri0+CfdNseq(B2-w4RWXOxvI
zGYmb!WqJ0I>zK;~1;!o{2Mz=$kr|+Ri@f3v%2nyI>ut0N@k)%4UGc~;K{x&d(iDJ%
z2M7d<swwOg>$j72af;Tv&+ZW5Jt`!mX_&lT#SpQw$C|6FFAX*jvftxyJ{zwjCUoy}
za+YxXNXRGg^GC#AP7SvpV?9|ZV94COe|0w{2ozp97WaAGrRLNW)5pMD(yTP#H3NSD
z)8$2aR57oSExo+F9P+?k3mniByT_6IOd<i$t!rq2+Q$*=JszhJa~9ueB8O_>T^L`%
z>koel@o1sAghUUlgNGWSJWYI50?&?#mk^8=#JuY$PHtjq?uJ%%43`uP$FawN>&GvX
zo)I=rP7S`qGt`(&x_l9KSAdtosE*XD*fge(aMY<}GcqvrkXP>>i4enE8Y};3hP@qA
zv_x<`C#^K`W(b2NO*DA!d{428htyLx2=ksgX!sr3N)e)ZsF2|UCbuxBeGX;;UrwDo
zc?aQvL(!Q1Q)??LD|1AG@>X(CRqZ)C;xDd*o)VZ)A=IU$XFVYw^!1ll7?cAJNJx-w
zU*K<_h5!Sk<KZ8=E+bzY0BLi|F0P_Mbl7>fG>V`3yK=<sTVJI`^&L8OnoSW~%msfm
zP~h>AS6Y03;nR;hg+m9W^2-J<4jqK3=F|5Oo+U&*1KdJ$VkEqQVgL{djVkCO1Y@ES
zbR9s_%s(x<09?f4Tez6`KEm1+VUgnEnfT3v`lj?4@Y!B|(q;=?U<EzHk(I^C`!6lj
z;iqHq_I6j3O3UgIExe(GDNZ`p=(rLwzxYnm=0w9%?Ky?nXSGkE&;}1I8a6q~!F$L8
zXfZw|9vbT`9)>U{MXLfkdQx2zUiLYmP-5XMr$<HFEfBM{z^-pdU9M)}ORj%npGs$p
zh77FD-$IH$k5j48WzrnEF%C2yJk0|}+5({iQx-t`W?z`ZklsM;HDBPsX?h#(rRLe2
zh+(kjj8N!--6Ee9)Z%(}b_J))X#4giugIMtnRPh*<6>qL_6tU8>`uJcDk+Gl8e^Pc
zP@KBBxcvUzH9I+3?dD1iz)bS{gWaC6NXs`Y+y>{Dhmuwoz7Vt9PX3DpP!rtW-kxVp
zqp{M_WZ)9}UB=WUBAy0w6LL0Q>PxsI5e!IQngWKpN=sp;jWEB@nO(7qV~zn_OWxY^
z2qY?mN_aC%dD_ls>fPYrdQ@4Mwg5sxK2Q{zVxe2+Mw+xsH&#!HnTz7-?^=}nw%SV?
zH`{?jhaBwfKlV(K)o;x0=YhzlR&0Tuo}T!s;QEZwDU{9-1iZby&+0U|L~U(ti8uCK
zK(Okqwc=M@cKO{7S@*I;BuD7q+G&CrK2vx9hqV(+)V$wU_U?eKMMg9%a-2p(y<9YM
zQrM@M$)o@f+=@bDb%_?!cef05PC^?lMD6L&oSB(nubBn_t6a58&*afs>3n+!nC&J;
z_ebtls|D4#!jZzQv_<uQ=#B9IZ^0EQ+-3!H<%yTjX0M)nJigR&hHivjqJR=(VyBIy
z!6{Nbyx|=LA2dM^+IET9a0X+2`8V-6q~QFs7wiBRdbHvpYTPmmG$l8k{Nz@*%H)h)
zuMwF;^ui<2Aa7&ufKkBlge>?VT3_5jyaOrQ&4d%vRxo`Abqupy=}^4~e;<XVbN5>>
zIh~jcn5bSbh0m$k9ORK9YS3_Es&Q=f{?4fhVpAY`F~8!QrYaIY-8$4f1Ji&34&xmC
zIjVpcRDF34!?g2bdH#nQuBlH^g-|7!OZX>Lz(-)n+7G17hZxpMe@!4>9Q2i3wXL}K
zmWe&=!nbg-$4$N`v(@F6RJkN#FKMTF>y2qxyCT&TUO$zPti%}i0qgq|y`*ya@{{`^
zSI{u&U@3#(g4x!!-!nE=i!>|Mqh>Tu2YB9LSSvg~`R0}vDk<FPW9V=YC3D1iJV><;
zVG~TUb2OJEXtgohN%MUA9Tku3tVerCu`|5R;7qz_5?Ac`FJR3g5ol<{P)CVo=?&TS
z>Z9m9=d<+=nfYss0#Vk~-WZ@7>?Zaxu?HoQ!0{{}686=r$I*lVg9qg1kT*mm(QheG
zK9ZA@qd~qGp!Lj+mf48?+3}j!p>!Lhzz`S;>E|ThUz(`S!W&<l`+mz>4t*@V<`hFr
z<>lqipMM@=w|@vvlCT}F`HeL-XI)VeybK9hfE5~i&EEotA)V4xi2uk8+qHODV84Vp
z019TcNQwEy`7P@<6vfk)$s5k<pdZ^w)3!~?!AQ^S%uf6al^6!(;`B0BK$pFar{hh!
zMn>)|*zy5g8O&Z5VT?%l9VYaB>9c_?<E}cSfvaZ6u+kCw-4}oHL_Q~lrJ~R5%CXXd
z{uFA4eOp3ez<h)APWJ1Bgp)49p($ri?k2hdoeFhsOE=JE3M4bHg-j$D4%NVC7MFiF
z;7X~KL~toLE-i<JEjvFU>jrqcu4{&7d_iPn{%Vb6D_Yj&yFXNGy>XAv9TXoZW14|I
zB&fZ<(y@R(1O*<F1<XQfKorCMbqx;B9q$*)^mqr=#13Pin2CFT&6+^dIh^BQn=*1p
zY9yuTW=3CGz$_Bxz29)BOI`Y$bFpGu$l+Dg%lRVvM3AQ6ZEHpi9~eG}QO{U=O$4oR
zNliF!*xz^M1kx)+9rAHG+~->Q09XgH86RL<U{xD$feTSqw$C`(fF*RL%S~t@WnIX@
z=@<@9&cSCcFz7_<F+G_EFtz|)%b>6??cI#?OI+qT&T~k9I)fRL9w6Tru~Yka*G*^>
zQ?{4Xoic-@TelzwB#JHeVi=829OUO$O1&P^2HV=HW?hyhU+ur}T+<(uR~~qa+t0pZ
zU=zkBL`K|ccbJuS6=?o9?H(+-3V^h1*|7+&+A4GD&133|AKO1u)*^v@B|#!(BkG+~
z#FW2>ILzQq_nhm9{_CsVIE&rUd*gqovY~M_dv_-j7_taN+{iKiHC8QNaqKAD_{<Dg
zWK`@#Sb5Y|g}GN#eucZBPZ8S^;@39_2PODZXy;vyM8OOOvqbf2ZpNQ53b=gvE3V8Y
z$JGn>Rd)8Hqt|^zm+(pC@EowhXb<UIjcIGz{m<mUond_ZfqpD2`N3ZL%-Wm|PHDAI
zF+l-i4X~Fu>S9^9xx1(%VLhZc@$mj5*fBsa-|0Rp!yR)EN-zlTvlC8O*$U^UySxNj
zf*3+cf+{Pb;KH8^H7E>&dvKUvDmBo&#`tb8PgINM8Zv}j@BjE9ARt{U$tYdl0eJ(U
z(ml=CO#5y{e)svh1>5A)88B}Je~H4Vs2C%h$-~Qw^K~PPlq3%wI&%zC#y7X=4ec$K
zQZQcvI{gvy-tCs>&OMBZGEB9SVCLWu&eAXpcU`$p(|c8FSCCjKe-8jo{l<tq>Qx8Q
zwJDs{BK!Yk;jSIG`y(x(!CST-J60-_-u(f)*NJ!29FJ(Te^UC6)YJD;&B}Cn+x74!
z?<?gO>`-lo8$jX;fLtT$Bh1{8)kf5_dvkMHJ$gOVV_OXj+A;4L=C4F<^`AXh@{{4t
zh2F})hGYhed#<o#YNCjQX)UJbEi$e}W+o;`Q-%m`pU^I0+9L@nG`+~9-I*hptc8LR
z66g%tugYhX9|E}*|K~p$>Y>$VoCSPi9-g&gt7m=CK~q~E%HK!8FFV8tPfZ$z{^!=-
zSlOwlM7y%(2<snk93pS9Zt<WpAi<;u=NOE+o=_zLAxqSNdlL4f_YWw)`gi8}K`oa*
zf?!nwff4HTf8Y)tvKh1(-T-JrDLZpeR0GdIskQ{Dk^KxL7A%qGpbC-H_O!QW7~WX@
zUUt!!x8A`aqPxXw!Aip?Y$clf&;cGmkUtgp`&R>UTs^>U^5XF~$vJ4)VN<6!n<f{<
zCMOR79EEH#6+M2++HP7!;hGj$c;gpbx{<U&w86AQ)VSmwq8IE#VJ55%!~rM884~Hy
zq2Zmz#&Q-vZUZ!^3uA!>?raLV51m%-m5#h~S<HZQ0^uQ4Bm2kp<T~IPNbcclLej-=
z0;sJPya#94>}&Vmc~=(xJ2*dt`UejW&OWexC_^X}(8|0<#0KL5yLc28TbP)TcuNF@
z3Nt|$Oet~=C2-QopnXBs${Y04ZWGk)xgCh<18E;Xle(&^wgIdfBVm5=XNA(-p8<E{
zKzf1-ns3gq)WeWJXqjMuFywp$JK?%P4(CXO@p7m@>AZQ*ADa>z$UiX<4A~43(bEKq
zOp@w+9u)N~{P)p_nHM_l2A`NhxzG<rC`^PR?!j5s7yaStfhzxiVyMd=B`GxD^RytX
zQdv60H^dG%s~9us{lxgVpkB5qh;k71BPpu;hpry+DBm<t2UK0b+WhK-F)&T@rBz_V
zP4hEHjfPbLUZmQE-krvLfkUlXUVLS^u_~|T+w~<VIHPwR)FbBe*Nk_^q{`5`57a*r
z@YUSg_jb*?1tiS5C0zRB7*hD+#eM?=WW7HFPSXE9a3k>sd^hlVO7Kg-nTYfa6%`iX
zKjW6fJR#y;{OaC6O3quaFn#{SbkW-->bB$&=57k*>ci;_q-_hI%0r_+4gBc%^z<||
z8(sWo7Rpg5ghYcC*0iBn2-ri~<1{p{U~A&dMXi5_E3W;^7hD2=a}d-)m{$jT1MLo^
z7a`$wbs8P#aep?ik&`P$AyxGTn~ETK80mI4P7Y#oXjx6ap{j!o81tFT^YbercdM?#
zegbyi;7Q03y-1{VGV`;Hgw=ET=)G<x_GWc22~h&jx`sV+iT}(!o#j1`8P+1;a=#=C
zAr~mkPKUI9it-eOmVq=1EJQPjl92RRrROQ@I)Ew^3WYBbc3ofe_4G);VH*Qx;u2to
z{MW3ooC?$uQ)vn7RdwLmvq!-rb#h3neR6<Z(lWM}I>*}Izf#JNQN!xF(W|^6WBW6b
zSAj{NS^D`%H?~NW56Qe@{QR^4T=FA~3}EMImbgd2y99f*3XbLK1GTN`1}zYA!<ncb
zsGr>8c+?lr*0<0~K-g)shtK@jSB!<9{gtNa7mz{uMUo8Ta>GcWSS3QuePIfJnYGVA
z!ek#G9}gOAR?;iRhNMwi=z{jLOKiu0wd;k|I3`RWyK^BaDN5SGJ^=Ht^SRazmX?-4
zAu(siP<;Z42&Yb+N_!>K^lN%L?D7nFHCxz(6AFC-(k{J)_zdviv3>hSCu>j3Injdv
zjIxO~`WQ@rvKNyqY%v=|@NC&(Z-tzj2;&D%cEaCAMsh9dL$LOirdwh#&mx&kq-B<1
zr`lr4!z#A{9}L5?KNrg6u8E*}7@#XpNoaGhGB3hG4yz`<s}+8^V3AA@OZ8&X0SH6l
z1i(2ws`vvJmqV=`g_vbsr;@R`3KZol0yt-<tnLP?f4~Q*WK_Qs7JO;3vZwwEY?f%X
zEaZ5$r8N;xgho&(V3_z8;~arvjPIPPDAbS*iAyjq0wn|td5c4qbpyY?zrm@tIt9Vg
z#I6zEu!oJ7#-+lqJ+}YXJ*)l0ID<l@Y>lR+_vv+yjm5x>F2`bn`5qL>`}fy<_&{hT
zW4unYp5Q;<v-mF-a64|_^;FYLyiGFa$N$wJk*Di)<t3i~(cKSvG<iwr)1J=CH^Uza
zcR6pS&8ZLcf>cT0Y(Ro&zQ=o1a_(LNpq0kL{CpwtN+_m~+GJC>xc0o^mS;9n>T#>L
z@;38t{#A>Y&YqzC+Zz#y#ea!G>;F4q(0|qz`~Tkt|Gz%{KU-DzUyJttn%??9T{-?=
zFYdoy+<#gi_rK2h|K#U<l{VOvbawP0Y|y{)hjTG#U=dfZT_e*mZrbGheAg!5`?S91
zrqchEH`#mmz=14~MHr$hRzLUVS1|Ez_Eood`}(TzJlD-MNA4z~7iemTj`i?`fTV^d
zq({XL1Zip9<PC6ra7Dvf&=gjK0SqH$POx<iFDi*F#;mv<y!!1JOwjIi|Djv=a)G*w
zypFg)^+@<J1G|Bd-Mi*yvxbBNL#=R&B!+rG#ejqadnnq(3=Y#IgH@O87N+LGA8n64
zF@nZo_*LO+R^`HXq?y&HLwD4Wd|vx&@%LZq8HD3E68Or6#4B1qzW>xFS?a6TU8Q8M
zLptp5r~656e+j24D{I_)0b%iqrgKz_cvfnJ_UA+Od$zQlO1+H{T%MO#@z(aXHbi5b
zK6!FT{p!!wL12eFM06yNABUT=lj)<DU7KJZu#w4Q>~nfyq-wl@iJ?F1VYV__pcn=q
z`d^n=>Lc<Z*-}k4vu|a2r3L%tPmn{HFR&<bzn3Z4RbufdQTO^wg%VO;{&=19%Avhu
zw@J+x{L~zY=KNLFekvMVat8~3wa&fr;?F%EQpM_~mMtkE5h5vgHWvg3v?FKq0h2uC
zd<=Rx)OxUmta_229<ZpY>eiNQy@{UT_>XVuOKdvClBh$MmS32xV_WwhUrqO8uHj~0
zCmZV`i_4R#77vIalGNdSOp|*&>UX~4Q}Wh#mek088*EU{q!>`3t@iQaQfh=lFyG+N
z!``8X8lP({$IgBqx4cMv2wrlkCsb+-3=CHq5~BU6E57w`j35!~%Hm&7_$cST^YbGD
zxYpWwFKu<L9;GyGATa9djxG&ZX~azNyOU}gN-tQFIVqB@p9Q*`8)Ib$&n!@)6IXty
z(Z<VzN!$Uuk1hUeQ$Y)*#hJM4^`({)Ox=ZT@8*d74a08>i-R7E${((-vWMi=D6Bi#
z+^rrbI;ngR<dn_fWLLqTFM8_0lZVb`D~I9>qWzSV?!6_(G`yS=SD`A~+fTu3ho+FI
zw(Bc`|5B!`jQc_n2Hp`7N%;Ow-p3p-+nAYEPReb*gO^&D4B!|#NkY=SLZ`3KH4;^=
zy$(ptRDEyz^s7oGI6Bc&@7{$YKe%_@*r~nMfU`+JMr9?Na-V;{ghaHIEj3J}#q5Z%
zFgT1Vz^=&TeTOIEN+or9&NgD>-aUKZ!Vo?^2#6a|7^$W&XaNNar{8d_|3O<&^4H-E
z4AZ(Bz=H+23su5JVYFNgIbw+h)2&;9V4#DKJiDdF0g~`}`LR(WJ`t7*xqNd?iL&d9
zd>eh14s<>}Y3MS?B$aC`QJ(SZp?%VQ+0x~~)LG`eUSIhu1j|=g1U^0~zL+s4A#P-F
zAgJ(!(qQ!W+3K$Hmov}yad>D*4K7I!#%zB*oK1aQLsF*LS=-<Kwem^#ozSmJv5Q?>
z9pflXFwnw0rypz=2+~MlZoqd$N1&j?!WA~i%b6IHb{e(A7_cExCR-w_hyzd)(*3?y
zg^4U)5>cgb`fuiah1n5C>jZ%uoA&b(WuKyMnAaK|ahp5c-!Fc3`V*875Hk#%TGxGR
z-Rbn_qAz!CVu_ZKaJ*V$`8?t6;@AoScw&uzi~EF%;(Us1^G=tE*%xPG^ylp#9GO!2
zqL#4I`}^E3HH|wxrV(l`8V%nfR~FR|e6~=qlMIV}c$nqNQ40x&q=xqfdXb&%53qU&
zEFoBO954Z~F)=Zj>QdANKDRe8hXoETp1((q5Za;TP*kw$Z-kOVcZ?){2@K5rdIW+O
zTlD_!>mTaimVmYMCEKEQ4RtHD4%ZzVgtRMjPY0?&tvL5vj-m<A5Yh9m-F~(bUz&>r
z2|txaWXFo#)Bx3GGF<sL6!ru~1QcIcS`a&N;w^~IE{k)1sxNK3x>K|~xsEwbK=y%|
z5ypLh_Xfwid*vs;op>|%tE;ng<)5X6bn;AaM#+++50Z8~hCfDbiA=Y=a9+vjVbDY@
zWxc~M^>mhJ#}chNAybIT6K&?}$f7QlP8l*bvcx2tE^TA6W~Hb;OzjX;Z+JAze2Jp$
zxo=QT#OV;mfs$1ZSlEs4XfO7*`!W;mnY-^e#JK!;buZS1|DH86bxr*j3s{noS&_5B
zkic`!q!fe<I3IkBS-F9<g|W^KhMkUKrgN|{46*wmMZIx0ZQ-!B_88n2LpGQ>8h0^B
zAo$4$4~tZdu`F1?b!oakAl1OA)<|gGX9(BY^W+lMa$#hI7&X!a(xMB%Rl}HH=7uAb
zqu!@YNqvdR2ln@uuY44_wSUH3x;U~>S1L~|wur;;HS@#1qzgy5o6dyniPPTJ$VJkR
z)3{*t_^0%iUtLqMnJ#kKO?V`Hbl2*2E3XLW88|0IutqpiC=+Yfauv@Sal>|mneY{v
z$R6GAXx^Vf)QT~e2(e+pI*fY5EPIECwO+qy$GRo-6QKl3g2;Muf+VZ1Y8T5_Y+l2m
zlh%J@ac&TyvK#5?r$;-^D!~u&wB0k)Qz@!djqn#znbS79_r6r1l+RdGNo;GCd@J|&
zj*>&B|1^SSx(qwla8r@D=5SiU!J@PEM3vWA3z17BaCc2uLgo2vQ?=3`ysI`-92d;Z
z`K>fap5$DWL&7{fb>-zs4Y3PN9}?x|-&}NP{q#v^H!ki_<w)yt!12`=TQZh}YL|s<
z*xA{Uv}M(t%GlYN2;D|whTkcMKC?d0l}w9c6$X?!6`#bzmR+XzLuA0_5T<#U#Fs5h
zx697=8q(|Sy#)o+Bhn|OKU-W`ZwxL;@b}fMJ+Or-@S#LsQnbvmzMA1(Y;0`Y+_u(_
z7I}|KN`5TctI`*R#X>5AG4}%xxJvb4(<eqd{`gdU_im;A!R|EW6vkziwT;D3?#Hd)
zD0jwbS0otjuRXiEH0YaumK|L^wZqE;hLO((mQq>qjb(si2CuK?v(l+ht~!BUmYw}2
zZzS{K!`6cq`@R<6FkaCv(}qzkU%ww>@`zqAY23=-D$IMe%*W=j)Cw=l;?nF}ppZ^o
zBZjdz8_NUQSB^!DG$zGa2WTn`#wljnGrf6T=$oi42rfkSnMjGmhTTg2z0==^^fi|3
zcm-e<g45i9VTZlP?~zgLXStQ*wx6HR<Fv>4j>0r5QI}~Ph)WZuq+R%H=eqyaiTuj_
zuDZJML*kp(EG-OsQU2KYJ?L_m8lJ2zEpVMyf&`TBZv=)#=h-0W>@kEhLvR!xN^gKv
zX==)<^5KEd1UJ50<Gs{_k?F}<dSr#?AyFZ}r4CoSap<iSI9yUrRPm^~+RyTsL*&|K
zQeMdNnS+c6vR^e{Jm1I$(=WSTXToow#f@e04<~xC2_>CI_w;pLVC8&VEH1%Q!LW6!
z-Sz95Mz`Gd3VPP`iK|&!&WSkEf9sq3z46GARxrXIJ$zX7weN!ql$Q}ET_501ATF7y
zJp`9zv-%VoQz1e7VHj8M%bd|sZ!#C9`9+?`a$FqwR?dt4>ZD+*&4xXJpI!;Jz2VEe
zp~P}B%9wj){Q1_0J49{I=0#2PFyFSVINxPvm>6?`XIL##TP%EF=-~oK++gQJqcG~o
zVB<8;`+-Wa?=x%%KSr_etGcf&y^4A=k#tOFZ8y$IwMP`gr1L|SEsPTZH(lG}cJ8?~
z4wc|oQRA^tD{S%79?sLgs~VVCO>^_XofX*+H+U}>|0H}dBVei~RRC40bm;tPm&Qe|
zYk~XB5y2OQ0z-3al5$A`XJCNgZmpz49fwY>{wme-Cr)?f9W$4!C^7nZm&ut%H6VPf
z{Hhp*lbQ-e@N=A^3htIAKQO&KC;OvlJ}Ki^XNl$_-aW7c{Jp^6Me_LkoW42jH;xp9
zVZ2rf5DwsM(Fze^2-HpgvTOTzGU7Nvgb;yml+vY!7bd$QbgG)X<KvTVTsjRQBREaC
zi5jEw3T)bqvBWDwE3zzV)iB%$3rEy6&R!8dKJC<8Of<B&-ua{JdQ$oPYTxVM0xWyE
zEF^Df(~ocj23J&vZA`Qn?E0Ag^uiG{Ll$va?Pw+QmfhX7U#upS-Rtq?o_YD=#awUb
zEQnn*Sc_0cLM9_^Ki~`REU2WKVkY3iR`DQe^h<6rYa8?&ure3A?l9H~Yb%@CF*yyg
zwI4=xp2O*%FziG4d6(D5H4SiDc?PRG5UPt5yt7dr)|j4EiI{P|GNP7RMKdWU_a$q_
zKu3DD{wZ6w2BB|J(ZV7LQbfobYRdzTHHEe1Uss2JV|gI=V9!LVRCv>A+UZ1Rw`cD`
z5tYn-)WU*9@vA4zbO;1mnHub!e&NWDXC$$}gks%*(CqH=iH4*p(Itb&7Dob_E+^87
zF!{Nl6$;bVf!$`pTbP2AqBN>54Vg+<|DGxBgk9D2P$tGh!3%M!{i8<jYcqRbYTHb8
za~DzW{sga?Up=GNJe2!8IUl<vWUc=M+LK^rKWs~wPl660m}>@I8vNCB^3*caRJJ|W
zPANi@B6`X&Bd7YD9;4nGfh4zk-B)R`d2~UFk!%xZ?lS}&FR5%OOw6kBkK&EooWe-r
zkj!!lTV_)f(b|9D_!s9g_E6NsF3%amw<I1Gw0aS%7%~;}L2vEawOd%{ERu+KuG>|u
z4Ag&r=iLE(A53y<=)pGQY#+OukPYpHT9m}$!#Z$xdR{1$xHY-O2P&3%EH8+e&gDJV
zh2ajO<l~EO-@I9oty7@zv_RG>{IOe21WwkJ?U*SX=I8%hUte-^vscGh^lB7P@A(~E
zj6I_<caI!tf386|XkmMCqwZdo$%tWLA>P9WrcQi~_rEr)PO{m5tRXhlI_v!wrT|?o
zshNGrl&d8BY!!)vF4T-3W=civ{VT^0m(1<YpLsYfDLB!4Z7U;VqYNXXd$>TLm-KPF
z-fu8|Ew*WoL2nt{^SFs^WirMDK3}yXjm^z{FcK!d!Z;N)(~;BM)4E2to~xg0J=mc|
zbZ6gf<~sWI18$2V-283HC`g5UXpu-*I+DaI&pvftn|*-OC~W*^aLBHtqQ5U5WI1Mm
zlOb=~hdt74`rT3S(;)^#fxg9c-}k<{@3n_A7a=pyOlw0!-O?Yuy2Ph%DpuIq%Gb50
zflB-}E{FsRe~ce_c}donBuG`)G&Sp?2O_t@ykin43AyNXA=(vHp;M)hR)H^*Vel%^
zZC;|lzi=Ql3v%Aky12xt?}K^@#bK3cLC(0zUAo`(VeiPfb4*OuPHtfGkn0fo{+%UZ
zKT>u7wuD|*E7M5qgZzIqRRZ%hMb0)Zg0|bJwk4;S-TehuvZWnT!4de<(vpOz0U!a<
z2fphH6@sxoJ=UdFy38+>r4r$YON>*ZcPYcLU0gq>XE-xSrB~#9Yr1l<!r%<VEVPCt
zQ0^1>-F^^RewjAQ=!>s~1)gmeSLsR#C<7x|Sy@o>w(J&tbnn%xAKhgY0%sNu2nl6r
zr-Wdob1PWxoaJ3_w`NpvQ_-N&nER$+17b$#P9IlaB70E8X`L$sW|q(=_nRKyHto#U
z<{A09)#X4m_)XJ>LGz}t>dSV8JLT6uI+g~3#N!<=^tnD(ov#hJUGRzV@rE!;+4+|e
zdP>t}x^Mpskp8CuM$c%o)F6@d>yPWu6>VCDiS0H^N$sSsqXXLWLH<w6@c-F-YW3^T
z_3i@vLmD+RHBIQ{`{Q?-X{?}d0cJlCV53sMQgbI{L(NB3h-qyuUshGMdtd+P*{xeA
zRtLjH{LCwR_Ur*;sIB!}dwYB2<HvnD5|834!!d=&$aUlT_0mULsWT-rVu!>ucw*LC
zGI#mlDHJ(|1Vi=)g70b|SO3JiU4&(#iv|~x&(If<G(ql}nKoD0Ck%fzx^L4Om%KtY
z;O_2QKqA*+ox^&E&mUfy=Hgaa-GSq-*Z}Z%u7;$!p0Dj{n_JuFs^LGobDTrjO!WBi
zhVpWKt=tpt+1=Um*(^pEgM(HNo^OYOSXp5LVP=+M`S5bd&pW_(@<(X9`eutfS;Nik
zc7A^3Qxn?HB(EYob=wcErPh9R_4N}Csc9Ku=yQl&mDGMaRGID+<GERTRWr-u4j=!Y
zT`RjUT`~X>1^Zant_TsEScZLPR#ogb9T940-}++ZIJC=MN3QoT#wnhz0D&RV7nu~0
z#2k;u)ocWh|1Q>|NAQtHyJ_>Q=M<Rz18px`pbnw@w4a{{!{pdhGS949hxv>{APS11
zK+IGB2I2ZPeaHFp=Q$-U?Z-N02o`?|(8ixXe?H)rOTPi_i83raZ$B{whdjn@;u@6R
z9t(q~UG%dPl5%r9Jh`bUmmyrb*A0q+1?)XcB|mqqyq){?9Z}zzvao%4D(6`L^b{@2
zHg~udWEWbRix-ouw%uV`=sexcXY+HEU}58>h1{kjT=Vdunp$4+ZB8PO!+$M}bpgdT
z()~t%=n^^LlYrD9cnvheNe*I%l;I(GWFxuEb)4r-S-f+Snhkz8+pgP%g@tz{H{U^e
zXIPT4$I(1fYRCc$F8iPPQLvV`p6C?<yO{Zh=|9kNop~ggVpI%0j!XiVGb$XgXg)ps
zh06W0&$iwCjXTBkkvt-ITt<dG{e5f<!H7n7v02xon-A&gwg3vu01;IJ;jNEp@)^6s
zt9Gz;Iq$p;v1G@-5@mD5!De0?ck*OME5Ia`xA3*@f@FL;T<jQl{k#FlMuJT;`{AGQ
z{WYAU?X&9kTeo>E{2oi=Jp6oe{)Zw?LY<7Sv2WzT7)XQZwF=>dZe}MWV)H*=(gMa?
zJdvhn(OHJjAk+|ser{WKd<1iG8q<6TZWCn$1uYSoU|ZT@@%ecqt}Lzt7qqK1Q)DQ;
zT@$MzW<vs^qN02Dpc3<-xeEC)(~eis=Jm`H;9sO~Q%QM&<Sq1O-ZcI>hlO^&o%i0;
zYRE*I>#u2N7DI%^P&w4W=HuUH;dQ+?5MlGk-1-cgA=a&OOZKtx@m|MGJCoEEO{;+E
zQpAnRtE;t$`xp=Xh5<DTGc)Thh2Jyop<aCdVgVx=#-$+I*6%rW4@TyiF4sV^n4OxU
z{FB1xNv{D9^@)NlH$YWM1i4iLaYXSnm8UOv$>j7jlucKW^g%ZNivRA=K>_&_@gFBr
z$ceDtRciPKq65UiZFYTCiH1E>gI&9i+D+BPE&bbhex9E{`$X1V2d)qa#|6s@W@up=
z>%pznbsy^KL4yRpW<Y$$UH)!TLOEs41HA^k6oau5Q%9hygck$D*7wcLx#)#bIG{Ih
zm>rEmZb)V8M+=(FZM}lS>vIR3mf~d`HhNdB57`XI=fPU%g{d~=S?Tx!y3kLh{Afz)
zN>vw76Mc2<`!kS(5*hE{rhK@+I}OA(Rw439YTF+Or2z0=enEk<ACk{RP^Q%9!uUYN
zj%J>*#)X4pK@`D6?1v>J8ZK?s5(vKwMo$fv>G15&G45EN8{qVEr@Tukqw%qXFYvSM
z6w$d1YUt27*y4N{Q2l1;4Pm)|`(|ltn<V!=S#vLP!iD{QWtKWZiqh63d6bCzJZ0Si
zEF5WaGq8@ay7Wm8DptE{dAnf5enmm^+)&DVe|;&C7vM3S2?+^krQs(XzHfy0uPo=y
zvxbGs;YxnqWNmGMnJLk0@OsD<cK-2c>4U$n@ctk`g&<N5$~{w^*J=0$3HYA9Wnfy*
zf|qk}EY7NtAIhCw$7ZTw39)VWLdv4KL%hdtn{E)L#=1&ZI-I)F{>nhF1HLEy#*M>2
zl)|9vxFZuO0bfnTQeiDvwZ6EOgEs{q$XV(eh<G3&YsR<%rwb@_id=d{p44GPv19FP
zK<o3$u5SVRG|3vM{?cvw>hgf!h+(@^j%e*#k>SqtGGHz96V*b`p7DnX&nLf15ky6U
z8VK^OmX9A{Ec*<}gA7~YrhzP<;xLKiEp}83I>&*!6CSW(haP1<a#jP3H{di7f?oo~
z2U-U_uUGq69B~SsdF+V$f?{R<=}BC|`Ik9=Qtw7vvx;@nA1y3_MFeKQJ!n25VxTSY
znY{r;x>9!?7@K$R-v{nB1I-ZD$HT`8QGH)>Mc}$bQZwVTGFY?qM9JbNrogHaT}pm_
ze!7kHsriT<|FUsiCZQ!hdHS@kk5B0ZT{@!&rJgsvywVdB6S3x(TZ;8oy(c=6db9pG
zA|<t7vE$RSv$ItTzo3j7GD&2Rc(&XF73zdt=^?5uf#j@={H<?bnGJMzAF%EG`q3ia
zelP?g{SY_VZbt4HhTpR*hBQ;r+J?PKZl96h2uk0^jT@H+2`z1{t)@+nRc&F<bwfDj
zj`709)S@j<q9#l048GCGz}lNkc1>_?+O{pM6m{baX$GMlVW;45^3NMps4{}sfTUP)
z!f~h}s`c~XGS)SULg!w51CtuDwK+{2ptx9W*8P4kW*Le)EIpgH>{H0Vh7OcZv#z4z
zw3Lp-*;L77zL*n_+Qu~H81G5Vt`p{dZnBFuq_8wG$uQ;2y{;D&A0I^<^Vq;&(XfAK
zNWCuhH8r#Xxd)Rlv<Q@2#-w7Ob+J=Z@?Rbv9`}6y!nZ~_+osFe6s)?7nR%6ADV_{b
z7*2X(bL%Tx<5TT+b!U}cI*;o8^Ut?Zm$>M<x;m5z^qJ6o-Mlfo=%BuC9XI%Cx-^rO
zew6WpSGH%K$)3-gwbxSA*_3HqT4K|_jWC~m{0znekylg-z*2t=RWH#MY6FP1;9O?L
zf6T1>ehesW5bw_C#3K?D#^?v#7qt7Dl`p`yLPRh7&Q{yj7xm@kSjpQMjH+ThM{(Qu
zq@<+ytK33X(nyzQFT!|{jf?&rCZ5eP6WwK}(Q#jHN`5QhhBJYnq60Q+V@-N29?{LO
z%CZPree}M(+-%tD^wB4)wbjGTjC#D3pFa>@#bv!o^%Ws~-NtPIuwrnq&d;<9jTO(1
zA`29cGn7g$f3Q3B3WsDY=y}{nuFCHoZBDa5`ZrtAb3hfK8^@tzK!p_4fW$xnZ11_5
z_6}gN;hKq3@P++w&jCJpdtv`e*Q;Z_UgF@v|Anu&j;b<`+CWW0q@<CS20@UNK7@3m
z2nf<rA}uZ50@5H|hY}=2TImK!X=w?irQz=5eBaHru7Av0Gs7_NdCxEQe)bb#5Ut3g
z$Y<c}yE{j@yY=u)&>skbGoNkh9<dWOgOYTz(ep9mFvv+fzrMW+J5^2n)z#yEq3e*Q
zR}S)T^@P*4d@^WtS=8xWN7hG+U@Jnl_bA-Z1re}gpvV()SSjAD170sgjy-OgYPy(&
z!A!)(`Ds#O;xE+2Q3b|yQBnDzf&d+Gu0A<)Zg|Z(7y^Rr5qQ=)pZ+ab?upr=a{~aT
zv@w}x7^tSGoO+$VOhR~+lp3Fm0^ly`v4<EdI^$gQXYu*@=1^?_V>Ne^Eyd$#+wfTn
z$fBVlQvCivW#A4NXu~)ArL_r|hhW#7F6c1d6_Ww7(OmcYc}GY7pgaW=r4rT5;(uS6
zf~YcFH6mUV)>c*}eLbB$OiO^b!gW;Nek+sq5Hx#tZn_{XwqsN-1PwIMzzv=ydnlEG
zhll6UqgvVM=2~LV{gRL*fU60lay<gS0$N%Ln}jaF&SPU25u?CX=9m3QDtr_J=RfeM
zWfL{Cvjw0g02vG*#>VG7%n#*{Hi2`?{t6<ifu;_=VY;thZ$nrUB(2qG7O2BM20=$=
zF9Q*)oF6bmpS-tq!pn{?8%PymqJ^}|M(E|?T8-*tl2d7ycZce)w^s+IEVApNcPJUC
zVQgaE8MP!yo%_k&)PRYJNxBFmA0B@<k3nxGr|fkmAnVm_TcS$))W9IUlAuS(5EeFg
zz|VOe+MpQhHOU@-V<I=+qd_90lYMvo%Sh`l<be)yG_gPVU#jkg_};nZeKaq0?h`Ic
z)f2<yL<3p(woqs93WNHb^pRt*B6|xrO<XM!$xPPxdfwMx1T(bY4+Wjt9#BuaKrmHL
z4?>=I`HCLjdwPlx0ZXrkil04Xc?b#|T^$|dzPT8L9|0j1i$uBqBiNOpv}rmgG4us!
zY6b=d-j_=X`N))eTw2_PtqRgpib_iIal27-{WT8dMIvB?s$W}a4sJyS&ZVqS83Let
zrv|bQ^gb7(Y*gM(_b>;5UIl^3(!|+a`abwO4}}h??v`0M)>6lgFY#{KnVYX>WY82G
zttISUyM7(&@YLh*`T2PegB|al?@9Zn&WQ2n#e4)KYpt}rhKd|F`c=4l0l^2GSkPwY
za?#L;k4dD8XJstKhsQH(z#X7M>1-#bZ&PJtVQzjp=TxS3-4OIcg_;H2K*uk~0lgDa
zy>072U*OjPDtPX*jW<jTn46NDE=B2uY%VV(A+i<*j(Vl~C6&X6zo$UM=MG+D%xcXu
z-QDtVXo~;IWxE4xR1vp*IE^N|yN9Ny*{i+0;$`nZ*a8s|B|g4|u`$dK`NXQ9n`(No
zu2FI)|Iw1kwPY#)(NB?jo{;0OvKxg^04vb2Yj!HNch5$T<SQqwn`jhVBqfq6NXXs4
zzHU(B)SLJnVvK?6?*Jv=zBy2zd%+G*^yHT$3o9h6qs{_(dtPo8P?x?+R{VIv8rKVy
zaVG&D9>uI|x4-5(Ly{F{O3=j7*DXMXrrc31YgU#P1eE@ns(uWyGyq}$2K#H5xxV$`
z{JPCWYVQxaMNgaxsMl54OVME(1?WyXm~ewnDXjAnSg$mP>SFE+hN@W^kXqN;3^w;H
z^h;yzYRIcUdVA>&L?6cxmR1WRN%`;!#|bHUer0O{jr_T?Ou^%rJcdsosh*pIc?Aq=
zOF>gS*LeOukNy7rxLCvo!u_0qpFi{0p9R#`n3T$OPuA=WfX2VI1E$G>6`<gQQZ2@l
z)wBgf6^f~kv{;=WDEE6Go#})yOYG93SY#0=w~ESufmafgW1ey$plrHaj7$Yb7Zm#A
zz9kV-3|oEY@85W7NIB6+GpnSgcb=_vs)HmrDk>`VBG|Lgm%sl(EqWU=Ou>@AzH4R%
z3r@IiZEaoP2j0Z~K_1M=LEYA0WyLQd9Eu`3cQ%X&(5K&qSo7bTim)DI)R}9d$uGk-
zNY4{?b;vG2HRoMxlyTd{D@08#(^o}Pa|x){PA(q~_lk<&Sq|l_fwL6coM66Yb7f<;
zVG1;Da672$^Pqew{{9Vpcaa~;?9>FjYK4Ai!ZmoWhC&!DmB8z5poYh<IW-VLXYaJ}
z1nB;LH8s*kM$Njm2kPqOb1>#_4<{2cYBjHI1HHWN*z4&pJG(vL_u~$_J2D$J*b^`q
zfSwo{743=Z6P_{Q6dxh&2ux>KG8;hewOa|!qhOjYY`5SD$t&s&N4cTMS${ARxcCc3
z)+ieK;1yny0`!fpARC6|uObZm>Wc<AA-=5H5Yg8ru7A?LUl_aLsso+U3e-(^{yP3H
z=zpLnjmX&Sb}UtW|8aZ!b&|m7_q1JK_rL6Vh~Nub>A&HcpVa#}*zOhZvV}oDaqOha
zB$a&;SaLpo?9OlsArnN*FA~F4yB+~^o4Hh6UvT$*6p7*gXHL|(FGyM+?K2+c!Zp-g
zVxejpMRD{`TV2!rlJS0$szyBF?NKYQb(8mK0dB7?#&X>!NGC#|5-A`b?z3NyZj>k1
z*46#TW!I02FYP?qdiVrB@RcjcQZ)XCvJ$+E?Jt6;&83JlQ?p;A3aL#Q_~$<+bpWC=
zw_=R#H^ncfK^^dKY3o<+4&NJpz{?BKbhN_4$75Xbf1@Td*b&4zs9*TthNy1K3;IIA
zN0a}A2(x$;-2afU|1->fAqpj!`gythr!LD1&xN;_;@=Eb6`*vWd!VM73kzNTHGw%2
z4<BlP=>YIq2ngQ2Q|#El^;c6<gA0t4aGC%xDPv<(4%9Qf;RTHCUQB5$N7A?1+5YM2
z@MQImv`y2H3=Xm=@D_x34FJ7YO#vx81Mrs4{!TSRBzK_-<Q$ekp;X-a=GR~*G(Tph
z-EiJiU3NrLQwurkb&-LXyQDrDOqSqu;*G%sHUTK2&5&)VQ}gk)mI`xx(Bb#@A2U3F
z5k3K_J;AX}_m-wt#qMd`+%6=$#d>RSnM`OlY6yCr9fkc_04>%M)NgDW5b<t*+1PYj
zKu8GO%N4$dL$PsfKsw@ou>iQDQ3Hzy%vF5gWw@~vo8V5l`U>@H?G+V2oV9oPpWHsK
ztuB90SJyC74j_$F1Vmgu@;H(Oo7k{01t{FWl{$$@WflTIx{zX*XFcQ9L*UN9`t)xV
z_?QC{aJ)xC|4m3xP;SWqBu<2m7iX?X<>1(M*)i++RoZUF_6jwN!WPYtR2fZ{y3}Sn
zF>ieEb7MIkt{o1><T?co7rFk{*1E8@6>4L}5mKxAA9d~eMkLakp~!t4EcPDX%OJ{B
zYvLczUs&vVfa7Oxe}DbM&BoIHilzxNaGiwu9&_C;Y!otaCcw{&2MW~h;o*u>@={Wu
zGY9ytrjB1)BM~GlO>uE?W6DMc;6MccKLDt}1ep5vjaEctaik!|)%DoR>wa@f%ct-a
zXFyC+;^Uo{yGK8Kpy1>j0PBn}-O7rJwsoV^qiise^ZWf5ZmiA6^2f)=+Bef>U{f4|
zY01#g9io275|y06)x8bQIPp?KzY4%fYsAv<@XrkN`(V>W&b^dWo>J$qs_f|Ks1|*T
zGcP@z`Y#{jioAqGqh4ANi7+cGD;wKgT}%vSPmQP_iwl3|+rITIFD=pI;p5};8Zj_1
zJbNaHq{JK%5D=VTV#<G}qXVHLw{pySZ_&zVYHR-j!@8*9oFo<&78Q|EcepJB0zyYd
zcx-Lc;RNb^%B=dSPlAz!Rh=%!)Z84vE*mIlucO@-H)7$CF=h}HoVX_=e3wk{ngps%
z0db#%gakf*>Q3yJ5Rfanzj>2khZ|`I>--x<<r6(U81{66E;rtt%FNBp?bWM4fOXV4
zuKDKp3&IB207w-urk!ojIO<HbH5w`#8PS#Ny?lwRYy%C<Y>mcA5X}~C@jD8#5VL5n
zo>yG=?qw^bTq$1In4%CQc8KzUf<4sp0T<V|+0ZcBfR&}CcqP9FZ?<2MkdSa;TiW0h
z(G=s5aRbC_2w=w7qR<9u#@3!-o;OF^^I&DTpe1e8S_`a%_Km>bfNCv+VDcKgN40x_
zEyA%kfNSyWuC?&C{vu_^X+K?N>zAjKt}m^uP#S!IcH}C2eJAg=0NskFc4@gwZ5;7e
zQV=dAcV=_BFk1eFOhrb?t9>0Eb&dmyieQttut*TqeJh%gD71V^lI|A9%P`Ed_-0aW
zCa=?@BO30w=QndZH#aG6&=Vd;4KCRWQZX_xKrXoCbcB6%SSZ7~d$O)INQ_ifg%n=|
z;fsE+hAr7ML${mK&_KDXk3i7rU+tBs1>@%hU^56g-zFCO@Wq7_M{PK2??n|~!u$8(
zvaYNBzrTE`Ls%U35>9noJBnz+?^#sBclQ94TCS@FsvfX4q~no)77IuQ62JMXx?$#>
zAcbqZjBh%28Xw}xhkLJ$f^w4PP3N-fLJJ^6(+zinOcqxDB8ekO0}&MQ-*5XPt>l<=
z`7G3HpUN7+W_j#r=j@EgVR6w7=4WKgwVLPG!7~pXkCFb^@_@50G$7z6tJ$xsP+)y=
z-OH2Dy(51q$b2qg4^HK*E_FkVa=Nid{{5F((_T*Vh!LRN4EpBh2MM4%jePwoUe6By
z0|JdCgj%poobHQ}tSZ4xF=wUeOXuIdfK~^HO<OJF))m&gh6C^>j7YL%Zln7n)jLgA
z{(U4@b9|+CTz{kzAXl06%*Y@z`PVS#-a9;eoT{pK1(h1vHudx8PnweDl@;g1SL|k4
z%t1p*8I5_&+~8&s3>HWF`WE$4L&L0=5Cs=HPT6Lwm{2FS?jY*z-SqHbg}R0YR0{yJ
zk!Z4f!eu@`KCXH>#dpO?xV5c(>b^_ZOR3u3d}1k$KB~aPpnW2|L7B;8;Qm19Td~WQ
zJ~G(M)YMQJ>e!Qm4flmsTX0h`)%{A%(f0iQ$B!S8SB+M8jLpnK&q-JVv*?VN;;o1C
zs%oF52`a(dC?fVvall-C-b-UY7d^Mbn}wODc%NT>N0}M<o-F^}*#Xm6lJX!ziw_?@
zypM@dl^xM*o0zDvnG%mBh>jK(PR3l{qrzu|>^HF|gtme|ijz9v=m6j>j6C}bF=7TZ
zbNK$6g$tsdX{;{h{pn)1#>U{|tGkn#o7)C%6CgMYEE~^NxbYXS3C_2mV|i12buzk`
zF=yTo-PYAx%=D;Ja{4|{4~n3gQx}&$LAiuQL{x=@6jV8_NxvLCgjW~RG}4TKeN91a
z;I^j89+`+juR(KfSp^B5@9dW$YzrO7L&r)N!(S<-78sfYrdrlnU?zuX18pA!+TvIG
zrH<Ec<Nn*$t-^zeJ2MG9YOHYx>=s5<zSw>zc9Plma4C=^44tZM&Ut4%uM;Qy^&rAG
z^T{Zd6JN;?@p|aW3K65O|0k%uG%tC~<86qALj3cLuTo+`3a@ETF#bJ%u|E$N80=@L
zSA~mTR`-0Si9HNb7}S)L`{Xkh^rS$O(Grmj8}QHas3H<=U$>qU1Dt4gE%~ISv<Rrv
zmwvto8`#?BG#M3LSrun2)OF$wZL4}8Gc2%umv;Y=i_18xOU+5f$@RzTcM~*+qEqQ*
zS<DC0z;K6+m9=>nfQ*H+@`7S(<{^k#Q&VNbj-M(XQ(hN6RPQkGcMQE&Fs7(c#qGfQ
z-8W<JwhBQE+;D-7arN(r;ho^)hpa2`i62-GW=I^pM2};Wyp}WHs*5#7o-+)7Kbho(
zbEp#$f&pmP$6fuH-N^Z|@1XvkOwG+rMqa*<RskltZ~@(_;^5>I<K->cJoCK<3xJ8&
zmh_dQoE*z7=}d9#TTQYuuqdTWqM+~^5WD=_ba{R&Q(>zaie=H)Kar|z9QxrQ5fKFW
zoO;0*Yx(It96+Q5A!MDp#&7`nULU^#ScKmr1r`}DWYW;9_8HUA!-l5g?u5=FHI?%E
z_3P`pPXs+rDE=xPa+m0yULH1G?(SQYl6<dmV*7ivqj7CiSl<AKe}JaYm=DM}ZT^`3
z{vF_54G4aZTQN6X2FBMxf2sf*TMsy`!i}x4(Hx0NbMrWARp3-2<}BotQ&N(o-GP)5
zc!RXGzd?C#X=$1K{yprgA+m>g3oNk*I#s(V0(O-rvljXNsbR??r$lzo<Kz!^I<P)<
zmo`x~x*yI$@CW!~9Im94h79P}zj2*wY_YEq78W-7Q6_;{I~Y|+Iqwi#(bm=mTkE#b
z(PsskAd}W-jKQY(!Ovct{l!Rc`dq{vXQ8^f+8ojpAuLe9<&Un8w{lJ0ebKmdgEGgp
zb*LrW+}-!LE;Up5?zbIxb+OdBP>c6MD-#lou`$W3XO*zMz0xPtbXLAhefj2kTrcF8
z8~2}Xc?&yl24`e^zBWqw1Owu%f`j+jm{nU_^)`NRJz!>jAS#NF`PgkeKYeWe5ZWnH
zGQp*<KH1=zGOEYLy3T#4|BGF;jz!s*FGoStPiQszJ_v$CO$hT&NPc2`Z0yp~5|!{9
z!f*B?NW;Ue4%>-xf;~UqYky|k-v%>(q#|$-;pC)tYT8-6_j}V?ty(HjijGLWsWH)W
zxjW)}b`TV0=YyGxD8Mn9XshX|s_NU<VTt^v-Cv0BdjOG-;od!s2BR_Xd#0fLZQy1h
zfBM%4oQpV4c{@X$b-_4T-@w3jGbBI1V|Ur=eT+hrZBh!GLHQCBRD%}7X_De?MLs1~
zzu#xP`ywc4ulS-`67h(pAdAxblK9#v{r|oX$v*6m{+R}rJec7H$Ub!ZCBDO=S*yyh
zw{IPoUOks)V`X)(B%pqOZy+Vj+silIz@Y?9O-nMbyrKes>lTd7DDJwexP5*c$>HVI
zm<Vod2tzyqW#xDGbw7i-#vMx+#G1=Z&df(au>sGUDKwWLzOU6u?F2688<UT*#!KfA
z74!3%I=UUs=-BH)nAFszVI;;23sg|&LtOV&T?sXuXZS)NQd1ouy-NPK^NSZ7SFfiv
z->^3`GP)z54fUI!S+pjTB54Te+SXQ)I?>jQJ6@M6@@-7a^$R-d=O<yvl`@1ZYP;sl
z?JVZ&e%_Di+1nm2jGOypoS!rF1O{)>Cr?UF=HLbaus?@@9q`&Zlde$kUxphXVT#dc
z6bSc_p?JC&X$7qMfacVFO+Z!JFzH1K6od3!<`F!fi&P1X+WJ!^du%>iXgpn`P^K@k
z=X9Pdp2$A+x;M^ivmT$KTYH-|{pfD)`QtYPtTj`~Hyh&bpD!*dY$UA{7@S9=wH;r*
zS~4{JP}PnIN%bNi3bkBiBjGSNxqJ3OVCOVW89X2Ec|CsB8I|wnI|)Q?Dl&`Je$R(y
zibRVP@wgZ-DJeajetuOPnX8=CWF|E5tb!rhjSV!k&vuTE!C`frB1H#PBKYOYzySp3
zxb*n=KR;h^#^d!2=~dU8vFf1-W!HGroMyOJ=hCpo$|wzI(GfA;!iqzh$nTkQJD5z8
zH(W&{d*}1tli|i*K+CY&o5a!wVbJFj6(p_V!A1$CrMO<9VPP-~civr^=<K9ToU1S&
z2R8_>!x_{x<IlmkdGM;XysB7lcXt~9mJJuX&0OQ-tygeFRN7LLQhMGb`W)KrH#!d~
zcLWZU7E0m1KU&Ire$Cp9kmfo_Y|TZIa9XY}F1jB6*~*WbtvmeM-`_twtL%~Z{{3uy
z4GH7W5ciEjCt*`m)dw%I!aN&nflSQJ+0OTW;oGeZ5sftN?(V|ikP|@@YL=Ar>?pcX
z@+Cxtnee*qe);fW8fIsfRUvn%3r&n}A)<eSS9jnh<^u7xc^J#{Hu<fttRzQ8<!G|z
zR%jQY*%)1p7as#yvjIh4&Fjn$byo1G!u4L~@$$Kkye|Ov;G(6a^dD+AbJyerpNRrZ
zVp=ZX-qtB3Jm`JQSXo_tc`z=?{Dw}%^3_LJJO29hpWkTRER-w8`*$_1`G!7$b2-t5
z{`cffnoa4)9sWT<@5uHx;lKk!jKE_`Av6evQF4%5YFSOEzJ$x={M=K>=~ny-m`A<n
z8W252i<5+zTv^$RJ_k-V-(>ptcjR4@S2MtK-t}PJVAjihcJ6{t0f|-#_#ze<AHdE?
zudaq>rUgj$xntb5F7Ceu^LHMB>m6kHWIvj$tr9bHd-DaFWPb?Ko7X}_6L2;^9Jq~_
zkp9T&Y<=|dbilh&%JZNgzqVAjTJ8fi>5ulQsSWTDg#?(_K-9lc$fdL`;VVAEoST#5
z?y9vhTYQA~5pbwXRTJ}`q6tELEhP_+_y5ff3kob^LK~U03DCLKW(tec*gwX7_+VD-
z6Ny$);ShCR*^f1fCC#9?!vDWmz{8PmaAabi?S0BT-V>u1D6^H4N*vRGyBjb|RT1Qc
z+}t5duBP8ny07+~2B~(<$Vd}PkCdx)ExW=vYG~Ay9?2YkT1#8_!fRr=2(zJoW~Qq9
z`A1RY#n<TnIZQO43ot*fQA7$S_3AM`bZk31g1i!Ay!6WMxUBX3Z|Jyp8c$!{WOavg
zP*zs<(VJ~jR;Oi-0@zzy=$7B>X@l}Y)hiVl36OzWB6v^sZkW;;TYRDZjcR<gx+kmd
z_VxAUDY@ggDk87W&ZbEQ-u_X&H8@$dh5;7rH-%3(U-+cGjKlGV7Ww%2R_uGNLL)Oo
zp@XcSnOWY-%F5VSyo^}tTi5_d{o|=QeIiR3>Zk79Q_WTj5f46syM{So75G&`0zVdw
zF`t+r`!jV}<D_ri46UqGgh&83HY{faR7FB}os1mA?ni3E(+u^3>6zzjr%KPVlKqa%
z4QX2<OG=!~%=lP;0Clt1A9cb?1wQyiDD;U>TQdh}+=k>iCzv7x=LG4`GD>$%%>Mm8
zNm4=#HK*vFy$`8H_A~TZlW>c^ZS20A_+K4{@TSpBKqunk8!N_EKM&FmZ49OAp`%6B
zXwmv;Hxaq&s8C}(-W$J)eto+A-~ZHYjq_ywYc0T-fv=npCXWA)e^r1N`grunCbowU
z9M@?dJ<_2ml>1er-b92t9fFZYXj&LI@4=+7?Wn<|%jKFHwlO)X6f+KqQ~^V_beKED
zWM?-Btaeb3gKPXFlg{BpDDjvJsRRXUu3o(#beoKsqr&T)*xh~Vo8M_zkN4$yH-IS4
z8)L`7oCg}O&CI0j<wZ73mVQlD=dT3*nGS(A&qZB5w4!2oFjJ-4iiD;=GNi_NsnhmH
z1YG?P96wraiq$IxK61~K1@~^+C3&9WzziMul#dt~Y`$mZCjO{*%?}G3hDt8l`3~06
z@iEvJwt^X+p4H{WJ>Yeckv)S-B|MyB;iqct9)Kt?w`=Rye)h~L{q$g?&D~Ap+wI!!
zmvN?MW*>DA9i#^!>DG;%2DSR|M~(IMsbCFZC@-{3>m4umJZ-BC%y2r|4w-GJQ%V#5
zoFTr`g3E@56_;r67CjVE5CC_&otL5E_uo^W_-)&j6CZHX=lHEWxrK!VHpT$4_Xs+e
zIsc&u?G1?vIR=0NCiaxqrr_b7U2NfOW~G<;#KKcl<L2e%lhG(~<;ir#>emd3b6`~=
zYhp?pPqM12mb0XLz)-pM7^YrS4>AV!*9Hu|6YlHY*DpLrm2dpSGE%MFN5(hZ>_;~P
zB%w#+_dG#4nA_HKq2n63+rVjjCmoXPIU(+M#<V9Mo>Cu7YUt<+JDOW00Ympsrpn9C
z;>g||%aYy$urrGz=p_loG}WG`X9G}rIq~6WyEQg5iN&c1Q0{1Q2sb58T%Aj#c*OUa
znfp-6HZ-KFl25&JTpKFzzMM^Lmr+|5vR`V260(-xhkd-hraD8^M&5x*O;Ff%*V@kR
zQ&Q5zYy-M^ZzAj1T@jI#zSL7YAhY(wdm*{t>m+p8-upXMVPj)+13r^A4TYGO9yt5J
zU=t5xC$r5DeJ3#lmwp=`%d9{BGJ4)ZwLnw9$*W=0!^$cJ3X84jkhaRErgU-CwluNE
z@DEnOF#h<FLpBh~t;CR@{*u!$_zmglG~pH#n}g%Z5gp;*Rc?VNEIb{3D0;eiSLz#7
z&divhds}lVU>{pisVy#E1eV5ZzlJN<vSScc&UaE^P>#j;K1RdtZA8=ZP%h~XORE}t
zxH#}oR@1#_9S_zaON$Sh3)jY9F(vJ`_k)>(QIq+m?dJXIX^P%Y6%`;?Fa=DYSW^fi
z{&}q<n@|(X0MT*I9sz2wu<#y)SD2_zAl1IIun=D941{B7H`?1~(z#7PsJg}H-7)N%
zK0CZ;87tDNAz4NG#?EhCKLz{;m*F%9KPkWU>GTU8>|^Xv!al4EV*+{8%=r}Nx|qn-
z1U@4;N-R%)DVSVG{|oNj*aVV+!Vyw#>mzWb{)OQ%u2w5h{BG_07e=`EWfR=PhHqs7
z+Jxp7ATTb@H@JU-@;8uw;rDN-=uPb&fuOfD%6z5o^vZCY<-gtxY5B+n2QoRs0|IXI
z@-Q(y&fMowZ~-J<bNlQp8EZY}A(S&)qeVrkZp0~CmX@`ZuViEbX;W00387}#zL&7t
zmwtH+EtZfY#{TXu0AN%B5_U--+kNBi9+CppHY*1Q@kYej+OjReifJDB0vOd89}*+4
z(M*!8vc*NdH<$2f9v?>+d+G5#%M|**h;RzJL4v|O4pst6O0d~1{kaNOTTK_W)KwBW
z65-TmFRtN26cw^2d=?nGy*k2yxPsO;zgsPEad9n@faU^I^IWHmx5s;z_xk{$_WE5l
z0R)D<L)(M#rVH$Bg%6Q!z(2eMnDo!eil||;!@Albwe8jlK+bJNneyJ9IdU5H^~o-q
zq`NaN3U7YP!xqeH$DCjh6kHxDaF7jLprFVI3~-wMV&@JGIYR9V$Q>!vLrGG=;|gMp
zi7h>AYIeap?Vj73%_S-{*kilP4;@qBXRB?lx`p}EljR1E=gl}20=|U#>IGTZrLsbA
zl?Vw5H>X@MQi4N6-$kmhS3m1ZWoKa#gl70~u2gDCV*nTSj)RO0<LBV+rMj*D4o7|c
zi|Lw6X^hrpRE3D&BpDn+#5M+}@J3=@ATp2Df2hrPaI~-@d>%mZ2B_y?E(<+3z7O=3
z%-r@j_;#ipV&JUzT#OI|?_(@t58p_0Sdf9s@b%+kz%lj!v?!d7M+-HpX)VnlzO#a0
zmCgw8*T%wl3Gv~0WP*ioPF<dFHNiyvsQs?@w|qtz)D!%>x1u4ZO6rH?>-8U8vdMz4
z^p>DxfO1TiLJsP(ru`w4oqlY5d_$K%ttI;BVhRdj&@^!`#rD8<)ZXafB*{MVX<0N+
zBYR7ps;ZN8yQeD}hWS)#*r=gMz0K5E;?~N_9Wp^emi?dKjDO^AZ{xLg+Uv$U-ysr%
z*f?k}A={NmzVr~k229?-ur?2g>}+l}+WcV-{#XyZdlSupQBq^r!l#(MtluEtR2^Vx
zqSy=ec+KFF$(l@zylUw?K;<YLp@KDN%gtThP@jycrKPR?qrN76g(VwK1lMgE7)<FQ
z?~LpNZ>R3%_e(j4z}sXXnK*_z@%9Krd=TG1Gw=6Uj!_||5PtLW*PtO#j)8jAV#K^d
zJ2KPgN#G={t9v_NjqS-<@bN>l`g%z2I669g_wF44PQPdBASq@JE;NhTdR(|ls0avb
zj5SVbFysT6N%d<98C1`S0nXaod|_!>cq%l=!m>8H_M>_6YL+T<dByUmb!c!Q+TzT&
zZ^V~J8<e|5^Z$3Si<NhKym;d6+<*wbj#Z-@`Yjvl;-3D;Hf8GGBu^yH92_e->xfx>
zjG~6=FK7cto|cj7i06!0lEsPlK2{z15NQUbt?JzoYcd7--2TwKyEpz{$k`li>nb+1
zQ=0)Kd6)ac^7A{=riCBS*oMHTxSkHN_SEb7+4(tyK|Hvh79L8$+^7iONAnh(tzk^b
zMqGB!Ra8{i*w}I;6i<)i^b0jP5*GOpX7cj4ZUrtF!R;sGgO9Jn81wJ!9eJ6PZ$4c|
z;yvG-J5gc4a>|a=-IFI_*QhF|-PYBWIi25~CxO=!;%j(c=u!MIclihH(Gknfo6X4u
zrCAo1uPue~yms0W0AQM^w74hli#lx_00a&T7630o7%_w$GV$E%+hNQ#*)dC1R#sm4
z5FFfp6x}`H)>2tnd-NL2#+tKBr?~$$M7(sM(SmHuKhT~uG>F{HVv_AcYj)c3@>)%G
z0lREjRRh}UXAfOG-qPxm5L)1=Wb*I>3n#PPKQP{F@o#Q|KG@0a%W&AcQgzQQdwo&=
zSXMUp<%_^()6u8LZf>;=4GrI|Qczcp=0F75Ua|N-ec{CJE8zXW?q!U-+H~%`Gj1Su
zvOsNyqEP<)njernQuI{C+xv2D*Z{8f5#S`{DJDU7RFq?;S_9q_{A&iDPGgW#1;mFX
z4V44Rhk0m=Y^YKTU(Kd)Lj2e7-zC{s1Pq(stXcPxFZ}#j=Cnbaq{#Pj@aN!Q8Oq33
zr%Juv{v$20RVpn<RbU>4i5p4!;HL#O^%fl7g#Sv};53XXyErvDN5@JibyOCMO^+=B
zS4YG_*9N_H@HlzyN#s*9220^LacWtC9}S<I#-`n_??&cLe(6T$z;qEo`RNHkVfVzu
zvwwvVom=_#olmG2A%zAhhhq>x?e8XDpt-WVY}GH(_mGWEm!>dBr{upjl~<KD&hlU#
z+qffM|5as~YEoJnZ9iDo7XAW{>?IJ312*b*r21>NVK0g{cl>2*zsKRsEh#B}{)A^0
z`a|yKh`w_YUW=jDmX_xk?Lq$oGBklNauRsMk8@lZwzE5ga*|^<g<RtM*jOIaSb%jB
zShj(j2j0l$`g;9~Z{yd|_M^Lc2ht*L-Le$&ILe^*(uO3x2pr1EwO10;-hFiiFhlg(
z{x;`SY`-<@S6LZeR`w2|^}L?c*w%Jqb(Kxk(@2%36&(#J!9TsFr=H#12=i4b-g$uG
zeovu?R_7CY?td3k3zMX&ciroU`v-VPa61!PlHxd(S2#@1%z$@E6eg&k&d-uN+S?D-
zh6zr`DhsU4%;Lvb;R853I&L2vd`}khz7TS=3VE+vZDefpQHu!=aMAv$sTiNK#_x02
zUt8N)T4reyKhy5Kk>!T#NhA`Vgu-3IkvTa_K&RKpf5&-B$gTC_1ss(+`gMUrdOtxg
z2Z+q@(2y#g`@txQr$;@=mOw!lJc#6g`NXuKqTUWb#~_{P?(S~qHtrDJSb5?ma#mc7
z%8H+@Auu;J1z+k_$f>fR9Q|qd`gIW4w!FxOPG_}Wnie}R-<<Bi5Zq4nj!x$c#wR65
zaL><mW3m005u^BVGL?Q!<KVk8{Y4fR_Yh!#O!g3SV5Ka6GJc#vUZ6?{_aypgC)9M?
zr~rb~MJHJ~IS5;Uc>8QPo7NT<_J<TSa?D_~X%7$0?!7)z!$0TI*WUg}P|)=7&-Kov
zSFbqWPJ3P#h^0xgucs-q=?&fP&6~G;khJ0k(vd_|hx({$V%<f42K#@p0Jz!M;^aq`
zS#_>FrU53zdWbJ1y3?LE94(lb2-gU20kS(eG0~sMmFu$gDmV;Tfw{ghOv8&!K5}?4
zZs6=#Y4B;m{8MVWmrl@}?EC0wNhmGcKv+^f1-wY+aw8ob8JKNf<-UKPk^mz};OMx=
z;KIb#mPu3c)klgQAo#xpQ`M}cFV+*5y_++2?y|Dzu(yrdHBA&WS=8{Al$6pR7>>YU
zmX*Z;a#<DC4zta6h&Tjt7(bw~eP$hzk*#5Pq@-_&qntj)L2fZOKYu#k?;5z1Zz$(H
z$!v6csfiFVRt<mv5IQ!t@v*VV?PPAXRA>lb)c@|Cv!WlYU=t~zYad0(YW!sx=?1@L
z+qriT>y_Us2=a{E)S}uSpsTG63)_PfxCasB&!H5Ow?URMFy#vh38A4^cSv9rzLqzQ
z{vsS|eeW^O!T+Gc5ig!Ohjm&Q8dC1W#Kwld&rVO@s-ENUUN86q{pXM#`=gWYOvzkR
zkyyNFM4R>Tv_tkMv4v~Yp8GYGuk)3^G2adyMvBno7=m&OgnbD#^@4(eP}`cBufB10
z#mF^~@OaAy7$*T1#yUBR{bHG6<Q<wUkRQzIoNoS^CA<$m8+<?GT8K6rpR#B7FD@Ec
zwYb!gU%sD6s?qDcBU#|~cXTDt3VA_j#^@VX@^gc|^6(COU%<)NuNpE+VEe)SutIHs
zD0rP~UwwZR%`-&})e;7^N@DeK;sKSaA(CBFPtV%eIHGgBFs@0!K=@c=A7(ivx-P)<
zrWLJsg5u(x!Ryz9jh^Tv>_?C2b40wN5?XJ9&-fW&<}f()(F{B$q8y?L$THn=v9rVM
ze!sIL_xbbZ;OHT4V4eJ)6+x(?BY<bHP`Of4qc+{579;Tc*U@Q!dTtM>rLd*NO6V!5
zBbC^k|D0)gB&Hj@B>^UfhR2V}f}#vu=ewK<`)+7ADksZLnF@<#Ll7cwAL%P1VvMW(
z?--Bo;jza!$b0v<V~XfvN~Ae??_l{|%haat9e4`hu#k{YnX>Ewo~0id*#wNUJ+(F~
zQ3JB*=r6VLW72pLfV<};l{V_Q`Jn?Jh*B%2xf#()#j@)73y+y9_s7%}5RDB0mvHz!
z837;#;E*=0!R8OV0isqD6LwlZ1BeX*o%vz8FFh*ZgTzsoiz`>Ybz6+S*92!9UOQ;V
zoc4d&b~<@q>^bhdrmWEn&traZa#}5pty)BB(r=HunY)M#eV30X6)<#aBYcwmfa~=O
z13=wA*akNva#whjKXGtt1I@`3!~aK&#wVrzIdB@uT8U2atuK=!X?oP}AE<9iNKFOI
z6}qbI+K5Q;?I-g#i(LGpg5lb^<rpFlIXUNs)C1GHc4^?VlTnJ=eXgpKAX0vacXHyk
zQ4$Ml3|t3rsHP1(f_v|w(NeU;#tLr^=c9Y6;_B5pj=sIBGXLQ2W8TI_(IbgIz-Rua
z(aIWKf&Tt-Ki`5G4FCp{qiu-=mTaIiSkBZghZ1eTkdP(iJiMo)W4OEf7Og7#PTWsU
z*CV`+7cgiHtbPpucQi0C&>;qP^z3i8T5#33WM#iQ)}3Qnax-I?*x3F@C8BnfJm_?T
z=4Qm9w)Ntg`GbNxoY6^1Aq@=?1>`-bjju@%RR=n$XA^f7{QVup@o{T7goSTB{tkpG
zI~SL`Le8xaTLr-l2i<I(G?ueX)RD2l2x`%v7eD=OLgZ0cFh);rZ!>P_8y)Pz7?Y5s
zqyqH<DMQubt8^5zP3ePqN^HFy6*@(?As?vzXGHwSh~tjBhozFEw@|T##`wL*++{(s
zH#&<jYypD0`^b^T`L1^lloGRU8@v)so0bT~9r!2KuV0_Su?!qCZn`WDOUp^H!m4w`
zBv`*H9sPPUUNxnxCjOPL*38Vnx4{^(T*Y8N+cV-}n(MTqf?O9#NM2V(RLR2qIZdSQ
zBlIx`wep_c-7PKW$E!><+ccu{c#mi@s<iJzLYp~IS70z0ZcI8t1qmOvd3<KQ6%bU|
z+N=#ag^Y6kx{gd7%aF@MZv`$$-b20_P5Lu)FP{CG-PsWf*uaBxvt<dLr-WJ$Q@TgV
zF+}x=-C+%Ux&Hfi0OkLH+xlLv>+7RUKWQ(R=^HQ!WY$E`;A?#N1o94Cy-%mu>9y<G
zb)h__wlXyIdB1|f&DWE)sn`o<g8ljovr|1bie-P?AZt)(d#TSE=M%O5LBPI{_@;*X
z5UNWWeM_qfF&O_>55g!a+67HWy2sOFM>`yotXi$7+1h$+f`TRL*S){_mf|nrwfJ|#
z(5sa@V?{9_s|<;h-FSb0p=33B-;sWxoXw~N%An*%H2U)Ef8}dQ!^<_*Y7!777=J0G
z)z)bBfr8IgQgkrF^RERde~wc+-;Sm9-oamI<rQc6tr9(&Vt~apPj(*+8S)R)j1sV8
z0+y@xJCX0VV5@AVe7BNPuuSrrtiSQyJ}a;IqRmk4BH}+7G%;P3RF-|;6|Ab+h#0NN
zuPN8o<KVClFXyIwEHa)fG~kSVJP+$vY6Q7WWv%ky)3j;vDfW}lFW+ms{i}37Fu)fM
zm;H&~f2CqDGTP|BAv&F9PT>V5LSHj*9n&i{4pkhlr<mdR7L~jf)JLweQer?}*6tn=
z5H;bhcnC}AA8!(-$yQc9I*l*5;1Ix9dlu|#D2jOa_`olydHF`BXpt0+)EOHyb8OEZ
zFsUdhHen+6|AU(sdL|1#c)Ih_Ohm=ccismtXvWp`CTm>x%#2pYeeMuTvW0ZOgv3Cb
z3@9M-1&AcL2vBd$FDixYDQg@DM?avrTwLQ!O62!cC9{*R$CUf0e)ml&8Jtj&?X)Bv
zx8i!q)HeA-ExNm}FTf&dooQcjU&X`Br?ERG2`1f02?5vL&69%^uJ3tDMG6T(5v9Ty
z5vM`NvEWqPV!6GhdV(kTdV<Svb@{Qywqo(mHD>x1jDvKEH5@IH8e!Zj2_K}FgT1}1
zvT{Y)1AboKe|R}LhLu$j)Y9jFrz~Lj?6WSiBtCB^@_^;^@R+imDp%s+LFTUjcf@(V
z7+ztI-z^}bj-eG?NODRW5V^CfP@ujuW3>WJ=mi=*j#(M6U7rFs=HBM!YkNeY&0r+0
z*Wi}@<qN&A@SE+Q7Xsv<BS%$;;ba=0x&h-U(K%N7ATT*Jgs?{0(m)~G4=L%OX-iFw
zs0@K&t?krj^p08KKnv!|TW{6L!{3o0QuxDpm`UxsktbP{KsHqPpIUMGS@yr82%t0w
zA6bDc9-#llCMK3Utd{zo2)HhH9~2a<fxSH>)oE*vECV8lxjwvMZ*LEYnv<mloKhX9
zhl|zL6D*${;Ac_2QK0jiowlwwZx&iDEC@Oypxm;sSi3gr-t#VQMFjVBXiqw*k~6|P
z*#hrDe&z!tLR(LdJthfD3j68_s~h`u)Qp1+Khz7u`o8Xo;fad3+qdcZ{U1lO4M#xB
zt#OzmEDAtkL(Ay~Lc|4D@T1?^+iR1Okr}ITP+I`TgUbHqM3qW9RpQ@+1BoZG@19Xm
zY=Uwdnv$96Bk2;fD?Z!4Cn^3^IFSqKPspvAi4Y<_s=|e4%gN+;`&xf>;k)7f7#v(i
z?X8!RmWEGA_@h9h?C5#n(b0_n1nm<nTCt`p>GGft3dKdG?J2{xn4!b042r+Me`b_E
zwEKjn8|<~Vnyh7l6N6qFlWI$J?DG=`Hfhqk968<I>2s<>883daWM5O0Z1GZnw=XmD
z@%dM=i=Dv8NQgmO6+8J=fkl#a^MC~7=E1mDD>Vs8zR&ejd8V<r^B3eDOt4-16y_|R
z=SUW4PEP7zjSMca%5y#-SlRn!c>R%qCUPWVjSUd964L7fqC$HAdRWV!nyhiDseRyD
zxKrVIns$B~3E$K9&Q4`{IRb-+i>0I-4DD%lX}1^{a$~13a3TSSpMh)bvyGJ<j%D~z
z1+*785Ko_y_>gDp9V#@bFsDhd3L6qN7bXep)L;@YLJJFju;-cs6!>5o`!zlxAw4$M
z(n{CON!7rB+TC5Kmqdja5;_m_)4j4!d2$B_-=X7B)Oen9+*z@0N)3rP7vTpD!1(m^
z^tW&N8EDA;>F*uV&1kV`Hy58^a3Mb1&e1BD>Qvon0{8v>mk-U%;tGlNA#uUf1q3=i
zsN)U!5rB%#Laj^p)zo9=>%f%(RO<<ILu~5iazg$`{qr8wjd%R&)kj#+L!Ov^`VF;a
zCMF!uYi~X7?}TiNzhIw4kPZe=X23D2zlLZzK+6955qy0fL<9gDXQhp7c0`Ka>l#SF
zLc1$yuL(0^(AhBkH!iAL>1%*kYkqqN;1!z1$2ZMI_H}jHjTI-v=7zSGXJ#~h=!Izj
z{e1$`A1ia0UQgWwj9MRpE`yy}RklacFmw0pIIOgO*H;`n-ZAJTkO(8fwfk2v{s7$p
z0QAMr>mG@Tk%(>8@8L>N-eikIgVPO8bXp-H-98>>i2~J!Gi#=R&{dtmq)P3<{=oq;
zl2+Hbct78e>%s*Cs!v|K1qTC<o#nIR%k}}Gtuu`WX`rD3KgikP;f|ITa4sN$lkUMD
z2$L@^O5Rb4@R@dNa+a<DQMlD;h;`1hnw~Dp3M9`En$rMURE*&TNCmzwdU=Lr_XtkL
z`^7p{I;sZeYbmzGH_?M03DpG#J+_{$m$uc=US5nOafFCq_kfwOhz7QQZ;TA|wLhQg
zyXw;vI<+@-zcg72hB39<YU)tAz)%MMbwdz(nk>nBT-jU8$0EGdCU$wuA*u(`X$Iy&
zCI*J{4Fd;IHn0Bv-Qc)ZE*HZHS*mx6;643`;J@I8d~C9Z`jcPm79pD?r}P-eUERx(
z>+vusewmq(ab>tC;qquD#kS$%#0pmB>GA3T2#UP_Oiw_{%G%3YHHQ@gqL)*17b|NM
zn;WH<wny6lmWn+8lMgxo)SrXL5!24sx|BYYeZFY%)GU1VK*|b;SF_-gFg#3v3(bH}
zVaEO@R5e~3CH!1!nwtB+tHS^;{<M@OJqH<vFly8Rp^RKi8Wtud8$0_*LmZcJdnG`V
zpma?H4%;GRDT1;wL|j`<BRCI`b8g#NbWlFEx4?1)akDGz@x_kFe?T~_1g=GN#G0bo
z68|S<K*=3)jzO1xEwj+WBN-T33=Apk=>LlafMq76IRg&K#h)Oj0yNnW0yuOrY~|#-
z`1ruKmaD?7fpwM)?bI(3#kHJC0SCK^vM7l6@`VMHCgeip5OrURRZCh4@?ppZASUiF
z&@$EUjh7mbpcW-O4F95c5Xxy_At|fVXK&SeAJ~5(d(mjQb6PQ=C#IS`{#|_;9TNkB
zQw>n6j(CiXjA(v{`Z%hamFK#q&($B7>sprxV}bI=k@~<W0fRWa?BYLpOS{5n&<DKl
zO*?mc{krVmRPW&KyFZR|d{Jq_Z#tZ&r&=oWUJZX#NVV29I=eLwf}tFX8>|Jw!E+Fa
zOV0C)jJ~~)2oo5vm+*f2(?n(fDHaY7P5$Wanxq)W0M{Ci%PY)XU2u}?ipkGG;rN^e
z@9^_MZotxK@Y&kc!~~>EMGqn#<;><GBqaxP!SIS7%)jiE?d{9KN8`U|BE^~S?dyx}
zro+NY5|2QewX5GEGDVQwrDb@EH06l<f+*P;?R3GY0+skZJTx>kDA%Eaaa!pW>u8nQ
zc+Ms&>UDl{DTnKRu+HM;v<<5PwC8YOPS-l6z+hncWH0@4ALdr!WDjwO+Q7Dqkcdc5
z1#&(uKxNDP0`10)V(pz69%|hh$hNfJe9nG$*wj=~&4P{|gnv(_{%{tRto7N7q!R1^
zZ(@nU2<QbU#ZYu=y26B3VVamE5<+HDjJrhji*M#`M(o{^HmdnCerzcJiXhY3Fx&Jn
ze{4j?br%j)Jo)R|i6<`kpfn)FJoxAYcEu$6iHzq`($WXNzEf&_X*ydjZEW-c9@gu#
zqaC-qNy4r}hjW~21)*alr>;NBGQor^Ax-DYwt@*z!RIc2`nfI~ypV!GcuolAWJY=d
zdjS3RFI!oSp7`^(3<e%{Xk$9{Z@SFWJ-c~Oj5f`I`J<`sZf;IagIskGN&IYR7kXu3
zq4w&extC@jh_NcAr%ceg^5YN<iX;3eO-7yr3d_#Uzq^)<nsHTCB`fDlVA>>ew3w6|
zhf>wY#4OIw8~)r~TU&#lT-b-?oMrpt5P~Ly6wOT4Sa<JWz}{cnhrvNhN;4L)aKb5z
zTB>8D0MO{~$H~jftDOsrjon{&w4UF&BEi|+AOEz1g|3i1+yy;o=v3<envw{FelmjM
z4hH^+Oo-+sM&ipV^_5k|KGW3&VRP(nTij8O4t_!By1(yM-9LN$m@VSLds2A$)cdEb
zWj%t~%UyNv6+xmXj1Op~o9#jAPnw1XL;A?6YFzzVN3zcXwzEMn41#_WxpIwY=KkQ+
zlr9_gy3H-y!2EosVN{>5=0`*2o2_l~>Q&%}uaD+qu(vp8P3y;vT+6a<W!B1S-&wdn
zf@6)5Qe;ie^KlZ1H%1F!A;i>9*SjjHtE>0KU%(mUz1P>I<yi7v$12p4oXuY<0v-N>
z{e0$~(I+~8<Xbw!S0AVUDMZy7AFe(=Q@LH=ByXxF;X?<ILqCp)60nW)?!66pnku~}
z!1!&cHI<Qp*BM(Uh7sX%86@jxl!3HPcxV)`jfv|&BEW@rhnEUCFWAphBaOHSh>K{6
ziR09F^a)jN@92~RV<Xr%&(f{OPMuMc5R(g2>5pl0&MIabgRfd*a;&~aWsQbh)T*R{
zL#CyL>H|xf;)tT~f25mHm4$CS?+Wc+zMErUAU2XB{1rmeE=Ewr7`gWRCgqhL-7YHU
zT~E@n`h7hkV<$|zjbwNA)#aCfBOPUxIVxjcJ7tCUsTKO>B?lEEnCLEAGn3536|*Cq
z=0ys6QeBY{U%GQ2JfTn(#Wy|5mdt}szZ)lEqIwkdoUdPbj{FOD4KoR+!lxM4rwj|z
z#F_tmOiHqdvz@T$?CCIe;ilWy+Sm3u4~65k&_4(-XSwUoofFRYEcy}S+q%x8XW8UB
z0Z6@CTRs#}FC~?H`<6ef#3xUPp|g5K{LtuwF?S9tss$;z7>)mTN|RrQXV<20-Ga4R
z?$n%&Wg8w~B7kb33QGSQGU2b8{?d|Bv;Xw@GgK+`O!;!vn}n7DiI}b)D$7Il6Uf}$
z+afW`5~yS2A4Tfs!S83S6x!Oz-cD7hC`r{D!Q*5df^^{wZFJ}7V_=ZxNHESTDY1bO
zu5RTv*gZ(X!%ltn@ilytp`z2;Bbkzv1b`apn+g;JNk?~w%+1)1g&?$Jj+mICc3`!)
zr$-llC!AiugE>0`)V>&m<{*{!33@XI#bZ|N=1?vY++F79JEQNxeEB8F{f_$aFtutY
znBn^YZv1U*|K>$fMk?oxM$=UYVs1QMNda0sOs*j64DO)-M5emrb2aN$#lE4TAz+|Q
zOdMCwdFj@_*#X+a$!-tl-7?Nz|9#ofSO4>}p|w@*_Nuj=aD||Gkh5gnA;rh{p-7C1
zQiVUxT&;*)9WO6YDmtFY$w{L)@OX!N=@3kvpli#1aRu$logdi$zLLW33~}vOf7#p#
zQQ2F-uZSe&S^%2^P?9ane6uG)b}idKe*Bo4I(@z+$opXQDY%{Rm^=@>`tMz36@I72
zz^>nE0bMc74+LPc4n=L|0+VJMDd-`w@NdEx-TNLjgn&wK>HH8eL;Uxju?{*=BP54t
z;w5bGEFRF&8G*7!OTq6>u@_`!@&urLFZL1oj}(Qk#;|tF-_0-nP3CuqAcO~mLT3ju
zr~t1<RAu7xj6#?^Pgpy4jflv@e{?l`HB+rO-N@Ns27OM#S@*35xPAbC8UXz}y%_?2
zRE>%7wg7MJ>N`FikGX$EZDHP-IPxAg9s0^DTdaJpyjFPIlaG4yD`Vhubvi1nQOV8&
zA{y>6kQ^9w$F8;|x#6BCVUypjU;IB=e+x6J|K4Y(`0|bB&>@-?5<<w`>W1m_KgeRQ
zzP=v96d~l=#MBg%_e$T%@v$KRlszav#=h~?lSItBM2-r%<;V>2==gXGD=Y9Z`-bx$
ziHJs$ja6W?zlW{i2C}ZM2xxHtVFb-Uma_&>9H9iCcS%GN!YBKLX)SAIeuIv8Uvgh&
zUv6KK@Z)!d36Xyfb~}d>qemo>*vb#t@};IGG3i`i69UK@P(33DiREqb4#qOtZ*R{>
zP6<W64L<xXro~Eh!g_iIwSc2(FYqwf9))wTuypms0eJngAC@NFEpE84YJ2=1j)JJM
zM-;@)`A}Vh!9(#o)T3ae47-IUMRh~(9@Vp#!$yVrRrt|3Cn{uG|4|K-t0a1bz0STg
zH8st~NE@h~UYu_Am^HtB`xX}4z0I{(S5v+QmI<~C4`DSBqDFBI0jSR+TRL|=^PN=}
zAu%y5Q_K6V7iX@p*q~V^Mf;>`r3{4&0^vI=9<202^2Y~NGp1+sIpu>-<K&5i{`)xk
zCu}GJXIonvcT&xf>ZATfhz>qkAz*E|{{hr!;6WuBfaiqhI|fAs<gnS&v@(|6=F6|T
zzAQ?QfPt53$G;|bXhV%=Waqa;rmuVBy`D^Gb6FaH5X;{qrXv7_lSXpLEn0FGRGrPi
z=Ywt76-qp)HbscskuV^db927(Zzs&$KEW}p84h*;P%O}(;kq<J!gB$+Z;JSYK=R`m
z5&Xd8d-~@UUR)8M5ayPLtY&pMH=1Bn$U5F*E;S<3qJac7#C0}nA_mFpnFs;n_S=fG
zB#B*JT@o}>KOUCdq!ju}2QZs6U)H4gzFmipqGpdkXh`ALFXz*PcZU-|nrRO2%1Awg
zxRsOORwU;Gzgvc=H+PE`^}r6-)EfLF%@q}s2}$<!Nu;W<7jd!&w5x6c);Zasrl@&S
zhC<+l`tt6J3bQ^i6X4yFHpJ-TBnX|O9dTD9v%YrM-pNVi_0OLui!70EtqBHRDC>`M
zcjO}O_mVGPj`r7vp|vIqzCFCe)nYXxWx`JCGDJ#P=yN>@`SCR&ftJrFw0FoMA_R*8
z5Lkc}p~Z*i`(}YT)F0~fEZV1jt&C8f`&V{$MrURkW@e_s&?oeGVq#)%#q*2hDET+i
z?ehNQgW7}yP?(;Bc2c(*N4tE<y}?QZU@mZ825+54@rcBuXcNOsb(*Zn06X*P$!oxN
zzQ4%KSa|Io4n<~`_{&cIeJHzOfvMFIu;M1+Eq?<<fxJL{tNDkNrDZo3XFVPXNuBql
zDCj?+p^A%*1xH^%7B--v``(ZqC?01IcJC1Lo+fl?05z}Ro9(Y<hArTuwFo~k-e6?C
z2{u@sTm7lpKICjW6=X@h^%-9W-R<v0e|j-(xKCE}`73;Nr~ke>?dy+CPT*8q)4#@o
zl>#JoBAz=WjH*;pzU9@`<MkKj&wlg(FN}en{$+ow<j7&vuR&!+#qf-nm>7avcEH(c
zEG;cfNEk0Ol!W$V?a!Zg-G;KVq?X~(leQTFzHqUZZs565Qau0~J+pLA=hneYNoYy(
z6<xi6+==8;PQO?H1U@;1ZEL13VT=*l_P^iI_keW01K%gyhxH8&5L)dBKin49bh=@1
zX=G^`>YFK_3q9anVr3<z--EP2+S+akzJ|oeM8EO*>6$%MSBdocT4!x)YLRuZB-LRA
zsI5`QNA3boN5R~3*|WwXaj7ag0K%wO4a>p|UY729hf;J(IR#`VB5#HBzNU|>`|Y3i
zj#9{oDJl$ZXvbm>FN?CxGcaUJ6R^8x_Yr*g9zA)y2<_&xXA>wrDSImgE-sL+YQy5X
zz|EHH9Y8yt3$3d#mxR|#NkXz(J$oXQc4sR(F*@4oWIqW4z?D)T-E_6TI6DSz$na!0
z+`HTAS*%Dw2M_`?`{*}%JX4)>RO3hp+f(}>wFo*(=*?deI54WD?RT?1ykS{9=(=6t
zQ&aOyS@|P;o}2e@{_QBH6gwJ%QSNs}S*#EKe8um^_76;dBj~)Ty+o%w#X6=Ph1s^7
z@lGKw%g(>OKeeUl#L`ezH3)igNH16@Hz3ikvLqq~8Bt4bQmMyY-z7LNKi_+{RGsdv
ze>iDX!DoF$tzQRTG!`XPL`2Jri^jH>L0Czjt;Ur-3bQ=-_N=%phUgW49%e}R!85jA
z`mnQ`B=&cA;|C*GLX5E&`@aOehnHOy`0r(lzV?@Yt|_zUp=M{ayVTXG07pn|nE#_`
zkU|5eh-hYpsxNB?l+7jJ0|=E7?A6G1C7~-<Fb?FTBs8b{`VO|dy+Md77wny^V8lOJ
zjSF_tNk?V2bE3%u(3yr3Nsl}{KR=Jgt>Rl+8RNNkPm&EYKR-WA1yhQMU|^PbK>1U7
z`PawvFlE1nKT03Y9nKprux3q`?Qt3mN5|N|qeI{|`~3*M*HUiRGXGf8cDs}|{7pt=
zzJC20uTbhxglW)PSs4dTIoeI7bWxj)vHM$%r~UBwz{bm}iD4z$o!{aNdeVh|RVSI_
zPzyGHT+g!3cpw;-wQnh>Hdhj_V5`W536Ov9GvOv<Jp#?^nF_qF7aoSOhQ)@hA?cCi
z|7}|#)V38T7f^RC!(sK;Y1QKaMCI(v129B5e!n3HX_BQE4ZLbzPn0jK--h(f09Ch=
zQL*WMQ68Qf_*{a5&pg2Mfi|<gp+pwaHnz)QgKo)&WeOhw!jbs_{Ml&#^e*>+3{2xM
zM?iQmy%(zmbT>fOkBPfrYK_qfw!9`o+)g4x)=n<-L9J1d6UCRiNzo>yrJ8-cW3Ub*
zUc^9i7c$my?((s7bMJzlmiZTE`wLs!NczvPZ6LoMP{xW`Z*P4V_JV~I7?p#114AVs
zFwpW(7nr3zDLz`8Fh`ZXZ)YH=m_L(S=kxyM$wp~eCjPx`7b$ogfNU7q*r50pS-1w#
zo|DzK)O1GT;#c_SOMZN|xib46EDT;GT)Q@jF`^w}tbV4ce%=(Fm2rjFlW^d7aY@k|
z1TVft_W<YD%K%?hBMX*_O7@1zWIHixB7vw7OH$NrIMV#}`$xPdnLkEBRLt3QwhQsB
zz=e>AA}GX;$S8mXnfZ*T(RHsKD&dC93v@qpvAvZPZ`*N>?Qw%c%Tz*gLc&VBMYPrm
zUaK((Ssh3{<;;Aq|7JeGw((epV<6?>YDA=%{?Cmmqn1E}GN+vhpn%=JefxvZ;W@5o
zBENaRwZ(mY{_3WS15P;XDfz6wh)1M2=7pY2VLe$t)fWcc6&%Iwwr93E>O>WZiY5X(
z8&^n$h6I`un>(9-6^2~mNW(UhX+>SFRbsD`U#7Yj@FL{p<w4i=kh@$&WTuLEFd0%1
zmVr79+Ds2PW5dI5XBGlmK+Q&y+ymlE!A82F!0!m%m>*1Wb_iMRhZHgdqtnv<EG*E8
zeh|By16a@g((A)Y!d+~S`6$f$>?X^zjWU_4!6f<Leb-G5Gl#~;WHL@@VYoRlA+hy;
zv~=y^Y+hkpr-aT!2pYH1%Ouhk)iNcF+^X&*o$D$dw~AGDbTnfYLQ{`gY2%W$D@9zZ
z*ldqHF0Ci4`&=sR+VU7PrQI4PE+dk?Nqm2P=Z|yFcg}gg_xHZP^Lu|S3s$8+DeHlL
z=FUrK9QQz$dhhDV+U+nFM+Z|x*Rhcff0tdc8X@f+=gijF9Yi=3w<(UG=LtP?Vt|P#
z39JOrE@0bVd)rVK$RGRdX@b25m$9$m;C~NcgMm1h=Ow7H6TBAIwI2$S8a@1aVPGQR
zzQrm;6}LCVmMGL3++czm+ue*Z!9?-9A-`ODi#5_sHtlKNGXDZS{>e(Oz6^y^B%{^K
z@%dL`x638j(W4e;4=BE8-`@9Z3_Uaz>6;3o7!t)Afxua89e}US$YihMBtud;#6yM$
z2cLM{gOFoJ3x5ldBzqa2dK&Z1R`fDxlK`>*YI?f(*_#FkUp;rp?x4tLs+hI9$Jiy;
zO@;CdVdAn4i-WV;y^itc$nBgatfq{?Q)-+8S0YDX>P*pP&kGgc59-Q-cFWOji6kwL
z=j|uOQwqE24M4NcnTGNiu=$$7QwlpKHbHC2S3<a(OwnSmJMEXZL@Ps?Gj>SV{P3jD
znw&g(rsD=!I~Rq0sVqelP4p1!*O47hL`@-bK#br}!WF2WT3dl1$jQsV){nK3bngtt
z{=N+ddNpMPDoR-U5$*+IQEO?!Pc;d+5I1eMfvlfM^IM;@Oo5TV{X;SGS0>Jy8hs-p
zcjHH=g%%F>$OERBV%f&)%k?sF86ewz24t^KK@n+S;6=cX$iQF{)cQtIBn?eM<40*-
zLZKlBv$KuTQl$?ty9c?6!OZ0gsM_{{K7uvv0>ZJXD<H0XyxzL<(S!c>bR|kyuFbOS
z`_ku<if86o*WN!XX!?qo#60g_nP6~nK@rQ)*x0Z1p|gA?wybIfaIK}%54heRqf>4@
zjM+!DEs4q4!B5w<kNbcM#6-*<4w5)vkvtv`4mgNZB#pk{*)KE{I7K(}CCNEIe6du!
z)Wqy{Q(jvo0ffLBNrWYkwibk9nlH{3gd@{_zD%cbU)ef3EmbVt4~~j^q=EuIa&jEI
zpG+__Ym!QH78XuJ3f4SzIChcuA?HP*jq9NkR?=00L%yMUQVZQHKqn2S#ClckR2tZ7
z6$3`Um^Gx$4iEFsxZ5*@DGEP~FgC`WI%TA1S&HxJesd&Fj6Z}1QFiONWVfjJMe%Ky
z&-8J+1-@DVxUL@|-vE_iHa492jN^LB@RG?u<!gVdsdE)b#O&7Rk&)7sE9O(*t6xnZ
zbWiwi`V!xJVC|9aox-hz2mH+vfTr-&3|3Mp<oO%b0FUNZ(_eaEX+2K$qMrAOGx}}Q
z*InW#Z+m8@nrNtCbEVWHbi?f1N#b(rPSsQGYS9>5)Ql?K2^42C9aeUgOo2w8H%*Jo
zE4yjqO5OT%J*FlO=bi7T(-V=!9nJ;iIpuN(T^r%u>0}prr5CsUT}!%p+zxF#Sgy)A
zaTvE{X3yU7U8_vcPls$9s>774e%PU4l1gc!9yP?dN6}J?=5&1X_a?4?p86M#Eh<dl
zGG<psl^y5@8Q}%>g)B0`VvHfuT)*H?X|k9}O~ZJUB9wFCG(HAM6!K41pf#7<O-SsF
zX#SVD*U`9`6?pdK_^o3c(@;?VoRvJ+&Ks)n)Fi9gXK-1TgrH9D;{rymV9eA}$_|Lf
stD25%XM;A9T+UQ~3_?t5nhFO<U2P+i?aHSkyy1=7IkG>gg+R~wA2U%fQ~&?~

diff --git a/screenshot-04-sources-context-menu.png b/screenshot-04-sources-context-menu.png
deleted file mode 100644
index 1b94790b72177a675e1e17f6af9064b572f8773d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 109783
zcmeFZbyt;L+b@iCcY|~&ebL?BNOyO4gLDYeEhQn{AV`O_bf<JkceAJ0{oKzx-Y>BK
z+Ki=xSgduPGmhg|lPG0HDHKFPL<k576d7sp4-gR0HQ=8;JS6ze@D{x_1Oz&SjJSxJ
z*O#Mg7%dzHqVR~553;gqEH%QyKOJgYTU(dMPyYSrI)S!B7y0oRcoS2#_igJV*{Odv
zl7;2p4^NN13{TO2=;)#`#B=(Vm*;0@(lMY#(7{98KqBXVJ_TQSV`7H>=lg%Z!2W+<
zcw<YXn)gZ8rNiUmjc+HXCnBm2_Ne}M?8c}C1#>Vkx3{;ob_YW;GVbN&f+{{(PZ~4q
zC#~G#xda%y+}m$5+HI=Mrej)*29v>q2gNu#5fL6CAt3<)&fB+Qnej5Av5ARaqoeD>
z!^49`A0Fs-7e`0si;Kb-60FXh8R*gl7U@X~$?%GY)&vqRW0K0Pi0H*c@ZY|DOF~jr
zS^4Yli~fDxh&Mkm2?=rW@hkH4!S{<QDw2yNb5<bhsOb=A@8Fr49pAoXG*i^6qmHw*
z=x1d-HXFk4S+LrDRAG|N2`k&eLsPgri_jBiNQz2a|Lz!Au3^u>fT*p5Tcut;R-s*A
z@b#+}=f(ac<=eLc{{Fq+9oJ<ZnYC)rU%n}3D{_R#$H&iCuR}va*RcQot=!>uP$xfU
zrqb{~%gN@fyPLeEn~31x&!J6klbB6>h@Y?nnNmF4U~XPsyqdi~{6`~i9yYdk>jMf~
znv?|7a~lSERVKYpVYUd8qTJZnW=?ykZ+Ta$4PTePJI+_>*UP0bt#|nAHakrYCKPBj
zL1FEbs1#_2H~U;?CaD&g4t!>#@OF?f`p*TlAUcdi$HcI*3|5y&Qx+$}@`OAE>BD)a
z1h;KuL>VP#F#O6$HK-Fur+fF$+j_56lXFZFeA41>V#I;>bbXc|MuogD%qH@>B_$=5
za`@L8ZTBvA<iOkOmupmJ^LbWk*Qc5@)6mew(?8yl8j0hwIIcZO#%8YkaL@YBYT2gS
z+}wnO3c0>=!%rX_q~6AHVQ7I!&WMuXn4bE?0AuWi{|Vk`Lxh1p`F%;v@T@64-_MkH
z!-Q$Et}}6(!wo@Bw<iJ^7#KucRm{p=>5qdWBaUlrDu#xEBdL`umP-u;)UwGguC9Mp
zTI9Ne!wzRkzZ>^T9!T@^^Gn8&s8)RuOQ4v8zdYZPItknz)h6~jUTVC*#N*~pW>zm7
zEtE-89o*Nb)X7XwSIpt3e)sO(5CjW31szqMay~^iuRCsQB1ITCGjVS?$^b#9-#sK(
z=*vpWrOj-asfC3~b<XAWpLwjlo1?}0rN%!xT3Suk(<g_s<x{OU$IEC+dUn0xu^JUx
z?^ku=^$0OP$~k#B7&)Hay|mMhyb(sB;G&Vo7YcadmPF?Xi6a%t=5eKIK|S=UU1@gy
z`@)MWA=zM!4_fEZ;9_DH=jSW#Ry2In6Ez?oNNn&_v7nI|&PYvw&xnac#Px}$v#s67
z$0Zz|naTLUTd(qo9yTPOUsc^GVe)9&ooD>^;{3;X*znIkgni{D-y9jE2jX(AtgY3{
zH58WE3_JW36>-Sj^K2R#8=)W}`2_@ixc|v7EnO^D_;b0(97DjSAtO^N6?XzpOiT=B
zmk14QeD_xtC4C$*&xd-8V>q-E0(|_?h={GOO5N{b`RXOgBp6kCEr<zJ-(*ZoOlTA`
zxt)IJY1dmYYq1D9e<T+RKUr<9cG-~yPv`YK;fJQJ$c!cAX!y>o+3d7|Mk+|wXusUl
z|K9626dWq2!%B(GEFG;<j?GfTJ(x?|nUd}T(K<f2eKSi--3l!gs-xXsx_jff?{zis
z-@yOb|J^NCQCSIg%q{o~Ud_?*6ufou7uW+gNpbNe+j)|KljZN<tyFApzTaEU{0@Ob
zW77X|as3C6Uq=J;aK8FmdHF~kiJ{^8@v^7%<4mRQH@AbSC^6Aqe!n~ACCmK@a-N&)
zR{uv2Lqnkxa3|lJnlv_9rsf@NY?i9@b!m{my)PBYsJ3~$B_?)QX{KraGgUP5{D^jT
zb+w&^LdeeTcSlAE>emI`otC(y<l+8AUxc-Uf&vE%%R4~>%JV_t;n8hr@@dwOb~XXd
zwLMDeX)QVNw|DQV&9OAQIM@2f4D|1n(gz(~#>ePFOKan;T9i(=meYU2h7DTV^nY_c
zRB31h3${*=r?oFlzfA3YWXU(B+-RLzrwvg)PsEfSnWUF;t=g$j1guuKgBY8WU>KzJ
zHgDgXBLXXFn%ax*vL>s^&HKx}bEx*VHZVGQd3h|(o1ux+a$-s}v~m=b1-u?dHQtx0
z3R#?<Co84$8LU&j%zDl6)Zq}e^Hms0liwXXnGFRwtf%k=Sun@G@D%voIyh}H)LbZJ
zuzJswB*-f}hh%@DQ~JVvFqUmdx&QS1OdkJm{RheOyTd9WyA`+jF#9`6tKS>FQrL_-
zSG&K6%F5^#mYeK-_ZLzbb(85enZnqALwb+a*47I6Ts8a7n?FCePaq#TUOJYDNOyxp
zCJ^|-AJqBz^GS&cB`gYINpUfa59l`?KG)H$pK$1l3n)WKFu)f4=&!p3_qTW+M~QtV
z6?)TJ=nsoZ9B&G<Q6QznX}{FB+TY*r)r1wn<8zhnb-dLdYtFj4`SVj7#>x5CfKcGe
z%>4Y`i)OWf?Q9u`{JDuVJMBMzn-f~dsf4_IMO_^x<rM4%B2Vg<uy|HBnGb^v$Yfbe
z1?RQF4No4bV>=~Jf5wld^zU7nE}UO;d-5QR`zM9{aVzj%MHCga!>q0PB8pl(aTr`m
z+)K;KsMmf9^!D^f<Qla5xWFN^vS4(HU!JV`+O4&Ek`jFT`t?Z*vVj9DoaUtzoy&18
z<`eY-u93=y6t(}*`FVWtNGfBH@Alv%!pXq%<L$ZU*>4d)tVX}ce$dN6d!zY`_z)yx
z#;AlNpA3(d@DUe-1VUzWDnX_!tEs7JJVzj@@Cl&~25)3GZ#xEx+A=Ucm7VM*Uo4{A
zj@xp~PMhEZt4s=AiZ+uaDBbRV=9DU6MU0HPlHaQ?e?NtI%jDDHeOW9StMlaf=%Ept
z!SDYdFD-2asidj-9omK^g7P_;gvW(_h-Dz|HKV*#A!|-v((QO@c61b(8Y5Lk1tl0<
zv@6FuW@f`yk4mujdQnHgMv81htVX}kq4+z_vZGwqugI1bGmTlBanA)*Y1RZ{oW&5{
z)VM_5Z35e3S6Y!ddNm}ExODTJyc(C^!_Z}Bn<CL>Q;|l-McuZKWZ`8Z>{;F+a&ar9
z<yTc1w0YIyF&j{UQ8(tt_D95JNbh=nd2UUlwkHwrf%g2B*;s`3dUcSrpV~BTWo!Gh
zzrO}M$hao(HK1Ixda=bd&B_C++OV^KT{H|aN^s@*aP|+_Ml_M3a1P5&`jCO|#B6Qz
z(Y_@l)J8`~U*T+s`uX{x>n2)mU=(M<E+lvyFa4r&*G^?C`A~#78p49f+U=F{7!x|7
z32Gzev4oeEaU+v@8CBtY2AgH`>(5VV{jo%yR+FNsv3UyHeNk8l@-}d&+jTjyDRev{
zDgKW)C?_Ln%y2L;wEG-{=;%(*4=5*0DqllmV^NYYsAaJOA8$D9uEE|<yXo|QMD?60
z*E}6e5R3WSj4lgng9SmC2PL|Y5IKcQEmn(!j0cHajy8aUNcxZPFKaB0Z;EEG?|4Q;
z;a96ldaxO{ATR&fNE0#;5i-yZl8C4qM90M$`$~}!j#|D>G1sA|Cl;|l0|SF3W5=JQ
z6i3$h{rl_vC9S3i1qMdK?a8Vb$K=F>^3~PV6VncE|4n+9E{jYWzrFo2SgX>n4r^`Q
ztlfdH3ZXpCa}|p$b5S{ZVF9l%v;+nQ21l<cWszZF@lCql9jK(!OLqMH+KMP&UshH1
z^`UT7NwU)BJxlci#}ZT7?H20@EOYt2Wyfl<Mc`Z%BJrq4?5|E%HPu4&f4JS8-61Bh
znD$?_`+9<M0k8Caz0qOSr^K12h3_fV`FDR)ZZ3;F>eAMuBWAM4iquIQODT<v-A8GD
z%9HMpPH1vj4a9$bA59oBG2IIK-KB4{%Sp2+p<xr=itvQ3@(pcA1>KuRi;Ig#&eN|#
zsS>h>M@b4Td{@d<<d(ri&Nq><UggdAo|vD<!@WymHl*P>MdJSn?S#do=)5<!3f2~@
zF|i}O0|6T4+lAHDY*JL~L+UqDFfcIGk+PXxU0vHJ41o6}NO5}{-GOEfiihg+uP;3G
zrbsCpNhnD}SzL}<;az)E%gcPVua|q{cuaa!z4wgfNZ%26TYcuZ1)+twMT>t8#bmSW
zE`Ay`r9J1`{l%BMpOr)GEY#)<KO!(V$_|aBfiQ5#+PGPOoRLHD$AFG=Q0ioa@jeZ2
zd(~h#LW)H~LhHw-eeBlpbr>)DOkQB}mmem)hhmJnO&=M{<<hFA<bI%$@I!MnL8l1S
zF5@5CmvHoWz+IAIX_$UTLqI@4L!(#j!WR+~3qitT$_wac4GItM?+HUv*5>y*i}TOZ
zYjKe;(<GuR1=vPeO>J8YrG-(Y;`*Ws6s^6|p40A-M^d2x><Aa~?ZtY_7NQrWT)~h@
z1nu)jhJn6IP<28Pt{+`Wi-TlBt;#hRK^F?vu?9sfBqT(8On4@=#rAE_<L#+yIfIj%
zn_jI+ON0J*>4cs?bI&@&Fx8W)-xS5@u-}`kR_XixGa64WwlUq|FVzfyGYr@3@xr-f
zc)C~wDjt*F&u4H!X*OkL>gB_4LDL9R#CpyZ@V$9ypP(e9D+j1(=xqnsrmW_6pKuus
z$~BHZ6v+}165aw(IV{U7AAy?f<x{MXMS_VLjcH?StljRT;CdO1L&v?^?94XQb-eVP
z+j8-AkF<Fm9YTkd<WjA|zwuS~N9Q{?{na1W2|0A?Whu;tDu(Md1_FD~mO-01SietR
z-YD=lNAtQLGU-scAsN=16gA^<p@xf`;G#ve;M~G={+X}tWrXeUIyVUxr=a%J41tX;
z5yJpvdMy;GOuyBm@Bs_zTN)^N8}xRLr;#^$sR48v6%Ec?#eFY#{UQZ4r8ut?`ABIn
zH~V|K9lXQ~$m<<QS$Eytw+~znVG12w`cDn+7mkx}0t1&8UMJYDJsnP3)js}L3m|b9
zxL&ee2xsJ`GJiwhKS1r){UMbte&+~77O}#(XdzsFs+pwAfHduOp9Zh&XHVPCaA|#_
zjq_m{g8`EunLMifT@8v2U4J=UA?1rsqYa}$n^j+ALQ~U@&3sihbM9J^T$-`HBPb#>
zrLSCJur|@?Jmw>*0)BUcf94$l9O(LXj?eGKa=6H-(?H1U20zNt>UkRErdMMWKw~*?
zH&a3$P@@<r7)!(zOr=$0M6QM_&n^us@03LIJRrrWQML_TT4Ou!psqd(pffp(JbQs;
zY`FIuYY%5<?K-pf{1`C<u;sf8wODH%{@)4;>aC|O7CyuW+==ntoUWto(hTxYK?Flf
zd{@loRWDPM;Xt84A4;NC%49V^j3@7HvS03Tfo-YnEOGnPwbJ5RI7{|TGWIZuMq%?g
z{&Hs|&BYGPQ8!i(_4!Qcv~H7KQBe^AAt7(T6EsPlMrEeVSXtu7i=7e2<t71sequ&Q
z^dv8%=FSDf1^|6|d1c1^qor)O2UVs7jg5_^XF;nO|H6}EL_tks?Uw$JDQpgV$Ivp(
za)Y(+$qE4<A0G{p(-c5R`3x+^KI3vME9AO&OlGKl&C7FhbHioup1m52722*xDT=hL
zb3>&UW$N?^<5A--fS>WW?$*UXG6HzXovcb@4dvnCf$P~GcpA;Ac@mD2@t0V7r!Us;
zCBIV%Hb(&)vRbdDuC?`Xt^M)k(GfBUgUxabpUt8{ezz-$(Rod%fRz8kpEa2x6@TkM
zYAIiDvF9`UR&~NT%L7u`uSPZ$-ztlI?SwwX#CSh*`VEl0J}9`~IH=lBCYygA{G@5r
zK7-HpW#{AE21AA-i(rmKXr0o@Mg9_UFpFM9OZXs8EM7QLSs9CZO3ZEI;bJ|UIQC(q
zvSC63M!ZsiR2(6nhkUS#6F|fSTn<m+C`9B%fLhTo^+IfT?oR~0zGQ{!aKuFD=;%xr
zD;%%3;*GGgU>dY~P_na!I*JC8aMz&Cjr_{`-bG{W;DDNhH;lGkUS5u59KOT}nVz0L
zQ>Bko8tiU$e}N++A|fj*%Mvo0b^A@w#>R%%dGjs^3QlZEWI(k0qEt3R+^cI1{tYs^
zJs|HIReECzpWc5HAsie5#h)BjD=EI0!7~02J2_YLKT*Fb)k;4^LH&OJ(;u5FKkec6
z^i>)1Ht1KAac_7H^@YL$KD~xpPe`-}w^qp+C#V%Tr;xE(ttLMaQ(>K^00YkDqg}wf
zJr(MLA<vW(zt`yuXy4zb`k^fP&)0<D)^nr0{O;afEE+3PQc@wI&Noo7pmHhrtT13%
zyz#$!x_6b6lM@pY6a0pe#E{AAeUS`mD=Wd9Fdo-p<*(k=lQ+kKC>`xi8x-?K^83t7
z(R^!d-pg&?^i{9`)z39pV-*to5<ZJyAQtdJc57Tn(KPFUHm(V(s>+Fyd4qy--DfSF
z(ARDnY+*p_<3j4{isVN#NgOhd&1sC-A0=)pbZeIA0BJpW36@%)5JKkGBs;Q5x{WmS
zNY~S>6}%wWGd5XORSu6g&$(m`O-$j@q=M5Wazeg0(AT|TNO*4rd`5r$LMavfnaFI{
z-;GD?gUK=aUX^Bx2r+lIe7?(J<M6>@v2Mq9uEO29#T1}pDpPvEtS9H9l3-zB6*Jj)
zz}6}0ZLpg3d$>Bt%p_!>52^@0`^4{RVEN~P3Q8EABE}`QjG_JAdpg|49yG<DQ`G9Z
zoY$@nB>W~{-oaC%lA`I>lRs>j{xp$j-2J6or7mEMe11;uiYrONi~D#`|DkbsNp6oG
zn+coWMsz<hW#K?SFS38)4I$P*9~?AnTrRQqiHV<DgUz2^9oOO!bLV0i$~2sjcVg(_
zFf|2P*gXv}NaSY5D&=<%VJ7Zs=@r6t=M}ULx%h&9+jEt=KvDR-w>*8>nx8L{=(-;f
zA$9lgB3{W<-fEZ6w10dYVq?CkUy}Uz@E|*`1s`^H{YO(;+^VN<!_?F?@aZn7T_$I+
zx3@qz2vSB7ElHH{f_rVPqqw+VUXq(v<99nc5-!8t?yquo5*QAxN*$CF$yNyH{Hrwr
zHj9he<fSEECZ_N78WqIYR98+pg8n**OF5Sh*S2sGhNN+Tul7`Mx$U!b+}|AA4l3fM
z`8L`-XX+dbr;GqiuV*CN@!|eiJPRqwkL66c`^{>w^qqm$lg&&?*jKn)z)zcF%LATa
zxg1{(@xUH~_CrWFL!9=xKD^9NlzzHBUH8()f+|?N*!+2El6k&*IFV23x!&T6MANZd
zHMaUJb}-c$lcbQzzStSa?CE*B7Lq04OtCFQnz>xA>F76<ZuU6?^w2XItFy^6okl{u
zGa$4r)rj1A0a<8zvE@x1B2SI|vIcu=<Y@$`f@3)XS*;-<P!iO3R#q`{xZI$|M8}n+
zOZ&lOaoBdR0@h!qT@ULCpq=n1*^B&_$$|(100z$;gO;)jdv4emagg2Je*w@3nm~hW
z_Z}wcubLY4)Bsdc!Kos-dCT#ffV<yoUnR;x4NGQzEjP(4Ek#L)QlR}7?f-Bk`H9Vj
z(2AK!wRjXrV1j`!0C!-`C}LD7=ZgZmp{=dm-S83Z;m<s?%B;ANn&R2}KFgUk1AMYx
zM*7E_<I~0Zc`*0KM@N|)wl5pK0~@^&`63=b%0nUKc3jPrC1poLW2U6^_cJK6-8~o{
zEwSZ#w&7&?j8{j$IfyW85v%O}ncv@_C@jykeVhGKUm)v^$iC{JWT~BXx9A<wU}v5P
zB}%){5YfJre%t1HO_5C+Y9x=zdVYzV=A}?efmWUP;HWpbss+IS^w&4sW``9M_j2qs
zF&ZrI(SNw9`>7?rjKKX9mkaB5g7bJ@KQ`wcZ7%yh<vmO`!Jiiq)2lPDg)|FhW&0Ij
zOHWBwMpLt)t3>IPHdcCVT0!}&4ZQLJS%QK0BQyA=6%}8~8VNDqwcyOo%%~aT4u-$s
zmlk%BMYc@S2$44#4N8^%fWjIjL(ao7NJaB$n+8dN93>PPgO6Hv+%Z|k=$T1Riv?d4
zZfPNT(`KT-AC`HMz5nAbgjRW<<rV;YiJf~t3sad-)4eva7RXx&&4NpB;?(Ow_h!Ly
zx$TXJ!z3;$Eqy;0YGH3b+ve?hB3Z}A`H@`4NW|UA>GuiHm7UAUm^Pm74GXT%61HsO
zpACY;WHih$zERCiP4&^9-Kz7;`$cz$z~#SXXFH7m5Ne}*Xm!&J0{u`Ag;gfaNb;|>
z(n-K><+R@Md`8433HxbZGzW)K2YY>!ki!O0V=&!HK8}lZ<`b|2HZ#&VI5_EWU=_3i
zvg(%(7TiLIe`{A48Oi8W9T{QZBt*MW_tW6uAoRL_LxU`=<+IHSzsq(>V`F1M!4_zW
zRR--%zPDom&kvu8c_0-QfCwF*v&BLLZ#9dN$+CH8{hC^L8dG3Jd36!%O~=53%W7KX
z^32PtJ6Gm@T;l6i-IidyaKSMZv_(lFy2mi}g+tx-P`pu4zzyvr+Wi&Zdpq<)QMAn}
zFFC{uT}plIj{y3^3yvdo(iu(DBlvW<-dp0x%h3+`kusc;S$3^S6K7c5^Pt*MX+8t>
zgwi6*W-^g&-k6w}J4_nK^^TNTNO2Z*z;+q{vYW~Qn_RYPmh2ztsM=a*Aeh{5GXZ@+
z0=LJo<2%5e6VXw7Kd{}gt!B#_uNor-OxN4xnoDSs%iL(E0CA`=d@bLTl#XQh#$dDD
zgo5W%qyF^`;G};U6f*J?$9(dF;mr8B(ia%Fi9GU=v}$=joEk1!&x7qe0Blg#DBaFY
zj72lCXcZasf8gIUe6A9owkwcC`CA%9o+S14vz1)&adG=uBRV@@52nAhy8jt|JmBVD
z_&a+WJ@+O%B46~MetyE6oSYmR>(rPC+b|wVlrZ7<^AV+KXyC0|PnwkrVO|CLVtac#
zSn<pTZQKrD$jkx9?g@1eC-U0qo}G<FP%rQ_;j?z29g|A`inbK@^QXk>4<t{c@i%^&
zM_h5~T(6pZ(cUktf;2RKdu!?Qflpxwa<94jQliCSm1|uCSp6NIJKf3kBVUu$gVC)@
z*l=dOdcBIt#<A;c8@9WGpmZ9nER4w5uuwz_G0qk6h>4#LruRg{7%~`2wEoHG?#{|C
zN<w|R<SOFzXO7X&nnWmI^tp)kI2pE>Ve<I!Fw+cQ&lEBjnw6s)UW@>8hzqoS!9Pna
zu6yM0KZp49Tfr_ET6KJREn<ikwmu^dWn}O6VY#cRm7gwErDcLY7wGUj6%;S#{)m2D
zJv==8S3@BSsCU|cq@lcHSOJPym(o=m&}0D@Xx2UA!p5X<bNHaHF2_o8&X=P{#ASnl
zMf>9UbccXX4xA|EMWaqW`GbRl^8zxO^Xd8V@fRGEoc4HCRrQAVB(J{h5chsQEBXJ}
zl#pQ;MW$`DKuSlbG{|u?8n&6;MWIV3T3_Id(5o{r=f-BFh6O7}3M}LCM|krmsfJ^U
z_m^l?9@d(6rb4v%-MefKMH|)78LWgeb4`_Nj<Z)O2$}ZBKnnuQ@|M+%MGoy(78j|Y
zpP89iVO-pJcSwX6Ap;|0645sxm;E!@?s05GT|_m5w8W}SBWzO0_4D3n3eqlTwp_E-
z=bA8Sl)5*xqaf{`X+g9$?XMI|M-m)9wGC^%J(5Pvthb#HI@))$O>Y(!7W5*HYdmT&
zY;~XgA4A_bT8@3$O=O^>tJAK>1#&eOOulrBiwC^x>6$=?G)}|H=eK+S(WXk;=H%xa
z13Cd{3P8-NEiUG3KZf^kPFGvGa!-gd*#rd*zF_iyhvLBhVG`>SYa_3sqNt)W)P$Uz
zKljxz3BJ$!Ii8C%5w%)v43|);(o`4Jg+x>=(l`j&8`0v@+tW%TMzc&Z%B`)Px__qY
zG|(}{*WOr^*P0HThfNN|5;-~=GIi@90S3Q|6%S##_h21$3HX}r{7dG5OJC%MTpHq^
zz0vf4>b2{OH(6R5@<2^HIvSnd12P8At=)2yg3E^Y9=amfZ>s5=)a{XCfj}hKJw1)X
z6?aZ5f}_eo67}@Fov$|h#Hn;ZEpvT+jf6vYbzZ>YS1TTcxhPa_nZ}geLe>`W9PU+Q
zPQ~)qFdc;K0CT%HmOWV@HCu9S`9qFf{A4|l42*L(G;z&Qqt&FzMvuhq?k*@n+BHTS
zK-bMbpIU3JSN--G_!q*x=TG;Y;wrOc>WFwuEA^JuFi5*w%YV0pA0qG%Dl=kTEg(x8
z`zTFVh5gLb`p%~}_-^{(BE(x);sAQ>UXi!ltHvRm^>Ifc<kcCPG$@h@*_Tp+YQ38K
z@{f$^%AnBD#H@<_BD+_QnieXK++wKX8V0MSaX^}5%R}pbwSaP29AX@~H1UsT0&vN;
zYU))6>iN?7AIAh5)5g+(w&^t!y8noVBG@t36eU@|8Y+eU`YxUnNGcmAXJ=<X(C<#Z
zeQCGV)BBQ@^$5r_uoK2^b#!$#%Qa$Ki&{~AUS9V%78Vx3vc4cNB;<17cilxMA~JsS
zmi;#h5od4_ma{kPAnl2?2zq8lMwCaBcKxnX$_N$K25?P=7hAdkBX(Sq_cxyF6Q*^A
zt4O}w{k6A6t*3WVY0yrif8MqG-eUC&&!rdBdpbJsD|)=?1zXhzmH;_33)~ss9Pt2#
zPsHssQKjFiojO^pVB0~w16-=HFZYd#?=#>KfZ*NGHQ-Z-2QLJl4{a#cpe-dS3DjtI
z=R1IJ*{y!_1Ay!6E5&YjveH7SuYU~gA(U51S=s0lZfC!(uxk#tGx7TV!*%xY(Qr#k
z3)m-YS+jZ0evz`DXp~L-rY1+xNg3pW(HANm&(fo64LiFd(@r;K?w>j}k~BzH&=6VN
zCS6F&S%b2DOWjWk1>J;$@!dS^HL5iE^5h(IDT;bEs^<-A;cd`g=wgXV*sbwrY>fs(
zODAIQ$4JvuHEzl$e_KYm)Sl|QqaBTonbQu6N~5!y&Q)Z9Cb$<pGCl2jwf~R&*AL<%
zFzoE?z)z)&&gcpIG&nSLE?F^@^lkGDXy}URWEI`;%VeY(jLgiys}8*5^M6p=m#4{~
zxdP7L1QElpE}GJU0{XGG;Cd(T3}V0|Nw}R@Fkz`x3nUqdtIEoJz}w_dm58Vq7b8gx
z2sKG9&~e!>jnZx<kiezmp0$@6cD@WH^<0EYeSXTUD6;rPcz^k7_^OnyKAzqB5e-K%
zsJzRw+^9Pk$c4LbJylv2TK}Y)?;jp+#zdfzMny+&-pH@q#_SON#oVVVl{&Kz*F<M0
znKBpafmqtSfU&r3hLr;2nv%&70~3>~9f=g^eBblGUTh7Z9l(qhhHS_&k^sudeUS1M
z^ifRa7?ozHd;r%%Wu#dO0yMDPk1aMEsecc#Mys5~B|}*$5=Iz)+4J;<^1tzAh50qK
zb-v}mqprRxpc`fpP)&+R1Jh@|PyTwPNF0fVWSW?9j2(?V=6OlMxh2*cT2hBshmILK
z+NFEl6Xx1zGn;&qtPxUNT<m*$@*a2u`yrfc&KmM199CKFzF}e4K&Rw1?Uz4U2SzTS
z3%!#djj+^c>#Ve}4+#mWl^Ikj`=gzu<-knb>4Wn}zR>9}Jg(p5Glpl$@CAI5xuvv!
z2=BU`uIaCc*HZvPA#vgdLpD{Dlk6?tPBNqJ%|b0D`iA_}Cs@v9=dFHMfQ$_{fv8ba
z5z0LKE|@PJ7>xg-&Ym_aOVxP4g_JiU>Hkc4W%oc@5QypP3-Hb6O`O+Bs&{6hv~9Cv
zJ^e1_u{V*_C{kj(Q1*F04pE(#XJpfZsW49Yt%`|uRvS5Mu^N^@8y-QlDeng$qP4(c
z0T#m!@R?SwBGQBtC?qmD?O7dGw3rkNwSfd&Ts#N%=$#&Od~m!BrPSwLC{*LQBwRUA
z_UQ~eAVqzAeU-l4t!HwSYi9=81E^*%&#JG5_$(nomfFzJ016L{;(Tdgp<0<*DUYiK
zP=jO5lYuM0e{hh)>z=7p2Wi}5@{?7MMvfK~9^s4NkU&POH(Nw5+|D)8IP_omy-oUK
z2tWko_jjl?G`@|&1WG_fGiE;}fa_XbSkOAE1k+*pA80<rIh2Ms=y`4D(%;3P9`Xv|
zqN1V_Lv}&+A9Bqw5*ZnJ_i(MNrdF7ef<r2o3dur6;RLE=ON+LmZW4q~e{V04Wu}MA
zq=Ts+SwrID;-aI=nhpFku<-Hk0FT?QZ)|io(av#KE7u57VpPo&4g!SOV%3KDuaaU2
z#~25^+7ct|cSh;6_Mcyo2OCb;+fh(1x3J!4TPJ6{kJl?UM+WOpTqD1%%*Nh6rN0YZ
zCk#=$jyS3on#L9x8Ci?-D`k*5GYElTSPCD{RnnJ=fLa(xGBXCq#MiH1)zz$q7TJT^
zL_brP+Pq^+q70KCfuMp11=9>!haK#i^5SC9-C)a^{Vw*#h5YVV{tnI4^cmuh#KaF?
zUeMO*?7?jx5|O*)$Q<9XsgkwGkKnVHB8#Ah#sJiJ0_e06$@Z3LJ~Ei9qW|QOA_L#5
zO>nT!h>G<VTBcAYLbZhceSb^x!clp7kkNP}jgAQ|GMElHKt@J}2pleuCV;OAI=6yL
z4-sg~o9j^SZosWkP;d`?6_zZ7bwTh>SrO(Q9;K4unP!DhpcC8Huk-mp@VAANU646D
zJA-lT?#{m}|Mrct_kQ7p+GsbpCa7$3YN~5}8@D}gG?@k<JcIo=e}U8AM+W&)V^2>H
zSkk2+CskZrR#73YYR)=zm9C;Pxv_!KHeK-Jht6;+)3AK%i@Y4O89CJj6Zr4%?^4i5
zrlHfnk)`3)aXQ;^y5!dT{r>%XC-vSih2f=eRyL@NRHnb>8_Y3y)P-u!d4CgRWDIL=
z=B~2Q%88&S@J4Xyl(|Mv{m%C9lm8u$zt0Vg*=Y3G$2CZ?#FWDuxpbmVGEh$%U}H1Q
zNcH&NCyA$$&Ha`^i8j-k+TIx*MSS~CG&ug>n*x|Hm7#KCkK-MiIZ~zAf3E--UF0JF
z_r9p3<>cg~qDsaHOxfSxzdc=bW)>$U&CTU<SZN7(R#a1SQ&v9vrev5d@9g>rIMrC>
zj4)G6Gk=@keRy>>>E9R#{ATr677(?PME6ddm~gVUSD;Y^R3zYVCQK|sQSXP_bAN1W
zLV^kmQs(=2?`lSaeAu>Q%gPW(pjo4+@SJZ?db9a%vobR92?&fXNATis=sAU<MPt<}
ztU3c<CzEK$)hiDR3k&;L#eoBwmi8TNl*B{|&JBYmJAF4d`6x_@j2L)SR0KrCsR?Dv
z3}KptL3HfspPw{^{2y4^*?|QBGIoU4{L0~Ytd46JxkAs;c;6Ly78dK%ZcYUB+I@DC
zL#Vwl|6MGeBDi3F2$&5!7TX_<<mKI_i^o7NBjON5)OJ6=eN-_t%P^g<3b7p1GszI6
zN!X@1Iv#1To&Ty;Ynbw4Ic_jKGNP2t>oJjM;Ns$fLO63WRh0eX2jR%O8UZG~W=yVZ
zM^O)tqlGfbSUP!+t{gDN9;rNLm{G|0XB$bmxvyP8?UJ8~t*or#Z=hV4!Xl~u_riW<
zK$8;%Je`3HQ!f2L4O;)8e>6@#D;rx_0%AWpU+WY@8pJ(fJC#HK&z~YvwR$j}&>S3%
zh&V?Q<MHvzR-Eb1cQl34KW3!Me#fAqdc;VhtYs~YRzUnahZJza`jSy?pX^#=)|#E?
zr>BuT&{SMLLc+wXtO`j=NGva4ZwV#}7VUx1)b&fdue^LrOUwJ)PM_;JFplyHNW|Pu
zN8lEKoy*3`Ix{;fa_kLSk5GV@uTMay=V`)^AG|$ePX$urirGIt#z!h^Ye)G8Jl%Qk
z49DJI9GojAg0P`nYDH9JWS>Q1LgX0~5>8zx&iO<>)_RAxjyBH4*<FYAbd~9VVyD;n
z4<iv*dwWI_e9ZIBpSB=dCFHyb_-IwUx-{*2qx+v6P?>vrD4cMbN0o9rv~=-QG&FYc
zyp9$KXldcj3orMoKYG;Hup}uCjpufJ!mXT}p8mP>DTiLePT0gtb96kn^Fpx&SoBi6
zS~@ysBrS=^Z6yT-?e@!Su6tE87208jY8kB5#)&%L9q3<x=)G~V-uY_eXvitz6R!z&
z%g1pLoJg?4!ZKC(WvEX8GB!=GU4XSH0%>_`B+W53b=StGtlFSmzum{x&5iv?G_qbi
z%H#~-3*hN-I`EDIKd*`sOEI_O?z%i8JY47H>Hb5<JVH(hhb`w86Og3I0vsLJ6RE?b
zK<*D81EA-J&7XfrNOEv-cTGr*n3+#keNo@?`Rv{t`w9vQIm0Ee$w*R&<p>2fI<8M{
z4UBIxfI8fq)y6?iMz()<&IWwhz7&vd5ey6v;7@%r4!Ao*fCO>D-*b$3wBIhI&0KET
zXIHw8g;6g*{5~aBE{T_LS*<_M+uS7)^g~2rb2#~g=XiB}`AJ_gN$z9TG90!|?TA%k
zH>MB*A>rZsWQ@P1e9&4sO(i%U#jw*Go53p8E0l!F<j<T!^W#tw9*F;hPFYQUO$ZVR
zP%|T^yswIkgrBie2>~93-Zw>e>9klP&(QF2@}6RaYz$!;83a@{?+kHukR8%86fy)a
zvjKGrD#?aniE=lE1fqyN2!5Ji)sb^@HtBGDqoPcJonj{=JL`+82lUWpt&MyJ??Z4Q
zur?!Ag(n;qYV?opqIEdRF5;URbvZw%eb8&Pp``oehi5Zn*x?0CNwi{~^pTYnK~aim
zJbYqe2LBIMS%ZTm(C<Y!^u@%sx<hEcqEUp3Zn=9pI_9Dfc?fR;uGTd<iF$p}?i&|*
z?(6fy?XvAQl=$=h=fx+{S>h=qLB9$z;@NUOYH1}kwVD1{zV&w3O0CI!^O62$#CI~F
zpAHcO0*FS<OGo%psl(Atg9#DXw^)(kggdC#H#Ezt7*XQ&r5Oo5APh;D(_V+v=FJqL
z3&oCaHW|ImTm>S=&*`ImD|#8)%|!%r-AbJzpKBX0FE8@TjVOI(Ss<*%eTubRZX!Sp
z<>v7^^GZw@j0Y`%tW!ZA5lF91c8iJVLdxR&d*@wwLr_siGo>idm`tQ;qq$;CM+v@8
z^mKHEPD-j{D8$X6j%^!+z`EPnMXz<f!qYrZwOWdC0iTGElc~!464okzq1H4|Yaw?<
z(G)TfDRnz3UX*|w)ZEA~u<iuZ@QY{1<x)kmJF4&y_DzoK7__t^CdSj<-MH>jS}I3J
zvbNR;;j)H?olN>m+FJ0OVr*<!`{>f}Gw<!~<qSIm;3Q$W(+iv017B6tf`Qf_{>x=&
z802kxo!<Nd1xJ@x)0Qn1h@-v@Dm3t;#UvzHCa5E+Wa!l1?d@x!q5}9;((Q4qbH<cb
zR#wL6arAiJJFu{D)*CSnOb$}s2If)91#?SHi^aNYQ2LKnTan_RQ%*}&2QHE}nUAQH
zzeUCuWnAnWlQ9CEau3l7LLB6Q&19jW;gxlo)ru>~=5}@s{*MOuP%Zg^LBRq4)dFxD
zpWZ<EP_YC+;#)e+I<7T;Rm|Pq0pT#BR)CC0W4(&xmdTcKg#r%`4t`@2a+G~)?MLa9
zMu>@>h+YUQ0bDz#lV9<j(m$fxm{dOVRmXQsR$K0Wnz|D~?o^qCti_ixn+_hCpU6ra
zecJDMsWLAQy)a1$*l|d>6`=y?JP;|7eh#x`|D3`h$?2P!iGwA8ZdRI_io3+;#21hM
z1-n>32ZzH(4Ky#Z?RF}ZIV_sd&{E?2k7nXh16>yIaN|?Sr`CuqK~T;=0-k@k+L9!b
z)M4PtvD;8d)7pj9Al@9ThIt0`o5l?2u4MH?7oszCC&k<RXX=Sz5J0zmQzO^c*H_GM
zNG%UtgRNerCvp|^xY9CW*y-a$4Y6wO;LziV^WG$CA+H-V5?Y2|2pz2fx<Y*g4o43^
z+t2^m*j-Ik)poj=;K&8Yl_gq}7@Y4?EtJ=BD3hN!9*&u>4nyyeUM3hz27r|I$#OtO
zUw`$dw9(gX8+2@DgR7pfa`=oqhiulJ;gm44(9AGov3^1Shn}@HTy^i})m0%8*vGrO
zi}>*HhdU%+nmE$p`92#KM&UkDr)YiNl#~=;at^QZ@-C^DBjQSEeGPcI^1VJ}TnPvW
zKo5N{9;qja8#M)k`PF6T0w|^-{!z>E(_YnB5|1br#tWDdt`wWyJH6el%m6Y~DQ4R=
z$LZM=j{^4@)c&q1`5;KiSi;$)o7y@$x911@6$a42;8p&426F7q2ofXG#>PgoHt3M7
zB2bUCpV?-8Gl{v;i?_m2{zUtWC*V_3^5?E&!i$!u_RSSW)pKLd%{5`i93IFD|Cq}7
z|Ib3nxmfgBnYT;c%db$TgnMz)1@FA|-><spWs&tQc^A>V=84biZEc}mb5*OEU8It<
zGkhEGwClL(x@+)w_~uOx$h+_84@%7ot9p=VhC#NL`YeK$>rUD;Gpx=;G?w2#se(c`
zo*ZPwBgoubAJMU~kM`fm&uyNPc12ih(7rX$8&UMRviQ-(DD5yuy5Mf??|*k@ZDsZD
z=!>6|MOl46h3Em%FDiZG`%UQ7)ZjzKt#(BS2LV=ck=@G?sp9LS#e<_oIeJY8aoz;?
zMjLgU2oV|t2hZU*m>(@Ug3u~F7<Jfzeh6zu9^=kos{zVv&N@tkRM*Mj)+Lr@kULXL
zzJKZ3G|=6>da%q`a{>*9F+;_nqTQsaB#9@}z|y79E=~PU8&jDWh$1tCLWTiIAvi!<
z`BuPX8@p`v`fzqMO=({N&YMyPpwzEMi(BnSQ>bV{9!C?<(`ruFFeLn5$e*y(-c-1P
zYHrL*Z73+f$XJPh6;6Am)L4x4OxZ5k)>llJq-V5{2Fh=2o6p5|QAWo5++qn`U8Drz
zAYfv=yq2=Hj#AdKv#@Xv>4S<E-ee8B89N;&1mD`z{YcV>;a9j5j>3utG~}3-Tyv&u
zTwDvFk;UI6r@f{S4zfJ~6d7>Y53W|XMiqr%iZ*P)Xv=23gL(uyz7Ej$3bmp0KblJX
zPqd0(elprF)QkaW1&2nm_kga%7YqW>%tQFBeoD?{h=hu?$5HZ%b`;^UcnBbeeAQh~
zOOpQYP!TXu{-spsnuAL+=9>r<t~D!Si*-fHBOryI+_3j}d-C0(B~NxZG~cASL=^<H
zENko1n1R<eJ=KZ^*FW$|_|?L}Ay`4}*4TVg2*28h57W|<-{(p`o0sE<yRGNm*fVHV
zi7`~Y!nd$+a9c5(i}}KsGb2gRJ!IV6&@`+aLwpl7o}b9=fC2|(eGpt-zSs$@-1+#x
zUiN6%@zml319K0OphfeL8Tcg(``;rYr6>3LqFnt@0omoRs6^7N*zcl6+K@ELvB}w(
z5`!zE429g#r{)3dpxcyeY$nrUyKqZt7XaJ{cnsIy095&XAV@DG8%nPs{%RacnDS?)
zG+ZC>(<sUWa!|uvJzt@XVe4sg89|21^DIJ8O<mo7r8y@kNU#r|Bn~8)sZ6E!1fE^V
zxod>qm>v|pK0Q61D^s6zMS<!A3*aJ_KfoW+u^86!!o%H|{0RTwASc3(d}Q%BOW0K4
z;?X3<#rOqJVOm1>k1dqOEL}&ee@qqc$VQ$b^7OA9fe7VGdi65yQO^=jQ50N8o1eb?
zUk$X%HD>EAnM+IF>1yMEiuUJx%hDKe3(K)kK7k@tDW~nDI0$jHV>G3KP<a7iw3pEm
zuiHL!PYfXkx*)JF!_G>y>siZcZf=?$Z{EITvxv;hwAqx_3V)|DS|*(!O2m2eaT1y1
z0&JM0^}q@cdfJpP8`_J5X$b0bqGDJ**}Q;HRAM5~B@$g)P6O!}a3BSr0`ECH+qTyQ
zVDGKp5K2J8VCoEbc6hoo9v;r9YwI4p-k+?`=0gKPA_ZODOEAMA@Yv9Z6aF<LD+`cR
zCwF%)PR<@iKKH{mFYHj|?%>@CDs+gNCYkEFL01F}P8+rH!9j=*zkco*!;U&Pn`>6B
ze5B+2=bvzI^aH=AJCLz>j8|MSFT5Yk_@v+3B=sSoX|)v%z&Z#NECA};d~eB<^S#!K
zD2?l&TCT1RMijGk#27%bU}u$&s{@mAiQDL*pE`}n{_^r0bI#@VkC?ivm1$_a%_BV|
zIME*ke)o@XU-&#>JjsVzT!D<*VLSh3g)j8#<|a(+$D=JFR=j8pw32A}2>id!CXN{c
z{N!5Te(luLrAuwgP=naE@<irY50+5NHCIaiY@DM$lMd5thfg359Gq?;`s|hIz?is%
zME(>=SyIoeN|a9280)8FD7%KedE-(dpOI)?LCMR*6YzXk>$1}ij;VBGPnW3ZCv&RF
z7>94xfvCnV_XxOSBTQm|flj}KKkS176GtL2TWk8KFQEoGC>^+1(2EF-A+kbcJvej=
zT-G0iW}#4!FTk-1*xB1k-P`oc%m$lTuYu3c??a_lpC7K52Pp*S-wpH^Yek?|G8uNf
zG5+`+WfNd3*Ifxzll|#$BMFq>K$0<rDD;=ZD(@K#rt_nbC!ktHif|~fL2$pA1;fD!
zBM|oN0l^NR+Y<^Vn*l1FTFddz%3Hp-B%fnqLLmp*e;-30Ku$sScmcZ3(ilt3LuM%0
z4lMewj7Haozkmeg)dl?3zOeFa{R2`VzdST>mgAEY<O4J><B)Xvk+1{c8X`30u4hJM
z)CyUMN}`irB|zBn^Hb=H=7$deU5g;z)HbYx*$jrtuXX<2X#3qMwMT+s`MYg`*D4-O
zMid@G*OuGPumV7r*to=rYtV(n@((h?gE1-pc9A>!!KiWza}qyF6=%ahHYv@;s1><5
zSv%?2cLX+~3yAUxvD&!kSXfvjB;9yP(wKk^059aq0I3kBY;~$17hjT{edd1nl;AU!
zsWA7(5ld(>7hRj{RLXBEkT*6@w3f(_2Xq=44Q)Vzx|yRnD?dMf!d+&quBOImVKZ?B
zW-+|*La>(rHV(^0mv<WUtAw1sgKaJtG=oiIMdGLmVUytCU^0y&`@*M~fPgoErWZRO
z=@Fh<Zz2UPh?R@zj0KNwh#|5ieZ&q10t&01<i8pUUqS}ic2hUco-_)k_Mo_>_7Xz9
z;$IQ*uV^M-C2Wy294c9Nzb6BJjFeOR@m~@1UqMYiK9(%h+i4t%nvhG{jKixRRZwGC
zzdr82zx!FjBKRzoC<89)2ttVvV8{OmY4Hek8RpnHZkmpg=!+0J?EiZPmK@8>h<v;8
zG7|sq4+5v8vHtr?y9pU#@fhMBBIAFpjlYjU=!{>inQx*A*lfj8y%BdUC6HgnrBrgX
z30U>r|5c#>eHzukI(BH~NNp1;!zBYa6?toRE%$Oh^lhl=+9+0*?SHNa$c{WO#bn8h
zVzz7otO%GqAAkS;%d7xeU08>;7B)#-0gK{#qj&FgJ<zQ9^*D}H5bP>b@2FfM|B&F|
zB7YN8Qvrc?6O$>fXx=d0B!aq!&z=5%qNVZwz1&yyIs&n~`Id`RoH@(h!y0Sa#06XP
z!5``-H@FNe!EgNrKMPtQUf6k(dR#N=dg{YZ)U(=JjD(+<=K5zOLM~57===PdTQ`DE
zU;<FrXMZ9J2qrT#Gl0BA<2C{)5LQ)%I>L@l4*DZFCmH=kk9W?K$LY5h=mh{a$o~#J
zT`TB~P_nVM4v&xmNAa!zsZvr(E6N4p2M`TFnw|AP7H1Dg9YTQ*8(OL53$3@(8$B>Y
z9A&f*&~On<It?~g``t7&{nl}`ExMG6wNFEbd;#|tC<+QF+YoX>Emxnhz<~D&jSHEO
ztEm~;R@d`VYnhjawjwu#3Kp@DRQ(v%6Rb&a*G{Tqp!w|oGF0}28dGp#Tjzosyj%=H
zpVw>P%^EC?2SW4OodH>~3bhB*1LK(-&WAI#CEnHA_0;W61yl&|@cf`T$XiUGUt9=!
zo!xzWBS5P}66=<kl|{ns^~F3AB<}#?;f1n6Z*K8#^M53vOcV*fPs-rS`JF(-k|zZ?
zmsWTlpW@$D#FJ##h^|BQvYyw?y4$n<O89clbCuqHX+j_@le6k!dMj9`a=kEJ{rbJU
zg)u43v;eIx(yHHp#b04AACm7pX7!m2dhA>GSCjO{1Sh+e;G=!44M#TyU+MO*k!~*c
z7w)>tA5e(qHnITQ0Dw;GyTkI{__|R;&;cxG1^^g>zBe{Nc`Qi=64~xtWh-D%ghWJt
zRfwsnFQi^u{n@(TPek5;W6YekyLRU4clVc?%T32WtE{JYHA{@pF4e@vsjfD%xK2$?
zw}^>{dHLow)UbzH%TB?xcD)CuVZq_iOf%kunD?svAQ9CKj7!7jnw?)+Oi>}^-MqXy
z0Rb<OC<mttwbzxpOm`wLz-q6Qj2(u*{N24J6_*42l-1?Oy-bd*$EyRM&At`@v??nQ
z-S;PC)zx8)aT&B08%kZzH|LzBq@>1k+6xUkPXHC_2zch~{K{#cnZlsW-$IWF56|m&
z*B617J3FJ6{e{?B1>uSo6}a3Km;?j_QMT4V(cl`Qp#KfdHH`olNlT;C|M9b5I8-b8
z#r6;quwPU^eCR249>K=O#@rJY7w=1=Wlm1U22#RhUm+qZV_-o0#6%5veQ=Lk7V4Ec
z38%6fb5tE$fYvLRz6_py-cp>c(mx){egwLolUsxBMBZ2s)Brfr_6Z8OWDfTF_{QMm
zb7^H|RK4Zu+ktjL?+apayAD4eK;|Tn<i0*8s(XF`)hi2~F8aS(0NDl2q78Yn(y?8w
zGXon#`=Hyb*6ZQxp7x5CvOncv9Rf-i>FCE@AJNW<){`CsJ|qj<v0%!DQp-`r59CrG
zX$`3k6Ue4|=c`HDFd2doPkwi|=NJD*MMLZKI8H4tmaI0&MnS$(`LkNT2Lxo!5_&P>
zo(A}xUg)Un?UfdKaM}(39~0py%sDXsk|~6U`R;#;7nWN+=Z911^EO*u_ui0_uHPK%
zHrdSLbNrtE#(cphO2i-VM6B*@r81K)Akayx_$@k`bsiQ%{gsI8gl6#*8iFKshjM<f
zw6T|0Un*m(vt%>KZ@X>wX%i2I`gphjc1NsCDI(IXS-loYW4&1SPu(WaBKdQE|3<ea
zdLNwMVNj_<UBX~)ZvGB&=0LUi>s!8?4Q490%Uu)@oWH-=$$~xrq@bbvPsHc9x`4|_
z85lU6u2HVM&Xgj7;w7Qswm$(527E^+QHGJHAaY_tLsK$)AKLwA{uK4C?AHRG;7a{g
zobW~gU)0kj_xK_dvn7Dd!J!%7t9`A~L`vv5?ta!5-K6ceO1}S@c#+JxYD17HnN#k`
z;yh+&W9x>B*>eT(W)ns<u9l&7t6A#LoPA>x6RV$BVC08}5GwrIp}M1g%b9o%wJu|5
z&C4&rOUtBX*dl+{A+Ertkudk_QHPf2b2U}m7ubl`CH_azyYiB*w%~<<+=_|}BXYkd
ziMxXmgb~e!^cwehe33#VHC+`nCgrYoVJtOoIITBFSJRmEBaVZ!;t+A!A1`*6+kMf%
zkr#7ELtIGACX72G{F%Rw&9^-?XyI96K?@5Qqm7^;aQt%|L}OG`Fpyc}vz2XQiRMEN
zklmjhR+oBVAp^0nwg}j8Y0~h4o*9OunP2?b#xt9DHVHW-Nu%Q3!j&=iQk%EtcuqFJ
zAqomeEA76d2#S8S=;i3~PIvb(U|y1`<8pFPDbSFSMeP>kPoj<bgQ&|SK1nv?KJ~|u
z!b)V5(H(^aPfbmQ5|u&0^~-%^Ng9rZWV2-2+#uIq>-5a!b}p={;^e%(zGT*EK-_(=
z<yKVieBKL3-tzeK(|kNGzkMm>HB3TCG9|qcU7N=-=gIqRRhREHVSG6@FN05?`M4MU
zG91<GlWZa`9#Ink{~y>*COOj9W&r~jXnkftadh^Ki9sgQlXy>`DDm%}B)edE9V}#}
z;M3PyO{`E26B2Z6Pp?JQb&dTg)88X}9VUrr3jZc16g4%NjQ=tiCcNHLD74gE4LfYD
z5HwWaeUQzHiuNEU8R}q#i%dQP5|Nij1`peT(2A0~4V925>i7Kc79JBV?zCjLhbD=P
zWPz80f@17TOCJ|F+@>;edwo4%NUU2ZO@4xQY-UxGt7oFzLdxF^9P4p#*G3TsYwcp2
z`5!miC=U;NpgWX9?miine3Fuop#D6)a5w)`thvXdZ%W=pGxVx=tO;nMTE4Q$?`&*!
z>6|IZyPWO-q6aEf*eVV}Z*6?SovrybJ$<}O3DU{S&9CW+iI28WG#DzGnVDzuWN2<~
z4NlBt+jl#?4L_&C!@^n?-eMH5BH>kCTv2)2x*WZopHaiB50>Gzq4})3>q%UR48+4v
zc-7(9p$+sp4bq#Y_51&`_IK8`J%X{`j-=|{&E6-uo;Oa!xqV@yx9gJ4szcFVeA4Lj
z5V_MPLZs>TB@I(}vUeEhctA*%1Wla98J~zKUo^LC{nv3wXP^<JlAuZiP--)mstp0p
zwzrG!!J1uxLDC3#c~S>vKnQGO(hPZ<4HHS0P$#I$96+Ws;uOI#6xmS9*HBiLC+}tv
z<KbQaScU+X1^k(fRO=7f`ZO&(&WWuQUYvGXo}i5mMt~YOno-a0%nNkIX7@h^={cjn
z6eN1_@LZ%5+z#(L2M6Dg)WdUbWRU3qrw!=GUHmX_XG>LW&!>`;F=2O~F*nA!aByCc
z6+>9XWlc=CJ~VT<4PdRDlZ!n7PJ~bMmmdKx{LlFpd2P1=;PZn&HF8m{4c{H2babI>
z+^;g0b!vCvY;3ggIY;z(dq}fszo%M%ytDSq>V_@!8C}w`)|XU^i<T7)lb}!<V+06{
z;I6&~kN6wi>egF~l&FMUUA;K&AgC39c%9ad28HXxlxE;Huvgcw0hku>yyX4|aaQkL
zES2Ru4lb@BJrNik16Ddbb>nyPR%luh=$F6+L&CwN8T~)Zy@gj+YZvyb(%s$N-6`D&
z2q;K*OG!$17=)72ptOKUBa%{50)liYNP{3qor%8h`<?In1!oM$9%Jjqy`J@~HSZbM
z^_$(*^YhYR{C$<YvhgK#kK{h{;$+*pJ()&i24hv$pOX_09}g!1W*<cj(pqAjs$8+4
zsw-Ln6Ju&&*GoHUcIjOVOtbSO3zgMNUO_tcV)yw_+>|Mr+b!xZaFu*PhxSo{+16J@
zrMNBl#%^Nf4P|ACb9~=rg#cud(*^l_XxUn1guhzJ9D8~Tx}EErKR(4KWUoHNnsYzC
z@}c}aK3OLi)F1>M48Oyk_b~BY4mI@ucSBtdM7Sc(XwbjJ*=7rGPNm6T{SeqjEaT7F
zzLe@bbrG4g5pb#vn=t8*+Ob&(rf{}gF=#C+U+FQ+9Elcn?6y(DCCk+*XexGp_^lSK
zXd*XnhC&k~su`;1fDyf0?0QwoOh*t%i&5l7hO%2v_E&!FeVv$4QY1dI>T8Ml5j-Ph
z0Mk2dlgoo{geKIVs3~QTIUhXphVGhCt-a84Xd=jG@F6?;bNWR@Qu4evQFnQ1Oh(bT
z!Hp=2EkZW%0*0Xe{!PWX@5<XdI)2T!D(6TC%5t4gR@^SbCMEy5vQ^x`kl1H}cMR@2
z9C};}H_;%p9^8&>WckhCyB)J#yktvF4Yv<UVGM?V@@$3QodFDY9M5iaHNx8srzBM1
zGqo^uQCG)62tVg^kttqOX!fQ$|1*IQy)x#O`RWy=q7fOVE3`)<&SgSi2D-Ol1kZBc
z+<xuqaGTF3n81iY%N(+~rJjZ2Vpgt-wt&BPe>vxe>jTs|>k%6^D#R#(uwHR(eK3j*
zl<5A@S;9s~R|>4XTXZlq^gapG_(Oo0o|ezn)blnCezE8Z7dGY%x<<dlO6Wx8${E)`
z#CkYrkt7~i@jze1c?wdj2Ic1<s`Z|0JsYWYIMk^Z<{bf%3KIz<m3Zy!hrp}zQ;x+b
zHB}E(V#{?%NH@NaU{gz078j$c4<yh9^4F!9Kd}E++YV_7d@fXq2bsd3jg6_@uJD=S
z;CWoe&k%H1(wFYz=+Fms+^?x>0c~ti#Gg%$`Yap07KCyk7iZ7qbY$>p<H0!ceoJGe
z=SWCU5C*YPugV|1Uv7QeMxI0a4f5PDPtBYUH{P&X>KEUCJLJ$7z`zhL8}7eE{MMiv
zbScmRo@L$;dq7Dw(AXS&oy8syJ8IVsF!?woHLp1I(HsxYxkt#38q_&c&8j%UjE(k3
zA;a+Hzmnrh(nIwQb|UxQ5s__W=Gz`rdLv(6Zc4BA!TTF6t$~`?J%k(SpPCPg$no!C
z8?@q=$018ZL2Qpx>sYd8wJ(;6@0`d-%qP%lA;ZIq6?h}g!Mvr2TRr`b)<{D`BT4;q
z>DD5TcbmpR++NgD<BM6#kY0jS(sG%xuVF26mxpP1o#lq{bkwvh-8TSrb8vu;rj%N=
z8Q0OtaAKTF4*^M@KSRV7Rf6=P*)k%_|NAq|Hp4J#>P|9;Z1CE@Vy`W3kTaq*j+4Hu
zrx3S`M$fae;cJ)v@v4ePsr-i#Z%abPn9P2Be3X^V@Hgm$r~}+dUp&ypa#o4*QgV!=
z+;VT?zm2)E$$|aIyYgu(cnLxaIqwasiH87sV*s%sAJI{pT$;hjGO1ap&&2$}LG*>E
z4<(LYm_<F>3CF*q|5D#tx3R}=sz0Rld<d1ktUXz2t~Ex_VY0kEmf**|xAT-#R3^D0
zI#-uczmDDoOr-%k<=f0H)air!JEGU6`8h&w?f`4@uZd}2b%%?Jt@T)iRrf#ovD>;#
z518lXYbpm=|5osbva9IU0t2j^!WG;3Ykki0)_mw5<%a3@ARznOXuyroNJyt0|6*?S
zbA(oo-igeFrAIrn>B)cp)EWL1v0^K~Ddo8hVxrLEMu$KTjqraP6$-Btr=L76F5qBg
z#jM10C@iX7jl1hC$$)A|$MZ>PBJQCT4Oj96^L4-G`qyHw?On1vEfG*GUGaLK#2#$p
z#O+Ae5+fzL>k%2^A>3<p!^8~t|M{d$mJD4kLoe#zkM*wf-o>q1$iVGVU3>^}GHl@X
zwOGocCLEFO-=|Fcl(<j7(9(~M*Soo|L61i!YmLf%RU?P~pO1mqZq1D<W_gq~PMfHz
zg7Tl=RhUd<3e%2oJp6Yjt}AQeX-<j%+&H+)tK$C?Si!&O{Qvo1fKLV3o~}=ySQ<IF
zxw*x~qimSiUR|@1{{6z$vF2X`(<#6rejgm%)zho3uZIdX9ek4uYnz);hVY4q)UU7G
ztE&%yIFg9t-izG~KC9QUv8ucCt%U_m!B_1dfq-eTjjb)S|DV%S00YR2gRxKuTxlsC
z(+h3Epwjt<xB*@ny|6F;Bgd@@S+k*nmmeCnek^a$L7=&JbkrG@le3U3i%>nVun@e~
zKY@;Z0AwTZba=VDPdB(*wFL!MR8$!LDbedgi+k35_~WbA=@tlVp{*+$BH^<GbDX5+
z_qDa8vb|7v^8EL4oQ^Ch;Y&v1Cy0Q)D^w~TZdDMfrGAI*h2s?FW@l4l`pC+LLU}D9
zDA-lWZ=(i~vb}>f4l;rW5OIJ)&Ed8L&iV1S#JQ#$Ewt(kiB$e``+DzKGowmLNm*H1
zs=s7s`Xef)-}U?&9%Ko|)CpQ`9i8f$8vp%eqyb#fuiz7GY*tC62RRs9&j0xeRGthX
zE)D10-Y5CquzLJ`AXV!d3Z1-sXGdpew``OH%CXXU!{hal_K}GH?@#3=CXUz)efsnX
zEMLE4AwPfmR9{;=Avsw<SonBvF9G{`0<>z#w8L}VSE4`_zx0rlLRU)Suj1<O2f(L$
zXT$R3>C+c4UsBhhoG<>j7a--&$bIUzGkdC2&~tKz^3lb@Vrg^p4DeAOI7CGuf%n<7
zCX-WDHQW|CI5;TD{=Ys9X9TV-2<fFBt?vO@sy~HmWqaEbOxB_YYXnX1Ab9z;*d7iJ
zw0mXufZB91l-2y#2X)lliGY9rsYU-BGIA8qhGs9|!J4Offu=k9VhNj+qWj~YKYwg(
zZU67Pz?qs={NTNsvvYZT`~c7+%-;f<N$#Dk<|((A*U{z0nQWEGhX5gF<|fdY!)PSM
z)O-(=CqOm%u>%IAw2VuTSaroFTc&{<!yTwTID0EQ&}TaEy({{EUin1QM#w9eo#0%7
zsaX<b3keAc%JgfH1=c(v9J+%$=KJ_;%;Ue5KU1X?VmUk^p@~)RK6P_LRdhR+|Gsau
z3N`os!*~1JvLpUqxA^~u_(Vk|Tm@nR8k%8{P9cJzaLZL5DV>%d;iY9*?~Q3)Hwb(R
z_vnIrmzj9~5aKC_FVV<t3|kz3Wh<d2P_WIttAR^Kn~8x9o$_A%<zNCTDgrz_GN2Gr
z0M3v^d4V=eh2iA5Z(sn9305{XpfkZgnJ;B*h4d28=moUdm}4*#E|8)jn)j0K&xGS>
z85oF4OI{aV8RV?j!9gr<7!yu1?HFwr`E4$Kes)?~+#Dq@FQEYPwV=)#eD+?%M89G}
z0tMvW%P<BKBBE|odadQ{Z6`;^L2LA@<Ha%p=)qAD6jT(&@&gK~SFm^(2`L(!;f_vD
z%bRIM?^Un=3Zj3Pf^~f<i9U&qw5vHZf<F+EkjjcnfBv)wT$Qz&jJcb&LPT9%N?e==
z@dWer9Y~QYN~7hMNg<|u;0^yt_{k~sd&kDdbBA$ct&vy_S<P5&Se=&7arq<A`DLwz
z^y1Ly5v(2B6E8?R;Q3@aE(d54LrgG<DL=#)AOTv8d<BUqqO3JmOF&-v+Q6HFV%C6e
z>j`Z&_*!aE*t-!EZ`M>U_8Q<0Wr_qtU{&1_5B$T}C%0^dl#|oY&;S{azCO{Pb6kac
z;dhCtsKW7q)&^Zvp3YK6BI~eT>VNktKa638yFfdffcXgy<}Z@qkx&gwI)HSjCiQgI
zF0LJ|z<~h-(S1Qx-o(QbsaQh=4GqqI76w%MO<6<vSoy|e{b91}8~6F|jiWsb>#VWF
zv;d<f!DEj@b7aB1oE)>m?_A(rd)BtrFE%wJ0n)z|JcVbWsY<oVQIU$!`Q!(MGR6zh
z7ZQE`mgyI)cV(Gl+HU=Q^7uJLUpZ&!+0M6|!WFJ$@S31tQwYyaOdJiSe}Mqf@Mt5y
zrp6;v*v0+g39SbvYaB@R!6+(NBqVFi!s^cI!x~sq!=(*>qjQuRpRDzbX=2J0#jrgf
zeIOuXcI<*@6E_t8>Kq9l)1Ia$KppA@l|Qg${Qdo(J;PRhP7OVM6DVUBnyvfB948zN
z42ia<-~B%OT{-IsNUQF+moZPDu4RH_rc7@mb+kqy_AXdfp>OggQ706Ro>)HMPlz~-
zZ2>51*$*avH)#X};^DwtXmAgI92E`j7wNH{*Ds1}mY}8zzS`+Vl{-KJ8s%MGT^soR
zd02e{J_w~a6w?xPnT7uS2xNah0xvUjl*9?5D4b=<)LLoWFt+siK9~+(cejgsxgmUA
z;0-{Z_53~vz{Hef-EI(t%7#Hl_1nx0#U&jbovCSX;RAE?g!+0MpT~ZI(YKz&phhcA
zOimJ80hYy7M&<_LA{<qCTkr$`H?F3N*Q~)!7V1lYqI^Cp0s4Xsqy=Ee1hUH|gjpDm
zcE+?kZP;-Elp8c>;SqT(+bF+*kiH>&9ZN3h|337+g^Mx0LDOjFPEO6>eq_d=J%(<7
z3XfT}d3y)2!kR!1*zCi@#8lMVtD+*&0F)(WAusRB-9_yn=+k#b<EV>ufQ4pvrk>;(
zBHwtazSG875l}tg!~h0ku}SkWT=3#TjSYs8(b;>auN4N>TN7oe0Ki<Iei!}fm2r{U
z9W}LIJ#<~qwJE99A?_WAc|?zWinp+3HYy0yzzxRu`*vCDyNMdoqrx{fU8H`$r;vc8
z&FSkMDJhebJC7bcvK`JAvhKy5LW5zNaL{=K$NkEkg*FoAcF?v%^0aTBl9Hkr|KPU&
zFVP9qftMVgsL(8V`PgnerllOo@!4(q$Y(!d{sH`3D;H-zZcq{jO;s%cnn*SnzM>ky
zY(1e3((<UtP0(cUKnuf_ZCok%Y4|$t`tp$eU7mrP0Wq4Ko!t+xK{4%>>%JK(P{uKg
z;uRJSGr?{HyvFAYp);6X!z@-~Ebty?L1`&5F>%Vt6rvat&z1UX=4YV@FMFxrIiKaT
z?lp%4S+vP#_g>|zIdEQqQ5?O%1`wtVQH%%t`9-Gp)Z2lK<?Y*;JaHcJ<T{2){QEjf
z7u{;!;weH>Rdg-MCgynvqSt$)C@C_`8`};}PVr9~g0F7=#z9B-KReFK%Ho=ZUV5il
zjM9gJ&!2_*dI`F2@Szp`zGzO3i&KMd63{pTPLmp!;ej4gRe7i@D=Sv^_O<>;rNFK9
zhITjn66IkykgRdcrUT_kZ-3oK)UXrve_^|TD+2zr-N}l_VcZ3P9U7aMu-Isyos|r}
zJO^-0^h71_7k3xhGQ~XWVq;_Ba#~sf-r0U8=6Vpus~sCp!eiUv+m@oSPUslj2KYi6
zz;Uj8(gHD8hV|;VZ{H-51q1|GKX%8bQi^#L0tuo@8L)FUTT|{aZ)6dEfa?Vucvo##
z%yI;iZx>`VHC;Yu=!>2KVbelxe7rF7;eT_3-U{njTIaDsck|p}%PUMy3HS4pQLs^h
z=7<ZhLUqkBNr1!!*&nkRW&k1p1qEI!$ONXQUQD$<M!DqgV{Hdg3Xf48rCcSnCMq7h
z2mjLjq{KtgD6rF!LZVmiGGpoDf^`MfGel%$AZ<E!M8pF626(N2?xY!vr4TNs;WamZ
z?<j<eOh@PLrxqiLEu@OywGioyftWaxcYUVI+#7B&*3%<QrV<zThcF2<PUED<KR##P
z_StD+d~ey`)zbq{5HYKE$XhEqO{n9wwQ+Zu*)@%gDZSY^-bmxIhWR~yERV~4&u5|S
z@y6y4EnbtCIXN_PKYzY{97ak1X6fG%&3`jz^}09B%gdOogNK;NCn?zia&>(;!w3oa
zg}r0okvli}cV-2&<0V!{CcKq>Ziar-;7_|3j8It`G4T1S$*nt9`3@X(!X=Rj2$C6n
zh*%T4B$)dCU!{mR2wN;Dx_BZh^B_yM_+QzlfK993gPZj8e+hH%>BuYA|NZg*jk|uq
zxxudnIbF<%#yVo6d~QdYD!*7V6ry4Te{(!TIT_NK-yw5uHoL*SiV6bs@uCaScnba6
z7BA3B)yj+U%4|P>llVLB@4AifS6x7cz|nOX?cq6GWl*C89<a6h7Lo&&E2N34xkWj_
z1VJ#BM#D0Yi1y_teT@e=AQu-GnCqul?fw3}061o-iU9W36(foB^xBM+z*HQ<-OMSn
zDG0u=lYw)#Cxys1=m!LiaV<sM4Qz)yb7z44e92~IRArubeu@PEvPXY@Ik>xidX_aY
zAp|k4XG~RFdjtkMFwpGbZwHK;@>6mtn|{3p$WL(T?q;6W;x!WfZ6WkxK72M65RZqr
z?~~V&HbLu(vEG}Q#VeLA_4r;}P-kwgOaq+$$nmpK6v5kF@9?Du%;!}aZpT}V(8LmU
znsnZspW`fmAPB(4w}9WW#YcD@F7GGR8bD2LMw-Y%hXMCCVh|P8%5xZUg-dZg(s!Ya
zb`b&0_~FMfmlr5<SScL$ch&|-fFkGN<C7)oe#;w+N}Q9IH{rqs7(@3fjd#}9dr`x#
zy9E*DxSaSntHqw=vgcmKytX*i`<SO1RLTS^0Cyvnb8*RnqUS)?9~~VXm}GXYt~A8N
z-jHGOF?zTTz48MRnzOT-X11i_;2=OZKq>~znAKrd?UshmU9ne@(b1j3{Vz&*aXR3g
zc6Zve{Pc_}ReE>1TYXW?>!;uczk^jaXJOa*Bv*Jdu`}2Dr$6=d?0kDqu>+K=>u-Uh
zEMJ3Ee;p+Ujez-ehVb&j-yTPV^T$sIQ5+25fs&8pn~{-DzN0b-r{R7*h^de;h+iCo
z328MN=OL8Wgn{0>^Y1*?*o(WMM3)`<oYNL^_IvXyu$|LEBnTCoj-H-zowMK7CBmYs
zwKXHPQEl;iII$j`LtgZIZ%@?od#d|6T=Epm@;uz!P~m!8Vn17U$H`{_7`9`3mnOHU
z$fVX@hfi+fBw3wee^>U}Y$hk1d+*mg6g~T2;Zbm*%~8c=j>71GGMi=Z>*OSq*OOyo
zgn=++|Faan+3e#APeS---8T`2cKHPbU^|>^ef%48F6X(XwaE&K1UKH_?ZG3tp?k7v
zwx2VyqytM~^f9(CA*LT;2pr<CpnRTcabH2c?4Vv>_DEGlq`L$qL8^4&gZHHXKnRo9
z;-R6ZlnyZHcVM_wy{=(~n3$Qr16~0>Py5U(JTVGWrhKL$RCuLwAhw;How4kJS@RDa
z9rrVTL0dF<&<L`J3(*K}3{YRbw#ka6mTD?1De3F$^V%4TL?cN4&}jy#icW!2rQtg$
zNfvvaW<n?O<0gc%Tdpr(ScP*{-^u#cKn24M(0%w{T|$dp9`_V%!0EK8uI*VexUWTA
z4BO%4(NYTu#|uV)0Fp@1uHI%dFbUYkXU~YXwyB;zL4UM0CB}j&&vG}UR3SnTY$Y6e
z#W64SM?vJQdIn8#s>>6<$8Y+gh{(uJp%gzKk?V@7m5t<+$eX?MBwSwXJn)p?%dg<g
zn@?1bh+5%0Q7=fssq$3wNV**5zrBDGdd2drEQ-NbVi?47DRt%F{db45Bt|0K1f8d<
zeD{~#Rum(=S&fX0Htyt+sb^wN17vuAS(u1j&-rU5LXev|LH3hg)9c&(47^7?cka9#
z&XPc>Z*2`+>WGAaBfR$aiqzhBO(N6R>kg(FQt*@IzwIl>On>%3%>wg%T2atgGw7j|
zzNzkxX<O8Nhe)Y=*Ia=dkd`#U&ZGl~m6esp$Ji%Dj+C_gu^Q+Fd3D-1ie%H(v}fZ;
zc~=V63_qclE8I*;KP+WulJvSsrDS~@8yousgDfSNsU9qXuU}uYFf>p1;OhVx_rSt!
z^V0(x2zMu!bMoW1C3o9`q^5oWe?XR?w5;rYvGxZrvcn%QUno)tJAd>*1_1$Zrl>^S
z+<<(UX9|qX{cwcLy)JG<6)QdMQaZXk4dRdZ@y#hHMhk!MgB37-va_?HmjQ1gR6c(O
zQiq``04wwA&Q8#B7g`ESd#Z+si6<B=+;GSR8z2)LYXeVKwXyo9M|lN8GMzx?I~S>`
zgl}w-8#?J+PN}~tPb)yKfhM)KHkF&PHOpI9$}lsQl||j}NNA-%-uP(a07Bwa+byD=
z7bQk=tRay>95Sr6bFI^rrW%JnKV$`@>RMTx449WfQAggeJ87%A$<KL}COCi5NcvSt
z|H?-p>*~;WD&uKsYJX^vW~3(`o2Rbaw@$E0zu+`H0FoetXab=npfK#?;o#t?^X~ER
zL8TDQ?=W60n<L$-{(?2sw{Rw$kSJ2Wi-Dd#NpkYz#~Ye`z_x*0P!^Or`g(ehq*IWQ
zH9DnM*;^!CDEdW=j_OQ1Y{9L?<%aXg=$+kg&3mrL>bEGTB3QiXWJ(jE2#1$$Vq|2h
zw|8o?ZuWC#x{2>E;H!Y1<nh5O+JIF8En^JjC&>BtNGkjx*`56~H1zPt5EWo0goK2M
z!t;>aXB+k*%QiGH0BfWl=!ciN16aVM*$&iGlzf&9iX{P`oq&xSkjYZ>n&-yGo&u2B
zuL>d)L>rpsk+|t9ivoCA)!uN?(wf6*0RL|hes*oZfHJA4sEHIVO@QjW7aEG>q@?Y+
zH$?&rm}QCxZU;mG98(*p23MB^uRE2JSs0RTPTtVlt!%NGh-a=PvW`kwGmuagULk}D
zq1W`_PQ$zO&k_DyiR{}m82yhS!DLJOt%C;eK6MzE4GwYwo0Q*uIr!njodA;TU_#a%
z?tA5k=&uc|<fkKUysKe<P#EI{q7m(sq7@kQXaL`miwh$&lSE-(3}D{_lzOCJdc(Ck
z7ChQa=gZ5*;^Rqz)`GNz`+THM()K<ks7zWj8F{O^Wv*A<6iO@MR_DP|6F3Xokmwq{
zD@ww}m2=B?YkzO0PwR{>NzDA2(Srvdd`DYra-8@nEL;Q(@vsAo0<+RAVaQX`d6_n*
zUvk_BrpIg5WZSV$Jd1tZd-py-+~#xuot9QW!@GB$Ai^#Wt0LyNsQCh2pV9;)IA_2o
zqfSXpj&FyFhPE+YqFy?wo(@XkV*m&MucH;Jq}k{;iw279smL28$5h>AN5Job5t{GC
zA0}&WU<;fEl#(IyU(VF?___HhUH7=KJ7;GpgJG=d_H%p#3@`nCXl6elyHSa5rx=-T
z46UyhId-(Sr%c}4o)Ixs?_>dGA&&-WAR!ZV*vCCg)V)+}UWYNld6Ac!;;*XZqn|;W
znH?XDbI%qa0S9JfKO;Xl8-&5k^)fXz`sQI{1hfOPCH>?)Dpkg9z)7F``gPR(Qfu*7
zSm10A-dm)04II2t?6XWE`M7RT)Mw|b<TnfwTgUHC0pDC_8~Oy;LvJSsh#Ee8U5SN(
zZdX=WlhKW+>3cbmV^XnwElJElmN<RVr#f-@f^aI~L3x}|{4<-)N+zlb&6~ueL)>k6
zKi|6zN(?-cvao2Q;eJ&dnKd%EbL8WFl1NJuDX%d#OYGe5e!P`gWjK-XwDJ@3w#C9Z
z5+51CC+SN<h3|0#a`f?}RXZ;u$UUtEC62;enz>$~8j#gIe3{mYgz>~2g{G$9xnU(m
znO>{^dpM0Ccf#SvQDp1my}A$qoz<Efh&H8Oy6r9ImEGqlc#&ri+pevmW3{paP}aQS
zj;P$XZ=dr*<@5n)PipjP=*gt?+D8!uZc81k6|)W1KtTua)Vn8gk$g`ZE^#LvquC|S
z4W=G(_Re47qNmEsdatxDhX0Thyvxd2rBqjKr_NJt;WhPz$9c!Ft{_!AO!C%L`FFWq
zBC3cn!Q+I*C{603@&>-M<xi6)cF(0*+#Pewy?-N6{1|L{sA_qK%7E75{H?Z%f#lx2
za@}zTuB{u_r0LxwDd{vS|1R%YqA*z+deV8!`wP`aA_l&M19xc=plt5*U}rUk&Uvf<
z(ZTVtY<mQbbn^+ld{R+BZgurOFs^`%9=1zcOU6jwHT8t-3jpxbf2zh4zc+>E34mrt
zw&Gp)e{FmLL*gYI-ycN4z6%Ab3FOZ(K-bVfe*p-O_9d`+=Lk6wQ$p0~HVb$G3b$Jh
z{g0EG{dyd}yaq@T1`)`5gCVqq+VDZpqv5kmD@G;=H$e?Chwnw5j(YW)Id7rxvP+EQ
zt!Pjv{KwP+wv?DrDJe+%8FHk)%g3M71;CU2rLWHcX!1ztgfbFyi|z7n;oU7LfHqJu
zXk79g5s!k_`q#kv+WAxkU}`2cg`Yu<aPrjCqja_{cmaT}w|)1jRFjq9+3(2Gq{JC;
zNr+6K^`L~Bx^t6Ss0}_;J97xLjNT>wBW!p|h!9PS)Lt5!Ecp2bfK!<%IpCfJvH8Xl
zz-j?}cX6=x1x7;qw?K+YF}@gb^8&^$PwbVSkUrxjU_O6<1GD^n?QmaBDD(HXXTHK?
z2$g?xz-d2>6{<-3aUF4q!&7;3pyjsRi6RmqC?w?W_4&lZyciE`%EU*C)wkFQ3XSL$
zY4p5xL~I&g`7=#lJRg*ZX+6T94L*07+7llX2ytm-O2aKPxR@5I;dXjBP}ypwO#RMO
zAF(?vP2DvuTRiid0;x<d;~~2AMgKXYyl_8>r9eh?FKOLnQ<YdV5{DDB=!;duAkEh&
zk8AVd@~cW{Pruujp(*EuHDBHIJS0XI<bF87c~Gq>g5-{BGo?<Ch*>+8FWljm=V~I2
zy5W2`WlbE|8Q+Jp!o~X`l}ZlysI9!@h#Q6#3EUNtVj+KD-&z-r7!f_1-36Z|y16-%
z(ML~<we<i>hb`3baP9%2k}r5tZ$l}+w@BAwV|Vzy;zYuCkCw0px+eM35$MU8nG^$v
za5kWR<D?F<^(K~6cDiA6@=f<-THO$pCeWhVUBkq1olv~$^~kt~Nj}k$5TX`p?-!nk
z&+m95m2jE)mNi}bTfz{JVu;CJq{^v2y?Ia9GSih$3M=o-{ubfdbUCqHp2X=Z6JMql
zTw6h+yS^7xXVkQaA-xK0x(SH#`?H=oRKBdg%&0Oa(bxo3mQiSxZz51_>9vRyywu0r
zkqPe}$#Wnl1;q+oK$Z?B)I58KZ$vN+#~j^;vrQ~4=voMFj!aB+zs_0E`Vf1txxEd_
ztAX7GsVHo!gY{AQEuzP0STxdGpEK{XUINxnCBPIY%!oZWrBP>;w}UV<q2wj#{I&U&
z<Qn0&oC!ZIf3SxRJrjjehXF=NVIn3S;mz!C$Gy>hH`|Bso7eU?FL>bH-5XIXzAr8U
z_7jhYXrjr>NECMEAUiq2DV*zZaenT9yfsmv>{I)`ySp29ouEa_(|iD0(D|tV^p4Yo
zoa&xG$C)oXiI2mjm&Fh*HHAN`tLKSE7QKIeiRkC%X0zi&29(qqX}plqn7~`1#ZR3w
zLkp$xs^}h?-^HH^Xez@R9i)N<VKg{A;rN3xiYR$d{P40>JJ6ufBQiD?jo^FKj{Cu?
z!_*&c(-zLwWtUQo3_+b*DUaz`RGr{8mmJ^su%af{zyF8G%A7Jh7OA&`gGA#<c!bSm
z+Mw25YJvWdo{o+Uz69MCg+1BC=xF2P-@*fe`b;WknB;<_US<yP7BzZnT16C(AF!i}
zXzr1t&Bk&O8HT=Jx_YY1&M*}|9eh`0d&KH^DBk8qvCzPIm><?h;?XyyxjPNcPAebh
zFU+r~h&Ww~ZFV-#HgSb)CL5lZlZ6yvOI{Av9jnmWjuWPu5<c;IuU?fy7bZRHcfU9-
z?BSiQaGXpxg_zTEPYXA_`z*pg&DmA;6RZ$?uJ|o~Rrc5F87@!_8u5pRxU$A4J(7>o
zP>l5YC97IR(qSz|#a=})Y_N0deH_q&awo&Qlc7Hn_w&x`7*pPJb65q^csevY8_*qR
z16?C|F}cs-sqYbUrzsSPv^>66b{OwLW6kr&5b%}XWrj$gzb-A+CIv%p?lkJ#XR_hQ
z%b)nMh<XGM78%NP<*Hm)5_=Z1xWgiGkKJnB?Tb;1?r!n0^9+B_vEh-t+;tP2eHGYF
z{*w4on%Lh1H9W}TOD2cIPPqT<f)?v2#t@Sv&o{FG`Ke=xa#wxtQ?AE{7sHh`-@{@(
z#`y9!P(GrHHS%$o%7_Y?qDqya{)kKMy^pxrYGSW*YiU$Ye(-0RT*)wc*UV=RcG&$e
zG&JP$tv2OYp^se5gHRoZHH!0MaloiJ!3O>2UZ^cU)3)wc>nN?9h+Eoq&gn10_ivyA
zXQgDdLuL}XZs75|-s=I?jd}_vJk)p@?QjcV0?b52v<5W(JU(o$uR@Nf;VX$nigAQu
z?#rULC7GFtr2$)%@WJ>ZD(W)h6>?$=bj%0Sb$eG~7;D<#w!hk!3@P5nN-!@T#(jZe
z2A=z<KU&Ma9#p_6qG!pks1OP|Z=jP$E?@$XZoKj{O4;s8Fl6m13(SY3bi~zz><Bh=
zkl?sKdKAH%Of8s3td??arMNtr!ltXVg@zE_pv3i{#XQwqF5H-fl(&(kUaTdMLyvE-
zPSFI{)k3gzV{@}05BudJF;|8sADg^+#NaAArR7AjtF0Z<3)RvPHiFF2i4Ag<Nf{+g
zY@s2$g$RNPp1$LG5^H@t1n<4kw?Szm_uonys^&3;8j_*TDeqoXW;gj`NZla_N5HvF
zTu%Hl4mInx(My7+!u&~8O@na*Uao^QtL2EBdR{IDr2)S#z7$n7@Ol0|EkeFIUb6li
zgG}f5SLQ8taYs3kx^?3Qb{29&SQmuibehC8z^-@Fc4^WwC@wk`FWrJEr)o*UUJz^b
z_(Z#xp@p*lMKzIBBd<J%5F#DBDriH1R{Xw(-O<WQ7m_vrg%NV54OQDXyj=P$^50%S
z2)b3$Ik}R7cGUzzOjDWxF$s%g=g<D&TW*CmMq{xrtZW$X{YGnhS<0*Kc4^(Y+dTYA
zy?TGB{KxTalX9Jm<(0@3sv#5AwjKPQu#LOqh*n8_o#!$bvEr<0x62Ue00D3JjuM01
z9TIsUc6wZ%M?w(oply4!!JoEHA@Xo*XXgW~RvIn%!h#V?C{qFzS!h#}t^dLeEGAGj
zdo6WzLnI11Slx%p%6uJGUPPe8Jb!+@U?x##2F4#B14Mv`&a6oelpLa`yRe%Kz&BtF
zuG5aS?+csLdP1C-%gmtm5aho8ov^s5Eh+@s*tDD)C)TfVwH}5-t8mp=P*Cs{lSYp8
zd)e^o)oxJz5g^jJwyRYwSCp1ku?asc!t*OZ*D)|CW~82Al#lZiUkPMEmupDp&6X_|
zQu*Ha0qWT7qfHTzt1Q2YfXy~@9|Cpni(GgzFv?Nhd(mg1PPyS|?|o0^CMNc~BJpDn
z&#tXsUPqd@#>r<?1S9P)5VAPX!?a~hPgFOH*B1nCvZ+hox~k{!YeYixS*zHS_!CjF
z(e-l*l>sepguaM*J<3RN|Gr%#VM2EQ9ZgkI@ibB))d{hadKoE>4TU#p5=eCH#JtN#
zySL2&XajT87xUffDH-2#yyQlrZWYiVT6hqYL`R(89d5ay);uv0>1#d`Qfgdd-3O}-
zP7M~IxQ2}=Rxp~;AlA0fAgg^Ca6t6U_(|<lbWTTt+>-HaM3XnAjE_donT6W5jU87k
ziGtb+yK8Rr{UAwk_N^V@6z9=Eo$c6po~!845o;Ngn#CH+u-~HFGJ>SYTZw8GiSbl9
zbcr(_SF=mZ6EhDS%jBjY^8s1)o|tV?4Vn?Iw6}c?A79@(I-MW2`heWY+19kD(ai16
z8+*JFk&!ACPw`|hUoj>oCPD@bt(L%QOU2KhKa+5#0WX+X?=~kV=bqBh@v+(n^;}!<
zZI$<M&}yaex_8CkeR@vwuC^A8ChO220#^;}OG$tz7FTCnn|pe8rmUc_r<VBU$8R`j
z8G{wkR#YXc1fr9fWr5T_fJ%Sg!agl$?N07G)aLjE1kis)cdrVqtMl%TBceqGq*yzm
zRqjY%AFQXzT(-7>lp5bBPq?JGI7Vf5*7(%Gk@;6M?$%>A4R)+dYH|gFL4DulE>#H$
zqZY?&LJ{__!^2Fe$0?+Cx7_9*;=2(6j0o0$?ZHLk*?n&=i={y$8xm;0EoPrTv`x_G
zw#BGRk{xtuN1uL&$RM(#!=T{#?Z{YGwF^fsqVWgS3qs&r8e1=JJP>2Yd>@$@6gxex
zS-dzTe&lr6+{IkTIciH2aM^{q7<47i|NDvc2nT1fq;34FI-^DgmKvIu?n8k`?409@
z7X2Y@*OrCt`%lTfw~wgg)nux}7*C-8R^d3*)rA)pGs;5CYXi3ruX2kIQm9N{5rpSA
z0ZU-&;u*EnVA4$?Mrl*jif_8FH2_Na3uu)VEDCfs>EY;B4??i2Jn$?u7FQPDwdK-^
z5?ivPU)fP>kV#*lsHJb><lU%j`ZHj*g`Q2R)mG!l6FD>^+x98D?SdP1U>RvjUG=x#
zyzFAd*Q+cH8kG6l#8^_sHF7lcXcmTIB^q~jc;dc)h1ijno<8~FMoyl5WMc*ps1`E;
zAM=Uu8PqzY<@y@D0y~bQ`Hkxfz;FdHs#d13*VYstTMm`k9<(k%&63agZXE1!7qDg$
z>Ok&iXfM!;abR(xvelP(lA5h@v!+LE_H_UyRl|^b_9z+m7VS0GaFjFX&o43(l2qu6
zfVB~t$HYREC@7EZeZ9QA(%dY{J3s%NYaUMF$^?*LllOKIh{Di``k{)%yo||%9w9k-
zhISH^f$97<j@sH)tf;_-hviRj$E6*{06R4dV!U9$g!UCNx=V7_Co;>XJ>Hx|Ox%<a
zVEjh4kC!3na4_H6?8o!A*~jE$)wU(H)S%kZ-~SZW%i-E~MjhE#tbW1gx47i6i1II%
z1sP8o5)^HrS{aZ;I_3k?Smkv5+#nzneluzpJ^9!3-O&P;`No}{O6_ov4norj)3iqW
zO~CTV{t8P&Q<K-uEE-J<^u6J;4vmk4%9)`7eTo$(5}V(@6XW83<VSz&pP$kDhJJM+
zRs-88iJ9fA;+T4Cl3cfYH<7H6yClL?-c7l;qh4Plb%Fy+(F=|qHlu|jW4$-1DtsMN
zcNLvuNWyZ=pmK6ldf;?!ddoDxs$wfWxS00`U4&t3T-aLZFth(bdew;GaQ{|H=E(Ef
za<R<72YXk`9EF7y;coQf3S}&2MU8tILiJWxLYB=Y5wiEH#%8@q5SO~YcJOw%4>@1S
zzs?(E7P4J9ze|&qW+f|TQf=uMiB1F#G4^e<lB6#nvVhKyl$&|5WFO!MS-<WnSFd%O
zDgXG|zdS!bkA#j2HG_D!(@h@qUODDR^WM7?Wg_Ka@9Z%2Q$QUDb81W2vJ-GAMW}_^
zk&u8(_zDw4j{V8Ta=UW7rEC6x_rlrQA$V}AQ8LG>?tZf~%Zt&k#{c8k5%{x_mu)<A
zSMHR{mJ{=8=Fy?nplZz@_A+OtUz|rtf(tVAaw|_uhVPl;^{-TYlam<bPz~1c={qO!
za+ylz=@@1R(RApzXG+|)x|q@NsJ-H=&9*{8!x1$#8M$!Q5h1rRxZCGq?^{;Y*K1i}
zLLLA1{#$Ml-q#o~jEvz6*p!m|P!;?Pd|p_Tq75!H!hM>8e_-J!bh6)+y8hmpetJKr
zqJnDv737LjtA{%<KQ9JkEac2qN$yd&6VOKUofa2QQQk(Pt9QmD|2`7*R1N#5qy|5U
zJUAIgB|llgMjS9>nnOeVe#HY9bMvZzQ+`urwWO~7s@ZF@6SRJTstOZD%%^r%47K?%
zi7TK-4Q~0~^a$^JLPBaP9A3&$7114Dx9c9Pz^G}j#_3zF1E6&M7@?0GPOFf4uiBC+
zcMU|6)go(N+d7%A_-zhg71(}8RIU8XRE3e;XQX>b^U5Gn>5e&srCK)qQ?N`RMtmJ)
zIEiVo1fK-@7)R|jBl2qGkluK#Z2__jQK-1I^c!sMNzu{P!DV?(vKgOFQ}=5(ubh>Y
zdt6rjit{e*plS@dnG{9c67r0@GH&QLWrUcdYXkZmPnp3Ly6{m$Rf?1~>6ROXEB|(3
z6K1DiC~(fKqYuJbv5$N3&LYv7ME@wH3Dp*5@$y9aRB2;LaikMqx4)*eTOqI7$BO7*
zA8K}f@THIdrvOn7yO?f@&Z0o(AVr0^P2tD~TtE5eR8mM+EN0XB7@YUR)%w!-3J3;E
zrs`dDV5)qJkg~Qhcih*{ucV}8d-l}HMrVqiU9UKVf4)#vz{v?#pAP3=du-9{-2e}R
zR4U4v9YZH7YG7t&W@KbAV63W2#`AQtV&-FcsQ=hRSs0?rbd92I3RYo98uwm9PdAzs
z;r^ayb}#`t($=ABC28V~E8e=zZ0+(=5-YB+s0_YB`jKNIwRPr<w-3*UwPy$|Wz<K~
z7Ca-O6l!!(rV5pu-6`@43u5iQZ<q=D)o#hy<-aoZ8?eo`WcZCyA;2MlPLM1oe@8lH
zZQ#zTHPjlhT1L*!Vcz_Whzy~+H*Q&hx(t>fnMV*plML2;dcYjAFqNJ#l)Q_(rRJ`w
z=PeL@0Y8zwR27T|V*<;f;^IIW?p;_g)74F`4+GX@?#;lpej<?CELWw1i52Kz#NQ}B
z9oRkuEj6qO;Y$Lmcb<-s{}e_?{0;)jF%yYar93w~I}XVsdRGw5UaJ)OWdi~vtw~Mg
zLqqA(pRnJA5hWF$W!INC!zUd(_E})v8H2ULMRx4r)j&HVN(f->9*L+z<Tl{dqBMx9
z)qHhAL&#tn<Esx_QyfSXR-a|Tsq>)9TzWqH^bkY7h{sqoC->?HOm#t|g5wZP`pD}D
z#3FI*<qaOApl6FY2HA6H=*>M&{nBwzSZOn@J%%I&S!m!#T06(o<fJ!Px==g$QA+c~
z+8D@!NuBMA&eY9qSOurr22zgQnUM1AY~2*_n+5d|5v;5=*!f6RG~)48u};-1DJZ%e
z^&Ce%evL;WGVbIcXEL5AOR|YBd{S3dCeXw=nP;i*y4P>5BMV3r9MruW0lPX;0fJ;q
ze>SrZ^k(sE(6zI&T6zRKwV+C91=rQjXAQWubx&X%3**&g9ccPPCr^4Sln;KMX1=}}
z@B4OW#pTD)aQiUXKRO#5uyKm~QNt<*8rsEfn`)Ify)Cm}sQGT8>Xl7U6bt*4X*9<4
zq~)s(zCcY21xs7;J7wy~1kBu;z5=<U%9OeBn&-DV#t46WQRO4!4x}_d^|WOh;%ynQ
zzlJN7DHrs?woTvR;Vu&;5V?E7)=)?);jk_Tbr7rrkVD|s_ydc2f5=OY5W`;JvPRFy
zs6xQ+yUe$cVYQ!3eyuR_`98Q|j1+64l&80kr+kPzm?Vm^t9t`R<xSRoHPDqpLPpkq
zYgz%v%W^cuV&+i6#FsBHQt64o>pb!AMQeJJ|KX-ODdKP_!dcOe+5u7+RRWc{<NeAb
zDDam&<G`|i4r=TwEIBMVg2`>gl^C_YV>|<fGyQH-GEyGt6|79u9`6nfiw&(kJUS8*
z5K!lqadV4FNdc;I3_*o`%suH6hZA$plau}A>S~>&Idiuj5K|dFAlC4jn-7k~{3;u(
zkz|Erfh^;vT%hGaAdz=TNJ5fn9>-jJl6w&S&1l(4YXD<4Cj#9{SU!xG&lq>ISf>^G
zBiF}?;k%xVFCDa7h+zpBVk(>{C@6wExtyRD@t>)yzzu@>E%^5xdz0?!ks$l~(7=Qr
zd%Aa_C;+y7Q&b$Rjb#s#oCnle)t23}b8{AMouQy{gaJ~s?|ut(13-mZ@xW`oE%>>s
zIN~Zy@b<Q)eReQ+Px=cKS9BnY+S>r#gN!67MdVZ*WY>2t^I$`_@6y(6qrAVKH8YI5
zB{++Hbz`Mrt_ZPSeL`4;HyvH>L0UGg2RG|H??sVudS|mVk`O9?F7mZZa{q3MmhD~d
z6B4$&qK&e6qE@5%lYVMg_z@a1dFpqt`1{gQx(JT*$D#_7%FzqgkmPU`Ch>@g=OO6A
zxnkDpzrDA_fOed}_6Up_&|ZQ^JmiL_rzaFcP?z97v4uIRl&2DI0wis@jD9@fz}HYz
zQi4&_a#!pM4)tvKqkyyHImigRQS*?Yap`vW-AknYH|rU+$LHJ341@z=1g0Gh(y@Tw
zJD*`?XDX-R6XXTyz#vVPr}nX}3+?~y1>_;8avA+x_V{seRu5bKLb6{8Z(sdskYfc|
z$gN<D;um@3)=3`<pxFB0Gi-Bp*?Q6*s(Ckj8t1RHDLpS^nv4<+V4R?)K<WQM7!w-{
zDqX``6@x4!Z^&}AH|jD0`qeReA50%<-_r`Yygr6py3IDHb_K}tewH0?M<=JE3WPrE
z`3QbjguW_GoQ1jAYB&XKxS>;6^8NFxku*>APk~w62iR!^qEv8!ua5p)Uq9aXlBxP2
z5kw|gv{<l^)PAmsYupxO!%>)IgEb)#<Af3uI$q_2e4C0Lq<Pi|(nXWVTah4dUfzX)
z6R2$LYTkak{T$|#pb~_Y$56&wZhR2nF-0YCBjP@{%aYmwl!(o;O4myVa$#r2?JHQr
zJj&H-ZI&k&b_N@-M-l=QkD%;7G-)scLN~mGnC^0kYTkx%B8e!SbO9s;J&e(AfyH@=
z`-UYkl-R&jhwHd;m2vOAnoFVs2%|}_gVV6xSOnWU-+eh?xB)lq&@WpwC8eW@A4I&i
ze19(I;+ftNK5h>SlhW4I1bOnCv9>IU`gjZ2@2*h)=FJG@Esp%Kuv<BF-><ZOWvM<g
zzw2-^g!6)0fdA1tF6dVvVK;3H3dg&m|HlAFC{=KwvLq@tRlp6Vfd4;&M?<6uXGyyr
zgx7RQzq|JK>#*@cQ481^=dHf`2k=CtS=R}FShP4jz}BeA=Dk!>R^D$^${WGN!m_fA
zV9NwA&mIOQW&_BH3=A4bmq0}UM<^mnd6*>oJamzDVqk^+oa7Ybi!H6Knv60Wzz&hc
zHEnv7zPr|bLPr^qF5=2P_MGr|XYSL&LJr;)<$o^KQPH2=!)nvUQq33c+)bjMt(#)b
z#azl^yj+;1BW*AwHlA|_*31rU^lEG4MFNNB%HG%R?jl$q0_BKB(uAe6i;KLR+%@KD
zVh)CLbf^@tRvVf}8(-`MUFSVuo#V3HPYu$@V*O_CEZOiVy-MRF$aEo<h0to-vDaPQ
z)Z`B_WdrQ9#~>BMs&_u#GCVH^QoYqX_0)$`6CVOU!6)0;SfdcIeL~8$`(4~)H3s$*
zb)d$YKRNk9d(GjdqgZA9$UQn2`==DIYvDRZj*RkAiw(ZZz$?ki&8>2rh(q-B0V}67
zD5Bs6g6Ut-*|7<X_F)*5Uvlb%ybDu685(K{Z|51|JTrU9Yhi(5URl|-bp7;@q`0I6
z4xwxJxTQ1fSF)d}`wa3Pm^7jtuH?z1oP6sBffn>qOSSVlpxXnL9elzj+s`1n`gTwt
z{>c7$1enFlzrq**1cNajV^hf#`eAc6K-1!XIWK(3!n-1_#Rl6%-{~eUe&aJ=H2W^8
zJ#C96#YltFcw4EfG4Y59Ob~{7vG!K;d0FKlgM`tB9`&l#3-wF<n>Vo98ISw+K6h|%
zFcucp#<V>^>D*dDuB63Zy0_=HieOd+24V|~sm$5X4<A0@rvLmY=&4aD8?}i$##sPb
zP5$t<L>*PfAEZXZ%*P)Yx{Y=Y9?o;pM}eL+3$&MFrE!D(3HogKUnixNwB+x|$|eqm
z*K~AsF*cgS7J+r>)Zn04RmCH<DPk2{;|?pn-_5^rPC&IkA2Cif<M?3qeo9(Dzp*F`
z&oDfPh9QPAuY=X7;XIi{JK+oq1n<9-brCIK)elISlbS)+4x+Z?nM}sfQ9fVgeYA|i
zb~{>jc6JjGxXKoim}+%kMBmR&TV3k}JBoKPZ$B>gl?pn3S6lQTBG@LNl_}6*q^o;9
z3Wp#Kv<I7xS`~r7z({6e8yhBF-7m0ZFWyQ&Zx$LUe_&ho$B#hK)_C=b9o7nHKKb(X
z>u+dEfI<Y4Rwbn<Q2nvN@FL999lGqJ<%R;xhSH$m4-6P$!oY|J?*S-Qcvb5+z!n9&
zaKzc!ADG<^hRKI|O6|2w)-cMzE+3usT7=8nk3JTPxUWTTg<%0=dYk?i$G>qvxiAZT
zF|e9{ya1^Q$nbD*o;N^!2Z}gm4N{aWVhW08cs{}IFb*`^-d<EkIN%C^)(%|^izL}v
zP|&BOraH|w<UM=FjXm4qHvsOyit_R<&zIaLan}YwyCf2+JLp8;>Rrw3dtqqiGF7z?
zT5HR%(7~RYodrr@Ze=A%3%y?X{2XU9ev2O=xKYa8b#?p6iE^JcRZOY&U$HK{YKf#|
z7;@`P_)KaaZ%TQ?+NiXX6I^{RF0LI{d;2Q4B}>u^T2weNe!<c;P#@@*8{joNy9@xG
z+ys`2zzYOcIM`7QAr&?lq0G=8cjVST+5rBpX>1tokDBV!+Z<*IGH!4}!{n@ok>OGB
z`CizTp0;+#XWVPWCttgVJ-BM_m?6oL_cnrCXJlkACZ-phBEL!{B=2Nr-zME34wWb?
zE{4)EKQAxpH-4+gU+wtGr`}S&2s*m<lQQr|eO&l*C~*k}rj=bt-u6;|-&(ttXu;kW
zQ`6g^8h}PQQGQ~XEHfFQG|cX=p7$TZ>ojWu1P6G-sHn1F#TRH{fH8ebo=GzAw%-j2
zi5V#Q+I#F>&9KL=ciKLoWpvvnAtxs$B+Rd@1Q9?HtVB2p3S%JirKF;!hA^lF9DXb;
ziy&ct$$yt<mrzX$BOP{3F5rQi7#o|v4p&*ZgbV}-_@CiAEyRFj1M`PlAQ}tK-!ReD
z)s=juRROL;f-v02y4m-C!`T1C{r5;-INjAEVETT8;2!1#o+~|?uyG9<vu;j#@7}$u
zs~du#3VDC%&!BMRA=tuVsgNCA*8cJ1;`%zNeCK&A3qAdT=tvMdd;f`pW9iu$N_SUR
zeqV@|cKhEerS-VYUwMg)hzQ4wp}Kn6U8Xn8ni(p)VSC}^*7%=$ew=b@e-veAW~QZ;
zp&a<JvJ&3b)6;YQHaa@`5hipjG%VRyGhvbOwRy`Yo*-H-3=*Pp_Z20`L4Xqv93msT
z!L*+H&gBn?+BrJ+d|_w-_X`GRprI6?$LX9fS5aXd&kdD@^(=kiJ+~worKN*>%|V~=
zAAsDxEA6ngT0HS*m?B({yg+lO{&q(jCU79T04G$0D(B<bFSE0^f@vguKZ@wI`@=Gp
zjEqtUkJfJ+-@e_2?(pgS-d;>B!PQLLRS4;uq@<c}t|!K0s4Xrt-Vc2_4aZ)?{$uEt
zfA|mth~K^Fm-s}Y5D-9bTeFaLKUNasez<)SY(0Q-!xk|Sd9QdewB4%HzUdzm?-H%%
zeYi2mJK^|)`cR*A6XFyGaV_ipp&cNaw71iNXBWQb$5-?3<)gh@=BR{~?7RPC3Dwft
zh3HTmu_VJMJcaYu4?2<nXAU?-K&EMEZf-u;<OMPGx(f9}lVDuUfAfZAmHrnU=1Vws
zKGH!##ZUjXqwFAnm`sv!T=#_vgRkD+$HnUF1t0N|TM>Wt`>WnH&D68Gvf=QsK#(s|
zP3|dHxo$@uOBFZ3q=}GKJJ)OTUO<ly^Tzo!c$h&|&ETe>PzW^+s2MGU39qfsH-lzP
z00@C92X74sw<*ORfy(UZ!GQ<Zh7pi|{pgWD+5PtZG1#2Jeg;<Dge+bne)?eoBBF|d
z0`MY!E-ovB67C<jFDCfbwaGLEA!PebQ+$aa@5;y7)Y*APfGCDw>)pF|XAy^jp^~IW
zRcY0t!4EgMwI$%iix=pGyo?MuiQapw0arUN_GxCukzv_6ZSm33sn4D<({N;0KMs8i
z7`AvEWpncw@IhZ&u>RUOXb+K;8Q=VRp)R|dH~ErVs5j}sPFMkJC|*QiUg%q9t@nQP
zCX1m<W%u|?#47*uYOwKVgZthCDL)bLg;BZ6G1o5gm}`Nu!n|C0yXPS-LkuR}#ra6M
z!nM6sVJGsB7QP=z=_dlRC~E4zp5sd_*mtt3SlmXFsJf0vfBhFPFNA=x@<(o|Bpt!J
z?7!cl2?5vu{AB<C=O=L;I_56IQ&UL>aG@81hOV}7_d5`AA*HlQzt$H+i#xh=czAeX
zf~$`gGE-2#LknJd77Uf$betE3YacPK!!%%756s?>%$Vp^tIELS4CfU1>aH)@59eBJ
z&HU$hyWaNmgA}@-6P_SSRBFO@_b5Gw!#72YS>wcYW6Z{lQqs2=)+DG#iNU_G+RE_o
zKsUGE26qBTpN7X&$#FEe382w;ZFEYp0h((y^!|XcyLt<_@H5lX*Yf*+e&JQAVxTgt
zIzX6!;=>Mh*>G`b;yix~<sE01^@+?71QS@qH&bb1bo_gLzV$H_rof?feE4wa-?wsr
zPgalHL!dAeV#Bk$&`iwj3^L|-pkvHTORIPKD%-@edObmz72szd0a`{^s~~*bi9%If
zcTZ??@k)Bs*Vp@ijShxjR8$;{>mPg%R!d+NE*V88IO(E)Z)@DZ=k-`!my3*B-=tV>
zf$^D@0|PJb9$X8Y(`%VfDS$%{U&{_?ez2eeeTJOdd#tc;nGPmqB_I;Z%i|mKgIJA-
z5(YwH1}r4>G`ir$*v{_9hyo_iK?dn6ZYO+qO9GJnD+GZ!7f}NAsUG_*iy(iCnH?X`
z2jx4|y0&eH!i|ESZUc+EOG|WrK>zOdt#-o=I&o}z#Uqf-{^L_BP&3RCcfbi+RRxD7
z9H64ba!R<tWMYbnel|9WUS2kSr(5f{z=yoDwg$MK8axK2lamv$fq9*u?1RLorxFeq
zz^M3tA0%T^|Hf(dAs;e)9#cs;l?a|=VPG8YpRzraqdh%6?Zl&^n#+@CN!zG<IERmm
z3pa|@eUJk2F2pAgFh(taQUTUp9iQyW!w+vTJ|z?Q4zgkhF}%DZ5Z!Fys{|Ez_gF}L
ze0)t!O?bG}LIms6n3&ZK*k4_eoee8o)OY4vB?84Oi>;%vx5LBbVIduVz)2OTkF!9l
z7xwdLGZl`Y<xt4l9p;)`pmFk?k}R4O8IzPzYR_XdzZ--T>)+lF02-5S-fas~C_oli
z&;cQ>s;J1uV_*FZ89K<BA6{EtCH){%V1c*A^XTUq<U)+8w)-DzYz9F3e!a4CeT44Z
z(*2}6zOBd>%lp5*00l6N>ATJ~O@K-BA9NuxRVA8MK_J-IS5HL+ks*dsApktWK^7K?
za1c2<_Jf<8b8`bcaF8o%(1%_ZaEvZY;MIh&nF}PCRcL;7UYo+KQVz0dl)zGnNb@`V
z{xUC*P8gtzbY%?|F0khqVloYH?(NxU&z_++y39NSuMBPA2{cL==sQlUq0tFD!>I6+
ziT%#OPYEPj)X}bHKy)?25Vlv*_}cMdQ5(_l=U~kf>@Io)gbpzM2ElHoOvUzm>(`DB
z%ZXAV(dJ}b#Tcm=Yj;<;EZEI(Bf6<c2~-AoL@+=GB{P5r<ty5+;4fqQG|X691M454
zyJs6_QxgUY68m44eJwY9X`E5?e0wCX6Oz(K+6ev#eO$gh6I<Kw8&p43ucHp)K2E|t
z*_b8(&NKd;1=BLSeML-sJlMVakTvbCbi*Vd)8sa3dZpTw)UkZO*_&(UZDHX!w1otF
zj^Sm`SB&>iM1dJI<4%+BKD~A3+g+Y!dPd#$Fk&?9uVZ5hn9x}C^6?1=`x5Cs80ZWg
zfmlFFO3K(c(BF^VAJ?2W>HGWs)GRx?UYH&**DaujNkEBYX!PEZNGBdDM%4$nDeU@5
z5(y3`7_w<HyG7);Axx;gHI?fAEbiq9t8IlM1=SJ6#O;PCeSYJBuqTRt_2&!lX@V9H
z=bwYF*Q&52o~j-ziJZ|x+E;DA+_v+hoX%m)GH^E#v!Mubc&?yf=j+?>D|8u=OERRA
z5E^_HU}OpNg?&TQ9|D!3e1OdwPpKp_ipT;3FIHbKyb$J9!`K2XKJZ1l1~!#Jz7LpW
zjPUGVVEL{d3ngGZ>`G5bd$E$*65mnuw9+kp(-WTQL`ZV8UcG{}@fRe&&}dS@kW)yy
z-6s9NEA5jb1xSIEV(jd#Y<(aHFgDBDvVk78LlxeUpR0O_XU1(o1(x0DV`^HEv%sSZ
z7z^VA*cy;{mdd7U3(sfOR!Lcz6=c^Wvoxj1lO3Qt!6D;MJBzVU0JJgSpdgi244Q}B
zx{8n}RS@(k$G?7AZ`^$21RA{{Abi(Wvw@~Xkx^?FLlLBchSi;=qAT&`%b&d3fBjw`
zWgtav90qm!)|T@Z>fkqbsDQPaUs8gm{yMUo#)xB8a4_oc(p*&f=ZQ^`37IHlva8fJ
zpH$LrpaPWh8~Ax)p8T8lMTK!=Dfn|kLqo?ba#L?1Ab`f|3i_Gy(b#Yiug<{pa`S=v
zc=0G$s~}{-B%#KB>n8-17C#IK>liPO08?vU2%TlMPp~2_uc88A=o}4sJ79<&D0F_#
zW@V$_1(oOaj1SPgwhRr40>PSrAKs?@2F?E!D3ie|&I6M-F*uhXY0TBrefkbo@j$$h
z;kUH3y!$jqmEXEAsR(z5ml~FDdVtOmT1A!)uc7M&{lz(O9KE@7<wIEO1Um-*cLZpL
z@$&OW;VJCg)N($?kb_o9|8jS{e#u=SGwBQXN$67FrzGwTy<ybg)(#8U^EPRN#J#tA
zFW%P*LZ|d<eRL%Z31fOj0y>5i{LhU}bAw?w*8F=XkuJlMyDwqi&7rE3f_aK@wdFLd
zYCbx`0>uX`E{iFemb16DMSj}<G|nLpN>6acRNSjT#)q}W@L({*-82;sDJoh61$aUs
zlx0m#P4H@qV!2O3{lZ~9<#_Q2tE2}9j#Nq8!F9;#SNuOcA!~M?#&@57Qkz>*F$WQR
z{RezW@!2CkpoFp?D@6P6bK9$^SY&w-UeWngBm(dM;q1NRvF_jhVHt&%NQq=*WJ{#T
zjIzp}83|>}CM!E7dnU<FlqkwBWR$Wg8Ici5_8#~1{CvLO`}cd?f8N(W*Q(RI_xT#f
z@mz=8OIAPMFKk{9@8=&K`LMjWnf~&nJt6x-2{u~N5QO+REqISipK@1>IJ-DE*WTTI
z#VOidZ|6F{vi+93;a9?#y(?EbE2KA3-A=Tc%&yMWy=kovtp7#q_>xUP?M^sTi@RC~
z?j0qOuWfB=I9Pl?YeblknqqRd-a2v=1Y%W4c-C7|#fLtA99x~sv<m-FSEsD2yI21q
z>F2GGLw*$f2N)TzY;T%RUz$BCD<>z1Dz(Lg99RhDf5IM;1<tYN>5=c;PYz}_uN}H`
zC!OZHr?O1T(>4y#6&1>ugOq2;ibCBn(qd9OQ02GmcMa$lKaLsq9mLSBv!bG^^TgP%
z8gDG;usmg}(HQzpc8q=fy3|R{$(xaJSCz%r3gA3E7#`3+Z^ET=>JBED!7Un4DF2^|
zkTkki!AIj*N06L-(32m+#QWDE8Rj@SJw2VHnuen7f`WjVnHfCyWzJBq)#0whnk>P$
z1^v-No3!U(Rmx1W!+%S)?fo4^f<AqU>AqGD{|Fv+cLE9J%X_&PgDU?gu1JB!Oy-?w
zo!F)ZIgtz|8*%(^j1l6!?Ed3ap8oMx%D4IN-`+w|<%4i2hKGffmhyA2V~&mY>MUAa
zX;sxo3wqt&6*Nt;%>iA$zSRiAhM_&~e<ErSTeVxm#EsQRdcL_-^Y<&$Kp=Tu<1Jk6
zjlC<k8YAqWYkM;9f0X~RxZgIf@<Z@xOy^#uH3yu$eBh)hL=68uS5UjNiZYwYB+2s{
zSGKjb3K)gLSV=DRf1a4_B0p6Sip0-pQac&)dt>_lOs!+?+G+f!>AsTAmqz06(8U^=
z=A%N6e(ju!8~r`!xpN+0AM1m$yxUqEya112Jskqcp*z;Ba9hG}QA%Nr4NrdU`UkRi
z@veMbo00lCoJ%T?33&h_)}u&bwSEVW*==jvp6A*=i@y&^N=p8pC*Bjam(<k71u;Z*
z{D$Y;k(@_bQCa1;k5TM5SZnBwUKeqdVfYlIc<F~4=L!1@L<e~F+NfjTylLm>cgMaQ
zEHaw_*3^=GMl*aAs~SxQT=STcG5*F%6HdV#sxx{uzI<^{Uc4|uVQpkI#FCVjR_O8^
z@b)?H)izw$%YQ_PQgH0S{%a01AvXBL)RdT22kHO&?xIPWVk|h#@vHzbQXg|ejKKMU
z2({dSJ!E8dL)D+#+U|w+zjO3~@*CEXhf#BLb7&R(cR)MN{wOj-8r1%?+S=Vmc$36!
zzbPQg!FFnL>{_KqazKD=XU-R7gE;<tUwxl8HRi#24vyX9A3(<gH9WG7!x102hB~m^
zbwi}J`t945C>9c4zP(VR+$}8Ff5_58I}3g$6mf2DV{vg#GEZp!+dYv+A8leZBmeNN
zh=!P$7-a+h-!<F~JUlipze|sO(nh8g5VWYDP!SCMguQO#W=qn2rZn42`=F915+M&Q
zF20|dx`mVmjeFm_mn4J{8l(NLCND2J+ajHSq)pHZK8-~8*Yy;sdMj4nUY)*y31VaS
zX_ZNcH!XxRx&FIl(Rz+Ii}Y|iJ1@ZPVcYj+SC4G_nF|+G<mKi2k>C{V5yE*cA(F1E
zr^o-{fryUm&p&hXH*C5o<>lE=XJMKtW>Ha|UTA_R@uLy>kwb_0<Jmq`nbxi2xOPed
zgo7w>CvaMzbD<3LLf->JHz6kJ3t|;8mn?%%aYi(Jb$=@r8JQ<L`=<;kxl5OVLoZ_*
z2GFL4#ztgO?teNuqMch%P=JY|85u|)T0PoKEwlQ&z0PGVHyV%qMBM$-@y~md;$C5q
zunA+51wBoUlV`-I(09~NS3k-NZrb5%4-O{V$UgWB4*k_ZyrKKU!$`N+qdbi~-d|&@
za1so9im<Vf-mF8d6Q&4?q5f;?4^ewVkWs;RmL4a+l1yhR2!PTq^1*`?ard6+lcBp0
z94~;M8GoD-B)_F^-Rrs<BRz}LMR3@Hfki-|upqoZqvi9l;DeXd)NUIduNHq!PcLSv
z^mI>16W>$oppo$LeQyE~?1ZR~bUC0K+kEB%<ee3Z-hDD8-Dr_fZ!xb6Tei*44hO<F
zG1*u01DI5LJ=n6W0$#lZycEDg8>7u;Hh(ezjbc0}4kT0{r;)dTS}$Z)+;JovGaX}H
zP8pS0%R_Ds)$?B*Ege~0T=n55pas#689u!mmY2tMoZPU`*ypq&9E8~1Ub8>9r@x<p
zHr?XJjlK$ZcMn;rj2kfC9=OOZB|ymhr<kT#J*_x&9}{^tGcwJ(y0lhbO;zRu!)K!w
z+tc3O)23#IEDULX?HGcwgPwkSA(!b<ov`pT`ioRMhl`mmVtMZ%znx?4T8%Hw=i~4~
z7hGG3Tn}J$nCT~DB82(&cn;Tkx=wX%{Hx*e)<u5Fl`CH`_r`N=Uj9F9Ue8b0p0^H#
zfcCuC<}u1LID`Aox1t3c7*uu1XL3;vcLNNMGkbE{OedbZn~?F7d07|baq!;6!(2Dm
zQx&xCp!&*x`t+P>?K_NP$FS^7PeAVnaH@fGGkjyoRY;55U~@s5W@^g1PWIk&b41uw
zk|x}`OAl-18Nnu1>!{T|@6EzPk3|ZfutflcR1ji6v?wd)#zL~@7WP_L1*YtYrSZk_
zB}a7XB8LsO{PlHZ-Z!$cvd~D^@16wA0*(fgB-qUE+K;~eoW*|Ad@pNnd%LL>i3U}(
zv{rc25!kqX4y;kHHty_pZ|hvx(?^EMBgbU2_8`E|$Y@IFk>qtw(zehh(eLAQ_Ms6G
zuu)jY$V>9g9wnBff+|MHo8>7N)%anpr&dl@BPPVV{g{|ce73xWro|tbDW8@ZH5W3u
zEoZ(NAK*z9)B54V*)k%Eo`+GisJax_Iq9C~a<dqnW}ApCP^~~x$h}M#Qsh#uHvZIf
zmY0)D_jxE<wY9)4c1qzlmlEDb<NK2j_b^0?3bTL?PLpn6;{Gi`N2Hl_f#U%oMuIfD
zZtVrdNkWghcgIc!Gi7Oy9#usX;YWSpTY9>wN0Zf{dcdk^Q%r)gh7Zn6xf`p(XV5rc
zpc;<vomU+D4o0f!>ROP_MFuo796S%Qd{y-6_bVtL?oE?C66EIQI57U&?@mDSvr|G(
zsCI-rDm9-3;eQ&E;+HDW%*-%VR#xhTcr1)x!QL!CfE8t7X=%XetP}y5%zI}$Rq;rj
zi>s@$5OP^m>OvmECe|uyWH^Ip3~zubTyi{&*LL&&EhJjQJn~-%RTLU=AdzX(J-hKX
zm*HVpn6_3{dtklP-V+WNM#F*q1$2?6tJaJ@{9i2K@#Dt<#FLj;Mg2K-#*Nzl{{U$c
z{onvznhc#66nqMv>wg}J&*-?s9o{qC_P9sXKB^Scg{P(tY_9F4izfN0-RyUbYWoM{
z4GQ8&_a_FjA<Wx$8tQj8y>hbT0-~C(%yK4Jn^~D6bIhpRW&E{d?NuPJ6+RoKQ2o7n
z`~ey#RN(bOlq#uF75#*~2_V;~+~W`VG0;(%zJB=d;TN0F)P#IcxdUuhj>u|j)04}L
za?IA>Or`e*ihbKOp8&>NcYUj`uQaMS(BZ=Y;RNNcC&>E(jL0^V4Sw_`c!c{Y5TJ(+
zM^{u;RRPYnFg2b0t;gbjWqPz(6Hukl*|T}t`4QjVYSOb^hhhja()M1_dQU>&O2?(^
z*MH*Crg~oNB^YdQNe+X3$Y&6-7WPKnDum3G)3-5B_UVaEx&_qU(NYMD!2MZvdsvp(
zPgC;&?yaG6*Ay>~#B2rX2zh?f!ooraCw+fIFu+^UCol78-Ii@qjOD0X08DoqgvQCM
zNvDU=yk)7S%cA_hE_Z-PD5{H@aL104cJx_jUAc1eb0oD~LdNswakNI4<WZ(!`6cih
zoxM?i@8g4`sCPU7sd@K8V1{Zy#Io%@*gp(tKWo`W6(G0%?bRzmjC&rrsi1H#ElrB1
zXYJukTYBePhZ8`cj!F6UgRHzRHEe1>RNa}c`wuS=Q`;*I&sRXf;_2bRrqGde+6>=e
zIRY+mHr5gbgZm|%H8eDYTGP|79p<-#jAB6)Rl)}kA_67i?%lfx!#^#^rcWO#B0Gub
z0L%xWN7V@RAz4>nXRd1Y7RX4w47oWJLzSKj9KpQuF#wmLwTfh${Qa9Pk+w;@9+uKI
z5C_Z)x&?Y=K$m@de2xcK!PQ|<bmP3L-haWckN0XGVhCR}he(n<v)P;y#lcAO{rf*t
zNM(^urvJEtv%*Z#r>WvGsa7%Oon&NK5}l6DMAIVui_FhbU#9~ll2ZKRB=eCYO$RxW
zOU<`8$^P`b2qvxN82yfiQ`@hhsqDj2jJs5}15Zl1z9$7!eW6|$TgpZD%K@~{?}=o7
zofi{h9feS7d&41MaTr(wBHbn$0X{qf*P{?#={@yDLNGHqDQR{)L(Q@j35E#?h!U|#
zhBoOVT35z1mjuuBegB@EoNQ(Dhiw*GgZ~3;eT-CkoP9yj&8_r;BA59`T-wk|?Q(oT
z_tLnElEwybrQ=~CrqdX78J<?#(sDuh@&)S20Nx;d85}<5=3gIe94bVJ;U;F!$5~}C
z;v74!@W}WJ^~v;rkdXV8-k1op58z=K2+v24gr0QU(n<UuG>n_>DTXuze=G#|+Haz$
znCCDgX%!Bo%Psi_N5<|S(0Z<=*zY<wBHwh@WXQzrBdQ}>Ud!m8w}G$Mzw%trad#KB
zWYKHE=qW92O%swYKYlcVE^mGW6UE|Gw`M=&3q~>9xTOb+E%M(bpHs#_G#x#CeVP4E
zqAu5+G*R`?Z*ET3-Fv(%PbQh9olNg4nUV-Uzp?&#O~wec6yu+Bm1|=VffJHtRZ3^?
zAS1z00>}_>5}BvxqnCkATtBVq&xCPmY6X60CYRqx@p#$RM&<GR*|RJO>LS_WCr<GD
zFxO|f5E*d+k2e5ROgguSp>vogbK=Aa2-z6K-Gr6TAmxs#$ZFr?hAHuYVJGSz@-!QD
zd;@z#91}Psy`1z}><(NRp84gnw(#c+icEhyLC$=c0~+^Sgod+^7Wr&cN1x=B@Z07#
zI$faudTi;>%A{ERz!r@;8v#>@VR>O^TNx4Dcb40Db)mJ8OJ(#3#0`neD-6q`r?j6R
zrfh;|AMJ@#8hjI41$r_DllaRAt5utoe~plxxb-=X>-F^yvU<y)0gKjfWY0v}_?N&6
z-f%Hw-?-!ry6C4*p8~GM*&Lmg*!nZ3LFJU;yH~lnx17A94XiW?#i2g^`#jT3<Pjg*
zcej562s)JCQMV~JvC7SF-TK^d$)K23`)Trn!(1)+I(%eeMlq}6-(Xptda-#CGSzeD
zPMP1l`iJY$aRp9e7%c30H5(dgYkB!X6$*z>d(NL4{4DXeziQ*D!Xf307p?b!g;IFr
z;!^%o+iu%<{O{c2dCqOI%7j_>Z00=}f>2QkOuetvE<av7TEwR3YRXw70+vK3ASfs;
zRA!k5xD~IoQjQ`$%^ZjL(`p<u5?;%^<dryIA8-`n%u-33O{=PscrykR96>Ub*FS7R
zU31S7NfVYff54Sf22f4eBM*!Biv`W(;?feVCaLE>U8Ua>>V%X;u{(=;SOI5kza=e8
z8YnFMZa0Gf2WL+_j!xu1K_SV9@MP*OM?M_g-vHo11ga77+)~}9$xLtg>6XTq`}NZI
zWCK{YDlg`-o#q2LsD%d4d$?BnB?)jW^+Mw-w<h|m&PSyTIPF!iYm9i&(xPH$B*pd(
zcwYsE5v3>0VFV6R>CO`dLb(buGrv-bzmG947w=*Su!z-&t*L1_Cf6&)e}c=tvA4HI
zDW0;42U@zJy(`0YoQ{+jLUNC)2D~lI09*(yCdAwic%-v9Fdpyd<B%ud;;}Qvt2atg
zkkEZG>htM8`(GNA6vHF{)yhKzN}fFn`DWo8F!Q@gkriQCilYl3S76o{fsO$ZlDm5j
z&iwoS+8uB#vyo1r@e<_HzD8;?Km>5OZLDejp6|+4b&#}rNKXG5$N5<VAi<o1Bw8?8
z$B&c=kB22E9~0&dzpqGH3%CK~S1yc71_lQB5r-OAvy~G0Q{m%khgugJCG^{2G@R1=
zl{PL0KT1mCy;d4j=n+j^MS6#Ujt)w4(e46;7Q`Y%@u7{`S^oPPy)|kL=3cyg1#fTf
z^xa59n;9K_Pg>Da7q}-<rU=6(RF}RbC7I`XS0Ei_kPmE8PgmEdBxs(MxwSHj&m7B%
z($*~9F+Y~ZAKI+UFw&nbs4%T_Q&la5PB=I?7=eH<y*<S*UL<+<Yb5AFFeYdm9Vjo^
znX7}@--uoLh^Po3^9<RcL($MAT}csxB;qi?Ek%1%P`1riOn=AlLMkEZ%f}cPI1;IG
zL{|nLw|*JUJil+QMn=2{Lw&xbqGZRkzleyCY5$*!_D@tFGmh~$w}((&K$Sg0Cu?<m
z>x`hFg40nN9s7HTr9)blmD8>mLJkseb5sbXPW04@@|t%H#(A%_;NoKr`#5PV7bOKA
zo%aheer#-P!cw?y$vcH2JnDa-MBYvh50A+yYnELjN!^b-xudU<latq)1uqA*v=RsZ
zNYBhnPJXt!m*qbJf^s?nq*>fm>ez$U8_QM72`$t<mm(f_y|@-yY@wWUhga^ZQ-#x0
zW^>uz-RU(eI9ZWWp_S8;w%2=ma|wQ&(ET(=EG1m0E-a#o+@CDya@#qc8#1SFyoT?d
zUrEWq*qPh!>vhZDw5gT&ZY?7$R$MHBW~J77W#%H;-bWYr)Hdj4-OG-RJxO!t@mEGE
zUplD`Wcs5_>97oBr;haxy%7A&={hoxk6(oXTj3J7CooVV7h+xqSP2gIjgCK2l$nq=
z&0+SR<$v|&jY=UsDFk3~iHXjRWr>DFO=aPEG8{$H96Eu_M%Gjc`7#LxI&7XEhKBuE
zkgKu}NTbgTx0Z!Ax>q+dQk?MpF66Twj<d*Fv@Zlm&}UMHKCW}vADTJgb~U~vZQca5
zS|j_@K5%bunK#zfP@VRF{R%zYeIDIygR?mp+J@32NMdMk@X$?9tuOkQ4w*!HEZmdm
zrlpM^`SpuBsH>yn=K&1Vqa)F`4hjkifS(PXN*W}l+LMuz7W0mO$Yt|INqwI3(Ys{k
zd0{mjbdu&fV$bwJET<fjJCLKs@&Mlsj+Uo)mOiN@#Un>(xY_&ztg~HRzI^fvp!I(9
zoC^pH{P-ahI+b0!cB%ZfIyMI@1LSNk^@_ZaZaGlCM0f7CH1y)gkVDD+9U>M;?8zE-
z&<T5a?cjgj4yGLQuc_I=@f*6I0cm9M=bguOo~fnFKN#ozp{^Dc2|Cu^P$8fSow8-d
zBQaMM1D&yG3Y(V{HEiGeQqLP8fbia9qW>tH1DXyYv~UDLVt75F71r9hyZ4*-q&On}
z??!0Gt5>fOCXho#$3l2{H{)PD!4?s*>mz;A=H=ZteA?_%-RM`g9%bMG*atFHH(sL;
zA#WvR_|=Tsc86BR(%c*vktR>R?DqC9jMzKObMp(^faXQnApVkf89){dE8Kp3FFVUW
zJUgseTFU<7#e-M8B-XdD?;qwQUbr4<7jU@Vqys9LQ7VLy5jvU(X>bOf3nAWJk8R;-
zu?{#L#6@~ZVNl&rUtj(W&+~kn*@&l5^CFgJ7-toxVLkXmDWn+bJ|ieB98eX#wI8`%
zMOK|JF;?Xw&HV>%$fdEzL^6AOrrrB~x2IpsM?BNlq#{9n{=wQ>OnH24aavJHQbC4X
z_Wyp4`k}^wtzVc4nB{Z-Fc+z5U=6R0nuf;m($cS)pFe*JpAflG--Ms!@a>iHwQChR
zFT{9h_F;UqziP73*;PmPx)8scEHgje^0>pBb<Ur}Wvc6u_`ZFMoGNq&hPkVB((|l#
zc|fgKx8G;4ep9clmb&7NAm`=xe4(p*udF)JquN=mKw21~)vno>#q1m9*YU)V6;Z2u
zr4q>Wu3ZBsFoI68P5mgpp~5e9HBFQtYJrd?Y_BizeD-83bE+zyPfLDQtWR0Ja6{aP
z^l~F*fJBtC3}JEnH_;Qhn{1q$@6=jYWxkc#r9j@e{JXugp&`fdS3~Fl#;c#z!D*+Q
zHXDav1630=c}EVs-?(*etIGCufcfFvbI+q9Iq`(6f6SZ3g6=IKxE|#AK1xcVGiU5D
zA+|5^4aYrRc7`4nwrx*K#@d#Pf2fp5lz&cjr)29g$K4!lQViU^q*V6H(!+x^?KeA#
z+~v!;?jPxo2mJFwPop0KN8Hg+j_n_Dj}kgg$?%gqJ0z+bghnxM^9vb<sx2R>#jS^3
z3h^7RdL=Qjav-3v6PZ@H*`aE-wYP837dvJ1zgU0}X|*#v`WSh|tDfQU+`o!Fj$8Y_
z#W956!HI(YP`Pq%A)CAV3K*04Q>JF-=1s*(SZN6SnlGR?l_m6<-iK*vGctruk)L_x
z%XOgn6<h^f#g+9Rdu{9egPwfuJIyEp$UK?``obXkX{7u{o*01e0;0q^iGPT|vF{H;
z?SplpyQp#$TL`Kl_T#uiuWE1F{wVc9#GbFORP1qiW*QJ`eh}k9Ny<6vhqeK@I-+Fi
zMgMf?!*LQ4ZsbIN3<@tp!)Y|v1e!5g+<)od+4rN%SR*{$o)`j4yOzaOM(kL&c0u;x
z4O_(@K~K6L6z86IB;tUw=#VFeIAJV1Ll8Z3HuK(45;WDAsZdqv3x!F5#XT@o7>{6X
zYg<VW4QV2b*s484`$GU3sLF|%8R(dvpss|1B!NKV$lcFkUh5FLt9BK(<*&)f{J2Y=
zJrE&mXxW4S!c2o*yZm46=NKgOIR{}m6fLBrq_144Pn_^ig8Zcam1!Mmz%29*pcf#N
za(5|sg}$P`aj?RDs3E5dy#UQ>MOhi9V<LrH7AesHPxn(&j%*_}yRY2!2NJ3f>Nh#6
zg%q~V5f)Vc&$RN25kCp2@goL~NcKY3iIN6%v0;IpI_P@zFyPE--PEf^1qE+|D91_5
zrBhH3@xAQDi)B(*_qX5cgzD(5eg9&2e(wz>+((^NUaBWEF?GwwEGFAGMa0JcfxHk{
z3T_{3^Su`wo1kg=&sVW>_d6d+s?_Ua>=e9_j$0B8p3KAl2+^nkO)MA_gW;-bLiU1_
zCt@IZHjN>((-#BVY^$K4fO3Rh`1bbfFv-{2EmJ3016;8a2mm=^Fkona+VI-?dpN8h
zrK)zB)PP7PaTy7R4#3_a@Yq~i0Egj=DA-ePh8%r|Dm@=WM!G{H2%Qcn`{37tVPVv!
zynKA<VetKZhK8Od_cc&0H#axbKHtimkLo6=g&a7rta9VRG@`B%wu(zg?E3q=s8yim
z3}7OQM*!qDS{}^8{nXlu3}?3+N(sFB^oI^b)T1&oDRUwl0rzV0A;7bzM;<+rD@2zk
z=AjIr3W8EaNJIoaiEWetcvF5PZw8)z8*d3)4XY#ycR2t3>b*CLg<DbX&opI|&U1Vy
zbeqy-#lADADV}aTNSl?JnbL2}f4H-H@dbH(63jIST_`InL%A~=o0&;Mvp9$d$ZrS$
zgSgwF>zOJ11xj(NXA&pjghwcRFbN*_(RIOekQYo}EN^HKrQlV@>%<7o;7{|2Vz011
zNdGZdr0;p-o=5dQP-2sd0B-OppW>Yrgz}<tzz{&l+63nl1TMnYrTxB94EsR?08GZD
z!j0_yp%i-hDOdoL&pTi8CvJc#=eUS9^a8bFm4XZ-dV2JHyu7dU%U!IpVjC-O53?E$
zJdvny<infUgzZm(Vk7nMY^V;wt5D)v1i%w23h<=Se?dvYHs8FwyzHTWI$)LI{ndM|
za^cdpArp-8e5(d5>Iz9Ns_hunih*j?K7S|!O`(9w*UD>Ri%mRn!DI7F%F6ED>uzoq
z)jkW;Z8AxcKbQY{;Zlzb4}Vj_2Oearzx&tXhupZE$Jnt<DX>g2`3sqeTxC@dg0I@#
zxKY~?SW_d_;)u?8d#;Wl<(U<rI#e&`SA(P-WzHdH>IE!sXh7lXNOif4WRpkfCEK;Z
z&QX40nI*3TAvhidEY&|C1?{}%y7bHMcQZ3jZf~#7krXdLKL)Ds7rly+5#xO=VJ#(+
z{fKRP378~J!t01wDS`~~>R~rsjpb}jVm>N5*Gd;2ySlNxB~C7T@?;&h_X#l<x-}qr
zj2x4OpUiNb9e4kkxxF~KQ0?R8Z1F&0yk)JEqNkx@w>8xPI%Nz2tiSRIYm18zhs&`0
zqoJ;@`=_{OY{~O()0oko`YInfJH!vcaB_omPV~Jf>%>Zni=!ub7_2wXo<99a%X1bh
zUshFh0(0unv1DG_KfkmDwzDQXyY1{c(o4|VBj{L0TYKrfKR9C(N4J+>oG85auOCiG
zpV&*la5s(2zgxUPLyis+=$&tj7nUHr<4xK+eKL&7PSY<@MGd?E?Gq99LIhUf0NxU)
z{_#J5_6A;q_!4Ik=LxzaM;h2V{W&5)8K)sV^h49`ADAbj4T$b!m9EUN?vs0VQ876^
zbQWV$Tesulwe{xT_lrVrkAP$B5if)w0`P~RZMJt~|KeyAOW@k$0SIK|*gL*_*?$?|
zthU$*&ovW@dq?ioz7=fl45LW6dIpw@PpDFTyrB)8WTd9<K-URA4w?h#dB`fn+-JH9
zO_&gAIp6it=!IFMj%Cru+$)-zfua_YUds^qG=MaNHp|Invzu*wb?)_@C2J_p>FGut
z+B2{T5qGug&cAGPuG&#wf|Ux3vO^XrVc7(^5R=q4$WF+ZJ1TJGAyT$OJHJEX^KXBW
zT3#V|nI|+jg@oW=>cQSbk+w^&5BD%Cz{nxIqQ8F`(c_;nYjE*Jdj3JIozs5X#7$i~
zFAS6#Ju&MEbpp!%#)eD339Q^uT<6n_4C2lqI8RnN_Jy=ng#|LgHqW}ymQLbLA*Z*{
z($WIzB6Jpr<t#)Lmm&R0%Cb47l>u!z;#dH5qBDEyV3NN64#3GMwOWQ8#pzwwvB*Fu
zT1*-|Kznt!+IJhmz4RnhF_l>EfPSs}->K(bO;tNP_ZIJlmnY1nCZvX2-dZrADb;&p
z+;e^LBjyagdGiKsCA3L6<!ALn=|^|XPxL|*+8lIfX%L?{{^Zi7-Izvg$@<0UOeb5f
zMI4k8q0GvAS&}Yz3K?uzcRee!>E$0>YX9=Z2doRqYJY}*b1ok_qV4!kUJ8G<`{I)z
z$m%kewqS9%cbvH3hI}q)dB3%JGWvri<dTaKf#%^1qCL%dBe=&u2JbrW{re|GQEl&$
z9-6M1t6@@qFowFJ8IwOC^RxtWikd5|PAgC2<Iqset=2&_LshPSmLH#YW>Le)1DLLG
zav7rMfn)T8_xg4fkOYa(aYezrEr|k59bxC9sgEXlfi+d;--Ro&3L46NPf$xC>|!j6
z<swulwJ1xKXLU|+Eb<+_bhu8osW|xkLT62Q+(uD32Xdfe56SVHqZ|HsUmqLZe)=1W
zrLjz`z;uwMDaF1`k;%7dLxty?mlj<<CcnoJdQ3B%|9K%Bg^vFHaI*BWGU)%jQ2t1Q
zIoP{bnUPV#%PSOvJ>H)s|1p3--p-Q4EM4@xR*<d@9p-|S4HBdaZqw)F=xqblQh?T{
z3Yy-)y$mluFC%qY0^}4jkxReZ_d2OBx;r_6Rrvuf;YGoHOhtH(tctuG^TprlNPN+&
zx?=~Mu(x-mxXbUTbK%j^!)pt-a1DAbO?84IL;4YFq!VXJIg-^Tz}|oQq%`a9!uxN0
zywqny$GdyAARSnlv=Ve9ebqh{qttB`?uCl6+ds-(8H5G1#<8b7CWJwfQ;rl|{r+8*
zVP0T%Q#f_KGkmvEi5~UAJ!chZsLKw~k?cJp+<1$A_xnN<2_$J{XqCH!;pV~YQ*@As
z*0i}gKl1Sfpvi}kgswkZxwi-uJ~MeTD`D_aF{qEbs6k+%hAjNvuifdp(<##Tq15<f
zPAbU_RR)HHTosJBe2%=NboOHDUBBKi1yt6m<HNc3>^&GcyRd+~<SW*?=k^5xaPD~W
zE(m4m$;=KX3c;%*w<mW!lq<ita|MIAfCwS5Mzho90txA^3l}PTUK(LYfO(w0gTp_B
zi34Pd&`H5J*<JY08wPiJk>_XhX(oO5LjWtCx~?g&%6};RptI3R``x?DP;5g~HfqWt
zFG3)HZ{Exp5eNdU{Qf<aeic;|_no&{?{RFQAcUDTJ12)STQ^@v<e7~3e#~f@7+-FG
z&nz`Mf@=U((Y*@i)!97!Gn5I*kB&eQ?Q_-G;G`-`UFd~d2{!_ohRv%nhsJ4Ny0F?6
z6vawEDHu;J^tjLw#l{)uW$?2Yg`QGY5TTQFXl7TuB1^1lDBH)Gr}|I$MNq+Q_Z_Mu
zN4Wn6dVRRHTS<IXr>wjj7nQ~vfow_xDxl!7=U642M-ZNwwROl8p)~%FdE->nxfZl1
z_||X`mcX+q$hrl#WZ%a%DBqg~5w0(kOg-$z=$GBiJT&@?f`ZlE)WM{ur&P<*lFnEu
z<Cd0|OJ`2)xxE}MjJJ)ImA?gBU;NW^#o&!49Sx1L2IBWwd7>N>+qKZSko!Vd%z(o%
zA9Ft*(wEc^p}f@>TU(to3#PmZXS|ivD9#HcwCm^O>9(#lJY={Hkb0;iTQOW`pl0Vi
zGGF0Ba#qf)LzfzTGl50O*_IL_;&6Hqr<Iv1h>uM5?>^Ul$hK9c!*;Kq?9m%MH9Uax
zeI?g0iuZ}6&)kPVPB*vgY?4@dbg@mW#n+GvKVz{vYg%0`If5&odYWkjS+^(w5X#bW
ze<niz13nhrO1+TW&4@9TB*7=**x0f=je|yaFFTgn(LH&`Kra&z%lu(rU?5$s;Jzm1
zVM;QkXja;+!#p$mv<6x4Dk|85q?sukx6;hl|JFQ=j>=+7{&OMW`0IZyl_$UN_xg8+
zdhrg-<x`y~kuP|A{M%e}R=RUWz(92I>xZDfVP}c;)i;*;aI?>i1Q+5UYGhjB)2P?p
zMPz<~m?etC#QXHiD=DSup@cSPhwEb42M#jc=c}*sWjyEd`?lvJDZdY@QjEvx=ngwv
zvf5n#lUJULiyn!I$ztAcTHrnxKR*V^?-$UIOB3)*x?%jv<J5(fsc!N1{DDCr&YHRW
zFhKJ2lfk5(<99wgtBIBJD1SMc74UtZ-h&N=`ks%(Z+lG_Yy-}ztgB~leKpL}KEkbK
z{{F5%4*&8ONn);#;#8f-K0$UDiUs(o(|e8b@Ts4Vx@farn$)oH2;@(U>nQorml(O}
zLWAnJHg>c`-6$59Q>pEDrP6Yn-kDvy3bTD$l8Syc`gtPr>KI69W2-W^zmNLt%A9Di
zhF`F4{ZKsTur74^bWv&VK+lu^#R5t-I#Tqb?`W_r>Z_U5s8?mERQ^)%=l%5l{ZrfT
z8jzdAxfv0wX-q~mo5oB<Y$asfbt{qINQb25l_{a{*LrK8iaAP>K7)yL3tKDBC{y9r
zD)T4#l}LjmRhM3kqcFJ1$P}f|!GDP2{wvHtJugzS%|)%dCd#d#hItLkb9<)L&@0o_
zni>-Xx}Y0h+}L;UV4~;4@NhtbK)?E=b~ZJuekspGXI^6WBLRPlM?B<iNRy~&X(#{w
z1qLh%=siWqBBuN|li%Z&$=o!w?=7vZCK?&^jut%Nx%D$IErDJ5G~UELQ09!-k5r+t
zZ$%~w3J>1$VyFZ_Bt5+(T%L1(3Ue`7!DhHNZSe=XncmFHEA5$$AcwAoRsFp+{ir2%
zV*pF)R_nIT@@UfOqU`gNHJZ5*plFM0QS}3xE`wj7%-P{bss5$?^uivnnkjC%jeN;B
zXQbZDI`K^0O3l4pos5X+r=3NYyv5z=iQKd!=)81R7NJ|j*b&Fux0A%(zrvefYxft1
zUl4c4j<J`Gz4s>pm8&5jz?M7<og<gweO}oq8>#KpD#%z6fXl|DL>=o!k&Gl7AXzpq
z42q8Bs3do26u=_kfk<YT1q5s;(Zw2?+uQT2g0FJgTn!WDSLZeWb4g8}nVD%WZGZ?*
z4yl?gw-B~duI*=Twro!324j4(?#N8##IU+A%>PplH9jQ@>}+rR<0*2#b&Ta>Gwv{`
zoix{@r|%#w&E4I7%Yu-2($k|;u2GoBqxt-(b%z6jLqgboz*+p~rQO1ZJxmJYasH@y
zuvv`5s_L%z>YEA_=1x&68}k{yYwIt2ZShVio?ByITxt(WX*oafx$!TuSqi7-1Qx%t
zEIrB?m;b~4NjGlKE+T0IDsulg6p4;-KDekNV6Dp^a5LOoKdV;m2pDg^mXotWn!YTo
zB(6tO_%yO!UC?+Jhb^Qy+G!L*=sK*KE5VM%QQ=T~gF3@iOHU6OQg0VY(y85zVuyS;
zjHoA3$pO~`o2ou$*Ua&Zr1&>Py?Mu<tHS%tmIo2D@%|t(%1!5ohI>MfD;YLujvUy!
zFJ8vK?O!aE*!A1RU9Ua0kggDl#gH^V$v%V<`Ap5s<Q$0OnK<n}vqGV}1eZ+cfh`HA
z(OXlUH9L|JY0$Wy8+PDS?u_)K-ut?LfP;ug`sPJuQVk_pBWPA=7}>w8_@Y0}Q)QRT
zUe4i|^0Zg#|HAFMRlj7lUL$GNn(BP}m2P44%X*{UEV(f1^;E!35a&v9bC&~0N6Gg!
zv2_eG7o|tAxG70@oA7)u54t6v6Vwv_`$<@@y_FS<I2#h8eAXK(-eY*lsS0`b$TrCA
z8R)lnj3j<-xfQ>;OEPrHV`s<z9Y@4W>C$B`A|fJ(2h!wO-2l}Q5do`>gn3gN3TNeG
z&mo+{l8U>K8S)rs1-Q3D+@|Z!=g*z%hm&Mw5wk(3?uK55T%dKTPr&fqvjcJbMg~Hv
z5G}aw5t~}?Jr9pnZf<Yjo|Ud2MiERq7UlhGnn(Cb#JRkbOx40Zzl7vxWA#^LTvxtY
z`X<z}uBzF~me$rIQ&aSXTQIt6Tz7GDnqOE@Hhl}fu!-+^V;}Bx1NXYtpc+PONur%P
z?8vw~YxD7P=LRm`cp@z6Igg^Vs58f>6O|%bDabUm!XzHPD1QCA6LmghQT!iyj;Z}v
z!g)B1EebGTWo~YbaHo`;;9p?rfd7YDQ3Ms|>SV6GH2^$Mw40J!F0&xm*<$Q)O_)>@
z6AbtNIzN7tACH;kszbkHQ05f>ayIFR#<f`aNV?PWxPx)jTi97tV0?B?mNDR%EK4p1
z_CFB6XF{9$>}Y&@iSj4pe2g453IEfX>ppKpD`0F`+SS`DDkP+Fa|g;s0zg1d&&>zS
zf=Sr&UQE3M=U}B$0_)QI#{-FfPW)#-(I3KoGC+)Q=;iYRW*-8+u`NvI2ExKKkf(Y1
z*!K2D8E|nBR6hN*yl>GULViMh_3Bsr0SqeKTq_4bpmdix=Yk~BeXjL!aM0NOks+=?
z-*v0umgJ%F=3n0`+|v|et2?yU##_^LA?(4t#&hRJ<7{z>4AJuHsnw`*olqLS%Fz_h
z)4GSrn~jU#h&$-UU?mfp9pq{J#X2Go$e$CgIJocJ0ay)D5ud^0>&#5&JPiw+PMi$S
zhWK4SK<5QFfHxw~n%%qKSkdIwAK^FD8pqYu1vkvZmut)eM|kxVJ_TYSTvZ%-OXFb7
zp6@AKE4`wIwb0SPeBpxOF5#2oez=t?E1xJjIXgOP38_d+OY7<B;iijyBt3XngP|++
zWG-PsB}{J=G^qt^SiX?l#ZY=_n8)_%f}iW)**_&GCr8L@0F0vaNYMzCOGiV4m~lnd
ziEO`tZi_+8TUD^mEuS>0^f0xzkFNbe)Q}=Nc0r=*?_UgRR53RW+)>}=VM%=3AlEo(
zU;n<XDMMusyUqN<-l(J1<vX44Rz`bGZ{12wc-bXIu3?O%2bDr8@?xE1>u<?CCOYQi
zpPV21D9w?$EE;iOf{OT96UIEPQFNv7vnjEfWc-~kRjn4gb?kC85w(8@`~Le`U&oX=
zE^vPOG-dK#0Jo0P{f{Z4`Ay|4R76DPvZS(jJw(l(YaRcv@aE677oB(dh5#i!U+$)W
zbD{V(MAA+%ih-YYMlu2l!YEnrAMOe(a`3apo}?lsnzcuE>$&z6JCs7_f_pFB$prWf
zUYW4jd#Mi{0`sz;lQUN<)j5S4IU>Mh;kmd2J_G1wUY5-D>urE+oyJ?BBT<BhkUbWc
zW;4iPTU%R0Bcr7s(0)}_R)#;k(%-MdExoLfrC=&wc6sV^0(lS-Q6&S!G5W7>+SM+j
z9)MOuTJdx<CmsNowkBZaUk|N^stMIJ)Pntpi7XkzafCj9XZ;V?$xHiGb6Rn3HrCez
zYtdIMLb;BMq8eZ;{P3TC;QpJuyNd)m1?~^pVP6`8VTTyVQluGs@%WtMJle`;2P>iR
zuUk+|SOb%I&?{;2sTTn;Uz5*FAcbhDaQ|7%XvQasiHQO9zr3p$6AY)FN1sK#!q!;f
zX&NEC-Mj8)eQz94lCVaqXG+HA?l~~6n}&!k3GJ=^nw{&Ls{&wI(z-}-&#c2rr(_Ky
zo(s%cd5^{lYnI)AxB0?OLYU$`ct1`BT17&q0E`<09mf9E9K?vWmrzFHc+nlaUl22W
zOtJLSwPT|8n<jo+@xL)vN<437=KE{i-g(GOaE9l44bTz^(fd<9x_SNjY!B1nr&s0!
z)&%~E-J8Br8)$>L)IEfPTXHE6!Us^gXjzmKTyVN${9GEW_Ia<7ll2rl2Wn}=aGbxh
zm;_1|<+!k2pUNc>hrtX?grZ37C^8F$rp|l$`!l)TVM2J{oh5#?_lU_UAM)D??1Q_b
z4!5TFXwxD6_4JE=%E}slGGkn$Ai8J;QU2*YT)#0>`iFURMjDwWs#c8uA=^@sxa;4o
zwRsaLB!N(}e<)UC=|$OrzONQeQn*W-3;tqbTcpDT6D?`cs*qLbBVH;kdb8zQo@Oq0
zkwpXRnOna3^;LcdkkEf&u%9#6JLU|#f^ufpy1AQ(Gv>x3Gp@#K<%!0#xJy=R<0)1`
z%p2zieL*^0MuAPJ=Z!vNkY|<wp1;b&D@Xo8LPW&Z;#zRg8VnXRlB+*2=H;M%)n0A@
zr?V(J3Q^HiCp>~poxsJpiK3#(gWCAl^bm+bcj81k5f_I5o#*!`is*FKlPA$(uT7-+
zL3fBOB2`?)m?ClARSSR{aJm&#?4kRPZ7#Gvxb@}Hui@eLiWM&<+m_#J!=WTJ%NzoI
zaK<_Gz41g!#@r>vAecI~2y1=yhAmF>hKQ{jUmursNZNi=a}B^vi>rn=c}cxltSL^2
zSzTwhQrxL0TCGa`GU-FU;yi3@F8%KWV9;9JIPbMwP*LFpYSe{q-VLsSZ*a@T=wJIT
z4KM<;^b$^~XP|{aqk-`8#5dr0u1Ykjo~?m4O-K-xKFV7Jge{2<sQ?<k3Y|WPD*Qn)
zIPe_UX!IjYzN>SDXf~YbIw}Jh#AK9BcZ(c1HEn?pLLbIMt6-D^jLZTp!%}Ws5%jy!
zC(O4nffwO%6<{!Uib~{$;3Y!uYwYWY7B9vCXms`uDvIo>Y4qgtT5i?EM90FM$<vMI
zlLwoc1katTZ)wrmrE$qvaK4y@iuIym(H~?QUXIx0E4uu|KwlrDEJjisa+Fxqr{vST
z=N(}T&91^UI%-aUGf+Ul|IEFnk9I1kO7T5>mhyNuOu{hE*Rk7D$1+@5SlHP37uXR=
z&EQm<dnH8@uos$CB=m@jiCvP-q4wha^Fgk+vAJ3CZ>}1Pt|x#<W1$!^5Y{G~eXkK4
zLe0SZ*?zF{^zd_(s_FW#a}@t3WcBDULQ(s=Rf>tW_e9a{VO5Qe0-YDnr)k2j6)Vj@
ziJ#_ll~r`N?uS>>027okzU6y~O(LeUE0Q@tO$b^ip^Yb9D{SvKjmFrtsUsgxPC~rs
zmU+nsqnW30j4MIRx;BrPQoO*tluJ6QzL%x8-l&C)=^~!syXV4@mb9JB3-MW;GQIu%
zh9l4NZA`fuO07B#b_vm_w&tRw@I+3~r(2%C)`Advg`bQYSR*Q#iah=NlxfD)o;#YF
zzW_WjFysdfZ4*;8>n>^Zyebyb9WhoYPm^93gWzw|@XhaAOJq4Gh&+Ead_fiypg}Y*
zeo+*N<z`-DR}AEuc7|643dFVf&lH%H+$Dl8=p}$z>uPEo_FH3#v=Fdq(X=!4UOq}r
zqf|YC+Ll917Zrd><?I!^v?)!Ig8Qf{c=cYj{n*g2od1On8|8!PtsEE2Z~E@<7%kk3
z#vGlbo`HeVGffQ+^qM%946DS>QYrDidHot_e;GfO(v1slyvsjZBPG}M?4l`i?d_15
z#I~QiDD=rV!1Gt57s;B0NAp`j?XoZ2^tPcEK&J7`-@m`cb^1FxWM#(Rvt+ih2A;!U
zk$IyM^V&p#Em~%>(d-*HSPSV-E<IE4U=~tPQ=2|^=fI9;<R?9g|HT5bl`QfC(O7GS
zy@=t%Jfl?e$TH^|cXxp*->s0t%lcUg!;qsxlCLFUt^SsI?}MEkm7AufFR$I9?Bz_p
zqL6dTa}T?iZnhGwfKmD3LPs$5ew%ZR3>#WDkxCsVozEsD#+%ZA9N6=n5=^bDttE=j
z_1K^xufks3wHB$MAo)b3w?5}T*HzSBTu$MAi4^#`p0mlc<A>cVd5*>HcFl6u4+>B@
zDX)EqDQ%zk6{2G-s!twsC96or!G{GkQ}crhmk)?f1u5J=e1vU3lI`^MlGvB@k0=P>
za!X9Z9C5YQoLIJ#-=+C>57z8pRPS!WObuo&+#E23yZq_VPW|(6ZTNNTCCpKjapzB?
zzNXDnb7#q5^3x~o<<d~dDPp7ok)svXYbx|7Hg44GsuHF*Bj#AbVQ^C>P*VFEK$~_%
zkmFSeTXnGINoG4GdB3%8;W4Rxya{)uGKi|~Wi%;@@v33smvl3h0>~B`!q*6g!<9#i
z@!OTni~Y~Fl_@6n9^GEVd<`tb-;pu5^-68^Mc>At3!!mvRBVPJY!hnK=XWd~L8;2~
z-tTMYf>lV4Ogyjbk@}*{WV!p2+c~qZMWWUw`FWo6P&Zh}{zAAAM3Pv2O&3{N<C&g~
zcC!{f{P{ELo#vkXqb2FpHy1w#RvJXjpw8ERcY7GsI}%PVaw{V_K>}wZm`QIR6AzEL
zKONZ%C}h&==W(Z0tC$p<Q-oc@5$5RR#0^D>#(<Jsvba0cw|1_4)C9}LI+}f)e~SQU
zhJ03hfFN{TJf<AaUE=sF2NW@&9I?EmqS8_&YyIZM$NRY6F<$VvJ^f7p^^MM3dn0gZ
z|7vzVw71X2s!IA+NJ6B^E+uOFO%K6h2xiAA=({#nkBp3W6^YRLe?*G`3RIePEH~{y
z4DUL2I)+e9<ri|4I1GVDaGJUb>BVnc>L_yx*ou^Ki@pIf%_@H%acm-k-&ThHok0tZ
z02N!P?NL5$tT4@vCH`XX=O`(KKIS#}_6xR{HcLxehQY98tF02=t8${e{$B>F<nH+F
zr~gj`=9Omua<W6@XDFsv+E@pyf~+~>4r(~6o*a8HfgsIb64zNN>u<5Om|Pg`cwA)v
z^Br+&vS=CHkBB9l!wUo9&CALvTiXD26`M~py0A68E2FpeRY+n3*;5UKhT459wLToe
zdgUPSX*Y!=lwFH}MB&Zrq$y283_%M>P(SyoL>Ma&oHWsYmtDKiph9SaDP6I_dnZ;V
zJ2~5z6mQB9-n*wNI;hyVcHfP^D<(i=tgZXrIsQ6!CPz8Qt3ndo0Eg-HuSluMZ$)*8
zKY?#$zWp-O%0DScjNkY4KoqSXvsk_9REx(vYj?k@=?nN%iy`0D;YM78b~kR!e>`f2
z6gCrN@bl>ML$7tJUA}U~Sd}6OgpR_wsmw@8OiqaXxxO}$nf-QU&`b47sbcidBpNk9
zT%D?tYi}^f8zt>?)wC7bpEcQjw8<_iflB?R`W@-~R5?>lB28+$%kvpX=+i?a*0|VZ
zICC$kJE98ePMcqf-&eoc%1{v#2J5nM%>g%;mKRz6FM0Iey|7a%r1lRto0Xb67D!EI
zA-#3%-*MR+!`EifS>5I<Vf>zK)eo?C(9NyKYEsE(B{(ExePd7gyK~%=GCkZz<&+UL
z|BNS!Yw=pYVB1%YB*~S$dNn)hY@p%o<CD#u?RO(ZDIgYpCHqE>a!H5Y1%@i`H4P1u
zjLY-6rK<Y3CNGa<uWR`Z04I#Kwx%=@+}_@vd#M_0FuxI#%8@J>-1#|w?qPSAJAak&
zsM1ZJqc#cK@v``qpJu%cpD_{d*luV~mnHwwE^zQU(@Ol#K&+ZvV>HERu9%Ndk=hoM
zg72e8mwroHS27yus;jqKO;cKBZR9`a+5NniNyGW+`mIFadpjW(k3AmFKX-O>yLzrj
z@%Y$_(U#=ZG8XFQIMElaKbAHxO;Ny^bF0!d!QC-KT#(C3C6G1wa}fvkLaq$acM25$
zIlhm2eZCaz4N~flp0PGlB2EueEGLuY(#R>ze^-`Od+f!v30ndFq>nm(g;*me_sA~g
z@*kV(cuGt}6vc=8Tz*|%wnUz9`&ph!h^ABJv-v`4x+li|YC=}e%VSQVw&iEIVar=|
zwtJ6-g;jB*xrs%8iK%NL)z)+7F&TVDDn3Jfo#}VC_p=V85G}<I*%n=s>@j(X4C)=y
zz3~NCKUF~69##7^I@)chsd$Zg^vac?dBHOC-zIXx?Z*}9Nr@~U=1z3l^xh~m9Gfv_
z&9e#0F{d}@CY80+t&LpDQwl7%>Wck5I1)n<=EnX(FxV(B@x9_Nr`Nld9=C=+qiLup
z3i4G<7A7ZZV^+K~wZ<hBrS(m@S-43H6}oVs-%x@YUnkd2es7hdTgfvz_kd(m`ohlz
zf0W7<6?KIi<>c7h6?B_l3Z8C`s<_PYh)6Mz=<c-Ki^=R!CDL-MnB;TpozJ>>BA&m^
zWEQKwh^I>B-^IPNy~q?>eC<$!c#_~lo0$2RSr?Kv&4C^Px61PUj3DW_X_%j<UKAE4
z#RYjKogyb{^3_P%edgYsx;w<f;&RNSHzp;2|8crbDYagcFHJ{Fo7!S7wK<zfTFb4?
zov&)4=exc7s}eJuI3J(m<t;!o(>fmtyyXvjNNE19p^t!k#;T_vFNPj_`gebsO=Sb_
z4$x+o6qC_ldwIn1sXdj}ps62t31*W1JOMz^C6)bYqOsAwV?<UvdeAyv9sPCtN2%t}
zDd~)4wZFF@KoPOl(!F;4`0<!20uK5)aR-K~GwdR0&X#&jHq5WXafpL?bu7_BsekK>
zMs+8L>XUgK)0FVmcad^k_;i$rsQ%ZC@d)D)itdY-Xe-4Z-z7Eo!w-@`Vk~vyzHa{@
zpaw>>eqGnpp(V73t_H$}XL>~_SIsc$C`(1us$&!gwe|~xt--1dp)Ue81(rPp^4Ut-
z)$7(VTJ+iS98tq4)UptJSN;{L9NkX<J_D@jG7U>bm?sT~N`ZQ&4tkZI0(~A$c*oK9
z)1#7%83sYEIPu}bhhh%ox4^bSFYfjj8=)iq!2?Z%A0VBIIdU|&%czn$IiD`eoIbu>
zPG7k3LG?9KS>_*r<~(sVjpb_X9ZTPg-KWYShG~lKC}Hy@;q%QJ1F{gaf@vgTmTkF!
zOu%=bL=i!yz?lgGbb4fjcTJ6Y93%!#=M5+vTheNzFQLx612g8#jD2UW-$H{(T=@|6
ziPanSaQ|J*Rasky?+>o&DDAEB6bDQnLC+|0`zH~C^8v;*)kBGhb#joFh-fxKflFY9
z*rU07QA23IQ2f60=CB@jwX}rSy}j$64?=NXEwuZjylZ0w2V&3M%ZHI^4e&@VY-{SJ
zRV>HD_-~r4Zdf{3I<9{&w!pEdo1<c7g*^6a(2=4)<E#T=YE<UbjYxG1LQ-+qlL9(b
z7ne7SuPobZoyIPV7D2oUv_e~G0#_Ksj(w16BRI?DcbjnzuYPe5CSBu`W6l$hDsy43
zv8tj+i7{4Dd0EcPaoiseC;;FZ2R4sR!8b&_?cKYVeWp!dNm>McjmwuCfjx*?s+ojU
z^aS5|ob+`M(>|E4;>38fLkKRFBHhcIZ_vUiO;2=H)$CLY49bpOw6412>iVD!a=7wQ
z4YD@wy#2llUxWub1*+*%TI%;6X(8l0RW^V&$|nJsrTsZ%{XnBW`j)Yww|3xqa$|@w
z1P)l(znURc_w-&clJ$H%Z`q`|w3Kv4z1RV-?TdfnKig~KxAFJw5U{Ym40&ghp~U%7
z)V^uH>tSLrsL0)?MJL!>IE4Bwx1>ZHM$|5KMsc^M_&;f?QR}pKq0sqch(1drT8#ve
zvGGPmMi$qxD5#eK_p;Z;2)aJ_{bR*vU>eeZJIprig;dXD@~EnV@kY9#G)H-$F{p%O
z^U;*d5*uBl>d4d#bao<n$OcaVtFwG<I3*s{CC=U-w&|%>sht9?yc>{fcO5}ux|Jse
z7X$_dQeR^bc5-%(^+%nd{Jz3-A%UL?xa}!?0L2E>g0j#R0S)&8)<%fKJ$6iSQu>6@
zrxx4D`1tIKii+*U;(H!^cN4Oo%bp6}Lf4g7ci!pTGlw5RqZJIEnlMg$@9R^dhuYQ*
z)4`#%K|{?yY2T96u5=&4$>?>La?^aDNNil=ItaBV;HTw|YyB2CtyR*tufU!yYS-6Q
z<~;FkZ2S%cv)-9(%Id&3qpo)R&BQEWU32reAPFO7fZ(Iix0SdUfC1$tp4P%Zv1|0*
z!^IXmWlWC%g8?}MJMioGZx^V8P+nD^o|eCS89<#PV`*_QKUgYaOTFjZK^T77u^$;#
z=kj8S2=dBGk0K<PVKl&c-9f1+QC~m=i15fRm4bGbJ-&L!cjl?gMer0XiiNOM0A}p3
z@@fTG<+tTp$kqY85S7CvU}sJfU$KAhB0Ib384e6?>6}~FufKnx7WHs$zULlb6j5U?
z;SxsfChrbDD&(olhE@3JYtRIRgzy`#cD}wPsbLJy%QM5WV*4(zr`@~Oe#{TJJ9iWO
ztPS<2G_<g66O)rC@ur68$m{A(!h-zrz)>C@7eG<8%qcNaZOxn7@t;!6Yl7zffrOeG
zyR-yHD^4pOQ%>M*9s73{JBeMTxpx@O796CYP**+p1XEsgO|Bp=w*+Qwu@43ML)?lF
zj*3|DQ+P~$53>%{V2KMAEA?8j#}Nb8vkkkq`Jv*{<LVu=T~<(WvkB;aHI#Ovb*~JG
z4w!CgXt=a}O*a%$k33@`EyaWLW%6QOCQ$(`ECa-*gOx>`^KcCIcQ2)hU;g~|GP1k@
zQkVaWf^?W2EqS89)xYV@9bG1RA@e9i&sQD*L3m1v0RBp$%p}y=*abAPqdMRE`&A@U
zp4WMc$t`p2(1eC^(vat~?ekSKJfZwXqNHm!CuZdx|Nfk+x8`&o6|H%hu0-Xbr~R~J
zNGfZtJ3pUrv@Bry+4T?JK;m^nB_z^5U2LYidexKG{J`W9az;i1vHMuUt5hTVzBTbC
z4uG-Kjw3<G&)@hQqM?UiUU%?K(4i6(irm`UHL|D3?t7$>gQ7RC4u2RyP$D$!?VTI^
zUn~H5d3WICt~j!rYtx*<+!aZN8q}&c1LFEuS;U9?WzD&d92wu<E`+}4Fta%2fdeJ4
zGb>{y%HEyx^xCNO7|u6mV_^6r8~iR_>t?h)Q+gI_FXRvilLZdlQkPi}*}71(-6ud|
zP2Ux*_wA|77QjeIDk?D9%K8_6S=Y&{@`yq~H}o}4N`QdHYZr3SA2|XM`YN~;b|wN>
z%?~M|mjMWF^C=4H1P+smq~wnY%!liJ^UObe=WWs&6+v<z)#1Z8EI#(eHQA2_^9eY3
zM)Ne~^!MLKejU#*A=8(J=PeFV3O!uhyjlgrGQMBLVnbW@LThinc0QoOl%QC`xdy}<
zr^qo$@1(wB=L!CSZ{R7>04>8dTUrWGYTJ1+FOCY_lqUqLiXqMY25OWXpA!q)BvQ}X
zJ<rb0CN|g9pm`7xf!tWNH(%=OgXWoqSk_FYaly{ln9g&G6X`1>$hO8$8jp0?+yqi?
zTAn)|cO(&A7dGQv>tbqllIh=q<B#<g0w=Y_vyX)(eSG|;w`rux*TzPq<f|)^EXjRG
z-k0Cb`^714A)&s(!Lws$uwJdpuAVYckKO&6RjP)_%<Li#+O36_p@`hvx2dVF2IWeP
zqD~iJ{qXny01_vbB3eR$9*k9MUth;3Zi$-Ptu6m<Fn20#FkI%mxc#8`m7p%sCMVm0
zW~P89J@vk_N3W4CXZzMx+~fkw8BHl+DZd#Tn172ho2HOyly%nf)~(oTE2{V6jqVB3
z37qLoY!SrFvC)xV=Lh$Zd+>G3Dl0pe<a{}Ltcg2oKIcRz_3`6y+eY!|9?;a>F5Fej
zKn(Ken1ZDA=SIsl1?X$(k53DH^j?d4L8R~R?P+RjYi@1L9W3*bm4r}M5)lbK_D&jK
z5GG=#8JYQubD8L=`hV%Fwo`<UA|kRp>`x%5h=lJ;lN0_<|55vrKd*q87za2wVPUl0
zLdu3;C1)DK8t{sBbaX;O`lI$ku93<@MXY~KO%1UKHMnVBym*+Gr<m|=xFo9w;7U|f
z8??3GfBewb*FS}i^*Bl%Bz<Ig-SxVqrN>}pS@^@(9bWnx`FB*$+Sq*7EhGk~XlwTZ
z1ryQc1X!J>=UHb@SqZw&9M=b17%P&vba3z9L_5OOGMfh0OkYDqB^*CFFz`jpQnOA|
zsodpT{;!#K5fK$1gXD=FObUK-PU%^sSCjeq?Zl}v0f_*0-PEMOev<GTVA>?G^Q#Wv
zcX_#lg<EQCFXR!_^`8<85q{^Yr4{Fk;d6FC-gC0P0q_BKiGiPMSsbT~D@Q^0{1O>_
z=je<$M<wf~(xxN-*N3sPc64>IwW|Y`q`Tmu0Pct;qTFe$<CW>f_`^J)TVpvRxq-K2
zHNZ2`7`Y>){rdm&31H*%#8ohW?#X%Q=ScUZxC}AP4b;v;YDgmo8uP}c_ru5R_m`P`
z3XV|22-5v}!t3kTwSj)6yx@A2>G1+4b08yyyfM`fXWjYpV+`=2?`)IcUkaAjrsC83
zT0@z9*|u!^-&xh)iv|wG1GpB92F-HvsqYEAj(g-$o7jd(lbeeo5&jDV9~qg()!xUz
zmy<xpggWSVZ{fdhMVY9k`Q+uTHo@kgn%~@7slp|_3dSE{3y~2K32D>|FhD}pdeg!J
z&QpVA#3M2y%F#NlX0urK@2#aNk(jgam$$vXb<k?4)K1x-c#UQ`58n-QCv;Zy-GIIz
zvN%Y;Xa%MP1E5dw0rkON#sofs(ARJ0rSEeTLK#|n6M5Il><7eN-||a2bL*;+Od-zh
z^{u970H{$i={<pxoU@Y?pFDV;nB}Q@M1*JeE>NpKe}4Nxg!HLz$hoP@G)xvc@i}4Z
zkH%^Aa$k>K4ngQVT>Fnzq}F35Y4Dr>88+;$^>I9mEtjAFCxY<@5)j*wzzw5AnwYDS
zC|pyrh_cag&}S+60Ol&EN)^AW()k!I`B<PCqPWCer&tdjQ|NxtN>oY1<UI=`<Vh%4
ze!O!$iJ*<UcYDj#2^cLgX2vre7h7DJNQ+#an^Vk51FnY)g=d!#2+?FoEcV&27Fx^%
zqZE{ROc&m99z3S^#xi<d2i%4$`&Se)m=H3Uu?MIjRxilkm_vzU)1Zt1q(WI$pq+me
z5G?Ft`3x3jW_-bt`bgTVv$M5@J2k#b<f=TLN-5q6Vf#NZUNUx4(?sa#6$nG58&2y8
zH2@`sq!C@Ix!&%XA=SxUH|Jn!T!Tt~>Q&s)ER`bj=GK=lUvm93g$~MZvk0;2HcIPj
z+Z#;J2|7FjZ8DF`*u^M@VB3#<^i=!*Veh@8qRiKHQPei47DPn^6GadNL=**yDo{l(
zl7N5#M8E`!WDrFW0fi!o<QxS_D%n7ek|amTS%OGDPvPEkX3m_s_s&{#(^|9t=-q2|
zw^j9hzwo}#`-FI(&z~KB?#C=3aR(Zl^9|@%tjt1gRP3+8#=CFXU)mz)EYzvo0O8r-
zn^W;<E^%z239iMh88M&y?%nU<BwKNDaU4@a{PVV~r1ux!OXD$pvgh1-StSacI2a#T
zDy`4955sN_b!KGy$x)^^yjQz%iP3kqoe&T}*p@1v7={^itRE&OCb0M*ezh5@yNere
z?|}pOUc)^LO0`$`Y==B=dmJaz&=kvpXK!PpgMS3sn6!8^$X5&PIUl%oMdrt=+pYZc
z<G_uAhbZ019c%;!47%Y^y<HlI{)R}O>f?^}g8B1-6W2ca`u5|^*DC>Heybd<gT8iQ
zhVdRwp*Aj;JxiCvCFKl*&&>^6IMv6do)PK?r*ag;@w!4#r%}tA-{<Td7^sO;^^aFy
z;b41)+!DsqU)plg;*GoT#)WN%j=!QMwCdGCf2w~7ZrWY^Tik!L+$jkT#j)5c3X~Hy
ze21{r1799}Fmz42^OG?;<QTm0UgG^lQ8928Dur$5;Z`>evSQwyHlNLOQQ)?nIJX%5
z>NjXGp1(sQYFaA1BM0wJqT|GUZ9@1u(mL0&yyWCPedseelQi8L;IcPq=%o!(BPXF^
zr<I@Tac+3YlqX_87O%H!@Zcu&=z--ifC1PI|E8to60ImN_x|XAQ^9W%s<C>Jg<Cxs
zC&33bLTBI_vK6TGvHE&5^eY%hG-l1Jw~b_K+^7r~>+fgtn<#K;yu{;t2V~JF8*DSL
ze9rdevBgmoCl5Y3)%FqA0oUN6jY^V<_ew}kPFub+ot_F-o4(i!=FQPck6aCI-aM34
zh#Sgl<wbgW{i8KY(Q*rYK;NN{Q>%G(>*+0*TOMm^#QF|hy)sx+kD-y@>CrN0I#DPN
zdX^Sm0S5?Pmk<Bw+3t&RqGNe&mo?rjv)V73bhPJW9n)|K4qh2+%VXQW35m~~k(E6L
zJZcFO(}Q#YflS_9M*<a^&(gB_CBNX)BogNMSaBos@pZ$j2+@CVH^hwLqgP+VceaBH
z7`b!T@*96oBS#*?v4;b7;LB4{cn~G%<dmWm+Oi*b1$n_)KnC%nAYyQ)e+K?<yEL<#
z_#l#$!I@mpfwX}QqJW=EDd3}-+`o?oE6Kq@97&dPva-;qMO3{KUA|yfdOk|wjN95p
zwuA&2l!jq~I@o!|e{qeUpHJNe!gf&bO5fwo*V~U;h_VISlOvd|*YM?m9l^Gz*#YAl
zN!{<`a(93c++OYxpfWUbua6~5ZIPN(Qq}|sowLLASTf-S6BLJJYj-8v`3EiUuKF)u
zUeQtO7S2C<ij#v#%teyp6;PhhwncVubE<`1@IdByV@nGO-Vy!Wy16>ZVMV#NPOu8*
zR6W)Zr>Z>HI5GNR3S6;)E+x&t*-s8f(fKd-crKGJuOI*Nw2Vi09y9w0?W{fU3i|oJ
zyH){yvg4-H10_eL<V!0(x?oBe6aN!MF2}dFoCUFm>JS|PL}J*z`@mf(DBjAxf6oM|
zlhj%?shzd#ei0&uV);AOVZazX(y9XHu7mZCCJ4H~Haz!-gEf^U9Csh<%2BdpjszqW
zg7O069gtrxWj#EVE*x7>@_kT^2-niM2ZIzfH6PrS@<Dbp_1gv`V5pIKab@Cb6&kEe
zyQS|Xo(58G`x8z>n0L{hO~&O_mCO3AKENEIK#~<1Dn15uNP7bceQ;e!`@LmZ!*?*G
zr=--h8A)uYG3BK?uT1utJuoTh2)ig_sS2kl4ILvgtydST-16LZqVPM!hha$Pxpy8w
z-B3ePbgnf*XJE3x_IIIwK~vLU%Uy##+y|`fN5M$3u(FbW!yjorKFfwmBQbRmisu&0
zjquAvu70_IbWK05uAxZ1{fC|u>z<I2alshw_uP7DI-(cMq)t9hh)#H$keZN@kaz1T
zcGZm|r)UH|(4tF+!&uOKNBq;L87MU)o;s|vE~^E58Wd}_4H$bJt%dK9$wa5avu7J{
zUaDGe+PwL!#l&*}JFvmrvb*@;U2a?AOo##*qJpBKx>)Ym@|qf(&yV$oIE*rX>EsAH
zIXZG{q>z@KRIeRX%=cu|0mW~qF<CWG@Dx~%kjh>pilYEIbHDF#qL#A`^08GHpbAt0
zl^SF8!%MJIVWkq4)TDo9nGIJ$O6h<4t*Bn{M#?$$gy+In$Rc(;8Y!A0*7nm%xOKB+
z*2r1Od<>7^EHTBRc?7#sD=RB_IZ38~Rv>^<DmD>=Z3mnbpD;_S3JQ!oui@sHb;Pd?
z`rk-kAF!*&c)pa}?I|a3XOgK(CTd9k!kzI{pJXX`MQr@dsTH%$C5hTCO^uhzww^yN
zr?ZnZq9ngOFQkzY!(W={X_J_HOYgp()AUGFtZrVALh$@Z+d?#DF5<pwC~j!dWx~7L
zE#E=^G3>~FLc6d<i1%9l1R#<DR%v?Y-{2VqF6KgEt%0HEO!M^QR^{$?zs!>IisO%;
zTvv#tjfz^)jXHU1iR~#{z{O~-56l~P9JmRA2};rzdyWfQ|GJgFv^2Y*5~FBW9Tp7S
z>(|n(sLjM@u@d*6eR3uIVuc>fZ?fZhdym^&fvl2xfz``A+1WWcBg4;Tw8$fj=23a9
z_3RE*lb5qCA{U(q`jJq?mCi0xVlQ6~i1_Bk6ReC@L!U498S%7dz@e{{Ei7LL#v*%$
z-spC_H~TNzzZLb()w5D8QP%Lh)7BjCoio-Z1pjWyYp-F=Zii^PxhT1X74qB9|HK01
zUnr6Hc}3$;Bn!K2by!a*MzgNij5B7XR-ufrsU+G7ZI7^Z-%+#UgSw_JjsZt5UiNN`
zbN-R<d~&SA{!)Z=sD;+yj-I~at2{2A^`4V~R^&)7iLekiH*c$K^3yHM7$TBBhCg5y
z{RI~G7`Us7E`H?A0jG?EyawyuM0i!}d3!b9&o8%I{Au9)d?<)mGDcCjfI?VNK!fB(
z`KIUTse4&sQq?TiCONvW_)R=LE0g7#Vs=AcIb|(iV`f5geHB6}T`5j81|CLNv0Une
z=YAHAm+esE3!WA&zXjC<%y%184I1z?Kyo1*r)<E5a(qrvk|P$*{%?^jRb<Sio*1y$
zjXUctYdNY9MuCX-C6DX}R4T~mklv)4$E0>xs<hSRbR#ot-tP8w_R=prx!6X5B7ZyH
zivt0`F2W&#{#v^FRgy~=2J5;neILc;=bY>~vwfn&U6x?K=f_gUUo<p^hd+nhZt2_3
z_#NtpK3D@`+8eanGQxuXE=(nqV@2RqGheV(ce6I-@4A?%d>uU@b<!R$*`3EW(*q;M
zkXkjEw5Z6bj;goeuJ4QI`LrC{;v9Gtf-Vm^czh`+(8yuFfi97-32@_E<kgWCJVUxW
zudpo@OY{y#%Ba^5M&=&bs(RgZSq&5aW+;Qp{Y1eF)MU;)`h#UVsaGznVX8luoa=d!
zEj1_Q8Gf1C4?kL8QL5rgN$zIm^$Ydi2p#4{3yz-UV-!-t9nZ*bY#i#6guIXZH60}s
zdRv>IBL5J0PvMlWY?#%LCEuB}E(z%W9kFsa{CZ)25aFgl|2=fCU}~10zjmq2=Plt`
zY<SI6mP8zVm2XZN;EiG7&2>K68JT?EsqwKMnogWrXTT7{(am($6h1ua*&4u%9v}ed
z@cCzMObZvUbPj{{_uAjTET48%KH$t*gG%$EY1%mqTwov_4NU-;oHI~a?bxwnaxFy(
zWx_$=h#-!a$gV?om{8f=90#3cuuV;pW_l?tFRlE$8x>K#Wesx+8+)q8YhskN2{Y}D
z=MkQ0b+3Z4C6XqRnJ+G%=~cLK!*)`5T?fkohsoZOgv%K=mqnAE<TUg7)DOzNsq_8Y
z`<@)~4GUi#<hV*6a-z7Kk37$Lh^&Tzk*2NC!9Xy0d`39EO0RhTn>WkximVEBiSNZ}
zo&F}IX1Th#J@`tgjnF(A@3q)Hol~Hs<~*inJGuP}hV>9bBW5ilDKF^w!sQYhzMcaT
z96Jl^H%H5Gc{xRh$4(N%DT#ZI&&PrjhI9cK2K)rz2Cm@X7_;^H=T#z%P3Q{I`M@7?
zVD5e}CVoZ!7l$m+BEzA5f+vs5(=-eUta86vY#j}_y3e)`x4mr<^%bS)PE?8VQ0_9}
z@_`005UmJsYt7>aUNJAtAz%vv9yoqKiHJhOBDTkDcI*j3Ms2X8odcrv&B~5?hv%Nd
z#ybgh2=t0e$6v^E41R7pn`D!1v)CxpKn1WhK3I&BW8C*^FE8HxNc-`x(@lbw*>+5z
z%fx<MW~z7jjPg*?mj9-rl&}pyv&Mx74`g$!PKnOPBqdCBeJz5fHIh?QbfrpUAx+Nz
z28Dh`StBfh(l<I9p5=sarf+CwhLqmi^;#U8oVJN$w42O7iBo{GM9~P??J#q9$Kl`}
z?`hUNR*vBJM)endDO9{sU7jBXHLE0M;7Ea({ffF=ckw5!h7IVBKSGjqL5k>(YQF@c
zA}BSj5kZ8DG=7w}2XnT{CmYQVie&TryfxO^1hWelfwGxl_1@|zImYxH)KQSe15%;L
za=?)CBZ6^ibf6qY7ff2IsmFu}xzh>qJl=)i$3R|8?XZY))FsPBO8Gw8G7GsF!JEB=
z7B!&Yy-w*^GNC>h+tzBj_#|T2>gwvizsuR4F6(!5vyzm6uibT$71XDRilL}xvanla
z>W9CDUPmLdW%K6xyF0gUUs#%5qCBK!uG_DG$s@`QxJm@2=(kmr%dRx!6&1R*U|vJ;
z81F9N#H;r1a-14#o>_nw2Z1Pg;ezyUug4M7hhk-eaxHfGM<JDoEAm~BKn5K5_`r7*
z(!Wh0f=g9jpN_`#toLqdJ9Bt%z$^DFSP^EJaV@3Xr|1UM?L$L&|7W*qQy5e_GU|06
z+AQk}9gP$7nZ$;1jn;?k)=BRI?Bk>EA<I+J)UuGVJHWe~?fTB^72cc|rR1ZZW<S2)
zQ|$4sjbEOe%98E!hQALePW2$&sIIdx*Y`2ES}H74hE5y6RwrhVYzoV2BJ*Xnn2ux2
zC(Q&5BZo=I&inZpIFG@UAJnni{goXo5?FOwv`S>#p{husIz<U-lGQ*>WMBfsWm^eh
zjm^!|qb=u!Q{@}Dz1i8Kvyn|kB6^cwIMS}5?T#`YY))^RpJ~Aeho`!-ygcE4|7i@d
zSOSuPC+X-Y<josBOL(v6kB+KT>gL|PY#iS!f`oOSjgF48XbqhfxA!y)l&-(i`Dylh
zLen`z@`#`Q#TR=hFM=J!UvTsJE{?@1g_q(c2MQJ~*~=<7#FlqvF0ego_FlysIWj-Q
z@QL9+M58Z&yGp{CE<5Z}@|TqO8TAm9Up4iwPk4$h+)^Z|U807K%b_RrW(npAmPyhH
z^e!(FTN_USww`e$sS;8>4za!;KYk2%Q=+V&m9G3fX?_;N;0{sVoXi)luHOS^x9O?d
z*{vxod^UMJY0*6B%g!~#pVQOtQ&Z(-)CYe{ZkX7^H<tzG!8sNdmTJazBqjOBj<n|f
zYdD07w6)s0EDV_$(~<8sHp#~7m+1X`sM6Z!M08cEkyJZB@B7Jbkw?NOGOIHBWnFK?
zCf4Aqw3Yq?tVQWgun8>?`polm*bnzpy?dtqm$DBm>1Ud(DJOBRrj<RW&EdXD*7Dlj
z6mQa?E}&kc(A;rGkU{G(Mi^<B)YIt6(H^h+ag46!;#y}q=kK+YU>V&l*6y#Coh6kG
z6|DEGs2?S)muzx$)H*C)R#(RzJLq}SzU&cB5|WWROZvwMiH}MFESaRXir$lRk)0Wf
zoAHPKdu;mRA=CpjG;T*Ao4{t4+_ed3C5>1(Rmt!#(DorA>m|W&Wo6(3YvxtsHWmA1
zOb|wz5QcRegI)EUdDEJl5r413-o=$*gP$<|PW4t86u8rz_9H28S>CQt>QzvHkU7!P
zb8gDFJ>$Ltai@^^@_YN0tLs+|uj1zJ6~MMZGf<3s9Q$UtGH?O^g^K%I22Sc1NlC}(
zy05H1#pK7YSE6IS1Amcy5mR9*_GuVKpV%k)?d=bXUh2a6_gFaC6O#Rvw?P2}w2EQf
zIL@ROFJ2_7l!T+5EG%4!a0V|CV)@pr*+aS_(SWY@@aSB)ZU3vh|3k+wnRj0FG2}=I
z*lO1Of>HpzC*&bfK**+B!!8~@dNkZ3{y}#>L#)w`ecw2deYAyd8@<FKx)Z#-iZr)7
z>vzzsL?Xnq&}~@6cIYSvXV)d-6WSbHQSI^SAm@F<9R#65L#%T6<qSSJSFGFki~Dlp
zDOOe_dAn5wFFYLn9ts-|uw5Vw2~Kos%UWT-#2YL-I5LuEGuMpbgVUs+dwFq+<ZJ_?
z0vwnESjtZta7$-3dq+pBgSN=BMJMaw{i(jdpK8Q;-@&X0hEn^>Z>msV?W0@VaPw$w
zMI{^sM;0@4o~y>j;f#cz@WOclhsfCp_TvhK208y<ZD160s!bRBRyB2qekv#+Hp6!n
z0SI56>7+15Em4l$&aL$xc|5E}`c)NgFNI5*>3^y}wNe}1PAi1Tv)%l(<<_nD2Qf54
zlImjs%;>wsC|y5_g3y>Ob-U~$J9%kf1D`eielAv^xv42G{=tvJ(d~@yX9jEEDu%Az
z!ncq5Ts_`6FDm(n`fhQzE#bVZ(~sZLnFp-E(!ikTxYol#f%)Iro3?J{)X9#SS0Oz{
zLuoUa&)J?${<d}db{s)fu%ave(V8KH`CD#oQe84xqD~Hc<Ews`Hbi(Lp+siCN(-8<
zq2UGcG54AvHibK<wr|lOz-Fn97Qwg^Q&pVj&XExRAS+&oL5bf}@dI-~@@rDk0r6P|
zu8gnWN%LC)ZDwC{x<8qQpZ7Q0CN$q=2lePYS42&}<>z16|Dz(N{gT8nyP=~7@=iDn
z{olNaxjs`x!+-iTG6z(weG(sx@+I3G-nVPl;n7S6v+xHpUc4G%7m_jM1HF{==YyZm
z&z;E`>shCFBSM_Uf(;x65UJm4XW7**F+F@($$2pwqYsX6#2eO&jVJBx`Yle9T(Hy}
zKLPJ8J-=bUK%&9jyU{OaP-^&-Z}^4<3zp&Pd@u@kH*{yo>FFhS*)1(>=gvvoMs_+3
z7!~%{N5kP}q4P;Q-#GY5uNHRfVu1QmZ;#RE{NiHwJlo>-9?qSXfy#&fdSrg_F~S0-
zF<`Ba#z>d`m=}7e53j23&(SR{j4u#EGqQZ$l~5E+&e&2x9wsL3cUSC6Ots#RV8-kG
z;ze`D)CY~!J{c<&A;e#_R`{FuoGj0{k9kq1X5wWA!|4h3rOwYk03S*J^2}#XRe7r^
z?kp^KA}=s-lzOL&!+r%5A~Un&?qCR~a}uK`4_-*p(O$b&2Wn|`@eM!1_{5?@?D$T<
zpkrV-Z2uB*Zo3b)cr?7Xi9>Lthp(XD-!$!;=Z>}}Umq@TQ6Hj$XIQM?&)(ld3cGJw
zDs)ARXJ(%J&Ygm(-uoc^f^#SkuN<AZdknWAmqITOHS!Q}cF4j>_(xwad4aMF0e{$A
z`pMUxMk-|v)ke1fnZ47I+kiXw+QnCW6^tAv8=vnu@H^<iDZ?7s!BFXH378MPm=%2t
zpe0yD8|D?7AMc6#DTzNjv1#W{bsD+JpFho@6RZ)-rT4sB40X!V(z@D4Z?xZ*2oZcP
zq*o_q9(Bq+5Fk*oi+1j~`>Ufv=ATH-0FqjoH2nSj<2Nf4bEa*Nu9H6AUf?IydS{#G
zg}q7IlaEz)nKeAy{EGgt!||&-$+fA;$@0Igy+|REkxvshGR?ikd0HS8{5OXORpm$B
zo6h*K;>Jel<w`Qkg<o{)%&wG`-?htmdua}}l^pDMG*ooX8oQYt{ZsS7^!SZXp6Y3K
zmMV6O28=FmgxZPt@Ko89HYfiR3y3g1qFcRwqZ50wJ$s2`F)PdV()i}$VnuaE7CI_Y
z9?AYUtWS=K`B2yt<Oy5nJIwT5dt5$%@NCJhC!x2Mvf+nL)rqL68v(+b03UmViM_rk
zs<lqT!-nM3?Ti%;Kl4kMEbiTVC&7AQ&t7##S6f0^yr%Hhryx~|v3@=rF4h;8)f%&V
zv;G-S%5a_w2fJT-&LyRjIr-ex)qUGd1aKByTticQ3qK$#yv%Xv-lf+zK|6MCTU;qC
z-&e#(ek9Am$47E@dF+vVWH*5|vHSL(g*d|YwKVP}P?48Q`);m3Dvg|?YoZ!bj!&JO
z7z+7F7F{<Ec|LzhPgv<u<syieI2c`Z-&z93&t?o#Wl0e8w`n{bs+S@#NJ<qgJ%6e8
zNVX8PLYJbL2TJbLZ%);0^YP5Adw|&wH(g=9PT2Ksc9Rd?sv94f%lppOtvR)4{{RNP
zVtv$qQK-%779nvl%;oVGcaFg#iKRXN_$V&1l_~z<w;rk!n(Ju}O;KmUn}grs(r|zI
zQSmVK8vb8K+j{3kM0h}eraz>yIs!jb5Bi_*!x1k;aOy=t?Nk+P&rDuE54(K#12H>z
zF1>?9L5nnxbOO_xH)ALsU{~~_7s~ej_KjELJmEHN;wOkP5q+7o13a^AO!_#Qwyu^H
z(t#l%S0LaA8$H)@>LtbRfT*3OuMP;|dQB-~r1_@YrG`h3#0aTYOM>@W-sh04JY8)^
z8Vv~xr6TGKZcxrXf6fbR13%)C>w}-&-V}lh(EEvzCYP}>LR}$lRb)La0g6NDB)-6T
z_=K6&%BZ2=yoeNaJ?<qtkdScg8=gP^)#o_l%CDB?6W5>No}GgA84z{PWbAd#Y>Rp%
zh3PfI8Dhu{nxrakP6L=|Z{2;*1C3MSXj_(oAdgZQtlLJ>bK_sQXbF2na2A6^m!@Tg
zzgOsy>{lMa;Y;Qn61N}_AObPdYe&rl`6a}Yujb}+!M!r_WS#NsaBNE53&A~DV}a8e
zxCkyR)Ono3Dvwi+ezvWQJM(@&0N2ra$)>;j;*k(3Z2ge$^vmr>F_~Fenq3DLH~^sf
z8TWhE7-{yEYe4W|)}#b)#Cs+tpyn6hTL6@9PBUax0D+D3r2K2%oVy*&iHUQwV@p$Y
zv8i2MyD(aV6{OopkILIe(6`E@oY$i|-eDT=v8L&)(8I-JLT_(W9D~S7kxj_7r>8oc
zZQZ&jaVi`gDf)C8J`}TvmdsMBV5)19YFL^06H+~+@aX91#Gl{?82!MEyt{&ma%(fp
zm-{tZqNxpDbp6uMU=Fz{d`TA;rvR<VK|>RFrw$yiI*qy_xL8t24~K5Euz7KhvMMQt
zsl$4s`J-X&OERKI-|%bF7FUNyKcFk?*CIXvVb|4n1A&8hZLlM+;gdrSj3+*-Fh!o=
z<2%OE6I}Hb9xs#=ULQ+~QuK|rwYS>*ESNB=KZbz_D;L-0uu9zdLgsfky~XJ0Jmb~x
zlDH}K?w@|OTWjkjqR1Q=VD~d0tT{zH%5n)JOFKkn(jKZ$Ms4TQ!;vviCA!nnN<{7k
zU4G~1brI7@crBtWp$sXrol|oZJix$!^ET=<v#4E^Qn(dnOzu6FBbRQiVD5>?RO8ee
z+cCO>d#gFB;E4AEtgNT`q-hz?PI^M~1NTG~Rz^{~hzk{99k(<$yYBmmV5C6|#90DK
zek$Yv_rnKm=6VfiyLx85<LJKu6M5i&x}taQ@wT|*6lOD_(Gofy!wj3b%m{JA1E)v6
z3Yjw_=uM)8Tyr)XoX9{CTgh1!i9l!K;*lQ2Sc0Am#k2{eh8E#H{?CN1DG5`of<M3%
zwOcgF1ylwqBqByofbeupz&;~$^JVR=;0KG%R3~5GhzU52^g0e5qNzKrC%7*xo+x}`
zM>lNPfXObIiBftAqp5lbT<7||!5fXy&eF`bizshQGqgn&c+S%F)U8WWYp;-HyryaC
z=?P|MHLii{iLpDgu+@>;co}{H0be7Xr(5(R+X;RZV9QO0-qAT2ycd)0<C^>_$;nXT
zWqVaVaLOoEwzd|E<=(?VE-o83B>RU@67=^-iA=E78cgbGkcUwPXeEa^?H4B~`EvYV
z<xrsw<Wk}b%I{=(FQ7Kn=Vsb-&;7W!s`mufi`^#PoovSXzji8XP=oMxGR=qnwb4)3
zj>IZkzhyw}QYK|7_F?>c$bvN53{y5)GO#CqUVfb59e$lz!+lZ0EXgV1NZ?L}<4R$_
zF(wKIv<oiHr%#_SWY5g-&Nl7U73#$>8Qy*+{sL5g0I(p~^Uk%!)I_#Le!3J%>V;D&
z+sL_U20%OXe|KUKIe>XmaV<Hr)fe<KgyCH)Se{!esUtQvHfTA)kC%`pdrXEr-IBAg
zlfiDHvl@P)gxw|g5I##C2zhhDHlcvn?Lcd-I3PaP6r<GUxFnrW8Ytu|7{IAssprGK
zW^hn>97t!3LL}>8e?N@Bx<DU+X_1VP30czkTgbyOHU+Twq&XB!J?8oEwzp=wL^U>E
zid_dc7nnN|Z%f3@%LZ{t3xxEYSPDE;jjY;Zv7@MWC>Bv$Z@`D44Mif+^9JcK?58)-
zZk^f7()*oB=vRBDS;Lu^%cjaHYfHX$7#h(}*F?roDw^je!~ry>L{h2O5jNo1aBPER
z!w5WNX_MeL6?Jga($W$X$mm!YVT=sN4C1vq1!K&jd`+j|UJE~kT}k~BH*BT{JRB8H
zZ9is0C`F|2vUTAjAYrjzEvE#BqNqJ|`xl(jk-Y2$Cm0feeK@Rh>ZMCK=bg_-9mh`0
zfjJF_8jVsl(k=SL04J$I7{a(7n2S~MnO-ot_s-Y3zU$E=`wgzH+sukWhF&t6-FpWq
zDl>Mog>iS65{a1{P1((MFk36_X28AMGrnQ@cBk!_#%)Axo$q|nn&v2x6P8u6=WK8E
z_F4cr$g{b<v-9tzXi5=YdSmE$PL4G2d?w?QB!^!ujef|Busd_3oVUcndUlzCnK>wq
zUfP?M;8Gu_p=#tx`tDWf<Vw<mL1Lrd$z&-vFde?v*Q@$|QN_XKwLbwR<OM0eOA_JB
zjWIFB@QFm`&xIk!m4(8t?I%Iy{qp&<I1@E6air;fPx7rM(>7PiK2-6EA_!kh!n2~e
zJKS_K7&cG}qNA{8VzNvFMY}C0A5SnWJRBdw-ODN@)Y4txGEf=oNqTc(J;z}HK8M?d
zk73RQnmv_t<~NJ`FdkRCB_=ywu54=*GF2G^1DSs8$aN9sQZ}vbE{Kn?*Z3Y5tX@3A
zr}j7?^8zPl*{4tT7xyFOck@}?gX-7fuT~+o`*4}ugIY@SUrffvGBX#71b%U79d=6z
zXK{}8Bt%MkNTm2B>CBbA8`-YmgoC!-HS6KhLrgDAtkDVR>k=!zLmIm$dQ7kBxV-#J
zKDC+|t%OG+O_4ZVN~Sy2QeH34*Yz@=HSNZXoa94UR%dt%xC^Xxbkyv`1fb$4Rz&v9
z1F9yC1PR9FtEqei9!n+nwpl*oGwJ&B6k5WM=Hp2qlaWeXQK8gpC$s8`?2X+NEV7hT
z_9ZhbYi4XINDu}UVSgU)NRteOraoRd4%B%n$rJuKUdM-*+ss8Vx+Iz;XnnBP&J08I
zjvdjIWv+|T<AEElT&wxIh4`c!IN<AJl;%D^DXMvW(%>bAfVL}3M`AC7|D+sPlb;`9
zzoJ7<QRewZPQ5|TAx&z#XeS$R=KKo+t!CX;PqkRGIHf;OXjWwTW0GJ}!qB5N;~=#d
z4u5Z(OuJt6eZFBwJ)3@x-f3}!G2E|@+fI82%i7B(807@)WrmO)gWmS&g4B^j%3taY
zi>OlqPa5Rj3isD?1`fo44C~CCpT`^{WwJ_q;1^@(97rjzA2RMO?bQzjeipBtHILm-
z7$nMjTEwy(ucrSNEVedUFFPss%?YEr&I{J=`uH5Ok1?p7fzxAcswL!Yl-S^?QrtSA
z^Wih7B8*q?|0$smus#GKcEZ388~E2$l_>V*&#5W@GbR+-%OCHJsBfAbE6@>7)6JU|
zK6kFJiSXBHqdMM0oilZ@fb{xoCpx=8Q`~}fxZD*ssV%7n<9O5XyAR9P7P>jvlT_wA
zI{?-nt+}@nB4yXCo97f;D<YCRx#UCHFlpws=<RVgVv*Y7(Leg|V{q`cfx&GUY#og5
zUfLTZk?rAN&gq}y5}C_#iht&2&29?W$-^Vmh9*d8Hkw1ZFwQOIB5f7z*x#Ek(ymM=
zecr{)d^nc);`+QNF<j5najMXN<oIdvoW2)#)>Fon-%Hr5dg{j5xcd4!P_6|2xPA8=
z`K%Xjg1!I7CdMIS;&<gj(k=NCxkD7qHB1bgmOOLJPz34gd#zlc;+KQEhxt#Qr1CMT
z0obji(!G1<!z+Vd315Q^BZ7z%Nv&snVLc#f{VSkHaH#|XDey;dwfyobzm$4IE_M&M
z)-Rbr!E{iw<#A`x(vm|Z*0*J&R>h&9=u}a094^?Q)FsX!mLe5b6GCf_gweu?BZ^<9
z37>hc{*q~=3}ic#?C83m#`i49Ufr*<oblS=$kh?I;edOpW(8W#L|RU-w6~AsCk+)x
zyF_K4404{oBdZ%rzPQ<OK310CHmSvN>0QXYN?7=AS`hc6giO>RcWVZ7+kO8$qXBGS
z7YD+30u^}J`AOXJ7%Yd^ZIo70YN&@W6$7Zy9YR7v-e66xg1D>{8~nf+nw5+PLVDAI
zp2yzqe%|rAZ4J{7hV?0HsDBY`FZiTYT<7GP%Sn!;Hi~G|N+YLkQ#qA1G#cyw4VPGK
z^Y-mo_qtLjB<D){0|(%jcY&Zk)^6MRW9mp3?=s^bB69NVG;Xsb3hAzZZ!Q3yjvQ-I
z>OXDj597n1`KS;Qh?Nf=%NRMq$3GWz2B9;JGCxq80|=tuvj>IhAf&MS_w7Tj#1syn
zU%%et=X)Dk&5m8WdGpNe=F5H-UmOPkKC-LCe8TX@ZpAhabto_nAu}T+BL`A4rqyBD
zwl&Lq1q0*u5b?LA-q**aF=R})U1-NHL$Zv3@%MM+NK>s3V<P5bVdpT7+5efj=$}}C
zK9DNLF;HW`=0e!Fo(qt|CcrXl*I&kp`_rz>blA0YB<a37a&ZfX^vPpX$Xe{-#AI(g
zJ?D2Q5^THkmEh<Auk<JU;Mv*&yM!p__ds~=D`rblp=V)naSTYDy%qij`Og(h`yRlQ
zUVZa*zFS5{f_GXsZT76GM|BTz$W+1JuW(_*sMmw~!@x<IFZCY&`pgz4EyI}2AYU|@
zAJZpmMa6gJHK_&$#AgaY7U_nyP#;kM5m}GtaL<3`TlmvK6mLPrXEHZ=>gv@lI3~6X
z3@;e<6f5YhqmS752MK4wb1$oS``Ss018KIH&rOea$n1~o{2oDETAb6yU=qf-WvK={
zadfEc)e;5{_vYe&m%gY}`s~IEuXkqf?sXV)^}@3O<K){dHvoWpb+<G2*XSbj?KRq0
znQLBxI&S;D2?t2wT-rvqkQtC=63CH{`AM;gH;|!y^2CYigLbIqxu^pnu%&SFzfVrK
zoE~s)2C}?b<~rjG|2m3??#_f+fb^U^laB?fhWu?@E>X>|1@7L7eTO{F;&*~-DDd!i
ztOG-H$=8t_CKxT^Z54<Yi*LlHaRLzf&^-WW=&APLXwO}?dfyDMZAg=2n+SgcL<gj>
zyDc9|Ms9BT6m41&`iO)7cu+mXSCa})d)E!Hc%MDfxbd&QVvfVZ4DTvp`B!1$fdeBf
zk~m#1=T+C%Y7tLpSc!>+)Y0lUc8H3peXXhaQdftLUWxq4=Eq3NT5j&jqf&NZ9s3R(
z2s@NxQcNY;yEDO=wP$gzjJ(dP3zx9{Y}*kA&~q9;Kaq+&#;%$xx^j+1!SjvwS}hBU
zk5)Hh9w2;<{*(^fU-f|IbNF!vA<;>i%WJp!;_pE;0YnppOmA<cZW3hlquI6#iQBX^
zG|=Y6rw%+r?E(rdxVqu_y`KO-!c8>h&^pD#)ao+jiOpPqR=UyT*PSkyfPy3lO9U=A
zln7HlEl=o|-hy;+@7`#P>j<Z^9HHPULqtlvjPFCB8xZrsvd$$kVBh}z-?4>uS4JB9
z@`XHoIu}9g0P9;VUM*IZ!Q619J?957UjK7*Edv9uvC+2dexAcC>wSz~EwS}pe`O9P
zFY%(Sn3$h3K3#?<hH4yeLzKkpUE5f`aXw<5gD)|3>xPGPtx9IEf~&Z^>;O6Vr<Okh
zH=kEb_%!@j($G&yq*}EX49Y*0zH-GKjt9%jUfR1E7`!Q|<1CK`SGXfMoo((e*5~`n
zuyJv<!UCs#{gntMyFx9$iHS|h%ASs2Y1itL1}{4VrRAACh*_OpH96(4<A^FS=6~Ty
zY5MV0piNbee9BioY!`pEr1n}@fm?=#p@)u|?D*e7Sv33qFHOQ|{zc@WBDr2dNND5C
z3ETN?gzZ#zIC!d{cjOz}qf<x|wVb>_-2R6p&MI1g-4iT4Mb%o+9Lg$-5kmqxw`E<N
z>M(ffr2XJ{XWXc0M(<I5*Y(8<SWU*J!ONIP+)j*!ucm_C8_o0~5Em~2i-Tsn@)Gf`
z{fg~xR7*qeG@Dw$%A7~4briU!q+`9s9*{}?va}Yx|DZhn{YcAf^fcTgR;zBBb~Qou
zO?iu^65#V;Jfmyd`aIkk4%JeAV#G)=1u&LCi7DTZ0*gJY8q8z{HIeZ9Z0A9Z_qQ@8
zdpTe3pRojddZ#YzqG&^mQtHj>ZcjFQCOW!sW8W@NX=H@oiLC+4$r_ehhq}T*r-c0K
zs6qcC2*$8Pilkm|G)>Zi8^6Fr31^@_R9>{U#q9We0v+8CSY<-OtZ6%s#uf8+xRq0T
zLL+FG0ORKXE^C5?6qLJ7A5D}IB!*p}=d}$ExHr|+8xW%eHvhHpc3rbJxP#dCmEXmF
zIjdh90c{of=fnK`vi2Ed&yjDT${-ZrRZ;C_!P`M$uJY%>9$DJS01t8-7p0QtFJF!|
zCg=1Bmt3bx9N%3HPlI#k4MfKb{RKNxQS=~js+<7Fjw&GHU>c4ZRNEuy<KU~()76!1
zHFHek0p!G-Dlrk2N17CF1fMba0>_G8Lx^G_{>nu;iD<b&A8SO55xs%<8-GtQ#G%b{
zJ2NALs(hhw*N)J7%8OZyusSav-}`$o1-rx%8yg-aJEzH{CRL(mG{@bG>f+AbyLlM!
zFaV3Z4Uh<;^KeFMgiZr!1JNj6!JpsoK!b(6k13WC-f^rrLb_5+d+pbDVO8qse^2U|
zfc;|6iM#FR2&dO953h|ts4Y13VwinF(6>;=!wC-Boom-tTMMy=9(NojW;^W1Yx`{(
zK3e<?Tb!QV`HiV&uy;m<Dfiythh9DLV5-Xzx1T(j3d(HhWmxZk^rQ(Yz;w}u_3P1F
zFfgttk5Vz2U})4mOl0Nc%#<N9T)OLXXl^jXV4_o;nOT1(%lkK&MI~@@MBc;FNUD;4
znN{{rA1b&<<Nh?F<#0F_>*TDxzCpiY^0kYWLw#yw0g}MwSn>$F{faMX2v+a5phn*B
zw==kYy%wkM(y9ui(|mdHDd-htwP3dto$~SAr;%_8&L;Blp2W`+Sb9V65QMv%9;|kj
zUQzh-oeTzSGGNYWi%6MH>@G?X7)+quaTS!5cq*HRZ>4^t;xxV?5l5t3swq^t2rPbQ
zk;PEirarEIwB<wUJKlzaKpHCm*C3R31ob~wZNu|j!N^rnMeQkRHqt1*KU#jN4*)2L
z`jeBBWP{|?R9HmMK#&UFggVg{J54*=!WlgEA@eN#vhR?TRQU_6Kpg_70t|kr@9f3*
z)yI?a_(5)rEAT$3V=4PN!>4z4%DzP#FB|Y%74P9kI_d^!Z02B!0>hQmx+UmGCSlYD
z1%qClL9pBO^fWB>LaoG={AL?;S2Dg0bQg%)&ku&|6!|@YHnHX_)VFnOqh2}^W7)x>
zj(``J%w0(REyi<nAi)NIVebaSvytX;D2ze@<2j^U(`nvO;e9z;&-K$MvGeE8L)mXJ
znj(S~;M`s;0=ah6$%AZcQbdaLFRYL`Bu7X|NnzZ+z6tR<NiHtolnuaQCuz5A-#!EP
z$?NJg?SDju>3E2X-tt2{mXj7o*NyKPzt(v?V#zJsvyxt7vo(Y7Y<qEYvtaeZ+B42C
zDZ&FIBM~eW2(W<_>gu+?#TH(<ddJe}nf{+B`Tmo4#Q!P;{4e^?=f~G}O%I+N894yu
z%j%}2;ahXPH;?Z|`2YaBv|CM9RYBTRH~SJU9GjEV)3S|#4ui0W*%^*<aoy_rauNKm
zy8zBz_EdPUv?4~?e%aCl6zY?A7^%-hjMyQ@eib3RjS*~33VGUbkHLog7R>e3?_O0<
zPOzOI`_+YFM99kSOVV@QbyV_B<GW-mC#prIJ@S0s;yuBQ+p7yp6-RN7UI{JE9_s9c
z=Fry&gF{~Y?593`{4JopcaCM5D3kr$_sf>6XpQR}si`1<Y++tNO$jMgMlS`qONYH8
zrIA7q<y;BHpI(%IA>M(SB)gNj_5QtkimQL@(a8R@jvx{r7#LqM0^b&}ooaU_BR<J(
z=zO58z=R|eOzVG~5fb7^mU_{r7Tny@0(&C!Pmgv&c%vMn=z)Ym_GIxp_7LD>FpcK5
z%(R|4qFF7>(LbSlVSM(!+40r{jVVB|G2x(-A;n4E@PRqcQo-IIU%q^Str7>FwWTEp
zFT@R?iL!gb?NZf8H9{H;JVq#1&b4Khko&5154H7G3{#!Akk{-3Ng>)tY9y9&A!KZ~
z(N*55i*a^Eu3Ik@@I#kV08Uu%=DHMvTh(EmDAF$73*mEBs)H!l*Id)9KH))d&ntwO
ztX>01Ts?XvzepHb=B+FjF@AtAqF&>>T`5X6?Qji?R>)aB9i(NST~?8#gr2J-hdQ25
zXO7wG#KE<bbsPl+g$88IpYS(FyvBTU`Y;H*@Zadi*$EtxwG2PXO?D46GaTWB;a&oO
z4g#X7nn=zZ>%632hiW?zbyFG8L{$dCcpV0BoEYv?1wdZlA#6h}-C9-_f4!&@AHpm=
zKLyPvK$c$fj-`;wvC*XmFnmNjPKpBpULa>g^>FFqy=u5{fMbdrokn<}e1vOT%^Xbo
z5jH5{>|#{Yf)NpfI#fFvR18Z~Ro7p=W#a1z{(4OxS&n;<V&QJ~^7$t9ZgS!U5%5vW
z3fircKJ4G^*^~%34YVqEVCac;>Rt+zYTZ8`&juZp8_j79v_22|>Ebw)h@w!O;DN?N
zYQ0VB!Uaq*Q?C_l0e1&B$MDQr!Vyg1h*dsq{9R=&MX(9Q(Za%lzn>pE?^ztNC^>S{
zU@7*kpa9MgRBaVPDsgv>RflJ#DFn{D1qXL5FWCzU2^Cc^i(D@(|NKPs6dxZYn!E+m
z!N5DV07Zd8ka0_)LV_|}-U=)5bsD@H29X&-x?JfsNVO$@+z%W4dcim@c?nZl*|bc>
z%|4kT@LKor_iur?Pv3bwry*X_O_RL)t<rU6atk34I@gOg2LH7v=^sx(vhAV7+l}8L
z^C{sa$oQz#hJYXeVB{0b(qZZe!<qXE3JOH2Ob#3#(K}S2D`#cx!wG)>ekzvX5-ff2
zJ!SGK2MC6|T}LXRcN`l_j1nh|jpTNAhG2vdtAN_*@4NF7Pq&mPu(7eVDRd2KDh@df
z-Gf?nC(|Mi@n3QT1o`2IikxCpWXkpgI*OxZ*Oy3O^D%SE@6n!GA!|tCMwZ@3yi7hh
z+_;1$q?MS)LP$tMLoA6Ai?M$fbF6LrJW`fJ7)4-KkK6)Gs*P^kIOZG!E0uZWI0uq+
zwQK{moIz0p4h-PVorv2;%kOn>m$<kC3<)x$A&;FrdFITSt}QGhqM@iDrR9Mi*ubtC
zkQM$ef`#*l+Q*E!m83^?`w$bv!p@qi4M&y!iLUb~fRUi56(~3(={A3P_2S9blRl)9
zG#C~n8MD=4Qe`sKs#=MV^A@2<pFelOs=vcdNSRhiQSlq2fhA-(yF2jIZGRM|!%B|p
z@^9rYhA^VGht^kn?K!g{ujFJC)H>cDQtVe8P@$scGREu}Jq0NJ4F@?1xfZopk+>>x
zGHW&*;Z#Is!TGN}cE+HiR(Y}^0b>e08>+^<x6EFNM;qK;8k(OGQ?{Gx*UWUEAhnJX
zBIMae=Oe$UwE2rXg#k58dZ^|(A!2J{>8z~tx@z74KZ?7QYzp^LsaMObC*@K0(aL|1
zl<CK@Z9iSj2BaI)`|qzrD~FrYT{7mh+JhB^%_d+MgE~dfV&WUf-w?*tQF-y`gD(yR
zK#N%u9H|i8j@F!YO%`0`q4ss(4DGRd`4JXX*w|g(;tYQq&sGbVI+v6<GjCt5#s)PG
ztBf<8c{p-&DVy!7c!}c>d*HO(lWWNQz;}Tyqo2QjR&>87U|u%SoSwpi_KRJ!9V-Y!
zB4<5B3>~L{?R=V}CvgEs6pPv^P}8TXq+k{M3wD3X?P@sn{)9~6i1EF}VW=z+XTP!x
zfD_~=sK1;h$4B>z+6Ac0!R;^$2A6QUjo%wYd;t>#FxKHvnFK8=5{3XvaS*=saK4~E
zZ2mH_FHa_Qm0s<Yo1F})gjfK?dk}7w&*aqA28qm6dK@icbg_d}yyop#Ku+2w==o-M
z-ZM3oJ#!2ud4+|n)pWa%6E@jHEa<(;vW2umb}sQ7>%oJ%n0FAi_Ye?PNsrvT@q@1m
z6KS%U6cp|X2^qt$VU8|v(Yck_<+d$bE8E54gFEOw@*CP89toPx*?Bb#$eVZEpngZJ
zlS!@;)yVY0H3qh7B^=Vk3hy|6c9z~_)UWTJurhY#3)--Sg}l;_;HBVy()5+ws|)G>
zm|*%p+v@+DN~Zsa-daeK6a?>J5xQ-k)!wvNkMEtt8RR76^eQ{QVK?<hh_QM)INU>I
z7YGNSWcqH4iTv`RZ**w{cQ<+)H)m(1nojE7DgVzNUu>#o&Rt3S#01)V%7!9WhPU}l
zd{#ZhN|w^sQ3=%*?xt)4CI<_)p<3)_Fcz9C-s<tC2As1Tf*aY_XWNy6?=+>TUW3yb
zlm2hWLn!jF|ENyX7NSndY0{1hb2?Hs5bh9%Je_F$*BQr+;=6r674=>d`7`ezqJ%+r
z|K}&x_RASnb#-Yl6@d`Hr2NPr1jx>rn%y|XF#(R+0SmHA^M_Ya=SP$=4E;`^z|$T&
zf27GE*p_=I!?#m$^<TWq*-z!51;p|5_4DUY<Xodv(M}tP1{A|UXoFaWn#{X?%STvT
z|A7BO&6zu`79|0EirE&_Ff#r-ttylKaHb`B-4lYM1CJ05u*pcHiC>69a4vRU3C?ok
zx|qQ}HO-X^ML4`bFv*3&+G=J$Y|Y7iR9nh4hzb9py>^9fa|39mfBFoKL559{EEX&;
zX|0O~y42n_!;eUcneUK-_ea_=*Lu|*%3(0Aqz1AG&iF&nT&#>HW3v;iH%OP0P5w1X
z5IIH#2@*h7L2c%htZREJSt<M(Iy&-#-x(7LNXJ=-R@T;17aTcFHijeGNOJ8}9Dv%F
z10p{Fl;AXpg*(C+WI~MREZkLg6ZlKH(A@ADE&kq&AR)%Hruk@^FvdjCr`YOiOi7qN
z=cE{Ck9X&H`gUQEaQefM#`+L(TaE#uHAHwlhFC21W#th=+`EHqPs5{Np6V++q8{h9
z08Ci`xtOr0FR>%jc)b?TE572FK=O`*Zl(jUV1H#GDmLz|lwbgE$X`kM`1<ut%VVCg
zsu!4uRw$2sESlbGHC!toNpHG^5X-KwQi(b_Fm-!_m0!#c!|45|hVGlqgTV1IBLgj;
zx)sLSna<9!tNTPlZN9^a*H8Jcj_zlU&}}P6+X=(_JC^Pa0(Q$^C!-^U<5-|xYH@Kf
zDr;&Kr9krXJ(6^$vWpv{wz*Vd+&|2oWWcmI4Cyk!E$R$mMH=m&i%T5WM7(CY6$V1k
zMjbL#UcD{3IE8mIc(ccRr_uii4JD-&b|yO++@ndYNH-YUvm0~ZNN$|aFHr+6{VY0&
z0l?NRTPP1V3gZr(oM88lyW{4%Y(Et_5WPdXvd$hZFd_bZP)mZ<5`#63&jpn;DA9EF
z;L=c<-|!`zyiR5Om=cm~FgE}rMCH%2+Hy6H``Fa)pFa@$gk6+qY+`2S9gH~#Inc8l
zw_P-}P+=kwFB&t=jN82C&ADXj+qS}>c`y7@0By_+!aaUi63$QO6oRr*+5%^g2o|yR
z;aMRZIwZFGV-q-Rs}3h{tpDV5e1)h_-U+c{6s`K%x>Ke1Mw>Z=@A2C&FXAaK4#g8e
zkim@xsH_hqJIuyVkHM>*{pUC=X|V{3+S+cTse-N1@^F$UMst_qyt2x(3~O&_xXW@W
zKon~_()bfjXpwrM;4u4WAU8yDWqIk#*Q2Q8BHzoz!JHuD>C*y`iu6F}Z*@<JKqTy+
zMW8&dqo3wul^w%!!cx}%SC!j=I!Z`$OqQ1ImeI!Kw~}r{bZmC@=$c?f4yRtzj@%By
ztCE-k7yCQkLV%gsKss)R*c@v8&Cfn6NBD5+E@WU=h?L1R+^1yqTkY8e;N6i^FuIRN
zz@IdAcfY#uE!a*o=Dm#gWPk8pkSM{WPr?ZV0^a4+8|j&dvB7Ob&mjFpiSLmneJhUa
z2yqU^`Gq`k%^`@9%F4=0N=h0V&veBYRM`Xs956Fjip5X~A!D*~D;a;^6cc;o<|dbI
zNa-FQ=Sf!7_OV)V#SS1As}zxTdmXq5IQ5Xr)IV9cLxq!Dw*7B0i3)|TgL4-D7L&m6
zUp2N~Vn$ji{nqO}DS^;!Dj0dCrYe7V2p_<uXxyr#QmXgzwSrQz&jH?$6_>raqRVIC
zmz0SyWaehmp5jpI4;1_EtK^^v-wDl}jZ0dsx4W54@7;sL)f|?A^|VD*d3oK}uRlIH
zERlItsQ>;U>yl4mF?#9jG0Irbu)LL9U1_)6j8`Fq|3Lcj|K819YTpfrVKNms!0JJN
z=zejd82ee=!wg3IRl3*0e<SN3*Ry-FlPmORns%g32ZSEFZmUaN@}d6%i#bee&_Esa
zGlbY#?+q*%IQ*P_eH#!jx7y|u+wk%JEgvj$-dW}ePDGe#W$IB27@6?Ez$X+E>^I^x
zQjyG7Po*8!@q>5gZiq%dR*y9$2Pd=o>SLY4W3~7_u`8W7CU}GXrMV7{ryL((J&lY*
z=w*P6C{dp?O@!07ZI1KNJ4ib~hDv|4&07URH>z_cWc)A&*~Rm>2+r%A+4+x|d$2jG
z-549{3p+bIaZ}4-6d=&_p`+3ia03oWjPRarwWk)^?b-4O&Hm<1x0mbErBI1T943Ge
z-YbS4!E6?mcGVRk29>RXW<zI%`hAnZz#%h6#siUqeM9uW;PhewOaBJVKkoSle&*1>
za;Q#QSw+}MaWWL<aYLrzc}u^HuUxqT;0U-gZu=Y<-^7eknm~CsfsHEe{!_OauYk>I
zloc7Nk2?e@>2Qg9`#wQCs}f}U&!4Zt<{ysVx4$P00?^reTvPUO2ReAYwS&4Ty=jIg
zsmbAacGMgQpo$oxP<_k)*p&P$1CqU@%T4fe`S<v~Gv^Jv)oFlw>~q*eQilP5UbGkA
z(6R8^=pvoVD(3VIM5#%|Ztjzw%|}8nBp@M*9vna%s4%94dH{}t6k2m>JZE)?RF6YJ
zNNQ&k`nA=}2ME^~M#L!4U>yZt(3JdQlONZlsL(CtDz05Us%nya7?wg_(+T<7o;T`Z
zs_Lk;Vw35C6AX~3cuvB9Xvv`bxo}N7hBXLL-o9zmyZ7(?gsm$9k|5}hYZNI@z;otd
zk|St7#zHT>bLT636A(dv4ODAydG)8}Au-Tys=vR!erm(3e8IT)GLFjKU#^yBVQS;O
zy9xM41HhxnH2ku>#mTbi!49k#>6(+gyzb2*g8C3;nB6~hr<L8HG602~r`Sic;fKb?
z!#>BapAYXLo;+EL6#^`90UWs+oPbIGW$@G!RK)89oKgA-oh%FcX~UWex6L0uod4D0
z$9E50W)QNRqYyd1LVrR348UB3%pbI!4vi2eB&u<2R#vZ}PB9<J5-?(^S9rp=%5$$d
zA{u$+b@RgC&_kTJ!{mn=WHosPX)P>>d01BI-ofDAs;{TVLbJT>pS*wwc@Cn2fN%aq
zjtv+YbF#8ZlAdBOBKX?(7ku19@3hT>W@`T6!G6I9(%JfhnUsLo9dITqQ83f7HOhJt
zghfgWa&^6KG{0he&B!Q<x;e$7yejFxSQsh_BxJvJW4xYpB-OZK$EgT_R?r+1N%yfp
zc$A~kRC*%5!JJE#!3+e1B?g#M%mXy1-k|{1$Mb^YPcKiFy+Bi%pqVc5EON<Bh6i$9
zu303j3=v<U7^Ibp+=zGr!||F(WnB4n9FdQZ)6UGmu9omxHtBTf5Cr@>tLL&ThwwUT
zB0`P8cChPyQ@a8uYS;KOF<Ct+2nGPZW@o`ix&ikG1iCI)2<W0fj{6{77keo=OfMC9
ze1Dm*g86nv1A}M`z^L=MBS*Sjcnb4O)`NC~7cXS|{lH)ZmMm%m>|o<38)gCn4xkKL
zs#o{K+Wav#_8uu4DA!kJ8iFyl@+$3V(8ctA#viItysbi9r0wm0zHT`isxx8Jo|p?s
z)1)U7k9FZBg?ZF8BZ4WBl8RW|m+)vo3ZW+J&5qn3Y{52ySHJlFyy1JK3m=c1+%TcP
z9@In-!Lzfp@WKy!-;=pJ;c?2%Y6aR+v<FHsO~nIPnJnWg@vA}AScT}r-&Aq_2iOr%
zlLTr)((HdV6=U53Y<egDM6xP);lX&j_MfL&LXFxYvXKu{PhUNWnH_X+80VM;fC;^R
zOoIt=Gh%%3x2)$*@-hJJ6A=-CX5gm}*u*m<ey?_KGxJj>Sf4s`=5_NG)_$tqv^yrk
z!RFxMB!@qyi2M)NcaHvx!iJH7p<qEdV3nQaVt!&`57k7SSan{KuqEz;*FK?#58}r7
zUrUmY$<|LJ0ETo7d>CNeY`1)MAFb8`wP*h9^lO7QN`5N|$NqHF;nR7e)O|#ANCrM`
z`2YW}-P-@Zn4kPdV8DNW`F~+I{67rC{P&ap?<fE7)Mfu^O3r^T+W+Y}`(HF_{_msm
zzi(KS$N$z2;y;fGxKg{YLs}El(`qyk8&)aJO^)H$@2vkub9cO-B-rJ?N{#!kIRqb#
zK$&+AjlpOCeXHgX?%EcXmI&KB4ngnQtMKOm8jDo#DTpBkS)adn0ZT#19@9aO$-Pn0
zhaowe-2U5!hOyaO)sxyAKbknbeOrMj$$|Zznq543i#NW7I6#7-R<m>Uhlu@3HmWZK
z0n5t5%L?Mt%7CZnC`}$d3=pw>EO?ra&vbrzTw8kzGJYfIPLFGy*2sF8I{6aPfnMnU
zPTf>o08x5=6!;}=;ycQTRp$+{8+++?(f<4`+vC!rloZTSy{ok41pkSY661jQ*TiMg
z2G%{K4O?AQ5-k`+CQnUlCm#v-{&4+POivnlOOGqZ=z-flk4KKEetsol)lpfg_U!hp
z1mwKJj%bDr!wm_lp$`4Aef#$DTTF=g^)YRbFzC+)pV?w%Ib1KQ`t7^Ki(C9j^YEj_
zd-K!G_e>3Kus>Cz{yE|1y7NK?>y9e-zRkbzRBFNc;<>Cn7Wdv~Xx;a;q4(Z)e<rre
zqh-UGJgHuyI^*^=Sy!(Qbh{$Y+26i5o6*Hn<Z49k!qGeZOwaJjl|zP#aYnBWTDN6e
zYH8x@gfKGF)0=gEqWVIXz5^$8(e<TWOUxVQ$sWtEpM&Q)6DT%R^1H{;jU0oHtKQmr
zI#)l;O3ewU#Qh8nRn@FI;K^d>^;MNQYW*=MofbN#?z?IU4wN<W?E*GKcfUoF)1K&S
z@(dp#)-;I}Hi^WgxqJ@Qdgc)NjKbS-##dzp7*g->LJHB-N>Xy=pk!5G77O7s2K}5G
z7qaQm4nSn<Pf7e(y2=bD5^pQkgg{VesPJSyLSRtY3b9Gktm)#!C%1*eYJxV*5bxGR
zPjfBhnOw8B&VmILm1_(PM)cuGS~GjWC+IQ-5JFROgf{UW$ir@K^*trmy`~}2#zW@|
zfBoG3+i>2StPd*N_&U#LIfUYmDkFPM)9r~pka1h_gGHKy17$2iVNhe<H<E?G&kw4|
z#-VozfA-_MgF&oPu+GPO1wa8S-hQN9WXb%(B=r9MJL#$^(anzdfNwEijK##T6H;GT
z*c7tpKGidNa@Bli$&Z=bl2R>?ph$a-7Zf|JuS_A1K`q8QHes2S6t4(YUS8hInGa^*
z&7gONg$1tN!=TtJcXOYfg2GMU)^A<kjaX)PT0aI(4ps$ZboTcru_S-Nv}IoEQ`FW~
zqSd25q;Zd9?IYOilE_1VKp$-vd;l*<tL_vLse;*`PL!*4TwkX3Y_3g+Ioup5&PR1y
zPjkNMIcpbD?d<kXEP%3Z-SX>OY7vR&&Pg$}oc6m?YatP){7k25*{Ig3`g1P#$uGOV
z+81p0%pSXH{>y();@b#MsoV|DK|f||JDzRbS-`X3?y^8%xS(_J-yc_=RY$bF(0y)d
zXXDkC*Uw22n(wjw`hqwj!4W$%)&^(WHW1n{Mx#Gw0Rlg<8E`WKX%!Ku(VJ&BH@W@p
zxB)?Ck4#Daq){srRW5tnU}88M{FZn1m}oW~Z~qD(H<J9#miHNY&k*g#t(kVME=EC4
zPT6Fp5@sw=gPluvm>8&52HSvRn<F+pL-Sd-Q))F=5??J-_}RZkJsr;d9UHo+5<Ik3
z<iqJJ4F-Fd1E0KH@p?x$DEdoe&tQ>&bjfW`X-mbL&H|nlRo9u<w2X2DcGhx7Yi`Dh
z=4gHs_0y~mpM_8J$Pk}JBq8z^abvKTWmp{lR-d9TQ*yK`AJL9r9uP}-LDKP7e6z@p
z<4kRw#A7UEw<xVaAUM+p@%3&c{DUE%*4z0xoWcMmY~RSpYo6fyub2bDyFZ5vi5T^y
zMYV)Wq9)zbaHf@^R|;It8n*))*$Q!1B$y1Nl*7PO!GdQ-l8h&7g$;O_vQP>+!vqBU
zXE36K(TXFA;H1H_MfZhUAwMT4gTPK_Q^<aQw}Vsv;NVcp-G1T%lxEN>zG;0SDaB&u
zw3%ZkiKw`DrB3i_nDYL9b}xgT^;5KRv`maGD_R}(yeB-WNu}ewp^{(){A|`faP7U#
zKJ9Sn?)$_Qj*R$FFeJn!1BzeoC;#-kdk`|M*OMA`{J(WqOCd3>pmRUDbQV`?pCNjL
zEqEFnmMbbMbx?M|)B!_AAJM#2maqL)w%#9w@`&viV_k!rseEuQPP-cjG7oSa>d5nb
z@+2p1q{Tc03RVR7<ic?lMhO(YE8uV0FU=^#Dvvh)G<K%FNU;1KtK8P!-d<9YY)~an
zx|Kc=Asd@b&#~cI+fqX|?WV8egc|=?W3%(a=Sa=c`QD$nM7^h{OxpHw(2{z2yFw#+
zColHDD~(D0dqoD4!ZMGqI$^OC=Re{Geik4?Gs9v;lg&~@j;fZ0CZ~hH5R`a~oDYja
zA;9HH>PbGd){8;bgEe>f?kz78oF$PP0UyH2&d*1kEo&@(jlh_KGb^JYh>i8EB1H$9
zbj)@w`pTaM+w1fW54U8Qt21~Xb$ZexTk?YJ=M@c$A>Rr70%v<3yB9fOuA2M293F|X
zX4&`$Imq>QePxsJNucO)e!lVPkq!<P^_nMM8%5*jghH5w-W(@-WZbMSx2rn8s{Y{5
zhqF#ih}Uw2(cZgWA3h+R$2&rNCKmE(6ct17+}zRyuNWI2_26rF1w`jjw7ewM9kis}
z%*V?cg8=3zIic1znM)cPte5Fh&y=>5&Q$9r&B~qTob=r$bNk!-lD`Po;oPE56`4sn
zjkee`2~MwD&vDe@o!!zKQlBLCoPP9PT4NkqASfY}s!nX(w(ZT?siGiZq2A)F2We?(
z85j(29auOF1Er8l$-BMHam%s)Ou711aNZ3E2@I|%R?T2+;=rV<a5UVd&bY|-7pv7-
zziC8Y$6s*r$cB*yo5H!;_>eaye`3#@Yd)F?D<~wnF`A#V8<~R}4(9SQYu-ukQs2AR
zVCz;FP_H?;xE7&(#T`&BTF=YO$jIqzc?9)PO((KO5VA?!)SCRG0k%@^n<1XObmdCt
z#)H$9o@}#~fq6@JxrecB>-UE{*8C`{eX#S>b1Ak6X-rxb`D9`0N6RER*)#J499p{!
zcfVD)un>q|Ej#S<vXaLC2W@W^SLM64jhcu^cc*j-0!mAlNKH@yX;4a}TSU4$m2Qw0
zkycV#N(2O?ySu+JajoyS-}hi2?Y$2F>Vo;q=f1}n*SMk+1iX-&()H)hCy$Hd?e8y8
zfN%~_<QlSVY74CcDzyCkIX0+fAyWnfqdV}GV2}>RE<SWzZ{(~$JO(d7AW}rUIc%f4
z1rX(H2#HLSC;(T$+)DXk)vQMFON7+3xb27=jlgMOs7&`|;8K~AmkwN;{CW4t)aVRa
zJDM1dBj%=dB@2sONl9iB`Qryq_?mxAXoOiSBHq0D0p4;k!Hy^Ubx_!u^Bj-1_dsgH
zazWs=xf$#paWx_KzhvX>kknJ&xQ2)SQ^W$=s0ZBKE;XG&JD_1H+;t}s6qtW9RI8eI
zpNA(}s?8kME)lBw@-E@M{na%@^3KYjG}`X=^Oe8Z-_^y#@PxaP1XZM>3p%L`@*+7!
zY#U?O*#QM^y;a1obUQ)%y>uNB)SB|iGI>$@Bnv?+M1}I_a`#hnZw41b7j^E+9HnSr
z&9|TUu5~gd2<ALa*z1$ofITm3Unwpscn3Nh?*<FZsmj#94!627*om1Hc%u>0Be2MS
z3nrM>)}`cZg=94GUv>aYcu~zkhRlz>#4mLAao1EMQDVN5y<oC_nk09gQEOdffYVz<
zkB2(&1R4ycrJP4S@in~|NozAXyyLu5m;d!H?>^k<XsAw*;2H*<ZQj%3`SBVopu2v9
z4FnhyEdNZ)f@68!3|1~xjvM+ZBI8C*;9i(%!s;^(K3Gpb5xcS;L3M!3=4f*Y4{9nz
z+Q~yiUG(q3#vR2E4lb^uol%TRU}OTqhM2)b9*bvfU`FPQ2R<pFJOnGb$%%;~FxRXe
z(15!W5b_>@hrbV2N0>oY)^9V_7&GZHxv{XoIW!6pJS<Dz64HPOzw7#O*CWfHaUtC+
znUU8Manq7iDZFhg=2q6rrOD>3+Q_%^f-<_U`L$?0xq^)fz5NXz3?m6zlth+Znwap}
zE&2h&!ga613be~`^eMQe@wBu)0BLMl$r<jxfgDb|wNafw3(#l*2O+kq+Hs@AcA*$V
zfy~ww&G0%yFzEt#0fT?>@6JvwQn;RA?-OtvPa2jh$G~!I|76x4*)s90CMtg$Bw0}i
zu*LofUQxgv5hKiRPVxYG-MW60NJm7IK0MB$n32j2J@C9^P@<e!jQ>TZung`!$lg7|
zGr*@xYv-rAYjiw<TqQx3tFOO&*GkW%Fq7)OVU|W|yhJ6sA@|?b?aN+OE0KXeWY8k(
z3M*ECGcc4Q5gK1U)ntALTX6X#<qq>@BkpBTj*>py6y94dh79KD<Fv=~%bKY+bK5X1
zDKi#8iNjwHB;r*4T2erYN<ZV{*G6f|=2;Fl@baUOP$2&P6%>iAFRSZ1(ENzS#+DA5
zwtIp&x}v;1CM&ly#({*jfQA)m;6;D-=AQ^pE@8HSm|~jB%_OVJRY9U)Fo`AsJr6^k
zl&8!d*>r1kFbmupeA6bCQQeY3!8X87B#-RPqh18>rZhgUt#jX=J$jiV=iQkk2%E9q
zodriQ8-tX?5Fj$#eMG-rPZ!yd{UoX230NU;Bq&q-8jn^*88mMK>7W~26tD+oeKA@n
z7j?{UE5Ky>ckN93m;6&%#4zJ`8^huwTs%BF0_1fB+oG|tF+%3Z*9SF>{~mwb^HLNX
zr5+RtEu+Zd_i{Rpm($Zg<q8V}i_qvK>-0zkyo8y2@i?Z+>J`enLpi==y~NOROWDXQ
zd<o#<a_KChO^;qE##k45P`l6bWj}tKhY9*Cu>7)9Iy=(^<!)Y+VJo^8D0RVT5mE>7
znCs<UY;|(VKr~B3sS?<uz+1~W4zHTi*>PdY+fiM)>(5h=ktjKl$B_aZyW4Z-KxIAK
zY!WF`ftFA0KXdJm!Mjx?3-)17ZVanE=efhZ(Tk{aYs87fBeT3c>Rr_nve%=cbsjFP
z$=a|cYE?}eJ8jpeS%u>seYsUfO2)!pXi%)a^ETvFd9*PRYr$_V$@!i_d{zyo_DFT;
zrNgo5D|kuh=e~k@7ic{4R)JA@1a}FG_U|DWSROM=HGu9_Qbq=h+j1;MRI7t(7Nbhx
z<REX9UA0;#oIMR%Q<^RAhYt^zhsc0J?*_*aT-;%bjb4lfw?S3n&y`^qpTP|O6Lc|=
zPyRDkGahw+eq-s(^xSW@GVo?PE1~kaq5U#Kx7@_GC6E%*w!w61tJYZ|a~0CZA%jNg
z?D#`wGY5SCx($|xn_<-smJK#@zEDYJXFF3SvmSZ61?)rG__OTb6D(0Spl^UaWo2~F
zvS==&_xJCwKy)`Bemw%FB@lfAH{J>+VMyC}-C+RU%WS0!8U}`H$$)hE<0%pEpB(EF
zs7BZSKvdK6#F{&5#0$BiC?a1MKRJ@{I2rlZ^tgnCAA$!zyuUkHg`l>y=-)AbTrIKX
z8tS9=YuCMu_F(1q6^jN={gt~<<ejVaD}>@Bt0stV+9%~$0b>HwR<YekZU}4O{n!)a
zU;6(H+4?WKv;Vf}iY&%uZ&r32D5rq#0L7F(>E9{--{xWezrnkgzs{8(JP;uhy$XIG
zkJ=yqb2FW&%gtR(O-+ULWbo%)O}q`s8u7$HiUt!}5)$LU4Bil6&t4J+oMi5v-@JJf
zn5>YM__?Bji<h_E!uazptrjUIB@Qm`^4gl=%a?RxCq0#e4<RKUEmh8q3@+Tw9yw_=
zR8({<EKp{}m0I(OzEhb_iM}<bZ)ph;Q4RP~mX?K+mJG9(O8hGm7#06Axjv4FKqgm6
zjAATCT(?JMTO01B4{I$Mw22^*q#$3#SB!)|ic3nZ75uj?*?5O&g|EHv6C1BOjOSz=
zA2<c4AdL2My1z1URZa{TX)s6z`nJz^K5_E%4FC7FJKef_Q%YJIf+(3t8Q|Y|qFuf+
z7%Ft(r(H#k@v<}{ZsSGD6E`pQ^j9W4S6vQ{Dj)e=W}4w1fZpKz>=wlA)YQaHe6g&F
zT#}NKf=9*t{OZ3sx592IF@mna?My(q!5YFK=%j<gfLJAm1queOQUiBYL(Uh~`vXc1
zOtK$9fdNo}D?}q<knt^!l*hsUA|n7isDgcQW-H(^^67c&)(7jtXQl8YAQpIic6NGk
z@lUE)2GB%hzqEh*FBZU>Kz8}_6HN>afg5sjd;r>5Xm(kCJpKg|e7nVP&?25fg6uZ9
z#ZJe@@?E$#XO}@ZDa#V%?|DIzdBWf`Xsp|#7(wJB<qo2oM;@y{1h2FhsrI-?0kIKK
z_=el4JkpI`f0RJ(V-<Hcndl*_ch5Xe35F}(d;~Jt1e}llmb;(mFz<rX3Z(nhft`Cl
z#7l!+Q7F=FpgpPvPJDF{a2^i86|=6kHi&@rPo5eX8JYRbrSIUgBc6Dp5eP6H17KGI
z;ZrJSw}EZ5-}(f^2s|JT0h0;&k5QidwkBX0nd!2Z2*%anE`Nd41d?3=tBEj>D3Nj*
zWIom{(Mtmw1%#_Tt9>gZEG#V4A&&_v*vx7e)lVTy6AX;ln}7;H0`wMo+YIr`4+WPR
zzmU-BRMT&X6F5S5vE?NPL%?+D0W&cs33mzDw?J0|%!eW#pn3{|nhd-PK+XXaDAB&H
zxz49>+X3mRhe#K_vaAez<ow>-aoaBs!_SJ6*8@44Ofc~|M6e6ky(+%A$IGi&?*~M8
zO!7ld$$Du0A@=2Hs>u(m5&G9xRs=0agAXP*%E3Pt(6V4kVZQa;K}z{mD`#Y+*~}gu
zHZ~+M?n21LY)4FvY=i-*YJ(nldUrv(SwWL33*7ugkyR>4b>F*I5=1^?eYV{e#>xiA
z4Nu8C;A%bo6<icB$@cXjOK1Dl&(t0mV4!)Sz1al5^hQ=zj93W=kPn}*4Mq^avb3>f
zEozSSO@wF7%fccr<^o)X@g%`Yh>2BCee@lTpo2B<V5PVLa&NTXXW^a@JUZt#?pWqn
z9jP#n1Lyw^Xp4KZLFIX}u>i=(7O*<NgwX%P)-b?7i`n3vaxxng241vWmZJ|MQA7{_
zHgOxv$ANla3U{F^0TRaYX4=A-{`0D9f(h;sSd#)4BHrP}{mC3WTO;N50NfqS2@S2H
z$F6@%0fw?ufAw<sAf8AK!+T<)H;h8id3lh(LKtj-!KF}40Fdg}z?H3S1<D6Fgq1+L
z5I5h^$i|;4I!|Q^4#W@ji&skHVrkr-Mvc%l9N!06acOg^VQ306H)EMp+<tws8p;{S
zjv1-49iFIbU_kc<7F9g=+zRlzAdBl!`=86}_h&T_KtSRoAF#1J^Z|y2z6!8DkhejF
z2KlP<^2WvJ_wPEs80hG`q}K-n=xKiyo_MT|-_pi^d5*IAw4=WU71jUUdw+Qx*8q02
z)w&P40dniAJXH!c_;`359$e$vj}6jWbNif14<<?+v0b0K_}z@nI`sJ6*KOiy?3pDx
ziIsBJ)zedZzeX@)XVq#x>2;HzXx500o!!UO{H+PsjSMtKjAHGoYe103b9HsK0{%T|
zy~l;fboDX4eM%PGKMoH2V3d(~zka7j>rhQp$^dY_$*<OiijM;$kpefKR8!yq!5mvD
z74&u$#9g_2P8c*m(8W<vi2zs1@$N+DSNk`-{w{1x8uTW6VNr>6b*obfIeiBCfxo{<
zefPndpm&774-<<#9>fU4lUB(`o2Wa{1GkX(=#qJeBCSfD9cXiU!%?1oI^-49I$tfn
zKjD5LJkE|z{8N;L#jNKe78d!#!{e2U<_86Dm*R9|LBh8Lq$geXy$bv(;MYY)M}Lfr
zOiv)A2fZe$YdkkQyCo=xU;=~j9IF*nzNbLIHv9`WeH4SD^L)Zfu$ToFTY#wWhOVmG
zGa7)6XlZf3f43a|G_pCUreqe9a!-F2Fg=mu#rsCry<0;mf{Iu_Jk%fT6)is8Y&v3K
zXiZBK>$hYP5+1*WxeD(3qELQV@T)Rpun3H(;oXntHqJLwrkD*Zx<bxthEM6bw_E{S
zuyJ;8AD^@1l`@|@4U^y}HfGgO;c@ZSo`L+nNmq$Joq?et7ig+42=YY~u3y)3b#Yny
zQ<VYnyoqa&Tm=alHv6l?5$s^gq>O@&iP@@j9aI$EJw59q<!vy=JYZ#AVI(k(g;cKU
znwp@|e4PF-)Z8~t4{72S5aWdOQSF}!6_`4nJ`)!&tEnl-y|H=<l@85^R``WZd$xbB
zL3#!tA)kQQ2w~p59_vF?jz;N;>QDC#ZU`lGAy)XVkBsm`32u3+#nBu2gp~jxuoM&&
zrj-A?()V<JWem4MEc3fn{qvtd@&rzFzi=nqfY+~GlkD5`egL3QQxletxA);uh099e
z0}weTM?~lYor_=CCMhOH-Lz2OMN3O-PmTQc)5CiNuAV^(Gd642VkWHz;X7*jCK4VQ
z8R~%tdmpKxAKmH(IH92qC|%y*r675H@4*9Bk^cVv^yYxVLIp(}Bc|7{Ujtj#>0tao
znG8f1(~K!yL&9gkE_K;;G62>(fRJ#@OXH)Xp{X_mKF*3kk?JGJtge^o=0UYTxDs>g
zml1I;1}$WjwM)iCkhZ;FU9-G_eD!%PK+pbjJR+FE!=s`6rP9S#+h}HH=2KmF`_n^f
z)w+Wu#|dcay<UAIMs2?rEpI$DgfbL<d!V2D@}H~l1KDzQZ&-JLlpkzX`$~q=b)@%d
z_t^jz77$#P1KL(c2QK0^7nk+HhD<>U!`-_`dwFc+q4NTZ3c5XvX)=b|v&6bTgW&{?
zP=Nu{Q^U9Kyq^l%E&5PqXe(rzn!>1;Mn*<%-ns=z*w5PhwkI#%g5Sa-P~ZtXm<0t-
z>JCH>w>x{K=BP`JjEp|NnhKhNA^?G?A(X=M%06Ipw+STzLPm><6oIZrO!;>DPZg?y
z!X3Z`0A)9S0tBy%PR@b}=a+oGkRD%S&~jnY6~DT^&H#HD|6Gwqt_BEVQcZZ86-O~-
z<8*R}ZFUcjv`pN8b-2v<&Z!(tNi$aqq|Vq47YRcRI9V+};;h{~g+Af@(6BHxt1Dqg
zEWq^VJ8&Yg21To>Q%7_=WLe=ORKP$QzR<zlr6^k3bmdWD=k3)@xeTy$b(-tg>u0H3
zS|WiM`L~NdJs*1^Uyi*Pd{1y>u(iQYzuGj`=0{EGK|R#FIgE`-{ty!4DEjZQco)}h
z_d`Er|F{9PD+|f4J)H#!%H!9-0d!%$>*&qT)Ewowll`#^$N~UyQ+gaALO^@$1;-0^
z?ZY~rvXYWFU^Gj_A^Ep_Wvo&OR5ZLFKw~l4{oz51yMr&d%DBvebO;9U<k;9z5U%H>
zB(vCKWU?5pfAzQ!+nLt^81Sp@!v6A*lp{{v+p}X}6b3JW)1&L2%QeHsAaWHZ8wv6E
zK#dHX10@wfar#ZR&fZ?Dj%eoWYzC&2X?6$`Bsc#J#vnP#q)epuL`5e<$SNyeO?e#>
zQNGpYh|~Rw9TOe>=Tm}AfIHXR0ufL;`IvGQ-@G9cyL?JSm^sjU<Kn4(Dr6@!d9eLZ
zyr-k%^`GBqD6HPTr+-ph&{W>!M5DaycCo8tKmm%kXPo>;dST%gY05n2^Ldnprlw2F
z%Pt_b00Ox2%a=s>__8xx&vkT?m6M2ALcnr_&ZY(2Afn~x!bCa5<D=8*KpwUYJmGSa
zy8HwbF1p4A@7pt_UqNyR0v^lh=G)B7%nEVm+zzYHAfFd3ML;ltZVN%zJcnKPm4ec>
zC}!p9SAnSO-9>Ug8%!LFb<PB7sUj(LS`MM@O-RJl{IdFVkN}4w0t-p=95t895iu}&
z_RRI=%a?u17^J&KlFcp9UD7c!GBC{GOeXrt4D7FY1u6v#>qB+x>nrUQ6;-@EdUd{r
zqU1$%7@&~`USojoEh}xbroFq^w1;)u@_jz<Q9UQ!c4FoqnTEHKlYhQmnvr2>V-v^(
zTJx7W9%sCdgZ0r<RpX+fyry7B=`DOis!-66+U$HqcSDbwlauQ98c=HU12}Jj|M4v%
zpD6HPOYeFGC-e1dhQ5zy;Er$|1$}dut)mFefM%Id0OD98GWz{1Fd4|m2&#S(F@b5o
z!p$<B_3AfxW}lsDO^*cxH_NO!?k$IC6rLvX+72H((ZlfueV@c^z1@=h2fnNCktcPz
zSegamvv1z?$t8dIkSBFaF@w*a$6qM8lG7bC-FI-4aeaC^^5e(gz!Vc^PPn8XI=K2}
zbmttJR8iDG1{E%N(vHVtDza<t-cKfMD9^NGSODu*TiclZeFx|vh)IZu{OrRS9^p&A
zX0{B7FLT_`=`SfT?=w>%P=M6)wiP}0o8r2<lW_dr9?d;{<|hKz;_B}-6G6=U=L<bj
zaJ>!p^-=0}Lnz;7nvWk<=Z_z&fB2ylUT?_(&ha)xA^_gFv@-Umu~Gc;%R0;Az%_Zf
z(A>rdpIGx*e5X<N-rgZegk)Y<XS<4#u`x7i)ELui!<9PHTTJo-#-E#Yq*W>;%s?(i
z+F=KZH<?s$wtsLf&CgFzrzOX0kWn$uzLYuNqqS9<iAm1*QTK!<G_!TO9xv*ljn;4S
zHSGat)(2Y7y50Us6$A)gMxmXQRN?KXVP{tq4hhxKRcU{$q!i~nFmNB6BC9|&Na7CC
zUu3)e?IF|K6H9_d#(e+uG&C$x`22UlN(O>7-CBd&q0KqF-}|`vWv$+KCAd<=&XjEp
zEU>^`*3+{PE<m_a?z`+N|2xBRcB>(c)aj{JRU`)bnwltRxA*pR@Kvwy@$x#@ls(YM
z8`)01XF(l(jPE`d6ZiQEiPQ^BPPvy+gnqw)8jUp20L>0SZ);OcQ?hFF^Yh~B{t{wX
zmf4w^@=po!7aDVXqbpnwl3}8O8-z{!YYANaA|exqk5%~Gps^CUIJHGAL!{<Vc`DmV
zDs5oTg%G=?5jdTRo^Bd~z9Isbj*fGEwBm&7!l}EXqx!J!7S40Xv-=5rZ8igFHk~v_
z7vBALKG{zKi51MtxD_1`QQ7y7rnIfK73>N!Wc`zBoo##X5T$FsNHXS5FnRv0Go0o+
zA=@*EEh~&=cfYK%L%OQujS*?EZ4C*rhT%(sK!r+ft5-Iw&oEt@<UCrXS=62j`+9W^
zu@9*CKYm<=doyq2Ap}3h@2Wxu_S@s7oP&vzD+wh|SHKvvF_K<kq3Z~nOc9niT9uf}
zOqA+4DhKc<v^Mi(R;Oz6@34t~&;N+XNO9xF8Ys}(+1(`<u=@cN0=lRKupoS#Bp{Vr
zh7=))9P0IGS=Hs~XhV@G@uhO-A<|8*sX6&<+8eze>gKLR{_qWOZo;BQog@E?1#E9e
zAKu76W+18f6Q#5d{#IDxCm@8{{0wIR<l`bBoP&7d&wOtYI9VUC(T0vHH|kHSfgews
zj`FBOs=wXk;cvoxyaP%1yDbfxxHsuTqUE#hg`-Wz>!dID4y;0CDGcG#ztzHqs~eT?
zh*OJn;JPv~M`&}jHEX_fHSp@}il*~^^_KO}NV%myk%HB0Fu!-Yth`+1gkwV7JtjOH
z9JyHYbu=}lqZoXbywO&m4`5-rs)fmS+roQkX<MF8N|FGNf&%Vcu=>=QGQang4sVEU
zy#=A|uIPp9HT$h&<Dr>)e`jtemw+tuotqMQy-K_krr4QL3VTltD!C4^A^P;QbZq=w
z=6!b`N;Y=(o5)@aCq_+TJ)-oO<TkQ}r=>LuNA_IG%H7?(zn9vwzSENSJpYQUZj$OD
zp5f?CqocHpGAdaK*dc~E&%%)ph?Z6&cZzI4txn&-V0!TtV;s@AfHVSQ5Tz8AO%{2X
z;6%`D{!T<kQR$wTkiPs6Diq(<qyvz5r#~qZiumRKNjgekPB1R=ub<_;og}EcI{gB}
z-jMp=WC3^U^XDV5hj(^9>hj)0=}*ne3xLQO@C7gB>J4QR>%P?psy(nqw7GczcUYEc
zK-IrqagO@j_$AR^bZ8fH@f(#;mW{Cb+o{g7V`GDFZG9VjEaB=twW%Oxqkm~^e74<L
z2F`>_rjH+k<HoJMge@>4$ji$+ew>h;%u$gNAMdn0XsRN3y5ZsB-vOWCD}XJbx3_n8
zfK2u}x8?HFl3tTAG0|}N(%6#4b<HawA=oob<a=en2L2>ly{=nlLV``KM+I@2Mc^a?
zlx8m`!oC7j1Y9EcA&H6mf5muEw6(R7N?p?6)6@6Rf}<fH5I0jEU;KvxI|ql^y3mye
zZViXA@NqXo?&Fzp&pKG?d(zghn>~knVmV@KYpX3R<ws|yt-bx)ufi43YfzArySvqH
z^#h{~COQzBibD-2BZCa<Vx3xIpBo#itHD2p;abQ{1?<J3gU|9Bj7ZSlQ6o;+O&T25
zTmTUGxeB+InyM-eGY$@zyThgPce?+EqCOzn^@N0knydjM;DZL+<(Fn=;CZPeC|EN)
z8;!>p3QyM6^#RtMJ54-^otB`BQdI?cY21Bo?my!nzL*Y3Yo^1rWD+;p_MzH&hcI>w
zj8msYnV|(TBs?Y6H#Hr}QL+M80>neuVEa~6#e!{NelqTwo`U6YQIf_T&;-jWD8R*X
zk}9S|p!)|}V921@+1}pL2X(fgWkx#3+^kXO-1Eb4U~Q2S8ylK+ctYgPEV~NDyvffi
ztP||1k#8oi9@JY?Q<7YY+h$<;XfZPr)z#e%o(nhgh@tToX5rzPZS+B%<=Ok;?d{E&
zyvPp|!5?iY1A|CEzXceUxpdMVweVd}xXY;&5FVSH{Pt)&CQZU`cV!qWAS?As2!V-F
zCd~L2&HhuUf#5#`b{J^r=&Qd=uj@n-T7yjk?2>ub=jUCvXPJY=%we{KQON>SFaZnt
z42+DhY78aiEdygRS$SgHSy?C0_DP3PhU9=T&QDE_Ul@ik|3=J#a&=H)cW<xGzF;wg
zdV}T@xI$g)radFnHISDNOi2+n+1fVqB@g2I@eQDWRsmuX5`D|8_Hc3dMuKw0h#$U5
zjf#qjMyVk5dycJf3xib1=tnqI<|(z7QChrdLrGE)59vWM+RCHlGC)p&)3!}E&<5Ip
zp#idv4!)bZhedytl~v&v3K^!`@L}s#UAb(o$?s$bN=+>-=&8vdo}H3__%{j(0}BgU
zA3du=Xf<IORmXFvU=sWa!X!3y$sI=A_&))q4E)vgg9%Jl1O!m>*oaJ3)0pao?$UZ(
zXb^wP5D2ERodz#YyokI*HYTa;oR`$pX<z-k8R9y(csMxL0gCN6i~g#OU{jeK&^7>n
z_iNX+46m>TZw6Qvm=0vqbKo3x|N4dE%*nt&m~y3+di=%LH&YN)zczYPPV@=DIYcUI
zDLZ-<gmK~6VY1HPiVfN+|MblSmWr_3oBjv>OIum8TBp!g+_^&qhI{P1yaZ_~Nm9t`
zjg*?4dTyS@`s>|Xn(q%nH<CP+yEk7HL&HJ%T>|F+WYDYafQyYRLr+hb*_OXPQ?ov4
z_ap!6*khwk>5#x*XmS?d#_i7$8j9)9L(g$%tMy0jD-NObo2HqADQq?r4m;E3@d*iO
z2EOd@b+|)bac^%gk<<k_{uxbG72xq-wfCy?;&QV!e`a{%Ru;f_n8I(1!p>v4%n%|*
z!Anhjg{pJD`$HBYTY1*tIXxk9#VdBql`!?FUk&yvj{tw(igPVIHCE?kgkQBBdEJ|R
zd-KSj#pkgJ3-UAd2nN04cB7WGgp+|!FP1jit^6Ko<PsK!wd~!0gSg&y0ka+j`u#oa
zo}M1CYiyOppHmjV%NLP~pn+*@{Li1VvcPHj$Yc!_q;hQ85kHKW!`dCO;C6oGo|BzT
z&%p2nAY9vpC%LKy6w1dt`>!YRV?>vo{DWHJw5D<U{Hqs~*!{B;wTKNU`{NoKQe5U>
zn=re)JX-z|3n4ks-+!;Qx3?JlVxa8?l{fRmwTZ6+>t?2ZzH*tpd**za5KnA)CbguD
zkX&t!e*2bPy?eV0sSY+v%`{{eDpTt7MVb71JVu0&I-mjZ`4L=PKFc%vySu+ZFjwX$
z&<}5Bb6Z<lcrJes%q#^OSD6@T>7Z7j4LOIQMgcV565P*z>&1(44sCzPisdm2?$<`O
zhn!|f?2cZ}#i5k|+^0yBKe!Gc20AhswzQyNhbYUN`bc%(GYKJR_sC{qI)pO0B^e6m
z%pzm`Ckd2g0Zx<&P(W@=;1(FXO0Z-O2AJT>D=pm`8!MIcQ*Ugn+MaA8FCn4p`*$vZ
z>f9B?<FI&_!%gJtZC;^gW)^5O2XEi;frqO3b5w7|#IF`(Uoec-+0p?ANw<Sr6x<E5
zN56NNJDf@&PxTcpEFPoN{UK837<rYJ64Ypnp#_0hR9!iF`TQugzB9)C_3`0q`zvU6
z#M0lD3zmHZK4_TUv6oUCP>o`5eD>@aalS_)UC@J|7)kK~F3-?_3JZ|J!Y?#kyb|mb
zpnWjRg{7diHqGuIIq{V=k%f)z=Z?$b>8TqXLEm5cyLW49Y69iIIRtIoyejxV0k^Fa
zigTY&zk5&rL<E>=D6X~iYj17I{n;X;wy@{m2w|;lA3{OGVEGve^b{j<7{EAQQUiM&
zXJ_a539$Vm)fI{%z>*T^r=~_T%leM{VMtSMd_iZ~Nk%q@DcmfCM}wI!o17gr>7^4X
z2^ewp9~2mgY9iYr$-8;%BUgsXuU<#_n?r#p+Pxiq9QB(0nPvDB!0ROG5%o8b<(rn)
zeXwW;MP--Ag7mVd;ZB9x=<O}(o(;$f3}pC29IUK@TwHmFhabtMoDQwK$$ZJ65qK{i
z!J7MI%Et)#vm{-ZnV0}|+PK(BvBIwI_~<l{O#uK5;m~xWPcERQ@=Y-BK_2WzOOEp<
zwF&U70s`98JKPS&rvc}>Edh}M-$%-E-se+ZzeJ%UbbvpyzW9m?`>*a;SqG%tm%Ogd
zF&*h&5WP48GGcXKKo5W*VdVTYxyz*<IG3NK4tVVKFKYPq_xYx#7@<@7L<u#u)L|_f
z49s9ygm{}Yr4&j{3Q-8EfeeF;Uf~B)uux~`;=1kA{Ncd{)SH{PDoOZlO2DE@T)e;0
zC+KC58!2bnr{Q#;gXVw?^@AsZV8n9tyj&-IzPq>gVt3$XyfNV8aD&u9;vuZcC!A&o
zmWJ*Sae&#mGDn=B&rQJT9^vm5>kO_6Zglb8zpqtpVmQ+pDxU>3p>pm7;Ga#TrLAR>
zK;3Ep15hCsCmwL|I9VQAneTE|TUm?#I@+%Q@GO#yW4{vW=chGUuXK2HBoAStcwocg
z7ry|GYNdv+7JBqG3%qlH40Aja7P3*hL&}l>Y^Lw=SfZyecTd4sc|)B<1NE}Q?TC%a
z@DHr+FM9DvPw$bP9UE@waTZLyA#HIwE)LE9V(|5Wc(rUk7*ILMMv@1wy){VL;9EXg
zAozjctOs)bZUEDkTuwZ+SSChBz}g`GZZnum1K1`&@E9}Kub*v<yT0>h>ZT;H=VfIj
zvv1g%k%2BY<8=UffFw&GhwkGByQNV`p>o+@b@}@(0wnr*A7a)UkYLK2p!f&&%U|ca
zg&|%mEIJx76l@9)pro?WeZ4Bra`Xm(b!msj;aP=Wj5=dq=;%;Bi^^6UkL5UH7pY%#
z>Fj!ZlrGf(POZ?&-o8qZf)ZO)Aumo~eV==l_?y|STa{9(Qi38P-8a?g|NB6E6UlIs
zf)w!3PmU@cWs(SeZP>+Sd665*Yq=cQP&t`wY-yR5e8+j|U~*V=r|X8*hKVLddcN;t
zV?#swaRN3To<+!$T7C)($Jw<tAJ6D$9()w8zkl^MR>n>NVI5qT?5lW>liNdMtRHg^
zg@E7D@qwvM^f@@+hVJ(@4i!B3Y4Plt|F8biKM<^-_ibR{49-rCBNg-)9|i0&6~t69
zpX0E8OinJfnoP4Pba?cr^X*ykw<|U#78YQR4m%<rlL!PjT?P;@&CJB4=$4odzr8D=
zf_CecU@aZni?h(&<q~mO<Z(rOf%Wh4u?w>GH1BH^6gu^;{ybD+ek-${fc4xFmePO+
z@7<0C^aWzYo+~TsK_-%d1zzbg>`ve?9nZz7%Y=S>H1*^xvcMeA^opF)i)@J^K}QbU
zPIV?5E<-;|8hXC5OgY0n{*SU6^bQWo%g2lLlRxYg6Cb`bAyoA0V4TQsIm4Nd<bSGF
zp1QEIf=BTJ(ThkrT=oJZ%!31~h>suN2NtAiz9SGv9`1B*K;mh~{%$PxiMk3v7<{Z<
z2<+CCP*A=ISWmNY_rro8&Z=ghZT!S!gR#-<-1(WBipPMNTAH%kPIo#CUtMI_e<9S#
z@nGG3uRt?yO)i{$xNr<C>d!JWjRXa?^1PpYoUf(lRa@qHM$)~cpnYq+pb#@Xoym-J
zVQ$Wl`oYrx`D~Zk$0mV~wXz<3qdw!pzMKnVu4akex^*&Au8RnJUhmeuG_a8Q$lm}6
z0*vQqXlP&nX9JGvICLobZeZ;M?j5HyVMw=w<)^wyiwaSF|HT5BlMM5Gj{)2{{!?Y8
zpbr+yNybG$-hK{%UPMHkvOa5}&@+<c<aHI5rxCw0nf!U#L_*ewq(fBPITp`O`c!kW
zlam!U{v7Rm?sq+)1m9SQR+d%5!;SpFYuolnRW&fxtnEMZZO5DA-6Jq*8T<XL-~v1`
zh;giMR}_Exw90RL?uG52{@l!r^n7p_8yt{no+~DBbI{S*o*i3iTBbMqu_Q#lS2hxK
z-u@(F{{E}aBd4`d#cuP>k4a>0&CO7O_nv<u@Zu{y2Mdn2EQO~)iLhJOzU?^tvkr0{
z0ku3mJuQC;9Q5?}USomjjV5FWUf61|#yHCcgVX%tAT$0<#BBft4p#Z!y=Uytn4gAK
zVDQhNUc!|8)cj_&e+7ag_Z9SDawF1(_U0bmbr6tHQW6e1ca{)3y*AoSJX!QYFO2d9
zPmZJr;8$Cd?v=mW+6vrHsP~-U;5|NSA%a5${y0RWq?yj^#-_?qlB(j&N;~9(U|se}
z`>1Wqs`qR`RF^R39iOh7^{D4{nJ=%$*QTcUTy}o~WxR+No;{_|p`05gGjkraH@Tr-
zES9_?An&AC=)OKwxWj1W*=9djJDz1OrMz`H?TEQJX}CBc-5Y`dt=eVJ#nkQ5yA(ga
z6A0xNuv`2FE-|S2+##D1@2Sngad9KZ$64*IG)_^UDl4ZdGxZP5#aIOTvp}Q+bgYnz
z`v)jnDyBpoi_H`Xxh6w{I&9qpR4GQe6jT_<Y2(B+iAa+HzgziMd1d9$&YB^tBHTwB
zJT^ipBr0@NnQUMeC^?sUoKrus(Hw9e4t1j70fkD>khB!O)ZjE{``mLtAeJYL2bERW
zwrnL3-w&q;p5lHHAc|`xn3y&5LgG4~{+$4ILd*^o4!k+WsDuuq;~ruP3fC!d{OKr-
zDpl1Z@IDahg1vx*aqn=Y^W(>V&d;WD2V)*)tq*DFQsqkR_>w2eEA(+EJXR(saH9S+
zd%Hu@SJlyDlm?DHOPqSaFMuB&!!7Ro7;zOVEE~)pAoS~7zIr>VeWBI~m{cn(*J-Rj
zf;KKbsqhgqzi7j|gm5$R{#4jf0Y;LQRrOto5ji5{tDhhB#z_*a^k-c^zrjm9hwAO`
z!Osu*ys-e-Bqg!Gjny;uH6!O!$l~T?l!=IrHnX%e*4J<CjzmI2vP#D&;^Yo5jpt?;
z7HYooaBResNvhx4>g{^$D{5{I(bjf|5?Hjv-@YucyJ^GB4yu;-I5{UrMgmO3%@{2b
zev52<xcNmrx$80V7S6<~yGE1G0Y5&&Q0iEbHvb7Gro(Ry=j&?78;{mKngUgQPRu7J
zhThx@aiY)K@+FWxR!SWCXX)Ha1gJ3`ZeSBDh9J_@Y9Z`=^zUZRE(?15u!Mt&DK}j!
z37drci@HTAx;OI2NgA_ch%-^B&-77`^MT7U2RFAWwmQ8<!Sb5MKlp2DHy<1A`qB9b
z)#le%ePQo&1GzBZii=2-lxaKP9ViBW4ZzAYNOxd82xn60)z2v6iOP+8`IICi3Fqha
z@YTd+gVRSwVIhRgxMwYS9Gg0S;46f+{+s2&5r6+qb}biZ3cfxqeqHD4IIR5>k{hAM
z;1I?AU0l59v>63osKQJ}dJ#aZ=mmYXRWCOtgx%af7~V}3uw|HTA<B^(Se<aEW@dJt
zZtlB%TMqiH)^ENTV*s)xyS~nMq380ftQ`Ik;RUymg6-P4>*DFr52(bjGlL6wWQ3s5
zO;fWK_Mau(u<d@fAmZ+_nXI!HuTvMS@yyI@d3mTIZhv{Bq4@ia%N<HCp{=9ieO_Lv
zH<8I;84cPUwk+Nog^-j1Ml!}7(WU(Sfp8fle<)}^Bo|Vd&DZ+T(Gl6YFh37k!4pWW
z$72Xa$9!E-6%7ZL>g}`9vaF5O5l)9i?Dt&(;Q?F70{g{+_u80kucEcJX_?a&+Fj{9
zW}X6mR|khs<#FmO_hG=b`u0x5>(;@rc02TDkl^Ju)kqH$LjPfgjMDzfuz72++_Omt
z>z02}adEt2CS+hBDf!sz0c-Ag{%EL#<JzdOVJjr$mKN9Xktyjq&&|Q;vXoU^e|$Xd
zIH^@;v<2I_OVm|`9hy0}b?qBwF2o`p=d>(Vu;z3<+@x8y@pljtv%ELa**SA@zG2>+
z1KTvaO7M@l0U<ht5ljP9%2nWKm&*mQ8h*ZC$}1{xq)OM6bDpfhA}c_j4PU(;V%C9H
zCVoI0K9|V5gPlK+&GQsDrU_zyV4(=UKj2mDG2fMw<zhIHU1U4&=5n(CLRZ&nkQhp4
zFxR2$$=Y++jl5qj&d2bEy>d`M06#dkT%&pW860Cs>9)LXyfyg#!+A%fPZWbCrUM{E
zLMkg$Q_%L<LWl(V$)VF7<k6v(kf4@y6DKzR^ZR!DJvO!*bT}X1_^&JsiziAmL^-><
z3OiwE2x8MdCRFnJJ3s%v_5ex+4H`5W;&RHQ!0C9r&_gj8b#zh*o~@sm6rvcyo}j^4
z##Rk^6vX~vO3hdKCLjj_@*Ss{7^JD;V>Q7G1)^HbNAGlDDVxlx*`R(@coXO5Rwa-J
z!Qalv#6%Bipvu|62Exr3Rik1htAlw8TU)?Ony9qu?c{9GR#t{3vcu&v$mkVhx5=6V
zryVwE<FF(H>rKYMo_+)^TSDTwvt&q_pPgAQp|Icsr@5E}h@+}~Lu0noKdGE_GB%k_
z*N~Q&J~Aarn1+~NZt$OGJ#unWp@Z+ewKa@`c4e}`F^ZuF^tOv~cl+@ed%#M{95$x8
zwAIyoI0z;6wz~OJ96Ag@?oK~g)qh7iFikDhxmI>}b?sU;gO6K(R#5+&XV2Qiypo}!
z(4of_Tux`{flEJWW<fD%V!}Q66L{fLeWtM-kg}5d*V**}UVha5jma>unJ#A%2<oQg
z;(9J@1(={nkTMfK@OQQt<6d@uIG6)jB0vFe935*MIZ1uQOcSBe0Y$1pkgS{>D-%=r
za!7kSJ*T)i{Zwm+7HTExN8+$+)T42&tTADcFQ0@qc6Q=<yh0uy0HP_m48l`g^792^
z0)m49)*;%2DXt1Ais{HT>Det0;%@_BPG<f@&BP1n65UiyVdTGl@%5L$KH4P_G7=mY
zf94r0TsZHX7g7Qaf8N1bu32HWHZw3yb#chJ&tWRWfMgcH1kyAzV%+F0mtVJjAtaOt
zp_1}-Y59{sAO?1P{6mE~5p;w>za8lT=~Zd+Ud5+Mc{ANia#z9>9aC9CVhjKedKwy)
zv>#x?Muo|o)nfweBnbTS)YLV}b_21JzmD-2kEQ-0a2;R$?nO-gW?Cf=G5Q<-MJ@OZ
zE`rH#_%y5nU_Y1l^h(f=_V$swlPiSQ=Wa%Jb`}BMW<^G@M}wFkxUKnVQ_S3cCi0T0
zs;ZVsA{ZuJttfrV%gSIyh9yqT@I+CuDa8(h1_hiqlcJ+P8OATC=jUVR3x<8q)<`hj
zb=;Xp2FO4{@E|hB1RD%JLy5V_gW`Eix8YOhx>`DDX#6@oN|{<n0K7`?7{<XHjo^{q
zl`ITle)UjPa2b;CFL(hvllsB_(m>nfBmkf$&HgIjC46zz+rX*)b#v6bc;;yotfDW^
zvzZ=1;W+!)A4e<hAi~HWyl#fDn)=giS8_SXClNaMgTK^+K_Tc1v73%_9T(uHyti`T
zEs~>+a^q0H2$Tp{Td>F}MfVV*gNu?X#@sw~67_CJq>{WmU~~5qpf7{k^6~+H9IpuR
zgAJ@U79XFRbkecE%UtMHw&0pe5OI$L{T|cuhG8>|?4lQ^HMO-u5GVp%8h!x*z0-KE
zCO(VbUmVs<&@<*Jg#(Mm#Cf?{mgVC(^h3x5WBAx|G0nUuDeY>5b?=mn!<2(WlL9-s
zyDfipY3)S!fhVbm)0^SJK?DNT%mqj+FTQRzEOUVmDQpK<$7?D}GXQ}Hk<AWxX1VQ;
zoC5z8ol@wo(5W(*Ycfa#V5O~tk$*0$rk0^2X@$iIC$XsQ{7%E!7Z!oz`nozulFk7z
zumTFcTJ~ee;+p{%b!jOn&F2JX9Pd?W(0p-l7H$r`?(4G#T2^aoYjv^b6It1!E?;)a
z4eI{~#jK<OGTUdUF1Q_!`rpVf<Ui-FAX2bxX=98rZ@XBltZ@3sWBU1*(-7J$u-FNy
z!bbI~CWuVLPN6?#7a?NtR1F`vTZiMm%o>l*POWNI5iC#LO2=dtDpL-;pIi*HFTu=1
zSv~!}D>wcZb~ZyQemb$)$*BN)`K^`W&X$=c#w;IE6b4}R>_(fu7^%xhMV0dP>qB$}
z#thn9@>B!xOgDj3q`oAn_L!l2?6avFY{xUj&|O`L?A2KSqW2F^2oHbvK8<Gt)@>?!
zlHRfHMwbl%X)wTJt_SJ8NkQ?vD?Zc3)2X#iq|vQGHjQl1z0ubrgfQMCp5Px>SXk+b
zcmA+ZRaYw*nZ`5EuJ8BF>&e@GbU5@>mkKz=XUFzTw}IYAWC+nUA^s35oeNtq`2$8C
z)b2CIq{yrf_5u$d${GqdtiBVq=dbCySD5_51vJU{TZ=YYm)ps76r+ptO#rTdZ#>wP
zkw={`lh21;q;qysvr!MN1*7<oL{UM(owwh@k8etmHY+f7hfs+=LBMBAXMLUGx?V-d
z9{75eHtuEG>5J(wR(cSGRJk5-{L(!hq2uQt`St79-wH)!&CH)`4JKjmU(U#9-vBp7
zU}4fPbN>Y!^3Ao%FpkrvAD|~c*tp2dl^1rgJJ{Mv;F=kM!meHCV!1q+1ABFZBabG7
zx4QQ?=wOau$p%aekLiF3!&Zd88$I$TK=-Roh6>9)JNzriv<?xn^1$CCBjA6o!VrZ)
zeDB`fySo6DuxhZyx%3RlKvw~@(ml9A_4O%E_FVf11`NNyFaEbXR;g2_s0+>q?ZEuP
zf<lh9M!7`{{M#TjIXOA5`}d=cNwY@7>Vk23$ybe|bBhYJ>Vj3zzUfHws>^U@m;ue4
zfVWvy3K5-=k@0VnoUi*^itTcVssnb1)_cnsDtDM-IzD}}=;q3G&d$oZlWvp$>)&Lm
zLJ^aa0>YcoQp2EXvhHqm2F4uO8Fn@{`5Ie20)EhxXDg0TiQt0|GciwYZkY6^%jrnc
z?!MgDlK)}>4h}9ya|<1{_tWN&6-ar_X6NT=bEowGt({rMs%&wjfh|<I-?j<m-{Vj}
z&(6y1hLpK^0if<+zbJ(Wf)=$ao-51Ru<dB4VQsiL?y-pr%>3WJX#iyw3E}}S01A7>
zI$`GCaP5c0s;VOys=6%0Sg5FX>9f3jzu*zrPl-nt7FJYN#-)x*7C-W*LRa=Gsu|W+
z^=h<?fr%(zT(Wr%R<fC6Y6>Dpv%0x0G}t-~Z_R-NyuZJ1IfmlT;wzD~yNeEjUjUSh
z!07ZDz-A!bS{o`5`~^C-*1SAZ&2lgp>6@77>FiW9Kdp7%h<&brsIi`LKn%uo+-Qtq
z>~(VDF{b`x*)ehLjRhoSXCmek654O56#7{bXtCW#;sGSeP{QC;!<_B56&Id&?HZsA
zZpGSSrW|_Ri6LM=4_`f#KTvqe0YE7&-2x_z%qs)|t}C>VEZt7CKLR#4@qp(RZ?gJZ
zzo$p)Y$_+q7`#B2K<5jS0<0q!2Xg#=sbD0d+^l#}z59TT2R6AtWt8=5Z_kr;f7T2-
zs|lAC^+I0Bv!87_&RdV3(IO~ROeF=K8sMG>3T9(>w=uv1ObXLO{{dukrGZ%tu_Kba
zWvQvqioW{$t^SZ4Mt{JJgsi6*G048~^YcRqL)e$!A!MtzU7*YckAf~Tt6BqNV-l(q
z&^U<9J_e#K4E2JJn0N@hjzxs@=s7UOfE4*Ym*X3Zj2c1{F35?Lg_BOA2*IKf$7*?v
z+%x{ehXNEEOmbA2eb@aF<{wTr&cDF$zp}J6ncvn7tktoJR9@ocpPPm!qM$FHEf@5H
zVh}P<YX*CY8;V-#B4?o_g5j~-*7V$TC%mHf$_!Lh<#lvKt{JJSa-(2lT5s+guXrFQ
zftc_FW*Ilj@llWM*-|Ecj^|~#bWn0g$^U3DM0I~W;whugkIwanCQB*)p4sjq4M5I+
zs_iS4TTDK+_9UIaFL2-KjYqc$C}}*gXsEwYu~V-YFb5HynLz-i`*CJTiQbJTnHnlu
z!aPhWor~%;kk|#GO`pGf8EnXYjG%+=2bvh*7ssQ(llbutf+n{7Wz|mU2Rk716-b-=
zQA#2-A*K_5Y=K<bzgh3j2nLffA*Ap12N$6gQZbY8VHXi;@9Ps`%EiFcRQ6G0*~wf|
zF#@afH!!VS4kxIwEph%I2}wsWJs@_Mi62({kj>E#V9zoP7q(?Tekk0+#E;oi7MDbe
zDVqakYpF>8jTE=-ESG7Rrj&`JeN|i~Wt-k5B!Go3hq#mNo06T)SBc5VQ^36q<PdXv
z$G6bsd>s!}Jp{kX`bW6TZETe<&+lUu+B;aAz9$qC`jbhh>?z6i@t*$O30QSLef##R
zYVPNsqY@E}9MVBG%(TxZm>QIcy#pfNlo9HLriawrdq7a(nVb_$s`V^BD?2+QnbqHn
z%OdNy#>%cGk_nSb7>UWw!%6M^VDc3Ed2VXzH=r;_6ieNqGOe}S&YAu06%YFx5FDzz
zxXiR#E|E6CUx6#BH|4?-Mx9d{PB}af7(-yiFf0x+^3Z1#1T)3Zq&oWz#l&bjBB7~(
zBI6&iY^wd@1N=pm+-qs@V)A@)Hh+zO@MiEX#@N`!h)RBSjS6#Z+G0+OcSc6(s}_h3
z%FKb4$RT!Qlv-AfVj>Tr@prSC8C8$u^K*7kANjJds;1}ORBj6jG{t`_flpeU?59VP
zqO$9FT(meLeuJ;@sE2bG&096%o}gAlc=+n#t2P0eA@N)cAjFZ85Lg!UOS2+DA9TnI
zORq*vkI2aIa+y`&BpCnu9U`=4hJeUNR4S8XJNgA9JX95YN<o)F1wIMYaPxz`4Q!vd
z-44}=MFAtprAmHi?XdFe1u(jj`FBib1q%7Va0ar*_&&dLnF01=SC<j0Apq(R-42Ou
z#wRaCBm}f&IAYS7(c)o8p>loD>{dc~^L5ufYlLZ=8ftp_;#;z?34D~}gAMkm1o@f0
zhz|vWt26jJv|e*_b3?w5{CWAUYx+i9)8%Q*D62VUt3m{vhu<&^R>rBEI_a63h7N`<
z^S!<H{i#oJNZTL8Oi3F{jPq}9I3#dM{pNm7iQENxHF5U9#GTt{iXzU*8OF^@Pf4j5
z5*!S|2v%XK`H1(}q55cdsDRmw;gNd_Lfg}I8yMfjhh&g)aw?ss&3}0_6$wp17%`V@
zLHCQA{fjlL0Tp!Z61~2kY1cE=q@jlQ0UlCjT)?UA&yswG-Z@a72ko_ZDq@<oS<v|q
zyG;+cP{);!=$R6+GEsL6e2-&lkNc=INA=Wm#CX|$jDAw-{&jl~!`lgw^iVVUI?ke+
znr#-R4)zd}#mB?AAI;4_e*Nlr<})XT>@d)NyZ~Mi=SB!UK+oy^e%eHYguxk$SqdJu
z5MVFpa5&#B2y@j|<DCI)UKmHE<t5XwMBhLj%qhex*sT)7KFL=Uf9o?Tg1%iG56=+z
zT#c!S>yi&^Jw#i3i*L5hs24u>MPK5ycgmoL8Fo2PDJx>Vpb6$0w?$>NU)TXxoC&6o
z_%y&dZDuod&>+o#Auf)9zPh2objhewIiM^+Z^ET~TWi?19}pn-4-!WVUJDe$c`Jcn
zWa}Az{%r8i8Tqd8ky_Gi>&*}uW(;m@)sU#^lnD8ZHYB|)BF%nd!WpV??r_Y?F*8t3
zUnVEK`{s4%E%D0ZB38Ac#BpOC0(~Lbk~vgg+12fMX^VjcwAo`N`eY2PJisv_Y#0&7
zv{zODMj4S|s)QeQ-f#i{<6s1|`Xd4l&MahO4<<^vd#1;NUzElU$amh-%KN=qo|+0J
zpcJsvg9?)DalRD8dht!ImicZS(lNjp{TJ+*y0-VnY+;s*i_qIDg+)7s)vvBDbo%a`
z<Yh*)L<A+<rwM<r7X7rfI<rr*zfno*wC}&#kL!3O%ll;1mWA*pEHuW)Ur5pG5iv0_
z0X*<OS%@LJ^{j5y4=?2{YObX`Pu<*9s~jLQs6i@R0v#~wxR*$lZv>juYap;|#Ig4m
zE=26w-R+&eZ%~w(8J)j=9e3oadDc3*^z*yL%|*%zUc53Yh%<bupsXw(4J%=F3@z9a
z&P;zG7iqFzAZ>Z+Z#HkhD(w@^iLLRrO@-C*;NEi6>uj-n`e(Rsiqe-MclB<wtO^Z%
zHiINxx82?Er6DFMDfBENbo2SXg4ZC&r7%a+up_f#bPg>_9pftFbDitAV%xXVrG^K&
zEL%?Q%&9y?_MW^<wYRi{8DeVC?Hj(^L=bAKC6s6em0v=;k_gv(|FC!*UgiJ5y^<J+
zmSP&C9Bzcdrj5pBi*2dBCTVDH&80bLGlvO+C7+Rzz}ni{)6;7v;`!FH0CThg4L&w@
ze&~-r7xHJSSo^<EOKu#}*_%!KN=#=~4!MKP4Ie*hR|$1?bo7H^8^e9${};?WKg9&I
z3n4`MymKJ+rzrMxi6ASa7>Q1{WR-?$8R4qmZx+3OpX3~b32JHsD&IlEtjB<SXaY3%
z)u2~_BHWu2793a&vG&Ab_8}&i!3ua|v_9n(i+|Y-`j@3W*j)-U5oBGRo#60oK$<yv
zTZ`d~(y583WenqeJox>S-oWk+LV)$Y^%g_0^B{PB+!(_7;psK%Pcq(;`bA19;(DBS
zkR=gS)_1i^DK%G|4>V??b^R1bT%OR(>wT^RlwnXpLCe6)$47{K+V<XASyE$P3PGT_
zG&e_+`%3~7KWxR*ddVZyYUP{>BQY0Ks&^c(LU+VdS)CFAzCC4pvK3TcR4oen2|Mv*
zkS&NZv?LEKN3FM}jnQx1I1C}>ZH7ZILlF3fUCRNomJ0uGL->$XPF7a)>zl2v1SP}R
zTUZ8~pEseNe6FfW7#z$~d)d^a1U2ik`7n&;@^$_ISb(qwuWdreH;?r*+Ph^QViI=o
z#Gw!#rd@tx#E_{>y^l{7b^e`_LW7{W=Na&Mj2=NZ3=_*SxVnMThn(y~iRBn&n!pqI
zJroTLw!Lp>0GZF`{Imt&`a45Q_JH<7YRdXR&aLzrSUf@p5H(t5w**1FWD??|A}6c(
zLc%V)nJzd#LVye_C)fVotd4$4%DK1u%c5JKm}TH}iV5kB;5=5?HxT0E|1iq_Ppca1
z8IG*Es8XUg_yGDvM^=o-ib0_v8{<L1uwMVjZzVe<K8OMd9sEYJ9;RS)F93+GJ~ci4
z8ua4*KVa&C@w5u|3&i`|+madxs&W`2VT+lS^HM-?N4!wris$CXWqI)jH8NXDtQfyy
z(DX?>l?C!m<`S2&Eeig;Mt(UZ0uJbBu;K<*mZ#^{wXs`r!>Up;ZA|!Rd77xmwnJTj
zpI_YtxLlH?o11SWDwIh>0|M4Y%7b`<uM@z80|Ul#PHb!}taehX={V{ZH>BSalQH1V
zd4v|Tnkp|kcjQv%n|~cgE?2Hryk5KL5iE9gaRJo~G@|tn9XV8UIjHgTJJmBq85#Y~
z&s+<XKCzxR@q{Wt+$wKP{lIdjL>>Ydi)i`g+yqh-UEVGtE}DKlL<DoyT<%qHsop;M
zR-!NQ57eiKOG&XZG~|URc4|3NW(z_Q8X8Ms;SZY6o>AW*B_U9Mj&|n`&QbWm^fa!#
z#SOnU#ShgJ4O9d9>I$alX2Hu(VVFSmhAHNDzE{r#XLYi&fEQx098JFkoRLf+A@JX>
zWL*nNJM30)ewUS%%}nDK76!T8+S}d+SAy?OOGbU*kpnQRW3`eR+HF%90@DDwpw@@F
zyS%?9YTE=a7f_DYRxNH0iAgPlig4imO5<Td*P>~r1l6I2sZ&efoRc<~zGt+=$43`v
zA_1J}aZsiIV^k}W-8cCiNO0kLFz(EB-NorE#ENU++Z!{wo*(5rEjpcP!V+z9db!XF
zE1CXrA2D!$1I{q`iFnezoNb3Va^Ubkby)(NKv-&&-14qoQHl6jfAv=5+L$9)&#Uw1
zR#Au^hujs^;@IT_um;$YMPL$txj7s9Y|<@szE?cVeSZ!_Tl4cC6JZb`aXuH9qDI&r
z)!{2Xl+*<kGCi4r`r8I5_LR=-4mWe4Q%H%*P*%dKs_FoBckN~)kC=VzG3K7V=0bbI
zf3W~oY|`!MKA<?$?14-I#9iEif_NUF0|-@?`fihj>}+V$HGj0WYTn1lPebG;talh$
zSbX9=YYB=|xd#Sa*oZjx+nmP*TIe1aQ}AmuKKZx{AXM*%1FO@zll2DgDG0JKglrwf
z4=&YJ&Ry|a77%_eoh)GA(U#K!f)TYGk+t=SPr41~@sEW&VVAr7yVSPaq<hkJ;|#<s
zH=6nnW7*Gu)4*!_kc$h49nv3Fb6q@+*K2&B%MT3=X=+5qi<EX{-|Ngt=>fqu>o2qd
zaJHhj+-GD~!uX@(G({qYSVN!eT!a|Sh3=EtamS#JX<086bZ^i*f;U4m*1Z%D5#2Q9
zQ_xmTwZ%ZPj`uZpZS6m|sJfQMD#QHz+NN6+7?hH2wr8!o%FKqAhjm;b#_0R~mm<JK
ztnQ2}&gI+z{cB7o)et)XetqIko?!aMah%PCJeY9X8+r<R%I%X4^W?Y3Antksb_(J$
zYCr09-L~d{b=I4$_yQ;m4FI1Ax*r<_G*BW7Bo59HrMk`7?Yj?5zx8i(9;oCQea9|@
zR3}nknFAg<y##DX6#_)V@u1pu5Rze_&(6&uBO8~Nmf}HJv>_ob{`SH>CL*E_l2+e)
zNdTSPp3@kh8^Ft99f9XNR$*QVG9=h|(P78_!cSiU_`Eymqz{;xn-G`Q1Ft7IzYaji
z)8#q9QDHYZe3UDqhJU1(k5|7xYO!|+xZ=B9CZ%2zxT(R|=oG*RED8Z5GZwW5d{R;t
z3?PT$OtEutOmuXxKp@6koNnYgy4Rjqm!Q*T__`F(Na7RPA#Ld#qJ<#90QlLlM@L6l
zy!KnuQnklpRs}%TOMg8JK_r(Kfq$;U{Zn3VKP;-)9(*axj}JDYdPOh9NyB(@-+qb*
zguA2!)2iX@2`qn#b(D5DCUtkzVT)+`X#A;FTA;~ro$5!{Cp!*YAds@Jd@T&*P1vV0
zNIf4{1X6;Not>TX2i}#T)Ku!rx2J+Eblq-}FMOHGZAM^yO<!BR(sVdWnlRtw5N#@y
zVr-}h6|uZcO$o~#5xs9}vcUwbxB$BzOw_qTf+Xk>d6SbxMI{b)xf9UUfW-!`1md%m
zA3uJC(Ir>c-p;PpiA$ce-eIlU<rKt1U<$D{X2p6hSimSj(Z~CSVHCtC{s9Gg78mFn
zAR*!M5twn2Hv(;eDaIMrU1At0_1111S;pdwtP$bN`3Y+LF1ft5ELFbB3J@7`P5;rO
zZ;)6IE9-{C>B)?A+Rl%x0s=1Gi5Gb($Sjp=yL&>X{^jL6Py(T6_~hL2D&YM5ph5WJ
z^bRD{NJv?C#umapcsXvg(y9S8<@oo`&d%c4Pt=7e6@V&r46n$&Es!R?Fj0d5Gzg~v
z%_Tn!&8Fi5Z@`CXXTif^^Y1w(g#hYhml%^NL>-kdKg&dnN`~(?b2#DC>g<D?r@cCN
zc#oz$B3I|xtF65}z9E(5Q;6S{Qn_+RUHD6b`w3s5w{ed>ytKeyFSzJQ5uGg5dWx6=
zl_Zsp&cvi!xgI3%81sS8#4McM=#-So|5MhLheP?j?>2j~G$Tu8sO;I73JGJ3<)ayf
zWQnoUB2*$v7<)vP>@wMXlu#<6EZNs6Whpz8Y}q5fXU6xpT-R^@a9v#EojLD0?>WzN
zKlgn<-YfIav<}jR{LLIXmTC+pU2dxG;rSHt6^0WV<8g0*z7Y^`o$AB++{(%~#jJGP
zQGWw`1Z2K|fzjq@WM?uJ&k1umd(<BQ43Kk7O--@5a4%Sn@qu7LT*jAZXZ<M@)0f&>
zaz>&&w+AI}D3);U3Pu<B5l}Jo^z=j`?VX*Ay>`L__GfbXtCp2pz}Y1W0+7MM<+SsF
zfj2kn@WQHiVj&5Z6P?vMNM^0@wNU7;zIPI|!Cf_?J~)_n(-*v3=X5xa9h;hVa)izI
zPbKz$N+kUe|IOW@|5KT6+3ibi9h}gsqp@~=TzS9)J5gDg2ZA}LtnBF%dX$Vz!=QzO
zvoq1oj^K0eUcS4`Tl{)EMLA=B?oUb7Jv>U{%c|AJG40|OaZ*oTP>N^j`vs74tcY?Z
z0{1|7M}FOZXU#cPQ5^&`A2@;Cc1A_T2X?`f!|``2E`YYVSl-mZXk9i%@p_9ql`}#R
z#)ke7;ezFg5-u??tr_{#Q1M{iOpGnjM1X)~VhK`3ue=W|dA*dYURM~+Ok{o3T6P{}
z(qM%1v7upObMpbe+TSRpzn9Idp7wo47%KpwlJ^k&pu9~Pip+^%C+~|Ofw~A(7eH4@
zZi`o2{KB{Hm(cPK2*oBQucBCA$tQ=0hez)bS~(Zl<3@PU-EAJlT=XxS*;5R;s8bVK
zqT%8_<K(P^OEMTVT#~q{*QeJ2XPS>|Hll~Q@=;uq$mXdk5ejR8)MX<hBec40f^4fB
zML)mkFkU8VE{FG&V|btjk^Lh^%Qr&NL*(GK&8|TLL4uVzh`yFGZ66Pd2zISUhjQHr
zQJNkqTwEzS9C%z6szL2U0_I`DSr)}T`mO@^`iFlKoyy1_;jAxpuzFuC;&`RBe<B%k
z*n)FB3J<?7hIkJD1{*rrBS0d&Afo<NieQl5p5lDy5hGnrRp;3=X#6YUCo^(dx!@TU
znoUfm#=9+A$GDT|e<m~Ya~0aA5|zTg-AOXTpyExw)YreRt(fhFE-o*WdDy8`p1=Vl
zoH@pfYyw!l?ctLxb0>``QI~ei@0{N%5=#lrN56Gd)TJgV=oEmrASD2DZb8A!IUzag
zG+Wth<~oyz>o1q8PScJqg#+Gn8U@&}MiOa!^mc6_i|d2nY&9xPsc%4Rmxzr|UjAi|
zICVr%?>EerkI$pc#B{P5HaVtojUd>b8kGW%mVK!TjeC?W?7Ke;H<Y2(5&!{BJVJ{|
z%sM|&DSk;Z6Xf8d4Nc0PH-t}~Y?^R?0LbhOP!Ii{9EJi9G~lDk6ExIRx`a;~u5}3s
zVP3s5@gBZLo0hPXo5M+0(wTC`T;<9%hNe6m?Cn91-~y_A*z>^b0jLYWQt|Zgs55#8
zc(98Jnv28D4~!Y_Lc`Q1C@w>}ai&HVP1aE2+buPPR|nu!qKQ4kiaGN;0BKA^xeVM7
zmw=iNFMWN22x3DlUtBjTDIZ{RP>Dc$Gze2?fv9(PCg(BW8eXcOgOg*97xcI9>IJdW
z{EU5HFRq<d24dr6TXK-DHB`7__uJaoxPw~!Vu)!zp}C{uqY(*n_3G6&chD9<{l|B?
zTN^q;9rm`~gZj{ZpSB3eFm0zCYDTq3!0RIu93`N0I<=`=Vxox+LINKhVIf&jQL#o-
zp-wA(_mOiS$NEm%bN{DMl~lSvD?`c86iV2EbS%&?9vWfYAZ(#GbY6gy#u5C&_np5=
zOCyjtwx+QZHR{tQ4o%o=KNyP3ln-;p@u7J^_BFQpYd}1azEAoOl<B(=yy!CTXZLqM
zg6!UdWNbZXW~luXM7R(Irho?rRQqAmMCW92$ODb|l6>UHl{c!Yw9*Vb5?%@3El$ZC
zdK4+dFdRJ)$^zGY0DOi8?KR-7cwvNh8gGk-HlKvwJZ<eFjoeYavGlR~%gT_tIkIXs
zd*V)8RkwY8(+pk#;$FE<Zcgm&Ep`r8ej9zg1)bOvtt!ioicU@oQK?{)mXcy-mZImW
zNhJ^p3aTcsgS$l#cV=8%YO*LeJ(YufW3xU$or#i`J<yH5yj&hn*Y$5jg%a1|QmfQu
zbMvCcp9a2dBv$7C#{^`hO%gBxO$ayp(-Vw)>GC7>Z13GO2NdH_CAfNifkt>>_PaeV
zjhA%dqKQ#Iw=fDKuZ8yWzWB$c6+OahE~><~`^}sgYB||*bH1S{(j6TJLPGvrNND5+
zb_=49TeT9@$4n1!om@8Ul(iyz9|T;Z6G~c;qS8~>N!aq@;|r$Wh_}Ex%^`QNyW7BH
zJecJOE=I?|;Irj%AN(l^iGSDiK>FuD5`1JK-}a7tw3fBHY1(JKHWDE%C@9?`BWG@r
zcB!yiB7frX#$Gt0y?w!DzWOH6_N}k4$9t7dvxotg!)Q@|dVXH*)-;X;?mgBVrtDme
zN!s?cu$4glt%8d>7_#g(5996SQ*o)Ojzr=!g$WRM0woB+9Nfibll3{Nt*s3xUb6cI
zxB}>iZsdO5QY^NCXbytcH+yL*R6@ZlGmM1@9n3+)rE1LY2!2JHw||Fk$(mEO29Rfj
zF$+*gDPt4vUe~T&OAcU<d@m2<VUAyqXB-fFWqN~~ws!2j5sbGjR7G^(OevQhb@ALh
zps_v@%FoUc%LI|U)(V!u*p0n$<Jp`S2!R=m5)}iYzvVs&VHhY}?(^7BTjM?dJip4Q
zcNCKbZNom*tQ|ry1ykzrD-9&W;F7irVbuF*5niNDAX5ghcc(PTDfThGG0L)d*3m1#
zQ4RSv8M!Yj1No}wQC0>{AnmM&5Pk2lHn4m^u?x=5d<~37TE_xGRY{Rdaa`DrhJRET
zqy6Jh$4ZrquN$D;fWl!g6He-HlW;0?*7V3)>dg};!Ga()Fp<re)H=C&6vRY+R7r*v
z@~tY*`i2yqrgAR)1|!48-rrX~#BKaqWtu{9fq{BSG5b1Q(HF7QG<C?6g-i6lb{hj?
z6Wm{;Dj{w#U~&Z`E+Ze-+wVArfUs_mq2l%H+imsiOw7X>tDi!Gnjie~h8eU@Q9nSG
z_5nEM=<GqH#_ejCucbNqLgKEd12gq_1XHH(>SbT=pnAdaB?(eF#|cabi4;OA2kx8f
z$Gp6}&h$Tv5y%=Q&G(I)OReB!bPs9=!e`E81B(iLsKh*;fn3E0tRmLtzaQznucM|j
zIVncRVJtQ48B$CepTmE~7cFv{o#GLE1)?k<T)TLZw_=#^$9<NXg=589)3_tC`ua&g
zP6T!g=r*rIk<g*-HAny;CxfnWK8p>GZ@(Dv=Nm@ztGPkTa3CAroNOzAy@i!W)((uA
zs@F&LhUA8;eW$9{hCy-o>Pd+1=5>saTzhl(T1Fb$PNaXnWR0ir)q9BIHr=Fz3ioLK
zI>R}(_TArV4S~IEnhj<1F02Lj1uu4{7O0_=?R1WoB!VCnaH8&`;d%M<0^M2ZU>K4W
z7ZkLg*^SzO5Cj9@77!y41VT=5<_K&d-n=Q|^1$*&?~}AWdsqlMXmtXpV(mboxAo_{
zmG|%V3h+LOascNT(8F14Yd01cWqy5O%i!`r&Ozl5^u=~`Xn`_o*2}QE&^onEr#X0r
zq-{Um0<At9+Zq^=3_>q^IMcQo)vhQhDq=o>wM-4T-z7m3|Kj=pN?2HU{5>@GBOW{-
z3Vm<kW*Ojq-FN+3TRVtdX$_BVE-iJ>X05F4{bd_Rt%v@!gt>~Gojtmh7MgDP_DNOk
zj;Q<pT{C7IH<Ysq;NUZ58W)7H_gI<U5mqk#8c5DTSuNNBr=5P|tkWQ*p{Gy#QWd7b
z++&lI;EH&uKo;Cagd4g+c5aY%MpQxJ*Y?`?+wSh5?WkCIbn9V#eEc|=FBe~_0)K}*
z!HXSmuRrCso9RLC;e+RO33LkDkl!FqbwO0j-1pCs3HLYh#~XCyGveY7BM>A-83%A7
zl6og?gwqU;VyNLwN=bnSmRYb+vVW}PJ8@pFx7h(Se1$w~He_b$+2|9x&?7bTE|?vg
zjtgG>$^6+ghAC(1N%S+_?lT%7e<4D;gOV<}4kXQ*oxh=@k6FM{e_tF_N>>|>Sgp@h
z?to#F@o(et3Rp7RE#gwoE&r(b+=0FgW@VXb{==U>efqpAbu1Y)2WH*{<+nj!dfscv
z?%)r%_xJY(@`}y)qu|I1p?Oakt2$fN`8oD$>dZBv`$F!?;OV%18aXB?1k7(Ayt6ep
z2{q|~Xy9!m=^V7T{tcOL&d|{Db~1JQ2OlqOblMK3NGcuj&y~*uV8M;q`jp05)Sdg!
zlcJ)c<#O<KNqJ6x-~bk>)hh?SqcLnRxyEM)Po6rZCC&tkL{Ex|+@s^@s^^#o9Q+aC
zN5G3wM;kNU<5^Xhb)%HoA9P>gfP#!mT~$*4zU*U-gM-$vfjqd7UuhP$G$j7~9T_Jw
zJ3EUGp01uckka1N^j@$8MXCbpAJ=c?i|_~zL3{y$i2Nm4HU5o-&WD;s<6(P>k4r8Z
zv9PknwoaJ&)}b+&QE0`9D-QRnGwKoi71iHnC(9$YJ~NZNbulcTV!cy)CB&EYUfS}X
z{45t1>Rd8V=Mp!6hO%VMN??46eKQSH1IBxR9D~;$f<BnOTY?t|)pTIRX53f;dgMrQ
zwaJdV@}HO(Yjpkk`rVlsc#6<ESItu-E#LmI-TqQDY<w|f>Bm&2e}Fp~c%tR9N2JbE
zwsO}knRz&LHjR7g>+5T4Eri53FNO&hu^ZFPUhc0cc}%pbJMI`0InxK`8OHnP8qi2w
zj&gLhCx?Vzb^bSS@}vsgVLP>`_TiyZB{G6{FV=<+XoUcbLO{0^%HPr6+6o~o*xXPC
z-(>#CiHTuvS4ft%Un;e)ImD-E1D;E!QSgw3FD<OBY^)BrmOL4$TRe}+&dvP`zd1WQ
z!>$ug?RdF8H&h8`7u(w}P%96L%{Iowq2;EyN%Qyb7jc@We#P}Xe^j^=g*baQf9C1k
z8@A4uKO8O$#{#f$=&uxl+y%MojVrw`Q;7cjNa{`IrrzZIkYn1F8m0j@m%t3626UkC
zO*S_+1e(HiHBUH+2@39m#mLI{`S!1G69ChKX?KCr@ZF-@KkuvFyW^aW;N|9i4G%(n
z*>^v45M-Qn>|h|L0lKyd{PmWJ%Vmx=t224OtKOx+Q^b%cS@qWX!<W5#_rkuu-mUH7
z*qM=&(fal423XVh0%#171G2ZIpp$^Ntg_B}JKs=OUcTJle^+JH|0$HhxZ=W>g)I-=
z_tmcACuY`W1XmS_{Z)>K(@z#fo0@H9gA>IbQZH9yYHMo)0|VpZmjN3r7wY2uPuP9#
z)-;r?fgp>(<H0~9|CIo1^(F;+wsQ^js(aU&Mgi^h9VsGh^F-HCtbxHDclSpb9jR;c
z8^6^m{db;CHbi;*-E1N`IFxd_T0O;yWOq21Kk-gZErPU(lb{T0jI-yyC4Aj5+;#ht
z&JPvqi4I~tp{B+^K!1EuE{9^Qj^2!0wVpLxe+-1oG5lst*ZoU9kHeH@W3z6;adqEi
z*lk(WzFZ$DpU_7G0K(P77gYjeeZ9~51vQIaV!>85xq`*?z-zY?E<pgkcKIOr1M>15
zoqq#bbGN@_1hfQ|;IDzl;~_%ysJLM%{<$wI+TxN8?*SvE`trIbgR^IXr0x4x0XtC(
znYa<#z_4ZOW$x7zV~xE#M@)v?vVTPD+o7oE`IAl0G-eY<1>sLe5A*PBK(}>MGc!SD
zkax9Axck}&kWsbSfRF$teWw>rEZr#=U02iJ*RMu(9|a;?0~ioN?V!RE%t=<fZT@au
zeA!`D+~e<=Z&L7qIqRDyYmdK5Ps!#fb#xAHCsddfyCbF80|hYHks?N@ahJl&G43<$
zy8FR|0h$E60wNo;{3tFCDYhZjGcRK}PUnH79)%yFXEjx~2UzAilVR|B`a5Bnu<T_#
zRdb$D=Awy0_z#Ij%%1_)bo<T`g+_uf?8XTns9Rp4SEEe70?F(mo)4TwC;0uhVjn*S
z&Er)Ehg^af2g@QMzvBh^P<*qU=_aJIi?;y&g~JS!jzdIxog3xfFOZO*ctAtpZ=)tb
z=j90h&Huf!V`H~Cdv317>$m6h#Iqey2wve>NL3H^)d1ED@_%sVu*n9@J2Fxah8GwV
zR0$1iy#n*CQQ0jYLXPmIf<V>$-o9Py&tHT)d9qOvZ|4*Y#eM@Pg}n8xFzk_E0#V~>
z;eA@HFS#4*JAV%?sW(gw4|g+&)|e)2t($xHJ!?z363jN8e1P}NwW59-x{3p|_m*-e
zoTZB{1hrXdnFka-gO4+OJtx$a7k6}fU~1$%GPGD8w87>QyEzd}*92epv_zYs(WjRm
zud+`6Hgt}ZCK%aE22zx$%%s+L-c-;eEDW6-fV1q1)0JdmYBo$SDG%4Xsy=<qsx!Cc
zrG<-AiM`Dqf@{&B8120+)RB$4#dfu{2txB(pmG6^sc}#?xnS~uVWvz2L+|0RnpN?q
z7iCH)%pn9<>!)xBz>23(PRkzXe-dmorRPim=|X<OME%%u&N;W<qi3a+E+wZF-d!(Q
zSp22RFX}hNl=c0z6)&=K#pgw={~=0}R{U{9GCM`wrwp*}U0CCz*neM4=lOsEs<%K+
z;869VDGs-=;C56(j)Bravd1V7omhFZKg$~RZ%y{PW458gW2jxj3%U*)VNUggKZVkL
z&!Xqz1(6mjzFrrrwUW6o(@~>iCkp&xsx2_PB_U>!v+P_o`*7O?-~Mgf7^%C(u~zpp
zlb(;+<lRF4^=;aajP=iokvQ9L*hV}=`2SMFsQ%;JToOC%S@is-7fxE5mYQ)S)Mw*g
zNZOr*0HUFivrnd~OX?9#8AgSo@=9IxpQp}|avizF&*wxtPytz}p`s!Tc#8F7aq)11
zO>%F~Bp=)*6#)$=d&!tloTsy;uljE!z$Ne^GvDnkc#xr`aqPKEAARer0jB8KknJtu
z3yBQ7mlM12o$u47*#eQomWVZ+*(j&@)-E^{w!G|!>ct=I&11l;UJW|8WS)Fm1D_$^
z^kf&=$Toj7uPGw>g45LOI&SUq)6L9<<_Fren`w7phi%WEogF1lYL~P<^wjuz|DL@~
Vmc;DZHz%oo($O+NKhv-d{4ZE9-L(J!

diff --git a/screenshot-05-after-insights-only.png b/screenshot-05-after-insights-only.png
deleted file mode 100644
index 44e6ac243cf5c915a4e60d65c6582d407cd562cc..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 105634
zcmd43g;$i(_CJh4ceiw>bjQ#Q(k<O0-5}j1jdXW|G)gES-6;*y-Ss=%`@R3dyI$6E
zty#m&!_0Zk+51!5aAid)WCQ{PC@3go8ENqkP*87cz&|^<*Wj7K4F)SHC^RS;aZxq*
zjDt*QcWhq5VAX3J2CNAFJ_M$tmmlWHwjN`|w&u2%ADi5xr|cI0KaVzQpK=R#e73Ee
z*wf^x+0zCFaK};M;Lw67Wim1{?Ck8`k_Dkb;K*dK^+n<S`;bxwA}alVk7ckBAmFzz
zFOkVpM#K2;V`+@wfVh`;f#<){Vg>!@3PEUJ#dAq1|NA(O5&@d*zn2T5RH21~|G!Iz
z|NrsQ<G81ian*2VxMXOVFx@}2{_Vp5-*+R;&CLxc85<u*cc6ebH(z3BLRgnWgK>|D
zBRxI(dZcM#l%`NHOl)jKcTo!epYJIBm5hg{cX4rXMVOS8H7s4ZBq-Y7zcW5QH!UqK
z%V6k^o_c;LO0GyE)EzyD%%7Z6Twtl{dM`L8w&lbDea3)KeGtY*1q}uU=I-uJM@I+Y
zzn=sHPnq%WU!kL;EOYas<Yb(X5SUZzO&LZ~-Pf;`qp$BT1_lNPU#DSa+RCh_;kU_0
z3Z1fru<}UXc#nJB>bZY2MhvF*{#SIqpw7Shx53IOUs8e1eCR8$(@X?5gHk#NFDa?W
z1Ek8Z>yufMfO^?f>^s4ki|qF%)DPE(i_epI?d|RF1l<2^Z&T;_=bMZ_+#({_VJeOP
zcRx(63JP{82P!2{tJj$(*BmM%%f_MhBX7bx!rX4GtzD|>lDsC>`Y<x2WvUYumMvrE
zEKyT+@_zQT7ON8{B7SUE@2yP_UW?u0)u-jwY+=974}}PJ3k@FEN6SNL^)M(zl)k*I
zDkuaTTD=hoG)hUdDvq;N%K_peyx0LRyO2_aY*_p0>D9~(-R0$mLwAfgGWg4H+EC8u
z5j-f^F@L6}kuRj-sIE((?GeHSn&#4-heBZQv_$YD8k%yozxHvCbKCztm@aoq=dk+p
zx4rh$@<P{h*8RWnK(IPh`fZ<1*Zq2{sq|Z&;~2hi+oMyyOXafjtkiKC$>eAG&ndvb
zCL<#QcV{3$7ygVrPOhI}Q_J*KYTDYZRZ$;SB|OA(3QB2hpWa(AC^mMC9jk8;2A2-~
ztB`Jq$x)n6S|GB7o_3dSV0QM3-!qfKw;9R1e|vk(hEIlNYNZ+#T68|YqQAw_D0Nzl
zW;K3VrdBOtOk&V{yk2?cpzwHpdR+Y}hJfojl*|O%-R^z+;f{poGa76bpNsX~1%6D7
z#Q7EjtM$}BTDDe|{E*#=`IvWtzj}Hox}jLf$muCb<&teHbs9C?s3Z^^40!G?_hZ>R
zJ<ef1!9A9$7OPii@%r3Fsh4XA``kIF&V5?x)Gz&z6ot>uZ8dSQIgpUv#$~sFq@-s%
zoZh%SYM3*xgQiW;{Y9?Cpd%zuES^RwE8;EG6se<0Z`fK-C@N+UC6Ym>x6A4e|9-xb
zjXuZip?O%;cMt3D4nXO^ASem<@VHG)OPk2RCjRd_23;|mn+J(!TGfUtTZTiq<ytTz
z4U<8FQes)T(2I)lYP7>T&^%kam6dLw;ZnHyNSJqT{)IK%im4VMa<XB2zUO_8Cgf&f
zWE@OpD&I{bmx#ciiV)iqnby+LX>DooxjE_7Z$sJM-d0HG5c0n1k0TR9Mnd9qwv7Fe
zm6ZkF3RYO`@$ND{iQo00L^*e2x;&+_veL)L$6<9asXTWKY?25#Tt=-hY4S-*QBl!+
z$>@Xm`q=`R1dE~6cS0iBLO$G|mek7B27W~o67xCZ1z>6n>oi*P@nDUlbM8mtvcxSE
zDG+X8v7IC{>DtUzsTaxbc6eP+SL*s*A7yU+Nl8&5n`hE#pjYb`(yYpmo|~`VK_L-R
zuE}A0jW#p>x8r`ZKR(~%++4HTAW+1`(Gl!p<0-2#`Qq$szk2gwhXZhVr|ls!Uv9rB
zf_Bf#y;>8RznwmTQVeYo*3)Iwa>??&!XqOi<(k#w7o{Hx9iJX<dqRUkT3ip)i<DM6
zeJ~FA-7fd0M@E<@mRp=G<m4hxj5w;7XJ(qT>x&?S89WYkikYqMhkSf|S-eiNPP4Tp
zzuVl7PuF^2Z|fza2^PQGW4|;D`WvmA`+Hq&hxML+#>U16M@Q%c);PYVr0nc$dHoGq
zIhpB(pGi%#$GCBn+;%&CDs7TzDD~II8cHFY#S)xcSQg29t?<O7YU}A;|K@1>d*pt1
z3vi?-DK)gMw7FG(UW2T$@Edk|qp5uVwEV%QuR^=NLcd%MK`Q#L-2L<`g=CcNWD#ds
z3%mJ{_sz-p&p_B5vf#l%*zyJN%3`H#YSf2|-N{-Lsf&vX$rz$|ZhPN<1O2AqU49~e
zl9`fO3~O!Y&t@uhv1ye>oQ~ruq;h-FR<r$Z$`i&LZN78c8%&p~5(=?mC}!~F`rNyI
z-e9abi^ga79Lw>Cs5o@UCDL*_Zk8b8c1Gtoxwr(2?9Eg%EFCU1maF7%r@r6F!OQi(
zzb1)ew-~9n7{wzbG_s#88qPH#<g!(6{=7yzk#p^%(!aX8ibBk%*Y0k$J3%#uwC;9p
zQ6eh+Q^@BI+#8yxt|aw3(Lk7sz3Iu`Uh%`-!$Y6vC!gJsB!-lvBpgq1@23a+D?0^}
z#28K+jZjox?;E&-iHqI&dZ_^HpxNpby(Zf<=f%0X)p-;W^PLg>JsT1(+mbO1sn~Z(
z(VxLizPY=!0d=Y1c_5*ffYTaDwVjVLJpllTI7*~WTv5@VpgRSKqi$k5GO{6(v9m+|
zduN&RWsRNt?(6wduKo#mQpD)b2!7_Z9m*nc))NbsLRd?ZZ%&1$@gruhSI)M)t_qMq
zX=FArNjPaMD2|P-UMN;Aj+uBBh$R1(bzH#r;jJ)>VP`-TI~!Yj?&}2|S}{yNwXpr!
zYMMR_Tf~}@{(SP5O=amxkMr#xf}dAcS+6$+lNfFm+uT@gF&n+ZBw1Lh!50dSMYt0!
zF|CxxmQRF3jsJp!jt?dCbwZ`2?Az7V)pz?9jlu`&I%r&m>72bNL3N8Rf=mw5r%s>y
zpSC<^gQj-)AJ(OJCkn;MEgtWX)yvcnt6}`x+7?san}9y?in!_u>@uU<GwdzbCvWfQ
zw56`+FDWT*c%xve1*-(Y6Ac$T|BlH-51H?{|E;G03J{J?p50>8?qso)Opw`!N|>M9
z!`})CrlzMW)k=-;uMUl1asG3T>L9c>;V+Av#J9rnXp))ss(7S~`!p0oyQmN4F!l8X
zQczd+&4uDDL(7S5)keHt`}x=@JRH}f&}TFmPI+_!%gT*tD2;CJ;F?B+VABh@UgVe=
zv()tT?UBs=qvf_WHyI^7)M=qKHZz0`-?L4JzwNHG)rO&MkYL&L&@RtQ*~6KJQBXnO
z!or5r`Ww}FU4M$iVKQiQ&0IKu0a)Qnmv)`0%DwdU<2~xx_Ante27a^Eq`A>UE|Sxx
z^4;em850vz(*h5P<~VR8Nt@tC$tfPJ2tG>beE-y;JZ&b?o#VVa!HU`~O^damzRr#T
zF}ysOm$PH(7DFs|>Gbv>>p&smA$<f$h0AvCM7!QR!Vqpj{OVvH^H)KWnH>54yjGnl
zd`X?#@!y|54>t~|sH3bMlFLg=irGRG%N}Q&we|IwI^;@OOW+b;Duv7j6Vsn|Mh)X)
z%GAq`=4usQFz=aoeSnbN!UZmi!2<^#y?qHmIHiaw4g_6HkA7-w%71%9GCh`<?nxOV
zIT)>V8DK{Xcn3MM8jk`vPI*jgJo*R0AQCPT31$d$QYm3Z$4AQ}f!s`@fJ<j_<*>2n
zfe)7`C@6+qzDe}b(b?J0pwz1<$Y=63E}Zv-#u9uovsDT~!VfN!%PK6~%9ldr{0_=O
z7|+S9A%&4*28R_}l#8`eDMZ-!AwEheTPXZlv&@>!Ty4VjXeo^qUe%_B#V~_|;`!z@
zu(TAPzKE>}yvX|C&LR0<fl*(?77u_pCKxe=aD2+vkak)L<9w%`Dr?TUB8C0y;}r;{
zd@8H&#;;56PkO&q>D`#L>#(f#N{(XM%`loz7yBgesbLRKPx*~x`H%81q*Ak~WtO4P
zeI=JFb-Umpi50ZQKjw3PGV8ZKtoQwaE7pbtn0e-m6`&5%9sEV7RwC9iC?XIR7QVc+
zzWOosHrmKKpX6Zi{yH?15<W!PMaF80r@~`wejXp^#_Re>g69}fU>ZJ-S}$Y0J2=vQ
zr4xIQ$AD#t4PTP|<a}pzYb~xQTWysV6*ZPs#cKWN=-qrK)e9w=YqYrzg2(jn_V#O4
z$l#%KMNC>tKu#C{P(-5Q$IisS0A2fYCcm5cNJe4bEmLD;140px#~Ae#A|a8%Mp18{
zBA)Yo)pJ$H4dKN}E!?$2Y*gH+B9A!by9RRtHV&-Yh!C7AJc6$}1%spu+Xz=@Xz%P@
z{_4&8JnQ`)HT<{F5UG?nfHT3W`B~$9Y!z({r^KX;B=AnTCj|N9AM44Y%I&X5px28=
zGs$l$E!!boa!nB!wFP=8)0Wrry8|qAcUPcb6UgLZy-y((ljBRh{v|DKekhGyS$nDV
zGSnyM^IA6~Uz3o&6!hEi+1V5^<U%GD{rx0=utpTB!H0X(4B&vNp>9F?17T5RxgYG8
zTaoiI>(=kJT}wyXOn#%}P8}mYb09;g#0fdAn;o|hreqhtAOG9krNe-+R!D80A!~Qs
zif9-N0MKbD`}up3KDTaDg<P_?E)jI~xX=BS7`^GA<b3V=?LAhXyNh6@^KGWJzin<L
zOOCqr+rN?CFE-hYrgOGk2)mz*DXFSA+2Zf=c$`r>r!PET9WE+m(F*3}*2yN(<Ik@F
z1j4NRL&#!e37bJ<Fonf$Z;DI5%{8!Y0%<Z&f*~!-VdIyVhev*p`A}+$UJC*~n<>3U
zMQ<9r1qISl#r$&`11gD7UZ=rj&ftmovJI9}^FrmkAy#XZY?8IK((Z&AC{kJU>U-df
zhw>s~Rr9?X&F&JxM6Jqm+@h~Hr(5m@B_QW-Bq3~1j&nI`Xbbi=^dcz7YZ|aZo)?y>
z;^b70n$ZM}bGcyv&QO0)uGIa$UHpyjvplcI8CGXE3W~&77K5?k={nW(y}h=(pZ7+N
z3dK}J7y5D9`4Ydg6SEEq%EN_z2a0g*PqORQnNLC4j`mSE)`s1UqKFTV);lM>EtNKx
zcdv^54EQf^-Jnszbwpqcnl}Yas-*EOodPIUD*mShT)_$It5k}A=FHV=&n|cOQ{OpK
z5wwp~CXriiHxonHL441JlgpR;PKZw#(t6juL^{PojnfU_>PVKL&5tksS69Id>Sc-K
z5@#mAV|o@0str17O`h!$kf*T791(CBn|<zM05%6TRZMYXyv@yis-BR;a_YN1Nvh3E
z^$OH3kIAnKo{=i;at#IB8pRSH>)9%38CH{D@+FL^mT^d_tCG=oaxprL+I4RWx?5fL
zqoboiiw^z4I*vrZfwv7^a63^b2Y_iXO~An1$7v!y=iYp&*vg6ufP+zV5hhUmq<@2E
z^mFMgZ|GZ*xSW3)ReCL;EeI<F5`=Az=Su->1!|gaxke=#d|>aKp<2Df$Gs`KbZg}g
zo!%`f`H};^{d6A+!uXn+>=swy<G;Ee%$*_=a@EzaUSD0k6Y>s1Qm!=)hO<zI7aPx$
z(5%!s+~1GHc@-ujz&c^LY{=pF^q`@EKI#)8WwZK2G+hY%NKgB}fkh>n!!;+T%C&Y*
zWi@)8#c`|Jq`+l0aWR(rCKv%5V*!e0IFlcDFhIHJS^%bpxK82-vi(D<_3-czRB-C$
z8ugiSO%gB8$?zy9mAt9$V8po5wNb~tsZu)CqKLWIOnlD&SQAxqt>07`bhLWT0@^#i
zO}|`2h6wnsOez3gfO$#vq5_n`4Cp#2fB=_WfVL2noXX?S9Y+?}$OfC`3h!`7;C|UE
zbFU%USY~xch~+S*kU8i!?U|oGEj|?b_1}EaWNm|VlTH1}HLB-HzuPd(thGxeR~6eQ
zWzAmX=X{!v9UO!chLm4s*4)z+Svj=c3kva8@7U3`Gr4#(_07+=LZ8tO6aJE%GhUG^
z1GNNArDPW3b9;X;Dunz_!1CW1nUUnr$Mey3qn?oG`(wYj4*>0|vh+Z$eYaao?s_5!
z*5Ql_#lgYZ_!WJ))RGX!&WZtu>#xN{xu>9~r8+arij+So)n63Y#6pl*J#ruVI|jZ|
z1+t3S5xxR@N3-;UL;=D~E}-kjYimXyKSHthH&_Yp<u^4oQAnX2&)0Jo5IZwsRb-T@
zl?1^aM5FzH8t1Z}viup)RcQ5okHhk{hsV_cZ!eS$hNBiG5=JI<A`EwKT?^>MEZ$H8
zh0U>h*<*6cZEjsfkh>q|y7lG?a~NAnb9jKY`NLu#ey&kovlH@rg3Ln`aJvE8L{6|;
zur-*(?<`$Q1+)YS1PDh;$(Bu{wfdVk6#pRbePNOayT1bcLqe{Pg@3$#-1>uyi<|OJ
z&@=OeH!W2to4@Mt-5JRQ6~0(8Q)k4AQZ2G5>YbqZN@oW|P6V|5l0?gSn+A__`#}3x
zB3^pVROP!!uCFnns3g<XE7D~@^;#SObA+{$WJh}-Lj>pdwSMK%V7YlOoLP-%o$0`2
zp`4AmIe`!|?bl{E$oP=lRMrHISV+{3d>$`MHQhrH9UjdG-TT5~Wf#n_m@Jwgv@@xI
zZFdf2F|;QR%78xOCu@$k$A3Fu8;1dm1>ndpfK@6+ujFQpJ-YScaFJU@I0FbvBbjYk
zf?gqNxyE$3TnVd)D1zYxfaBz!A_tG=NkkfbcfY$hZTIj4$ZE7u4!5GRGT7QSINt=l
z!DYPw=$U{;^Lk#;?y({hOpyrtwzssTg(;DilRiA45;f_xaCAeV1;LqUbw-8J0j-R;
z-Xu^}*w0`i#6`bs_L_)Qo(b-;>G(?f!G5)o@UF#CNB-MKty;Y~Jcw9F(a^<86T{84
zO<-Li<BsC&pY%SbF}P!1#F|MuJFfap!68W$co(N@BB6!nvGK7lA^-$26-CX4@5oPz
z(+DN2pdhO!7q4`wjSfr0rjJQAM$?j*7IpBN#M=t&uPxHtU6X(|ItXCP>h06Xn#tbO
z4Ejj!@&5kK!2@<<>&;PJaBEJ&B(54m&oQKMX?|YY=@*1H2+$1(IRrBVm4t}s;r86(
zAo@i7c%@6}8<$<sWRG}!2xUw{LVaar^caRj1Xe-^8oSxx#mU;E<vVCjttMNKUCB16
zx4GMY;W4QPYZH@`HBy)}Sq$0}LqjKeJOBblxAqzU5P*od%SRxY=^oX*0}z>k>=*cZ
z(C)nJ*cY)<q`~K~egmF9aZC}`*Xzt1mM9Uzb1zx_@=27^k%iHB>yM`Rc%T;`o)f>+
zD|MplExIldiFqC0cD{vh23t*+O>Zj8P(E$^cB`u>eUm?b_HVprk7J{4I!{7wxAXHF
zk-T@j{_^<_%h}Gec}9h5@d)4sg>63fC=&<am}JjeV@ryed>eAqYEDBL0v-@WNMNi6
zAR&cc0Bo7=dZs6d1>{(x+CWS)m`JP9nkrp?>NphCL&Yos?N&j-<!M<S7i+?XrXS<g
zhKAna)8W0EH3l6p6CHlfoe0>2a^C|3DH=-XNy<RA(FYL!wqE2=QQhdCAQK^^wDcAT
z7Jm}MwF+0A!efhKV^hL-0Ti;FEIK?~{BF?h{x?T7U$s~fi|MY?_~WNf@bTf<RI*sd
z6NT(L87h+^UJm}Rp`UIo2KHy|kCs}(7w7`a2EG=W4q(jJTZCG@BDsJ?J<2T$|51{$
zsv0(05*WxPBB`SR1hl1Elj6x@B^-J+pqt%+yLPbBMM7W-1SIWz$;%`LzX{mG$9pBK
ziGuDO^?LJn`9nxNE;EG?<ZsGUZ4a&o@2e`EM^9J$=1TnYOoVq+i+Ma)aRN@{aQFiQ
zZm|*9+(@4VJdx!OFJx!=)PIa)R&f#%e7EvXedMx3<Z)%&8b-YHICodb*yc3<su0Id
z@TKFI;#ro^Z`<CF9nMxAJIqMPaMCWv)??ASpDOvGyS(ih9m9S7y<wowL@i*1{fxMp
z{b&#55-jj$tBe|jxYBU=*Uda-3S@tan9>pMnG{NkT0(wjkV(GZCB9QdLPqwpt_*n_
zVJpFjiD{Aw?fVnz9VICnRY<)}nP@KCwuqc~2~6-{0a_XX7JY(*X+p4MJWQU%R3--J
z4tE4ajjzRU86HyZo5O=M8BR+Ji_jEX4igb4s0#Hxi;a^tin6ZIX&IoHN#BGkeGE;s
zR;DdlAki2Gr>aMdc6qi+AJr+brKQD_x`Bwd4)9vT*7$=t<d0!!TFS)4#D({BwI&nv
zVRAg)H;a~n-kSvkSSu+X(aW&4r&Pb{Xr*po-aOJ*1q(}nGB}1pka8{77lC~`o%rd}
z6bfzc12Teo%EuQw#k*Lu`Y(X5JzS<?I5^|M0)NujX*&BrbNSxTuvBA|u>Cgx8Zig?
zMIVxslw?J9JzQ{^sYttFwOi?I1cDymF>G4fLuq3-kud-8*^BP)??Z2o@(a~DdG>WT
zwquC-oi_Vb3Z&x!s>l@ZuztL2TyAwC=J^bjUIR4kJl@}HEI%q$<hqvcYg@Rcd@YE4
z_zP3)$C%9g-&ez{BA2T->72&OEG7@QewtE9SlBu4OZOLhd}uEoV$0^3@jj4FU?%=*
zr;q#aQ1~1p2tyV5t-&T3>c&QSPH6R_<;zBK&1{3FW_|9PkMAy)Yp6DRs{b_H==d-6
zs?E)Z{+kc#yq>L9d}p0auO^(!XeT1w9!IS}&=NENU|vHb6uP|n`Svh?&{;)0c@l^e
zHk@#%AB;^*R9l_tcw7De`8hZEMDxgQu7<3^_@;$<nh$})dP?hDXG+k7L>Q&5ggUXz
zoMwW}OqNCeu5u?NC55Y)(R!gF9LuprJ?~W`;1oa-b#i;=noVr&Dv6AY^u!qh=j-9|
zI^aa}l~=xbiXuFLg2YmsAjD!+gSr45)6u1t`uNek@g&RiO7-$0QXsc<npj)Y7xP}6
zo}xSSOi#N2#T}rSq(^5WVq&1qzjxYpcG(gYY`XzC;mw;j<(kh;0nA9K0N8%`O;JpP
zB`arxe(F=_sc=$A_};i6At50=d>5eCP-NADgW+%7!4uK{47EK#LrhaHlZ>4{EC|nx
zV;RKq8S^Elq+DH+XkO;Oifap4=|J_o@oUV_;lG9i26)eYLh?N6F-)tuc!qDUGEE=N
z^V@RoUZqhoW9>0C8xLm@g_DmC_9;^KLce1Ol?5<9Uo_BjW=4m791TNZ%AQY2X%sAv
z#lTl>%fR)%o(RnLc?l$|@w^tSAb>!6QnrC!Jz?lHp{Ve2@IxDru?dXu^i1%wS=l&;
z;KZ0-4{!tRkavF}S1gnaZaTpO;>Kw`rQAyL^em^%^qTW$C|c7P>;BKx9_n>@0MQFb
zd#`WKwiwXT_Fe^9`f+k_V1dQ$f1%!F4M7>fUYC2Eb5mJTF+`>6<;l+F_sAX|beZ3x
zq7}%aq#lW5E20S-!{RBP7dpI9qvBq@dR1Z@c1&FKl}3p<HXyY(nO<G?v=|Mr^_cM5
zPW_{?<9+CVMbgZ~=7D$g5S2h>brgy(=6H_~qv9<@b!1_c?h-bI@9rvr>k=-0Mn!%3
zq*&|RL+NkM-HD2ks3=_%nRLx(tL){z5DEJVJeW$bYHf|!(WDUWPL-N)%ob&{8bR=~
z`y!tKJNzC7f4M(<yyBPB)%BdhV%P*cn#nj`r|te<rC=rH4xe_iC17CCOK=;^B6z;^
zT0W_b!eSDCJZIFbIsnZp$eI~H_kviE+3hDzM8`xXgQnsonI&zsZJcBT*6CTd#5*9Y
z%gRw_!P?l^G&Y#~sQ?;q`nyPB@XPl%uvc<2IB2VeK>G*GrW86i9ncA~Ay8zt$koRj
zZDuMe4Z93DDm}n)s!}VR0PH1!s-7MYKU@8z^9Z-2C2hrP<Y9aQg0d_Of!a5m{{;PN
zjc)58hK5pxD?d7+5_9`1>=WREyzeS(5+vE%MUA}r$r6$k6k46bc;qc<U*qx6rkO8v
z)El5sO=98W6O^4JvNQPt16T$&wK4>Sm>O3SNXX5BVr#56Ohf6Mx{4yN%QUNTGI{L(
zw%?8luWZ*6vF1E4wG7_zVp7XjXjWHwrs_G@)YX*%_M?~W^fMrMqTXtfIzBihQ;ZTC
z5huzxA|*BN-JRF{m7S)hW&>%NUqtGcUOCYlP~rjPEwRf=m-|`-&c9qTBa0z@5AONq
z!1=z#C6NCcv4Q|@RWY=B^&k5%9QJR!htpbjFfap>Se{K<<v7FvaPM1Q794s@RCB;-
zIredTNE-+Zv|2SkfbRu}3raNZ<KIkRnjHWbOb}D7^h_Nwm`In&X)^;#@^I>V;+4*|
z9;sE;o0GLS=Y~8M)L(QEg~_RLg6?2%4*wpvnTwSaYpxbDJi(&un@QU@UM(U-Q)e!C
zToBtT_x>zVjQ+9zeQD8|E1PxDcJ2qsfV8>UQccxPSZxi_-cJ3we&;Wn!J$Nt)p^qY
zX#pvU1Xv7t*}^QZZ$8Z#16XX-!sa<&*W7qy$?Mjt7=e`)DEZc)#r*N?C(Ad>#5ebF
z<0x??pf|;TGBjMFR!IMuc)d9=85b7^JjUzYNpNSnw*C_FI)Y=M(aPC|;(PNv-t+V4
zPasw$v3E{Y>3gmB!n?W-zUH(10pQM;FtWWZeA4U!3Ix$qAs^4iOuLB!x({0j)8fs@
z1RUT-{sP9@Xx8Ixcg32&Vls*rU9rM9=HGI9t<E0fd42CAV7ZiBW)#xc6t=&1cKQaw
zTyh3t)1BGfrBTTxTch}<3V6r@{l@F+063tY==K~|6I#qt9>A4)1KU}tDtk@}42XZE
zzdd`g;Dq6FSq;S+v_ZQ(UTR_YzA^jrRH>5hxzhPaL==&8>v*`p`F_t@v(1%h%0ob4
ziIC%l%ivAA(`eT6jihF|Mu&24_h^=&?)OiJEE<7axdxKRdm`ZjGEy6ml43Ua0I#;H
zEHO!#E+1G5gNS@D7gb+fg@pz;Zd#FJZ9l&OgC89(GznLg^7mJ8n1R!+TOsNUEseVm
zRJy*|5^_vCqX7g#T`GqJk}lSs&U?F@#*EG;5j|}#NXYtwvp4C*pHC8s2bwA#ll~}<
zL8QZGQaP;F!Qm}jzdKp$0bXyAY+(sBHY+>(VuMwn&XDPFx`LFH6qj-IJ3*Y#o#Ah8
zfa)Pj&cST;+v@8tkLN#kubgiDhFBm>bL4{W6!;fy9EMAVq1<#YP4hDj9SeoY!Q8l@
z*Og><j_F`ZbyyG3X+T+^N_fjzqLKPOPdc8YNotNhg-Ms0W@DTP7LWL(qg11E;cv&_
zSqQ(Y_qU2dNbnh*>XYHKQmQ&CF<$^GwxWOe4>tzYB6(2%QeeBQQW-Rv(d{Yal94Qy
zI(?)>M7}gwtatuqUI8%a!2@ivBArHpx;FEmhs#-MbU^m;iF}R9fM-*lQhjoEHntQT
zd%rhbuB>wVa9h9q+C2T|NudS_@M~Fzlkybg<-1v;;yG=Sfsl1m0>_^3>y7z&&-SK~
zYL(7dj$m|D1(ubB6G^u}G`4l7wD)=dYe)+9H}x{#uU`XP6>90X!ag%{DH?(~C}%9U
zSxmV?LJ-dSOoOHhx{-H%qssOqRAq*UOhG}G$nENYbgR`GLn|mLa9Y~fv^i{q2zZ>8
z_>7qsWnp7lBQKb5NSYaS0NX(!l~v{LyUi>!5RpDl0mbn{VZ;O`7aun_H@e-&vI$$3
zC|f>!PM%WFFZ@B1iFB&JqwpD~N$~{S<2+;P@cf6Y0O!A>NyjFe{umcDgZ-YeJy^BA
ztEAxL&ww`9!!K~SWd<BI^C*N|dH^)vVO#^9u9wEKRFbnf5QtuApt**zu`K+gr6h6f
zgP{FF;V_V@{i1!q%E|edWUajGuH6|W7fg`tJk(=*!a>5###KHcMW|2PQDX6Bc5<>_
z0oT_Pn^;wqIC{kR=5~KNCnq=#?J!{P2}p8Hw)3stw-G=Ek)0$lcs*ZdR<8Sfq{c|B
zkZ0WV>7i?Qm<iaVG&`RDSV8gxJfCZbKEu^#6=|gd&k>w<G@!d%ZT5HJuozJ0A=|0~
zbbwK|+nx81r3}V+pu5``)a1QgKH$TjZT;ak8{7nRI%2Nw^V$Q@y#N(6RIGb##OwDY
zpjQ+|2CA;enSfvyljW-oLPs9&n)SZO!{s)M?jU$j=;Ob?NkQdb`{DnF&t(s9B{E*)
z#fbkUxvbl0w>a|>Ah{i3N${5O$D%=%G)Ick<h+5+!9+tNg_HTp!^^w4un^|nGdg;F
zxajuk)e``SDJBDXP$A-PQQ+YR;>dg;x(QI8+mH9x=H}brw}|zohI#<yM8?P0dUo90
z{90aq1RuD62b9vFl&w>#`MRyGDK@LgBA>HOm50h-fG2Ez4@~~Oy82O#b)rb2611sB
zr3}(ZAzx?NOg<{1`1G`2Ls0?!Y)r188c2H^+1h4MNL^XNgp3V-rK*>Xn=3(E__eU0
z^8l$(3p4x!oQ-MroF<#uWNQ%8dU99hpPijWgoEQ?TmM=={@Np$C{lTvm7RhjLOv4u
zCA^hqHkOwr>?ewenE-14&ppI!uoth6SCn4XCO;nA8DLsNLt*Pw%Yb$^W#k`-6!xiU
zDrhfGqawW+9GT8GaAbgX9N?iGgBZ-F*I=1jSXc;v^I35qLTg%D`1kLz+ZB$KZ2y;w
z!GV~YyXTEGXo<Y!%yhN^Y6ci86lDlxS`w(Efk%bE7Q_v9?~{PC6xfLD+}tiMF1VW(
zq$zQl@yJ0Y=91D=X*h^HrARWZz1Ib7;H7Xf0YO1Qz>M_r^xUvN+tkp>h&@z#ZO#lw
zSVDk^$o>#*JC0~xL_I##klGEK2;Kk^X_dK6Hn%r7zE2O+Lqk)&y>nw@UsTNyrY}-o
zz48Y=sBSX9v{Ys)nc2K3%md_jbl_wrf^q&6i0g&Tr4LXS8F&jrkJ3W)2}24&;LRJs
zQtN`6aGga~c9VFk_W}QXB^sn5yrSZdq7M#^CkP3Bm=2?iRby+VckVo&6ceBLZz?M1
z|AKSkfBJR!og*s-5t9n#C_M_khL@K8FVXeCoLw*C9)ZAgPP&#{dO=3oY3`fp{{{0f
zx_WJbg-U-8O)=|*{(lwFv&;rNmxaY%)R)2E-(M+9;CF}ez4z_e<xm=8v63Mi9Nfjp
ziTCAR^cekURtMlv*e^E{*n+MPH~1D7xGy|8ZYARHzwvx%G8qhedqX)nr(E?<OU?E6
zEAb!{M#S%WH<T6$0$yosg<v~iI=s0w?<X`dp+JXiz>pzdU+=TAnf(N8UHx>9nVZ|~
z;rrY3=U})X0y={wqx0=duj_a8szpKI(}iJ!Kwq{H@9zFSA>O|YnkC>=!6P9JCeRd*
zVPs_)ynFW!<m<>$EU7S<0wC|buJUxhA9;9r?Tlvs9vWgyhqXS16e--_?`x(kwK$0r
zAFTc~A>{tVqFJRj^|M<59&AME^_TnJ@C$Ghkfk8N!qWQw=@JCW#9V-!<vN@`T*4C3
z3=(EDZ(w7>n{$(-G0;&^pg~!TW0?Ie`+T@~?d;<6JBE0nT$6^FIFo>rzR_xOXlhEl
z7iaFB#faXQZ_IuWS5SUSyl*EUUO%#cA7YKp-GC8}<8iv46d7qVnw1HIa*)Q?=yHK7
zZ;6{nJ(M5<)|ircE<+~F6#(QvcbAKxtWM^N$?YaEXkK0H+8GrDyf0ABeISpAx<%+H
zc*4iPcuh=&fqjM{FE1Z~?WFAG>ER((|1*lh4-(NU9sPinF+N@!M=C6KRRk8k@`WW!
zzy6{xDKjC_rY|{~(Q>oaLo+8h_4Q4G!nf_)^AvERTwPlVV#}0v*NFMA1U=3KXlZH1
zV03r=&Nf>DVPoePik9olX0HytNCez7s1^212P%}kvbYY9N3%0QpLf4Kb5T`Q4HCTp
zX!Cf{?JXHPxS9SJFIz1D`nga#UeEO_i0!1aThwM}3;Rmqg%fyuOlC|ol2`)%Bd{au
zEJn|s9)FwtnE~wm`Dhsy=!!KB4RQWt=s*K)bUR)X^g<EzyuhkM*iCHHs9HKX-Jl^M
z5!QodKA$e<=5;h>=io@hZMK>9$DksbrpXlY5o*x=6}8K$dUjcUUZEWcsA$L^O|Oyc
zXBG^KHsem;M-A6OLBA&iHX5hxs5+@C`ZuvU+S*k*ji+O|nAr4*$++q{A_l1i$&A|J
zT|n$<exOk@;NihSN_e+9{q!ic>hy2Sfs$XJkI?DdULPMM1-^Uy0ja|)pooKHh#T-d
zS>M0!^m_*8)gMr%jc_3uAleYH(;HsT$i(C@X~s;<?@EwX16~2-<!@<e1@dX+dtSub
z;X3W^yhnA_)g<d~j*cVWG(Ca@1O(96Ml$cgVmv-Qh61Wnau4Nqx7py^)1=Rjnj!3W
z3#^#t!2UEiig9uP5LX(kcEB<^B*(>lTvC`%U)|oW^}6;4XLel{K(nuGW{v{MXGWc_
zht#k2nm=DIwa5XrRDztMtyp*%c?o5+h7r1|>JtcxL{)fky;ECS0^5Jh=+`jd7)E7k
zbkq8h6mmc6Em)LGULGRhJjnpi8=V*RQoiAlUGb^J`P+T2g;a|!)};Q4l5>61lWGOT
zr46h*Z8QwBwYF}txC9Q{hoiIebFpX~&VHcw0SggjVyo+U#@*|l6qu6b6kq)PUlEm@
zAtaS8H9L5Lze~Vfg-FuOqSyTTnNgd~>`yYZ_2kM5i7**qKwu!qfuS2wri-M5?BMad
zQ_aVp-hlfD-9cpIroK`|u417zJU_MRET3XGTB~i5IS_JH6x!!>eO~h`;rOFpLe=GQ
z{?r}(hjsX;9#CZDq{T0xJv}|Gv#=I^fy}VHtg-?(JA0ewWzhmGIwW_XwJl*X#qU}F
zO*laA(c}^cxdxpM8z?RhV1fVEn)v-~Z`tY_jD$=RO&|(6R*(__^9e2?>&urf&riDd
zH>Z>9eZ=4+M3;a03JQy6=IOrha|Ij{T##SBq{|5={1@T%3QZ+mL{s|pL~HzFF*P>D
zC1|*=3T^h;N?l~@R}%z|FZ+d>fnJUF4La4NUO`v~eP);iQ=;8`9aXso6A;5_Ooaq$
z5oLFeyHY~lhH}{Hpu$2jY?oX4yQLfY6KF<ByMX7kSfnr+0DTU55J4Zv`28l38kMq6
zy__0Ny4hQ=&Ksq$M(XHiWpy=fpI|f}_vh7#!t!`8PHVNM`ad39gD$E6C=Rlamz$0I
z?pEXCKmaW#*ccR3At7N${&e^-My((v2$tD@fPiJqA6l}7wdKWYDmk2Ja;S#+A_acg
zL}f}GUp~Ht{3AF9*<8pi6C;*bVST;aH?Cojn6V832qX~2KS(5V;;#^pbZ|eKei19N
zUi`*=EKb$@p|I{oyZQ4geSLjAW>WK25ooOB?>(VPc@f_CR~<*o{CN0uFs-cd;?lrO
zj>Muv3XP9PpZZvDj%=DDXJWF!X~X67^w9T<`Z5x?8i@N7-|aP1rE1ERb6<lF1oCN?
zJ0o_clqKG=#QbVmSbjz{{(KTa<O^6#I&c%+zkh3@oB*D|btZ)Xk+z(p=XbHD8dm1w
zveKyj3ultU(U6zCa$Jba`#&uJD2uGWl%O_{s_xc$ic2P?+;4%G_`8Zs%u|lS;OW6N
z><ZZMAgjEF0n(oVZPdtJ((qByV-a(~B_K={)5WGptK<^YPbGcPWcO`Af9#iBazy|Y
zkYPL7L`<)B*wxYS+_}cWaum-?Rd)mg+T#>?YZ1CfQ){8FL^h$+$j^ZFzEDTP$msI)
z<cltuClOZ&EMCjwABQ5wpFgC!nrS2gQO0IQKJL1VV-xSaF}eI!KP)8$D=QqA7>{YP
zq>oa5KQd9+q|5${fzEl(MO<`^R-OulJf9I^ka~^W4p-ed`#TeXzk40y@*-F-tyh?d
z;-v=#1c1o|Ca5-XW#!LP=jz?!P;x4zANr<*K9le{KY;S`0baz-tUpfi2&948jRRp2
zDKOMdy(I<4FlsbpNYp+XIXk+#22YRo_JaJbXU!k|cK1g2Q}P<oaLd5EDn7{c3dhQ0
zl0hb`-%pZO=u3Cdk}l^RCIHbWr|=K|P$nA3?>0gqrATg?+Uhce#jJ-GfM$)uhJ^36
zKcf%esoK^Wz?;~nCn+o=Y^K2QKf%3{#}}5bUYq{t{3R@SRn2XegM;JWL}8_~uC{hE
zUA`8UQTW~6^cH9bpWB+7MbISC$sFOe3zC`R&<bU-^*cN<59B67h=#q0nHStx5qpwL
zxM;}V=?M|l-LD@lhtg{@N8ZyGnooH@+<+)E1^EJK$weBKW$8kIuYhp3z$cAxj2N`M
zy$eDD0vx8Y2F9DayLI!IR1z)09H)1Na7S^x{~IH|D((7+)>vAM1Zw20Q8%NvWK(p;
z<*LQ4p0pJmK0<iYCW&A03eSuGdkmEUD$Rpd-U!8tS3mC;dDNxVCs!@;`MBfn8~E%d
zYFUsq44tGoMMrV)e6^c^F$&5O(gtci=3eIK&Eao^NgwATfksGc3`srJOjrG5sn<u7
zN(&?-++QSF6RY|2Ryc#Qw47(D3Uv{-q9LGi!v>tp*W<o>mn9KFo6y+Y+B%S{J;%{g
zK3g|Q)PYa&8Ik<kC9JEymSMGi+t%SBGJi2q#_goG33~2!G)`GnjiW=rP#X3$F<3{K
zB~MdG>QG8bto;65?ex#U-#CmnsJr4bAPp}mh{Oi@+?J1m1|v{z<o&VHW-RCGbi;xa
z(Wn9(X!+B1lr!cW!Pl;{Aa=FRSTiEQ)o@&V&B6AWH0y*lEo#RwxsH`={7W7_Mz~7s
zzew}f#)%`@$>^Y^QHuVI#UxvJ6%xSjb|fYoRC*6`h^W&?W$FwC(zzE!f$b`~d9Po;
z{y3k|agY~_B<yUt!aAuYeF+UxBCjGb)m~LNMH5V;>rhEVY=Q$vA$fti@jRK%d=a}%
za7zEpTG`a!$WW)&SnzCbd)RAta&gc~2fze0c&xDe{Kw~PzN$Y0<Z?jyq*!t}S#_}d
z1_~`CpZrzLhC=p}o4D-l^N)^@#OVuvf0et)=0bK5{~1o_9J`pBeoQ9lXSdB3<`?w7
zx!4?Vs!_e%ourDG`?z8Kw>>xPO<bMXAQp>uUH{^Dl9LnAH_^UVm=6yEr~&+{?^B`f
z3+T2(saEK}(DuC|-l&Xy=2K8Ib#%vkZ`&>nb+BknBH*?6CO-}AFZP-L?5|s<-s1wc
z+@N0Mcz0SYRubzpVAM`tc%N<Fwm79IQ(+G(zt^3jJO2Avt2N)@75h1Qe0MqYjhI*$
zvdW)0GGgDnR#b+BrH}0ahth&=8zY&p;GC>f>DMFTRslVSv0K_0*}1y7m}aCzh#yNj
z)zc$L1kc^m^QSnq-ylju{IW3|Av=5hOUkY5xx{kZ-i9|vD0=Vd8@DjCo|4jaU!>;y
zMv)L$dc?co(NV*f*bf;m><|d)0mn|Ky*WRFQJlcvtjsLL28DPk3JpQrH7Rka?HVoC
z-?M1OGCv<*nC%&aK+(wdhye6$%us_VqL*gNWeiOP!pjE`=I&!QH0(Nww~Plo;{{`O
zBbh7l>JEYTtfBf?+S=;1xvJajtD%{=3$(YllSh$-TwnYSUj5NvWyg{7<mBMcCx+em
zh6YlkXa@q~CXJ&2XiZ0>gM#`WE>p|=Qc(Nt$qWb>m%V#u_U|mRcLg5FA6`R~)%MJZ
zY}VkI)rE37z{#4^WAKz<_BhuY^>9r+0A_)FPP~_?9LVcro+9{8g{4BPb_g7ys3;_`
z2xoiKi_2}O-B{E#f5Xyk=h;@;J#aCg>kzIa=L|q@HP)JT-QUV)u}Kh)-4cv+*#2$D
z?9PV-e<<nZ<C(KxXmIL}6QZX6wMKznOAg!<pgi4PuW+)a=Sn`^U48?Y7@Jv7SunwR
z^ELr}LBx#bL-MCC=UqO^Y(>f@t{~^nwC<bzbR;As;#F5bv%p{s)zHw0i8-0#b^dn)
zXh<mPv4tfb%^$)cJ+Q7I&n#CcYsSPh42Z4Y?HQ++ml>^22+}T#e(T-Et`p%mj%Ks_
zD`E{2Xfhz0z*u6yL1`^=Xxb#U1i{%%m!(rja~3QV%FP-Z#q==oJFFwAIkY-+v7(Y^
zg20wGDBTm`ZBZOxUZ=rsaa)>xqRIDhrq#tJ$7mgNXplM%WK&yl8<q~b5@7}hrCPoG
z7n&US*dWf4rWcNGN5ty0@%4P?`~BTC{-}qkzNCcwkyR>UsX+%hN|3YEt)q(zzw^Jh
zN01<=9knVwFki*g>;|{Hxrr2Nem!eRO&amhC@V-S<)!*;e$O!z4ZC`><3=hXnSoc7
zFCzXbB5KpUj5_C>oW+T!!PMZeCX$(bHGN;n!?!>YTvBwr;6h4D3Y9eCxFwr+RF#YX
z)IERvSDc!7Xr!SCSp9^<e8%Az5@6J%>*G&90HlNHK;xmOwJZ7BjYMT;G+A`%kPIME
zH{~2aMDx7Jm*cyW&wpE-4F4oY_ehZ&LmPt%h;2$Ug+l*Wf`H4gtz4|wnElSuF0;;M
zpSq;8TCe5j43~bsWaDhbJduR^)G|<yVi~_WMav!>I5t|2|GPP52LpSHq$4Aly1(@|
zNkf?R7Y^oX?N8UYnniEstMn0DM94pp94G>a)4iMXlk_C#b~@Im(Hi^uke|(Frh6oF
zu>`jflfDvU0^~|gqY1wQS3%5w!=T^QAMcgbE2H*L%NnT*fO5x!AZ3;QVjk1S@w_eI
zl(_#O;3%OAwgG5U*zf7JPqW3Sr~t+o&6pLsBzXg@W6$CuEE{}UAnY5uQe90C3@{3%
zQTl;*ljfq!-(R%DlQXX-R^mA;qy>!#E;{;+QYK$$z3Fgri$^`o+N=+HS(<x1lz<|Q
zVg@H08^q`**?R?Wayhc!21V)Pzsy_uBJ%C2*RP{=#+Nj+2!6{cKcGCF$SwG%DkKt_
zj@I;ASC<eS^({0sh!_v_QIhvgPYY_Z{Yf=IEPyUsPXC32Cpk1EzcqMV8$;<T!n1b3
z8uW{UzTL?<aTV_L><p*ON+MX}^!)t#^0H4NxP`O%+uy%`$6V0=vXPJ&&aIO#LC=R2
z3<~ws!o*@a>atIQ#ucA+vYW^ajcRa1ghCSDBw`FGC#eRfUBOutGxI0950sJHb1jyC
zCr@x+*M@2Y{>y+)qX@<NMfFPME#f(4Z|i@EUl#_Lr?Vo=a167K>!qM5x0zJL^ZUPf
z)Href8S13dE8Iy`RphTX(4(o}Vqdfgpnq6GAHqRWVY&4<SDQsKR#x#BJ$pzUhJ|Eb
zlt2I+C2Rstme|u_2dbfz2>v&`sw2u@AC(vIG$n&}hWH~v^8W^7!!*VMf|X}R9s}Nz
zbwS-0s9^qg5)#9$!JG^$=z;#G{pCafX%)MH>yIU4zZr#N0geNWs%-r5-Lv<Fi^SCw
zd0OfJeKIr*{4P~AE@sAbzKCY_@^GzX6}3P2Jv6~BTGOIaga4f{1XmOPb&M6XP-ssT
zpFu7973$>T!t-o1t-e0;W|<UOT0W=^tT4zZJ)UmtG+%T*0-@(}|GUJ8^?gkXR8%De
zpwq2_a5OY@pDmUP)^}>=-fLpNi+^<F=r0R&8#p$C*S#_lE=6ubKVDsj_nju7V_r4V
zl`2?Fa_xww$pDkz9^{Q{J0p2+r5SlE-~Q8*ovO$6;SQf2=@wD4{YM@nh$c4*2Qls~
z*R%&F={ZnOFflPnNU}3{>p>WWRGW<f-GUSX1}fEaAy&khcooNWW`B-A4*<DavM4b9
zFbgya8zZBm{e24~qnQq`P@wjQr#kJ=EQ79$!>mUtS^Blz<NRn}6PJhq1DlZhs6U-k
zwNgiYS|}^)Z@oDakwCK>sITL(G<CZ9)ULOfD{c><0&H)a_rF4S!q_DSX+|K4KcOM!
zc4pn|G?ZjWB@VuGO=%3CD8~BL6HL=rh->^2TctP$4gtNoD`H~h%|=P$cHU>nKD!i+
zf<}yM;g>J?C&fOQS>Mbe#pdB=4M^5NqNKI{3kq3S=^-s-X=w@6j*6stXCWWQg;p20
z*muNW)+ox^y#HgH+5RVV2H*wpm=CRLm581k%>MytI7AG1ouTaJrBl{eJ@D#<COc|l
z=wlwRgTAuf7UFahl|I{#ee_2fT<NlYI+=GB6L_LD_V=&id6w7nrGrt&{{HuArRweq
zqA7*+m;T{(a5KY)v`C!3-mJy-bwsMq2<+%+l#T@|F-#dU2koT~$VfP|a|{u^aT~vt
z78iHQwd?C1tjx^jE3^Zt<TN^bA5kO;Q$Kx7xCPUofHZ+*Mv&|+XxpQiZ8ukku!P^H
z05j{);0+Ww0WvQb5({}PpFr)>;W-Ujyywoyqk1`)@oclhWF)rJ7mvZwQIZ$ylIG`6
zvX~fXknu05u1+*lTLBT+09Bydt5s-GcRQ2goBTqmZD{zStEtItGc#l{YJfn31m9Fw
z_u0Wg!dBW3GzIVhf{@Rujr;0Az5$X7cA8$7Z?V_)m7<~{XqSJ1&HzL_KwZeZt{9ng
zIM}$jAgTE5I8&9nf^J7dpJ8EOKvJ++_xqJ*)e?`-U3+^TkQ%p!zwy^GI69rrb^45g
z+o&KP1xED(A`$Y19ajC{NX1M0`T6O|fp%3OgQNZG8K}b0u&_OKcSp-oo9sk$!Er!i
z_P9Bz1xk`)v~E#xF|H8o!@~o}5!igpvA54Qq~0zjo%~QFe{^{0bhw}(CnvX5!Dbfm
zM_*+r{lv}t`Y3RGh=l2{!&0ei(x5@}=dF$3qafs2rjmb_%+z+Y;urMh8&_pEg_K6n
ze3M;uVIl9xJ3lv~YtQ4qVraFXasp_8prh5joO08;AxN1O{68(=rM69Mrs%-A__;Q%
zqM_q%zr!Ao7r%CV-bq`ORPlLJ7KYB5glzr;X&}ir7dM;13(*Yg3O}egd(KT4>w|hf
z`sy}ek|!l4b-T~Kfkwb|P5>C9vnZi!1_Q95C0Ts>G*hZ-1Au19<)^tCCPN|qsU$KK
zBb}f#^oZV8kAGv~^y-7Ccw-bwSwuiSlu9B%$aUCgom*^iS_Fn@?mDnC!C++uh_cU>
zsMt+?0h@w;6wdDR#xG*Ety~Eela~nXjWYp0zN{UT@};oTwsBC$P25Md^?K8RAS^H^
zU#V65&LXHyKJBa56;ZE0q|^e|)61*p73cce8c;*EEx(2!+fXpL9t)9foL*c^G{lqR
z?d`w7kwG>Nj-Wh|OrZz{oqBW3CkO<D0ndSWdVM5_lmLX*YcTbkXZA-D%s!7#PtP|y
zgkG$CKkf&^o^jY<d$qeAqX)sN`6~~=WbA`UxBd@sAYuE?ei27h%IWR>PIeM&1&~dA
zmRl>yJxM1=vO2(6&3vxdAD|S9oRs|5l618pZ{HXn{m;Fplb*Dmrf;yG#*=lQuWJO7
zRL`5J9Vei3?I8xe!#s8U?GOu;;xr1Wrl-d?vBW%L%Aqg?bbGf9P{3vC9zGzFRrn>K
zKHSjR1*Qu*Y-W~gxydxJP>l%QuUQ$FJX~HpUY)P%Z&icZw@GH;iw!-=fYVKApEx`y
zuHD(qoT=p~i-tj=Y$qYeW4FMe66B9uqnNoj;d3x&HOE|VOACb77kSnD7ECW=6B8jo
zM7p_N``PRx{Ep4OJy~OaonwuX4F+htyWb>ifSV0`3}e#*JX2Es+!-(%f-s4{cL$;u
zp~!Eaz!*9hFJrIk<>B>7<8>ml-Yap{tkPrdX63OuU5`*83CRcjz~x|W5Lk0FT!(;9
z#jT#;BGw|jf)9<1Tm-F6e3Me?Q*b|^t7wG2lCBc08$U3nb3~c+5S!L|?nPBX!x6l4
za~K(i)<X7v_~+7-4sq0xAA*}}>MorE=F)+Y&#KKP_aL7{zg3})Xp|Kop~=1g=7C5H
zoL4&Tp(Y?jhs7d3qMM{!{RpWDV6(@1A>3lkSB9_0JahOp`2Hp)J_I2@X4Om3W2_v5
zdI550w(Vn!Pq%!Gp?DVtCKV#rj|yZ=kk`tR>#WyzV=w_KkVzIc{eaJD!xB#KAyIBD
z?ETIMgG<Bslny<Q0P)TA&S7;F*;`f&K68z?YyNHB%bEgD74l3b1=SbSRFslnL{p>;
zjD;1%cv~sp!Au`X#b&v?yNj^)XV)zD%Lt*t)As_~?F;FP)Kk_{GY}LG+k_%4+y(rm
zfovh6&XO&D{<d|NnBiom$cs={U@@zkhKp`>x*aov!D$e=$2wpIhBcfpma^b+SZOJn
zKg$&96F4yIAaS?0(NKHqdWu$6LmY02Igd^DSW|BY7}`vhfQRG4;tpcAG#o3D@9Fw<
zwPB`_n?(0#MpMcs^U)_JhB(I(#9iO(BQcPM|3C<r6voEQ9cqE+@zKo8-|H0_4GT#T
z6S^SyUnz2qV&Eo^;wfm%JjvTQ;jd!8efw5c4=LfZ4vAIWcO$Aq0<K4fpci@pX@UMo
z#(Xykq0;|O0Pi0~>DPgM85ApgezGw_%6IW7<;-<Dkq=GlD^13p`Sxw34~_*I@&PG^
z^unj#eaTK|Bx*S@FepB**VM`cBKY7vgRTR#qtMetOcyYK{Vmmd5saaMR*#ugvOSVo
zy9zcQn2;|~$^Q_<C$2F({kup$t=)PW0SrB}e#?odF22rJ-rwDoivO6JOGJ$5vNuJ5
zQ=^ofA)ax&d%zYy91fQ4Cm717@9=bi2pz2WnGPnltWCB6;+Mq0-F=Zr7FfA(LKRH(
zp&*U#c63Ep<W~iZ@ESg~4)EvAhY5ZNKod`wsheCD;^PG&Gu~5m8$M0VKELNd9z>&q
zM?nc+pE-#MZP@@7%WA5GOa6#K^OIK1YS)PqTi@h=@XuF9zw}@<Js+wV;Sc6SNdgbF
zlE)e_I90nPQ;MHDvFl^J7hQHTPmr+;J9;h5E|QxcAPo$n=cM6OfNX<Vm%99XLHgzi
zSl2FaD3J)J7(C9Nbv<5B{{v>p)~G!=#WK4fKta1-fy=B{sZseMiC&fySC*n1UzXie
z8nz_>p`prJjk&B_Id$w^O$6z-+p&=OK%RVRq)BE*=jQ)o?k(H0-oB_&1MnuLTS@7b
zknZk~P(lzSMCp+3P5}vNL`qT+1d$F2>25?yT3X_nxcB~_=L4MUI%mJw!InGLZ>_oJ
z9CM5@d&!(tqTq&YGOFkDt-L@+u`*^FM)+>-cN3YfMOnXS?<|pH@E<+nGVAieJftvP
zhVptH7T|V5>Jf4f`>Sspv<lwDDcA(VH5+0G#f_Cdl~;QVG(teHzlE19&{F^93$UV0
zqo+CW88r}(iB(hOzRzd>@s!&i%Ih;u@lTBt<sn0!t#{7=LTM^uEp!7GH2kvRM@`=0
z;Ys<zs8YJn3gGG|zgN^Lh)e(3dMRfr=nKowyDGEo^1k76noeDwL`=~rs1p5Z=(F{@
zNVfQ>Kb*o|*hApS7ZyE-$=gJgy{<p7*I*->b=z+E?1x{Bu3C{c!SDkhS-HcV&c}Bo
z=yJEw0J?+x7EBmzVf>k|PxpR4ANJ28gV5y(m*X+L;<L~&mi3OpS2(x5tKCBYfXJ*p
z17L5JI-f?j<de-Dv*6_BgoDNC2kDSoGKJ77-I)Ho4dnnZ{-6h2aC;1iX|XdljzftG
zWBu3Er%m~EArhulYOl_ufy2F@zW`_uXFZ$#Oi_gOP9+V^T(<2_Xv9WXnG4(p*uDt=
zmhwOnNrXEoMlppblLKChX~3`77o9~FW{TDm6=aE_WaU;PG6x8;)b6e>`#*=m*eEs1
zZ+SN%Z_KH3Qos?W)UwTX`t=FqCU=8>4BEa`h-b+Dl+d*2yx6MOc^m10<7z<a*Lz`)
z@h0v>t6ZGDaybJS2@)enmu^lUlVM{&G2VUqH%s2@_$|m9&{x@S#)wk$2Tfw}w$?*I
zmzTgGFxILO77|jY0QIuP!8!pA2GCQCwNwEvh-i@D;SUDjI%}Qkv&Ts-<foYu`nd|P
zEPHSY1w7lr%r4GdoTA9}1RX6Vs-9onIA8{H$LT890n&E7-#h8>AV@&dp$$B(#)yN}
zB!R*Dn0L0}vU9Y!?%?3S*b;7V#f?$i2rS5!b<0i8p-<fuH2O}yUNNym;SxgTdsUlo
z#eB^?fx<l;L!6RYNQ~;7@A%j^QmKuBAiY0=T!sp1{L3qPd}P||6{`ooY`VV#^|H68
zX9Jq}o!=mZH2Qj0yo;I*FUk904DKP@Fzbnrj_bn$r->PKkxr$CX|~}jeV0TEbN~w1
zD5p47!nQw#j{Gewa_LzK%)(9k*qM~hEmy}q*)uyAa$_~_<=)3P_+CHCkumG!@9p$H
z|F>##q)sKLmYM%m)T7TgBZa-ESR>Fw<kVE7v-Xdbl$6l5Wcs?_=iIa($jjUU^$0MX
zF`xjX$ti33rq-|Ku6<hvT@8UDy89mb^WV>g^f-;#{X))p&?}IUk)><mDcG)EtZya4
zLd<e-B~m}ez<%XN?oS~1`%#Qer#H!c6W~Gew%!b=7Vyc)$S5f>Od2rbtfdBO68~6k
z3UuhHNUl1ucQC5iJ^X0ucw%RESC^uXe{4P2N(&Aqvd)W5$egq90H3B9QG#MUMC3uB
zkw>IF)zYo@P~++6$4u^~QV&M5^eqI1+?a+%F&_rprW?C;$*4xTsDqRI20iWqQHrQK
z>*SKUfr;%UjihU2_vBzbq3mdV<ZVp+XM3|Tj3?ICEQ{Al7$QiArM`EPrgy$nHYFlX
zJHzpwzSALj_u2RhVz2IhmQ$-z^K-lTgSx7kBXw-RBjlgDu<vOC#j)JHFH1W74OA-c
zp-<y}ga!SpKV_WYxw2Y~jJ>({c<ZVz+`E+-$d)59qO;QAfTGxU9+oag8#+|%Xq!0b
z`)KWu(Az-fAJZ*)d<*k8>blmXL}<gg6G5%_-2}1?eZ?OA>&Z2M_6RTFTW@Pj7rB(&
zVq#N*zsBPVXrNwU0#uXY&;78uneh8RS(H)IdNmFOnk$J||216-z{WMN<b6uBz6#yz
z`tCn@<s3;4&6E$cu(Memomw-)e3i*>R8>s=>n|piohENa3!Eu`e*@3f!?!^zMysNi
z%~cF?8=Rv=6Cb1tK8SN*(D4yyU|OkT+iQ^gg->3$4!oztpW~rIs8h{Ah@|?NQG%AX
zjo1|b7l?WN;F00dW9<p58)m|W`Lx-TwAykfL=+nTlAow6*%0^E*9Au?LurP6|9+)_
zR*GF}#7G&h>R;Rkcm#x-EQ0^@J{$P&l_5|2|Bd%qD3SQ;$_f!FDd|E95VRW`DRDBS
z?418D5&X?+KTsRg=S!f?0}mJ|t+(gr)f&8n;p~0xo|t$A<vEa<(J?T3K$i)rgTv1*
zMi(Hba)O~1I3El~tb>gakZOpzOw|C?9!Y0oD*;@fA49v`<OIxur0ovj%3*o5ubSkz
z+?T=Lv-a=O(H3MWi@Wa3gZ=|6kwG0AI;7wbbiA;*I9Q~kx&h#`LD`eo^z@g&l#hsv
z1k8LN{H-7s@_@#JdO4m&??#wPEpUVh4ko~guFmO~-!(`XzPKNyJ3iLcMMzY3{5i__
zcLz0~0bZGfSxJZR_xFcB`SR*&KM?oVZZ6!SkZS^<sKs_=VF8FjWy1xUPj!56oPc-^
zaPrV`)Mns{k55cUUv6;ifbeLSug4eQz!wB^|E!?bJvahDr$C^geNSZ1n9P$3T^xV+
z2V(r_=%@zf4H}vp@N=50ch_k}OZ^2!;b0oXd1(IR_o@815<>72z|LtiO8P-P^%iIv
z$`k?nhljfd2M=#^MTnH~nZ#{<^>mlSlkxoDb6Xflp;U^KS>rkaECcku@)`a8{XnJ@
z78V8(8swfw+jGx@WaXHdy8$Uut8?xJ#j_$`M5L&2-T$CNtYTI{<EL@$@SA|utly&m
zYak(uer$kHYQW`aRov_Q?tfUo#s+j}6hC(l4FNXSv4daU+}PN^Bv@NpD=IAb&xsF+
z*|F%AKp1O-e-aqcKnpYbNz)AgSE49HugiwvEAV}PeNRyza@Ui+1gM~SIXUZX7fhZ!
zfk-$q91PZjbG1&2wZ+AnQ<LxGwxBNT+{%<l4tww8*f^e#l?t*Gs1IfT??qUyz=Nv}
zd{DlEvcJ}e>`5uJ;TK(aho5YknnS=f7B9Oa>cz#tzyUi2w(O|>lbznT)yz62Z??h+
zx~C?+9zU`LYT-J^{bx#XQSftEYXBBIU9%tjKi_H<2?+`D;s+p$*4Fq7^Yt+?*qyw<
zn8LBSI!WAi_V&y6e}PacTE-k@^ej?5ydRy;YlYam^7!UgsNvO<&ZhIK`U|bYf5af6
z|A!L)e{FHNiY_51ghxusgrKq$la-Y{d#M|P8j8-+7SQTvq-hKGi=php6zOUNei_sf
zCLw3oR$f@%o@uX<lVfTcHI(F7j@yuf{bFKVsrCh-^Wf!m0bEIFU;th93<U>Qd1rHI
zWMl-0xEvfDyu4f-{kJcDBW(V!_b|G8j{&ZAo7*BnP+}hMTvbkQ-)3n+Aw(A-azB6;
zO)W(2h2&=MoM>Zj@0|=8O-(!xQm3ypi+F^l5{p=hoK)rWV?^X>K0epP<zBab`!+E;
zDq}%#ve~55(bB@q!O%I_Om3!&EwPBP?r=BV5G3Dk-Yg#rv_F4w^)-%ta+6|ochJ$W
zfJ0hqVSwG$cRR%ax(ksJk#Tx@2#FAFJBOqFqu(DZD>=BhBJw6_(YdI0(XQT?(hwah
zF^y76Fke*k<;%N(6`!49<5FarW_e`AXMHGG3GSz6=?rM)`@5d5tPdtBBwaz>yOW-)
zm`E6K_PO&l2|oVP))uP&*W@cuzx8&7N7jd2Ipf^YQjfOE5w$KqrOr~{t51mSjV#;k
zXFFNB1}frk+p&vtcSiJY8E7J+u-13)8Uio<>doge<B?HNvRdycJ}W3HDrzgd`m_xw
zZ%iai#DxgRSzSm1Ny#})!0WTf%^wS&3EddX2&uX6$^=9ED+AisP@80>(k9UgeN{DC
zCc?*$*kc62*zGP-1@f-6Pj27KDDn2fjTz}^2`%d9Lyn0hb!#09cG3rhh|!f-7Z)`e
zyjs9U;D^mZa}+q5fKLW3LY|{@Fyv4U_>jQQ6-S&r%xuk?E*QlN|0Np>PhjrG)mn;$
zBg^iE(<LPHzBmoRX?aH%G2jc<dERiX_}=_uRPScDF|IBt*#df_#ZzP|R22L+V5-f}
zW2;yyca|dE!}^JptNQp8GHePj&a3slu}Mgdqw2Q<<rpwCo1K4+vW7I`&;$V(!|H4x
z15}PJxa@$@4;KIt<6@1&N)$X5IO|>YfXuKy{^SAf4&d7dx&h6#&#t?opY4A_k^Dv!
zpedb-CB7W9bfFVM)<>X8>400}tNW449m!fp5+LTdtbD(7@Crl~Hv!VRubr>91~GbY
zXl$(7`x3aUCtT*=Ckr3`ilz`nmC!Px^uD|XQf63~s?6zcC!<oS#^Q8K)qjsyzey9$
zE-k{}&+nb2iVw(<IC^&jIJ513$UqJbx~8yU8_S_dF>+EevL<1(uHjHTdN8^4*qIlP
z$&4iBakjVjYe-BS%TpD7mr_?349)>-7yD~8_?a0Q?A(RGwHF8iZ7}GW#jksvpAs|y
z!VMT>9uPR;#;1Yc3cA2I=UTFnq#waP2fX3FCvl#GYam?yIJA~IhDW>%4C9@hYS1!d
zWpH8eq-2|U2B-TZvJ4*&7rj!$cG$vu0`-ZF&1IixcmS`@I65lo$)D{LxL<nSj+H=7
z2d~7%!Lf666kO@=e(GqZF$9S$zX0J(nekH~2xdodfClEu$ACr&1B`uA1zk#lgJr=)
z?mZ~+08Wt(Cv0voZb3Ob#JW8D2m+E<aQAhC>j^w2M@L76H!Q|a8u_r)y#pk6bkQU_
zOOdZO3Smo)(x-MfT-$zEhbyz#j|NgDXtU0Oq8=?Pxuzd-4La3yrB-Za=Av(L^uS5E
z<=hM(7L!6`u{AUfFy{by2x?_OgZrzqhCO3<ej1q}qg!KZyoSJotzc<<JK*N&@5MGn
zTd>r7yakPn^EmqG1q+a<G<cnd6EI&tpU78l0U<Y<#8*}O;=H49nI&9_Vb})h2h@L$
z+T$mGk6QVBh%0WuNRbX4gong^AZ~(`LAezTSOjI=#&5wi12|{EexBdlWYwB6A29~$
ztA~dN09<r=j!q5VhIcsSGI4WhAlDll$WyfeG3bLyXq?yBX5}hg&VZ?7#G5NcAL(ma
zv*9;xFIbT!5uqX#)0WS@B${BE*n|IDrW2<~2FTl~g8<a$b$M9_&!o`v2`YZ!Y&!Vf
zb%wwts^AS?TF|y4Vlut$5{A#XLzJz)<#xDX84w#Bdffz9VH<Kp5UoR~u^D{#?VUW{
zPn18V4PKr&%ix^?ay7k5i-k17>Pf)L!CNU+Cx$lqQ;Io)s$3EdIGhvZzq<>!GH?f4
zL%_(sJ!Iy1e(D5j<j^FL3I+k35k<y#SG(>8G8%+5*TvRvV714rl^+9~;d-}&XT2%@
z9BQG^a3bt-Z3vQB1AT^fFece7`~*n(U}4JJ+{wzyYK8%2c<>EC48Mao6WpS%xtoF`
z73flfT&;%ly?%`rLrd}!WM>x5RwGtPNl7e*U$D)gHHxDYvb?On8uZWQ|5_I|mu{ZQ
z3m2EMor`i^XA>~zgiaHQpmS<zDZ8}`Y+{27Q_g*2XI6vScYq^;C*aQEVa3Ppk6!1b
zX9R`neoxyY()qS+5TAj(4O(dn;B?@~usvO!^QJT@D=*ipvXYJ>=bxXedQRlxas)!x
zC}PgR#>PyrUxh#F&kqg{;GQ_}5nLz{{xLB%T=!^0Tj=B^yx1#Qv0sn>6VZPqkD-Fa
z^JGgG(+LD&Foq#qm<7SnRm_wqCgy>g9kN|H=qKrSNW^7kQr^COdqP<&4pO2GF7C4v
zsZ7N3(h`z5vEd9D=P`m%*!X>sy`7zSr|CBnA#p5ui+^=d4=CwBAO8OB;Bpl9R4X86
zd>5#|%*+l?pFRac;PJ>iCJ+ISny(U!5ceka95eJRegC_U@vlquG&wy3pVelAn2?2$
zOf|abfygM*c+Pi<iEPaVmP0Z-Dxo`$|K?n;SNkg{172W1#y60J|Ihkw#vMR=ZP5&a
z>LJCyc`L04*!$v2$SJ+rmHuK+m?0bxoPof?K}8ZaFt%hF)D7!ll-7R!x6a!OzAExg
zdcPbqv563EeWkvB!*YE+$2wXBl^IW+`fX>5!rv!;#(5>I@uD|R4|Cs^&c62gpkFw)
zPdmOB=i^O&JOL_HB*OLwxE;wDs8pzU;FH~H^JB+z_pF<*x*)4FPTN$0Q6mNQrf{qn
z0)z1T>|)hN*JJhL{Lxikj{{8Xk-dvET|SEPwZd%I43E)WbbQ+M2h;EscvvDHH37X!
zDW@`ohn@O$GK4#dn~-WQ9r<)6Kf)xGV^=VJh_Z2yn^O4&OF}PaT+Ok>^s78q>Ipdy
zd}j$=Dqf?ZWH&LSAyV;9o1c%3g_3+^=;#eIb9b>?5Bn@Rvx6*_i52{fxlcf)2A4-{
zY^)pyK;ADWD?dYD2b>gfXurkntQ&!!XJdG&s9V^ZE;a>o)etK+Jlfl#QX2Q<gxIJg
z)UKzw=$j9E6^cuE-4{ip8OhWZ_oCK`t={k><AF;N4xN$jjYH5_$R`ihg8Ay7qivmS
zAdOdn%?g+UNnz~n>_G9@1e7=_a`3M?$rJ~Y7zw%yFh{AStbU~PzLvW(6hA{@6S-XW
zc~SPnEml`d1KmTl_!O5rb~)td3KA?zb2ITArA=(ha6qgb7-T}IVF5@Cn5}TrgZ_I2
zqCME*ell*6!QsQYE3~w#>)07%OpV2DGYj@JDv+JvFx{l129jC@r98paV=P^6OSEwa
zOCe<vmc}EJ<9N*qW;9=pah*%wMkl#l-I9VV5e+^Cx8gnMK+3!|Tb~yk><$X@?U_3F
z-^&M}7J@^3qwe%@a|L|az4$;o4hZ}<*ykZ6uDsA2(sjPik-r+G+fUD45ci9<4n38i
z4U=9h#1hQI*_$#pKI1_OMq9cc8L;r`;tZK30K9yF4wm2#@|JzDRO^Nl+|jYppVhJ+
z(^(IWVG~nCz?0{5+b4E<cKYWJ9Q2u{CQdVjU(=sAWunfy$8;>^@7#Z89gKBnVZ7em
zC5jxJeJ6`w&4Q6|qr=9y-QEhM13M6=g7#LfD&&v0#=$@rf$Ov7e9R~Z#DE#X?kZUk
zOpd;NAviSNDZG0te-F`!$KmmEXS@cj%<wmDqYxyD?)$39KqYHwKJFG1(WDPpf%t#?
z7z~Y-lDRBT!OjSnk>;S-)cW(msKFS7{c52AGyA2!74Zz(-ySXg(;ABB>3I&uxH+Yz
zqBgU0Gj&Hk-tYv6JHQ8}rMX$+{sq`af#l_)(buMZ7e4L63RJTYadv(~nSPuM{f>N1
z8ylM%K>1l%Sl~)8h*G<M(K#q{A@q0kNpCmUM8!X&=FC?41Ph-}AZ&*V5;QFIAM7_z
zl*EbeG9u9NJ1N@d1_uY*+uNI)^*4WmPazR|x`@}AEm)czf40fs`lSR#@5R{(SQ~qv
zpN@cb5waQ-T&!i0V*mv4L=c+ry+9TUuCVI&FTirTh2><v=_a^+oe4QCV_Y=fbzK{j
z&cY2iehgHvUP<7iJIptVJOB-mF9OaAk<(-+1uC3-)WpopO!$GQ$1%2z!|tuDt&RlS
zQL+e}b<^k0a&Zr-+3aM70o(rxE^s9!CB|nrZ`=?mLZBK)x4ZfV?&?tgPEO&#DBD=D
z@yNh9{|^gr98F&B&#Dg%4ULLYxysDAIM<$@@o;bub6d<WwxNSj>i1NB(4mliVFM<^
zj&`U3?>H{x1p!lb7iWP`XMlw3oz0v`2s8+OOW*{o%wy3Yo~C>{p5K~rcYoMO)w%5h
zHDv(8@D$Qdm9)wCa<L{*Obou0pQ<qX6~KX!CUw0?N-7Q#C$J!4bw5l6v|(@`8t&X@
z<^258-9bOMw=coW$J&Alm)5O}<3b^6YQfGC&fd}1x&ADzYP!AvP%5ajMukosy5AH-
zP7Y<idc9jDB+yL~4B3ez8rudS+epEV0)ZVk+mgNf64H-lW@A%2!N~1wIYbS*W8n9d
z=$0>ndwC<uEw5(H7^ADY9yJOWOYscq>-|}hwt^2HfX05Lqr)7WgP^>?w0S`pnx@Z7
zEo+q}4LqBTg1`iMEn|(xAw31uvk8p3a!*Ni+3wRAXNWH;#px>7H6TOB1yb|S2Rr*~
znzwGrT8r{v#XQJPXil2cVDw4JR0?E#Iq@M-St|E~SviG+cH7pMb`)dPv{8i^qv)I*
znhS}bK+A702C@^1U$keG2<@&8{D5TUb8YSU`Oz1M4PIx*hQ+;J3g9zmJXGhn#>Jgg
zP+(bZBF(JD0Nc}P!l)9^Icnqig@uV)rzvn|<FgvZ1}^Rt9vS&Ds_KS>kA)0!?)uN4
ztd-YU%4?p>mmNgH<3j?Ik+-n(VgOkL0TLupr?d5f5aD2_xWev-7m|97WW=SZ`5Syp
z8fS`hwjr6aeCe?A9WV4vd!V$YY?d_LC{d9>h)6;<+E7+}(iqF4!4O&K*3V|Q_4N=#
zg4QfA6Jy2l?E3LJo%p_ca@_pR8^_RsXwA5R{&ZODTMm9B%NzkE{^aR*69anVi~8SB
zPM1uaWYs^4jo-w{R3uTS$yf}keg2ST@O?63P5%-9w$G)J{L5!gIrG<5v3hKZQp2Ts
z^#}%T+nAdt!efQY3EUu6icz6c85&(vTB@4l>%H*VVFfE*zW5POt>aoMz3Sc8oQb=D
zrA9Y+d3oX7eg5J_<ohMKstiBdS3xL)#20e1-J>HTuq#IJ`Ka9oEX~Kra$^%T2y9R-
zI6(1IQO)kEg8c9DX2<{=W#GN?)NlbfW0aRelj6`?pXe_5&l@K&Jp^6_<7;Bj_|iTA
z1GK;fi;-?H%iCwv%I}8=3J<~R`ST*IAi`EKQY2#5rheLfRoxoGW_Kg{iU(X8V>qjY
zlX$(6JIMl0wa<KjhO)mpaNnR71Cq{!CfF??$amS0V1~T83MK#)CiC*~Rm0`+ut0-V
zIi<2KJTdjYdC4<LQo~+gvamd=tf_J$CFY(FiVnG%?`YCuUIPvd0QsH#VmA}8=6;2S
zi&}<~>E^N+%aC~gLop>AHw#M&0S?|_=%e4#Z+|W}J8+h#Yn0v-&3)w{{R&(mSkQip
zFc||a<f<VFlL^3@Mc97H2(anIx}CEeF?p8~{a0!nBRstE%80U!35RFkDk~rNjG;Tl
z?(PHIOmLWo&VO$V6<$~$j1rKZeqtO!r(?wEjqdIKD%_7mN-n>G;6h~L-L%tz+4#-+
zGwC#BlUdHTwC@W04D8mxB-Eg3u<gYEC>ds|{XLgP?%jNOM@uxl=xK2Nvd;t<FfPMw
zlBJ)>s0lDO`0046c^U8jvCLC;cX!WHl6SL(>k9m1OEmM+mu;nV&%nm4FO~nM;v@wB
zW(s%~PQWYIMK)%|?=sCZ1H_xES|d*dBGAIlLKc<XmFGCPW}FSX6%c3_KdOJ)@xAJ~
z4h#-ZJMH9)aBRV=!=BIcl-;%R1adOC?B5ltxs^PVDK5#MVfDc`0%idy<LalY8^M?a
zVn`_(=YZ<JF;(55U7R8y(3M#Gaz-G<cn9SJ3|@$f!#hk#PTthm1#z05VhcUEg78U@
zc;aV@Ao(t=EiV_6JQ>dCtgtB@c6#s>z7t^Tky@z&PNY+!mn<*GN{ZFKb;?AhfXTeN
zjt&t@k029(3ZGrJ?~Z&vQ%{5s7#JFgYFJRXW_uy*dAbiH5zKx)Wf7~#o16a@N6?Wa
zIk!BJ&VOI!zR`~%FR;%^RyRHiTyJ5-z5j3{Ah=Z5RYR*Y*P^-Q$a}+TgK`}opRuQP
zc1l7v=g>Tp{!|M;*CC|wN%@ji>%e3#!PeKsW64}Y^o~k@lQHFm-{%X>p``d4wNt{!
z44;g2ma^^T1URdFi9bG`_R2eBiIc=AVRCzcy{%8cNrF#p==D%)`Rs=R^+&z%!+Qy&
zAH6fjU35MOl%^s~Raqw!@Uch&>oUgOlsCRm;m+vhg4M)VkCS!KF~q!LP{0W~`Bkd^
zd-)tQI54n{l>maE;H$j{3M63(0>o&HR@Q@H^&x`)a2#7BS0Rw&>Ylb=LMTuxgsG8G
zs~rT;fd3Lh@nB84$4LbtYfAVy<g3c*UfQEp!Aw(Lk|%n!ajtuMjQUZ@t;zIZx6>VL
zymQMMNheyxdxYsu9}-s2h7{atOHolkb=#(+8_|*YZj%-NK5Gh}&w7u+?DLCOGNSUO
z%9;xSKTYpld?KR|;}Pj80-T<Lo9MI=mu(dc;kOLE7%%v91J(@Gxpf|Tx*QQsm4x#U
zB|Pa5Mg;M-eCse-BUvD$TqNl9IouQs3qV6ljE=Se!C-3Y*UTr)w=xVoVyV7mi}bg*
zUzw0Xb=~BGJ&A#fV`AMLunWk+@tQm&S)3pSf~gN#6GU^1kdGCE%^FxB+1mhg05)Q9
zB{jfhtB}YBmzZ=5xgk*Y<>Tm@)Iq^^)+YN|DS0sFeFdLofH^te%boz#IJMZTF#{mB
zl@huS9;4T9o)(NeaV<l?j{N}!E2y{n3o#nh;z#5cKFC`npl9EK&M%n8_&0GlEGxMx
zQ(*|%{Q+VQe1u@!dkSa2`?4!7hqBX3T(-YLFRP-Wf?UWIv;=q5dHmc&?G{}>S?evx
z(1KS@-`la55Rv!V0f8%YKPmww)>pTKN8rg0C}D^onaJJPaqvNbi?PhOWv5oQw-j9M
z%TO~>u@f3N(j-ZFt&x0nz-2X0m7>A>(s>{oS>ix1P*1Ei00N)&WaVz}TOIKJZbJvb
zhqIc$u$!az?`59sI~<v!%@M@AFNCL|n<k05$ODB*H^46-Y!lY2Sb|21ZiCm&LkSWI
z%w`kY?b)>Z<|_5ByBJh2UJMC)lK%PGs752?aZI@$zK)i!-ESSL^(V6;ytY7YNvoH+
z<O{ya-Nga=w)2)bmHko{k(y9~6?{CCwGB~c%n#J-Q{kG?ZBb;|nwHX>K`Y~uvC~=+
z#W@(1_=T^KZR!cw3aQAXKZ3_ufOm|p+oKcy&%O*vhIYiOVe!inmwzlIX*_@CrLVtz
zYMD(Qh_<y{w3r;nm1*a!8Os@{>#U6vtQM4}CDAx3(PNdJN_2WSh<-242`x-2xVpLz
znssWjP;<TrxJ|sypn)k-menupb%tHl4hSIMi^32-EecS1&`JXF2w!<D1Wmfipzcu3
zU-8YEe>0*F+C$JNKLj4`rwyq4aJ|8FHL%%r<vZ(eu$nQzRmmYYSt16IUJ#BMhD(qn
zM2%kS+G)CF=Fne;ZRnlTqi$`L?})akCvIuQUpyFA(1Wjv=sb5x$hfu57)dE%)=Fli
z<FThUO!LT8&9Fj>8)dvzj760G^;^an*_O;wW;z}<w3%7K#ZJ$kfgD*SubYRW+hqCf
zU6Z0yNKR)W4qFLgHtFWcy<G2KRgoi6Y!<zSiblNpB=2=S2^=K4I~HZDQ+$tZ`U4@%
zuk?Nx_@A?X^>Xr~Qq;r*HtqM04n=3`YrrFHQ6)+&-J|a+jT_2?7z4P>SIE7AtlDDe
z#GZ9={zurum7>jisS{_R?{U5w6;eCOLmE%#?b*N#08P|`*I>|y2e|Dpc*D&@@U4Z}
zV(zQ3sPbd-&%j)+)Q+Q5&c+J5h9ErnlG9&u1;OsjQ-MiG5Ql@KBR3x(*vD8**D#X9
z>iY4(!F{IonT_qrS^)B6;mJt}2|sW<C&3C90gdU^(3ke8JNGRImmr~^uMca;M^NEb
z`sA!v+5K?472Is$<9@33Do{XB5G3|BU>Z#$gYme|c?Oaknh051UJEK(+9qFBu&X};
zO1BW0D-)k<7s#av9DphvkUd(hkKct}WouCovLt1&83<(cV9pqW(68*^j<B1)L)%ma
zm({Rb)uwuvid4vHk@cU}qTb0#(h*JmhU5(q0ngLQc*ca>2}n^#a%8Iksa*I14Qg&K
zE<z?jstqy=lB$Xd04%<Q+&9y*I0ev`%*jZZLd!YVIr3RR{%{vl2)A-4DeCkBE5WXK
z)bJ&rN`a5bZ9;F$>B<*;tv^($3B`)dR0@*Du36(4bTO=}bbX?WTHH0?9aCxB3wpHt
zzGM!IlM}xRo#D-O-Sx)EF%z?3go%u@-IjWrt`1}L@p|rROBGQ<7^8)b#Ft}gnGH3Q
zSr=In@{vyg#FYp1@*_hy!eid|O&r;1SR$myc$(#T{Cz%FBh;KEgOsELop!VzmeqBc
z^0S783Rg=n-lz%#N2IJ#Kj%2e;tNO8Ql56ii}*oR7QbAFLBiFOAzJFVR>2^f|EjZs
z5QW=4Cx21?<&<_Z`fOt(*r|U5JlFgE4mtABxGrPFm0$ix9K$<+z_!vYVxT|e{(P#T
z^*v|2dROkp_M~E1AoihcrCkyUW3I-Gk(Q2*k|@L0*UN^M0b7TilKcdt6L-nAZ&?_p
zfyy?8g`aP)+d1&%O7%U!Km20hZFh)U#2!*&*19XZxX?jShxSZODL%)UQCakwOy@wA
z^j2k8!LG!r?jwGke1)&nx+^0J;kY}PTBIg~X<7=N9+_WfsI&F}dV=-?%%{>F!n=3n
z+fGfFNgS5s&u#;DAUO!1+m-!H0~xh+Y+u}R@qM8Fl)9sYA~p}!fzpI16}*x``;fdF
zd^v``&ro0TeITemvOsYMFF&}~K*jj`XLoS>gG&8G_EL-}**B1-z5wI6y`9X=C&$EO
zZ^cd(Ks0gw!k$#h9(o_(&qx&q_ZY}N2LLUGp(WSq*2hZOnN^_s@EPFub<u?%@{RyC
zzQzXe1F?vQZiYzx04~T02H=2Ynv8w*ymg#Ivc3M$tnIOb!*8IC72O7ZFGN7{a%R(N
z4Bz%`=GPIQ#C&h8r*qimkL62;6K&v1SjId@zWIJXo;O%FI-Ut-_ESFkB5Q<9l~#d9
zRu)#mKACCTe^|gg3g)^ZXMyySfQTPx<m-ibXD7_enGz3?BU0waOH_0ut5CSC?DOqr
zz4B7?9~qYKhEW$)=!F-LH5{}Ae676{UwZfmSIYT$?w{44+ap7HDhkm<JM)d3eE3Du
z->el@`eXtV*b4G_B=D9i)s@1zmNT)<u013W+|@J`xLh54GbJN*xu=YIBVV&hl+9Eu
z!A8_rr<_Z@wj7zR`62&6r~P~*m2US+PqNO3@ymnl*Jh&w1LB)B-IVdP&RJZfBH(ou
zFVx(fC3fAtDi8meMQ#wK)II1GC_)X?lP;W>mSzC#EN~8tWz@vzcq4t2upM#28^IB0
zQgjR3NxTWB@VyFB#`H#tvFQ2~f>%I;mj7Xk<}33<vp4hcu|ac=(pr7=K{`ZtbS_s-
zA_wtF3oAF|*a}abR?5|t5>qIX)FMgV+<K-};IG8^LlHYWUHDanTv;a03K(%hp$Gu{
z1Po@v*n^1U9|~?Lz%dui;CX&H-^3Xg2(9t;qK8GsR#tb1_{5Y6U~C6eBF>O3K}om^
zZhyq5;0i{6Gax7k5)mfll=onO?Q`;Sf0Yxs#digrSxD#p9Q=ZkGu#h(GYfa%HF8~s
zz#}QYl!!<6Qxl9MWNV+wPk52IVWggjNEiM6Fjrjkt2$G^r>Cc|h*;Fi8s=GmQsrd3
zp_>w6hOV7NU=tackg?ugY>{20PPMnYtKIgL+*s})^}Fj_0W#IJ1W8}!FsasWeWP(m
zf(COhXJBK;gu$2x@QC5nt4QjL#Kt-(%YK0M__c+$q_-I|e&alcUe41}Zds)$J)Jp(
zSaEr%f@XfPcczmaOyyf+diy>K?MwtOCTpE$$GeU?@o|hT{awbX?{7`)nAIm#NaPWL
z%cY#+eA6<ga{}GczROz9bSPc@O*={Xh2PWXkk`c@(hHooG9uK=eQ-+QPJ`Rk@Y9B9
zFLY#*lg@PMkzO!xoQh-1@W$3Aj`1C^pl80H8rBNEg@T#i1%)5^16#GIgY%V)dwBFJ
zt7E05{U|IE>i(mVI^PxEDw3k_E*5dUQ{x{qmmVV_V=&;JvsB{1-}`7+?lxyMxL$GX
z+sY!IrE6t(kH7~d#B^r=ZSnBI06b(*cERgRvd6FTOtXIP;A!B@9z7(Dp7xX$%HqYL
z@8Jv>9WChJu`)Kcw6O5$D_2WU9{1ZRmy82v)p7$WK;iiv2+!(a3P=5UwDC1pVh@im
z+>z~wOe}J$i;Ih)_sXzEUX|$c-#6`qsT-A$i)Wt3az2&$qMnv25@;C>&@|b*N#KRa
zL=f{oY4ic7HM8%jub^)Q#?{aR1E#Sj)Hy|;er6;00>z`RPgOe%C{(&2S?w%kuohal
z<xFRreGdV(05Vl*7$j?9t*H10;AsxcY`A_)?^-{xwAB0J%86)(O^x10obPB41{&?E
z2c~9_!0BvDywET*qKFl8Kh%oKB~)lYZ~IEr_HM9jElZrcM?Vk_C978F-O@?mj!WLE
zt*HTWwfr4(V%u3~CR+kXH-3#29l`yBV?JG1R3M7`DAioT%f4SKZJhpfEWU=aLCxj&
z=up!~1bA%~Oiv@B)}zbrJSwizQh)yW>zHYJ!5bOb-iP1SV<$C8)`-&0HsjH@-g(Y>
zd1*}qU_6}MXiKEvyjhdsq1`K-L%NUF{Vsz4>C!!1x?a+g_}YR>k~f`&!_vlGJ`Irx
zx*qF~BT1IUp+Kv6D+m2Fo~|43h5>QpJ~y6{<yoAqr}%xDncwy1j$Ueue|9Z&9LCQ<
z(auJForjj+5K%k{K+F^r1;D~HrkA23u=5Y(6lg@zWqQj+x6^(!VWfr~W{M-@c4>Y$
zf|URKmcqnPpTc#0*S)t5wal)j({9XIGnxW6?j98G7ppncEDm`DM_MzQX19E0GcLCE
zj~{eilv}LEz9u-umfs2OlQ+Y)_g3d_0Ddx^r`r@7)BI3%DVNR=$PIUtfuL=M-vKNZ
z^iig)B$6>63pJz7IWVDzW_~mopEID`>KS*8cA!`S#ZnGSct*MDw=3)5Dw{b&VLCPD
zOp*CjUHnL8mu;($AHmV&By$2>j|&+Q_fnK45I#@T_lcxG9$%c_0;ji1ppc=X{|2vQ
zam<c^f$OBR!^8M=`ozC%KMJ^PRhYEd10oBMoXymyD&6vIK;ryFO;#tXz^;lv-ZX(J
z0op>p78VK!17Nm_0uVN8?0x{5!3l0;0Hl>txH&801EL{wgq@0KGm{b{bt{ExU@IiL
zA7mOZy^7ua71+4QtGuKm%ZKVdLFg44fEoed8<1;J96yAMW_H1B7UY&ME+{CNgbWF?
zzv?4E0oCvT=a3%Gd(*Lq4x%h351oKQZx869?0yF~AI9M)yNhkN$shP6vJ4lbK5#tV
z!2wkK`AjW=h%0<7fKEb-i#JOQ1Z@e*)B!R)fS%OLmoKS5br#YWhT1bpoTP>PD7&YO
zYi~gNUaPlAi+m+RO)GB6|Lypw<Qh-yQYF`VsUnG4<?M-hS7y^NVYB8#O{uBNs<CWk
z)ZGcm34w$QUN3eGm$^_Gtmcu&$-l9iKPcO^?NOTJ&A30-TmA5q(QYewFuL*y3g@ea
z#mja*d3jCQpHlguZ^FMQI4t?*8_AtLRQ%BJ4x_>^VfoBK8vCwiCI$_;wt@9mx*m+S
z{K>_%?mk(1I$bptppe%AOb%-E;eGJ&XayQ1R3CF6&0U1P0e6XEY)7^{p>3{feX46w
zMMcGOh)KiHS)lFtb#}B)i7dxiuh{}kb6sS5Rqa9+Fnot+yaj5hpJ(n2>DU2=hK39e
z$_WElA~+Y<728ZQ*phX<Pu})L@`bhCWeIOruq;hWpw<?s8`Qzu@^p!p&${cS)n&s*
zW_CPR@ln(yDn^=Kx?n@0Z&0;xnM_W~;tSPCs~?`is|_7_OZwW<b@o$zo=a&0LA&3P
z74<H7PuD|`I|w)@>ioD2Y=7L_6&zrA39XuPQr<h4fb=`f)E+G8nAqCdhCIW7V!iZH
zRTwu%dkB;>Vi60EA*mzV?cfBa=@pFrVv@EZR0eKsVVA8r(UEE}+v+IloBfJCn+kbo
zhbsRz&<>_x_>qXyI(HVSIYRvoIeA3l3vdficNgy@V2%&suQbYe?Jp3m*4w5A5-je%
zZ%M#g0R09azej=SM0$@OU!ETc>B)x0?CgfLqSQs;zMh9ZP5;3!zRcZ?jd*QtBO@a%
zq=o1){kObb<ha1-1XhD(e<qbFEPI~%^DiDJT!zlj&I3+oal|{Xb2sb&iy<JO+^$T`
z%Az`ysV@<>io0Sba2Qh?4#hZIkO{h|6nt(hr2G>CkDAQxF2DUdvFm@J^_Gd{_M;t>
z_SsVBf&`B|_ai*xd=~8wQqcbd<R6O%oJXef)oE}ZtEsE0DwUS7w|kBcW&~$_&8|_q
zb#PHG=gUP;#pLmDv$eszH3dBkVZEH+v+!!UVDP-cG0LW?eM@_^A{fK}&Q`<6X0B|u
z77pc1H?(^b+4&}={`Gc^&vGSDooBV4VZP9nOHOS5rdbelSF0B__{me}aATg<9a04|
z$4zO@l9#Qa!Rj}t+~ajNV#?GhUpZ)n8)csgx>a+jU!+8ZUG`R+jN-)Ri|3kl#xxl(
zYi&$cb;Cf<>u6Y$`f65CD4Cj=R5))|CrBHIGiZMx?sA0!)PAYc?s!L>+W@qKH!#^?
z{ly4wwc&AsF$|cEcMWRjbx$`oVzWoWyxztSzHWox;=+(X04lEk2Gi6y0>@QfQX-x+
z%=P%5%PeEyjl&a!P6WcgC|cJ=k5T)leP~d40?wD^c7?THkL5XEQ`G!^n*RcyGxMHB
z=Mld|{aITktBDpXXI-eq;6UqryGy>eLXVs?@2jh*3gO}%h5Eit7)?fIO$e3GqLSSX
zJ2Iok<w_H9YRzMP@IXm0StTj9QT>`PC%|dYAVXw}L%ST>0<&O`)|-nM5yLbgGSpKq
z<-ZO_iO#3{@>+4w_~SNjg<7LCl57mj&w6`%&6tzY)9;e@6R{+1Z*CUfJ=6g59kfft
z-GAs#^g!nNjDmvQi55no%I17pE+Y!isjIf0z}FKB#R76Ct$x4!VEaGp&Q{<4ezi`H
zFG15Y^^3$0iGgLv4LJ$`tlfb#0|GEh`WuXOD&p59iEx4`5y4B6j6rk(_iWoEEZ2Pl
z<)%7gy~Q~f14DF1Aj*%5OO@z>Fu4?na6dM|D3nX<v@^EF_|zL_oteWB)fndxD!|d;
zluHw6*V_+3g@?0w@|$RSW@bJa4mJd&Oa-PR&@rM}X@BSR*D0&7KZltV*mON3tRe@!
z10TPHVC4tVRYsXEu#1ae9LAZP-Rn$$WLf5Yra0MwxgVdNobH9Q!NsS65pf|d8rt;8
z?9qO>MW>PJ%s8d?O)tV?+Rp{AeRj@=p2P)s2hbx2*LhS_aLEqc{CX72T28>Ts}(bp
z+YKIy0x((hphro9XEoPiV9}oS4RoF-#u@T{@9vVo5N-fj)m&NwGpo#iJOP~t4GO2N
z=@W=GEq96W@f|lO2?PbrX77%#!@7sj5x=8INQbAKDK4uZ!p^=8Be#%?XiNwTi4ccT
zqz5|F=B^4pft*62*&H&r<hX90Uk*Jj=t;l{wOf1eqL5UH_$&89ua6AH!8L=k*5zfq
z;s-X7Xkkukag7p59Ex@yVhv=Nfl~EYm{b{Nv$42)1#NTHI&aoO=?Y_>@40O0LvxFi
z%M_c`)_4%?dp?sd`hJ=RL|8ekkefD5*!?ARt}PJl)n9?Efkz*e$RsyohOa<CVaI*D
zi6!)7rwH;q$WZ}c7W6!gud9=VN)9mD4;QvKJ%-FGfz$_g?U~Q@^Ch=V<JySquh$ic
zk^0`SzU5h|48H?zVBl-sT=l~dW~;_Jgn<){IYh=XObJXj!!L+u0^-#4TgbAQSFB-L
zQ}O($OX!m@tgrj}E%;VCI6H&4si*06A>n#Z5ldr;r&>r$R@UMux7>Q$as}sF4@!+=
zqL>5b^%Ten)Q_wA-urP}&z2UKTa<%gy5-k?-iZ{6Ro)0V)s&O7O=3*xU-a*yu(DYw
z6&7HR5yd5JH^M+Rc6~<)(4{^wJ%cdG3?cPC|C1m-Zj6+LZy%!@6%}PMEw1-+@ZB!h
zfKi<R$^Y`We6Tj`Y1Vmvi6gM?VFd5OpYUhX(AK09;$DJTTDt`ayGvaOzkr&@QL`Wh
zZ6_#1DTLj|TU%S(+Hy_Wy1>n-iSN#hJ%CS-ohees?Wq650t6hzoIMf-vUl?VP&nR)
zboK5ojCaPM;z3@3%n|J2eTcrpy~Hgm-5v`q&=$WizJy77xH^Dn_NU-Q45AoKf=x+P
zt{J(F?0rK%vxDoHY!-?*%P^%}GS@xBuG(0oF04z)KV^6sZkPk5R@T%i1}sn*9AgW_
zvq*<<y_yZRCT+C>9{R3+0pr@;VCY6b-@W2lFW8+FfDL!RMEIMbCjVe!V&W^x#SLJ6
z<UwO_7PJEq&!9ocZ!3lq1Knt!*YWijkjE`=Z#TGX!$xoh-X+Q4?m$il;4wO~2p-q{
zRhXQkD(ZfSWOfOA@+}{8_j}Nm+_fr$N$IelaBnVxd&$83RBm@QY5@-G@H}WvK*+MQ
z^eqPklT=JKitNbSQ=ba|Y6L<9hnAH(4F8!M0N`H#tB2+9<;d~*M%BV5quanKSklQ!
zmlozMp`he`T}-rvX+=IpLXJu`2_%iNMvo{zVB&$)MDJt#h~5+W{k^?W>$=atzv%G<
z&5pmNO8%sV`~E6c$Iot@9wMY6a;ZBXGJ&TLjhgnLH<Vc)6x@{WpuCafuNfE|#FfCm
zlF;VUXhmPFjusc?=8gbc6JniNrMC7rSQ8elVmVOlV8sPN*#=fr_*NeQCx%WQ;jS1Y
z^XvH`CMxQ<rDc*p=Fxd-`9aC`T55e@WUid!18)jOqGuNb9tsY+;dK=MP_VAZJ{{$y
zlN743A)#cehRO}n-RFmCpWStmeVCt*QvBMGKLVJbSvK1+`TeurM=2LzgsD}>lep3S
zTG|dq*dj<ZO7hdee&jRy5wqf(9`J&ZNmYASXplU@r;gG>WuK_lPU|l3Y4MEkk6wY?
zjbQLu?kuJ2b-_6nuw%0;RB<N7<Y8`jZ&q<>9cu}S2;d+w$DSxD6Y~HVP+3+6oZi^f
z75UfvA1g|FfK2_2^YnN(F2t1aP$?PTJu@`)8w48eYUs%pwS4iuG~B${5x2zhB~VvY
zRsD|r`;z{YK}&!mo7*G)mQ@tV+EjHks3gu#&>=|BbY>v_KH<2NKV9!{i!%M5yvG(Z
zA578k`Tpf4ZgD;?j}yk|)B2E@IZX5)rPukVGojHvuPUF&HUq}jU+U|@FsI~@1yH>U
zm<4zSR2~VQ$8Ys_$}H4nvmU7udxKPENk2!;0@67wG>!Mx-(zV6d0kwpe{@9uIX*6=
z`2urbAtcTFJXDjpCzwOXm@QQUX&wo9T|I?-d`(M?`MrD`ir>z7`49V247%H~ls%P}
znz3H*${beMfH&lKX7`uw$fH-B5QyZX>I1YwTDF)cpV@A(Q579rZb}q0d`|w}Ul^+V
z19z{ZsrmT17*^h=;VjAsFim!3*DcG`a(NB4t>bEc)5yc*8}Lu#W0(||3&96=m{h)Y
zczJd8(cT`Ats}Ku@aQ6fDL=s6bC^Ng9-RS#wH7EZ3y3s`x)`Lw;W7XgRi0J>7yPOm
zL}75*3FPvyvw*AsOzN*@!EU^mslD@Z0*L=h>Yxm2?*r1eu@3mDUQL_;Qaw<J^K%kr
z^nqiq_FjpEm<mTJMilEWPcu{MlTDQ1cI&1Kb-B;G*^~4~2lw&^)UVe`{lVQRlIh$I
z2;3#=uaIM~*L_w6CfBN}poBOvUfxO<^@b^_!oaWsHzJ@{{D7GPkT|wXpG{%R!U#)W
zk?E@EV}%bD8v3E0Wzppj1#@G#yTB?s2=*65a2U9nA5{!gcPO;=09l43@x%)Zs>Ai`
z#=n1m*%9>uMu`d9&NqTb&|qFQ)UC!abMmJ;n2pFbTfZ1G9)td17!i9^<3b{d6j&2n
z_H{9l41RPwuoAyuslmFs$j+P)m)75f2#&r+yD-EU#&?o7y-Pz4p2u$E&DZunv6h}7
z$3a4W=qoeLI=27p?g;ub1MZ8HxKS$FM*)GH7yUyxl7&c;nCriOJ(tG5c=ZdrJsyms
zfSZnzNa2+Tf|TUs<YjAa=m6Es0!v$lI05+2d*W=m6evJ|*ofQ^GdDL6QPR}>P9A5`
zzbFupY8H>Z=kAlahl$<S!0-}LY_3AB`Y0BNQkHZW`%*WkICPUW_p3f~z3g9c|E0(K
zD`X_|SmfgkCi&hlB%LbsS$l)aX$J%S6r&i*fHMVM;;N|fuaJDje<vIqrh;u5m7Xrr
z>pw{i^03%VH1<u6cXCwJ9a7R@3iD9P`H87SEG_b1?q8(UEAMess_K#k?N3N5rk})l
zD%=8=YvT#CX1Y*Z81FE!68N>=W@Gb<K^PkkvuRwcF|Dq7$O7d;6jd4<xRqoiB+@m^
zw6wG!8>pzq!6haRaEVXNl*jWx0sAczd;%(3L*E*O41IkMHURo=baY9P@Fnq#^htKP
z;Tk@u*rU~ArvUc*&oT}x9L7rqWYm-2{V9}=c6N6}z5E<OHDw0;9Jqa;>4(=<DTkMq
zmO!U3DS7kp<0&{e1s#PFpJ8<2Z$MVIwq61X#jKvK3t-NO9rV+-$IE{Mr4txSFetF(
zakUB%8JbfSHU80YqK@n_Li_Bs1Djb-QaOy+8XfHt@_~uA(1>^iViPg3Ct!X}#%rC#
zSDHo%1Z&Fjvif6cL;mo-yUi`^*NdgI@`^r)WVCDO8B_P9W{XN2n42KS$IPLl=X}b<
zqFsuX>LzRkc_2PR%-qPxCQ#?Xi7xL09bzqm-{C#9WWZ_eiVf3n`6iN>6GH&X67ab(
zgL@z!)JDMZ%p8THcWs+O4LldKNTuqYG*KHEq(QdvNbg>YFNC+%ks@<&%^q3l0tDSL
zPpN==@`rSEoJ1gi>I9_rb6>&9^3R-+cVue`u%krW4?h4Y|NZ;-V9(qB3bZ6N2TWA7
zRM$QeXtpKjJ|PH;LArrXLlqDJqAcuMHpq%>#iBQ1rW2hAztjkDO;3UDFYK^vO?*y?
z0C$uFIPpN@AYeBnuiMx}M?pe@sUGjZ#Rv*+=$0Pt*utDEVr&0#bpKg+Mq6_YrGx<w
z64Pcb^-hHFg}Pxxl%NY+7HJktD4_3D0iowO25@Z`BqYkop8=hYzX9zZ)_V-Cibo_B
z<N&QkU?0tK0et;dn2Vrz=J|UW^P<Zz^U4Mdu-{)`Spg9iW^l7g<!Jd!@GxAdhAt^a
zf+0tibAd4d0P=tM@ByNx$MFtaWbDLD3#jLeH}RQFp;^p1P7E$Sk}06-1y<2tX1&~?
zOt&9oH*o+9z&EaUT*K{g#I_s+zkGM#33)+$WeEo7*k^quA6Cx}e(8V>l!JrA!GgV&
zf%!@)cEC8<!IxT?f!0Jf10O5s%s)pl@jK*0b#OsJmIkB8tOl|JD+ytS=gi>XI$TfS
zBoDLTponvW(1-jVpWnEW1py>f$i`k88>?5ChC-;d*z())hl!BAbSo!HZ%64E7&?1<
zm4)AIcN3Y(bCHpeog6`dm%<5iK+qEk)Gj_4)IEdc$$czr$3SZVj0!Lz0<WGps0o1Y
zZQmSVXW!P&WrqC)A0rwh$<W5Ifx$yi<Wv2tGN3KUX0B9#SyX_7as%K4IpXt@tr$`7
zt1b?hXv^laxDVdH8lDRlX%A0eKEOWw5wIr(O_RoE@BF`tTNuD%1JiDJVIpJH&|l51
zJ)0$xVU<-Cx6pF$a~%MEz+eo9VE~MC+@esBlM@GY8jxOxZKvt{Bjbl|z@Fk56--Zi
z4yY}Vu~46;0mBn6HgqC3N9b|FvxN`=rWc~G_9~^rpV`+EjT2`Pz?0DXWW5Ft6wV;w
zvJ`oK6y{+I6xs58+@>JQ(|jifw0Y3995Fp)0xHE-0lbInEZ5lvAzzG5f}&Xs1|*Y^
z!?Aw$pGsan$*7*g6Y3S9)PlbrJQ*v=W0=Z?b|{=*1Kla`m;MCeHv4w<to1W6->rtc
zil!_hqaji`1^V?Z*7;FalJoI*b>RJn9RLQbpjrZ3vp>*ET3cU-i{`y-^wyv&;z}!S
z1H&I5JZSCe!mYr2FY&*RKzt<?jlJfxsq!(rfDRByjw9($d=h|IWZuNY#B4ckX%G1o
zXs3Zq9q`Z4+>o0vE&_=2uCssf28h$nkmP;q>e7!Qh@Nqi0Ey?Bp>7yzD6$><11qnp
zKn||#e)kw>P7QzR?4NA3r%e9}(P3_k>ebkrzbBQp{O=H(zyJRKx?w;zyNRNOMLs3%
z^-SOZ|ND-d^zD8ew6v`q^kBUTBQ%f-)v)*84h)Qq@o*3G@$d|f<hH&2dzfR0v2Tha
z;xbEZd=e8g;8k#797#lPN5|asG?aodD3bpi`D}SdWUArJ>T1#TX}_2Nv`5Sm5)!>V
z5&5Y9Y`svdfpru57yerQv<v=u_<c;bYW}smyaRx{q=dw{W;`vSmUA=qzfb3cM3g9C
z5XkoOLj7_u;s;ho&N1W-<^Iua+yL6UJFOa^tGW8|o~D;b0S41(Q`3fzEH0j_3FE)6
z6eo<L<=7S4%DC(vZvTFW6bn5_u|qLMs{aX*XYs@=N)(<YMh%1$Y(T00Z)d<_nTa27
zHz<}#<6QHzg^_Xp`c+7DZbN9p{?r68<<oF$o9dTo(n?^hY^J961oRpsBI4rWa21t(
z`gBEg47m?rzC3`mUGW7{sdjdD7pEiq=HFBQdokRb1CNqKPQ~^tt2Heeyy_oSTDSpy
zzbg9U?=e6hps*HPzX>QIv<1X>?}M)9t6BH6EKKK(@u&bhdB=Z)t%-QIA4htUu>1S)
zaK#9$iLahyy#M<mxVXNQA2f2UV6vcjZwk)BEZkxkkcTNGpaG2g2*yF|Lw3(<od7Kk
z&>HMP;j-{!ZH?co>m8iPM)T#KHMrc@iNSLNep91B<MXE%kF8RuX(IG0?0@b79ayXQ
zksZLe@XHt(g%CO*bG`j#%KASn;5@^duxWE;C0O%^d0W^|l-qZAU|jispAXeXiV^{3
z36y#+OPyK3M+=_#xwQWo8bqZ=4O@e`Z_^BBU;SSGp!X5&0wDjm>$XpTl1Fs{D2K<|
zU?8OHfKb6qK4Hk-wPY*YkG@024eGY;o*s|s8cw)SBdDL1Ij)JSxg8z`3V?`rf9)v}
z7*~%fjX+BfXi#q<*uXHr`IR~EzKLoZ8|cjhW01f=n<4ca8N@$pjF7+9+FgM+iR@Qq
zJz;-OAwHG&g+kKxFhOVQqn#b_88BEMwlwX8X&GSEITc30Ol4|eVF7b^=e>V+nOQ#{
zwJ!Vku|@Ui(>Q<@4}bCX1C>Y=&_kFGBm|-p0QPxaPCw~>qYMP<5SC>q;*)McmL=f2
zqjn5T;!o;1r?5hnV<rAdujAr0K{o-yVQ!~&3<Cpc8%d;Red#cnkPha1LT`(gLk{WH
zzn&8EXtYtB0Z&%@aiD30PIy+l2J#VqU`5OIqCj=D`Rmso&~I^ch`8-zdxKj8w{f$s
zwS5JN69+f|<cmMRz>GvAuy;K>w!`NHO$Aa4tmNR}+$gUn&~dLa6A_*0y9R)BBV9rE
zES^@QA0o$7cwap5zR>66(<$z;_{SL+JO$_nbc?u5JNv(S2E!o5z$&#(7@+jj)b!nj
zrM30Dy?soF59FK{mX^q5cgO)!ZG6KrQT>p4{{VBC3MROnou6li=*he^HT^If_{7WW
zE2+H3G>k}b++Qsp%!4i|?2(x-uYSNl+|dtuGnJOVp~69z$W~r;ft`EvroW%R<dUkm
zoS&3zV0wCqudhhTl;c;L*Ss(h3WjunE1kG_6H5baxzFpO(o%DHcqS&+rlt%CDsSpt
zY6R>>LYhm9K@fNY;E~_4=PUGT1LQpDn9od1sN)Otw=(y#3{ln2+oU<pUJU2Uw?~k)
z@p%$kSy|B?%{F+e-nqL4Rjo9RgP0hlVH6}QZ_;$YL+lB!HOMgp<Uw2xb=-mXB`Yh;
z0v;(G39JywLjQ0j^}LOW3S9g_X#W5a@x{xRY={#QD@Mef5cAv7F<-xaEhyMiT100>
z$j6B7fDbe3PqSZnMMcjoLf-S9zhgmHcLnDvNr{~qPTu<;B^cie(S;&=_^720q%Lf2
zfiJ*QOG{r|&_j9?P7(!h8n}s^X8Kx<m&HO!srF|$U)|x)VKLOCmQ$Z*;J9S9!V@;L
z$k+W1@IEv#njq_6>WsZodV#z>;;yhgw2R)nc>^Sspq;6YD?SAU1!_(Vkgt2e&b&=N
ze!0IEr=HU;g>(NC>_6aS3cZ+g{PgLQEu}4d>tT7YT7^SD1@dN)Tqp6_fSrdm#FX2r
z2nnqSD4ek*bA{Nc)M;`lr7}U<W$n+Qsi??9g-Twj-HC!OR1UTi<NevjCMLAO59xVW
zmo_*3Qz{b@a$$fRC2hIyjpv!o)6+duQ%B(b%gl^^|GxH97*E%KLEH=h-Kfr)x%mYI
zd+L|?%-UZR5-8TuoxecK@r&y&WPzg)or?57uR~=JTSv<G((3u!uZoFL9nln3e{msB
zLvu($tfp&VRZ5`;UZ8CT^~04XqR9i>Cq}_oY3tyR<J1GwX_*XaH{u!bz!dBc&@Pkj
zub6hfF}NR_zYolXhpMXHts%zw9jZwjB)u&V^eiSSlI!aJe9&_+D-MZaIDSct(Rzz`
zG{N*6O96_!2~r<xx}i{u>+4-1`l{LQYW{|XBBP^>1t{MruEBhh9@lrfPtZaC8K5F2
zCWc@4v+N!bkqwUUyH^}s3ohrUJV-uVFgK{T7xR6?jzl;71&-Y_ln}C4e*Jn2qG`la
zpO^6;yQS!#nW9ryS5)8*+|<DSCZ^?ghO6<8BhEiD8}Val$@=+onnfQLO4pKqS}{o$
zxugM>ZJi-O;(PQy!6fs>GE=F}f1*Hi2l>+U`1o<2v<TN?0c8#&_A<U!CjV#dlQ^HI
z%Wk3-V3%2xZ(I1Wwgu3dE*gS!zzH+*Z%W#XoE!ksn?I0cu|g(EnB|?6<<`z*f-m`h
zsCw^stpEQDSW8j%iXwZ<$SB#e$&Bn|6p<vWjFgd;9hnIsqwHj6g@&?KQX(TNqRh*E
zuFv=W-H*rp`RB8AxvuN|8qeoB=Xs6;p=*7nSeZJv1->g;ik-cpH(la3#k=^J^`$-x
zJM@1%GVU|braCL2Eu~2i`>pxyMdvpPJ>urxZ9y<l{`G?7V8^65+!e^y?Bl+Xo~cn*
zeT;X#Xic}Co_bJ~kuZAe9debpxs&A8x{r{txw^X_k(<o$Ns3dv?dx2ZH^;^8U3fBz
zbZ_|Cvj!9iiWDc_9LTz&s;VkC7xa{Od1d98loU)pa=t8fs-9NX?8@G8L571n=RuaK
zBs=?^8s(*eTNe)LAJ6)uc;nXnn<OmyUD*fNeiicNpn>KD<e;V0#gP3w<yPEg(U(zE
z#p#J&9)A9_w%NIRyN~Q=bC;XEMZKi)+f%tPH#fIHV@#7+1<^U1NuE(Vk%}*3wCnL?
zw#dHidCKyTFN>#*bh@aQF8ra(=WD(|N=hHXEzXfW(thTUvHnpOT3Sx*2j#@QS)OtW
zT5jgVoI>s$v?BX+%EkAp#I^6v8fhPqKC({nBFkwqc5m;AK_uo<Cs42YH5z*}ONopB
zUZKD%`bNi4(0Zj9=3Fc6rz5(X@MXA&WyPsV-o8bv?XwFk;3tnN&vGgeju38L)PHBx
zRc?Rz5_gk?lAV`~MO9T^(xxli6e?aZ4lQzp--|m!9yABFrfnEXc}mnMadD}72eHFE
zN3)7_@8jr@>rPJUot^&4i6Q&5^yTt>P3hcEO8$7sJ=;=X{X^**kEB!~Szj1^<g>4n
z%M1_AP}ja^d(RMJM3<I&(87Y{5cBNpT*bG&TKr#}+mA)?(e)OX+@4Q8wNJ}MiFXev
z?{Yk=W=@hPt_c|RA%=7Sj=uKvZ4(_rY;wM|xvDsp_AtX5CFGRKHIcxIu$T`uWo1VR
zn~Rso6Webk1rcK!xoAa%jfrnaUghWKfZwZ&p2wHIze(oPe|wQF^tEnRjj~?c=>Z-j
z#5_^jQ6J6RuQ5&iMoLaSmMx@BP4}7aqDzhIeM}nj5P!|71J7^vJg)H<&0P{%J;6st
zVy?5gD-RFiFye_|#b~sb@NYZ~IHAcC8v)t9yk#~?nr`sDM!?X&<=H5)dc1G{Z=G%f
z66nXz!eIecQ#fV@-@HMmK7k5Q?IsZP!6IXMd-acSkxLOaUxq{X+qY%lg;Z_qMCGPz
zo&i~pGDh=5LvtRgR;`zJOL5WqEXa}!B7iHl!RuNT6Bfo~#A2$FS9Q8e95;30E;5cF
z65FQZsua@BM$M<lG;&6&%K*UckK}<rfTBDcMEV5AF)`X-Za<CgGBrJ2CmW+`$jtD9
zlj4L-@PNu=wVEIB%|tU;XkOXVyj=!kXJbSx!{TE4jinJ{LkEgVzfzJJ9%Uqw7f^Kq
z2NwnE^D14Yw$#mH#pcWO^pS%HO=>TDnVHo>46Z8K>iO$)+vm>;P}zn=w;M`J7jfyJ
zVc=#xuc&q4(pR(!cWQ2~zOXGK&EIwF_tu8~dzuh3htP<Nv|cWFCdn|=&Y6?k9{?8?
z30GjXC^7f%&T-Pzc&P#-3On#buOQ##*w^-wRObOE<;%<C;qe`4(;SFzE)Zdn_wF%1
zRcfWwA{x@YPc!+?D`JtHo1B2d(vXluIm@gceMHf2pzwWPqjUdv=mN+)!fL4Q0+(Xq
zKQ~@#84CiY)@6{_wrM9WZnAv_VFHlBE&mv9HsA<{+ycP50h>+j<t;pB@411|7dc&+
ziM@5(zFCuDIsIB8quAz<Yv~hrY8Dn#b&Ip9TH$qd%+bLU7kvHvZbPXbdr+L_BVxMX
zO0Op8xpHRrA$&dj&!UOl?9xUsO$h?*pbHT&E29sDRE$mWt3cI@+5QW<y3zR?U>Dw*
zU4gpc@!lga+D7CZS$;wOIL73N@mWEHaW3^}*Wof%%<!Rfl=J=l4))hW*lTM`43HRF
zRytKD_D_R)!^k2%JO+?__#B=mn4!&*aC9j@-+_b-(ZCbeuRq7_-xsr=ta5l@p#9yu
zEAt~97`>iIdAgcZq1M&&_n{^ceIVNb_@0=P1n0Ng2y1a4dw%GrgroLAAx$Z><HNR8
zar?nt@>ov*$k`xgo*%1cI&cjvrQiCp`Pg%>FJz5-We#Ib=w5(=T_ffiVDcfpn<LP)
z*p%XH=z0538z`~IIrsJFX$5Spmx5Ttdxri}!L01?Z^>iFR+g4%1QYFHI*b`jkcm82
zt$!Cb<`@2a?~2!JKZJ3fS3>D5se4bB80E1OjF1XJyYIi)R?S;2U0sENTWKR9HAviY
zNY!$DxGy^H>QN6>Rjz95_X7jE-n$!N&I8XLd~Ydmo?Ur<tL4M`N0R1&qW+f8{DFG`
z*xJ^(j*XP}=a3CXc_SOn7tY`?J_CWI8pRlc(Zb_)t*_(a-bFLJ!J3DC;{HCKBYEt*
zIixr^xP$+PQ)~v}$b+<;OfMT0tkTGrCwGn<IB)<8>Aa6H_)62DI4JfMU@YqMfxbRS
z^LjWb(N6J1>j&@j24Dl<VwY`%oM^v{<7jL<u2gIqli&71cJL0(7KfG8uwYfS-u~X3
zH<g~{xO42EN{dlf51WwT5D8!1ujlKYfrEeif39gu>B02vq-zDU0zBv8C0-uk%dT;E
z9%|4NNJ_aj03pspKl%X^^yLpodoxdN|6Q<*|9$7m)O8@?)f-GYFJ5N1W7Z(oQM`kV
zKOg5O_hBNwkJs0AXw@h0fX@yHmJ=Qm4(JIN=H~(YH6oXC=I~&1P%{}F@7w#wYL$XF
zM=LtMku)fVefjlD`bUwv$72nKo<&3=FMWI;U#WSCsl5(nLdYxd^YzWscmMc6dDqE$
zxm$6&F<@C)S{n0zm=XZ@pFeFrL<;irbHh<wx$8(wdU|+MQ(1Yrc=QPmtHHlGc}z{e
zdqikQ?J+-g=6x*ry%wC#7%mWKZG<y7uyNx7Rt*>*oNuJJJ9qAZRj#Od_?L|=7%DSq
zMpNU~U3u58nC}1WAqx-x9=nMJ36|XO%>qLnqQTToqJ|;nuSf{^B-{^o($hh^@syS%
zU>?S`Gx|O<y6{ie5L={H(&F>;#qGV<udl;Ih~RvVj{))vy2VZ$a&SvS?avU%WTS;6
z3Dc(57Ah7r|Az%+$$5iQU|f8SRw7iw+|NHoj95MV2JW<f-<^E+=pvS+@OBHZ-!6z8
znb{?NPUmc|-<y!+2t4$VoA-b)ox|Hh*$k@pxR8+0tRH?ex<3e3y!s!-xbz<M035l#
za;Vkg$52dmWHz=f0QruNsY@Zb`>I+ozXv#FedhgbF#^KXarZ3X!A$moCp&8S*M0uz
ziL~W~kBZ#fzT1QVpfs8jyN47<NVq;)mRfXVzZHU=geae$7JXq#x;`i7%)d)g{4hUS
z@GO~n?>SnP1kUFwH((pqBE3)Qxcg@-JqBb_ltV8axV{Ww{B+dWa^%LMbR8KPK_rzL
zw+WI4StKul{(6LDd*u6EgD4Kn<RJ-%LZUh2LvHeJrpz57XzZIk-o8F)ckv?i%Q8Lu
zpQ<S7JzsGo0^GJcbf9_vI>^2qV5mJjJ?X^Thli=ep?1JVOS9Yk6>KjIi!v~X1@jP$
zRPt_?1JEsp*9WGn#0WTcFTH>0_(<0rzUiOxb<E)8Gn>t)-vn7u4C_e+{j3H69-nI6
zo7dyu5Csop6YMZP-Bfybi4v@!9>+7#!E7TeLGQzw5#Vx$LIAC|Vcqc9SR-uCaEx~)
z3-!Wj1Qd0?;%SQaclt+1Muy6)|ABy-OCnB*L!OS65dcxSfyj#G6PsOD!U^S`)2H7U
zb6I|gP<?bdlUI|Li<^7*qgkx7utl7?i*PL9Iw^Sk_$nlbc*qRRk<edRHwRi@WRPS4
z%R(m}_3Z1^Q~(j0u|Ie2VR<<<Eoti5`S*Yq>>sFbi=S4c*;N}d_IC4mttdyx=59Cg
zR;-4iP73u;sudW7R;hkadWQph9~{bK(^412;@LL%23KkZr5*;ul>zf`AU+mlR)E}y
zK4><7S}<ZMd1(maX8xE*8(v1N5zv5cJQ#py(sr$@Ko3-N0%HGsTbdGT^7okQ%dadb
zFnf77^9p0mV;@dkD1h+!yw{fUckQJN)4u>PV?TqSWWahfC}FKoGRK*j8FrJ-HsD^M
z`WkGTo8V}N0SbG}bxs-@M8JdtsNpcYH>|BP@Gp-}cLR6W+Vqe2)zNu{v4sB&;@+f+
zi)h@<V3oZl3;&G+Yw#u8*9yrp;*;@b*0HX3YiT2D`tjLvTDWce=DxTtbMf63Sl)bX
zQ~k62b8L7>S{09VVPXGNSNxChpl!Ov11zV&z(4g~xSk_F^kkff^Wc+o<a@57K}L$1
z8@gpEHoDYrY_z`5_E(g<Sg%~JmrA#om`4)rPBwb_PL*@nR@^nD>D)iT``UDN+L#m3
zaiS{eTdO&@N=g#cYRt$xW<&#uNzV&|XMr-LH;&_WXy~3v<9N=yD(`Q^o|~E(D6)rm
z1RN)r0Q9bbuN@<=+q8wnT={}>xNU$*Pgi&HVkbbXiRq3gCaGlZ=o?W?qO?6b^-cf_
z-IY$txsCA+cxGAEUM_`27-~0iChusmqPRyuLEz1!zfIT$C%MsF4WALRuP~%rgC%^n
ztk=#+8pSuSbula?;V}_{cs#fh9>4gmrNJ-R%hyi2z5J=9)9X|kMTjzDul1w?1P(3!
z_|#6mEFV{L(3TXr0L^$ME8$%vv}3AM2=|QwZNb3Z{S?3!hQg7}hl*VfKgc=P0<;R=
zrKc{nCJ7|sB!y#b#Lm!{414H$bMD9(d_r9ru_RQr*Fp=^OX25v&hJmMT$z(vWHGP1
zx~Jz6u;n_>ZD_$pafaigaGZaO@>o5FW#P-0n<>fclRhLTITYxW$zPOb`IyvyxfFVe
z!!Au;t+6ox#OlV(d*g!#icJK}o?r9GaVZ1d`41tsC8fp;f+k;(?jvHs-@lg_^Njf~
z%$LCJ9@pl*XV)`q0vHB`bBWF3yGNm77$)F<UYOI0!OoV5)Gu>$<epZL!Yc%MU-k6V
z(8Gc`Q(?(O&lF+|OZgAgKj5zCGV(_9<U@>)P?fG=vgzjL{v&RvbsoG6qdF4YGmc*7
zT$91Cgft3xlkX0~X&Svgfl3mY!=h5D0HRFtz6OUO>1Ql-|FqpuTd;^lRZ`|ChL%L=
z>z<XEJ^4H`X`zpUq;p&n?Mcu!>`)?rk%yD16}k#Y)IfovvsYmbC~1*N(L<A(RmO+X
zwwRl#8-Dwi(uJDxpbnyBIQ7!FBS<`D*v_SnUqZP6Zaq6p<Hif1k;KvOA#zD^Kugzt
zej2?<bRw6C9K>M+RT>KY*sMNCflI6{%NN4K!dlm%+UUl8l{=uc)<uH49aQ)?RCXY1
z_x1Zgj9LuiLxoKgc6T7hvA=RsmN65qaI?5`$56$Md~gyrXbGI{3!*vkHcQkt7=pDf
z5<t!!!Le)tj=MRfajx6Hylbox^_^`#lmu<muEWNU_~rB8OCVV|=p+JK{xD&p>FIMb
z?^Jr1@0}pqsN0$XZs6pL1COVn@e-XPmt~Fnb`8r%bRAcGQ6+$#E;zB9MTFRKDY;;a
zM*R3tZ+3qW(DfJ|X?QODATTouFogGaOv~`Q_V$A@v1E3t+HqN8f<XQ*#ofu(pqd-4
zY=cX`wRJMp_+8cw@Ns)7=5UoK+rK=$wzft#<+b=55iAB_xLbW;tMIk0+<n*jN|)5k
zpO`4$wxf0I95~Nyss#37dtfyF4c^VEXFdxbRxm4--xH}&XkT>KI_21fqpncCsZ>tC
z&(+?dJ(7w`80^8@(NSj7S{MfQ%;mPfe5q0RXcxtiX$&e5Z5p`_xx_&p2x_+CyN!IK
zyWc~?^`bP3+XpCumfOT7C28Y#d5)t2IBFwjTV%vDaMN&f<?r8HK})}s^#9KGTfQBo
z@YI9P5YE`JTtsvgGsl+wtlhm^aQDGO8VxRqvM<t{d9`*+rnEdW!*nb-p9gO+Z6ahC
z9^P??ifkbF(FLfn-z`%v-oD3FrBJ9b_poRJ#XEK%b)-uAt-g>rFd_bgO>_L1qxGAP
zjx~t2K;*Y_AqOH*(z1n(u)0XcyzBJ_01eoB(rAm$=-b$6E8ir&{gxQK2|*VwJBf2G
zN>xh_j!#1Z+7i5L{K*fJR*=8yh3gM<^NTLNKk|ff<Pe|kLD8`*Kp7Z#b}xvcGQ(DP
z!`E&1_tgIVX;)hd#B?t|kmtGa_lVG?-1pOc`TMaV5>nubavNNDH01B4$I$!{En^Ol
zszv@~<>M<ryyV2gcfz3qjKXK1x_y*ZiGNTEeuQ%$N4#;7(da#qLpdFc+0ve#$3~O<
zHvVoQl?fRZ$s(5bIMte@B0fL!s7H_rv&4vnWr6Fv2Sdd8x``dve`UD{w023O_0v>Q
zO1D<mNfty<SwE~DaxI)3SAv8t0dDmm&N4A|`rdmlVwv=O_H$!>{=nits*7+rak&A%
zv74G;=ot>Mju_Y?1GEAHEHA0W&X`LV--qk%k{}9h(mb+`dn^H+z|i^AO5^9LnB9_^
zlRU`G{9@T>s^`oaUA6Aa=ie`IlJ1DFbNk3xx0|!X54!7S3|F*%{P?l00JH3)6#{4U
zM~*(Ag;pNENeCN_hw9<l!ef&oW>0Kb&3B%wHsB)xCsqU5$KvxLPA&Qe!jnW9?A>{>
z>y{Q482iUFdT1EZ?DfMm?7+UYAZr<p$jPIrFAYP?O3p_7r9a!s@zCIBnv6T?!ruLd
z$jva1LS5mzIKhAUsV?VJ0}I_-5KWwSaw7HlQ00sgD6B&4>g1KAcThb%SpK?WNN$X1
zlf{pZcUKiZfxN&1+$ujI*TMY@eKA#X=x?I<Qs)g|00YV2ObYy6a|h$3@03B}JC4L#
z${Yzb=mcEa!d76rLDzHhvoKaHV(G(NgZp%Ic;T_ss>St62%}8tAMYP4aCLJF?K?^*
z<~3IZ6D)1j#%iy}fB^P67G5cX(G!Ad8!=*y8GMz|_HhhoMXt7QuL*2Q^_bdFCmhGP
zVjHrr;lJ)~XBRAUfV>FtYBnqew<VN%lDhHb3ntZY7r^XKt5?#w#M;X0JxS6tr$-Sb
z#1sQ=>MCcB-M}l<FWI8%0q4nAuK-;T2*yP$Xc}$f#!J!Xjk{}fc99<7->;e#i4B`W
z@WK4ssk_=27AJU!Lci~C4qcS<=a_tVk}N^ob>tn~+;Ss}Yz`W5hEpP}ZHIIu@sR)c
z?~mH1K~bm&tvYQgJ=DQF=`>cw@Ik%3ycVF$!W<1+Sw+VllYJ(smjNw9ahuGegCxP{
zFZ|ahyZd3k!pMJ)$~+aIULKtXCl4sltYdtA-L!W9j(be()|G@NBTX?#8G1-}*fD7K
zk@kKB39%T5Vurb|<NbR(C}<3O6Ul@c!6&CWU$wJ`wNkC)D@I=lsw1Ynrph$8p9UYk
zwMflSjiVg)5WCXn<<?dgWp4X}^B%O=@BIt?RL{{AYUkrjoCgxaAZu1yp<t0b+lh$~
z=d)c<KH>)=8&L#d-pLBOA{fvH{hc>Y?wth?6Q1IkrnI44-};$9Nc(;`U8w%o?dh<U
z;U{n7J0jX}ya>VW^AX`mScai(^>d9{N$XY>{y?&y;V+w+3;*~T?s2{HrGTBArXp~w
z#;UFYlZdV}?-X!ipGp*+54q^(;j=A0TO0MN_5_6g`j4{6KDD*cIi4VUYYeh-G4kFX
zJ2bf%$%0qP77S<{UZ;-s2-e-c{f+1=e<;My4#GEai%4o03aR1sm2LOPB#_Zi_5J!#
zeTb8yM!E0}^t|v~t$=3fsr1FL_5w!;1m4-B-0mykLB_#D&_uwG-ek#7!#4mG_fmh-
z0XDgPjL~XQgrc+MODUqKQJm~Mf*NuFMKq$^=Ld>(u(r3?E@(wDzF|U<Wg`FS92G8{
zn?b}Ouq`CG^EA0!9Wpp;5to4Opp~A^d?yAYC0zz=G2C#AG;9Fq@SXV#^#ln7O%}((
z;fYu09@e4o&QZn{?)zfGH~joU@5iFLuV4M~<pF;N-dpQAqP0fVb$~hfxb;-31$Pl1
zY3BS~$v7M)5t0;MJS~%esm3La4<c;xVZk&D?C*;0`q(x873HdwtGVvjp?#ZD`0GX8
z7p9cjRj$l0a>b+n4-4QQ1osa3i-JOkQ=6Kvr~Y{wzgxnbU5K4gAt~)T*14S=e6xlA
zP={Z-tAvPvp=e|IGlNg&3n<p61AQ~jRC_pI&wPEHkDhWfkC!`wrU6-qJvXoJ-t`3`
z-tRR-A0{aVWnn)Bu1x@t{Znk#EHyLvHuKv+(Vx{j;UOW&+hkEBD#c14zB!spdndcx
zUgO`7;k|Buv$C=v`076_vrq3%bK$lc-(!f1&+Y$aUSy=^^UwWWC#t&BX_7SGX`mMK
z+B$HaEd5%p*Y;pBlihixE(}ZnHQFN*4?FIb3xrK~PwQvT31Uo2UyAfYs0JbZXa5Xz
z@mxK1&qJ3=wd3;(3)s;J6_}owD3KP{G&rVkZ3g6~s9+LN0Jfo;R^u`_2N1Q3pIf(4
zCCo{i8;hqi%te;cjOya2dY@XS)JwyG5+Tu>TJQ!k=Wkp1tD{Ft{e^hVVuPaW5~@&r
z$8zhXD^Wh?_JKY2)(o0-Z}gU!{uXL$c_d@si7)SOdRp30alvwnFovmv)1@v&I?*tb
zh91S#3r*HT^_V%RNfmv6vkR}W%2rW5NnzIp3JU{A?xOxU66gwxrp}GtE(slNaQiqU
zCe0{lG6Rif?m&wy-^1M=4+F_6{mRd4$C{5eTe!7HMWd-HwXVPXwN(wZV}gP~1(r9P
z<VE)Rj5~BO=KN3lp6~mkV3D#k-76ZX9`YlplXZK#AdjW$v9#&B=3cp&$`t#5h6&FK
zZ5sQKGKB#8cLV1yZ7fXn<1#{eXDLFRKgc?cR`A$1o0?t$!tyM!e>j5f!jHK*c33yR
z`QMWdQ05PIL7RL2p#F?fY3-xjNJjPRYIMd7;<D`q9s0M66x?g#=OxG#e+V4qSWg^y
zc`eO!sQ}bXIuvs)-qsM^RrAevf(G~S@riXk@eY9K(X+pOfT;c$yv@<vR9yT6rvq?v
zxaE~l?$VKBxeSXMK=G`eo@)C!r1{%Wm;>JU@b>600C>c>k@e;7ebaYtc~K7C82Jp<
z1$~YPYwOj~iYe5CKl=-0SR65Xkp^mcte)W#UkI|#gT9HB1619F&}ZrO{Yq#LgB_yy
z@tF^B&W_dh0(%8F15qOHv_Z@||3N-@yGosJ??SWM!W%Jk4-;~+L;0vkyZn`8QN<~o
zQ&K!A7cVxl$(8<5D*<X#`e{faRjpAB8ee2+zEIHNLsLkqIOVINLd!%+xo2VFkKc`r
zi<Hik`}UPsnlWGCNc#S^?P?B712v0GS^op&HxC|s32Erz#9eAr^~rI$04Uqubfg?m
z>{C4Z5cvI*S;S&;1qE#bMp5@ThoM58abKpU#+tWpqJTiW9cn$dv@lUgStW<Ccuyfy
zVNmfzV>~>IS`7K&9*#WUd2ZyOhc6fbPWr3J0>O}0Fir3K@{1_EBpfuUq8dM8Adn17
z)4G{LgWYz?adFfqYQ$X5*?(%h!9)OR@xbHTqo+11c7&>qy$o+~>$b?DCdx+~3NgBb
z3B%$XGd4LE!A=Vw262t@Th?sCTmybxPp^EvRmfFUQxoPz^nSluN?B^3(dZvSFcP9o
zc=oQpfB&%;gE^`%aez-DYVPkZMF=zBsDv(EB7MZd9TMlO0wtajbpkgsL~5$5X*@_0
zgpVH|>Fw<u8`H5g+_NW?TgORY;>bl6lc(n;<#!Row=SeMSDl~p@$d*fAwD;H{(NLX
zK}uQKY2k@e=O6IpJ98d*`}Qritg(;wwg6^)pmgbb_E_y4*=9qbO6Li?joc>Y!rakV
z$#RSf<~(__KT1eK`fhAL(sD{lUVo!aX53%l^tg)QOy3TfiJxP80rVXc7YA&ZEbYdk
zOe<#L-$myHOZs5Cf46dZo1RC5s5oA3Ang0?VtM~nIJSk<ls^??D(8%B@8VI-jSVKx
zaf_}<4iA0j>=8O3um4znDq14qGzBd!N8vlDy_v8c5Rkn#_+RK$JLNt_EVO~!q=Sif
z$%!hgxDgd1KNhj;AQ{K@02e7v0G;SeHKMXF;la5SL!_5VUhGkvQ7!vV{T6rpe?Lwd
zn|N%OqP)Sj<kRxX60uYNsT$iEy_tCcqY_`1n_L7&CSI7BIehToi=|^gGy8j%Xir7G
zW5cftp<cl2Xd2mp-h%cMCp+0U9IRWYZNsR3{rt(2J4J`u%O8`=xFq(`W;ZayW-#3L
z-hb&)-0DP29+R_8{(hR8yKjN_&4obl3Wh%5|6_)-I*uT2t@{fN87dJr*tac2E=GEV
zFXV8%xH2;{NA}+veD*>dZ_xDIPuLr)qnN~@J)Wm^?Ba=>xoyO_mI3wb79+ZCT8+GT
z^QKfKRQvxetcFTPp+C%J)(0kjtXNE3JapgdP1gD6H~w8NHg$7#JBC8B8J>E_bLA!x
zWPl4^9}c@<4AE-8xBx2xgWFdex)T7h+`rX+h<EK!8l&qi3d;Yqd$ckaIk>sYCH$6>
zFf4%T<+!zMI&d@O`2PD)Erj><*tVI?`vvXl&#?{Y>D>vN&51lZLtst-giI8Y(RIR$
zhf8)bX!UmvETbXeM<LXM&S~#~gOFdLkqF0|hY+Y4#XPoq_?f4mQSf8XVi9mwp>&V}
z(gwe!|GuS7<!8^H0VUfR#Ptc$NfkJUC!VlJP^00a<pH%K)~-CJJo^>Jcn9m@$a&ap
zn^!&p{t;^58WQ2_L9EJ9>8LRCpM{=Kf`cOm#dzd*fqNpBY=;jwcuspGs!7_-B4~5f
z`RAu*j(rf*?*@l;au||x^c{HL)s>aEoiPz%Dn`p0_`l^v5PN8FTZM-y)E70HoiZ(A
z-9xywQD7lWrOK|Y6N>gC`6G&f(aqn#I|Xga*BWv;mVCjOw7p0#G^t-FCo!LYZtV{a
zaLma7_QQz;A*V6$10q0Hem)d~1TU{uabTIM;FrZkaR;knwLWZr^~#c8UNT|VY(M-J
zP{_Ib-1Gc-`4PVPh0;?G?;cTC*`(OFFXT&u$F~nqEB;&fD1&}Km6M81E{;$CvhuzN
z4ww;mc}6`TM{{9HFPTF@+#mGxsiNbtcR%4Yxu~g)=Y{Z%kpB#9t1d30uLB|<PRd2I
z_ctwW5evN2s~DpqNzXv=%JkeEENVEyEsH(8y#Y4eZfe?L8!_1n0IB5Z4x^Q=c;Zgs
z7eMLps2RKk%tMsd0b`s%^`YYY&@<TliP@7ZkQ%?<=K`(?AFMEt7t+1PZ}sdQek;%f
zZYmA6ml#@<I(C*9Ya?{E{DtAub2&g!Ia1f@=Owf?C6#aV5UHUJz_<mNx8VGsMC32w
zMAr!?)P0r3%D2P#yI$Sf8m@5MKYQCpt^7O>D)56VoZ|5!CUkos{U3kkVT|)3COZ0*
zD>@!~q@tlvrTQvJ@0Q^RP!CU^p`7#XtFNy!Pd>rT!J|!2^$pgLc|h;;b?+lmrywjW
z%w;=pixjHcw$9G)FfzXtrx-;qkf1igwfy@l-7W5`$I)~~&?0RFcSH=Eyf=Dt43|T3
z<`3Yx%%(BY8U-K)B_*?h{|LnQm?W*jE?$bmI7h4S6_~vvbYmuCrwbkDQ=po7rqGWV
z)m>%4D+rnlp4uDE2}y*K$R8X#g;junwD|XrPIrt0QzlL<f_8cVkQIL_+^vf`-~BJT
zq{&{eR_*+34ZDF8Z%uT(>e_jLRdyce8YeHtj{Q-bh|BI44MC}ctyPH~%W2x;U{QB<
zaJtvF#Hwxr8AUjhDr##H^DzoH3bhiYgt%kkF8li@pERq3%8+ZdhC%()pGYZJTDaW_
zLg=sa*iT|ZhPi5vh-3z#duPh5KxG{TAZ}SPIS%}vLBI&e2-n3N;O`P?Wtc4afFHon
zgGwETKib}RLpJ%^MDKoezQDbE!?6_5#|-{|^#BGiD$@3pP;cA+I{M}D^KHeuN1nIw
z9ynkiW<Y}sGA~*C(sc2H%cl!2A9E7U09k*@``@SN?6EOc_J{23ncGwuTR*o6{D#WG
zf37Q($-Ujm@@(RJ#`J3=@U*7e?;lTIKCe$n*1vzm|F<$`it-xOqQ0YOOG?WVHrx@n
zgO+WezM=4?)2sUV=6^TK_fb-^$*opOILaZwlt(IP%;SsEy<hKg5-U9oWojk3H10-5
zMt;EZgUMrZ`@eIqFpghfr49E{@I$L>(_BW@;b1agVp(v}Fa={STg&~uF7`c#2J@;F
z1kLw4r-<I36yjhWsl4EBA-~^jxUYFr;zy>>`sAB*TiOSKicySPUw`~Sd>$j&y^g4Q
zXz(0o`#OI9{D~?`=Yrc*y_oq7Zn%8?(POj%?w>S;-{m*3o__4}Bi<tWb(z!KnVE}g
zOT`+oHb#X>>dtF~4J`@wjT57RSR?KL@CP=27Mhk>@eH=YCywvqF?<tOuUtuB_zYh0
z1AqE&!p4!VaToVrE)_CO8<!IZVO_)CbNx7kyZcdG3y{PmA9tYdDti6q&GxFjp_SDq
zG(-rv8{8#@V~B-~?Qyy~XGYq@DY!OF{qPo``Y<w*_u(ttUlXgVbUAHrzy`?NeCvjK
zVtM%@m7;EPPZ;7qg@?Ol#y{r1;>!V)9UdP3YB%}KVd_JNK2}~3En1~umE{%|)@_Y$
zpvb@Yi2G6f+wyV`#VtwW&o`GEqX&wh$9-SWdlC-R3uE;u4$Vo8Y8o$fGma|@ZW{ef
z@u?#4M_d6f9rr7?Y4hqb*i?;Jf)OF_z#(bL(HNIL^CQUx1qHeS92yTx4kR62xM$j{
z-KU(RxGARBRK7k}EDFWJ^6)fqE3&cWYbOs>A7o*{DSUjZI+-G=k;7IE;V-B=TlX^x
z&%@wq@tcP6XG*@o`jsxqjAPTa5KiHe`aPW;bOMryj1$d0kwum!RTtlj+c#;iT@c~r
zeFPkWwvwm+vBn&X3@|anyKbx<P@$jQ)E5LfKl;OuW!5)F8M|vCS7H)XNKhPGih?ey
zG0)Vz5u>Svhd6UgGUYirRkC{Cnvt*zE!I(VjdI7HIB~+!|GK56<rL2p=q$%v|Cx9y
z8-b7TqhTO<q7i8gE&ItE4Qwy|4-4@9t(YvtmsQSX`;vI9Z2W3YRCzcMr9fEC#qp|j
z1Jqk)W~Q5K36Hxbdr~$KM!nJW-3PjZaXAp?EAjM(-yf;I^7SEv^J|Ya*9~b^PcP&1
zC~nO6JIFkaPuB7Zz~ZmYp6IZiTpTpB=jJM^)Xi9Rdn{jU%i(w36wk=0Yz`PJ*4n+H
z%UYM*2Fo!lyFC#_qqQJT`#Ues9OcH=$FF&wwOKfMwD$ZOw!NUAE^V#yB*ciP{O+*M
z&YVr%mCN#ri;L)vkBCo10h9|^8N3(~k2K1IQZAF|8NK?u=DL5))Q*4edb-&ILPhM-
z(7bKXmRgo}U*Z-1@gG`N*E|F`I?j@XkjG`NuF5_4`31v--eU@{_V@B7J;?(DF+V?F
z$bOQ8dM8O-BdA^VKzu{`rJKcjmEav-s(gE$^`!UeY(ci;EgZ($0a|_MNH;RX?Zaw)
z&Ikwsm9iT4og0`1c>8!w8&vgttRf?H&w6^NM6Hfkv+D|MWkHv2lvxbt2K{W(2G{I4
zW2qAIB6(P#yzKquQL$t%>+=I3)p_8D>UR(G*g9(!8cRGf$Wg&8mqm@RIJLHLRb{37
zXhrBzYVGrK{>RH}*1m=xDH1XII#60VK*mEM7!jWJ9V4e9ld5~Vq+8p#VEU2uHhnQ!
zs{u;uNX&TE*Qe*_hu)eG_T0CFq|4@-On~8;(m4^YrzrOXBF<Fo0i+c-FYftWpN(w_
z$4c@G1#CmODg7o=w{=(5f|MB<x3}-VM(#%K@_{ma+4Q*6z0PAa1=<Wx@P+bS`qbd}
z3g7%ntAbbflLD_C`>pzwLS%=~F*D~hY<eY(`xOwK1{^ZM_X$cVZM`afY^HT)`ER;#
z83^0%A?Zwpz^O}LNuCHq^*y+I?P!!ioSQ?T%FM6q&?jW<LiEC^`a5oB0Km~+LLx`-
z+~~Cg2kt|K9W9_@q_J<oY|w^4`?37vNhJ~i9=%;@-Tb{a-3At3%Dz+AS_h=hJ&_IL
z=SKRp3f}Y2aP*+?Nc2j5yPn6hmDO(q1{Brco3xc550tYDMc@^-fI|Q&SkTa=nPwZE
z&~3Jq`ks&V3MGMd6)NVTLPOiY?XA4UZ_V$sWiqp{lX<@Szs(qjY0e0;R<{gkDUpoz
z<)@8PU*4}ok)tAWi)*+>jh^UwLYK0~_nW^zo1-&}NjIm1^5K(ddJg>5OQS3#H)V+U
z1vDZ^plZQ!l~)1KaRv<yVh&EQe<>=s&;cz9h6C2^IJ2=R`L$A_6E4EKS{fW;U;bF%
zoGE7y$P2Jx1()K*5DK^dbI^8Mj;bQk2tLFr5(YrFuNZV<&7%1E4jl=iPIWE?l$4hC
zS(wVo7pRh724HYVe*G0Lo8e-!-r?bY1=)e#SFWtCev7p!)gN29f-IPC^YbO2OAF4u
zxW&fiNHhiZnxg^+nXI|i&3BtSs%hhAeQ<DZ)0z|P*%shOQ}{Ck^l|2K5AZUUTJ|a4
zvwd)T3xaW(15TiXn1Fv{O>N;pKc}V!@zyX!bl{*E@!HpXrgzD0?2{GJXnCkW>AdXd
zxcupv){f85U@18l#`DzAH|cb7-gd>rw{NKHcuyGAvhTD*ntLt@iG!%Ow>J(U2`MSJ
zp%OnF`)IrCTt|(xY=O$B%Wn*0d!H%%GKvfckPL+1ZS*{|11BSx!Ejz2Ti?UP8$b8(
zx-v_05&@Ke@cXjMW9!*L3dG)~(g_iIea(h?7C#c--s+n@!D{p({p3Fx0V>#XRiUYZ
zxknr~1hc0jt~?pKP=UkldTrLPrVRqvf#%HwU%DuLMOG_dPgDx4n(|-%yb{#_9QeSd
zk#zRcx5Z2!TG12zfMJqy6*hnG(z;1&^(t9N)B{J@XO{}SsQCEz$aJ5Wn82w{M^-*3
zb@ir<?zW)B{Z!KAJo}FPHWQ|h+E+?GUiM0tHn(<VWU?j=Bd3^s+fzeb9m;wqQ!`xM
zfB%XGa2T*(AR{LimzGZYaMyolV3Bc+5&T6fVIi1VCb1Y((rkLa?~HGP!#~*+hQQ?+
zL(DiMPJp}Zl$u&Wc7Go&H8uMgfi1d^CUY?^*G@_guJ~1F+475t8T2?7eeV43xMAWR
z&J}DLkT!o=UX=du;f(opNl~3Z+lqc&U0sRejSVceXY~SpNc>PMa~Sq1cbc^os4}k%
z({_3_N2va`GJagv%8{PrrfZLcR)zXntm0t$n^bN?8?7e)qU=Kn^XgJXWxd5Kn<_=0
ze}5lb*R6RgdZRXLSobz(=Bx5Yf*S?OBz0uL)Ln~{>F-BQdEiEgl*ZMMV8?DV!jrY+
zgCrz3J8AX>XXxEJXOi@ta`WEIAy$#tgU62bo5b?(A|X*y|E)~k^@5vb_Oe&L9&OmS
zZ*;nPwu@pXNJ!#56cl2Q+BQAnwsz+&y%gf)z~Uf;ciUBzCtbKGS(uQ?Uazu)gv4Ao
z!N#9fYN>HavdgrPdglov*mIM{((6UdM-Df)Gm?;e$QxRgxXQD0OmbE?Bi`9$jzMGa
zqoIM0f7HGZrMt_mX%Ho#L_7Itd}+4ecJe13?=B%*TSx&#UY%ok&FLZ%ue8eO(ZwIf
z)zR6Rf9x;nl=$$U&PK=O%Eljx3JStSKxXSDTAKd3H85^CHjQlhaP=mNsIZL(DGGd(
zNAI?Rr8%n`N1()8R(ec)pMCqAyKyu=F5@nYx+M{3nt5fSoeb2iLHHkxFPqkaPBE{V
ziN$3sAllZ}_ANWe`&A2?8&C}!FOTd`rvE3SGmgfniLhP_;q)V^VDHOyJ4lqiFa74<
zVvGuz<H#ld%qAG3^wSI{brH3oR<Hr9W)aLOI|w>4F3^kEqC&s9V;62w*h{i9G4VOd
zk~tX_;Z1eIcgP`4k#LrH`9LWb_~(spk))tjw_cdy=I?LlP3L4We0%0bO=TsZHp6fp
z@6Pu2Xx5WuPH#To$U!8T{{1C@0fWWE4Y0>Lu)Q`-J`2gE)etv7|3v^cxf((FSRJ}k
z^YbHlT3bl#>EYTE;A!AF<XeqLMC<teu;{us){fOB0Pp$Qb=~?!j6JGrGR$l`UK5x&
z1S6{*aO%`4%~#mT+`rH=xxIU!kMF<P@6SDWD0t1hvr*q7Z1`Wez}Fp~AO;9)=})gB
z3gCYzh+Y*U)CX~@Z`;}emL`AMJ`2OFlbp}b%~-{^oAZ^uyr(zeSFDOs_}&@3$S(wj
zU`~qg`Nl4khEQT~(gBH>&W%+tAR%e7<jj|A<DMN@mXM&RNESZf0CV-e*RP|62s_+~
zboFEoWwA!&BQKVm)DwR+#(qQHiyEMaJJ4&m#JQhWdqTk95-VNU`Kd}MIbIz9oFNHR
zCFepf8wJZi%2&|H5HnsId72|(Rb<o=ZPmi7pkQ-76{dw9ky%T~IQxeti`z4BWzY<`
zA7pMypoK81$8LO2!1%-G&rQH@XAet|laN%TB`w*Uee<ddyG7yzwRZ9sh%SISL4Iyy
zV*_xg^66891j;QVDie(N!xIvbj^OBn<&aVkay=vU?Zz)EVIU#0!uet7Uwc}<yvR<1
zep_oZ<9Pt2Gu@1WM~r}T6j+A59VklVNfEqhs^w;|-6~=mctSQa0-8~xft^Fl9&&nv
zz2uC-dG{z*ST!Yle#-I8N*{dw7tvk<%wK-|IK;rP^0R(xP&76#9NH3Ik>Z=&N&+U@
zrjs{#uyBNv?+0Ij8WFqgv0<(S)Nk-3nbJCU?h9YGf5}}bDXIALYOb#Hc!D5ELCK#%
zR+N_sy3jw<+yChD0{48uaH&K}OiYXk_khyb{K(p<sHg)No;%%YgRDr$v$T&c(`>Cb
z7N=)kdZ+qrSt#W3HNlW4Eg$Q(A+1+jpHZDkrbn1f(~0#zy^i=bL+<|;7wfLgUd2@i
z;4niXcP9x6JDsBidvsJ3IM?Q4lf^j*H9nljXru_Vtj15y0zO2N^3h!=p%QOG_2XsD
zE^PSF7Z9!SU-%G=5{JjYP9Y=?A5=m@BB3u>&LQdksI-uf4#clpvyL>~79=7!ipX>5
z|6)9#loH7|e5LzidVFM-9#N8$S5#LgOFjcDhmC<|2VIDH-x&NVlMi6fs}$-h_vSb0
z3R`;xs3@5wN^tk~S@t<Pxtz}049Hd2Bl2!2-SVcsHzP^JKbKp_kOU{Qmc&9XJaF7y
zT{A-Dt#u$aor=GzEpSL(Lu1y~g8)m2zCuc~LIY)1U<FOkb<}&i!37jMCJ6mCQ&{8b
z>NAwK#cighL+CvWNGR|DzQX0!t1UZF_IPO`$swe&eg8hUVC@Dz8n8rD!y;<HL#(VK
z)mu<l2#KO?aH3>cc7|GzXBGfsF;G1G#L2+TcFdph#NR!*xR$474Ci^<2TH;JJ|8;n
zw?xle?K(=kr|T~!046U{-t|+z-0{ki3$=}{Z~nWK1q0>3iO#{lA#u@$%r+_-YM<%a
zm$6&<4KRKF3iroDNOW-WQX<rBu71<?TE+SyBa5VG06^~U<aB*~`92eA>&#3l3j3nA
zva)<qiuF@Ft_rN}%6w~krl^6ZUZxTLAK&Jt)K}mrgc)FYN4~w3^TQO|e?Pi<DG6@l
z;Eld>$3UM7%A8i2@#q_b&AP_MM%fot&WilbI*d||N6CEWMk8FpjX09RWozIXv1AZ_
z(ra#{Dd1#xjPpuH-M0OXC*30>nl@z_bvHi=&iYbt?Wv2$BHyenqXhh=*XU4~z&z<0
zb*-?Oeb1=sqdl!Ep|tvwH<l(NqIATo)tclZqoR)C{0aznaCR1OHqdG~pu3l^V7qz!
zT|qYG)vH&vhrU8YJUI<Zy2%SBCPZ^hU@=bT6F!r}&Zql=u~({oc-Pou(8SElwVif@
zNiX!ZdhCm8nuVnriYDdDbZ$Qxx0H=e$dkGk%iCqDtEV>=baW@jRUtpWS5a2Vm!U-e
z8pZUaunqVBWR3#`W|PP(!gcqDP*R5Chk<UL$&XA)Bf)4gPb_9ga6z7xPHI&Fas~C3
zERHFNhfPY?w;5Cf47fK=!6lOZVCq5E0Du2$F_4olEidc(h#Zhu?WXOTMQT+(ch=k8
z%yo;Zms{&XyG&tyc>8uXAOQiT%k*q)&KETN_<Z2;z5M4-(7I%8mv-a-VF60r+S1ZP
z9Z{Y_Mf05f3MyJ^Ww=zKrL+W^TX11d&^8~UMKnkUBn!F9;T%tj1=<YN5FDjG_+qcG
z+%Yz6@bx%(vK|$A*Y9^Z*+s+jF_Do#RK#%$oK~dneEBj{{)XwlDjbTl19UeJ>os|c
zAJY+5=GWXb>Q1UOk1OrE)c5WkyRdL;PvjGU_>W!tEp0w8ahk>H)YaD`20;FYgdLQ>
z4m9KyF|RjIH=_N4xdYIA>za97sBonLwOu2?SBwcXJXN%i(${9Fs~zEc^Spc)>2k3_
z4$;O24MHTt#=jY30S;U!-=V!rIM82L{eWH<Ctb-6S?4|<%u<ub>1gQ*D=2XA@~Xd=
zrlX_lx!n~u8B|`NziTR}ZCT%&<m$cD)DetNqB$1qY6KPD&>$D!&xSkMz(>LE(bMwy
z*ngpQZUNr*)U26n3}JWfXhJ^M^i)H7`qvTI%RFcxT{$({)z$Uo%e&Weg3{8TKYy0~
zb_|!7OWkRHTf;<BParGQ_V%ivPPhKNwvCC6&CbkR`Ee~d!hO=AwY3##?0>#j^U-no
z#7V+Y(ZS8l*)jRP?XwHhKH_n1jf6uQd^&`vil<^`Bn>pQ;geL#t`CndSiKpAduxql
zO{Qp8TxQXcv}`#t_#{k?7*1ZZv!gLO1RSCJljOcHrQc5Ku)j<+a7Z|{BkoO?#sxq3
zun@Tvmz@0kI*b1AQ3odJjr@#bRmrGgp_S=E6iJc5_Ap5uMKCq)H0~o0rtGWy^X}fc
zbAXEK-uWi~F4LPCN=*%7($eU&l3Ur$;&)sX+R1^k_q2lUA3qk7I0}z{-Z+#=-tiOv
zGYQE>db||=l8jW^NBldB8vAbI-(w~ObCvEg9m%F<WMpJ!W}u@>=Q?^J``Wit_V|i1
zp`xmKxr>y9<o6IY3U(1;VNRr^_w@7)4RsC-aBF<}ZDDlj+BMx%rzRmUTUb~qDG{c}
z%QjH#R$<?JgCK{R=ea@7W@qP#*+$`_GmU)d)zwp#7dWuoYHEg1d60ZQ{+46+Rly<(
zZ5CkzcK5g1x7QusIBw-WeCTNT-%EMmr8Kl*p+ZjnHu0rt_nL!{gXP3G&z8|x{PDU2
z=rrP0RNL^IZEK``aXlilHCi7YY(X>czK)EX<q_&O?Wze04HdwT`&JUGdwOPOM?1T$
zp%G99^hd2Q<RyFb=;`K0y>xGYktP!JXiae`$|FY0g6>&eGE%$^D>^Y-;f6lgkGVpm
zLhZk|F1(Wi<$rs7T3TA3tP5EB+k1nE5PniF<g<znT^F>&Ang46wQU0{vgg$ZNY_+x
z+vWk`|NkrSaC7H*g_AKcr65xsLoLUr3ZV!@Ag2*2vbn3l!$1@#dy;AEcU$a$$^<Ig
z>nqn^b{E~LzhPb-hf$v`?c@gNPDR>Kz7p+abM3!^exy1mc4c#w%q6=wYfsUZ|L+&!
zeZ6yomw;dd0&Y0p5efMVmt%HOf?GF@j{%lLmm|KM%f^k@t9R}p&yy8|yPJfB5z*2O
zgw`0CPq<TnE7pyS>|5RXmk3Y<=h|N!wt*W9J`kQq#Kxv%)Bb5~YXg0D+0n83>QuJG
z6sA2@R8<ERfP0sJ=mpZi<3<FKz=riT*|j}Klae=YOzeMZl-YMnJ_d1u^O9L|CJ_%I
z8?~&(dHZkC(b2Eph@chsMyS=635uW-MT`W(Mgth8)7b=7SiD`^(}=HN_8(VnLqh{N
z2o8OSPy1)-@X*~^gQ?%~?+sU(yP2D7@9R6^Mxwak`jl9`U+7qxl4m-)nXS`-kTEV>
zT4rfUNn!JfQ?gq#ItBXp!wp{MhxYmK8Inxy28Ri-9*&Z8u-e^A!GfG8kFi2zj=(bN
zacxQ52h0!rvuXZ+{}jW%soVDT-mDO@2~sip7FlNR@D&0ubQ_O`NzkMav>pE9;OO<r
zMK8s@hp18>Z{Ak4^%w6OA6Lu_L>aug?0j=~*Xru(wRJq77R!_~!SI<l6U!zK61+yv
z;T#0NJwnJaUhm)r(iM5<j&CTNe?S1x??)tcI;K|lD#3#y<U;7|yBu^}pa6?)o3kz_
z#l%$8uRG*`hpR3xF9MEkF?^f>h_R^UP%a{B(Pe5C=m*SNNiyIoFn@Wrn+5dOpWjz{
zu|f~LYRNpwEZ-u09|_i<nuBav?=9U*5(wN5$b#Uq^9II<du)Ri5Y$qU;1{?)JB@Lc
zGf!;vc6_F#qx&{9Lu~Y`coF-4#@F{^MJKMt!d<Ay2Bm<G8L<|gDSlK1`>s=;>z2HY
z6DU^)yw0CL|J;Agh>k81961({jOz${X&_>a32PU8&Yn$8PEMAM2_!D$co8GK-``GC
zH=}w$J%4Ep^+am{k1<Eo)KQG3gEt;Es)02JK@z*OK_09%4Nbf@Bfr4|rJhMfR@Sjn
z%YPX1@&7mW4>c)jX?KVf*0&0s#WEFEx@)=^afUeXk&%%R2>Rgh8CX~zeOa+;y#DR)
zf|)RlV|(QVW%t$BNl%{=Gb0|krszvSqZAVnVR-e<Vd{No5+iXl0wYE-3}xHE@GvnQ
zXReU>m=m!@H4&)AKpDngRApYlIS*DPJPUNZ{^|2iWxW{r3OEs7b25m~@ZlgWt;G3u
zrk_6@Sr2ERe88Y%^HlqtJ9psr32e^OL*P9kXf<LtCk>xh)kmjEI6giA>?l7&eMd!B
zyU5xx`a_3`8)#q&xR-LX0PW;bzAjoNtSYOAr#yHPyKr94?A65C{2Vobe%kW4<=JK&
zN0;YEv_Re8y-WDV1yC)VCy-xscJO=8`(>H6>>vVgVj7-T7!366&Dy2y6n9R*I{*6R
zw{@N=*EAHekoVD@a7LiOZ}lCfKUnp%cJrS&^?fhKwm#$?o5RFG&!sze_N8PyIepje
z)2re;y;%dv9<aYnY%nORO+~MjUtdWRZ8|tRF@bEeE<DD|<4vkE^_TAz8T0Mkvqy{9
ze_c|1Navv?SW<w>NIen~6MJxJ`10H`jA*Q(s{*_XtoJG;QP^yiwY5MDN}>gg^6nha
ze9tu{NglU?IMd0&)p_$fOOMW4T2dT7ehyf&B4L$_kB^V%5AmD%-y)!*C56D>6sD3|
ziA`)WKchfVj6*^Gq?sVE<ht>93@p_0%Pq5XA&vg=$ykNC;R1ab9zI-RuxK`W91JOq
zvC*7vkhj?|E%ubx)vE?q@8~KxPoGP;)+yMdImOeRA|4-ah~Zgi5I_*8;pm#}yKIz}
zXp!wNmnq>`q1)f!SBay8ur>{!SB3Or(=z({y->jbYtvTFMF_l$Vz-m?$kVR?r}L##
z6@v)w&6)fWWv=E_Jmss0q_IJOAM2Pe_2ox_D1}7sn3x!B3E<LN6dD@3y!Kw>$SZxn
zu4RD&!<#a#Jw2R9kN)gVY?1SG?N?+!_A%kZgFNM9$BaiA_W&*A!d+pc41vq!pFBCx
zX1&wdRFM%8@gLqtGgmsEdz+!gqy6jvi==_VBklS4)_DJcq<a{m?yk+yJ|A)3I7{xY
z(TzC6fDLckYM0vttL^%dfg76YE~Z8a3I1mqe9I|WEg1RZY@4l3ORmi(h*(Nj*VZO?
zqN=xjcBSLhD^KKML*Rs@ao4fu_x)X0zlNLRKwDZCE_e%q;sqF&fXzh`o}ybmf9FG6
zTG(Z3698<WMANHb$o7|bph+{W8h)2m&R5s_?g5|KK2z%$Y+~);pF^ef74?Fq!Z4jJ
z#?E#)>9X)a1l0>ZqfvswJ@?V26yXo;?Wer2!lMGxiabng+G3`_d!qe57T6RZC0vtt
z?}i#}y7Yarrv2(51#>m~OP4H5)66nu2M7OFG4fd!Sn`Mm5&9rKIBRZBSbRzDxBf=P
zI4=>wwsVYIe|rBQ#|UOzD;ObyZ|GS!z)}whr|&TaZ5M#;Jt%+u4%$cmf%r2>?Tb9{
z4E+E6hy_csD{nC+G0U%S%teLNX8PPyj2tluPJWrU%5!{Wy7U-RgQX1vdEESM0J1g?
zC0u`yp8f+R%v5L~_!@BC#lLKzjdlMOw9Br-JR{?9(5jtF1Z~8>;iD#n4`O3`fi-R{
z`@sQ`Y)<wSF^ZCCbBd5;Y)=Fx#&sK&*{DC-QE_LJp|Yw9PF&6g2AU=&*B;sWNJe#C
z@A=Rp`zr0#`YTg@;>l{X>xz$PqtlyCd~e0ujc{`K_~C=5h3~IMg{3OJ^zTrLBnDF)
zs_B-5kvWUps=TV|Z3dyCVtGJ*^B;X+OXkvY^D}HEw4_s-s;<A|D{|i^v;hT-GjVcu
z#>j)p3cZvy5}&L&IXQ#21By1Oin-Mvq=r)kfXP5i$PeVP{QT&HIZV%lTQE?7+q$`R
zEp4NfwNBC2VFiB(j@GeHk^(Ui!FJ?GwyO~L21a(lFD+oee0911ACKQrn+)HUJpWC?
z)<4Ik(Tz4LB$ExRl3(nz>|y1x*1Bh$pg<~Y{rtnrm$jbLH3@G3?A3TLIC%wRDN=3y
zc+v>A9Ai41tUWGypBQH6%g_g6>ta?mOX|{fod|vD6I&g#rdm9X9HTdYD#Zy*&9(#w
zxD2jm>u7ra82a4VX<>7)!g=Ys0d4G6@}cqW1hsra@61Wh6-Tagu9JCYPu}7qTwm@A
z+W6a?JkOU{Ob!CtG(j*Jcb@aub2osZ$?aw%pTWRmp{mKe(22jZ-LJ3M^9u>K5UD4b
zKG73x7UP-CEJ}a<=@X}%++vcToy+>RqpWd%kg;!%`8AYk2ul8p+b&7StOjBXOqrT}
z91o~<2dD+d%vwn1vIE!Gw*HML9=PxNIa+s@18Y%fcd-Q;)dD_VUTF;n6+b4p7ZK5e
z;lRTJ<Ro2L*OzC&K{c)YN$CnYYh((A-aY?cqW617M-9pKLie8pDyGDn=#uJiteZ?i
zxJXGN`lpTd(W7eIltqo*+r#UgvpNNPljV}7FdB8+V)V!R-2V5ud^};yhYtOyg*%6D
zU*3`YgFK<iemFvT2P^Za&+6X#1Py*(qjs`(^Hz=KtvLVdFw92=BEe`lfxuI%*(G4!
zr>0esc0Br!%+%Y=8$6vq`2G(I08Xc0!?2`>8O^^H$Iayh#*6sQ^l);Me;7Gi^it?d
z*}UKM+pVON+S4y~Wn;=DU~NjQI#nRK1#!As_fMB<X*27YYH7)7yq-_7{jPP&<e#p(
zcZxqJ0K?qp-9`_SLU_|N2opvLPaf}QIxQ!qK4euYHrusdNnNYnHSGf}D{JY;Zosce
z6e;p0icu!}F*R29vpZJdx|#Q#ge?bxofFzNcn<f#6cNc)4bJ_H&he6Gfroa7OKAJ~
zAzbh0NV#f7Cq#BVqQt>Fm(~MhWOdii%#9uC(Rn#Ic;>@k_hc#ORK3ZC_~mEUW-Fkp
z;BDMXNTBC4Km7qLWr<}Es8rOlM5dT~hKgANmT`(rgzM3}O|XL2TAgpos7fSnn(O|Z
zrbW3;Nk)ogh>^9Q$wI@YGmc~bROWSYbrd@!;(*g$neB?F1F^3;lMwPiU5aOs^W)mF
ziU-%O8)y~YiHyAJDU`2}yqaTL#-<qfaQr9(O$3k8L6co}FK(?3?&1oqtW3Nv{~Du9
zTGX;ZgsasqHb(l14-)udGncvcCl^5NWmJ%|9w}@RBff6=b=KVb-_J(l0s_pVPx#H;
zjZT#0PnL<WLGhxwcA7Es?cW|2Q~^pc7qpEC5KrGzm&%#FOLImw#eY0=p6;}4y^dh{
zbG>^i*?CsX$%F};M4Z?qGrzXEM|VSNNB9=YuwzHC<E!Vde(~JM`j)sB9(|W3+4tUq
zOzSL6+C!glhK;rjI5(HLE^D#?w+Hs=<quWNh|`w$n3&x76~qpQ171dMpncC!=o86K
z5ZH)B|Gl!JC;bZD9;6BDvjwW^u>=XpWj`>9#Q2)?5#A{5(#5}NcwLY1ht)RDyFYcX
zz=w4>cp7-7b?w(wPZs$Bi@dLRdilpFP*z`+y>v;){a4SCpij-$z1+zT3h+S~{01)c
zFei+p_W((pwX|e2qH1DNb^Xel{U7s5^4TOFbF;?gUK*y*&K(%%-Vo4Y>R$d^mNcM0
zVVB4l@p@3B{}BcEseCIsOUrbWP&%ne>p9$$dg-)J#xQhvB4B+U5z%0vbprGkj<HsR
zJ$kfl%%4~wVD^zcM)gkLsC8$j`g6N(XQR^iGulBO>o#Bci%ong6xK-XmS=L*BIy+Z
zH<xS2Pp1TwIVhT6rOZj%n>ZJe$OG1>?}5o$o?*9%=QLpml~k|7A?VW*q3sc|ZEA1h
zS`4E`^@(FQu$dqWi^fj<tkr)r@3}^Wjb0YpG<HHvMp(7aNut9yilP#G2ZQdPKKsF>
z>gTo%K{N0LM!k~VSpl*`pfc9d(gNDQDD+!ASF`W$FLszDhRIF(kR-m@t{k+kAOmz(
z+<#%}2Y&J@6><LUN5mfZq#RwC8z@>NS1X8K{xWHzsbHhv`=$6&o!_6D63Ys20Ta!b
zGR=4<D>AE{>8_b_xI#(|a$JqJDd#%QVLCETfknEcm`x!qT9{Ko0YYVqBY`9OLu)O;
zTy}O}`_32`5Cv9!HEy2Wk?TdmXN<J|{P{CH*2aaAt<g&M75+C&+Ce^Rt8#r5ivBZ+
zia`q9fwRJ=BU{#G!sGOpw4D-d6O;7OgMju0Yq`Do=LpY6_v0DPj+QT9F6bq8wFnK9
zidr52H=X^;n3YEv^D^VV#+%`>Qp%-42~!3ow-ok&-(ruUy7Bt;nKj}9ObVN?uUxG#
z$I9i7#cA?*0gynz>Tg0v)U=~^L`6j_zQ>fmf@d0VI`D4km_d2|#A47g(?&1`_y-(2
zE<+^Up9a*51j%`&C?%d))~X2_Ch*`TVQ2UPEo7nne#X~9+fDjbRv8$rudA!Oe#qs%
z#31d%yO)n{bw)3rb9IFdClu4S>l=#kkB8Cj;Ba7}p(z??V`j!aWYan+K;@zb%c=&{
z8=s%rS%#9c!3%49VcZk4S12*Kmq5>WyiWb)aD1x4vSuDLOHJI}si_CavW?=B*tnCs
zaVgUE4>aDO%A>zW;Kc=W%E`R;a%D*=cQ+2d`e*ba2JG1hJ7#~C!IuNXf)Y6V%iy-+
zGZP6Dd7Zvn>u<1WyBQZgt;LoVa@A{+M+*#FY02Ik8Xnevtjyft($=fkn`joVE80EU
z`zwMz1K0f}D*HFtimDo?n<@SFfEbc-tanbRa?<i+l5$4&hUVk`f)C9JzGq9u_7@Og
znY;FOcH+LjZ$MF!E%tTq+Ki|^D2Y!Mj`m)ziM%V|(Ku*4CfeU;o~*U5c4_<m<|L1b
zr0ZD?T0@I~x!(Mf0|qLZ>erEE*jVy9`u}0?&7-mG`+k2{^E@aCg~~h@m69Pu&XdeT
zNGek#DrBZXT#9fyktCUCLde`Gry-d`#tfNfGVk}P`@Z*n_VfIH&sux!{agFD)^q=H
zU-!DNh~qqt@9`Pl@7J5bnl18sb2G?Z>f)J7jRJvO803Rn_EkPm?Xf%U3RbkKH~Je=
zmdXN|VlOOcMutK67%V_FWe40T*|6PwVP0asH<UZ0nRFAb01lRju&{$M7e!p=(}X}Z
z<ZM#Q**qVbJa{hg?r7oc*NL7RUwoCtGLwxGy41#nkCuLu?X79oKXF5=(01_a%y52v
z{Es(g52xrki)-P!!-FsPSPuGi>s!BP$?{mI_2bC=oSMpRq&=8+w(@yf4c3%<BvzbN
z<g_j}+-=G@Vc;?y#y0oiQ5epRNF&J&v=;;UtdW@LU<(kc>R%ZwZYwmVeT{jh@ryeT
zxdk6Na^&Gd8R4X)@89iP9jeY+((T=Q&BB7KeWJ{*k703_-#!)=$unmL8~b_ow3pIc
zmOAN1e_mGh{JC?{j)rHs%LsldBuin|7*4{qyul~YG9tl6+h$lpxwH5}_?n&)n-{sf
zj+G7i*ZVEA--=y%;%D5SI+<|9_B8hcis>`*WNaRVFzoN)AxBXfEAMcO&CEAC5p5YV
zF~M)fuQc<ryMmm=Kb-MOBW>&RhJ7)zGv+nZ^_77Ylk-*w!je;V1@USt;g+De!{N1W
z;C3K)|Ka<eyfg;Q`m16DABvZrU(tw4cvI}ksG)u2$a=XZce36gsq(ryft3E*>u#U#
zk(Wn^H?*U(-oBB3t4cba=a?H>ZaS&(-g=HYrTfok)rTP(#FAHTH$-)~F{3uQQ~zN(
zv*-|?mS*7WT;OVm_y+k>Yj)w^b90d0aEEj@WxlG=<u%&1I{q%LMDn!g&E{mdO$J3$
zbu#-gwg_1Eo*k7GbD1xgI9$A(*U?+qLNxha-~eLV#=Qkn>!k6Qum)pT07yi*#(D$u
z)KHO8cu^IlQcaTa?`TTvx9ly|e*1b7A?cFy@otHG<n>3u8^mZ2=4Ld+>P}8A7%dOA
zyUEMBOjeQw^qVmj<`5DxA8gQv@XhzhlQgx@nGTb3B_%7dUSnf_uiqMk#Z}I&t6wk!
z$;}PaXaN)&;|1S!3Oe`UhlGn>_NFfc)fqi$Xlz5CJ(I6OM|@I9h?q@0@B5OR*!%8&
zAy$w{tmP_))@AGlqI&(e4VQ;$#yBvq2EK5#`iL7rhx-eWk^D;&6m6`a(L-URS`#1t
z3r!I2UIdg*70%9+xjIRHegG#Aa4N4sUH=_j5;{)HmTbMoj}0kq2;99Gi@@7UZ+=zb
znBpSz348_J<uKJ;3C0K4W(Zd@Yf|s_{QTLHYpv(?0NXab{JYi}nxtjpc}xHTHe@o=
z{kh6de0@bkL@;z~D)DI%7bBwk`z1#Z!<9Ff9XTi_UQSV`*amPcVI)o`C|HHZ4y6aA
zRxwL$g`Qab;jDK@l_(b2jL}~?UQ3BuGe27OnM6`K*P;(#7M}?C-ju5UWDn<8%ncQ)
zU}k{D;fasW0{Sk}HWsn5T-T+BV1pe2qR|y32<)kacwzO|uUh&s0Qx2CW<^-FkAS?R
z>Gv6Gou<F*6uW&h7IQW3{ZP2vIUyP+y@|%^WsV&?Cnx0k*}p{a^1$xyPgP2yW~DMq
zOkFscws-3Aks~=)D^4FhZcdzXnRmW)>C)ME!nVoeUAF2$d^*w`L4Wl}Yb4N;Hq_66
zg0p_zI^ue@W-KRO#Y!DY!hR}6uPa5*4#>!%ew}PZ2JQ7azGpWX(QhDhJBh9@t-oey
z*kilgPA^8&;WO|fcetm#F`DN3l`*SbD3XIDOF1}J+`5tW<aL}QRJAbOU1PECJWO8D
zUS2Ubk9=A$x%S)l?_3-lTEjYdHCg4KCLUb@3-QgMNu5s(zv>60{+d+Cf;Vq-j%6K$
z9LM6^lJg54yNSOtglkx73g`e!zW(jiOc4JWTQ|?J7h4FsN8dkm+iF8<Vip_YR{O-=
z<Xv+OcA7)L1IbPJ-RHP40HI-mA+~<~vE-(hUvXb2Ahgk6z=L|z!U94KP>d!fCw-qj
zRc*nt?xpxvlH9ZzT#W5*#l96#KJf+=$((Dz3DNXO_vkSpp>8XdJ0f#sGMD=_HvQFc
z)1Q@|o*p`b?b8WRqV|;0!7Mp2x^iy$99-|`X`g$ZH)GIzeP#LHy>}S#VBn7Rh<p%k
zAO(B-b5QH!trmyZQB71c1*8Z_gt)`6BJ#>@c`@cOUAaP3oM|qY5C_EUH8R54<U(R}
zv&x8FW{+iuhAbLWTKKkZ*|G&{(!wVS)oa#IB<K@F16NobXGa)mC!9Ze3~$NUPapVK
z#`@`ibXC&#@B8PhEi5fDz<*kh-J|{ppHe{`#hqqMtCXb^tJ;e2;&Y8PSvM9i`KWq!
z>^yB)lwrjEwN6Qmb};esUiv;4Y84Ce4pu^pYH#(5oKwUCi@Vov=|;U7HBx1tq;-Lf
zcf$sW%#4hoZxMk>H#VD*Q|D)fakD@5VakEiz`?;G`+D_7g6LTs0B!!M0Aulplle5A
zF<hZ6pGP{tKub<bTCo6JXU{6)S<CmIJAa<{9>?6m##3j`aHUBV(FItQ;ugod&LERF
zOJr`65z~8{()jx$iZ@tApnmkH&v$M=#B#oF^j=`&&!0aLmIOF>Du-fEkMRf-!@Ke>
z{TD85!zEk<8%i^~pgf(b-OXpe&K;xut~SGZLL3b{x%hm-I$d4eUyk4W+n+~7sAf!V
z_TQbhQc@iuy~*eZ!PA=&eLbaJ=dpXK3#shk?Fp8Z!IjbVG^I8ZUrrk{YLHUTJRdU4
z*mrO#U+0&?3Gpoy;Vo?^vC`9z5BKdU7fyIls%_KRxtrL<LKHf5XEWj9L?TYuy7~?H
zFt8V5*y0XP>K4B!s#uzGf7wZ&;mBMU|KY=G%v(Zs<vxghFQc1f^v_v9bffiygaiiD
zoe;jeKzZEzt*YUy5?eSa#vTQLg^39x9UY<?Q~fske`K%Uu*ZM`W?Pl?q3!td7j8jk
zSoljoghy7I;i<PbhSZu>oNW6JfAJ4a6~nX6w)S~wsP%2=a59+i3k?4fiV!_O#~vOR
zB_p%4A|zbm<-M0x@3D`MIw|ssMdW^2f_$QVD1ZxuhZwsFW5ar;##nlKQ_Zty&ps(P
z98;~XR`u}mR=fO`p_HR*&u5CH1Dygv<<2YJ{oT?+_!1d>Nob9}jfS08gyXa-!DD=!
zAldbkjy3eyqTqDbF&_QBY}B8;6>H-mg(aFWKfhPy?u4x1-!Kr?q}bR0)sa%$BW`=v
z=g|g7ta<&GsDDst_K+Tdr}$Uot2IUn^XV$Z>;LgrZTz+(R%v>pdvAdj^z_SEQ!0Jn
zL_`CP(P06Nf4k8BQzYd26|dA{`MX}8e)Y|7Z&tigWHI&23ybG|#muW8vx`^S(h8&?
zZ3sLNzXNvnF}U!Fy|9`{gXvES<WPFi+t-&?Kq@We(vj(zj=pps(_qZ*&mUaIWErz9
z?K||VyY;a<5D>Vyupr{I3vu1VyRffs)_0tnAMB*#vF8dg{aJDleoW%s=|zWM9@|?2
zD>xVyV3Z?{1UjV(F=A1@XOAHo2Wlyy)Bhv)iE-K6eS()k%&^8Ju)YNERIo0_VYA1n
z3R05c`v>c7Y8A9X&|C~QTrd_`as|T#K*7y87%?p#`jKl|7hi>`B6R>=<dR?h{oOlL
zIOYzXo=|6i`YXusXJx1zzyys6>Y<UcVKL*2bLFUhgTA6%sZY^cK*tSpgc37K6ZC40
zR>e!zu@|gEgif6@0uYwg0xw+MYzy7wi&sOSnxwBw)|r-EIelQ)STYDoP#Vg+?TJ+m
zKZq@r!-Q{*>B9|K>ci^i8$OkkBwDsU7vjtRg&GTTITa@3Jw^hU!xuW*o;<0v?Fhz2
zO<6arpf8M)o3;^;{?Ue|7K3naU5cK}U5%AxaTNP-1lmCOsG#r!guL=vz<tZSF%utw
zxbTUB|8UC+8h#B(5@Luw0PpjjnTydnYdb&X&~!-X7N)eD_sCK14ZT1)R;rYwnPi@6
zvb~-H>l*x;>EFJ+Ms1a4Uat`p(|sT$J9WZw3GSSUQ&5Sgj$^Q59_8!nn>r3chB+>w
zNI)f=4X5-OfUWuDF#01GmE>Vo){fbBdT-{XdU^wIOx7l#l(UKAP<$5uHBtiPgjDLs
zoOb?>bncxI+V$*?va+%XKFHVL(aWy*J${7!J}S#gBI(XWfyXamJ&<vni$I_)zxP*R
zyHi>fc5LSopVsVWVxr$YKHAsm?!Jz)pQzSj*!e+H|I%aExt?zW^@SL^GSkuVtM*k%
zHbV2S#B-m6g9F>)fJ<z=toMh*?DEPk;aD3Vzb!QSV0}4zGvPHxGH-5m-r4Lo0DqmJ
z`~>;Z)NK0#-o`PRo3D*^+*fmC5S=>WWn?y;uqTX5?%-2s$GpAOm;fUM_h3ot;RfOa
z)hV-rX9SDFB8N#2%uY%h8wJ_A9duhl{rvVbuz77~S-zcqO%`GXwg4Xn;Y*RdD6#Qw
z_t?Jh9kpgsng`yCLJ85|lqFqO2Gb;iH*prH1?&D5hF5IX%@%3b>Y9}1!~Lo`wWy*3
zgSOJA$}^Hnu=;xIFgbF6?fJk1>;WH>Ak>HW%vPDbF60@TpfrplUm;aNn@&|vog@~S
zeb45v6tzke#yS9FRo7`SE?e{JvC@Zrh5Y~kTrwi}pD3j7l(1KJu^FgSr8XOvAMQ<K
zJ1y@8^uHR3@@Q*t{au7|pqEeBK`>61@zgSpdQ%aa6K&B{V>_Us+~7-Q0Dz>UyITcC
z1!{OAjp7Y2(q-5Oq6Ih=l2t#pz&neXf>2@JIf#-HdSMQg8qg;-!63-SGSE9c>&Ccm
zUjv$Kyy*~1Md(+wdzK`Il~=&PH45o7&YPI5%{&xc6GHb|H&K^Z<skMf3G~vJFTXTj
z7kEy;s31RDg<z9$j$%*yu=ab~Iqbr|hKl%FBqS%go2q6+KUpWK!<*?AQZ^6Jau=pw
zejTg<6lIFLVAh&Ex}a1ex5U;&{`w@Rq%#-x9THs2e(ZaAVAh>mTwGg82Js`)e(FXO
zhoWK>^1%@4fyEZe-A&uKgJJbN-zfx<ccyVK#GSHXzsIR1db{f!wwT?)aZH-2FFg0|
zPtuwez^I|@t9sZt#E*v#y@x@R4+|wRe!T|V&5v-tTH7woZr$(jmxH}g@B3PO2H%7d
z_z2ZjgAK(-R8#)!h`65$+ehs1e!RXKs*xIP&qc@SwUO8*6|vBbLw8zj=16)X_{IaU
z6wlS@M6Qd*N?gwOWxPb-b0ZZMzoZ*pBduqU5GZSYTTSl9_t#2^oXWuSDR3*_@t=RA
z60s)lNi5zW32Pe~v_Ot9yZJ$3Iz&Rp&+=@g;rtn?$l$<0P2HBkp&_nuMfwV;9I_oI
zzoI-O9!kd&m3HeiJzGx$V!+S|m7nrjz9XEmrvF>JnK|9m;+(>Sid|81VoFL1Daz;$
zD>>R3+CT1XD7ygr5vEO32)t9j(;ZP=cte3omjZkflz8mN2I5X=Ym0D;r0Hfk{vNwZ
zaa6idLS5qi)~J0&(uj1%)MMGM#BWtd`)JGQU$M}Q&|H2WB1|8Bl<V^`1~k3c9&GI1
zlPnhaNeJ_|xv{w_$rT+`iR2XWC!R~P%2jtT>S2;t+>^l9Ka1UTp<?n5Pxr+$SB#9}
z&uq}N8@dh-^4G6Q@D9DOxPYdtOlClX)Ybja4go-FsVU29<WE&4RRLk6af0<1>>o+6
z=O%c14Oo5Nnoqi8U~g})+rq@m9I>J?ak1)UnCM*#{zna1={QeT$}gp#v0FYe{ShQO
z`I45RrBUEwgLUr*tL1s$7}l+iE{X3}3~?@vKX+F|q%nYVk1wOR?Eo1PZGlHgF!*tv
zxM*i*=k-)5-Cb@e{r2s2+#F709T9b#R~CFeZZ&ZRz6%b4x=y^L0B4Y41_Y<3lFRG%
z`v<ZEKZlxxsj9BAL}tmEo!hrBbO-ze5p&@A(36#7VnnPp5hUe`HMW{%MrNih^qpto
zlz7Z&>7w1=8c`CBX5+au6My5GHZ(LeZd+OG`@8v9hsxOdwJdl9$D;MJswtF1{T=zA
zJ_@nZSB4jB%m*7+hUHu|2~MZ&u4C8L(edzDR*nW<z|Rj8Bs%tV#+mM#n52v!8Y28D
z7rv!uXKN_iIA0CVpsV3JLnJ*D)zJn1R3LP2Nayvo@-{zP`5R6Fm2Zv9zpBT5CA3-F
z*#)?;pU_iK*sAj)FTgnGl&EOwMM7iR>oxO6!5)tu#ne7@V$hzOPAC_*ANz%y0_W#s
zn$SRxrbAPPBp?Hv1ZcmXZeDTXo5H<E{v>WIPe_iJ3qN%`1D#Rc<Tm3jT6Utnlhe)i
zqNod@4Gbaauu<mmHtZD`;-l-_!@1m-@tT==1f!Lx9ZXE2Sn<-lOM<t%fbHz`067uI
z`oUAT-k>Hxp#=4`)yb1uY6k|}mfQsNtMhDYbuwKs1+l~RxAlSJ!F8&16rBwt14Dgs
zKTykS%_`u{UYgHxn>S0<NQJ69M#=2jHK8kKt+<;K=&vVeCME7=iy1jA2?^Ta&$OHQ
z2ObeHy5yr^n%KhPQl}iIt!3Ns&JK`_OxGnX2T1prmTq_s1Y}$m4P^z*D9fgwXLAk)
zD@w&xi2Fg%wprIFGaP8-r6aqw2@g?l;B2paHlAb=mG9J#){bfa{^-0y3XgkFS#EjI
z2ztwFactIE^AN2Q_F=fWfKW1UAr(n4yN`PX6Pwla|61D2c8gfDfT1Rk%Su@rbsB2p
z?q^(5S6A<kRt~o$KE39rv@{j7Zi57qq^oqWKo}_0U%cn?6hnmYQh$E*>LO4qL4qrj
zPXs0G?%qX#2TnqPBBVTB+M9B$I4?`Raa*xN%w~NP`?`~sKe*Vs=j_^DMmtn~0XZw<
z;Y<}I*_Z$!G>d6F^hz2TMg;c$W+_OI^b$y>cx{rSle|SwpN1Od>|bhQvpfApbI6UX
z2InaT40CcISWlhEUo&Rz?7RqvBDNttKQ%H|J_!FUA~bflC&MniE;!mFmifYSDYXFz
z3duX)37amTyxny@OEp`*OQ-DM;RyMz@Z}SyBBKo1P7rP@x(S()El79Ti~<TjaKtxW
zs!lmO?^34qE6sd<YoPD=gpi6_vUSGr1vws1T90X~NmeHr7k-Lk*+s8PhTP5Pba`JL
zF=QW&X_vv&G}(JXu7IlFo#b^lF`*`-L)Dp_@5C_ICGA!hBJ6eEV#mSx5F8;So3B0E
z20o_&XzUhUqM$B8oE;R3CEgVmleG8~u<`$WzBMlkwszQRn0N11&AnsXT7V-O5;IND
z%1V9!LsD>y)99Sd_@WRa#okX&BKw%hz9RQ4JTNF53eI4!cTf*p=3v{Z-9H=h{&@VN
z)3GXz58t;op6*E;c$`BUz^28Oma|5*KTaykQzU4Euy)XoXGKIh!OiaT35x7K6MEcQ
z$<O9BBBS=wLa&f~=C&4iqoUa51v1WWHGT8u&EnX{ofvJrwi}gj;F*30ivyRetiCn|
zoXAN@7ai*Ez8G6UPd(=R!sI8+sw4f^6x<HETl!0nQ&X3FSMkyOwW4qYb+4iRmrcQw
z``UgfI~iQ`qKOKO)HlgJ@AB>zCF(Cpb7#xHkrv;hWni$K8Cu`N9wVx4Z~y7<-9O3R
zxweC;XvD}L?S)r|wKTM&{V?|5?O`u$zBG?u19UK9)PH-YO4gYAO?~q53jG?k0`EAO
z@3(*%o9IptE};r@L~X?2s=N02PKurgbV_fX=bD=`>4%4JLbt|VOLdhYGNUFsL<ki{
z03;VW1@_gL2V%bSrLnQ9J_{AdO<3@Sg@TvMUWhqBDNzhnKhw$N;o&g*^LdaKV)y|q
z5zy|aC*>d{x>W2s*k9Y%jd_u+lhc{jTPw?jAl^fM$f1WdT@hw6d-(?r?A{H_(+kW@
z(RszWtsuR9pY~WY#)J5Ma;2_xWPX04-H@=Z&GY&{X94PlKi=+!9~MsBz~f+N8bdIL
zYyy0EuCt>H@+AQ!_!%HKhD`L<_t(Cd<7S%G?$~T7WMOVTU$6a<O_8YWww#Mty*&7*
z>dMN@rw1-DgebTfQ!Tld3y@Q{5$l+yH)eexT1VeTI2X2kLJDb@_1OSj`2|7fB$i;9
z5iOz{7}!}pw3U9jze`O+>y@Kz8ZsHMa^PfRvot*WF0=EaWYBgEKZbt{+ixMu#?DS#
zxhkW#w-=I^14m!w94Ed{F{=dt_Y^&sUmA*G92x4Iz<?ntgnY-KHSa`BB$u%aicMmx
z^5gq-JY;-}%<OE`HFMZ=MZcZ>kUOP~{L%=`Bo5O4n5WvAu{rKCX5<)!l&XdXIdd;8
z%Y)>&>B=gg*hDik{}GsDfA*8tRa(l*GUT>f;pMV0%aSObbG;hD1!6+!4=UcdQt#J0
zYb7P!AiMZTTg6tM;DhD18WVsctaRC^-5IpLY=III=7YWZ;-{T|e@E?BAE%avX`O55
zrFk~q-tu7Wg90k7D=7HUTz|qIS(^#UbhbUQC-T>Q_(wSzdI}M|kf3BMe29BcA+sv1
zzw@xbVYvQ#EQv8JIs;jI2nekU^7HFM%&VH4(^YMUiSGnzXv`y5w3Okbs~J;%ekuv<
zWoUi>PWAvhAR(b2dgSPPb03<F*S`o0^Vqp^vG|ynn6#A1Pd}>PidE#6HLpW&#rlN5
z%EoYqxh~#L-A3mAnP=60C}9gRaCEeIw!HR@N$@-9T2q)AdGxW3RP_l)*$fY~tz0kB
zq`l}N?N;{B2T$LL)WCl1M*uY2<Y>~*=O;ozR%M3~D<~qObAT`JD#qF0zI}uEfQN7z
z)pSf%xF=8P8cbGkBK&xD>uOv>O6c<9q_eOvB)Y#Z7v{+uLfE#n6pj^b>$h+3nwrv;
z!$-_21+G@K<kx)is?EE5bF@=656>AeE(T>@P&y)kfzoj)?=JUR$i948R%9?0L!NM1
z@T^}6v$*Ke_?O3<_qhJ;tIVZamwUbX)7Fm~DY_2Ol!COo{42_J{v(_zmr=)72=J;T
zX=ySs-QaQ8d4G0I;hO8DVz+z1TTL)_D+ta>@WC_pZ(mwHhMveZ0v2jw!v4rwEBetc
zMb0y9$B$PuHxu35$^<YuD=%%bqkT8!Mqd+nu84lwoKzXJhmP*1k<qiEHAic>Bm+_u
zZEU;~5(s5iH{TbEu}M8!HCTMx<{!s^=cl#YvFtaF6G{F}0gpslHH|Kt3xsJLxt{2g
zx9*w6_nI1MDXp#p)Gf&W;vS6VmFnuMisoB<@)q~IcOB}!bW_yHjX=0e1FVCL%i}s2
zr_aWKHttzg4uJ?2&plsDHN=k_x?$3WrzIa>io?PGJXQUC;8c8p2PEEgiJGQk9m>;8
zKfAgx(cl;c&P4mNM>G}H8!dSOeGAn!Oa1z@mZr%@*(iO_BE3a4S!)L6Mzlm$Ru)94
z5fdb!4i_2?@|PBw&z#z;rgwLAS<f*$Cr6w5r8H?g0le-8ZsOT!m|PZ$k|a_&s>Q*K
z4^Vtn5Dkv-v**uKE~ZO2Qpspg#56TE_3I*{*JH=Q%MsF_VSteH{tYGCB@y$H9}X}~
z^Jtdc{NQf2hnCi6Scsa^n6Pml|3FRD`6?=|;u5u@1@~~MTjNtpelr3js9qDAQdziP
zaU%<Y#k6gQYtVp<9A#aZg3z&J5Vus<#FW>?!ROGFYpo44sNuD1^>8jdYb#uU=s8z8
z+zw8&JZO|*%!Oiw!o{%M^~4{h0Z2W>?hgIJ<+5o7chzB_js>zy(BFQejD{x!>k6V<
zu37+)TGntfAc!0ZBCX1jOGDU!P~X)w-TOk^O5^b`@_G}`1HKA@7TYL+ISHYTa5=`r
zz=;8_z6$3l%pPGWM_u>>iY^CgWjEWt(gCKXW}<y%$Yf|-TpuU~#?`=J$6v~QEc(Pq
zGQ{P_+jKZAFTMo3BgJu=Q4dks$n~(y1+6Sl<MfrYD=^bxDyCKwo1dRgeXG&r%EoGL
zf*`rhdcC3Ho~?HH4TDI}Ma{cDS=C>)B`d}TjS8hg7BMq31EfW8rz9+IP!qxfS?43}
zGM{|^zEl9mg*uq0PZG?<_!V-U=k6e2yq?wE%&dQS$%?hWrav;d0)!cfIU_$Y*iT~E
zINq(~(wO0uL*-<}DWfx3z?pCj-7q|5e{SC=@B_knGSD)s&v43a<i+B)9XqNI*7Of9
z$RCt&I(eJiodo;@kKjk-!6W!gs1bZ7Xr6w6&#{z#^=gEi9CZV$b%t8Qnxav)phXql
zN{)>+SqWoTbnUGc20m7~YRh~paS^7{@4v^}5trk<Joon&Ixz$L^3~6(R7z;ruNthq
zjT<F1Gs}PW^sp<pwwC{r>-R{~ARM4Oa3H>*08=Tn0atn}Sg_v0Ff~Ck5vUc~MTE!c
zWhLf_LEd#v%~00MKQ)!A{ZQcyc+d&QUENh>Wo2$2<gV+KxtW(kg@|UPZd7Z&0P=(L
zEG}HW_$RhE3b&E#9-LpjdRdJ0bZl8ZfPInt@@25a??A#c8*6L5JR2QgLiqVArq9=>
z>L;D^qJ<d*`N8e&ZY#nT-}@j4$6GfL$FeQC<lhL(G)>bpGjAZlL8M&~9#hZgqRo52
z+T(>~o_om>*A)0VAM|ce;!r_{cue4WcphO({bBCCU=0xDF*G-aF}D9rNg3DD+EWJb
z8;XDNSwP-7Go=}(LYP4oK-{q#sFNLVg?A)O#3~hfbnp4a$xaE0BFM4M7ru(G$T$2_
zOwSkwy%cBoHpi8vok;Z(5LXNnmF2%OApeZ~xC?IC71$<gTAW6=JNJdP{o`5MP+eV3
z?A0k+tb$=8wmvTUJ&W55?p!4bBLw7F3B$BVX*PC&k4e4I-({86wfywy4icOCu<*%~
zGZ23Q&Wd|w%N=^Ey2Es1&j~g*wo(PIfA?OY-biUSx^9%(FH8*f`S$c{(>kbpjgU)+
z$ghKK9Y!Ak0;7IY<N|4ctLdSV5)>Tpo`!{mQEfLgrM4LZe_jb^Po7^bD`<TFLk+}#
zKl}ePyWjuWFOL_Y--HS9HPhfe7&=z3HY?Lntu``}sF@MPp_z0NZx^cFNX`Tvt`J{e
z<+2%g&7j*=p)jhds#^C};H^Z&AHpFNQE(e?Wc2EzxFH&D9-&?mt`Me8>_hbl0net`
z7W#7(G*R($&j%PE-2*+sQh@S?7z;qdeuLdXP6niY47V^9sDngU2X$C%!VwIYYt6|Z
z;V@ALz82CxT8mtqR-cj#MUxHEgokQt6(73=*!nAXg}-5Y;>M7?3!8z<7oK4?fmDx1
z@N*jTY<V5bO-<vBLU4)_Xcv}d9m<$6K96*Fw?DB9fa>m%))t3}ZfcbVsF-o@X?L~#
z<OBN;EMftriUwPa^p%NxoXclGCQMOeOd2)eXVR(Dr+K{2Ki;Pj-i&nL;TEfoce4oQ
zffX21Fl}xxDNAKo@4<4xQ9`*>&m7&X1#eGsMgHiF9sE884o^VcNsNO2zA;8Y#B6Ge
zYqlrY0NaI|Z3Q|UGt<*LnI=BlhFWrzIUwRD@g*4%8u3<LnkeUMg_PKJ$u`?YFW&Db
zD41wx)e}gKfL_8Bgt>Vi9E0FaR0H0}(2`-C1oL}+u2DaNoA|Vn?W-dNFmrU3m;d|t
zNwXTonHt#Jj3YKeXoEpGjQGF|M}9@K5p;K0w3H9WZ(G)28oj0VxpSZV4t+F=iY~-P
z$Cr7I>dvI`d(M{|@69IT5FaDG+0$HHg?@+dMP@|<loM?4e3(RBCMaK^{>yisBSO}U
zzDUGwWay=Me)*kXem#Kz+4JWY=H`4@B*Br*vKze&#okbDpMKWHkY$8j3!5miz*gAq
zW^mNH*B5~!`>F1qjMuOI{(|Vlz@S|zEDt6?!|qZ+xM~o0)Ck{Crf7b6dlU>>c-~7l
zG&eWne882l`}!jHqsMlBwdk=@|0vK;qVV!0_TdC$5}#LK=T0P8p)7^-YQlZ<PY6?{
zKht}CX@D87*z<FlG={rAPoMhRKK1g_BB`aGli0e|+V(S~qrQxLYnxKhPGX624dY$B
zr2NYU-rXPl=hZ2QuK>V+jj#VJr-phY$pO1x03xo!lmGG9v152>W+oERBsRmF30)4e
zsEs^{BnsblB^zr(KxNn&K|q-+Di-l5u(<w~`ttN(bRnKi409VA8c?ZV+=qkx0x%TO
zOZlTkJGX3U&g`>7s!4QHRGeZ6^4vLb9VRr0_n|uamZFT2k6rr(8(Ui#V^#4gis{3r
zFTVgOvGR*k5o|q*A#M2H{PrL;olA)->tbW$Wc!q~HSkKp;G`!@EZpcAV<-mw{(7bm
znr434>gOjKqqFpD<`C3s9E3`SVgG)t7e9Xbq(R-n+^aLHzsXtWcm?GtnGZQJ3@5g4
zfv^B#4S`E<f7L2`9!Kg1B5!K^Ez2;lOI!=zE!=v(EDNv^WLdQ@2OF56l94+c)XhbB
z$W4D6G4OEto!HJpFr9tm>4}p`-v!vu9-~@3@RwW>TsPplg+BP2nxuv&>W&P&(r~@t
z4!Vi=-#l*!iLC;5ToLm+mCEo8>X1?ro?+1z_K&dH1e>8YJ489j%6d;BkXkm$D`>5k
zUV132`F`-{&VSAVLR?v3k6qgeYub5?JQhI@!)e978|!4E8}Wq7X71<xj3}`40nu`D
z%7<y9sW!6<%5F7*!+d;o0L0DK{rDm6>fz}bcj-QPDQ*f#Rf?H`%LxwHiZLC6ky)#T
zE`Y1~$Ks0iS#xi!{%EOpnO*y^Q^z}3t5F^}590N5mjB*uK%LN1AHvP<11I$BYB$*)
zQh7;~&=3?&G|I*?)JqBIEA^KF;!%@U_2R|vTTOGFW>fdJ2MHS7ogU}`m*i{6q+XdB
z9v?)M8SAeRb6up8-*7?6+DKe)!{G;amhsGx0sfbfiAk!Y7SWj!D<Uk6X|*IE4XLtP
zudaRG;^EQ1)PPC78kh+NZeg~|i%lr^1azl79s3!nKchTHz^F|8j(B=sRg$IPAzNv)
zMnSrwy25_p((3AC$kaow6zb1F(TMQ&tpX_yE6Xl|f}=nU`W%>hq)bA<OWcd(8;t^3
z0L;Tx4Lk4{G`((f##%X+`jwRi<IC;?2@hd|rFQ@LtEpR<Yu6&5@?brMhDWWBPdhbv
znGecj28l)M&EJ6oMT%X3;!)GDLpJ*kC1mJi?o*S;1}vzX>Ki92DNSF$Nd3V}E4D;9
zR=tChdZ167dmE8M<9xr7CF5Q|?&2{#2Yact72&PSj!sT-l7-zR2Cj1sjj6>v+Nm`~
zE?;27fFp;y$Ec?0dbPBdCQPK%9s_HRh5k5}KyA$^x$WFdKKsXI6Vxn8{OmUe<d9|h
z?(^pu40SLJQ(LynFY%ruCOX5}LA6POAyc=tD*E%gcUREDpe}+}3hE|H9Ju7OwP{?`
z+x8pZ+RZ!5LL-?4pZE7jh2gCPlo#Y$rneju;=~=hgK^T)?^}XRJX){yv{Tv<5S>n)
z`cz$gs3#tTddy}tl+R7g&I(=}V;9(YL{;U^l@hy0C;ufDx-1P*2HNlU?<3Nh=<aF%
zOARF87FjFle}=!n|9;LByJKTpF0c4R1w6_LljpD=m3fv3UPN)-RK{rC$5RGez?cv@
z(iKri>FKq+>2*vv&c)WlL%rmFsUmhqJAt<W!NXX8b&N?<u=lF~NMjf{{-3Rg{#Wa<
z5~3Ck+gFPq4`r`*T%{%%ucd*jA;T|QDzjm=TRnR+;L&{)KoppG03Up^Ek5Rhc5mOT
zJ%nDkVZlsLxh#WEGP)M8?A40$TY;j4k%sm*v0ELlqTk~r<AF?yS<GIZxdx`6n_0&m
zvVE8yl~k#DHU9>yTl8+$c7g$4`S7BUywm;5?@)N6G75abV;RV{6mmwvPl$sb3_je#
z)t|CCD1;706m1UMG)0C`aX+hWhI*$n8f5GKZZefY6P@m|kezR5wX!s8sjgm&<_k2F
zIN>MJUw{$lH}}HxsQdO-geX+md-^?(uS$D}u`EJ7pWlHB5WmyQ2#VcDVn$~h<F&R5
zw?))V!R?RDYY0pLILR>04L>uR1CKcad#h6DNvxyuWS`_wdG)A_YJOAEsn%upLiIur
z%5WUz$^`X=g>WKC<d4Gjn23~HV8}vVS+%>exJ-@X0LOc&XXLWd%DFE%vXH})`b5DC
zq%(kQ6?<VRj(G!Z_BIBgijPq*ys<KxjXLl8r_Hz+!mufZ&Hktt$-ea0{f3klh=<gf
zg;<pXqiG|(>os=>N8%#3Km|IIKZ>H2OBp<1wgV7yaT7k5B&fT=A&=+tr&TK{&)^G^
zld+xI$E&4S0_@sb7|31b`&qNXaoK`+dUyymRaJr<9J&P2{nJ3<({6%;5D+!C!kbMQ
zngpUtYu@xJ&_z*|M@Mo+sG4lvxieVxKQcwDQy&V}FJ%?hn_}ig9H)ROh_z_Za;lBx
z$6@35;N=^{LaDxNNKijtSW%(S`lxHN%Ja*YFDt+`la|VYrtSN}>^AH;aOK*y!%fOt
z?$J(4EZMwP)XFl?!aEDI8|Y!aqHgwEPf>;_8SSjjC28pbu|P^4Pvld!LJ%wE3&7wG
zO}b&W`92))61O@!@HNYe)(+Uh7(d5D@4J8ek?0aigw|Hb07f~*8~=wA;Q;R>&W5kt
z57KVQNQ0t-*7YuaZ#7P+1b%`s22dU~V2xsuo}P{(CJ%xI%WF%W-hMW5`<PHsY6HF_
zS^P!FdF01w%zRP%Cf3%a85oFQ<JgM#gnX9y2^edr7l07@&rjL`D`}~$4T!F3&hqc(
z$dYm>y(gwgN)?zi&v|w078jdsF1Cn143qU>w%Wp2`}*}!v#KbJ)udj&q`RD`cO+`1
z-I;qnVJ%5`IvnQ1U$G9LbAkgkJClkWC=X1Q26;TGpN-!hV@p;swi9QkQ)zLCH|5z{
zQ%Eu0ht^JL5E6G4)yW#;c~*(_{(=Zj8-CPu6T&<^#6)XS6Mogj;ha77o*KJb-k3#&
zs;xYIBxpPP0WTFigrjH;T=Lvj+-#!$qZjXa6!@!;_-XatmogU>w%kk6T?#FWW<GVZ
zS%W>{PW%mWCn)BQ9oG>R020t_rN~co{@`5P!iLssPqFo#JD}~8&|!Znwkiq%aY1V5
z&RKxIE`&=g;h|1d`<w)0dWaqDXc?>_7hj@;9YM%D{Gyem(tvm$$#kBey!vbHJgBR<
zk7REKYajt{>(;GLKvksF0C~Y<Ot^95#-CA8Y(-(&^_$c7s)TD3&yM%EGo6lSm&#JL
z%bDK>Yqku=NF|s!I85$Cejh5y3LFn?zLa=KyH22OT$+^}n@T<oc`ptHh>T`TNG-a@
zS&m<S%|>t#z4DGGffq`RJ4iHT(1{ETtjEX0b`u`13x|IJou=9n!+P4P?FYmQ_!pR>
zi5xwOy@~O_bLt0pR>_EU^Lfe|bIn^V+59AQtmq6C9k$~oSX5N>^yyPjLAcM0yADD8
z@aoK<GTrXoSB;E}%;!fRoy8gfQ*qLTfS`_!D_)NVGU^sgfv1<2juq94eARu{$;oN`
z=@<VTc1K(Cr6F>iibZN1+VU<5Bu+p^Pl|{H7tb*)9tq!OWz;d;rN6D<L8IHxUq;KC
za+>B@D&lGy{7gkVn!X}!Ir>Byg>uX|AJdm*b<nTa4KdK^?djn+rojFt=E68uE(p6)
z3O=5wP*$K`|2z=RI&_;p<Aq!A^sV?qD@R)-9EE(B3$Ay48g-m;{!&p<S6gd6+9s}c
zRD*g&SnVhu&c=7Y;fhDU6IQ(3oUnSGQcF&(w$T4Ddi>uq<lr*w@u4aL|A%)obH>SC
z#2qh=n>~IG80^`%IH*_eLci@s!-t{}4CNnAy9T`>`&wupu01*`A+Zdo1>}_%OrK*9
z71E14n0U8qa1f{Vi9gebaK3Hsa9*mCYH((IBF2F)<W^n0f6aB%;PVayoO)@RNlN(B
z0Kfz^9LG>P(CnmDTe1;nMj<Gj;7{VRF5t4-cf6CzIvO9o!T93bDEA|V9L%R-L_2lr
z6wC~|)TWBY$OC`ZeB2J=4vYFkpXb{GgZJ*<4TE72x<qQ2hz=`a6_(G8PT6A6fI}4Z
zY`jlrC)BMP2cR^t%wTbS*4wE%f?oo?mUZtUZV>%=KSS`eZF@c;T}31HQV$RmILvu3
z7Z@Sw8RmPNOi0%=LHAWsk~JE_V^=TNZ{GZ-A5}QNZe0vKERcZJUy!sLDZq~#$kT)L
z=^UYu)g!1$ZQlmz))TVz)|=Q_25LGK^et`rz8=KUg2(!1b>tlCVf3E~*$O6uZH0aQ
zN6v59$y^t&`Vkh-#B9V%!rX$LZXliq^YU=F)LV9T;M!DS34nA65co3N-NLmK$w}*q
zF;gj9S5s_Mj<?|Po6XS>I)Y-k(i`eF**)8?{QT5-3*(7I#8I8*;*uBYgr6@kIs?di
zNr+l73?D}ohT6!`$cRkRs95~74N%)H{%0BRXX6l*F~AcQz{z>}l7<}}1L6FH3Q0hC
zGDB9{>mp{q@b^>kBtAZsn1vS<CUFrwqc7*#nBg=bm31d{7gk3VYnZ~$-U4kY_UXDw
zT9v4w<h>UMl0L1@ZjCOc=xQ=R4P2nH2{>B;ab7}WG{dnj>#RO}keCo$+z=TV87+3|
zR>wVVby{DWn}2{IIBJqpZbHY4)yH=XkNJi%OG|?96>1r*jQHr}{{<TXb4zB6@9Lv(
zq@Y8)sor{h{p5z79HP<L3hwHp4_8a_ku?yqw+R!DS<I{_>dMOp!Nq<iHs^%dJ;8Cq
zh7D>=8ga-lehCY}1;)PeU@N?NX*V^dwO_w^vo%rk+I6y+nTZL!TT^IbUI5*$i%2kA
zYq0NCHbM}CxwXJrwCv<p-;w{C)k>j^W4=&Et?4i#VSj!(e`ZB{S70Z${3vSOes^vp
z;YrnvVN=v6teVd<0xKkqG$gl|y(X_?-$;D2NPf^+-sTC(@P!F$^s<(gF+J&4?Gl7*
z`F1NQYzKvSa?49g<-^oSFD(VUo~UgD6ITI@Ve%GKbf#CY3JgmwO<5xz5EtiXM+d6k
za1OnoR9;HRz*$(27B%|n<Ffm(Q20Di*8a~~z!)nfAf2FiVa4r&;)Tk8+#f=@($Dy|
z4|oJ>XF1w-X&Pl)G(~&7flCX_Lj|)`<XU1P7V!AR-g#8798u^GV<Zhxt6*tUjPe&N
zCPZl{W{m@sp95t#LNSE+h6OJ<LVsYKOWiFfI|3^ge4R(!-qDfh)R-CuI#`kt_xcKO
zXUpz^OQ@K3vTPs>tp3#*j0Lyw+D=4o3yW-*fRP#FFId%aQlzG)W8{W%8ObiGxK|>i
zA0e`B9)t(EbLSFs#OuZ<CP)@DD8aYT3nb@z_yh#}gp>ol3e%oFlRd$Pm*1|*&ZdTC
z1G42|qlQfwiu7be!~>Fu@jH%>x!%yt(3wt+-7?59YJ%hg0O3&>fun`yhI87%GoOVj
z8+T`JT3Q+qnSTxoWfNv0$FYt>UYA1xH#}Nb?C$Q4Vc>ws-J$QtczDe50ps*R_ZXsx
z%%(WpmPSM0(*i05WIrJI9m6$EyG_4-kN*r8-#RgstdXR3kYdYlaXr#<+S!`71CNT0
z8K#{8wLc;W$G9vnI-pK=#x^242j3S*gKW*KH*U*wW7rBV%@4jnK`H6b)sB?tKL<Vg
zLnM!|2gpC7PRB``>(3|_m@rnnMVE~aP`mJ{g52-lzY%gG*b{QU9|yto?5y3bTk_dt
z+{$R{Vy?uOzu;*~!g*Y`A@lS<_YtMDyC)d`hErt64wuSQngZAiU@N@=sqv8`QATc$
z|A@231vXrMPu)@rP5P;NJs99;m%}7h&5qIef*Ox=LO&J}fx$-L<#u<IGxS~m!h(Xk
z<wC%pDUpxygsgGfMa@;N;MjAamF(3A>E40+{}W>H|IQBkAItLp)du~)zWhH$Oa9mA
z{y$lj|F5ZF|BZ0(-!nn~>x28R5AI+7`v1CV(IWlVS@-{f5dQ!5aUrCIkN4iC_g}s!
z|1~DGDsnAlKX70R*S!tD=fqWoHhX$g%gFyt2SWErRn=-V$y+Xey0}_Q|M<|@2qfBe
z^scm<&{~3%$}cIo!s51gK}71(C1(%?nU2RV{T>g1gI~h2Tf}uy9yq?9n?P+14Ah5G
z-E&ZeHa=_Ef-tDrhZ_n(*#C=ta@Q&%qnlYFI2G_Q|2Wg8zA71nGyfdWt)Wn^LR3BQ
z9si*OxZSzUO}qcM#quIM@<6~D%qr8nGc)uV_Sp8<SHsX259C0tr<nVJ*uc6fX>QV&
zRy<enFd$vo>XW!z@~1CcX(iu2mB#wrcGV6zthr5*kIc7^F6q+Li2{}@yLQEXD&b8l
z`L04SjoDintn!t+jc;v}Y~lm#pHsuaQns~xzldED>?niEh&pKk(;VhkzT?L&#yVz=
zp6Be}1bo1DhKcuKXJ%_d<Z?db?c=uK3GrO5F^z5<+o>#jx#_Cf+YFrq50AS_8{}fk
zcnN<$dAf7P$HDouO}mZt>^_c1g=9YKe*ez*OdFV=60^F-*IUpkdXu&H?1>X|u)H<s
z)yd-NW1i1Jwsn@uIDYh~-*GO@tc^RJu?aiG586Y$kI$1QE%~!&L1QukzJ};p@}<~Z
zqjKB&twkLj%1d-wgrYEE(@w;Kk`<*_l{y(|@k~x#4@UIr7vFswu&p`}z-C5nlx2>U
zEj%J<^~876N$Z>OM)wWvwy~^dvPq#0|1x1KICz*)Ly>q-kw|@!`F?rOBf{T<bkyKf
zu*M432Z;SaZ|j0d@y;l82f?IQaPG5v%4dHVAK%QYZK)zer_Dg^DKfaJFzq+VHGR{y
zuO#{}%#&ZnxUpv<Z=>eQnX0#q$`9wGMf%kpgO&|Wr56^q0stjs`Qz`&zBB+1rEik2
zb-<R1-0QgRUEJC*4K;(K{=r?9*h>v<qoHY1#pmB0c(9i_W$#12-`^~+aEU9dWb9?1
zJolMrqt*U8>n9>dRfNK(xT*g)`OP^wIV$q>Am)yO25n0)NDUxnN$`0{NM3$E_vv$q
zyg%T(+4`hHY$agzQ}qEg)a%I;^^Bxv8#ym*(N>B(x!?9ivDnMem#+$F`*r4nW4J>4
zBGV!~qe!_~QZ6-_Q-TVF8*A3C{RnOfR`}{3M-Cr`AV3WcW%mAS!k|)x%lWj~I2`5U
z8v>+-A$%D~5-F+oL`GgJXu)lrMQq2a(CYeEcmP(GomRkP>Nd1XP-7RhxgH3GS@6L7
z_7w^erXWYQPsqin_Xx``SZ+;>y1vJWR1jkvo`!e7^DE|f7MRSrGkkYR_JuFa#~DHg
z$o}*q5_*$T&i3~v$y}eu+`8NehkWBhofH-7RD~!@G!HeZ#utVqJ*;Oq1<$T^0JVJ=
z4dI-W2BWKnVCToYgz#N&`x2{vrw~=#@0cjQ=v?`#opE+C{fx(Dvmt5jgz5g;n=oZ#
zbBk$KAg>d&bh6EYm)=@jxuTMKiJ_-5?^b7Gc>7Nw<4eLq=>?1!l(c3T2f$KVlupM%
z{Xoy^VMGPtd^l+j3`&PWuFj6QfGWj&tZR>YZSY&iJ|8AKsCgzb?jwxg=e~Wt4BOmq
zSFtcPpN=`9RdZ!|=ZgPvu8*<o1L8|5{)-yn16w7ROiP2R_{H+w56<x$bJn<Zx$p@o
zpM9qGjw5gadq-=773E_M*4M5b4}A4ZXpd$7mE$*aYU*Tk!kQV7@Wsb|kW_?56owLv
zd`!mLWwd!UxOjcZdzcs*kr-yrUJjX#g0$Iu?c2N{l~JPLjWZ?{w{+Oqedu1E8dqS?
zL@X0-)HlY!1CtoA86ANS_w8$SxD6+}(<jFr*rEUsfjG7Yytlpz9X8E#w(~f0hkuXP
z0<jV>Q=cS4^boV|{QwFL*4h}7z~ZeQ0;Wz>ZS0b$<qt9#q=<dOU_&WvzPvih>wXE&
z@el4SFebOYy`4{XiB7^)lzkYh@zY3ta^z)X31~RT5iQ2WE~USyKIopHWcDJ*{(Yxu
zrGm%>TZ?NeY0lao>u^>w6n}JQT+hCT<A&YWfY&1re?Mne4_BD4D%IZ(HR1M*u5%^9
zhv+2dW+IFz*BHWOFFdrOT}2!;PmD$QhPJH4Z3kc5S8~Jv%v{U}9&KIm_VOC8jdSup
ztVG&|hyoST$RdYBn(m3T5}!es`Lt?YRgCm#szNI8?Tj+BlUY-tlNEgNkdlH%JB>Gi
zpz%BS)`q^1=hP)Y-=>;p!%cVzrNHZ)96KAEU-e0uq>KDw9O^u2=N{iz%~>|RyxF}v
zN4>wYF2*CmR;p)O{!`#PK1qP2R14Q}(-M1*_C!R}ZT-@hRhF2!s~x^v=Dx}sg4G(7
z5~QT!qhkaqd=glv=(pskXmVfQ?C*y==XLe;0{QyyAa@>bHLT?H2x6{PQI}5JF`TmQ
zEjV`sK%m32FECFMJf_Tu!HZs$M^3&|m%}yETK4`ER&DX{w%~mRIMH!d)>p9B3Gu)y
zLK0@@B^s-}1VcgUL)-+BZCQMYfBdnK`Bjw-(#y{~7G+E}oD4(q9oR@}glt-i4LgSP
zlP~UO7nXMz`<Umob|5_}m$WxTA+T&@R*Y@+iIPFi8rybazjESTiX0rpdOA7;MvZXM
zQ+uZ-og#POm6x<OJNqOpcR(c~KQ1@`?RK=ksW^roo^tbgo;00I%EzcTfq}+lCypsZ
z79=jREKfSmuFE8?l)kRpa5MC&W=08aO(ang>}<Zjz5T^ByfBT`kZl(nF$$En)hg!O
zKJG#N0{a+H`36p#L_|PKwp^2>-3MO^PDczyeSG#vvLROZZJtSdfqH@cF|T0QUF)s9
zeSIZue!Z=$g*y<b5HHO+oDUMR-n+?MNem94@BwV6c2I5}PIlbul;j8I4V{0EP6fc=
zkfs7P-&Du_D)^4@9_L<<Y%+b=R{(3jJM^2AhiCprt^(X>b&~Z*L1*FhayWeGkW@_v
zoHuLNyd-SG-v0}jQj~Qob5)(NoXob5s=vN+AH0fXJApydst5IqQSLQI&R-s6zISZa
zm*}s;EcD7K1e*3ZQST|r;1>!-b?MHbGe`cMYzGc*EnKkl1=YvEO&{7EX>04uzt%cZ
zHrg@#YA^1?bB>&}1vn0{)D{g}ka?S*fBMv3Y&8Z@Za_?Mq#6pb)6n1y0|baOQ?PR^
zt#}4IiVt;lZw$XQAU|8fDiD169{gw}Ps8|nj%;?v%UQuncKZd|uE@Y-^7rBh!hCJ%
zJY=ZqJo*#r9<|}$zpHq8sb`R<tX^3D?O&L}{PTGtpkJy{99%l1_*_#{KL-Zeb$$qh
zE1Jvdv6PKXLs98Hi}H3!7-^&&womxHT09Y4eCpo`W-N`2rp$xs`+T+)=!Yx_+`Yv$
zrZ!28`HGa1ePPMepj+Z2hJGmtg~5@_Ts=}c+ZD>`Sr~cf<Z)uSv-STlVO{(!ovF6n
zXCg29gw&_cKIy(+%kQNdu77f8I53!=-d<#&m$^J~DNr$^(_0mFl+p|(ZTIs5pMK5$
zA1@^|i=;Mu8QFg~o@_Gm;?(VCPnIIRS7(<sz7Sbo9PRX^1Y{176%NkjNfqr@5j-=c
z#<mM8iY_3=qJ@3J+XEV%fBw3);}9PI<7J=Nrn@d~sD1UVIJod!zIQatlydaM8coxh
z6)vk6?I(K2du-Np4hAe6a}#^Hp9^+2?2+MI=r+4xccHqGbE#adhH>GiZ}B5{v2fAp
zU{FyS(hRVq%y(PLnjJS>A+bNP8$ymr84>TMg&l20E@|L;2_dadDWQoN@fL2j%a^@!
zNa4b!sy>WunD1`iwk=sF(;WAB;HSqQ0#4jGxiBX#011DN<uFi^;SJA^n`<<}1?J$7
zBpXx_?F9~B+S-u))0<bTWjFM@55RZ0zGesNPh%HTL#?s(^JmtrU$2k_zl#=;qw|lg
z>x>Y$8hdYN|L@nFW*1mBr9wFjd&bRsq)_*W+)j-)dU;1_JeY;M>O<zh(=n7jqa%JM
zvg1E}7r<?DnQ7Vx)venM-}U|)YP1>C$st34RoNA^29=>mZUXlVzDKFY7A@JsJGO2O
z&ZQES9VVZGe~oQOSFSZZa$^;InZppUfwVPFA6UM)^|GhFryl_T-R}3;xQ$kpB10p6
z!$@@EBB)zznopURbe`<<0kn*Lt0w8IBq$E={0^~Tcx^h_t3OZ%Ek~L{aP}S!?>o2b
zTbUFFRv%58Cja|hk8+)!l$N)U-Gfg>3PsU&#hCWDzpK!th?$fSZ#KFwHE!RN(NQu{
z6F0@Tr1w1bv`?Ky3=Qv2F9&Q+gEh1w9(YE-M_4Q&Or`9`fRT`S-&eObr_qDc18H~!
z1Lh+Xd%M)?;5Um=(5|Nx6z~u`zgDIgdC>}(vy#2(4~E%Cr>_G9QjaICj}j0^dk)(^
zwk+eFzBMpnXS`8NR#Mo3<@y73DSWc}sc*_J>TK7!50f`{h^Gv77lMS$=-1lL=WhL`
zu%jB@mU4My8^uN*b@nU&lz^!;qwI{Q<EY_7zcSQYKdCYdG0Rmke@NPJaF{lFW!u-T
zzCMH39mQuZ9KLja%^ZuQD;9m$a2tSJ2P_2pUp$1_gZ>&bt#-oo+)+_c?0XVF=7p-2
z-E+M89l2%}Ki;~4Z4RF~2%M}2MPg+)#wMK(--zL5OB@Wimh08%OpurN+tLXKD=drf
z$tna@yjf`7vufHKDzC`8TJcf+s%PKxy{Q&zr60e2rMxShs?Q_-t9k0}G)vfSBFm_u
z$;<49?r9*v1Kks4&7bb+a(dFUQ#};xhkDA}1SN^d;wEC-AH(Sg<d=;yly-d-!?+#3
zj3>H5p&9u;ZU^dE%x@0c&uPWXmX?;wA0)zF9FSOkTWphWT6G^TP`3#RP0xwad3SfQ
zM)AP9;0D!L5auN8Mrt;)Oa=Pn-Ts+Pa`<CH&E}v~zV$ng9#mCi_TTlOgYzG^D+)Pw
zzR*5GNzwSLCo-)Q)$(6gi9<=uQ|1=&-I>G!t;+lpKP!cT^plfmt#<3Yy4N+J+cn!B
z+<-$`nq1dlL?-{ll9~$h&uD~_7sX-9xy|%;b|N8ak6p24#!C|IF_5puw)A$@oQ6=E
zH>Vr&_J65NiFV}mZ#*<EBqp{9dIN;-4l{hefJxfMFmW|e9pVnc)o*PQ$G*K3wM}(h
zY9@00qpb?-7OADR?T+X^Kx!{|T;fEh+4dTyVm^bShVpVM91;qmkQ0M;-1#~eFK*la
zO`&+1gF79`0_gqri%xxn)EB`u1NoyS^4+{@pJ0*vkT7F${rbhCf-j)J=459-_VylV
z7}iYfiK>FX7(97+h%G03!_Yjyi1qCt-*azI&lV8TIhB`BA39WI)2~MC?UZo;CNLti
zse8>2&t0YcZ6hw5{PhT_0rVb@o&*NJ;PY~p?6h=&&%EnGA4Iq3YOvn45SqLucJ=Dj
zfqd2_3X++Orcn;P-AO&zX`+>g4tZCz#Gd)*Uf#dnHq6u#9JU?Sm8C{z^*aqV=7drI
z(Em13CIc_N+1b>NzS(pCeYgX9)!wsfp<E{`exODc)BJxn;ar_H(Xh72LzsC-5b8Jf
z)f{xBQZ1mI`uO1k7V*$bS>NCwAHRO>8klhA#>U1*Wd5fO$7g1Du8KN3`2By=@7u?G
zVDZPlVz}}HtA(Cen62h;MI(JYEX>DZRIgp_=Y#c=-1j)fZ$d`-PLGp;n~m+bsOX<O
zuG~c$IWIRgX0qpMAlG}fy|8Jz=7;z_DWhHz`!jV2_jr%Pu4n#uyz)t{lR76aom?4a
zW>HujZ;ajj^yLc-ZdCzal&aa9ZZ$bKZ7ys1<9#06CvS`a4t_p0b+qRhof&f(d)lt~
z`>l5O9sGWK_tMcJe=GI+GmD}jcZ_&)hgaDGIcL>WkRF+k;1zk5`Za&Nv)^`|SVO7$
z;ppkLja1n<yrt*nD^NCRXgc^yQ|!Xs)~~vdX;^K60bo4ZA+DfsW2f&Orjr&L8HH$n
zAhcuWTpe7U&ELm&5#FFin3o4czP>Dkwf-1HfDHYe==+c@sCWZ9lwh}o;hpQ#Fe*zI
zvHWo{&xQa=HDo!%gM&#%V1QC1z_?S=q3H>_p6K)=&sNXP0{0TM^O%&JIdux^vENvZ
z6KCY8*Xdp?Xaax@Xw6OmM0@Yv+4W5n$n7K+hHA0BU!Ewhns|epU<HNH6$x5(gkpyV
zR!|e0ju{sDAG3ov>d!1d=|-}z?<kxkg8F&!68Hv*l6NU2b`&)2nSG;>)50IHg4kKD
z3=xE>QU6*8$DlwS1CZD1<2aRG;1yo+{^5Ce+sA<G%HKP0VUY|hdFQac4kKKg4arTw
zzE3|`zZGa&Vq-n37wo-%4i5GW=t85KjXc9GLJxt+a6i7;9Yf0CxOQjZRD?Rr?|B1W
z(W5Z%=}gMV32<xC_8DC%@ixP8lA;<#_4UOt+rxB^Y5+;^<w!Nd`dgruo>$9xcBJ^n
zk4pj5P<#LE*O9vOD&i_n{Rvo2;Kc*``!s`PW9sm)Y6G4ord2rXbzStYIH_hw*qNJy
z5v+Y*<#43s5Wt)<SAO@$jY11)(vsZ@#R#bc-MO5sEO284R3_NXi--buxq#Uw8XP#D
zBH*|J%~j2hfXwt3m{N)CRA2@aCre#VcEh6d%?)nj*!GX`v7n%E@p6Xs;}VReg-)}0
zL}SERS&<6FJzCTP8&DG{VsOyg)Tkzi2Yzawpaz<;4T7G)hG7#@+`onwU!jmvanv4e
zT1P7cYg^O~g@o6xOOCil9#NO)jHW6v#Lr;Z;j(mtNlnX-Bg*zCZV(Z092_Ql{m*~&
zu&sJ=dbC$dZObZHt*uRoS!fh#Q$jtM3-f4j4UUY&vITiOcbl%agOG5G5HuOX(Bru-
z{vO8<1iBc(!Qsr^Aviw+t{`K0y-Kw6+?KqpPACVdPAMVe5&fjPJdvR4=-_}~=nZ;*
zg766PS7R-S!orylM#RI^5y0UhXhzjXLU4ZxLRNKw+a=y1fArz6NQJ9t=2y0DZGk2g
z&uSxN6u5Vmy-pQBeq52~KK`^OwFmY)`+L#hI^GGuNSPa=^r<`ht8cb@tP^?L;aV-Y
zA09q<KxagYdjUcX&Kp28SHQTQsFlKFSR1~CdkGSw&aTh;Q@%5G2lw*qk>}X9*&$W(
zC!}UO5B&BO{eeooCZ-kqa48p2Gqt(O&>V~Qq9ewvAi6_Q-HwTP!u9INe?FrPJyqdV
z6p9ql8NTTo^@$0otyIdJ%*Bgux0Tj*bo8NYFMo}j`?BHRqUq;8IZm6S1C%Z{g{ES?
zj$y^Kw3sb%JE%sc#J~F$FTrySHB7?Coy=l>Z&R6K@=X#z4Gaq_OiA%s_J&lS>^YLa
zR^qnYRGW2!-tgxqHk^eKJAMIjJnPBg3J22<3|n}cnEO`8tzNPpAn2p#*S)wxJW9Jr
z3>KIMnh&;i+=*zUFU5K%o%=+~u0Jz0=X;#UM~;jXO%K(hV1k#Z`5t2nNbGf`IJ}-d
zMXuPxWkYz+*|rPlWwVKi*}S{AOtlFuF+*YJ2+Q~FpG7bLue`n*UT&o&G62C4WHEEV
z1%THRFZUMbgM<s?uKoMt!<jTOn4_IBDtq<n6>K(`x#Ds6sF5%(tAqRh-ZmV0RJ#xC
zF)5dFCvg3{{ogMH7x4c%t7EQxp1|{m91udr3=nL5x^J#6{$^oglE0p;dt$sGgSqt#
zrY#we37cD3Xyj(ZIfg#QXb1KARJq{f1x3ZfN1||zqFAYx`AoY}JJJSQDS`2A?*Qg0
ztAe>l@Z#&EOU%$4XBbhsa9e=Pas%o~Otk8aKfnb9A=EOA2||?!IUq;h2nymKRE?HT
z$M4aQs;^MY;^YLlZV<9c6f=xLql?)FJD%*E`4xnYLuiA^*IZAq4oaNKfcQ+zA}gDk
zbSSCY*lzNkHSrUal$JS?F+yi-Zf<@vjHtRC_%EkR+v5L&(*=!t^op%j$++Bxw$v9B
z0zvmo&CN+eC)dKPg^4S-_8B}u;>j9P&2<JpFoiZ4&f%C#F(PPFC;f|vJ=WLPr{{YX
zz6@K^B|w0+X{$I3dir(7JKnEoBx+D9Q~n!WZylBO8nq1?C?zG`AtjxnbhmV;g0zZ)
z(t=2LcXvyRNJ%3g-6%+RBOS9J&-<=#X3fm`<E(WI&J*`<-+N#Cir%gW<HMa<c3Rpt
zP~>^I{CE#V(CRP!Fj#D_r*<>UX<x-N?R<hn@TL*{e;Q>Cl!zybLhyC7c;LeH5L1i;
zrjkKjN#ks|+|bL3O2;Q9<-7#XA=&pPHXA(ZNL)c#Sqnh@ZalLN9=YoZDLKG4A4<EL
zs@{O&3=ftW_+JB|lty)6cvziJi%YYDC!aP|EOBN>RRkk2`TS-K)>s#r8farJ&CLs6
z5LeslhBq{XAeIiVHU=_2oDoJ2YJaPmUK?frQuQ(LzrZ7*3Ycfs4UUJa5uo)8^u>W!
zotc$Y`T0@)g9HvnMoE~{ZWyTzW=i>CkR}$FgBM@m7qhIQVDsHy+#Vj+e9jrE5Eu$=
z!kyCQ@$nt7Yx}M4am|1*c!j^2?hM?-Z=`KDQ7^Big?{sJGkXK1`>WhEF49Ri)g0)V
z^3`;jpc4ZsTsW-|=ndd@h9n)PloT$Tu~M*HDFjtlw<??(P+O#MnkMeM(3S%Q4bsuo
zd=VMsW@e)xCAd?%2!1W_;(A~!*PQWe`pZwK9}dgC&S2jL6FgYPuPL9d4lamX>2SIn
zViPyQ)l^|-b9TG~GLL+CrBr;8{gAUN4e~c#mnqdp3`y()bFAhqy~Wt_NA~Yo>9BZ_
za;G8@^4#mQjUCuv0F*ugCYRSxWFdo5!QvtKdOYRDFwX?aAn-zE$$=BE4V4|Qz7X~`
zN2`PI;ibZ$6FIaEa2;HGhud{Rkl7famBR<tu%m?-ucmky!1edWqLwuhcxD9n`)lwh
zJ~DRrv_DI}zif8(#2ff|)8(dl{4Dq_&0Zo1BMtsxa88BjKu_Q!YDT`kc{<~I8({_j
zyhgRSb9l^v5D4CtZ%1G`0nAo4NGF8{IzI%~9nj=~%R~KU9nf}xtE}BL4Mo)+x*`w>
zkP;KGk$}fv<%jdo^mGf*K_Fb{j7S&@f@=?eQO(BI4qo=|$J;3}%(y!=F7VzF;dsM9
zatF1!vK}TqKcvKJ7O1s@?54{Oh`jWsImo)PNlE&EFh5lc&e>#6asxfLZYxwz5Ca$t
za)6U<(xWYK0rYNb@<I*+rEsc%<J#Kr$4n{oJQr5*lKcvm-O!p9>69nK#{{PF!b*S*
z3p(EimTSS!o~|B-MX(<SiA#Mu+H>>mV**xMv~9KFKNe}1u8q0(;LylR=kP0lOAsgm
z;7q?`1+M}yBY?BQ2y$4ktbja|DYhu^_-B;s^eF_%^y^3iPDrAK&Iv+SqBshqW!^$h
z0772?i}KE_RLrAy0q^J2{RO;UD2p>$GRF{ABNcSD3b+Ye3cw_-blNjXP+-!CybH|G
zEZUiMDtXrD;FKjMZVuVA;8+Sphb}@nGBr5n$f&_3F}?~e!GIBbI(~U!L5Kz!$O!Ng
zmN$)IG6M3ZN>!m*4?P?su&nT0T!c)4#k`9#guVOzzT%VedfYFzvs()XtH2x8gkv3E
z^ut2r^eday?qua31okrZfb_HPoWXq*x)ThFWT(t@@9$~ui3K9z1V2oj_i3@(pkcy5
zLD4W;L?j{kV#EZP>D<j$BgDa>ZiV|jvW!8Db23GO)*9S$Es6aD0%E+uC;3Nq06UnQ
zXcxy5DS^6&%}iQC0@9+nW3D#A&;XJ+bt7m3Cad9NgEOe1;1NkXO0~YUw6qZAw1)TI
zo;FurI>xEMGO4^=6|C|1r)%GcIaE(q+wk>7zh%}Nc`~`J2^tCz1sl^GgT|;Q#vV~!
z!d;1J%d4vVgM#9^#Zm=HzWuHmxl4y3PZ9f5``Bwgwth*-2vngTKi()fS&Q4hxV+pL
zDFByYU<-g@(&_%?xzwkSpG|zZQJ=wD$1pXwzB1c|7Qifqe~8Z(xPj#i_V+7~iKU2w
zJS4U%mQfv61jghJZ)6Q#Rhw9unqJPnFVngW(VTSPjL2`=p{VNzExK08`lSOq*`Wil
ze%(7mJ@%KY<BWeI?1vquV2}_OPlW`E96&D~=IxA^j>EPTSjn1TDhqG&zk{t!dk-rN
zOdShiVsd<ZYQY!j_2mUi1T8;5Jq-;P3kyt#;zQ{#-Cx&r=U-^33B2GLEee(&RZ<&<
zu)G{a$HgvHR1JjUOjPG<S!Hlc!-E3l6t2l1xoVf(;34=aQt$3alimgxJpl3uDw{EQ
zOxOGEKn?+Mc_0+(RMV)3SX^ipW7@1=q^74+{pMLS_^Zj30ET_*2%9ZQnZKL;(b<0R
zM|iD<bR6122@t;fP*YN>2>hU@pa_7SF2qZ2fCYAMf;|}IQ=gx#q^-c!BeCvxhTF5z
zJT+Aa`UnK}16HNr28Y->b~TLj&w$?pqvh+@^yP>f2o1INuMwX0jYpiE-EsXhj6bGX
zv6#TeV$>!Olj1_ILP9!+jUj6!OHMs<;)~m98nofBLH!LC%@M>Ka_V5TCa*@Vgyu42
z@$3)x-(vCK1{LG9W?M6tj&%;NOidTe`%`~|vJFzrdW2&to`W+E80*l-d;`~ob@Pad
zm#MV!^LuFwql5`bNz<TDdNq*lncW5l`RecZHnewoy1IGw$LW$|(1AKTId##%E{s)q
zcna&j0Murv*T~x1+69`Bb^t|AZWAcNcL27IP?=eTObsxITKuE(ePl$Vi6vQaW9+B<
zmGcZtkcNf||MPJ?rcDFGdW=^ugW){lMl#k$kX+x3BD#p%*D|}J&boj7u3eN^_WFKS
zrioO)zyB_LnH$@WceV_r$VaQJDuG2EM$E0n^}PGW7!)TTbixqQ<B)pG?l|_Hxj72r
zQ(Ju1b$4*12v2@u(zarK3lA_ifp@FBHM8yv!y7KlU^EQlsK><~gSvX<$;ns8nY9vH
zvnCKB29pcC2DgWIK}GsCp~V0L;4a3kY;Im`*L@hC$^<z(2uVDCecj{a9IQaDIHM<?
zG=K#Ffcg63t_RB@OI9FlgM~WeeNM)*k}|mNDd4L%pk_qAyV%k;#z06Z({Ea{sbP&p
zVNJ^qdAiEK&hBV>dH;^)KL;9m=OxnNqR7uHRt`s-wV*|mofxiW5NPEfM)j;<R&NlO
zD+Ff%v-uY?XE{|n|BD5<cB5~f9;l#FpEco6a;vq=KdLJZ&K?V9VFU9k>)D5{T_qQn
zw>J?D8zCMZ2<Vp$yyeFx|63e&N5py8qx_f3aHAAdfBk)ZQ@?&)#Pm1+K`f2xgCf*k
zKlLh9{NafRQuq;B6r4L8iOFjw*R0a8oTtQZrIL>vXKqj!7ZQ<TX=4*r%sI-EN3mA)
z;$u!u4x&-}LuYjw7;KxGf%uOb1GKlOx%}`nvNE~0b{DF;XsYb-*x=X0M^U`H$i~J9
zAbwdl5jDqN*PBHa(W!+K&+Lb+Mc9DFIc$UpNfMnli0EtpQYWBBM?^c{cyU))|G}`V
z2ITSl6NfEggHt8qHxP;TS78n3AHy<xXKx5+Z{{9{E6Fladq;X>^WUPOk`hOLh!*I=
zz%-MR>bRc4=*Zx3QRIJ%MpFsYEDe6%1JqTAsV^gcn&Vz6J3KSs`>{<w$+Pb!a=OSZ
zAaKz4;`qb!)XSfJ*f{VHud1L~G+5L7uR4Yu84e~<&5Wvu+!Y7Jn1&`JJDW$ODLp?w
z|EtbV#gi^k5@?abdzN6|ySywYP;u)oB?^cZONxsN@qPi7OOpwI>^|aW`CH%JD@{+|
zlwa!t*8UM!0-cR~*uDB%Ce63cGq|2S8U692xuYY|_A_Qw&f>+z1*L~UY;-iOFbvWl
z=l;maOd;UF!pz(gPX|)Vwxi*pAwUpVdG1}G&$5gEY-?+S=~uJ=mUZ<RbW*ufU|WfU
zBZo}{*Dg9*GzG<LlzVoy!Jc!fpB!;_9?t02H#x-}?BlUquXC79;-wXU=H^==``*W!
zw;`)0SeJ{L`Fy4U3DI&uAFgl7HL?zJ@lq5B5t4kNX7Z{mUv_DGyTz4UWNP<n-jI!n
zsY9SoG5=@u<;)a`lmqfe1@JPMe=5q!J#oK~1gqw}JPUw}z<C7xwC@uUeav$|f2AD9
zHa9r9@_^>s#PqZ=xJb14Jf?L5i)YD3=vHX%7=C?oQ^8>s8<cZ(9@p+-+^@^eMvKNl
zY~*Q<Mb00ckl-U5;BRSVRSSA<tgvNEG$2M?eFdbmPs!x(LT4BQ9UaKQ4!5Sqp>2Nf
z-~i;-r>A#r-eiRpd0Ft01Ki+osj2Re7Y$eyCFKq#IlsStRZUIny2<%T7RcEHwvN_@
z^DboMp(5(sNt1@|9iaKy?rt>vJ{a{gw*6Sam_tD!ll*W5zK*r3GH4+-HzCyU3l{m=
zi_@PVHv><pFJE;+2)U`KZn%;XI+mA}iDq<lqEnEQg8;*;1nEvp!$a9kC^XGMUU5Az
zYf`~Evu=@BP^hf5R~5LQZ}rB(K~_$#rXmt-PSCTTccW2DYdASgoE~s?Sq=4$jEr<r
zYykQbpGjk;r}yn&SeD>2b4>okGEEd7VG;I_ot+&31%f7RyP)f&DUXg$FCY5#D>>pp
zT3{eaKsr3?(~x%_9v<G+_1Q`OR~xh#4fXW{U*qBst1}Mdl9=e|V35K=^M#-4mjG@K
zad8OsIE)$851;o%Jn%zE8_j!(1nV7lQu`drZR4Y&qrF)G%BFu+4r(Dj+t^F$E?1PI
zENQ6>-R#+Y{odZ*m(!0>icZdJL_^!jUi^X3ds9mI)v}s-6WNT~TIZ!<Dp20HK?td$
z7k^SK6G{=FUZeo=0&cfkXkr_Iy2nL>0mf75pkH*-j36rChK6|e+w(eT#02aX^F`sX
zj(E>;VA0*w*C!pjn}k_E?$o*0SSicMxfSEEJv}*D4YM3Qy>ue}{h^!0^lWUHgLERs
zp5F*6D7$sR*GKG$g5JGa94s>~Vl+#4_eL{Ub8`X`lEm<Ee+?~fo&t^7S&I9rDk=hs
ze`@eL!k_F-_xEE(6kISdN-Zxg(oki5_4CeEVcg|-^5k@?x@i8j##ciP7S-9|855Xe
zB*dpoZwUnN1~e{hZ5hrHM9h+rZAKj5$Bo)Wdxkmm8?HteMy3nYE%sUiAnoFTHHke%
zao@6<x;pklK>yyJAF*bzxS0oRnclqUnDt-U%k>vRSRv))9D`muF($@mfYD49PE#g5
z3bL$}6cZU6>PYk-^3L-<QAW<o9Bnu>{(mx57K5<h%{p(4y`sf+JVvf|YU9A0FAH{{
zk~CD{p9Hg$iU#rf(-lkFk`S|GA(@C)<Ktv%uJwh$J?qZfTqhyjMgDsS`$b(#b{f3{
zw?Pu;x;4dHt;ZUDX|HnRwYa>npg!l2^C9XB<KWBHW=Wq*$gEn0MlSu1tu6ao%=LU|
z+MINu$E3;S%Bet^E-d?=FJWOn;jx+c^?GaC56T0o$Jg<0N(W8XIT%~f5oPEp5hjXi
zPWTU&JJ#~Mp$C05Q;L)*s!3>ASTb@d1NXS2|3IO@AtLhU&-i*H*Y@`}pPFXKz0vFW
z{rhsP#Hm+O6*Grh%>JqBi>|UV6?XR0i;D`Ufb2Z=5qMhemkI>V#(#d}!L#Cab>(hh
zW|o(e129K{>+$P+H4{peGjtS7h#JFQck&Nfs?nb#81#R)q)hIgJ0*0F6Kjo`F~6kh
z02GUdhlk+Gg~gN!S9JU^bg?kJQVO{gmz9;dp`Wzod@X7P+83|rrl3366_;O&FR5rq
zZni~21sUY&;m(60J3rulSoLnwINmGk-B5*{M$zhblr2yojq07`2I_you>{mv<|v#d
z1nPynJQrHPR1vI3s%!{@?P$0n<KpttpX}f~->;cHdM33O>y?@c&RLzw{O?J4rQfo8
ze}fP%DwKjzy2~>mt+_rhwE?rJFMyTJOE5Dd;6d0*1ebv=2<;Je6D$rwPMI`0)re`L
z`W&hQ^xIa@7-<njvV|3469RLCnyA#-RGniQ;Gqc#wINR@r7Q=I0W<M!(qM~wB2Y(5
z8*Rvs-}4|BKnO??6XR#q(bLN`fQS0Cm{;n+B*Crc2g?-jmLzoXlfWdSTBR0_H09$r
z*jvw5s@X5V_FHlUi4%**%<Y)&rv_7uN>3STG)9g+IkR^SEjM@1X!Yh5F5nlhW`&9F
z@GE9L%UAy^p7J!W%I8~Vj#<tRg6AwWG`B`Ywi1?-+LdTB)^tVtTlj(a#$&fAI~R5y
z>=a;d-1+2~d3tM~6$Srt?mmyEo}S6#amJ{1b%O7}Vot94$%zvh???Bb<2yG67-Upi
zbN%yO?%$6jC*RsVCBO11p6R?G>yrFi)F@s4RZCu;AK4w(+h}EOPHT&89DBs=kL>z<
zq`XT-6w<>b@N-&TCTMSO*O_T;l}I)gj)}pNav7qcLR-&nMoSu<l)GFpT0ad6S5l=K
zO|bf``dSHJ5Bo56&dPiY%H>2&<oF<>GohhTmH2TtKNW*Qkce_C-Ofz$BTuT6O*6mO
zyQx}xi;TP0Gq(^;0Zs%b$(XYjqf6o=jQfcHPEe7SHn+A;<Ww*>Gh10+Mt#pF(nQ6|
z+Hi5vBEB@&+F5N&^xE#nj{<qK2+<I<CRyM`LKhGn85!9x3>o9sm-jPz{<J`B;zZqX
zxC%pGT3Aq66RT310O2`6co1zp)6fPath^jEl<H-0hXWi;ox=x$PE&+PAE<1ZQqdw_
zJy$pEIso4Q;V+4v))VLbdq+>Nxn4~nT^%=F?;pJ;BOI)C7rKIc=v$-0M#kQVo~ny6
zPgw?xB%6QyxPr{34`=V<mMtt+AoSxDG5{dg18ld+Inu-Wd?>+E`oo{^gDYuiG)5Z6
zk+HF%;`1=az$Yj!Apmz9B%KTL@?Iv{62K}3Lph@ui~zr9%bD^VD+#<^Ry?#RZD9Ni
z5^0e$%bQxDN4*W0Q7y3a18^;7oEGr+CLw}pbLN9+hKi)5HzuX94r5)Ti*DuhN$1O2
zgGPrfdOkkF82R@QIG>;hL;CgZuF`xUg05R@Pw9Ss=5o9<>k3OWpgI;DtZ00lo>#wf
z#|PGyKw63|EgfG76M-3+`K`OW{CX(4E6xGr9zJ-`TIU!xFi9r}v+y!|)626?5hEG8
z14#dkKbUc)gxipdHakVM+819O@d?wkqM^sUeH$n69t{%}RY_J>yd@$P;-h&_U~AS7
z8@1nc#{=MnU8Nly+W66%+ubc%iG=0h!_zrG{4Ndl2A&URhjNU20eSHNOTpL*iwl%y
zyTjEv#~u2YQ&kuT65^j=Lih7${7gaUNGH;C<9!n<Zsz9JmP(DJuOtnAcVlBbWM7Oz
z5;S-q+FxHiKrnd{@pqcEb#(mS1jX~cUq6Xuz0@i>qvPgQs5Cj6Z)Z+UCQJ2jxAwzq
z2DTE*HE&n9gFb|f*IitGC})_NF#@)zyxha{Ml+*Slfle17FO0gWe<{@_@#Hhe6CdZ
zL_fd0%*5gO8xv#8KReLj)@^+>jU*lF|Bl=}UOrlW=p5t0UXqvQXW4VFwmg+J@tEG}
zX<QN8hQEnG4yq#9AL<veby`jcfX?w9iKHe*Lify!Rz0(hlhew{iNH`L1YDt`>~>0;
zn?FMHiid6uEQ^+E?K$&*qngd)2aCPOe28A>{UpEZ^u#G(Bl8d;^Qa0V_-s%cYW{$x
z<=vOiEx;sh;JUjDLuCff%KrBDQwRu~Knt|%3Y?frPKNjfEG?@VFR$r)WG6)Q;oMP?
zk*XvR`6b5_lnwbijBQ=tMLnv&y%_)eLDpBC4pxkNgwHpIj3ul6{`boV|A5It&5z;{
zVQFI}x8aCV$9#b+GH|5Er2QJ4X>CnSSyP@lFLacEo7nqpvZ2q0NodoO#owIvx`A8g
ze)0Bi!~+JEuTiP{hcDTbsMh4n_!qy~ub7k@!lljZutlQvyz*yKo!rVB8eL7Na&_f?
z<l{@}&o(o^gxE`85^D(W@yVZu?b2(!t*J(LDbc$_Pa8eT&CAeumj)y7!0VHq#ful2
z^GqtYzoSwAD^xcV5_G#Bojh?lJZ4UT4Xye`=&ykcWpD2)fw%K4T###BXVI5T-|>Wn
z5^se5(a})4m~MX4T2+AtQ`3c=D%d8DVPL-ASX^{EKQdg?O)1?92xkR@hrjT4*4BtY
zb#8)MF1Yoc**bT~tc-iANBb+*nWH{hrnv414?CNdX=c8xk9;nVF@2?EZpkR=v+zA4
z6u6Q7{qKpc^-oS(LBdq_6PSy@^f;LaMRjxk__$SBPVNWaEDOv%?=(hKdLd}#9K0!D
z72OFV-NAYhce_0cT|T9`#Y%6=c`Q*Zcys18|ArBgoFA#P<BJ5+#Q$OeMv^`y75mSg
zLfUOxyP=pKZWh&1*#*~`BPp-+n!!MwBW_zz;@PS5?6<$?RyokY!PM;dri_ph9F40i
z=ez<A4;4Mv$&`ud5D!1spTo6PXxO2dk`rlgk?LqOklbPxX?oU|d`*LtX&D<66GFKr
zfQZqM)l$z5?*I978j_ckk{I_g<mq#%@Fu}~z@|5q>NPbsz`zpc0#4i8uLA;pFvZC8
z2UWWa&>wk>78<h|)x&PE*?xuTYn|`a?~YbLK8i-yD=mQfG7qH|&CKT~X1+Cru$w^+
zle7u=D#+Blo{JAtT>bNBciQ$`byw15WX9lN`87&|)2qG0|MRpCA>)@+RlVb!mYu4>
z5}$xr*C2lsQh}oaDC4k_y>kF{4H^-@qsT75enIXzxM`5@o`IR8ZsN|uf)5=yHrQxj
z0xzw#Rlp|ARhM{#HX>T3dsrB`+M@q6v-Z{gn7;k>QH`!RM*7b<BNqp#Px>|6V6IBS
zZQh0@!ZNNaef=7X^a#nwueX;4MhXp?=_=GVMRxWui_`>Ql{(bRGuq8dIqm=OoZknd
zO`Y0(4`4bI=9dZ|>GT7s)c*jU;Ip%{`r{cHU?Hwe*Z7H6=MoFcV*4j%kBr=-Oe6W7
zgiqN5;}&B~cQTn2MiNctIuQLF-c>=KCl`e0YE2TF9nOo=7aITN4Q#JgQyY59yF2(y
zNr|l@t<O2*Zib~Ve|%JwSA>V~BUm;=Jm252;CtiF@&zmv6_Mz?Uh8RxADVzE3QmnS
z+rK<eG=II)kW`gqy^a=-K$HMOL+MX}CO)O4nP|&##*MxM8-jwr3V$z=d`iS3LuK|x
zT>g^0K3;awJ>G@D7&qfG)mD_1<@XTA+>^^Qcv$F6Qt!yVSGN<JQ88Yq+0)jx2prrj
zHSM`bc(%^m(=oS5?JSE}q<UU(d0OlKz5N_RS%sb}rsI4N6P|k27@(WX3=Nr_9p*)J
zdg}pCRp{O7cet8LjZ!>S#v4Bjs4HXOtVU=pi9+M3r;;xDP`8BbIeoT^ACKkp=dZ1-
z0QWZAA4WwyrzFu$ms@5Tv42+w@kMU&5^JJ(`+NBKNTEqJLVuc-bz3<0nVIi8`L`T-
zO#_{LMF_sAtgQYLTdDuAH6s2oA?n|{eQ_aPt+xf;+o)~#{ZWcGky-;^N&$hS;$kw5
zG6?HUK>b$~f}f8(bO3DRtIpQ;b~leK2CfVJ8G~@8sPWQ|-hUrk2L}^&=6a^eV%=Ab
zm2YyA?|)2A;(UnV<M{6h^_>&Ve~85d9@#pi*}hl}cpvbEVx`0pPcMyEFq$`03^>%v
zQ(4~|&>l1;{+~+3WpLQ)`Cd*=j`jDtch}<o<F{0(@xluCrfK6|2|8{Y04+#VBWXZ8
z$DR2f&ZW8(T!@WEzrR(3zUMlaxr3Cc*TEwTFEketp$~xs@-y|4fq?<}ZC{uO=nQ|o
zS{-2EXmH%2))2C@Klt=X4}+Xv*1#Mj4w#q@625|LY~cIXBk<00JWFOALaLy`SP#=b
z>ra)qJo~#o+f;Mp3*3wbv!2k!MGZp2mFKOgmb1dL$&`eSr+=DFCqm%rhmGfOp{7Ew
zq`F04Tm9is<vbS{`hyouJdc$k#G^oE?PvoMy@6p$numK~Rg?}D)pw7P{0yi?^LnmF
zWWk}KKYM%OKG%fmE7Mt#0vM=a&1-Ilj;SfMbHQh#lrzH{IOZdo(nYMy%r-w0)0kb4
zR?@~zZh9gPO#aP-y}gR6D#<tZDVLWXg3OFImlvtzHgYHoA*S8YZ+(2aDcyC9G_qSR
z#06Cd<X9J1R)P+K0t0P-`8PSRy3e<%W@M08*QjY|fNAs)7{$Y<s5bujc~>$@Lc9mu
zu4X-BRAoZf7kJQkK!Yc0f|n#-IaLI3E?Ocf(zABZCO|jvY@$qTO5hY4v&jh^h!u~V
zpEr36tOf>fjpH-z7@n8~+IL`_^);e@3-Q6hDZh86<4Ivy?K(FA!&`s+o&nT`jne*(
zR&Aq%9Ic}EJmKq$AVAG6AYc#{AJ~Yu>rYbV?>_){xXN(ryLX3oG-kl9{_XYEhmj@h
zEq=%CkEd5xjffKFuWb13-Pr6@Wxo;+gtH|CaFJui0K_gCGT7QGBv>Ei<<+1<FpUX>
zqouvha}yF$shFKV%~=bbGHbI)6$U{Bjh~jQ9&V*bE&&&5n2wH)fPervS4mIo6LoA4
zkB*YLSF%n{rlBiH?|5uI!qMB@uW#F6ZehVZkX7Vxdk*MvU?v2cP=8T>EY|Jc3f~po
zs64}TIP7QYu|kx+m}1tuW0;p#rY9!8SmQe#m<#3t1rzDtv!gCSCFv$k1okLWT*3Y*
zt%^ttWb-hK>lsMXN8Ld>nXQY<7r~}cj8*pfv$W({f4r7w`~c0@yGlY%CE4TnwaM|e
zVNN?7cuD~WJ&tVW17rrD^-bDGzl*f_6tlCl=WdXCC@3l>pWw|i5=c`4>tq8uM$qtD
zzj-q~Fn}p&d^o7JQ9~e!*VYd)5vd;>q>YT&mM5kKAQmkWgLF*0fE=mk^>3Hxv{_iv
zG`M;|x}=tz+*)7C^qv3Sf&KgUVtOz#Ariu1&=z>V?v$~~@)W-%GG}Q=W`xnzKhJla
zV}Jf`X+77$#VI=Uk*tQ_&_-)TF0J_YNedrN5ngoCYZTHf@Ts~pQ1-Fgv_UQTb<rHx
zbr)lOw!T(?-WT)3t$@R}fJ(UZ0KMfa^iNIwdB;U^w7p?@Fd*WtOb7|^VvOhKU=;F&
zIQF)lCA$UEJxCgH+WYjF90%vgyVWTBmBz3&CSGwwxzi9btn(!oa*=0?%kW(WyUOSk
z^R?&Z=Duh~qN3<x_IAs^>ri24Bkb-osZ>(v2_J(em&Y7eK8K5^>VZ36;Dz&nFxZ*v
zb%r(z3mZ9Z)24GUvcaBP$k>?jEp9@>Bpf4?2F?dr^G{bdX(7)EcaFdl_dxZA<oUc?
z%(~b<3ya3t`S~1jhzC4CK&+9G!oXj}(bOl52?z=KFy}+KXAc9*toyXr6x9$_2bMdB
zrysD0hK)L&dBOQ)rEKvdb8tACuZoL{tLg=ZOE6g+%Y8af?|dC=4hUcUezy$}7_jcW
zyc}=3!pKrc4r^~bTfYWht-0-O&bRZ!iK@qx#<K)BZ<e$bWypJUfza@So8G&1ytChq
zK~7up@a<;iqE0@fqXT14Zdu=XGO~2|aP^w5#z#hYaw;rW`WhZ*<FP+lSXr_EyZ(OU
zY=0jQU^}rxu8Au!nVa#rUT{6W|Mq*pEK^MPOyg#cD<EAvpzV67RHD_{VHE9fBZ(0f
zvJI{xk8sGzA*)s6dF7OVuAZI?jKe!k#-Uw#3A4_C>p-(TLBkZaQ_qbx3@|x3y%ADl
zqXYD{Aaj99O%I4uRBCF5MIuSoR3WxJVVIb9(GRYUI<P1OiUe?5zrg`UY5@>AKR;rk
zZCF{k(U}`okQOT|2>vRkaH{UNcc`(-^77(T;H5VYPYL9P8~}%s1ie4upcMAzRD763
z98`??uS`r#G)7jzbNv!#e^^XjY?NN#NlR2r6E;ME<C*jw0Kq@UY6kx=Y^&vyJyl@t
zUT;>~zNKATTH3ofP;V39la%%ak&f$9_qDF>4`fWY-gtF3=)O!!*c)~H=aDhP(%kH*
ztlx?2nsEv8X_vd5>PhnQ2%Go%L;S|G#=1HijS-IQ0cc%J<3L%3^MLuK?v$Ly1wgbg
zUrqr<ld*0_W+ai9RQPmp1B!F4f$-~J>TGO%@gfeJ>cGqZo(+2Lpk11<+3d79FBjXk
zT^I!pgrLVfMIS-oZMDF1N$tqHv&xr{@I+WRRs20ZK7O?&PWp##h>=bLl=BtLFB<69
z2<{5R2VO@l-y`SWgshhu+fLJT^A|6wUJ{=SDX_a=>|Fp84~z8C1qjrEiKKInPT2b!
zDc|Re&z2T`b387S6_lJF%e{o~d8UNF8UOKP4R$*4SM;k^>mI7p_otjU!!mSX-sIJ*
z9$`YU0_;1j@$r_PBwxI}Ul0<?K-s*U^;CNLGheQgfC3XcM=c>LEC0DVJl{k+p`i{Z
zowI+!OYb3bsa_VAs<M2JiHtPL@ocgl<-Y(&d`|uYUICRCHa6<+!q#4zXLV(0^J!60
z5~tNFsCZt<kM^)Qa~nUk58R^3QR>M@G7<iidE~~E6crUTmG01^qsH`J>(Ot<^l@jW
zubOo|yhyy1k0ZaGU{VX)p6qqf^$QCu<fX-;W3e--Z}I3Pz$LwakJH__zd=Go6rY?N
zY_<17V^MU^3?5v5ci=lp2@c`~1#E!-Hc){cV3_bzrEjX`p!wWt!r_867*!5DLV-7b
zZlDGG4{#+Y{&(0O!0M<k#T#x(BiF6={r>s%dN&fh6?9E+O_;Np-3r}Ekjj%8iN-6U
z)bFr9=n2q#nquC=UYv5ql$0x-H+FjtH2819r4}lE7VXKjtt*EGkTd=LAy;R6x~A00
zLp*AL!d6Y5z;<kHbCabnAb2y7vLN{thoVAJ5Ehtb(g>b>W4(<SidAtdY-i`-bV0&0
zm`mtWxp<GfrZT8pUP0XKa24M9iEjsKkh?d1oeWj7#RPqZe!<o0qlZhNbrdoUFQoDP
zMg?gtBi<>ahxW;wybt7{z=aZWNhopzW}-ly;BbBw^{+MfT5g(l-=9LNT7PB>f+v75
zl+E?0W|j@i2a%00T6-Z04~yi`TO|p?UdV}v9-DU91I72N-4fvB!!V;ou<=-9w=jwS
z>0$2&5MjRDw3E`c_<Ewen#lNH!|cDVwslwB*w|R;&UXlPmbEY)yDuZt2`sW7FDih=
z<?Z7GSmB5Ez@_;Z`;bBK3C3r3=Xc)Mkd$2f?x_rOF`Le=4`R(DDS0TH9|RN=P`(06
z>qKHf&OGqO-X6CQfFyOcxS(;89N#c)VmfPnrx?}Dj?Zrm&7vtV>bvv5eEZs+pABm}
zaiQ`-?82V*b}7WSPDA5TwR^w(-;b8Ab@_V+8YZ8+qB&|yD}<K)Vn1PPEJIb8$zOu~
zZ&2V>v#xf59KnT-7{k|9`LZz)5fA%7lk<7A&$Ak+O7=i*ZSpW)h0b6g!))BLt<UZF
zH<zTOqvN=4Wh$SOh4|JbA;ens_Vh@k=lXeuBffyv#?!g~#R9s@;Q00SCRW>0dc)Yb
z1C6OhJs<C<%#@U^g|K4~fcvR1fR3Nbv;z+uV8J?_<Z)S=qPg?gyLYm(bvO_1UhlRB
z0#*jTct#%R^H(;rPk(lIuU{Ttf3}E$#v&)r0`8srg&P;AkCBn<KHl)~B)Ok;i&~gN
z6yw{T`$}XY-jODJEQJ`HoN@f`PzY?5S;1T1Ba^^S6jaVX0lb9_(f6A~EF)ZG>x+wv
zE>2%T3H<;UatiJsRr!ZC{Vp}O-PDJ{URQULzbIM615n$+*;!?at9oZ!(qcOK&&FY4
zL3IXEqE7pZ#Ky+9cUycr-e7$%udc04kk@31>p{xAi-j185)dDcVt!TC;Z!v#%-M|B
zcwCy$YC*1yVPo)+!7i8#f+~4vcvuzN^>k_F;=(O5QVr_5-$4FD*j7yO8W`*WknD$*
z*45Y7%(c)V1Sa4PLJ)BJ>;1+fxHf<`TPPFu86xKfpA<H?0;d@Er)Z=g(HF3%C$Zvq
z@BqC4D+w}Ce$8HA74}hNx)TviRJc(UV;6?z^JJ1=G(e$;-WS4}02w7WlM_7u50Je-
zDw|UQdNIdL5?wVl5}ZNjuJF!1{_NabXi?_nqB=nM_j7dg^mHXp{wD}fSI0^ObgrN^
zu&v(<EGc>VAN(7^{ri96U+jEgqObYE6W6dlLPw9erE2=IF_3~;aI*n%c6sBHic|_T
z@_RJD+z1sdE-vQ5^?@iw=_A+e+J{|EXi`^zYt+=#KpSp7+bD!hsA_@BGoB}AO(OX9
zx~Q}fBF@WRPWGD!02B9aQv_{RrZ4EmS6h4(mTGui4mn=5A0GD3oABOx;o@?a9vk!R
z?m=AB#gFD@qkPYL!8`Ld=SO0YF)i`q?T^Tqc%Yy64-ABICA?hjwd#t^SIeYHjE#jh
zX%!G*85!e=Z|`f;1Ab0~{NF~PpGxuAK7`bdAEU5RZJ00z5nR5ovU>92Y#0Y810`9u
zL|o$iY_|8^j(oI?m>59;0T}l>P7=9P8&rzmQ@o?3bfoA7AH)lB_$p39WYw=8j&ws3
zElg`3^8uZ0PgwQOLWnpelV|FVvx|y)RtH--Lr4r^%`5*Zzbq#^yYB1b_uId2BD3bV
z6lk>1?=x0_@$LWO!z7=~PFZR4eEb|+l<n-$<U?=Xyqa~dJ1p;XL5vr!<r5P@=f`m|
ze^taK(eNvmhLyvbul&*7PUb9zT411(ey)-%y@f-KfooTLQB+DmUH?Qt;Oxw0WpVNB
z#0k~RSghXf(MqrLZFH1Gl81H+yK`9gsWM-}FvWkqIX6hgdUECxz?yz5K<6=Fz!$8Z
zo>$iIQPuLl4*E*yvKYu>zqUXl4m4j^Yo=xCMbZ{%o|Rht^FT)z4Z|}cFE~+Ozo)Xo
zPNg5;pM>L3?Qm53LlR<JZ2hrK0)2}eyCuoC(T_z#P0hr{#;XhVA?c5e1y9xA?HJAf
z-Qa_qR3_nicOj#TP~(+8YM9cKM6Qcq+Bp$3x=)CxbpOpjOlri-+77Z_c!9C)vvhPh
zj0#W@VD(NdE#Kqh@@NNGP6J5d?Ci>K_0GqBF>cT0%OyM5on49-3@u5w@A_t@Dcx6+
z{hk{G2~hOHER2k8LE#Y*biyxZem&(tstbuza1jFR*cKKLnp)YC88=1A+1bh`=QhL(
z3O1ZkVjtF;iR9U$H|V2N&;0e+L(jUEp+n2Ur~)AA*RPK&lw>imt-YWJgY@7JnwwRK
z9a%)c*V>p-DeMqfN9822HyJp1Aw%AzkY-e7CQTc~!<BbX<|uL?Y^Uj<&lr?x;Q2lZ
z2-Wf0FvJTnaC!hxq9Ov^*i8VM;UEavFY_$&r#ynqQq$XoM^ztP7Mi^}7ww2!CIC?f
z)`_pd@rp=4Hr9BALc3+)E%Rs36h>~mpAuUx-u-UGA6mHSgeIoJSU20@C4z<vh+f<e
zmiE&QMkX~Y;|0788ZUf8LOyR%f1xKhvzwdb8CulV6!r9sfr;<Y^H&rtH#MdA<~&0}
z@YMtgr%zCjZ1HCvQP`_DwEAln1P*c^9H18$zgSIR!GfzS;>R4Wg@Ay*#$46yjHag2
zX8C~9(wc;X({SprAgl=IHY#t^_@SY5Ky+HL);$5gAbPyZNoKx~-!VIjC6Zr@fGYl*
zv_`G$VH@FbHvA6nHX(}+k4f9Jz39PC${ncKAe<db7NOJ@K2L~EORK4_<`qxZnP+Y{
zw!0P%ZH|mm53!vC`P+kWs06S-vN_q3iNdz=s!q8}HxZsvuX{O$8iL_{Qu5?&6$>)W
zfQ1=;fNi~~M(MzlJ@yD6p9C+jlG?jHhzDPTG`tQLEn1_b3f{gBk~mnkY&0}@GJ|jx
z?(e>#<a@ms%PIhD2?$#0r?G})f{)Su;*`RF+^;WB!NnD@)Bf)64y-^Yehll#7X?6e
zmCq4>u2OuHh7A7j#Ftk#y`7c(MfWI$W$XWhgjQAE+f#ER`FZFeQ0#1913tRtezHhi
zMJTqwt{{H&65D~)qX&A4S+@gxG4@SJo#BFCc?tg3M>`^Rpuq3yVuO%GSf;Lyu^L$3
zh;DCzlWf?stXGRZ_SaDa*;M%|nu{8<aZg{->z=p9PTPq^?%*ah0=()PaXH=wNsr#h
zM&aS*!~bAu|L<NW-V&?n>5ojR%RH`U0s`b9&<iK@xr%G@qgS7NIws1MLG*}$ZknK!
zBHlf_N#VzzPj@wY&DtResMWlth09T}L6zksoK#>ob%asoR0ba2ks=4tbj%TWZl9~<
zlVui^mSQ<TDl|2W6;5+LR)D5|@;k{2KcrV8d$mhc3;?^%Qc2D7)s}5#__MtV#HHv_
zY``WXckqJ&8SU>=7OdE@S8dJ9WrILl)uMgr8*G$=UsW2{Eh_t0iR{T}(5Hd|V#Jt)
z@eC#U{{tOwWtbfmHcY;qkncV^&PXsWFDF+z^gT`Fni=Uy8%M@EUZ7j~y?i0{0v0AV
zwz1k5K~5Xav_e8ZDlY<cn1zHYzm(n#*!<WK$#yr3N!?&BM}^r-NJdq|#Xk;=fb>?Z
zg{m<c`dV8{+~QhozFrwrMjK>=IzL9qYAqx{u@QbltJx?R{BGhWfWAlypAg56FBi6u
zoND>8XzI9`5f1$K=O(1j6VvdSnrOxfy##J`z2Hjm<F~&zG`Yp(^JB{QV^l`I-|e1z
zQj@tG8}VPx#?hBlA44s|;eA+-JpDkC#W7*s-Aj|^byXwR^ArM${~GB0xo7`v&uOeP
z|7SJjpP0Yy;TKLAlX3Txu>}HH&h+gVR((^6%SMZWVGwg0;>4`PJS)C_)%kzH=9-;^
zEI{C<p<%*O<@lw%`))|^E4zU#9!Uigl6YHFOACz;&Ft7%$KaqCedUY)f8bp8_i&%5
zb2l<KsS^oaFqZe@&AxtijiOQDA-cSdkkjbIzJ}`OzPb6b0`8w?$dWdvhmCBeG&Q?&
zhFXDvp&?w+3-g~rL#UPBAuWJRZ-G8-a>r31!{%dn{O`w~$4y3*0;`+nO{(kan1`u&
z6;~5h(@uJCeTZS;#)T;<>&?Xpn9cK<WWJgn<K%n`i+0@n2vJP3DY5uLeWI!IO=`P8
zk*zIX(6NU86gV|c%gJ`*lL%)Gkr%R|Nx`6cOSKgctN6%Bwm5yrZ28AH3h@pJdEXhj
z1wQL*J3GuOUVdbZg2l-6D;L5|S^Zu-mKjg*gdAloPwpX$KXq2IvaxBMqT+R1%~>rn
z30n%tLbM@FFee-=lY{p`izIZcgIRunqV;Ms1;H9{1)MAt<mDgG@M970KMs{vQy*?R
zHQ(z^7%uB>a1AKYM^;Sa>FAbcdxS^^Y4uZvRh<KnA7B|hB?(+{AW#LE+ETRg5b)m-
zeTdOPkMf+AL<YWqCuSP<gP6dJj1e6nN-xdq+%HDl^IREVQDWHW_6qz0Aw5q?UjFx&
zEj}^(<a!8Suc`_Tz?A`Nwjlpm3tVG&ey+U-Qr`IyISEHPR^|dgcVOg=J6#LgVQ9Bo
zTKI*Jf8hxVx*TR#p)PhnZqMQ2Jx`K)I=`O%)HsRB(@Y70=ys7U9+dcD9U@I?;1xsw
zcPq2w2BM??H}EK;NQoeQ(JHycahWF~WMif4@X~EXN!;yX>xumgc9Bm$2AggL)JU;;
zrvI~XKT6;pobN^8^V`20jGK(&kB*New4y_G$;iop++k<8|LgauREhKr&)wwZByXco
ztobx0l9w#_;<r6j1PjfV5=n3lHIMWWpGQeo*Dfq+Qz9aW@8AEGqhPUDr-6zZAfKaF
zOdu{MMlBrE*VT2O(#7QwA%ok81{GGkJcy@5NC%V_MCqu~rPR~{4+lV{mC;3*zbD)G
z@VqvaDL4pw2(PK%mc>eiV?SEeGr#<K6XL1FwVoATrM!0f-QRx<esy4&xK?Xl{%INA
z`_u9U(|lM_(LuV{We)B}w+BbaLKGbJqnw?0Y(wyTz;lCS{c=Crj4&Sc*mbuICxx9!
zW3A&*v%+fFJlHcYm4x~~BD0-!H6T?E@R6OI{vA(&^~gQ+jn$PE*f51)TbgTWnLT7>
zm0FaTQBYDUDZ?S7fP@jmt@hcF^ev`!@KB|Xk35n%AD^}-Nk*k(Popwpsu+`?34Y6Z
z0?*nSjO?gzrX?jqW<T8t0uRGa-(%B^!;_QEEwmlpt9W>bAS1i>5-Jk_3$~LX&8_5`
zC#S4T2~?}~Zx;yeFN0ESe!-(310;8_ae4Rd9d<qrlYryl^N2E>9I@sqeDUCLV~^iV
zN~JpGWKAIb-hIYRK%iMj05RZq%p5&DJpNnRG=`9$j|AdhyPj`3Gv0>vs$v2cpmWhF
zn?8iOB?hNGAoBJ;g#{5VL+F?Xsuxh5EzHeXjp}d7^mRpn_Ba&iO2Y5ghN>~iKRMs=
z?${8E7$`tRMksUPM`>~w{0^gZlU7qn#}0mEJ+cZiR7kIp{s$8j+Oq1MTpgs9t}HzS
z>Pd02dlO|+W#w?OZhuiXUXYoDnEjIk#3iXm|M=?`aHT>I-$089l0prg{ODM}Oqx;9
zyBWLf>3Wi|u3`QSVa86}j~)bOuK0RSU!OsPi<y`hh5Jlp#A5dUVgc^wl%MF)v>yIP
z-{KWLI&zq@Qu(Bo;qZ;S3z*Cnry%~wc(#hDQKnxO-%Khmn4Ilk!%pnOP<9@Gu0hTR
zS0QONvsZb~_(AUiP0**BnzXpMonYerrR8OlWx!Q|C_~Br&S`zbN?4c`5}&-=vo%4v
zqWa<m$ky~45BlmT-FB&S+fRX^1zNL}`FDDHBzhpE%}K948y+|I7_POC4+_!;sHP(%
z>E0tBP2n?35abD!Yfm(soaq1KqD2e>J0F5G`cWj`_Z?~zhXj&9vW}l^lc5%Y3<=M3
zDroop14(?ao<UG_qguhmipXrUAM>n76Uv=4z!*F(ZTc3%upsRmywH9Cwhk19P)#r<
zI5^wzfNpD|H=!Sh%~ufZJv8nHoEf}8<o7*8LuyqjKsZ{<QSfkE2;npS@HYmmsxB@L
zrmTijpV%+I13}4O9-m*3x|epjW$STpbOe~!H7VzO0c3z^ovb15Ww>QpRhes2MD1`H
zUcS6~Lm5LtaBpymy{Y&;Y|@U7I$D7tp2@^0biNoRG2?cCp@>IF2=)^#Kxkq)g>+>w
zMZLT@um<t{kEk?E3=DQArlF=70Lefi*9bh*_-%mEAPEeZYoVe#y6XP92P+=1$33sK
zX!7*~j`Pk?&IaJ_42neT{~mW7-e<X3-a`qQUA87EyMVka9Dt(lw)p$g(`rO+2D~ho
z+hDh7Y4tEF6^OEg3^WfO;LJd~4MwvN|8D-%MYo>&-VrkA&Ua6*GrqY$&)DO7;Cs6Q
zMLaNsf}V86T33Io$OZK2qlI>f-UkRODTn}u$3J0!q$EbtT9bs+>HzhgqUz#z*xp<$
zMk%+S%6bj$tjj4YhxxCbjp<)^{rtH#zEciqD^?;luV1q%$&RnHjt(@wD<xX#9&R-3
z1(b5INIMNAJYZH3psMAe4tKIUOyUXvz>WeK^Y1zyDVtkWx_)(gZP3fnpua(=*Jk6<
z*4appG+k~f_Vz@%VWM<;WVhEzgZ;`;vsap=NwHA`sD_R}kGgWW76sy;&eqjc;<LE8
zA1`$5W*aZ<m!oN#@WFjW#9iEFti2tfM|gV%Tc4o|2(kjp39tpZHJmR&@{);#1<w#%
zQ}^IF5U#)m5Ofm%K7x^tbJ%@DL*hA1u{~zMH$c$MwPR5YU-^s(W`x#i&7oE2YBSGL
zkKmA!28j}pk-=4q=IB@xXLJVMP{qyF_wU~y`+S*pSf-pdGp~&d%H#R%?MBC)Mo`&X
zrg7<Ih+Lm4v)Av=Pn0jHs$TpZF9GK0kUC%q2$?5ZyqK6+PwXY_&rU5UQ3RA8=;+s%
zJGR6xy9Wo~E_OxiGz#Pai61!CERZI9brFU|HZfjpqy4XtlF)Kub-jp%nt!*2{?5+h
z8Aq{=dhrMywj;;dw8U}6eEkW_)5`+x_o}HESLc-86*mYzpZ=y37N(FA_p$*o^!B7h
zo`MKyQ6c475`UZB<Fu&B<9nPjTRg|}PtDS~iU}8&$3Y|O^Sn0hKmeNX$9a&QN5FD&
zi}-zC^6`v^$7d%YqCr2(K0qeXP}c@Z^p8DnQ}X2&&?&fokL(xX!?j`k7X&NvoCHDO
zv;Onu0<N-{G~;xwqC3_kyG9G-ppwvzZ{*-^J8#tez0CCzleDCi2L-_sPR)ymg!YPy
z+uqGh5W=;}%ZD4UA*EOu%|o!VN`C*~05%;Udk8iV24*G54w5N&Ed9kZ9s~W%CJMG|
zXggSMA=awc4E~>P>P{JIYHDSse@`4D8L6o!+uH}B^j^D0Bqpjxg|Z5gQLRcnc@jwS
zNJ?_lYj1m1$05zqOQMnMA1#<dhEoe}3sy!(4JOU)ZMIvyH?6D^w6wSYWq^9Hf4SAz
z;p1)YXFKwH&uvHRSl}f3P7BlDYhd8Wm1v{1+hSSIzPdFGk%e5jvO3hT%2*iw<8gJM
z>W7&Er1MX#eX!F3>Nbeta~nj>9MKQ|{vDO`x|`IJG`F<{Qwm(#BaHrje;5g15lF>Q
zrgUQ2dLHCRyi=`1QCuvZ|L}gS?-|<r+oUbag^72c7O^pT|CP<?y8h#Z^$7e?fsk0J
z`Nta-7pSkcF@`o(eTkV<9ca|5!_Dw7Q|+cKonjPfrgYi(xV*CJ>hdpNB7d-);#@zt
zy;J&+Xw%!zUREQc90guitEkUl$W-MIRp1eDsnoS9G4vWMP8i_c6&^|_Vl13mQq-Y#
zYr9R&`}Cf-<WuC^h@ZccrPJ$8N8<0(ZZ=X+*#1DGKDIa~hb}X{*0<R%IT|&lUEIK=
zQb5<7_*7i3;Mx6Ub2FgN&l!-+f0*r7%QqsyQzSvzm}f$?<WRMuoH#<VtjQ7=9IXlr
zg8gp^-T$Ad+N&u2_A_Uj$xF7Y<5vCX6or?CY}Bs}U6t1x$X;ns;Thw__7$i;GlqUH
zlL-gwXS)PSxk;<&Nf#sK_h4fMr+6<UbsH*Gl^2h(O=R{0P;DpWLhhU~xv+2}b~%~>
zctr7cDLF@lS)xsntm-5s1QdC(QQCi3mvNLHu?mDZpE_+S(R(BC+%jXtg;TwY{pp?H
zlwr%R6jyuE9*IX!-?@i|LJ_v6?DbFSe<Pu6lB(yxuV25W^ipGDvMe}pJD$)>6h1=0
zdx^%c{{4~shd@ILloG#yogSkxLvh1yhmLHAM8D*9^cmB?EfY?JScj1r9vvYmX;F)~
znY{eBcRflOO8yDqoyQu~TS*~$x<3ZEbt(R1(MFbgsto)}mFo4Bk}B*~G_$fQ;9RPM
zAf^-uhHLSe(65<?)fzt99rLNlNnQ}HnDu-F&<mobzt|A65cwgWWlPixR{aOtMDUR!
zx?>ueh;qK%IIaw*3)Z-}b&)h~5fKlt8Uj-QMv&>Cpp<?2@*3hM<KhS@=5;}6=S-}t
zsCbzBlynz@)KsJBpH={<<Zj{bZT<V@KQW)bWXE0cx##zAvFiTLR@j5Q9ud~K(w71>
z5pHnE92$z2&(XX6UaA}i9fO&f8FXlbgmJJKf|9cfya#un3j|LPnv1)nyZrBKY(5cX
zG!wb3*#r;X1a1pVCQpz?b$NopH7KQ*2qjoFtnl#g{!oi&rKFH+0Y72@sxqwXFF`DZ
zD*fyRmFMq|0NnWJe*<<GzIoHW%pANyr>*L7=}<Cf(B=c;f|m8n2aOjG%_k}<DlKgm
zYG&ibeh-AZ5?8Xd-azyrII4e%FukQ`PM(7Y4>%mh!^H{vW7R#}LZx6I2#NRqbPXi>
z2*f7Q`VH$Q#lO=Be~p*uD^>=l6?RYhBYz$uV&YmrZ`O0fP_>$z_Gl8ty)4JN$p51W
z`R4=XBkm=pP(NS^fkD6kfi(DR*t!D^9F5mkdO!oDeS<6{e9K3Nz25(xDoIVvwTD@E
zAH+H}s5l+}c9aPvgE;BeQQ2Y<@u=`eWl~f)=0{Xg1*Tr?ePBR*<Ate#w=+_C{K<4w
z(lrV+0LdoMZ*)tjb3K4wXKYt-aDRX*G3Li&+J_@xNB8@4V^ExNlk)I7b+WSbLN$H$
zvbe1-<6kQj5y6Dw9g`#0%g(~m-J=es?%>}AcN@6%D#Wn`1PAx_^$}R#Oav=|@AT02
zOoD4lVyVbqPTWTiS7ZOvWC{sE13osT*N6FU!}x;Ml$q%tkWq(}@8<^_YA*w}*5}7y
zQi2DPu-I7h3v&8Gq@S5@U)~}enk4p=y?u$@fb-$L5U!8Sp_&60;w{oVSi9SThLzhs
zMYYbcz5SVhpotJ4T5uav(<~K6Z#}P$a@3cy93~<d!ct)zhl+>F)p{X~-NOI9f?yG(
zmTt@}IPD<aWMd1R;_goq3HzidE$w@?|3`rYj>1yfIyAdM?2Z1jE?P1R6G)G|f369(
zE6OgxW`POsbO=8Tap3%Av0C$jt-HPCfyTNuMP&{V?z9{n1Al&GvRgyE)$tPda}|{V
zIBeKQhczFcK9iUrGo>K*HVTAd)HCys-t%H$$5W-h`bA(MET&4{#R|F}0ivhP6!YmV
zHv0SJ#ib=WdU}$3-v3?$>XJjGlsFUC2hAL{%G>|GBjOid#SsinH8q+j-9W6Ig-tLY
zvw1C?@o1t2c)U&L+X5OWsthBkr7Db|HMw_J{N=5lXZHL8DsvJvhnj~v4)^|jq+S$A
z;zF|&cuch`0u^M|jvYwiI$z&Vn^1GjDX=%t{*?5=4gpKLHDki0@4jU(%+Oa0UZIT~
zrk4iV3JLssfFj(bKlqikShdvxk7J>9#*-!^{mEO6Gp-CBY91mK_)1Wcir(<~Gik)7
zcsmNy78=tNdm%1z|E&0Y62;M#o?96a_+PpsGa^)|lb_hr(`TdiE-o+AVAE_8Pku@z
ze-;tGPA)*I`kVXo>jH3hP089NN1si(zupX4>jBnwO;r^Scab>yd>pEeA7Q+h4+m({
zpZQ=TUhosoe6f~JZgcaW^72ll=$YSq-}((&6i(d&!o}|eM*70LxR_)dMGnqjyE6=y
zx93K99RpWf87Ji8UW75t^kvk1d^Nx-Gi-8~n8H<b+iQ;l()`0FKbI@)OL=*D7@3?w
zyy@BX_$LKd<JeQl+)r;ALc}ueJ`N99N0;GL<&C%g<6me%9lfs!h|dcyUCrCn{tTg+
zvM0an`-$y&WnYSCbjipD1(G0oXM(XMAPU3-#e>^%8<|<F_`c#z_KjlQ(zBBjm_Dd@
zc#5AUrAq}h@_j`Z5`b48;^{^k@eZJrBfu{}qAAoTa?CAZeM5yi${A{sY0WYB9ft|s
zyTeTap5@~Fe3WW|jP-C-RSLKH0ETcT47T8>**Q7za}dOsoyp4Sp&>i)G6%srgst+~
z8bNe%*x#KzPL-Twj^{(b5nSm#9Z%p!n2!lSX7XgEF(Tafu#||>V<W|JrooxpC_PvH
z;-xfwB?}ABQED=Pc0`UuA94%-y(Xc5uW9r<P68azy0bXZ?iPA-vQ4CtHXqbz<cM@K
zGP0`DYh8*XyPjB9xCo}W_ptv8(ehW}5)v}3f}2mU_^<Pwrj?x?Af<D=os`WqxVkzy
zrP~pakc5($hEe=3pSZe2zPeb6gB?K$M5bm<0-*Ec<pc*@M+NF>ljWAEV@o$~pfe+K
z1Wb{wgSpKGkM}y$7MC6Z6qQvO05aL8>#JWojru^zcn9~Gv2hx;#NAo28=Y&}xjGwf
z0&gdf#c36Ri<74h+<g2Fo15$Ffn-3uwCru(c(dF)iHh5SKEm<G5HkC?hTZHkEy{rf
zU2dwKG$Q;h8Mg86vzk<y{GfgH4?EzPXlJj|J{OU~e35z9qN=EYkxTM8vhcTqxISDt
zWw>2ZASrawB5dN(alZopF4&j_J{||#9HFADw~*()xtYwW?=HpCMg}rW&=v$jkzahl
z845U$86XzGe24VESK8Wfe6tq<srPpx;u8|y?k^SqVL~zK5x%qCOuaJ@ECwgL;S%0e
z%Vf$IvTyUpVe~Wt7n^}!?^H8X{0~%<B^TgUhA~AtDW2P`dy&vM`JsxsPoI}E2K3^<
zXoj=LO!W5Ocg;T;46B6Dw|KakURKDVD$l8SuG)Hl>PAgCIjLFM@kx;}7WuD1AzsJ>
z9uU6lEybaWi}QoA#=*2LVeIv{UGRx2oAAZhFmhP~Pu!~}2-dY03A#8s=(jO)HXHl)
z{<_r$440p$jDq*?<pt2nuHH}&!<h_H*8E}%LL=~{2}Zquu;((-r!glY;c(Zyb8z@9
zDp{>eW&=-%Q1l`c67GM6WZ(0F##$!V)JjkwF8BnA8QB4^#F%yjm}8_M3n|##KC&bT
z>1=BQw^>1Y`m=+65qn3+^Yhu+L>?=y`Lv_Ri4aV3aX}%Wc0Yi_hTR`Meymf>n3+lp
z@>#e1N@~aB<%EO;e!0gF9!R*!QxzsV9er_f2&}Fqql{QwAw-eXNaE<`7~`1Ft~68J
z-+BP&fWH-S4(7j?S8z>!$00`XJ}dHJoNd_eW|q$x0v&EX!R2wXXk~3}E#iJC14{ED
z@O~N&`lf*u3~ZsyBc;O8F2ANGGJZN4BulGrE!wPtf{Ga`s|KX>j~)>;)xAR<*Nx{B
zq$8iVl;n&0@gn~Ztj+gCs57U$_Iy-*%YAVefO7Ufh4K%gP+I+wU21m8$6m*_AB3wx
zLq+8eJcjf0H1T*Ol9iShLF@$Jv8xgIoK^n|UiatfGr#FcKOY|&n%wMce=Jbwv1?S-
z#H<ZwAsdaswDro0Ga4BjB-EpEVQg$mseLoo+-}=Fn-h)`(WXqt3gxP#<V8irwYO6R
zn(C|XT`eaqjIBDY{@g#}*685=c>fV`e^|f&L*z=>yuT78FMRUH3&u7XDJdA}QSS&f
z<3TwIZ-bHRWaIy8>HOoF&f_@VCBr02WYP(bnwu*>n(Aan^Lq{7`4v4xg>tT}l9Znh
zjMm8MaqY;jCO=}eOXA!eP8Ra3letlJh{zD;l3)9A?``ehJ@)uM_W8W`+57!^zuwOe
zMA2%`)8RO3Bv9rcZG|6-Rm|LtYoJAt<2<3ZZaDwO)03bBv>V6Sw%(E#G<G;2w*V%N
zmUQQ=mXWPYCbJd>(;%e;?TDccw8t>WFzIxV3|?o~oT<Nh^x83)(`B4Qqa(}^?>$*=
zLT|U1Qs+)C@t;o=+q$|Zm6K|G$5IZ9r6t{gCIb7XyOTZ3izpYz`;0;`hRK2vQBiWK
zBl_PuBV&s-t&C-W3I;83-J>2AmiUx%aCW}>R)6I8O9_xL0)10#<WK|}TvHv@P&7oX
zzv6+`P*V$NO58ODvuY1HoC}lPt2u}hD5$fbDV8Dcdy2$sE`~3cm#J_~i}~w6S7uX`
zgEy(DfQ58;eZHrVux|aszL=QhCdraH2vZ<4(Cppwuaq+;ht&J?)`Q-HLBx$jYNm>)
zrG7b8x#Un=;miiTBfP`hTy8seihWDE#R>LiZ;LE`qwOx{2@2vW4-f&zpb!rl8VOf)
zU)}YGMk^o_!B-dyqx{|7<l;YpoPk_$(2rl@AAjJnuf8&MMJ41AWG)NaahG|=SOlmI
z-c3*AzArd5KLS!7Fj6mkG(V)j$~DsNoTx@qgG+pHtr>k&_Dj_ju3_MON1lV5c6Mwm
zd|~XEqWziT_V0j}$`+gS6CCG}XViFd<#oT^#^X0l^c>LA#qr>?B3-FD{@o#gSxYiG
z6er)17fLT)dpm37S%onQ3;zY%tzq1(<sCuP<pm7+H1mZ0v{T}bz4u!|Nkn#LG8nu>
zUGwC7_kzP_;P9EMeBcasD9pm_8jN?$t<NXHbs*=K_D7ds2Yho;&0Y?>V^{u2JsjBj
z*pfvZO)?Q-eb%z=9i1)WRL9#zMgl2!@JQBnNF~TLS*%Ydj`}<$Ry5{*E&!HBl6WTg
z;K76K9?+3Qr*U)r>85lG!Q5O?ett$WOdkXa1Kow1{gS8Ali{ACh38{H2O4g`02iqD
z@kj_PVQG{kf+MMS&>#`~RQD{`(xpOrAJ2Q^R$t<pre}ecH28eEQ-v99CtrRXEm>bA
z8>qJ41gK>K>=GazU1KpA3`wIledT(l-t}e@=sr4sSlZac0uu~mwiJ)y16Ep+caPaq
zOYE+sgo;FKn!Ty$5^~4zuw!WUXKBV@)buvU#N02!UxmXiO@p5kZXh3wB2pptL{K#{
zKmxCg*pt%*Aeb{oU!(J)zP+skIEmj9$J;b)4Zz9$zT;;Kc6(>5EkXEGayITC`;Emk
zsZfiLIIO71`q_IAGj6hrBT-qDWD7I1fxf<zZ;ecpidoUy1fUfo;(8ftmP85)`ugnP
z&=8~&a5=RN9$y2ut_))7Xz&Oen7ZcXR{8heTQsm=+=}FMb6nq}SzhB=obQvs{o3qb
zOVW|v2Ug^8pPjM+qBr&OB4IPHQS)?K*+F&n|G305*74PGs@V5Ps&!+8;j05`_)Aj{
zr=Dz#Qz-dHXHhxND78#x1B-=l{M4NdLT3V=<z~Fs8~I*yxzhF%PbAt1IlH0^l1(!~
z>Db@D2s2cLt2Wwgw!UxnlKFR<-Cvbxz~B>qv`$5#XISW|mZcQ=Uv_hUsWn4m?h6c1
zPZ|Dv>pYt@R9226Xp6n4AI|E?OHLH#uZqltDp%l{oJ0_4-bR9PDJ1f4w^!U(!aU0f
zY^gHMF6ek$?wL~`bv6rbCwr86>Fm(OS)XHc!cp!2MbGe3PDZd@YMOmHlPwgp_s{Md
z`}+N|C=v5+)Gf!eM1|N*<B_YpM{hYFx?YMByn1lNiKDmG-cizGWCQtJZg+EYe_-mw
zQANRri5^m;*?gltHoCJ3PLMgf%v4kqOF|B}7!=(5p?jCAGK%YxqbKdgZw{)KFFU;k
z6Wv+iYI_OLLO!;V{f4S(>;Y8t;D8;+&e(4S=^@AB>D2utyXCdNwU2>nSCSGEYr5;|
z$bil1n#sFW>Cs%Yp?-nqPpH3|<SWDXPD2;Fu2)-5oI@uyBxcr-!#b+&_QpJXeDykV
z>XgFq%BDL#y_}Q1RbamDm!>-vMH9;7#+W|&Q?^o0TE&ONia%lTCeQs>_blO$DT@5P
zl&hWL?hG1n;zLG6k7d#Aj_faA{JuW>L|Rq4@Db_b&Zh6=YhlbzSJ}a|tah#V0GC0r
zn!7rtYD$u_B%9h7zdXfSFD_(lny|gIta|adDd%DaKT)Pt!pnJ$pf&vsN<T`OV)A2Z
z>|%biO)<j6x3d)Qmj*NE9ZcC(+x!DAAku)6wtEX5nJ)5Ah7zTk8#YL#Rr53XK$1eq
c(q^R%&!@k;Vy@&umBFRloID(VC7w$8A4NcU^#A|>

diff --git a/screenshot-06-source-card-hover.png b/screenshot-06-source-card-hover.png
deleted file mode 100644
index 16fb283f553bd46cc355cf62d3f6a7f30f62edf7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 108632
zcmeFYWmg>07A+dV-66QU1rHkB-QC^YA-KCkaCZ+7f@_fA4#8c52hZEdIp^N@2i~{G
zXc%-?cU5)O-fPO5J3>KD91#u|?$xVTh>{W_O0Ql))PY}Hm^a{+k!?E5SFccBNs0)n
zcziy|hSb57#v2SfQ<8cu3aLnsVN?IMy}f;V`C)0ztGZIJy?p@b<gB|}47G>{$!8*`
z=Vn#7?{&oQKiZCN|9<vQc(3Hj#6(5k2M#BBct2`sq_YMR!~A^=S5p7)Ut$<id7;4g
z|GW;K#QpzINaG4dSl&ruM8%knRLD@wFo~i-2>yL6CA7A3iAg9bDH**ZLpC!TWMz2A
zqFC(9TYCKv>Qsi+SVO4(4MButX399jlj%R7fk=pnmoO3*7A7MrEGRUVKxZkhQ&d)-
zn^ahsno?Ah)Yc#1&B}Q9y=gXHGjMW0VtSNr1T|F3(Cef}oC1+fZH$+LEBWx4B?N_l
zfPj#&rnYwC-z@~UD(m$C8ZIst4o+2JVRdb7X-!RuNGPi17ZK5XT%yh0U0Z{^urW#5
zFFO}wGWsROIb*oOcWc5lI&mQfbqc4g%(}OX>6TUv8WdOzhVM*%{q(h6`NE`97T)YS
z_0{!wB7>EamNwFq1euVRnVFe|gTvL`pW(R6V#??)m)Dba07pnjNUzfe69uJPDIiI?
zn8kGDy=ao;6xx5jcv%lLbXXpgy_uPfMH%u6Qn?_~<?FTpUcn#4{(*r)N=-K;uL5^>
z$7IAyiX+C*f@$wH(sS})`&?6cUDCe<Y?N1w7#V4bae16ib_WF6t+p!G>Sdp;wfjFm
zxL#~g6pF_gY9h%b8xKaC9&TOk(y3Oe@pxV1kR|SY#Sr^<!x9QN_Ns=5snL_3Dk|8b
z#I}gd;|1!DiE9%RIC)u7qgj%Qxo4)O%wUD0Sn9uqY?Bhh+-%LpY>n(=2OG%XEC1+*
zB;xa8b2(sUWo;CXBRpGe+y2#+*52M#rQLECOTe>G^BiW%011y3th3Z&FF?i;0RHE&
zU4DAF!HfPkqe#V3@$m3)aBNIWy2Fz{GLqEB8%sjwjmbzvW~8dIh@yyzvm)B6m3rB1
zS0t*%*86{ubWzo`z=%>*ii9_Ok1B&UKHXEJ+fGJG`tt1V8}MdtRa{fkbEd>UCMJf{
z{%5bR*;u-2gUO-$ub-~R^BoSGq&LT$t96_DOA@?%d_%DW>iL1n^+sP{t~UFi&wd?w
z;Zo_fIhk(uipt5QNTo6In2yYvuza;$;edqKlF8;~pr#I|$bp>-hl8b7D$-b}S?jMU
zk|3#p9~w?5bQqY(73f3E7w~@x1S3RS3(IP8a$tO1mhlUfe9mm;LY@N2@$D%O7!{hg
zlRrBiHzKlZr;83pQYuZf;S;5T@LM6V(*|Q>G1tF&jyAkj2pW!&Orn(g%oTtta=XzN
z7FSbKBk8IzggiP|xd8T(F~GM78%P{}0%c`HLSo3xy=?MB3UQcX2h)jO(Hq;;tbjb%
z@-QNv21$|}-lKG9f9P^)@DPWYVT~&Zh5|9BwG0QVxZlr%+Ml}&qihUev_XoUVuV(P
zDh7Rw*XK?`UcT0BJhLI^{&Kfcs~N5cNhPMU)9>TQ?iTwTKJVN4xjEbQ&b6h+{lOT#
z+LDs_c6TNSBqSueg_@4i{T8)qEfP9pB7U7xxeo8&XX)wb!C_(B{S4Y)1oKsEbYM|y
zw3=}f$crV7jEqWTGI&jfCqFpvF={n28-CjC6F*sMZ1K9WI$dt&bKawepsLE0&Ejx$
zsZwaNnEL%|ovfLFyQz=DW8?V|naz5BcBySJ0-Z{`$-?zyF=4sc`l>Ac<VSXUD$_3m
zb9H>!cDK`qrN)}w5m>TUh6Ds0Hm%jwwxx0ezt-B31CCBl`OJTu?932n{Rj^q219pq
z6`V2#lilbGTbmf-&vy4;y&=;2oj!w=rewv6g`wbw{_5i9X6=h@dzE|;)XiuzO%gLX
z+t~BtZ&P2fXq+5df9Dq4mA&KRp|$6So0)|LX&kZJpA7W$+-@h`7(K<(X<3~10lB(V
zRHc>bwZnv89X7Y}1cSPK9|zs>IPH86CSU)ZraP+V_2JRcY|MEP$jVWvsb&TS3Ob+V
zdJ_VYGb9saN{Zix%sm+uE<PrW#MM%V;jny%-<wu4`phJ!&&kLVDmui1iHY^1Li16R
zra%1|#u(~lq<G9&m@GZk%xYV_{qbslf=-1x_xy`=8Y3d=&E18uA{`ckmdOxOz7m(|
z$e#+8at_Ps9Z*>EGuthuw$y7^<#XLaLQRzDh^nllQ|WbE9bOAejgB7ohB(vG(k4;K
z)2db=T$?C0kh8E<NT>bC;;{YM>Zsger#qU;K<9nE+IFR21am$iU_D@hfWv%#wI4U0
z#TkSg9o%R>aWq#+wb}|-<ug+vOTcQzhOV+&SD{)dpToPmH-3le^78V6BJma)=~KJ;
zL{1DIX9kBY6b2dFd6}X=CX?RNa&u*7CN9@<zA)9nB8RP(dYJ-A2HOUd=NMW<5vTzz
zc58ZFegtf9A7^%u*kNe6eC~!z<#R{wK@Ez1ceOB?FWl7BBr-8MIf>1r=g^X!ogEPH
z#!KYs?&9sOttL@&?CDAi1;Pi%Epq(Cn|CZG4qq^X0RSwwI+D3(Wo2!z$>HpQO0d--
zpU#{^6ArHKl~`*SGSSP^{mkNG`Xd-Z#kMPM%mYy*Q=j_*Qiby(bYj1MkLK#iE>?u}
zcjD5(ll+~yNtTBn4Ryr|dl#d4q<WwbR*>0mxj)kIib;xQSXQ#~A(j-5^r~zLMQ;gR
zhcGB*3wDVNln74sl7?xem6WLU3a_%#)9YLxuCyS#cN4!we=WmStKZdgmd)dy;E0QR
zgk1blo7K=_>ld73r5Zz<MxgC$EKEPO0%Agm8BDs=9zL&YjkbNq-)Fi{V75@Ni!u-u
zyeB8`Ut8ldRGCDUp|$p`Feni52#072KYt~GmKH0cwdUgB;BmPV!L}P0&(Nw_168b!
zPulU&F<bQdA`a(0npvOc)gJ9ge4?P$Y}pSdE-)$WCi4`9*kRtheOn@%^|M^r{J>%A
zYOYef*?M7jB?d2p-RyFfW+6Ua;lo6W{rdOv9-G(`ZLhoY1d%>`o?GvllH1dj_mESC
z;>gm{(#awkl%nh~;H9CtyoLs+4lh^ln<GdbW-@T4FKNFC4O>S<OArjxy<azZp2^No
zRIiD^8!aYJu{;!Z#Ol?+O3<efi3!1>4#625uwacCYZO+JJ=rD{r3=G*-`MLYXV$y;
zt+lC4(bo19jp78<z|?b;-@z9O*EBk<b)O%{vlfb_mIOS`U!8Hg9(~Vwx!4w;VzADg
zT3ASuFw$t~X6CY(>}I!~KU=I<W@`^fW76NUPaqW)Av*KB*fK3wD&8U84B&A&px#F|
zwXmkU-ehBCU6`DV?;u+ZkBdV#lD?+p?ZudR#WM{`TY3}YXah96)$Auv6fq%6oLZ-x
z1e6D>;rRT54j3kes(Daj0<WE1U3XvhC-l>q4Yv|0qBOArITE&q;zl!OZ+}e~^5Ipg
zR>G;?-W;p9GU<K8!N8zjux2AB?jAp-bx)($oc{R}4C6!!>DKnH;A(#Vm#2moPP^5e
z*ib|~LVllkR6u4tb5ztOvFSDLUY;K@g7PmzD^N$@lADs4SoYV-8EX=h@fbIpU4N%f
zOFX3yma?ic>C@;DvcNI7A=r;+QaeoJ7g8!D)$HkYT+1B1c1pdbr<qbP%zrPVOJVza
z<KW=#YG1x4P=u6}^w(-zkX1o>dHKQp>5BWi7UnNQBNZq~Zr?$5b$9otXxD9bOELZQ
z=h>cREW&wjETmrUdWZJ<@%Q@o^UF)4KdKd^A#kvk?S9V{I=vzc``g<Lc=rHGnwnh|
z-tX3Xdith)xPGK9m+adc&vLjaS1vUrl16nQUI@O+H~A3b_Y4(oRp<TNE+<Ey7!3ep
zoB2cynA;l+yJ7Ry+Q{rbisZutSddm1e_x@8ei!ui`4ggJIpn<a0+VEv*bfyR%(_L$
zg~9}**pL|UT0IP^-S_dw<8LCgY%^Hcy~6;ZZGP&~I&Z2>-uKL1vI*hgFc*HN-UcIq
zgUnM0(2uv}%9lyxJt(xP$!@1R<3XLBops%SYVb~Z>Tl3ce#&xii~x}0dw&@MyX_%-
zKJ0<B)J;f8_~as?%tXUQM@=okNUI4ZT9Q`-xN9PWn+H?Ijb`IW@bL1ES$y7d4_LH)
zRCtt0>a}|HE&&t8EiLXse?WC))cYn9aHUO)WrsQDe&6J&1H-{3WHvS$p3S`Xy>YmZ
z>YQ_L&YDv4)aj^R;F}}d=m%;U6sx1UUePV6rl>=8ah6p<Qbnc9&Z-@5<(m!CIq!vJ
zV+tARu<{C4*V!=Abp2p7Cl$_^=YW+aOGIt8-)DR#X)Z(@He6OVPALNQD>z5CW$e9f
z&{xFhYR2veu&}Vm$aD(b_*v!U-`kw`6$FgmeH0frzt|EjqbKA#U*T8C7lNdmsYFbf
zH6Dtstf;um4_!^Ap7-+H06gqc#Sp;x8Mtx%`8qJ357(Awp?|iA<PBVe)SkYMC|-O8
zo6LlsJB1=G4U|Zhzu0CmXmb>*Emx}NZfqE&@}aOB{?H0L2avc*3s0+7)#|jn-r%-o
zG!R*%jorls=O+f>3bI_GD&2M{HoKo0@U~C#rE<C(`~WsqeO5Z3e<QqyMkb`ynhkx-
z<@co=P?@Vb93ueLAXE<h8Hk6=y_iWdT-r)Ne<ZUzf$V57C5XgkQf#s7m@Xbo&&))|
zVMZB|;*i<@q3h`dDDFEnv`93qvUt~OE!V0lIQ1Hxo1;1F2&l8g3xT~6fU6O|>5wX9
zBrZF|E<&U1mR<@bT@i8FguFl<)+|@TG&Y_IMbzD?c{4yq+1<Czm+9ev4T!QvgUA6^
zr_(O&1vMc)LeMHh4w5rn4m<}ZCui$G_x?m~nl!mmFEYE`YBDzlC<QyRt$E9B&fbw(
zI9$~_oj#EIhT=n!789nHrBW$Ye_q<(=L>W?PL@Sj4G2gaY+(j;KtHHeKtj9qwVd`d
za&X-#{xP$yAB`)C$VF0p)^;CU&%KQmh^Bwi)e>zh*5N^1se4yS&O}_eY6GSHKQF-k
zCz5W{XH#U1c~ce1j6=Ns5HV&8f}V%{ab7#x5bORBs|IMI<ZJpA`k3wO>kKoU&*Vt1
zlUylH>cL0z)$J~aiCr(aryC0SdL3T(m+t_dL7l%%Wzd$(eaWR^Q&0{brctk1%@+;>
z*v)P-Y``BgRA<<yFk!d$^)wu{&#-2x*_yLxyFe74m8;zh@RqtBZjuK;Nih-)rV0iW
zG?}M}-!b>dW?TyJTh(hdSH#2dxSvhW&f3gXP`v3AVKp1mNXL%fTWPUp(*A;<12bqG
zr0V>1CwX>Oi->^0VYdpQ4L6PKFEJz-1l79=@gWT2V|?DhJV0}?7+jhXK?qXMqgfho
zU?P5>o%!l4&0AusTkI5D)N}#=oGRR%*&1Ezkz|^0L{6PP_la@U;&Epl!mZ>v{Jv&@
zo84Ty0QF5J_qqS=Y_&Gkl&0!VnM(QeeDz9iU*8nztM?Jup^s6|qJZEU8^qtOmU=Xc
z#SxMnqhn!(s<eI0adYLP;Y>hF;@}?3WQVuMUEj4$0@azzd9c~%{!#{YqkuwcF`u5<
z&}#yod6h)_j>H7Xr*);Lr)RJP$GuN&slk*EKSh>`<%`wa5n#eX{8ZmYQs~q{37(jS
zZ#uZUKv$5<XhK{Z7!c*X-W%6$YIEYW8UCvuhx^8|d1_6*C(=7Fw%F@~A<xIldwa6<
z*!4%&2+rvCM00yEMs*n9Ba&kN(fqmtTC3x$6`L*jajn{v;?gXa&oN^RWsJshSYnw5
zhRXB;EAQ7hQL({qF39VhD_x54L44Zm+ARj}$S$8KG?-imV~m#aTs0DAU}@>z^9j1a
zX6JQ=)=9_~E0AGXb(11!#D^wUc<DIc%*>coylXw?_w^DM$=8Fw!F>1b^*x*0N&3b1
z(D#_Y$Nk)9bV`}ODpaBzaEQoJ=8ty-ysdxy|6~Pfu}6n_d3mv#$^2TVWg2B>Mgw}3
zosBK{myrM2dKdQmC{RItl$NHZkV)7h$O2Xt7BGgP%N%bo=r!u}I=)I^Rtfw6>0klX
zURD;-EFKcxZ$TWW4odkPE|Xzq37!KDY7Kr>nj|>nMLd#EuM0qRIjvCjcb+l2w2X(m
zyj*TR4u3sQzQa69xWgqojA$og<xHph)us29hx7&hfbKyt7=~+Uy}kyGK)b@)MEGEH
z3<Ao(B`V5;Pp@*vt`E-l*PEEIcBfsbR5*tzt!At24`hpIzfV^tAW1T%Medi&6#EVi
zM7}Bry)Q@zY`-wd%kP=F!jqZg=jZqH^9zDT?(n*aJZaUW9DDPyaX3>tKR;hmQsN^=
zMybnYdNgYZs<;8%8#w1%n|zTgy~1qn0pw0T_cPuF1DOM+<y0QM4k!D$3I_EcVDvF)
zv599+Awc*K_tqN^393iwdWurYqCw%|;NoJ^YXIQjF~n6Mzc@+H%UFoWS^Y~X_>(MR
zdnPd44B-YtM63mVn@roiDWAIfi<&hM;};gVp~N!p$pedxU#!?5h<M!ao5uk;JzaYw
z611?k4vQq>pDB|T@Vtb%=^Kbj!~fuPz1Hq7fk~U{W5|lsxiOhkW+<1%fw``5SEbpA
z<rW17Z>`3~@8#w{tDU|x{r$m`Luy<fR7JF@7;$lMfDCH_LZT39=BsOE2CMne(NWzP
zL<3we)AUVMPwGts)F)yQoSWqz^wnkM6<94jP^DHGN}0A=cWq5@FV=z7Fl0ys@Y?Mp
z4==*1?OR^(X5|aj6hy*0I>X-v5}@Ox`2CbBHFf>(g;EMc1BYbbbicqscfe!JynC-<
ze%adkse2<rnQY>7TvX(|&4QHuPnlwwA8eY*ESB$f4fNeiTBOP%l*;UM(mR!is3MBp
zKHG;Y@n>^|3>%Q+{qpL)jZiEUvtMf1y}v5;=mPrI&dMtB0RLfg6ScEbK(TW4gi*T;
z-pl(jPb=dbg?1P4ng&)ZAreqMAkk1WnGHQ6L@u|7knv@&g>rIoAmK11T)fgvrsIb$
zZf~3Gn9bn|j0Q%&VH<7shUj;AC5$xYL0QjNjjvf?e<Dui<F=l+;ZIf4U*EVr#Z#?N
zL54%~;+pvUflSeM!t?&JI7#_w$as6u-*6u9y%G63F!5lQJRfhfzq)Rhs(p1i-1?qG
zb+P@!{rSnSU_3-p0LP<z<CC2r`4ct09}p>`Q$gOqaa$dnD^uLIUf6mJk;~zQ)qg{o
z-P>f?C+1T|j`rvIQC)AozuV#qum4L`x|vT4xBFS|8mGNpSOimf`_;LJeu>OC#|EH{
z9&b-K&j1cNH&QVMKkW-UgBQY>-X;Bb?|gqr!4Hebul3^xd)ud9^VP?ph`mGG0Oc7O
zV?0%c1FE%K@|HxOeA9W{Usl_k+jzLR6jXXkO7<*l1B`cuQSZVdBl^|rOh@NeeUE0p
zbGuqOw-gqlH<hsw;Szjs3jfRG+u&!<iZH+AmX{k?SRaGZw7m4eF(q(<f<M#Hkc9pe
zpWCI?`!^w=H-3M97P=mP0Ysxhg{IReud)(3Az}?E_3K~j$P7QqEb}^AZI&ATJT;!p
zlupR!@(Z0}^h9FNC{=5z0>>{M>s-+P{_;abCQS4QEPu#dG&eWgTa#8(Q(&|DK3uyx
zw*&fc4^X(n|BvBpS%O8pZj*)M_8_D7m!e7N@tK*?u`!%n^`%VDOcvIo5%w<bnDOo4
zlSnQfokmk-m25Kk>^TdD0}UpMHJ>#3Qel(_jCyrCb+I~>mp7M876%r}zv4zH2Nn03
z?l~<BmpWLDVi&!ck9v2X;_NC?Y2UGU3l2AZ*n1yf@d_z}pUP#EC0o*16%GqVx09QZ
zcI589BRwqc?bn+WpF5K}(`>7yX)9A{VRI?opU2Szn9z^YtD>3XxOgX0@+HM_W0`tN
zL!VS_ajZ?T)mw3_mDLo2WVox#3Q80d)Yavuv=CvFXCtk&v@)6DO?qAtk`vQVgjSAL
z2vV}|eUv7zfXbLHiciKhQA!e3N(!M&f)WY{&qg!d=Nuuf^TTGK#X-n_dwMGE%x+<C
zA4jyLGWcoll}2U1`}WC_^K_T_K#^L7%KOcJsybmO_F)L+Q~OG@3>H%Z+MP3?K8CZ4
zD=X=K1e;k~&s3<=oryKfaDF0DG!S%ka@snB$7Xb>B(~c;S-P9@x*K+6ANFJD=`Esb
z2v<%#Iy~G$zdL3;qx#lgXDB>{l$o#|27J%0%I|AiCa+MAbP!oA(+vKZ&0RR$E{mUD
zzpanKEBz$uLNWp9Y^=Q_F!ye5Zh$dE=iQ{!)?g7t$ZFOU8VWTQ^cD(1qrv1ozf2es
z!NF{~v4H^!vYD+ePE41@C%q;MLlcvtRd*tW>ggWMi<m6H*z22{t2OGkz?5Xt?`*JM
zhz)oP9ZmR*ommHfhlyv%5DR7U3p|@)f4%aHEynsg@j1PNUA!v|4Fh_Ud7m4x8$^yj
zg>!{bn+bd)W+jIHwJC`B*r=%7_7P{F55LY(S>OD!^)M*y-xl84+_svlu(&yie05i;
z)<ZIK>NPt+$5p}S^6AH2mjNNddWXQR_PnW<S@p;2qTVr?blc8#Oj*N&yvWJwWMU@@
zGcz+ESaf%HcTt9q5Xy6rn4`e9q&aRg8$T-2LPQHpPS46(C{xUqKXclR#A`x%xh%9@
zZVFJ7;aVszEBpum+vJz%$-Bpg=BI*8g^Gr3iR^6aDt)4LXEJh;1Z6DOgUKBD4~w)@
zpO%562&`9VsKE(#id*cPt1EQ#*96=yckBMOQXbfKoFi_BJ9$&drU*aDTn?2Cg))IP
z0Ina#J$-DA$czmjl{kM}J5NH|+FA0>I9OPNETLUpe}FXhx;^Q6JmmWD!S3fb&x@@P
zqg}zzx=%}u=2KHsjEom_2fgQYHcM#l3HkX*(6zMa8uXLqMgy7FiX@XdIy#!0nt)d>
zU>Hbj3VI0r!FD2e9=n@>H_DXZc3`bYI&;_a_hR@?`q6W696d0!zI{a43nSO(GuC@9
zb;G#2_SBJ)xr^m{&*c9IkDmIHb^t9@5>ma?J%ldx^V@FEY~x5ll4YPmM7i|<BqZJ8
zLBAlxV1Glm1qDH~Os=u-aC{G_mu&A9(<4HOl_Kt>vGMVrF1AZaMXNGM%ala*K5wLD
z7bpD4=5ZAC0Oj4s5||ys&!$wT$&e-VQ_sL*66xC@-1XTpsaS;(hJ5p#6KFgB<7EKP
zBrpTtdGp(WZtPpDeR(XTkNl{4P7=(ZV#kN$v#1ezxZF&K9ehW)-sX%=s*L|J{8ru7
z)%8EKMB|$WsxpcX))`=B#^`(#**ptPmda;XkBA|`Fxgpb?9FH~;!m+ubAvHj{X5_P
z@VK3DMaL^DDwf&Q=@XPhM@Qdjq9iRw$6Ph83XLV1OKD|R+)`}$Rb%IUo(Si08H`2=
zE<kXc#ut0F#9XnvTe=&Sgd~94E5Rz;CPmRqo08nfJi{W5@@DfiG7>)00Ij5`3azvf
zt29INrf<EQH>Zb27?#v`w(8L5+Tsa~7?`9oT$-o|YJlTk?TS6zo+gbnADWM6QtUUn
zoeK1YAsbufgU(Z-SWIkm^!3HX2Zs$}`Jm=zSEcP)>Et@}HGmLevJ9v<fnQ`&U&rGt
z={oYK&%VksuhwD*<FL2L`8#v|uLDs(m@f+WyLLS7TU#_1)UsCbVxaqR85G6q0;*K1
z%r|68O3H$!l9z(N9Br@Oy_R`neC`G#%|uZ#0W=(bc6irP!-&$VP{%R5pRI02sR)jO
z)<vOeWomiTUPfl-e5Lxt+)Yz{z93K$p2xJg>fiLc{CvLJTl@e$O-HHo&q%Wd2P4f#
z&DJccsuZfK>|qTGp<dEkRH)%M5BWBBlz4j8fp6Jz)Y6c&p1r9EDdjYL1;-VK*-izY
zRcu0J&`nHqJ}Y6FX;H!n<&`tqL{Dvvikv~4RbFgUorg?O$)q0~Xb9R>hfqkTUcyRz
zijppz?Y}>mD)fJe$Q`<@?Gj_qXROL)wVpo#s2JY2qZAYn5D*mwub=BYS24HRC>(Yx
z8M2=(%(Xj`B5f9#)<lZ*><hfut}X#BlmXpTtauMb7@&_p+lXeF*EEfsor8l>sc1M1
zx%Yek7<^{WRXKpAZU;_|pH_I3niezv>x4r9&(G&-Zya#v*_vnXuhMKHXDclN%*+aQ
zZ;&)@wSXnzae+ohSLw7n0$MkB8$H649_7E*fGAD_LZNWeW3$&oapy#*&|<0pAUl9@
zl1^WAD!Ja$^SR2jubN!ul%KSuxkxDq`bEV=@p&*iecg2&B(6`}6Kc#=tLPEk`fDf4
z=32}r!|Sau3D`3^WBty#>bwQkG?iT_qhGQi0(|=a=LH}Lza8gb2&9q?+f`_8^1UlL
zCAq@d@AB2Gb`qUqDMlgo`RxaY@=^0=)ksX(gL!d4dW(JT0qKqG^j_cT8>P>(U~8mI
zAqoEmwKMeT^>Z5!FYh<s$5`gw4$mtN4vyP3o;c8(s?oUM6tJ?k)^0SDJxe|1zB}zI
z45L8%US~*l7tJ)D$qxLq)Q*n2Pe{1uVzEzA#i)*+P{UMb5@IM?T3V5AUqGYFF=ey}
zee;Xm+WbKAMXTd>t**4E;e7B%Dre}bWOyw4oox!c^-f^WEwc^0%_>cIz1m~gXe+9y
zSpMotw`71xHz+UAXt(CI)PwB2|D#f|a4()j7!2+KmKac;E_SIwYis`qw@Z#D1Nv{1
zaJGBMs|XWD0EVQkmSnk#jEpP}|3f146X@OHa=N{HZ&XxhEXt-2tZ6=3-P25V>qu^S
z1qFlS`HOA#ybp0i0-^RUg<_1mqv{^N&(=U`Y|uc=915{$vO}U6q#_uHaqQ_OhY8?=
zhKS3ezrVy3`{uJRPrV<fFRSIf_>sDMlEVLSF&Xh>UcFLX{S-B5*NAzsO|rwV<I~x*
zPh<+LcB7vEE?Sx3oi&?v)zmjhg>@2=q!MAyJsxivN!_(tx9waCI*Fg(*jKyA=+d%>
zb>K+^cWCy;GJF9@s_U$G`r-j4mQ;bEsPLMAAiKlcJ<6yAbmOI@q`skAAI%<eb*Pjp
zB~ij!Gxu@~i<{BW(aC2&2s~wfaOQTQOp-(Q+UOQMKuonVNMd7V#xU3GQEmMu6A9!e
z(mNIe*r3F6-F8N~h1pqNryXi}wAs8e<{6QJ$S&KsI#tkqkB}cE<3VC(-|(I(Q!GTM
z3f@ITCW_6iDwfM$zQ6iY`iE+)!u-eQzA(77ZrzP`)mDei;|2S3bVK!~#zy0e(ENOo
z8jpj?&9X9TyNP~hdHv3Rj65!rJsXeRYOLLwa^%koXGU=XV8N6+=@ov@4_lX*BqV|j
zVdswPUu@}UX$AbA;&r=aIB+^=w+_J+i`S*ml9s01?8Om{!fJEa)Jex^dw0W{RYtdf
zR>SaGK2>il(4U;>qx%SiP5pW&T^3HGeiF@rTy}U&dkPynqPsn6=6#1>83sKuqcHNl
zxr>j#js{NB51Ue@DvM6*{dzoXTuPCY=J=3!VhkuhRRC9@%}1aqugPv<XjpGPaR%y2
zB)<hKy7@q`R?wHFMsW>|U&jlzU{LS9fCe(XatQ)H@H48_YZ-qB$1oBTe=5dJuP|AG
zPs)@NgTTgwZWZPN%|ZX=rb8XXKv09ios)}UP2_6zI{J0l=!7bIh+(TorzM2oOKtoW
z<=UKfV+r{XP=6G4SQs>BGaHhs2gy885VDvskILLB#gKXgf>yRMzz7JEu_!n0ci+Q=
z4^e^--^MI_r#DFDZ)$FCR6>L!V6x_UoU=SBE~0DcQFb5PxvrARwMx#vPRxC+Cn`En
zKrGG77nk_uOQMYV`xCPcToV%#a+ra@qnCPP@!!7$>MUpWv|H>PXNdeDA~EUa3q-GA
z(FdI!Nk>Og{Ev^0PFLHKCT`x)z+|w2CL8|-iW#3~eG~Apq*7?fidtHJ17z23cSDqB
zuamW1`<fzI3NKyKRR+_an3MAp?6Cikdv10Xq!ak;f35<1rQy24>qd%<tPeC_FC^87
z>47W@STV5#RBKQ|&%xm-5R18!Bn%y@QmObd0(}VJ^X{HoiU86o|4DG6_@B8J``j_T
z=q4aM_xART?B@vizP|rk{qICmB|E=;>>MpkVu3QNz#W667X5$cr5a^G@M3E;trnmx
zD2_h#nk?P%;obH1^=fLVOSZCa4&KSj%M%dj;$;~*N#B}65D^g}BFZ{;+>KE(GoO#9
zF%6q*Yp(=1@LrW^Hge=@m3$0%WB;?&{HGN@xJms)&<t^C5fGTsZy;q@+sEH8e3E&5
zSzDQ96W~v1$PmlOK#(-mdLRaczyvEZGxN(Aj&cNqeAS|G_R-XIX~W1tV5OLnKq+a=
zUmnfTIYP|>NgIz#4xGcAJhz&P3N%d2>U=@zA0=@A5)-Pz85tPgO|-a)1tm}*@(m^n
zG)rVYFfddDfzopXpZj!w6^F~7_-|g~>IteVE5jql5hEr^#j9IQzxHst3}s<`mpIaN
zEtoU{NHcZ%-*(K?9qOJSKO@G7!+7T0!^6Wr<MK2wu%@sO6Bn0~rxHH_<3EXwe~n+E
z#EB-CkADMaLOnju4|CJgXxx)Oe$@Cry4l&Kp=Y0m{xv>*^I~fX3JNMKPk#{&|0g(;
zhzld0kwN|4T#GwT(lq>=w3$4uFgOd)=ppCeP$Nx%fDYTLO-KlMvu`{q+dT$p_*S*B
zv^1zolEF(bgGQQ`m7#hPUh3~BzynUW$vPw?<j>uOvbeamw6wCWZcNFD$@Jm-!h(Xn
zJ~EF|aa-H!9R}Ux4Ej?L)fpC&*wF=l{vFT^g-VnZQi_sW%i(<2;fhOV1N7`1RQp0?
zFPFh3BFIRk{O?=Aks^cD=RHgL`S?;67d2|EG;+e|-kH)!bxB-cq_(jBd$R<}e=}3T
zft$^42UvP3=1S7oqgM_TNouM|L#(X68L3|X=S?Cd#Pb`Hh>=Cw(>uFkV+aJ)|2MM7
zk|t9<xzA3`iV0sW{O@G{e%%CdlD{|n-xvS?{z;@bX+m&tFw0gP8UexcUJP_j$iepZ
z)z#5lmYp3ZxV%AufuNF)VT`o96ZQ7?zDqzGE?#N*rT@)iZebzr@92ZL5Le9LcBLf?
z=asauXzlD|RHg<&8$Qp=)t;asCLM=%uNyTJ6P3;0R1nFaH_rQs;8|E+-ox@qi1fSQ
z>Q`6)p;+J4RLJo$nYzdO#{H2LJmNR`VihWmt1Z8VBhbx1XIEB~m)E<XVq@>`?p9Y+
zRFsrN>b9y^X<!o&C^wimmJkO92?quSy0|oHLMcd)!$E`?9Zs_YmVk_i$e>(O6dNl?
zE3dK<L$7iEdm`5l=mScklj}ox?^}G}5_w(r?EHlIM=&-2p~v9Wey!UnHwrrXT0zKY
zcR)uTH=};%7vD$zS!~V0#kQ+YmB)~&?=jFMk$R`<ZH8j2Pfxb!o`DmkuBHY$8Bde>
zzA4GcxSTZ$9o}GQGNkGmc<X%gz$D~e4>>uRF19^gW>4Sx#OM6{U`uaIO^yb6`SL6-
zAn=Do_yJ%>|LiRJ4V7679%_O&`riN{skz{I21GuN-_!Y0^RdC<GzHMny}l<WHuMY(
z21SAIi+t``=)+#!!*!6K4Gs<piPz&pc0qz-F_J<cIspO;798o0cZ@|6nX?j+8<BEy
zyWmEC<7_TA{g>-O5#jjsH5$zmd%*1-aJ%PQ?Dgur!xP_PP#f%RUXakzF8}-)`zZ04
zoWtjHx0A(5`2PKSH8rf&KbO15rSkf9b<}nKf2M@P<i7dbFOQAQPENjR-iL&LdAaC&
z1cL>b;gj?8VmQJ6=NsR@C+(x4p;lB@I!=I5Qmu7k-{~XvEy={eVYtE68kF$*EDLhd
zr+%P*4Mll9&hHj#*KKSfJ-qzZTOIeO3QIxR)NHLw>Fgv#Mu_luc}hX2`avk*H@No9
zV1haQ9ocrN;qlSEwyq9l71Hi%duZazmx0;2xqC!Hz9Z1^O7fTrfmau5$D}o($x6%>
z@CCsFV-u6`6>L7xS^Ly~UXu>mpqtrF_N%Q?WA$Gc`@MIhSkJ!&1iZ{wd;j>{rcx@0
z=%;Ktni?o+wf2?a4y1L0SNyN`Itq<Hv|SU|%4Ksy=dzkJk}g5QXC5C7x|=>-A0Br;
zi^t;ggD~XWL~fUswzj3EWv9nxr`dSP!GXnM2#WdlM7Q(LeBKeAo&1E{6UFe@tMRa<
za@l__2SCxI1G?wCfOQ)uNTA7ji~zSfe0^o5MTKS)6AlheELc4DGq?ZG@tG^_d?7U>
zA_FF-U%KtcgnV0G+k*r|xw#&J!x<uEip27{or~?ihwF_?9a9!HU~?$#Wno}oxZTEX
zHhR!oXVhzd?o8MRFC=!20p=j|DU0)$ZkJ!X)tr=siP8kyz-ssQN2DvIjbB6xMH2Z%
zU(L5g2m1J24#@S)cvsCQ^xom^W4A|BrhEbzRj3f9D~67kdM-OTH6>RP{jV6i1%Y7}
zY;<=y*XUq48ccRgjJncn{bMbTkZ+~=_*Jsl@w}|8%w-`d{JZbSq9P)BVo|t7)wWX)
zH`an*pB{hRPEIn5EEa^ozbOM1B!HGFsbYlB8wniOdZ7l=XQR{eit#B5gGQ%H1GQ{?
zcv#{@h(m%rF_XQL5;uZAzU1}mfT6ftM)ew(N;TQM&UiHPX07JPRtSjGP{ft~*xEAH
zLR#dAl@eKHRra~L%0HsT8AL)1_gCf<;8Jw6K|3#jGDwU%fQNvDl-fbvBx_=ltRtl$
z3*y0T?!OWaf?)C|J=WG%R?PcCPvcubyQfB@p7&@M6dJ7UKewktn|+}9Oxt6hx{gt?
z7q54|X$-kprdnB{;{^~Dq(+AT4X;#jw3;b-clJhVdR;)lYakcc5+Ar}abH02bBGb`
zm4E+IL$L$quuA{;ITpsSGLO$5a43GFQCck)Q!rMqr*WM~@68#~FkO$hghejc)T<7N
zWvRB7UYi1e*c^&z?d|17a<v&DtRMw?bNp&(EBV6GpJ5!GHoEKojuHEx--4bPHR?Y8
zJ|h6VPsoe6qW#W<ObD60@xwK`E5gK^w~nJvd^^2_ZO|<h6;dn{Z1=0(5#Ypy&)DsB
z)_->1ff%DffqauUhs*ZfcsqH0Jupzj;0JC`AA5WK_T6aF<5lWJ)`Lw(VE)3K31`_T
zwIFq9tv)Zv|0K)2vS{q^Mpmz;m7qW2{_r9142DkX{?hdN8bY|ZwpJgU7Ca`JO(=kj
zd|_e|g;Ey>>g_!@bTKHd^rkNz_UouBfyZ-|5o>UmBeZmMeGaeRzlEmFtNWJC=lxD~
z2ej*uac8xKg_$S6izZTo=5Cor{TqB-TwH}90-i5>x{U1X?4W`6xE&VP)^_;#I~VlU
zd5rpBrHeb1`P?_qsa3hV@~zkEyA#6FuFsUl?PCw<FG}Xgp^`|mr_iQ^HNn8c@4tN_
z<ZlrF5c)qaz$fr&GY|z0_sdA9Z@Uv~a$DQd7h7)wgq={e*-L2TGY0b~2<9IfHK1n{
z#qC?r;=enBh>y!@hr_v*LSr0f0kTe(CMKV>EtZ>J=iqWaky0>o2+?h!6fAc<0!x-F
zpLYNzK|20`&&y>eEH7rEdIe5;IT)7A<5N*ivrPpt^SNCfs-VnO3f)3bpisOVe?92f
zX*I#!e%yJbLVDR|yJGf@h@RdxAptc)tl(pOF=+c*`~uV6$U!mP%~K7u?K>={dgFgj
zvn|SHvf-6D?YvDyB_Md4MS{;Oo#bEgeFsXee-{erWT4tp!E0DdgMO-vBu#D+$`JEp
zy_V<KQ}hB(ZHot63akWW`f66Z(L0jAfkPWeSfN0LS9Q|;{St|}wP=)YG$Je1Yv~`l
zefP!&nDlwu&_10tG|&zsW73($Eavs>hy=3b5QRf)y_u&y3xZ>emh0?%spGb?v~0Ft
zM{{cfVQ<xPB~%XTR4avbOtRz`_QzeO>!aX%_?JnBvLS10>nQah(e=(76taMb#7aSh
z0+9>neMYh(oi%PxV97xX!mz`?3ylU;Iis-fZN;U7w}($K!tKSyE{Uvc%mwzX455Hb
zE$p0u)u-@~4UBdd0A)A7)`Qv+5w5edA)`p?6$ShsIy^R!T5@xVAPiYhNz>v*3tR$%
z%k(;?!A&>R-{RO&;Xj6$@(a<#`64p)Io!kH(c%0o3Iue@^}8r@$kH;uUp+s@DVP4J
zS5eOUq&ZW9XzB|<u(fTiyRSlP4pvA-rt9lhuVN{oQ6UcxF2Z>LlIeK?&*+00TdcBh
zpJ8SklPD4U`3oeXGv582sC5cNIl`!Cw?89A3UPIyMlAHoM2jzRDbW!7M=!Jm0msL9
zW%U$K`pqf_qs*T*U)qF!3fhhEfb;GTS}^XG4P)820=W!}Kb%ZVBsu;sOQieAh3H4w
z4#~8tZ&C~vqjYqR8k&eXU!>fu-et6(2Szyc1Y$b9obNypEy*=1sL7Nil-ee$n!vN{
zfEtJr{Oe~2G8|luhGKfvz`DRE<ndl$TI!6-xm}xOc9Th1%@ZxU8v25Uo1=vV^~q-+
z2eZh=K~kY5=<y<5!}~3W`T4*jx!uOpw{e6S#A)|Ww+WWM4=#MZ54{zte@L^3zkYSi
z9x#lL2pr1xdG+DEX5_xxYT>JEV-$9+5C~VQm&Q7$(8fN|<ng_6QwInMV!qCjh^NvQ
z8I+K6{dkON-#z|#(j>u0Kw&J!OGI-OFoBV)%&kmM_K&1j=f$B5QbXau0lN44nOOZd
zAV%aBYlwLB-_zs|WT8FDv_L^GFj(5|I8j1I1{4~m&62kD;SI=>1rNYhyqa$VQ7+by
zM5f#XpreZ<3wNHBs}6<!4A-DCHJ1;PW8&Nvk7v1))DrS}*;!illv;w^rZBkzv78*z
zpAHwXG*6LKC@3f@uY>Eus7Ve`U<1TN-xv&Ox1Rs%Prmf;ZVXLMxd{kJcx;R=Zd4!{
zjU~_?^`fO4Duud4ScxP030#W~pL^~TmA<gw@{}Blt)L0p$MUMEs?j;cYL3?L{t}Vt
z59mT%3}>>H|2liQ?G7;3A=<JP2ZjO`Ij->6TpBqM!M<G+zJ%|vvi)@zq_6Ajqxe03
z_oFLkd}1qRT{8^^>X7&aCWEJ324BzwA=Q~$y@t&yBMd1!`NrpJaQoqAr7V%fuq++&
zD0w31S+DBk-r0TC*vjkoW`Aqz9f_5i8f1Oc5r378PtXP27cxh;Au@3tVA-rSnhya$
z{)_fg64Qt-_6`orHPm_pa3VE&In*dnJv}7M2^YFQ131dX5ey3p3$IR=MzNVz=~N^2
zM_=Dqs{95~Mc-{&+L2%D{xX%2EF=n=llG{n2?Y}u+va!p%=%qk%gb2RN&^w{SiLdb
zymP#LreR1UVla@s?NUxT0{$TjA3v9~&ryFLj2i>E&La|@{uU&jwvtA=RUjn?gLhG6
z0V4tNZdrUd<TweOh&T7whm~PN;xMe~eD^l*!PO5HxXv#rF>5qKl$D7l89es_It*M_
z+}y)ocs&u2aOtCr&-?rPacQ)M&~m|S?ChYi)qHSuwgz4Qo)ip5{=a4Pj78`#vGNa=
zv8+RYF@`2A)AKI9o(~fhVGWcZ%Cs7r5B{*y-|Qa!e%5RWe>TGK>r%%fv6UZ4<9@nF
zx{)jE*&49*h!dZMKc08x_k9Qq4gDG;n-E9Th0o)LTf)qLA$EyDXZCzB#VUa@OuL9@
z=>5TI2csfC9J-`B2s(~zEd9OkMk4@Sm^g0NibA;KgM&K2gdDd+tt~Anql1g#d3drw
z8qsF4jzElcc38mo;hX*X6u{;P)^f^hfsj1JqEIr!!`qb>qK}s}6o%Hq65>NnAWH}f
z4==n^&=n=kr-1~bXP-ZBl)C^-0Kr80&s<8ne8Q=m>1~9(9u3ArFCd$EbbJiD3EMxi
zACZuH71-$LMuGC^@I5xPvkMh>yWG*dpohut4XMtPBz|RJo1|Nvu#ZM+v)q)QkpWw@
ze7f>`#xS;z3?%SqRUCT)_n47Mvw=PVODdSABTA#$+P~)fnkqz3jBGkxcFhxw8nj5i
zyT976*8ZK3FtE>v2dj)fTnxCS`{^>0(IHSBAQ87s_r4(JZHfJ=QwGZ|0EI0+`HE3$
z=~32{c2w-NuUx3p1iPc_0vlr)(jIUTKeCm({Hn8ges3?40N;%XzhO-u%p{Y*?;Ws*
zjQ`5cg}6c;v55Ddo-ix;30g^~M9Z+@l05d!B~BZu<Jxjr3yg&tp(dqB-<ua|P$wiv
zDh|ctzJgVS`O}(}YV5OXqUDoCl5f*d6`Vs}zji9KSyC#mA_GffE=I8@R4ZSqH5+kd
z-UAQxqor^Ph8Z;@JdcY-NF~td$do;(WKicnEX(2;b?$yAkWsa}Sf(+fr81&8=kn{4
z@Z`HG9Ez*9I++gbjpG%26huhA*sU!WK6ILn+QCN!0_wWb>8sDOsp#(R+#W!`<s9R5
za(c?`Zs&cmr3&-*X_@$k-}6^fogL!Pm*;jcm7M-6osWyBOO34h#Hew|ZlxgNvE?*r
zfZ{Rvv}L_mrnr_wHNl|S@KwL-Y^%UcrULWv`tS{Vr};!aApX=2yzoC6<0*+5h@*l2
ze5Jf{FcoyQ%ZkgK2fh4ezG{g)LE=2H*={Wve&KR=^yzN%t*^(^o#i*QNvcW92(exa
zXeTl@HUt*fj3Df{G?r6B9_Sz@pjNBLutRm-m6@qEni`W-A6NX6F|r0D7d$u^0gTQe
z)kv(yv)OvrURV8e7fL<ySG6<6(hF>CYzi6<Qd;QoKFmv;uSsUq|KaXdTpoE%W{Tr^
zjL3lRbF+=EDU}mrM`itHb0J0<tRY<;$P;CJl#!9~@PN>lAys^Oev62BGvmb+k5%S2
zimPpa1KQhrbX}!9iPx_;gDd+`GUv<Avyw_6sH7w$sFURAMlhsAL`(ofu#-BQ+OPx*
zg@hI;9)^LDV;CiUjbehAIP!>4iuX-!*mg-KDl$^c3#}wc0OOkntTUG(dE}c2SU9*q
zjg;nuOS*@9$emI1^pSe!a-R}ddk7=sYN+xyIF>MEnlXttiLjKvDT~_wqw>@Wm<5Mz
zgRXu6dy^&MJ7Z)Mx>*h}a613uK{$RuFJ%gBj0yZiBG`=m&G@z9f7aiD%^`U>f-qMb
zXWmw9cJaeD=dlDHWvPv3L=^x1tW8ue#O95=2_bpIn{SrnFrbz6cZ(1SwOOj7%H+Bi
zYvAyk^OA)B9SrR76+B68ws=1?*l?F6mifQMvn;W_^uf`@4RBuT|JnE7o!F#Kxfq!L
zu#wdqr1_kS$$B3bSHaTw-ZXUi|D0i<M5F)>%!;Z3!Do#@&FLK5<38M!htnkaG~3hh
z%v8hw8h60yRC<yWEYlF1H5M~LBX4*OFbOEDtD75Rf83(i5t7#mDk`%;U3B{YNl18U
z5%9YMW=HTYh2P6HA{<=mO@ajZdZ*_=e~~SQD@z<DnaM2(Y4}G;{EI-Kw80ESlRRzf
zIGKyaEDb-{3|@%DE~hu-%%vNXVBz#2t(uDyvS6BisT62G`7z%H`}#q}oPl65yyGN^
zNm<#j{jm|AY3ZRdns~Z@C{7=VkQYq4wA55J4GoQpEskvNW)3zsgLhD*J1@^eu1B*9
zN>Y6fj3A%`*0_E(?BjNN0dtDW<sdjG$Iin8{QZ$9*bx(rpt<b%bhk8~^&2qhtP&MR
z(64>CDkb`1`XLg?bZiE#R?C^t0(l3AgG7o-u;5XxF3<C5Tk>csyokx4<uL--imK}B
z&>y;|<&b>0{xPlN?-W=<s+hNNc$NBzsx1iuCIwX2G$9ubH>Pfne0Xc0*qMfmjFw7s
zs|IVkx#+qWD-|RhR<I2q5f-ED|9-zP<Xpgxt?cbNo%i}bI8%cB7a{vE5R)#Qb4#WM
zjsQ@Es>3$idU`*hk?`?&TPHxmCqa&mF6tRNw%%n56dKE!!4hG_K=)t#tF4Y<sFHcz
zPv3{p)4X?~kk8f%#l=$@4<gXP*^1nfOEUz2Df#n`O=Di_?y-xq%NL2?q_#tYTS3{3
z^JhH|(PDb&$wk^9e5>8=WMDGCr6<j-Hy_hTbFCSR6)<f12_JBESXYK)W=;87JD-{7
zQsNGe!SHvvI!1yRqn?Yi12xF3_;y+w<gM2mAA^eM_i&9VhL>(<kaQ2=D2a+G6zMcd
z>b}vuwno3}W_Og+*?9(w0asgF`vM)14$tQY0_u;ftTU+$x<F6>#5X#g=i_2C9_$5H
zp<zyBcz7_s&&^Sc2-@+E%8!BKoQevCR7GC_*CTvJusl|~rN+77P=uvK7O%9n7P<wj
zYnm#U2P;qIa1dZQm?y8UuEcF5{L>gu!Qo>NFKg}AGMlZ{#nVAjkKg0mWin6i=T8Cf
z{@E`7IDnF%t1v!TBC-F&7N~9%v#A1AFh-K84dLBgT)^VIQ6MN?f1e3+w%|R*F1Ofg
zR;WZ2olz4LA57+N1MW6GJzb^MOll`3=f5SQzHlXBVq!vmRxBKrx=J2Z^$Dz`n4my|
zrLP3>332|u0AU!<t^PK!q@=REd~@2v1o+Xg&cvW=G*xJBWmSQMWa?q01d)*{(4}Z$
zu?Q5{_07#i9q^yeg}?J=2FpJ!*3XoW5kc}h@|FY20kTHF!JGgK)PPs`0vufZZw^Bd
zU?pfnGeaaZG;+@5!ot8D>#vAy&EO1+lmB@Exm=D=q#XMEh2SFQg;4Z3f3KpF`^(}y
zljxgKXiHt#CFw_DMkiQ>892)3{duL+;VXXCLfI&x8wS0b9FaJ{_8JxD(&|KUt~2UE
zJ=sB5)6*gm|0JGUe3U>u-J8ag^9_wY5bmtb@Hww!0|^<q%W3y(O^qB_9V;Uft$4iF
z@dzyB+cG*~{N5&*-9Ctjn*%^W5OHT;j%#};q?hfMo8VQgsDs^3wKgoe{P=(%kB<Bm
zOYrFH<HO@>HS@)mb@r2dHupp=jP3dPrn1UzzNn({%k8OmuZxvMnX~OHg_|y5`WJNE
z#T%$>0Y5GpBQ#9h=I1wf_28AIwq+nI97)lSmZtLa^Bq3MKtMu*<qU|KMY36D!;!{A
zI-b0sS~hSfK?wVHn2lR0Xo8fn0!G;km9sb?bp!em2Wr)sI$vE*@2}LI4nYfi7Q74y
z36GD5zo}_4C^gQ106AFe`h%l6)#jYFKe0x_n+KP!!m**1ld~RQi~<GnJp3Na39)-H
zw-W-|1{y0JkCQ*Lp*4;^mVkv@bX;7m?!Or4DpZ3vP=_=qZ!FM!x5_8}-FX^`8L^ln
z7r^tRJb=3jY^aMj+s_~?o$C=aX-q$p!<7S;<ZIj5M#bQ=!xUhg5<8J`XqNCf{>7@{
zMw9Xol=-f<nlAS?TZMV5AfFp^9{WbUxuqNTF23g3kglH1i}uo7SbtU3baj-+^Q4qU
z4EkVX0r;$d)H<IKU%@YDaAe_Z0akQJJwPN-phIzV?~UuWKK4R#E;6>>mjPoHSj<1$
zoVyeYzsAPy5)&KZ1$0G7W&`Q#_jvpEwE}xs95DVhJPe$k&NpYS54YLaAc7D~sAjc*
z7%}7)*6lK%kgE&m?lKU(0+Dd46dZf|+<_?d!jf1k_veRZG{m4NwQ|zMYeTN(CQEa`
z|6E;~80g^uPsE0m^Jqk=M2UB}yN3jTmQE3qknoxm8394aW>NMi)?hGzqQdpKq!rr+
zohmlCAT<h3JU{RH+GR8Js5`<@iFnMUp`iO@N!r6hB8}6Ymr|b4)}ky<*LeF$I<+d)
z6Anvv$-@8XTu|c7@AibE2vS}<@}sZd4)N|VTsmB>PFsLE+<o$Fq2yjfX}SQM{}!OZ
z15qpIDjj~$v03;e^@IX?NZRk^i|E0&aA>0jt!60?ZZk7Vl$wHM%<o12ortMAEalO|
zu`5-AH1o}u_C)SXW_I24dWQAW^~?&s`3b!^La)g3lbVTPbaU&w9c~}On46<RD<-p&
ziKm0Ve8DQxl8{KZoR+rkWv2eRwzdvNxFGYn?xO7-IZ-$SrV(dL7795SiHhSPvSN&c
zi`-yAp^h%o`C46_!|bK6@AC!rJ{Fx?@S`wKMkX$}0V-!<h{wOSx1C>}Fc%HIZjL@X
zQ0H;|3jgwjIe=-F_=ObbXbU9oV7J*g<GMUy)E8qlDkP6$<NX$wfI59+E&n}nfB;{L
zN`@Q)N3P5D_~%4!XI(p~As03an!l~hR^uC*u&*0uK(v7TnS*V25vi2AI(ClJWq0>S
z<cT*zvFrRY+Vrj%v?dg8;=z``L22gYljO^^dF*#}Z62sHn2yba-B!6n7pDtqcFhNz
z_amIpGA5HA{bpOnb^l+UMmmw`otnKNBE8t)e332iVP7BaS%Rvyu7I*C8ggYah`|QW
zAEtL=UWFO<=RNVsmVM>rNmQ<ZC3!g8YxJ<Tws*AGPA|YV`u!U@`DzE<)xyfk%5uOS
zpbHR7Nb)MqfL`1j&R`pF`^4ZaNUMaMSG0N9y*!BlQ$|r;J!lC+)dw?WJw!`XlsyBY
z4`FvlrPF@huI`hkr)MKV($)!!<ak8VEJ07BWD*nzu!-`2=5_^n(p}h@HtU4|2JPGK
zYZFsb65P(#c;QGB<)J@O(a~G)qYS`hngaeKSn7|vM{`gHJo1Q^k`hXy^xx9K0_&=(
z&wN~nBPcWp5=Kd$Y}fs}Id|uq&nsVSp^_d`8QRsWA2>HZ%lzMqv_c=e@l)JwN;lmx
z`Ra%#%S#4FqqQSWfyWapt^R=Re{iUdML6ykT1V7-z~Hve_x~_=7G6PaTeMf{?nb($
zOG=TDP>@DY5Ri~mx<k4<q!f_u5D*YSQW~U@4v{YDd<)M#_rCWZyfN+=cX;%8KEBv{
z?YZXst#$4A9$#q@R?VK%_Ha>n-}B~dsmCuyOQyw4dX(uiuZqOH&F!P<{JZ1IOEn6~
zkAg!&mK{bxKM^ojFO@*ZNXE#HUct-;v4!@jvbSbJMAt(NQgni!2%31U=LhRYbPxT|
z>}*Ote^$y@-Ltb5^E{`#T<AiaIwiSX{5D^i0I6Dynp$t`iMdsK)>aUj?<gHQNp&;w
z84m9sQ2dLZU3>@(=|8*GLegkVieD>^sThQAp6W#7$9VW1XFG<`AMXRKp$2pWd}0g?
z!=MEob;M`BY}*@O60@Pb?;E;TO8eu@tSfY1gugo(Qy?{X9`FnHMPksx`$z7&u+gYQ
z*+1Nrfhj1KTx<6Z+LzS|Nihq-NvHq3b#L~VIsDGHFor@*QV-Y1YkaSElWbB)v^pFw
zlIPFcMMpgdEb3wewEAQ=3}(H^EE&p+=50rR%^vHnNTpWo(a{Il4^)~V3=2Whc=!CI
z@a@}g(DH27t+r&nZ~7<#swNfri=BCbwWfh^5RyHPcUaHil%^8>@Ip(3Yhgmq5hp?1
z>%RIsaj!!^P9G7UUuy#y1ofHIpfn}0Yx_FuXR+zlEy0P}3o3t*3f+&hoa@+?@jwCz
zFhDm@)`JLlO>{IZ+X}lKi+aZb>{8U?o-!N&E}1RFPE00WT+6GWkCvati+GaOaDxul
zz*<DGmdCFww`t(?;tTg(9tD{iuC2)W0_{(0P|jPYIOBp!jwgF#;TbaWDOlPAxxX3y
z{Bl%Q<v<Jg6?TUQd2^DYPE^NxZ3MZCqdSQOn#C+XyYyW^93fvqxs@tx7pycJ(~~K`
z7M#oEWjjj%>4}4$q|inPCEvXSxnXtnV*a0%wDyCz8LfNnTh7O3G~B6p(#zfj=8c}y
z&?*l_cT!g7Udx0%*48FJ#dHq(V(G4R&}2V19_$pRq<q9@hSRB-;t0eM459^OEOR?U
z?AXy&(5Yt13{s#eIP>)jCh36TScxy63A^<4&(_u&wOm1+DEqA`lgVli43ZK*3O2?c
zv|2$KkKZ{$FICifF0r71jh*9K@|=C<lb-=P4txjCs@C+z2cW!!sLj1CJ#Z8}evC0C
z`Dd9kuZ!7Lwq_j)A<BDe=)c~orI);aU)Uvsor!yEW6}vR<W|fL?fq4?^9nxjSq}dA
z;j%M_W;-}h+x1>_H(UvK^Wx0udzDF_j^AU#PppHV-+UgPZAeP$1cShC5VV_bFvfDF
z;ZenIP;wC6(cIZNo?COJa={Q_`S~lxm0$ke?(h;$w}TR;fik~lkrv9`7+^bibO=v$
ze7gMSz)>R0`lFL}5V4`5xyJ#cid4b~?TE=QlQVIb?fvJ^rT+fH-H0@QoShm7rJB2L
z7QUM*FfB7Qh32zq2M)88gw&=sWeG7O?tANn-k=~k9pN@@9s@3)px$Jp2>_ws>vrMX
zz2Q}UX8h5~PmlD&V|fnbATf!ECUgcju8uoP;*n%LJxQMk7j8B`$Hc|M%P1<MyIaSu
z=tM|G)%3fL5PDo(F+U142*#Usj`5j<@?~R(36vBs%XE%fcQ*hmq%W#ifOrx8pLd1G
zUmI0GLtEM;T%I;))^yp=rWCDkLq2*%J<vU4(=SgB&uJu^0keG!MG21uH$j6T``6N7
z+RE*Wgf#U4>-3xWB|$gV?>w=$$q&o~o!uu3%#6`k=@883y|E?t1goq0m64*HY9v!W
zg~ER>BBmSbOZ;M_*gwTtF-wkZcz;<qn%m`jJZTf(yWw?ic&vjJ#*1)}fOH(Ih)CUo
zo1Y|nT`4GDotE)<czhlHjD#EV>)*csi6y<8CH8RS<f!iF>ALn0g5Zut%p%%VJ^E*~
z(=)uK(C54^^dX##O32sE!Y;VkC3`1!BA~-aJx;5;;>Wdh@48I9RzkQXOtV_rM{*_n
zq?dWCJ;U<vJCOZH2SIIv-$nhI5V@uz-;7FU_ifVODXh`*Uy&jRGqa40LPhqeiVB&g
z=%9j<)dZt}JS9Eq!;GTV_Tli?+oZ)&BTWDKFZs-|n5dFHNhJ)HUZ8HrzNgx_`(mUe
zaP%Y1U}O&49h2q)l5lT>0l5?#fxHJ2a(~@qe@`ov578wL9~1a!u}<}((&<{C<g!0p
zB~h@6`d59~6GDHnl=5_f_Lj@N5AuxHOKH<DJrg;Je||(Cn#5)#TG^t8SkQq`S0DW6
zpLU1=YAHn7>cijr0RNC~@?)Yg^S@UM0ul=J4FB_+L1O6tAOGS}4r+5yP*6=xjWkYM
zd%KM6_p%;_q{3^d;Gh4|6)0p}XUhPf@#4h`a5hCmL=-=(8Xg>62z2-G08jKOB>TZ3
zVqpOhJBptZM85-p^`Kj(-vpN1E*Ur*e}&^pB*oqK!9msi{Xc)wgzXY6%jz5~K3h)k
zCKWci{DD93wKNFkL9^QKzkaR1@1Fo6D=H`<0H&CLpw(To!SS&%98n0oN(Ev!(Rz7Z
zX%vov`}eNZPjxjl*vBWYF3+~Vc_Ua_S!w^w*DPiuyzTV6|4r)o2;_O;lpc8l2v-op
z5q4T%UFGpnru^{X#lP=k1v&<XT@ETC6DqjU{V_;VQz=Cq)>=Ji&gT$VO^u8YTXdC`
z=URga6ciP0K$PYUCFW>w-c>zC1aUs;>sODp(mufHHMZ;35}--avJ^b{j|ETqT4_86
z3Qi)a{OVx#!!&Sn=`U_Um?tGM(OLi%bXQADOE3(z4<eNuz&gFfsacc=Zm_+l|9hYC
zum29fdYt<UbLMA)B{%j!qGMp7Y-h*XCdy#V`zs!W6Yyd%letg+uP2A5l1RhPM^M*u
za(t}yoMidFjg1X{urxSQ<>fo4rly95)C9#O$w^moK{$d(Fr262`^CUgVRtQz(|!Bl
zzgob*@3@cL+vbG#+;{J)J$>r7Gv{5i)B@?9?_p%Wx2bP9Wk~wN+W?ipHyk7s6xe3T
zKd|e91IFS)Qd?WN?f<<jf86FGuvi1r0S;$&zz>5P2-FNj*#>vXyL}KA1Ax?<p&Sk%
zzYGixLJv(7d~>0X>38?Pef#!3lG^TbaB#l=Ly0YT!?3ooyZrJ^yKGUy!e8ne8X7)+
z+`Ux#SFHH^0z<;9`-za~Sd<(CSSH}id3VDBVy&+yDv-ppii_`=4m?1u4kh9G-YQMP
zsZ-;1<ynD&>3Mk$?kTG&-OsPBFhY;Bk-(@&8=zfjdeaF&S2z?-V*sF7lwV%^?`I+{
z83)bO#E)n=kpsiSa`rnfEG^lMQj(L&yZK{kMI<^FAaU6JFZs`f?BO%ihn1E5u_9UQ
z{>Dt5I`98`n{hjJto{McU4I2e&;M)Gge6(!|Fd7HlS$wvDd_0H!cB+3!pd4MjzwhT
z(}AiUf<|}SNU`bKCz|AcJRcm}yrL$JYv$*LYAhb8t(TkSqkv21{fI{*%a@%~2vl-9
zwV<<y_Vx<U3xH=WO&1&<p8W<_A`9RBEG|A?1BB?|VQ4T8533V+((qBRbs$FL<q;A{
zi*%g&NL^b4!j3na0-4#_DXFOx6%}=LZ^xMv5&ha2cojfni^w9KSDkT4OhyKD!62nf
zIR4%bf7Ga-gm!(kLjPQ?N0UlONXSdXXy$)&(*9m<J0s9u2#yH;F*fv&%mf|>>F{qK
zAE{w=je`S+U5B3GpA6T31?E4O0>9%E)$xTz2Y0U@C)p1Co&pdHz}g2v9G#JdTZorV
zQcq7wO6p#$d8~RA{LC4u3b?B@Y8coYqTuY6I6p^3L|k248~7ba!;28d9>*2O8z*4n
ziHanNltjZz!PbTtjm=v%$Kr`Of3QAA;5rJQES~h1|GOTb#eMsxPr45>$MrKo;L>BU
z06Irr0lFT~LxDI|38tW;f9`kB9U*jLKM2gEihD_X3<NKrL`76b@!TH*2pSU-0xw7+
zjoPQfQn?HGlFAF1SO@X(@kCnj*N;paA^xS097>Y9HQ|&op}F;7Rxp?j7m#mvWDz$5
zkc!z{Oabe~3vuwGZh!+&HWra!B2q6l@gaC;l<!|(7)}@YBg(G#A6@&D;gZ+`u3rHJ
ze-g?BGDB30;k*w6u_-7+8E6;h=U~(~eD(B}*By0hTl=EpwRlnbAWH<UaMMUkj8Kp*
zjp1n!vDmOU4IZ@eo~m45o)_ZZJ4C2uEu_t#-{XUX!K|44O~4@e2`~jffP15>s|2o@
z%Vz&SAlE^9^4kS;V+7M#;6NbHP|lw%AYsIK{a3Phgj8_+Ul-U$Oqn3>vjg%qz!usL
zf%+Eo4M>B1X^k`<x-y{h0(VL4tE&J&IYWrvM^FmaL#Hq=&(zZ%a{RE0RhP5Q<SI47
z{$tx;WpP#h=?<K=kGJ+$`3f{b?>>V=mTPZv6&wtC`0nfgTZ$*Z2dOyu?i=XHtL@go
zigzuCWdI{f_p58XTR>nS`09VoGysU{2hbcnuD04xB~Ot;!oompHiG-Y!Q$lJAdp~?
zM?=s`{r9mWApQLjxS5y&M2``LuG22Jl@gf%{09LG$k&UN%%T%=2MWPw_SS8t9@P2%
z{AX2N<K>1l5+DTp-rU5xii*PJDxFp3;O6d_oDBT(wZ1{>ri`?oR3<dGLwVSrRnpMV
z+(6#}&JC&~Y*GMhBxW<Ja^C$2L4eO@LlH-6?|F@XUhj2bWY<<Lplt20kEP+cP}odQ
zCXxmR1c<;oVj)p0wTeKtDkuf-{3XrbkCP>9E{Mf*0&Q+??iz%bNcVO;G(7y`Y&#zI
zVNQ*%1~3}~HBduM4FnIrN?*5mNdr|il6NvdrF7h$;WHoZSfYpYOb-Mb=b}P0z%K`3
z3UK!ThV(^^waT@lxJVo83J`d}0l56rUk9eUdgtAG2$?_#Pg7MD4wwbW<QEIL3$iT4
zrHubx=VBW-eQdD`yvpK8e?N^7Hlb7nJU?i&ugrW!F{}s<ovgJBgtPHudho(P@Qm!f
zyU+%>VJY7W*$jfm0n*k8vHJG*_ALQeF5FN=f!l#v%sKI;9}%1S9Cj@!Ix+hVHyX-;
zG=T917_JN$oDTp_5*l>@nQFOD=w%}cbZXi5U%^8HE97_7g)xRPHa2a3x_30FcyXfl
z3qBZ=!fLrIn|{64Jn%*eG>)OMx3PhPPhsjSxM|eTP8#$F@oK|%oS5qc@2kG4YqC;6
z0I%7RHcuF^@u1_@Z1>Cdk+$%Q9HuaDg!qozGBPq#JnqNb1Ox;^AoXcyNS*-yi1NNW
zqD=Qqgi|{#`6XlN$6r4t_|T%#9qicV=AEFCU9Xh3e^*Ln^`?0vU3yq=(I3-;u+FN|
z><Mwbk2vh!3O^@@nwoBs0ZH%P7BwN^($;02y9-LqpI_a9jkw|G15g?egzIo32g$R1
z-Jbml1r)$~h8jH1gzZfJU>$Zw)63F?MMg&E=TCsC7L3wU@Ge89b)hb-;}1)LO8`yK
zeg@0rEqc@i9Et2inn8)`YFv0JtHB*?t1AQU2s2aDZ-YLt>i~uDRZk*Xp)Npo05J*)
ztSMMi61enUXlvI(fdDv1Dbl=Fc#6CR^?DRc_UIgujex45<TdI5iWRgLV@#JI!y<+Z
zusxP<@aJydcdvOpEm9_Xxbg#5BDA1f8^d?-eFLCs1#mW)ieMTr1XDanhKp-kTU*?;
zYiom&cmFLjmek?kA^2v7oqIq$!%HOLy^!NZ2hf#(I)+C@g*~a8{U{#LY8dwdq`-qj
z!E3bA5$)w45HLRZZmP;c^pba#rO9k4=Q@t*2bj^@@X~yNcT$@EH%}P3067l?>EBG(
zO^l8bUm_sygCwp~Wqts$D2PwhLEON4?m;5KT}v&Hd!iulNRKHgxv&?9>q2QB!w@8n
zF+q$<mn(IBOT9nNxMV|Zo+E^b8OEfTEM&9bCmjinUF*wpB%oO>{cRn4+)+-yq4!-f
z0XDDnbeb7O^#sVYP^vyva-ma3{Bw8+*qFSn2CpMt!9K3Ly76FElq4t5aq*#~`!c_|
zX<=Z{$9p4f=~|iQ=4S9!!9$F`FLv)MCZ;`f>Y!v8yz3Z*&MR@Q{m<^~+=Qo6<{wom
z5y_EsgMD-EesNI|{yoItL}e^qgFVt;!+8=^QcXTc1oza_AJ8?j2ET~-w<x3go}n*+
zI!RM)R2T4f&;9p-;7+_%Ad`|Si2U!LJd0(8as-vGxc<n1+G8S;hM2I4p`1M>{bSF*
zKvL5EPksF%$$zuLG(kGZ*C)eE?rpD%=Tz+6sm4+?iWe<@z0;v&rsV}~S}KPB6oSzf
z*9oiEw57G@hf}e?P-(RL#a?A|XemxszL(?6AdnXHMmI$6oKpyZwO{GFM%?`_bmrr7
z-1?<zM7#4=k+o-nUSNKHnWbc<-$_7)Qp3iG6ETx+Cd!_GScm{y{9f%%1Iz7u61xp2
z8H9MfK?)0&UNX3yQvNEmrUm5-CX%6AxgkBuDR77Xb166D`BbnHs*E&3(Gd<SD57$f
zPn(z36Q^DKKX?*}MO!l5CljSD!adu%)9Yl6Um*kGG{y$*4}CK9v38sTgU48{&@N9I
zPIRyjq4zal+uhv-^B|xb^(T<wWCt)=;56o${-A?z)~NB61Uipz!4Y>vSp2%heB4M@
zfCVEaP?|2El7Z@T6ieRQlA1jJ--P)RKF2NRoMBnWMCf}2wITJ{oHd<)P7hKbf}Fsy
zu3TdseSV?{h*n1cfbE*T<D7;a6i%>RgL2Bs1F$2&xuuKuTYGp4>`<asKkaJ_U%tep
zRZZEg#1kgO_XDuQ&DSoiqWTo<uR3kf<;*Aa@`>I^5WkKXw||d^xce%jIdOvKO>|2Z
zTI@9kr^<X}qS9;#@Oc{>8)4z$uo(Sp@c2FrLS~rF={^~A?xV$aMSZe#wcH4gvqQkj
z2*r|f;~7lX9gsyoy)K@mHUG>odp=RIa>&Rv?Yo60Q;}pJk#ux_PZpth{Cp^kCP*Bc
zsGVKEp)jgnS~5Kr1&bV?kWdRwW3USYk`&-{n@gRs)~2mN(U5=NP%<<&hO3$dDG%xd
zcu|9jerLX^&ouJhm{H@WmE(@-#e3sNuf?#%s`8uP=Xg=spog5n2J=KgrrFQgxjxWe
zS#MT<tmL+P)Q6A|Sa`4O?CmizFhuQ^i$FPt0_PS=Ao}59HfWhlCMHHkOXnvTkS^Z)
zefN5e-&?x!55(Ze2TsN{NSG4*6`!iAfU}*r;qZ=A7rB3R=+(|N6elk~YZMB)k4;|)
zI70mwC&vH?IG;0EA#LHwQKT#=kZP=;q(KRmn<z+k^v@5nEUR3f32!<9UM$B9DhhRX
z;Txzpy(rnjw2}9c>?I|E2Nu}~JRo!uPWE-Lwc%i3Sqhj9O7BDX{s_+H8Ti*GSmDn=
zz1|YHo=XQfM_`~V;FEPUG#ntg3^y0ki;s_QcMA6CgZ+J@#ZvYBnB3glLW_EvbNE5W
zA>04b+8WidRQF4OuILwh<=pG`@!1*5%IYexA9TW$1uwG(WtQ$=f1}YOh!0yu_twi&
zgAy%wWrXsGzV5;i<J=~X+k~v+6}}(ZybmBjcx^9X3xS}it83lIe%P948oka=4*-Pl
z-QZ|R-e5FoWn~3m>HBLV>rK9H&#NsPJTKT7D0@71s735i-EnhZr-H{(^t80Z@*Ln2
z-rC?Mdj~qoIFvnXm(5hpXNMe2M1IHX3xjfpaS)(}GP&8nC=LfNf?R;tOdI+2zgoaa
zC0;E)d<W4U!NI{`_G|+H-Ht_{E#6D<l8sL@`pLMl9Fw%+PlHW^`6OGvfBy|z+vVk@
z?Ikq+#Isu4RU_LKV5!n<{*%O?L0Psj|Hd3HfBM?jlMoZ53OV^CZk|<(b138}_)PWz
zPmFNuR>_O6)xZEg*O8W%o_or8GOqu)NUxEK>O1g^zt-1-#ewf-tF`pC7Qlqsyl&l%
z)?Asx!RLIqae~Hb&Ap&>9S^ObKmGxd!u$Mum$s1j+qdr|ClRd-W<Pf%4S2$Upb?C!
z4ODT64DrCr1=hZ}11CE>Uva@V+v*c#boBIkUv0k!5Yqv27~UqdUyhQgscduGe}1!e
zQveuXt0PUEI`-M0<E_gJl#R{DBzH{UUcv<km*G|n8w-rN!H3}oqBp#-jE~~pQiw~N
z2HIL%M{N=&H&n7l0b3=W#Q;EX@qp4c^hNlxV<bI#ox-fRohI%D*zZ$NTIL+>?V-jt
z)zTUVd@r1pk_LW0ShC;fNh)SlqiL_}X^$f_Wh7}=kJP4M_RO>PG|5RjroD}|tlt)r
z@=JYai<(wU%zddNnjHZM4WmDPpgj+1ze(rIlEt08hJmC^9LHL_pxNV>#H`s>r+#_w
zmBwjFVLp@B>Mi834%gJw)EyFDg%ZZkcE3xAiTzb|T$-mZ9AHJexInnPbZhfPIf9*<
zuu40G-+UNX@GICI9uNTX0W6345a|c#^W4S56n?Xw3KR*6CRpJ}d5yH7{z!izCFNV*
z<gM$xfO{*8myKlvvVb|L`oV2#-M+<duBCy=a;I(RgEnYCdv+i4g+B#8!{P>vY&hrl
zwzMoB?=G?{`EVswS8o9;dyeWKa+2|9ATN|rKK_DU<V&DN^XYkc@z;qR*G~Uc-S@>S
ziN_iKRuk#Z_C9nyvNXNzXu|M(+TUuc?Mb+P)h225BT#~B-pqO?JWp><6vKLij#Spc
zg@o!~T}VAS@ox2UP0ZA+wfew7v8yXB=*Go+?ZrVKinS7pUkoWG_}O|`^L1VqPK>o}
zo8YBl1s9%V4RN&CSXS2kdQiFmTMUl6nM_$F6@qISih6fvhr8C>3k}$+ta0)~IpJqV
z+fOTu<Xh<{seoS*(ujwL7yQBE<x8KOCBS%3e|77hn9!Dz$~0&}j*gCorST;iGH#a)
z>FwL`@$ECTQUMEsP{!SN+M+}Wv>nU-_Me+eDzB`p3}v-~VsCFx&uvOJoi7PL{AD4~
zGm<XR0uu?!#jXpI4o96@TO_X^1=lq2Ej7@7A#}v0#XZ~HEQuLF+=@oPq*<a<1#Es!
zT_F8e>x%hpO9$g0j)M-&?E0}5@BW|PTya=Cu*x*~1`@KH3cyZEwbAU40U+{b+RB#z
zNZ*GeVTBn6Dr(~0H-J3}@99AY*aYMve^p?a9h*@JnA>MR(oj(7(I0qAai1L_eJ~g+
zZ65fYAiSM7UZD*cWOl~l$=|TJQQ-7$O1pSrui7VUAm`S)R&=jOXL5<r^xg6lDoe-5
z8804Z$>l!r*@OJ0B=53^dNT}Em?}4X^|)ISI53G~Ctlk#E;~}rS1Rc>lYJ!&=s8-3
zQWJhRK9#e+03t2y$|?!Qi}nr<Rx|bfRSqh53Y%H(!&5LO^F=pgt36UVeolM&Jth9r
z%W|7$&G|8-*z<v}ID5<i(iO{v;~^M6U(#<<=%i?qR#XnwVA`>#R;#f+!x&S2DIGIc
z^}RdtuJ}Q&-0!!-CRSD+P#niuy!!nN_D|?}M(kl^>V>=)yiG}&$j!LA3QKpX_NQu>
zKM55rcm}&5!-9i}jol2AjEc^6p`nkpv`CA5%7}RlD%4)Vx6#3&rZ$95#KwS$gB5%y
zz|Rj1LH8c6XG@OPIZQ%D<hU^o&rx`*#mk_E;)9Ui4c5ckZA$B47XxG5>E189jt!ui
z?wqI(VHur|m8Sif+Y2jzio-Gh^q@;PF>Nh%s(}+*MHRnc7;=Q~uzd9%z&wVTnHiyi
z%uGA=uCY=*7Y?knR8YJ54E9yxoY8N!@X>tJ6Z{4zHs@LOl6C7g=qt!E;9~(Zw#ML^
z^a+P7eN{3zot^;_f)&DXZ%@>_V7~%KJ?B?VhP8_A*~YQK!Dgibdy!PE*RNm0rZHa}
zxq9Q^iM#LbJ|fCjeXaeOU!83NOd8sAF97%_2Emo2{gzH!UaSpmWufODNh9S1{PPne
zjW|_yM!ntT?jjql1UU?9XJ9*RS+5|kW`EW^sw*${?Ccg4<+|>S!xr;e*2%X$TAMw;
z>eMK&?@2m+c{e+ef#Rb>_=L4%`LoGTL^-pbzwWE&g4MJXbtxVPB&|jY>}NY_xJh@o
z(1Y1cnq4&r%zL7LY%K9r9|Ty_>Kk^sY8poPYw073TBqH1>9C#B$_B~H^LS?$STRv9
zERTW%PG+xiir}n92~oGmY)T<(_@+Wxj9D~aaucc!kJp^F2FJ1#l+lt>P|)`PV+{Vq
zz?h(z=Bxlz^?UOy&nj6S-MRZ35(MRTzn`#wRW?vyeB*^`Q6&|B+m&TQlf7r=92fna
znt|g%_?+*N7{4kDdznnNlTkNUS@glgV!!33S@qXaWgjtw@l;L8j`;WfgZ!82a{-D}
z*+qWBXB*!~Ys*p6@M|lTxW62HP_#C<C&<j3i_IRzefgA=j-AT+H^SNP5L^>2-BI~x
z2loWSZo7Z0p2hc(pr#}BB;#x}Sud^FVM)k;fDFY;pz%}X8nAr>!f}0b)7J-$+TC&Y
zVF1J9OKCg1KY;3B*R8{xl`!R#lMX7^{$v8@T;{e=Vy@RPW}zAC#`Fo2*#+1qErIto
za>vP&A9Mx4!h)}|<@!iW%&wfT%2+!Dvm*Fk^-&6u^P9eHJZ2FU9ed0F>#ID$*M%^$
zA?SkmhP1-#3O<4!-Xs{ma(OT&r-H?V7>IkL351R$1+k7;a)E-DAhvM3`<@HOSm16o
zo2o(MCVlptq`jZ8`5QqbXfr2(*MSirYvNZ$tZ>NvxeBc@8-V;EAY1^IWq)%LMT0)?
z2xdrtg^KXCwC%-dxN7zWP=&uy>%g)Em8SJlM>(ikP&n8F2*bGoZP7p&s{$8ay4tYW
z5AC>CwzpI&Fro}C9St{Lyta=Ph<E<q3N?#=PJS-Ecdrpz!6EYEh1?irmDa!eV9Pji
zzdW~T_S-$ax%nfLd3bKF$rtnqKhvvI3&LiFWWq+OEkFlnAn)>BtPY_#9le8S2{%7~
zo%8M>NQ^dwUAX4B#J;fc0`=q<cm`0-3{-YDC-=Ef0?6klKIN+D5#C8hm#Ah`-Ip*X
zaZpQWG1Cf}zW7$}oA~A3+~ww*ewmS1v$w{V*L~2+1A4cmGAYV5u{XLb9FJ+&pGzr+
zq1En$kePj2?e)Luryx=~x5(9_Bw~~aLCHeK&@hAbX}{^(Vr}8aO&K{od+WR-dYM=P
z>i)V!t9NDf9)tg4%HwEU^o_xT#X;;M<@?pU$u!s*m}igt-v(1XAAC{6xxcx2Bq@^e
z&QLf4T4x~TW<*o~sY+UpdswB0+)rOB1Hhz2=Hb9hy)A;efHm?Rl%_vXR8((%*oWsS
ztGgX;APInYBhC`GL&<Nd4DMf0UR=8SaulEMIE|NOu!KRkQpN+7C<j*La?A(*Jn`wh
z3zy8A4N(I>$RCh3oHJQQ@Dewpr1=YnRE_vQ$&gw@RpfZBT5MWG?=1P?gDca<2Tx9Z
zAMSj-HzpX%L=1Vdl^yBzgz}b{WeMby_V3A7QKw~pDQlS6J;U(dYE^UG^5600F7%I*
z{5-bd_7?XB9YMCjLvqYEyCdD|tA+tD2X}MkECpsXy|<P~nD%9AyE9>ef^9VjSj6-)
zS?2oIKR!O(aggDGaUB;>QE?k}7Bm6VEWqD?=LzDsfdSkvo}S_-oL!}#KaYiy^f!7P
zQS!VzhDy&yeS;Coybkawryqk;hIQTnPS26w#?#Gf`T^=w4l@HpczU22I|p1l^M*;_
zT{7T^OE4=@De+j5Ex`z!foISZRk}}li$-hjPlV)`Yta=xjp+stl;)n!PWh)#nc3J1
zbiZI*rwZ8+jt+xIQ1aL5$qD%9K09r{FtrE`kB7LuOe(g=@#(?(r&qclf(gFr(*b7A
zdC3A7n`96o$6TH(q;tA|l;0wsn`t2Ol=SfMfNP%2RoaG9d}F-a4*03T?Jc(CU~34n
zM7d83rdur-vjK+zgZ)Xiw&7uWuq6U^(|Az()l5BJ0S<g(K#ry%SPt0oSZHM(KZPa$
z%a;YK5QQXO?aF($6Tzq|Ucao;j?MUZcq9(u`rovFfk09XjhCl^*&$59K*pgG^18gG
z^VwpIlbk$R!JOI81A!wG)L{^K^~u_`LyGzbGFp_6;twQ@-&u^Q%LF~*DD|-(LM)B`
z_I^M$nruAz@>Qy;b`w?4CG($w|G4+xKKs<il{j|867S+YlEZi7=Wfi0rzmH$cuji&
z&z5Iy?&g~2e=;#f>b}A5FgMR!o$W-&lbKU<UawzN_%!AM6K{V$;<;oS;eJuq%vqUy
zpnsy$eIjJpgS@VGN;%qmwnvs7CC>CR;;(XYJCQA4%?y$ux=U%tRf5RK##UsABj<aM
zfT?>`C+W6Vvn_F+29$GTRm7DknAG<r)t%@_I8i+iVO~K?ual;x=AEY{0R3X>!ZW9;
zFY5F*c|)jC-+9j!)vgI_@4ac_PS*kfqL?zbfPjDV%KR=>ugvi(AW=~Tp{K!}6XQm$
zbrIv^K~c(oxmClVg=&B!OA#0mpv=~G`LV0Za^CE)=Z|=9=KS(L-)Lpn&QZodtQ6@!
zM#_x4nH}};VuQD2@C$pH%Q{o9T`Ysi*A+MWHa?2F9b6n`*lI#9xJxBt73CYMa244d
zl?OHap17yOxFtl)@ujGvZ&C(6A~t9G2P6u-^H)tH3yMrJep+8&ucM;_?kwi@;1~gz
z8kRt;3_+8occ10(){Sn>A@mYHTFWizM5Pu-M@k29YbVO$P23uVq(OOq@1m-Tid29Q
z1I=3N*)st4R%(CBF-3+!EF*29B>eotuuFuu3svfjm2hB2$R@y!u>lRJ^Zi6pG<P6e
z(s<OKVqt}+r6NZ|$D(=UfPuHxMDaJsy5Qn}xxdnA4fF=h`i06jvzL$~NxzKc{_xkI
z(h;$;zOI-mWN^G=U>Ypuc6dJD5~xxRV1m2nKf;{0Ka?#Lmz2EjjA3k5gRu>$227$>
zkr>whY5}I)0&#2ylOe5{Ag&jU6Ch*Tgg>ivZsKh6L#{31*0)u9ZD;L7Qb2lK^-veL
zvDs9ePf$=s>NeXoN_63+s`oe4q$VPv)&l0)-Y#^OSk0TUvN1CwtK?wJl~KeN=!1d^
zLx8RAaEi!CgNMLzPQqPWVWp5{R*N-*(R(5hmcs4xf)5P`#IC7Kh|E;3ELt1|L<AyU
z)x|XS@(+vglFMpp^`9;Ad~ZcZ$Ri*BM0hfH_T}+&G`r<_f>Pw0!}%+b6eooe=bRgC
z$j>D2R<BUjurZTs>*)4>d)8n%5z-ZZHPjgTPMeuo_DA452^M)uNn?Hk%cE@!7eDGi
z7%?HO#Mv|O2umX9(ctx3mUiFDP;F{vrU9J)QUREpIzr)w-KsZ<+NFc3Wwf-)Mi7GP
zNYO&WiDnF}4rXr(Ra9{7O0$($s1}}O={?d&WEAp>nLnB_=FFauCK-J-xy?DsqG)3y
z*^T`>p;FID-mb}>6~l*THPOKHC2hV4ORD%MMB23pyWbU-800o!1J2LLusPhQg_h7a
znnw2%^u(1E0gL7N`EsMq!E(bPCX8UC2l;P?^UABMUqAD@nJfoQy6%Ox$FSZ(JE8@o
zrKW+W=?^5RXgE2y0BmbwavK^#h<~Ps^M{}rDG2Fx{sxds&tYiSuP)&Sj2{^>9L0H_
zN&6&+vD9vE`mbTZP^a%WH#wBkA7~}+bSf}?NWFD^qHF+(szxqJ*bZPXiq!X9uTkHq
zk~2PxpBIXAa?0)qzRt!sPC{4F(#qqf>XnuXu@hN5dP3-D&1WFyt85X~XXjxDb^iL;
z)ftRA<5LAPw(VlOfK*Fme|Xdl8!Z*&Kn@$D!VGQgn@HS3J@KpK-Mx5rL!%>i@suqr
zxkd;-9^lv)(xFNc85_iosQhR&xuyEf6Y<iH#jF+y&8bs&JVNZH#g~fH!)7^2mP)xK
zw7U6G<?wCxcbFAw6K45nQYZu;8H+_wuJH46v)`|%+vU(mx80JdhqEge!2W@UZj7@V
zlbwCw_8zw~<J$^~MB=dY8ZGVaS`x_v?a$C*!oeh0j)#d}b`JM?zn@<3b|5c?QwsaA
z-eL>u^c@Y4Y>-R|O`>wUQX^Gm(OC~nU*{k3<4o2wW+DwyG}9^SDy23nXMeDF;?GD%
zwaNRq51ruFXU?nV10VV4C3zaVp2Q7DThFk*Sn;7Fed@>6?BAaG%{oCoh-qO%IAEZ)
zl@zPg)%A33&HR{>&uqev1C?5oe}a%bafV28Pi%Db;m%QKY%Vr-W8lp>W8i~C3y{;l
zB^6Qu@e5`ZjpwT|156f{ZfLlUgW^^|?T=2>%vJFD^E(~4{d5Tg+7VD+L}Bz<<K^l4
zczGtwAOLmu1h!@n0igPQQD@KkBO#QSALM-))$@WC;J0p&;)`vdKXJy#-soA*dV~v9
zdtRRomBi%bSHc7=b><`Ht*xyPpHii?Ob4z?_9J7|W^fjBH<7Z~+wL74w3P^HPk?!+
zRVq&rtZ8&HP<ic@4=b!V(T*R*B&m}N-s2DI>eYbQZ1CQ%+dFE{fpuq}o|ZNX$oE#E
zU*8<u9yRGgfnf`MRgnE2q>^oyFnKZ%3iTsiEu{yG<SH?=uyVbx+Zi63CFry-?qMS#
zYA5$NW>t_@5oxGWSGI6$H0RyUdYqZL-1R$;dxS*hl+nmgDZ@wfx6%2QQ@)~{Zb9$N
z*?9!nw~OUK`z^B7^ru=(E<OG+oYCB7f}9+~inYCE<|-MS=xWI4y;$Qv@9YYgB%(;s
z`**#@&W7npEErL$aA=7;2(+Re3Hsgd)qmytvFo{`v&|FKkhQI8H~k|~+a=t`w}zvR
zooOr0l~M#3hx66oRSSHN>kp`Ewy^x0g5TEK{CK=^ym~Kve3Z*khm=nuUASG2_o-Qo
z;Yf&NeelcKtNf0$s@P?7pBRbA8<Y!jx2;QE+yqASvfqPS`SreUzl?d6_(vjaQ-=mn
zacXDaMEjNXq^dKC9+5o!Q<yTT@%VA5i0T~QOF!<Xv4P*++zGB{#q`udtJ}XS1kI%V
zJ*@lq7m$F4en<luUk-SxI8O=}F)ksFO+=&-XPkh)K3WW`gTghglE)kU=D|(qkeFJ!
z9x6n?zn&O~)$2I-?WVRwN3<2b<PAiCJhCLWDZRJ-3eA&imj1pyjL<|8poA6M)Y;0)
zD$&}YsHJ6Xtn><|qex0gx$dtxfO8G{<RG`Ac(rote|rG5MV3xvtTni8_gGl82>n27
zxXa6%%wxD5$Ewx`G6yU?&{}4WkMV<`olF6uL0|E60_g~Z-Y8S2R$0@oxO_MoEPSm8
zQ$a8D-9;>Qn4%#gb8>!hfoswda9~=zG=$G<aCyfdz%@_8&CM+l2_Uu+O3$Fxs6yaz
zb?LG9Zu$2DMy12Lru);xN-uY)Nq17#=XZ(C%fN9CGc1pz{Y8Ee1cJ?c6-+DBbq;MP
zZ{Ya?zTs0@nUL!~_tq`J5EzHh=yvp%2}<(fKw2PL>0w7B0U2dA!(+#i(5(1?Y`>7j
zuE##+3+@>DC@2_TWyWgJGA~a>F)|Nc*ApOPC9jq1n<?U1T^)&+Z)rg1(qR2Lz32G{
z%KnCm>WCh3^~68m+jApo+WYp3;NGsZ)=H6*gX6{ffyl~Kq7=7BJ69Wbva)<*t!am)
zEf{sPg^yyY*!nNW;x_9zFe`lGmjeQ6Q2QGR1Mr?$8=P(N-F6VnCOcbux3|)2iO~g9
zJ-t9H{sjY@DlWlsf6sOaSWaI8Fv<Mx3JVGn|02I+sjdf<S!*f#*5;;e`dgY`F1c#w
z>~n#)Dx%Qdf4&C`3QFPJRIOxuHiQRYI|k<kN}3l=8-Wiu0|O!w^R!PCx?yt7kwn=z
z3BS>ot=2QKb9SwbrgrtBxWmq;EH4Et{Th<3)7;q<&=1zWD0^=9_|JP$lwL##tBmTH
zj9B@7$bK=nOd%(2T5l6RUhr7bg;HC|l-ZSblWUFk{nbbBdv5#M<DiyQE?bT~lu*Df
zq*oxBdab+sgg-=fdo`)VU?@om&Rjqpj<;q+mX-ak-p*~%+zQL1HG*OC&hD-^Y0KxC
zp+9`x4hm41bwn9JR8z_P;}0m@*!3=*LQWlFz~J#Jglr@Ao`9)fW6#A2oBF;GbgNGO
zkZ`XGNd=h)OZ!ky0`@fH&?hS8E(VsJX`>7yiUSqX`_K%C37CFZ<XK-|2dcgPx3?0|
zzyVU;$=NnheMB6~Uy)&r_Yv+y1dm}mgyV3@`)6L5KE%Mmk$s4Jd7QL9qnjuNj!u`~
zeVgz(d-r^?ZNsW+2MK!adkI)Nq2)LiU1>go?}Kag%+ZlC;}>x4Z1_(cHdRtm1+CUV
zme}RPG7GFOUmx>N#wbFsk6hXN^%(Cr%q8neaDYilbZhCLJV?KU0X!X9vC^3WcmZ8-
z8q>^EhWILqvTt&7GHA}mt4KshHZNVv8xnU79@pYHXh_&(V3VJ^Mc*=bBB_2%{__*o
z(}}|rAJmN%hMswsgW`dUiU2G3veoZ?RU5P|`hjOh<U>kD-P{TUc^@R@9ZML-*Y)3=
zTcjyxAj(pqeF~^%<?4Anf16!hO6l=$KdCaa@8f>$mM;x6c<UC4Q-09xwzjZ%NBLS{
zILeK)MAaJ)wsEOkymwVdWbtyNZo2wGQoTgk{UcqK_w|%ktuPS^=8D(Wl*?NmUqO;M
zaxN||FnQb-U3g0D&+!pZ;4F*1DW3tS3+g9-atS<bKje1+y~qslT?i)i@%4rAyaxyV
zRXt$D*v$mbms_HMvQnM9c2qj(K7Ab(-s+@7h%d&*wG6`OUU>Eml}cv3^|=3oh<<4Y
z$53<|wXGoGw#6q+(x$>f*0=_|14R1T^`TiQtJvV191@G3y?EsKo$VX1)RHT*H~nKG
zm_AJ8E?DiEPI&i83x8eeGf6YbJVGnxE388$h?SIjaxZzc`-#yj_~Lw(Ql#m|p5!px
z#TO!@;U;F+5&}-KOveBK;$avDn6K0vStarEBq*DeH1{l?+yJyKfLT=(A;ul`9xoTT
zEAY5?j*iAgMt&9RL)_W)fnJrlv8idE&_*^Sm;rAq<+i9Z(*x`IZDMG_?XCPk;5YBa
zc9U@a0q~`ntc6Y+!0i5-_j$5pRsYq4gS|%^IVd#L7qg{bSzlicIWuN)<j&D`Spw{M
zcLS%&CvYCxgvra@ed@@D)9|Ixo+yW8pc$a)RGNAVmEoGDKvzIH>{y~zX$1BFM@i||
zvpkmL1Mq$?jPb!aK5xI)?$xhTFX(?*!eSle7}PW{U^<+Km)9I}hXlyy#6O@t#mCKk
z;{$kpfcZjJkafNS{it-46H2~gG)HS|txqOI%^lOzu-!+{R%x3*5a9pf!0^}^<J{Of
zF?N~DJ3N0t|4QWX&+jAZejk#W@Pa7^M{qI2qIp<b_2~pSWEcdOxbk0H;ufl~KJ4Zh
zB*u>_^CGv5*-_g6IA`g_g@B;Te{aq$Z5aP~XRJI@t-eIz+Z$J~M}+Y4@vNr5dlX-=
zQ>6v1<X5jbbvW7CEjPw@!T<bV8t<;pXaWc^FfUC>Y#k;~!&CIT2fo2&;4d5=HrL-P
z8v(=P4MlD_aW;Ti?aTOLzjLRh&A2+7CDgi&#}|9~c5VfX0o})#N)u(=OboJw?ZY?Z
zb8=3p@0k?c36txQ`)+2ns^9FFjn;^1x{rsl@{;8F1FeDucQHn$>Fh`Z41+`Vw$%V9
zGFV}-Ee}ljYu%2pw@;GFx>uk-3a<;Wccwu}f#J81cq8SXYtEX53AXoJ5v-a(s(CN2
zXDSDFrBg7Z4&a8p@$f~)GU@-&sS!19O!$b1+J+yei9NV*=RVRLh*sSR#nyIT@JUJ4
z3pIP8ha61(`t2K$$kC3DG7wX}E(Bsq1KG!n2@kNenrWO5w`Z9}b9GNq(b0jD&9Zg-
zoyBa!y)?CbsGR}L@YV{~+#1NK+(SHcX1p(~rJ>L7@@|72we1*iPGKK8u?ZDWv)-4M
zmS$%gtKI}AEYvL8<Pxc-52Y%*f)!g(QeXxIb#HGk{wA{T9nY)F>7RAhs_Tb28n`A>
zge<7Rm@!sJ1|kn!WHXgi2}Cn42`TPGr+h@?xSw~PahR|(qxJ_O<__3U+M;L_P)Yn?
zyo>o%&8{CB!TNB%$66dW>hmYKwzMe0zm}H#+Hc4Gg4hHgvyqzLEOn@q>R}WY3X%N8
z*?a^wkHu6CYeS=H`^Dun#(V}X^k4mzI3mCI_4T#1ARymOO-!#A{8tMg#m83#&k0Q3
zf|TjW$;n9Z^DE$xALmFtxbJp|IlIO8O2_5<Qz{Pf$gTvAP^HG)T;_#Z`_)^LUFecH
zkw<WuO*nlKw<nEdADUdZ!<&3U^w@sn!eB};gUJ05l;ieCmwcA^fu@3sWrq8LQ7@_G
zjR&teZk80553~{&WwnKa<tOI#inM-YAwQf8fj~7=HZq!z96DiL)-X+MgqggM0T-K<
z(48Lz56nFuK+IhXdJV8D>w&)mh}<x$No$Mc*%LUk<mTi!UYu&60wih%FsRf**0?gC
z{<<QNZkmBB;!(^I@5-!~KA2ko4h~f;EONKyWSx%2piIZ7_ald~Rp7RJ4MAXu2`@;}
zHh45w02aUBj~sdvy<p6PlTsCcjrflbw;@*`@X?=Kr~D<%XuUgIZv%~6f&Ha0va8ia
z^o;QW4U2RC3{`LQDEYI9x-X6OcE1lBJlx8lU#{w_jdN`ut01=_K1i+cyb&v3{m4g8
zxi_qDP7c@aC3LO@l<zZ30Z<_zpgo4Md5yh{0J?x()zede2wiS~ZfX<%_bjV?@HG1@
z_Pv*0#_%!2{)nwP0H^gkPp8T<7=zFXV`fNNzS(x5+y#@bR8aFS5UzP7ZT7!|w!43T
z1^6%mQqqo00dDS%*+%NvYPxW0aZOGvFw&Tgl^_h8TwPwk3*FA^&1?MV?z@<t)Q{3R
zlDFC5{+sU$_@m*xeZ#^x_DUFgR*(MI(z0Gt?(nGJy|Z>;sec0N5pPsK*+yZ)IwV)j
zpf?Q5QUa$g+oaR-1fRjJl8+C)N<V#{hIWk-X>bj%Vl0!Q@x^T86-}M-yNx@l($<Zh
zo7h;LPu00pvslFaego+I0QyL{%!K*-QB}vdF5IcjI6MXlwy0x)A|k74@gW_{*L3Be
zqV|n<sONEf?}UhAt(Y=RPR52On6e+{p!swdfjNg!EKQz(sedp#6ih&XTWb03vY_=G
zW4+7S<>Euz%9#^aLaXYAKL*C(1K8z3^X`5v>S#&O;_T`gvh`-xZy8q$5A2D@m^@cs
z2b`Ejyo0mnMa5Mddpck~ChYLgmA&T8<JIC_Th5FGMjJH+Jq~me$2ebkBQ~B=ZC77z
z;}_@QJ6Ol$DSr*3x#U+T{e-+^y}pO9>dUGM$t&mu`UM04c}#A<NUNOg5^!+4@TMw=
zJg3mxDN|)+X3|w6^#bbLu}-G4Da;Dw;c1TR1s?o3%)5mo4h$~hlyQbJCa~Bx-z=nw
z3~`bv)=~+w9xKrm8;5)p_!uxAd27PBWnY?l@Joqz`R=L-p?=bDa?he>-54uvggGko
zwzseOM;+!N$*34;Z_8L5*Y9;}(=@s3B2G!F#9mQK7I(<Wnz^^6=GdUojY;_PSUkW^
zS-TTWqkskPB-_&x%BN1L;I)Dy*yc8u!c7s+bHsBv>^Xw=0M7OPtim=SAt8X$L1+7Y
z;TLEMO5(!&Pa_z4$oJ|xN7M@=dt3d7lep1U;7oZ6!Lia8(<dNvg5L-vJ3|=dvKtT}
z0}AW<RPCJz$MsQyNXxA$;qxNcDPMkeJNh65N9lL4bCZ(&g0DN3lw*5Y#C2Z}RzYq_
zI@16AgvSW#9K_qsr}6hry1*8=HuTpPC@qh^f&aBYRZqa@I2K;!TXpJTQrLfrOr#&>
z<>eK<_^SGPYYTkln72h3*x1Yu)&yXJDIoAY_g4&br;o|%!F!DC;k>`{qxiYMX9jRn
zp)ktM$e6D%?uM;8D?7W&VLbtwk|E_)W<zzr1Ay^HK${lsi3D8hZwr#i$w|;O%AmZ2
zGbD7=VTcs;HXLAyJJx<L>Ll6B&W^q?04-B+MEZO~dq*bSb=T^2?AtfoRp`G{(A$z!
zV$()DbzZLHF262mFz)vXcVe;VEFe}i8tmKfWza0c3NbIML@G2(kt-8oHEo^t(lg$5
zAwnB@$d@(+|8B+u_*$r-b)bWQHk=LujU=MM*7HE_V)wH{aG+p*PTPrs7X=c98<zZF
zNUNEJwVat;1887--dtK-F#duxg2~}yX(^X<PPJe!Wvrp{oQNO)bw<?-8MR=CWqF>y
zhPHCX<x>oj*8DkpBQ~_~C;Uu<xpP;T^$e!;$4f^)y<`e5lsL37K~j$q(TwA-e7E71
z?m8_+_L&&31=gWQdE9K2iW(+{UFL+Ln{%XwS(#ZMKR#NPc&GwjQWiF2+;y12P(G89
z@rTq;)ff>T)(p8Nq<>ttrs`{--{ab@H!&M@FEbcZ5YCU#^N;-+3#HIf8*G%}|E$hU
zXSegm5HXrXos<aUombZ_HV7U;l*_#$lm_Nc0f<~~Ul}5RkN{AXC14a0L2guW_hHiB
zAqxr#d8DQe3jiDL(*&7~1QZO+R}+*79PneQEXGOgx#D|TJO2un_i~4Pkv2Aw3{vwi
zYIzBmb^!CFp;HD!8$-XqsH_lT4j8UQ0aI(46hiqY$DW!t1HlTE1E^S|g*1t}Hanu}
zVVF54CMJt=y8cK(JdA^6ZC_nqcZ0d{PTOMOukPtlfSGHc;hEK1*uWUz=?de=OuF}t
z`#*ej@5`3-M|ar#+14tZh{6q}<ZQzQw9&#sLIef-W}yg!&Ndh^CvM2GTW))d%jzA{
z2O&K)%B*5hkMke--MjBk#I&?bsEAkICrzaMci~qj%tAn;d-_oy!=TDs1Eh|{ZE9;6
zT?5&fBrzBKqtDfx8w-OhVqyy*>|9-bv4P2|17`TaMliq@{2{;yfe1U<@Xrh>SvvYm
za{j#jEML>7aGokE8ZOc%KtPa61<cnn3@IKT9}gO1Q_JCps3;fz&&5D05`XmD-1;~8
z!8Xf$*YfxXOs8Q|V2Xh$KDxjA-d9ysO;1f(Ps4_8^Ysy~wBrriJH;V)avx~0_;fHS
z8$dc*F31Oo)?ODHC-ZNqu1Ah3xVr}xeE2|hbXPz?yWW{K%oEoSzD#>3ujyL5?=TE@
zF3MM`78V6)+Kj-oA8qXuXm?6Tcte%|N=jLSf#(hG&<x^|mI$(#n7sPlMZ$o)0W+ec
z(L|YUX8;G9#3&cC6qW(w#mX6C1nhyDFvxsg<G-f#$XIPdR4GZHU6{e4)^`QoyyL>s
z(#S?|7q;uoV8p4x3IP5uH<t?*t+H>>2%sUaB{v$Bn1^}bCvVhe0U_Hp-4;SL^y3E)
zH#duF>*>bC9{?b6t2Yyz#-gz3&CE~LVwCZSh-kj$=YT0S^#5j|J0@AQaNz_b%*i?W
z{r7KJbPaNR<rXjdKit#%WU>hnAbsJ=%F42GJWcycn0N|{1T0q0B5BXY#*UZ~X(O1#
zOSfRLDz`a;&5`D6Ze_M{7Nm~rDSEJCf_D&1FLo9gp`oD-4Nb5!!KLPul#JGtKL(u)
zUb}ys`qES~O+MT-G&{}yp<t!~eF^MbwHvgk;&~EGBbM$T`fnlifZ6-jty`_-?)UFE
z#~6X*_Pi9#y_T5x!G7|J{_dZ(KQVzTeeSi*g0kEIoX!O;M)x800vjuYL%NH!`Hn-v
z`}$B{+z$8-4-)3wHg|P(jgBV#FVd_Lmn3O6T{i;iGt-mQff8NOiILmjqMrWrDl(cr
zkT2gj((RcxQS&V9c)QaO%7)qrDr#~HipP=9PEJq39pp`og%f#gTLYgA$s#15$4-&b
z9+P`R^SB)=GW*d4Y|(dkc?ZYFxWvRLFUwTfSXm)SlxN&cyz%t6#{W|3j}uCyw4nHf
zgA~N|Fb&^VS3Ax(`vVqld(BluNT{{Bd0};k8O$s&e}_J83rSGMv`sOk8a|+wj*b;D
zR&g^gNb?Ae<A5UHGd&OmdnzoHZhK4e`uh65$Olkfz%p>l1x=J;X#ujgG$a`~26^?4
zn`}>5Ra=w)cUKH5TnzvWLjiw!0oqY;aPZv$CHT&Uo3agb>#w^>UmUGY!ZH<pp4bhf
zdxJMlat>G!c6OgGFV31QS*}Co_bjJ$KjrWtW_Wuy!5}j5n^t;WG<J18g6WY^Of0lZ
z9dA$7TEM{uU%trO`@Rvgg8#qiZ&W&*OhO`}wu+l&)18hy@r<B1E;nRFFaeqp(LTMd
zt}a#FGOR|Al$lI|d-*@flLtCFsnT>!XT+qWF->{!)l);B92vRJy~z1=l;Goa9Fh2+
zz$TmnD}G8Q5_YcKll#J-FOe{AOG2r^`rrS$kMeOA?|%~|(oeh*Y5(`$`u{(_KpuwM
zmKFZix_X=H%W1&Z%O<*y+8-p<!Y7i-liRevLr5d^?~RQfx{ePZMkCW8{eEu}qm^*i
z`-bP9#`x$9lh_p0iocA>AWE#iyaqXrtD5qO+`SU=xQF=6Mr|RXe=iMw`}%wlq<(X9
zF1b4_%6L(L_W9rMx})|lKtV34j76|N9uF<a=^3fI{Pm|Mjs5p}rMouj>Fr|}@acjX
z>Hq#POZtQ2`3gFe8WBO3-Z3%w^g#;kn*#JP3u_dDWlVpU3p(Z)6A7@gQ4kXo5fMSM
z3`3&>GFq8nfh{U2DJU*3DN-PQL-)z~!WU0oBI)n29^rTVsFI0@EiIXnP>x9$(J#Dw
z$uQpBOy}SrP*pkHsV`@QoK!iJo<q(zYOHsm9l=z}(f)UKO>OY-Gxc<2DJgn+Ec^+w
z`ZVXq`C#ow5f%;6rpTprZ&9^;z0MH1W>Ilx5r4PzY0RoQH<D_h(DRw-e{L{}e7t|u
zB(j0G0b=ymrsoAkMbeIvbh*~&Jfat2+41uZ6O+{Jex5OZ0iYe+`S^Y?=gEkI!4}>5
zsQ|w^8~{iq&V@A{OukcnI($-;PAhsIWmQY-Ox)McR0qhZjm*-rpf+Yb&0<muon*y(
zOq81{@l`C}UoMUZ6c&~8t=H4uFA!n$V|_l*TE0g2<ubx*i*cWKdOEH6YxCihfrojS
ziE&azMLNe_-FHed>w86tNIAuQoVB04N>HO0LmVD+Z|jfNQ~p6W8jAe%=4N9Hmw9(z
zgAs`y+G{nB>S~Pj>R?yDYm9;PYo=eEnNwmNsC2*I-c1mR!1p5d;L!Y>mA-G1Mi}>@
zINt!BO8;LiU{1IpI(_9?5iuc27P+#TL0z&>rV8t5C3}i<Vz@AkoRC!Uv9o%-cJ#Sr
z2dBigqFKBCaeyd$$iZYgFhPmX`Q8m$&S8&wiQ2LCu!mp9BENb*TE&~<77{+y{V4I%
z%*bM?RyNDoaqPi#R|5)qyNvdhyFS+D;`Bf`S0ivb;0+DZc>--3BO^@upj3nzEquRL
z>fif(%ePy%JoO{*^F8NlLO~Y65}4n<JhN=`zd|fA{4S{XYP)`dM7(;FICgW_eeUKT
z45HCfHI<jk$Uc(3G_AxOcpqO5CYf1hG<{iO&INCqRc+_gSH!DEF7)KsKYV`g-B?M{
zqA^R<A9B`V(8b~?7d`cP@6z|r_c9H=%|{I7VKlbb&W7^1_+F`R%bWwfNQa^v`}JI+
zg^6F5(2ozBNIq57F52Vi*VDagd}a*;Sm%QDBIG2_I`@u0(TLvN*B3pj$T3cw`Zht=
zE?KIMO^JlL5IfJs#IBB;XKNPVUTkm&G2qy*>7TEAN)g>B%6vq+&wu6x-Iv|b6s+mq
zI!mLBXdk9HB=fR#iTW>ZCCuqt?=+ksTU4uZ-#D~0c`|w>d`hoOYSqzM+H$K|+uYSH
z)vd{#<W<$?xc}2Ia)iH_w6Rz=3|hFi$X`E8J4!uFDqd+t|7Cc;X=6q<LFu=+?DP!k
zP)i&;je_vdCv$WaqyQd-Rhkx8#)%GBpWU4%=8Wh0I;o$<%OZ%73eziMxFdG^+!Dx3
zz8W)PR3x`eXs>boovY>YmY-cA&6P^5CT*BjR+bsUaM4F^t9m!92EGo7hppy)Iw`pl
zc3sP#6Rz`4-@?AHZ%DyJGBV?4X@cQ+iX^)K*1`T|U?6J2_K#N*8eO(K4e8=I*e2!W
zJ~lD^#>sSLbdsf`RRqY?e_0*T>yZC{^cq=Z^@e0H^|KFZ-vhAL%NPl6_*jEGGmM5e
z$^FD$U0pp!FMMEfa;&*I)%eDX2T&W|LXhGmC5rB4z30n{IF4p8_4qgi-OHo*_=kr^
zXhnvD_UCZcR)jBlmD1LWtt|2}L*51X+!{m)Ikg{|Yfu+Sou;0&u=c+y6Zg-}edq06
z0>t%@hxb{pv)gI@e-Q~`B$Rka&ruC1D7p1<tFt1oDaRwT{o!oh+A2NylbFN<Ku93v
zzJdQUGHT`Rfu#F&#7Df5r<>c;vjMo?;NwVzWsBkFhF@@X*+?ak=G$>QC9PK<9|}9}
znRV^TdDi;I=rR$1<ayStDt{AUv_P!Tq{Y?p<=<^-2}zYoDv^oigm9A8eyJk^>M?7F
zd#tC&r<X7)swJ3!)!q{_<UL>m)qVtLaWiOY{vV#cJD$rnY+q54l#D3ZdkbmUvPU+N
zRYu4tTVzFO*{f1!*@cjh%#g}n8CjJPk)827Jn#Gdo`0Ut^OUdqd*9c6UFUh6$51~C
zH83&gE}1H{I2=V1%t=kpUzzFbwg9`>)U%IK)>Qws&f($ay><UnrFjQJNtty60FOzg
z>gmKq9sicp3kSx>#!ev45wDTUUcvVy-=0s#%+JRGKSFKWM9S4Cmv~&%woM4(BM{@N
zF8#t+=eT&XH$^rXp?tvEl6_XDItfc#P)NOf3rE)-249R*etv$^S?O)L#%ETEhDH5>
zEK3xh$yq=I#^|!6PAhPn5V`g#UIP`RQ{QXQ+$p8~)U8qrz%UeboL+<i{rjV^un(Dq
zXsYuIEq4|d7OwpN^SeLbBoi@epHMP7@43OGT*IM>!`?nSw5P8A!q0E4GTJ(u+c(^^
z#+8QnmpMs#6Fj~2_VsDDkzf)_fUNz9-o;!YS;E_QxU&B$+b)R$RSt4u-QC=P2zdNk
z$+x<?A5<8^%%9)2-fKSh!%ry+NmuW@$pYGl^!KA^6@Xd_dF*Wa^rMTpwK^x_G#HE$
z>|&B|_<yI@f7T*|E;0$)#I;cJ>gO9f)&zOG5K>`LQBhI7ar|~sS675#am2sZbEYR9
zv8lwzX=r-$j9k}7s(cQ7Tlrn_`}glcu=Pr8+czP(hMSE=Zxh!@M<y@c5y+JK3ruIg
z6EeuwIh~z|%G!d#p|_x}uW)>He%7Se@tXnX#gp^>#b-355#ab|^iF<0DLg@yjf~p9
zkq3gLik9_NMuy&d-+iY`p0;a1&Hi8M8fKz-_%*ppW5jbRa`M+uG8R2U+4!cgaPl#k
z-YYX!35m_R1MA%hLqq1H^MQmu$ZmY}P*aR`zpIN&(23v+rl#q>-X9@M;H3PECy+t{
zAyv&541)6W?}I)kSK0HuW(%sal>N{Umutpwd?vpfde{+=90U3HSCPjx{yWZhFGl#{
zqe25CBO~zie8wBeULU*nY;^PrLVCvV2H)+{_4AOBx(c;qz^iuc7wSe1ckeD>ikXuW
z&J2hTteWWXB&CAXRBi^j*I{8dlGsS*-~tKD+T?$bjFy5vi30x|kYphA=iPpZ`fbW9
zlH2Y1;k1ca;KN6X_k-EQj$J;<T10hQkxfHJCh`}^IXVUg+WPw1y1J9}?80xQbmo|Z
zg?S_-Sa^62DkLV@1~qM`{7K`>&CNyf0c>zZ@K&)Vu@J)o;5o;RUPrDWQo&3b3Vl<o
zRQ>@emAL~Owo_Ml5?;Pu4(Hu-&)kHl4$-OKXn6F(8fNOwVj}0a)NudjRj;@AY0A_%
ze!%i#^DG>jgFVg2NJs+vUqdW*H5voz_m&?^{dY_uahtqLW}5g~DwQ!WsPn~Vc}H07
zoWsir$$Vl#fdFfm-UoBbESWA2?Fc=6{mIXiYjPqi6=|((H`UKQ+EUt=-Kg+EH!W8D
zy58Np)%!%u^ePM06F>7(3G(nnc{v*~#D}cifR$<bQKie5b(KC6l*=AWYU2J*S1&Dt
z#=v$4Dq{#|5NSFgKqW}r`EJQ~T9&Xom?Q?TE8m8w)8Ir~Dj{S8Gwta=aak$#k45cr
z3Iy~L9333cvm#~U!sTyc)I4XAORSN6-n%vNCe)djBZd4C_Z!ql?7ND1EEJ1H7n5OV
z{BrpHZ4v91H&$00ffH}>Ulyb0(rT-%-Fuh_8%tCo8x(AqYQydblz@JS_XRGsrI}Zo
z{Rw80S1S(<J#Z*)^BqwX%T1lyI#%o{sf56DXrrpM?~@8rzBlI;(@JVs%Ni)ZE*5y$
z<*<>9hG(9BR~0S$L&52|iHqD6Q^)c%w)Cs6*7otG&w1w<hFRXD+G#eqs4YXZxSzE0
z4e~^QC&H!F*tk~Em4QkwHT6oC3LWjQnP0Z2f|~47T60ut4iH<f|J0NwB$TA5&uJu=
zFOXZXBtCG6)@^5dT)qqqaM1&8NEi2$`Q-}sE&PC~2PTEjBrEvMDpUNn?qV(|>X!u~
z_pxK~*bvI$s)0Bew2up}ViqzZU?l7&N7V#1r18vjWPZa8iTqCPOf%d=O6|Kj))Vmt
z>!vGyhD#WFx4O<w*M%|bhI{=@92B+AbA#(3i39hCyAwik75?5Rb4mv7h?bW2tyQzj
zaOgdz=s-2ua5gbEHgyGs<3DJeXxWO+W!4?p(krP*6(4&yr<{Mu|NgJgvD70cz92Gb
zk?P*N{F9tl&K<8T^YU3ZJg(9BuhrZk{#w9^`iD;vCpb?lPwf43V%)ls_aV)$9{#=-
zTr5<7ynds~v+$SHI{VI(12GhSM;Hc`2)Hi1umzxCv7yHGMovx+2w%O}6wKCO+XbT-
zdCLH&iQ-Qg95z;@EN6s-EV2o8$eU&K9yC!bPIlIGst=$1|0V~5OkS`4D>LFu-l%Up
zN<C+A;X-nTg-6QLgV;LT`hEJu-)^d1;~MFHxGeTyo#^t(GV)`O-W|`+Sk}m|d{&=p
zRezIcJKGo?a+3SRX{Vy%a0$jwT_e})kHiQt-0V3&ZTz-ql<@a3&&~F;3X%d#p~l%|
zC&;V?d1#*K{`zsv_%~}TS*(#;T;y_@TWF$^bf`Xg1!H&eP3m^JEY5W^;jv&FlgI@7
zq%)5nUTXA`Vhte>qJ~9Cs$8?b4Ye)L($bQ!P#d;A^};4j1rBN}(S5Z~gAR&n2xv@j
zz-7qS*Z1MWzud3qZA<xKag^M=Yt`__@Zb+wWhqY1(2TuJ`E;pVhsek%mlNo6UUIW*
zoMM}d$kVJkL1cGOeZtx=yQU9eiaK}Bk=|}zm7!L<c}BipRDMWrQ2)_=0~@)mY=^aN
ze2XBxgRu|JS~IP;L>Ma!bw676$?29obR^2=<li5UzQ}|}-&&50JIgNLkmt5mv$tLI
zeQq4(o#uugx%QUF{*J}mIz66PwkOBHxNwgG%d5f8DaMbnpYG28)#2rRcIo_>kO0k#
zrz6Y`Gy+7D&BB!19OL;tJ$E_u8hxJ4R7C9GM<S_!R<rz2WrtVc!mSIG!q|QH9o*KE
zov$HCY@Iljw5xUX{Lsy`U7HxxXt?`rGS8|wsE%)?w6Vmw;o@tzREv*qpJ?zEdgvV|
z*f<`&t=AYEEj@Yv)?|?O5e3;qp;9jPA)Qh1tUjlie>h~zwZ3#AUz9KA?2=YRsQT0G
zf#~P!SEVK_8E<G4eR7a(^0Skx{AO(YSnE#tWy;!<z?qaJ6~awO%w~~dSUDj&&m}u?
zSU7VsT8~lID)`qgS_e^k>5oVAu9}^lzWX-!C=Jn*)QFs92U_Z5)VXXUUsWXqL`}{;
z*KSqnTcuFs^-<;1)xXl-Tz~AvQ_Z9XIj(7y%1!-)Gpc^dv0W7RMILWaSVjgh^St0w
z3*b0JOsu2-uz8u1`fh05v7BaNmV}^QI>B?h{9*dGSq`EoQ*s(QpvoNIEH1K{^ecxq
zP>1=|5~-OxEQA#c)i;Nb=!^A)FKgeYd|~xE?A_Oj2Y&jlx6+3CrN$C(nS?ofzr;>$
zeT>!Tp2`ECNcC4;@|OP!40<>gD<e(>XX&Ke%T!sqUTLC!o=f|*fSklB9hI+Y`K>g|
zs%??&sz$vV0iJZuXNO%miqC4zvGUw|z$x#v|CQ%rj260*J1K=^L{a?Y;`dcEeoeI>
zq&#;t^W%W&r(i}t9`!L6KJf*Gsv?uHvoHA6w<t>4RdZ^dWyLjrlt^^@FzT~xe0DX^
zL$h%F*O`)olXV{NyX>1a!>^psRz3gqjW`=6-S)N?uPMt|m&VZOjRV=2*0PV~pM1w~
zbAQ&Q1}?jnr+r<g9C%rRReke@LaeEM`43i3sOq>}|ET@mo{Kfi<e-^z<pgA#CbBKh
zd3|&A^<vqhFDa6rBdRPs_vT)B%S{+KBprY$hoP36)}4-!sqqR6lTP|i!PcB(FOP(1
zEot)?9HXfTT?yZQHhr<r%JN^H*<|jmhD$F_ra9cz)f-ErEVwR6^Cb2yQ(Vy5kojlc
zOmzQ;1$fzZHL%CFbumdARt{=*kM*VOSBOirPT>h(l^8Ehv%a=in|Ds$>~7f)IHI`h
z<0h8dmekc{l~tZ#`_ou-vV^GAmVpSc2}y!9^Y+=t_IxboO9Cx*ov!Ofw>vj0vA;j0
ziaoowuQmO7t<<`4r-BqkX1zI2NS5qp(MJd5W0WvS@*j2Gn*9%6i~0=6MoU*$l7;2&
zQTfAroE^TDkRyv$TeH|9Ecv+4Vw|<VUshc0v5!S>G-|#8#Odp+ERmD^A0IxQZ`OKh
zYWxxs-Ji#a7JjyM>3s?}RV;TDGBDOK&}S#TQkrhF@RXUj_|ica`~FORiQyaDwdqfJ
zcz<>s9_~Lj;rJjR`0L=`k2S1~luF_>lD5DpW>s2>A1vP7$+F7L)n$)sn)}YLFuu><
z?zk-1qes+92S2wwrR7o0bN5!XqGTeftF3MDHYq0b{b7}H&~7)DU4DgCpZa8Wl$L^$
z(god^TSZ6vX?Bq;*Fkmas~^uvW!yX3Pl1ev@>8r7!Uab~+O4N#RzhB$F=v+XR8X`T
zi6e*<%ZRi-<UIeJjSrPAm74uN=H6gq<LQl!$0ttkw6s|HF&B|~(JfpY`&|F8x!dB)
z=_5KNXT=FwuSj20YzjIwWe}2i<kmN8QY#%dHxI`CKq{AWGz<)dj^Bn6ge!4-gGJ+1
zo@vE8Vm|E7H`I-@TCwedebG!M$E3~b6df-c86EduQ|8=wO6h-6U?(<{Yb$6{X3Vc9
z%%L^wR$hSAlb<bY-rKU-T%;VjVH0kw@BenyT#koV(|bRDJ`JOsSj<@(biI!iof7}H
z-&*#(cEY8S>5(Gq-=x$<>Yurb1e=kS(sBOCU*urjqb?RZeHtDc<nmWDQc1IBS!%O<
zMeIk|i}qB;N2X^orKiQF2N2ooJ^o$&b<nK1SGwc%F@-r9U5!NDH#Rq!84u}}+)!+Z
z<e)m|`eO`M-sOikS4V!MZohdmJK-^<tAU_uMyXmtDcr&#02TBE=c^YTl`Q`_Vj$vp
z^pWGa33F@|1!y}u@{BGJT`F_B4j1Q;gGQi6!f{O%0k??sc%_{#ym(M)v^k>o_OCV)
zliJR|;w<$m$h?-i{Z5rFI$g;$^_{-HepDIU)PdHre2w{WD)4H_lbqM`V$5gs*|RUf
zCMbCSS<=e}i>nGN^Ck61mOX7)bu&*C(JYmI8XX@eJ>3V5YL0#~8n<`;-#=(`9Ycfx
z_cJ<5R+Z^CjG@5PUR_(bfKhbeGYq1Z7S_wX|0=G8%Gfh^N1umc_nTSOdDyaA)ZKMN
z4iMSNJ`p}X--dhch#1A7D^Og_;H}YF=<a)puf1fH_J!~s;V2}e_xFxz!-@GgJ$+|d
z$o*=68N{=YKl~$cbIbveCMd9(SZ~Icm)q%ZBY(3=Ji|Yl*1iq4!cD?V>y>-^!(T3L
zpVK3wAPHQnF)!F(P8ihI*~xo4Na$ZH_u~`Mn)wLg&Ue)2_$^9$8_um^`N~mpW@b|4
z!9~o;Ph03toUlMXY7?4aW@5_5{c0(2Izzwq`0)u3*sclR98;#Jcf5UD@)FaPP_|tN
zUA8j|ZnzVNev}=Zc+Qux-<2|wYi(v~J$c^cz-lX-&6lUAty}cwP{W&7c+e+WTo5Pu
zh?e?OygMxf+n@)5iiW{y|CPGCN(v-(RIoNwd~{O(eWfKF4lqUftm)jI)*VQA0Bp*i
zzb@Szt5?CmDU;^cnYl;-3)&Hf{G6O)G@OF0%S&!=FCcoTQ6`=Od^?LTPczY;HhN69
zEC&S0#5WKAOKjSO$nsOHcR^5>Lnhk`@6&O?$AyAGGr0Bh%NB;I9}Av*Bb%*_;of_u
zEEh-r;1<NZzj)6A6=|pm9UUFrvuBU`FT3NTb8}|JFaCm+t@&8A{My%HNSfx_QissN
zgIbOG?<YwA{kJyU|E)M8F9$qrgK`)4@ALDBZYTvH0GljJ=%De7!HcK<<f5k+i{$Kb
zx-%@EdY3P&nVNz+coSq^KDA3e3VjsTYJvvsyE7rH1G|%T*$FnLy>tVlkD~X{Mt%C#
zmAxCAaOC9K{bj|j-Hi{aU#z{<cp`9k2||@zsJgr5$X%eo6>2-}(Dxk_dAJdTaxO6p
z-grQFCVq82cv;8LaMw(Th}nbgw0-a&_1CAKd0|+^cr@6?<^^U&FlZc`XZ$mH|7CJA
zzXVJ)FUZv<c1>KW^eV&`0CH5v4~AGrO=@hu<EeN%8M4FK{0=NaM^=V;lw~*BHQ>}F
z_TSh>{_vd)3nvAbbLi)C^d+X<bgke!ldUcscr^MeJ0_dV1JorY?p{i5Xf6ee->g9i
z+t|3?;Jz;~TxF9$8lX!bUH|ixD|G{OXXc(t-DVa|eQT?fsY+eyJc9n`9~^$rDuSpY
zS!~1q=;1?Ny{0rRX5RQ_HlB5+eayrvlrR?3*tHA8F6Ym1B;p9R%IIZo==Xxjwu@S2
zH8h5Ldm}3D+_|Ic-DB?mumCQ~06LeKmoaktD*OS#50kzv@g*M{hcq6Gl5c?`S3?hc
zBgQoVu@N^z!^0O41<GV%-OKalH5b9xEUqizw7)Jl$-TEphk@h23pYM7Z_80iJ+HwU
z+~(UQ05M^TL&zOQwy4<?qgIb(nyZ#c0r~l#;b4SRA`*Ic;B<P=_MNuAex3BR7r<5^
zI<IGy(s+A;RD{p*#Rt8r>U;DpC|%9EhM_5wY4_aw-x=BFm1qh-6E2%*rrEaCEs$+7
zIJI<k9>Hdcp<m{YJneMFFON_AfIJ2lByIyf$^+jgPq0-R4C+Na8lzI8UR(gh3MNtP
zQup6nm3<1|Mx^TaX=z1fW-8!@z_b^FBpWZEf5w**iw}|0&~Qd6{}1NdL9ah3NUr}T
zpuSD(`BC`-4kjjL4Gjgd9jtV}nvVYu=5j>b%cKvXnh4HTy{-3}sKBTgRJL>B4D^z>
zT41stGk^9314GnYCh<agUGFcoPVTk$P}wi;4G&Mt%i}w&(K;0SENYNTR)E;mDWP4o
zYJyuaj!f;8td;97!Ia9GS>o1GAKuFUIaF*cEI<JY0ae*^w(rVxSGIvcJfG=z@l~+w
zsj0i8+0`;=`!1`(irVPK0;cgPDc>;wreLVmj1CRm#l_U(-<%N<u}*5m0!<V$^0s*>
z#7sP<N&fL_oskLEeKl{p5_v5hYt?CWBT@my2{NEGX=xqY#GN_&*SV(*?x;UDj!!td
z6TMYpKJ2QXWRuc>bx=eI%UP{EV7E^XRrIzdiGXYJ_9tLu4)sJ)$Pi#p5cbTj_Ved_
z*nZuR@Y@tpSSZFm0#(5J`j)yIRiNCZ*A}DrPvCkj>(V|ed6&x=Fn6A)AfppQ;@O1_
zr*m-+XixEo8NeY-MUh;7j!7)2;qL1P1jobq#U60a2v15}32mPGuyKISLPv@2bk38p
zN@1`Kd^=)K2EHBiWk@ZhzuY4`Tx@W2<*fMO4{XFNf@!T(N_u)!4tKQf@EY(X=*wa^
zlk%7iOX!WL-Z5+LXaIHt-I2YM6YPon;!R<Sh3UQ{rs&{)j*l*Qz^n)3c*ZkM5-56<
z*|lyS*SoV5&MzMp*+jy|x~?M<prxWRb>vG@5(jh=!hI#-Ko+(5?osU;h$8kr*imSd
z`Bz<g`i}8CHzOGt0yS3H>V}nr>4ujxiZXcDUFmX}Urmq!9NmTy-CXOsJLPsZzxCy5
z`F~k7AhxNE)+!vNE}9$hm(kK9UllYeT8iht3^3ZL$SNDx53E^L!W#Bjphc7wa!XzB
zc?#-5aPP+EdT~UACTM`Ov-dEU-L+u<{9AZ7ZPV7m;yVP~;LTmXX6OPROW2$ZGA7)$
zt)FcD%#YI#)?jL<*uf+E-JKheWE2QSj_{ODHI%}QpIMGW5*Ae@TD0%kS!-C{JZQ44
zZ)~g;g;xvjIe*Y-VJf9M%@;23f(;M;7e#qj;hcd@+T!3o4F$Z`vaNiUApMz@kKJ{6
z@Mt?->{yLhmhBb?S1YmN#2yO|HKm_l`4lw{ezJU9btQfEle1y*TrU7*mVI!Phwq#q
z{h36sBhAP7AB#){mGV7ATF7}ewhZm`yASCqDlsB39NiW=S8CTO0Avd6qFq5RtKtKA
z`re%l$2XbkE7VOA&V;ux*9;>A18)02u%wO&m<V0(X$A36E_LhP-+v%J-S(}7l@ra$
zlO4!oF$qzbNhY>*bd-b{rnsjQ;#w~zeo0ff4?j^qJRuN;CJs`zv^6(JsXPpYM<C$n
zF)*{>7f=ZzVifDn*fm*pcq}>Nq=WQp<?r9$ZK>&r(b(9O<bzokfJ4GVFKE}o7rc(Z
ze8&Y~XrSICh5GJn6B1p)N<;z{OgR6*G3!B-8eIJ|T_)k@Prbm=v;qEz4K`zvx(j~~
z(TRZ@o#XNQ-QmNNj*h>@9M%%7g>A{9-|cxsUy(T0S90AG!xEUHeO3PX2ZSql@VD01
z7OBL%Xi|j#U-olfX=d9B*+PwZ`OTa6-jKDh$kTlclOTBD+~0pO>`imQR-|W^xlZCa
zMW@_^#aLo&!A8L>{}wLnJ5Ec>;T}uc&?R`Ackd}1grURI9f4^tUmjT3D@>!LTzV#+
zcM^I(FoL_@*u`MVlfbv`BcR*$7hdxBDe*N}49$1b3DS?l^Ce&iBbsI&724IF0@J$S
zeUBX~+-D9y+0U}`^SS$EOWdwGF9HG+1d?Ghs4AKr`9j2|^(4M<mbO1sB94E)%f6<p
z-2piTPD6Ovg09vVJbJW(?G}mx{gi<9r{{`cfp3}<`}(k8>)o?7@r@wET`7YZgfeFY
z9P-%TR=`nX)C@)7V)c%OtZLsYhfwJ^S7E-YU5@C3T|F&r)V01cXLAe^BqbzPX8Zr)
zFRDu2z#Qe}Mboy&Le9g3V7u-Esx33>u256&(<DqrwW~Kz*%WRFG>C>LZQ7;6rM;6s
z#yW_kS>XVv*uS*ARqne!f?7!8_CSeoNe<s{-?cwCAyx$2a;@;H9lO|5YlbirqbEnb
z3HnGDlERKgX7~(iHw3++rU(gcUZEl*BNIn_X2rkDw1?<Kv-HyysW}`A-~rp0Yv>G8
zIWX^k%QIzPl0&8lod(~!jyDb=)b>DV2V!Pgj3h74-&S|>u|2-=e^@}g_HM%)z``FK
zAAhXbP5VL!wZC?trCrU)2;+~pJo-F4YoqkAXMfxSyB_Z{0WJaJmq-@J{qULTaeV!x
z*+brLxRTv?29NmAdV<h^Tu5F@8)#I)EeM+Yc;!9$k(;0Q!>Ayv8tikK+Y6Y0A{X?>
z33Y(-ydA+Z7v=^^u$R#Z&5YK=b?VO-hX@AAD?uiMNC_2k@XddD#@THARZ>#+%a=b9
z8RN6`Yaivom;oIxhyR?IeY<ep7{4+zEpS-imv_XbV7!@CRVCTQbW$k(7`IOF6VY&q
zy{$uDfmi&Tk=_fdY28B+D?!*0P>r0(r?$PCWm4XObGW@;2tFlLxgZoD<F|L6?wWtr
zfk+Lz9`)D1KQ=VfY{161WbZycZTl2ouK>*6mga`8wWl@2$A?&Kpa$24VOo9XE0dcS
zg24k0_|}}=agW;HbqB6wpkWTxrfKyT9iHiRmYH~aYpTN<-j9uht;ynyobM_~t%+Dl
zt(tY9Mj%gDa6R%!jsQe5vPa&3gP(QS9zTBSYHZc*DY!{KWRNtNjpI*{>mTeZvgW;d
z)_YO@iCF%9szMJJmw`e{x}wRp)V1zDFv}lxqSf~BC}0;SI>9gaM9fjq-qGRS`1^}b
z$!*+0mcEp(C~yOl6=WxR@a5NY`|V5NyZ5xo<~v>BtJL^-juVW<b$4T#Bwcvs5XKc5
z1~b&-!WpY5__ww~j*N`faiVd+ONRIR4ib~(<%z43pG*3<Pj#H;szcC?|Msl+io?dY
zfFg$X`)^Mj4|hIWPs4^5Xswt_haB(yKlml0Xx3PQe5e9h#pNxkl3A82Ux$n;-_n=D
zizKE0@1}REU-*$$ysK#FMrUS7?_5UB=(QY0d5q&wgVAe?E46TK*)%G5(WmX#x|3(r
zSuT5Lqew|#Z|tx9<}H;c#+F^({;PG`hP@UlgsvknPDkGZ*12R?fObC_8TGB8<6C=g
zxnMx+`^72o`a8EN<fe!}?M_!Z((e@;H%`f9`b0ogS7f1oZv)Y%7fDU5Ddj|sk~B04
z$ly%>Jc*6JIW)9^PLQN4J?|RUar@HYg*)*yZ=}Ll-P`qU!mAqo@ItbwpD)<SHDOxf
z<5hWmxN_gCT<CG&alX(LmF|@ZD(xK`(!RP~S1ii_Z)pjM+W!6|lB$#{Il15<0<!(d
zQ{&^s7B!WSq;4+v+P+y#Is2`@zx>_1?RSEP!MlcYF)Ip6YPy-K)&A!#oS&Y)&f!@%
zI@UqXPV`$46jIpjC}F`_tjLp+K6asap(Svp?b%h!zdqKEq8mt{be-y8-(0~KwFTxb
zX49$eHXRwwxU8QwDa!5d$AABpyz!l2km_+}<N%24%fH%_NhsdTd<fh!GFBNmNZHTq
z5~M7StrEloeq)CPyUy<JQH><cXO*^{FOpJIWecw=@EAOBra;P>O5I&|l+fzxi`X)j
zYVL6I{UoSbHF-yMMThP`<qYAySz+U<TP0AHL2i4rTbS_9PF|km^`2Sm9k0xie;6s^
z_?~`&QT4bEr?7AiY)G?y!!nkZ<v08>gxoAH+-`3#9K*9|updKYS9{u#C;P4JVQXnM
zUg<Wq2qrC7ft|CU+o|7p9~bS~+S&r9<{{emr72PWH5^=XnEw2sC`5Aky(ePH^9F?y
z3su(Zz<~p6OH-W{mrkWllYHB!msU_P2gKrQvUnNn^!E@3Pmf~^8?8!^ckJrk58w)e
zwfQ{zIzPp^y|E!<5I+qJeE60B>J<dx!;p}(Q*NWzGB6-se_rr}Tw#;Eb)2gfN&{J+
zgM6dp+FYK==iP%>?u3wq0G5g(HbT2eb><Ss(L@q{j%ZSvFH^sMeK1Xt350$!g-`vN
z#8LJoln`9Ey#lQT%WjTyP~BryIy@SS+khy75*$0I=RI!PiMmX1W$^|3FHVpc+Yb&F
zq}hHK^wo-Npp6s@D}X6G{Kxhl<~Xf@8pRsqYHWd4wE@E{INU)zXLb&Z)=1^U7Tu^2
z)51G(K}O~SKq)>xzQi^G%G3VaK>!(UT&O}n3Xh3IA-%o=7~rkWOWXG3*`d_Y7F#Go
z-Nq*p?kl+D(#vIxxU4S|*cGulcQ(3pH8qb^3vp$D#JtuXaAIN)9Eukg)|-P%*$}oi
zX6`N`LMbinFG?_(mt+^cD~U#1t(6f%uAY3JI{!8VYyIV}obwxNbII76L{NA&2EVwq
zBig_b=UBG0G4txN(1c1hY-*?duYGwcJCWrECWJc}%b;A}ZLFgSI#M;xbexjo!7JmE
zgE@&~wE-uk-2UL5c&)wb^Ec5POS5nx^H`$_t%`*Xt%%J@^^+uZNa(2>8L0;40~K_+
z-&SL#_g`kMEAKG#&(}`B6~&?edI|C0DLh)(2kDmP5n5e=eP`sw`tVr1d)NAl*f`aK
zhsKdRAk<!YYw|tHKNvwu_^yQ^grRcx*3_zPkAFO(OvB0f5j<Q@X-$s2B`7moIwxuy
zzZ@BLMy0f1^GuRgJuir5{}sY>MB~gn_Aqn+3r9$7*n4q##_NtRnD6rW`zkzlBMlPN
z!bD9-kG5ov!Usg_wq@gk$-?sT@)|h?w4+(t7f!;2cmQE0C^vA;IKNJ3M?5KZeHiR=
z@tCc&tzjSCx<G>WTdi8E?K5Z85k0QKbMdKJjvjZx{v@Ggf7XcyUcFZ%oSfbTheTSF
z1pcJ)XK-G$H05=;VUYlk-wN4#9v)(t=+jF3y)C@yC%RsHF{~&4!-qAM>aESOpKLID
zpt`mfSrCdwU+(;k1@>gcgKialGq40ZnDN1k3kRH-kdTX;+W_)|9PS7Ss>3ZpL+z+s
ze(H~boNoUY%64$9f*`Ox{UcL{1zqp}!X^e`oR9MV!1X&0%D%=xKZzxK021~ayP(g4
zWyCqBK`*!s!%z%o`t5t%$HhGk@zGxI+0-p_y3NQq4`Ms#Axj$@lt6aw?#oCxK$$)J
z+`k8Si5)xv)d%XxR>(ngT{FzPMAAJ1S^W3h#%p9Dnfth>5I&)PN`*ZIN(kK-n{bQB
zZ~GAW7@O93a%Wg&>u6o=G%L0#DC20wMDNR#vP-LQ9Qwq}%<S?vYFD!9Pfx!uL>Km;
zw1)s-KQM^EGxnJ32vIS#{xIUZUT^kQQ7D#~P1^M7NLXjd^#nuPvK#(ngscOyDTb3B
zACy+ZwNv|8O0&39We>#P5Pe~hyN}(t^SJ6VxJhX1l<E$u9jgyt6fmGH*U&ks$dw>>
zRC$*l)#44nIOr$y#RU4myv$5)x|e75^$k`!?{1PxR5zv6cooYkk@7DF5>_PTkbutR
zWM@Qt`PR#e>|yma5&EOG23$%)1b*vd;fg#|na~`<4Y>B>$JO7LBYalJ=-gCeUst(I
z?w1<FP>Dw1?UjUGHq=3dC{x9A<kFolHFqu82WA0|p?BaCcOrjG?ytS0rlFUvv=gH7
zrP!?MU0~oseB(aSA77J1=zbh^b#*QD+g}*`u%i9l&ce7)IW0L(Eo#zZtryg+0{8y-
zV^l8eS3v5&GxB3EvBZMhnpXa$!b4-=8yzYo<>1RHjb;B(Q!@%XZ}jz`>ZM%?yz_V=
zN#tc+U7dESD0t{w%o^}#x@Sxye2|3Fuqjf5<l5ld!agmHk5gj-jYueNzFY1u9l~rS
z?{pPfbah%M&wJOSv$C4d;sb?1?#c_5<e(n%N}CwY9q0Msp-sN90(Q0dWBkT%WCHg}
z9CEmY7UZUfRAxR@J(+EU#Yo#An(Hehe5~L_OLbmEq*z|C{cYj>)YNupUamBwfi{$@
zBGTT#e*uuWk$jg3K4Px?2R<=a@wff}f$mOWq3`-48fTKs{XOU6`NAld)xgm)Ja(&f
zal1S1s314uy1@v7)}<G{X6!$iW{=+kj;)F9uU%O#irS=paG7Cg{by?mUCtr3aQR;D
z&u63Noo}4BZDZPAeJK7t+bGYN!=16gw6672#!APMda^3H%J(syU4!q9ja#<%g|EYQ
z7N*)#yOCg8>d^0aHM$xh-Or^+K9hg>qF-6%|K(Ygo{<p=Gm89r;8VmQX<o8Tf%Z8F
zkAKSPmQs7UQ(GY>#w=U@vg+fD+6mEDg{FRfW(mJwOma=Kfj{H@i?|*;<M6>2AaxK(
zkbJ|wRU)t1_Yi3=jI^|gT`nn5%b1o-&%=zl#DV03A1`c=P+T4$B0}tv!68Dm(<hu@
zme7}`;A(0rOUf+9RR_@~^1=qbC4l<&4Y<J2paAE2C8|8v*TZ!ybCZ*CS^V_1u)WfN
zjFC>tm-d7;c6%-8J1svFUFQrQK@Tu)cop=(KF79{Z2&L`!i#c<=Yv);%&PD8D1`ix
z%2yF?@ZqPH#x@@<C$gx8Vc3KsrIsVSCmxVicuywth5dhhWzK`&v(#(OdgYINt;JtW
zdne9|;S?TRUvNSMy(=x|{X(T0{83{?jp&|5LIh_kn{i34>+>Ma+5@nyPrKp92WH}V
zQBiddWmi4DrJeo?(mz~ZO3CUdJ!@E%nJxtp5!aB+%^7p)gdXGGXKZ{hmPLVw>Yh*G
zn3-|L+lmSzIi|qix7(V+zy1DwRF>OI;+p(1+Hxg1$<s!x;>x_YqH)<H>92C(BSYo7
zRoV|Lx6XSwbQhTZ{q-wx);B?cpsBowhy2Avr{)130<$C{>1=tN*9O(NQHQ}2HATup
z#r*px9S?+6Z4lAEo+5jPeYh(}f95APS3%$Aiw8)Obh0}mT=5$J`%@ROvFszr#nsf)
z<Am^mY?D)$>>q%ogoE3@NcIZ|N&Q9a6oP0YSj?9ztFEgxn9-wIb_aB!qB|`R4Vg8t
zIwQ$4A$J{1K$Ul_KH>SQJjWsMMB0B&ZFQ|Fw)ol(N9GrLaSx0HE_tl7@!d?DFk>G*
zEDD5;;q>%%=lORXyMiB^);0F!!-&G+>~6s1030$DKe?(lBAy!W4{;ftnh_967kAjx
zWCHR{xWJ7P%a0>cQW2GvJRAR{#r-zj=7&v}IWM}YT_KRMITiL`Vq33`3sugwYX>H&
zm5c6$hm#yRg4CBUHw<s?L={jtouUAko@-V0{X2R8(6fS1B26dYz<z1(<rlFVaOTf=
znz+$@wPU8?z6FF>hnBc`S+h0yHQ2`H=be$qz9N{u$on8HOz(c~6!}*0-_QR4hXsf(
zFX)i?ZeIRY8}ppazIs(bYHM6s*XpTZbEN-vc=elz2@iH%Nq+{bs}%kNFDqZ~-_aIE
zoIvlFFUBiQS*F}m3EYem8Q0^COzlE9S-w24#y2A*B_;J-)p_)2AC;A5(i+FtXV0%P
zJ@HvS^61M<0r}o0j*jF@6doPd#$-QX+cFS-^6+6vG;?;|gIk~4-iWBASczrtQ4MKx
z_V~8R=+JgL$1v90`$Q|3${ozPbjQ@re5<S~UNJin;G4<~aiatk!H4Uy&4$PK5m+51
z@f$sJWcuQXE>kx>Z+f$l2E9E5A7<o3$O&Bbb5p2pb|#;)oio0m{l4klVoLOl4D_Mj
zsM!TNkKm^X`iTPZ_YQ5XaTW^A6tJgXpdupp{#%iWDBvWk?Z|_yk2@89*(!lLrSAK=
zjO;KSgc#oBIu$`c88v<|vJwC|`j?CQk?8oAnwfyWnSC#FiaW5XhoGgchyWe@9Q#d;
ziPG9#Qs}7WSJmld!(6=u9Rh+6-@;^wZ5tk+_OEYfKuy7|?StkWXx?+TjSnBLO})Ea
zixT??{drNVCX0PWQ^PdtZgncoYKi4A6<_*ZBZ-TztRfB$Flc=)EiERNB(t_UQjwOP
zZv8zyLJH-|uAxKM%F?hphJv0Lg!%zZ>!L2!dvA7s?5d^JhYxMadk6@;P7j8XH)UrG
z0$!eg<J;Nu$7Z{-?^~T?A6@%O!LF+Dd^`R8=M>osJo=09F!rvxMYg?uZ3hEWIJW?I
zm)_W-;=9zw9vBjm87z~q)0BmmbM@E4qhi<5#Yx`QXOc?sSzn5LRvGXXt^XC*%llQ1
zU>Q4L9T^$2$GMEV+!rSpsjQCQFXHF>R2Cn4h>L)L;MLuO%#pee8F#i|ekirG=?Wg2
zxnB~Jf@g5%#tE3B7Zej#<q15(um)^p6<bG9SsA0~uVOTOpG=^e<TfgjH{RG~WW$i!
z)YO#o;^sEY3xQvsI(-^vXT+;l&bZ%nVh(Sin$JGyx4A%I*gJ+QZs?8OU(7}TI$ka?
zG1@m}ZIM^6z-v?=AiYcwU`Rp!XY<GB%ZnoYh2^f_D&8H7d4AA^={-BaIUO&rw^U<n
zLn<9HFR{D)U0OmGvo0!j^yU17xTF~AL9|fw-^wB={L?J3s|*wt-o#Kwd7K5E2O}kA
zvEP<4FK@2r@YMRRsQINSX%(hQ-}QTMs(1W$;EfH_im@S2pYn<dHM>H5s194~_Bkt2
z)<f#W!sL&6upEN)I#Qy^X{aX+U~xq?A%mS<>D`S{a37cEt6#l!nY>r9Fx|Z--eq+8
z^43!4(qa0suhbIm(^hxK!Bl^_xw(1w@RrH#cc8Qf1OzlSHDQwlww3_^9Q8^TsIg^E
zrky^e%+XhDQ|s^Y7|EYMK)}SCNkJ3!`6zMVN$#^}<-?`rSQE4^OZ}VG#csA$SlcEv
z{*xp$xZX2u#{6FJqKL4t>fWC)G{pJ)7Ow~T5@l`|jIo`ZGN~&m2pigr!^sSUlihN)
zia)<VXw1&0x3GCCWYiptqU<6FM>u`{e2zo^4t*0nH8s0<^htVp;4!&YIpB7h`zL#2
zu#6qP=`iagbrWMD3``&;1}U|p|3*S59zQJQY%DF)pE>1^&(H7t8NFa>Nx987_IrHV
zSlvD#<9!)LAbC?1fJ~;$Y5~*p0K$|Uy*Jlx2JYP#yJqUPN2llCL`($y@Ymaw80QB{
zbZJQ44MSA!qtOTE=()Kz-_<{P|51K^zOP73%LG<ZhQD`HK&Vm!zHGDAJB1rfw)>Ai
z=2dmz=p`ZJr+lX%#{N$?UT{a!?jM!`)Y7jqk|ttMoViVR6~clgToK2onN$<L<nQ6C
zCj%`0yokfw9`YR5sa8=}J(Hu-aP2vnap6^K2qvKGk9`26J?)+CdHS<Aw1RReo<F>Q
z@wrsV&GAOnyOm?VZ@kdlDa3QdQdH}bavJo+A@?bU^Xum)y&4)jp2{ouFg)huJ9p~x
zFQ1|M{ySQ{>~@h-Fs8(pWe<PUR}4Ja{N+mlwq<jF$y*rG0vTCf`F2X-{yX#zCW>Tq
zD+=oBvycm8LIWH1D4dj8#V~SGY}t#**@FiUs(xZ&b5teXoQT<j#{InSnsV~_<?|l1
zd2GHK;Hqw{|1_Vt{A0v_K3>pK;U1Otn6s6+q91Zt20ngNl5MR2dFDEMv9e(Yb5S7)
z<@;*4sUV5FWcQ`Td@%2u?u0%3%Us5FRw4VYUI0%Q?Scf~({4|wY|I&h&%X(0iI>-p
zt>0;Tf4kx#UGEu(KCNbQ?j$jXzBRnoDAL}-#aDV~7D{e8;Qs)K@~p!0qAP``254T)
z=e|<h+FBiHepFOa5;HxAfCe}IA`vG5Xh~+C`vUTCZn)&2JpmB{z27Rd#s9uJyS})X
zJT^JGj7_SAVS|LS@l(MJRObj^oPXl1sOAzgHR3Zb+21>yr9F;T{AH%Ursh{HmXqQh
zl`fM!IAI_l{{B_^<H%>Z9C97H&5ar7!NHcMveqL~YbkK!?idCjinXJrp%b6QRF{!*
z?J1{Jll59hig0=>!w5-9&Fsb6JGT;OmirvmW4Any(B4OqZy=#GujxS5rNS|tzrFMa
z1gzJQF?Uv+MgRlKKcfJBS#VSOGE{Wgw?+DpS@TFGp(FLezrFhw{kPX&TlHejN{Zc!
z$D}V4KPbJmR6LNlq<ES;KSH%fcEI{t<Sa#WAO>j}UBz75X<dTVtzJKq&2ad~5oL{h
zg%X?rX?)h7Y)Im<bo2^Lyr()EFy_H*O~cyJ+B}gD40pngmzBa4+^@_d1l!oF=r0y|
z&O{kMZ!NI-f?-GhuF=sEZavlXH@-VtM8_k0&$Z9Qb860Eb?2-OY3G}itLB6NtkhU)
z5p^D}t*KEl@IsSjpYBlmZ{DBDKewtfrzQ6kY)!VvqJ})CJ24<_*^MaRApjBCimEBQ
z_48*Meq&ln%D?b@R#H-0midfxA@uI{yo6}@4f}hP;5<YR{nlZC1V*K_&V6QExvN7W
zaCSuuja$*i>H`i-%W+1(M7}sOb8~Z}f~fZDGNlA(IseT<6zF;!T7OgzQSkUst-j$!
zay$-6odr4xFD+%|u;AnCw5sju;hLWG>FJh!8+Pw}39PFhbY;KuobSo)6-Olvus77I
zI-^QKQ4v{820WWOD+!u!wz<M@z?Cj$OUc~t+#-%(RwX}fe;qJ{p8iriot+oaQdf83
zMQkLiw!wbvSxGuyRcmEar7`ngxpaHEI|25Y8#Atuk$ZZsjy0IN^Mj!Uyi4`Aqc!1V
zcciH{*@-T}ORv8pa0~m4_iSHOMp>Q8ij(Bx-Y<`rzeO@%K+W>!@7HR~b!~d`%&i-`
z_<2m;{>jodXWuG@wzwOJdU$`dT{o*cLb*D!v{|>fGo|`5)|#rusRjh59iIOE$C}Ib
z?AfLfkcgHZTD*U`!Xr7uz^DqtscbryRJ~+L2*;ka+<!$NV=(4J7g?;r0Ev<6zopXB
zQq}X50B`KleW#)X%~Zbe^M{}MkQ;rq7d!uvlWQ+^GS@^rtUOzx>3YB8S4l;YX|}ZR
zk<op&Pj&$1z^~a^2TMzS?+bfVH}iBqirYC;2(cXyv+w#-{B?hCj{ar;E=>G@BMMa9
z%V1=envlPkD6~-gRZ7Dx{e)4HRj-l<N%j^M|1?X)tM@0^kE<kG55Ap`{%tfAGBK)c
zw!+A6+Ku^-sN(=zW&(R=iT=l3BZK>bciG=4seFiuwgF3Q**P?(W#|@WA<Wd3IMdF7
z;zm+Mp&GY#-s}ho&d~mfWen|0ulIWNy%t1%?Mk;HE4w15L4NgNqbO@SG+1*vtJ6pP
zp0L*~^739T-2_VNzqL%`&7-1On>yPY^Y+)6j{3bq3Sw#|@r4C%x7E2jcp4eE;}f1~
za#dv9r{czq$YK&_Cf`dCSp_PTu^-%6mGU=p56GC6yOaQn0e|J+)XV4AK|p}jZmV=y
zocITm$;SzX)Z9FW>BRJUy%s03G0e(ZR~5DEu)+upb^`j8?P|SBG{iBgRoAf1S^aED
z5FF`zxjpq;_jb-*eddynaKu^Pkh-Ynr#|T<iP_&T9EI4AtP<jb&$Bxoq~dBr$7ua&
zj4-ucPF#HV%$(Yr%GP)xbnN;QM!&VF0T$|uLj$VGS{*4A{=e*=!Q)UxN-w~HRaA6#
zaq@b$FRh6B*klN4!tL8zgM+HZ#x80Zvq7%JdkC7$+|JzA*3TYecYh6Rmuo@4XdR7Z
z<m{>28=7--)~M>^8l_B4?~}p46B8e_?mgy_Aq_k4V~j2(&cr`!TvoBB)R{V$DL$rG
zFbn-*x%@*s4cJXfn-9F4`?DM?;FjlK#t^qXbgQ<mE_TVBb3NJf7U~AW9&a2XI)q)-
zl{vTK^c3dZV;Z3ClV~4!QB-^U{jtM;?iF#7O)LK_BHq`p_?Rcy&(CP>89|X8PBbcl
zrX<uWT+)C$Up>>{R8cGnG(LnK`yy;0Fo0*5%`&UnU%h?47?}stCW4=jJolHfLWv5{
zw6{brNAG5T(MTrmGTUgnQp9mOx&&TB0qxN2JWW-d`E%^ZPezyC|KND_VcI|811{@}
zahMC^T+Bd4!M)5KSJzdcZ)wKkIn!Ug6Cgi>$M=ACVRCgulUC%%<t=aBDP*-Cqxf>|
z^TzL*I|l$z^)j-Lz6L~vf{#;uO{#rNCyn8`|H7EUa*HS^P=*1$Uq1fSj(;H=$0v8J
zzA(LC{_$Ssk^DUbUXJ#?1^R$o(A{V}lThJN11|)`)q2c}Hn*PN^3wY?Sl$WJ24nqS
zfd9{;Z!~j-E8-47yUC}YW2HKzDxZXvjDfZrKLrP5s5{&L7!NaS_JdjEzq#-d%|lM8
za6GrJ4MqhhR^Wl<pgIH6NL)t|9xJuZjc)*Ao1)CYC`GK=d0?}fcmog-CAGbl{$M$~
zg8osNr{lG2*Or|mk#XYbDOd~|Npp-p7zPpYEt*otnT(c(JV(fgy;gpgS%Oz^IaO}o
zvH~1rzhg#JRaqHJW!8aD{_^C^*Y56J=0JGk`+rXJsTZVImzEqr=|t~>!T-*3Z#vuH
zi#Mgf5?_~;#7Q_fJEMcBg0uTRuitaSw^QiiKm3?8<H?NnyVcOxhzr(tNpX@Ts&xpu
zp!Hq&=>K5>io44m`IrF6ZSCy`GE_Rz*A2bBY1v<t8T}qk@4~J>Ucs@3&wLo1${w(&
z*G5BCRBN+6DMUb>X)l^o6HsUAR#*-a<>B7qH+^?0ExF8d=&Lki4=SwVB7WLRQzKa%
znRqi~vzMM8%>MrQ+18WT1Gsgd<&41RR+VCx1|t9V!E(|skF(9g`PWcG1Lj=)B)D*<
zaBZnG5X!ub?{^})2&JkwT_&JngPUSPizLH{H|KV=2yi{k^V4-lq$7#AYS1IOP`m`Z
zpUv?tmiG8@oak&Y&m51Cjv~)BV?E&YdFd5POt_tv%2@-G^XeY5Ud4yp4A1O;)A;r4
zNPoYq_dfLZi_)H6US1X!H||#4`xoIxO)c0sEHy;4cb`lA&#!ktzEGcd9u-yNAA1PF
zsU^k5@xoC9anXKBi?SEr86<V++Xl(6o=>2LlbANP07~kQ6JM3&<*laA@v|e2Q75iL
zx=<r?I7@N0mZL)I_{@4H$b%Us@w1K&9p7Hw5<f}uX1Y_}bH+OxRhoS7OBKQO+s*em
zoYzDz3eGns80e0?ZM_x4+rO-vXS88>(6J-qeRO}(JOAHaKwA#)Vj@gWiqs>sw717K
zS8PN$NMa9R)VuC_fnq3&qkp;i(pSN_Su$tgo@;6D7w3m=nVllLrzi07ao+6n{d+1k
zh=XMwar!8xk2m0m;Tf>7wY7C{V5`_PznMTwKoHP~M(?RckcE8kkHeeszvzy0M{tRV
zbXrAl5fTu{82?c?*i^%Ibjry+Q-k6zsvmU?5wFCP1O&?BjL(%&@9R?(oQdf;E!Qbb
zRzzJOd~iZfhpx-(gkJM~Cc%)s1O!EiY*l?k_7k7}h&CByk?%dH1E-h$5mXxCl~k|%
z!ubgZ-l*hHWlpLRy|dFvI?Lag)y4ZLrz|}ser^A54?2~3x)A#q_?>#yle-wCv!J)E
zu<vaJ{2<>$JE8koCGvYm>FSx&Wgbz{)5o;*J@?;MV0ibEWb{v>-~IRKA_3k`OT+K#
ziOyFL;1E~$GWsIMh$?T0y-{cezgc~a6gZ5hGKFQQ1&IMyL@R`#XEb}q`O3bV=UsG)
zz`+(7RrgwKkl<mP(tpABqB?|Gh!==vXq>b=>V}54fXXy~03#GWm&La2d)b?}KI@#Z
zY3+Mey`6Jow3b^VCHXR<KO@Trht#TSSW<5_Wd)rHJ;?lL1<_VHdc<+TGFgY&;-vlG
zv+QW6?`~=kh<Cm+NB8jRD63*)eZ6wh#h@g;X>^Nz_|qgCoWS_)z@1ylMjl0}rbkB(
zTCL&5fjiy%0#|rbm0S}S7l-wW`=zVb^z^#Uj65jNPB*}KIze#9^aX$dy%PJ=kk@k5
zRqwo)JAZ_XEbg>74noZ66d!G>0!~V5>F+PpPJgHIxGO<vT36LeO*FF5PH&pRy8Wc!
zh7BH2Sr5u5m}zlKXBu-InH;h567Aom_3bk6myaGh#=#GvZ%kz`D(gLjQbrXXL!k0q
z@6Lgu{qphC&ci0xu5mVpMhjtkUc$MGBKT*o`L&iTR4<zgAB{ad%fczE{ijX<m7AOG
zca`2gyM^KmbnXh|9~$K7sTeH(o394U`c&9@+Gl>b?9H2}65i43aOHdzA+;fcFX0>(
zyLgB)L#I>i6V_nSL}WWOqez}DSUXT@g!y<>==nSb?#CT=!B;ny7~ShI$-C+9u0Q5E
zbQ)n~Q560MM}DBIRyo0E{(cj<3LNiwAEHynK<IMSEqCj;AdjJbrx&(*eF(!tW`3I2
z;SV3iG3=7sQiDPzFpepK&0_OY^V`e%m^eV1U<ivaNYR^Paa(|Nfue1~6Z&8;K|mfy
zW@UoG-wwP@aq5SIb=YA@p9qIrOxRw&+>NEj$UZjsLUk8mHx!&FPoAu-tb`>$r)C7b
zcmV_Fi@)3dw&3lbepoFV-UZH97T-T;-lGvLsQ1?#DusSro-|G{+kK{|onP+S;zW3~
z8nsMrhFF&WXuM$c$)uKg@T+W5kfk-^K+h(GHJH|?yBjN<iIP5#qHoY0GWB^T;T<dL
z1sqOZzP@69Mc<P_<p^pD<x2)qDgioKv3X5??ATWL;*tVyAnp-7On5We1MJw`BAieG
z?SS*SZ{8!=0YqI@0FDJS$X$;~M@N0oB;55v5C8uAV{4Tz!*Abru*QTFpw8E0>yo)t
zUX%b+vO~K|g2V^hhS)1AiSHDarv4T<c@)SVdD!`iJVz&++$JEw(AwE~9#3AYITHSd
zpPr?U_?v?*z`o_d$oL!!6$Qu5(b@(T5g=>?!rCwP)gmw*e%84z)?Z<fpTiHUvW~^s
zev##S$a+^q3oEQu>R?3Tg=)8RUoFZ{AYDRs&#{AGmB3Ex15SE;O*q)HWfFQfafuY?
zW86JAH@DIGiG`wsz&O6(U@FxLCR>?@VR^@!N&2wmJ>9w%Jd6i>dJH<ggER~Z&*;R2
z=#^S|6;D>hLxvr#U0pDK&#B%LyEfg$m?3f2wk;A1M#Y&VAu0RR&9POo6Qai8En|d4
z5&r};V4or-mH0G#C8ijw0mEGI%@vhCD))7kz{f#@LFHv^5iERyx2b>P-4u8@eFLys
zcOVWVup7Y59jK|fiB=k4@wQ#x{f7_FdComO?_h2H8z|ZyQ9e`ZTFl~q-Id;Qvry&S
z(*vJ-t7Zx_GkuiID>Vn^KOLyH{?vo?RGn|28|Oq{l-?4({UJazS3j3o<<&0MY2Q6q
zWIcnK5#S|`aJRnKUpdti^#JH#omH)x?SxZuHp5jdo=c|mnuP^Z#ksRTjyv-X51%+n
zNB6ITH{?axg?;^+cvzTf^JEXd=R^8#Pu>WF^h(TPP-bRGLPCO5*IlwFU3=EQEsjTY
zc8_8uH#TtV=(Wahf`&MSd7$|TVkpHSsn0r`z@_br>!bS4&+eb1yPnGvS0=yu!Vss7
zdevZ-6uN!7GX?Cwtzf<KZWL`-_F?5oe|R}wxpHNCss_G@TPxq%;qv&ptjv%zQF!tI
zyLEWli&pkMnv&w$zqNRR7qvb@R-(@^eFIAxuPtl&smy00tNwi7sZo+Qe~S~L`BSQT
z)~rss=37%^qvG~u!%$@3<d_NTH6L26QaImb9vL*t+`0Ek;NAt!MM>|)`i9J~0T!PK
z*wVo1((PX)A3r}k8P7sOpxw`jrRv-xw>PE;I5}U+(}Ou==*IxG&`(ib9w1&CHZKm2
z?EKf|<w?G0^h4J@!pfd(YMwlvq{@^RExN`{;?38;vZPb@L{)11o#@(hRc0-htg7X@
zeUJk(+w``7vXGBCvO7C_$MAa5QFH6S_wUp6>xi$c-dsj??S%pVU1;i^3wv~RV_<Y)
zP=Ipn177_W%cWn=E<Ya$(y3la1+ax|9|jSdS-dZ~dh6yPS_i4Z-ya2UNrH(<>iovq
z+OHG11;0i|qo$2%GZvn(M|R>~si{cBk#x9>hnA82JjQal@U_s9L%vrW9Wx1>)7#o^
zh>N#~J9A#Uretnj{Zex)F3-x+()0~iS#*nl@NeE&y$Rzor>&2S*Wr!$eN=n+>wNPr
z61nFznlC;CUk}Ige?vg4S(-da39$6*(??&X*|w(vHNirQ2g^oU_Z9bvqemCI4bv|^
zlZd;;gyebX6(7vm!F@v~o0H(&<5`bWBKHMlxxz-Wty=o|nhYi+?QCtyDJX2L8=O=t
z9VZ_0|IfWsD=&}31i-k*x)%Lt6AP6UT~fJb6-*nD8UawosC3pd`<OwlL5aqb9u>~N
zD=W~!jevT9!!e^2$)iSRO3kaKcFl-xZ#>A)*N9@-VYto1UJnYA`8zk2=qo&B$6|w;
z0miv&a;noh+u3CkICE!*qhnA|P~aZ0xq4O3o4h}AQ*dR;E@0C+aijUL%ohr3YI<7Q
z*fY*f`<w;U)JQ?*LT%?cFV&W;naJ(nFfnsm*6H%|AzFDw8@~`{K0XY`9?-8e{lI`B
zIhj7zFy$E+9V{|wX`hZ3jBT@;Dm2_LEGyIaH{0IcZd^dwB4FQPadBzWJ2E^xN}hdL
z!Zj|MSxV}?her?g+KrcaFV$Z7M#fN6P@Fh<^09cCWD>da0hK#@_I%CH=g-d*b`ACM
z*rp=v@5%MQ;Z`(J%|%M;y6?kv=9|jf<nkZyw}0t=3cizdh4r`oh2UBBt&Yu!@M<W}
zK0ac3NlHQzGmw&;tnuT8EP?aMe|&)_HRYmI_U@ArV>M5nEIv-PB$pEsAOFK%;|cxo
zChm;I7Yv~kCr&uo+D77r=<062+A}OhB!@ya(l;>vRr_Mxc|JY~QBkdX>x=A{_qgos
z_rBubU}bO56Czu{LRgtk985r9b#7hw^Qs+zj9C59H&h@5GU>bjn}8rid-tOV2->*z
zGVlJ|mI_lx{3CiV_rczCW)2P}%F4=KUh;Z+ZjatRy<Pi|@*(W&^YZczk(Dz;2>yZY
z0wC$q$jH|}zY^x>@gc@RT|>jAp6nHS38vH`AtBPxFAWcWX=#ze@BQ#Z27moEjbKn+
z9V;nS({+cZF;btRjk|q{Ffx+zIYvcEX?gv6KCa+<$@ob*rkBwJDH%1s>n=a@M6)z|
zOnRhQSaeDic0cO65<V&eQWpGX*U2J%7peY({qcQ$CvU8<;*T%il_8!`1_2Of-&8)?
zvvaN-LPA2nJ3lry!a1Ak{CVSM)gtO5evqOL;@6o8?q!Z-4GD!QapFr+517{=9=7z&
zn@8c{?at2dng$*jD_VgoNmqP``YO4D2(2-gw^z~{f#G0QudQ;V|5!f@#-;?XXm)2j
zX=!Q5X^y5Z0S^ygIOH4`I<#p7p3;f_5@G)g?EWvNtjG#sms|l?7~_Pg#|otirMpwp
z4>Jn?`{iQight24T*m4P!8G8Y@5b;DTA&sg00^i^2cZeN_Oo^umNHiMU70nCV3<F9
zj@reQH~kpJE|sS+4JbsJ)fy~Gf#JHl@tyVh(}o;`h~pv#zyG4PwU=h}{gb*>d~5kJ
z$SlL}+;f$q(m=4(9Jp3wb=jq!o(h*UEKDT#-BCB+xErS<yEqRM6O)95$$n%Y!Lq8q
z%=tOoO|es|-@DhbwzW!$3jUqz&(ikv>h-y>HRXZ-!vZQ65GJ}?i9V<Ji@YXr&pCT*
zYuufAVb})IftJ-R1vETwr5H`N$`jzg^X=&sZ%`kUV#cWQPY-uC(vh5a&%<2`F6!O=
zht@K5GF3s0kBf(U1uHA7tLuG~Odvz*O6%i^8{~wb(972S=!2SNaiTe$_ZN8O3e}9q
zC#R;2@-Ch7hPdmQ>T`Us*EmMqis#N!X&u18@4|&~XTr7qYlMJaBqVrZd4CpK)a+E~
zwPJqqmo4%N+?EY{uVyc$3&u&|{`_gQc4Qiili3qViS_6(_!e=GyjvT~a2o!O62mPW
z)5R0y<SD~Na`tyX0lvNbzdxnV6f5`$XgVU*iY2U=Ov|JQ|0q`OY#+cNan~3%U6Bk0
z=ba$4Uy3LbwGRet{j09VP~6=2)ZkaN*?x;ZzwRt$R}=j|_TD_6%KhIP*1Qwho7AQ>
z$h1%*r6@8K7MX_-c3BjP3YkfXEs>Um%=0{DO6F3@qEd#0%#<-Q&+hlK_rCA@+~+>e
zIj`4qUe9y>IQ{eM_1m$obzR@<`~7_0)2A9q$65;;v2u2YXnWiM_y%b$9zyUb(jV|x
z5WOyzIgQHPMY)Obuck5HD93=ZYOm`!tanrI0{}wWU;=kHZ~cN&7{eh^<Y?#Hz1xy7
zMU}y{VgS~f5HeD-Zt}zZrJwZBIacN@Ai4-*^nymwRa)Vi>z_kD1|D$u$B$s(du+iT
zZG{a^cl0=M?1EB=5*O^>M9_Q}E(Qw(_vmQ|vIpy=><x=<DN;{?+p)nFqc}@LZ{*{1
zlSHC~hME&u@~^dUii)04?`=vCY4QMbGr*3DFm*dZYGqraPdRc%Uz~qV*t*4KNE`>2
zVYy4HkB=fO0HGrN=s`j>q;~Gy>AqSfz{T|%QL&NdD(XnoXVp6iwC7!R>&019%owp>
zS!y|YMFl0i$cYor_40y;PB(PKSeLUw<!rUd!3Go!>{3C30qBVmsE0&Ea+N}|Ao<xX
zwXz6M3+x4gjQFSB8bzPrZjcN}zB_O?0-rxWAytvwoYl^-eY^U&Mb^b4w_%;lN^<5u
zk*(b9Vn$R@7(i(f_^h@tY{M3RIh=+k<+lGqbI%~=7($_|kk^7#SsIV61Jc)|4ls3g
zCd;7IfeLgIUUWmTTC|@QjVXjtlecam15d^6cJe06;Cs+&<<{SK>=3>7WtWwe>7G3i
zsODXN_Ehx0e){yO^gXZVB_Vb<37_NT>*OD~^sA>)!XF|BE0;k|PL3<`+`8PT*N5hh
z0=vj8-HG7=i?gc@WzJ$P1Z3(>LJ5xTM~liu+d3E4G1J`<`+-WFg=gu6-B32H_sieH
zw?dBU|8QwmV5QvEo6C)Fkdjk$OLY1C3P`b;F{unvD6AqQ9c9K;24=y;bW+{>lg=}7
zKdRq?wt#z)e^3-|KuD>OQMN+d{&?Qw=~-W$)Q9jU-I<`Ttd!|b4h=0L-(VTN*;}4&
zRMz@EnyCyM1agC$wi%+i`v$V3<oR>>MVAIX(PXgA@3X>9(OhDbM2Pa-l(|brh+H8y
zW%U0ry`4LA$Nl>U!^S~*zXdbs`k=o<3VA)A!s4uZT}Ou%YDSV4=AV$xJV4)~ekbF~
z)vNo*s;<=Cr8K{3ZB27ubz|XiSp~;)^5jWEsQfdTzjpEc&H+b`xUb~Wv(}t{G7hhU
z@k91wQ<#egesgTyW#~qn7DU^PXOAA&^-rpx?sIKS*3CXlR2g4#><T_45y<HI)<2S>
zab+kE-NCh<*VYjcdnkK2165m32J8>Yc_4C8k++47W$)hKI5_Mu85Bss332gYer*k+
zjmB_bb~2K)DCS|uuWKN`3r(l+)sI*5%$8{*LouENTNvRgz<Iq<-cN$q*3c&vH*Usu
zxd`T;>r)V+H|zB-ciGJhzk|~}O;9o_b$AH}uXU#+W*Hx|&=M0CE_nJhKvHU9z+|4l
z6e>9=N<XfDK~E1e9TDOlAP{nWXbZ{AKw~#W^s1Q|e;azifa{*#-b(y@no0RC(G;4#
zbYW?7ow~ZZh6FA%iQ!#X!P5)Ez-1O{o3(sSYn&iwht<~?+3aqqO?@50cl=w8sZhZd
zwx$yMW?;p`b<?XMK`u-_3h#+T4RSU%*?PzXaYPLj);<X0?{7s2q_eYuIUL80^OGT`
zPoD<z0ly|R9`}O}g;zIwfja$^p|^qQQSMNw^UR*-F7rcg_swcD^E;rMX8Og!C^x|p
zLtREkuCZKy!y7#XKmL5z%XrKJ3fd*_C1GcgnN@|iIPr}A<Tnn-BKS1gvJ8C#0zS$K
zHSTl2_N<`5sx{w(JYL{3`Ay376Aus11ScTBk6@Quc~w^uks<&qaJk#E83ND6?X89f
zF6^gf^SlXB;*7|s@?l9vJ(aFAjfj=7)~Na((y(nh*S8Ob`p>SJ3kcNWwWw~eu88D{
zM9}wz!hvY_C?u1Y!Q6tr5s3*N7QHQbyQYju=07K$#cjSJ$#F|)Xed>eLoX3~OzoX;
z1M1AE0f4&qq^1M$NEj?OIA8rDeGdbezpV9}_C!Q(10p8Vp>5f`a=`i+VQbBe-m29V
zuY|o9a!Ee;;?&*CDD^>sYfF{E-C|_4y17y=@5ITIE90;FF2Cs+%Z9PU4LApI`01hP
zA5Vl$n(Tt34NGpH#<*Fi?<?lb@-ZVqIoNg@5L3X}zU(K7iEnz}szysOVTRbdsbPP!
z-}F@V4D_z(+32~q&~Ku<Ga_d}2W|%@JVdu1ny%1A`E6jZTXEZ1S+i0UcH?}_<l`bw
z-IjGilQ3Fp!<KTquum_)5ijt@{#WMAbiu#?3qB8fhR?V95DlgUu4y<atD&|^5K&T^
z3_ZFlB{^lV6)69XojWD1J2d9^>G(W4qmFF}wjX`(?T5<BEJxa%;p507-^H?X>3Pj&
zSjb#Pr0`|U*bIEkLF59!5yJ&I%N#NNAucmu#D28Zk8$_2W9AxT4XT|XeMJs8m(~SN
zOgnd!nohJYzGA|;+i;%#YP~`IE@ClRFqzAR@j|g}!K1oY{u~BM$00Eq!jjTx{{F_d
zOKSCN?+>Fi`9~`Cu^H#;LpXy%hNlK?000a$Bs=@D8)@_eo>y_bS*)$0sHb352GbCg
zGLi4TYIMwUr9w#oTK~^gRr(#j=bBHrsr5X%Mc?TDnA?{aUusLPYbx}+=3lxWOxj3W
z;oEq5x3*`?i6p7ei`p199ZXi+daWS|QyVhd3M{i<SG<~GU=wiwxLUlm{w(K;s?;)H
z#TcqGK=H(~<7G>g6i?M8D-l#?A3x4%rg^3guGZKlC9NinC*%zvP1Y4~EIg&)kd<L8
z2Yi(FtOA4-qyylCue29WqdJ%bqRPuA@~PB3baS=1hC!fxL1|gPsw%B3srH;892XWo
zE+!V(?zV?OPgfmPY-d?v+1!BypKA9D8aj}DCymU8DEE(y@ZC?kyNLsh2XCO_G3DIQ
zzKv|bTKn0~*$Z*+3Xx&<ZtUn=wOlTmO02&}jH(I4<*8(j0G;fve$2xB3Z3?J8<^`8
zmnt7=JS11foMPO*{qc~V%rAnR(h%#E)T5?))9GfwC#_I^8o><^bx5UJDz1_ZxcZ(K
z7lZI+@%|Lg+g|S4+*EKCtKxJKM1HkBr0E2g<R~qIZvfv_6O+Wf*;=XOx1(*d<Z?Cf
z*|EioCATMQg}hVVD5q{j#;a_Nt;Knbnya});?l{>W)({!@|<xCH3|LwWNSIYl4rVN
zdPEBOBPmeR_@YK`dhs7G=QK@7@0;iY{Y%%8DEYNXsfPfK74MoKYTBLKJwZQQ$Jtbg
zC6boiC%>;uK<H2MGHK<K8756XIdZA~b7pwqwU+#wy=LZ*MKNLKI@Mc*s8|7RvB0|X
zu(}DR_4Ms>ANg|g*rm;zHW?OiPXA!)&(s8fVXn&?_~-#;j2wBk9<HQXARm$AY;&3#
z5u}sm#t2`rBA_9lMpwMZuJ{lTBLzqir>^VrG~d<~VkPfnVgp^aH;I2f@5w+NFkA;#
zW(K%KKgW2?0;PrGbn+F`(S+)QZ_?!gv8@rO2gkdSUbCPyK=zC|cZ_?5v(2#~H%7}z
zO)&+m3!h%@^98LQZ~Y=C%nNoa(URi|R=A|b=!x=5o9W?>4<A&9rjPit3UEq;=2g;8
zcOsrXf0vkb@pk<qL9M7L348TOqalG@wPRHS)@T$%4NGQ}qn4EJ)0_6kN{Fb`$7pqM
zIh}Uw5$c!Fv*m9SuzVurE_p19uywwnwN;<J$umjfoED>DZiU1ru?Q`r!>O-_j_c98
zl5d%64f#5sT@cD8ot3KK_2Eg;NUV=LD*%AHhH^8oQ)%YZTi!_~HV$FV6+vl<l8ZoJ
z!bD7SPjPvH!Y5vSBF?X=&|`s?l|pFvoH5@!_mgF;V%0<Rne{&709tYi>if5kR#zZY
zL~#T6-K97^1eV%>YFCxwfR8Wa<x3$<-GfB(FpE+?<_!<zn@goNDD_#^C+MNB!Yk^G
zmlJ(%Urmrw#~G0{Wwu%Ts>l;JMS{#}ZCL}_cSlF<g}L7HrZh*z7YgDpp@l$b!f(I-
zu9XsC1Ft4!%GsO=k)%T}j|p85Sx*7qM80v#Kg&>z&ricWa3q=QB3DCg`ehlZpWf&7
zUmw-o2mM^&uR*rw;dDUr%YR8@$eSD>X7#Y*wuytoTx04{z_pkpATWKppiZlrJuGac
zLMHUo`Qp~iggr8pnp)Fq*AjLINANVU>m@esN*3B6ugAT}IUIQU7nHGwp?L%I2J$<t
z^c!&|ko)_uM8_ksDks!0$DZP1BnGLn2Pq$Op0Ng{H9wN~5;8dmsD8lU{k6T<`j?;c
z-(|65PY!424K-WO_4yd%Vwm4^+LZz&hsxUhQ`{yE6;Uy<@KcUGaAkn=nExPAR(yMT
zc0zt)Th!4j&qnOVQP8Ic+k=Eapm$^C&+%^KuNAA1pLn53R5WMDo$XUYy$~v9ow_m_
zIq~g%r07|No#gB}G?$Q3pC4^)I;v(%RAN$5+0-}Ozr4s~cL+lh$#zPO2pvoP1SL0F
zz(eVez|6q6zPnxms8by1lrH;Sxgm+MQGR)$W2igcr<(J!NiU}U%y)ack|N=;+{4Vw
zZwP(<-2C_Ge5-b?+&DLWrC_ak7uRLm+3{btZ+Aqs=|uUal(=$he(qE~qm)BepqTYu
zs#~g{%7YgRV%`DP6GXE><3NfkS`Wc&)%RiAD=Ujka)-wL!2<SiFH+M6INt#Azv9PI
zea6f39^5t%KlW4o$@>f8QAYcPl(k7HXi;BiwsBW4&-LabSp$pNpr-{*Du_nP)nEh_
z)Wl<pwr~dhg{Wiu?#h#)8VJ|90X#IJ3?vF{am3a7CQS27gEBrjgxHJup1`CvQ8iJL
z(7vD9&aH=8m<E>3R>4FH$p;10Xp2pZa%la~7f?1GCEvkWnjlBl$||eFOFv2ZnP*CT
zxKf4iq0<;>0qV@Hz4(xun`*)kcEng5JLs{83%$MNN4^#r)T`9r(`Nxejtkq=oZYEk
zURnb9-+kE`t;&J@U7>R2c~^wc85ns5ekgIA{J?hf8<C74O!7Eklj5MXMkr$TL?zF+
zmpK~~FQr=FddzvB6kK2_Mr|dMQOQR7Ds`je<ueahsGXks8Aua0j46G-{?@;Jq9>vJ
zM5?e+$?e{e7T;WCkSt{i3{@*}ZK_JJ%;MT}W^p_=TkBrELz5Ru$Ae>>p+@Aq>@gO?
z34s>X&wH!F#H_>oBivXgwnOh`Uw^w{BjG)H3gGF56t!4Vvg$K;?v<w(N<vh?%-`Ab
zwzBea*Na)5j0<A7N0=s>jHAGEr8-V}4Shi<6fz_ba{2t`LCnf4vuIjC3#i};#rHF=
zILbm}w32;FtY<*})W;$l1HDl51~WyuoPq*qQA(W5BC`zn)nWWtm>mlZ=1<(Qm3svf
z(X^UTdA0=!G^>VAq{~TwAyJ9cr_ou153ydH=Egr2cB+t@g0D5C>+YJTAI0JSrZ`p8
zJ?N6NvjjD``25FCk|D1~f%90IJ=D=A@1D#Zt-a{GE9gPAhjiFsk&uO2_<VvuM_IQ$
zQ}V09W~AhLb3&rbZWx<@Wy00Qr<XXkc)P3m<mcv6qQ1Y=yBH@Y?3g;O8*`3PXwc&I
zpE;00?LQ<SXjyWtB@9|UA;t1Pq`ya<mLRk|^4O@uU3>BQ4e5?ZNYK>ojJ&1kL*|2i
zu<@_TR(JM~kB`52(ZyiTI=gR>pWo==kJ2k$*QftNtVi^NS3fYW#FPGf^e8(rvS8$h
zPKidnkfvlcorqw#`vXX8ktInk6OP%@&!xb(wU8~KK9Ebeefq3MY`Bs!yK}&Mihi(i
z@W6fIm!)5Pglp0tHwCP4-$+{V4KN+dnoK=tcam_IYX2l*lBa~ab+j9-qmRnCQm<3e
z#4W0YLc7Rdzk!B+M5z<`XkgZ}{Mx(Zvcp%21{7vTZI-NTt1MEKE+#pVuHS!pttFQR
zt_B=c%vXDqu1wsul}m-oKvl{0u&eoqbom1B?(>PuO${-{?B;|cH9TDH^jq~YpObJt
zTE=<v28|&hU82xgqOTIcb2qm_Z2DCDMaghu`lwnOVn=u9+;0%o{YS9uGc*we9Xl{p
z{7;9OkkLjdmjOf`rFRaD?fVsoJC&il+zlR0qM5_Yh@)91Ydy>}__w9+0a!p{_|SE6
z`=A)Yy?)|gRdlU_k~TuzPQ@`4;z{@3szcmIL57&j{#d3rI=BX;j|b-!7Sal2txXNb
zn*DYcqIXE^$~4QMU5G<EHsWNg1x&bgnNsg0@dgxs9c=gxoR9KP*V=}k8EdmwJLkGM
znxGQd3W2-$sZ*D0gCjw4`ug}}UTldsZ`fQ_wVLGf@#9mpx1Ggy_?>St?4BYxnD$J{
zZKTlTt<~1x-1XXNTF_|Zw(kAyw;adGX#9d>!orWEu(Xk&NVyv1zvtuuZ6uXDf1?H(
zNC(HttbO%<;MWM!njCl>osf}W!p%sWnwZJzK-%Ner{fT)fXj1oZpKa!k(xRPp##6p
zJMP1Wtp@9xRHNq5?Uc)U2O|jOOR-%@miHlp6+w-J80EpfzUMc($56bfGk-9QIC{lL
zt{lJvl#kNP-+WlEBp8m?y#0RZt$!vrJv3$0kED)s>vInpCn5Lhkol2x^#f~<@D}6;
zplUMpkF`9#6kg&?K>ydy=W_*KTH1(UZ+SgO{vxYN&wWA{pN|X<sy~g<{Ns;+yuA4Q
z&a%ZWj5k0o2Lu;^$r`&aqD89>_G_w%3ODdU-&TFcS1A^_824?^&?9p{8+PveR-cFD
zbVN@e%z9<X<`LJc#aUP2%=7&rvI*M>d42E0uhdZ3G_3RU^0aj^>V6ntDbRPzPjUBI
zNy7Y|XO3S6hb+}!m$<&PtkM4Yg4GtfQWYa3*2suGpR?LCItRYbigI$sk*GaGnuM(|
z@AkpA;`1%&t`Q2IXV={`jVrYGqBp{W|2gZP<R8QwXGH`8Et12azzffHplHgo5Pt2i
zol<A`1L~pEl|05sug49OVmmW<eo)VsnI4Hi+o2XP4gJ+^mSj5Xf`Ngn9pCB3lWa%6
zEYv5aYtV@vnG^d3AYhG(I7{Fv$H}XgFLV0&m}yxH9$=N4e$1<yRpmDv8WxsfGF?Xp
z_cEf<b)18<Y)3_Mv<}9{#U&Vu#amIVe3*HZg7^_x(tqd975d!0;6lzZ^bkVrc=zpZ
zBhQ{>m7#MuNWY^RP;Tb?aQlIk?Gh(h12{XD7gu)<aOJgEjA^C>XvVQ6z5&=L^9M?m
zz5^Tl*qaIp3pL*^px!u7$W!{H8rhG0w&EGQiom|Vw6^XL9OxS!-o?h2_-xA-?^Dh*
z7ulPVA$E3NT{aRKLp{whbAZzl3L!Do)$kmK$wDS;v6lYF1E;gW{v6zTOISDuSEL(_
znC$;`r1z;#Axwxnwx}e8td2%udY0*zty_V~AJRw&AQj;l_V)66^ZGUI^{=5AbDvI&
zgsox-jnxFlx5iY!F@_m<Lqwe%C}lR^S3EYzb1f=frs&~)On4ogbfNmg2Vhd?b7Mea
z;U)OqqjAEx{FH?*S*5?i3rEG4O=TA<+`{h)R-HAyb4_|>oEj}PZz&*!eDtN0=y^5o
z6#ADI_V)C-T4j`fSG-3zz7YE4iS58giyvRPi-SKzwq;$&0S2W<9@xXNZECDjv#i_~
zu+QC1krm6gHPUs?mzAX}bz99(NcE+<m{3E6tedk&?cA#{50Xny80AS&kZH;7LqIlo
z{OYygFhzM;e(4qb2S-&^ADO*p=ij>J&+^$0iTb7|!hwlfntRSdJ{mgUzR}V$y`!uI
zW|AdHRH`4+=RTAskrLKlB}YeB<mKI)peJQtka5`dmmzg1>)1TO-5^nHURKcgQ(t=S
z4`s`)>k~NeN?ZEV?~DW-$Iv^|N(Nrpefx|hBrM^~A3S6dNvhexcE;-`;e%wOVLf?(
zxj@M%K&rLa@|9ebFZo4q{+86imM<50mroP9Ki1dFG~e@I`pm%S#~i8pXa1U+kyWOP
zF|h7w*jC1sgPj2c=AKNhF^iV51Hx*vR=RDeEbGtQ-VZk+yB2enMA(3N+)j?=61@SX
z<EQDVN9j96KOESY``h&XV$bC(H?c)rG~8^>;wV*HqTkUr6dv*GFLY;a2PDzQ;v28;
z<HPb%zqO-X-Nu3kFONSaI&Ryh+hZT4&MW87Yp&K&ck`w&5JC%fWi2l3a@LR~U-DnH
zV(e41U>6k;dEo1t9VaI*k8#iY&J%g${F6R!Hn|+vsHrxk%0c`0JHP+B-a5*OJvK`r
zrPh<U<k<EbG;7Y12XcNr>0fHsf1v-zmoHZ#!&}})9jLj-C5y9gKUmMQfpWguSu^hL
z8guaD-Q5!hiT0svy$<K-0}h>)f6KR3{fM{`Whs#E>g9<s)3YZv;7+}E|I9C>Z3|~B
z<#w3{S9!LnD+F<ioI3TcdZ3ftcRfjIh*7KW^zL1|1jdYxZ5gt-x4<fMe_}r_k{!Fj
zVP=jKY3{mg(<e0M9~?3+h>zpsJlJcyV}IMn3ay9grK|VPux{~%FQEO`Upz(>%Egps
zG;8k^i}H0Qo2<rjHC}4;@wxBNYx_yXwSj#_{=C<MD#2<4T|g%O`87FRF0E{lw316@
z3+MF@Z6$8kYO`aNS%0A8#PVVipOdw|VWvTIoK((we0$NgZ@=$E8kd%SV^_$v{gCnV
znD1AXa~GkJde|$j$-j4d&|z=6d~~y2knDZsKd+sW8XIh8U<ulYmyM3J4;DxXjSAu6
z5PCbp<B9#bMG0^3GjD?E`5E@vnV=M{6icmNJgck7<%WUVH{izI#f`IE_$l<s-csa1
zZY)W2pZc$K9lwAq0u;1+_vHP3sofKuXSN3n+}-2D?lIDvIA%cSVEGOpOked)&|Im?
z@Ns^wSb=l;9D2jYds4R7MHF?_Ct4D}K?vdkn<zO59cRz*a54$py=O-3gatY41>jm7
z1)1Ad$6q}J^-8ebb^CX^lUr%R_v-B!V1bdPTEJxBlL0@Zk?Z%$`%y`8abI1uu2;p1
zQwk6xvLhT@D?i`*<LD(mo9a0`zA)Ve%sZLHPyK?{=9b-|w9>?ms59t_cC)gYB7B!t
z?&uAUv~0uK!>6BLO%1$a=P{0?A$$yGAH(%H53~+$7s>W1vbI^B5mZ?wp-L5ih-Z-2
z@fD@bS>JO|v+Wh`$pi5Q^$^&^ERo~;yIKI!cr&ePc>yY>IQ61l0(sF8E1O<<KQi$r
z{v!w$@&}wm9q1D>4QMGyI(t$33<K1(t~i7?JyjWbglKSgZax0t!*&GX97c)qZgDt!
z5<y9r1LY0TKX^%48=X?ED}guMyL*>MWl4P@LpNI|*LA2m?8}!6j?T>immGc2-!vsE
zNff9bm;T1DS6?9i$bYCi0|9P;AywBVX4=`F=4$T%0*&s*(OEZSSDJO_j}IUGaVJV|
zk0z}p(w^@h^xWEDT4h}x`XyP_9+)JsS2%~L)zv8vSZnb&eWO0x%sWVawVAkEeTP(;
zV<KODr}P9&Wg)vV&EE4v7^}-GaieSC<vsa(_hcdKL<oh6UNG5))LLA#I1Q6gZ7;le
z#Wda`%}-KNvbYLDf)qdO>k6WakmP<2idBvHGkO*Pc4{3TIDRMyq;B=;f^)uH>FI-i
z+~~(HaXUiXcj1YMX&T-mx>9!PR@2&I#T}FZ*57`MJ&r;-2i>zt6+_6zTjO2A?XM@6
zb?PyDILfC!hKpNKaCzZPzU%pauz+cou`(l=urH+f*Z<DJ!LoB^Y_=N&D)o1wOuxy?
zyPbv?>D}l1yDXYc;fA7$C8&R&?Oa7}w4c`c^UBH?Y0h7ypmSz@o5YxHaFLActIH-P
zqz=@?O8J3*4EAf^e0jH@d4E$5NS%;ALeW5W#SCx@qAAO3B#$Ldi8zeQGgCE&G<ijg
zDB__1Iri?2Jr4U|+@)8=8#Ygc^f?ZwxvT=KG|ahd*pM_Wwd(TXm3O(cw2($?$MffN
z)%z8%4SakAXgJ?~Ogi*hV@fRZG3c(XEiI3ds^5Y{HFiBFS3d|T2KRlpg~3H*_vIqF
z6Z5W#mYZy8q*1Zm(fPAVg%-XE^6kDeaE_V7OPZS?ZN5iz;2yNaBc1MYRCSS)r9?n%
zKUs>CnTM2>nRgwii#Ta%VL^r`5l@qwo!goHnN@qR#&_z6IhfIn-R7q;4ILhZf#&S&
zva&MISHsQO!#p=`5+)#$OntPSqg4Qp?}b1>PY~A@f-vS?5k>IH<W{Rc{`eK{=cWUx
z58)1$xlRc_X%mbd1hJtOJ`0aUOaghPK}SM<&=%uSxbX!gm~W7qhv(eTt=!i`O=aLb
zpa9+9kgfy-EX2Ynk=UQu!5#Yk>sRH8SSurJc97lRg@dgT%y=B-LzdBU;d4$^OdU%o
z9vIS}LT(k|`dwmfu-^Ll%4lMAYM`lNW*ww`$;saA(%kAH0^fNETFjAx>LO9EyLLPi
zGs-h#M770jz@N_Ftp~7OVLY%vWHBT)1J0i}aEou)x?Lo6iK6@@i}hpXQ(Nxr<krkq
zjm)r+g*Yl_-}RW+TNaPz>TKUWZz?^pt*LC^tq01Iq<jGJATr!wS47elLe!CqI`mCv
zq4NIfY#a=TRq)UtW(PBZ$G+s;TY3B*Z-J6W4v{q*IicL6r&`z`!`QiF#|fl!!q{5d
zAY%G;m*9mP-#@f7bFZ|oJ7~S%-rk-j8LDQ`&?Cn|TjyRgj=+H*9c4nX3SJ<uK@RGq
zUR3<4#;?N6M47uMGh0)KHic_c{<3zti(^waSowrpxvdJ1_Rgb`Q*q@#Mg@`v$~eQa
zd4>jQ=|@mLK@Jf)Le)f<t5MTn=!LX5mtx-}Y+tDxAo*2S|3tVhQ@o%YDX1V8^G$ep
zmvmf6P>?pUZ5Xi0Pvu?jEIwxxn>Y9ioA4+d$WaVjVBR*pi>v=LHeGOe4JSNSZZ+ht
zPyOirsgZx6$Yxi6Z24Sn8qF)|Po{dPktg7>OE~fc{sGNo6{S+Vu%2%FkrIt-H$(0u
zR5nly^ZKYuWd`x7Yt+0){{%aOLR^$)7-DXnnI)S<Q@AL6@G+OIN|^v8`rg<Le$rNx
zw)?Q%SeSAoFc5Dldtu+sy;A2kzga+)JBQ)-kH+OLE6cM|wIQnqOa-{h>2+VeiXVBv
zYU#awS&m<6VYv^4GE4d^Y3bGNF!K!gOE+;ygb9R1=H)efjNQkp&w{RLB0xMS;lzAT
zd#Pi5f@ONe4(^qbpT2V67YCJYvxt05<`SDeqQ0EzV6Ln2V;dvmd2?r3*;iB1#J$5E
zWwMJihY~+xcp}-lf+I`n_FMmoM7I-{U+<?nU}I-xV++k<RS3~YRBBAq)3$g>{6L|4
zKO~Z%f_Ux2@>AXq;`aJCZ_b8PYGdmPV$TQ<50{e<y&x06^5w~s0mKjhE<Q8l>2o;g
zN&Q2p(%uINgou~k>`j8Yn2MeAelZ)jFalK6T(Ma7X<&)S&`*<!uC4%8$-!p4xu@V|
z?)hOf1o99qHA3epw*n(0uT#lc#Wq6;WFB>C;-5;v8ARJh4?qz8XtSpY=e{j}kA7tl
ze@}J=eK1!qT%}e`=a8V`d2g(Tsg`n4)c%LYpmFdq=MR@d4XcO&nju$BP1*J=t#bOI
z@b`=W_bl+U=_xOclE?i#CFXe3{R;{bo#J|x7Actl=Nx0Xd{P4wUpEz`T>F-H#Y03e
z+bcts*cN`Z3jHG76gm@V))gHy6U;E_?trhRG09O6+cqg9VVD6!MI04nWn?r4UuN2F
zou5vvJ$<9AI_mTm${y~?Y>}ZsJp{CO0xK3!%z)Rz$11W6N?`7lAn}yfx>^T;OngdI
z+STspC2}+8@|)7qQ-v6IlBQjo|L#J}nRV@~mh?MqgCC%Tc{_c@*4}=&X_&(f{iobt
zH@A;!L#CS^n=y)&X<1%;<lx+l>FJRBy65HOkb5pPXRVIavtm$Ol&}ecrAuf|a!XVb
z(BhPLx=FO)m_Nsujp|IvB<fTVByQ6Us(FdGv<t1y+Ywn<0^OFKh*XubGfDu|6ZRAA
zcFhYrO>q%|6|SlaDeET^xfP>ujxP+vOAeLhra>$QDP0(n)~g$~bLbBmOK3$?rZrkN
zswb<wPgK%Xe2y{cmxf#c*&@5d7fuj@+Wv}CN#>hDJDxw^Vev8ML%w-M&GF)*Ah>9=
zJv^jy+rm?1E<DQ!zcxr~i*FM}bknneW0+!SXkn&d$->fnE!Uu;N}xk(f?x~l$LKTb
zlS!qJC_sz!g5(@vdfJtJe=W=wK`KtuLvek4n^PNA8@N%-K^Y)nH`LYNj~VPVZ%#RU
zjYwI=tV{@$$BbQm7UktlBKidm?t?751a?+z>;9ZMC-5gSWwX4!y~RsBUqC~+aZ}mv
zQY+3|yw`(3;Se2YK+sl_NH4G&oQua1J*um#%iY~74aF3sk@BFnD4yvL#ZR7`9_v(H
zM;@P?3|Tg)5eR5kpU^!wqp)f7=8DU@bRt!2;Y6)pzg{d?F&#M<=@Q@}HhgGt2VBV(
zSBE|&m~$m=KX_1fem$UiYl!i+cANTgMRB`IbL~)EYN*&O511{1hu}Y`%Hu~qPyP^o
zHJ9PqU8nb~?eqy9$=A-ZTYK`g*EG*1*q=}?F7r|7SF3!wa(!=KlUk=zZj^}5WgC5~
z^^fc62dXbnol|Fj-MRCyKz!-W?3I_Fs7v&*p`m)ABBl`E^?uXQzkPAwk+`e)%AfC{
z6}P#06F6JZ(oniOuWA(eVzN{yRNAm<pjr<IW<!EIp{Wu=R}`_id3h2@^Ti+7A#Eoi
z@_~Tz9LI67LOw(B-R&o#YNNAeq3#_d-Xm5LbQO1NJ~*S;5VEl%p+(4CDR+`bVEVkm
zjx3F_qkiUU^Rt(usGd0?SvK|BO{~`3Jc=1=M%OplYN+0`V9GwkXqF{dB<$K>6UF??
zv}P!gy}wW+LE*RQR5^J97hpd{`<@IKT}Qz{D=;o69>p|9x4G^ucpp0Ru4F^>-UYld
zBrYy19gG|xz6%_PEfzFf*tT|(s&LJVT7EvW&ZtCLf;8n9$e+36PvfxmbsXE-Hg&Au
z152Q-%L5OF>d)Q}%Ly8Z+>EqC<V>sS#C2Z$g^upzrhhchYZ&mEtxS(j*nBG`t583%
zva_QFy2^dss-v_QnBCwJBc?UH_s*R20zkU+ipdY(Cys%KMrWoX{;;`sv?zrEzcc10
z-ph`hUTX;1kvW2RTf?l2GxZMRU7zl4d307zPAf(2nQ1K#ZaeCY(>CAkmX(b@KFDht
zhABLlYJ&^_L!Omy;XaVf2<hjKBbxj6kFU$)vDQA!Z;+36-NYm^xM)iE+iRbraO0a_
zx@1)0c1S3DPNJTMPJMYgx-_qZVOStD5mQ}RY-a!yu)rfQT`g^GgI)+9`w7(<I51OR
zu#A6qQD70^jq4vZbOo6N!<aq#yRM+WA=u53!(;9+40O|<;=N(QxJo5!*JC<GKNu)X
zm0f|N<!j0JgKVno2$(>XrxSB#<$$c@hd|!uD!(@Fht#LQjdhI~A0HtYF2g6y$nJn5
z{|^Kd0Txd(J-i$QsW60n6EV{J08v`>R&n5^4xt?ZUY?#cg3zasNpoE<UqPS%OLeh!
zdeT^FgP!{ZGvlXSXq_r^*Mo{aeDV1yPEL`-huwBBFGn+SEaY5^x%&<(bUc&}+P${1
z5$Nt#uloA66lD!)RmwTS^J7*Qv(*lK2d$QG+1vw_&(LesGEq@`HGWLaWF25VOV}N@
zT&p$YrojLU-b0*40J{)PfT&yT2hKu~O75mTJw4EHa`~taIUKWaP&`37r&rv#046&j
z7%v#NIYlG(-8CyK7$D-LmQd2`T`qGfK%8;9?rd&OPLchXN2|@>B`u3UHAAUCuJ=XT
zi{@t48vCKAua8o1S(rqMA8V>YS*dvc5I;ZBt0|`vhFX4paYbEKh;yArz7VEU8;7H$
zm|O-gE^rCZ(0z^%AwpwljPBl(eQn=)UVAslA}*FB(UOgoz`SAkNDiL^PKCBK*N|C~
zm9+OSHsg48WSf!Sb^g>(iu|=fwUT^%3fH&NJ6$q0<(@7Kxs9qL@^v+Cz@QjhGyLW}
zN(fvH){kS@vUxMr;)1^Zldv%Vy{DDwp9n=7>bz)aF-NyFy&HAX4$^VFm21y}Td6oo
z($&b~j)+TlW&b|+h(jB24tyz@jnUeaSToyfyx3<>%v1Wq_u)e=CdQzw4^d??RkbDd
z`veV(#ShtV=h~00^SMv%!8}@M71aqp6bo}jh%(fh@55-@9pw@fb6s6(c01dj1_sLB
zxG|1pM)BNp!v04+{0OY1b^M-d_c-Pc>Ez%;yH}ScFM=U>^5o0j)8dLIVA_|KqWpJ@
zHGTYuF94`Gi}3#NrFXUIAT>2<(mm+0K*&Iiqg&$xDv3ippV)h`_%>k!X3IQco0P?X
z&;pB~+8~>dDyw#JLH+#8BVYD`d8glX`|!mRE0sq;)9B}tnov_qE~GqKxl!SE8opRr
zvk=x4y}Sp0e#clVGyd4`VYE(^`j44Bw?S#f`#vVg{)>Z3zx+0;SzsG{gKxL6Ipodl
zxFYT-jYpo5nK@;w>gWR=qyE-R<i;b*o%e0IACDzggvr?q0{LfWW8*2Ndnj5{Cnvzd
z#%7A%()NN(j4~lo;N#@bzC9d&-y_)`j~xxn$Jn_QYDau3!+-FL42CK3w)_%yE&lL2
z9(MR9)R1uF{kN6mU(j!Kew>K>_!sP*WmsL~KUe_m8T{L>6#n$}v5|&{r(rnc>Sv{C
z+7S|jy7zpe8$_z+?&Dn^<h`)|BiG1csNo`JY(RlUTV8Y>xAj<mfkZ>_5o)ec%t~?G
z1Z8@fUf#?LkLV#WxS2&Q8s%D1Uc@JOCp4h6PLw>Kso#N~Qk(YkUDvN<ke<1(wCsb9
ze|vgR8T24&s*q=*v&v4;gbyD8Mo9LU32G0E+AKqN#k!f985;RXw?AH_NM>%jxf2FT
zfLHcSZ-X`#Cy%z;1#G3*A}cj2HMIqy2)2ii(2=f}mlPQpnZ?b=cXhlg7CNVt3!iKd
z!UDg9T|5lDv|+jMkNa~h8p5}pW$2Zx9LhiaqVm3BvE8s6`0oT?c(klB?j<sU9*P{p
zQU@Q}?WVJS4EwIs>QXK4*!m68+=~I~A|7NF9-b<E69^4M7p5Rm0Md4?Da}+%E58*k
ztR|ecI5D8yR6))h*b!vtc0PIXI~(^angij@8&kx=;Fh(Zl+9|}%EF@(wIqvgfea&?
z$#0psi4Z{y2<cjop|6DRvF>Y8-f-j3m8pih?R!q7&@Ssm8z-bq$3#Wny-3kQAi(W`
zk17*UeY6BIBy#ENL-2LlZb;Pb?kjJmF^u#^h*PFPVQ?}=Ai1tCGok3wEXw_!p;zJP
z;2>!5Olv1}5`_>CrspZl1h&XOTKNW#eoX`NuwY|z1wsfIu<_6=hS8AuK~%J1$OtCI
zD7D(!*l5zOr|bG-bJoi0YQE`<F9!zZD%=13?O<X;l7Bs8dOS&_z$N51#ERf{(ODKT
zAl_pPN>b>`E38IRHLswf#W?!}$?IRAtIPBf^lGqy!D5iUSzSp<NhsTWLpQiOk}1ZG
zPg8j}^g$HMz%99MrD9tEeEjh+<s&T{!jw8xtx6O=bDRx--=c=~-H>27&${VuhAL73
z)0*$udfN_p)kXO1<DR#GubJrdBsA1+;G^`nVnmR=@eRRpNRz@~<S&TX`!d&Qk&IaG
zC0MlmRQ|BANDHrTY#gc3lj*y1_%wX$<KukUotdvIkRs^MHknybfdMK^0>&M^iG^#7
z^_@Lj4cpnSV`co&brcG;sHmuk#`l@|VEd5zH>d95v5vT4H`Z|-X8nfbRfrg27O+`X
zhgX2oWxp^L%CBA8H;A5zg<U}5p`d!)YuI9%s0n{KEKHf(eL-T>g9nh9P$r^VC+2dD
zfeKHT1WAJPokR#;O)u_ARFsiM#2$&`u42WsdvfQRK>82axxwTOO%0RGj8~p`B9&YT
z-2$Z2&%oF&!~@@j!zV}j-sVvhBnUm&E7E5pCRT`*P@MwcO9?W$PIyRe4Sc+W9YgC%
zPF@~j0Gbe8(2nJtP@ZE_A)uGr2qW-x2|x}*Scb2>o0|q4fs7WP2M-WBbtCLEEA47-
z-Bm76d5CfbZMO!yK>QR_mvT1zH;?u%U#H2!3Xs^JWib2Jd!O6aSXtiGMeR&|(+?3X
zu&0O&P1bpX)WkRjy`fEKO*=;0R?9v@fM_E*PkI5z#CXq}ZG)EpKv}HQl&?(C+5z6~
zovyJTxue55dsSj=ie`(#vc2>x8(S(Vs=wBKpXk*aL{}m^yy=7FVM@ktd-h=T;#G6=
z&=kYZyrQC_ExTLZLZt6D@_k@nzoJNsBxa8zzjLIk3!d?WuF;<F-^WHqVoL7<gLT~Y
zuZ|a5AGAVDo(ef-M{9(9RfPlAt+gV3^s%008MV$rrq{1WUMn%bOOmGw4D|J-B)mh1
z+|r^)>yhsis^~<@(i8@C)!+U-6XL&ja{ND^77zY&etddiefMjhz>$$#NIazFH-Puq
zP*pQ5a{2W*6n9XOSqy)EkL5wE6@*f9^5;**)+iz46;x&ddZ@21L#YmK7vVp4*ncR^
zhxhNtbjKo0NTe2Dr`4f!+%_9<=UNMT1EWY%%ePbMQSK|c=ZczDVy|<Zpx#Lsh1wF<
z8g=65-$h6R@Jb<~2I28ZrH7%^M-TxFWcL`NPu#o(gdUp?404%kyS^UJ(G9T)(y8ls
zURU@OSM&Z<)n|TFA*%BWv?=L4?|{VI9_#2`9D56iuS`^HOAA2{gV@W+uMv9{UwRHX
z=?{H<wKrTsQ;Q=GIU|SHPSacsvnW}<`_fbo505&`yS&-;LYlj~R9f*~eTrlw)pmoB
zsi~<pmq%b=JhOYkRmthpvNBir`4?v0-G>^@5y*#zfat??t7Nz6)xNH-k#BHmrqAqe
zdZv;1m1NrCTA1ytl!N92NkOt4b^r%eB8wH`OPpJTDwg<hOW}qR`T5FQ5*_Sg4>+}I
zNC1;4rbWfUDZ1G&kp=iMGhDDA!5zfHP4p)u9mfCo_D+vg!0AUz9u7=|xI4mY4VT_9
z4!__W;PMVjUsNNNf;%urmh<d`orgyzI-JM0Y}%w~5`XS|pSHNecmORha2aiMhE8Tx
ztgLsF-f@JtB%PNCO+<L1g#F5V{U{h+e4#(DQSxU8K23f)XuNi}$bsCuf*zCjm<qJ`
zy45nb3{_rYuf3PL?U!EyHa@@fs!COI{`o}&N*p%CJ+=hqhjYFKnO%B6Fo)AL7iJM-
zV_K3Cg4p7&)a`|)V4!K(uwYB*3gYT;CpeCD1!B`zjb1T9iUQ8ObLaFfT&O;SEfJ*N
zmsr_k!2V48R?foR1e4PO;3%Cdv(v7~h?^Q8Khko>z@V+Gs|&ExI}B5-4tNPk_Z~@?
zK5SQwNH8B<!f+X+{H1cq9UB}4vj|@iL=NwefKoBXx$>nIn*Z6S7xb=T9v0`pcv2+z
z+#pYiz~j2g%8Q0Mh?`B^{6^~;uvu#$O~SSV0Vp&SO$*#tXKA1Uor20vBQ3K^PetZn
z+wUxC1a;~u@X%0tB07cAosyCQqQKEfN95SC>(Dr(Qi7I>Pf;;4*Svv;IiQh>yT$VR
z@9-G8;q_vYT8crdTHg^Py#YxsP{3fu4%~e0cxP~oC@x~xN6>}K?2n3whzMr0M-igt
z6DR>uFjF-No3Jcp3MB!BLNqF%9w!GAUQI~${?qtKg;u=W$X~t5ec(#X6b$(mFCk8S
zWx=7nllQ>M!-sVYQ#L9YMkDF)&HMM)=O;{aU*oIm#h*Jwc<?zThbIwiBn%q+^QK1I
z-oAJd15qRoPtsb2$i<s(B@z311J0jRQYdtd>E>z(0og&&Z~%rI?IxZA&Ja``+22+Z
zw@{j6d}0D}0OzGIbzi?`AX6A!M?Bm>%sE{0itNh8f5J(JpmqEf#S<k$qN07YAb|!{
zMciTK2osoS`1DDARud54<Aqpp9AmKnLj8Uh&ecpl3?i}Kn3}+K3FuE2W*}LtP_6@@
z`~fMZX3JqV4B1Lo)-15FQ+$S~sf%f}2Y7~vJoce|f@w8Vi@&n7vk!P7q48p@Od{4~
zICS}({6?kES11-S%o?H%$7pp7vcG0#Zo}A-=PiF9)Bu;EoPxsB`}d1}q!tz3r&THE
zi`OeIst(~($qnTT7FrnD2|S3V0#AMLV3)boN(E~GyUEq7Pc~v@4I{M}lIyzK^a)fw
zWo5(LchAtGp6KYPRPvb=qlUAm{nU1??@#TMosNqqni&+`GR1>Nqlk2(K<?k}dwQ1I
z24ndv{G>fM?A5pI>>`g17bY}lWn7>QJ1pMlF!DthX;XM1`Pq;*9fd4B>y}){Z|{s@
z2K&RzEK5p<=;D)v;hK=9po)H;byg<^ng=hh)aB23rO8t69uN!O{P8su6$CIVg)&=4
z+9h(4sj~;Pwlw-eXi*pvARe0!EkT2w^@1n{lAxeG<v5{*DAYuif#F56k|m1!x`u{y
zWZl2=cJB_1!KtFiiz$!|NIjBT8t+9Ek;C**0WHirQR#}!Btu8E+G)FSc+aslAj*uE
z-T;Seqq=F$b66JjQ*H2noO2JxMFAWs+BkxZA3&Bm&y!=8X8gVZS}h5RM+saXB2LQQ
z>c#%g#mnm~DoDF<lG%N=vMXKHk6%qsM(x<l&5{;xD<a1DU}bqR2wquC3$(KOAt}j(
zKp>51qg%b$xl3)nM<e0Qs_mI8wipa|3$PV2H-3J@<8|7?^lrDGZ^qFwEKM~$BA(O6
zC^q8lS6;5_r4EYJVDfRhc*H<{@9Du@?MZCf{HyLI=lm9kX)fR=F}JG;k#bGj>JnbR
zc!9&U1!{$k4m-=HiS5{AnXeA9o~2!KnCbp*X-C7x-m^!`PNhsjLyqx-&d!SnKAX-5
z{()w1xjrr$hBVuBi7R8;o?c!6<W7o<b8)clK<>Or;E2zkn3pp@ncO>Zgn1M9mZasx
zk33R;XY5xS@Ik+G>eQ(tN9I^d)&~gx&rFF4Uh!#`BF)Oby73Kc<LIR$1xrWeI76NH
zRg(I#!x=WzS|;zUn%8ig=u;Q*F-7sz(%PCNs#{zi6F^C)UH+Lgqt2I}h~q)vNU)vx
zT6Z0AIKpr<?LYplZvDTs*Z-dsNq=c;|MjOo49c+Wda-U^FJ0%*+F=;*o^<K{4fw^7
z_)Y#RjUClI&$bQSo?BVu{nZ<OWBUgS*pp*7Y{sUhbf4|p@S+2DUx2D8M>LJ3&z!lF
z(D3%r^4j_Fu@p?LmM#OhusaDae>><Uu+{q^EpBFSJ?u({3WWW*Dq-+5u8&#37*;#H
z;cyRXhV~D9GJy@AO>{tWdJvTW*SXt>X!Sz!HeoQ|c2EP`>RRW2rcESIhR<BBCpbaU
zk?-fpr%A1nxB6}vnmDE3k9IvifMp4q7V5sw#_ppyq(-650RPROr{J{bv{QaoFaqFd
z7<<YqBruTO6d)S{!a-U%5U;`Twb(9iAwXdUk<`_)n{E9p3XY6&5YOWc&x5oM28M}=
zGz=y!Zpm{8>_t|u9|Z@GReczt$OeT!fQLS=qNTuwYHlV53!+iZKj#;wuyV>_TrE|@
z3VW24;{*wrYJdX;SukhtJEHrIuzUNlA8Y?wGZa1GfRe_jtOIs%9mLWAZ?7qZiJLO>
zKaJu+>ZhHiT&AjZ*J}4Y0w^ab8=1J&dYIVSJCUFS5izd3FO{q&L&+(wxug%M7LoYZ
zd*8aRcD>x-ID{6X`y+UNMZV+zJ35fmxZDbG0P34!g~yyCGi}!L$ja_Qv!1g2aPRVY
z)Dm2Zn0b2c>{%!b<DvVJS$_#+dPHPoLLurkzOAX*N+DKYaM(}WxTCd$TeL<HV`@cU
zi2vWJ48!L)a{ehZs&hmp_sFEK`0Y6f9gCtt;b-LM+W_%Rh~cHFhC`CEljsOR(q5wG
zvNHb>Elaf9f?lq1sK}48(n%HEDQujOZ?03j+>so;okE4UMn6-38ZWOsqSWD6$=yG1
zj@h~0-3L&T`vxV8gzBGde4Jq4^}@|31U)1{J&xk}0;44{thWn%DpKxB&-#87IS==*
zH{+sAB<8woL%<g;11<{nlGWwQX|&aH#y@C&_JDH#j+YEy13rHEV1)$B&D;0z*;P&t
zi^1oPQM#u=nFn0k$-z+uV>{xohIl^jQ`x3yZ;>Mm-3ri>>1kKNSBT00)PmBtT>L!R
z5xWNHv}uwc^rK~{rhr+7<fs1qiJ@SkcW7DO5kZYBplAgjw>LwzCU^Ic2wTaf`v_M`
ztp$B}voR%mWofbwkxn>96`cQp6QZ-M{2s0p&TC9*ZsEEzB!!Rtcz*InN!jdJ=l6bX
zM;JS?K|@nV`?P8w5wTzQQrKghbba6}#KB5!DtLa1bS8>_D{G~#q1HDXDv3%Z$c0vG
z2C~j6g|;d|oHsPn=DUBVtC)(b0&5Nix)u|r$1Xg{D%quzqITf;akMsNLk+HrE1&$F
z&_H7tvD>m;70f?QXmM_I$Hm0#U)z#yCA~ZC{WNI@ok9MbSdilB8#NRvlt*gKe6I>D
zlc!&Nf|#S98u-1<`Ym!AaJZpyNJmFxf9qD-g`7AnyVn)q_ro#i7x93Ig*lJFc^C!K
zF1F+;v)PB*zYmilNsHv1TJC*RfE9ZfURV8{L!*WUX7dQC#}f2=_z-6Gyw=01n6hgI
zSOALcfJEb>TW4#?pFe+ID-!#ZL!E;@=@0#kBfstwzEoKuc1um^u0{M0t7&t%GZzp{
zPs1BfB7+D8i8hD@N8B5zjzbM$wY2aB<V~UeD1uaoEXp@}o~!VfrT8B&&M1;6@-Z<|
zL-!iYgZSBoTse?1co~STP~)Y`ee84#Pkg2%ee3@?S1(}ra4`?<`311BDO9TG-qB~J
zZD<M7gx#ArOJbW=R(=QA4tgpGrUU(*P_BOZByImWnqN@x9bl=(sm^U4@Qk*6`N9>(
z!;M~&d0Ufd>TKNw81y}r?K0%hVA4?3TPOZGVinpiba-@kcYAoe%>Kf9=iy%gsSrYk
zRLq+%9gO~EAF1nok0t}@1udINWR*Xjzd%1_FCi_M(fIzgD@bwBVDInidy?M{ZTV^{
zrYMk)(|Y!)DRM5t)s~|qr&s$!*l^D~ItuJq`aVP&tZjS|LO`B>7ry-5iD`l1>-8Q+
zWG*)2Wqs?n8;$}AbmGXHf?+)PZtP!ZYlt9&CsD=st~l-^@|ii-9${(IbDp)o{I8g$
z{~U<o-#UH&gZPSRM(IwJu>sKlF)%s?e_CWeZ<e8Yu<$5rG+^Wh4LM%}0_k!+GES57
z(Q8a-%Aoc;NQ${V%AoTL>L}E-2=NQjN&+@UHiu(0iNyOC6u+hsq-#;#xw#T(8eyyX
z_zRDF_|+6;NMUZ6=jYWXCNv<`1R^7hiJS(?n=JYstJE|M;4`7c=NcSXqiaWfwOj6y
zUul!h4>1fSOS9>$NF*K^g_RYkxE)0Q*aB#JHo80S0`7aLtu|u$pvuq)j3ujFx<tz@
zw`$2XMU%*~sS?C-*`$i~u8_;vLO~bgw*Jn}u3zqQpO!1gv)JuTKp;2f(C*x|OU&}K
zHQ-0!2>2vfT@^@abik2=c0f}Z9(UFdKG0n|cP53qw&o9FQv>i${X%=|{OX(j&*S>j
zc}%yD07wk#^w!9iF_OsI4wRdS<x*_<APpu|$;QN&wuV-=Z~aGKzI=(K8LQ73gTR6O
z_esS*Q!*QFEm(x8504A6n9C^lGoBgf>tn;agn`#+TrFxbisgolP3_tORXX?Z_ZDE>
zXvKC28Ohx3L=8e(KWLoW@3}RQUCat$j4-r)hRLYHabj_d_u=kYL)hndVBuMsx1oCC
zOKLOML}9qx$6Qli1kQdfbxgnBHbe7D$p}yWm9(O8cIvO76<ylR-)~Tpmi|yB;&=C(
z>h0PjE)J@!;`4XPPQISZIj|9+p8tvc6z_Znf?{jabICUph5(C0nah)^97XKdeR4v{
zE*O#x<S4-rdk|rsn9W=Ix;nf3!M>(gS!YErJm<&V0C5!WkE4jI&m-SBA9m@Lq^>hY
zUe>@lL)y>DDN}O~NzUP-gcXHmlxX-Or!nQLwbcyxQ@p(UB%tHOGGb5~1iqcXsxh%U
zasA*w(I~HIP(io)+N*z!ptL^LDJ#aQqszl#OVe$i8$_8C%FepjHUc@JIGu6<bQI;}
z<U|YY>3KZ{K`PfE$Tx-SYLU5M*^7(txSs$w0#l&0|6-xly@CQe-<>~W)h7~Q1jPzL
z!j&7Y%6uyWL*x5?g!t3?dyI(-XP`L*?_S1H({vjnJ86R+HsBXM^!E?G3jNG#)_(q1
zP=o_GS{Q%D#Kp+JwSb5iQu5lSOcDrnuTF7er(7aH1y9*IPuTQos>A!nD=)tZ%;`17
zIYoYpwvXEfH9!dYMs-TxVMJ)z5fz<^i?|LGg>T>}L0Yv2|FyPferV3~SHat0=5`wx
zmV5VluSC0sUDYej;<}Qy0cy?(%}Cwo)+nVqh>N*Y&+#5Pw%i#8-j^1(L>F+#^w#|&
z>g<h-0&E3Nc1zkMU}q^_`G5Xdjnb58o&_BsmT%C5h#d<6YWU+-B2J`AnIMM@G0BTa
zON4TLzCpF2sS1@0_96_vej_3{DrD${K9W@Q)}KRH)d{dc&{h7^h}Kqc{{DdjZ+NB(
zVbeRB?(&QeGdIbpKwSq@j~do?V3JZO+b>LeP6QO0kE6JtH3Fv`ke*qXl>>+kLn2^Y
zzkniq{U&+_cF{QmP+$O=uC;SY@8BSzWdws-SOqVr*)#6Ob3qLZyq=ezf2dYSzRY$L
zSbp$IM@?%)2NU4Xh2#+#@rF3&p-}^`HH~C;40#*-@dLBEb3qwEqG%i>;7l}~C>g7I
zv~SfFm|pN<!xdPcot>Tk+90Ceogz(P+hi^i5n!a>>V^k{2IaH$HF%_ve2Zfn`x@fu
zL_%W>OSbQGU!sb2x<p>RO<=}Ix98Z6ie=AWl<g!kqnI8&z&jOuF~mz-&8%+ad|W%m
zZ{e<&yRWX`_9}d!%+Lgu*~Y7oP6l**17hPi!3Ah{<^Se+|7%|kX5c({Fi4q`wG!qv
zMINoOBR?OQ9~lLq9|j<ATKuqicW-Z?gnd-PmCZ?<;^M7!b#=(*`=o*NP+Df{-Ppr6
zX?@y=O-wxg<UM9uOGrrYWuKXmuXaY%+`n$9X%p~Pb|nAyFOU1l0Ck_cLx;G5NJnK!
zFqU%?Sd%QB5SPy#iR_NZhzRntTA>$Is<3&9`TD=^YYv#3cb4h&Yp1r6`nS&8Ykvzk
zh@3er+<!kO@xR0Y{{Qm)|1bLEqd#h)$oiE|QBGRx|5p&>KUhZn7rl-Dee3?skkkKu
zdH;*ThX4J>{oBdB|GjAcd(qPUYoz_3SEh<q-;V2y|NN;<m#}3`%51%Li?<7X%)0V&
zRf=-ufp}U;{-3nItiw^mLnpFH$Yc#5c+u9=E!&CSbIX=3O8YYm3eBKW#Uw1uKNV}=
z2#-C`Qkvlb5r0Ts>HTyN#I_e2SbpouH@><$*&SEmnX?^uTU<ranH$co*mtC>3>7>f
z)O&5&ca7#C2M-h892_W)KRF%XZ09CEhk#!>V$M(exVX4e&+F)m7wI=`JQXfsujsqe
z&mAhUenuE$D*?}^8&}LAWn!w0W6uPy;U#X%wJPt<$l=5Mf<r4l1If)MMyGTx$5S2(
ziwfrw{)i~_RE(|J%(IiY)AvuE!>2?`zgu_hi<5iH&t`Hhr7uT={=1LB@D9shuMtk|
zmrPPFm|?8rb^Th#=;(ELP^NiLxGgEe$$=T{%zO5T+~{%^dB2;%6KPGG85fX4;hd@*
zZ*a-bcgOLdcL>tPW63Q@*~0ru$XbkWftumqDl5Ue;h-kBY|mv*lMVaMoi5)|YM)kQ
za5V646fwAHu6q21-3EL4M2k;fT#n!5IY+FLd&8${^!rzr%g+Y_)H9iHn(i?s3o<e=
zAkj*DbY<BaBEFE|xU<`as~~xVN3epHm57FgTgt@bD7*Gi*_9=slXIHx_qEB^SKjL%
zu^ph}4*dHr3G^)dc=CNV!@}i{tJ7&${1wTfHKUwN4V6aSA<wG3HiZSHWRpDN3mNxq
zVz<rO6J9%^Ei}xjSWlJwK$T3&$a`6C>GiVPi+sdbJVa|1!51TA`#wIuX?QSx_5LT#
z<PVC9Pvv|rBl7j?eNe4X$z_xHF~J9Sg`~L_BdS-_oSrQ0S|2_|IIXmbgeh7$`0>5M
z*-@LP6|L)&rv#TPY%e=Im()qElBNbOK`9|=JMg@f@68Knz{IXykf$CXXWf9v$<MFp
zOU^;cKQ}%8dCJrA+P3%Y27H_K#uM9Ls5u3%m=cKJeE!tgeo-t%Q{?lDGgRBPPpH+<
zVBWhIS_Algpc=n;vJepzDXQ>bg9e5<Py?S~*bTpp-UZUP`RKKL^{ZO=gTYQ@!?W#D
zmo%Pg@E5%NGkme{=jG-L+_DK*;FgLbMQvkZZ087im&rI37?tR*M<hbl@H^aFBZ!j_
z*|T%!ZHVhR&(ia6-4#9$IG0`2p}qfQKtKR;*^*rsSa?62a^IVh@U-&VH?sx#7iRQG
zCjb`q?P7%+UZfdXfK>Ty$Ydaq+X*~KMVASgRUlS0vLc*|X|lm*F0uAE2@%0Q@zF+N
z0#Q9D-N+m6t?aS<rZ2x&^3}uZyWLG12Es|n3>8niTf&$w%PvRqp5^me6;gS!<Hn=s
zIc@nDu5$-|ofK1;*;CQEA{<d5bo0}Ay!g$1PQ30iT|WfQnLOjGdqru8zs#_@>XJ2o
z`BBI5Ddlc%3Rxd?FQ%O`L$<tow?Qgd9#ZMVWq20AzhVl9j#2jH_w2a^Nhti}^m&5q
zdm+(7Je3xJ;^t?Sf8FC+n7nr#UNXET6Mp<X*U^#I0{fYfH=vL&TZH+i+rtpyyt?vg
zkkJ$Qd3jHdsG975==k%?#}9<W9P;K#x4A;hi#~ox=lh^FV_))umhnJp=e^_ZR^6Wn
zedE@O5|3AU$4nkOF3D0{j#DXHxEZ6C7gkwKPFKB=*WCI*@o4ww$#a^w34ZNCP1MM4
zzGbYF1A~@*)zW~g&CJX;uW}RvUu1LSiv05N<GA;}Dn7k$3)A7uM9t_VEc+qDLDTE<
z5ICeK;1Tv#xu*Utjlc5@QKM=ivcsRxBQ6H+v!RYM_$h8<^gF3B?@Aq>=t-xk*Lrz7
ziLC08D-icUe$WUbR)XvF5F_~jkgtkMuXNm3@4&qYK2R$OgY>E?gbFC~&6gK4p|t@x
z3WV=gpMpz_<J?Dk=+Y694`tGE!lHsM1TC_y)?c5y;$}ALh#u!plu%Z1R3qLko=g6`
zH88UNg#D)_*}5ko77-&~=2nin=)UU125DaL%9DK)Hw%x2{Rh^<nR{Q@v#534%gOy&
zUWgCatap>s#7W_e>Wt*`;+=|%f)?y9k!vT|$KWkYF2vv^<JKcbk0SD|9FT;MkB{Ed
zuGy570VK=s<nQC6j#F9Oxw}7DlV{U(reSaS@w4{|7h}yxR1_;o3&ME}1PBR6hJdKK
zM#Ysn6@ZJd^}A|p#@ffUBX`9}*hxk);U}bTaMZB9qod=~Cxrg^6I}|%Q<PIlf9}|D
z5E>Il?qAP!5R=3-Lx#LQ&j;xq{7rX#-jbF`oxEL7f&yRAs|0Vd4&U$LZT#sUWLzRK
zw=hDYuuM*qdv|YuI<~E=3Yc<*+&yv+*`KTtl|9zWBsl=hc>mB4fJ#54u{UQLDEUbJ
z58mD~EbDc97j+sSND5La-Q6fim(m?7AYIZOf`BwggMf6WG=hX8Al;30Nl15|@iNys
zXP@i8KkjS$X|2he^2YBO&lvZ(!=tzUttJoQlXs_|#VEj5Ma1_ra9?TI<cVN+r(9nf
zm-y=3MKAIe)hd_8MCwbfUO4NJMl>`t(+G~y?DS5XuOm6A7^Do9lEF<zt|=#y?EY2q
zC7!1^VI?c=En&}(4wqycw-S4%zF|TNF@3w5x9rs=Kj_sn4Up(CJ^nlvOeN+!Rf{CI
z+nFD~NcR8tK!Fu|AS`n(UJNt$)9UC5GB7Z_@L5wv_CJS4Vn`SK;T^t@j7X3hrV|2;
zOcn-zJLR*p>I%a*ZxkxcvbfB-Yrn;nm6gfVQX8Q}hjg6H&9FFza@k$H^2_2jnLK_-
zWe#7REM$sXOZuZftnxe@KSLdmxT#z3$`!K_dVS$rM3hZKmZrIu(QROz{EG#Q6s9NZ
z<H3FEvdaQ0psu7z0Z5?&P-*PRrL-;l^1%D1^jo-0FU95!eUPS4Lje|tGauzT0k;5L
z%Te7QzL2MJA6wm(IkaVu2l=69+0W-%u&wez7Km3>=;r-=O;EKk9m*{R|6LG@OgC;J
z$RW_8Nd40{Jlrxq-VSzmXNQfji0n<S2aD`m7s}{3@QWfp(ZGh15}g?0W@fJ9KYRy0
zht>FQj?6X~N`QiV#<Ni!Skhn}zccfCq&N9aK9>YamOp0W0RN4Q&BqbsX|VTf2hXu+
zDMy05sG~68P}bU!@lhaD6GE@R#i#Dfk_S#Ru!#iCM{e5LfgOlz8@?0aAIM9E#tWjO
z&fs^#-ibZtO!R9_jJ<Umgm5fE$l~x9omc4#`>W**=eyrP8V+1Cxu&@k&rR4G#^>dk
zf?65gOzJc}0OL}CZ(o7nOi3V8$a!sOd`NAmkCK^Msa<O4;$cFjKxm;Sbat5oRDy<2
z4gy2bV{!?oq+eXM=J^r0R1WLEjzVbV^qMuO*0mZv3d91_rB0IsJt4D{s$*Rbi!i>@
zik)<FcW=+h(NRI$YXdvFad{V?=6^6}0O%w9R`&#f^L6}|FZB^^u<vGw;T07X)wE9s
zngT08d|AjR%thba(xQ<Kxfq#rJWO&`NV~ga7Vc--CVKVh-|Gq*<>~kvIdEGSpIc0j
zm*!UM$0eqYD%AlN>RGww(5YC}Q~G#=3)75zas8wX932W^NDme$)$qS7BNpI!;yPKP
z)q-oc0y-ao^KC>x6g8jP&AG8sL7C5=RC8XhwQVAeQ>1D;(rQs+5kIv(uRn6lVh{bY
z6{UVY`^OrC3@QO<M>FNgyav%=YF}eqz1X*kOyJ8(;7ft9Tj`44>T|W&(1LW{?Iv{^
zxHqD^l%L4|?xyjRI}995*i1<OB6k{>mC1Pswf!EdD;qraOfNYhRS&pY5MN*i4woLq
z#p19x13^}nASmXMfmQ)gqUwax6{h|}Z?hD@PM=@C_xM$NFIcR*I(z|b^6lHVhjJCO
zAWTonU3{)Rfh*Dd9SJxGG)l)+fdov}RF;Ty8)%Ly+7O%qX#^IaV63XHHlM1^+pHJ{
zn!14Fh5?8e5hpN;rn&;wV$g6+^`;<8RRWC*Pl|f(x(Jf;vD2wMUHg$Y7EVJaOR6fI
zC^6GUp}!=&s(H#|Q=Ds%Tqai<M@-i%Qoi<ad!T%OYdKs`d}kr-EFnJr-QhTLrMWt6
zR!_j93>JjE;HObl#SNPDk(6B!JA!@s>OfW!?l=g1A+U$u4z^hygV}$9u&Hw2EYP@D
z8&bjLfa@?;?{)>A9RtU|ND?8C?x36JCpd4ofmyeTTBZH!eU_rB7pgA(=?^05B|n}Q
zYL+9x?}+rJM_D1kqYby}OT~l&0KSuQ4u();C-amcJWTS*le)D~s)K7E!uK0(-<z9$
z7ik`66-mA3{g^9L@Kpox9$CxP*u&yWl?uduLj!E1X|3<Fsto-lldSS*39~At_c8v>
zb)dw2K@W-xt${aS%9SZcyTs+dPFSh`Yi6td=%eewDD=lt7YfvNHgp?Hst7aQH3PWp
zGOg9iGR;f%n9WF|L%{pYGqdz|4{VMYzJS^<=e`*1JV`4JosN`%$XZen@<mP>qfjNU
zE-9&qQCzFIqEkZ?UDFF;9~$p33Q?`V#Oi=}_qQ5v{sdAjZ!)134LJE3&}VYfn)bDg
zyf{^7e?|CfY}Wc`sB!38bV#>hylIVsnNK9r<G=HnSDZcIITR;&)yR?{23GpJuzAP?
z86_}T@7#-h_3D-MO_lqbeB^m=&yQEvq7jBdD8sr_vUG+*_1tfvX9H<%6&R?N8BP)L
z6vxrXGcP@WmM@}m;KBXjgBNALkIfsJTUuc02MjAP5<WbvDlU$9Y;?QUD2Bg_kI5xD
zm^Eli8>ha*5RYrkQ(?!>%HFM^Zo?K)>V=s>tP|vFEoJ7T8G)p#8r-VwZt(T=L)y2D
z`2-g36xq*#ib&srf)tbMSihb$Zx3V~Pv}n!rnZ6Fk(KrN5hv@mI5b^r+X2`<9#<D(
z@cf(gr<dZ+WEO+8OB6zpAb~k5>L<hp#8`s$OQY>lEqE;C)ZNrfNlnGC&51l!;_cXn
zjusxt^I4ziGDQ$2DzRf;59n<plr@C-)?u}t<nyhYpYX$C#%QVZ(PTs3q7tky>1sLU
zdcAnb@;Qnv@^{dRGR&dRTqpYk#R7Z&2!CnylOirSHXp8gMKQu?G2YTae~A}yvP(xL
zg$s)*Qz+7uVlOOYC0;ybhNLVYlheELyE&fj{F(`RU}s~;K&LF#{{^(KaCfbbS}}p1
zb#tEi)BwC|rJ<sbT_D^fr==EEpVz^Ht=@S@DxN(H7UP#-lZ1?Z$~sO5^4?5V6DtxD
z6X;f8)5Y}v4vccUiKe9!y9%}#?N-UY`uz78zQk8M9V~TTZSU`!OjHQ(Er%L)eWEes
zxpyxZZm~b3Gn7=IYj#}fIPgLC90SS^m9$zYiJ&aGPMSy$n1jny8G~xncImh0rAu*T
zr7A>I#W54s#D)pL#0W-`pvam4YgsV~32w{R@=hft<eQsRVUM1IU=ZxpN}=OZXU9Au
z``~CpA~MVL{T*b@Zgx-mV_7k@JM6Y9Y_Zba+C6;UStLeIJ|7j~svJJV7l)b|Dr=-2
zLPJR@c7dBIplNL#P?#JTh;nr8Mfra51)V%kVJz|>`>1qAYVlr|EC}Rvi%sJhvrgv<
zW~*?Z{QsXqTl#4A5o;@F1~?ar{~x+zY>a%T?*=&IQAJs|(IS4||1E+^$hH2djT>5?
z=;}CN@I)s4yEv<J0jvks!f;N(UB=3s8d5;?^xhg7LFAL6K{V6H5zfQCy=%h2EPBK-
zK4h&C95;1z42+Dl4h>O$i|J<%ersxAprWDi^~;x(q@>WdTMuWH7Qm00_C0ke4@|bR
zp-~~YxVVo92{luNwDlLN&u>TsdMXh|`&U*jfo+HqZe?YqM|pgBa0lWeapoBMH%n}{
z?!Z(b<!#~HvbSH~UMBJj#QqB{bq9ooqNBM-fS5V`McG{0$u2pq6~^`X{QeLES3o?>
zz#uI<jC9cM*SXvoyp0t6;kr@2Vf8*UH6Y+F<WPwJG}v1bclPlLpOm})rMD>WfQKIJ
z!D)%86Iobpg83!<Axf7ZJvphG)+G-$*mGd<-KAEzewenA>WZ9FdT(6IY;T0ufwuBs
z{U|vrs}iIyKvba}*9H#a^XCDPIM*L@s@C2L3kmQ3Iw+VA9)jB{t3g}tpFe*p_N_O@
z@}OJI<~)RR+;~y-{6_&H*IFV7K_I9r6Nvo?TIcb0T4W3`;cG#J65U#5(yx@Bw`sGt
z%ya?8pcE$Oxj%nE6$S$pIG%1Xj6b~oFcOUP_3a?>VrmfRglA{Sv~6<GNbZaqr+|3#
zGET=MHV5>F6%`dHTi7WbkfxexkPH%?k3<I!Qu^=Qi9t8A4AiN$jOP(er}}Y>nq`iE
zYp1?lL0pv@5FrtPGE{C5{sy0uNrJy5VIH^#sY|~D*Zx&@Ln)Fc)?)AI@1(%I@FK0Z
zwY39cJL1%-Od*33@<)N9J_@E(VBl$^r49vlqQ>qBZhfeQppdEz4XyO<ng#wKne5Fu
zkP0lWg4z$vh`wIl236-fQ*fpG63=OB3-sdVr-YxlEu?^Y0sm|~L((Y^8Nwa1fF#Lb
zbPmdsWk^fw*as_zsmk?UkRDR5{enL~GwK$FM1LCOo6E_`K{RkZ7$76~lj{)_jVfh4
z*I#R21&nvFE#I0B6|7)kW|q5|CMGsDhA_nbu?^86>wRg%kR<^G7`jj>$bkU?1ibrE
zKnLEKxw5iHgJgHWemG5LFP7qbiV6z>GR-B83L&|gf`q!v`(q&4B@;#R+-WHR1GiN{
zNaIu9nggH@+K2|R1}LE*3nYOHDl{M<+R@YV3RJuGkhh^(ZUmlF#>d+cD3V!@>hqqR
z<{%D>&V|b>6(A;H!alW{J})k&^0;~@o{mCk0R5KK<5(qKXsx0*LQ$`q+@4h1B~;0<
zWO}8{J^*7VUq0dETWd{v=HdwL69f!Ug`FPM10DfAO93t#xTw9auTOerFb&U9XEd-_
z5SI^_DNr?V4(%6wX$6rYZ5tX;bL(vuCO|NXiqEW+rzB2w0bPP(nZXN`SgCX7_aZ<X
z8PysCcfcNgx5IERFyjIa#f7|}EF{`Lb3c9#T&?>?zajJveJUD&7~n=I<|$=S%N%PD
z%)&>hQ2crvrg18*`3loPU>G|dZ~sH(_V2j0UROsim&je9^=%pIimsL$)P9wldyDNw
z0uI(~G+x_~#R3AQ*EJhMh=Af;ufEZv_B2t52j|PGf}}wK0OUxcAP=X~Vv<{N0k|Gu
z3;YUhA;QGd4d|!CAz~Y!X)WEeB4;yIAzp}GSE29T1tHkFReN3uu33Z93RF8!4LdN`
z22pT2ASuoTsBkZC&2_{Sw1%Ep4rYhKH>y^~bKL?}Fk4MOlas?xn*Zj!V+Po_!(Wiq
zMLq&^M?;}xB%}stX0-hP4BjX5849E#AIVcLmrXP}<v#<{hBl%MiFZt@PaK?qAg?4Y
zV>k~gWZ=uGJ_cS$L$kva?G%^vJ9qbujSWCB_KhDswf*|cUY?2#*ejbr5g~l|i-rz3
zG7dsB@aV#zl=0Ng2namV?T7yw0R*tz2jNG7^_=&qx_87Z9MK(6;Nim`Z0s6n`#|>e
zT#Rvf4b(M)1GJ?IK|yQH2u}!pH{l}G>H4!b;4F>G{=&duQT;my1egDd1;8mjAOY}-
z)YN*sj4Cbd2heOT!0smRs4w%y0w63Oi7)=bf9;2M^4g=kRuPc+2K&_k$k)r3zfugf
zhDpcsbV!htR7j8~zpJZ@a-%&O^xPmynS-kHkTaL%FMJ7?D=8Q3AX*3nS33x6{08|p
z@a;uQ5^d@1X8&8dqao(2NV`5wvs@x@0#Z_{t>=Q+^gY7glBShP#T@T-)H+xQT1}UM
z84{=iz*o-SH8BV(0d(lwoh)|18f*GV!E0}lMH&U1o($t&r~60_!pxUw-{Bm0_QLxF
zB$)Jom|nfO4t%2HIgI~~mD+*+9%iF{!zL)Ia3T-;GbGu&yW%;bKbXhH(k*D`Dnx*;
zdMIC2xse2fE)N)DF^M?E$_#&a-^oJLNE5j;&Q${PguXrntE~x8kx@`m8d%<Rh=qHC
zmyeHOJjN^2;!Yb{*&fA{CyeXUieP0pGSZH_#L@L%3yR&jFzAIaF~P^zqow$ULCC+R
z^q@9}2LEz%x?;fxtxoglk}~5zy>PMjTOffyBk+HtiXGuFxoYHjN9Q$ug)z=(qni4p
zd${t$5E2zS!Xki5DjE`0EZ53kH@J^?cgqF}rfg?}VC)w1Wu8W<UV9{<CRgbYNG2>S
z40Gz~pmcG0S(#KGPy94^+8wDhpco&U=ewhV)pTNU*fk+I7mM7k%^2b<6)veKCMW3;
z@?0gn2)=49Y9qLB-dC{l@JLU9R61g#d1Qnx`>p|=q~tGfYkzkzOq+)e3Ce$gqLnRh
z0irdt(PFTd+C!X@={n7H$W-*VEHua$GgSx_^x>?W$?zb;eR_0{UZ*hP>Gc5B)uqzT
zZnjcJ>gM(k(Zx-S6l+Zmu~23p;(ox~`xw~aP#iDz2jwB`sc^&%>{vFJma<F;ys+Xa
z*xA|F&3t&TeoepoE^f1Ib;C1@u|D|y`@8f38aGPg#?o80^?A(nBER9vZbo)$1qB8k
zHSRaR4q*#y)mUg5b5q|y7v9iXeT=6Od*=$1uXdcVgt26Q<!r7zWqdr|$;iprKKY`%
z&PV1`axxvn<pczD<iVu?!uf=rHh9{C{EF}n*v)1ujR6%L9#@nHWX934Dpd-)rbbUe
zi9Jp>HZTQq^G5uqM0Ft5GquE;VV(Osy0MhqT8K3b0<B*kwbFB6B@2TiC8Lc@AUv~p
z#2&aW5KOQqPn^d}(p&|iuP%=!foBROzTsFJ0`)+8F^#X|PEC&-NChDehMjl>0BV$n
zhIWHJ*lpFe>3V;tH>O5L%bU{%%>h5==4g6T!YZn&AjbZophxCmw2cjl;8opn%GKxK
zIRL?mU!OFB%Z9V7>s@mAlOJZ?Wo2ZPud=MZYA9LxXj(wv15wupc*W#rK!?8XsdN`!
zs||Ewz<b>KfFkdCx=O=Rw|x$jT#qx0`sA#x#3SuM)4l+B3~cuQD4GIVMyKBzf~TU0
zjg3zuOT=Nfyx7)e6749T#LMHdJ4VPs4Y`-~6;f6b63bs2EeQnNSqDk6v9T53QHhh<
z+3o#)?Q8OV`*4RW;1|jB1CC3s4^Xb)0?gqIL7ijxQdeQO!puL2a7U<FN#5Hrr5>t&
z|C#@+#$|7sgnf~2XsO|3xe>HHCL@J^vSvKax;r}o?PCVV44O~?N`IH={`9>Ual8S6
z8l&J9^4I9-@1!Tt2aQvb!0{!Y5J0*UFzm?8$$|7YcW`J>8Wmb&U+y_OBH^^!<gl4<
z22S4>tylK={ZJ=7_xt@n!HKJqPoZI@u4_~DC1;_ebcV{L0hw5n+w?ELmw}5cJm8R@
z;#bBpy$dAp5<k!)damXDNdIT=$f^{qC1aT`u&$bZ%C{};-osCiic(JC+M_RJp^nLa
z)17bt$`o`AO9sTVm3!GVR}mVjs-%=(ROIk;LxNbcZG8M`=tI8YH@<zJQqGj+$xt^V
z2WCG%4J#gP76Lz#9i_l>0|NtE+#sXwIxc;%!I_$x0>vmqCai-B*xUQ2=`-ri-d_B*
zJ&~*kkid!*f8ulcsFZhpc}8_NO3D5Ma5$lj0R@D5<shk%*zxBlHaGFAA!8m$nDPmn
zY+PIp<7Fw(dVoEQ_3ZacC>i>YFcglI;$l=wTRSYAtkMLI-y&_Fxy-@pcWI)sk$jhI
zbxt)T1(KX<PQt;rL0AjBANyn*7^+|D)$G?OB>a3G>>V5)pbv+W!D-V5^`wBUt&$Qd
z@lKJ83m24s(Vf6j8n`WJsHrzkR*e6Bo=2@W{C_%R{-~%xQ&-3D-<}PX*8Q4%TjX}5
zx;9;{0v6deYy*dgY0-B-MMYVXLgkcu@#29YWN>c45BvhzLjF-%v$eBh1GZ{tiGOOY
z-3pdix97!r3PD@1I$2thz&i>4oh%6MnVn6y2JhTA(S&e&LHax8M0v_nJLvU<r>Dio
z9lAcTfhs6Q%JX@o5*EB#eHj_WQM!RiVHt4=@j6^|&<2|d2{E|yDJmZ4Ucd&SzqZn|
z+$fos<O?Mq-x*xB0l%RsG@ayDz(Smki{a<p5Vx6{iWPH<CI`v>o9Pfz1X6_m&S6%s
z@K89>W%JbU-%3hK3Oj?$OJGKOxHc?(6=GZSI<3vl#${jBJ83H8;b2-Gm9$6m;Jj08
zbkE{5yJZ>e<N;Xzl$2mmEG#UPVhr34@NQ$uV!~F2dsmXk(TU}yMV_9ivGJMn<F{Et
z;HDf5-468EaT@;6Q#x$^&NJe}$kzmG!p*VL-tlp4o$k4xzjo4m{YiSey4EJR3guIh
zTXNu&>45bE_$&;ArXE%)!r-?gb`Y2S9KMFc@Nmf3wJ<cKi;5o|T`(5ApT#c7qaKlz
z1i}hm&VXv28CSxV42V+gzwbsUK8%qEibZqU!N-CgH@)&f&UN>Lwsx}fgA@#<6wa)k
zmh9Y1$Z1GTrHuKf(#`xGMBI3s7`A|0fMf_k8h<DBj6ErWR|C?X;)*+<4F{YEPki`!
z&i=lAH>a!XJ8>!wurnm;X=@X+k1oDs#9%@re)gxG26;9^quv$0i6%cFJq;C8kj-w{
z028wsH1{AKq653(DUM#5CgVEmIZS|<L@yNF^xk3uS}QDEL_v{JZ8Za%N$dZ-Z~KkV
zCerlOtgJhFx~{I&s3->q+PF$LK+5A_W5cOhFut40YDpS>iu-OUCeB`tP+SXx<%Mw+
zp8psmJgyOP7=7^d1)=g~TZDBc9oXxnF*m2B`g1EQ4`vpia@ox(i*`(u8*hO`MJ3-G
zp?}+&nSm3YLf7Hf`)scZ*z0~$S|BSo!izRc8WQV2Nioh0?V6bZyWlOb!wZfkc;H|I
zx;oFZNpo)Qs+KMOfHv3J?>}I1^9CEv%8$VT0p#W$xKKg}Ilz2QEmzgZ&@d1QEs&p?
zS%9Dambl0U1cSKge8u{^xk(?@UeVda3pDKt>$yl6>nhEbX#TBck@Hv|(cl1WY{)?S
zOp+gX`aH;!+ANe9hpXc_CxracG{}pfZ>ELzHnLM&ceiHarBnCg6+Q>lC~c5F_Q8k0
z-NUy<hJ%Os20GQ(wf5t6E?fE;rqFvQa(kh+WYCkZdB9IZdfXR68>LaOyuBx2Q@N25
zhWEx*)*N=9pwT*8EBIo_9^BOAZ915Z>To#O=y~O~)qVC$aC(Tb7z|Q1eqsuI3S$9f
zs$FY{v6P!62x~xQ+E?d7vbe&qgQ9XE%WhUfld@5+|4aMB;SV3=SyPZ)z;|wU__jHm
z?3O*ZhYEI9A{OewNwrnuMJ-4)$kUO8I>ZOsU7w8Mt>GMry`yYtd<m-R&}gYF)=1Qu
zPul65y@P<nH9<MWKIB|*C}th<!U_m0YbKVGqKxZgEA1Ii9-A#ITf9p)F@q{Vs8VWg
z^s9rklBnz}xKj@`1XnBQP*G<;;hhN1k4sJ-&kVHTO>5$HbFB@Q`X1{ed-I{LgkN2x
zEVd%JBsTLs8G8v*nqwlg%{DQvU^li0>N<m|&9qNTcKJR^#O$-@8;1}pb%^{>Sld$;
zl_$Erx~TLsX3PRjKnyaak|L;#p03L1=-vR+iR*`4Y-uRm&7jbO`no5Au80yzgdGD{
zWp6jc@zln&B*4!Oj~OZ(wxX&&Ddj>*Wo1XVs){MK*n-AwJW9mV5zt0pcHFwJVg=?-
zPx<)Tmc*++VyoV&6lT16?>?e_h#8<gtD?>jR<X0Mz`6bhDw5mLiipMrKHVU%@aw-N
z*K3|G<NBwbxie1UR_~qFMK1{M0<;hiASNuV3s-=)wzfw@P<+X>5D{2*mxKPdw3M4`
zX*_}|_eAJZVj>vrY8KCGYiQ)E(6hxMzC7~$N6p}&k)AvdLAdevuK~N=Nc0-IdySN#
zhh;IjfB^6crY9zXbc!)DvKC=#O!3qv#>c1O2Q45!cz}>`0QKY<6H|9M9S1vm=3!K1
zB$#<onE78_Z1E^Qh2a6=H^$*5l~oG@=u$jM#Oo)zi>9eL{`4s-Pj%~EG;mKs@;kjf
zL*1b4UViMc!(?pOu6a4E+f_#Ap$v>K85hBMDADl2J!Ch0`SR2UnT-IHQR~A6IVP-7
z6@WK`ig+XJ^m*K$;&R}wU9SJQ&g0&A9J{x>yA#TRW5%)UXl3Y2{*B*E6Z|d`B2Z9J
zXyiV_@B_BpkWPOFLJ4RfF3#O|24KkKbwmpd_=<%$(%;jw3C3UeED{tyAVh(D7aFNY
zbbmnd`>D)gl9Ywz3v_g-2Oh!WU$nk~28V~!ZLuw4XoyoxN=ytoK(OSht>F?@CfJ;5
zY>bJC>5<Yq#G#Rc?FTqOgGJaRbj(y#2aD}E(D^hpbc0hTYv`dZfbSr3a9<r*>gtk_
z@6CqhBqr9x*f@AR>u@I<`cvN}xD*SH<)xsp{&c5N0+Mi#)<;JN2JS!Tf$ltG)1L|g
z&CRmK_{Nj~{Qol81b5xw;2<1hHiI_h7JM-FECRse-2H)ojE;^@p@sc^*6-hsYMwnL
zafa{5)fFlBK9<6M7HR1W1nrVw2r$#o&>#-O(EA4<k;^eoccjeKwYDvjfBqa?0$I7Z
z9%LGIp^_cu_VtC|!zYgz<fMSGy%gv4BbXQVc5z?4XxG-BhTq@n?0fUUq>Mr2xjU7}
zO9_cq@W%7QB>A2k5%*s#fcwq&8<er$H#ybdxUktS1}J7okkd|#jX_IALrV*djGXg}
zm(75}fTX1FtH1vl{7*KdBJg$y0k^IfQPfn){_&BKkufn`MqPh^YeY(?+tr^j2UsZq
zpCe;3_y`FZ*J$vB1O^9-#@<6g>1Qmx79>5W$6n<BFbvaonr7zAyfmP0kQDTtQ9z(O
zT%Qez@awDUVhv<?V}(VWgi2slqqf6&7ajpe8=HuM)Sh|PdrfQMWTHTV0FIZ7d%ngi
z0}=O-=RP17UYo3D5m2R+=yKazmUXw(u!On}%pGdP*(G9qw46ryMqj^s;>}O5Euxtx
z4NiC{Tp^Q#J)+?01I`|>2r-kmbEi_=FYx0>3H$b**o<P|4S(Aa0Av+<24wtx2Y^Z)
z?GC4v)t7WG4mK1FjE{kV;`E)O2`aQfESQ0`q^Vp;+qo$EZJ(X@4-X{_=mqXcMSyYn
z-RHEMWNGb7w$DPt!Wum;5-NzOnDHM-4;@v+je$){YAQFucT@^@y-73h@C%d{^8nX8
z(dppO(4RE#*`5Pa>-ASiP6z9{OcEM^RDyF&+gwU`gQaC;gfi<K)|X*G5K}ysiJJIz
z+qv1TdH+}`lj#!vMPFY`I5dzp?bnyvo{p#r=vWxxySvd(Uf&-IpMCi2s7EMQ_q<pg
zEUx@#$>NNq<w51{09-&y9Q9GjO6O))+<DeeM^Z5@X}dDR3<+^_UrO-aRTIMp!yvJQ
z`*FU``g%&7_{9C*oJwo*cr_T`Ty`{Ja8h9ViC1DZa|uIFfeO9iey?ypNn~P9j&We;
zaABfRAko?#ej-|%Z@iuY^MJUTq?syXnxd`c!dm25qw4KAc^11bIc6t)>GxbwV;c?6
z!i0)Ti;3Ig<KsbsQ|3$Z1^N6o@a^6~+z7Y)Zi%SSK~WV(M`^H`))Y(JxkYBC3|ezq
z6x0Jtzx%Jj6zlx_T!AK<`a2{BIBj!1dGf?$8Jugtih^4roz{OKUg3x?2#xUm{f)V~
zh$JmsmWX}(pqC#%epG7AaBj8^T+a|#*$dm^V`Ac`qss%+0Z@z!$J}3kKaldpYHy_I
zmclR5*NhFn@5cp5aPoVu32_cjH(~9CH{85=&c)!lIzZ**bOhBajXWVa`6C+?NC4mX
z9XFi8!e9q)yOqmET@nCv#aqoC3(yMVuCqw_r<3c^WbYqYWm(1=%i$p2DAi;0xrlc`
z+?>a)Tr&-+^tG6}FpI*Lf^moh^mwC(fBC}sIU`!z+v&*2h<(NWYJN^idR2`f_7t12
z{pU}u++H`aPrtzj)+pNY>7UI_n>mri)j?wg{pe+pTt4S*EbnkB)xMlw9IE0jDAxeK
zK@Kq!e`Q6*T};eI_Y>46Z7{bi^>h9W6|0pY=H$6yfDCWvFf|i)BSUKV7~uc+<Gw<5
zgr>>lCjG!D#E!jvTL>LnQBg2&+K(zQh<B`0zIQJ^D#{Kq;^ciIW;=ks6N>nd=?|!m
zOC9jRVm>;~>?y;#o5*Q1+3=39BVR)dCR6cMI2@1|u3O;~GrD=~4~IJUA3b7|w&TC%
zoJ#aD=|Q^Kv=7aC92l`1BH@0(k4rz3hgj}L*+e1SKdd3%X>!B&9JrGP@YaHsm$Rr}
zeJBM^jLKDoB%T!>L*R#O<D2|A>tldy!wYIj8717gU$fb(PaIn{(eet5s@?{jQ&mIb
z&Fn!ReN2a#ET?l|AYF3uX8Qe-sd+cy?>%kd>Sc7~`LM!wMn-;h?&0rA#&F0X=wy(d
zpsMUv%Be0Q!tQjAboW(K;;RKzE89xpC8tNBYk!np$U6=QNx>ytk(a0G;USRiWM>!E
ziZ5^2A{vp*c{jkD*R-VB$U#l%swU2L8hd~aHItV@b~q@MPV%0}7GW|qb*PLC+6Dc1
z7#^ZS!hT^U%`J5B7G}$1Q{)&1(VLlbnXm4tJ<J4Wd)@%4T=#p3N+2fYm#ejcp8m)5
zH|KN2|1}VUCp$3kg`Z4(Y;1CTJXO9HG&@R4wmUmDH9_0kI1@Z*JhjKiV!q_^3Q0}(
z+7V?n08L3jVY>x?=3+%qhr&MQ>CSRDA9$&d=ePLY>xa82#t$H-)1^3_VEMgS;SKPB
zi;Pqfi#a)*Oo1FAs*pKg;H>nBqvpG!eL%blF(j~ZsVy(pfAdDjqLUu5gqGUXlx$Uo
z#;fy{dRPxh(C`ADEa1AInVSFWQvBZ+VY@6Nc6Mm-`0-zWMd036<$$pQ3`@E}09#pB
zwlPwq+~`qn&+GBbX1*&;^jET*W&TiJgM^Y2J8B?U<$y961;Y|d-4$RcYHnT>5B5ml
zcjMI-(fnd4J@X=}HGeC~ad%@p;HjN<__AuA3W;YORymMO{{V~!j7d;^ZalQABd>Rz
zYii+l!)RaHEh(AR{fQKqemNYR03XiEOAQU6_~+T^8)qrGtPMSlm*KX4Gt<|1I1mCW
zrkTq18^rZ>2{1_8{hgRu>2_0I`5XOpVgPWx8o`SS$Q<U=)+W9<6P(+c5g|$m4+o*D
zNAojv^|+oS(Ql6EgPK&&>LKjPs?p*Uz6w#Qy}q;zf;}(`hnNO-+T6-i`k$z<Vums@
zZfp0Tzh8Z#8WRl_H6$=lw5h*tzmvs$=XgN6_ahM(m^)AaQ+6bojeMT`e$SwM*uV>)
zJ9q8~UVgnFzt(~e`5I4As03DV2b-Fjy1EK)A%7&*_(;gHae47cHnB?IT|wbH)CVl=
ztnrMDFGj{Ishd2yO|*P`uZEZ+$ReJL_b&w#0$TBq&rxG*dJ5=AuFG96vgHF8M}VbZ
zTVn5J%evLN*li6LcuK=guJ_aBpgaS7w<&IxFDI+K)<-NDJqQg<3z)`h9je2^@JBLD
zmBZjxqM^jqvWkzP(kWZSht4pbgN7n?e(?K%gW8K+3QMExN4GTo&dxeM&o}wi`=ur|
zzxlr(h=QGHx}BZ5x31?^Yyc<tM@DOlWZhFO%a)zmIU0Fo2c&;aJ2IAw({(@N<oG}9
zlQKEND#PJ<8yjykzj^!mIevY2mb^R+jnVPx=^IimuE)N@Xt2tHHSziR$@8I2vHnW$
zh}<4BL){owqz6ys<uOgQqc4*^Tq!3c@2P*87An`(CF7O;Ws8iy=KqhCRWIOr-~l<i
zv0)E^EsS@>pBji4S_1|OvV_jc2`{fABsAxnx7y-uY<6fvKR!CaO%PXth;dH6%#@Tc
zDb*6Uqkkwx6;Wwukn1QIwe~*du9b*fpK_I|3`zM)lR1Vs;|0XCy}cckFrap{nG}Ai
zR(w7)UXBltA193lY?qDOBbOfY-mbKq%5UbzE`T1d)?#uKW)r*pKQC}MIazAH@kAhn
z?{gaRF4pd?WR$#yE1Sb{4OdC89K0AtKK~3fP}MWe+1w1<JPUn2ni*)Wrq<7y>pstK
zHbOEd8*NuvdC!&U<#9_h?l8wNO~WY}y41q0n=i97Gt=kkbMfBzUe9E?Xu!8@<30vN
zBrI93Sf`Oni-O0XEefC#VA1%8RKSN1UX{`|7=y^SD}sV*pIN^lTC?J{pvMjR(x|PZ
zp%LJ6>(&K$tH9d!i;L<?89z$d(pIAt-2NW6wn08V^(rEaa&FU+33Lubg&~LgRK-4*
z!y~s96>+&__x4l?+B%ifBl8GZqT(qA)mG72+pPantPF)#d)wQ=DF&ZQ9~S#g@Ep@&
zrH?Hw0DR!>4OmKS@)H}Qp<FToNMjfU^MBw&f#9O<a9G_~dPT!5)dN-tY@U~|lr$!4
z9n|9sbai$6t1RBA3{k0!Nikrm`BhgN+wZGpa?zpcp$E%ncvdRv4}HGpdgT!^l$TfS
zGzeyzPm1=ThypkXMu7uRy`qh}pRt91{!E`cvGebIo6i3EDGr$2Nx~WI)(Im{qM%?&
zJB&$6;;@?b#JZ`-382uglw~3jXuBy3@|070y1FJxbic_Z((a^5QD>3jj)Oacaa#hZ
zB^efEWGkN$JyRcTEiK)V%2Kk!GjB<iExcMAZq%x^cbIATxzZbF?Sy_&5SjyzwnCl?
z)OXl`AR|}fi2HU|<(m2Vrzp_xMG!#Y9nX@cZKc401=H4)8`d59Ov%43T&4pAY4|Bj
z0;<BQfe%CwV<-7Lg?=e1so1hmiA3&y?z#a_1`Z4~Ok-bd&LE0`6)aIwf$(lBALxGE
z#evgsaY!R5m;zf9lU6rZ*Eb#Tq2tAfN=o|o^<hk`XvZRPy`ZFu-mT~rhK=W7zG`Fr
z!N_^z)rFxVipd_7xJS>N?I)}Fq2z*nAejF>;2r#<^EXX2rFkVh0m14BT{9_A^B@2l
zj6?W+JQfpP@+jhR?sw(+xr7otPWMp?)GoHJF1Hwl)L}w9o2Y!4x#Q(^3D6_B9f4Pe
z4|pz6=XP*5VWN2F3QNhz?Cci~)obohycQPr5=m?O|92Dc{lLW}k)=hOf&afY6lJB3
z?wp?@A_6yZ?6ghd6*xs7cLA30y*lg;lg4(-cdvJRP8h>3FVfn|D=M&JeAZHyT^qq%
z9Jb4Dm*<{Aw#D4^>9py1o-detA+}*)pE<)TNG~wuVLECneo8}R$#6{#SMfHr`a>0u
zU;Y0*k7d>hA8q4l1>?J3Q*+q2e){wk$`y8seMd}WN6rsqOufb{kEir*K)ekL4HdK|
zeH2rBKWC_MB4PcOgUL*|=qppYm()=x`Fam9Kg2u}j&IXg+mz=+T>eXCM%`PW$>A`T
zlOV=X{oYxy3V7Jz#?!AxvZx{e()|OLet0ThV)!7~1#fwgRzXTF5A_pDUMm?oP+$`h
z6M;KPbYXuJ9+~u)OIx0vFH}k)LSRl_!AJ3<P{46qVj@kP@#L5W09XsgC~8Kzt-9qZ
z^m}%858B&J0e@9f!~4y6jrO1!n2<K>0_VC|D$CZ+{Pi@0VPHPSe2T9xnrBtjh^Z-I
z?i=`v*l_M6ZdJmjROOA#i8me%9mB)Err~BZZ{x=Vb`tMYsU~;HAl{q7U7wp|`OLO1
zRpoZ#r?TYvz<a?MQ**hcjCjDwMWY|z9bOXlh42D%AC)s*hL)-zrdV+i#Lv>%332bn
zNCCQ$MVf!Fq)0E=kdzYf1A66galuC#__(+#{Y7#CAsCbNRT@Ylh##f1L;Ohe$NU|W
zXv>GNrYC`nx`6!qRjS>Nup6qY!+7{#EC5=lTze$dyS@?bM^k#wm^F9nN%Qq&d=Rgh
zk&Vp;P}9!eHJ&#16>+WS=X(j%vP77KyOe&==6UB!!hkL$6bw8XsX^#(+NY--w`VU0
z_65&N(k&)Ofbzoo?)0_6;*wgC`_W&%fgJg;hIejeEPsHv^QvkiBuw7k(UFLEzn$CS
zX66pGC15rBaoA+~_cyB<ZFquyJ?C^de7hLT(i5INUcU0i*0v+_g+Amv;WM40+=Bg+
zlZ}n*W{qh=O!MuA27wGoOdAIa#_me1nK^h{LqqnSS9lo`=r-20FHiROyMP#`ZwT2T
zr9Ciz&GXl<vH7?X7L@=4tJ2()>F=<Pr<Om;?dvv)X?b;3*V6LiEG2(;N2E@jv!;~!
z-Io9}tWSNL9LigOM+Q0~au)f(of_x#w!w<<q$H-$-p<ZOm%T#>ouQF?^!U+lIX5~N
z7Z)H`fMIRR?-~}k9=*E)!vlAq_-Qt{Gu@oD>y>q|Gv9?4CxRd=yRQ(Q_NO%>?|g1_
zeFZ-(pr4^X=2dW`(s5nYG&k>rD`k0QMS1~fGhA<kQZ&n{_1{4+MddJjiD=;h0<p2#
z(5DMiPYcZWFhIxFTd3LF+R{>gIPv-!Vm+WrAG1FI#Iu9L$t{Qh8ieq)|GZr|Q0|xR
zlxD639|OJybi9Je5^@~_Y9FO*`D0kHP5=6}j;LqNIZ##qSXs1&1Omf>mqIc7XBwF5
zB`NAdE&w{Zg_V^RO_1K?9J3bh;nvK<pBl9J?qC_?cDkx~itoiZS{NUvkiwl+ADR0I
z?#ArY)bCwgZ;v)_l^e^)t%b@a*7hbI?Z8U)RmHY=C@hK72z(l=rxWze%_(v(^CyI!
z=r#=k;|~5x3DV{;JWS%|H<TXX-{lzzYTo>i^ve;3_8M%N<`;^JEFk^oo5MP{AApVs
zqyRgjlnjepfGmW|a>Ltz01wYQ;;!72=7S?EI$4UScK3Jhh@S-vlibCo4$cwY-nJH<
zK0DvD!oK6<{W61+7O}doG9Q&oXuo;$B>=J#(OEB|Bx!ut3MuiXG9>ZQC@CrDZamzg
zVrPHpieiI{LxBaZdaI*4JV44|V(k-r@|CF<zi1}^e8fAz`*^Zce<g$vSQzYVtvx-!
znu)U<+jgs&5H5klqgOjSFb7XHdTw>HG`?0)fF}Xt8Yee+%go&K+<c{1XJf4N0+wVs
zvTiSNld|%}G}w8r76OP2F;|Ba9wRwgZg()0gU^`roX9>n(<vsMb?O+AH>M?|Pt6J9
zrKv0vHU!KwoH)BHQmCn^WoL&mlRtb?ViiSQOhCZC_=0i(ZVA9d-OdjAbIEJJ@nEaS
ztNyBAF2$xmhv|M7)}O6|FtX0B*1J_RF*2fAHFtKd4`c-oSZipkkclQI2wvSniz~ps
zE=57BLv)K{rH~KLKGX->2JwE=SWEDK&7D0t<;Gcy;@FxATZQlkTHfGpdOA9B4lCHL
zlLaf#;{N#YcN+>e3tVPPouiYL_xAVqzdErX`3jpRfR@zR#YHOkxvVS;Ep7N(C><RY
zi-<ARTx;m7yVZ9;6NKF)ornXNA}rF_vbgEjuZNx{?)~XmfJzf`nFXY}=I8UqfCHQB
z<q7^ah(k^Q=u6`c;0(Ax_9XZ|2!8b@^2$a&z=P{1`5E@8s>*So1ehyE31A82xHgof
zTJZkPy~`rP_=t#|4hB1bN)}c|cdb0n_zsz2Nq)ARcm<PE=kTz_d~^F+{pM9&UBby}
zRk*9@a9sqQa<+>rxA}|!_$9@aY)K(1wjatk;5IuDqV(KvfZ$Q8pI;UD3KhXjjw(J~
ztaWDdoX&xJ;qPCUzZ2*~r?AQaA7;^g`tl1%`}NrVkppL8{yk2ZRMtRG@t^s6W-SpY
z(IL1wN_pw&%%*BLf?+2%RlY)sfC(Pp;Hc}BPcVS{xibhmNIW#W+H#0zfTI`+-L?if
zebiQ6`Hi1|neQ!MAd_L?<YZ+n$k+N|-2(ZAtejjwhm3=ws_I>?q+f583%WS{zJX2_
z7Ogq*DODa9TX#PI(<nnCw3!_I(QJVWG^(ALn3QzUPLndf5)U#}y;D%a-);gR8DR4x
zc*-HGkexc2XR989Fvxih*GE}MzYBsf<xnmg?9YySJulyZxAUmB+vCQBuFp@EulL-y
z^i53zOZ;bt8s3E)EyASwvV8f7rQsMuGLo3svX`Gnwbo8_r6&zw0IkY3&)8VJTS(7z
z+vtFPefep<;0s>HvDeRqoMfW+L`k&yGJZxz9qNS|{<(gw;FC37>%b7=<lq1g3$4;0
zuUm5(StTWJn%nNb8Y!ft_keC2+LWsD@(1D<??PUFbNmU5(!`V$D_vbSkMp|#kcN=(
zST;j|7m#bcbt`@ssP{X(%9W6i)L9*2Dzwp$8}Pd`EF8K$>609{WByN7;?NM9yu6d5
zB3u~V2`6SL>_9foM#kKPwk8-=Sk?-{uY&O|)H#gW!qb2U`pxYKKA!04=;iJUZTB5t
z@RnZ$+bbAf?_ml)A|eWESC|*gh3|!TEvTw$EUA@I=aQqfH~Hcm_SkxQn|!>y;9Q>V
zv?U-N>n`Z97JafO2s=?td;926+5RnZ+6U=x!0VkX*D*LS5c(k4Kn#1L+w18`8FIhf
zaYk08#U&)%mEsl`d*E|1_2UQL)p1-+XPh4&yJB~KUcE*F0~uM(Yrf01;q{#-F1s2@
zJ8KWxAl#8zfVlF9Z9Pku_wmXf6CHPEm77_lIkK)4enaZ4gfE3MhfE1$ghC`0hKR$A
zVBw|saLAHS*-R=a3w;!2Z0+}NB6a7e0(APu1rwEDTpy0>=b(7@e1c$c9kqa8NgXOr
z&|@JFf%{lYte>ip8BD0b`jQ}4PC^_bS|A%1%CkGb2^|Q`{v?x74Le+@f6sjg4iA{t
z@>Q7Q7O=@U*x0b|h?<tcCz<v=;4V{C`}GycMF0TV(PqnML6WD&J@;C4T7+G8IB7%i
zmp*7hQIm4db0)f-_n8*We7wK(Lu|xSW`4F@c?->m+`BAv<s{`LFJLb=@&c9I54|yi
z@+*AsA*(<#C!YsrKJZy(no8-TtvKS5m5Q|-SzTPD3|;+QgLBEbw88$f!pL!TwZc@n
zC8N`V@Om3b6n+c23B2AofG5E6CEGifIB!DetK;7<urcoOzC(iIfLXJ-X?gsQ=o&t*
zDHcl_Cx9@6=^Y<F;A+{N{kH3^e5+|sfe-7brLFs(ujv#`Oxj?NP<lDgOH4;c2VSBQ
zUn~%<ts)cPZFhxLNK`Fcs=@FLpxEK)e;Us$cX(!=)ox=_#4%r(&VHv6SA~69PD;uQ
zbR2NA@4`a{=4@7j)XxX|P2#cCux~;Ovjj93U}DS%(wu&LsP4NHbB*8S@~T>p?(gmn
zDBl3KkoWT2F8cY|*%FsMYCy?M`ewt!`=HYU6GV}<r=wU9M)kU8Hx774{=N>xtg|m*
zA>(_m@!ut{*nx-xY@e|oJjhbY%N%@Cp!xA7%!%T@nc3L@!99N$s`U4lwnQKi#v!|u
z%II*BwnU!C8<vcT{ERroP>`zy66qCD(|14w3!=hcV-K@zkjElkWgF>e@zht>1Harm
z(Nczvjvo&RhMo-$a@<yYs%ripqyl(QD&Q_mBG{1ot-tP>p_EiU=X6I$egz-0S_C8w
z!1uK<C)!`{mO~~QbZXMv;eK^tD<%dg9<*e|U3@rZUm7!E6$i!3n~3;7jeJ>>Ac?8o
zK(1`!4K!F40_(zXpgs>97r4bhOPeZC=TT$=WS7@`WT-VXN$_Mb@t<3#Z3fH6Jz}@-
zR6-Be7baK?(V$SGEcUBOi@@Jt2q;K`$Fn4^Mi8GTY-?*~VgfTYKC{^5<Rmyr-_4gr
zL;Z04;|ABCTDNX0F52H}FcRg`i%Do(0>!A7zj84n?9%t;qnmTk=mPKo={RG>TB*5u
zPlh0W9U8&Pswxp`z!vuoEF8}crv%=)>P;nZntqOrE#^RQY5<IJcdv73g^S%WzETXV
zHZ3J3b@F6LpE;}*#;GeKHBDr1Fx~hylATR0W!T{BD}y!cI;K|I!j2fXBCugY3MK`1
zFlV>uh-9Op?H?Uk*({+-*&)zDTU%QhIXMa8jjXujgTup+VCk{?vl}8AwXmU3&QUOJ
z1qci<2w3}m=Y;SIYX_z^Ou_#hUi{H)yF%38u`{-)RRjo?J;|X$L^3a4h_3x4hXwpq
zm}gynxnC~H=?NDL@m=W;`4se_CdgaWP}*}+h?nN(s!RtlqN#S)fI9!o<NUb_#e<+a
zAp55gX(}iX;Em|Qq;&k~{`D+lI*?iVzf3bmu=4{I0Kbgq?&3Jlv~x>qD=!(D4d|-d
z;){!!llc4{{}NH>Qb+gag;ZR`$Hy-()8AIqdT;UIRiSg;0pi@MY8z$0&QnQeR-d^2
z<Ys9_g$m{(@iT&t8%G=E$`Lz@yBj2)uXT-$`P>dGrt80vF{k%X4_yqBa-kCq9Sy6e
zIN4X|G@PsFCFyu*21`=5D`xmXw)*0HOJ_?Q?0gjrS{4_FV7q<Oz}6NO2@At!d+&7J
zv$VPzCnh|GO48k8korwW^bYM)01i<p0PY}$X^1+iJDLCS_<dC=6|tyDC2F}xP`^q7
z0)m07kG(b)GCWpkeg$T&ei)B)r#3#IWNee&MnX!xW1z)o*dD3V)!hx~Gx&Rid=DI=
zH!JX$pfV%$q5l9E`|7GDOyz!~(Sc?kq_R4CdSG7FCqhig6dfHMO%&v^J8=pO!2to_
z-f<WuFF+P*I{n-2c>Biym|EsQKpa>;`soh+QBodMFcbA<A|r!kW2vZr)e{rp2Xc8`
zaoLg)7BG&$gtD+zRJ}~9fu}=m`w|Y$dCM=F)WtvR>w8m9oypGW-x@uo|F%QR_4t{F
z%7`cmHl0dGY!ppc%jt6*_x*nSgg`(t-#4XlhD=b15Fx>~wBf`Er71Bg$|p{JFeF3<
z;9*63l=)i~pd)$sNhsGmvn}+eAHUT5fU@ocm({}Z#8)^KkpD|o`5u*04+57mcC^pW
z-Bt2$W-6GbRr-_bybi&3QWg)Yi^x|X@Qn|&E`1=-lU|fl!iit$<&_hX@KRGVGs`eF
znIXW8?QPIM1(W~90<y-`*7q$W5T_k45`(FNh4cfMW0Gj*!kpIHN)!Q*v7l+4{cg_U
z51%o3UM;|sz}0o3)nb*X5#zBp%&yz*G&8r6t6NBRBRPd(E(9O(pU}F8cd#~8h!SNg
zR4^h^-qRTgad526&4UT@;#;TcU%<cU%Zuge{8jqrMD?<S4W^{*KuN{|$>S`u+J`Ys
z4}&~-Up%2k3RVLOr@CuGR8%k~usUR2Cjbmk#4F?$VD4Ta#OkvJIdg6qIaSch8xD1U
z#w6x=#L`OFUGB!B#EW|xZw4hZi7N~yY@Iiy3ei45v9ra69bQilMj?(8(}xKNd-Dr?
z(O*SxQGs9~wLK@|Va^XGB?3~6sYJuRQa?H|VB`BLvb(#xSZ<t8bF{t*t<ttkPj4nU
zT|ywjDv)IUj@y-}f3c*H6!6^<^?Me0ItOOxAn~sM7o(;aU9E6A-0%g{fs8vt55e=<
zQkP7W02WV+5fr~7)-O*-H3#N+ZS!zt6~FKAnSUfomE&vsOhr6q{xL&}FIfcZf%ws+
z^L{oftMwZlz~6|h0_vV+Ig;dj!Y5=D6l~<aEmGLtJ{j6Gg`<k9xVP;<)@wf0Qtii)
zmR27!|Lc~yxpbzZO7#xT-3EGhi)YK(ME?A0d0oF^<AFbEO7}CieHTHmCVcE+Q&m|B
z4?Z8(>9KQ+Cf&}inVFs*ud}u1Djj<m?gwi$WsTz!`4r+~QU2|m6g3Qj?b{gTHYz|2
z4HX>v4c4Y$FBK0p<4;A6+mTn}xgm9s7s#Xt1>D2!J4~)F>%rc&)cs@vpu=Ee!G+yJ
zOOQMIV$sGNqwdHN3pBH7xVxv%F#&U1auK2+y^@l&sJ?h`qULdH44W$4x>r_dqEhZ4
zB6^FAc$nrR-jdMm(~62`tHJnUT&NFeE~(f#IG`4>sp`8RmI(PbZAU?f(CMZh2pb^U
zd9qPo-#ZJmuH$9HmX^hE34ne3Xr(!iwzDo$`trpY+w(x${W;`KOo3yAu1~s9Z-I)u
zfGPeg32FF6Ss&;Vpt7>k4&T7WfY}ugguoqVRpVIL_(?sU{_|W)Dx!8?**x=Vtpw0A
z5`oV_Tw>%x+TzZy8a+Du(r%SbII{pY?!4En{y|$~cx=qMkbC+qz$~x~BO>-l2d{o$
z^Ca?YZ46MU4BZTJ$Mz6ap<yicEhx#aIeSXrx|>6dGe7$<Oo_;VG?R#?MG&V_A`AsF
zZ0oO&m#+ssSXcPMFnXYjn1Y^hV0$6&p!oOw^G{KxneI#jKL~)QJ+Jg1{Y*UsBbD16
zl{O0!U?Ke&M;{iDK0z}Z#QwawRF_AMg1V{7Iaqn4@tae8EShEKfBK^UCYBfEe`$=@
zeJ6+)6c`Wx=0N0l1nuMWytp_THD{=(^=?jXmnW-$fcxb*D?fL|q4`L+M^NZ?B=>0v
zDkrekSSWtX>x0=g@^m454^jyT)O?6D@0o^1JvMUiPZ7S;A&rO<Y<AZgqrOd+7_V@%
z&lM{wjHr+T<$O&@WL8j6NL8R^XJ3qY8x%kfSi&?6AdT+o$M!Y|Mq)wsp`K~+hYyRk
ze~(k#chS8c>3yOVta<i|{+3yo3hgeqX*krrjj-eo%gmv1!ArrmqoT=Cb07(C!_Z)m
zHD>J~KcRB;eMwaKG$=hG=U4*{zP;;up4s*Ifj_gjO?c_ipeT}^Yh-z-C-eN|rY>Tc
zZ|j7a@pQw8DD$N^l`wo4`NRkyI|TQElAf6e=YX8#{YR4~M<<%;^Bj7`W?w1Z%TN!x
z<a1=p@D^wlvuX}wSt~7aS-*)VXL)Ha`*={Tu2F&57nmQ|iat$lCBynkHJutq4;k@I
z)3{<#3M!vSBXDIgu}b7y*PC5nh_nb@Z~4TAgjCOoL>%cwD{r$HQ^89~pJ<&D=B#>v
zuP?@=z9|IR<)5N5+IoA{{|9`oX6N5>{nxgTq58SrbCNuW@}Ji$%<b;LzKeZjYqz(!
z`xg9ckdfWuyFSMd=G%-h#&n$jel2cmn^05~8WVGeM;h@U=6g&$WtHABF<_GSY1$SF
z__?{U@j6CoX?aAWmx(<vpYVSVr7I>u_n=N612`AFZvcdIWC&?;i~D=Lc2@P=qOB_*
zB)N;fb)EY2r6n~c+RW$VgdVv2*~0lrC5C!u%~p5-sk3t+8g~T!P_x>S0_ptX73`lN
zd_YLyvDc#~nMI$5mC;Pq_i>+En|>Yh*ij^U_U;v@1FlVc`XLAHRN5MOoN)#>ZGagM
z4UPYY4+bDsR#sL<;BP9DKm!E3nC0UgWdQ+gZ!`Wyp`EY91SvbejvbT322$fs752~h
z70+V+2bfQ9QTog#8cI=!c$N~Rf$TveMQ|5wpM=Bc6P$ro23!}2si}oF9ayFs8vZ|g
z&K684+1S8mBL!mHK57CsX)!+F1brfOJ4(s`w7{4jlaMgc@a`4RHoM6IfT}d?WPaqf
zN043IM|Z<);EhViT~jrlfmGJTXhnyd$Mhh|7FNN3^Qr}}6SQ}5#|1cU30Q-L0G)Cx
z$a<-mnQhJv>qXvuuG4F&&CHAr#Q7ESn2(Wse!j}W?ZfGQ?Z4~({q@m%{X74z`=$Q^
zX5cVYD@#W9H~F0-eKIkhqg46b#n!^Y!o@{g;mYZO?ew}8T^;*|KjBs4JMw(!H(Q4u
zz`o%gDk_4s^`F;s{oqP`NGG}ZDj2VU;1b}<Pl@=CAI^Nkw}S}+1UupRzPaeoOqz|A
zcnu&j&36tCeh8VFosO4d544H;e>~V22UQp`!Qsx1gxb)f@+VKm5<h(cHA_wHu1FE@
z4X^FGQz;Qlf5{zr8uXDER9!+Z1>St4rGz!Cw*|i~5ue9bUMGx;lNBzQ^kEMNlV*5v
z7U;uNX>pY*v0$#)DX^E4O4uKost@FZ4$R9ejq}mNhae5&F(p8z2YTuJ{C!S&$jVsS
zeJkuB=`PVf6Dr0gAVb-HMWCY&Uj#6Yg;hqazah>fh1nqWY|52;_v9pGRN9fe+dnzk
zQxtjkPnv>GG5JN!*C*(Y#?<Zfw020cZQLVMz6@-h%H>31WGR`Nn=|DWw=3Z~u;Q#;
z{4ssZtD_RV-nzd8a%-cFTd*X<zdphapQW<O%F7A4-;!Q}<`J<K2@iLio|XkQG}cX7
znV@_|Utiw<_cphkoj@vX@1F}md4LPeVyZTV6NyWryP&29^>$NhsMhUa;gwB%EqU4`
zVfr;q-x57)*#scdP+p_bDo0GOzZzVeGTnU(fFXo>R#l1D`#|FW<D_n#ec2x%1qq&Q
zyt>Gt^ZigU(|ENFZam?vz)S%q9ZAg`kXyj$3<KlPdo4BHPLc#4WnF;?x3vgM4-+UJ
ziJTBRf%@$7^2|>%n2m!$y>c7y8`^Im#l4pCq$hxIJ|KqS>gaIto&pl!2%mW!>S)(G
z<POjG2GxsB|AIMtt1~RD;Uemv@f8LGJ=mstoSIU7{2W083I-S8^Q~q9uvu;Ku#FgN
ztyofA<QLMTyI}A36cUvWQV$)^|L{b9epJIc23QTioB$}k{P(R7g81rmv{AdWBN7P5
znlCSH1i8WJ9_D#DO-dd5ho}xt?1&4}DB-)%mFLyj<L<!-iWDO5w{I+qML75um*{$v
zzHK+%<G4MnnZP$RS|nuBr7Qt@Mz5i`<m6hT?)=Z68PDr44h4OAQDYg<ueXiEBA_Rn
zfHo*g<gdLtHB_ghRR~N3j$2q*Tx#uGQ|Er2DZO*^y9hS2>A)fc%9;J}_FUNdTYW_p
zvH}TmU@B@dF*Nz}C&Yppb8v95?E>@H!-Fa85lRZTMQx68`9HUi^w_%@!GtT*ZlxHi
zgXc<;6YK&h(4-e$RiYlx2eV|&WoA-Vl-MrOr)^%WPFmqR{K1;v`2B>ja1XLCJKmy}
zyPxmSz$W9@OWgy@nFb0de?S=<Db@GK*LIe`QsrAXV&^p*YP)k!!1e5JdfAhKRP0;2
za&kSniWxh%5XzHu1=`DlFHYMF9hicQ!d{T<cv*k63<?!kw5{i)#LC699}MN;d@}4#
zsQglYcnax##=Rb!NAR-UPlA@&X8>ldIai!21Jx4K;_|YdGl<V-oEN&)b>2ZPm}TQ-
zt>x*yF+@cJ3qYD*mh8v_)&cN6%_MR=fT`CN>?7y9;+3f`U9V4+n2MW9y9G`7@63P9
z*9E5}vm)<^RzM`z`lCmW61XjbasW6MRaMwqQ<g{f*z4wD4NpnAnsN#T9Fuh^U3><T
zpUzL$iC}?Ar%VkwEXzwvt2!NDLA4LW!%A~}H2B6m0I-6)ONf-Qh)!$}B2Vov&oLoe
zzy~G{M^J|Wtd>Y4<NWeJ0M-9f)|baa*@gWVW%t-+OZGJOHCfV(HH2YoAzRi&L}X2}
z?`tUASQ;dwEKvxdY-v!45Iq`2WJ%Wd8a?m(`{U=2K0adR%zdBxoO6Az@8a0aa4%0z
zD{Z<|dG=b(z-S@}=TF4O!-*R3hjO^!P^SS3G&X5de*28PJcjGrWRqNnbx6qFq@+uJ
zen9<d6Pn_r_#T-P0PM=W1c-KchEENJJNL214l-DHy7{atF_nb8=D<~fE4D2`0}yT~
zp9GQeX8(=AtGg|F1z3}WT<n_&TK152Fu2g4OQTRoVaotyl>Gy-x^W*sigBQplBk|x
zqa!02uA%i&Yh3x1e+}zG{BWynKRhy{B|0^*Bm_e)1=>8^)c3X`FGRe{1FfbWz}Q1=
zh{su;DPr4ozESn9?v2S$opqI7!%vKo#4(*)Y#l)Eb&F=g$$v$vLj0!FP|>4Q4l#2f
zpu7Tb_8Yn}qu__DniQK;79Nyq5Pb$xEtI^k@c*)g{6&yjDv*@ib}u<3=<OiIS}qKt
zKcI(kxg|(A8XY74tRgkl-qVCdL{$w06Yd5m)LnSu55+l`>0)jGZQ(CcWgHpd%`+YB
zo;%c~E#wmC@vliTuSZgi-V^>2fF+|YfK%yn$1XiskDycW@!L0?>;h~tR*lQyd5<8~
zJX7){9fSJf;$n07K?KCNxfRM@#<uNmNCAhX<GGJf3HG`F_Xeo<2lQcontbNUK$COy
z=+VCW2UyOOGH@{60~&D7)~SQQs{V4Am5}i8XZgh%pl^ioOGCfD_5ngT3|G@{apWTD
z{-LXdz8=l(S3PUdeqoHZZZ7M8v4A2HL0qzKP%KmTtK+GKm^iB>&5aIJLXA;<Me?tC
zP*aJ<lUd@nYv-0eHKK*YZ$4RDc=s+x#&ivA3V`1qfSJ7#zUK|ej&|WKH#+W7J1fdU
zmjPN$Sd*_cwmaYP4jRzLeRA7<wxcE$4V=e=NQQs)_u6&OZ@YzoyvW%26KwbYfTAn4
zJX>;)$@Kir56}Mkz}0lP6p8Mnx(=7!x!RbOMS^4X%9ux_XI^xl^>TMdJ8pNpDJo~U
zRC)HkgO8=#r81;jDF(6eGBFdnslecwB@!hOy%Q7WJNqn=l<LC!AujGsS0Vnw#U&^(
zkV7d{PY+UK6XaEI%-A>Cgn`XxXa>;9n13>?LR4Qr81py>nr;;_Gc)5I6}J4-g`fZ#
zA8&_geGrhAlVg%gZ>{<niDz@Z`bKP=mC1~5Gk`J%yQBI48YJy49CC*omU#rLo`r=g
zlKuk7bj!;6CnkDdzb@U{+%#TtG$>hlFdCpb{j96Ap+GAFZ}TafRA(S+81*a|Jf^Rc
zfgbIYOsTG=05>;x=kUzI-gFO8tRd{Z%<{|bpHtB>kSV5&3BF5MX8#8I_za3ZPZ~RI
zSU_?q;J6dJc#O!%(<N~8rri9o57dA4Jgc_)U)u?Ydy4`N4*2^xUQ0%Hi_h|IHlt|%
z$4KAXn-Fyj%T@W-))u?Ou82X-N;h}7RCUdJ56EQV61%5KPYM6{+YT&unP^d=k7{*1
z7H<MK8Q`uMxC|C<eWwp;`>T6WQRx}{$2t$3Bn*s>WCZ1F5tWob%#T%TN11(~tiCAt
ze(EPbp@>zq_r+VzT9oBGa()E^;N8(fwS%^`m<z7Wq^2EVq+LtE1xm#SX)Nl000KFB
z2vgnf`%r`h@k`6kvn1GE<jgp>2vD$!i|9h^z(bnIyz_PPAijv~z(wGdgE&bCF@ehb
z(nxn6v$-Ljl&C0n6HQi(l<w*~&Fc3~&VzU9j|^MC<-N6jn`7efHycN%>&yf~{m0Vo
zzV{TzQA7;~;={#bUR9*(K$1}0<VVGC=E*_zJ?YEQ{*|WJb38(c)!CZJi{lZDV)1qc
zfqjORVuuVK5x^#~zVDAwl(z?!cf>^Hjk!!-!Zw^N&t{@38&!~#t6q^%q5rcL_`^{9
z9tqc-xupef!q%ZdML@TmjeDx{HZy2WVK+OU;oxz+3qK-l|3T8>=^#xplB~F*q9Q9x
z>+<F3g13nr3psQZ9r!Fq>*^5izeOW`1Tw-H!Tbf7&t-x6_{9!xCw|U<tVJ4(1{!+*
z7Lgbc4G_@2?V6a71$}L5>f<KoM>uv9k@;1%EZrTKlI(0*&s=ea!?)yoGju_8q|r6a
z*ZxX@tb!TZ($Y=$&vI{8A27I^17#Km^FM(Zf^QR#AhazWz*_XOi4;|)47r@m{zcMs
z4C@zTM%3zZbK_cCk|NG>AKn&$xZ<<rAFrZ_Tc0|x#s_~M0wfFPm2p@&!opf>YHG5w
z%z&n%rmDKaT0<g#v8Dmj&~u{hs1cYDsJRn_NRNd@v@YhG%U@BSkc>QIe2<KQ@{bSU
zeS?te6tc6_cv9JKWo-?p#+UT;Ohj1`3L|V~+Wn*+iLI?I>_2c$Z4F%ga{o#Y@y|lx
zS$o?YYGPXalqad0i;cZE8)2NWw?6$8ws>El&Ek%MEgR=KX+=d4=r(R$jg8W)hfPpb
z%dM`yzDpcVcH^)YQJxAJ0wR>d5sD+slXQnKgy=20VClFi7RK7@&>0QnibS4szaVgl
zNF)ktw=;jO1O<_fj*hqYPY5*&-`n_DqLZR{^-A<n(hL^B#-CAP<O-aNf&RI;&GQ?O
zUI@}#WS3E9AuBCt^car=?h-C|3OstM`<w7V{rCQ!XV{FpL#gO5M&?k|BTL(%8UJ&v
zw!{&Rme1^({irV$BjvBn&>Wt#fo^s>Gy>mWB<wHG#m1%pNIbOf;YcDOCufS`;zF82
z|4`?d+hppeVY$DoIHoL%ibsjroVBI<sM)E2>67Pt=fR~WF`Yu#L`3tM8;?KA;Z;Sk
zYCv84m*0k@0byi>DN$<fjOV0J>l9-UW|d?H4US#D79T|*4YOuG7uy9R63eg(0af{M
zxtd^-_}Wn6cu{ftSuZe512xU{>u09uqYf`99R|fGE<x`Y;^lS4JbSXcd!oJliiq61
z!NDsHp6&~S`5@QRV!QCHwYAmqHJpO3Ub|MsS);xo!=fnq|AQJw4lgq~=Vf#|i4}-G
zQRL;71gvxk@vBNd_CetQj<ul7q-*QcY$~#nPu8+WDvJrmj^Ix^UVE(=C&3bR&9iJ$
z_3y|^xvBJ3bFw`mah=bbn{#sa&=`n2%Lf-W8_5%96iH4@mZ{SAYJDMbi!vl4p&5d$
z!OV;N@RmhynevG*NjHOfMNA(+l_IrY9Z|HRZ%Ru`zezE);$T-X-z@`{Rx6Yhfg^G%
zTs;DKK5@eZVHXr)@a<cq<hu{+BncvX1!acz;+j=)AYuLRgx+x;w(Y&$-Ck9z_2c!Y
z!nTS7Md+xgz;#2Z13Z%PRN_<#PW>ga|B(}|Y2o<5gwEZkx)-#a{<g2L@#)i%++Psz
z1w){TLUB;k8oL@mdmV&Cxe<&BukPZN(4N9pLZx5u)rc&F*O9|9I3r%50FSaXHs;I7
z)i+Y;8Ha|m@pK5v%!L-_*dNH_MDuIr8wbC%kxWTQ5R+qcWXhpP7`BRFE@XBfVHxz1
zq^pWENFggOsG`(5^E*T*TVrW3^#T<T@3h4=MPRm^P!NPy5d?0<_Cgn24+E=-V?iDd
zpv~%8MX-2Be~0uEy6TZn_{DuVd?eM?r&m6!7z?p3vgjzBV9{gikR|75k2vn&Bm9H{
z9ani%a5kSI&LbPWi6r5TvB5Iv;~du>NYUJ*Fdx&?kETFH-Prsw&N1XCodJv5g;>0+
zJ#CQr9W7L)&*WHaW#RkZD)5J+iHCm}pmKJ-dmXHj$8+IGnUh&^oal&JeICh)A;m@Z
zJ%&#V+wkdF58+)^Cujv1-TB?jSLrqO6aSmDs^QhiT->&glt|?f!DS_Tli6QIFJ8PT
zD=XV<5v3~*l_~b4cgW4}wP&(4hQb0UK{w{QFAe0`&s5d4o)6yiTvZrZ(_R-76;*=7
zIsmthr#Wz`xdc`}h)q1clkakhHH-8H<u^!g;IyQa?rTA%@CQQB%w=;Qzl>lkWzj(k
zg=~(y(i7>K6H@yCi~&cRli*UwOjw2ECP!gf8c^J0pgY3eeJ5oDo|KLC_2uD5b~kS5
zR+%5w&)zlu*9L%ZQbh?)BT~4d8DZ)DeWo-5l~=}oCR$t1BpYA`o}XYbyTcT~gTBls
zKTp#FMr$u$s)DlO4?hc5b!$GuNWd)noD6$fW~LH2%79nP&rgj#lanEn&mVzTz)2n+
z@cCVZ<$KZ2NTW#aoI^(`e1d@ozdwU?fPrUB9qhH6ZrTCiPip;L;Lc`#z~|e)!IR}K
z7lPQxNje^X918YjPOG(V>-_Bcc!CUQ*o!?aIXJS!`Z-;L>CoS{d!~HO4kW8pl$ejh
zk*`Q0QHZ2l+E-8LybR`G!itLK!9oSt))>v0TiBA4s4Kw#6@4AL(!K*lZ9zc+*v>A&
zSROp!M#QwY7vp5WLWwQoq-x-|n($EKz}aaa($eLflyRJg8W(mYVE(zl8itb@%-i_!
zs4y%$OBf2j`-1|>Jk$p>k$<294*c*Ky2Vd`bPfVq@C+RM(lvds<X!V1FAr;vGpPVi
zm*_ZHvmnwNtp4uuD1mr4v3&t1ZWA?20Xs%z#=7C@Q+f1(FV^)bpttUwPoyvHjLm2E
zh7f}+keZ_cr%#_yUvO}}FX>jZ5*|O97Ux0p+Yw76{UNyo-TKMU?HY6&%*mSG^!Dn#
z`$5o(?CJsA(VwIm`5|oNxdr3zpF<HE6x0m@TqatX?#@ow)Rs-0WdU7{FR^%HlMfz)
zphti4vvujqmtCmGU+ELnm;vwrK|%}AHHgEH_>Ckj@%CWFsH}f3cvJkm9_Dzx4wUUY
z!b9-*(`;Ni@zu9Up113we8GbUpNcgo>*8d9JaT(BY8>var|Q<|tI0`mIXQhsw0}Eq
z%-%o2g|&u?bN@H#d|=W!^2zVM?pvMf5j-(IVUF*<Yap6Mx#4FP-_67Y{t`Re-=mPo
zrRG~p`%vpA*hvCnrDxFK(76qMOtYW755N#9V96qF8oHrNU`qr+<p(R{Q86*!`+1p|
zW+4K_``}Ts0Yo7RwqPcjffWf}H#8J0N^V1ZNcyaG^;BS;cM^%YcVjCH>S`R?<d%zt
zU<P`09?rnlxmaI+L`i5XPF~u75i>7rVPUbSg;E0<`)vqzCM<iUxV#SpJGgi@F|bnv
zOLJPNJ`c8ftikL8xjS6ITm`C=R9H3E>%b&zq6VTQ^w_jU<X|sIW$<U8Uz`w9P%t}9
z{iw85SBe@-xajJw@A}Bn%4+6x`i~zxNKG^9V9rg2A3k}{oD+RFnEr2Qr6+p`1UHrB
z(!>k6w#%`<rr^T^qyuHCX4JQ~g=2XG{r#_DHNMvZ23jy&B0P5>ll@($f4|PcqzrX_
zcW!Rz%sGJz*P``zM^G9X^S(`n)6!@(I`GGs493;*^Gc?lZm^)D9F+4kVcOd42P^`W
z%42Q#`wn)Uyr=ihd;IsTwv(=uyh?JpswFua>ZFNe5bOyzeSJehLO>)Ng@$8ALU-G?
z$1I_&PhRFRuo<zqno;$s!Sg~w985C&{K%l7l^G<OFp*sjxY3s7!A4D^LPoLb7JwZk
z55GZ@d3AqRLW*+RnXvmPZO!zsEP3FJJbjw^Hh!Pw%Ugt|+0kJ3O{pKwV;}K7oL?P-
z=t=AU9n$)bAtpP0vptqjC{?*S8*}O(ZbeV<8wXvXHqwYAvZX~WeXJW=#$HnZG`51#
z(i(iJ_<g&vG%*UCy$*dakDa(is;$8qiBraLr1T<7Ef+jwC%(SNMomKlKk0Z9Puy=A
zgoMO(;6}rN5{`!HBHzYp=ioHP$V5&?hUXhdthT0{5gTu~&TW2%@0Fdg)V0$?M~*<h
z6EX!ggqJc1HR+27NvusxIATelm+N)gc9zOGU28)_$$cqS>=41k#ocP8KF=ro6dNoA
zl^mpn02h5yrx9ft;b;NKRqOU*6^MiX?Cc1>iPO^%bVJC>G7n%^leoiSmVN@3jCA0N
zsrSp(6c7V|X1n^PiJP(U5QOyVs9LuKL2GFP=5w5Ho{Up><8+wdeb;ySI}_ma{$*}B
zWN&*K??)U3A{Y%F-NUm#_rQcjJz$w<zy?-8aHjbVyez=MpBF`6x>+8-y?9(~BUFkP
zY!+U33C}Pca93cCi;J*u8aDGB*-3U$?>HZ&MjLElwi_Tin{04Zb21?gQM4WKP+NK7
z%Hj`xK+QoBSy90WbP%FJksRK!D;{V~Knn(AHx;P8uvnN?=<6C>AseF>k1mNdS46Hy
z*K$D?X&^P*xdELbwbb-<umToPv&GL$LyMBQw-Zn=<t4uosUcE_Pt6M4;fg}>`x};!
zkM==}A3AGA6a0rLLvjD$eP$L@Rkf)ov>GPk7LO+fB8%n|1@Ed{*|r%{Gdg3_{)frd
z{Zj|BbLj21p;!yT{a6**v|7>*e#hgp51pEGodK+XaM}dGY?;MKH9|I2n<6aot%L=w
zZp#~Q0DEC6V)2Ls^otP2b}FK=F~EHdFhp>TORH&71jo&N@GJo^*eQi~O6<dEQh|+y
zBiFH;3dr@X0800OEJ>$V4G{-PD}~0hPIqJJ?0<1=3J&+kADl3s@+pP={HoCZUQily
zs`}Hzyew>N8=r%JT3K5Qst5}UL#d<T$dBdgD6Oix=Heo9YXsaU^%p$!ye)UGe@}eR
zyS3U=2*J=HK=*<w>wIVd905}N2koi};Q=`FigudfZVd@SxGDkvuP{=xY-l&;G`;SD
zlp;Z(k``8{_}ME4n4=2ya~$Uw^~m+J#sB>Kz#GgzQ`f;2i`4_6K>W>d=GWb_yo3Z=
zUnfY7h4KKjFYmt3tC5q>7JfFnSZLwD|6N0&3K$ow3;EcsWDQMc!hSe9*ueh_Y#p43
zpD!<fr^HqRx5irE4yTPhz=<KR73j?18Dosdij4|Hj4W6RQ1)Jx72kt|f<R@^L<2Lt
z$WS!COI2+(B_dT11Ch!U2Xp+Dr4uU*N-*@^8Pd>4pUrWwQVkPir>1Pn*kq*{X{s}H
zp-@d;B;{5EE(KvC(uBdm!GVElpj$&cHb`-X&m%F?j3!_0I};N0{d}L+sQq=l!QDc<
zFwNE0vi+SWn)L@*`slEw5zUKjz0$>KvsWY?k~Khjq@%vyPYp}Q3Rtw|&sy-WBf@s8
z+dM2>F4c5Ut{afi^E8-w*50)yJN#WMgWiW^I-}661U(BPOONA5YPBnwhVomPm!Z7N
zraohO&z{}HcloZ75LDosBO``JMn-yj1tcUiTwe~};g`y4pmI_$`&R%L)@dGpy}rMS
zl7v~s>Sl6MDI8a;m`~5i5g4V`fAGAH{odzIde2ImzOrbF|1gZ|L$nxY;2eMu<UK(R
zL1WOqV_{B*Z+!YCGIFmO@ojLLhFp+~*t*#!8_h~y^~7Fxg90*pNOoey=S?x-QT3M%
z!;}`GM|Drx%23tN4$1+EH1f4yneOiKF$}b)ra!NxeF-RFjGp>chOV`KcY^y*Pf>xD
zCJ~uNUEJDn7Kql4E-sGV-cFU>htwK)F}miZW2pSU1P)k57*6%H%ib*7H?VZ68&)Tz
zsxZ<}bZqOBoUNR1Ssj*0niF)&&KQAwC7`g1o(w<1a1Xm%kIdiPVECRAD|~)bE`5=b
z*yqf8C<?2*lTPliDt1J{NFip5q27?AIz;60)qMQxN6yKQwj-vc4sTCaW(i94{jy^D
zmhS4pzLWfLW;Pu+XGr5V&3($_<m9B^VM1T*=VJSg(#E#wTD}xRs}0k33UD6!FT(%%
zBX+viw~0n>6w$R`Oc&h`NwU!1#(v9u-^)s^MO;YmNRfFM@iz4<i3<S;g&x8#3ZK6E
z*k*~lRq60Y0+n}k@_RWfg+|sY4X@+-m#_LwyjRx_C%byc+JTymjIKo{w5uTAvEp$c
zLz%E-ZHLj}B#3=;A^aFht?PnD5TgQK5qG*R%jz`i*Nc&K@qe$_cGk}Md+E$#5oO>)
zUZ~))MP1ncU(u_*egK}L2M7L9SDwN*6r>G~{D@70{Llj5KZ@{^BNw#{HJ_mD@BR-@
CFvMyA

diff --git a/screenshot-07-after-full-content.png b/screenshot-07-after-full-content.png
deleted file mode 100644
index ecf1dcf845004790e25dd01eb8c09d8b39bea3e2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 107004
zcmeGD^;cEV+CPA*pmYe*9n#$b(kb22-7VeHEhXLE-QC??0@5M1=@Rbrob!Iixc|WY
z=`ywqcDeUj>zU8<sTnFSD~<$@3;*iXD<nw?5ye-ppsT<?YuGp7k&$g$^H;A>UrCAx
zD!Zl~r@#G*A%hnbd@3&@Ai#_&stkQ>b9{PwYQx_OexNk_PLV~b6rc}JUzS;0GG3<a
z1fp*{Fe^UQ{`=u+y&U7o#>c?uhb2|pIyteluo#2&BmQ?IZOj?^-=BWOAzE;7LjQgI
z-yQh>{~fI`mQkav?XOyNO7ccwUn2f<&ishKkw74ji0G`WtS%NYhOw~-Qw<iQ9O5gl
z^7G9E19`SlQ*_-WiXYU>^aKSG6q5ft)h?)bcv!f&xHvc%1O&n<(UJj?VPQ2XDJ2OB
z39*VR0fH6dV-ZFg7DIG`*n8!6KBbCH3<$Hvgf{T{Zb{mZrYzLAUfTD++71p5&d=?%
zwY9}ip#}flmJz8ErlzX8y7cJjWwf;kR8-=n*)MiJMAIuM6b*>Gy1D&1JS28djH7Sn
zWt~klFQ%+Tbk?!`nxyJkgp4pBfii2r*+ErQ!u&D*?wl$?5E-9qsX(UH?=6Dn*AK-?
zh3jdb9CCA5@Xa+`uMT1|bTT~eFIrnV;%{{8%$T1h(>|pdAd--fRO)uZ!NTelcXekA
z9nKghw+-i+!TtBx=YIS93(Na+vWyf~RwAq-7Yia^yl(d86`UaU@$(Z>th*+8<+r;x
zCM{l&A3BB>07-$@=Z4?prqdE9kxpgy+H5GMs!fXc_&gMo3-u1M&FPQoT1$Pa)1RB`
zKa2h0i4laKgN#2hDg3};O~^+u-M5UVRr_SWMNSsGR{;Ir(-f2Yd#`M0h)P%(%6L~g
zvx+R(FHP{dtHQtSi`e@4m<ZE|bi$Fe6m9ZHSeY*ahaW;w7K4aC&;`WPZT-ectw!f_
zyD%Dx&K46Blgr>;uQk0Li67P0)?F-CGQB<h{AZ!uR9(vV&0AtMWJ2D)5NW+`zd)H3
zwpO=GOtSwhupx!M{{FY`-t7<P4u<>`U?8cCHk5puH6|?)mYkr<B8n;|&MIoGTB@ow
zK4OpYWzfYTgx(ev3!~Rh7~_MGx(HLatQyf|yT`4lh=|pC+jL)F(jyfOjm=uiC*2Ou
z)duT*K33BS8ugihwY7H3MVml)j0&~N?gE+Ad@{(@6+Vx1T6((hbWQ^7<z_F;>Di7W
zGK@~Ev-M_=C^9mJmDPxJIyZfCgw1S$lkb~?*#a39czA<QQz5n-p*QeY3@iCkYSpyV
ziXoRh%m#fDX^_kPNju?#$;{3y*>raklec(mc8>P;F`*~RwWdyg78t)y<!HAePfSeA
zw1RqqmD94?9*|Kj*Pvh1h*rim>iWpV%~8|Hc(!-*!x$>-T?}3vg-jZk{Ts57<L+P-
zqV%-1*rTi;Sfkf}ICVO`)B8U!fm#YVerI7oLZYvskzzFQ1!?Hx4#qb+1rID^lN|C)
z^TW{S;i#-A_%mCofD)!{7Kn-H7JL0R0yQgbq^t4A?81ZFO!#L8_ziw)i$tS-+P=fX
z!P3%vYWJHv2s!~lIxf3~gvZ`^YU8)vFVWoc>@6)VuV263=y1C^n3mGiY}IaUz+%wC
z=d@`H3;R;3^Z7j&7gv+@s&huhhDL)`Xc@2b@z;|TCnDY^Q!_JcLc$+VjkX(bfvVL8
zZ$+BiuW?0Ue^P{oh9+}6UHtAA-WyA9HJk1UcpZd<*WvTxTcT20XT7@jbdP|VR%O9q
zKC`sGULg@fdbZIiZn4^E8?JQT6^u+^vr;E{eKaqd$v4~PHX276wOFDOE*@y)ax|B(
z^+}VqbW36>5|5Kn%Z^4<75g>ppM$CFUOIYu9_Qn8@TsuMwzg-V984%P-yJ%NiHJBK
zOuZi@<f`g)wU@eSyf+0a6$XVtx8q@V)Rb4FpPbEVNkCUO)0nTLql3rgH1?)gw^QeE
zCLcX0Ajs|RJiBi4e6zRagvVunBE6%-``22dt**9qdVqdj<=Wg_opA7tG@(}e(XTRf
zhc;&deEbUCPKx$F7rV4jFvt%#CwMQ*MGCpO;wY^D8Ag6lqDDq}8H6&PNg8Zyb5KzJ
zTif+$KM?cAq{EC@=n00(_h5Y8J<4M{DG-KxGx}>L-WtraZ8_C#ljW$3l==A?c$U#V
zo@+3RM0wrl>+53B9`+UY4;DV7O`Sep>`L*peuHCN9T<2=dUQBjn4?Okn0J1<CX{b?
zG)Emzqms;K{;knQTVY(g&J2>uS+PIyNl=(2G#*8@{-aa^gI3dbqJ!OCr~3=hk00}g
z<0!#faNSv`)zNTp=9?V~%QYLVmuu=R7a5F4e#WeOK(;<oF++a^)teOY{1?Xa`KemH
zw&2`1#_r}={j<l-cRW+yc-x07bHjlM6TdJ#jplFj!*PY{9e*vM(>pu)p=Z9o{=0cP
zohzOz7Fj5l3D*yc#QSZhXsbVbqsd-do3wJZ@eGz=wZ(~+ho{wO<~za;^Web1&C&dy
ziS$-HPMhy0dOoQ>!bn2!$aoxE_m}%D&+hII;L~tfjH-fyf(~$SaUYK6X-^w!YG!8R
zgrh=;_`SP2=uiA-sx22M0!S!j(*m?-_&`aFH29rQ=Td4mSZ&%E8XEGh!u8_wdkeMQ
zz@ZPYezHHD`M3^ydk5Lh<oDSdO^kZv;nB66Eufc%7)Y>DGXJ}{SpH|C($ZxmCGcd5
zFc<Kj5`G3ov#=_}4%aynH!|e%uYGvKwk>?MO>*zau3kin5U%*$T3$1KcRFNI#Xvs>
zo}>jr(t`NX$y$*0fhaZMPCrJtTuNJ;Y?I*>2NRRw;p%WUl}9hyH}n-nN~7)C`Q>{1
z;}91+`}`nUR(UcL8$>R!$#@h~i>|xjRX999jl$Mj_R=bYewHTjC_-8X{?m=ls2Aa2
z<V}8s(O@$~I5>MJCmC#vE2y|3jSQM3s`rGXujxs7U&Z$2lf@}>T3cIZe)gb{yhk@e
zU{L+rSnYH$)g4>QFCl}A`f|QWrpJ-SX<N~TNR5-HQC~tAT<dby@o<etq3lo0#H9Cd
zg+svO?1zl?d85rusZ^DqW344#-H>83!wDV^E*|1}JE1LxWa5yQIb%5ZgA#XdXPDoC
z9h6qWaOmk;Yie?GHhB*Vb%~(e`ES9BcNiELU;@q7n#wKt;s8t#qq&J8q$6b{awMP=
zdQWkZc{&!+;w=1YiT{gYasuCu3H%gGL==l6?7ZK);k29j>vY#nyTB#a0`g{m_%P{4
zJI@2PekL!>oI*WYTr3#Lp&7f^DJdx*zkF?Xg^+?X4!50spj0GJg439~x~iC8M)cVo
z+6DB!e3X|vNbW&G!{ouyQQyEom65N$-S4i~mWvgu?H*BP&QJg)47~INB82n(`U?tG
zG5^c3NYB4UDL6nhGBu-k&}(jFR8~+x;U(IHN<>7|mvEr&8bDp}+Bpv_85T+H1Y;D?
zD&JiaM+8VS>Fn~7kzCD##wOzNo>1d!xwX|7LHAFeKH0xWB{Ik*G1(8t_R}E<rVard
zV<c@6jJ#Ww5vfw597OZ@a83J5twIY99zNla9Tye#_tv-cR;dI!b8GAI9g*SKk6PNg
zy{fi)dc-F_e-^Ay&8D)ts}04m|DE4IlE!bnz=#LUS&kW-#<mEzT1!9?Qz${~$$~R>
z!FPp~(sD9s>{+2EJy2dDe%>6%(j3oJiKfGJd1;6WGq>x*M+;QR$S?ypnXOdzsNy5k
z#Ra|wt#vMp{JT1i^rh9+m#6!<QsS79kRgxT)9jQaejo4YOR(M*ZS<|8n%x8`4r2>T
zOaB}_h`G1gZ*z~nQYw%R`eZ+m*37gJnxPfw{qjtSqobp9{1RUx(d{R+Vzb`H5XYo2
zdVl9CCI0;PkyA#7URm1BN=IiS-}&z+DT|pZ>s8e>ua&yP<v~Sgf+2Piou71t(~Y)1
z3P{d>7UpL!5kz{*)L%|EI&UG{;;vurE0FLwgd$mo*ESm?pg6rB@8NoPvOagbh!xar
z^L_IPkYtuLfD-A!u}2|#{s^m36C3*4H27Vs$L;##EfHF}2^`$sp|8+3A5~$M2W1K`
zGgGHDIAB<ad%lO>7ykjK=>wR@o8{V?IPz{(nuMPX*2d%hU=CGvb$Z^jOuOm+rl$Cw
zYG)q?P78pffpFWd!giys*oR$&goICa5=xA4Tr^Zv5)?G%Z=j&!T517S7Gc=z3yrHa
z8AnDykh4$y>>>MrNz+S-M-j(qyI$q!JDK0u=pyv8Kbgs>(<bucQgZ~$24n1x=L8oY
zG#)+)>%MWHEcWHG=uYVD9ns|;eYlME*+3J~I#<9h{tgAK3R_acJ4<<*3Khr_=>w#@
znr<YxIYYk1LEvzlOw^3un!qF}co};TV=hch$w0%rQKrFW4Zfiaz&I(!Lq5j?rnw~}
z8Xtp3=DAgQ%YYN)Jwb}H0UIJTG&Dj&69a<?dLQrJa4g0g?*W$Y2?+~e6v(Uddfr8O
zbxlnCki51K{&>AJtTZw*;#ow}_%W<rhwyH>cAr;eiIBJH1pq&LDlDN49+w}jn=e;~
ztk~(%7@d>fgm}-Y4F{9tI~%2#k)%mQR_n~$y&gH{zIfamgPA>61Cv8Brv3+Yz0)UC
z(^&BSVppwPgW7tLUZZX(2&ofOyxa0>EV(usUNl?-015>}R;wkuJICWCoYUFD$*%E6
z?bhcpREM3RX;RTJ`xl4(iNd53T=o)&;M!VN$CQJY<7HM(&TMfuW!3o-l~`_1049t_
zmM|H0a%9t6I5_ez_c>2Dd|v&GcT55goL`Nl-Rnw7P<=7$_QPbiT;SkjRIWDI{j+FG
zj@u+0{KBfH(`2X6reiN}EEIdj9!9C<D0Pb!SW&9mNiw5Ut`P~3L9;uW*eM7lo?I&c
z34=R7ca5ST)DmrXzfPok-x64<QLphU91o_K*d;u;_gC1X-#7s8Hq7VwQi(=rp+C>H
zBXQZYkwrm4HKQ{W-5f8+Z&AFHrJa~qJjZBgWQ@AeN^qu8DXDS0ObB?s8xYK;D8YCk
z%??+CzQO&inN5LzhtuJJ;%(sXe|BxV@{a$0oeeVEP~%f7d-pQC@+?lM<TIF{z(Bny
z+sk2{5k0m1e_B8<$uPpu!K#Ze7QN{*RI?LK;K1}uC`!12LQEARi&OmF;v<GnPz@6j
z=3XIo3BGQPL|X%c(s&o#pSj{%$HQ2KT(Q-amHBc_Q0}~mjJm${?V{nBtR_zzA8?DP
zg?4_@YXY=u2)Z;5uPbWifFXd7MW&4w^Coxa`b>+*Ypp0V_R~3mIBD9ol5qn|dg-WM
zDIC^sB&*D(4T|WJ%%TyKeiz85_lVQ07AxW?>Q8309~~XhYc>ezC7BIG;2>PSnen_m
zT{9j{=tb{#wW_lCLBu~ie_fuDv7SJ$sV^n?u!(ZWW%v74QY!I&^eb4j4{Pq%M=GVN
z^!;oh0_1Y398O?*_69{RRU6`s67KXp=giQ*0dyoz)jv(6-a<B=JN{O9B9+tjqT1<f
z9Z3#0u@4;IVv7?V0l~@C)Kn-sCFGUU(VVQKDh3XXa#5Ax-~=Glb+7``TfUpm20qg>
z`BHxlKl0sD6P8cs4oW-*1O}3*$ja`grA-V;=k<|CB7+9f6F1;<(J<_MvXaSvrd*-*
zi2}uL2JK^+JZ2J8`@S*uX*9hj77GmDFKbIn&9biwr$Oa4qTvZkwCS=&R=XoAi)HGO
zp0ch9U^I@Wa%SdZnN35sDYMd8B=M?pb90+U$4>}Ww3_iajQ$bW9fQ4zbhR2I$%Ie%
zyslLi^Ch6ifi9ZFVvH7tUTZpu%V|@lwbvELXur;%OT;^Kuq;|GDQxZ&e{mCbe;IhT
zRJzbaBK0Vb_Hp(Nd<*vjC34NsP|{+>X6wy8r&UFxPq2IG9-X0xP7C~>{Dr0%I=njM
zQ3q~84C4aIK1xSF_#4G@Bqi9{_Y?$?Q-&E~VfiYC{zAzWn4_?Ol=_7TwPPO9var0l
zFh5>m-X4sK!+G22{kH`UodPfx9K{j<vbI<dQN6`~;HR({(^$+i5gr{JjHP|bwcX&O
z>+O<oJz2S)nnHa>f4H2=hN{v5EfI-B(!s$YsZHMdPRGm33zl`R;eD2X?;F4`1xxe@
z0A5y+myZq$gC8SCz<er>0uV(ugV+B2cXqV%RJDASXNe-kd%`MCp;u5MtAGj5m#Tf6
zHMlU3es^&(5SbeCdVze036v0*%n*`|w1Goyb+sh+D>>@Z+&gr4^WR;*C?D;JmaG7h
zM${yIfx|P*{}K<$${|3;q-h%mEwHy$V0*7ZqdqMEO<JAFc*_1HLPH+_%l3jHduR$B
z99B!j+|_}C+1S$(-D|E)Q&YbW?~y3X0IK2V?-cY8((3e<asNe!Zt~je>gnDA0U`Y9
z{_^ruWRlVJPxIM=%ufy}!*En%%e8@M;~tUD$9I<JCqV6JdS@u)GtKb}vKMJNnqb|8
zTUS$KvEGI=6JbJpCye=nfCsrn<9LLY#XOb?us41=-!~M1F~iM%Ck^!&gdT4byxQU0
z+j|R17I8q-QM!XuVv;4-cx<MOb3~Vj%%B8%#k1rTepG=zY|jT_(y!cmm14r@fSJgz
z0$lpH%l8F6AR$4u=x&oWvgHbZPI-Q<HrHWLy}#DhVrZ1<?t4t|J-f3h6?)V7yl^|R
z&(&L<363$(*4wo~n{ILX1OBo$GaDi|q{YV{$t_2xL_$PN<92!g?NvV5e7<DY=jCr<
zc{=m!XtZb*RPPvBtg8lFX|`9;Bt1n7B@;71H~R)LSo*EZp#7!Y$$@_`p*xo%#E)s~
zV7SUDHHU~#wSlIhRxiOKJ*9@ZZ!maF6W?t|<akhyhP~v7LAOXb&+a@)GJ90ju&_~5
zp?uT7jv^`?1r{-bi~iy%|E|dFx`Ezl?{8uBa56=t5CwfMK0!Bfg*-gFGVHu@bYT6+
zfC_8qC5pn-bc9-hIHw9Z-lTiaO=t|6xa~&A-`&xD*N#rF#|-{X{Tzpb;9&8)hi8#;
zhT2xEY=(oA6MqZi9_^x^j}H%DCcnZ4p6`xgNr;&B1Z)Cg<@0ps+a8)RG&?)n*GE2m
zs2?jS%rLmRx;QtNG#m<e^My_bkapZJ_f%-2{BX+@axq<UwO{$kyPuV**WQ2qqOIND
z>S7BJE<2UP!RFJ34=eioP1<6mE)Un!gR9kY4US3sX0P~pW<^CM2@kjsYK0S(#qkw7
z?cessaN2&|%kg(+nmOplqP!!d;mXoPh1);~*Dcp@lE3=B-eeEeXwPo7bTAO9`&Wok
zE+c^Pb)2;RN|vB7pE6qL%ky7aMoR-dHcg!tM?q=U4$X9Kr@d1kUi9=O&ds~IwlQiy
zB-+=g*P6hfobI1yeD<)frIZbL+81_sygCeL#EBbY-aht>mlN`jQoTN6Z~A_=Qa@TC
z(=)gYxYLgxk*>-^z63lCxyz!S{A1}nKBvE$e*uI-MYH*IA3449W-#P^FXTN2dT6Cy
zIA(d%BLEhFG;P^<c)*w`Nb<4qdOuP9)8n4$<y+&Fm%IxK{IZLSy*7KAkLJ<UsPDA4
zasip_nVA56AJpmd@$&5L*=I0S98Ol|;W4~b5bNrlNLV1XKqC74a4j0nYJqFU$e>g(
z2EHGk*Td7(J^GyN`!c)D9&ia5RLiiX5$>`&z5k-A$UuwjLT3tjik+MUzGnGV^X+$6
zH=w9ZO<akzY87BIoNf4EfBFWEYlKCw@vA6i`{soDO7QaPiiKq)c(T-SoL43p$LS<U
z_e5*}BIGQJ&y&Bde2{_ecH^f(D>&#*ZMN^kmxwHQptPisZ)M&sbcZ+8nMIO&>EWZy
zHiqSNSmLw2aJ0rvvKIm+p2NU{$J<=4Rbn)B{FY>PAA1lw=QWqnK-yH`XdOkQ3XL9G
zi>HjIvT{cviUA=%(!mPlO)q8p3Et1qrJ|qJz7rAGu9fW0M!d&T4p_yU)_IMbp8>IC
zv2>R-R#7c+_Dm8%!el_x?Up$BTULZmL|e#QR8mqxtx-zi8>^upBP>i{;!B6!<qu7s
z-)HA+&OSswfNvHmGEW?r^dVN!U)rEX!lGu%XhvY@eYH}~)sq+w^uigbD6~I`V^)1V
zlA8a*!h-8?0n0l!m@bWve0V^Z`}x#KOi?cscmYSr=SvV<DoBxJ@$!`&@IWLb5*L2Y
zJBd9iz}oF8*rY}c03g}1A?NXe!bW?GsSE=HbJ_toMI-zc8iUpyy9Nr;r;2yWXCJ>N
z8Hr-re^DeLu=af8qubvbP>9X#2)iQ4df{E9REXS>@{3;f-K*>g@WmbBO#bQdkW>=k
zpqn%PSF26--@b}qU6i>(w(c;2OedwL=CaWNHRCawK=03Sz-%a1T3p=CyVU9P@=*$N
zyVvpRU=uWN=y&fRdYG7jQ+MI-4gfd<lJkh??eq){PTF;;{pC{iHZTnS!B_k3g4)aa
zb`KX6>?xnC0|m1lKG*Z;EBs(}0fE$s_mq<cm$vjT6I>$;LW~<pg*|T!Now~>Im!wf
zt=q+JCmsfGX>oT^G@E6)?L0+94%$AhIGC7CCY4QBCO&U|t|lZRjY?N6R+P*Y$Aa$i
z!Qfe?N=#KytI)69i+<MF7VqZ8?l_bG)mS!KH>TmMAsB-}k7=vPOhF!YSoC}m@k4D&
zF;D$E#0Q;>jI1Ldw6wIe4U^cf*rGpd7ig@}H(IUEGK%Hz-~_)!L`IgXl#WokG&_&K
z)qs7uUtcKK6sDy}`=dCgkR_AaFtbQ{6XEr!>Z~9`rE(~n2L}0S6GUw?G8)xQR(-C+
zi-%!HuT%ue0<1|QURP}FJIe~{>dvCf%uFtXgJ_ao)e5cja~eI{pQkg!g1OYA*lpqm
zGx<FMY=yGv8Xcb07wY)hp#{qnGPwVQNWZ&CAV6g9G11XQ7$f@lya0R!P;vV0ti4^;
zMuYY0RzE`jh(A~B-9IXpn@d38Q=Wy;+goES)#rM56(DV9PCw}_r^<-b;Rs~yo12@3
zsi`){!<hg$zn@+gJ8<YN@2$7ugI&&kCCjtB(>BEIIc|9dP(Nh-{i>xkH_l@Rb3@qY
z((ip8;dbd$pPRJLxNT_A<8l_|_IFS>sp{$_)SKK$V`)XklUKiNm4{H8y_Aj{I2XPp
zVxDHOkDs@p5Plepe7QJeOhE*A1fa#h?Cf9CY|t@Z`Z%@i?9K<HGU2fr^e(a#KdRgN
zaq>u!flj^ScMjC=yBW|VlOCnyR;ZDr)pH)#T3teey4gqWhK7`r-v@nzj<wzDlk{Au
zzuadOKn;s?6LP6HpG|4qczTgi|KL0GTNqZeXw04IuBsYwHeU*h0T%MP!{v-mq=4%?
z>PaQ&0{^kmyla7yL_v8+_Y26%JrwRbZLZalaTLGkZ}8yZ-g9#nms*nJM%@v}l|<sz
zhXC-A#_I+zHdItZrOdH(hOFdvv9l>IC~YvBIQjiAZ6B{kc2;(Ul{V?~t^4aRw@bU=
zg``bC`JbdZvAwXw1Y*r;$90~N*iA|yY{>#@)sig5Vm|{+6AcP@AtxD3%x>>@v{Y2p
zU*8rKe5lO4S0PRsWaToZ63mMNG&Pe8VhI-wnlyP@8SJ}Kfbs9Yk$F8_$?mRP0U{6!
zQE#;QTct0ou3@%ZvkNRLQ1D)!p2$ReJ+pfH`Z04{*Wf)Ow-48rD#~coEoP%eIIluu
zo~b8b;&AmY!Q2k2y=13ImI{LN60bbht_n0@bkS7Dz(NreHdpj#yVx85iN$a+)!pr@
z$pYcU#>EYrNqGoI1KlQh&=;!bJ11pftyZk4sAz-Pv<2ueIm92TYiWa-0L|JCR~8&S
zS*dRY(r0nq-Yzg~0I&vJ=IZ*oM74ZGQ|-QO%j@xGch*bTVPJ4DT*+_WG3%YMTDelW
zia#|iEfsC)Qi3nboce_&nlD!+QP_ak%%;k*RW^i;yK(Vgkru)Pfxu=NFdC)ob#;76
z5GsIUVd2vuL13jve@il@Jcvnz$B3ws_qH*_2QR67AS$y9ODvN~Kc~GteM|!Z=xw{`
z(XYe@gNj2hfu#Ot@g-&O+gwr1Xd=R&{jn7GR?+aiEvDwVtir<mgM*>PeXVwPq+6?v
z4sFFvw|!LE<r?F-<gJh8A;LaDkKH>vi^3FvP)Z?4@L~l3iUf!(rgg@QR4h=XE5TGI
z;)CtQ0w0=uUF!}+t#||>ti(TC@d+_q|6Dp!^gDpSPgWZTe-J2@E@U1uOryF1I?>f7
zkPOGAw`@6IGQZU?H8wsDT6nG5^cI=;525Y+4j0ozhIANY{D7eCKm?!AoTK?t3~I$Z
zQ1#)M^nH#07R=p;4!27U9)$fdXn9LG@xDC&yP=|xIMZI2lW-K|&<+p&nM1$W=H&HL
zU0ODatHbwfo@HO$JnBs%bBI189WSVPEGU=5<t~+ubpM|g@Io%EE7$IH`CF1z?~`&v
zHS$Iat<k!Hf9nJd#wcwfL*T2;N95v#k_wI57RBkF*V-O`0QQaMv<29A`j!aS+cn)7
zJ<{YGiY(k0_`G+aK14%NKp3=ladmYCfL(9I!NCIy3v2)Ml-X)21cO%fq8&^gc8j^+
zHis4d8_zyhc2-u$z+SqKV3bMaNdN4SP+wp59U1prECRcKCZvfMY6sngoD6n+Y)ph_
zHSN=7(};0wsGVlL#rDCH*{>!Dr%hfPlci8rTr-sF$Xf)=3kaIa*}7({vv$gs@3_)f
z3$RbmwG>rVZRShz9jh*OePsA+^?St*yHS9MRH|A&0F+;#zKpU&0v>*`O9h($@0}~l
zbVU}Ff6JrTH|kn~7S$V7h(%YpPF-9~jF8`(SO1P)lY`x2hs*O0*5mQQtm9X^hgwR@
z3cK|Rv{ME!^;OHgBNxB#@j4xmcT6MUaVOB4f|Jl;I(bT`>OTM>u_#Xw424LFvkG}u
zF~JGxMLl<KQw)0F!;|T(OBG@ud6!d^e{y{FLGK_op09rd+W91Rx;A|8T#$wN;AFXE
zCCf&jv4c-kD!6>DsMP{)j`(Rlg+tMDfvafpceEsH7T%=}S8-O!ky`2WWUO<w&Dj;o
z$;5~;CCj3a1Zr~_u<vwR_j)iEfoeYRgJ6)HM)ZTSfRxmqE?=*lBv5xnetvIk`+zL-
z4w+G<WG+v#2REV$=^|!1EG!H-yWKA@&#AA|hskFH2>Cpr-Tm`%m&mWLuKJVJ>@XP^
z;|vBO%)!(U?a49%lf%DvettfRh`&1ynw^Sfj7_2AiD;F~DjrxtyKxYSC@5*9yLDg_
zo?n^kyY(6lddn;*wmQ>8`M>;mfvY{bzr=!M_fXqm+}U8zC?D*NYd#4qVU(AZeJ#kY
ztc+qM{OnFgLld^jYQHg?XbY}cU#EB^?mQlcRbQ(m#mG<UICWecP8+M9z+$kfC>eC$
zqoI+vBM{xD^SET?Tx<`b9KIdP^WT)BC*-r=f<BDTVP|7QV~9}5lh_<hWDJswPFCQr
z4Q+8I+gw3AH#+R6x)Z;6T~{dEg?W3@nxoHm<H7Rw#2mfazR|Cx<+<ZTh_!POCI1aY
zPCViT<7BZgL|<Q;r8Zr0n$*o!t7r0ViixD8>?18*0CbF0m*(|W|0U3p5^jE~`WF-w
zJl>wss@LQl_;aw@t4bHKo2CAJ3=F*P@czqfxnOm=kt-er#HHTpJjpmfFYM%&4&J<Z
z^R>jc_)AMWQ}LmZh@GPScb))X?Op=IuX~;to5wkVOI$rgVDIX9S?MX%L{x$un>^b|
z9aqw9^XDn!2(@OzaVYvAaZhp{7Lrv1I)(I(MYLqcKN-Rx8BVuE0osMhcD?OCGdI9(
zdg3G5eHAT%ACp%Wggg1|*i3Lifr)B~VD`3g`H^=$o*T8<sMYyg#-~r8OJ@pkMXB0%
zOuwrsDzeZ=S54;m0luVc%KS9u&OS5*YVqRj{NFfAIeczMSKyGioc`J@;BSKt!=ztn
zbE^f;po2Z>c!>&aeZ3P{q`mv@z8?alalr*AvV*P7sQan`^ejMT-_NYBdR**K0}IQz
z_+3LWaK@O19rcH=urPeT&P-3MR~rO!X%~Xxjf@;`b91m<DC?dXO<^y+*qP>c*rUrd
zdfW4Dz67I5IzbG`U;#UCVO}(*-VAW=*!AcEkCxZ#VGaygEv<^nRo~IzbUT2R!T6py
z?w0@`X=!CeccXf;-cI|E7=~;ZCGU(P?EotElbK0r{x|=3A!X$cWFcCijg6JX#mu8@
zq@<*PE8t>asF!_Z=1ZW%(UTDQ4QQN$L+x<`#p|nx!otFY1m|i4QR9T;QCL1cJ`0PZ
zEq6$=jGo?aAh||Qf-VYY?6wEASbDzt2oMQKO|{%B9{}V*@X2ZF0viu696l&i()(?S
z5SbJ4Y=_V7MCQh;Oo>D3+%f5(JQjMd=)h=V76d0JCqQM25fQUhnyTK8CSXhHT?|Z3
zMH`d2qkUZfumR8h-5lZPmN;B;fNA#yPqft4scC35WFiyNWH5$kcfRJ71hKGE|MOr4
z{Gy3rg(k8@fl6EhQc56PR`t*`2tq|WL+}4p&t2grh9d?>{P{WT3{x?*TRthycS<r_
zD%LoXVreNNwqis<)PS^Rug8hOC?b8roo%6P#Kj8j+|ts~f9KVQKzXXZj!j6oH_tSl
zEcQ)vK%3BykH#dx+LyRUPC%AG1r2*B8O-aH<YYk@4Rv)u+!y-$KTX5g{^$KDbJOuZ
zf7aEr|NRSv6N3h_A1aDan^dgmAMd55V8F-6cnlv)8vh&PenWvEY|{^Xewg4bpA262
zZ)s5{x^GMvVDXA@2?*$)<SeEUMx@OZlg-To3FZI21KgtVa<pmb=$-&J25K2D?omkz
z4Vwx@oOBcp1_l8kVK>ib3kwT!+rykOBlF3+Iw4FU(p&KBKW}I8cZI7)%QDKzeG8+D
z%$eBx7D%LMYV2A|<dxP`tg|uZ=6;}M{JX@c&?IuM#_29cv(pM;;o;jQLA&lvu?j!4
z&Qm|2=r{BH_r=g8|9!3C5RQ&zu+6558%4EawHAsRi@6H>|8iWx|L;Xc@CHa3b6FBC
zA7yMN#>S?6Ny%aVm%So&7@mXovhin8>X_pGzi$A1iw|i3zq>=?V_;|~EF^>jQ49U?
z!`b1os~r^}WN(n{S?%9-R#tYDm;c8}lC|tzUQjVHC;la**4iJ>N8<m0RLOsuS4d~r
zOr7~Gw&2beP()5n^~qXpPj~mptXNU_pPcS%KvKwslq?q>gGEVE(EtbP+GGgN$%#GT
z^$waO^43IpaH|Uu8!N4zkx@uyCcg)eZQ)2!E%FpUKKjE%W%7A-xL=RZ(9qCn_YDqu
zxVh2N(v}uc0ZEfq)hgu24{G%qt~m7WZW2L3K~NoZP(vTlKKTh%J07kS%IShEMFNAi
zqLdVEJj@702$SyX{biwUC|bfW3}81G&ws^1&r0!RN~ZMvS8LxejY!C0n;{pwsqG#p
zgMA{Lwx?Wr0&+#jru%pRd5L(%7)N~eK<4?RZGt1r5VJ#kd@|~IFf}rAq?Z4(T$>15
zA*)FQ5ldbaNYCYpIe{cx7LXEV5UirYu_^~-_W4P8cwB5iuz;O{UvKhPlRf1q_P0=x
zA8kG_)02}v=fC+t<_0tsrfV3JMuhh<ZfO6O0I8|qcrr8zk@wU2a_enKq|C5RJGTQ7
zZK;8YNdc2$H@0GhmU)8kch5i_G@pU~enIhS{I{LZNJx=k7$>5W(b4i|97*<fauP9Y
z#W5ecaR~57m`Ojn+FG!(qW>p_C&KZ)B?7G(>)sis-TUuEqpePrM@TGGQWCbCt7k}9
zSVKd@7GEr1J{FKcw)ghlqoW(z*o^#5Pqzi0<?`Iz&QvzKcvOb>--q%T1#d5}&vO}A
z;9PG9-vTIfw&synTpY>-`*JW{%WBF%N=~Y*qOzGm#OJBe?(VSO=H^N{{QGyb@#q4`
z&~2IK#DttfAz(Fp$AApQDCu^3)2fzL74F{x2Mh$!Zu-L)1L2eZ937o^MTaCZX!CeI
z^b{-YYin-^s*<F8F5a9xg2oJw5Z<Non}y%|$;w<Ed|bTl?@)Bvcv_wiO6?{)j5^J3
zKa&~i`}<j!;n;e&i-YY8(Mgq34ie@z+C5M>u7$re8&Am`=;+`t2%BRO+wuwvTMY-F
zFZU}KDzqbYm6KWW^<r15^m(3P-o4wrSo^iUx|$d-iE?ptyc~Z1$>$k9Ry*r^b;C_%
zMFc3~&#nh|5JS^St>)+ZOEm-p2PC9xwMwnUiZ#&pkXli<=+tN6Gips4r|0MUW%ipL
z?`sfPHjkI3bUR!v%+0Z}cVwP*MtK#$H1F3&Mu`%5T3_$T{{j~!FE7tT3WR~<d?^Ny
zcZ0`d!+LxLmdV+g%TAwtAvlQpyQe+^kqL6#P<*%Nr+HtfK@gM-t_6*F%jRMs;QRNi
zILh=N_@5$ay)FmFyNFQ;rJk99DhK`AX2aX=a&K)Uo|ZU9a&7j515_i_r!gttP9K5I
zp0{yF8Idp;oVN$ltgcD+4!Uiwag3S1OU7))&`qtK;@Oz35fr#|n{iqB`N`5aB%qE#
zO3(@CBkcY8ZmDUukO`dlfgmXmZ6aDTdEKgA&h)7wRm)QVi_RiNz!`P{wU8wij+>Wn
z9OHg%A=CoGm9%VZi0?UUPeWdThG3U9GD=?Z?d3Ta_}<p54WB%JcX&PWJt1H*DA$?k
z7mW`MNjwEug+xY{E98F5iIIRZ2VoM|qq*i9V{4ELM7$3CNnET_@^g@y*o@P9h1%Iu
zv>aE(P2$%=c`8*YRi%0@PP|D6LjBHU=4W6Zz|7*08K0gK5x?(8Ktx7P;G?dSF*5oo
z{Y748ac0K-{CDVqKWz4t>)P7ts_ATjc61Z44{3Be@Q-$ZABevFa&t0RZD=YLPt(nq
zp!=a@FIwk()9~$Pk$P>7w0llY4u|df-<y-xFY)*qjW%JW-(#<CQGTXD_8+cSb8>Sw
zHwt7}pG4mLj^fg+L!Ee&9LCkGF>r{A5ryvZx~Ed&eK>#>Li7R}!m{K(mBuwW&L>Bx
z3cTaHqpM$LLS3DOmlui@@&)}hGBR|AJY5a2e$I@<<82#kuQb~FLXpS<RV3Mr{9E7n
zIKf4$!0R}hwUtDAP53RCu#kOTLTolS;u!6gI)8zl-R;<WhoQjF-%xCfjq{C8%`cjL
zp*U@Rh5oXfE6S*Mf`Fs#7RfZbwK^EEUcDI@=&!e0hNb@i`X?g7W87-7w18qanipCu
zHQB$J8?%<hkPCWShc~25F<*$~b=Ek@rK&d95Lchic6VbsiGNi96<D52hE3z;^%tOX
z`Kl~ERxmMM5xjx(<<2j+Hpfa_Wn$^-Ca*sMBO@10tI-DOsjikbx2OoV_iY~{e$n@y
z3+GKg){-IMdgF6dC8nh4WyOV(E6}Lc(dw=vBeS!!7j+{OXh0Yefhi8Y=^dnZaEa^X
z@ir4U8T_8EK1t$LrCQA_VCXo0Ynf}b<s^io*#NzMpR(U)Nis|JJ&6=M2F*|ZI#>h*
zwWiII|I-5Yp`HM>4SL%2Lq)@F7~%73v19#NT|GUK{-}?*6QnwK0fTh((eMeHY2tSY
z$eaapd*vkhoUG6v1H??lxfRb~9ckwC{FF=?MaYmX8TZg+`RhFVXV(&Jd5Crh5S4Q8
zCbt7FK9Gqp2<8Be?tA9Pv0kMQLuZaofw=!Vwq<dq*srUr)>jOgc^tGGM0j{X?)yF(
z*iIlxEkVUV$%hW@b6BTbcvn@;iHeE+YZHPAzyZ!`2dh1_TT*{zS6!i0b)HldUT|G%
zM(>mPj8)P|42p!9qa&hKkli_*%yR}s93B^HAs$l}W#gXUAqk#-wMcG|G`BupfJ&9_
zhE3ZgE1@Cp`qsKK1#z+-i=0rHalpTMTY~}6kPvbg0~jc&PoD8i@4FP0>n%j5VNOA#
z^}OF2j(_Et*zESYqtr|Rq3<0M1sNJS<Vk>c3av`jo=DkF-|^!5I(S||SU6X^6|-t|
zt@$!bG5?}Uuv*#wp#nR5r*qoYCtHnjO!qw4M)0$al9CcHkL<%~dN4Me^iM4$KeUfw
zx@`v$(JW4Xc7Qa8APCEjfD;q}SV&-dJAKK8orkMu0OAb<vP%Mz48bo|rWbem?lML1
zl%PcDpbMAsl~h#nbvsXgl@}Ijwzudh1bjT&m+J(ree>q>(w|tGLTCrAM&c(!G%83+
zEHz)gI+pqsls4j#PP|gdgwUHnm4f~rg@Fip-3ziad<g=?U0yqitZpE9Y=3hsnqVO<
z9g)IjPJE(N_EjG%QL{-Mj4*+autPN!m2!DOGj&)Ll)>=_U~-|eRr&OADYX?!`a<b*
z+x%+kSQ7sb%FNPpd9NadDwIyzU^0&1pIz0^z`;~fNd4OUi|POORmd7Zq3$W&lk|Py
zL~jw<!|>AE_x1LFu@x+$nAr0hp*{K;dgF6>fwraI>D?N^A0b=h(xXtK45#d;&-l%;
ztarw5?2h)Z*f_7E2Y~{JMyf-1y>WP+c|7An>de_<84Z%EG4w;x08I*`wzPJF7(0Wm
zPEuL_2LE@I@g52S9j#GW_bZc>E_w-z1)?P<eJ`)Ob8|B@s^c_IJCm^50aBquym4}E
z{rfFwOiaHc+1>Vp*Nue9#Buje7cu6*ZutZt-O+q%jI5D%I`@3PesrkcYP#nuob$4g
zyDkf0^vnXSSQxYCt6Hn`^_TeLdu;&^=;I1LK7M=5ulupMD~Vg5W#I8cD77f!AWxTy
z6zFJ3R5K(o*!Cj2H0aR<js;)E{sYG}1&JvAqEVPW@Pax2AXsqf0U}k(t$1uj>712Q
zsmK>%bs|9Z?XDU0Sk5OT^nSYAWSLdAyM9Z^>xvkTuKc>p!Fq+w@Y_d__2K5`j-!bD
z36ZNVK=@16F4oppfE%Z*x0DDbV|bhU#ZG>5GIeHwsG1r~jDRl}*V6M#F>A{hSq&Q#
z6W6r%{)Dz~gZXj|GaC)sE1vb9Kw5OAkr$X#_Pnw>6vT*MnZ|VKZxK>J2=>d0k^)4{
zf_Sp(@7?C#y>TAX{nRQYB)kR2<R!iBqor#0(O1zmz`-d|%zsK`+&Dka<aR=CEVJKs
zuc$Z!<6-!kB*PgxmCs8shdJ*tV@u!zTbk?&dUD#72qGRM+N;Ng1AkLFUZ!|B2_^1X
z?f;yrt;*=;xRE||kpaC=!C>ynkMg=-Mbs6hrVfs$x+r`!?vZC!nxocjyQ}@WJepY1
zG%$B{+UpB}bOseAr($)<Dc|ZFZ{bC#RS|^N@(}W$Dp%^16Mp9Y)#0@<KK^-HVg||4
z*3OP;f+~XmUZg-Lg9`N>AOlP>kjyqHYsE(F9x<T50mxXX)2v!_Zb=U_SE#TCGMtlv
zwA9pKl`)rN4h0Ap3w8py5yl5xr+tSm&%a0J=IVff!0@TVa=y7#zC=tU<fbAZ`2c%H
zGwgPMfkX&pU$CH@OH9De@&ZDRs3Zo+o_FV=ax_p%800wU3BqH#pk)HsqNnESD$*md
zGXyZ@XI?&`r0(Nk({MKsP<+Zp0s37khqazr5{dz0l(>Y11URpdjOS)ld@}<By7nvJ
zlJOIk1Q2k&X94L#waWD{K7c>^20}m^z5mxnTSj63k<lj%mi%rO;s^roJkMV3&2*IT
z5EJMazB!eoe3DWfx{h?Ohz^R;y)0S8+3^l9arw*IYU<aQ1V`!e{{7)t+n)&)7|WCj
zADSH!=jW8eF=(G4+lg_MlieQ%DAy%2azyDfc->xyzEOYcL1x7W)~_i02S`_))6Nie
z01m4OlPB0&gS@HG>a3!ye{y1tg3rZg^NR@p+<=%WM}1?JGO(K>mE**38j<}%E|U*P
z!95cdWn6I<GxtiUD*^^wXbCo*9=GqwGlkF^I0EV#89_q7zN(5zgyDgQdm(UFUQTYZ
z`*jBV{-mzk--naFP%>o|RwFn6<UiB7rhq+`Xf_5_R5a9HmV4Y1uB^ZdPXi<1blvM5
z^!e)Q_cqIbi}vLb2LK8hOyT?Ld%cW%y;z1+NR?#VJ2A1KXba#6NC$sHZafCTXZilO
z@Yub)A&z|BPay9IB|&-0GIPA+SnP58LxN_e!R2fd0Ih8OEf7U@Ipqyt`Eb_iNG|P7
zoS4DqwVW@d8Ilh~*-o!N6KVz`crel%O*=FB<v!0>{SFz*i3$k`9yAUlKYlpb5$ExY
zBzF3A0X|@lg_h1!sMDU}af9E}E-YbdtIL(w+F8KzdKfy+4Q=NC))KL)V93ogS(FN<
zj(o_tWB~zbs^3BY)<zYzRa-Vow!Wukt6AWO$D_Y0`1n>aLdvspX?B2;3grVgjHakH
zTrt~z`+<opYY!gk&5k^vFpBEpWm?T(wP%#7*;Xjz!b>yDq|Aw%3&(#jp<+M)0g=$!
zUtnlabZ_=PUQU=7MS;y07k3cWbe={TY&a>bkY<-NhUj#8o}#N<8m;OauUZo%C0-Eb
z%d%W_F6scVd2+5!AeBSL<%By)+I4PCTg!$d{7x$u-_o*FHXY>Xz7h1ivc>CLZnRyD
z2*>Z6s?==+xxX^aMhs3^evhkzJ}im86aO{y-XH=l0yb=DLblF3Y!0ih`(w%BQVC^;
ztBt8mMFeqX{p;;K!jT}W!N$UZ29JO1*NBh@CxHOF4fuNR9EbZ=7SL|5&Nc|FLFnBk
zGBUCsYN130ok43fp7!r{Fv`^?Ad%-10+|AZA93O0h=wAkrkIAvjgScu^YYvrHYKTa
z+RWBk*kdxMUI6=`*I@fHz?bmw?`m?P;^O_=vxRO-tvHus7_17n=%pW<>>BfmR~D>V
zc_k%b{caL-8G(!LyiDi-Y2E*_p-w-)CJWVpZca3e+epqDr}*@t=BtvPp!u-aT#A75
zE|4rTe#6Ynyt(<_lQ~oba*HyzxG3|dUO*#jh2GlAS6@U*Dz5S=<5Xe>CIEc`S=dY?
zw}*#P22S=TVEh!xsy~P0K};P)D7Ai$m3OZpA|VA<NL?ia1_t(GCLS;hagfK~;>dEk
zrbVyLBx7P=L|&0gQ+86jo}=yAfu8ji4gJFh=xQ2kvR%`wON60RHU4<ReML7pbRF0}
zLJcHE2TUVmBE_T_XmWJvJxK|d{~lJEh>c(L>bw1PN_Gh&(l~-$bILJZL5cqeY=Wqt
z-Zab5pyLi>>JWpc8C(b6^!y9%|L68ikk1cwuiFbn+3Xi_%<^v>o~N%LO~?7Z{O|c?
z%x1Wr)Keou@|rii=KoJf6Ji)LO;Avt+Hhm_8+vn|7efqG)&EF`&BQPWB$esneN5nq
zyEw5FAf^6S75wpwE+B%q2Ht)Be=i09iFLxXqn_~?-DPcr($IGd_9uQKV^LK){@F#N
z|LKDurmpxTBe=Biquxai$5fK1p_bF~>rs@Pj&(yWmZf6K`~UYsNeJiLY)>4W#9fj&
z;us`YWMq2>huiCGLm#}n*P)UW0$@K?YO1)aE3_0A7qItRr>Cds7Qa7TK_KyvtD74*
zB$?HRq!3EhjOY)!kx@~D1Sqhu28X++Yr)UYum3B&`2_lipz1goKWAHswD;X&j!v31
z8p-x9KR=h%6DUPrQGe$8j#PF}D{xkFyn~wkhgx32AQ-0RH9NLoUVIc$C!KnY^WIn>
zpgSo*#R)><0iH)PFDyJfkle&HVB`q79WN%*VTPf(T+jQ0kXC^dGdk11Sh)ehoQd+p
z`DlQ5eUjAxDi(;(kg;T>a-Ml#9pFeIM5_cNr%Uijb6-&Qn?ZPg{{Z4Zd_F=Q@$Vmn
zkG^g<$MeA`ng6})%c0;HXlSdi8On4dRqK<E8H5S4<)|ZqEz_3QZmk@>7Ru<tLk%;%
zYb-jUwyB`3P1NM=G*g+-Ki?eTk%h29HhcFY@m#)YYW}_5==<bAF`2}yBQ9>a)?&@f
z{4L2BtLI`Y8Q~&b24?=jac&}iR?l4BsN3%lH2GS`%^k<X{Yl5L;a}f>T~abJ9RR^4
zEX>^FL~6qxP(t2SfZ2@>w}4Ct5YYd=FWmhYOUf6z%a@I;ZkD~C7wX8DJAAjXb@yt=
ztehd6=2{P;rKESqhlww%^D_z5G*#8X>LP50j9>Yz7m7)Ft|Qjm7@;Rh`*RGE@?-4E
zv`L(wLeKfR6F%puT9HO-HE$VMTFy2>7<uY5GHim8%k{{gt`04yb1<0}c87CcF8AfI
zC4&$Tf&TWe)t?GZIoM$_zQpBoxfe-CH+Js}E)OuY2|r}TC_H1*<AZU2@pNBGz;k1W
zWfg@%yTWNcLrhAF_HaIq*SNIA1ruBYhEaTcU`<5J<8m#QeOOad6Sq?dWt>KmJ5Yt@
zTbydqDJLj!e|P&20`|<H({>Pupmw=8Z@bzcDj_ih*)|0N^61a%fqZIeYB!G;z`p<F
zNs?uw+xY@v25hBn@p-8(DY5W>SATLma_$O@MLs({Il_~CsYT*%c5tH!<>5bm0L9rO
zh7=R*OYE-@VTJzoFjsuZsN3P2Yc#wCLh=30MzQdb_NTuv7%PcZRy67@)hbm_61DEH
z4o3qKChlxaRI{8<EP&PT|3yt+zKbDA6NpN$TTA0rrUxSN4*vY1NPz>J=z=C1YiJU_
zOpmhW$z@i6D!jP74A!$*DANZrWFK9-+hs>)rfxC|hZ!Ae)CJ@|)bi^54z@T*yhx>#
zB0F2Zcr4Q>M`ma`w-9)kSeTd@(px~!_1DC~!&@y<_?%|&@@!ZIwQYYgol8b&4z1bZ
zY6-LXe_DW}_T}CWuvcrVO(M44YgsB$>)Z+edJgLq`G{bCjJx~OwMQ~>S=kgeVDHKd
z$??{K9n3%mNJ>c9yFKG)&~X%d^{c7HsWg$%c2EhZ*M(pg2hjS+{-m%KM~Pu3=TVF?
z^G2Qz_PSl<&8{|{uB@y8p3$#;uv8r%7&tX|3j|pJH`dnpfy$;_q^DLK%R5ks4w_aU
zzhHs}tddpIk4Qrt{risvm5@R*s=|QktOv1q(>PoNys__lZUNreF1!KlyYMWU4w(4e
z6TF7I<kz&&t{3V#gm9$vfUt*Z)YPGf;Fes-`%7cnV0oXc$S8YeV<IA5W{<SmZoJ3C
z`|}#gJ*NR_mXv7W`gb?FvgV(~N)TPhiv396XtRc(@=9i@!P?;%WIcEySmnI{yt{xv
zP5?WxXqU_E2v`ozd~b0M+1@W25v~%%^nSegTs*ghn$`&RP)NQFiHLXx)ecZqmS8(^
zk$hq2w_W$eiW6e&41OQ4{R!a!-{XLSElhH)-@U<dB#kXjmMA2?rT(N_kbt0|FQRyG
zf^V1s1aWz?S{SPal7e*3YqW7x*mno*4B9I<r)#^9F1D0~qb!F3PvC1ZURd;nypF_M
z<aav4=ky@m1#+wJ%pU+rfJ84GEK6McgjysBx+J@W^1yCDusDeM^02Vb=pzdRf?zMs
zh*5tS67W1~l)G4=NlO4o`|RN?QYWFQ{PUc{_cNvtkep^*U!7k9P5TK|q7o?J0!xVa
zOQmX+vQ1yf8L#i-l<VLGYyArMU3l?^DWALj3qdRlfTsZ<cEg}#eD4ZM8VvkRiGqob
z-xImsR67+`soT0q0^-Rd^_GpUo$7~$ev;%~^3hDu^}@jk+}tZ4r8G8Yz#d<c_2|p<
z!^KLx)3+5{^R#M`buqyEZ>*!^{<b49q{bE)!pV?~zx@p8&*d%3@l3vUZ&1Bl8rS}x
zKZ9{$Y_=<PQlg^yYLyeH6(En?TRZZfK^q;Nk16!^Wsm#s{jjzF3?I%;DgUZN;&s`G
zP0I^pP9EbK=EVk`|5oU(vaGMoZz(vltSniN#Pdmg>5462m$nR{3TY9HFSt2%g+n%G
z<}Vb8MrcR3zr286Zlwyyt6!@;39CdUAOZj*!rWlOO4ul|u$3Vp-JGnVKz}Fqk4jF4
zJL+coBy>5J#QZ~3kC-Q$8zeGbF+2Z#Ao%+2OFYeMAMARQag8*yFMtC0wLAhX@M}$$
z35q6aj`eiT^iOJsZ1kq;w|?iBrr2A?k4Qbdfl}Y0!rp%SaQGq8kfkfb(89tGp1Wdb
zXox8p(RUr#7j|H0&L+Q^yc|9$x(cXJ(30RI#~E?LU^&{so=ZWEUUCHXz$*}zWdc(O
zun=hjk-&Jgpj<$i@0#}}bzh$ZrzM8ssQ0NLiSz@T0O<V2#ktNWCA=K0th1jS5;{Eg
zeR<x%X_RZ^gKe!}WG#N|K~*G0W1w;jaocRy*V2Yx74rGShN-?gSO@sJ&UQmlMut7V
zPfeI(%Rv876ju)^h;jnKID?5vMEmiEK3c=5DK(Wx*|Nv#gKs}x6mtdaG)wm5fgzNC
z8`J&8&)oa2{#{I#kx9l^I6C=X-iEko@f?q}v~bTr$WsiZnP7ba1=2aJ=~A?l@?8ED
z$ne~gxMC9v+RrL@hJB#^fQ}wM>dW$9TxC>EJod(U!}waNnn96WMUBy<Y;Zx_&_323
zO<C70k0}VXOX5I}1XidJi;gL+{cpF%5(~R=HYYVG0~r~lId);8o(szMItna$d^NSk
ztSn-CixEHs1lpOp!zw~nm@Mx3z3;j*pakEHrb_bymjomQL^N>_ZK@*g9v-&&f9$Tn
zWoaN*|75~}ednOQJ#g)c(q%LhCm!WerL3kFEUfvs$kyTR&du*b!4jWe4PpEok>dXR
z6cjx~H%}f<f<d#?Ee5S5SFHGvgrn(Qw4ku?Ho$3IeXINXfcF#2CPhna#9;9LeZ}&-
z#E2AwN_r_P4C{sc`&Shej7<`9G#VUWnNc_LNwJHDeYFd2X~DfhAq}4Jt;cj`I-O*v
zK^yZCTJ4&Gp@%6wYjrt8Z?}}(m1CLy;_z_wR?DQPBN1*m^>#6SD<&vAwv}WUjXj67
zxUG_ciT(e>+*^2MwRLZx2Ga4;jkL71G}4WvfaEJ3Dj+2x(jh9HA|VaZAf<E(NF&_}
z3P`8Kot*l9_aC_9o^i$*g9C0~_Fj9fIiL9i=ls%cOg4qZ%lbcmmO6d+_1)Yrnyd$;
z3Na_CVK9ot8tTmsZB2_gVIPkydSCY_ZPR|Z`^|bYD^j$34-AM!pABKqle0x#*0r+5
zE2e~jgJljAa@9p=H`7!~f{=lPR1?i1sw#16kG_09DdPzVGDbX4W#e9LBhL*?JCrDW
z95+rX**v6(u)QXI!x^0(rA21)rmo5L>(^P>ZSOsH_y0n$_P%s$xhEk(iP;aZA(zX+
znu?!OFdlU*9X)+C2HWblGDm(J4MSaBCKi@!0%lCvlHwI{u>`F1U%%dwk&(%8n{9A1
zk1mb_Hcekb{}s1e@jPuOAKOwr5@k2^x-HQ8d$W|@1Gy3{U<e=%<Pw|S?+X$#Ib%TC
zKX8jQN9vdP8#}0S9ELp87QuNqN$W6wU-LMIkGqYjz%8=S#AKGcLpolk_|(3Od`B2*
zcGP5g%4)|LW+*Hof=U{CF?60;9#m~w>rANivLcqlfa>r@a(p(IZ*<sw3bFw+b=k3P
z(brS2Wac}5>USviQQyPta%SP*4p&a#V(oxUs?oaNq@}9?MpudKm$LvLW2Ntjz0?;M
zPvw-R;+-lO4M^24IUxSD<Bhk_n*-jghZk}$v8?pD3vOg_mpbY_$>2R%#xiu?{svFT
zz=Qt}dCPM}lJ9kg@AmUle@M}%5^>sHomreWV;|#176K=BDv?LV0wtp@T076hb`AJC
zj%j&$HpMJ3?;9vZ&YbKA`IYAJ+!B$=2k3pgjaILw{rbMy$Yag+5OFjfU)U$D=$U`6
zf?`IyAht-etH0k=N@{y+K|8a5sk0wn;qW)LKJyism^9NXz0pP=8S9iyc**?>UkK;f
z4x^5P658?m7gutrBbXd2PWWB-+D?PP#9~3y^z`0n;m0m=E<Q0aiJdD@qSMU*qo?C3
z##J+$MPnYzCLb#9^pJ>K5qbmJQc}$iCFQ5TM@AxMli~y1u0A$y``~v2uUaANY76Qu
zVuhrZ-X3a2{kwPPiwp>BA2th=S1#Yv8dMJGysMzFGF{7ldg~4!@a&vV_MA8fo2V1s
zjwHC3tBoY~2A)^mAR>;VqF&oci?q(P3RteF;(W!)$msHW+7eb-49$A7&g+HOOJgW#
zA*-u4d{U^s1f4vYUEZfh1`!J|y68eAz014o1*7bbQ~VLkqD;?J?S>x*6!rINw=g^R
z7{h6%Z_#_vM?y&1Nx^ZkOL$T`DJ_rq`5q=bc>#|n%Il$;&0Bwdz7C}vp@WZiTP!vd
z?|{hC2w0(GBxZnyZ8lTRT(q9|<fKmWxrdBm`g3pC4um{BV24KNgc9mbNeA_6CIry|
zeH+!zt^obu;KSuvrXg8f#tIA#az)WlnV+rMe%XpAD@6t`@$d1<H1eVs{9IUAfU$bv
zgR0DsPP9-a^Ci<6yUXDRJDXP9wS;(`;3A-CkdFg+lGxJF;N6DnNAKxb2OUyNOG^|n
z-c5<`sn-|qET8ZG0I~AxSav<s<c;o_6)`afwa|m{GCpt!8Xg_}<hH@AqhNQU<qU0$
znrZ}05P>qx!0`SQ`j-Xyd4jf=*CLsMgO6QYtH3m+gL6KWCJOsjt_nA;%xBP3pxhUo
zR(SV(+CGn&kdQ&Y?x?G7WaY2tYhD&635D~u>-oLrv<h2}^ybh=j5XAndw2vU?y3&i
zQwWm~GmWpMAA;%0)5G5~)2#YiX4rrmIeaT_2eC3>RYEQ{rqk}zYAEqZA_DnTtskUn
z!OG`$Z*FPk+-DzCe&Kjd`+#_VXus~~ne|(<e9#|!{a5o(x9|j0+Wkp<97-^t5n{kR
z_;av<>eU{_kZUHTrLA44mF@rDJXQ9(UY;2mwSV~S^QBvD(H}l=cPhcT0~Iiz(;^4i
zonPNdvh$Da5u_+4Fv@`G^d%q-#njm!cZI6w(6kRw=2^I}k0*cg5p}iu^mL^enzCl&
zTIXZgPE$*s;9yjs($+dI6jbc0b(xQxYxb<vJNiK(766*=nCLH&)sIp(C!TtIiLI^C
zf(oM8c&fV%FCUu7slA`O$ivosAbL3y11I?%yr9ykZ^ga3dwa9gQmh7kog!>9&i=ds
zr4G#xh0yTNKJ__5Z?#Z7ox36>(C}#B{zzgQ)JTDJW`)o%e5Bae=Xhry!Fjwx4phmc
zm-=LM$dvZJpcX$XnZm1SIK<_-!0=H?D3<FjWuKggBd(9gVTMZOVAG#D3}`sOjK8Mj
zue;miw=~_T9Jk}~c-!L*wJ1?_AIt%yQ=~MPek^u4+0*S1lGZ<LM-?0DijjZyt6On8
z%Ne`87P>sr+aln^L~Yj~6LP->>l86<`4%hb*<v6eCUdf6bkd`^%e~c^5;IS}G{P?#
zXon8RK@<QE1)>qQXdY`TuBB(AczFFuPR@C%xxXy+A=Q0emB+%&41p4`$IZ=b5NskN
z!>|w-$zqcy@=|;)6D5<7qR)(`If=0N+ac+~lQ3C@8oH`qzkH*UZGvIPXv)hjezzQ2
z0{G%vX=e5;FS^<KLx3J$R#>SK9MX#mRS7*&e$f2Wqf_%|J@(X0rd%P&Kf=eZGKL)*
z$D-Z}8su2uZ1s`#7!M(o;LGn$%gQ{fzxyQj$Lsf{^Mc)C8#S5f>5;O0fiX6(mFBk7
zBz-azk-{N#dM8HS=ePdi`?Nh-wxZL~v%=?zpyj39f6M(_U|)Av_L26`uA%aKMyb<$
zHaaBt&q+5yKSM8q8K#&?Sw6;$@@Tq@;s9#rrH<4O4+K~rj4V#wxjjB%@k3+bJ(q!J
zGcl97Uf{AKf1i+TW`A%&L3n}P;vI2;%O=G)L1%VbR{J%3H2E`jnHDOUwJ!e~?CiSE
zFNj5ig!XnUNn;s6Y&N9DeaViaKcr3jBJfMT9ebi@^YRml*^+<6A-E6&KP!qm#qK|c
zs?PrSAUi9ntL<i|qbzwNd0=%7>>lggT~bWodX)N>%k-1yb+;DS0Yh*%I{#`t6fuNd
z$StFPi>Ev(aA?SHL#K}+*Wj!+t+Gktdis-L7YI;)qj$2e?@Gw94$#k58&%Q^yd+GD
zh`wg8$(+o={rC4#=t#j)V%Mh3Y2OAx7gZbafi%W6;lDo~=pC6ti}L7;oNEc92c7<D
z({PY=groyNcGeViq5on5f5DKU*bE=ZDK!;<$4l{meMnKkazZz5+(RC*BdzK8DxYxX
ztHcAYLbZS3Pn71U{w&_Nz-KHgJ4dds5{?>f#)*5|aAMM*<*`>}1{c{yk&&V9+VB>m
zerG|q)gu4vFF~hIV7MpM_1s<>am%lsTq+BT>w<`h<ute(?_Z{&ESJL9m)^T<qO!Cl
zoqS=k7AR3%HK#q;tpB36C^7Z4%b}z0S^=`CbkzU;-z0?`bZPv8zDoe%uYWBJmn+u)
z{Q?fZCEEXRUm#`E{r~ujZXzi%e0=<yH`7*&0RUTFC5umDeCqc14TS$n%O-UbTU)Py
z=L-NXAitTKn)>K4AuS^lun80d@#m+3_4QsZE|oz+asj9~MMdGe#xQi@(n!Ax`(f65
zz`!m=rO@}8TUjxCo*W-v9L{n4Gy{sd-C(91ueJNrry#HRq$;A4P#q;q{m%_W$Uc^N
z=f4Fb7?^$K8Pz^q>UibtbGFsm-~Xg5vU&Xb=4PYk{sShac4oEYyu!jcn1b*A=(~=(
z_p!3l!Zueq?u&-Y^dqy#+s73t$;r5619-sd`n(HTncriBgGdxQNip$H{{rw9#5p+~
zsx)0{h>ng9lh580&CQ>|<!BnM1y3T<AB0_g3tTKLj*D#=U|H2!%xkH9`$6T=m$<^8
zgn=N21m$PGq$u9{uM?6BOI+Yl(w1CP`e*GLgiWI?02lD#!-tO?9Awjg(Suz2-Jd2&
zNkQQ(fIc!Z5>Cv10P?+fF2`b+tUYyyyHZtI87(RL@2x<ILIC^^K30p8y-rFSK&~pO
z#FGYwXHZDU%K&U`y!BV(HC|wSHW1jImiiCSkM6G+I*pPM6*XY_wX?IcB@=NN_U6r-
zSFd!nw6uUaCn$KZw-<~1CK4)`pBe$_w!<CZbh7lAj1q_<e;Wi|UWtJAqvb77L&9+m
z@FgSHvE%t^5RZAs@gKA%<5DvzQ`0%9d$x?5o10<e6?995l#Q)`qES;vM|JyuFNCZ#
z?7D&6_OlJgph$<a{(iLs`I9GUz)EO|0^-1{3V2?4G-Bg*u3jLu;OFOui-7^&#_G6+
zm>4(r7I>pgKe9=j8>zhF4im<X`T$-eTQcwTRrB{`LU6`eSy}zRe|52h)I5_<4?qnB
zu+ZW91e%v|wlc9{rOj7&TRS`8SzYnp_(Hsrn7Aq(gb9|7dY*pGaNdH7E2bWdNi6M7
z>}{L1bJbrWNjM)gQ3D9s)G-5K*2?z(eL3jqFf}zbRc8U<f;Gq_;&Gdc3%6WNPA<rj
zqWf(sZPxa|LH2k0zjk5T(CG*<&OmygaVu?T#WwNASbSCgcY~7(wI~++-(4@~{BOns
z2Q=&d&%XE)K^v;dEFtj@A0_H45fRb&TreiDlm!Y~J4zI8dCq(!En{e}^yyZcirF43
zeJFp6WZ+O*Yf*`|mK1Yn#NF&f+94?tQYzSkqgdN6m_<aG>FIfa4I(Hg$i?;gvlM7T
zw>GqObaY^)!tK@5)7I2fKl1B!$fG5cl~31FMf{{)!@>nK*hs#`k7zgFm6kesdyI^Z
zR#jDL6vV|6Rmh}~`*-1|BQhp~Ck-tubnf1zm3Wn$OmW1|b{cHStP_brzofy+9O@Fe
ze?x%|#6I}4#clss8W5jvH0#}BVPO<ume*6Dv`mEG5~-1fg^8=Fd4FtlwBs9(wtdXy
zCHVgSDDWK&;N8=^OLa*~+I$7~uKU`0-@XkaK|K)nqG`S>6df#3!S+qHK<)Als0JzX
zNM!}6atc+#8`6cgy-SEdWPSJ`mv+;?3tOXH<Fm#Wjj^_4x@B}?3;!;MJR(9_k**Pc
zh6|oR@W@eJHGmpK9&y3dVA0Xm2HNb_^pfoCZqOJ|c^pd{^rYzBGcY&`?=H-Uy?iV<
zI^h`f)D|YqQ5CdCrDkADfJHC^>KEJSpteR#U;sHeNlDTD`enCwOc&aVn#}>tJ(Ier
zsUF<=*Sbn<T_{lkf8Q&m8w%h7mw|dqEt!mL_4eZdKh=kH4ntW6nH{Yo^WXPdCnhFZ
zTN&OlV=$NBY`n$uGBhkq?iiph3keo`7AF?>onOK-H<D<}$^Kd?%O;NcRuObX_dnQ4
z-+N4>8p6D{yK4`2g>kwVrynbxmVUf_@#7UcL#V^`+plciU}L=;7##&cy9M#(wW9ai
zcuzF5{8bUYH~zkyzN3%<e||5R#KH$`5<n*7Qt>=o2Gj^la)5|*>9z<`Ur?TQ?n8qj
zn9d?ECkKj*!PqgBsJQgDjOmQM?w;zq|K|f5I_fiHw17Ycmx3Q<YB={E-8Hzhkng$w
zo+~+Uw4y$J@_|ir2mGx*H?(dqbqYS7Mi3MC9da2~H^{$w&>l{_Ia6PfG9~)E_VJ7-
zdto#bFsCaK<a~uX$Cj1Ae6|9IIxvwF<mEj+*)JrM@w@h;FS*L&{Iu3%7IvTJ&fX$3
z_z}>cd=+nPZ3U|u@Cz_UYGy&#FxTkC;~(km2NDB7t-)l^0P72N+LKq7Wbn+k_5NC%
zcVFKKv5ck#Mb84R#MQ5DVT4(oggIfruo4m$?n@PYvvvm<?V&OtOQ>1tOOf<Ccnb&A
zD{4_xf=W=i&(6+n;bCBG@0>7<UW4xXlTXc5&zdNanXIf3e?f6^F<EP-92N{u)2{$i
zGt3OkRl%@|Re!*Hdr=M*6&3s^zn|#<w+Q$~=in{?rzUud=z+S|T=uuT(V-wS^L;h7
zIC#UV(&6^|MYyD7Ts~3!zn`d<qwI3yI!b9(m2u;9&KNX=7c5pdGagjhIOS`N%>X5K
z>f;-*KDDr5%%YygBE^hJhHb>fF|YK=+&P>yj5m?s42nlJju)be4HbvMXYXgg8wY5G
zgv&?=&LL3rG&O>EZ*}znw7>dQcI}0Fw?T|MQSW~H#*H90UADr!0m=}Bq_mR<$3M4N
z`R46l@+5~>@N%7U{`GQ3>NPJ|gwujL(*>?c9;0q_`cAxlcX`m-R`%Y#C%>nKTZ3@|
zQn$d=mGG8&o#*KBeDfJMhP;Bp9h-p{XceWUEGE-CVDP~zZ)0uUNzKbc#A0^Mi<W8t
zh&Izf=HT+{4bsYYj~_o-fQi;pC_V!~>)2-#IcjU=mOZ@wN8;U8(OM+0x|q<VQNF)^
zQ(#Sgxh0<x|NZgIn~_P3=+xBIa5cImgA$WZ;C)o?f^={|si&$2|DN6?zC$<!Gcqz%
zhkWj1zb`JvCn1U7(ocG;rE|)pP1w=or@Z`H?AeZEC#cGCaBvn@Cn`cxjcdWz6|`|w
z@;#R-T^yxlD_NCK4e|bT==A$r&bLaAF~~2sFz5f>C1Zy0=x72J1~{`>HCsHVsy8z6
zIQ&$HriRDHNXVTo&aeNzNkp{#>!cd2V{4$IdwGF)<(*Lfr(TvJA?)fy0_Dv=?zaU5
zsz9{(5$G&m-%fZ3_&B$PE}$<hEyYMS4o+6t!^mqAbd4KR?(+>1UHe^y&w^<~_vmg<
zU1LCBye;+D0aRU$086$E&~ES=%Y!WaeMw2@kbiA$t)E|WZ_-7xonDSA`JIm+!DxXK
zYS~)n??l9x^+TCOH*cVyvQeE2D`Cf<Dl6&S0p}x0WJ_Cf02*j6mcfG{OuiT-X6D>{
zd;!<s=O)0(?$<~@j+X`eHJ~<s;Xxtb42YF2{Ia>KN!V)RrAP))tbm8q{5rf-+;n#K
z!_s&D?IxCWz=~PWevF@cKr+KuBtBK>+0GG2oUM8j$!TbCr;I_bcscPA4>kr{C^9jR
zu2B5<P@WfkPyt^~tcxUz*m-awy<en{LHDi9JOqZW>k}2X2D_eNgH~J~8!BE=H;0PK
z%0PHW&%l;Yuf&AUcE|#RbzH`E*ks&Sezbv>8n(b1*wWAgA|q?Wm}I#^k{K};H>Im@
z_;>yM>v*6ou{OCpO1tsIKZ*Tqoh+T{1!9=X{Zh8-;SQK@!qBp>tu3&`oK8(uRaHX+
zvB}J)W@JR=mS2z~hR@>v%*#s#!K~vBTN}9j(()O{rKR1J{<W6-%%6(Be&KJUc-|{%
z%OWty;O1rw(1fi+0t)%Py-MH|f*Nn=j$7#E$~XS|)bwb^kE#fYERlM{nRJC?V_u}M
zua9u%Mp&W-4li<ttbHU;iUu~_8w4|!52L$8nFfddBeE<DEpwnFDcj;zzYV}t`qDA>
zpRSTJlGPktY5%{UwD5%|1TAz{+@Zw!``dr;+x+SE9jJPkSy*|EU9GZuII#8cW&Sq(
z-hLwmkalQe@1L~w*JxPS))NRt?F(+?)BT5@6h+RO_Ze^gT?QUmU$&5KbIT{92SYL6
z(P<6(8!ZHLih?aCakG*JFz8e62Jr+~I5NusoBY;gg?MCd<k2qX{k&E{*FcHze%A|f
z8y;e&c(u^imY*}$V{UuxrUogEt@?T6ym^SDlI`tqmrQi)u13RSNh118@+c*v)lPK!
zXL;OTZnzTPpH{TNU(<j0)1DWsiO4UdklXHezpLs5SoZ3Fr*C=jX&p5yzpS`anCPMV
zY{iP{jeCrgVfQ-J(b?OYLojz!^*IdST`Sos<bKy9&k*yJYhcI&?V;gj3v=!r57vLN
z0D*_pREynaiOSyI-Y%}Lqa!2w)y;Er7fpTvVB`s2$lMIh;u9t3atK+j`LljWak)Yg
z^U-ii1pyYE=nz@@d@4qogh-aW7sWN1+$$XUQvOFhr>qfKsNXSn2y4R|vbk!ycMm>H
z!3*{!wu}>;_5A#h*~+?K--)yT-k7c}%*i<blQ4Y>DB3*1sRc}_3{c0*E!Prx%t7sZ
z)m>E;n_kwA@0}oh2vnQ!+?uH0nBtD3_9U0Ry%zo8hr3<7N@Q>fL-j0_Ik4!stpvLa
zm$_|QvOK_18IE!|4}L)?f~92~K(Wx?!JdT#LoN>Ux1#Q|%^58<PK5fXu&2v_R0=!_
zIv7z^W%YB_#pRdpU*7bn(T2lgf!w^Df&p!QYd;i*302<CUay-IpROVu&V}U>ZKffZ
z<|N#6N?q3UbOYVsVU3H4Sy@rxb-dFKR@`D@vuf|eFzSQxZsL=Xb)5_T`0)c~=p3e>
z#Td{pK@bb^n?An6%E=ao?=mr@{G%LRd(cre({JDP6UoK@>*8Yw%KpfH3r5w@kWMds
zbXV7XU<34_{RGa7TB=C<?5qR_$2t_14;7bzNrL6@Xrt)EBe1sPva+(UScY$GY*1rk
zW2?lL0-09Xqh=sl#OEZ!<dbKs)6TMzib^3IiOOk!Y*}u-<uPZzcm`gIr$84FxcCYE
zwB*M6I+&0_2ZwbS%c|Y~P8^&IotPuo_5%7rvaYR4xxM+<8&&i}Vc@m`-Sv1v{1{FX
zbhMj2YnQ|&Uuw1p1Js=)7inpjc!XZSpqyPNFR~Iei@9@+?oXy`%2qFpkVgx@-DQF*
z5#RYS_|H%KHofqJogegOHnR;$<>fojqyxnU#TSfJw#OISIbB^`vX)9TGW<bW9W#7;
z=?IMCws)a+0uJ`kv!xD@;gqvobp_cn=Ep|g7q4GG-d=2PN6%im$M&eL5$!U_qC7c0
z)D-tR=f9u0ivG@%e;#POpEt8qB7zIOCzh3Ssid$Fu-T&b?>SF^^7I{$aOjT7C7)A0
ze<#e)D*}D8ah=Ogur8DE+%x-g@aWDHlaRoGTD)_aVC-PLmP&910oO4&UZP$DD@2)F
z1;qc8{rz~7P*%RaC`Ft7<Q1ZXLU%4IA{Z-?1rV~jy7hcl%&pt>RKm`(JGKnxO0X7X
z515#lf582NIZ*S|+cTNavzqdL&j4F#)oPazeiNolrmyIiI1-SJj{f}VIZ}|5JBvh+
zDu`3?-GGOH(QiEz$lFvNa*=OfovByy?(*JXVnPvT-qM!!WZP6u&ayXg5cKbm*--QR
ztOFdwx9UPeLz@hlj>pYZiu6jj9(O`T`Kh5{dU_gGbZ{4Zly(#;55mXfQi)@gmZ;#6
zE5>;hSN;^|@&mh}+&&xoF!iJViP2|oIq=nxmuCi#hCbZZfiR17Hhem@iE_6fEK<(<
zMMq%ppM7R*WHkS#Z%R~G5ONv1?mRIn%Lod^&kw*fzb{>zia<jXJ@q~2wR{E!12n(6
zxx0E8$HdOT8?tq5Oc0D_q4Z1!&MikEhpR!~{wxrAGB6gvRKzKafN8$tCHjU2s7Z%X
zrH2y)h0B4802Vw@#*Jji+;VW7za>T<Rdv}pJ9NS}0Yxs1*`L*HY;3$FVkICUaa(K)
zvm3QztQ15DQ?r{}C8c#oc~2JUKhMdHGD<uZ>7_Satj8qhW|(Pnx6S7<e0qPHB{$ja
z0uyFh4Du0X<nw@o930?|Yw_bE$Yr^Lcp8f}u4GFkMYBGZ!%1>_m|gU=UGnMu?9GN>
zY~{IvgXXehOY`$DE+Ub<oV8%Z#3R6&xcG&zxcCVmflHe=OP#-mLlx<L@tf7Ig2;Bf
z^s0j=sIUT<0nsYbFO!Bo3jm|GKQEyt3bn-Z_xFdv9!#$W1Rp(+`2=Gc^MLD;3t`6S
zkzexCb%02hB=&-d#GRA0`ZLg2;V$@HM+3(~0Co=celAhoF#=fb`Pvu`7>ncKy@B4S
z%n0MNMRM{a*scV4L4|zw2QP9q{<dkeGsmM1eJ?a-1>l5=dX^zwW3Yw`*$fBiwvDl-
zO8o>Z#fgc>BPZ8S(W`U#rp97YslVD8@X*J>BKZ#HE$gO!nC3epw^@mrS{jLIi6&=1
zJKVdOb5_5bZa{NMdo_|jxQnu?mnu+>Kds?z%*H&yAH(8Ph_OPwf5G0(`M9TpUvZ&n
zD5s@1bh(y}Zhzs!hYz5A+&}vR^`BR0vLnpJjzU91Lb|a}Rk{G*%uofP(@2TwTr`sk
zJ<ZPpT1!jI(>I}^ihKGn<>zN=1iLnH>xWlQPg~o5ApJS)tMIlP_+Jei!iOfpGP}%u
zYo4yA7YKP@Q$;(+s@K&pE>~0;)>W+tMi!R5OEK&&B_%mIIPK2VL=6ThT$;Q$J`aGo
zSg8>z>_%N~V19;kF<77npx$roVxwAEFP!?^b0Z@<*uf-i;F<~*WUZOhOL#3o8K^QH
zv?&`#Fa|Ep9<-jBwfGWH_{QRHo$Rkk1)!3$n1S^mHqH9Z_Z~<`Y2&JV2+IKE04hVa
zSm@}9cb-U{o#4ERP`z{{c9?Mf8O-0149%@^hBOn5l*st!gYkN<<heX-wXOkk9l+hv
zc;ymtDb?OZC|=XQuJNh<*B3jIgeqc-z%jQXnP-A)*!Jb&u2WwgdzDUb26}Qv(Nl|J
ze(^dz!st#s)Wm>50z)9?_V!|e1@I#<_W1pq#+&q=FA)m_4X}mzvyP2x2+}pdCT~)i
zX9=`mjri;(7iVX?v7*`_IsB))(kv1{Q8FWkt$^*>mgdou!?o{yUy>_oJdhQC#3vZ%
z_U8lE{pg~KChV#g%jdb$J5fg;=A3YR;AiVw$I9M_+#zYHB_fMr^jP2CTI#-cMi(t?
zrv5-*ANm9G?{%L0$*_gMb}e%pG<dsRJq0!j)x_w%>0hJvpt=TQUaX%Bp`}Op1qDDC
zrH-!zSC?C2(}RON930s9rS!3qxF>AEd&9Ns1Gq&^O-wLh<Kcwy1qTL##T%#GTDB2b
z6R$uY0&l26wS&R$);aEJoO|oiFNprUUK~9+KMMg+`O*}Uw_dk!%v)mA<vRJr{@RLB
zjo5o$26Xxq<m1P$FW?r4J^kSTsx4xoz}v3Son^Jo<E*ZZcTG)EdI4yyu6P6<_9fX1
zF}ugR*31zS;RJY6W*(?0M=EHEBCaBvDPLTvzm9|6V0>I(0OMP6t(jrtbK^HOGfA@Y
z)waXGVflh=gWF6ZVSarbdL-8FT6)a{pNsR$9m6C)`lq8{ZB31shvS=%5;@mLM7MF?
ziRwANmAtU00UugE{#^ly4d4OKlQS*#Gu~8>kI8@1=if3xVSRr}c_5I~<ZNPe?41C6
z&yHQ$aDSq|&c;2tFr32H0)z5Z{py7Wi-QkRN}C+rzQ58a2{LaMc3Z^2`g7*EAp7A9
z#>|F^ueHKW3};QDtSc#V;cAlI?|g`#-~VV~PFYI#XI#%$O0}b{3{Ub#RPC?u$S#;l
zSrcb;P?7h2Z7>skjB)E)`%VRoZlaGA30X6)q($e=3aUHz^R4<Qzz(3neUrw5CR{5M
znWLIi_pn`A$i>Cwoig}Ag;wkm$MO=f^N?Y(+Br;vK9ihCcN_sPRtUE>(2~KkPMKaA
zGlq;_V?Xdcq_ePmfSSg2EgoE_%lD*%c;XuV&=rm1>bmWfZB=;F{Wy?eF~SWRcfHe$
z*8j{VOGDr6m4kJEyr~t#ud>{<iPNVJdN(sro}rcsa|T5gieO~hp5iy-q=+dSV3;3F
zym{n^d?Uf+Y?o%{wj!P~-&OZS#X_B0pB8yqqOY$nwl#}ZeV&Z4vY{T+)Y=ypj-`Iq
z<~D=xFLjfiY!>_LlZlQs4zX}cw#cghds$5o6BU=1ZoyswW9D?T7PK^D?<l(NXvu-`
z@uS|PVQ|W9bw^BM6W~8|7%RGfE;@Bl=_Tn$qe`0vK+y)*Uq0FPz37{+eYyhSDBe&G
zJhT4#whU}20hIs@MJq%4Mp7%KfSr)_S1KW(7QDGQVuAh^XDIfNS#2+Z&ssfAz#f;4
zK+^YoeY%#g#{!HpgzQGpHF20x>Je9(JrCBSRK>btpaE<NWea;MVd8XpP15It|M4^m
z88#;e=7K;F_g32mczd72kcUmLxZ(NP142T=%3&O8k?D!!<ah6W!@CDrAg>DWNB+Pb
z4qimp?$Fmh+l8%Y3~Jx`JH^i53$CLbT%rfyk(44}U+%U+F+CBuUHTT)03CyViU-+(
z((qez*B+eo9In}1ll^`#=P5V^J)+$z(8=HVJ!5#U|2DXGTSfP?^<LxPoURA5o8K8s
zjNWo1#Z1y?>JMK~Q1RQ$LuG;3$kSxNw;IYaU0VR3b9_5Q$xqOx)zp24>No21^LJ2s
z0B(Tim4TgsisbP)-Z=(jXtvQ^K~a17+U9JwuQ2xr`fVejkdsXPt8rLEoKcy0Z1s65
z<y7hcTI=U%Kd9S`KA{}m^tBf(r};zDR6Rqa8af(&HX%?aVQ<@0{K>MDrb1#Ar9CmS
z=ZQXzn&A5+?iZ0tKZw0gf{vAf9duZFt*XqTcpTop+<N+${r;G$V;&3d^+!3UUX>Zi
z<y+cHJAH$rh}Y6L4(G4`_|1uJV>J1WxVNWz8qr1<i@X_z;2uG$Ok%7Aeg5>vMA5pU
zoTC$;f<n;uTx>)WJlRrLuLp}@>IEPiSX`ivmijO_JY3=9CDo8|;&E|qOf%HFM4eoW
zPaJOdhDJOC^^Sx7n-=tbs7BzV#iJI9__*#cQ%8LP!AJfr;LWE!5~6{0c6YZXe*tHM
zR7!j6y&@y2jQ0XBc)icm#@Dks0^dkrJteX)z)Y1!`$m%dz=-hyPg?vu#?@yBL0h}i
zDjE2JN)a9x0@fx{{+_ZgvA?J+v~^su&nx|K$AE@2<4+#;mv9Gl_Kbnl=U=%#6PTb^
zBxA9<JnQ+4hJKZnSMy6OW3z_X;f!?%4d$6%XRe#{7nkU*t6le-?xKkjZ}#b5I=$Zw
zXy01Mryw)RQbc;EYGO-1_rBQ8y@PEqWal{dSsaO^YaqNj@a<dYrPuQ5tuG}XKYjxw
zw9)sFO2T^_oLS2B)|vR7mqVeq$T$KU4c3KcARh~98c(;Y=?9m@t*6lQJWRZL{iM|z
zv|^{$Fbj?pYw-X2RygkAByShkl4eu^G?(DbjdHhid4)R24KQ8#ph=Z~v4B<pHh<54
zLPP$TpHKhr0qVTb>PKEe>S+>J?d{-5PIo>#J@q{NJzS`Fud)ivlpsFjMu^N!u)a8G
zxsglGm(!ob_pP%NZBzGDK@L4C{RWk83DjJZQ&SmNf6s_65dT_RtGDW_gLVgU(2zis
zf{sp=pC*2o7K={GLUaoQG?t+HSc6Qk>+k1qFK4}`<rYpre@e6%BZoMMlTy$9f@?Q0
zxsi`oO#mMV`mi~a%|66Fo6|LtA0s!#kdPXR*w>pq2-8c+$e=68^?uGb>*E5JA*iS=
zL+c=bz@gwbJ3qZ4^aR`)0qsa?Q%C=U`amA6?x3b>=T&vZ7?OZ8KyF5F5-rZS*jSsK
zj;*Qzvqg=tLH?S%w2GXSS<=Nt2WuSudb30Lh??k5;-~$GKd;#JwcO<{xe5s%x}+o2
z36D0Y#;0yNd~s^t34ZXy@4OLrP{UHK2R;6({;#H`dk$VDvJd6eoQ|2A_4Ph7{voGd
zZJlus3};={O!{<)jCqa0llF`Y`}HrAq*uakrM2RS#^*mZMv(aw@=?2v`I7F&_tMT&
ze#vB<iKNrkL{fX{6RZbu8>r`ouaEG>SKR%Osg)g`SCu|vF<!cmSw~pwZLrD!vt9eg
zpCMJl6nqY<>;yDkYwXTjs-g0Gz0X@z`aNr$h-CsTAdEf?KR$LP-MZVXqeqJQ9zX|v
z%7sxLi!L(<j#dq%DifYWsVCEoKY}#2r*l4frHB@q*Mhj50vS5tXL7{E6D?2IgH|r6
zUk9f=y{#WJ)N;`&eGeBoaNEIim#NQ3;|&@bI+N$%vx(izv-UfI8x4IYde(YI6Dga%
zZgB#ns<GPl(A6Zb$amSQ8DJ1DjCj!P6*IqOH=#GhFWOYkki!U6z{26NPYu#aBM<$U
zVyV~A&_G2^Jym7Tz7ZBJ;JHT@PojZsFxi~&(GmI5;@bT6zGdZKxy9Y+HzhG|q&rOT
zcB3s_Mbx<1rew9;9ZOD0fiaBlOx-?oI$+`XXtEL`xf#x}r{BL=3JB;@Qd07FWPGo?
z&xv#tD~DD-6Q(K4A)Re)EegiQ*M|}c=LQB$V}@y?;aC$EPL*Q*mZy0JEC*Pg(0>uR
zfdxsl-dhkV0|kw5#FwBW<}Yr_1U_V<LGA=Lr63V!6clzMZtG-hZg433OD1pAh#~Gb
zjE;?Q8I%WlC<5j{*PDfglM}3!eXbwnQ3+vU_+Bkdbj6x4Np6obB@WPjyMe0uyZaGt
zaj`V<^(TfSH?~RS--C_u@qk8%vLhsA)F#F<a7$Y`-oP#U)$MC#c_UV-;6*oK%IxS*
z3Z=2T@@lvOU#(4p2n9IW59UZMbTwt%js{DfCl2V9d@j?HR=LJ*#o}`F(_y{m$ydWw
zr(^_`$6lFPRi2j4>ghy>`f7Ce0|tJilX-Jxm-*{3LR5{>k5;TZ&4>3AstG!JTUQb&
zP&9HgCAlng&P*kddV|A=x-z+yCSBpduEk{+nz0?rp8GmQN4{tE9!ai_rKCO{<bly`
zTsrcE9S2((kqREdv8?9op3cbN`*!HkI?=FGdBH3Dusz(+&=Bf#b4a}k!pwGZFknk>
zNn~jZ#wQ_g*uRp=#T?(>j?rJ5^DFHNmF+~l2R*SqdDy7W(35PoUIK?mi=*p@N$+t|
zR=YemPlwwnvRNfeY$g__qxROgY&jCSvZc70$@zNmI9N2%g0Oj25Sj19-MM<I)A3h8
z*8%Qtmo@qGQz7gfaFcxz_8CGNz+)CBSk$6|kIEwzQDaXa%?~IKx%)T+`j@jz$gqLv
z#BTs$K)sI|EI}A^P3*3>H<--bd=)VX2nza-dbr9R`!N>?N3rp~$@6d=+Krz0svu=q
z6_WMm4=Y1a1jsd=4GpnIDSrzJo(rIiKr#S_>X8LA;XQRfuz<5Lt*or1VmdvXi;#bn
z409t3NM1t(Hr!CLYBzLsUC14;iBl%ZW|KuCGon342ys}y{){+GWkFxCYVknL7^6*E
zIXQrh9h$~d2o%~SfV@X<X#Rc9D#2m<ij%%3Y6z!OR$+#L!POhwLcMXn#(VnkpAL_W
z-oe+fcepi3l(~=R@_`Xunn?~BGp0G%Xnjp9&Ku?YiQbSi7Qyd=!cuDAmN8f4eo;_V
zpoUG97NJY)hn&;G3L{>{dzQHw^w`v@p}|?ds7?*j-^I9OYJW}gM-XF?ZKL8+RbKW~
zhJq@ai%cpqOZ_5rHZp#Lc>dh^VIwlq&-1NKu4K<7CrgWQ+uYTKL2z&PPpX@1_0P|O
zA&2r68PD79>ueF-0b{S;e3njm8HMY0p-ra6@^&pGeQiWHkSp0Vo0%+J#nz~3XfvTw
zpM>`Kv?Ut*jaw2EX&{E5VcZ`E8_i_L%)~j%Tgr=yLYqXlU8L|M*jw}#q?a_!gnAfd
z37rn8WNg4&0jESnqz)_tkEr;RCIUIpZ;J9y5V1tg5=%RagPZ#{V4y42)xN=3=aJyu
z6D3H&@PbT8lb(SAhBi>MDnN20z{TJf41zDpf}7xm+eSG$HKmdx?g;^Ek#+!Qr19JC
zKwKioVv$HB;JMoXDbff#gEJfwLXu<+xgHFho}Dq!(|csEf?f*7t;#3i7E4M(rF<zd
zY*Ij^2cn=tlw{-8o}{~jy7^k1%*<Aht+Qx$-Pm{rBuUbU^P}wmjE=h*F)<}2x1Wc{
z#KDAFc{*q^tGt|--pSp!vr~&NV=l;SPQ^;gc6@JumW@vj6z#b^aTV=_)s9H4)w_^w
z0v$rA)0Y>!2azudg?vtWBk5$o>Fb3M->k9PsbZJYJB;&gDMDBEG{s<Tbzawni4|Yw
z=$~3qx*YTo0w-JAiJ>h&^z8G~$BLeRvzTU5dH?>$mzBJ(684Bam9BUi=^O4}lT0NW
zRUD)X2p%2GuH5Ur^7!M;=vr&W025@=G7qV0ooq|iM3;PCigOC`JH50qQ4aPI<yx8R
zx96jYNE+-{L~QlKu^`sS<hZL0p^b8rH>-Vg7)(B&@?GGCvptzuXcwkqDFEy!WM&f*
z?Km(rWEPi#1`5RCw*jacRvML?G?7+3Paby;>iCsH65<XNiF5HkSeVksEvjliFM0#I
zTXQe&vU(lLu)MH;>wEmtxH)F=C#l<c_P{gI)x+_p-!}bAIgl+T%5}LrxYvqJF5J1i
zsXQ+9`S%>VF?~WA11*1K@lMn>vLu@t8x=$3-&p*Ww1w87+GLnBETxRYO}2Oqj6jqk
zT~%(r-w>OUy*gL#o(5A1r~}PUkDR*Gs7)R3+_}TVWEpE2PXM|)DsfL$K=s>s{G6}u
zUquVSv~lp<mVTGI4|G63D^c&G(n{K8#XA@f$ICQqO4PS#-7hi&WIr$r0?i(v#R@o`
z&CN6v;BZ99Y(%!^SOFoPA0JJDzkMXYZLk<?9=2mb>D7FbXKzyyOo=I#%b%Zlf`AnC
z-Xu4WFxdqH2j9~lz5ptI0z+=78Np&9RY#eiqt%%rpCC~9<6||1FfPAL<_!ML3|Lx_
zH<xg@Q}=X*D{VUBj)sAO!T0W%Z*y~aNEoh$jwwrU(h>e>B(Ta0p{T5`4mL3Bd~JM`
zMa-gcMPTr7bMBU}-E)r5cOn0@$vsF3LJxk8Qf?aIy>ZtF0B=}lXXh3bl3%glVe7OA
zhTYSEoBHF;!fyZV!<3nwo#$d3kI@YWB0yi<-Q7VOZ}u}tPh3-NSsQ<6Qx^6`rI^$;
zdfRL%){MoPUj^yOLUY%~qokxu264Dr@*1Cy1`T?CoDPx-ICj-9&B_U_z6eRv|M+EH
zA+mHo|G@tA9ro?d<$?#jk~)dIh?XKlrska{YeMleRsGc>cU`w(<5h(RV{iM!*^hh=
zh_!}hrG)V9G6iCahm5@Y9>kk#CzpP550biHIyAk5Kv~HC*23L_@p^q;CMWw#j-aLK
znHEiI;v*?x<0?DL_Hamfag9GH0p}`U&%k~n>alfKtQ%M!EZ?>i%D%Uo-rM~4Wf5p7
z%*_6=E2-++51L+HE04rT{U{DCHCEyLbggt;Ht+y|yEk58eJ9Nqubt4Jn~@Ra#;qCu
zNKEr&k1eUvanb>6ug$ZaXQu|G;{lxc`m7r<B^qr7#DphyEj~YLxmib2Hl>fNcu9gU
z9@TE&`XOtu)>}YA=o#;+l>CGiKV!Q?z@o4O^ShI*aYpKDTvlUVh{gHKlQFQgLGEIk
z4X2ci>Y?xmS5|WyJ5J#wi4L+n{*-H77p!J2As0>r`~H)bII?w64UxA7Vi1B`Qa?_F
zZ42}&53%Pw@Adbur<nt{6q^4>moD;zuOz$<9FBM5Sbt4HbF(;VZEuMCM4gY159kHI
zAvf6qrc(g7nngPWBSwKz<S_xb_th%W!0Bo=n?#vE0&K#0yWHJI*j09;vb$7o4D|F?
zRtH-FAvdb9`jC;a0COr2YF5p^7Wjx|ENwY8M6f>FTjk+@S5-9-P6A26;k2jQ$!lY3
zi89ifnoj-ij6Xc63hu3kIE<<em;fwTegjt#019>$!BOz4RHz^)(3=LFfnhbCa$0wg
zrv{DNqp_k14>g&|j7RG~)G~ftE4;SJQ0IND)%FaAVZ4?O>^dxOL{=f1D=HCMNZxM7
zK^wKejPi%=U)<cjUmAf6<P{gs=BQD|n`mevZsm}!y(GU`y|<ZBz`?>bA|-Rdp+(!P
z6pCqj-M;##$ds!g!jGCNP*|*_k+9D6e#I%VLx&QQ)2oYnd_i!|tS-!zJlOWys5VQt
zIx&hD_4=##xR}Jsj;CSV_BLzIEe%Ao&C&vUZ!Oe?P*R>ptJ$<M3lgxsuiq?9>La`-
z7D0e6oEL8v68P#`w;{8^DZ%KR?X94&9rt~b(=>0S3RgK54jU8Dl;e`L%X}}MlioJD
z#v)|%R4RXaXJ=?&VEogcZ(lM?<#dYl@huw+DoDU{nUw3T%rL|w#th64m0PmwIBAIC
z%Q!kZLgDP<8dTM*tE00$WHVJw-Aj>oOIQ?(pc1-Mas$E3h26A7L3%4fv#quN*|{zY
zQEC6Jx`%<-=SYWs@eKXZ%7-7mVK8`9jRp<fX(%>hboV^B&U?hmlg?x_y(ug$LqCxy
z<6uWvU74yeG}y-XXZ?1H*aNq8K27zKy7CF@@znt7wccM}VKO%mIjnARQcgILB;n(^
zG)zLtKCGTY%SRwYPRo6XmU$g;$SV$3SigY+)Maf<#*<YVKTm4Cg`NFa;MQI6oHjOk
ztEm<q8XEZyKNseg;1RTQc=&B>?8gT)Wo2cXyC7K5wXw-F!k2XY7Yh(t&$b(7d;GX~
zU{)yp&Qn8ueF(e@je<fF{ng}9s|muy<)(-WZN7&y6%cT1Ytjj8DZx5OTiZPT>f+K8
zUF#MFCN_4rnGSEmvn3I`kv!;zwu5E{MRXxAEsi}wrC$ftd?uW@koH(3JOcxX0f3^P
zP$|MT1tL9&7)(MvbYZsbiYL2VJOcr|29-8+v+tmX*Z2uIM%UiOC94MzA-WAj03c>j
z3?c6^*^7;qe;nWr&epk#a&upK2V_<-N|1?*-E?*Pj4IHxlGw~XJ~jpb)F?W`Q`fcP
zGiU7LcCG6L8518E3|ds?@d7s9^7~?he<!6_pR-c>QxhINz{e*<A7wmg=kLeE%N#_8
z&6Lv~+7^7uH2MnXp#WR9jqo%6AQZ;+G}IKvQ$lgpnt^_md-o{S@Q!A0RkhvUvCxv@
z(r6N+ZStLMs9o$;RpnjHmJU+(=8QkwoO$&sXc!D}fa?d$$eujWMd^V_Ubppeh&BvY
zm}z)szt9p?iUtf*F>jB#$p?ua(W+12UcARZ{i%?h>%M7XGq4bS8>E3>V)IKy=&hKa
z`I&8w<ZJUvv}y}-L|}B|2k{8pjm~GeNTcb=<&045RqV7?>o#i%%*J?v%6}4i-DR85
z@UDKrqPK_u^Gx=e>sZJGj`p9y?&Ke|a|IptZTM?_FK9N8lS+G5;UotG-shXMXD~GV
zHTFUD@iYvHTCzZ5pdit9{ZTX6pe9M0+9=jJE&YI~o<T&!6CWUSSofd5DWomyVTomv
zShS(>Hz2TH@WE_?HVBd(7Z#m4xw-QIfrnj|SaSNxoD0pPcVZ_3_G1vdj$(>ukkiBR
zi?TFOY76}2H9Xbp_wb2`#5}eTMxyFqBrYnEy9$*T@ZYhgXh-G&-$3S=%MMvI%!k4t
z*ZKB@0U~@Gc#-6C##Ahc2t`p-Q&T>^imYpYizh4i{e=d@gKdZjQ-bjXVE`>bK}pFp
ziGyl=dVW?PB$tsjwxL!?+Z)`ai69_noWg8zd9m|aJ}rycP5O+Li|f8sICJGu`cBBC
zVT=8}KCI=mK%j!i_;b@4A;93N0?gdOd%wuIer%$mh1P*wsw;?!F+L#RI)%GNJm3}J
z>g$Hyh|eJZ*@wNdcv0U*vXWigV=G<rJ@e6dCix-o>;glA8@vv2C91?|z<nAI507lx
z(M(Y>G&OYwa&&;Ee|mZfp!~{@AHh#VP?q84*xHcroegvM{yvzwou`__d$i}}=}8YJ
zTelgqDrxt&Jis3AQG=t~<}8yq8*jk+co`vyPD8$I8qjvt-wM&mP0=<lv!UA}J^i~r
zr+c*SC3sunZk||-&?<&d0M{ASgO#0`hgI|x+LGvzbo94n9!@=3BeYToB|qteSPF}1
z9!`u~>vGvR3QP}(75lIPX+wJ%I5@y&`Z*lMPHvyw;FwGLWFrg{g16z}U;0wM(KSua
z%o*tG1JsEkUjgwtqQV&0c<;Sy(1>nGkZOE>9a<uQ$bmoF4Iyz-B6W42XUZ)L$>>Jr
z;VwLxc64%gmzjW^yzS<Imhztv?TIEZ4%AE-2mlgqJyD)*v$gSU^IPCZD2bgTgiXN|
z&h6>bM-ULOw+vjvZ=J-_Wq>~%;mKrEL2TC^wX3U-&*tn*0NUZ@lw1kNO8k=G)n(Ua
zF!FTq<f<y$gfhl#`Y-a-<|tb9V<3Xrr+cdhgK0GoBbihJM-9wwL0ov;<9djSq3iVl
zE>)oIYo$poG#m=_&QD%py`(6^RI=1X>EOL|IfRo@K@i?&@?i<~`yPq+7?|`yh@hpP
z!z&L17gyf^rVF0apM2IxfI;+rba;64TgmO1O8QqfCGRuiz|;Z`DDe?1KobCI_`>Tq
zl>I1KNzqDOlU_Rmml!BU0(HMy0@0f8#FDR-Q-y49Mmh8DmdtD0*>;(DoBu<bBJWzk
zKG6NM;^gAuFqqj6<p3yg*=F2-v|}N!71PU|7gco50EJ4GEUboCZK*>o>uj#^g0?O@
zVV&Jb-w`w+m^j^fI=78#(C32wK==T7Mf4+X5#?JX1bGlX<ECnH=RvAEqkju|@Ze`!
zTzJ=y%fN!rqK?&%=%=xK2|~m%j~KJ9j=xoUmc^1JF@r`fqa`tJ%bQs(Q4GdVpc#UU
zK+d$4Fmohb5&P2jeQT2Un{%J^2~^5R*%-&KL&gWp<k>!L%zo0wUi$fywXV^JFj>Y-
z4pa<_d~K%}VW0WJa8)^Q=8pY_%;kZ;l9QQP4wMc^`-wOry_AT_-Z$U&vK+oM7xZky
znM83bWwUXb<f2iQy+C$@`e9t2i7djG5|}jCoojS!^|b<6wIF&Fpc+sDL7StqcggBH
zH?4E|4p5FNuOX%BR;lz2G-iW)WET+M3f6NPHUMeA3B%8EsIKG)hP`hd3PB`t;b9;w
z)pLl5rz*wV$@8!t+4&xX4%K*1fH7#Hrl#s&pxDR(^9j8L&iJiQVq}tm0o+(5y$UB$
zEr8M-|M|nWm=<tp{coU#FN37JiXdtK-C!+@#h6&~@`Vb^!z15%4fZeZv$;P@sSnqn
zZ1+pSlD&(&@=cdkDv<&ehe98Q(#5}p+Fu$T{2J|<Gflka0<-%g-^1U=qN4RcSLf-r
z<AI?#9UUETotA!qZ_x!UIt=#29!>5+cFZVn_JBVfij~iYB+66=I5ilX{C<_)KHLiE
zQvr8~$7m((Tw7Z)sB<yMRW~jLA|6eRC6GrJ6hKf#DhY=5e#WpT0L?@Wh-#g$C~wL4
z)YrbI5ifufkz1OcjNx4PFCHXmp3z>y(y`vbI(rW*ZGOLR?)?T7{2LghDtkq$KBMT1
zPhjebwQ3|mBivh&jL({pl?73(Y)Q5C5YP%Z_IzGm9vm^Si(J;nkd#tc<=Zze{`7~-
zYAehG*T?DhuwWHULAVS=Vu2O)XU7G4;0Hs><hKuo3K1Wm1_W*qq}Lxpg@Jr7=DdtB
ztskG9JQ*)zfJ`LdEldK>H!0~SoJb-rHvMm4i)J9OvU_l){%e|~DVTMjsMqw;YJGNH
zvl18g$+CuU>xiR|>8|Ku(<%q1AzO1lfONWZ=n=weRpcBc%e>Jm(bj=cEv1PwnOIH{
zABOTW;f4IP3|<_GsaAM)oz0Kk+aF{UyYSf}l0u@dQR+#O*j+ZoT>e{gh9TS^yn*%G
z)rFpr=9tjf*a&6so&*2$=g(`v3?o4HJtiKWg2dL1HA}#tT4%Fx;dc(|8X3t-GIz#y
zHVTQf0^{_>%_~yGG(c`exf2*)e}~<+1*lHfIdd}G$}tAZTHa=+c?UTKAR7()!zq|A
zV-k~yHI#m7NL2f|u4gEGxg$>GWP7Rj4J``9d_S$JX9c5pJGrIFsm|p=Ee$O#=H2uL
z7GQa6)e|V!Ltj&#H5eJW%B6;(M4cF`!RUPbZ+<O5$9|_edhPydOsVD5=yII!tzY=b
zYuGM}Xd|H;dYs9IY-CZwN5?$=ibQM?J3&2?a#xvx=D0z^B{3m~0HI((em+wjI~Nxh
zsGagZg%MCw2e=cZr7KZ*qk;|k5D_utr(w3m8PK?O2HXg)aCrSLnEP?5;^$bI9Zv!i
zp@y9{#@jdL5wh_zL7J}}j}^2cY0t$$k_(fui$70D-0kh{FH^qMQpQeBPE->~Y^zI3
z1_BEU3Le_ofn~ppQxRM26m;59a#NF$nLX4>2NoB2P$8D!u8X^^*VNZ5$jSzSfg0$p
zC&tIS-o6A-<O4|HxVv{)!QOoSDHkz^eyK{r*Wln5u@?aPf$klcv#t=B@!9)Q@4=<}
z1<U}Wa9*^v9L$FJ>{&|s>ubmgK6ojuq^a*StEi`sl(teIB*I@))w#+P+K5Fg|4d2*
zeh;N(2RiUUcLp02$WwuZ3bAk}a1J>6V!f1p{Tc_9MIhh=pR#xe<-3~;${jF^05aqu
zAVGY*y#5bFJ@-67>jhO`q6K0Dm@_a!1b?HV+}t<UfrcvxZyvz)VJmFLlfm^k*n#q1
z4XaLCc>^F_kdb)@5mv)FecCyy9mP=P*4Nj&{~A%!)*gnG^_5f}bCGX_aFU_XejF;O
zamLgMq7QYrMl27`{()Tv2<dNe90mlqt7Sk8Y=&^(Ja7?r1gl*f=m9a`-$Yq};?CH3
z&h6JohE}%nxTU?JARF5+0JedX2}(&Qu}m~H<^dTnqii!F+k<9)``0MDCSuWOZ0y4N
zI~D;tcxF8aBe<{1D}C6Bce_iSiHT_(dwck6F%=<4$PYmL_jLcGrzgZ1n4`-``)`{X
z8yk0Ay7V3agY@ME&;dGpXR%_nfinQSFVAOZEE-MVKXV)L$_R(IJADiIL8rbtbD*C1
zIs+-6qeDYO!^7-G<BKgpDnM)H)@dO;i9uu0`wDW^o>CqdtV$(=m(KsZAD15kWj-}E
z6_gkdr2-QYQY(>A{@)ky<FEt!z~D1p1}qmIwg(cYLS39+R8;ig11HVb+_C-rGYqNF
zPu=~6UYoN%4%6b^M;cv{Lck{T`Z@F++*rYZQO4A?1XknpgVohlP+PjgSn5(6Tu{Jo
zw+xhN>c0v0AexPO2~sy~bo2)A<M7w7)#KRWfK$Qz39AJUa;W$z(^eqJScsXKnU?l0
zRnN*21Ba58gG28H6spRd2ujKx#vJMMihuR6PKz3f1JEq+Kbl<LF#HG~09p<3W=!&K
z@Ax%}-@u0b2A;CWvz<!Nj$~&u{U_q=`oO|lJ5-?C1E{F#TcHg2V?%|av0RUa-zyyA
zGX(R5S-$Z~P9bf(fLCZMZF_qgI^(ecjsAq&X%;25B_*4%YK~^Nwl1S4Az@uHLR(Hw
zcj=Bdmo3U{nfa|dV)1O2#)bDU(;iGs8^P@Ks8u;XJzb;JteJ!}xneF=@1MLK*nc<;
z>Tr=!^m59vrOs|{!DZ^&+7&=v2ABoJaW~LH5|fi9e9wFPHjLp$9=Y5u<&kCwEc%oD
zD?3m>*TSHvH%v$)0_UI=I%(%S{8>p!1~8;d6Ze9mP`~l{CoqGtUa^l%D3y`s0+k1j
zGyVx8_zUHo;-$!zAkKev)<ENDE+ox)GLkn4!O=i6oGdcXMsF-Ou5bE`M(hsz2q9q%
zoc1o*SMdJD0=CE%lCpMJn*6TASsdPkj~~_1ArCKk(1b?BFQ7$^*VF@L84>8|=?R;G
zsPi&JL8rj09}y7&g+<pZIL<1pH=#^<Xuh<!=RzlnWCO1LKf>EuvLMLsjK_Jgp<eeg
zpC5on?n9=kJDMObNx!bEt800RG;iB)5dw83&;J1!fRVo4a04~if}72sb|@q_H{sno
z!JF*wKJN#DMzwA3Z-r+BDOFTaHG)}=*As7uOU*8lse1Z`f&qw-{?(E!OI&7D{qt#}
zwEw>{4bZgu$#f~-l@+`zCFS?8jwQ-%hy#6Taj~TZ&LWVjFQ#LXOPyL0#l{gsiVV!6
ziHW-x|FvYWrNsevpXRNtyvRs&dBjBMQDUOL14N5XPX3~xD6ruE$B8ynC;9<I3xMll
zn8+Q5&~?lQ?2C(wRh1)(g#VgO*eU9giaw@f1Xo<&t=L6_?5oB9-Vq8drpr&1m&+2R
z9XXD%^xrySjVh;I{vjog5JuxA_}_)%XyK_NQKFtU5vu&{90j*pi}AaXrAFE7SJ}88
zvg+6Faa@w`|9S+9QA8YpI)%*6Tzh-}USuchi*y${eXdkL=RZ#-OOb*k=bkvQfmH1h
zK7G3WzsFa8)tMv^jLe(jRj;78yrTRFNBuv~cJT>=wG{f48ECx9n5x{HUVP@@1fz61
zX6DJE@|sm(i0z)AdCADM0;W}pz56@W5MC!7?42^~rInRGySYyQAqBnR-#0>5omLlX
zIG09I;@Az7n&+WnuKGsm+pnP#pFc|i=hydSuX`D<!DIV02x~=O8OD>_0~rCTG=LNn
zVZ3J={C6AZVuiEHiU7J9NN7+QrUUwRbH{&cF_f|Es(&fG>F^KCkCk1(aP2YSt=EO7
zjc!neLtI|FH~_!6hTj3O1&1iuqOVAR>>uV3wqr&3-Y{1tBOzh#fE~2naiIZfPiXQD
zCW(@4df!613cy#sRDcMakkBW~wCITYo);+*b^^Dog&H5<PkYHaRYU+nPQNcLwf^^+
z%C8FFMf}aXT7+1`Zzc6z>pKVMJl;o<(2(!1-D#Sv1OJ2`xcJqJVq>qZD?+6jbXba?
zA?Xi}pL)ZO?||?RrS%A;|FtW^m=X^AL#cpZ8(Z7{x58&IaOiHs7JO`kmkk(uG3Y=b
zeqN4SQquIN4(NN4%UuiL6MvK24DlQ`t94)`!tjyi&f^wP73Zj@w*8+EnpD0X=<P=f
z{*qSTzvz;1B>q2CeRo{W{o8&h6b+>)w6wJ}G^D7|)X-F<w1<`!DJ?Cu(?CUgDDAWd
z8i<sJly-@B+VwlG@AG`0*Xwuxci*>iU7yc;oab>KgH!nYe9xO#Nas51Hq(+c7!=rF
z<#7vsU$7Sl4aad0QJvooK28Cs^6h<n3^H9^qByu^Oqwh~``-K*#YtcnMMp;`h}nNF
zwaY<SqLr;Bkrj8##N;NU?T^weFs6o3$~^|99v1A`m&0yIDPmRvv1wremx%W^>&1%~
z?B$5*PU%3*>k6^OSZi-q=I8?{&j0=3tYYE9@2Pwtfg&L$&b?8s*|&%n@-9T*>C;|h
z@nR0JJ=AzF{uYXtUpqsM`^-Nj_&ioSb8@e<gTn&`e>p^P7)orQdE}s3#A^BCPq2{K
zMt&p4%lKgIF9>Y)8#ivK`ypJWKLfnXpuGDV-@yl=+&}lU?NR#w9mMpUAM|oyUVrc3
zpAxe+4!r{x+vny4VMRQj@%C*(ld$2qp0tU&t}f*nNpbkc`KcQ1bZ67Hw(^)LK&aT<
z9As)T9)a-k&`K&^R#rnEMc;eh(jTLu`z4K{lpC3&^?n-y*WZ@gbbtQ$_bix?5r^cj
zJ*YUggY)I(tFNqwjvWc)!;x4juc2{4LqkztU-9C_c(>?Zvjc`#P*x(%0I7>1f&yQO
zBepIKUDVgn*6#YE4o1EiAdFDRe?6BbjT1JnDuR>?gM8`_3qFzTd01uS<mo9X_5N9g
zFB-pdz9#1Kay)c!=SQ&>focCwnd!Zawe@^8G`WWx8?RTDYYUx*aAsr-)I#9_4^d3A
z%p0#fe;cF-f=(yaD;xmy-oWjN{CIqUbP7|h@3)Mdz`o7RHD>^%Lhf_w5Qtx*%6cI4
zUfm~C^(7;UtdEJDa{<Uj;H&ow;fy6M@(38daFLz5ov-a(Ar;e;<m8(o!<N?BHda$C
zVhSuY5+t5}tNXYF1&`XDgRLb91ZbSR53C(%DCR$xboa}7QR9Zu6uEuD(vKNLAvv1E
zw!nUXAN4-2H@JH<v&p)~Oy2Q=Bf2u$a!a{w*wyu)x%oJ9UKxeWpS^xP10_Do=9TA8
z9i5$~krZi2qRYNs`6TLFFQ%Q?RxeaO_5kB8L%cf3DabH&V0HkV@Eu!LPR`1-82p$w
z(6^(}NI$>pTh0A@4K%(~d}Anr1+^9yspUhOl=oAHJ$mxwAw}o+?<T|%e|`3klGC|c
zf`)(t7c&(R5q~jf{=>4cHO^F=o|;0=7<|&Ll0RlE)a~1Ewl<+AbMD*;KECYtum=v<
z{6O_@R%ULfF(ddk6t>3nufWe<p5D<gDj4~cR6Dr^%hhvlVGo^rqk1nIh>6O+QagKV
z>+ktSv!`_VVHb#~Pm25^96iN$KYqi<`T!j-owhy#OrV1HIf@Ew>33HKLf~3HNZEXU
z22AK<qFAMF{>+OPF94~Yx>g)_hm~b>{PXkt)Kn>}4*#B>9{r;6mmXNmS8%@VKX}lv
z&{Sep?jlu7UD{1sTSEnfxX8$tH8uQV2dU*h?{4RNaYL%nJ#t=ZabMyXL-Jn7A<*dw
z`N~96@7?3(6-MgetFS4@h3ppgA_GnK$IFWc%(DCv_eD{A;og%c;*#UAhs^)xx-wU>
ztgI~9Jxyn(pv{__o5Kah#<1tk$)xKXqNh(9P*uEm!Ki#9+*e`mOB4CnaIt*48S{nl
z{r|0=+;`PG(;ht<S)Xb8(k#;A;HNim=wl<nM~NeY2cCM$XuiHg0@=C$YI?8oE+|GQ
zlF+OA2xcVjR*h1o*`bE+L0Y;7^?%H*!LPOk@V7V{HSc?pbt3=pN561S3W`!il5l-7
z*&A@b=KL)ntfh8cHo-)pl}SJ8uIT=b!*R`@Hg)_Qjg1cxp26O2wvnvwo&FqJP0rix
zZcOB4)OSN78Q8W@&*8zmA0bz5M%E~2_+lX0UCO<6rW|1{Y(VRF_8O88%RJ(?^kf%R
z*i@dIpl>gI_)xO*S8X1tF~#H1(2N%^n`B5C|G@1`YE)#F>%!(SQ>8ZcENS27{rCnw
zmYve`v%6G}!u%um_+q=7)=@?ZgG|YjLEeX@2Hcw!si>Q3cYV4oOVvx__@*8{m4z?@
z<8d#Y_aBk4&<x$Pbx;0c#JvCN)B2I;n{0=PFN`u1RBxr{|L`)L0t;(C-`65hW^`D%
zef#2ScFH5>ZH+ni5f%%)X_{2t{j`S<M@K7&QA?0Yy^*+MOU?5EABylij%l&aKil~+
ztv32l-#MuNAk*HDgzv9#VQPLhK7<TjC!F<3J;$|<(WtUNa7)AIMMl~$i6h-?sn+a-
zl4bLvrWrieGJL2A<(BQ|5|GwZ&V35<W_-Qxe`*@<#OUegRc)DYo_2Q^fx}1G+qX(r
z{s^_&`Sshr%*}1uKRigHChq-9;|eXUv-Q4N+XD+{E-{};ydze}_x{A?vqyef5>oXP
zvtj0`kV$>)*b&-`dxC;(A7^J%GYG885dvPF=&5`oB6@9RF1LJaX&7z6I_um*+9m6;
z$n1I_>XRvvv9SqnC97M5{~UOsCY9!{;~dLy`0VFkx$OO{V$550-=YMLFuyHKWQg8t
zB}bNaf0gGf?_cJZu$3cx3l>UE_Br=uhGkoFa&!t~&CQdR#)r7qy=Z!OU%W^{OM6jN
zG$n&e*H5BbN}<byb>+NTrKgV_)u4H7^#!u|_Ya>_xxtc98P-C+8Cm*1Ge7%mEG<)|
zU%-+8<2NW%Q?g{(SXn!|x;}j`6(Lle+ew|*Hsw__GlL|{UM>+k63-tQT2RyQZLrs)
zVA~dZ#O$<hSXk{uRT}2&%RkB(9in;6v<pq=wHO0zKYlK~U=@C)lN|sjf-Fy)wPIM%
z1=ms_A6eHc$6J`VwlcL|8`j8@oQ<XP^^<$T<i?6+P8<;~a%b0=w%zunOJj)|8~hRE
zzn1-u^O4Zgva`C$C8$H<dkRK_&L_$}7GLirw>~TRUG<ZXAZ6jRJ(@Wg8QtlsS2Hhc
z^4_S*gd=0TAh;TQ2H(e9X^&u50rSP5wL3=*Fm$WF>jKPY5H1{u$?14?`Ene+%bnu>
zpEB<5p7K%%;0svO=nr+rzzH|tPY~1B7N3qxfCEA$2Y$8j%_^7a8wv`R0c2wk(>=JR
zDlgvzVI|8|ln@DGZpCl7(Zb>RSTWLY=~QNsDVx%4r)9Izp8C&wIf&y#-4AtGu3_&k
znc031_tiPlefxfRt{v2rf=NjW_aGcI2P)kLGt`&>vN<O~54XO$*<WgRU_+U?1UXY7
zGLZ3Do0)Oba3HbwTZX{M2TH$UaL4UStYgeS9`%Opq6j=UPf*Dr`XcHeN0sx0D!>E=
zQBByRefj%i1tEg0GiH$=4rZ$v8QCvQ)+3)gUdXICBxE7<h<)<jl%qofCDUJ!`G5=4
z2^PMvYs<R&!TqimY+GKIl+fC5aA2cODDJdf@nJ692j4x`iN(K(M`$GFB<GU)ho+`t
z5^fc>kkMqxOO_zPXKrEPA*1rqj{`Ni4<B9{YaQFOdv}f&cYaC=h0Q=1leADh+}tkQ
zNQgViB2{eo(xU09?B65V;U2gV>=1bP#?cFwFo@CenjaRW+`~>9LRWHBx=IErd}b#~
z5gV@moCWux>yJw&s!dEta0r}?R|F?C7XS|6w#NIv>gr)Zf!W36(v&c&WK;p)Q9wXN
zgM08J@O<!Ka`yz#@ctJIKuRV!(%5awi;Infzz1~=jj8W>(*?#2ANfBemi_sj*M@j^
z6vH~eBmlf{ai>+i$WBb$sBqSONIspBogL|r50~jE-doN7C8uK8ceJUMjO^_AzD7hd
zM-L$)peLCkUNHT%rmpUhCkP6EA?dPRyF;h1ci6V4fWnj|Y9FOE$FTl@FS=$^Cc-=b
z5dwo54nw|XZSd7_#xyy5b!yn@fXq<Ks848{i(XIp2I#ZuIx2A%?0UyNkD^YYqN?-n
z6+dZs{W{)xjdfQm5KW|s+JHlhP6<PZO?-5i+(5=v3PR;fU&*&08y}!eg<O~jd`j4#
zN|-bSL6n5iMJ+&0aC20o6)_O&DVlHyV|;#){OSx%B1d%eVU|TNBVG9hA{}<#9PK<k
zq}ExfO}2b~{-gNz&n4vc!pAj1!g;rDD!uVfQDf!kzvmR`U^{UAf1!w8-zO&w>P=i%
z=M>A~8_=Jrk!>EWNDlHG)!ClFfB@}mE$;Zb{StR3sp7^NL^5|~p5H@5_=~i9pV)D5
zVaCiQ^#owcg$6>FYS;pu$sxukFjB&>P}1YV(Zh$U%-U{e3V6^Dr=C9Zd1owi0tvhv
z9G9RlnRo%iE_hIZ-z0cFme&~KjOWzsyhF(NxP9l23V0M?7#Sr$2u7epBzq{+S=YS{
zdi=f)4t&NmKJ^9N6c@;bWvmD~dr|^=kIi6^oSy!@(Cn72$^gRA+f;a>RBrl@o)ASL
zFJJjGJ)N%e@Nr;pH;OIiQFbkk2?srlUAMc1G56?`&9%oj?M+*p)(S(Bu`p15xnKzK
z@2ybL#y^7++#pA%B<7UZc*`ryx3y=o($ZixRDtIUyLoDp4HT5+ShbG7QNS}lKt#gz
zN(#8opt{FvU|3(jtHQ{}v&KxqvR@IfNQCPDK7DT{$}mdxlO57PWBGM*1-FYnUbuL%
ztGhd_($CNDsz)cNw>S$btiD|WTUOHL_nSMrelVAs?hXq5+!zFx#^W>mTFtf%{zDF6
zuRkV#g8dT|sFiCO_P7$T1<?kNQBo<w-sV$3C7xxKb#EXaLaO+#l;#!KBU!$GG!N8w
zuH_HCS@{^%P70~fX995MedK@4Gv}ZB9B$gX#`(8}-K6oMOTinJx{g9fJ2QYA!m4i;
z@OG9IkC0GnM+dbva()a@>>BsR$Xk>QMSXKfUY8f;dim<rr_oOa0;L<Te@z-{6zp>%
z_-;nr|L@n2PxWUy5(4WY0Kjg`+0JN^prytqzdPFewez?r^hg-W3czejCB6gC$V^_T
zY5RubRYjqYtH-sQKM)|MO_#%fv*M~QJcDq;Ywnk^x_Wqgyj6})9t?7Xe4EYxV{pq*
zbdZXPi3w^8cwwSCoyi>b_RD-pVzRspzwXU%#Kgo|nOs@F)H=KcPTGV3Yn+<0%E`%D
z%+%|PP`+>_F1zzGiSn<$5`%Y7B7`0>o^ydEaEse<a>_7;6-|Hlsb7~;m#I7l$q#l&
zoaIt+9{$qgeJnA)<uUcBui%6$z3Ml)7baT01+aQM!#P57S$><Y0kc4~bo|WB1=mV=
z?%rL;Kpacc5w@-wa3j8b`+WyVjWdo19ZgN>G~`2ks@c&P6sU~gX~82Llvnot0Nu#I
zzz?uBQI0J>gUkY<c+gA)jYs9o9}5zKi3?>~Ta|Ez9`?7=_S+1<lXHPXk*`hF@b0He
zCnA>(zxqs}GeV*D;28-^=S>{^_m+RJ4SEYNFL{0X;sUS)_u%p@!LViPrA2~+qay+t
zMUMlUxuUTNZin+szlWEX%+(^E+v|Gpo`cnt;dP_7RVdnD+H}vrDPmOSn22S8SzG$j
zbtfKrX-`u_L%0)J5P-f2VV`BnGj*x|l;{-I(0%3R9*4J@)BcV<YfgJga(fE@6}}J+
zEz0P1BjP}M`~i>8uK@d!5U4nSgwnLtVZVlRWM*vn77!WU>)`N|!)6kGM*!SSdSl|^
z;&k%*4)bVD0*PZ}oc%XD=r;2HljF#HVFHY&5Npb2WWAS)2m1M}tiopxva^-;R-PfC
zr3)8fP1>3DZPzZJ0&<RilKbL!moi}h0uZG@gqo4jCk|`0uiWt#{RMXv71)@xTsKj7
zy+gCcF7*%hJ=EUL;~!(@!QcgF$~i?g-~e6mWOu$dJdsue^gGNq{+$4iM7Pj13ofJ2
zB%F1mOhJ0UaZ50($klfS%Z=v6G|U5}rKLY5h?W%cyZ}1_E~^#g;*I>RD**A3Vbu3N
z{ZWi|3-BF;yf}G3V|aNeL--6nTk#rB^LNo82femvAAm0g<|}5AX<jh63JAR@1bBr1
zzP0HADaU3QxEzgW3knVOvs%Y(BeV?%2nb-KI|&Cf$jole_dXPcz|;*920<;fBD9dW
z9X(z2=nysa-M<M33QtQ)e(2HLFS|GHXUEqy;ZTi;IwyMm+qO$Ay?^h1ufC6yS@S#|
zXT4uwq@!Q(N;uN4>7#fp+d7&-RzR=GaK`paX2b~YP)E8M%BWkAy^<e1h{$NYBJ;;X
zjhBI{DX-U++5eQhGpYBs_*1GPP1+W`@_?{R%*?#O&8%Oveb#$>_u;--@ml+zZ$Ewb
zP-#?KgR>12^m_fc)PZ0@IyyRRw{o}H*HPap{HNeNqySzxPQhX{_pb$04uV%I8gWw!
z1;&S%Q@U{Kk+%Gj4BA-O(bFMJBr)zNWm4n<3HdYa?Eo$)Oq4J)Vmx%{NfWp;FuS20
zR=<87Au1%XvG1^lM*jTyC<jwKAg+L8)6+@7q(neB_oY#eXV3GsbM<-$YNTEeTkSxL
z7<NpI#n|2Q1%5w@D1^Df;Ne+XS{FQa^f~<YMu7fMf(asr419UIi!ActTO!;cv55x;
znIp<yoBndr!mki>El16A65EM!mG*kDdJPZmeGe%sr+i<yZ0ts+u4bIXCG(ubh3NfQ
z;QIbj8}o7`Q&Ur%B~K5$>lC<uYWHb#II-vIopyG1hLc=#1~?)Y%?E2-0%BgNB@JLe
zn<!${UwyAEl6~i+S;*ZRcux+$o}Bn$_B#|#FP<W|e0FoJdQ5yiVZ}~50+ysre8KrB
zGvJ{&znvdN+0SKA`UkFg*utm;O)VzEEj3wGEk1ABLra1x5!tM*$rtt*bNcT9&@(hN
z#L$TBT~N}sYYA}bO+0rmHaK|xnMBctNA%aTqYLWzKRy(vi+vAT*{}sX03)t261;yM
zTp*x$R|1IK1GL5A!ir|sRk>4OJ?@Ixz@Svbe&E@miiaR#<GFV=Hr@h!4@5^v+5v8)
zAD%q_njmOD(0{GOdM^pdtMfyS7wemxn}x^^m*K=q-V|E%(TRjSG+FP>((bYG$)2P6
z5d;$$+x7Krn2Qj6B|blQ#upJ%K8t4InWRfXb@jO$I_S*z7SId}A38~uIOB17>_Cl<
z!eMHTpI1?N{F(gv4FLl;1#^vR&CyB3rB?i&8;Y_YD5qx_hgAC`ieO0>>U7F-m+65#
zgB7rJ003g_9anVsne=L0KkqBN&)!`g*Y<z<s1h~x@*&x&?N_^Dbyr&pH(}@vHs>49
zGBZ<&=ArJKyM0~Vkm?Hb;*(!rb>sFi7K@q*>VW-3@%P!DH{=Tf#>MD$<Wf|hiIc|E
z62{%0EHlFi<k12~j5}b!`K%8k)e2JdccO9W=^VPLq&^S9fosQOxcR-&2b|jR=e?lU
zyeF<GH-l+Q&+0WbxEjt6HgnZxWK2NI4`Cgr3YUtB^3a>!-d@Lj(!cR+^9{-<bW2z1
zUY;?6ReVi1&~j@kilfR%y#J`0AkV*R{I*n`U@g)DmM|yeet7v_Jq{00H2uDliJS)G
z+IVdt&C(=J*n&T#3(E(dI<EizB)x!+tMqoCR>5C5BsZ>K&(fr&p%IQ|;9_D#isuZl
zeq6Y3;`J}Y)nIX8%qcfNXVYy+H8j@tbjTGhlK=t<)9p|g<;5q^@m_uJibFc+xJB6;
zZehE=JB&AH`q#w2bZK*)q<X`y9Gh_ZR{BxCgnI=?cCX@+b^tKD6n&|!8O*D^JUhVJ
zpfKpY(JfUWOLM-38z5*1&?-JIk6}+keLWP*&zoakUG~m<{|^Z2@f!un7ngsFrUjmV
zHD-q0reFtL*ztOX+JPd;=i-iq#&Va%!DH=*_sJzHZ&J^bbE2JJ)Gv?Ra_tGHPQ85T
z-OuU`Dr(2R;?v+6O1jO2)Yi@oL6o8*FF%T$6eO#8uPu}W1?}gk;vX=Ct9+}&ueuuu
z?YdDOzI`S+H!%N#y|C~+dF84vjKokEdXP0>Yn;Qt7&lz-3{*P#DaKx}3pFW!>qXvL
zIV^BH0Jouy<-e*sikU{kdz@kGfx~NRdisE$0Xkie<p>%&y7z3~d^jHAW=jH>>0t!9
zXfqg@s9@CY=0|qqOC74c5t;t|sCJjkmV=gdmtIF*znJTvIE=yYVvmU4)N;k}<X6&!
z*q11D8)MF{jfUSUoR8q5J>CV`(3JaOT5tCAg=eluzr8!0b0(NH_KI+X@_A>{NB5pQ
zd4dyDHn9yunJ7xiP%%d8%*$5o7<!~kofzK7Ct!J>>hkZGS;O$L0iVI#S2i)Q!#^DT
z&c8Va`|r6D`8jKAYq;mfVD#yp3h%DR<_CHjaYl}uuB&2VWYhr2!Lj7~kBsyX*=~`e
zchbYc+I>kD(KpFhcUl%NB#Rs9>q|&TY}N2{`V(5DsHKaSm9GYndEYouAoe+7naQmY
z2B1Xj#D4`iuROyZy@!dJ@jv+k2NIm9)73e|zP!-P?MaF$`8o-x0Xc(D=i2PQzKlss
z{6P>INW#}~)T}Lb@uqsJ<siJN83mJN_{lzLDnM{%1`Pi_F=?M!-2*QG{;638WtS#C
z+kG(!Rf8Q3oqen4zdza#ge)&F!@|O_W;37TD<Y9aE!BVY_je-q7CC_^5N}EBo2-5s
znYKTwkI)@QoCvpg`ZZfS2a-T9cvxk|PEBnMw)Vjy9uI0QLDcGn+0qx5l-qaLmlXM3
z;APuaY!%vf1HB`2hqTw`ez|>TI*&jmIQyeaEw{wz!2fv%a^U|`@vRqFoll2z%r(i+
zIl9klJ=dJ@nQd%RLapGk7p3Nh9#X{{5Zf;qjW+)o)uT91Z&Ag=YG_!Qxgo*A+#Ey7
zbN*!|B>`%vW<%&`vtJZkKhJJ$W8=N?4?5~lbb`MJjWVSn_7%<|uCr$0Ao|l+^5gSs
z!}QlB3Zwhg=|YYO+_us`c*!0;7;b*8Om&v{IUHJ|VwanDrr(lkG`ZDFJz=e~`{7!g
zQAbU2D8LCmock<g^m^3GFFiT#6OL0@*3r+5+9&>t2{oMiF7om5mBS&EU=~^^=&>Ll
z{RO;}l%=6vvC=<LS7>mdKnszBRl)jJWjB}<s3^uJdmNgABGmQw15^|)?kq1iy!^G!
zdo`Ik^fa>_)ph8E-PaaqkE@u3+;OcbwI3Y7FA_99Z$AY06+Ftgvh#`=>IonQ4W}xO
z(JrtsGyhs&w!!p8#qw!zf{b^4(4oePlz}gTgQzm&1hsmyZ+*CeZo;~+SP`v>`kDD!
zFzHnW*!n7YvtC;gM|@gaU;cp>xW;R_^Xu38V|xQc#KnmP$YHrzSI3N{uf|c#?g8y|
z%smErdIST!+Qnt@NkwifnmNe!39Qm@Vkubu&C$;J2WG8%_hmP?uz2Ae12`tpB>dj`
zb~sVK^ydk9Ly;d{VC&4$J+fSjQ{$wQmgFhz>?-q5eK6UV8yPxKA2{F`{s<Fc-PeYs
z+A5C5=P8&Z-Qknh!-Z^jr*W0m(A5;p10!sY*aW%ZDnr5X#NQYzc6@dg;>AHsyJ40^
zu&$@d6#U6`>Xa^eeS%DIo&3RCCm1uB_aOu{fEPm>fsSDDh)8TCK7-g%)8K-8I5ufH
zFuyef_4Ax<&m1<4Agi0-#9uTy?#;L`cTFLlsutX!(TNuSn1S|oHS+|+o}M-S%~|--
zy!d$Fh<~uQdK0rPbKp%W`HRqpZ9z@h@cyhC7%gqg@TVZvu&JN<iPC6bjGC2vLe^i%
z${iGUtwDHLdf0+%SP+hZqNr^T(LFSaj*H`}_wR4vfew^ALO`lneYeEl=?a6TjHPbR
zu{AaRMTeLE+?zZ7f}3mK#InR4-Lo{)${9=>I(Nt;gom|5&%LdfqNbCLjnA!ofA_C~
zX;HjlV|dW<7C<6E3qL)RFy36nZA+ira>P}(xRiMBcEZw+_Sx=dqaF*Bp~61<P&x5V
zG<YbX@E4+$I3VlnTm<tQfE7s5F(x^1ZE|YtO_>|Sd`z}}f&wZ@(kE4w56R}GjQ16e
z?Wjg{VAaE%57oMCYW<o0CE)Y+65zAx?jzs#PKB=)!<~iXF3bX@J4!}DZ$>3^tG|36
zy&wkCs;K@nRazi!zFDtV>3aXU<g%w{)mfL{(SnaadOUFCGaR=5O?}H(j7mpII@y^u
zf(t7yHSpLU7R*8C&|>Y*uEkyRLHBVx1DWyx&5k?+w>XnXB|_K*Mwf*+04#4Rd;-UE
z{<D?*?eU(|#>)|C`)K(M4<Ado$owNRiH+tVA-gMnO#$J+K0E*Z`8IGHl=2>Yh_hTS
z=L3Pn<Tmq>El21VWIHDL6H<cFENn7{&jy3Or72H{S(Z86Kd|Ry--TpdvyQsUE5RBm
zJ*=gfTqzg!#X5+j-^?LpzxGNp`ZpRpc(VmPq>bebq8YoM%i)xmD*i~FBY-vh3wFlS
zdDvBpw96gmKet<7PVTzo702xC+^LLD9~czXG|H<peo?mVF*P2yYM33YO^l~)x^y*z
zdVxeBM;6&yPi_)zF1(|8ti`2-I|iL!aab7WB8-%bo7P|8>%0IUWHso+yLZ=X{`e*l
zGMmFsEnvLkvl@T;Rv!+MFXl|gj~gbR-!<jv_r-rTY~9HEB?Ig#&d|5x{bJD+ity_R
zdc)mWFzo2DW1-8!LF~5ukH2q)F%7mgJqQPU13ZE88Y}X%hKj7a@+<f^w|3$VFwZs7
z49S(4yb}s4D<}}`;g2iG?9+@TGBEf7gR{WE%d2Z^ArDC?tly))H~{8xfDmA*molkV
zgd=QP_7aQnFd2OZ_t2wbVsyu{r^F49e{sjnG$jbWzM%i3)u-YPznEzr{&+r?z{bN<
zcrjE5b(&>Is-k9KvM6y_FRb7xj`w^B^PRj_Xlez<9ej@6kM=BqLaSN5uCJ>4iH^^o
zF%CowRtF$CUwIoElfTf@)3e_Vx%Bw>^70~lVJTua(J^v#DpRGw6&4BA6x~(|4_?3K
z?{+HqbK!e~EvPNJM~}gOrwlGq(F}SMdWFnaIt7f+<m+ino^IRF4ZT#Ant81RaO1u2
zx%y{;&d%&%{{hzrc(6Bq4i^6!7qGi6FH~^$l}i?SAzpUs>lq>=Y<<%Q3&Ru1hMFJU
zwko%d^N4S{p@g^Y)b#bu%=f%|K=QwInpm$-k74TGb~WQO?33DY@n3q(lO#?0i3;Xc
zAm>Qj`=^Qdm;axE>XU?_)o92j3Cq6hEclTLz4+qeWUqReR`t@|G-_2+D@l26*^qj+
zB(ZO7u2yW%mJdG-Ur*4vmSM%dtqndRh~suWuWh=rx$idI_MH2bQdd`(8oP(@T5&V@
zu|RS9UXmPK<J;QWTKW6q2o;sXR0qlFgS=gq<@yCTjZv2smyq!J_aq+#U=|_c?PW8q
ziLC{#-<!}-=a<g%^^*Ih&)Lp`pc35I!NQ9(NYb?Vi*e(_mm29twc9`x&v|GTxXP~P
z>Aj)0558XM`pW{$Lol68tgM1fi%hd_R7<kbOWx^0l&Q(BTbNzcO{lAGa~<W(zg~F;
z#TM$;Mvma`vA_&cT&#faOEHCi25IpLgXr$PYHSD3?4*vn4o7nt2MnXU($BPk=K}BI
zP^{cQ%3*W4if@JNGaFj{hor@$m`4Mu@9P^FBx0OA#qvo*<Ljry10%d~U-~_K1ho7<
z<lFr)M=r#Z;NVZ6b9e!KjvB%(gafuujR4c=_cl<*W}>N8x(9ltIl68LBW3}#Y3?&Q
zLV>n@wmISzvpsITQV1`t8jmoXU=}jYii&l{1dCqWK|M)&3l^StT$Vxjjr{nizTh-q
zUhK1wU^0n&_cqSmbG>jwQe5l2c0S0M1wD(`0aYOu=V8LIDjO(8M&%BNm<-~i3QnW>
z+uaA#dYzymaG_!KbLGvueJsepBf2_)(G6Ph;Bm$l`XlF8gj&c%aFwD>zV?`*gvuLQ
ze=O$bo`A9*7VzKhFJEg4jzZC9wlJP|<i~wohdZyidiGQt{%G5D`v5VE5tvh^9OaVU
z+aVbfE08#@t*^_t&!t`td(z=!7JC@8GCWgRka|uA83vb?<!5D`ZX;6H0jvcK*vE%u
z>Iu)bSdda-lR_?-6m6csqQ3UONS~q)Zvb$4zM$n@=j_D9K4+7KqIan=zkX36_T^4f
zaMSr^$8Y`zYier1!OzNnG)xELzvD=DRYAl-hEB~}8#AObmD(mcnqfZ>$!o@98foP<
z$Mp7jOU#1@%(S$|J)A;1Lt?zw-T#9zzjE=r{I27PA(>NyR?DgE{yn#wLXYIbt}Ywo
z6+1gK6U>2ZA01~}_@fURL?VF(5!prepQ*=`I<Nak^P6u@U>3$#LFr{a#Twr<$1Zm@
zEQC0gR4)+@fBHJRMd9BVM4EmqgF$q(Hg@j?1wS%XaPSKVhUcs>#v&l{!sSZ|k0sfr
zD_-vT_U&f8nvP1k5`mj2|6Ptivt+eUZwukG5t!C562F&Vr7VlV#1<GykKVOaxBX`f
zNYzXHpQ(X-WcXnMGc?Hi*nj?AV$Tt=Gm;mcevLU1|5~z53NYAFCMGrK$N!nD)q-q*
zKl|)Lb!4y_`}(hwZEVm8N?<N3t`y6wsC?)@e@cdw;9vR|4t9^9Trpjv2Z&$6D{!Hi
zB(r9LPI0D{4Z{1?%^X^uXiy&r^n_4?&2E1KutT7z=)*Zj247xm6ELEVk7a|&zG@pM
zVMD-h0T}`&{#8RZUpR{np4)A@7j7uPNkNq%{Fci9`7IEejto;D@<(wQ5*+L^;{E3*
ziJ|t&&WCxqlXf(FLjnRqdQ9Bhu2|%{e1G;<!ufOD8$t7xKQk5dMU|C%<PRTCUEJ|0
z`Z>6Dm9>GmeR{2YL44)j=d~BVZdA=~NX++IB%uiPM(c0AkvO0-n_v4+HBQj@OR`TV
z?YHNn=R8u?NmX9E?<XP(7m_16|DA2D26S<)EX_~#EJm<AWozS}|KN?=$MgN8q)sc?
z*BGYwZh-U;7UIgvU?3`B!*YiRzkNI3XE|{dex5HhD+;HY+!Ua90c>{rr?i6;k9w(X
z1tyX$)Lr^`Dzj7iXVn-t7RG))<<)29YYYqv7vb6yKvtm=zwpZUAaj;L#XcgU^L^?p
z#D&?UG+uFM?ACRS?vG7c?o8(k17U{4cMCOp2s9Z=mlWCO=5OT#tl3#;Yj<^ZMR7aX
zk(TpO^mcy_PM7p_Z+rV$m^i;JFIP!eYJ^)eNZq#9)*Vok!fP5Q8je_RgiLGFZf-7m
z@$+B2R(87@b5p>dnB~33V2F%}$USUzqZR}A*PAL%woi_`^799bW%%+2o!@V&2n~y7
zP}ChxMYR`jWPJDY=dHHbJOEWNCMiCMGT_Fx1B&+&2%eStgMInVowI=^8eJn_Oejha
z<2!ejU{Juz$0xIzyb;AI4b-03XRfbgx?_9(!+l_)9iX04%KXtNG*#s0b43Fk;@=??
z_-HrL+zUk(a-Mld4UL)cW{nFM=;WD+3sdoG2*%ml8`%KTrWrs3VUfwp<@Mh7xK!!t
zI6;QWo#WFysHjCaVdNfqrb!btyS266^78VC&H}Zpr^IFjm<8aF4Cr+1@0POQ0ko%5
z9f@c;wBLu9n~O^?_^j;7N_B(12Uj~jeNy$#6%<j~@BqZ*_<VBxDQn8+qoAPZI*)&U
zrf>z~lE42Yxn47*zr-dZ$A*-o?%3U>$**ls6+QiV;HY2qHG0WmYyEL%W^+f{jvKR^
zscEWb#OSYI;UK@UUk?ZjY)=r~Kp71nD^lQ5bQ!aE6DGIMg)N>?vn!c4<UeDCh7<v4
z;8iT&u{j|lBV%uGf9n>_Hrw#l$grlK^@G%!6>1-<=E&Bk0-R~JC?p^fRIXAzyYydP
zfE|{U6^^->^8CrowA__<N0LxEjTf~`WAlXZ)BS!;7R7)Az<cgjy+7$-PEp&w6F4T;
zOgUm&uuznD7Q%Oll`UYr9^P^%^jEkBbIj;Qbj&Glwf-7d$v^<elf|)SiX@&BlEo;V
zy?r$>Lx~Yv0D1#^mY1c?gCUsHc<pShM%z<I^*^@O6uenir=6n%4D!dvk1C2eXsnn1
zZhXa|!&c7Y*jxVP5&bueHZoIN3<fAHusNa1(FDLt{1<W6z%fEF^ckpdZiD}FxAe`r
zWF)OXa5Gqa&tTVpfP_;IyNCSbi*p-?O&tx*4mU^I+SwUE?)cN~703aO(8(jCjgDv3
z2{Q$H(L0mf;C3|zQo`O~7_ABPei@%NF}mkI0Ec%GB(IBxh8J_Q%!LZ9UkB<5UNM|Q
zfS|mh-Z}mC=g*O+MqV*$@!ne{YSP8ff2jvoM%?FKt3Xz~fPetWc^;K#tBqYbPsdK*
zvFv}-izj+DNhe2V`SE&$%<hwyz1&u2sz*6i*Qbr)^mBEf3DpuTrdBT%H8c669D&(?
zme<z0Qi4KDF+{`&skvU|{uMS2JKGzC;1vvZ?x3S(S2c|>ZLj+3X1rdr<vMEQy%jUc
zb?lfy)(jk0uXeK<y+?O^?&tJtqVTW#{m<)^Sbp_|fM|JYQ3E}!_lDg-vDMXcQc~Ni
zBa~|o0Y;H7bh*F}0!A{zfZr5v3vFFyy3aOPf>0g@kX5s$27ms%|1QJ~uP$5fjV2oY
zg^Bi+HUUSsqHrGn&b_r8x1)1xxYwfBS~!znuP4_>7=hp~$x>{krX|W^9=cH77JApV
zw5n~pdY?+^g9i^#`bBeT6hhFcx!8STAHUfehH(-Sv|Kv5O$El7S~Y^*)RC!ii+$!?
z57?srf}eI^1woSNx!m=It$PS{4A6N9w+IhkW@j_BFK+dcXiHw0()SB}V{Oc9N(y^%
zMkg7zzl807?Y88iA0?*c5z5rbUNXS40QwEo+)pHKlMQ%=<z5aq7G2$L2*gthN*Auj
z@h-v5z9ZugeQ<Qy?RT`3)Poe9EtSg(d1~gm!WNJQdaiY)DT{GyDZMJ*oNJV)58rxr
zvv%xb{411wzwf(gq3evWHhwNyLh~mc1FGI1XIsgbP(Rv5tFEq&sEyi}1S0G67>o%z
z2dUQjuH1i%j@jcbnkW(?A!;0p`Y{z1Yv6N0v5YPJ8(yG{nZ0;4;o;0bMW}~54|6I-
zbMYIMDSLeB>yvDu5W8)dl$>TIwbqAy_OW9jNjL#<h2EQvAzEjUDq>oJ>dU&)lloe%
zmmQo7RFa9@4}evIT0Sad5U2@=6zm_Hf2fC;Bh$x*iI#S2v0ZqSoNKU6;d!=AH~+c2
zo&~nO@Yt<X{HNS+0Bn49ek8R)z|7m@@^o0_e$3;Jt!+;x+Fyc!`u(OL`%$%4FqEnL
zGdTj5HJ}M=iKcd9Yi&IbK}Y1Yey|MJ(g&uDRxzDHuZ_oGGi<M8qo<p;L|zOjpS*UE
zoE*1S!a`r`-qwNe{Fl%GCjxZ9et}eQYqVt~*gi07^ygjEeV^kOe}EALP1I(aKrJ+T
zUZ0=o7n=O0gU!^<(Pn#^9sSTpk8HcLW14JRihoDE#hejre4p)T&7?nHUu7%};ylJL
zEwk>rR(f$EueNq@tW9lHt!#4`3ENy*+B*4WZFIjMDsX9AP?D3!WE3va5;ZG$-riGq
zrsWo(@~or*2(dimB%DSS`nj0yj{4~iyB;`jfTZq6gh@9RIt9~qrEEaCu<Ph_96aH7
z<{F8)*_5g$7u#iQ25X)d<KiA{X=&-}Q(AaPEW4(k6KgR%z;;uC!uCt@_Jdu1ux-hb
zK}P61Jb>u@kW?mi{!w`->8$D=2+;IrUee)cS&qo}@AM+0b&CB^Huxm^QR-(Qugw+3
zf4N=(qvJX{H8M(7**NTQiE21ivR9O7e?U{VI-MW*zU;D6T~wqww1LZbq76Uqnzz5;
zriCq!x!Q9{RoQ%hP4?GMx>a|lY^p5WK6m=`X`J_rl1tNQTs$}a?hlRtUcdlrT$Fz<
z-<p57%ubdKjyD%<wi2c|&f|adi@ahoBA3{Xx31i!KJxte0p-&=yHj?Xa@@F~23Tej
zFSfINp>L6N?9>!45rF<&%_{r-iHJ=3@qwd~Kybf$YUlT^aLo5IuV%QS4fEPwI})Fa
zwoB6}QY5Zb8cMvGAq~Zl5C}uQih{;jiW|hbh8nDVU=LHcFgoRz`j)?vG&E_>^#1&L
zuB8It_||5{VB)_lY3;`B@V*f+);v95aB#__JCwa}8f#q!S_aS7g_u}>Np_b7uy(+?
zp*=OcJEck1z@QR4dUAIP+xu6SN30W*yw>CUSZS~P>{Eh?P%^dKq}6Af?8?$w4^&RF
zu`TtLByv~Le^VJA8*A&vR=j>aRA0~ZYPf_01uByG(3y0BY^4~fREpSBx>wj=E0sFH
z_%HID`N!1?(-zcs`HE&qDAWQE(&M~rz)W#U05js9`y6etpA5^Ev|g)`C5FqkxBNVm
zVRCT=XB&qlW?es+yf^3jq+J5@Io(ojZB;I3F3o<&SSh<|%_WjhqhYvf`W%uKe$n$=
zZ8_PxirP#65_w<i7p0SaKNCQEWwFHJL0R+#EA`8gPcL#ci)d=IEG>Vk>n09A1fRGp
zqVwOikRrF%3r*^>t)!w*BzdRFFE9zFyK;UMnjIjOg-;0drmlF6ofS6{nQGRp=MqG1
z($$huY_il-HbZD@m34nBHei4wg1}3RmwhR&>Lrb)_B%Ue!|fDTf4s28^7KkTA4s0d
zc;A%tLP$Y)*s{zW(->W;ed`99+cX$=1@hBq;IYd-QOc-5>-A{6ihBuc2w~C*=kd*d
zIHvHkzr!LO2<8g9-PAOk+u=7ITQtJjkpdHP*DL|eH+P-)=eB9Zhv^q$cxCCD-n@#J
z&)&_Fl(&m$wY@V}{}moQz8Yq8g<7$&tZ>9#i5IcHcFxWD6d_Cu?lDqNMzqUrpJ3mP
z)S!Nh_I>ErFZC+-H=}Q3f`o3pU&54O>KdC0zh1%INSMqC5z9Krw!GG-Cit&Q<^&4G
z@@QM5tinKs?`rxTr|DZ}X7T-nnv)VFnhs|%Zwxv#2n@Xhbv}emg!`_#dTS!dJGNBX
zrL1v&DR*jgG<6^kH?$PytJe^N6U{BdC{=F6I(EcpDT;S}D3ED=qxPt<xozT^JRoKn
zGyZ5;fGM;#Hp(fQKXt`es@|6bFgXB=D}w(TDeqCxFT^0y7!^SK^RwL<YJ;;i$GC^i
zRFr^vlll1Z<56Q+Qb2+XzA0Co_e{OthquP0wg`P!d!4$I4&fxk+AI?4Wz4&cIqF$n
z5w<j(EAX&Si;99b>xd}~LC9|M&PmY-o|@0j-9yB~z1CP4o3Ag;z+d*-bS$Ly{{6h^
z5l|yh`|X4SQ3@^^)y$8Tl)TX$#8^&D>2KuZKO_J-;~$N>G}gtk6>s0y)Ke!rmvNrQ
z-Faf0W2_#e2>1%#LopcH1nnN*A%4629OWmjM7mAK3l0TBTfDt))33@~vsvhkt4U^U
zRCxJ8yL}D)JjRNE4pSY%K2S;rRgS8lgrx~vU;3uTwoA!@@A}(EO;flHb6U<w;A%ak
z!yEeK$@b==09#Xbck{08TkE<JiXTKWo0v}VpWvuqt}@vBHs{!$Ya{U97&XnW3PAG1
zTGClwUS4Kqu20wBZ7aVGc|>DpvGV@NZj!>-rviHb>8gw-MMTusMvK5Y?M+EZq)<d(
z%))rb*yCsJdFT$q-AQL$_)l$OriuEMjq6EEQW$j7(azVLzz<L5N%J;IRI1i^eES1O
zg|yZ5S_wF_X@;?*cD4h>YRj(T)RtWtq%+?aukG5ki}bbHV*2O``&rc+b6L-B+<2Uy
zmtNyMwalt3G+n7zw3L6iFH_?>d$rk}oxb^h_Qy}W79t}$&tY~*;KHlT4@sk+%vFZD
zts;djIwl^nm20R*PDho#Fgn$8Y#=qSop^dP-EG>VO@vFc{J2e|kT(PIoHPs7Zv7XY
z!VI*Wl3==i-HUnkty?G8T6g$rsrL{OeG%Wy5?-Q6b&#^V-)E5e{z=x+LssVI38RP1
zh=_<3$fXr_>Bq6L{>*z_tk~e7qLQ0s#XuQ_AIzE<TONg#q|)ZHd1U1!OY8It=?&VK
zd~%hn{TS5zczQ_-PaOtMP|r5?uIcJYqlAnL>9PT6tAJdJx~Ez?nd(+;v6tc#aFnD!
zO*nOEGF{PlxKrhoX1;j#z!TqV!$?U-huZzU2`G#Q>gTOkf!aU$RkfypscY*YL`0VQ
zJl}5a)vyUBZg2~dyM$hohetBtP3`7Fj?^8sk;Wm#ExP+dLqjlP`sR&snM}nCOu33c
zu^J<PF5@j-&pJBaNJ(>bun}t;44JqFV(wWgd~3E~GL~@m>VJt<nCMI?`M%}i+SAfS
z3JepixweZqRD&%p_m(E#fMAGd1_ciqoCcfI`PD*%+6^=<0sTS+#XH_b(Qr|jshq7L
zL^?XrSWd(qBO*%8N4Z(s$eMDuIn&oIkc?$+JIAo1P-}n8>iJ9xwpdQJ8Q&evSJwaw
zz<&h?f)NIh=;P!sUsjI4;v28^8-#Tj)1QksZ;4F9wF|Vk1H-qpj?5-bG5YPLZ|yiU
zbEf;z%KhyHDB9E{e<HRApudE5=Ool#o!Q#=###r>T47lP2;whbWTDNC*__lxjEVH4
zU{*#!FLVc`B`x0G>u1l7gD~(Di_#-iD$T!)c#l=$r8IsGx=-^jXX$*X-0gvnmn%e=
zEL_bFSWw?qe8?I3Y!wg+>IDrZM0|EEpxJJ@2Z-Z$_iQLie_RuJDBn@x#A?9R$IZzp
z+LMda8O0*r9AwHH7M~LMUST9rg6=Gm{W_=W`cR3D`0f5x@Ne+-9_`w*_Yu?17M=+J
z0p^_bMoJkFW>ua`{(Tj;j*uJpfa!D0^cH=vNV@-$i0FZvypqSmdCknJG;;=19(t!{
zOFg}~_;`BV%{>Eo7;d!4ozMw8tU4nii!N5}?a=eHWtHXST#iOa;O;5#p>`u1EJb~w
z#J~&A7%t1Uk-ak$|HT53n1*+7`*&Z7GTIQca`>V{GXPOZ_(42Le$gWZ!NI{1j8M~E
zef=y^3Z%J8l=&^sP><U+K75Q9c@<J>EWqYycBR8*MMb9!K*%8gHV+<gq*Zn6ENTjq
z3&q@_K#3?0hgO8D12V>i0el*`c6t-jdKzP<xuxYzAXh^}8n_!h?jmw%S^V_#Fqs(x
zwB0UxO5~ulMfz-S)pBX322rm_xJ&@pq2bk%PQ_)QT(<u?_f-x>er=+>$iC$50E3z}
zb9pivbk9Y24WtaH4)Z8*`swl=`+fE>0%kpwHthuO{FQJX*V3&2@#CzN)Fy7S93w_W
zN=#)!jdX4+KG4jJ&TU>%!giwPIk#sB{5klLT`jR5Lsf^dSR0ME_l`i#s^JL;Qd!@H
zz@-Sw*1or}tF^TdQ2p;rsI13Zm)kiNw#e!L)tmAIvB^@%^eHg8NNHhVK@WnIpMNzZ
z%xwj1DnD88F0ZSLo$XEzd_SeTUz=NN|F^ovS1-Zx!Yas4Rm31*H1XA-w~+=yTDDvT
z1oA;=gY^m2Bx%9IJouO$8gEG&pcTQjUxW$|*+4mbfMEZ#ewRZ6pjkm$s*w8IJ65Fb
z7$9_#G@$$hHA}!T3DZ3{N5>YZ8$d|!E3>ySHDycN<I&6|Ty!EfmJX*wXVMKiWJG)^
z6w9VkGTuR|)o+I<$9tnHzhrv4owWarwbIwqqrd>iR69(PVDXQFjcw{SRN+e5@d*h!
zuMO8w@~bBPdlkJ8K@yMx9h>6Y7835_P+d=f5){i}`b&!3rjs)OI`tZj$TTj(`OP`?
z?`tdG5D(9_h8M31HkS(uQfblTCs`Yo^Tjdb;Iq;S#DdMCz!pNVO@?+(EOOiMH&lU{
zY}0r{MP&(^^e$s%<x@wVHjpJ7+iS4^tIWN<+9t5U=|+7M8yi7ZzlStD##(8UJQv<n
z%_E+M{?H+ok}afUaNAE#Bv~v?ub9Q~bg@loqrk`J2fq!uvYjwBWRIXYvEGHz3f?{j
z*E3<#zt18LmYy(FC23wll;fxk#S@SB8zE22E;ThZRsB;+vF}Uq{mA)q_YepeF^BDq
zK&L%p@!4K2X<f;qzJWCnVQ05H(M)vhTKlo^O-;BHe^8+5J&&dql82wdsR~ZyH;(Ox
zKo>NXT#6%n*HVpY1rGl@$L^hcbv1`4ri^$cT^FP_&FcP4X?Q3Cwda@_h0DR)p+T?2
zJPL&|Zy=sH+<s5hgRpT-*n9~G#GgNZI!V*7Y-uRo@Xh3QR;;_)ensnSG+ByN=Ns6F
z#Rf|D16)B1r+8cC^~BN^(*bv7^t203V;@PX@`uB^1vTfS3rkC5cfNNGA^0%!=|Sxd
zKhN6{6w60anVl8N&LhdJKiCud(%F?iv$VPFGR7>Zir&tKqrhP!=W%@MV>L3lTAM?8
zf6Ywh^5qZ2Cm6*Y&U?Y!R^IDj;AIq|Z$a(h;NZ?HsHlkdJfj`Bb|+{haZ~O1p$J*#
z+-UJt?s*U1mVaVt55;1tK46CU_nxwkM%C#1g|Ec%Az4{jo9!2wn>Lhg3@otf&Pnqi
zvJLH4r?Egj=YqP>LqEA2B=K@@No4PBRDqC*bfhf3uh&%{VDCqKK&1x>#i?UT#wix<
zj0DX4tZP3u43GA@QGhzxVN&TsXh%8*W%woUdU#ARV5z_nK6d!p(bR<~_V6x@T9g%~
z0!THTM*>$!C+JwOw#0stV*V8q6O*>PDoj?k!Pbs@wkio%7W%&=nU$+TktHSCDYE@a
zJVgp+Vd|O@$a^1KUp@w=H5&Hs-7CFD-hZQZiIV?T;02kQAk_zBTf5j&qhub};_pKl
zFV$0IQBD(@<RPF6ncauUDJggU{fNL<Q<b24-y{!s_Qpyv?i}t;ng_h9HLj<HLr-1c
z3fj<Yi7wI)&uX@T8!xlCcxOjsKKFc0#F5gfs<Df&f1MlqeGSyEMEa+s2;bliRS&mH
zopAdNtG1vgPr#5`C3J2j1&|OB<W^GgILY7vi%#;i<(Km%1P12YH}}_<cyK3SSYl_J
zdw_0pV)80CODvbhF#7$-gICK-k`Jq3e4Kp`-rmFnu*6+WQI(g20|D@wU(di5q}8w4
zf7JWUMElm5cVo1gD^X!=b93f{2X%%OPF(KZXrP_l+!hz^F8r#$^>fXCs-f?i^uWYO
z>2mzz3-a>ox<_T@8eyZb+Q1n9EI&UfDyn*cu9L>Bv7ur2Zr_f6?LW1tInCl<U0u&)
zC7t8pQEGFMT?<JNiKDIdq_;FNVbf4N*KU}W8vOKWSY95WxQcD=X?wQo1I>zL6ck9w
zZHZ`nq7t;?mwLf_=c$ekOpK@20`8f69oZBA{YS0i9ih?MOxxa%v_w0k!Ey_M%sf|$
zU0;veT3T}b;QR6Uh+6Z<PRdX1FV=ed`W*gn6~0BYm_^>#cP+ynrSa$a=j`EQid;g$
z8AQ#dqpymp#P;klQY`t>&|sKnwRmxFAz4;c)`t{-e}8%g2C#b?JEM1O9;}f2P!T;i
z$i|dBcB|Mkm4cl704Zs>NsVW-&V$_ZHC2LV&IpN$#xyYNM(i5UC6*;35_;wtH@+xB
z#7r|h^B1QwQL+Z%Kcn>J+6`<1mF!{sO8g@davq~KA|i%&D5QA>@S?=U#d&$9goJpM
z4L?h7zYl&tK5h<6yN3_^!^w$=emy5t_XZ9QlWk9T;i5Tn<~w$s{_w-@$ZP*&KY(k`
z+QP!dDqeLL5m8;`c~sN|y7|5h4Xi+0%xs^<475dF>$+D6|GX;qLq|`Xu)B3D4WHnb
z%m)d8+UzA46#cNgny*=@C*@Y;db_*(+lKB&QMGfNFd{)MZ&Y)z`NhvmE$gPIObtv-
z3hR2q@bk0uXe-!BNJtE>U8}OPn?p_@x}U5hX@t6B_76x@=~84~xE(14g%1As+#oBy
zh^C&Nd#UYs%VVUp8q|1_@bczDv$gyKLp)I6SlPQ!M0`)a(1?13UF^ae6LzfaXUX%}
z(716l2Jp#jBmVQ*P?t7Gg50U1sv3E`1aXI`d~DHJ4r}0^JudF>AkrF0{N2sf6kHVx
z92CdJ1)WCS>_tNV|KEUb7ggElUsSX>^^FrY>PhZeAY7vd;M;>)3#>1#unV6*BlBFJ
zvan{E$36M;?fqYqaf4kY(bp8<zXN944CV_lLx76_bN1A;00Wi-ssY}!cu6~)yt21E
z7g{np+A+b~OUdX27feV9pvOMtn4}nK*Fx>4PD~i5QSJ9xQ3ZO4Z~lCg3zZYtM)Y%w
zi-{7>m<?7#AX4hNM#jyfGy-sjaC5&ncNTs-%UdfnDD>!PXimzoj|U*1@lQ{0M~Bn$
zZ<PN46o^SkvhG98rS;bW=J=6k2%u7)fv(kHu@z#<*JxI<@NSsDF;nekAS6`*T){<t
z5ee}8hULtBAcf%a86WQjoBPh}z=<s_4|uL+(Sb^pufx}F_00>{ZN}^5?yRevTVAHo
zC|Y6iJeE~a;X!sE@9Ed`llaAE_DQ-YU_!p1G`N!d*MnVK2%-Ji-x|X`Qfm2ir&8-9
zfMcikQO4+7QGjqSy%GqJ##)~HY-Y>ce@tyxIIZ~Ev#1-V#y?HtJe=vy-+_&v%PTTk
zp3&La{DDGQYd<h@-8cUCr?i-(DWBj-CCr<oOn*JTeShz-=Y(MaCcTjuhwLT)jal8k
zy)_+=d5mhR4ikZxyZWoXws!k&Tz<Yi8DR0Ki8W^#(s01E+)Jc{27~|A?je9~*lbS7
zbn|GgLnRd>QUP=5F?RwDl$=~ujuMCx&{g#ZE6SG)W6^uPz#?dl`cQL;yd70G*0!=(
zE6{1O`-NX{(1Uw}Xr+@CHqSyhR2iP~XbU0N9<Nk6MeRPfp$K|2BKi+{Ek|MN!KL3J
zik4J}chAa9+CQQq;=Z!kxw#=Z7roX4n(3GtzbGnl{(UbF;VDesf2zH<vLn5K?mk6x
ztDB{%ziZ$S4b2GhU*VNE%7FlCeFX(|-}f+6%i4qdwQf=Dx@#vgZ&W7~L;0;TP_f{8
zb(nIs(*@YmTc<H6c&MRjhF+#K&w#VS3r)$tZlik`bbwaeWwo@S68V3-N{6mI6MdQs
z1Pl(_o4ukoI^buDT6Gv!TlAe3L3@hcnY*s?*6rJL3=HX}5AYZ{uiOSd20wGVGqc5?
zRHoRvOOlN(6_aA_l~?KYhu1qff3O;)qE(G=djEcXUAop|@rt^7fp3}f)_Pv0+c!N{
zrN`K4+aD~_VT3Jp@1K-orDwK;=PKMAQzI{$`kc2kj>tRjvm47g8>)LuQ>v<~@d;C(
zBuL+Xm|^jk^<v2K%+D1RlyCLX$6^1wSTTvsY!C-_Wfh4_j)U^vMW~VAgD;jMSL^D+
zXJ$VO3#hhJy4&2Gpbz1EDF?><`EvklU$;kt!=yrvxW#Bd&l2GSOOvK=T<70Mm9u+4
zgmg4|$3H7;Dn-uQ?Qh@3nrN%O;;H$O%jkSlQ)zn1dg-=^NQvss!s+H)FpW2aH?ZD5
zhR`FVj`Rfuc}owY^VAv+TzJ@VMmILSw#9pEc_l^eL-fHSm+2YIzPP6@_@>>78Lf~&
z>HGD>n)^(D8mwU0UX0J*0*x4nT;mz0ho+eJ15=J@$ixu$ls$`xh`d)qeEg|-v9F9W
zpbBW`U_2O(&IhixH>$t9!{Jqf-GOrw^e=!lHHa$t`RA=Z!bO)L9cl4zPx|oguHqfk
z$Wy=o03)w&Y`FaCQGD(-+N=R`C4-RZTr_tSCNCXjvzJ|6OF@N+)BsK6=`QZOY%ebD
z5_*x6;#0+7RJC7g`;?AOEY?Z9_<Ufy%+ANJUo{kE3TX@Z3NM0s5%1^k6L3H``joEu
zaMSFiux(5uSpb%7j)ZwrQ2nTIo?V=<-*l9*b2hVDPu%Ras0O<r)s#fQXs_*H4QI=F
z_k~e<ZkKeadmwpmsxp8^l8@)%+3|VEo%@k?v~laPNP$}o4GphevcmmY+|0)Mch7&Z
zfL5)2`vO7YSG2lfeScy84g%*1=FyLNbaIyfuz(FCh&JW+ZNyCSiiwCs`(DDD>++)h
zs0nfky|B50oghw&L2sEG)DQ=;$CMA-J3yBKXo}0M1@wl>w{L+TwAIxmUn|Mx;7Esx
zB1&3j<B#(iH)Xu^ya?G`QbF-Yx)Ue1{=|F#`*VhyDLmdv(GJs+`1mZswS7MQ5Iobe
zlC`p^7d$jy;3nS6$zQ*C>5|f4%k`yRA$&ZzZ$95xo<7BNmHnT>kb<<elJbWqd7}mx
znaICkzvp^3>s)gtZkK%hB1P}lJGHr~_Y}@s>u5$sdTM8?*PpRVz!p)iy{?n%?)Vf`
zmA>9yg^{eQ7BIsapP4Cjo2^eyPKIDs)P6ug`po9)$VU#<-xU=xIuo$wm@BanlisNc
zqc*CCgfg;rr_JP@As9B$M?~E`RkQk1ZF}>|<tNV&RO|oeIQ`6*l(e@DXosHe{`vgu
zikTY@w6_o|Lu*Ou+6g%TV(b~jUS~9U^A48&rPMD56!T{kR_TbQR@{i@uEh-l(zP?5
zeoM?L3w+NL#}_!(yVxo#*&14`pGn{U{QiBqli5mwXinze7QQQ`SIU%3wl~MXLM|vS
z)+;oPk%Dfv@D3zvaz9^subB-X^aNZ?pq23{avM31vB|y<wsZ_nZ-8$ZaPrbY5n<t|
zFv&tC)FDy3bh}OLew=xFi9M<%Q|=OuOP8{QaGx@XqqexyJr?`UN{rd}6~|X)pRv^w
z5D?`iZFOjTxU=~%l@TeMUxh6`w;tF+rH=`a&R{i~U`ECr;s#<INs@T3(G3A3Gx^WO
z>=}V|z-x77a()O*i%yr=B=p(RAf`g5eEBiM--!v%DE1rGoho}wsn$-J8%O+w6+89=
z`o+`@m&?LIxf!{6xkae{YHb6shRj(-iFCV%QTo8q`Stps4N5i?o{@CY>zRR45S>CZ
zo@aXVTlxth)$Z4S*H?C$zkIpbmHpV75*;&;h0?;pKi@L$5ekftX#y3DONze{#FLp}
zp{-~}M>k$%A)u+I@eLHH0h~Ox^}b^ZGP%@8d{~)e{?*)FHb*GTxpO%u#2sK}e<0Eq
z_q@aUlE?KjYUpYBUjB1lnrwlR1eKKbI+8TZz=-zE3;*M`IR5ujqT3m3t%)`Pnb^^a
zJ68R>q88@w)%(&e^lp4pgQ%tJBAI1}!SD(8>x!{ghh_G{;rx4BTjl+Y*vL<qvb^!y
z(s8+eqnd1eBy0-<7!bw$?r`Nqxa+1CR07di#k;ss{Z=PuoP}MwcQpD)h5>s_bb#qB
zOp^7|qcd=5W!~7@xh`9HH3PV;&O$@DYE-u$wOjPn2isR-d3hcePO~ND2psD@-pc~I
z>+H|UA5ok&XWh25Or@s`wPC;TklKh8L-vb{<9rYt=QLF}{G())0wKKRE$Kjz{AQB(
zwxZV{U}-Lmm*scu?yd!J&(Es-G)0jnD?5B8i#k1h=hV0OgzcyXn)a7as&#|^FJ{$|
zdS^-#FnK(-Z{PM%;5kI)$hgf^0omNbtOYa92-9Zb#dLE9<`D%u)f-(43$ZfiA|f>O
zS!r4;dzzYh`ukOC{*5ST5S<_IOjCwgIOWHrT9xg_$U;q6XN=wRZqd4O<^Qqw)=^dO
z``Rcj6U+so0v1Yxph!p~NX$uh2w0#33M$>0h=RhTL<Ceo8Wf~U1(8Wgi8K---Cg&Y
zdiH+L8Rva(ob!%x?;T^WfA-o-fywXpjnC)#Jh4ObYI#TvGc>LIq1wePVFXpb3xtiN
z3$}Bbx9qF=ZYqwbtQLKXR60i^5!V}^M1Z!cq1+^dcLe&QV<##x$|)*1|IrnbMV8MT
zoZHIl;UyOz@!9Lc9opW}4!6T2^xVN~BUztm@AcLf<93adoC(Sep61JulX>#^aXPJ@
z;JZT-&Xf3XMn*KO-)R=ugcWv(8N5h}2pnq&;4=H0b|Vae8+(Gdv~K{hxX^tdX6l!J
z6P67C(YJ<`fyAzc_>(cpvENu?eAp7BOTv#{o*hb^VmXrF!X}ufB>A`9Xq#@kDW?We
zCO}2i>83YXuW@1Wb2#Hs%M{&bw!Iq<M@1V8sa*Gd`0(pUFJR+}2NeguMam`I$HUj0
z>jhNFA$ErBTDNvQ9iF{vn0tJAavkUs0wBWPD>A~_?M<&NLri`Ss!i~9*iK&pVX1eo
z2LNBe3lQO(6!FfCs`bTa0m3lXV-LuB6gWnDAy?M})fR%27}gHX%WA$b6){Ki5^u$c
zqq73Ok4Xk6S%2-^f68&9o3+zTSo5z0+O=xe5rGdLviw2I2Fm08v{Y32+o?B!@g1*M
zGu4v81b2(Ii7%m=z5d-gcgUce#Vn$?hzF3sVoQ)wk9tn);6Gv%Z-60T9E<inFR#7a
zx@X+DCS;S1B-|F2i;TIB&?-eAkK6PKHFNxCc^Y<hg&F5(V4egXww>s1EDvgriC{a8
z3+L>B!X7R)1Vz49<(r{5h-17oo%N|IxdEcjSmlKbqnx_QuLl^|&DFWAX$vAGrUE9z
zc|`Az1PQ{?GK;Y$aDLg`%#797LZ<$}(S!%Q3x#4I*<b9o57EA87shj6l90pC)%Ur8
zbtRm~ptfnw;0`sHPQqJLGMALpnr4hq-yBJ#W`eLLEAO@QshHB&Z$eA{M-}kfAKB@B
zq3U^t-@Z3bh<i!dP@)Rj4NimM5-Dnj^FhkLH1m274G9WV3CxvIxPo_c84_f40o0cb
z^6c9o=`32l)rE=khK&W~2=xK_q0Cb|3Na@<7Nb@9{8JH)g0C;aR2&x@9HG$4**mQx
z#{nKcDB(N}A{nPLCUKrg)#c@N#ZjO7Bj-{yKg<3l-%Sm?ILmP&0Z7jBLO7Dhv1FQN
zcO5+V>Y&k7i#?}wyq6Ex#Fw65Ep~V7IA(;&?!;v|ehKmNFLQJb-%T@5{Tz(CP%KLO
znl{zj*LSAOUzSCgxS~!w8GP(!lhwAZTj4k{`{aO2RMe&D!r0kRXnM5j*Yr37V!icR
z4~NP=)ckG?XfyW$*<3T(Ux(;)bFuD5pbkmQAky{j@rxxdfd_<(JIyYQ#gZlU_#?N8
zc&V4)ov`~vpxxTXY_6W*S{E0cm}BDsH-TD^a|WBN!KJ(ll3oxGgM;kD)IvrIWdpW^
zXgb!KPj;eSXL%+!=!mhp1hk(Ru|>bQYGoy4Rvrz}^&U>mVGz@7N0)2*p7!n)x9%`n
z`1Y|r-QJfmVs&*D4_AHbm*NL*E5B-cz`pD(@{r0gM~CGn*N)GC8)z}h0o{^9_iknb
zMak~Df%*bjFI}`RDzdelf)eNff}VyvJ?J!Kh*3NDQ1DA*8hXvBipVuVy}v>}u$^Up
z3e2TE_!xa>QGxS`XQjSF@lSK@BpQnq==|gWYGVkqf*Xh|ikK;$Q>V`4Ixp~dC8ic$
zZBBb<Dz~B?%n~2HFh4&y`U8nTAg?OTa8xxBogAE;Bx(_fGK}S+N_OYuQGN7bQP|5*
zZIb95a4sNF4X_BuQY->2(FSCZ7EHBm{V$%E{_yz0gz4d`jE~@GEw3(>vnUY!0I_^5
z_QIu^XEXf07PGpz5!zn&Mf1g#B?k~3*e9-)`j~@4rE(nJ>UzDkX=X|p1?XWxAA|4t
zYh_LiUEOSepmiqiUN52FkM<ZCoE``W;&O_sSBk;Je`@EU4nBxgZ`D&Eg~y~MY?b!y
zOqm2$NFGr3p+z@>U6kFm2=SbQlGAWf7lN6Du&|!B>@h7i1DS@}s+i7a&kurahs!DN
zW{>^3&MTTTqK@OgmKQ2uv^m`h)NyXOncbXy;&d`Kii0TW+pb|kBVh5sKYXBQB`?`H
zueo#W{+U9wQ&0DcoPI!8lXtx}BJ^ax5(!Suf#aMT2?M7!L&e=z#d%dQM^PkR;IzK=
z@y>!-Fg|K|3y}nNNL0GbZ8WA_@qUw|kP$Z*x_M!sKa}Y*C)q5*$){@J0~7%v8jr5k
zj<$OYJQ7WN9R1;$V^z@n`l|&6ZqbZ^<%vSelNI7l^yF#M3pdvY!bbzLEC1~AZ$>$q
zcD>WBetMV<iO^<+l`2^UmpEtylw!NEi@1?ixNmxWZYi{9#4|J%LHR$_xfZ39DD;GB
zF3NQ}Bo@lvt1a&fMKe#|Z2>M!dU(ox`QhxyS<sCDRkhPH!{?OKn<GbZroZlh1qU;W
zpaf2BL*2`Z(;~DQsFqO#B}5p+T80n<@5+L?nHT$p$SEh|?SYg3TZZjm19pcBq*$b@
z&@z8}C0nsyB#k}dooYB^M~7OePbg2~vF0}lPgN)XZXuITKeB@(E(!dVv*h4hm9L$q
z#_XCIOTVIa;&hU-zt$FN#w$ld_+0bhu+H94B_{`fY6I2bE|>!8MBRePlcvdwWmOpT
zzXd6mld&=NTt&xfq}CA>%F+D@W`N8<-#%lNMjHi}@%BTKqv&N~F5fr1u9u`gH<Cri
zLhi5VZzyot%sO?#??Zy=GjyyK$lT4jMdP<HzqlwOQqU+N+vl-mA#Xpb=Uux3f2Leq
zV>Om5_5Kz<w=F-_q;Q+Si4&yM;JzZ8yB?h8pq5>-v}8TEFVUFOninWFRUJ=2(PKnK
z$jHhD<ezxCyN^YYV<L;euP%V)MEi`K=F2dpb6hTdRe^@V%E9LqK3ltIm+b2sDYH;q
zqdldyDp!_f+qBT&pZj9>$KI35-A(~*z4NojWo4r_u+PWblF<5YoW`h`rR=&8+`EU}
zMeWw*?#5ty19ei<Mir~aq@yl^tBZp_iHlB4!cSC7b+=$cCu3<)83df!I+I;qV(Ty6
zeTFpiKCr(or2JrSln1F+yQNcddqSfB^S`35$#f_Cy)?712y2@rzmGj}I3_=j)Jji2
z#+$RtYByhKO2_ce$<SrZaidj$kpB*ymOK3W|N8>7#eepc|9cAnIV$NW3Zd{nf!pJf
zE;C$Zt*z`}pA^;B)JPp44<a4JfCk$&XnGuB4bz6)(IDL8OC2K*h}yaiHiSZK*Jy2&
zWmN&%b@-$Ybl>pidp#+NOr(6br4-V^Osn<+>rUp4Ys|k9^l?C3>0l~*YH#eknu6)#
z0g+oWA6=^SDIaXyq#|7GN};PN%pg~X(>n;NhwXrA^KRT!$Ys(NV_yFN^9gJhoFxx^
z7*Aflh5iLuz-W~rdXB&s$t!%(PWtsN`=-RD9*?>+ii*EJ-RDM&7ReVW3!1_sdK-;a
z)SB(w-|0R7fdv$}L~c+rxQ*`vnxw{cgqfiQeTr`eA1K8dM5YMy^Aq0^q0kOafUiwE
z{Fz=IE{2E&AGpH?rS*2k2It8VJx$&2cce|M&Q8v{BOL_@TK;}#V+B^6xI`jO{nCbp
z>8Pj9yLpHA!w21Uq2)@=vZ#YqYl`s{MxO9c(Q7K69r4)B^GxlHt*xzo{`?$x8JrXS
zywzb@%16$nnivC%V5gp%9+;|2vG42aYcF(D^1h>&+JW)9<sBW;s@Wnu`2se9KqP~Y
z)+Mo*jt=--$7{JL)WyL(25qIKhQh?|=8l5R_{lv#bqynkDPgB3ViDeylb6?5(GSbn
zU%kDDN6@JhqW}L@D_d1r*&E-m34_<>d?(qAwEjUuQ1K1<yM|w^k?9V3hvT>ru^Ti(
zXIYmH<ryqDqh7yWo4-`VQmpVa->M^js!I57%nr_UOl54aUNo)WXJlyT4J^)_g<NZ}
zIUOEX8+Riw;hr?x#q;M6OZC-YL|D|Im%V7QnQA#iT)bRNw8i@STa_XdeNK*!j!2Gd
zh}ER!(T?lt`O-oCGw6<qzW(>>a1X1N_p%4C)R@5Gd3MU>)srCF*H%Oz(fseWDYBz%
z4;F~a1in~OQ*(~XuP%aJ%}Q`PjR7kH?AmETH<GgM&=k(n1h+%SZvr}j%XEoUV;M++
zFzKfnPk~?GBsf%>R07B6*|*&DQYZ_tWn)_tyY&^U9Y(s!xDI_8F89HsSE`5Md<jOM
z#+Sj!byu%l+s(ibGs|N<&|-Em9w59tG0#fAoui$Wl``*}u8Xl;UFF+tDvlwH_r4O1
zx*=6b={KyYHeC0p##MW(!t!upw`PufTRC8FTgfe#ukdu0^DE)9%XAsHhx?ZeCy7d#
z*P2;2z^Y#DAph5wr?2A-w@V6XqH7Q2&)dDyV1W8F$<kwf9CW!1UthaI*C+5aMOcP~
zi@N$arX4XFZiZ3vL13UTPhr3yx+-?Yl;<zz@zDVf{@@F%vp-hY&N;C-R&isJ<hLQ`
z*RN;jhT_%0cl;l>`y{(_O@tfiE5vuaQ6R(i_4h-@O-o0o_4d3w`4-ZgF?jQR@&xWq
za}Dw7ED{OfFHlpK`nFCo{2Xq^r!e8vOYsrN%?X0{6|^v4SeFPF0}a5RdRY?w=2_>r
zZ<mW7B&WRu3s5(;<JYj!VTaKd7J4MrzM==PPTaJq5S9?Jcea(vnRzOoUL7Y#N-bD&
zOZ7cXS{4x!7S{5ddy=1d=~ADaRZ`(k!d*<UPM$bn4mToHB(}#8pk<O_(K9_@!%{19
zsu!L_dCqQof%z;<iuf{|%#nLs8WEurb0h0kpR*HJq(0cvjX5@F+ao7nY@w(-J?C-3
z+`RUUO8RTLtx8e0jp<kV0nlFW$ghX;puIhr5U@yGUibQt+w^T)LHps|10Q1)UrD;<
zvd<s-2oBAa8daQ@JVx0sE8`9q?}J{8!;=l7R1uM8ZtK&9^pAI1Us$*9wD~A;#X`ls
zyi<2TWp!6Y*40T31BW+)<C0Db{OTsdlN!>6ei#?mnSByqm*wL-boMMaEV%}bT@R10
zU}BJdKEYcp-jEv2TFZJhB>%9-d%LCw-Vf<GZy&q4Q?oujGn2UN5=eY`Urxw)r|9I_
zlL7+78<NbLJtLi`M76ivc2MppwqO&O4{?=wqxf)+l%LS&veWx^u3lb?YWOZH{`KB_
zyz5`mdbHPWP@{YQ>sM!$%sJA4hGK-qc*@NkSln@&Yd?E<>|vs%EpId%m-KH+$G6Bx
zE-a(IjS^{7e8MisVmYOQN$hH>tV*>91Y<ADT)NZ)O9u#>Sw|~Q4&E!9WZ7OmBqAi#
zf<32lm--QIv954Mox_#4B9m|P5LNDCf4zHmQzsBk$bNp=Q3Ue6vbu(r^R~9p&NPo!
z<L~0{w|DQC>1x+fJK8``Z5OKUEoLpY+?eQ5&CastNQHk$ig<L}0XjO|wFw@~48~4=
zrdxpGgWt%%w|%qOLR(VFIgw*rTwFZL?q>#hPhQ&pMR6T}3{1FLC28b8dk1>ZQmH7f
z<|J__Jo<~uFCODS<<muq&$?b$*6s5Uqlr&DgTz`!h83+#8lK98g4>VsFC#Rjw=waj
zwDEQIBAGb#gBz&2j4^KumAkWEVP=dg>YxJGp?7^z_NJzeXU-%&`OB1XG33#SM^i<+
z;=0dkU}(*R!-Ij`f0^uV!Jr<psc*`*vM6v~)JOEhyIo^1cw6H642wPD$?9vIpRePu
z(^JlxUytq$>d4y(C+SHM5?N1^Z(HQ0$S58z5sUTc+$}dImzZcbWH`-^k?)5*dCG6U
zvR)x*p7@w?nY8U5jUSn1$35y_YMXEcis0J~#5JqcE?rCZD1Di7E6$JFpZu#|V&(aT
zJEX(r7{OQGg`iS?kp1$C<||%S&4XvyLgus8UmwO4fHDBirwydB^QF1HD^$Nb#IpMW
z+BpK{!Kp~Cvd&*qVLQVXXgYY5=C2Q8KZcgX0R&yTBsqSR)o7Ke>@Qj)zoVy*`Z?v#
z+HIv8^WC^r*Js}eNyMn#H;001qCawT(Arl(&a9ggih)<=I?uczxmQOP?cTHJjcN2m
zPwe9SJeN7`o;|#larxmT+~dQ|Qz&cWi=|dif#T>@zI2~&n`hF!ns1a<3cMQS^P}CI
zu05qAXkEEOOW$3JH8OfJ)k|hA1|m~}&?SNt=w*w`Hk+~iShbvIxUSZ}3GXWp(x?kE
z9X^{inwz~_vqNi4?XV9}ZXX{2&04sxJ$-C{eCmVzbq|*|k`uP(O3zOZq@&-Ga+-ww
zTpOIOtALYOIg`0i5#exoRT<M+gS#A!of(RaB!jyst595b;hF;M0S!R9&&-_136Isu
z3&n+jKX7(Ncfj7J0A+QiWz%cvb?oLKG!CMUkAVf=V@l8P<q29v6TdI`v50h;ZM9Z{
z+c1yTrVSe)t2e&m8xY`D|7JV5pzKrC&okgZO7vKBYp5BM^JNTT5=sh~WK#|kLd@}v
zy6DL08c{n7mgd+eN!}S5F|k(!8G?;%muA~l!&~Bf)2R9N-d*GccB;4YN&(6tNEYET
z4O}*6h<Rcbqc})GztpEE499g8<cW%iz>%`=XO-BVJ<UMJc+|kTV?GJ9gm}Hwl<MjQ
zhtXxcfs?q_K=Z@AIA*w4*l=BAbNXI0uQE^5Pd9rWRCo@*z^P1D1@fyIC2!YAhQ#@1
zZ<+VYmtCOl2wQ$r4~{WCFp!xt>3rb$c|URdagwFD%}<|}UwwTsmaa2{K`nTEBOB76
zLP(?cK+;Xrssm3cMm!4h{j+c}1w!P$GBfT?$8MZ+OHSAV_A-M!gO>&y%rWnx8n<U*
z59A%;(olb`=jfQ-l5N!<41CDvfS59Eng3CCJGzSgvjiX~dF+aJNr5cyrU&X*P%<vB
z%$<lAC0;_3-ql}HkzP11STAu*1U;2|?CxOCJC6D)LHi~wW6VJLI1>)yWalec?)VMQ
zpFP8ymc8Yl<hdbpr{pgV8_)_sgR02ix;G{8D*HzOQOmF8xLKtWF4aU9v5>WH)kb<8
zoSt+hePVkEb}w<j?CZ-K77}Yytm>H;igu?c#~zQ-b#eP)+m*!(%It|e^{X~}6=`2E
zt1bmt;y$ATk#6LN4|?S5*2tSM^<zQ2UjN3eKc#MTJyaG#BBl3pX!_FLy*nsAZ-W>;
z>!JfZ1JhW8BpHy3d&UZvh(}&57j|6TXbT(%Xe!-;oKlv><7kC;RhQ-OXAOZLv6-tg
zZr-unJ3F%Ewc~(ZTA=NYRLvksyTSLP@%KdO0`AF`p{7Q38K8w82%@Rw$->(y26ib^
zELU6saikViPtMMwI5mirEEpLcX4#L*L`nE|y3I#5$puBX_m)k%lzyb+&hAte5k+ru
zU7ZYx9HXSyXpd-0Z1MOV1hXW}uPmb8SB7OJX~%a1Vj_Hf8pyyTn9%d<Y9zZ_it~&(
zD-~PT83G@;f0`iyth&jAaAsH;|8XhQ#P~HpMC~aqZ4T}kUh*|?g-AQ?rZ5!Wxnl?F
z*g~-3kOv%N3*SJg&-4^#5O<^8-Vhm_KBU$SL8iyj9Vc%~-Ivs211l&JWIhK6VZl4Z
z*SuP#I+}4Tq6V)`#l1h0uUWsq(5}DC-#AlSSLahYjCg~)*e%UwcWN1|9g(Bixo_Ni
z!{$(BcOsi>6#duax3;WHS|hsGp?8;UH&5H*#K3X$<7$3VP=VV)1HWY%yHu~FBjGz4
zj+x|tZ%k|g%o&Ws5_3Y-gxR^lP>rsQ1cK`cRyJx^)OuPdrs}2Aa%=}kn&*?W$wv|I
z=Pjmos}w#>K*6^$3GrBWh)=%Pjwd0wIoD(DbnWXk*L6qvUXoaqC|qA@XTNgN?v+gI
zHQ5JaogUzK9Ho}yhn}k*$wi8N#7AD5H%X2!OAhRImUc(73inMZ+C&s+F+2LpgHGOO
zB}$_=yHfISVi4+EkQURf)_wwQy#4Kku!invAKfggDi*bf$%%;|&4^L{4Ng-(zZnaB
zZfVgx@HQ<CP!rLLt|P7{kbK8>y~V-$PHNf$Ncsa>P1xBtdtb>tuUp{U2dAf}2gKxP
zydkp>(vK@T%$bD*N^pb4N++g6!k*JB-d<JJN_>eb*WW95%1r0_wQGSqtl{flvGn1&
z5ih(Y1e5}y3ve`!R@7LLMi+Ji>>)^-T3W@xfl{Z9ayO)ey#$8A6ip0ql^Z13g?ljZ
zXLU_5SNG=AaG$PKSo0|TfI>Q<7~{yHH<aeIuB$CaNpoLd_p@!VCNp1Km7S#4jUZke
zXi80Woremd2s3OxGj7%t8olbO<Z18|9&B5X;Zj;$F|Dy;r%NopeS2-&J_d%tC#M?^
zh&`9cOAZL=@neo;*QZ0HH0dWA6n$!;tNp$C-4e^hqTQ^c=@W??`j-ZjZqe0!jb#y@
zIj*si?08*Ia}?!2!OBHeMrJ0GcyOpC!?-oGD&{LJSkg{hdNA-5hLe2phj8Gk^LL<;
zlRtANzm_K7znk^Zw>T363m@XQz-liaqA8zl(yxK~n+m=VHI_Cv8-#q)LDHiiV-g&<
z&nSfI%S5eyhX4!2U4ZWTgZHR;-#lycfi558lRQya%6~&Da>XS`M{^liPk<Vw@Ag8f
zNmyz1A6S5gDrMW(4Gw5^;#%M<{H2u|5i5>6P#b9(xOU<2fb&GZTqQG8=<}nTU)Ave
z#OG%=ax(Lt&1Cy1!G+4ecD$<=O=IZXSkcpX-`QEGgA$V@ANF->xjIY-4vh5dEPO1+
zgQFImM~sKTw>BpwGkXT^)2ha=V`AjgzpgzNP*t6!y~TU3@J)$MaRhD><KVE~H>_FI
zqM%g{dOt}W(aMxzG*ckZYOyOld91|TT)CI;FH`;52T8KGTEotl!cQ<##OCy5M55)1
zW<AaHjJIWMkF^}qhWBjV?83l3AiACVrJB7tm|Qdx*})uKMUr+okbNN~;4LX8dQC^Z
zy`4Kre}W>2Wbw|x-1}p4I%ZBUOGe_45{={pyWwyRnonK$6%IO#&A%5HyMfzu%uqnB
z$_M+W(fA$PIZ5{TEtszmJxZYqahaZ%J|H9{gj$u#^S!9e&(|!{D|rPW+<J>&U-d*p
zGy-s6s8=fjlZtpV$)<nJVc^lvDyHfeIp_PU3-FD<34V*$>LJrbQhZVw7+}G7b8Ypg
zIY?^?BQ1jNt4=A}DHcsBDXQidFV@AXIdC?|@4X5SCem(}n9(Cr@=qgpKGRYk8@x||
z1K?ru)a*!Jq}w;8a6R1&>&~6JN%~npshwI<jJK{>dJP7onb3qCMu-BA3r6ZJAV6w4
zHPF|?nBQ!9J|4fK|H{$7^#~8rZC0IUEL0*Tl`?A^GeFSE0STVe*0F*9Q(cU)nGyx#
zey2ssF?5?5=iu8q^8KA%)pH#@GG>C>t>-05tWJa!&(#gIr&xQ?W;*@)x=NTmT;aUh
zb}krF3$AduX%NVo+ce`M3;*_5+Y99$gahGTUSG=mJA=R-#svw^3Vaz_%7cn9IM7p7
zRRuGLLi$&Rc}tt#7C3hrpMLK!wzC~poXxBoa6s}MA8*8v>w9Z|fydg%54X>u-sHH?
zKp7}p`T`58r5q?~CYp9If;R;#7x;6;mYg$#QR6%7PDvWShaeBT7RBUmTo5I$mX`@@
zqBFH_ruTgRN0G-bEFAJw%REnm-P*LP-MOaYGepUZ&z%L#xd`#aWo7D;R5i~gTIVN@
zHpn+0@xJ2i@bKOdZ;!>ME`&w}Hn4m?u|kg4NF#JR(J2Q%P*G3Kd42YF;8I|+VxRA>
zn6nG}BIkE_d1nc)i{DS&_pPYv?(p`R43;6zORPe%KiPJXlRcmK1m%a^0)gQ|8h^P*
zH>G_YILC}48?U|rV4|_HQrX_Ui&53#kHs!R%e1b#x|+Bw64L1|Hi^AW8k%NLfA`L+
zE_wp;7p;?*KsJam%)VMnt5(AZemM$HXz`Pgk!sZe-v-=uiN%=N69dc6IPBPnZfWUE
z+83sn)2yq3i6y>dxtApaN_Wn64~Jy4lAQtqC)rrG=yA@4mJ7r!+nlIj`SjhgNn|2n
z@KF|R0E;e%b=F^^oUx}fyw-TOze(Mea{@LKqqJLQv_grDeOa0ahMS2$qrk}m8lsLv
zchZyCD^*Z6C~aTKI0-ow*sbiiP+E%CJjH{YyA%%11igNpl8C*H`&t_Sk}VdEB|aoo
znKH|QfVrmHx>cJ2`?6nR>^g>=yNZPJ){E}vr^(-Z%5-<xpyS^4=6>-z8Qk=uiAs!=
z3&pcRslQbf|3XETM)M!|(4J_Z+*g-b`?j-+=mB;8`YI}j@~{h2$EHe(=dE}B#+^&r
z>#flWl`|1rjeu2(*<p86{xn}|ZxH3&6&RfzamjO7>+73|273T1EpkM=DkBC!sME>d
z-`(mXVq#PF;RB_|!O5SQo-X3P?4yk2Tm=l4yy>o#l|;#_po_2sstEa7-jy0j)T6*<
zK*z6ZY2gyI8Az=JYbMKj?dVydDY%V0I+nEiBX`?*>Ss8#`+`D3Xmw0beBpoHXNNaB
z!M>rsx>{ElcGX$vq0m(_p9O2J+J3}vH%HfQMn+M$#r<kE3E&|NLH>#Zd84&24Kse9
zamn#Hk9W2MgJ31WkKz6KkIT>s`j;w&q>QvW#3_YjM!L5Q{gCA&JJ#)^r*~Uftb(D(
zwu8$~@Hd3%9P0(;2P!HmMJx7i?-2$D=Q^9368jfW@1q2PQyb}d&a@ulihoY_S+3vg
zURUV$7!3}NaYe?g>#cPA_a8~O9r|{f^aC*Iv9m%DGM{<8#}`ufsMWWXg;#6Gs;f7e
zZv1EOaOT>zHlf9Zf_?nGHqFu-2X6mnxaaQ#pJrgtu%RkB5OiQPPD|4RyuO+@EWf{1
z1;-07`C9#(=FpRS8@y51w6(WKw?T)j!u3c~NMOk;zF{SLA9UuNK-0hm1X^5ZKk{Jr
zoQYV-YB^}2LYCj8X`>n@5_G2gZgBXf*~ZT_f7e$!_D(Z~rj8><CbYS&trBRD$NWJ3
zm9!Fcl=_B-+W#!1Gy4Cnyk*n%JNTVKXaBJD;ma4ja)-gUB`3+ZEH1&Wy|Fak$wuk^
zF-R#MG`{=P(!vjxzJ^{6UdheLUW1wVh9S(497l{6S-5{zhRVW>U91Vk{@puwKF@Wk
zX)(clg_Vv?IB&xzb~RTpxKqRC(Pn}rlV(gSNgsXa&tOBc%)eOG_c~X6ErF{dqMi5n
zarNue+g#1e%{gbXn(Tv6K9!UqXyuo%v(o}cJe$%^To#6}w{70Aq1-}W-}I!Q-~kEe
zxZTIkiRC4E{;9Nvgdg0y$E9eEU5Vc<e<ubQA`YXZ1}d|8ymYA*0liIdJ#p^(@OL~7
zF=(ttYG-+U@8ysWd;b3W)j>usW8>@_2EHMH^Wmv{-Qp*)>%;A0+O4dgVd<Wr=r5z$
z7GPy&7C2Ap0gWGenxn;#CY(OaJjj!KK|x{ZPhHPFAp#0;U#iJQ&N3=(%0~8_I}I2a
zp%2S_Aq$r;v%y0MIsm^?Ec5wANqFEr2M07DKo)^R0b$0Uo_Q%O0BC^)K&~md+n1?n
zX{KpGQx)6<>!uVruKv0VC5GeJjPEXa_&j<98~lr*{H!tWltS#4g24(L{qpSD_rEs2
zpxON}@3?XdksjoB8{h~vl0z|4ZLw-|LEKFh!)bp(&j?A@Ynf+%Z)5q&{qGUfY0?-*
zSQMd4M;bSkdC#BW;2|-T_qebFg}*Q{IA%HSjTLKVMm`Fb>Ee=>J@VIWEvgFxsNSsQ
z`K7Q-7R>4eoaYT6AK!BHXz_-<p8oO+q36wz2aO#{yHjaPAZLutM(2)I-zeGpzb9lK
zisF734e!WDImU-doOY}?miy`ZvyQ-jhpjnI$&>oQF`hKeGQ}6Ne{>}Ok0y2hS%wm%
zaT|=6yhTvQ(<b-e1atbGf*#3!70~~y_b}4ZccS~lYgcr74jP5H+h8J=6!r^+5|22B
zUJY3Fz%hi|`W4v6XzqqP*OXRDK^O<!p0EV}k04>@f%kSpLY!(^Q4jht=%!HHsT?~|
zQjUxj?Oa$|N-VZ8vj*dBP>YFa2r>jNYYrGVcr3qb`qCd?;AWCxHr62(b45%{jB*K4
z`RNWAF)xqiX+W3^*iClkrbNW3IfwwJfAwu|M1)yG11NMlxxp}e*G@HQ2NSP}cHh2J
zSHJp!yB@?hCJ6&8W@hGG4X7<ZPImS`^10M^Nm58iw~4nH^0@%#^SA%1hN2Ipj(fKp
z{DxqYviRi5f`m91Xs*hXOUH9gQFQaCbM6av6Wwy_*71>C%Q!-%on+bAO5sllam#%$
z2hy+LbT_Yk?PO{i*h0&|&|Kj16l#arUlXU1iw?a?Q=;A&qRtsui_dvTR5mv|K~lo5
zy1z5WCM2a5fRIY)<Rx^3rB4sJ^jEh-bp7D|{UJU*3lbcjYd~v&DWYZLB)A6aa9dOA
zWU4MV|5Yy^BxJm~piKh;KMJv<PHL0-Xfn|Savy^*;)T%lT+xqUjP3yO1A07cjPiP!
z`!sIL6YOXpQ}t`zs$X=rwY8zb<$a8_FeM6$*??t<JPg|Q;$+3@<a?+Az{F|KynYt0
zvvw5)H+yoU%O%~Mp_`2Zhm9m;Y;64JJ)es{d;j>6BbpL=$GNytZV0>1Z{duOkFqTu
z<Oo$h))`|Gz@`FWB^U#o#YJnYE;tf^$we_i@Zbd01gj`c4U?c<osPP}(6uz;EKfY$
zfPGoq6DjT3S8iqyidE-2At&Wj`9eg?Tgh{6?5}9Ne{N{<DG5VJ00uYzwcO*-XU`~-
zS*r0uC@r(mIY&rH1>Oc#q^!o%Q@WiwJQp(39(h6`o>|r;8-_6W7j_#kgn$VoVmW*}
z#I%3EDgL>(td>#V)@J06WA@BvoWPAL<`x#SV>}-xPv%8Xis77~#xdRQP6$;>pBz90
z_gtf%Y(=o0%g8Zq%11c7m5?PX4^Ga(UE`my0r8Kxo!zllOfgI;`X{Wkr9F!#f9Bec
zP@HNQPP*fO0=g5w8i#g5X&lgrD+pqf)4)k4eEV4B!IPMVQShLt=5cWhxI~A4{$!K;
zjLoUEpav_u1{6Qyi|xcn#OtgLr>pf%bbVa!;INZZ6||De!nu?W<f+UZH7Yyb7qZe=
zKSjGOHuN4Dc8SN%6~0Cv)0`GM^fW;u${Fe&(0dV1a~m3J#LJ~3at`$|OB5ayw=W&r
z@(o;s%(4%hU0f2=zqho2etog>*-d<4QUg}T99*-J_2c87g%_Hn88e8&8Oqgc>&{io
zYmjsjZDCB=TZg$7`yZDBhyze0l=F_CxJFei4FAC<MEJp8nDum?uWuD#L#dVNDf<yo
z#r9NGc-SUY!N<aU76%iVO-wov2%y2o!8JA7GE;M39{O#V_^n8;&IdrhPuK~U9Nn$Y
zL}}S#UZ1*L`5kB?XMx+aMknyj6w2fHu=MHhks~q$DJVQ7Z*;xvT?`bMhtQa%iId?d
z2M1<L&=4LuotLDhsHjL1ezbLW$v?1ww5Ly=xGy#|ef(%bG9|gm%gKQc*?=<?_}|B+
z&rMA=WU`6VR%rYuX=xzY+_J^FB84j2_n!*M<sj8jKBscWqwB}^j9omuopLt>RMX2)
zyD)^znN%R7nrvV1NO(e$z#;pRr3N8gWHRB;nWQQo{^w#S>;0c{HU9Gr@ZY>Z{+nMu
z)4A~z+}2xLE=#%2zon2(sLD3@1g(`rXR_mfXj_uOV@z2ap_39!$I#(ZMFsaw7uXX(
z+Zbi)gVG)j1tvxA$q1o9{JF-e4ak022xGX^ORpcLd^?T-rY)?)jY$k4(=1B^SxP!L
zx=YB50Wth^aQT~pK_RQvA%4>`{DdH%6OQA4kmo{iQvt&3LMkE}PY4NRx-HrByDm<L
z;ygzCj9}1jl&Xr#^x5>bd!$V<oAw=AV;eXUSt4al*tMo<z>LB+<N0xl)&=LtA@^rr
z;i2RNg+rq0GhC61w7~o$CJzA}x_RxI591c>g&S+D?Qrn_eKh#_*G=u0;oL^tv2Bav
ziHjxU@E78k=-*Cc43wXFrTT`+@tBfQ#hnQ_2n1#ym9t4y0}|~#JKUHx_5~h8eA;DZ
zNO2(=`L$xDuXk}_*K4XvGs@T;pGnU*%EdkP!>a)HVc3np!CMF8K*Rx^lEA1G%(GG@
z-1)%Eiz1L_o1LA7EF*jya71agJor2DRD6!P3V(a|6}vZ9U_fJk1zS!1v~ygZpMdLE
zd58l@l^*e$X61o5!CbG0_z;{<j!P6C>2!RmXb4XM`WN^UajAb;h<Yly0~J&$4tKJN
z=&jy3icg>{MNF<4(}GRjU;w`iits5k2A+j3vvA-Vq1nD2l7P3@0^d8px(+0g-?adV
z#Jo4i-;`r#hBn6!_2kWipDu7!+~u5_n+w^H4GI|yC@5imcoaj3kE?zmf(s7J+$#p7
z@H8+>LmCZSUvU+pR6sPB6|mOP+8)`A&7rFRHV`a11UVBvboH|dEwJ$*&tr{34Z*e^
zC)pH60Zl2zxX&MKU&?h|n1nOs9N?(9^rd<6P)Rp=ef_v=FMWMg)YZR&gx_Bo3K0Z_
z7YmD&?s_#TBrV3<LI&>r_t8R)?x^R}_Di$jxG=!Uw}+tVoW}u&Ya=1&R&Df?c-|}e
zzs8g*t=ixJZ=!2?P+7>au$<hBhg`qPZhypitqF=-;J$*uc;WM*WCnQZDXe*54?)~y
zq79)GnKszApDuwDN-8LGaV4g`ee3rFhc4=f+&sPGaFS|Fz@3?hruhhg5T16kN1oQN
zfefh+e9+HdzU+?YrY5x#4Op+vB-KO$Y;F)>u3YIy`ImLI7U_Gub&?l8?Zm2Y%NkRI
zGr@fGQ8u-Rx}vqcn66K16K{jgTbHb+tXz4Ix(A>=3=|9SC<!&V;sa-K3nLnp=v@=a
zPswC79LKcinV~|^XM*ArUtf*ATpu-?`kzXv+S%Cw+Pu#*ad&4f&}rF6uNxDRm8|lj
zry!rI;DNaq|MBB6CQtD8j{kj}5Xf<@s&O+P5c<Q-@aBv+tp($5G{1PK`pD%BIk)3l
zTQ=0`A<;+M1JRvnZ59_7hb$OuFK|;W+jD0y^ttve>HZlWvIc1r9bb1_&J^rEv?-(o
z`*Vtl<9J<-vGiQpipSj$yVn~FUF2x&4SQaW8Ckn*>D$ZLVEf_D0PkclZW4+}-h@x$
z9;+7%ob4KyIa~E(RYy>T#=JG=2j%oi=$l)838ZT)%gfo?oOpkpy{6iS8>IBLgGT3|
zl@a*59r}hOqZ}Ie@&cO*I-?z}`1cBDqcm&u)i;(eq&%>!D@KN|dBEFGIO`THH<a=p
z!t)XmdONkMs&sOVpPyd|w_o;J2`nCYMMhe!6);b6cK!yF#6r^RvQvNm{JC~^UHl1D
zHbiyh3we^uZ~I@#Zbs#c?tomMKKu36xj*Mr;5O=egM!8l^;_(i)gy?K+I*r3(OEco
zQCY2ge|Hp<a5-9y8#l%+ujF{F74GgtiFb2lQD^Vo5D^=9C2<wB8mUG(2}+)@TccRl
zVN^|G!=%&$04B~RI4CxPr+xCI&B{B?Zl&V|p`oFPi9@iXwmp{i7Y5^k0?Gqf@FGh`
zWPJ5=K@6j(Q0*DzJ9;}0PzbbCiig9;WaD<k?R~1zZOzAQCu82kM_*W5FrY=oL>_@O
zs6RH+?Di9V^|Z#4H+cb)T39jRM{j4E&CtuIRDTgkD3h^TDXvSKxBc=!pyN4@@aA|e
z1)C{>j!1P0yK%T)ph6VA(ba{oM9NNs2Bhak@UCeP0bMgjN(oa03`mH7+2eQy40MDJ
z0JPYBImLu)4RPMPY4Nx?bD(h_A_WA9Gwz{$@Va!FxQ>&^-?^~pq(*a>MBS(%IuN!=
z4%W%Qyj$Vts@Fs^F?kC2S<MKOTRo{otDplN!YV{s$#p13*i@cBbL2P2bl1Nm0UZ@k
z-nSTUK<lGMG}M8|713VS%N=v06Xal$kX;lM>xd9+izZOcZH_gMJozWfx(Tkh3=IpM
ztL7(q8n)K3eEIO<d`Er`)VdK78I}#>(>P>lua?uxQ9kl>GuYEEq{e-D{Kmye9oGB(
z2*!i~cl-;JL36c;d3eV5WXQpcS!zJnp}M1W3pF+MmMyk7-l~an9Y6ltdzJ2QH#fJb
zUZ=Yi#frNF_di=Sex*`a=#IHY`B}dZbqc*vUte1K>skAahp*@7yI#AV3~P!$HQRFb
zTkKxK{Nq*=yqoH}D9|l~W2^Uux;e>v1c2R5Oe%a!suDg^8Ml5`#z)gVM)8D6GQlcE
zn0Qx4Gv)U=!MQlLgAE&1AMAM_B`|)l`Gh|;n^FGd|I*FjzgY$S7r(q*pR9<sFE~=r
zqCuVVIjKUGH|cI+S9y-QX{%G2=bw7Yl>hiHXm-s@9wLqHTEMyt?Pr%ICDqUjc;HZn
z=Bn@5{L+#V;K&9&N)<^}rPMDgZ}<5Fx_Tu>Jd$U$9%a8^#?{O0iv^+1q(wMl1kyI^
z_5?L!BO~nUAA^QR?i)}{+=jnT++JU#9clIbt;R)D>}6B1QBIOnl>#{^5skmE?Dxkc
zxKTH;S`h{Vyl6w#Cnk<SH(4)OXr6K7gXe8%HCu9Q5L@H0wrqnC1#`^mFI~K-`3xc_
zY&E-#5=g`O4Bsmrzz?}SE&Cf{reba1$q;mrk`LM7btWyfaMAD}|4U2l#QX7M>K4wU
zqoX*NDlpCSQuvHQu{wMS&b!e*Br7mpbfX?z`DeRdDB!*{qDX$hub!mujj12Jn-wSf
zp$K}s*MXutfjbzCwe4Xa9r_ZKmq@o+WR6)PQ)+b3&~WX{7m6ptuZdUbHb0=5h7q~U
zPvZ=WjQ3vu)QIyZfXajY@VgWBGmE)$IFQu!!;#p=9OZ>zCj?qv$D0$^=~jBkud64b
z?2AKX1XshSdx!Atc+?K;A7<VEJS>cJ;&UmdmOIi-o9ChIZu8GQ*ZTJDIC^<x9;lZ-
zVK|xVzT$k&y;*JK%JeS{@K}Rb1`zVf!0@W%kdHISCDixOYTLk^tpmkYN=a;?YIrVY
zK<|NhXlew0<w%DuN?9C!bwCCdWqu#gGhwnt>?}M)xtXZ&+51KAX|6DxxHu1YCx_v<
zcV-otIBOJ7tF@p4<W{2;I3|~W`i{y>p!)?DL2;ZVyW@0R?z+2kadrf+^+>ZCjVJ9C
zTqBE=;Z@fMZI)GQX0oi;EF6{nH<H!XuU{`LENozeQdvBR+`#qv2}=P+*o6Gywj3=?
zWLY<$$y|oZG=|a(D|0~zuMIMX^DM=rd~h27(caE(q&+WW+6bo}n5Dm$U|Q02(asAr
zv0L8!cyJHX89FxC-_<J}x@<r&e`Dby7&6E-9j0Xf7upbQCH!vnhJ|9T)?;6^93T<<
zJ+0AVfC%IcCPsLUjpi66CWk>7U%h_QHr&t_7_m{hVsowEof!|e1QsYq+&3z-Y@NhC
zq_$`wj-3pCvBc#@vpV~&G_X_B41p<c1!i<G`agt%b^DGT!L!58i*sZBKXqq)a|QVq
zJAW$GsvYoq5x<6jJZa%7uS2uqw!dCtQKJfRa{l&BXUCuZnb;}qc*eqW(3sT%dERbI
zx_d*8z?0r7p+s*>=daiNz(u$;UiShNu{(xA*5pZXaiatqQnRT2wY8PGo<=Y2zX49X
z3e#MBa^Ko^?h_v9=aLdiGvMYt-qo3_@jrxxd?w<ZFuQ;xb;G7j6zT<)pJ2?G$i2oG
zs_#k7Qt`@zw*jeXbaQ*<$}^-GoXpt#<R?b!DE2Rv`uO_zP(1g52_u`X>(?)RSmDA4
z#M=XZ22Q^knUsRj2NEAzpc627_u2)jd9x05U=?>vFFIj`KL8>X#B0nYxOHYai8CEA
zP!Uilg)?Wcid3$LXg9}c1i%lz3O@0{?kkISoJxiU27lHsKBbPlB`z!?ZNQfj@3pqF
z)5oY2d~@>}V*!bUp%@l*o`#ewY}*0RBovO|Z260`Md8Ei;f#7JwOUe@yo_=_RymZ%
zT)l;fU}agCeXdAm>aFHKuz*z(OP@Jx$D>oe|G8SDFMGq>2OXc^d%Tq$-Y<(*gcPoa
z-08)r0e(K>5|&MIKL*Ce;HXPur$Tv{hq?Lv?nRkWWpHI*`XWTQt0{!G@KyeOpoWMw
z*t~f&$gU+(5t1`@H{Ldd&%~ll62zcFaHU`7<?Y+IAw#BqLr|5L_AHUHGZ<VssheuT
z%B*#OTSNWU%kc2<J3Q6@KqNGUgZ0k;Pj6UjcdoTE_78vH?)B#5uq_RrE-H^BChtj5
zc$8pPoW<N4D&?`-D=#7{%3@W6r?(0ymx<NRB;WDJ=qR%p8A1zjkI}iI)RW0cN%%Df
z*}z@%`h7teoRi-ubHa80_{_m+^X%3Vu|QODF-m(uP<&<Cv=f~;rqBq}X5T3Ld-Hbi
zG3?tCl(c7~9oF{3mqU4faK_Y|D!*Hv|E1;9fAN<6hhx)!@ypBg7t|<ah5NTS4cXt<
ztLY8~KoXmAT^gv|CAuDNdv_`9&rQ97f7Y)SKKx~B)VFaZhTMKGSg+3vx@Qi$OUOyJ
zp0QyV^~PzU`#veu(ZvPfF~7g1XC?dk^*^Es0YUQuj`QRG04fNSTIQKROUq@wj;|l@
zZl-7{V~CAd!>qzp*sf;J(YJDidSA1K%>VauD|1Dia8T4%|Jb&{*wYNUs}eECXP{f8
zIHDqv2{-@m&Fwkucl);bS_7!RP{*nVyqbIfi!i8lzF`K5(Kp+cdl2*BfRBJ13Ooxv
zRu%;_PQcIwfqdAjjViM}Pqipu1E`}wuFwhCILwuWHNApyY3{9VKnd{tq;Mk8A;RDX
zBGAaMU)9^;Cr~p!oiy_6*|}0IDvj%bDTv4Wk5{+VBI<BR%nD#u+EePr7w~7FbDEt$
z++eJwE#aj;`HFXYVQrs0oCoN4??$RnF|2oxfdR%@y+xjBCN%yB#q5)C0|IEKusK_-
zE?m$^G0H*p@TH_A?pV=UVR>UC#f%4~JrmkGobr2kp6P*rMeUARaWHkX2RRrdHPj}j
zL3Y6~82BQnxL$|Yo*Y_pLyP_IJX56fx+@~I-YkDdqzhs+5YGVz{mcs&eh^(xOu<!N
zL`+OcZo0&~2LLM06dVRx<#CBVs?T>j+|+2-F=aVGmh~>GtPI;j&3cg@(-1}fBPhJH
zGBYvg_w`bcV_o%Yz|aQQkqktSLHWWLON0k`;0{4a%mV6xRbdZ2)!V<*ok=*sI4_g5
z4S$`b7$A;6%?~W2m@BNS&jrvb#LT)PsSGBg<<cOb25!a;dD7`tn|}(<;&7zEoj?CF
zC};+_52XMCiX2n$A0`Abe+~TnnF)((jN9Qhr1(SQ_pPYRDf`ze=aiSu9bG?8DKyx7
z-ypi4Qg+jW7~Jnj>*hnY9;itpa`W=ww`*D#eF#<$ECUSt_9<Rh4^IQ&k(&eS+DQ0h
zpr#`n#x<QD6r_`W`Q|H)Ns1yAZxzFQyV+q8bMzWttNP&Ke*mE2ci3QVLxQ%!or}oy
zZM0WV@H*u2;>dd3N#2hhk*+%Tl&+;5<|+mO6Zh~6#i|;?IvGU5vs@Az<vo~k4S1Br
zxibb{;G`z*2;8&4xv^NdVCN4w2=(?ui4Sav_bH->6lq)Y=G5>OG|0w4K?Va!)3!DQ
zqri(@807$Eh|&I@YnO=TJceRI9<P&FjdOB%<N$(n_&=uE8WXCuH{ZE?w=Y&SRWd{3
z_hf+(;q&N<#bS{lv_cgAH`WBPpXS0HfjB1JI#{1)Czf4n&6L}2{^Q5r(3XeP8KLVe
zhlwq{2<Nm8+@R#c0Zn<7Vpxq^7rS#i{L2;=`WY;GK%G3Bc@1ZcCPVOS6EB7Eoz@1I
zg?M%epaF^kK?gAtiY~bHWfljtc5L8Zml2U;`V#05e?bdJBEFBv?*p1Y2EZs96V*<E
zc~tD+AMIomD66m6YWj{mcPto;t}&OBu<ppmGlHf17*<6?>%qb7ygVhLC3r6a8K^fd
zF0HNoQ61ijM&+rG&+^YO|5W33OiW>T?<(P<#-f~BZz{3ifMn{!6L<6GC7c+DTjg~a
zg?D={m~|H+?m^=V=d)4GQ0SnkF`)RGeKV@BLJtFq*5>9v=fgsDKWguthx~s9nV739
zjz9MGz22T1<9-R{*q;Cu5;g_2cx4-4X}kox40+#0-jBnYEC7Yg5wdCL<q1~GEGi%?
zt3GTg&KzF)#Fv%fOJQg7VDtqGt{I@4IP*v^I7cYVA9Mg;4tX3YsDia*c_0}WGF*Bd
zOb<4qViv*k@tCd5!uj$CWhQPy!%Y<Rr?~*N4+~v_!!ySUfoIMXb|P+2=K~=P<CBxH
z7r4@Wa=q3rdiuVhAxm&q&U0e*QVdf+s)vZ^r0Ib~8MpoNt$+5@V@G=hcl{Q{P6r#W
zQ)K$5^5^K$s0|*Ew7maAKRw`77I)_KOfW63C6_3%?S-tI08*ww94lwy7ZL(RNV$!-
zhzc92WaQ1npZlbwZs9fmnt{%5<HPaby0uI?%6j$W`NI&QV*D@OsQ=9i`CniDuP2XX
z_<v8^{QtFi*}t~Tzg`@U(EoEm{=XJ2_V+)XcK_epGESj`NB)5Y{Oi>H|NW`UPjNE#
zoVx?6#$R13zsbqt5pT0<lBpQGdZv^K?0@){|C`?QOSwPM!9=z_^z`%x4kVkhT>3Wv
zgmxB*g)*k5y-%f{1jPb@M7Vr`;{*}RNtF7W$58doeY~q+n&!IjBG<v%+T1)oe=D%i
zb9wftZfBsy8Oj1AjmGu|rtP%U@Pz_z_&ZoF6+>hwOuqOm7!ss@lQyaHt$|d8Vcd-I
z+oCNdp-z*%<&jd6i`t}D;tzI=NI6e8Vd8`yHe`|)6G*3~lp?s$ggORBm%I>3hv?C^
zAuiR`EfOx5M&x~en4p!s;>4Wc>+@f0KJe*#Khmfx{jN?nkKbL!aJJ<{DNm2h2Qj1m
zuCDW(R0vc8lsaO8dKga3`(eKnD+!g3HuR)P$;qbKc0+HNnO~LX!Ijye>w_8+%AdV7
z9t;NM$^ZE)jeKxRmlygwAr=YTCViN~M(5AqR@=6-lb>VYr8e*GfL76OC5nWwva5Z~
z+;_!lwuS5$OwbU>43st0GUUo{wd;VX$8$mM)|QrEhAi6$)yAQ&h3OVKz{8*8*H2v{
z|Eoz}7zT@xA@N&JotXAO<d$hjEE-tI`zOXY`c_vIkTF3N{ozNU=N+CBy;(E<P3!Ix
z`b!pjeC^*WxuntZr%oSUQM9g$olY|KamcF%Ix#mp8?O;XyhW$DqC$N5<w^MBcyTpI
z1a6bP11ZKHoT18KnxltwM#LJB5j<KM2Xh9(Ti_EW1gYQN<A(!CqOAc`cXh35n~z-#
znm$@Uh^#~YP;?f41nmnT6R;jQDO+sH9<Ue|8ft!bQwEqb0br<8+zCcC`9oo{s1x7q
z4q+0Om!P?3CyYR@KlS!D|Niy~$sJ^W{6b|upP~Ybv$_YbZQ4Z44Un{?e{A5=@>bD`
z^*{}~YyS`;*C{SiaQY`aK(2aUe~Gu$&V$SGql5ejuohy1qCFe4-zSeA;Rizh?C7Yi
zUc)4AH~1nds-T6}T=$Weq-0H?tqkSedCF6qOb-zDZsQND=y<?-AdqF~TI`{HWwJ$m
zS~bFw%<9g;t7e>|8|y|)Kkfb|Vw`Ueh;wS^{`q)Ogf^!;&y*rL7iquG&!^GQ15=b5
z9ya<=RyL0LDX&TXL(&N}+lM43c{N^N<%$JU&DH<N{o&zjKqB2>(FX6tLT7r!EiQ>U
zSVgIxzi{DIH1}^3w?O~5<UB;`j$_kd(_+|SRsY5y#Ym(hZZll0;8UnIb~VHq9df`j
zrwEH6oz(QnI3o`4?^CUv4`N5T4_2><2mNq-KsNj2*5q4irDyVht6yH8X?5*WxYFn|
zx;Yjj&H>i@b`dtmFVv2w8@?MTtk$Hqy-}99qk>Nuo~`X#Zh)wq7aNe)$_WZ8a_*pa
z#&QDZ25b}+v%`V(fR`Yn*dD#<dxA~?J@+?ghvW*=ui|AUMUzhari*<I&T}}#W3ucL
z#6{nC(g9oz2*rO^8zV7wulJB5Cw5y0%!WGzb{!PC#SiYa_9mI4^Q>8RbuoaZoizp{
z1NvBOS*!KLco|gM69stUlOzJpNYxebupVH|swQpXbKRTV*)1fQay;zS&@d95p-PxO
z3*XnLqUWIkcz0<i^LkifG4Vl;-Ov;5qgoMfpt~G29@xHZoBWgguOn8jT3Q~pWIA~8
zf`!G!@v(K;VABt{=sDkiT#m&kZ3!dhBlJw1G=%eIAvNzTn`WESTb-RGG`dsAiXf<{
zjbg8Y4lm*1;54{{t>l0!6jjv-OnZX2Il(9yhBrvAQSzqbhwxY7H^q2R(0RHSn$a^z
zV}I}feB7alo}0HzTU)QRWgmiJDIk!3kp5#5fgr_~M2^^Fq3r&4l1rXYH6y~k$4BS!
zJ=$E_{R&(!(!N;Dv%Gn(R5wLj(-^SNzWPEtC7tMdheS>He(lQ8wf$=3<C+rz)`#F-
z`NlnXL(``dCr=8NJ*+=56B38tj>>Ry{vFisYf4O$p-WRWE_=DOk3)b``??c7J6w)m
zNEJn~6vH4WFuVSP49l2K$}qTbBXILlVhluJV+A=5?jcv8(L4qm*t#LkYHsuZ(6|M-
z9mH(YPruw~oVN;kJz@v-Kx$@ja(33ufV23Gw=hC2pw&Aj&aA~{p0S+mzq`3Nc7x2!
zxCVpb{w)=KkI5GnGOtV%N`gMTDAY4qNYYJ8D!TW*#EbN%LiEZegy~iJ7xNw%V|e!W
zpHqVoT<C>C9lz-8lBnpw{+_An05xX}W^%Jn0n=V853&T>?WX}&ACGa1&L+UJ9JOWb
z?Z-UaW0&R*5i0{qf%)kr5B?ZrbclG?D@|~QJRni?^9o#!z$2fVni{H&3ZV5cQzD0w
z=o`7^?MK_>KgE)C4{3X^c6Ex4thh9oJ=pDn<jnl@A8!#dX|G`%X#&?7R*5oEk3k0E
zmj}fbO-M&<Z~z2V`u>)*Y=<4ZzW_%}QOVxm>4}Mq_wNG*;v_S&YNGP8i!w5TM9*Kk
zbj+XsqYn_N;4d(Z>xo>^YN61PjB-9fC;^unEA!BjAm%Crys>6{jCWa^n@-%ccGh;W
zCEqDF`ZR-IBu+ra<6W0F#vi@?RyBN(_!Ax)IQKFY4aOkcz!ul6sivW!iQw;R!kE0j
z?806!z3J&=BJ|*H20~Lpxfr<GfsO{ypSoYd{)It6OvG&0$0+1yvz+|V`ZaY|0&S!Z
zd;wR^v55Et$|)#N>;+9WHu@Bc+`}UK8oX({g^QCDOpg0%kEY^rBcjic#*>$~T2=K4
zIB=~QL#YVIgBgIh>%9J&cJYR!<YTNqy+I@(+y#?oX3B+``9?*sackBZGaXzAYM}>#
zO^`ow&mehT6ANj4ymy_2uZGM3JTQXZYt}F~Nc6^&PQXbkqW8EaTk0XeNZSgos^lV;
z0Gs;k{{55g^B4BQuhSrXPjzT|SzB9@TBOzFN8?RM*K&pnJmmiuDuTnWw+N{HSlyM9
z@_Be<%IBa&Uq^u#;IzPBr!JMgur6F!g|-?TFaI0!Uk+`?Q2U~VMN8)ODR9p^vu~dL
ziNXFSNTC&cpR@EGrM`#pzTyQ5-|azVzf8Xn?~i|SSaT`U>Z>BGm8NdpkhYp(p%Xw1
zS=Jt_e;I8TUjNy$$zV3q*~gM3BO?PiG1fF6I3Lohg2OhO<l0_eT{bKC_)K9HuM;5u
zW9ByL`*K+@r0CRtQbSVA!&>j>IDrJLyIA;mWW=VZHeWLy_Bw%b>{lrPx|$a(oc(I*
za`W~Qoz!)UKXuP|Js@tZtE?0dGP%>b?N_U9b=<92`xNr-UD*`jzRST(wcU5Xt|70H
z-63&~#i>Z()Xkc=Dhsw1H^|90B;hxDF*jTmSqkjK;aIjf5PJyJKW_3n+AUvvmu}WY
zYY;aDq%!p~t(!@cwLbIL4+wMM2CYC-KR++-QX%|gNB{446$ONzbWP2Sarfd}TFBLq
z=K^shoxfzfiw2d;5A|*B^(mOD{94O<VbZ&(<_zsgVj4-KJj@SwHgS<)6>itG+s%bD
zbqYkoJ^SV@$^*~Aq+UPIeg^Xon9;7rs<{~((Lh>USy!j&(GBppvtS7{jB0+6a;@T<
ziLa1rDmprPGmC_wz|F>lgW!(L&CR9iCTpU+3Ce!-2`>4Wi}T`DfVE>)lOZ$+YJ1+0
z*pJxHm-(2Ic437epdRUCI0P@Xn<wVkuh>oYh7LE6fWCrny2D%q#wc(df%MDI;`-3H
zszBRMlu%CCW^1>c_&G?|C#Oi;%qMw{)ivLoF)$*=LvLw1|D+qu&<kFZyy{4g4&+K-
z`{1dD;U$9eDiE#&EZk|ls|E=_A;-=pO7%f!h|u89cr7N*G>CtN;TQUIur6i<HO4`y
zS>0|+Z`@j|U3YhYFb5|*zpSjM0x*wFhMh!|{PtsdDbu*;wDcQc3R9SA&#u$Qs-#Ou
z*ni@pbO7572qH(f>U7sgRfY-AeYhP7i+H!8ZxVy$!|g6FWxaxXO1Ed>Nc%T+njb?b
z1GnI#(u4Wt`@+^`1^7wETp8&6q)kv5a}AHV%)L?HNwE@%^>3onU>HhdyjJ_#zkxa?
z|BWhJl>ON15Qx6&sjFZoZ;U@wZVKTbeA&)HnjT)+UhrZ!$ci?cM&Av#-y=;NInw<^
zAoxRbuANrj2tpi;?p*CDor%sgf`T4S>jwHII<c&qb>q}A(UuQ>&8yd9mX!1$Ng6|k
zpy}d2Z-7mwoSBWI@<zqRD8tVe)6PbpEhUMDu_TIrdskOP>fpBxKX9${e7Kvd>s0ST
z|9egE8yFbE;nM(uM4;u5_awhhOCxQ-l65$v*?f=sWCJIL^1$4SbHg;tJ)N(AhYk;n
zn<<>9F-mzbZD)sXTlv}X2`4to7;ct?p@6G7H=A7Hs2fD{11>VK@k9A&WK=ieK4<^D
z%iteaz@GwrD#3{3XE|MQM(lPaQ4ZdmOSjH`c^*BpiO#>aJY8>-Lj;3~8?D}#iiZMm
z<t#%lB=U@<rC*MkOMgflZoc05<45u4)zzg%+}Yr#zS`Xxoig9<APYv^xz^aIC=8V5
zg01F8#NMOog(E>!{ze0e!Afo{X^|vW4hOkJtfGb9fQU3i3byOi?fh-fSk}O@k)E7v
zG%F;2v*s&$Gos~_lS10J3`>pY`id=1TxNK&zT=1JS;NxyBm53lF(}VKMNQR7e14B3
zKAFtH`2|%Hq9_SwsV;LnP-LC`@u?aIvMG^sQP4tLn2qf+eB*Jk*BQ6TMfxD6(+Qpq
z(UFJ&XgKSgzuh|o!Yqovgib;U&f+UohNo_H#S&B*=;@E$KP{G*E$#BN@;-<)90T`$
z-^!-;r2B1KOS1Q>r};T#RKsu$Up+QD3Nyz7q!U!W$dN9Gt%li9eQcQfii+k%gaE+&
zP~hs<SO|p;GOtzLqpoM2?5i2mekonZ;vys<z@zo1m#?TYD=iJh&{#u!#-u$=Y2lo@
zxHQIuN%w)j|E_&|;XwPx*VKVL2E+3c^#N=vv`kFMdHkDo<;EeIt9$2|H*~CT^V(H5
z*fHX^WulN|#Ll;EW=8=3VZNsgZA2DvabAXa;f;hGn|Nu%vu8O6*iW6(ciS5+Zh&Ny
zqzG?sYJ3MADxT2<PBr1A;LTbmn=GSVrc6zPGO&ChB|elVXYogC*PoHf|2BT&Z+yX#
z4`;d-RX+9a)~16F{7agb>r6}}|Ix($uT!o5H)CxKe~8BB5d3nD@u9zFJ&8ChJQl~f
z*HM?yt6_g31gfJ+nZq1@ir*_M8|v!n$~d(4{~v7qWmuJK*9MF(ML|JADFLNBrCX$1
zI+d0d5RfjVQ>0tERT`wFrKO~#LqNKlJtjWyxA$>;n;+|ku$atwUoplx&iG=!{`YS#
z{3MvLk?*kZ@K8dETz0l!SXf1VzO)HLW;Xu#U|=A^BaVbb@5Kwt@oA@q>~?@QRR5Eo
zpM;UsJE!Mt%KG|>V5<k5*U+$;J*0<Jm(nhZ#9*hvqI*k9X}G<8ZOTN1nH~vVW_C)^
z(kBub=wBz(xxyZ$C8eFEbEPL+hsT=NALBbG3Sga+&Z-@*R|Zpe`gbpPKUbW7{J-x#
zqc;NiEQn|m3((i1(BpdJQnoQdeE(&LZN1A%gP}Dd1r0sw`a4KuRVj$~wv8c$8XO!9
zKFUfQa$I_jH?JK$|0B$hAU!#0m^L7fd9~+IE8>Em_wQ3fnI5g}&%N>Qr=%v}4m{mI
z`O(~50Qxx4X{fW+gQ5sf7b=E-l~*mq=<&Y#;RG7qRqnn|^=8|%5g;GPU!7a*EQ8MS
zx%GNmh=$jhRgiZTJE%AylNuCbpCKXvrtSb?sIv`1I5(HgbmZ?blioyGjuAm1b`%P6
z!6~rvv*_`oWSDgWN91Z{fP%^%yzAf=9RgGb`sE_GQ*gl+67ss8&<RW|7>JhwJ)!aP
zG(><&IV;}J@1QaKn`)(Tw>s4Y(9-l5e{4k({asoTwEjH?N`S&}NZDEm*8$4CKRVIT
z#u<3B)dEU&x?a`~^}Iboj+|z0ZJnLfrIGs_{a`g;<qy=Kw#VDH2l+Ve@F&yxJ+-uy
z1${m-F>V$sIl0|b4HKk0f#<vv^hR%W;2k=FdFAx<Q=p>)DwPc#fcO6F`Z^<-{LQ)c
zFruZ^c-G7i9J&l4;V9}by~$1>gn}Sqert=x_Bk@dw@(xsw7^>fHH+HXdvM;i0VnjH
zghpU2SZ&Xev3WFk`yFmxWNMaV+&u-C3_E)U23}aNL2HSbnF|U+y|i%s->b41v4bSv
z=$?Pp0UXdGb$}%X3g$e<20(o=&uH%}aXW%FwDJ>BiH5_$3AB%CXfvc1a^xpryd7}w
zBttsNH2~uR`|-tv9*oIP!GWsr#N=ak_R>Vf3!JQ|yVwnS-`+&1-UKl#NTkw=8i}E7
zCb|d!a&DI(IEKu@H6Qx}?C3K<`YPnSO)4NDG65O}>gUPlkTn6y7qIfZG-#1%C5f3(
z3p!)6p;aXH^7gz5`c5Ao&?>~etls_h4d>$GNbN55$B%Gaqd}&vA2fl=Y}{aJib%2c
z0c8Uuc2<HL0sv%jW^+)o5jnwS@E%F1GlHU4VC~lds2>f%9uD5?TA?ST4DEh&0SY{w
z3eaIPUym!pJrw<IP;tSgF$D|oR8m2p4?y3S1YHZGVwyf=rN?kX;?X83AEk>`=NoSR
z(94n2n(`CmcUS}J0ylv(@Z`Y+<@|i_o|DrN5F0e|6v;f>b>IU1B@dz6htNvnvgo?c
zw~|nzdxD%6h&0T=o1LcuTe<~c$pTwIosIi?*O&K!j~aM~0!e{>NtobQ1tew3Qb9n^
zqcs(`v)>Qy=+&bJhlciino_swN#V~WyaPt!p!A=Iy=UPDtsNu+q7DXuK|kyuYz~l0
zZbC%>2H}w<bp4)ZhgP7@c#|&DcPi<&hJhM$ml7N7P6tzW&QC(%VSmBkwiwQH-Z50k
zz07->!c)=%Xd-mUF+5mc++cEkyan$`Iqlhv|J#>;fdaa^V#Y$%z@TBx0W|PYYjbn5
zPBJJ?kr)5fBpa{BzJGsK#HyI0Np1)R3NI=wGG@vEEcXs&h4ejTKa~Kuo5|E#aj2P9
z^L|1W=kOfRg`{7Oh7IbJ4R?2U|M~@aJlbCE5RK6(dZhYb0n$4`x8+k}`!W)Q4@rD!
zHV9W{&r@&}wg<9A`YYFeLikqPy8y1eNPG75f}u%jn?bkk2YAxKt&NTu&f~mo7W6=z
ziX6|;cDicI#ynb+R$Sa+9!d_da{8=(8xpm^;$HjqDkV8N5Xa<C!+}^G%>jv9r5``0
z0iD$AY~x3?o7r&Q9I!wn!inu?zc)4cG)B&RwjKu341k-bAdvu_t}?|-h=}_nbOidd
z(f%-cc6Ro=ZfwwUvVgD*ydT3{57uPPK&lIc+sAtlKU4#&4ahW~71Nu++G8=I>nyI0
z;UDgv{j!=3fGKd45%xX=8VsXuoyGbX2^Eo)*=JR{&AL+Nlu2gIV$j#pK@bBj{kQz8
z{2!?^`L+wLjhB2gt*w-djCDG-c&LM&fbrBiU6Fb!;xEqk{Ri}*FX!Nkc-ZV0qP&?7
ziyh*DQv}`m06X``B&h`Un+`Q(WqAPeHdVlde5eP=vq6m}=D@uLe>@OQZ-SWW?~#$I
zDV#oCz;KbR?1^JZjlR(x!$6~l&Zu3^LrK{>RJIJ#se2e0pGXu^0IMbfvWSd{F{$~B
z8<2T>0yzhXwnelmDk=<xl)<~^%YXm=S$tJgciUx868e8XzuUKN)f;R4H`w0Y-SO*J
z7f_EtKzsFfdUzr1Ufm0=B^|~a{lmkQO;*UzZ<iUfE7VPZ3&Wa0Hfm(<<@~3o9-k^_
z5*NAg<1&<qK)k!x--yGc4PKcibp3YV{-mLyLAB}L%ny_u43bN5*4~AH#D`q#e<3gY
zHZt<W#Kf8cOLgDiAY1kHD_0=1PN|$wCNGEQ?=t^L;vOZczx_YYhE>sNq|3`2yW9hP
zeG;7yfp%3I_=xxQ5GyuZXIcK$)mrlsXd$nqpT9Pac^&-B)%MLB&1$>0s+kYb6Z+sB
z({SbavTFzc2vAgN1ACnbwgwRLDN$>xt5@4)a%4Ut$9!X#QaKd_T4scUP}*)2;i{+w
z6dS!gaxwQZ9huQe%gPXwsWdC#Cp|wAVLJ`RXK_4SUxmvTq-N*cERE~K`I*{Vk68`l
zArCXd;Fd^MINTDUg^-I&?G8S`2sYld;`^JoA)_)ntpr$a!Ij1tg`qjSzuEQlX0CQc
z1R>qCsi_Hd+8faxO6u0+HZ=5a&Uhh^$!B}uhw+v>aFlxd+{vxR+*SP!G|}~zqr_C3
zr2=8#ZWj4UHWGYOT!C9J?Fxi@P;Xg+jUp<)@p6wAc>O^p`s;ZmDE)z9nE2GAVAqkd
z1nA^=bo1mb@GZdFAl>teH^<3dzYmOd5USj&{-IK1aI;fL=64!^OlUBv23z<2Tz43e
zL{b%k-wJID$S5^S40X1qryw#IF|Mc!Uu17ADNzy=d*%PhF}kx8$}s1EgeM3^$_1oL
zkz;b+q8^VN1J%RT@k0Oe6uwIc+5&UOV~~Tw6hz8^4oIvrZ0I?eFasdrwG(^1IbHt(
zm|{3tBPV-twQtQQ3pGYV@Qb9(A;PZ=YL>I@7G@|MWWEj(VPSnU>CM4oB8)<Y4}4m~
z;uae#D`ZEiTvu=2yIUA1TiI8<zCh-Oi@J)B5x4pBq7iN$1=Jxp_iEuo1>K_Jyv>c1
z0Z9)yI)}>5vGcnxPXG1*DGrYoi`xQ7nh05)a`rATX@}dviyo+vVCSNAr~`^aK|#TT
z+KazM9&lK$4&_!wL_~Z=sCNNhaXs1f1FSckm?SR_Ihe(0({q2N1dJ_#CkWCAn*$){
z1%ia<@7Y#I_rAKiI^4~Xu`RYAz?K-I&b}IV<CXq~BkYIfs&K5@XU!7$yprM{%8qMr
zoxs^x>JQ9U%fYOY3<L1L144eGR7CTGE3ob(#=(J283VaOs5n337AxW*B2nYZ#O$(q
z4J7{{C~(tyyS5X9Y?EcCmr#07)P>f$i(p`2K%m<h|7Wb6Kb|&&Vi~i<oah)2xBE{L
z*%Uz%Nf5Kh2n*K0z~DCO;%Ei1+Q%j*VN#g~JbqYZ(Ck~(%Ha_Z<hPRG7jS{2r?_3)
z_xDI(%L1?$je&C52e@XVz_jb(lUdmd4qA4ZW6+yKF@maK0~|ru2eZo>8?T^3g~^B_
z2-9IS2QaDXawKX@Ruf#sw6;}zcQj<jV1Gw`9Itg^vA5p?A&JytR2Gd<c73ww4Dd*?
z{*x9HR((<Rm6}=}evsNhJm^CtCO|)&W{SVl!v~@A1Fd^C?iY)R@+M#xf?$i1_hg)1
z=!CAZ!u{mY)YQ}i1;#C3uqlQa$I0;mCV~lHH@aAs>i#m0<9J>ifsWvAM4)T5Y`Z<U
zLv?(xMdFl^=KDR>>r=YW$48w;<7G7WT6ygj!HHHw7wR;2Fz<^DGS)=SQU+w19wDlU
zD5eo+ZAuZPwD8>Py+aTf8XD>AxHi0c98^?OQxnU8kN=#I+nUi>0(2Yp_Utj2>kvR-
z4&3U?bK7yi>MB7!sVwUiNjXBg20E-IT&GnW2YbpK8HpI@e6u9jj8IQ6RoSmbuCEya
zbPmHe&G$E--*qga=ixbS@(FlQ4Hv9#O?e@lr|*v9gazO<1?wPX-XEWIM5~fwC(^Qn
zJ6lRm);txbBb@3wV2b${BJXg8E|fn(o+})wDxX+sX=x#5*|g8AL8`d&@=yEQ!I3%_
zv_<oIe%S&^JGd?Q1O%G<`k*tBAOw8q)#Ks2l&CV+($+z2#()!y7`UB%8&PM71uvPa
zuRbw^cR=|DS|tvT(|cM0ur1UJ7I&;!9_?ELx!M*c;C73}QF^^IUL;W|j$on>zzf)=
zz@;lOzj_s3fA%gsqi5#7%gEBzl#kD)Xvyv}k?oVqKXb*!QhcVg_1Zc2lM~*prOowV
zulq{Rvbv-tu@qg4-eb82?0<S4*=vG*so<#plDpF+>h<Z~#bQ+d`g#w4)RdF{r;FYO
zc8}9VfCT~c$aL8=0slmAIO+q}SgNJsqoR^NetZpa(MCpJ6g7X1?wN``sNfUg)`&?-
zf$Q9dBT%TZA&f0}CL>E$LiUj{jv9Yf4v=5d<eVVK^Hu>UXvh(M>$6&Qd{Q2Rk*<1N
z;s^b|f8V=Jm47dfU;A(ER>Q?YcsJCJe1@%erqudiFMuTozV0zYa4?(`P`8!Q7D&`&
z<>q#GKYVzA8`A@3O6GhN6xahwr-!DtW(M1{!r@Q({$pu_-st{QC2<_|5typxDtLkU
z!@|XpPy(ybE|8`7hE<}r3Hwv8boxI{DGCkiJiKU{o@VAKKd81Jn5?|ua$J7{3FcyA
z2XSvV!<tDm(kd!&4GmmfsZsA99O&XG|5sVg;bd>mHCiyfoA$(tG`bzfV>KIppP4{h
z2SY(xBML8ItP<4NAOaKz|8&6ezrXj9QUUl;<VB#UFs4;bPLA{pee`H^p?@@-hBk0@
z{WL=b_1(`#udDCh|EtTPC3<==tdi=!dzan;k`Z_5X}fF8f-?RJDafRJ2B88Pz9&S#
z>1DO%<sr<&PtRubVBW^!xg{+23#vjOUF%~5xZ2z@sEg9t2U$-rvaJE^EKkkE*f<FJ
zUXUO&^HV`VByo{Pi@k{_DS|{BtE*oXY2S7?yF%N`;dPl&s9{t7nt&Fu0`e{+=dt?k
zK{UssM?GLXvSk@`Di!Qyq8&#3fU|2qE|mPTv+bGOLt;Z5zPDznNl9haQ?4f;_EPx7
zr4-N~@vOkZbvxT|intqs0@kzCkoxfUaQ*0~IieYS@ZhtuU><qKCS(m#F7}M-dCAMX
z!y=qm24x<J`xDIW?k^`NCtx$a9>UU~O8Xg{Pe8vxUOsLE4w739{AVOr&Z5&GE3GdM
zfTWbRq(2J_>{b&h*%#uVNFJ+ont^L-cW=b`cEKq%LB;RP@Wb(j3vS=TCLfepgVd*j
zU|r|1rn>l%3~8TFs334q{*K?_>15UPX%dWF$TN_ib%_tQx$=zTO`si#c~G`BYCpJ5
z6*g>9@gxFuCSEt=asLoK+b-Z4`1cPNPh4l74EtaO#+A0-myyX*r7tO-9{IHLMoUY^
z7i-GtcG0~8P1iyr(~sI=<1b+ZZ86jKBCqHHwn}o!WAPC{4PFnna`-43q<Xjuh*PEg
zNs~>(HhD$MFphIy4JIUYQBn036%KxlK21moc_urwIrD3lgwgSoDC(ErBh)%+Gm)1c
zl4djF+{<PaGDaRGmBNoBENV3{+9n5w`juWr)^2HyQ&b9Y*g=IiM@~+k>n}iVbij^{
zSny(E!=$WOk>+V>iE*Z--Qlu6@*K&9Zy=H|FtC6Si7dgtzFyw?Yk>?q8DR%?G1>Jl
z5zA3*;m*l*MHrrqj7aA*);NUb5$2&AVvl`9e1PQSDznv`3HLG*%gTJN{~?3VJ1+DA
zaMSPK=TyAsd;P*<=r}9{REVEG6}@O+a7AjZB_wQrCWZJWCCn|Mz}SVaJ<cBA1LVOp
z0OVp~;OO~M&0F+=QMebS89bFNE&tlxK5A|jsn8CqxP|!jN=u}dON%&R(I0w1BABMA
zS(>A2Gux|HxMy##wzCt|*Y^Q@b=~a`;u)!6a&xuaQu^&1&#J-e*Xtms2-VsFshPRC
zc{^i5L<CtyYIOA5`BrHq{_`y_p^z@{#rq9{fP0K-17^_qS`_pmUNYj|dol(Fej3T8
zxq*l8o4RD0zAL8APPMuPJK=4yOfP+Ar0Q;TmDA#CGo?qM2V1hgi}Zw`r!b0@la+0B
zVnN0xCME`pRUCAG36(digT~jNGBwo*^4{+7=H}PBQQHguBm6Bpz*VPhO+<8Z){nTj
zXiNDsViDF=E+!%(%|OlC-P?nj&24|h6Ql<C_@i*F2pmk>G&-$6Bqng-BG1SK5ES~$
z{?u>@Zzm@w$wlaj36y_=3aI2&5?6XdLj#QZaVHk=3SsP00S+f-hfwDLa1$6E7zk2C
zP%<5Cn|bFvnF99~=yK{)TGybk3=0XVDlcD|s;!EOQjw8aD>0IUXLs{vA{>SK1XCM;
zf`hsK33QOa3VZr=8XAv?%9UCD@R97p9Z8)=Po&8Wm{#wEN88!i6{9{4E3T;60RQNU
z3QqcD7>){0VZOMBi5V9s#=nveGL<3AImD5npfFQub@q`g9Czk76v0pm!dh`=1&9CQ
zs(}G~JA3=+uGe+5P`0kF5{$_xDh?!hw*uDjxQ@rU`sK@)h~=V$q^_wM|LIfEL`0f@
zQ(GG=8QJ*61oV$DKgQBA`0`{lx3s{u6p&2a4_ncFF=86}^4@M0Dk`e8)6=Os7wkPX
z@KIookcQ*tjycRSpm!&H>OS`F2GU1ORMelE1|}x$u%sly2!qnhOif3j-T~$u6v}gS
z=GYzKBuBfuA`7~@pJ0&s{ZYBPqT&-EXMiI^wDV&V85tRM^<RJt*1lc!&hq7j0p&V8
z=dlu_oo(nmT_@Wb44%Jy`Ka_IyotKD<=&*3Z%X?Cq+4X4p?^Z{CBML%fw8qkp}MeU
z+e{;!9pf@75<rN!XJFFeUmt@fiV6oj{U>C&N1GssTA6To@)7*(W42c-fH#5xj*kYe
zTZmj>+<o&m(Bng7ZChb*YoJ4sUgL*R^htOY-RYtMx351){~>|sTQI=VB6`iUt-J8J
z<E)Q7y{DXF<9Ah66@;Rn!1!!YD?Q!nqd`Vy=6#*gvY0$eva|GLaA<uTUAEZvk!VLT
zT`}$5@}EC1${|n=!oLE8g2d^&MH5x?gKaQ_Xle5}skdKX82v~-hMeMnAFA%S(d6uG
zZ1+DZ{uUKcp^tHXNJ8Ruu!d{SE%Te1J~nS_)w%=_*YtF<`0p4L?in^NZf<ek#22|G
zB~cdZ$HsW-ZpQn(bpl%uKr11yLihB|JfJ6miR~{@3ahGHTW^VVLGnGkby*z0evW((
z#&<KvL?r^#IQbp$kF~|ymjLp>7y*lLiBSg5t>ORXZqczQgbh&%qu-sjt=qci%Ql2r
z50~DHTbS8wFI+*F`vH(|iiB^qLV0Zz{^?i&#&40x*0guqV#5e=H*h1zVCZ^Z2fWg-
z%w>M#&4(pu4QL;S;bkQZI+y-%;OPk|GBh^!3np;=zSXz|3CIN!nfJx79^qV&RzoOc
z^fw)snMJ0qaw69!N`{Sm_SCyz{ASiPIVqdy!)Nj4%@bYt{gqPra@k!il`@P^)&?dY
z9g@^iZ+J;b<@xy39}m^5UzQivph4oi8WucRPJJFSu^5r`Vw~ZRvycCzh`&vEij~2I
zOHBMBGVLd^32l?Z)-=<TCs^Q^azk#W#sSU7Cn_qcF1EJz?8^&oR%~(J=ssUZIi*)W
zii<IHb#=$b#djV^D-`7|0sbAvA3PJ!Z0l7%>VCQ7nVX$WLq!Gk(O0kt%2PHZQ9MPv
zWA>}Y0c*`UFr=;O#XR0Xpulb}v6#vfv44EPJ}%C%%=8IxGMrsqAq*W2cVK`2ZI3ye
zijAHgAT5ndN_tUu`+Uys_sGyUTchFsO7@ORil1~`h76|X1&#$#0qmG>6|3<a8*vs;
zrC82!ci>o=ZGY(AYDlB6!2}sqFW`Q(<t$aHsat@wL<lZQEzHkHe#8nF$=Ia-`t|FV
z7buy@fuV~_OLXO<g5+|Shm%{HN;OMqxw)gj3<ExF5MgFHp2!qL)MEK^BziyfAf~f5
z1&r4UjsqYHtfp5~K-G!@G*I7S@Psv8C-a1;FtojqHTNtwG3xq_waCiAeq2SVbvPx1
zUi@zGa05yH;=AB|IHQRniwj(DUQA{PoBcfUJTWG^RAylC3kk85lN<P%uSv{$0B1O`
zABHWP1_vK3b%8A_#-roB=}N3SNgO+4P>yvKjDcw{lh`U?V_+Z=?pVB6gLHNM?4R`@
zp%ct_Xi-#XGZj4KdS9CE{>3P0J2opPr@9(<%4_~;#woz}R_3z+bDVnz1-f}<t1*>|
z8s+7Toa5x7aQ>&A=JJ<0myJnNav-5S)YR+;)i03q=q~H}1LJ-;czv>OET3YY_NHCM
zj7!f4|5S=b%r66GJ>_CPaq;o<3k!7gH!kqD&~7?P_?Je?-&X=>fmVLr@r6D9b2P1z
z@DmqO?2*rje8Jfj4<1Ci%yK_laUdoRWB9#f;nPLJQ@Zw0x$~K0Bw2Q{fD051<U&Fu
z-EPj#QhOn}rSs`Oo)O*>6RzjbG%R!FH$R?`Me@2oNQau`%HCTM+)F2k);x>*$;2eA
zrzg~df%gMA-olr(g)G;z1F%36J~l&%VKBOxwUhM%O`Rxf2tK?JnLKy2f8|Ykp3W$G
z#)|m_$8|~bN`#IsKPX5VDvQ|IPYDTB1v-w7&y|(!c226R3w%(**QTHRUYuXRRx1z?
zc0g^Ef`kG<o}#_Iz5Ab@EjM0WJV-B`r~Ik+e^@||AGgh=!_g*EhIX<bk;mS$mHBB;
zLLS6(=O42jZMK0ug&-ZBxN1UCqpthL1iAq#R4@D<r^#sr9sjDVSJ5z+tEu4wV}Oy$
z&vxg>bn8iT#@dzlpxT)^IQ&ZFvjWD{dq2~SybFjs@W~Lh8e3OqR0JISwvLW~m1{y|
z;L^$JY62qv-FBf8a5XT31AC%u?(GF2mH?&TyoX&SOZdQ8TDp^#5-5h?miJjSfGblH
z6FjrP;R}d#J3R>s^K{V%+U0k^TlVwew0Xz#lwkLzm_Jz#oP=Op(bqxWcu@(&LVmbj
zc^%h>Ay<MDnx6F&K&I(px&i|+K%4tOe4!AZ^Q_;iue7vOyVg-<q5Z2x1)%LisD6gC
z-y7!UHnMO576T7@;`76UgU!jRKZ%@wP5V7XxBBU9tFm*U{(u*7S!id{(<{2XAc2FV
znnQ?;Y-d!@iDJ3Bw$@?u(R78S?=<t=+(;oegaQl+U7gU=CqPxvoP0EW_U8OJB0c@f
zZ8ZY*JJ&UIS8P&Y@P~%suR3qc%-+b!J$mrrd^lX_Ytt6KuCwcK9vN_Gd7$;$433ES
z6Y+-F%RO3`kdc=5`0@<*hibnN@QU}PX?LXK;z53CVq&r}ZvS7CT~E9LxbDB6C`aED
z74-qwCm@ja3-MzQ(14>jG~UIQ;N=<1v<|u#Bt{?H&=7A6m|2NYz`^E}$JVqcl%Nqw
zF`JEXNl77ZLgKj{))t^2{Gxqe4_s%*wtbk=^6>LN-Rl|VvhoHCaLseekJ%fQuRyzf
zdD$?AZDUge99Aky9FG|`2H9$}fp91dhjNA9zYEqtdNDdll^*sjAwfn?zl#5@Sx8o}
z<4vTby9F|zv99a?7<5i<N<PeR>Uissg4^W1Khu%2a}`%bVtOVgv4wzl7hGSTQir!Y
zs32tJyp|ty<A(eJp_m$aLRVAM^BM+CXXi5*NdD+QTp6Gu{Z4|NpTA0b&#<|zts3wP
z&}55lJje0S*nU)CFQqj`)gvt4*U=%Xji24vK|&IAIM56fs-LgL#Nwxal}riyoEkLu
z_y1WRUjYoHx~3+X#}@g8uo8yWeg5Q#h-$Z^OS=unH*dOcAQ3m+vNL)4Qa~n?Lh`A<
zNrWmG?}j}jc(_tDfCFG3N~dBp{0(=#?pHEjiK{wjlEHWgTCGW-1t)Q1D$<wj3}uLa
zZ}RC_98^ErO!;`K{`nY4Tc%c4R*PtiP)}8u4U`^kh(c|kWtbF*2ynPuic1kXFNXLE
zBii4c3NEf(5!4^|7ug=$O(n1^jeV7g3BcudKxHTy2Va8j(KqB;F+5}Wxqp1lJSj#w
z&F4SGsFmNNPdz4Dx{!3nUixh{<*mE7{GOFn{6KEQujsv$&)|7l8XlZVdEZbAZvWq(
zENWpvSc>ima}J}dC_n_HW+I5#76*R*`~}Ja2?;1=Mq#_k*kW{}+^z@>u7P<v;hK%B
zRe@>&OXEvbP0c_DAD<Vn5+OTO!&80B((S>k?t{NofCqE)^0sw$D$$eS<<?qD_eR&;
zbChs8d2rOUZQU)biX$$+ckYf(y}LV{_o{0T7ghGv1bzJtWP<Sb9}(?n-aXoj>Tf*#
zi3fE8reJY_SjRWXf^{x0J&);VX*G-WJK@BU3?uYDfn;<Tey&u_TyD2uTIzbb<h%{b
zzIV{FzaLs{KNH<N2q#I`Z*&HRLRjLN8O&+T>e?>FZ0G0h8JR2;U!;|=+%(+@T57`x
zGu@e>v0)ud%klJ_uCl(c)mjAv^$~nMew-B$6htSVbgECz%d4hXu|So1eefIexUiMV
z#(luRINVhLkxhR}?YjvLN5{VP@hkB=Vgq2T|5#|(=?;|MA3x{Fxd^bcTekRHxmsnk
z2GA!&dn>-;_dG9Wb@Tq_hp;SmnA)1HuH^<}Lyf|bUA51+K3pYNh3XgXkmNSwHRH7`
zch_n3N!_Hg^T{q}n1uc5J`~y+u=N;%QIo6`M+BU=^R!dKTfyM6NT<fv=qXz|Py%ck
zH^iH;SCyRX<r6t1R@y8>G}IK;4E?S@=^t3C<&lw**{>-eQ%7VhBslm(;2j8kXoWCM
znEZO5Y)tqau8qh$NiVkKeoEXv7!5%}x&Xg0mj0uio#sfGxpLA6^z}W56W5`ro)O(5
zQc8w)X;s%}qTVex20}&mdaH}-4>R&^m7kpN4IOR@?sv1)x_i`v|MBI;QTIVCYu%)1
zz|-JSGEUCkzCOH>fmkLa)*%4(@^h)-VtZWlAUN6iKC#>Dcjf0%3ePpGcfGDo`tkFM
zp6*H=aawXo?ZG01e9O9{=>TwmLJSzv=!fo*P~OQvrekGo>&R6;GHDBVbNlvf`WSi&
zQLWCLz&voBnomhy2TRG`-d>`ZLvaEh=l|dGLf&CEvne!G?v+seUy*L#41zU%fD<Gx
zPsYHtH5L8QSe5;sH}$!y1p=0q3`)Ftmz^_5FaQ{aky<kUQEEnVZCEgEa9&%gGJP3h
z;}00W%A<`vt|2SX_uN@xxLXfXep|oVmsW}=NRsWSWQb}*$#^d7(Gr`IC#qkzh{1X=
zE32((zXZk8)ffh<7zH1==fQ)FP4y7$!0?EO8cq9!Ro7%*4#JL_!5q$X6UETU&NlNC
zA<GL^6Tnj6y=hFYl3z=*fvE0cy4ObjLVR|Pg4azKIn^6_dRt_o$m<goP6ul^zBMq;
zzE6RSRxsN2_zoa|_I9eYRF)jKdwf+FJ|Z(Q_Q3yXW%WhgllKPV&-}7GVaXCm559pk
z=XWfgbltym|H{sO4_a_2P{9Dyow2Fw-U!cI*?$mna<Ykyjj54Qo3-?HnL}xWME1NE
zU;|D<@FH2*^;C(?TO+*$`=xCo8=Iuq*!QTFDJkge*PlrQYiLdD^8)ncKbDXM5s#ej
zDAF%>)oO~jQdk$CfH*6DJOrB{RULSBjnUxHBr(+#$WQ#K;ew=sIF`wcq95O>SP}*_
ziOJGO^(;LuqbQ@JRO-4;Q>D(lnXdf>lsR}}4mVEeT^W)7J&1%Z=F_>>8X%|#TRVun
zvRf%!Dfu6iWlWzbLYtztP$lhe1!;bAs;beX1u`pzc8$2#M}jI}CcSU7Si^}4nJ0_(
z{uj~$LpdKrbw>}6bH?Ln;j@+(6jag6=i4o7aGGNh?9%2qZ9RQgAZcO(n7|%97nyFD
z2y_k%fW+!@aCgR|st(Myfmp<6I}bY^|3&4!<BKCCC>P)^%iZ(`1I~Km?jk_EzJ6tf
ztwi|X0cCIahX!zLyT2|`X5tCWyv1}Kfk{R_Xg&n5&N<8zpqQej$(2jw;9_NUY4UE1
zANyvTl$6xX-Y*y9^Z@PFtz+mrTBqtu%6~!c2|gP#^71w#1t(xul$;#w2<Wo?R88*~
z0TGeqx;;3yIx7^p_T(u^Fu;*#)ti_q<93*v`pfXfHN2%7a&qjfrL9fQBaK;B8VyM+
z(SwBEzd#BBAQYEz*YWR{BS$kV{oN`?p3KB~yNh@*xz0XuaXEnjX`SoAa%)f~oN|S=
zF?DryerR#P-g5u-`48NPqRV1GTF+qs3ym)F`;7$C9A{?^tvcu15CVdeIHCi7v>IkM
zSnqH_|0HOp*a(iLYnzK`ECN=Rmi78gk#G%|UqU`GSa`A<wPTOX03}*Rv;t<lgy-$e
zfq|OHUZ2xW3oTGE!0mlBlt7`Qt*!oajZwfIMgp*Y_lIHRu=DGM4H(fl&$r&a9;xKv
zg#@mE<2mo}{*%W9F2pfaKysUI^dfQK6|05DLBFA~am(v+@AkY($A=B{DsV9qgKW?G
z1lplFRj5Sz@>pG+zXb$T*}r{@C0=6X703Me>}V^@{56hR!^Ih<(B(00OVYDg%ZXtP
zGnS;mDQQ&<cv?Ua1?gFd{hv<>?5WXfVbjx}%1phS_m(%7dyy24z`~DqdG=2)w_ZtA
z6}GCEniXmCler!6T7n@Z1=hT1h})6j6KoQxSqi+KWbQ4bg`qU<FW~G4T}x%9V{a15
z^fz1Vq4)1^T))X5!&rCjr((4eayyE$g$CYfk-J5cJYQ)sBBCvkt_bUArWW6l2a8+|
zPr+w)Y3Y64(Q2+91**S)rG&I%qSui%4DM4F+q}KCAMx5LM`ue%q2T+iZBTMeWlG}9
zQBqRQ-6HbphMCQvN?@ku!}rB*N6&>W%ID_W7@C^Cz#yXKulV08`o;><3{p>s^K+Oe
zC(zPLh+mkUJ#N921rD~}S4S*HfYa37Jt0xSY3p*M4POuHZBUcdUL)0P(3NOpRe)p&
zRtIDS)vDw^We)y2s7k@8rG05D5mp-T);y1x0)^XoH9G;+ib8H&uB(G;d3_g4EJG19
zit+=Gw@H!|3->~2#CB5Lc^dQX15|3ihoVPL#8Ye&MZFmh={HK0gGL?CuXelpAW1Df
zcx825Oi@tn@lm2AjRYY)mBlzc&!B*!x?NOakm3z>b#)y}xO;f8yyRh#mlS(T%(hqp
z*Svns%P_=A4ugW+=LP|osl}zrY5vRe^NhjFW&2Oq*+p-&kf!DT)J=9dvX+BhO?*J@
zHJ7wB-EK{Oet!FFk!)p$m7jP*GRB8+f$7va!w6QNgrtby$x!iObS%6A3`N7sgCJMl
z+xuqzbbO@pF7>|S1K<d~e-rXO=!Eva3=i`L?F&+u<>i9&i;Hcac6>%nyZx0;rA+@j
z1-S(liV0wgXqxJQfiUqq*{GUPA`&BP-SHujo1Fs=(c3t>GGR2d5EINfQ4BXX6!VGh
zZdqLuFeL{=Ec0<Tv*|joZg#-<bX`|teti+WiS*+9VykFwC34xQ1e`k?A+qONt(#o(
zvF~BtS$L7n(7SibgJyZVBy29bswAm78xs!4hm+!uY9kRPq=AT|jFc4EMdL)KbD+@V
zL4oqCXa-VDvy_)WJwcQkJ*dy_>G>2!*`i-q7-UbN(WG#V8NY-B=1<Sb@pQdr@|*c8
z?JtgRXis-_<Cy0FIFt+?GUHHE!e4y+of=SQ0M0_>#UvyEsfZc-y!jj&x6MhX<JzrQ
zie2+RRUoT2f)cwjuxoMBroZLw{}qO<&F1E-#}N&pfkBWVNJ*3XFg~XyuYlfncb0X<
zB1Ws-8EBtiG}#N~4sZwsZ|)hDMg1QZU|?pp0<QEWK{TJ@fjZW!p_c-e+r@w+$-+WH
zwrrgK2@E-IA>8x9`}pr(zmV5_5KS@U5N|;S;LYk15Yh<?e*u#zD4&PGo9*iIXa?4{
z$H7SBoJth1KhO}@riDK6ZSNmqB~MhK#h5}q0>bao>u{W#Cu)Cp*LgXCZZL(2&k3W^
zcHyuq<_hw@L7#Tth`IV6hP7Ws!?7V*FbR*K=X%MFyn&#Mu2;?`Id)LU2U?i9uaC`v
z$6TwslT#I}9CE+SaeJ&<ocjYeSW8=Dmr}&q`UeIKPWNdZJz5tZa3;z8^?7`|lSc0k
zV8vQmVI)E@hq}Gj5k^!3AOxs(^a+`c*3|avnN%q<Gg%z|;thN&d0{@}y_P0%yx#PE
z=(zm93u;czmW~b;RaL+whjMPz#D#(n+v;@vB($>`B8o#q5NP9l`--NY0N`-ABmp@H
zLgJ*N%GN6T4hQ_^Lb%XGnduhHEHQ|GlK>prrZ_K}SL=B}zZQIW$dla8_~H<0xj*@2
z9fs3JhMRo+{J@Yag=;+o&x7B%YY|!zz0z0aZ{J3z=nVWJr^U_Cciw!Nl{UddO+7s_
z(g`fKZKpJ_A*CNGX=_0e%T_l2-&pY82PYaDxAO(PWimZN;vZt1g*hJ#&A<5iF4{dl
zhLD<;Et*dc3%T`bkz9b-+V&@tOY>_ZS|RBrv}JgDXfe;|eym1bVi~P5Xx?KYRbHzI
zl_6cGpk3>eEF&OD$U|SN45eC9HZ>n|xapb#<ru0{^+eh(%7@Q<usr*TKw#HdZqDv`
zZd>illPBjlq;C$;;dXFfM$vf<@Zs7!I*hby9^&#Ux+cJw%zp+5E3wQRZH9w25N!b@
z11X<)j61Z1prKQp=N2(BG$cp$A2bA;IMMg_?`x+k-nm|FPn4CFw|)nKh3apHA_0wa
zt>kEY1)o88rRSP$ZEg9jxxu-@AG?B@zs07c$eIyoJuk3W<9y+6Fg2_(!7;+CMtlc?
zM?&Btvl%NUrfQn;JbP>p&{Rku4_I}={6zMMhU4zkg8cK&!CpR~Xk_sMAEP<^Wgj!U
zTz8=?Cg^#|iQT7SuiMYO8vy3cLLUn)%I4p{Oo3|=1?aw(zs~pJqVG>SdjIpo$G@wq
z?=hcb*$PJ>@8HPTV^a$-7szR94sctix-2K)F$G&MW~iEEp6kp9Fi@dlV%B<`aUJTN
zj!{riwE@d$u|gj4z6+Ls5Kb1jmRZ2G1(OLQ@Z7T_*iN#+^E?>wVYxI|hD>l240l!4
zY+x#bA3MYifQG9BHZq&TS`_#j>^{ph7SR;H<38ty&jO6=#UBHb#H;+)FLB#75HCQU
zv8Gz_{^#iE=(8ITaB+8cBwnqxv(tQUSssA0pJ`2CDhQY3ixR_X4!f_ce2(kDZViV4
zRbb$Xfd2PPPtS(EKVD>rIvc1WerpenRl#&3d%!HKo2O9ggF1}J#Qgvv292(?QJC^Z
zhmu4PA;t$b8P(B|FG>>mp0l)>H3de|N?JgL6Gtx@d4RjLwnqQI--nNJU-r5sfc(3!
zIt}jf!#6D|VDCseVOV^ENuGCJazTa2zfxV&oFfq|yTeHIIDVVye&VB|QcJWkGE$jH
zK`Q(KNqs=g_q=LYnXVuDNG5K?VQ30Y7zE@QwY8HWEKgOIQ|>w(=?%iU$-;sujE?!g
zI)5DIUZy6$XelZ041r4{@Zs{`+F0BYcXO+~yl^{$zE?E_>{xr_S+i}8M#G<;T6}-^
z6xDADa8ZE%U|zX@al`-)0fUuRfpd6S7o+t_i4_$G$-Gxjin{<jh>TKcX_*WP=5ynk
z7#Mg;`dv@a%21WG6$Lp@cywy(rLs?R17en>Hut+a#A@P}Y*lWo`*u^KVu&ay)V=MX
z?FFNP$x3uQwR^dIuwRLZH({jx!xwr9K+C`=Zz@+oVf_UN35Es-57c?x4(rOwq8b}h
zr_WvXrs>OKX@MtV@^(MF>sIqZhr-FJD?8RNF5{#Bl3zfzpFeV<u8u0K`ZpbVA~tLQ
z?IP~t;^DzsyXd5$!SO;(pyvTsV)b4Y9T9V8=Zy(@Q2TavcG3pcZ#NIY-Dzuk7x*c{
zX2W<7+#J?$n7=r${44={8{*mZ6LuCPzt!T01*CrZRBb)A44}f~m?n%Q^Yt2aT}?Ti
z#~M5)0bMl6Oi0kmeJ)Opo|BbDc3=P|naL*|Lb|^uMTaqwkdkmQeW^r7?#D=!`!rVB
z8dU+fx3siWVm{;;O|`S`w&lU&c`l_&p;k}_D&jOksDdBfzwVrzA3wm3f)Yi*d~hs`
zs0sqI1@?MWtH)3F@S&GN=_cWKTss)mgH}UcO6vSzbm~XK<|gp80-QDo$?~Y9S@S}N
zuNWD7fK1?>$NWrBJRBF(jRnyFFBzNAk63W7*<~}mW5=?zwA>H_wkJx&#V1c!RJKpb
z2_RVL219NrgC=U7xLd`C$9)~$3A1tlg={$AEdwN>JNAOIVs9bba+^rn?*GAt4R@@7
z%7dfD%FD|sr04TrLUOYAU0>1U^YaZGFI(saVm`)Xi@BrUy_+cDA|Uet0_|GCilNqN
z<)?bOVo&l3WhqrbbY37eRkmC*kIDL&0YJ@OC&qC<+fCNtG^<5HU*mqe@@&e4M(&{>
zK9Kb9Fp>T>WC+2#Ff%vj^*Dvu*kdf72yJmIhnXxfCL>ipaNwsG6zra!{&k$lrWE$m
zjAMM9x33T5UsEfhrKNQoCZ%#tH{1n^D^Q!BtYn5u*+c3AxS$qufQ70pH}@!{G8+(b
z)(j7GL{BIh$Vy3p`8H@{(4T87`l%G|WiKhcB7&^Kswx`KY4<(cTix?7#Ga#J+61H?
zAK!|8gmm*9geR*M;cuY@_1iRr0_<>;iT-c8Zy*l6aW`CmAr}#N$Fn~Di+%u2g*T^h
zgiTP05K@2s{JG)O;(l{dNJvysk&}c(PI!16?J4TKU^#4+znag?EVF)uwfGB4y$dV_
zcyDc^EI<;weD?2Os)~20l!kNAc<xl)LOumBL@Iqy!V*)hfro^`IyV@{m_k1N$z3$|
zITMz19dRNO11mZUBnlP+&Z?3U8QJb<f*M#OhAY`Cg$}1&2(VBUO*$8^Mvv5&d)gUO
zD=#hWJ78TAMdBgP%p2bB<StIvLv*Y4>#^;S{q2d0q(P_ii7HG;r0JI=@fb-LB|0Z%
zkw$yFHNBdf$^}stxAX7q$?|6lql$MAZh3o)L{k|V&TnjN+^1MF77$E=AJj5KN{@@n
z<@n-eX^nIA<`<<rKmQf0Vu8T#Je+C8{UO<AR@Sj{i^<BFtN>o#YUlgP%7a+}01@ID
zH(4(%Me6kfVhrjp(HLAhrQw@-3*sGIe9rPXi8Y@B^b<a6?c48Gu8fQLx{jXD;sXSe
z4>ZC|896yy2M5EHj}~OZ$SNxAJw3sv1;geD+CW4QhxJQUd|?hd2ZspLhHa4nbmG@m
zR`*opf%${wwwOFrX;u6-c7A1L`*6|=VxL;!aB$q10N!*}1O-XUIhiQ2_{H{E$x!2Y
zsr_W74!h~opqII$%K)tdJ=7mh(dKvKRbWiaO@np7(IJma`0LqUJyWUNzdy2-ImB<U
zKPe`#c;~u7Y9H%t$dW1<<M`B%ls<T~YG*dQx%K;d4}hV~8(0C8t}#kB)Ol5WettfI
zb*F@;!<viFLsFGatoK60kF7{4?j2#DZ~F(fU`$MinuwTCnrfFMbuQel+(}Ndc=SQD
zf{#Ryou9vBLi_!v&RtS??+K5d+E!LoiQ+!z#yUMai`AmrIXK{AXD1Q(*0_(AAc-o%
z6F|pUH<PP?d7ei6&3PvnF@`Yb>a)0Rv=S%1Z_5JBgV$mhtDXx+dwX$>a+0hNqbUx6
zXCyPh#!RC|cWf`n#O)7Xzuj3k)dmO~imyBGm4k|~ygDz=cu+#Z6*wCFUQ}HMzJ%Xk
z|K?5JVik$JNCCRK1Nha79;$~~R6aL*P1<U+;g>1Si}n5~6O)4L!fmB6kw2}CVla~W
z@WF9en-LSP2_>~>n~-c|;bOx$kS_WHXXoQza&o>|MnrcER}^Fj|1LG|fb05`n>As^
zGN9^GLA3jGNSnO&PYKygH2?I?Avz%8`wB(ER*{V5#ZLh6roAV_`OLSa*2xGa_3uxd
z)oo%7T99RsrdOn8WFq|Mhb&$lPa41ioo*Dubqf@GR~Nhue4|*vbPTI@s=&8*BaB=3
z0kVMxSf7_n9vcCNvdn2K9quC#FtO6nLDIHf?c2Nf74PWv9@SA7U~`TB))^cAeeo!?
z{#d2Ym*=G2h7O$#OF1lRJ~cr-GXOywipW1$A9sM(C2ut5@0p6OF0q0j=l%C6J9l$`
z3JWu3TNunV2*L|ayKRXkx1=2&FGgWAmP1(w?FkoSs4?_UOrB+K$!lq`$6i-e53y7D
z{G>DcV1v30WEca@r>v^V>wIUxweW|Y;_%*1hu-Sb^Yt=Ju~jU2h&?H8`3GrFmi0dc
zonpUppb)CG&3r4X@h2Z3W85vQJ6Zlcs_S<DE*?uaDED?cpcG5bIvF!U5|fYW^6?uX
zvMuI)U7qO`hI^NYEHlpX_SB9t!JYheY02kp8Ty8X!QtV#dAA<j{Qn1!?{qr(vEcuC
zFQ-~&u|^yF3mR(X(f3yal6qu6$ozwLRp`sI+0r)UV(3|fg!F8F;I01JlX69lG~K~1
zQMa?RPz%2iwEnI>62(Uezmvt5c6d;~UkN9MWZt->qGEvPOKw5>sEacP^Yqd-;a8y{
zS~3+?c1%fD>d)@)ixEA@@0OMyxl?jJs<OqDh%#`*2>L=S3UR;a_(ZI*w?h%P{&3Y8
zdB)})2Wu7*Zr({#q}?Z8>!pjDwvJ<vQ|G*ujAM+RteHa_!lk3~ryQ4rCE9cjQE?8Z
zZ4<vfh*#ZY8@WL47N0PaH*U6I>ib7qRN83zH#8R;e#VOR@838Taj!7QP-4=xz4c5H
zOva3f_91DGO8h@YVoVyF&p=54$6r@}|EL*i{N4O^GIVXt_!rvR6BF7Rd+*v1uPN3>
zhU$NISHX0{=WO2nb6)TN3pn>{j*KBFuw99@aPYMLO3%yNJ3S4;x8NxRpb=P*YK_sO
zEcmW0<?jDs0r6VhLupT*V$GLB2C7Ep0DzxdZ$jiUEc}m6jkCXp*VkKVYa`Q-IXZIn
z_`+YHO7qH?Zp5M@DarEHE7iCAP{?-NEwFrRukT(nhDY^#Lp=At`$@Xo?Ut+-G}#mS
zo(=6&Q(@*GEok=T_7&Vs-ZylGB*3sc?>Y2UixU+@tOEsVAuxl2hM6Ys!!wLWgAzR}
zbpGW`u7QufEvAh*UJ4Tm*s3`5hkTP$IwOeLRCG|HFH<7I5vzbZSw%#oG$tk+Dl-Hg
zS3m*R!9*oG$PT_WHWsC6WAZ8rd`4+EJ!ftF((l7zmM(}ZXfHYJX^bLb<)Ub8YT7+P
zI^v1AW0k{~{1BJyD|*5(6WHbbsf~d_v$N_(?f1$`OPk$e=)unZG0gj6co-UJCgl9a
zD>;mknwmwk*m=2!rlhOht%OPY7Qo@ZCMIMo)>?yxAf8J>Ufyc-YnYEuN?i~PJAgQk
z^k-TiAfI6$^_?AIXz+al`M(l`IPEXl3Lck>8iC7C;M&c7wS7%pPDD{pT@IKULJj>%
zz`8xO)7CZ!=;zese>%J4isWTv5_oKT#!6bqDf$5#WKOTIV}{{i|0g6+>WI9pbK?d-
z1S@5J7!K<Ky+KoRGB@>;cL1~;aoq2J#{)e!Ihj1~*9*I1+ASAeJRKIkEP18#A$gy7
zybgX!xXpm!`86wJjoki!Mi;L{Xiv$CIc<pFtu~$;CuSQDRPUtlvw~_0TuU7CwF4(+
zBdHhy(1~cj3}#Bkz5CBg4jQ{uK3uw9NN#)6|49duy5F07c?rD|KS_q+?m$luBLzkG
zREpkk0TR}oezQjDm8E^s%hl|r8f7v@3M?7Zk<Twx9(y-*c_P}poRMn#V@#pX&!wf&
z(a|@@O6vD@3gY86V`Qk*(8y?L@Ka@Sv$CWy1qG9&up1h5^YCPbN=j_&-JGIwY%?BU
z{p4U~7WM?AuR>K5v;zKl_F&JiRKYv<$)!&^&TAr({UYK*Q8Q}%FJfV{$U#rHl6vJn
z(%*jstPm3S?Nykhi=5pSNx!HG-d|W=W_zQrchX!lPa?N)PAR09$-kd6P5RiPVq$t)
zT~Q}0o1Rdg`uA2-3*X!NJlfH))o$aVoL(Me(2p@+x36nFVG;|o`rNO_o}ELw*22-u
zQGj2?!QNhFNr~_s4t9ouQXD)y@?Em6who%uu{+OUHwtb|Uwepipm0i@jQ@U#d(&W{
z-5Q{(A*YZA1zH_p`ZX=TVnb?qS3{s8{~IQ3CJA{BfK3$ESZSI4{6f_FMu-H;!O;;6
z2fn+n8V>X(d4bZS2wg7+2k#d+cU{2DM5I~3Zm|`<v*-_P7ffD&l#5#66a4kDhbHA`
zQFF!kN|8Vcpn2$Jt>QAoE*za65D~v_Z_ao*(hP=*nd_UNM!$ZS78BoWDG&sP7dE}3
z1OOzMc17=Gn9=gL{qI8Bsy`xIuC3+%#A6#eM|KZ{tci(<mCie;$-EQ_Fzf);&E%j8
zY(1+X>UatWT)+(W?L+6mvYxs88%?KD5mj?>++<40%PV704$ww9VC0~}{P)&#IIY&s
zioEI*W3tQ3%R!&B;Q1OlP{?i!t&wU_<-(bmd-e2e9mypD_B!C0le;ZYDME^hzV%lb
zU1F%@fP(9>S#9pU#(08p;J|>DxEnbD8a~p4?A%;{tJr90(1dL24;0eFyq9DUV>&Uh
zijP2zv?h#BSItY>?0RKw{k00hT=12iK&%<AY8(@<=Dtc*{3X9HAR4J0t3mxjSB8LG
zFZ}sZbx9@n2h7@`(cV5h+}qtvVO>~-n35g=+j%j4{SaX0Jx@8!3Rf7qfrM<x>Jnqq
zs51;>CE&@`UmWspHD2Aw$v$Cvf$VWO{%7#5vho9MP$_2r{BXH{Fp384fW3p&qx%EE
zS&}#A@>6?yzMTo^yirlH8*JhS*MGbOsG=|I`vs{23sP1k2_AD=K!OZO-GRE2)+6(u
zzVDyV(3lSA4IKZs9HsD7IbZeabae9g%~I_aUivc<5|XRU+A^3l{rUU1)_Erq67?Pl
zdEyj;al`V6#ue9f%vGvZqvr*P&K8SK+S}UbVldZY{rvpQ$hf)jhh*a}w@?4t)Sd6j
zLWg~}np*)1N#LZ?fK<~Ujc#!o44l?0Ms*<}6NLCz&>^<M1tfdEf4$TK^A7VOC!dp6
zOJi47dewx>P@(yoZTv|cg~bbG-UTqW2~fg~PW4zXX|k!?;iCo;JhX)d5)#O<FN<fB
zii?X=J+-Y&Ot@Tju^;pK{#jZgnC|*!y8wVCL?(N$!osrp{cQ)L2k!W0bNZQ`0%qQy
z!f*QPv&MEY5K)0H38MQw-@D=05IA{;cF+EM#Rg@Z6Zrz{2AKM}c!Cb)nQC;Z-VmrK
z!E+LhW{<1Oi`ZDyll<-NH|81O^Kr*!XXh>i+yTl53)TCr>BDtQ!)Xv4pxZPL41i={
zXD)yQM3)DULJ{xtI)A`S#&Qi-n6o1!Z6b7mM3A&ldOe^bFPM_MdfW`_MoJ@?9HlSm
zsEH=koxWF+FxpE)4j61=V!7Ni=Rlw~Nqrg)nXHOOS};g77a=aJQj~RC(WUFd&2_7d
zhb5XJ8LkT^pp!6i2`=?d0#?G#<j9ElVHX1n0AIR@$&%8Be;I#E6?)bw%GS5{Zf@}!
zBUTgW`4M4Va(ZNdk8JF6+>Cii+`0wHyO@Og4<8t{1^YH$9G(G`3U?gwg9qLL5fSY7
zSc(*Bix)xQW!ldy=Goob3%0EB=bs^>@nmmca35IIOD7O|0Bds?6b(<p_+BN*`}sLM
zi%W!YB+MUV?H@dNARr)ct??K!<nb#jFNYc1m(Mufg!k$eoM&XaeXSkIS!Gq(tL#D*
zEnU@iABzZr|HvI*5F*3n`o_ryoEW^qK763J{{l+a3d<`RAt2P|?jyLjn859W$7l+E
zfG`J$T`BUq=!UZlTF8YwT8ML(1<dnY6$}|*xZ`)z1VUO%jfJ}QN@5_v0Zbjy(5@Cp
zY+}cwqoRg@>_6jT>IgyQu*9JGI)nwa1tWRLwYomQEU4%(X>nq!tLc%Ok#BGDOgp99
z>!gd(<Db<|EA&`U7T|MfyL%PLJ4Dkoo^84*;e2ndXyk_%!4_|38|4GN6Btn}r9vDl
zv0zOm>QPnW#ng<@Y&Xjvh4?4wJrWQZb3Wx1!jX8+Y3WJG^?C);k(Y9p`>$>iK)A^f
z2<#ZbP$*7jeX2p`0(AVEx2t^m&%BHhwM!S>7*F<x*h_waRO9KzK6Z{UqNdfx_%p-B
z^$QRl!Y~QNmUl;lTi+@w)Ph#g*hTBNlGJRNTb7Fl5@mdTN_|l$awep!PD>;G-)trN
z%a{7i3mRlhPr37xu0gv_$Per3fngDw-AQyb4urLtyMjN0O!n^foKQQpTD~gPG|4<*
z^P1g|2zi{dEkZ>}so!C-y+J7rQmDehD5wkPj>uVAv)LZM5D<9wGlY#T8l>`p^vE5x
zQ7Qu-8QlVlvMmUu)X1z-DDE|J#ZHaBqPDg$4VjdVZe&8+z|ztPXccvhQ=@z&Lo2ff
zYy7EO<L914sTt2Szh3GA`9^&SS7de4r^YGi`~KwxN+{if*dOqxA9EZ-`7o9ve+Gx0
zKGe7kUZ9)+3B($+;>6TVXw41=^%Lahdf})yAw*CB3$U|P-r$4)0pcUJCe7!W?aO(c
zb~mON6xl*7ix6MG$L`_>-~EfLcXNb?3O=A3pu;Ad@w&PIK}%al2e%C|k3q99s9nC4
zmq-+Tp)0Te8YSl=_|J#~ryGteE}7VEoV!4ufH4m|BUC>sq4^^2?aP7@1gUs^{SgYv
zJ_j7de((RI4&w_Mw0-+|e2yp#wea;l?J|iBw^@%YVLHX=s_ukh5zT%iGEO;Qw4kFP
zktykDEJ&6_-$g6OLfZ>5b7l#46(yAY1q^bfpDzo0?2?o3s-2MYRSu+ZltsT*Qlyn@
z{{7iZZXk!*FMayx3zK-;VA>ON($60N`$rt)7Bs7`2u(+LI6JnQMHuMFQ48?1j!kn$
zR?^utgi*flas{6~zSs)jW~zxDQ`HffsM-89?94ln_l&llmN7*o<@+@xzC@mqD4UC=
z+~)tjc$${@d#IkQK#y?qu!S^EG*Eg<GLKt*tJbq>ZhGJf#wH-RY+d3Q_vCyI<op!S
zmc~pbn3X1<t90M-9o&RYOyf8<rM=Ewz=;N11Oeo(Yru7>N+#e(3c`2UXhEqQ4#J|H
zs`a`nQ?+tbrJ#E=uR#X|UvCL;?*Ky#Jov!z;U1$&Gf&4WDO`Wu;0EoJ0Ysr07)W>%
zSVXFnty`_F(en<?1!y**ey;=&4O4Xy+rRcPrgKb5Ldg!A-o9QnSmxbT>o_AKUA_X1
zxer#SUl0F(k)rz%5uxb5B5rPYbSTS9`6?=E@I>3Aw;%);k*K}*Clh>t65`|YROwlV
zrl%WV%-frI8;*%exOzaJfVQwLmbx$1BKkrzo|kWez@<zHmL@rQ<U=<jS6*zHKQrp;
ze*Q&&diweR=05;6DBPl;qk8@NHRM$;FD>~6IK!hKEC_@^;~#L#&CbDn3DKdiKtXrj
zhZTf6^}kPsvK?7u=ZU{`?v%gHI8cK#z%022m_`sT2ZRG@X=(ZxnM}W$jNw4P*oq3+
zl(ldJK<x$IQOC`|z&TqllUPS%ClgdGNea7evLm3A?HcdjX5xoincMB~wdzfnE`&aM
z2;n{;?r>*q6{%1MRV6Vw$He5MQ4HLRz{f>|cLPZsTSEUo(kAO?h%!i3N#b_%gEGCH
zvTexJuG{Tm01a*(h}>LVU4xX0#j3SsvIob<$NT$jj<@IZJWrP3J%(w;8N9oGpm~N}
z7`_tI#|Ge-0I@u&oR$!GR;##!y+qU2TvsO`*5q|{HuEC@j(H|~rgh?fOtt$;x1()I
zM2rSWV}-4-%!}c90032_3E<iRs8-VGI08+=e*YsxiHR+}qQ#0OD9?H?k(rU9>#`IB
z4-x{bso2?7R0#=%Ri<j4B+JZx$4?HiBjz&j6{C?4*A+oY){e+riqkX!w8>wW#D&2P
z?w?<PPOTh-rz%s6m6<(q5HV=YPOoz;Z<;@Qe*KBCQlW?-nPc%jp^?m1FXT+T$yf>g
z9!^Kp;F<JgF(#ueU6`X#Q4>*l0t<$!mvL`6bv!M-i64T_z|hCs(voQk-S7J22~`y#
zWn@A(^t86tRgWF)>-z;n-}GX{imG`l4bibfLqp=Y&&t4OVXPHYz4|sbEdAWcr}1}*
zaQ<JMK#c1L1`hTN^gJ7VeawV6hg&jB%E~eU$IYDrrjrpsWI#|2ZEO*%PSfJ}Ag?d#
z%1;qk{u6V6Xn<ybUFn+yi}BHQxx^OfNy@nMO1l6(17l%x)5Ks$QppyU2Kb7|WGkx@
zT>sC_fftN>bOjwh*$0F;3DHmK&;CPvx)H3GICo_E!<b><)1?eTiPb(Zn`A^~qobqq
z@Am1p1c3{VR{==6`UQ_3c@k+p4l}|Y!{W+4!eJ-F{WCwGrE1bmL5%oS_akl?>#-Fu
zVZx#O+QHH%-eu)y`uFeO*;xKRRb6=?)N2>+BH0O(Z3vU4k*sCSIw)LO#&RtUSyQ5r
zofI_`Nrvou%}m{kPg3@+38}0Vw`|!f8K&&bcV_zj`TS{&cjo<__q^vk=Q+<g5NE^a
zgjXu!yngK(Nb00l`#;-zfkmQYPIQfE%>XhMYQ8Eno)^Y<3nd^fY9+6t!cbQa?tzi>
zz<wZM(O$?dlV%+#y8vs^m)(T<ZcI&~&)tkvQ=H?YV_*0Dem}a=1TZNVTU+Rhwd9{&
z`w9W>xnP6R!?nqv?*>HDdZIv?4N(tA!a^KR5aX!fJaYZ@;y0rd{*->_0q;>Y=ELr#
zNehT?{47zNE&ASlnfOUeh{J2DBN?CEodi*3lfDqbL^Crd$3N18@kuf(l|4(I9wts1
z;|Sx?SN1SnPv`9|KChG^d?++}Q|^o>%9i$@(MBia+LGY}z_J%O@|7-W;VrR+g-H<x
zhsb})>##FgeWaycU=W^U1Dr5N+T&_MHcwg-*Az%msLAlF-pkERF~V2-`*5>gxoT!Y
zzV!71X5{V6OG$p8vOr4teIkqXzi-o;)#5IJA_$N?{QPDEjJMQFBemOj&`FG~bNaoq
z5T;Jhph!*QJl3`?#zVkS3mKukW$oxT37F?@q_B|VRZf1S>Z6dTez0l)^VZJ@Q~Gz+
zOKFlF>iY=o^3|mP^+Gr~4=Qe}MV`}O?;ui-rJm4SxhV>CPUsS$LUEf*_OoVm_lB$1
z{#>qfy-iVJLL0;_4^|ZA$$K0mwKFd}bIit$fK+O-iQTvn$6#`~q9BB2LzLU>DSs*w
zMmf%vo2T({bMte5i3C}UzPH`o_x09y5lT*+4sEZtVA<`BjUS6cRi-zqvz4zOP~Q5d
zuMU{d>!bd~Fvrl@mQ_CPP;Sn{0~l;`$j98LPZ`VSQ5nk%NokioF$(C@qCtx{lwxcf
zg=TMB<5wp^ye$>`*IdU3jJ^Fd+%QnE+uZ)%2=UF!w3w#q>i(XdMM~OvV1U<5?P{`<
zvxMZWT>+y8rcse@_*sx&fJUACV_!xf>+4%dg&Z{+R04pkdYD+6X^?NHcqBA5tyw{V
zxh2TB2V~_HBYASXergK34ZAPBYX`iXS`(Z7f#VE)u`odqd0Q#WwaZ~)!;<t`?XR=Y
z+z2eDaQ|tUrI?dp0SdahuA(#3)7MNs7U+E6+}?&A;gLB01h`Gma!o{DSrAAU_pZO_
zQS$-X^L}l;7a5QI{2HpwWuyC1=6sU6!y_Z%OT!Q2cYin!i~9FPZUO73r`H~O4XuKO
zpqx~o;lErzakN0qy8$k<s;ak>?bqQlt_zu}XWR!Muxh6|9H0rAZ)XQwf1q#zG7_eI
z!0_Xln+(?uU!pNGOS0t3QK*CGpEJ}^t9H3^<)7giCF_d^J#7Adlhg7YjVHR!%s^|H
zKJx3J$e7Yju`F10UI){n!za6YBmU*|0GHNjBP}xe;e)7)$JU@Hb@R*nDkzw#PBUiu
z@jgzcd;=w#Aq}9(rn=yDfb(=BIxGi$k4mN5Bb&n(S1V4PuBfbRU3=pO=mw<H{Q7dA
zP%t-ec7rMeed1B8J*4h?4B)0I>ejduh#e*82s#>n%7s#d1t$%1Rg;(@vr7BJuPrVK
zrp?0u$KVO6ptEnX4&N(|x%i;u23O&}VsRH&S06t=PFeC%?dgz@Qwtg+FZ}c~QpjR=
z&X#eheoI7I@+47kkvj1^ku$O}+g$HlGB_(&OA<>h2eeJRAKL84#p@VqJ^=*w6C=x~
zR&iIk)UezN`cS<LYI@sSUqJJ#xpBF+I~Zu8bCo$~-0PPUBERuT=@aXteS9j4i;K%Y
z7qhEFvHWfkI%oo#)c-8f7Zchz5zsGf%uApdX22aY1PyK1@Z_Sf$5YQVzL5?w{6{Bq
zx8o=AmwD0UG0j9xHQ!$0898X9?=&-Eg&KD}TylfU7w`BDYyfXETLl-t>^=iLvAN~(
zjf3>a(7}oxd_sfOS*@`roIhx^EGfXjEY?RsL6cO5kM{HQlwK_zzwz-?J^-vsa#N5U
zEgm+;>Mkw?EiMU5NGQc(G7Ae)cp`dAv9sm|%BIDYa%jR}8eCEk(<OyXy13<kZM&Pb
zpM%$#+pZ;Mu`&mXCO|7LQJ{0Zz^E3Q??12|Ppa1PrqE!TBcMxe5J@$`RO)4$K+W!(
z2~EgoISaOcsD>_QWqo~X5_Tz#R|tVfo{-eL@kO~$q9{{pF#x0GpeRh7^!M?h8p@QB
zuYcyY5KBLXyfipp{=dU2#W<`+1|c)6p1fF&A19wLz@vHF(?eZfj|dM($S1Q891*8a
z-(uwZ1aFum@ESAV@+hI9FwVtgAEqlQiEVKTGC;FaF>ZNql%{-l-?xruikL>N06b-;
zGXQACSnk^VL7sSroukRO@rUBj=RmuOp;9BftI&1J5l?1GKZ3+*_l7*4!fW*8Ec!A`
z><@;C5eHdcerV)4(0T^@^Vjxwet-o*d<cL@jPdFF*UHOLnIFJ)gCfn=`_`6?@tDxH
zwKWLX5@vg6pNAT@Ilwv%G3vnG^L-T$8rj1Yr-W)G0Ds><JJ1w0>5Pj@;Y~xPw0dKq
z$OEju!J#1l3}lr1K}Qotl*`Dn@7?QVx|#|x`IPeJY!0s43TT&X$FPHHhvU$s-HDTg
z{9Abjsq=hKpCXz{^6+7^aPH|QGF*TEjd=IY%=A(2&ow)S4oE7)O<xVv4xuR}Ar!9w
zZ}%tMGTN~lAwd5Vn88$*?$-<lK_|^y6s?Qy;O*<z$MZEJSG*x0zmt(MIT8OaDZ(xQ
zXrsW06L<@XU_svAdNDs6%L)K_{0S78!-UaVzh)S?d2n-E3j}TaFL*>>`L&}0O1jW7
z8T_W;IlL@eHM_k0YrT~oG}}7@o?T?Py2qIu(Aw---uxXVEYNO0d&agyp__~U`Nypu
z4CP)6-&Jo5gY*#VsqT&eM+9Bc5;|;h1(?s~7wf~j<8?XF7AIkwjg5^118>yV-yCO&
z76MH~n0^@#ggh_^LS7yk4TE(NBgZS+fhHZbG+dUidon@w3hL-lzSE_$3axAnLJ*>X
zqQPKi6o|P30s}kXw*D&3yd|VN$;l~IFc?>EPpW7?M=Obj8xYFyLRdZMEN*PjCFpF}
z|1N;4lD1t36R)S24g~aTtw<bn2rNcmeDoJNC^E?jn^YBzcq_U{-by}A4o;yDnql@O
zdHhIk6*1)@K(S$njQ{JrAKj=sCDz4v6W@AXel@~kud?a}{#Yw$ENN_#XjdLq{K9H-
ze%^Vk0fr}ts-2yARP|;FG}OYvXb}@}6Xh1`sl4Id((eiP+1u@{1WxRHG}d*mtWqlp
zo=iaPC}1~0a0PY$MAGN(9hpsf2U+iqFc`aal7*VxUMxM)p`ELA`D{Zdh+~Y$t$Vn+
zx%ogj<xr*lIqM@BVa)xoh={j+eO-yV5zFq2u757_zuT?-F}Gk7OW&PN<`w~R|4?UV
z`RQT{gRKSA<}c2VXcLlT$G~b6#l|YrtveQZ*~NkwEZ3%?{yCGagqpj2b{_CN9eJ3~
zlf?S6E73L&CQS^$$p8-7jf$Mi%(B73fK$aUPu>-ITn7x-3<(qpg^Q)W0FJnm%6Bm_
z4m!=5K#O*qZ#94dv#GRjf`KB?hA~+APjr#+d8`8PT?y?BZ%p27QyY!o_#stx{22(2
z7AO4DF*Iz2f<7qD1=fkz2=FKW6t|i&N;XOS8~n2*Kk$RKqE>x|In8SB`%C{)6R=MS
zJSCk)HIyo|B=gd*u0g25!w4{KPwY##OH@@>hWO57Oa{eT+W#C+17wf*3y!feh{7o;
zacf8-k$_0L!q)=?2n=)aj5J!5gLJu{Iz27u;f_3iTAJAfN-pe`!alGY=x_E53~wP2
zOtNrp%65Yf)vW`t2xeH__&cnwNI2LbXcctez#O21UbfV=;7-Rz_4CmPgHnINfJw%m
z?u}t#WD|CO_4T^5_>X|X7|?V8mlM5|8RYqgH+zp-OI*>i!=;5v!0RA!koq0?tD^<-
z^7A3YsI2r|c>O+Kb&fQ6+>896_aoa#FeAtCjgMir{^2pXiMB@<PRZqTbqSMfT*f*o
z>!f*}2KzY7jvYOwxsbb1d>Q9k#Z0Zx4x`t5@i)y(^z`xz3O*(!`9P~zL8y{&b_4fG
zZ;EhnhKN9dlr!c2S<ev!4{6-!p*>TDXH3Zq0bmuAG_rrc7%9n!m^0heNvmuQ85Y-3
zRXJUl{h%SCb!F<?iGzyq^PFBEm2u*T#vidYxe3<dE@oL$!np!VN=>x@asM9!1^!tN
z5sC%FJ-Gr36B`~7Y16%sM>O^UHOJRnuTvxKIcuq>^y5|r^yD~~0qGn3RJ<Zunae?R
z4WP>4W(3tpu@@&Xe12l($rRpY+LTp;6rVBfZqC3$Wy`n}bp#I3*-Lh84ZgKhg|-LG
zYIw<gNs==-5^6BQADh4gyU-7i2$PiMYPA>ssfKqBqEsAQ)i3zaJ}oJ^O9}JvFjvLM
z)dXNKaEPT$$$C*sF}z1qZr}1@^5@{?5z<$QAqhY2QZX?~s>->NzZh#n?|n*{mAR6`
zA>m4#3R&-Eq`ACl_CDr{cr+;%(P2rcy<8W(Gsm<hJds6;2j{M-3^IRF4DCR)x6j@F
zw%X{rcJ-V02F|}+L3VOx%rd_gd@t3X6dEE%F}3nP)2OWMXD_%6nYJq{i`s>NLYOs8
z%y_tatR!*A$*<5hOMzEi@izh?=Cr&mU}^c7E!#;#Gj@bX6^T{<%rH?PIQ7#(?VL_0
jzq4g%4YD&n1nZvb?thG9UC!^qZ}yxrv%&mh;(6`A+<lL(

diff --git a/screenshot-08-after-exclude-sources.png b/screenshot-08-after-exclude-sources.png
deleted file mode 100644
index c25c1175df1e8b88b20b67a6a8c6e6cdced44331..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 107117
zcmeFZWn0wI+6PK^cSwqWl%#ZbcS?6R(jwj6DBTSr9ZGk1OG<a=S?+!I^AXOgGuP<l
zz{G!6-1o1R;YtdUs7ORe5D*Zk(o$k75D+jm;Ex>w6!^)|7QGb&1O|k(n6R41_oGZ$
zEnIoxkkAvX_mJYS$_zM1_D3ftC-#D^;0FEa=tK;LSUm3JC7VC+@E#o%9@g{JW+Q`*
z7u;Iwc*onYhm@6-qsX1#t*v$J?iNLnBLw`rJJUz}@1F<(1IcmZRR8@scu@HNKNu*a
ztz)2O3hC`-g?(3)v{Ov^-_Z#>lJfE4drL)2OItG%kIcq)nVtfrT{^Y7*gqVhpPl|$
z*j$HQK`+tjfLWYX8Vg1k1KgVf7Z#c(CME_3O7`{$rh?=sZPnD0W@psufBsBLnxa8*
zwlg=Uo}LoHL+YCM##t9oMwvD<dKn?t%9RdW$iaa1)w^G5+uPeaJ9E_2)06o3p5VTS
zLYp!%QS<w^AtR%_o*s$1dNKpY#WqeHqq1^IpQMMU=i&Z7xyw`nV>2HcTZ)wxO*zWv
zc;S)jc##q`<XK}Qo+G`mfbzz?1ZN*H_F<~WTQbYl7Q2@x*vbl|*(yEvn<H+pbdJz3
z_9ox*^9QzhM(gRV%RGM2Z9;e{R?L>>2#Je}o3CDnfq|)E|FfsnVLCV^w`QvR^S{>z
zV|~`yNm0`IEp2;tem>YPbcP)M{_BcR7P&>7ps+AS>CyuRM5nWhxjFgtl(+_BR|&$N
zP_QFO2&3GmJF?uKq-1T^H^V5Q=w$ore!nX}H6F~A&eq$^R~!6d()sBzQ!;rJ3yr<A
zH)*03;^@?@Q>wDF)vw4*>1i)x_}?qwMzSA^h>BumWmVHC(q>P9;|_fC*Ms*=4rtp*
z4>wFoXBbUS(f=WXL1)F>t#Te0z>FSZh4{HE&vVOIyQmLC!1KcN><<MsHML?E-&(u(
zd<5>WuAaesm7e!})vC>Wm5E=9&;5mP)f+CyI85!|Pxr_~oc3OqyNv&xqxk%=$Vg-q
zl#k34CSum)sd1VEwcAii=G4@)a<U(^DG~DX(*uy`HTkQ8Oxns=hBe7MH21aY3Gi@o
zFz~y&0<~R39z0GK>o_SXji-xH&CQEeB$bt&hEwD{FLzg4+=y?}Sxn4pjo+=TuC}`F
z>*NS^wzwTStTajUU@0n&vzYXyFdk|()u49y+@1M9^73Z)`fFC}>(v<M=9}DOy_1no
zXXOZvvR`dc@9^1GEmlBALNb=N5Mj>~fkMJ#SZQ{_ucd#l5_Z|e;&X@a{rvLpxTEOa
z_&3g9pO0Jc@a_-i-CI5%XUN%(XYrS-7VEz}Y1l0{xH~z;uhsj#LV9c(6LVO%Iq%Tz
z&joBxkwY_e4wmKyigI%{x-$?%aD=U-aXEDbA#M>0o1zQ&-0dA5eb<F|YtyPS_;vnp
zeJHpRm<dYNfPD@%9u`(nVWISH#m}$0BKj2l2|wMH&8ek_(o^CQ(x1+_D(?=eL@EgB
zHQrX`xV6RT`)JoU4H2EoL@>~W_}*$v3=^N;3bD{8?Bm67Hb!V_$Y@?2oo~_b@bJu*
zYo^|eB+@7r%HUGC<ygDAxj{ogb@*N$t+f|7G<;reup7(%#r*k*3l}#zi{G2v5!}9g
zwBzUhRc|>7rR{mOH>p#9z~|vOJ}^Mb$M*)_ez^e}sZu2PBFu5NY&MLFTOJD=o6T&f
zKsXQ%43x!27i>5*3JH(xddIVRnVS7{(RH)SUkWaxS=*JS_(0J`kzk~DzgN;yyZI_q
zg-&QPK93UV#J<@wb$+)4*E(}Xh3{M%b>{M<xCyJZCVyGYj_m9r$&EPeSNQzanq94o
zV8|=-MMF^PYisu>a-Rd?(J7SL+uJS1vyz>O3Z@A$F&8_0;or3Sy>?KF+b*o{W-AAx
zlkzpW?hmDY$Ue8!mbIM7>FDSX820k<^>sg5cz>)~t-qS^PL>)C5%uzHL)0qUs5``b
z+5IGjgxAOSxv5n#TcD+dC%jwAptZT#^YP|5jjzeMx6o?Z+~XLGvHq_w>R$7OvZ?SW
z1b4^FoG*3Y^^!4fjKMY)vxg;%92k(|=g+ufuC%l)fro?Z?YDVHN+^|{{^q@@4qV))
z(bK>5!J6(kfv8$xJjgFaX&?N)N9eT0G%!cXnSK}16>AGuZd(>Eba%iNxzav^pKFn?
z2sYvoV_aG_=<v~Quubnt)yoq@3@ZU;D?+DMDL0_?Gh%YrdsS-93N6pg9%;SS&%zw;
z8(rcKYfV}FhbX9nR2l+Wvv?o$e;9W9e91{o1(%PXl$1m*pP|*}A-y-aZ7OYQs#dH(
z(rCNb;(3|Eq{ov=r!M1l8jOse+k;`a+EQ=K3KsF}{bhfV{I}om5?$JL<~MtjB=+B7
zH9D-Oi(*LmBM|BAr3z)#!Mi#?e(plx@$>UTD0q2(>|Aa4z70VomjCt<Is%i(qbDq0
zJOZcLX{)8Bh3KZiW*(BKLA^Z143q*2)FvTP7hBtZoA7j{xz(uK%M$LU@t$*ryx`A7
zZg;kzAJbNKaj~G+)j($;yp^S8SXORsZnb{<rv0Z+pZNK?ufp!mx8RSKrvzw8c->E=
z-Z*y!g)h82X0x35ZA*_p#_#pR^V0m}BL_!sT_)E^tx12c4VmDVH;LHzAN04Q9b?G^
zU+yn0*4jLqe?<<@&Q&h|#`zE;=7RP1AI@O8)9>l&DJv^urnDokjx!n5MtIMbNEIwM
z4B>ppN`y5cg0dMbAM07pqPKc?W(m6hQ9qmB;nkLcq^fLa@1RvvWjbwg;=i9*S2K`1
zS6EdQ?}2}df{cvs>ven5OTs+xTMPnwbh**~&hvE5*YtZv#(@dq#GD*K#$Bt(N}jk2
zQ;OlIuj0XE$y8zRQ?B<Hg^saA91^=<R(|=By@sL?j`-!JpidHDVQn59WN^{#!BfZA
z^Qki{Q}T&H>4<qiP=(7%QkU8<EiVgt-^e9g&<x<|GH3=Su%RV<e-_r6`g#|NN{m*w
z0m|jJnbaVadbx%X_ji8po4N9N@>(Joe}Bm7BKgya+_$bxd-uDe-!eFCE|2FbD~Q-U
zccWaSq)MXxwz{9NS~Gup`<z6|@5M04Or!9WRbFbh{83K9^>A*qs|)HKW{R{jY5+7m
znj=R^Nr_gm!ZCR2Z?q9G#$hW+)fg8#ly9ftE@VbHtzJ<q%x7kaH~U_c6NZ0AQE;k$
z4YzBH`S6HYicvOPhJ!POS3R(~nVz?eMn_jS!Ca)47Ti~><O?@xnUmcyV`FWN$7uby
z*&Er@+C&o-ny2Uw1#7xuZ|@L^-{^g{hq+R3JsU6ZwACM*_i0HWzq}lqn7CU7CZrP*
z`k`98?lWkPd5frRU!I9xk?|O49~^JXHLD}>KQLh<qOXAFN$5u_N=%%KUK}1?nvs!l
zg}Wi*<Ku(zDZyd`vnT^@A^!8}S~r!Ob_#!qPCea7ATt(gr$_Q-RM3QGARH>*vABn&
zQ9YA#9#=tXT^-x)FOT!7yK`)?S$kf{EwQ;hFAAchkN<SOnX9XH-jPu<Gx+r-`0-+A
zSXj7|wOs;~_bR>CvDMxP+`76t6X!gw+Ptc&YNK*acJ`#3Uv7sV-Dj!|UiT)u{{iHI
z>w?+<0l$}k+tc-8B9vrKwP-CSa&BY_S(-2PL^6j$$ApPLixrJuX%`((a*@gncpJ3B
z0$Qlql*41Aj9HKntuds7S=CgG%!qq>zi61sR3wS}?DOq+K)}Pp?=gjE-Rq4<hK04c
zpOTh^_x1JV{cUtu7pLgyztPg!wMby{1Qo2=?={QyXL^z-Xj432o_dZJUBv3B9t%Z&
z`Mv5lIU1d8?d<fv7?ehAkAEmQ-W@&kyd;u-Bqn@EK<VStW`u~td*S=~BCo27jH^oe
zEp^`gJnnSeFZ&&%)k2Hga1`OId?rt&aW4`x-w#`ed4Fy-?3?{*MYTXs6}6k4gG;vg
z`PMjX7s4XbuMat+NO=2tdbV4?rh0I#+(nCCY!5;oV`5@<KFiC?7cTcXl6l^1YHD&a
zGfQzxW4yM>9{5AUo55`4iXsMJyo+p1ra~Os+26mvE~kk|OIG*q+36i0kNs2!z;Lt3
z<Nf7d0Qf2@E3s)5QAR$fUiJ5GCNvXMbKxda@r06N8(w{Cu;or%XdM5}JzZ-8zYoD2
zlvm*B{_W$BU10-*b<l}Q%gXTHtH8XP-AIUwQ$V<H$xL<xs`7bVElf>yO--?K5%gUf
zQomO+H#avnL`O&eg241W^@A=e8VV|Ea*WJ_n7_Zjk&)2~ql*P1*ju_#Wif0PW7eSm
zmQh%YW<*nu;W1{^xnkkthay2($8voy%ufAaKqMP??)UO^e}9QD5lfovJAydnSZ+v~
zT35zVex5xMTE<a!o=r%;yBN8EPL_<M!=kRfLpdk+UY;$d=lLw=@*!8Zg=&~$;8?%R
zy5<Za80z61Pv?B7jDc1{IKEdhl&u;cNl<{U#-k{I6iKV6u>yy;#Ml;lI7%*YsZ3p#
z&j(CaqW+ZcKwR#G2Wzrm?J~iET?t2?NFPT*em-=W+s1|w0FVn&(a}u0O<x}fhhcPd
zbRzK>gX)hba@TMCf0zxkmg?J;6l8HZVVNbMb8O>^DRZCw25seUY1hr4PT!egaoDgp
zfFpM7?*x4xP$Xzfd#mf-;E#ivpiDh;It=zMHD(?_>ProF^wv-OUROwHXy%L1dqVa!
zBie@;Yrp)mKbZ+PJMR?ClGExoO*~v9M&|z^@qM^TUszb^3btEnd}Xu>K_h|7MkC?r
z^gWodYPxT5`Fl!ej7BD)QWD2;3u>@#S!tO*{|4&b<|b4o^#l0H$f*1tCaSPXq0G)U
z+Ip>tWU0yx=$DmxtqS2-@1mpSAFmHTAkirF$7FhXO*CO(VMSnN2>w!!CaPy(L{=+N
z+JCqvmWH!me|epG-@&wb9T7-}o#<Sx%(s#EspZ$+@v{5Dtj*UewMw0KpZf@~z2>V=
zsa#T8-A}_2zj{exqgUnGuX;t|Bd>O8R_VSw>5UFFifirdHnQ*a?fiVa#L?9I8#K!#
zX)2X2cMjWyv>9>$eNKYLO@4Xbj;V37IC?obHAhs}1d2A_o(k4nsn#0rfaag)Z2awi
zS^&*WKPMW|?DFzAGa3<mM)ae_^+q35t}`~De*32$IQaF$^#YDB7w!9-#lG)eQ%KHV
zi!-~?p<Von@s#IPsxw3ERw6{xW-xMl#MV2ATO0|8Ne4zn5Tf%7vB~gYQHyeNde~<-
zMOSggs#K9?qtK^SYbuE>9LS0*ho`t}_g<A-KOeu7#fyEzJ+#(go5|yLvCRTNBWuO+
z=r_)6f#=tv2_bn*%3|03DS+*KpC3kZgrV=*NdXiU=5I9{p6d=l4OVs<&uWj0LB?kq
z*gndLCg$vdI}F;JE|4~n3INDS*sN15(3H>j!F4EU&}YVYXDFE*7jy$?Wb_Ol3<Bzm
z$^8D`U0>PP+r8cQr_9d8m`T4?Rh=|BVFPM<u)lA&)&|>vQ$Y3-7XuA<721sGjE4A?
zTzC?!Nqew?RpkQ_#4ct^RRJOsaNRpQUT*wxB&=}sfo_$O*<nrBiesQuyRI+ky{d<x
zsnwQN0%*RtiU_Ga)5WjzW$HF0Bz6m#)N*M9&@)wf^n=>!rnCkfPdCTBUEST2ln^Z8
z@F9<p&*HKv45h`XS1ZLHKP94x7>}W+@l<w>eC8JKe~yUB$W84ryX?yGSv}DR7=F-i
zvs`XiZFU(m8%i>|fS_U2nZYyjN1XQ757<Ck>~g1Y`P041?EdK!4M87Z0uybX$dji1
z)8SE-YNbO5v*mH);p5KN2eW`e)J8!u^4PC<*#8kHu1QQxY#JUtCRx&LCjMypkB@E}
z?~bH@W4YAR;d1;VluW12$H#Ybye#N>Ax2GOKAOS(`G}x-#Gl4sv&~OJ(4$~7zfNZh
zZt8_@=M7HuWr)Li{#*&9?5h&iyGtLW7M_QG^qPTzwE3zH-rEOG%c4eyR<B`m1{X2?
zHY`??s<{PB2I8M+!!A6+xMoE(J*gA;SEH!CN+ft?)fh$n_8xS2jj_l`W-U4lY*z=f
z*px`uIwjQu0|*1fEG81M#GD#^w(a(-OMs;TT7;-l=6!pz$%=yU1+<6ne4a?wv&^Ii
zdwU~kEbWTfYYfxBr97?=t|uliUa%i7|8zdr=-V&;!2KvKD=VAUru5}b-`Cd{fo-M%
zlN>Zuw}TmpGD8xbT4OUMrMQR)q!IGVzpquX8Q;DsX0RJg<WR(Yo~Tu-@hMZG#w4xb
z6oG&iTL#n`Ks(22;~}d!xQmOv=x<?=b5z^R!=&3>@&l;$a>g$7%6Vd&5FRp4WWCuF
zve0lS9<=_Czs;9Rl;193-778-&}&o#!Q&n~)+lY*bvW->ufY;=x`Rc|fcmF^!+M6x
zU7_Y3DG(EoMc7lrF6xB?A10+4QILAWB#=(}0{uha6vrKyg&*(k?(XkV-*DYMT$i(E
zQUHX0^>pt-Pfu@RVj@tCnaGgA>UQvRx>%8g8#0*NCPgXFvw9MZ1Pg8*zy;+a)8!(0
zn-h=AzIyS<IbGDHrKOKHb2wHKY#2`z$o)}-$a>MN?_46nv4cC|9v<NCFVd~7tf&>B
zBdAVDu-PxYCKDe4IO(^*8fEd2-=LA}oO*6=rb%?gmWs@x0eJL9dg4uNkr6_dnkc0f
z+-|jm=vg>6jq<Y3?HIrzuh>B!KQ@%yZLmeRT-8}9DhcZTv^)o_Vs&*jo=%P7zRUcL
zPiHQTa`*R-c61%NXMi^`9^sv?wd-~G^e)vOo~*UonNmf0h+tRdn{fYh+bjSbTeV28
z)#IG<fSK`A!`<nx*Pr!lG!QD#KajdUOx?GwHK0nveI*x5i*kLVuB^di%;<_2Y)z-F
z+pf+gSd7>Cwm&j}d2=AVrk*&TOhBW7F^|o!$oiP*2TM<X=!hPU=bgt<zargi`5x1!
z9JLa|v%T<KSxuwjMs1@?Bj|eS=xB5Vlq_bBi<REH63gq4jIO&c#c{pq)X^dujQMZI
znJP6NaB|5lMf8k_m1#6sQub|n>4!w&-Y$B~VK*v95wKVTq2YspK>y`4Xf`G$`BZ-=
z(9vVhuAjqo^fcTTMf4_?m*HoJdRmp<-(FuQXVqdLZ49S=hzpZO%ZZ4Neg+KghT4--
zQBjeN4PZl;;<ymqn8wEH=H~Z_*gHe&f7&sSacIwWN6XnsVL7zgz2r|MS|MO^uh!Dp
zEJm|GR5+KGm%HDdR7T*I!@wf)e}8>+kVsg{x_r2{k?aqO?FYogaE|z+E!XS*!2{8c
z%ac{_dK((KO4psC9k9~2cE<c3?w`fJAt(AUpDA@ht_Dcm>1#b%&s9X{!2>RP*c@Fh
z92mlBPj!Wy$!<m20VBs6Z1wzrde(E%<M;ZKoXWw%oWb}(pYKBv;d&*I7MyN@R-j5S
zd9ZN~q(zu5Q$VB8-z@a6g5|z#uJ|3{emr#d=42J#fR#Gkq_1}eiEJ}0Rs)ce=C7wy
zg_nKNUHx02u`4K`da4chgJPe%DDERTlFsHZ_MLl$<joseIwKPk)t?Q&fxgA;Bi1Xn
zNx#tMDSIN|vg=x@!_mCl*@>y6mVk~5uBPiB(egu{IibRB$hImqw6wMc)Ve{ZzCayG
zAob2NBsjR{%4K_C5|9f({;r<AV^bJE8MJ#9`rHRa_%}2#iBW&iC{wF-SQoH#l8}c!
z?k$u_)@ihV2BHLbr+}sR0k{lWHGr|q&CM}0{t0|}xRzDpz$8e<_CY!)baTXj8*m&R
zdU=NTx<2qd&X7%KHOt_1IDdH##e5r*FZ>zE7pTNMcFQR;WbBHHAFvbK?%HJLN2Zh0
zeVTHt+T!#uB^Ap!F<btMWpP)}sZ7-BBQ0(I?sDBwolq!rmF^U|Lmv2*)0rRDE=WhT
z6W!v``%9Vrx{3tTrRSwvIaL=WdqsmupTTtQDbA`+-UMnA;ti|s=e>YJ9qfME9X4dW
z1|9)Ay3=8Jme_1K*L{-5jl{Kv>!CuKk|a9FOv1x+eVdUmkA>7-1~rE%B?m<bRz?%k
zS&xZ3E^{S5{kQ-x6ud5x;LS_x9(r2Dy5Rv>b@f@b%Go%f!OD`N++4J}-(&>817WC&
zdmKN5PEFPK#xk60mOL>HCqXq(&iIFvy{iL~75R496(6OX!tV#Yk~l-=Ahe%#^qsRg
znVBT|Kdho4M<Hu8!pHjnOs9GskCbLK=+L#z6F8|6b><j=Q9X7jHy=!RXGFJs5{hp2
zH+OPw4$nfQuC~^GG7r}M?II!Z?>MTO9H41A-vT|WNgX5A@x`ahlHX^$iOBR<ilI>g
zu6ECRX*buO=ZH^kxaio~#shJkmhht^kGTK`-dQ`}o^K(FW>CyD6PYG3b^gbL`NHCH
z7Wd`(!GxGs11)k-Bnubtm-S7c6C4~IoUFDQcscA(6;8l`bx+H|!I1_J;A|r(c0Oq_
zZ@6c2MIV3vCMO*kDuW>Mn}le0+z0@ATKcJgj?TNlIxHg2SW<p-u*|Cf65zCNY0_P-
zv(S8fc?QrVocag|3SVAdGM|N^blfAjoZ!Cs(cioGDK}ty-S_d~;t?RHb1T*h>$O)N
zvbVTR2{tHB_Hfzu>g@kM$HdHa!M7RDs^a%ekXX-p2>sme<rBu|rBdiD9(|ID3Gu2v
zv?Qt5O6Yb^cVmrqQp{mbH4?btjo#<`=#rkIPOl{TxR?~9$w+WZEhNmT=);I?#8ts{
zN-O;2otBn%_D)V$Pj9Cl0#i;M6gr!^qt{)$Pj%*Q&XsWC!ZLF5^5q(pT{P~^Ue`oF
zF<vg)D|PAvH01a!YD@Bk4(IF&s>P28A8#s;@-mdlrZT0<)yrFqL`B9?1;mTnEa$5j
z@tteb^C0W>+r5DLiGm`RW+QX-;o$FInlUIIkFyC}dX0A-NDIV;t**`!mP4%Yr<g6K
z;mj1HgNZb$jGqF0@FX?!tQwrQB>p>xxuvCp#oRa+d1K5kFE18j-}l$riBF5S_V#Mr
z4(G%p@xqb;<A*=-INua^b^V#B+J)4@%*UYDq7@aYs5lUmGUt3WZ+boTN0!rRlgh!t
z0Tp!=XeKdaAEXv(6tkFfi6<rWJw0y6G7;7D8;yCb6llgI)AG=lVtaeVSKFZ74Xgcq
zG><gL(>Px>c_TbuSOuu5edasT=6^k#thFVFvpvMeSsB@Uyf_c4wLkS>o)t8k9HbK-
z2=bKNs+`%BebIsYKpRm?*Jn{r{)XMsa5!Z&I%?ZIk0OknvSU9WFi`NzlUhv<ZX!G`
z{ZIsU+oCql{z5G@eh{a_T2Jck`Bwjmf!CCRmEjQ9DrnZStSD8=eUcJIbcJ@-yC@KY
zoJL(@0*6cgv~GmnLB8BpokoSU-pA3`UrFMaw5S3>HNis_@PX*W!|a*7?z;gP>stWx
ziJC@0BTT+zc&s7=-;$EE&T>+On&ysSh4=GO549J-Gr3M%eJhMN#7KykJe;NFHdKVM
zcO;5c(Zuy((uvgBfXzw_l$6kR;NhGyn;9DZjtxlbN#U%fc+?E@yb%!=)myBxe5$^N
z!nvek_)*B=l}3(J7?!%t3?&t+%=DI*(V)%rE*wK5!3wxP<!TJockpbC$gsIB)RB>f
z9Td#SKeS+rs@_zmYLrX#`Frvus)k^R^_A$i1L%q<`&GBYhx^=AoLLK((YimCcz?B3
zlW4vuo7<%*Y8+r0z;(N(L;($#h$6rxB;4QHa@m_O%7UY(FW>Gf#b>mpZ<(+Bl%JOn
z<R$!xdKkusLj==FAnhl_H;ZVZSv}n<)<IoXxjkO5^wR)F9Pj4kxrQ(g1R|M4;(~Y@
z#gsP3_|TY`n3aU^zn!2cB+bnjB>fY$cy3Pd;o7))vo{hL=;(mFn*xR!A2wHN@rN14
zF0i_M;^{1#!88DmgD-lH&%|Vl$L)ZNHyb#4<tl|p4thJ65x4u(p^CStql9E+9~2O?
zru~Uf^qMv5&E1MBDsn0+j17>6lq{UOsGywm1##r%3%bjb>O=dc_huCG9mWf~d-~sg
zjR=gh%7A{LT|`Ky9vHau2o_AU(xyf5FXEXtJ$E{vQBAtL^<T7JX*%~Yx&l;yiwn4d
zHb&>0?|h)J{%p^XGdle<=~i2UJQ)D#?3_0RBdc+_JKAI9Y$Xglu))Fb>hWglS?iO<
zD!t|HuFEls?^A`c#mv33UYMaT0zf-hUpLTgCKc57654DgzdAefcz&q2yiC$hV0Qp)
z5*hF5OqifUt3s<*P_Wzrcz;dgZNUEWC@iF6{^z6*Kmm2o2Y4QUw#--Dd$-84ivbAF
z%*?E04uz(5qtjs9Y&mHxD?1E6mr=KA?`-4kgooAX>SD7?F(fox-iAkK0E{w_7G{C*
z1DKpQFo^DM<kOfjv%5GQ^le@{x!E9RbT%K;)BgNV3&3O{Bo|<%+w4g{%k<s~6wNzb
zi**&KHnqxaq&Etdh+bO_42f2L|2Jpur_oh@vA^D<<@onJjxRH(rhA8_jn;U4PCN{u
zL+_5d8jn!YTL;dnB4vV|hu%fL6}nps1d>(hTuG5ylc7+me#<Z(?e-uxpO^8~bEpKF
z{%dWxM4h!t`YSJdsW2rz#QkKofx!tHI=aJh1HYW7z5VIt=H|*OKUmovKKDo+^L>3q
z0I;kuuDYEqzs8crL`Rdbni6E67lPecXFmF~4jXSm7<vs1i#88ts>N5I%@`b*+~D9~
zON(#(-b|X!a;%v4!zq=S--!SWJL!v_!8eyjab<P?EyL~i0wtio381LWT!p+QUyWyk
zHmCcEPnPV^&=4R3acCM<x?NXnhw~0`q)*HiV=HCq<>*B09=9j_48wqUqZ-6q08?aa
z4Dm22!7~m_rxdbJg`}7NSs+HjJyG5$4=d}%Laj-7H&_d`Mxw>QxZ>qX62081(&L?;
zovi}KT*)O2EG+PtnDwDEF2P9MNpM>JQ7e+uc6YyBZFPS(;;<wl%bWZ0K8YaPm7T2z
z9yyU5=JP2&-)EJh)N1C<on{Z2NoFGst5J&QTnJJ8>a$uV+=aqMiP*7>Zn&YIoJQ|R
z>t`NFy~jHoCc*~uz>}d~rNA>yn<=GAtNfg`KoM$%Q2P;=m!N>MGK0|&!N}xjH}7IU
z$N6mC&y+TdK``;<Y5d-Ev*q(mn-75Tr?Hr%ixq|iAX!>j9k2h=#9<3Y!qrex`V*}M
zJmCI~-bnmxE@iDi%m!fr)=$82KA0K2dtLXN&SgtC&6p4kMH6+XVTb-!kd@WJb%`|A
zwPWTimo4B1XtNYSlH6!Uy;D<5%L8C^o(VZ{;=$=mL&=YJ-a(blz!~>pCEa)WY6ZFe
z4Gxv)JI^}?2ahYuE>lK;+S%Eke!XNfmuK<1Lz2;bhtl*v)d0?e{aRZudXOG~Vku^X
z4-XGqTk&rt^YikW__1&KP453m8&BS9)%ulyU9`2DC&*>-g%>7*Pp8sPD+Av4<^?VV
zh457CnG;Y3dFkjt8;jHbEyqL9F|)aWO&yi0|6WH_^zC^U0T_lh*L{&Rm~_JHx{Q)?
zPONH1NW~Ooxd6X{H$vV+9=1;F9rQ#yX1}OaC$e}TiQVZ-$`4Ohso5{RpOuCzsF_63
z?=2iJ41Kf+5=U%{)tZ#Di1E+a1lZ-m4#qEN7{FA>{{D2`73>0X3<)<$8iBjJyP$M1
zYE-1{1%706(vU0Ru>9ux7!-Wn@#UGvWtZUuNL{zUd+nNRasoBj+C_0;4+;uOE5pB3
zrlp;^dEZpbQN`&iZ_xBg^CghA#%9S0*vx-&NouzU?E-IF^eNn2T#AE$D%VY$N7{BH
z>Ey%Ed%YG=OeHD0(hKlWZ5u#p;*WKlbVm;`S4_1L4a$^Z+?he*;Xk-0$a8Y6i2S~W
z9y);8B<Gwb7<Pm;q^M{&TP;wee>h|I$(rLzWg=zqPbt5NiiAd?B3p!#*ZXmZ>Vg8(
ztk`!MS(3u4s={S;1Yce}IR*wqq%baEXP>cYVt|-s33j#n$;w8NU>gh)KGRBt_B22d
zPEM4gL&@|%>)n9xH~QDhA16qTh{GC%%n_k3>!+4Zn}^f=1un+a^0N0-!5~Os7+JwJ
zlmd3gHt1^f{t6%0Uu$Y|QXAMNTzbV35i&pl-W|(S&6jXXQP!x|w=&G}d$=ML7(@yJ
z!ppEzIzuMA^$f-!GMa+c1XLgAw&SKDz<ykA2it%tRs*NV0iKEMbC+_y1mK$V<@j$a
zRf}UvOG_6%)qiSa`Y-r9@24`bCyyOo+>Y|sE`xi8#L3IcBM{z}X>0c#9hKKk0S3wW
z&hUImiIk0vjX(+mtf7?HpQa`*S=q>=25QKwsN&+{l$3^gH>31-kF0^Qv9TE$Elv79
z8rTE`cRR!Q+jT(2HrCE^0}DM-k<rB59ITuSw{oX{NgzLxpM3wUqX3}rf1kCBc|{rc
zdAi;n9gTV(o;1cjG=d|=G|dX9jetm5uB55iSX--LVu(-~09&cm(4z*G$SENqafF^n
z<NvG;Ox(9)UzggwIaLC|JHPUkWCB@9TwJ`obTXmN3d%G1jjYNnh_FZ^rKdnjVStF!
z0O3!|6b5auhq_l+Ni+=Z2#APc2w1*j{(C)pTR>G_9u_I7FcEb$d9@l9^qJ{4s+l<w
zRjL(XAaybYLO>iFaJ=sC&fks%`smUoZDeqiyScd$f{fF7bs$npN{WP~W!hDRvzYV$
zo1kF`N=grx=ALGSKokKTnEUejP!ky$c~9umCm^CM>$dJDYzJ|IPw)8!f3PPbBeS%W
z@$%vyC55_;bwStc@0gS>o#0$#29co_GSF^%UBC*S3-nPD(723EOacQ%&)0toDaKsZ
zKFj_dfi;3w&(F^fejQ}=5>9_FPsGO9J^?NBZ`{G%S@fq3XjQLw=c=-@s-mKL>gvHo
zL#7G)ETBSlcfa*0mXw!|PGZypVWVddHUb-9``=&xUMr@7@qt1EDoM`u=bt~r8@tX;
zzg3l$H_Jkhza`a!F@j@d)Qb!L*OdO<w-Ku=E){%vcx0TMoOEYvbkQ|gBd~D3#2-*F
zxLf@9$^RGP<L<UOo?vXF8>dQPN;%w+p>8juPPH)aV`V)4zi?j|gK$M>A`#ADO~K%3
zdO9wTQV<Nqf4&rquqmUqPVTs!lKBw6PU!!x0D&@9B;fzM2iuAu)F35A`}T!ya&pq%
zp0o)+FE)0395i!-*3Y1j^U%`XZS{}KRW-HxAs{1L{EJwftoeG}U$_|<2>vI6)ng!T
z1!80W;*Ytx8!atMa#eg^o}RAukwek5L9Ji9K6Iyin~#K3qokr@oDO|$K0xf|#*u=!
zjU|n?IhGmP`kADrX28POI0$Go-he`5Qes#a7>kEO!^Z#%q)Mk=hK`PoLA0m8-`mp@
zY?bm7+AW%u;neEbn3(q(6$pvgAOt5YEUcrG!GJyR4vRZLq}FsWqgc@(BqRiE8#!57
z`e^u}bCKO~gY(N`gUP&)@8Nm9Z>BnYC9P*l5}cXSY5f1qzcZdG1r<W``Na-EMQFV}
zVw^U+Gr#=MOVIFBiFw^gg?!`9Vpdzxxp@tY(?yx$x5?kUk*RlBpPKuaJN0_BC@U`B
zyFcBJO1kn%SUA_Hn@6v;VSZ-DkPx<^Up!J{qv$d_E;Ey-zDm1}E|ILp!hWG9&<w3v
zj8by#*X!Qjzk-%Zr^@+ogv7*!&%cj8Q&6%hLj7mkFqCj7l5cm%k^wON2DtKC<5`(a
zv6Yqe!NJ^7YRn<PO-b0nAUDWO?a2m9cS4y#vh#zmsA#?jEc_%J6%|efs`;B2Y!xa!
zYbtd|3CVs|uv6E*Ep>H8{VO3b@u)dW`C=#H9eNTV`geK!4gZKVZyN$cCP_)jK$$&0
zvTcqnP~5-ImsD(R_5@)QEu9P(Km62h7UTM?oSeKKXLs>$i$Ms<#@M)`x;k{}^68%b
z%hTD*&GBQqcPu*x2PWJG(9l0WT)_s31(lW2tz348Dwb>54JGz}bx%M+L(^_?wG$Jg
z`a(?@jv!cLC`_+~iB2YP5A1N8!+@-;bwGiApYGCu#fML82!zybXi-Z2HjnF>(o4YI
zUEF-(wS!$R^p+crpI=t#85jVz8GgDuuZxy9Qdd|1;@=<3t68>9o8{UWkUU|3fB8wO
zc>Ay7dT-=B0m0tZh4^?fJtrkg8~rX=Hy*_+pBhizx>QtLT#_~?ptO|~7q|L8cDVel
znkiFHHc%^7=`~8w`SpeP1!So<E>>680Ax*(M!z^1Nk=~822qoQ%n#Y64WC6c`xLV~
zNVz<Y7ADz%hyD6=U!I&?7!vYOu32R>XB!?96QYOUghy|VJg!}bcX)8HS#+t};<``7
zx-pU-Y0%+eZDmD3v@3nDKg_3WGjHFihlU<2^aPT|y^+YVN=i!1lzg9$M!?tL<NviY
z?(qHw^5)`Vt?u^h++?iLe)aPFKAbn~yEH2n_XYUu=f~JgE+;&T@W{yC)$K||NJwEC
z1uilHA0*9(-RN(*xsar?FU*2IcQBCl>t7r}22v(@=xzMq>a>~*bR#tPh^+rFKcUWm
z`^3YnXn0)C+kyCLk2EJ2gEo&u&g$F+Gxlbfrq*AQxp=Kn)PxM@i8+OZ=^})n2a$&z
z!MPE>L%2WNDYx*4!V8z&6Q*pinoerX=JTwz7^k3(PGKY_CM3+GL?#?`7Z(%Dk%%NJ
zh?dW7akCL>v0eJf#?Fp{`O#)K2m;gt$DE;Isxs&Gj<+DF38G$vK7TrV9|fL38b+zf
zQMhCjaPg-g+py^9O8s_~gm@`vD<TXGkBjX^z!861P9hv2zZX`a*JKJ+6`HVLX%aoU
zi_qaHyNGK7s<eiNGSIBB=|+9<tp`C-TI=vdFXB!cURf0sqKv>Nc=LwASH<!hNF$~v
z<z!S97GD49#GZu56v;hrX>DvA?~CT8aQen!qgAC#I5T{E%uCnzdb}K)FFB3_9BKoG
zU$knY6zzYy`;q=(o_Fb2V&dX<OFs{RFM&(X(_lRdqY3$L|CEfDdu!b7ut7pnyc>jO
zitfT;ev>(UbYS`p%ZlsdTpu+}K}Sk+0u^MCE21%)!SPk+>(7wyQedf=iUY1op68J<
zoLrY$fPH=x@B<8k^Ya4-KYx4N{aFtaZ6PlG$DZCkfRf+9i+q2><4QRwwH@~D8}GJz
zhmSd^T=aS^Ts`PGnB$&&%$65Il)Uct$o@gY{qHXS#vyxeldcR6$-G~gPI7^U2Zao}
zdA`O-kGGW)c<TY-0)r=u6VYG~g-1u)Oy*JO(0)GQ!@#@YZJbW~x*hQDo~l4e;$PFH
zY!%j%Kok-1dENv$n0p*3p>N0Qem_;-2^((|=jZbu#MI=0>ZT$o$*cy5iQDm#fZvx+
zb4#OmbRHNiC^s4J#{`gt3W<kAqb{{0<8nkv{=?%|wq>#SqYwud*Qn`hnm;tIlGfT-
zw!1Ly{bF4zFs;>8u>rY_r;-jvG8;~&M-I)%Aeu3JykYcAm34Ew&g8v)z1wiYp4tDO
z7GPp+{q*u&43c~3#B=Dom`8M~MKc#W#NRVNfEZ7*WWdnv)&AC<^f}pQtP)kRfhoEB
z3o~-YuCA_oh+qA&*%W?F<Uv6pl|S51$5v3xtgU~T^a~I`H|OHkKlwv@4-p7LMzJ*=
zfD)IhkiESF91Y~wz8I3OXpeWYOB74Mx*#Ih+W<OqRcLD;>Mtq8sOX7^h2WB#6aIi#
zJ_TAu7Ljc%Dz8TS<9jB{EudU?Cw%<!#7s)w?9G@-hk(LIY$=8@?Q?xFnv;W3kf>M@
zaE6Ru6~K?d4Urt?0|*@ADLk^Qo~fx=Li_-xX=zLh+7hoLZydpQoFcs}Tn-zJ_i7~&
z+wD}SAF*l10!rW9e>D}8?Eh_!06#vJbZUjv><{hK^78EMXhWJr`U4YBmfd=w0J}k0
z3-<A5e~4Fbi=}Ui@dOweDhSk<R0TT!o%>J10PAc+9AUAr)V?3rM8t+<5C?Hx4BtNj
z?k5+iAF^~2h1|7ucDGuQ@Eb&ICk$CBg|Wubd!QL1ZE$aeVeuts3=I6VNI2NpK^z9H
zbtRJ*olb)Ro)|}#t>iQUQ|9H{(*?elTh|k;-yYt~77+G(>$VC`*F3}Ge~S%*fQ-)1
zfna1Ng!ihA3h6)0WJNJVMnys>OtJ-hH~tvLmhr8C{znn$>*M1oWwO<Fhwe=sOI9@B
zW6jJc)Fa{;p~nMS3*h^Gt6p9$vt@{Q;#zrMUaq{ahj8r$1qBhha45x?C?du7p%9e|
zW$sCMZ@N2r>;|mb=EL)zk?NRj!}GW?&;ML({8`0U{LZD>Xz#Wn$;6?$3l0icjOiL$
z^^J@aIBh*l3CzvG0-hB7O}#YXZBR+t7vS4m>;$I-gYyb26`*Ic2tz;8#IVhJXT0IU
zDB6;UJ_z>}izmRw=F2uPgQ1vtZ)~$PBmD-+#=!te;@b5cx!%59ebj#-azg;XqyvyM
zcNF3tvwYl2ujV4D1AKYtM|=|wXRq%NW_uQOl|02WSqEPn^z}vffbgGq9y*D5t-uw5
z{~<z#`AA$rp<df7j?nKNe|^-9x<{uNP>q}k{XColV_l22Y3ZqF2BtX&>3+ZxUfi9#
zAc(l%-h!au&Jbc^{oNz{S+4d%L3gChqIB$<9DWn*;OGN%D^o=^X#c3FsKJ?u=wotj
zb6R4wzWM0|^b7{ye-Ftht%5;h{WJF#+mtoiK!CMUvw93*5uJK#?5XgIa=q3JE)-U2
z$5vG|a_B5|LNcvmAQCzQ*g7CWa0r5C8nt=QzmP3szpl>q|Fa_wb)7{YRoaUO{h`l;
zhD}+s{Pc%RMe-oUd8n}7#_Y+OKusl&sSP9igJY)jds|`{7my(Vf5#1k1qWt)f&CM0
z?G8lEi)~D=Y2mf76p$aK)w=Qc(E78x8ze2{%rlUxI(`Sj#~L{W(0z5Q0@YluYJ1Qm
zCqJLfX%m6)Rn4YlLU78aN7lBCWe_&R*XnSNf1sR3QC~+Z?b1pIWacptal-QRpI@_i
z>W29!Wuc)16Ia}Bj?65-;V}{k=Tkz~Y%yxpP`)pG^82GNIwS)utAS_j-KliJU*e#)
z74qZaVyi%Vh8*{!pMpx$+_VyuX}vem@xBL+SThu@Qj7X)Ql&;E2n6i_RWT&=b$hU`
z$qY!~Zf?HrdlQIN=;uG*F8s8*OpK!FzQuvh%h_<9${N`2p*CLdh=*8c6er{J-t@PU
z6Ka`C-(VH_x48U*D>Bunv&dQDhq;rO^q}fT-byOSdbc!tuC#gLtE*6>;Ic_(Ui3z;
zM<%!X>_^zh$({<lAt1|U78{*nCHs=sf=-XUZrB!ZEcJc$e1YXJzyd(B_y;TP?N6j7
z5{z=Z0|Nt{B+ieN$XTy1sQj4`(9rzDqh7a3EE8LMF+PF>9tZ$^xgM$q9&!B}rECee
z*UP`__*Df3cQ4QVS32a_(8;jRc$k>)A3*3OW*qYJy1W>mjtE?mdsB)Pgb~$IHeIj1
z9M>Qv^0soSzdOU69w<HOI@3`Bu1^C`4(lDFL1Ely8{ISlr6_Xhai(%wXp>FmqjYYE
z8vRvgXJI|@1MvU@dU^N+F$XRtj^hFC{L`H%Sy_2Gr<Kb30PTk!0@7G;&WFlG>M#GZ
zF9p}c$cUQPJ}4l5d}`smj+6zpwUgzV4&r3)x9G+uVno<+|0oMZw^`6X*7Aa+J!MFU
z(TB#b(y>u>HWn%_#uhL@a6mWG7p7hp<8X+PUp@GPy9B%2wa)$2Xy!>Ki5BUS<RDWi
zP&`8Gk~Fpif38aJ7|<7M>oQPhfOzM;*`uA-b=O1uUbU%aHj(B7xiWdVp+nH|&O$9)
zNeCrrS_23RhBN0&q6duoL-&*Ofh`q4R}mQa48|06uCm<REH11R3R}BMkV6BqngYS7
z(%aXo{Y&ud;S@&3v4RYrm+jDxaRf0zh07pS4l`IB7gdQ$LGnh%pvjSgfdM5x@<l<x
z&5(O$dfLS`sJN@yB^9KMd5yXp)o10j*9>>PuJ(ZA0Dm}BT2)?tyy<+n)*gCu)1|}?
z6rWaivNrF(M%LB=p8)6ZJf}s-g@R?sl_rNUv`f^ljQ@*82{KO|;o+DCOMua_8OC%o
zwmR?ds5y1`6fvVyW`e{$&@u(5!ds)*d3g<v<|?5RB7Pn(x|C?wg;=KDffOz1Hn}Lh
zk4z+piDUzXfHr(SS%EX&2YlIKz2!2QV6qQ#nv<#7RJt`=(D(d1&AeGs;oqzw-LOPe
zyEh2?F&8_hWR52*xGTX_f5%EcHTHp=h12Oj)eRqQ|D+mhB&1H$tRR$B%zx^{9sPhd
zMqc~tnMpG2UtD9C1gp@2q8yHmUQSyiV*8RP2aNS1+n*w3zSl2wF)=q%6lME>@<@t{
z=T2$oOPI~9ikD85DD$UbD!BwhLOPeIm2O&9yaj2AlVSXE_41GE)%t`*X?@X$xj%Dd
zkl1iigO8W$e`}wtctRxpsWE!?_{%;ciO-<rbhNOqkhw$^6J&<avr?{UF`!UFqV}MS
zTcy;QYc&m5N@{6px=<+lNo~E+ZrR2@tJ>|58jxox3ciCA0M$hB&YLB;KYwl@;cWnQ
zh9?Me?PFM-Vm4DcK6hBI!+MouY?glOXJmVfFJPy~gZRxdeCzbX^|BL>B{Kq_<(G37
z+ld?iyYN98eYIFo(@B|^dNQKj%PoLtz427a)RYQ`>jc&TUkX1C52Ft(gn&}JnG%1`
z3xcb|c~m>df2=Dyx)*xxhnWeJ?r_rk`>jy)tBt`#i*qTVY@y<Jg#YF<dSZfkfXWn&
z6s4d*n{7jyR;9o(lZPWNd*T(a4-m(c>l8@2@uqX3;KCpxhW|$wEZ(avl!-p3gwOjL
zC8UFr$fuxLwW6e|Dr(e8u`e$))LD=X6EvdrUpDkBAfU-wW4DtN3-=b4^M_k<=0NjR
z#Yo6pR6;&=Q04EHl_WDr78aI`4NM=FaH{iL^qKj2`O|tKotz~`J6nGvF<IHf>Zhy?
zDOR{3>@hS^ORxMcUK%|_g@m{`CF*pIq`~B{umJ!NbdyFZJ6A#UI=D*qA_Yik-FT_n
zOamXOl5Yvem_5G7El;K6;o?SLQ7O>;dhc<D_1AGzY8w^{8wUrbmd@_&j>Xj_@<5`b
zV6@5KDGx<#1B4z@9n>kHmY|WTq@}|YV94!C4><n!YYB$0z)&=zj`2%c#|?;3a}Q1{
zq`Cc{q~#3b{7sFTJ%N!+5&T-`EDAP=<v-FJsAJm!J}?v`f!<^#6HUUD<(+Jw_iAOv
zGJOBJssHXj7@e_$I9CVxq@EDZ3gZ7yh-)U#)|OBf_WL`Eu!;VaCi?#rwgFgfEd<YF
zKFScx9<r~3Rt1P4Z2s@PC@(=OcK~5iQFxsA|5f7#V4Fu-Gazl{)1z62`Cw7Bjq+bF
zl{HM~`s54}|D%!o=ZS;ooUlgUepF<>9p;N%{z1~N6}b7!_rkL7m|uG<;Xgw4e=b%k
z=GS|Ko#7guk*{(AVjs!5xOzrMSLf$rpY7t{sHlS>;^X6i+y>^BLG;h>Z=9zRl9F}0
z&==GF{hEE#%gZ$E?7oL4lvx!XA}Y}z1q4Xl`N+w`%#y%ret3lck10z2g8PCg?9rQi
zANpg%Epg4pZp6IaaIAZw<4c9Qb`kl$s#lI6vC>-#p=!FL9>d(j_e#pfp>Q=XvxLG0
zsj+0g81&oB`=VgM*8I+90n*va;M7Js9|95*NKHz3!7GyTc>sA1{yhxHvVs)kGEjGh
zS$n`?RB$-%n-+OtJWwP4a#?|B060m7KI~x+2<&9O1p~j31__@B-wre3K(<<b@8wtC
zFB@IBDHIa{UwN}O;CC16G=bjm?_e5$QZ(Q@lvMQ0>6y4i*3!-WXpM3W5-4OQt@>=_
zzFwz%tu;NxKpo@zFj)426qS!suf6ybusjx(zF(`kP9R(m2{59=Le1*f*v+q3>X9sd
ztA{Hm9v&TVY0=^F-6(AsDIofldTPs4GG~$VnJE*F_?yV(U&Z0n@gy?@i@%YAe&$MY
zyKviCg8u%(0CKCT$*tQMJj9fjmToLosT4vDV*o<y?B?75pLrcn7_dm0WH&Z>@(YBM
z)kb=y;e0rDxnuD@>}CBLLD{-9cH(Q8e^^&+@Zz9}>|IpyyYG!L=44d6p=Z5zKhn`Q
z+vmUS7+kS<kr758sk>^;kZVj7gI*_Vk0|PmvG=zxc5H5L-Vt%g)Tn}!#SISYSQ1?T
zJK!<d!kT3I`@f853mQ=o@-;OU7T!nVI{@GA65tV4)h+W;A{}k*3ur(Ed@pzTX@#({
zw{}M}D=Lxs{a&meZ+sVEmra6^(4vXwW5dFN1bi<07(ad-o2&&X84@$IT!#FUFS{eK
z-zk}xsy-iEzc0Wm$^rr%kRq<`&e^2lJkI`{*I86Y;=K2Hc}nK<yjuQgMT&*xe6)}r
z7dN3&c;sjWT!6JTK~UjY0ifN3(KQ4{2ha{r*8M8V%79i@2?*A?2RKnBU?_x6dfXeS
zN#X2>D4SXp9TTJ9X#WXl7@{FpomEt9FwPI#gDxKoI{fpsYAJyp)7fmAfE4Wn!0v}?
zvZW<}^3}_AIE1Tw9<FwtJn^3zYX&sSHD-ahB~nOFOKXTfQmL5L2C)5HgJZtL_4Tz|
z;z$ta=%Rm@mvoAiuP#tPNMtxyl;-*Ai6RXgHI1W*^-n7VsQC8sl3u+Gh6uSQ-^b_6
zCJ{fMfJoVfx}vJ~|Fi&1>%|{VmX=yXmo&ka*dUEq>bx@)6dYU}cc+l4v!wxCqK~#(
z_{9s2r?f}EJ#@hVhOd%Doj`|Pu1Hq}+B4UOgzY~{51YL<9v|P39DifCBJb<YMtbtO
zJ$VKwl3L*nIK3gUO+&imeM=fm!mB1LdkOd;fKlWS_PUuov%t9<R=ogvglh4ar>E!J
z!+*Mf1YUXp^%x6Z^jUwm=Vs95a^ndI9anzh?9|(v$Sq7xo|w7a3cYQ1(F7tE0U=?^
z2ZIJ<anC4&e`(?{zW_mN3b}eCo{uqRA!hjL9et-UIp6b&0uG3^W94nBY?+~Th!CDd
zPCXF3hqo<mQW&@bGQac<NgZe+oNd>M@nea3-Cguz*PB|Ag|Vyc<ie#huP{9w%zi7m
z6JaDE+!0T92M5mH$t+x-u0z+`rQzMzRKcTX<t*t`>yO62g$Dv?o!KyH36y2mN4pFo
zhirjW!|(nF%k_sjv9S(-ohTiGBP{Pm1fHUl0>Mm5s*?tw{y1B1JRK~=3;ojuPEE)%
z37MK+0ZR7#3=M~NgeV-$^9=mJR#z+J&a<ccLr~}_QA}yraU01up#CYI&ETjzF9M=2
z2@Yl~D7b2LOHv3}Vg4Pyts558MGD|(pam9coN0&<v(TyA$x0ERnCrj10T@h>rrGYF
ztMrc3><+zkm?>EU*r9n5`~CV4GtMOaYymylB-+nsf1Ie2$)Gqqj+c%PX6ZMaySm?g
zbXWrkq+~Am91+dRB^a|GKKBpf+5Fl>e+Z#4)$=8GNcnllbqW~iWIVq8CPmIwFOrky
zgShhq`}Ye%!Tj!MD}^l_%HCp~g`_S+Lh8+vG}BT~j&|qtC2v-A687t#&T0Eq9&q^L
z`OfJtuunt{MMt(o&Jy8~(a<&|99Fa~d*`cH&oF>Tdw($dscpUDO0|<JL4a0@U|^}k
z7ny|Q*tpl$$%=^R0K;Lx^X}?+8TS@S^ZX#WoN8$R=t_$VIHWAb5Zm+_B0a>ZA~8;{
zcFQ-QBLU>wARMRzq%N@8wxq=~z)|Vayu7J83mSxZAQ^3HoBgNWOWoz;iD<p<a=pF`
z+67Jtq;HoCF8iilmvq^;yxz<x;l9AXT4M`7iriIK^t1&mgl1R#3^t_jdD33EVh`G(
zKf0*B)&%_vc}81#pPh|OngYcX>)>|9cYlgwp#mgN5Zr;Z9H$S$CjcaVJYvL%TPXsE
zh>?komK(_sAf(~QkdfJD0*#!5cGCrX85(~JeHL+Jw^AW9K6<$3t=R_pEY1tF_2~Cz
z+QB5Br#o1;Tc@p%A2`CJqz&X^%Wa<BgNc8IXdF$DVK)AbGxrSN5C?f8r9!~tAaB!7
zy(j87{mS3JvVwx^sv933u8c$o)ox*@R|5j0XJlM8@M!VjLknD|3$>y-wfFBtF*}Pi
zYYZW!Y|>0~i{f4aU@w84px5l2DIHZ(qtfN5*5Zozr3ysHL?0>sni)&rIjKV{pC2to
zKHZOMFO{g5BgKM)t3EeJ?|`QDCq^hhqf)09P|t)!oxJ<6^wg%XL8w1smOTLDioPo5
z_e+S>fZJOGCQhTxyokI!M}3c`_{U9SqkVBAL(~wOF=VqWE@m-s%xyGY$FvD(!D=>}
zwmAO1#IY<@2$QV2k9#Jf-F(dV7fJc|f0pV$4bTeyf-v;}iUGy0({T+OurH+g6HQ}S
zI?11Kp}-Lk7R%2@32T+aoF{)m{}_FR>6Mo}2U4PtoE!ra{7~F~fYo^@>;{?Pyq-oi
z*CB(ts@t`3k(ceUIv!0ajqr7_1d<5?WK>X$MgY0%mrkhe#bvUJW`0#wJg-D7v6hLM
z86iDjaE)-?7jiUPZh%k>EG%reswxQFLLUSpYPgEegeVWco_E9Fyg|UyS~J}|zj^{>
zpJHjq&@s@iXMUdS)rnzV0b<rTtgvTLh&gSTh@))S8=~l|zdz}zVQEzrT4=-PF7^&D
zFCIZZYL?`}QmX(`3HjB91q7`0!t`y{0-yUIHJF_<s%;)DVW?G*rr`e}Y4X0MKs&#=
zzXvoW44Zm;%H0%JQSd8D6J@#-EE4v|5=wC_IE?bLGD^N6G2?gn)zvgRa~4)bN)+@b
zAU+WIBD_7pT{G8(*7w{jAs%qAXh}@)|1kH~L0PSD_^&~?lyrl1m(mRaN;lGth%}PI
zOA1IR-5@P3-Ca^5rP6{ZC?E~OxpD9PJ->7QKQm{BnLTU;*Spqwp68D1`rN14Uri7E
zj(+;ZdvY|ME72O*J;=ECa#-c_5igJT9)l4Jl^qFdBY8Z#5<P4D(3$-W*WbS4;u89)
zQgzUgk?>&8>91}+LlqCkG0-0WS!p>)rYN;$7)KXEK%Hh8Lo03jpd96Txo*qZEHYoS
zu-D}D^l1;eO}J%|?B70bV`hLVo_v4xo7=OK9_@adZN#CsVm!@JsdzcG1>c~beeaj2
z#`lmqc4r^UCMe7z^j|pZXwtDXIY&~ahXsp9G(a1UhlXnxpydr!y_~XqvBodxtjc9C
zySfsDo=`ERAngsrX#yf5j03rkRNPH1G(239sVEy^v0P-*o>)?HUri0kzT^J=b{}gt
z7Dn|BV<RW%?@DjCc(3*`7_%+5c&CBnbn5}TYxu#F2$4;0rTGet0X*B}2m*zLCU;zv
zH#Ig~oqgH`BbOZ9kxdt=0*0n;L9|uUC)HIvRiCNXRX6#=?Sd<x8_Iq49PPkM%Ac1i
zf9CDoO@gVfQLNDw%eUsb(y{Zr{aABK5x?HW%?*na@AAzbIV;S^?dHAm`NTF?-RPf~
z{2a=L7x{Q^`MI+@)5FVFJt^wR!#birRE@+Xieys6epRzwA$kpc>8Qt0egm@}BF_6$
zT`RXP4#lkIX;b_#Pm0LJ<wj(D9mlG*QZ;AlKN(GBz(c$sRO&e^U9&#*(X?NV-_gxX
zmq#B-TkQ|tt~-|QD&H{C_u@Yz?ebS7{@Qeu>0TkbE=3ni2*Kl*m2b9O)4XP-`pq6c
zzD)#MA?5VMYi2`ff=qzbHLIw|wwxLIedF0u8P5(7&nt^~?%b6req$v*+e4$<(0lX1
zbjnG+H%ttbC*aR1r8OPX=C^O#+nOy6W$FWCPz06Q9nVR~9fQ)xEd}U8=o4R)Nysv}
zHWF`C&(L`P5e8{cY2aNzY@E(M$Py2LGAyao@wW*+#kuP@pY3JoRxGTPbWBd3e=MyZ
zAm!u}6&2sR29_wAMJN#TxuRb;wOujhvFh;KT5NBQx)Y^4{szj&<`VLszsAPmEu<s{
zdt7%i?s@wh8MjU$|9Th79U_I4u90C%MLkK$rI8eZ2J=pV>ixBcE)(~I`y~|=Hn!%5
z&+iEFQQdPhpRcWA$Lyd?N}o#dtX7>&9zk5xo)8kfPEY^7lND=|YaP5+Q_mH_!NA})
zn*IhfiV0L(sYWr&F{{%^sA1o}+44!D1mO4c<PN}bp&zyUd!u3iFD0|+>b#3{I7th_
zV-jKXR<Zx!(ONbZmC(iHGHeWonV#jy<$GcR^8W8!XMYGzE5F~6$0N;qy85gr7@~U6
z-Io+?`Cn{7D97jM=iBoNi-=Vi>XSGE)@bO-Inx!3(=Fb45K(Xb_;GQ(j7|IebhlV@
zV|i&A8~eAU8tntE$C!kbvc|-rJy6ntY=&+YBEr=^Y`H%TvJvLs(haQ*7JemeM5Y&+
zA26EUh_;*0z0a1Aok~ST<-fb~kyV@3%gZ-Vk5@qTn~sBH`fXjUqF5qMjz%o#)6w%*
zS`GJchj@FRgj3#-+uwHsZzvQN=-H^meTPI)yQqiG*Wdd<{K~0WK*;|o;m(-1*K8`@
z_C#J`v&ZAo(o&y;@2W*Hwfk?@^z`*pQ&OOVm?!rll!>WtvCVr~ehI(l#f?}-d3kSl
z_jhAio}C;^8B}ptkg##n$h3)j?I7uhd{)Tx|Ljo2#K%XV*K|D4RJ-x_`C3#(NE~h5
z#kyHMVnL&@<4kA4W!y9mp|_V8BKfz<qyyPqVj{-bAK6F1z;Olj`)3xt9aAiRo-2PC
z@OGYf{uJf5RHXjw`B@byG3A~>BSrUHsYdW7;*Jzn<}SARneg8Q7Re0`WXKmdOctJx
zsTt%*>;K&(5eUfpzqHO}F>t5flAX>eDVc`~)hruSOVKgoQ&SD#sLV*WzeCyphsHQ<
z(ea9ezcl;YCrsCLetWGa!--!Am_`s!^B%PVv;jT1fo8{krW_0qIFPoA`FMPvsUR;o
z;In2AT##gJmI>2o`T42JqLfku2V70~KcQ96c=zHvt_2j}a^+UxO>BT7zo`5+^*i4-
z%-dd2)jb|d72s*af`<9r&o5yBT?%G<SIG@luD2@ZvG)MY0*+{04+*1+w{Nj^uS3lY
zi)8#JFRY;##KhK+O@!!dgh^sTpBgO4?%Wd6TKk(H7(Xt*q8m>LMm-XDUYf0Yd}cb(
zh0O|EVHTQJzRp{FkRS%z4yMgiD!hDP)YFBA{)yd*lMsiW+yML7u_#syT*C&{me}T@
z##N4UljcbiwO1?k!g!nkWC1x4{m?5_+Cv%{bq2<7oG}inUpy9}9d&c9KB%^Q%=Vv+
zJ_|c>$oj9CgTCUW0-5(DG@?l((u`uH1do1x`Pzk?1WBe$G)Um^J)cttHAlJ9^1Y<?
zl<$=Nt$<PU7W8$1$dS4J5iRkqnrn1)G)KK;FjS0|JCB{UE(j+@Y*}vo1-p?NX^B~>
zIc!i0Yhsg<kRWx^h+#!3CFabGk1LAOGGLIEjGB)%F+cy-BhQzt;Jn`R<KU0nu_4{y
zEhojdO{c%|nNny$sl;txTzW@jg$>jUg|UMen~%aFS_K_y7i?6$t%|r0I7ZXrA35J!
zc&c^E+3iv9ygURl_H6fSN-KW1-*hUO@hkfdJ5%4HI$Z7<Q!&`P(`b9iIsVD6ag~|9
zL6!HRNI9U>7zVMH8B#1JJ<m5DnlNkVjhYR-7QdZ!8SziZh1sZ&_VKm8EEauunY`GY
zC?8dykD^MSUhSVJPBJUu1(e)Zq)=(9%TQgK&SdZ$%oiNQQYtI6R4n^p8uq!;Okp@N
z8uNDD>EU}!55bhXTE|7oiR#XBEVD$kcjHy~9;B|-z^k8IlDe<@Q2B!4_VyxUw5RCc
ztJO$L`Guia;r{V^ya5-H&|)zQ!NI|41-Z*mTrHX9CQI_)ZPO?A;a4(udI$Q$JrTG<
zl!pfEkAr(8UWUlEL1z<GKkkd-CbPR+TaIZ0uIBn!mMRM^q5HlUMB~DfjjrT28_H04
z4a}&Nygp1TbISX->Zc)tV=SMN?=x1A#!BwQ$`dqTeySV2Z75(+Fl^K}(8QVdH$#C<
zn?80-4Wl-^o`vA8;`<d@;=KHh)TBrzOsu~pz|kL5Pyee0fHD)g5ncKwhhQBiHXTEC
zB9FU8lzZ_o^WVP-e~Jo!I^LwBRlipiMN^F;YV6f_+}-!LlmwN?0e+XXs$1@EjErw+
z1?W}Xv=SewM?~8o(Q*+I&3>Docubl5wR-;F%aX#QI8kBkj!42IC;vg+7bB|Pdhlqj
zJ8U|ahBu~(m(8)KgfQ~C*|=oFQvqfLDaC}Ls|Fl=HBxwENFOQ_1PP;mevd{c<9t%c
zEVX=F#s7aYMVGrSkJi$3=V)(ui)AV?(9wrub$&I`QIz_pTpC1^{27^6p{y-|jDZ(@
zQ}W;cJ8-XB7B5omapu4ESv0y&bXitc<%EB}!YNSyibwx`A8v&4|Ko4&C!%$Qhld{@
zA2WFNg4au-zp{)Wq=w*sx1MeYB#^L~HhV4(4=d~I&vka@$h}x6BO~)os;Kz&kFy#i
ztZ&Q8V2^&{V2JpY3N9H4UrzToIVhnrg?qR)2YxDBP|;3&7#q86zqG!O3Vmv8=mu&E
zH>ah2N)`BFIjLW5iJtP|e+B0?!8H~%z=ME<`{e#>R!~uo&&=RToS&bg;8G!s!377A
zg1UwV^s=hJ4**^Wp~v$eS(G3rCr|We)h$Po>;DoO>a8h$MGd>W@Vm7HC<SPUt~pUs
zQp)4)b$|Hq;@^L*C#ws34udxv(Yt^YqMXEe_uf6XZ{yF;B#%2$HO4zSu7x&dXLq0z
z^uaH;&@I+ryv=C@u&38i=+XoP1R^5MwOJXc9`1fGE_qS$5k|4P&;JEphF>)WmSO)j
zH#djU2<@p>iPkN0Phh#s4Ge^rN@W)mSU-OJXQdZ2k=D6<V=T)RIAI|`tI-e_`FAD3
zvLt~E10~Fg#K_aZ?e__HUe@ADLjn*I7WN_->jTbK^lXFAY$feDf+g#UY4^{UV$^4(
zoQQ~VtI_`cez0#IMS$)*I$B#pLj$C90s;s7`>$|b#)5o<R4q7LDM23i17Dp;$Th`8
zuFzWleBsm9TipRSq?WcelrI@LPoQge0+<Xad~{?;1o#6K2kOu}#+{v=&<+l{GmOW|
zT0+*Y2F2uqt^d74vgT{nv<Pmn(abG(E7Up888o@EJb97@Le`GBJ1@thYrvNbKFQf?
zE5n2D+8}CyUq%2WnYAfNQBiL0oy`x0pC4OVIyz;(Y+h`0U;QGL!cC;g@-whX9V;Dd
zOqiH2UX4BYchw_FG00~QKhP@G5fBsvRedwmAwycr0YL=4tJP*uWTIky!|n7qsa94|
zaRUzs$XMuGJC>k+1_JNSFQ5zK7ka2?u(LL(X`UQ{x#8LmFLC8lPq0sUiL#{spSM_A
zON%f;2$~t+zuPO}EWCK}BG?gR)@J(h7*PMQ1A)F><G(kPPKf>?W=?o$=rfmQLdO61
zD$_50|G%3a?uhyS;~gWCmmZDo1-wi)(8Ra_HHX9coFEmvl;`((q$~p^G@U`WFRMfA
z@3q3neM)#s_TDnJ^yb)dR)wa96jS(!<eOv~-VSO`VFoY^D2HEyT~$R^*3!+*4FuUn
zMihR*Xmrs_p9(=nlAoUsRrK=mg52En<C`fT)&B3F&*HlJdFj#cMJit}5S#5TtLy5{
zOixP}>u6|<;P_di(J2H<BkalTpTxzfU%&qRnBU&se(6Ke4rb!(zrRQ3?{&cM!T5g=
zY*os4p5V6K1A^!T4^Pv*d1l~rg{uUg8mT#lM^;ytmkYMV=o_Tv!zb3i{@Off;95ZT
z5*#NkTrRf}=f8v3)3dWp1wc0<273&`2ptV8CMtaV<41K(&G)(U3`CYe0~$qy1hOat
zlR+}W5AYDacoGsIMTOG-{t0b(*)>MYub6MJtW?vfrDLuxv@G=ReP!nm-lLZBx-uVT
z!a}t|+Wpm~Y^|cAVrt5bbqe}#xXiNWNnEeqL5Jei>yV1%7P9-rGz2|a|2&s6HenZH
z#P1ERWT7Yi@y&oJkgJY8*6rN5!^z3X%q(kc94#(^6!$Uv6&wNCJ&;>LuXm`5RS7wT
z<^oGA5}od*rFv(aYm$0VC*U@aP)=WvyU`@*p@Hi=HGh|z!^``R^V6rhp!z6O3X0h3
zuTUDHgH2Ce9K06#xI<+3DTXpyo{e68Bnhm)H_nAin4PT;4+?jTRd<ANttAOgPfoxR
zIy7C!e38WQ<J*$j&-diI@_2J7kH{vdNQsGaO0QPQv1WEp&S#}*g5fQNI1FB?bE3aD
zG}fYX`8-F-3Z(AbPglIk(LcB^f$b0MrW;$n>#O}oNu0*8jR8ZHvOMdSY~6J^9{7lY
zf-wcPa7pNJeU$gJS{yO8V$oM{|Gpi8zL+?}bW+CvcLU0ph0p0ei|kTQ1OdP*vZ^@q
zVB>Rfb}rI*Qw<HYMwgiW7|Jh|W`0^){ENU#tp=u(f#L1VkEJiuK8gHn^w_><_{qGg
zs_J}Wf0K_@_W`#7F`JG#_}RdC&&$Je2DB9tnKs`<NJHRwX!KeD9$Qy`7hS+x19!;R
zM#Z|jyA`5HtZa0<hDy{nMvdD7j?9s0Pj1M`%iGx&@qrwMo!Qg3O(4;(2%fvi-{*eq
zE-^)-To5-CQ>e%>lJJ!wjp|`C=X|Z*_STjtbp6T~M@Cd=aXx<hxCG9)g);pbXaWga
zkJu`X18ULB$ERC@fuU#kN4*xHX7>&cmz}sOeyIiCy0tuB1h`0ZEX>=ZxM*mBH_lIf
z-wA4LXxN9tKEQt%Ea?y;Koc$WNHc@i3QFu}KrVX+)nG_f4mLj|-D)I%`sGt{vYvo|
zwme=>7V=k|H@KDspRizw9KTRwVG75hNeZH;yR^C!*xLFB)KAHxfwQo|8UnnkE96Dw
z?fM_{?;NtkTeY>c=;-Nbx0fDON+wTD4HiEK{w(;~qDgo}zoG#y2?%%M!j|Sm#?6Po
zAqxr$+Jkn2X=fLhj^Xo?U4Xa0w%$_@U>RW90tKo**l|JCz{<?5Rc@pt7qTFXIKCCx
zZ7~S%UQPDroc&$%<dnhbtGm1ybhSFKc@t4QfIteK7|3*^c{Y1`!J|IhA({1t0940!
zU9E8`?-6=*S@g#|Oy=GlB1*c6df3T8LP=@d?(YY1g`pC~TWJa}sS3%=z$4u#!xZX!
zGGdC0xOw_}G^5!Wi%Jyn3sQ~`@3%Q9DDSzEi2KThV7$(j0PvJ{lbfA9UOQ8xj>f4B
zy$fLQq#9TAzUvoUZOQ@2ti4Ea*Vpu%^@!1>@7yT_<;k$u^jpKDiM%j&ndH>e4$iR0
z6S=)LHe=p@PTg&7nG@Wyh`NhP9iXqrD6Yd)NJvCrX}>}utQPUv4E*hsV9?~@<qgVH
zc=;0mp>vgHs}K&D)^5#IaLvTZI?2~g4Lh)q1kp_5aCz>fX2q&sEqI*23w{skI1)4A
zx%v4$lY{UYL=wM)+Ctj5o60l^`-ipl^$PNz+b;vpP?3=vo7y-u`>1}3dhabs$kH!<
z{dvJTIACQSn2eY_yZEB4s`}P)Fdo)&hL{iWqG=X|xGzZ;1hFLKY4Au-Pkt9dK)6`<
zSY&iK+~{RXstu$ZBzx5ypdYxv|7SOIz+46;6T}9zAFSNQGQXUjK4TZtGcbVHb~JgH
zy37LrDlV=*A`a8(fMI^kqA9PgUImJKz$VC%6!kDFCvuy$n6NRqVQ>Urg3FPF-*z1S
z1Agsz%QaXUq9_pXGIzk=gUG4YW80uo!Q;oYJGjlm3&HCP&H2M0LZ*9bO5+G@GXAOY
zalK{_fzhAezhe;O)&b*3=HGBe_5q_Zk{QrxZruDsaAspV2itE9HYu+g_zahqmn*-#
z<}v}i$GdTh*>`5$r@#S*jft0^zh|_3Hd9PwH%mz#{Xv?b`<1QHh4NnQlP^sN5ELau
zrT252_b~UE+S@nzo#{Yidwld`2FQw6U}1tg4>Z)(H-S0|EDy5>pBtWbcRUX+(XEK!
zMnjJn)|6gzDN>53x!|-kqzO;|_whbkCxY`j`F#8X-@okTgwG-Xw}hK^r<h2S38Jx2
z^-q9|=u3%d2WJDUL@yzAJ21voDr*ZIL`dEm`SgiAh`Xu@9x>aKM=~j!B@pl9X_!cS
zAy~tk!+!F_#MM<Z5&f891}u-ypVOv9Mbd;vEpKkVDJ*<jUJlB}S5;LqS3CGG>8tZy
zavd`!Je>pKi~Y=z1<7<1bp}{dDQldHJw5iZ=n4JI1#;MXB(T4ODhR+v3oJ^RG5-b7
zbp5n8QfQxO>Ij=c;f#9yzsv-0E|8s6MzQ4O|NiD#0^^m=hpx5d$c)-=?j;Q|VW;`3
zo}iRc+-3<Mfw8sK00!wlYM<}`EPMobimetdEj>l`OofL-B~wqs(9=q9fB0bf8ly(q
z`^uaM_Ckr9S3%$f)68O3QYO2?wZUgU8QIK6OFrfQl1xR<ps7aJBH>eFvf*Vwqw~44
z&V{%4o#>8q-|2i?JQSHybt7~{?L{$jm7}y9`)_QkEZ@1bU+gN?^0;dbUW5*6q6Zc?
zyJjy?gI3(na`0}w4`*NTHIc_-kqJ@fEGn&}W0HQM7v}O;0<=3O`S;h~WVOj9W4G#L
zCBjEJtEk2PuNJUnB}AjD>K^jG>RR*fOtDK=FS<EJUkndvJz5-5t>ldn^FcBY#J)y!
zc?pt7tBf{EDz8$8KmH;hSVimbi{v3nH~-4&Dv(}F3kv$Gu_3j)qQyf+K1UjvH15Zs
z{{a^`)UN*uxcJFp(3`6LZZyVTjf?>|LRRChq9`Y=lG=4+e|@t<QgD^-CY>0QC}9r~
zt=(}U@>Vu>)?D8<tk01NOJcP$$(FowhD8#w0mni9^QU6X+p4PDuqgv?laO#9c*>w5
zsaC0kx*P0iDrth0Ka-P5WW%Sd#UIP!gk1F^0-lRdq2tV=C>vI$--tK(u4~_`92=TO
zU-#J(9;$H>x3$24;TpGH*P7SimOc<5A=z1hc?u2=X;3nS{0@YH{-F6}cLjzoXi&~)
zt5)@yK&Ida2L{0Bh8R#(WMLyPmS5Ak^1tpDdjCq`E-Wf28Q0{ud5%Osr^4Gm;zK>x
zdfm)%0V=OOCSe$>)TWs=v1794*$KeFCL|=(gMStFSJ*rUx>vvCD-l#V%vLS~$876~
zg`FJ$D<VO-0q>)fA{@LMc~64!lJz})v80kPkPNPe-|o7_j*m-N<Vq%W?q0-wL2ABA
zx|b4#h}hln!o|!fFJH(MYd)qCgW3%+u0@1};iv$Z$0MwW&uJo_ZLNO#BF*^V^(Wxt
z<K=Y$$^{NiOlYXQ+>3eDRQ|i7Mz%^Bf{&j;^Jhu;=?Wq`dK=Ii`D4wNgBo7YA_=|}
zb^p%qUuQcJdFcijb(Yoey`H{4z_OwK984%ozw6pJ--JdWPjuR818nW$g6QL;e?G{%
zf?7~sAnkBO_#iPCBKYOk15XHw+i{5cBvAHJ+@#H+LLYt!C07o$?7-T~6u!cRc2CeS
z#C?O)Zvld88Aku}<6ACHok1ahZ@#<^{0I!(m$uVo#nsh&dtcd5ut?AXAm87e1++ON
zEcvS-)M){4b&YG#)AN;H<zw%Yy{}74c;_uoS5f@u=ZQn^UCH=AElNP=rCu?P&Kxnh
zdnZY7Wij~g%aocOjue(d{NEKD#H9(*qpeiPgzUb2?#m>VOu~t#{F;?zwW72Xu*oHP
zc^s#36n*`3<_Y;RsgM)9f2KIc$UVrEjjJsO;g|sqt?8$_w~!HsA%YumF96RTgxdwE
zk@Jz1573lOjA_?+6UnU%_W${@F<c3F-(xN-Q6WYSQ$nJ>5V<Q5E1v)Cz<zYJaG9HX
zAQ%k-&P<p2@Bn<+wBr0CA|kvY35HjBN6_XH&s?H>t7gHp2`_=;3vIM+glz<$G+0$P
z`d?DR8s@!##7cspr&s-DANzBR)hxsYpPe+R>0I|^Z5iK0jSVi`8)W1VAe!--nNQXq
zSLEjMKHD#P=b(#<gk;q24+}HH%UD)ccIj=ri(@4tge|D`s}Pkwdi2Q2$q9g;a%-@t
z%!6oJ(CedURG!RN2Z2X2GyWPX{RPTZdMOf=<PS#6sA$#U*QHBKYNI_pWtxSYb7my>
z;%;a$(&YoIz!9GI+qW-ZhJpJ0B?Oc^{p;HqOyoM2mTPH3<+J0`J>j)dA-fNy8#720
z`m2vG_pH9}^>uUvieO>?=8h0}c_|8ftqkJ`0L-SRlZ~bdkP}NM)|IV4`vo+NafCBe
zu8M3Ya-CP@5FX4vK0ccda!8faC;*eMFp=v)#Ht0TetJRS9fHiL;~K~$!yWr!pMWUb
z<>%+S4ZxAZAYvsXCiVbFC#XE`)CuC<r8LyEwisDceDv7*@yI^E28KmhciA3OYiS@Y
z--PP3q(risdP_MKmlC_93Op)!?T?)k(XSGrrKNBV?bT~>N^2S<(e5EPn6ZamsXT=O
zs!9T@RR-&MW(}*whPG~;*t--e`U_Ej`yAtvGJS}LR*Q}6@AKkv(dF-_b<niDxVX-y
z!yd5zt@G$tX0D*}YZUD7-337S6SD<%#d{2*At0Lmp2$;ZX}8Uj$JRfjVP<YnPI3YW
zgx!}WqA3SkTkgM~c{b#lT@=QB0R{%Bzv-DjopCYyK@JDsfXCKiz!HQD#KgpaU2c22
zIuFW4h+T4Wb61v^pF-S}$kv&pqN(WvEj(u^9_5>~Urc_20AD}mjjI0iXxw0&KF91~
zrlW1ftFHaBuEhF>&t`(A9VM~#AIc#MHV}&lrN8~zQ+H@;6Izv87o|uK2_m#{XwG!A
zyOMbiBGHj6m$;D8Lh1@}KYdBFyZkO{Yu4ehZytSrkShF|Uujh+Ba+aR@dn1A;Clw8
ztdcHog^SDkE-&UQCk{04R^~T4bJAHkDJuGSL4go>=YSz>1z%t;)91R!<l^ul%y@5J
z;)7k-l{uj=njGGiLcJ>UaD^r@MSXqJOL{uGc+qKKmZ}ay)v_VrQVJ+0Q&Uq=WxY*G
z+6W!SMB8gQZitBq^?=D)5!-Q7qxB3Cp^cH0$4^X73y`kfD7d@D@^H3Iy>k!(NE-ox
zrq5Zmkdvjy@&v4$sZ!lb;Ek~-U769UDPed=Z$Rz$uVYzRXJ9<Eo+;0OnH+pVLbro+
zke{9(qr<y8l(kp_D+tQDgr3VH>a|6bb*Q*h;hDBhh%tc2=HCP^`?IAEsgpf@h&eM*
zAraO9JxV3!+vI36fi|z*T(@}ui~usjq~g&{0)iSijG;-X(nO10v3`qQ9%9*vfdM2G
z?1trT-s`Lxvpb|t<Jo4g=`cMcF6fp|xI-U*efpZ#ukwa!GC9k~$SFD6`qOO`Y2K*<
zj|Q8Z%<9Ev%hsh^6BS?MP$GR5bNYNtIC55mcsy7A&hIP+#)`1%mfy3RwDk1EZNnUs
zz##PeG*2wkN$B9noQ7vQJuL@*J3C+v4OP3PkB*K)GG0^7YH6o`t#<=5Ty|GAGZlJV
zag57hrj{0cJ7wbAT#i-&s)B=_V#hQ-riu&>O_3b!3=O|GtDXy_G>R*8VJq{7-Pjb#
zPk-&qi7d~6N#!GY?zQ*9Kim>0nLtNJ2X-v!#&Vsvp|FK?28ZRIcYRB;FI0t%f=NZ`
znFqw;P&NgJY~#MOtll{kFksKdQJ(*Ec0@q^b8QWF29#2ovJjQzt=d!=ld+aqRrM5d
zNP@7i&>m75Y3X~OKT}H%G&o_GS%qmffLUfXZsI>$enRpy^o|FuWQm``uD##oMfdx(
z88Dfkr+lflViV7@4}BhWd3xZ=X_Tp+atkT$ePwNJ57>ve(#8D>0858~(UsJsUsEt?
zwu9p4Vh@st=vFWs^)veZIek4dxiffje!@o}Pc0V_M#C+7^Tzp`n<^>1(MPIZn{aHl
zW~($E9m`S?K<+n#9QH9ZE0bmA>zuwEj%J8NMn-a*iYG0tthjuiQW|WeQ%{2HYYh!W
zc~l&~=`08qiS5o{pOyojo7oEyPj=Gp2CaT>M0nTU<`|k9nK`b7j}dJ1DoP^3S6Kf+
zK_(?8hE1ul9*3b6L1w^#k1jdtbS?jIUhe}j3k;2S5=4xGwSuMg-MJQXr=>~?4mN!t
zwfZU~-AWvDVl%gUhka|NJA~jJJH1=I&z}rRZ-xQ6<yc?GN6LcRNIr+!$NKL>ql?E-
zep#9PLFOSP=oddHlwBVhmZrlbucCS#Lgs48FY+hoaXVu=njU%0&(|q3{=_7mIAWIl
zR5cVrI>pe|14-r;qTiA#QX}3BI@2JI#1Mu6BlEtn+qcRW!&a|&3E6l^Fj(vzKVM<X
z3AJbOpoZ}Rm{YL#E#J6LcON5xgih@Mk*Ag;&HNTxB38rez_Y51k`CdCZaJeZ`-r3M
zu~xNHV|0D}P=?tk26@(9s1tR}+csZK&otWcM@OQudH0X%!mPQL8b_NaIY{0pm2(`3
zST+%iH+G-RI<eD4@9V2;9?rdd+uldzcYkF{ymM>RM{ps+{ZndB`n^iYu49v&>`Jet
zR$Rv~+O#9F^JT&L-+j!{M9#yvTj-I3#bvo$NR1Y%v1jzX2!}OjZi0!ax0;RF$jodR
zsx^m)hf<vgT=C{(I+^%4zS+gan^5%!?QrBTnp#o@x}MpQluH;K#r83Qn8myX3Q3zE
zY_jKWFRol(q(K)dM(Byr$pVDD0B!c`4vmJRV=QT`4B{o;Fc>dj3QZ_y*zj;KchzCF
zvF5Y<QcYbWwHZkkbX|AUV(^EKOtGdyV(&;+yXo4%axR$)mIv*%po4D{Vj*6!cOX1`
zeoGsFL$qb(7}@`H-)?Jmmz%^upQytD!)z(y6M(^5ASeS5FPv`zkmK4GlJi<7zZljQ
z6Z-=2Hh9A^wdsqFz;+M4BQz&jz*W6n>D^{hAsKsO1XEf-+zQihB49Tad_3><KJ{Zm
zO~k6%UF>S8rq@}(;qUb&Z~baG)GX3CQut7o%0?_?r7}y}<whr8n(H$&O{UBAdl|B{
zlackFHF*BIfI%-%ixBod7jBVkcK?AR0A_|jP|?%Q1L2Bhq$dLX$8rq0&~<yficL6S
z8=Bf6`i*OA>-;*b3peXUt6Hd9a3x8L@5wooCVwq9)8{vOw|V~JZKEKuM?i=o=cis4
zIE1{Js5pW8+IUJ;AE(g&smJBb-#F&wkAlwX+bPLm<zku|KEYt>DVc8fj4tUnn5`*&
zGB?p*=BX{k!?Zq0Zk;_?AVh?M$2-^(^st><VlXy(4|#56ot-!IaRbwN`iJ<}b$Ar4
zkt1qpESF@DiwfA!wc>qU-2~uO?-bh!Z1lmrNtRS=aq_$Jy%5q<G^<%dI;1GK*_FC3
z@0=&U+HOzI!D4@k2n~hi&u#Ztkf<=81m?taeWXDm$M^zoiJHUy{=VbP1H30i;xI!X
zDQthoE3CjlHY687MYu(s2R~+VxVv0C0<Qxo25|FVIYeMeME51F3`!n1++o54TCHT5
zk)_WBVT1g*_3jP<TY||qTkLEslK=uiR2IzTys<8d-qaH5!f~m0h=N21{I|)v$~%Za
z(cjX?-iL3-(YhGqTP{<1Drls{a^+CIzA@FX2o%toO-vh+RQ@K;8eC16_C<r)tuV6&
zvjTCuYs6X_qoUPn@h0LLUJA3-{diO6OrKvh!MGt8rK^+oXsu9`&aYXrnPvxPL>^h!
z)^Uzd+E$VXva8+<#w215ui%SZ?tcmC^nNI<vH>;}gGAWb5uS9{05fpBxp9<mDSL8o
zcnDm*uMpiqob9*&jrK6I6#*E@i}m+xgqHx<V-kM?h+sStaxLsPpK~?;s|6h0eYzs-
z51OV&SRbGndt3&7<jXRXcJcTy-SN#2cQjQEnY@9pSgQjxB~6^rYiNmkEqUYRKc?SO
z^I30wX+EMEp`fIE_wF5(lAuhD+Fz{MZ>9>BJ~6HGtSpEcT73?;0C?QcFbjwCs`IyQ
z=&oi;`~s|h?Oe?U)Bu-SBQJ~4Xz^<U^S%S3h6**T+BVSV=z&)Ve7^EWtq{LvLJ4j0
zox>5}j^m@kzVcr&ljd-IrNQX)4nVrE*>t<V)f)#@RqaCD23PT(p=Pw95&dHrYy<1V
zNiWe|WsV?C#d7q6<2&)ut{}+OQyAu{8n<K-MeTca4_oG=qN3EqzWz?z{h5bJJR-zT
zm}t#qFy*n-aREJ?es2IO<QEi-GI&VO3XSuY6c&1JjB+H}l_<p?l8SnveQ%o-FWPe1
zPVGZeFaD~H=ajl6fZsr1$Xb1aeD#vNQ0smrYR#aA(DshS;q(iuYefQVGMz0brZ2u3
zs;YS!0qV>0NkHXbKhiL{eahJxBSmh`Q0gmu_M4Sc&-=4x>oS#kqEc6?Uj$W^Kj1m!
zlN}Fh{)tAUIo^uz^Q)VQipX62j}ZyQ$G7<8e$21)Sy?KjeDI@4{7QHz-KU@2`JFgI
zvqV0W%kU+ZR#V-K(p3?ED}-DB!C#wCVvXe6Txhlyz03Y$3AoYRCW1ycrEm1JCE9FG
zZ8f#EMvX4s5Z0*2sQq5DQbpnS$tzk>`Z=wdjQL1T&T66ME-bI7w|68vwRCS|<c0P7
z@RKip1c)(>Bm0Mc!mrAvUZgWYD!cPVcil?7E~*$o91ejTt;j!eL_~8zHCrJYmy|J~
zX*FDWtMOfz{n8I{%*MGKpZ#Wd@2B<>^%Rrw+49}F-?@K!g%H~f?@zTYl8m7^*6#Vb
zj!@;5W(=mP#5MVWVpTnLzU3(|+WivNbhbxyCb!DQaB}3(5ek^tJPt+(jVz+@`ZO!u
zmX?<E^mL#w&~Hb?17_bgkxC6q|Fkoy-c+iT@W#^3_iOj(3(E(ws3kCvvmqX4L0!F$
z*I+q_KN#}73|jrkd^QUJYh`C=2W{OX46EP|ZiSNR-q$NvGUNSMk`@#O0L&po>8Do)
zOR?|X8oIw1$jE)CJ_^wIHJ)N)t0t$T#I-y-7@9lb=LKZ3JsdIcdQQP)fT~jH#I&rq
zEp>FlY?Yjg1mVoT;*^1yZ{NSGBy;<J8>h965DmCkfn-g+3T$k5&L^UdmY!FxyoCXE
zRpxTNGT^#FHDeO9<>nydy7&~?lgFW5@@kd<1?Oorj7sd}>_nh6j&hs2Jalq(b|)$!
z@%og@8D7s#_VFr43B9Kk1P`>cH=pA9E#3q+=Wy+Z7r!6sNT%dtB=c608fTQ}SYlgF
zt*Nd09%>7#2d_9T`bp^!37UsdG46LG+MXRm6WunzPkt9S?zg{C@qJU|Nlw3=x${z7
zf6&KV7qgt-Hb1JRleDJDa?oESV-(0yxvHdd2bN?~D!;~UYj3V460o8Yhe=728Icza
zv2h3Z{$1s{g|u!KFGio2y5z?7&Ye({eFfD=h1&Avspl^5k8j^-PIq|G7$b~}qL^Z~
zmt|;Q?zk{(4?Wsn>%w|Fg@-6&0OQ}$)?5uF3|m`Ukl~BNII|nblXvUbvEdz!N0=dy
zkqpHGi(W)nJ$>56S5|x~a!tXYjxj?KS?9jFd)BdXF-8p%ITN}6rQf<%kgBtJtH=3I
z^XN%JYOdNX=bwtF?zj1fRFWoXND`t**HPD#ih^&1>NBFLk7e?OSs9LpyPh3B77%y`
zAvuMJ2Nuc+bYr?@7ope(WdGh5Nl~N;;`)mD*Y5j4&JBO>!x@S#!xhvYaKKR49|jc(
z#K|{hvQqTLsc6K-FJRyn6Vo;^hXLB}FH^-IQUxFL!lV@bHs~hoL$>io`I8J|E+eLg
z1doAiP-+x&<MtNfJGN(9DihXq0X{xVOak!~mYxL7t76>TZ4M5OJLs2xgj&tI`+)X1
z*YK1NiS|iny#B6^vGFmBpwpXMa>W?xdU{0+R0j+)k*@bv{qA5$H>7Z9N)-txt~a)|
zf^7<$T(A|8*6D~KWK0mU%a};~aiwRFrT~YpnKH$u{kN>Lz#AkK>x%AMU)RI$ZvOb5
zhEya__u3X?;uN(>3rMf=xs^&kioTifT`#^be&e#9&ASm9-LqGFHb%_ML8PY1qf1em
zxmK|ly=hrT^T9Xvq#Ki(b9O~&GN=T3w8i&OFY$|P7&E@TaxI{d?Y$x20!&>_P%8ai
zSDkG38k`(IZhe3@uV%U*OrzpNcMuzkbTERMU2CYR8IFpAT{Hw3_j@8)UoHHAvn=5-
zJ+j;##^Ws+!ecewv^$||>&i1>_A3BG1|!7v51v~_Q{=eZ@6stGnWx3kFSJh&;)#cE
zFl3qNRWDC))*QER(>f3Hwj*=gCwM^kyL3xdi6UYnV<m)>Iq0d}F{_cSC<c~|KEjr6
zG}8htI%+R>SzAFtS6dr7%Yum|trB_JB8(}`_k_1eTCp4iK{OXI+vxMc#S!;4Q7khv
z+DUl}B)pq<VDR7?j2Z>~lc|GY&*Y@ba@Pr@XmSVi(3SSed*<UaSgU|bGES|rz0i6F
zeIl~EE^844{h<E>ckCfVOWk2Fu}FDqWg}K{Ic{^<LMafMH7y$8s5%1sB2$1|^)3U|
zY|4A31e*QBLo1}XJZ?cj%ew^3O+&9sVft5@!8;8K$L!Kl==36^b-^$|?oJYBH<!JG
zgWiWvtE-_-5z(xcrlq4J&+zl-uVX!Xru}BTEgu#YR_rt?GFhv2R!9T1Qg{!&J`%Ir
zB2xliPRM4|k>>%a^TJPjXQILf8Q}08fO0#Y&3bcb1U35IQNB)zySBNbn*@W-Ly85Q
zqQB3NWO*~#DltM3Rr1vS7zFCC6m2<(rc$>nQlpwJ?cAn}PAG`_nz|I*dmMjqYB}3v
zJvcrwHYd<{ZCi6B-fn^7-25kYM2wzvA7hx|<=uciMtr9Cp^S(omU>bhR)#4#v!THD
zVk$!)ft)_9-=>g<&ArcY+nz_Zx~^dlA;RQE<#rw!0Qr8M1gL3w594r+Mo6hcSCe|n
zACv}WgMnoD)LaOiZJ2`zMR98wSX4=n8(Tdh6~e>Ofui@OlACE~w_?sj4R46Z(*FLX
z4V4P1_#f2!bIsJ!*NwL0m$*ETAI21#%r+)TZ)|6qSd1CBV|G;+k@~P~W)6v<H9Y&X
z*tqj_>5s+4csC>4K5aZ+;_HMV%Z-a%TmM#oRELCkbD-~#3aTWR4tB4KwM783@c!~F
zq+;C$y-0kkKVd>e_(kip13>(BM3H{zk0wvso7+Y9gdU!ThP=LYah3m{P@sSv0Z5jD
zfcdr>wX+-h%f5o!Tx)as?QlSjJBHy<#uFnbHkoLVBr6F|U*zhakC0w9ZLipf3JN~k
z^X^5<!uRe;c0+-@3xR1t>7)Y)BcQ+GlaWonHGJ6}hO1qq)@G}2cuXG(ZBhq2I~k?v
zQeDsa+D&j$<kGNf7DPRN-gz~rE`|3i)OcVNUzV7Ujth$t1@5q2z7pR0=OzKEHQ{lr
z2oD8c1O$3b5L7M<|A5ZCuM6LTq!mC{O=J5P7jex5ojwOn-xuegC0K9Aw=N1JtF5UC
z)(5^;#&JG08F2+Bt_J=2+WWJ&NkZz;?-`<W+7IUl<}V}Mm!4|DfQEJR@aR(}{{HGA
z#XYmG9?xH&p@bHNy8y~GK$Sdka)KmH-3Zx{&~;<f6^dABXr`ngx?<|8Ynr$Ae#tV0
zaVRBZ{Gi)><Nq{grC~2JJ5_k`#_aNQ>57Si8H9R(UnzRtfm0)9FiNz$US)nkc->`K
zmfp<$Err<1gYr~v|A(QsP4pd5*Qr@YywS|2-{qQmFV#e3K4W5cn=Zv@-sIe;=XgB0
zo__0G;tYeuZi6`;O<;m-P}h#L#hPQNaxi)>v$>0gP0!BB8!c#O#lehZ+3SwS672^K
zE6vo(3jgAl4@T;;(*bswD;*N4Ti&2}rELe+zXingr2MwmGS`4y`^w=sZ+35`qA;nl
zx}m<lJ|%_bt9PMh3-L~FAiJgX#^aZ;`E;-f+r+3@!SsqBa0&u4qjzIbW*0$&g^n)O
zIao=P-<8Zs<%`FDc(Om2>4Pr*QUa6Mr}8c~+Z(?<qDVb$hnxzg&xKi-3DT`6oUcp_
zHO-C}*U8&09>fc9mPNiBubEPw^t~B@7A;hF-Oyc*`DOPHv~Af6hCgy*48KjLYAha#
zW2V_$OPhZ6wuwD_koFy7Gw4&<*nEWi(;s4DeEg30et_d|9020@6+KH!OR;?<eJ``r
z+Wp0xOjT}+i;Lq~98dc^^S8dF0AUU_zpWxTL=w_$_rc`~&H+X3MM%w1E5v=yc)eT=
z^z@eQWO;7D<Va8>f{IH#A&L)C1i<s&;X0$ny`ol{wduFg-4yc`>Vr}lVM^=fz-vKC
z-S8TLvLN8=zt24B08J9)B|2q#qdydt;)SUaKLGs_DQ=qtG)SQ6$N^nBLZ=qM8Cpoo
zFK3Kq%DX7=p&SS6%@O8ZSuOzOTg~CBRQ1RMpnH(Bk-y9bF)$v&_CxhM4it{Ul9I?)
zmI{ZL^J}$snoykznc>f;obPj5AhhSKWZe<Z1wW=#I)tYXO@Tz%r6^e3|C}Tuh2QQ*
zf(m~0v@8iLn^ut)0MB7}mcj;55G>_XD?%;8o`}ufQ}gvOjz2y{teBCQ?&IT&F9^|G
z@pHR$7h@i`jCw2(%bNNqnBk25_=WhHr2QB_NL7Ni%nFwjMdWh<xr$IRXE(QM_A?B|
zxvCb^is06#Yu9t6(PPAJSz|xemQPOV645IP&3rwA9%lOCLFF#?93oWO%58>HFi(Fn
zB24`TE$TGkR&1p@jkhx63zOVakpl#``o-v@pvwd<$6e&aJgGO9TeCd8uB?YYW{yCj
zbPXBxF(<PCw5vc<((J)l#*SeKx*a05KJeW;Sy;GUoa^%&!%VPS*qj^&wX#I0y#zc+
zsHhw7(_qG>-msCJ91&MEl!Lm;o<EC!@q$Lm@SS~1iq*|x?gC8Fa)>KQ<V4TYH%vmL
zub=tGv&j!EQTKT)5=3fa8&2E5<qpy{G-mee{*ET^va!(~HeY~u(;%qtB9)$>AwF7s
zpn%_6c^-q2QdP8Olwo#lqWWe=gv+zu*YEGWm#4%tu+eeHXJQHoO@AgjoRl#zx(^ks
zth!mf6c1kHl(-I-YtMN=+X3UVc%>t$#F|W++!`Hbewx(i;Qm(&m{h(MDT!@<`;k6N
z#og-wWH4!753<*gl|}4F2?HM62kK4j?d^4Sf=`g)M3BCD3MrzDj7+Z?7u3-_TwOyB
z`>I+}J`D}Ava`!Ztqmq9*iI!<9R}^>p1}~d!QO;bweZNHUgV5{FJ3-pFkh`&1&^8<
zmo#)n&D2zpDKCEcJ^2h&yTtuYqqw$Wri&qysnDxZc~-zn@&hmc=!0PzSgL5sOI;zq
zd!L6We#%!$$RXL4?kTk&dd1RAOXvBMjMs9fD+F`rke{D0^oq~)sNiw~i0OdFxMmkd
zvVVXLMUha}vIdtpkon2_{FvSbxwuy%v${EO7>nZfS~)p&bF5D&_`Hxmefk6gY%$C%
z%bm7ABK2pdvU6mUrGB{=&)9}^!96?n;3%nMUeC5N;7nn@U;7mzGo|yE($=I70ajET
zPjQba0}qEhgTNYBqmv_Esd};8FwZz4er!VknPdFU!@c|^UlT4dvB&&kOFmhj@eNrL
z<dE;0hz|!|yM(DI;e32NgV{;Y#ol|T2YqiL0ip-DiHQZRN1!done#IoQ_5i&*!|z9
z-_ldLLv0dfQ*=-PMGr=D`-zB{El|yVhb9|>i6o!;btb6ea;3tQ+W>$8J^7CB;mIj$
z$U&_zCT;W_>){-P9!v^^eYMw=3Ubc_p0QWdanteeQ5Fg?2BQ-sF}0A6f1}44?|tZa
z-OMiX_vWi)tR!(9cEnr_p$*A`)nBdD$GnL(penX(*sO5oLBU@fCaglr^@8{v0MbWi
ztMVoSF%$d&pnQynTZ>$8_u<)sXb$Zr%*}&jQ%Z)r?cl0WE$~C4JgA2=Pp#xQJkJ}=
zS}8r`h~*m0=mX^L2{f94BnP?MLg7Q|-EQn1)r|>&P0kdl1KMKQSIjbnGq31L2R=%t
z>(0{k&AZ#Y@@i^3*;2tzw}k<=`}ib17yJnlZr|`6gVllo75_XX=GI`sNf14#aRB{o
zBgNbY1G;Sp-JfQgn$v8<ymJnA_IOM@3X0sky!VsnE3#~4x!NlBWa6`+Upt1GU-6bg
zB<Z_nN56D*kmC*Og<6BS$?3q+Vi^ykviYtJiIDllr_G`t6gD*IrLd%quLKWK+dqk@
z5aZyA4ZvrO3LwEpL@WnY0uu#NCkk-b0YYRf{T7PZFq$;y8ch|H)+QQ)tDys#226XY
zV{B^im2JZuccOmjvmE11m{tKl*LQULeFN|wXhr$gAmH37{<=FmKmW|jt79qjCbX1>
z5;=T!SFXIw5)$oDxoB!^Tu#HeegZBA-{!Fl*L6x0?^;_?R_zi(@jscFnc*8lua(hQ
zIM86y?@XCKCRaN6?C-yf9AN;6MIbWK6V{14kX*nS`0%5kB6lN(v_WzvO*I$u0{5Rc
zMk(FR;>ZGMyxAzvb8=`O4Mh&B4B=eDnq(AWzG1_z(Zh6CKoL*YC3~E)5GBP@MR^6?
zN8PSlT}cOda_<H$8r=`TcmD!wN{)1hkx@C-T^B8=#65sXgr&K;P=$9#<MurAgiaj9
znxPYAf7K5`f&AP9HyH<gNFi&HfGHhQ#h~rX1QZNaeqQO1Pw&&}!*5ArgB@$RFWLe0
zJ<Ml7<`8$5)Dr|&$7MDOWK0K#+i5WO24*lJVT1aWNkuW*HU|Y{IUYwp9}5Z1Ky)nq
z5R`@ienzx}hPAd4m)u%I>e#$Wi|V>FGte&(b2g=h9(lslQdZbsxd_=);)C=C|7!{N
z>ojtOik?~9I5VJ0i>sNP^Qnm!0$Cs`HFbWax9dB5B|#_xalifxNE7hZ+h7((2Y)}q
z<6;=c6}Y<4%CL?ZWQUWBqci^P+qbJ0oQyIafexb|bLjK0vA9lCA3uiRg{*FV*f2+|
ze0vFfgw5~YTm60zlaLJLef;p@*Qa{igjzZnuPV=k4ahv(4+WG{*5D3>8`xDH2%97S
z>)5XJT-iivN>-4}e)v{`NkDaNQO&w!*oC64U4CeAq&?_iar7;p-RN6LyPi2+$NiGx
zHq{mL5-$@HG$Hu`A}Dao@i*J}xE`SqI1{n%`(%jy^ar%;iek@eI~dr&z74`e)CrDO
zOOwu^ptEg5U0cPr+-D%>IOhCZ0mBC}#e71Aa}*hy%X-oVf|v2yUZ7jV%QT2jO%5HG
zX~_zP!MqHqb2}CPh>nMMT_ZGk=9o0>69ZIB^$Y6;_(8Ld1-c>hF`G#QOO53q9VKN3
z1V208nZi0cT}`}?9<|%>oL+o+!B|7+^ZZ7Tn3{~t>Re6X<R=*2(!&ieeeT&Op`5!&
zI<kz6jN&pQms#IL625ihPwr$;GmBYU&Q|7t`W%|kO&|=XzmWS!>{WI8u6i@=S67S2
zT}+1K_eV(eA1}EkB3ac%`t=w~Zr|!z3<V+0^}C;|RoII=wLnC>2*?v@85t<j&^=3J
z)5W<2tpLnU$7M=+8_ngV*VaOxP<AKk5<~*N<?77*Fls58#B9i#oZP_?M#sb3h=YlF
zo4&>G><|L3<v{INg<g@oM7BG!4K`y`R9irdURYQ-VUT1?O-`1?d(`BX^6P8oF)alm
zMIwM|@+BeA=w=odvu<5dfZzt6H6brPG5$3(b?6O3Avoxy39SJkEq_^$`Ht=;N66Cy
z*VI17@Bkdxs!-M{tIBVnchz!3Ukd&mSNDDvjh+IiQeIqi5oWLUMfYDq;0ep5PBpDg
zrP?5>wbf5iQ4y5yjZJBHe*<GS6q_7|i*JLW4CG?4kx#5he^((1DFX4?7wDzy6l;LC
ztREC4&^|Eh+Ub1?^F~1rz6~hHLyyf#%6iAq^ttmQI3AZ^_R^QCQkk#^5TFWi5Ab<x
z>G2pWymtqA7%0YqZ{c^6?2cXOB*NPz-*lnJY?#c|RInEY=8IpxHrU0NC1mK}oXEpJ
z(54S>M~62@ve0FBz%274(B?rW_pwxWXyi+)%h#)UKrrtDh}3-_4<3W47q*R(w;9~Q
zN01<A<HC2q;2GztHLNcOdmCWyAgr2$;ulz=0Ewkj_~0>59kl)G9A-SA7YOn*#L4c?
za<K2VIcQ9PNvT_;);Tu^)SPW%;&nKZoEF<CB}y#%aTJpqy~Vdc3}6J4>2C?|@&+rO
zByyxd>nkpkQpAIMWie=)7F;ZI0hC<<X+M6=4x6k}-q)|Z9}=Hj%XfxHerFa%PC&0K
zUAtb1POk-te}&4osP<c~2Kz_3n#=$@N@=jGn2p?fML0YAtV%5yMkKl1LR>D~Lu`J9
zOqYp?so}h*`TWlxD0t`F<n8|c-F*O2F%zk_mzVI~b1pqD89hCcLnhDciV7~-f&!-Z
z6bTlwtM?H6SC-NMRJ4*E=JjRz2HM)st@=ECIvug3_B=$4iK^i-MC*iq*4U!RvCcj|
z)0t(4;f?<9%L4CfoVipTY@6eXYqV|Vge$)YH-q)ARKz_*>23wGsS@HChYdW7>^Ir@
z`6}yD-f?g<*E|>#J-qkU%m(vlX$Or{@#96f@8&43q5NH)Gq!5y^%;0BKPK*&4X-oU
zkP|L{r01U@{oZp_LG`KLp1)p;o6ce9w*^uhgBHnG%%p(G8}~8VO=0+lZ}kfrNW8Q(
zHI-d-jf{+-x9{SUz;N##$}eVdsRaIGEWn_@VPgf<A7MBf=1q_OVC2vm$C%7eZl_AM
zg(;c6XZVkVTlRVwxTrz%NgalfN3p#3GM@&96Ah^1fp6yWXi?=SjP_)OdE=0m?H?SZ
zaC1zuo0#OFLkY0=^XC>2hOg*pGuK0X25K_*xVbw<*i8UB0-|otKJfd%oOK>gPe7!h
z0YD8VHbV$2y>65ak~m;Dr7I;qoU4B#k>$z)Cp9!td3o{IuVZ0iia0MV{g|nMc_hEr
z1sq|i?5=o#>eBHV199Dv_*Nd**{z-+y6Oo7!uye3-+wbTbzu<jx<(d6>e=LCz%WLT
z%no5rK1bSpNN0m-21x;UJpum?Hp52n;elW@?#xi1$l1jnbZk%IwT7M_91c|X0O95V
z2gR?&_6k@l5fSK9(AMsUX&W%LdYB>DR`;zzUQy9_z7oBdm>)$03<!snr*CNZVuMw`
z8p)HK3?ur`YhpEDE$7eaL2xK^5BDK<1nmXF7+UZyo}NG|%7aNna1qW6AVhfDdLK{L
z<C+UwYb0Btq&9QV0F#;-m^>Au(vfN1jH}FhmjbCoV78))uWxt>P{faf1O*LhZPBCr
z@erWz04Xbo=*~dyWS-ROw+ZexXyw4(4HK|-p+F!d^&IN&VUO{A%*G*rJ%LkMRw~?e
zZthRkYc55a27`Acpr7R(MEgQ5(Ly8g`qe8_zMe4<yK#5A*lsQ_OPL`5XW4YQt1l4B
z&A>o%38o&a^LCIuU4k9q_$m}V-)NP*3lq2k_STA%W?q8H1d{L@69X{k6bl3Tultt@
z2ixF^_-x$ZYz8HKFt5N-I-1oE-2WRgjG{Rb-hsSUTU<sBNaT6JGWv=i;I#k8WDf4d
z@Xyid$T=@wDEs=R!zdNlyt`CT<NE%<goH-x_w!>}?Hw+*W@b*0Im*7B1B%ef%Ifjs
z$Ggtr@5(EFJw%h<QuTiH1wtl^)t@j4P4c31qW(!1*e$+5_ym)7!Jq*<)!H=pSne1b
zw?f(ifIn$%?Kj}2fVUJ3Q2#h6!;RpXm;wF-itp}jZeRtTf?~v`F`mC#uuAUSv1pdH
zbphZ-uV25uq9;yGZKlMlsi}Ff_~C=*z0lcNJtiKay)1b1N(|nydcGhClMaH@r3GfO
z0oyi1)Y}Cp;CwctOKgHVrJ+mOrd}=1%PSECh3p)_CUqqF&$TP-Bo{aM8cr{m^W@Wo
z*aZn!+@mi!5Y<3PO)l=soS=8uQ255m|2zP)i%S@D2xERMu(1zXyno+6G=NsM|MAZA
zU)Z=WllkrTz<<^&3`Qpb|IUqg`6ZxGICopXQWJ2P4v&h0)sBga8zxcq3IhWJ9v`4u
zNY6fczy6;=VP;QZhL#<+hKbxd@cVI3+u7R_Gsm_&&hd_p+Q3Yrk@xSxV7$J5SZ>jO
z=-YIAmL!L$-f>Q+^_e#0NPq_ENDsf+J8LQd+(8yk85yWXK{~zxg(^^$L#72FLyxD8
z7~be23~MXUkf*twgKJhhR>1gQEuaV_(f4pz^u{Cq=c8CNzu52EhkU~bUU(3lK*#CE
z^2{4$o7to66>z*cSzAxTC~@&s@FZPOaA#jaCXXjfM>jb&l@DW%xyd8dzqDUoBlm=c
z0Ctet!-t@ZYlA2TJV^<;xj_*TgB{OrHtgbEz>7H7?D@peF+DSr)AEi=$p2`ibhq>H
zh=_WtuUCFi^5l8V#L0=X-nMqgq$Deg<d$7hQW7QM7}fBI<PND6_xkp>gOk$`uavK^
zucIS-W_?FTtctuGo^0RF{{G~L59=1ae07<4SN1g+qYd`8SjYtT3ONviaX|~gwaQ6k
zmP#C+o$84l|1<icH9lnh&*lTC1mV>&^Y8n!rt$ybH?Q>N|N3|1uwjY{oKOEajq<bH
zFuTC&Us(ye6U@jJE|QkV3m`?dvXax*wo+BqmXoXY`WFl!drvWp2BE|)D$2^h5Ohmc
zkPha-5*zC2<=53Ug@&?{V*Ll4jn3D`lg0-9f9@zC7@C8oBO4mLI5-3*A^iUP@5T{N
zPW8roLQ%rTpQ9Fi<E3L4$oAhAh47=p6$yW5xxYrp;L#=gmox)ECu^V2iPq>HdrNlo
zdDQ>$ix|-8=`CO~8pTde{C||(a4jW24N|Q#3yb2LRB;I%1j-P_{qqPk7>O`xKbAzK
zV~Vx@cQw3r)p)!?19s!C%KzLJyyEznkj)RH5M3pF0(Jku{~lksV_-TmB!EAv-r!ve
za_$a&|GyV2==c*btGfheD;BRg4sOFBL|kQv(S5@sBI>GG=uTmdP)oq&!oa`)D9No-
zq0GMrNPOGmBr7rriA8{B18($cCip*JE;sB9lEt?r_Xg`Vzd^Vs;^7FMR)hWBgFhfz
zYld()-**X&>Z4f_!y0+68#r);neHupo1j-D;fVOp7ccujYBY%Zg<iE~90+NeaG-C;
zE%@IZ1=G9?4juxQvJgMNQHz&Zyw75*YZ|wiW9zebP3}KhKtS_zu2ffOmK7RuYin9Z
z%iX9u=r}mw8uj>4fV~W(bAu`?xp`m*okhl6pDxzSGpv6wSunt0vF`Y(4))?0=nZD_
z+jW6G0Kf1%oJP^)B5w`rQGP<mkxnK7(JGJih$1yLL^%IF4D5mHLEQK5JsXH!zRj85
z?Efcqg!9QSYLFyd>~Cr=w*A@OiiEh$ZDVwM2S`35xPdo;{S>rDF5y1{qBy7<O%!V;
z!2o%Xl`2QA^+Z@Kwg<qdl*+`!LkPIRRFWV)@_+I4-GNy4?fV*ph)_cI$SBE*QbzX3
zUP&m*in1wG2&wG7l08C%$cQK-BO@a_BV?8k@jJZl_x=6#RF84r*L_{*=RA+|7^WW{
zJ8O7g6A8l8uZ1C_{l9+wioD!|N&;w4FHJENgXZ}3lOrl%$@Rbq7G%Skduw*h5rO~z
z<7Q(B;cU6wNK0G?gdG+S?hx<_?xR6C0?5~IZhQjROU>kf%Vb>P1m}xGG9N#EI&0NQ
zvyFAohf>GsYv<3O-_p_VHF$dmQKhM96_>i+v$ThCw&0{kQulC%S_@2u^z#gO%42R^
zzi!H8+m$gCbLRV~$*U`?5Jn`Nb1u5KmL#EsX$=a^H$}Vx_QNuAa?<vf_Ctk?oRe3N
z9?5{PrK{s0mGnP%k5Gn2x*No`Z|_pW02yNi>-@&wRcx~u^82MCd37N;mb~wF+A%M8
zj$upE$#MrGlGn>kH|tFy4AAhola-Sb$@6^)#C4kMUTbaSafR^09~>DRgg|)|9ZbC=
z`SHHqmX?Fo8pg(nn-D_me~o_1da~JK&z^0E*f0O{w}vhC#4(%5^mGecF%Z*<ZBl;F
zF)?Le4A|Du*AI7l+;Y4{fed-&weklPn!?fxXXZ}iT}jEyV|%QlsTuh6sUqu5rt;lT
z!-KVKY<1~j9B*O6Dd0Tow9u8KI|mXMEGQR&Pl0xYbnXv$$FNX75c6(X635{=`cqV|
z@80bjr;|2UL39o*&>|uub#x-!6-c%hS|?@Y<^B8>(4nUg|DsZ(>}RIA7GZ(-6LNCr
z|B9Du6e0eFd^e*-@)=Sw=LW@Z-95?7t@n8WcWH+y<{Z_S=1Fl|&vE4k<FvH3ONcZo
z#W{V8<gdUrZS9~%&(+!VV@wN>6=?^E^YYT4-j#qXx8<_3vI;P`{OmJS?F2E$b$;Nr
zRo7$aLAnbT>wQ;A{+S+05S^Fop2Efe9KA7Qlv>)L5mMZ@b>=at>}{%5Mf6z15)V%c
zvj^CcFzHCVR*eCFkAjys)XmP2Kgw_Y4&r4~4=ZSE8>^^LluMJwHu8)z)JsZXC2BeM
z1-=Eky1R3eQKJcEhU?768y}(^$h9Cp)%b1ISNJ8A-T&t2m|a0Js+&|G=uZZ^x>@|l
zN=%US{?ioxNmNv>Im)@Pun>1>C-~>i&d$g;-#g~Il2(k5H{6NaxXQx<3hczhcElEl
zS~S0*x&9G@?ht17nAl0k5B&E%L<7RYrG%!>eq@`1X)synmL52SE0aQtU6}_YSc$)A
zEsTxrxx^`XS~^X+(sya85$<$9q;B6n1@{1^0I6ZqhyJ2$Y*58wry_UhlAF-93@Z&i
z{o}YdNlE!pQAF$k2}I3#Pxjw`pb-ULWLH<$m(G{gWYSyOjoxHt;K@Kl6E{(6_Tgrf
zI7Tdkf?@kr!t=0sJ~&bXo=R2AOSxYdyCmILgsXGa;$5bujsjAtxWDo8`SUi^gynM>
zl3e3OPf2=j3wv*~X-0ycHHqlWfZF~IsE?}v07g1|Mqi1=_TRzsVvj#Rr)Fl5?c7=C
z_bQ#5WDE=j2~N&QFfBfP{0RGo1FauWOn!D}dzzY#jyJTpG4noB+`~@@ghxiEE+T>k
z*3ac;AxQRfvs?Z>PWLhV>2$1Q-^pGAk${6|1qC@o6u0(`p85FUsRBKPC}d~MGOR$P
z{D#7Kt@4shxK$ViC1MhmFcq@ym7)`Lr>3MN=rXyUa)gTNWqLYisgeTrIR5?&$BuE(
z?Q>#JHs(5YhTVv=JSmAug(2jTBGJq1^~|j5Os580BU=CKB9?KIdTH;YX<h*Vj&RK;
z*%prWV{tcnx^<LDsdfkijvyyAMW)H5*g^P+hlj_^j1>f-nO7#l*@H+0<Mx_emL`nj
zisstpe3^O!Ef|JB_D|KR{iQI|aN+tzs36;B!V`0VbpyuI;RjiY?R+a?7^L25ax*Kb
z!q=%GBtf$1;=DCw8lOOD{6;#__qsYZMRKYgvMr^L+OM)n)UpDmw~`kx($jGKrs2fJ
zxiK30(dXGGhB$b&E~~RlQylrtMD~D3l_^{f4a7G2Tl#wMW7-|-%GM$4(WC7`Nw-lC
zvTD7JsOyf?)6%M6kPGytlITlGF>`CQ8rFQYezq|zN=3_ae<&T^LE)Dy&+(CcaRMwX
ziiYA-$;nv)630t5oaHHZxZNt3L&6~h^WGOX<jYcYaQwQDrsfxO299mrCEM>LpB&rL
zjvn~C7Vw1aJIV5CpHJr}mAIjAm;R4<>|vjwu-;x0nQ;@sc2V!fhFeMhf|hhI(MfNm
zjxK+^)CNHIgrYGe%ni7CLhU#lsNAkQ{^;Y-d7hejWA}Q9W+{)0@09f>H<A}mQI^wP
zB#YU7{~=F0zmEtVIYQ+td-;*%Yw;{mt~h0aMP&ub9YmzPcjV7kQtVOQZCKWW(wbzl
z@-OdW4M^CZ)R$nxDtjT;Bku5y#8ry_j*8o&*}do8qczFNBbSyecb`ya=g5RUi->PT
z<^8gThJlCcYYrye*?ymzz{@+;eQ3D<=)~=(QnsQqb`Ol6o`3GbU-1PULVvh0iA-Rq
z2B)YfKkpMFO6q=kU0qJ$YfJu7m@y^<S@yHD7xxYZhsB2bHHG6o%ii3F)=`v0&1WB{
zybLFrP-kb4Na}uCiDWnB<-DnrBHS(s)c!h$W$mQ?KFmB}!Y}1yaaM$zyz?=Q^5&AR
zi@{%MSxN8zxT?u8r74Xr&x*|U)6-*4Xbuhi@}-VV>-RsdBElz6NO^gmSX;}eYvvO<
z=DUaFG{`PIOmf-S`;Dc#_2fMtn(=4k=UErFV})oJN4)o|I|kh!swnM(nch7KoPh7#
ze+|PYxzkHgRyHj+H@?bKX}2ZXlC&yW4~)~$JnU>IH$yT`Jbt=vGWq3xKa;}aid(1A
z_8zLgm2}Qc<=1$_T$%laQSNJlrErnAk|6DmNrdM#OJbG^==>jBTW_pPd;z%>0!wkv
zzt_K&wrX9}_^X+%lYJEsyP*eygv4Dw$L=m2WUqIAA&k&3*<hfHw3nZMCoB4(m%`x<
zjk!)lz#zGmOsL~DzscLtI_J?0wezTPlM^~8P93O|XmmKF_$n#s+T2&Q7evd&ilKG<
z{AVrdV9t>4G(!d486)>xXZk#h>tE9y`vDG26WpOu=b0tkI$>`ZL+9-D27c{u;*^z0
zJYV*3Lvt|54Q>E%`RXY!DT79PY#ND7hc6+K(af~cdG4B`q9tBE9N~knsL9IK*ZQ1b
z(MIlBoQNZ@=F4O7v}$BbyQliXU_OKQWT@JDbWWH~UclhK3-f{?jmwaOVe?XpQ(>#p
zae6G}(kHl20nt)j?Td*q&%BS;)1%;;XVOK_yjQPUJwf9b{r<~w?rZDM(+|6++U@zb
zAt23u_3D{wOkv>?atod^oTcfsLy{F3<B&`ZE`M+9_&iimqCf_-C{@9jrMASgFypZ6
z({S(2_rb&rVtdisXeB10tc#wWRmegGMhqxY6D~Y}^dHjuUiZB>-R6U~=9OmZ3hZKG
zn~<SOH$SuS55b!Vm8qPMXCWR>KJoqZdBR7HOmMmgNN6v!zoz<wY^KrM!9O!o|H|`L
zE<V+?!!zB(<-gvyv@m#_yen|PzY`5gByZ$FV&c53<q3};pUZQX^jdG+UtCi1xDr<5
z(r%XJ9PI(8{jTiI330~_db_VMKRf$%idhm7xituyasCg(_WK<)B4_v-+|2^ty#sL~
z|LN_vFM@lbs_|f?b;bQc!~d{=*4DR|et%}$-n75z<OIK%;?Z4(7@Wc273wzIJp+{I
zYmTlXL_BChVJ7!6OY;WSIeNu6pJ9wZ*9p9H>^<%k%&B0^S^Us2yBU46^$PyHft+%*
z>1aL|62yxmBeYD^ds<un!Swc${~xq$N|pL>I#P-{V_r89*&MdR8<<{DS{n63@iJvI
zobvf>HT+eNbsa;<>OqA_-XoWjB-Tc}55CG<IcurGP!!VSbAUN~>Ex{j%w<IsyBiN&
z@<r`J(`_s;ehzyU%0J^>cb^|PwdH#v`~VPof4^t%ASFL!(ctT@_o$)PAC4Wsom69<
z3Dx!VlwjG26%foaw4j_lKu+J6ZybN-#z&Z%l!5^cAQ0drcxLA-tGvnRh0|pGR^E?{
zcyIn;1g)*$O35tVExM78B8#AiaFBF^k>}*RIQ*rNd-dY$85t#|!-9*w&T<@wOpUrT
ztRqQ*{6+rpO+wS)oU5mXOImK#)kY`u(NQjr?(4N9r5ycVea!LD_Y>}VRKR%d6r2e-
zPu}!Dl=$Es2zTTR8CLSKZv<`+IKB4qG%zs0E<v04X$Vv?kFE0Yh%645p9NDrspH<A
z4`*C{9<$5vS=B-_*t2?SKdYChWe3677_!g1Q7E*J`htIl{Fg_6!=hO)(<8|Pjs=MD
z5EK%^eJ{QSscQhZN6()5%@i4E#?SRG(wws1x7Hf(ijxY1hR1AoIRH%L5YzJMP5k)M
zMfnjM2On$Fcw(~07s?K5QSK;FQ|%8`+a)CL9v6GTf<|7P*^QN{0TJ3*B?~RQ^vcwX
zoSZmIef+jZagV-ZT?Aa#V|g4pgvVbxv}$ahqAeLTv$frOk6k4cZmJub2Y&WD9%Jyz
z$;$eic;2sx1itWyi39}f^YEcpYn<*|WUb#Ucd)=6Ihb#JFkn7e^53W)K=|x;&NjgW
zoXRxc@bqo`(wC8u*-h{&DEKrX9TrBRMfoU1c=zh>|L@gbURz#TClFzq*G8%<l7QFS
zi-?XK(KRuVT!3@v<?ov83eR&iQ$IpGjEp>t&n<%cZGHN*h*|j0QLqnprWcpLliCxs
z{N2A+Gbe&kR17(QCz-TT9_<rdu<J~__%rvu=KzdI8^U*!Wr@c~&icB#x$XC58!;+0
zeTXz?!UO*APvqW;7>l~J<<E6r+y}?%mhpdasd^J4ElP%o<Todx1IX#SKYlDCfH^0Y
z<e+JPYvf+^J4oB<rekg%ft>j6QS8eBG}jgJDYaRDIFUIfwHj!xA*-Me-xObV&9>LL
z_Dl97Q;G?#T@#hfU9%B9U)zFBB$E6z#fp^JcKv~867JXj{(cdw&I#ChS&3WM2aKU#
zhLxZp3>opMeGcdj_*XKX5oS)4DV7rwd;;+N`W!drwlnTNVj!Wfj@Ev7@q*>x!C!!7
z2l|g-QPaBg=a0zQvlg*nz+V&<#f-p)?(~CZ!_Hn!xr6nyb8~`^)-y?niQ$H$Rhyi)
zbM59=8aO8c@6*%QpVoZ+n?3qbf|#yVFlp3#5u4HgMs|y1BG%2LwN=^+V)RT*p=0U9
z%bm5)6c<_7s~PBT-f_{0nW|3-+!5uxnI^0pa<DGpn}x73g?o;s#Rn}_%Kn7Uw8sx`
z7!hL?2sotg!Grf8MIjLfAiC99og7#j@kn`1PbX}lTyLxL`gcW1sodc8%WR@QQ5r90
zNun(7Bk>SodrQr4_3xIHSC*ELU}W?9x(f`ZPX=u)jqRhBzi8e=OpVgTwwaojhiO+@
zI_8>4BSljoy?I!7(O`W;ukD1iVf*BKY!cD#xp@d!mJB%vmZ?|@gVcXX{j}NRd?5AD
zm?d9BMF7GI^@Xkm%=XxL5Ps^)4Awp(32q0JE&0hK?Qim)#GipJ+a0`qP#XldaiIO^
zO#cQTXrmnk4si9E8_@~!Smz$5rM)-x8HQG9;8acj`H%~gSB1%SYHuv@@bMwht@!w(
z-%{0sQffw}ZxZuvJ!AW6^@s6+5~b{dOwun)%yzY+#3FE*7PLB|1HK1jUheMypsMF=
zp#&zDbG1ASx>A7YhAy03Tp8F35t7nCTA$?q2_e^ihTq<G{MmQ+Kd_D#2Vqlm)E-|T
z>gbeCo&Xvg)|9V?LgITrG?QhQVJ;=bV(Sy=D$V?yUc>>Y1Pc4fL|=aemMJc*53IWt
z<tagwf}pGda(FD~&CqWJ21D0S4Xrn{YK`mf;7$3nFI(#2BcyV#&VM`2%^k3ba)y>{
zzAJMFc+WESVIVZiOPKE-hkW|4OZf#Ir+%Vish|G4wNV@#td1?R?d_lmJY$-vk9+gW
z-}5)G5fKqRKXxWZHc+dyv;hTznV!D+-(Bkf`GmIaZtOB{qTM*EU4*R+Tti}GVmzVR
zR*L$2d$^L5|7eq#%g>nK*`cSF>RB;n-IC>J2QZ#717rp-xuW_XPz?u#hL0a1mmF!G
zXWZ02X;iue{g7(@i)>4%{{vzzo`V{OQ<#+@HP!LyGd~vd2mPn^B}(oH@KPD@e~)8e
zaMo~nw>>>vjSHI1qAtBYT6?MKZEe~;MNylt5lTnjSj<dd3<dy#>SEv5F#`#T*ugdb
zrq>AUgZC*Ilv$doe+$h%;O^n{gj0kamLlASMfEV~OZx}t3KX2Vg@xCqwOg@5JHUM;
zXa)+zYV7-qdOm%6hy4NksIdqAXc&_=94G+#59mi2<@1Yw_1Dkru1Wxw9X)CA7I|9v
z0x4vSjD8}arV>8~N;W~{1~w>qXY@S?X&_LAF%w4O9(o8tD1vI?t5OD|x$DXhb0KZx
zc|DRru9Z6wjspX`4J`!#5zO}U<KuOgs^Ky7s1QW%si}?K#{-@g@)KO(DCuQsG}WdY
zPug#_gGz-Uq>FdmER$F-J&uhxg39;XaP?Ez=3rlGaMXt=6#8c{FPXR`q1ye1plt}D
zg}TJI@KA!HbLMQBWp~z@qA$bMwgV?d)X4_yG;E81$!^uxkUzEW@4p=IhSl%nnr2yy
zfaBB8dM8$S4)4}p%9Wp=D2}9MW+o3_<EQDW{{4!$J_ZKi&}F8lr(?Z2p<V7!$5xD$
zSY7j%cdn;TWD?=Gfjx*)Q!_0nccDNx_p8_)Xp{t3<-ioX7<b0xqR?)0{rpXs?_K-(
z0TERLXn%2{7Fw~aIM02B`-aEbf-#PK=m<_4eLd5ZCKCsK)JO>HCD_owdw&uS?)%Hc
zJNRTlAlr==(s;U_ot`d^Itd;sy!6|WF4+A3p^1F>gFowR18$gEeNL8?^n!|<YG&fh
z=__xJ>6d}Md{t$-EfKq3Hvae^TYt$n*ZmL8YnEeEdKs2K$3ktOl-|WZB_t$(Z35G&
zkJyLW<BTNOS0wnjvJH#D1QZ~pVbZ5jmGD2=B6WB3_sqWL)8WjPoZ#dzKRMFEtzmch
z^0OuS{?glg%^3xY?G`P1Z*G6v{%Hs@9N+8Tzs5d%;?d4HCnh#((Lg+IPjH^~BK4WQ
zuj!Ipb*e{g{A5|pIxhgJ`tba?_~h*0Lqs3YE9$(u5~>uJdx-Je^3=2VP|aaM3uQdH
zuWl%q{e1vyk)aA_kkvYet7XHv$Q|^8yACjG$625gXFJaV?^y^oNR7KS%o@CPMh!fc
z*4F&RcU^HMz1(29^D+Yl87{-GK&`GrA}5&VYlGFE2Y%k{WYolF?)lfhIC^BZIiHJq
zd#P~0A))4ax#9`~rkK<9##f6U!cb~#2WOUs2@D{d!8$A_>gw*Ecp`kJBLu{LY;cc$
z_7E$)@#%7<&~7L~3=8d9@JaVGn9Mc7)o?pL=GZ+CkL|UQJi8%}_r7%;r8G=NyIzR<
zm{(zy*PE>!&u4W1pk{mlMxzm%Tel8~5FdD&4wmW!ml|6%f#X>w)0hz?iWR|TMdw3m
z)hN8{;G7|ELl}3ASBD#`PAcIuh{-$9fSdH2AE{xo_^)@FPC-Xsfq!kgxxBnw=!JUQ
z|M~OYbfRYe12~|JfXf}_ziMt4%ABzXnpSsiuapFmy=(%O(C*(ke=Z74Qo=Rw<#9QX
zl3H7T!DFn(?1Q}Q^Wtc3O=}o6NW4!F|8)maCJlL(>p@5OKtv`xb47T~^z{BE%zUFU
z=k<T^Jc|m&H}&;LqI&(ts8fHfUyvuF?HK@2_Q%*=!1krcRGLpg;S=t97Nh6Kl?<NE
zqX>yfczfkq_gE`ZJd|$%ZOJI~ip?C`+kEXzU&F-b%#vSTJfuF3^(uO0a<G#2S07%d
zx3<hmT|RT(R*|HWJ#~Cx*poOA{rC@QACKMcYQ$uHiSdHRIW{&2IQt+l584xJtU{@;
z(b_|>vByHpRH_}RUG2&3ZVVmC{sqz|*X27IT$TxU^Ch?WS7>~(kcL3D36(K?@ExiW
z_Hp?|orh)(!fv?I@>~zXQ=4n~r_xO`%Vc~X%mu4Zy~gI|4*D2nYo)udhEg9r`jMmS
zA=h(Q&m_Ze=20lQNF%-n3@Uw(f-o(aqyUrCO4>G0b7mL4#By@1Pr92fFo3xLj9|7q
z+lO9&_Z?`WOJ~;!e@}FzTv|^U66kfB?d~5MVpKqtQ9H*Z*WkNf@oPqqmcF`257(L6
zPAe`45=;JvciWqqvJrV@=?KG6ujVl`z-4<^x##=A9uTg&wDn?=@D;_lqOq_p_G7QH
zE>YF6bkvNagin(p6Vt-38r@k0+dB{wn9sW$4|YOZ`o(t7y>*;T5=1d;A3m_d!0Ds!
zwT^47tTNIMh<w_9FE4{fXNM_I{`qk~Jtmr4Mn*=rZcUr?PCi}gEikziR{g`$iq~X&
zEqC9ak2uG^+le8aCDr%EzsdFG?_d(lb)@Y3oMdSxt$lf%rg?&BKs)c1cR}7W`DARo
zPa77+n0Wn~IyE#nh?XSaYb?AYPZ?J{J>bJ8xB0xR%oQZcJDQeJGS+y}L$8eVxfDCv
zaMD^}9jK1Hz4Ol2&yE`1A9zzz;-)=?-4_IWFAECv-`=Tpn52r6#VSy*#_N=diX%Jw
zhp1Bwk{-XGP9A@;c1<~oP1TMagO{v}RFbiLu1+?J$vYH{7gsVe=}EE`{)YvudGpz{
zCy3kNQP0)SychMw=YU_uOt$ukx7}FlSPxZ@Ti=6okgwwA`Z7BiW1ohJ(;aTq@N2K*
z*4LLWz4`GWV^8crg)`rbSi#l1Fh^^_jR0jTe+C#mD&pjDeHQo!n!tk{*;CXNXYUqb
zXp%7pnjdodA+b%8pI-xRRZ48lm@c9lIC<3|%cIU^Ph{4sSO1__#8h$e%9}zH$&|lu
z!JC?(BFOcNA;6KH59*Ei%#|S7=L8lhFm@9a{VL#rlOAQW29_f{zTSU-XQy+@Y@76|
z1+Y~goVrUhhFxdM1;VI10o)Pq4lxc~+N`a6Tqkn9{*EvFX4#%FoD3)a?0YnP*MHv9
z%BuGE&6|*uxkdQFY~h7(l7u@|It4}H?-{VM9?2kz`0(-05}WA7kt#g-a8pyq2@K`s
zgJzlaU7>gS6o}c}^y?JNH0EcB(#T)VLE45@=_4N{)lf(hz%TB4Dd)&V_TyCFJJ)2i
z;=hh^&(J9Ug6VmJaCxQ7#r^*=Ve1(jOdy#T)I=YM_4To{-3)Y-a5=s}{h0Kd%a4v_
zpf>1r!PXLL=Gq2zKCy{JiNddpQ)S@Hqjmq?@Kk`DHD0UTU%u2b5cvs<iS0j4o+Zun
zzN6zk;^(Oc!YXaLv+6FWsXhg`_k|#$_-2Mu{x0WFR#ZCas0?;^I&c2;<QdxF6<5xs
zzIzAa_RcB8q6iYT)$N%lYHZ&Ya6}fJBXg%hVfXnv0yZb5IBz1PbXTf8T2Vz(mY4iS
zFD;5Ge#9dKQhESy##;dve+ovhUPWzbz*@fOd2Us1OC#IwE|ol03=NEm4^k_P3jn%X
zU0Yl1$!*8V7tur_Xd;PqV(hRS1UXZy(6koE+K2nIV9h85UrSf+zjSn}Dg3~UY=UAF
zj?XB5HJ2jUz6+?Fd#T|*k`Jhd{+v_au2*d6yV_qaQ=jQ1CP1Km;B?o?sSggv&A-g+
zlozL`PY9{;+y1;yyX`vLeOP^J<5yihFZXpy(U405OfO%SVt{}Q`TF<76C>4X0*#m#
zbh@t;-b1}eb}jc+{7_DrqDqgxo~-Ar$M0iI-!PY%vIakSV%_oL;vZOCARaXy{32++
z5KsQNetI`ll)6RS>czho#%A^tlI5R21X5)#?Kpn;F|9r_F<w6g;Ak3#soFbdrP>1Y
zPyP8Zm7!ulZ1{C)w&xpS5G&ro{&JZDnKfocMsom^f*H;V!@pH{qwaFR*QodJeU)nd
zZBb2eoE7Mxy|tHulvLiZ&F@zP*e>QguqBU*I*M-920p}?0)9=Gb#@8expQZ*>fUKv
zAA!>_;=Ew2a#-e7%GAKih8?xgPLxqFCvY95(lGCpK#x6x!iM?jz*nM~ko7kZtI>Jn
z!PK#{WCHUOATdvjb<pagXb<HZf78(xgu}Ig0D5VCcx^H>FTyK{>kt;}h<G*B)$M_}
z5YL`DoN|Fh8Wi6Y3IBb^=YlM>)Z3saDy+JGdVYI7XW8(QnU%CM7~DkKstzPSx-!=y
zc*5cEd5D}WTikBYU|9TFW9#t?ym=RkZhUG3jrYc-Vq$Zn=5X`6!sAp_Y(mU4ptmiJ
z)JkiJ0oi<9yY%Brs^uz%2`^}rW6X7lw%WrLey-XQT%wa%`OvWOObpaZ4<DC<y=4Ld
zFB$iH=yH+YcS=5X<jJY)K~JdYolHp-ZjhGJYrO2qmClBB!YpXemIh`#kHj>G8?4#N
zl%9Mbw$S3<OY#r4b9C*%YnCPI$2!?VM1;H3ztd#qG|zes;7%5~J&QwA+)C}o*zz8R
z77vUnc4&h@w^nYXt;{1uz?S%<JxeXL>cUzn+(>l$i3Gcg7poD*DB%{;@k0AeRx2>-
zrNhBNL1-fAy>>T0GWm_gE!+pjZ=p5<z?6&k#HS2gDD4xu4E4C=thZGlNZg@)<`RI#
z7>~u6T49Mi41Cy>>5PcTk-1xxDt&JmUTuOT9UZub6|zy-?_7N&i^jk17LsVo`M3Ug
z#~)-_s;3^iRC0eqE1(RFls^8L!mI(RDB^qfHW8EO@2{}FvGL?F;UVjfm;%TtC=~nz
zF+;wTOtZq@HRojHS<S{t={kAFo-&>%V#t{hyL!9>ur$ex00nb~pzqW5=swWSs2_hz
z9E;=N<t@T00#JxOJdz#!Ux@4v?uUvDypEROM?bDqx+wvM`26{^+p)gi=q0bd8lZze
z;#8|2Q;bD(A3Fx5`HquyA6|4|2<LEr@|Zjkk}`}j2UWZvE~1*_4Cn-&-5M(tKPSu~
zrLP}tBX01A#l}o@@$0LDPoG&dN1#19s7#*ccv6n?#B8)cynYtT@0iJdxpM5+9CWg^
zEI@3>AWkP}F0l46Y#z=JxW`PVWfLqv%RHR?Di^c%r9!93Tq%lPDPKE|4$We-Z=Kik
zcdUfHdHrk)w>w_ATsg|$e(bGvjC*YTHD&EgDu?=}?6#;=@3717=)P{3w6tQ?o8JIB
zpeYp=%X!zTRx;IPgk(#sk5pB8x5bsnYHIFbg$337T{crWo40i1L+c!4qtfSl8M)WK
zI_Z2dPt&LW5)qPrNry9yUUkJ?Nd0EC{J5d|T@tGTt8~{my>XLC^n>V_AJ11n+w}6p
z&yNQV9Va6rQ?(QCfD{P)f$JSFSX<*igpAYyA;(4@U<~c)B-#(}wVpkW-}pr<Z1Yve
z$f!dmfV}w*b_~cWc5!I{`11PB*h`z<t6>T3q+i7i7R~Oht*j__MjbLM$LETthm7&u
z{%3*!hxo3(T?(XrR6<>64=Zgqm7jy<jFNLbx$i8$T!(o!M|`>>I(5n>jH|RKW0)Bj
zpdoO(=x^PuP%F0Unu-bqxQ<>_=}jrld#YC|@a34;c;K|_0uH^IfE$}x;l_!xWz?Av
ztJ6#a+LSVeH=)_ezH^}1Y`)~WTHz#GMp^OBdo-N?W+<2Km%VGAqzlB%2}+bJb+svP
zsyqWbIs|4|Td^!|jU)MfGNxm%L(*v-pHBs9@foL#M4to(wzlP-MAe<RTBJ<L^{LPd
zdtu60qB@GGEOZfy_e!Co!zcrP0T{t3I2^c6duXu4raj;=JF9(;-m414v{-$hrDtRj
zG|LW;a>O9cBw%Wa^6K;Gk(2W(=In&Jr?rJ=?4W&=@gr3t6+dvmA6=@<wR7j96m$zP
z!xr}aG6s%?jLpY!<7ynZFhHAGnT=uu3(q8p-90`~Bo`DFP<*}N3DzIVB@G8y&)OPL
zXiwu<$LIfWim8ci`qG+U6R9vDfEYmw>(yD2!```ir@#V@bnpdQU&s&pshRa<YTN}D
zD>tx>AtLf9E&ckE>*Uq9EYvjBOU&bxdtg}FT14>r+g|BLT1a$aN%EoR|2eZ!b+ufu
zx*9AKiJ9RlA1BjTPQTqPk9*24QIwcXfBgSwpnD>85m+KCD+{IR<J2cRgfGKRo}tPu
zC}=543JK8=F3Ys>AWB<8V?}A}aAtLLW1}`9X2tf*45yeF9thTbciGNpcn%7)`V<rt
zR9AZq@TI=>LsrS)TV7hzef2PP9K^;ng#?CiBN?rWwLO*8R!3JEtGtY31`bptHbp*o
zz;fh>S>Fjky)oL8m)!otm`HW@QE2E4zDnvauG7SqGq}&LK8UseoRb{T5N_SFxp}iL
z!1n2J=9Qm@Nc4!`)hg~XRB;Sb3%)Q|`WSj6a}vm=fI9-6S_NfE1IJVzXD}WiQN1kn
zQ=0sVGKHEOB9$O23EsJH%NpKCa)4riT+Q;famY8aNy6?I;o6tDV(b!f^`pOCp@$42
zt0RI}_c#MEWR`94F>xV_&TDwQ{Ptdo;;78)Mea2x*Y;T@g<=;$U0h>)(NTwMF1vpU
zVJ}>lCSQrY5hF_{vk5z-qeo?CO1MoGeUE5XPf2sl@OWVA3Ut?KGnU`|ctFPw@!Q=V
z7ztTwENZ4^z<10~r5a>nM^A9q*#=08Wyl>ANpbH}0{Pl?RuA}jNS0+kYqI#`e^<=+
z>eZIn52cWJdj3nBjtM;tKY@VY;LP&>{P1xTzyGYl4-vS?93x`g+fZ^KHthhmy(OQI
z3pq^SPQ%0c2!ZW8uU%>H=nm~Lf1((Aq;|}J`zY`AprIl0#MfU99cP`+Ik&~UzH`nf
zvuz<M{>-~~=cQz&rO)j!i+%eyB+1FGI$D_&%oprfGo7$Vve2+uolKoS_=J++fo-4^
zvE|U}+*vmE@VEa|F)DRU{-IJlU19Sq$2DDlyNV*k<6_E7*JrW6#}}?CRc%{G@-mSU
z5Hvm~_I;q2XH<sG21tgNNd^#Izlri+-*sSrrDE4SHBf@PAgsY2ox9PL<T9;};|p^c
zrN;ml^g7jR9}!}{%OW6n@G}T6py8!l(DmzK#J=ADO3w1~DidAYnCQa6ho?;Yw)$M_
z@9n=fupbJ4Oh%__yj*i4RzN-JD!LjS0s?~0N8c_J7)C~HW?W804@Q2#e=k73(36?<
z%sYlJWt$9(y)-i6duExgynrDkPrsmc#GCmXe2dW&QZQ{9)g<pFBo+HqTv!-E`D5!e
zoij`ym@W)EI`HaL-}l3=w1uk25MbTnjNw_6i;!6i0Z!ySg<&sDn0uex6PkF@`Fn&r
zzz~%g=;(OxlB}ftC>wLQ)c)Fid>U(Vf7vfJ^<TSWyIoHX(n(Ihb{ohY1084N`%l4D
zz=4;#)FlV{`^lLkvH*?=_WF{1H@>Qzmf>x0zX;|4dT`t3h(-RZZw1U7HMF(Ef%E{Q
ze`D1J&e&r#d0{!DnaPK^_43@H9EPWX3np)z2oZexdV2^6`U7fqT7XeEw{v`&YPJ9l
zrMZ#Ka*&O3uc4NKK@80}$B<HIcqZgEj;?D+$+C&&PlTPyiG9>usu7Zd07oFo45o5@
zX=<b1K5*vD>kIe(C{D7W;h<q;tg`AN;^WI*8=l*k2yD+YlvHM^#7^Rk_qy2*bUr0;
zsQ<TiFOuK*igFNUf)KWp-|eia1O(<nJZaLL7x{Uchpv|M@-#jo_LYi4>e(dL?jznN
z&cOMMzXSB0$Sf)836^Y|?O<KFS_?1r%DWQh9jEe;4p(SqlBJGP`eSjC`S4-QT)kEt
z*5Jz(!;}ncU@+#|Zl4nW9~NM9rCoGCE`}=U-NUiRA5u1kAt562ExWJ-X^BP0i*}$G
zzdw;)`fyfKT}(_YpW1jwiz6cW@ZnG@G4x8{A%p><q@WYjQ4Yn~;N*NNoj?(;7ED$5
zW9t==JN=}YK~0IGw_pT&<&#E#ybm}i$jdj=Dq)+t%e3f(6m9)<&1XdQT)~GlagcrT
zR3r0iAaLjlfnaFGF7aiep4Yf7*M0mbe_`m#r}p-Ci2D2bd?f=Ly`b&k6_L_1DMeW+
zO2gk2X9`rJ+kiu88i6<xhqyG(1-^6MJae9Z`gij`HYUQ=G1aC9`BmiBrO88!1@eo4
zRcG1k&lTwtu<TfAQsv!kC8M_|S@+r59l?FU8a{KhmNiw1w`q-sPk%e<ttb56u_Dpe
zQd?=l$d61L0}Q77Q=y1CZ9joEtkdGK+U?MqBba7){(KAM8R6h6XXr^Y?RZg(DK;PK
zso2=ql?(t3oi#fLu-OP5&8fHe&ITyl5=OEs^1~}GV#PQAX`smh5XWhmEVld&a*c_$
z#Lc!uBan0}{(yLj9KJ8Z!`ll(-$+BMCYmjxCl03o_|*<+xEra-qEb{+0=Z*ruSqau
zP@jOg)NI_mAIjE%AaBmp#}qq)=g!@nXgmxmI}AbAp@Hc!gare;#X~&8SY~D1JRBy<
zx!>zg{{u9$Oy^xHFDLG*f%L{Dxhme>+xp$rzQXgXpyp4Le<^M;zPo3OPP0owY(6(R
ziMs&&ubOurt3?uzDT2?7-a{JTY!|}LGqagD*adEW?!_&sV)y8D&2c2m3vr%;3ECU9
zg~F|D-joAn_GK0=8Q4wo+RG|u08g!UoL&gy3@W%<zO^=TV3&UZjydi#9(!3mr9Y~1
z)d#yUcgNIh|K)4a6nE%TcE-4vSaEbi&<@@H%r#fS2T$d3i{xOc7PakrVNyeZx4Jo3
z@C$CV;IS@$V)kx4`x~=aSV2DSyH4m@aLtq)!e=DcNB3>ygB`T%Afl|cv#_whr?=$-
zH5aV2gl+q>Ol$W_{-bd{doWu@@%GYO!KaFfs8ID-X3yW6sMBdxaBKz=5gnIyQgcrT
zDHT)qyUMIjH(TEQ9J%-20EiFSaj`7?Mm(O;aWxBKcX(RLY<g>(vO|JYvSH8t*xw(c
zQo2%jhVtOOLdZ-RsZXbaSpzQf=6KMUQvL@V9r)CBvqBtU&E&PUe4^yc@-yo&Bj(6F
zpEoVh(kqc6WIw-^NtP$c1yXT(Z@d4wx44RpNHB-gzui5}?EHKcU>TAqxhG;6@DQkA
zfm{~`QCmf`+mr7E41eIPN>}d}qT;b1dcxPiS<QGk%ylmGO7iFYn{5yhY^>xOl`&~$
zMaWxiEWB$HWZ4w2^#UdcJ)lU>=0cWU!8P`tIt<2KeL~on7M8h29D(WkivjNVr7?fz
zrV(q3;GCkfKuhy#SXW9C|2pAKuKY%HBq@P8$00hxB3?(wUpUslUXb+s+g)2LeL<u6
z?)Q(ZtkM-$9Cg_|m(lWQRog|cym<CZEsW7_@a;uum0xZvB``6HjqH)UB}~V_;Jx!t
zINKH{M5BZAT6MU(3>Y!wBqX6EGz9jb;pV{IU27Qz!WfVXed*j8l)tD3s<<*jX6e0k
zH>z^a<UP7<ZQvTO^b6L!HgCJ5{&8$_E}Q~#KVDCwH5Oe|Q<=J|pyX@Qm63Sg`*)9i
zDsmPsT6gQOoUnl9BZ-|(c-`Nu!NEauWfE~J3kw9IM^AX@jZ={R+uod6dDipei%I{$
zz-&Q#tk5lG9Hy0SXN-eVQpT3QD`;Oc>X+(gSkcw-AzD31!(C|kWgKu5Du~4L{GG5$
zqu`(K%N@NDRMm%=Deu2C(-_{`6E}nMVk+d|e?u>H(`j7NCNwm3R}>d>Dpv1;mTP~}
z2xR?flIh(i?yb(A`Ug|68^B-i6_K|?@6RnRx^ApcZ*-lid5cF-**dbvW~d^vf|W|S
zryrIvli5G-6A}ngC4YO6r?wIUhR|$gJILu_^1Da=AUCtegpdBXi;9X0;rnl)*Lxx9
zIK;gDPAmPbkjune3|6aNYeO779LiNcaL~hz%I6JCqdS_Knm&HKvhsMp%!Xm+^IPM?
z9HxqgY`e3@UPxcUr2I<K8Z>k?ED;4y(wI5<CuCKVBz8|K>cK2|J+7wJ&;s9XuO~Ej
zqdwu?aIj|=t0t`94!e+R!dhM)8NC=xRWOUW2G4TXpq-N4?Vi_gRr<HmGPXP)O0|@h
zX87ug?!RwiX?Mz!;P9qGxEO6RrJ8*4l1zcG7H9tR-b;H^wp3T_E<nsUKTyJWajRv-
z%jk^9Z|=ZQd}1)>s|PdRxvO!uY4Jy|$#iq!Rx`XiVEdO~;<aIzq}&;PhkImB>8g_p
zKW~Epi7#nLteg7<_odNg6j?3F7Mu1H5d~=g!AB=1Ua$zUQtl-PDNi`>dfBTj{;bKX
zt=t1rfD;kfU4eslbNN%U`6JLdR6LbBO?fwAN|)iUaD;~!tUlFVx2ezlf)>qL8_L3P
z--lTph>RN4Uu=36Xo;y+%5S;4u5nB^gAVp<+RJKQ+cW2}E^EmramT5@>k?`jUaDhu
z7qAWb0S^WYqmz86NSu{tC!i>Ws+mu(o=_&x4{oI>ZC!*iN>3GnKlX@9Zm(09$nhpr
zlti9OK_j!!(KU#=7I{C5AXZ*c@dqLiwB3ZN&jdz;jrwbO8ED4qH*YjT#P1wpB_N0m
zTF5w^gB@_%p{Nt;cAWXjrIv^$4ZCo&_3vw>`{4p9StNu1#)uM*&KOTuMh(lspdC-H
z;zEJmQx_uV5O|-~;ppI6pMA9-39msU^yvHkptx6-st=9LH5vaf*s;67`|sT<0(5w-
zYA&y!6y9GNeVF$PooqT$mbbg^DsT3aVXyE8#3D-64rCP8+222PeDsus27PyEo5f*L
z!Dl+U#Gal)OCo#Bec`9YM-U>Si|*0u&*F&5h4{;1PtEt09CKS7{)c%Nzh3!~MwJJ-
z*M`MqkQ2Mhuf;Q0uV4QGh0)EngmfDafXAO4sZr6NRjNC2IYAi2YSiFIhqMinC(;HT
z9jw3RfpYhxzu22jU{t7N68#1m#^a*4mT+qbpVQ{`=W)&bSV^<+)e*+OfnOb`J~N50
z<StgnOL%Ra{rfAU!x4K*js(<#Imn%%Ey$Ntt}{bRX>6>bmb7L3sDV@A!o?k&2eXk@
z5G|z>?1-N(I6)Ujq+3L6NcrjcO{#2C-}|LR1f!DL?_6Ht!sAle54_3NGQ{oP4WTwD
z7_-xBgRQS*(6z}wqhA$!u8;j%#JY;SlJLOm8~#wcHihvwIrAO1_?j1srOcNS#h9ya
z?|kuR_L4Afd;wnR*3ySy?9z29EZ`3K8SfGshAa73`zOAB8W`X$w@B}BBuyKIm-9o-
z)anX=8W?6Ofpy`y1IVZ@`ER22Z}-rlPhG{O;o;#PWl2~Gp})SlJGo_eLhtJp7?JEL
zDpmAjbFpS|ac4Z<{v*!WQa~oNm&NX{H)d;Rf_xBR?qZdBnGtSj20)BZZ@7+aZf{ok
zlW*1y4eeS4;~nDM*g;bjdMAExpyF*rBWm7+8N48V{K&%b#{J%Vq1NY9g&B!0jx5#u
zv}8Th3jKoNkmFfKln({MM?*9T2n1<C(Zq#79H6LG=bP&d%0ODKy}n+aR)AirJ@!`%
zZ0DP!U2S@DoYACK?|9`<dCw-+KLw6cV!IJ{FkI1Dvx?=Jva&b)Wy39}XAIYZPCv#E
zvHSBgxkvNw*&HQ1Pb~ut(hHeVyvQ*9$2(bzb=ulYmn&jL!s<a>IdyoU^{?uk^9dY_
zUxlnXT_Gph+L(SDZ*YHm<2^*?UcbMbnB9|X;wdr<WC|2gl`*E^#VT6YrdaIUPB5*a
zYf{=9F$#{OcwiUCAD!^q4*&7GTR(N~++P&+aLU|k><89^XH4X{7`t9jdFQ=#ikWz{
zWJmWS-;T`kSwTT^czD&y(d##EOnNUsvGm}<i?a*7e@r@c%@ZuozY{hgrfIx#t(r{u
z%o)K@Z+Us59j)Pj=;&bJ01<)R`4N!#o^=>6QI5`+8RvZ4Tb{Rs77o0K$QNQ<-WTgW
zuxqthHNp5IJSSp1@HX$NyhsIO{KVf%!}fy7#l_Q;MI81w!oObZ`8KBbLN}S~tx>xT
z;r{&`Z!fA{X<AfqiK`sd7O$$LH!)K4obH^H%Qye(`ugUK3C|m)@W09)EkCwPzR!<{
zox5s5L-0VgS@7B;`Hf)7ruf#FdhKDwg+ZlchOkk25vBb0_|>f|O2bQ2xZs6tR#isr
zMj6tfb(03+5gT1B4}SVe5u3ZOv|8#U{6PGf90M6SIha2ad^=@Z%47rtQr|HLe&v!D
zkhto2z)R)#vw#qVwAfgyFog(AvMeI&EQID}VF6BM6`fopA25q%WZ1jK948=9ynsg;
z_nyXh!P)RZ5gBbEa=|0{f~4lUS`6K8^g2zKLyS{^Hjr^Co#slS-xzkIH|NzMet42c
zR8-GL;R%<5OT#yl>jw!4Zfn_iWS3Jtw2PzRy4)(vyZR(`cAh(nv-;A085R|f+iE}S
z1H)0kI_x*LemzwF!+CxJA1^V%gQ#>t@|%<;QHm`0{l&~_8pB{RuYGJ2cSp;mHQ|fL
zle+D{&@wS0ZYOB_#`YFr)9QUZW7y?!TRClSZR`&U`Q$pHcG;5x^P%_pk{Ky=TID5x
z2_YQ3n2moA*slO3eaS~M`|<@DhyIBKvAZ(Q=zDs`a29g)&LdO~9WLzTsX0%frTW)v
za?fJ4Y$OV^yZ20IgYwJG_;g!55GLLiDv;yRr1m1w$PPce8ehC|D9Cq~HI;Oj5x?n=
zJ~npQl)TFiH5e67B7@9tCtbb-w3gjz&ZK60VSx!_)05}VqXZN83uSlfzPj=cCKH0K
zo#`#$@?0x-h_tV!I~^&{d9l1{2`AE(GCNP>X^e8#?WLuqFl(7DtZ&1L4P!@7mS*nd
z#0t!s{Mz7%lwK*J$I%@z1_XdJ(cjm%F%FUv2gJ*z%0JV?-BID--~h&%T{ze3Wavr+
z)i4!VWxp`5b6}C>b6U?b+&iTunAFD`j3+X64o;?Qg_Egsh%cl3s55-%a{C_^kbE)q
zB7BX~Cov?2tyMV92%5gXg)v~T!r2I|Ja(FVsem`om~d}sP)&uf`k>E5PWRf*O3QIN
zpvt+x%Od#a&sj9P78rj3^WfUsJInseH<7hzIbLs%`l1DXhGEZQ^(H?Hiz&i1neTUu
z!0#A`iQrufOMti72?+=)*|nO5o<_^4ofhe0(QXR4B>$nV4hx;P<IGETSUD;%%@%s3
zSvq7MegYJ$gM4wYyb6R<<w1Q{HC(B*`oy}jUD8V!5o)71x*${pWgM6B6|RdIMvUne
zx-#4CYfdqra|$5a9q>hH3z4%H%7i7YQOcuuiQNQqn_m8=1dNy%CX}FhR*pK^U+sB5
zwn!&C%*Dk8GndNPZXpl(k`}QxV13OxLpmd@?V(1_emn%=n4E!GimR*rx6)^RetuNm
zKcYQe#HFM>tg5QQHVlX3#0*^gy1&;uUEC`42Jf-kj7Q`tosb?8(V?w8_-`u@PIo6_
ztWzu0*a*SB!Z^g{l%W>SR<5(>jk2}RUs}73*<4K?RRjwEgxMH}<!3C~&V?YCw8S=R
zQ3KQb6yI`LZAS?nCL<+6KxRuzOKT&GxnAxZ7rOHd*}V+iIrk{1Xce)I@S%v9XZ<Gg
z1%!jhGIcav$eWv*o<6M(_aMp5pW4oO+1Y_Ke0X%xbX9{_XJeC#wSHFWIVa2H6YY}8
zEUSD32y+i92SA_3mO@n59C;xjG10>G-(Pa7KiGEjd<YY84*JnG?K$-Gst*%=rU|P~
zx(4h0eN0S|7cN|o+?cpA`D~&kTD@BQ@4vMppaOQ<V=aXBhc!CB=#z#~VySyk>lo9G
zSe`zAzWu9Rl26}daiAo3;JTe1|0(dBH3|$YEiETzXL<L*m_71=>-Udp#w;L{C?as4
zY7GMM4XikjwY38i7yuapf`Vb44<*baV*3yA@wI?oHm80%NU>wDrC}VeuU20TI49>4
z`1IQ*_=R~#h8pAl;!}r$KScN~NW56yzyuj;6}iqKv;Yx0LLwr&a7{r?Tk@Ij_jo7{
zF-g1uy|2?~%i^ZBYV3+J{C_bUfL52eJ~@SsKjnTZhYD^Xf{@Fd^Qn=b2I=U$@x|U9
zkJ3b_n=%iBysYn>$=z*yS7+8Cw9MBSiHV8d0#=R}eKkMNc<8v88*b~~$5k;gKLB{<
ze9+VTimRndK(3<gcL%Yz6=Us^%rS#X5AY)$@A8a|X*y3f9|1IxQn`#>598s(tR?@z
z<K(vb{XMvth-|$QwI=L0nodIihhX<6NVr=glq^iqpJL}aFb~kV(D5%GVE&yfXp!^u
z%Iop7gpI$k6`Zg+^xR$ErJ==$9Wk@l?xlCUamix&rBo)hj<q*u!?$QW2d!vAyE3b_
zt|8e9w`0e%flBw>b1dFQUh8I2=RgGT>obsh@&xnQ86hDw6oWSV%w%OJUdpL-k5O?x
zp*Xe_yVqQM<-j?=nj9^6l{@wxyDPq)mS?j<LPB7Z-yFXTqGlGu_G+*A>;s)`fKiOl
z3MMg0AoUXEcMbei$o`#?V^pIb7R_Sae3fdcyO_G?P`V5^g|jV4u9GQ;Tz_;_-~J{V
z#t=Ry?z!`6?{L`b*P)eH#U1zb>uxR6%aazdWBIsYZ_J2o|6`9P4bBUV(?@4CyroG6
z{hbc_Zv6U`*a&r<(5>k@>!ADhfCt|;H&5F<)YRFj)%k+Tl`h8R`SYE3e><j=DegEq
zsdkKkWjiqqUeClWH@AA+AlTmn_wOW)kB@J<rR^M}?%y~(;XNJ@K(p5@vc6V5u>FQo
zX=Wt-u+9ooZ+dOn;weJ;<uHa81!{9%94RZ3v=1r!BP%N><?>n1^Im=XezK*v+YG(H
ziiY50pG#hZv6m_cW$tZmK@SegU`$KKY7gMq68h=w-5ZXRPxu&=%~HVlg4~%&(yI=y
zC`V_*#7~2ihUDU5&<8q4B>B&IxVz8LgVa7gH5D~}<yhKEIA=%?fEE=c2|p4o$M60>
zeH{;mW&=#e>Z7Q%RO`V{ZVrymU!zto|CyMW82$czbE`Z#EEKV1K{R7}TCs8!p1xsE
zt^%S4U<`!g`q{FT>gskZIg-h;tTYs^o1t*Rlg%ApLB*+@^$e$?PO#V!>>6H|lw5FK
zNFW0gtyq;|2~-)=KP21n4lGXt1HoCST(ANxp_O%lz%UNhZ8wkVKhmIFOAq6@Rm`Ft
z+MAY=B8_1A$Rj4&Z0|y8OaFW6;vJlw0ZrfhXi*0fq82t9bNZQ$L=O!9a1-4%j=SEl
zsC6n&@0B$kNNRPc$K4V7fyV}B{06uC5wvY*TjS-~j8kY~aO1eREh+8x^bc(w)+k=x
z+1&$*O#5xg3mR3lC>i(8xvy~Sf+dX^X<SFCsj)N3wv30%)}*w#%t}q)uj%cT8nfmT
z=Lrl|%*`Q$Finyur!hAHkq2g&*RH8ENx0>mPZlul>udb9xp%PiV)2=P0L2~BOO}=~
z<>hoHeeB`CR#zPziu8vcdAziRluSyhgTeL4=II$;!OL$Fjh}b7GaWgSK6x(XzMLBU
z=O_Q|yTh{5l5XYy|F*llynLHy&MJ)Geu4vHrTv6{0G<`NWdE>Ob&Tw!gR35?>)|z)
z6g$!&m9hHA{&*tU#_8s|x~qGZl0(Eeyoq0q%i2s^w?R)(G*mQyf7$o5>c5VypRviW
zZXbHiD5pnz{5Wrkw2@K#Z#5r+Ve#tX{Y4Taa$L(a1hG%=J4LPCG#%y3K6>R!T&~FN
z>P9I&*2uG~Vi6%B0+%lN;6sXyTk$3j8KNZKL(nL-vggW0`4)xQj*h~R5CWd57Jpm9
zM$(CvgEwxlLk!D9=5U0L<sDW&1R-M+AB2-L_YlNVy4oK=O(uA@`_E{N<qzXWp~*@m
z_TByG7n=KJcK_SKz1v2+qt~vjtwo#~*2sqA4u6)<UKSQTd$zc!NKkm<u`RxEkqldv
zfk!@<OsdHWi;6yne)!nk&7m^5bVbWXR@U6ovJWH6{7>6gc_(S`<&_7~PanLu%FBK7
zB%AlP#K(_@GgT+Eb*oOqmy}Ef(LO{XmbilfAHH<G{q7;w5M8C)8l9%YmE}cx^xY?H
z_~)3Jm{`BP#Qz_aRM_2$z#Jy}^gf5F&nf1fMMsKGojGGT`V(Z(2eywfbtpj*sHYcY
z^@==6()%I{3(IQPr~3Ni;ts;tH#RBmegobhHk$<7M!TIp>A{0#g#zk!KhgS<(r}ww
zSurv)z8V?M(TxYv!<UUHrxHK_$>&}9%So<YRR(R4L;5=!LvScxruo?h*@oh>KG-?B
zyK91XoT{2y*l~z5;~wslTm*S|TodQqaS)oqtU<JK-&#-c_xBGw3hK!*p{Y5n2fncx
zrR~1C8oB>_a}x^!V?TewB&!L(my4+f3T5nFTBJZyfbGTC(%bh=WXdpmZv|daybs!V
zFw>&=xue)rr5>dMy%IXEO%S{+)`1pbvF3b-8{5P}q!!@umY)BGR2OSWoR_bE7h``1
zARHkyWp~EdpvzGnycK3{R8-GMgZrb1ZZB)dkWQ|i2*7%!=PPS#6bBE6?}1q_L`N{R
zz15v{xFxzE<mF3Ypq>*9XYIhTa>TA@#OwSFEWH2`tY}|{o_g176S*FG1>43MgO%<o
z8X6%3)0iQ;y<j2FV^u8e0}`QA^dC^4X?S%6?k4YkG=k)NSzl;^yncJAqUXV$WLSC6
z07mGfI&uUjkGY-Q7tmI*H~x{?j4iuj2~=Sl&a-Y%dU%3H>P%S0Z(Q+XjXf2SYKW@g
zRc~!=)&4<^AH0Z_U<WtOiP;Cha1<2>ZxcW=Yl&`hN-yQAcv(Zx&Pe)ophl7BlgJq8
z>5ua13Hy2dPVYE@ZyqjxO745_I}bt8Uhu0yh8e1KuYzCLJ|Z#@9@6Y|LfPcdU-lU3
zVQ&I-*nZ^yzKhg%rS>%(J<y{?`IDv1e7!|597rL#W!V^FwrjQ4ot1*bP1J#*EUf&L
z_Y`{XP+()d*>YN8{qNt54t1PRNs?>f1a#EY;WEj1DQ?q(yp;Kd#o&sbz;Z9rpA7A?
zx;r}#kjmqWz`jyaQtUf?%F5Por_!+8YYJ#_zz}c`telON{@$F)e(Vlm$@D|Mzt2D=
zMg8bGxco9O#G|q0bbY4%CC{)6x)9ov2D`@&&+qKhenA<y%~`%5<D)}R=D~E8cT=BZ
zwI5rI4p((EnMO%rI|V{?)*%&l>1LXPv~8{~E*NoP=Kb$`a1~gkx}EL8lG{39Hvxm<
zeSaQ3)$zlJt#00o8{7|fR$>wo<qq_IBF>{zt#cJ0;j5jy4?2L5KOiDEo!1|>Q{LK>
zTya@dRTXHW-Sz8K$g9p!EeBN0*&7T7wu$#V`JqFlMMYYfUlxUwicS^D{r4F+9DON>
zW)TfY9qgiZ8z@BC<{7H2CRr_ZAUPe_Unarg^YU^-94lda5H}SsRxT$i>on6@0*zZZ
zmuGK=+P9F9-K50y!QeO|?H}67|9$GEZc;(7I=8ts)p{OPhjh4Yb*>D0h!0en)|GC{
zE0Pz5K-8JQ0~7ddQo9vu9d>s1$dhcSh$<>U0P2qLXr-BbAcEP_@}EDLPs7exPklB_
zN^%aOb)ETEwgdFdsTdz@jr_B?&WmPsWh94kwQt>ZI*A;#_}%{a8JzPz_<PUHUimmY
zoDC_We*TvBWq>V=;6VT&PfQH@^W)2}CTeE)h?6tCsi019?Sp(gFjMov(-U`9w#guO
z<k=z7*6zCGzYQy^`1?Fv7_|VbVt*;CbYiz${@p`G@W6F9I6eHtj=+tNrxAyJ?7Yj$
zlOs0lY}*?Fz#=sRnU(3Q`mY+sZFB9c_KtuLtu6TZ>#KKb^XJpj4v<83>V{2E0U(ug
zo%mkv7>#w4+PD>y<e%Xpi{9c}Udl&9w;vYD1?llT1!1Fb<tWDXiOks8aw>1?`9SI#
z_!tb(nvlH%N`N2TbI=&noCQ1`V&~5X9~U355Bv_|LuYG#yv4v9p50xF>iU-Z)%OkG
zw*H3&<VDMtp(yX!cQIb*R%uO*3CdFU40z!0a6f`xfeB<4#`ga<y-jc3IuG70oo=D2
zG+oF`g>fqymhW`*^o_a84M9?qHP>(7?y2#v!8UmFcbEEcM#jkB>_)8rt>Pi#ipLDz
zSYkmn$)&#SG5Gd0egibGAFxQ6CU~8Ae(j=n(p2!Ky{LXvMom-l{mx7{rz-0$tysMO
zGk-6P%oh&fp<1_^cf~(W%@MDkKmUVk({^J1`19yG139{sw9xx>(6^wkaUZK|u<FV<
zFD8bMmMvX8d$s9P7aH3}VU*JBtL4p$H3jq%ZXJW=H859yW$=2iqeFufCJnlJn@R#I
z=sa(=#&MR^qIBKgoR?K{!ttax{-mZB<qSp?DG{95PXC;p#qydN{*735$H&CLvr#cQ
z`Tk1wR)oK5vKu|&y1Id(;qD&u-V_{_o<~qLetwfC%5By0`Lj-`+#Uj!E;y%$>u6-C
z@@z=(s5?$JZ#2;EV`FDecM*1+I!+gJ-c{+#%eH+)zoUb*sqUrS;b0a?Pj{RaT{)FW
zrT?-oOeiz4o5@^fao8AK(lp859TUCI3mhyWd^}1@)x271ciy?QLRgSG!q2ByWd3@p
zmEl|eWXMMt{KIIvb!h1J;;@gjv@~F5%l@Lk`?l-boBi03-Erj0ZF}dvGX`zu{l8X{
zoYjw9x3@UGccS_E8xX{2XA{p}t9Sp8Va+4LL_qg<*Oy58#RUhmwQZb5fMM|yR^XOv
zS;)~yv3=)q3hfZp&n!ItlZ|FWZ>;ulZr|7dyw~_rO;y$W1P<4Z#zw_~OtsB&-CQp4
zvcY7<q+NdA)oyMyMDj}kSN{;_;mdm8f6q8#AkVtegK#8k>w6AC;jg-0g@KLX4mM<7
z-bt+FIMqRW$Z_g?DR*P&rT1Sec&k%jVc|Yr9}7FZoM(Xgzm7C@j?Zo0Z%dFvaJs0F
zP<ZgUB4zX;;d{XT{WEW*oEp|--p!f{$!dj>TI2g~$H|}w7~a~LPfQ?1V<U4-mq9cy
zIyx?5zXkaH-d>lqD4g!{+(mVAPceZW8SA>)cfFmRogcm@OU0NTRZ#F>tVz~;V>$Q_
zX>#q;lanG|TlLqfhQa=NRMECl3~K=ZH@PsTLd}Ir!@Q_IH#*Mh0U4Wj16)tRZP{M2
zFm-d2tuS#F_G$EJ9%w$-64&y#MUNX;4wu%xJI<%d?S`g6oXXj$x?&JB-Dt*cHReO%
z(bT2)D$ZrLTb>9hC#+qds+f(wr$7zVdo_^thmxKiS>k4ZcVI1X6b(l0)xTkL(#dJn
zJ_mw5JoKV<ZdzGgyw!Gnl}5z)UVBoa%%u;&1o?M9@ZLSly|R2`F<0LnB9+dr;*Ssa
zDIhDEg(pifRAyIC=*;&e7YSw7k_y2|wta=5G!CUFHw5V;e~hD#^#8H<mSIuv?b@(~
ziiLs&sGu|mC?Sdn7$7tB&`PKbAV?@74F-rPC=4Yip>zmRB5j}&DoP3xg0$q&{hp)u
zz2A55XTQfj_I{oZ&xd<`Sj)p@%>3i}UDtJ1g$Hgs+`Y`O#gtxNI8BJE3Vpx#5FcA9
z?$G||Vwt5^U}d+)-QX_fYE!QXAs@p-^P1XyrMRdF=8S?(g9G)f0FtyCd+SqUWR||e
z#=BzQ2}y!a7K^W=+=jy6E&2B`tq#;CLfy2F)ET6#;(V<@i$u^<m@-6TXhL*uF7?ca
z5MOTR;w-c`zhZ1GD7>jj%=rZGwX?_Q`bNkV&uVxJRjB!MS%IGe_twOo{aE7eD&^c+
zXxAG}><Rj!<xN|3jfK2EVs#D_uL5Y2i7f(_%V=v6VU_ZjU753UdFB@bbsl+kAUAQ<
zU#YDUR`T^U8{ig|$XieEdpw@_C}Jr?$;@I-b%UzZeL#k-=vUg|;RE&4c40%e4}Q!R
z^YbIq>A($f@}Pmi=0?VSrehstKhvkjctrd-a>bpss;bT}O~6IZ#8-)T<PsB;v7Mdh
zZ1Y17)R=G$2)AK=0?v{Rl`S+l1R@^3_IbqwtdRpwY1~}31x;2+MH~xvlalSNO^W;h
zn_>&YDA{%=eNS81P?vL;^yf%@C%IHjlnbs~C2CKhF}k`iWA1wq4DY!i@Sh$@&938<
zCtOsET1!W#IC)Td&CXDE$LZnK=BSaK8Kpvj?3~g2Kwf|<A)_ug&a*<0(e~aBJMGRC
z?kQ~Tpw~Z%7)(Y>Z?~Yw0%4H{RkT$r9R~;@S?hgo0ht(}N%Zr95gZzOP~$vN{u><y
zU@A>PQzF;ZxrruHg2ojJNj^x6)cIwb==^N&EaSHN6G0KJT+w&&ku$8bf_b@~R&Xa4
zy(;TU9au%zsp20ft|Oo%NnI77UL*84;U!qceb=e}ta&EyOc;JwAE<we0U^ni8l>75
zw)YuXy5I9r6S6*W{uCI0d<iTb{A=ZNoSTstcAomwk5rQmN*jJ!@vH9BQ*^WMqotgQ
z%8$^0G-fCk&l@}U2gB>TxxS+7`GM|2PP4!XI4Io1qVHqrx}|{aJbEh47+w<2SAyFI
zf!%VIa5h&TSbg^JJOEZ9zbb`s`HS0-*lW+zA|VTUN~67um>oCMueE9xyYlt*cylf*
z%H}ePH>oSIQ|ng6r%y`pbM`Pk=&fGlv?rWWi;ZA(3>=b5)&oSC#Hk5ixx!c5b)tz2
zY63cV(Q0kN?%ge8<lB^T^N>-A)WFTaw-puY#rsUZJ@e*T4{8eF5Xa<1f?7p*t@d1?
zcV#VD&q=k4?s7X*KI~q6jsqhbiP+|~9_eaN)1>Ureju;}S3W+IVOG5m=f-ni<)W*}
z=JD>T)DNOu(w^tepI3~H_-g<0Zpu@|k`a|rdLHjqt`OZ;ZZzAZbU&i=H5-B_kD~U(
zq<iRvTl`x5kW^MySC=X=>&zCDzu39eEC;|D@z)o|oZQdOUFF{ZOIMt}qzkPv=bhx(
z8gI^YlsgbP>_BkAm01GZ9GB@n|LPVQLUe{bN5KJf#3qdSh$XVm9B=92KEnHP66;eb
zFnCU$%m9X9f<-fvV$N}t>QCV^__AGBYU1?JVZogHDnLg7!@cP84P`}Al)`Jkf;{0q
zr?jCK^9Ors_RE*l(WHs~ME6v!@qinFPPak?8ZjL6v$LadO1!iAH?R40^FBb9b+@k=
z{t%+$oeWUtT5{TBP-v~j62HXVr0QF$0Cvaw8IR5_k8|!Cr%S_ki)TOoSVUL(MN!jF
zhv<VyGQnO&CW<Y&tN=`45}9rMv8}Ifck)QGdxC7k*Sd-29hF_?ok)D?+4^kz^)T!;
zt#xf9G_R0DNQO^JB#u_{S45_%mYjs2iUPREICJNR@<hqe0^zE6o}A`I425LJc3*F5
zfEcfqw7F(YeUWo1t}7Wr5Kx3%Mt{Dk3@Hr}+Ut1wu5iij22_0`kMQ%Q9`DSm-EfA7
zUf7xZ3&Z&$Dk3D8p|;QR^J!AwmzGWEie6QLi!snV8C}IzA?&oY;7omfJJGE5T&~pO
z;v%M)r#l~<^_!sr(F2|YCtnZSKUemCfnD#?Tkon#n~`81)$}sHQ&|CSWh0FlW=L+p
z?s{phTw>kC&%Q@S(uUG5UC*!NyU(YmoxgRRPgB7^{lc3@eR};>k1Zpm42w7L8<i-z
zEl&-+zW~TCMtY!eT9biIS$5|(CMM`EK0lNh=J@T__cin9&#nCf-BmY)OJ>p>ekV|N
zOls&+;wU}8ex(-roJC?0hK>4IF(ZNQ*6!}fGZG6knL21+xaQ+u9OYZ}yM50o=?Z~<
zWe;VNv{h49=3sP$c<KV?030If-{kJyT)9%1<zvuIiS*5A$~vaob-0faZ?(Wnl}#E+
zaBYzQ@{y;gY8A#l{f<EthWz6{-<<F@1AX+B$D+k8J%BU^9-^3}4uSOvZf6HvFHMNP
zSy^xKlm<;zhO|Oyynj(q2RA5<^!{|DA-_MAJAhX`Fq2aruf-#)7fc2~I1F8fGQT>7
z3x6ae+8vm3la2A(j*mXovA54jPEN)`&;^0lA{C6!9#{)4eyE$cU}>qJOqxaQoS%~p
zN@;v^`z$8oeJm^q?fZ7_EHSH=CLH%=uux`4G6sga?>XjYXQ}a@KPfE_wOb7}e_mP=
z=A^<6-}%!cg2)r6HmDsxMHS0Zu*rz?Qsq-1GEgeJ`p0{(nL}!Kmb5|9IS70y-fZ*~
zS`FHiF7yGBksG^#<q^Dt9UFo5flA0(Dy)}>6Qkk_!TB1=7)R%n_eLG^{p%x3iaK?H
z2Ap&s%C4lBvB~}(8seyr(KO8MNQ~~ON>xY*>l*wuuC(C`Zce68CN>Bu9Et6Bif*Ad
z4|&xpW@wwuS#m!@421PV75zbjM!v@nHcaLIc{ZyuU%c3Tbo4g-Q&b*}7Q0P^C1N#W
z(N^?S@}+ug!TFbil)Fc-btXO7dmbre=D!<S8TSt~W(fN7=1WiZ*6g+5-Onk0!hX0#
zTidkfQ$C}*ZPyDFwn7)v$aDjK^(|Xwq2UaV;E&%<&$X0mUaQ#%5bH;Ms)Ta%()}~X
zMMbk!BG1A6LUhazGd*?6gZf!Q!z7pM$HYLrob;*V$Brpvf{SlN{{H2Qc2>MK(}aXx
zqp#+WGy>gGo*uHXIhyKacFM(dnq3G;x&JA?s1RyF+ukq57|l}D^RNAK;S*NzNOT;L
z*3Gw#-0shEB+b}nxtcE!E5(}eh1n`%FfV`MIZrx^y3v4i`3Fx%G0l*&-)6lO&`x7L
z;X>h@T}Af<<}7h!>9vfyA)D+#K6Q408OzC)B5bhT;z`UaFiTos*zXyJlD2Bqt+rRG
z-#rOBf!Cfn^qyGVR9_W#lbc(fTA#JxXgw<2?eF9~`@Q*G)vgZ~I>hGqDpuy#tW{kj
zoui|7zkdD7X|st}?if8IalvYB+yo~<$<aM<dtXmYSmi#lXnZJF5Z8D0vBzvehvl7*
zXR*|juK5z|xh?BptAn&doDh%Pq1jDAPHmhL$4X9o`udgk4ZTOQel^Ny+MPN<CZiIr
z{Pz`YK~KV+a^nql26s7}4Eph`tK87Pw4@-P;?cI`9~+dp<1P9)e!O0?4V>Rjok$ls
zY`__CG?08kuseSuK5N}<Uo=@PWGYYf_JBoP!fW2g0Zsy(m%}5Pxh331hHQ2RklG9?
zhVFIk4AWmPaW70s$GkA#jk|QaRG18HOZ{JOtyk@*{j$s3Z*HaiSL~kbdi;lMmSITe
z>^cvN^ganV{jFPDzn>-jpSyq(QqAp$4{daHUr|8Qa0)lP;;s32Io{L+*GAM3cdRrP
zKfqv_R>b(KXGS}IWt$1}XN*?~-$$FD8t3!;yyM6ZM};?@cmMu{c5qJw;Wi-ULPSr2
z`+Qp<2hVo$l@GKX)D25Po3<86Po5hT&IYN@aUZ)`*A1cA_T4in<cdpxA75ryWtvo_
zV<IU}vMC8~hEWOX67WTv_LAP_+{fR(9S#vF6t`-A{e31{Y#SqE!R2q2K(}`B{`?wq
za__FNOBVBhA@MUo7x)C!;)(GV_57(rSoHjOxp-};c{39eQ$Mtbcc5&e*M_XEmQ+93
zUTTJ2>2~sNei{xSdt?_gGk6-2JgRP7CS3aj%+;QSC7Mk}ojC4&=Z>KMD{#r))@I9N
zvw;n_%uI|9ruNLtOzeQ&r#@xCU2U&q4kF;G5B9n`oUm+PI@|G<j*NI+AMmbVWDw5i
zIo!E0TT18xVCo9Ymh&QJKEvkv^rFAxjyiPUv~frI1+k`72@3r4H5cS#PyM-@cGxEO
z^z?wU(S&)bzlO`M>%}*JiW6qmn~-9I2OE+|`HhWB2gWCWN4VB&*Q}95HJHaW9cgtv
zWZiNVh^jMx?i<W!IGuH$59SwyUjF{#!KS0fcezo^&R#NmeB?8f1ZEd63Z0;Beg)4R
z<>#M!C^Mxf;`aY`<O2aBia7c3j0jH3pZ~FEfZw3h<I3j<<ziPyK~h}6txfXK1f8J)
z$cYR2nl}a&-Mv#YuCI9QS@A9wAlu@d%|9ks-QA;s0{rby2`^x5`jE|)=aJ3^mx~uK
z9(P=VrQ#OnCnsDFOG-9Zk9bRJ6Ym!A!TN=tsp^J33C1Uc+ZL`Bl=q7Z3-PP?hQNK)
zs*MTI0wmcWI0i`tcH(w+0vair^mNP*fr%W++z{{_o4zs0bvGR2jXyTf*n6vDZoZK@
z$u1>zsw7VI@N9eFZE$vK9$k>1{J=;W(_jN=4LwE_coLG@%bR44jbqEpd2`MBiH+zP
z#YIF!NX-tS1M>Z$yce^ONP^A8__XI!_Fvo9-&87Ne?T#Gq^=YZbdJ>6zvhM`ke?z{
zY%EsthDTn+8hh|{g7v9-Q$+-BQ-*XKCAlA|pF4Q)Am<u%U$Xl|z9y*~96x^EAuX(t
zsWn)naQkAN9_Zm|S8$|ff)oE>&k@{Y$fM-XoJkqN@)dN6VEIY&=jZCdKMDJUb??B;
z$kxEj^<J+F6PGJ=@67)28B{KzDvU<xtXQ$UpWYTP6^2bxGz%-MPKu_-uMb0jX1i1;
zqE5_nJ_XZ~BoB53)HyOok8;B2?P|v@N;i1AI~f^Spoen!J=|aG890%2-Im(b1o)%M
z>=8-?$_YfPwl#e{+EYu5XQ6}%8|3j-H%&g5OJQ`3xO5Va3>Ziubj5DWFI*<&&3aFP
z*rHuXvFBeFhmGm6L!<RD!QDYVB*ed(yn*VYy0lPXbbgl4liXdMnV%23z;SBx1OJf5
z{LHxsp3SRXdsdf~#hv!i-neri;Yxo?{!oe*EBbx`-!E_W!^Y@D{qMq81qIuAe@@`2
zME2`Izn;McN7zV&B~pF4Y}%v@3STxZGTVH67D$%!T;7F)4u}`8`m-c4q7EMFR%~c7
zjeh?031A9HzDZ?l>~n9{jSzI;oe;F|-VR}CORCo_bLgHwKRMjm9cHw1hu}F~Q_X;j
zo8W}FT{g(geeubY!H_)m_IvMr^8QjHiHjD>9+mCd{mM&QtMV>W)%6?`!~-IW+?aWV
zug~(b8z}%T?icA`<vA@Z%y$0#6+1h-{-Mv3gfIz_8xkK1kB+OAQbNy!#TZa;EqrS*
zVC6ob61V1M*$D;Z>JJ|z$41ooZvsdz*k|9BXL|W^@K3i>aUXt^Ub9cyx@zQ6kx#wS
z<x$~TFQve(O_ZXPZdV51n*}<B%_@;wSBR|k-RVo?cD8<7qso-i*Vq2}lo6$0T_H++
zG@S-e`X;UW_TJNTCo3akWxYv2WchDB!+L77wo#XtETF5~f7sNE+u0Ri<CRB=?|TrT
zAxgt{(Cz_ZV4Ut|b~r_LrmXFr+{4Ohb?MTxgg0yCfWeNc#PM%6&982d-5H;7l7l1m
z`}bG;L`}^zfT_O4kx!A$Evyh^K{`Pvw_JA;zup?3W^_0?aofN>uL7l{vdFx>O9S;X
zy-bW71G~!=b@q{lANcx;h>O>k2Kc2*DTu6D@pCT@I`GnOXSrExcV;}<xnswUo!l}9
z9Kym6KQNA45l#YShmnmgw)0G-4E+sm?qz-LVA_tQTobIjgcu`ErK{?u=6<Dny*2d?
zynTDh-)|{7lUFt&u1!|XFgr8zFm*u7E++j*66jF8469a*rlTHwI`HOZ?3`nW`a_P8
zhu^8{$3;Y>4jj-vyHaHHqT>7A?`MtHYhHVSMPK-4ps0RbcG+Z^+)YV}x2evOJw`;g
zz4DQdbniN<>>8@u^}M6Bj-0d{+<64Qd;@;@8GE@?ll-v-tPQErarKm#F4<fIo&B6!
zJ0ojLZSFmrepX*!;2=211cdpg0SE2dFWrnKy2Z<F_8_c1MORK{T=#a(1kdWf;9$9Z
z-C$y$`^yFyV>O*)n&n>Q<caYpkI#or5(325uaNCI$-YK}W0EP`BUvqsk&od(kfNJD
zuR0XAN)Wh`4e5#A1@hjqca;u~Rf&%sf`FEjcHt7(mKoh%ax)!ZB8p6Iqg(kia&*!?
z3Y(zJ!)!Bwj6%zs$t&rF$^&Dzl}j1U7tr0XH12r2BUWA+)G(Ec5x@??WIov~gOn2Y
zikkzYPma-6f5~ytDD~(Q_?XQ*%lhG+QOQcbabuXcW}8aq4yUQXS+uov9oWpeFE5?u
za_!i-nq8nHTO3yo<dD00(?Qq)!LSn5l0r;?A5ik8_fIekalFGy<`Xv71Q~Fn<|Z`O
z;q~LvaGB&sPG{r}{$LHPD+e)50UkY5k&vZI<D|f92|mvnw1&sezT<5-DW15Uk2C{g
z=>plAiT-S8C1}wGI0#^2T^%NzVeL}E4__(RHf4T_Z?A4EUI&QU1pI+#a<Ld}{P!H|
zLrZ|&#_!g`RKLk-PxvrWw{b{^bpZa4Yjc{PDh59S<fat0{XFIX+y=fxy2g(~R_EAX
za~%nFX4QrPAMw{hF*o)*LlMP~Ujuys2#^N1{DXqr$9w!SXR(hjQLCN--dI?iR+lN=
zg*}i}%PYgm$AG$?yng+fPs1ZX8XgTH<Y>t(ZY=AfqQuF%*S~=kgQaTXkxK4zeP9MI
z6MaehzPQX%bHVe17oON<wX=<<JBQ#~7<tStJ<-geNgeDtM_XIn!s}IVAjZ}kG)R6`
zY}~j+;T;pN8a@2w3!UTe0{oLip-9~!5c>OjX6|5@*z+3$gH89dPLpLtI=tvPOk}Uq
ztTV`ourz{>Zf=0=!w`Mcw(E?V+Eo}%BL?DN6)Ee1{dpbd;w>y<XZGP3Y7mF~N8W0J
zO05wG%Zq3Q<D%=gnt%r<3Y?CX-YYSJ$(j_U4qp>Adm!I_Gx9iwqm2)Xif{fAhb}&o
zyg&Cy+Wiht;1xxCE9gzC3W(c-`*!Txmwp74;drHR5>Uf{HMU*lgw`_Ztai<X`jlb%
znix(l!a;yd3qNlgdM>*wr97zFy<^8-mbvQQ4g{rD>?XQ(BZaIT6R!JYeSk%M3%HR8
zZrQKiJKf$0^CEeE3`E>I=`8{JoC54Ohl-~qtMvEpe|q@vH<6KNasph<gclQ|Nw1v7
zi1YyipcM%dsKNRZz0vE6i=yIQ&|mubdWq!1EYii~ORktqX4=L>+WP?Z`WrXuus+;-
z97a^FD_74cQl(tP(wBiY!=DTZDRV|{hhP8r!E<O-%k~G@al4o~eK)gC!9JG`%e4bR
z{>-9E&w7woiwTxlasuR=TIke>lErqtQE^|ZWtJhFEDc!CQ<{Ohr{cZA1p5~5(#!qY
zR_Gain4{lQtcq7`<lIdB_45rI(&?~N|3wU?eCg0islhYfa3Vy_>=Nb0dayj{paq8$
zAs(Y6Z+K@DXcn*)4pCix=r(3%dySwP0rl})hLI7dfb>34=+r3x9MqqQeJHKQhOQj_
z&Wam(?C%8#TS%9(va*87w*56)xvj5Xv!jViIZa{)IOE;SD>&Y}tev0)1#l`?-`Pq(
z<%l{v`y9Nfs<+ohF|G(Y|12&HktoSk6^yAm(=ReJozaUaWe9z1Y0*z{hWUG#OBneG
z*76lT1<vSj*R5Me1HL|d0O$1{NwV<TujtNuQn}gLAp@7N3@<8<=FFq#uQ+Eq*0tJm
zgL{HfC|9oZI-dnJ@D^)A&KRUWNsUt@*k_%oaALe2)YNtqu-&H+fkeyXv=lEh^|VLX
zYh?5UvOOPF&g~L5wEr6Okn?CcnW`ajF+y85?`=)Upla^<-1u|i3=WAE2f9pR%IN0D
zv$UtCX2~b18|#brW!<xvCg(u32q6|;+Jj)a04YRM2&~Crmb(0d56)l0ps9dpOLMZz
zG+wvJ@fhkOLAno6b#2&r@X@PrPBU;Z$rmoXhNg_#Tg{_d70d@2dFT8zTQKif^{zwI
zRs048IkeXXeh&u;-)!cmWXLm1i$2(XQ`9)$ftlH!WA3Aw9_PfngU5FrvE}5`bzNo%
zlwzFb$mB<dHgFXahlcL6HE|fuKm|yW4v7G>SXeQb7Ygn9&8#m8f-04lA%<7M3(Ll4
z#Mj*~bUHxB)38-e17yUym4Ls>%agi}>{rHR-WkWLHvVWyC7=(%J|Qhrv^hztmM$AR
zI}l%70ep}YENkLQ%1$lP5%L|XLL+e-4?jpOZK+F>-7w)8agGjO@Sap%q;P5k$Js4h
ziiBQSUcxN+=%n424QZhN^l}>FmYkB=igJr5H&OX<!_?FkaGrw8lA;@k!B+!q$I(mr
zY-Wv!>FqM5!OdQ(;+y%$xGEX2t68qzjVmbUaMaVowKW)5?ltRC$6?C$wed%}--%mj
zHkB?1xZT3cr@MAjpD>&B^4#wctalWfh`y<BwXmrNsDJ0;JL#ZGiigZGyXK0rfvXpO
z%B+@`zf)kW=AioQ@`Zoy0zN)~RrK$!uA`RU6X_euK0o)9ic{g@Q;~MUm*yR79uSuE
zowr=ze>3YbM``hr=+mG)c6pSvq+Rq<fN$E{%ZoFw7{zE#mFuCyNZV8Q`B2hjgBL&Z
zK+b(CgOu*lI1g0j3l&Zn>zGm06Lu&BQR0bpDSBEKe#D00FFt-mvLm3?Ir|p%STyd}
zu3vA6zgiEsp}4g$1LXgv&K>$SN#=;8WD1@Xtl&c>FW$P($1U*-I4i_)$y;DY>;V4>
zs&0{!ueChE4~!>uHaxk1j$(<)iDVlraLuA80i$T_!wk)5P|%fcw+l{XJzoqCbaP`Q
z!TDw1TSwqhes(K(t0%}Aw_G&=&UO8K6RWPSE`op&HVxLHq45(gU0lqntD@{v@p+m*
zvbpVY)J^DmMz=9kaXBl^c|5FQP(=IIlY%p#pU1>3?=nZ@&()=0;->7Idgnx;ZFj*z
zi3(*!YbN`&=YsW2dyRf1T6&9BKA><WsDwTNnZ4Y!#AzG*yDSOvUdoTQHKNu(Ue2R~
zpiJu<7?6z!pBrjwPVGz_CN~Lg*)k=fT{Fp=c0;-;9*jP|iJ#|EycXu_y1_$oTV8sH
zV!EWm?BJLIG1>^;wE)frSnaLJ`vR%<4aU602fWvI)Zc|!0J;S^$Ec@D`Z<@?85pKP
zo&!rsL|n9|I@-wbeFXM-aR=N6>i8C!6~nF%)&D->00!b2+IFg~4#tFBD+k(#icfiG
z0XLbRNK-Fy>u2+rssHeSc+c3Na0yCCc*&s`^9EnQsy-z-J=3uGoNCmJ+xTZOH2Eyz
zQp4?@oc<WMQ_kl#zyl+wQmeH<yq*u#0nnTHxQ<V*5){9p9e69Q&Y%l?W{r5=15f3O
z51FInayqw_xKCrLlr&zMGBvW?c5laTxXuZw9=E?7?>VIAPHIrR$aE%BQXJ?%M+Xui
z?(j|PWnP-yxGP=h$x(!#x@CECcJfzTy)N`U=452JsAr%RxP;*nHv2&O;LMXa>HWe|
zPp7E{1(GlrOitG}Iw8ehc?!&h^M%(ZLD^BL33|dkMj{we1Y%@vu2HFQYIhTLK<+4E
zioMEZsl_PtiiHJ#ByB@mLE1!0icat?T}Gk+56t1-ynAQ-=}`upQb6Mmp=bI4Zh=*I
zWqauYbt4Z?B0lp2RtZCHp>txx0$zoVztY*8^G4>at*r+J8CPMB-nx6nq9$%+aA>@}
zbos*Q&uT;-Qr`N38Q7X>+>7W=(CHG&jE-M^>t!RLZ4aZ<+l-ze>af8DYl2Vq06deZ
zi=ot=UB7u}1vuIjpp`2&(OJ>v_g9h!D8TKBOE#+mReo*TbIU2A&^b!o*Sc7O27$O2
z#e}-jsUgjXM`cg^k;<I}DaE4GoZATtwWVv3YZVvA&G(>RmD``9%vk;SLYBn$HIoqn
z1v?b-Rh#Z<wyjq$2zfZ>J971rlPgm|<x{VVi$A2w+tiE{v!X<_FWFgGuL^A0&{wWo
z;mS7+5(BqD>;li9mFv=uQ`mz;2MrN*TYYY@+qI`M2=REual~g6bJyTtT3NK+F?dJ7
zPl%Xa8-4KXmd9{tv2M;eCN2sYghq-tz?{j6G?Ob=TszAuutf&;+~2c#{raQm%_S|Z
zt<_UBxeM$tj;+XIs@P{vyiHu-)A3~ux-aWn8@8sjtV#HqB4wPLuUlDRYdUFIG{jtO
zw)avL!7H;d-L6xseuoVgHz7@}&6>`hq;lJWVOftw$%xt3cn&xX*VchVkr1&;n|N?G
z2Q+*ikQ9nsCR2vX^!CDa2F@s9EOS@Pa&mGOW_~@ylbi#8b7%g^*9_8q!g6v3I?!C5
z%OZzM4)*n_rPPJd_NxKm3RLrkw419IdTWLPzB#I-<dE1stgf%Kr^)ly(*8Bzv}?5u
zy9S%cT)IL?DCRi)lN|OXFOv3y733ZNq(J{&CUYG;xUev*NMzwUrUQ{TmcPMucs)xp
zM#jtD&DhYW*eh0)wbt5T82Uqdn?w8V01$!pf63AJD`|fyizDWf*1}~f)rIux>P;bo
z=I&4CJpN}NJi&QDc5-r}^@J}iFI~8Bb#lNTT`OoyM?Dt&lxkCT%;4Ew5oA_T2CHkp
zBd&o5ym2xY0%)?aiH2?jX@1Sva){gYXMF0fg{Rpvu!JJyI3VBJG4B3@2cVtw#w+ST
zatU7mwR~G|U{}#6Tu<%;{URqjyMFWZ(2rlh`!H9Q@9eG!D#QZGd&4nodLc1rtj(Sq
zZk?Z-8Zu1N-9~5QzhOVVPr%-p`BL4NmJUPB^{@?s67CI*0yzA!_d`m98W<QLv{b+I
zF{F&e9me8xZW4}py{wWGwP*mqB~X0(Xw&0}hzI*lXugfJpPV20%_=s!Fp#<*93*hC
z2%q)m1hA$CUXuIfw#>ly%zBJCICwbykz;_2&_F#*SezB3VB|DBe;mrE0Rzv3k>W-@
zPhC@^q8UeQ(y~_7r{u%0SVT$+X1dm_iwlOESf`RLW03d2z6ReR>o&+da5F)NU~FyO
z7DreFDTo-my#>It&Wjigkj^0r1j~uep%aYpSA~Uy{Oa25JDS_$EiX?oXe7@Q4!=M!
zM0&bVLxVP$31Dg6**<M}JZ!15?865{JS#B9){W7yp{u<9S@y}3po4MbmI2-;#0GCL
zF-3EX@3`23^>GCwW=b?*dc_4k{{Ej~yIUXiSp3Q(0Ueca-IFdCWM~~@)6ItuGlECz
zF8Z2Ly6ZkjI#{Im)3_`f&I3B!lxpnl@2>^z#Iy7$SZ;TARb&rnBsXHUINF>)LC{9D
zOqk>o37aSw<b$_z-=;M3=@HnkC~_-VU#IuN8RW+zt}Zc#Rx<L*9&#b48^40gpI3qX
zczH;bioX?q@;3s1Rd}t?p+jm`^qbu9dATO@8n1_lCO$7KKVlWpFX7@m%bU!t$gpV>
z<=nGP7<?-&bkCiG3>=kPf5W4UNCWNH6&2UMzfhfIJ$>rbjyMSzpwRBcYQPpCVNzIP
zHo*dY$cL?`LKYMvXuu9=olK@KV&CB$(K5*R9b3dYs5nzGtEY}pAw>t~p!`{%e$UaX
zx|g2D!Bkmghp^$9d#*Ll)BG5XZ1oY^0C<M{y|Pk-m-kGhoWx+?Ww!0x?SFl+;*wq`
zr2Ar_K9!x0`Nlt<YwSj0hxIGk<J<*PQ}BvwW6$!KgJ2qg_uZGtY&Q$b(PPJOe2M2b
zarrqrX+n_;gF`Fe{eb#!M|&Ewcb6fsYs=nq@wP$+g~2NY4}SXia9J7_Ea!47aju1a
zux^z+Xi#AB)@uY^*Tx-i9OE5+dkE0!+)$o4H13OCLDF;YFeU5f+ZKNk5>U%F-NDLw
zh2M+$jqIx8RhKFM6qa`>3eQSoPkxY{y-%=k)u?Gvk(;H}^KN4wIH7=yL%CiQc+>H|
z<F$gIy@-vqw6cmXl`+|c-G5@w;Bop3bEO;mi3i%Rc#6~a)X+0Lgk(_Z>dM{b!O`^E
z+<#)RImcdj$%d08bz*vHN^nhDvAZ#Ny7T7tT1GLJ_llnf>EAvc<`*%KP~@ptA3=^4
zTFJfpCC&6A@TkxK7lT{D0zm_A^nV+|<BwhS^tqMF<YALa&2B+hqK<<wR2?m&`gLiv
z<FvUa$On|2aNCBaO2Ih-n`|lffmGUGBzrwf{pMBJ>Qa*s906@ZNZ!{><3tP^40~qs
zJ&f(`?XgjdbBB(QcuqkQ@&bd(+PakPd^jG_9?2D1$Bns)7Z<1ZdwP0003t$^iJW@`
zhmSJu49+Z!7;K({lVi>nHqk~_O@-5{{Y_uKsL)P>6-CMR>03P(C%=OxK0UlxGWTkq
z>U0ibdPQzh<bixZOo{zdNV*B+jNrAy481;g4YaY$B57{38+Hg3Ft9C|C@9>ut^<+}
zH)}o6N4)6UK|mX5HgSTon8a{UvpgR=H_+!)i~3ft+ftX&{`FgCjL+G6lPV8dv%i9!
z6_eNul;|jeN7;YMQ5cxHn0U>}moBxuxOls}N+(GbrvPxuD11s_fysh+YS7rh`}|6V
z;Rp=zkUQq!J~x3V_E2?^h3+s8XkK9=cCE8)41IAwExW!l$Gjb}?w9aWj>9duhzRj|
zwPYL54LR{g)OumvLm4W2ft#?|&x~&SdtL8O$dK#4ejVK`AI}af<+RUr$~5OgniU<q
z<7#RWlwtU6n!>c_`1Qe`Z*HR=!I&pk3V2#M3^hO(m__H%`(+U^Y*rAwX7xeNjF(3*
zQZ6g{leBfqcl>3%s<62_ha_WsB3L`9=e4j(q${QjHfG?MRz{|fka=x=y%z0e-55O3
z%I}3?Y#{%Zy81QmLWIH-2+DiKuXW}PypSYvYg9QVLn$B%4-D{zD@R94m*G*f2nUY-
z58(c`y?z~|9xFdki%^{R5>X-X`hOX*7F%<3awbM+c(y_vucvJa!4A!#V;?AQ+MSF)
zmkU>z!-k#~y$i2B*h8Zvq@AJPg%jZ)R|#56D5U#a=iQlK0dHE^w0?cv-kScQ#WQ=Q
zJ*BOKyO8^QUBLVzLhYZPUKdVFb;EjYsNs3)()XV~*`Y2l{^gkx38<7R%E`&e5AZJ8
zny8_X?P*3I8hvaM&RnlQKQHpgV_XIk>M;CNJUl$G=qhq^&TDMTqMbM^vI6XnlXJ9E
zL&4dxw6ZHGEUePdX(Sb>7j#sH{F0|zGb3Q$2+a`0QJ*6wZv%@1`+D*$%`oN`%{M(&
zb1Wbc3#@xKY3zry&iFE7ze(Z=y48XIS9eiDLV}O~`f!VSrKd#|AZr|EwIkYdU_UMK
zM7te)h=8S6g{}(MY~On2wD$e^KqAlm3K%+|EY(!4Ry?%ufm5mA)hielJOgmGb7#+7
zEC~F1IhVh^L9QM`SFn0xk(}75qtggIcX<*_@)du@5!$glGljtb%ErJ!*b_k5JlFG>
z{<x#S5o7d_TUQXyoYWkq)JZ^OAtb~FzF=(o5d7LwwNj;Br-adUw&dA(0>Ob3GbtBL
z0yIQB;>P7n0EWXi>oN2K@t!Np&Q11xLwT_QfiyJc1YR6GgCNLa8tdb9C`HGDD4A-Y
zCi3oM?+*zJkAO^;YN)2!)0+D`dZWLP?xE%E>a}h&9cQuJr|g3~K4s@22TmoT+!)+l
zF#F59%>TT-gsw;9?{oZ?{lI}!1PI5Mq@6|sy5@q#X5KMmb2joZbMW$(qqVQ85jk0y
zrV1GrMI!6rg9jdSb&YS{7*fa-cX>HE(D~|cMX=~UIo0|5cW)OtqsSXeS!a4+3jgaY
zv=E{)EbLtA#Ibs0=g6g>n~N4%&+<eHcri|i2#pkn=H@z3h7!god$?S`e*1Qk5CwVw
ztZV+<#3mK_$kTt??((kxs5|^m865xP)8j7z<bV6OPqx#&MYc|JbB`1RDSy60`5M2F
z<w{87A<1reCYOrnO;j)e@oYd3Z>y>VuDP}q&0+<ZNcMvk9FIGg0nh*H%QcqlmX?;#
z<ip=x^@9}$?fK#DXI;-VSf9Q(Y=U#XKTlB$*-goFLGdC?!{0N<@f>hkvjK1Zo@pHH
zci6t~1x}5IWQ~vDz0PKU83sRwm&PBrh(IS8UJ;ZC!?-L|KH5CAg8T^92b8t(Yj?9P
zC-fbNE|W1QY+WYl?YC@9e;#oN`WU36K7^xEU6#p4XA3L`$&cLUw<s{4e|5El%61Nh
z<Cd0wEbD=4+b=J*!gz$A_QwVU){O5t#kYyLWz%}6!xnYr=vjHkdN&hUfV@9dNnmvn
zghlAvF-T&9UvbEdr$7Zdh&ZO&(q$jeIS-QJz9aW0_!WCz#>w0AQ&TGG=_V%m77QdS
z0lgY6?ViQydCB9uVAj?InsL24RyKWg$@j&Ofi;zyArHQUO>2P`_texBV3SCcva7P(
z*eKmQm<lIslv=F9Ay5vAUx0Z>KLUn)FigUDF7J}uG%P*B_%za??}Ic3qP^6M?>>lN
z7qU||dM?GTq6SP(%rk+fyq~}v@!jj!vgYt-^Bs(b0ZQd526)gx>jvT4o)a!gktPr&
z;xh*6VH5GnteP#OH68C6Ouj4S39fiWqou}Z76>cY`Iv3hnF)8OYKq>BTk2h6g!Uw4
zNj(xlYeBdHH;UQ8Y}Kj|0r=GAf(z6G=&G&g7;LUXy3=(tN!<7E-W?qqV}^R-zM?PA
z9K^-s!>6x)A9)TmA53Y+uWwXCr~pfH2JjTvB&^f?vR=FhSh;K0E~pvth{Am8O4(gu
z@Y0ULol<6DG)S`WVRaC!`0#R9uI<5t%*)${JqXgMSS9Ug^jLYn-S9w)MlscwM5aVp
zlDZM!n7XnHoCv<aVuD*~cPV-Y;ZncjFQ>+<myaFP-ie3B7piQ%-tzMGT+-ddE;yIz
z=nNK5yCk1H>^%gVzCn~dR8mQ+X3gX@tf+4Od6@_mukTmF=}zk{W!UYMI2V6E4?n*}
zb(BG9XsE~@X6AgWAKH%7L}>qUvGsB-CUHh{@+E749&%<CMG`!q@ztwV!9xXJDdX^M
z%C%`%X=W9>3^SL@R#tfMq^=LXLYIT3ta3At^4u^k()`q7KiI=Eu4Q$}wXh|jA)HY}
zKFr@*1(N_U!^O-m!BCRrh@~1bnfjf}1K!klKxKs;A>Y_BjfA}1T&;~!fXp<0CuJR_
zuK?OTaEeQJU~U0+hj5rgD;mI6GHqB56GDP|j=aA^g;kin2YA-u@d%591u1sd5{D0K
z{p0y?_(7k$PZuewT<`Gu5|wYi1(oA!$0_V*;5qaL&+0gpO0kc7oP~s~fgA8yv9uh-
zq1n@8idP*2QWHEzDR;S!5o<1V%3&Q;0@0!ci)Lr_@J4$2l54*b=5m0-(kBR$;_fck
zU%mQuar>7q-tituTXyklg4=u>5BNY`GA;LMQb*)4;Sn59EWgH-M97%1VmfuD@xxv!
z-hqn>e=Tyu3@Fc|quIjvY28Y|6Tb~!bL;M>)GSJS-MO>2paa%2T1jfOd`VN&1j^le
zyM)ta;#rcswtu$w-?;PBd3b?EMh-y)+SQ|d5pAaLu5EkvkS|_LceSv#-Y<jMkTFBH
zbBW1yX(7KW2drqc$1W}n))2>1o|PZn*3+|mer59EJ6>KyHKmJ%ZJwpmXo9eeL~24s
zZT9eJhtc0M6}*YwYe3wfu6Dh{ezho~w5G6RN?acNjlpFf|DMUw?kS_psDAb8=oK?C
zfJ?TwYp3g9Tb!%M`Wb#6S31r4;jr9Ysb#Q=rs@T81D0zc5?MCjv_0Hs)m~!t<%!YS
zEqgF5rpss(-RKh}L`Cf!98Ne>gVW`-V-T===MLXu176xtVWTA+@$O@tv#_B-Q?6NT
zznOOPIRm~-@7G*ccmE^rSYB9w<kOtrVH;}gZRRv>uU>^E%2B%>OLQ7>Dt*7kBNVSl
zyUl!UZH+~_=a6^n-;sf3kS`D9Kee6j6{VMEYGGgq6o0%o+6=qwrj~`xBdSRV@rElm
zUK12bT0#Uc)PW?h3Sk6$a^MO4WWGhm!w}=$9ryh!5f*NWMNuF<%23eT1Dsm0a8ugg
z3v?m0#R(S86%~Yin>W%vc)#9$%@O9K7Io_vi+H?GR(K8YM#9(Nndh<xUND=Qxa8C;
z=E4~t_wC!qrz)I3)*J2FoZb5n8%9K$ltA(dMX-ugcn+?G?j<dF>69+mo<T*0%j>#s
zWi5Ca5wAngis|P*S&{I#Kpm48sFl_YX|p|_&j&A;8W?}@3*|S$^8@1}(QBP+Cf|xy
z96ogD5zwwPXT1K6Umw3F!d7k@KJg7xW(6m;C4qslXZ?oz>Hw$aqc4e!G~iDRb7>CZ
zk%o(gi`6%{Fsl~SM`lkSL89)eRjc;y8Dx66Vbi9Z%uE9H%o!u2c9?`*b>8iJi?Ujy
zR3N9Ku@O;UhRz$QjPS_XvT-AluU)FrR}?Y-8((RbDU#~jQqkeRspx#s{hJb_f6OC_
zhR&?&cV&CaiM1P#a&1+K2E#A6=a`!W`pZNNDY3xM16%a5bUj5%|5GXX=0>(~V;glw
z_Vs-~#oM&Ia6_zPP=xk_ue|?PHcuvL<T!-0R8`aDV}Cxd68CBWFWh^pZ_h%c$g+P%
zX0izL?)8`sM9@m0m#VmNj^E8#T3QtYt|zpD=tH{&XXfV>CDEno{P`W96?;$1JG_4l
z!L%X^E{PYTXL%pZWoExW@`*^S8iWJ-u(smboT3W0<V)M`4VYZ`KEckm0ty2t>htI9
z5rN9cfjN`?9hPu`_UBSGE8xBUr*gzt;qeX@<GrRxik1p~wMSROicQ?YEB)~E`nPz+
z+Hs)ve%XtUw>Vy1jFSnDjo?=iF76~eglkc4JtHvBET^$c4v<XB*D#p>*@gt$%aAqi
z-Grh~gN?DGWTsQmx%@`D`tzL$C8v}7^9u_xXmSAegKZRI>5tm9WneHBAr?d;u=V-5
zC~RdNe>W`Rn65dBAf}2ZB0oDx7J&OONd_*^gh3Q8gMZ(maQC$qR%4n%%1JX$BJ4Zs
zWxkEU@vzvXcw|sN$GUay<HP6xXV@7F4#6kj_BsZLkJ9{Lir9<y;cpA6*U!8@p3~`Q
z6r*E#-%}hAG)C?|5q8y(8OCRR^;%mrXypiy))TS*LUdYH8tc}%()-|OBD!T>Yt9+L
zZu{`H&Y9zmal?(+SQViWhLA2a6W~xfH1E-#(y~Kl@QZ*UMF402uU|~e%umbM{E*0P
zPVWV7=v7<W;5OWu^s>YfxH(|IY5()}N|Ji;SKe$dSjHtG<2)VD*Y_7sG2a)v%@UWF
z*l3u=iU5=N-eX>*MOJZ(E+mmT4kqQARJ{b0MmVY3jQy^#D)<i14NbX~9iPs0-oFTP
zG341n<Wf|}(&;u=bc>>g4+jqN(8>Bb<8!KUr;_3=fC-|6(K>J}A1ZEjC1TqKH=~0>
zM~=uxRgx`ssGp^@b-eT8G=yVF{25;g<0>qCocq3Zpe;ayP`OhuqDl-N@yyZ-iVky#
z<R~mCfcd~#mvks6e0`JuyzF|~bL~EdyfxOe|GeXcITiK;#}Oo&%mn-fH(MQr+$h^L
zgq#ikeE8U6Id)nibLpyuLV?D88iXi>lm20~26GA42Z-xH^{h9C8Zz~93BEJJVsOP=
zaJk@eCT#w9hCC>6f`K`NH>qKT$t&f@+LRWkw;7lN5{V1-CT)W|w}UPbFNAL%de~Tg
z8I2YqQed<YI`zZ_XW-8sZE59J7Uo5p@%X;PEec=iJS{F?j(Ln;-W6taU*E-2!3vN%
z@q2*Z=g+O#5pTmTbwFHpGMy1`EU-&Ny}pMrJyp{;V{1bHGZA#qnA<0Cu-OZK`SOJ-
zDkY_#Vn=C`bR3=;%44ec(cFg18vmHI{J`71!1W^ZHn5Vw(l|!?gwv=^YZ4edIEj|S
zjDQL_mC#JtLl17=w277=v4Z^yvE6R{6&P&D-S;Gg*R4hgNGQ|U;@~f$UwGXjZ-v99
zf9?Vp_6S0CjRuJ3F^{<)9Ba@+@I-S0JOrx9!oosan8yl%=1XVLJek+7{pr!+Um2xK
zY5GmYP|JyoU<qJyQY2FfW8gcqGjL4~itt896RIaYZz)^q;m&d304{98OT`q>Ey7`9
z@#I*xNk7ao!m{FWb94Vb5E^raCOM%lMM<28ot2^%s{QxWQDT~t3eUUqLu!>Q??3SC
zgL`d`c{b`Gx=4$WwiA?(<homQ<1|}W*pcVwYw1H73soA|W}+)oh1KVXExQk?QR1YA
z8Z)Bnb^vrJK}=EI!Ecq77VqwCrX0aSdjGZwm_4Tqkpd8(_3sW=ns6<ho_00Ka%(A9
zgEz%!(;)(h+gz>k4pv6Nd0Y4H9l}39e?m6(#HkMbDxms;>?KW<8tfbs5|;JXiyb-y
zUJ&;iu?obZ2k0gVDHeNvfPWMxImMW3191y5DwzJy&dnV=)+Ataa^M4X!>0fAh<zMg
zDMO_n1w1R*_Wm`i)4aq3l{q65&3NsN^&E2bSsgzDh7RIJ+QwokWz0LTtJ^2@nda#&
z3G&oc$LWA9GD0-qtpZJLQ$s^TR8+15Q&(k(;-CFWnlM(;yK&CAFw9B3`cZZ~7@#Uz
zCm`p^uG7;P#StelHPX&Qclz%JFKp8$FQWGSTatLVmwr8L{aZ_~=>J{t{X?AczrCCI
zAMVxv<7Pxedx;6mz|d%vHWKZIt_VN<VeP4koA7Ufo`8{UJ??A5pZ_6p)9(a12Vg%{
z<J3>6giT_u4@snLh0q<`j#-!+^C_Wz!#c!i>{Nvk2x;gtpVEG(Y){b5n^!A?lZkFD
zSfrGr9&<9mPT>@bm6aX8xjlvutmk#0phSaQp*%j=WEXA<H#DN@fgflKkN>%>BGI_4
zU{`2wygg^Gb|=JBl~1V{R~T}Y*0weetdRd)XZ9213+#0=4r;a+pppeiI8Gg8QrJ4d
z&zCkYuDLmi`i$k-kEZ;~Xg%>66OLe<2o^TFNV68KfGM#HOjA%dwz0C}Xv=^H>g@P&
z%?!iSIx0^@&8*{zA=Qz`8)3eJAP_{n2#bknN`Rk|jS43zxidHu4S*(Vd}@EK8DIrH
z1Q>vf2Q_2HV-Ku`#4YL$8n&2#ieMu0_j|?Tdlg){m(shHC|wu-M$Ew49_iKKpdk(u
zEpI>80pOiIf2nBt8=2uSQboyy;Aat08A(GJl;LKsTkPVXq~zC3ogYaBM+Pl>zGagQ
z<~ob!oQk*J<CrD)zZt<fBXV;>xCw;LWSBywK>vZ=b?IzRwA5^?BW!LLUc!MI2LrMa
z;>mA89ugQcsWz`I0k`Nq+*L4S<8I8qcyX1h<k9S3SRnp@%U@LBPlp%4XHusnpQz+p
z_$mqL5amJF(=sDd?&or+e08}Xnu9O`3kEAoOSJ93I@I-iWjJY(4YZM2lUtQ*1SZ=d
zl8P`C$Gx&0{62=K0$F8*OI>~6uF*_6g)3e_(<GvgB~J2IWPFj3Gmt?Lb(`5`QH_cz
z1JevVBR-1G@J{m3Nc^z3{~R{<aDt>;yY}4qAE?bVb1K?t-u&-z0{#HdNd&YHN{ERK
z!vALbz8$pZwmevbb8AZPhLqmT`ySYxu?kzCSmyJt&T$f&RlclZ%=n3_?%m0Sh4T<7
zCMwN-DJwfei9$<Ix3-=S$%C<vQ`KYd;6QH6F%Mev7S|l1ym^<m?PB3lMbw~5wDd2?
zS#eech2FTaqE+A8y1RZQ1H(grES2y!4CCSj_d(an(cT_@CFUYmv4BcS;`L3CuwEG1
z@Js~7%pIT-hG_-(FB+u=dnF5))6NUo1j>?+-$3F?=1>|F-aIgxbV%v9`+AVs4#<E`
z)6q#H?E?=lfD_s&Xyf<CQVQX4UB}1O-`_)d#rys>G_vo(T}pldwi(vzH7H{;^~oAg
zqPc^@cYCdS)CIkQbWXFB)gWC_H6nGQo1-+ULABvjm47cPzStfC?Drp!M7*8%p_43i
zn+0qvhMHfcmRtUKDYx0YqhlLZYQZ)701jx6z>Z^l6VOm=$<tb1&kqpheu^%o`K$t7
znjQP7XYmVmVc7Yh#}i==ooW;U*=j>p3#wEy&k4N03SuGq5JC|L>g@xNn6(pwSDAvb
zNsa;dAX41Sn~Fc@*gsx4EJjiCRNBShYlQ~(0qhmaYHKwbzh|30M28Ca8s1Q%o=Xd8
zijn<c10qJ<k9`AR0w^AVyi*CrtM-jA5VZ=^(kV2GfLu!FEIwV)VaKu`o2qbW_XK+q
z(prIMfoGlxegRIuf1nNjS*u{c9|XrVbC8&z(9S{^Yhz;r8t*^q-h>o+Vzh&UvA9NH
z^9Fhk46a!GG}u_;W;i*`U?N6Lb~eVG@E9PC(H?V6-!qMP9vR&80)T;-#_Zv(U&nrZ
zMA%Tx=jWGDC%GEqFYO3+9`^{jEa5cz703y?G#Ev_r-;V8zqvIF3h6S<NFWcH=!i_!
zs)@<*9DDx)K~&hPw#-ekO1t*J<z3?M$K$$<uoSLH1#g;j6NSG1xKfb`i&8PF2PC?R
z#SauMoSdD3e;*$UzsZNZB<kd3ZeE`1i{QS#KD<8h7m});@HeII-@m_Zt>`hDIF`p1
zaY@tLs4OrI`d<fXu;tcx-qY}v5E-=|6I$E$nkML}84pnRy)_`n1+%=sgyWk_xcGJ?
zn7i=s@NoJ2`TN7nk14N8`1QAM`>z$6Oa1-enf4_~pFFj9{DG&7;wMUn{``ntk^R50
zNc_KY+WtS(4*Xa4kpKGb|3PH@e@h?tuN(LO?`it4hxT6&?Z3GK{C8ehPi>F5f9?Wk
z4dK5o<NxR~{_E2HJ70?b&J+0Gx^#ZDsfGRgD3z+dB989Q-`V6<>~2W+bp>0r8By|2
zw8Q@~ynu5%@Ey3t#;BhIIWyR@O!v>aBnO!lt)Lxa-By>Vk>FSFPbn93nTSIO$Ve$$
z26-F0()0PYi&!#4DhSJbm|wlT^nNZTCg#zj?{kw^oLw5!I`ghf54$6C;>e*xAh2RY
ziX0rY3`v8J0qrYV!Nj|-F(dK5VrE&a%9Ep4E?%_0{K#aB+{7P!sEyz`v8Bc7NsFrH
z-18W7^@|HWrs|x8k&vKaQ4;JIKn&$t{c!hTg_pyycEEU>>Nt{4Y=E&e{`9PrQQq#X
zypGc{t4l9%@yk1lez-%l7Km3H{+{*VuxWDDI>z-uX%Fevt)rQoMoQ*3K|4#4!@#p;
z&&*AK|6HN1YuEX}##nZ3++j17<IX8ZU?+RFCT0^X{}90KN__bbB66I7>L!ME5#FH~
zO+m(>M(&0(1!vK~Z<X0PYaOGQg-%##rk=56_G#p-La+S#wGN_ZUwJM+CC9<M5hMxC
zv+xi)JJhU&EefxmPi}6=f}ihfySA%~cKb^!><q-=t*X8K_5ryK1mk4Vdq@_k)9q)0
z^b0=K`M}?_>dzBW?xNBn>c)8CYrd_LN|kQ+kOIX%=e|SEeWBmvtD^}Q)gC?N{IoqG
zY_RT`+%J$LK*O}_ENhBa^weR9D{`GKK{F2`EPOl?$R^kmbIuQa&y-+ik8yEe;D~*d
zB<OvniR^m|1aCm!*nE?+=>D9?0q+%P7T>ISeV!Qu6lu=$#OU)vy9vvDb@b4@*iUBS
zQGnkzva{E5Dei24b?vOrmgiYtn{E>z+BC`{*UyhQ3ZAPwCM9(VL6X2SLUmu+v_Hl2
z1w4FxY6pCfb_yFFbD8*>R+72lFUdbE6t{L%@V2DT;r_>KwQ3S44lY)aC>(+P!>#KI
z5&>CfW>yaUm<DPKd2B*OkSAy_56C>s>lqkyvLZ09z(bl73bn`D=}&$ayE2$S!grP?
zg--RxyuO8=9s*?;lK-JkU)IFN7;aLOdi|**2Zv&c76YGE1V+Vs>Je?3z$ZqAxV}FD
zyCG05^#TvjLHoL8-$Lg0hA#M8yE1dF2Dn7*!O-trCb2__QtV!$lX0uAOyK4ewVM^b
z7v(R4g5JT%<k_>%TU4k><CH*yRpI*mix%Lr;_`#CM>5M&Ge6&O(9<LO#;P%0?wl(9
z_@q1c$t3;!8uJJc2VF^*Y_AK&6?yx3tR+PKn*QB>$Bu#fAd3fyXUe!bj$x_AvGwx8
z^=^|STWh79j^*eK-L^+e)0<j@^pt&_Pq<z`2Y;kE4&+$E3KWEIVj)r(99A`@LT=X|
zRbp2iHM{rd)w0%BL2;(X;o-&09(m$djvy=d%-N5x@<WpKvQv<b*q49t-AiAlMEI@f
zojV6xaSql!!YO|Q7BS+a1--1UX>5J+%xe#FbDNH|t%h8jReB*?EF>EcIF#R+Icwi?
zoK=AxXsHSN#71puGpG6>Ma-$=_p;8Y{o~z^Zn10LmxW*b$Q9e~8uB4NB-f0h>op;)
zNH_@>neJ^ncVhVy>Xe4UpkuUIU1W2`vXGFRMwEO_>va1=9Uou^$h(Yr@!}A@&)VgE
zj|7Atg34XKQGP>JO*(nk9ueB&(JJtgI*98uF?W8v>`LH6$7z~E_@v20Cu!T1RSyTq
z@Z*lYaqAuCAPt+u%#H<Rz!aqEikuKO*1%r_mZ*4;5n^T+-UB6YZQ`<sbxR%e849fj
z#l$R|bD|%zJ=}P{txcMV+iiI!a~i)#*r0&lz<qhq(!3OoLwM?gbMD_$CwcnNi*F!u
zD}5af7QO!N>|ybHTqnXNq9Y1fxWm_qK80F?xL23J!RNukDXFYsYkZw}8$Js7BIm|u
zGQ;jyEmH!*!}}AXr@+5Ong_6$QrtJJn{qFlJWIHPJIgob$Qf3olbhlSl`5)@u(_J4
zqhkhpEI_t!82082wicE`n2yJ!;QCNcwCBEHkqgj`I1bHeq$tr`!tMoes;X8GAb1Gt
z5kPyIohjZtWFi-bJBdg8o)_tuk{hqN_o~DBX(9s$%api|9GOBj0OwRYVEdmMBE~5q
zLIsVVaLxBDfv@^wuX$to5F9t5H1P$^1XS%hb-b5C=Noe2q|3NHKJ+rQ7SMPA(&6ku
zs7LfMyAsqXokm8aZBX{WpARgZbK=vm6hI`T{#<Zd9G6b|6OlrxI1xTolap-jb>}M-
zNc)OL9qe!YQplC}FrwZsH#I4?FFWRii}!Uac)Wz$q`9CJgInsbVnEr0NMu06b>2-{
zdb#C7D^fuBmIuC*KVWi;8Jrcthv3|Ol$lQ)G`(;^4VV_}rh;KRvx?j)e)xVO`)v@o
z^3M2*u?eT_{aaP;2Tuwam1sj7Fu5r+Cgvx+D2K7dO4q**Xazb=(nQeIjT^5u*ZQLF
zD;8No?^$}7n;T58AV9B3g#_tEffBxT`6ix$Bk(6UDFSg6K6`Tw>~=s$&ApN*<<jM_
zycCN>B*m34bPt>H@SNSa@xDRf(gucy;3QXq^Eas~uJjr!!b?$i{ryA4oTy!TuuWiG
z1yXpf`#hV-8>mG$Z`d$5`pyuj8NS7IshwV_)3%s~-CV(lT|ReGp5ippJqfDQstpwQ
zX@Jo15<cn3v$gi{SSnq}x;)(S9!N6K%Yc-aO(+Za(Rm}!#nw>4;{b5O-!AUQt{bX9
z>{Su)<b$<UXy4H*4J{cZb5nRR;G7V2b><`6I^?98T39rfxK}|uf`jCIPYNl%20L*`
z=%Mrwyg549w2|1%%*r3g?4}(vVe{mYT7V!<8AWSLD8I@BnSzx-lln;7dPIacsin6Z
z;(TO(EHk`Rd2ew48$4CAEx5FY+IZ;SYcg<Nbj!?_?OLb0xvl(lVMxiyCD-{P^9UV&
z2V{l#)}Fe2IVpI9M(u64(1zAxwaVLBECYhg8r(Y+L`7@AJK0>d8&~f2OWEmrEl1JG
zA69Ql8N`mM2?Eu_{Ay>^#lm|PJzr2d5g0j-#UjBrEiRd!sU%v&B#oLr)V7FtB4_jg
zkS$0(4&X!+XfylaTgRSLxZRh7!CIgUB`ZPL_qo#H9pexwXl=+0s{!wrPNZ}8L#ns!
z$2MovzRO{Uo)fy}ziSY7)s!CO%FhIe@XCdssd(<JzdgGKkt%S3<&SLh(bAKG+Gz^&
zQ-Wz}X%jpU*p9XqGJyKY{|<tM(1N7x#vnrX4i9q+0-{bfZ2g522SP09aOQPM>5S9Q
z7qjv7Bc}B;cGO`)R`4K+ElS2}y{9r{JU58&D9iyKB`FK?z_Mwp;#_2*3KU*n<jOCG
z3Jk{Onw=SX1<vCtvnW3XK3fFu?{o;wVDMPD<^e}2GEdR6htAov^YG`!<9OC^6S5nG
zG!lX-`Pa&6l!1VdU<beaxiik&sM-!sw<}ct`MUJdi#ZwL;Y~3o+3M2`hCoz+@CXOj
zz}KhIJ>?h2f7o1^Oq9ZEG+Cn;P9QwqX?u@Pq5mt_hj;;Gk;Y#i+lX%ahvDT3&?)(R
z-WFO6^wd<KJiR8R<imr#hEGp5#hz8=w|T1ebX7sshlC41UY@`k05kOEpSP!%mgbXO
z+%hzyqNUxrS<mOD%)<_aYbP<b>)nPOmHuopr?P%Wh@TIB#gf}OvV6*vO{B|MuLTa0
zT!s%=#N#v)k6_Usc#+EvrZ@PKdcNVAq|`HmZyw*tWWEZ+UJaMfrOy<ZV6}l~q^@9}
zvLeXvkmK_VL?_Bxfb0hx-oj|54o2a_t)7H3QpOAT8qy`RRgys>l#=3y$iX1;Q)}_9
z$jImS6%QxBOungBX}@jTwX@^IpIG(hQ{Y8b`2D5TM!q?Ol-a<Q+kO`lh4d7SGVD+)
z92ni><2{$7Xxiq@)sH3eG{x)3N63lrxsx>w>r6~@)6}#_KL~?fnfbJK);)|1Y=1i(
z_WOLlwlZxuebs$SeQ(&KC!zhJ8{=uF^KXu5&#87FMD?AeF4_$wctr#EQ_y;T;Uo`V
z1}1=-=H_#Zuy(Rx;A2pU5L1jK*#?tOIq2%V30gThmkLGSk0R&9;O5Fu2bu@Wa7%_v
z&$w0ND#6$P+y#^uc>A2~3w>7D8y6=%`LknYrJX}-Toj*!3?Ds_c8uLUJjS#;#b@P4
z-}~Tbf-vBR;F8Kp#e<q65`VkjNwoZS-M$^owRht8248YErZ$&F#Lbc-mhbv$M-_{_
z8visp5cI0qcmSquSqL?X88(-Fo%-aMReeVw$2xc*&!HY$etVV~AMahaqjbpyaY(aQ
z=FxC2Pt=yw48fH|JEM));RqK8VWq}1RI<A+8!jWr&bIe@iOY^0^tTK$gF}P*Y8H3U
zJq6P<)tMur1xC_5-k;%mjP}%R@OuZ1%fpS3c|1E=oCNFl<NRU8n^jvx(Puqto3Io&
zKFyV<)skxg#*%Spfg5|~S$+@aaegl1_K@$O%x)&!fdNmjI*Air>_I6JbuD;&Cf+fW
z?i3tAtiS;c;<pU+2#oQd^g=YxY))v&_A`LfJ<3QN8^nPF{cg;}&gg@E8Kqm`KCZjr
zG1@;^b!bx@_XIkCq7z!gpIv5SY1tWj9TM2n+(?~wLnGE@uB*HIPeUVnCt#t+koQAz
z0F`ZgBCP~WKS#&B1Z7q+o3_hP<WmBnq(jg0)W|R>_&W$r$tjzesn^1Uh7eHkIgTL8
zrM=@|pJtL;jl})1O9uJ2@$lQf2^O%ft`n+Mh+kvA-D9L~AU|P~ULNQ}gwP;4o~Ta^
zN6tc~1XvJEONwbwQSsAH_`3@*HLRhd16uh5?xYnhuNd~{+@IgNs%gda{xw+zj;?H{
ziZ)lMWR2IWajvEcD1080eEaTKjnA-O;daTe4ROQvCChibWSzH_TyK5*?w!dbsqH&$
zF5plP@q6R`N0eNoIA?xVkRib|z43#f!T-bCS4LI2cI{e(AkrYHl+q=Qba%TbB_t$O
zM5IfkK~O-tyO9)-Qo0*ykdlz@=FElfJI?vWI6u!g`^O%8Y-Is!-Os$|yyg{)7uKW%
z*#h4NI#>6?&JGwank)V-I{sgQS?!l|e=!Q&E*S4iFPA42v2P%d>k1YUiRi!S`w>}r
z{(r%<|9+hJ3J<`fsjU_)7{7Ev4lVouzb8Qx4I1Lx*q{79erzv@R_Raj_b-Z$&JGU`
z4^hqFeL65QJgj^PV%ST}>O-3(@`DjPEFj?w1U~G~NSJF{Bfx49F7Bhl!?Cfk*8SQY
zX0C29c)MnXH|+!8quM4k<l1#lz(YU+V)Qbu3;X$(L)ryVNASf%dRj>K-Fuuj{fcHj
z<&wEMg;fRx>k$}(jtXI|gaw5wMqovDxtF)J;Qjj~?*c9D>ea7r|CFk8%5v*)>)U<U
zUjHXOufDEEf{B4qR9rlWc%_o~vf^d!s+Yai!-to3-U00)inp)tGp#5_Qkqy+{+auz
zVz2p;zuWKop9u&cLCL}*#ViWG=EkM-=M_$gAdzj3swo4iaN`}@Dltc5Fv)|z?toVO
zcXDz13L&y*xFQ2wS>@xslOO&4kW^C)bYTtl8UQDN=R?hS`O%A1foJC9mm|aAy}HcP
z9bMwE)XN5KY4-9AOgtSC`AV->VQ6(fv(5fc4uX&outZ|kKY!+lx(6xV%WG@-#%W*x
z`f{ooS`A>fe=*B(241YD`%49dPGEQQ@$!z2^Z)ufy$M`Kxj&bc>3zoN$VeO*i5~32
z{S0>}274GZ2w0@Mj$niCettyj2u9q2>FHf{pDGaFpsl4o148t3Fr5gy`*&eM(4hVh
zsCc=bphz!&I$JBB2FVS835me+><Xhr(kOF`U&mcamlVNM^MN{`0~XoJF!X3<C}cx7
zoU5Gvy97E9`dvs;a&*!-*vxtu1QgD{zg|_kotf0SIKmKF@E01FD$w@r?C;a7rkJ$^
z=f8THN0^3YYHE7Z91k5lhv<;89y(jIO?$LvK>e`f*RHag1f2o|N>O*W{pgGy067i_
z4ZFw$zsn15Le&C&K(ye=A}s8&?(->RfM<K_RE>K@#TS|0Pmz(4vCkaaJbZj)5yQY1
za6dHA02(`z;`b|6$~E2i^`)>k$sDXV;am$i;Mkk#gH_NCF@L}BMaZV@14!=N!PXpP
zPWxadAWaJFR6zZNUXDO)3>WXarNpHrNF4`{E*`VrM?;$8(E9x<m`tIFSBTkNgHZK!
zJXorK1r@H#(E?y!<IBSEC_P!9fp?nRWiwf#7O)+l;GBbQ4;TUc>x+v#j@yHf=qd=L
zQrDAx0O=Ucvj*4YCafIAA#wnJ7yr(kJNNFL0wDpo(_caLQ+H9z@bd;9I~=6++w$3k
zFq^}<@J7zEq^3yQ1AN+U(8z3pn*knkT-?2PbCBQh$YE0&INx6&v^D|s=MZZ`gVF%z
z?vVS#h#h?Z$B2Ca9H$}UaBgKKr7_$G=~+O}$M;m!$qZ)9wQ(Nh1Oe?Vl^GzlGnkh{
z(*%;6n-LJ!dj$mqJzuK|O(R+2;j^Z^4tQrg&|}Hn;}+J}-GJ2sU((c50sN-%@ATlP
zDRj0Q2D#))38(RCKOqkc(3xV`m&;c-f=VZz*Lr)TsNuf{{TEVs{@CU<#NDI|&^3JD
zPfB{8eFF&l@~$99*1R?YFej*a0e;B|f_XsWdh(~966h`=@Koc~Cx3s(BX$u{K430D
zXZGqtGiXu;T@I7r2V&=57zK6*Gvq+Cs5NR|m?=++CbN4O*8}W$%mE>KTfND3Lo+mr
zF_1IF?s|N%GSC**0l{pq;NA1TJ_DLA8l_XazrUD)i>daXCa07|Ibj0Ai_~U8q9qkb
z6lA*w#-gG3AScIIBmwnCb$j%Hk`DmIyQJ5L{HdvcS6iYOYXXP?*a@`WF=}>UR_C<^
z6$YW2q=LaL(5-;;Ab#I%cPXUNc9L$AOTMPM`sJ%Na9`_7w1zCY?Ows~#=~L#6CjEj
zzq}Wj1~>cQRabC=IRpJASovr|N)PqG+~oj7Q6K~SjVYj!Ea~5r`k)V1x)-NAz*l?;
zX{FFWgC7kgZjl+=qU*_dgp|KGm}1h}S<~Ci)W0ZW09*~MGlm&tXmN3I;hF4rSBTxO
zN&892=mx4Aa68|C$TYR}WZAH0;7XG4tjB^@`}X}~?^6@oR1mY-0g{50rh#~t6#R-i
z4j?nMuCC7QH6l7XT6QFi9^4QrjoU)urNKi`e+;y=`v=p$#=m!$2f!8)pcQ-Ip@9qa
zgHMR5x_RB?OOIqafFi+=$EL(22(J`^9$vSFs?W8!vyO_08HF=gFNWLx9Rn>BA<(b8
zMn<yKsCo9d3E|;~X8ZSIB5_nyl$W<RAZl`=e4}NS_B{z3P1q|RbS6mNgBUL|5x6nB
zrDoRcf`|g0BZwRCispd$6G7majX)L_3qClK6u|@sPezD2aFy~K^-D^D1Pe5hsS;Cr
zFrC^vDJm&}p<?0pPjTvJM06@5?eBrU_W3I+K(%;yc(cpeC!k*e&p1}U%<i{;e_<gR
z93||ZOY^TRi`Jf^V_<YuXnp}fbD1rk<Pp!G|HxHQ9CxI_WcvRmSB0nHe7GjN<t~Xs
zd2xG{)-{kr%YGQY1?+JE3~BY&;0f9*R6}Wd;%*I3s(Z<F%zU|FlN=J9{teVBM2dtz
zAWmrl9l$jNydk_|=jKL5r8=+6;RY~(zgK)AWt;6ldP<?9LQAj$dYA6@c81C+<73b!
zEG4wl&hVT^F>HJ|J=#fIW=6_CAb4Gde4A|Z0Q+;Dzn$IVFCTHi=`aw?Hn{I|Py&6+
zA}ThP`Zd_!$h<YQ{A>K=Mt`8EX9KXLq&|^7DEkShr|Zd@*O$yX>p2t9z<{h>FHI%{
zNI|j$?`&)ag2ENTDX<u<O+RPsIu9y)QvG!kS@7iQ_Z>u~#sc0M1Buj{4w12`X)2UR
zk#TU3i{17%-VJA3eha#DhzbM;?^8&k-sn#+dAe~Q#1A05Ofk42miEcd&+lU{)`|=b
zu&`8+-9&#D<jaE+L$-G$Q<+?HoV`z7>WSle^w+N&?vBX`@87?N)&Rxo=lJ+y-vidk
zC;HQ-2OGjj9(Ix=>;t~vZL|z~d0r(r$tlR_1(f5dGRseR_Sy+F09h*+Q_CXbMqCd4
z9tu8tHV&G3Fwvs&j%NokHl!%h!80<e3dA8$1A(&p`?lS~BKQ>GC@J^=3}x}+#Za=i
zGm6!Gk1#e|UM*nQH6^6~_m?6FxvkeHBq4qeT05{)Nflmzwgx<GfSmc91nA;F!9WX~
zZ)WD_li(+%;1BINZElu=`<%pSOqGWAvY#@k-_663+h<fwsSp^%i87Wq1o9W;90~(Q
z0VbjYLdQ!DAkr+*ucP!%|9F>&yNxp{7;s0|`Bq$8(2SD7BlTo6qdT!~BLCTmkn49~
zoJz`7ffNS7tOi(aRJomLybYfMEDtbqVCQ~8Iu?D_&BkqoWGPNgg}z6lE~7Ww>-gvE
zBF`6bV1P0PW1p2m1UlO7)0gmE(kp;aa~(t@uy>O2uS1!Kd~0&3M6ivL)m?|@3?TLI
zD#;b9z!7IvNqP>Rry!2Y<px48K+O=f8CbkQ%9*vXyqrC~2GNQT2&Gi#<{I?z<GUc(
z$c<Op41-BSTztIqo|AG7r-}=S%>n5DV2^>!m^nXl&ed$0l-vc1BaquvGs?ex1B=k$
z(tE)+4?zk7YDQ>ULKmQhi8sq(7c&tPN5bAEChCs-s3!N(;nrNS4}2cb24$xhfHfUZ
zLe;_a+}|Cjd)OEl-vNf)S#*QjMrQk|f~smC<Pn0S&$DDPZ6v*GG}0vwav&Y{JEzCS
z)M6t;B9&Wz{-lKclZ!85{qDp@SBxydL~6!QQP1<o`cF_nsK}BU8b=LLu}n;PD#;(d
z6G3XRv-1fYKnTlY03!vs{9i@3L1<n0;YIQ}kl+9L1<Z*JHA6(BOu-!i2Nem4M!*`V
z6>|Di;mX}^^v4ITWI-b83#prl;Mx$<1P`ezz>WYw?HwGz7Rww8yIcelQi2GS@-`i{
z<WSC$DtlJybq%x`i<?MdDIPoMJ;135dQMV*m(X3~ywZcEzRAY4qv98Jvbw4%00ki@
zZ4x~DrBqIhg4F~bD?Q2F7#^#4TeAz`Kq;%_w%@7j)^3$Aa#b2e-$winegiP7f^=n}
z(@odQw=2eFKkU=rP*nYD^i}|2QUr@<EbesEc&L1s{^4Owiy?=83M9<q>un(d5gexV
zA`l?YA}s8_U<)E-j(1Bq(ONz)L>O!Vf@XJt`}(Fc9s&NuV~LbMn)*SZ9^e@-YX-k*
zaN=Q3Zmy*_hV@Juq!y}~aKb-4JWrN;+(5t%%>@C|ok(z!vI4TAVc9ONtQuCz`ue(_
zo^_;>Dvz{bjxoYNGT<8k_u)+1Vs8AAENumLkk?_Ct;PZxDe94$oZr8HgMEbDJiJ>@
zqs0Zt)l4y~rvuo4gVnp*<JRaW;^nasV@YYEZ4JdoD{d-NA@<cR;G(#(xJXMVe5RK0
z^{W+lpFc@p17Y;VNELPkUH2*0?*}iIb<+ah2fW9USZyZa+6PTl3Jp!AJcqq3i#@#*
z{sxO6+r=HDlxD5Drq`VNQ+Gd%RQ2;StrjyKx{vg=nRra1M4Y<_yBv0QcUN<))~4>P
zTJ7IYFaFWBHiHIJDYlh@Zw3+bF)p_Jw6<Dx=nh=;C@2i3rkS&|hMfv>a`i%fm=qXP
z<zLDrnMNUv(Rys4#JIdEAl=jREY-D;__~3LiV6ZTNUZPT?+VLteFS20>^^UnT|7T=
ziR%fOrlx5%7rZqMfp*~78W%TFp!?utcUjx%XnBAZbX`^*5%)z!nW6o;0plx`MMWBw
zfm<!r<Hudy-M?UKK~wTFYq7`gA%l9dSaN4aM|nw!C~0HjbgvXilT~t_yi~`%7X<43
zX&C^{q$q%B!1_iG1P)W-93LP5)~@E0ah(n2)904l>zSCig+g6)D@*X{-;<5HlbxOp
zSc38yHlnYocP9!%rg&wf-Z5i905nb@(=Sm`3wqbq-X0p!$Fai55Is6NI{OYbMk%R>
zYd!tF^?=Nixw~A^3xJ95flEpN9j69Vh(w_?dREp?&`!T>{@AAPb~MS+qfl=NHybwW
zqr}ftoDFu-oSmx*3%S|YtifCiRuUB=0O?C$MLMhp)l;M-m6Z`18fa+T#<+>Kr$=CT
z<y$GIy^Rg`aMt8@((^G9x?uX_c1G4^9rl3l_Y&~F(lBEcfoq{U@aF?RegyleNtk*<
zGV=2CQ4}d}qX?EphlJ3(<*Gcz{7R|@Ib2n6T_kG|gTN>Wd`~<)t~w~Ha=ZMAHWfNq
z<v^^|*Vm`1t3=rL;m8$S2r%0fLm6e&IdlcmZwQ`|5$ozi<=+i=_sQ<=+T9v7Ty5}j
zBPS&dP+T1=!^G}zzK_EXMhSu@ol78pPu7Tzjb-FClvxGHUt4>W4sVvis;_?I^oUnk
z**;n!Lzn0m+slz8up5OURid6N;sF=EA1Mpl?U_!<@a+8gv$~?<(8H$}$A7CwA+_y+
zSU&q1b*i7c8XFG&vF{ykSh>>?9KlEvxy}n`DeZ9Zhli)z;f$~Sv@3aZ;kzrboaVDI
z<e2uHUy09vZ<3r$DYwwTK(*o)Mx!X!4K|oOjW^H@3|>K!>v5m-PGR+6Ok(0RXf<k&
zS1hADb1Ev#z<u)r&B+?Hzh?)g7jxuRvaw(aPQ3pH<~fHQ7Z;ZdMdys_Iy$<n1;|}C
z=}CB^l~vEEGRf1HHAm)N4S7jbxMT1Hy!VBT`^2|b!_gdl;y$-}mrt{(0(dA1IESZe
zce<zl9se7RIuG^oe8XOe+RP*%fA6os5~8a3;d0bbGU-+dto<Js%?a<jo<o5~ckXwI
zx4N?;g5D^v{Rf@;MQF!@me!($^1F%&oyTH+`&Az_QPr8^hl)64@|#~m-6SvD=x63c
z(9<t>cL$5@b+ose|LWxQR53_&brJAp5a|((6rt_xj?gTkr^<;tJbVb8XiLk#a_(rJ
zXzZ$Mv#JW|T!Wl+?6SA>jy)b^N2p5eb@quXXw%&ZFmjXIO%ugoW#Q6`ZfO2333gY#
z(b^^v_+NJkKR&m#WW<4i1y>b?>klr8WkU4jk(ZDN!n;lxjf#<jf<jYuS|KnZF;|HZ
zi97>Y-`Q|N%}2(^=?K~_y1dNp#s2WQe1oXiy`R>y33A;bA|fg%P<rdwmT%;>;xR_S
z?SXX@`5Z|YV+fSfgoz?Rxs8K-DZi|Q-_)s>e<Tq^aGetQbKt5zXp)x#?+8D?^WMUZ
zfGPB?0-s|x96aQo-ISDUa&$aGK|%5MwlJwjy>1RpHudf8?NE>=;xwfrlJ~DeEh>b*
zLgfuB3yVfJLQ5XJaHyzqNE_=;PeVicLr4JjFlLwk^@a3Sb>(I0f>H|Zx?sIE6Pw#$
zO#c`*o|%ae)HE~!*!XyOpdozT8367M9i5$=CT&1EDmoh+9EAH7)3)K_{2*6_3m`eD
zOhYB_pXS%vt;J+>gU_dg1l|pwiHYh{mvmq0CpS<T8A+~-i+`}k-=Lq;uC8;4w6R%W
zx>$MiVw4~;8<48+DXi9@Oo4eKNSmF5<L~*Ig95lgg1_7oGtR-46xcDLBVW~6&G1!W
zk_Z3??audkUOKpMu@Dmw%-%Pp88m5kvoi9es(N6d4SiIE2@NeR#H^+i7WNJdlt_PC
zhYrow+8T!IA5WkST^^*T;yVTnBP|-5FX(M_DsX&nY^<*bw+^RBVx}d*X7o8opc`CV
zT><oBH4A>0=LV)EpmI$fh4%i1u`!hz71h(HPuIuGryEj9V(P&Z<_wfP@9gk$;rj}(
zv9<O0r-0H@Nl9sWnFQ=mdpbI>(ams4Nc>-vmXCvt5ezi2bX}OAKRk2*$)m<Zil?Wb
z2Jv_cxh-%bUY3KXG+kH?@()`W4ms<8{rU!}>Y&EUdIOm+w`_%9vVqOfQ@pjL%x_lH
zdYRtS?iYfLjFwQl#eD=+ooqne0#tuyCd6D5SZ4j0YHrd+&}}bl3snE^>+6HEHzN1u
zO<U}TMmK;gs(BqMb#!!)M>$0*ucCsNkrA!zfd?rXF>%ZMJSRLSHa0dMoC?~Mjktuk
zxNhezx8BBZa!^w*6ty^gy36w|NhCTZ2If!DWixkbGN=}HiPF$BAt=*cn3_UHE4ZQ?
zK!mc0Aw7ebQ4<IlVMvDf!G|AGz;pmsc~IU{QuyZRt?{AZ2S0wXIX%4u_|N)#r5XqX
z@a2}kt~K28zKN5Q)9cskQEaI&R(weFdJMM)tovKQ5NHe1<xlv=n`#Y|3=OG@bsQWj
zN}GU17t14mjx#UlH3R@@vUb{Z|1+>SF`MMOlY4l=BOTmy&-gb?kcQ+?*9*&M4P}xa
zKdww4ptwaQFw)hfsNl&L+rWUH3x)AMpr9aL+RQPu3c0z(PK8Cr`z8rMA_w)5J4NfT
zb>IAMPzALdnN^IeBZGc3oY>S?A+hHd>Rs&WVTYEj+7cN$wlx`k?A5ikXWwoG`1^;L
zczc&g`uGP1ioa{?2um&SUiE$Z3*ZdZ?ocA}*Nx)Q3O?7M^jozhL`U1Mj<5*{UCqwB
zVy>3WR3rE><@ayys2^7JA1Q5S%fW_(>dCUYN&vJ}q9S6}*f$kfBIgX$)cVUTHJc{s
zY^t)fQff16nn1Yj<LzyDjsN4Of9=BBn(iN>kZC9kpAP_Y*ur>zyMGca$TlXchHG8X
zwi^85d7-c%wYi_y{YOnL6qg<}zt%u;OMd8L60l};^|X1~Z(%FLPw*V9*P5EJ3-oGW
zs`l@td!c%HoX}}ypmU33xj7j1`+mzww+J2ES#K`%l;WG8J9Zj<!FQknSRbMORVNKk
z1q|<CSZhh~<D?W&>%JUKlWo(Z^ao8ZVPDhG5K2f!=PSyosOa!K?`bp9IQn4PKpo$P
z>Rkrlm1IRFqpgmX9Kif;QTCMXXfbIXt*xu2C9`u)?u6!*YRYJDgFpMpP^C>DI17kk
zPEF~}-WyZ}i<Qmdm!rj!3NPedT>YkQ;-Tu>{ipC^gv<H@giiPFt$GVjS}rJ8<<z_Z
zB_7J<uXKynD@(1_IN}-?jYEs0DekKbY_BXuNePLhhjeDQIllb<Zoffv=Z+s=a>bPl
zI3hviKfx~KX~*Q`8E_S&{8R49nSL-)P&IDd+zi&!({psB-oler&dgd^U1bX9515W(
zv2o`db~)d2Gc_?u&&YsB9K`A@S!#ylD#w`UW_=lok5(M~0@KT%{UPe}<J``?E%9WH
z%qPlsm+;=i)3GC{Ebyr8uTNqU_CZ8;r#XyRFsuT6kfA~+SN>jDC!mTC)Kvkb6n137
zplKU%Pj;bWpt3V;gU-r4W+8k4d4y&B7oQ$>u}R*&TRqob#j3(J=?l6hB48Ebak9dR
z+W<3y5WzH=x!Kv!xHvDdlzj&9{CPFzl@#aqaeiTe-mJh`B5DGbd>RB+kC&F0ZO>gg
zA&*_vh+tSOYrO8_%7@QSbq6zhj9#pFj+U5$M-k9d9tf3w`v#f!o9XhAxclGV`PY-p
z9>CiCk$yUZ1cSJ7|7ZcXb>N}SRc}bsb_%a-0_*^0Kyi#L8GRV>OG-+(I5^77m`S`)
zT{p_7zs<0g6^B+<R5Z6l-ii-cz<mPV5S-v35KjboBdP@xm$ulS{=UTYDAeZo1T$%J
zUVtKCD{6H5W@bws*U|cJ+vz#~Ccpgb{T!3n=BilDQ`EA(EPND`Uef9Q)uO4UCLxJ_
z{hIn95deNGGc$CIcTrM5RWet+`C^sKF>NK~JKlyd*J~LYKg@9-<B;bGjF%7_D0!dY
zZ42OnIry8@CmxV&;Z?5p*pPiGA5VXV(|+7QZ3c}V5QW8ahb%a-lKbRkWe>Kt2y(8R
z5p7^zgLJ*>07YEYg~k?ID5-Nh{HK`Om7k6rDe#91#`pr7%0j~i9DehNE!mQhDKbtj
ztbE8J=M9ayqb93t7fO*17jOH-1YD6g9nKC8emnA+#r?@L%A_|WMB_QNOiK9pvoFTv
z1>JG`=`qsyIJ&sxy0S$uKTI(Sbalo=MU$LpyuHT^?+FzZ-cb0<_bWgO@!Zrg`vT0b
ze^@}@Z3fNe8!~hL<wSXGGMON7#K}ooVZLm+a7j{M>+<-eWSS39AiJB8o9UURX=!Ps
zCB`Nu8cIq9Ds$W0+mIk4*P}`I1xA?RT7!x<YU*^laFlC9jHgr(8~|UX8W0cw{vlP+
zi&%QGcw$;jot^;s$&1wb+y#In`^IIPMMGG5MfP`0)Fl?059|*PzDpj1<@7A9)i5&N
z02W?iY6P>{EiX9m5)x9CE=MuBxi&H~Z*)5t;0pR#yR4s~p8Es7gR9lXF`HjEFlIol
zO{uascS!Z`YaYAu0S5W4yZbhT&MXb(=5h)%GMY|)?}AGh^oi@g@@?weYTlu`3Aml^
zLSlNN^XmZKtlEcMTv*<XfN2966l%NO?ou+?RMOL%V-hhXJl-)E@GjQth`1U?6Erlz
zzXtn{zOOa=A1Vr-=AR$V9cjIQtZl#uYarGQEP1C~b_lmd!A@^=%vOXYQd-LH9{0=7
zD(tmRvLzR%i%eic2i!`oS1UPc*<f_Z7}kb*d-X1EpPmjdQk<a(H(2TGZ`8Uv7igEb
z?XQ-<JC9?xf9Ap<tY74?)eh!tC&x~E8y8xCe~HeX&d-0DcApN60{Rl9WdT7qt(#?L
z23{W)nFGQXM|=#?z_a-o2f-B%r-vah$lS=`&imKLl0XHTn`MES9gm0zk37-O>w)0j
zPLJj0NqS@gz^kyZ^JUSgNUJe?w~O*HjyCaLdKhY8KmZVzP}qk8SwSc4iYMnXOP$fw
z1g%6R5QxMI?{S!n)HrX!2Dag}u<$orSr4cJa$A~o+d4X=C#~weAV+mS>lu|eRR{*P
zzJ6z|!xq?SHvk>0*8L&`(qm=20uH91&=H`Q`#C<z6dFzOp3YIPGch){(C7p|H}8^?
zIh!6u(El2*jRmFGp=wXP4*d3da(QDTP;d+E_rAYVfBUxWfEha5Kq6qDnm=|ueuAFm
zz*T4)uZzct%R?(2d~+2NnAScc`jnnO$Mnd-XY{%}K0e8Rd?XfU`fd$C=PHp#!uKxe
zkbprqE7Z~1d3JHFT)(8eJnWa4-tj^tR*wJ&8%0v3l4n*9<&(#}BmVX%fqqMGU=y)C
z3QN!%Hx7*elEd^CRe&ZA4W*3No&~jxKY70D16x)%<qLzzM`(nP$;nx*b-$b^xV(Kh
zCXET*uXIUB$PC}J7CSVo72lh}!jPaf2e`w=%F5f7!N)IABp(|~uD-Fe>ju6lW9c|0
zWj^XHhg<lq(J(;M1qI(bx)CF(2D>><L*wU3bx(CmZ5D+diYG&ahSFhRq3tqj%1Q&q
z<%APr0A}yEFfice-yA4@@nfceHmzUdU_CzMSR?OnI+|ng)vH%&m`uP0tugB>zJ0$Q
zs-wC|te-mEIY(>d@xo`N$3Q`(n~+s@bmGRR{k)sTe*f)crA^UDftvPvLVo+(tR<t+
zEy@kQq0$b2Jd&Nc*l^<ZV3^DDPeSao;#&-fhj-J@q#f`XD#pi9YLb$E93F-`W&Eih
z7D*Gec6;-tV|Vu!LI)-1x)$X_WN~8$4_W+CRAK2)=WP9LaK@W9T7ePcprsWHt5m87
za9>#d>C9~6^<D7veAd*gN6PyMe~%}gJ6vvISf7=Fg{ApBykqh4@$i<?3g+&V3E~zn
z0C^Mc^vH;a_4#?a2pstVz4APhc3o8d)EbxQlO*@@bP9$q5{f(ZVq7#B7>F!mxt$m6
z^2TEpHCItdK6!jb&WNp7zMSjm#F=(Esm7Fm<pdmKe-E4{7I$~yQ{XfJmNE~qrm0d`
zKTi_`t6*chd$QqvyqwAPwU+Nmb+g)sV*qsaCn~K14Iq~IKB|2~dpiWGd>$DI%qk4m
zB+J8qqfk-7C}U|z&`1`cCw1{UwV6&A(`iGmnl~#uF%eJ}cO4CQh+JVuB`uA%WgsW#
zwDU(ON=Ci|C#!iY6xjh%QC(L`3|{X~5A*b_*##qUghHp}U@cU4fInEpC<08PqqPr1
zYQ@b=Oni*FUbKh7Lk&3=1LpYDLWs6T0xzm@F#Zo3#cyQ3Q4ePIX6|S`lQrgIVxe;B
zp#_Hd_e%ZG^vhO;fu#jh@y&@!_Vt2f_wubx2y3?}J6;`yMP5bl{qdXB-d*3aEFcO+
z2l@!ZiRz;R7G0`G<k8^FY7O@QodcDig%y;)4D=d@S6ew4i1_~;fqpc?{J}v^ws9FT
zaZlWRL!&vW2Mu8OUt~S^4K{qw-A?umz;j|i5ASF*+LQ))yZjKjfZ$Y_9aop?!g*i~
z1hyxGe~W|!+L|S6hiA;gP&_%uvEd}UjVVxr>rcBmuiv$*W<p#YbJ=P#2b3Dlx^8W)
z9{5Rt!O#L<$I|p#vN(Cm-_Ic-=BB2BD`vSG9#P8+3tOEW_`pI4*1RdHRE@4Iz$T(|
zzMM&$r*l*XRiANCliWG)B!=s5;}M)eS65d^5}KQ7K!Y$4#UzV?8{`ksC4$uC<i3AW
z4qxvIz@CBo^o!h!|Jhl9O#`?(@z8GsvO8^w(B$Zr*%Aa=QqyKeul$hq936e!>c%(h
zP3o0Gvho}d9I5l8k=|-Y{ag1&co-PO7U==j9UGI&B1K%JZJa=v_)|V@2Z^l8$sekM
z0_Xy=(i1~FcEFZBt?$LdEV_uJ@02;u-If<}(QCRJQq9w=baYkru1nYdt01cCGimo0
z*pp`g$B6D6Aq1DKp2Sb$F8%bH0XYe%U<3~C5HGS;QBcaj;TH@^A2HazV9ACDY6ESh
zx0cfP+qPP%0u6pvjJgnx#@4kLR8O+&$k&ifiF)hG&|hX|<_u+b3`d15)Y{r9nEOV`
zEH74umeB#t|M@`b7EzXH?i&gw7MAWF&6F>B8pLe)YWd=%rG<~mVWKZ9<33urfh_B`
z?eKv<M1UxRZ%#T%Di!2KTgu6FQ1}2vfoOrPq8p4Hh`+te>N#TGV$l&1=2ljwMn+Aq
zWszTP{Ltt+rBc<-Hi1Ri7`zFRb@cKGSDcHyJmbTn@^auwNTC2@&L{d`A-E%@Ye@SG
z6%%s^g2EI$5j@GJDekizn7itFoeGz)cPsT8We&?*$AnzV7tM-PIkHfjmvXB;=r7wS
zwp(aoijFF9vO2~nhFq7@mvWbinD8!fClX@>1tNQpoBP)_RoC~m0c0H_GM6v;c_xKi
zDGzSuoMjDK2^!!3^N&0*k{vXHrfEpNZ2?^gdZ25nwqp9>$NB#dwgrwHF}kQ$`)TIJ
z4avY-V!s@c%Qi4t&c$UGP-+3oU;1(J_nRI=x&ICiBtRO$%P>VGuY`n!-Mx2@)3{Z{
zIvQ&6W4<wLvI%{ib6@fZq;J%-@@`nH1o>AE=BWQj5cECXUG6KlQeMLX=-jj;Vmd5T
z4NxYZ+pYqfoLX_@#P&zOe;SPh5iy^_f|HP7@ES)S<QK8A*77Rqm<$)3nVT;|`=ux=
z`>gOe8x8o6AbrFqY@VdYH(tAX^*mJ?+uGiWp`gsP=jYPW$j6U)zw$l7bYXTLQM{wA
z{TK*O&D~(yXOsv$>n3L>uIExg>`%>s)L{ARRBfsRc>P3}m(Z4kZPcevk?HBwAHohF
z@n`}qftoF!(hT%MrS==IK{yCqFocOzCy96;VF;)Y$uPrs<-Y@zH@GSxe<a@@UmCUy
zO3sV`5CVMlYKQ@Lg~V_jO8=2)Z9Ii8ll9p*RFAdF#S8}r&S%vQD0rzO1TjN;g2MWg
zX0LJH6T+ACo2k@+fvCj>WGV<+T3XgT{}~F_+}7uPskCUfmN<->pNvdX%WDLPmjOA1
z^t8F&&rb{0Jx>HnbMN-O?>37CBpeB#S93Yr({?z7eE<wDTiL92rz`RHQ@X{*Td)GW
z#7k57nAnTwDs9-ZmJRs$j;}EwMT+j5zpt*m^|OO~z9tuU_i1DSYlM%JZ^;U5MEv2c
z=i^Y#Xvlthu&$cL=HyTzEl~<?FgS9C<3Cw+`Sv!Z?+%R6<+uQ-?YiBjdd%a&G+bTz
zHL3EYoHMQJV`#qLsj7y6rx+9;lWv!%c|1<e&fN)TTQDem_;5|d2+WM>{`~$=%Y~mc
zlQSj4Yfv9{^X5%>NePNZU!sGJ79$#=&p)J@q8?jKNjGPThRY#in)-LZU>9Bkuo3U&
zA3v^KZVXxnanNxSahhYeZN=F?e!SJ9aDz5(7P>|?9VwbHaE+g?OH2~Rp;CxY^8CH9
z;8A^Wv^Y(L;p1H<DytIbzM&^JTo9k$^uhBPQX%pvO}oUG*n4I5A@^jeG_k@%+RWJ-
zcirU`6ygpEX6cBeD8Q>{hqdly#k*w-8JWLu<83?j`Q(pTG5gW^CBjvm$o)#{_3PVz
zczJoxcLzeT?*7uux__esoCL!Yrh(4^$;J>e)d4s&I5QF>I}ASsP;3yIgKY{XC_C$b
zA2gV)j6tnwo`Vy?#C*Y<Dm5xz&57_0@w{8T-QEe)N1QNu`MYHX#NzpO<Z`Q3R)!h&
z;U~o`1WL12%C3@7jD9}|WP&P>8dyWH?v0ddbJ#1~BH8A}TZRz^Le>_)y{b}?+}(Xi
zqjFsx{~$)1R*DopmHA<P_aI-Gen`o{6AKmu?T1o;&4OPUg%aqnpdD+3GV@3`S?cnq
zX2=Ab4tQSL+HET0HrCceax5jgk2pBQQCOjQPO9YHnW{O|tN9MUNzrIpMuz-fX!P%t
z+)P&+Ei&RiZCwDen5*@2KgguSTwJQxr-GynRCN9TWv;eXXqJYZy%?^^MkgaDr_tEn
zQP~Q&Gn#tlYqWn-ulVgZ9We|w%xA06ot>R+dNva?X}vu?Tn6JK^g$8z;Uspbg<!{j
z%?-e^a_0lGLDUdb>(k$8_zo5J8$xR@ZgHC#81&8Jy0jWtZBQsVJ37jC<muI9fJP+$
zDN0Z5ft9(5o!vg;*Xmyxie}HBchp^+VcpZ6bz$1?;<?~)J-%gc|H&UevHza!#n#>{
zG8~+T!9EOUl)&iN+cF1p!Iq6W{l+3j<dT7u);JR;Ip|_3NCIr$d?3Z`gB4{yJ$<&^
zi=U8LZ!JfEn|p3?(PnSOcJTPE%>r->(fT@`pFl4To%+DZ0sfnM|7nKs_Mge~9nQMn
zB~~Y$ap;xuHCmeWzSvz6sc|RyFBTB1LPr3e$t^S~sYY;Rcf8barVR`X1QG6W19k`Q
z5$6s+#LKWjtNl#k#rCBAq5&T(tNZ@y1=S71na)n8Q@?4-#>V0omi_(xdkRln5xRt8
z=9_okmE|xQRYP&h(=Pe5oS6xf3NnvJOibWa9x~GSL|GAR{C@rY+SA_AaWWsKytUN{
z8>&JVK!~r+q{-p~ZF3LOxrO!ypJ+iG-2o_VJSIkff%*IQFL>%xrGjpPXlny9TERSN
zSpVX#5Er-^eZRcKf<Bg&an+N3cmmB|e<zHoWlnp?thI-?O+)qc$a(~MB&%)25r{^J
zwbdv%O@wfh_g6oW*t9{SiDlm2kS3<;>5t_teC1mrK}vMl3R3g)t?=ywvwWIi-!he<
z$k=IbZx4Q*bZSc=UMP|e3AvB^pyQ?Xm@MKH&{}9x+99=oj%34V5c)e<la52BhADq*
zP8!0^pPyG)KY;rRstu7s>VjU4Ty43xg|W`W!s|(@SZ-TJtEWj$SvQ58dv`d6m__Q^
zT3h!4T4Klr$lP(~%9^|s&&v^5YTO6jN3xpAz+Lb@|A2Bq+eN}|yaY^4P&s*D=MogG
zkqrC+JN6j}Sb;S>1hzKZCKtMci|f&(GAo`1`KF{R0sH&Bam`H6_VNGp#2uZ2_4(Y~
z#$$ednBxH_6$&JB6@JkU>5IZTKmgIv$&1%*Tcn~ROnH6>AD>xel88KUer3h@_3MHQ
z{$AJ-sxOb!r(T!HMwpm(<c<*Fs^1Q_hlSwjoYm%MR%~qJlri;Z(nS>-Z{I%kzI_Uz
zH!}xMl!Jz%zm9rb<L4jm-%-7r*E{X4j&lJWhWuA=xuiSurT*@IY<q-EK14Y5woj#~
zadvPC$`(^cS6A;1qLw{t4pqx8sa|%v`ac>{HGDXdi&)U27>|{b2wzm|IB;euqz^oI
z6cZQU3P7jUKeENVbqh&WD0N_Cc$;*{4(oyYb&xecrDqn<)M#5%Qv*Ar&!}woaa7n5
z**YvOR$iT7z7P=HYHEVj+xu$|sF1BHvZiJA$td?!IP;uOR7MT!IVbOy@Y1u!qc$Ch
zp%@Sn6KAp~GQ^{bGSOl*m#wbqNOiQnHB^6+IogkDnOVD?kv)~YFLDSc{l0+1n+Bgf
zx|{1T%G&^8I?xX+bfciC1|HCI-dvkglxv&q;?vd9X?(1z8o%`*yada~+}w6+2E6XQ
zeD%v;P#}k53yJ+TewVrCwIU;5z=bd+uw?d7>$xo592ev57rRbmdOv>tyS(gy{ixAe
zGz4{vK+XoAMt~j>ySW)^H6e5`VZ;0^Vxm=&rAPdzsuNqYodA|f;3K?RcUUCt<n%o?
zHMPw$7TIMYV9eqXqp<MHDX$&}Lo$GbWnTQ)sC{<W#e-dU=o<}8ax&gc>tsHlka9eF
z^rrcvDMV&lFSLU}TjFg{*`Shgp&JlVZl*`-0qQdgj)5=|ZB$qf-O<0?wE9`7?V*b4
z>+1`m{P4%8mC-cPz=xd0u2`Nn<6^Kl28($efX+d@GTU0&4DkyC0ffSd0*(yq>=r-X
zx1622EcRT;T`pRwEO0Cgzo<e|MBdYUBG$P)gCkO4q!ThwKX?GMwcI_+FDpX9>~ez+
zZ@#Fe92d9+vCCmymnIp~z)$@s2b&ApLA+;J$;Hs3A{Py?jPvmpZ~WJVFTiX9Pz~|Q
zm2kQ6$jGmPXk0ycc`rS(K3J5BT{h$h<?Nvq5cvj?>$6XoiFz;y3W~>B85up9ioc%Q
z27)|ptEuzf9=$cri<IJW&1Q|=E*EF)5)#0Hiqv=O{vCg_>_C4Isv;{Zwg)LWs@Ua^
z(9j(p$i`ubM@sr}8T=oabt(|mJX{}AYHD;Z&TAm5fo9O}I$AK838tGr8CDiLGWqdd
zh&_5?d7uwqKOb!J-MLSU&|-`g=w_W0HJ%OE#>SMD?ZrL5=q+gn^1?trI~CO!W;kpH
z;!;yxMc&tm*!rt_;E>-*Le+JzvylzLIAK5zXTDKU@~_5y{K_+lTzC8GR072*szFG-
zy<iE@%6J(jZVri(ZE=Z>fWQP`NS|-QEpz=^3}_C)&^BSD93UYR6O-k<w~!reYDx<j
zN&L~ypBkgW2s+RtXh31ixls@5hQnhg4xC?HKF(LV^P%}c<Umc07C|f~e@$s&$A`}%
z<R(0C`c-ywFlK*o!-!^hm<CK>(MZ-*PU2#_H5y{##nMtvf<`^3Wo^Ju8XM>1`41>L
zEin9R`0RsmGzH$yHv;Shq0>d3hg%OOCgqzOdfMBy%U|!nRRKo_k~b#4>a)g|kP58!
zCQtUK=N9$>L5agOB?NU~fFtC%(Emwh_t_lz*OgVu6<-ezW;wKa_T&{mxd&rEr^idP
z$HSC^0bUs?HRo>+b=ddB79taNdzcdfxB9Pqew83528Q5|tB)MsxL4o)58BLWzS<l#
z4x!Zv&aZO@S5J=ufruEmpd81$^C$M}$ml2yZ6+8t>&+{`Y01j+1GW@O4i+kEIPOWJ
zw|AvjGJ)U9^<DK{tr^t~YB)DJ-{bC8%B73x7F46WK{b5!DnD9fb=v*T=*FmNCdFLa
zf+Gww6F+~tL0B)eo#HwY@ru14l|2W6-aW0U?>aR)3K0YPjdpJ5j#zFFWI?=XyfGyX
z)J=w(d^RH=D#ncT7X(B(xD*5Z{cIj@{K69J&emALbzY2c{!cruzPPw2tuooC(78}*
zMz#|BjdgHS4{I~#Fck`V>CZsTkdmFfj87X(!f&VbZr6L-ZJgT7ki!n#4{Jbr1JNHz
zb|v^UAL|2g@bEqoeYPzMmke}+M7KDhv+UN^VDvbdd@<d<A8B5E%~=@9pnlWPD5$B)
z-{N|a0{o&}$f$^qzaNDP1*X;Ot&Ppr-H?pkCt2Z=(k&25@E0tj@fS<YW_Vl<pIbX^
zOohSaX4HJEfz#q0tdZ!-lItVl;{L3xOeBjxiz`jS$W$W?=tynlcG^|3vQj>+KHIlM
zk4P`~izCAABNLXDZKHdPdgIXjV6wl3?C;cfTluvnLnGGpX??X{;x}>W5uFjrf?Px=
z4_G$)r1fPmAwd4Bx2QE~nY0(Df|j<n>rNMy7Y{KpEi3@w#shdbd7jblpzqJ>sFmSW
z(I*ciU*F?iHMl16<<-=LrfH&}Kuj`<zCLRa3W5R`6SxgQb<~e~_48T8FbH{`+S6fr
zV{X;Q-=fr=lF(%W4t?}*6V}5jj90EVEaj6~9&LxJ+T6XH+u8YY&;})i?^X?gYnk4(
z$rrfgRw%Xx#ZEB2Hh(=Mr@$m6Bm{aJ)pprS61r|;)^mc%y2LkU$6Z)=-SEjFd`$i{
zSl{=y0koCS+gb71y$mFur?&P0uZfH84j%}3qzX51bIjzFNjB3y)kPpa78|>`gx1su
z8m5(g%rq@opG>`>NC9*Mg3L0juAo`6?wCe%(?wxaxp1GmgbjBC-1ua9g~(zxAaVJb
zOH|_5AAz3}66l2>&pZ1$y4_vY$XzE?wDO5k^Se2DGX7%s-}C9|h=nx_dmBC(-oarC
zvypRCn#OhdMo?dE>Ar~x#>rX_J9{)U($cEF^A#z{*y31tl8}s=m{7Z_ua;gzF0}kP
zUp-YL7Ug_vYa3!xyQ|iQMFz;&E<zCl0|Uo7EpDJd*Uuqhc4=vIy~<tKX?GA3?0{c9
zovT?M@*wfYDWy1>^x0;ke@WfhHya4^LmqgY%z;19uY;h<he*Xrz+p2gJp7iyD!}Mq
zAS_;R@>k!~FY|9}x*@0JRgOo6C>HPe)+lTu91U6HrNixoya9=xu$r48_xAU=e$s9n
zG3#PPK#*11!rSz{^*IFR*izycDl1J`yxlKQ$;aWs*2AAiQT%>m@GT9e-4|6C2jE!+
z4F<1p3tjv9%)2~jaRTx8O=Awidnp?DOuv4y?<z!~A)l1_P5+Xbn)^9##yonbr-z@X
zHx3VvcXonF!}+YZF&P{B%)N|?L(xPb!A(!6-=KC!ZXq&9d2_c84jQm6Uc=h#F)Y}!
zRK?$o!8karf6jit=?BpGu*ijEs*NEwR}W?==4apjoE}y5kM@+Fo>oKug>$V5PoM2P
z6b<{$?T9a53|%mxk;Scq4r$}}Z<Qu1;TSKiyLs!JbU%Go^J4~I$M=qi_)W)PO3S~c
zxaMkN;&IrFDN%+IkAH!utrZ1`RJ3KG0P;p2x?1_SJ=~J8rbq(zJ}Qmk1%V$|{YsX=
z4$9G?0=ks9Kr#iIkNb?bxnIn|deZ~ylwM!#ip9<&<IX4pRaIOhGA@d%oGGdp%JdCF
zgt8HIw*t6Cyc(Pj@W5Ne|HwhZG#rux0<KRj$tWrk`_2xSrCf{~fErEE;n8(xKZ*C%
z0h=%bL;$K|SiV&bS(<10<$Acg^#wE!9~zWzwb(87+FhJKfDP-XfR!&XF%SW@0h1iM
z?fYUCUKiag*%6)3RnMO|AJ{zFpH-&EpPj#3*TmT>B2%XH(cOepkqj5vo+{*<_7nh3
zOR}awY&sDxABR8D{^$aJ%DmpUZ@;G2zy#8E^yklqKhenN?xB{oWF{s&PiA{P;RhkS
z1_n$6wXRyrv6FKMw6eyFle(s;rHRKn_iQtq53(c!Bkn(bTR$~*-bO3^H;>9yR29D3
zE%j_OkW~n;-Pdg8?_baR0P4Tln3_y*KVJ@KbZ-(rRh4mq^3LXP`&W&#Y2Nn!xXrY~
z+>3`=)l9G>Y$3ON@xnXw4-8*87O`4nOa-HUo?Qm1@u!ygG9x!gYQz}LK1H@8e@B70
z48$l;)cP-(h(9QSQk;fhC@EP`e;MG%Kr1BF*49Rr=%RW2)|#wUqAd4Yu%UJS{Cp|K
z{li3;ZLAOX45L)60d>_v9ZbkZ5D^d&t=t-=nsOqORaV|+s-gNNC*P5^&PEY(zfiOP
z`J)^>?-#edpOURU4oK-2uZC1UZobq#1kWxX_NR>Ws(X43dy6p-7ty&o8&vP$>lKM;
z0WhvMGh>i8@H#^@=YbX;bmu8CY_NOu3lU5I5*>pRR5}oXzQ{dh<Q9>=8=#eox{gi}
z*7lBUrISs@w49NECim_&rSH{5N=yR_)UgHmHe>Cdh}%ovAe%o6gah_BR0Ssc=oL3l
zLaNuL-`EX;h)n;r%~|WuFJ}SxYiW1T|NTGG>~?qG&z|in_kVsZLH4bxx^v49Im?Jy
zXxo_<{)+`PV%q9>UpKI}wsxz9d@hxI7DJk}r@owke7rU{H@CFZZMaT^j|8T}edzAY
z&^qv0k_q6jJVdwE2D7Z$L@`y0$VIpr_#QuoYLwThk}qD4$i^VVc=7aUMomq8P!M4i
zHS)`c1lI0F<+|{e1ZRr=JQVR8Sg#iFewx3(X_m7{6fMDZYpbVS&WGID8LG@nMB&=%
z%cz_1i)87wc7^967<hPw0n~*BSQzam{H)r(ZVy@Q`fpl4C-s)@Q9Lvr`n2`*<Cts_
zx0Y6xoxQygY1;Rjg7|0niP}kDw+&5@T@Z0FxiI7*ODRCW2s;hUIslK?hVWZG#K$l=
zoG`@4!UZI5>%7$(v70d<6|j}xv?Ic^@%rAA_0BgZP$$86EJ*}WURl8ls}^l-?U>kD
zOyo$k=arwY2%KRMPV62W5N36Y-zFd%x*k@15jEYtXh2%p8yApJ#W?8db3HjjAPaH>
zUcCCeBDAZvt6tQyU60(!u@ja(t$_y}`l)&ezzU(Gf^T3@tEOFO`!^VFPT1-LgW!%p
zg>bhNFvy6Qv;=Ja3}^w9*einhI*lT!<*QfJ+>j|c+Tg1U;905F^sk>kmBu7ux${Aq
z;$dTz&@f2Mhay6c)!d9Z)Ad)Hl;C5fF@nR)7gD;PQsiLwYW5j94$;A<6x|DN3z+zD
zJ8oByaL~}wWPlv=S#KOI49eVGT&}Z?Y_J9k46fZAx2n3)wP5>i=?|(x;*`06OMm?F
zN+2nWmBrRKj0>Ku5(o%@#a`*n`DXCIE-iiMu~JR#E5Dr(Y1FotB0d(;D7?mr9`!{3
zjyfgu!l7+UC@IHRTnPmuF88Vm=#s)Wz9l7HQMg!O9bjUX?+)6S3aYdH+YS9tz>wG=
zY9y03Xu3tL!~gfn{cmTqne`vwc7VurEK?a<;pF6ml2LAvNl7Uf=8n<P%Jucr6b-@m
zA`VJBiejvpzFW$)Sid4Ml08J|64XoHD(;~lGn_CZ-w&WXHYy9}D=GJY<@54jw&$U4
z&f(#WbTxVnOiE#W59M?i1Dbpj61p01LK}v_Y+Cm6YMiR6@*m(;y@_s?5EaEF2&<^@
zj-4Ah!lA|TZUvd>a}T@`N8~$y<>7;<hLui^)rb}H()EIs=EYIZFwC)_R6OaEPE6z{
zW;Cl6p);#3pgOOptb{$D=J&#aU9<sSVc>LHV!LK?$oR^o7nhe4X4ST-N8EaZKXb5Y
zAoyJmk<}Zt%xFB2(Z!1j!Feo~RG%Rm*kS$r`Ff<#;}FsaTM`7(8XCrrjvU8FMksE?
zM291^0|Enak3JuShN`u{yph>5HI;C%PF-p~AQ$IJn!1}OmMlT>a%@mB$!Te|CUgTo
zK=U&OR-TyF<1iXQ2&jE{iMD5*#|pdmeYbsvGXnPyEPB=e#6kmIk<GhzKU}s9`?_M?
zFIG#e_VhCd$fn#jraYk`lB$PHyutiu?(;rCae4OiDby4U1a`O%|8bU#)~9}uHegT&
ze}=z+pQ)Lr6+8{BA%_YQ%s>ovOgNq&imO1TdI<+2#vwfbf?F=898JmE-vdw#OB-T2
zpW-mVi_-x}BRz(@&#1P_dB7jPWr@5#N%Ly~H2bi${t?ZwZ9H8o2nvM<LXbCH_U)B8
z?=`Wry+WC#3BT(z`)hT|(d_CR*^{5h-K0VjS&2WwBoGCWI{CU)QvVp<uexGS&j0Fv
zUHsDy3(UOyiwg4Cz`&gjR^dzrRk{c)l&&}I`Yu}`r3&!0yI-8>F3+@vDBrrvt&*%F
z*C8(Iv9db4!&?0a-eURh;;v^HUK!QK??9U;<EpJq0veXio}Q*2{*BWoy%Ik$(nXQC
zLkb^g$n^NJ<Wv|2mF!VLRPmR|9rjiPx6aO7QF3}B?y($Y>nmK`uLp{Ra?I`^pbT7A
zQ*~QA-TW7L3X2etG1sEJxxbH`me}S-L5$uhV7r0<P#ZYb%JIjgpOkm5UPm=#GY<#Q
znt*Vq4B{y_YEPyh0NKmj+AUY(C;U$7yzwzH0Yn;kTJ&a8?#KJ%DEIlis=jlBFmJ5F
zI_zggVS5X?JCI=QR|)MlKxU5YvvEWE_-t1;>oI%KCAhkGQ$NCh`F5)M)0AUo8dET*
zS-nV9VxlnU?Od+xjG89Wg}1w({nd4;*lxfMR7p|>n#0A}D0toP?Ct4RJG4QB2XLx_
z)gj1X=lHKX%#TZ*(LMQ~<OiGn{$UreL0j1Nwe0}$QfZP3-6P;^DO=SZ{mT7X+Yh84
zeK+ls-GLsEvVVt=VW$|e^|R9*)+vWMEGw%X_<MDbV*_lx;!b6x<P`o{3AU(QyAc}8
zYhZbjd6I=FdhYkj?aVeGqGij=dB}hvPM|KjJW88z=k(VzD?{M;ZB}g%nV6aywV`0v
zVq#-oEJO}LSqh^S9x5`D5Eb<}&j(Q^3nynO&`hIX_CJHu3>|8)h?d?HzYOSQmZ76I
z>2kuthH+~Qz$C!6l%qD&{_S%SzR^NBa+(2Db^f;X!}^KTT|gfuMh{<D9CiT(5D?BG
zn4H&PGbue?!HEHg>v3RxFXkXGC-<$S1l9n~ke|`W-|*ZWX9sZ4EO&eu<TW&kk-><7
ziUD62Xxj2+Pj&U4z>W2zBv&IJB36nATOo=1a-B$(^1W+!no{81(r1Tsy0^cp9m!qy
zM;B*Z(nOc-7t+$xC8g}#PS)K2%+K#G?~Fh)Ls=ph4-YYIT9H#ASE=th;hc{7Sb5;l
zcE?vBo5MO+kCl~`t$oExj-{u;N>h`#&GKu_7&OtBrDlaYZgRQq6$O`oL(AU8ctiE~
z*8>I0`7aTM#~3pkbykrXxLIl26mA<MMXtR`w4d)VYCZ%KY!5QKBvFV2gh{@AeH^>2
ztYK}1^B|Ts?O~B}1M(R%f-J$-*0$yirBWP7_F_2Q+d|V}3jvv4C>g50oFfPa2kCd<
zX_kOgP4FUVpA8M-$Pxf^bmkk7^?|4(JX|43>iP!n)WJ4;a%}wPP{zSW<rp7TES-k7
z?~C1s1r)j$$b_L=e`9ZTJR9g96d1@=q2c0kI#zZOMz#;Ci_?|gaO5T?CxItY4i6nv
z(vIEXy7PsjMg2QG>#_)f^4Dki(7HM0fEEN!gxFOMUS5aM;>7f$k#<-m0;N94`(o=;
zITkl495^As?_er+5|%W*y@jCcg!ODD+U-?{Yb?1uK(?V#Xu#+27Hbn3$wIQkS<G}b
z>F_$5&I_>B-o~PHVcun~5$4LEX%7RxwNw?nA5@%m{J?3(loa!{gn$r;0$c7^26fLT
zvPo6%lkw^E^$qgPz2O~Ng{bF+A@omZAj5&G?E9Op7=2{$s>|V<<?N%KIx(qu!4uEN
zHh%)<e)<U=o4tmILQ88L@XFhFdZ(i@BAAYF<zcs?kXQC*CIuFEAI*`Bi>%;=qw=62
zTRpv60D7~me>ex(PmGP_bnbdb8%$w$T5v}i*o>IHN*6T)p75?f&=(y9;!8-#+T0vH
zA|gM(X8(*9728eha3?&SFcgeQ!oubj7GBJ6FE1~H`{wK}=*1S^9`&WVe^kstFmzN4
zH$t%~ih$MWmg0=JoRU&=@X+kIYzl~>G&N~KoN=}x2}Mbr@7w0m6;amq|A?jT-P=%7
zqCW8Fc4&?CMQWvTno{pD5&=ZH$oNGrys9c!BuK=<!l$gP^VhHD&d$7d?#@Zpl(lU$
zce(6^ra6{GpCyKhXeFQPBj=1YLb0uJ&oTShAG?t4`;i_mq7CB64ml4KFI+%C<_k6<
z&jW21-5d@#XF%;|!KyMfc?~#6w*5&zGd4{eoSiwakVC-`<}5vLfFzvO)|+|w+?P6@
zxf-Gl&jodKF3I}Y;99Y+A3lYZ0U4qLIsO<1%s>wUX>J2-0;s8}f#0AM^=PJxXPV9`
zua6X>g6;y5G6)U+wWqsA)?_G&u6k9nenJPLRrA4CO~It?)8XA))ph@sYTCaMQ4Z6F
z)T^7%XR}J^?zd1!-LDx<s~Bre;<BWAhwbv7lMXc?!0s`=2KrqGinL~bkIz|KFzn=P
zSe(%jaTtW48X6ef<l2zzd+uk{1}Y#bj2O#1Of9m}D%y07)SQ*E<`D_B1caD02Cp^P
zGt6uvXCG~#{fZD<fPSK1L<_)v<lBHdq&VBg*_~r;5j@@0q+uvQkR^&Uml!P-CVi{m
z!|nGAuZ*$zj)eWp^xiTTWq<bqnulQa-rG`D4;2?xExt@A57%%wiwqJ1T*S(hjR9EK
z4Lnu(-jmdUtuNZm3=Qd&q}DeSjlr|{_*2DUD?kR?)iM!-T9Jc8|L74G_oHwj<}Ze^
z=2a59{EA#S=uMMlg^#}OGV=#H9yzQl(Rcx&hp|u}eo)o)O@a^aI9FK=96l>pbL!1m
zjUN5($uTEPVPCErMfUKxxaJ%TI544%k7&IxG5M?A>17?<_L%_-3GS_=BHLPATrN~8
z6tN;1ziHUwrT_IBBA&W~+2*hmy_Be?|8K8E#ojuiDy90isH{wb?n_&nc|SA1Hz}ow
zSi<y^=u#_gi&xCzJ;sjzNKY~l%q42$OvHvpM3BYK{srj3&0jWPka!0PFqp)Kz^@Ds
z4W)|gU>lg4s)g7i=BGDGUyZXcFytu4;{4<l=%c+qyV*-bWD*=~CpGmF2|)V!Ni<JI
z>9u>!9+iiy7oGoo49yAL>NN%pJ|I$h|NaVCe1oMEgt*L5CX@l=i-9uG-yaf<u9E@5
z(y2d97W`YAH*STfWXA?we##-OBO-JH0S2??<>$}rSe}+Hja${Nfs4@d=g%Sg&B6i*
z*$B&|0y=KPWCLK4fWmua#R<Gaz@M~sw_hHLPBrdHy@Cw3`nt(K!QjI?<ml<EnHLf9
zpuPjw8Y${W3=9~LA5l_@CaZkWyH%u;9+H^&$rn8clEJkW;CsR5CXT~Y2~Zf62am3N
z{_*->&#EnjQqNwZzg)73b(gz(f6NkeS=Eq$3woMp)j|aftV*5r)zww7Ap$i9<oLne
z*w>ub@#sId{$rRhLwMY@;4%h34_Kx{<!3>hdIjJc8HkErP5BMv1grT55PXp8U{<v#
zT&}4k5Cso&*#3(J+(ca$H&Y;OWY5B)!jh7dge>8jx8^DzhJf4Qm(fcR!}S*J-xW`l
zL*eSt`@9zqjTFkD>sr|`DCFP4)(`r|<n~_ln3bs-{us%*=81%af3!Hitd#Z|<H6^R
zcrBRT5MpTsG7Gq?*kwrx{G)NYQmhAWqC8;1S}02mBAT{`2ZJi5ot__OMb@*`<LF2(
zTrORM*q{g;b1SQOfKjeT_?3Ve3oAuCx^pFvwKk4#kHk9T=M#4m&t}w(3fO|Ar>E!V
zmpSkdAYY1#U5&(}u$t5F2t!izb-@IvG~3!#X-YsV{tQCA5C{aA|EOT~z7!F;!o9WK
z!8$rVF2A#vDP&SFg)*s@&VZo%Vs0M2zi$W5ZL3$1gTI6n`?r)20Af^!Qi=cw&&SXI
zRJ-lX7(}lM19^*$i)-kRUjcy*Z^Fn8?z9q)Yayt|lui$hA3D)s3@@dxlKp#?ek`vS
z2?~K_qJsu-#WOLT(=mVm8?=QQERmQ)s6j^fBcGo)x{<mBkUrW~*i|lj8dTdZborSZ
ze-uWk-&RV6o(-7ppmZJM=t&g*^g#iZw&&Zw14;i^Syvtpb^6EK<jR>NM~E5BG$Lk*
z*0^RyB<q~0&3z}86&)&8M#h~YhTPYrEVi^QA@^A_25sbwq*RVvVSb+({rB@HUa$E+
z&wQWH^EuuJ2+S1afPZ$Mz@g`Vj)ppzu^)x<@*}>*(!2;-88G=_P&pJ)QepJ?@uNCZ
zCPfgZFP#&`0oPefTH5cMN3WDNn=H+sX+ll`cM0FM_0um@E0h8fwUPu0hfG~fle{k|
zarSs7$(ZhYkaqJXVc)*9St>o*2GH3nB4fBG75C0|cL0OW++0(duaZB2FH_uNPC1T3
zmR&EkDDvUu)J@p-z^IC6&z{lg=Bke+_FH`T50nB1hp!XPRYdibSckJVSLmYoR&)bb
zjWm?1s;nU8&8~Y5)4`W=yQ4`nfRX$x&Dl~O13^k?odG)KV$Wr-Bg`-H{FDkXEpH}x
zH3B%oHX~-YlI#IA`gOeq@PXYs7WTfjACjQYo487jhF;pid0jT+*M;3_ebkH4P;X5d
zi9qD#{u@YM$L5_>(*C&swTrscPV(I>%4I|4QfJj8JZz>9LZO9}>Q-v#D#n-as3J8@
zFoCjryc;l#N<x}Y4n!JLD}22KLNEPkN+=Ea96-|PdEX`vC<)otf^@o=<xo#Tt=5e*
zpaTfrc|JapekL2(yl;Mg%8>bh|10S5bL*(H%GdFpJ_Chx>Pod@=^4E*flIW~r!Tl@
z^yzuDYUwU<1wA*1j|;gaB_&|fxm=5m&)f7S%<EHlcvBlxEAoKw3hddhV3)<ncAJ2@
z$ME8`<wpbNV)Tq7NSZ>#h9Z-n)Ou!tI$w1j8dP$Z8Cq!aFKj$VBj-s&#;6!4rIZB_
zHYoGLo-*Z9qDm#^o3DO;+#`#VRX(hg_Ccu-9Dskt;}Q7heE<~DG}6}xzjhHQ+*Q(d
zx(q=5+27VyZk-b*uYc<wf63>5y&^n=)u1;3U(!`D35}4|nn!lr+?i@j(h+FOI&)S4
ze>=usI>{s7LUTL<nIgrPuy)G@n8^^_{4Wz)l*IG#tE-bq$P=<o(wWeJr-AGY;JQGv
z+#47m=ZEjYodgVEP#^)gr1kf&C0aH`_ch%aAYSC#6UOSM0eEPRO)PzMsvKBKQtOW3
z3A|kMweB*=dPc~q%|Di*b=&1>E@$5-d13x<)9vN;5Q`AltXX2_r`{A66x8OXKGTd?
zP!vl61jX`dPLcZ|kp8)I`*yB@xQOj2F`uXpUDul~8X6kt=9jd^2<ToUCG}Le6QOPO
zaeO?Y)4eTm4_ynC%OvCGM#IO-!*6^n`)9;3WL7&vUd!V>TqVxV&LvhirdLM8%@Y0q
zw1v^;(&J$#*uL7}!+(IaFC^1ptj$IlTyYIp0j{qDlXeEA?gXU5SS$6cm&3zy+{CKi
z-+^P=!TT8*01M#N)zy9f0$99m!Y<KZCThhlD?_+Oyx~aWUZPN;d%L>qsq!_9!sXs6
zn8(lm_-p5$e(J_`Zo^ki4H{v2wG7sQ1;C}N<6~nm4P@TLLXUs4UJn45>GQ6jWVkG{
z`&$kP-OC1w`8p`_AYMTi!l`H04`Q;0n%Xr`VWdW-L;l@gV0O6@OG`;nZtaEY2sHc1
zK0X82zSd4oPp=Q0X1%bVFc8CG8PF%I0yqK8Fk<n50(}m8H!}fKaOSQYu$5$HAA#Z`
z#TcXq75&avqtm)t*3ee@e?$>_p?rK2a|9f}!^Wd%J9Qjp@E{DqU?5N^N5%Y%n@Hg{
z`9wo|=YUo?Rkt{&s!u_WK#O?2DsTwY(UP3JF1U8c3P4CuVB*LJWX=3O4<A|hRQ@44
zs)}uf32^Fzn<3+pY7TCd0Pd_^oe&re`w<RR=U~|0wYfCc0RU-sfpfM<`MdF^=n#h_
zP@`L1ycoREXIu<gH52wzbEl1s<G_U7b7wuTkgT$er^=Rym$yn&u!BRQF{$4gKM*)f
zTPELuS|VZG){@MxY7|J>Ercn!QA^j;^6r#)uL7vGO;dsaIQ;>s;@!fR^GQCvS3s>2
zWZgVH@&RBfaCxPewc0iWQWr-zfHP6k`}ABo#EsR83!{c_d%(SrDrw5ZadB}ai-a70
z|7GML5=lhy!+*qC^OL5;%SZN>TR|1uXr>JF!<~Chpya&u1_GOpId-MLA2MSfSwZ%Z
z6%~;?d-g6I5v~ZE@G8-%8b_C_rVq%_;p0!uXJw1~9Y&#eLBK(D*{3@laDv64&fyCt
z>ws=#jvT9!UHg`lMl5+x-J$+l+FGe8iPAL{lvU~O;psVFV_(9T6?L`Ao}r|WFyn)z
z2}*7N>}m@|BHswSK8|jxyoI#dxXvV3al=?hC(=yIR>hn*k*x42YImNnmK1z7acgU9
zAomS)*_+4mOtj-#!836SG(n1_2S9=#&+AdY(YsfM_~%H3M^Mn;tAU^|Ksa^nbT(Ah
z<KCNt^&`o9iC4cp?lCkw(%aQ_e3&L6r63$;zpfD#PgM@XoN;$|_w-c1o4SE&jypju
z<w`s#=c?Bk_-LGp>qz^k!rrAF>|LS{aJ9Xu;k#GoLS6u8WMN?5FzL3S{zWjc*5n2q
zIps>IyWms5Lo8T}6qyEv3z!*##Gx9LdXy4S-K|>j>P+eAy0?k<Xr>>#tLmW(sjw=U
zWMea?J9<4qC_yf!-V=_}G(i6V_5%GQC5_jR6apGf3Bkk5>q%t9o_o7%QXNPyqZP*+
z8p^o+A2oa0ZIJC2>yz#BjDOqTa*_A+kcErQZ=|;ii;}DLHlnd*W!?h=D#VAh<we^F
zcpr5p+3%xH;Mj}<pPKDwe^CDdAV~;htiWhSw)3C3b@Vma(oztzBM@GPa5coczgq^s
z8lyY9Vdm%84zPg`jom^50;lW4<R|`vXNB1?L}^!gE{HRM#GG!>)e&}_-k3*iZK)5G
z{g6B@m6K(}dU*Tx?f)JdrQ>|Rz@Lwu1^;^1=GSm=_4!`m-o))cT&Q+Jd(@?(cX(yO
z#KGZ`hX*!nG8|b|O>OZ)OvbqKzNkdXo9Pt?dX3MNCbEQ0;k&V<vR@hIMnoU!!`tIo
z$U;t%f<_{ThK7i~zhuQgRtkw1AhKTp1@u*WyC|lszhAQdaA5;`(X-4unZHuQH7_Bx
zwDwr%AyBou-irV1Ei_$S+}i9w<&4x^Hv7?)aI`M4odUf!>;=~XGNz^BOmJ@KDVtnq
z?u*mUQ<JO#h=A2w<xqr@O5E&3w41qj<%wku1sBG24U3t0HPPhxW~6kq#MV?>efO&R
zmaAXm1x8v7FE;tXH^>YqvW9{2kcH<SurCJTl%5QoPnB&7M4F-gzMKX$hPl)3(86hO
zJp~dI<t_Lq7d**nIX?E`gX2gwfbM1C&H?!D>}Y+slhZITL*5jat#k^76rcuEX*>;f
zM8(jhe<QCvi*@xh9(}<&x@t{d-4j8LcU$I5L@t^YvIHJ}#oLWVSb8DYmqXsP$bAb3
zzACA{Z1H{jer)~tI`sA}LLV6Rol`-c9!mL&jfFKe*Q~6Bg_)rB5Ig7}8(y)TQ-(9U
zHqo|U3S#;<Fc<~N*Bk5j<qp*TPfqo}m$AOsWZA_@5<0llC&KX)PnJ@QNmIACn#57f
zEU8StJ^s5PiRt7-%c_vEbUo2n@i>sSn$ElcXD4}y(btzM>n}9FD6O?{v+7o6=Dr|L
za2V+V)&$57etK_!<QmV}D*fA~JY!=p+TYQckJ6YU63gHf-Xl}E$;w~8pV15#2Ih){
z_z8m0em&J6!g;TVOdbFWu6-)6hvUk_%?;DN2V_h$0S~f1ClS1zUf2M3hxdveglP!(
z1y<;k*sGxv`?-`-A0+M~@UteBO7p9~iRi(jmyU4`*2OVtNj@CzBHrL#i#!%9y8Cyj
zWZ)$T_Sb`89tcx@n4b11j*N^1ykr-6Qh@p;T=8=PByJu;sci7`=4J^H6R8&8o)pij
zHbr)7ACRdYv@F6r`TGvP<e(K1{mEWNRl8J}lUO@%C)OWFqAR-XGPf~iOPCv5W%d5P
z6~&Gp#Y0sijtaxj&cV%kJC|?n9uw1h`1I-1&K^g4zkdVuZh(P+G|oJ6er_>1$AWn1
zC2)b0yjOl^{&ZtMXtjBIrqXC-I9K1s^pegY%7YB-Gk*U!uaEaS3WZ(c^ckqTA|q@t
zGchV@DJj8~RwqXqr>YcZ&W*MgW1cws2fW7h8Wq)bx|pz^*X#DUi8sZ}l%TJlxpCbz
zC@3Q<Oa0Zqz}%eUhAF0nwYdOaxPoJAx`*3$Nx=sV#wB*_xpmRBg)J>1L8mK{v*@E3
zr0A^Ik#XB~hLfIug4{`)+|F*Y;T4;WndNMe)Vf8A+pxN8MoRVf>knw*mb0f!(MD*j
zk~aB@FA&2H9_*HrpX=5+slZ0+BCvOC|H(3@-^D6f)y>z?=`#%ldVZR`vpp1^f~+lC
z>u`jPn_|GT=2hQf_rP{eDS}}5FjWc=^NqbQubAJc309QAxa?z|ab-Q(qMn>48sHwd
zi;g-S-JSwjp!G%XZSmwT+59>emK)OG*N=0T{6z6K)Yi+9<*BRZEGg9<7-8nu-lQ{d
zQASDok?Qs?*Z_~Ece9@)M&&`2ZuS_-gskSQAOWfwoS#mQ-a@7*7O`pC$RNhdo^sLD
zxTD4C9zx$txk<Np&^nxe!^Wq&*jYd3d<4l$OeHPep~xJa5?)JRmYbBJ37*>C14L<l
z><PYy(mfbv-FzmJv&ejlD|+<!WXM!{W|=%f!l;72#H}Oi;)*}N1SqOL!z^>f24+7N
zNjASv?^WB}ejljuOJ<5pdqHiVUAD-xk)aEj4Zr5uBx|?lZud6|U8BAd(U`|#Ctc3j
zuuc@Tx_;}3-!6H*2rQ8uJ6NpfS>`oZH4l5$Tstc7$?Q)4(Ap2b*>TL&iu4!3?dJag
Dc#09N

diff --git a/screenshot-09-notes-context-menu.png b/screenshot-09-notes-context-menu.png
deleted file mode 100644
index 837d1de4c8d2cba71952f89eba751600432b5e6f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 109855
zcmeGE^;ec()b<N2jYxNgbhm(XcXxM*bf<JkcSv_iOSg1)cPiZ_?B(}<?q`hm{Rj3h
z+i{5k7Z)e%Tx-r_evUZ_SCp4Pe24e$&6_ufQj(&|Z{9#vgTG(kAizh4cj&C%yg_**
zB`T!q{{1);S`||Pzd!U8%}P-g1L18ezRvOK>FMLj+S(f7V&39fuwfwF^x8(9n{)dH
z1v%rp%a?J!yV3D~e@>6b+0KF-Wo6%g2-6M!@uM?1nC1gq010@6twxajpZ|jQ94W}*
z;Q#yhzjtW<zjqvIhUw|TW6UpV=#~6wN?FY?#ZjPy{ymyw`}#!1B^4DF4bwhgo15>m
zF<{mzqIhPhp1bGZRE@n;m7-TB6QW7BvSj@~D>_KgH$W8>8Y&?%(AVD|M`?;?l%JPZ
zQB+h`SXfw)*wGQu%*n=<U}Z&G4z;!L>7Csvt=Lfw9E0nIh|sS{Eqp4`0agy~C3q7P
zlMf$0xVX6B{&yu%LZ)mvnmxTA0s=)E>e<1^Rn^pLX9p8h1RMMMa`1@vc6Q2(ivvfc
zWEyubM@Kb_3NtJ4MD9-lg$rzrQ(+JmWFsfdvq)w2qQrjHjMmw0yr@?$?~Z76Ew>n+
zEW22Yr4yo~_r8!I6Y);YunlG`+~559IQ@cvMIZE9s#5HSFQTcrIFj-sARs^!&)%8d
zpiC8)(yo?T`+t6J2#)*7N#@y2IoZqKfBy6|ide@6dJEc;D8#Z2X2-@>Z!ABeyy<py
zGB+ognHE!r7p4$dgux_p(JW|$hzv@9Y(h(pJ<4!9oZRyL`?%5MkT0L9t=HoGaJe_q
z6Z}m)n&8(97qe0{9!I(voW=rO60I7)>oL~{<^2|@|G8Ol`J4L{hle;HK8Tp@Rb*Cw
zI0*PI^wL!o*d{Huem*M7JS>~MFDt{OMFGbkO?9YEB`$>Wo4gE<d>NOrkCK_<mu%tF
zRK7$Y3?e5Bi^uihR+ZkT6efem$D5JmhR<iK&7a588;&Q8ZEca7YyDo|ikrT@+8?u9
zZ8`$$g!A7$5{)J!B_-wJn(Y#dLG6TW4r&vQF2wlC%0|;UR)0-qA%sKRyPc=yjG;1T
z%27_vr50g#8q2)OqAwB$Ely`iTX)EuY~*^jj*f}h;IQM##-?(bUsBTKan;}Eab>$y
zoAe}`&7bdn5l=)!l=;bRD7#Z|t>xyU%_22ncuLB`;greo2_XU|Z2<GxM(4o`Bcp}=
zW)hvo{)EBip=O8a&~yTof)qu*PJ^|Ttu2e$@N8^stSMwyP*_RqR|x2LF285Bj-?|o
zw%hFA<8u;NJYOH7ucACU9gLUjwN@3Hbv)i=R_V9XqOXA0`8`{j!j$cj!Fi&qr&s89
zvhtHSt7%a@3h#$zjdDu^Ng?~-R~dUp>%&dO@wLAUBQS!9WFIMIaRhvyxx`VH0`JZQ
znwpvlW`ziuus;6$%w*8<+{?EJ!cy2VjJ2_m5vsO!y6Lzy!XU*irX#(U7q*#sZ9$e5
zZg}hvd;t|tECp>X7ngBbGLnj#47-Ywq+vMe)Vpx$@NoUnlUQX%vY9%gy)p{wQVMHJ
z7O_I-@7r6w5<EOSbLAQ-x1-?t3#BnhU2?3QU0ebK0@~W!TU`F+R#vVR$^8L8ZwxM*
zx|mp@M9e810Uq9Riwiyz(-{_nHVIt}0k?9wdZyRiDGn~Kn7H_MSEbHRkzBPBMIzKH
z-R5_31qD*u+uM{1SzPv;Ia+n*Oq$FBR$oa)LQdCOe@G_{gQxR&-4Z}iRisDZe{{63
zX40(QY;`+}U2goMvxC8V?hgr@!EU8nsXYg-lH>FI_WeaZ_-9v%bcvA1nO0|hyuXMV
z&GlsY#_2$JI1yF+O%D%``*|#xSVX<u#_4+d6G}-(M@OCcm@FUS^igC)gzZ8VU-a5f
zJG-eovBi!3Y^A_Ea53%|mj@Hs=a!hslQ}{@;7{_+{nL}(Mu*69v3`3?p>&co9va^M
z%ipJIevwe5p~kaSaFd^&VC~(`*4sh+i4TeEa794)1}=rw!~UW6^Gwm$`Lc_%v$Inx
zS^J;uUowB6kk4;#_cIXjIeESBN&aOZN4k4WQ3;7ZM^k;FR$?L|d|X`QEJ}1ogM!1O
ziINmEtY25HeObC?r83*O^R6F*1N?oAYs%pJ#lu_D!{Gz$<y2J-C$ec_$f<+=RNK|a
zGU?{l>l;g^22@p5)5%>7^zr(=tgd(1Oph>X)sl<O?hM3;Rccln`e%L$mfqSON}yG*
z;5F*$W7OlxPj5Bs?$P+6pUu4kfjC62&aXKK?lE`)Uf-OUn2BHC4w4cRDdoQ_=84iA
z4kemOIXlY^L=$q_t=C%3?2l)DN@CR0_B?yI!p`YK0Wp-rnDz1Y<nCxDv`8+a3s$@*
zjm^UOY#q_|JG6QS2%(X99P#k9w)Tb6YT#A9ul8e5o&Ej&Q6&F9-UPSm{Imt@l+NSA
zgYkj={Cw*}1QvtmNqR<03*K$xmlYzOMl%@;FRv%n>8}X8ECT}rcZX9u^OY-q7JdYp
z8~SDVi69EUL&9Y}KAI_Jeev{s%omTsVYkc)2?;sGB_ev+{)KSbSW`1KlOPfk25xhA
z2g6C=bdAZtZ2{>(O!im3X?{ppq`}63^X@>249+jxwkj$ryem?@1bm*dZMP0P{jA&$
zTRqV0aChfhz5fEtSVqcIYm2_sTp5S#g|Q?%6$?lOWY~dcV!FC*WwZ=knd-3`gEfit
zL5XQY@zO<RZ<<|jqhd_5*D#3nHSR;+U3dkTGhyWKP*5ov>RyVKQHooVhwRI}pOcGJ
z?>1vryXhNbzpDxmLuz1jafvEuZL$y*EjXMh*HAe9Dg;9bk!rc#<}k1iLSdYPwRIUX
zg`f_bk>&P}cMjjM#+o$)zP!c4^i{1TA(EUi8%gfsbKJE|dvdrt)q4g>F3c`38F>l^
z3+wjr=1+l=kN|Ud#a?MZINBB|+9X*IB#D$R537{R3=mdB2~_ck0>X`(#?5$%-yL#x
zkME}AVfqA|51CUD4@T1%m_(#0OSK!`jcgsSw}aCIBQ-|?hlB)fruNe<VNS2u1lVSC
z6<QguwyT3>ED6O5twF)TBkmnOe@OFT>bR#Bj^aK@Bp^CH-~VV%U#_<r+ZA1?(qmv?
zP(m|G!<Zvk?DP}R2#kn`05KXI@lVHHkwDiCR-V5j{XxM>_J!m}pLfFTguQvcZZqY}
zqJXq?S~AP-f|;sP_lOKBJ2JwI2Hc!QOb<pn%}d!0St(^>IPx>*hnqBq7g1OhBO9Vb
z4QFrdorT$1diBx$r8)~KHwOhAWU=h$hpUmMwY7~zYNMykZpfz3b7dcV?n9A@MSs@&
zh-+w2@xOdTFzaFl7uY#hzHq$SEW_UF5Ax=Ar=UMX9<p1f`$es2I2vo*dDoYf#)OMd
zR(fU8!(J<6<FcY6N*}Q%6afK&zT{&q_n=NW$YaS?*Aw&j7Wxq))k<y5eIXq9G{d%G
z4{_ncau689Z^?M;tF=?;wIHTPe*Fr5GH9}QSZ%uahQ(m&hf*K@oy$SEzrb}<5b4j7
zX0szjNiE1LT|P(Cg|V@UY5Ms>LP8opS{&Riwts#3@+Iv%wSL>;p9LnP@{jE7iMO2&
zJCts-KMY<6<3#>j-kXA&0DimmXAtoIa^le1mEhIr3QA)MC(A=vb0p6DFV9d}D`X75
zDAi^LD=IN4wOW!D7>4;8mk1fZK)}-q+@Qwep^uGLpnc+uI#cKCX#LXGVyYnvp&~tj
zBMb{03J#GICOH}=rq97Rp(=V*RFs&4-PsRiTO*s8BsG4@qxj<T@~6iex}%MT&$jgF
zvgz!o`+Xp(^lDOhI%0x-`@{79{=WKEqm1m~65guScTJAcC@=Zy>MAMv`HzO3oE(Fy
ztcMLhzd@nvUmh9l>1wkP^Y1>xiKR;e%20%Z9Hjb*^u<%HZU#z-u1C{LBY)ULdm?dP
zPu5zWwt8XRr5~zX{>+O+u??+l{fvbC*a!&`WaKzWWZ*}pvg|<IEYS1JDP;^PI*sdq
zO!Q0&r&OyP{?;NCrq$<Z9OSfwOmlen{Ud+j9e(QKYA>n`UKZv~*|?Gt>I=_8FGK0T
ze&(q|*r(g0nc4*MZWP+&#Q93IvA~y?m+CG75QdjL3^r*fzh>AwL}Yxl^LcqrgWqxQ
zwI6ZEIqJ&F%6hh!R3V1vq9rF6rKGhA2n<wdsRNo_lyPgZW{1suG%_sg`NVF2R0~(9
z<bAeHs;qvy=Py<${uGcNrT%8~`?T0^k#UdP(HJzTF~|JDo#|tK-h|8Gr($#MX`-6Q
zi^=TsTP^=c&tDl*5oFiF6|_gNO9{tOuZbEObcu*YZ=>}v9e(ny->)U-kX7tqQg`oD
z3Z_Y3YAvhEoUE#Xp~D3|X<YC??V+gA`c(Z)Z6TYD7Lc?_`qMt=o1`T*L#i)*wk9P%
zbLZh!2uA~DHKW!@>FMcNS$jrDF$7FZ@~;ji@_qYR{gadDdx8-ZwRqjnQ+&GC*R!N<
ztVJkp?k~`XhljmONPkj9H0TrE4<!`ys@<=(y50SKy4zM{4B~a#fA7}&da*;r%tK1&
zo3)qfzWzZXnmO0k?sbKoIUME7T-n}yrH&%q$$Gnmr6u(UQCK>&MWu*4h>^BQ(0jv4
zIyJ`4^?E-Qa|8a&|J5Xb{xPLeEH6TfL91Gz*LrK53WQBhvCmVqeKxPhJKL9)nw^FB
zETKq*jGEQVcLGlP$95`e?VcQ`_AV~L^5}oTv$jteufsxy%ajWpr9(j;YInA3%@g}J
zSEW~MI;7m+U*z+28(15UG?Obrm6dfg^NN6gAOSy?GSMO)rLC_1K&M)=yYI@d)OE7_
zH@o?AwfSoMCL)kFA>Q+c67N=?PD>}XvtGL=Vr*8KS~&<rEOz=kK)9NYL;Rwn?3%eE
zOn0}(1iM<NUh)vD!}yo91CuSm`@mHOA|xleQv_cSse^UidxK1uCQ3%(t<f72RVsoC
zw$*76LYZEx>+>xYj673SmBu-yt37q-t!}a}&=hSBJ4FRA_x(col;xPOWLpR+(07Li
z1|2X2i;=4x2pRX?-FGmYR>5)|AN9O{mSY^QzJ1;JLfC<;3B}V8*8KRiY}JPpLizl^
zEFgq|i`?ZcuGf|8eLx|-7s<rZhk6dJv1#}@bo4|FtwY%0j~bX{*J!;ri@kR5JbExj
z6VYAj(*l%@HQB#uC@Lz+v#ZL<YJ4dH>g*df6CR6kL1v~;CXdVIE=!a91zN?)SjNX}
z&Xd=oNkKVOvSQgZRuI%Z9xms){2}kzi2`Af#ram2n&&2SMGUK!+P#nqb^@TU*tlEG
zclx8w16_o#t)>fD$h!le5prt{^MqIp12T9$(1;uU#a+o@uu$dY<v%T_2>gxma5=2m
zM-e2ifPMs_`<(*RPEB_ix9f4x!jFx^qoXg&^|*}~1;j70(O}~SHp4q2!G9$YngUYU
zcCJj#F9QZOY?nrbQX!M)%V4b0O5+!!rNHlt2C6M$hNr9C)7G&nb>>kZNniO6dR*>G
z@ikWIwQj<1#k()pziKzy6z1m>5)twHK0^`ZxSnVajhB&$fV%Q05LLLi;aG3Oq<EQE
z4UU<#%T#Ij+IJ85f8}#H?owN2hlRlv4FB4T{5C?97M_?|FlE#qiR(UnPidE7GgEZ3
zRL2Nph1umBDhBmY7&CwP887{yEu^I$H&Um~-ZfWO*I)$fZQDg!5WM``r;kMY)yq`P
z=E{-=4+<=r9ruR6b318?`(qJ)awQn1NvMDOiJLpTb#-kcZ!D?RNW}cVSZ02E%>C;d
zwuM$NP~zpPrQ1hG&2DEMQVEpI+$>J}kt`<SBW6gv5AmB%e7Eb6QKy-+cpqbLHE0fU
zEWdwrT(NBsN7Q@_ji=U1r91q6NW3zUm%pRm5xrVNRV~EU-o7%MnNc%}>a)dKk)mx9
zQfD*CLw|4t^^3+dz*{RZOE~E5x5<z|XjW*a!oEYzq9U?qoDoBb(kwnNLD5`&gd0pk
zLg)u}&+8JPBnKk{bXr}<njCgOO$tXdSE=*S0T%|Y6O<1ib>TKx;~<0bphzKmzSWH>
z*~*Z-&G8ol@AClbx5;c+q~pLF$E$sYYAJ0kt?u36%icQx5=2sS8>8Or@9zWQBVJ}m
zsNLZ$CMg*f5%F%6<ZAzKS&X)(rtEhv-_5S>Sl7uK#cJ;|WlB_{>W{*2AVpU|1W2Mw
zahfsyZ50c1dAZ#1C+zJ!`7ZMa(Jq(VAfm0Tu@jwEt?Bd|cWDRWUvh_qV2w9Yx_k`l
zzRZ@O+Jt+fbM{AI(rpQeeIlS&b<Y5`ZG@YD|CnBlF|-UMmsJ!V$9NW|P59Ft@n!(Z
z7)74<m&qJo8yi+V>Rg;D$?i3G=E=#;y*)(q`s{22LBX!CZv$6XtEm6_WuL(U4eIka
zyS%)-xR^R&)kprV2pqzj+0q1Ac|oJ`?=*>)>!0g=o`?hOCbB!bIB?J(zcp@0gYX1S
zRYbWEK7NMzSUTC5B}{;T=@zK{bIN~JwUMDy!UZB;-yn{Tjn&t)CltLEL%WNHPxr_?
z9P+8CxZGk3-^Xbys)ko#mM7PKYNkqXMwk4SMFmQ;7pX~tm?9&%o{bRE>i44tQ6ZZ<
z0}45f54V*A9X_vAaNjU$gnl7sTg?`NFdp={1-MK!5#RpSmcMGQ@enrW&L#p9UpU_W
zY^lmQV(`T8xzC0_-Jfp9YRyI#Dzv<wZsh>bqQuqNI@Cn^lF4OdZ-2f!q{5`z^pz*F
z&gt9h%aekR&NnlPSTz*iDaM2A#wrEQH&CQKCG!>i)88U$9jAKkyGwP;f;>me-^w!x
zOGKhW8_jO*pnm4;TlXumQBk#6e?Pa(VQL~N`#z(N`Ej!59+_CJOk+xq$Dq{Ee^Lp(
zC#9lK-k?rcTLjipjvxUCgMi0Z`g#c=oTcV>rOx5#g97O{HaWatdTnv;u5X#Vr5L%z
zC{+nKx#g3+r0bF#Ec|g+rL4_gO?R{umibw{?*~DU;`e*OnE3hgP6MQD(}T&F$jHmP
z*Jy1$b+;v9y~%|I<hkL3Rz;e-yStRE8kBciAg#xSO$JHzf+EiE=@!u|fiEs4B_%CQ
zt9GWhAU;Gl`hVbU0{Y&t+GaZnc>e3}xo_-5&>WiWo^q$+t#6=muh((e%r9#aTUtDS
z+HI6*)<{c+P4+%?z7|oHpKt@&>+Jk|aj{r$^<mT#oWGrn9|oO4$8A1O@+ZpzMd~fy
z57VF|J$F3Fc>8u^YQKk^_&u+xz2Hw0v<_^n&UB8?`G?)@zJGaacdRFKwi-SQJO;~u
z=Xz@ZL7CQ5@B0_VyM!F=_2v(@{(N7TWn-KD*7sC%@1H!*hl6V$?es&#nF`CVuDvzN
zW|4PHXNu(R&NfEY)>`j2%@w}GJxqk|-~OJ%H(;eqGwGkZVa*PLA+EHZD|33g(d<-=
zh#wRanz6z`RUE=gyW0i0$kZ`e2eJ7?)+eu9n^Po2M69Ihni?8yolP808*2VMW3mfO
zoAuSSR)uVSwQ_a2Q&)TYAgrWak-&TjWHwNgZf`&|e3A-2@zSQnNl#xs7|$$KXYfc0
zn4sWKM@2QF|4YE{T_BTErI5wzdpAA<(jEvKBPp*+ER*x|!GnF~fEGPnA4OqV%(74F
z>$W%_HGE$1dA>h7nvp2UB-8YVfTq=`Qf;y~O2s-C@_V@CE=z}t9ERr)zK`VLf`c?|
zGBexg_{-;Y+u}LbV6#*^mhls4tiPa;o+SB4Awm!{8*Tr}5wkNf5u+!x-M2|EjLsyb
zv1n95&stliQ=4kc#-aZn!_WUs;Pd!By)MVZ2c!O~DQoB}$u*r}xpGmWA?Y*xuEAhV
zTz>~KM$~1$ZWF;`Nug&7QW&@OMsDi2s*o64+7xOcPAC1vS*;?6Zp$}F8Ju+9FKCtU
z`AMT=Jt<Yvk>Nv6&-$yq145ZzzdBz_e!65j9>voZ$_QKZdv(m<@$sVG7A_&oX0Xq$
zWX8#k;AnBQ7bL$e|D9;4M$h6Ww69CME-j-N==gn9SxxQc=e)IKPNKT%%%ozd)+X}%
zO(6(nWn-?^dOTA!6Qp|4TI*OT*>^OhLX<381?*auv{od$VT&|Mp1%3A5P#gd0|L5H
zcqZo?$u$BS8ynq+idbOSVY{>``0>FFOnJ^mPXO7Vxd1)83u$PM1YNeFvmzZ}tANtj
z*0T*i5~oD)Rb1%Wab&?d^_JahlCJ$Q%;X64CDGB*t3DUoVz!ul6yHDHnbZ^UJL)3V
zX3JDF4@J;#Cl>JVEZ;-Dv_(8gDX_Solhg;A@BdY7b^YSa(X8|R{Tt!Tav{niv{4W<
z;kKy&Fg^wF)7PYb&<Is;unuV1Z5`b@b2&Y|HE_eF&KOjR*q3u8qVP(KieRn`H#&T<
z8MMQYXF!3q^3x8RfS@N(OXomhhY2qSn?9A8kdWbOO+u#J)P6pue+<ZVEE?qk-DXF?
z1KeENYrXEq0U(bi;D(S}1ZgKWYv&vpWwz`CyV2~$j6cKP2Cl@C`r#h_ou;NCy-mOF
z9E{6NW5wLzveN6Jz8LyW*xu&?NGfr$;0dh)zR&5m_2GCvo`=M%m}d|CkAv_@!<ZZ`
zF2Zk~%NJLE>9!L&9lg7?M*3aO;R-bx80UpV?*7^=J5q*OqBffv_qMJv;(+0(=7OG8
zsar9;X!gU4maMGoJsKqlHpvSRqReUxI*s*Ob^Fs<<r+VvOXo;vB*RNf0Wng$-(}RO
z(hbJy5!hI%HIuRYRp6u-!Sk-(dQSUMyDzK8Zherk48D+dExca4q3qAX>tQo07UcxZ
zH^51Ig9&VsECnkyeyq29-312vjdD=jVk5%Ap;){nWVal=+@nj-hdz#)*5l!}WH(C-
zyo1wg(@c%s?+ZtlNnsS{|CUcT#lF(y@Zmq}KwxTic6WwATvW7r6cq=@{qg$9cCF>o
zmnS+JNvF|9tI57Y(*wl<+wb;R%f_Z6VI~IC*~ne9)-(<WIXf#Bo}qGYaboCqVRwpc
zPf$20F7fcvu^Dx7KFY_|#t`ut3xCW*Y`Z+at%OA{6SwPgo&GK#kj*ScTu&?`8P@EJ
zaJrcVd0%zUr0?+K<%cWA-L;3YuI}!5y91No0|I*Ti$D!>knA_jcK;ZvNH@Qcz|t3*
zZ}PxF5u+%|O~WCojLjiYjWP<K)sTCJG@*n=BG^1$T^*FPrNj%6{IH$D$j*M<8yW-s
zPLs_;u_mvAt2-mJFae2h*-6O#@1u*i6%oJp;NL>3lSG&z`l-LSCo87Cn|Nm4rlw`e
zE$T^9$g$o)2W-|=W%79;1t@+WMQ<rrD^Fhi`}@^kI1ernhFEw}*la$qJ2c8HT|Se?
zK`89(0x&sJ)?aUfEdA8fl2pz-{vDNULr_%7%AadBfsEy!edzJ>{LmkT@APxgj+$Qf
zaJ8VSD$a&?+l{x7({`2&AX4Y&dw3jD6Juk=B}0KvvbZ=n=lLX*7b6)9v483M_&kbo
za;t1~=r0aD-$r=6ZxZ=Dt0+V*9Y;N61Qm;vudD8=-61-3j!qg$K7&D*tWm0|e}QbS
z4OWhF7U=@rGh&-H>1Fnsn>oh9aab{65C@n8pInaz&`44k^`v>UP~WTnideeb6ZgFN
zoz~xQWHFjbx&yfSGN}km-Ss3m=)hADmymdRcp&6;4=e6oUgjxu_zk`$?6l#tMtKQ&
zzW!wL5bImC5A8JLunAa(R~1V6E#-eODbr*^;C&>RF7&E{jhWn57BMi9g+#2R1KBTk
zhvKmrFDIv_;&fOqc!9|fKAryf4Gq)+T0n*MeEo=>GNT*+t55W!-D#V}1iunW#NtYd
zSn4OY({r)1oITg$#icy4D|YRx$f&44v!y%Rj^YLez<Ho;b4i+@TW@u<<6ry8ZeeVk
z$3@{T4{Ocr{R?j{eJ-uGHlVgPLeGj?BvVX)5>@j2p~%vjj8OmAIuf2jzKKp0KVLj@
zLTcC>S|s5jtJ||mRnb9qA@QD^TUa&*1ZdKO7%8EE`_?WS4&cjmFh7DSfRNzWY+hTl
z-jXHzD-;(uhosDRa2~W<ZwGjjKZw6KXi?P^u;`CW1EnZ>=ujavA0HnT6;%iS!EjP}
zlLe^rl;2H!3bh|jq)8aYU^)^bczgl`zpG2Io+KiJo{!{07sb=lv%~vAx!yyXNh<xL
z-8!(b+WeT_8_?^w-DhXd)ybrc>!Rql|EAQpvV#8y^+;;J0+q1V=HYaGsKoL4CH)i)
zF%AS$fNPV}zCtGRSy&u^vQ0}%D~U$MvpXOdz>JW78LzW(u(fZ`1l}MHTphfkh=CBs
z0DOgstadE=)EK)B0AtQ+yl;LN-V%RjLl>;1AVf`gi<WPa7oGjD)?#6&zr9_vOmUJ{
zPxk!eS20;KRjxBQIYqliFq_U9>2uE2Bx84io6yi7^_=wHhc8!;Iro2Az)kX)FqLfJ
zo?>&sm)(6rBPT4pbyu}gMfqk`c&M;dC&31Djyb%!#CMo*zgJb<j=Y0;J%lCX!rHwy
z4*!k_a86mO%h8IUG$Rhiboe~kyP2Ar0^81T*vZW=BQ|z(Ym3`-5P-qtt9G#nj8gq}
z9yb{`!t0mUsosl=3jhN4*gDv)rcL)paT^<ZAb2dh@HuUuWT>_;-^VJf#zm0S*Vkj5
z*noqvMVlf;+2i7BySF=QKbl&zQ1#c>Xud#@$_ch25tyY1I~2AX9d({J>CV3(Gm2AP
zoc2d|nhPo_j*nM`c>p*ND9YCQY1@9i8M;(=006MhW|z=EAgm>x!CCp>m<W6;Cx?d`
zd73oXe@<b2*MMgMHk<$)Y1$9c<%<0Le6YRJ*`JH#@bNgE@pzn514X#m4Ng~^Kj`V5
zq_bN^@+e43R@Ys{T;NT9r;;Za_}C%@SzK#&!pF-CK*>YsT#l7-YPypOH4FcdrMcvL
zOiCfR)A^6iqkZ=i28MkjPFn?eTQPG59I$tR5bq7@SAW<aZH~9Ix42Cc@CZ`EwCiQ4
z{aJwjJ-zZnu{3P%kBbI<0A5h1c0!1?9DeXM9uB7wp0i1o(*UNb8l*KR5L^7~e=A@7
zGyNQw!s&mapoyLu%~zy>%(xdZva;fJeaIr4rz|Q24b~V0<_{5RfVa?4Q=f}h(5Mt`
zoug4m%chc4bi=KX5T{j^lyI31lRv-SZLlB8Ql?Q}Z+44J;?s|HQI-}LGmW<e)Y*Ha
zp#e3H%Vp1u215a`$rpmEsw!XbZL-Kqgp`bmzB%ssE)f}(uhv_!Wk*VQ5*TWC-4zK1
z!cZx^8^I^yzBH*#)^4!I!+SA!RY+Bv$l{AZ#+3Ij?{cH_dwB*tXA`!k%F@K7xAr}-
z6u(~pAB%;BWi>1ODXYf&p8@#7SElh}K1WDoU5`zRQZ9XPdMK48KY>wJ?We7t!$U-M
zHOi6ReG>qKh?q&>trU|XCE<Gm>x=V?odKyI7?ruXan44OU>S7V-1&tAMk61!<VKS|
zOD!aSr5d58%-v8%&f)VQ@P%JDz>K=A%}$`PRKSfPcB3mP|8urP%YOCbt-|^dJta5v
znT^YVgoP|X%Dhp9R+V|80bx=0eGE$8V_j@;EXgj+dKoZCEA?8F>x=90>Z_|4Tiq0Z
za{v-|T6mqYaHY`7@fsa{#ogXW3aG^#Ux8=<Z3*w9K~7sJRmt$`5y!^B=$n2ot2TWS
zOe072As`_Fa+UP^{%G1Km*4DFFx`h!`F-5O)6lHNz);?%OvfahGmH(IH#;IP4ORgl
z^B<N2j-x-EMZ7+H^-?tc$1ET{AJC8qxW1ZEc$bQ!u6FZ!Trz{~8i2Ad_9-D^x3}s&
zTu-Eb{~uK><`Gcrr28o&z9VG%td3AJHz^^cvk$9qa)i!SOY4)a6f`a41LICXL4n|u
zZ0bn_Ehh(EI&Qr9d}SRQ_iqId%AN*dh(FnHZtjoifS>M{oS!>9K))qgbwz*z?rn>v
zW6~vm{`}{7x#8Qy4FnBb8awdV_%~6^`K)T{EvNE;5+f=2@#Cy7JYl{9;LG<mDj=+z
z#2@u2A2HEF)D-0B*V!zwI<&}RVkX5?$c(44wTegmrq8d?Zs_R}e4Q<w@s7uY8v);D
zi&cxqYPN(l9vkn`L<j+ABeqv6P_04}n7Zfy_BVOXMQtGI@*f8Q$$U6hZlTU3u3aoo
z2u#eHpVkXing6xXJnzOxb*u^!EwItxLe{AwzCcp<_4P3a3?|(_KI&+u*3y5VrTu+%
zz{J8b1+u`t$&m8f5K$<35H)IRM{Pf&2~N0scvx9k0evTFKGZR~d2mo%RK!??ojnHy
z3k!|_?t^ZDWL!Zl@1GL=cFJt+{?XCVwZAU&mHq!(M4nwHFL8*8W8Q_NrPTyLj8&vk
z##$M4KH}lyZ==&>S|z5H#wr(?y{`q4Ks~prO20sIiybCpl2)-R-AqQ7g4x5w)U@w~
z#1m~Xdk@H!?e`^XEiM!sk|<CY6M@UkwYAE!vK8rg4BQ!%|GZaIHAFLW>4JDG+^<li
zLMTDsg}#}WDx0yhv-9%u8r}rQ<mPUHBJ^MT%7sEN-61V4ZCspEfzdSFrL-998wK%o
zMe`!ze`cbkGA`I<+)h{fmB_^WUA%(>!NRzp8$?<|BLx+xlUJUSoX=KPL7@_o6SNWq
zP>%2(!2~ix!jfreiL-1Bkg+7>Z~?Jw1|8lt_4PqW^))qCGetLZ<yAxS?jrwI#w#bf
zs-U2tvJ%L=(Xb7FU19w~c9dvVHZA3e`uBnf!zj%u6<Mkw|8jVkuB5QAu(!9jr6t!3
z;`{4eF5;C=s8L-MPDKtL9_@Ptt0{zGS*z((tD|5d#eb&*JYw<l^ytXQE?0h@f!-24
zyx(PIwCrk>39>P`=;-*kxW7K}SzB8d*dFDLnjTHmUkhUilih(g|9yFFfGGS0T8^o)
z2{fz$(#Mou=&XncGz|{j#e%9Y)NE|AR!0H!L0}#JJxCSY%`)A7&rB&vOG<8*h3t7Y
z#VaM|oF{A$^*Fly*8v3$|39z$Z%x|fk=A<3FJ+C7jGKw7OsC7O9X-s=>1U>q{_m3p
z(faUsONHXz%cQS<Pt(eU6q7{xrwPGBbUwZi^Kli%tjIgp<^QF=KH-<Xfq~HAV7Bca
zX!!VlPEW(VNFVPXeB7K`J#K!FrKT>%#!iB5!_vIHb-_<Y7XPn1%K7Q`uT0A7^IypS
z>7Me#ECf02-&q8k==X1Hw&u(8tr?Z#abh0l?d@OXwzfa>@=Y!eeyReBkOp~UK8Ww)
z!jTNWizbD%Jzx0*6!6b__Kz$qJ^RH9`gH0xU*UrAN;Rj9USIO56tXJSE8_t+9zh8Y
z59jCa0L~dL?eJod*HW!ZO^pLU>}HN+?CkWwOq7vHFoS3oC6iF3#$wX{dw+3tetxc8
z7y-6-;e{Z#{$QKONT(k%wR(l*@9y#M%}s7+TX-C01w^v@QvdDF@6cLs@WQsBlf?S&
zG|<7JW-Oii=Fb9QS?}D<ax~$Sl7VTO$wE~iBO|ufeyj{RHymu}^vN>!%Hng$wSdQ^
zu9A|&a(zu8%#E_5qUB<>d<x?UI|qlRxc>?0z({I3@<y+%GZ|3l_^fVr33)qu^XF&X
zC~1o1?qI7MF$4qzVClfX5Ck}~o;Y=lQB?H*UKfW2T9Ehs?U>!&sR)G(*4b44hdV&h
zY^<!_e!z?*1tQRx8){JFkivnDl=Ll6#2)oMg{7sXYRM*vXGn0cNL_bi??+Ox=|XW|
zgz>{e&1BThz`LTxdUlilHlrzI$q03vSDamn(#M}V>+Ag0USaW&scC8Mo*gma;SCK9
zTm13-g$Dp%?46$CVq;sFnRWlw)BBOl?KIWXbKK=`5{jJd{csr-9$wSYL1aAv41w3%
zv4xeVKbfD9!5W~#Y!UOiJN};a2oenf2YB`B?^6t&hV5v=z*o2U_lSr(wWgp)h@CSb
zN;HUAGv_NuMOY|O=KbZbR{JdoeSL$EUzS~t7mq9^^!F$13d_rTAw|gao9y>?hn%S7
zzx(`sWH7~?9&-D#)^hMi12{m`y3mYQy`c&~8Uv=ahwXlxDpM#Oy)AVxVes}OnJK%_
zS-QjT&Y<41!QY>s(coIQ#uyT<x7FD9`995UxZPogk#%61hxjaxZm0{v)3arz@dRKY
z$4YIr2Qkn<1VLHq@~3fIfQt(%<?QrjygN5i)-zV4SRp%fVyP}A*2c+6<;w}N9xiB{
zt9|VP9g6Y>ExW)n$Nv184iWJNn@RtNemgfOCzdN|pH^EFBCo}`Zb5nZw~TS8BXDX4
zgJz1EykCw%^Qn<#D%Fh_!<A^IRvoSzH!JJAi>JrO6lzjlVN%lEu=B&I8Iaa)E-%MZ
zCZvxck9T%jy(V%^B=l@on|2QF2;ES)6Ku#Gcft1tT`hdR&+o_MV^LyShjh>b0)(T9
z-MF0($*ZpC=-fm^AbFFYjXL~ZQ6W~_JkB0(R+4CwB*;`+iaW;;SCMv^nV|jsg`nT<
z%9MI>5~;4Pf)(B}>L2sDJyu(93o%ZaN<`b-x<CrnK4wj~sV-0mNKQ7VH4FN8ylU}h
z%@Rp=dk>iOAFgyL33Fk?7h7CZPJxPDI$eX!W&fUu55jpK83OK*o0ynbuJ|`R(>OBd
zKl7Duk7^xuqR-FaL>DX4&>>1nO1k`MnG#BdfxijbnTlQhn4kMU?T@vdGbxhz<qAXR
zaDt+u27U>JnAo7*v(WTI9LzL3HT8X8IGfpUqRmtu>MXW$K!JLdE>iK=oV9AB*2N3V
z25Z$lQU^eeDk}2Ytmnj4(;paT;{|*!TRg6iWSy8(JlxwtMKPF|+1XVe3nn?IrdU{M
zggEqMWd5wTOXMMw1qtuCxEUC9BI3IWZgYN~uhwm@ElD|B^Ae5RSb18B`%o;CNZrqr
zY=BX=AFF@9WdglbqLd#m>uGFk%xSy&us^mEfk_B1AfWtf{QLLslfPd)EjQ>Gn;36x
zl&PuMki9*Z_&%0_VBs$-_Fb1@$2lxwAiVX>mPU1sOPx7l4i-rzDV1{P0;`r%xjIJ}
zb=JP)-ZA-+DDS6S8^G~&JALH<r#9v1twE5sdbqrSzkvU;!a3lNLIq4M1x_^X?bFk@
z4_|C;=L=<4Sk0sbp9N7bz7IeKQX-SrsuXjgNH%%vvic!4S4*6BS5{Oc4)e+JeYD>M
z+a%5l5r4j+fx+|c6f*TN;Uo)jt;uZU^gbvEivce$*mxlNFDh!M<EJQiNgB;s1>yg{
zJ&`h@56Ha&#hd!24j&0xH8gT8PC~*HMYkZ#LYpOJ9-e^Q=?#G#nG{#hFT*J!Bja?4
zA_+H3b8;*VdIr$NVYpHY8r%I|l~e-&JBgO_dYT4JSIoMCqh0>*sOjwv#+&mZo_B|?
zUjBNOl)}UCq)EmX3PV4E_1RKXQ3=GeSr|`qYgX0J*r+kt_-W@`RMdaA?$hS-=X5gH
z$B3xA3b0NloyPTFd%|bydhX;U-U=C<$=MjM)d_-`WWvej!zoM%R;Z|`L$LRJ-uF-s
zz0jo1d1OWZ%L2&RZIaqOUAE1sRa6pAR_=Om1`#Vu_K<NVMf&gI4ZnA*b$Z@lxjdRO
zy$&bgFLIcV8rt^JsSRUI`M$oabqOM;Og1_2t#a7ji%A>W1gZBiiZ)nG7(HKc<?{Z5
zi<5~x)N5_rY0ZgRs9b@OS#EL=@%Wl}+TdJ9!hCL%gDNC@l|;87BHR-z&tLPd2lTF@
z-3so$Q6;-<Rx77$Bc`W!nVM1>5+{?0Ed<@RmS<fjg2wjBsjeRCvlUu}hTYGxck%2P
zY0O5HvU`KD<R3UWkvK)T+>?uZ6;y^03BqPTp3Ky_%DIk>s@BX?5~0kjM(m+oEOx_Q
zf544lA+mF@!$XgiW=^Bp`uTst0VWt=5Ju`^M8(F=e)LXaM(t8oEtH0yf<3LXVDfo6
z{+0B`IVCBHdqb@xmcuv@CIJ;b-o1mA$P!+&ya}1MiJ9l&3AX2VNp9{`k(|@w9w>A)
zYK*xTb2QV1d^92zFYPX83=ZeuudttUbrfSjj~vECbOLDIqY;Ndr_cz@(X7ckm}n&{
zkX_?(IX)Q?L=hen4k0xm7VzEQGz=}{UCqiOCJFre{OloVveR}S%9k*JJo8zZBNdCp
zn3U@mV<yOBK9A0OwtReR)^kwb$mo?eI$_(~FYr#ketiSiqe>>qNcv6m2m)TIQ2GJf
z^zM$nFN0QX3sQN1A?lcI!t=OMFE%f?HrKFYhy_5?gv+V~BZtbtp9MRRMl7sA2~yy&
z^Ek~9Dw-zG8yH)4kiby#j33q1)J9UUwXw)Pd~m4i@V+n)fI*VQJFq*mlHL?djmGCF
zqq;>EGnSP-_x6oL4N@!)tF%&~a-gor)RV%Qn@RfWTzK{Wdlz#0k!gC$_i6keKccsY
z?xXq`9{BqPzA6ZnP>$~h4AcEi9J=+px<K950{tP80+I41ZaqqQqAaQbMof;5Wn<HU
zqxW=2rDg?HJ+PF+9#_dj_q_@D-UXk=gtb_5#j`r3)Z-WiV}VEzM)7oSLx6{8(2!59
zpkQVWLmul<;Av}0&b&SxbN1JXovsk5{?qg5`TDYRer~_W{jfQ@F^=~QuF#G>!8v&E
z8@i?rLfNONJ8hU%PtyR|{i_j)qMPHTqtUc)Ku?JB#JK>5iykUOiD2vY`>knL9qkTe
zd1jqc0?@1^2u2lvfouPYKze4(;e&A15a>MPLa1<}K|Fan;gf?W2&2-aOt^TyQl>;l
zL!_Q2jl*#eH2^!e%K4=+@;}+$7{D(NMM`W)4g3b^>p<DHyTLe>64!+v26PHUxgQC4
zqb$QC!o&T|V(w~XKJh*;)`*xDm2Un<SZ%#S!J;aG&^!PjW_VXRix&nQHFV1NDHpF_
z<ggzlJfqyh<v17%yQ-PKEY;$B+#F6h$;cq^%YCb=LL&2raB!}FdR4J-O_MMM9=v63
zE6}h|UuN>eK3J-fzj1AQxJscaPJBgP{Vb_vMT~>fEHI+WbG26oVw={oiqeIIHOa&|
z@b&NJ%70c>Ef^K!u@)%M)^zvJb@<36!;_eSr2#Onc_O?0;yjzn0p{mF><ug-KKFC3
zg;4ipR2!h*hWcZ-ydof#Chd8w6igkJ(OGQTB;Opb<RNGAU39TilIR_c+T)V`tM)pD
z=jCY=BvH}=_Xq$C4%gn_>MbtdTU+A;FB(NlgB}v0l_URfy!7MOaF&2y)Mr_lGk${9
z)O(Y#ba3!FmDWO&!e0&B0!}2quU#A}rL?$wcKtJd3KIS4DbbL4yityqh=_=T_{Fgz
z3G2<JsXsFuB4S{8q}?S_J<Xai96kd>B~XkV?iau}C;rTx!yongrC6bpQCCXpVyzYV
zs6mhtnik=aftFVLn%iNUJ{xj>1p5b>*gN%#!$B&9Epfvv>#VJ55!k{HK@eMd6x^Vt
zqsN3~d^X)2qhLp3-^<G{7!K8G6Np)FW!%&<lA+XUf;@+@bhY2}mC<^jCYSmU_W?wd
zi|gk%Mlf|$*$n%0<sZ*O`9Z3&n=a^xQ_>G(;UzLMG6L&5?)CUb*ghvMt@L`@@9kTE
z_mX(mO;Jfu4`4H`hw&2;o&D+$11o%E$f_V5G6MInj(o<fE$C*Y4j}Z-@g5V|swDmv
zVFne)GOMPE`a!+Y-WWfW%SSGGOehnlC<FLFx%(QmrYxyvif2K1^xE~zXBT0fMkmX2
zU@Mgr6=^rw`-5^1TrW%!GyjG7Zwy+~zlT$7k{E-ui}*%f+@9C$Ww~LnMU^6<@+6}r
zN|0N1AnC%z0IM(O-JeZEU=U5Qn1onbmQY0nnZe;_^aQ`dT&y;NjWjQb^LxIxdVMju
zy*2AgQ&kzy_MU`6>y4{+emYq}CV9Y6u5KVL2oy=XI`|<fDoWxwwJ}tRL>~&Ag6QaT
zRW7gF>5&w>{utt-vUHje{83%dhqKgtC78)G=i<_!r)Rg??6fg1j}u{TX6Es9+y2vz
zPfkwGegxouDk5moM1f9Bc6g{a6<?;yIWBdDg8=LUHD`b-=y~;p8FgqfOJQmi!pz9X
z=-~}>=J&n_Wv-7T)hX-r@wQ{`=Y?BI+UZ8GyKeI_ygZ}rr@OPCwrioR7-y}{<g&gb
zDMSLk>!m86!wSLjwR`MzYZ!~-!^&<n?J5`Abo$*5IAtlPC?#ik(K?aJ%QrZX6nq-i
zFf^P5m4X9yeCDTO+cmsaSHiA#5lI6BKdyq-&LWn#rBDeTXso*8|0u}z4-yNZu-g|A
zWVQWlm9Pn^B0{o^fcYSc^?RC%&LY+-A>+?an!y{lb5G@5Jj<lPB}K%a_R-MM1EnpZ
z@RF3=unUFr#cvG71;;R9payfN3uOvwqBTpE|DAUAs#VaSVwP%*_pvH;I)s*HR8bcT
z%q~D!G`svEk_`|Ez1_>4Q6$b3@OzlbFXnNz$z(@MCPi_Y$jT)7l<TT^B%#(M3=PI7
z@Skr5KYZvN&s@oQ>;PYjfN-T=nSQ)jBan1n(h8(Fq*mVn-rnN!vh(5O?`evUaFA_Z
zP%O^YGufCNQAD!&^+1W)U_NHPN@4>}x<6BF*a~dxOpD8kJ&z?b9IvJC1&hsO&TXm6
z0Wjm|THUZ6ls-{TMeupK2H|bA-q|}lvtw|bLfc_WV#i{k^n*1GD*duM_}1eR=lWy?
z^UK?E4ZG-=m;uQB<JDAz1)%DDp7vpV+_(F1dC?}RCas3Vdv;+RKk)KGu)?PW!a~wm
z&C9x@fte1~VtK?}s_V{(2<fYRM3tJD!oOL=x^PHA{r&!c`wwWn!>YC280S7}VUlG<
zXF~fraCEu%8IUPzdM@&IcuBt0>x8edxO5->RooXEiYOXm!@T$6dD|T?+KpAU=-eqp
zNlUTmERM55)tH+9kR}NuBO@zo1QTT(y}y6=<73NFJC-DZYHMK>19POMmDOd^1{;A?
z|5y8-B_lXFJ5~3C0=n)YG%T!f@|g(MX3(Eb2yDo2@y#4f8CzRhlP*K+wP9hBi`(&Q
z&`Ti&m;AlBFfr(kIy^I={)o#eINJRPjjTUSAdeT`CTI*m9f^A3mxAZWw{L|!E)R<x
zj&<?QtfmqC7e&g2w8sNRw?y8tC45y47~+M;W&EEXiz+UIWVf-K+d>KvO>0n;%3~S6
zPX7NAuV_KrgyA5Gx`zWv@M(msnjE<Q9oP)gjg27*^01%a!^Hb2Y0BZ=kHoJ!q*WL5
zzqG7T%r@Y>1vU*fT;OdMJKFz6cG$aYBh<8qc0Ra5&u`BQ;{M^v|F~f@2`mEXk4%YQ
zECKhB=TuSbfTR8o>>z5^f&<T{IrRA7+1h53pIYK<U!!Q~j7M1&d_~j;4`00#F|~|L
zihd0JpVtHVEb%@gpt^zY^PfT1i9AjlFNOJ>KBjEmWg8vj`6i72eX#%%<!!rn!Vj$V
zNNgktByor!Cpo#@o!=oF`r#M64VR)2bat+9ZM85p#TY^1ItSHLO-&8`!q?~PtE-fY
z>zf+{WQC2#)G#W#tk@0ljMUVyPed3PJ*>k(LPA0Y{ttC~efJth()OGV9a3lHlCYt(
zm^x<Dts7F??xQ8+RYY<GYzX2%20Id8v(y$ZgoGDVa`O6+ZY}<nu?0vn5%YWN*IV9P
zA6>Z}b1{3}#sicA4Gqoafr5tS`Ec2Ajg-Y}zj<G&bEgbn?e|&(J`LR35VJ5QgEk;l
z6I4kG<G?}M=dyA*Sq4}HX~-S0hO6#CDtbOabwVzC`Wt54!R!t3ZwGJPo}V8^=tXj%
z-@5VkB7+e=ruEL(!T%O@Q2zNtfTC7-W&7}NEDN=FBOuzMJ|_0KHw`DP`3{KBo5+n+
zH$mNAd@6rrV~%E>HNSm;`dNv~He<rnhAUL?4Gbez8g!1$&+m7>_D`g9{G)GxBY&Q^
z3ICSR`@Rh&xmZ3k;mn4oWZojjl`%5}WcKllk8`W5iDq!vDF_>#7K*a_FuPd--QA?c
z3I>X*vKyZb9;3@kOShJ)lnWt7P~6V=LAM3Ne>a!x6KS@V_>3g#&MQ8<=CbsC_UvKG
zL~iJD6!OR$+KA&2*w(A8sImznzn4xuhU3&c2z;Mdv0tpWk$ZFIgtXP@3X7F)!kfI>
z^pw$<EU3{96BE(=XfGx^OFq`WD5r-CWi&uR%V~YxD_>b$yi%3P78wL`F^%dVUOx{c
z<X<p%(ksbosmMe}_YKGzy-wdhR~B|EDmx%4Y3t}*K(4LY>Ua9WzMJgpYw~a^2EzyZ
zK99yLjqQujD<;A3kU-9hiHHc{_r4kC<LB?5s)<ZcAv80~rO!Y0eZ2Pg4#r?}T~Dk_
z3$Ti^K!&fkS-M`VnHhrlM@qqs1LHc*r>lFs9@n5)A;Q9Py*@muu0EeG{Ni9GEiK*A
zv9VCG1g7-t5217o*V{ZmSUFwyDJd({?(}5<B{^>vEOOTE*+!;>*H#Z^7=dn2JjG{Y
z6M$6Lw5xM&HoMzv=$795f9H4DJ_aga6O8#-jwH+3Go}>?n}DY4p@D;p#zu88Vp*pC
zmsA6EhI^lWr+Z;w7z5)?Ep{8ICC*?M9|ttwOyyftw=OSYSkL~OskE(417-=;p*PSY
zRv7KPBA_wE`+PI}>sLXzeUP+vhfGM!!8ouRBm{(X3S)Rb#051d44T9hCXi#T-Gcy_
z0(0R7EPl%2oHU?@q1ULg5fwG14L@6~!L&64enxMIi$g@aS4<aD<UoVY&s+BbRGW)!
z4#1Bw>C~YP#Nu7rcPIas1rQJn>o(bAPK4y=>m^Vk_PO7y_>TeQ1ja<YdxB5_0T=Y$
z&TV%(=uTx30nNajzJFa`+UOuQ`{znkDs{QNvf{z6%;NQ!9~i*aS^!*ty>^hC!zy~q
zDoB86d}ly!z3l=tK!PTG_*3Dh+wu8%VHE&1I>4T}J$JV=HP!5B^Z6BViPI_nFC@M~
z`OOO7uY?@kLnY%T>l;4eb@Bu_Mx?zfvlHdx%#Aw_#GM=#JjC`KQCZaCB(AG7&Q&^|
zMORl>?iBtikxl+Pj%2#`U_!ryLgq=ZAeR=IV=!pTH4Y?2iC@^(-GkIjWo=+|mR4)J
z(V+9R<V$b;V5ke|DTSMx_q?%=#$m~EzaY!_costYmC|Od1^4#$bPcl~x1<B0<NJpP
zurg>3>tNKe_qcZgj^qA(O9gPcMG}Pe_RgY2ZGwQSWLh=e!Z%Y>HDERf{{4GA<{Vfk
z%-`23jLj~mt1tmuM>8ovtx4bv%3IRf3V~6`&Q~1Aa+#Dy6tpHDYBC}PclRdM`Y9B0
z6i86d|1zH`lK-;IZh?jvYZD^KEO-Wb*jp?n<bmJU(xjUxMYTJS%+MMKCQNQV&z7u*
zqgymBq0?-%d0;2%12`m|Ob^=HS;&)!AvoNDi}HJpZp)GELq6x1Wn4nS1a{aQVU4O)
zII~)tr51(kHch-uTnJRPeDS^0wUrOr1q_tp?ipP~2)SyFHZ;6%7QqNPqX5)2n9|il
z;RJIQz<Y*d#2S+EdMUv8qC8o#xp#v(A^tnO)9uV*q3Q(SFW=+Tk(a*%B-Nz*4y22_
z-NGWhO;h-8SlSnRGH$#<z<%s-+=Ds$NcUHjIlKTF9u=mx@$-VPghZ>m1HNv0NC;0K
zz9SKc9M0YCU21@5Xrq0(ZgJ81hC##b?d~_I!5$p;kuiy2=SAn|DOm5**;2Vcn1*P=
zPdjJCT?rBFc8k>_|BYcsqf~+W)?GLJU$~DwmtY90ei?IpXc+nuIL)87D?_s4lHu~B
zr^@U3a#j)ZMZ~W$JllivnU0Pn8|C)p6P*c-CLFOZny)8b&n0H#zReo=4G%{UF6yd0
zW23Ul@Q`Uik9=+hZSI(y<<@hwJ(&WX6a@>JpYHJ4OAx&fpvZsH;Ns2&z+BzFguID0
zJ+G-}7vaO9l(5XQn(4PkcyCIjDv>~WL)yQ(YTF&J0)WPSZwZG<e~+ok<yNo7>>4of
zdz7I$ycPpcz5vxnC6|tv*%ifr5|qu~jl#5Ihq6zj3qhbrADb^(Y)O#t_LcwvflYPN
zL5z}8ywnu#S|4=Iy~Ct^^ZFLDWd|j#Br@tM8kY?RFT;Qp1J%Y8fb`J%5GgF{cSitR
z8`#?q?u~%q2GQUow2*uNU@x7<GF#s-BXctW=Rd3*FDwEWVtXSN-P7X0hj6z^PR6P;
zXYhTRM|Xol11*>lz*&m>KKpJAR+oj8j>IO`WwrmaodL{|!oS^8`F^rpBKo`aN@H+(
z`tLI|1I(qcZ^4DwR$n=AvbdNMJ*K-*TmTT3u#VdT^|fN9RGktOmK|?@6Pf5p&}lw0
zBH~ro?ubhCejrHxB>4~!0kK;E+lHnNH1v*Fl$U=XRH)_dhYCE$2544AJbx)z%JZk~
zVs$2QK<HaEjE{uBiUCP<aJXn9pceU0`SlTF1^Io={HfKBR*|48chi8(HfQp=sv1g)
z55A0vR~ttJ&XC->9t$dWgbj;eXx-an>?Ae4b}}Q8WI7nM<^E0wzj2_ShN*H$4B_DB
z^IdE#ii7nqpbJ9n%-s=HVav?c4;vj1-C2-A5F;6~y!!g<N=iz3mG5CbE{X#O^CHHi
z*%hJ$ON5?64kn;mcfLePZyk~u^Zom4cUT!PEYDTn;3xa<7j#_x^<q`gN>6{8>@6w9
z$Hx~Ut7A`44oPIPL&isy<)e_s2wmL76NEuTi~>gW4vInN8A#nBTt>o-K4R+U*N}r>
zN8-a(bC`_+0c#j|V+<f(P-v`VnJEx_1*?zrV;J<7V}!szofHTo;DMdjUhHlXSSXQX
z-Uw>+&qdZoQU@V?gTiY;c{p1&FKHhbUrnP0K1>PmR1-0D{||F-{g(CCb$uI1cY}0y
zcb7;?r*wBJE!~ZDD2;$fNq0-9C?Ezchzf{wJd?ez>%O1&{R^Js@Rz+6I62SnT5GN`
z$N0=aS`1lwZ&^4`<sNAInyQ+aoB!H6eo;zd6&Llcz4&3!p+0Q=Q?}F6uThuCp*@Ph
z938-F*q}aZnL5EOhdcpJ?4G}|-jwZTHbh8jaCAxpF5jaeVM)0$3CLA%nc{`l?K_S5
zHkJJ3%tzylFb`kLTevz`QBGHN>FYwM)j*0c#ttMO<^4Wj&lo--`r9BgcGol5%$_d#
z$?d{B!U#BbR;Yg_vD6e6Qm3UiFgA-yTgUv>(Dymmoam=Zl>#$s{gZ9n+R`4O{wT~*
zYyyG_1cJjgeW9I?HKmo6xVX3xq_xjyYhErYDUIN}>3#eGR~mKE8k1ID#gC)lC|;j%
zL~h3$BeS@Cy!uE&rT*x(HV*=+4IHR~F3Ta(H~L_$dpi4h5L$duHHhst#4pSgs?@(o
zNN~J7@9$uKfynKQE#UUL{9=@Zc=frC=&%knkBBX)m05JoxYyB7^Z2*|zHz$5k}9t1
zCMG2G-&-|ZGSzOHJ_1=n%E3KjbuezVOKPsZVMC2&M(OTd((#yKk-&HE?e56SLgZs)
z_N{Bow+%2O7)&%OGzSM4BGI@1z=uej4QJC`&yC>Q;w3e#rDUnCYu7>5#P*+fTr%i>
zSSbE`dpbWxpl&%1G4^907aH~bo31L%fzGx(qg5U+aW+o);=1m~HW4AoSXWe?>+=V#
zzd9^Gv!wVY4^u^;8pt+-AQ022vf%KcYLUm`Jr#*GQ{DPHr_N}Te8T85BLhPQE97*4
z^V_MvG7&eYVsjWDnN)YMw#LjQUPo>ADWHg7Vy`@@-J;rrcuJqj03A8`vuBq|Y03Pk
z_Ye?Rn3yQUd}I!NPxhEszb`eCkKHk|Lq$doHF*9b!%A;NnO@e7fD4J=UX!vLOaaDi
z>kPEW&<no9{0W-zUA`Nm7}cm%Rbc$|3CmmI>7V;^7t74WB{bmtVlj6M_fF6BK)c0g
z@cBZGsUV3OaZQ1;tc=WHV0_CMh-MwU>_|WFEVo5JzKcfTl%#Ms9ODs7B2Pqirf70)
zLBTf?-XYJyP)Donk^Hoxbi|~P#6++vWu7ny^1_P_*m=**hSo!#nfE^5yI%D})_C|;
z!zNttA3b_{!myrQzDRYtyQ{Q9L`WzBmn3+|l(4*1ncum+b9aP86>f3aRAG{_Ys4B>
zAQ;gN?LmjtDq2NN`{o8Z+<2iXjhy=8xfnyE{o6+$Y|l_u7(M!BPqyuAzqefHvNK48
z%$uG$;+@s*1ju8P6azV?Jj`XO;jQkQ%JSX7v-PJJEoe^90tV9130Q<6B2UO~gN%|@
z2<(WZ4qsZRr$G{c%}qw3ATZ!yU0BG+N48%KTRR$0=hMaM8}-Zx>N;p20AK<6Xfxp*
z=+Nqt0M|GH1&8V<6=o?`CSnH7_5=wpAr07b0<Cei=OE_=u`W&M!l+FhV=I@HNw&?C
z-rpJ|AYijgP*!G^)va0xMt|bvg07X7l$5_ftuCjgb__NK9GsNlSa9S1nGD&B;(>y7
z@}+pxXa+mR#L@Q|EeeVz208!r;R+7prSCgCCaoUim9*^7n1w%l(6zBCgMJ4fP71*~
z(A<pWg1{l&!F0>O!YWNqPw#wLSa12xmu;L8H}}?CcX`%-K#^_M*#B&O`(0<G0}n56
zNNHSB)j!418$KaINq0|hNN^>OiXnO+U@`I>tq!t65e~qY7~v_p&axCsko-C^{iY^<
zet_GwJDf*h+;CeeSIxb7xEJdzui+Nr{?%O&N8e`WeVPY)GvbEJSjK0r{Jz-0Kbyug
z>-uFXiVgVCOKlJEMUs%Uk3c>8$DfRh5~PLgcTz8@=tf5yT_vld)9C%1qgIbh<jEaE
zI)47f(eyD<;rT}bZl?!F)70fBtCYFe%3fZ5WQ+-<^Pf6=Kc4LKnk|>>)s&TOCP^D%
z`#>M#Q?0o_w7|hny3p*Zr~L!^LRg(4N?zwj?7p9yWur3StjU)Qy0;8%dS$PRdCH;T
z;o1jrLtB%^UQatQedCuT9Zmy?IQHOs?}1rEMu}v$?de<NcFadPeE0Pn?Cob-J@03q
zP(L;4^vD-^%CQ^RVsby1#^@g0iKe@QyoZCqhM;el)95gdZ}@`p4ts<5?-Y9F4}BNN
z8o(de`il7qKjbADU-`$Y%ZIR$p~(`us6$5QRIY%g(Lv{N+Y@#<WpD;Sx_zC7P+nod
z#@(~ftzdE5p~qG>Vz)x~%`BK5aCmoPZ)9PPV*8tgdf8r}XaNo!&n*tw=VtTE&A*wB
zYm8dSUOpE40?DvQ=eKahnzm7Y-_qLRzHAtMF)+ySxCt|f@1VrIzl{f1u#_y!>DT=0
zKc|1Hi8$M&6Pg{j;@f+$dX0x#le6C?wicKbozkW+>fX@QXqpRy9T3LI%3Futz01t4
z=|x^ma&tAJV+lgtCT~bX06i8h4xOX&rAT?>AI!XN3=%T3JH1rm=<$jfg&(J<6-21%
zP)RE%EvDLtLl#Qpd9xn6ZI=A_d->qxG0h^5i^7|>vziiyT<XF?b1sL9*RO<DSwUTV
zl{|vFZ4&MMOHAn5*+o1F-aw}U)+6@G+~+24B46CK&p7(Mn$3D+g*_RHpWaejeMVH;
zt7y)r>^J5{i9>O;QZl7tc)(a{cg->V2~HL!wiZ<$HPLD&Iy$yR^cA{X%USP>bMGJ~
zP5nvp;dBY2{Og#TlN@0m57e*ubOUWNcu3{N8RPv`{pZCDKBXOAWXv)tVhiff(_t_e
zf0|@)b5yHux6;gYilo!g<)NE@S}R*^+WmR4)xA*W!;MGi?Z|jx-$Ud2_)u1*!D{4@
z6sH{bS*v^u9UTIl`E^&n|GYl?j<u08GCexp1Kr3H;m8ju&>qyQ`i{){#Ln(yFiuY+
zv1Fb~S*`a*xQkv63t;(JexE?VVyc@bbl739#QKYX!o?qW1O*+mkNYB6{g2Q36Kx$G
z=fDXvW<h0nu*qMt^`|CyC<Vx4?JY(f0jH$9;ovaApjeLj_g5BOpSDg@Y&&-9sII?i
z!=;U8D>I!xk<hWUZX36bulm8G^sh3AEqvz`y;LgB=SO{A?0dFHR@_RcRleK$^*#Uj
zdr&EJsraTXEO%z9WM~{oj0Gq4Guz_-qfv$jz~3Ug86A4UPC124<JdD7VH+>$^zZHf
zzncneGs%68hkEEQ7Y+Wa1!!uL8u2d4J+vONPCt>8$3BqJ2uY|U|1?Cc%kf(EKR*_s
zH)X1XCl8#A`}-j{yL+_r_kX8}U)r&w(yW!UzLk-$QtA~VM#SJF(F^my59g~u|5xfv
z8B2LZWhKc^t&rUFIi89KAu}iz7e5dL?*AGTX)<ZI9(4JplhY)BTmx<byye(NSJn~u
z|5Z^#M~tyO26jX%q-j!<G5_;_qpN6@5ekv#H~)u5SkHc7;PtQW`p?<t{*P_+A00My
zxb*+!|FDXo0@Rig#NWL1K=O8SA{$fE6c+uDRt%odqVe_E*RR3G=KU-nAT2$eoQ%w{
z!LGWnu-E(a{G3wUZ@j-B><}N8mf9fTCm`_Pv>IIHIk~wIdQcXr1f0qZq+>iwBO@cD
z$W}_~ThR4HGNvx%?Ki=><l*J*4gJ`Uqa|;(E1vVb`X3Q_*m+nB`=zkw(e9!rxYO<4
zmlt*i-4XzoAR-27v@!6fSoNxPH8q`<Tk6`{&H&K>WiHf6Ux6o9d#D942PTnU0(|4S
zXN&A?Y=E2zy9F^DKcEtL|M>o$D>RwX#6;r1kLDFVAz_&c#jq+i?16Bdo|%~`1f0h*
zQXiH?awsAqBG+<6I07iYlM4&P?I4jgLiQCBdA2IpIbaf9S}MET72AVze2>$UN_zO7
zFM+~;9)^=t_@;jT{_h3{0U@DzSfO1(6S#c2J;w;OMm1tcPL3hu(euUqhj<VsL6Fw^
z#i3oEoROisV|$Zr|M$;x8bRrk%X9CGezMHjFJPQkIH$7m@sYE#DiIpy`q}d(n$jDK
zT!c7>>+f5<e>DD^g`)_)2tIC{w(--`QwVBqNq~VA77z%PsHmuAWo0HNCbKIznrdo-
zcO9@HC{qqW=4A}aHP@-h|M|($bi>YzC|X*0kcI<~RJ5{0p18lu`*Ln@!MSaXWlnwl
zdJURPfS#S*cc4Xl8{r9$jjbF~!zUmJ^8eojLBs6v7F#9@aB#cRh5hgk!7$rUQ}eY{
zIdf$=_2Ks+gI14Hh!Qw|>1g!(TS-cK6N!pVNO<buKt(}8Ms{(sZ~04rho`BQYwMSw
z>$0!6I)lmstsGG^C;Yo$fcrQ*%k%&J)wk;LAnBBll++EMW3{orS<P$xIvL3FoN%bB
zP5>@Jx)v&NQX-;U0QN{c^Hb*JI@zAvf>gYxHxSX-*#g<vp(&=wJr4AcmbG7>{ZHJz
z|L)BDh*jjh_|M0J9I6m21K843LFjYC#dQSpi?V`3u#=XChPi<}3w(g~0naY&TmSQJ
z(g@P3p%q3)M*1nW<I~qx(WU=i9~O<l>xut;*PYP*yFtOWX@vU!)_=tE&?3{sDXOSg
z0o(Hq2+l{%g`q0g*&#~Y(pJHeT5e$RmeZvU^ueX)I>X126Ir2@*`8X-uhG(!W{4h_
zD$Sze>7nEh0{at<vciR;larCQ_7f*3C(w~)WbQl*L#9di_URRv9Klv!R8&-5T~<_-
zcX&5@Uj2W+KA-dE>t!aRzfuJF(9qEAuW0D$eFUMm0``P)%x5;pG!KJi!X55AxPnbl
zTDtdy4_cAm=F0c*GSdI~KC=J34){K(5cG)$xNKL~)y*zYz2}P6B|=SYUgz%KCbGoT
z9}g#2*qM=nT~=&;eRZ`!SE7MoZVCLx2Dj5KLWge!6?}sY-h<PFDE#72*k&FeyZE0z
zeI`yWj~#A=0!@d+*xC7c4K1ySq9r;4tI%Q1a(p~F#NpXc*|A61;Q;^=la{7lS~5I5
zrH-z;MUS?DR*G(|nnx*<c=JN5BL8_`+1P~+C}p7)^S9(BumY?R_J8*&+ZY)cxw$c+
zpFuDHUS<^l%+ea6J&~3kQIpj{s#HORH<17D=TgNg<Utq?3m{+A+oZnzQNDy?ee#K3
z?-nDVKk4XHjExf{BoR{P3(^LMh6)F^fBb+<#b_Oi;=OFDD|GEx6q>tM8oeo=nHuH2
zD0o9iNJz1g-=!Gpu)(;=XRu~&xVL}0xwEsgy`8O)ih#G6l%JaQU~q7-H~;{%^%QCR
zX+mkDzJK#>9+e<smO+G++v_H7`nvJd5SdZZRCA#i4`x6|MuzZBX@V;E#iviAB0_2Y
ze|Pw4qn++@CfFqb77N}-8?byZtFNm6qWckJeN?P)^YT#td3nQi-`uXIOL%U6M=o=+
zkKx-QZVR<5ki~lHE_}Jt-wr$>=*2YI&k=rv^5j!+5iuSf9%a6imLa@L2=tg6n5Aka
zP4`%a5%!}BHC3=lq`K}!S*K71K;9PsD0}`FC){%1!co?4V*GU+#n63ob8{=#EUky#
zu+<~+VG@Nwcc8I~3ftFqfR+MBgpk9i!FKA)uV1dMTY#o;c8Udb#-9mDkmyxk^xGM9
z_>92W2du@pfq~tzOil~*%}rg^T!Emo!wR1-c#MyF-p%ruzA=2dyu923{nB-ar8zq*
z8$Kr5eP8kCV+|Z&bfyIWkHx@vDvv#oe{Umks(FY91D>)IR&{2EXmqM~q5bs=*h7PZ
z?nwE!Y%fmSXV*~X9)PD99vvW4^#9Gx&SoAcY-=N3hE(GVVNWpG5x{S94`r!R$I;Z(
z^aSz|rzaQB9iT<n)fKq>bL|fSDi;e2E~yS&P~**eLwx~Hryl&ZJLn-7tU(HKKTv2J
z!L=?c+n>Sy_)lOZ072pY^SfMw7C-^l7pHLm`{bhWrmgnBPecUQJ&?yw-WDtu9)^rR
z$^GX6!TI+A(R7nr@7_hIeft*pJp8Fh*#0OeD8TZC0IPWnZWBPswm-LLLiqx=hZ6GT
zKU-+2IU>URK>6*4w|%8Qs+7XKLbDVSh-gtN=)k@(X?tR?pr8P~Ik3U2Lvs|G0lnP-
zs1y~Ag1>&FU$+bRObAu{UVIw`=5Qd1X={H^kd3A+L=ek>B_@eBO0Go72{9<A1XLdB
z3-*83a<X3U3KUXe?yFW1!6r$4WV8wtUI_RYh|J8*f$!);GPSH3qnO{}0_1HuOuasL
z2XU%|Lfac`qg%aIZ{9#_@!(r;|5tfCSJx?W9`3B%++GS~q{EvNX$5eYTwgbS{@nO=
zg_sDx4Ay;t4w(q0>HIf_jci(Fz|GE2HDYDHEW~L=kd7``-q-lcHg~gkbl>@Bhw@+(
zVv9p4Oii7GFSZhc4<DF_&oZc0R8`F~`(0Q19zX~-@btji$44mjNj^b;`D;h8Akm5I
zGQ7ek2pWE0!tGXo+uGmL6D%5uPU2)`h42unJMfIcg=l3srI^bQzHyYJ0vvIMI~$Go
zP=DJ;Ws3Svs129H7DO3!vxVLAB_Ny3ca+nB7|ixMz+oV84sc+d!w~vpML++g#YJjb
zU_`#V1bqv-xLQqB<ja7?>XnqE{kpNTFR(alZ4sOmK6`#P|4>!+jdq150JyUG9T~2B
zC4`+8)Wi4x{NWW4FzED~pL><m4n6y)KLqkJaat*S`KPeK6Si*s*bH_L`hU0I4}^U{
z%mtvDaoN~+;L3swt?vhEIUYW~Jc&z5{hv_g{rq)hvpK#97$-=W=xA#@ed#zYdZ3Jr
z$l?xxN)_VYAD^SVkQrMI0+u5{NCQsxW<a4xO)!FR**h~xZr=lD*>ec?y{|S#I~oSO
zS3J2W=02a(_rsI@H3&7U0U0r;Ryr(_l$6x*Lsj3RX?Gw7UQv?(`;(h++07rhNA$`F
z<`8}j4ZE9qW^1+>18i7K3NfpthV7J;l-kefoTh=F+xVv~7a9XE+kiF+I93`lvGEU0
zC%-<6?oH7ZBfx_W-8K*8R`{4e$$(g)@reASC9y;Rodp*^|K}!W<rJC+-#}o`|Mu+$
zy{wwWr2!o*VCKPr6DI5qt-ia6=v9ym?4zQi<4{9M87pK^gxGwta|o4($iMsVk8Hi@
zm>BZ|S+yy%zHo@WCMkRUhW6dfc3GvX^5W#g$JN!9mzTFIF@n$C-5m~|j@)uSSkeon
zm1pNMQaIxuKN5v<RkXoJ%;;(&o4s8L^**+yspMz8b?ilq8z}-!D+A?(?jv+DdV9^Y
z<726!<5xB|ieJ5Y1A*X@lC-)yS?y$$)!#BV$Gg-fT4Hn_dw2kb--RYh&n#B;9K@#<
zjgzARbc)B2q@fZ=x_-0P7~99j*|NQr>i@3`i2JYscAr4BDT}e}Yuz{hw(xE$zi20^
zjCg9g`G^0#ou*tC3TymN@%H}%(;Lh}=mS!&h1t_6G`Ug{+^JR`46<+}GXBG_uMaOk
zZu(8(=|8sI%`7*_LlXy1QyjS+b@Mc|9hRzcl-DNVjhyce`5^{+jsDM<tfN<9pZ{hZ
ze`>yOl>jEw(WE|~$U#Ofnp7!e$xE7x4<^=lr1f5jF;-kEw1I(vZEbB(`mlY%CMJe>
z@)ca4@Y(c(VOfyMLj00iP5rj9m!kOxd(AL}{mfGxVnvKmf^|j@0$*igH?6IS`^Uga
zOy_XUlnlBpD_aa$G3YWIE`O@Cv{hC8S^O}m?g=y}4uE$K0%EO7Eg*(9isgZMhw-bW
zMMy6Cy^Vyk9A?BnAw!R_Tv`EBTUdm~<y<!W!;g6_BqWpms|ASPtH&!FfWv~6&ki3K
z7ri+l0fWs0s0Yq-WdOLo4~&Z*o?d_xgB-XB&sC?t_uKf{u4gy+Bq-Xm716U26E`r>
z4}5%|S;$p~|NA3pnL;PT`{9K7p>BS0cl;^NLAC<w673nF6Zm1Xh2!Wg9Cr}(dLiU~
z#|wj8giS~&>(aTZstVFECe=p5^4R~r?Ga`vEw7|r%z+nCHe!DYJAXKN>b*N3^UIgN
z&8Xkc&wuLlXQV87RZ_y|dq4-2)adBwx3*I;)G7XOu)cl!wz-jA*m_i(n-`)vuq1we
z`*xF1tIGNbA!Bf|uSi0+Ityt<DDc83g+>56ubC3R0Y?2z*m>zm7i@&gPEB?*&t1C!
zVwHPzgb7zUKnz6s&z6k9p2K0(!h|PJfY@UTD3@;4`}@D8LzAhHWhA~?ZXadfAnboE
z>^pfUC6W3_VH7TG`%qNO10z@Y96rp0&!R~HK#!4tGa4>p1lp^BRHWJh{Cdyj`QINv
z!yF$TE(d5E3o9#RKso>-zX#S)oFsO`hG>8iJ-L7+`SHPlhx@5HSvRmr1vrh{@JUG{
zCmcUko6ilE5x=*GlVusIBoUFe2XTZ1v}uWwr42aO6#u@ncO4%5>Vm_y8<Sv267e7#
z!CbS2ip{t!ExsETbwx!*Vq(*G5Hq&`Xxruc$6<GYdqM1}Qr1%j0f8ns2cWnJ+WYne
zh@jP`-eKWktyot;Hwwq<;{ymT+^NC8kdfF8Nk}ebuyOHFQQgXQadCk_!`{))$0{_)
z`@h%UOPwX}%)f4J$qVi8p~9j8u$KOgJ?)j^&1L3@o`d5T6a^4i>-&_4vv}WxzKDJj
z8AnpG8>-8Dh=`*n?*;&5oSZBrPWl#sB|ZrE<x~lZb+9$owY`CD5%Abye}`K)6fD5-
zE^*zfDJp_a)G)NG;r`UxYW%6|8IlPRY-&EQODOI;#lW%D`x8hcWl2d%?d|6Pv&23H
zTz?i7a!o&YvF37{s=fhgf|0(bH@f>a+z*Enzm<Niw|2C&ob%XV5fVz{<>vmeQ0M7I
z9Qml^j!q1+{b*Vpr+R@p9QI$kuc>|p{oT<yS=;)N%Wz-!$&*8fNA1g^;n2<^!bgCz
z;iXAN{&OGJ#_x@UkdWKn#H5?%xQ-NG!4+5V#(6|0A{MYH;7EcY3vA8?6Mw$|3Z)Qb
z1ymZ1I*Y+?LvhGI)qx{9`$C2{LqNFR`O}fbpc4>K7pjesF240Jh>`5uQcEjfFDAm;
z)v46p*j;?<CMqNZI};ZT&FVs(CERh;9Gu~75h$yQ=1!&cZM<<KzDhA9wj{TCA$V$h
zijf`Ta?sxJKI;Vmt3#i58gYs|ETbrl`$Igv0H^|;YXAI=d+;!w2Xp*To6PMrL~Et8
z76KlNvXS)qL;`(x-i+)&m9K|iE~zBp1W`PE`0zqDa-?D1>-+RbAI(=FMQTZ2z?%-K
zM^tol!>)kEFr?$Iz`wYSi>~(51rkm-0J{)|_wV0VsTT&kG31A)Ue9@)fW!M_Yb=n`
zAlEAb2m-Kc$#h0WMXe$s39Q5zBPS1)7ijnQ^<|3%(-V5L6E$^#XEWLfAUWrqot=Qr
zhPJs6IMRXP@TJ9F^}&O|xw$_8fMU}N<;*TCyV1kGQSjNh0hg^L2s9{5;fxPQRc~lh
zX?Y*lI*TtPi&R8xYecX+W?odEzR|xXt$!Jd>ZH!@<wg8>KE-)^@)4Fbzcaj993~wN
zu#}H#;81$HLqLRT7Lt#Ojq2>}+Vq-e?rPC@dN$bk_XufvhB)@^Gi^%@WmK2)_D2Mo
zPC1GhUvwh=B$l5Cy+nKbR^xAwrx`QaijmxoQEKwh9^lL9mC{bm{=)MAET`J?^oMT1
z0LWcdh*$I*KzUbZfC&P-bFXf2);LK|{FCeJYh!)1wYBTtk&=)UGM@s+8&*0Tx`2T&
zgaV|fxY+wAE+M;0Q#Vr*mw>>g8mT|vqQb`@pLPaM&hGB0QRc0G-`>4XHxYZd7&tgN
zIapXY*xCmDG_)b2cm~gVr{7=DD+fGCVB4Yj<i0UVa8axSr&hr7D`4Bf=anVsS{)G)
zL5$8G4V;J?^+L_AfDeE<{nGU;ss-(93_Qg9ut~oB9<wQbGX6r;RHO%PZAj?Eb}lab
zuzgePLK7Tb@H>tM3wRDrz<@YwkA{kx!)pr+XABjU@f+kW;DWa!`8sl7mo)$^C@n1>
zG2gdHtTBZ0C#z9YZm@O1Y80@4&P6VeBSw;Prxvlm&-;}BwTAWw-DDEOrMF%i3-MZ2
z`=}qRdE2)~Yy^mQ8V6kMznZ9jv3!@PJlK(>v;g1>poW^+XV-XaRKi8_U~g}|eea@J
z%Dp*3)g51@ZYZ)I<+g5%+YGGb2KzZoYXgx-L`0b|0l?rfQA7P`(yAvgYBPk(xyn-f
zDZ_)#DLGwrhhpjJP$kdvQ&kU)kH3sj5ED-1R9lU4pt^X93luQCownUBHD}&TmV6eK
z_Lgw+f%4d^I~4w67d{7bfzei&S!*9Ye1NE~Tx+%Nn@HG4pztlY==*;B=}|817AjfK
z561zaq+4S$*I@6ty%Jq}Qc+pi*4o<p+zaj-B~bvHeIO^-!-DKcjmIGRrVMgHt=6C%
zxw_`_iSf}*0u}#5g;wTQL(Yvp@bAOWi#E@#BOdEfH_EHX6&D{1qB|E&znM(lz$A$7
zz|TK7#<r3dCnwoY11d=nd9KDX)mq(r<*nth<plaiM^Ufgn1)mN2|Nq<_~D$8F;y+?
z|Az5>{XNhziToQI8WI&x4mQwgN>@_<fTYV1FA<A_C2i(|c<-JPQkIx6%kSLLr{t3h
zg|hFU_~l0dOW>d@$cw<fu*M}>tklT`BPlZrOJDG*b|{GKzyhY*ij_A$f)fo+44+b^
zvi?OkkR3rA-TUwkJ=l-2tM{!fTH;&Vpz-2PH}f)^uAx_-Cw`JnF_8o@oVwNLsfa%&
z#2wLXtv3`1We_`F{aF10v&x<%<6+#3fIj>ZhaeUuCk1ESM&!5z+aJ|*l)$Y(OSH-~
zLHTPawE4pP9YtMqJ{HlVbtB#HF2@I~q8C!haedUAPSw1*etF`jG)}s#eexe|!;We>
zLqfCSmCb&4qtSQ{(gQI(UjKMhCP7#v<AvW)(`W2Q2&nhpx};~zN)VC_Vt%oGNLf!N
zs9OP;6rdcocy3`@QN(K2n*&Ry1MVh5Fn@zWSqKJ#y#7I-#)HqwO^nLy;I#Y<3Lku(
z1#Ga%#Bo8PBLRGMB^o8vRAL(Szv0DZy`fBRpatOjrwqt&Z{uYmxDz@q8LH+nb-Ydr
zYYjLgJ+B$?Io@52PZ;m@dQwoZ;}h!BeiEuJC0eX)+udgrI7a_8qs%02BJHG$M!g=3
zDPvFSui)0tkff<Qp7spY>_>Gy5@o7zqbXDS-^2t@3*%-w-dC7x$y`@@OjK+XK3n3C
z{U0Fnwg@<KR-92#j$?|OiMpWl7GU9^yCQxRbn3hx7jJHWY9)32OWeTgUId^#>H&re
zQVLVnUau{Ysg*+g`x``n_|u(rsQ32B!v(_R!ijUa*ScYV&*f1GR7?i7W>>IEXLjRU
z_k*rgfyH<Zd&KEYF91gCIA5M&0G@_dP>|KMt7CixE`Xr56OzG$(=RD83PN}U-$tim
zs`wfdL(qzeh#df~=}kFZpXCeVJczkfw8Ip8IS{03;UZj$i*--}ZbGgirPaJRJ+kf|
zXncTc4--+=@yCUaDmA*8`#G?He*FAt4B`rO=|Ms&eBrY94ZtsYhlfv~oCaA%O*^6B
z3v901<?7NcI3sY7Dy7wuO9qm4yF))``)fBq9Nzu@-2Sz}ehvQl$|OTV)CS+M%uP`M
zLpxTUCgqp{bHEHw3Xh5<i06eY5V7xt=mCEkj$NqmVMC=)4bU|wG}~U8e9?Y>^z-s?
zyT8TVa{tcHrN;a3zXjjElzes;ZTB#qIFSpF;X)tFdv{@9J<LZHf>>97e`G>bY5JpJ
z%aiQ`koRkeMzI~R3B%ynZEH35J)XQv&CWLdwQJ(U!>k<VrKmUJ-v@PfScpm<(>$Qm
z_R<iv7S21PU-*1HE*Rc<gtOdz;k>xlHZB_N+{%%K{hIKq(a}o$Ltmn?Z-1hgRc9q?
zEH^WeDfeAffj1Rg!O4o71OXS>_Y@+X(l~o;_-tp~oi26EJ)3yJ@+qW^pIs=RbtSx{
zu4=HL{XD?)34eI8dhh3;B;OO%yQD<T)~5%xsvi;Dk*yb$X%OO{EEEa!`4+mmcH_-1
zHlUBW1Be7pC#0uoaCR}A2Nx#x%~K)VNBx{DSflQEcyQqGNf+C-TmmSRxlxCQ0dZxH
zauG#KZytM>_d?}a#MK9>wkuGl0HU_SE(-mcL9m5{sT0FxA^r@TMFr+KvEiwktI*oL
zZMjZKpJ05_fT$kH*%^@^mKL$s%Sf2t!>1GRsPL{MiYmJvy&-o^#y6DPzGvCBzMHMn
z$bEG39oIQvag`P?dVsi5D&=7r%&)z$`D0v4`MU&5SUpYd1{;1`s@mcyQ6HMQJTG;G
z-q+e1X_;HmDrr3Qid^_p;@*oP=Q7vxb@nfkdBW(P-Kr<xn(lox=+6t9YqaRJ8TS*r
z97IGSHvL<sw)p*6lwY1*|3Z_^XdqpFYpW+GNBmpv7AQV-B-nc|T#GKw&d$K+3!^7$
z3T30jeB3Dg2Tf%9qp(1Kz88B9)z|Zv%}^pB$5U!!9190t5DP%wl`(SrV-05j0HOv3
zVVX_S`U=65o%b<c%h*%J!0&DN8kF1$B-vXC%Fn)N*nI?jF#)jCM?XceZQ#}ff<H7K
zK;Da31FuPK8R*iOEP_;21>jN__j~g2@nad8i=l*EH=)B7_yi_jcxDSY?^GGQg+TV6
z$)F^QOf&-fw{kz2dGV>Ymjc7h^($(PdQi}{&g&0{yNi~6;qFk;EH%3Z)$iBlAp+Tj
z=2M8;Fw`sXg5O#UvJhW3DMB#?K^SvT1hcF@ka&9+p4ED6pn7_GGK^z<hSxP$``5U|
zP0?@g(^nqf1G$-_VQWSjxy$tCXRGrzR#xFV%=usAy>EhXFTvMH28td!@wDr&WnUpz
zU|7w+f1f?@2>Be*Q2y`XA>`A0c~tpPW+kA)k^ii>gp_VvZ9GRz&C=L`+NX-wG5blm
z=f7Hj{2gyi<p;Xz11Hx*%;|)?y-v^HtBM{bckY{$+;W&$Qs=6<y+CuOjrX2B)7hD9
zG1t{;R-^YI(r~k@OA>QN-C9)%E#tQSPEUW5lVg&Vg}kc!_Pt(xy;nl#6b#?{Uo?lu
zGJn^N>HK4fmx#=r@5h3kxMLWTAaash!opk|(jG+2?WbocvQzaNbCWe&x<@i^P@#=l
zwyda6<g9>hf!Dk~50hXahLO!S#PGpjEP=YCbo&U1ybqo-dh8cXKfK`*E(ZW6rqN=s
z9&ql(WQCi(V>#${NAenjsmqP8xrjPqV@H=;-$JKzm-<^wXhk&#J_Ihj?F9N>TTT~*
zoYbkv!eO@TKea<hwEM}YWWW1QlNoimIGHn<p@U2X{&^e=OZ}<s0&mT=C>e&J?aR8M
z((vmj88uAvX-+3UPx^^x>PhG4DD-~428(}+E(ay!ox4ZQbS*PY-s+hK{baGE&thVv
z#LEf16`!n?Q)^+<SFtbi-9Sf3uSl+oM*sIunK<0&cmh%j-FDPc307=Z!LjO-lM^9f
z;YRy8!zDa=$Ms<iHt_=D`ol0z*N{6ODiC^*az@e{)QnR}Bm%HerLuWSwXlZnQn^)V
z(rcmKHE^`H7WO|{hCZ;Np&@wjS`<@<>=0p*&6g?@&A-=H&R~lf5^6B|SjCK<_%MTz
zMf>|e%-Y3XON-A5Xwp(=9)IssTv>XM${oO1D56ZQ;dQvQ!_#*&Aq!;Io@y9`wHG^g
zb%_M=kkB)=SsxFwn_^$I==E#fz>5|jpcd1^><zSsiDc4))&9p6dk=YG8|;g12B1A$
z@$s;j^{UCjvkwb;8`O&iI9YL%nx1UWTBs2V4e&e6tln!!z$0B3=?xwcZ=G2A>sS~Y
z(#*aS>VsCS!S4E{!>(MGeqpio9#N_Xg8Z;bbq}?!_~~YTRWOet0oT)2-Zl|q*%8v=
z@{z)!)AcyFB1HOyFYTdKELH=U5+^fQcxO8if~?dHbhUl*GRHHblCNL6K8v7urPv!1
zMTx2#HyRN>ng3=tf}^6GUj~nmpFkx}Y_kQy{FaXR<D<u4&aZc7p=j|vyHpRmwWEFb
zE+W4C*b>i+Kpdm+{$nRhqjbCkHkhtw&Td+7We|aS{jobP)8OGlq?xEpX(q*88EZa!
zr{mvfzTug&+p}Ipj6^nerIA!}^xL2t+XC9(sHObP8)vZV!R;$qGDzfIM(J&q_>luk
zV)MXWT`a1d)l~zT&^>g=$}7~Klnmz)M$M4)4E@iH7uuD5Y`u}pkzc(th10FpUg%H#
z>~7O9=A&moWf#qR{5<gUpz6K3Qa<D%I?Kq@kW;!Hs%~>2-o6J3&1R91ZxwJnTA(+=
z*c2!)BBTSiXRWzr1np-B=H@(SiUx}xzEUH^tq9iq3W!GdcZXfKNfl2(;R4t{KnpLv
z&-BAgmELJv8=J|ybPNoECwsjEB|qVUX4aL<W9<O?I$V7shmOtrBRl+$t5rxu%jFuZ
zdVev>$0?|%;?Ot0d86LB;-WQ2DJwNGK2Aduu4coszmETpKJ-9Yc}%en3Ny!r+I^5j
z1)LTTq=z5ZTIqJ^=n)AF4!z+kV$z|GjYiHKD1Par;Qq+A<F}kNvLN0NFLEQ|h}cKL
zW4Ol#UJltpq&Qu@Kq}<EVD<KoS3xe}bkY5>Ji<;fw8j{hsRZh`!up*m5<8d4xJ92C
zKTEycI3$3pN^N*8wG|smrLBn{I4i<(w51|d`8=uT`lpfs<b8|-*)I|$EF4AZ+M4<l
zWSAQ4Dp1;1bhWN#3^)i%Ue(X3<3wUIJdo9Vih0SbKBXWs!@Q*;9UXfw-UlY(>BGSY
z;%lk*{`1npea9Er4TU}5k)*R`<#x=?CExRM2G6>vs!~%B^A)gw#btHXBQohPj8XYK
zp3NJHaes9EHo?$)=^sN#L4^~8a#5Y<9O%sWlYdpGpYE{85KVAu;-S-DxENK<PGvUe
z6H=Ytq0vN7^2&a&6^;_}V(bdHfk{<JV|l6`kJg>;g?B7bTQbuS!AhJ$;Xaelb8DQU
z7$N^eYCfLPxJW&6a%1q`1teydIQ0>RCz0nkjZg5l$tYC6TWY&?1;Za4Y>yp@Z&5@>
zM|0U1bKi*$Nu?JN@q?xg*oT_yn8EW6#-0vfe;1skaGFYVXaEb;YN;5~?no70Ta%wr
z@E9Pj1(OXe;UWu&$xBeZp<n=KjAp$R%1lNaVM9+(56p=&VLmvzGJLH&kyfK1@UrBt
z=v!fX+;DIhfYAVdXeg4+_Ra$+W#?g(By?M%!!Tf;Bdc!JE$Ne=p9C3*??ya&1k<Dz
z@EKYC_g5oY&>9u3t*zw%LYI+LY9rH)*4vdiS~6R^T_~+>Q{4ym`wVu+C_QJ`gQr7o
z-@Xlt26rv(_SR2^+j{N?>lMI3?GC!8aJT7d&pAm+UK7K+NDX7y$&*Mye^q6*(>JFU
zq)Ineap$$VI<e#7RXZ2XgAvL%rJ;szPYqJ{li3myb6E3>`}FmQw=>gJKZm3Ks?w4a
z=vH!)sl;_Yn*6Ode#_<9^?9o;U6_e^_B!{La;scl$zpAZy5NRDztX*kHYOF4J;9r3
z%SAbNzZfwEySA4n6Ud?R2El1CH!ih7(&@Zh9>{Z!SCsfVU+VkgJT=v|VNsy9f1N3g
zGC(be9C!zrF#nzR+i(jsskdU@4QDE0^MooCt@gGqGhIANz=`J(5q`MGy{w$s>ue;g
zD7EVl&7-4S^;>$aS9?V5p|1wkrgnEd3;%cxPt|SJbffmwXOZ}GY`+{8MeaB{?e<(*
z>p6c{R2ZeK`(2ifnue7zePr_T!OR7Cl5$H+AF!kBk%(w#y&i#SOkFWhTdQm=z-sR`
z97Nz<<FMT#ED8dyGVGOb?`VLzG9`gt0lhE*8OAYcWGw#HZ+5waW@#JPq7zZl(8{rd
zL^2*)&b_rg*sX%8w2F33P;V=t$s|5W#lAzO&jLT0E%2;i3?5Dp4l0U^J8dQm-@B2K
zlNYS;^YfecMbu#mzJ@3y5VJ6`uzoBxo)^j@v1&7!R%Kya;K+hP2>9JXx*zkeVGC>k
zUy24cG~_?@^q8F;Uc;!*03Zy5oHd!l&s&;CcXR!kr9<{~`J6-LL1q^z*G?-T1KpU#
zc5lJo8*ndhmS`n$EvT=n<K`O1BPI^!x-U@m(2+hrBN^q7DGKj<SqwNs``BuoKVb&U
z!W<V3yk{_vYv<MGyH&IX$W;aCWt9X40P1)joNfVV{Q7kk4~U3}I;;vGoemTNtKH}P
zL$T-9qmyqyv3oj^^OTT~5ZWNUIz95-0EffEN-8Lz%Fytc$D5avAfUc}WaY8&oNuv}
z<GIOBCN@hVD+gL-%o_OsCI+@&LUlV!{MipJRpK|^{j$(Nuj-ef=YP;}`Sp6ZP21wD
zOt@)HrR31>k-c3s$Bmvl{Sm@g)Z=a1_-t4K0yC*<;SrO5y5=9n!vjmKs}^?WLa!Nv
zsOg=_Bk&3t3~4u5CQdV}9vBEzaDRICnAqwb>jZ|HG`5KkGdeBV*1*wMTf<5x54<D#
zZ^y-WZ`qk%vFfscnz*_#Ry}(K3tq(U@TTPqyu&0$VE`6xkX|u0b)5XzzSK8Z{`m3Z
zxJvRt#~iZ>nvaGQAy46-CR=Ddm=olQKQ6DoNg!{}*+TDU{m<`09~o@m8y0@E(#O^`
zS0Ot7f=1}?`K;-D5-UF{A0bYBAuTd}R^klpL6w7fVGYCbtCy&$GM#5EX{PtJ%ul|S
zId)q-%9yXNQZg^Jtw<_4Ma0D+byd0BbWpEO5jBsq6l0=r7U!q5*<EfsM)3?c5M&Yu
zt)_$LR18QTam&zLIyoE}NeAB?AB;}dZdXB^AQWEMqc+^IurOItOJYHn0FXmlLb#0~
z$SNJb^7!}0-<V6!cuGl^Z#}&*SW(fwXa+KU(CoQrKJ%J-`Pt|1;$r$>?%eDwZf?Mr
z7qkyC!6Fd^HwqP=N$esK2?+|$PcVY2_$V~_aT79zr(L%^J<?MOhU~aPNP*kET;u++
zvjg3mT4;5Gf()iXQ0_@;Xz7(_ee@rNfmvCu$r9QWKu-xDdfP}~I0H=s4V-XE6Hntd
zWKRVq7M5R2js1(Q^j2TslhSbP0Hw;rYa)jq))#9Mh%uYk;dXQNb<CLTuPQ5JJ1c4&
zla|(Dc96|@R?J7Rp)3tmn-V#2)UxbJ6x~d1$OB1%(|D;m;MAi$401BqG1)@yVyP;)
z2_NK$S)eIm<!X8a6{~s}*r&kJVL@__;GVmMUtL$$sk!nsMdfJdsth^b#YdWZeR<*K
zd-KiK_m>wEb3>7xwwT6OwvTkb2O2aECz;J9qB$<gM)qPh?~~4{R*!M1;FZ6WQS@Ts
zT=-$;N>*oDt{z&P6mB5<ID=rbbPt1|ve1^!vyXb={hE`JtUy<xI>~3>I91n-fK~G}
zso~rF_eANO@D;w`j;v;uUp*4$P)X}9e)aA8JMZHsFE{MenZf7VFrF6+4ol&nt2<J?
z(z$3#V7W|+j2r^tRF^P<y+|ekm1zy`!JL{U!>yjS(@(_RR}uJH8thi$SukT6Er1OH
zt)m*4f}7DA8_Qxs3K!xKgS&s}^z@`do1C`uvaRn{aFwBnRimKv5kC;S$a`fPE_3@l
zpq^EJ7@N4)>oZQQ4xslu61YP39vd?~ll_4#?~(bcJ94QE_pV{+&_y0CA6rg>NDqUc
zP24ABdU91UUbXAmkz#8k5xkAV14n^B`1e~)?OqrxYGh^MlX{HSv6*_&h|Yn66|l6r
zX1z3mZzX@{)g6SJVb)Lt_aZaH4(_$TTFPPErpWn#=?;Iiv5$3W*Cqm!QOh)tfy)_y
z-l#Ygtp$UXLE}e2M09X;{G-bSz-qn%$Z>!<!-(t%QbyL^#~-J^2xSO*K7Rc8p<H-O
z3OIyrB`nSMn_!zfp%kj+EQR|E_!C=O3h-L*|JVKiR2%C4JyKLm%rPr%o({jiegn}s
zpwX?MwHH6Fgv9}O{PdR<=tFJRW4clYh4`{~eYh=Vy<+ZW)UyKat8`5A9oYMoIUpW#
zL=TgTLiy5Q)*H|vj)4(TI15i}>h^Uj_*UR^m0hAneD*91oK!`qtkp*Azpe;ppew~I
zB!v8uUO59M3ZYb%1k}K2h;jpocjzX)Amf8DDMy?ktd22pMGhD=GeOqRrlEa9GGUjw
zlCu)kMRbSb=m|<TnN2xnX7P#Vs_62#a~9ejvR9frLx^>xf7<PY5pz&XE@l6#1<2fa
zexw$rihDKk5<l<98hAYt%8&wnYZ+RwKCLgO%FTTYO;m`rJ<iLHQAF%a<1|gF89ey)
zBC4Xotqr>Hpff_a4(I7ZBV@zJ@<|lN%`W8o<>1yH&zGb;>VX;z3cRHy)IUc(x<Nqh
z=j)}qEI$Md<t~PZ(E;>>z@<Z?`*2{KjuU(Lg_y7Armas=-w9&~otDOxq<DtjW8##o
z?8Ld8=e^;I%6MPU?GAB}zFXjR7ew<7p89wgMJiJw5%%pG#PXv5<}qydVqe&qvGX|o
zMgHXvuYKkWSnJ7!Jq|&{1pNdyk{h$UT~CB!H?&OyqLG$Dp-I5+T|J%r1cqnBYAL2B
z{(1%ohl#vXN<C?dObsTTfPon?gtv5)edqYWQ~8pd2KBoTy9dV}zk@bttj#AYh$m%#
z?7)!*iG5*<0j@5JdX-F#_kw09Vc&$^%(@Tryhv#2=$^o@-{O^54J$U_(apvTDM9Qe
z>GEFaRQIdAi%uH}=*5A??Yc?*TPpmuYnZei+a{#W#hmN~^(r|0neV}ho|~Dm*+y_L
zBEXnoVGzWibixG1AAClNP503!PyYVU10A{BxcS(WrvIrrO{&#n>8#u8UuM3i&JH{(
zm!zi~7*m-EC#2NAQukN(`)ThRa*+z&js9dR6;z^d5Dx$?yaLT}fL{2XHE<z6mdEy>
zMvB?^{yln#JZ(e3+0gY<6G0!O@K;>FAisGnM7V_YQwbVKa69Af>b4uYJex;aDWrzp
zeS{i&(z~Idp}9FcL_soWAKAFN2Cei7Ly9>#I2bx;ZSC!AxtO<s(Z(ClKK1hH3c0Co
zgPj<QaT}k+B{=A#w+=SqkeS($#l^qEpky@8Joq#fl48f{K#-5RN8rjb!w3yV@Isxx
zaZWb#AP8^Z5|_3zRqrrAQ|{!6@_xqRfNdp(0cJ_rjx++TtTgf~K!&N<t0PRp0Fo4=
zQbZIPj)LjZ62xpP73EnJe+~P7jS<~@vj=ymk!gOw<GuT-Sq;Wn0*x4sJvkdr!$)vK
zE-otaxNN(RkQMdrF@Wx&u<W(dg@L9-MAA~E#Ooo?*E`W+UJwyPSr67@@E8-nwtFMZ
z?t@AXBeV%=!%1N>+674a;$q7hM}W&|3F@wOI%}}Mmd0pum_L}v)${(fYzQbd(tz{B
zQ*LVhq6ktW*stOG^7*r=sHmu{+N1odpl3$Z_>UXhh9uF`J+#AAX1xzVcZaY10{+K9
zH?!3D-}0jnZUFDg>QlSuiEwE~0`~;s=$3YLTpS?qVc4nui+f&uwY6^BO}Wqo>tFs@
zAbmG$GpmICX;1K#+j48_cz`t5g!KDfRDjX@!{oV(Y21Nu9mU^q=4Qg{VZhpcN-ekI
zb8%8ZTqtx_Y}(xgqvu?|w19*84<LXJVLsXf-5UkyoMtHYLu<jX*#)g}5$+f_({k7f
zAeEv@U&8Z>DWz0B3KbF=r@?CWIJ8IOxnQdC{?}AvTVJyznUtEU1=eHOhXJ=|vE9Wx
z^%4cojezaM@rC%Wz^e=2S%ragds2P}wx8F~Z<t~4v@#936M7Emh3Vvg2Y+D#%z<%>
zDU3S;k~V_7Op211L7ZR;Qa^P75#A78l>4*t()4|UifAWH&~ihm)^A<s=(1k4KPW>9
z9kwXvx>EF!NM%rY0V3AU_wQh;&YAi%P}fBGA$@=Uls|3;+`?=Tr3-(yh;~Duw+JKS
zGOj>QF-Bk8*r0Fg?2OpN*2jUH$_YC6bx=`_O3~d^<$k@ug2Sv7xZ;8vze>OEU`Iz#
z{vz&QCO%d<ZsXH<y&^vx=?iE0`6S8xlh$jB7*~Xzo_}EMX;f4c5YY7xffhq{1+iM-
zj|nnlze(Wq0sIPWY87MrHKb`IJ~H9w0La`ZkIUK<MxO1XVPZn}UK1v!6R*H#2WFL9
zNL8U?EMG_(jfAQDpfmc%4B*iq-t%YPdSho{aYx!`f0e!~6KO5V4cq2RN2`LQCXBqu
zhj}~l7oPuptpp@?%<*sXW0+S^LX(lSiLcRz%`J`Z;fC9r!*c{s<dvO7Em&}1Uq(Pg
z)d~ih2j(?A4o%I?uAkd5QmY6pZEYb44gF=J>R&eFCs?7i=Kb<oWh$4yyGg(aMJDW#
z){-oOCr`Ztd${*>0X6tq{7?1@OG~X`3QRUvfO}O}S1)w<M4o&P?}TllpB<dRgpv-E
zd5a6Xv!(aF8ePA-gRX^$=nL~&Y30Y-TY&~w1hh;p85&~RD`C)@ZdS-Wlv?E{HFD49
zkyl-1BKEPS>x^hTvTXTj1EZclpRLqkwc7k;QfILU3k7CSf&T<b@LW*0C`7&F9-qHM
z|1$SVEkZ&JCN4EO%XCkJE49j~RR*eyk>{l_LSlM)8verZg-GMzf??AWmrqR-lP^Re
zWsCV|4epmGOM_tW0R6NQhAYR#jX|HCjh!8O3NQ)zaiDe-=Fb!^G&Ij$5tw-h!Z?o5
zHcyxWpq=l-T1$BecUj)muc05PAuzERL@q<~E`{lKLJQI_R`!kpe6^=DRa>TpQOU`)
z+Qe@$>F)`YnTWkFsIRX#LRjf;#x(caKROcN=I-5K{7gVhTwYpAFMeNDO6pcM1W~yb
z%b}D{!3ya0BY{LntzhZh%gak@9)5oN%`CDovX9gy2J$xx2Qi4Y`1$*4qkw0hPVQo*
z)%deOY`I+M#y}sATD+{GXA_ZNFfW7ROumZVfS;C@HX_Ev3HMp8rF8A3jgi!-()h@5
zD{p%xh3%fSaGI3+RN!O+Bc;z@<cX(|A~Bbh?~W@-$Jhzthe_|;A(o~?BalDs+sH2p
ze%_}B^fKZ6T^eLC0YZD^`R8;%cECu~*)LWxz*G>8Rhy>6khlw-q3zgM2<LY0`Qe%f
zbsP-PaZ<tyq>Mr>CR;g3DxreG6Ob%JL_oMY{)+w!<R}&}#lO~N|NHlEHW&M>N>ETC
zik^<nU|(Mms6VUvI!w(VRlwH7BP29DKHi~OiV9s<qP4^0V@Z$o@~9|VZSAy}7<ceE
zfC|s-$pP~=`EUA8bYrh}Kes1MwL)Fh1u#jl=x{4GZ-X)jNmCvM1_4)-8=HRylld5U
zVC&KACglj!!5It=R-%%-D69E$lZ1Vv>8!wvXW`=d4l*Ygoo~FB$IVTXV7#N^;n{&C
z;C(@t97t_EF$@TRIY_yn$?L&j9SCTYH^LA&`G@b`zt+oCM4W+|+E7EIP%%~B&+kmg
z4LJMIO=2@@sr3O~nUY6yp}7fz@61|>`b~f@B2o;zf1pAFxF*^dMC-%7z3<b7VURF~
zU*7!-1Tj21A^Zw^JAo2MiFUeLTBtSO=J-RI3lbiKoN_K$Z*&hPL$TYcVUKZ>N`n6N
z9R>*rIh}_Oqt1bX!fw<;EH8=N2T_oYz{@h(C@<h$4RDCI^S~zvm2{2PtEQr&)t{fd
zWn@C%CEQ2)M0M0x(EMb(9=5RPQ0%Sx#!E?7(`YF>2#d!NyfuH0bAvRH@?v3T?zM?l
z^*^sysU<V?_4Aw63xUVs{BA@BJTMd#Bmg%AyN-74iZul;ZX)FvU-amw^ZT^*^ev(=
zA_CHAhK8i&bkh&>zyxYyHBSsjsQLwrwjMhHX6qpMDmkt|r3w%Ff|dr{pBN|^&QAis
zL2!O?$}2~!7pB6)6abUPt|`-xVY_H;S1*)-o(;fA;edh&5j7tldZdz%OwhqC>#-&1
zz~BhTBO&=K%)y7i4W}f{{r*N%h$t#3WR;agzI>TjS&2FlY!qij7`y;xQYgKC>^L~u
zqomT${*i(Yz;~Su+1S{4ChN!6@y#edt~u!v_iIqYLHO95do=}bf}tTkhY|A2o1BSb
z{>@-bp?t%SU#~?GsE^7dYJS0ny1(`dHYnMvUU1?6MkC^Yn8)12&z!C<6Bvfp(l|Xb
zqNt|_p4vFDk;tYOnajQcgT>99Rhq|r^Jah)c5=$At23Wf?2BGTY{<{aVF_GX$_WXf
z24s&N?YFmsHv@}k@P<$E?&ISJz@bA<{sNwCe&;1^KcaBT_f)BN0uocNva{_WT%)d@
zER-=dHHCEzS<8#BV`Iu9kzfL1;3hbjU{EF1d1IK~J{TiQEe%6HzmzDhL99_NPpHm%
z>;nmJ*&l-YuXSYiSh&Q13%qi&pQ@{?3zHnoZ}I>FVXu3k9x9inEf$NXDv|ne>m{mW
z_bsuT2w4dVY;Zg=G^woMYJzwVKlHr77OPzIOTAKi1Uj&o_XWZg+5DI1Mp-DY;AZen
zaQ{&d98!=<gm;VH|INkaCA`B^$MW*>s(C`dtG#QH$HG!cD!JmRNV^A{ed|h{9Lgt1
zGs(dO!E+=zdHFs{U8MkCkitK9`0^gT{lfyeg_Jkn9Iz)M3JX^d5!>Rap5L89e2Fc_
z7{7^04`>jwpa#50P_x1l@BZ{@MBO7TE#9E306-uZ8%>5sMjGhri#<CV_<ZRM$BB;?
zrBnPg5L#T{m~>V`@E1nxb{xAG5Z~X8f@*8i#ZCd*FL0TKKXgJuEhe39U|j$!3Kge$
zRJhUM(NUyPxI}p2!4kh9nI=ruxXBpT<8|0f*{1ZO<@v?pGKbjSRYQJ>2O~@aHbx%7
zW}aexb=cely&w>9+MjHDKznHK7pSFpyZ-9#;2pNHu>qlCl{b+G=4n8hlw2Z!I0R~L
zAnrm{jq$dScpd<6duzX-Jt>V1p}4<4KW#zu6)v6NbL8UYCgCcO6r|`20*9pk(QZtV
z+VtF9#BO*+@=aoY@p)F3zW7amkh!>`0ta|`@QS0y3$gL=`s;7kepdA6PDfN7<T@^G
z5Hx^<WWim4DOq2bTMqo~69Qf*_kWdwX$Eo_+O)+kB*d1gfrHRH5f<<Q1z(Mq*RuW;
zyCV4E#t%JHOG{aI0#rXU4<-mi`}r*e3`NC%mOCTEYfT;}B1_qwz0XL{8AbH0?LC#U
zODkGpJ;DvS%1RHHP8~~XwHfBsPavr{^a<ZAjm}};f5t6^4s#WyB;&{}71+YuBS_Bw
zLnXbEu!xY*xI-J=Kz-RWoeBY$l-uRkbT>~+XMuxwir060z-ABASyA8Q?Ca6qUnVJV
z9*$#c$fF?rR||ljjQbD#RIVx5;Ye<%fH4Yw0Izzc#?8<7m*)4U`8ho&1K(2d#!7@B
zy>2EZ{`K_aq!xW2K8xh!!#7S4=Yz>OZW+RWc!T?ho)CmgzI6RnAT<LY1TsVg;5+@e
zaVOt=_1V$SW{}-8sCPbkdw6;(f20QYk}nMS93#VHP%&(KLP7@m$<A!)>+vts)3xqv
z43LmcymbHdwHsP4w=<}z#-J;vbR+_wAlZMo1H<y)zuWoyK7;wYSm$dkVE=A$#~Z_j
zdt$bjFRCfSO9+e%OIsOXGl2Iz7@i2O&0kkd5IKjU-F~?xrnOZEz`iBzVSPUL)?UWM
z82s6sRP?up=kvAwoXzSc2vz1j>n^6IHzsBX;~B%iT39}cluw}-1Wy0loE%619fRPY
zm>P}{4=zcm5E<V;q-!0?Ds0Z$Rr;r}N4lYt@*yw-GesBLtD_lDh1|ZG)vo};_;ahL
z9$H+$U|gntS3pF3ce>7%VdIX|rzX`yZ#O1ycz2<qG%(zJtx@~|BA4I5E`z|-20x$X
zzOj*!&l&8+E|yvy>V-551Ox>4rr`Doclx|;f0z`b4{?b3*Dj#?!@kcD;8q6-q?-{v
za+B1bQ%4K-IcaDZ7#KJ>Fy91g6ER+ippK5lR#uMY<W$DSTJ1ALFDnNG<Rv9d&6bYI
z#}lt?Z6O)(z(5;NFDySo<qfs4xaVd(F1=G>CaHiENIZBL7#RBt(b34jyIi%=*VmVl
zq9TLs16Y)rnwm>(PnFfxr=e*hhqeHwWpFB7ehr%2{{)v3zS;h$V?Ya(r1F9CdlOz?
zZUNTgZ@?Sueyq6$pR+z`FlqweM(;9y?(|n1%a{a7;B%ejLl~?9(=u$Go!RlgD_{*L
zKZN(c{rri60)n!LnN-kB(ATa`sJ6%iT|xmK3h%}VHH0w2aOxdDazJP;$_MU~+fd%S
zx5SNQ0}*BozhxFS_jdzwfPUkkqqBlM+He8{CK5<^NoVm7>fv~YDhe!?K(zNWGy4`x
zFm^K^)KXPN<p!sl;;9ftCFf~oWu>C8j}L)cIhf=t7Knp0v$V8BN?Hlg1&C)XD}nD2
zs0#yhc+EE@q2dyhIHt8OpACmuoMc`?(*|Qn-VnQN0EQcbiTz?{9?jCy(#gTD9Kbjk
z_umn+=?ev%xP9kn8B1r4N(OUZ7N33S;R>A8fS_1^2cfod=TBY=Dt@`uDk||%vmr-y
zK3fD|$EqAps2gmR5M^qSLe_JF`>PE0=!ss1CW&e*ydi6$*nD==!R_G41^y%O)CE~t
zSwVzw{aph$yA-4IPLR-m1OP*C@8?2o1i`^ve#bJPN&^QR%ERi{uf30dbwW<Vl2h#G
zZg?^FT{Xm;_eD$LHPyf|r<fS&Qx|#cMS=!hIyyQB`-&6>x@e=gH_q<Af+Y;vo(QKt
zp^q4>dGumw+4R8!`k(!Oz<#3HV5d?2T?!(kgT`Qb20#4k?rW^}Rag@TTT_glLM8YX
zK)3uqY<+h;*LxecQdtdI4H?;6L{?^!y;mWbWn^ZRk<6lOMY3fjA(TY+NGYR|Y?4t%
z$o9N{_x;?@U(b1Uzs`A`yPV(ne6P=Sz1M|oy%wxhXJKP-go)_l`t#OADVKCupW+{@
z-^TY=r^MO*0@p3uj5%z4U={b0kjzX?Sx`6Y{xN^5Znw#L>Dc>0uxIEnfm(bNvnUL{
zhovd!K4+d!d13<3-cxLd*Zykxli*jAh!??zFM2jnW$S?Xcv!rnpF}ge@n>#n_>u*O
zh1Ef0!T&oZJSYx&{hUL=kKzxe3kGiNr#}OP_>S<x(yz}@RH#L3t*orTp+VTksV3V+
z*JM59Xkjq|xqj_3_Ke7to>YC!te&hR92`o{da8*c7;3bI@L*@93ls)-ZcO~AL6BC7
zV^&vIPEXBL)ZEosken>Me36Cpj$Wy?N;M^>aMOI<^MBlz3rsLXW;aFRyF!%am0e@8
z=vw~$sD&tp0`8OW(e`PuVLzBy$iLKMZrFcp@!Z&53q^PUaGY)|jPCUxgw?bxzSqe1
zMWx`a$&U=K)O0$K2{<@79NR%;*Sme!Y;6;p5wy!+SnPZX^u)F#t?fZ9z<Z*D`Tx(@
zSQ+#nfItk2FW-+0CVYm;Ls8blKjoDuB}mSeh-`4lQ=TBL#U55n>)3Vw4;m>jN9B%v
zJmTWUlKc6*>+0lz4DFz;#gBo8vV9Az4^ff0ea|nTjF6$Kr=C48^33D+cbmcLy%2=m
zQAY}OPSJIhByKsJ=^Gx)t9w!h2M59H+vrwYkid}t9^$^|CY6jU9cX4fetkj^wMW-B
zWg)Hz&`Y|Qo%Es#V5W!C{qMhjVVh6}r{w1^ys%*1O-z6VT)dm^CAgH}&N(LLRFB;O
zSJo7__a76EWHL#Y+tq5<s`<;FaM6#S04JQ4HFgyLG~XDDi(J9Fw;%yXHTK-{Yo%6$
zWCNO49H~?2GNOP-+4zm8^o;?y^dvoJTem!JygbDC1M1O+%{2<xl4iPd#jF`C7v(AO
zVO2YPbqX(oK>^R>&$ut)?_N|uEeDas&kqi>!`d}ahw(Y^1*6voOO3>_p!|HFyHq*t
ziRBw}wNqW&FDPL4M!x3AOFKQhTlt{%Q~Ob5j$Rm1jbe~m2j<{7N(GzCEB`IYUn3ZU
zjqqaOMj@^BUF!l(vDkJCo7XPfKi*eOs3K;BRhu#H+Hz&)(<eWrPR}tlBSpgETHaRw
z<t%77kPg8|E$5keTk-t)y(D2a!aR3cC&GCnGS%xEX=rG8{t1U%vmg=?6VtLw)k<L)
zYP4=?LiP%x6e6rha{`w;TU)vM%+wbTY{7FF5^`R3*LZkwadBuUM;eX(aW)yk?LMc>
z#K;KKn?Ps_hhr4P*&6RlTIEdLF4?*yP@q9uUzcn($u=C}jBK?VmYJTi`<p9Z<rOW{
zqA0-jckhL9F)Pxx4ux^k`6b;Cx0y)~x9&r4tiOBseoPl1ceF1z!`_fK-F-uLNd_#X
z58|5_b7EJm1Fvh_>NRuHt}?@yO3FgAu%Tk3Oid+m_@>kU4LBOD%(k*vfBAQ~ZY$nX
zLR=h?4umd=@Vn`;m*JH~gCzX5MDqBcIS7a5zrQxGW2m#B2R@Aq@87?_7K^DJLWFlz
zL<GNXcHS@QBS(PAOQFyZ6B8%e4c2&c#&JevSR^;M=W5E`-uXAT4duJd|9%>!MBtF1
zREz-g+IT<rjc+gH86;mK*nxe0bt3>d)W6%}TJ&V+@yWupVNsi<m%9Rb{p#XyYfOW(
zF>*x+UH^Z6wUWWuYkL@F7;zKIUr&OftB)eI-T(c?9ZkH)0!|?`23WBWJv#{e4^kh!
z;>$(w^g~)6goeG3wxS(>PF$iFOSc$(70#WT>`3Z;X?Jdw&s1ENg+(Fqq>KzMX$im&
zzrL4ez2p||dnAEN2tC@lt@U#3aNZed*vQVmxxS<_)~pGqRHzgW4|#60EnpXLRA^mV
z{`Z2JOLs}gQG%sFMVrMNbaFDX@myQ?r<c6(39k$Q_EiTH%f3=}DNo0s0LYZQiB3F{
ztrcY(dgYphNxLsc?H}Mw#M@bZOi8k2BM6reh=fQB$U|^t+}v0x(zo0P33EtSSs8DC
z+0{7|K4xRN+qE|e@NCQat`e5Uugr)MJqERi_hbzbM@!_ff2e4%tPrN+|NJ62qxqyx
znlqE);X=sg1kP{ke(kev<1Wg|tt-FZMBdl%Zbb+?7=Uum-;$(B2v5pZ(OVsQdyAx&
zL23m_N|t(NW>$4~UN?l^A9q*=Re_L<q}W(pBovrbddj$5F-P6fy(fVl@Mj&OARjPF
z({01y;M`l#gx6B#F;f>eJ~Ja_-AV+O2?=`I`ZP;t6t5s<2|#LAdb)PSv$ywD54O7h
z?^U}IOIYncc~r_%0j(ZF3Uj1U6feGVIsCj&4!u6kCkA3p_gQ>C^RSuLU_2jb;e32J
zNJ3Il;Xr*xL4je#GeW45?%lQDCSKR-A@_BIQC-bpX1CzwYRXR0D{@TuD^DI&#Gmdw
z9qPs}71s%?fngJBw^7pj-wO%vh_iZTfJq-0+_#r@#Lq%9k@*pfTlH1`^XD83k?|6V
zQAg1v1l>RQ065E7Zt;#)FS(5ktx)!VGBEUcg#NYyRctaNrK6?gPGGBhYtgWdtR>ep
zAan^_I+i=zZ;uG1V8`1nbYJKzk%RJqZJSL-M&`^J0U4P<X9S=naw%);>gwz0D7il-
z;FZ?91_y`ce;exSXLIuN%K5_u3|AJqI&29*A=o}&sz@p0?ILToZI^xPU+UG)s&K0{
zxrNaRv@5~;x<7roQm-$drL#t9w427EgEVx<u;}~v`-f3mpTh3K-{(6Qaip_p-sK3t
zeVl5CkWh&?VJ-{yx_p3wBB<{LV)!j%aaWYU$c2+*l&78H@5jmUOzS97;c!p>4m%qg
ztPV4+G3OA#02tJE&w`X9Hz`B-)k9G*7M4DJI<G!T@c|GI)sZ7iM~<`vKfF#;FjY{H
z_ncSH=1D6{#|Mr1V4d!Bbb*H`@44T&p^iWuMeK(<s4BurIy$7Vedp9$wa#1y5p4_r
zuJgmYGPQ6v4>HLhw-B)oZwLiI6>W8MLBSo-Vz{4Ce|(mHSs+m1_iqM1{-USqNx12c
znwbqi<a}=RiTFrnetsJpgQ`){C7nXU>qj1TI}cT%_=_eyS}4@Z{qv>hF%+g4Er#W=
zT97_mMHi@5cP<_hF92c}GZj_b-6ICyzG<MoLrKf3rKNS0XU&I<#p4xCFll6DWaxED
zTYIN`4iH6`c)f%6rhd!IySDi$Gb1CTIm|%M?+LRTCD#ics+Z;E^$o1Zpat~sxhvCt
zzx<|NYruXB$i_g|rp!8Tt!wbP!@g5;`K|dhg(vRFBh|MiKNp!yhEPoQ7MTQeW#{`E
zK^KOXiX!AQ)wLIZ80-hb9$zY*i@y{-0m3NmJgA_PfYqgIYk#kX*ELP(M=`!dfLzke
z4s5?JxKzHLB5@jq{^^McWX8loFQUdtm5>T^Gayi{N2d-huR><hP|^L`J?sHPKZ)s5
z+5fNrG{S<HUdDgDN6JF$e|(?S!mdz{^XBFcdzfRW>)a!9k93|&wLaU~)1SobCIC28
zNhuU**&`!|G0OyyhCF)oNZ<3Xh1#xNBYf9g{$5e7pQ{VnASJSC9oNv-rc@752{FVT
z8j#xGm>Dps9y?}t<w~^U{!jOPJ(FHGMmoxm0}kc8E=SICEd1W#fZ($}FTD?C>ev6@
zmE7v@C`eNahlgLNE3s4a8wH&z%FB<jh+aMNu3`WDsjTY)eg1wsvW92QaB=BBu(`Kt
zw6M7N`RmsVfvf<kqnmJfpl4)lsmXd31ylyopxP~$Ttzy+2T-%et=(Z|nH0!6bx2`R
zLh^eKjhyWOsZU06aoV%m4sB@<vZ;F~*#oTozV|XK8(l#v%a^-ZnU+{Ov$KCwrCIO(
zis;~y60O&r*1PY9i*s}7si?>`u##kzGrEj9cra+!sf0Ewqy|wn$`Uh)ag`h>h&|4>
z&F*hse+@xHGMsD(03*rF$vMo(c$k6V+}{UOjkWTL9m1*wQOv@j-!6*C$jDy^>tS9f
zuFFlTqkayV)P*P5KQpc^BHGK!nnn1@wYxqzDNy$9b-ncY(IfFvyfhx~iiO}YiCi*d
zcTMi*ezeX;gZ7izt)qTvPYnGqugpl=o|6m3_4k9lKTh;I^mP9<Q*7M%;A;y!?%K81
zu5<eOJ@9>F#c0gR#q@@T20SoE1^V2H60nNdSXks277|RF_$E)EF3YyS-4%e@44@Ef
zVS$Gg&&XZ8h+8EUw650t23Ev;Q&qKAW^<$RwsgN{B!ZYkPEqB}{`rFJ>W(0A3x&El
zmp&wyHw~euzbNUmv+Wl`o={(3-{s#5(Il@yLA|iX*19HMoQwLSQ+D9>RETGX0<O#t
z1E~E@S;fccf<Kd;WE0+TLTyuJK8Bq_R(|vJrqa~HrSf~od}HCPOZ%3RL)O%Go|=m4
zsQhMkdK+=4M5?FH@^Rpek7{evR&gf@ZiKz^{9T1`pUm?VpjPVKb~`zJJ>%3dT-uN%
zk%+6g^{8DbWkF$gx&;eoAm<s*OQZn;4IJN4+Bdt0B|4{tf*~MAIJSgr6IugcvTtu1
zoN5dS#bA79_hUoDHIf6zspvS~d=fZ&^+PhhlcZGT_i7&suc6oOl|JrQPoI8|!OL%J
z-C#Wr4V%$3<Gvq13fw23V_;F~{<~6i0VM)sB_H1+(lySWIg_|`FeMXc7G$duZsVi`
z{LIZOfT9J6((G>r*!(^O@n0;Zsb~i!zWisP1<-l*Jrsm`-(<03S0p77@812w&MpZG
z?U{-9Mr^mL;HP9=P`(UAKD)ssz#4_s14wnVw2vz0@GgLBrXB#yFcXddmI!W(%Y~bO
z`WDcr;lGO$YK%oso@@aOGj8|doGL*V*vQ0OWTqr4GG4LCC2!3=J<TIg^`47bvWFYH
zl)Of?ybb?}(Vw<m0x$9EHk>ZmSy@&vMOY-wekqc&?!b>k9LXA1uE_XVf4GZuEF|5G
zJ_R1={fhZG@&<oYdC;RRhqkfKTFkb?Sf~To6xL&$MS>;5Irfo|lwa>>T+x~mCk$%O
zK<eV$;=H;qjGjMH?|%VEJsL2_t5*rfTO4#VP~OS0vD3F!QdHtN2(lpAW%#I(^aAgF
zVtV?OJVgOlS6Uc8^GsiNp-Xa+P>v02=?A#RJRVF&eX`5?<HXF&%<K={bLX}`We}s;
zGJSF7GxRUnTmOFdBkLs$z$U1>Bim=$0g2NKSvJCe6B7qr%hfxS4A^7L3+S8em1+VH
z5@)n~z#ag)sDEA;6qX|6Cz<nx)t!&ffNzu5iYam_%dtzz$eiQ|-A75?cig~$UF7n7
zSmK1pwXX9lMkiZH5NEWEiSMu&n0E`<yRTe%abqeLXgs8yfYRnZvswh2{-Q(J7$~-S
z%`lB?^-yr-F7S!(ops<f5-`%&e}<gRrIYbTH%|&9A2ML+S4@Gy-UE72Ss$Ho8mtEU
zVz6Kg)I4117Yo`lM=StYK{r_|orO*+N!W&&l$vUE<aQ?-;dw-w_;PXiPp|zw^30^N
z0%>86iM*4@!S2Hc2+scCW0<`Vaw>HK3~R9K;@?RqAVVSCT1L(phS#o1&`jtk1Tybn
z&5;7j2jOi<142u|Sfz?r63o0A5+kciQ{DLO!$_b~xP#3ui+j!$W0t)#)z#zz=L%!9
zob@I6(Bs}p3AYgPb^}61meu2qk|n%+*+WBX1(Fe+np#h9f~bi8!n2=0nm(Y)z9x~7
z`3-l~%#YVuukryjF@P2#*z0rDzM`9vW2v8nI1Uf(ggqq<k3MCsNGka4+-ToXk!(O1
zKks}R*y2|Y2XP8vBG(WtRucdDBfw9(tA~(2lCCU$_AK;_m$H>D5_Me2egx_vE3VG1
zRScL#x;`OlVXsAvui=j&B&x(+JIk?_j%8jhk8?%D$<Ih4{8aq1PIE0NWoU1p`uK_6
zMoq69K0faNdW)?j2#_)=uDX9*G}#%BT=0?<UYu{G2#=@v$)Y>aWT(aISMJcAo496S
zfNPx_@Ej55a$4H+qM{kOTt-1Jzl+L`^Ds{X=zTORaP2h5v!oTPpO;%XaZ(c*6-Pj1
zb2qcz)my%rQvXeYnAp#CX%69j*Bu?RS&>PVf3eIEfs|QF2e3@#s-2xH0D?rj`i2H(
z?Hs+3LN!SqVc0LN-Ibcn_4J63Q5`;9CwAT^rOQMN)M#I3adD>@Fvfzs)k3xEj)68^
z@HFPNo|R?qXN6DVP3$n*J$a+h6YRY)7WIXOqm;~an_E>Iv_gq?5{uiRfMGkFi#LF>
zp%V{1$Ux9;J<33$ycCqSzm5sG0mZ@nHaR@Z>=zGgtiO_R^d}yI*IDXGUC=gDZUKR<
zXMjdC_@`Z8*TvaiSiJ3q*-}t&4rW-pYuB#0!&&d<qc_sCD$p=X*1#NRJq4K<$^KuR
zT~UBtfiHzWej!~@P+)9g@_v<|!`Y{Vn=?H<T|}u6`877})-_~0AKY)VdwCff?zX$R
zl=q+5((vqTD`~Ql@Ao?o$@uf^iIINS-TIhky!@jmptA_<oKhBFz#h9!0Nj!EViri5
zz@g;P&pTz^dWvJe74KCir!&5*q_VQITzkY{)rvfLumV5?<>c@3@)J>qifjKI2CMs^
zR73LQ9s~E8FTdeUa1ZeCSOx@l@VLl0e7n)s5U7;D?D)4Zc40~!SC0!#Bj*o<iU5Dl
zHC;O8=peofRDZDA^$;1^d3#s01N4$5OWg$qYDf89b(AMD6+@-d%9(I@E5i-OAz|0i
zYyj*}84ZA{y5>OZi2O3~A0Iwk2W5oVo_V{$A3iX^^Mw#9of^apKl&=J&&6}QLuJz$
z1vKx&%I}TU%V+7a*Nb%j{$wdHd<DM{;)q>Ldv<2N&b<q0kAF?rZWFP^91?DUeFpA7
z`TVvwX;C&?MYC@O$_r2gB$Jbk3bM-FXWL80g58bp6NPPN8;6ob@5CNMA`Ft<AYR-1
z5BCq)6Nr>$+V&@20R2VFZE0m|yS*@$i#?HTjb8wEK_m%t&HK+K)z}XvuKsaw5Jk5f
zh^ok$Gr&0d;bl8wE`>23LibB0mNvx1=dL|Q%+o|?nz^Lr(L)xm&fTu|xewR<AzIF2
zqc2b$p>fEE>MSRxcdA<e;7G@}_2vH$bl0#~b)!K585%&1LcyzQNEhroFx^09f=tH~
z29P4aI|lXIzR$>?BKlbeAz2B{p9dW!eAnUqd!hN{I5Ek}`pSp7pBfpgPNt^5*djPY
zF~UGc_q@1R%xzrGz@Qi6ke{8-&}{OywmJ=b$9eB;7;7kZsNW-t%~Q99Q_lM6zw!Kt
zvYN$i0ri|TS7T%2sXMI+|F3g@7<=K3n~Te%>dbo)Y6$y4+^QBe4Nc~=XQchfU7Z)x
z{hv2*(*%F}_ANdAlX_x)4+_TJ2M^#jP~|3)dGO-EJ*)BTH6Z@^`F6VJ!{P(5cDSR1
zkG+J1mEO@DBZZsuJB0^zn+cp+jEQzvj`V)|)bsgs;zHQ(!wbCJIUYJGASnF<)_x+V
zp|@8QqnfabBagSwn&}(QGMo1tq_fjEKYaantK~rv@MJQZZ&+2p@$5L&3&+0oq|=-*
zTNGa^pTbhWI%>M}w>E@x)F}Qwt4|?a6Z3YN11J)(Jv)$bPL024>AvuXa^}Ai2FiyM
zQd29IC{Dg@U2s>Yln4R&d-&2$GNFI;_%*%#v@b-kDw;3aw{3kaE~UytQ*ZbC-Qcpv
zGxy1>TCM3G?rh7<Sq}Iv2p25hht?C1B{N$abxKNP>?Fpq7G!my&GD1KJEl+`10JmM
zSgGBiGd7uY_>}I6Fnx8#9~;q;S0x;P9me?mM@@w)UmFw~%aT?bPuBfSk^R6Gy=Th3
zJhZCuTpYj2EU>78_b5Fc%o^9R2UFcG`Gr?K*SkfHg3U`Ee`}UTGl$PARJ9P~azOR0
zP1H5+%Lc40uB;%n7^)WTe+X?tRN>vIsIWKQB`i)(m9I9ih7wDmN5p*=XM;$zn0Eso
zyhjX5-}q_Z@e{^z(rMc>Bn+)=boGq=v0{w)$(ug^Wta)CG{Yh_S+r2Vyk_v7T&?W~
zo*#N@YGtOcOHW@Fz`CjP<@O0R0f%mzpy5EOqQh5Db>oJt)dvh4oloAJprgB-tLfqA
zC(UsvR+LzQPJwdtf~NuqaAE}6$K1+Lv4PHS;VWmt$?XHx)xJy19?a9LL2Pen_!+aa
zskM<TemBY#y{)x%d<Ts%wk*u6cnW9i*LJIVHXdX^DM@L2&b!_}T;tIJcP>IS{-)Wr
z|C02~;WR3qvAV7XDnz{xZzz1u?k==V6_atyeeq)NjIsQuK<yyz1AO4(S9$+S;NvLp
zj8X@P$FuRTQU<S<q<z8546oHpB(29VjUi(2jh8GNTVq#OeP7>2({B$6xS)Roa#SrX
zGk<)YVclkTYp1q!Xtpg!5GQ3H-5Nzb?tb*L99&$l?0efG=>k)R*3;sR=k;9mBug8c
zHeql%^#n&ld_2CAmHu}%RM;@rR=VH$;p;Z(|6u{nbJ5YC5YH6*r~Y3X0<-W3nj-p>
z9~~{@`-zr%713uzsHCe#a{T5xIzk*Ah8h|PhZV_($y6j&Ptm)Lu+zKBeR01i^)$B*
zFS?W%VaeJ-u%RKPWCO+UYxjoGIc!$*LL$Q_G=&%d@1;(SVtR!1Gk9!aEUcDR7W^)f
z+%@Ii{j+X4)EWZx6ROD(D4vD4J5#06gw3EVuG#{86}$dDx<pNr^<3CNE#+{)B!um$
zcyYAmDk?%OEU|k|#*lj}%%@lf$QyTu^4sywT+HISwV4E%+L~ni^+5~7jyncv2Z6Lo
zFqEg|(MM`vUQ}l##-SJcU16<)EGa2D`Oi?mZ5yM}(NPeAsNB#UOQohd19f+YlR(I-
znSkT79GFj*-hot5$%ARmK#8&~@G7gYFnK50#tuPSfo-XaG{KyjDf`LEL$9Bj68O~+
z!+HVRirBcg!gHvr7Y@6}LCz#<4^RNTpza$_Gk5nwWY9Sd)v!*L5RhKv9%3Wuu>ctO
z4l+ohtTSV91I8B`9PF}#$p;rJ2%w#NM+6C&F?#BVuxIAA8Tc6?6i1#2Ss7YdT6VcZ
ztI^ikS!~yh(7*G5M*8z~8VZffERIavg4qlo?8Q=RJNn0?gl6*4p~-D=QAJkGtM>Mv
zvsKC<w!6oTU|0=g@Mx%aAOx^JSkztXjPsw!i1WgLka_&<ttrmBw&IF88uK0r!ME+!
zp%4__2A{qLyRYhnrj{1;TVK%+Z|K3THd_}&qW(NR|Ju9Tf#FFu53mLl%s2}@2=8MH
zMkDX{!AAxFE8{s6C1nRGi^RO6GTmeC(YH!vWyh<hKPoXsZ@u1nT`7n<=Nz5OT<tYi
zWBudGqBI+N#(O(>H>Ee+R%Vl4ym*1jQ4D#p`07$ZHX6piA><Fi%78+@=IQwT`egC7
zcqm$C9<(F6pNBjKZeUuwwh;^qC)vXMe2Q$qVC1o#C)iO-{`+c*ImpG)$;p1`;~-Xn
zI%I@TU3X6LC@cbKx1sFlZ<<i=x`Dw1H%TePz~2D+89mYteemF*dRH`<gi4Hmzy)r+
zyS)oM2*Vl2J+kCHuD}e@J6<ZYHITa<0BE@}p6_C*2tuOoe(mjj3!Nw-Vfs6w^zYGd
zf6uxgh~#L-MZnyY!A~STN?)8x6La2%4&-ReV;7INx)}=WBw=peRM}fko|qtcNWjkf
zS}I1#OUB0VSoD8<?udX)`ZJE!7xy1m+}?18+w4u!<~N8e@cjbpd6M*T1VOqGWZVr2
zvB^@pA9LT+a|N^F)nj|Fi*Z$?$?D0TlDK`Trl3GoL7}?1ShkOh%x?bdaQ?fpKu*QW
z6#HzsJt8O~4zzDhZ~Ck5L6MUUKHEa6uy<-|D);3>il$GWv=cR%oAGXRU%6O7Y{0<4
z(3<NuaUv=G-{pq(&oGa1=I+CYHT}I@ZDF+br|@~{Vz{xyUHU7EgqP2QT#`xt{Nu;|
z$B;(E8pfXbQ*^QH_`wtX__)7`P_AL}Zja|KbNH(1dkZ}373aA}j=Co`a<z7xfgeH2
zfkA!|0Y?^`!8`b`Jja`!Xt&`~a>Pa>9A|_UAH!lPjPWN#?X8iNJs;Lb*;3#22#|>*
zwuO>UjSE4MPij<owbRK|4N)x+Tk!esjrlzvW{3xuf#)9%3Lv3ltZoM|RTLvTGdFh<
z^C{B0qHhkP+9Sp$Q`7>|b!c};(L)E;kKMa-cQV@M7?%?)5Es^L7Kw}4ketkA$d@Je
zT0%m!-obk23qRN6?d>6iWDh>ocys!yDG%f%U7eueVMiVv9=`pMmbHs4%`jf&7#VxA
zwgd;q3N}0?Cm&yxC(^EbXG+0%=<I$h+ltKyA~!wI{)nV(WXyH0VTWH`uq*<#Oo~}c
z9-F~kN9vp6S2FAG1?UeO-$cJ1Eb(0J;YTQIEvZF|U^|7e-~xuldldEg;Gl7ypBWU|
z!nr!k%?Rej{pA-FZn{N5yO(Q=7ok;N1ZIMmSD^hIe#~DT(@kHyt%A;{pN_x~Gdonv
z^z{l@8tv@N4Bg|`T47Om>%Fju{DV&f9T5PK@8O3VFb>!6dHw2cK;e~?#@aU<^rQ;Z
z)MGf5Fi9L;a|hGQQIa$NZT9!?*Q_T`j-Xk`9rLrDE++kqU~12oFLd^l2al>z&~Uxe
zNLCcs_45xTAJ7d<{Wgj6+wd18{e0O4yd;cUnPx#7K<#Dt_-=f8)`uJB^{s!G@rlDj
z4(py(P38HBL|4}murrDVj&*lJFj;M^F6e<nqvLyI4t?ZqSd7u994msB`C0HJBquty
zf~MjvhiXxhJ7)1=6`E8&&$99niHSVH{jC{y-Wlh?-Ls-19jC8-dWUSX^tM{ZizG0_
zU*nR$4Ws~wOJCE(jS|Z<lqC@4;0w6_je+5VG+>aw3kw!^Y-(JfQvfL%l^6s3f#B9_
z%Ep;KeRVrGCnrH9WHclQdP|>Mw_sDMgw8<yQPJ0%lOKNrq>%PqJ#{3Q>#=e!jDQfI
zfn?oFAuCJCFGw(5&5sZ(z5;g-g#e6AcO1YJQ?DSNqqVJV3Y<}-vaBiHsLlJGgoFfk
zHHyZJw|v+*ucE(;)s5Zz%$=ZfH32&aNRqc9Gd-}V<-X#`J?!u)w{*X>c{I{>N9R~N
zYv}L*pr<6b_~HiMxKBE<vRXYa?K(JZ9Bbu8%WoevgcqspI$lc6^9Mydk9B=xqhZ*v
z>P8YOcQ}cXqT;Ex8|f-zjg#5PbU#&^u@4s&wxCR_&Kc;g$8e5*W!Jn@FkRgCN8g~=
zxc%J^F$~&xlLVt+U+F|%4MDauG|UM>W$6A;{~*o|(LBYQ-rmD`IIgNKL4pikjpU7a
zg@v5AB!%iCLwhD=KAG+wV;sLQ)_maeQx|jtJq-<`_rtP*9d@PS0NsD^Aapg~xMcSw
zrpA~mnB35l<rx&xQPX@s5zi5va{B7i+}sP@Pd{X427mVfQxD*lnPx#5XRH7cs25?i
zK4TxP<jP2S7I3Jn6a=rOy*QP@EEgnyb$x9u!zR~%>n5vGq$2O3du8|U--m~!bH+{H
zn@fmeDgr}l%i=`9TgfZVDMDkie?lAD@?}&>zng==hLHIyP|$|izH$dIkqI`940We;
z>5xMCgZ7DN$xLx-YBzs=c!I<Q^eeZ&Btc1nkfC^zAeQqR4~mPOYyJIPb*?2U*uRhG
z?k;yY!lC?$kZ*3Gs1(DfM5;a4GPX-ELy@g{<RLs6OiZlXF1Zj6WM#3Aj%Ma;b#FHW
zil2yKE{JT3UgB)Y+x~5?t^MvEtpmH6zva)5W+#sR>fGu~tHrW#dGVDw*`?vSbN(~<
z)14`=Z%^*h+8c1Tbd5;i*W1bNzAt~cw+U{Z7>4NFkQb^6?U=dYEjU|XbMt0Z*Bb~5
zUqj$zP}n8?{#PKe!obpa+t{WD69WSv3WuH*v|FSxp>#LDotQu8_qi_P2X694`%wrI
zG1CeGA!_Y`)KRs?XRUMw6$UV>odfR;Aw-2aPupqh=><(4YNoEadx_(QbJrC#8-cB7
zZ~P)M-+h>g2e>qlALi;OPZ)f$ElDRYT6<YhPi$Hgq{ZN%In1SiLw6f14-*#a#8VM%
zggzpAVb!7ur^3amFDx;vau>Nk@4?AsvGk?4ccAR5`P$-y9@!4MC|=&+&D!UWDbM>J
z=@{c8;Q!}uk@JmE>Tr3%7ZkJ-<U<+ausUx+dJ)MGG-AdahaZvgb1WPYOr88G4(JJ$
zD1+~vbr{vn(MGa(nX~V@a{FJ}ohENWLWnDA<PH{8qcy8WLDSSc0QTZwLdg7!!K|F0
zu&vP?*lZx#dogmCUC=K{bfxHRhObcRWf#sQ02Hab_Bn;jwqZAPA4mo|=^PlVnIVF?
zq*+C;op<~kwEU0zX(=cuI9|R_uaG>Xq~Me%Cfxo8x+0GKv=xBr8sLXX7P0%0ug4j$
zv5D5~NgJ8Up%Aeg)xJ{G+e?;9u?d|1OLvE*iK*F`iMD;bo%r<)LQHAoRwK!X8-skC
zYYXh3-RL*B9nQB@Bu^hUul^Mp#VixzZ8YqJZ0S)ttaoiCP7kkR3@>FmdeqU$X&;Fb
zvT83Xho73?lN>E}jB7L4W{l%={D0Q5SyPW!9~_D2)`NW6q|CMmiR|wl-469Vbf^>X
z%7PscD3os6$BGpLj6#-*%hR>?MtM67XT7<^#a9t9jIZ{w^esbpfif1ZuneD@6MvD5
zHiM3CpS}>oiP@r}q9!xnU&FXX7v9QCFQOE6nJLBXP56GX%(g-K&NQp~lT)t0X5K$Y
z1d?Na<;oSrqHwAoB{AXBJP-)($X&!5=QBqxa5uX8$5LJg`GR+><^<kliT9t`uk}M^
zo|GzO4;keh>K_B;+Rqd+jJZGQa%tZ?x0n0R<sWJhG+tg0<w)5m!)JEbx}A5fNA8J@
zwSNBB*sY`H^xuyiwqmo=o#Eq3+#2wwpTsFEO%>kU^dX#U&9u~CO;kC5gsfYQbTeZP
z=3M(b;FaaSwR~iEMswT7bx0x>2fbJLeu|GQP7FZ*BVyB@%{JJ%_;Km)-)_H2LzVkx
z4D7P_NlP=ur~l2aWf>GE#?G*PQ$8Vy%okrPlXClI1Xg&s54>8?k{@i!c_rYWGJu1!
zj(#;-j*Cg)V&eA6WS+i0!F;X3&gt$T5-ScIEFd8@XSX)y&e75RTwGgU9gCW1pzn8k
zfd%mkV<|Fi{-x)2o%PcSgtX|g_bF_NZvHEb`P)P>)VLns2gWnwsr=`3`5?f(?S_SG
z7rhiKFIDMBnQKr0?=mj6HYl?_0JrqhYj@Y_dY|liP7$m+tFvUEb(~aVyDcc6l2k)o
zm!Go0A&2=e7U2q*5B?sDl4^6lzP)J^n^tC99%sbI#-=}DMN3J^wsT8W4UL9%TKu}D
z>hYH)B{4f<%iZa_iM(a=Pmp3TL)ST-=D$7>A-Mkj-1T_DWL^4r5hx(8`4mVUnk-^l
zZQJ?8Z?Zi@#f>W+KE(-S6~pn#mrylV%f!0Y4#%2S+Mw?BPieZ_mBz1J<a-NxArM$@
zVS3{+6pJbA2lT}m=V}v+vq7$+aKx!9cWpeqcIkgufWu<1(YfmC)Q)7)3)5`6B!F4F
zpPRV~iU4(ej)#4D=ATXRWxw$^A@L599@FAB?KJEwq+<DDzS}-SXmC|s_>Er-cjZL%
zI_H7PJ#oe{xW@;v3heBSd!k$oEZZNw9q+G=H_TQ#Nx!lD^;~aIce)L|So04*Yp}fQ
z|4d_&%l_<tx0?N8v){QEgcYJ+?o>5naN-u?{MF2MVogzbxDTxul&zYnXC<5mP1#qT
z?_WG^Qt^m5wfEw<9-m%8gX{A}PNoh_HV{6ZlQAr1%66Mjb^Rj$cJkhH-eoJ^rd@p*
ztO@g&1(cbeomA;5t77ZLhm#`daY?%56j@iU@1RGTYdJ^$o7ZZVUr)x9ZhbX(EmkSR
zQWSUh(|5~--)tXiEj3*Co4%uZDS(OJ?7KnNaK-gEHpUOh=6>9Lo#~jNus2@)LalP1
z?jZ{O(~tLGXz5C8YHVa%-fdw#y;p%JSS3Qh_|ruhOMn{z>pd;szA4I7=#mYU&vYW>
zw@qdUiTUI2C)otEBGgd2H6QX#v8>Gx*JZ(?oUkh>Ku_FiH__lZ9ufuiGn<i&TLTzq
zY|^%%q(a2eawomI4#$bJ-qAP7$o(LrTlu$>+a>Ng8qDN>lyl<nty{MS{+%XMThtD-
znS%qzYix;GZ+r2*7B%PgueqJ?b#<37`L9h}_2_y3aK~IA`gX2K^rqI|Zmn+iYQ#n4
zm)AkZ#l3(M`E!1x7HKt`o4y_)dlP&KaeziHE-!pDI$~JEo||Rbp|44m@#7JUfA;9l
z!DH(Vna3rUczu*zb#1@;b;2qeu`QCTRXaf=Y|T;1B!5?8z$t89gNu*v<@pFh2u@X4
zDBA}qeIEP${ZI*hUUxF~6Co?SPi16yI9-!f^esAG!{VBTt}b1kF4c~N#P-%kXd3}M
zg-PD`{pAKd(J%{c{A*Vq8mv5;h4AM>RMc32TAcR!a2;{}??MR;L%EgIyo;JVw{(9$
z9M}PBm0)SrS84-wK3CfD{Eyr!u`)TKKG=QOR<fusU31B(QB57K8KGHl|M|>+t47-d
z&Eg<fL73jvnB!$Y;<GaudklTRP(I;s4Kcs*l`6}Hsd*CG56RdMd`vFa7ORjC`o5?w
z93xKhKxrrHk8pN-t-1B`4dLZUDH4Swok4}^9M$-q=zC^1st9O7(z#zE-<L(7&bStx
ztpgR#LvAe(WDSefr7t{~O-(gml=0=epPHJmwRu@1Nf@fJcb`9xWJO8-N)uB)zUTJ8
zhlV?5D)t3tQh&T?+5+>pjZC&H!>QlKwh0^Fv(@oZsPz!eXJe~Sr7IZ~Y3E?uVOf5_
zU9HY5T!{7tYI1%1ujtc1iK-4DTi>J9UAm+{P}O4ot9bxSIOfn4gv39AYyey-?|_GV
z!XpX>k7x!l-Dj9wlFB{Q>0$@jj`{x^xR!7ArYh06>PCKiJ9N!y!=jniVgays2W)vf
zt*or<=^E2wuG6(2F!%jj9I)eGs`peYO^ckC=cSFBdb!@6AuZW0z5sTp@mRD7v0OIo
zJ=j<I>+5N1{kJzgrn1dzw}GZX#C25i#v>Z~UYAFExHTEYU9L2SJ7dV_5mo8yU;Nuy
z+d7z2<0ormPI9qROJ>dSQ~EC5`FPs6<N(XBp1QPxm(^uHg6)sKVfM^ehkaT3An4m{
z0cs>N1YKgQ_S+atl@>bxQ9Xrh*`#MgJjR44TxkcZt4~!hv6l0)i)LFICF!m$mNw+x
zfZ}PJ`vX8_-1WLaFWJtmz0ax%MVObvK$QwS`bkOo0=u40nrINoH7}aa)ow1n-zLBP
zkE2ejrU^k2y0s<vy+A3E^4#6R6p->QQdrg2w8nShU0@K~pnjp@?}z68p9Ou}G)c&k
zbo0BT-0@wk&X#q;YV#K&RlbXkxf+j?8)<`bnqRq$)MNb&$I<a00|Pjr91EqsYvhX>
zAG^z{^k;i@FinDQN)*ZY!;+6(<(OxB-6`TYM4S0d&Zt!Y&q`Rjh?5NQTCGP^l)8l1
zA7|ZZTqd2d>}ob%TC-G~s(%bD=j6(u4v%52{k!yxdkgT4{m%~bxId>5{iAD^BIUJ>
z>k5cvMm98RM{GaXn>;hNFyqjVI${u@DjrXUhAYRK#nnkI?|qo-9n0B0p^|eaNPFLy
z=9zKlpQL@${%m}?q-^8s^TM~c4te`XFVAz$%xnNGps*Lx7AyJlXkPplIStXf4IxtO
zIwI0oTv+gMD>WJnx;d?*tQ=k&AZPDEd-$-;)raR*ZtdC?So&tG$Vk77(*b?kX)?$B
zMfQ%)PObL4D(3tgIfK<?(ay_rpK_l?X4mYAS^$GuURI{&U(SgLB60?MS5X7y1KNzb
zwDBY8U)4CC>E<Z(SL_71mEWYaYnJp}!ge~O6_%=v7TLUA4I6H@gGQ~Qyj)Y$NQIB3
zT&8v1A>oplUDzfIvXIt)#XJlNc^#o9L=v_mD<Hk?oXE9WmoxhKte^kAz#D(IWW^;@
zMu@KUNU_naMa11B;lKJmQA6cAcE`3$saV?dm_P`x!pEMV{4Gu-Pwi$Yg&-mXE<~lq
zr&T$0C_kBx5WK0v0jsy%&o^C>e`F=h4n`WCjJ)L+<7Lu*YbE+h7`d*(Wg)T3*hS@=
z$M+IN7mx-MMGvZUbsxC;!Je14Ui>S=TfdFe*gp2eJ@~(fst<j1A-cV!#^WEmua~!l
ztE5f4bg0}xEL(vq3EHd%`!_UHIrkoMJ1g!YBI=?Eq$KJpukpL3LJEgpMz+jd-|pNU
zW?3)|SzpL{)gP@n$>8^G)1MF~Cz^T^EJqeRonRHeGhnT-IC7u9lARhM(^KYF`-q5`
z*9fm{m+}*r&Qw3D-5&oK^(~{A`3;}Bq&RdC5fQO51yX*hf>$&+jMHT!3CGjTAo9j}
zFYUaWMmHw{{+-nC<kVk!E<{X36s^8TL5}xJ@s6~lWR>5Br|WmviPwI8&RXr>*r-+i
z{G0j#ldLP?3E<V-%2uudj9EYB+Ja;Et3C8Iz<(<Cz8vYbCd8m-Wm1s_2W*v#LA<_C
zW~X`%O&0j_{EFNq+nf0J&e*{Ur+xPG)uA}`N30jl7=5)QCnAzlbxF`+&Wd##!s7<f
z+vsp~F1D-3PQ-s3lZ~L^K4aCaH7x>Zu7J_UEg<UPsMpZtq9_X(znHHJ3Yhta7K?Gx
zn2s)yYWI_!3rYxu%vXCDm6EcE!~k0azg0;E&GlCfb(h&bH(jxLUxjcZ#Y>@wm`>Vh
z?<1$-!nP%vy*saUb4>3?M$!-w-HuOJAhp&XYuORM{(Y&qX1)FM=k2fNSI;<n!7iXU
z^d1g<r6G~As>5R~mthUsnRuA?dv<o;!4sc=s3bXHxex>~Dw;b4J4RorM}|TOhvw!2
zJ|evRGoqqXxR)y{y-=n={lB^PSs|YspafdHdgO*e+0_ra2~K|#NR9Rq5m~eN`xis>
z&nruP;xYeYGxSswxp(%5%aK|uLlveQ9(RLNMJv@1?(Bg9tM`dTxcPw;zTA&RahlsM
z!0cXM?POH#xQiuL(uKe*p)6xhia^$b1=c|#mlb=eWY+U$x^o9l+ivm&&I38_+HT`~
zOD}5QgIvuh*+1CI$&=HB2UIymdwnumhlofxiLEQ0iv9@ggj0p%1dX-a9tGxeRmi7P
zRBVKJ9h}E=hiccc(9M?>73*u0$F6^GOyTtg9pUxhD$3yU!oo4(ao*)AoGHjup?Sm~
zN`|ft&FUGuu58cWmw@W4PxXc3sK=?W2(Ub1rQCf?S57XS$~{=gFr#As(fORmj~{Ov
zTU=ZHGf76WulYvijQPFb#nXIzrn@Km%5pJ!;htK7XGe|O?d$U=0s>96MBF&XSw_WF
ztK<gha`J2G-1#HWM;|^s!mhTx6Zm6fWTcd}4WU=ieyA3ZA2<ND$O=-|p(s2l6&e4J
zIiL}1PeFxLz}}kMV5SN8IJO?<0E4<&RStk?4o49dh1Iz5j$E|ty2NbDHmZcrhR38L
zGJad~#<d}sEz2jcp9T^NLrc%kYbqD#Fz28>{Q0+Y15%v}M<_guLR21LT#)gezp}Z?
z)YCT+p_#~car|+TJ_qbCf?My;?fdbg{W<m#b9D3HIj0n89lOPi*8Sd4&Gr5-k{<TF
zZ5(UX(7*u{!nNz1q601`@z5gZ6AYf&6|F<}a1HLvH@wPrri%M^-#+%#m3Qw@s(YSY
z?C$7L_c4Mc3|LR+NW%rTS3E*}uiix->z@8vTwERZubSaw<S|)XmHC8m;(N>e4U4r!
zTD+rL_sK-8+IsHy?zTMiD=#Z6Yj6Fl*ljJ)SK7z!t@tZddV|K=#ngtTHQMp|byS%J
zOwN$by3P$E0f$L1T`mLEU0WU|vj>rp$7Ous>>v~$8LvNQJrb$dRh2Koi<5=JrTLMC
z?Yb)I=4gaJgqzZyv)=cQmw&IgUfk%fal`B1>cm6y36q~lD324o4iBr5rIWR}f<GG6
zk5Gc{ir$Z14&KYtHa`0qj=MV|IdP*W7w<<?M|SbTmGRa&?2vr;ZI5|?^eq0cswyrF
z7ognS$>+D3U*a~$oddm)!QkC^bv(cXy9`Q#*=x78x!OaR2A-mN0YK6ly!$M+TA2I$
zk*9P0&KI_qznYUhXpe0&EO>*)s;9j5<10*_xi<%BiMoylQnuzHcwD>E>B;4{>+xJV
zi<Lt^0i^aeG>k>bZbwTmQFBB-H2Vsk_7}dUJe@4|*KJFHK4Sa`>OAyDdT#4pUS8%1
z?ZGh6{;(K7>MdN{n~Q241AN)!C(G;RYUn3MbrouC{MV;)!7#+Fz{m{+l(Btmsp4Ka
zVP$Xaxy4Mz$NXufI|Ibc^+PbN?Cffacmpoa*nYce>|GAuP=NtGXRa^G8`Bv_Z|INE
z%3#-CUZd|mdNev`wsjH33mp4-an14MVM(-UufdM2ElS{P8k<ZD(4ik2%Ht?m)@hSe
zelxp2)=WW|5VP5MlMdMwn1qv<{CZFXPs9=}ZxD9d;&DQs&rw$@w+k_8g#Ca$O-(ip
zp$Al+70pt_g)kx>YCYaaiDjb5L}+i-YGs4Uypy!<Ok7`Y$1yrO4yjs<=PV(rcJYa5
z9hr$2C0l$3O0RYTJ2F_Vkt#q(uUh^BYoc5)CxMs$)-Tmg&Lr+K-m*CKKP*7|dc4N!
zc%0URb9vZ>^FE@@QEBP5CrkS^{cu|z^nvw>VJ}e^RaoTiV+pTcuf?)Q!0!V><0ob_
z#=MKQ{#)tkL<1sJBRw>nAgDRs^yi$tW@Qz3C5&Edn=v=Xm9Ovjb)-SqEO#E$fJF;=
zP>JoKm<0HYyym3VIF>f%X71d%gFV^rZXv7f*N@i``kN5u9zA-L%R)&eR98gLvdgSL
zJiIk6AoV1ZT%RDTM*-rNJZ4rtL*NBUiltA`-x=mwh(8m^YvZ>jsEcG(Sxh77imZ1&
ziw#9W{JkE2c&Ifk9_6^{wT=eWOcsI);<(wzmE#ivEt~Ffd?};4rTq(s+a{{Fa>(Dx
z!J)8L28A5i8wjw8ehxZwesv*BrMSp3z4~}5F9F5J!a;bTbTIqk9%S6{6ek-jx^VfO
zgu6feS?^ZdfdOk1UvYhQCY@F@R3FInU0b|=V(t2-tOLq0G!fB{_>&B!b-jRy;D~pp
z=}yOCE`7L-G>uaKtvURT`0FvgGn13I))w{Fy7_BgfrV4GPw0iXFRAJzm1=JvX#I)&
z>Q!>0Z1$SUUB@1e3thO-GOm@zu13cmf)9tTR;OmE^+@sRZwRU|bg(u(M;CiSX4C7n
zo6yzS)<2JMeeA4`d2_R=zD49rC-fPt1hJrpn;TM$6RS@KYWsi58#z`hMs_rom@toB
zd6#bATQCy^1bYGEH*2GqrL4x_lowzU4j!GiNulp;ZD)HWQ>v!?J6CSkRUhAt-^y*u
z(|lviThUiKrv=!=D!WQ|xV8(hFs8<$Vc*@ie0PhABr9~XLQ#-JDx^(!r^bt*Ps$6B
zN@4r+1(I#`{9%O4BG=lE>Lz<UkB~>T02S%P)jM7@ckkW9i<$V8VUDefqo_j4k=0-Y
zpewI%8Yp<IWT@qTp?2%ch0qBj!&2)hSZ+I$mkZA(WOI&augs{J-tZLQYBDAZCXY_V
zpy4+^ynxFjR`$I~Cuh7_7mA~+o11oYDkbSIB4u-&IZjzX4Y`Kfy~NC@(y%6d0OPW?
z`BzX_9yd`=4V&GmBtP7s0}WYsXlRiikm+#N{iowyD)t^<cGQs<SbB|{Bk%67qM0m;
z;05-9vNvyT-Ep7jNFqR$@hkZ<1`P$#-^YM3SHDeb;+ExbtxScE^acz9aPgL^sVO{(
zJ&UXLxnAzad$dA<+LjqbMP@kpHv+Y(#y)2Wm4E1z*)Y8xL!Rq&Jx7zvPW!IJlE^J2
z$*?o=$W<LiD$nolAJ}9f=hR0h2zfMb{Y*{oAvuUknMpj163za3ukIrTA>@p@B=2Kb
z-%#nXo4mpd*T#tEX?FUO8w?$7vt_vZ!KLB&kDz;4I$~|Hurt)g$JgPZruB23t%OWv
zDdii3Yx_g5S|t6YGy}%mT4-T%{;lV=deicV<d<5LDAgS&>60hxRNIT=Ha}l5V>;{2
zJcEYDGk@2#`DKH*ss)+<s@g`u7@W9zJ<fQ<tA_62d}<fhfobK*QqsLsN~Ju(GBS3n
zsYG20&rSPiiCP~)`^zhfn2DlP4NeuM(!fjmAsX>VN*lgZ4*5L8B1r(Rf4-FjNq#l?
z+hAmV;4+HG($wi2{BXILl~^X+$Vp}M9c@&xvKoVVuxaYl-DMT^E@{rEIAqwV{Rl}P
zwf^RL{D=mb>&lslJ{bgeNt$t*u7rA(iRe#ud{-co)n0;Y0%SI{xjGgsWL5JuP3&$e
zs8yB`-;XInjI#bea@4MF=};X6-1&P{*S9{HX^c-mXnJ7{y{t~LI`q2ydsjPse55tH
zMe<_Lx84!=6nUa-$UOc=l!$0235qIOs86s22e(ITJ5D<*j-21`?*`^WN1U8&u+T=#
zvN60xs2W?0a~dxTt7d)%H+bU23G_tC#+6h$AkScspfHOFZre*i=fBu?6^%Qb$<4rC
zz|UM*)^0{O0ww=8+L0X91a(J0Ea0XxF{F~_lqYwB*c}o7kMZ<>$<rCb9VWZ88S(b5
z-%w3jtw~x{|A_ZZLoYWs-MKGu1gpVUD!fsI!nVUZ#;)tXa9*}8lPO@cByH$Dx+2hZ
z?{UEM1nbd@LFqm*GLpfz7z?+7Ck`!wKGBC+rj#%R{P1gyE(WZD=ZBEW4(>bP-+(e%
z<=vv|P#l+9x3Tzq`}k2nSlAMYXXNu~x8{dSoQ!urE_5hqR9)wWsmWt``aoM?)!xIT
z-DC%k?ImLND=9BW$&G*n6(0aF7%!-G;W|}YZ%>omftdq>A-$@Xpoc!ZPvAXm)6T}e
z(j#^E7&=j>?@RngIAW$VZ^|D}h~G{WH0SvYl;tN*6;eKWJCbS(vX-3n<G$f(NN2mL
zc}IW#=f^FL_8{;lz%3^q30bk<{oPk)!t&$I^0CSPTprjx&x9b+)tO=;v65B5L_ohc
zmbyE8iDhcnY#U*nu<yxBXq0A@UFZ54dm3%X1KH`aPML%~Ty^DGnMjq3^IX8u-+1)c
zG3;pvPhaXhB*@lS@U?Z<w$-{(j7pP8ULzx~00YM>W?$odRfY7#m&V4%X2z|HtHThu
zvz8_WZQ_tDb9vRh@bJ<ywS^G5z{rXJLL9pNG0yL}C2e?R1O=T<OlJN~@zBZ=;0+$L
zy-oMri`_4dKof3@Pf^oVU0D6vHRCP`ej#Y5brZT|OEhu@^OXM8bG(w7`|{TWo`03s
ze0BZbvR`T~dx}$C>&<oj^X0E0K{ftdD^7QDBlgG#;OI%+@82vG_4XVRC?6bGy}3o>
zkhq<o0JlL=cE!s-=2C+@L0Jt3N~q4cd{#|%@jI*3)qRmFd=pQsJ5%RhpLBK7j~iaE
zHtBRu7(U=USkx&#lhXBOx%%pH8WqzAqViL+2X?orlLpI$a^6y6wNz9(f1dmM6)YWg
zbYy$8IpqHED5mA+!=!<c8h5T-%lmn7Gw~Na9Y>VQ>C@eNqPT!A$hpm*CvSbnc6iFk
zBS(WO6mnP%jiH585&#~2FJIPz%siv<vNK1CLomnH<Jr7~=^!urOx^;X>?87*$uR(D
z3#r`HDd}nb_pzH9(=W!}&!0aZKdUPuw5VIX!(Kr|^ogVV>BAJ>!@r)YSdNaXXXzG;
z7YshQb7_=Bk$I1BcIB5w%@lDTFuq%fg0-{7)|VIWRR3M3-9_}N)cR?iNahzRvS21k
zLI;P?P-`kHG$uwqzfzk+8{*da*I~^^C`G{zR(tweO2e{t6&f*BawOKtd}JA47>lBg
z9cqAC3`g@(;~te-W`H8fl(ZQ7ZqB4uqo({)y;H@-MSQoHj4;(BwA(`*DE?g!P*Noj
zK8QGelT#ss6{&XnJ1;Q->8y0#K^qzG{ZCBoJ067EjX(Wpj@ZuxdOE${MI<-v=E1+R
zD<XLMWEQ#137%lNpGIK2^C@{s0<{^!1;OB~?OeETk4P90KYsXx2L_~pb{vLV#YU3M
zRyV&8IjoS*Sto<-gOcSHFwmg@StXwPs*Y}PBb_occ%rYHO+J14)V>pVDDsk~Uo?K4
zpPvT_jKrKGrTfWv#ACU^+L+|)CZOW9&trhk`HSre7vs?CA2=p_19&qnzT|?GloP1P
zh!VZ-!zP^*Tq#aGcjmsTSteid*m+sL-6x~%(8=MV%v{tf2wBwLRte>#N?C=I3Qvm;
zQ(awM7dC^dwcUaa>ett~2=sWsPBG3F;D7Nt6m%UZrSZO8WbW8_1@QPUra6Mg5Y7yr
zzZ-M(re<aY@TJH>+;jF7zQ^sQ?#Nxl`y%Q8HK3qE<jPsNju8uz8Y~<y0&R#+kZ^C@
zg?(&gZ8D9Ah-jENMmN>s8JqphwxoSis>vsWk5f@u+S)eL?%Y092yg`qQZMUyYN`9$
z9gh~`oV+0`LSfdm^c)b)Gp|jhawi|Ez-^#<9NK~<G+Am1Jlr6|ou+@h*2C6cn^zbY
z@x9}UkKX@~--JWr$P09Cv5Y@IKGAy``S|P#U;*SdwWSRCZxA*$LRDdaEM4?gZSfdA
zu^F7#tV*9Sf)L$)$&piCY4|tx^ntDf{e!`}>>#|dF-;(m3au3WD|~!>@!!tX_7L|X
zxdd7<IIwUJvTLD9&tc?z`WMI#fet>XmT!UOT*9AfcaA_rYiL=M`v;5foKr&DANC+j
z=oekaY3y@r%OOuU(53IGb$O3TLfLW@H~<1}IW?_5rbzS#LgrRzbIvc!^1~A;t-Egz
zgn~U?nN<}g1nr54ER99oDv*lG4#VMT6yVKeljGJ`HMFj!LfuGK{UG<s;Va(xKmF&X
zC9Y#i*mt?u*x5-yOA4&uz{)m0eE2XzYnCxEUNSK;z?Mjc-lrNfCnUDl_T`)J5)atE
z(_v#}#Y#&iN|`7)H!?fRM_jv8BVT_RvIHArs;5qerEmH^d;G-V)48!F-rxc@p5VE6
z4O!I?Dq>cBS{;X%-<Ar3-Y}lmNV9g}{ref1B4L^_tM<0rj0AXjTR+}D@RYFdVyEm5
zpZVZhNQdnsUcY|*63M2zZ!KY%kBNwg*bgnM?(RW+<sN}AuGH<uWOR3E674euEl)fE
z8G;EAX4BSIWmS^JXdPQysb|mlkY%}?`|y0D-L98>=V=wVXHj{K7(QZ6kL8i$34UUW
z8U9#E3|NTm0Dz6>P&H#EAOhv$Z-_z9#@?r{p#kyTYQOVecxzcE>H>*LFrlm7jCk9j
zo^Y2s;F(_TAn1{PsF>dTI03^~ytHa54eBjXK3i|iC24#^EG)Y9sn2r&^DKtT=ENUp
zs8?7n77sxGWv3s8rlsiM>c$3MRxVarV4pnt9$<dWCJmQi>cF||g{*Z3c6^@Op*eX9
z;y0I$4$MC^U(uRndk0MiE&rv)hOALMfihc5)N8{Kw4deUQ@7tZZL6-Q`)e}o>JnJ?
z9909hDR?c*@xVjJDekj~!~`k!n1c-Ky}@L05SZe5`Y7Xf6Umn<O1Rb4cXdf44W{oy
zols}%Gw)jtiZFGX6w@Sk9i+{c&8H(ZulCMh^Vukkj*iACdTXWQLOVrbA{`b|R_UM-
zHXs>yey=6_K|2gWEJ}tV<vk?UsAH5wDvI*@IzrgW2w5yb6mB^%@28+Jf8|mlX_~D(
zLSR5|tE+CyaV{7c@Ho5v(I}S0gLm__jvr=wXv-pp+K?>j(SUKwgdw_p2Zqi&K|#IU
zLAVn(w*F-eRr??wI#=_Q$21MQt83=d4)$GI(o#CVwRwUUwOc%=dvqA5UBDAUjdJp}
zP)VxZzW}~r>0|WtZT$(Sk3?T=Vl1}EW<HIvG-l^Z??|DMbKb-K2D(AM&M^m<k7P6Z
zDVNJVlJe@f>k9>zm*>agiq^p_966vB12SxCYHBJ$svS00E=fpk@AQV%Y?h|Mlbmw!
z&<Sy7Sp-b6$U-xY{u8Dj66&~Y!*4%+sMkC$Xz-O%{K>IH9TviVn3T8ikiV)UquLAU
zoSylov7N634%7rVtDL%*@Xfd;nb}N8R5W4dHED3`v+>{j&Te~?bP#F|%gfV)w|t}%
z!eY;yIN`>t%mg9H_x?!$<uI_RuPy$u-wlc_>MSyC68KHj`?Sd^fL_gf%Gko)h@x$f
zQNLqEnj?33k{<86cyrS-Gwb2QhtHAL$P0Og%JUF;;o6J4k3B&NjBkv4#4I7^->NQN
zNjY^7WK-=9y@Lbq-quKXOdPLs&sl3~Y91UMlo7nV%465o+*~EM%ZWYVa`ty4uKZR}
z=fTZ?Lt+2~TR#-NjOzT0E1Q$p{&-J}F+!_~5YjtX<x!{{!(u;%hrO3o^L*g$y}&v<
zF&a0Zh1M?SM)2JF?@B28Bp%;jMra)tR#pG81F0CB$4PW7dDc_tbOg6NS9o8(b$cJ5
zveCFSY<`r`YuPk8sal^|Y)-7KtZt*V))f#qUu^a!$usE`=<okbeD;43G4%ElP<?{&
z75sZ|J>1k4*FK-!woXk=#pC&-#;*mTf4zwqIH#IdrhBu124H0GjBVlw*baCglR#yO
zmFoB@JZ-1$noy|LSz}8{RW88C%9k(oalq{@b#y)hpSf3o<Q;8BMM<`uh_~J&oICU!
zex=0GCD<Fgx>5TvhV}8Cj`wi!3=DjDKLb~2l*c6XQ*wIxwVP>S{a<p$_90Ed+=BGr
zK_M|Qt1#&<2_`0UPR?5s(s`WiaCNM1kYpPg9X_n%>3K0$)=E(^IB_PpG$L8#(P0Se
zzJL4n>BkS#owI+v5Iuk0!C_0rEN7HN;=#Lj>9=pEJNC`C2DhGIJFvd?wzQ(+WvS{1
zhCfqldi%3Y=632ntHkYOVicz(+9A7pZZV9RMJe0!`A^4d*SPxm`#(P5%)UDP@aJTw
z-}UQdF0)+1Rqx(i$v*(?Vz$%qJ@a)Xom8#!Y&1!Yx<uKh7ke+tJO<JcV~>pX*O$6&
zFYFU0&#%sJ$=I_u<mmC^<E=3tdg6B+Zg+&rkrK%rj}`p1D0-<zmxLs2&)zjPA@dq*
zUO6RZDZ$A5_ffBNPPH0X-|o0a_`S(-g5ADp`-rm7{dmiOqD&-0_}BRB_<80%gumZs
zq1=tX-Bvmb^aU4Y)~j}|=n?FVA=$SNpI~U%1?%wleJz9HpYf=6Akq0#G<_+4r|&87
z5mprY_xmrm54E@dANJllD(ZfH7q%752Qg4lQHB<jRHO`I29Pc(MG!$k36U025d&c;
zX@NmNLP3xQm5@d$1*Ab5ly2T@c=q1sJ!hTY`n~Uowa!^<??1MWO9#I*^NIVu?kjj@
z_a0PH@!fX2@Fp<{AR&ey!2VHEq^G7T;^+Qm+O@@P+i+FLJ#X)KKeMd&A2g=aq*BzU
z!p#~R(bnYys;?v$U&c@V=;~#SR)A#cPTmBw$$*sFS7KV$S}Rmz^}W=KW#tUYJtj$M
z=>mt|2*gVhx_y(p%{`x#uQ3+KdokptPD*IEY)MN^l`}Di6W0V9p0Wrr4vs-I+PLjW
zm&tem&9-f-)F*4lC%~XABNO-Vp}oO1Ty6oZ3SzRdLpaoyrs24XZ7M@VqnwPX;R+tz
zQ(h6E94@9WCa~Hr0d(!>=WXtDLixY^u)B93#K#lwN5hOB4xNDz6?uveBA)}}M@4ed
zMNc{meBc1CsND6@ZT)d+m%u13Lv6#S7#glw%%Jv3^zg6w!N?LC7KTqz>#bhvY&6v4
zNZ2{R0Ko-JUS)B9kM#JBp)b|g>PaR4*Y+Nl{*uehO{hN){_W0+09y=FlDFZWN^x0w
zv}1=oz+QOGjX`bo#u>sR(nw#Og1D~>%0F?0ouf{LAgTlJ=Ffthx0&ptO!s404lEbY
z`h;NrBWIiMlM*}?Ff8QlfUlMHuVDZ%&-R}(!`Mby)vpA|_$?r0;I%>cG3arm1cNvc
z4i1tFsd6hVt!aCHw7-7?#EFLGXel;q*bwIoPPFQXF>JKRf^f@(E0M7YMi3YBo$R}3
z;_+D=Z9Tec-GK%mtng(ASxyp}+uS;tM^8X_0b_?>zxE>f4lHLcmp3^7?yGLy$MsSp
z`cWUo7y##!Is0Kpc&^|GL+|LQ-n%R3>`g5!!Y@YP2hVnFd2mmvsijYSGw_=G_YEx8
zpN8Ejs9ZuByfLJ#6PG97$`)gW%IV0(Ajr?pr5bmIZmC~3N&zo+x@B^3%S?&#8p93M
z)z$bOvh61vFg{wC8gd=)A-2ZBEd;vP_>4sF<__S%Z3X{$)t)WAPp<(k$ApPzCxgtl
zq?$EOyCR&%VW4^e<SN~_db)tbK*sNv!VRTPdoRz?)#`UgI{@3tFJD+aT`<d=>U#Kg
zLup)G9P>Q3@5jx7>Tb7yiDH$&{wZ0+@Cq=S^0QgDyMOg+0_URHvBSmVFuX^sQ15Rn
z)v4`D4aKbo-z{m(un}7`jX@^j%CeO}eo*fBeYoS$>C%#t*C?z!b-PvhP3zxXq=B3E
z1V+JJo?=sk+ux{rhQfG_U=9k(r-lXsdQe`j^)sV{nKkcE<E_p7?z~{DS-w^IHD<%%
z@84UGJH9-9yY`6daGuN38?uAT@?0RgSqz$$){4PMx*Hba=<|zMZZxM66%{2yOCTeP
zUoT{-_gw(Kl2VLuaG^=VTGA2A8o#Y#uyeNF7CO9at6r<!yM0SbOM#&w@qshN1ue<)
z{7uU%S6)FxA^hAWf`<IBZCSo%pMN|Yq2PQ~9U%??Cm4p8Xh7f0$SvU419_J1VjE{~
zAzT4k3qO8uRD-i+XmS!SczA6;z<)q|`3nYX@JYj{hiky4p8w^=i1~l)*;-$KI!7Y*
zL8(NuWsB->mt_3{+nLd`0guVu&_S;J31WA1JBK>(aXWXrDGa+%Bqkf~VmP`BfG`Zm
z-hzINVE}{3-LJl^RDq1Lw0wkEA$SIzpC!@fI0I>G<$^CHoPOS<y<l9p5L!4`uXTuV
z0#t%7jF3&c0g!s^SZXegd61W<0zt%Eow?Z1{f7>T-0HZZ@ts^<y%FP%`N{YUktchs
zeUw1$3UEWb#%vv%M6+)u!SxYxD*RS(XbnVOa0Mxyc&D7-;^!=8F+eUAl|9WKnmu*7
zw_#0(yW{+1(*qiD3>9wz=Zlt-M|h&H<_~fGKdAjV{#+nN+J$glsB7;jSe{?_8hMQr
z+>~uQlke=|R}Vf~HtF}z(5?HD`@Nh*>_%%LA?#L|fUEoo?K`5bqX~w);*V?z;Wr5=
zio+4cImUGQw2Vt|P!MN|(6_@vqaLX8ou?YS!F0(msZ-DUS`3%Hf@O!7@83^g7y)!9
zACmIc;cP94xMoqel|A6mD=Kmz+F+56pzB9h3E>Auf#<?p(3PUhJIrhN8<EYZ9&2;#
zj+{N)@-14rEDj64{2sk%mqPR!lbWwzCEA|jgjHYWY;05q8zuN;=NFLP>}+gQm0wUl
z88e@CYb556UWK>c9;k}&=Q-b^3l5*LDh0I)bDxOyMR!JjE_6vgDHtti(P0Q)Mww*)
z!lG4}jp0**#xgn*;>lgurBb9YVvQa}=9A}cY1nCTGF;?{NV7hzPIqmO(M$6AR6Z7F
zX8vQx7Lg?kaKRP^aq5Y2e!nP<tojNN&au@21bPJ+24qig^*)B4DL@m6ZssRsg0u$!
zziTXb^2y@7K(ZG`xk!px{9SmOXhR@jI$zxW5$teyEGm|hadh0deS4tky$4pVKZif;
znXwrtH8tX6oZ`JqbzdT+)-LZ>SKkYLXHCR{QB^QuU_Ec$iTLfL1N?k^{^lTe$Ou6T
z&b$XxXq|k8@;cDoT&C0tU?&jIh~=%l=~tze&bwFE1ul8LH{TQ;W<OM>A#VZ&!^7cT
zRRa>eb}H!J&F;?z+w!`b(?cfv=4VprMwxcRYY~a0aW%JfbD+3G0<>f44pbV&v;r17
z?bX~*`NM^6r)y(wj*eO&R2#;cZ2I|fb+5Pg+${8C=Q}9yru&z=a+n=hRj_gHZ^;Ox
z)BXf26LLg*0&J_`mHVSnP&PDaw(F^${e&>$(7Jwi?jG+dy_IvPs-fZT^5R4Kew?v9
zJQ_i~1Uv!V{{8fQ59gO=%(YTAh0HXiJ(n(nJ#i%U1|mc3eQ=iDG&E!$@nv0UPSkS8
zI0;BND@tt)?QL$AGLC8Z_E!-8x}@GcIbaRpaJ=R>RHh_TM}w!nNp(r&m*TGWW#r<d
zL@t=OpHL`RaUt8(Qi#s2QLb}FZMa=fyaSR9ioCFp@Er1}MpvJh;xB#0$g7opwjYMV
zEc&*F{#f2D>rv@Ltp#*W*jL@-*<~%Q0Sf`9^<&m2e}HIg-S@%Hs+?;7Zm(hf<9AMO
z1BIEbaB65};vm`K3Xp%`Fr1c?)M3OMHI=1FoLmlf7k6*zuI%dXKWS9nbARKt(YL_L
zxp{crqQt=1_z(K32HSuL+|k(UI=JRxa62+I#OYhCpVuR|p7Pfm=XDd4Kf_H=f%SPj
zdK5EnD_!?EF*Y$N@qJ=eVu9I1Y%7Oj0&DgK8i0eAZ#$Gc-=2UfEr3gqych8XED8`Q
z|47!|$^fmTha8;wLIB&LV20PU(g+TZ*^h38)IIB9TNTJ-8JaaoXml4NI>YB{YBG^4
zzOuH~X?j?4kli$UI$5`6<7N*Gd~}vQ)C`U(&O+4)qHEJ@c@>2k4m3UJBJWdPt=l*r
zCg!a7J?Y}xW0JH9ONT@qQjt@Oq9?!w7X;E!_84<AFSO>`J5Kxx+kT*a9!zj%dv4tW
z)*mTOODIDgI?Ws$-{<#FEMR%~Jy^ju<aNQ5dsiNklbI{nQ}oxPBJS&*qL{b*B3I!l
z{w$1XH%!@2uyni-pU%nNJ5(DJX2X{7*Gh~`S1&|FT|gX=<f;?%#KUja(AQTl)WTm?
zc`sQ5HjwvuV?@Bg(QbINlKsHYW5)?|v&7!#Od%{|n+d<zSY4O)X{E;Tm&>xw={UEP
z{wm#y;<6=NG)KgF@V#|k1Zm#4T<swybL=VpANQUJM#e}k?om?ZSu>a^yR%#hrGy-n
zWbRs7oKP5F;8ssWK234`&AJL6InO1-K^8utj4iZJ&cu*j1~0n?Ro72O&>wc)8-__4
zC`biBf&m^QuJSi%x%JZ^iRod=h`}o)(*pp{=6Za^$V}apA)zMs(vGJK*lSd@XfIEq
zJv4kQ#};9*d-pYH2%1K|_(Wl*8m|)Dh)s_@6SU|-Fp5F3S?=OmrixZv`9`_#7bd&W
zP~ITbLgo<SCGV@mjpVB~Gs;$XsyT1VjL0t+G)Bnk(}~9Q#3vGAXHs7dHw<&|hEANS
z{P9DxKor$12tUllZ0y_0>);*~A71?E<04(pXq)rV5jfH;jbs$lJ?LpEgd1D9=!8#p
zz$8zW<oQdH=c`F_4Mi@K{X`)CY^re*p-JANSzt4jbs0`koMOXO*`Io|fy@ze_^oPk
zXbUcl?gB;O7l-Y!jQT<>HzgFy#cu#;qEc>SDz99ABb7v|JY#UZU|Cq<Sk!zub6+pn
z@*?Be59&f%BtP<3>H^SlN=*<}2!E+^&9JJ0*4Ha{t)X99#q0PJSFc{p-ZxkByd|}B
zoOY<@Si@%!3gh1P;KSzPc}!lWEML8TTxwgy$*Z++xx`h8>`p-wAAU`2qB0L&5-|%f
ze7Z#|$E9m<C+pdVl9yfJYCdj`dE0n9R~E}K@W^FygoB(^DNcbMT;#(b_kY8M`lIIK
z5poxE1#tlj%vRPOm<^RvSQX5E4q2C<V5u=Tn&U&K=>J3Emv-#h<%8t-o*IKt@jxKw
z&N3(AAg&Z99F9Z#wC&&`j`En&<HZT5eS?C6NK*qpQdEGnkow6FUP%cMejRH$Lw=8W
zpdv92DUcWpyqj0;^0=G@#5>C+NA)6efXr3J?GMmSDDHelf9aCf;M7Ts0C>*zcNHh>
z;mnp5mA_AFO#D#$f=e|VB4Eidy+O`YMS+rj%ZDM_o~Qv7!WVDi0_crA%X_Kzm1-Na
z1L_yf-m_XZbS<1WUjpY92xm{3t3wpdfrbaK&q}Fo*G(-rTP+mItj8T+G$^P=>rA#X
zQmuXJs4&lyYAAUmqVF~fJY|292?@^5OC-NrKJBveB41dib}}%EiTvU^r`?hWJ|Wen
zK!o{`fJv>K!AoHdHJL6`#9}~Lgs6ul{DOWWp8tadql&j#-Rmi!wIwfB{-AdQj{pIS
z#855td#*scc?u4lHYgHWyVerz6`U)%cgv=oby+N$91xGMlkI^FObNquX!CEOY(RO5
zFG{UVg7*#D0Zd52Gi32JK_}q-O-ozb{;uCpONMa_=`h{NE`@hiz4OISHNg6<4*4E$
z(RzSXo|o={?tQ8wIOButT9T-ts;B5->F>!0{iNaxh|?+tJmi5+CBY97FAG^t7`#k)
zF+X*a`1nZyi&p9ngn}T!y?!Tw$+C&gdZYw+E22f9o)&_|(V(Mg1kqc7UtmciQZBqi
z-`xG;4kl7pFR!3r?RMEqzNXI;m202Y&FqlYBFr8e@)g~JrClB(R8!__>^gfjIQJKh
zH<rF#B>R&eE}d2~h!kPoPV!ec;IAqGPCjNt`%hj`1pg7?qj*=m8sA?YJnw`86el(`
zU9oVxMDb%YSkGR~rTis9HGUixoKz^i_oB7+dra&tno{8<8wEC6(zP$H+^)<89q?i)
z*W0X66HLtvotsNS;N6KsI}c7z;ZsEu?6|VLRP-7sh{Pt_zUrloTLXsL+t{VO%>Jl6
zFl3s0(w?C49kf=}w|aAoPcD@WeEN1O!zmB4Z_ngj_*$o0+-{ChWD>~EwQsi~+@di{
zwH?1Z!Sc#xfG%aJC1Ibt$&Ytl^KrT@DxyyOJG205+u(Z@Ur6*woQS;eW!-vr3Kjb-
zm>+x!(|VG6y@C-9nG~Fn@nZDwVUYY$1}nd)bxNS<bMw57&F=j2BG0O)l)H(?vzYjo
z=E|>K<MMh$^YNSHaU_~e^-jfKPXDa$x|Bo_H`$|0*$+KbstXsx-M;1yG-6=S1$D5|
zSb@QOclI}m5Ifuomk}M8u6zHdg19_*gVpYvXPCpQUY;6(h1KorS$9UBhy)8+CVv1U
zd<kARI9vSK3FYOqFdQK@R|MLL+YUaM<k7_)oqB%bPFsg~er(@mIGk^!rI#@~fE8<~
zNXGG%opZHNF#aMj0IaoN%S#@ZRV8~>`E!0L^w2|1i<u=HBL>amjLJ92J{Hc-nmp)R
z=Z<v9EUOq;s*QF}=)BQG8G-4o{jFP%T^wa(sJv9>ks|Rp0WVM*a32`gy=IJ&%|ZLJ
z{MI!CYPW^CJik)A&d<F*$G=qETC~qFZ{f54<wPU{2&EH?Im#|7!{Hl?j)fABA5CQE
z8jwe?`nEFlYN5K8HjxbP8XK5}@fqJCFpyocfWG8gwlmE+mu18AQ9&=1vX51u1eE}$
z36e0U8!fPrWVH9BeBAF^<^N;-jR=uH0j7$)Z<~Kt@J#gRGS|skO;5XUZ!{(>5nBp1
zt$Sn|ed@+8w0(kL>uI~i0nQYyu69ZJ15i?ibWGArzb!hn_vS+5>aOoZK+WV>yYbZE
zbLi=O-Y$=)oquQrFBr8ijR_jo7;Vx0g^9$s59SllF@UO}eeB{$a|7WoLSyW*PWFZE
zga^#A9*_i=m&-+nNgsoek|3%e^_s-GbXh|ACnkKqy1ptge#at<3ih5jFnAf9=d9~h
zufdEbrt$Id0gki(V5ZewqnV(d4!1g&l_h2^^D;qH*WPcxQZM{O9A5$3TAG?jAL`BT
zFS85@`@GSO5Id5jGq>>a)G6bDJsdg`94?zSm1P4L;nDEt*n_%0!@5sTfaCjHea?a6
zvN4$5Y{rN>FiNR4TVQx(<qV;=yj<BKT*%VI=h(*Hm_~g!4mA-<LTBL@YH!n%_%3ne
z$)2Htr8~LIb0YSk*)Wfyh;O3P^yjyp8#l7I3t(4~T3ZVbc74{^nQY^@#hpy9ffvr7
zUtC(RoRIMNF<YyBjl^~E6mMR;cA=?)b0v&*LRP{cH#gVZJgGf4L3Q!y`n#J47F7-%
zII#E7q0o-!Yh&10&z<+otGeeG&g?mm%tPMLsxwb+ayNTjpK6$Tnn!i`mj~&YQrnBf
zN0U5md;|IqxMc0Z6d2<xh=0lD7ZybbeUkSw-+79k|B3Z|ectbUo`JIJ7X}0V@U)YE
zboDg&hBCOO$LQ|$>##kyyCtfqG~s}wv#m8@DtBeGG^;u10~BynOz7S-V$?$i9V4e~
znWMLleR8;5Yds))edl<C_@^5jBV!Sp8X9CSxhV-UEvw6X<rPSmH=DoM+<xjPVabXx
zt<3x(v*>)LQsTvIQd3oL-CRsZ)*=ml>Y5u=xeNaHpW@b3A<ddKuaq{N$1g|u98oNn
z?H-GZV_TBa*DnC7#uopnrG*vpVd8ciW2B_?^SrB=_r1#DuaVv8%tY?~j&tdrpVD5Q
z9~z?=JI((717($eMv%bGPRwNd>)+W9je@MpKD+bp7s>(uyEE3dUU`q)HysS;&RX?6
zxGz_wiQ{{XcRbjJq6&v&vGLLD*KA<*&IWiKs8`^klBgM3@_eYJ$p|~``zLp4!}^(a
z1x(K+J?V<E81R!|i&cemLP)<42qs=LTT}?%LQAWMyBKrqiJseWDzQ@Eq8`>y8`n7D
z0a!mNtG~kjL!++Ig8b$T^98ib2SK=~weBvlg&d_Tu@*iqF>ji3?7ri4Vwd4l-Qs3b
zgk;*aX>N9B*DMCYfgOe2pUL<al*HL<gzcos@yW!W={IvaI=pcUp*^#APzNjB4=gS)
zFKPGMU{0);@6<ZcmygoZqVDy;+(aN~_z6Q-7pBD#EOcB&SXdbTT!T&T`$)rCPl00j
zmZEr|GO%SnBUUdrEkPIbJCl|VSr-9=SS~IvG@ediUaCMqZwB-B*8&{WuT+9%-<~~2
z78Y%2pQ}Rbva|PAkc*{+NL@{Bd7FjrnDwHc4<{vuoa~GRl$Mo~(_7X})!mkroofaa
z!fC9{9VB6#!euJ)+qo~NrJB^un;O*=$H-t$8-8p$14sKdy0g#`;37YRz}SH%I8t5t
zv<Q$H^f`TUXSB2)puM?YA)k~z{Iqc2iP;Xy#S1kzUsuu?z;XdK9U#RuAQJSHQ{d4E
z9~0O;7tQ6$z31oz*)B7;CVtntkFGU^(TUN~OOLj<OdfQ0(tGge5&A_<XAZ(A^ptRe
zX0Fav{<@WhrYUQpMn2?DDaff$aTDd|^E9L=pRbqK0x=;-a}&iE^*ZT*YRl6-oWnyy
ztb1fkYWz84gEu`)B&VmRTX+J!gNao<%2XhOY%-1*hUA@mOjsD8KdSQd@ni3qxs|rx
zYwoS6!h8r5I;M>h>)l=NOWe5ea`BwtskxQon*sJvPE|h}d`_Tr#fkw*zg*yQLPce_
zZQ?S+y^<0s7}uND)cPmuvIH>R$K6$%9HJyd%D7153nm@xLV_dOWjC6<kk~>wJ~-1|
zpY6NTJKSf}+79>9u(QTVmm5HGN?JHO-2YPh$=w%+msDQ)R!;Z(Xtd>e-M;R(7ajyO
zZqVuacx*$`YF%};I^$69l&VlnCAXxwZ2&kfL(SkwnSuLGcq$(*;)N+I22Q4q5)vI)
z02C$X%W!m15F22bz<hz_&XHrad);=)@YLV;^zmVGUGUB-<KAf>p~AG`-cHH;I);Yz
z(8Sfpf-;Xn7rsPDn6;kUoo8GlM!b=nTx<y1$QdW+C6q=m&c(9k)UqgiWPa}4Cww{D
z8KZ!k0w~hyzP_wAc(HbVAvAgDfH{E!lBFO4L?ElM(`=@pIPn>;Z1Iy`zn69N6IeP;
z@2)0r^*3-@xrt&T@i#AEMc}5O@Y%kKAikVte~QZ7&M25cV=mZ~W)gd!zeLjLp3S+X
z>t^(v$ByYNAA)X)UE=leG4na~s|E(gENyw2Fi#kl&Xf<i4pWi3^fXADaY3UU^|{#B
zL7ng<4^F{r{K>Df?#ZPYUn>1(Kue3(j#FcqTcMZ79vBZcRMG+;B&(ujPh4DhfI9)>
zQl`k9Gx1A?k!z+=MKU%ab`v(5fT^m6r>I1lLc|M7!l`R4vO6Er?t`x6X6VXaAhP1G
zpS;=l8DgP|XSB7?&LP5J-3{`K7jJ!i^TrPwzI{2&gysHcX6N0S<odRrnwxj;-W_I&
z-jvOk<W|`OHstvAz$M0U+l#H66LXKOvLSC;TU!fU<zNrYK4Q3ry*T#t(qm_a3xsdQ
zCV{y})h@QCU;S+GK=#VhcK7;8Gqc3*mBTS~aN&v^Iw$RN^U))z+tsWWt*G~w2Q8Dg
zSJ7c!Q$tV?U5(l4j!k%;*eO-+x;VB{uy4)LhO#4lvmkZnjot{2y?xnca_o8}&!<T?
z<{GxyuNcrdM7oFvgc&QJ@zJ%xQXo|xA@MTt(h%LplVQDD->|6+N0-yBGFp(Q^J%>!
zd%%1yySHqo%W%Bu4=(OwJ0HqDmOEE_Wq9FCbAA1@_nSek6esW5!q;zi^XPH1Wtp<b
zDM3L&K0X+<VS1*FNpy$7P4`n{hV~i>#*yBe@b_6y8`8_@+XNo;KNh*o<G};!Os#J>
z-BzE@Qf-aHP@|F8R#jDHWwNbVGq4?7z|JN}k#Wa%|FOEOYuB#01~GK+m!kFNmb`e8
zBSq=tF{#X`i(k}ps|?!GDd(UwWx$m6@BnY5!v+(4GnGO^zrP~7w{XAIAD*AvD7%$T
z9qWzAeHz2ec1H2UHY+9uyo3oaxir8n{N`+eV%~flb75TEk0VM-wBFVGmtQ#i+3(Ly
zOQt@#B|gIW7#BBOA&o|#e>BUg+Heu3)pG~e{QfjB9xnW<<otS3@S<c~sh@T10y(KD
zK;K45acwPONi(h;L*CVYYHh!3#IGCyUfQ+<%%og#(jD(SD2O{l`LBH(7?1t8)9rh5
zrC<8+b|0)`_FSEUQ-0jv$ccQ$eGCjiMf@RxBeN4V?&Yri)nN<d^$nf4{dMykREVPR
zFQBENQL2T5zX}-Ges*+pbR0M1awBFrF<yQO?p1uD%InHp*Of?e7FEUo@h8U14&yy0
zou4;a{>)6Guzv9htBnbSdP+GvErIL+qq3=a+k0faJp0}6OzJKX(upNv4wHUld!z7#
zXJE)a^zaA?3Sy_;fS0pxby~r4pO(JV^;hLa2wqLQ-y7F_PildX^gXHy(0YWy*UTOu
zBvgjw07{$Z4RirV|FDS5q8~K#Ffm7&07BP2T(dCdNOqj@;%%%M>s_3y@Yuef{764<
zJkX(gq-6%T8w~LvJP)Pd6idK6^RLED^E2{71!9rVa-2I12nHoYg=N7Blg7kIxq-12
zhwhRQI<wHwVW8dct2-QI*O>SaO1RmDF~pVeB&a257Pur)gswKHHQ_i5KmCVw;Jtd1
zDa~~J@tX$MuJsORNj~Z&KnP{wu_LKos%b+|0`#o9*=YiTUNpzi<RJ>G0I>yO!U8s;
zMeS`J9UTL8ec-<b?0aKeQ;l*T!i_BZ39pzKIC5_99e6;)XIP>X&4Te}6K?qGFjq`h
zSh%=y&6<?q0}#0Hj3nnP1j9$=9_76?)Ce<fkBWP_r?o!}llLW=HqZjNRcAfxG+X3z
zoE4$0oT_Xs0Nu3$$hRrY+2sqikS2~JLh@ZQ6<RU<n<oT?q$xhajP6P?c+BWB0HA(p
zkBq>;$!DLxf4775@3@o`#A$`Baxd@pmhWkegBMBs`?wc?EvaAg#|58I#Z=1Ei|0J`
z!1yzzR-$kj7Q0?~l6X|wE3{sotKE{YT|Ke?Fza@bGPwxT{O@AU*-J|^r{aZ4V7D0F
z`Yqn>fk1b{HMSK07jXSJbGC2cR|qCJSqOmQ<>!}+s(zzZka6?-c@8&}hp@2m)?wy6
z>NXPnqPao`Cz+Cx5AWFLhn$3F;=9S;Y>*X`XuJo1;65Ra`{_*fMQqN?4QENAiE>?O
zQ+8nB@3;0e^qh*{z4y2dqZiUkX=v0ABJxf*!=ei2YO>=Z4*aiIuzi5Yr(7*;)^~0g
zLsgDyocTlEw{NF>&XIq3GdV-P<=FA@uOPFYQYJcqnUS-8gr`*<pPWI@L@)J@qQdS=
zqFn-#p1&~4>3M5>f%J`*DkDp^pO6}V8eq||m-r%k-^ibC)>^B9S^=VaEka^rQAdm0
z^k<SIDOPs{czGe=OB;=UAiUc*Q?e9q=w)y)=<6euLGN!%m4!cIJWH1}!E(AA!$o*#
zG-AFMENG68SOM{!G#;RZ)XH}ZhpyBqEX2KlX*nnL8*}vT@@L-6eo9MAi^Pk{=S{Q4
zl`9BE=Wbw%e+Gs5MRUIZ`-uPqUL|6vb9>&0_nP~r^h1mz*1hFQv0kwoJ{ASA4G?&F
zl?Sa-i^}~)kugE_AE`@_MS5SLsUF~lm^MOC6<BiPkrsLwG9z{xZFYJ}3T8Tqe$_S}
zS>-Bc&uYhW@8wYKfM(Ov{5~l)K#ObcbHv36qOTD#spb<?Mov!1fpY|<K#tyH?5cEO
zTuQv*MI9GE2uVdt*}}$~Lz^Rkqf?8XqlfF0LSy;xk=LoqVCx<_*`Y$SgEwf=Pwr*Z
zp07#oYzS{-o0FQA<H;WLQDw(^%wH94SeQsvpPtS#JU70zA@2z96IC(8G|iMKjC33U
z@uH-F!<WU+%+4<5MXH}38*Jcs;0lRe8>Bnbf(Pe%2c-PD1~@jB(C!f#2kcZZvB6m6
zc302P_hm>lE5gnOikwjTY>OcjiYYebo(RU1<D0B(<*VFdanimrQr03zwNH<@mj1>(
z3?)Bvq|77GGICAocEsxt|0r@?qTA{B(*69-(wc1Bn?+;N25NY$`p!dVQdtopE~60P
z@M8a|OU@huWq9g6?8>l_YlKUd@8wXxZ)nTHJIYj0WGa{Y>QKbMK#m=aViy!tAH0{I
zu7+fJgAng1F<+LgwcF$D<yIuU`;Cl@{C`XfpE)BVQn&Fv4Cw(kIaa<bQ<i~0%7>!!
zOB;z<wiN+kXev&5#T5MPNtB?Q)aOs9b@<b@$3BiHKhYE*qTe=x|N2PgUJ$%VSKmRm
z2ezp1U0uY%ElKo`jX^IQhH*?w%h^MxZz<A6yIkf(mZ4t=L{mbBr5&e5Sp~Z>Lnk=B
zK^b#GX&UEcJ70eO-9J&np=UGlEJ#?t9gN^`5NX|&5BYY&4jrLDGWnm%Rft^hA`IY(
za9x_3DfcgsZ6bNbfA+s^&6(ve^@!<0zIQp<MO^EBb6L^g@1gH2+n|FP^g7qTcoy@P
zBwycdZ0PPp&k$`Idzmnja;VcEeEoWh=?(f%=q6fc<wGZyCJC7|Fau#0nmVbplyvu|
zhVm$i9Fm!%`~CY<5v0R#sFojUl#lr;?7Ex^_0ntcJAkt&E;w=}%I?DY1ftx4s68@1
z2E|WR6D}*6J|mU*m3urR86t<PbfE5(^z-mD)+O-%4*aZ!)5rTjBKXr6rGqrjM=$><
zEqx5%8#vKu4nA0E>HZzS0FsmsqM2>)!uJ440D)hSGHA<3G64FWG7kcHC@PLMx!~wK
z;W8+gjncp*V*Ey9q8n6CU>xAKt_pguSuX$KgVvM1Cn#rQFL9XA?V&u#G;3-;Jrjrd
z)<?AY$B!K|M9PBLYeDc*9VSa<dBZn|45*vi*rdG>o#p=ZPOeN6=ThLZk(PDe3I8Ue
z#0_U`J=N6%P^~@TzjSGu&I+6Ub&+aexPF$EZa_%KYr+Q_Vesb$J-s0M`*8k1??W>4
z>q`MIL6<JQp6@ikQ#fu~DvY!C_Vu5j<^=KWV;;-Or1$?$GW`Iya_Z?R$$-FOSX7me
zvRyp(d}ZZ9wAd9o(M)=tV+CTiS+K`I-o`r|q04Ggt*sT{5)4A!OD;mb1LM-zwMg)K
zUlrvlOZ&ZiV)_FY*;$+ZS7&P!SzxO1%EMy;MhxgOf<qa=UP;O^K)ZHH`7gB3`hgD-
zb~Dg8a@-ct1yoy;HEj)eI>OpF8nLSW>?-4cWWvMMNP%~j24dS$%TrD_rgRr@>wZf!
zS;Ai&22`i@{!w-b2;HL2gSZ2I0du@j{gdgs;=_NvCOiphO7RsD4Gs-_v1+mWr%nwt
zBqaC^*KbWjUhFwqva+4ek!WcJvVrG=y;GklpwRpF*e^`Cg5nTa&6&`gGb0V+JCZAN
zM9k}62Q8;xm?CQNc*^fW+oPNBl=Pql7!FG-tWRSwCE>OBS&u@jZ0Pu38pH?ht=r(9
z0Ay44!?)rXO`JB{wr!*P*>-x*XEH(8P!@?7tSKtwtjo@D-QnD7-kuL_vOmW6Ohg5%
z;38SVZJOkJ%NyuU6S|#OmM9qRv;J`B8Y<o@u9XaH1e@9<?ahP>r(~jBf??~yg9OZ$
zWZi?XHHTXer(P~K^|!=}(Ryky9slLLG^GJHGJ5?3q7KjGU}|5<{UFEgTJq86_kCYL
zZ5|w^TL%XMxEzK2>2^)asBvCdc6VD}z@_*~f{qW;2|LuTFcU#mus5CK$g7lVu58+k
zNuU6chSj8CI1Mpq%$h$)8!lfy(JNXy$~MP&+>ruIv+X_Snz53Kik8O4W-x8@FBQ-6
zhy=|ZU4KNKWr1GSnP_@r@EfI!IcCT4;}_=EiCinO1cOlVpwUz2@M70<%=E;?x`Iv8
znwpsu7Iv=z1(xSz`L3FS#;JBcHcSO`X77>7R%oJKQj>Rx92d}Q+eFH>^?ILoTc%g>
z^Sfp9!#xd(?XvJ(R5!4;vRLQygSNj^v&@k=vkMIvXY?W~RoCV_zvnz0JwYPFSxB`>
z9M1fD#CBAt@~;put#94Aqi#@>wK(141DU$NPOP{VkZME${e(HQ)peLkz5(m-#O1C5
zt*XYx=^{^GD2;$4)Kv}Ph{pYA3)XBD#JOl@)_8AXcBHUv=SYdwDYlg3T34)~Pq)}*
zTrhirraI&mMTp6OAsk%Uzp;QznWXF*!`J6}Bc9r`>?&!?u7)B&BiH{WbIN)9f<0e}
z!rR}7E*hJhw2diyK7h$bphR3mxoRz2fj<bZ2?_*Z5)-KF3E8`iZAC;AU@)R%+HV>5
zt+sX?oYB_I+jYxJn|tEx*CR0Tgruad2FUrBbMM9r5BK*g=FWa!ec*7Jag+KuuXT%k
z$|K(2c3ygurhL@p=AF$p=sZg|Q2(!gmVW)%QQafF^N}+C0sO1f;<CW<j4-@k%v$JI
z(bzR#+14>pe~*mJ$;CNY5-s7hhN9x{uaVLIJz3U$`7dgo&KAyEu69mqihkBv*1ZlR
z(dM=2%wr;iIanU`PYuJLmQ#Po0mw)5T60#$#~tAH6261+vQd>O>vL4dr>%Mnp(?~&
z7T7<|v0FetaG(NcJ>#<YOs+0T+Y#ymn%&n+i$Gi({uXTw%#Jz>GOo#IRmg=)5KQ!}
z4;~!qsf;P$g>VdR@;kR~ooG%^u)kaM(+8?oE3i7i&=U|8MBMWwVES;raG4(7XpcM;
zDpn-~aZ?~BXpo^WY5N_Qo)$C@?ycyf2NlnG{*XdVIZ&9PruWvc-=WVH`WxW9-qANh
zEnC4a#$fRVRt?l!oX_#kfEcD2dnpO?IqF=B{D*=_hH-3Dd}aqkGA*ZvwKB|_2v_AE
z{i9HRKpX&5qkX9U&myXR1h}FtB3A3nbMA&LcWyl0ZM`@wubTo+<czhuGCzkuKDt!0
zR<?}^YuRs9&uC$|l%np!q*Hu8E^ql=W&VwC9L9Z4sq6mLL2wBRUq9&VtiOYyRzpzn
zoGBQ(_)da8H6#e>>O9HJ@;@mgWQjBtkXd7tXf0qtS|0M9-MD%f3N<Q)M))>r8|aHE
zKl{-2aXe8L<X`ZJuV13<hnXGCzQ8E(b>McIduQYk{Y;y1;BxszX=x!7Wd*wE`ad||
zy>GESPqm4kGAc7To?b+|r<@q=M{9H)ED-RmmO4=+RnXmRcyryzNGmJV<N5O{_)<26
zgZC8zN^OwlInxeXDl)*k-qP|2dwYB#T@7<Z{BxY?Y6o#gvG4f+f*OPR7ibI;e*b=a
zS65WrVX_G0;)Yn|w~kZgD@oP^zKJhkG;Vv^xcU&jqwQO^(2FmglsAVC&R_23k72qk
z5n@wtvkkTALOFTn%$d?V#938uht&av#C7izAz=qvRF$KBRRaVPS}|I02tYrisij3+
z8cEW{TIM{JD*04u{<)rB8!5G{R=;3}_vNT<n5PFcyh}?vDImZo>JUeNvRybQ@!sF%
z*3>~1PJ1YVRJk?Yn>(0npkfhC@9{d}TaR!F=3EcH`k7lDk5xCul+U1x>oqZWFM9=8
ztIE#p{>dO!Cze!T=!n4x_ZjPA1b1BZd`RxX?o-RWwU&L9n32j$GAp~iG@pb{$Onq7
zihK8t+U{+A7ai>^A@LCqs{fBesFcQqEZ5Of*8XE*d$Yc{hB+{(YWYDyL_<SWNbxBt
zXobYYc;J(A{l<-so}RBs+Fy#U2cG=ZsdVROW;~S`XM3XY-PJIC*D#*mBE+d+4-u@n
zb#wgIp5Utd@+=4uX9(z+gVR<_ib|}YY(V1Svv)|CW#>C#OBU<we~n=XN;#OUjrK*%
zd_6MSkO0YDLB(+DI;im8rKG$*|8nm(=C7RhSmtJDh0io`j-9*XP`3Qe+k2Pm%DtIk
z+K)MZ8_Wf~WdzfF)22<N@;~P`iE)V)$6wO(2KxtUpQZ0AdQmV;=?QgaT`RX@$D~W_
zaU6QfQmrEl%mpE@x4G9Ge?HDvUH;(V!;s+Mq9Xyj*i=Y;w3GjUAn{#!+slY}8(a>R
ziq<R(61{Y{PFIpe(t3b-|GC{}^@NY73sI%f*3$L;HzJMyYS{I!<MltCmBpwXO-rwO
zBSvLy<-$0|0t1{mtc=@KM4fE}sswfAF7Otx9%US;;#?8OU(tBVH4@jUMDs6R=Hu{p
zXa>u{f95MJS|PZc8C!{Qxn^i+nCGya;yl@ZibRqTHg8H*tF2Q__;tp0*@?O&*YKXb
zMo34M#)LFATg{|l^R`?`=U@Q%Afx)z!&0IJ1o5e9m+O`h+U89;GYSJu)zz1%bs_3*
z)#P2Uyo|eE6>K-QoHCzzSav2&EkTgijeH(WHm`tyHjL_%jWB({w~HZ2Lpp>R4qsm}
z#mEM-Yd0dC<Sq7xO*DkC8Zo2>uxF8YbOB{|vhE|K53o#q1m1PlcF+mri`l1Qw>l(X
z&B@3(;c!<K#?3+018z-_49Dir`Yv;}z~Ppcd3HOMvIR*HnZREM2boJh|Ge`&?p=)M
z_-{7yi-?>zr`fr44EbfC+vM0T#9i>1Mu`PW0t9JOo{>A>799RHJS+kTX*a9a*v~B4
z?<2^+#2~vCUTIK2qL$1ss%T_likz?T4@O>vIRHN~Bz7JU5Gh!+`Uuf6RV}inluLQV
zTM4(C-G2WEkOcslAh!96fLhT2%MhaM)4f%&txUdjYZ!(cn|GprNCN|9JPnj{s`3CA
z2}*|uzCIx#p$u3uR73&s!^Fehc5j&r?*haDQ1BIqBq>H3z@P$zg~nuE?N%!wn%wcJ
z8gIivk-1SzNukK^+qduU?-~8ru160aCiKxtT`Zy>rP|{W1Z@2*G#LrL@x3`cH|yhk
z!opg?<Tkns=T|&rwLfQ|1rWu)?c27YV2Kq=(l5|6>(<gL$AyTaJbsfBWQ99lxUTEO
z-!w9UsAi#f-%<}8W90}eYnO-CQGhj;0VTxIgzGg0?l0h=1;2a=;2S$ki*orWZe>KW
z9I5ySRHG-hVC7~jQ&@KAMBg<jVm>t!lS~JBC1g52S->R#&NP5+H~0b%1W_)p;BsuU
z2^do1SVYGRf`WqwU-JtHEVOgEjq@dhgK?Ub<=;4_-qntsQ}S%C?fdtcgtw0ZxJRZN
zwbiMQAhC&T>hTO@{rdKmm?U#`IBeMub}8!!k%VAvRmtY+Do&u%IMd)O%E0FW?WM`j
z%#`IgFtbR%@r5|SCuV#S=H@BSjhLnOvMcxWl&K6FDxU<eHdJ`{*Dn^yVp#u?<`m5B
zrz=@Oww-S!MIf;aq|BP0KQQODv)jpj$%`>0^`P$R17-WG&oEIfQU?d@Z$D}edQgUr
z7mFhbF5)o$o{z@PzKkI#_+ucFcR-eWKxCG4-@ZUN$d*zUnQZs$A93{9*Gs)4A^BD^
zhR26FQa)zdUm(0EkdjYr5-z9x7^pLz%xQgh^%|BBD(ETD^x>xG;o*UG$D=hwtuogz
zoa4|}Evc`c#3Jx~?yoez`POUP6k*aYmh+)$zTN!Zuq^d<_gI8;V+JOp$}=z?_zdrM
zFwza{;RNz$+=2II<DsehQM^b-S<$&+gAxk9w`0BvV$e=JpF9Z>a{9ga<5!hAp1`5t
z7aWX8mT)~=?vGAheFDS15E5P`4QgdsHNX#+Zb+rJ1L9q8omk5Ad-v90q>eO#(<7;3
zh|r~JD;0xMyNU0}=FN^oGR-u@Uw?ta%m?uhG_V_kp8j*f6%`%bdxD;hu50Yb?{M9<
zcZG1DfB4V{UeUOQa7sZBvD<x{lcv)XH@n}<M-GMIkR$z&&B>inM|eEVhmaD|Ex+9R
zh&v*6LDm-*8v6Hsx2YXGbbj?a6qY{v-<feh!S_FSIs8)q_`mk$aVy-rAj~Lh6ddX-
z^ne5!+d=qB;-UslhCBUVJ7IG^@*@SxY}2wJI3)!l<>OBaWPkpkk`v4^C9e+Rn*kq?
z>Oc51(`P(lVqyaS>4HpzT8o3!3qpd}D#3R3t;5ty3Tu->f$p38kgwN9a0Lb7!V1GW
z;Bi^-X1V~8Pdw#0!kZEybH{J6;mcj&0rwm>ASjA`Ix#0jK6VP4H8=rK87*s$R#C1W
z_2Xv~`1oU1NNL|3^D<F3bT+V(_9{qf4G-++#{B_sz<+2K+W1lxZEbBr)o_cQ1Q}zc
z3BQ%E*i!)G>m@M#$U}G$?k_d!1K&&Y3kK)#s-o4af|ZKDjz7ZXd(l(WQnB_G|C^n*
zysaO#0Vwyr=<V-+Rdk3wSjE}Y*!VlN%WZk$L4xKEZtEW63`{86kVUm4f1hDzb(@{N
zLe0_JR6E6hJCzqEK6Oo5SMb&>+VhjV9DaA4L+CW+TSIz}P`lH?0|#(psRzxL?S6~u
zyaEcu&4#JC>q}Fyxs?;tsdZPpwvbkNqSpJEmY-RS@KO>%qI0TID~=TXsEbe;|3pZ%
z&BU)H{G^H>sN|@1LN!5ltUlg)d2!=-uk~nMpD$Qcve!@+^r#72^~7;aevQ0<BOqQi
zz8qP<^;)0-G)75s2F2J8eQ=y!{L?r>yJH7Vn|Ee@X?6p(Qv)iNt5*sgnPs29k0IO6
zbXB%a#iY%HpRe*(xD&Asd^cnQUFXT~hsS9dc#DWYhO&Mbbv#b-Xf8WQ4tTXNcFxF{
zfffNY!`k$lfgl>&4Na#syUV#Eab}<{7Q({f`y00!SI)*m#ta%JS!wUyy}S^4e#3o?
zVcIC}@WMyVx^Qj=zOpb7t6$%gmlpvysN>Acnt~@~1Gv_%U5n2qg3ovqoOoc^d}co$
z!yqh|=vz`dhsH|k*{qc3bJN-u@QASDVIuMprGnFvZDmS2ii(=6DXCvkmY`0o5XRxi
zp2Gfl2ff=ru>g%@5s;W?8-PbDzx@f(>^o$v2u~IT&WkIDXq1kG)zx#1nRz=82jA7t
z%rvsu6EqEeag=a){Xv|db@_7nt-E(;KbUI+#lsZ_Ik&;opa2NPJ`~C&kP+6?$P60d
zlbe{C5#r;6bhO$y!nqj=NRziJv0lEu(Wt8+vw~$LG#3bNWi>ehO&l5=3=Lx;@gE+>
zlu>@PePt_7L3@svkAU5V8d*6wOc!Tw!<8{!JL3{8_$Ym_!Xqu<8V33wQ}jzNsEyk2
z-9-T}mlR#z#mp=%Egiqr|4RIjb-7<WH#av{rZ>T5Qt3N~+8d%$8p(gk(>&0|1u0`e
zF)&R*X^z`p@YE@_)g8-ZV%tKKepnO6jD#wB9z7j-_s?)RLK%v$AFljhmI#iIkCSaE
zA*p6fyo2{VJfv-GCf^&2{rYts`+gDTk@CU(zK;oKNVQiMC8?lLLxY;UJ88Jd`P?}-
zkUv!;0^qk*Jqbpscf^hzJF+7_H=QY{-`UWKW(!Q=TeH9aLj8z*yo6;^2`kM6CdAmM
z>JzbM*U$vlV4hKQrwnHkqfsz~kg};$Q&YXlG1SMW^Hq0KT)6@R@pcfVze)&!*qZ{|
zF2q25t*lg~Q|kQua4J@Hy}x%<Q1b2N#Vk&Bu8jBZm*)EPVdM%YF|p-i$YZ8D#3@u&
zo#-)ER8(Bt^SIsB3FANS&}ldZAdYTiKr0Wiyd?7HYY&1#R#s?bo}Xf4)4Xp$*E03z
zOY2TX;r>n~m+lhz@NfaB3aOgxHTND+h(}f54n&1Z#cg#PR~?UZ_@+ciM_3#Sv~_qd
z5Cfz#M}7SGF{9dQW!afMAI#=1kapo<6U^6_F<a+%LVFsvC)peBf`$&AE6k)h#teb5
z;3RL(cW%MuKR+{OeEoW|xH`${_G_#{>)W@_*pK@qORB#@nDnDZ#HGe?AU>QLqlk9_
zuQwmSBet^=k1i~t)~vZr8F${&uy(5J6lr*bK)J*=G9UAqzBNQF2qNFbr6sCa0&?f#
zcRM&1^wtIg@Pf(f4bY(8UDbCieuJO6SO!-&MDTRMyy)x|i4}B6-~v|eU~CQvDd=9J
zX;9gWrw!&a_JWcdhihw5(M3kJs0Tx11(x2z#${x}r13yoUW+%AKJg=_9^YQeYa8B2
zmBgB|h3F3*DfxUCN(F)tSb(}#R`;a~slA1Ssrr@%$4y@QPsxdo5w9xpMhcTyZR=k3
zx8`UJ)W#g-ztP{-HP}1#qp<M!zyLuAj|4;VMWtk&Im|Hv*;TH?lj;wv?=(6&V&WU!
zoYC+4JK-%|jIxcAn}AYVw#))O5NwM$nv`o_TYx>D2WdH+nW4+r+uPnEVAYeM+?$}6
zR|2#iyxj!7yDX=$vq1gb4*Y8}Q7b7pHX<UzPr^5ujrz!6xz^L{EO(U@)#Goda2Lkv
zIw>gl0gmp!CY2Q&=j+d6{$_b%er|rAl#y*c-6oCTB2?X*H!sXa<Gq`Myw&0PSWHX|
z1I~`|lXM#in^{(3zOww&zM)i`4TblrOIn9$&br?ge=}e~XX#b2sb#fdeYBJJ_tih_
zo7z4txZbj<{rzG0ZOW+gmfe8dyy)e5-iA5s@6$G_3D+eO0#fJ>AyX}&=od-p06p1i
zwFZ%?b+tR$iE4ClN&mI(fz?8avc))Xb*=x)3*molDfABz^gr#=|D!_e8sP+^n3JXp
zvOMIe&k5%U6HO+B7%Tg-RP`{eU%dj3h7k)TPG9|8gt`JM3HeR+%AIE?rd>X`t}LUK
z0GP%(_6f%PwF5ZwR$p;LkK+jM8_rEs6WrPkd?fI7lA>C*>@>mDKDha%99<`bGbc<G
zoi9V6f{8+ACcT0|0AhA=YCCm&<Y|b-wA61ug2oRrAWroer4H0XNGX+9pVC~miZ+sR
z&QqH_-xFEX^YM-80#XQVp0g+I-Le1VZ(Oc;E{ttPBV0!X1O&{#Cp#m~neM%e!y)*O
zCkJF=Kf)<E9%{tzzAiHE)OY@hGS3vPyzOVowUBvlndt@%eRx^hJU2~0ImbwnuW4<~
zGi~6&hQ@fMz@)Au%i0xCSD;euNPT?W8?}kbz?v)&esN_7mRJ@rvInVb!rV>_Htld&
zkXaV7>bZeR3dW+s=rQ3P1VaOs-8N%w-SF0?x+IbO-@s^LO2G!_vr>iybi?~lEKTF0
zH*5oOO~&!ot>5S)baiFR<KTBL<~*20eQJqE{=sgFr28J%*iU&pJ8asVHWzj_qnBy@
zxT@y~rgBZ)-jipbpoi?P8iN?8#n}`Q+gtAfZ{4u4cwMyj;Qt#PIBr`&1qV<SQ-jc+
zEiEs6gM@r;yu!s)93>2gPUd4~qNU~7@82g0(^u-zM#&x>Mv@RN@<|k4cL;)0Fh>|b
zgO9<E?~|wpQb7bZHW{hsht8OSeh#$|2s5=%uRF|){*3_P*-^AkSr$F+M19?y65R~Y
zhHCk>QPjk;;Z3?o67Cd-pdk9zhh1oYFG@;M9b3s%CDT%W^b7nPBd`>k6lm|!O;AAv
zIrYf%#W0qzL=dTN&IjO?<c(zt@LU2Ep`~ME<0s-@R?iXT#hiyRHZd3Y#RZ>Z#mpPf
zMx&A}ghE*>-PFjJ<+)KXbj;fr=hKCkfDeG*h{ehz3WK?(q9WDR{k)BHYV5+xBKG@Z
zw=SI5)^5Rv+Yj+!Jq^_?%4zm7I#S4JFQ;n3b{+>H`i#gBP1n<Bm|NqEOK>mkV^jRt
zvJkWl!irDe2E(p$kRL@*y*zvrzQ6@eJyA0Y9=pH~0@C9D`9)(IO|N?M9`Da6Nj{<l
zqNhBzm8uY?2YJWtY^8Nv_^BKS7vPFgpY~-~wxW&#*x)yv=zu%0@0Yr;Wa|NjrIlZ@
z-xL_VL*rNKsl`Cmmm_u{w7l|=o`Wrry+dQY+79abJ9?bdDslIs>AgW+!W)gZh`nsY
z{1+RdC!S85N$#7Z5ylFtxtT-gM{G}kvp&wp&#(H%n%sojZlQ2zcfE(|U#RL{hbXUj
zJ!H>zyo$>lWLJ1Wyb=?=``fZL4y28~a(_qIWFZ4@4DqW-OU60=_o^=O%kJBy?!WGe
zFUtyrH-0m)6D`lALxTs5G99LR4xff#rwyN?>&ntgnEyfjM>VPXnfV9oKbW8i@bml4
z&MeJbL(|tgIEbq33A95?Q{N+cD{=zaIyoki^;dGZWLN@#+vIolf4hdWT&DUwQV1%z
zsOdI<p}_yehpEy+P!qiIwe<6614IO*P6Aq&)vAR8Z*>toW4C?Fds$voPnG;qghg()
zPiluLQPI4<HAyT8mAz^VsTZPs%OCH)VRgY_JKt{XaM?9pQ(y@Isg_~g-TJc}dK{|9
z2YFLWo?FicsqOIm;2|o9!vaZm@Cn9(a0`^R3b<ipl#ca448i=yd&_)_rFH!scA4rB
zAt6*|uysf`4Tq5m3R}hRs}~RNvGv5$qyvfx_s`xj^W|qVy5PDJSnl}v*)u0tyup1M
z!lOl{n((>Pr+*Ap&#P?Qy!jv)i^0p*OkdGtwfy)|6vT20CO33j8;s&-YBcdrJdm?Z
zym+q6?arM$w7jSPd9TW}YPPw-!DV@Q?O4;Ed;jn~G6%TjI^jDfEw)3f^rJ^{?Ebr(
zS1pc~5}v)OH;r_l#9bD2I+7X&=uqCwFFN|d;vJl)OR*5FE0O!qwU3S-Rt^|$&H4Ux
zUp{21kUcgd3&-L<ME_K3+ZyjbfS&2GkyXadt?aN1nZ1{Ky$V@tU4T06Mi+gM-V+ki
z0w|4gC2n;C{USedQ!Kloq!{ZkH3%BM_Ud;i_xxrQ^^gCHThad+H*`t4D{KM^$KM0S
z`1=-imT8e-J9F#v1ET2xRfF}N(9*8rHxk0$9{>eHz3D>Qa_E#n<~G&0%U*jv1G)tu
zrk`_1)YIg1VWCkle#0?<?oI(_B9W^f$-M6)w_C7HCYc?;p;ZdFn6MjWB60`dFvY=c
zgFG{Ub{cO~=b)tXlt<UGHRw7pXOhFQmX=f_&edMJHiCcK1KexsTixeP6d(Dogekvt
z!e2tJa%x`Q5;8mfeo9lBLWwxn!B;&W(XGapDH0<g1A*HY)Zc0N%5JX%ma`Kx!kqWk
zpYS3a1(<))(sJl#S7L+O_#!#00dND}5&)3C%DJl6*5h^-9;pBO%RPZ)vuh+T0(-_`
ztAw})98Xx%L)T%i{3zB~9yUh2)2JX!qiv8+mS)-@G66uLK7ImMm2DmRr?<F&(LsWc
zx;aR0bz#`BZ(kod8XPrv<^g%9t;tErz=Mdp(~yvmaNjhAI`=MGecXWwBjhHeSUce|
z!CGsGS8)W9(=;b0#t0`KFcpkRV?JQ0-&|Zw^|gUF;Xyz%AfX|USOd%}8W(U11869&
zWdXPY-vFluaD@r*?9$9iPZ<o5PFnoji2^BD#J&r71oLk2t<HO%a74IX44f6gZNQth
zz+?(4AO9Z)zfh-J-?<a;q~CM*7w9%tdq9b7KXna;u+yi0bwy<-l*$N`J;>E`wg1Ed
z=p2KB{Pxli48T*P058Ut1Q`&ePLhYTJz?6r9>+=|M5W3>BL2BBs1_RJf&l}X(F)vE
z@CCu3nc(Tu?sAatjeJNWc^fz`M+*VYl4&~;u@+-Ym=5N@;NcQ8?F14Sis^DFL*o24
zqtg;FQLgk!##tB+e+QhcNlE5_y}((HgBvc-2r?xSp@2nk0YIH|kIdf#1)xo^J|WV+
zSlt#BSrfV~4b~eQCN}N-aysgR>;n~p!mHys4hTP?Z=%M>peP-$Z*6r(D~0^L8>kqF
zHBc#;x)1sxN9Jpl8oaP@msr9pXk90OCnSJ|@O#ocC$m;n%3+ps2a6f&i})0DVGC}U
z;8Q#NFYuH%>VWKsjvmkb_QP3WVYwh)txe$N?EdR7rf-ua&sPfW$8D3Al7ip$6xHh)
z4$h4ngsX$3VCvrUPNpm~MN@aoD&75ZPb~d56^A3AVPsWWgCdFk#AUg|@QCnchA=gP
z1Qi202ia-$?1X`VU*t@-;*Z!nFf5aee}}XH0PMBP$WE(|Q@Yun?+nY!^_!d+jJ2|p
znT_A92f=e(B}^ltIb2Nv^C)HosUlv1r4<3V9;#5E<)|*Hm-cEXf80U!wuWrmQyM;~
zyPqDYJ%6DPp&6VpStZX8`g5o$b66?&Ly{cz40)i>mY-n}z<GEXjcO*!%Np?-#e;AZ
zX+{Hx<GcJ_T7m5VBr86>DEmmF1Hc1hqT(kzFj^SFKo<Ja9N`%HlXxXzJ-{5Ffd(n9
zJpAtO!<{?k`cWK7w+3H-f;<QRlGE2$=U^3>U4mjc5w|y}+nDv>?~C5*cm-2(SaV#=
z8;SJF$;mN%j{-ah$xE#QW=LBEa0m9$66yrYe1^HkJ*9vNfZV*k6viFq$DxLjc>qm0
zAlv|VcV`%e=dZY!RflH5o)@j~DV$CP%k%G@?Cs*^mVXz{qR=z@@$S=jFK2{^y#ahN
zsUM)kyl*h7Z*1%+4bzx&OrLm=SOtr*`RDkOc5L4c(*;?tLub^Jb(nVJ@Oce$Z>i_=
z+||R%%y0|Qf_J&C$2~6wzF+v_;RBC7#ht~?knpN9Y$4=g4$xHU84Rowupl{<eFWU*
z1l^oz)(9t#ysCed4@)SK5h8T0G4Tv`l=Je>SR7CP*dwd62o4`w0BTjtyWiNoyj#Qn
zl8WGz2Al|SU<~Z}JwA?!spBHwdf#1;d31MQ1DU~?o$AFCJ}2`@G4PDq_#1dtDIJvS
zb8>PD3mx{KIl6GXM|9VJZyJI5_U&bQ*4;-8I|{p0w&l9dtaS8KelbPUZEVmc!QhQc
z((Zthf-;BPw@L8GNVG5u#SSX54Aj53S_;%@{{7(B;+>R&RuVZ@NkDfM;$2&4RzL4Y
z68|?0D*k7?^S>ER|HIAwzhD0EkM94k%K860@#8;&l>WWy{=Mq{z3Qm9)PLxQ`+r7<
z`Cs#B|GjAc_bplms<KPsbw_V+(i$0>)dP~3#&IE(_SM?9wi<uc&rGX$=s%1m{%4Qi
z$DI89{P0P*6rG0QFMH7A6zX_o4LckS=Vb$v5ziK<z<TLW%t3<BK#S!U%!U<$c%{mY
zQq5niddH~JB?dnD*wudNn|rdSVDp9z0A8U1s;Ybcgf2%Hbf~kpyVBg;uA*|yxnpi@
zY@A@|^!H+7pBVIa1x**_HN9)S=Wb(=E4OdwtBiaMNdZJNjTGXNT7ruPsQxX=h$VzP
z4KcnLq+f!jm6378vNfBN;qH%jYg26j(73|$1?($TUa{4W%v<T96kA}#ez8e`-`iD>
zMfurXGmA6KP#!mW!9B3wC?MDAsN2a;^O{$#bif~|HCgv5D5RVWa3D3o^bmRvTep)Z
zPr|!Vg!kxks@6y){S^4N<V{8(ndYJkSK;0G_dmp>Yj1jYHoz^xT{%TU^-{=<-N$=d
zA4qf5wD13EZ;{y(r<8u|8{tqJnG1tyOh4b7)Ojt;93e@Wwr0n_x7M?*|6uNliP*PB
z!KdWgn%dfBHF0q(?WW*rgC8BQ6kQG{K>FfW5^helnz?s7*KhV(T$=fYCRDcHKZW%A
z@8Xs>eD}<@i1~wQJV*Q+crV+FlbIPuq8LYx$qF+Z$~D=)%YcoB&vSrq7G1QszE~_G
zAuzbPQ$|)Bbn}DRjq7+(j`PA^7{_Vw@;WZ)keBWZ|A2--A0%cUCAs>5^HFB07te8W
zHmq@N`6m{@xqiJnL~QIq>sCEdO0Q4^*-YL&)b3eH9wZAhYm*|hx%U%Si1jqEbg-F9
z0gpZ6tQ`iFn?aR?TY+?lU={DzCU+W$n~_B^1$>!H^XnOYezVb^gfA~50yHx%+arNQ
z0oha??|isb1C|wYBN^^|^CcWV?@(82spk3PeuWv^OzEGKS`oG*7Gpf1A3)ykDF;r%
zS5W~zzUN-*n3T?72o84x`Io;ZAXz4yEu+E;<Zs}OT(huXfkdq}4RqeoR!6o%i2OL<
zGjjO^mu|BF8{3bXu^957)dJ>~65J-x<&dPT=R6}5+{c%tpRh<d1S}h|d&*zAaRY=k
zD*+Z*0L_3+xRJKU_D=QLTOG#An!eI7^fU6?2FWMKKq2HqUG1tT&q1|_1+BRI?FKkU
zS@x85A1#EEcps0R=i|pT<)C)^@|wV7$p6`k3sOLtUY()4w!Ape0T+5^W_oU&cWMbN
z?4pFqFMU}XBJuDl{NKaQ&QOYahC>zXckXoFPABqZETdq1-=SyP{EN9#lg8mRM;5cj
zvcJ6?DNnf4`?FN0(6vT`&A8sv@zJPf;_ISZm{4MDu2<`mm1Pfs71xOqF|AN<3cKZE
zI^8@F?s5x$W1z?swYHu(vm5eo=f&HxFj&H|ASopU8X~-sqtd=74PhMd;db|Hqy&KZ
z0bU(p_aUA)tMZCh0?Lbs#8d;^4a*byJ$pbNaRXxyNf?q(%C$hDgoI0zw7wI{XB-Ia
ze7oj1ahx%yW4l8<ko&u}fHvHs+rZ1x@6~?s-J_X?{I+kE+tsw}SllFKR#N?#Gqd;l
zO2bP%D@$uJ#mj5D-HA_zD8#%1jm*gb6XsR`gHnueiTwTeuk}=W*h2>v$3E)VJHmTK
zs_mq*X22c7`wnU}@R}P>>7N3Iug$f;P<Fz8{4`)B!JF#ZupQ$aMCXmekwMg<EA-4$
zf@ECX%4D4-#$!-NK1_S7ouPH?6W$Ue_MJmRLf0#MaGI6!1NMv%wr%YH<_q!?lkIyT
znq|JOqAnsVW}^08NPqRik~eG1ov4jTsBQ3r!{E~Nh$BQ<O3K{FNW^7EmU=d}pp%z!
zR2uuYM@Xr$`~B9bb+sBbeR<`8oCnr8r|lKOL&~hlt}%Z3vgbkU+c{Pb+8b5Kcb0s*
z>`KSW#|JRQ7@`v#MfgPa96tOF<o8^AMgoHv?2n7ue00Y3ivJ(p-a0JnZF~D&E)k?8
zMM9*c8wqKpOBw`}Zcveu2BlL(8l>wXr4<lRx*I70Y3c5I$Af#H-}|2HT<5QIo%Pq=
zYq{1_-#O=)W8C-W4&H!Ko{;0px6H@!Fv$!J1yw9`Bi{^^g8Ug3+X|AGH-Lx>R3YV#
zx1f=os#sOZ<pRyMJd@%_Az@)=fL`%G90d)PW>79s@(0G~@;#R@3r2jo1&)ifOw%0+
z(=xgIGTg!FKY#uJB!G}5PXDpkRh`rK0Xi=r;lJP9OhKC^WV2}wY#%1|wkpd()HiP`
zVd$nN9nH3`Q<^CchPC?)a;*Kp{<qP~f$dPX>j5vX2ms9%I_?2$7GMSR{6I(O<dV;l
z+u*k|0V++^9%HSnJgh0xH!d=!s>vPRBIo5bA7e6woM&p<9=1kUg`L&S--&4NaLo<0
zM{*QWslcWV<CZ;ojhcrU5Tgh&)4&!P%7MlEt@g6&M|D_Og}?{ekT8jkhYyehmV1z-
z`rhL}X{;M!9E_UnfE;V<$VzvO>mnhpS@lB;_<f#b$^?hs8NPLOfRsyixWX2fuT$ae
z>aPV5nfdnmH_HRO&v*fS^cyVgj3=@+^_QzAs6hbgk^fep)~Z&|d6gv)dAz#>X_hJm
z2Fl*?xR>u>+ykLS;*Y7p83j-9xawy;kRs57c-v*KZS~?@8Xnq+e+>W#3dl)l1J=Ab
zzYYD-nTBZaS+1s75rbbPx=9F+oSfAXsMKY^PM}2rhM+Y7l}x<BIZBF)yVXuV2^{z;
zKv7+Go1X7v)$15XDZ8$XTHdgfovn=>83Y+RgAB^mi7*Z+=%;hxf}q2IK*`rVpCm!$
z1R&3dyi_dM6^?;0Fzs<T7sDzDl$V62b1HztfHxI<f;#{q1;!d%zimq>|FrvVBT!$U
z=R`ZR6)t)UlyPlCL*<UE*|0k5Z09PwG}6SX{+<(@U}papNzRChdcdpRFnCn(XnFc!
zdn)BKkivc(9ZgOB4YV|-<?pbKW>LN{iCW7qy-+$C^DQ^SB_hiHCt?0SNqJ~vGz?zd
z3!l^Ky}rA>x$%3_*~MjITnDH(on8mq?6;Edx_@|w!|W*9d~m?8#{F4+1q?WIIex!?
z8!+Cc%RxJ4E39!#i$XKy8G2Su|AgrS1n%^gOwBAVCiakMu;4CO+&LsoL!XM%i*8z9
zCfJ*g{sH@NVFz7;U~5?7$(T9CQdd09kCKnsE$@@KY-br3#3yP`*+C9N%9F>$80E=J
z^%x4m>0QXi<M)N1yN>~Q^e7XN@u<<GiP5Y6wBxk&VD{syRyO)9u=`4XVb?UgZueJT
zKieyv$hO1yoR3VIUfOa-#$G4OU%+vp07y{)b-+q@1@fcl#pvZ)yb}1tz-nt`YMLdw
z{qB0e=9EWYt(!Cn<imU!lFTB024p5DCq7F^FS3PY2V30X?k-^B#cEx7qT^~0df~sj
zvVP723m5X-yP}x`c8Z?shQQc$zc5lZF4hsS@OfuakbeY@0m+JU02jeSNn2G5-db8Y
zLN%k$+K_IbcpT4@ubasG1e3@iW)cl-wV!n=<aVgt&ul@hcRKAg4Q+RFmj~Q0b?PO8
zX5~&=u4?2*QmO--D=TUXrhRV1ejh1?<>7>Aq66r5PJH~>+iNMHVO)l-9H>n&MwtcP
zLzzj5cIAttizx8k0m;!FXdsy%DvVpFzJI5T&j-3M0GC|Pj)L%?1=hTt*^#EG0Ayx2
zz~z&HZ77AV{;>{(y*k+n?O^O>+N6T&vAVN`&Tyhq7*fAro&l=V3|K~a_okVnmylMm
z7NBX=nRQDA`3*1}7c0c88n<9Yu2sKTC!)=kDm(&U;}{zDi2{)mtn#2(fQN$Mq50i)
zX%j8k>8lO%k(7~HfjTq3$5ytX1L-d<y_2ZqEU&UA9NMUA1R?(d6(^WL5<!^7s5`DP
zU;xg#OvR&>=z4+p&~bR0g0xm{YxXABQtpe#ca8C<1W1p;{3buLswTFitPH@lAJiv?
z9x<3!7Z=B6xX`|aLA92w8)QYmU^R&F98x2O>%Ax@n|(9YfgcRQK5e@s34P0D2zndN
zyKT}4Gj%qNC;MlDF8u(Kqk*VNHBAv}YAz<GQXrhc^n8{47WzfFZ5z@m@!?0*>p+Z~
zoWJaTAf);c1u?lXm|0L!_Wj`1IZ;|<0R}>q-MRfrwr|QOetQ`WRvSHf#?SC3ku!Gu
zRD3rZ97Y@fCW|Mj+C`a&Ich!q5qWL@Bp>X2FlWe#8kdW4$kngcJXo_4UEK9(tM>Ev
zUyezyS<1{5+5bH=dd=Q(GBcUcQIru~&OzNMFHog~fH*JU8fH+)MCCc>t6$}?wRLpJ
zv#1a7{jL4C)md;I7jkE+2mOm~$)$Z#;eVO_MAe<K+w1?j066bkDy(xJTPn+FcTHbb
zY~<EoCKhPF9G;nJL@UzS2RV-yuchkrz<}6F@U#bC)30A=g&qO|<A>`LYSoipHv1BI
z$g+B}GiezO<f5>F#H4gB?EQPiwO>7OOoHKI5BB4vq+PjgkbT;68GaHdjE>fTYBRIg
zWqURn$a&$UJVSu*kZt|@y!hX5FMO@IutU%Y7Y2{((Sc6F&$>sI+h5(bFH8u}mx!lj
zr;u5T2-ffUBnOO1NJ2%ZNPa|asHRbb=srH;nR#?PU!YJthmz+8ra%q2`5CkRj6g7A
zkSY+27<8+B%bPZ}TY6IJzd5eb4JaW&frG~bQB9)SefnPHFhZ##<b_8FNUIenn-8g1
z&5Vp#Tr|vrCP)7qNw2?}z6elIE_%KU6WF#vFvMMb)o;0}j=P2RqufLmL>HH}T^2f~
zCnu3`!ojb$wNOyYNR<{B1N$q))8&b((dhweRvt((%wf~ffuNeB?Lk`2h3?fTcKrsv
zkXR$#T-BobGp_0Jai;tC%Ym6IHx84qX2A9%sk{ZxfP+Ze*`7Y9WM-Y1^<r!QMuGPo
z6=loNr>2z6fPHWdR~R5Mzyb9NF0`38zXEW_n>}v6Q+Rs{Sw52iwK!B$0Veb=+r!HD
zukSF+^sEbri5m|DY=qX_7l_5k+;FJ7^!I(_LQv;83Avo6`yZ!9;pZHpQHd`9;c*p&
z<Suh!Db0#QXI}KBg;jUy(w3C4U8r)fYi&L9{E+#w=j-~FbmRZ4PE5xYG?MFv&E^uu
z+o&s3EoJ0uyV9rsV8gUWQxzSV%J~1E@Zs;<dFwzUAfVI!4d4Y)d%jo1tly0xp`jS?
zHvmh96W&%352l5npc2q;K;}w>O7%mX!O_;%r&mLH9En+d0|U@~l7U^6Mf(LrQw=;L
zVXbJ30fQK1S2??#j*gGF9e8fB@_-4f=3fhZH*xroA`jbTKI@}FKV+dNsd4mSB*k}z
zZKV#Mo#M($_u~Qm;B<&u@ETQUlQe}t{f|4b)l208gPu=g4?IYR=*gH9S;*KDFAc-P
zX|G(9M;xGKIy;{>>9)$Z`1s=Mi@I+&I|3lr2>#uzYci%Rl$32ibycf)>`^*XdJM<f
zcWSDu^65JoB_jhj_fSK_^L~yocNaVn1IqbI0_2N|{3H7q0Fl|*biw}Zi=82l{E(E=
zxBdt`8BepHf(rK|U({`6DT|<7Ibr`1dE4cBc<l7|PyK^`u(v#@S9_wRqf=8I11N#A
zj~j4*1Hmm5$+f?Q8(^b50JQ=X(?|8TkWm2DQfOeHj3N&5mQ(HU#K;)tfiK4G=l<IZ
z0F{wE;kT3s8fm!yT7xkiB<CBDo(&3;sB(w%lQ5W7-{-BAjm*Y>;usE!%a!o3;9ydL
zJrL#6yScT3iUUUZGXFW&`nbu+62TC&nhXZfj*$_i$F8Ly#JP684oMaNTz^5W1ZrX{
zOUvDQX$2;bmjKZW<YF9l^G-ow`{2g{g9C`<^TT1sUJge(C;YL=4%bg1R<(xTZvN<O
zw+^a=zhx6Q-xqukA8X_%oPfv89?A~LAo+Ttjv<oBw;3gt0yS}txhYP#-2gEW5gg+&
zP|+`TM3;dHth(s`!M$&NBlic8U&Inn8bBu3F$nw^xEC6pqm%Mj9sN`Uy{V|>fC>0e
zgY3CDJWhrny%Nf!3i;R`RUD*m6yzReJ!fzQdkKcgh-Cl>6gzEFfC4pWFdPB_6Q5bO
zzw`G;S090KwbzNI6i5|Jze02+(7iG;ZPc%BEtZfS0uQ;cGp@abJ{V0=#DW5=OQ3p*
z@t%R~N)Wh>y(f3GnfgW(2B-oYY;1C_`4FkFmAe9aN)CIwZdF#pn~p2ap1a+Y%*^><
zkYSLaool@;emz5-ivs$?m*DAvSSTpLHBWHV)CM!%Ao^A;MI=RL{@FL@{>}Q!3oxPp
zbKUZAe?JLW{?OV1cgg{10|T(h@Z8j`%xM?De1i(<o9&6q`H3U+;Xp0^kw&^m%r6)e
zFakX&_*~$#%7y^fVhD(mJCVA2!b#1Q>)hiB=zA7>Q$SO5iq8tcybg0Pg69C@7VvDN
zrPs%k;dEhv+Jz9S{v<CYDXCD%WD0Hv?NLuZPa)5z5P22aZ0?~gXlR1uf=LD&%D-<O
zr;8wW0yTm@C_8Bv;6v(`Td1JN$aS&3{RRS+pSq)E;G)&7c@yytO1ChI%Q;XnymoRD
zeY55aB!46GU&!BVG75}c9;cpqkZg;7**fL%U0P+)<{vNFu{}i@`up#EaVh<91qM(u
z58wYA>}r0kwk+v}WYuX%a4<a+M&MgY`T@6qzGpHwYsF<Y6HUq(&r(bbbotuNB43>B
zp3j%1jE%)RnK_voB%gPG+fDJJ!4|nZ!vqsE$d+~6Y1y>47C=T5PL6rUk?cAZWX<96
zydf7vW!Ku8Y>V(wzSmT2_3e4GpIoYsPwn2&*cjeBjt6SVv9ZvYr3rIzaQN`A;q&LS
z{TcKi8Db7&ha^*Z`8%2PMMXt4QlWjsE)ZY<JzdxuXEfH!pqoklPMP#z$12UUGG`@I
zS>dfhTtq~!2(aMhL7|m71L9POB7?{+^MS$3vz$o~?0|_^j|;a*dv~Ih!V6%y5MY-W
zQXTg012}~ONo%s7kU!T=Qke~TU&rPA+H2Suh`9Fy3JP9e{kC*<%}z>U^@o6_bY3p;
z1Y*4HAo^--ii;@MPEJl+@4QyG&DwCLPu$<EhUL`pDiqch7Aj0TH7$=okrud`7pv|O
z)6&!gz#quj&Fwwv5ww|6+9wRMg<B0sqj<QO<W%9u8+cm{jpX{H*=Zv7i!|x*jr5*5
z9$yLMUy_mypk3y(*(jPK!17K>(eD&?y9H719DGk*wtn}+(x#$zJuM&ovWY82O_Yvc
zcmjxAq$4et3DT6$Z!`bI7$C?}J#M8~9ll)by~MJFbOZg;vV~p|!MRDN>A|Unx7W`9
zO4g79ZrJFQ+{^M}Juh64HhD-axm<|Vm&Gdry_KwNJ0m0GN|g$Pk$D#fFb)n3fCS|Y
zz+YgI8Jy*$^ng~E0~K6i!j=P3=E*LQ-86r)Pj)o8eL-8{cUuf1x2UP{2!~#+k7Fwd
z?`O6gp%X~4J*zy)2p19OePn@!$y{CZV%Aqh^t^nh5oZY`pZ>lma$j<RP(k*vc$07X
z3<A^(l;=U6uKpqU#dMu9IHsC?@+hA=-1rSft*ueepn+J{%7zL;l4JE_*md?M0qFqo
z&xIhR%jcSbW<Ko8cw}TDmPD*4pBXmFxG7V^z?=($DZsa8PrWZJT!-$HS+6Jg*udl@
zx#@Sv=04*tc33W5TSMmmx$ky+m6Zb2pRU_(ef&0Pw^g3<JRT>KIC)DUI=}O2Wg^{#
zD?ZDVQSw+$UPk7Py*-h}+obwbQ2i-q=5*$d65?qnDkyvk3(Eqq5nvBbdTXoa-Yclr
ztaR#yzNL>OvHoR7DJa<5)m1)k)w!TOV43CJLFZw+y)7Gk`t!rIySq*rZy@*4{s<=Y
zFe*&i!^h2m#P<>OUkugBTT;-QaXtd|qJjSOPn+8P#ZZ#L2V7jh*&E7{E-EW7X2|DJ
zumQNbYcS1>97VPf`)fNZoiyFl6~Xry%)XfvqiCwC1KT#~g@qM}dsS6(EDcjrQsME)
z)gp5Tj(=L|gv7*XffA4qGJ5YdH#eIO=S6SUo!+zZ0fWTZd}P&lPQBfNRroz6tb0Oj
zot@TTstNQ4l~>-=h+OW0REBDA^@&47GHTkzz0{rW347No9%nu#Ac#lss?KSBC@hSo
zgy$r^<>h=E-nigLm8GR6@Hj3{d+EnUMeVKRe})^EV%}lhZqGANUJ-^7U#D6QP|Yo<
z8&AdHGSt!WNB-;7d8x3>K^tXFN&|OmHqtKwL!F5CBgsJI88VR;US5W)qqcV*92#HU
z4vo~62=MW3preW06A=B@1DQc9sM}!#Q=aR3ukv~^X26O8GZ@C;>IITMkQS=8My-IA
zU}i@818{d=czb*MW04drh#zly)ssIka{$ehd|gyh()pAd1&h{J6@v7B4Cv!xSUor(
z>X{A`GX!GS(DR~THG=@J5kmdOs*s+<#zv)2f_K1sZ}##f&zrT^`;1^5gTCj!;AU6L
zR^c-z&7!mEP?E^WU(Zpl_F9RDi;xSV&a|7iUz#Cs%Z7qNjMYrcL-S_DIWp2vlo2IH
zAUhLejnF_f2V-K22k)ido#c8@QEt|M9xRRGw-;gH!CvVH#$xzgerjx(wz&YYz?+Gg
zdbXh{C?i`bg^+|KY+wVBF!WDIg<p<0LHi<FWBG|v@6q~~eer->CZv#fO>Kq9ya{mO
zPmvk8VZ>7+A}HHO*K=J?>iu8;{(cRq3-?!{a$ks!g)vXA=?VODLWjTXlasq8w^=F8
zd)#03e8NG)cExb4vZ*`X1Z{BwAG_=F;k1{N)8U_ARfFl0)3P+6!3Oy^cpLAF)WD_#
z9X++$F$kvty3^d4xj6)3<w?OBeFbwYOUqois5_r5=c<l8YBud6hr`>Zzrnu27ae{`
zowDpdZ0T@<oz6#wbJl_$_OqUnfr4`c4Tj{a*RT7E4aG}-fje?mqx`KYG!qr$xtd2u
zZ<^|VTbOGNH^zoM#giem>yk8!tE*+Ua|bc3wRo2ejp3aOJG)C6ksm)M@;R|ruxFp0
zd4oOX25KcXhSlF^Yo=kQ+|N(j$S61~%Vlm&>Yj9)w)WVQ#PMMxKjoB^Q#B<jjE$&)
z-v!#?MI%j*Ab5UTHMcA?Cx@9Zc(Gep-53%Zlai7EvpND^WZ09uz5lfoqU-GJBxqjp
zlcV7SBkprB1+&1e--r`}N0;^ICX~>CmuxD~{+yTdxGQjr->|`%<rU!RAs#L9p{<yl
zTt}&?C{Rp)_V(JqG!j(It<Mq4RM;ZBU4!X=G|{S5(FK{9FsSTXLYE;a#QNu%e_KFi
zz*A07@CLNB_{6YZ-f)zZke+V@QD5zWPJeDVF$wATkN$oYZcQIlVG<IT85k|JwFd>Y
zJ2!n<+}Hr5ia~o&3H^(SN<lihgX5(fbmXeF>U+Hw(CC=?V`#`hS{kkY=y#aB;n#O4
zVkq@b^%$#_ajCXeKi8{MFktS)B_)|rR(|=Sq^O9u0HCEV_y_($oT1m$SM2QUIG|Py
zD-K9S*e>BpbbFnzl4H#;EYPGunoza#YzSBf9zT|xG5P)d9m4~dIm4VxX2@LB<D~2D
zwd+Dc!KJHkoW!u{GDTl}xSvId1i-|_r5CAXe({M54h?o@B;^Bun`ph}(VO)2EtON?
zmex92PcL>)a*OE6YHI!jcMl#CLHnz+u>NX0^Us&%gp3?W%T~X&wno~&o~=SAK`L>t
zWg=DtO-0`7n83--PEJu#s#&QvDi#<(8PYiG4>}g?{HRBM%=F`+YifqSQV7U~5&>OF
zeo9+aAQA?PgRntAdzRSHAQl=L64EFjLqLf^{UxeGLSd}NiQRH^tjeMyD>y4UdSTA7
zIO^ZD@Ngw9Eimir8<7L8mw@PJ$s562dAdtIk}%F0nVKTf?}k*Itu(&?iq5vSwO{<@
zPd{(a=73Ip2S$A`Us|3UZ0PDz02L;lN@ErizM1(_Q!Bl;RvgUcI!s!y_m4;-Byzht
z+f__VO`mDSQDM)n^OfsKZ8OLTnwAggNvTwbTUER6Gj%wChgLduWiW^D-?W+<GQH*;
zpCS4uxwa*Yd0zhhs0<9UrjPcgbVQGS*Xny}mp}*Cu+cxa*Y4u%7<9F@djr!d>fh`Z
zR-nR@P~jP1V`Y896BeVVuhOodq!jBvIQRgUJS$&RUJMhgtIj*^o<|Ix=Z-uL^m&2l
zB^WrO;M==@=T1(z=!JVrXghe)Cm-}GG?{;UJrfSq*yD3$52F`203*6~t&oN$0~uZ8
zx~KdYS(IVNI;@2?P^PEm=As+HfrE;Hj=ir(sQM4^%N<@9^RQ^vEIdw|e#EfPc+$bl
zZuyBTxcaW%#~wOX^pcmudHTSoAp#}=+~gVq8Y8lyOCV`Wb?b(3dHlzZOu8C~1k4mt
z)t@jL24X}^iheO9fx%|y>gG1{Kyqv=-aPpjC?_hpm^W`KcYBu>=yIw!Tr62y((LZ<
zgDs8%jAvm{#J3#{fm?lf)M^dnP})u5z_x0y%XcscG{A#;x@E9b1g)tD)<1OXN&zB-
z(11cTSPCmhn3os6N^(iDwRu(@=TD*(>uYNak?ljB4Ww|y!F_BN(jO|V7Fe%N%9)R|
zxbLyR$yHE*1)DPk5dn4t;U!iukBh<((|HP4@KFvEs?j62I~llygmJ*Ze>F*wC)ne(
zM$A+@RDbyvq|w{8ha!*YSV+DDqX}7N!GY8yH3&Lt-j`>$gQYbjhR)%i1b#YhA-jyi
zr$j+17q*-KL!V+tmizp_y@0O9y}X}7LPGwx$aj#|NE13gzZ<X>;WdxJq3%K9&aqVZ
zWlEj32>kO}jo~5*A?&@~-5{Pe?{JkC5n%<WC&105U0mec{~h*-3>DaDr*{KLC0d%t
z@9&<@<M~eyp$t#qC*ZVD77Yud(2!WB^G!cGn{b-;(7jp<G?WX}%O=8iUxdsO97>4a
zZ>|>rkMENxxvaiOx#>7P)n6$&vJy?l;IN=t%WbiKZiu)>g-c<YD;yOi#};dB6jml&
z^25}u15a$I{<b?8!pO4gee`3iVN=_&u`z^4?2EKCIT@MCiVC7(c2?F5?FZ)$Vt$T)
z%S%?YL=@hJJqMTDiPY&GK|w)fB_#mtDcs{B{uL2qb?4BCDK{<qagd&!!LZZaXscyY
z^-f~e%qTzaw4tS(V4xTdv}aW_S4<GQ2Lhaclt#YWZXmu+3=PmN-pJoMkO{$g*rv6M
zbyal06;BQeDn$kaBu1_8&6OJ9g)Ol>NABP0D=m*?P7EzAV<IyUKNSL7N^Y{qAip5I
z2$7+ku;ttzz!xh0@+G1(<P|wh9-5Vp77Ee*tCx_WaDMT`)dyi_ZB2XiHxS9c88eXU
zO+q4!@bA?UPlcvgO$yWsfq@r8#hbxXH@A!Y$2oC<kA{aA<n7&1P_Xvv*ROBi+|3$L
zuUqzwj<z*5H8nK+>ib|W9g}`=-4N!Gpt$k#b~7|gQ_XF9e)aJXR=Ag?Wg)I|(q_<c
z``8|;t!BlswZIhZ!p|T4^()G=XOP42z_W^UFXkh%_P=m(fqTf_9)Mv1Ava{&V%+*Z
zD?59I%hc7iddSnrXcoY*l9OBYm*;GGbimF58;}lNTW@bY#4y(pNh3cJ(@m`Sc<r$<
z4Emhxn^<&oT&Vv3DAROxYVKu6p4+VEW*yoW!>PTcjGk)z9w!cxqO-7JjZRFga+z9L
zjh~-#62G>yTj|fJvEbg>#RQTOHS$}L`J6d!@TzE_zd!j<;MM5X`Rucv?(Rmu9tDJA
z%0z8EN$}cF1hSyXlWJ*g1x6+{JA3cgSk<#Hur!i^cX4=d&>#=x_Ie-Hed<|v3kx)8
z$H0W<`B&U9l+8bX0^3G_wU?O+%`k(G%9qyxYzT{oGWhUWmnYCyVcDjRfm13cGm~1C
znwpf147iKm+jB`08eYRf?C$E~*2FJ^*A?RB?HL_Kz>C7B+1}0wlCR#54!GFkk&*^m
z4#iGDag&*u39tiG6O*r1Rp7GG)JczyrZtNlZ%wR*8aieINiGp(G&MIjCORWEgut8}
zB^xz0HT8#pEby<Uh#|(uPfx&KH;{*wTq}hs_-0K;ULI_dr>T#XqM!c)D{%${ob2pu
z8@jr<7{1KNU|*a!fg9J+cK{cI!mNZ)v_75vM$kDhZ;oDXAr~UDNJ*C}C@$t;WxZZO
z^Ek{WDap~@{bO!!5M1R_jZO-1jlw}(B;qB4&;Nvni;8L{h~5>v69RlsBjV!bH#Tfn
zf3k)?Wl%2Zeni*asYacdm6M}i?cnmKj|%2>;zo=NkBt3DNS5JCB;z!C=$-E8CkgZd
zX#O`e2+Y!2;z2RzU~Bt$j*YDc{$~Smxu&u*v?1F7wiE4o&kSlGGqXj63Ju`hd^3GH
zrQiEHL6-=u7tXFw+J!9`O>)rj@)BvYJ$$HDAwfZrlE@b_b#v!l!%ABOO&`mEO*?IN
zX6Dh!i6N0v?_ygCu@BZS2&ymedH3$xPt61@Ms6CKG80l?@O=nCTD7IJv2EN9L&v_<
zAK;<pciOlsqEW!gMI|DY3CjcLU}KUjg$bW#vDS7DRfLZP;>Hw#!E*a*RTJOZRmO+!
z()?xd_IIZ+o4eD3A-+r}>y}GtP?2}Wh=BAdPvzRRml1}*mcr95EuBYLQ=O)Lg0OMj
zs513PD!$oV1v>F--Hna47Ts7_a1S#wx<?tkK>dV?kTy0zVt#3a^t!XUAE$|;kgKyZ
zC0F#P8(D38dsry<2@gN?&D-%Ow=_3Hi%ml(Of@znn0Cc&MIJ_trjH(xVHx=0iIlvo
zs;-WymYC-Q{^5Kr8jjI6x&hX}BnTmpC3u}j>fT%v)C;&gj{G>9#<q~}5*P*cU+^4N
zGGL_Ss-DLE6Yd-ycTYdKym`9HKBstV1{5stnBtLYXh*@4Mc_4DQ+-v0A0Y2dO5i?s
zG(~b#V{dxj3a%KqLi0N;%gfN4fK$xJWcJSyf+(EWU+iwS3XU(rI#;ps#XzP-;fE$D
z%)I{?+1LcgsI8RZ+F)S?FE-HVe2|hmZ>JtH<YVU#2?|1IG8_FDehv`RRGgi;tL*hY
z?x*+&>Vjvvof?ISRzXb7n6BK)D{mY(o;SgGz0W&8KZG0AQQgbS%bf)}qcN)SVi6&x
z(K-f0sU;5!L^Yr2T=KsBx1fNfS%0HqCssov1?jXx?x+a7#%ol0gk13@sVyke4>wuT
z6))f6R^-BPEeb_)`;|ZbbGUnbtF2X`kD~j&1sb7k9_W%G7VR7ypf5@!mCg__5YMoo
zMo7Z-@L?O66PfcF^r)9D2`gT_e3|7by&X8CI+AnrsaLdq6NDMC$pa1!429?#as}7r
zy!7-~b-o;kljGQy%-hN9Qj@CepXFZbSNFga?-D=R+1=GBJcITY+@oNtdlzh>qeI#P
zPdqT=fdFU>1XJ2)-^rdf>tX})SrQwUIb0N~{epT1vf$vrq_}~RFB-OGLiP#pNl6)(
zwJ^ii)XGbK@D-gL+|U^GxCt^d+wECel`~s6=da-QCm$2PZ3#EE*||Ao8TFLrsi`_g
zYp*DRh=}LUKS^%8gx`#Wx6vFrz>1cXq}!7c4pJy?tI&bxHyy!ZCxP41%l>D0HAwa8
zB8ZMaMFXy_nB;_n1mA!F*f~fHfmg&)Ky?p(*syIm(|f8U)R8TA!?N;Cn-~oDArK^E
zh!(2*S}6AN-UjahGs+WMoY$|5+wZ0;S`@ECSRwZ2P?Ln2xj6-a+K?ktwzPsUnA^aW
z#-jt26R9egy6c{wisqKEpfs3ue}cW(zm$onztmJ-r4lO2yF$)4*9{hi1uv+OS2*7|
zG|~s2r%cG=2Vtg#(&3+HPcHBG`93Y}@Q<`V7X)Cfv>t4sxFLX*VSrHC7fX7QQSMir
zUSb>HPGrc!%}qEgx*tKC*epk#W*PsevxyW8rvSo#y*=V6^-ZGabTux(wD3(kk%Xnq
z^BYfY6A}G!7IyITtb5Ga{|DMTHC6l}OyA#xY~HvgD6Fg3oE?a;gCqIH3zqFu@(aI$
zU%h9@s_5y<_2z-+&{g}jO-A*?QBm;;b8Y+Z4UK7Ab*prFTGlby8;lEk%W9CK<l^EI
zH`U%QORCQm9gQWaGeAj+VU_tqHE~!=c6~|D%0*fxhv9=&C^w6yk-`lfT%F!6ZVn40
zgVfch?VjcEl)%BP`n2>~p80iDtnW&Ki08}rl#cY1I>jxNNiYNpW<t1PB6mayiE6~N
zCG7M+xzpS-$p4!u4QC@ddQi1Od_qD@L<FPNb4|@RMn<ab+fbTpZOyIlVU5&4iQ-57
zRJpbRv;FGD98{H+K^p3GdFZ82;}9*lo&7}cU|o>Ks_A&QABnT|?@bChS%{sMQ?v*2
zIS7&I>F7eNcGthigZY|qZwBTZ=DkuFd7fCl$af(jQ00D{P+MDAU$3v*$ppvFk7~=5
zYz^kk%hP(C=en!X^a7x}0qB`;>PqW{<li@8cj6#%dhiljjSY=TaQ<lXh_JF6PgXxc
z#z25Da3ISVTE*M~o{-rCrId7v+pFNA+&VcUBYcb?z)taUaNNYOf`~x_pndxKW=e*{
zbbUJJ))UkIY%2dbh(P+zwBS1IRCr}(wUph7DJhrBIhdTC$--!`Te>X|48zdo+ja}{
zKt8A;M{7@0pR>W-iImIaEyId_En>`RD*mOBQR$oYmh30%(Q*sW;4<aXzPzXv7aNy<
zFjZx5108f{2PY>86F*Jh@#>1-&2E`sbgamVEiJPLsI%kl;!7u|*gB7tt^NH7sHf<`
zW{tzy+uu*c!jfsfq#UNvFbKD$i;L41rzscg=q?y)8gvCvc!DK+>+Rd0-g(%}f4|@b
zxG+md>%W?w5~chuN=HY8F1<g%USIHIPM%#@(5NXDQWycoA?wi+7>FtJ5QYbRGCntM
z+<;Cwe*8-F9cXci;L(aK6Am^sG=zqBK`sc5)_YQ(`Kj7C_<0T8AHAIh{u&-$)>uZy
zXSkYYZ18!W-DGB#A7YK5ija})UkF(SAuzeHs|+xNpro@q+2hwJ8#q6Nf&%vy-fp%c
z`AE87D+~ydKYr8^G9Ld(%M3p){AgAal^5_S8C*zAwDVcv?2OIH5&YRSJPc`%`g3z3
zMPItQqS*D$LP|=u_m(4ZmA5SomPzyP2h+Tg^1pjsYdtmfjZB_J>qL!T>Pi#F)eK4H
zSlM1Y-QLd1-%x)#CXgFaabxwwvM@Eco<21{t35wpk(b9De%>Zue_nYJZ%*gz!ZTul
ztHEQ!#LSGjTx38+^$wnMjoR_TXY}msN?1@zrf~#bgWMR36e8$$q`#pLF1j5m;dqM?
zGvAjJ(N<MeC9|8p2anzB@^B)^>3(k}F7Cq<^M2tLaUa_Cd-q-~^-9C}Jv}uA#(aA%
zj9|OAV6B<Gy-@gNG%SGh`wXypD5xJEK*Ls<lw9PDkvk+)z_3B4Nyf&e7y5u;iKQV4
z<{BLv`%P}RoaZDl9PoD}lD<REZ#U4|D$my2px+szH#0-8o>f?+D@eT$(XI6l%zNOF
z&Q&ai#xXzwIsq610yzz<#6S)B!N#f`M|wp+i`dPhU^wN)eo9J|y)NUL$3<=jR8keK
zA~>;01m9q>Rg6J>nAbBSQOZ<Nre?k*eRwWaWc{;?^Ff&fsk+GaJ&o1yEjp&J<106W
zDJV9f+2v}s9rSrh#%I7;v_1xQA;edVyz5$UD}cY4q~+w8O0h5A-#ahMiG&|tZln#H
zbkF3`qg7aR)HHyXbX)Ao$$A*De14__u>F;3(cAlcVZ667nn(26*;rVbzFl0@RaWxC
znXOivXFHaRGPV;gTKTKagPoCatffVVi7F;j#Ky8aiXU53%Hu?J<ngIhzBhs)IKkh=
z<(RmwTO<8rE-8B?3C*D9>h>*1vH$i0usLL${<Cc@JX-FBz|w=YI~vA-tZ{=!nh`gB
zbYXe<T|JbFu%Q6y(X}b?G4XV*+foD#+T~Uw428cf4nH-QThhu)^^A*&5pmj>P}LeQ
zH8rowhuFb^%0e&oAxZVo4kjE;zkq;e4tuvVc^EN_AbvZ;qe8`4JqgowQ!jKVH#Z<)
zb$!AsSrZyE9?Z<lP(UtQiirVG{}r)}oE)C|oO1^Q^5Uw(ubA@w&rq&Ubad7Vh`Ec~
z+CmT>rlzL7@w;9(-!UY>-Ev0B5jzbk@Q<L=o&!=CY`59{baL*9kFtz6B`YC}aix?l
z@YzjYm^drfqxSZfEc>9@%4MlK5?L>#J}J0_h3g6WEKs>72|n$Z<SGBmn+#n`VNub`
zwK14K{DD=Njwl`@(&&a`1<DBgIXE>095H@4n}}Ikufn7v^>@%7qV6j^NYs0?Wz9KE
z2!Rr@zsD3dlTJ{OtZJnSj8}0C*_oIGxVfFX;tT<k1!c#BmM=CG(9pcI&lrJ|;$n98
zWtwgK;9#wfN||S>yZeTk=XUcK#9d&hK&D?_ikmjk(EW%g<qkDbH1LYQ&(}P^IGC`%
zJnoH^yq(&8NB`5C-`^u(7y@qk(0jsrIVqYJ3h>>d;dtVwh|9_4`T6nZWfbbT7-xor
z3_@3L^sB9)2rVK1HkHu6x~SzzPRhM{tKrLw-IUMD`W~}Eun-DjTTV|;t7~dJj%IRT
zrU8{!NUGH!is=2D=~9eTRAb$Ra))Nk;jdxS#qgv4KkEtzBY@Px#3;wKP|g3Nv^W{x
z?l*9CMJ-KfaY<Vc>&J5BfL;Rmv<MM5RO}b$ZUKIN7T+?J=b@Sl%zM1A<XAfmzNE@m
zlMu%)nC_h)7R(Tgpw<7_Sq5!?_1aEEYP#0Sl0U+Gn>Ob&_5WG5{AX?EG2M;IcuvQp
zNcSM7-64q+y6b1h7ESbFc3GJ#mRk^lA$nGPH(D4rLY#X|>(dnP<#cn^tn^<F@4q7*
zvS~{zDj;NyY)8>3>p*K@N={YCWZyr`AxB<(F|=z>aEy&JmIvvn!h@`SZ)^xyDA!Nc
z;1uX3g({C^hfTu>>jsa-?OQOf_k-R>)W_Xj%sBMipH$eSBqY!cfSqjR+~Hs3e@tK@
z<<ebNy^Kv)U{*;vL*?D0z@ym6Nak2`=q68$YR#FWYnmZ`8kWIu%g&BaRyG%!v1Vp;
zzgVvNKMtAJlud?CnwpAG`9-P?2J11(t9#&HDkzv7m6dZVJ$WL1V*<{?tHC8qE(MZ|
z=!a2vcXlAYB@Q+BRYOeBIzhd*!Lx<-uB#fSx)1h-73x^?v5BYI)A!R8Ow7%FUPkkA
z(89Z=9*{hKSNv57adlh$up;szYgDtOxm4!r@mFU{`ZrBA-p0&~DRAZbi~La|lABj=
zvO~kO9|!FxJTt=%`2^Ipjg`TyF@J>zi02FHH?uOVgjTX9THx9wDJhAbzT*2*qhb;R
z`GV9;iHf(y(&$01E`09}`^95ijR)C}k?$lnE^ZY1rltpL^<(2Y^2X4Pax61@0>d->
zMz8`%4TINWu(#K|FZE)88}{b%%F4SBi$8Ophl>^g{LwL%jT}&<WF#)R8qA+zKR8?&
zE_B-5SiuD0bI)S8;Os2^+WI;wj%Vo;GEqx+hrI>yfcJ(xI^|oyXAB5e!VHyAGw+e8
zJDTOTOn@IB>UyP54+W^GEc?@GiAReK6McLp?R%eS6yB!;DIc)PK4ciHSr)-dK@??H
zW+t?s0J6~5l5MdtIKTyFJKt!i2b%>Bmj`_g_pH7<teBP$sH&-r6dV^8JoP$#$x4TN
z^%FV9B_=`@!RZ~j$NfOfbEbiov5?AwT*$fHyq8TaJG8r9<!o;-_}6pVmZjf8)K7=S
zAWMo{gpY5tCF~h=!xK0RO_Y@d_p{~~7a>2rRI|_>2K|7EF)&f|RS2zz19oS@8h11q
zD$z)_GFo{}YEHQ)Y1;c^Wo7mf+t~kd%t25lD%PI|AQah;c3;ji@9usAzLtd8So$!?
z%`gG(u~}D~?>;EjqK7n2krf;b9dO~foy)vQi&oYjI>6g_U?xOHMs_-GUADa!{Zy}~
zw>MVrWT*4<l*eH$0Q`Z;tasHi9X3o$dyFhrvIAzI>_dF3u;@Pnl?$SiY8*z2&CW_n
zhnHtd%uPAB$p5YQ0yi-f0C$H)FbvKpS6Pp63=t=Nx(mfDV48!{N8dn(_ALOvHE|FH
zGfk(7O9S>Y%>%E^t~;?NWOgun=qY}5BRK!=5E4SZ88itXc{3-=H6uTN_Y;2#=<i!w
zTQPZB;FL7Rx|s5Gi^<CJOZCrpy*>lf5hMi`I#?)TXBM`Xo>)?|Xy|86-VwWt9_enR
z>X6c1^qi4@>esJ^*4ER-?q|dY2M739Kk11-EPG#$pXIsNKN?zCa7a-<oWUI#`I5yQ
zra%X)6%t0@9Xtx;(B{JS4hbRHnYyFz9>PG3+eb?K*zyb>DWJ$B61sXnFO(SPNV+8O
zxH+gITI7uSK@`~V$laa#R`IqTHBClVEUq*s=f5x$A%_R*JWKxR`MHOW_xO%`zklJl
z4Qn7nU_EpY6cTx99z3{i44xa9x<l5rmpXzRrBgAfI_fS|e@pQFeFKX8jT?S~POt9#
z{RE4@4Z_R8tmOyPRQNMCD?_&Fe^{Q-Hhe7EPLUpBaFfaLx9Tgg_j#%p?{abG2Ls|*
z*3;X=RrTjD1$M~t7+1(IjPc}5i#9?Ssy>Fd-r+HVS&YTeAL>##A^5Bp1K&ONNtU1%
zww+!3Sy%(N?=YtHGW!RQvDKgavc5;gIq<tJq7f-|5K7{)CQ1hFQ72$p52c_t3lm66
zY=|<4;tbNdC=9=fg<U;b8j7v&e@KTXb8$wb`NPGZIasmGfs2FV(T(2D{3-?!{$02@
z+!GcENiQ4i!Y7E-*oB_ppVFItVxZr-<z?sc^P3AMfF6GqCDnsJWwM5o0ZVT1SFIa}
zq@U<W$jRvdI#}ICL6OY^kCYi5suhW^lE0gr3IFM@<JQY{j}o%CBTP=dcO*UsZd_rw
z00!dupztUU59cbVs}BJy=q-}SybdaGq&Q?v^r-Ql<c*0h`W^{(WZYa_R@=m$^N<bm
z(I4=K>Vtso%r<USEYvyfPCT?3h6djreAxgCBD2|yff<-+iIeOc=NJfxoKE&gK+O&?
zE2gQ{i@A-dU!9%OE7%(QQglkmD~ms&`;<!Isnu1-jNHIU=}mHuj(nk}r6iFve*Kmd
zf8YYD)cg1EGZ9vSq_mMLYiKMqAYcN9{3@%RT~Poaz0;rn>j1v@oqp+*$@<HG&^|fC
z0?^cyyaNJ9!cv=Qs?4uvXJ-gRNZ#%5)Ns3cvnlcxHb#l&rly$jf)hFD@W67~14bg{
z&h2m<$XSA#hAAenW8Q7EyYaQA=D{ca%K+TKAdo?B(d&u_zFX)Vflb(&B>MzW&E%Wc
zV_cl8VM;m)stDum1Rf<(VaLg8QQVu5O9|1x?<ExyxQ}5Gey-&egsSx7taod-3wk-6
z;6i5kccv+b0Mg{nLH4DXz>Q7-HRun3Hb;;_Y}VY;(kTdL@MxqUMCNSz^86IkuAgfU
z1Uz}-A(!=P&MgJG284z<KXN@z{~2zxos%liJ8$*AF+C$Q(A>OSwUjO6^y(%iCS=z_
zFze+59-ifqO>|wws=dR*=I8nz`@+E#4~0Beay=3KLFpYPGE)BT&A}CcRu(`WO@q!?
zgR``B03Ho0jo${8E*cov*kYk96{f>->9gjbnSr4$TxwN@rdtC6Sm||f`~{jf;HWch
zy;b(*OXCsfzg~_OL(8k1SgKRll~DJKpOpz5acsI`iM);s)>_KKLn!sa7A_?9L<Tjo
zva(Jf;EIk0R^PX(*b~MKkmACY^uDB|1VK2o2bpsa80)2BjEYU_zSuPen}VVA6Gg>W
z{SA=Vp?|bib_~vIVj*W4kYqvgQ^6mfLTnPGHp)-S%bPa1t&Vq6I6W7;mLP!DQK3s1
zP@RK0N)VQ3y**2jtq>1!7p*Wc40->)w3y*U7bQ!K5DQLsl;M{kKRh_#_4oH5|NKr-
zMy9C4pY`4*<^NWh7S}@!HA``6=X6~9TAD6Tx1!>XynS;ky@o~W<^G7H^Cxc0@|L67
z+iexa9PIq}Dt=(pvUhnOnOj@y+Oetsn?;$U=t@&P^pt}{=TYX61xfUyP-$g#if}WS
ztSghL+mNW`$t9U$k6@0jeEO82=^B}jnO8T57;572J*u5qN{LlW<eiJv*9>e;>QEQJ
zj>&>v>XC#*KW+W3si`SjTU+87MJdT!Q6kykYM9#wWYs`WcAP@O$nfxRR~MEgZlj)_
zq;51QAcUw*KuVZu!0_Y^sDKHH@zPAW;{QHuH2nMv8<TPNOVsAwu4(i64;k3wQM0zw
zy*WaXlAh$UM=SVHMicnGVx1U|8Q?1Yq&_@kQ90kVlKZ*9FwZGZ7}xW7;VGENbm}i~
zqEO(A58;HE3@HgHTGYXso^?vF;&*b9E!RHKEdYb?Oin{X^6eZZ^H{QMjWT&9;IC2N
z(|y(X2w4UW1+Gm~07ZPgKO+Dx5*X>InQ%BJ@YL6yZn(ioNFD6f=J@7K0}iojeX5L)
zGkR9l_FQX_6~W!-4$bTKy}~1<ru|{hq2(V{FMn>ErA|fl1FpwEPUJ=1?$gu5DZW};
zDT_RF9Dl`eHlnDAtJf|}ZcNr7(;GBU&o*i{>yH=v{k({ga=?r86vE+L5R<}}4F!iA
zn8;v^r<io&kjQ&2@4Zx~UvV(*(SSTVM1gLPmdq&$^+RN<Rp@8r3rI-t<hou5Sw>CF
zzrTIa=QPZXH3^`4ho7*+q!cu^sAvJt>peXn)LFH+s`?KAL?LbJlaLD&H+O-4J-x8d
zuRCmKa#u$U9?wml{!Rp>RjEUz?m%je-O2W|+)_;i#H5U{GFA06)DKHyRnl90YD4jd
zo%Zu%Rji0dI}z0he@xZ0U^bH;6L*Io+SJB|{i?ATNJ{huPagRuGb2Io3GNu(p=)wk
zT+GbRJg}^i)vGr6|Jw_&v|RQ^cw3eKy``!vEi5g8k?+;oX!?efy?r!vH3pm^3$b+L
zuGSNPxPGx5JP5!6nglr-Hq%N59`kM^PA49?Q_1x_kE`r96%ch7AAt|~_3J})D|h1m
z)cBA-llks3c&yJj+(DSKS+7qw3E{&KJeY1Xoh<C?fX4$?Kbi+-3YOzTo)>2}pueY$
zBuNn=$HVP&{nK|1DR%`6Hk4fbQ{LqlD^6;#EdoOLOL>>w;l_DpX4Hod2kE6S7^tkQ
z+}qh9RFC~bcyrt5npNNaVS>Ds`qx5aK$v4-=(iz|8#%aHwbQ4ZVOBguX@K&-NUH?$
zRVsA_y;QniBO;TNXXfXDuk5ctOhB-@Fnsp2P!J5Vt<|tyf@a`}aSZ7H!KLEt>S__1
z!nZkTXC1@@=Xdb?y64f40A)|&<n$D^p*s7F^`F+CAk>jFO%4iDz#Vo$UWm8|;GIO=
zgPy!z&6~O9oYq)(^!SeH>5-9<r5)3##WN^>EzHdmqoRDhN1?U3Ix|B=Mpkb<;_2Hm
zD`ph_o?JYW1ayda_dKaVg)#^fzpnlggy>m$d8p$mFOcexx>)(x_pnO)9_IZR{Qmt-
zXUuu9pP7kCGC#pP?zm5%f`<YmA@Y5r@QdECmiQ1(ZSAutEZ;1#VZ3Oma-YMA^4!L+
zwlpw$fw98-())VnTa8MfMS5?QDHc&<+Nr2c1JS(V;-DH@3+V-PEb>}IK>vQ~e=asW
z;KiH;Nu$xpe_G4{INaVwhXJ#A4@lbKcw7F(ude)(AxDkG@)Xp!UF|A2(@*}HV5-#G
zc3wqZDD$dAv8q&aC3K4l&|jk%Sy|}_eX#%i=waz}S+C;bmdMUB&l5{O&~0_atHE%{
z`)i;;BEv=sYOdw?w^N_%PQDcu?(Zzr%dSH;N-9Jx3oLz$>AFU+Co@$QsAQnhFw@ay
zAr)_r=xAw;|Czx>6NL^Ca)_yNBR<})X#^fuI;DFdALro7<0v)nEqeTT-GpnbD_)7_
zS-M<MFpwyBe9<$c!tdeZ*&0G(eELIPV;(4T`3xSV{O~!==M#hmvir@83r~w{+IQr&
zza8Cy)+e+E{QOa=UQ<^DSFfb$1qn#yV5H^d%IfH3XJu7w@R+9SL;zPmI{Kxxb@SDX
z!!;^CK1f<3;UjyRCJ`Q<<6KK2paaE72cg^Cmv%jC#^Y2`;Nd9flu#NG{cwFuAM(d|
z1~d2CT8O-ScDFngBS(Evb}*xj7e)pDZ4aY#ew3F`#6-6YumAehIqGihH=+8|S7QW9
z4*UBrb49e(hnlaW1$VeIP*MBIjoA%k_G?jCdMk-&rzU(A4|qg~nq@e24{w0O0KSH9
zz7V{rwY3+&CUxQLgIHHM!~zfd7eDda82qd9oJR81U9NeRe<h+`PW{p~PD=Wekaok#
z=}ztqbxJ%;dIjR3!`b!q_!RxOgiNgE8_M%Rn4GhU!7?#??d*iEh9;DES^RQpEmr9i
z!X$N5=NL2mq05n*yNp=ENEg6*##lM*>XE2|d}e$y#WD9WZ_ae{iAoSLF)%<gLVDhM
zY~UFwd(s(WmDlBu{Z&3#t4zYR;2LrW12fup809SWUeYljST8=rW}<`B_h`aqm0h<w
zSlxfylzf2FFWq#xBsCS+v^_5FA>@uV$qaM%^mJFh!6s;a*Vo*vO{!VX!x!xK(CVZA
z%a@mH3>w3e2*N4ly+N4<PEM_IBQP5e46d!+b-&r(o;xrI?ZMz3gNkk2ToEPc90R;k
zJo+}H%Fs2$oTR7)zNaqXN=<Tr0ZEF=p3}+uKU1nGUw?Wo-4VDUmMasNR44-?r!QX&
zlRm6a4xy^44q#&iS87;hTnPqTAuCQr7p1>#YD$r3Co4Ai)s_K};<Kz^j2$wX(ZRny
zek?D|2ok2v+QV?LMC;bMgH+%;?7<|^kPoHc{v$ht1I>yW$JHVbboIhG$u3DM5kh*P
zb48}}sCK(A%^0*ez9lr$ig!iav8pyUy;7*ii)doy`U!6+*lZFZu344)bZM`=t6h1R
zS1`wjqN3tZA0};saUC26G3}vQ+ttvU&O5XXc8T}_;*u3H%BF-*Ux(+{bX5v*d2n<I
zc7D+%eY4^xSQ+nR@DzgdP)RFkM>5fOzw;YLT8v-iIgT1fcL=?R2U&1-HrI=I798ZB
zIyH009A+NsGeg(Ya&p|NqVZuLzJ9&&-StyBr3jZyN?+r+hK2yx${Q(G-a$g-8r0Qy
z&E^m-gM-(-5LF<C-UC-EIJyTc>_>{uy-p__2(QC_A>{DqpXI3jIuEyUtA#R{^TGX8
z-c0m-XX`b<Y{YLy$+`PE)8kOg60@+eJw7A?yX*ryU=2@qbmRp;6<zUDCo9<CMtI-Q
zPT<a+6i6$2ha28Z|DI^!5z5KX(DUVxI}#NbWb_xb(6t726$eYp4ka|bHPGgZpdiuM
zYr%(|N4ZJ72ooE-L1nMhv>t-w!L;EH!LvY#_nPsu3`{uOXr`o1?+c*#DtcmZflv_#
z#j7e@e*&nJrF@!YOZ(c|lylY7IT(ij!Mn9N>Gped0)K8huZ2b2e=k<xTmOf+I2Om|
zrv*U=`HjF}cKxG_@e?=bAD7!R$g2QMms+jnY5`Gn-p!|vr(>u=Ar#nXHP?-bS_uGG
zDBib=i*G@L8|=n^h8QJ=t_2I>dFl?`XX$BGi5s3ezw01;tQL)KyA>wQh|PtoS{ON-
z^0<U9{7Td8u{u?|8+_YZ<#T@Dz8V{wVz1DHYwysu(F6KCJqt6f3^%7H;q{QmkS&(a
z_}rjUI3E+QSywSOS*4+o!eE`pqxQtfIc2nprppT_bX0*iSTU|i%i}yRwr3Y01Q@Qt
zcllmrwy@-367skojPb1~-C;SBh{Em%t}r$;{J!6lg=>T^&jz89{yxW9O~#dgE|lqz
zxBz<VaSQ8TmY@;NPV-~dcntdFQw1OukxNh#9#$IS%@xwpD#JqyX%rK5{;3mDjLzli
zXQsT#9{uivRZ{tqIvWNQ=6~nyY>>Q@s?0DjxS;VOIFJbj$~`SD`1S5jPaJGF+9WFS
zD-Vn;i;j*mG1iZEm%Mx^1BjtV&DQ&|<LwH~?O@RC35Bse%Y4>Lvur7wOl#isTvnEG
zcoOY?>Ghv-!z7`lGJ3hXX)!mf-=`y17)6LckQX-PnnzYC00KH%K7Mz9uTR$aDO6T*
zkrl+ZpO-w++9#LJYM5+9+^UI3&3$hmi*&G9wIC;uG?H0S2?@AiLxT}0t-LE9o-ujz
zp>g@B8#gH<+qsjiLK$OQte!F`X!4<aGI3$Ot3}rtLZthwwLE&0JxY28S$Ym3w(h;a
zj#J+l7&%8}me8?yY1%-_+5;;U{!*FzadjhrKPK}ZaUvd%YIME-holZ=@*kbr$ld~?
z$hH#i32U<-u}Z7PLqLHLnVB=gh5>56|69lW=j(uG<ZDXMQepTz-!z|?rN?RZLrZ7N
ze?%#9*4f@3-B|{l{g*EaOu3BzUwY<<#oVRu3e6c2jzZWNlh>(k)s&Umffxo3EUPL>
zIu&g3vj?0JGra=?LJ+xo`voTE12Zw?xpRl>!Gc`Yz>gn5QeYA|>6mXfMj7T?;pbp`
z@*)KPeN1{rtn&v=(G%-_OWLe)13kUEjEw7pl*3O(xk@}{`7mGP3&qF7M_%!R{vrfV
zfUCBS6-3n#1Ims_est^ZkY?8(Hq;7c*WkNfxu3tN*<!#>uBLtdQu2jA;?zOT2~pj)
zppC%BNU!eh>7f%5X$MnXU!OAaelbh{gcm5C`QNO8NunlI0Eb^$s0ghk>yp1NX(EH$
zLfxIgb)yJz+JWQSyzm(268zRa>W7BR&6P|qON4BZ60AL1QBkkKY;xEQ8{XE}Z^Hhf
zprF8^m)15}YPtly!v84<Ga~*+iC_jN?qe9(LUG8;!xNDp;JEU_`KUcADhk9%I@;O@
zqW)^feBj8;jwZHp?E6VwQ;tT>Fp_w^dlG@_$CeXH<TM`fzYPssej>+#%l+U=fmmW*
zmz_A02Xw71bl{PYCZwSMtW^T3UoH*4Dqsx=3jA8^xcW-P-BnjgYVqPc0NOL}{y1;y
zb+v>|WWHh3`-T)Y{Qmt0jD9ziKoFU$gJNe4eMME((o_K(OJ|iS`w}(*eFx=<^rM_)
z)N95om`O~&FsT617G)kzaiLL&DJ62)D=gNJ^R63uzm0HYa2wC18_(4^8H0Eo2GeA!
z6}S~Y;0wYg8PHG2g2XdDy<}n;Sy@4QIx$kDLvdqL5atWmjnM0B3(hl!V&57VZhLzQ
z($abe4IE0`Wahe$ea(w1XM-|6`&nXIij-0B^R%n7T~Q{OzC451ANX8c{2|3l4+0_a
zaeqVOI@N(yL!s-spBR+}CY7KdTD=@SeU6+`5_0stvB8EQl52#)*1_7CBx%dL;Mk|T
zqodBlYWDW_RYLO0=XkMtdrrcSL$PlM?TEIH#Bwt@2$`zm4)gtb1*=jfe7t<yZ7FF)
zNaz=sW=`Ab^}&xt8_Z5g*c_WL<8|xS8#v}QleC`h1X$ipfdV_<$s?y<7W`-B<=l7F
zr%jlG1>(@Ro%hP`CBYcf!T1CNc2$CdcVJ$)n(L&yvWbeq*=f}F;o=B<<V#bv0p30n
zF3w*Q;^V1MNQntGv@tL-@s2+n!XQTOB}zbRQBlv~hOotCbu>3BkJNBJKR*Ua1K3tk
zhQ-Y{Z|f>CBt2##)$%L01D!m#VS~h#NkRRR_4!w4INWZ&fI`C7HYg@Wvew7d)fIq$
zhTj}Y|G;z?oV?H0a~N-+eVGRC2k1m1IKTu1rs9;UnZ@pjmX;P?-k;tpY3cUT6nD^9
zAx!F|5Z4F?Bp&(PV7<T)f+Uv{=@3q?JmrclXy7o^xVgIi{gmU#11y^P@^GVOR~Z#V
zG>KfM1q>@4iU()AN}mBk0xFnb2t;`T^>J1$rVsR*K{L#zU5YQ=(-v9l=2Y*v`hE|h
zQ%1%s_swx`?vG?pr@f@P<qOxYIFLYZr=Gky`@{Ef?L}4J7^DLtGi~3jlm7ka6A64y
zmm~Fhow`^QB>(LNbVb3?1tLUTM0o`TCt~$I6}9gxF_8t&ZkQ0kamf<~3m*jA$t%lS
zGfMD0i_%M{CET;Kj|Po0vIy~BVI3x4S$#@5w8WSJ>Rj;^D3-NrT{Ygkp}T<54Y|tQ
z8_ZFtS98A=FtN+;Ls6uf=331h3)0}0J=k2te)J6v>MDCwa)0~t*|YzW#~0MdDGzN2
z;N9@pOx170w{?ksV!uAV4@0S%YS*t{zxKv$zW`E#RI-3$$3)G-Oyi7Nj>tMRs`cwH
z;uLr~aYR{eVXprA<`Qx^<#st2F8ZUGyH10-{sv}Uls_cI_cws}T*7u!Y1*@ffrDdo
zs?O5FViZiUoi8!U+)tLzK-_FpSnLXN8KSF0Mqss%Y6~oacoIB{m$jjAv2>sMrZna8
z1;O&38`1g*d{@FoO)_Wy>>e-ef}W%PV*j4!^W*K-W`@4j=4OwrAD_Uj^0lUhUAxp_
zXPyyA_pL0@r*T=Y7y-4sko}@Pm_Axz(4`T343AjHLikDyY|9o@^z>+raG5`AA+xDF
zSz(458lV>|ltj<F;veLI*EKhbaej)uPHU^z>tb+t_&Cw#0?>WM&@qiUSw)_^$dgxv
z^-IztyGYco?n^t0XeJ`8{&6rmLSlriqhs?RNXFAaY`34AgIagINJb3y)Klo24Gs=+
zE`Y=E1{&Js!Gsm;P~gmmArH(6t@Jy<Gz>ulgAf6U1=c}Nz$LVXQ%F;?<TFYP9`A}K
z3La*Rm6^|2B2B~&f53{E4Sl_<(hsKG3YYJc9kUsB64mM5*DJ>IwuRje{!!7scdr|?
zM#Ok{kT4$xdIJ)&PIY!aUtgK)kjs11#@2Ql3IYgfWv@T`=wMD<fMYcE!zZAey<vR3
zqe<dmIcFEn(Km}-+M$mtyLx-s^K(Iw|9e>9OV<NX7#cJ%aKpR$IVBtuFFsQtbGIF`
z8SH+4b4hW(IKDIBocVazcmbvce*ded>yD>-|Nq@9vWl|ziVzvuqK?Q6ha*zPF_InG
zWFOh1>_X=l9V06vu2E)Dw{VP>EfGRwcYd#P-0$z79v(f8kMntd-k;a|HJ&5JFJy1o
zACmK+%^+MD@y}uvh$!k&l(hxXC6xMqJ=@*%fZ)mY3+4e380>+$4i=Rr>BHmc!0Oiy
z4pz;${+wjx#7z2YsK%-9hI{T5rBi^0og3$k8TNhT=kDT&72mC5Tp6pel25!;EY2|P
z1*07bstcGdizdM-AZ&uc5`c5wzyx#BS+k3Nd8pq()&Ne|2<5x9X%jFb0m?5nXn1`5
zPY33<^Y-GfYuOsft3<}GtE#=SOL{SNPJxA+JNhcgdlU9UR!>)Nud1>#`5}~b-l2AK
zb1Oo9%gKIyRGxFYXRS3WgN8>!Q=<frKEd)GdyQB&$Ek4~i9}LI12YgDLVSGOcBd1<
zQj(L!{VTJxv+G@nPlG-cYJ<e!tJPH@FmeKh?*!<Wz(}BYcW;6SVNEKL<NOJhZs^8-
zo0}`OUWBG7G-r`7H-7!P(YDVv93U}Aic%h5d%A#^?bmem<JcHIpE_u(&Vz+|#nngQ
zU`+A8fcO!*E6_?3g~TKlZ}?z6+~5|FYHj)5P^(EZ!E7$`EP6%WHBS#Zqu+|)ZlSTl
zqfdJXnt|(}Zg5KLFNvb<nogLL7@wB#uY?gAv}~<5*-oAW-9>ZMly%qvUw*!|O<3!l
z{q40m1+dzj<qNy{xS*i%);muC@Pj8Fez6!s*RF9T@BBQ8Ds^`An9vTex`C|@NPJ)w
ze5tarvC6e<-Z*2hv-JGD%;?sH)Su~u_c`R)x2VJ&23){fj*h_FrgPz5wVL5ll$RHi
zzlU}R|8Y4g_no5!H>>3hXU1I73_VFHAz>Ie13ZsZMfAxkHlo^zT`wby;@b1CTM7V0
zn}dS`Hk^uK!Q;nElau_%K`hnyTo#|&uG2&jEe1!}yZi+N!S3ed<SdLctK+w~11c;e
zL-S6PSWu0PG9YI2#|q|k=8m1LDgKOZS_=#7;tE=t8BqscdrH2m56rEsJ5G`4_by&i
zJ&9!4iZU$*2sGBlLQpl@xrm=vR6GyLyiKiY5`F?Dy4y*)s`)=xepNraf#k3F@Y{w|
zXM8#vJvbb-=>O>DDo{mz#ZG1RL4~>{w+$E<Fu0opQ;(Xirn?tUFfj042&mpY>iAXi
z!`H7?LdP>dGq=&3o12rd9k?Kb%2Dl_*JESU$`QUDF~=vQ+8jehO#-VcXwhD2)zYu6
z2=o%v3FWsr301jx#u34$3qK&{LvPX^8k#97TQG~C2$(5w+?2Ppzl!v=$E4!dY~i1_
z@~^EHWz+)VPjs?##2Txm!EH3-P2vtySX9JM^ZzGoUPtRcgcWzDu{EiBF3O{QQCcbJ
zxh}eX6XE(n(`Pd@R!)>MKHkGSsDe>p^^#5!6NLbB28tcj#PF`QgkwjfT`VS0YdugZ
zo(j&#k+Cs$<cDgDra2`u5!7tl_hVOAN;pqD#YJjh*<z@)?!_xKo~6HY@3xDCcor4L
zngV@wLspL*NECIC4JnoNV3m34=&lyUisBKehb47}DxJa+15c6Qu~)y)0NK17w^^^N
zqi=5W&{9hK2Qzgs1E%<H8QWn?9HVpp+n_)+ss_#PCap&${dN9S%H7ltjU;Z~+%b&`
z(NLKwN!8M}mn2*c87U;L$-<sZ#g(nc$699hC{!`7*)Q7?a?)#~uU}UWHZBq7W@c(s
z7fv>qxz$8|W`QHejFv$_=W^%x>As(*O&62Qw{G~U@0YveV(_R>o(kl<(OmSQ1!M33
z`g)ckL-vpDWsCGWuf@C9FSbgOPcC^XatAE7H#&Oufp5nmoo6DZNYyQ8Ox^6W_#yiZ
z+2phA$Sllu_wLYRZY}75E@tN8uIS{X_HLoXHy<VC=Jr)P)?PS7<Ox|(U`5;164EJP
z&><!k58KhI&mTl-R07v$F?2{c$$(Fo+CRtc?Cksz%p6%ITVSWMv9gXd*SCK-&aj~y
zMNq3tON*$l$0RFqkx@{Bag~ZC=8hT*+n>9NjQ4gP!wU*WJGf!pgTx=Sf`HNn^Zc7P
zZ>};|k>Fm;X(03D_T>ey5s-eAy{0vRB>L4nMhCTc>yX-adO)5rzE{RTWoaa||6kx_
zgzYUif>s1ftzbL^FENZX+u0Z6O@yv=15p-6G0V%#kfi=T*qUhH7}O`hHBbELFwjXs
zt^DtjJ`B-iOHU6n^MF1Cyl{lDw1fn`@+#1gNX(8imnBfF{r~>kV;X%0GPt+i+pAM>
zl-}DI&;}j~n~Lob{#Wn9$-%c49$WFP_6OQi;G$Fj0}_xW0M<`dX67{)W(hMxnWmc_
z0F9iQlJNnz+4es{v#-;d-}XyiBA>h{W!Pdop8M5y-SJ@F^)H-rph1A&j*EY22W+)-
zxJgJiJ!d<CE10RucI{AN1490(z9t6jIcLV9Cm{0y3Q!FII_WD$u)GEQrj{IrYM>(d
zEI;Y{!Dl1uC_B8PG6@5>0W|>+5h{QHaI;KIq(?g5K6=#`6iVLVysSKo-W!m&g(eE=
zm@jMT(e+@L4g=x}VQ}+62OiPqOxMX_gpU$vFejeItbZA}k}#o4&Zy?nd8zA*5VJ3r
z+%P7kZ{JJ3bN~}(e;+qLIJL#|#Vk*8YCf0Ec>|<!m@X#D)qc4gb}OofYT`v&8W!f{
zO--dfip)^RK`Dn6i>R)Uiv{jN6AU4Mg#zVZ&RZowA$+VYhQtT9B98OPbtx$+iD^hU
zYU}DyNu&9@*)&`%Zkc+H)`rP~Vq(LCgFr!#<~l<9dTGf%&+wDgs%OjbbjHvLYG@dN
z{w=p3alKy(fk40pYMwyjG(Jdh_6k<>CuN+}?5^gqbL~=ylVrlUx)p!9Kwe0nA`WVO
zwd_onD14`qiV8c&!F3b>FP;G`{N_2fVX7qilNPBT&}#kn;y9&AFD00<*F5v)B1?@7
zcH8`ozJ7lI4iC7i;9#!JG_a4<Mu;dYUk?sk?Y4vbU)Y9}570@qglkJaFZ7c5o33M8
z&e~3-=m88CVB~9-LS}_(7HRE3Um)ukOwhh9)*}+ZnKibt(ZA_TLYwgtobVDkGza_p
zz;lkTe%eY&z6|>>{LL}F8YtN3Ml{I5v+^PZHnYva`|dBG>dTjampwG~;xw>~%?Jqs
z`@@`^9YAq-QwXp|P@=tXU3vgx6h_}L6aUrp7kOlxQNB+LPXi4Y9)nvFYGyo6AiUJN
z{f%j7uHg>o2JnS$|HYy~pc(E3y$j%NkuT+3t(3$9ly`Dy{31<W*1k<qMwg}_<8-h0
z{tn876(5@DRd{iQSOu8?KA2FJhG)d3!9ZpCm)%JV#u5qFza{IhB9a&y%ofV$smQNU
zQJ&!_W2Q=?5=57$!9RIKPsL9&X`8Vz>9KVD?-q(HsgR{E-a=D(3~?@5*1r*?hGT57
z3{v>J>mw=JXq9VYeR?q}8kjrZ-sZ3y`$|8Auy!f7`l&sg<+X4vjWXXaW3evz<6Elm
zi}H!&U-VZU-R#*ACS@Q{H?pIiP%hYMti6chKvBa9ZtQ_!On4btt%N|GnVRRIh!UZs
zY#F6QUhNFM-)dx2Pf5B^3i(1_y?;gNWdXA*4`9N>Kee!Qn+Y_<uGIa@C@Q!_u7Z2B
z=foetmEcE?QUCyE6S#MJmDo&0oD~A`3hEGGe~QHV49&`Xb^WSYBsKOEwf6-7H|Z8J
zhqu_9hI*la?=uHcu?KG)SdK^Y=PAVtPJydixxQzrMKmPpsS0*ouR;HNa`FVoymxE^
zKnk)E>!x*cEW@@1h##0KDyD!y-%(1+Mwhw9fVGsle|>=f232H>|Ihp<R}6M_WfjfE
zV)3`o?L(gK5vsDt<1^L<D4L)zUYge<jI+*eL`FqHlLh$?6U%*r*!9VWM(S~>>nmLr
zns#;_P(Fdt87QxNz>E;w^k92`8XJSE^&mk?eW)$J`BH{AAQZq_Ecg6;)Ojbv<%xFB
z*Qo-}o!WnQv(eSP5BM>%Oe$~zw-m{FcA=32!p0fx(O~aWX>GRco#RidKK<?QfXnS|
z&BmYFsGrfHp9mw~TQ=o)M5m36WNJuy39wUeA2~wzSXUE)LLZq!oECL;b=~}PQNP2|
zW4vVtPKQOIHResV(<*gLphsO-`~3N3ffbOZg0=FwdzVYr;SPjv=t3DQgYhFGsRs1(
zvX?+JD~!0O51KW<A&w6$Riith$aVAd1U29Dki}n00zGM`i+fAI-Wmh~qC}3>Yx~Z&
zHs8C0srx^j-e#|WBKgXS!kx+R&yAj8!~+IEtNnmfL6rU5{5(_}luXb`Z*XP%J~<f<
zq?}pN#8>mMi$9Vo%rdT3Nl3LhnTg&w$J&YtZs*QQIkUa7+4Q~(3qj@xO?g3Rk6oNc
zJ7t}_U9}MwPr|0tZQ0@UK8z+8n$&zY#DfT_+O@x%UPGMdUmDbk67D5}IWKtHX+3rw
zZ)wW>IPe1a$Cj46u<nd>GQgFECSRqAqb!Uu;tL_0$N@8M;G^&TZ2vK7OZ@i8b4qxD
zH%?6K4Uohv!LDw|$Ve;yF)+SBrb9l{``cTNkaRq4Sqis`kEq@g=!r0PD_W)Z&kY7J
zpBV@Mw>4W^{!d-mVx}VPs~rZ2Bo+nUeHU9dw{+mX#o|kBQx0FSGmpFg(}ez#5GRgk
zS4|d`XIu=Oo*S#NPfL)HJbT?9A(Gw~W!WsQHA9`mqZ$)>u-OqF?gyeQ2T<+nTc3mO
zm7YOE=s`2UNvA%05<l0wns1teOXQyWyR%g-EgoNqs~>^g;rf;r{N|>n(C!CW$p)Y6
zoP}CZBh7(<_1PB!WvNz`Y+oKhBxP(|OpS}9?{s$Nh>R^OsH=ik<R|ttY)8&c@^);S
ziKX=wFAQzN%Sk)-G0zHXYiloSX-Il}dEo_ns&>UA<<>xegTpKU?F5B{+V;I83hjp)
z$Af~WyWYfxEt=ZNe`+{>2aGfGfxxSOU<Q=jQe13MNn@kpI<_a0o97YC#c!VmWQW6o
zFao8pu;jk5#C-ld)4t||j10+Gyb4;Xvn@u=(6=Gcx>9`_>K*$RY)od6bu-zyi|)N?
z=}gr1=5)xm;JFNQW?D>AQWBnddF%0|=THoQLPK=5qJ7T>l#*>*<Np9LxjA4Bx2yMU
zUWo6{j@RvU?vqc<I*UVH0I=lUbhFSi8;=*g;P;&oCnMt-pvPI%dh$^Y(6lKps;NCB
z(wsEoTe2DJudYI;JPhR<HYW#@cax-GQpTfg##@1*#Zrl}wZZ`bjC*iZ1hBA1)d&7u
ztr?qp^>-Eq9n089K!gBE7+tjSaN>iyKbD=3Pf86&b>X7!?)}g;WDBVv?vDOb_QsfZ
zA1ZTWL!iv3UHjI7(axJlZ_yVJ64Y(i14;svjeQPUM4B}R7TjXE8r>e-Z`mc+v6&5T
znO0iT1AIw(fMveD1Dod}h2OK8?QGAa+^6S|wd;z71_buWnT=PUK5^>0K~v~PgWJyD
zgbmm*HUZ`ka#%==b5ysOT9~=HE80X%OAM^r_OsBPR}3C2{Z;O@@m&UaQeAx<wC3em
z<wBIkdt(U%0(is7OG>(Lt>g_J<x%k&YYkQu#1$0qu@>dl__|&U5e7O<xA@M^4y{W?
z(LIx0v)b)2AuYobF1w=nH*y}CuSdHGnq=kWMG@&RqH^*XIk~L9&q^jHv?<|kTzW`%
z<6_%8P{DW&H#Q7v4FDw}37NIEwNZQH`aV$S#wR9fKEEB(8FLY!0_#)v`HpjM6SzEE
zhD(x&Fh-O!q&-ee4U6C#>(u_I`P19CAt2nPNeO#n`LkzxTK{uE)GrSi%?AfHSTwHq
zOIQW@PIXl69~^)w?rLGmH%No^<+BP4XD<F(+Xeq#SWI!emuX(9Nyuj8^|gCayZ{vG
z?dh30N#vTFXRFROC{kVUKC+}*c0j$y{99tlYItn|8?7pv#_J^|QWl*%;gx&)ad2tP
zeP-yG9kvphRh$i;$o!XggWlL0%wwRMz|{h;0qK63Gh}nv{HdX2b7|B@ObsXGr~x!A
z%EQ`E)Kd?e3~G6bKPO;F2^lWWW&)S*{$wf`$~Y8{w_U*+>*NjHzO)I4Atb8;c#l|e
zpFyngS8;T-gQB7n)|??hSM`KKB5>^8xB|M~r*~J;3J&Jg9kb8sXy4z?;z$`JVuD&8
zw4opzZ;+30!fJBi53$0zTv<m@1)BrzQ9-~oP5Q#n&>EM4A;$93qE;w`;~g+MMRI|M
za`bNbHZ{oI^yO|rQVClx3_6QYC4f#hbmR*_I>WN5(xYy+*<^^HosCH|CCoq7&wN3a
z%8hG#f|^LfqAn7vbBrnleNi^VU^5I29SmB?CxSZ2+at8M)B$6BPj*uV8e)7Qs}W62
z%C)9;cDS48Muk}gX$1|yz6tPFw%QO+D}5?UHe!Y+8hY3_BML$-*CD+Fw{sXumYP?c
z0mVtw%>J;;f&cx*bju3HvI{7ogI=NI<<_S(QB=cW0fXTiL^~#VTnP!H%DvL9nPGfG
zH94OGD_0$`HVvn$h>{Y!t`sEFNQw6Bjo?J)z*lwIQBf4$p!nI<58Y9aLUNr|<Dr<c
z88>q-Fu(fe$L0F+b4NASM)Pp9$(J?fOo(B~dj?lYF^`3GUSMPVxm&F+<JXw$UxDxu
zC?@@c*Hv9z9k7Uc#iwc*jkMO3Ghau@=FsZ{BZMj+)H`mi&%VJk#h;Qf(%-k|FESZU
zyM*r`2E>-(&+SwE%ael_Cq+|@cS}ktlpO>Dy_1u+GscHLT4VY2AZWv2cl|-zV|#lW
zj@iVz+FEF6y1)<xCgzZg5sVmF=%Z2cW2<)dOiN1@KMcuZH^H(;eLqnpy2#Pi{~&fy
zkl5ksY#g&c;8kpIbhGw9OCZ;PH*>cHB<cz9M6yA9&obk}pAqZ&vyCO@3lu>j5m!!-
zP-m|sBgmh<Ks9F=QRrf7`fzFKG3-!mC!!&f#%JNQ_SWyf7e>P9v+w%)dRY74MIBxm
zdJ;e>Ie-2k=&>cOaZ)t5phg5YhEYukPaxm{G|9V)m&^ziM0)U}ST>3t=xb=yqRvRT
zPS*kt{_|)}DXnA{C)a;{jK;&^kaxyJX=1?5({<I-P>9E+7}Zuw_sTRH+^SHIAUGMk
z`D^&-bk#xMcN6-Gwnzba_Az{VUkkK6)^c#*C}Wy=j67uVLFw@mUVBe_?TV{=5tx-h
z6E!EdEMU8Ob!}OVPb_er2K!mkCO7@XW=LFG*a?>$t#lsd97ay@kmta;hndRA2y0BY
z#o_lKOf!VJ0p8S6gF9pf;82rOGfEa7CkXj8{YieGv=_aPX}r2Lc1L&Z{S%8OE5NCd
zYEP9sLyim`z`C%q>h(?tQ(*A{?#6}pmODQQ*_9gACl<vZcD*?$$=_BSyK%{4o%YhO
z=`echay`?P@_d?di!&0N&P_9==*cZIpcSRef@jnt{F5Z6Y_eZZWFMAu6z&vJnRwPV
zIEQ%k^1r?UXQ7C2b86acsZ*ItdZ_*ljYgfGL%9G=)Wg1ZnO46~Ou5PEirI9_+{3nw
zV5_K#W1YB`2J-g~ZqeT7slBX2AX)!579THuO`yW=Lb>r?vs5y<YKs-0LOzvMVWp{W
zDMNBeG^%nW`PHQi<R7{I-?J_|YUOEQ)ASUlDSr0jW#>};iVah8fiE~XP!M6PFJqj=
ztLa;D+~tku+z5@9)*yeB;Ngn-v9vK@iwJtQ*Xt3>PDzWQ9cRu%hDBOT-h+!EC{83w
jsB@*k4^*T)o#Ke(ovq|4g=gXLKSy-63^gk?Y$N{<-&^V+

diff --git a/screenshot-10-after-exclude-notes.png b/screenshot-10-after-exclude-notes.png
deleted file mode 100644
index 7d944fd02a345a45c44a66d07e8aa9ca5a958503..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 109855
zcmeEu^;cD0+pbD?cO%lFlyrA@Bi$g4G}7HA-Q6Ia(%mJYbazQ}rqA=e?>EjLaDF>`
z;25%zz1Es>-&ajT739Q`;PK&Ky?TWtDIuct>J?-)_+tb62D~%8NoVou73wQV5kVE#
z^rH+Y9n3M3{@@er*RT5oFh$X-2@qPr%d2AH1iZSiTe%elt<efvUnYL7xxeJCpS|<`
zJ>hjy_mLaCS{=D3c<Sng6%`dDNG~Y(_&RoW3L{8i{r-Mk(1!izudsfD@iC+n|Gp2t
z$@~A`4CYbSl~eF#_K8(<^d}^w#KFJ)cX&d0BzRK$0wAHFpprN*^bJfqCY4ALpw>Oq
zMgM5SueX#-%()&;+rvxANT;De3ZjB95n?iSc1BiKR%T{eF0LR}vUpemEG!c?HdO`&
zhIa*5k*cG0fhj3M(g>RGVB1gW+B!;54YE-ydx$+1CaDMEx5E+O%$D$F7)8XzgM)()
z4-T0BnL#j9rUEqqK|xT^&{h@}2L}hmrKQFtL-EQ2H6o%pcqHq`$9Y9X{@s$&HCyN1
zqZ&B{8RhOlXAd5Mu)5f#LqcpDJ>S2Xq0UU|E84@S;9Nf39NVt8*!=JdtSArT;9kgJ
zvvN^U!F&kk@w`=#pCHxicsx0=&F{gX*9bXNE|M!s6_St`EK{$7c=JXB-_D^_-%LGe
zD2-k!>EAUbfWXJW0m<Ns5$}0_-*V<6f#jfoOpTNPCk4HYfr%Mcx)2N-l9Y_V0uh+R
zSSy7}OHlWo=m#<4g4$Qo(PSnATYGwCLN2E!pO@DkZGV+37r87{>UMhG)!MD+D&~pR
zbt2ObPvs3%Bd+hb6gX_t4nz@|iCnD2bp1P34wx(BVG$9`?CeTv<4bVd4vf@z2`HXK
z399fHK{%ATiUzf;I9l#Qw1VcJxa5iyJRu=-<k~_t+bSxvAvZCZ>pKUcNl=J+dV71f
z&NszdU5<4+JWE<1=*-M^Gq}H0Xx1e?>B3`DziO@pcPM83`f_K?cBN@QlHeoWzY`xt
z&dA94{{3Q?Kr~v3uab~vPH$YeKw!!@6$FO%K|R#|fgij^2TSEHiA|KMM#~(1*YsFr
zxr2{ADPcmMuGy$$Mt&}TPI%GK&<H+Oeq>?UCJPG-OZ#XG2IqGYgSOk?)jo?<68-V|
z`c#4Rf>0p*LWQ<ZPf+A^sOQtY^XRu4WMnzfaILpd$;mh<Uz~aUk*ai>nSGw$P!+)!
zNGGT8xJki7t+qIqy@47nl1ahG#7r=T)CiG)$D`J1GT$B7?aj#_B)bU@T<;OrkIv%r
z>ShjjUTMBe&p6c5z%1AMy?roO#$3Ydb^l#1!yO7itKMe$*Vve>`&@_D16qi`&1~^`
z7#3ZD2SVJ4KOzStPI6FG)b{TVuYuav3jWlQp%_#$-`;1UiQIIJ9Qv1)Svf$=o)0)2
zFI}rweR|qPJNmnOTp$=~Vq)GiFv!-{O}~+XGYLeOo<7a(mWfM1V0a71e1}FfoZExx
z2a!^XJTo1sz7X~?OhrL06eZj=_I&iT!f#ixPeHX%owmd9+7)WsRhB5J@^x1<G4K4;
zREc6<kW+R}j=}bDBB^t>rIWKWSj*t%m)bq#ZETJkY?jlxzjz-l+SAg~@_O6|Y^|-W
zvD++pKiyY|hGSC?zZH*~t<>FperoOS?_XbEU$i@%KUOfuqEi#_qf@UGA|JAd`}XbI
zP&^e9KCA0|`A-DwQF%gxy-5R)KPP2c^-^i<6%(1fFhAhb>+CnhqN0#R!!X@mo_QUX
zD|HEu{KWa}*7V~kBf%zfx!5W(9n&J@_x`R{p~XXE+-fv1zCHYNc@a~*zf!N${v_S%
zXKgpeS3B`wL_A9yo7EiQhlf8T0@?Ssx1*_SEZaO1yDa47wO$X%i!Q%A+WW$_>t0fI
z@}N(Dclw-fY)@qIuTRrb<_P-VgBShb`StZ`hgYzZM7z85@zD|bKtPb&*_yA@V6}m8
z-LcQf&GE9A*VC;7SQlX2&<A4qTpS%Q!Mh*a?Cxr{X9~y88V|R&oQ{{U_EmA1KH<OD
zUu(4eeLE3^L_o~v8S}S1x?!!*lfQj?ePs@6QEpBSF)l79Nmb(QkO1xImPF1Z^VbzE
z?+@$rYZ=`=?Na=Pm?~id>Q?AhhJ;l`L?n1`c|I0b4D+?pL6=bn;C?ujfXbWX(2l=d
zQ-IPv{(hi!)!ONL-u)v-XQPKvw}n+?Hl9jeq(UQKVm*U9P;7l`=tZSe#bl#bQn%Gb
zkmU=gd{ug_S)7~jNJA8iBs%qAj=`uz+wL77d!28%y?a+68Bdu+YXZZYl1?8Q5pghE
zvbi&+4OYZTf%Go3$*@EfFW6oQxa8%!tzx5Mo!(FUUiXvVEieMQDAG9{#iEH<Ya-ga
zw$r$rhxexPzGZI&sZ{DXPv;LcetyRzxO;kv;yc^v!%zR^^jEt<j~J-3!G;0Q#2*Ze
z&o}z2^g0VGD}(Bfmz=*w+02y|`1=dPyLG+3NH8)o^0+y2d$`HCK3ouFseVaa$$=(=
z3PvV+KKjX$V#mw-G?gcgOw1!8yg6aqnv;{mq}Q=E!p_d_?(Tq#cD^})a=ScDR!qe0
zVl7YT*c}k6@s5bue6q`$4wi(^v&~|LvcuZaGR%tGK0Qx7I&^@~`;mi^iczPji+i1z
z*Zt~np~@3ZUKC*hqVe-8v|1Z3#;W9Bd@<Ow=8cAdQC2F&v?fPKO_!kIfJ}yE8ketN
zjwkS0SS+vSXYfPVuPJ&7{%2uKk1Np+JYw%(&8dDXgjZHIHW)t7aX%-!KPPKBpDN`*
z#IC|6N!zKZvfG+GP*RuQsK?@YPfxFdxWC$pqxY2zBK#Hh7^siumnW+p)EsPVbK>aP
z6)9)t8(Gly;n-u%8h(wh!~<;;DI{Q~oqpE7(;#NEj2OLZ`f^I#0XEI3Pi`X06fQdY
z#>q)02hAP~Wo$i<dNnl~3HfVYa-KJ}y#;UMSw9{hAA>bdJ9KA+iGZ9`COAY4BYES^
z&)_C--xGusY{OwTZtaFglajAhUrHZb=kX`g{TiP_&7buBd;No13nDJ30Aw5py-si4
zvLu$5m9`Ys37Jg3V|;XUT8!J1jNl0T(H#lB0`Vw9S?2NcO`jc0%jE{7cnnaf>#C~-
zWCK`eN(HNZUc4)zv9PcXXYEg>@?bpm#Q@mYQg!u@X++11Wmix$Y?cf*YkHqose{8$
zpB$%?V}jVM`P%**{`mtuSrEO5-s{o{aY-^Y4mUVW5j9z<0scrO#2K@sz|D~~SfTfy
zVhf&NS=rd66RO>wAKf-oc~Ez9aFvP`$Wpe!Hcp^5c{p1arUxxq-2D=TgfC=d`Z=Pq
zQqI~MQ5p@`9|HPHuibrYJfl@)8L7?v8vb`60uHwD?ZrrPl~f|_yLi~>l}cTY6gz5R
zD=P!UqR`Ni)YQ}~v~>aR=f}|5xD^EX_j5d5;!E{bALGB9Xx?ON)mv7>7@#x%Xd8B;
zB)gi+7W5bGgvDXdIh-z#7IbfJX}LH<z+sFc;WwDd4LoA<<BP?hk{i^pghAe_j*V0;
zRSBYfxY$NWV$yBF#Kfd$v1BDBT|1bw@@zI9ifd?SkdaHE*X&+>!fJDW`}Xbr+255E
zcz=CJ!s!t5PqE5mWuM#~OM7{KdQi#BIS(pC8-bwMMXhz(P;brojy#*mC+V?7kt99j
zf}E49)ux!zq|b|8PC`;X0lyustQ3Z`6CEo<hJiISiqQAvGww{4sm#Cz+>HdivVzpa
zGZ7Jy&(nRMYK(-4$kuA>mnoUiEdEa1+vDXgB_``XiKR#UWSA-B)zuePpX#r6@2{=s
zF&-}`C>BHOOvi#Wsh}OO?w=mAtX(}k>R!}K$)OP7-CFH8Q)T)^82(%qMLTVPIzKZz
zE7X%vv~&EVYdM$Ip8pO-yTQ8u7wG<}Ug_j}0+n#*;zJJjUiViRbNXOzJG`F|W8WL~
zcY=Q9eYHncsnlV)+H$S1DdXUBOS7qu*ZK4qFtC-)+wme+*s#fSVb?3kCT$2KvVmuh
zLM($CP^?Ll|FvD%f3?~1&yz<LMUkdZkehe*q$}(Jjpr#v9hKNlFbz5y8X0lb6|9WK
zBpzj|_gSNSR#FB9oLI4j^3wO%dKfP+uk|ia%E^b^^iZiyziKxv_El&%^7}lG2JE^D
z+YP%C?hj^WW_mhGDBHp<(o$1PP|{eufq;nTuKNdpuP@eYvY3t{A|S|LvpDXQN3<6s
zHd<>?f{JR2_oh*rge0qX9W-L?Cc9X|-Npo_6)aXKZX<jWKNM`C!ik{>dECn@x2>A^
z+bFlEpm!}rRN^ZrB-Y&y$PO3*2U_LdbUl0eYZ5ayT2vz#j4)p|b2n1(hJ&%`ez%t5
zVvNnsrqtpqhbV@G7#d6+sR#H4Ie4}pu7N(@J#w&ApLRvJ3d&CycACtlJRy6K3xQVT
z*@-?1^SaGZ6d4)W`nrLsY2oeGgsmsoiQgwQC?}_<wVLc+<A=kbJfFi55)yu!EoNs`
ziYDRDDK8%-VcYtYyLhl23(8c#W8lQo!=JXcwqEgO)XUKn7Eio&`AnX`{eaxt_GF_C
z?`T5K?tq(i;Ziq!bh0IY2EoW?t1jh<SFNq-C-I`P8H~H5thamoX`(|IPG;&f>~pZt
zYc!uCKb(KpMhNATS0tAaq(ZGV+X9e<VS0{mFj>BEu$%^;+XZIQo!LMXKTGdl7%vfP
z$n!XwQdhE5Di(R*`D1JhiAxsI=l*Jcxv@LMytuqnwTz<i4giRegc_z#Z2@(T8Pf&F
z7rP&i7pnLZ5}nech`28wWwM@aB_yaV&42i*v02SGe5Y5bG2FIVsHDPc_Ih}!qnpU!
zW+JY-RWLDBB4!Jt)6q#HW`frRh!SF}NUI(ni&h0Z1=wkf%pSfQSS)M%cf`6p9APca
zhYVU2hzNQ$h6PR7RLK3Lde|R>SHmv-Cg#f2Yv{!~?AHBcC}S}?N)3AYS+he(VaaW~
zq2?-exs{$mVrRnBma$d>iHJt>_>&8=q!LT5SDI+-IZo^+izO}lUScK#N8Whc{HajD
zK)A*0@WS!l@Q3P{@07H9+_IYKV|o~VX5ij<NUqpKfpGLm##U7S{NN-0A1y%HHY3Pp
z(N9(hJ7%i!B!E$4xE98NfH^EEvQn-sl8X+Xq^h`={5M@&YaVJL8cFFGvA61b`doeR
ze%?re(Pkb+U|tn|Rk|G8!O>Bh>v?YMTk)UE+_NRh1Cx_$8-3Dt%b?ov*(|-t=J+O&
zi^%<~H32pK;$ZGj&>#B3f+q+O&(FnWB&i}8i2%OU6tI$*D1c=rwvJK(-|2=q3BaAs
zmo$>_gF?U-GWn4!$gclGHuDk1$FfE$aX1DZuqQQjb=#?2PV$~yJYILiBdD#r@eFS1
zBzjTO-1FHr%P4}6Q>#yrnVG)|Wz*IRNMB%soe1A&^B++TavHz#gH#2;qGhgBRhkWj
z9Cb*!P$rYhd1*4Ir_pA)yB3DizOC3Px@)D`F@KJ<NUb6jAibT<7$hVlWjU~(E1QIx
zC^FfPe}gS|xMv<56eRcUeXO{hOJ&AZIW4nFv4X*J1K?5XduU(3^+NUZ^quFrxVX5x
zOHO!&Nn6bpPfe2<7#IvDmL1}$FDNr((0q_A>WRQ(u`4*wYO}4iS#~j-Xi1_|j~aqF
z`Yr-TFbhQ~bLxiHPZSndCA3Z&z_h%)j6<iEz|>P_{i_XXUTPNuO1s%%PPI%eHyz^?
z@DDo2olz4!C@rUzrt{(=nQ54#jSccj_lFyzd!0LG9^-%7yMgIMrgE*ZWD?ua@6Jxk
zxl&N{KxKZ|%?g!~8%^glI$HeTkOCp!(R=q8*72f{CvH~XkCfk|I?PSGGlA1#)2NjP
zP5%@fN1cMBFgZ8H-;gCL*5BrU^1EiBQ;?;-eR)=!-6-YlMYl;)vX+r}we=)7{lq?`
zJqLa%+(^d{dLdylRuY661GE-;4b>k)Y<v`c7G*40?~)AMuMgnR0$mtp)s2lIw`RV5
z$Qy_xpu5Ce0Uf+QI;$F>S&5R9)z<JTgRf`YPJ3PaFEV0f_&YgKQR7$pGoTENF(b)z
z1J)E66m*s~nFWJ<<nPh!c8Tp8mz0!L-KOAks|6YXEX(%>v>XB7H_itfZ`JLBlbH0-
zFfsFUbKejc|7znuRs<vjpmaohR>)~&E^PQDdDUTxZV2zUknaU*!BY6t?7-QGtvv3}
z8k4+G^;-bmE?%LV-Xms{mF(lnw_Zm&-4>?}*d{4^;=Zg&X$WXUS5n{Lt~$VF(b`0w
zF^G){q!R6Oa!HVpv7X1&%QgCf1va-THER3{ULSoo9ZNNvfd91d`~=fPD)J?iT91IW
zn1m>!7gdT{%t`6YL<e`z{PzBufPOEF-{=1B4vCQCcB!6jdSZ;(0DCeRw4l1$+TkpI
z{;Zi0$xo?(Qp^Glz|8qNkkheHA@8nu3YiF<xZ^L&SkRZjWm-yQYV$t+l`Cph32kF-
zoyukv#*;??yB-s0)E^O8i5+|qCX-IhW1U@PtC0OQB`L{tgC|>RW95S&OBDu$TS$S4
z;0omwk$)%6V*pkJQRruW6yrF9Hx^TufBR-7<m&kzeh{e)8)dGE{<EbMBniLwn~Je7
zr#v^u5B!4WHa7l2B%f!@r2);sJ?;SzkBHZOw5JE6S*Rzjb1}l7o8yW?>l=84AH0}k
zfW`XSo}a9ynT#Y=Y1ZA0XJ`Z3EOTKU7_aPh<!o5w>+1{lZM)t2o2B;*+6}jVe*4td
z*K4S~(S%yZ*>{(-J-nxQD}YKKWm$1R-(E~jhr<+vf}MCQRnlm=vpY@hy5*{fDn`gh
z++Zqv<u5+W-sikCrr=yjlP2WpIhY<88ywZ=eOs)QS9&siCnX9G6P=0MV*F0+{u|aD
zKD&a|^y2N;t~EGi@`+C&(P3(~GeTzLo$#7E=F`;1Q&tHOZ9mWRqzr=KbGXh8xZwTi
zdhv_<VFKuIEr)kg@Qeu-+&7*>(cX&L0EE;RZr0S%>GhDw-)SG`xECBOetZ8cRK{2q
zY@Nffw|R*%Hr!h_N&V;gIx({b6@LA4cOoWaG9Ywwpuhk5_8h`0er0N*N^fj*G%lT(
zGLUD>-qX_)Xe%k{)OsD{B!L>m3OV5Ch4ysCKk(Ts&rPln1W=`_GCmkl`Xni-tDlZ%
zq$Sd-BEh4JalAa7UQyKZ?t(rhCkOX2S~iWnd!B&Zn&V~v<Qcy95`gsaaX4i<-44%v
z&=PJPcln<ly>li4B|qaf6<5Dn^%J?(;_$Aw<jgxTa0AlP%BJOH_WJc9+@=tfY-$Mi
z>v$Ohtxj)<=VA)xm!}7uPYb<+dkt-N>*?RjRvNinj(U@UviLfjsX6cR%G1^?Sziut
zW~Z0ucF$(<=**Ry-YA9V$ElTH?GI~m{S=O)P0hMH@sn$Xs_pJbjBBk<`)vmPc9%^q
z$1UN~!kL&-`pXR!doE}%B%mI0d)!!e00=})yZ(45JGJZw<f`CxN?KF&FFyb|zu2BB
zk_TNnoQa!@OE6q&IOoSyUhrRqF1A(RP;OfPAu$O$sIc&++0m?2U0$nT%_TI=R6_$+
znm-tYWPhoC8T|gQ&Og>aYp)aOlIc_=%yG@F4uy<2%s|z?zd80NHv7&xsi#vYlTvTB
z;PrUB|FdquJcC?oy*sc>r9`J(<AVl5Q%<M*^&44P5wT6kMxhlkBBDST<EFY=+uzTh
z+THcq57a7kn!(++`JA#D_S!iOGHO%<oh7+KTN%&)=DMsgRFZGyQ-Su*KJ92R-NKXQ
zN7hK3FuILFxa*zBDW@nNFS&|>Y@>Fp??|iT#sa9%^wwoc^Ky2uJ`i^}tgb5FStw!s
zce#u@H@34<?N;LXgf*uMv!WmK1{xEj6A@E5nT!wUXTAwIy$Y5|!{YJ@o$vi11vM&^
zTp1P}HvDJ9do+*gwXXYsyVvY;i(IpeMIv)S4vP`*Z>vZ=G!!3;n>W{#NY^fA`IF3I
zYO+iv1rwI6A#~ORwl-s2KL_wjBzHs;vu>4CRb}TYf*_?%A}#Up52~S_yCHZ61stRh
zJ(AV@Wej%&q$x_EQ+kyo<dB#{O=4G!b7;1FW8Q9Li|pS;GQ+K$l8Zw2pmI&lH?XSv
z1Il(AFKYz9hx}Fh-6w+G@r-28EQ~s>9HF~jjI6HUEz1}<wPO<XnelOCH8MT#v$dR2
zwWXz{4H@(K`97`h=0B2Sk0W@yVkqnsGSbs;FZ#l9n(0D>IleHiTkx)IHQ^g~>iy`Z
zur)?2qL`bS>Ss9nqsSxC7EUG%okzmT@`5rxKHg+?VPenx3f8$2I>lJx{a>3P<ToNQ
zPrhE~^KAqXU2yWAP$m}BC&E7)fWYn_9Gv{DlXtfP_-Yac=qA)`Y;24EPxsf_-_6NB
z%YYSkG@0Y2ua6pSYN868(Yg2aQ?<Ugv2p&W7YT1gTyPya*GB-@fxHJc>)qjkE!ZhP
z+da$xCl!mt4`n=hdO(qwu)oEDHD85GeZO&Q@uGG?5|L+37jY5kM&71RZ``jl2km^_
zP(HUeFZr_fNi_b^U}Ql;JSsW_Hlt3$W1jWcBA)gBW|qH+ZhnUDVh}EoHj%aEix{M5
z8ONfyZabRuKK#5T@<|cfXNsdAXS^^Q9Z&5-Bc&e|=*m94h1gNrk{4#-fi9$zEfL?+
zl97?QrIT4%UERKZL$0AZlEh#$U*7Blcz0RcA)5rEgQ2CRR)v--U-L*JoqA5-+1NsZ
z<s7`$hjX3e+^9F8VaM`e+Z!LHeXM1g3s6cV7SU>VufIOT5c?buFz7g(>vFv0Kn7EV
zPE>q-FxTqyBB-z5t)sl*s>sjJZ;w6s!#|i&uY>tqvCB4rczQ^%h-QS)Q)F+WuRDO1
zN-kZa#p%Pare_PfZXLj}hM?&|o)gH*%JPjFXlUS$5I#RY7s+Rx{Awp4DcaoHY66`r
z5Mehw62{);e0L&CTwJ`hiK0yqr@treU3jn4?Nxxxo(02%x4aq?(uot$A1=<%rzR&s
zDeS&I_e%iP;R8kxn$22dFzBJ*CRyFz-o)=XZFs{gUkN_cG&L0yG}aI<T9N8uJ#1Tz
z9==!+_3?P1kzinSINFYu@vnCW6uih^3Fl09tJ$tiVDtkmJ+I`ML7b`#k_=f~_AMW&
zhM+DHgAq2?K<)+>qH3KEDl$H6waLg%f4@VWIV^c($cxjDA3uPoN3XLOHsmjrXxs<)
z{8N)_f3XGvC*b4fm9C5(pcV4yxKGPj=$nL&03}kI897RkQbeq9n8$!xob--T=G&l|
zE-1W&kU1PFR8H!L^A)!jhc7S6*rM62O=#T+iEbo_pRMU<oK99!5QJ8u!H2-a((nm{
zJgcj!s{X~YsGXXC!Ny~FVxItoW9=<;CcjUI{bs+XCgDd+baKScO6m&|%tYsWnK~pN
zwb0@zpBx`=;l9NHH`Cm@`Zq)&A|m3g8fyIQ)`(fJ1HuRSEIRXIy5*#hm#2<bqQVdz
z*=+9LNHGgSk`vyOOAIJ7QgJirwQZeakVWNBV$!K9l&A=vGhu6~!3kv-j$^8ByfxBD
zx0C#k*J+5-O+2xckOLX}!E(0P`$(gkP5{Wq39hx|xN7gD7B3beuTEC!B2NpmJ{Seb
z3<A&vgx2n9;c#pQu?So&JiI&5&HZ6e&UrL6HQ)V7cMnBp-?&(+FH=>CQ()Q~F;01v
z68lUu4ik^P<~Coh*)w(wA3yr8C!i)T`Igo-M`I+}#yTuKEjy33IhYj@scs7e$7FA7
zt2aYN2L&Le-0y|wxqtE5e2s0^Syx)wp#|emZZ0{XaLr~De2S=H92^P4>8)Q*FOpRR
zM~)Y3>O{kLESxScb|>_T<cQQ4SnluL0rl8!FZ29#&gXT1w%?J%xw*O7NAtsxOTj;f
zZoYWF^hZJ>Rzjlc(TD)v0lm~W5z_I8;M|f>Cr>OG4|ASKxnoczWVqx!dB}@7-~$Ue
zv!mnc70mr2BBIrA!vm87{ZNakO)TXU{RRcQ8t^}U=JEM(e|wHWNJM1(tG?QN%8>6h
zoSnTzOcE<Vm2ECI-8@OaPtj;marGGo)CxQeB_Cxn_SMyuj*ial1E+eWP9MZ_y;Yiy
zCm%<Ea)b3x%tBX5rj5K#`7FNcKYzqga&O}cV2m>ngyiKX0O1eKEV`nTyxbm9Z?ZFB
zVp>1%i+d;i{G`bX*l0J@`dryU?^}kqzJIkn5$v=5nIi4R&yjd6Eov3~GrGBN9bTRx
z03v0^u<QB>td;HVz;Jp722jE3^nY{<2O|q_7I-<CfwlvUh#L~Md3T8+q6lhG7$(hh
znffUd!p`Qej|SZ$EAT+-EqKD&9fee|3e5@`dUYPFh&CV}e7cB1LWu6Q`zimB^PMz8
zdj_1X`Rv{*ulXWw;zg9DEP)umC;DQ2^i9Oj&G+L^|Iq@pHpQQYf;uwY%S?Y@6#d{-
zVYDIWa1#gcR_x1)3T={l16?5Ox(70t!Ah;V7Nx0f(75**Gph8>ae3Sgui9byKUF<1
ziR5Xrl^_akv61ovjdLWqr>AGR!3Kry6zoQOdwXKyOz?<$4c44`R-oDBi6M2+^E#a^
zzwq-C5)g1355DKyl#ZvAH62eku%c@dfFW}2363`27xCnU*uv105Jc6|&<NpMF4uHy
z8a9awwF5fi@y4_r@X{8lik=PUdj+U2p_&qaX}UWh4S4&P>jSoZDVWS64JW{aHw*I1
z%U5bm5cbWtN2p}@>pri#?+5>dd&(7BkwB9;1+tk5p3QQ@dR1PV&r3&{Rkw%K5b@s>
z!}J@U`M2!?w}P-kD@apjM0j{^S9?>v=O1mBCaZHs02BSI(mXiqjuY+UTP^_E;=7xl
z-y7`)8P`t`sh7Q>n@!>$&DWGF)BS^k2Y|lwQj5<TiK1xr6H_Weo+}k^!#_|G^-b#^
z1Y&NQn@gN;u0c3*wD|AZWVIY6e5ku7MMr$F=`a=x8pWc=Q+uF?^RpYR>MWnQUh6(Q
z(p%y*xVN8#i7NQRs#{GfR9NI?|MC~2l=J`0%JW4>P<5_Ktw--2k>T%-8UE@^+YT3U
zD<UDkL1kd!T@ELf>DYTc+}HqbS0-0UL=fux_wPV3dmENQE*b`8&ojAl8s$QROQixS
z*>vhQf3#nuKFr#RiuS_^K4(v-oio`iDaNUjpf(BGR<lCLE6L02rMp3StY0v50@(#P
zKB&fsQiW;^X4aLJl|b<Qkom4yP|=_;{9^mXHTsMejNvHNW~?{zdxkad86d&OQw1&%
z5Oc=8*OWe9s*i|xwtb|so~tvP*c1!YU8A=9O{-Eo30mu2&>0pWs2WK*RaMcv!2hG5
zr44&X;W)*k`v~F;<bQype+`X<f3cn_c`?Bsufc`K?IN>*qdZrkt?ub1Dj^YbMZ2;B
zoQI&GVW4y7>*-SxA$_s5zl6i+m+qv|5*B`Y9{vGrKF{-wyZ3O+EC*(6it3eA-i?rN
zG{ru^J;ypg9uIAvhd$isPH~Vt@TU0PB*5LCnLs%^Kk;e@e)c{k0f@JEVN&=RFP#IG
z1iPPtWtj$x!O->Tjdy==5S-+b?jRWjY_qS=9H{SH+zUy_32Od3J3Byuq0y|($Mxf5
zu~(BRW;0J~_Xxx}^t!t+>5oX^X#+n8Vv>gWN|SvC*EkO<v95r?D`}SM()<U6_%t~&
zNNy|=yI{Li7PFJtl9?uaNWk5(cd4ausMCSB7Q#PO0b2qsjINbj5Z{Yjbmgk}SDuR|
z;(miRPLXH6_7hkhzGZ@x%@`>7tT86<9#tdBIsAiyg8m8k1h`F&=ab%5(?a;YH_E=`
z3dH$lf+#CH)>#4_=$l+$`Y`u-uOge_QZW1GN)peF&MQ?hU|QM@+V$PLcb9MIr>=P5
zQ&ZuU{QJ%>Ps;?wkjVrGaajL=8E{$a`Z1Q)xYFU3rtNc!K@9+PovAFyObqmeveK#1
zFU-&Xthd6+I)qX}Www|t{_yB4yy!k{Xfc&53Pe~D86dh##y@M;nX*Z<oD~AEy`N$x
zu;BeC6-Yx#ad9*7j2liFz<38yg-jMRm$6hf4KdAn%Rpb>=Mv?jI|@3~BygD?gIcHQ
zVntzNCJv7EK<xLw6}m(7fZ21tHG}~q|0dwQ@e^@)-Uj4}MINoTs;hNIfV2WvVPWBh
z`5cfG-~SEM+>YtRd%C?AZe$rs@zpGac6<&0f2F4AM?ykEZXfTYRaA^?4Et{DjA>rI
zMT_0s*Z>`&c9|P4+YC4*r3D4L<r<19>Nh4qK;9`WDG5IfpRfcz1aK-M8~|UDqaUe@
z`b*bKOh!jXe|0!dv^3iP1w${Kdu|btk)jYiqx3#%e>ivW70iEkJ^;x-Ks(<l2kbxr
zhrpx{VEu)Z3+d{vF12XjzZEveVzln7eOHM7t?dIlyQvQvFWk}T1#pJ!p=W{A7K;zc
z;ox<)b7grsCKgsjp;%SAEXH3GHm)=Xo`qA1`a7b4UkoX%(0I1^%y?xvSTn)FFgkhx
zxOjMxxF6F0cE)D>Ujpiiif|~=q)72%3Tm`*FlWYFNLZ%u6zb-9{*;MiuzoQtK%9L(
zTZcFjeAb~(SO?%9L<0Wd*vo<ty3*2bSy^S=)i}vH6{P;_0UIhY{`c~pcNcx#-EX)i
z`}+%Rmf6*-THbN4BmL#*4*~?bl9H0z+B3iTWByIiy!%5+_}4<#F~|D~E`PzO$qO3U
z-%)gnX=-X(TwGjRQ}86f-5av!YgmD_W`rdu#wQ|T@TB@PjX*17F|A>~AIPZiKOw3Z
zg4`-BZ0zUF0Va?!K|*p?RmDoBjh8GOhzJWqMu}eYCk7l%$)%<Ez2-g0?ZgO6Z2eOQ
z{#GrzkYrT4*HV;RS{iFrJ!6}8zD2pYy{bq!>@-#cw4;caS}ml(V1WO*))t&?`K6#2
z7nc<1uR3$pJSghSVd$9N@duRjwm7EH@C>^Do4n)f(LSDJXrq~+ki!|dw0jr-Ni}`|
zfyF2=$wdMc9Xu=e5=kO$Sd&BwGuD{i+U_2OC!!YmJDdMptTu_>W^$LU`299Q`+x5M
zmOT1@|Hc3NZ?@#Et*wDq^Y&ReH!tsZ$8~QrsxYv3osX9)%G7N|MMYttpnPu6LWi(W
zP^zk{?Zon-rS``&V3HYiFR!nS{&~vBB5K(b=0G%&ObS+39d-4zp+q1VWpFt^Pv&5N
zSV_Cfv5T>>N{$e=l#~>`WA-YdTV7>lKeMk6`jFsC$CLi<_!BlZl#EQo`Q=Pe6`h*(
zSJ(jj5|ttQm*+ex`OJz>?X_WH@FS?_=jXqE@eL0T)6x##hHjgT%!`T-07p1|D0FQt
zCOexHERQ6(t+)_E!2*po*XwvHCLv+r<0C0c3yT7KVNT+~Hn$O<rwcm8Zmw-}vvHl3
z)<1S*sjA9Rl#cKInXYj^LNNRUz}o^sm%faQQ=KUz@aDcA*g3X#7!7!T$I;wbtUt^y
zI}}ag+=`Px?w+cVdAMP)u|~&#lF#Z;P*F)|w^>>H(T;_QiO*g>Q*Y%VD~pt*xW)^T
z80b_PF9AnKvn9?IT65nXzh*UiKe_z<oDf2gDDuzBddU`S7mvhG0E*<&$I;I)<mCUo
zuND?KA->1kbH_g?!l2w9{j9@4si~ncH84Pqhc}gIc5tB&esu@mPVpQO9_}Ay$O-Qa
zi;s_wMaLE9OGcJ6X<co9D=!i2R1&N5gE%97_yalHt+^!v0?R*4PlWwzPz1Ug&K)uy
zn5~;e+h1qAB15l7M`d_;+jDbsZES2@LyTqio8OAdwR;`nVPF_pSd90qu6zcWnW>eP
zqb^^gV3aJ+>x0NpNpCMN-tU>aW7^M~!4m)uoc{7EE-4A+2zfbMpHVIve@lt3qN=*?
z`{@&jdgY3_xp^0iBs5Ggy=E;XIXOCiyo^YItwvKdmQF7)DM8(-(5UGK0R8uOi-j7a
zB2czfi(?8ZE0LoSLtWRq6XU5SGC1t#SD%QCu`Y(xfwa5(@a43+8kP_W`LZWietupQ
z5Zb%f#N0bt&9(7OGk2Hj0<Bo|=42W1dYzs)3|cn&+0i{X5bEWNUq{b!z5%YY<L_Ym
zt1Y;@rj~Y4d`k-c%r7(Zq`}5xBC}nm)rHMl!DKkW?_K@pRW(l-Xz2AbkeEB&(@>-2
zr!Jc*ns~c)^iz7!#rI9&(h{679>4cv?MoM6>~eZ7PRBDvOloRLKwD$dYpMFw&dJ4v
z-+?+!uQ?6v%VNejJvY}Uxm)0LzM+cQy+4D)=kpADmVvSHw~OYa=3J0Zi>M<cCicDZ
z^7NEWL}$#&&eo@Jz1rJHz^VM3dD9n^wnwaPY@9gZ4UQsmZg;ypnaJw2gH~jgq$C&5
z<n?H_{XMlgFrm+6Z(qZa*7lK%lyvXbegTa1h6EU7D`VrYBXN48AXO<Apxt=#yUD)D
zVH<wX*kPA-Zn|q<0Pa$2?UY2J$?nHiklChC-w?0oEheLB`U)VfyCY^4$au1h5X8i%
ziY0wyd6Ht%p6|>pED9CG|JFS6RzYDgu#7#QFX|P@!h7ZS1j!pLW)hgd2zmZF@mIiS
z&<24gb|GPG=D4b`kPrdD*CnhD$(;}91Dt*~*^8T-<Dy&7k3ylTsHjwbrDTdP9&YzQ
z0oPqDlw}Ffznib{fMwEYQULLi9Ci>9Imf64(cT8J$YJpKNck250&AfdX2VGgtGS|Y
zi<!0{H7k?~cwAl!wi@)f*ssxP&6y7iZvc5qLsQgkt~An|^-|UR9dN*}=PO#Pcl49p
zTwMjp!(ea;3F+IF&C>=4sZ-LkQz{DzoL`=eK0v|=<(xOPMo&y25x59!uv^Vnd)_&i
zC!el*h{(JwH<E})r8BCQLh@^PE10JWyORa*(}e`4veAufQPI*`ZuVz@Rad4mRH9l&
z$pKF->GL8mMC?<c+xm`+7Jt1$`(vNH@vC)-IyXlHrkE0m_%f3tWXW?@du-CjFw7du
z`SRDZZ}Qo;M22^@3aKp@Dv{CpE_FKE+9|Rm%%~D<BJouZ7OJkV%Ra)B_-a5EeD}P&
zZ(0PJeX5agNW4ExG*t?yL=W>27p(%X>ne4Z6B)GOH(<g-l6e?$o!m&{Gq@WA1-jQa
zWA2;>19_!TMuvx_XwqjAq#+1EzLBV4q1r%KdwBzR&jF%YTW8jL{S4YJ1O0vV=2NJ=
znA|Q$C<qVAOBSO74pVV$=t{+J|MrjA)oijnNHUTR&u6UysX$C}fiysH^BqhC4cCj}
z<9U~&>=cI+>t?3VBBb>6I>Bw>&{MkxfsT<aOiDIc_`R{Q)%_Y<2Acl8q?HF~8Rn1+
zCCU)|M1;fCw6xt#U%&l$gP(2pYdphI7~>A?DG+>8QN}>zN)d_6Hxv!N*e0sZE-Zv*
zTkP<X=G#)z)%6;P@&Zeem2C`&wgbzJr$_|zC^xWbK>joZ9z$g%4)8*UF$6a~mcHA2
z7TpHPzi|$O)J!c=$RW%Z)zBzeiu3x97Qo@tbvl(-L`}j7OO~^)dULXxvaC>8NC`eQ
z5N|M2?fV6AQE804-+W`?0F(1OM>cC~U9Z^zqpUxQs9TnYn_HXW;c$To0)m%NXtV#?
zZocU}JiW_0K&_XSqTX!6!1Izdho=uxQ7UF{wWWTyEIV?cVi}ss=JD2mN62AUi%T69
zw~2i+lyv8AIFUe5kZh1DO9Sd0M8x6vQQy5v3~>Mu8;%49p@@;0nS4lO3pPweTpZ?!
zh=XVl(FNWr8AlX|zu}lPkZw#v{@1;sECz{rgfWqOd$_Ja8f&7d7o4&=tkq;L3!OeF
zCp&`sIk@W@xyr(nS!dAe@HfXZi74LvCJ`grI%)lg`KYoxQWEu1|1{eMKS)4TUf-gB
z_)tSLp$-@RN=|XE6sr%FK8x35|8loV2TtINrWW>ESr~S`kmaO4Gr3^gI7&VQ!|TSd
z;A~%nnW2RRlFGcGAhG3!vGoy<h3!--xH!w!NEP%@mr=N|x!~5por8NoSf6AtAFu-H
zNRI)z-|d%}7`~!IbEMRYxwm(hpF?P78szX`f@@I&6zXCOs22g`;O1J&qlq?=pFoNE
z0bJmVZ$K~X`S=JzfaMFlmhTw^dWG!5gt<Up0rpaV^7WNdnK}-kD2HOF_g%Z^ev}E2
zwqd(5(M4!-LPYl8z$pS!biDlMhu#LU1O9|_u5o7<c2F|)Qm6z>a5NO3=lSh<9Vl{L
zZd*z$CLKO6_V-tANv5Fv;(x4UB2p^XSO;iq!&tTQ2$GC;M^9C?UI;43jEskekO~Mx
zwlb4l&!ICi*Xfin>;cXz#frT45!B2^hJJ^a;Sr<(T%wk;X)Phq-Al{KK_!`$i1~C`
zCG%*1QRtxBUqH+G6`MaF);5(2X6d&KF1iJEP}i=nxA3j4U@_(Rj$c3BQi5cZ&*csF
zv}UVInGA;v)pzb1g;EtbR=;(e<|dB1E7Hry#H(3mCGmBnaED)QCd})wTS3uR*_zaJ
zl-~zuJ`T}_K|x*YO|ifVp+x@?6#TJ0f)HPS`v7w$UUwE7#ndq(cfUX8<f|OBQqF(o
zyxzg*dIr!WCLfg#2g{tMQEc{AsA*hI_2V|AnwsB%+-7sq>muSnQsvvnGevWdf97-C
z*#PT1Rvt5>&e8e&!yv_veK}4)#3nTpp|z!Y>z`ZG1y(VE?+-y){8SS6mLFj+`s?Za
z<u20^)QOHm^i6@gTs#E927EG&vCd0d(onAmOqi35v6yErQzV{*I-hdIztyTDI}Jl{
z5C#_tV1WSd7>fsDP6zn06F}(*@Zt0JNo_?yDW`=WCnhmTc5!{Q-wYa(QT{Q90}e@`
z5mFVuX>tU0+{B@8a#8?L=#5@9=Jk>WryQUB-)KzdDn@bPh&~o0NvqUl1JQaK8s9E0
zv;a|yfyE4okAHeO<*KW46N!a}hNfyh7)_C$WM|M~^%E0?UfUeY>g1s*c=TD*5gwKb
z?$X~{r+2)g*O<)pdPth~4GV*7_T}l>9YDzfMW(rV^{YIallgB<CI5lB9AUa7I8qbf
z{i_s6-2u3;zQJ$5fheb$C+57m`kRQyHT_Un=QxDj`JjzLdGL(0FR0jjF~f-zp0h?2
zF&YQ&YbQg{+7iY`86)WF#0kWOe^%D5{NR$L$p##`V|BXl&)R~iVQ@$#!D(%|F%wuA
zg7FD((P1fhvUiVnS;>j*uIo`oG9!C@*0>~DXCbKtCa)hw97z~4Ub@=+zEF&xxLy@o
zf%4Y!#n$I=zP-_wH%^A4N8k@M42)6q#;+U!<E3rMHwLJLgm1zlUbZ02<GK4#*|oH^
zz|*+jO}7gL27KYn=8fC|UXc&7j-=!{aN+iyNiiT2p`NhO&}f3vIqZ`rUjJ310p3WY
z<vbq}YJwYe97E8#pAy`M%n`U%kQ@)ksj|llVW}^~gWA7RyalK)7#2+$9F2IJr2?&n
zMS+L$DfnBbT1DyKy<B>B7SbC!7#mH}>FVzN^}YY`kXbnJ=8?K{Q0C_5(pXDut<zBq
z5tGFwBqZW!@-Ne$IZ>_6O-*T^4nX<v(NPJ7u_HHqe(VQHa5P~ap0?ic5LQ#tZF6RI
zp`b(9zXbD<%2+bkL;#ojR^hHCxVtrro;(#zq+dbZV7|ZHz2>$d>cf31eVRY}hw?OD
z59FL}^%f_%#V_VxgpjbAK1D>kinLDtY`#xn!I_&?3CE&)T<_Th=&%cZ6T>!NW-3<=
zs7S#gzU6+uVNbXBre@58$cZ$xgOM`?(m|q`%oucARN{Iobx{m(R>S*uN1o9D^4z3?
zd^+q1Dm!~$7&b$jK@ajbQ}bA#M__b58zCc`^rfi8GiCWrLZfd=xH>;%aHEjjVaA;=
zq0UUz906?J-Q6A2gnP1~1T&rk!c*}WZ?MKQ+piAh(%>+H%1TX#-TcR{0h0i~2%-?e
z>gvm5$2+U7C`ZSE;!{BEIaz6bImsw0DS?ywS)#n#TR|ECk5wB$>HF&IGUZc)*e5B8
zYWvN5O3MBi%P%K9gI|e)m0j*G*orsaK*<=OkY|CDC(9jPBp0D|5j?FepZ4Y}AZo+f
zj(>SoYt{wreY*t#{^MnoY{b4x#thha66yjf`A@(_gErg;Y{T}K>)FQ-xzP~wACZ5K
zkKZgX>FMkaA>o<qa~3hfY;0^qAd#&qc0N8qfQO2xi`iP?1dC;*{_xc}ks&w-Vkqc-
zYlY7eBgC3QN7myU@K-E&#@M2Vo%-#w7d!mu2w%fFv_w`*vnT8Nj6@Q6y`b9vF~oKg
zwIb#~qx}VwippaPb?nM$KqoIZcXF>>vkrdgBv-|JwwTx&^1F@!sQ_{!jWTVdP495x
zh!0@;+ryD;mMXqjGfnoqv+S&r2Ez85i<P<vN82DkR1F!7bT|N0l*7yA^L&vfF7JFW
zOKDF|FHE}qshvyMMd&ztD!S0FFDwcqRwSH-jg0abb(eDQI-C!Q9WQ}5{PAavkq`X&
zlnV$~P=<v}unpJL*8?N-8XSirMLe_hXMMQZk8_Ll#{`YkeQU6U&5C^!a^39D3DF$_
zy8ZncH}IE{TK%E@yZm=>n0la*(&aO_I?bm_`Mg@fnCgwtD;CStsfy154G<R-6Y|~E
zIrH{)dTsIApv`JQP{Rh;BH&=(-a-|@{TsEaU%(j&M<_QL>DOsWqBHxmIUv8+gF!XE
z7Wb9US5BH4jgnshADlLdk)$Tn!5x&WGwn`PXmg$7a<<In$$3##QAz!1`^}F(>Bf=P
zk#rFipMU_Q)gU}*lx9nXACf|UKXg;DoRdQ|r2|X5vam2{*iUvk%{L)WQV%X9rG`uB
zFYtMRgWu4uV@5fNHE*iw%&bT|5*aTr!(#ugmO#ix*7nBHQ8@_;oM{UP7C%dtqzLWw
z$?oX*>>dp@{bua5MIBUsNKz7|&!tBY#t<&5+#+|x<P~M$OS+Q@hoq2@P>QjZBBeSx
zIXSS4>=l@cpv_o7A8lbAQpU!{MrL9hQjM`0q$OcVH?ZT(`Cfp)Kue2%Cz&qqtz@_U
zj&U7SECgdpYHC<R)up%F9#@wL?^$Q%H|rcNc#1+%APrI4p)GzQzz6dyeM|Wl&JEfT
z0fCV;q%(8{lI#!kZu&bm31hN&ovnQg(~SQdS`8ueU7<{bi!{ER0GeklwvN$jga4jx
zZ6+lVg!QnS@WOKc95ZNX7fIxqA6I8e^6p=uEW|o|1#%q;r4}Z%^K~UFdcZ%b6DlMb
z&KAoEHU8eIC$8WllwCpWe=Y{wObQbm(>VUt@b3?96U9>hqq#9huMi4}q52@S{QCE^
zVTBk6ZIY%C^^JzhFY88?2Sc#fo;y)ZMAhi|XBLeA=So1xb9hYltB!=Q+U;eY$ZfFp
zV4BaK%|aEnX{eyGvL5)K4+EpH6*Cbtb<|bOb(D#7S(H4B_QLk#2ifmV4+1>Ajh<&^
zPp>B+emFaQH|Yi?5s!d??pY+D*M7PilrwAVFg)D7x;8;$W6ZGG(NPh>^@;r9*ROqn
z8W|J>Z6Obk#lZqoC#X{?I+Bb(&(7=sL)?#vIL1#N11Am%iAMfCc<O-GEQ0#U#Z2^~
zX5IPc6^3LvLsFJ=RW~6*Z5OP|*=z3m5E`1=Rj-sZZtX9sA(LgaR-Y$=j*UpXQo_)e
zXOeY2`{wnGAY&Q%Ja0YsCgF+&k&q&*tE)Hq!kzafmGtzYO;WS7*I-aG!Pz=lt+4!I
zUx<Nl?D|r@&IXy=T9ZRkSS&0IXxP~@^)k5(eEJL#F)?C(??TD=d*Eps@9*x<B)7CI
zfiR*WXE10nRoactKm7KGhkc$oCo)<Iv9W*EnH7C6y1YL8qguw!@QH^dkOPl8Yby?f
z+^7B)b)HT1RPHbE()=JO-|2kV;V+!xq#KYPq1*M(ls!T@gp#VL8Cq4<-c|ezR6i;l
zc&T8XN9#}UJ~t~{`Bo1{pc>uRTZ<w8b3m_Ls|Hd~qaK%K+7uZIO3>V@fAnf`#5RI-
zIxu;m2#KHp7}aiFUx}BNw0wO9%>zL&(qyG6XZoJZs4Gawvffg4%+mw^07~m~cfk7H
zB|*`b<=b1=4-l4?mcVXNQc^O++xXQU3<#@366s^wV2vlJ{=*40z&G<q;>2gQtJH2Z
z?XMKz{Pge54<>ig!d6_q{1)~%p$|Ou!GD6|yb5VQH^mbWRh;zw(!RKNe>AlFqCMB0
zNkd!x0Y+1V)o4PK&t|?RmlW2v6Nj9@vZfeUklIi?Sm<caXq}rYiT8F8mRwh-#cA$W
zhZDecck;Zvt2f8m;L^uHSFhgJp9f3t<^CFBd;+MK3=CsHXY<<ZKL!9QC3VMkzC0%}
z@!jvUrFw0E-b5jmdMSJ^cNqJ^u-tBrwt+HMV|jmd2h>LP&pP}-#Tx_1&3=O*1Se;r
zvwcYq8x`d8{>*MocvBOH+3tbl&dkIF$#0tI%d7LddegBTxeTqh%V+2W?B(G{$EzM&
zfYS`RfgWJz6w=^&o@zR#Bb87Mco7=%000Sr2<pN@Lh0#8X{;8cg)H_Pu*Kqk1*E4O
z;Q=Z+!e+z1AP|iwd--z8N676`oRqZl=ahdu>x(d?`97C(X)@Dkm!rewj_xP?MO(le
zBO)({jIV)y1=2>>SC6lHFt&f!niy3of{R3xeDS*M7uMEpbv~p7>;0>?m5C~9*{2St
zPM2f$M^-|W<E1%!mpFPzAWh&ft;otm*ng$Bq1UKJH*r4wmG?*gi1+zFTEHnk0Q7Su
z%5@;#?}@cyL`cdbMkrAr<?{?<PphlTw3Z-PfJ0*lqL7Xn!xl_nxhF!K5iTeVa}I>g
z&&&wQY(YXzmnf$Zd^}l$c-lGAfe=Erw@U&^p`d4E?|jgL0m(RT{gQcifd_()-J_!c
zMG!_9I27_OKw1K-vB0wlqdw(qvQ;(V)8iWj5kMX`)Kz3;5XW}_w5?I7H9iNy{4+Z7
z)LyKB;I}MITHZh{SMF~Rc+Fxg^W6pjQILFfY)W8f7bRdTt*WXT`KR&$b1p+g>_dHf
zUw_SL_0^l11$_w1XFYv5Wx?yn@&QVAbiV4>3`ha?IgPx5_1o~w9@5x^Kje5#wkePt
zL|h*wbBW=|dBM>cRWVM1d?dW-;KRtXvokvN&)IChTfg8Gr-BJQ`RQ2fWU>7G<dIDS
zj%_x4{Ypw{G5c52{M4@XRvZ~fsP30Lt5Z``<`+O!M6?3PLap9Xw73J5*2l;FWx#VJ
zG5}Uf=kxMCMYBAc$}^j!n9Mc*>GN>IYtOfilN0N8FzfbxKSv$Vo_A3YyrJ`#PY?3o
z+=)VwTqJ;0;4Yw#AwQtv;RR;#XxZ7p;-ARi^5G*@+#bwnZxx9}(gH!-^Y*OdThwhT
zst7VX{0|}E4mde|mrnY=zucG>6vWlLTqw(pHr;5ufX_xNtRhfHwzS+xyr}LET@SEU
zu-GGjT_zWBH7yo1j1oUyL%81@{X`q^E96J{-QpbG=>yyno0_{CBeU!iS2Z#sps&NA
zO&7`IP=}4BeR1=6pwN_(POkLN4><IAx+h9vS0Dw#JiW@`n*k_UKOW#9D934$x<D2z
z6v?Y=Yo{3v$c3j7^19<QqbzysO?CjIMPU`JJ<Pa7PHaNHgu7hPGKEZq%+SrX`+%rG
zvQPwO9v(wLP@B4{b=ut%0eBLKx~L<>$EPKx37~cfLl?Vy+wl#VqVgO4#-?9v^VbxS
z9B?kO>hmgy1v+oE_7wQp<%h;EHan&P2<h{3vU%XHNSP(6h8h4c;tntpZf;ySD)!KT
z#LU3Ty6)?6bO=V5x)A_NLp^Fq<IumJC**lr=K*T>Q`+(UF4Z6C0%7JM9G`|m<U_^8
z)fjxX(i~b(m|&_$o=cruH8sOuf}@8xbXH^>0nvPLB)mxL*H{fui!F4Z#6uaQqz<l7
zNFv`V0*&Ns8|;JmO5F<gYblK&@7t^W5x^`!i4Gcqem!JH{eis_31=G!xgq)nim%At
zXH4D(ZSQSg+b?~uS>f?L67gsOJ?_1uzUPk)Iw17M%Mdaf^>_FF6kyfhIykUYa0deK
zG7z#my;nhi>|InSA$hDH)EF7o=-8Nk8!4)rSQ)RqaR_#kws|;M9D{=Ah3_9=6L6zo
zgZ+(D-t%0<#>SEzkxE)<bQiS%NFB8SWP+fedysk*%Ul-}6&<>n(f<<T$Hk?!Lh5Ws
zeYkxc3WxIG<tvcEY=Vf%5g+k6uyQjE{67gulvqBd=t1jMdL4G@F-<bVU~|JENGo6h
z>3_$JmZ8hPRJ*Z|!hYoRcl+sz+hm)YaQ-W4Y-B3rd~nQ4!F-V>8bul-E=c|Wf+12F
z?kT<hLXu3=0%XB}UqncBOg4x5niprUNP@=+!()s1Ej$btMjYZeF|!@mZ8}+@RW=;1
z)qZa0AXWW(!N)-v!@|;1La&QMKu2h@rL78bVez}grM)DuXK<4oY77HwzMlC)coY{G
z4^kxRKneP)l&OVsr%;opdl8d7wAih~j~eKR#;IaE?lSsANGfmsMcM%pCn+Wgb(hFx
z>S4}FsaxHvX(<OaZ0Z{6y#-$n5F(8~pwppK=ENtG!s=$#b=lqQ1i!D3NUeRJngCWt
zYMc3fP(Z-8ytjGgm7VyPKaGNdg1MouVS=L9MabXR>YI0I-rrwyr`A>L7*F4Ugs_N6
zfO%#>U|<g_Fh>VIHf%>)ykbZIsmb1-)VeJce4cn?h8!&BAE;<x$@+Wq{Mpw=T3Way
z@#z<nZ+UW>-F!jQtzq@wX$>Cma5Z@>3J%8kj)V>D3aBy|xx#iY3(q*hKd@}DUtq~$
zqOi-^y$2;wW1I0ICyR5RfsmqIAhq2$W)IHr^Gl?c`}$_iI&c*#GAQ**=`d=2A8h?1
zbc!kW&N$**Fu5pv=r9P;Vp07c=H4=@%B~9=RY7Ukw4{_Y(p}PxAT0=jGy>8fCEYD0
zC5SXgw;-L;DN3WDC@l?V;`2W5`+evC8RIw{4s`%~@B3c&T613WihbB_V)N8S)$9af
zxNtJ)b;OwHSg^cg97ve$0LPPW``n0{AZohfjPd<-mIEDjYKXyIRqa=y1~oYk=%Sn^
zB@d|EdSU>u{SzOu*eFAF?<+bXIWR>q#H%z5<Ld?R#l6xDZXWNhdBUL8gM5`l#!vNn
z3%fv0R|JE>d{I$R{cX!K%_}G}_FJnLj<Gg^VjwB~!R@oYhHb^$azgV#gq-HC-=0bF
z8~-N34$N}#X~S#&dH1Z-Ey8iLDr=DkPrC8`z~saPGMi@V^Xe5d^D_&)=^G1Rwn9pZ
zc1M7$wzdlw)%e=^-p<N*uVYLoF#`VBEPL-zdo0(=%HD!zURz7cZ!|EkJbo-ou{8J9
zi<k#tcwNWk-O4n-1m3yLBY0*<M~Gv3hssRhBcw=ssb-3h22*ang))Rf+(*`23U#F`
zVj4~r7&T!(%!i4O2stx<pU9h4b>LEPB2&V!3Qvj=W~htPZKuq-BR7cd;H;AMuN$Ae
z;;YQHm{r%-4v!}4E;Py4O+vqPGIZS%t9SW1|M4T0l9H1hTiyq+hw^-aR4K-M{fCkH
z&l`Plh%UsBQnaxA0%_a97(_s_;z7E=*x1;OJZShMV19Y8$~K;m&d^`^x6c*}`mv_^
zu?Clb9*^m(D>xyy&la1y{?hNUqlF7TE8@?IaGIlmd--!Y_H38kBW`_XG2_W9c2<$s
z=jg`bf%$baUk^(>&7k|jyz&0qw@*!~s(&mOcM(TEHdD_)C|F+owUds`YKFkowYFJr
zIFP^hZow-U9r9bM<r|7h+<x<Q@Q!Cf+gRnb*JGAadxx_3&))E2Qru8NVd`LJGSE#C
zl38v%W7X=HHQ&pBVASr1o1eb3xA$O7{uM?!QR?E@5fQ6pbdXW&S$w3qvHE>=b%pdW
zWT6lxR&ru&Y-^G$KogcKM!dp4bLy(!$CocZl5o>+AA#s~WeK4JV}1e@PRR$3Z7+BI
zG7dJzbw+W|_ctPff;^U4sm&vZqPFAu7^J76Y=VPF1UV?O^XJ4d?dk~AN0f(LeNW$=
zMfu)DPw~DulZgy)>LjMJ%=QSz+!%O35*_z0-z#28oAf9O5V3;CO+w-WM`$eUO2Yyr
zk9P92jPNYT&Dt%lEl<%TG+wA@mU{u_7lSkO4X_UwXeG?^^`ZMG1kw15V~Y0CC1a_g
zzo&p#dUCy%gWb5KT|wdW+LON+J;qrw_R<APdv#7~{x2cEKO>hx%HnNBpDdcT=+Bxr
z+8XW5qjbt&D9x6C*gUoGpy!L8H0l?!RX#%V4lUI-FhP#H4s(PM*<Vn37&W_NCGKv{
zvalvIX(&EBP(+&k*&f7VP;j3g0I4IWiBPAfr_XmfP)Kp2zQSyMCzbD-0foF6BMHws
z2H<Eeu1DJnV!HdCVO0@CrLsZ@G$<@ZUhGf6K?3qjm~i6pC(9}+A(?C}b>uHC;lhyH
z!KsOQ{96)jZ+=<X@2&`)*t<NPuuAF6xcG(+f2FyBhmj+;_f3`qV3t@efcCT0sP%lY
zZ6!1SPq)UJ)|rA1!Pj%WsPH_?tSCP}Ld(FSo!7s#v!k?xH5&me<E#7G<aTG-T}HSV
zCVF6CVC*(C4HKkt?R`Rxo7UxC9wA65(JQ8H;~kVhgbFx|kb0iFJ=Pima2=IHC-g9P
zlcUZ0XC#~E8(nZ34t7tRS7h5+c{%Ez5cpo+8!U}Pes^a`S?QQAxrC?w*_#pUJ7Ru@
z*HR`u4=G2drk1Np&2Ppo+b_I$Gk)FT7fk<`o9?}1e?ss!Kx!6VIGg*1T!<5o$L=$+
z<6q%~WY3LP3LH}A=f%4uT50;U5c{Qz+tBx7s(<jkR2Of(MtN^mhh*ZWbM(hYa)Gh2
zYGq_-R|{bg)<Jd%&S@HQFt>lN&`AB(cs|QBtlL~1#uF10MVf_+%ggDetFQr&aD1(J
zD&DeFWjz_rp<F%!6QQFg`1FJKrLKzQGpl>_9&a!*=Yz54N=qa5H)jitTJ7Khz83Qq
zBkfefrVy%L_RoLXqYYC^IFfFHZ1x^|%ieubv9*=H1Pkb^P}{VjB(|Qc9O2lQDiw9*
zar@1+u3P>2@Rx9ZN3kYTjMT@tXcBJZBz5TG-aMne^<0{dZ|VzH@#Ch?P_jCtj1Z38
zl2<g>r0aA&_>l-Kp{VCT8|lRi<)K%X_~7a0*U|`$Us;(e)XzXR8sPWK!9Yi!ZP>d;
zhq7<_b4q3WLK|%)PenuEBctd#|0Y4d6I8Eb?>S#OMZA64+{Ofaa86%M94@r)>-!sf
zYV?dw`xN)9Ir{J&1c-IJD`<xWx<oFmSg)F_Y`K_ddF%P+wfchRM7OYh+!eLdZdq*i
zxxAnqs&8y0-89e`59|>$ySE4(^P=K?xm&rc){4+M9*J-=Mm=uAzStXnMoynT2PJBM
zZkEAKCMf;x;q0R}yDwquG=o?scFjwx$(4;NAemJUL(taT{HkKV2*<d(t5gE$3PVJ(
z_ntqM&9^^3CXJ-JKtJpWd3%t4%x`ddbo4qct&;T`R}9V~h&-Kd=0*?x{A$c$ZE4wC
zZ>-EUkAr2l6IR3Mx88XVJsq(rxP$S<^d(I^rBCX+H*A@!_;$U_uL6$n*OF##Ns~KJ
z4$(<aFY3PO&&4nx*Xaw)E^1NBUFpV3%uJ#W(&HSz!8biI5i97RkvAAL;b+`yp{w9^
zosJ~hDV!TSktTsuN&o5*z!bPSqaOd@T|b3E!AN7+9<9^$rzBmdOf2~Le!$JzR!vY6
z??b2Y?mpZUB%q)`B4qnuL-5V0Y4K_q)1XlEhp0VHmFeX0@3o$AYIk}cCiBRV&Pw~^
zrXp8mJn~L{QDEn2?p<m0vrpX)j(Zusro4TQQt7W^P<@h%eq1Kr4&=fF(Rw-{0N}3!
zWUX+T#ME3KZflOoPt=ZMl-R#I&nr4}-+4Wp$>6a{b(A%v)2=nC-)AOwkDvA}%BOd@
z3Ct^CW#cR!l9G_PyEg+A=h5W)$;?&7`Y%)%FD<5myuU@nZO+~TkDB%KcV_csbdLNZ
zeL#V5aQWbVyz5dg8-%WhO){2jCaOm3+v87bTA(}Hw;=u;m@LnU_tv<9k70bgi~Seo
z4CSE;p}zmUrR!fT;H@$jsl^Ib;sO7w+Y+Xn=fz!rN{KSkZ^qrLwCiQOn(e^vRn#kl
zlRS-YEr+nLmb&ux-J4U*$~=Pq2Leiuid8)`)3}eIj;o0*Bug+#1|rwrZ$<=q#imgq
zmk!9d6e9*uX>2}D2H8X!J^L4S4OOPC^Y}g@tMl+7=|h$=X*sh#v&0#9S;VfSx?hxQ
zwB66!Y{_*h|GX0fa$DSRE?2rcT17?0h4JS0)5)~0L{Z<dCdSanw`GIjq*X;SCQmR)
zExF2WtudlnJtX<Nwt>P(`#_@C$3_yt;KvS^5@B$`q^Nd;m2ig+_3x%e6)F;)ZlpDs
zwu$g-rWmHfi^G);UfgA8$))<wRX`~J_K&6ITTsBlOAU1X_kT?(^k`6J3V0v<`v&7|
z<A!Y*{)fbpqo7It^Bw?}6+!?1@jn!kP}{HA%ST6aI$d2|Kx!;6p$qze|IclNKWX}v
z%j#ih`@wT~ZcblMZ+3LF0`x+_@AFE0{~q`yJt86^K;SGbDFF_N{Zozf_pdphn)}_j
z2}BjPj0r$Z!LEwib<+|91A}v9c=&R`*Fs*-$+c{<*<+93&jmaSptb2=1&VR?;P3xl
z!(Gx{f<TL*bg1qP*7^y_c&*oe{tUU}<KqMRgmz|M-%FsxurM+4*?rM{{P-N)BFOmd
z!1o}lriNEZ{L0TKXJtTE_W0p^Q$qt#9KCUurb_1kQd}Gm5)z7}TJ4#BKmYG~ydVPe
zOJ&Ml6$IdhhA?#L>#G2PiwJT%4t1<QjJ!F1g9d~_`8J$LJ|)Z=-FDyx21mnC3Kb79
zNNQ?SPUk&L-46MWl4fJ6R{fiq>Hf2T&Qw<EQ9<cVgpaS^=xoKA>$s+Pw7mwJB*5RD
zcv0c-1QWbJXU9%S)aCCjhBJ58a%3W|NTbbe|E?fZ8cr~h0o<vbf3tpd3NF232$i{|
zrLMbs{ZXv(XTOC|93x7;XQ({J{ht3@g?P055|$=3n5n17d-;i4)RcI4?%W|GE6&Z$
z1?HZ$H3)ljHjY9I^YhcL^P;}yvC=Gk#M^>d#X0$b`+qNu>*)C_5Ga&IMg1KiI9)no
za7XO+*DEeAuIqvf`3(SZU?6BjNKStC?GqVtC1!R`PSFmTj7*p2q3XZShXkFh9X53!
zu=zj10T1^*snTrV=;*B3d4r1x6D!C#9c~z4tQR1120x9w>}(IP%3EKzBu>7y{0(GQ
z0JSd-bax+r`h>B)27ZsbOK+4@!t*eVUd}Sg4kfc^1qI3c-=BSWT2=GCAsZhb7zqf2
zq|47pr|@Cdw@+z1T3{swJgkr>P0oF6^z@Bt*^;1|iSub&1TiO6XhX>v88)eD49$<W
zJHrx8(m|`W69g)am5yY1Z$sk>##{e=I;2eq0CGra1_HdAj*imq(g#49d-=e5E6FUk
z+|56>yQe4Fkoey{)ogVG5pHQ&z)+{Ceq%uK;f(OV`wTL5e9h;7mm_dvYX3*}{{Nrn
zDkH3q$`lwh$Reca)zs9UT=Hthq0w-wvC)TOZo4sK!-m((+)4JJ8CkZD#$TS{OqS7G
z`0UhHv8We0j--GHU;5V30AUDluuRc*TEn8F!$LzNqobpvqM{-q-g+V=a&f<$f+!*J
z)hlRVCnhH~HDBQ`P*susAK!oa_xpQEcIE@f9_Z={*oi>j4Rex$Nkzr*S>r)auc4}i
zjXab3$p+r4R8)vMS)fCIAtm(bsKmSaIUfJKk5fW9YET;ig}k$;XZp*RSAB#&TWyaS
z7#Zn==w)@}$Xrrzk>jjJGBMDx)z!79CMUbUaw_R3Tzz7eH;<GNB#Z2t<amM7^D=N&
zEclFMfPHBRSn<8j?*L?h<+@*694;<kE!NgWdK0g6!<7+w=#wV?z1Q>}Ijq;<1O2db
z?!o>0v9+~CUwuF|aQ~C!xg?v^WBl(Sv9wpOQk;GDDpX1=(PvrI&EN#N{1MDuIQ@G+
zY`+FNH2&?|m{LYcN(t~bdACo38qF;W@=I91bgfRRD-xzsU0`cQpwS?iKJJREqDtqt
zzcT5JH*h)GSBMXiw!2xE1+s`YZxAjnyp87wY3+bVL=+SOr1|gP7Z(&T_T<rNnff0I
z|Gl-bGK6wNQnJ~%U|NB=z0U6Q1}U|Z8mx@0;=dU`+WvE~1bU~94Uz{5$oR7{3kfMQ
zFiOtxfx%!U<pl49z=W_zRC+dC0AG@#F6azb4IOl~MWl3rlHTd}g>vvE{r=vb&1g<y
zlnR=cuz-M|P?GQY=L}rwTEA)8eYxNune`vmu=Xy93LFaD;t#{j{^ZGDeM0=dw=(u=
z*V5TL1v7Zafkfn9hBjWaw7o<-|H1S7j~6E$A%{@vt7&P0ERZ5P3x4QzEl!|I@$p6H
zRnv#IqFIywps>zrZoUbNV<-9VHNW3N7-AMj1){O8kA49=9=oe((u<v8_}{=ypo01>
zz?II<&Lxj(!eKafysIh~L#YSGeVUp)Mop%DV<6=Lug_+k_hR-7Eh~ODQzbPOOt9?_
z_^PJyeNaq99<PM20`Aks=-cG5u-RmGqfP>Jg7RmdtB*k=*Lj{P;BbQ)W_RFU<@D<_
zFXe4YN->j8M*X=lZEYDLx8J+xP5iW|eH4sbT#8as8Mw$hZW13>_DU<1rT(w0Vys7p
z`qaea=tkBxi}t{sv0?nY2tM0KO^uC1nW7;-!8}$YR0{4t>u@T!+qXeII9W-#&3Wi7
ze@@wgu?T_^Ob>sZ%N2o_@bS^v>cIT`LiROUn)YmU7Z;Z<0wUHFVg%ya%_HE7N;^3@
z{hX}=x6CB4+vDKkf|ZJOCtt{8_o@<zrWCbq^FM~Nc@wzkw7Y!Ep7!v@fB*z?AYbAM
z;R&(WRAX*f^vmLb)|?Wi*BUg*agSSFZ_Lciy?@;Fx(_K7cG!BLO2L?`T$2fmP@Dd2
zjO)wD+~wlJ8^a#h`;L+Dy0M-I42R1thUal<gY(nhWMlw8)3bsq!N00%5BvZF{QY;=
z2Kaq1{DoY8lo)<MUn+f6Q(fl<{Q9rqgad{xUg~gXz<L8jlbVGO^<;uB98h=Y2|@<q
z|GCCezg8wWxD!g%W#~gM(f?V?S`GqG6#^Irx;FmqTyEl4n`u=fB=00uz@<T&%ImzY
zb`%IpB#py(d2PV%^l&Ta?rjQ+$E`lzl%M+hi`*T4g2ThR*KYy>kc?s#vSILb<fr@c
zq8Xgih;HFfw(Gz#b?|GBUw0jxtzcm@YnNc2&w?i#9Hw0UN1}Z-@nc3WXp*T=aVLZ?
zG(`t^{$5DGzZX(an><Ozf26C+3>2bVen9;3KH9!MfB-)5_S!b6?MH#H1E!3Gq@?|H
z9Tr^z0AhlvRajjj6O&9Aa_Vb=o7kE(MjRX*ix^NEfugKi5)4a$=?s9$Qg7T_4z^QJ
z3iHy%CF5qi@c4ipOch$)@iU|O8-wZ9+juWklS0MyvY8qC`<6=%BNJ1F^DZ!3@$NpW
zdp64){1MGGeiTr!Ka8Pp)b4GAq6W$-aIk$kJ2HY;Kty>ZhV(Si;U_CxH^EcfI(4%L
z-4(c)1Kd0Gnm56B@d3ahm=2&HN)>PI1Bn?7=f+^g0foo7HL`cFx7ZWjP$V_GJt(?&
z?nqp{nftY_sNe@T4g8%{>bD?>ADf<jy3qz;W^b?M$-eK>XP_&6gA2}WF?3Ju&HV<)
zH8_(%dER0<ir49<XwdA=iJy6B(-kO@y|yjta~25FW3cTw0v(0|eOYnwfCdm3UfzJO
z>jO)*^bDJhn9ZrupY;waajG4`_n@fRn6|&Ny7H%gHu5GrIJo;YZ*jRB{L&5m{CPiz
z?B6oXkr|d&8lNrR?e#1H5v2DS0zPN!vD8xeDruCIl-OHkVDAhr3x1RxMF1*axd|U_
z$7N?z*Vf*J;@i)j-b3;Ej|nDFr-#J;1Pc-PTDM=H6HS*zg20i8`lg1)IP8kL`ueoZ
zMy)MSZ-LR)YXOJ&@Nh*?u)|8l5q9VZK0rdjE>eF>v`j@$cW)Rit|$ARg8z{{wY?ve
zqtM?oruXM-ozU=blU=C?!%vnw(eUXbA2|Mkdhg19C0AQH736oY7pA7B?i}jM!_fst
zWoJm3B0e#3h*nWi;REDwOEEDqL}1wD*Tb!Om?ifq>#TkM9+Gl$vXMy@(rX8e$`vS~
z{E?v{Iy4j&6SL3sA+m&N<a?tJ2m95)ZG@76>(3_Q>d><P=iJ;Ql#?F9ruIb<6=RZq
zvVqcLWo4DR$}Hd62^KI3J&buWSi7+8GRCelb63$_XvBY^__r#Pj+PqoN6b@+F=1kr
zYL}A!$LAfIl*;RRyO`94V*lQu(9H))sQ>hQj*MHrl{hV%atMs@ClwB?X>W3SohMVn
z?p1M_$V6W09;w;?qtc_^z94S;)pw&qj}LilLR|T%-jiDtOS^%QB|heA)R=lzB7u{G
zBzHExpuf%5OvHOuxodqd{@i4-9kSNVx0fo4Or=ZUCc#6F6Q!1r2SvkO<iHB=!ywr|
zb9c~jM<aV_h7Qc6zX=}3dt4~%PHCFm{iOSX{^o~&u>fjX^V}}YSGs)ELP^KLl`$=w
z2W~|49>zqgHtqyAYRm_=g<SnNT?n<mNF$ag`nkPTpyn&{yLwxJ>3$d$mwxRAIz&o#
z$Z_~DAL30uA;HjY2;Kf@=!!Hpp{a8uKxk68P-S5hc;A#P^+6khazUg;<!DE&AhD$t
zfv^~GWWuoYJoDYTFvokrOc{<77^mpgwk<69F0`D(LS}rJ%R##<GP}i|1@H|+z^(O4
zCG;xQ1X4Q3TU);8ButNLZWn8_3KvOO#fqBZ>8(-i2?Wv|Ymg{l^%K5gP$V={l6tNI
z6+s<rTI?F#Eo#~Ava;P^ekBOT<n^^0`S)JG{tUbF(+xUC#&s~kGHUTMPJIFf)nH|u
zD&#_%1P4?sm1Ej*Gp-=PUjmq8z#MLxJs?O-U;ZfTzU0@P@?Rr}o#bkDVxjcs(IlxN
zeZ{7j!ei_x0xx0y=`-vYf3~;FD=PYcC<O=m=UUrVi($hg!J%})pR1b2n=?DC_|5<!
z!m|oJmKh!rJ{kzf&7=*3{$A%VsHjh!hOb_)`7)IwzaX!O;~|fQA13XbGFQ*wX;!68
zA=kytZ;j|{%5=AcfGz~HLO*P5Y<5Et0GG1!zc+#9oyjCv8z3Pe&H6^Ydk5ZB0|UwI
z!>Cs>2t;5rf;{XLokt+5SHf#sMVHYk>8o5g{VfvNTES(%=LK9B6ecSq{i(|Bo$fDM
zLZk|ci|afORWD*Q<KxG`CR+f43xa|&L_Jj_!^YCMEiylR2q?AP0Iz}YAQBQ1LAT#t
za&io`v@5XLGpL*}h#0Il!<BsmEcWu}XGab;Hb4c4R@!pgS-y)38b+Z@D72W)o{i=Z
zUU`t+0yzyicv!=Z6}9Gjk?IA&f=O36_fnyxc%X8+0MleMZUfHWJF|P8f52wzw!|ux
z5At1B0xlClT+X?FJ_4`WP%b{+-eMb)7jUXdq3Ii2f_~5Ia{eut3z+nRDKxlj-Ap`M
z>OkpjINl@P-UgpOa82X}ctfu$52T;4ecs`CLe;LKtlViEL0kvC<2cn;*m^;{=HjBl
z(F5|Y&@6xj(6O=GhJl5&k`IM!!T89C8tdsP%KG{`5T6Z{)r8JhcV$<_{_X+2DAnQf
zCva~ikY(stZ(CKQho;!>+!xR!xg=$@zzYmp@-J5=5l(&n`0-;64GjtkTh3MR7XVjw
z&%JL4^$t&W_9mE&r&6I;hSLxX0Ytpqfu_#JZ)Xq?81OY@yDb2P8rcD;qdq75g+ear
z@5aIAAMaToT!iD}<E8IF*4f4q-yX`CQ>H=P0TYh<FA{*n(A1dO?(gSEjYrOD;@<B;
z>v$J1Gn!L8eEdBqoxodeWg#7RmTaCbM<*SZ1{CaPJ1Zfrt*y%L(68a3IXGONhsrvr
znf>utc+!ZdViOg5#k{f*n9OY@NwT=PB+Ryzx;|S4<Cb85e@U<sPUYa-AoGHbBN9qP
zm~~#iejWZ7Snenn_kd8k{XX8&dK(YUt$=Zdy>D#x_FDkuW0Ua_gn>*j0nLB=R+1UA
z@r%7ALJ{AK<y>S|j^);uu((a-w(}Q?w9>%*4MsET>$>xuoe&mrZ+3~(ndWAJg0#Fw
zZHd%Uy9_YUf3F=#2%SOgfZEg3!=OT`ZECvubNctun~+dktAMMwuPDr^s)~K&vqR(J
z@$|`)kHnFYn5mtgR>X101uSj!8!gpsAjSa71%IjDG3^P1EnuHuyhdO|0pCVF2RUg+
zF3^Y3)6;W9BAa9&jeHi!Yhie`&?Hzdw9ty_etdw;wY+sD!mgwMcitj{h99$478RTD
zwsYm<pq7Bg1W1gu6?6Ajou4VEy7<t`?OIit9H(Z=Dmv``<S6!1c+YIwsqCC!`0icz
zCYzo^Li!K-bB4eWs4T_O&HQ190oCVHLXqHoQ@jSv?z2Y8o3C!UDCRX1@|x!<OjfEA
zUMeRfRGb$T_x}E@9E0n7hk=2?ODec;f7Nw!X7)?-lOp@f=Wf2^APVxme7QD|Eb8Tc
zd3yLhhfgUH<`*5~O~8WS$<E6&2ZA05UVttyC1zL+SqiM42m%7I!mpDE2(GsKivEL_
zhv)Vk)<uRJ73jEQDFm;qK@FaO^4!E>YWK+&*%gN1x;a+|+C_Vy4@0rk=yU!ff_NAP
zu4Oqn%NrXWP+=r7v}Gu3Xn?=Hpf06|yF8#|@5Ggo?>!Yv;=?Y<z)zs%)-SgeogEQk
z>e|ptWV6ZIF9KTT%h#2D;poqv+q$|6=ud{(ZnUZ5Jgs?lJ5KhVVRJPkb|mS)=}+N0
zP(&vz-?qPr8dTeaGdG!LbxA2=Y5cMF&?KtA*De&*ySOU&U65Hp(-2|8uh$CkVv~XA
z(Px+ZeQeJ<WTzjPNeMd{8%g&YB**?a0)q!I2R#7}8DLB@Dllc&{?Z9VX;aEGr9n6q
z-hklBZl=yY3v7sJC^jyr%*@QZ<fNtP8cHiFI2+@ypvSHGb6B3mg@u#vjo7)k9H+~^
zvW_AJj-koQ$(^fIxsAMO6BvZ+HJB+nFyFF?g?6>1ObBUmU&{kb178h($-JDLHFa+F
zKB86Zl-^+1_~FF?%tHrvZ(lv&a}I#DdcD<o|D?@dB-fz9QP}Nw3cr0>Lqo%DEYVQl
ztQY83ID)w{NbF}pf>Muu7zVrgP6L?i+z$OM8#tIDY$VhUJ?$-Qa?Lj{*TAyGy*h%J
z{m+*8wc?S8*#h+y=nLh)vr$n!8A|s6TOSTiPB233hfn=Zcx-!G#H6zTosgM?EbZgS
zM=nWS`ulJ3?|ca+<FV8Q4;bGI+`JCiWCq&!>vq>(yCr|s`?OqXC}D27_VIJF1-EKN
zH;eA{r_CgWv{?hoX}rR*?0`4TU^ScN{~<<p2GGUNbz7Fk>g9@w*5DbovJ|&n<YI7H
zpyoB(okz!<H)A68HSijXc8U9F&J<L{a*vZ#$0sLitj5iu<7Q>U$UcF{k7zUOqDZUN
z3zVff>ZRed#2QnFo%WukL(>GWNpJR9EGZhj@x*7dGR6%rDamvrQh!$MkBvkN5-Bdw
zuayRRGjY)9J)d1!?n%u0qeAEOk-V<55=cZeKV0By*xD)qsz7i+oM%)Nzz1OhsT_AV
zQlTLSCxSey@o!@>wCy_@T3R5LCrz)0R_X5im#(h6tgM)2R9__Nm0cgfK|$fj0vj?^
z0AVXqQYJBA5)P3xDw7{xVStH~xZ~<N?DlY&4M-h{V;ad)X;VuUJ(b&;KDqcX9Yr<`
zeed<uua#yjVp-O~evy~EYZ{bZqHnoqQEAeQt*pYfoW2ib3Ar=^5QUE3p3w-0<Cw!X
z&ieA$NKX%nO-*%mw89Zs>D#|sO4{2PXP_7HCb(<o-;0Wgx}6-&;jybJ#+Ue0XtM(N
ze=yOp#seBw_%Ij&H@a<g({WY0{H%q&U0YK#(C=8;KP_zz0#fKs!=?5AfE@yW-$zP`
z${|%(HX?^x3u_-@NUr@-{Ssg?Ohh!4sgfe+xzw)w$tz0#6izk|iM~MYzNmyX(;u^y
zZ=TooM@`n^@+>tZ`)b!Xn5qnLNwK-^GHJwGpBFM#WDk|R=8cFp`&mYpQ3Ambzqgd$
zgJm(%w+!PR%Bu1OVq({c%5;t|zbD;XkFu$VgH+JV8`x$iRyH??mn>Xt`0~WannS#I
zh&xS{$@fm~h7J-Y2PzZsnu`{pvVH5dbp0VX=c+M-%lQB1!>`p_B*MUMY3*PMd|6^W
z3KSK(kH2U2!7b|X2Loh$G!z_4N2jL1N5R&2Wu@-QL`1P?iFlxE5mHKm&m-bHI3!=$
z4XQ}17~|32P<g;g!1NHgCNYf+D$gI_+&93eNiyEsbf>-Pb9O(rIG#@ud*}QGf;m}(
z+Vxi{!vCiT&%*-N=d^P|mG6jWw;MP682An`=SKAlB#e+|N{A!}2`Pd;^Zbr2$9zCp
zQxeE@y4o}K*bGOUzT#(A+vXonzWE@Rx%kd>q32Y_7dou0%_7@n#QL5xq1>IRF0nk`
zF*wE{l$8{9L6##Sp~1el>iD0X^Ab^ZRTA{Rgqo#d6P;N{SJxeU0KL6@a!hED>mGlJ
zqwae+KQb|~KT((f8%Ucs;xi^5uF13RNMFF`^Bc#PyGn^!Q^dh4*7<bV@C^K`VA))p
z)Ce2dSXv4|>3#5%{~1`pf}R{Ul-_6a<;DRpfiTX71%A}6((vNIIyTRX$12_v_)|Y3
zNvcL-L0_c<7I=C@-1hTlakL>3)*PI=L8zfqZ{-dN#w1dK_(w=zME9xTC}IWWXlJDd
z)^G<$btQ9PD^sTgmFfamQoyiB8;}A}rlqB(W@p*;#v0q%>Fn=2_e7FFa05F})SG$W
zJ8D*2;<D1l!O#jKV}y;{-F=pU!7KFSek=4H3$2%Ltj4=x8*NWjNyi?r0$&-#Y&5*!
z$`&OX(7!)-;NK^vBK748kOJdSEI%DMTHtJlWGC2C6O|qHgV;Wfb$o3)gz4Jp#&`&P
z=MqjeFr(B0pos@=DQ!H3pd<3Ka(c?P*cXQt`ukYR_9rWH>~4oTph26M=C60&*oB(7
zoTwjRjfif8a~Ght-HQ(>Ca=?o-4E}ryhoCX*#6SMZOI;vrPe_86`v{iO+`d4)4<XM
zd)IFd&Mc~Lzu8zX(dx`-e^lCEe>Q;CCRw7rIb5WEpo`(@x`rjZ8+uSi&)D5*;PnZU
zXSO=89Vt+m>-}QF@Zf{pUfH1bXR=O2Bpp*mgg!%def^J6F_^;#<<poheLkzH=pFSL
zd6yMaKMT6``{H!4L(ct;gM+a4NUUw+y-+E}j(I%lCnX(3HH3dKygk2vh#k%|(~Ab9
zp=ZCp2wJ|~oT=dM!@#s9D7!^HqqZ^M>=C8C0!8gy4Spxt>zKpeUza#VMHjMvk}6~u
zxo*uPSw9B_Xh9?@ImeUx&d&P)y?6`{!Ev%9YTElmvm54iZ$txcC4fKD05Uvls3)wH
zUZ!j4=t!m4Uo92exA&;`Q+pjLq!4LoXx%0dDySWqbkxcr+_OUSL&WB1VTcbmBZMSU
zIy+D6NcOPtCTL%nsu`g(9AK6QqtAH-kXWL1$eF2Wn^rwSPyD^g?RxQUJA~tHYHUZb
z{mkJt>KoGZ)~WGyq($E|JvToh8K3>AuU3^$mB2H)Hj94SdAsn)vKv~a-J8z3m}E(L
zC;_0Uk8I*DS_&bZ$rb(=3&4Sfde<-RZt1PV%~^0gYDdAn2A=9?`+KKdzBv~sNA8fX
zwhXl%1le4Hhg0Ei1Hsbr;^aU{^AcK2`gwa;_z03a1*DXY;AMJd(CU+MJKy)x2Nj+>
z!b`x$y-jg^C4e0#&ugE$3Qg9?BRFMM1W9SA9`)}<OE$q8vjh7&x8GlaIGh|E$EKzr
z)XaK3kAeu8kGJ?CLhO%P1I&P-XaTESl#|cP%O)TS3H+3ev(W6}^gI1$wUvg&r`P9u
z-yfX4Unaw%rt_zK&hr7h4`7`55*xyN0$bILj25(tr$E-}wA{G^6%NpXeB(FD({BO0
zA@0{lw$;hvWI*fnDohBKTW#^c7!y=~?SPnb_myzlFQ9)4fdiR<QSBv~lhmPz$1YEE
z3lud9tvh^L^ba!WUc?x<(nwSrc`Ptod<NgHQIWO1w4J55(6@1O;mzNAoD=xzqu)7T
zVj<_QzrQG`sAMR3Ngk1{lT40}H+i4Z5AaOhl@9@*U}RgP4Fr#CgR9C@f6Iwodel04
z_Xy;Hu#E7Mk3yH1qWPM#+X1uU4;g-q(EjO8GrLy6%R<{`h_p>}qD?$Ok!)+5F_U&@
zGwZGYUa<DJ79X@U%YsUJGh~Zvsub?~akjrwrTZ<J?tP$2adA<sG@|ww`{JQ*nd1LD
zaTc;-mT{@qG=>91-ZpBPzs1Rm*SdR?&(h65Y&2hJT;1Z_mE%qy=8cwYRz)sM5-vil
zDNdBTqnQ{9YtALTsv>5B7}d<oT1BDS7$+*h*c9|d!f_GAL7e^owJ-n401N_<b_n(G
zdl8s~^4^B)%^aB)p^jsnUAw_HOl6?PfTyx5<Rt@hUSp#g2|SH&=TLnqu7>|1W~5j3
zR||2m{=@A$2Za^S?-Xs+fp?<Cu-SOCwZm6r2nlD;xHpfdFXzZ9_$@N4x?S53X^rVZ
zwnx}SJ~YJt7AxpEKMx}PuvoI`GkUp9)?T|{a$Z!W^n3H*P`tSR5jxS@>Ql*SoR?^V
z@6cF`={HGzQ9l%+orWj(>PY{rdc3ZFV`)@UZqS-Pd&=VG@`m{=p}oC5F>x}$(efxc
z=FsoGeuttdmE`mMJDb4_a}a911b0LHpF$fh0C*&CGJ>6C|EN2%bZr$&h5>o+BPFGX
z*{bhldR0^H?IwNkT`I46Wcg<RLV!4;g1o#(Kpk-I&i>x0&9=1UPH<(C2ZM$o{+O^Z
znb5|@Te<8yt=ZXV3FB08Fhpu>%#@^_E>J%|JH`M*336U*I&H8)@#jy6Dtvo?L!;Uk
zFF#?03h=^N+{ceIz#|cdLI_zj4nq9|99L0ET>-?F7HHi0y+AzgUR+xGxY88OAp!b+
zsT2iqo)jWzV^(N(Ob1>u(MAWh`5#3;+IMeDej*uSU~xM|B-RuA_issjq{~`MjAf(S
z8P>qSmXf0&Z3EN(MU#io9|H$h$pkv{7%q?b$=)cBAp<NN*^*I~y-Lw**_YjQydP2i
z_SU<Zc~AcmX6r$0G3DDKXx<0AWGr|0>B>#I+qXxXTGR5kyaI9a!`gyF?x2;)B<8d)
z4o_jX$7)uSW}`)<p-<5~5TsXie_52trbNiTATIS;F@<Y53(XpFKO=leAU5s*&!=5y
zbQ}>}A@luXonuZy*W>}~m)*NcNm?aGzAH`c87_{F1XAu4f$^QpJhJ%te-{1JWRIK}
zHM$KkSKBc^OdtX+=^(i1JEZ17t6Nu71EG)IZzPZ~2o=9qnOVJLei~0FBC9LE{o}gy
zV`bKe2>dc*l}T}2fw4-q4Q1wXF1%^)W&3x`gLuzgJv;M0Oi{ApYYRH~d|?sFYpvnc
zJW|!sz(z9tcuceW-a82%dJppydtJ30Y;+Q{L@MbkWBVjq35Fq<Z~%z}NDjXH>*}|6
zq4y1tS;$qu2bWt&sEZ*<5Yv;-y=Ltla0`o<w`TklXGFdoszu^^2H>lj433Pjmy*h6
zrRrU$q!tsqfb~gF|BL9J!L?Jn{#S({>`LXcB^6o#00DZ}(@L{n*?6M~Hy0i#6NSCG
zORH$7ub=JFk*uPEPkEh}n;QcI-!7FYH$mg?>LP{^Q)0Bs3*k~o#R0J;lwdIL-fD~Y
zSSf96+}7CqqDUM55G$v=Tunjfhe9{OcjxZQ3`W!nNNyqt)DAGs{HYJEJscb>uz3zE
zLh|JHr?lyVgK=?wNt(`{aIWJSJh?`a6Ie*sf;*lS`hEBkos!X#-J<YP`>B3d9^$L`
z$h&wd)I@@ynCj^83sL;oqE-5B-{SaW{n+QpUxS86d!DISXisaq$0N|$9$Nd`u@*Bi
zU?wSD-zePV(F~MB!GB9_C4_QGRA50Du>Q&^k4n1Z2L1fY>qsz7hUh!l4XtK#E6X#F
z2dF1%PfjEd^!#xz<mLTed?QqQp{JoCj}m-Ka}By%gU7?$7Ty4A@jHEsgb)HwkNb(7
zW+P2IZ93~toTJ8DzGyK7=%**t>q0Js#-ZPc3(<m?A9~)?-Z;#v)+MGoK5LJUit$O6
z`5uVor=N66YpI@A{x)U7g+Z}0)_tDIaKoSGwoV{>N6^sQkI$22LWvyycm<El2;31e
zba8eDznJI3=JAba?5O<0&a*J?808OK^(ZMpUx5PA;?EynN~Din2qGdHTT)v8+ky&^
zya;h-3)xaAWNFKgu>yfUbCqToukS#JPp5cMOiZ1!@BYi{=hTy6fX?r*oC_l^5ZVs*
z_y0KBc?&4Ip!51R6iTol@4jeQm)JWzj0p{0jLLxl5L^Y8W7>EXhMj<n*>oN>$vbz9
zWD$blXU9>xL&)J}(4KR0a>5V_affeYa<WvjkOp}P)=$clTj&AlUf$k28tEmQ06r}<
zSJNjZCdP$^^ax+D^5S<tM!hgZPf+X_mkKEuGzbEs0;|ptrEg6ThQ0&}M5=ts6jf5z
zxV2f=giPMmmyi#0)#bIdARcaU1C?flUWZIHp8*MC7u78JU=39+m!%C0U;6kBgE%c#
z8WEe-1ErME9A`=U!Z%aTeCkX^=-$i94I~b$#~JCkkFj&6HDX|W(aXp4@kw@<EW)$>
zbMZav)%B!>i`YR?T90+YA-V?*Pj-3nlFU2CB<Egv1}8?K+N$f4pz=>XwJD>kPBF#_
zmPL>HO0EbONR6249pqrpQDEEO`4mdbeld6%P}J|~>h7Y7S@Z+On@gt<r;>6P>5=@I
z2lc)+coP5@eH=2Af*yn__H&_Vbyr`*DYsT%O8qF;YT+v(!)TOJ$aJ11n!@FEf-_O+
zCLV}h-_J&EK#rbC{y?m%iaoGxPNFqS)a~*f>HwbkW{{~n^Bt<i-{-!k?VtQ&Vr1lS
zl1oNHdL?zWRhbhqdLnX8!O_}=i0E6*T`JQV4&yTV2g8T;46ZP046=nb;#OTa8sAD8
zq|t^h!7ejjXMYLrusez@ZFk-Q1*DIq@$p<gxRjz`8XZH*+X!QrWo|#m>%Xo;2JQN@
z7Z(PZ0SDlrC{+bUFlvtwj=4>Ni0h*dZ?lKn?TqI?-ulu|1$;URieHfRl@kOO{HR#(
z!F&UQ*qlOD8xT|&ErU96tW-Y+ra#&xy4euE6i6EcZgr4}ETu42tm6imi(m<qL&d67
zmhR`*w!d)+mF6*QjnD+7@!FU>3MyPRV7Us2Z(nM8B~}GSu)=)gz63&{SLwE8C)WS-
z&o5ywNA7tEGni34d9uE>6(RsiA36KGSxK>Idq!y76H-_ZEYVIhQ)`Q2XLS>u;J(s6
zKp9M1uk9m*N1$YQZe$$4vja@WcHgr6@4^Lbkbww^h070!e!O}>E@a%^33&jG&Kr?r
z^HZhz(<OQqc6N|Ei%Wh}BwWzx+Y5JhWMt&>$o8~MOZweH)MIa&gcvr3gp4_wjdwmw
z*-Q1ym2X}PEZmsM_G>Q~b<qjRzkvEMbE;{BT7)OXDCDNnqww`p-|aY;(m@|&w5<6_
zyv&7!rDNi$&vC~g=uVW9DK4dS0ytiLqX`d!h%*j~`t96NSL6pCRnF!IZ9iy{RQ)W7
zCM>B`ZN97Wdhfk1=%cc_pB+*xQM1(Z@QdD*a9>K?zP;p5Tzh$a{GnMwS~<H<p?F4$
zt%T^~3KNg6@WgvYt_j%h!9okX3Zan|wH&!-&<EZF1=FZ<HEWYb57?JJEyHNo+}!`w
z_W;$Mx|ibUy^{2p^MAm$7ssG&wkn7ocACea25SM{h1ex!5d*TZygVwiYVb{Jt!`(B
z1*PYk80%GE-S8zTz46FB%bBq36;Ib$G%KvT0xMqYiXAAY5d1iB%f9%Wf*x~e+jzmS
zMyL0yyNC#1HtB^@qdgUF_D(n76Bc%i0|$4C?5y>7rp*QUrWX+}YBzTnmiBmGs@V2x
z8{&1Y#(r*hZnK>-`z8HW-~d7d*DE$k^5x@bfQG1gMt@6Au7@X&1Ly+4z;p=Ue0+9x
zjBkQ@c=FyzyuzR-5N!noi*yXU=2q#iq82yC-VJC>*1<8@ZIt!FTky;YywevMvfRG+
z#z}#dP>Qe{WrBzWsyYSui-^zduCcs1@K4dNMWt|BZ<VD*v8AL>jmQRV^?K$C6Xb)F
zi+PnBwO%jQE(N<opt_LQ)818BcGgu50QR<Y?Ne|=hgpGtcU2AHi_!Luj!}fPz{R&l
zSHf?xU@`io#zqc;-l+DjKs)Uf05o<iU_n-ak=u?mm^@=kgo?3|rNxgpg1$~SZP)YH
z=<9UIvjxlk9eymUkd_KE{=g&*gPUTq&KqN0@_T2;dmw(%DNv)d9f9Ycnj386pTsNV
zjHaQ!tu*QC$Hra*TpyLUpsWn^F*Zr+BWehSJmR^CRNrSzhuKA}jQ6S~q%NCt@24an
zuv$)PpLOuot|U?20N-UNcSBDG%+?a~4211xho#4VVvV<#_zW!?6|hKxdHudIy)x}V
z_cuamby)SumOzUZBQnRb)lyAKZfDT749<)jL<_Ohh^gAanhgw=eCqt&mhXe!SZWB9
zUkZ{9ni!o3x~YBG>RPhpg{t5^<yWn5lMxqJ8n(<e%MnH}D32UW4~Os;QHbNZ-zAZS
zVI5UhR|h1IA@K4i3L;joFp-(q0b_N2ef=z9w_A^=;iF53D1q_hXs5)1G&&@4K<PX_
zNjPr?1CMa=C^!z<r|t{)eNu^i18vmcpbb(XS008znS(<+cX<7g;BX6S;*AThc>753
zj*I-&$f8;Nny+M%bP3JS)+PH7RxxeLYT59Gh;^DI`Z^lvsb};^tUTYzwX`oOY<4W@
zyf(W3VgVD*&O3u58H;^yEkHbbuwN;h<`EwCnSFn#WRp%=868V-O*g64l}30RAgwQ-
zO`e*a^bwe5BCB3Ujr7?2Hk>XPfcp@Z(mBKjLVj|x4`DXy1eNv@JIk7z>Px^P3_tt`
zHh&1J)%{2TILM)R&4%$|Z7tu{O^t^SB~eZw^bQ<!yLt?Zv`csYlnPgaruFL=ZEbC1
zV`>u`C<dhSYxkeBhqB+hBT&xX;Os~auG}8=IrtuAP)%GJ*`O`2tWbAs^Ap^@9p9I0
z>VE#&d$l(X21#q|u5w$NzyW}GIA&1|lEFr^0qy&{*+f$K?Pvz&Pco05Q19|tjfty8
z9!Yf?O|JGOxJgL=o)I+dUA#(eSQzh>ch@`t(l*zMIFx}9)Z`;CoC`5(944I{JjPx8
z#2<jP)dw9c3kSzFKTxR|g89|!T(45dfh^Dy>%qM62W%f^uweq=N=)+l93_4yqRmIU
zaSOR?7lY!D{e|LXeRw<v7q<XSnAT@&|F+vC35w|5cs86gg>o11WZkzaNE07bk|U{5
zBZc+kw<Sos#|z*5e)8hyhSl4j*AGuu4J#74^fcoz2+9F>&*HYI72w8C5ZQm2EqV9i
zUee)~sIp4X*Px&v$h7zk<|>xL%lAj-xXcGrz;hr}|7*R2)5Y2GHWIKOC`IZmY*+^8
zkltSa3v%6G;$n1tW3re5Vmntc(9q5Ss(wxp$CYsA_v9DQ0q8Q9tUe_M21(TDKI#ol
z<lLcN4ed`MqUzIpb@?D>ZJa1mesJ)kl}cYnV3-a51<A+;t=OB0tRv*WcTArc5}tAy
zoC-Wgt+HSn;_&J%sB*G(KUn8!aND|f=Q!297iJet(d2?J4u5}u!4qU`Ur7s`7u(0|
zr^}FhJCVHGY(H0L3hS)P!?>^;h#%nH>FEvChxyQ1axs-dFXJm_yXAFCf3~m>+nhHS
zp|60FsR=~)PoAiOi#%+&wDa}Xe{YEBAt9YZdP@|!V0tT#o_R0hXR_z*RPNa1Gwh=I
zkGoOP(J6T>Iie|=Z02g&vNWKwu>hPtkRO$|-u#pGjB})X=AaHa?iDlmt}uoqCzv#g
zWfw)@pwr(P8v>zYdpk`7Dj4(#34LbGpi<e-q1Nll&07lizPNVKHZeihXUs9P0wa#n
z67+W`^YdS%gXi8z)A!Z-b0EEGc{|R~5SB6G6CM$fn3{toDrR|>eUNlCGro%wZzz$1
z75A2kj_Vd$d*^cr-D2%ekg5(j0NJj;9_2s4z%d>G@1a$y3Q#ePGz2t$skKc57*6sC
z>yFs+C$ele!a2#)Y@-cm_pr$Ly3dKf)&t#uR*Yx$N`X|owgD_I_ZKhPpLYbqXbHwl
z#P`yH<gmTB2da)!(5ZbHr>25&WwhtvY*m@pBFh7!3^{NuZY#Y6L__}j?pj1B6B{Z(
zI@3j3WWEA`z{UD7b0q*+Pl3&RQP>#^L7@=ADW+u~`^1qjaNp#Ge{aj17ab=`*_=Ie
z3HW($Zb{slpaOPjdsd|hS3)IiGbGOTi4ypU60zH5<WEpZ^xo8LT%Djw5E+kmZ#U%m
zT&@+b;#Ym<2Mj3}P{|+uoUVfd8Gw194boH*iRMG9f|j~^gTo3batbsPEG)$UHMQ{+
ztG{h5E~cWw!o<v`J7x@M@jeBwuS^k`J%?T0oFHdsH{U9l4{}Nrv|$hr0TpDjV}<R<
z1)%tUwulYWAU3sCEdZKyFbFyL+EfQByhv=|HQ>|d%2uicz>MdE)Ay;ly5E3~1ZJj-
zonLm>OET61!*GFvd946)!!`?=PK$w^2;vsvt8sZ@TPx0AMNva`<}3+0P%CL##;6!t
z1_Kn#^qJJ1f`O^v*DrX}#KZ)E0U|cM`Jo$G9CUP=ja%P<(o%j(%42!WCR*X-AqqD6
z%b+H=gcNqvDROBFgAt&pK-0AxkV!?~oVf3I8)b;vw_aUGhggyT1NKdz>t$W6gT@BV
zVi+v}o5-W`#fuZ5r5eW@=0ZGE@9Gi&3h)31e1^&W)=0LLF3}SUoyNjIf^P(OD+x%|
zuGnvPp0m{OnGd%DgPm!;2%{?I+Jc&S(SRd)OY0r|#8k{M<`pBPwe-FU>jp}|)ZiJ0
z0reFJd+e!2rZ_SEBJ;!5Vb4EDyD%2QW1wkC%~OBdJ+`#9;2AbB_I{JaKv&miubYB2
zzEvI4B5Aw`hjf<Owc+WLd99Wkucf`LusT|fX4DmE5ieCQHZj(JRH7-(7XtR{RH%X<
zxAG<<-u;QU^6ynmIV1AB<Miz`xa(P(e4$=Zq%XeVP%fH=`Ob0>h=`zs`nD(HP*M_j
z*zfLnncB4uwA7@*;u#D=ytDgYTLt_gd0#+y?{y!a92D1|{Yo35xIwJ0pb$2U*t--y
z8KM*7C=~JfPNpc%&Gl?X4FnIs1%dHY6mA3T8$bZuy{?kus#>8qagW9kTf5bW`|PBN
zqtA5c28qwPsPXKN%Y|g+#GS2|cy@aCk|v%M0Vw^X|5aahb~c1g5g`G`D`pFz>GPwV
z00ncK6?TylwYD&Yd4|ZX^>s$EX-0xau*p9)31mtGG42v537$i_310i0ZIE{4;o<%9
zhJi#T!JWuQEzPluFr4(bn&pF4AVKW4QcDw)8xroo*=k9WTS<G4u$XUd=oNRI0U^Dw
zudnQ?(0>U|nAHT`lfzb@tZ8sGI(6NPQBWhUXo2ZBxdx3M`b#mIocR`CvCP!kk6j4m
z5qUv=NGPw^^plE(Rd<%BpfB1#B+k1=0U=Q>(DJP;E`s=0pWZ`1^1}yjFt7yJvY|1J
zbHxa?9riiM12_PQS+(UT<a3QKM@*z{6XZaqhYM`ZFe^KNB2!OSx7v0t7%hf9dVHE6
z?D`dYqBAOLm6Cr8m;n=GS^rZiH<>t8>(N>iLe2obruz9oNcht((_@ZlV2f$LH>9Aa
z%i*M%miQZxA;u{Gl6~|oSCkg5BW7X*J*&uRd!~=E;7!wm*{v_(AykryJM1HcULuMq
z#Jsc*r4$sbz-*Yy$?d&v#k1{22}l!xwd4w{nrf?Y;P_bDFbpn=dY@>ncfh}F=jbCb
zegSV7Dx&>^1K2>o5b*{qFW9rE3RhV3ri!!%U?d3UlY0<SSbhh<+>Z;7pV`=WuJ&ew
zx~#FW(GC>D?d@Jbtok)qx1#T|Idh$ao1guq7EG=HUBRPa@cBgL*y6D#D=O-}Y5|*g
zWbfk<Pt>qxr9Zwn)Nw1J$uCvEAmO|sGE@tHS8F+ykTx%MWaRLR!gJ?z=`9ygiDMic
z{jWi>&Th2%HwCwp(yB<O6r|twr?@aOl~){?WZwdqW{n2bX~7e9d;kWu5dHW3C`{-0
z^b}fgg<;thVEL}_f{=l$5WMAHA^94Azy$ueZrYdNmX;Po>g(4$PRh{|(OcBHda|J2
zT)lNECrexCeLQngTY*B!ys)jgzio`m8A(;ihR|G6AKc3?$IK35sm&!}G3|`3P6@{w
zpqK7JcMA8}C(I<nJpG#ZctXI6x3_@H{Q8gn5?vqdQcDBjp4&)lH}BpB%ZW7^&@jg9
zC+dDCAtkL`9gPKkunJnAZA!Wt-R_OQ3R1}Ipv-O>l4oe~jhbnh%xTbQ3oU6Ij=@dM
zmnak$qh6irh-qg?OGxKuluT4_d48PF_$GIo3>dUS3{9x*y}j~)$o@xnDaTO9r;zjZ
z>Gqv22Fv(cb$(zs<9t^J&MQNAVKiTX<{hv-6N693kI*5ywOPx6foU;I4t_!nZ8XOZ
zV-ynAqn{tkJp`ue9S{rp_*?+$8o+L2V?)UFFc-K+CnqP$DMVIz@86FE6&Dqm*xAhk
zR=uOA#aIVN70?KnIXFHJmfQ#a52)Oz^EQ6|gyo}-gEI^?Yy5;WD2>=2H&zd}2n-F?
z0G)7%?)`&V(CueA6#`cX_$6F?M0u2;@tkYD{0M_<ki}i;kRg-1@L??o+h_(5bIKFf
z?mD8!>K-*;_K6);-jQHsq#^qdA*rD5e%c&XwjGR?Dk!57#Qe6Iib5XIfF~#%2)e*~
z8r?$+;)@VF0W&!eRny?qRWh$Gk5P$;ECU<@6Lg@ei#R`e_G}ZHsrgo4qdL3CKrJt*
zfy^;kSy|xpCM!_pJZ^BT$;pvSppODQM#T~gZvp$$g#1+pBUjgV$CYt$BM(BwUu+UE
zSHmGb5(`tx&*jD|z|L<kf|)shEY6!V>KYn*Ks=e*f-z%*A(%w=J}f|!S!JcF8!N7N
zMAsyNm5E1dA%Xf>2ZFd+@5fL;Br?$*Uui8lxsZ_W!}gH%Xp-WC2!sHNFJBknC$>Nu
zm#&$;5g+&~LN5%t)hx`+^9@e?jEumI-PyiXK@>a>5CC-QOz4uE15<x44O*!Dt|BrM
z8I3#W9;{y+En&?T=H?;~Bd(0+IokxQ;S=UI-T0Tq?vY;dA{YvQ+gHvsTuV@V^wgD=
z-D`nZ=0JNf^j8{S-vB;3aD*|cecXhC7!hTF#nmUZ1U1pcWo`>>z>(}=hNP*ar1apy
z`{%~RK=DIH3HewcO|{PuqgIxF4x`*9PB;?pzy3Ts%lThYd~;O#&Fr)^eJ`&spuB|*
z3MmbnCMpEzq9(v~0)Q^q$<o-^uq0(0Zx${(6AKG0*od^fLKkmuUkQYXZU5d6kZ<AK
zX%TrggXk4!-TyWB9g_BdLDvXzzb!3>J<${m`s>TfImN|5AMS$f3>G)fv-Rc8&B6a^
zi8&mJ0>R4?TD7s!(ZYxC9LMui-swmjNkEXS`O2Qx>(tcl&Q1W)LWg(H&zPET_DxK@
z^7TDG(Gm)pnbD=MKtCR)S0M%NWfXe^eu$($)Mw2K3EkkRCF-!;2>_?XV9L<KjP3`a
z9G##Y_lvV2pvr*<^do)!|7vMN!7Ctv1<Je>QO_wrdFHCEXwO|ygqy|yMIjUOVoVV5
z6d4(-q-p_n@31c@N5x<4%S%a#0+t?MlLWh<p`oFdt-E_?uEOQ!g71B04H+4&6@IUK
zR?_pew!-|BN{N-FTE*rN2>brMk-NJ<`_e;DFcE-M%45%b^Ken?zc)r?z{nfNIF3dJ
zybT?koC5T~vskY{O#&svv8>F(KR~L+#;odJECBq$09FH&+@@%XxxEd;MNUZ;AYs<X
zMp=V28ldWsj8LquiN!l&9=n0;Qc{3V-6kc4;7A@0j&j2fjbMuhg*FxYl9c2<pVL2B
zj<_cX*)<TVlq*18_FvH}4bEPjk@5o2)S+L7ob?8)ae9Og{3W;*g%HT!FkPyG8T=lJ
zT&n5zcbGf?OcmLSiyH?LCMZGuY#Hgn_R!nw$T5m^k{b13e;@EQ@RfroYJQj~r=+A{
zk_)^{3qf6|u{i|%+~nyBuyUw{jS2s8E`{Y1DiSFPhA;!SJ~ky#nlP&v7?5watWMD@
zNJ}F-zX3!`SpaMk*#{M55s}CLQKBIJs;VP?vT<<GB`AOfle5L=04x)~4ToE7dP`nu
zpIU>iBv>z@8;ooHg`k&1e}OZ0@3D34-GfGq=t|_jF*tuE#l7DDdKbW*qRIaozxB^O
z`~NhXDQA#N(aTGOHuTv`kh%XWa-liT)kk!9b%C@R)ZC!tlz<C$6r--DtqnG^Qxlq6
znshyBS1uy(drU$InVPk2d%GYu7F8B88+w$IqU!}MZcWW3FOOy)$5r;?)fMK6*Oox#
zh4m4}$4?u&iT;8GjHzp?C*<+}&8>PQKaLRojTH}Gz2fzX4y9vAW&hDz#}SRup+c;h
zWiDf!M(k0b!@p}MbVB|y!qGDpS9-`#`CsP+c?>JOz_>W52pqBNO%(o{i&c~>R)|SD
zRZ+onEv8ptG5qe8ZszY^Sr{KKC0}Yy^IcMh{Xd&$uJY?E*Iq%aM!SD3BT#9y#&%3j
zs`s{+0#>zwO#R>84wZ(C%0i;vxI@V6Vdyo9dY^Op|J~WM>0UiVJK5&6{WY<^(q9X$
zI7&G1ICFA>g-=&kEG$lFCduH}?c3$bd%wTxOF?AeTQAn}qvPX?lQsQjcZdJ}usD4A
z@raFaY`QEjlpyF|>!0?xmX+mqB8(P{GK6Y`J$Bvu$sjQI53sXXc|j-oeDR|XJr1BI
zk&&Y;qyPCF(0svLGRK929#pqV)ATUmZ4dctaQOGL_r)S18v||<6&Xpy_9%AsGr;oD
zl-C-5_zbM}`5GG(oXyE%vgUp$s2l4iytfy{B>e*dU>rVKZ6y`RY9Jua%Brjk#$>J+
zXM$kf4br!SYQj|0{&eu>cH0=M@bUf*tRb(X#Y6#};Y?B6FEeJ~XsQdku8(Cq<FgIl
zQaEXW$J+PL%7H&CuM6Hs0M!|XgbOh9D%g1v_10GQp3aoFL5Bz(XKSf#A=nWDy$fpz
zHjeMO<;K~P+Ob|MJuxt-*PbpD1;MA|kBPAVhp6`s#Cm_@##P8jW`xMzqa;aX%ih^5
zAyJ`_Y(hpUdlX4Fi3kbF3@K$Kl9e(_bZ5`s%Xyyf?>T>-<8a@f&wE_g>w1lo?iZsX
z56J~AK--4P{d0HsBX9r#Zy2gEKeef6)aV+1ZCPUNkIN_IQb54#?rH*oz;g70Dejo{
z<--vf=&bOa>>*)6R?0RyBal@8-!XDUKB@MG;%j-D&-wb8PzfQ&G}c@GZ(D2=q&aAe
zJ2FN>-y-nQKUwTsTKX@Ji%{7D{G|oK+sY3-dpq2M84zG%=E^4PmjM2E0L#IHpr&i7
zs~4D+|3rs<+U>jzNPqE~C;9kDm(D+wnr*$y96pbE9Jux4h&KfJZ^8@#)66m+j}whD
ztKFFdgeZJixk^o+KLH$Jq^Bof@<Bm`cW=VU|G!WOPW!u$^WX`W3-a=BAQ8&h13{?K
z)0E@=R~|d}Im2Sh+Ir5R($gz2dM;$|^81vdK#T_N9(>>44q^pmVWIPnj+1C2_`(uK
z>U=4+A?!ZR?&9KN>tM99Gpv10y8rjD*;%R`F#m%R<k7c!LHn(^(9#`56j<GPN#lQh
z5wYIa?^-xGISpi~c7cKLMwDR>nDRg~n(<Ve<KDQXUR|XRdG*R?eySAs0_kD@&Cn`i
z0pX&Eqwq<`<k~<jl^-7HV$T#`L`1k1h>*X-NG?OdfrT2KmnSNKC7=akjjL>@DyuH{
z+YY@XhaacbhU*2m$Y<H%W?0e1Ax1|+4le<?3Qf5fu28+pQ8PJvEmeGeE<b-NCZ-fl
z4@d)aaNt!@$r-XZsO+*Q+0D}Oik6m$m>o{ct5>xxTeS?{x42G|q&nQ<xK0cWC;W0_
zp3O^kXQ`HyJ6g3kuFAK^Rie@iB?W+XzVVz`*T)r_5n_Si6k4hgyd_c7QVz|J;eQ`I
zF!!6qnrmJ$6|)|~^Zgqh5%>z#4xyn47+fh80**v3PPfI<pYn2nBE}z#lwbW`wvFrL
zo1+vu>1*QVdqAm@xjymnv4YZziV9|h?Arn)nR~9yj?ozy8-MO)c&08X%&cIq`SHfx
z$Vl79jH|@vF_&Z&nSUCarKGVikl13%*!%eQ?FWU0q}&l{q=ir8h>sudLz@CO+)Ikc
zMl2vx%xTRL`|L9P-`6EDg--h~`VHzE8KDa9j^W(X5`+F63)&4*B%C431i~#kG#k$g
z3rBw*5WeV-IB>v6W)@6dZf-A1OVcDAx~D$bK@^C=-o7!f@z5e%_3`@ztYED>JNN--
z9+nx7yIux^Ry@R4z$~PW37>ayxksXmP^jP(UQf?OAa*15fv!uxQ?Xsd^xo9!X0Vfm
zg2mC+(?frjcSKwvd!MVJBJu5T)kfA(?f2=<x7vO_uDa!AIvN!n5z)N&42z!f#`Bq>
zUIQ&7Dn+_1JADfa$^b#`h(r4y*lK8WOc}i;c~($x?^UO`XEz9hJ+a%Oa3kLZ9=|%F
z9JfHyNhr0?l?)$VBsuK*XNUw#&tq=bVXV;`bMNiRi~>I+Y~RlJqA0OEr@Kkm*wR5y
ze0=|vP5m%-`o_Za_gZgC6{F7uhRICgkGM%p`VCQ&yL@_L)FIfFa<s_2f(5C_Xpp{w
z!wO=L!HY{rr?sAZItK5Y4JVy6Y4+I_=3^I|z5?8_%hQ<!aEEff!$O5Pc6WVr!_>!*
zZZCz`)?Q_kMy8QHv#_jtdHWjgcb^Z7S?M`_99yeON=<GhoX6EBSlo_&k82H!erHkJ
z>+Y4q7f~C8dg&ZR(W;$hKtQI*RX5)wC&!kN^{E^rVNc-W;2`>Jb0PBp9o>_h9Nrs-
zD#~Q(6{s22bBVsSIVP)Xb_g)?Jj=^_+fACyQ5Kwi@UICh|HrAtb7&yJ+A-sB*ln%g
zW<^4J+g?I2)xMe~wBkwb*;bBN);BHt+>U0s>b$mtq3uq+Wo%-iThYO<dRzE<obJ9T
z?z%m@Z#@pRErhnt>hUz$*Tep2x|JFXZx$Xg+G>KK#>wOzbp9kYbJ!WO_Q?tR3`^qF
z<+E*+{{EXhO%CjRhRHF{7~&{ZKjm3b-SSZ3BS?&I9Hphz$3wE*Qy+KDC@V19tM11F
zt%HQKp5;$9_O)n!JR%J@TL8r0xhCm5j}**^>}Sl;&mxWui7Dp@9S+%*(l~JxW(?$9
z{ckc@6K;kS;<pVoyJ{aS$jsbtmhz6}j>MixF7B-6N(qGtSvPM@n~82}R7SDi+v3d5
zsxKm7g=X&^m=sM<#Xthf>i2-za?I`E^%uc0LrR9-$M#%yE`-xnj)1T*%C?9Dob9i)
z_&60N7^c*{ZncR;^hBLiX^A<ZHeu{`^*hB|&qt?zK8Z;+QDO*1CSO$4g3Cd!{#)-@
znW}F#ly8@i+~tTkM6x5qIy)-MLQfy!ieZKeNq^<d^zt-yilxUdgH+1SMp*6>bG4jM
zmsJ<0id4GQMw=~0X1m;zFrfTlx5<_LY`I)c0&h{xT|WU0<;xH5+L}lIW=q`VAncRq
zKW()Q<*>TS^k3tODEMS?@i&xwNy{N`X;(p=2O+2P#~;DJ4w?AsB<pUwlDFo~B+)2~
zg%lDgOziKTpeZcsX&zA4!JpCbAZu9{+@L>;NLtx1A|{nA1%g@=f>XEnBP`|3!|ys@
z`nZ4(ByVNKi}JxCZs03^x%J9{M|b)-j>krx-fcBc9D7PFo+BY8RH(49SB<yq)Ju&|
z-VNgBNj+`Fx5*WF)c@3s7Hs7*C77Z`(3I2H|MdFx*4;L#k1e`1Cm%>gYsII8YM7fl
zM@8w={)a>H&dhYMuoS*Db{~279wFATN+mZ^ukZ(4igLbY9&zVR{msAdRMLf65MaGi
z9+!5Un3i^0t!tAXnmCo#N*CrgRxcwHNb+*BAFYj4%1s46H1z{XFDMlGI)}*ScETl3
z8r&=@ou?DTbw%`oAD^tRH#GK%B~^D_I7h^GOy{LWlagUfYit`@TVZSXL?oH8v08-I
z2^>{DZS7gYkIR6m=XwjYJ07alw>PyHK=tKdDg$20lT<T)y3p&P&Fni*TgEFapZvgq
zPd|-2kIymiU6=X4ZfftI>!ouM_E%3=&=bn`az+mgxwx^tbf4TBtSCBps{ed7E$hPz
zyc(uO1>}aGQy((TFKh_V+rk1LU0&^tS;n<Yh?2IZK9wW5b>`PE6pAu7vRNlwPh-e3
zj95I8+M9n_{)~t0)h(@rj}|HE+PHZ(Jq-=2-YwgvHIOcOrKMqtw@AezZBk@By}5p0
z;Hs-@#uJs|2U4CWuNw>8-D^mD=%~^NKW5!8w>y$_4|BY8GW4S-Zs-;x8<<NvQL=Q&
z@0fEf-2hR*_jVG1Xc1{)Lvul|UkB)gynlG&`t`E6x&mq6-&$d4yN`;>ln=p$<|q&G
z5wnYn-z&A=&zOhhCn6-DZ|`^Mfv|Ra<uAReRk68BDj9r8F$`mq$eu&I5&SFRO^m=B
zC7A95)2XwnVT1@OA_#6?%OA>Zn|wk@7jNx~piVn`O_aVhw>9kcZQD%UjAxXLPa&9%
zFK`OTZ^oi|od5p)dlZB|8!M?$bKUgz_uE)e+1@(ib`e@s>&mAYFze=)pn!uwY>3+O
z@1+an4|_RcwI5sT#|jGHH*#pq_^9oX>@(YuBxH?qBZ2k?G#4FT&gB&q*<FZ}`)lsI
z-i@G8RBfl+2TEj${)Ywp1mT+#C=)mx)_f1{-9y-TPN^QU6Ja&VTP2QyC?$HH2PO<a
zw+03W-S|JZ<Ur=G`IvJx9ii?N`|U?wTQSE<sjbi|i*bA}IhD2cpNk$rQB~D#{xQ+}
zPOX(&2UAow*5~eG8U@|J1#dV3V45N8G4%$7y-L>+{hAxa=;_Zrv-EDgJB{RS@3jRd
zl$t=s_i69AMNq*i28@aBip$BFO5x}KU3_ouF*~^Wd%zt-tYVXrKe#F%*BHE)|Mu$m
zU;NKIAresMJjq@NJeFZ+qjgiml5C<x2;Ru|?%$7BSJu=tw2Zi?(^KnpL=AbG#3wrf
z8&&pEP*ehk96eu!BwZ`3*+L^>r~>$oy+0(-iPg(-3QiBomEpsI|JfLBpCO?%PY^O1
zhqbKRtNDLO3tfqn=c9gRT}N6KEe`85D>Jj3Rc`o4OY7Dx3TkR<GO{;{;78Qd_yW%`
zd1@*PjwKX1`&lGQt!kuz&7E@psfEsB#|{ne38n1%%Em#-OKPb7g6iwHK`cW{XAPnV
z_A<zC&mG<|3QkOZJ>fcaLbm);szlB`wo_~e4+@BjGq6ZVNQ_-Y8d+>4_tf-sW(>+@
zVS4MD8;j6_2dvDabuskukpZFjB6G{PZ+0WEn>M^v(2>U0{bxIYHFYaV^dUk%c2XKm
zpCLz7C;fqzj#j#i_Mv`yMn>ZT0}UaPqv89Q_n8^h2h@SkhS_?Q{L~o{I~X7wE$uCR
zTvU`*Ts#ZG|1BCh=skm0Or>E204&*nF|-7(yf_RIKydz;tnZQ{GV0&RXS7EGGKGls
z+t;sen|Zde1)JSOMG+U{Cc+@<T;Vlmdr48C8)_>BUzGXdtN;436OlG=4ctlk8Qg7?
z$Tbqnf>}<(LN-Z78*cjKBS?m^52S^_oaJ~Z<uu`kCL<$Z+6Hh;@_)k~bfF}0@}l8c
zIpXcUSop9rTS8Fztd^`EM48$P2LR}!he(|t9mxVu77@B!ILsi<|70gACH0eX_20uc
zuJ(ckbv`*rFMxj@-6<fFGoOp=4rM3>_n={Fp<=C6np4*`G0f3u!KNDc`W0a<=!RQc
zqfZ%~OBmw?3n)n4gC$|CF|6pqg(n#Aoh!4ysOo#2O~6?(A1wPDk(blci<)BW&AKqd
z9v!(bwxghg<)s?ke?vuL&b<;R`&o!X9)9(lrcq-ME>bje6e!5g$Bf|bkI~UlNtff-
zC-U)rT)vcAo0#+uRExc%0s3`yQ1Z^5JK@<A;u$dte$%yaapRq-@hfFvD#4jb>$VM_
zKi`&n#4mOva(~(pTWK4V;8Gh#?Y|;Yvg{g9pMjYVLS3UW`1XcNtc2da4b%PWf`!G!
zef5D}YGzP7uOw-)%kLeo-!|<Hm8Nl_+gW!6hcU}-674V9>hX{%D7o4NJ1|RDz}xN8
zf73;p=D>Z~91Oef3Qo&M>?OXKo@js7>Ngy^uqj~h?1ky3qzj4W`@umL=lRy?hj{%L
zQ;B>;)sG7>+2`i3*1g@PWZ=)H{e<p|V25Z4H$l*^M4T1H=2lO9C`s=BgP@3Vk&9q5
z?aVN||My3=t~cJNY!RUgogJ*G^BX9Jod@*YrT5`(n3hxwQIxD*YbUe>NrHAJFD~hy
z<=F!RoPJdoSDdLz^lPgml9zur_K&BTn~{g8(TW!NH)5VXUW0MT&Yuz7F%?98q7GQ#
z{d;XQzKHwx@53AKKf{|?6N95iuc2B8u62CZE`^ScD8TxNH%~p}w6s`M_2|)!i*Xtz
zDvWQ#2w^t`fvz>X@+2-rb!Lds?>*ab#GxY%n5_M`H=l66F5HW0<^v{yG09yu(f}Qm
zSn9sziFQgkxxiF!Rqq!fXFy&MHGk3E_}otQM-jRH9sNbUX&xna`qwHcz3c4;#VLW+
zu=D%F0hb*f%|nV2o%H-Vc!fkK_EA#)128@~nDl?5tn80T%-0^0;yj+h`1I-4-CZcz
zMQvWEb=GE~Dc<>!?c-5e!wAh8`dkTKdB||>HEK%A8q7<6bQl52-NuXo?7y)!kd^vN
zzV*-zKy4grW=w!V6Re`tpD7+r3=e;cGdN&l-q!4X@_)GMgz4!12B;K7EpzKPp6urO
zH=1xj%u+3lm#pLCyI<dt2#Iv7kD<_zjg5hHw6@WBAoPTQmoG|yq0lrE&ffD#6oxnE
z@99;>ZCOa`>#qNRZ<Qm4DCo87-@K7e;=~!gGgt;`H&10_hr|-Q`umGnGi;AmiS{uA
zh;wnB8=W!*Fp|`A=PM@9vQ6P>XVD5DwQtkgLG>o=4PuA`Cw~x!4uMy7OnEd(v?g=S
zEdchXp{}@yf4n;t@qmVZSv+l|knSL^6^S-OnzJe@pl($<cCmv)0^t~a(~fR^V@2O}
z?l7z_&NGjLtcCHJ)bZor@IKx>1A_bF%D|4@C8*7d3w~8zbB})YyWV9xb?-maFLrsf
zD~yn8w=!{b<;%dp^$gfwmIuCFhx(@-&wS@P+xfdNrIX;`m>&tu<F_X9mv-)LYq^uW
z!$0<*LpXQ>a*?|8^|_f9Zeo(?IQfc%!W1mKYwJsFkyY^HdIVz_T<Y&aegB)MA-1>?
z7b9HF#03N*!f}K9z;muAchjQGzMvzq2xW%(kUfGc@kK<9pRPcq8|OFBi;5LaUjr|k
z=%GyjM-m{ySYMILyvnM%X&Cp}yFym4?nZ03gOLJ<5rW%qmM63|$BrL&?am&+qiIfq
z=UcAoeQQ3xi#D&xvaX^kApcIg_s$iB(VX+?7hoj55D&cYDA#>jCZ@fYvH1EW#{T?q
zl?~8Znr1Ma!t)F9?Al@k;n;U&o-<x}N{B_;jmF?&DmM?$0zS4tD~^1;Sx&i8dYMxu
zldd$W5)S)iKZeImlC%983FNuQ_Fe{@gs{p6tdi$%fNjPpK8o)cg6`M6La2NAu_WfL
zY!dcUn9Zi8r<?gm`z~pL>VV>~xVR3s^S9~}#OFfYOz+`(FF>$;YxJ*gLqk|o);q+9
zzO8*xH~;;-il+|f;mEad;%Q<4XuwA>9Rquy7M8!T=MfSV1jb|>_j4KkNC|>={cxYa
zd}?W?Z+)OV4_FJrI$Msr4CRBUNMm=&nLmJ{9;_+22R)Pv3<ms$>chj+GjrdnP)ayh
zo&a=MWc^GpUHSqK+l`Hl6ITb{gs#@8TD^3$h40|Six<hj(%XEO+~uv4Bw`lDt@1Or
z7o`j5ei*xypKqweU53aZ3*=dW&k(V?RmVhZ3z;OO1h)e>405i3klz|{8uwOWu6Ee5
zt?`zBNE5j;hR<A9UVh5$e1?|arAN@A9G3BjSPn^f`0zg4sa!aki3lr%x7BZdnEI3z
zo|VNNPY*hkf~!s##Q}|^&XqJH07US!pNnQaQOzI%jZt^b9Wd3pB#75s=50PzUS-AP
z6H|Kvm}BXuy@B>Fzf6TbG{=B<tdgCL4KmVH<ig&)d$%Lu`R3C58YAH`s~H>|wZ6;x
z_Vx+sR_(~>oqWmkSo5xeZE$_!qfK_s&JmS{?4K#^6v$Y)eExh8$=<ztcM2*7_#R)f
znVFvEuS%k9867>Jr1SAjS!Jb|@zaBYrkJsUoH2Q8{ynSL%R|^u*RMGd6<`c*GJS({
z&>O3v^)~vcu;F+eJtZa7X?1P7!MiW6c*FHia&Jq;k!5`D_n{}2%z?lkctlEPQ*(oD
z%K+mw-2Yz+3|05;&EqMjaFX#~tN&Pst@P9&r{hiVo>6*<_UtaK1Dt;n4BYXx<X+I}
z!s+J7v194SFaN}oeLPOH|0~VcMkf(dy_ZIhkKgwrBmj&G&H7sIc;a4;`=rkH#xXO$
z8nGz0F`&3G`md_2toHmRMc#P21zbZ=VDPO$^n4AIrxX+*`T4j`Gxs=rNE@hd?nAu|
zP56(fsK{S24$S#3hvj@Sw<K1Bt>bo+P&_t&es||sW=cN0!a4xcotfN{xe|1kRad`m
zbu#x083~myeE+d%3u7sox*Y(<0j%;TPoE+^0tHV@G^<yFh}ogsozzyq$9t(}X6Fu<
z25x`4MIwqoonKW5`k4NhdBDZ}?Y-(()mC0No;6(Olh~tNy+4!>A)loc6}D!3w(g-}
zh3P9toa!T`v!WuMh6kVACKZ1DDG0WLBO@byi&{Av2Ld<d$;rr+H9;G_S}T4yin6f)
z!hEbL@GxsCJg+(RKZDW7RPjjVRmusQaeGR}7omzUjpSkp#FRef(OTGLDZSTz-hSvY
z_sq87oglUC&gCP>)On^xzlW;YcNx)oE{&g?ZnK@bF&;7iRaOUa^-HJuQO=e5<ZXi7
zCGa^gZr@xUN&WU}F(|B&$C^S{`*$abJ72<tS-Q*z%Yi5E48^M`0SOf-Y+h<#*kx5X
zf8u<a1XmYP4J*@;-^+a34=`~N?^~G?$KmuFe1wk{!D6H<lSi6Awj4n|%ef-dG+>|n
zUYM5S&arrLsV`gIkS|r1>5o^AhEZpyh~DMLem6tKtX?ht9=HrcZ8)7mcn(X?a3~TZ
z9wLeU06EOKY2WGS96%-Up$XL+m=PxK|87AtfZKOhq}?3eaj;bvHym%6SP9jBoEO06
zJq}NZqh=n<=S7L<K{YBp;&|_f0m~WgrrXh_6{1%iO>Xq&A05xXl6puZxfQP9F^vU=
z{1z3?W-m(<<KuhKPwR_>Q}fq8S_hx%OYM1uB8*iu<aS3tO2$FSQH2KU?X~pNg8Q0f
zZv4I(LfR;t$0~KD7i89*L!vidKgaV|E-Jm3ftm3OcxPmOi!<8aTNg9;fy;|Pi`#N(
ze-Rr3fF$+dLpY>en2qNbHxt|a00vK=kzI@{zBw@bG>I*?GhQCz1?zbF!Jhc~MOx0p
z%xUjck@m`(D5k20Nl?Ndlw%Sjo7HTqha1e+`kaT2jm<$9&}|a~4k%+1AFs9df%JR4
zZlkBB%zUioF^JqPF)4YrV9uKpDnYw9r&$fAxCg%H7ZyIB2>y2BV&@df9AM3RMbAs#
zz!;LoWuA4a9gXySvUI~mb?vtQVFAykdke~8c~FV|<)McRa=w`(7$X|59&7&=$$Zi2
z=CW|?J9#hi&NCo!LiF{d>j%bZf^WmWN8cfy(U&Q8>dBo-3|~>`qVzf3%<uWh=-OB#
ziL3+?QBLM-N1Sy0prxyOACw*yWo3?`uC8TB2{3DH;<d`X%l1liG`t=KRUVPA91Plg
zJZ<-%LC+RLlgT9?qTq<S-+j3DBra~&lh+x1y!FzrUb$jvWfgchS$G^rUbK4aldQY~
z#V`Of^Q?}YE6L(^4J|pc&SYyg=!!qr`BvfVd9$QUO_||r$`>w?6TFoG)j|~K)B-Al
z&!~r1#&#NS(CKzm8*`no3dfb!k);s(BoNs3j_ZN6fQKe$73Ps3?+MfMT$<e4EWbe}
zrZD00+W#L;ijkpeO|Rcy!nY6ienu}k<eW+BO{~-ux=U47wjRllf1xPjP6_|?>8J?P
zE?2#ahv=~`Y|i3n!BN@$+P?<=nvc!+w({J;+OLM3#;B<K%)6=JJ&Io!CfdJS&LH}<
z!sQ!jaoyQymhlgN;cR!1ZRK$t?8E{vZ@qBrFM_nEK85G)N*#RVDLgGHZgXQD4K=>g
zm8)T#xey;|o}@;UXz3P?r>?;9*CgK_N)L`Tsd7kwW2gsFI^UEeFC`@caOSvP*VUb&
ze<U(z_9Fk|La5iS#Qfso&DpQZ;1j_YFG#MT0wj$I38H?*P9ktA^FowPzUJl<4|#=<
z<7=0HT{u#QK@ax7Nv2{L!?>I`p}Cvx=(g(=pE9itiSHq!n~)t%=?2s9rw#Mz&s6fg
zBqx0(-;(?6KGjZC-kGl&QkCub7E+pVVpwZxQocjA@x3)#)hb2OX}9xKBt5_0y4x<z
zITtuP<}+X&weq22S>5{PJKg;Q(-e<uPDlJ!$nr&+1J@P=eVkF$-!2Sx4SmdYN07sn
z#tLPKFSxFZDa}zH?lonOU4Ixw9~>JC9&W@X?7c8WI~N@HAyX2%lm?x6Vc`TNj8NeL
z1MW=fM{)Y&UVmz#`Td*AYMzhEqG`9s6+l{tPv1mi`yJZtESK?`i`vyxPVsm3ZrV9I
zA~S>O+R8ln-o5JxcFELrM~J4@%@jq-L}3Aelx>C8b!e17_4g}r*noc@oSy%Lt1Fih
zb6n2JWg4AS36itMI6H8ww}i`rxu%n`HHY1k^3iB6<5@3H+3bh5SnkVj+T!)9T-aW0
z!v*?I^QWn&=L!gLWB@IUIC}4$AUU763Q|yQn^a%tl{}isniK!y{(fk%DA`*YLc+Tx
z<``Kjj_}*Yy)ig=#z#ctUh_5l&p+qpMv6=_P__<3LGmH3nkK*0B_T1f$f(HtrP~;W
zaZR#V2Uhpl>rg9&i{S25mW}1Retq)8H(t%SbP?LuZ&4B2eyR<aeGT~+jvbg0q|kb^
zTDqd@Z&lg){+3#eiJ$*1ioWdAx_p*C2&_+ax<2;&pV7*n-U9Atofvc;Q$M^nlxl*e
zQz^d&FL(dJBQ%F)ZxY@=BvyKD-%j`B^R2lZ-(}eeIxebp#aj~IFwCVrH-c&7O=n!F
zVM^==4)i?^K9cwjE>f;Y+$|{?!FR%|(^Py0`mgBow0P1%>cIm6+}rIA>^Bmm!?$f%
zTI&N=`I7mh#El9WOhO*R4OoErZ+;8yx1m>|N^NDgVgGsM+pD+lXE8vvB!1-tLos=(
zwUrI!5dr$MFCP~&%6ZPD;V*$<fMdVa&fJ0t^%1*e!^@W|@Y@^X-=XGAM1fP6lhXo6
zYuu?vZ_a<bMN+)5u<sCCI*R5!t~5)HFkS0j6jIDT{=(AY#Y(-P0ov08%*@`uzg&xu
zycweR@Wu@XD5HC;To1pb>OT6Z|0QPjQ_sPP(yWSu0AL798qP-GqWhuu2E?I#oF91O
z?U3g_i{|L*<O0{gTs(U15b6l*3k-N?zty;YZ`DS8W&d-#a4;^9wv(M$;Vdi^A_Mxi
z`$0Xf6ctJ%E32ywx4hlVW8z`-(h#LCwg+bn<hB`TLlpKXIp1SFkwmS-O^{H%N9KAM
z26L)#X8fyAMP|=>dXhmZ`1v6^I(QHzdqB3+*j#z<-mOMKi%OAwP28&Y9`}F8^#Y#v
zg}5rDQV}Oh&kPWqWxhao-?ADl4T7pqbO7b@i6aL;QSYu3ir>5Ck&(hsC~9ygicZF3
zG&JiNNyY=cC&vqw3P6S>KqxU~YAbk4Qh%f+FQS@XQ1+}qyb`V26lU)2#OQ(Jk~yW4
z19qD!DOt&AUyCp?zTX3)YNeB5GJ?xAE-UKliX$6*!W6F0zXv_t5Ot3y4$tbbU<?#O
z&%AW(8iQ~XmZQP_#Ttnn4<GzQJlf(D72!R5LLNw6-DwHQs=2nWG116@tjH{Dd9z6w
z;4nDJ*%_>%e9b2Y1D({taF1PSBL)ln(7}{Z$qx@tczu4FTB@q0t=+Q3+)Rhm$GY{y
zvbAu{J_-a`%60hAka=gP7H!!Dl}1aZt*yY{yU9*pQ@!*LyNP&Q6gG0hB=pvWNzJFM
zG3vm=XJls|o17G8p*-~BF76C^cJ_Ou4tPM#ZfdBLP64-OBMG}3>Dm_af!q;mV&!q_
zz4tA9S<q68u}wCFoMY$YzD|#p#j)}Gjl62U$f&3*NV|G;W*u&aX+wNdR1FS0N;~|-
zn1zA|pr)7TFmZOD-ha9d2&z#@fVrVzxwpG5@x|)vOA$k_{ZDz^nU~J@;N#;{|MSFF
ziOJtT1bxVx_PK#_)eCjR`fD(|f^Fut^xONUW@fI7?scRtW32QBDfqk;iZ7S%t?%=X
zyG@!#acD=_egW}-g8Sm?%FMY*(-QNF8OY0Ubne(XvG3;n3Wp2`k{c$KA53*BhW+@%
z_1k|zY+zvEd9NDbOin5URnA)Zza3X4vO&mw*iwNR)b}PbE>-=?D+Mr`A5SXG$`U1g
z@(WXt{X#79oplApqUX+Rggw^H*3a_6;HR7V-%i#JfvbpgT<JJ(zzB!O<00RkYm+gt
z)=tWXim#;f6JwkurODeJ)Rk^&aqQ=ujqlC#dSJ{|MVRi%L!IAH^USCy_aNEG&F!r{
zu<mZJ+YbnU3$ba3F$?(j^9aFWWqlnFho6IEv@y*6!XfFtsh6oRghfKQcgVg11!i0r
zq99tqpc2!S*XJAH-}o&qjho`np&?(GvJDTb`%Kd$!G9b*QyWA*9|d8xR*xQ^T~6#}
zI!(ZiQC)pA$f5J)fELljqg_2)X%>Y57Pd%u19@z1c!R?PEyJXHes1l7&UPF!aP9@z
zWirq6>1&zaD#d~r+@52S_Yek3MuK3y)-<o&I=ae#qKZBbqWyD|J$brHR(DD`6DdCi
zgZ@i@d@PQ){H4;=*jUSm-Ps2*ZP(x_uTi7`0m~xBS<=#9R#!<*2W-?Tg(n%rCSLk^
z0OUgvMZ{MaI(#Y3Tsd-!Lt<~};k0~o7HWGD+AJd>K|mKPc;yQYdVDa%uiiU&^!nBY
z39`08T2UKZQOw(;oO?G7HW-GWuRwxmQFv||4XlWDtw0!a$k@>f{~)*E6P!52#)i9h
z7kyWIfg(CA5mC|6FaL~yVSWDm`KLG==rK>3n3&#Xh-xw4ybH=plNV5D@PYR((@`Aj
zV?Qj=h03*o9nSwcV3=)fdXes*f!D#uIxPa}1F+Q4yA_^|HpiKKwXg68CQpVsAHRG#
z_-7pRq176hiM9vFA5!gG0I!?l9vk-55!oU3P-$f#q9@aU6d?&`xWC^<Tf4%sOUKxl
zWXF>{c2PiCMFo<q_?7=lY$Z}>1Rs%>miFL5u9EBv7seMBJ<UGv(T*@qUif;-kmMvR
zfA{_tuQuI;Ay+BA;UiJLI<Ue8goNxlwCzcK;_e&8H}v<L*x1O;{!vCyhP^$*36meY
zPs{s_Qe0qmrg=cqQL6n=j@sm(LiWkazb_#JrL2tWkO{*TKJmQ&W9WV?{@g2}GHIR^
z@n+57Ey};F>YM4v57|DD-;(c>?-8}~b#qg+F`NClPQ`_-A7FJ<hx}ibEjSa}K^N4M
zS?uHVE#|3z9H0LRALiH2G(hGYMYQet)Q`9E80O_(e#)X@bkCXQ0=2W=IiIP<V-gaz
zp1&R~96DA?v6uQ!^d-rjegE;}ro*g%D&aYO6EuEW`cmW`n?wENL)*A;a%P2%`*rI<
zMTJ}2(g9z5r4`&p<y*p{UbfV=gjw`xT}^qwZTK!Nky~51eCUC%YmbQPpStC?ustNi
z1OK*zd*-%WMHG$(|MQV`@%Xcx_U}xH@88#RllzE>B<@jg64_fBY{pCGTc13uu5~+Z
z6S8|gPsL4NeYLB4g%J|ZcM}oC&=M;WwRNv8&vA3QE&V2mTjL@4FMl&3lxrkLt@Wpj
z{iG)%8trpy6Ckqpq}$C)Q)qHef6FVLygeL_unAgIbB7-XMl%x;1ubyX?3S0}@KjtZ
zJNn9(S}0OACJ7_U`LXYq!+lQICBq*JAXb$Bh2ofzExmEp5&dVf854s_?ngF;!kP#9
zKHZOfWHX<5{rBrUxM+5pKL<}AD+*vIpOb4(?ktQi;&l%*Fr;Lz8vt(oJwMh2Zw~$W
z+q~5`?>^YWORpjER4?=H&i8V`pAu#iF{NQjR^-_D*YyppuEhK&)y?g#^$)mwdYA4F
z=gfD>E&FXQ_AA}qm-}pGBwh=4wSOcWGz5u=h?pCU&IbS1=<qkp)q;QOPAJ(9PtHt7
z{q$B(UqvrW3HqF%0x_>Hdy6&&VE9VE&EEa&r%j)lMsBWechBWP+aeYzA|k>|{A%O=
zUD&h&JfD+3#q>-sa~x)m4v{k=06!K9g~@XDb~zgCVACcg0fAI!NeIRPshhr5d~4fs
zmEZtykO7bQ?qfwVdlQ?$&G!q_BmQgCc{)1x<hG>WeXUt+kADk5xesU~GjHOXz0`iN
z-&t;=9{Kw9D>eIuI^LE2Gt9t}MW!D-+QQ5Pb|UNOLv<f*yhlrVdml48wQh7`I8Uma
zdMcq)!$}-dcple66q7hm%&)lQfuA_SHW?+hArX=Mema`@4FDj7V=d3C-M>N~p%oz1
zcAG3zzLJ5KmNQIR-79Wk!U--fXHK6+yW3suo`=G)<4q_z{SRt}L_N;`VF6yClMMTo
zRK>YHIe%HaMCRJHzh`_rbSJrfcG=LdvesPt?gL4!*YNb;sZZaTkG)Qo$9%xZDR6u9
zHR>T(oMJU|OCpB3cM}-#6~t5&r!$n!?jmZl?N$rXxL|oM0avk!aSRnLS@4x<eCr*1
zAmgXCK8uCV{(?hF=ouWGS)X%6j9r@WP0$NX?m2=Hxb*KItJH79#T_a0p541KRf8k7
z5xlfrzWHDlQl=2Hh9<CmYT!1}IfGVe3XQQnNdUq8XtV5Zqt<^nLb3Y!Y(E_vn`kuB
zsjvz3B@#FMQ;s?QL2GAGL2&u}w1B_@n*xYS<4<`#gU!>$hWaCrY9P#@>iKg)%a^4A
zH5;*h3sbSrpQ{%b@E(x2>yEh7HZC1b)0U*DsF)baEqQ&~kI>G6)Q`>QjUVUxM!pk*
zwE||=lDRTPxP*kvWz*7S{Ru@Sd~54+tP=M54=v0Jn1zTWTnH2Dcr&_N($~iAZ?DDr
z5x(Cq=dtEH+*fhA3L<_mV~qQ`Y!=$MCVpkVSO?wsJLUrkcUKmA#(-J)tSumi105e)
zjo;sU8u}{iQG_|1!7K&lvw=b-GZ>?mIVPCETSpgbN_QCY4hFL-Oi?>BlsA{gn&jed
zK>I+_c1@Z~a&H#awI(bT61r{B65wtuu7opUb3=oI`bLy_htJ`_q3wxw!^8f)fy;la
zUYX|C2x<9%!Z8hK0ox%_rUv#8#l^+h3I$Sd-%(vl4&V2(#>BkxN~%__1#$S@-P4i*
z8!KJ1>sq8qVpcNlKbNtW-Q3#5b+L6bG6N=xVU$C>TCP|6*gcBgZ}msAL08wq6D4sj
znn@chOicU*BAeyVP}hTWS-(LjClvDZU{4q)38%N6utc04!s&b_(;w04pjXYcN1?fn
z6(n>1&D)YCFZBS0jDR(8hmGRz$JK`$eEU{$IS+0ggLEJwq2E01Em0aDd_}qYe3WYF
zpTP=M1u4}qyy4%!e-9!{{ztOijyLV{h!=1$n-`a^t%_OVvB*eCxlFXt;&hVnS(w6c
z(r1QYfG=Jujzo+D@*HX7q<Dz~HvR^I`+NB0bx^z4phz{Kn{!0rv)V*0*Wvh4ZhMFx
zF+$mDw7g?ymmGdf0<6q7%_LF_#|vQ4v3JeTRDU^9QohzZG;~@(K#jsBQP?*DW76LI
zuD+-`SYke6*wjc8F?xO>N4)+J{ec6p*{lT1pd%j*rPr^dM)gKQ6&F-U8G&0WQNK7`
z=b`PvJIGa!&n<V{j{gDQ7jI+|p$Tj22J1DSXDCJT$D)3_jM_Tv<S-`{-!qeQ*YLL)
zUg*Y;WE=2YO-j#?@fc~7w_>(qUFA|tthw66Wuy5%L#_mgODHvU?5@JmN|f@9-%9C%
zpl_~`@EnR=_4SmacDz(V<bj(V@6%G<W*t^rok4sD9Y{dG(dc^a25o#RWLoXNAq+F5
zyXO;)EefY!5vPPCz>V!ezbARtMNOVr9(V3Fg|7FR102u^iK)pZ={&x<{=ON&_})<*
zmUh#-nxK79+U@a%D9(0%-|t^t^QK)RHoh5WY%P7&@%F(ug@kCBXE$ezm8hk3J?!n#
z$;Nld)Ne?5fsOR&(W83YQWypDX|I{fUh1eC#D9;yuRIg}C}4B#0BSOr?n1h#rMu0}
zjtTB2h+L7d%an5NeW{muOKu}(KC;m6?S2E+1l=btE)H_*SDN=8_WM|5qU!|JnHlQE
zY(7EFb40bI1x@wK)){Eou}<C+7%l32D*jxtj`YLXy4+h}D7!Y*1Wt?p_9it>{W*Zn
zcW1hD%6(`HcqS|!;)RR4Zr~8)W#*-Q23;Rc`Hh7hTlD@I#Xt24a@gM5>?1#WpWW(-
za-`&ERo-75h8;oG)nWTyzDiOncI5s0_+#p^z?}@y-{oWQZ&};KLT-Iu?D70Ui-#xz
z9so<HN=`qN{46CSGXo}yjsIdrQBl$FDBP7DgBmqeUPX;z^sk?>96L*qO=W+6rq?x3
zdtGPCAe!ye*;~fI$+)?>vDc?YM~_^e5Gc^vLM?zTpIm>1kn`}B3Z{5*!4u0KvHsm<
z4w`~dGZG**3fl{|wr&UhPVD7hU-YfVHI5^%11JCvrxI&z>7G+Zj?CjcLbMvt**o#^
z@!6kezj{qcDSI7sR#tv_+GviRlE`&G&Ygk8UK#{<FtD-;XB<RM&|`KQOfuq2OKHAI
z(v9^p@M|QCE%w{2XP>@gXBU4V9Mmbz?rtu9dHEn5uz%>72-haDd^#qNt)An5*XOSz
zas0Sdm5a8iY0B0lCsD~LqPzl8!TkAFulYMR4_15FNQX|iJUy4g)7qAN3i|H^V%$dJ
z*BS>0&7X{-=HhkjeP(sa+tuKk^WcjDEs>LX7vDcv%L>@^oc=ed0O5K<K(Am9$LIQO
zRltBxjf#?pd8W+<x7U8jNB#OfHI=_)$ny#Q)tGtYe30-aBry0IZ(m3dw{ZcTuia!3
z#-W&nYF(|$uB@E-0_7uiwW<2PH#ljN<8u8}`GmQzX)fK}2ut|Q@2RNnMMzB2`Z;Y@
zf%6hWt>wQ?a(1m=1`QA4?6Eu&D4uDeSP*xxH0K`wze0<I(BEm`JLQ}h_}3I3D0Gy7
zJ{g9>Mp@|^#=1Awspb4iczRvGcF;M{j`*LjQa{~>D4;q*UWH+v&dyZh!WFce3`93s
zSB6OKT?x|~n^zKaFr(5SZD;!0&dR&k-ap*_^+)`Z-J^>z>(>bY%SvzaiRu|5!rCIM
zwY8^tl?x!jE2)pss~S+nOQw8~&C^P?%+vW6NngJ<5wGy76(#^lg5Pu3SwUsU!mfFD
zt5<oUd+`%V<3#r#GpeL^{JZ`UIgTv<LfvoQwx`QA4%~<95qO{KiMoMHDC0CMu3~~e
zLy~HQ<1abmfY7-q)LF?k_nw!Q#t^dNWLH5}12Y$pDG!Z?NJ5MH{AUtH^}92+`5~nK
zPb$^I46V}Q=Bccl)I&7J51XQ0Y!9c1X<1p5edW8{fUVOl_fE5mKcOTWUd~g$E#(!A
z8#%Lxi0nnxpZ&Ff)Bz>WWPAL4UuTzG7clYX_V>-o0|@i;mQ^nPGV3DdFY=Wez)+fc
z%V`#ac!xg)VJeNKy{kR-vQAeNS<d9$*kw<Sy3tyzTYy%x?&GCF|CxKnYO`xc)hiX-
zjIma%+0Yzj@}$}4+fNaW;RwO#_R-USuJyACWyJ;4+cwrlUio=j;}|05O3lm#_a>!e
zz6;uwDj*`V(Ock-U)`?9qD4Ke_bTy&11&|_KB3T^k3S=7KkQ$X>?4)V!`x2ld~_ZK
z0=i*js)rG0LbZ*A31m41x?G>{Uf~FaFSqAfm2C`BCG6a%HHv35q^}u7ZO@QAVW^Xj
zYhBCcn|%cQ=pvQiOPD%LhEU7uSpa(+29^wy38^bzj#S9PtSbIS)lA=g;d27wa{hjU
z_5VJca;`Z?+ei6|9ejqR&b!Pb;My#Gb*<kVzazddshu?mR}xL>3}nHTl(^zdSx{A%
zhJ~Odq(y+tlkKk+v?mI4+F^!iRwwZuQ$vQ)t1qwrSSxqj>R{zgf5&zD^w0r&s%Z*H
z^<C$W@2Vxo^qN4GylYgBySlBV<ww^2wZO$bWrW433*y5ft;$|rULLAxm{o62=Qa8H
zAEpo&7f%J89Y+@placAEsnMC42j*3D`ng)E-32|{lZ@m$&iTwo&W{G|+5<M;R*!D^
zDUYeg>>X1-e^$bh6-Y;tpdnwy;-_@;G)uhnOf22NP0#Z{it%NNK`g<KAiQvPbaZ}e
zebc&FcYuO-Y%PNoOttBW35-17mAqb)v3b4W;*ygrY9R|s>VOlSAb6hU&<?`epO{p3
z`{zT~+PXU7bNMmSzNt9e!0H)n%DV1c^8%~JpgeK+)4V*#xaW{TZ{uheHY)rA9}HAg
zi*wt5BWSrvsaR4#BNNacYHhuUk;07|OF)xw(3k{mr<KfQop?ZMR7Pe-^Y-3FT0Bs{
zN>U;`MU^~2_i6;(`d2+XUW7)&xXX<90j?%&LNhRkV`KG!Z1-6N;Z2%2U&4ioTrPAO
zjy+S=I2lj^^;tQaY6RlUOFv@!goiPb>+0amqU6)Gb-wk!xZ_>tK9?zzO9?*HWuer_
znv_%{nF~MsI$2^63l=WSV%Lf=000}V4X}UF;s7jpQ*X|X?$}eMo>|XBE#>|3u`asy
z?eP{$3yZJn@vmdE;iK9NpOSp0>eZ<%Y6u+pdwvgZ)<j0OqfbWV{Sj7s^!)cUd33JP
z(p})C;S;1TL^VZ!=nzkX=faeDP8Ak+VY}3E!YQlL^IM}0O3G-=Ztq*2*j$#=3)=n+
zvqX<3x-T6Gf{BAihnWvBF?p>Lj<*NDBB3QKCkvUV`n*e0QDfx8hkG5D{~zm+f};KD
zGax{}XOH=PW8(1j-Z~8rsE<QKma@C*2iclDu^PV)nAPi;F#B--+Rt%r@AzVyBilFK
zX(7YmHs}W7<bm!<y=*_`W9Zzy;>J^ykFTCMGn<ygQgB9tLOZ~nWbsw=E4GK@YqjQG
z(<w(ke*VnYQpD)^Lf7mnH@BUkA^l>(#;eVZ4Pa|MtGCE0C^WA7Ke!t=lKfk;J#;!v
z7Vuq8UvHJpa0}scyuW~x!m^?2r&A{gIqR!(0ZiOi*O+cQ4ZXC!n4^%m5rzpz#vd#V
zDu&v^{=n~3Zu`;6nkA?_;fW?t2L|sJ^ec9WQ}gB(wAM0JzhO1b&_CJdqx1G|wM0=D
z&o7a~j|_%_3%uV;3Ut3bbUCUlfF<;-y$g#UJsX$dyu~g+4@A*V&=C3l{rmSQ`2|Q>
z7_P>Y90Y|EcJMa;4wCQu0Kk@khr|tSYVXs@MLwMn(qR8|@nWvvqYK14P|RouLrk<f
z7hTkC^@I2B-08Ox1|(8@^7ZTcVm7b&_TVPem}SYFP9-&?n8Yti>?J+^2-|?(-b4Us
z4^@0NQ?gpLU&(2zG6tcYcK-0;k_K)SL++aK#ggiML_tyo$Lkg>BjrzMv(V=`vLyQ4
zp~S4;IntFW7=4SiIXx<_74-TG7TA9I6P9I4)~mPHiHI(l$@Gk}KKV>X9_mWFQym#-
zX<cElqd0SL@PAl9;L4b)_tYc4+fCosMAty4(M%91*oIG~wey(~csRnZM}rh`aZ>GE
z6Mx^Ii0>Y0!ri#DYg&n&=4eLc<fB<0wA?w|_BkKltXs3b9rNzOXFU0LZb`(Lr@H~a
zKu@X{?*2n#G2kOO?q=wy0A?rN6)?>0%n1CG6l@b{1$E>w=o>=qE;rLF|9<C3N63Ua
zSm)~Q*`e!uh=Mwea<vMoOnJ^xGaJn>>2VTYe~m*;Jxou1U+9edb==Rw1Uct(m%qKj
zF>!f)VfxqD*h#RG;0Gbtqkbe_11iMhE+bnOxn?jBD!(WSv{lAs=w^YWP-MIIZMluo
zz&al)kMxHR9u%JWIxvu$l9Jy<cPc9@3sM7%@{6-*(LsP!%tcC|2hMe97Q}WaoCzPA
z8XN7kK^v95@?~B>>$M($n%wI*#6G^fR+p>I+QvOA$Xm<He6zyo+zg$=r$gdvH-L&9
zx{Og7uSP;bhJk28I6+t9bkcY;Xszf06V}M6sgskyRc-gh-eW&9`h6!FWuUAADi(aX
zM17ob?l*44`3aD_x4}7bV}28(w7@l|%DX-gJmZ7DOSty%^y<UpXJbHqkeMn64{Kf7
zRr~Sg62N8WpcpdibA7$aCm?WX@WnJtFOdR-Q$9*-sK})2zU-Pj_JnI>0%0G0j((43
zmt>p4a2sb9uw_ho4(aW$wVJEzw_u+s^~t{EoJSi4vEs~aP$P^%4d5Lss>y{PzA>H7
z*jFDQY3d=UrldV*JV5-+Ml5MGN&sZgKH3Lb=6b(PGKd?>w{eN2Jfi&4+|r^>?f!Ga
z^7)gR(+Kj|#1*doa|4$+IK6AbzW$&N^kJlwTIMlrfb`h|LJ7LxWAurL=5y5r=W_aL
z7qmh|c;okEo+Ae>WNYOwJbvw{sqf>aFf}z5hzt)X*josHAVeVg`1nX&(zAI4I7RV{
zj@IPn@;XKf#%xIjO&BZNpC5g5ANwGa$4}?m^UM8zcqkL83()EJi7GnI^tQ)o9*{4}
zmdXztOX`w4oY>lo64d!iscl><hLHt(R{x#KcTn=*ONS!HM7@^k_OmmXuxZGg_FI7q
z9^sqUh++NdICd=H)R#~F;)rte1kGaS5@TlD?ig>+5=~s$NF==;)VVLTezOu6s}(pv
z$l0#04-7gDF51e<_pKRI9I=ANAPGbN<%x*B&!3IaNE@lHuDs}axSXLIvvwc|AFACF
zwy_4WdV6dWg&v8CiAj_KOC$Fk9xk>wrOS2Mxg3igreFT3^nF1%v`|tgwB$`sc~mmU
z?}z>KYvVvKd3Qop*jS{<vbrpwrle$tz=fBEkyYFT^MN)lvH*D&vM70}IH%wvQc_Fz
z<+kz-TCz}<INw2)`hu90w9sUSHE`YCJwEvQj}G-WXm?(T(J%@dzd)DQzJ40DJr*r8
zBO!eKlo@hAHa0e4{{&}NXJ@5_nHlPxvw=Ql%5jYH?<CG~CNyqg_S`oH$SLPWrvB=m
zv%|eR*j+_MqU1}T#Rr%L%A7oj<!9FY4V;Mt573B<jf)4x>pRnBH!W7rpTPhgAv@}>
zk;$nAC%p+LV3`Qr%vInI^vMsgBz+0daUv?a%IK^jEk0>RcJpmdav!}ew3%Ebw$99B
zKxBU+b?MU#$RS6MKBrsq5XGxWRwW4LTse5)KtW*3DnJ6YEE&s8MG{XAB$R^ci3;L|
zhe#;^C3LTKlD}J8T5wuevsIRrK@pa+`;zHxp->Fl`l+Z{B#%_Y6QOyuDa$U(bF4t$
z;y>T8PG|+<>Ur*5LhllcYo6JETpsB<c;vhujv?M@fLuj57*Joy1#C2<oR3kK@mtA5
z|6BlS1ZKbBLql}Uz+7=<poAi(qTTTVZjM!c_1ACD1*NH34->ffw|?A&d9!$(!KJgO
z&c!U+n{)U<fF1X9_8r0;1GZL^`E@t4YtK75jZIG%up(cL(Nlh_6lt4EY*6>4`EB#4
zwBY1|FAsbfe&z%p5fbugxTP{vT68&b*B)8pphH4`zh5j2G|C|)O$;vpDY;ja%-ZL8
z@!}2GEKZ~!k}kD5vGGp4yl+>*21u(yr%zj+Idc;?2RK3gu<xs@tCMMX;WQ#tph<V!
zL5%$7%s`}bxB+KExJ>2celdbxIQjsPN6%ijb3Wtvr`}ZFIqr~Pp$Xkae~_}mYFvVR
zM4HAj;j=h3AG6wD!7^El%2pk%*zkBB__XWs9&4LqoYo6epeVboMH#w(KRG`EhHkwr
zIT3?g+gz=!d>eHiH$_WdyhxDD=dmQsO^@%{w(-C8@$oJl9UXO<AuzEwPT!o5*}&XD
z2KX*o3~jA$b6a=!W2;vR_y3!wIr;GUbNzGYSb|HP38Q&DKc6#vJ*GkBD&&3tSNG_z
z<s{N9<$~x$wkJfci2=q5fyG>0PbR)<k+eku1)oq#{v%i*&JSy_(Uv<Vy|y+Zssz2^
zySqsaG1yb3GLo^ev4KN?cHSr_DtyfgBy20f!BaQ1{tS^jC<%%nI;R|bUU(b<dsgl%
z+_vFN*sT($8;Y$%O{Nxc4+!|HR$!LZH8pwFjHJ^W_T=_nkS!a~>Dt{|7+T@v9~)A%
zCvoOW$RJRKZD<M{exR-09@^$K5w=;+<lQ)Vru+Q<@4qca|JorccO&scJJhR}^j&xp
zjqC?i1q#~0YxBWmm6B1!!>eR;a(Mw`pthg~q@FyCIE4ct!oc0<=ILp~x}ybTza|vL
zDC+F!h;(~qW_F1Q`o#xNa4y*R9bE%i#%XWk%a>npxXnC*R^d^TXN+OH+#3VGnDOdc
zq2h^JtID@T6qCt+I50CZ+S=P+v2UgoZaWE=h{h&vQPKD6AtzHFTI|fU>#KLhPwZx)
zw?w#))f<)==G}lR85jg;jX3)n!I8yMmsz!k^9!(c5Pa8TI79kyO;pabE=~8;AWIgS
zkBW*4L4%2mEZv+?V3gB%jG7W!-#_0nID$ea^3Qa(x{Zaoxsd#R-s8`~48lND<tyy;
z1gOW0Kgzl4UHv2%tvADe@giSlrmeAYlD*=@zBtk!yrSY)76mqW`kAz6B^B*YB_)B|
z@dx$fpJD&Ur!tNhe)-b&cKy~+rEJmBm{;|21Nd@audTQTiG1kl8W|YS_okYOEW@3x
zpum~hXQZW-R#$g*%@J-9pRT9tMIFg*_&v4y@4TIzlDoV6=D$vx=#n|RQ>T9QPYY$a
z+Hc<J$Zz_)&B$-lx8W-Px&Z6Cvh>LJFZ%Xggh+ko5PU+-z(u;O84^#bE$vk=4y~>l
zLVY09o|A8W)nD@%ZrdwJN$F1VCQxx)Z+vl|%F`Rqeu^Acu&;6Wx;jq2UDxZPo{@b%
zpIy2zz#~aZz-CB|FQLCUGm}=_!k&o`g%Ub3(5AQi^N%8`O~bu5=5!Ofk};z5?`2|U
z+v{KQMKTa=i+*Dc>DZ=wyd~ht@mG^oX;rQG^S^2;rZT40vr5))$VV>noNZtb^jVFe
zA+tY)p(~LDUo=;yObpK<q3t_iuavYB6ZW4W8Gbe~a%n2Ou2+%chXO|p%6y{vR~{;g
zn|bYd`dy;EeFu6TvEQ_a%TwUZG0m4dQ)0`pj!7v|jP07^zFhu(-c;*tQ$x0yQ2b22
zM^7qwJbzQK3~`JDE!i%jo1*GM0qU|8zbHa9gq&hzILq!OvmY<qIK{}9K__3S#6e8N
z;eL>(=9O05nr)n9%7q}};a3dt)&#A5w^D%^ZknCnaiG2FQJeu^Z^j#r#iF?DwF3Ca
zC8nFZLK4JyAJnR)TreRjlirPvs6-%IYo*(4U-vaOmeKm;)|0{Qdu&<CiQ2?=Mufnm
z4kM3|mX?`~EnYNgA1V0>9Z9JZC(6spBqS%Y_LNoiN@NC{IkKvLTl{@6!@j?{b&}ON
zH=;P4XxeP?3zisJSilU4NleTsE{-lJP_JBhYbrYpVN-axDv0^b!^0msIuv)6l_!5D
zH#~Jqa#r@h=&X8;PRf!!Q5h4k_vpHtv~;wzKSpEvzet~|Oa7r0f|1tgr^TXRQK3@1
zdbRif$0<$g1>fnhto9NKids+7f+59Yt6zFQoFtB!r6I$3cxUbX`|+;W-XhM<VKYOP
zD&}gYPQ-69^-tn05h)u=?orWiED~<;X>}PA4N&fMM-xiOU{)|-Jy%w5S$zdjj2CTf
zKdgqf{fTo_^yFx9=3GvbH%@wFnsSyq=t`(O24kF@nb?WUXABk~J%)<5qP$#lasgK)
zkY1D%GpuKLjAW9pl2cJtJRf_bZ|^Jk=upb|r%b=QXK%zl;?CG*Z*!X>=!yUrmw|?J
zK{V1icL?*MqQ&@<i(l*NzQW^8PrV99kfh7d1QLk~wDrpDr}39~oiHRF1dBTHZp_tK
zQG=jE4f1na-wL9;^N7sO%Gf-q^$AW3rQnPaRZ)GL^58+XG>XVR2tOA7{sl?MI!+&!
zBN%1scNe2$pk^O>mww7FPw>wUNBn69Ad~nlGkXjBI}99-pXy(AYVz+XBe8xa|3PVI
z{MG%EChX3gcbIIWib?Q0hb{?>H{Ly%zL>)w@oVL5dOGD!yXee$6kc(@%U)?|6xG#<
zMwF4LoQlr1e@9~|;RiN1)CLCx^xP1ph&c-EWNr;Qo*#9u$e@;8(OZL{Z1!VjlMAHf
z*=nCK#^;$krXpTPEEnUiucq+fjWBat0oI$2Ax0x8r*ou*I5;@CxD-h@HaB;|;)Z?e
zRHIp*drV6R3Tb>lF`@-?!9f7*uy*>_XJP|FtfZKjPJl)y>@9!w7TifpM2#eD-vMi)
z@X*kFe^gz{vyKC0KjNgI1Nd0yd%|hQg9ifLxa9((2hFih+N^K3>>h03%nCZYGhFk$
z?8<Cf=d&}n=V^hp8VfUX>O%`KxXsu#8q-A;`y#=$<L_(47!cm`7())?arYlsfS1?P
z5#9Uj-!P7cotHWKE+?&Fexd^zrMrmCb{$ZZ&jLKs3!Vc7q)PAJ@Mr7;?*=!d>Fe6{
z#<1;I=Q@Gw6L{imVd;V?dd{c&uO-)jH@vY}zPM-Xk1|Ej?>8+i4*z~eqhy@znXKEj
zhZGHs<%z;epPnF-8&Xk?@##Cr=kwo`MNc>XxvoH7;P4@Em%z#9_ihVXJ4tuNa@OI0
zSb)6o($@N6aKJhn8Zwa>iyEMzLEIw?qb?qjH{ie{>awIumK7w!<g;>Ux&xOwZFbvR
zT3WLB1MnCv_B9N4Lz{##;Vbva%G35p4L;c+TzzA9twnh!YMq)oFpM22?M>9KByDEH
z%?>9qK;7Y*Z>+Li?q8Y#s#xda>6vxq%F~>W{FF$NiHMHYM%&vXy;%TXMDX(k&*is)
z)!sd2Xv4y!O@hbq@L#T&5Il9NB^-v(Wbigg%rB2jpLrt^iSBZ^#!HtiiEt}H@Ml-X
zukrD?Eq0{A5Z32vP-#B3e>7LWoe9P*IAn%FRcNTBg@gt>J0&Z~@h?$9#ASoAAUyL1
zS)-oOurxK;iybF83kpG^*R$Gh3C(+CJ=0+b2b`z3xtT{w3UWUJ6-%#f@nKNyG3{kz
zVR3eF$kE9fag6$J>j6#Ls48nvahT~Z2^?#zE_c-3sd;&Lvc3Nq&z$KQesa{V6?uuO
zyN21_-OK0a$$n4)m9!yDFoNa`jw6l-OrRjwdqD-&?$VM@&Eexzxu5c62N(yqNQi=-
z^2o{#cg+nz2nEi<f!ar4BM-gajN*N=K(^0s>u^RY9Sh6S!gTq>ETQ1%XhRk(A2p<6
zsdj^?tb%Q@1Fq)lH-XH3+HVTJTO^*nUL)`4356z4l-rkwfB8b;`Ar1R8=Qrt7rH6)
zMsZCuy=FKJynU-qLa#V@@X#Ujy2!n8fIAY#R{qo7azC2q=aFw8j+X92OO7e@cEFoO
z?i=I`+4m+08ai;m)L>PTV*aQ4P@J3+7$dN4K%VTI;Cdh$LN*=fImf3yH9^f|BoTQf
z?8=>hAmW`Bw=mV7t$r*|ciZVl$D&=U7B~pn=X&K1|6QJw6Zxyu{@CQ9utm?vgxvPV
zuQ$Qm9jxUJ?>?OI-7k=;a4W|nalHB@%H?jh)tf&%!vI93`#k`p>oUCYwI^>2Ph~Z@
z)IoDj@+?-Oo;MY+Q9@5=r=@yr<Wh5_O&?<WdUV6BYHxmen-}7fc?U>Wz|sI2Bs5?Z
zVI=GE_TGp``LBzqGM)s$HoWw*zDYE{ct2sz=kq4$KIq8@Xhug0dgQz`S<m=%VpteX
z#R}KE1WW=Tv+Wulb^%RSq7X7*2@aL}6FmZN9y(sS#8J}v=FRyZ^%t&Q?L+SYFnW4q
zn;Y5hy#Lya+bY`_!KbpPq9X+z%lP?)Rs8our<Tegr`+6Jt{Vy5o+Nq>v6-B2(%Aj=
z5-F3)-1>G<J!%}geqU1^pX>?&V3K%&1ANSc1eu;k-})-POtjmjr5#GV!WFMOcrryG
z`gxRuVmrsG1Rocd1RviT%&al+6aN3$d-HIr`+i?sb2KP4NRwL2Txw+~grr#JSu#~f
z2$3N}C`l^CGDV@V%tJ^r<xZJN844LPXC5Q-c`f&O_WnJ;z0Y;d-q$(T?_9rY_s?_R
z&mF$L>odIHulH+Ec_|6j3{`+LOMLd0h)IQUXe{!k!K6fPP|wc~kqZlx{39bH7zrXx
zKJe~&kc#TvC{?u}-vdOFwLFGlx#4X=RVMwW43of5qBe}XkBtG`QVY(v>yJXXw9Dvk
zp<~D5bu#b!_#_|>V`>%zvz|CH<2l-^aWAT<I0P7?zs>_UeVzEh6P1+amoaBfoKSDt
ziH*T`7}to}8B9%kCS$~^!$rTxMQ(lY<VkSzS1j=0JCW`N8p+Qv^}5|-l=x{s_ug_D
zMKj2zd|fLO2!UKeeHAABSsPe!RD?7n2@ll#9yOu1oMlqWq)-C8lRzMQV*v`!`~11#
zj4O~1T7Ql5DJV!00RMch$cq>CJIGRu^z@iIT}jeX>@oV7-Tv9UE&o-X%PD*OmW&2D
zwkht*;&NBkjSe+!TD6Lnbpfx~O`@Vd2)g6rrMDS&*uq$)@q=fnabMYu(kCem4WLhj
zviyR>?%}+oE5)`rDPegdpAn6#*xbURHCg8@aolM3TS{SNl%j%yF=zI*uVt{ZZjMu0
z{Q4uW--p@Ms^wjfuyq8kt({yy{f4vy21Y0wIg@NAx>+&kFmDh;Y)9(bxVI;pL|S=#
zpyC28ySbvmcDyra!mi~VcP+UxSkdm$QipdAZkjxd&7c>$&v+nSC_>ax)tyuRQDl2&
zQ|7M6djuQ7W)~kQ<H3eGx4xxC4g_YoJwbfEiu*{kGcvE?-sb$zA1>iFIo!Bm=Ww(>
z>YTijCg4IP19LT|zzz<@rP(dy)31%m-?7{(H!Z?S1=B|L_5#e|BO;d977;Q}p4#ze
z`bR?XLt=~Jj}PpH0IlHe<1+2)xbTO5K%}w;5=L+yVqwDuM(*#KnUHcynt^lds<v&j
zyjRW4#=FZiu>}qvjwUVUMq58fj!RBS&P>ipF1+rwnod&dkRY9KwwlFvD@3ZlovTUm
z^2$Ly9D|rL=L&V}(X0DJ-}>M2Wy`J<Xw9A7ytlCiW)(dZTg(|TSb@U(4QBLpaZpNl
zQL3o?S^KBR1MuK}9iqL3Y!V#Yn`z3gp{!b$HS_E1aWSzgOAFKq{$$FwJ5f*{-I|@S
zKM<*9U?4a%ENVAUe~NqtB_nuV$*H<N2C1pUdN=rsw#BO!;E?86gfv<VkYBl$>~x;n
zVsEUXXqZrn#I-N;6tNIK^2tkT;%=~cRuFe_|8p5x-g$DX6rJVYN5}A%+sbv8dQj!R
zV|+dI<yDq(CS>@)-OlMp?&6nnTfS`#HyXshbM31zC$#S{8%hPEANE*LNLUlJaF+8?
z7CJRt+^<C@ny@#y5an0`xO>dn-=DT<nEOs7!1B<-$mj_F<|YBB(_Hj2r`Gk48ka}a
za^)#a<jiIGSNrd)EpYM1udwvXzx~NRcP<@e4(%PF0;UkOR{wZ2ZUrz5C}Pk(?Z!6T
zQ3?@a=Y-GPm;D3=Pw2$_QO!hDX4HC%x=MZpva9I;#|h!=jhp08Qsth7ExCt&uAhoz
ziE!N+j%5HHOg4xBP{<!qjrxR0n1*S`_F>H&TPi$w;HEM@Kk9yKdC`r+9#Hi>!puWh
z#@u2eF*qc9q2K4plk%ORDs9Ca93{QIS0}O#$UIz4ml2B~FuY6JG1hZ{kDC`qh5Y-O
z5QQF${23IXkN^daGk`3pkP+IwmNi)8AnSQYej*sNOy2cv-R%~OIaAcHo^lZtVfZDK
zQikk@2X0RNBKurMB{nyF?jg$y0kc?^=$K<%%4emdsLsK=S3i>VLke-~8_>l2LkxG4
zw^5WCQGbEWr#x`6wy=9A{i)(dd0h0G%*a2FTUeZFMJdVA#4yVt>}chp^CCGSaI`*v
z$7DOxI?L<H^<6<c+78R}qb}u+fu9%W-$P10w=nt2{J1*L9f<KLr0|OYfuyix3gyO=
zXH8EfJ_kLB9|@frIyx&|PnCDE51>kO(<{;z0Fl#B6Or#X%pWJ`T)bTCzsut>#i2<c
zi^#(xmmL70hnwxF%LVtH2|F<?)@ThlaC<6sXd7{`eBomiB#@`fY6GEdL>2-H+?3iw
zX0HKoQ5a1EDK>B&qje9I67csc_<{2?n-^`~y7j%Y=0NL#3i;B82F>P%^6r#FJ$Wpq
z{!<7?&j1k1`F?|22n(l<QZtMzqI4^uQJCy={L>$&!!(5}KNs}{jbF7&6RYOE9Xe?C
zP`M>Oj@g@-{~36%^%SxU6Tbe-zNaD!W<YN9!+hKmvg17E#ux*t-G)~uh5$=Uxdirj
zRYmf<GKaP)J}%$=8caO2ky<d{EAgN|ue4I(L6+ElbjNldqS|haHJ8y)H>^4Am6;jf
ze7Xv3HrZ|Pd$7$i->;?|@RGtC5<Yc!Q&3!AjiFjx$lOCd4d3H)x*a114$v5@$1Pn*
zzjDgy*OSKq0$f4DJ_gE>bMmuFJHtz+EB2t)RrWQNyRwAyCiuMItNth3HP42)wug5!
zEA7dX=Sk0143>(F(PIso?lcHkQVLG~)i)zhz7|6S&`+p^?vhOzRueAeVSRs$m)N5Z
z%W%9PUNa3DMB@g5Q;_$k*NDO)-cN`oc@a{<K2&%<-P)Wr2oQf39fYjW{51VK@`1={
z0B7@agVy-y1Ti1O^p7Ldq&h4MbcKBa*T&*iBfanCmw_XKX@LUY*AdKKKqFEQH#lU7
z#dh0O1e~A|P>uj)SA)Es?_sQg$^fUF>qK{gKrDJ1Ne5F)%btFn9QWm!MD3YC4}aIY
zJ(b^&UVKC1;(DjT-gn-2fQNOac0YU?>pd+DnvbsI`t7Gm9KW>}>E$YWs7oA8%H(|6
z*f>+_CpV_8&)>*iN)-<iNZ@DZnGI`fZhpM~v_er#JtL9by6we{;SzA?kR1i(ji`{2
z(twM3q?w<ffZ(F`D}@LSLrYJMt?Y6}j;w5K{r8D+<gD{r+&BtdyrPrUTFU3T+3taR
z$ikyB_Gi2fg^vDo4&`^g|ILk5v1b=JU+|@??5C`!R&e^t#fF{e3js~cZKB){n*q+L
znEV@729n>ge?rkR2m=CTiN%(eXQJbj7tsKR8ShN!(o8exg8Kt%$3WYtoSdfmga8l(
z)ljvA%H2e*ln9Za7>;3h(yhCJKg~JI!e!mswS0!}6^`tEx_i6{@q~MXuG;~;u3vex
zLg3zp&rXI6w6}3vx3!e3-!o>Peb64K{1oCLa230DJXGrM|4?3jM%(}<LMq>FVPc|_
zO&C^-_uHfYN{T;+>D^kPCJ`sN0wBn&>C@7_hDRR+FbuveaP22`zj)X^zC%ZkzK0>t
z0k=loZ?h=R0fN>x0ImUl*JkirHGy{^E`x<k93D54KpTyAX3d(&BpI{!8qIl?-)H=-
z{(M-2DEUd*X?Y_XwYA?0Pu+8+Xp^2VAib?QQIokzBFkKJak8c`Fu70h+%E3*>({Ll
zA`{l6>9HZ(p#`Dl>U)W2tl%v?GlJT<JsW+xUZLCVEd9GJRiW(&j2;Bhj~D^-<i&x8
zN-|V!Jrpr;(o){e3^WXW@N@y*62eWas9->cX3(6ZF%FFV*%ZHixR_JExu&wcbAkZP
z+`Fwn6nC|v<sNi@#_E(T6kP>wi&_cN<X{@nsI6cFisF<fVAPHlxV(qdEH*Z_x3_n|
zGTx+uMgD<EZq5{2U7crox($qaK!ob;o6$%#fb=v%*xKyYt$S`R($d|j`YwcFf<(Na
zkC>A!%sg&%l?-D>di=zRMZ@J0m^?6S+!$DfBCYsqbYXBu_aw?jw6snX0_NOASGhAM
zO||>}fd!~J`)P0}N1m3KRfm^&h}wnb=Xx=+?4jV`9?5u1A!w&G|LjydY4{$4&6t8b
z9Bi23ubRDGo;%!<Bjcdd{3u`#ZE{@`o=4DqbF(ipH|ojIA?{-whBt}hbj>&l<OR9H
zwJrakZk*tu^b=2EfTh9kS?=59RYoJo4D@A`3b#6~!*UdL$}@|qze;x7C1}Q{5wG&F
zF0QeVa^pgBt9%^o2zYCB`SS4_mkNV;g%zHSrMOOo#Nix+<F3ERTSyt63omnQ2USNE
zCMJk$>Iyz0N|X|~rXs_nYJPj5hALXGA|>nW{Hs18CArG6eUWc_@wacWC}svi?Q<Ox
zq<3)r{E}_`bV`GpD$6yVruh77ZZKRYQZHuNG{1=?G=n#ah#sIldgZ3DBcDc)3CKT(
zl8!XRn$~=t*xuZf<H0f*tGrCU51A%GcR=Wjdw_koYy(JMju>GGySWyHniR{k1U-zr
zb0+sFDP(#iQ73aCMb~|_F<sZULNTmf*~Ml;6fuP(uur01gK34nOsTt)&zp>lzzFoO
zodXvY9I}=e>XZAq^^t+sQK!5i#?;Hi5~Gay;$4RF6#ffea%7%9k^5$J@Q$XF5kN4m
zw9mLdc_hCf%x83H;o{8ZAb0leQCn$gX%!XOtM)sXnd3x90mem0Fk*@vXzkP!Icev%
zQTAUa1<dVbbOvX3y6=LCu9vrW+$|$X?h3M>3X}DTgH%rPmE6HcF=vEB-rG$de9oQ4
z7s^-uM6P8)*5`P|pnrqk67fdt;v+wk{?y5Y!}h1R@0OcB>z<5#SMD>s{r>&)WTi3r
zKIho<JY&HatI&msBMC>8rX#wmx|5C!XS`%d+Z5KklX`yIyz_TMbx_shob}#tVO@4w
zGBBVhI%8#~BlTT80d?nA`!I8VtE-KWHxzO4d%DDZUfs-nQ6N6`yfee&4EpkHsk^}m
z3Hs)BakWbiS8)%w1~sS3TG}Ld-M~oBE-3wZrRli*hnusIWzo@n;i3WU;MK6)*+%<c
zfrpZiS<%t$IR_{oe|%}90T6=D)6jpc%;=3^NzzFwO?RFv!?FOiXo_udam`&%L$1&c
zOv@fTkR_e~>8>U@OG;$rYdl^I{dFfAmtQlw0=KT_tmk0arM)rDcO3oDU)L8DGTR@w
z4yU>n=_A(h%+RTqKP9ABez@&P7neNT3uMh>XK%LV&(6F$TguXXt%QO0Kzl)65nH!O
zBuyu?Kl*8#yv^!_%J5S+*-!pCm!MV*Y5Emw>pZ7PYn&()RcOQe8`BlhC!=A;SQRzT
z@5aV=Jen=Abh>tZK{;&WrcH*gFU^93&9Ia2%j?Un6yl?#VdaQFw7q|qnk?Cn7z8WG
zsJB=cP(jQG@qWk5E2eMf5rC(xL>+3hjIx|&rgi&%5Y4p4N<iqz*aoBPbzjyS4AYGn
zK78^7^skX<88=D><!O)r*VoF*B+%OTef)SB8YO&_o*vE2E5#EyCc$6f)2bqhi@WvL
z3Ze#rRZ?4NTmw2zs5nvvFaLPk4$>``y2z;=7v5Ye4&YP{`gC(w-{(cmLx!Vmtsnw%
z(NCi3t4($28JvH8*83aNI>_MPTD1lfk_d~HQ%GqbZh3E}LHkHO_M)Zw+|ts5-WeSg
zn0Y1^7SU|P@#`}qw~@GX(~+N3nfM(PgvrigTFZ}jzHZ$*QPEv~)5u?<mEVxuKMxHp
zS5Me-RPSBBW)g?FNlkTi7NQGDI8Y&KEoBk~LhIJ~i4`-n{-!Tq5CU)re1pQ}_u7<>
zf33;YyaRP6daF-ZHuEJ2H#apUCV`pc3uFS8VAN}0ix}FDflRjZkRbDHG@tv?9S8d;
z+VAo|Cv02&mwQcJCM6)CYwox1Z??sSh;!%9!w*I3HV^RwU<{11kCo@EeR=fYL1TK?
zQ(80IHPt_fTWM+O&cFq3_JLT4XrC$Yt*IsZFclNFBo2eZJT}AV#}M-dTz_RnPbsZ(
z(BHE^>1K~qh39>0Ex6uao6688hB1)lZUSYrpXH#;BOf3C@3YGWV{{(N8s1w|@X|Tf
zNv`p9zbgqFu7xu~$7h!hZvbi$bG-cVfG;toGfsS>yBu`>+hD)gCoi#jl$4x@;fi@p
zZBVK{M=<|d++$RI;b^NsD<38f`5;>)3d%`JzPu~^6muQ+fxfP)+yF+uApiBNex{%m
z(=K!yPSJH7SlTLj>XhvE(WOOq20KdANc+qYjWX`?$F)}wU(5a)aMOg}9Y}Fu@0nn9
z`}TqU*uW<0uei^)Q0wW>1G%}5KbDpZJMEko8u_6DvjohuWwYy1-+?+vI0~2DltU4C
zr0LVn-dT+!LdWakvEw9CxAg&Aq1lSF27OptKP~+a?qXwu5_!w-gnzo{m!zQskzu-s
zuG?4x9Rm&!DGUTUJ0G%e6LhQ==Ta_T?!bqm`*!Gs&@d<YsW~TXjNUs8$GYAJ6B#6)
z5FRZ)e&3Oi9@rAOkNs3Fccbh!2{v!w;iZq`-U&B0{X(}#e3%En)Jzh3_m1T=k_elF
zV$^3hM9Dl=!U#afs^!(sEnQJ0$>5i6Bq2E#X67UAPhe`ya<J6@`&-w<W5<vChlqr3
zqibWBJv`Lab=tZuEjJjL5+tx4d82N@(%LUQ&H@CeAIy7~6U2AnixZ%uwzlg0d~?|j
zD<B&a8cUSE%8+dNkm+2BE|@b1C-2_2?V5>6Q>wna_V+8bT>6+SpciaMyK(vI)!vSd
zwtT0<s3pF-Ew=fm!qu7QGz-7#8zcshm(INg&eD)HsVs4XODp+7Rs2ui;}0G_RHIXz
zn4ENUaL_RDbmiq}_k&x}+I3#}SGCQpC;9~8*Ea5_x~4Vso21gjg465##-91DvnQk6
zHYDfoH*7C;aQKFz%)Cg0bo3^!KGH)+n{WQ_*bWoF63s&L4{A!cW?hbAl9s<D-{x6A
zg&9V`@_s7QH8ZnUgJ)#iENGY7XHIG7{3SLSZw&Fg2>VIq#@DYC+)cTe4)u}w7)vT7
z7Sfi}cF`TID?iZJZKgubAGt<}BVV+e8om08zj%s^P{VcW2gYMsuiV6g`D<cq4;g+1
z5XwvM&ILvWJ7G&jQgd0EiZ&a88I$a9RNifKv$MRCZz&S)`-yCG?e->*yB}p^sNlo}
zs=-FedS=6#@z~g_FHUcyll<nND)~%NLU&D*zpGqurw<lYXsDU7u?EyHQXJAkAs5&b
zZV@Y!E}q`xC4j%b6EiZ&Z&7(I@htQvCqWh>5Ts8>`dxT%UB)1H;(?D(@aAh)R-cQ{
zK^tn0hYpUeyf<*eIL0;N2?PD?a%I(S&SPpGeB2xyTI9!fkJCr(Ad07VS_Y3L61QN)
zUW|!vvTO)_!(mx$Y-VvC85xY5_i!AObL+Tz@X-VLZM@6nNf+eqQr0vS9o$7(MR#x$
zZFdEZL`COjGBhMTl_NcVB)_nI7pA9=JC@^jJyq?G!ay4{lKVIi^anQl`t#?OK8Heb
z!KY$QH74ugq^)$;;YUXk)|m4Ne1Sm2BiS2&(LR^4N$$$*xn1ja9F(tp>NR(S?(ZMf
z<gwIeCa!xp?`IYRUZ2dtwHeIfm)GFGGTXcY<>22`3}tr~79uc1<dO{gyEM389a(t2
zKA!ff%@i_ix~3(T8q*fMX@Kr2m3=UI=|DFdRCRND$P0$DJ&Iu`ZJN7E-70u}9y|yX
z)G$z<*Z~N*3AJL<$96Z-K^Py&eU@4&2uSd{8^WXv2psUTSW3{|Q?^ne2JaVaFL*JS
z1Xdvk*BXh&a$3Jpoxra+u!@6qeyoF8?sL%1R1!p(yY}s~1iC@{HLM{f-X$O604ZD<
zT=#JAQH6j!+Es@s0&KFmQT83ITbwlgu_4JM)6Wzn*q7<eEe^F6EdTn-3|$#EG}O#B
zW&V+R?_GysJB=})e>!5`KwjK;{EFXZtWU!464dJOMS+2?V@J{FT12z;U{E37hwJ56
zOU^Jt%`kZ5d`ctl%oxlVy6FrJw<^TKY_RS1<>zbJOifGS^Tfifrqa8JGD*-vYjH5`
zBQ7lnfGuic+?t;syFE7q3&HXLQ@KbW$4cqS`*fJ072{6}Bk|?^>aG3(FhZTpgxMJK
z;74eDJ~W<Wf2@~(%LL>-%u~0peQWsb=jsA~&cgW-Q~tC)8PQNuKhL~*N6<nDzHODY
zwNdtiS10UhV^~RD&yEK`P}ke3cCGY@1TvkG9-yC~HoJA-#Y&~mUl`(*BE|VdrPrey
zJbk%Hmensj6E#>y9Y%~0qOP&e@Z9he3Q|4-;f;BN9A2Tn33roBY)VqTfyAuw12M39
z<1NH6E^7WYIGAMN3aVT)oJ6Y$nNL|yXldUUcOqRzXTBsl%<2V?aR|lE`_6S{)|^)g
z6PN|8lB>$hp`c-^dH|S?Ha=yK?}tyl(mN&WbC;<AuvJ4zmW41n2&f&mQzS7<O?`er
z9Eg3gR`p>>=3@vxR2;UbzZM454y)M*mOOjbI5y@k&In62`4SZ--UFL<rQWdNUYPAW
z3v33}mlG~_>F^!A-_S6f=eYw{7)*r&^a#8M?+k}Kij?c&CPTIbY4q;8N@6ql_0&}I
zn;RXr^nL>%eDTXp1nNzd9+<}sOiic1^7F6vYR;^r?!!LD3BMDVgAQKY_r%8s`$B{5
z>E2UKz`<9onUk9kb3OTL8KRsNy_{D%nd>9nM1FRBEXAd!_M`33pL=Bo$=4fSLn_PC
zoIUENAmluC%qPrcdM`{OSw-FyCM5LlGTa<w$77;Ke&xBoV7VtGQtn<ryY_u8$v6yL
zkd75%_{J{jt*mqX@EhQWa+O}2v<X|}x_*8*(30=ehiYE#Ev3App{(o|Z0B<0m<ALS
zC_CA~889_Br*JBdV3fhhN^BRn-X38dE?mrtI@o<-JPsZ5Tl0nt<;a<#;bG!lICPyA
zzVk@lpHci*oVcrNGcP`{zbyPZg9sbAkL&2@$dPhxbYwJJUAnXl68Hx8gvXH7s96RE
z=iGD$XH6qqq#<DHut`a*;vlLW0EF3>&+^lIBpgw#mB&?8-(&0}Xnw1?v9Tp@Mlx1=
z{HrDTA6P&LPVu7+`4~^i7RZyH=j4QTpKZ-|bE|=v9=(IHk&!-Cj>sL}zx8HN-1M}A
znm+2oUubyLeyj~LK9VUtaYw>eypE%ia?$Y4>a8e?&DRD=>%Y%`9-~6G%aAU=#pJ2p
z)V3B~KUAL~*AtQx@0qIRzk9S+LWeig{aM9a2$$+mfU>yX&w~Nw%H{W1FRp53kk`(T
zXs~JshTlO$IL9NukUNxZLp2o_Pl@z~tSjf&m~k#UN}Bciip)+BVS8Y}0}lEodV0_i
z!k+8)KiajNr4BPST3XwN4c^fH*!}u>xKOM$9vlMMJL%?{HDLG=N5zU+VNAP!?_Pl`
zpEhprUYLLv0SRUe`8WGglLjRW|0>%QuMk=#c8iAXT;vEMa?e@*n9keWo^x{)9CxON
z#_ueD>;$DIq#}rgk=jWZmn6e%FmeIMzSV>qK?^ir?R_})l=sL7dceE9OEsD!QJKmy
z3tL1KKIkfNt|ZlW#ytM^@=Q33as-M@WjQCxqx!h5TW9TdDdO%>+mM`+5*2Nv_T%2>
z-=RV}epZszMsuQPqC$d#G|hhuV*bz>dh{8XFqW0U;h=&BNnL@UhOl#hU$!FUx$r0g
z@Pcg)E%wABaN}iRT|Ez~!I17(Bd$7{y1KeV-STcpF7hlOUbWq@glYl=N-zlF>PS4W
z(ev(I+*S>-iWV}ZtAY21e2S0!rl&72m*WJM2gIU^wKvUA&}bM%abfF&J~5fV5NGMM
z(HQt64VO1;kZBF1tz_PlH+%20tf!vj_=s~GeXNJ;-Jm$ih4q_%@g5MTHNm(D$xU+P
z_##a^NB(S}W|u#T2Uk$sBywz<DnAX}xG^TN=KT5lxkf7XrB8Y*O!|g~1g>9LCRlWi
z7-;QRi=(h`9>~XXec@{PJ0yzWD&*$h?J9Ab+p36nio0C#w1S2^uR(KA;CxY05zYqW
z5-i41N^|WeF}w<5x!6}dZ{PB6`<#*E$b$NS_hFf>!H=_zN)I3pn)TwH&D@&JSq>@Y
zYDO9vaSGzb8i!oUDXE;w9D4<w2kN<Tnd&oWLq?-y{u&u;O#4i((EHAT4`u{X)=jh#
z3Cv5QY~CSNe?U0{r$6B%d^SSG7e$>g#*-C}CX`@!l<*X+R|tma{z`J5_{0zQ>aM5r
zh)*RlT93v;V+5N8S3SL!8VP=iZ9sUqWjUqTzOSB4RE)YCxD7%<dy0!jAeXA$^3q3|
zIm@V_`#x2+efuWc3rBfbl~+gDB?*B(&#~V%<i>^A?kJ3U<(4y&Pu&bD8zO1leUU58
z%UkK^=YDRFsi_S8DM&(9nG!E6^XupGR4UrkVXyDAu#o>PT^cgYt;_D45l!$(2%yGd
zFqnZz?lUAlm$Tp4vxXH(;E9RCE`ZairaC2Nh&Q1L(W_;h_2GPZRLNB`ti1hmJG3Mt
zhibok`6A$agLjyxP~1KTM=KV^OG=9IlIHo-Vm$o1Z(*R6NBIPa<$>i<qgOM-KjH{O
z31{V`&I!T|BLL!=Z{em~%)5BCs_JM#-R=1Wx>VEiuxe=CVS!#P_~Doj^KvfV^-vNt
z#_yxIvavn?`|W~(kxzhpGcXYd@xGHc>MN73qGY=Id7-$ZMDC%He(u6x?GA*PgbG?L
zJ=vF6Q1HBe4|w~F*t|Afv4AHUlKY+dKHoO03g85xDGMFo6OB|fBvd7{D_3gclo`33
z5_Vln&`e5XAy7vSNt8SZKUB;_e`LUm4EYpaIWBQzVAbn}Ying$w>yG#oOk)7kkdd{
zSBm?v%5Al8@<z<kt+`n+b~w`U_S~cMW-~eoYF@AeP<(N+8e{LF13vHMc=Yrb1g~G1
zK?6pyw7bb01dJM7OO|Y5ve#?e^G&t-dDF5(fySv?hNn;SmP?7+o9o6YL46rat_^s>
zF|J0|f5`h%;?7#7@>@WKSjAm0Jv?2O5pjBxUr$(Am>lP67YD739i9RMajY=cIO(=<
z@5#Q~Vy92bJY9lFrxv$+*s;qCJ(b$PImeq!BSl0-ktggr)HqJENxwpG$lmfk{KmSk
zGi@&4TU+(R^`$OFpWou?X$X@b;U`bF0;{GGZ@xyIt9xbxk|EL<;qxE~#YoU6iw%mP
z9#Q2+#KpzsIyKLSzjy(0Wi(wmLO3gDbSo_U(xSW59=jgi!NM{TroZZzAn4P>L&@k`
zd%83z?nQMz!lW^Wp4X1)^&v6$WA`hDDX9%WpcBaW*NLkOB%4mIEY-KNojMcy4!x4?
zj9d~t2{JxWkZhyiPBII;PH}A`1QZl;#DCZOnj+bJyF%+%ntAi4pr_*#Bo#`^P0FyM
z6puI4{omG;2VKtIK2q*nalxm$KZjo0ocHBnBjPBv^(>J4<i`_{w-$w;DD`S@tgfn}
zS&H;l=?G`nP854B#h)-`deXQT6nGpU#PJuE{O@<)9;i1fx1S3@V2^-x+jSaP7n%;`
zi`o&rcQ?{Qv@JzN^RU{zy}dDI(-F2-QTYOcy#|O89--s|Gl=dlwu4QF&!V{$>)~-S
zGT+YSG)MUvA~sL7Cfl^JPz&hEMVigGV^3`1S=OsM;dN}f)?Vp-Vs2;3CxXw8iop~Q
zrDijg;SLFT&(J~NmS^wfb}-W4n@dn2`cCLVr0`%)BPyDO32;ubsEt->WzuJG>Z$ja
zYFUpQIRd$wCqy^cxyli8r(eVFT}`9j9#O!H=N<*ee^gRhCl|7$Km$)Rn8@NN2sAvF
z^<wvt=Dv}Gv=~0|SC4qmY#vV0(bSClMz8$bVcdWAeEZIXTFQFbR~=j=&Awg1YCVST
z{u4O+62Lb4sWas-S^5|@ZNdyOnIaBzy75VuVAtKtTUL-=k9#h2mM!mAXk+s2{)ah%
zUW(2hTVgxa7e&Ii_b8zutDnQ&=jOzD)M766eIB;$$p|Sq>-_|Ux)_O+L8}Qb3JM-O
z_Re*-86f2Fuq8SqVjZ}|<%sU1wFTpUw*^{nu63X+0JzhKf;2U?Sj6s{rIAs1M9!3U
zF969OZx^jDUq<k|rE<+Z(OMimR?Tm^io7a827p}wyxu$SZ~1{1Vx=L1@l^l)c9*ny
zOwVY=#*vDD>7&3rX}>*_8KUhQE;^GxV~`C70M9MUzX8n`VAtL#r)XlR4$a6d|3hH1
z*k=hCyt`pi6R}1=@9px~$F`Y~S-Fw`T73^xSM+4}0g*TE5n?$))=P>-&o)Ce={8=h
zLLX4ufFR2~LQ`N2uxn{)VdA7zqc_Kk#S8Q+=!2)kuP+~5CVRuNtwTxxydf^DoDY=G
zK;u6@KR{Oc9Fa54Kk}MHN9}441UF%X)zPVTLF=Wn{Zp(CV9CX$oY$iZ-G9EmylAp!
zhw=KA&&-b*EoEzUbwg`Ga!!sD%9^>Ues*8A8?=`1mDFcceQ;^-LEBpIV`*u5TC9cI
z($}M@&ht=BNMPPOp?)!D_k~wd*mD%f=n$I&4pSJ*jDbkVQpKmz((LO^7nq{!$IZV@
z1>WHD&9F=OjjbnpB;CBBqLzy)724F&QuXPRwEG{Be=|NII{?D9Z}A;wMn*SB+ty^k
ze1NUzbGST*mLF^5Q>-CLrLjNhkzie1_A#aO)R#bHo8XH|E~aQF3ipo#7cLta?EpzX
zIf>Q-h`KGjnbR1suZi4HV0ZL3We2e8l&wI@X0Q^#RPRhmi%s%{JcdHA{#<``2P^<&
ze8b|O|3P{6`SUvCJc27vnHWv~KzER{Ec}OouO&~yS29m!P^I|ElNT)Mx4K<MEb8y<
z5C=@y!#|aQ=P)RY<*ik#7>ug-P?j|7RtARP2FRa|2@0Yef5&pnP$VzeBQvuOpTlpq
zk3~g0jD@zcf{IILdlzkU<f)ry%sohGM}y$vP$miJ7tAM0;!BO$r9Vc6Vv3dy^w&`~
z4ZM0)3qtFzhFeZEBc31}#h9iNriVqj(pA)2u=nHwxp<0C_iJgLC-a?xRKBOgSC@3%
z#DtZJDfV*|n}e<G=9Owbmhx;(U$yRB=eY-Wg*{-y2Rk}u7QSCFJP0`8_6#~RCN{S3
z1uimX$?9>rV59jk$FV^MD!L0HZSv-s^1COek_Bu!-vF-!Jr%RJ`*3+vuJA#^7O1rS
zFXX=;HIW3@cD$?57sNw@0y!vKW6~|OBcaDqdNyXMr{@a1!fO+!-tJf|i^8Scx&MBF
zyT3z=4E|I=lgT=?_2x!Kie6)i$NVJI=)$^bgSVmh{PnZ7^6wdewr^x$aH>wF%ir@i
z);N*=5nMf*68L0W*<U}3^G?>4Z>6WFhsl3!dt}C=D_5@6-JA|zdu*}Y%Z}(jN-Yc{
z-0X*sIA$yyIdqQ&DryM4aEP)*pXqu*>ZJmAIPVwQpllz_yn{~iGyAyYLo@OoUnZ*Q
zG@(P$aYyLpYHGlhwTkJgA#?$op<Cj*6#(-y{N?|}Q5W4y)s?08Zzp8~itD6A^YjLc
z5b982fk?hN=)Do27#u^BFW18TU=8u`-_-D|H*qwB^Z+E7(0+2aoi)!k5PmfGqoEbQ
z@$==x9ud1=7m~EXVG7bOjMEVCv_>;DoN31QVrVvD)YG7h8=!`QZ620=+zBnx4-~r_
zH*Qq%Zm4Jjfx00M=11@_RUvWVFv4VI9-?y;9OjiHt?sfl5Erlf=%1P<wq9eE{H3>C
zvPT*Q^?%z4`j439If#?)P|g595*8HH1zjxF1gsQr$bqESWv$(?0g>0qQeF>(c$_vL
zSkeJ_YE=))Ax7<*;9}4-zkm4j>G!P4G5BUs_g{GTS{`nJK;{EnzoLDz`0~;}K%HH=
z#vD#)iL~dJ+)63GGv<B3P4CUM%PK0D9x}2LnYmbvuUu&XO&f~b1b||<LAXC^J*q_;
zhsZ-kfI9~VS8ZmWDC*#gnO7}G+eUGNRB*8_4P|b}5DU&8Ct=g{WM5%_Zn%KiM14X#
z;0D{yPvf`~!MeIFEgiFDOXX;Kf7|=odET%8zycujta>gSXQiKZ##8(hM31zAC*7%Y
zy$49<*RK6xh_2nXYgb=aozg@^cRIBAuyQ<q5oi_!m5u{zp`d9hbYDgx0usd$Wl+uM
zz!$>Hc?(k>xNIP<?l$I*88k*K#3$#%&t*hbi8~BEJL9>&q7GVDa9oU#KZ9fF%aIw(
zRwz94Q%;y_#scE-d(+?By8>5AD*2o3D2k82_FM16vuF2;pazbPiHUtuyCo^wn3Uxj
z;)cp1J3AXTX*rwIkg<(#kMr`oFP<_Py$W=v4RILaDP0#kBA??rYYUL8{-C*;S%3em
z@<AFIIk^fCBe8VLLkuh(DuM8qyS~R8{3A>Yz}*L5sQ~>E#`3ke8EAEh$BRRCt2=Or
zIsbOnUJp(Krvw^jdvCje`!x}YyNR;{+3gNIthB*KSJ&a2P{|M0QY+!O^7R0Ysw>72
zGA<}*)xpHW?Y@^+F#)zz4T=b5n=aIm>M=cf8oB5<9MfL5r+g|ze!A}giO=or%iyMK
z$NyZa)zzYXMl_kW_hV<5Yz78~H<^_^9Ubh-tu1nc=lky`X^?lLOnzw$zajlyd>4*^
zNRMs^QS!f@Vn9k+TL_9Lluz8s$}dj(H(pS^5|flPh%HlJ9&-uIc~<*Il<yB8!qD4q
zBC>g++b7cVtlOd$wFdkx*Qu}G6Yr370)_w!C#OPLqwi7L^Bk;nR-a+tD{$?lv$FxE
zL!09=va2W%k3%S(0$S}-JeCiv&91|Tg~lW6dMe?)b+Nv>It2$QsiHKlK)?-c0t7dp
zE&YLaU4srB{NP<v>iZno9M+UM4uwC7#^q|9$`Q4r4p1#LBz=D-I2Z>=cDN~1SVRO4
zp+)@{X~-vC*;dkQ6ba*GAcabn$&YI#JWfP|<SOJa^bVgIhZ#iXtr&EBADEsQ@8_~F
z#53SiEG;UMIuB>iV}|YC5{pxr&Sz9ZXR_Oua=!e^ce;u7@fSFxWAKdWzYG+>e3iOP
zQH%ylsW01d@vdkp!YJq7Pbx9eZcaK|2G96-F5)BzSyvGLlJJ|`>;~Q}WiU_}K~<m7
z4A<6@$a%@i@G^KPoPmhB+Y_JC&@huJ+|#Vg%%}^PWn^SvzqanwqsYj@%*^PCJ)K=$
zJw&*JZvVGEP@0{&dwE?68|$sSTf5ez{rug2QY2K5J@EBR??jutj;?N8qg5DJv1-PK
z@D~hR2`7Yv92^{07Sh2|Cw17E&>s44<>7yn5b;00CH|NA6#wxrUv#{41NV-DLk<lx
zr#(1b2Axq)A<4G;0d~&Y>;2%?e8X~!Go?9i7#g;B52I{!yit~x&x+bgVp$AEjl3X1
zgH@C>5xHsOMw&wksJ`tjLbMm*LCLwJQe+S=LQhuCh;+--SjVXt7A2u0a-stTjrh_n
z$%*O9aKB(Zanb3-{jK|8fE9)<9u^wPy&MFV6zWVzppPH1RN-}D3kEZAA>_Eynzew?
zJ1Vs=>*<)g+Ku(Q1O9LxA$J;z@Y2!@HJN*n=Z0^zR4r_nZQh_30UiLiHS%@l2|gf`
zY0omEE94RvSK4w9$JzUveGVAN!rGRO?p6S4a<3HkX1T2xpX?Ph?}j!f@YCda;ug8+
zITg;jE%^w7(Dau^M;3VR@VUtZWssL3)@scjov({?M^NH8NLIY`XRMU*dqL;Z+EP(&
z+ps^TSt~K{d2&_W==;7-H8>#kf~}$<(~6K5qtef{7h)B1Y9y8qkw~^+yphH~dcVhZ
z54r;hSh+Fa0*c8F{*jA?ZXXZ0zo6<0>r^O9R0mt_+sgn_!lmh<NM6l}#ym%B$oDEk
z9HHBzQOx!TnjbO(us4fiM<j%=0OWkY`A75`sfL9!o}Ql6bbvA$G^-K5O{Z`C{0k9m
ziP~vS2$8T4#zzV}aiy!k_&%oU7Z%#(6@B~&tciz>2zvO;t*Ku$*Je68Zl}Y$g8YrS
z7_&6EI#g0N3=~}!sq{3%LhxJr4hc|CB}QnM2`W7>^NFzgfIeyjUWI&)cvO;(hDJS(
zWsK!jGGZ(s2?X=LF|#kvoRNgomF&WKt2vKV2k?JhDtR0V!xVI4j~{2ieC`fRYQ<gu
zd?}6Vf)?=n<3H&7<f3KVK~QHL7=l03+(;hl_U#=RcVMc=&d!cvW_Gsk6r_ld$^Cq=
zJz9KWEE?#MY#%~Y*aQb|5|1a6t?`M3kxVA;(RbnR|86p+Fa5T4&s5Fj^o%b|M7`*!
zD3fpuTmwG^^7_{l73t}xgFl+EzF6R`#ni9k7{2Wlx(>FSdQ1keH;I+QOKoC3KhFuX
zS{8cw+)4U|z<A>bh~o6~+%jRB(1GkqyysiDXz_-~3#_gPO2UUhAd|y0aC0;H)tC2H
zg|e}*fJ^O$%bihT;pOdlhguBv&YGHXT3A>>Pz6z(vx|%4;5W_Y!lk+ApqY#|O?n3e
zsCN#j!jpC1$uT1weNH^ozpyL^zHuHsIx?8XnVXvnlg`&D#%d>_-lr}?sf1_;6{ef9
z3f88kaXZB@DvJ81YGT7g>FVmL_mX>E|9f^g8y9U0AS(`e*S_%mP;~`IU8@eWQ2%kX
ze*tlGq{@F1BK`LTqMjYDGKf**ceS=>C~%U@RPYKgjJyS}AJ6q$Xx^r2X=yQsTLa;|
ztFZwn8Gd4<*!T%yVWf)<gG+DTRI7U^xSNaYS-#7rx2lO`QV~ysY4Z5__@;op57c1<
z!x{P>^3I7&$vdlaBa7fsQP0=_ImxEs_CojWGF4PY;6*%IlH=f{pB!qM1lXc78F$?X
z6%53f0VNLQH?Yl&!^|7ZWiudu=~JW9*0<VZ?CMubAEFW!3K?I$dUeO@4~#Bx`GUN9
z2P$ns6cbVImvX{-9`<u5^t*7kVNsb|ThG9$3_h`XC@?3^Atn~J?qCF_D`hpWU%&3=
z^~+!G2Ij(XYWNX94S02NY5=dxpA!3Pt!i)Ya^Y$<BP5T8ynI&TP%v+mwr0b$i?deK
z>&ww0+6AyI{=0l9S`)S<ez#LqK3wl5>BKXuQt&ID(gef{>7l8B;cw3mYmlY!(EQ=(
zvqjZhb>F)-H6(?A2fYO9FCj7(dj`MrH{xH|gRuSx;nh}hBEkv0z<qh?t);GM&63&A
zzgD62nlqw)3Ndy*aRQ%7Hl`%ME*h`n(MrB_?b$c$VcGy`QWSox$&m7aV+Bv1;sL4!
z?d=`(QFzbzO5~-1*m-h(!M%EVs(zuyvsW&4aq5uw-o1Ml1bAAmVgj?c+X6-20@IM1
zj~_G7Ziw7|SbS0u(F+CL0YG4osdWxq=;Z+A^{}N`EInXqKhjd(van-RIX*%Ju{Rx1
zL_^ID%M42lPY2>NOe&LgvkeAbK*Z7zN!3n^_;~*|&#Jt0k9q+D1=G7NIXUck<fno3
z&70f=OuOW5yC6y-a>m^f;G;dc@l`LC0@I%e0iBwRU|COOPK>rA32%7_LuD{+Uzyci
zg^Ck~aR{Z4JzdaUa=?Az^7qtsy!l!fVt_!Z6d}evYg~&pDdnSyj%p6=1w_-cP~%i2
zC4%lAICP(JIa%6=LODXT960~Gzpk{nnCdjS6TZP(O9lEk&Db^H19AtU))}5J174<T
zMwc!fa~yerdgxzx>az3#!w(P99=V$2H}-NtyT0q(i2|{Btnm{Vqqw-t+bQw?euHBU
zjNy6eISF@n_kJzM&uxPsD{f+7II8m3@!5DJG@`C$QI?*XoUDwLSQFyy&&74>*kYd4
zb3|Z<hwlseevtna?D9bKfBDky`w+ulN#nn7UpF<i#0b<qs!rTrR50KFPWB_m<6{g4
z%f8W*>#arorF+}FkDY^-sQSxP#%TS=lZHGr$0v?-g}_cOsOai@D^&KdP;7V5o?o`k
z-SJol{E6<~UEQv?XN5RwywNmdrA_!}=IDRC()lOi>HoejH|kLoxrMi$3_x(@xGTHT
zcFBuYQ-K~(d3OCuNg=s&a{ZbPxa~rppL2U&i&aJ5D{Tl}0t)T|`#~*N*Zhe+t5>fk
zgo`_M#?fAdN3Y2QdvxxVpXlU?TR^^-B8wSM!3c4}uSCS&Jju78uzjRpW=?L8MkHK)
zvG`43U0L_62fReIl9&zn&Do)_XF4ouH|E~~ZYNpfh<>gHw#Uk={_?ged7Ipxz<0z1
z<^6I}Ta&48pY9Qq`u^;zc?ab7?~yqREyHL_4z^kzA{k+$$3n}$<D={coRE}61V!^2
z4%dMj0UW;61GNWf56u<oRu<2)2JF&AaRLR!zv+bED*fn-M-<$>)#@h4#^N=TuA<Bm
zJDqgB<=y4aFAOm^FbT91wQR;AUcj)+p}#o`JQK&5ah!_sy@9k#UO93}A5cEgeZPp^
zI}Pq^RHd+FOGKFn4A7t6`S-vgq^{^IVUK!5INNrPQ>3lX9d<j8`g#x1*ZhQZhBS(c
zH3n`2u46x6VICNu`v0t8nzXL2m*S@1uMk7nOL7L&?;9HZK<~|E>csSWTt@amAEyA%
zn&S7S1s-^AVC*)#v-%0sR?JHRKV9ki2R<<OFwNs1SO5(xAh)IgDlo>i4VLX8BeXU@
zfJ&gBj$eF?JXdLYZ88OQ3LN>>m>AEWw&{#nTLko9R8*8~jdEI@NgWpS`iuv}#cuqh
zOW=~b7N~>yt8qPk9{>QSt~Y)`xdsAGf_3}faFDTXsMFS08q5Ep5wn2YE(_rRYF`4T
zVFgiHhqEL;B((gCK9~5S-33fUXWEw!Hl<-~Kbk+OgfM7ukqPtURVr5iuCFo4_$OEa
zo?S_NvTl2J?|zq;SJ{aMsyjg;R%^RGp&!dlveP8wXt=(<JbB~Pw3YqOzdoQ}O}UVs
zZ&JCFq=<{xn{inod<iuIro1$pJm=KE#mXz2rb(-}-TRoY`dY(|`}fdI;YBw<utQZs
z9UBY9IJ#2D-vdFEY9M>K-);{#3$}im``FLkuXIGH7w|GJe!NTn4!FX>$4=<l7s>Eg
zNE&kc^X&R3$~iq@hW|BLM;*c|iqOgiD0@qq^i%b@YraM0KD3j;-5gnG;QJt^$&_|<
z(mea+4Ldu(+!i437}#~f{kafW$F*zmZ~AIa;Nx(dVPGBjR`zRI*zlp-fJe8&VjKdv
zbIsarXMex5X8tr5c;oA@l}Qn)wi{_Xqe-=QebHI9H5#Kls%Xn`4Y2SVNbM&b1m&9H
z@_m>zz@Hqj25qMO9R$`x5-8cIBAlV{uH8x#e&3ee@%6_KU193dzD+0WW{PmXloS`E
zLRP+=>%MH5s|uv6I<mbZF7j%)g!@};2Ovnu)cd<Fb*X5%xzU2W>a|IwyIN@dnmEPh
zi3F{!_P!+eMLRR@J%SqzIu*G3AAkk_D=9CGY!zSp$wCncf*Ewv#3dBj?C{4msd%?I
zH<*DNe|fg=fM(*Yz$3cndx6G;^T~1q$6>Kcxc-rap+{Y&3i2~Zm8Az5f5CtwKAu+S
zCJs}0aJgZ4bKGT`PiGDnE|t#=_BOP4Bsm?Jqs^L<vY(%atgt_TWAWzU4OxVEp@9*t
zNF@yY(J__abb}8w>i!3)Bhh5aPds}ZCTwkmDzeRed5z<Y9B!KDaBPe@V`j~hlj4*K
z=MOnbU>wc1KKBYJb>PUph#+3n(Sdl{ptcv7DDm#nL}iV69t#2YBS2vg=+hi5(>y#p
z&`Bj&{JlQ??-2I(Y*9(N3kMUh?oB?vd@0!@_^G4>&+-}tC$QFXnbS_4AoE6#Bui-C
zy7dm-aYDbuuGL$%Zhec?43eTb${oVa#7ec%NQ_A2=tBoC_<*5_?s13lO*glt6}MWy
z-1Pj_P#4_2D`k+$OP5yieI`9TJPR_wg=*!#1G9u%hu2u|qK)@xWLeJ1G*Y5klGlKL
zlzG#beVM~f9t{j<(V9}SbuV1_B>@vI&05Z5$G&|0s9r%qFX=R0wT$WsC<aQ-uZn(9
z9k28$8HK_-HWuUVt#|oSSk%hV76r1!5uJ={@W#xucPXu^ss{o&+ICv)m<H|BI%w+T
zc}Jz(N>zmxF9DobedU(k>uV83`_KO`p~wHe`}RL0Gr><Usc`T7`N4A{6X)OxfPK*7
zR^}ZQ+n)&Yt%rBr`XcNlo|Px(`&qr8)SN-hUI^TVTzFa5c=f&=y!YU81mH5?w#R%=
zowSThr2s<8<g_MWXpG4pZFo%Q_dEZC<Vjcx5|3{|#Mrgkm~sj|E@O6Iz$<~9n+x6D
zQ!d)0!5+tX5+_t$7gu8(26UE7$LG2=`ka+gq0G7M(m|Z~FE8${SN0?&FN_8jO~GfC
z=EJ^s-#%<?kZ<va^pS1zy}7upa$5mr>nh%tTkqv9Lo-7~lLs!UEYrqO+;N{p3-t6J
z3SRs23m}cT5dbp84AABQ&xhdUAH=PG^w_au;^Iq4N*Ny;v%A5i5`A7#|C9|4PtZ=a
z1<GbUDg=EVzLzqVwAJ+J`{x}!ng|5*dwiN^Xu_or_n-o7mm)8Hs4X4(KJROt`r83T
z%ZG``sqjaR<L_og-Wlt~QBn2xUa4~LTmhJ<`=TY+MH)Ofme|7%Kr%r!!x7O0w>XFH
zGJljl0@oXV1}NW;ABK$qdM-VP7WMRAG-H-5hdyLwg-#3t!p5NheQ*nUbmE`Zd?$4d
zXsC3-<)o4WN-&LRe|`DmI~xSISicX&I7=Jml#%~xJTk37=5tXBpR>f9<5b$~KKN}I
z$AXNsG>=bl70uKK=kboOU=EBljz3>H4s>dt=T`jcE~nqMt3m(V`C5Omz)zJ`#&2Y~
zwpTVZWJ&ul;WcNZr|V>yXT_QBAddUh<2HoSNI@-BEGS>tyuNRMPe0cV*Wx5@H;aZu
zC%DP@z{t=47!AH9d<2MEaRWdbRq7T@%=>l7`5e__9g&Hr4dF))tubjED=T-;2Q(uJ
zp_Cgj7B~Qrp1XbTUZ^cjV4#4fWd(lxMmyzV3Sy{HPYgGvdukkPZEXc_74wKjWUX_H
zt*m%IVu8P8d<1WNgz&9nAK0_>551u5-dfkLdFj$imZmnRxKa$9Ch9+aGy=UOfYaUR
z%9TUp8lZvZo&$l9!ZuVlyt9eM_ya|q>gtaBTb_e*r~6i6qc4TCx=I0;jT^=WSnaa%
zDk^?fM{#)$c*Mo^!HU-SCnoMpEYAhZqTY)B?N33v0b7k{&vyI7eotLo-XU#r62>L4
zvpC@P=T6KSV!9SLy}EWStvB%CBTh21Hei?V5zmz0sXZh?z4Yws{5FsQbll)#kPL)-
zq7gPQ1bDJ9t1vOL2DO+N8^<Vdla+--KAq!UkDLfWad87VFI>p!uaAXH(>#wrY(NKW
zW5+j!x`Dzc|2?Q%!Tz9tfQDP*<be8*oBgaOZ+LW<Ka-A)T`uH+LSW@QF(v~dR-ml6
z|5%Z9F_WW%hlF>ob@n27y-$@la93wt`<jmuLd`!w$`Eo5<9ZY=Q>H_;)JXs@5aDCh
zrHmFvz7m1}F$OOc>&5@FnR|aNyp*{rPlG??T#NntOj^DF111X1qV@wwQQ^0j<Gv(v
zvO8pzwzhVtfn{KWC@hWtUZZMP*B7B!y=t{5AKg5b8QknUdwQrAaB`dnW`f%YtE>lc
zB$!pf^%&-&QU$}WX#5!COweiIynd!t@H*U!T0r#!egHS5NO$o$D(@u=iys&jn$^7z
zP^t()*1()248!31>4v(vt*s5^I((Vj!5+iB_c}NS?n|>WK|K4_LKg;-(r6$R=0W&?
z7GM|qkAb4`=}@P#Uw~Q(&L&!WSeO=2U!qw_X>Y_D$FLX241&a<^)?|P8AN<>-d*f!
zRS5ZN$RS#DgTgjObgkXOpYc0)YFb-)LFbgQ)fdq^gE9Lq9|yb!OxsFuprBXcI;Gx>
zZ}kJ-Iw*f7p@Ow;17-(iGVJXCt$;j{cG^k?8*kgOgKEr_unmy-kx-R_kDn}JKTKhv
z=wLwEF!(OU8wm;{El!k3)@S#zd=cj>BU4I{_gR@nC^Ov8txBL2?Af{VyydY+lm8;M
zIl!KF=ilq7t*~yom2E`E&#!Mg+E)A*?+O#@>V6WBs!9R%6Hp0~UEGK71ZvS{MU2Xm
zjs3uNMY%TNFuM*$FS2b`VX`Y1G9O<6KhI>O<~rKH(WP-uT8pmyQ`ycHnZ^I-7xVvM
zDE@zF-0^=11o%%DCI9ui|L0`G|MxH2q_)){G;O0JOP|qLfwBI5{qz6*zsP?*{J$$)
z|E~`Ym&yNMH}8L~`TyCPH=;oXW!o|R;H4w2kcmC^7QtG3mB2yf!ug-H<ca@X%fq9p
zyKjb%gX4TTC1WDDV8_axd94yMILwUqpeC~jh48c8y<Kxm0<1*S8Uq!B2ABkbWF7HJ
z=l!C?H&A<PPxOp;#lhVwD1sXSs)Y--l!@lS;LMeB;N>|`aa8>f5++4cbLS_*>`LpE
z6f04_qGE7bYd1|!=223gX6ORiFDx7FY;EhUpFVm7D}qu;f#3}WsrD^rEhSR)<K}du
z>~1QiYIY+n->Rzkign=R7yjo>>}K?vBY%r11I{xuccHs}{_NS*=yF^2bNA7f**FA1
z9XiKQ(WsX*WYYQXke~M*IKY3T^hx-`M~~7}qva3<7LZ&EBMXd+_p`F<q+iK_vJ}`X
z0SYHM`xN6GVA$L`8MkIe_93h%U}kK==?m;YV{TVHD~D$i@5MLp93_27_w)M#6JTT@
zfJbxe(4i~UVbyRp%XstVT5GOOj;+;P(o`k?Bj`AG935JyQ{H6$EqU&{A^bAefSvFS
zjsuI~*Dt+<X$*~Rl*<bFXPm;UP0PEQ`nbB-#rjOsK8Rl-PKK@7ER2D`B?~y6_FR1S
zA-M}0Fp%-sKl<)zP+Uq<c4-xOutHH4D1{H>Y7gVhKDu+m(C$yoFzyzJk9_(x`x7U<
z*qjkDIQc?)s!^$snh7P@zP~oB{;H4Mwv^BCWntdFJwXWeshIwijK2RN_&0-_;)P*`
zL5%DxLwEfY!v0RKMfjEdhW0W!IhkNXj_%G5;H-h6l=s>Du3R?b{p#+EnqWXZB>aGD
z9nA#LWyX~#!lCn}@Vmr7nSTHtnC;lhQS==^=OeB#LfCiKdm5BS#Hzhw(lS|1uMZI~
ztJoh;=*RY+yrI!cQ&4v2!e^8m7}R8P!TrqNa?XLjz=Jn7ppSH4NH?raTiQSW)6<a}
z30vA<R|DJ618+8vxNKg7<q(iBa=o#X#`@Qm)Sv9;<rts;Gp-I)^Vj#ZxS@N-g|i{a
z&)5IGo=;KMSk#Z<Q$KCnea|iLlh5?9F6O_L#nc;~>kZ({uS|-pZ;y(O#sGtOMl)59
zeP8B+JbXDpE9TJ50#hR|Cnq;ABq%jZ$nxN-^Cb`orbu~ZSXmK~YzxMsLr;aE&RLx(
z%CjCq+?KtK*lS{Q`w(%VM6m>|ytWO-1UjLFO>!Bl)eHhUFZ@H<DA(r6_jTw%tePph
z*XwX+-n(xS;eL5$b#q{}2j>`vJ=?95*VtLCzkZ9e;gM=;yj+l6MsG$7Kmy>bvhGjG
zk)9je;|<5<eFK?)WLXdw%g&SawSC9AQyW2-Ho3r1sHUxuysaeetL21!-N6;=wZ~3!
zO#hcxzh9h^uLxQ0dz|6tr^0=foU0NkBGM~Q8Hu^}jVeD6Phh#<Y2eeZ-!dRAQyOzx
zo@wXK-T@58-M~O^xJ*{3&@r=7%^io}PzJEL6y`saPw-bW>#Z^z8oCa|{K!Xh>H6R5
zpl{kYeqfKR-%U&#;OC;ZKQrL5XQTSy8SDi42|qioj~VIUq>xmSv;?`QKuFZQ@_Ow>
z9Wrr;kkE3Wbdx^WA;Z@<Yl6gYaIcJ~r@|yoJm}}1-G9Wgc1%K%0i}|C1#qL7)|(W2
zbpf9hDTgnQ-n&c14}0Lg$C&k(iHQmK8W@IQyx@7)AinQ+e?VA-7%0T~HeC)0>SQmT
zVjZTMj7J)#^o&ns-_r!-#G(EOIc=s%!lbN_MO~~D#fNA^P6sAYsGZt!$=X^sqkB1|
z-q_~DhYvJ8;U->QUhFpFVT0zg3AL$N7Mi@eZ{N5@6XLB}U1Pp*?#OYPbVGK<y__5!
z=ba(OoJnk{Y!=4GT*og=yiG{(d8{_`N`brX*Kqew0WAd~8R0utd4B8v{<s`)7<JcD
zEtrG?KZRX}Z7z)(FYRAe77rh`kfXzi66qR|y;b^5I7Yj>X_=8c+6mR2zn+0So20ho
z(Zh$ix5nirdf?l#P!+mK?McAp&`Z5lr_7_fc?G%J3g$1t4u^z@c`wE14!c=dgSb?y
zN=iT%Q(1H~wxRLySBG_T>G%?OU+m|eMz{;R#eTNuH&VlO&At~di9~IM<EY(en<weD
z{orRr3z9cNKo<I}<xp+T$;HzgF1Fv2XEUPhjHoS~USEJ{RyI!d@h1sy4y4mbepeZB
z+MOJ|5DP!RXr&jO5Ank_+%}P-uRnRLIYwF$p1jnjxB?G-ceR@1w;6t4a7|CSEo3us
zik;@wOqokddfZzXQd-jNJk-d26&8yrP|ty@uaT&M_#b)vz?(>uK36tBb31@9`_h>>
z+zSh1AH`0b2!K`5NUNxv5%wt1WW?+`sYM5LKEuH(u#-Q+?*>?*TBPTjL-?1|2A#eo
zsOw*WT(EA-mMw(n>7k}`&<DBrr36^|{~oPRu!M0TP3?ABo%=`VGiZ2pIJmSw4}Uk*
zrg^eRS%185fMc=WFluRkfEz(=;3*(B>VgR2I0PUGNnad>Yu%O>On?*#3JE3ZHMJs!
z)TUbfLON6;63$Z>VgolKT(%lFGp}sGouz%JRw<7E3uvN9G?XjXzJdUcw5A;%+FgV5
zjh{a^g8{tM@m=B<*CK61qW#Tvm;CO42mZ}oYM3%p>4LhQk8poJ#LMv`sN}A34^agp
z5Mq;qna0zA`YhPYgZ@%^NNq@FCoEiek83(<a>JV|VZK22)+WZMDvZtb{(BOfH^x(J
zGD?}!3<8QoDy{sBiS70o%zS)R0YgbF+6swTP}vSB3fjid!uVj_gvw!wI9%632qH3G
z<^D`@*rUPpG*V$aktbKa@E4)b;2LFJft`+-eENn(Nn!#&`IlO)Bl%f<OnQJxcFem|
z+#~l`w1@07(!Z@F`~6SZq+vVvE=UzH9~O9!v;qRMj!pHSAge%6pt#J3>Il;VaJpU1
znIE&BIK{`uPC@2Uf};)SEXmGB1>eVqvol2;t`Eb#Zn*sI_1Wr*ibVaqU^%5XSBhcO
zyy;u2{*mGG&k+SGxo?s%k%~ILQjHy415Wx)Sn6$FSM+xg<$wO*i({8#77!R;o~$zo
z#BWniVMB_p_xJn|{jINIudz74>);Ae_S6fF4$S0iuo&piz#bkm?fY)gzP>>){#CB2
zsQvR#H3#)meGGXKP%?<^<nv^XKo&Ry@!kZ3s0oW317*}_u7AeHDMVh0+3vIQ@{f#4
zmCCse92g}BT;=jH`3rWwNUc5@J(y4^*ZEXp8foNG3_eFL3bf@+J_RR7HX16JEo^UF
z3rBTh70BE((9DB_^e{E48(;FW-EIDa&2~YPKVM!MA<@}=NldoWVt)FF$sCI|tUX&N
zrh2OjiThD$=DW;nC7DP|e+pY0f3oWzSb*U3G{ZvTkG5R<OxvCogWOZx)6o*zDk`t9
zhYSs)^aJ8KGH_9EPtA**gKYbE@9yqYi-*w=BpGl~1hkuf=gupZxmcxrA@79W!ocG7
z^(M6py{sg#V=G3L)UrL#zDLPIbDGKygc2RZGO%sxe&p#a&Sjb0c7Q%RmR~h0eqoN%
zzLUh+u~!N!^cv`<qNwL^@y&eLFgk+x=z#{dIbS9^0#!EAzXWn``rR~Bl9z{$SACyR
z#We$of&pR&0TS~tUvJIj6@b?I%Mwkm_GS_s6;94l5H}!Y^{(Pwl)ajnogF}r943=s
zRJiYpoCnfsVKYKBg&ld<;*1MMWda03hopMB3(N!fwUW!?RXs7iK4f!TMC4*2?Zrz7
z@ti4|LXFUr+2?VOifB0|78ZDlN7QSby?WBN+c^6CZ<-wbL;qMuS1p&QdhK^O;)^(1
zaW4L%T-fvcztQ%VQB}9yyQm3BNP{4ff;57FN=m16DBVbjbc0BDw{$H)8dQ)_K)P9g
zNJ$HVgp}l-3*UGD&mLocIb)pTc)mO;$Xe_E&3n#kUJ+*`%s1SMvd*aMDg$;J$Yxng
z%e%!iK=$+=g1jXFw{AY&50VGAxX14)`iZMmyXPA?q!YJcj}wnky#L;LV;NGpfnt!O
zlD|XXzDLUa%0U0YgK8Qvq1ZffJiL!4UEqppaJY4ufCtuuMT;-~GpK;L4!EER{4VTF
zxj2+3sQYa9wyqB5!xum3ml&MpnbnzPa^fst`Zxk!VNp*?S{gl<`bw-TU8TsHH!Sm-
zT(?8HL4dN@onQsKfD*0R*hMjL!T|S&;uUl=N5MT!86!o|_T^0i3yAlnj$--_n1afP
zsC<ssN{r_=wf6KJE{iQUw+8}$oB}wdCwk}YjD55_<=zipk824?$0B;Qwe>0q!OB*Z
zPtYsAJ<kqy9+@V_BePMFL`UFcL5~Uha@oY&k9P=*1iQu17RL==yod&C^dQ_!1fkrc
z_#A|FZv8{BUe|!<SJ%5Il%TvUW6|U}OHlyBV?&ks`lH(rVo>k-w>~Yc<detq)#9gV
z%LJ<Vdc})66kMqN2@a^YBErK#75?D}+1}3QmYZuVq^na|`FG`&hzu!+cVy}bP{y!c
z%!1Nmv6s7u^W{FtrYLmV$ug7{zD$7TlYvRv2EIOtFKZSto3ZcCa8J4T<+RpX1t=zB
zmotX$NHblvj0Pe|YW!uG9hqYkRZ7}gl3pr=p8hP4ibr=^c_=FymkC*?ke}wtG%5j1
z9NjxAx^q7Jl1&2jb&ehd|FNs!0=LtbaDxt(%I~EA_z|stCvi8KL!Z(jhU0oX#Xsm8
zCq^sIvl|x&C+;#mr>?ZU^zbdBU0O}{<0NPLeC8rnNQD>ZN{|LdPq|K=UcF<N*YQnW
z+ZhOJEh<%+X{dt-5;W>vubzB%a5C!Rh0v0Ew|sDI6XnnySTw;$^<i5q>tr&HV5Tlj
z2Hv${f0j=nxD%tOprG+Fhi+z8mcg{DQ$l}cv*Z5y*C?Siwy*7wDPuET|Da0;wk{$A
z=RWMZxS)hYJvoa1^^w4N@HJq$-=<uj0Q;uGc(IxOe?FfWaphvQ5b$8)SfyoPFoPZk
zh@+#nkbi~pV~jsk`6WUdK{OTLwxbO03i<PScQZENsY$&3kf1*-j!O+(0>Hig6?k^n
zF4D)ycRz=Hg>1`nhasSpCrA|fz%efJ{L7_61q9H8q1=1$msRg+MByjwfBu{WZa?%z
z)%ou;y1Hmhxb{xOiuPp2x(732R`XxoqZtIV1bHfa{O#dBnY8L^)RxTswUxn-KOiVe
zkTsT<e~0{qjCS5xoVbhL!SEX=2p-VRa`iy)MW2Bk`6v!hStP)-1-f`sTd?GfHDO2D
zHJF8S?L+?vPE4}%hGjbsVBIa-FA;#!{Cx-Z2{1`DBB{<x{r#bm-)+2W0hT=R-$fEc
z3uZqZ{P<|63QqsuYD)&d?T{V;0iLAn>#R<Xi*RO|yjH3Q(7+oN9%>UXkc6T0E}6>F
z+eda<g$g$Gz1EZa9z`l;u>6%dcVE*e(&CAN{TIw9;GW>_HX7}CFG5mMlFD-sE}m)7
zw#7^>{nq2{(!C4Mc&Hpo$SGa`I?lA@TRrYg$1lgRH^?SZU=gQfU)1(K5T`Mg!Yt*?
z+Y#o&<9#oP`>9Ri-H4`!K!mGIqQG5VgAzLH`9SO_hRb@VE|20nggSsPQIB5i;mU74
zg)2pQ^O(fly>I`9MMS6rzYRLnxL$QI{sl8?uv#wy%Y~h=<GCO=AVjICZj5iHzx7hQ
zdG&9Z=w<G%fdTy{XBDuR`%16B*Y!dF|7_v3&b}n#ik0u<^4gmG*l-WqG?KX<lH|ep
zbod1bH8bRzI}2ajfOysThIoHf^rs^k62))U%+`JjW%lnO_32X{va;$3ZYs1CBDW>O
zZ{^*kyu~ypm2TD^t`CVakhD>ES2y25(9|a|Na}9gxaiSAIMFQfs(6B<wE~|^OHGBe
zYs}9Nov^)2&f`q_jiG*L!ebbb@hJ6ectTQKJyC6og`r`#iA?!<`%tzhir2+9oIbNZ
z+)lJQoD~}xoIgBm$RTFO*u@O}2>9{cfjw{HH)lBVOt+XrWXxt7@)Z;!!E+vrrZ=G{
zqn9I5oKfc+SLKr2;or>n8OS5~!1X<<Y4KNFhR0O~89&+i3`OI;T_29vsw!*pUY&p4
z*5oS}4l7$*mRb=eL$JV*Z8Q(On*uC9Fjn42r7S62hol!Hi=vSGe&gV~20vz199+Cz
zbTYYWtRS^4zC_lhE{R$K{>O#&zhL$YR31gr3>w}b#>GOb#uR2G=sN}mS^s08wwkg7
z)303OJK2GF6w+op4Nd$KxQ)HLWPA0(`1SkFQc^2$ka8Pr(s)lvC@69o-h-3ebysyA
zQxw1DJMGdV$btyK;y>RVd6UXha<(^a=yU!V1dBWtD*7@Fg|pxunrCVL{|-}9-MpF&
zG~90hh=CP07=<9KObJgXr=DgC@jrUxy0e&4#Q=t?iHRTrpb~UvhB}-f$X~<;+Ho*7
zIEAJScw-<sU}Irrp?)w{qKSI80x%y#%s{pKUIDmke5@z=HChsOR*LWI2$|UMQfzKu
zVF3)Njt&hmwQ@1^dw}B1g7-Ez&<aLog$-aIPUX4v8)TwodX3p>%CdGq#dkmTmvN6r
z<zRrd=*`>vc7K*}a48-YM?!4}*4ipCRB>O<G~`-o0<bdP+iTq!9o5i4aAgI|G$|-{
zaPNE<R?N^*d8|g@unO5Ja7Vy$JsO;zU`zxcke-E_iIbiEtcL?d{Ynw^FwB+I%ay_f
zo;NBF<BAEzzmEy*LFhd^_?dnYbLj2PwfaACT|?IW2PYchJO_)eHO&(hx}`RVP?Zq|
zqr4K8{2X`el_FJh*q7f;m#!=ShuVx~N))@9g}^<qSj5`j+B!WmGuBg5P)`nxCj^B9
z%kF(bf@uVK1~?@XkSDZV6}Lhnj36;}PI+i*N<NXXs{+bCS0nsnU|a!b@)OE(>#~(q
z$<Lq3fYgA2nUpm{WUaRaF5n?Ryn?KmLZQAS4n+t~qo<+QiwzPNB1;qk|ALX9;)!M2
znILYZ=fo3o-*pA|K+8|NTi_ODzH$Yu_COdg41!TG>KzDjvj_>pQhyze$~C-n={(y0
z?cFj!K*^K{dhF29(CRB=zW@*OZbeFJY9|8Rh@D7MBp(8QrGn4ye*lji*}H~d+ydTr
z`pukBd@gelU%UwTelIltb6vV|{Lgh6kzk*hp1uLq*>oMC<IyxS+1IQZQ{X4joTqFw
z2bnX-kZIXZ@Jz&f`{o}<j7up1O3N>Id#c{Qk6%^QCWOv9IyxF;T+AVlUqL-l302c;
zpB4UrEONk%e)-S0;(YvnE+?X^JqZwF$x<W?jHX1eorrCFmK$hZrn7HpJkGuW`3We6
zxUq3=cfvG%f{gLMp+5PMU1|}M@Tt7}{`y-J5n!We)jK*RFeiXFkZcn<mt3ZhAmC8<
zDph4;fRR;OS?O&NumwXytN?gO5L0_$!^BPWB<_C;2lTIXk9+@%-26W$_9;Mm&nwDy
z7b375bf53*vXaS<0o9QEE4{3S8V6dg;&5s}fLm;7G!yt6BXecq;wp!=cgkWNSxRE|
zxn+)!&CS>UpVM|M*TaW$Hu0Wk3Y;0wwY2Wq##<+9k*jqubHo{au%O1F6?3hFkNf{S
zdSW<=OiV4cwdeKjQs=+2X^#OeP}c`v%b)!A6Z^l_+5g`bXQuB^ukA@9J{48@q7Iy5
zS&e^&ms|Uwa0gEj=o=s&aS<ucXffE<2BAa9?(XhRMmdU7i}jV2a@1FU)~4O&;O1s!
z{2B1S11&XJa!pAlhJnMowH4eEbqbA=iO1|wA~_72QkS_yY{lRUXZX6L!88-xD{kI&
zi->SIyc|w&o+rSFYh~5*`7<?BDA*o1Ps?{on4<ofhC7xvO2Y<Co^JM@<j8xsS<+Z<
zv!|UqM@7+JJdm#Z@btZTqqhi8`-@oXkJe4=*OoSD{{0zN9v2A#ftjgkQPKA-p@~-$
zo)b50E2X6`F1sxfY0S{@@S2MIn%wfd`pzxd*#1+_sE7QsHZ>C?1H%{+DL!-`^)(mI
z%cU2=<i3mM3XQGed|k`GoC9`v{~<S9B#X#T1I<@1EFmsMSAl>ABsv4b!}anh_5jJN
zR5gGcW^ho6p8o>Mc=8ES#USiH3F_3(hj1yp`Z+iRc4DimbN{(CZPx3(mV^I`1waAt
z`D<GFX8eKsZZdp7R^1~jFolB$etT<9Z0TwJzrah?+mltMEFlH;9YCPo>j2g_4p=An
zUg?jFQ~*^Gu)mvPYyScN7EogW2^bXwhvna!R9Vz4u)$dZImgbn#W{$?J4ZmPrls}$
zWHTnZ8-|S>lMG-4M^K)cTB6LG6_W3x`1xzO(lISZ#*m~p4iZuj%5{MACtQ!mAhSq#
z7vX?%`_8iX{o6FZ8*HL&_E1q-V9w+P_Q`uiM4kZV&;&q^G&qNnXJjPgb3*3z#`ive
zo*-3OAI4ut-RX~Z9^++#usm^gVjIgAv$}oT>UzqTuU{oZQ?IpvF0XS0^d}I0BkJ=8
z=-iDpaUe8QNa2EY&Xf7K*q#T|H4vl;UjHQ?2QO7{AsN)N+U%)$-;rHUVksy*<5od&
zQSWiENiSE=u-Y*`K0e*}X7PzwD^al(<WhrTpApRPu|HUhxFZn*@S6Uuol2Ex3K0mz
zCl|t-8(~pVNlzH@l^;5TE1=4Kii`cz0obgf@EhR5zYGfxr{G;*01F$+M_Y=H*ccc(
zl}5UNdICkRt-IS2_Gp+~UE}&bwFX~Ai>~ee9CG+MNR#Qs+W-R2BV1M0ks6Ojkc`mm
zy(zZ{65Tn_D*v8oybV|Q#@X2!#FV=oOzVNX8n%v&kYg$<z+9UayQQtC|M6A!-Ba+=
z2nr1JK0n0;Z54;!l+)MH1Q~|t=!yE;4}7foEg*|wetw(y0^fNnlE6$1PK}T%nhl+d
zbj>Sg_N?13aN&dT5M<0G36OJdp)B%Xa66A`JboRO(>r_VEVgPjJz7Ef$_<()m^6-g
zjMR-TL`q10te?*n6^WL9gPV5-f|2^lo43-NcSLPzXm)SXG}^}Y6>Rxb`TeSw;Y~A9
zmCo3_mwDRT-{0`y6aUpe>$b~xh_FH1foeTY3}<$CvE_mIy0pLHcjfA-gp9?D&!0B?
z*_fFLOfcvqv74PYx<d%>r9M2kiG@X+0Dk+<AYHpAr@TY>S`&<WNAGw<-hK#koy;w1
zh;imWm_<Q30Lw*E3X+hJ6r|csg8m1o3R?2h(@h^xBp(j=oJDXSPB{#Guo{04s)hWd
zM?PnyfCfBr=T<@5V*7&?mN@d8)A}u-6Mul8LEH_mb#2?;?IyD?^zOr|nwsX<TGp-I
zL_~c3{L;CHCnjVt{cqgp0-Cq5-F!HA)5njG=;&0VeL*7w=Uc~WG39|d$f)k%<NInl
z4S0ia<(jC)w~oSq<%x{7I8n~aTo7*kemPuOc?f>;_`u_XO)9(}=imq@t9bq=(;1H1
z_j)Jo)h8d__sSs&Y8ylvupMAudx$0qzS6Xo>#4j>_AV|GAsj%H%@R39E|k7wjiIo&
zx95Can36Ja^XC4om&17>?VYR^M&fN9l)oS)B`%e%<10NzG1+G00f*XL-W(`KvqBNZ
zMpRUpeQ6)0TfyL0LPxVX?{_t1#`gF3&y0;pI<&jYxMBIM6-tK#?-4rb@DLf9Sd<tW
zjT<EQzXC|l-oF?+5OjAW-J>k0xr_Son3)Iw94>KlQ0&Vvz&p8eMGJDefryX(_iy)A
z^vIf*)0p@}<K<r==Y^A?5>G<H!pO&`8B{!S>R;fj0%ck<+Ltk*d)7z4@GlTG3#I*7
zG)~^8vG^>ftZp_PXZ$8PI@kmdnBQX`9WokRH)_YX`-=6CRtrr5FZ>9vgH+#>NdmSh
zsrg`ZlAmv}EE$rLLe@fA(A(LG3ML1Y2T;%bwlh7sHUYf6^$6sq;F1VIJF6hog)R4j
z;=pkdl2`)+9CU+&#igY`K{*0=nNSN<vs93`TMW8vqKQk{oRCdlUv*<a>g;eK6jvzO
z+{lQ6goJgvprxnB`19)~IQf1>MMa`9!j?!p5wt3BLxq72fi@~qwut!|7`pS7P$og0
zJ2Wlo>Us!vmD(S-CLv3r;dEacenwUE7BGy%y~8IUBt$vFs&lBHy;jZ5h=@o^IsmmE
zKqdtfk&TU~u+TT}bH|w&9vLAt{Tv;Qcfws^(lrdqZIB#;fuN6ry}h?mj9H!gUKOx?
z5#_1WHdwS`pQEVk-Sqlwl(|xRzt@N7cqY)(=exUp47L2+udk+-r^LwhU}@AkG`N_7
zo&C$j#%1c;w`YG=^iJ)h7>c!{y7j_e--}DJoHnC=_z?8*4ZD^-OOJ;w^51md^Rf#G
zVNyRHi=I6>(aPox<~|(N#DXN*TGwsddh<HhZ6jctGuCBnxxacPZL;_U?p2@jG26zy
zWr&}vs;UA56YfH(vg)cT=5ii+TbK{LL+R$2sS1oZUfEe_73pRj@kf%g_?z7Nh7NWh
z+qOB7Fo_`h`&X8=WoW4XbxJgRcG6T3NtZ7LuA1?WD{GzVnBHK2?d!9F<RCaol$L&A
z`h0k}@VLGZ)Lybtlu>ZM4t8{ygFqqp4GMA7j47%ahM)3{+V}w?1#NCf@X3-d4;h-J
zpR}Ku8JDtgUVA0AhsSLZR2hkw490JDa=Dw!ME&`^H$}Di^gS;<{ZfLa9@)c}@6<NE
zR?<K4Ij=L4bE1iIVdtwncc>NNF=+`8XTA7xH5u6U`)t%|)=Da*@jm5#xrazn7AzN(
zla(#*i*)CD@Blu=YwE41$2VLy+lw+8=;>$couu%f%~sAG&yykC!<oN*ui>=5aS9nt
z+ydtqHgIC`jy)sIkQHni$ut57j+PFWZgpZ}BEa7tn^Hi!BWP##+#C84#Qw%)k~h=C
zhX)Xum??bzKv__l6|9umw2us3!PNph>~bX|h}7sIx&vaG>cL&Q#Hu=53|(B3QrLs{
z`|xnf*cb>B3{zFxJMNwBjugAhqy)^t=ve-2yLolwo}25(8yDp(_*Jj1k<mLf668-)
zsXdArAt8UhUjM*%c(ljh8%5xwg2Cz_Zvj%zi8_aak9Nkwr;am!283NeQ84SRU1H2s
zZQiVJM$VlD3-~)ip3lfZ$2JTyrfcfzYRJDg2vKhy>=8)vry-n9{_P{nHRKIIF4@Y5
zA!}ssSNX3%Y_iYX(x|epB!l0HL~?T|(vWjDczI&XN8#q}lbw;bfLk``b9Bii1Gbiu
z^rv8;k6Z<jEBHkXxO+S#E!KY0pS-=kK0$>|ad>yl9v<^qur%Sd)!P}iZ9ZLIT?H?<
z!T_x11W6K7(sD@tn5ui>=?tyc>O^&+Sv5*;4}Lcf2IL>|@@hnZLB={NFPv)_+JbGQ
zs%l=DubOG^29z?Zp%xF|xC6CEr?GyKJqN1A>ES}u{l?l_r*ge0LwS>sR!j-+7cV*o
zv&AZ=ppySkuX%0y_xKp5@d+gInyG%n5=cV~ap3wqT8z6YPPe?d`N6RDJ@jw*=d^TD
zT}wL-D@Lj+DrpZ7SgSb-T3T{I4~vHW0q2GV3#$Af=33@z5)vfr?Ne)OO&8WBDWy6e
zKdyV4#)mWv7>v$5j#H$?{2e{~qc;V&e7x-mESI)bQmVngf|)3Exvvpv%*w{5tE&s*
zy-8?!peE(y&{_yEurM;>75@><j{%JONm(+FRe?&;$=R_4Mx2VHKP<H=guOkNdo{U7
zsLjL=;eRMdpnY2g^%QiiLTqd{tHYV?;beq(conv@GjPBS+0_uy;Awuuq-<Z}=UL=`
zhmg=O8d5*F9UT6QmiS04iVe4x+!D4J7FQkd?MXZhucytS+nMW%yQl9}yNHwu$Hv|K
zvA)hqUgCQ-GdNNR1RA=F@Jmf#Ui;6k<K`gE$KAGXgph_qOiFq_<)C^Uo;-Y>7mxN^
z=lF&Vz!d<(3txC{wddcTdUA#4&1?@xk`7}q9@IVk7dPY4-Fm->@Z<6G@qx8cNa$N3
zucO*=y{~Pz+AlFXxw*OBij0Vm_$H==tarf3Sr$J3dlL=ZsbU7fRUkk0P}IP{Kw4Vn
z5!ro%OWolx)<In(=$ioV;Av2qag@idL+)ZHy<DPnzVKZcreJ62J=x3hei5y1P#4hV
z(&~k__d%jJbrx|`dh#t#<Qc$xR@2{`-5hXBqckA^#{qZ{;=f@ZS8H>d@!#ienFFwm
zvYJ|Wx38ZVUHvpSs_J#Nx*iX&P_Ief@tFtjG`QUmhZc!Dv9Yo4yFar%B<pm_lot6P
z3!cz?X<wd;SRI7qTH$$%Rem{HbNdWFCuU)N3tL-F9i8wP*Z@64x40rMvY5D&7|aCH
zczT>q^@;D^t5w!Oz>e{qcll3#uB?#a<8wmK_AChAF>!IncaxERYhx4DLm;5DbFAsm
zbbvX;^F>UI6kHYjE;lzvOFULrL4)K7h#n9=4*%A|t&WE((8yOsVL(uEgNsQ+BN5m>
zTqzb}g5HvMm6@@2c8K6qYiN*2`?((DlqM+)gjOk#u~jE2t8GN5f`<JK*Yr?s2Oa{{
zEfG(CuCDrOZm&}B$*5ZDT8FM>R#xI;%BqklReu-*t>5NKW)euT-F^;cr&hlOP6Jq3
zb2J^g5D^1&stV%dl~p1f0pnLv%*`FwRD;s~Ab$?ngW^)FYXifBEw3-1X1dPXc@j0B
zRAJ5$s*4XjlaQnYAuS|7_efEB@p>KQ!S~x=Exh;RfnLRrAdrz~c_SWkzDI|9GAnCr
zXs8mZ4keFeFf|n2oIp9geMv(+<-w^b?8^IebXWoYf$kibOqbG9$@w2o+%7@dxGCM@
z#gp|4Z93Tr(<%(lVGl~mtCo=yv(~QLNkZ-DgMxt3w?CLIoyP<KQ#Ny3c2*GY$S_cF
zFh?EcRK>c%GwJ|rY9Q;Kgk1+zSo-?<RGtNlw}no3M>4(k$(WrWHDc|#QlgU*KK+VM
zMl3IvkIy;W!%a}=APJ3g1!ch#<<kHG$ht=}e!=gc1G0rZCrPE%IJ*Gbro)qUph1m6
zt%o)uK+DwG`TdKw=x+-Pgs^K=zT2iSlM^sr=TKQz*3Xq9U(Nc?bnC|%76~iN)snDQ
zeS<pH<m^m0=Q;=By>D;-`0?YRZ|IBQyhHQ6;YHjW1+uev<u+j_PQ0u2pKb+2NB?MO
zn5wn%(VVqwGVXY_nh!M_EMRe=g%;v6T)o6=*m4L@Tz|&tW!_YfnbukmB9sK)(dPVq
zXxMUXvG?JOtFG*8JR;;iEPAPY1m21TPW%@OARQ^u{<E_~&SkQdr0-21mjX5AX$seK
zMAa;KK+gL3>}%UL7U}6gHbO-pmG>ib{fwZX4rGxcG=9)e{hsv!3n&12;}5S{9x;&Z
zO%W>Yf=|{%(c{;bqZTa6^`_y@a5{2Ce)f&BvN=J}%08qaD*j^&?zcSunw8h_VR><T
zuPWHo?)?r4ln(XTyNfBC%9tQ)NUh$)*(g4mS@>KHSqIH2?Rrs%m98P;It?C`X^LQc
zybODiu~BKYVC5H6^B#Or?q*_7E`WIZA`?U`N6qbkD1z`xdYPRqD=S<3;R7)b2OV9>
z^9QYtq5)3(Td#;mU$dd7UE^)(m3QMwqs=J}36ra+uI7FCuzZK-)>KT$8p(kXb7^*g
zNQj8N!JZ36E%~acTF0$BdGP^nvXLu=sgc|m!(I7DEY*{@JcEHMp+(ozYd@UQB#H~F
z(Tk5cn7N4ap!3;r_%&3GhAJ(K4UHlrVtM8E`tHJx0e-{^s}8Ci$w_U0A{}UGV-u59
zh!~O&Zm+~(l}5Ex_%Srd?TFQ)FOcU1WhSmi?&TdiOKAL_T_d@RI!VEuc&^q@(fkl*
zwzhN^zws0Qi>l<s$Pi4<^lw<B&5;Z(3@1Q+ztbYaS>i_gd0iYQW9o}hi9kZ)E7Y97
zfB#;;9?<KLgEpK6OgY#S0uEQnIS|PzHjUoW&>#T!m+bX}`FW#!m5{oN7o@yLeYUim
zxEmkY3(`EgxRj~_q`{9K^@}og<A%)s{`<s4k`w#dTdedei;G~?Qw2Mj)z#DE16Vy|
z4TJ-<^;A)D+`JoN$cs+lk^^dM$kCk7`SDXVMMuY7uqk(xS9<o$b#F~wj4cxN@{oA9
zs;V9A9f;Z4pW@%@?KQ#1#<|h-)U)u=Z2NRxyT3oN`lRG*w5jSzfjtO1yS>|htZL`z
zh&1os-3|9Rn7{vHettMt%4O&U5eW%sVV|Sk<`@x~+Ak-b`PJ2Qn@&>|bH`slyv@{q
zZTmJwDURlY2No95gpG2~&cT6Z6j)UVIIp|HAYM{p1?G$cZyzuG_yKV*eo4-oGb7nz
z&)~RjZQTS+3@$ezA0d((GZPbJG36j<mKFizvLoJR63xxs{r7CMK4M?H*L$gZ6bucs
zCICUo&(Eh*p``^UckmRN{hCjf+VTqQG1ypHYcvR|sra2)g@nE!k$L6=8Q@k?RAd2z
zU{6=q-nIokC1s=qcM__%iI0zm3lv~VXm$a-(9p_>h~P0x`reUN?|q7vI0=Tt!@^8U
z%gaV2C*+0}788Yvwopse9)a^#XgyWpEx<4`2sRAlY-XDpHL$>WV4$<}TfNidXJ5rc
zy(vJUzzqYMf^Ea2!$Siw$mUpFTIybUeE1oR%Af{T#=m|Y%W*yA6pZ!`Uv1eve)I?f
zb;c#%U4Rr=wR9p8U;<}jWE2X)C9sdDCKl7csFZ@#tPFnAh_?llDe>{U-;BYto-!e`
zTv|b4dv~|q?GHmc3lZX*8BH7!5hMOE+*Tlq=Qip5(Lv=y5t5I<h#)pMHNAP8*YR-6
z5F->u1&}Pmj~N>LGdL+v0`}Z3eSJ6)z%kBvWJh2;s0GkRFg_hfxHXpDlA(iuc?3LI
z!AFfSmY|(NhypU4J}Bo(&aF0j9MmL+IkhIk={2c?32~3$^yK8_6r&qmrw2v}z%^3U
z(#`ov$&eSnN%i`9Lt`3UhY>ax_<E&R-h?jcnYIO2-r&1;>%$g!XxO)YEH2*77b*Q}
zNa8;V+E5Vfqe3PQ)hge2`XAnkL4${55G?gPi>1Sp503VJ9ZpqDfeseN3~|(9<uQ8H
zD<<=~yF0e_OZ(MXo+dlbO;&<pviF7Q=woAJFe^z&NtH-lzg{a52r^I!$F8oJ+_Hf6
zAbZdxxG43jC<aai7jmUwU+3oF7>MP0z=e6^Mo8GFD7C~W?joglJxT)QCr_-fe<<H+
zkAA%Ub7?7{Q_Y<uo)&mVc+pBzVxn<9ORlNW(XaN_h%I=!b=a8`5t|n5mC*i*h}hhJ
zO)PoX_I~O2Z@p!Lm{|~pM<4v2jq14fnp4^ZtS&wQczV45WjKluE?P+>az)@-=~sGs
zdRi4o)PXaj4M`vcavR211m*>e+&!6wNqpc2o}Wht_k0;eMX48%k92XIFwmu8%%)(!
zVJW{AvEX4&t@glkyaX;lv90JHhrB}Y4*KZyi#Il;`cJEtfYB{XyJX1+csXVHLK9Uo
zaj~_c1R$k&kQ0`hdzJQSN{?s*Cl_-HR@4g-a;Cj|VLCz64ZEynW@d<FLo5h8f`(2L
ze5)k7gwg4Jq+e1}Qkt@BHojb=FD@e4eU;U_v9>;efC%&4>n<)2EwI-R;L~vU3{dI2
z`CI|CR6WeqpAiyPcF%m?rPiF;e7`pF?O9m!l+_YPN%3Plcw10yyfR(jRZ%r26E0Pe
zh#O6IGtb52=C0CMsu~&^GTy)(eHlogGhU|a>E)$-FP`D^7M#y5o^KNqMJx8s&P`6g
z7$kETgN9R-_LxGk!Hs5qc{wpom4G8=w<c5zm^UiTxvp)mQhw#~t^66-<QEjAgR&3P
zARG$O1cG0$hclxT!^TRlDs_nIur^L{B?U_&1$`_<xJRd2@cu+MUAb~H%Hjit0h*fQ
z0O(}VrpCnhasp@!6;{Z8@r9nA-YUsf`>36!93U6USKGQ52HM(g{o?2j%Aqy7SFn3v
zn{SzDt^i^QWjgvhR&z04p}f3@?W40zS>*M&hQPf8<cv{`>O)e}3QVHWg2<S5SnY6f
zUJelNdk!uX+8=I;KgK8P>g!WS^m~XWPr-89EdJ%=pKEK*zjby2)KW5zUlv77HlJU5
zqhx5P48v(c9mJo#t*olDoUX6kMNUnza&hg<f0e`VNavF<z}fx?RF-f}W~}ILyp)>6
z5*aO8Z_Ot(l~8+3+3kQA3C6#w=xTZ8Py_&o04|KSR-&V*pN%bG{;q|9zM!LbeEb+&
zrphU3w3aOv1kY>X=$oP<rtSndfa~L%H%d)u@OZ73tH5w8UcE9HxGtePwJ=0}_Vs&#
z&Qd<HjeGIYw+Rd;Z%=Ak<)|@B;Iz^z@v3G1ddA>M4<5$~3iJn=a0YGDczqcM4R2i+
zD=j8nv)0OILlQrI+Vk{1hA~76AkHizS*KYw2yQ&>xW>mYRs~=H{1?((_F$ggep<gn
zfYG*A?gMqV`-0_*;*TGt2YzM4iH=Yc&rOPtUz?j_F1|d;)<k-3{r_x<+BaPeNvkY{
z|2Uw~Hm6!rIR|=%f>#~3{uQHjAGu3+7&NKWd^(g%BG?lgP44mJ#Y2D=IheW;5gE8c
zOooN$s+tBL(W<oHYeqx@T937c6}?lYN72F^n)I9}#XQ5$@{!51HPnt7a~3AZwod8U
z^4QZC@SecEoY!P>Rc!#E)~HNprMlsJPu3LcYYj?8_`uzUWK`*t<f7#X-c@eyzb!sA
zQelCD+k!h^tEi5^EV!4#1*e>aMH^ZF_U+W-V*K#JpB<u@m=12+TQ6Thhk_~5lqH49
zaTknlXlaM#;6^z4J9{>J?iDboKGy~qIB=?>5yUI~Utx^WCKvMHT?We%Ho-nP4G*oq
zCBA*jY}xy8mKCx+1MmC8gq8l7kPWfSiFeU!tuDb>5*fMg>w9^RtpqM0@?QlWsT!r8
z=b*oGaq;2i8>$0>=Ui*Y^-+O+4pG!_n3tqlm;=mBVA>Fpxiv^d^{;J%&I(rVAfk8=
zOX(!`JIA}L*`wPFmBxiPDIV>tSI6Zm?2X38sVYe~KxkA<jIy-!Bt9J)WZvJS&j)KK
z*Y@zjErM=$xEbV=@5?%E)+`h%O7*?{+rVuLf}neute;s?fEwruz&;;R@lM-sbI6rv
z@Vj`AmtD256A%zEff*(z&u1^zY}U;@5#aq)p4+ehP-9L2^Ujzq6EL&9iDkvn=L*yA
z9sd2fp^=eBm(AZLn&(0u`)OLXg}tMRdfk0}knObu925b;>7#wG-q~42^33Gq8n0u$
zHUTjI3=Xd7Pj9W&xS<H#=j}<`+cRz}>S|nYABJ-RrKKyGv-QmzEv#bBcmLjCbyf~V
z{M#NyUdNxavOa(O=z5o8Pfqx}fjkPv(%!APs|UXY9nVfA`p9x~`swDt{!E7jhlH3I
zz$;9XVp6?iD9_j85A#&z!@|N~Za>)I_cwTKzxd;m%K~gGLbpXkF2f}yCLV7V718)M
zE-tJd9Bx}ddZ+wBJW!mLm_CWa3>D0QM0|nZo$2QDEg-6l_Q@X1_Vo0KeU#`;<1)1l
zBhhO<*#YnVddv23c!R%9P6{2b$G^9^I{xmt{t;K_j)r!X+aCp6Tg7)FpFT|v=QrPF
zNYt@SNoUiq`DqR-JBtwp+N}AJ&%?DEG6>q28i^EFpKU}(J4+Y8=otSHkd@koNrQS^
zl)oxDh~+rgSp)*NDKVJa4{a|_Pc$D(oy)~V^Q7@~U*5`!WlyJ54rqD5R|`9i54p!J
z@zi-tm|<_aT4rEq_yu+y%FW+PweL|;*<$DAn`Ye)z6>^@!p$V+1CqJU_hie6!zG<=
zGGUeYb0RvS!<6}xv-{9_{eDdp3A=t%pjm6HSZ!kD(*EWw`c*wW@P7OX%)^19p*aXp
zd4?Hk-x>N0Fot(fxiu_nuU^#_1ewjPC;j13icc&Yzg65DVvSup+@`~$^YUthA>R4-
zRFDZ{_uLPIAQ%7ql3DywivKJ`n4J%|ZU_rg)d`?OoZb;2z?w<#!3!uD`N8PxIi#?d
zL(HqtmmP>yhMNWJ=1sT&)KhF|HGn1O2HREP(;5`#ka4O=-`>fF0f&0EsK>F>$$X&Q
zpbk?)$ZY)^XHBme1Z)=z1rc@?_x3C3>Qc=d+^#Eo{s5B9Vl9;Zwt1+P3%8^p7A>tv
zc27<`7v^QxQi=)ny<*Vvw=Z92gO5(hj#v%1LKFq`imUn7)Hs^lKDqOF$6WEAX8BBX
zS<LN6TOojyz$#Eg5*BXb;be+3b~i`RuhoQx)O{=0=UcPYvH=LQyh%$9&?>j9S5LvX
z3&Iylyw!hI3Erq$+HAIkyZ<G?^XciOYND)99cHRhnOw-<g)i@#mihf2)j(HPCg6zx
zDi&vSX1O@Ms-Paj1Brstq1y%`@zm%4#R8(wZvERdF+(Td=Xd(<IR~Nxyw8`BMb#?Q
z;*~v<lUP0y5)v?5Ja%43!qdgs<Z;js-7h2t0N`n{$5P%K-CwCDb_&>zL;u?k`4u&8
ze<Cq8TjBGznf#objD@I3(4>5KlY=Ab+qWKRD;1(P^27|u1IyfYgb?ZO@99THs;V3u
z2ihOb1WI=yITeN|7_5g!^74?&eS-I+V`CW*W83kl{*N{X^DQ6oXpt&9Z1MN>KfJ^r
z8X{FX?(XVJ7d$@4yQ0i3r#SFA^N3s&EbZ==bj5YRL<AtXddbuHLnZn+6}(Vus9i(m
zPw_tBVE`Gr%nc`_+F|7QfG}P*|A=+0SS0P)xxV+`4TyDt_(=he_u-$ce(Ko>G<yEk
zg0h+N0E}rWX=paYWels?ilG_mi0{5~7xttdT-JyJw>$koZ3nwCsV{`9$_{qG+m`tG
z)jUj5UFoS&z{NEsO{!J{WjoJ0cdX#)r4~JTd23hKpFfAhKnV*6nIYVERtRJm?5V1>
zQ~+Onv~7C6{_EE?K<w@fK|!|*PEP*VDm||G@Bwb|F@b|B0fY=KQ+9lz+fB>yvOAh(
zCmS0dRvONZ<Z{Rdm$5kHQS~X2?GqGVuxi{{i0Y{=7;60PhbHJdK*Pp1-Q7(vIs~^9
z=P(3vL3ObGR)LdA5c>8IFT-=k&f=&rgB(Ks&d>g2awzM2tyh+T0a;u-I@*zkySwMs
zmwRG?*bv_mmPI~tP53TGjwBNk(`ak1)`8jAs8?`qFau~GsOt3<1S2fx=Lx_&24tYX
z)JuzZ$qrXQ;Vl}v8()WY02K}VzCC1MW=2w#Ip&s4EINekbl<~6TX0s0gd3v%yieVw
z#QiNA^OP3T($YfKMD`TD8fQUg4e=U}&HMRtVoM@I8AB2I`msF@0Qw^vdl1<<&z4sL
z5pTBh3(Fa-od7#1Y3Le7ADy*BKKr*YE@r2Q&(&dIR%CdP(6yV6;xbOvJ!`vHYM-BX
zWU&SEJ@8`0P7s7bc(8eIeUdapRyRd;P0wa;&sU4vwllk^fru@x>)L2VF?x$-MwYw@
zW7Ka&e$->1P-Qu~Sx~?LO|dv7A<yTL5w9PgJ0MrQ*;1WZR5y+HGEDw>$Sid}JlNB$
zEHf*~va_-pG34<DalbG!vbMB@oQs!RBR5d3%~}F*JCu<X?7DpOib}c4Ay0x2lai7+
zl2)EQe-2*r^X4}+%n<#C)oK?g3=`8TL@1Gvm`$->Ktj8Dw$yEgE(!{IKq(HB8|l_#
zl2dcQI|m@;u=@RbdBp+o>yzExZ!XrBu(xziH@Y{92BjlCJv|w%$h##mWP`Bzxq<dl
zS1;<di60HJ;N`5*CapZ;)5xE_oAZ4UDz#0*!~66XEtS+)UnO-)HTc=8c%}EK-m6%b
zd^37}_X2n-j@I*4Dq;o36sdUB71SS){igt_*$v^MkHMMYaV#OE^=o|}%9iMR@yH-V
ziPbRjb1enP^CsINe6hW)4I?Mj-$uQ08WZ&o(lTf25sMm9gJ9|oB`MpH9^UBv0ulIq
zu6Tf1!OP2S>|HaY#>*N*!BPkI4*E^cE3F;}l%k{1C-PH&w*B$hdzc#-ix4+Uc|WV1
z`xIB06}E6r(09Qyi|~$Dr8*0w<lF?3bt!Z>saW-p5nb?fl8_)4CKM15=R8fjWZ`MO
zo)78)BOcJZuT6gn%GAdS7gvR@t9h$M%_0>b?83Y}SRpYpF`3S_e7*Gy0!8EETB`>X
zl*{ijY;A8-avEh-JE&Te!9OJ_@fB|3!{cKdDxtytGLxkTTvcOb)4>Vg9oE5jusY&*
zuxt5wcg?h>8&>a{<!7}GnvgDu!*H=~5Z_A<3QB{4<W1ZzH@`M8rzMz5X<k5zBEU%O
zardISdQ?vi7j{lO>DyQ4LTL4;MS*g{EhOCh<7h7pZYkJ$0r`NxFCXHOd=93EHA+v+
z`rNaPJCsZm{N=+TJanwev;_ZKhL>|ym|Qh<IMkf7PqUx*O#o!*zlL@>*{&n95kNmO
zU^6YtHXY7C0H6e}5hg~)=yp)T&2M*j0Am{e*C&%M*`kvDOdq`nDf#f=V2drY>pVI<
zlXgD=HYiZ^VF1g(QBCu?)gF#!h(Kp--2F<b-*o)jLoSh(QrP<~YRf=d+|kl1)}Ij}
z`4qQRS$Rd-4TM*J!HG*LNvsCz=F70{nVF39zXM6Zig);~{d#G$hTH}hO)Wa*g4S&N
z@iKe_XZ^=VK>@XpFM>~BxnWSKa0g-xLkwAo)SKWVMKzHJw2-#=@PMdzq<~wKAfXk+
zeh?&`lAOFgRc8y$cAk6gr%%7uCo&;#cyeF>ou?hzaYO908E=n*+S-Jyz!I~obFft2
z1c&&oA0pR8PhQw<>QP9}qu)4bdlTcZ;{DEt9C~X25ZMK1hKIWc1`gUI(r)eV?crZM
zb%BBK*!$lfs{yRa(AAYulJ?OY-uP^DK6ivX!=LSK*kv^ReiD5DIUmlOv^1=p8JJr9
z7;h0F$>~KbPC$GDqY5H}l{#x_D7R2tB9+I(RRu97YcvGYZp#xRBd(hj+j@{*o1cUy
z#mRXE494%kftrSo76?;fqThEshXPC6ZP|hugPUQ!5Bonsets-tYinztBa5zjr)JIK
zJJ)&?((B_XA$1ox<Sxy-!*T#L^E+D;{(A+>i;KZE&im_-z5N{^PM7ZZ%A7^kr}Qnc
zMXQ-oNJbCo!a&QRY6rh0{R}&BY=rf268q`((YoeS8}gmo#Z0Mp&W!P8O`Fcb7#m}K
z!Z|G3K-Bc@a83d>jJzD{h1h0vAzyL#lfx7?ZD(KuVX2F2j+?z9M|}S{F2HM)_XVFW
z&}(m0(-k;q@&b(xD+K_0pGAPNI<)k9<Tr7nZav!Sdh8(7_9~y8=Hh6jM&1zvl+?nE
zK@6ww%NM=)w`Qxr?DogZh*EUO=6n3-_w+|fLB6oq>Tj%Yvyc7(;?HU|Mt~?j!SGEV
zd$)ct-2>F}dzo%lP!Kpy+c9Fxj({v<U}Qv0OI%A!Qdv1h%~t*?n+LuY%MD1Odh$`?
zN1H3rrJ*Kny&}(K0T^FrX7mol7XGITyUwG;Gg<_&bg#pJU{o^{Md0(H*NWtctP3Bu
zUdlivJ36Fd-sa}ywAe;J>4Yr<9S)$NMTKA!3BkPSTD6$TKw?{qftSzGEKm)YSyL0+
z`F7NJrHjl0=ft@Fxy$#O)&72VFyL3)a5~@Kwf?=ZaBnZL*qaUrgWFp#pvCVznB_2<
zO+bCP5rkE$5UL7SatwAp=c6Y$SXSr9n`v>evBaS#FdfcEtE^eK_w+1)v=Ffe%Nrmy
z`2AEjJO<{}*;cC}xPC@mRS;lKkiDH28+O3wggN=?fLaBz$PMLtukT?R;KQOCm;@cP
zIXOna*9AnufgUC}m=kweaeMIpsxA1zXqB0m7)hVQ^>@a@ffHsoU}~MyTr-*n_TP!j
zIG&NgMAax0QxRX_s<N6Yv8dAu=Qm{WgNU;-h`<CIV_`;WmGj0XhCi$eA<C$gmO<gI
z<3f9%rha-tT-*bogdMt>tq#*CL)s~&@2eL7?P{~Wqxmon_<O-2<^$e7e|LyGBLEw_
zfw2V%TW7F+1Jw9z^Zd*Uh!~psUO3IE^1!gUV9wAPzkC^45%dGu<Q46{_^q;4v-HU8
z?8MgYE+lAOjQIQy#l`(m4A!OYa}aBy#-^jU_GGtyM%BTxl%GiWmFvl3TvV>)Jz3^B
z!{^Vzx^kSlIC~q!#VEGh0$kvr4D%<dx7EL^!6YDXjkBsZag-$_G_$m{uf~E9hFS?3
zAF5X1b{tHY&jNUpoRR|ZILM))%L{;p!R}xT(&r6tu^s$Wwx1>`j;X9ns&~9$`yE--
zU?>um#c;SG($RBRduj5imR3PfPzj<Ki1^EWUfhagps8<#ycsZbmq^GecnA!g0Ic&8
zO0cxf0#P+ETL}4~%dre2Y2s+uIw{QTho!?g7$wrt;X=5UAy@n%-Wq%^q4hbnJkEtN
zK%4O2eqbhW(8EzOKmYst<YXpTvx71yjKoXWZ6^<&S*<D)3v27}1of^>T1Mg=gIjm*
z&?CIV!sK2#)<AO7m=}(tii)KZul07v&7A*Xn4ukiN>ArG+b(~V#DVK#l2fm)=~2n8
zX=Egu?|cG+qp*$;LMe*~&C(}LATL?nM&M|yc^Q(l343@<4m)HMFkXNBbolmAVbhzg
z!7H@+8a;?>MgnhgmR-4l_7m_u%d96^MR$$W_AuskY5&)Ji-d=DM<@oFmW_^B@a%19
zO1h9mBR*$tb%(jCDa?gmb|8}uEi;(0ZgIS8eEcB|&E?kNE<~sAaEBv=c?*Do^EuxT
zQJl=5`cI$0d6^o=2uPlJB`S3~ky8G>d3kq<u=BeBCVCC#&NcE37sVI(BCnuex{lCg
z-+H$<Wgy9$7=0;!B#T>5jlj(ARRznReArXu+2;(Fn|d5`X-Ou=6{l+TC1yN(u$S;q
zKI$zwuD`zL_7bou$4igz(0_sZ#6Uh%s1YAuD*P5i+bXV}`J-jmH5aK?IaVux7~Dc$
zTwLm;sAqyW&|+_Wc!WunAuK3qlIsG+;h{a=m(XkW27L}qM#k?qh|5J27pzm*$<IvH
zQDLd$)|Hj9A6^z)BPFuH<H+WI_;Tu*vazU`T-isj{RwmJ_pEg>VLBOpJ1!~0W${c9
z%>p#CXFjXuQAng3gr)n9^P-wxM8<7FcLcR%u;u%PNjQxV)Q9MK4V~ijxV~`17A_sg
z=cmeN33C|sehy8KkGmZ0nuAxY_um~bEY7eTVUV64dJ%x9fqw;FeLfUm3PJbv$`1D^
zN?pJ01XOb#jNl!$rrzD%MJiu{uIcTObuYP*x%mgX1+*0TvF7vFgM%nyC)m^LtUcDG
zy2I!Ata5$@SVo`>6gWF1)YHqrBJpIp_*TK>{@;I^s<AOJ6jW3w@kLZ8E){dzd{<MG
z(b58DaSC#ranxtsG#;^Sz>zB+RWDVNq-=TXTMwcD^<||%GR}#7RvcVx@90Q$apQ{P
zV0{Yy*Om7qu#5v(!?1QaUnM0juH-Qq&p>$c@({ST|MLzEmlsi!snz;78o7%TlaK)Q
z#JM*)_P6ApKMAmR9Cih4X6HA>Gch0reF9_>9akKh1oWG%tGW0re@+j2@bIDH=((>>
zU~bAI>ds<;IsdV)4#U#(zbJ$AzI9EEavZPCmHVE68g4deGf$_Hiwu4LUTiy?0c>9U
z+WF7Et*}yg`5kFD(@;+3(~u-@=Dwz;rlj<XM(pSu*sfuu<)Fuxbio=vvYL6?H#K$A
ziaR^Z*#qWVDk{S*E#Je6`CQmxEB3vkLtDu!N0Yh@7Y!jITtBX(lG|c~`qV5%9e2M1
z7?(e(DkpSyn2GpGg9jG=#(#HsU}>`P{dy>QpjbN4Vn|8N<>atTS^#IH%0z`|{T?mh
zA1j5xq}5e2Efm29JZSqTC*`b8rs_5|p2?}f9c2cCz}mGI_>4W=>mT5aJtVfh{OCR4
z8Y;|KFm$~^%v?-27xNZ20%jC2t5Ou?DchCnRP*(P<%)L_dp0*I@QBgS(U0TfiHO?t
zJh#aJK{-5ZgI7tzU5ptb$mfh5XC~kY>&eCK@Njwg2WGuW<}0yhTmL2nhzhrXv{aZG
z!TUh$7XnSu&u@}V_Xvw5H6g+4$dPE+z|xXWg^I)u#L6FL+$F4Vl!bTqY?S%%5^tzW
zsgV!eoB;}qf^o-97Y7H31G?QE>$>NMD@69d>{f9Mro`EDAHPxrD>L&=TwIu%ID~@o
zfF^-Os+fG=^7N=wLE+|r5WmFq`kU)v(1`i1f}sHlW7dBDoPmJ>*36`jM<6DRmiC<k
z$nKr8-zb>oZNTp65pW`dDX)LisQel#{9X@Qu$;A??pT%tS>#f8+9fIK<>lpK--gp;
zx|q`pH#07-44sTWfNQ{AX5O1TTy0L;CV`yrFZLnND>ys#Xx`~|08Rqj9?Z3W{tT3C
z2j6|{dH5Ni$aG<!%H1l-NDBXV$+58-N=m_(QetC6FZ+v8oHXozM=deMc}#$1qCZ)4
zBbnO*TQ(BZsBN7Yf}aBYYvQ_0;4%uZ4q>Ke&gtqZ0(v&&x4i-$C^Vio)UDes*S}SM
z@HrO(Ja)v|dFtcbA>Ng%R|l_Du_so&7#aX39$*95xVR!e#4U;UMz8u2?1jS^>)=ow
z9&Qbq@KdX9ai^S$iu?EOjnB*kUMxAV8Tt8dM+I}|>x-7c8@~**nxepVGIxOlRymCr
znlucx8L#Z^DIVM34^+;TlarGw!XbX&)<z^Hb^PPU`$sQCh!u)hqYI>BY}$fFe*Z2z
z^f=x~!AQ(c3VusMGDhhGJ7LDhM~ALH#~Z`I-e23CRdJ{S4Da|LDSl5$R2(y*YN;(G
zw?b(68nBA=1?_@vet~wj6(LBQXZX3dcl}p6DNV!UN8jAs>ml(MpyH5NIlRs6zKQDD
z&(}oN=_FoK2pk$-5s$Z-nNqb%*VReQzOJbFu;{uPH9i&)8+;GufBn*Z_ROD%nXTqb
zi75Dw-Mn+EbizX>RuVKrqq}e41$@YT@r$PSsf1V73R7-7z#OZqDTozJP>gCby&si2
z;?0H9r-myNM3PF1*OF%I{hC!xP0hsAG^BI9D!-gtkMFOlJw%<udIeIOB-}wU^mLWH
z`Nxken9%#u4xFT=wNGd`WC$HMzHg7~kLxzLUN6F4=;6;3!IbD3Hda>V?2fgwy8#6z
zIA+a4M>oxBgPcaqcMvv|<YNsy4?{g3S;hu#Y@Dw%s!vZNh-Q>_M`T;<?4H#a{TiDd
zhEy{FPmH3X)!`8k3WSCl)Nb1q2@kw}oe0L(5(&gi%E+sTg|9QV1a41>Zr5i78Kfku
z@3^eJ|2d;_t!~_Fh1C7JXpwYsT8Xr*tdnDnaeDL`4H9i+m@6V&_Px4AE-|X~qYc+s
z$mm`h>Kqyp5#0GoD)({=?4`1EEn_n?qrT<#KZYVFE5!szD{#u9=%f^&t1tx@bg02(
zyz4UIRFAf9AaUWDtv2oHhm`QX<ZUARbd5AH_RwzjX3=`mxc%cxF04ZRD_eu2sQ4U-
z>V9wfWU}8Wqf3$<BDyZGKTCqRY+38q`+V8A@#s-;!vfPaWo7&3h#*_ct1zu4cFE^&
zA9W6BTJGD0y2X3}*2bC`bz3S$^TcBB9pzj+9$Y=*ofC$1&$UN{Ym+^U-U1ah+)|cO
zPPc`9f0VS0w;R7KcKBwT(0#=^1(w>&%Usqethlg*i}^A~Y7R>ewK?vq*&jZb2P6<E
zD!S0oEdaM#Rx!pckJ{fj8Mp=DGt)}7<_p(}EBI5rN{+}Sx3%Rs$zFc{YAzPWdq7^4
zO8TJQo&pz830tSaU?`gAG+$K`s0l;G39|rz45Wv#rJrKM;%B<0<qC}w^EUB9x`69z
z;|hQOyQkW)T^s0hTIm;rxGPJ&(-(LuHWdXUS>z-pHe-1&fB7Gwi3$`eP_T9RV(dbw
z?Jy}v@EQ@X!igNj3Y%D2nZ9e;p@tRD=(WW%aLUuzZzllgS*cB|3=0?ci}EfkjeuPf
zMfSjYqyV5_9gnlWMZu}S(5Io#84RNOD17p2rZdKmj<#iZ<iS=DZH9(l@!jXvC<;8Y
z@~wEw*BC*-e>^y_4cT^8w@UotcPw*f=7o%cLPGt#szuK6S_K?XN`d4+9&y?ydJ?YM
zpPWZP^;7ZPl><-;k3W4$0SeDX0X&D_ss8fC=3rBpg3OJTHb>0fzPmkQlHUoFaPM`_
z6LCGl+8bei97sr<T!hiR6wlPmMJYTNlx6*}{nb|f!+}JR=Q;;LkqFlH<j7ylPN(s}
zI2}=plKLUy*+S#^<OxfW7Nkxd93LzQAO0YuXwBL`M5->xt4UrADjM?P7T-VMGJ92f
zP^@Jo9?qV#w?FBK%vLFXp!-RZRjXzl7C-RJ0wsMgRl>_RCs9%ORO`>`$zQ6l9hy{k
zcXxvTaIGJ#Hcwi~@UUF!p4}p{#gwr<IgBBu^mE$yj$aMZn74q$-nc<R)f0#_xn<VZ
z+p9F}xzp7lp&Qrj_qF!6UBx5T8b6nG;u~qyxtf+}eP=3U7)AXu9txv51}ZAWs0j&e
z{mTCh8Q<=4Nl+wRiIi9Sux81TxGXC#UxbVlww)Qrun#uO*;(A7D8fcOR>|(<U}PLz
ztCFbS6Nt@-Tzu{>*_#0O*NE2>T7H94Wcn9IIimOpVoSG*Wya9r%z5L=nwr72(!v76
z64(-IxyQAdA0AIIggnnltos%klbwL&kHW;6rv<~0D$*>X*KQ<UgVq`041+2@r;3_P
zO3{rW=?8aYURmc(teB_B4g}X(&P84VqU*1sv1Ck(Qs?{@lc!>zWfI1}_?i|sm<%~N
z$!qVOiMkOfph{5$=H{2N*D_1&V$-%2DtQ58>J0Bj=fNWk^=p*spAZiI8qw8@g(eV1
z)c33~CW^2}2^-#C^w?{+HTj2-T5qEW_jK~F8bUnE%d(uTtgMQP;FRb!is7t~kV+tP
z<>$Mxxjcip1L{9{jzMzLt6EJ#H|qXb(!J;OS7_$-_4Jx_GK@`4EzHeXfVs#e=5#X+
z#4yoGh0-!IAKt&Os<^*kCWHF=TEz$GW-OGE?^Z07eo|rBeM^sv(}a+l`C+vVHm(p$
zviZ!E6l|Zdu|(AEV*pLfeL^TbLv%F!+GT3Y>2E1=bBv6PITTa5wFYw~AD}as1ebEQ
zOlUdo;vYPqj5yQU)siXVeWs-JbA7#yTY8W1y}WhiVc(TWW<@gw=y{}CVAVhN?s?Q@
z*y_U03E&dK-QXuTDZXjQZ?dDkXK@Rq_;^>vTJZcnPDTUM)P{s-BI0~k)&)`Dx%3!;
zgPC&#U==$j=T}f(gK`RmI0(|hY6Q5_4!b{Zz~WhCkJ3KtFqbkp`tQo2GbQdwR>+#t
z?)n|&b9D*~^(7GyWz$>vshu0Le0|SsQz>8<505BzK6rG2{~E~o+nyL?okM+rr{KO`
zcIRw^TL*xJp`oFzt$yg(Kf`ik{xyUHaCMl~xomp(BnlBSgoA88E|t%1N8V&Hq^70@
z#<uU@o)wV})jO2{Xa2{xw2u2xn59>;_;A|WLI#(kB*}@6-f|VM)#MIB3@V-=W<{w{
z*wS;<EpPG!Fil9^TFaBkg^P)ZDzgT*qS<^3;3E3e-X676h7>#sVkh{gbw!=rbu~2h
zK~V!ddf%U}2QQ}rakTTDfq&Fs))zQ9=sY0sfJ_mfzHGf~_Qt@qg!O8cyRD3g%#1@d
z+hcu4gUQ&#!W6X2#+1bF>KI`Dh$3z6GJgKws|suk3E^wJu%E_0->_AE`cy75Vsk3w
zliMG#G_;i-6-A=KxcS)im9RzP%W1y9hpxudY-|g=tBe+lzE`E7_Dz*&KE(F$@StHS
zj)EL*Yp|)}dQhF7?v_19cgc6_-I}cE!%somiYz!n%)~92SF#<|`nq`pMJr0}KcU9F
z*3e*#<JCfSnAU)-3Rt(?xXRbB)0&J#Dz$j_4u7^v94#&DcafvDDcnC+R|74xxjoOl
zJqI#$^9(5vhlkuzQHpB9wGbEE<8V!okAO?=tc*T{bB^};*~+05Jr1UzA{nuG6#2^!
z7w<kWDH{Itm%s=MTh+gZ3j+fg5%|Se7y)bc#H#~cUD^80Gi!vuWY6zMEW|;|RA1R<
z4d1E~a{@d!Zzy>tLSt{5wKPx)dHMH~5+~GidgViu8UFESP!wH|jfd#UDk=us+by?#
zcppx}`N|MP7ZaOwbE`wa9@ogp64ai9NiqK4=mP?R*lz1<K^@T4!kuP2U7x^>#v{2`
z;^u~Vt)<{;`Zd8f{Znjp8A^P9YTOl=hNHlWu{$}ualzUCIrPEcOAa7iG!;vWiwt+~
zYHKI$-dx+*FtxJs+aB)90anoYdbO=%W&siTcW*G{gl(;8i-7y?B3LRf2f`nNcL!|Z
zFx{^uyyZWVirK=K^=qjh7G0+S9a>DF=DTN+9iS^cc*V)UkWfql%@&!di><BgKl$A_
z>Iwq_!;F^;d-v;%3`*G0;M40)bY*z_E=pkW0jplc`!f@Dt8k#5Tnq<urB-TccHv?B
z(Mjf31sf?COcV9MiqvxQz3=+vxuLxZ=@+xXSLeWq14Q~c<jAQ=sx!&hG!|0#+nh!w
zFrz|gVY|Q_*0laCXPlp`lo(<J?*11Gn3%9vRV8%zBfQzM{KMdUSZ;t>j!4>6EPGAC
z?Cd0JbmSV^(fRT0W>F^C$}Il)ata!jwN)BneYfS_x|PgK=ASY7O=73H#27ek-9JH^
z5px6@Gf2||6f>gPW!6gykz<fQjB0N1l?6?VjZ0I|MwOV6@-D<&0Mw<Po%{`ByaiFi
znC|gxA*_ErYHoox4!Dm`lkY=bV-re%eduv8?St7`2i672oC{OajnG#Y!oG-w1&a>0
zcB{W8cLuXN0ma$bdI2KY)B7pziJQ&(MEFBs7)t_OZ+Vo^(XH0uLygia%LC`4<RI6V
z#QI-FU3WaxfBbI|S3*WcW+i*??d%bbBO#J(sYp00dwoemMpkEZW+aJ>j4vU@xhomT
z-q{&-{9dQ;@AvDk9@2e2_x^m|ulH*_2gu$r7Jtua+;MieeH)kO*bg!kAWeWCV07M@
zd>jC{$$zaKHbFJ#!oliofTX|*a0EqS-Lu95Splv)0PQQVlGeX+)~)w`n7EvrA6Q&(
zAD*uIJT1T&AG)`$^5-pdtP@OgP4x8q_etLXjR{z1FjwpZ(@v92`RFUKP9!j|0Y<26
z`#&zB`=l+PLKKOuCxTEwH`f;tXnXe|0cR5p!;!f}x$i+!DXC=d!G)I|*_e6o%QFEw
zqnWPxhXxP`*x&qW@8{<SPI~*NSS2?A>Fl(JAs=yYNQM$V+`O1PoPXG`yJ=XrAcI2l
z^{=5@9>9Mc9vNBP0J;kfQEVT))_E8_dnn1Iutw6acL3Zss=Yl{0}4ZcDeC(00o=#p
zcz7IuO;DFA30y2dSb-)vbt~AM*~6r;(y@b%s@nt62Od-=Gaq+ue<@A(AA}JR=!ts`
zRDghY<zMCmj#Da#8=WH%|A&uAZ6ECW6a$e-MI8<LoMZ=OEp2V+aFKw~U05i&X$X@6
zyt<awu@)O75(_Tro}P<_Vh#Kwtdt88X?{Q6Ym6koJXb>MG2DMWz!pHZkJ2$&1aK4G
z9`hg+?!TF8ZwX`o{gDqq%RXS#(W6Mt+a6T3V2hn45Pudl6FPuCR4dKtW=gV>0c^wA
z7zgwYvp~z+u7ML+pgGeeFh|7SuY39ZI#W-1V1fMQjOnH8Fz)R38o>a-`)g0nrTABM
z&j6ON0tVc<vOd#7!0tWxzVmWtN9G!Da?2=hxBCtcwZ1L%>Mu9U5=Qr|Fp(|diel(-
zgeeW>p97U;q5BsfvXoe!2lVS_cn84-udnbDyK-WDMtLA6-6&dMYiUR=@Sen)jh)?h
zSa9M?MMcGIH7+3<`&w@cm5|Oy1u)RqpGsw7(cyU2QV2?m75aeczXuZA__Ve*Ex>FZ
z#G*}>Q)8f?38)q+sq|c(qoeYTTWgZfAE)SbF;{;qI;}!rvrDwq#9iRyqYMK>H!u!k
z`t<3Nz5m#9Wu*kuCm<8mIQQ%mOaeD%q4&hX8USGBfaUMO5F_!*POpuC=rIamZ3h@_
zSnS(?^`~IKyJ-k*(Sd4@Gl(=0AB0{_Dd&R%TY&OU_t>Oum(_ePuMkjDdI!K((t>>z
zz_S25(+j%mAQZCkJ}emI0S?-oXfgc&bv~({ZgX)uS;6i0)rJ#^>xc_xwF5(|8fNzx
zQ12>w@eAf2?s>{Pt+Z<Kj}9>xVis?&PhVoB7RrR#Z54o6&G#WY2N@zJi??6xe#g|*
ze7<Zi!XoEo8<l7TQ6+|p89Jk-cBBP(4}s5%4RLD@7kh{T`|2O9v@?37W<AwCe`6>o
zOihR2F{$nO+XrV@znauF+W9CYCH~cKRAl$h`sXxCa(jAS;cTdlRT>awKtuxJes<;R
z1iPG^oRCzo!;R$MNAm`IoUG0=TVHmgBh#Ze#Litf12zN&PGqKhF$m{>so!tAf7m3x
z2^5F~6ciKytqhi@7~`CbjCmj&&}=Qpsf(s^0rqS(9}$K9_*--Mogb~w706^q8C7xc
z+)J%ELbA>S59+@e3F+$j3k8-gt<0f|+yn9dOTs6QNUnAUV}*vNx?4HYabCnRyMI_A
z4#Bja5djpMyj&e_1%;krTW2>nhZ{H05V~`{Rm=4!HwTrnmw#^Mmg(wqmlA&2lQ?wC
z+Jz$V#E1;PXYaumAZA10^wZ9+E`xpP?VSA}FtlC)q;^Fc%yU3m=d84A^7OH(5s}{h
zesduj%K^s5lMu}g;2l`q@Vit=*B=%YQF|X*h@@d}v=8duE-zTS7QlqGcvvCdW==RI
zOqEdL$tGPoh@<<$Q>#3a_dwOUDMS;A4A03~2FKU${u7&PyKH6Eg}A~>q#nT^aC;lL
zlA#8xVk#cNT)ng`k(yVp0I!nTX|%%-8WFa9xk&g!w>c1(1_!PgJ_Z25EY&r$msR{6
z9pB{?z4P?%ByMVW5VY=Y2H%(Fr-<+J@}?}MlU-5QOJq38gPLeoCx8BWgH>0gwqR@&
z#RWuwSUjcXydh`>F`{~{3R=7~6&VB(T8kt;KYXH@j~1#@oXRopk*fAHCC1~mYT|NC
z7KRZmxnUKu7}kT{esNBIgxgt*iQcmh{{7e4OpB4gt+)DFub`7lFq4A)P+?87%Ipsk
zcWFRpZCmu<`TPQpa{a8-yiG(TKBfh)pmO?c8PqPQ0=<}NJWnLL(t+Dk+~Bx4Y36k3
zB)5YrnVlziD$)w|=X#6HJ$xS2C~vHsk&tc{Gx}b;#^!mgILHc@bTfM7{QQuEJ4KkO
z^;OVI7aV<M4n_(cKX0g$o4E+D%j6^Hf^sCc2u<K)+}p=SMRIneTi<qmymWVE#!AjL
ze&Z+S1N3fqAv!j8cGwpMFI?u+KHk5R)R|m-(A}HgdUJ4c5m;uKs0w&_I3GVUGyF>J
zAzClN{AjPj>H2T<t&;x=N+x_wD(Z=?ut*OK&;emKZ*wo+n#T#rIclCReM{EeOSJWA
z=Rtpk{$ch8O(fDckXhjP^o&qHo)NUFcb_bSZJhsjTip7LBQ&sqpL9O8TLM2gSa${7
zpRKoF-y9N!Ld|zU{W%xs>|^GlKvxEab2c_YDz{_}4({@F@GYa4pCa+AHR)F>f37Ql
zhyon#)$m~u^SHRU$b3~1YnYIX3E0WNA0eKEq@=+L2afC{7K!UEk<`Fv+I@NQAr9a3
zm)xg^y~WKK+9p0%VY4NobVkH_qepHO<avJY?gHrG!o`b1jPXb&0#kvG5&C0K4-8{C
zI5@!fVt2%Ev|)QZ;j_wCCg(znkshtZk~6u0($YG=K^r;0_~Q4|EI>8_jzH%EICC6P
zSlJ`}hJky*MNMIJ@#OUMxBxP*x?09r;qGiN(2~?Z<sAyQ6Ds0|l7BeEDGX260z=Uv
zS!F+$w*t|#CsV;^puz!C@tzMK_@xj}1x&O>Q-_9z0s{hQSS2S*UN*8xT#r;;mpn<X
zOzG(@E&*!nGrJmqPlKAnDPXP+h3Xl>5bRpMRT{J``L~xt_t|%DcRdkc`V>WU<U4?q
z@fL?8ern=O*xICVG`uuAT3Vh%Z_3==Olhh>yXf$x=Ni%_GYB#hjr_KrzZzE2l6%2d
znvH=$3XDUk8Ti1~^Ma6&A)1{{!yJ+e?J8H>oS}XxaxG83Da+ay|5&nA=I<fL?Du!S
zg0&}*ZJm;(`5#L1WN1&|7!WGPG*h*CiOfxY<V#?S1(fLKfvO%>TZ@3s0yMHaLA`Ez
zad;6R8AN6C*V59l&Q6k5JL^qpl2dMOH=<(pK2j#qG~Quga5OhJH#GE_^WrD3r&j(8
z$s-N{ZgfCjSgWd<0@^sRj)69AZ2So%Vc}vxyVIgkuL3NBRU2eJuHbFV`BG_9f<abr
zKsco<yk1$`z@QGWM^RC%a)-#b$Ez}DgK8#20rk)10w8i}>1NNz8}f^LJ2N>D5`l}q
z+0?34kb6ZsN&A|Hwa~d(bOpzCk2cvj5r!xa&w^p)ze#UC2UWLn+Ee!kT&uj2QhM5-
zD`?v)=R{yK+KQf$p-gn7w@U7HR1pe_V-xpGA5evytFp|S{Q#<k@34oj71IY>45|!W
zU8SCfz=YD&;FFQD@C#U>NLg7~!HfCM_Kv|#b>t;|>yu{=qj0!mEhfQW=634TJ@0^|
zx{d?#1~2~kxVg^XPDO$9O}cZSf&^e$o3T#p=Ms2BX$zzr)Yac7^Jvojx?6J}zLM2h
zM@|bWm=jodRt{Sqd>O$F7j8mds!>Qt7>GB2c>=^C2`MRaenzBPY?QU*tEwtMY}q?-
zxA9hR3mZSN)@P<JlJ+byaN_y9rdWi9Esrqh5eN!Cf|mA+`H4js_ZE4nqO2TFfKd$q
zrI%4WT3Mz(^|qo99z1v{PIsL?jWVI%I!rR>w1dsR%-u8*<U7G3X^%cnDmkvLuoa~H
zRCCEVN1X~d(;U}%B*#vO)#q}?A$Zt8)%L537<oau*7$l+LyUy&Yc?s37_UPI?@ZmC
zFO5TbYpf3i1;y^x_b}e)rdjgEjcKOEbe1esKrp6C5b}|U?Lt3er(O=yL)V;qMe7X=
zAI;%}xZ?MwLqYo7gsK)xJ4phAU?dC_-`}r`NG~lFK8B1`QL*W*JR*GBENh}&2mSkG
z<0x5($LZidRt(iP$`y+BKrT!m5I*2ei|CzUh*wig(}*Gm5|A@GxHN;-=IM}Z2}yS|
zbX(w6I-=~N-@xya7B)Yi>G}KZ83v26!+vMQi@gJSi9{k;EUeox?)KKFnbt*Dv=}>8
zPzmGQ`U^p;0m|1p%q4NMKuVTsaNP#my#Kj60OMuJ-x=>pDGAq8yR?@ZTJ|jVB*pJ6
z3>PEuJ)|t<x5fC1k7zE*KQg#XMce_qc}vOk(pO=0`3$<K^Fh<;E*o<+rxSohNQVc|
z3_TkgGuz-8xWTYMrw=g3x}XKcd-5>X0&KPMu`yr<=766O)Q-#|yU$x{VSCGgR0IS(
zCPJ*fnm(K(6!b*VMZf4Wk=y^bQ1_LR_{HeveWL7KU0p*$RNeisYsu6o&Y<zQi^+mQ
znJfvwe9Zud(WN1|t;KInFrme43;_QcvR`(&^5DIl7j<9Fxo~D6M&>Zpl>&k^p}QNP
z=l$yxNZWrYy{xt$)cBJX1RyrQ2krw(wJ^8cVE3jDIVtYn%Ffif!9TEEvBg^ahP))d
z?)<kTrzb)ov95ce-qpejQ6x%7Pvu(Hp+hG!$)1AaEr+@y^h^QRo<RzI8eKgM=oA2U
z%IJ;@%m?b-b-f5eGP9FEe%wb6$8d%G0H(s&n1ugIF09DAw{LU3Sx%phW^)8uti-oH
z((%2$tuv!R>r24;e*O)pb5P{Mi0V$)lNZq8Ok#s(*yo_#IhSwW)_`v4Dl!fwJgr(L
zfD1+eE!qQg-Tr=%x7q`Vf!&|)mdSuM5SK=Y3kwT_zwHS=sNuc7iVk#kQY+kUi+#uv
z@p%kvDL}x739a_S=1qmToEga*>-Z`&Q`xPxT+;XVz$BD9bC}B-TGhOAa<pnQ4lb#p
zt}oX@<H_)J#MX7Jpg18Z&$4#N*wuZsQN{8|?T3~YWXB?2JEEWiWWAR`j!h%e17y@8
zRK0~d6a-Shu$KOWM0-yUbS%ovoFsX8G~)9>2`F3K;W`G>-n6$_{`m34vs;Z(sriBD
z;phf-vNwQ>0R%u1;0;JIa<OFH1(p0N3M+_H@cxj@!ylHd7HWs{s^d@XE?DI^#;(@a
z*Z=r&?RA_4tR-e|hc%o{$WwWn_?|#G5A-)W)Xiqj7}BZ0oae@}6R^X&4|bS?-&vG1
zH(|f6Tf(uO`^*)a%a!fnM*JzqeeYVtx6`vJ-8;EIUqYdwv83qtb9bp`G^Nqj|KE6~
zH1J-iCIhwPM*o1IU3tb!-X`cN%!7o4+tT3vSQUsA5;9Z-1-oDv_T`rtNBSGLejQ9v
zz3=*}n}i$w{K+4c0EmNooD1cal46Ypl)^E3qOzNPYlzE$rvA?lTGi2k5-28?pbq+!
zd9==Y5X$Y^+GOVkLy&~4ONdki`9cz;9#bPDoITi8D5jxm*VWYxUi~-7Wu_3+yM9Gd
zKc?H4e$nRs`X>A2{Jfyb(#X5i=@KC2nrYK-8i6Xvq-Gg~f|49e#$h5069c?qI4%hP
zZ3zEO00zn1apx~yyiA9>)M6JMOcMxD9@Yrk;5OJPUk-wYTZe?4+(6Q~B5pvYF=K<a
z*1E-n7!jb|kGfE|tPti5bTWuiR1UXxH{9S6`Y$*50hNsGx80K>EUcyaXMLhqP=Qyy
zB&Pch0p6l1?^?@IP<fE>U+m>E^0@we<;iQkz;m)vP|+hooSkL&8F-5o2AV2T9qd~<
zFOpQ<af3$yp*GmukcLALl#=R{t&TGxMa)DoV^L?keS8`k8X)6~(tx}tp&hK}n!y``
zC{YSB1latS#HQg-s?yTO=;4AW42XG#puP+~eF5&z+g1RM_9H%iuDlImfO(m-)6;xq
zA9vPim6`;CQ;|Aak3v!aN=mk^?ljnA81EF+k~tj6{7Y=nY2a%`2kYc@j12h!-X}jm
z!faCB^3`L8Iby}X`gFO-_Vn8;W1xetrD4JnUREaZXaM-K(6Rip)zq}neB1}xO5qU^
zz{XK_`PAVr0Pfd5m-tMwUweN03?zvhaR+6~3GiLVN&?#o>|KO}T?fSLAB@e-%>l*E
zP)Db|{Hjtuwc_1bz*&iEwcWpeNLWwBapBA1ZG$(S-@+{rR4Zo)R{Fp5H%jv7L(gg3
zak}sFXAfCfTdqdB^WtI57_)yOieFYPHT_xY-7@EaQC$jHWVUwlBD*_u^p(?DJ|7_K
zHHg6lp(zFk9V&0^U@uihd{UB5m1_`bcNET~wdUhor&v}d*>BYo3orcu`=e@O1PubQ
zOWLZAbpbt{u9g<>UyEDX7cONfZo=+=+U*0N`pw5C(*c1sR_}hv317wdLN@^%H~woU
ze9VwBS4pj^T36d!9fYHel9rPfcgH-Z2wR6~M*5B>9A{-sUtNv!Z`;?2iqaP5W0*6k
zJA3GN5=N~>HA>|~;N?qy{P@R`jBcot59-`sewlpMGj{GvJdl1tpTo^9{pU|nYX(=E
z|MG5VrPKpw8Q^9(LD*dAp=3(?fGNPj8F<ZeH#n5)1O+MEA+?Q3^sc7>P^hS&pl>qs
ziL_N8kOSf|HtXX$Dr)jKkWx}t(raF#VC*m>ZEf1{@$+SC8yo6kE+7G&<yaD23_9Qm
zwOX(cjxxD*G)JSXtYU8-eXyNwwpq;0OVSS%zbEjg`$1^>DnH5I^}WzsH|)X>rsN2w
zA+jvLn=NVm9MrP_=l3~7W}&i!Q!`yvilM1_(xR9m-)^!7lw5(ybhx^CtTo1?G5*2(
z?(UNM0FbzrhPMRJyhJ!`Ku{OBAs|*%Zm}@0qgyT{MH5~W&%Hb0cihb{Mbz>Ao3Q=F
zl^oMmu4D9b&9k%v5B}ND-D|3tPC5s#2k+4_J0mnjb<+g85{Xktp9UrWG|*of#p6$Z
zgI3HH(bNTo6Z91Hd{Bjv<3ir2bSYiM%jTHYj9WGy|4hGspeDKpN0`^}+c{7tDf#NS
zJ{^qp-E&Xed#AZ+z+p*6<aABmn|K&a6r<)9jM-IFc2nOCt&F2Y*}Of+U_nDZns6l?
z9q+?T*{oi>_Q7PDgN-ddKQ$wx*i-=hFyz5QUa_<ic?AU?IWR?R05Cqe{<HkvFGaUE
zbv0!(fH>Wx3e#pys3}JT43_1!&^$f+XJk4Ee6X2`2QkJyphIFnCeqpj#SW#?6iCbg
zQ0m9b41jwI(Sr0RR?)amm0G8sbl$LnP5pKC?#65%z{8PQrcdGn6vw%a@}v}HA4AIQ
zb!eh5ZH{r>{{K&Q>F5)pD}3QnTc>C!l<&gL$ae7|rwWFV*aXK5v=^OSTpaU(EC%>p
z5O#y|1oShp0pYl7-1+m((Py}FfOTXOdgLz&mW00ZLh_P9-A|dn7(49RU{UO=kQ4`G
zUdH{KOg6$bP^&|IhHx8=srYF2EH3VjT{dzSy}NDWM=Wp2uuGwxO+Ut_KxQOS)Eqnb
z-FOxYd5WZBpsc~<3~}N_6zB18ihR8<9-k!*&5Wt0M3+flym-b&SdRAZN6#@)!R?9&
ze+0Beb-M@6?7CS%f;iyJMZ?)-Jqrdbh3YW}gr-=ns4&y3y^jq<_4SL)vMTE1x;->z
zJ?%di3Rc^?d;ZtP7#93npOC-V_ygYOAcW`TWd{N(FqTcKb&@piq0U!zG@!*@qzhfT
ztdn#7S`X97qUQHH1!(5UDFL)gd>6QdUEw?^l=0@QVWvXeaccO~`8Jf#<oiECPMEs!
z=7@1MujL)nIVBS+lGhGCpHMbqnE1!Xv_lyCC-*~Suj$w`8K^TQBwkflOIkVv{N*s3
zU`Fm8d2XCVeP<;Ry13Zmp>53wpWL5DRt~TGRm^gf=n#}G(T4G%I)Y61t{hY*S{WOP
zPH5gNd23r+VUEz$Q<2!UYK^jAzO)NTu}-Q)iAQXdbKOpie_3MTuZ}v*2^}Ju5MxGY
zrHxt2LikFZvnoEmU`l!s9X2XPF3wRzG#1I<w<ue<p||>V&ympoB=zL8+2ER8!PMgv
zM~{+!haPpsDC5aIQV07^&#F!c#nFF)#LL=$Fn6Ly-7Ma2->922cEv<j;?3t>pB^lD
z>`Cn8lfHRIYVDnw1ox!Aob1lzDGl-?=Eb@f+eTGntd^QBEi}m={0KS_F<D)+SI!ew
zi!E<fwEVpBdazGL$M49EziSnXLu@oi1QWC4&5BCz(iS+0R(6??Tfd+XY7$C`<oH)T
z7(+*_lEs~Cvaq_yn4%wXGXC$1)miMSMm~}h3Y#KQ`sT<K?^EY|^#A)$lp8?dJ+!~y
jHrJ;Ff1xDj=|>NxKWFv%lNlHXKRKkYZLC#}ycYgHXWS`r

diff --git a/screenshot-11-after-include-notes.png b/screenshot-11-after-include-notes.png
deleted file mode 100644
index 48e0594a8b732763a9262c1ad07a18ee00e56121..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 106831
zcmeGDbyt;NxIGT5fOMC1cS?76cO!zdw1_m)E!`m9UDDm%p>%_EZ~C|VoO8Y};rZ)f
zY{zgDd*6HAYt3t3bIvPNMM)YN0UzPjt5?XfG7@U9UO`uZf3|RMz;}kX7_45sLVG1E
zA*$h;ev|=YfHg+aAAEul!zGG^2%~X?(*nM{$`?++S0_$&3lx?OQuN8Qu!sNQQ&dn7
z?)L4DkmrrLg~i^ki``y|g^Ls~A73iE#LwP=fr;hi0CZ?kH1Lr4AQ|(&{{_$7FfaoC
z=llPjVEzA}xM7(k3Q|&5C9~p?ltzCSHY+F?!oqs@-_k*gZi`|}@=#OKn(AV2cXewF
zD$ykv`myqb&=s?59tTvBjJ^c>rK<YHz*~v=k-~uoIVw6XE(s0}4mLIsCZ>F9v}{0R
zSXfPJYDr>ZVys$!KmG3S?oqky{9qgOfNFFF)dady_9*|bs0q5DgDO@-^EHlk>wH&g
z8WR%}a&mI#uV3;0?^0N^bh^8{{r$x1>NviB{i>m<i8V+NgC+0Gk$N7p*72}^aFFFN
zt<LDy%F3>7c|fE8lPn_20%3UcG@(1UHq7`BBcY#4aE4b7ghB;Hcdg?^B#rAB0f$ko
z(P4`3>))}Tf;3?NJc$wuc@`B~L<{@8{`L*^;4Bakm+bNCfZeJ94Ilsh@7!T$r${0S
zAt8Mto%)ZVG#k0Z|30{%2%-=rB^HzGr>)2P`{pwj8Du9F6k6nXc)7Pbn1qC>1q;D&
zA&E(d?3jUxWHlCQc#=T^-Y;2b72&vXkJ@kxs*rcFb1bK48x&A)ky_m@%~zW1TfQFN
z?2IHyhT}vL3kE$oepLN|$DU}0puJG4q@?+SM7S#?zKP8Df428FePaeTHny#)X;E3a
z;e^GGiwYYp351WfRAU>NML{CB+w_3BE`r=bbdbHEY`D8SIZRcoQRz)<m&$Q~N=AT#
zZ9#5EzNfJFqw8RFc7K0=6p8SkHjjlc?2+Xaqq$;ri-n4n&kGfwd~n#=*#{G#U{Tn}
z36h0<MB}K(?3Npc{@s5+QYY;5^K(&AvbS&DBV-WcF@_PS64jvTNAvP@E%7An{8*Xw
zl4Ypbk^^DsBqUg=u+2?I6o@dzuCcq3u*jXU(&c)SIAlVijNivFG6$LY33}W}NlDrL
zsq31Z4G5;Cr?>lEL+A7SsNZ0>MaFJE%BWjYS6KM((h#ue)ha*uM-p($(rg|d3%VRN
zB487SVb@Bf-=3~rI^ZVN@|^vhD@DX%bap7xX?Ffir(RH?Hfj5(j*Fc=lkcmZgM&j2
z`bRQyI@2tf7!$*0XYAlu@?ahoE~$ujq3quGSMW<{_m{h4mFk5*10}oOBB!q`FPo})
z++SI(G+%?)U9K>M)z;QNFnqWr5g`?_+3Hu+sxY8h(T`RmHtm#laIrJBKZWd$=_f*c
z$Ct2DNab+c?1hgYb$WZc=HuY#C~Nhd&s(R$u;m$Cr?7xu23XKRt1K!UeEf?1d|4MQ
zcM-bmG8L1ddqa)np;-59Gip(4RE$ks1zPpFPa7myZ~T*8L<`DCW;HNUxg!}K={Dr^
z{PI;>%k9KuUa2dg?WUopDyS;R^NZ6MgDo{bHC3#d8|3`4-SaLzonHK}$lU(lzi;2Z
z^?v%hk}J((YkTZ+{O6~zkMVNjIXyjnoBOrIc64;~FWV(I4<Fm#HB@02`%}5~pBLJE
zUMgZ@R3#*!QI>z%!eZ&=%VEc?muQy8$jGHqa&fr~#}E0#qNWIXjCThj#!9{8vVpXF
zJ(OydPyez_`?5DK?$AAFGo4r6<`tMD8Q$)3i_&Df*3P8VML{CqT4XgtJy)vD|Mjo)
z<t~$QI*(SV7Sm6xnw4Vpq>G(n8=EkSPYac6JU*-W2D}^aB8|D?!6>!Aew{2<_dGqI
zlB#%ldYVuCOmHX8yTrr8o68oLCT#I}Y2WNC|Lrqolna)>!{=Z+VIos_W4b1GvdS3B
z%gZbA337LLyjZQym*@TDZZ;e*i;s!F+vN{CP1X~PI#S)y#P4!+c6qtC<n?efH#aAX
zFMVH|mX`KyfAZ&$KZCYG8t3O9nTD{i!Qj-$oi;lkTy*;Sw|hSguW?z=?hnR@NBq0L
zrR(PC*x31n(wHO#xX8%YSy}4=(B*l`Z`F(oB<KSZ;kRcl`~{1O##dWtg_`r;nRJ>c
z>crhR?%rW&BqWQ+xWdY&Cp+NaO>{qD3w=<#id30oAu(!~Yc0@oSN8S3#bx=RQKTYt
zFu-is%poxwN24rJu2W|jW7rZPwGmJEqETUBHk~)L()?AD{o6*jWTjC{rr_Zl<RMCC
z5`+4_@FYeZ)=Uz})5EQN5;H9wo#Ib{VvS<9$vC>9*rKBS@eF>j5x#=^V%XwBr~j+$
zY84TeSuB*SyZP(qKAWpk;q{q9)Ui}fNjQaW-CFaTqu)?VJctJERx<?v%~Ij%?TX^m
z=Z4}6mzxtH(1s!+ub`*DzkaF)8!$>L5??uu3n~m9-*tOXwJ#jE!}}?<xmhLtc<Ecf
z58IVy%|HZfwIL{>kDIu-xC^D)l}in$Hj7onslHDOk3`mJY7UE4=o3E$<KP!&W=Po0
zXQRpdIXO6bJFBXyl30u`YzYVm1O<5`LLlc`u#dI}XtO^u_`gv`@;Yu(9>t>I3An2K
zzz#qq5n63^V_)NX|Guj}gJZn<(?H*Zka0JtQ_LS)2l+RM1>LVM_a+|iE-xJbI0Hxt
z#AfN2_=Z6N5b=Vw(Wtk-zqq7?mE0=}9A7%#fPcqVF5B$Q9TJ|R3Ywa`ljeJgsK9+T
zBhH(v;4+)=NE2)8qbc*gy-I8WsNV@RVNt@SB2(Ql;-&J2h7<?P#P5iS$%3v9X433C
zqkSb`h4=StA+N5sd7#1+78Kmeys6{FBvyP}Aq8*=gDZcAvtD$T8~ZW{4<B7HlEl(?
zvp@C8tUb!(_GIH_GFu#?Uw1)<FD@>=va%9K4fE7VS(CVjfJ3z@PMIYgAT5&E=xiFh
zTab~lGE=Bb#p@Gc(iOa8t>V<*6<fQetV|sJ4C>ZL0<agPKS;^p6l;~!kL(=%u5Ivs
z3X+{8g+o9{=dyJl_>qy-)7QCBX|zzH8QfvFI$B{tJ(2DRkBl4#@A)vVE`_}7kXJbk
zZafviUT^5y7ft{zi9?|$D=qpuI$6}+DOhu)JPzxxwEe@v!oD8PAN;PR@%$(Sc;2?A
ztABI@240Miik3-}Y_LT$Yi{KST%#ivs(i5#!i(xR@tV4>wBc;#*(Hn`%4CD2qSr65
zU&u<Q9FgP>^#e?bM8!hd#fn}(pylf%^yOb-rKYA*$t?=_JPUy3hPzZjqSGjf9=%E9
zCeD}pE#wJ7TLKrCAoK{ZVDnd<aBgWSCNA!X8chFsr!UlenQqJH1-mI1sLBs*-7n;l
zVIgFm4?82;`Em)dvH{X|Ywi9DJn`A}^{hcNi;EJ9ii-D`8~%{{d-8hIiEc~<cGR;N
zm($fAN?YAT_9Crv{3Fri00q`cr%YKmFHYApv?-QuNyG&JDr(Umn3<Uc9yj~sF{u>{
zT3yi}{Iis|w};}`6907hH`$neN}yL#F*9oS?E1$h{QbpEr6K{yH#Zq>Em6rQ*45XW
zIpvrRVVs;)uFnzR<I4rFwYr7db68HU?@#so2U3@LwZ1|=&wk%dSM%|ZBe^*ub%;r+
zf}_pQUj9Vpea*Uw82U3qQ`-@rzJn&#P+C%pfxPK|g*Th!wgFxEcs`ZQ$o5?lx;lgv
z2YX0^1NzQNgHA{%Gw_{E4))-pMO8z?%iSf7wkSEMA>b_}*{el--<YfeOwaojXyL)g
zgvd4&EnsM9`0aLKy7F+LvYPR1LO9NtX8flhta-+}LCyUJ`;OZ4r-yGhFLIiBA4SRR
zx$O+%hLVeRJiWZ~FkfztOA88c@CyX$0oKbN-+LuqZ5toXGx0pk7SA~SP=_WO<RtT^
z)wRpDUwh8MKbkKuZMd}v2}ogoS!uAJ$dyKQOt>&ST(JL+ZxL%B>|;h~v(?toah6P2
zH_%`-IP2mWB|zvnJsP|CI>uRQSv(j6hRj-vo^JhU^5eIYWv|;4ubLS~vK|3p6-xo=
zYpnKfHNP<_E~Dr$@bKuoKOCSZPiL_!a6GNsXYx|;%VI>RR2S6QGJHn8zq{-5^*P^^
zthsC_RT+KN;NTbr$Pb`EDex2LL7NO)j(HRwZf@s2WQrZ~ovK}3U2L+lm{?fx)7<j^
z4hA~liSNJcmYto2a2VB^kBu*jnKhdAu(>_mbB<s&8s0-7l*m2+mO<U!;pxct+^F~{
zv`|Y8pY3W);oQGm1_`KE&Xgt+4t%Mu6x1<r_bP*s2=N5$5O13!7Z+6_xSW6D>-$lH
z%iYb)OqMQ5#mWg)P%*NJp<~K1GixGOGFss+)`SmF%>^GhJg~qvwAeS>{FT8~7gU_2
z57S=zlg5_SLmbb&#-A)3vghDVQEo^vwLUeVA|pqJz;SbOc9n{}&IL6k%d5ZUdt%~z
zjwIrgj)3!igRn}r7z{OM33B8tCXEt31H+{>a#IrRFL$@?LgmbJgN?5*&uxJFg-1D&
z?f$N{xZ~>16mUbBftNf#WE|+b1gISkfBb-8wd*SzV422M-e9{Fre!tpvrSw~OlMqV
zHlXP<Q8&OyM{OJ)KE4WrCb2&YOj>38_t&A}x$72Jpe=|-=nK;Y6<;-i-Dc4t!1-tq
zZ>dlzqo2#?c=^sFD7hy%3X93QuLsniB=ZXE*`jf714F~?ncg#SiS2F_5g|dtC3^L8
za>1vI)wwphE#Mf>7OOWnAF#n7B!lYtYFLg>sZhz#)!Td&!p*^f#98;TtDE!l{I5Dj
zjpEoD077w*%h^3IzZ3Q*jL?KDAu48SY9yRt3<k@I#4HGg+8y5F+l6}d_}C0u<Cz^I
z{%^<GEPOYy+1GcjQ49qjSl55&j9PWx;j}yL&^xlU^Stx-)E6LhVQ9x~U0z<UVv=fi
zJ<m~~j=^j%Rn4X5$O-{%o_#mW+{p_6jAv*JdsykA=5pZiG0{}!2%FN*uqK!7pL7nw
zTOP|<)A~&xnZ=wP(YCh`&9YGB*2u+b0{ipsw`&BGb;zq1ZFrl78R{bINy<PH_#Z8x
zR0;AjGyfdy>-PQ2h-E{ae&Gf|!)Ej>jOl1OzcFG`b-Hi5MbxB5kGziloBL?1nh+hF
z-F&p82@WPQI82V&<UrNd;uuyJ4ou{1(AI(ez;(80%Ebly?|gY0OJ-NTeA33R2Fodv
z`>U5UF(@X<kaVY=VIp3qtGUtzKv6emT#<<Qu#S(k%Kspd2qC$E#?XU|2$$I)y6-n<
z8i!Q`?lS!QJith!p~0r~8}^g*x9RjtW7{Elo;3kT8;#KN?Nn7;+a6S2@}3+#c5}uf
znC&}I8v%b3C(SvZUAG2Da%g2mTv^#3@TN1hXrBOaJ`_TpS1y>_glw-w{Yvyf*|44~
z$xner57{nOFH}h5@&Zg|slnci*MFJkgGRIT$JN%RY3pe9Qmrx2$ecM2-d*g-3)X{L
zxq+||>w16X17IRIH<t(phYPS7;%udiKSSds<l=o{*bVk;=;-La#IHkS4Oj&X2wC(B
z6z~Mww)cek@;TkF-W^1rojGg|_wAI0k65LI#wX{^81IgzG)_bGSGj*z7(RU2GZ;={
znb>}<q?Z$b{PzuJ!EGz_7D`|Dw`>Qr?uO%|qq4HFb6eL0CcV1e4+ow(A2ZTRDn7I!
z?4(~YYFB;$B#U^2aWZFXKv_i4ELP~Fg@uLVLK?UI)ZTEz1{wQ*QUbfh_;M_je9h4Y
zsHmEyTGtmBe;VvxgkKa)oJ{7+Qnvad6GjMKFQ``cEJmM#@daCoIIU=jDmE=Ebx3`B
zZv?F)32GvQ<#J5z3bIObeI8$hhlP3V5LbV(7wOq`fB03}U_D+VHQUGFz*65IY08`R
zjYq!#Q$jk(4?|tkgawsOh`;n*K_Qw=^!lv8>JT$A2`@w8(Mk)h1lFH=6(d#Em}uos
z13&PDz0*h49S-NqGgyr``y<mx^WCrZ$(VayZG3~Ab@@D}_-S#DiW3oK;IS9n9xnx(
z;Ux!vML<ME+_BFVMkQWGy>%K%EI*@UVq!9O%YHs<yT89jGq<#*@JmVghm+9^jp7Vi
zWk@I}TB@qP$ZS5(r#D4SO?TTvn6RkC2v)E}h%h6C^kx_vuRGA+yd(V$j$oNyy`O$~
z@t!FD;0UN&q%e)Lw8n|-gI`ml3G5U$n-Z7}`K+J~@*%{14U_VqoA)I34eqS9U2c5e
zD)Ed%{Ap)csZnJL6*d^5W0yg@Vplxtd<S4)Y(7+ao%vYm-Z=b+O<yS3CQ^xSp|nN>
zTsCN!aieH*v{KG$XSN3K_ASqDo)HlLEG#Unt@%u5ku6jhCV1N=!q<KWy4{iP251Da
zXgl{fOkyR~3zRZk?yu;mX|h-?#xSfoNI3sgf7<M60LN|{KLUPBa_KB`p>jq4mrc)H
zR%E0i=)$8doT11FYaEUi9Vh2DRX)VX#svf;UtJ@Qjw;mGam4Mu*2GvN!sNJge;*yJ
zqleRLi?Q+^lG3fO)5R0Be{(59jYl0#ET{}><YPh>Ke1sCT7Xr*M4iH@QRI(xP*8H}
z?{3QXo}XT5;L6KwC(n9p@of(Zl}U2F8ZD<b!F~5|cPH1j)VT;8<7xC4SI!CKwf&>9
zERJ4dKBfo3v0rm%G-@|F{__>oe>OHYlUNG|LPEl+h0wUSFffWKY{#2@;g&sh)^itY
zJ}-0g^CrLHO|b)v;z!)tYzbl`Ux|kBl+>5hM&#s_87w2P*w81@<*zn3b$l6#R>hPM
zedo3<0r?a89+jAG32PxmSiN3J@i!I*hS(l+7@w!WNsn{_zUJ2?CKY-;O4HH2s{GQb
znSr|G`7=?yxB)8Yw}A@j_+L*<#GE7CmlFBDyl4*Yip5Eh@h7VOi24+Rjzqk%u`!(O
z&ZrOtgI8tg#Z@TH7>7B?RdJp7gh?U&V-<)1;kXkHUOrFv<)A>D?oCF8gj`)dglZYO
zp#B!qpBxy#9UIPTnWVkFyo~!<jfSuRTBPU@ditT!3Ibf*+pPiABgGqu)z#GkAUZ0c
z#>o+1@CXTc@9t77DDm)VZRVmOV$)yUUynEw!*J^4N-?!ZdcTGfJ7@#IusNaj_wV18
zrZ2TlJ0)FR-Eez8FBvgqzxG<)uZO$H&UdTbE~yvYLHS*`Us*8{by;ot(x8;lTbuy4
zuqRM#9vd$ko}Y!M_PQy#kqk5zzuSqDd$JIA=+*zt`fKdb6Lh`2WxZH6b$uARB}SwC
zGl2hfoPzP6EK%|2B1*QG<0ae=3%!H;zgk_-Tazu88$hiYZLnWyejUz|ue`T&U7?U7
z@udbdys#)oTT4L3+WbYM6mYQ@wR>|ggZqt*I^|RU+%-aGz+3L}zjL1*Ua!@EPKqQ5
zOd9|dJtKqQJWu5ffP3+VaL5Cz#ds_4m)*1D=x9<^cwE|#eycb(5%1m;a;v_NYef8I
zITZ$I<CkWaV?EEM)z#N}8fqxWQAGURp!*EzK&(5VME;d|VD-_`+B#F%=a>8SwkCpI
zQlnK+aBxk;m+iqRyOm~Pulwy4{z_2w4BFiDP5OF+e1H97mY`nc<JCM_sAO?ZpPCl&
zar|9lwotDBa=uk)F+rUBHOx{n469hJZ)kWJVg8NXJ}6rv>X<Q8JYD5z4XPd<8?W(B
z%8u52vc8=P+1XWq_QQTEX9pBW=^uo?D8GTY%4xmbYO9a`X|lDggMeUf;8?TS>}Pg&
zM7#S+hYLj<bao?o)K3ljDQLyLBKEyGJ$SyG7C#q2P*czX+9ho?hZE2VyNyJiVNmf5
zJNNu^RG;_5wcp@3Xr0c((@CEQ6M7BJot-o7s8NYqjG<<5Em3m85p`zISOhcalyF*=
z#im#-*37|AP2CwSM|oXQR(;NFyd}B*Rj$pfua|FQwLi*J`AzSWG<By@YOP9}6-Aq1
z3SHf34AYD}Jw1HoE1y6Ws6Z93z;#aqV@PE=8gb8dU`dH}svRe#iX20Um1R*64g?DI
zj1-EF?tQwU9x_{K3KUaJ8NMloJQ)?|AZ4PYTwGv5EUeg%5PyvPJ?>$0hmLR@Y$Wl0
z5&flU1LQw{{%lHfWzc2uzp_hkwM_?t>%~iJ@?01;QJj+J8<N;kQEHv~4#P1vv*Awq
z?Il!Vfp}gyeSQ6O__05KO3X$QJqdn~FGC>>y@8$U@@283kHFulAQkGqy9`x6+@Kzq
zBYmicMvN;PBv+Cx$<2+_U$0a?Cq1AGLLu_=o-BJ50(=zqn<5b7-oDBnpCgS!f;a!?
zp`3@4i3i;PhFa;kwOtj$ysdk_+2_bop;?+(QE{@`_K<&@$e@kmHTkJOLQ7rUUvRO*
z=LKju8~x7PgV{fb_@QB7E-k?p5Zhzn%K}J`hK)`2WldVSbbF($cYF-U0J{46{Cs>L
zI=p-4uK)fNY<Y{cFYJCr>ugNI<DlaHqeoceW7_y+Kn%?|bY0@hM?y1w<9PccOk>~b
z$&^bCg87-HW~E#Yi>FTySdoYUl{ySWyku-_HYX;>zh~+TmFM>t<X<LFcq(sIrIkxG
zip!>Q5y{s(<X~DX8wjS7DorYPqo4J*q`QbC7Cl&>4>K9+j`V!>4E^bnscH54U<YUe
z4yqiOw5It)<FpbepFc!IM&4mi1H<Y<?>n5<+{MmFDz`luQKR|T-*|WASikh-<YbLf
ztpw#0r|S}eI<)7@wsQT3AT0&Hh5VviU`W{J3y1Tt&G(4As4CKG9*E`v*>kCi%yC=F
zvPhti(R!_&2-oS1e#%!5C}BWlhK8XU=cM|9dwqM0Yw?<h&2%vgyEN7t0TMYa&d0mY
zVW#UJ1!q_zksQ4X1c8x6CQ;sSW$m2LzhvY3|26ic-r2>)LxsFZsHhgY6r`l<qbcly
z?#_E#&V+<V4FDD_r`}Ybla4b#18plg`JKgHFSfI>0Ha~EjzX}q@?gMEE$N%jHSSgp
zg@78@L`6jf1?_@+OrwC7ceFJSmBJcfNntP0>UB62P!JQmsGPbKdW&7K?|<{@{CtYr
z?h}8}EonQ$N%*&;!<WxQeL@~FXaoe+pN)=6*EYHX@?Vrk#j_{77i_jCF#FrwMskav
z>7;2|pvhF!jhXm*GrhC+v2#^Qbi~4Q4l+tO8IXttiZn}cq@<i`E#b&BLOPtu$jC^9
zJQ>yUSmR(57)HV{A8Trnri<03nc?i08-4lzZ8O)#tGtZq&S8v(wRW#G8$wU16g0dP
z`pbZ9Lf`E)9!HGKugA+xmuLZ-ravbQfx5T5RQd8Et&8P5y)FgEqG2xhZh28B@nAY1
z5jUWbWDUr0<m#T^(Vi+xN=p7`nX4_Q#HeW?jLSeX?v+Psb=VM#qgI6c;<2OU(0I3;
zS5XmT!?)=rkS}CcM^3H$4CJpkRx&`}rxrhUyj8$^_wFp0l=^%)b1nLbsaMFWA}hPX
zMxT6R!TojE9TFsHK6%4WC7xVVtviI2NV=)@sLm5Uc0f6RCss_o%s@5YNwQB^$MQEV
zoanPBydc3NJQ3|14}oy?APkA!BGugc^Q}<%?*{Fjya%R|tYvcXRXZb*Kwjj}_&hU_
z&Z|ys3V2LU5V9FwHUJb*{(pppU0h!aI`6Yihyy04?yl4(0Z-uQvC_;53Vadnm01nr
z_feS+>^*;3)H8w4^JN=<-4kSYV~x8Pr$#(+TUCyBmbke3`ot$yQ>Vr8?=H+nP??7(
zySjY&QyPgQA|fQL6t^VdK><7Z^y0nY%Z;1FZV)ReEnROpWqrE(ltYSDtdcFTx!mTF
z#G(en)bM4mB9TcyZ)S`^B})WwW<!JVzlVpK<$4LX6&G%O4>!jng%3fy3NkWih0qhn
zBFI7I2BmtXZ`HN5RJ63J84%5iYQe4cg`5gwDMsXPm1<P^_s{Gvf5<he+}@(3B=rkx
zQ?X2idZ5=u45S_$41f;&x1tPi@Z_hjmaHEk@Set3@R-zpmb9aFKO3KKQhC0?SU*~3
z6|@opp4v)tuN$LuBz}`kN|pEcXiBYKoh7pnbrSK_)m3^%#@&57Fhh2IkCz(c>4ZoK
zyXmwm4CvKcO|j0W)__#-78*JWR@HNa?G4)mOm<SzKdoD0Lfu_<8XQbqI<@U5kB##_
z&@DaR=?Vhha2O^#ZHe<dE-|4KoN_pF0tmR90Bibx5UH2WpB^wzp}Vbjc4cLeroi*8
zAJtpWSx@Ek0h4xTIKdD&q8mNZS?ANj&9(AL<DfSX8#woa3C$^TzqST$<nc<&1YqwD
zr~l4|U0|hA$Mm!R7xOno^?Ay@rhWlM`-7Mk<Sr+QaPW~$Us#5BT4VDAS1Wq4@j36W
z;E08^`lddV>*gj0EBiHH&;8_;{M^02_Iq+c-F`*DMEh;`|7iiH)6P7>!}+!pzmAYH
zS_aR4l*&;_@37^gk(r!|&gso*e%8{a*8(Nme#HzC>tY8HkDYFJ6)N|(@_A7r_cvQH
z5^%6dh3{`q2O22I$^X<JzG65XOKSiQ<<FlVdV(T#+C5>`KHJ(F=1L*AGYLAM9li()
z65`@=JMTLPZOP9RC|ZoAT770<%<@NRMW>LeMj~gPcy-syt%e=|OzxZsE{_|73a1oP
z@?}7rc=);Tx$PdW53N{6Q?d3<+g~R+JwL)cx`pz8JE_pE<q|*Wyu=E(J6XPKjgL=A
z(66_qBO04}?|7ebeaI~%{0Mm7GPn@{#7u8b1R0ks7b=*Heq201Juowe9>&KC%7A7i
z5B9lCTFUp#A1$_tAZLP)p8oG*^(Waa`_<NJRf;`u;})0ra~_-)Dl+i!trzO7Fzej>
z{QZH(<oN+A^%As<jndpU`{1m@C@W8_w0wIq=Cq7OE156Bi+`8t%)vkz02fCJeZ5b@
zX6LlL$HIDkVJMJqncSFKw>$Y-<-2jXHbgH0`R^a;TnpT>4S!R$$)z^QdeN0mJ1?*B
z1bCxb(Qi9IP7f&Mw9T6@b9Bh;%8n}#=icS_5fjy%>(I*0q+;l8b1U_6SjaSR@go%T
zizcYGm}qvNi)5$(dkHXuAF>)@v_=2KzUL<o$@l7YmhWL;U{*spfdfeR0aR+x>v6u@
zK)#@<1(tWA(i7~<%hNYLXX-cwOm`qC?jtAKt;_yBI0$F2TxT@+P|$mIpbk3aun5ti
z*%D3I;L_4k5`LF-3wUc4jbyy;sq=<gxJoA=#(1(3AMCxFfjZ$vCg2kIDyOr0wm;Q7
zq-VWQVP*;O*%CG`{mK9BH8*|wo6I-2<zj&dD~*nEBydJk{ry2^1fXx{*@~f%2Eg5v
z8G0)CW#^wc@#r;Mq}pcOBjwp>Uh{Z4VVWq~A4!nrY+T}g{Wo+(J0R$-{Au@?*T9cs
z%c4ifxw!jl_5;gC_3&Web&9&@TLLLG5AhQglioHcF&h}B=Cc!aIh7xjn}0#S(KUaM
zau?$ceN2aW7WQ(lI7KV`z?tHAGaKr9ZVU7E>r>lOfZg+{aQvu3pV>ay3z8DC0vxJE
zY|3$b81~q=C-PP5fIvjqC*46ZO1LIpqd7#}ap3mr^Qq_|r>3QyE;Tfm4#k?l-H-O_
zzR#Y|vb{OR#F>8p+y;P{t1GaPhvVt|BdHZrXUp}2VY_n?k&sLe-fAT{`xwj3427)c
zZ9<)(DFKfc&>KE&|BpwD?>7m}@ZJQ@)LJN?Gc{wA&3%*+JFG#9o!y8hW*G*^w|u@O
zP1c=aiiIq&1R&K3(ByBMz<I4c3SgO|^|NOMX2ySYHNb6Zyny_!iUHG)^-I<zUjoc1
zTW~?aZl;ERcjt)S+|y_7`-&{4OR;|rMT%~M&<d^CLB0@FYiw+66P`SqV3c1$f#2-M
z_pMKt*3mKIGH4etV^5egKY;6O2_zXHl<m%wcteL_Gt9TT)xu-;e{m!q8%|)TtN#k@
znXx^0U#tKHd_i|cpLMifKkIb#T3sFc!V=JC1_mrHwteO+411=LTZ;j#vky5N7f0Y?
z`|3<jP3g9KHt`r1hK0!i(y%w4p<Zi_oT#f+`N8UAme2hap3o3N06^lA^Y^-Mt(F_n
zYj81Q8?#_Wx#JzCEfW~DLASXLsM^YM#d#$Z35n1Ku;K5o4l-84W9G~C7kYao2+Kiu
zL;K(EL+gNiie+Jmp18J=GynLjq^sjq;Qqd)6bM6+kO+VIf|+P5AtmMg{7A*eH#|HX
zCM=(bz>0y+D<rf!JxyL%F8fMw>-e}lKi}3&Q^9<wy=?vP5SS^<6}XuzfWmt{KjQ7!
z*xF`jBwCPgTF-8(k0ht2w!3Zp^eT1y_x3Nm`)(28;o?v|vvndax4h4sS(EKvmvkzf
zXbmz4V!7Q4f$<1TU!uX{{|;<!ZmzG_<f9O`#HLeA-jPwDWOe&wYTElu>W;CPxpRHE
zu!&Rz7%B}Xz{2wd|M{kx8Z~F<h*W$g-ZW+vE!t{RO=N6yxjZ$?l<&}FqG$o>qEY54
zY&#qr90G!Z8~5bBlamhHgXsUZ52SPh*%=!<AtXd*n)LwMET7!%m9o^TigAIMTwo%v
zr5YY6oxEQT=Z}E{+)2DW5h#WSa9mGYJLzBM#)scB>$8<rKwzN!1if?~v>d!yAcp)9
zSzfn-++Sea%b;OEiw>r+7`5x@=!n4nSzN69yf8mD#`zoG{=d!~wQedQKEAG=6Y7oM
zyBHi=s(4K~)NWN{YWaVE4&I*pG<GF!_}?Nz$H0aHb{!s$2oK-m0|h0>J3es3{W=Y?
z`)!Gov^3(2y55x^f_kbmj-FIDV*Ed94<6e=`=0}Yr2(X<%gd{aiyLZc1{MsP#vZ)S
z&HV)ORd-p^ii(l58O-zwiRWS?wA*MHZn#cxfOUaj0tyCYuk82O&`@+Ph*P5*A@iAr
zMtoz*MmP0WTk*h@P_Yp-@caL+4Xm=jM&wtaB4uf5Iw7H-rTB?^8*);re%&n70s%Y6
z-J=rOW^n&6Y)59{T1wO$$i0)&dtl;5Tw%&qVtwIiY+f-rjSBz2K{CHVoL(G(V$m1{
z`P5c}<los)lK(B|zc-V(i7iLIZ+(kh;F<mPe=hdlhrOVs{Qun(vFF~tzQCZM_nX30
z)YQ9U1T3DoCLxul6TtOtYFY{V@dF+O<?d_)Gmhcs&(oeBihuVvAE@4-?v71NWd4`g
zI?v4E`1)4^oW$6wDmX(!TWW3KNdX}=uqRmgL-RHW-yDO8g;*eCe0;plyhsb)g_NOT
zq}l5x%GmHmuZJ#>H)3QQ1zqRa%?!<H0t2@gv{<A@g^ka8XSI6axMt-^UQSLoo1~an
z_wA_=INbE~!>-}SJ0lANy}gNyy6Hoq(b1FZ>mQkz6cb^#V?zi<^L1)W$Kq&MK-Lc6
zdU1Y!!Z_3pM09t;==`$KClq78SeoDCX1d)=+Iqe$)tw`S!S~<dJK=)85U}iezIpvq
zFxceNr&R85#H?8~8o{N9*BSh%S#5(g{U<BI1_sR4Wn@VbPUtr`X8g{UW}o5~_W|Ms
z=HzT%9c%?79pq+ZO%|!H*sbsZxvFaP&8g#5jwWRKPJeKGJYxw|@5mukND2Yh(MMfz
z=Fq_ype#WiV3CNIEw1*vU=ZHrzjUVGh)S4NK>xRk4OPBTiw*{p2z%Zh@ftKc4}ECk
zy97NZ10v#=WDQnvU}N++!ADn4%5N?~Ag=qgiKXi#qT=GYYE&NYS%Ke{ip+)LgGd)k
z#u-b^lj|?;CY1+6qG)SuJpA7o8+<((txA4MzDAY{LTJzT*ZiKSs!p%e)jzRR-cC)u
z|MiPYK!UB{>TxQ!aIN(`EHV;^(|a2g72M-L+f423+|Sm}DWsL!+;@y^3`C5KP|Nr3
zF0~&a8<*FI4K3eDtgWrdQ8tA=A;4`!3<-tS)YNoc2c5rm`JZ@}%-1B8co-NU1@LEZ
zkhWEk3mx72V+?uV202JEUW_DFYH3LVUCnm2^#O9uK9Si$uQ8~mtsN{KBms2Gzs2f%
z%0C76PM&dU5bm~HfTH_wymWhZCgX|VISL?8S07hhQ*(#p4C07OLj!xBhlo=a;KHCY
zDaJ=5>~qibp|!tLgoMNh$)L%Jf~_am#QPDFf;!yhc1es-=&<4EDN&L4iUrUx5O+9T
zZepnati452V)I+ADsR4WE$Bs5v<m_OytTH0g(i+9elCR_7tQHp+01llbW}p0-;ow5
z2u3J`0xn1UDd59+-CyN97|Vl<R1(X|LfLN&OiU;vIIBcPEB{X2TAahbe>dg#@|_Q2
z2@p0$Q^GTaJpekt!{3#EYDsL$nXg#!v*#rz$2fR^KoaPw48*#+$YjnItJ!f`nn9e6
zNoP`x5bE)%1^B<gQ6yiQ+%79BPnA9WX;VxwV<^CPmpfh-LoqEJ6Cn^D&$L!<GFDbd
zFMJX>s~d43*3~~b`6`L3BN<SK2sogfbU1GPh*Os|Wy?S17@O`~@Wt4zCnY7Vl8N!7
zL!Rgl3}d++jG1XnKHmY!3O*liamPVRIlQwg&tN$w6g)*Py=ewfd3p8(KCyqG$BT^5
zCWm&hafy2h@E}$w8#Z+Dmo0ny6Xg6-&;v!(3K$8!gM(<ux`Q(93~X!|z<DDrFAtwD
z)yAAQn<>aJHr|k_a{FQ-p`xnV^)|ItA&36<m_Jt7ryV5lD4>_X6^pxqy#uJun|eHK
z?7)U-WJgCwPHP^jv=ENy0$*QIAcHe$S2&L(MrOB1W17~>VN0jK@pIYgC)(`Pt}B^}
z5AFq-tk9aUi@$Sela{+JlXA~jLl5)iEmgZ8lib|fgC($pKg!62T*+qJ=H%p<Ir*74
z1Csyr5Y>l92^ZMEbRs0wPQZN<&<nO~OztPQx)E@V^aU^1hf%rG6Y=z#em*+S*^?Z>
zS7LBJT4)5EpZSKiL2lQ5rofPx*q%Y##d4*YP6#I6R750tJ3@G&d<h?u$p4JXHg$uE
z?Yl$X@0>sfoI#Dep*c3C;5^q<2oC9E7!K2NtDATcjLhf3(Akd9DLF-kEqoGK6ScXy
z8I+ka7P#@Yk@%YU97Q|FPeg%HB1e8|detW4o(7%|H%tzsy+hgJG_i^jKU&?k;O}hB
z&Ht3^KRE5ki9U*;pT`cs_%oxL*2pKhpvgcWkikd3?QY`yU|Tb@e2w;*S>U|cEmlG0
zFBGW?>Mw1AzAr#B^XSZGzrS4nwzqGf!R9xdAQmVbaHubae-1`P<fdZVFw}}E{uSPs
znJltgXfl#^&zlOhd=q-~tT7<S{@tdOVQl^CP$j;E&MXI%6=!GY-06vl4*doc7(|4h
z*@1z0&Ty2_f8t$S%$Aq!x=cIY#?}2oCFBW`asUF(*)Orc8W6BzWhOPR@_kF2-f+2R
zI3)oBuzj7rZL_n`{z}v_rXU39m-`9Erl`1B6xn5eG7PmzLtA^T>B~zLNjo()3=n`_
zA8y(<dLDX+yDC7tz--js)wg4^*1qCOZt1C<DfBZF>t!QOB!gTu(T-k=5!DKvn7E7N
z%;RdGZa5fGOvZ95imdYgv;fxxuY2bWuK3W<^B+VHAKyCVVwXRP`nwM$XTI7+5(31~
zeyTwEX3MC}9kT^=SHp^}Y-TnwM<COQjC6H|p2|@iWgkh<F$g~@Whr?irsi==+~xC=
zI=(QOR1O}a4J1xIaqG_Sua`FR6q8xgrDYCU634Nj-&P<ylZUvqyI)H=IM7}U(P)W2
z1|n*Ap-RAuQ01gA)maS>bafX4XIX&@o!5_iZfZ)@2euu>^es(b{YZF@R(T0fO#E7t
zw!7S?^K`3*RZ#||6ciW*#BI*V6`%MO^En(ymAF5OD4*<#9%R4U(8*C3r_MZkyMb_X
zxD<)%-ES5#qQ9Irj+BR?xGN`9`{O?f^urI3+rifmjOuE~;t6f|@K;Kzb0rDAXf~Pr
z-|j9g>?@$NS{RweAQdKk2o#)_tave`vU{-8zKP%Uf#%j3c(A>P`)WZI6gtBeoU<K(
z&_+!)6aut~c9W~vnDLL?&)Ccne*>NZ9rkhRwm3OC`)arHfTtN6+L^O$jTTR<`q&Ml
z-5YPEU#Jv_utN%$ZBEvsQU&TsLqmhOI`Ptn4<w}iUS3bGqi<j?wuB!QehQT><XN){
ziu8&(go*QkLUw<BINor5<y@+bODM^s3Q9_c=fMwKA0HpMZVe0xy6g~%gE#Q1_11kv
z{5L&Do5W6h9fy=d-o8voEUI;wF(^VpT#&OqOqy{ZlS8dhB&8N#9xp|)TQFBSf3mh-
z&Xa{YKw~H+x3l9uH{<2y6$uHu)7I21*HPWq4G9V9Ou7b%JZj7J?|D`QcNqoHC;?xW
z8y&qIBWT$^*+d*(hDVSF@JU*arSgVHb^rOD5LEm#8_AS5(`p|5KW?EKO-c#J`yEF(
z56(Wd5c<!W!aIx<WhCDTsHdPaBR>_z^f8!7?K-+RqL-Vemgw>3uS=%g#(dc;p^<9&
za#`p|9fQA{P)6X`CX8g2nJBL5+Iw<<ztg0^^QLKoLeLUtI1HZYB0{ky%tX{z!2Jrz
zZ*u0+(7_=jH<wjcUPOe{hXax20J5p)GOcWH4(AC&H+BzYgnM%6533CL+xnM_VD_1G
zP8@hSpD6`4tV9+imBy;9=9xRgk?)nnfu!n?$F1B+_uCVvo1=WqQZBMg+Gf75CE-z`
z)QIgTvlN5hKWkD$R~VLRDS{^Etu9<`h0F2Z1cs$c``1tCXNF#0KAVgVdur}=EMun}
zR1TyS4k=>&*At&p6cn7ZWCkS6dui^cQ+$zj*vJ02iXk-fq6c_>S3NuWEx!+&^6M1P
zqNyXh$t;(4&u&Y;L4v7Jz@39?2c&=JlMwp=9>g}I;cyLevgQLl0AKRz#2}4pEZJZv
zX+lI=+G08{hHb;@mvgpH-a<%{Ye_YoWKc)l*F)m?xvc>fK#lJ>n3|jUWS|jxySh$Z
zlr!ech*k5zbi&XHpT`Ybo#MYzrW*4a;tH6Jj1t`o38aF|EMNR1>xDyNy(bQ%<y5vf
z!-0roU+=QW&yDM?;0b^;hKBZ?h4@@$M)bv9TR?o{9C;I619o7ATHpEQUS%T$9D?x5
zGRH0VlM{PXBEGI`vI-XopniDQ(3#%z_xToC@?<!ZBJdVVB1PfieeYljTK|KIs$lV!
zEq+2_;lI5FQ65~CHN$`-|6H{!-sF@&H7ww?UFW=>#{GfYZdo)g9zH58C0Ft8@$R&5
z_(QA1fQ7=uz7Sz@bTlL+H9sG3HKz$RDYWC`hc12$i*Euhqxm1&^g!R-`1No#jr->i
zb*xpE2Z*^jNSz<4kg^?LnEJB9!NUhi_OD&MuA}qnL*vrZ(*umr{cgGqxWV;=lRu@t
zyv!7?kr>Fzp0Bi^;(aBJdy@e3goB4i6_hUE_G9Ap<xY4*{nx4C1R{tj*)sHQ(=H72
z(|(q-p9-mG5#?TA_(CI6Z;IYbq@VLW?IV!-L<2&o&Yqv7g^H2N=w;Zb8H07Q0APYd
zT4zN_$Y36z_faGru5Mo6S^bZPEW+KM{y=R^1_S3`F^!9rZ5Z`^&<F+S?0;jiK{B47
zNqHt`XC>SZgneFK8EDADI*^<DzL8=vat|Q`O<3P}h_gBAwI!RjSivFOzqa*}##BDo
z>?05VmC9XnVYj{!4qgu&`In+n*3T4LEA-hJUS;jnBO6(YNQdSii)(oYGBa;(i2h`#
z`1ghDpQA@v;?5VVKY^`mZCwJWHb@0~ZuaWx7<+C;&eCa>oox+Fkg1ZEu5)*L@VXo!
zrDn^(&d+c3(4bq4CU?Q{I;_77kUsvSITcXf(69v9Wus#c2ght2bvIjJWTa-bi6ocZ
zGW-k@(*>BtA>wgp6$^CQR4AcKQWmv@3U#DpT=52z6EZ@9Sgl;Wbqy>azCQ<oTa?T}
z{QL`nUy2F~_tw9Q1b*3L?r`6E@3;x4ImgIrU)2PfgXYf*T_B*p|JS;ud9~H!);A;L
zj23L1z6}1`wf1Ya_wW0)K_lvRP79X}_-3{&>8tf$vX%3L^6>CnR@0q}i*Rbk;~B6i
zRa<8XhD}b$C5xk@&^M$Pcl%Sd0Iex9A&D^-xJltaV3yE|X#f<J(|#3>2vgYSxz+38
zb$m9YO`fKE8&>XMC=S=Kxh_!W{%j*IIGDyL6y1xks{K4>B)<CTZU%M1O-@`&SE^k-
z1$Fbt02WrPIoBHo8XBmuFl%BpU-o88wZGh+_(M+qX>O<l(>+ErDZUyxLk93E75|Z>
z^Gs3;(U9loo+u5RbnTE4#d(w%aZ&s3%Su-|o5l*ZY-6z{g!c$mKjt2k9RX=VnNkq;
zUIt<qe&l#6XKB_kvs_?*<YAAL$O!h^H`^+|Yx1XmOF26^JwE>Sm@84_wAS#&p2?H-
zn&sk<H5PZ&U2OM~Pv5yYeyD;DMm?Q?EzA~d{@4}vX+Q}ifw-*58P!R5R@+)cT*QvE
zrlJZQ^5t&8e1yWK2n9t?h2c{6UAyhlhc91h0cky1b|X!IShln@tw^AsH%ak=b~1yn
zzRB|rKj5{uZM6AXyJ0P}Q?yuz_sS1q!8Vs;98Xc#rCe#6b`kP+A&3%ytAT^8F4D8C
zyS|Ys;~u_3Wh0$d*ROzu^-3NmOEBD=tl(LDuC-IBs;a82LzrDVM1sE8eP;#q4Xy0g
zR4(k!h{a@w&$la>GTmA#W@Z#z9Z(J$9hi*TM*-2B3<ga>AJuEGHyMdG<O<$d9H8)!
z#i{T#vPQ@4js-GgyPlhXq`rik*h^_qQJv)!Ew&Hi(^~N;Y?trk;=hS30v`D(lR$nK
z%LL~YT<VliT)fU5=bhoNfOBZz5XMd+<q<31%ZZGR&iyYks-S6)4f8ch=WMiZxc{)L
z!E8$Upt)G3H{~=NaE35Crl`XO8hiqD^da0hnZ)nkNxi&QBD`^A5II`%$8g?J=;@_;
z?%XQS#PX7+JGi{d##2P-;Kdtus0jdi&QM*BLIu!6B_$-*#fLmOAzVG(-C2jRPs80k
z6zhFdEr>P9x;vkO*pZoO;z8w+lpY`zmc1P6z%p=^mFKY{zj%`Zq@N(2gd3SVyr(Cq
z%bgkJz1lAak4kagXd!}E_<4Jbw1m$x##(IAazH*IoB0~>PeFO6bixc+CP?@AF-sZ~
zso;`WsGRKO7ya)?|MV3Yr!);}#xN!xW$Wm{4-SzqLH|OM|2?+-JfX>sy4r3v_nSn?
zTe>)1_G9EuQoa691$1HrugonlL`?Y%-8lXKWV8T-=n2ML%dC!TW9W0(&IGCd_h#FE
zgoI+Nd{Gf*;0Np4`2RQE={Lyd^aT!2^pS4g{oiEEzef{kgRT_2ZzOyzb7zebnYh;I
z{)<>Vc8ccfg3A9L2?W0u5)Wa4F<wF_Yl9l$3ty@xYSZme>kz-Nsy%MgiDUau%m42M
zW#GX`%osdU<;Y2!#p^m5qH`lm42*j)?<3yh>014QB`oX%m?II9ZOR$Ybhb7(dmBQc
zIh5QRzwG%&Mke_B3XKp*NJ{3)0AUjw%UijG@ZCEs5|T`oOws$9&>ugZ?`GCUM+1fu
z;$tI2Lg3)wVo`>ciyeP^-d)VCwiEvMu{K#YS<nNtmvyHeZ6pM_woKVP$`PuFHIuzW
zaj=F^1V0WCzo(M?RY>yXtHt3;09;#X4UUTq#QSC{s+hLA?P)Pz+op$83Jq_wCwL+l
zH8TKzc5)I96_w?~a>=Iwt^0d-#t~@PU;)>&JeOnZX*Ehk6k-9@GM$aL$krnPfNBx@
zsi?kp{4VlzUk_r-U2HNM8nZxo02D%{-kK`W@u!eiacQYxo(x%{2LuQJpliWlPR}lT
zd`P-{ykpqdKyP#Zs^r7By1J%Sx!P(vRHm_Mn&YV^2Tr>*aFcN_BjhbtTZ<XD1l%qj
z=gS|k>Ep*HB?pI=VHEzg7ri9wU;&2ZY%&P+CxZ+<`|RAG*O)1Yj1>-&Uj6!$pi59Y
zb**bd$bT2_^*B_bONG!~qBW|Lrb$Z+C#J7%UNZ2(+YCB}Y_;R14yYi1=Q7@+92J+B
zV`E`OXhHte>kmYcP?wXi!P?N~fmyz}vWCL!4_Q0ZN`$Ie-&Lie6oE<4o>fo)>{U}L
zDyl@flNAq3W8=gY=#5N?A3K<6Xga@aia`Lqs%)ytI0LxS<|hd8TmN(M0iJicev{3e
zFM=F8^J<V6<*hZcV3PMyr;M0Iv<Q4>Cmvh{uRSjAUR>(yK7}FJ9Fc*tzxXB5DD7(r
zC0zH?X~5uJosM%EDVC#6pxDvkrwtzkLXWc;bcvuw&);L?70z4z*ARU{!4(uDy>g?D
zCqOl;4nEG~z1x3zyu%!yh$iy_ofk;jd2RI{0}7Rzj0F~3b)!4+u@lI{z%ax`w*0j9
zhDnb{Ul-f!=IFm#@wq<&CV~Dpx79Q$8ymtH7;;$y5;H$f{1=ys5l$NDC7_NugaHKs
zFm#$UWk7KrmA%pnqb4TmKQ}m^EWiC7l(Yy$1XKI9_FUkPNsfa?Iz&0xQa-WFc6GT)
z0{#%lh8tUpOGz!RQ%rzobaho&%><e7#ZgBFxc7pv;Tn;Ur^$4lDucG&Bap5yd~Q#A
z9Jhk3tgO5rZni+XC-FV8LcgIIwEaKh(zs7AraRrh6qKE5yb*P2d%N&IF>&Ymbr8*P
zhh{0YL2gh`PzKM&=EerN^(zI6GvdKY-Q`RMjifGZo(JB?e{3OE5EUQ_4m8Bskbz;#
z4%ZDk8=C;s!RdkSz)}@0AclbE#6K_)%-5n{A58t97Qh*f%hLa?ORyg{U?2olt?A-)
zP1G}inHl#yK{OwiNe@WlI92g8MnZH{49M+{2J*#wghq8gf1;R>)6hl(6?wJM5td~i
zWHzlu2FXy`cfc9V?(p}SHXp+WTNZMxU-@{43>L)7+In=xw>lItmZrsOreZo@p7ezc
zmlgBx2&c}E=VxEqoJ1yqO9px_E}XU9aNNpj)f&@tFlTVVAf1|r9S}^x-l*sOe8r+a
zKR-H(g@<Xo1cKCH!kUmdKT@$8s1*B$hiw1hsQ0-vO@gYzp^f7?BLid0;1%a$XX*>C
zPPc@LSMJ|h*~ma#8xeUZV}pHL7GwK6ztQp7K#7_eWnDK}e?oL(pV%U4zd<-4d5+M+
zhSX(?KRC64gumnUU*x*ohpPhw&C8RO0gy{dVz%W6S_8)px6LB)yLY3Mk$*sNX13Dk
z^K6kQmAoF9TA-n(eya%Ly=kAoPFew}6zI8z&kLeP|D1V!@xK5uHi5eO7@^`1ykCE6
zUmVGiXFxM#FX21jB9CSYS+W#S+y0(Bb6FAY%hvq_qs`N89s_`E5(=L<t#>+F(uDXH
z6<N0KOo@q!O*vR}pH029?9;AXB^3r#s>%I&7bvQI&b?-0XuLc;SOi3Tb+c1b%(~MB
zMja>k_<zyt!PXO#0gT6b*1@mnySaEBx4nR4MG*35RFYMaNC*)>%HTGp37AP;iS~nn
zy#d42m_mrD&jOxHzuI2E76ojxXJa5LGq8C}H_&;x`jfDP4B%1Ow7+bAKRvZ5*W}mP
z{C1a-YitK+(D(of#%X)77?9wzrYza$e@+5bG0cX9io4f?OKp8UulHkw>tOXK3)0K1
zwqWGL!lI&Aa~aPUvQ)Y$6Mj*sW?+2AI-VxpVw$H>DEpJK%%)#NNXT;YS5#(J8!!d1
zvprNBo%^Vdf{2JIOcy|_6ow&nN70^)LRpc_xVhyQ)AT(>A{zvnK(<z|&Ewl{VNbrF
zLtZFLwS3Yq@ciy(Y@lx^RzWDPoD|OIdU$KSYYXUlXZ1PK>zk4bRaL#P!;Z|{4f?bV
zfLv}E(8`*I{*U_<F8mj*`zdYf;(_V*ZN7NTAi(wqltbNwm1um<l5F}%)KD2ukDI15
zBi&FhRP$4x8Ydh-amaq$+4KxrVr3QQr^8A%zd^KUK}+&4ag<c+(wv`nM;llSok|T`
z^sfIVR3kr~9n2&F7lXq_2bP)unldxHcd&@dAimPbhtv<qkYXSCvd@u6z~ElgOkvd4
zF1#ttpBd2GeNTbfLcB37R-;Nb-HZmvM>X~~r)wIF)%Z_ep1Fd<I1Z8_i;Fr`k)ed-
zF@7*(WY~cC8Ml(6xk;4@TA7C6H0oQ1i))Asik=s+J;24k6G9h4i8bp!8<Y+Ty88$#
zE7yY|l#sTh=ov;L?7cfuXjEZfwT(xt;aq1UjI0DpSCpIEhdhmdJq%{sL*Y>$ynID6
z_`Wh?@x(>g1y*bY1J47Q8r#PlBWPnH)7v3Ex=~>mw3-3IH1uI0YI12$FWBi{qFq@)
z={N!o(puAHmSnh;%<Du(LM6{=a!CZS?2SADAx1?Re4%30I*xX^{XOSIW%?nx+`>X!
zKyd8sVT*&{_M1e6C8x8~cqne)sq##wM4LL?MEim<=Z$*>ciWyWf9%olZ*wJ)jnC?-
zsWR&7;`eX*VSA~d%SRsM93mAn+g~L)gGTZr9Vj(jZ@XcU{}$)ukjH7rVMD{HmFt<E
znC66>9bZCt7W%@qjZwDfV~=W*x$SugWm55j|1ms?=byS#ye%hH_xU=w#j?!H9qgEb
zzi#NmlNzy9yo^;DwM-<tDV=E<;lz>vv-NX(L@P*CRmYKv!;lCPiNj@DnVdX(Lx(yR
zM|`q>@=VRcqr>rjz4PpSx(u`w4iYktJYXr4>47`saX%Vv7X}AqrUc+oqrQ{v?%{ra
z;Ys8!cwMLB`{pjrJQr9yAk)GTzA>8BmtIC1@D5X$sP6UJJea+o|Jc>ky9YluHs<N&
zQ{(Kv+fum4?`rl~UbyFBNnjJtppBq~ny$d#GVMyme}Zm}c7i5>Ldc|J`}qGc_timJ
zu3f(hsC0KXNT*WL(jrpQT`EX7g3{gHDIqNl(j_7wh@`X#(jg^r7VdYy-#6#~Gjkkf
z&!C&<dARTEzOJ=?>lbu%64I;BvBmR3&wc`WlfWt*8no;;-+Dp)tQt%#RA)$%Wq@<o
zx#R+ualVznqi|P4vNzbBS*IqtX!h$@^}T?()>l-c_$;IY81s39QiXRDuJ0nE;gi|G
z&@?e0LDkASjsY{V>Jw+QdH$>37y&a%hXg+DC$tXZp`tNPLmFt~K}fI&L4&DC>AOMr
zrojosK9#Tjh@PZ?Ubwp_<#2H(o~1vDa~@`{1IyII%&1PNyN(?=>;@ux`<faWJw4)%
z1=pi^f4-|9LjF?{O60m8H1@kpKbKgI$=8uAHNOTYa9ff!qd5-SQJ<HhAtx?;Kkn2$
zx7E&kbwrdd15dG4V`?&SUH}VTq)W?S_?6O<&O#foF#=_l(1rrbZ0wOFiN&wH&QAn=
zF1;d1#~=RTUvE5#7TMF1lJbMP^<7CxyOpGxmi)SFfu^cLb6=r!$dZ?qDPfFDI**Vo
za_XklT3A+*Qc5iU3r%C(JwfvUVq%ZVC_;9fSAdzMAku^<v1xm*4)!!OxXDq-_U((1
zv)rE&$zFM)z|6{x1P`VYj})_wjm^SD#~&805d=aitd%<hYsM`J_p0+Pr=DnPhKAtu
z7BA&bCZb+leAt|Fw3?}V1vAFP#MN0HC7;v$SZf7wt}g5No%@*s6BjQkcdt77N}nUs
zd(-N*dxg^B|H+rnV`FDG3Wd?^%HHx%o<2rh30(UAmF<bf+?dA%3G)nooMD0C|6FOG
zG%4h5AETu2+8?CR{6AdwzRkp@WSgDRwaO5=93(W9oBh3s78YzQCN+h%xX$i!OtG;j
zeMB82zc3EtriqRYObk6rgn8So=`zz^^q9J|<a`E<v|J?;-MLcBPE>~wmLE`=V~~9-
zGc?4$ZFT>kZ_cc;hEGb3)W)jyB~mw*PS*%crBgIdX)NtS|6(=z@-W+C)q6ZaAmzZt
z3>Wwj-sU4-Et9MFy0#xFskg#N!qNKtd_BvW4-Jj?;X?*{M%*=Wj;h_p-No$0J&%jC
z&x!2KG%3;*vGSD2=;-LFf{wINFq(I##I$!l+GMcDraPo3LT9F$)Xoxh4~tv_C;=eW
zI13bR&}D@uDT&fF&9(lne$Uz^rP43g^78w<BxVMJ7d1nih~~i4b8wBhI6n;|zB7+A
z|2jKhl|-n9>S|z@L|bNnslcq@&Ai*m?#JoccL%m4w#GlqH|}G;)AZWd$r`*L$+O6N
z!~R8#y#5vQW35&=AKKC8SAoR<!+W|{*3|?^hJ>NWmt2SRaeDVoRNc0?czJtoTN@j6
zP6lu?Tp+%_CbZCU?ivdD-=Rbv3$@5_*_dkRx+3CPrhixWdaE(*<mfHaMqL2E_QzkG
zrd`KXwr%KX4Q}6zNH$vT?y(=zMC!Pw;7BuCjpmDz)<XH=vA4vpKJebMqEf%k`fk-Y
zD~4VL)PD{+2;T)Phhk-;GHLV-4UhY<sH{ZzTpni#4O>p%uydw9%{Cj!=2Y*;{WcXt
zS9oIdC5~wr#^|@##p&ZY^!F#L#$X5n&;$7c4;>LbQg(KX-~uR4Wu&EBJ$?X#TI%g*
zcG>91`ug7$lgeoot%9MLRDywd{ME+9&X+G=`UMXOO25LiF#8p_Ftr+YMMBL@jj3St
z``4op=V);Oaw?TaTUTsq4<6`mE(zh4<5)9L8Z=Zg;CFs2^Mtn2{&-u;%izlpa4b6$
zSSRd+(l>yPFv)rr`V4`8ZB1)&p#$%vdSQJre5P*e;bjj^gOb+aP7dI9xU%V%!v+rP
zT6LxDH5)LzjGj5(5&PZ{BcO<Z&OzKW--_bMN++=nBMG&?g*gWqa}6*ba*1wO{02Hn
zZEfv|^}DH?`6qx+uQ|2Xy8siwzD#i)jkrfEN3zlHPE;N*LKf!ym-xGmCoA>Pq;v;F
zJdTJuy=blwSbIuefa=>y;B^jrxVSp#Lk8!?qJtENGzgt<X3$lB!=d5h3*V6WTWkwl
z6-ceEcU{s;01d1fi*Fmq;kR`W1JRX;`T1*EG+2a$C*<!rfKYaX>wDwDjmu>ln5`Kl
z8|B$ApY3)qDyN48IzVrJGNz}rFHR)#A%e_ROP6SC{GH>~<#*tjh?w>w@CE0P3%OW-
zzV*0Jxy*G_pwg&A!CF{QF!TkbTvwr&i1V*mV9HQWLWBRLOy?dcBOs;iAz%)KNfD;`
z=klV@%`Jf?@&x%L-?R@i!2D~TtSqx`@J%mTGO`!jf#c=+TTpbLB##h`+?G?YP^a&9
z`Ta{7dOeAT)>cZh+tQ?QMcJaSnj{Uu$mr42r_EA9nm}k=4if)z>rT-2v@>=rqDS?k
zG>dgZ4TKt-8FWl81*|g+rht9&d!<>2Jh$y$?%k!f-Aw>$xW8D*ofQ9_wZRlL6-H*q
zLkjU4u8(;3CmfX#!;vD(tgEMwEl=~~OVJ;Ax=5<R4QPKDU~9a)FgNOF@dJ%x6DT@M
zWMGWsm+`_R_GGef@YZaOl%gKWTL0_#hmW33lnZ7t-7cu|Jk9~FtX~w$&$<^AE<Edn
z>JkbGEN?y`K0x3!Xy_uS(5a<06PzChc(s3_KygAsIW3hG^t1___J2ueNU}6jQwTgr
zF9+8So%OOike8zDd?b-{hP4eBr~fg9Ge?Ye_qt)3%ALbX?QE9l8q`sglS8u%u%DY4
zUwjYKx7=GMu}#c&l6I^4Xbm54Jfwec&Z8@#D>B728?C{7XODe=y%-}{U`ZtXqpxJU
z<r|hb4m*222E4$MGl>|Gbt`%3q^eu=C}9ccK`pi#mL}v(nU9GsCEBGhibg$U=T&&p
zo1<!`YP!yv6(5^$)9|Kp{H9v5!yO`)nwO*J{d(<_GTf2_1KrZup`ko2WAUSp>wM*W
zmSI{Q84?l@nkdSTdJv_*`*->u7M&(lR6a;+N+Mx)|5xK;<3v6!J3}l#tC0%>nYO&|
ziKd3+sMRPgEy1PPvOvM9vRQSibt8@PuPkKmq>^7(3B>+9=v6ST0kIEI#5nXFq+$k?
zR8tA~lUEn91=q2HT$V1iR7cfBi_?`;50wPzIAd9Kx%E7VMBS<<d{PY`jiSPH0OVGx
z_8qX*0q)8%pixI#y8Y>?U#YKe3VoPYD)QQVEsqIjE4Od|OS=N|?_~6sFSFyCot|wh
zIjj#PY}iGh5>%7JY4FKATjnzSmTbRDajcZM_y{~73mmJ%wv#RHbh3S@e^J6<C+Z-Z
zktmygu>hJpB_2}CF^mL^`|-pQX1s_cJ-^=(#>L)>p{cg*XZ~klNUWf)@P1+@PpkW3
zivO{WrkaG|*0)@1bisek0BML;7?Ck*CL25sv1wvHgqIQNiYNVZ&|g<oUeRgPNHznq
zt`)?6$h4mA;{h+i4Xyu0ErZ$U>fL{i$UIe5CDmaa(2_M@CrD^OlEL1WeDWru7;kJy
zREFc-qibO8`l};mIG-mS2?fYCHy1biO~=!A;y-vjV@IVuC}MqYB2)VOix#op?bPsh
z5`w6bsp^6Mz`Xs-{c70NhN;-yiVHL0)I7J6d_r;Yy*pO!{L7i7jiUQm5b7RBK^tAa
zoFYvNy&1mVrFjrO{a<JmUgo1dwnO)-aIpk!STyE;{x*1%P8TT$xpwt0>+|}(9N6}?
zUH)#Ae}Asu`FhO#pYQwg{(t_)EQ}hILm=^yb9w6J<png0Ps*x-!v9$W*hn<FgDau$
z-fetuK5hlaveHs(Tif|+b2JPLjMh)X!(hR&oSB))&CLy}M3_mxiFjn+3N5X+g@pxp
ze8njLf~kn-(I&<Hm*D{c0mN%NRJ%KEyajo{mwyK=kK*);&uRBT>lF9VGKHtWTv_(t
zdmb|pT}UnBc{JPT_%kD&h5zMj|L`!C?fJz;5IRY?{>_^=0cUxlstOipAx%wZV2=O_
zem)~{pBFD)B-)p#+xzA&&p_X*Ce{qHf3U~GUi?-z1K8rijF6B}IQ2?U{juv`vNx<S
zA5<W9Gh)Gt26!A?zg8BE=BrF)DG?Tfu;nBW5fO=9J31sl;m)j*eZwVzUDpC^zrYRa
zV>&h8y?b@FwU4f*+|9uK@H|N{ntH{zg@yh<SMXdOUKEsvq-11Io1C6;cYiGAG4T2W
zrchwgr-y+6BO6xMcRz=--YdOv1kH1}EfK4xlA<E(@Ar8BS^W~&@-b=DAX;L&?21%;
zW((GH`BK=tY-}R5w31%^To>)O-C?#sKEzMu`oDjQ?;c^`;OW^JA%|XY5IsFT;G=ip
z4>L2!D&0Ii75ikB0F_lLk{GFZwhZ<edp5}t&oVRqq8)#K1NrEgYCJ~9-jWiQ>vu@<
z5^&u<Pv%}mKtQO{uQZYn6KlKn3e*SDASERwvRR7c!-pEnM8JiDm-**0g#XHg&XP+a
zzhC{F2FgM+I8=eD|9fxmgV!nQz5O3}f%clkOHNmp7wo!q<3&#%Nl6{Ry@EwGG=$O9
z<>%|0DdOH)9}$k4oR+p{gB5k(OMn^gZSLJq_l@p_#(+lN*4Q}aZ0f&{V{m@I<5UQM
zSUo*GAb7Vt-u|$=!Sb~HYwknGRz)>6$A$Kr*w#s$&EVOH&!S#r*w#9Vh7N2k_nA5h
zuV&>8oz>M4MKpL<h4A-wi(akvJ9DpEPF$dga~CR3|KGotq>~e0+<hFJm|wr1e-v#Y
zqN2i@dJ7EV>In5AW$aM^pT9W#=W0qD$Yf&X1P2CsC^X|URBqBI{I6R~JN54KzdHtX
zFge=4I}{9pL{R_#`X-cz4w*JhUQW&kNy6+VsEm#br3g}}s}aUceEX4n-Y&s@7rZIi
zvPUmx<ituFjNWPMKU&`<Hvcw1R0&)A&2w%EGhZ=1dl;)p*G2D!B_~hz_ZPu}Y-nfz
zK5^3>9BHAB507EGDlaep@Zm#!{YMWU3a(@DH0S)UpEtbzdH-~rod*qj{z0+}y?N#3
z<z;07I%WC!$#}hk*wW=U5|BUNtC<7ZBqE}p-HWeZzqXe>StMc;{`)#X|9lQZd;HwI
zJQ9f&c`vVX0K}5@7LO@soqheJOifIkook*1fuE}O?XAXzXcYo;bD*5hQoOI_m%sjv
z;p9Y$LAey~p^=bV(O=;}KHa+WT@XmJ&wu?o^MFkTxe=EbAD4gxMo)Qf-=;n)lP~E<
ziYZfJXAD+~E+Ys^gr#&!J?D*p=m*98+L09Y)XnFFzlffb{7MxN^C!Rlpi>xsuj`bK
z{mK>kBA9i?-i85C1WxxnT184#RTXe^xDJ6K4Igs~vBI$E#p(X~T~;(#Zg=N+)rXA1
zVu=6z{8RfCHe@h7;<BAPH*?JpbPP44*{k=Rc?{dWon28=6X|zvWZGs4_OOtUhY@2F
z6B;01Fjb3X;gL8eDI&y^X6%0(O81i{PsI;(xag>;*oGr-l$Nl8+rXxM!1ciE>aq(w
z9Y1|yeZz>t=s?-V$Q=eed#MXESSDgcFN*AoT=z)@ub0XtmwFfqEnfeJrOHjWz)GFk
z5_!bN2gxXp)^>K_aCt$NhI?X|<Lmd~!}7+&Hn@GFx7^DW;}H=7CUzPQ(q5r>gw%()
zQl`Z5G+GTa-;>ALI!f3n;*kVF2SJPpDPley`SN%TjDsU@=w!lyaatDkDFuLTDC?hS
zXw>RAADx_Ezi3e?^ndpDdwd1_66f+N%PKo6e^!35t6X0+^uHHvzf6EF4QUaEC$}+3
zeJ8*Pk{W^OQK|r3!a)p@SGx;2A3nSqFVTSBpPYgMWOz-+U1w`+#I3IDqvoLOsjg<3
zYj&N#Z#%c&4ki^-lkp(yS+<3F;*$b}+-KU=X6xWf1t`|c<m4f^44R-?SR{T<t#v!v
zOmUlox1;Uu%rycbafN<!FCqvsWg^LKUg$R2E#|^6b8)mKOo#lD0z6)Iq@-Ze-m{eW
zuzXNf#rF3i<Ndv9(WX7dQ}oEDrlzO2vu;>|d+O*go<%S)*WqykK~&PleKj?_U@2#3
ze(T{3VcTz|Q_9K-eUTK1DAR8r=~7Wq`3D6CdS6}YmcXM9MDYDB@Pm`M3CEXs9?*(H
z@3QF$h;eaYqwc~f7QFiF*YvxmS-!W}VX9<hWi{F4tShSQJP`j3Iz}>Hi$hSs8nn1g
z)!T~6tk`rr+nSm#10o2E*N5<{@K@331Y=(H7?dS3|LeySp;4V2=af_U=H@2&%jtHl
z-0U`h#}o+HV1A%p5^n<(?6ae-yxd$|0)ku5g0^m<`O7~7FAyOC^;x*^{V{Z^k1Lf@
zc>WykbOkD*I{*5rU1zNgwzZ(nCt}mmf}aO)jjqLcL(|3O2>gf)8y!yJMkpk*O*Ol6
z-ntdQqLHqyzD5*;Z7aFg!1mwIX@K#bXNvTC@m2h@_zVbw;@Ew6S3au2;K5Q!$PooR
zJ9xN8EJ>unv}!1Q3bf#UkKHyW_d@WP^c$Bv7TQI%eBq44Amv;5f(pM+OT%w4Ul~=Z
z1c{`V6yq&kUbT}qldrGIKbZFd(MbkeUtRpVSdF-IPsn9cz@)ohAt60m4Cu7_<$8iL
z*lmoBnyP0~k5_P!XnZ~TvPvwq1FxT5roX!lbzf*#wLG?vurQQt`izwZA3WeZH%jU3
z?j~*}HwYtS2h*-0kVpd=CE4txlvoyAGety1)~k3J3W}1M)#Bc^zfo8r0~bUu)5*#l
zxc!rBQ}1Pg$O>~Yx5G8=<V3JnSSF3_{}inJp(W9m2ATF^*Mq6z6ousaGA;k}F)Bj4
zP8~Ct6%-WM{JbvDVa7TG8tV`mJA@Ron!=0>3e+X27)3+`1SY?K&+~E@w*L7k3G0f6
z^pxZAaQ#O{jyQyF`uI7RypDhU3UZq<@csp(x;>)vk2rLJbdePmwr>!6p`Zk8SRSTr
zu+Ae7cxZ>|Dz-tI#uL=ia!Urg+Xw0I<1IK%18$XG@V}V{hHp>3*EKYZGDlKWRFsnH
zBH_IZc<~hGTQDgD?<P|V3(Zz9_lFOA0DfgNXu-G7#s&1X)Bop%4zIC_mHT-XI9V-p
z_)$IZIA0(8X@)m3KK|qGwT$g1hj#TLs10H91yW6Y@T}ikW}?oJiAV=)z0tO-cIe>I
zA5B&o(}8C7TJNz5ZWxu=wYAT3$o_3999XAlk-;376dymDPXzCia=L)MHK=yS3WtG}
z``Yzsl}Qiqxh12FCjv1xV3xvT(p^+psiHd*3&nT052L$+-E>VcC_-LGZ%kH60WAWw
zm>JefA^{-1rMrcP7Y8k=j;=0Ui_ev}goFgt)|uc=0cy)64*lEc#5aWPmwPb)wJv{>
zN4P}INY62h64RH%0Ufg~jqMw12jPEq^o`V~!I6;``%;gGji4}xidoKO=lm26D!;5!
zO{EOjbAZGMMxp!8Z22J(5g3@5t6kCsAk^#Q&={{_LU_mrI}UPZ{;zEq*qk1a4JbYR
zv9lAEe0D~XNgdSx3<|20w6sdLcBaP2@NhVVKAWh*`GRS?v*Y104f_$StQ1d|;OmuN
z|Ia!5JCu&rGAO!2BI+p%j#h8S&zhPVB^M%k6IK3x|Bt5lV|lmTVc)g*xXr`=X!SnB
z)YyN^-xVP^GZ!(I5(Y*_pgQLM_kJML-ic-(#*Y2<FQ>=1{}ei@zdavq(*97=t6ftu
zUu`@3urNzOB!-7?-wlO3Ya2_!P~rNu_phnw*NqOsj(7Ep0gQlth*Lj8><mcy<NCI+
zBR#Y#_Y`&-q!{PF)FU%aK0Kiq)`p|R54#qP2y)*XIklcSYIX^k-cdClqy<e{G<9$~
z%5{|(Y)!+JzSYLbS3Q5O5*%(Ueb2s?imrO-G->eDeS2NCgakhGNmnA}f3bi7^pqSz
zwI?Qm{>cKXM7^SCRTJ}C4Q3r|{S(1f-zwFo`&7;2(SEU%HdIk}3JdYPdIV38A>!YH
zR1lG9sU0!Eor5iM7Mb?`jRN|Tj%vce;-cMl17*a~uhLK51o2Jk=c_CY{l(45QXcm(
zDV2s>I*xQjHxgMr!xuK#n4Qd*DfN>=APHRWo|pi<>nU)Meh@=*0ip~rmF@zEO)lEu
zxC8HfDDEA2tzL7qm2&+-hj!d`cl+l~OfFE<`QN1%-7b(gik3G^@EcsFqyMxsAopCQ
zJX_>R39~M#Z<-M3Tmmu3p464<=SV(8$B2Mdz+rWe#NPJjkUqed;QKVhBWGu~3)>$w
zSDn@EfGPHdlL*^PJ6ZSj_R>nM+}m)cbGZ9gExB^Lo~~}z2q{LlVJo5Grfp^VtxxRK
z@63IEXr3dFs+bSHRH<V&9`(Pw2mTSM{4anX&@(nR*4xVn4y0ge3D(wKu*GS86YxAr
z_mk?eUuLXi8>uo45`A?B4prgu=t}fjg~|_PRy6+J{r-q{yL&rqbiuQo!t>pN5BW6$
zVsabN%!sEfVg)VcP6xIN22SoI|D=uQjlo}A0e?C8qfw-?*c0{>NU(?d9>VVX^qZuj
zUeYQm*ncXjYHIXqp9kdS(b4@QFx{85qu*v7S>U53+Uwx7&&z+NOm#OEAKqX!n95%&
zVQ&~asa<8r441Lz(*^~(q`v+KKrQ!z4nbo1R_U~FZcbE0<Q&{yOqAk*HFL1F$uc>e
zm?`9(s+9~yJXi!&*1Li(kmX6I3kbYvY5j-Nz{>g<c#LFB%ITGLbwCL4KXixfG_-wv
z%yPH>+75IEtVs^)x3?+XbaQ-P>FLb^p{ep>SWImwUC`8ABOT>2!5N(y*l<5vjX3#3
zEdk<Y8Y;W@Ek}ts(i}^&c1toeQi)_Z@7cYvF*SO{ZV#k5NvcwcxV^pt-Z?866FZ%x
z@D|Q}IIx~=s3NYm9G(NeL@5UEliiyRFFSk#M7-KxzX9{t(BNR}xt5gb>izv6thX`A
z{q3NX+M5I;bY~~0{ILqHs$7t7gem3<dV_&U3$(Nja&pXb;J`#-YXj4>jKF{ZV_|A)
z6<OJO(0ZEqj;<HR-(TAC`zy8f5`VWAfkhXrCv9i86qrN!DI$1^Pz*VUWtj@`hmtSX
zT|I2L4l;~-PoG{()MaIL(Sg8z(CljaK*Rv<E~f3{EJBNnkdP2?v{ZuCMJ3wOW;64R
z?0&gKXUDeG3AlIT_zHlsO~7&02`ZEPF;|BYblrWp2$z?aZk}7y{O3VbZa;@?7;*eh
zb~a~K&aSBp%?;_jfo~*4=>;5Cg1;WfoF`m2b?J)M)|*fr8Mb*x7&^+VSi8jqCkoI>
zgJCe}4sfussqrW&C@!QVz0Q5aa-Wc^r#OBi8^kuLE07IRH9wErbzpqNjF|r5{PD05
z9$4c8$4^B?W$jxT89)rb+kHS-&TT3KwXP5s*DiRETs!{^KQuF=_tsE-jA38`6umuX
zm;?eXYX?M-B%)r#xS$zi#6w!du>OSH8NSLc>~?wHa~EaOsN3fz>{9(93$ks_8+G6e
z3;uZ3^{xQdfHBbvWjFK;xm(Y1aYkXzodekgnwmWja6wJ6y}BA`*W%?h`okDn&kx>P
zkwhNB#4(~pJeTrCHE~M|DmSkTTjX@-h{0b70~nS{ORIbJaN<_ivg?;7*S>em0|&b<
z8nboQ=jF#>2X*UFa0Jknl9-<$%$(3jip6JSWE^IX4E}f&X$`b9sDA*l2RmF8PU{7B
z1d=^V=q0fQBSGvXD5&wkb(_3yYikS2Gg3-Q(2DMX*$KTfS@3M+U;5~ZoVSgI#_RQG
z`Gke9F<H~aPW53&uX?%PT=O+KgMsyBy6*S<D}SgFz>1}kZ5ME6PtQ9oqkMOQ*=Umn
zw8Wnly&lb0{-|DWA~Q(esPnCHbmy4^kE?+*!IWCsFYcw`<%NaUSJB2i4;q2W!F``I
zd368}9!d~@p&%pcRhgW21s%7&Iv}joPUW+nypcHvKwJ*WHL9giqSfqD7KBB$zn2SL
ztBIiB!a_7uYv8t4^C<0`N`<j8jhiu|El#k0aP&}qwmKAD$s(`u!fe^Gj#^`2xsmr>
zUfcnh=yPM^y_Ju78x!B5b8tCWbp{6$PR<HwkE%sbw#`ygryXGkeiTh31#~^?3!OS^
z!B4d{W$n|#T!K9B7-r_eFy5u<q#I~V?PGr2(HRNED7{NoRMZ~$)#9g2<#@)_x6I8!
zJIzmlIP2gR^63sHxtR}|I*D4Lw|ou);c3B*oROnL^X5NXTZVpj*wH5==SuChrx0;+
z44uCf)l_0QPZX$z>hpdatxvU^dvetlJDXc)t>njt$!5xt9wwKufjdey|Lt3yda)|F
zWo^uT2r5DW<K)0JH)-jHK|ddP_oGdcczGZdg1k$&+Dty5?mJa}X=(UXOiav2$`@v4
z{^cvsT+KJTwt@W#=$kP}zea_If?Wlc;{J^sCuk$S_>68+h`1q(u5QiT2jf{A%ct9c
zNY_iM3JqseiC#dULAQPz9s^>sw8<%r2JZ*&(4yelHhEv%hJD1s9UaUDVwM{`ezRQW
zJ*_b6@D<4if^W0S7RakI8yg#mF&+eiTY9Pb$6|0(hP(W|%CxWn?KlLN!FsO=q9KTb
zw`KeX)9S^AI^i6Je%ac>0_;7VD7SzF2nj9S9ET<#&R78t&rx@9JV_UJ^}aa60BcfU
z_*H{@^LixTIbRgHV3SGDfQ(Ep7hh!rcH*s(wQjWfML50z7`({x0sFWwKRyQIzb1RV
z`kla4^L<0<(`W*nr$!XyQ-for9~HjYpf&&Kv8ctKu9Z%8+GJ+lfpR<FWG4@&&ivCi
zObQ`wE&Ni|g6WlyS8g7R9JP@fR0N^6Gn4VsJ@~rTMQPYZuoZ+6yni`Sj`*wEDHWXJ
zL2AIM*HBboPNSX$VB`Bzi3IM9*(>Vvis+N&&jZ@kCrFDLixXyXUK1C`)pr7Asx013
z?kjfIrBITohox-14<9W;f6p0TB}I;g_EXhJI&`7BuP2IC>>@~R^|j!W2D@v7A;$oy
zZDZf+4x>R8=wp0VAZRr<G!%)V7MrPG`}{Xl63_t9TnNyTi)m<#Llw~>4;`k#XcufK
zU0q#^sGaO)oo0mq!Hm<?qvA7z)ptPtUJi{tsH{f-(=J#y7zhAXI1I|IC(0=RfnBCK
zCknKs!*0f=`COHE@(e83FCxe$pf$Xi^1Vdkg=p6Ew{OC)_J62R>SaDj!9j}Ys;sH$
zzB>5HnJ)V3Eg0gVqIPC9LGsS1{Vv+t=4^jo-yP4|nwm((6R?)DEm%xESRZ3z6nTZu
zP6=E~KuMw_xy%RnMDHbR2&G^9Ex<(QIc~XubJq(9?*XxuB`(R-+eghnBxPk`>1_96
z>=+;a{k1qQ*70Eu`yZe$!`$IKU*T=n)Y|H*%hjd++@EBWk?rmWZbRh8%d?H$?lna0
z1EYfz4Yh{NE*V7eN&<1S0@^R%wz8u|8okrkwjq<i%k(+*e5&jDt(5#zVUO|yb5zwb
zF#?8rrI_z5KAS8}p1u3X^x_3e>BXzl+L7{}-t+gHC#Hm#8%v!bItfI9Gat@+BSr96
za_xdi(k4P533p_A<IHK+TbPnn(s)iK-H=e~?R|eNb}OcFzdHIOOs6afa(c)Kx|GE%
zXKYcK5HxRTMX?OFQlo{M1yNR-MroCMY8C^J7HFRhp2r+!lqIUw_LrxY15j{O=H%ra
zNO$H)1?lT^<|XFngnUtv|6;Oy?U*j35fB8SOWxgJbUFy*7ZtoGYRTQf;$wJZFj;wM
z^JBF)kv$C}VETE`G<u!(kAf;Sh1I8GWIJ{HBsV`}<v2ijJ~4+((=gPP>py^SzdGZA
zu1iQnQD3H)$-z){#w&l)6^ed~dVG`eP5Q5I_ksd!-1dvi8I&fOeCp;R9-Jo+7Qd33
z+;X+{<=trIPZ4xp5br#%P?y#c0m^vYb_uqn6~(tFqlXW;<0-uRUFHaLC8%ggy-D;Q
zOa{JSqfIqujlKyp4+}v8^>Q%VhXNSdyId1mq<a0?7@Ci&Vk6z%E8s(=n8?=i3VRwI
z7steUb<k(yYjMV^d>B!^L4#cfILeP~g?a9^T@8V$S0CVoUe^;6i@{{za`Zx1o0gKI
zS*rD9br+&hApC%g3>xJ=pV|29P3qZzY#gI!FPKb!P8TG@2muB<a415|d0~kY^FQ}5
zx*g}MAN<-1KBOE2MZA3Na}DEMh0*k&EP>0LKqL`(Ig3Ob2-m)I7=MWx+i)JrU)WTC
zt*q3%{7$N-rgk`nK_N6d{<|bI6QXrY!Eh+zEzZ|J39LzB1gxPp^bX6tpH&O2p$u+s
z6JRPV0q(6B6g?2Z1J66SB0u+fFF$77hye~Ww0+#hok-`ic|RsvU)^y-SVNFrer#bU
zxADz}dKbti`$uIk()tN-7WYRRg1Q@@kRcahrp*Vu@TeG-h@+@Rpn?|1z$E3{1>&fj
z%h#fqVBTk{OCAkiDeh0&J$%>~wFAb#5X_=tIKKdk51@k{17@ir34z<31|o12{Aza1
z41V_V<<XJNY7(MU*zWo1dn?XR43$Re?|63uv#Y}D?tc2g$J_%-6w!{si{{D;;n~E9
z(!SQ))n)gQ(5h0$cl7f%-Y2?jmfR6O3;tcq$lRN+=kXbxZ|cyZ6VYFZr(z*)c+haa
zU#5rF+5(M`;M2VZ6x*LQCO_ExF$f-76n&2Od0<oYmaXN7V%ElUWZ9fIo(rM}hd7j0
zdZU>HgMIf5iMnaxjj2Mgxkin{W>9_xw0<~H?zepJz&3$HNGNJMr&sd??s3BAt-yPz
zPyMj1i<~GaE51BGJUV(gZ-8xUB?^dbP#?5SVdXFA14^dzWFHrGz?#Y7p|yjc5<u)A
zDrxzFFfh2fuHeDU<`MNgLfWF?O9r<jZNlt<WaSady#+c}Llt5xjBIqnR|Ez}s+fyi
zk2`CMQcF6sM>=W)$_ej>Xbx5|AW4d6x^uKV_#?T7WQ>cqGrzj&S(#1wh0gCxmA=vP
zHNW~~BH5t0BC#loUo~yocZDLS!ptf(&HyU^l+OX=P41PpZzPd|mA>*Y$n&WWe>k4(
zxYKzuzPFwc%@are;f4b~*V=;G-j{GV)J|>-u?1p1p785{?V;m4$@p$p5CM0=)W2AO
zD-fyL`(rizAin_<3+sm;^6S=C(YdofS1Yzpd|r9Awt1Z{&D`Hv><W6|b#lYA=ZPfP
zTDo1FF_c_^RcdTzJroSV;Y8{fSP%vzFb5_L2I0Igk@YXtZ%%Eq8Ogp`9h8*~qtCY~
z^=$iq3R#tbUrzxg1`am+Z+F=oeeg+!)!zW#f0D^SWVd?p0^BR1Qlca)RHg_@n+Efq
zB0V3UD`=k&e~sh4vf10S2Pmr-1g<cA{5jmLlqG6&v?<uy+Iphj<HP44jqK6><q$0J
zqdvU4<<$P+73;Y_#DkO>e5iw?6UG>mwJ(mL$c%jy^y415xdoHoc}WATaXnb<0}1bp
z&uo&w8uJa<v(`erCU249ejsBd3O@0pgM;BHj#9_qDu&+D3a7VXg<BdUv|xlEWI2Rm
zsHZDhcJRb(0424`+&}$%vis#0+A0|->N|-fW@BEfk=O1AtII8b;e*YuC2kh><!uj{
z--n0bDe$pc$r)u7e1g#*&O8-DiqJ3DA4{Pot!+W+EJK;2?Ql^oq!q5@*!3B{n?P`G
zbQJY9$>jv+;ADvB=2snKsSX3gUD`7ZqOTN5He2M$eOO1s+#T*xtd2fc-BNt&+GEwe
zyf+FlMb7%`ek(AV*Wf4V;}149F-#4sNKkDzvGXZOU@;vHB|Q>i$@e--*|k%5WxBVj
zLaMEyYUFoJpGy4d9WRCRHy@^hm_h0VqTXDFu4o#yFGduea=2TKT-wTo3Y#lxiOu5g
za>38Tsy2JxY_f7Ow+XM&NuHPvrU5Tr&TH%FfTef~1Z)(^TDk8wF(Nj7c%os?;JU*x
zc&j2em&bN49VWqUsBSqXCGXG@z5wjd6tO$TZPstpqLr8fPuO;w<!=Sl%X=Kp&gY$F
z?T{CP@}i^^9~C7mxjlLKux^3PbNj+4C~tXn)A3t=`0iB<SFDuV8d2t)h`cM+*X1`i
zB_j;nl#g20eD=`Hg<n=(j!&7p9-YnX=>K5573MHtpR;kN-9LRgK7orsIfBZ6ZrtCI
zL2iXL_xE?2L*_TZ#5r^p5${ws-Xrd9SO_M-L_}Cv7&IT6LfHH-01RiN%O<T3_Y<}S
zdl<El*JONgtm|1#jI3TK)atJxJ>xB9gsk`qkGVo2{+;S?qoXE6>F!X{y|1i<m_2!L
z(Hy}zf@T1E?c(C%L=Jt@4Ewdlat%c{0m_FurCL?c`|NhX=ma~ry!__+r*T^?t)&${
zxfQSr=in%O(hstbHoL_o$ia|_q72Z7tGR+v2(F}X#Nuyd<*%;@T~A+?rJp{%o(REc
z;^E^Ja76_qJTy=rjC-&nU$*=?4j{0Fu_T<nG?YtgYskio7b8X<%o@My!@A?(B})Zx
zZ<8&N)~@aOa(4J*Hga%rxl<pL&wdYJyzOoCg|NGVOK5!m=WtY{5T7qtcYf^2Cx3&I
z(nBE7{g%n+4-;9o(kK#O!h_|?6LQtJd2}4C>_snV(~FGn*6n0czY8U)lET94GnO>`
za6X`b@&ILUK#o|{<M`>pVObQ{65m~c-F~``+9FjY;`6DuzFhPKWinQsON_p?{c4dB
zM3mVjwx32<KFsgX*f1z1C)wtbBB>Ob2#EF<orTygzFT{S+%;+9uvn75W@c|Mc&FZL
zee_2H%f<W&hk+#p`DPEc!JQoXDzu0%`Na?1sN-?G$p;c^@emuiq&WGJXh`Kjn=I&g
zRGOe+ud6!)=QX&H7OCW*i|Qs~7V$7DE}8lVAXQL`f9>h5I&oVh{ic3F@rI6lCU!U<
zftA(%JJW?~Nhe!J;N9MNpD4j33%m^N9g4Oft-N~-^vDl{(`RDszcV~S+E68xHjT9m
zJbiPE;a7IFu?vc1&HJB&#)5=SOQ4BSeDr7wwo(|_`O&mlPdR8E0@)XGKXh8$K2BDV
z#05yRWPgJZ4G0~C^V)7iFu>Hs{Yx$b>^-l}Prg7EWPF&Cnz{#81}H$z;JWv+4UCs3
zUDXPeVT!U280ME#QIqaUC?*nEE$<`*XR@7mn^emov6DP;n3+cXOx9`x6h&k(wRz^&
zVE0LhA!8Qd8hL57diG3E@#J`ZJ%W_q9iR({`Jh2|$4VRwt^f6_Q@6^I73M(v!JS=Q
z^y@`TWNPVSByFy_)ZO>+GA*%nFk;=yZNWCzwJY!uIMRqQ0ZK!A-_~GaV)$ehSst5;
zbzsR<k$l}^Ez9~f0x_mz{_P_NVH4%vz%xcforo>^R7s~R@reOnYIRk7gHa)t)d?l>
zlGwENt1SiXmlB=&_CyAKl<#ZxwI1j$%1biWFc+gVRh7L>7trD$$S<rOQ^BF6Pznvq
zUnk#J%+5?e&s7`B@WsYJOLl|jNT=HDBg{1NUH4K8a`rqkun%+E5B;c>p3(ju8Ik@y
z$eMjv_x5cxCOSsZ0OaR1HKhL-J_8}3H-xaz$)H>Azh*K0mF>Fhmo@U!q_k`90-y3O
z{?Ko!5$9hlo!Fl_Rq@b!3V-XBj#f}TtKtyfKMg7*rn=w>8%D!JsAsv-9m&17C|%X|
zOS#63ZoNgVW%QOTPdT!o404971P)soHv3ZgDSA%K6K|)MUu$dNslDJbNbihifc?^C
zt(u$n(<Um7duC@q*aG-d3~z3Fi`{-5Mk6AkKFueC#O+WGa^TNdZP}360fy5Mu|mX=
z4k(%?pBSXS1{<nVW$o}>e1XgGTD{rxcrIT)4s4p8m%8_0xSJ(le+>}=?n5Hvqy=7`
z(wsyOtbncsSVqf}L$GL@u6<E(9%42oe`aKf$)xWKu@_M|(&f40H>DDV-{ihiEzkj&
zu|$KlCkO-LYyllWk~o3r3&!L(ozzTXVqz@>Ost-#`vnbXW%B0c=JZSJr-@>UpZ)EL
zeA|)+@<(?MM`&1hpDsc|;y_Y;*JB&lgmVxtE-ro!rm(-gi#RkRg&^7kdm}K(&Oj8E
zpYnV0`O+iF$OENaUCgE;$3N0M>HD$8Xu~3Z9>gdmDU_-{S=7!u77GYrR$w|xM1B5w
z^{Ha7S~Z`LPPtcPC_+<boVWbctd!NlkZ8uqQCc^iYJ$~!*VZ<*+mqf0Qas1uD>+XE
z;zWM<-kp%sN{vuJvr*e75h5U%&aLFZewo|%&ESzWcNZmk7%pjZV?3aSxg6pOVCbbS
zL_Q~)io<Deo_TdgBjI>+_g6Z;`Z%C(9mfEUA}ijki9R`yTpQ1XDkz255>ATSS=b5j
z<`^a6>o+Nl#!WhT-$Z$TzVr=U(DE<7dy(}ZS;*@Q>uYtrm_KU6G(Wc<Icg^EW6}4H
zoc<j%9c`HpT(20BKjFUJ3@~$Jp`u=ZFqff#G%!pJi=^bx&cTWa*xgK5XJm>ZdU*T}
z{Ib!|4yJLjdAu69p2j6j2+!g{@s>VN1=~@OZVytLy({F7_UuBz29Xv<z2WQNPp5dX
z+2Gd(m6W_ZiE~Op&)IJ>IHdks+op&&zCL>GC-u<j-UA<w;f^!N5Dl~tc3O+Bp<a=5
zMWI2+E#NW0|Gs27)BwalOQ2o|2~ESnDTUV8(LqUS08|D-jzJ+WZ6F`cz~-o>Wd)L0
zm~;d7)&octb|n7UF;#X!0S1G1oA(D8LqOPQux}+)t}xl=wKx}scLa<Fpf+1b+`0RM
z{+SS4eGG?0vggb<q?iry`}AiN_IRm0=D%8Bd7dy|r)Tbd{OoooAtEB;jYR9~8$R7r
z4fcp0tfw{pO37CW$vKqIN4|X{tZN6dhP@&vI;0d2VOJ~8N~H=D9y!{Yu{Si11uC4!
z?_S&TqzT=k4)DrtZfIDLCHxitm|VzyDZk$K0o0?uWY+;QV2^A2@+Ba_PrOjw@WCSZ
z;P4P|6|<Cp`wzY-t*GJb|B)u7(v4+gs(;9%;HN6tW&eXfg5MrGur5FUCwU;gFT8~M
zF!NjU`dtw|E%BfLIi1k8KR&xL&W<Kxz5!3Oo`($YeB3=pdto|^(CIITMKjo>L709=
zG;OW8uv5|!r2Ax<odTl{iPl3TH0N<y(Q!wZogpK*WhoAEtDUUhszv@3qRcqTy7i-S
ze160!fo<T$AR;5skwW3tUZXx0|8_IXXZkVIs+P)QaBP24toj3zUkke4soMjuVG?Kv
zx3MULS;0(~@;B*XQC-W~#yUee+xGIZ>2nr2chNO`F|?DM*KB5;3pN!{&vX)`^U7LP
zJAw1()cc<Ri7g%M<akJ8gOoaV$xH_uMx@xs^JtMDQbcDQ?{lwwVd|*5lQveRIxQ=f
z6RPnZxA(cppF>__)uM@c|FajSv?7=Fr)N9yapn=M@18S+vt4kkx4x0~?<JdvE^DIw
z+K1yD;GLTkyO(Pad&>E1rn)c7KgpFk?OS+R6I<}doZ5hO-<k5^xe%GXaZgXnUsday
zg;rm3;e*LH;R2=Um5^F8m$8Z8?ca?Z$uuxJq3N}&I6k`Uz7ztP1ee?H^`a=?`?3a&
zQWCpv%-dF2E?C}Yo0|j6Nn@Rz2)3s!!m?46lw3v&kb0f6A}AI7tD!;Qd{RhAQ+neT
zcl}EOq16$e2pP<25hWfXsWKh@FAw_EK=UW)u%dExi3m6&7zEdt^f=7PC?w{uSI*wX
zAYlNwJ(=4SjBb!3EMKr5=7Odsn<m)qe9(D=agZjbs0hHRA<Z%!sa5?CzXCOv;ZyCI
zPQWLC{ImmU0Nrm&1dFnhrNxdoz<D#7cGh%c^+-AGo-?q4Pf`MFq~<3h$Rt1ADo3EA
zYqFlg&3A_sglh9G7ELE<vcoTVvi*bLw4P!XYjw!jS#*svO9t%2u)v=bO!92U-eP=W
zvtka$8w=a&DHW?bJcd+KW{w((E^kg%>OuM7+lGj`b$g^U?uyuND9HT<MJhfJ1R83-
zR}Q~-;a{2fz>L_d;n76OO9!by<44)<s0>rZxuA=)C3hCLQt>s73ec9)O(I$?*hRrf
z&9P)~?4+5l!Lyd6yH^!6Lj2u1?Xy*;*Q&7s^=h_`FBVD^!jvwH_Brn7`C=yjkbT!9
z!cHn5i!jbgJq%KY>y)(=wJKmz0ILV7NMOxTqU`kYqB$_Iw_HDjHLNqNNWB>Mm)m;_
z_R_L4C~m^aH$KKO<#ZL8f6}yC%J!fQfXHYV^KJY>eUSnlFiWy|HZv}j{3FT^&II&U
zKvSx&wx-tTMSt^&U(~=&28T%O=M+(nYJ1jWmmXvigwCn$X35%;XI(lK1eputnncg%
zcbk0WxA!-X^XiK8UuS09x2+;$M3|UjR^NRz8S5hXNS0_g{(__CUo4=MHzZTU!zG*d
z$>WNK_u7S1YlxCNgC#?q-T5QYYEhPds__I<L|=I<e<LJf8hiYf`heb!McimGtIY^1
zobc#e$T|Y%$o99gphH!ES{1*^fUMH56X`bqhnSt!`=S&Y9v+{G)A!}e-j}=}s16{r
zr-evKULJ*F4Y()hpzNmdEY_(VNV~s1GAEGe>Ij!o016Z(P#FfTeNFV<ytUV}<#*?}
zFkZP_ibhBX>!}m1?eg-n<;$0y)#8$p2xi3Ifxf<y?~~)vA)q;ml>Zmh1760ihsqko
zs^&eR=A*m`9i_UhUJUe9&$;<%(%S>jeuiNY(%Qx`T_N@aQ%RqzL*|(Ied(1UeSmzl
z8|-d+Kfu5UkS*ZU6X4{%bo>}w00XDjHBzW&XSeBOF=g>I^%~b8EkW)G2m}%mZ;&DN
z<*?dZ@eBPAPksFg$<O<O7Q1-XmX`GvpIN$%wGls$q>Dv|8=||s=k;Q$WTAGN^gNHb
zv?pLNHnWg3<7uuLNAlxlxfg*SPXEos%pvN$fG-@wgkPx4Oz?K9<n7qV$9_y9yJnA3
zhmQZ07Zyg8-<jP}(=lOnt}docOVNfSZ4d&6(^Ep^DLsm{s(1{;etZ{xjEA@Aw79qk
z)m@v@I_`Aj3H6!{iLi?`j8}W|AeX+;r~~2T4NyxVXYYM2!RpqVr#`z2G)^7VS5}9I
z+uzYBg!J~o$@$`77{4J>E=As3ywY_b-Y0fwx8~^iQtyHe+k=(%f#gHFmC%7?O6rg5
z@mG(deoPQ%$_);*KYR4C%U}Klo;S(JI-O{CSiRe=z(Ur~Oll^)`hNuMkR2`9hxoku
zt-!QtaXfEq1$>{pRxC$p^56^<^*EdaB?5%46vH&D!QOP_4Vq%xt3Q$FI9P|b04cJV
z6Um`lhl&EwISE;=?cV_0W$|wqmiu-CakZo&B+nDMj((`K5C1hhcbxi7v!Az~tEkw)
zhzEFttaA-Fx7S6q5fLw-orAW;w<3s**9?CPL%<kY1ctoPnPVJ|;6nqQ9#R%XAru}I
zS!&QCSq4G!(|u(A2A3_;NvCkRl+vf<IJo}Oa|}#qlH3<C%*`nY!$M`eH99mrJlxqy
zTYyYMlLMs-n;-R~!(1Beo|U(Yem}w3?G7H^vRP2aLO4tcS@jxJQa6q+ADJ~_D44~N
zvm*1}{3R^(N;P#7WvdV@byM!9jx782Qt8;ri+Or@i}SD`J5oE~`%AA<OC;lSAio$d
znS!Vq$OC|~VPlYFk;a-tqCbF~KGDw)QOH##39Lw(U;Vj<+y>)e4>xe-5g?q#x=;W{
zzwOr|l<l^)-fNEOl9be3qa#_pPG%%jIY~)G==aHqNlA5Jzyx`AFRZLi{`{FJR)d_7
z`wfLs;^56oe!LBNmnZE{Guecq1`^rBbld9d?~gV*{J=F)K$GOGa0QKAFV;}GzHmWS
z=pZdrQLp_%4OzJJVeoiO8XF^{Pu9Cd!>;rgTaZZIR?DZDZ#CJ>p;P@Ub-zC;5}fTP
zPc)T`RbBi+F2Pq2L~GXzjEsYLQV3*tt&kK;Y8Gp$6RSKKCPNmfP<J;vlM36Hx;hGm
z3=j=Mz^?NZ(y@T~W`30W69Q=MSy)&g{Mhft!J(HfOyl5b@8W~#)~2v9YHAGheF^#f
zC%0i%85|mV9U}mH_4a%l+WOk|He}`za!V9-00OAjw!ON3dfWL5j<P$L$e-Rm&bs9M
zY6Ky<K-GYNBhU3whPB<T2~K;-=k#d&4PK|!!mckrxG&E^tF!hI_=dLOto|k-j@YG=
zDIkZ`uy6`zS0Cr&?F^U-ECyh-Fz}!Jyk-X=(cJ&~UdWG5;`~WB1BS!038fOtjDmbB
zuR6&Uy82KtSb0I(K%HAvr4X7|=g0`xdTSbNRPEa@CM#)51sT^BDfq0Y?`_XLvS_8&
za>RDFlQ1<gxt_wIJ&;h+N;rH&d}oNprvbbph$QjJz@r8a4?pXYm@B)jygW0gFAXwq
zGD|Zvz1zHBrQ{PmJ3p!7afdi~SrEA9-1`H`EY_1Mi5T&B)tXZL)mQNustHI{fX)W|
z9M;-<Cc|wYvtnN>L3<x{qm9cV_mcyKcN?W{LJE4wU)oE0Pt|ju2SY<c*Q^!$rEZAm
z$?qEy@!?Qv*Qi<BaXvaZg3BGtNL#Kn)?kmfz6;Pq*vzQn5y4$rYfrZZDXD#e@i6?m
z1FnmISXA?2+VMDs5x>~%sqvoT$`?E2`5u4ESgA(QucHI!rRvg{L6D~cp#|+bZ^z3<
zb<9$!9dLWwq!;>T8|NyMZA|a-D<<qc?);R(XMCNFD+eZ;zkl(2Wilx*c6K)L0Ba<(
zXAKrGTR_1i8UgOPIM6tO;4Rk%*fve?-q8_ZeVaEylhgt&%iX(sBqo<v((}pEcNmj`
zY|q8lEoB0+s6a4M4N=1P>tBSQko|LqsYd9Z?_d{7Z_&~otDH>mbXByW#3`+EL@!Rv
z<JO~HU3q-GzT3=;nm?B1Fy4lwq)b8R9FTW0sYGdSgTiSEg5#2amD550zIN{x7OSR{
zQS5L3Juybc)M0+q08N0kC$)?REMB}|ZSnO*01GX0N=h0=Hz+PZglvRZPW?C(OUBs=
zA9wb>C03LRtX^Pd@}i7{f@lWY9}f3bPj^0V<U97O!&yP+bV1N@p&=t1bsPSpt~-6L
z8S^Hw^W=78nf9X<<4{tRcOI{Itz7<4eA1`x@`}Or^3RpIst;pX&brB<C;s#elCcLd
zpOq2p5e-et_?$1l12pyehB4|0%<mVjfN%gposl{lVMcBC-k~85KE4{oq?dZ%Kc}B^
zA{pn&M8HJ!2&84O@xug**q+9jQ6!*9t^VZ)z|tYp>H;212q4;;t~Kvm4qN{H8w1?@
zr;F8yHsP=Cv{nl`S{&r94rTb&e{cHTUJhJ-PTjiMcIx>C`{i!4Q?3d4d5sDK3P$=|
z?xl+Vu(wpAZy4ql;zelCIbbOF;NH)CW&F6Uau%WbZ1d^Mo+xU`ggva0DejvLgJG#S
z&vNqfYdn4{q%<}|-y>?)zp%Ep1`)~)&7OQOzHOfD<xNkA@VX5rb7P$C!s9ekkG3oc
zZA0DjaRqP%1{jH5t5QWu%Jk2X4fq4%sKLx!16cL2&VDcTpiM>r=CbmFXl8mEA`u$E
zE*Gc^Fi5Yj<bqMSa}eg%=@a1aNcRqY{#>~M-7|!u$gJdlLZ|%+*KBlbOx7FPuMSAR
z)Cr32Z(ccfMh?-F^+j@8qV&qHS<6)=uYLGFtL+&@=T#_>8p8~+s1j<8lpn^W)bReq
zCgODS%Oz#A8G5e8gcreLdX$sj-a8)UN2;!=nHWZW{^uLbAT#jB`0w58?R(tBN=+>e
zJZq18q+ng_WdPJ4vp8Vdi3{%D+As&-x4yY}%)^5Nzy7aZ^HWS6FdX!PqAf@mkRkZ!
zoQNbMA2ZS(!+IH0RK0bv0CefsdfpW+>LS|Ql%$GEjGO@0y8OGWX8q{3$)UKPXu7*m
z97DYi@iNKKuf`Mf2btaZ`-^xi5PuB}mfU!!$=3SeRq2~V-`H55DZl;B!9lhHefa`?
zm?CQpSb;Dy>8*b}rjk4}uKUfui5&a>_oGJiEsNr~vSswzo^#I@8%ZB6><kB&j#YlO
z&BAurSd?8%=#u|PhMzOQY}jzFhOeS}atl;b$8l;%#vrRnP1UJxUV@I+#6)#Ejg6bT
z>Lg+bk5ArjM%>BCDKM56!bF%`GW@B?=iE$Usi<VI1<8V0(GXo`!frjRB#+Dt+?_T0
za{jC@e}GxG;hgTS9JUV?SQcJh-n_aLj<W>~Bph<rG%JW#Qc5O#mY9__5&(uHCNE#k
zRT@j}X=^aoL;VMAMHXgeuz(%>SgZ>5PB-7h`8l{^uCA{WkdQpH*2@NR2Q0iqK_Ym(
zbl@e8Vt=SXe>(hAk43A}D2XE@BHX{Y4=`NtLO%h;-P&3*7=b~Kwth)GJFuhs?*X36
zFCH?BKu>6}<27|h?1(P;mh5VFEpt46!1&Jy=KummvsL^@cqQTczE0GTEZjduQ>xli
zY(2$u^X3~!`q6E6`3`5Un;Z0t=^13;>@Wvoq_MZ3VSe{oIV>z}2AWWKPT<`wt*y~(
zT~_+5AOi%(C)^*UYOYnH>grb0HC36JqL{PQ<{LnXEGsSTc1*admTC(#xeNc3oId#+
zNgx$sVYpw9=*jLwX=}DA<hC1KSZE2qIUhg&_t{yyx%II^`wt30%q~;G3+>kze`&66
z|AVlI2kcGg9}f9qH<d&1)8uPPVTccB6TJ*BiHyX=;#6se{-1&Cf*KhPi-qm&FU4v>
z0P>h7W#~7;7Jx>?0Xa~zPoC@zWi(&QOc|A4-w*!4bqLJQOGqexg1w|yS9kSuAH*%{
z6$WLH8p!A_c?{F~=nP=H@1pO4`~1F=9VYvSmX@`0@&71jr74-3GilH<Fgkpkot;y5
zfp@<M=QqbC7?hw~oieK^7poRfih1t?*?^aK49a0CzU$a1tN`FcuU^HSoo!C>w(6H^
zaRUJS;K2v*UjljrH$6SR3<E-rn7jY}k1Y<p2BfGjbFB#Z&!AHx{>y0xTD$a|%#iQM
z_&7fe&D_NCPuRPS#w7ChKp<oYmZ(PnIm3r#8!RjJe`p4z=;G2+=!4lQhYG*_KKO$o
z5&WTe_#F(PAGDkt?Ji2uTvdLlFr0@oANZ>qKnn#oNZ81hUgo@i|GvC@4%R1tM&%_X
zqeU@}@DKm<F(~0<aB*?10jUp8M2!*w5L+pE5cyMmrH-?@CpuhMTr6*GZEa+feZrPi
zQBjEs(LE?vJ6l`q8IpQ><Z)U7=Qd++Bi?De>#gqzk)n}+jq(e`!+`=7JX~S;G6Mpt
zlhBCqcXS>a#8J?qir6p37ZeoK*7E<4GT<FEPvdBb#wR#oAe=16W~OfRo$z&WBpbC2
zvj9_E%cwg#khXmV3-F*G#xO928y!)B8`5T0QIM524}X6;2j<Qn<F3E}IXn4nXlO|<
z=ZW5E@U=APrAQ)+xh`bd7Zov!iCuw1r+-(0x{3-jJfC5NpQkE1-oY*T=gU1&tO?Wj
zOYTF(_)2?c=KyWE0@_6?9pKpoj9&~C6#o17eU3KQ(?}T=cmBl!?%M)~sJ+nhO&@Yu
zgZZaApa(;^CXC1_Txc=z)%<);0Jmwyz<35CTqq-;_JOqS@d`sukPVOjW?5nIlI!n*
z)hEdzN!3}@0$OOyyAUq=KNqO$d_7>DjQ=@!$XzF}z+s5rS@B|mWA`|F2?(PW&!11%
z*^r4YGsmG{k_*_iL*b4s$ip+x-Q57n-Aas}e1M>$h~`0?B7~F!IfbAkhBBzyxQp@O
z!&@*VmGHamaDcrCd&Csrx_WvonVB4BOr?_l%D<6ff}UK<Rs?UjxsFOHUCU8|z9)^&
znT3Rh`(vtWXe6Kn^#u>3ImY53nf{Zv&4%`mntIU#?f=rCoNMn5mN7|R%N%w8kxhE^
z;GB+O8Y|@I9#e1e<lokI_@r+a&%pIxHHqZ*e<G{?-lxV}|IK}pz;?&~fB21gqBbrr
zF0sVQ4San3|2{S(OkKWQqM|_Rhll3gy?c};(Ky{c;l9<?xg{mlZ{L>W(hAP~XGz7}
z<e^43Mu9y!C{PB<dI|dO-rhw5O3H$=vhti9g}{GwE|9?(cZe!k)KOW<T+;|=wfcxI
z4pkQ5@G`0Y`t^=VH3d%E+eU+z??Hz~=!*nOJ2>yJCFH?}(Hs)QR8)`Y9)`^Nb~A-r
z{=1;_A5Qy5&-j6u6Uz+u+G7g7q&?)4sKY};!A;e(oj~!w7QLhNTk_^3m62h2H{GOP
zB0OdLD`L5R1GzXpa>?f!c#T9&9{<sh(>jm-z=q$)X2e<XKhMsy*f#;|W5ZoRSgO<J
zwma?rORfDn{njG*UGFI{ARqx%HSJov^Uv3wA)TcJvTdc$)f=~h8rSyMt!&p4D^aL|
zrkfgwammQ8NsV-Lbl@?NXb!Guah!&tQeEe4pP;9{IA4DX;duYEO3CCVIuF<H#6E8I
zlavi7hD=^hqNFjC;H>#!u;|PZa;E)_2-uYC<+*kuAq;rIF84;<9l(kudadN0{#|Yk
z|A(pfj^}z0-^VqLmW;}ZWQz)svS;>Aq9i1{P&Nt4sEq88y+<U;DkCctvNs8pz32CG
zKHtyx_v@c?9_Ogu@7K7W_kG>hIAn9es~cmLKg<+(?VyqLnY;VHSCmwWWNfeajS9DY
z=*hr)VJU%Ki~!>OGW9DSuT0;9Y^;9YE<q@F9>865^U`UdkFS7M24Win9|xi{psJ&P
zJE`&9-(NTH4pv#0@Y<cTlxB(MG3oulb*tpD+4r~2s2HLy4sm?ikStiXRy*Ryx}fK(
zPM`ar9214k1W~!h|L-#iKG9<!La&5;?T5pa#pa!TMvvE4H&2PU)WH^aV~OUDxvm)&
zf|#de9XfM_9rn}SNK-YqR*v*RAQzdsMX@-8gpt?YS6omn1@#<Sm?Ck{XIN3A-G(cB
zZ+g;UemE{Bo0w>q+s~9Ewu2$6q9V>NXQ0Ae)MjiJtmR{;E)ZF3XWejGUrYx__7#o5
zF#Z&9e*V9UC-}rd=dnb&7->hET3da3!{(Z;@o81$Q0%IUUec8uqPQ@AQNXh2J7`Bh
z5*Y8n&l8OdsoTuJtx~Yk(6{+xIZlm0Nt%my-v<R9AD})p21<BwaIiXrG^m4*W{0*L
zLSxkB1!1AOd<P>pc5Sa<3U2=1v~3<#Sxi48I`eaLRQwjI=$L>+;$WDtd@jbBc^5&<
z8aNsB%b)tmbF<n0?-Mb<w|JCF;)2^|(&x{gA%nR_i0~F<pGBGT!#%kW@&O=1^|XJc
zx2boI(e;QzN>aLN#Cw+yN~1J!i?oc4(DT+a!^1)H4e)LBV9C0kO?^y2pomTHV;y$E
zHMZcZ&)^hO^@KoADCyy7%C&6QjSfz2Zt%bZ8v|1Q-<{TB?fj^POkEHzdthPHCvout
zBcq;@l9EeiP7VukK%iil=*6_mOu|=3X|SoQQP3BC_>;ugnDQbHMR`q4BM$b3YA8c%
zZaqiJ!kJKJ183+K!DaY;1~OB2t&Db$eH+}jOY>}hzXY-c`yrSVf0A33*3;8dRJ733
z6LN1PVw6o_5SNn!k%+3_lBD8}V>H@HoWJPRy1FiBR7hFvxumV5BL`P)1OzH6g+h5P
z5Df9}a1|jHi3%$|yoi0Xv`g5r*XK-~*B9CEUjS{HMe*1C;TOjqGK<Z<^uND42%7WL
z1BddZTqEA5r`N1t+K>o%^>3ucQe95)%9VqnFY#*p^3;};lr*4uJk>7!t@TGDtNp*8
zcW@wvWaQHQp>JMG#9PB8%F)Z#5Je+w6O992c~v<6$&i|!kr$s3({ujlh1}drm%Po%
z>=9roNJbP34^WoPE*W5685s$gN`mJbB{T=1%~*Blvu`hazo_ajcbdHTK;IM9m>)66
zDJT-s(%xofdQ!umVznf&g5ldl>%t@<ohJI!(^u>QPqn70jRO5{iny2!&m~Zye8|lE
zKKg=lFs`GcgPw62&`?K54X0*aQC{AgE05;kAA-d`mRoy=?dOyHQ&Lz$4zt}Vb25g~
zT~DtWUCliR#?zAmv@wfg>3P@8?4Fg?%Og^7n2C>Ie)MPws)fD^cgU)BVE4$+%Ztoa
z*1czleq5NJpMR=W-=aX8UX{!sbw^5yqEx)Ay)T{RIqgv=P6wX@IWU`GEB&4rA0Pjf
zKC{{UCfm7lv|OfecY}4D3~BKZ%^Q@&Jv}!K432{j`Db$SzNs4TGlp#rxGxxBd4{aA
z;J@Zo&zjDeYi4K`yKN0l9TFKRbv!g!w($2y;-3WRg+D*dXIn(uR&(&tqoZ{f|8yez
z)gOl`5RIA^ot<r0yvIwEZM9%r`DSFnO&IiASrQPpoR_BBFrl<-#0uIzE;PFYJOV;3
zdu!_%Y5%YjocEYx<oKMR?nq5a5;ASw|9;e@`HkoFFksY2(|u>y*zV7b7?)~Ek*3c!
zo(lMK<kYlZc{w-4k^=C^)IOhMpjZDfcA@9KN!k}gdY(NisqR^=Prz-c_w8fSLj$<u
zZ!_+iVQ6$W(d*8y95bBs?Db?Pt^lsUu=n+u5CIPlkG$<*l5EJfFcZ9!yu!o7!^l|q
z`7=W|#ao)SzdVz2R5eelL1etK{)9q`Kak?=HqqL=>6}lvy6^w)W(aZ_KIZ(-Vn#7v
z??~lMHI1`|fvYs1YYsoSm}sqBZYWz;R`F-j6p6#BI=?g+qd9m!?KMb!yGJQRf!v+^
z!Y05Fu*z6#-z5rufG>qI%O6Tvsb+ijF3&)hqemaJO9$!*NZf`|G%F4FLR#!6ufxfK
z>X-dQw#-P4*m#1%kN<v!#*XFEwarVjoK)JE);k?Kd-X*h^Ig7iie26;aJBI>^NT|?
z;R1YT&JvB}iZu&xObDNPlCF3<L<#N0Hub8lCz-WsXgkB4z?=fPjOqO}$rIcCPcLwA
zToDoRkntmPXa1On5QK+8ZKa9(=j;Qygu|28k(2V=QyK<CkL<1;A#<m3iK5aQ#;WvV
z`_5gZQ^${k>DNp&a{fTL0JjaAzBzlbf@o4HW$`!H`L0|ED-|EHKG4aZ^FZ&n`^tXa
zA3uy@N!@urmTJU#p+nN!ze~9ipQVhOjoZI#>tU{2+T1+|z22LA9%12Yn}tL3U!|Mz
z26JB1CB@9o#vWva_=JylZ6{Uv<Rk?Vp)hA(6&>te#IRXHSWUK{dq$|x>#+D{e^UJ7
z>XxFk_x>|M(L>r6(`GMxL;Szi*770@Ry>?A$5!v3qovM&A*6L4NsVVTwNnYtJn!3|
z)794{5En?47<8{%|5%Q#y60|{4<f%-(qHcrV0J%EN~-$8)4DlS^RX#-lATgbttJ|o
z@zx(sI#@uw{rsMVg))`Z+qAUj*0fuCe9yvQNNEzxEzWk4SZictBr$Pv&s|2@#EcBD
z=0k2j^7{@_u}H-}<zD?uAb}fU(zL}EDM*zIdqOShZOp_$`{X*SJjg;+<rEZ@ZpFAY
z_`W%mqoSAm@w%<GC|}_#-_m`z{@D;FaHgh<n+6Jusb1ONDK^d%-~~5wLws^Cp=;rv
zN1M#w7hK}ood^=Ww7k8glm2U-DJeBIDSozl1tsVmY5mNEU{&hbgAc9m3DS&_R&>o0
z|9JM`VX?!?^x4v;@Rql-uU=w;om4^acq)>KV2#DrNCc4myjtbWTetr6UQ$o$oFl&!
zpTOAD=jXl^RViiV(I_fSjI*ftM23dcfJe@<k>mDesE^M{e)-URcAb0&>{;IbT>dRC
z@*~V)bG10U)5m?ADmy0!UBxd@*jJ|enV0q@YtKKhu>pT{ZzBWjyy=9xUjHXUJxq0K
zZ$os?F0^JXQ)J6X__>$R-DB4U?Frwf2VX+}d{&Bn%zt0Cx4YQN>8O`*oz1a2t}!cM
z!tL!|m$VO^c#q(^7{xc2%s)U+xjt_!P(9gG*k9)SYL@51_Zhf6!j4$KZ2qJB&P5k#
z3mBqH!0WR)#;2<nixH?OM{XyL&d}$<F`k(G*?FCO{>zsk<otykvCf=ZM@-<-&;Vy~
zgfpU~>dDH|C{cU$A#O!@Kw0_d<T*#Y0ToXUi;}bPm&hF<6WrhGfvBPbtLy9HM_`Od
zX0{)uWo{29zCR=+ECD>#CWNu3hJ6sjWd~eBSXEA&nwu{KVo$cdzKyY-cjJ|q)g`|D
z(b(4Qz^V_-a*6o*YIrQ~Mn|m9RWbbgVAZdYee)NJIKAlf-lo1XXTl^><fnw#*t@qS
zNRJ{02KEli)xHG}sB6j;TdxxzIa2jC&%hNHuooO2So89dr&UA02P2Et*4Dn7U#(v}
zS%E!)%eIYw11?Z4jtTpHQ4ueXe90KblI^`b6(gm4#m5d~Qj?k{w4x+GD0yYJ$fc@x
z!`bO&(-}_1B=U<zd7~J8)6>%Kn3=udiz;&!MC-xITKoC)TMjMS_%oc>&+Ux*<SO#r
zx^=7COYTOZ45jsqHG2#mX)Prnpk(K&v9SK)`?I6N>__F=lKHET>7(^G{uc}Qc-c(=
zksuwNoizMe^y%Vw)Q|F+|K}OFxiT>|bwPZO8?S)CFPgh|_~(GeqiMg_66^gB7!$3C
z%h>F&C(yJ3Sib{w=eOvZ7#riW9S``CSPLT0`|H_J3gO%yS@SC^wH~<d+G=W(9oc{K
z3@X2IW2+7am`0ev;j-QYbqi>Uq<wOv2j;HPrP<*&5DQhJ`LB<YK6+#z#_lfVovR(6
zl@+YHF3~=BgpMvdBEs%S%oe;xk*x`6X~a5+h0o;OU2i(NMt~N#Ra8#CWd880b=YA?
zlE>qvH%2(AW{>}|Y1mw$U{}x6D{h4?JMb%xfltN#)w=t69EZjqzj)QUAFEo={7M<5
zbgs@CNJ&ZExx>KEc=l|6e?KAu%58r6LE5=8@xy#}NE`zL-POmNa4gY%fBzi>iTJz!
z_7zvv{;nPRA_>hb5xfsRSPx#jTm2k{6HPH!a{=UM-z-#Q7DYmZci<?m|MfK0<<B05
zfktq*ix5&(SI4lszEsQ@B6H!wcgZtF_kUbtDMfA(GQpr?sjwbYyYUj?Tko>oEoaQi
zhgk~CogmvEr176*9x16$kx>vM?7a3pp1dpPc7M9s+2SU19tbyo%#a*AmJ8E%j-cbV
z6EIF5N1o@-a<<9BcoQj6nUAGK0F6Lcuib<5Ac^<)3o{T!zD=QK6yaBn+5NjS+Yb!G
z*i^)A6HYwH5DbOIFMP0mH=2AN^YWGRXo)L>FP@c|8K}X$7xi>?;b=!ogORiMgQay-
zl-Ap85Lns3>e;HlM--VW2!`R(<^Pb+k&&2)fSa%RhuepSZdNMne`b*T?<qyKdn>Fd
z$4LM4OdyqdDW;@!<mvwNEY_f#7_)@RG4tG=_lU~KFiXe<RhjZ6tKzK%n6f~-CG5V<
z=<Ze(5pn8=As-LV2n`~UtE`RE)l-#UAXi~?V@Bc)wtgk<JJU8U47AFI**AY)&*}nd
zsGoUV>mqH=5OgWDv<=uGw{#azXJ|!hYHBi`P3(DpoWdFo=*SCgdQ(h9PtuEt#b};E
zr=F0VNc<XrkLR?zOlcqxt21-+PC!B_CrRtb5Wl$El21rUsU?c2SvoSZ;AX71sBgiH
z0LV06G9;+IGA6ln=_mKCo-d|e>m&Xubqw5Ba<N{ro3tpul@?gzMO^g`eivM~TWJ&%
z_MuCxD}qplz&$iqMYq^yL`eAM%U}QgHO>jP!Z-bi_Wk=2VPPzt3Ez`Zc!-X@QoVlt
znRR_W`84f_DBrL@6`agQD$oJ!f*PB(Vk9F6)>!H4nD16Sdo+8u`$=KpPwd2@$ltY9
z1_yXj2*U*!J=A8iAbn#3xTiz#luPFl+sWXVpU<wwF^+igF-ApED-Jlgn3PNt(Zp~P
zyD@}6#W5>L_&<2p9DPXe?5M=W==}y*apmYegjH}+b~fNxC9pYzV-w+ob<uV_3*ay8
z7*lS%yBl!L|D%2*Kc}2bjh_nT{BPpjnrXY+&qkJtM***eNLl>BgFJ6<N9+VFEPwHy
zh+`Og{_0g+aWQe@Uf`|}qk^O?E*?KGk9?Bb`ugF=tM!%c+{pv-g-k??H|Ioz#{X^I
zQc=0eDOdlFQQ<eomfRO&y@GrGmoKP4LoVZCs#ew|k3`r3M&9<jz``OU&1`s<=^@ed
z%(G{adg;gbV^;5v3@S}hr3*9H9Wa=t<B5v*7ivnfxdTTyTICMTm(MrpDxt><pt}k+
zMcU0m4kxGeljm>W{P;i(8$1+GGgH$qJO`$2p;A&;SBJHbR8)}bt`&BaF%9->Fw|jJ
zt7Mtv-ehugbaVwMVkD<)IJ);-wBydUFgXinOAf2zE~fV8Rerv@ogK>o1DT%;qD*aO
zfpRvD^JFLW->DHA?+drT<1|knv%Bh`f(1_eK_ugJXKJ^&@5IEXrq=G887RAIP?-cW
z1?D}K!{11)tgN62`T8}4^;Ii{DAwT-ye2snJ1vV@e$j&CE&2~&m}$SF&4c6z(V3pY
z4a^j)y}Kgufzpe%^nx*m=|y-%M5ez*w(WYv*2R3@@+6FC9e|rrl3;E?e!h*J-Qh;&
zS*`JfqlFe-t;_iym;4J@b({!77>FdS*m%~C)6pHVCN+D2@ZMIAG!#u%W!ha&Xn2L`
zq+G^S9Lk~0!ospE?iUR0>gu|l-2>~#39yT9-?j$E<-E220v<>IMTA`o)nw9lI?VtS
zT~$NFxOk727Nua$h25v$h|ZCu66%`+2M>OsQT%jh{lVgd8Wb`|z`><rLRL0A;2k75
zedT!yOePbaPrSSZc6M3s4Qrc|Y6r@kTcGfU(Y{fou&^+2b-grIWN{o?`O_(S`ErC0
zJW!kf>9nQp0Q6yJP2~WZe*9Q>o`GQ~hgNo$U&|Z8XqB5>Rrt?fjzSP_W~hPYXcL9O
z#@5#Re8UQ`_ZQI6+fC;4^E0EzBRvuJafD0x$dBi3kr5I2aGOYQy{p`jrPEtr0{68x
zoIn@q)hn>utMrlP$KIR8)r{iM-iLMAs!;{i;sx=!w6(ru9{IrD{uQhOQtUM0#sUgD
zhTg_)ipDT5_tn`mA)FH&)O`0ZsNd5;yyV|0EddHcMa7)C8$=QZyR0HlZLayK1$~}B
zWo6wp;hCRn?mpcaj)wlo7&{Sk&kT-M7uJpkH$@*hQ~{3HbK^iTn?dqHi||(M>~9b}
zhR+Gnh8aTZigpHHLbc%Di{UC+WY21>i(wr@cg60UM#>^=|B|a<lh^a!^!Mas;his=
zk-R%F(Ga5O$>poC?9Tt$*_n!+0mxUo9D1FIq<-JaI09lXKdc0w71#qylL^)%0Ie$E
zasaT>)|=RPV(3l_)3`yAl`sOCh3;0*VxItIigopKwN19PU9s+Ax+_NidVX$iyFp-2
zY6~}m{JJ_KqubirD_HcAB7V~hkY3RT?tx5gdbk{&UI2@Y)C&;pMF9Z>UVK6MqzVdu
z@Tlx&dT>Zt+1Z@^le6I30%JU5>T*98GE)Ev9T{4+%{irog-xicH~2k|2H|xC8hV;V
zbk{-<-uj)n{RKRiH?j3sisHK@P;|fVBeCC)<{XK2)<G4Lbt_fNg3HH6#f_*VtOdJS
zr3UhyT`S(ml?7LRyU3IK$yCJ`gVLN&;P1<BX$-=`Td$XG;v=?`t)&^hVnK(cDWV?W
zdczP$OXn?pPgtmL*aqY`3<U=8t^mw?J%4PbSn)?QhzUoI_LaLvD>@@C*;BOX{=IvC
zMQC-yt_NRO0T->x>p)Z%_<RRd_W9=O7L}vPz;9RA)I=|&;Z1V1{vKtk-PZtj(CYYY
z#?m;nG7eMok&2wD#2GUQ;s4SUC7Vp?&(>DjtB?D#ba(*}qRqT?@7siWvKJaanvolq
zUmQ4eqPmyIxPc)~=ob{PqiwingmE}9ns+vNrS%kvYhFIMUxNq!?L+rJ9seNb;bm;u
zmH1|8WjZ-JqE*|8b7x6D4K(f(-rfnNh^zL>AX9sKN~*>`C{DOLa>c0oU`8(%v1;y-
zn_}ld!lBBbY&@rG)!h7IjyK=3_j<dMXhj?-UH4)7)Lp=h738~sh3zdLxb^h(_Kw#2
zVY9NwMWT=8?tu{=;h8j-Fa0D41WuCmgKZGKpiM*n7T4h_ynV3zjFkJ73I7TNZquAi
z#9JJ`HUG;zRk?C;5Bw#|92ahbSP*k-GDV4IJm+}oif9slBN}rlWihzU;?U!eZ2x`-
zqS&DuGRW|ILZ^+4TqHBWdh~m1Pr2(=`i=uN2Zq}*vw=QhIat20JaSR&^}VK>Z;Oy+
zmL2FW7s7SpI~j@PNVVMk&6vv%$(Fr8`kV8E#qxXyt(utg9Iz_5T#isHYG{OTwkC;5
z!cz}f_R)Du5ANXTTD$WB1&K$T+v+rr5!-E->{NK`%?@^bd{R`j0{uR`qFK*Tu*|7D
zm{D?Q4$*u}N8gua)qh2=d*t@>4i}I#*KX_T>H>29e2z;!iKvLrS7`5FE4|NogXnH>
zzHjr5CRPlA+XCsDjP-#}r|{%_1lQc|;<s2~!k<$B!=?Ri#t1GrC)weyMDtUYZh3j_
z|2POP%*9KEV%Z+^!^b~8{)g9e24w+OAzn-U<*v23<bFQ-puO)0Wz@@((8mvZ%Ax<x
zvexA2V#hDwv7=T!uYS0UT{HUM7qU42P9L?iKRHDtWdWiv*nnqP{HIU<^(NR}U*hB+
zZ>E%yPc$)Foelc%A-VB2yMWW;jfa{a6ptn=7~%xDHVoebK-M6z<#~D{<n*fQIoX#?
zIbWAS^`X6;cV`%gzr5()7qNg*KQI=7S3Os(97A^R(G|B%sj6qqUH9A59->|%ds24j
zv`0z&vu9VX(A!oX5)^kc((H@5dW_*XRMor=4{{4k&J*q@5-0~uAS)yDf{GV{u5}Q+
zUIYXfRkqapfdWgC>L_j3pElN+h2Ok`gp0q2&A*4o25lZHS$(=|2*1NMPvHehrxSX4
zRJP#$5>%zLiF@^olj+~TW2&9zzTI~)7w~67@4|?5ysIzGH{@{bY}r4Hi=#hWlyBTP
zH-45?Na&4R%08ti5XwY3wQQc&KRaOr%Vp&Hv6gAevA<KSE(uS{ymVb_Y2`Alme!>(
zp1h5(FX?PImYYBfNH`Gi)#}C#w#p-JdxQnSKol_%_!|XEg@cpRNE$Z83aN>38TL5k
zasScMn6@Pu@3|Ng##c|K$s(LVHblXch-<{Dp#JJuEzL>d_C&io=(xWx9i8)xJ-I0I
zTxBXDa|CN3JmL4AN<{njctzll0^V%VktJxIxwf%^a=r#X^p8n66FsdCtq#L?&VeLv
z1qTwodb5|>_d!WXZ$E+~2V*Ax{JHAB4c)~Qi0Ra2LTSxFB*53I5D7mt0=m`<xvvR{
zsp)rX21V&+X-t|o!>tXgx{LRi5v}WEX)%x}yMn@1xh!?;&?lSVan%&Q?{RmHmz<3)
z?bdf6|N7vX%~4E(Q{d#HTLE_;_Y}AEYod5if_rUkt;y#n+pDS*VG>r22rVgd7GSyd
zoqONGU8pNb5!<*c_Ew&!b^ChW7Zy5bk0YWEl%9;-+=e8*&;N@BU=?;;wziu42L`)c
zYzQz$U0ohx4AGz)7ZXmDoeWMU(r|*46A>dTL(7>&Y?da!$8S~plK(i@*0xa*T8P1<
z&;qA&Ca+NA#1~JA-o^HGa=j_Y4~tCOPGpzCI7>Xq6_#u=gtzaX@9DjY+o)~9f);^5
zczu?SK?ClmTruOJoH-aW%3U|Yva>H#zqcOTPX8^A`L6@C+m$ul_dM~=Au?BO#@M9B
zv7%Wcd;VbI+_`hp17-fJj~_oKn#3Ra?yf`|`M?3qgbyE<fi!{Gl7|GV?Je)|QCw*C
z1_Hf97x&$PUm$WnTRI9)`0DMMl9&VMI6M1})1Rp+e6WhUHGb*U?(<{5$;@}R2fr&l
zXDmOod^uwlUgqE9_OjA4k}TyQndH0MgD%x#%r71hyA-@fp1i(wiW3)oOYA0}hJ~H@
zfWr)B^2w(Qj`LFO-*NX6mWTI-iS(m*sj}n4Je9=LjtGers6}9d(AZr(412Hme9|4z
zlP1z1+Lk=a@Yo>|mp-8(Ho)+yIZkwEq(;Hwf-mLdl+&Y`0bvx3JC*y&qyaZ=O#C=I
zu#Y)L(iBXfry(ht*V%lq0|c=>Dmt1sUZ2HjpmYs0;cuC;Ahm5IEAbAi8ARhl2s_LI
ztz*F>FWz6h1GfAH!826xLux4jTxXwGJV#TB6~<iSNozVfy3NYB!Oy(BMr8My1<Jw*
zaCT{{-m9D`4pGtbVupri5zJ{v@GB?MRGpe<cjAx?OqC=`QI7E&D8E@~hEXH>nCs%=
zV${XaL1u+8p7=}=2FY|equv;`M46vYf>`5kmwmdw%Md;4oA^VgIKK_05qQ%67d}__
zyDz@<v`~z=FaY2EsECouC$!rWL#V4mYP47ERu?DVpPZ9SJTcCsNOpt7@N0l)O%R_l
z3K>us<Y+qo?RrNeVAYIbxtFrz1*Q-fz<^oYnmb6)m5N>jiZlD}{KtXbYxBP(MS@st
zY<@TQCo5>YId{Cg7B~0Kk5adPK!7p~s-B5DEk+!7q|vj+L;pp38-mtrCkY8R@L5ts
zR9N(!K!l7mwHbc5aBFq2*p^i<@;Ai3nQ#5XyTp!u5t5R$ga<t&x0U|KVi#wx@r~`u
z^3Awb2X_5~CArVEKHz3zLmK!odhsQc@UYbJ@$rK`pm4yF`d}A){+94fuoGGN+l}zs
zKf$C$7*Ci(ZCk}Q#7ioz$E=ILRrv;w&+aHxP5f4=c->k(jMdtRSs<~-j(}AC^SGO|
zKbo=?E_<DGc35l05mlCxBXCN5QyRle*VnIRUjvBol^Wv)NpF<{@$My~czt=YsKR~Z
z&Dg<%>m!OoutiU6bbJu2j^Wb+WV!EfJ-{jq4<jv)(G55*E-fDZ`;QI;gG1J&%azz>
z^S-Az(@uRe2Q;`r3U*wmm*C&KZSI$%E)`E}LT87XU5sx20Zo$ONCys)dlT<&m#tqb
z3XXa6#tAMAR(%efnIo9?;j3{gN)Q^C!?Xe5fFXRM1%m+A!g8ahXii>s-_8Os6eqG3
z#b^2nj?y^5b94%#<YYd6IR?jY@sEjy(tPgrf4iQQP{&=OP(EbSnyqVp<08B9TkAm)
zjg-v-$g}R>xz;o{T08f}RO<Hlgqp!p5RkqT?COWl+xd%qNEVS}3HXJ@S>)O^)T);|
z%gawI*|l?M4_771zDnpE#b}5p_+GFU)vTz#$iw!6Jpnw`V?O>1G!HS%ZBlQYm_B{s
z)Q@9(%Q!*^x9#F0C^ERz{a>EAVmIWK$a^3+N;Tn9hGaU{$n#K<Ox!R?f6AveSaXkY
zg{h{N$k>K$FYy)#eUYD0Q0925hg($`%<rcuq_Qh(h4zoWZwxE6?D)3Uo^IP3^}X?r
z@NIBvxK`hBAb4wu=-|-rmVt>R2`vtdlrf}mxwvj2w(OI;=sU?&gyd#wTaU1url)tG
z45k^_4QG|esk5zPBOEaSQv$_9GR_s)Xk=vMqOIq5uhmz}`cA>r!cG*oc|5>lCMJ=$
zqlUYkfb;UXuCo}??`|BvOMJfk#lRLk+v}5_M1UuNOUCWQh{{NsZ(}^7cXH33ihp~F
zgyy6^sv%aLVuVXbh<4xr`3WuE%HTUDCibIW!CJWH?k@V{#?V`1m+8K4@Z$K`pzJ;W
zOfm{&_FtHh*w~B|_0C9MVSR&neZ>3Tm7^ySKK5wJ%kB-~u~rAKfYs=(iX8&-(?wUS
zF3H*1Y5JeYMjZ4Yj?&jh#jT0B3&6<hu5dpuN|Im>^G^&JFh2bCaA*>Vy>Qawh0ih9
zO`@|G8pDeu$BxqVB<gzAiYN2(^D8e?yr35R^M~e*u=5FJx7^#pAydrHTQOZXNAgDh
z;WHA`)($rpyzCrUnAe2Kh@{{h?kjp+@obN)wdw~<6I_XVOVybTs?X8ub459@tD$CL
zS_LR{4@j-he)$hbJ3~Et*5b?eBhs6sv0u7tW8xO>-(dxRqfYiF5;#p8N*IgQ7M(fJ
znbplWZP}Hl>~w;g^*OC~fo(sR?qeKkZ!>H9gyw2faj*hE^JKO%GQz?j^cB4~r5<uR
z|Bf!$c4RU8`H?(_t+nhfPpOV_?U2M#O^ui<`IZzDV#O;diM}jn%UXR?ybjYPaGYtn
zAKV-5NK(QV-0bA{DsWqFiuZ~V=UmY|jxKZ<UrKVcGE+_w4X%Fn@PrLDI~O6`PJW<q
zfa2=C^r2I0T>Ib+Jl#)o>J-dW9WNezV`kR})!{Brxu@sp2?;aRXLzm8tG<1bZJCZ2
z@Ej;8O-+}&1rvsvzm)mF>}O-esLYP25etRGR6KUDGM{)o*_rDO2W{myq<zXn6~IS^
zwD10I{^y{JJp*nkMvk++=d|#RUrK?3^Z~HK$B$j`9i0`_)DR^ZAH&>(RDjK?pPUZC
z6P7yf?lL=tL&RL&xMvNr_n|bkvv(XA4QDqsqI!Kb61<LNEI_OOHpkM!k9Tbk9V8dR
zYUJFvu0&t;ijAFFOY%=5_U-e=>IT`H1_r~eulQtTYx%6Xg-pJ9oeo@ZiKpIVK>k=3
zXsPesJrr~dl}1VJQ+P~ViOg1)Q{b65imiU}#r`1K4g?`ftN<V3Bm+q{#g5_e@Mi=d
z1kehS%%|XVMQ{I_zx?|oK@f4O^37(;{!flWpT%9*7Y`jh3dJx`sD~W92dfN0oL0bj
z5KL*ayu6Gj(yP?&LE7__+vv}SyB2O?u*C{ZQfZDm7>CRG8+n1Ex)E1qPl51y6tIgi
zXOa$t9l-CCyGK1Eusibk={ViD2DIdDiLA}nweMw$`Foo%<)kP^-b|F?N*et1C=-`8
zIrc3`P<=H=X!z+w-A4ZD9%B*h$mzd(=dFpMA+uQ}TCNM?!-sax96gToG?85*ASls1
z<a(&3-Mt&piH44%6;B|3!v00=O8&Rt%H36Nsp>A<bAJ%)+}s?tRR%f)4IF5`!De7%
z)4VNL^Y!bWKY#N7vhwjA?*B&>6}v}pb8eJyf3#kf8&2si-}IIfA!?v*!H1M5h=ph0
z&)RHas?E*K#igaT!Ba2b#_Q)dKAxfXgz))EJ#mYYPXkX_;5m7>_d^AJ&ba3_+s>{Z
zpFiI*HkP)NdwZwALD13Jy|b;YSzg^HtFE;;SX<qZ(B(L?iqN6?0|v{^evzJj@vO}S
zo6<VSBmXZ{To?D4i1=yU86$~zLnmcldWJ3hYOEc5@$w~qBh*gM&QnFXX);|9-1Cm`
z5*vrG-7ppPc*&zbr?(eO4n<b8(()u7<BJc~IzCNBCS|q%NEB}HaLq0<EK0Pylz9H;
z=<C>zmUrF~`l!-gZP+I)Y}%^!A7PBg^G*1F5jbN+w4!O^BDRM^*d*^)bmj^Vk;>;v
z?>T#%o3Z=9Wxu%5|FBmDqrP}<i0#L^^+3k4VC%`&?$w#0JGHJ7ImD)O|HHWCA%p}S
z!0)8kehJd~NW-pNX_mLggoT9Si6Kcy{vC1VKfdKP(f>TSZT8F(<MQl1&Xyxw$8`3Z
zrA3y}`2YV$7;{Ibr;n2_h%Qg>&B@r<8C{Ln%_H6?t#(26xbENS=E;D<<|vKSwshOC
z0p4xhR~|iH=?m!Y@882nLejdn^SOIEj-HuKai}!*73VA4ir;T$h^K2d%HzoE``l76
zu~6AK6B|+Vi^oshnhbTHkxYwKNn`r>^)LZ}81-?YJ=qABa0Rm*>IJewj55m*56Pt-
zBXS7J>1CzGgN)4+M22dC^<=k%WSTsJiJ7Uw&d+2J5D+9$d60hhL)EFNW+ErrSvR)^
ztaI39zCINze9SYcJ+TAPlUqxj<=847q2h`7G~%wpV}NV|y;}<G_yZ=tXvui|m2YrG
z9YpK%Eaq0ca?Gb|VHzW^cA#Ht&(aZ1YuhcS>dY&!a_-3N9Ga;(h8+8k4s&FL$F^hg
z;t)U~_!U+a;iMC*=cyjS#O1W`fb9b|b!;GET-HeTQwIdfnMs`@u|2(hl>HbiIk?~j
z7tF`Duf|VMDSEl==?*Zx90-s}a7mn0&+O07lnW`3zGygpQs2eE+InN5r2v*tC^Yr3
zhlRVEjEo%f?3`gPP`k~=wpSR3JqeE?>9OS7C4))_li$InlY_mzC6>L*%F4<bDK7Tl
zHbU8jT&-OuRc&pmQuGH@3B6K>Ak71!TXs)EG<-o800H$MYCbfjY}z?ldkF|^NZohB
z;oKA&SO2mpr1ool`o~Spz$3?rJS^DHol_)v7(C51S>J}@SzO|bJ6#C85Q6>?53mCo
z=%>*%V_6{UdsQv3FxBKAvWrkwlO7(2h{NyY%YpZ%p5ERy&NE9c^VKFDS@g`Lw@V)1
z>Ji<{a|f6JlZ3hLjWWGkx02s?CCVOSCzIcy<sl&uI~pQStvNE9kkHo@k{bNf;<*@+
zkpgZG8s7D-6|K%({mx4RA0JA(-Mo2ob9FT9DBVaiCBo6Z(bN|3nlwY?bChP;dwmi4
z6L9rLj6K?cb2s1bdY@p=tcGI@*CA!aLXv<Wuquh{WKhk2-<OT;hVNC0vqh@92al}x
zH8pV!--yrM8UIa8NLc$Q;g7zb*E}yHqx#<8-36&wLgho^hf6NcZqu0)!_EC%@o)S8
zVgbpN1e3cN7vbka)`+ySZaj2MWTzSiY^J6bWZbyD<I#uB+PrjdOw6vV>h)nT#J3yI
z+wKxDK<!_vyykdlUiL4*WISH%7%ER}HcX<KJ`biQ)>JA*9dio{3(L#=e0(D+j5eoP
zQ%BVIF)jVNwqJrlH{-^;r?0osB=^DTvJjMvR6IkPBjpJT;rRn5ajxL&MyiOc*<tei
zbR(^VL-8hvdvjkr2}4+1Gn={T?cm489QQ4W2OBciN&VA2L*v&UBFU5|(&{+wPEwFd
z9MqXJa=p-(_q-K%Wo}}MgQH=NM(RsogvxvwI8Wzg;6*BqH?;l4nl75LCF_cqh;^mA
z>Yvn<II!j_HTyY*sXZzpg3TH}1gu*d?hjUHj}zy}>+y5*n|A~N>EN^;<FfYQHSahE
zTboQo*C#Cdl2_n*Nn_J8(^qV4VUcA{&v(BLKMRT{=HhGuL4{Z${`%9$Kbf?M9O$Oi
zraF+%Y;OJsQFty}OCQnyVE4WgZT<Bm=eXTeJ3G}Sm(}neKQ7{3jQ|f5SNL~RbZ)bH
ziXs*JAzDEjKB#55`~%;!pP4OaIj9Fy8sJ&jVIec5fNbaDkN*DA)Ht^=l}PukLKTts
z(3olZmIS#{trg?pK7aoF0WoUD*v<Z*nc=@Kx;XT`>jvppBMxL};agjE^d1)t%gdct
zZp)Lqto?d!(h|!)`3}k`T*PGa6KkH|%Uw&*AzT7<=Xh3~2My^QPH}9+Tz)nDs@M_P
zH8e&ggMYE2<Jo-qe3RCtTQ?*yJ+1x8tq7)rr)r_5J%+S&^Puyi;84U4Khh?sv%n)#
z0y8vB;78V%Hr^^m=2vWAafcNVEF;}F=X_iwfig3#O??8X7JDw5tB>C>2}Evt9uo<i
z>47Sx6edCM7iXrY%kS1$qYci`E0(W%_5z7Li)|_o?F#}qyxI>|Y&&K7D^RVyUi%?S
zzck&i(1YC^7|gcmat&mZ1f~qb;$@BgP8J_Z8@I~{19Zg1KBL2x4}Xj(W3TqjN3|Xb
zI_0-YjvhTK{U%1?)v1dJyK({H8xyY9$be_l?n2d$o$ktev{s)_>K|5lOov?*l)1T#
z(zHNp7Diu*roWK0)(mM~Pcx!Rx>bHSIM>VQ4no=4m(C&0XbJUp&^cE-R%nfB56fQ@
zK+*#P0~mrr?&xGi7{U!2<z{?jBp=sFv*UXCp%8D7dvC127Csv^-;w=s@2%F}VJ7FI
z)9Fj~f6c}No<9#fUx6q3jJLe$>#&*f=yUt><H-LNVQJW&p`}qa^U@3|X?3nF?Odw_
z;WqGNb#<L}h5=w?yvQe}cUukG%wC>N<8U@agafgFRQU&uI85o1vCu%s?s@VJb`4^W
zjm^yPS_gx7jeTcNcXv9W863nfGcjEgcp-K9QjIT;j{44j>Zjl5=gWVnf_F8mndxbj
z@@0M~D)Ux<2e3fIFjEo75_$yMWu2Vq0sDEm`-mY%S|N|e-XSgkjR3?XIox2kiEAHr
z;jFbJdldV_$s9vX&Ba%u&A|e1UCy6<lmU2eX=-V}x`Jz_yTHe&BB>1aIM5M@b8M<F
zhuhm#s*w$2>Bu@r@4ECe4L9T!^-}1j9Mu)OYY8+zlk!D41Ox;k)g@j^=}@t0H3%lh
zhOT-_RP4BYaxuK*w5Z+D(Lvk^doo^x*fGmrp1g@x64PMRdQZc_hJnD`1W<4EVJ?Wi
z0G;f@SpBG+wNJ?3ekUWs=9rB?-{Y&G+T3hY5yhbFHr=OhRMXCd)j?gv#l(<p9shs;
z3+ULYE$ZJ-1$}A^+rk@}=%pd=ny;NZ(CUtb55l!TNZ0K?QD1~5X83v0AkqGL|K2=<
z#H8ywW%$48G>q|@F~WR&nz0Sd+5`-|bHzvM2AE!T_x7f`uH&p{pL~s%Bk9F_ysU@=
zvn9T+HbE&J`{REYfM$m)IJNw)8p@Wxq~bA}upd+kmPly#7ui}20hD;n8LuV+b+KM#
zw!X&jI_}Yw1Is_9z0bxzgZ2Wy;w0?qiDmJo?Alw-YXvPPR(rpB4mX#>)QgU|ymbvs
zB_i{ofjuhk?!KHqCF~Sn#Plc(wNvSX$r2}%K+*jCmRjp>n1T!FBkDa|?Ah5@KIjyr
z=(`CDl?$uyjeX4rjbGI4<ICxN*?{M|)xT`~3KxV<G4MNQyrysF=u)5<n`lUxu8N|f
zV##AmpJO}oMT6G^P7BN59m7TuVD3Bk<Ms39JI!BRU+OI8IaiSnKnfK8-{JahVX483
zOtcLvPGl$P==>EfUf&zP*NFM{ZI#nP4wxD<-?z;7ED-<VoJ^2DBzU=ty-uFUi-5q0
z3+-b_9N1RcoI6u{0s%{>;cWsP#%*(sHS#Uo^VRi(`69lG;3H2Ct4aI$L7dcf3Bc<I
zM4p+Ilc9R(e6s5XIiOu?v1jSWfyyNH8FabA-NhhK?`#(9J8fvjWf*8(`}eT<O|giG
z3VA5KMzOAnHwmQ^Uf;Xb*Vg0}Bw~X3aiUs$fBVIc@}Y<7-FW1k;#1jqsFH!__^`0)
zmFTvVWe`cKm1VLro2jbr)kQvQVB^g69AaU|$;h1k^)zV?1XwGM{6Ye~i;K%Gy*Euw
zO%z5)-bfM=h;<~CO!{ZYQyxqA#QoLw%?#$cS>_aK^h&3|&F&FbiPKUP-}2;`rVBE%
zpf19C?q=nI$jGf76COmQ^|!Wt6iK&`;1Eu=lYP?=+K-+g;=j!oihHg3Mmt@3Y^(Q6
z@_}sG&{->C1A}<^_1uun0cT+_`5FE|Yw$RI4@+rjhEu2}^B1>}n!@`(gnsm-<X2j|
zaM2EN8LLyb2Q?cXC&>@s(;{+p<(<2<$LQJK1M?gNfx_r?)ZCV52K9xbm4gF}_7$FT
zm>Jl@RtLFq@=sOEoQ}Ay87qUz*j{`)n!bGX?gWtXd(Cf>&C@m0NBk%&6tt)0D&hXk
z$H#XLrT_^?HFV-$Ck@!jn{{LryR7+j7r0Yh7~(Db1=%ZvJ+%B5_tA`MOlffVq}ykH
zE!CXv05#9Rw*waNrv>LTQHX`yHU)@(D<%JieE8bsxT`Cj&`6<Z2oJLn```lGKV%nn
zoVWKq5l*(Wx{3KeO*^Id(Vwuro4-p-V~xzHHR~CT#A&ZaNhh(B&UaH2JlRnMThs64
zd8DpY;4qXoHXW-|Lq#rs{4XPJ&{m*`1m`q0;toeI--h3g#>jap<{$SVOTuy`Sza);
zJzMHELQz1OmFZ+OumKYY^?wdB>>T}yxvFELkN<RN3BP`aXBLGMYnuDTHpUt^=@k_G
zUx$Utx1<L??M14Q%!~CYyesHN;Hj}aR~u(xX(@^dBJfAU{wl3XOAiY8RKF9F4~C|0
z-UH^)mf{NAA~)aHajyJg`4by66*DtCBWQ-;(+kBk$&~VCm(@DhKqBVuHN|67Y(t^o
z1tnDz1V1UmLHCN4JOllYB_&v|Bi_gs&B4z4pNnKx8aH(@j{wgI7P2rjB&VY*gbU1p
z)fVhTZU~(7X!=>GDbKvM=;!NO?6mZ3OsxMYk(bVXpMbptfrU48b*=k9)pT`zlnY6r
z<h=d~J+&WYBeN@dDZA!3`Y?0QC@+PaHydQo*{v0g&{d5Yrh8d>#Tmwpoq7>c8U9lT
zOf}WlVO$j{bycP1lfKKv-G{iqWGCyTyhCEt>kih?1Iewn97#{{!E=#$^!TqsoQNxS
zN(^!qEwTM%!vk3@QbkpA%T~f@fma|~igSNi;#>1O?if(6c3FDYgwwNYKeZD<1kg-X
zF4LTzTODwI82)AwAa$!6z58YmlNfQ1absA><^BQ_l}p_z)qpc<{02d`!!6+@em8Z=
z=E=^D%FH^WI~Z(UQHCE4xkWm_CEWk>#h&cBr6t=3d0GP!XlOTE=-|phO8Q#u7P9ra
zx{@{|-ij^H&l|suk1ub3JVyTDlXACwLt|rYPtUyNr-si0HkE}9fjJT*%%3`ovu1&2
z&%+!b?J^4$i;xiG(wi_cIE1FlGYh>_N*+j)DKZSX6({g#tq@wrWWBJzmKLqOsZLjE
ziQiAPN!kB#%zpCZiBxB*-1#-vdSzZ79{JJ5c{3NwOG`10X(x+=wFYaVLTBaUm7?0U
zd2ZfY$)&U2`TAp+BN63UZG4XGQiJ<u{eZ<+w%B=@`EjM~zCbB~47tay16jX2<(Hoc
zSa+BtJW`(NcN*Y1;-|@78<mw6cW}=b6PnWA5Nnyl5vkhhYPO!Yh%LN-pFw}E;+OVa
z%<$B*4Eys1h@TD*M_rxOO|X{o5@J+R3<wcU0K!0E`h}34fhI&MspMxUzuYOL++X5%
ztEw8qq}}7_D7^d7k-3*ezRo!w6=oWk{2)|~p(MEH?bo)q@{gbXB{_i4&Lih^ajv~?
z<!c**Lc9cqO}Kqg3#s!l=W`Bhlj#x=+z+|grqCElWY?C&^YCVhTDmr^mbI)n*Bl)q
z>E7;EbMw2XT2Q-7Rfe^Q(x;8-<x38%uKVFP>QJ}cVNo;p-Ct?{Tv7&8HB>R7@9<a@
z2-&HORt?vCaS?m__=K|!znQ)0zWwyIQ#tnN$R>Dgcg20%B|*Awv}A@Q75w7f527xs
z7ea~E2hZSJUpqmGVbAHGfFt1GAEEmnsi_`R&mcz=7BBN+YU;r>s6$iB6F&^G7y|{*
zH~2JqDa<L_2i-O-*RUK0N|D7>T%j}d^;O*LQfDF-dBLswdy0P@Bp{$_{8`w3^&DA-
zPXLF5eH!UrL46Ei$r5SRgc6S!(oybDZiQ3-yjf&bf=L=DZ%K(WFjS5!S8g`gk$p>2
z*T&2TShSuG40iLL_m00Bw941+m1<Ilu8y%(;gvCkl<iRr4Xl}jfhW^YQKeUr?FxTU
zCbbh~vY`ge(OWA~L=;drGM;vcZO`0yTtn?nlaVo+BYUh7jXAgiH}~MfHhlR4t@|fD
zl;N^d8uAVbe6#o3(%P9D5(IBA_TvT#c3|Tx|N22#oI2NQpLrD?p`gFjIFqmy4Ok~S
zawIei<NUROKOn0-*%OCJYnLek%mBeK*#Y31dU$%4jY-Nype^2>Or?kVa|hG9Q9Ec1
z9l3);Q&U*J+2`J>0w#jFcg}~tE#gGo|6&36u#vn!QoWl<uAZ*Wtn+iGe1n^T;m-OZ
z6}`*%!M;8hL{ah}QoBrKZR{+b#?rIu4Q;Q&<(1BJ;c={gEhz)-6dJ9MBlNRYOF&yr
zPvto!-Iq^2?uVA(`w`5-{q^;7z8h0HaySiNf7Dq00QI0&>m96N!I0F=(bF;Ay@Hs>
zabj>*0cBeISM&>rThK80ph>^>VnDdqT7~(HQ}aQ{E-e$nO6EvgKp1G2CVPwY;f;aV
z09Fk+>Nb4+nu1if^j)NefG7I({B7MPg+{(Qb)L(l@}Wc3z9A6H1Eoc5Cmz|0=t)M7
zZK)sAM1*odVd2v3Eb_%;g>dG+c6t-h>_fkNULz&o%DLoc7Y)BQU<`~4WmA*z-FWlK
z7RKwoCphTU;lYGeQS*CK4W@98C)edHFARI@mam&>a*($~@|J*p=u3@NR_;*>HdR$F
z8WuY?AOs7ctG#z7deE3<CV3PU**iF_Zp^G`RR{&2Ml*4|B5O04AX$}NCuk-VZxfG}
z%)woLBkn?~(^3X#A^=#zS%DtKxh|()>FDaZ=0}P2KJ+d~WX?=ZmIeW}T@4dxOZZHj
zN+2;O0o*(Si(%c7#2A0DvLRHMmX6N&4qVd6ma$i0uL{2K$bX{kw`>1jJ<rqB;dv5i
z^2rjb2Ze+<oSmH9=Id)4XxOo)aj{+8nBfFZ>vdj#W8)vBF5pzu%Qw<#4Z!7oa`?4@
z$Av3b)>}k(vh=#k&>)!kLn!yY)L~Ad>~4H{xd#kj4!`Eoy}ow<x9*Wgp2OT-w6F3#
zzt<LiV-F0+YKN)zbj%q@Y`Zoob{f7BMn2x&#hIDrm6OKDeQy$QDQJ7El57AJ)bhb-
z71Qc1^Q(l$Q3H7wJZQ>-4|akqn{Rx`*?9v)$F)y1f;L{k_h5sCLIfaojrX3*`CnhY
zc=`ZzP<HaK_@?-RU8CIm``aHFknv(uRP?#P$n>@KYa@1iCjy>p&s^WnFE0b#3(HG2
zhnPG{C|H@@xa#@ySugEfr|mGljH=yUm=HV!)HO^k=DNBi7@h$FjuslgSz{ecq$zOO
zlS4Ef9{8STr$tozf+m+{dvn2qJ!bz6Y!uO=oIb6E&p!u9qJgFYViN#^>b-H7%%24-
zi*8>w|NNu{W6v46T;$v0<p*K27T*sY2)nP{>g;(Il~~lfe)y2O&x-GWvDlDC$?2x?
z<eUnAm5&can2c$bmR@3HVHq#fCQ-8XA<2(De8>yrEp7EOSDhO-y84PML|mshe;u&3
z<vn)nSbrLpZW;ULi+=gg-%GE;^Yi?LR#IAofVBu*4+~6M%J@m)B*A_2y%ZgY?bRqv
z>|#fm-QQ}gWpacTNv))4gLbH1)^}e5Yhutz6?^LAB?%u@0nm}93v2)lB@=S#pKYEv
zn`WB?MxoL-HZ)9BzTmpPBHutJtrV%SH`eKKLQlLV(XaTI|2ncWh1!R)m<6&YV`C^U
zZ1Q*K#%Em~KEA+kP7`j1R6o(%Rbt}GM#jd>JK334n3h$~Q)L+KU+ZI}W6=wInsugX
zufdn64_W7-`Tq9fU0M(0;Av!*U_CieF3BSx5YCrYed}OKOxf0szU#z73t?ApFYDCo
zXODgJ3$w##=Xr&MM%vTcfOuZyk+<~5f_tnW{mQpg$uWz0(T7q}93FY{twX8Rzuy`4
zwkaI3=5T!Vr*)`zC5*(=f&Im=MB;pk-DK}Lf3fFp<ZlnmGinEtqm!HfGju91yp!CK
zEwZXP=k0$VG(Ou>99IK)v1ZQS9G1@@>eU${{L*p0I`l|#-uDvwTr44hIt;@}PAg;6
z9WMoiugGx#wylGr+*iPfoutNwd1QP%Z0hDj@>~dWU_TW#wY;2AC~>RJsLvZO+e1Og
z5s{Gx_m}3sf3N!F4I2~Fx1OkZ<>s-WJHJOqH#Upof+I2K`%{iySJ#n#=IRyfr-y2X
z(H3;8yO`9=%UibB&EpQInX1a(H9*Uacghhz0TaNC7f?%TzPd~aY_{OT2N4*JA3jFK
zbFD1pK588fek6lNJ23?K`oe*-blMaRx_UY*L3fnPzq@zIw4bVyt|SLvG$~+E2<l8K
zFTah@d+!7K8jPtyCqI;y{*umN@UeOL5JSzqapOv?+Zz}ujHsyAVlciIqOrw=0RlJ!
zNb7pG8C)Ghl;M(vW$70zF|kR$VcGrZQM8psg_~<b_<46MH}#6M{7!8Bp3q=FgHvQ3
zCsFWWjpD+$6pC=3OL4ve)X~<~_CQ^H63Yp4^4*T$el(Vyzr>Bi=PSAves9lL7)-HV
zCFoW#GSU<iyMq-E#hBjs_`T_AtN+0cvaZHmki4N&U%MgE_dz7{hyU}sRT4>vdD7E~
z^}EjcFZ|y|`>9ic#cmR{n5xWfcA}wS2<Jau8EI+LVr4dcwUC1a!0q=PIkJSu57`Ub
z_ex7$va-1bQ!)>`oMk1Wr6r@F2xfhCB$8CnGf5olld!Py6DO$Fyq&MRo!qC>(OdD*
zj^|ee8&19hpWP)!0yob*_ao1a$ppjUPvhgp4+}Nq`8-RK3k4=_9UaA&A5(PS!o_bt
z2=W{c|B<~8zgL^d>Xw-(sA@C_j4saq&>4vK@W@TNdEd$^qvQP=<GyZh&4Kn&RSAho
z;9}^73@yIxToO~3WY|x@KweLHf9(_(eLAo{*#0I(oTtyHWVjl5{ye;|0$#jGzEG!S
z^yH177@&rfkYjBwu?Go^#QVzVP>BincK<VeQA^{G!mk%-p74(+GFal_pJIt08`uK>
z)l^p>gipM;H|Vj({*B$WgO`86G_AU_QbIqDCLcdp%8QQP89Q^=HJ;Cvl|tIwoOsnN
z9#)ylWkU@VA8!DGZ{fRlAM!3};Ln}qCdIz#@6XJ)d3n#D9$28FzL&a^pLBgG)&ke|
z{O$cRva-J$jMMR>L!z~UUSf}#3&rI;aiZ1VHob60$5v-&c9y971ezy;9l^b40=clW
zE_a~{ylT(Qyb+QeXzA-)f6zn}-(~CqKAA2F2?_pc6>CdGb}hhe*)&cBWxFmY5l6iI
zy<q$X;-g2e?|!nu-Tq$v#*L4Wk*4y7sQ-`~9=Ek^1PJT(4?;v8=oW+Tp)G*6aSn1!
z^{CI?#fx}7$u8Zla5DsEE$>wKq3*=)Dst8OzcmxAn!38!y4BD<QeB>10EeB4?$O$O
z4OTGhrq{9Y2SDNE;J`Nd5afI82$Va|<#Xjr?;e%gy1Sp=4<V70N6BBld<oRSqCL%^
zRSh90`miQB3_~<q%=&1&>>ser0~JW~u10UWI58Jn=4x;<oX70U90IE-IX{6^r~M4z
zP!}4*t0fX>Z9y#FS)C(q7tt?uNMBySF{vPm27~5`9ZZJp0W~3OG&{+aMd1UpZlCyZ
z0s;n~Gw7|AKmtVf75A47QB-+(7pP_z7NUinl_3KKUJ0TO2|I`UC_v6~(28P(ui{|d
z_*WEyJt1E6v!cx7-d<jI(|tcHEAK8%4H`G#P~3muK)Ne38WsPU)cA!4^V9I94JOLk
zn-0D=l|*<&$nx%!z|hD*x|jMVmYTq0kDQv_wY~sPm4Qo5?FSaEDJl2R&lTIxC|7Di
z8-5`D1RS#~l<8Wic*|R&1#)xVb^@vN+Nxu-w_ic`(1>`tHqCWB_Mfj}+~jNM`0(}$
zxKk&|$n0r8qsN4R?^CfBn|8D1+{jL`<~I=V=D&s*xVpMx{g%EMqRQcl=W8gYu}|!y
zK<r+Is}Jn#Koe<eitdC5?A1G;cd2GmGHB<%4G!v;8GE-Mgw$tt`Tzc|EHO5ETJU!}
zp$2xW6Z>T4dT=Oab++o&v%^%^^X`1XwZyN32g_SuV8fR{L9ns1GduL9qGHp=3*$1!
z7MkCoHCs{QK=ktIi^O<q?YRr~4g+C}6>_veHl$<SXSBty1$IOB8s`u>MMh1%eo)xK
z*%?AP$vrk<-#(r*K?97Pk=olQmf1IBF({;iW@rV=lw^u^qj;>K-{t3H8+Tp4^D-s$
z2V5Fo3m*(8z*0#exy4Jp_&x`249~0hU_lVgF&72Hf`}^2!+E9E>4^>__HRzBv+-BX
z{W`#|aZc~@AXabxgn@G{y%Jr<+oDx}S#*0<V|U%Bm6<^>^E@aB`r#yB--q(#FhgTx
zVq#Mp#a5%;1NZL_HD0>xquAd|_QVN0v&`r@maxwex=dZU$is8H*rqrrNDbzZkvzYq
zI&;I-MUiNa=~v+L<t~(|7#4%L`e4f-E_Hm~*};Z`CqvWG%_J+F1U<OqUenauw{Nk+
z%UDr#_5r0Hy_LuT2YW>&B?-x@*NRA)+)k?JVq{DJs|=uWG~Z+iR*c~EzBl{HvE<gy
z7a<=<T>n3By%9681RUd_$C6V}WDWh(t8n`>-7j$NcrwJj=XXYVHJ*A(;%$h1e@o;i
zRN+EAJnHo<`Qi+G0s@@sN!P%{qUN`_U^hW(ZJmp8Iz17H=`WBCq=<iGj2|p@R1j#y
zjYR=s|3}W^5<QW3<<SY}jY?FfVu!he9yIzu_7H?+Y+*@<oxAI=2GL*DNI^x5{^?WL
zBfE3p&$qCuxQwY~y!H=>LQ?r*FCQP)7@0jhan)RFycCp_$(yV=JC4z<mpHFj%_l2j
ztU?2TJ>o@X&${b%AD9jYqUzhCs>cYe`B3q?=@gn(b-fD#DW2x|T#M|cC*dpkP1V-P
zrtyXjGOKxg_bu0n?-!ZdEc!n=W6vco6L^RH7PGTev-crwJ6Vy~tM-#cgB?sU<8y{H
zVBZNlkEa@uQ_&M)e;?YA24J7l`V1eRlp9va9CHFcVlU72qN8w~tI2~{4f)Y(W#4N6
z5|`ucNK71ssTY6|04v=6e?RG@C`AK7P^d?5UR&cNXSZ93FANnxLcg)G0p}R$7`JZ`
z?|?btx=&#01be%+Vuz5QzXRiSs2UcuVSCt}nEtyy<>j%Z)cU1Fn%kTptAkA!Ewomm
zBDz&QFmSv6az14~7iZbh(Enlq|5b4vPcIK?|LdA*s#f!3xwS7gY`#SpfSRy5`pW$%
zX>YMDR3($!A9wEA8k-Xftc9qogVruxfAn_w;jVI5m3)ucv3g$hDMi<1c$TR|@^lOg
zT(4*0Sxt(mnp3CBWIOxXF8I75ypIzT7!lNa8QS%$S4-5B-z4*~7K*Gn?2cfODPXIE
zk-Y{w1>WkYt1H?tsG{TyLyMvyo~WMOU?%E&FI~T48w&p<{s>$Gtnk@<a}=qxnR8ZY
zgiy}Ft(MoBZwPG!R}8T2kG8g5kMN+Nce~WqwR+aL1{KG;MY&Y9Cp%u=-a2-6iv=dz
zI3ne@o_sr}VCETo5E!1ZE(HNWegMu5xdYIHhqZ*v^TA6JC@uru12b8)=RqFDw&4`#
zr!ONraV>)5oh*s$yqd;MNHWe2+HgE%_TwtH?Y;I-Tn3BgM@>;m#J|@EjhP1}8PyAd
zgI|wjf)oeW3&=uUh<lA|<U?)D21?((P~tWPxAkwbLT6up|MIl(DGCbBVjFKn#Mae5
z!;-W=OJ|=zQT|jZ*m7uszoy15Ym9I@U`m@`ai9GAxBY{qt@$54-wz`NE$fure;<t1
z`9dCF*BmqqYuL=pIS|3wzxNm0>Oa=@CNYM!{Bc^^;QO-K`W0N-+>MZ>vCYvp7Fljc
zp0Gru`_*E{g=aXnT16~-TA->Ed^FVuQZ<@8JP^89OP<QPU1Fc+_I;2~jYA(I744rH
z(;%&C^lIFEV-aH&TK)7uBZM}V1_tGJlN^rgO#&LpA;?Mpb7HGaWdSFR1J+LDtj$ms
zt6G*m7`Ca5Imd;%^!u9*pIQ4Ia&q#uw6mFZYx9?=9z1-A-E%S@hmPVsIv&K0$Cv!{
zI$YZH<qn+gAbRWg68`{=&6rl9L6wtZx}2QqGa7;I-vUfaVwkeAeG5Ig4zl8(pP8BE
z&e&`T3vCm7`QCe1RJ5_ZVOrx~+pk}OOoiLGZ$sMs_vfE2SX!t3IVTDQq!Y$_lz&*R
z!fQl@Md6c^Y2?8=rg`meeSLo?+kT(dKlsc?)@b#SEU#}?YF2huK~`~Ag@yNC0<r6i
zmk3UV11z#EfAlA3eJ~RpTaMoK;1eRNZ^MNwe`a8#VQF-yErpIpX=R%3;L%MneSPbn
z886I^!TbtB=nwDTPju#*pur$-3RRUCW@1X88TyhK8~c+vG%`B6IkMn}u(VR=K!Hi>
z_wRY$hr%0o^5pgQ`?+j(ZA|@)1{Soqn1!A#h}VSs8VSesth)ch-g`zxy>8jwsM`Q$
z#DEw;DRNLmMNpEURFR=bA|L`v6p@?_s2dT5B8dnnP(%R%$!UX1RFNbCl0h;klH;Al
zKBq_D?$M*)+v9!5dq150;T*>~TP&;o^*n3MHRo^P1>3igCV6zyy;^F3D}&J!76Zq@
z>%Y2#a7%k<NvC(9+`(L;IfhsWO-F^&pKfBaQK70Fc{{C&>*G%)#=vVo&Ha*SO>_*j
zBj_l3uk6EmCb&z+0jiKcg>hin{FH9vl=BqN0It#eyx^hQ=m0yeB!4@tnDl(y!!!=D
zxO-kxd>0!*yt%hwZ=5b6DDb}VIE1##v4L?ov=ViGdkU~MQ{{DedF7oAD`G2$rM$(e
zxLLcDg86uS(}&q3lLT3s4>Yr3DfLKec6k72k(lFhg7G=#%Np?-Nx_T;^cbmYAVi1<
zJ@tKI>GXDFfU5!%^62Yik1S&%%33^*6gos_QsJq>#nQl8$JiS}>gpMOemUxiUTMEp
zLIxlEt`NJ3*K5JbK~#MKmJ!V?%TPuF>EpBG=dC<fmf9h@y*O>XjJz*qzH!?n7A1v@
zqnzu7w)#28WO1aLJ3CiLMpRV9Tl&-Y=~)^Zo0^*+F<7vP;i6-;fO&4Iy>R0mzFEcP
zca(HBq`LZCJuAsTWT~0L*q;I)vrs7c9eWs2$<L6uo?>V>qjt-VkIzPKRB^djNkmIJ
zVe%y<E}cU!KTDn074%&ZkHxp|kD<}>8if<#`PsRR+!u(3DiH{s%TMu%|FI{C)p2HQ
zof)Vh-KoU_h<-&LLNSJ_Dzzaq#<P;2@z#qM2ZC}Ey+=`nkGHvY_LBK(H7ic%I!}D7
z=r*2;af^!}bNl#lnVOiqI+RLIpa2lGJz$J0{NmGs8|?+Z8@0|iUX3NM#hJiwBAUs;
zZ6d5gAdDS29uVmnA-Geu?Sxsg-h?+S7}G->^4@BU&n<5a`N)%s5(UUyV-5RsY%@z^
zjtbH-6Gqd`%;jZdyl!v;@veL7^7PG8otR77Q8LHvl_5_qq@NFb&Dpd41S~+ky_M=H
z60^W8L|ldF6H|g6cJktZs-*eG6ul%&-@NzplH*y6XHoGc(4RPV?B~3Ff}<y&U^p5h
zQod+tfkup5$Os?h5L`AiRd9CZufvpX_G;n+Tmp9TQ2ll8tX=OpXOi{D5~>uaUz5YB
z<#Li5-5sH+;TvYH<zgukKHkfh*V5h2W-EEA7zUNy3Esk<hJ@c8o)Wr`&Z-rVghRc(
z)5wv~I;WttcnJ_UnUmGK1=7O>`8SiO8-u(a{rq|JdOzcky7yu8z9H-_p>L%gIg%#B
zaL=5TPlYwo<w^_)8Ct0ibqbtR>7~&~VHB!2WX4Fo)t?pYVf<=hvik$?(4?Ay|NX?{
z99^0@xk1fvn7uWV(27^lJd}5|hkYxlPcf<qt-e}OfNWfPVfush482-Cp^T9dfW}c(
z6;1PuWE#H^IvhFYy#lJnD5Tdn0;pd&xwS4(i*m99Z*t0OPENT8o8INo;NjQHtE#Cf
zR$$&cS7`jn)=g;Huh#!)&u7NBS)bi|D{5i(t2}>I8^H|r2MN(aUhFBTOR)vm7Sk3a
zj+fC+#H6_|<lHp|Jp+jHV`g=ZIIqFR%z;E6rGqRwl>aG=u+Ew{Xh}(>Vwh-TZqBny
z{;inD;`@)G@XE^fTGYkpAc~IK;wFqzXd7Y7(AAd|N>pHOg8wW++?^xH4288{8&=yo
zIg#fl>x&u_o#p<L6D`5N54mUejvd-LZ_b045;*B<wY{rr=TOPXRI8A+fi4yCjGkwo
zr0AXI@>TN;7>Rptz+V3@`l_3R%|pfKAC7ArMgtJABgjtiR$u!56W5-35fcuRq}$U8
zV=cahhK47ueQZuMvbM8(+%VH1uFhs*YPl$JU&#5nUFMXUh!<B-n~ACEOP1gl9F6;R
zs118VzOWoH2^vvSk}HzJigP*GXq6()qCq`j9LcMr9Q)!tS6|7jXcv?B{Rux|E)8)r
zvQR^Tb1~jm<1a7SV6k;U7giNioSRqHwxioe@B#d{FuDA|VCZM_i4Kg%2+w7QoY2%r
z*bRKCqxw)^;8X%o2qJw}Fjp6>7lnBaOZ^iUCpJe&ct*GlccQk}<X1*Fjaxqce$URM
zMQ)P=HupAc1zaSuP8jcOMJ(<~Y_y&5%65djrd-FwrXwfb4Qxh+dfX|L1)le!)GxWb
z$rj`~EO_|b#Mexy*;-%uRr8s6VlHUq{Ip2<L*R~LmeQeA{q;eD1{_76x>Hw=K}AqG
zJT>f^`0y#m5uZQ3z0u?TC_g;oZ!c~)pndb^pLSCdCh*(2ea*91uY5$Wu9F@^`O(vp
zl>hLeipo#4GmX*02E0>keSK3hr?Ce`3nCq1ftoJDy_U1!jF%flOX&IH^BA|5bQ7ay
z37qdVuVT<^&WtD@rgiJq>I*;NTxWfmrNC~mbi6oK!6ERETr^4IZm^LQieWUEtd$zk
zA|N#e!5kpk{*rsHj5Sc}ZI<R6Wio)^mOX@5tl5e(WeHd^bOKd@j3y@cQ7&<gVvQh>
zz|!*}DN2#zI@CuGMGMLM1@+Ia{OnpniAWXRiZ?c$yOJjIx4kh8BS*2z<44-AEWblx
zs#(5=%Wu5veCoh}DI{iy1yiRQgiO*2G6&l()3emq-Git_CG|m*9UERyNYuxAB)vCR
zoJ~!&OQ+ww`3XUs*g|wsu{c7r^s2>tiB%M<3UNGn{P=RVXLhE=>4k-2zY4gx`;HrN
zRNky}h6aDab$Tt40;e#eIF*(AoE%R;96A<i0)8}+n{P@HlYuuM;ZW4n(IrxlI<vFm
zqeyt_6Sk^#=wZhaOp<<!MaFFyYH^BjPJJNy{`&E$6`l@%{+7Z8K|R%r4*pF00#b4r
zJ?WCOv!9ah)j2gji1c_an0h2spOW#k<^;D0z5_oFl|2_Uc>d&t2g?M*XB_Eu4n0oX
zpD2?8=5^Xw4`dvtoaIRvd!s$vq_hsQgJt>0kCvT(ZHG-w#IST`qShcnGeIo@_3h9%
zjHYiir^_Gde(xPEiWOVeKE<NSmG{C-FpE7Za9%+qWK88eJ)7C!E8G68bRm@gL4Q(s
zLo_1A+Zs;{+l{Jur)ThfEB35;OXjA^as5hF42#W!p4^h6UuZTzX~5nBtP8xoqG%$B
z*I~B|&YlUdE(+yI;%|=CN)?#c*-}!X^vE8&EswlIM@Qke5A(YjU>`2mICgJ)J7`dN
za%`>#p9$jP*e!9cP*~4cV5&_6F)wWL9Q~fF<y(aVNZ#FMLJVPQ+Hn?R+VIBkpl++D
zlK0y;$3h~|A!s5d)Z9p~_42~j?StmM74)=rhM$+uBLC`#Jk)_iiXge-)%6-B(${Ft
zI~tY3xCVo@u47Ke#5%lc2XRVreNeTsW5V$alG&`RT+w-t9zCiJpV`t&MhU!s|4?;y
z!9<7ieu+O~-v2u@h|ulRejhqM;5<c1TiL!(<<Tuh_Q2WJEpmfI%CoWgBMDzn+U|Gt
z`xJO7SRvT-;s<MwocH_sMk~zaRv1OpS7a;F?V9Eq{PSKgmGquasB;cz>z$oG=I(w^
zhI5u`b56ZkFMYpSwt~xCaNr(JSLIvR>KcO`bX3xt)+?I%s2y=Vxja7<ODc0-IQ>NF
zhvp`9BuV&M(KQFiY@W)gim~&T?3PKNdfU)X;_^LLadE{sI^k`xJ9Zi#<zIiH*(*ku
zO{)6aH&N=Kx~b>8+kx|ABr~m;w>g2*IZ_2od8Cd{eHpXV&fG=lTQFBJ-Pu9=@Bdb|
zruhfy=w7P+A&viH<#e6mslea~Q!~Tp$VksCoxFsjv$L~cjPNpdVNVcqrl#D{wKSK7
zUjR@#Zu67P_|7SQ%em1OT)aFlHpPt9&~DQsvVHb2wAEtb5%l<t{qPvp4{*<JU)9QQ
zANX8W<}%*CPHneB(`5)qFmid_9rK+1H($VkPbxG`-7mVYCNf)v?IF$p&k16OF{fW1
z+*KiK*BJ!y^x>*8VhOvfn>8Zp^z+Zh^FP88um}#rM>}op+38VNBnFrd9#qdw*TqK2
zEn8QJyTJ0n^<UsR<MB$`0ibCc2L}u}#iu}@jQm4h=MJg}=yy6+7(jMpjXt$#y0MR$
znOK8~H{9-WZ%O4(BZCvK0geTUCz`dM7FF2+Hq-hq8}vu%ei~p=p?O0*PJtpyI^{`_
zFjsALeTGX-L^zZ&D6BA%cMa-9OW(hRc`)n^NlrH9pi9B$DDL{BDbr$M+rdk?<(#o=
zCGSv{^-46BYYR~e3)?7!VhQ(o1#byQo8`q0_6gjgg}3?`D93P+367d;>Fc*26vKV#
zG&ST4wjswQ!k|GcoDckF$1+seXv2zIIY8Dy!v!`G6s>x=&d~kksWR4}xd&ie49)xm
z`4(2ENL(&*`_$H!tirZ%`?lo9jbdi-#r;BEjUd5|t5=UGQ%@oLgEeg|NkQlKhENdm
z_g{0dyi_@2R&E4cPIH2K|HqFC)awB6LO90YXysSA2l2tvL(Xjl&izTL4@d{qu2qHz
zj!zC|P}@zd!sYd-!%f!7IvEL$<0%-|A?O58jn1D93cXL$7jwzCU&!lsO^C)xZ=zc{
zxBcm(>FF$%Q<n1I28I`4#{1r!>ord%-NkQoU;HLkTcGx3^XAR1xxZ^bA+6{cY4)kD
zt@ZE_Y)Dg+Zcv0X^fE{An!y+u?{3P5#%VNNvvYIu>(yE|GgYL<O0gvwo0%o(c8812
z;H3KTLo*hZat5KpcXm|pOm<h!*fID;%gV}D4lj1>J&SQmW10~y(JZ${MR`1ubqAJW
zdHVT2US6q?f?LN-K{(pQh(2L9;VH}`G~yqO5(mS6Zjl7%2w>^V>w}~wfnC*m@8TA#
zO9@jwO@eG0KqUp?iho|bvUz>zQ)GMChWdLR=LKx{3-aHvrZb#N`<Q2;OD2^4<OMNH
zYXg->PEQXlslN>PI6dI6)m1v}eJyYg@>ukDP_Xzt+#+mFZYnFgba0qfbx=PF$V%7;
zLy{hD!MD`X!~{tQjaSms;^IXZJ(;`yU8qo1-7h6+W^R`lA^gUqL3CM6##jK8BaQg=
zyVk99U!G>W9*}yr*Iw!V4!ZW;^tT{Y<7!unga)sfNcQL{8-;e#t2`NTZh`$(ZeB1&
z6=gj<BipxaL*9`aH?wi>R+cQxHZZ$_#Sz?d1NL)?;V(czE%R-iVE%#64Gl$t%BvT`
zdAUJ_o-4Io@5%`a#H)ciiJHkV@55uYzqN=qJ=m&iB84;mwSHl3ZJHdm)i<WFhgW&-
zIOpoHZHrr`S-sNw(8oSibUJtEE5EUVdK9yG=G4iPs<#hZ)Nh?gD6OcF(;qUHrgP%#
zeR}iZwq#lZ+*Ak2Oe5(OM#Nf-2qBd$FS#Z*IfD2nK(6QtvyR1*t%mxHJf<<tl*@w3
zeS(;v%;h;)r7oOkkCHuF`Dl4rkdN;pdVN(~b!LGnphM)DRHu9jbA%uZk0_`DD&7*3
zlekg?QeZISI42Us^)=O?MrP%x_N7bMn%Ng(uxGcRKKUBi&usF@kt0l!0m#uGIA9r+
z&D!y(^0YCE`88{#teb;c!WNyu-gzuxOjdS`J?R%v;Ks})=rC7wUi?XX#~NPi^3@x#
zuAzaf_>44fGQz?v>GDh9vuL-YQ4V{a%qV4V%%k}HQwlOK<mfGlu71xWf`UxyI-<#I
zAx_zy8>p~WH0WTho%53O$@c6SpdERBv*$11Jl)zm&L=C~d-hjfiRs+amC==%wRFZJ
zb3HGFxAOdII;c1)tm>mwny<qiXz9X4xz1Ezf%#mLip1gSkn3t^{8I;ziVez<2sD=N
z-9g#Vr-A%vYSLB;{Te!_{yHYur<a&mb-7hoQz=`QT=kgO&2{q&3o9IAz-akyOv!AM
z?d!BO`s>@_l(mQZ_*#9<S4ju<ND9^Is;Q~z)vE^%9fF@c%8%av(}$)FJ^GasiJCRi
zY+Lc~%igTu^2;0$IL#v~&Abig1p|Xx4JZ4aBdz`+DQBaiju6%%j(^KW6*cdEJokMA
zLa#&*91@6(J9_u-@`})j2R2)nSmjZ5Xm&?mA-|B5_4ZA53VUB@PP_-h<Z=8xdFxE1
zr#979R8-_BfA#O$xwC8DW(!3>hq>a&)oz(;3FqDNM3q}FFYW7<7Q%0l!f)}Z)3YNx
zYQA!rQYAh(e*Blj)vHXbKD8?$F2D8#2{2GLtf8wg-{d9vmFjUD%QYKKN@rW-6)evZ
zmNg58=ze}4oQM#8Stech2Sj7PDGZHYE6uR!dJ7g0M7>;VOr$q5EZu|uXFYAs%G%X$
zCa!xlzcUkw!ml(3=`L|Y)TgZLY+ljI0J<++t5^I#tB8s_Ztjs6Wo5Y~6IaUx$vj{S
zt~SJb<8)0>$S|vaBC&Ede(@nXFTpb^2O~~g2jJ^;&|}->MJnWL!U@F}B5md6TFyri
zQcr(S)k@4;i@-y%ZGVL5;?hh8B-r>~zP~FFcZ_@r3L^u#R2Oj=kTh?NeB;)0nVTOr
z?5ob_VFprG@6H`5lIGNq2CY#Ddd$HLG>tmxbC7L{(0*vO*hY5sY835n5jt3UzZ#QF
zKF!wyp(pkt^_t*|I}=;Nexp?1yys&_vhD&5o5QgouZ67J({Zg;U#4GZ&Y$W0)e{H*
z046GLU1y5?k8Xr%5c-KN+<!r7_=4}@(-yz_zF%l@!sK=X3pQDxN^Qsey_>t6)fYz>
zwCz+o{Y0`is_(IHX&|X=p1{V}YaK=BJeKUuk~9@fs&3!@%a<iv{*BGeH&*QhHb}P_
zw;OoqkWo(~!Zy@D6Q!A)xLQ!}y7uweE=;OSs<zi%$LUWQRloT4eN|Oyea3?=)dDbv
z-v|*HZMe|<M`$&oPoRcBcwl4L3ulk(^vL#2n@qpFe3J4orj=#?eo@;Wmz8UV(xd06
zN5?v^WIK!ohn*gO78aIyqm3Ma_Fn!PKzSsz6bBD(9{)bqUm0*6ClFZB7`|FGR}NlU
z)7YG`*W_WvUuaG^74~tjOSjFkY$k{$V^J~9`^+ikHv8WHDCga~caz8o-=buVbb=}F
z#^3U)hV7vWOkm#jCgm6MOXkrbAt5O=5}bJt2zt9di93vl=rJS6p5r{;mLD?zxU{Cm
z8W8{>ZI>si{qd2(r}OAWgBSg-MxBQ8$-xtN)ag1$<&?N|zsg3vlu3nVm1)zK$B(8I
zkRmU3zoQqGhB$(2vMC#qH0_lGHxRgqSAlTo-*|X(eqr25%|5UU3p>7i@f6=)URFjb
zQ|abC?6Y@eY(TpgwF)`uN0D)575o$4qQxskMbHn_=)wKXyVdug_lV9Kddu;`CY>J)
z^z;bw2RrZOzr<aubeH<@;)f4DTBO_La+GsKN?dOgz8wR7Q|v*CJFuTMq^{bJEmDqM
zK0!JBPZ9s2n_vLLMA70j@@)_h({1~{7*P5VmRXW;opyr;kJWrD-9BsD+r{B@QEO>O
zAfN*F{BLiR;X82a{A*{ZC5B{-Cuc^*0(nCkzr2b>(iuT5a$Q0ok#OH*dF~-biuYwi
z=G>_k>+N{RT&>`i&&kSXoBPCEY*TVw{HA*e_dJK0%6^2p2c}0CpkQgG2W{Dwim3~<
zv9ITXRIVEb=4_&w1z=XeMD@iP+f%h%bFqfyPnd=aDnHMn+KcpD{(#)IN%bC>vEX3w
zzX@Iif7>5Vp2$kf53HN2eRbZIW<zn>tX4qjWhHQI-fT<cfb6Z&iaij(U{giegVK=M
ziTAA&@?5sYr-;Dpr6`Y>kKba5=UiP|@m<9-6Ye#~s05M=;Nrn~FZj}2?6>psCSl@M
zJvqb(UlR4XR)U&yf+O+TiIXS&-QvTVnr57D-o#jDYw~M8q*%D9C)x~CCK^x|CHg2S
zeZXlG^Ol~c@)F0d-gTZl?y*Y2giLYFmEfK-|0767FXe?#j0({%U8d5B@t*p(b`gyC
zKL&7STPD0t^t#^F+sjp={I#n0a9R2?fy8uJc;G1gHlfhPK!s;1yT2sAu_G*~k7`;a
zXns21W|qFmnVHL`WVzsVP_oq;9lu3s`_zXcNA7KB=GUm21C9#kVl|?9Dk@)KQoVec
zWKgsyA=U>k4#MonR$(wlhT78`633#E^*V`ZUlREjmgn58`y3Gd3kKsmch(%e@E9B2
zZl8q%!5-Nv>}ciEnTQm;(!0KQ=(+z!WgPU9)iLSpvc;pVD}G%V;)y%`l#}+~0$l~M
zw}WcAl<rsL7wm_)Y&PCM<QIt|pV;#BeIi~%!aMk;6-~Su{UXl(Vm@geHBUCDU;qkQ
z0JbTOVw*2VrU-X5R=SBbV}-h#8#RzKSI+&?n=2k|vg)w&HLO8a2UCc^Q*3&8qxZzH
zsQlJ04QH*brmeajwZHi$z$td~HOOC>A<WGFs*mx*XYcNPpMEcUA0%}L*q6(X>6iA!
znygpzzZsXH@x^CvYQ_1sx%5Pui;woydQk$czvpn@FM<38^MF#fy*DFa*M?H$Hy~7i
z7S;0g>liY%lzqEmGbw~{>i2?cpITs==NLLerM0hIUFwSWNN(N}NcPTlFt39ZD1O^s
zKGUQyM%v@M4s16{=}V?^<D3h=Jb3#k%5NsfjPS=V^}XxIcMaW{3%4$}jYbZ`jT<If
z$t}k$zg<_;A$?OG`+iC&P4vLN*_zvT?i7vfBe$hR(`J|=-?p<%n?;?pvE@CwJwcuL
zC}4X#+D=kl7JW$6d-qcwK?82ZUX(Vk(*x?1FqdbhrO8fKT54mP>FJ4PuIHttcZmm`
z{aWbyaC%gi^vb^EZU-U-GNow{+zC_faDT~{(V8NxXR=F{%nRhvOV|9AsAfb?kJ}<{
zOg@sIVOv=r*YjlmIUx3<qoW1xCw-1AW<9CBckf>BCqijnWnM=3pRtPuAatXIUCRr;
z?<}slq2R`i-`EAU_Vcsj>W5IY*M8#i##Kfb>cK)Qnl0;RY=rpKRtARUkqi&aA*z7(
z<48%NV)nLg*RB(eW1t}G==R@oaHtDc=L{0|W>Aw}94$_l+5S&oK=w)RF;&$lnKalW
z&`(xkCz`v0)!R(|p9B6O#%JlB>XKVbt*u!+f9icV45j$sY8F_kPXF=AfFq+?oBq}i
zBlbt$ySvO;2Y(Bx0#Ui=j9Ob=9r~*5b#A1G1=n#5XkU7s#3@>orQFP57I=_AR0!uI
z;9M|10rP^NVKYnmHf}5HC}w;;+<$yrU+F3!@Hss-=9<Ng8yr6Bj_D(N#Kd%&c?ajW
zYO-QbSW;4wFxjb=7qd9u(02%82vky17Uh=~v%O>LTlhj@@b+W>3V+JCm2-RMVeln=
zj}VP|uR%Tvni!aHd)u5J2-)D93v4c&=8(s$-+si3Mya;l77V*@`91oXpuS?OqYdzr
zeqp=%Lu`>=y$BV<&)BLmzI3rCX<(|3A>$b21~=y>MCcl;s-zzo>E$oiP<df<0S}@S
zO)feaauW>T$uPL!d3lby%6I=EoEMZb9P!vRI$VCZpV*gpqwV=n;DrkpaI6PX!d>nJ
z!#yo0r8Xom0aI{-8lV4{DE((|NkJsaS(HKxm7MMk&L$cQGoIET9@&E>7ZQg7Fv)53
zi&xC+kSdNpMeWTINxx8Pg(F#gJmczz2`I0jA~r51ch?)Q$i3H4>m1O|k-8^(;`;KD
z)`4y{9vBo{TwE$|SVu7!Hm3`uQ&HFieB-XXoLuDML=L<UZc&!Q=n&K$zZlLlirrL7
zy0I2(*B^``gdX?bpBlh&<Y>LeH#}$SsgnZJkzHMq)?R{ctvuD^xd7@pv|(Qo)HiP5
z{uHJ{+=Y`EFK{UA^PC#W4C3`%nWz>#aNvM`k=q$?;zFT-<fQHxYxm8+YuZsXo}ZhW
zkRiVb7qZlqP8zx-Ba`20W%*voJqbb0*V;TMkO+4ye}dKQ+ptkZtvmIguwg0uBzg7&
zU!=T?tKtg_-LZy}iIv{KKw{2A9()V?z{Mbc>zK7`@3yD&(pi`NTN5X)M3@&m>+5uM
z-MHp9*S+%YM03-j+88r->Na%db984dzNTUWpBjsa4|@cmjg9dU`!b<m!$nxdVmP>;
z5MC(kCxo$wpRP5wenUTWQp=9l&m}T_H@()$sryysPPm$gU(eJ|a~ugePydeI`ZufV
zd3XLwmnv=VPiDFFG9=!YM~w*M)OMP4`1Rw7NGF<>S*Eo~Q9+?9klS|byYt?Vx`_|6
zrK<g(KO9UuV_d;{@#00o@{4LL?m*3;c}uUf64NQfOh6wFs~0lDRZ6{tcT`Qe<`Saq
zu;Zh(OvW_#Mmx@Hm?x9o!LEoRo@Ph8t-#uRR1dLXi9Q}PBhpSTvw2Eqi0}fzis;a8
zOf91KF4Y)vk3GJXXXWz86QReZTkMtc67#x~-?Mw~u4+xbtu$n&GTJ2}e~+10{f2@;
zZhHP7rCtdN1m6i==o0bs<fv#SMi|!<#cVXo>oc&9tepB_xrG_cFzk2HxRDW3my95t
z`+0BsygV{5jqe^lrFpcswYIhf2`o`zbEGpSP~2cGd`Y*GyG6`+GCY7Mndwi1u(mY^
zw=u83MTh@L7i<6U7fVIm!^cIuYE%N6Qd%I-<fj!UegQ>z{r{%jO44uM3|k$AqEz{L
zHzT8{+pGw|3J32vB(T9_%PgyX6P?Y>BrK9~6ea6ZTGDvj@@)I{>kJo9-})?TLi?e<
z`R)ttV{M*@{o${wf`$QuTK_Us$e?+EAyFWGKOIaBSe0nLiMih)R+hH_(z*~k*qD@2
zRJ7b%nPJ?WW)uhVN}+bz5!xgu<9cLvwlV;+Vh)y8CMKc5xr`|vG2+X%UU~QN<6DoV
zONS2GIL7#Zb_4N`Dz611JIHh@@Dic(fiqF+P*Y0V+qAT=TS3a{>8rj?Q|<O3&XRrp
zp{DF35w8aiAj34(XUvbaEzmlaUa~@oZZxz&xRw9F_ZGorI9aD`dLE$oo`ow;t_Q9q
ztn0(!wE%<2@1L)5N0?#lNs-6WH5@Mwwk-);w||FdOgYB!4ni#0Izh*{^_G?w<~M9T
zTRd<6C#XCvnYwjCTBSjdt8ibmbe0?j70tXlxNY@p1X$>gjSnmM;P;>y&(5Yf4u4ey
zmbooaqkg7+_{B}_YX$|gju*?1q^|`U2rG*4?jAXH>ITcwqW%_^=>*G{cOOf#uIjRP
zAs^=D1lrm1VwBtxLtOG$av?=CecyjNMGHe<T(HoQY;ft=cLSV|o1ah2twGaAW};e}
zPHZ<ySRfvU<3$J;5*&6`Ey9HkqYs#7^u=he-PhNuHp-v<LPAd?>@8g?`%MPbhO2|B
zN#@=fiDb$J?%h=%V`DjRuG2q6=$AvDHW32-dur&Arluw$d77>_zP>h$IGby7bv^T)
zrN7^FNQG)e>JJGK#9(!n;f92SQ+xQH8Sq#_#1wk{WVfc~9+*psc`go<1Kt6gHHpep
z{TU2KE&54v=~wX>G<2biM2O`ih(c})qgyhMpFMk7$dHsF&q@O!K~u={#`>DU&MTa)
zgf4ZdGWe+RX`hh-y~f;9o#?Birh_U9`{m5#F`R&UlTcikmGnI~nQ$S?te(#hUFB2C
zwe(4>noA&5-ISDk`T9X_ZfIKCuN<3q)Z23{%_i#)92j}HbwSwBNKP*P?&C7HX#5G1
zN}VGkFk2H6)>Qq3DDN?A7_kM*GA91Ib5w12AWui6=b^wj?oR@D;BJ*ZCrr-EyV;e#
zUl4470z4ycKL%CYS@)2zhxACyVTA0>_#q~Tv#qL%>ldNiemDzz$S*!vEkvXnbnM<i
z#Rjtws;OqTZ71Am289f2e)JH&SO2O|WbsWzoN_((f<RrRJ!oYunMrf=;*laY58$i3
zcTX=>Ur+tHUg<M*o8G(PP$ztatdB{D$FlRCz+H$%irJY4mE~eAxIy^DiGvc$3-R&s
z@Zg5<_Vf6nxYo|IYxJV;K&W^RcehH6-1qy2iR6UIR%;6w+-P?=<2KC9ZTqUGgz{fY
zV#^My_k<nSHk_lMWOzv|D)QL2Evrh`Pq46e;SK(|efwqh2*Y1tza}Qqva$l79z^Si
zE1NX`>%xY1{`L>dN)B==DsPYuEM4Nx=R(q#|9S_JP9A$AQ`jd8r?mo11;Wv3uUoey
zv-h_Dg}G2u69^B!zP^-g@|yy=skZCs3zk?eK4e&(J=w~g^}Bj0>cTxIv(R&@PW5`S
z9D25c>?~3NRt<!|WZohB!XUJ(|35@D{<m4ze-yd?>rt7BCM!%N$>PW#Bo^F9L4!(Q
z4haiynu^Xf3b(Ij-MiM-1t5VEl<|%Q#VNb*#wSTvF(|~l1Nx8RA%x~c?FQaV>=DJo
zk#TMG&N>O@Z~G1&Y>QXjWp?=VjRMLciV^^fA@jnS=FS4zZzO30u-h*_t5lkz;H`iy
z{-7qWYuIUP)yN-JCK|{N5yIg>`CWe4)!i+krDYFUcY16|-6bn64Z0=%vF5qQ>t*11
zE=wZ`jX`m$cuINwIjg3WdkQaO)PZYy?5l{i5mXB>C}nX8BVc3Ck8c&i4!j0M(jOj;
zy?f}%3<Z_tB$x(3Ho%W@7Ih1Xr#uH{_*fn^tn*>A!KSSRnB)QkXm#w=@aebNf+Jn3
z_RZ-Xw33vrLJG;(<;nUQB(1lBX*Y8ILggPMQD$b?YQ7<ZyL+e}aHmluOJS75!C{U7
zlQFWb06?@PHM!!Pph3}aI-&b83Ebj2*S86POKkOiA!6f(HZ1Q3NHQ>t%%BB%CStP)
zx&+?D!+Z8b+{{%Au<R%@!jZF=@0nKIlYTG@aCQDk`-;(>ku5tc1W5VHhG?~&yLQ#T
zIxkk~N-3wI+~93D1G-}BG4qK=dibLp;9<dy1bysM#2#MF5l|>Zfrsg<8nf+R9{TYk
z>*|MFI(EnpBbfU7^O0udYxp=v@P`G);h0U<OrFQE2EO8W-7$!H1dZw8CSd+J_%8{E
zydCWBj-tIBNhN>7-KD_LPF*gEkIyM>L)<1NCiY3))}&}-p-i_B2Yf;qX=xy1Qn#!u
zFN}koK?9fG7-`PvhjxOGCq~@rdycAGkB&~&Km4T|RFN6m{?v1A7p6QWCYq`GznibG
z>pku|ZAlPVvs|-Y4z_sJ7&(7rAMx_957wCw<V6uK<EFhNKXqemR#2mq$J@uN|AMc(
z_d1T!F+ZiYpL4%$qS*})b<-to-?b|MA)SiLIDgQ7n`ht9+w}yCg@ix{6JCsKF@r%$
z0_|y3H!};%aIEmDQ*(~NSLQ;+?f}yPN0{=r<oCr8_8uQz@x}Uj;Hsdbj%H@RroDvQ
zmhA7gF~gl|BKg;5i{bA`O;0p@puW8kcq8XlUykaUHOr)VK$&pO$!1(z0wl8$ZHrel
z?4?{Kn1BA(NOY>G2ix$&X-&U<I_bussVOG}5KDeyh&=QrEG&#^Hv|E$J_(@U)H|?S
zhkZnI9{uGqXQUh7Q;fB9@?GU@Zk2jXwhgR4HtDZF=56o7XG>PDkr!SpV^<Ir6NCH_
z1>57bYq9hf(W_;EHVfOhIM#ze5Ibo%uooV1JPH1^M07|Q`U5c#Sl$@ED=aK*)WNb8
zunng^o!*5OhLB)g>SY}sE+3BT*f1M&P6P<&N1BVzy3O7Mp9^=a>?0;(eID(_NILkH
z><v18>XbM>P?C`expbXKebU9JV?AZ=^|1QLjN$`n$+1}~KkV7^>O5z{f=2Qs6I2vP
zdk77|jD@97XlyP|-Hj3&PtjYsY-(3>cMbrQPCVg2`UFiLvuYt{-cC4bsK)cC!|j9z
zFxhpjP)<F^3nOT)JzX!83v$AwGM(Is8CVfx8scI~4tqQ!<SJDj!1V^!Ajsn0Ehg?5
z^-v1^-C=XDk1KL;$fB?ZjGo}(fvqquD=P~(1;ed9Xnr<s)a~QPR`@D;u2pNt0Du14
zpWWTAs9$%`5oM&v|A-qx<m*edBY9S;m$NWCWjpO%XWcp4AtK6rnJw^5h_mx}CbrK6
zSe<?nGQ!n-Z+hB+RE4Gj+^E0LBpadO1JbnDFS!S!585yOQ<m?4cv1W_3i$u-Z;xLQ
z*r60E)Yu|AL(8ZA{mQSzFKU4$Wi#-lYY+dW(Qj!uX)c+C_Q4Yd^Ek2fcfX*@n=5Mw
zwur0Lgo}-1F$^9G_+mpRB7e`!Kw*@^u_|QELc3=qE5Au{8Kydn=EQI|3mWE=*W*}y
zeluP8S}6`dkLl*yF{2=Fv4}Z5rktU1jiHy}NP7lG;YtvEeyF1zM!rcsz;NXR;01qU
zIyF~sFogjBJ1TWA8|Zp^I+*l&17<n-y}J$e^LpX@(Af0@1m!%(@n3C@0gxrwlyM6M
zDP&l8tRY^-79_3Z^N^HK$f~Y0M7(6Iqc{wqDVl^#C!~HM;yl-VsmeQR)(9g1<qSk3
zVYvXw$GUj&hDy72sV0Vos=^V4h2e~jF{U0<2?z!Pi$6cJa<lAlDA1$H`h^#~H{V(S
zfx_5gxU*YLGdO9QwJ}SLdfC{d-Lp6~+UOTr)V3mb-Gfu0Wzxu~(McA~sYUw_9y$ac
zy=Ev9+Sp%YFNCl9n$QufZ%XImjH7^tH9Oajh;IOOaiaRbVAd6>e8d)kW5~WLJA=zI
zgj+r3@|kQ5=;4V-GJIDilm#k~a^!rXZDk#}yZXpY9+5pDG28j>ufHVCkYe;6p@PF$
zB@Io-4m+Je{Wt)$VYmtII`B&ZbXu~<bFSAMPHjv1JGxYLfk@lU6M6R6YAwKeCiIpn
zGx5QMiu`@XZH+E31rEffoqZ+>LNW0+N{YFW3}yHLU7>bBm&0}=$M%9V5G{iGQnb_5
zID7ybz>;`ueSk~|K^5TCT&>iZ#zV&Q;FzF6GXfp}1{YzAuiJ4`;`)327`&~3HP^3S
z$3AM@4|tO--v23x1%e{iJ~l}#{tOV!e_9g&wDtY__p3Jiz+1<~H2_~b@Gi(y(wwFj
z9`Bn%M)R#{?PXD{40<20YQX(VRnY}q>}Q0|A<h)L&O`_nKNicH{#~<jhEH?Pr6?>P
z_)|`&9}Bez;(erE_#ia2Mha(K5~Pj?jlvN-g8T#?V^JJz39qNeSMIEy>Xnu6eX0~9
z&T5oW#@wV&5_p(7d3elgBJ^;22_0Z&&c${n#~BhHa=h6HZ%v{8VCPOyhtE}JEk(2$
zmkv<lppek+oL}XKGr@LfVG%a%?7U)aW;Qr5AmT8RgKsCUD#aE~#rZM3Nek0UX4ck+
zC0ySl(~rExM|{!|B<`D-YUWL$?F<z*yIM&h;0jPFa$7&>T;W$z=h0RA0k;|VuQTeg
z*;!edn<Fp?P#=y@7oo3AOFKR!P0${iUtC@o#D#+~haaJ6M!yE70a5ks1z&q^s}MVn
zzABSYDiV9B%ukw=PYVgrg1mHiKI~iRGY@HFE=j0I&vQxf9=s9prnN`#{hM3-U4m!z
z_rwInE+#Df>Ia6Q+YcXJw6q+-VU7k8f!ZZJ@7M}Q`IB&lRClFL_Jx>Zdt;*pMD)dG
zcQ&>XG&<x+ctf~rC*jlyhy?8`FR~O6gof>nT}NaY&_f|3q#7=Y!qLQ{G)RHO_yZfy
zk!?-=q1;@C+X$gIfuK<e_Lt{Z3B#lnVm#d6Urr^_&X^eXjJ1ZP_hdDgJq}B|yPs?O
z39*TX9RK!a*O6VjjEFJ>QlOj&b$`4U(<eJ$jD2;}uIBpsB3ZfI`$N+Zo8*am5kNA&
zb}iA>+}xalR<KY~B<q#~T$UGed*9-x{XuJHzTRkve?>{G5ZM_UyHdPX&1effebCEi
zRStzK9^)X!K#2r&BOva2Ti3f{@;}~K#!ZbDdGT>OhooPg4RVXuw<A}YB2<S(Av0;9
z9IkjgXOHUa>}>js7^*vWQ8MBX^HWKf^`N?ZZucAv8U!{qLg)}5G=pI_%TlM$7b%k!
zV4{(i2|Ljrf=UVpF~<R3LXk{;7%V0^IdIaDnvU=SgX-+Q)ZjszDe<bj>=Z2iSmgA}
z4TfQ$QWN#_Kr^DFW3234*pawy=z|f=kn(cjDlNN$8S3q==Y`WVGB$78Bx3u+(*KBT
zjM6~Q@8|Ls;%>8F+S;PAoaX2Sx53@1FmV$(hXEb|Mo4^lwjOC<ya~ViBd<FG-rX>{
zbzC_<LevSk9Q6GMMQ+{%ln|1`P`r@IWw0Dr?LQ;d!2W{jIIjQhfjirpeBk+^5&6?&
zp?yHr5q6DJW_1b--YA)ZzdJ3>+gDar9@@H@_QIKU*vR9|BIXT$dO0gI+@sJps){m)
zZIFeQ3g0(YFR1U`t0kCP4&PmZvS9A7{z%W3jQ*!!w?fD-0@Y1DRzXQL^eqG$?W-D~
z(I74?gA*0;nT>sl8tAV{4(Ne&qP#MU<%wZ=s*t~J?d-6_X%72!0$18njvHN&55lb}
ziVqa>^<9^)(7=Jg!B3GAg4lImpK${@VPJC9)+!c8(bN;kj7j#hTr0b$oNBiSZXZJI
z?mN!wvN8_ediissmAkO7c%mR{pufMLvu)^evnvbWqifdOLBT}4h%J(rbaV)=N1~8u
zzO!~P=j>w{+<s;qyIXpPhx<FPBo(Z8rUy_2?1A-v{84D4Mc4iqQb=Yd6%d?7Z>1%f
zvA~~y_u_xCtm?KL?G8u$9~W*nOh=S1BxTT~BjKS<ktRB(pe<Jq2{x;ufFzlv*iog}
zxV2U<bMlho#$8VioH@eUDf@#eMf(&a^KLpY(|++kGo1cEZ^HkFwUrQAs2){Q-*rTO
zSIa-iJptakOJNhuGOZ;Y5_(B{?R4qS6t;MwJHSY@_sPLlV@dwqMaK_E#sNwUlZq1P
za}#@jg(ILaA6hl--u_|olPx;$YA5zB61L(kk@l7_o}_VF{GilWB>0-K?@YmVDcB6-
z@MXqveA9+Iyo!&8LUS0I?JS8*QpU8D>v%f8NkVYZG85w<a+|kiC9mE|Ey4b~rHS_#
zv)QLA&wE$jIoUXk6-ER5>vj1L2%G*yDTjW+W@WieV&%JqrR8_{E^!EuulY}k0DG&)
zkMR)!XSe1<s1@u>elQQws=S})FHra87?q!zV)GyI5iAOPxMg5}qq$*=Sm5&raLUkS
zVlB~Vm#Q-uu)lvS?cceRJ36Kn>7RzgKAo69X^;m5Ed+fLW%2*Wz3%g8>h+J$nxSD-
zMqYe!02A!KFR#ucHIty3T!v%Q_-=dQ0u4xyC40%L(Xl@A&0d_M*vSPt=?wU$P06}6
ztb))u?qw>7v35T@U!|m&n2`T{@zPpVA<0E3dG{+Y=lq53SOPZxIlOhkZ;f-}`;Z+b
zuTyS4+k+zY8`85e#Ex?wi`o(3|B^(6;q&YE@deruR4O0uUF99QN9~KJVL-y0hj>8z
z<E0;AHYi?a7k{rYmq2~VuNoD@PCR@#l2$(~UunQyE6+Mo8~qT7vq?1Z4g~Qj5bj3-
zFUKs$?@^T3g-`-Jy9{j)o&!2RRLJ3{tcFn1qRRYRzp>;!TEiAN)PcPosHpRdE+#{$
zz;s-h!KJP}MbFjw5)iRdLMI0EHh)0#>*MV`hoXmlA&9$Yz8!4%@s1jJ6w@P_=m<aD
zm**ryUz36o@ke!JS?K~oiSmnMGbIwYIhN|C=Y0FN&zUD6K||&s(FJ}8ic@o@MF?VL
z#7&lsiG6rd5w@EELJPJgf%@L+5Nn{D8VB(|j&yg|Wm_K}%tZ#_!iBQc=FV7`+4FEI
zS!t)+Jr>4Gy1L5GCr6?2P?d7b>VKdDf@Q}OsvzZ4R8$nS1>2sot!?k=AJ$9Pg<rD#
zh^i9dd^fj<s-MsfV5LG7Dpg4x`as(x6#Ik1rZ*cC8*$Lr!4yIa`{$qNToErLmAQfI
z9V#tKFGr@7bH(km8r`V^zprJ#e3Qw~WshPk3)0LyE^qA3F-HdNZNJhL6yP^*^wl>e
z-zizKE@E10SW_8FA2~EUJQ(YYY$W_FlRx7Nu!jW{%)BZ#+E?EAA~VaTr*d0W3X^2e
zi@=6H)Jv8=B*dy5G|OO^C%{A7`CUiVgPSYL!p6=nFtV$wOD#O$<JVl<as<BP#bX|Q
zOVr?P3#1>{ewLEI7xWW0kW%m-4b|V<xboH4<=>)u(;s~L5xglhuB=0yx7xs@$2~sx
z@J%ceo$lLN&LHBsoAZ-qB)2}5Ca!mx7I9O5)nYj|i0d<ekOCzWENHO&;}Z*Z6QpNn
zr-E@&R8;i77}*W*7S>=6+~J`MMBHN-@H1|i%;0J@X~({#>bu5Qoq-^HfUhf7Uvuzp
zo|=5kpW%jn4qQU;vu?CzDO!b)k+4OnObhu}*QFX13z!h)<>mkRDhsPj`KO#ziB~6{
zot=whITKHi%2ajCo)<<?NgX>~5Yk6r{u<_BT$r1JkH`MBGJgH$AJ{~&0wv*=ZBova
zlDjk*?Eb)M4od6ulLwDodC5+6Zb>zeNZ<w0o<=V>(}}{|1+_W573AmhM+Q=hKWns7
zS<isagndl-*dU9}XZb%d`llAKuz&|wT5lKav#fYB$=<~kDw)hc6I<(E25v=Qip!c!
zR1~XITd}h7%a>z=@la()M=b5HFC|EyKaVZU$kgWUFvW8ApdgJXGd0E?J6O|H^nzVh
z9z#JRR*=g{Oo0cGXo_YH`!_sNgKyvNeXAJK$zZ)TPAByB#lL<Hj*X3-I4$Ap*}JRD
zcT0h8fzO@OKc}q^gg?e~mz2CG@#3RIlXux{tvZMV1zrFM8`SF)C*)^^!CWJ?08m%j
z)^@&%g5J<|`TIC(C*4bzP;Y)!^y5@M^!Eo*{E@-yYH!8Pp>qQroi}!kt3YtWK2IT=
z?ieilIC1>AgRO0Av1cUHmcNx}9iihpc$)bch8j}zFbQ+urM*vn(Kd>!m*9W!cmCJX
z_y6$L{f}&<|3(n0Qkhc*-b331dyD01R~4P{)=-vBgpDvH(z*yY*6(RXVXGHo#af{m
zzgkEhmCE#Y;0z4B(~{ZoMjB=kTUe98<cSkfG&YV=_>JYK1YYoeG5CA1`a5-$IX2Ml
zeV$)tKXFmxw)a;Mxz)SLjHd0!)B`buTS_na(iFa_RN+s6%$YpLRl%d<ZE1})tAA@p
zE_hpMw0r(7918b@UN5?m3|o@1;Q<FHlq~!J4ce=xV`kg6&ahN{BVi-0%20ej621T6
zfmK^xGDx`a^(ZrK!sGy?+(OzVh%_YB8FLJy<e-QnX^|Q>vM?TpxVrnVZdvqM$TQ~U
zyE5^aY5^0icZLSwM%o)xv&%`ER*!bu4%NpQn3~4lm_|eG?D91;TaeF)=2<#L(gK(~
zUZXlgZf7|P^^RgsgVRfBS0VhOto@DgPnGfCM=vpS-zNJeCJo$HZt?Q>2J^lTz_tJn
zC-&T7ZE`(sng~(*OI9Htzh+v@7?nTSdO+l*)V+BmFI8JH9Y?154causOfvgsI<#_g
za(X|9yJ8FgjjHjjSpW{R5H3}<yB)YTOx6w>r1v2xjoJiIrb0~BJ$`?}Y6ZYtm0!$S
zO${~vI}C}0R(Ey8zrV$8QNGizagy8d-_?Q_MMOnOvXk$<dm!b~JOXsA@>Q>s9xH`1
zI@+kVX&AE~L;(fRqKl6gV;a^Q=tRkQ<80N{(SZU~_AWY|(Nk^+b`QAu*%A~YNbM{q
zhj{IS(P(0&OCOe6z^|W!9LW2M+UTAO@NDQ)3~>V+=U^bK#s;o!%;f9$1_9S_mo`M;
z^z=X@%e-m(_K=Ay=tN?be8uWAaoS?13&WNzZ{NOsj>R@PHbxRFZZF@$sF-;va|lfb
zCaKY6*0%58;TTCtO~v+})7)oyXn!3)f(eP0T(g^8!*cdO|DP=aJC(e*KQtR3g3_mE
z><TRw%2Aa%NKL38l|m=Np%Swrm2@s)Yohws1oexj0gc^?#8N({4)k7l&jE9=tUV$i
zOo|XbejJmWGCbv<BhGR1gZ7n|`~7=W(mM1^csm2{ASNoWVhQqJ%MEMmnWdR}<4!nt
zK>}k`wEjN3!uw|xNKTVDF5!+iO2ij6S&cC^C1y2&rbEJv<@vF#Rc`|SAZ#T0EC${+
zbQwRN1FdTgQ+0;x{b~~;H#={$rxm)ckh`}t2YoleVXVYWR6ZT@UY2_Uo>=}<r!-0T
z|7N8IO@ob_pcL+c4idCf7U6;4GSzkVgfr>~H(?<|<WK>9!f5WUeIhq+_g2O`m6fd&
zbD+2S$MX$sSRrtO{ky8LOZlh9c!cnttDZ*!TL!fORk*3ZIRm?0NU}-{?)Y$nXv}h=
zh!HSKKWYr#-~_?Dfo(c`nKqb`;O)WyFm#Ljf<=h_E9vz*V_;!61RR2F!2X=H9i>=Z
zJ8A@6g-Pn9H5tHp2&tqS6GQc_0vqvjUi^I;se!5rR?l_I{YWs^rWut#+``;FIGA98
znNB%!|B#g6lF<R)3evjUOj|ZWv_n?g?SW(=g!vvi7mMyb&*B?2NSMuOObC4L2JR<+
zWb*o<+xR=%t}cqbk>61+L4eUN_Bbad)(RcU{r4xY#ktKnd3lS|t&f-y_nc~qL<Csg
zWTMp?+vz6tKoLd7F*rJEh1-wz5K4Xx@PGIiW;U59WbdWeN(4`xqS3|ZSs+3jh8*hr
zI~W{9s29>4v<2o^{c_4-q{;hQ$dN8UI`FrCE%t}q;_NRROLn$N+8NiZD(%g**PFB#
z7!X>vV#O4`2KXc{<=Lh6Dwr9-FN$s(LgCRtE4ViBdJv}@MO5@PB<A8pp=^94H4$^b
z!7I|Pi`#rebllRFtZHnQwNXLF(o@@ZS%+?@AH$H=d7@V}wTH3?syKeB=yL4}4=PqS
zcXuqt*~L!)Fm_PgfP3GNP#kI6TuyFNW(nWtrly*b5=|Jf+`S4mfEM(hj93kD7t}^}
z3wQtT*Zo;za@0!~d2h68F~dsttcj%igU{PbN~DOKpp60w8#6kw`Av4Ve9Mgk%74Fb
zzI%c^zaur)uikpr+&$J}tG}w)^WR*V{~e9+U%&kyk=Fmu6^8%ATIXLM+<%SG{MSSK
zuZQ+Oh0p%~ZchI7h5f(s3%j%WhU7oB0MK{;b#(mSa&(-h2^JMQL560c8<e6MEF`xX
zT7(&_5&o;ZKa?URV!YZ)|DS;={>xk38w)}Z-QzG142Dib*m#_bKb?;C9Qr5>pfu12
zO$`Qe8`(#*3!!M{77~I0TF%@29*r?NzLj3@n%Q4RKYse;?jD(}ohHu3#l^vq1?O@^
z#L2+f(UwBj4!A2}u|fj{zcVKbiv?lf=&G$yE)pngtS|=fFwm~Sd)M_(9~GviGCsZf
zb2T73n=I>7hSZ?Gl}^5cJp43CS~E^lJf_&zgpgQvc6K39e8!zSk8Y^^y7a4j8QCU4
z8Z|1HSD$1_huw#$m#4pa4#f5EeJ%5W%eqX(pwi+MQzeV;SMf4-t2xQFhUrsj7#%|N
z%SSR1jh$9Hy^&E5tcBQw*|5H}v(pc=)ymt#KR#O>Rc<W90FJmnunU{Rz#mqw-1+w(
zlx5fFz1*eilHx#Wyn1{t`Ks@hz|*^!lh3+R9s5I<>!LSglFEY9TouzFKY8+Zs{RQw
zPoxXx;2=gD8QO#P=n0Vt_LLBcI|A$#HP4={beJP$3e^NVlgfI^+aE=NcDmDyPcQHN
zopl$NmlsSiWg<*gX%jAjRE!U-xyIXdUU}`LsMeE8t3ycz2Z@yFQ)$zuYE2GKZfkGY
z&QKrX6<Re(3CF6^%Q1hRzq57@)Y5#r!SSIxfsW(tGt<+9-*Z3VQw<#X_%-Xcaq&U1
z=?#DUK~5brys~3&Ce@ECj8F9o__oT*Fl?PAJ^9;#oz9%Fm9*coXV22OhMv#^WBEbb
z>h<deC4xj>p`S_-*DUrJrJ+&tXI_#M7+Fq_4Sac}aZ1$nm<|*O`QX<sD@!RKe8d1=
z{1}!!iM$%)X5=t|KC4bMdMGarm}C_&Xdo^;Z#%8ol|@r4C8rq=Q4bVRwaU+M7-7-Q
zd|(9CQ-?%i7iue9keq3F|6b&jW-iS7P@n+b6?UF@N+W%au&;vvO>+1RLS90GcZ?Ll
zqrNK078K`KTRMtY;=vU$&wPWpkDs54=gMBv^s2Y%_61o?TQ6SZZT@6p?XD%(H~N%G
z(R-3_saj3#ISuj%s*<?^+D)(&YcOmc8PIn6+4+?EhU009UTZZM^D%Vb=?{QyWG_s(
zl5T0Wxxi(242M4bTZ~w_$Q4Qt4jvd0&@W)zy?bw<AVQ=jbs#G9HXo+#u%eT+Wye$3
zUqYiY$#JPhIpsU>*SV6OrH-GVm+q^|jkQQYYe@92tWEoKV$Y%ZL4xa(j#SU#nsd)`
zOlOJV-=3ZekeIdYu)p`KH7Mj&RqpZH`4zE9_2p-~W+vOzwH3XcfqJ-<dn-KVDDWow
zg?UIa%jbvdN!hP$P6EeaAfgDXQsyvse&5!{&%X=f@q!hP?2{I!Agaq;EQbX#K_?^e
z?P<$_T*G%+_^J;Nv*2f7mCVtN2Luy$(Ae%TPpU2Ir1#FiJPqe29|y-Zuxp@MvxqNd
z*ac-krT|noZE`~?vJ}rlLyJsUCpT+O=n~XND8f!%!z<iQd5Vw4id64jty9S9p_EJ(
zl8m%WMnjGFu+ct-uAxh$LwK5Cr686=ulAT~+(D@JTO1#`e0Iu=z0G}P$;mzkPak9)
zhRvG;ZpP1y-^rbr82Fleui#3|8@^GJQpu`?{mUNiJwXC`>Gs316kUeh=@|4I!55AV
z0LBd%20|`AcjJ2?06KDyRN_{;9vZ+@kZ)ScU}li-kRfvy&pCqV?`mp17iZ0283-|h
zbq9NZ1bfO9+uoWzZ1@C_O|0U=-0ZKMH+`d{CqS@zde{~8=HGSHq`JnLj+)?UkhS!3
zZpspi<M$Cp9iOR0zcenD8Qqp^blQzc{T=sQZp_Nt?~TWrg`cg5wMuK~FOn$nm%3o3
z*>ehut=fL_>Y?=IdHK`A7vU=s^r6r8dCr@4078a`SWth_6$=h9ncuuOE5vwqBs7xI
z^Wv>aSB<2+)0WyZ031>_m^e7jFbE}Lkq!-gTa5u^m~cV|z@)(WEYI~zajyf(&%G%{
zf?D;~q*@?Bgg5~<=?#F(u3vABMp!B3l9O~SrpBE1S3%JVdKdGMqRGV+P<|xiv-C%`
zt42nEQK|rXxV~~Vnjm=|$z}NWDNG@Dfq@ekd0{Qe=gP`7lWGn?w4m^-Uknl)zm)Y_
zezc{Lor}a@TUuIh)9@j5Sh<fUgoV%A{%}L)LO_7vvzzzG8DRITh2%5M#~^2iOL*o^
zau*WiX(0>;XE_tKh^o8d^YPh~(3rD$v<76#{mp$Bi+cC^zpHX#{?m5#ab?3dp0a^D
z$*GYq6O9ZmKg^W;{0*>Lu6J`=&MnCUvRu@UHzY`=O6CO28oGxTrVl>xoK|jDR8~$k
zZzO>eYh%w(SR*v}{MmbTze+sey6MJwPxm%%Tg5`Wm926C@E}Pi<B`h)Z9roHb;R1h
z<I0D^;Ae=B=i;6xx?&B*{(CYomlO0)nRbT0Ilj6@AOJ8>kDr~YH*d<NhwfOpgU98R
zsmetuhQF(Vmb!RVJ@8vIEwazL^xCg1N1Ie@%CGrSSy@|B(hhc7Q%Z5^yQ5&)PyFoa
z@rv8ean;0x?YJ^bqon<CPrQ!o*i3&1>7JINrR|~ER{j*cQTJKHR3yhinpx<`<wK@Z
z#o{p|>FGhSWY!bJf|&^ywYR2h>$z7iB1zqm5eB$&PD@Cv0LCEfICfQCJpid3ISrK!
zNFYI$N=_|azEK?<j-jDK-|`M*Z}7$fy9$=vJLvfGb}vp^jA<FTyZ-(Wj(vSZ5x}e0
zA)9jo5ulEuKEQF2PUg4ONKhLDPs^xWi56s+bebMnPgvSA6;z=h&Z{ziTHz#D#U8lh
zsKTe%+3mndBkh3^-H3Y=%f6Vo#MdiTqG5i`{|OGWsmj21&SKw=9shAU73p5*b1!ba
zwQ*-#)i=kqWUFPnPrN~*psd800Txas-8UPQ5|<wy)931w(%Cw-XEY&zfrgj2EI6H$
zI~QxaLBr?6w^sI|3#RF(W3{NaT<49QiyOpjl#BH~FxmFM_pXNoyo3^iAf{OdL_-JY
z+nUZz4&%$!h=M7FKPQQrge%GgKds5gcIz3qxs451p>P#INX^s2u~LNPYkhf!-VSCE
zkr#ah0%wyx7c^g-JK}6Kezrb4oA}}@`-J;Qg7Kz7gJ4SCH$+-b9{Y*Gf<(4yEzo1n
z;XhyLdAbBCT=dLti;g0^bF!u0z<9dNjNNN5%&+>1{qR%)o)6#3e1~Z{s_O5#@`+kA
zB6b5g#l@b!`!)8TOiX(3Zm|ODdNS6VZf4^8LY1cx2e_@PkgUNs&_FEI%ULHIVEZcT
z7{mdv+(Dxif@Zo!lL4g_HttKY3fzR{=Ts0i0wZzy0BV`;WOH$Dz7sjxrbG=zhth>{
z$IR?(y<(46;4^wZd`UOy5i%k1>aeWdmvqfUorPyf%7J^?tTpzM?*HSS?yOf{06Pdf
zY*lfD=)-=A5Hm8k+YZjtFwVtGS*N-Jp;$}U54j=N7vq;{RNmg%xg#`5H+xz)d&~ud
z2XDdmIG5)NXGAd=HpGY(Jc&B4JEXd%Z)xv%$y~0J1H?XlCT=x3$L4Qj%hs%N+yj5z
zUOw#hv%SOfu*TEzpsL@f5sZyM(l97=iGD9_7U-t^N;>yf&qX;0y^L!<j9Sr}i%SL-
zBj+Eu@%e~3{fvKKts4CR#6b+jj|#muw)#VwR-20*KTb9edVJ1FUE<WP8+?N9q?)>7
zV%0-Nk{<cdiwVDH;H-Xvhd5YpoX6}9^5SZo$hb*{D_j_DUkZ`on_@`1UZd|f|4QM<
zfcE=$(cMA3O^ub`+jzfy(-spGBW5aY^-_z4YgO#I*4pc>S)YPF;_>(Z%Y<BQD%ALO
z8$Dj;Kl2M@01o2Zxg`0NfB{~9%wB<We`M(dhdebgA;ObWEZMAngHS$`gh^j?RFu)x
zC|sfQ&DWROJN-IW_Wk4YQee)1_VU;g|K2S_BIUiOYTjJtqOD(X_?lMdx&QjFU%&WO
zIwRFj6Bc`GB9#-(?{5~9bH<X4py1$O3SH2wtE-&zO(0{30x8k#yAt2!F+^;MZ!)j~
zN$tlcF=~S*ZjGL@sfi!%OUEOv&wu4VdsaG|sqGvmVG5|r^6k$OhdHJc5CbHtL`5@d
z$v*aulr%WEMO*IjcL40rlQ8jL($>_!`iheIH+pX*&OGfIukvJ5#8<~m^%oQ6z1fdW
zl4hvFD?9(K<ZtA($t-^xC&gxx1_)eR{q5UYU=$?1J9=^3^3u#yzQa;;l&ldJbtUk6
zEKMCl;ng$^GwZ@&oIAA@oIlLfREI3FD`su1OtYWgjwz-u;M@g%9(6<eGc}}m*yCGk
zZQ7fLEf=4>;M&EJSbs@d+itW)i6IPL3yjF;@I=DmAISH3b>oh)Jmov7S4+TkI5H=0
z9L-SSV6*vyd6K?QjzwdE!BI3r(}pbP|EUGcNnU+QUYzLH!mLjq4fK-zlr2aUaYe_-
z?c2YfL*ryZ?$k*0;KRcn{QBQ(KYY-M4U94f;Fuzi;5muLgH}g*dz~2&_6e{Q<Rm_S
zRvH>~3ng_&^1+j^4fZ2#hA<R=u>5JJJ09@2$0pFg0-lWb)|Qra(GG~dp67@sC%6sP
z5&F!uwfC(ic_m~07JulomlggwarpP->mu+W938X4xknb&bb91I#sA~Sk7y<R-xP3g
zr-AONrokfA+XHye(sb){V!$=hYo5#BUdj3QTJI730Q}5l6h(KCrPJ1S3K6gh`q-3f
z8-}fIv_Pd!HVzc|-~d_9@Q*E`S|1+u#VO254ZWaT3n(mn^$~w|9(aCOBLjm*D-bA^
zEjioS-uf(HT@Bp~@Lu_ju7{-ywpJ>o|87)aUpK)kS3N3P`mU$$;n?GRvS<iH%$Qx#
z$^$P+=bc3kZKdztnM|p5eA7z3+i+Ah=wpfd>NcbTdHVV%|BJV`j;ccM)<#W0kPf9m
zX+#uB=|;MxyAhFYPys0^Dd~m<D2*tobT>!{NOvP0-(32h@0@eTxc}X88DsCU2OHL6
zt@VpJpZSCqg>0uzQK)uR&*dCD!+`6H+@SU~`qQoF7om0&e@BG>U(pbv(~&*oJeq(&
z?|)+sGr)<wLh^fIA=3m0G}rJ0|9|N`{{1;uG$nvH_`zXiWrb1m*57sTy&6)z@xe*}
z%*lv}V^p4`XMt6qD3Fvv$9moOfn9k{dQnj-^2I>JOH(~`@UZ!ah!(%uYl48vw1Q1b
zB9bLEFc9P{dpkQ7U%q_U@LJNg(nu51yV*xmhY8(^>k`d<Ad5oiJi&vHy?u`YD8Do8
zD0KMl7MHX8?A#Ly&VUE2n~-h$CkwA3wX#thFo09f!IMN*ic_6alT(NDa*~2l=C3wp
z`(;y8(~TQ79mx|~{WN2*#yrPvbyOqcw7}Z~OUm>C0|SIx>8Mov@H1&N-7}@HX}m}M
z@5S;`F*1NfV^^1I|0CqDZ9T%V|M$6Xz0OKQAb?tPU%b%-eg|yj;NjA!t!{is<$>9q
zB~4<{1Yt+D5I77XLx&<%wgfIw{>fv7cEKioplBKuvgLp)$YnGB$;1tO$iQ|(+WBu&
z|JoV2==P(<MNpMXk8+#$%%+RBiiwM7X9s{H`Jwigr`aWN(m)<#Hu@A8ml#83SmAkW
z3yz>${h7G{&3uT5yy+5{X-2mIe?vJVZ_{q6XVTBu*vRM|_T@lN&ySH2B(DT$ipr&&
ze`{j)?v9St{gu6{T&M{4_x7Gg#C(DZp)ai$bhwv$y@Kt7c(jmZ{`tbIDI0|LUzmuO
zfGTF(;+Z_40Tu5p{1$!qV7%bKrkNR?h9KI;ccGvXa08AfOjf;sL@7Pe!s7?;M;|*^
zC7bdBoItTB`(R22K1o0(`Ff&?E`Y2&L{ej7{BzBnu*0PX?&9Kp17lWj*aVB_dgvjm
z3Za;<Ht!X%wM~VH6tJov@90n#mVhySbOha-S3rZ@-3QJY<R9FdxdD7oFB^Iw)g(gj
zO?`cR6A$r69tU^$A$amJh@Hwqg>0f)AQnKTbPdRyfn(Ud4<-IY^&vLoT?Czg9N6B0
z8BF2y1>;u}YHQE21-qEEzkIq4owWN9qA2=P=wCrE`{!4Nr(jQmiam?95fU02BgBBK
z#0B%+N##dpXM5OB9W9VW4ZJ?7xg5EP#>PevaKnX-5`cA%Pkw%`54wl{E#N0Gi2$vg
zE@){~uYp?#2=O9V>&d3-ysG`M0VNyq04`PoDy1hwq%AlY06h_$PK8}v{mM^|kL6PM
z{+u6rfNshhWOv}F6fDS8QH^(~Jq1GP8L@Ma13=2#<<Xo15O!YKGaa9972wHHQI~-#
zXtg*R9a0E0O>9*Ec4Kz#KrZ37n}xx&KQ!d5{S9EU%(dASkKv2z6HTx1(ru_{3w(6M
z&CTf<?|SbvUjdBKt*r)@Q8Xj4W0WAQ?am!@+CugrN2t+YrK7Wn0BaPSR$!jpeos6Y
zgcVB9>VZ`W#g9y}>TKOL2Ax73w@H6~z{fzsiB0SZrfNWrJqHE@@I-*U^BlAo-YvR7
z=N*v)x4hkz+|+0$HLKnEEgDSkqZvuiFtb4CIzS8Ro;7fl0-=fee-?Uq4^&)T@eW{2
z@Nhwxc%%Xq5*=tC*-r7Ts%TG~;i18<11H=rI4^9vQU!}h&_JI|&hI`81`<{tva(&B
zaaYmV0>ShIC>Z!0peNb{cNU~TvLvt9`}Dx(mfz~D5~HwN;Ri$H1Wfo+bhmGN#=L3)
zK^w)>{mQ4mvYtgjU{9{XrJmPQH~VkE#sKeWW=kraTKDdzAf&5&wp8Rj=@AL!8TEPu
zsO>)?1xVTxm=G5I86}02a9n*51;_T=ZU0J}iMHaD6uq}CLQY0Ofe;!GKDL?-DYbxK
zn}mTKOe|B<(;D#G&AXSwW(TBJh?z{s5_I2}nyq>ny_t{=#Db9#PT0G&Np?dB+}%F@
zn5Ltj`lp~0HnF%Hmjze*&>O!4aIgSsFY+A$hcoF|i0Xr_ETj|pYN@9dRGreUw0CcL
zgZt~zUav2Rtih)mP%{WM$P#Osl@EiHfF%?UBO8H`Uk96lnFiAeCSZ|+XU0#aHY!kI
z0{km|^pSJJ<C!nB`WX=(-cXVLG*Ga!rbMIYLV+sD_VO1OB)O11-N!iYUX_4HUWf1#
z(5|O&tf6u=5dMou1804|Z%U?M^=qgAQO3IqKp%ej>uZ0Su$LuR#E(NO@Zk+GIskGl
zgMWaA2JVAld;_kRA6)$Z?&LINcoP)xaCS%!O;uP|)5@raQeM`YT)!2nmfw{8eB`tB
zDI~af?sc<+6Rvd3ub~N5f`{vU<(9swK6(ZwCIm!8Q|Y42H;GNa9faSb?v5Y=!`{yP
z3cT@p-VkW#(x1_scL**b3qX72H1GKZ=qw~`8v)&_N_G^OG$WrU1l)GTa)1u^1<$8@
z0Qj&NcOF)m_in<8Ot%i>0<+=#7!c{kywC*FF5`8e?h4nDXw<kqladO|HQ#`M5KxQO
zP^CQW{H)Cd_jU9qX@!9=*C5Vy_dWvy`<|W>sKH`m+X)t?Kf;CW>-%|^Xug}0ocv!z
z{r{u;hSTC!{iYo6RNMFJ7~QF6yln^!!<#gtqM;e;>SAB9f-O`K5W^%De-Z*_xW|d-
zBQ*6qJTcMZX&|Tt(vwL$_*$_@dBws}4AeRXyCwW7JBNZ-N88hondj*Ikl&~&4sxb$
z0mJOe7kTd5`KK5dA<^zpE8s?u?ZK4lH+^KBUxR^8)D>4)`5l?UiNLvM+~)CpT2SbM
zZhUlJnN1STz6bXdDAsOwAy=lQp_SE#^8R1H9*hOCu&Bu5wlRQe3z$WB`Q6_Sp@2;B
zV51UWITaZ=Q(^tnvOmKOxi@Sk=#=`pyXCml+0-&1(KcB)VSMYcAqm0Q;dLg;Pmzza
zI2kPanwm7)*{zmJsYpqgk%iefKynj9tTa)IdCEOt2mqH#BUt|kUY>yg@za7oQ$VP3
zh1f?D2`aG`xFy<Z#?!(~8esl{B)d{22NN)|!TBy03aNZb<t!MwrtG0hDaR)#7jbu1
zZ=s<9KTLg_sHWD7f`4~_|IZ&U=gW(~W2%H)_^KAJ;cQ>5pBR*TQYzvK>@wZz0|vXe
z1xsb13YuttZ~}f7(3_<OAWF6nSXW@&t~|yFH{JkX{2-m7CkIy^HnXnL_$Rr{wvu=<
z1_lN}c=BvDfL+1I0HMLmuJ?T|+_s^mgYa)aiy%h<(*A+~a7{=|1Wn#>o=T#h3anX2
z7+C?#8$081NbyOd1Qa9`kimnbu-V@`?y|M8z`@0h&&wq@wJSX?#h)^y>uN(!H>rnB
z+9rzmru_?z6C|Ag5K|@-*8^EE8=2t(V0XR=#uUn$9l$z_lJg~A2KfYtHIxG2R_w3y
z;=O6R3Xmg|KwE>kr(j%}RqnAnKejo^i$uzya>!O)!9+vTDKk?6c_7l^_6ko7$r~^o
z1~ixeGpai-Iqj@k^umMK2g?wMT7Z6j#**;|O>8e9Vo@FYKph3;t`CUxqmQ(Oydfak
zZm!M}gvdh+;8o%b`M4njL8M5IBxtgp1G)h8Rx4w;D1ZbCKp(?tA@EF7Qc`YJpRW~p
zK_?Feo<-nPQHYEYgYkj;@veVnrg4$pR$d%RFstz<2-Qn6jr)PY2|*aPe^$R%2ZH^|
z8gSb>_Mz_v{39~9(Jl;v*I+1>4p(;RFR-a^(^wIXU07d7dLBSc&Uo5EM=9v7Gg1ud
zVmQmx*t^EYEIVU$VR#pJ<Z`sV138EocMAD@HlJrnrJEErLlj`G)i4TpsS`3qBWb`9
z4(+X$7#J|dIb&hzu5crEJNARK1pE>=T{Nh>+Rmpw#f$ymw;~~9UrycQFijH+!ee6^
z(}W~%;GDsl{$%|alIJQay!MxsRtB<>J_?zc!_M&!ApR{#@S&>BuNt?I`Cwo!L$wc*
z3;l*H67puG%Rv(NV~f6}TZ3s`3^QfcKOdHU1rFubXi1rNWg#fiz>Q-AM6{4xf3P)O
z`C^PMUWQ5a0}7J(+%&mLrNd&VU*-5r1ng?PAlUJFk>34Cg%2t3V-6_zt4N7C^uMfg
z<uOY;MtdUj(y2vfvAm*NI$|ba%NALv?Jb7FKnPs#?zgwY?4@1d_%k7s$=2p(tfP?|
zJ&>7ycCNJtP}UV8x2|MVulKH<?!fPmJ6D0Mr&cb>se{?bLxUr|P0IafQ%v~Q8^|AL
zo)MC!318?*=Eea-T0o}s-I8G@cANaE7+tI(afGxk(4TKZ{Vd*)qAZ(w|G%(+8_i-a
zSdob1;pdqqkeMfqHxBd2Ir_TQ*;(au5gl&J@$$TA;y-_oamK2*%#kkpQFL<XcfvXg
zfu{^vuO(V1Q8aldN-i!gtVLgCauJF5AFHwDH_3=kKnn&^LdN=JnK+Z@ybugk?P$3K
zvTeK#J+)V_w&8Z6wFjK6_J!sh<Ppacr^n~uP`12$H;-(-=X3gmoDB3`Y4e6-o=$=c
zTW!2kbKvd?jYCwheuHufi2MLwR!Myf1L+43_-v<q>ZFQGPnKF72Zn*WxnMcKE0Zs2
z5A5Bie0&WpEl<HIh{Vg&(}aBJ77e=e%V(BBY^JsDPQ!-U6JLkbnPb(}V=oJRvq{h(
z=pKB2*c=ugXa)e}@H}sJ=OruI{!6e<u>*8{cfKT2zZ<UksAT7(?UL``AxuxL5RzjC
zR!;X<b|CZ(*w@@VJTT}&`h>K7a};lgi0A|KQCs6<VthP!&n^u0_ToJQ^Bze50yAeY
zL#M&)SX?SEc;BHw`%P3Ls<s26x<SJM>UWh6M<^}hguu_H_R@Gu;CCj&9@p#otQYR|
zS@?L;QX(>FwNm&IdN*$nC=T(GPUS5n-xUAGTRp2UMu3xNuPlzE=w9>&$30*_<;90?
zGyDq$X9FFs_D#Am_FYfG<M}7Nyn8(+hvXm4eag0|a86E7XEbY`N_h=@aM$M)|I<4#
zaP1~--faZ0790=t$Bo#XoKVObHK9$aK@yG^tnQ_hQ|91cXcxzU#m<l?QDtgo*3o(Q
z?jORKE^tJ$e9FvB+OKqSU~Xw)2n__bAm0_%=8l*G904V90?gry^MG6hpRU%{wc100
zl*h)q=BZxiP54pUB)y4;HoYm6ih@JBch7(H_fzxL{E2^3qW$Fzn6s~h#o!D3;mR*k
ze_=6UZEez~2AF;j;86^DC`nx%9UmWPY#dfDaPIVNsClDEqO$LQCuOkOgusc1k5*Ss
zi^OOGhPk<NiA02i6>uU$ZE#<1Y<wKuh8pW8e|daL3bj{(q8>&OiSkGod3`A87c&_X
z1bw`rhVu3G-A>4Oanyvb;CZ&wiWmZhMQ1_UgS8x5>B39ChfbxyA!gComV?tF63^JE
z2c{ZxTRuKxKYo<#*P`NT0(=W)&^x*H(UR-fogU;kyg-Y8Y}U05ZfzOr@ljFtNgmN0
z`1v(;bv+=sWf#F^P4w!-@l$1Gu1I<x3&t9F1NGIoVZfMvq|~&S3KmiZY8*kpD>Dn2
zlFplG>gaerm*ES{Ix<fmUKUU)=<;c2m`&BW-Q+hzEdd?q!SS&h6iQKB+|zj~(fdPS
z^;!ow8rQTZX?(Hcl|**SSr99m^?IWw=fJTD8IDZDwM_R`y<zW*^mzUmex7v$ZDz&>
zi;Vl|;?$v}=9iX`(D&_`MuE#S4F86luU{=zhZsc?&q0EDd@xaVxfA|#z8lCJ7#>HP
z)ehT>$IwA09*DX5C;?Cimmq`{Rr~u})m$6)ihBQab0*;Q#pDU8$m#DN*SCumQd3}F
z#cg-by)ELZdorb(*b1GWh{yQ`sqL8@T=%$2*Qplntr+nqy};P;_m~x?X|8{Ycat`B
z$g1K|l=SpRy$tf+LAs|<H|{Or9?T!RPd^&+#R-fn?ZTDr$Wmo0DV`cmS$@UCBkhMX
z>2kB^cD{ytfw6gnmfV<*o*sqObhfsuA}xLHx2mTht8wx1lUYG-DCrFXr^jv~OhUcF
zaYFQ69m?t@jQ8@BzJ3+Eb4OBJdqUa=)fbgbX=7GNHk%(|sb~~Srt#;xq&iFHdy<dF
zucJ#9A4RvEMH5T;Qt9egRj~zx{s>uKU(ezy>v}-1yTUAMU~9_?m0VyT;w{N;;Cqf<
z5#(!ySL@p(B(?bFt(EYbv4?^Wu{rx+6*kbq8n~DL^0uD|MOc{g@o~OYx1R-B;`etq
z{{Bw9D9iN66pFiGTerFSP};Qpv$5D8Asd|k{(<YgpW9#H4D0A7|ND(${2G(!e^39$
zh>8aJ@b|3JT-zCtkJnF0v0k0QB~(+8Zg|@dxe>)O5D0EAt|GYdixnGXkG>0$K%HG$
zQUc!XmF4rpk*0`qp^vGlw$|3#>A&@KbUvvUl*A%e?!A1Hruv$i50L|r#7W7?1nAZy
z(G+)G9fnsM&OFtOj7kd%%4%!Lr*-(vWZJ)d`!?-U&rVG(?0%P$vfjLxLPed=aamD9
z;vJ)mnW^csjohp(uxHm9!n{14R>-h|?%V-{zSl7<*b_jik!bCJ{9|cE4cgk<yE|3f
z+&Cl*ic6FpJ>rwvemTqE%o}oeXUkqb?8AaS|Kfwh*(Wh`t>Mr2X*YisrB+v0!;_ep
zOnt)-xW&o}$b)+@ifASyxZGv@eI;cdtbA|Yv{F!TnOZyg@ecV&!ot*3c4i{Fi|dEZ
z&J3lznXzzLFuR#4D-X;xN&;B{JdR+n<h?upjEn2=_irk`KXA;ttluRj_j<~dpBWW3
z2r8D|lu+@vhx_|t^Prz1R_+@sGcPeo<eY&*1!_m4@j0RbC`Z0Qy0V2coH;8i#DVbH
zfmtYoq8{v8z0G+vS?}Wm;74t8(<<m*<)x(H(^;LYt_%s0(b77JydU7;um@5m$Zjzt
zp4<R)v8Nmyf55C`Y;4TiyAE*w$S=$D^MS+J2RoAB^p82Q0g{%L@aWy$-C}fsP+;tD
zLCyL3GYeA^H02_b*xFG3M#qWqF6Y55J!n1iQ{Sh%s|zB{*CMFHqo;mBM`UDVgpR@C
z`q=mF+hTA{TiV^*i|){=`3(S0e7xqUw3JkP;@c)~I3a4dT|ss83%N3tuB+?lB*n*v
zjz^}w`_bLa!^k*1GSV_Ipd1m)!|cbM0bB#Pn0%AydS&J1y_eIckh*0C#q6xClT%cP
z&nDkfV^V!l7WoVvV;Id+Q&SUyZ0-tpj=sKnJwhWmxK9Hzk47N!8H(DVwB_Hwkr(&&
z_BPm2%rIKw15fGC&W`Y$fWQ>|XCqm;x~eL>`~EVWTtc)PxtW%hmb^RwrkQ{%z0LCD
zLB(1Jz_b-w?j7VKxKA|K8On=@Tr1Uqu*{lfFp|-)R^JVv+M@mxM!}EXeeXPW$_T{D
z1?toqw2z7z?H?>sT?h9}!czl7!#A}tM55^3Jw1%cC~%Yh011*Z$<PFuy08X0o5?a5
zW`R4h|8qi*5ZS;uT+3HLP=Q;mxgfYH&<Pf6@K5;E#w$9(4ddqDH}c&eU-S(ydekI+
z!M&|FN8Wncb1%KC=KjVnCopm7&o~BjU|tiB`3OVcbl~dRJH#NYsZZ0Bpg&-VE}L(T
zAl*?+2a`1-oZtGT=0rr`y%QJ`BFV%ol%Sd?ZHpbmK$FEmx2=t3+?I4ij)U{MP1T(+
z`d(RSDQ<+~FHsQ{rWjYy<hvg4(pqwL{Cda~i`ZIuSpw+j%#7j3?^yReGi;$njr}G*
z&jr}ueC^TEjhbs8eH~o@tpiz2rS(s}lUK7NpA!QUa&%A&D!<Lo(};Dz%?8{#(P+Qk
z+j(9OUQZv9mhepx<h4TBdD+*aO%Q>xv9aNhEIg2gqhRRD%#FM>q0m8EVa!`ob~RhK
z{n+-fYr)7{`v!J4+jDnhUjWe2y?9smse<PF@6vGsOdYRNuWIc!$A*%`tP_41?G?0@
zaI|xA5zS(B&<^AxBBHgP;nIpQlb&n8_jBeEYi)37C?=EH@>L)^?m;_D5-JgW=AgLi
zJHNQJ^nB5I!7HkgVesYhlvw;Z6jaL~VotlMuTN=-wTgf!HdjqZC@^P?$y2>Ksvdt+
zg5N!{@xu6L);Tr?hKs#Dflt-Xj#Otg7o_zIIvl7OD7WeT5XuY$BX3FYYUXOn0w3<7
ziVWqz&QQW57;n5y`xTUnH&IbD<r!FBufU7@Z3C&zkw1av0}Ak`W*H0t1Mz)fjKQ~w
zar=L?w$gJ|(&*h=Ss|>@(bdhiliVR4G~En8Naz)u+5#LiIyxE(D5s6_n`+YQ*QI@g
zg}b#Xv4qL7?Mn8YJAd6HiIlt;^0mmHXvEozs1p&<YUlOY{KW&tM<4)8zXx@45D$1y
zto|(80wEWi0y34a1$Dxz-ATA!z9*q_rVxbEeAGutfPfH}x5T7Cou#6Cx5M)9g_PyM
za<=#}0~2$~?s)Q!s@x$pxQ~p1(}DlN0v6gf7#lE`29R08;ql=Eo|4p%Zu8_M&`K4f
z@gpNWJ!||AswDl|VU|G7EL};qe{jI#b<zd+n38eyhzMc=#(-}lBvgiSdqqt*yP$0Z
z%nOhS7XI>zim`g1OK{-9IjC}6dC%Xp1r4%6otAE(>bthAN?qLnqMdKo(1XB6lF1<i
zY{fRfC4o#avJNVu1#mqwG_<tUXG6n0nPRPf@k8IrIP;Z*LwE=?@l(Ri`#GDixPO0t
z<IbX?t(~a@g8qXy*C|IPh^`q%(dlV_c_FMxm<UL%KZCx8#wg&!{aDU=F25=Ne)fTG
zY1DJotkzlT1>ziybc&qOMNSX!r#|fO-^LFAaH;@ffS%%FMS|r=p>NamhB2HtYX^u{
zgGWXd=(PPxfSROw>1ZDNl886R&&=TJb&R#KuXb~A9yX^Q67S%B+w67NjIEr=*2XbC
zpJ8KH)6p@RJxu2y3H6V)*!~bTcy?AJPM9`5>m~fX=YQ8kp56gI)XayE1+h&s#?`bX
zOUl)im6@>5P|#|7It%Qwt95i0kp&XIC=+p;JX=;Y+`JG0OGrdy<i^U%YU#bAs{WJ!
z>ZR8Vh&Yta7wWe3nED=;zgb0|ioa2{&B<2J;~}&VzFX5U*pLzF@1JK&+u9Fr34A@%
zZAU?*V3M$-QEsH!n@YcCPj<BaLE`H;UgzbZbW_dt&EHC=jlgNGN|=DZI}s%a`He0H
z78ZUUp5|y;7-5%{If#XJc6ZA>d&a^qD5ziIb7?q9`YuryN)%}|Dumw59q`tIFIi<(
z)%}%R{ma98eJV#{UDv@JeZXYst(sN_OF+sTouiN(d^{6CDZ>iJDG=eKt)e_2R&l&q
zAPxfs{KZ#mBgrs@L(BL6PiaN>4QzC)tF0|8q;xx(AR_mB9kE`HY3J|Di$fdz>66ES
zJ;3h(CeJ;@iJd3z-&Y((CP*<^s7w0%IV5z4@2?K4rKHBkgZXg|ko>^?1Lj6~`t^G5
z4rE)c|Ahry7espT_onzN@N<Zhr~-}XL$Js!#1sKL4yH>_-1ik_WIE^PhhW)vCmnOA
zh-emxhon7=YO&f%cAjqvT8`6mm(Y5i+3&gigYOeaB|QKbcY=f?pncYytYQq5!Cg98
zVjQlV_da+PA|I%f*y`M$m0g}KJs>58#BSh!trw~nz|b&HkpTq@vbe_NwUD`^z>{vU
z_3?q)#si`{UmmRg+`mX-bJ2EZVr2!~j1XY(?Zd;B>C1Eo@RQk#`tZT$+=<>OB{x@c
zsV7pmT4H4bj{+pA8@Z{R7kjC!nIFEH_g?LCTS~@m38y5cn9@?LF!YZ=etd0Tq3nFI
z?(e)I(%2|EH;WhXYCadNjyb#q4}V1g^a!WRG?<DyJ%1l25aPGDoSC^lV4$Sb?=sCI
znd5#i29}KqB0&mOP32#|a`W<<|19)Ei#2Y!UG2sDa;}BtBZxum*G9<2#4P`ej)r{u
z=7u<x`}nA%y&cy{#zcxnS!wrA^Ctj4L&<qR0WetYLJ3LX(Z4=9Ue=zSdHQKL)#RyA
z+KfCfSm;O{7<^LBYzAH}zlMj8^Kx^(SmIZib-x?X_kCbnNedPu*thpvQ;tqfAby06
zF>n4fmWQXqAH%2k%a;^^^T#(-Ye+_`rXJq1Y3lA#H@a3mnJ%hLqgIYj_DfdL$>=|C
z2=~yhh~=7^1cNHI0-`{6@bQXH5y{3-V*_&ZS<S_X46xpJwc2FBZ{#9~o(|<E$FMby
z8ixrJJw575p+RKi26VTyf<PUOOG^`y&B`^;cocYxi|Z$pKVWEvQo*aVtNY^#qKDel
zFzyj5A&;OSrKN841%;O*&A226APd4}N=mry+O5v0n5zLnudmb(<{AU3c5ZVMOcfbl
z+!W_A5nq3$u6_WDdgk(p^mG=~+pcK%ZSl8m1u=w%ksYHYh$|;^+p!y&yn2-;p;GR3
z`jAFc35$#C&YAdV)!7}TKmYgBzm6KlX-ko%x;UE)iyJmiTlQywda3`g=wH;s%?x%K
z?RPYw_BWns$ljO;fC*t~7bk83_yQhvvQE@rdJhAEU-4^H>h8hIdva7O?WRxXt5kB0
zigjc1uP{5W5-6FK$tAGI7R`v2GC35h*lu|oo=X&34>UcY&ov=d71-hGI1S&XWBNK#
zb+dM{+jnkOdNqC=L*F+NCHt6~nq^>MK*^3!6}4DI3fat<h`GC?lwx{gQJfiPMRmp%
zJ)4dMZp_T~_6X32#3aClq_rzPT*eNoGr+I>eGre}D+82OTX&m$)qK`E4GkTg_fDds
z+TW_G04&w^R^PJrz%%J|TH^%7j+cX@8wfy5)Ui3$FEzWPt8Y6?xE!+`{@8xmDXbbT
zCfC^@f=P#tK7=so*ds)@HW|07y^0ba_U7MKLW{om^-IUR+g&}S?8R8ZT&u#fH#p6O
z-@jiu11z{Zwf+b=s<5SgoTczrLjeqP^*S)`9cHcLR;g-Hes^MMW;T+<QzT<(xwmK|
z;R1H_0D1R){OEuvj(JY;DHxUl>>(*@Wr8M(SiP3*mzgaL`WWt~&PnVDOQF|Wp`<=K
z>h7@H=;`U9f?P4Qx7QlX@%|_!CwE76?myjZByMZCBuHWU+uM~cR{Asd;-4%jo_2J1
zC-R@xqrG8BFf}ommAt@82j8#{!_kc4X68$u^y|fo<f4xhX`_^Jf?vR)%x<cHQ;CBH
z4FCL7az2ILmYtm-s|u~U;0pUbx&t5BtjHB|y5*se%rv)2^3H`68wS`J{TATh;jk$C
zA^^)q{Fz}HW_|)_N7M^2BJXn9oK(ofNp(rmIXXLEY*bD%xZdMmeOU+xE?TXt%}zdg
zzWgT~JY+*o{5Du!S~@@427(W%(L5eME`bdLjn8PYVdr>-ps{zg^9*2}gSvRf+pt9e
z!2wIX@8ILrxp#i%Sv(JRzWyEQ1qEO(?J;T1+Uc7>^8ruVt?FkQfHRiO!Kr#aUOmi3
ze60CbYy?i%%O|U`!MPL5$0rpAJU)k$Y_+Dhw+{N!vFDtm6nepONYV+Y;|5*(J3H>P
zK|xSrHW&Eaqu2A3q#&kZ0a^gQ`lq95pNl=7)dFn(A+JBHe+JI_`qVEjytiuher(V9
z0@6;07-w%lz4aC$EG;j;w^uMwtGPq1qofomoehkP{|&cj!_6eI;HA_;MbRc!QSc?q
z$ntYmmZ}5!k;NmxAIB87suVL7*+t2_hKI+R1Sv@qcn=5PTt9W*B+EODmR2*cw!WW_
zGAwv}>J6LbXd!OHVew2w^;M-3t~hSRzKXPIVQp<PU)B5Dgw1UFTw;V>thJtm=|2HL
zD0GY~z{vOh-KIhP7beMPN{Y_Zp<|LyFIH!e)qVW%;mrPuMiYIleRkHWCA5J@wso4p
z9eSXbnw`T3C@@@FH(rKh%I5g=jk}|5TY5na!DmH=8){`8s0~bdX|j+ZeV9oO*Lnsz
zcxxtCR1EL0gj0tHS^eJH;x%b|4c=ZwS~2ew?+_8O88sOQW0#|&Hq6e>*6<NZx0A@>
zKA|3dnkCH4EMskL?ct$arY|o9$A)Td&2EQ7MglZ*w*=pkyhpzw(o}zTb}gIjClJY-
zn~5o9irGXfuqKs1KkVv#o}FU`J|d%IW5wEkS6qDCkWk>@=C5C#p%QZo!(TI|qiOR6
z0)03+(a*S_j+>j9q`%$xZO|(F?~Fo^dRP)=<?HWHqM(4CBb=Yu_oQENC;sLM6RQ~=
zvSMNLhoeF54m|s0E!!L&?l27;&iiUp-~WP8Z3HdX)4%W`>|Yg|+eEAi>?`l9?Q0O-
z`dg;GXJf?4A12}D)fQHzOe@N0W&6*jFs)e*z+VF|1FNdxTajbw|MP!ki7+Iq%~fi?
zvq9#C$;!T`%9md*u&*aX9;srg0#QtU4YG9??pM88b&f)*^37y@;rk{J?d)zryU_Sa
z)5p%qDR$BG@;skTjs%-{_fZZMc>(#7&dz|Y>`{xNNOuDJrhjbAZu|Ge!0xnn^(V-w
z1D{v$x1Wa-M*GX{lk-C_n8z+pROW8JgXZmcueTmzr2%KcBtLnjp%KU~$a&B(RU1%D
z+MRH7e`BHmtRFuH<$$hhZ@p|V%M@<E<b(w9e;oZ+l^Gf}zGI=FcnJlZ+SIcLI0OXT
z?)x}!77b`Y>&f->DIGt5nOeaj9JzLOjAO@LUF#4WZD_u}{-UH8>?CISYbgxqLfNz|
z!GFHs`K88G8C>cp7-+~(DC22YZ*S}PILVJ^?jNHvAt9+IdIYEZV4Y{Q+NF|FrDbWU
zpzidgrtlk*y}cbFHLA*p#6;$9RtAO|_dh2<!=RTZL)I6Qp9u&E9%vM2nRYIgnek8L
zsoY?r7ol5(QIPS<z%bei`0JZH3)(ZpJ0tIA=k$HrTy=9h7V+@C@(FtJ9vF3El0Q{+
zp-=VLd<KbkP>jODm)?WSsHX-(sl-nx8ZThFCPI>b9zdx+$3-L|*2H#Xe3SoczRT}E
z=+e4A?wE*(G<34|HZ<PRbJff2ms0RL7+bQf*;#~)K05g%Dr6lPxLS-rU;#T;SPpxz
zzu#QR4Y0Qr@cdPZ6D<e+Jmw-Q%E{%DVCsDVh(4KmWet;EFs~U(3}Pdfj{#WjJqZMD
zz&_xGi$@7>;=p-jpv32L>SK$9(gLu*erJY<vDMr%`IaMh?tf6qIGHTA0Io}O0KoxD
z3#yL<o;|y~spYjbevboG=o?;4@u6{mXJCL4mbaeIIjy85sxWrpDyAPk9UlpRq2LdC
zL&Vd<Zb_cZZ1(ys&!)HW4oh{m?j))O!%#y#;GdqFN_X4)4e*HZQ*Lglzi4ti={4$E
z{05D=77D3%aA$lB`t7Ik3&s~xoeTuQX=&eiU1l*+Mf}<aEODS;jyM!Jo@W;O0ks9g
zE$Kbm>9DQwil`b5DX9?AfG`Z>1om$(N{A_Wqd`dI_#vjOj4ofiQ<=nr&&==79qf;b
z2Jg%MT=-gVYCQqTc)n-=XN}(e5A}^oA~Axd-jUDs@`;@H>FG%wl9H03lG=gs8`BWh
zThq9QlhVELRBJuS_58qj5EpL-Zq&cMy0|zq6ISlLIy46N8BEMPR)-|T+tm`R{AjJ$
z1bYxl2N4f3hmB`{qp;RI+JjW>T!q$$nx%Nd-|EjypYD?8Gge){FvhoXdb5(qP#bl)
z6vu7^zRZ?xTQVjPMrkw9gpV)!4$MT|=iA!#y~pZIJF!%8YikqH+=YglY8U&1B2fSf
zJO+Eh-!n3-wSG_%>H?nmxE2?<Lg3ddJ*cFV9B|vsq$kPcv2MD=-_^yGtCAZCfo)@>
z42q%<LqJFyr|GV#p^^6X4#AMB1#3@@7jNP7qQZ=MCeG^UXm+>B{e4Fj&UEEGXvIP(
zv)SOZQGmDc*B2W^YHIIiZ99hB(w)DmoLZ-+6~>_?G=qy$)mB!9*#qC5_ZD=PqF=>-
zH-X}~zm8r1b6p(Y-kusnAsz|O0dEZ0kw*w6(Hs0}`PPc@fXRV94T>Nv{*#T$X(duI
zlBOMBO4;8tP{KIIJswB;!IhnEQwL;bMzL?q&E01$vl?Cn|L^h_#PEmJFT?|`%38Cn
z3_^+@KUgj<4xhhre709I8mE6T4XLDj{IzuQp0XZ8=dIKAmWqlFmh7s>*ztUB`KkJY
z;1&zaCy_ASXK>&SJ)-8NrKP3hvA@=?nBa>))Yb;As|^^2D&?UAmnKL>+Ojwv%0SSZ
zq>aQyWr9=BG;ZztFMu#LyG)-0mBTgZ)oi8KXJ;TG?&`%oj08f2c<`VFI6E!PlYgfJ
zya_m-p>m*gY-*;B9{aQ@Pju(b)|kWggl!!4uH{mtewmpll-OSaJLVH@dzu|zzMNVg
zyA(%jY9J<#KZ>jq4Ge<hrrewy;*U8eh$<$(-QSOwt<*GI9Dx@AVELc9a0R5J<26H9
zS9q82mjty^BzkU)|B2I2iAhX61t?%<E}m9~$oSaL@5YUWXHj%L2^?!>y#gNVC9TEV
z>tnX8+F!`Nm4I~?HTCD&xjD&Dl0gv1LH|Du9kuuILj8<N6!e`K$aC7t;DwD1?g38H
zcm+nBxxmRX0`g6~PF8+$M<L6x)jY<5WYVWDVKvShi@}7KU=&6C=r^^>!*5%HWTXFu
z1>DB8@vjiL^t>8O$<6OQA9)qgAM~Na#KifF{a7hSpp}K^`Y6&Sw8>LJAsi$u_xv}<
zD=4c82#2peF71k4NEU1E1vbdZerr+^nRvS^WhOXaLejlHz&YciqwgsN!O#zLuQimk
z#IP~8!rG^WU2Ai=VBSL;A<@#Jw>-j<Z)Y67n{#tmG<18+_f77O<<%28clX%T)JnuB
za9zuh^L1n;)~)xROXlSQQ+)C4v>Yz)v!mm^ONEptCT)GtssRd2j%o#%e3{vgUV+mt
zNlLG;);~940J<?<57ypzA?Zy4iY|XvO@|1{$?dp9HLLbLx>9-eR)CP&+&t;*<OFW1
zu3(B!^zh8ABf8yTv8K{>=L5Kiq6U2E6<1_}ldvn^LfA=LM<=7YIwU(gduB_Bo<3JC
z+c@MDHSoU+RWh=zhY!P!TBnz(^(p>mi8_Q%egvGc=B-u=(gH61>gzYLunw}9GC4KU
z>oE$bE@0*ur-u<E#Mrj-;Q~ixm09C93zhO}#d~S0#rq7aJ(6Xbnqvse)i3X97nIH2
z2LD`hPmX&&C++gBDs2@t>=PX<&t6i{>+O_VJ^>gb{;MEDHha*(4G1*b!GRx&&fIUH
zqSDjR8EIABCFD_bkB8vFx6=?e82ymF*=V2&d^Ca9CguAP3!RA=coC|zTq0)n_H5|y
z28@6oCHw{#S1VodZ-rp>2wGFy$zWcm)h-!Uew7o=r06(#-vLi0VU6bQ?(D8y>0IH6
zj-ZC}SY6#t3t~<Ae5+LsZFj@Tq32WV!@R>3Xo9Efd$k^iKrY9k{ei?~9pDNG34}7{
zBY?#+hxF_ilXG(N?E~FU!3r*m2RIoG;W|B>BsmMi*#Y23i+fo2vQr3IbPl~<AFsGv
z9VP|;;KRd1LNV+JxGbTnIcg!b?MXhZ>kErm+t~2Oew1Y=9Eq|+AngD*DO0|jm{>d4
z%T(AXL@d%T=QC6nGtP7u1DH*Lv-{O;kM2PKWb{7Jm0&csULl9varw|`kx~azhz)B`
zZGbl!(8d?oe*e^GJ=*Q`&_8SJf)O4j*-<e<9u9-sSXe2K=h}fT2PpxTt3$02M78in
zB2+{}9L;m{+Y(T!K`cEJK(WgEQir4EIr0haWhAK9zUiBuo))_LYPRXt?(oOqrsif-
z@E}I_H|k6Kfr}dnC%h(juCdz}GD3y<)$<q|E~Sv*RX&67jgSMgx9Iio@5K{HfyVK;
z0|6p!38;MH>_&?DKEt0MBK=H30dB3x7Lx3$@XYsk9Asps(TKVN{ml0RzHc($ujU6S
zNtnVggs`GXPewHss?@(j&wK90uL3px{*_TWRgMcF=Fh-VEEoo0tI9!f54gQ}VuY%h
zgd%@m2V}SP18vXw?C8Uc1P1yLxc?7$^72;iZjx!pL6%U3<={xQi}>MY^1IuN#F@Cf
zd)-_zxVT_ak>Yc~nCU_{H0kpUOf8`nxxvBrAAqz4P^6ZI3?&T>v>bqiY7KtitxOG}
z1p_VxqBS^H5)rr_2V|gQke+MV1ZCvH>#JS_=xcMWnT?IwkmI&oy%h_2A9*$tj~ZE|
zPK!LaIADSg*GIq`HDF6eB_vP)5~(@@0B%oDn6U7hx2t$j*Qf;^31L=UcrSe*AvjQj
zmzR$P#?H2bbgEVS74zqZm;PF0*Jhyb1y;x0>MD$s5C}8w;r5P>gWcWo%1TkX_aQQ9
z=vMCMC*1;G?ncw#B$*T$nOE5XcG9}Ky4S8>-(T!aK7H4(l>ylqYb7Oj^6}6B9G%(P
z>J-xWd3Wn7cO_UADi&baydZds=n>Ty4>zSlHla_L9zKKwu2r~s7|sdU)GRCt02tN(
z`g%ZTIe~+8@|TW^ii#4B$L2Ts>(|ck@IC-@*uM|KLURDT4P~tzP$L2g(cab7zy>J%
z_WlE6Y{4f_JT}JV0BJ2RE87_PtOA6j{T{3BVz1LLVDr!<0RXvtQlJEhtW2lSY9k$d
zn18~3Y7mtH2uc)GE@pDHPQU#7OraL2KDJP8h6_CHXl=EgYx&F|Gdt!ob!>2U6p4_?
zSG@_Sr6@-!&<U9G&wu|o-+4+yp9@*L76Vx&5caUM{mNrCFVDUVITp5?BZ?KYpKmHC
zs)Hzr)adB5wIbfgC$L)Jep?^skXE#L#D;i3bO}5pD0ki>1ccx%B0Th9MGioRP0g8y
ztvFWg7g%0D!O_;%-VnP04tnHyil;p~TZ(f0>7+|1Twm~^j#s;IHHi<6`8j)%WaU5$
zQg<{vSXkI26L-N-vDb)QutWOHeh5JgwFNI^lCRi+;WdHgV-AkmVnyF8@d*j<ZuyBO
zot<si`oMS@Pc0%UQ_K?+0|QDPFxr58=I>n~!G(RVp03yh(0VCtel#L5Co4-XiQ8;_
z)DZd)pJUU2z816fmM=EE0E2QlE(=YXLA<>G9Z)CVV4+$wV#c_0VPIp!?{#9Vq(qLx
z9jPU*>-6)J7`d^sf8WRm-IFJ+{ryw>32aKA`z+XDe-;+X|LbZcczAe@LZwtr7>7DC
zGK~RZzu0cXe&&$CfdQlOV)j~xB_(X^!^g(&3`sbuV3HI)u4pJDE$!suVgsF!yq2QB
zN&!apf|3a-zdNF+i0f~Ia-(xVTTDLW{fmIqrY4$bGT*n?>Mz{eMX{Z1hx7e6ji3N?
z-g?NmmhKlwz+~D97huSFB$4aoxx#`!<Yk68q_KyN-xndFd-38$-I+ag1LRSK)Ysdp
ztA9yN4QDt;pCvEn@i-{Z5VEk&Y71?AH!1Tvuv9MbWNo7??m2!rz$5o7UZc|(%`^pN
z?o`4xXT>fql|CS`hNYIyO-lbVCxqSfzFf&83}%d(8HQ_<;-rFx)-0>n@L7o~V3D`C
zwTbXQ#~C(U&R#C~bHbU41O`x_<q}otQ~CYW^FY;vyuh{}KPVz$3}Rqe=eUy#mafR#
z{ImXL$o@8L*#Vcc@k;FJ662qsrW{KbB|W2JeTLz<HMP=8`4di@TY0zlI(f5&(ZxFl
zwlXq|qG@5^033PT`wONuwTbY9nikj7!^11tKYLieBshFELL*mQb@5m+pYIofU`la+
zP^Q7oZnPYdH>a}#piOqg9T;HC3IKeWsKuai$G*MD9C|az5>4v}j%HZBGPGkfN4ime
zFSuK`SF~8R<KZ!nx61wt>IN@spKXk&Yw4;qU7adOu2Xe&vAmQMj+O7qiY837z0_9A
z-@*mbCQHKgFfW9P1b(3XNvcQTJPJ1CN1^1?-Mo1-kl((?a)ML!sSK=g_r30Vh%H%f
z@RxzSM>vHi+9JaZE+VM0Gre8^Zz~lR|AbPqaL{@W^zpF0g)tCZo0A@GEfQ}YIsg71
z31V65pXYyyo@5O=%_}n|WV|LO`*oW`sMa}xr<1QFt~axTH&q0OkoIum>!GBf(eLkd
z=>8S#(*(f7nS3l?@{mo#(9lp9&2Kd7{!h~68rpoqjK!%=5zRh?j3SG<h>9d}a{wxY
zO-gMbUe4XesZn#CaP5(+z>@p~v)q*U#6)xJ0-;_LHzc6lg_X+9`}AoVdM+t4g)vlJ
z`s~~bydzMtH(B|`79-!{^cV(*Y#po&UKd25!c@ld`|E&L387^PNW?pBk<;g57ViCU
z5)QGVZa^Z=7gz_CZYOcs&H&(<B_jb@3d5zQd(cdz3Xp3*J&k`Z^tvcHnOr1Ib(XnB
z-~RAn&ksEOC^_4imQcZa5Dnl0ZF2t6hGbcUmG5veis@)Xrd;OuXZ!>bv>k1a8H;CF
zVrji?3=vbV!m0&*JUgtBAbcw;^UWseM50-$<Pp^XmFV=7%774`NStrJ3Lp>e5WP~9
z?6|lkuzdnf{sjCvDQ;#Y8H*bec2YqM`!m-!;bwf*_0ceyR}$z@v#8>HwI~(ON=E^e
z{j8q(h++5&E*3xou*+{Q&S}=FfoVAdrfViWEv+0$utGuPjBNmi<p9*xj_cHTS9h5j
zCIF*`<R+Zz(0XM3P*i*H_7Pe&31w>FWDDg)omV2@&Fj-XUmcdh7#Z^tInT$lWwH?0
zRsD@F36-LXzb&RT6dr6Y8LT#^+S4_)b9u{HM!bozN+!5`P);&QkF0yTKAZOzcE)}d
zt}PUqPTl>7OQZ1xDscN_-Lhm<!vIwSF=gs@4=?3!GL(weR?1X^Y>t<|0x?Oy7#Kbn
zEYx*fNt~QhMXhMMJgpc1xD5P85~m!G!yXXM@W1*Un3*{Th|Y+%_{H0dlyHF)<-?iW
z)H>FV0E^YFtpIWut-jitnoRLN*&$^1ZV)|Fl5&R}>c{R_kUdHNY4>E!LC<Z$jYgy9
z0TL~zv^F;O{jhjH{5DR791}Lt&lgQU7K{7C-c+d5yzqOkmrm%|Dq~8OrA1H96BF{b
zz1`B=dnyC{6&lP{@>KIbJuoFqyqD1t6e8njXV*kO9aE>1gk&S;f6mm<VrFEl5JA0w
zBPoa~;4UE5d0jCbudAM@<-Y~{r&?<5EbZR=E5uSM+0UD_^72-O`B7*}uOCQL+?LSI
zDDFyE?DXZAR8sX0jBB2nlD92SS$(Is1Q@VmT%+~ZP1Ve-7fOvaNzESvgKswEQ*xK0
zV`JY>b$)`WO#b5oQi(PEer1qS^gTh0vYC|#`+%GzUed&J*s*5L0JG6&lCSq)1IyI|
z!PUx8J6Wjs@zYB*Zp#iW?h;v**cVk_dMud*^%!~^kkBtec!qzJ!a(_3r_LeiCmhSn
zikMs0<=ir`w&BYO^*S{?8<I2D{I?^3o<K<Lg4d5s_1!9(cXAAJU96JW-svAzN(#ky
z((%7;XlG}qmy!?sh)hN!x-6{#b_-KeOYp(9wbgFCPK1wqw3v4ccZsQLbStnogUfa@
z9u^2uiJf)!vMMq;fYXz%P7=())Xfkh>Du|j{=mc>0vW#~DladovkbBX&UdTgc_is%
zYeuf%+pzyXG4#>zENnqmcV|;WL$3*jg&hzRYa$GIxkn%41LCe!3pE2Ec@z|zkar8E
zAo$+XBkKCQ-vq@Q$-LioBuIWM=4p0*x2QQQIr{${Y0q$n!)DHU<i&R}Aky?C1=YIk
zg{8S)<9Q`T`ZzQ9?!cFMYWv@_)cWHs|Ahsd8+DF(SZ<Fx&8#uum5NWAD_4mQi|2KT
z+bH4;+q``F@Y%CG@bLlR2=anJqyQPvdV+JkFFo_kn~S%reDgwf^%NgJ{%Jk?;(a)f
z7IUDwKg6PRNQ~__zMIzZ<3~z`aQ<nZO#kz2icSnk_*~m`*h#u`<m!RhLV=&2{<-Bn
zu^DWKV<xp9zy*L>P*qixjBprSaxS<@pUKOE2~a;wIE`Zftkf<?gEAUIBSVLVN{s0t
zjyfSF1%gCKVHoX(4~PZ0ZP{=iF7n8Fr9ZzCJ!l}C6lkF(IFR;e;e*mf8u|YiBkblY
z!RN)62`4oegMgIO?unT!fcsOW3tZ{^3VL5&$Vp3&Hw78Dgpm`GdmY5-JELtZIE{_*
z0PPawvUf7(;K+pC968S8vN;QN_x*e0fS(fZ@qzP4&8_(sIKGF5*oB>@X3uHedRxEE
zyZ2MufRVyWk{exltg`tyKu%`_8rQ$N)$}h7_lZb9_M6XcdsMQQaD9CGEYlMTEqAr|
z`QrLmk@T?05DI|3k6(-mS;l}C1zZe_?(y@(?P_7Un8J?=9s78$0=6tF3JMi-$I=7v
z=7FpRO--JZl(P(V{?|gT(x-AFlyM$A3apqTap>uhLNF&OvzPmWcEWVZ0?R-CIWQ`K
zgv$in7(Tvo<JN-#mpqs@sWHW<viO0gp(j&vY%DeZK63hfbb6Ym#UKY1vi;3TxrCM=
zX+_0BKR=q|bl|-z$1@`?q`H`nzkPVnA{j)mK)JUjLqb5O$Ho-6N_wFE_suUZj({=Y
z!s{!SnUV@H9Hxh`QnZabX#NLlOatKo0TbWfcr9S8N&7qs-HU1v3Ek{-arbpZ3|mP`
zdI<lK3(Gfo9pCoa1ADFiPez6aS58p`nCZ{lz5Cec>p%AK5<5v~R8(WJ;q{#|x4kdZ
zKGUSQ{hU<afA;iXQTH`uWOXRRguE@FChp@$9kct~{0D#jfF`WYX)ShuZ0PQSIW!h%
zexaluX!!y1QxA^?(j9N+xqfHzi+N%>U<@b}-rvLM53mn0eioh+zhU9xVtxF$xxd83
zu@CA3m=1KsJtUeeU-=1%EgjpY(zv)Az!HP3K}?!1K-G2YFC<@nh1l|nii(hsvNU(Z
z{CNMVc!PU1ioY8$UPU-<FT@jo+(PVKq+NM2W%lV4lPU}N>fP(u1Q8f=PX;2sz^gVo
z-o32dY0-(kdVYSMBTLLG{jOAn?|gp_<goj2?-|tPn$JND&|Qj#G(et#MGTV4*7zs8
zCewBNK;dBI2QJS7r;P~DHIZ|tBB|x^*Vku|n0-8(8gJf2_?DN%hqzn<I_Lpp0iFN(
zNs|Tn+<{iwgE<$MCqFxZU~g^BtUV#P*$TmdCue&Kc`^jjrlRTO@{5BC({XXPFm3*9
z`P4HClJV?D8aARVE)~o#q^Aja?ar^5r^M4Crao*b>epXO=V2u#=dr(`tZ!y^0(@$a
z&~NXxkX{muGiao<|D8ChqC!uznj=gs?O(Oh!vJwDwF^Lq4S#EBkXD~|@?z)WL+VNM
z*)%nhlAQG{9614kKsi!D7z42y3V?YRF~m6**}e`BzkE-uU}kP^ya>d=x4zntE$0KU
z&G}gZ*4;-qA?*c#RyP1J4u<mU-CWb|TeXLeS-Ne<*yaZn1fz0Pl$HA$b{ClaocD8!
z>Jos$<X7!6hd}f|waY$Epnm+@7aPutu-b-AKr==EO=Uj8w(8~E^P|eQTck8~9706G
zDCe?;l-ATPOZW*&LrqN$2tMboe}pBYn5}%irf)mj7-L(n8+gsj$Y^%Lwig72srB`j
z8R8)jt7N~wZ1|}ZAbP;xC;sM7d0N3F5}3~s^^1uS5oxMZ1=@gmXZi!fNS0M|_Z&Lv
zgV_*P$F-3S=v4SFj$k2^*^ZU^zsZU40NK#sb3M1_pFdAKSuY_Y2?!LFEPI3Zk@wrZ
zjH*nnm%MN0>EuQyE>{GY)E?Z;s7UqJnu9}PZ7n1K_~Bw|irxp2k|^~D;{_i<y>)i7
zb`vHB8uk}wMercrXLd1=bu-@{?zD`fsi<h+$_xk_7=Ww+q@4q@`bxvbcaRKlA1C%F
zK?c&OhTXiUy37nlFMzW{((52dZs}xQRsRVlh7A|7{dQwA+H94Rw-@5f+xLK6a5JOy
z+O-7Wr#%LLdr%|6w<^A<w<&-bq%=N2a1yREva<G|fe#IZSgEBf-bMo-oV|nfF>6<R
zaJ=E<48|5X+D2+y<&&DoOk_eORP<CpnA=<i{U0a--u`L>)DKCthP!*x>|zTCNSz8*
z$^<;GHh&$002SX-U;t#H_R1<MnHf)OFHQu@%F0gn-7J9kS=9@mwKV>&Ms2fJmFS_g
zT_OAAL^GrkE%CeW!_+ugKtMn_n&Vfra(u}2=H|;%Al{V#*Zc2YU*$}iB(Afe;&<H+
zBmG(#VCpoPGZ~>ZhUhvYY|!_aWKy`V*uEfqHU*g)X~N-DkJSsMjzDxU4GPesolIz#
zT<?<eH*W8u`(Kj*R3EMkqxs6SvomO2+Ip+1t5f+&ndLxlpqWw+U^uKp2sI!ZM2M2u
zFx|_zUIo@>;lRMxO^Aw)o?lp?MIHeNtVYJ9ii#L5T?^w(oFRkXKsMLYquYOl)6SFe
z&P~<8PiwCrb_-_}f<1+)Ksc!T<;6ERjm%TeA-nB;e+8@^NEJ*yD}G*-GVmM~uJzw5
zD?sxtluPs;sWmB=^?^MA#dW;h9EG^J-QJ=;Xe$<Skw_@OzXXp!85;ZWTsS5Cvku^5
zp!U@`qP%pSv`~R0Pza9oT>Cr*J@YLL40v701yv5+0<h_CAs2LhR2E;Fq6Un&@1l_s
z)Xcd~`}a8c<K^j)EqinE<VGSiM=e&)^B!|3r9fQ7me{i^Aww6N$S6jFTcL$umyie9
zPMv}vYk;AsB;ls5&#8xjLEjzyuEa-%Z~G;3WaG~^Dls?`8iose$T(jtgOF+=cd`4F
zjM(X5-DS$lC5)ZoJphVJ5d99*MG(5Ky}o)bXKA%FyHz|NrO?x)g+cV-Y(6SH{x5NL
zl{?92Vr&e~SW9*iVa)4O)-`iqzHpl6uy)-(thH7u`*u6AQNo%TQ{;Yymd$U=ta;!_
z?C(Di6tq>+JU9reI!wLGcZ9pM#4N)MGz=~X#b|A9ZCV%{7~tdM%US^i0dq_TBzWCT
zRLxe7aq|fT+{=Ik^d*Cd4Hz-e(SGCw&6QC!c6LFaHiEkF-E_$Oe0jd(3%koJ!mR&A
z-uXKdp*;-ZbZ?6b_}iQ`XWnIoV`yn%p+FTWqY=gwl9sOe{JCLjs;8kL!_lX@z=^Z4
z|Du4yMPRz@c#_kb_D!+Kc|CH_G0yBaP>Jfa#rb9h1_<%WG!LRcr?+CcEqHmH24XX~
z%UXz*y4-9pFV2C&IINpiQ+*TUj%(S%nQ}AT+kgI;k|3ee{5x4HuLwe*f{eh|p!Y1E
zId86hf2hTT9s8Vmi0D=b?@>s?8%#q7LOI_>HGIMbEuae49Zq?`aSj2uFr;^F@Vix1
zcOva(96F+*qB;q*AS-V8SN@jOAww*aNFX``-r_t1^a_x*1-*iI)8+T?rv>VF;I^}O
z*h@<48zcY*0LrzG?5hu?TT6C`P>VR23cozIU?B<G{NVyDKq006hvqHlGuJ85@(e+p
zWyO6LEoik`OE5TFRwK(_LqkKP(L;&vQC5iwjK*+pvQ)f}otu|MFcFmOguXP@$XW=_
zFft^HC89MB=5%7lf<<A?!W4(%uX){2?mZh)7a^v~^^AUyyPzeH$NSEm2`OBqzU#ul
zK15ofn@_6HpI(WrRQa`W*OjZ(vb~~daTRZ1#OW|=q_dyyrpSu8;Y!l#&3}+M&dQL^
zQ~wAi&f9+2?+31S?N>CNlhJg24igg&+7SvQZ>FcKF{K~Avs|!T(&dMIUTS*-0}{{g
zswd@&VK$2!cupJa!%|ey&ObXkN(U;}*%ub(zVXK6o-nz8GN?!1H_|hVH&)z=tNnI_
z*|Pgx<?2nBCIt&})B-z9j?9ptotRiwXO@tKrKP30c~oSislnqXEj)Ch`RqU=8qN>@
z^7luEa6S^CW#6OrhVflYA-=l4tMLPx!F2NspAN5>|L_?Z04@@5ho+ZPP#=~#({!oI
z5E>)??paDlmPeVAw)RbTy1&SZm>3-!2M+qihGrI-hGLq$!gInqcM_HBs$b2VK`t%m
zxxU%Wx!c>9D(5xHN=mkZe2CqeXb60JKqXZ9lAKAl5#MXzJ|?z}sp-u6y1{I>#9ykD
zl+kMF%7QFIvd_dQ0cl;z6D}?n5R^f)!TR9AZFF=9qy?5re0VrE#jGaKy%O<)pO|NG
zz0?U0fP}jgcFPaQJ;5tV!{k(kY;Nw|`|yzjt@->eU9vN2o#_(9KGmPB794C$prWE8
zogcEY5UNa}pbt>KudW68UEngXxw(nVp@G;PhhF}}{XvDqV%9D{M}>u#oPQUN7<9D^
z=7Not>%eR5f~+2;TOetFVs8LOtKQz;E6q3<!&+``ZmxlS%gf7wYVc&0aCf;(dsV{i
z-Eiaf6`D~@<fReF1fQCQ*#WZ`5m-r`z#V5f-xdimggqdOeS#j#s4tVJT2)mACf2tp
z1<oL?6P!278Q0iu|GW3q!gho#W<x1q`~sTg8qG2@C=IR?3M$ztKLArMA%e5R`pZyH
zZs31qS{ojI{KqB>WctzOg$6bb8YmUQSwG<OK$>6KTPnUAhS6L=P9IeQhaKuaktD8K
zM7od#yT!BXp)E~KHTwfHAdrO%L>U5U5p3*lb0E1r%&h+_V`Z-S-?<DNF9>^9Vh)m$
ztR0b=&y`aoJoXT$%G>n;g;tqPtjvPUNyM-rJH5ua{KxF6JaS>G@|dEET(`vGdBm!a
ztzN*9aPPsF7h}o_y>#$S6wbzEWTy+W7buQ;o~)Rw<O)!Cv%9bMzUb@wO<q}A3M#)Z
zm6b7@??nEtaXKa_nc`3$3kud#(MzuUHrSe-{RB7L;vx`Y0A1^ekB`qFNgGQ`qk1uW
zyp#%IzR^ph${(-%ymAG5^qH8js=Qa1A0~QLwwCV4)FNrQZg9maE-N!c{o6~iMdlF_
zCOI!H#@@cVx-dKnR7=2d2ayvun7LyyGBV~&8)k^~Js@eNE2geZ#ud|A4p<Idj#`dq
z(8-J|_4rr(N(th`y0NhgqbLRJ?C*o7KNIoQteeEc!y{XnF(32qFB>*^lXwMF7%ayx
zr;>!Cc*S_VMy{AP0v~k0g=C34aEZ(_Oit=Lnu7rV$<6rka`wiBALbQs(MbyqLm_XT
z;)YU>`6;ZW<kkzc|I^fUMm3qOYe%KGKqwM1G(ij?HPU-PK~#dlp(xTpih!WfLMF7K
zBMKs5q(%aalsPIYZ9o_h99qDOQJP2ziqb};=Dfu7<NnJ^)=GBvx650eQb><Z&A)8}
zFdRH4Y(_Y1@2ir#_f6-e`}f9UxVWOn7&1O+-4GdF-O>5Z(tbbU)?x!y%l-7}Zn&$3
zzw<ZzcGk^eRLT=Andq9@l8WvfXHU4-urzt#FGo!djzm}yQ6N$rIrR76R#bZ)x{Ub3
zKj74yl9i={;%1KlNxgZ;(i|f|ba?!>?f`o#B)yx=0iS(|Kq$9!JR>x-`UQeZzhL7M
z4MzL&bXV)f>|p{o{@5_3mViNuh@^9x2k!563yU(ao3)VJLrC7_XK(VduN>wFCeWfY
zA6Abz2|hKruwNDcc>C%R`AhG7i*kKS&6BNod3pJ3)8KD7{@KLAKYWq{YdBv$<kBy=
z2NuP7-M5~QRS83d*3{JvtPL929TjEpotjZY+K8E#k@tASbuTn;#nWuD@2n%{EJ_*P
z_dIXIovsS>X9Cac!m0v!po7;X^7R0Yh5%A761lQZ3p(iB3Ea_&&)nR&9FLYeclB8j
zR^P;aST<FxayLv(!L&8)d>B4V&zt@9$qR~b?s&3zxf(Kc>%g00bKw65KQT|<oA(DY
zRd<(`(-SSrO6A5s$I%{5J%2UmTf^87OrwIXvimfVHxZM+SyFrB$H&KEN4#7wRZsky
z$3y*wKpi1)!r*~v)&#*M%x+I~TnfnQeC$X;Qr8FmlJ;-}Y6l$Ifa_LCwx!P-(*wo;
z2CDn@lcycwmpv*|JNpN2OrFMElFeCl0PPzwUQ5dZvZp07OHcoR@T@=+b@XHjVOFj@
z1BKOxijrLEG%(RMOq7)a`W~!<kJ#}yzo>l%@aO!T1kg=e1&_!%KjU|LzT{FC0M=!5
zkViH`m$jJFcJuU~#ipvsG@q&GTERhNm|%hFy$SX)48cW`2Xcbv_f!o<MT>79!wBXh
zX4)W>Jyba~-#&`7u~~U?m40o!X?N?J0Yo=l8PPyc8SU(xVLVkXido5?+R^5y%0VjH
zI)h9RV2+A(LqSZM0-n8v*v~WPjW>puQUQh-vHDK~U{z0m(YtXWUg?k3)w9jVjtS@U
zWg18kXRB0~;NeBGAKoRd%#IZ}<20KN+KZnA69}bn5eY>*G%oHsP;8H|{-gb62Bum{
zTDsN%DTJS}D77#EU9WZ-2suSRjuY1@U<C_D6(oC*chP%$`Ep;u)Zjh8ynU=J4&=Q4
zE3C~A0kzGsUq(Z<4Lmx!;go^=<UD1w0~DxJQPYsP$F2=_0p|t4Bg`NVkgEIEVlY=2
zEdJ)c#u%MWpO^>+Ns2x1x4Ox~R@P211glDi{Iv_9>+e1V#72OaMMp%)Z~-}iGi*u!
zfo|ya_JmU$BLWe55WT5BDSB|oQAJ1R%ED-_Vnf!6ii;996Su^01bHAvFNdN9Z!-B7
zb9c{Y!;=b{Vs8cg5HGRD#e^E5Ou8Stod#NE{C}JvUaec(1|;?o!w5uZ4WtX47f($K
z3JL-b+Jx04S&s;V%M)nECma-!NF-G^YO1}{`YyV+yBjhW9gvW`61^xLVe|47kcSyS
zI0mp4NZDP;J~ju1iL3PfC>OoZj|W|C2pl(j1*MIp6b3+Zhj;O;M6L~0Te{O)`(aVh
z9=YmCiXM2r$Ij;G$DuIc=oo+KC+AWq^2xMElgY0_e=qC5BvJVPwkKDnk`|&Mc53Fw
z@^p5Z)DdMTPcy}wo_NkAjO8?U21VbJxZK&awDb&ab`~W0)YcPCF&o!az(0fmIv=yu
zwY#;DdB5zJYlZPH030`Vk-?gJ`o5LaI=%oI6BsV`^^s8B+A1oxQB_SuK3@Nmkt<%d
zlk4EEc@Rq&VwnQs+}78}hfl65cBnpSy059?j^XVTfBr0wQXBOxvOGqcmj3nM(xHx=
z;}>q{85$W0Nbm@NGx7oygL@hqjS4KMp~LS4mukM&U=i_qCFGr??dg93h9|$vJdrZy
zM_2st{=G}oC>Z&T`GQRyHC1jQAJjCve~&u6vKDyf;lrA|1W1m`D-Pl}%Bvfw)fWI!
zy(DaX?b<_`(uIUF{w`Fe?uNhQe`2<hVI^d+SHck4Ga%sEfm0qw5vUsR(wOyjJ~aro
z;OfF3Px_`u_JMl9-o@Y^{C7GNe4wGsqysRGSfI|1QHK3)3$Y^f)@(Al2Uf!KYn>r8
zw67dKd>HWKoUH~o(}!K|>li8+4Gkt=dt|3%*Vf<DGet7Tjc|2IWNJzU=zc8kKlP7;
z%Ou&BpcNsCbcl<Y?4D_JrXd!xuMYzBurM!A;?SXa$lu=Z3Y0o&Lk(nAT+LOktIp@2
zf|NV;7g^y3AV(>foNR4vJ@g82(P@8ve`W|(rB}V1wWMZQwWJjg^(Mt#FU`uzdZOjq
zKYn=o(b{ERNnz_v!cb37Pha1~5~Ypv$r9BF2QDcm-IkD?DaTjBzW3DVy%93Vk$vb+
zT&~??uFT3?!YagO+Lz|_aY(X8Y520fB9pARhw5Aa(>+=*0B?>rZPb#8yOdkAAdLr;
zv^zvi1F&9J1zdmO>s|oe1Ehw!M+Xfas)vps+VCi*6rj**t=sz#qx3{bT{Ms@0MMV0
zkI$YzvU4#gKtj{n6vxlQ)0Xr}%%wrF&1I!mt<^0L_{%*0v~o}TO@jSaYc|G28cP)I
zr+isdjx@sxGkbb_yI6_lqVE})z@Rfp7q!04mBqm`$Fk39Y{=yNuiVP`FaE%2oGT(h
z3!@Fd*0S9x7z=s71#k}a6VC`9t*Zek2Oz?Hoovej;-m?5<w#pWjpLRjU~mG`nU;nw
zFRsJB+<{{{jkf?QkD#VsNto>`_;&>aI}aTi4P0at)!ksei(EAp5)hymZBcGbP_zQx
zo>_5*5S|3$7-0W{4IB+I6DW+Krhb3VcayQ@`T-;wKz5-$cssa!P_+KOt(QLY^FH01
zpQgFHL^D;SE{`lvlq7IzW=k$BDOM#En1rC1m!m6hC5XbR6%(UY_-<@QF;$Co>cJT{
za&;DJA56fOfxd6)pWw=g53)eTEO$y&oKt;K8NbHmsUspHvLuSRzH+A6Ap71u0CLM3
zJuq0GfPisu@x9KC)(?Ik`F^*Bnvv4#cPu8?2KB&7s45S7`+MN`8x}uNmxFD2KZ(bQ
zPGci?1f|0HGpyoU$P+*A+i(3LBS*JBr7n1UyEluJzwENvI*>jAF@%tpTo`*7Vq+%n
zN4=)u;n)KUb1)`&YawKmph>(aZXEx*){gIVb9eCB!jogqL*@PB0eCh<6jw7dH8qX=
z3>^C4j^u2$R>Nu%YZopqfGb|kLXRoy3}=up{py1{7@%qv&I;pVhUB*V{aXu}m9bQ0
zw@i#nwsi}Y&Xn)n`o!X^{$^+oH>M_%z1UZ|&M7D-yi8;EK^-g-V$8+G#cYbby?u@i
z^>{r3k8mHN(?PN6FxLX;nv@4%sV0u={cj7)43@`krHQLJh5!#Alu3+<=uH6dtkqn3
z{FZc!cCNCMx8zHWAkzeW)j8G%f!F)QS}NyZvO2Bwac8IC2+-TRuuGl^N@;PKU-g)3
zPrMSl;f=!`yyNQZTwrsiOo51&w{)!=Sy@^#y#_8vAV@G*6uWt~xyjc<W}AM+;q7OK
zyR1#S#VS6s-S$SY5^)ldjep5fTj;B_hSRtz?vw^zVR(t``3#DDM!2Am&QvjzowW;4
zZ3G@vP+;J&Kh{GQ&AW)b*G-1Pqf09g=h2zaJOc$+8Zy;hqu+GfQ>I*V1R7G)Btx77
zL1OopIT*Sad+0ubQg`>eTUkN2Q}M(?k<+{+OqdDbfZa~x^%)zO!E@&Xef0J8An$w%
z%z4O0;H08An-bI!_9Mm93P+DNzR>$W%Fi}2K}S-W@Cg5Upjq7iMoC77IpLCvD*kPS
zrmY|0$iT0Ip6?pj8AAF{tB`v>^`x?L?{-YCI&E#EVXBHUSl~)MKc9aPrMnk_w>|tB
zKc^=SDui4N3JAEHmsdOJm%wxE9jCau_iZWq`#Gj@ZjvkL9R7~({mPcL^2)I$4*-_7
zuTN24{!DPoc*61XxeYvFSnqJ;nwy21<rVDaq8U517qL1}a%teM%?W@2*i-775_<#8
z4h2qhJi<J=?C-b7vYKh>asA)7E}MCG?8ueG$6t1JjkUM0ijOzydjTb=F^+P;MxO8H
zOE$?;_O#Kc+vH7J`^&V#zM2oZTMT7OF-TujgnkmgXz8Z3yqS)jHEMInu()1bu_-0H
z<YjcjkKIM1Z^wyqJnjtDE2!L;|Hf42lWb9rmO0X*`3N*2!WW=20K|JhIim8^5zXex
zX=YnDP)uoewPeq=EH~0<^Ivy#{j|AIeF;`&l&SnjAINs<2;=8_LRQ}4-RwUsH{?B}
zP$t4`AN=^ygSp)pE+Z;dE3oi1ID!#^Q&}w`=dZcl9=~M8o}N-0B?H90UC!cdJLAQc
z>aaGy5iNJI&k5ef+WJLk{umOws)DK5FJ_+dwN8WTn`)9JEw6ULRWs0QWo$wDGFp_M
zpPf46yzBi5{@ju&Q*!Ri5}bgFnr)gF8$AafV_*NsU<znG7_jB{q~>W4sIbfa!ugi3
z70Miri=?j9N{moE^^tdF|5qJ?<y+6|E;j9y$j~9OC5a%>=UL~>)u=!1H|f;OC?1^h
zT4QJ!c7^Q!i9LcEx`=JF25|<RYG3)s8aLJZTK$j^d-%!SIMP9Lz&Kp6LSXAp`pL9P
zK1QadmYZ=}{+zK_m>6ku>-^lmR{Z0WYEjsoxbr@SKR?piB!Na9izP&U<^?Y}_j3FL
Z`=+>zlkPA1jKe$otS!&sYRui@{tK1#Cj$Tg

diff --git a/screenshot-12-post-delete-notebooks.png b/screenshot-12-post-delete-notebooks.png
deleted file mode 100644
index 7175693e80f0d719dc258086ce196605574df704..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 71677
zcmdSB^;=YL*!DYuAc6?OpmZoPlyrA@m$ZO%cZ0Nmba!`2ODmnyUDDm%@9p<_pZyo?
zANKY*)KL~|)~t2kSDfePB3NEl3>6s{83KWzN{9<9LLkq7fZvu#aNvLX*QiY)5Oj!y
zuz<2l>i!~v2c|L6i{paBLt0vdIYC=wgb<~L#WWH;-c-wNn?Q?SpABANA08emE>O}c
z7B-pBU3t4Uey|R!k!k8blHz^P`k1hl?yqInc9&5|PDaM?Rgn?~o9OP2eg@tQ606$(
z>fhfGh$Pu_!T(--RYdkd|L;|1tRV68|6alJ(2@Q-9wJHk|BJ&U<FLNhFvsI}D3VE<
zp3B9VnlO=(A%f2$KQd-Q`#kfD0@V)|QyRK1Uqu1YB41>Gi70827&0-Y<$`_*v%wn0
z<N!xpMiTH1Q1oC@7FO1e3=9k$90+?q<)h`X<&~5sM@B|QM^zOR1|L1&*jhxqXu6Dd
zMWiAlWrFoHPbS77n6LKUHZlrX=G#b0NJvPJDy{|~>#cL;;q9rcI;f`-hE5u2-%9S6
zK`#$dQ&aJYh$<>7h9Rd^|M%gDQ<_~Uyi93@AQRBG+1j4Gd81I%SelntR9+rP_C^xp
z)}MlGwAdQX@|2!=VtQ(-f0!awW8PiYw2zYfw^7V$U>)M1S<mf+gwnp6mX9)$5}CA!
zpXbjU{E`lT{=xx$$5~GzLwD+z1NA)amxs&Vf2YdkgM(kPm`^!4Tl0F}GCMjts(vEm
zcKLg_q$neE&>glHN2LPoq0?>EAI<LKaz5OisTBG{+u7N9eeF?ISI5ZA{6$x(KvsKh
z=4O8uGhZHIf`-5H11)7IIXO9HZtn4ssFouE0fC5RC&Jg%(P%sZ0wG5M6ci<uN#D7P
zmw)+$`97Wx2(oEw9~>XUf`zjS3R3FD`3DA)LnTwJ>0#ldMHVX(n?yy-MFH=b^nQC-
z7yp=Ge*3lpT0ock+l433rKRSxh{NqKAHN(i?~=T{$tpt>Ow94|0=bG$CsO?UzZxCQ
z)mO4HHexB2<kGqS*d3j2P{Y4?eS0y@A{6vmFER{|&Ht!aGz^#FtFHiGNKFw7BV)28
z^6jk~G9~3VJX?4;-&e2B3k_o_A;{1QR7G57CMF{Y8G+?#W`vuKO=5_o2jQ-NGwV0z
zPYa_@nQ=bRaC`p9OJ9fBDoTp0XFlcc#U{756<TT35SEz4^q+2x=7<^egjfIg;c~vc
z5>7Dh{or`9H%+&=xL9w!d~$b$_h|*(*!<2a=ObQ3gwH!;h6J1rjkas#@G$J=T>ic=
zN#wx5+nQMwlI3EL4<A{?hZNTo6d2eeUuN>><>!kE3*+Fdpku&9w&CT7+;5MowL-ob
zNXat6p2eqPJhEYl==sP;lctK3lZ14MP<Hh&VX<uP#~Z0p(~4$vVZ&6Y6Q+9KxB1v?
z{n38;@?{F^gPviW*Fr*7)#>I?inNT()1x~I5tH>2obgt%j*gD9FSTZ!)<AsO)4hF+
z#fR3`R<IoGZHtt$d_TyXJwCYeK28*kpLbHLmD6a}HOr<os+6cc?G(&%(3tYLIn>wH
zCGoh+Dl03;W6HmbO3r>AORc8&>#GliY%0`U{4CEW7?WZY-_ygxgq@Pov@bdjgv5c^
zO7q3WgUJ##rkcz3zL>YP8nd&rSG$v2ryB!RXa}>^38G`6mdmXj)@@~R+INHHXgDKM
zCi8XL2Xp1=>DKCR_)R01!qlsc{-kpFJ%d7Y@T8@s8JU<UGYJNB@oZ&GM)Pq<FyWx+
ztu#uMgzh1NMS?^ww=-LpS0XSpH<-j}6YpygU(&GAr~GVHdMGB+xMD!4bm1-|Eqs1{
zTs*0s+3uh`U6~MOUv4<1y(TGI1x?nlZnl5di%K-M*n6Hh{TzQGRQrvU4ly@3H<@JS
zC<0Rpi~UX23=Cp4qc?BfczLx71-?Rg{d#Az#Q5{)zcr@g^%k@J6yf3FhqKkwt)6#y
zEM^mVQtznvS*(}dv$H1>hD1aZP*}}Y9SkN_U+hliQBId@*L&QA>~qFMN1u+%@yXwz
zy!+U1=X<h7L8H?wtgT&UJWME;!HdUia@-eFVB&Ew_i<w&q2QUP=fhHq`|j@UX|Smd
zE9=y<2NO3bX|DZNIaH=AzmVzS7WGF>4TuCCi%rgV7kJ_~k$l3FqoX-(d7tL%tuy@n
zg^>##?#zh3j8@;C@9eGEdhd*p$;yWBw*@jI1$?c$5Ed21!@>ChCt96}v!VClBc#_)
zHPB=rJU$+*a>H!{Iikk}#CCHL{Q*80;)C_uGJf$50W6vP()RQtc@9poi{Bh^BjS2j
z)Q(t2`5muV5-|*tcWKrG#u{#lr{#+AIZAIYW9*c_N8eZYvexi<KQ^09QYAU>6>HQ|
zwGc!Q@xASdrPDp!pB-<zuUfsmC{a~atu}h#zX_8VzB}EW+-q^ay1$%HRw?nCZLk+}
zak-{zD}`oYqodobv^Rk5y4dLGXXJ3X->`oxgrfKK_+U0&{xGeZlELelyfSLP_2+1*
zC5W8ead$lgYruNpr;({ChuMTlu<%%sQV#;k<~TFoQ}gG?dsnE5=||;_yPX1}dh4g4
z?o=-4?uCW>AR;de%^X?TRCXV?ySt;ktE1(F*jRSsKiuSH`!dPrEip0UVR+LCw3==^
zV*#v|bMoPy*T;H)Jkd4tSM)jp7h64pG^{3z$?hshPz6acD?$?!1*s^H!+tVzL0>*Y
zhND&Q>!Yk$jCmHzcwRYt&@f`6KTM2B2JSVL*?}O#o{*^|jZ9JtSI+%$pkmFNGq;L$
z<5KRQT~BI|@x&vZJaL}42EVdV$ICtBaW^7y6FME3*OL**8rRpq$jFopqMby6?6rzr
zTz&FPNT`F?)2%}NY%hf^U8PvL)%}XF#TFNLmz(j#G9-e~QzBZs$w@&$A?q0)UW(ad
z@o06`9$KwXu<cN?%209xh}swTH`P@UOHIxZkKuT1@yjgq^w{h+kgn0`3SG4#MKU2J
zLPA1mTyxio>vKAtW^rlhi4pWAg57ABTbyE@sZ#YAH6$V)H(_g(mQON6=WMnMKN*aN
z(_5T}JG#0yN<1?!DWnr!b|-eoq~4A<b%uNe>7YtK^ik=fPIG6_KpgdSndbE1c&Y9a
zSIYs1v^>(~5#RC7I0Y_DDPI~q=^5`Ylf{!BnO<OL;Qp)>B&DS!#l?n>y%9U-!NkFd
zi_iC~9)Q5!>SC_)^}NcA&5H0WfBTG=p`7hg^zoBSfX53ea`fWj>Ytx3XVoa@61%Xe
zL~yGkv3F+^_{E9ZJD<mA59@z7fz!h^66X+`309V!o0|iP+2e9weKY7<{9S^^YGRe)
zfD!iPxrdO?@o&Eu%nQw~D6<9L*T(|*`4gnC_xAQANGWN=K+Jr)oFA=;Z}Yr+ole@2
zK&Q*NBiY6th}PzE!e~#tj(K&sNYUX!L_{Perbi@;f+Cgvs!L6njugZgjRCul&A%%y
zN$BZqdcxDB-C*R@xVS84!W#lq7-Ke-)EJ6c7X=wcXL`jb9PC;JmdH5yH#b`W9?P3k
zWtv;G=wseI6(@>2^HWpt8-$ZJ6}oM*@ThpK_h|50*E*w5E-NqEW1$jRaZnRcW-etU
zuu$V^U>kOtBwysKpk>;k0WCr-iK<;SNSJS}lHVF6sul^F=`)9-8QZ?0;Z+s)qbe@7
zNMknY$j-xRe;Y?CQ6x<+<Oza)t&pIg3o-^7DJckS31$SFo13fRe0<(XdVII$=H_DF
z)T*V06%|jn7u2)!V0(Y!y}w>VQ<l~GY4c{8I&O_}V);pm4Gs=&=7~ZjDlKiK9*?cu
za62(^!`IL63*Ob$)%esDs1;Yr5T0KTaGx7~JUw4IYGWH;0L$z{Q^$dKs2%aJzf{6U
zgRZv^-k|2lA`Zs~IgA!7Z$~tR1bba)B?0<{ZIuz!o?qXK>gAEJux!r3CR?=4ZX`=x
z%WBf&qe;7&!~Dkw#m7DgM$`KQJI?+37_C=EijrKwzE?n&PieZ9FF4!c&Q@%Qip$LY
z{=FbRht<M02=EvCvr10=Ibso~KDoKMF%)u&2jTsG(m!$C4-yj-udmsusihi|Qc}{m
zoIf%$MsN6qhyMX#t7xvy`{|i&ZfGdV1CPTteVf$D-|bNYWtQxa_c4cX{ka8@xU_4K
zIhxfR&W?Xxfn0wAp-4VG-#L$YK7QR3k)d3s5wH~Ey=5nydXyy;lz86EqI&=zgE&ga
z(`Y?=%2rnJnt+p=lQS6$RiAu4;XO@0H#c|T+n&trJ|X(1kCSzlO(LOh$HNjnb)B5n
zd}T%gcSj_~cev=UD#v74UOsvC`t$CZ*_5?@Ybz=;+)BHlakB~8$%!wLRHog<H0s%%
z%Hz@#<94;dON)!18~wViPhNII$scJoYUo*68*Nrro1Bjt9d;O<4=rXXDG^3@)xvOD
zUK4VkpKg>e7_^R$VT3c`vso>Gl-cOG$Dr5lLPd4B&=8uv1`3T+SEr%Z1aspum(SA)
zxSVVp9kp9M5b{c?REp)<3ZGwrlzW=<7LVCxd}L&%(x4ze-w32+6MZT#*(Am|Dwl~Z
zP*0a?)Fz9D+>I)z*x#P3gAKtzPoMccDl(G)!MI)4FMipJ%WbWj5B5jl#o=O8z3I3v
zt!CZ&JNw}VwD-t;)y7ZE#((}@p4H+l8#S(Ew}j#5VA6DhJ%yB%6h}e9$l=;qFfU?v
zcej&M9S9m#5rF{#WaQ-CJq1M6dvsm7cj5iAq8T2#y34~Eo<&Ah*1D?c4?YI^`aC?#
z%Eii*9r#S&LPPJaM}t^<MyRW5X=BcC)Z05cKtWd6QIn~zsmXLBzvW7hB7tI#v&1>q
zdUkoBS=_|Q&VEeRXmgA%4iBoE{A=ffxeJj{e{J~f?w$+|zfjI+5Pk{O(den8Sxu4D
z7*Um^*_5iEq?=cHtsUpgNddff_~k!x@KM}8c5}85NeNKwR5C!F>T|;%)R5QzGTe5;
zihg_xk{td+8B_ubfKh6D<nC|K<?^Aj7!`I&*NmM{ej>b_!R7Us2}EsEItU$mC-MPV
z98{*WH9HZn%v+d;x<V7W!wH;0>Lw8iq|v%&B9i-k^vlOHHU|`ilTFSUV6zUTusL^r
zv;Neo5G5}rrq(QFUUGMNU^-d6u{q=&fy;6W$|dE~WL8Tm?}?F-NMCgu8~Ql5qs6n#
zTAN*!fp}W4hl~1j9{17Ze;H8wE@dV;ENrOCFx2!O6m$j#29&>@b|<3vYQFTXRvPrk
z2jVm6ueVCwB;Wn77T|g3e!gAldB@tCpKed|MWNXOB$}0upsoRqw+OK>U8`uraao~%
z!ZES1B%TaUrR7BaHrQ{)(H+Uxn$^bBYBv0w_^8xvwce{BAfVf7>UMRgnbn>^`%XD3
zzsVtnmdA3wuFUNsSynb~VNp|FX>+sP)lf)Cs5-@3SvmGRgj^Nuhsw&zgPF?ljR7@A
zInh4*>tkyZ-?`eo8k5l~$+%+XWdszjcpihY?ZZX)gL&u7$EF4ri>blI-@l8TET=)A
z$;d&Y_48XBta0>(4!&HMWpZs%QA3G&i`&J*;2@1j2|Cu3`tLOrfqpMrTL$R;wkSL|
zvYGjwBKsGJyvN8pBYF961qE!DNCpUW#KbTXlBkDw`UY#henN@wN4h2X+93Oz^8FVM
zdM$hO0rZoGnn9HW%k-LSbRY1P(M98#3`3$b8qO<vif26xlmD>z=f`3>ocEpA?FU`%
z^C=S>YpbamO7zk6%2EFL+O=Ex$@6W_FmE@NiV^ZP>&|i;(PE)0e;&rH{jc6)<)YP&
zpsR=b`=OyB#tDYPw_+s@CnqnnvPhscoonCR&bMXRW+_3z5@onHA^7D>H<Fyp&5dU?
zfsjZ#sBy-oP2}Z&)Yhs5?oj%L5%GmjO~}Z|+;oC4kU7><AeT{?nw@{S;qVTWdu#BZ
z>qC0=YEa%Hi?rG0<b9)p!Z#`r9ADelp6DrtV~VfH6cIy&o*LM!mvWy`4Zg-@{^7Vc
z#UU;IbQJpl8y*PH<)l~nk-_ci_IN+L&%1>qU*>YUPFZD8m@gKv4R%5Xr=#G4$|vEr
z!-qSxpCAafNlkL&=F>voeN2r>OQec{LUmi*Xz#S<QY#&Hs)jT8o=$p1XZ=oqJTOwE
zw3V2MJsS*;xENylPzW{=V)gz3D0(yGzRAyek7fsWxO9I{GM_GwNsC@$kdqtMX}KM_
zB=&lf04G=!@qT%>x&V*OiiRs)GC(Fdbu)qy0wceFfCpU;77k8cS(%8pwpKByMauYx
z>1w?mHhDc8Rm*k<p}V`2nxKebWn>)GOBRbrUu<#r?vJgcSr!y*_qs7$T<zjBHCuIy
z$fVybwh+~1^?FA=LW}B}GLUFwF(7j}m=H&Zph%*u`o>D~Z7h6T?z^PSFNI&M+M(jw
z+7Bh>eNdmO`4Sl^scPvY#sC}Dm%IF%%)O%vuDDQzRM6>`THwa!WoJislsm_YSI=|M
z2l4VhvvqQ^nl2|GN@q4@M5x9mPiH@IXF!doRs$O^>i$~p^#10|YSHbu0EEGfdF!?~
z&((TGk3@|`MzWTBDcb=3vF*{Ep~1mK=26e9#hJm$W{{T@;c_`%V~;E^Eu}}~(oDCw
z4@X9xAM}roGJrgdHJ({gLhUHWP4^~mXlJ}_e?jVZh5eQlH|iLM<PpTOiGdznRUPJ`
z$aCKtl|zG9Z?*V%*u>!RQ#Os$`|07`6Sq>BGPmdJFx@sUT9J{rv<o-b#qYiDucNTA
zb?^ow5pS+RS8>9ec%uM;`EF~PoNW@Yn5$}5eYsp{827$4?Z3O?1qy+F*T1Czsw*6R
z+qwtV68$00>A~AkBdpm9&)HcCi}BB@nvG)$ebEF21GpTyazBde<sa6H=aA48F6ip*
zO?Nw|&h-i?s^VJ4Gh`jRa>mMF9k|HwW>o6VqQccntf^_Kzc!up5j8k!2Y1YV6qU_B
zj#>=EE<LI9lP0P7RP-ah8(M9s>roZ%F`An(^vo6M*h&%#NS?TvqNXaDr%*k94~2**
zSy&AEBAoq6;}T=o?+8LuzP`QLLQt2zIb6ION*N#K8822D$PpWtdjo=6G$=Vne}Q`(
zPQbNPZ%yPS(FdaBNe5C<Z?nS=Mr9h2_kHluun^9EMH}l$6gZvb)L>e^_xbi{xpq^L
zDkYcsE*{I>)$)#g!F$5V?ZorWW>97COiHmUjAseG=o&Ck?9C0qk11EHwO(G?RarT2
zj-3LP3C6PW$p9U7M@L7Z!+7`3c)`NLE|cE4-M3IFf?KKT6dw22U2`<c{y?WwoXwCJ
z_LaIYJ3;>qq^?j3^E}x0zE&_IXt#MlpJ`waQ>;=_xW230)$lt4Etfy>h6JA(Nq(P{
zlvG$)ShYwo*xG`Tl{J~uG1bMX-rv6ylj2XS+XiJ+?o^Rdj^+GY4?jB_o8C$T<K`B=
zk!rK4(z!Ct7msPx9yfEUWyy=puG7PGUnPy1H^=h!lw)&JRm-(ztrq7}lJcyNWu&EV
zw=!C+m)%m5lh1c2yXH986gKWI30PQI^67qo{%<V5W~wYjX(yTwijD2CIY>rVab;vg
z?zq=DQK3sgMddbGyj(Po$7(^TyX3X-^NsY+>!}hDF1&BojZICL8tl2;@95M>-H!kE
zB{99**-I#nP2;M^s*gTfQZ&b+RyA2}t<B2va<U&B(YzJ7IUDxI$M1LE9tk-d<FZ-n
z)^;<nw6t`)*rjPT`&xk<YVd*xx%Q{#63z9KocXrd@TRkovCfb2VRb2E5+&66_xP=a
zS^c~525im#pH$S`$i3W^E=l|+DF?pS%-Sz63<YR>8VOi*?Ros!kIPjlvN)5=voAwD
z?-KVg<AWevHN=)k%Ch&T`N`RNf5&pR;hmsWE>uj<Zj~@TIo@$Vju$0}<>P)g{@_gO
zUAs*M=b&W95H~5eh;TLb(Z}<ZOD@$!<YPDoT(i=WrY~m3eW~%3JOfyYxcE$)O+ZRa
zOiE(<`t-U?Q@Kddu=CrS`;S;vg>K#cjMm*U^jC+Tv(C;y4_ZAw-%;xFJ#KL)q!ELz
zczBMtAsPQkr3|l7Ez<y{%FQuI1B~3EW~1g)9!YD(D%7Uh{%D~IBn|Fto>Q^ou<H{&
zDysn}mHl*fexI-c0YSs#*=q0Aj-{ogBs7!rt1Hk5zaWy^5Dv+#N{CcYd8oRu*yxX2
zT55ksdSSmeMO&i!!02&JPjyiZCsaF?N)h=)lLI+k&K{Ef^9Sqdi0}0BfUEUJT1rYu
zS2sd}%?{{ybnNUk*2{-LC-k_#zUhnEN^&Tf)%8Begk2xhcLbvDUEN-2_A4~kZf|2F
zN7kCD;4$c<$846As9Cd^uChAqv(3#Vw>>@9W3vEVK()cH>lwV80+;tw3zK~hOn<TM
zDX~@U1?sMhI*8x!dU`7!Z=o&Qp>8uj9vyclxZTc~W%6@!c<ge29C;SVT2ksT>iNxy
zxk*kI$B9J{N*3)$@YMmq^(4Nd{XOi*#r9~C`ShjrQZtXsF*_06rPJSEI-oxAeyB}T
zG<UL(J)p`{P5$+ZzfGHK#qCdex{g?Qs@Zt{jsMFWn4;A@`E=!~ycT<MHPO6xgGxP?
zRh0o%zk7dkslvB8w-~bgACzT`yuy<WO-HlQO8bNMtb6Dvp;%RzhSlywV<-+R76DP#
z@JXRIE3BJ}@jO=s3NIT{2GH3qKYlWK>NQ|p`)YHT^xLYv&j@z?=2nU=#7x~uR5<L(
zUh`WxUil9Vr@`Oc^YO0rlueIzvM&A0Y_rKIr9SW_q}6CdEu8(?F9?66IjfUU7b0i%
ziZ{te2s+u>4Q^2iJv)s!%HXhGN(G_t1;WdOs8m+V+hEKd7Ul^iY05xYzaS`+F?+`4
z>?Vs<Zd8~Jg$&}qU>Zaa@)%wPT%Mn=!-G5a=eQIZs~@Noq0XqUUYWdF<~r|-p?IoG
z<=xwzEE$+urBZbm8yyV}3)>i%UyQ&Y*x-3A{5e3aRx*{~$pYHOxjIYgyKUfSbm~!+
zoZ@B{%A`zzwntA-a3v}v)uFnwvIq#zYu#a-PWzwAQ+cTA$KVm#Fp!EuW<G^H<BtMT
z($(2kg~i-?M1DSE9C8YaxrrW0Y3t4Pb*uN2?cstcE-tRLTPgxseK>*Ucmkn_01pp=
z&L<#spFFli%xH83UTk;gx<)4-%-3s%;i}}>@7Qkr@w~<Q`{Jv-c2qkS>d4j8Ty07r
ztVgMkCRrqfwLSefb~~Nh_2gvDnCi2e3wL&}<d9-Cjc%)jWXSqL!@xvrSQu8VR{r<6
zfB+l$UjZm;DQwmgKP!KrmRrm+^73YYEjO&0Qz#J?ksSR;Fky2kPm0Setg0oifJVJ)
z^X5#g)_l6xD!e(y!MP`V@!SEqytyA28(ZJPLi}JPLiT7$J0=?H;3N*iZFP&blV~;P
zVF<Q(Fl24|V4rZap{A-onWyPy{NNsqWzS<o$8)$}S5Kc;86F9raZ?qEtvV1-;N4!V
zff97T;q*~9et)Fnd{;}7>g@WLhRUDo1$@qq(Q0<&u+C9I_9GJ~TD7X&3Y09n-o^NG
zW)97&g!V>4`zmxNX|gu$F98+5;7Rz4MBbR+oEidS#-RP}>;Oocqmz?E^h0~o71#Vp
zj5u;8hUVsXN6Z!Wsc7yur*Z7}mk0AS1vkeeYn4v1rHm0PK9TQMuNyS0_6Z;E$2;#8
zc(0}_mcK<970w0I`OBq}p!d(UdiMO#6EZ}5$b(x0N?GfTQD>9$&T?j}BJdm%S@wdC
zTJM}@tMX2@G(MoM2fKo%T@3d*>|;%BE$mIL$>{oI2^%3{gj(q*Hjirv)$+~lEfAJc
zIURlE-oAS$XZw+vd0}B8HhXR$0eEVsdAB5SZ%x0?B(vi~q0xzn+v~Aj7MNY)gisD@
zY82kj1|Rm%qYQ~_YNRs)TOS68hOP~L_`EOeZD4d>Z7QYPHs{-vRNIC>ohJ6C(}7G{
zS-B%te0TREgd&B3nfb42<jdc~@witPKzJjWT`DdqNuXAX-xTqoZ{j#@(yZIho@q82
zm0RupjmuJ;%IEERb6N{^+vy%>iN&^to5`k|R>G9@6?XbAnCkhPQ~8}!^!?s)i>318
zgG7XE+u+-Id%2mj82Q+2ei6sI<huQJrnk5q<n=~>RNIpbtX#L;J}PtP_Gf(yWKj-y
z4r_upex0_WsQ6_4Riih{kk&ElB-UGQCz6x^9qmKzGdB_P#!^SDtd4+JKIoZ{i^E0p
zo^XP9ACWZO-_q%17bMv7WGa$v0k3H67wCtWxIxakbu|a-T;iD)mC7ySZxHh*CnlKW
zVs3E#i1=>5V6Uyk@QMMcQrkxr1z4&&tsY4Y?lmI!XItkC&G{7bFDkc^j*MUsBOB1_
z8xE)fVUK1u3M53&`|GT8iwxtVWpDmTDX(~f{*t}vC!KPw2B7>HAn-Te6UV5cFcGmO
zb_fJQ<iG6f?*43S969*qv!?tkhrhSt6$v6OuE}C!Lt`UuUZ<}2Lrkk#Ve0n&zVOZN
zT8~`PKTj#!@{5_7dWC#&lf}9XF4ycLXQzOf>LscD1kvrPjI3-ts=vpw8t4LTN#l5A
zWX6Z9=$bTN4EeT>#l$EvUd1P_%mD}ff4G3nc4wR+t8kFsAv@0N`?FHoP5IN3u-V7+
z@mS4zZdk11WTmYETmSqk;sn)n%<|=te6!odFTp?Pwu9vBK0c6c3rf&SyCo$avtM%Z
z&+LtjrY^b<zh6y^inkfjmS;YD{pUh!2>~Tf<PEAjqL+l9hs0nOla^u0`FlMqQzd1>
z!K{txM?tO9FL7Q!KX~`=otMy|^pL&2(S%{hS`O)4V_mYmd;>(=sfxBoje>A<5087G
zpoE2mF>!0um+y6l;U%4C2k7W50b6S;TT)We?Q$Q7s9dc==TCK}Xy*!0k|%&x-?#E`
zclG=C?|bQ7X*aT$mB<u2PT5wAjoj$}9BMK$k<vwlQAKV?s-yJaV2J=^tZSVdG{XDk
zlMpmQ?${l(#X+8vv%7_#wn~o+h6C}nmh+8H2Xj@JBfFs`B_&Pn_T)TFoj{cV^3U+J
zKWK<l_<bUY@WmDA2YP`<Y99$&(bu5t)oS(d+#c~-y~0MIu(sA?qtnzhr=_Ju_GxAp
zeHq!R1CwcSIpKW&-tM<=5;u7oyDcklLCa{jgEM$<;;4;#dR$yvs_W|q4!O7NvUPwz
zV_2OQF>E}So0!!oz8t2!T%uZLH=d7rjU8gS8o=D%-rg0WZ)1b>Q2I$zQ!z=ouKrxI
z=&|pL9XxbpM#Fa3vY^|$7ZwXY<2J=>1s=8BN?^WY2b0vpLn+QR7PHD?VkytoyL;s8
z_R?(@(zZL5Sc}NqH-@d;UW!ruIfN-+Uh6s5FIQ$+(GXMd&?(sLYJ{e_L?<-hd$;G;
z7<J$w8yA`CD8RTs-d>${L+Q+8_2S9`(m3q5UzG)ZxBSDZWoXuKp=EzbsRb+9964Q+
z6Ra<&)ibAi*=M7VLh`)zSSrKR!51BOi|C!KCTAPUol{dJEsD&ubY(<Hq7B*0yCkOZ
zilJW-0WoBFk*&Z+KIv}*g(nctpPZBFT;)n1PdZQ<7!CVBY2*_vwAifZOImp(s+t4k
zbrdMUrsMgbS^dyaN`}#w$gp<J!M$^IeS+CVp;){Qf3cf4JlE5+m7uG7s<*qID-mO;
z<7*!1<9T<v-0T{Pru66jX6u|9Sy4ZCAu$UN^h``3O4sbjwNi<CUT>yE>Cb63*r@>j
z21ruLEau&ELXz|CcUMPro1ainP*fue87X!21Uu=tqO?_?e|`T=e}2CH2q?vbI5;9j
z!El2c18jxoJ-JOviu+kX*MG8sJ#w>=aB(hT{5ezZqB0VF#XZH$@9L0eu*wkG>*L2s
zGy={yP^k2Bo?6AyT#aed&jQ2r$wGyTjvzT8IA<;0-rg!z>`qGYanCO-O!V|55S8jw
z=vWs2Y4LuF;@m$X`e`!SAB2_>LI5rVI9?VmF6%z<J)qAS9f&=kjT0?e6~mNIV&39l
z%vvhk|0~}Lx;pnu{MCeJKCk=zM#q%w9D{A`Y-NecBq9nq>wQpN0GAC9G4f)Vc9ZC2
z<M4OTeg$5su6CU>bIN#dniqMhaX`}nE&f6;+RO*%C6p%pepkUiuk1PQzgaf^X`J}t
zjfO=Pv`1HvAsZ+mhh<PS{D|La@ydQzTC&*2EipiQHu|ug($a`fdRd9NDc%5MHrA8o
zV^rCGSNsLK6M9;eE_+y5X(ToYk7^D2pYIxpvDch$`6;1LsF^`bTg;cf$d->lNZG<=
zwIJpd=8KOtyABp@0LBs#hut?cxzy{2e3_khAwR0C&1b8~RAxHI8-F%55b${^FRWB6
z<dENUqMwiN9UjW=QES#)>5UC2$TzOJj&*hAS<bUUQ(qJDo^FqRAYTjtMmUy^Qx0i|
zx$Xp<<M(K+p;b_3#4cRZ!0Hx%+J@<F#i&B(>W@H1@qCo0Edq9L@LecyCY?a-;&DA$
zGF_%oyP1`M3+md2%F59qrGlJnf2F0-%}WBVI_I6SB)QVEG%xmzQgx;qQ*mGs37tel
z;PbeFURm%lR>v-fh)5!@7w8Y$+uNz!uBWSA=OsY|>^~~Na+bC_e><w7{P}aQ+S4AT
zIMWUmd8en?4Tq5ndoB#-jeCB9`r`+Eo^vL8xhJx`TW=e?eFop%!ICG8m^d<Boa}d_
zqc*3bSqGa)K#<t}g6mf^{n+inL1`dt>(p7`B!3qiz1XX#6vn~DRW4o^ue4e19F@Lq
z)p+mT<+_Vldw+jJjhi_F6u5WE>>XduJ-H0J@B3nUVkytO6QE0VmS~<ap?7-a>eW$j
znla?<bVzwqIbw1_{{ChrCKKh_Ihysa@441@#@{jXGBE6HWf+epN+oPdJ+OLeGwl>v
zaXMQ`(d~AJHG%fP(SgSMWR=B@M0pC2F}I?;Jlw+C6h1XB4&h?z&&P*fM>Jc&k+1Q%
zvA%CVpP10~wv71pEt%Prd803l>q==be^z0j#ogJ_$w|MR%(redbR(g&*9sf@UXAag
zhig#-eMEry3;V3X3-Yg6<VxClZ6mR8t%?GHE&L*lxPtz7X2#o=S(G2v>_@BW&Of(5
z7fB7=Igz78R&U}b_8%)5fg@?~ypsh%zY{Lgf;bmQLEhEQN3DaFsuem9fGyxou}xun
z;_<qFK5N?CvaF&0l7jZ};R+RquLkN#td_fAHDCY0Mw+j)Oo@&jjIf68?BQv(xHagD
zP}oYlxVV5*8;+Nn9RC#n9_hzB7Gb?w?WWiF-;t_Jl7WZVtAoT~Pn>&{9f*q8<`U&a
zdQoX02E!Xq881=GP%5b6{ho%a)pW^rVuo`X>5UrQCUu|6z&vPAjCzcpSYqEtj1C9&
zUqBQLw^R1;;6`X3L?e3{?P?Z{lZ20lXKYgVG`W$$DYU^T=^UaxM!9qHz|Hi%fIGja
zh-4|RpW=f1EKhxhOoFrsM^>c6U5fTgLy$30TrgM!f!upEKskO*N8pVKB1!;kkRM4T
zCL4~#2?qi8%F5~@=ruv|hENT*_1yW^cbxIAMdGCMXmx0PAuB8eG0EoUdL{HNEi*km
zG~;el<~EqW=lhLpvjdlyAt%*#8n36Mv>(p?Ty2T>lNYzV0(2jAeJdR=49AHX7#TTT
zPp`i|doZ2<!9LdB?rS%Cd$Gsp@j}5i`gZ?tNz2It_~vyMH=3-dM!}7hu4m*Yv4{X2
z6H||!%fkJe;r+Ps_b+jIn!KFZM4>>Qf?G?2q+i2(cb=EHf5`->uva-TAzjIVfo}1p
zkrHhIjJX0k;w&FNz`IV>o78^SP<8p6_0ceC=*u`U<{$I23=UMrozVVN#H5<~S%Ra4
zMf_^v#Yh=H>Dvxcd#be3pl6xl0s-ifbX}@QXA!K6o{#q&V4E@~rlplxKn7@tiNDsp
zP_m>y!x`Km(bd%@AkcmhgnXJh`L*@=QrnY!mf%e)MZV=OXa(QDe_vWkV`*VgrFDib
zA}V@&eJwv=*dMDfq2~oSE<kFTneCo8+NHa{z9v_^t*EbJq)S!7-0|TN*xV#9M2CZ^
zE>ZbI$PlUgziNv<J1r?h5QIG+8(+-}3=ABfa`1Ze^NmkT6dqmd?EF^u^8@$>bU2b&
zJEZ>(huDRAn-&)pZ9L(BwadmidH5WK_#bAnx-tvNd*Qi%c3hoZ)ScNW|M!U;jsz0>
z@f@W%CkG1;k3z>N=kEy3Kf^y);H&SiipuoZ+;7zv&!E)jl?7<t<z8AQ`eID~%cj5q
zN>%dR?WMAU0%#3iqeXl{_--V?)IRD5LGYnd-Q5jPJAMJ<{D%;EkzXBBcvN-2h7}~>
z-+L>OP-7$cL*yHenHEjW%@t$;T}7M8Nx~u(HV)pNy`GT&Sr!?vO{;B?A0Z+ymLL3i
z?;Fa{FUvnD{2o>a=6{MfZwp2yf$$RsiwLr?O#b>6`R!X_XD4X@exPueywU_QI8_ce
zl6>ZMRcS>99wA{DL=yG(*LV+aeH$HfWmNds`4oajmNN``{v`gC5~A_@S3@8qb7Dm|
zv$(jJlXEUP85dwP&=pb)iAN?9T^<!BB>)vDM+v&3XZ}6j2#wbVR4P0BV6V7ty7>VF
zs;i8b%PfwEzhjUwzx<AuCob+jC$?^>8%>FUb%It#gHTxjpuD|Yj|7rFGV1E;a&lxq
zf|Uu`KznLXiC4UR2mckWqrTn5+?<@0RKYO4?$pH86m*b!qkhr;Ug^=%(Q9j%z-v1{
zcL1OFtnTimt`0e~T-}6{x~-0g?+4^iJS;NSvN++H3pEiHpJltBuSsHcz#sHG6{Xk+
zSQtpNZI$SIIgkK9x^@i8kbpj4s8%SPB!-uuHn<Q%gtO|q;GfO@J^2UjnQk4Lv((?n
z{t_=_%P7ThBvy-JDY{R~GK?uGUO$Q<`OCYJp!?E@l<~fQ0SD!^9gr=K75w+0g7lsF
zexEAtL(d<@W(=Va{;$L@<ULL%KX?^cY3S*P%y+`eLt#!=n1K706*%(t=l_Qhkoo*9
z_OI21xk3rye>6ks5E^H3{{x^Uq0swh>p>d`HU$5lBcqko1tg`U3?Mg|xw)O-LqH&z
zpP}N!-@h5$5f$oODZ1eeVnpNcFPRiGh%rsgkd&z%K!q&-0niXgNM3AgY$r5G()R^n
zF)ddKsemauR7@mz$RuWJoJ_qEp(8U>9uH6IzoX?fC{M8kCH=g$)HFR1!GYg-70w$p
z+(ihuNZ|jS4HnrBM^b_MXiFgGAs{eo7dmSED(OFdoL>R@7Rdl}wyIj(PyWX?)7v*a
z|GojjPXaK>B9rO?AymLq3gisWcmWda-&df*dOpX2@B01ZvA1Ia|9d)+O!Sb3{pV$w
zZK(Q?fUmr!VB`M#g`D*jnM9XMPFxTCulHEw|D51dP7g~EQU24h>wniKkJR<Ny}8Jw
zPf<zz@rs4kyj?ji$@w^e!C`tSHlUL}H45Vq)5pih;}^&e8}rF5ZJ^fvlftGZCKg1g
zY-3|%W>(zT*ccTRwSNtGnd4&{TzV!ZB~{h+Nl6i4zuDSWCK;FU2L}fOP*Ymq3FY6F
zktzC=?)DWGpzLV}Z7kEZ%+#%v%EZwbe0Q9k(km5WL6pBH<Z)9j*Fx}e2l>1_T?%It
z6p9W~5)#WVQ?mb}@!kLQdN|tplV%*EniGiPIQIMZ4p8K))+%&b`tOLKq(?7kL=FB|
z3qZt^8?K)?C@eJLD9{CETkUe&6GZj%bqP#&$%j%yUjBHoiQ{2d@y*>_ttQkB2V5cl
z=%p^AU{~^pFODhj3l;!F+O-1g`Kkq%yGzT1Imd0$S}tB7nHqI}-|<64wHR$r!}@-G
zeGLHIs(Vx5aW#70o|~#7gNk%%nNPl1N@Yqe!(&Gj-s3xn6a@uWanx-8^G2$Ia4UJ!
zG~Dqr7D*R5uQ&I%%J(Op*SSOY4%=gM?_v)LhFUF?d4C@V?r(q6n^wxsZ@=^&5M|SY
zxbo*^0Xlo^S0cmms4i~2I4O<y=AX2)9wNMpiwkw12EgnrwcKI%k}xyx1AP<VcBf6P
zt&c#tovGO&Y8-_uZmi)k7rNioi76^F{#y^Qc1dw!WfeWV@~ZehrF!`-9fRloo{~i_
zKMxt3&cbD^x;Q64Qx@$TAeo;Zb)M5;YH#XOyi%*vS4G?pAcF7p1HKbjAfS95Oyv;L
z*5;w7KL!jrPQL5I?a+4|roBmfCbs%g-L~Jr80-^T%N7aUn<^VFDEc(opqSSWrNhL)
zF!^c)2u0@oRmGG*KzWnQe+F)t$@*%S)Xn1A)-XUx<^V1sh|mK}@@9`4#x35fgZZFG
z*$iGkpg*MnZr9`Pz?nG*phaOgOqaWp=BxWAUxfXS7Xa)z4xaVZ`q9fUi}|{=ygZo_
zRZGwm(QQd@WbjXc4%xK7J1pfCjt1)-)TQG93zU*F$6YRv;{!`*-#neq+tSKPl+DX|
zAYMBRcT)Gq=eLWvtffts^Mt&u`XVn@+_<e<{(G)(R0}EMY?+_h{18j#k-fbwo(u<l
zg7#$~1Mn<{PUE4Ap2I*$h~Rrz7Sc9nG$dnn<de#zy%<g``nabSLEzqQ)rLvVI;AH;
zIXEilQZA+LbRBifrrv(&{RQIs>*}55L}6A@5#>XR!_Fz-^fc=%NMw%zRnpHVARqwb
zBCs|A&Gztk*9QQJ<(i%0&Q4+5DiGEZu~(3ok+FDrd6^?4BMXa))N@2psWt%jXFihY
z<008kuU4*==c8KY-+<5Om95+M2z4xkpZE(LhGAgz-d|Ue%itPMZ{^FRG<!d-0MLr>
z{&)?LL&h9KVD%TNBbUcI7D<7walXNR8feDbdBNHnCW%{`u5K9k_+#bTL7?X{G~7s0
zJa_0H(@iT%#q3Sy^ZpHpc}E8ar^5v+Bl6CMHy=a+yq#dAU8cbja?%q)RN&%zbw~gz
zIvV#19al~+u9KDAT+-s_A(QQZSI*$DkFw)>kSi)IWM_}{ez>)aql&}+x04lA3bEQN
z(#zzd`%eunT#X7Z48`Qjqw^wfTdli{YTsEYBi68BT%xqlF52i0giqEOj=tRQ#8j2S
zl{fVj;~hIkij?Z>>kC37%J%_FWqcXvW24K!O6=+K<XE%>Dg_L+v7y1$t@ZJIXDywl
ziIPM9dluYZ;GrKaHg!;(U3%T!RHFrSzpBQj=VwP5xY%Rs9B;wrbolo2qA;Yqyqt*7
z3!m`|%<u<jQ-F1su5o=iZ(XDY?3Z`LiZSXI77Nj2p{6=d_tg&oB}$^mG<tzXDA=&q
zbkurra<jd5rZ@9LZ-OSE^6OWKTN3jJA)%EoS(<hCG96&Y_swEbp((oLAnvg0cOv1Q
zoeiVt0z_sqsh`QGbSUKs^sx=a#k=7IPoUvU=?1VlAvdhq@m$yD?s5o?XbH&9q0uBF
z4)Hl7BlIYt=cmM2K8uTZO80Bd89eT$rlurIwKdErFHu3b1;F8_EJVTLM_SH{jmz^G
zn;3$%xHc(ykJrXrhd(~DsB?_deW;xXXd6A*sUIJnNq2AmnEy;+-xH}sK@`a!&C@@{
z=WWU7ZYs?JW09{5jez9AYD)ZpRv>?UI8zCaSzdwe39uaAXOp+wJUphK7aMC?Sy`D!
z0Ktd5)aG50las?;ZR2chWoRfOum|u<kHIV<!RH46Oo~Aip^{^<T5tjR1bRF%F%eIr
zF6`a%eAcV9Xi%lii^t3-!~zJ>k+jNo&FTPi?GJNvYXqSTFz*YXY-MG=1dgkE9i_3H
zgQKJO-GSN%(8$31VNu5e7*vS}Yy*m6>5U^SED8#l+w`^r%ek7B4{@=vMSRk3sx#Nu
zF2$HYmIWTK6qo}r;0Os1&zdzPJX$-uS?x0a=g0SK@9c<(tqA9U+bEwKms<VZZvKdV
z8HqJ>DS@E^{*yfO-9w1YE0RSM-!L_GkLY7`gtlVV_MtVN(C^09Z~^p1SycNn$dNBR
zycJMUQK`UoYXxw@*fiT`#x2~7<DbL1l!c0UA*<DauW%LsTLI8DS0jOjJl(cdW}D+o
zo89Dk>lP5<WIwnPH+$>;eA^D--V(KnKI`)Gi$W984?rA@u^)hzeE<G^xz)4DY!VkM
z?rA<L)wv1K0m|rW1~oM`fTW=E?ENq>wZ0!56BFZNE8@0XtoE)P>uh@z)76N|xB{m4
z8k_#xQJ3V7GCmmS>KQ1Lil?cqrJXNU0XCvn+*TD%tTmHv3Ih#|$Ju5Ytp;<E@{ZIG
zHPw8||Jl%QRL9`-s{G416I#zGoFDUk5bb=gD{aOpG3t24AB?{c_x|Rak<%cL(R`=#
zQ_8z(N<X9BU-ARLRaaLR5T2tYD#$)n8_{}&hJ<_>!^}ADC&8*nbl~e4yz}jk=t%?_
z4DrPaAd~qA0t2yoFAOLzuKB*-SrzBzG&tDI&CDc4xN$!<*cmD-Pdv3TXU#+Fzled1
zC%J{4VrXu6DLiPGnw)II#=szup47igP33dy1CZDL@TZIENeWqfYcOgM&<)Q0c-#>I
zV8ZP%Lk>n3maO86{luA>pL|dEJ$*$UC8|STdc;J!MmqmZA7&y^oBBk$czk}R>)mkI
zpE1NsmD}naSiSt>$1m9BK*M=Zx|h*OpWr=8Z27~ICq=3k;)XzP%6P%>v3<!W4Gq92
z`7h(+`zy^V8h$4#-`u52RS9m_`}{YdWJbHi?Esk0t7QAF{j&|xfMAyKK3uq|HV%+u
ziujf*OOWN6d;}x|rUi{!vx~|27pS;1KWz;p>%1Q>682q|X!vR(a-IW|i24M}kla{K
z2MEtP@qTmb)tT8D+)Qz8YQVJE#F_x`vy1!FGREQI(ml`)eS98)YgPQI@;$;ea9%6%
zlag`oZoN1}qaN)6r>FPj%S^rX)hmwW>1nk8nvIa3PmJh?Ep(}>%ujBXU&deGFDJV8
ze9AGj*jhYqVr!Yn94hUwE}b-E)nhx0kS3y&Ff3E6eoPrVQsm7wesGF<w*IUwTo-J?
z<(9K-hu_v9KU$4sKD%?SPzb>n742p|UW?#UaMK&}<aNK;)h>`-tTrAV(}stKUrKiQ
zlSqS#4<r565frh|<SZvA2M97*504f%$DJcUa(0%`xwyKrS<Zm~9*h&>rJl`w2H-Wt
z$-}X{fvUB|1^-Yz7dJPn`MR)(*`Ft9L_{m8Y!`b4x)gpGQ5N+Z`x3&!*U@A<Y6G9z
z9-X~-C&9h$V^VT;>(Y%aDf!RVkE0d~_Uw(!@)%Ze+e>D%R>+fN>E8m)aI7}4d?^kT
zpARU2RSCuf+Bgv&C_u#IV`MBg=$Tqsc|$^y<*+tQn47tG@bG(SDgIwC0o8jlBtA#(
zUlSoeC1)hudL7`4frI0Em?~ci0F*UK3Aan=r9vwZY(egejf->MzYf9x{%#Wi0X4{h
zEdqXlv5LD>Wdm~3X6ELa73t_woQ}I=*&-$TvZ!-S&U7p+wLrZaeGUR1ApSSkC?y|`
zJ4!*90M6mKJz_hO`5VkLoE{$^pPj{=HC|#-bIPQ!vUG@3%?>3or69K6Sy{BWSwVFR
zq~GMLH#!98<oN9mfT<syYNJD7Uqx2`8}R}Wsz|HB>|&RtK<-^Rt3X~eBI?3=QW19x
z#?H<TnDI*TT?Vkl*03(WL9uGtEr`^hA{w_B3&#h{JeQYa&olVjYW&GE%}@;DHb_f`
z?yqWNI!a{VZF-%oPTp@G(C+&^?$1&u7rFTS8%X||En#@MKTET0!gQ0LV)iOi{<~SM
zU>_A<(28wk<;m@Bqx73XZkPQ;o4H|t0iKvI1jE+Kw41`?-*_3e+imQFE8g7O+uGRZ
z8fND-8Tr-rc&qfv@%8K1vB^u#u0mbqfcOU!U$nZdzH+K{r34wGQc`<h_uTK(P^;3^
zS65>iPv=TtqN0X@gfFQJ=1sGYZw~5nz;GlBUyczXaD-*W#Z3TKY9SF8;tuq~%@;gi
zJW4=K%_S80hPg#W5(vNE(dqd6`^#geFdCj-pR9EnD*$PaQdglL+$4=OPDi`Lmsli4
zUgA4fTNztK+%CP-)6*b4sa2$#Pd|!QhSlFpCT(*2)Yr3N8SU7gf~_;6jfaPan;)_P
z%EZNm1z<1(FY$JBXb-#<uj^@N&sI!J3(rtmMm5EYiI&2`Z7{T{TCxe`pXvNC_rR2-
zq#r5Uj}Ky?BM1Z15m=$NlB+v!Prpw&kYPxy#c8~xe3hALT3ofKw5p=4d`g7m=PPJw
zK{M-3%FFwBW~|G_r70<sM3mPXl}r_NHj$%_jD{8w9-hyh{KO`yYGMM*vkfUy=apQh
zVAe%J3DvsrZx!P8ew6l+;Ycx$+vHYqCGUN9akC~yBqcRKLq{H!2R?9S=3l#wej~PL
zE$`_noS}awCoA**h2#)s&^d!bB5R&G<BsX8uj*uoB|&s%B=U+k-v3O3KiVU+2S!#T
zu$2<)K@cLm$Do=Q|K`^rur#Q>B8~>vkvcVw+UG#u{Ory~WjRsY=l{Maj}(9)_<?}6
zjO_J$e_xhb!;l8ve!qWTfrMoJ;1_qBki^w`#}zIpkR|udv->(I>_1_EzqN=FA<NML
z3oFic2!r-~LRDKaCYJ#sqM)j;v=HMyDXZGsC-UE+UzL8Ti;9>kVg!?NhZA_@dYz>e
zJJWa6!ia~NRn!rfrha%JV<Cps;K=zQzw&1vfc<;#Si6u{{`<?)y>!9?*Yxncn1oNU
zd9jaO&=>zR3NOhKaKPAqqT+<?<H3_I@!|b{hakU4{_hh*lw63{J13oU1$rsg`Tw2o
ztFIEVkGy}a>%V`1F&-&~gtY%&LcZ$%-%~>V-<htLoOs?F^1oU@9Jm9qxS(u(1*t0d
zCk$mW1KAH|^XVBvuR2NT*N{-XWN3%)%j2hOeOMFydmOk}44|hVAW&yQIH+r|Mrypt
zC<*`>3Vu+46lwIt1n_I06v0F!fKAlY#wRAg;QLUs3mm^h06&sEF=Odha*BeAukSJ7
zY--Z`)c7YSkZll@wJ=N>zK4b7<V6|@mo!sR;W9ge(`4(yH24)2727*7!9andLyhTg
z<$tncG>Q*8|L-qq{A;VLlrPMHG`+h!qCxl2xoV8{HOJ6@iq}+ALSJ7|SeTSd$kLLw
ztNiOJSycS*!b0p~WW_a3PBZXfvuQ*$rE6-iY3XVvMk*3pTR+mKyvh^&iXlTuNf}J3
zAt>k@7$_RQOyF^c>ACm=E~aDQ*%t(afVr7Zi~-Tw&tzmJMyJQ~9JLT3x<Z<A+1UmY
z$|^U=CjYcoY)VT}QPGm(VxWjJLVCllul-}8!9G6efq|U6KqgQ0^_vA11^}?$p`!!&
zR-?)30OSA@)4U4Qpuj*vUXRX!fzY}a^S~ztMKW-79!Go;_%t;&Bd|}xER?PeUH2Cn
z%;#z-fkyvE3{2$=XSDG<F*;uvX*W9b=^du0r|(T$_l^vMiAbYF0{+Kf>P(<{<0dDQ
zlZ(EBtP7>cZohqlL-6)(Rs~(@*D4PvS!Y0$Sp+VeBO;_hI7Q)F@QaB_<gf?^B!p1}
zu^rS+sT}rGLuER^=@S&{*p~hDX$FiXZD)aG1&WoDLKpyK1(cNjVbUqAmbg4_u{k*(
z23kPsfsLN%fuZ`;Eh_^9Cbx6(<bOXmU^ty;s{>3gzv9pOqRO9B*qN1+GXx<{c!hed
zucBf?!pJ-^e1;6u#a2>OeE%UQ67kuoA02NE3<nQyY|1H68c805k_KIpG#aQI6Gci*
z*2}FPuMqffg%n15d%qz&D=0)U8ULYYV=D+MR;#E3lgy#-=r(B4H9ma;GMf5h!&xxk
z0ffAnxZm)T{JR3+IQ&2Fux^PE`?ec|GO%FWILC<jc}E31-@)djb4tH|Sa~K%3<44#
zUmF-U1WaNV1F)oax`V(>)8OEs3+|WpgwQ}gzYb6;eM%o`PUrRP5298s%*@G&Ia_#!
zoct4xipLxQoV0aBFg7(cx*lr;Fix@jv?EhEh>)B7ygW*t9%<kB__wsWy<n|;Z->(p
z7e{)?v(s{lz{SHG2+yK4Fj!k%TkG<BwIOyP+IX_^60=)@e9-j}f*`5&EUyeBKfn7G
z<TNb%Ge5tLl^Xv|ySSz?P~uJZUco~UvJgVvQlI2{{yTYaJ6sl^1M9l~{{8HJSLN}F
zZ~8r-dTL%?9_U2&&zbXle7p$9h<9cxJ#$3EuIWA5JRJ{TW&Zj`ooQ?P5+(+Lq0`DU
zFjO{ZKg-)-0Q=^xgrlRD9vr`(iBC2vbB&FunVJ3&a;Cq+jG-&QU$zHUfdFFqq~mf2
z2F=0zD+*dfrXCkp6Zp{>pa?k&%Ff9FU6s%W^>iS_m_LN-s<Ur3z(ZlJa8yybtH_uT
zWMLF2t!j-;u<rip-z_IaB_Z7B^7I;|CM*4ur$~@4-*zg0=pd)_p~v4}zd<`+u8`vf
z1WhooW%6t0(@a>k06ZH=f<r0w%%)@FQc`zdF#<IMK>BYo0FH5UePY0CVPpi>>QK;f
z^T~RXALEKL^W+T#3$H5}pjHF1l>a?PsP3~al|K+@c*aHg(aTenRTX{!U9Ec{Lwe;@
zR9F}oqTVvJ(h@p?fFcx?kY)lnbWfRu27BY4aBby^65TePgpX-ALSU*64Cy7q&4UY6
zQj7*f3zywG(k#lW+iQ=xDnmRXCueITgBUN<-#}mq9S3x0EZRcTmH->?Lav0tlI&~y
z7ck;gWE05{VL7x70SLnQh&;&fQQip33jvxUB6@di5QtbP7Oj>CCAd>CiCCbvCT4f_
zP?(sReYr6d&?P$`*U98MTc>x1s0#>Wv9iX~5M38j#5Hwv<N#-1Sw#i=|1kHKQB|)|
z`!0%tBB7)rf{M~5pnyn7gLF57bV@gfh=hW~qPrWU8x*9w8>GZV$D->@-0yq7{l_?;
z&N+P8V~?#{VXgIho;l}z-`503lZEL`T-@iZ1DQI3g$b4j=5MG}Vq#(w<E&m74L^RI
z@-+}=Xn5HA?B<71p%5YgIoy*T+BZcXKk*zS1t&kgBFq0P;8Wb-?!<Kvjl9#blNM=%
z;W}{f;|m;9#!7ncR@5<!MWd{A1&fgQ*@sZL?;bX6t%4Z#-4E_3Lb6MM3=LN>`TyzH
z<1j9Vwa^y+zloob2*1KFj(`XC?p<R`%YwYG>%3^rcKhMSaRh1?vZN*@Z0{CSH^k+~
zeOZWzme^evhPu8LR3_Q~4hhX5o#cM?Q~sj!+5-+_%+~KxXJI*$X^T@Hk}2|UON$Fc
zVtlmePGUw@ODPw|{WtNu>>7BBPWSnS4wq6SB3IUYUpPB|fghJeSL#kuTejAul7<El
zEX;~2!S(u@vi0jd(Wd0&WOhjo3HRv4jn&o3I#(I`T-K#dZdFy)GLyj#7`jO&gWply
z7A*W2ow>j)*p3W7GBh&k-Ffo#sn5&(KY`TfvbWv46{&4otR_|(@6vmtYKSD&W<Isj
z9?YgZv&l5X9enbnWH^#tEn&(nQ)GSl2nprdM3TS_*%Y_)(<<Gj7I5N~mzTrbq{gv#
z0mSrf5KP>TLQ8C)D(m09e_yFkJ07pW^?-?rD#Lud7y|?2^ic#gDra>l+e}}7ZFRK?
zjqqo_Cf4-fRz*!2g}Wg^3{{Paq~Z0=4h@Hsx*SeND3z{$gpX1RSZHHx<lvMFqTtI(
zPJS(1(i2|;wyeFr<R-pzPWq-_if<L=<vTVky-c4r`@%TZ6$XmUUq~SM77lvxc}NHM
zEA|a{*#L>R;rU~S8U9OBPfwGBRhOPeLP1-S<)qw$z{yXXsub9<XD&1G9sVm9Q$HxO
zt{gr<#r~yt%G}JzVT0&oDdl)Wmv)6tt&2mvv3$C}_T=@^ySurD-Rg>xNZIH9Ef*eA
zwv$@Avx%Jv0w-b9VX@pdxAzX&_P$stCLXie@{A<sq<O{*5k>QSYSaslh#&MgjSlB9
zh|f*8%Zqrzi#jY>nWJ7g;A7>HQqDA=;2#wlf1oDwiX_H;qjgP6mFHyW(H{O#@ydF=
zFX`lFHsYCnZgs0!cIGp9gd_+XI{yadv7pfq9&AjfHbA?X#4d&oJu~!Nt3bN}JtDmZ
zASck$;*xPjJ=TLZ^3rApQ&N*tn5ILD(a_MaAM#|NY!#Kk&<2O%T<T~C7m9%BSI#Ri
z!6=T+F0l<a9X73nZ0H7P!w}%iG8z065itU3UT)`|C!KWw(U6W|uM!DVFE2N!v0vT3
z9F`=1`0xSZv;$<>XNKKVGVw2kDNUGgai!UBlaq@ST94#W+~vRW<*Q1}cb(neluxnV
z5T<X`8VQ!09e%pSmlvw|!o23s(P)>zx92%Ocs~_q`wqdoIovNsZx(lMN6OOQe%w}P
zLzOK>Hn#k}d_kMo)gvRL$eFtAqB{MQNk~l3k@x%cOeMTm_{7cx@yym=CPqUt3eWJK
z6DP>I-}|9yt|s|d!%@kgoy%ezV>xcfiReccYK%ZfL_ymrwWYOTOC{Qg|E%kcVP2D7
zSk{Ad|C8sb_yZjG<x2PxmFrGk|Mga3nY2@IKBrypGJ(%;*>I#HzQS1Ei<@H5%?Jm7
zq`!>#LrBgf0x$lRb6gHFHX4?Ex<sQ#GGsuipyz@%GDQ_!UHly9#u5_6g@v17a{r9`
zz|hi?oRn1JRvu_swa&X>c>cSvU<*-h&<q~Ds!XKX-`e^+kZz`_sR>gllMWcG!;^nB
zkbX-<<f7tDX2n4b$cu7cr|QorjFu%74Nt+-2r~{Qo%-6?*vWj23Ycf^0-)shV6$}*
z&i#=pTNP&JLQqIF)YY{s-_JqH!f|sZnMB}uFUUm$xyCSnKRez732L&$Xmg?U8%!R!
zxwz__Daja-i;Kp(x<Apd#y+pc@XoE(v}6meQuk@)q%rbjR-fnmDK4;PMpyJsiH^T>
zlA8ElIh;CCsn9joB&TTQ1?}odn!{L9c47O-UeEp~`kU?M=3&2LH`&W)<SbRx#yfsr
z*eo=2n3Bx0+!rjj^^<+?N|46tR@2h)g|0guaXci=K13}2X>iJ)as6>A1zBqCN+|Sp
z7x&1l(&C8|)7bw~<S+E9Qjidd?xOUlhBrKr<f2?wn}UH#BuXQi@@BNtj1K3tI4kX?
z5upiX__Xb3?<G$L?w4;@|3N8lKN>Jp3LlSn?JxZ&wDL*%6^$|)G!9z{Po{$@8H1ji
z&y|Sw-&8!|rW8)70I8f%_$QHodR5$WGedp-N~csZu?1QzhrfNaz3Gh~KJcp(?CtOO
z>=2ToJtXCJkc1wAra=xTU-BMzPCjI+!vqj(?2!3SZiAOT9txNNExL>cJT8kp@fz^v
zrPM$uB~t9u@UIX`Q3X=X62s>_i^!vDIQR%F{&Z_RoFwedG8?rVcv}^<x#j%($7>01
za2~oGqqbqT$*lcKCfN=$xV2JT-SONP5KDo%SCzwh2SjhP@f7XjAW+DI`u$T-0)P)e
z%e{%y#Y>wIy^u^etqTg04x<W$2lzF?-Fx>SMXWcF=8v89f#>weP{-QWCkO6|NW%i^
zQ-QiI5^_2#x_()MM9Q(1H|ltN*)P?^TAl}9tlSh34pn^WN+8}aVWOz2@sx+>>)Omz
zubWR`Rh`z8+TY6kngdC-vM=1`5}QS|1N2eB2^hP$a>>&5H)Q)Gi67`-xB+}ecKXST
zn^mNcg?&db!z*cjIxmW*Pt^Na;WTz1ijwzyyo@{=OMB0J3{C2#2NbjO6GYDLoV3*8
zzE!|A>3gHv_ekx06c-K6M{>LM_6yS?mR+#`AHo~Rh{>0ah_F86QM@(@p3Rp{ZiKEU
zV5sUDS^(jt$J<qLN&_yQ^f!?`5-{i5Kq13gT9B?ez&lV_3dDf0(HqaQvNBq!e*Q1S
z8!<64;L`!a0Em>(w_#v>rW6f&+t`sc0Qm)4Bt(=|;#A(geW<i-{HD7tgc78`R#8YX
z`ihebLqdA@nZG;*uUnpM@~bdBANk`q*_$2Vx$JM>y_53XoNbWtjE|2;J|B>Tler%-
z0TX3fr0nnCq4@;O-(Gskx~e(V^8SBk0Z}n)P7(^@w2k#KCF+^xwaL}XUIPi3D~RIi
zVX^!2%s=_*Nn)RivP)KOiLAzu)Evku?T@`GeETSL{H_OW<@jCs5(({}bW&uj30t3S
zl2FX|YgDuxYOQ`nGB%D}C_l{BqIcJw$J3>ALuVL%)J&r;^0L+OQKMO=vv{kUGuMEq
zlGAJ@$7>`yDKzM40eJ#1v%6qgY}g%Bq<=G2Qp`Z`D3Q~8{s|o+T=vB_21d-xn?SDs
z<7+G(US%mM!YMmDn`^2&8V1CmJBEgZL2mD`36GE0b^mL}2hY=@5Iza70K6<Q8T#a$
zm~$TfY#HIF?)ke%yCkRzO)l4McDALCo7Nj(P}P&6dAZ}3mAbp+lt#k*iP{nox;_Aw
z?nUfRif_^wB+$_@un`Y7mzPED1>D{1%FH}tL9zw6IWi+R_oSPnDN`zzu0`uZV{+aT
zGK#x*yU)p^vNDf6pUFs7i<RYu4s~!LXGF_d6P2WS6=smHzl0h_WCphfMW{~<5w|Pg
z<yzDh6g&;f&chk^mSJH3^9F?#f~#>~f16SFX&kypw1o3)4Ru@4Xe841{nyZ{1WpFt
zFBM(-)Ts>-z`ly?dBgQYnYJmF@S%YmHt(qra(U3S=5xkflXnz}nkOjaAb?zq7f2dh
zcmGIHkv&bQUpo8cPf%*#+tCql1?B@@zjEN2_B@zYtp*Ef)QVS$VYen+O*0Pnz(Rh-
zef+uk*pIfhw&AiK07@9Azo4aczx5Zyu2^=HKfiwqDG7l;z-@7}!759&Uu}xdVq?k~
zhcwO8{w24HR>S!L09`axRl%{SX8v<xqFf=93B(7YW!JT_XQT=lU$u7sFcxUNX&}>t
z7zp_BVS;OFrIVnnbasXgML-saBw<XV#gxthxvKrN%gY1QZc80XFmhtg1Bl)8A37dK
zJ~w@8Y8W`y);n2|NR405&d(bY-a9xr6vw`!lDsQp3j^Y^c_o6*2%-eIz<PnZ5K&iE
z)vnQ+DyyC$d5^TxWzXib$YHb%TzUtmM}w52xN^8@{D-TB4f(3ux6o<qhCdBFccn<t
zGeSskpm&#cS`7)lqh%_pcujY|z%0QveI`kBC#vP9f(90!h8u|jk-;O9^fXrIdAWDK
zi&VIcmRU1Dbwrel@Esan?a4n^nh-M18<@sx<X1vE&3Nbqa29Qu{U!O?Wk2Y|H+wDT
z)vi)F&((#+UDW*CbLO(FYaIby@_gZzR4*BxL`<Ir*LVL#*cIm}>m0vdu48ee%8yL&
z$fgTgeyM1{rqNmx{!X{Z{HF;cM%8GFa3>f)3f0R3#0TGw7EJ$bc{kS)PLE6m2g5V8
z52w(Y(U5=tMUMv)lwh6&78OX^Sg#CaL$rPO)X=~{d=6%Ms<fK5PVK#X%yzc9eD*7Z
z>h>G`sYbHF-(9hk81+Z>C@E7vejM-=L%(`Tdxh%BF9ng|(NPi&)p|D*A)#wee*_2L
zj#&c^PSa=icSc4vdd)Tj1YuBM?$}a8Bq<Ig5}9aLh?^OdI`HcK62p*11BFM#lh(l5
zwPE2MlV;_Q-eKg%%&X;PP-u1c*SO#)Bx%(IQRK|E_}<YtXp^d{eJOTxjl#T!V2qN?
z;u#5vHw2U%U~hz;3#yYHBE?sS?ocHOJm!nWnKr(YQG>W2Jq48vy~W~ltDgX=gu@n`
zUWx^2rpr)PfvIK|o^Qwyz%?0qvnC4be(WKMw2ciu?u*Zj&q_T~3NSPrwC#~x`4*1s
z4U?&RC-zI+n?AjdltwCM<g{I+?f0I-FFk*uO~QMD(|OB)gASoo{MK50%{O%-Qzy&Q
zo=HK2O4eC+pKZE@D_Y%YCpvH<U26T?Shg^2kg2snnvsQd*&8_pT|Bq3`I3p=GsQKj
zCl7Lq@pR2mmiY}<X7Vb_35pu_$cufv>Obl1x()laVH2p^(+~c}Xp_hFG58G3d}|$w
zj2lj{7IHn|G3W?56>BVR$=1rfMbdk>>dlv97MsX@1)V?U?dmGW#l1N>c0}(SYMdx7
z99HAsE6Zazhb}p)Cu=>ufhJLVb=;s7j^_I>@{9ubb-#@~&%XK{=4^CIba<rf#z4L?
z?q-F1E#(0Yvj$b%P$}djAQnAcW_F;``$P_2LmpQLHl(#wF=J&-4fxbzR_HP^GN9S8
z0$3=tipFlxq5wOf4%*0B4~^aVW?LhpWjJm6E8cr!SelyZTs*>T^9HX^zb~*DYRXKj
z6rr6gx8BmC0f|Sx%yc*|@l9ec4E~tZOZ~2<g@r8uL=GPG<e15%*XU|YjM}w+dNWC{
z1&wKM;NYZV1b+Prr#6*zQUMdg)i7#L8Cn#4A24{CEi)5M<gL3nHiP+Q4Va}tUvyk(
z>4q7fyz_U^J$HJcZZZK$Ee`Z_-&Xet_De56^x^|;K!Y0?5S_(PS64?>LqO9+gx$Ty
zq48%h^iim#T~L~?pkvstjXhFXetx|TUDURHg<O2KAUn~i0Kp(PplsAME$>@%)79{0
zlz4=LxVEjDMK8L#8A;E=PN2pL2hM=w1lcs_QSW`z$X9Akai%qN;#|GW0?hXMg6&o+
z^<+X>`3dD2MyK;7>WJfnqnoa-`}y%Niky#ovM|(5W}io_d8XN*XxWC9a!nbJiY(&F
zt4G2sBs`~X=R^`t8kR~UroDETrNwXcW+_DX%YLzUl)5j^SC?o(PyICQyE~p@Hmwqo
z^7Q9GvlzvmC+?VW_wpCmhfA59>H5vm-cAjLbeqOE8(>J;4S1NxzS;|(uu@UdTvMcr
z`ZIqj|9)>J9K1VQS|WgJa9V8B-QQ$Ng{uj|;VH~K7-+$K|46vj*w|mQu<sHR^BVWP
zZPBmLN{9M)x~+|+qV=}Tl`CF~`kZcuZP0>dF?@I2+<<g_RZYdK_isIOl^KuN0ce&d
z`%@QuilxP3M9ts7-}Yc1f=fjvj&pA5X`amed(mzeX9u=_PJex}CE{)CyDEAVMwRO2
zg^s!PjN4%?jcz`gEfWUuB4$~Dhe$gePZd1?*^q^%=i@)UO^vrtS;Jo_6wb7J_riKJ
zSOIz!%j-@>binI&n3R_%sqvV`xPSl7IZZR0hK6o$*Vx$KuKWJ*nSb%FMUt-LDK+)r
z2tf`GlUi|9Br&aWe?}M<5#1}-{ZHZtA74CsmTKzE|AE4@AUawYIG@YCyr;pn0P+IY
zpx5Yurj`~7(`oeR25YI{bvKpK<B*U$rB999f*&d7X1*6ws>#X{bJ5F`jt9s_NR$1;
zLm#B$#?&KM-D8M;$z}s&^#t`G9T-UtYf;f`Mq4)kL{x+vG}`*|SYG68e^QR`l;sQa
zrMFb$`&)SW@PHj^w=s1OqdBqA>Vub8K}H7E8OgFHeux%14$hw1BMC{l0Kd$)5iwPs
zayKPVS<#lnq6htg>ZT@Y+U;7>*(MC^%3Pf-;!bh+K7t0(yw`>4S4}edB}?LX*_Hj}
zQ*4wspVhsTQp$+#Ch&fTkg}5xmn)>Z4nxL8P4X*AcWHyMbRqO|gj_QyGauji>3zZ=
z!@$Uxweh-wh~7gDpnLgW2VT+>^aO4%1=PjFsF&i#A64CRD3v`wpr*IIMV2qPdu3bC
z47$?P4)m}QBTY@yv+dSII5RR*ma^n1A)DQUhV`Mme81Yhp`Ray@9yP*HrA(rsjmN*
zFYOyupvnU%i`YFBqSlNGEg}v&-Ee_+@`kLK-<yCzDWZ;BGGK>VN?fa>ARaP_hbNxI
zoAPs(7w2`Q7Cx-8Wo3IRj>O%pRsG6Qw@7;A^wX;*$Hv+Uob4dqWjQxDhoUKCKFJ%A
zM+FB3;iA(pkmi^WyQuj-MOJCpIML|*#bm5uZ%aGLFuW@m5^f-~pR#}N?jI+cA+lo_
zf(q-*#pf!#a!o!pwkQS@DF7>k$=+F6^`^PHUg9j3Zv$lP_d;q)3OG{~awEPkTq`t}
zHD1JXcCPC#-o|E>jY>;f-lRxMPQE;*wd-8uo_(5aftii<{57gPdd%2Z4fyPBAO~9&
zF~*Ax==tn1`F}op{=7RFV@c>)o+j6c=7Xxp2OWvUCbH6sV?gdT=jG;qjTkVDm`pYa
zllsg~b8@@z>7@|L--DGV-~{dg82lKH8Q3lNJox+>gMq``!ooz#Zl?A~aWzZ3t~zr$
zHqldCDE9*#>M8c!Oj^~aJDqefpXKK}!W;dcRy%G=duIEIdKz^_aT#_+LHm1j=+;qe
z?e6YAb2Z;m{wfRthoR<7s~J{<+@<j`>fVraje`X^4PTiKRq&l3q8l`VC#Zh~x!F*d
zTGilj7Nh(U-t<fBDtwpQiVwZMD`W<#k<&!^c1lCq&S|Q08#>}Iz|Eb|0-!60<!OB4
z-uXAa7eV*f9Oi#*0-%jf#bKsum*Tkd6aQaUqn<TzbEQ8Vt*}ajY0KJJ5oKqK^Q|x{
zsSINH_*Ph+P4@SPw1AtJm6g>79MzXd*}Xux9KMqC#F!F#o*%V3&IXzcq}>bCW{rK!
z#N>M!ML<Jqj+~dFV>27+f~Qyi2<AMUVC9SP4eJnlg3rgtM^8_`jWv-1M%S#Ytgg{C
zX(_36-^Fo@uT;0Nuu}M=xTcRzFr#8(^v9MN85q81umhA^wu@*ftOE^Ag+ZDQT~^|E
z8Y|k<P?%4hlA`Q7b+1OaqUzq6nZ+&%65e6Ud`-pUA>QNdm*uk-Bvf47p-05mIsQ*q
zM<e9M!u<p>6Aj#&&(J<!&hp`l|Bmd#*4vNw{^$3&b5dWrNZ`NIf<*l9-()2o-TqG|
zN67z=c^@sE5RyOt|Nm|2biG0#qhKegKH~sO`sG(JW!2S3Bl-XRxDw=RtpEME{~!I3
zMB)6v?TnfhyzG@<#iTDT5{5dvL3LsoD;|j0``=l>e=k2xwqo?hPygiQ4|uC9E5JRj
z7yY&Yp)NbepC1!}&TGuCrPbZi0<FV~o}TbS1Y!!Ju&49Qoo#J5=;_TkDlP%lcP6oM
zaDW2(Ju=b}bafveXShzlRuiME9arO80*`awhlYj=DE}|rCr!|$p<|#p*w|9%Dl02N
znWzI-J1y<_&`_G|!3I!(4gbBaXz5XqBN<Kd(txREV-qFdxOaho?s2F~OkriEQw{|u
z@N?kao+w2Y0<K$DI!x>dc=SMv*i<h!H__F7ZL<FRXA^J$;FwFx{N(Ffs8yq_rk4G#
zbsxqss9&HTl5;zJ_4fAWECeNe2Xt%&Dn_&cNm`#E(&quJi{S4*KeZkF#&^z-2P3lC
z&Q4JFJV4X~hhO>;Ooe=xmHvIN9|pvKdIj6Wmz1#K$dYrrpzekr0^#8=0L95EtSl|d
z^_nH<j^!S@U7R<8at~#vLW769OO|0bDXap3SIexwQA<q?{>Yk3Y1^<XY2qP|#PvEz
zfq;2g0Q(brVMq8yVF$@mKg+2~aKaHG3(Csu-@Zj_mL?)1%DFe71)N{WEV2m~S66yk
zS`Y)^>w~=HPcK<Q0s<*dNK~<XJ=opNyv(zpMq68b&v)whs~|G~AS2F)5Bnx2Rv`FJ
zNa{@bgm5K8I)3Lu>WIhv7=fpfCHq=bwDrf2Bsln?B8GpLO%4^2KVKvm%2C>#s=B54
zE>COHC&dH~?@I?dJn6`c-~3KTJ4>adL%)9q1Hw=?I!J(&;$m%lcW>46VEafYyouGo
zoQ#aFuMMgyB_$;-Ev;=Nm?|VW?N~lteZ*sGZXVZEyD?KI%E9|ew~;fzlbyw8(QkK|
zc?y~|u!X}l0u$(k;YRoztUxjrntZ5gR#r^G*l+LXX!P$JfsfEfbX_5#MW0(Fdngo4
z#z1)rTN5NarNLn}F$DH%(iM98PB=XM{BCTk)`LubY-VE8egQ91NBP4Lv8YnTwoQk%
zv3gLR+@d(dXg-1yF#TOCuGNeae00_}8!8x7S-xR~qw-n;O?EyjI=yn-IPFhu1%w!E
zHu#_G#U%ZAr?lPbh&@=;py~b#GuFEUVnC$w#lH8-dfo}R-P<AM<qoLPrY7%M;0wAQ
zZY4)VK$tcgB{%s$+PNsi?K}?WTH$%|w}3RI+1VR4HK#}H+n{he%@s+6cYyc?255K`
zFK?}F#dMIvic3mX2h!P29RK%oDxaGa^r%Z7-Wz(Q9C(Wi=tdy#7|Ce1JTDKg%^*aW
zz+w)=nr)QZWT6g)M>R>#GkIkIM!$iXFF2vW$0EHX<dQN*I*bR`YnLyrU<9o~%h(ve
zeyL%~36Gkjv^2;MSj}&81m!hRySu5C0D;E}hk12sCW79m_rJGB;#v53i4mJ{64ngN
z<Kp81t~_bv^cPf4@QpArF|mV8?*Pn&05|YS_Uq)3$&&)odK~Z{*?FUI9zm{o%P1RY
zUfJ@^y}buN(do!|GgyB^y!XiKqnmbpy$4h@a~v*~OC3EhgC%68;Bk>GNzxZ%d+@@X
zhL5R#eEbNWY2YbTI`(?&=^kuoWm{vUYnYqYf?24OBFB6%BjDGsv{R1jXwm&vpE5FD
zy0;Hz)D<Q?P}d}f=LvLka1o`Pc2c4dl3eyNc{h@RscODt=YdO#?!e%{I07FZ|8H)<
zV}sAzr78S{kpW@YABz4<(na8v?$d^d{oN)0*HWN8d{bY41p}k{RCX&)h2J1jR8Y_z
z11*5~&Yh>rm%azF<PFvsZ?YY7;Tp~K*Ac@@Oq@!zpfOy2Vew^O8uZ|ckmUb#od)Ok
z^=$<Q_hD1Q&I<Up)U<tkd|H3~D!xiUMz*uqzN^Wzbbi))=S~RxQ4$o_1U{s6_A)<w
z{5XKf2!1pa9qYHu=W7rt8-IrH|0zRKTwJ%&#Mj3NtR&BTT+WWyYaA(>Yrv#BUb1{U
zAG5WU8W=0oTwKvh-%=)M*(rDr$vEGy4Q20Q7lV_?AAmRuyGDHDA&^}^+nC0TPyt#e
zptSDLvjBSirR^X2o;SDaQZi+9wsh6!r4#FaBazJ@h@&peYbnO|>ybJm7BjV4JxGur
zw!uTG9K6GFOGoDdaO_6ppg1SPDcc$39~6{6dY_O`pb0*zDY^lElF2}Ar|Ln?HD#V0
zP{76(7M8xuiWucSZ*M`{*(bZ(N0L(8bEl;Whgo6(7B$2wg7(LTH~lv6JK?a9khu^_
z>ZhTK%952e90@P&HG5R9J6+5y1KHF~RZ#HEmx2ml@Ud6m0Q5FvK_iq?Y%uLhngPTC
z%r*1#80uf1)w$vUkdz7bU3Bu~JZZBP&OYr*p*h^B(Vg!^?R#vltqlQ7(E~UTTy%7F
z3<tHfGr(S-Xik5L!~HU%*OuF76CfaPoqJ>KMO@G}pP>gE!9kL_GG1m@0V6cTk=#Up
z_0f(!9dB&ZU2regIjqM-XC@1;0h<9_WKbSj45Zbs33_?`R4JI++CK;9(sY{t{q8T{
zG96EP;xQG)VC@Fj&*HPQpHV=tDBh@7TRx$pgnqEzou1cYeL@P(nOfI_*Zll_GJI0W
zn>Z364DF}NpU!%2lCdO>0v8f)YdXd6R@2p7OOtFyOyKg3OsE7D!;n+DL{P&;eU(-X
zF)r>>bZLagNjawb?%2cxyQL=3OoPO8kB5emUc3LTIzPX%zi$A9<EY6m0`QXFNn>^0
zH^-2rYi?-)6kPFX@?Py_YW4C7efnjD^k9uk$jlW!tEJ@1MJebMGPwz$l-k?cE~yN;
zo$OC1dRkgcjjdPAo}+dEbv%u!9%yTC4<^Q2*w`-t$u|vyM&bChJ*RDCsRwu)B7o2Z
z;b%C5&-X@gW4<b1F-gB1jMhOkJh_U3^ZnP1<UQ$_n&M)cKWfm-uk<A^0CFWwNMBdi
z(%AS1x48Jb+4@vp-1wx8=;&y`6QxMqKfq=VmLMoqURhLpO%@g$?6kMije)bWf<!{i
z1u@M^rCdXH9qX%fFACK6T)Sh2ovGVL@@w4P(X;NjY=lr|{#BCo1ps$PWW}-!Fo^QY
z%U=X$ifWV^7kge50i_$@!_XcGdIirsc3}j+1>s!QSK9hql+9n-A<q@AIvTbT)K$_Y
zuXt`eNW1ML2O}Zi-_jzYi1*6#+y)$#WrBr>jP@y9DM2gJ?&h(vU=d)?!H<V;Z`B%f
z22|G|e}8)$o3~g3(Tj<m`vYWftb)AxqejRI*T)M~!$CKbs{z;G#6>lTGyC#t4ef4i
ziFLG$*ZHP&QG8&~Noo`pZ8bK{8Pt$CJ6bWkW$jGJ_vA>F=q<=BP!~b(m1DCMKsagq
zM7T0XDIWPC<KlIII7&AOkIUT-DK#=WT2ad0+jk@VwS+NY3%LL0=eGTLT@ht8#_-92
zLt$`Y;v;zq-lRW)5vX-phHnyOT&!UAh}4~DG&E76+SAocl49N!R?|C4Yoc6%SMS?<
zcev2ebwo00Wd`U##>)6+ibK}>b%3Lv$7Z<_KIC)Xf%Ktv{LAM^^sV1N7u3sg<nWMz
z>3*E%V`%jBwl1#O*VPe!2hZoc@!We%?u&*|;edaS_Pn11#8X_WfSE}U*kya+3?e5c
zevS8xM(Xbuf%Bz1XaTpNTaYDmc5xZhadp*DcTbalv?R!zfRUy5kepO#wH|i&u=i!k
zsHoqwcPQYrS$xX~$^GFIV3vY?5pZWRW?lp65#(QF4z`?LIlb4x5+g+0-{2XjbzZP)
zcp$OrY!@m1Z7J1HjBg)&Xy#+zJqQU+q@L|E7<bzM)DobF(5uqqPn>VJDg(DG{R`lt
z`sk2;cf5_)kJ>`QBww4G=lvxDjp*xa`ly&%q~Yt$mi_e;0BnO(RQl;Hbr~M#omx(u
zeBHqnX8X@KTMwHDC$RJT2Hzxof+k-Wy%e9}q(DB|aI&0--DYjf3dk7}tH-CmpQ-!v
z+5W*d7}{*O=oudmQJ#nRlu2NfVfUrocL?`s7Q^JdXL=9Q4P0ch?3zA#mxX5kjAZ7?
z&PAbsojh>CtndjoO$FYs;C!hZ#g5ca8C6F_9LdEX#%QC#YxoXu#idvkt_P2(&SuRg
zN+03K_R?xCZjlGDx}g=jdOgLj<5LU*$`&gl<vrZ4)HSKO5{-%=gU$(g!_?*geEZLt
zgP7j(c0l%o&zPiFtxTe&xOjVQG(6+7!4NjVVH85y1=vFW@vc!MT2|eU##UW5${so3
zakzC}dmrV6>`NwcPctczKG=wld13KzLrn`9O<2A|fn8@-W8cZ$qq0liT=<8C^rJih
z1Z4%vOQ5QnS|7&Maeru3*5~EDdE-!_v`Yh+v5&J3X(08TOjaf`w+peoOZ~K=c9S({
zYnKOYQObWxO#BEcFFMpf)=SaVAOxQ648DxnBH}$<HYr2D(vUvN<M4)wR28@#71Pq<
z(}~EjE)qcO$WQs&`kHx`r0C$F1YKa-M|3GcbVa6Anyk#srcTXLQ?YR0t`exN>B<Cq
zQ|4feh^+8DfRRg&oi5HP>CT`ti+-t75ceSbVHSQf;U}9Oxa??u^s)F5({=VS@Oqq{
zLRC>^o4H*#nl*`-f9YV}?KqvLq+8woLSO;;w9hPg*zR1Nh9lsccC}rga-K<9!e<jw
zb=pkF(9a<Gyw2TW7bShcW(Lue=X?$PE_3Ws`uc=cz8J;kz8$oRf6@<<9XAW?BIy_b
z=96sMhgF?PO*G9bzc5dbtwPunP4<^hMNm+y_RSLM1ph<E+en3gBrLq)GGn(2%Lg<y
z@)4=J>YbS!zV&rS7gTj*GrMuKf=o@A4}D2g<;yHq&sPgQr>b^;bms?g4)pdWo>S18
z?A8!Qz@{n)6F-bCrkU>d#Bo<X(wcbkXyXF8Ov1kj#G~ayE%lMZ%q)p;3B@ywntkwT
z$K@(ozu+JVs6$aH$VD3dq|RteT9fnCi;ecD4LSET89z9{YnwayR4sHX#wpUUm4n(^
z@$E7?f*KYCbwcHH*lGVTEj+xE^H@AZhl5V-Awi?3w78OznwA!r19_UrEt^TgU9v3s
zg<pB-xu}0jOL<-3(49hx@D_C5#z|Imz9dC{+pd`}a0l(oO+A<U!T-(zE;t0{UUxl0
zVCdAl?IOdN^V{UD{R_VuZXK5y!R{?{bFzljO$srtU~$K_wBJuM>;h6DCxI}5N=+!Y
z844r>w(~DY;HU0csoz>2{MFp7(EWs+J<gH4vuFADAa%p>o>p^>o?<FTSp8msb{)~(
zyOM<=tVF~2m#loxZ&}XP_xfhP(d#QNDuPf@i2LJaZ?G@2arMO<L(<>RF?&exC(wfT
z2(Qyh`_(MS8>dzH(J7+p<qp#dtz0~vCP<b}$^YzMk5GipJYS;*;Pv$q;Q{m1apj}3
zbLw#-FXJNO;vQ?*hb1^Ei>n>IsaBQ~_q;GkPW=`UMGpQ6r}8v3KIa|PiQ?V;d=91S
zApZ=4JRL&<I{!udD}8Ss9EF48*wAv6ycJvR<Kr$r$D+uGX#DMAUuKDrShDhxl2_4b
z1O~EBg)1s6VR@DmBjX<a_j=fN^5*!Ym(NvSRN~uI@WFQ)^-hFVx`K*I>XJ%N=ObB`
z!@W^HlR-QmEOnlAe6>FhnhtTVmJ)a78hy%fsO5icdr3;(kDl(Jw`Uf7@KulHjZR`u
zMClXN{r=Qt!t2>8=$QMV4ysNmV+5D5Nv=Bm2-j1sj-4vPEEt2rWS1x>R89&UkkeJB
zqSear9^)^^zZw6Lp(nbukF_iYAJqW@Z4r|0P(~LSbTZLh1I9c{3@EB+g*vW)oNFE#
z$#8Q%aX$&tx1_7s)a_yZel7Lm5!9gBybSe6DBi&g0_&?2#HqQtovTHU=?VrsUk)#=
zt#z;<6K3YUekxj~e`>jvFRAJ#KQ#0yV(?lv&i#?}SO7u<Jvf0R0sp$JOBxorm9IDl
z#n?ndh}L|u(4-kG)r+<Zv*hQ03#{Cd*ihc!QUk9SxBcwJT!c}i&{ZQecQ6EwO#%X?
z((ElUWEJ~I0)~dzA3O-0Pq?``>nSOmz@#;?TT_Z#q2Erb-e0Iv_+l6p_1-c{mYe%N
z)tUftgu$)y@)2lD{2blgcvq1~Ih<fRzBMyII|2ipNtGqcs06U*h6y6o+{WV&xQFAB
zLa^)>IbL3VKGbpy(nm)no)Nam#nem0E+%^S!ss4VSHI+1+i$6=9;tTTB{z82@xl#L
z+NB7Jb;7q!3PV)xI!o({iKuGh>(i~RDzCou!WNwFZmFy@0CWQ7uRljgfvUUU)Wv_N
zLh$0cLB|*im+Zi8ncgrB!arssc_JJ+jLhn#pkP-71uen7{laoetiEABS0zD>_Zhr5
z9@=k<M06M-Tn!+)FNasM)Q6+74nYmd)MI7*ruZ{r`bt#l*X6Y}*!55~Q&-dfSaQ%$
z^!nhSi3U334n+6T1*SHpeY1|IffO9mGI??q{OAnk#aWM~7_)NCWVceK@PUH6I-L8(
z-+w!vo1BD66P%3LjGSDKC-cp@rTTL6Fv@$`9b<YZS^WjMJ~?M?ZCz?0>TrOyasj6z
zt*!hJ3Wahx+!DVy=lS<G+N|rfnt1~a2GyU5;LUA5MjLHwqk-TV4(U+pWAujp40nmw
zr!3@H_Aruxzb_dJefTN->~y^SU0nzX%u;D_=0rL)a7e)xMBF8I_1ISqYm#*?Og0W5
z3`LtM$e(8eA~c(!iGd~_3Va_dLUzeLU*RvxJDuBddtV<v&3~*wxjB0xOHmwm%ZJz{
zUGX4E1)%WIAHcf<-NTt_RAwX<4|3jpJ6Mb^yMIz(iMu|PvTjVrLoIQ+7p+bX>c-TI
ztEN9YSL;y63yt9i*f@KTluyGvd@8TfOypu~3v;ILV`H4wlAj%DxS*B})lOQoR=Yk2
zTu5M(B)Q=3#hnj$h9x8f!AB^6L%||IoKO9frN3*@4e#OtU3QH5yB{zlQt@)ureW0u
z1Ui2&C#nD~PFkW3^5Wg6c^lK*$iIK{v`&_b4I1PN!Zwu8mXL^>@Pbv@Aqz{1KC9fi
z|2#)#kXd8@KBF4&)Kg5H?gba8L`UCzI&l3~#Gpt3Y-n<Oj<YiYpDF+mm`<z>6zbsB
zr&flAp<C3e)w?mC&9+Nx=0?2tkjr_(tonU^DEk%=3$5)KV4#z<7@8{}M*nh5fiU3K
zah|Dh7ICE6PlNs6KM8XF_%A2^&U#yEIjsW_bwz^vuPS?c;!m;-#pt&clO{`+SrRi|
zqmM#I(iK<rc4f#K7JvzUMgj2<1r1MDBY*7aWSJSQ5oXrTU}e!{NBF99c1Lsi=gQ8k
zHHMWDq8{T5IAV{yg5YFH#m6Ktm3rZR;*hD=mMln3^Um&XpXugIQ}nXHDr77?Y=8eK
zn)Nsd!@p5i00U}J7*V;?sS|Gj+D_xPGyY81S9MP=6+@vFER-TT%7p4!=*|WBHPzKZ
z!p-Kh_1{wN)S+8URKn27zXf0|rm*?~H9>nzPNl4D@LQdogF{Nk-R^3I%<^KD{@atu
zd1Ci!M88R2cmL?Ia`P-R56FiUh9VaWsGG@i2|V0`o>vTBsnbkN-#2oG?QOGy<9PgY
z4L>eA+Cscpzb4DmP5-JvT}X4dP-Jz`C1_Eh<KWn<+oYce)3+yJ`H3^@h;z79mtseq
z-)^o=7Ch-k!Q#H+kZ<P%*{^6q`o7s<GwRG=^n)g-Kbf}v+>T%qtixh^ZpUI5o(dgs
zccfT|xE-jB6UVSyr`~6rC?1TBjXgWv#Vam6Zl$1R14sEeLLZN~H`LCk|5GJrRgVj%
zETOSk?&@D-kLUQ;F4J<0t7CW7U($44E{_mtSuDw(N-36%@Le|G912!O0v3Dcef0x%
zskG;cbYBcS?z44$T#+sviQ@7S6&6---p#$Zg%X%wAYdi44d)R5sPBwLwUbo+bdRoS
zH6^5UAW_#Rp*Kb+ir$tRCX-ms_BJVaPnJrtFRT&US<8fz_0`Ej2?s1qm`O=GN&oa}
zreUt^T`tc!{YX(4%)2*cZGM6Y_ISIM7OR$p5&`Qo<!qR~p~-%As}m68EAsb;i0xsL
zOkTNzdi!~P$A&)RJ>`>~xFATo3=QKfMqlSs6E-}J!PF6E7Lv0T&<daxi@@A5aJ19G
z-DT_ok(THQW$M@Xw6u<I6{mF0GfmhO9|SzSg6UDtutlsTfEx{Mk-vbSCM1pZ!@M_d
zQKd8$+6Op24`w}~szWP22!GK2T^XmDgtzYB1dl5$SD+0o;J%yXKRv0Qj)Wv5a@HI3
zpu{!HVg2R*%=rS)u46XxT}+8pkWnS^AGT6>{x|SPJ1nH-ye)6>ekjWd88Mv-Yu(;f
z!FcQhfzTHf1#YB-L<guN5M=xMb@8Q%cF#=x9y`o?pFJ};0^c_&KK{z$;;(<-2wH%*
zrcOMA5#bSGjl$nw{_jrqR^3;IZdywk8;gO^4a3!#T>>EF*zT{H>^}!V2UgTVPX-=g
z`Br%aYZ2vte+&&dA=!;vZ6Kcm!q{dH;f;yc7kGuxGdWoo-cT+{egj)r(iA6(dHK6-
za_?Sigfw<+R21mHI}8-=CnHd(m;e$70@*)+*|K%HQYAxu3H}K-Tjz^<%s`m&Y1caG
zW=gLccfn%1`T6-@#82?sVUZS0MP53+_Z*kkk6^R~k(!+IyUyy!1{fZ8VN+AI>mC?)
zVMm+g*!P6bmmH=MyV2=7<WTl3CMG7^hpDlO&A;oD<Xn=s@$vUNnOE@%2yCNTT9@H}
zmiaf>|L|4s_6_J-TLWXAHm0JXT`_c`p`m%-_^Ak5eKIZ^J1{MRBEQ$mr(tsX!%Oh+
z8tPZE!8+|uchs{zFkApgYaRA1!#V_F=5sak#lQVc=jZ3M?i|XZqK-4QTyS;wBpd7i
z---q~oTp}XxOE4Dkjd?hjRFR)d+@f3hf#5IaRri}J(vdFO9@~b6fevVOHJ5j0N^z!
zQ*xI-d3VRfbN7$dzftkSRDLGzWL3f&;No2QGXm>_oA2SuzOwuK7SJBR2I%T$JVd}!
z-)HZCzjZtyW;cM+1z5$#r_fs=_j~zj=u`?M9RYI?0gEB6=k?jx*s3ANQ){zC3NdWZ
zu25^^u$Y5qZ?(o?)J8%AD;(2xe~rg}#g25g(mD)c{^Wcf=54{cwQm60w9x8lWToTK
z9=g=gAuyA1`|oerWYKThV3P)`S5`KW_W{|t2C5(C3sYg#%<>8ffZ^%nUEHLA7kdfL
zUSO`nMxL?Z;itQUfabAZXjzv@JY`_)=619+va*87Are-73<!eP6iSviz(<0)H<*G>
zR>CudLe(>+1IsNmvU29bZo)@Tc7^cUyBqB&WC_^6Mhec992Oyb@qmoX*^m-aG_XI{
z^Wt3V^K!k%S-|<mY=hCyk5zUH)UkJ{a}_di(_fRys*GkS<?cgb#>V()T|=hh6KqGD
zU$8Lm7@LfA-JbX1EZnTWfA98feiN7?hJ7=ct*0y-sc}32@7sercM5{pVg%YnOtxS$
z4GPxUVCMa12%&oN@={Ul7dDhbg&IW0l_gG40i}37pv9YPXX{QX%|^Xo84KWWhX6S7
z-@cLOCId<T4N<_-%A_-saCQ0r9@xMrx)sVADE1RBj~9NVg89|t{QPyuP{Fdr-|Op)
zL0`XpgL38eCd97AL|crUnE3Q$b!I=zg7;Utj90J;m8+bUljE-d3KXmgT<l}Dk`NSB
zaPy;jBjy*03}rc8PW1G92ab&*+hy_?B-kl2aMxhfuslXEPY#xLjl<=A2#D+WI67?d
zDQd9X@Y!w72oex1Kn)YYXa?53=?tm+Th)nqw*YTpHIrq%a15k&<VZd`(M^a{Tj}e|
zW_&G!<rmYXrR)&Pg|R88o0F$#>kh<qGn}FJ6@47Sa(SN67+~pB7h&RUESuKGL6FAd
zPZ#aBD)0Q7=Fu<z1;kI__e8y?i_BD9B`CZ`lVBG@mD&Jh2Z(0xkVh<18XCTQ$6!me
zb|H1J$%zu|g!vDAIzb$p<1TFZ^-FgAyH3Luy-0ZJ%H2=OrDD&sKo?#ev50=}-pG=J
z)f3H@sEmqaP!o%G=!&uiY#{bSdYHQ_`V`0}lQjTu{+(rlwi2vh>+M{fo@=5$(t=e-
zKrgwMaQ?ro_pwPBEIteTip?guu(}!<9Q=M|=(-076H~&#TVvx&PRf5j=Tkz88@8@U
z=OfU=dZV_RDy?Vz-$8uGbL;oH^X?yP@>h$Xn<0Jymm18Eio0ZFWRTE4``a%Fw*tux
zABK_todrZrK;O}maMpyN9YpQz!OtW9b91an0Xl2RYC$A8rk-1Ec&rSyS6K1DrY~t+
z#=(5yFA;FMmKUeEe8Iu#`vrNTJ2k-E;IdgX#{1^_h4@S}T|x=`BzGu34~SuX>gecD
zoJqrfn#jx_5gO(bh)YMOlXE~vhwL=b(|hb5koBu|6EGQ)3LU(WR@ahyV>zWt3~{8S
z0@=DAKYGnck<E#NQ))R4#<+hZ2!7hsLw-(h`Pg;tJj%KKhmC0@SEWHI_XVixbB@_T
z&;jm%brAa=E39eEH0T_Gw4g8F5agD?0Ut=l1)^dVr0O*)HXJ1!Q$^eb%SbddCez=j
z_+{sLUU<RlG+n)C#lr(W)q3PanQIRt6u<8Q-u;E-LNdGsi-=4)PgU5{fLlCw4Zy_6
z(ZXIpcb}iTPJX=p#drj&tW@8Qh_Z{N$l+6cHZ-;3;^L&J185$rYy@7%@)o^*{ZlFD
zhR-UiL0)*c65MJ(Gt>TNW$b&>1|_J%;w<Pr0kiYrTXKxUpEM&gGpTedEU(j4u`)A>
z&{Hw>fA7E2W$f3+DN30Dz#*!t3}JY^uAZmcDiPmy_+e1@F2fjTl#0ilWTkp~dNe)$
zN(exq0HX_B+zc8?{87&FoHY?hi{utquM_3=n36L4{t%(JfUbF-;6>~`EaQ9sN<GzL
zx8JvJxEDO8e77@>$jjGo^!4$<BcFl|8z+a`B_RHp^rzfh;_$rq0VQ_Hn@9&R1cM6#
zg3ggXK5B*9T34@rj9|X7*q%?!df^0B`McI0x7}_uS66P*2J3|g=-F#36+O>ShXGa(
zhk(o;KUOrH;g?Hqd~x$(XOIao2=7vfyu8a5w|?`@t=@n8Ht9{`dLdJPac63>F70t~
zx)r*5@IC&YU;O++ZJn=u&=Z0XRt}E*Vrtp&8dcl-=^MhZ8Kuj{?X%z>d%DfAfWrbZ
zSN5D;%;xzsgw5Hp{cO3#CNxp~-(zEQ!xXObCIt9GH<DiKxb@qbZWVT}&?w&$hGk?h
zd_Ldp)du$$!Qx1+S_vINz>G9JJYBIBc~JjL#Z<xt;I!O>ZWlT6jExPXW^Rv(E5)Vn
z=Q`w4Kl_P}!9qPG><fW7M96X#9tAHL6jGMxJ4N~2wt!v?emh;8w&Luhq+nRa+}hI8
zzcUHc7?_8s{k(DWW~xO}X|(_6(fpHK+vRcx2Lo_kAZ~yi3vrNz7S+`L4hsm(h$pa?
zh;R(9J=)avg!PC^W;+L#D;({5Qa=U;+=g>}=Giwk0+Ap>3$MoL^~Yj}e7ze5qFNz`
zvA#a1<&@u(*Q`=4Xi0s}uz<+#snNr(0T5dOqpn)#vb443hjafNt{82ZLjE3Ak@3Ch
z8oXEF?Bc(v@X+X<@CtexpGQ#`Lp#A7Hg@rtfi&<jo2Iefq47(DaR<0#CNs6$Rko2P
zCKgkb9{Dh>K>fZHOB>u*EdcuQH_D^>cPYEWTw^%Q-214a;7L&MS%<b$Cb2&0zSMYw
zr;PuTJ<ycFX`3wdVq-(fNtdrPLkMUmF!Cx;FT)SBoKMye6U#Dx2<lcqK)}vq#b#sU
z<B2kYeJW1(<Hy7J-1epl=>c1LK<9yRkK9;Eak24mj#@P92)hmRcJMw=)vv$q1qr}m
z_fH_u9xmsoRCQg*u4sa2*=THD+dnCGS4mtjqfm-UP%G{4xD=+R50~fHl$3;-t3X}i
z43p~#30O@8;B}IjcGx%s;mmlE7p9B*E8#|wOzT<Lu`v>xO+Jy#vwv4iYpSYtDhNT;
zSM<6}#eWE83S6;)SzHh~&nFD%0L038v0hQjBxH7+z;G12TbtvyQHc*$fYSwoFDN>{
zM@0PLyI4#01KQIUi10wcNn_W44U{`5VlFmn=7xq~^hQexX*I)fgkMU0t{EdQ+3nke
z_wGr_gv5VHc%y6e<AXL-=QR!wvSgD1L@*1st({-~C4@H=6b2nOUj6<p8#Is|Im%5+
z&b@zsVod1u!FY*^`>`EJqtjKko*?ofxKdL!<bA%&Bo@>zfoyYh4csyi<_Y-&kt8jD
zA#ly!^}OK6N@15*<8o)VbI~F^t#+`mdiPFv?x@ix7c7@aYp}v^o1EumzgS0rhsQbL
zbrU_49&8}h-QIJCwFoc}BBC3+Y*NKIr=LPKqb(a)0DI0A11l;jQgcYdtD@dpOpZQy
zS(*_75VU-yT++nQ&!T~(u;EIGwr6aNg@r{-Ny%qr7xvAYnl?s^Luur=HuhP<2%aZR
z&79>vMMK4S_{hAEebLRfrYjv6M+WX1nv4M*EH6S)sP|#FmVmmLm>48)J0qlMuR*aN
zn2~%;?n&JJ#ZW>`&c!l^-@w3Ng?jqe11uW9ots(j5W>;y@$w;ImMFrGIz7ON_*j%e
zU`cAhgcNF^A3xrbLY7vm%0^fs78MGrrLb<O%;{qLExNbzWnnYEErHWnAHlkr^ufJO
zppDsIWOfHTDJn^ZK|16rT0mprR<v`J$0OQ>?MDGG;jsV?v6Q&@9mlZ@QOd`UO&&5a
z0kreh%*-b6q-e2L{+`Yb!#+sbnC5)Vs)X6}j)X670@q?XK6u1uhbq^*RWTeC5K@x)
zy!1F_!RZ^N495flRaP3UhmyP$D~PFhU#3&N78em+-RBqA+9fM#6fNjB@>Po>KBm{W
zz8g=)K|V;udi0dXMN4seAsj+MECd9pp4{0jj^3FEUKz>kG!Fg}m*y3$F_o*2F0y46
z1Rs8y|HNCgHY>x7#_u6JaO>vHvhOSljs{`aKJl<s*4>?liiiALV=M^Y?z^(509s24
zfzPU2^%s&tx$0O>Yj&b-h!1rLBK%B^5mRuBFuN|Y7?d-_cKn7##RybZTZ@gq>F56b
z{&}qxKEBT^Ry6naVL2aw<G>$r4!bGY3?*-OhAS=u<6sza&L%-KGZZ}ub!}-!5i?4>
zR}6ZhqBu#DR3x00+}h>j(pPsLp`l%b7jCjj@QKC5aIRk?q(=D*1Kr980%@1CG-G4V
zums5^$T5b~dvd+&0FgCY|1Jduv=ph3`<6e-H&>ek!^)r--7$~bAwq^KL=5^ET1u#}
z;hb&n{E8qqA*E7WM}Vs$Gb4%}Q@#b9l7bFW?bS9*B5&Wmhh=RBj{OLNJ>L|PSq{L!
zqhL?R(8U^6#wQVi<-Q3Z%fc=>Y35)ZD(Xj%<lOwUxrs22$|9j3YoX7RmR_Qz0n66s
zjsyr2ET3g=uEV}PSW5h5hJuc0rrN%@zvwDDkQk^SzM-yey1m_woz#}vO9v|((1cAu
zT=fZqX@tm65h*F~lTX0u`v(umw6fRKi}V<kE+AZ{2A^nBSU}(UfP0@==R7tiM*^<0
z#>P)i)EYb<kRE|jV*0D2<0Id6bNVs(X`s0g8)kDEfq676?tO5*5y~T{A|^Q9i;Aoj
zoxs`#O+OLEV6j1oNZ`t|BUvr$-#=!+(*x}ynNO*7{6ti=f$J6Q0B3|sHZ_nSx@<m5
zgp(btbK4*Xa5@U$dTvixs?-w}#rq}-B?h2kV53N{XiRLZTu}N8aCfhcI_~XD^SKql
zQW7vXX%>B)@f`x`zh46eBuO7=`!}als8co#j&Z&ON=ZtDvV3?fsih?>D(XElfCz8U
zKEuVrDl00|KjM!qGU<my!td+Xb|VF};HNsXXz1u#0Gm-Su$}3nta(NJtKc)?5B+av
zsX4!)^nkrs-X0=Q4APXeOG|!}Pc-0`Or{626BO%$&zZTn)Swu~+tpdbCh=~cLg>kz
zK%c%N8I3^X6%<4?T?1f`;(k}LruZg#9g_#f1E!ZRKkImYe93?F{m$aE`Rn#D$w2ai
zESr&GsR;=o;w}wrlr~xp0_sl)M@quO!|?It@A8L037?am9;8EyMswp{&o#=99leBT
zN@90L1Lt9<XE+_R2)*`Mj~<iYB`5zO>`iU3S$@XRI2@Nq<nuJJvZ6kj>dJg`9l&Rl
zRuA<D+~1|O*5y)B4PZ#+kY+sl@c2Wy$Y6#(4vwyjTmlAc21`nk3pSgch<}}Mmy{IH
z*{84u2Ij?JZpziJ!-7xWg<ma61_@hoF>Agp{Vi+RfGek&PNxe0Ru!PpyamVw;D1@$
z=yPyhSgy68q5W>4g1`8pz**tO;_58J!cr94Ir^*fNB<Gp7GE=6eMDX0K#3!8$BXQr
zFFlx}3is3FJfHtqGlXWGnQ*zl*Z%|K`l33tE|>q`hk1Z^Cbb>S`TBTyy`G<jQ9GPQ
z@;%ElH3#p(12N9CvVQi6hUU{!D(%YH&XO6h0(q=viZSsLzF%7L=GV^>@CsFnHkvRg
z{>^LxA`UvG(fEsO0b1^Zwg2Z&218-F)$C}ofdWb73XIW!=>6V~;gT$ig=PThgIT34
z*`R;jy%!`sp_sE<8?(myb^_^Hs7}F!nh(ipAW;!eP{`cN14|OrJy0=K*KpX_+v_&s
zM*`)#f3%PXoJ6oz^EW|edOFY%=U{&;${1=i2#dNcwq;*dWS8s3fF%Gq1kzpDIH#lp
z6^91Uy4Y$mgoX@Z<t3#1B$}wGTHvD#T~4vr7WfRoXai6K0QPPUq%#I`xuAd#FaM1^
z9(*AJj?j-lGyPh(x22^RW`EH3Cx^hf2-MOIu($nH0|dF*boHhB2oJIVo*b3t_qS9y
zhbNez2*pqVm4c}bot^5@BV90FB_zy%&<$c(zWUxpy*~U7hd*6D;6-wEo%BL?-IazZ
z$}xP~V0nZG&g1-42@X*PhAssK1*E&vF)BSF0Wb%ar;OL(ZKb*Fu)mRU0q~PueF?r-
z2#(G{tQ-bm{h2bGU}T+~h|qNwFf#`SJ**!Aw+?F9-#ZOV@EurR6BBh5745*Z&BiBW
z)-^LT15b#9LxJRKOx}k&Pv$iRl>)LHnsfnmQdlRJ`Gn16z?iPjV!U_~=CoJgC8mZ4
zHdFH6eSG|Ci%D%v%(>m)>t{1CGl1Q&FvEb2s=kkj(=(tR-&tCxg<=m18Q82B3));d
zFs~g|)ng)Q-^Cj!JPvRGl9AikrL$9DY@U+)iUoGck^IEhprE6Z&3I{PBEwc|03!Ui
zQxKf?_y#3{zCj8P)2_o9As)d-8(;6d8$lKI(mpRC!BSK6bfLBPGdA)*DEd6v^6B^n
z((1pmF2I{O$2ge#hv0N?)FI|WwaZe6l<8JxV#eX|G0dI{z~9x;fjs%4;7xc6Ry>JW
zE>s^p?XaJkn2@m8Z1g8+QD6z|i-HvbV7H7p94lf&8A?a7g#M|tU$q24?aGVGhmGa|
z43}wfaPP6&jeSoBR(|Rp9q$fgMZrLSxi1hP0nH&mYFHTt*Ye<xg;u-<Qjc=W>2l-#
zd58&uabB4PnodBlAAvd9@Gkh%OCS~KdAQ{@YXMz9xKyJnA{jDo5>TaQNJuBV`k7>x
z#0a0zQdV~MBpBZo5Qfp*mbW(p(aP-!(J{?lKLTuxFox~^RIPVaX*a7;1kc3S7+73@
zJL^A$haA=f$iXhY93$u~WEBv_#pZNuIX!2)y))AB>I!D}$ZZ@PVE1-PY)FVMT#&Ru
zBZWH4TXSKA12ooPZ-Xa4^rJ!i%Q9F|xc4WJq)>7|i+2z%>!YKi$uU*APWhGEaj;t)
zT|-sVe34hl4nYvo*-BiN4O8@!n2-~Alj?;)5W)l!?#e-yVPSx?O6rDw21pMS5rVwW
z>hK7^J10(0$3iZE(CfBP>99A9>py=!#zuR1ACQ=eWDreA{|RbwXAsEhGySQ)vCnM*
z^*jrXf^Hj_PoKdt3?_At%^7zvyT292&v$WH9l0!Yz=4#$x9NKD3eXzQEGAHZe)hhy
zC~s=29?^vO_;;|`x4TOcS|;(b%Ed)}N=k1}(U>hl(cuPY3c(|nD*+?lwsHyr!F~qi
zS1LG4*J%k1M-?#;KeIwbvS~Z(=xLj_ujGvOyB(p~$L2U+xdPjZ4B5M=FSXNWZmKfO
zb*@9b|H{=4>0ksx68%y!oS!*8>Rex6pD4A?RHc!YEQ+T4gh2g$<6qv^mlus<cut6W
zbPX(NiqVUk=yeX;jDUZK4WDS|KEuZF5!@zpj_8LBv8a%cJnUi;ER}xYymJ6Rg8)Cj
zw^c%WIHpzbtI+*t^3$C3h107{O>3xYOjcKqOqQ=FcJ;z5r42FxD76UP+Q>*1h^9eC
z+Q`U=&t?%4T_}qmJv~Yl=Hr*hJELVfOG_Le+tTtbK_<n#FDcpEd+_7+TPF5wyR~j^
zZXdn9x$Rd}i&Da}vrXXD2D6Q%z1%tU@|Rl=!R)48l(LILvKec|ealo+Fism+Q=fqQ
z;Rx__dNL!07qHWEj+prWV(-1<x$gh=VV#|oB$U0=K#~!XtRf9tR#ZfGqzKs!BO_#l
zviIInSw%Kk$&6%#Y_iAi_;g;^bzi^Vef|FV-H-cwKOXnvI{)f%Hhezs_v`f>$Mbj|
zhX&%4Q3aVxP4R>Ai@Y!2-(Q*4>(*-Tl{zwh9OC7M${Q+oUx?GDm<Pr->!_)bvikY@
z#&I!)tZ?e9Y*1dBe+<s=)g2b2jaMW$1rr^9bI}`}7ZN0q!6r5Ik4}HXh=-tcjYi`Z
zD&Vv<vzx_ljNe@-4Y3e7b*cxP(-G=pm52dYtw^_>V!%WqC}4I(mJWUY!;O_yyMg@>
z<1ni6%e4P1@e3^jLp4WCpPWj-?y+O4IwAITtzWJXQm3*R=P3#-@`bVphy7*=B&aKu
z17<OJ2T%ENtVo@<&@O@_H>3yzX(c2M9m;WBj$&tL$4_f5Fb%?;?}tn1k{19c&}55H
z`9UKin3<K8bs+u{FQiG3oxl^>hR|Vf%a%nurYz;yB)aIwbiN~Su(CY%9iORJU{Y>T
zQS#a_eh9ooBi}_s7BpKu{VRxc$kZPx*^gDiZ%@E<?p{j_8%hD}msi*gIOB6odr_AE
zY>o?lYuwy_f2ewEYyEvrP7CZ!o{4J}n%PK6iP`9Y@7|UuM@5EZ1SFz~u`xmOE@5n?
zkE+gBj6d436WmRZ6R^I*zq{&2q1k89=>Z)XR&cP5fekKr(P^<hgpq0=WL7N)mhRo-
zykwu`v};{1G^_P8$!WM4uNW+*0uV`PCRP6c@<i38t6T83sUR2kk#*9{BK9GrZdsa<
zTw2PsLnnd*npf`H^8I6J)y}11<J-6CX=!UjDdCv(qv{uF4QG8^mUpj0-h+)5`m`Nz
zB*&<njN|ChXXGjePs6IXbs9uLr=4U9OT%?O_@EFy1*yZEmTTOy%9{+=Ba!AHWe^Uu
zdTQX2Kfzy!>Rkh8;-Q^S&4sfTV(6Heo2<Ml!r+O3w~(2ciOs7j4$aQ9^0kiHa0L|}
zAhqm$qu@z4g@yFt$qmEA?tuX;3a~5^0BeIYVajrHKCDe978X@*lyd_w6#~`z);E`b
z3!ZCcK69@HbIX)D41&I<s1UAm!NI<AS4rB?vs$(xapO>rsCmvPY1+1oU375yEmIXQ
z55eEj9+~HaCXb4~L7UJw7(HUN{+G6{?%Ua)$5q)uAqd~QzEag@o!Vw%Y+U1}ru=-Z
z?z&Fy4_XHsh(RTEp1O5z8@4f5ZZIboMOL?)-G>VS6Y~l5W5rlaCH2mKdGhsD?{!ef
zj(-90FJykr|Lz9c8WB`!KS!58VM&8DdZAebN3!m~G$h7u_m_;MrE&4_2t8!ZxPQ9{
zg#luGFb(CMJ91l#aDLocHO>a8lNJR%zuVx9?W4)Kte}vepP!qb-;{OyfO<#D?B(cE
zR#*A#_c*<2_6rx~B~W%Bxk%cRdwV-px<Vye+~L6~Vc~|m`t_E;v%-Wey9-Q*@*`r*
z)QufZVv`_F2PWBW2V+*0L%0eK^<6J{C}j9eHY8#N4cNl@rw*#SllIFmjzT(qZVoJt
z-aJF$(nP^rU{nr1f9y?CV+o{xDg%f}K#w7&D`+Gh1yyi7&y6!bCnoBLX;@h9TI#yM
z+9lt3-yT-%@vXsIc*hPGpq>x{{c;Qc;pt*k;%l-JtF}s#DXz|W@mL4u5K8bLAq*Py
zPRm=T#*f)`e%K4rX&?it-ielQHmKmSV8=S|D^blb+K%1WEhupKoyI1;`}+0J)urCn
zAN@I)=O#%Rjt14=gD{a8{D?=oK(TFnExf!w!;z`A&<lak<F#{fe^YbJ;FptKFR;hd
zR=<Ym3lgOCOfya*LO2+o7gYir<~NrIn!^_;gJ|wS763XEFYN95Ks;5}8{SyW-?%%~
zleO5Fd41dHkSBJE(zJ4&V)71dlDD~@H!zTwcwK)`hPnIpb_&-SyXiLS6Qimp<z$X+
z5{q|VGCe@y-!k+qUP`zyAof)#5}`;CxvHxCnOP<ApGi~@#{2p;&{%fu$yH6wX1%{0
z9y=8^H<Gs&U&{80KJN(|iP6sJ7_!Fb@(q-9vq$!Z-+L8t!9i(WdCBd`=pRTv9g6GM
zrLDH)>v{aoERn|?0;jI-o!DRJ_~U8|qoFE-Dccy<LA4~_!z5EcU;#T#?BW)wi|<4u
zBDmV7Ko?M>i|x8{#8ey;zvAE*Qqt0?-!)1do)Zk)m3)0Dmwc|jf1ovbT3SkKqQg4=
zFk{D8pwfM5>T>vg;;+e{4Lmr0HSbR1!~_GkquTWAvo`fpy~1Dw<Qg?)x0TMgJuUOy
zlA-=QH&hcIMtsTr_f&5=gpYJ|bQUupVcYN~J|m+4vBCL+&f7*JqPdlM&K`kmmEpH8
z1Y5(_kzJe{oRde>SGVeztUd|WzOE10oo_CiJ1qZH-eD;;f+OZa=uPi<JEhb6Jv=XE
zpq&G1U1aG96Q<seu@Par_jYtakr+4v)zx91c*K>l_T*)3c%#M8zcuT6-I$hpg%CY{
zeci0KG98c@<UR#mu#xm+wWcvpKT-Vw8ob0d1s=qJ^YY1WAX;Cp$^~L`@)}>XBoyA(
zA^3>P({MZq*w)QAO^_aRMSZ<Abv@+7zTz-HI)1L75~xhioITrL{PW{X8;wbQX*h@I
z!&wUVM$D|{<PNn}=L4nfD|HM_%GOdnle>l4G?yBMqOsENE3#ggW&)EX$VTMquR>M9
zbOVc+dA}YZTy*W2Z<g%6dBco)tdJ&_IPOqqsw(4ddwon4?B~O<=;h(&29l)J{nU?0
z(?qi3yDSf&>N`!H2Xo~zgxA{I%k1C8tsoD8Ix223CujCXA^UR+JNQDcv#ZqxnRVw?
zeR#YR3&GOQRf*Dd{}k&mcmgNrSv7g-Pzoa;JUa*%K}>9};t`YNgMgXncNpeTa+J9o
zkn|2#i?~r>GKZL+Bp*Kd^Jl32D_k#kPv{Cr{J^)wP9W5e_U-~FqW9{tWQ=QoA2W(r
z35F<%iw~gwCrDpX?L&)|8vTX+Hx&7bQCrnz?UeQ)EqgG2kXlT))M2yN@(%j2+1bG(
zyAw&BU*dRvIF#+{OA5A^YD$)BGR?$e!q=A{eBAQ&O(S|0gr&2#lMh8j9e3`G$BHX7
z1bob%sujORIi)@|Z27#6LA~w0?Pj@Z0!HTI{QPsZFXE}%Qchns&DSnufS>?jMfUvD
z-SvuBgx+JhInHJbL(AB=oPKuJ){LhNY70!;nVBNKX5GY&bawWV!Niy2mB4JuU7i*@
zHhljc<FdJC7*$<Su>pfxl)M8@0(ofvpxrXrnLUH$oUlc=vv^1e^JLHMY%+h1jKDvg
z279h9Ut2&mQc>EypP>)>2a{*{^gjtpZY~bJJbC^2PSr0F63#u}KR*4p?O+Mc`Giw>
z;8{Qj9cde@vL{)DIZOFAZ^(L3awy&+!7%e6M0ZV1!w1#kbg5}+Y3b<=4MTh=AGbKl
zG@laOs5h(!XACr$e6er^CnquL-9Xa}FSW_dE-xnw%SMHstGeQ_rb(Xhmp#=cLFs^?
zbMW9ForA;vY{4?Ab>F^;S6;4vOtQTe^VhAHt-sO>60Lqy*`#JGLZUnTW@tgeDc^+9
zTX*g>3`@UzLBLZ`>`R^BRWT_a#`lLk0buBWau>l3Am$82Q5@)F=8wyZ2r6p9cuQI)
zJlrI?hap+xO|VHyQr#-|F55%R&V+f+AF==MCv<kD^f@GJ)Ls3deY#3sSY60&Po{D3
zVZD$1^)piHwtej;$`ak(SLZvDIp6HG|AmSt`0}6SPLa7;mHp4urga2bFJI>m5%jj!
z*q!<y-8|f?^7={kD|H<_?$r8w=3Bt1;!M4Fj0Zo{+<teeGTpChLRTK^$zQOz+VDk!
znkfIZ2MgC*vf6IKAN)u`uyDwG85Z~8n_Q-f`|uOdj}qZBM%cOh2MZ{apBivTzPO;T
zW%G!ItA)&|kQ^0uo?fU5{{4(nQsq>G<8^t0%d<iCl}g)1DmE9M4o6(~k-OTa(HwW&
zEP7OGAx)iKW{YfCK`JjWNqd^0WO9s=p!sm_tAzXU;+IW_4{h4WO+EIPwJ2Vs%x&Rg
zt>vLC+j}+KQEJGUQ=mm(dg99Nx9mn?F(qD~hT_dKPrV!a06!A?i+<)|5z?IE3s*O1
zdefpSw1n=QE;Nh_dUxTo1pf89KdzAhg)L_c1-@lu&z>{ovtEmfcxia_wZrB3LhGKS
z9ecAk)Y+NUvW+sezm0C|voyJn9&_EpxxYV>hC?)|pJa;Z?Ce=(!$JCvnQzCQa~-vO
zpDMDDQoY1BcXnGht1;`(qkyCZ)k!Szf=`$a*taVBXh@y)<2|&!YS>ddFwVQbxNA#y
z?xe(()JsiYvV;!)7Hpg7Nxn9g>bN`AfY?nil$-Y?r}3UM-cP8A^Bdiab<;F+^~KFd
zLh9<K=PWw!h_5Bc4k}0e`&Uvf2=?tTdDM2R)A_kBZ@RoW&$uo}?wd&E>+ymsvq4rK
z=TZ`*P8YcR#p*JceUMHe==j!|(ii)K>|X>J7XD0AdV6(O`=Ue48;4hk63@@`;}rk>
z=Xlwl7s+vrTpY}fQt@!BIllSuM!dhAw!LbV?yjh_AJz|5OKGw3XT+_BGGEwVc+G^A
z@CJ$hoSyk7n#5JbYFq}~z0N#Cfx+y|EnLPG)xti;?tZdQ*m89b-ZJ5S{&6~%i0II{
zL-78n-PcXRw%mELkULraWzP7eg5cn;ABuDJ+f|8MlfJ4mWlH33YAK}8^xs_c&c2GV
z^8G*dtO2xE8pNvYUC=(W{HvSyTcDJF$hC|>KZjSjeib|?IsN_AgO(&(HhyMZ^zp9y
zm2KKXFF-4L!}34AqL!+P(eXg@=7r<N?z5_I=iP-XKBRn`aFYLNHd*s#+pd-Pm5;Yo
zmgu2!Xs1cOQRsf4YEx+w!lhw;-t)q5c?+XX!j<X%=gJtxMKUnOn;Qn?PS<1$ys&rZ
zPVeyH^fi2IbjwJP_EqQxbAWiV$*5-@(?GR|*WI}~StupFn;_h0^FI$<D_=;_nKms@
z{ZR1iFL{G=dfb&l9K#o^W9{n(cFaY@y$iX?&=~vgM~sNbATuw~pho<8{mbJQd+4pz
z`sc5`tQZQ`*^@$=@j5J>j8lW`Pn_BBN$?&uP>>eNJij{3*l%XKi>4;U@XuA$-<H`^
z*7Kjf#fbUwT*1rYb2lQ*OypZr6wJbVlHcWQ$L+LQLR^sL`y*-+K&e?Aths~BljV*Y
zoE3#%gpDVSE)+x`KR8IrgP?_vpnP*W{fhh`bFDNh!eW9Hwzc0w1ld}5i7nW@Iw!a!
z>eqSo@bIxyj+7c59;UUWpH3KjU7g%{uJycqYKiGY0}-{qe_HJQ`oN8oR9y8H<I)z-
zRrh>V2)5=`sIom|N%&?5uVks`qvGAIoDuf=b&meDJ8SXMOZ8l%-wguR;z=(%pPb8c
z+a)6~b8Bf?;p-<AlbjZ#$Y=>7Dxu(4W+7Kn)jc*fw-$hMp7T1Yd5C+*udhT^4Uu+@
zl7YW7D}5halTeAs=cl^ck<m@9L=$=FQwbA%$f7H$1%8Pw<6&S}xrdNWhLs=t;r6}q
z_BC+Rjz67hXeQ~YrOKeTl40F}CyNszi1#Zar|+FpY$U*uq(;O+l|cAo(W8M{c?m?u
zCynup@Raxl7s-fZ8mx5(DT=xGJz!yVd!51GbnUJR!gN!jZMQGE_-4dZ#=@ids8=Ma
z8ud5-?XUd_IIL3n5@plNC!`o26e^WB1hGAD<e}7Ysv2c6K5&0>oGEEzyZA3PK1x58
zMy6`3Frja!VpffWe}(<MG^7GoPSf=KyM<lLC-cMDixFAyO!NrvOk3)<8>OR>S6fWj
z$4_oA4cW!!f=@~|^r-1MiszYl;%wAP-g#BEV81P#G*M!1tYE}?`>~4own^;A`^Djj
z62CMx`~U5qtKcU*1lhD3q4qKNIBE6@OkR?$r^`KZ`&uQ5mSkv8^L*PAtIw~7RQRk%
z_)fowbUm)Nt06q^?2`F8aoZLCpmLmiWSTJCHt!&dBKHZV&BSxHcC6Gvu^F%4G`_v1
zNLjDKkZ{-F-HGu_<LYwEP3<#h!vt7w)PO`m6q8cH6HioCM<F~|ZKxT4;_n|j+?)nf
zw9dCy=t^fU7JKw?v%jd~;6Djp6#OT%|1Y+4_oWIyQX7}|MSk_57W(Q@F%Up!l*LQx
zR!tmEVTvF^6k|eoMv4X}-1=OvvNb-A%)OWR@uy4UO$OrV^}IZIbKpO3c4#R4NEp*3
z7V5ZG^vZndn9*&{Ns0H{J6;cj6OPfjRzx%9f)uWNgDY>0*VQh&2lQyFfBu~@A{>A6
zwN2RmF76wi_s)rb%{}`+Jp>xco3S}Yx5Mt2q&t5#{vBMZ?Yw(B<dlwNK>U&^&wTT%
zXjMTuEgetgOHVhyh8{~I?!KyZ{1?ZcpoK#zzw00|$j(^nK_5*=G#psEcY*BlSqdZi
z4bDJATH<`^srDPg(S;8cTW_=~H_83mVFRt4pec@?ZO4us==s5@o9-#}dHM3*+A7+P
z_J<708X9>81u%=Wv9naPoB6iT1!|A^J}CCXg^`36D$-ly$s&S$E*satuVy#{ZWy#8
z1R4vj7iB?FfZCW%yUgkM$W>fxwL(4D0fUZ=aFwKedq>$q3~5*zbXIZ)_iJStWnL>G
zr(bd=3}qfwB-ft9qz1xRpWnahxHC|8)5L`C+unWq7)5PKUDa;hv;c4kyB`oCBpepQ
zva%FGD_NBWMj<Suz)REB-R-p>os(M>^zoLVb<INj>&yK@0CpGxkX`M99?FsZsufhm
z{N`QCbK?LINMqi{R%laRvaJfT$*iN&F;tSH)J|H;=N_OQ%Me&T&)6A9c=ur8|F7mX
zzF3odzL%U__|z$VDGTMQ?(Xp27!Jwqm}z2E;->%xktH8~D!dnVdiUK)sJXeh#l*xg
zYm1GG(<eCaI$V|>O7QcuMI&OEoUCO)w^Nx3ArIEAwYR@EUU^Y<HmyPBVE!qJ9^PRs
z<FTjjbQBRQ@r<P6bIy&S#R)tdo5SIE-#T5Xs8RK5H{bE&D!RJ5Obh4;8R|UKHI*cf
zz=ANLsK^e+B_~g2!VV5rX0Nk7O24SpK^bT@$ItJsJIM$=#L~)3a#Tm6)}`*H-C{qQ
zA{M<NpmjLnW0mMNlYj{;T?KuT2%D&N!cQl1m)3jCcl4;+*1Y~Lf*Q(c^Da6%I_R^a
z=GWBJoQs7P_S}wR$KHUkEU~dN7gQj4QAP$bOpqExqv0$>0pBSgY3}5rXV3aF3cuVz
zbv^hMQ=|L7;sN^_soU3Nxf&SN4F{c~me?!qKV_IdIp_V##)VK^;)kEpOE;pSsd(%J
zn+j-2tcHOw>~$e7F79yDUA61iU$-5iRNUF#)YBvDH0`!`C?iwgB`LnQlq(RJE3Oc%
z6%(6Y9&f*-a59+;K9~S<Ldj2@7-BG1o>Z|-yQ%RuBu$F|MV^aQxn_pLudJyF|Lz?l
z=Oi!-`8WHU@8HV|LFcE$y!#**xx>SUwGvoJmj0#dBo9#JS{MbhbK*)ZKwGCwT3LP3
zGv%CrKKr@PR2pmv-Z#)-lQW%pYrilcWTr+=LV}^?!TofM+XIRTRQoWcfnfFoh6}h|
zPQy??b@Erensq}2>t_(jY@J;mP#XS81yP_42q3bEJ-mk7$g~#lipw6h#t(sMo2f+`
z{P}rA0n{=qP3>>*AMv_ig&zt7PnE(PmrVyyV?T>&0r$d#arp76Zl*l?Qw@`-?G2~J
z*OneI_}GNn(b}4WVMEeP_Qeq_-g03FFfdS$EU`QxVHi4=UUr~BCuC+e{qutko%o~q
z*@^~EP)I14WLnCI$eV(S%Ix;-y7|YfoUi{~X7fKZaiArUcPYX6imkn%;1^?r-~U+R
zp{iZo!aM!5jREx=i!;<5|2)0_Qfh9O6)77L(FfPRINlR+Dqs6VB+G&ry-|^U<lN(m
z!$<(i_i`FIAL%DR(}qYnMT}cR_A2B*NQtQ6s8r^}PsFK(EHv-q!W<G3a`a%vqrW)m
z2wp{X<$u+8YUGOjMfLZ6`wQ%UbLtWPn9R5?@Wy}s^8Eur3&+JMV2#E{q|B+EVO97T
z;y(KbKmEsv7zmX8`D5u~YQ!BK9XXG8pBpsEjdR~eE%lFAj_xPwmX(#icN3Aw_=Ien
zh;cfF(WQ`(1Bslh6#L)GblNe5Kkh@rZvZ=@-7wdgfe%}CRh0mdGKF@`e9m9>v{$@e
z?A_aSac2x)!MRrbD%y*?iH_|<vUAydy;mJlk@O&WoK!BjHe$OA?mr;J$!p&-APTT_
zQi-b~0i)ppQeG`@H+9RiXPh7pRMRH*Wj)$*e5qoXb^>mgxTQnibsjmzxj&;hM)){a
zx0VItNr_}B@Ex6A+}zR8*7nTb-~ajZ+e8861r)7uV3)k`q*lIv>8{OVGbyRRPO+Vf
zYW;EKo0eJ#4F{7rvGUbaSgWz(Ct_e%ds(kW1xNwR%PyG)&>Ys@LEZ2arc@)nCNMC<
zKrVc-D;cUw60pVc@mGrZ5%d16#q^hiUEY?FdPK@U4pIEY`C&Wz5qrx7_c7c)NGrVq
zBO1tpk}03$iI|P!PK^7@x#XYZXup=XXiGb}^HFx}h>Szutyf7&?-9Bcc}SG=P;hac
zOQLQ8bNbAhkPu%B$Y=UQvqHf;6FYvZxf9Ivj;`A|Du83n)O19rtN6M@76XIlQ+A@V
z7^(Lc0%flYU|XoY?W*ZhUk{HYD41EiIuFw(LMK6Wq=E2k!Pn$WlWVa|d$5aky_YCK
zPEIZ;%bC4BQ0ltU7*D1(7r{*LXw_dXva;Tbi*#x{37$De|1x-aQCRz$pkTom?*PwJ
z$~vOphbTQsg1(WMn45E#U(nNL*hzFiw=($aVKsX)wMi0A%g064v{%e@55H)6628W}
zo2aeIZRqvwGxx7t`1cRA_e2bl6;}kcaz9lFYt@U)2+M!R0%QVtJxs64Yp2LpCNXeU
zeX3FrGkr6u|BRDZnStsL)mCiNq9cuZC#O)(UnBwf6}mg9jcXFl!v>I^XhY66HJEuP
z(J>uhDfqe{pL*)NvvT)<7cw@Cu7iM1cP{lYweq8Eu10F*?w7f*_66+ZK17tLfIp96
z>Du}_=JS3Yy#=Pr*n5+YmWUkbN93!ks}OP@|CQ>rI<Kw$PC_sKKS&q!=LRcCI3Goj
zSnv2)0iw^L^q9W}F;Rwm=jl_Y;`A5@QWgzCz*JXPP%nVSg1Crvs_3PqrTL<q2jh8|
zwqPt9c>HsA`IZKX2_RwoL?X9#5h_d~?<D<u)JaH{l8#Hmb3>jW=7Du-+L;x9;jrFz
zs)+R{lr6meG!8^m##M(Xa9z5)yD<p{S(OGd)G!%XpX?UcYWWX&eL<%cV(9DtP~BP?
zY6hm(wz6v<jnNr1AIYl!5Yrzyf?JF6!Sv*fs<yTyFzI=95<)45hK4v4UO^63-En;$
z9tMlc<T2N)ygx6t01P%g=dhaL+s^kVMn3v+Ztii8w5Oto*n^?!{V&Pq=I$>dH3e-!
zB5U|(G%ZRhC@Iu~R)JM2dMc_5Ly$<9bY3HMbX-Tt1z`9m1mk|RS0#g=FL?OylT!pE
zyXVOlivHJ;<?J|CMLvU<kt`ox0s#^XZhYzZ+ge&~P4|f`24rTQ+>f0iqbQGmdrEsq
zBs^w4)X4l#oqjq3gGehWDScVlc?d^`@@`kv*QdcTk*i51(-JD=Kp17)AwCYt!uJ4B
zqXbQVKpF1Nmz3PwHMWL^5H(wW_x8)+l)*#q;^K8I&!?US9pgPL0fNWib|gOpsvm}T
zGebkthIO>OQKF)vK!KremI^01At4(`2$?Mu&s4YQzHeO&PuBbM?1-w)pPxFF79USZ
zPhaP0`e-_@<gDvfiMxB^^XC@pOU$sQz&6CWEB>-i1ff@WM`C}+&d3NREHQGvxQsfw
zyTo4LmB-%V*Jj1<llD}QD&@X;1FEDwWcf_HDk}OqJMFeMqA{q%zxr3dF{GR=2awP^
z(tn;d{@mBnqWp^6dU-hfPtO9c?5p<<nSV(+5Tx-J2KLYx9)YQ3`}5sn(-4dOwAV^T
zSJ$=SWqFZBFEaa-u%(Wdjo4Z`j0hE>Fo+l!dN?s_D^Wf<E9>K)Q<5@YiY&LcHuu2Z
zS!D<iIZX{Y^V#9G-|1Ax@e8oQ^G)0H-dcHxwg2-dsLp$5Q+$3UWL+0%2<IV*`#-L^
zlaM`#f4rS*H!!HKX3zS;Q%#DRV*Ht`=JCVcg4B%O#J0IbHqM$VlkeZ_SH4-wdvmj)
zr=^f>DT|8wLQYId%r%qqA8s8AaGPbZ`c~XcbmfD=uAd871N=$Qz-8CldaLWATJb|&
z^Cq)~%&#n^=>9!SIorUOMIV?%J2|;x<}Kw|;pXL41^X|h*Gn>xK|3WNfQS(^NxrL6
zx$OE7JDYgFP3Jc(mqv;^em;?n6~>SwEKakJ7e0&HEi_#}YA230l%~^n9;{ClId9Ab
z-}Vz3EnA-^7nRMBl}JzWCG6WW=GD8B53c@<7B*_^f-0r^irqJx&WlyMDxvD@(R1q>
zwR)iPX(mCF7W}A|IEW5pYTtxFY3#zIon*w(dsrTRpw`4i_)(8leuvqQp2kpAsbhZ~
z+?N2hRqx&6DX?m0zo;sK%X<f_MWE_PKp%K@VGnk^e(x9V3+|G6=Hxh4Xs4m^bzsZ(
zI<|X(@Z*eYVjPjfMRgD}qwSA-g5KNo-nF=mPkj2Gx)u50LbE?l7NriezTV1SQ$Dp-
zDPy(N>G!`rQ>-dVZu)++8yJF<xAV%NtL^0533m$PXy>o@YnbiUr|cGg6|HZqc4N$O
zys$1u&v<Dpw>^yi_H_Anzp`S6j`%{)oop7NiEc<zve<lS^<-XZIC4>1WNx~6roOp(
zrq?bM1P1USX9qo5W&2*yk$4TbZdc-qVvVA)kg(3x^+A1~9(&rUJ**{MH#UFi`pc*%
z<>cI(`%#6VG;as1OEzqG*v+1%TLwl(V%2Xbu<qmoEZQZTwiDzs6RSPLXfI|-s4FTG
zdc6jgN)K*P$Mg9{&yNrhJxi}IHz-I@5dJ2ZrVq+vdh$n;j(metvJ%=!U)b4JGW)yn
zl7#$phc?ci+W(Rt*X!0(^}@%q!Kz!lYW;@^4^T{<k+`Va=r!`lqy2$3(fEI#f(f$5
z6smu)Z27%z_+R|T2>QnVlHX9%me~!boM*S<^SX`p<1@y{Q<J!rT}NNCvGvvfDe6$t
zpGA_eg9M0QU-l4?*JsBGV~hWj-*Az9oC6g|1gZo0p434!>VeQ!z3DJ+7<+&A<DMlf
zakh%!kh*Ry#I~GS?#oABe+jn9&uHHFV?SEx&MpRj&AcAkS913oV%x$loK<phRwusk
zk9$}dPEQt`eA5-@yZ<Tjo!I80fUdKUGZe@XR(dSUA78gDwbAb|482))>tn@mEzQYS
z(auX+gwGK|M@)$YVGhNOL-fSbDRN3mCpbB|MU3i${ZE~0!=i?`X`AOU>ze^V`75hG
zb<fOx*!lI$DuXblfUTKD{ZWBeEe4$TKzY#)s+F$W>ylfG$=i3@lN9vNrE9#NDeR2$
zvW4d{p4_=y*)oFy@RbCNT|^NgT0S>5ZT|4#l~PLOhu>+pS$gK1Z??Vu5^E+^-qgo5
zE%Fs=kcnJiKyW9*={X}tm~K@*)>|tzl3*1Tt0r40ogF7fw?$kN(8u+6t>5-b?$bCs
z%5{(VsHUY}@KNoSUautQ$iDF|&*s<ZV|#{&ha1EAk0g9rn(F1%$`d?V9e4+ktrsV^
zhQ(3L{F>Qlp~VU=F&unyRN|Ws`smHLu2ixvb=_V*$jGy`GBDcI;D=|%sZkf|3zG`u
z&e5mj5?zinTj=s2gRG8qdpWYOQzP*Kzt2KGBj#h0-aX>yvG+o66zj_jBF^3|Tm7oc
zkpWFynbYVjSwWGArV}vxk`J7K{5iDlm|ZvSdwmX|+n)1ZKRD&QG+y4R<0yk4s^)Nr
z6wzop){_OC2}|jNqTe6wlnq(ycleb#D}s14`_9RJ>ysBNlfzi-_;@+fMY@uam)C7)
z`lsA!bs!-+;BDTOq7o0e=VR4^mi<sxxA^hN>zFWRrIoFhSVK%eSH6TFM3uhLsrUf%
z%_B!P3p;gSf~k!xAe*%|o*YfXbAyT@-}~5E$#rwHRC;_4WtG<Y<$-AB7yGfuntN}s
zf?fbd)p;gG;!9nnIrn662snx`Vr*I~GML9Hh?(Dc)yQb{>vc=48w5i`pcA#*a2gbF
zJ(~qSpDBf|UTd1v!2CYm5|g$BatI*bu(}4;=5l}WcDs_K>Wlr3zbB~E+?V?uT?fia
z!O3RSH_*}Px9znE?K{oEVO$@4+{^a&gce$R_<$0nc%P#)FLy4YAeKwYb8Dfm=pTK(
zeYI>~Yp(P95-vga1aI(6Z&9=3OsOym1S?^@o9a4_?YY$CD3^t%q6&SS<?UHdN;wII
z#p0Q=@|m(d2d7Xy7FfF8C7fz1^@iqVe-~Qp$dT;Z2NvGpl(5OkUBKmVR1RgiNG^X#
zOh_OY84^)zu96d6#c#!<tNIrOx&Lj1Ra4(pfy{f%C97=h)tKfAZX(9c?O;vis%?Wv
zN4w^_GU#b?6XSKqo&w%_76HJH_6vE)29E}c(@5N!B_+>pECSYS49jiJzSnYo4}4aQ
z$6DHDZL_ZB>idf?k!)6a>M~^d1Sswy?=PR^M-Ni^Gs+Q>7XLy)N?z&0=P-mo_8zbL
zet~9RS?;g!tA<K=>sj!xwoqDt7*_%c(lG}e=ih~V3+%7W590CVlySY2S_v(`A$IS(
zOAV8?`4405+~FTv>#TIUFZ?p;ylK}|TkEvgdMQYpTzpX(UB|@N%-54zkOQYTj_62L
z4F#t;()#l|Fgp~o-v7!fhSWj_?p6a&u|813x~-NnBz0-=9K!|;X%8kshV8K1#F0fc
z;n<#Z^1a=_+~Yl4^!O|reri^S2={EJc&0xhLgvoK-t>w`CIs7%sj~IE<Ps~&`uDds
zR(VSo=RZ7N2T7aVfrNy_Pi%e+#lg~8y#Lw77HJmO4PBH88{X6>D$-gcmirdaN7-zx
z{w&?za^x+U)wk+N&w9Vsb7%YgOxaGJ@{Klnfif1cl}8{_hW1&eTw%HQ;XDX*Z+}J=
z!&qU)G&xcN5dpdN`*PeoFFh97wEWc#Ik~vb&VJaG?%!vhVK<|LH}r6fUeKf*#$9au
z-x2tnQL?e3l!LhmFZbQtDjJT+#hSXHWWog!oqn5-ZVpfMR@d)APx5Zm9+a=$CTUL-
zRPEap85wBoy7X#T#BE`5zKEO@+&4q3E59#w-i^`^`<2-{b}sET1t*>iY3IX?OrkpR
z!ot3T%Oo^3SzLXQu3Nie6JB1kSsl?l+T*3JcP-9I^FA)+GG6-pY$dtp(h+~LHtat%
zo$lp+w^T`<tcLXse1*&0)9-$=R7J9SlsYYS8y8Q%mpl9nT*G+BW!=99zobTcJf#<z
z&s9|v5!&cOlxR)+dqtQ0&=eLAz!pZf2}6N8jl*Noo@4?2Y~1NtM-|h@vm>Fp5~E?a
zrHA7EB}k%0M0|omAAF7y=V*;OW!RAxkgel1muPa+z{rT@;rGXS>4<ysk!#%nY@Q)E
ziVd#7g~?32hqvQ1YD&*$R9-YR5dPnpS-|%1Sioh!#@gDAWp=p=<I;m3Wa5S3_#R8%
zKWACtwv6Kvh(sRYyd;7R5}xG{YJ?BQ7qZ0$559kJwzi__$h@8nze>Ga=m*!S*DWpe
zW^0E8<@0IVd9q3jvu>}{JQwa)Lsy3gmpq(?1Ml%&7y*~rc8rAvN@Umix{rOTg|7!F
z8T|a*RHWF8jWB^~iU<`oxyW#g@|N6U<Ll6GDXm8MOx6Sgf$goC;n{_$q5)9S#i=-W
zi_O33JRn@hk7;Sk6j8Q4EuW_B6MKH0bgKjTM`Go>^!kkCnG@*_b?UhIJys1TJ@+#%
z;TDxH_53o9vbTk;jBS^mXU@cjo#e!kM=stVR6qHj&l*Fk+)Dv>R`lNY4{|*3CXv5L
zQ)luTvP^p4eA~k+&m}Syq$JT1U!z#`&2}BfcDb6-5?8ALM#)mx<sr)9PZ{>CH!v`8
zLI}HaolzsC<dOAF=KG)E(xVG9Pr%hpLNJ?1<xrGZRYEs$FJ*n|?GPFMDNPhB*KBZ*
z5Wv@$dS@<+DGQpf|L`dnGg*vsoR$~~Rz=z25B|M%*dS{5D^z?zQemXjRrsKb75jKe
z@;3*`IZ(pC_~)1xZftC%%!_Tz9;x(*%zYyw%}_F)#3-HRlXmg$-Mi4lz^c3KZ_gpE
z_YcMybPdY&tGp3pp)$i1ILz=9!;A=Yomj%dZp{%F-MoBS!8>2i{6+NWZQAfTV#Wg~
zMjwTxr#TV|)UFTz>I(Y5NG`w2_ql26IxAoYq}q>}k#IhCq`ZudX5GvtrQ_rKyW(dw
zD=6JF-oCo1Aff7|F=N?v51WXmebTDodN=cSD9f~6V!*O|6E9(A%=PYIg*)C$Gx{h^
zoAM)jySw*+>&66G>l=wOAsoY{63!aON*9_XvkhE{A8X#UQK-|SZbWw4t~j0?@!nxu
z%Q(_zu8LMheW+2O*<mub#;)J~Cv=>~Tu16SqP1Zke0~ozT@Rs>PD{@MoAev%G(wi+
zQVplBNY5^VZBDM2k5teLUKMKj>he!Li1XCp_v!+V!5!zeiPPHn7dUDDs6TOOvUuiE
z&Nb-TDxB^<n#RC<)*PGb&E?yh(_^lj8zCB5+zx~8KPi1;1+|fto^d5f5fhzjR38<0
zi{+!Ux<%|rd*j|#SME^Uk7r?TFAB~D(Y-VehC%kL*R*$f3a%7P$hLZTRR!$!7a4s^
zsU$YO_RF$M-zW2;pA&b6^U!l)gg1Y<47*>TU3wkHrq&B490l2E*KL2x4zmVy%2>j8
z(C;W3aB)P-?D5%;xoCAEnipc&tNG0mjJqM&@k@7mP1B_0_t)!sUD!vfEPK<F)|6E|
zZTl;;=$QY>$&sbrZJH!#I@gg)Zp;>ye{02dnec#<HGUt(`)4K85TUv*h3nIf9);_Z
z0=N20CO>KD%^;1It&U#D4V@r&J!6WdG}f9>A-E=jq3;<9XCR}tgeyoKOp;sQKCy!m
z$0BI5om01C57Xj&Lw4}G<H*R!enwlPl|-rS1DBXYP^%%m-BL&!jy=Uj?-BjugiJQs
zAfF10yhkNT|G8^#P*`~Uz0xQUuP8F21Vo?-`PQYD%~Qyv<$G4~mMtQK`=-QVOQqhm
z6j%6>EVs$=-syeQ^x_iB9AV_+yqN1nU$Fw*a?OJ=OY-*@)vc{%*S?2C3W&%INO?J2
zFc1=i>WC=Hhn?hND>y1=XG*LQbRAk{T;Gi+T|f95DqlZ681LSA!_B+#1Tm+ssVNe;
zCbM0i&1kqWZoo##0?(P%;cZ5~ThV;0NO-Ovce(m`$7_dKz>2B!hV^fBZEN^!(T>w;
zckU>OPK7q;S1Ka*2Sw{r_`Qp{r9N_c!;fv=&`@28sY~S&b0o31;f4<F%?EQxTn=Bg
zjCCBRgktj?et5Y)Ll*g(aB7B)djv;)uikNcNxj3zE`}t7CyI1OXiH3Jsi=HeHqDFf
z_8J-(kTM94wO+d9$0*EmH1Sg{ju6R?<NT925T7xjY0QwgUF{pBv^BJ2&m`-bU9UwE
z&gxeb^r+%#b;X>%e|U^^bac_5?*0hjWK=U|3t99OJY3kgll2aE&Z_7<EA=^d`7y1U
z%s)g0ebM)A3H)+UXJ1cNyjjs`9Kp}M=(^Zi19GFUx3v+SE-u%Fj|-?(6uzibPD@?Z
zd6&nT+fKn9WWDt}yVC|sH~>gU9K|M5j^MR0d&h}8Zr!mc*9>!-_@Y$F4%{2-99YHd
zJ1#DM1V#9@pfrc63vn!6pmnCy7g!ERyx9E|N}El>miDMVB5iwe2p0!STbD1@y}-Qw
ziXar4%CM4!FpbO2B=&F?eemg9A3jjzO8JqP-ur!1K1vKmCw^XnbdxAeP-U*7xTf^M
z<GGnScilW!X2l$beO|z%!)!rWQoaD4(;Ql<Xw*P^Se?dFRGMFk)poeMi5S+`6i<ES
zeIZ#n^A=?){@r)J11Ac|MJIFkj8HI=)Y*P~vWrC>DKA3-^?V?$54+l$BeCk$v}3(P
zHRZjD4Yq`y91xz=VKbmQbuYZmQM<)y<t-qWp-<c++?_DpBs|at!a)t|cIQO#wY;Ok
z$k|r84!<*Ip@7-eL4ND^s^;>LzobWm?Vvj?tRdgxDLGE&I;tf-QJ+uO+-~0C#xT^D
zXwSy^a?X+2agzUbb;-BV^(7_o-wy`LiX%{J6O!R8wJV3@#oCYEXVg3Ow?|a~IVCys
zbFN-^i9%#-dAfLLYpwH+^kMBhgDdY|W7|)FYJkOMB^KGB7udk`+o8`LH4k9_HSwi6
za4)3d_5z6NHP2Tl(CL3T)C4i~t#>~!ZckYjkuy7(85#W!yd&+E{bdEA9=u~hozqQ8
z79$s`c>K8GW_lAAwep)7zPYShu)2zkpa^_7Q?^d&pM{LYnHV@A9cFTrg@uxVZHLEM
zy)j-bu8b8&;uBerjS~?O31WBdA_#hOM2HqeT)N}3{LKyzS8^<7XS3)`pH`J^w_#|9
zC$m-UN3^K}=qAS(+dW<8szQtU9eUBgUoBm8D2wL1|LZ$UE*VevE#d^Zpp0#6Z>LOu
z)Bk=5!JU300$<LiP66=g7^))Czb8@4t&b;Pa^GRsH&=AZ_Q2H<Ty16&FW2>63pQcJ
z*QZYo4-4t+2YF2ynd{T_ao)GzO9JhA0fey2XUL}Y3DQM8{IM7D3x&%T^VtUxLccsQ
zTL=}G7_LTLHi8&HDC_r-OW-;2AdPoSR7!0_*O*aXz1*c3A;=!E_WRY**KxlK+Z9FK
z1HXy<jOaz{6mU|yM?UN9pc^GR7c}eZVhfEaW96>dK0NP%lddgx+Yi^)pmWLl^wjuk
z68;dO)^c%i!TCTBX@?{q`?t2O49>~3%z7t&=XVD?eKZ{G`Nj#8Dml6I6;U)~7M~;D
z5x~r%v7%capYU1CN0sW{9&bxTasFCRt8%>sdtf&Ze}(#=g+)e|b{qYgeHccuOPVZW
zCHinwNf--?rS*Ybgrq)-0GRb&koXq?)jKr0l}s(w6+>VZeu^k2$V>h|Mf?6wfkRoJ
zw6?C?+m*)H-arvTbed278e7TQ#GT!wbaXCKgphS>r>gtoS$zJo?@tz@U0oiS9F=wd
zMevcfM2^M&Km07|H%a!<@{o?hC~y*a^3YP+2n@MHIJ8Ka1dPn#*oyk7q=ihTqJ^hJ
z>pWWpU?(rO{p>VFJ!a{itS%{ND-6x&x7I29otGisr6|WOu{x~Ec9G>l%j4M1`V-ke
z{MpFG?hO!XC4Jui3>0TjcnH#YKW6*w9&OT*`Ly)lCaM~pJnNh3?#a;-lX&)oBFOmj
z#v0Hibn3)jS=iR}RgiLEl5l#M_wpga?l&YtuO-B&1EYVIJ>p~mKikdp6EKH4%ER5=
z#?g#;7~S-{eVIkGeo(s1eoVmR25TSrkna9gY`MMIu7rs~<m&1!J@v39H2E|5zYQ-l
zJxE2IKrxA3Ak^yN0)+gHxq>jtLLD|&<hin&#biio;ew`EtrxHHcNHc*Ga5FuHM707
zh(c<4vO8Vc(?Yg?Yy~?;tSAyPwJqK?@ND)w&TQsP#ryk_Zra=1qt@@v9XhSo@t;bS
zc=hnde8GR$(D-QFWIk(zuH`lVZHJY;&vWRgLn$hI3`TMelbs#=K&$gm@6)pr1oS1R
zE8)rz1sT$eueZ<hPM!5m=Vj)5t0SSG!wyWi?16ox6UyXX2!U1h$nnr)%2JGkmFi{h
zL0*n^@6&8oP}mg3-0D!z!)b^(GxwB&*#FFrXUNhX-532`c(@duJz35gfIcMc8O6Zm
z%_iuffVFN0jhhcztI!*dp?J2RD(ocGxRgp8(rAuzTGJXk72PHVcF{(-cBprXZ9C1N
zZdk^kg>%duxl-~FH}F}Gxv+2>hkaFeQxME~03^+Avgr3$X8*GjDTr=t;^N{4<;p~)
z{4)jZ9v*tgXt(`YM4z*WuYG??es*J)P4ChmRx`}7drDS(9Z8<sL(hv#|LSE2WY)cN
z^Es7d7VSwliNQCU7R3+=JAxAPwUs+}Pf}K!zaLNf8DV`_e*^75%8bF4A^&{>%aiX^
z9ULzH^A$FhDPG?9`R-5>kb`rB-jg42tuhC`r}1aW?I*(h4;ON4SoU{kV1k0cRR(x$
z_<P`#H}N=+iaEB2Khj(`=Lb5~vIPhSb5_i?L+SDXARVn?MN^A|ZjSss0oVhT;h}^k
zLamAe5bEo}8J4ocV+k(Hd|~%+zyH}0kha=a_;Hq!L64uy<$dE?>65toLl<LtgdG-B
z5I|=`G<8-d^P6E$b8zif2;YOTR6G{#WK&hu?S)^Sak_B_tc>caf`iTK_<>{t<hDeK
zvZ<;h{;g<+r>>q2$+tSiYUkiv<(={+>T!@^Y!+Xh)VN+qCK-ExCjJM>;8}6C(RFyz
z50nj+F87B{ngYyTL1SQ_^4Y!7ww7(r&HGg&UeU@j0FrN68Po~WWVQG1!_4%mn%W|I
z`eQWEt&1E^gJ`AY8?AUu!KQ}%lbNg=`H>s9e^mJp8mi~2BmL4{C#Z<_kggmHad-G`
z(|MDTT9Yg&GB)xdhn@_|;W+Hzgx;_+g~%!Nbjmj7eHwUKu~ZCGf#Rfu1h*Btx?`b2
z=5MvIWw^E4?3sn~yi?cJVtuOEqSU4)XR3Vb_k}JMIwqRvhd=7(h6cVFz0N$52Lq;c
zHwAP8UnmvNNJy67S{!Tj+6v%W?zuCQk&#ipIrS!I8FMiAJOg-v5CBSiRtdubyB`j%
z0iP<G)ipQg4|`s?!q-Z_JEPra{L*uW_r}eUxMm6PkZl(ES%R5D`PxJSo4>pIa-X#w
zNDqpD3GkW-h-X&m(yM^o(%U+0MN{9lzo>e89HpmGIy2~|tl8%{;~Zsgq$aa;4NKA-
z(N3oln(#LyF0_cwlpJYgB?<h$B}#N&%0Dg>a>K<AsS2;Ob8%cN8w>H$45WsYXiZzQ
za{wX$-V!!#I|`8hxB9}UA%1<vzEf8UTY3PdE>`oB|8=wE;eF_(%01V59T5>hv5#_H
zwnXywaP1}OTKSCqDtyBq2wklHk<iG}7_IzjWadxmBa()KY$_+^ZybNc$+*S9)`OK)
zeT#H>wB$Ls0y(Lxg3QMS>U_LNTr1DKVK0uTSzNxmrN7_cGGkScLxiv@MJNZWv(vcT
z_ImB{&Z_BUcex(R^>B6Mh{Watlx`P6qszuK1CDfIV>$(3IfXT*hkDZNe|{O|g)I25
zpBjeHY$_q$oOU9N>IiwbQn~Ok9uuHh_7}V3f1D${g+Do)NZqk+3|r)t#>9`2{9H^R
zjvGZ?0s17N3tDJS4&hIVi8<t}RbZl0z!om<xKv=OdjW5hF^Y@y4}78)u^T7cu0vhZ
zQ~n`<VE50!>Scb70e+kANLNCrbY5r@zQZWsy5+CeNa)@zE?3N82XTw=Xg!iib`D~?
zOzHkH(3Gzr-gV&Wwfm4g$c_@XGlM<vZGUkV)Va#^X?zqfOKk8RFm`7T)GP3tpMNR7
zJ~@Vx&kpePacbgn<dk^7vq|ddC)a=XI`<SbQ%0gTgqC2#>|iLn=O&@+nta<tn9*n5
zut(4XJXop{&n`OkML<h&qjzAs3neAsMWFRDm{Cr=9a5}qXpp<>Qn_DvX{uNbfO<s_
zKHQmB`lR>3-N6FF`eizsG+DHWwUO1vO}lU3@{O}G7}v4wrq;Vg2;k?_D$a#DC7JwS
zsR$qsGQAhcB24I!M@L7eF>!R9`L+#AI|}*kf@`h0C$sGeI!aN5O>|Q;i|x&q7drtE
z<7<FJ%gx0lyC^na8;^PzBDDQG$u|}@7I?=Hx(UDyeyrPfVdu3)zC(?yc_Uy><l}ly
zqM$%`^W|9RMj%Ia$$VM^Z@GSQq{9uzsSdnh)mk?KG^BQ8sbs0A93%Wk`27dfzS*d(
zZ*}L5sNCmY=(BFVgCLvo40Fvt82>-tD=pa<!;UmhANJ_Olx-?2Uf!$%`B^d*6uI!Z
zXvZO-IjQ|6>!u@;62=e`TxCbm52X@9!ev7}{^8PnJS*1vL6u~p55A<Rprg^r))ALn
z9S)*6!dr5$BaM)aj#dJGU@IWtHOg%8ci*cwnz9luh>U5gKZ+noprQzZR?SlXlq2e4
zg-~b4`?f-iWsnqy5XteWol!B7vbxNfChy<B`9G&_66#vi9FmJIPr)81H2+jAgwVhL
zYRKOepGu#2t?#bMI>pn<diaJK6WIxg4xAgQ7gH(mei6dFqTDz;Q(MSGYZE8h+uNnv
zK*rEc+0TA)x@6&VT_#}=3r-it+wE)=62HF)pp$3dyQOYIYL5<g2=8QjB0XDT<DS(R
z(1|N|JK&yl0ds(9j8LQqI9)OuC%UXCuPw~)HgIq~s-f+HshzYS2GQGM=LHMka6X5U
zCDLi0Rhq%q`%Va(9=qHt!p#gOFdz&VNT-w!l8W#xx-~2F-RNAVkU*a^yNa3x`<y%*
z1mKL#s}$wB%G|MdHoHU+ATN3(g!XZLs!}G!e4-WHHPXZi>`4Q!A>RaY*6>+$W)1kY
z;N8Aq6s;!;vxn8#jM*8W7P2?m%R)|evGar;pc3gQZtj;a=Aw_()z<nFg8$`^8*JPm
zyMv}ooW-|R(voZ8hRt=L?Imxs<m`v1Ql@utfeB+#DH$HBHHXD6{tT2>SB?pbP3B1B
zU_{~FT2=ef<0IUTTfqFI3y>?S`o}F~n<LYuxEy-rl<e~IeT#2_0#GPak`hX>O;0AP
z7XBKhAUb-Iu;&aGGz`FV_6|`-4$iVGMFEv1G7sPqpzwpeg;o1^NcBTDb0+eBH9e-S
z3briv!w0t4Iw{dYmpc507E~*kFgNT+sO{|=4rYtX1M|OLYlH$=Wnr`_s5uAvcy+$?
z?Z%%Yw3L-+e@g1AP456IY1|TX9#cN)Fatm;rCV!^Q4SNSE}OQnXPm=wGw-|MJdgdt
zzcAO9++J<@-3d(dSGGmDbCGg*$q(-XsP?+cw{<X^n}uqTaJNAap*pKnMRkVH&2u5U
zUiRsEVi&wAfIH=Zk$af#eE>2YZEy4?>Gj<;45Qq4tk1Z9kKTGvUq!o}_+>Qq@)<Dg
zrO8B&+V34p4ApsW(yD}~HHAoBYeRj;Z47`JX)Dz71soT<Oi`cV!C2OY$8Mv;nZ{oJ
z6^>2*MqAWmh#x|1`#rW0(0{!h@+;n45?w>o-P)LBllJ(NAQH@=SEO=mFLechDJ38F
zu<}#3{8MTIJ_EfY$vLJ_?=XN>aDUY(7sw%nRVf&gxY0a?q0}cdFw$Wr@u+JIr`Srv
z8&+rR`v3-v$=8hgh(7lT4GLG8C!hB3S08nLEhe2`QTWpl-#E5Ms_WT5zZ@yIMe2L>
z{K@~9%$@&Y?(nap4gL2IM?Z1yU(VM0@5lb%kNsat5BygiIBr)vSZVx&1^oAG{{QW3
z{_j`&|Kh7P1v3E14bcw{3k-HHP{?fw{|&s~x{mW-m97$Hl&_$hu(n>9Us#Awd-39h
zO1g%I_NyQoA|fu&nXhVo0lR5=8tdxQ%Ier{;?i=R>|MHKV4Pqm1)?Gq4}GGQThFb_
zPs79MRYLX#dERtm2J`crAq8<N6RJM-SGy@Ic+#c=)i5M^y`PgpW7fyT*49=}Pj9gt
zdlUHvb%D=x^<c^|;3|3IU09^J>uBQ)9?AD2jqqiCct31b(dv>t2f&vOo#{K1TJg|u
z@<+*gv=oh{?Rc9ZsJsMPmBmxb;;E&lWM^|!lNHmmwZTo1p}px;xxZ7UT=6ou4=wNA
zZw~1#1im`B7~ntcIPhzvu(N+_zJVS?x#x_QZw6d8Yy6xc1m=I|OKqBJ^3umW<Xj?F
zpCjy-2e!v{(UR_)!n9&3)^p2dW9|}2Ek{vSrd>4DAeLSNeb{E@irWXFrHs2kE6`u}
zU}!eqS+28QBN?@bf?jg&Q;^}L;mWK}XV~r&t>_W3h!SeTiv9u%4X&ToUY#0g2ZC^B
z`fa7;)<ZMSDaEi^!esd2WUh3Q!n&D72-td6U?41hc)Xc-9*_TO$aX<B;A;nr=?+dQ
zvoV2h9jfE-&UX%EtTy0SZ&yc8N;~E^onEhGRb-Ob2*fx}^vehV+B*Mq=}xy*M;cnH
zIQs<}afitjP$OQ90b6iD*D1L+Hl(cBXHn#WF6gAl6tD@5NPP)VBsN^Tp?Dmm`*5%-
z+C}>dX6KmNr$O<smDjK_6xe{LM&@bB$(%}~&l^T)`lYuqmb0m%4)vTv_uFF_8Y$h}
zrCyC?(ULozJnK`!e3Q#)amnvglIrPNKsI^4_6S;O!br$v1k*@fCOyzRz@~Mjx^2;W
z7gDc2nb$4pe++cx&WwzXx-7PS!H66yPYXg4+yy!Js_=2T-z}WJ`QDsz2N98a>ZzTB
z{f?fTD^`d1N4c!gdwp(!eX7m1!fFL8D=VxNL7>scKnbiS2I0FKn2})r#swofh`wE3
z^wit6YnRHLO{~{v<0yJ+tEwEm<exu(4q(ZHO`bjOHlH52Z|E5beQ@~hN)I+C7Tc~^
zJ-hfzlFPtkNa?M*D%|&hYPkj4^;-<%afGS?X;8c&p-%fliy1TNNGE&A5fw5IZjW1l
zJvi1_v~|XVlN#Q4g*RjW<|U^44;|Jd$i-%xl{HCQ`G+gLC^@3;SEtFbO8;EywY$@m
zqerE=KAB&G$>Uk;(PcJRyp|tw@^CH0rWybW``;hgZkNwiqyw)N8Be$kcq7JJ-RKbM
zN6WDmbzu?@iid#aUYchp)ZQkj7~0g_+Fbih%YBV5#290LFyAiHG4;eA;Igr|PuIE3
z2mFR&NlKYis5)>+`pX6gImFMOJgEq1VOQLUc{pnfTxzV%Q2osKK)EZY06=iH?5J>M
zs|9k2umW(y3r%vlioyTfftPC;w@4dkaQGQMrN!3_b$`Vx8)w;)JbW2`7*bi9nx+Eo
z-Mf7@+Ueld7mM;0eTVfW3vdrKCYoR8Aa<bt=eaQ5Eb;nH(`jaejTo-YYTlK*=+dE+
zDpi$jaGY0Ev>3w!LrbWK6q|R?1B^LJgB^iL6Svgqvh^9gT%f**r?1?oTLl4>TQ{m4
zaSp0?Qa_>DSIK{Lw;Ly&RYT7b-9_MhJYKd#)#+rSD!Caqi@%op$7&p=xLeqv0XzxF
zU>}`dEHEe0$(B-I<Kc~Ig{X}=AKo&Z@-6nk=+Q{K{{5~6xwi*ymaP0_5q~pa7}}ri
zFFF18NZIDndTYFHzgfD5mKI^dLD`UNA@&sL_2s|6_EOUNcr+UvdElXbr|+oRl$6=p
zd;_oaI_M;hKfE}ko4`-QOLmV6I4C_K=iAtDUBjwUc~ee7;Yu0BVYkxZG<<}V^H0|Z
zt$M1nGl65wp#)B#B*r6#P(F}%E5Ib^q)tQ-ld4tJRjFeF96v)}U_34TKwe2ncc_-n
z8ff2hy8BgN%xq%>dDNx2i$Qd$bjVM1V>rlvpKBHx`NL}4ej-M-VDT>YI|8553}#^Z
z><Rq*ZmG>Wh$&kY`?3j%K|O6F*_S=*!2amEi``1}-v|JX%gT%Kc4Kpl1u;hL2NppX
z3VL=?P}Ba9I-d<WUs1;`Trpj%bc*+|xmpHb=1#1sto*RyWRVM|d?{z7J@N*D@GM}W
zsRZKvFuPuqLsgu5r>jdqtqUT`=4@phoBPG|>4O`Kpf-7HBsOWMmpft~k_^{TgY%wy
z+YbzR8E86}7~Q*8v4rJ$1gN4y3hcTTnpJ$=$0R`B!u<IZ)m}_C%{$VnF0m>^iVBND
z!`wjYZ7{%Ru-&rD)+T-dm`OPm;#xN*$6FfVG;+%%c=K5+xCx)_?d77K=2M3me-;A;
z%{9Xdc@JEc2b(e!$2G}sfp2Du2e6;j<;rCfu)i#TroTM7p6E?C;es8ky&?->r6?Z#
za0|ROdITzLlMxRE<rBskAlO>IA0PGgZH$YfzQk-}pcb(S<ny@?FN+J9gY0%tijThM
zhTNb9`X+*apZHQ(;pWBb79DHgaj-~iv^{yUF-w~=5o%!m9hhY(t*+Bas-5f01LEA%
zd2%zrw`|%Hjw8f4rtUKZ)ie0vUOhFZP3&nz5jf@QsoEe$s9pKGUbVQls(GO?0t+R0
zUSe*g2Ck{1q;h-N_|*1wuDAsX)i*Wme=2u#iayO<ayx=i>T=!d%?e$1wOm;X7BcpP
zuile)5qpu6)0<}<Ln2FW1u0BiP@lmf2c~pSQ%<?vzWaY+KLKYbK_k5tuNuBgSWn0~
zZ~%1&Jw1IxsHT0P$mC%O%|R$hsZ-+r7MdB3jGRnwlc!@RFD4fC1|n2H%UB*3HSip&
z>bL?x;(^lsNHIe}(<RfT0(ePn_dsT<AX}P6-jyl5*RIR|+ZC(S0SSuHkr5cHSVf*b
z&c&tu##{^kz=v#Q)5iqbB`Syy5hB(Hee#W)T|ikskv9l@zZgR&Z{J1$zm1YuFY=<4
ze0G|YfHt;fFJRNg6?xr|l#`o#14o|gjvXq+y&+m`V4zlmbd{4e0)N7_4iL-_AE7<D
zHtxx4<bDyF4^Vz&uDYl<=xy3w_6&cAOWhC%*@^UvV9`jOOvinw`;3)C+_iP&HUMoH
z&-?^~;u_=~P8RhY&Tzo^yck=ASg3k4P<9<5xE#Y|CCSKF;o*QkD=AiSv8k`NBuBe2
zT)dm#^c9l&t~ixaqJMwRSp}D}BmbwOUJnWe?i+78FVs^UKsq0ATF3-tcAu*I5{4@;
zVR$idsB)BW<MCYZ`)kl90aFeXa>8^0Q1Ul@9}U84BAu#LIW}Xq@jxWkCl|2gDSYSa
zgVz>su1x0IPHF2ceA*ZceZ@cYD`x;!-KYgKzp!8_l;QO1>d!t1!()x{4w9O*yY<G3
zo%A=}$@|4qZ{++)7ohw=7({#_B~(j<DHnp<bbfPx`ph)Sovq;@C9FMEvReC`d_#N*
zO54V`!PeHHZjvj($5ma{j&n>V-Yiz%=48ut#kS<2Kjqd9{2XlXJfcf)B+*k*X|?UO
z*~GA2T2ao{$k-S}%K;Rq_g3c(7k+McmDu|r_^>bXUVk%*1#D0GtI7eaQre1&pMORx
zF=F`%Azu9GOYBz|$oSCyBxNWdFju6M@%l%3iYN1c+t1`kFXwRO`ar%~5R+5+esC}F
zYmX?tUhHKop)A4bf%)@JJ)UbhFp+kZ`2J|quJ3+LK(JKv+xxe%mSpq&@g9#VR&dt7
zxK!r4M}g?+#@z|MpJ5gPuO_=(=eLhr32nv1);c*^yT@Yj8o>v=>y1TmPTlD1B2tml
zi*BSPJ%<G$yZ8?l(5@(6!JmM+cf11WzT*$z{-&w)^gMQq83j!OE<a7Qr9Hh@&nDV=
z_y1_^%j2nB-|jngs!c@6kV;fay9^nkkRl2VhHa|QcF0`pN`<Iw8{rg@6bXgQl&QqA
zQKk~23}r}^dA1GN?|Pi?@AvtB-oM}TPbbwLp67n<YhCMFYu!*D7oilb_HJ}}DaOZ8
z`|GF=p`ZruEWD5`wuj+tTk~Me!g*>juqh5FW8nex&#StgR8xi3mvjD2BOZ{bffo0E
zXLUy8{>u*jQo8rM8Lx~hykes!aqWC*#x&E4VCtT&Teq(Jc<QBHQD23D0r~=2$EJb1
zRrmem3lb75=!Y?yn)^tKsgx0rwPiWg#cBE<OS!OCXR!nx<Sc)4_ap7%#nLXo0b*KS
zMoo1sj<s6f=OI2#*nrdWhJ=JWZ)mW%!rx#-lkR#)tQdYB<?c7gJE9jK{K@fa2zYcB
zBO)xJsD}@Q-BI3Jc@=iiHaR{2YGYfwDrBrb!`5?du*MGhg|G)|T%?%JD_q}8)pWY{
zf5RooO|pZ^&8q;L1+VZuGnhR66RW(de&)8G-*D^5`JvFVF3jpwF81V!Manzn+sExF
z%hdB<^_R{Hrru{A3n#O*mgIO&ZKsK!z3P{qTNYdR%R9E2_$%(*nUc#HLuDMcb#Tye
zJ;^##`ZXvrGBVamU}-%bfYC-1OMU?Xt(5ew=97G(r%^VV^4q(!#HSxn3gaz>9Sg71
z#=3XHM#w2A@7%Jjj;}8Xz>nm8zb^jB4g)wjt4oWTOwaCq_GySY>ZhT*(fi%sr{T*>
z>8@j(t8~^~J%qoAO|tCtkCjZlM=jVE)V0CpQ>DW?pmw!KdFQ&!EW7a$tMZ)0S`1ng
z3yhFp3LVz=ON_WP649FFwd=Uo;|vL@;}7M{vaO8@xwJDV`i}RG@6}ehBJatV626nj
zdRWW;Ge<Mf>!F&r7Ze)AT#2%?bPv70UEuUf2joa4efQ1JpY{5j|4v4GtTN^q-R{&_
z<$kdq-w7Ng(b`?&4Ou_2O}6HpO!8j<(vM9fK*j7JPRe=>=~PNBuh*z`o1{&{aYb&0
ze_Td7cSuSqZ1jHV7MmnwWh>O2>-?z8-Vmr;^eutxv?17-g*Ya@%fKj5;62eu-Bk?@
zNq`OvLnLnBvd~ALu&d)Fz}P4uS%Z7qgX6pUMKm6GVqZpwF;0IB#XQ_%kQjUMIs^rz
zsV8}0A!_iFcc00smQv0bJ$qn&q!fKFPLMc|W%|aw2l_lUw&y952Ru<4O3aZN=;0U(
z^YgdvR;gQ)bJ|1Kdel@L<?$`U7MkjMN4kh*1-XCd9|})1Fhj+y7v8z^xq?HgJL!0Z
zI|{ox>p0E>hEYh(u_^gTB4bo6fe^$4)9hBzfF()71VWfy9zz93o?rJpnBROZ*y3uZ
zubwgYYohgf=>`uhR{RyFN@s`e0TvSU{1X?aMEt8>lWa=6bN+T*$7uxtn8U}jjdMFJ
zynhE{&P88pZs&K4`aIbr=|wo%+4q%|`|PQE&ZNJHGLf_pK5*uGi_2ZH*zi41f=ZqR
zVeiM(t<HP%MgIt~&%dwKR^@D(>XSR{I9q;?Nzv5Y#oW9v`36p^#-U0B|2<O@=VuyJ
zRh-Zkd*(S(QugW7%Uic@$rM2`7O>E0*xVPJ6eKT1moO!Br@OWotTda-iLja15{qUm
zwSWHMlU2%OYAKg~q{-EUrxac7=RehKmS4oJA9+1poWyI~hQ~tvNAi|G)_SS(t3$MT
zzLYGG=2a_#LTywQY>i+3Z~WxXH2WRl3|!;11P!_XFk1il=w(DvLQDke8X$TFeZEIs
z7)sUSCr@VR$Ghv?zO4vVw$Eh}U2FkZsrJ3O0lf6s<Pa5>QZw>sRicfT*CC5<*=V;>
zXWyr$9!nGlO48F@MrF0UvDUT#uM@BJDB)Qe+c!b4Kz+WtriP@3rr-3X#12ZPV^d8i
z#~(|cY$0C?Fpt}7s;7s>b(#HLZbK!x(wX%OwOgW6q|U8aa^rTAo+y`5L|dCUq_e?i
zOA*8J)g_%FM|h>H4825mOYunI5Kcym=!PPf`;3bUQCYX?=$q0xmow+*nW?FLYn-^4
z1;QUp3Fmv2kyo9xXO=~lm8O=K`=1+ph?g=J1=B_gHxxVOnX)=2eC*3x_<6n2g0G=G
zb4lM`+lq2y`kK>-6t6>rLWEI^YPIVYc{?}oWC3|1tZowL%EX0i-F&*Wg|K3C5lD+A
zNpTkS{1I*fZ3unCg~FX#N>FgHr@eRVXo(%ibkrMOLA0q$yjB^_Z4c1kQMHC~Y#2&`
z^|oB6;c4MftKp0WD8s3Mu@|AJT#aUu^F(+|3>!39>Nm@Ht@mlUEvOg89D@W@!}WM#
zmF)Y(=xtxwRxJ>9_Q1vyy9!xdy7*A@wQAC<f!_Mtp!kBq#5?-j18k-5{%%eEhGQ-6
z;K_DIAx<^bhharpi&qoRd75Q0;R9^u(Wv@hF|zBV6JT$W(V%!dN9;DC`VPPVR8mAq
zKmy9i=$F^Vh6PmCP)5)vgcS7f94ISd*l&8ph@V8rIPRU8{fiZ;a&62p<Bf=e58=Fl
zT#9%F7BmF+HyRGnf%elDB*U)5j~;DDXu$UMz{24+T=dtYy@N1V$TmmbyC-+)=dZ!m
zD{ZvuCfK9gQ1=dd3lSzCNJEIj8up_J*I@gvF;TeijRwr7qr$B)6S&c}O#l7EoB@b`
zpvoC+4hJY7)`IZ>{~g}?XMv?$LKoapduZJi@po2trkRoGwJLJJRD?eYYG38=LDa;@
z?p64$EcBLTECL}NB&77zQikszfXyr*DL;r;H3J326bZ#VwFWbKLN)^vEtsz#n3zLN
zVEfIR{hLraAv;x-k^l;#a+(`zv0UVU14z3kaWl$4k^-^JPGkQRFS<7Zz~(iO71Eeu
z0^gDtM7#SyEkcG7yk2e!1_<=v(Sy0IQbEt*k0)I=vDmjo-=xhxQ3P!sd{-;VFF?Cc
zXZE6~-TL0~S8jv#5LUvI;`BLvu${ed2cvbUQtnYpA(aBhSwQGVVOSHyPT@44Jhd~P
z16TlU_b^1I>{{>iSMAcHdXaZm#OpL7;sDaXc<3HapD*|UV5Fh!x~C79H~MORg^A^H
zo|uM&>mejM)zqpLnCP61jjy~=3tS|9`p*gq3OX;sC6DBIjS`tX15k%q<hxMOJ!)w!
z3SC1|aEdXEVQ^Y21C)Q_QS+RG_TTR@)DqllT-m>Qe&Uc$JTHM{Z7kI6XwTg4Q1O%@
zp;R1S9cSye>6Ks1aYbi6hc7ML6i@DEY@xpFTQ0Pm$m<wUhWd@r#!3~A#I4zyPJ%GT
zsV!gs)TvWPeW-h$mSmE{dRD7W+)b*2X+y#D@zt&XFpd0a$#ar8($EHv5;=c{0QIoG
zl#V7oO?}l&gPVouA|_h4<KA9~bFfsdgD(dRhN9VuLU1G(K(-!Mz65GQZL00!oh0()
zuLci58<hnXAAa~7rFINjqM<LY{oOuV)%;8c(#^yuS|8!Hh7e`2a6EnGCW`MU?6e);
z&mERg@x)b2EFoCN%9K4RM^R2=uDemRwBA~HOb)kPe*LQ<k<c<>*G=u{!Jm5kjP=H8
zTCOO!U#?H9;_>yWmQ*D28H!gmg7vR9eFJL{mc#Bd4;oU<zW+3tBU+zTtN0>Z7w$+(
z=Ke}}q}6W&y8{*kbQ<#7W37M|=P?9;!?U{RxICov&!WDd{SKM6RI!n_hr}h=YpcR-
z&Hj}C2q%Yi8!cpE`T1vsF81C3pGZPpM}qGv7jIA6yQ1@q<eZr-I3o3#n=+nxCypPl
ztVPnvU%Ve0UEWqLZtt|E)UMN)aV8~d(Bi+~wso2qej$k6<`K4PP%~$;t?f~S{@jrJ
zpSn;litOc-TM<DCScX!k!uU!Ul2Om_Uen<dcrQxH!3Pp+8MTN%=%YJ5U`DS0P}^NV
z2AOcMpq?x%p}!3dGk3h*wQ(;rURuV+lR-h3+6!jhqt%yHD;AB4EH}A*jxJ|-4V8wR
z6o-#4V5#(qyiy8OqFvn>;wOjWIur#@d_V&0%a>tjR1yRXMNoV=ll4S{bgY>pKa@SU
z*FQN}aY1Sg+u*j*TpmhK(v90Im_OUw3;8bmUTs+v-<2}Cg>_uKD@Fo;*iYTGl&U`F
zm?vMcLVYz}YVyU0n=+Mo5NF>AJ~fjOjeFa1Mf<<6bQ4=dohO{StkcaH7fY>wBMBTQ
zWb?*)dU~e$>f5^&1?$h^!eZ;ev3q<MG_Vbj?eI4K-Vi#W>;05!7LOE{_3M9;<>q^s
z_K`7`cO&u!-fb3yB2aGEt_FKdgZU|S2Zf5<q|HK2OijNe)g{>5_j||gq@?q*p>|`Q
zMAnFaWEBVhz(a)>)&M_A{+#Ak5lP%ILL)2mps;o6x(_ujUJUjNQg3n~f^z{C){!(C
z#TBn;W4Uepl8MbwF)F1qC>URLENn9=u-c~@2M@;XtzbwKx0TyAbqk*KuoU&1GHS&j
zJ^oj{x13mInF_@m23;a0Z$*ih;s=BD<jfBWiLX7mH1XZu>?~5R!&o8l4ml}$zB0Fh
zgU2xqt1^mB3`+OYkAI9IN*y-xB^#2H-CcgdJx`eB35W-Q+rJM~^wqc;rtdx?P@{@3
z!5sp=&-rBNnu~w0(Bg-KUC_*|5p{5!)busg>>>hH9zA?`YU)h}#(`v-)iTrwBTSVn
z;nqijKytp>*lCt@9xcr<#|7Kp7YO7wdwW{rIXc*wRO3Nf$=xFTv<RaZ*3WnzY4h2O
ztb!5ds<<wRpDp_M65Pjss8M=|Ko!~U5r7hV;EK{(U%`ca$tsB4`3)f;1aX@8w!bG(
z3+NTU4;U|;FR<wcfkOm4p?tPs<0#GS-j2wt>D9^;cFoz1nu5Q7z~)LCJnW4keLlbQ
z?O_iTJZi^~B{1Q?TmZvQ#9fJ8qyw)%yQ$#f=h;a`xYsrj;_(7Q-{a{8JuNt?krB`7
zH~n5w4p;C7w*@}zxsi@TP`tUqy65Y5)CYM#;B)pvC=6x~BDz5o--Y?!KsYgn3wnpp
z#1vfYMYO@lSGWGpIGxFR{`<GBe=E^2m|<?eb722iklcrjGH3tUyx`IWgTdrXZ$s#X
ztq<gEPn;i;zFZB7vy28r=63B@+J8e)Is}R6R}k4E9s`6O6((OE=vd9)QpBdwhj3$G
zc7x!Q*w$|@o1W|N;lP@_L)`qcMq^=hciYwi2|0ufu)~*^%Cy2aVgXhQRgh7R$)#WN
zS=!(?k7+ds?$zU;Jn8sbc?k3$$5!@Ko-%6mEc`kcmjJYMVtSQ_c*E>z8e&Q=Bk|_Q
zolP2u5IRu{pBlVIf=fGF5;*H7kg(wn@80SSZtkW7XsGdSkor%3)ZhtN{7~VWN%u@{
zGv@Cn@nK|?X^jY)>$mK#gEpo?Zi^J7$OG5kLb!kL@#By)IS|;23uBz2LArqC3}EaY
zh!=6q!gxF5x>VL%eM75dI3<OG7abYt`d;C)*JPs!yoEyU>bY?KpJ}DUc+J|I&Q)x^
zLzw&aRf0%fLqLizWVQ$s3u;^XI_`ZgSc2erW)FKG^{K3#9LE6ReDU?^@!I0EuvvrK
zBD|hvG@J|X5EtUva8N%hR9fU{SwW+?^a9uU!cla}vxN{*qU+Z_+?<_Q_1=8#0X#+#
zmoU1#j6?|F;xCy-UcMukCLGJvc%pNEWoa)+l6*{`{L1pZG@1CH-@sbL{X;Lx6=;~S
z(Q=9v6ci*gMqsN0g%aI)g@uKfP^lH<qKd_M?N_M7us9?1H-1JiahTl3eq4RIf|l3^
zO9JUO)_Mg1RK(9n#2<i$1<t?0eLB2N!?X$>iM30q2#<hRH5NKg)tPR!<I%I)1*fq^
z^pCz{ho2c}NW9Y3R03#)D5nu5VGzn&aq0Eu@oK++u?b_w%1xJ!CP@%UD`*fZjfl#Q
zYp?Og3k(&B(V(^WmukSxNjyoV9RN?oZO@573cHU_isx-u=N>sXWqohLU;HQM^TH%x
z*TA<o9@s-N|45nF)iSwKtLlBnczNdFZMD~gPCxdj>5wroDVqB7JyZ?L<X2;gZ4xv3
zT94VI3q|F)Mzo)?e)p9tVLo@QRlOo8AP}^1=1bAsY9YdI(}?b5oopZU_Gge57SLO=
z?F`0Eh_xg5I=8m0cYrp=A<u{2Ob=7LId;s8IbH6JzJen-FB1hjvoi(x3zl#Dh}=vB
z^K>$!z(5@7PtgiKCEl)9hXlGhZ%eaRCtxqizB<~4bGj%l^BDOFgJZNCF0f^{wY80Y
zXOBD8BW@;b^fxaMw8j^>-&48_ebqi;lVIKqFKoQqUiM%6Z?UG^)Gf=4#Qys>y=oUd
z;Ppz~BIhkH+ppOk)4WZ0q@X>zomc|z1TN-&_V>-x3{~j+f56?fN#^Xq%0C=EPM-xj
z(|uM#OXM7l#{_Bd%Ve=EDI{-=f&yKbNyjinRzPS8(Z=B!Rqc&>@p&q>j@?Y5C=h%=
zl7IU((QS_jFJ=;HxfIsW1K<QMoBN>|=l!_NluW)>5`|XZOO&fU4ftzpeASjOLUf`9
zmR&4-QGyLSii{A9)$>ELx@LE;<cK3Bq&{wVh!VHhLengeLvf8v5krC>QXHQ_ZmYjM
zb^e0UOO8~1CEZe@YbJv4tBgu?wG3Zm%L+<X?flDB{O!KVyORPR>Rr<B&v~M*h$f#E
zJ+_Xc)D{=5v7c@v_^nKxEEN^mIe+YN3W2u6cBO6cS*ytuR!HvsA^Avg_#IHAwT)42
z#nC$pJJv>ioc3svh!TO_v9o4(k%9cysK_cGH1UV{x#^uRSj;-3eW1$ceOE;w|JdlM
zr=oL9FVx*E@NW<nY)5pbqN3s@Soa+vaBysN2z1VEc7t)k4u`8z_7wdz)KL<L&8@!P
z0J~M>sbl{FG-6J*+;6*7$L`s@?2KOE#Y%#n#fu_EzzO+57{OKt`j%(zh28IkDPp=%
zsQCnl5kK_IKtV6I9O>#mpdG-9Fi34FHgakGujH&IF<ve9Z>5iRgBfA@XaNX58`c6i
zH~s>A7Mq0RAvM$VXejldtF~=85wnwO3fmQ;b|7Ln0@Pony(5|uvNeQ5`)CwLzwmNC
zVjWne$K7<99LRes&%z7@d8LK0bc_A*Ax2FNSKw($l8P7~kzjy^l$s*508<I9E{2pp
zti<Xvl(_$W1@&p(^gVNEvgZ+rb^vp(mE6J;kU9{$1^$3r9M{U#-P_P7qC41w2pc@&
z*AQZtQISh5s()s8szJF^&IA2<2Oex$gv}9>4t%G&SGr|P9CPU>aTT-&!}IDV{UhP8
zjg(X(v4qa5hK-9bZ$B-O+5TyThHx9zZxhON`J}FoHg&xAz})U*{M)%2j7OGWt6b8g
zZ+0`Y?Me96S2fr!Y1qhl*2{Kd&&J_gt`jM~+Dr;eM_dhz%3Wjb?u##Po;DdP`$H?W
zY+T(3-=!GOI)>)#@SGBZK1kF-Tw#Nk`ozJf`oluFuchwlm>$BzP1PJ%(`}xX++7A#
zA&?8sbPYq5)v*lo-nr3tGf2(~AfE=SUEd(*hFJ;P<DQ7paE_S^ot7$~byZd0;0$^=
zMfzW+K~R3MCQXbtT@nKL!onXIXo4mW2LA+{j1kr^SaCq%j9|B<%tyxYM}&vxlnb1O
zv7ZWA1v)gHsfg%VYo;m3|6|s~b?@U=5_mfB7hvfv@+o}|%h!lhpCo<6^z5tkz5S3{
zbvjPNCQvJ7{;DQMt(aVYmNMT~Cv%OMT0Zv)cw(x=Q`#)_q0;3XgZ-6c`@CTp(VAQm
zJ@Y-{*I{RwPgLQ(PIvE5#V8t~3H=T|O~w27!O6!Ss0?fwkVyW=_5SPI?OFK8<1a9L
zk4pJ~`kmy@=A=8$37f+^IbKUR+9jK35W(krs|MR{l@!n8Gfo(5T3$B-{vh%W8MU%|
zc^36xzF)&niSuQ@LQ-H)kCgU-QFJg88Z!|=0ud`C8qro*JIh@9dxPS6G{w88t?JYS
zUSlk7TuVp0jWJk9i^#=?>)h73t#jMaqo4ktw(bKExx{DhrPTGcp=L#eq5%5OL%_vQ
z5!45G7<Zc^E0a=7OrQ~|L0d*8F3lJ7mo10LYqMXur1$g+?#H(R>^C7AA>+k{;IZj3
zuUaB+X0&<-XLWQZA=p8Lg}SfICl1}I-ku&Jd9>}IklUKK^snLjZzxEqE18t8?=Qn9
zP5Zr;RGsf3ljSyfWX5l|pu-h@4tfbRAM35C6?9@jXUkDYrQ50_q@_JtGXpc@WxriC
z)pC~G;>9d@$V$Aj6llJge2J%1xK-=}|GIUQ`Cpr2j|%ZyDm^TWl+hR4t;oxOxX$-$
z+NjLg;HYf`+i7$&^A>+@j(902CqGkdzLO_5#PgpT_?<LFxu_Yp<icE+5VYu${^U66
z1WR*VPs~{j4VtKoviJ15;>|LAWIE>2QhDn5PPo1V_oH{spy{>Bmwean*q$Oh1vNFp
z@cynm)B>Jx4$RG4E;Sr)M|K4i8{6(|lRppH0d}J_FS^bA78{%nSWf5Q1NEPRo7^#d
zK6)3u(z6lh7r^Q=H~ml-vrccD3L+QCWAYW5fgpIro^p#6dVfxDy*$`5I9{v9^BYc^
z2y?d?)W)?&3^4D2pJ`?<1YQr+XW+0}v?{NW)Km4f57b+JCu0LLH0JPTXa9Q9bI>$I
zc>*Z<6>ziO>%b=S3VN(cK8R2{#cZe}GjL}71>|#tX{ZN+Jh0w~ztBL03t$q?Rc*k`
zH^XMLttOrPBi3*AHJI5!>s_sX8h|nFTMX@#oxZGxaaW^x15y@i0;OiF@jF6c=Hz6+
z9*ZarQ{D13wXo0zbkJ>`ZRsCLKT7UCLG3Xdn~6!mSi0qBT|7d6&9mipGiEK0UZOsR
z16<1{8N8K58A4UXiCq^MW9sXbgNRbtpy05M?1wf$&>;xU#I0P!jE6muX!t>Onve>R
z8iw-PpTJUsSrHoy(zRdDBGiLNS>I2x`Yki&F#LvtIIN`{rb-OBvyn144pTXy6$3_@
zoo;tTrT}uKKEp2`iLoRn&fxV`9(-viqyi~|bKYRvlS4jtm!U-5_{g`g8W{g70N-IJ
zA!acREC|?)M#~6;`cUy}0el-EVYUBip{#F!`I>r`RCgR4%CdV;w#nzavvL0vyyjWF
zy@V#>Z4Y$}FkoTA@Wao#T3=Hkcbt@158~#q4Q;5cAV6t9x?>`F33ep!nQC8d;ZNw5
z#+k`w%4;!rhT5(yWa|+m9qEgm#IcrL&9+A(TB>1*Q>T%PN<yO{XyOw82;NYh?DY$0
zshp2fTeqXM8$&w63U-n47!7sT9q)f*0rbr@L{nM55fD?jRA}Znq}c|GTQd(|%M3aa
z&ZyL|8~Ap84)??c*L@J@aDrzpn0-VRK?se^0LrKeQ2aN9v7jvNF4)_h_fBNPKG6Lq
z56oof4dGB4r|0hxfnE>0;Qq@C{f83JXB<mC)tcp;rI~{Mbc;N*7hx#;!~&u;b;iny
zX9ymbN6ccy-3V;ZrfwmbTsYbuCkziaO}Wj<I6s(2pM=<mm5_&4p+oqX*_i;)yl_|S
z2%Tj@vsMZM0(ymTs(^BEvCq0&kRh{;d^`4W0m2>`o~8~*xHp{7Mc%1__EoT!0Y-~#
zwEn)EnF9_~iFR%bZ!xrm%r>}5w|O{<)PQJsC88wI-{6ghaH$co;0tMM6?$OfF;SQh
z56stowR)!WcP#mVQ^sgQ_F!)R!$*%!_chBv>ZHxu)?IaM$&wX4+J_HO2AZ5-8~D5#
zz@UqD-INWKN~?q5u@Fu@l*dA}So+U6`55-4-HKl?RYMjM5k$qDlr!d;g>8F|V+8M-
z-uI6pOg(Wk;uJOwwhX*%I3XqvL%ra3Ki@IJm%q6xfM^Ie)+EL(jEy{MY&Vb~1|%Ee
zZx?C0O!jNuBj7h-6CUX(L2%JEiJzL`v5>8b1*ncAXH9jw4feP`@rW}Z#Xf>kkS?C@
zLV_PD1zXCgv7@*%{wqaTy<T(NBC_3?E<#8v+K?7V0C}VdtX3A5mzWpv5tKYNf#!D}
zxC(MGn$<znL%3rbdDpb&I10LjwPoU<W6V2Hnmm=Bx(&8yVT0aqr=FiVDdFY}WeUE1
z10r@>bDcNbI`c2?LBOf&gT2QVYUEB%4iq%t6SklO0#!jAT#O|YZXoCjO>YzWbZdXx
zJ1S###>T;&rP6;l)q%YCKwU=RUB7oAh={Nne}5Y7Cm(e<ASbVlW{9Q~kpSHQjT`n3
zOmrJ#kfPF`Du+^9hu{vO#l@K%{%R_lA_{3RV(ZI6Y$5N8tnh^L9g0aJNEGQ(MBpgm
z%d{35-`Ey``VKHCZlCm1Ec))|_e*bl3y}{qSuaHQ+e*{yEF|G9>M)N4<&S~Cm<4#d
zUs#YeU{Wvcd+b4EWXR*kMYG9(bK)W=40Vz$z@=JZ-ssO=`d{sunmalVqAdj5WWxW(
z`sJA;BG-s41e^$vi~iTv+8Xi6-4JCpZ~@ed73VlL6O>2nUZtxe9ifh;5pysmr#iQy
zNWW<J^7)|j7h(I}i|yNEXvPC3<j=$UiZ<P^6cS2A-z<8#_04KIsg+c54<yUngRU|k
z2g!;lBbNz4Ja0>u%;6H=?KnR*A1x`yONiFk?V5HjuFx>M!Z10}`ungq`yC*`41(U}
z9X{Ei$`wtuIO>=epDN)LD_%xMt=3x;zLCTiOfVBzRH)dFN8MKm>^3z<-_R9K7?kbH
zlLZ|y*RBXgQ@#%wZ^(9hYH%&%*3FS(uM~yyB{yXbEOw9nI<NgQKUpPl6Iy_iDx-%F
z9V#(C?HmpkAK8XhRMVi_8CmcJLmo459j;pH=o6@uy8O4QN6Va&><M4P{!_i_s3_=V
zVjPR`Z0s!DeC=twgh=sg1w&8}U&qc8HgjmnaMpQk><g@Bg8Kq90c7pgVxJf)=&!X@
ztoVe|XirULx=F_0gagxN7duwAbJt~vPB2ZzDDdS_uB1TPFJFPR!bV~QBYW8mEoy;I
zv7bxuv)q?2KcS}TM;fyi%-tH(+a7*%_l}MD(@JWQ2982AtoJyKc7%SR5d?*l`9m<z
zLPj0BZtIsNhi8gBiV*JTKajG@_E)I5F0dLn{~I(T3EqT+|I7mnlZz?wTT+^G1FIe;
zx0#R3{oCStOp9V!g>N9;TmI&7r8p)WaVPR~OB^4GkuNTAp2#^dCw~4v!-Bq4;x)tB
zdXYcdHJM<x?@K`sx7h8{huhEyh_BrCc>N3at@}i0hkL6iPlZe`FW2x=WNL>ma_Ffn
zow^{j4F5L2jwJfC>@yR?6Gon$c9ZB)q-&8n*<2N_xyxkX^FNL4Dr?eyb;dcieeWA&
z56z!^5p+B*XQd`b=QMe~8q^^~Z9p7yIS<D01t@yH7RqbX&1Lx*((RoWkx{;jy=i6j
z`<phlOj^8ob2R_8Wz=oF3tr+~mO5Fq&4gqzj1sG>#kW@QZvlRO@gnaG5mNl+4DS06
ziwE4A*SH1;+FTl&yUTjVzZ|+t)zp2w>0T?(()P^cc-RE2((=B(eLnm$Q$gx}YwfU)
zx8>rjK~L<M#LSlmjmq(CFRx>?nwC&%4rg(i*PCjekbjnd?b&YMXzW2hrrxZ{Y}_n<
z>MbkDD&&|jJ`2l|%r2j>*`*w7BomZ&AUnt&`%%)m6sh&U6*QT4gP#NM4?NH3+^+HC
z5blAc{Z}%*SoU#R!#sccCcJQeXM|rBCG)81+ZKbI658e+h7OOjJ*rOJATITi{#XJP
z7nj@RP;zJabfEs3w7`2lxwXJYs+L$`+|3ckpUQndq`fMQPpdz4#d3_yZe*v8dyx2=
zOgYY+cFr6~(c0xzk{AT}ieA71&dy`AU5q`*c<mKL#ap%{Y3bS+@#`)F_{kD&%@c>y
I)z9AgA3nI?7XSbN


From 5b253d763710a8c924531148c6c766348a9b231a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:17:44 -0300
Subject: [PATCH 164/345] refactor(api): remove dead Streamlit-era service
 layer and demo commands (#1054)

Delete api/client.py (synchronous httpx client calling the app's own
FastAPI server, a leftover from the removed Streamlit UI) and the 13
api/*_service.py wrappers around it. None of these files had any
importer in routers, commands or tests, verified by grepping the whole
repo for each module name.

Also remove commands/example_commands.py (process_text/analyze_data
demo commands from the surreal-commands README) and its export from
commands/__init__.py, and update remaining docstring examples to
reference the real generate_podcast command.

The real services (command_service, credentials_service,
podcast_service) are untouched.
---
 CHANGELOG.md                       |   3 +
 api/chat_service.py                | 168 ---------
 api/client.py                      | 529 -----------------------------
 api/command_service.py             |   2 +-
 api/context_service.py             |  29 --
 api/embedding_service.py           |  27 --
 api/episode_profiles_service.py    | 112 ------
 api/insights_service.py            | 100 ------
 api/models_service.py              | 112 ------
 api/notebook_service.py            |  87 -----
 api/notes_service.py               | 103 ------
 api/podcast_api_service.py         | 125 -------
 api/routers/commands.py            |  10 +-
 api/search_service.py              |  58 ----
 api/settings_service.py            |  79 -----
 api/sources_service.py             | 324 ------------------
 api/transformations_service.py     | 119 -------
 commands/__init__.py               |   3 -
 commands/example_commands.py       | 142 --------
 docs/7-DEVELOPMENT/architecture.md |   2 +-
 20 files changed, 11 insertions(+), 2123 deletions(-)
 delete mode 100644 api/chat_service.py
 delete mode 100644 api/client.py
 delete mode 100644 api/context_service.py
 delete mode 100644 api/embedding_service.py
 delete mode 100644 api/episode_profiles_service.py
 delete mode 100644 api/insights_service.py
 delete mode 100644 api/models_service.py
 delete mode 100644 api/notebook_service.py
 delete mode 100644 api/notes_service.py
 delete mode 100644 api/podcast_api_service.py
 delete mode 100644 api/search_service.py
 delete mode 100644 api/settings_service.py
 delete mode 100644 api/sources_service.py
 delete mode 100644 api/transformations_service.py
 delete mode 100644 commands/example_commands.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c985936c..865a9117 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 
+### Removed
+- Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
+
 ## [1.11.0] - 2026-07-11
 
 ### Added
diff --git a/api/chat_service.py b/api/chat_service.py
deleted file mode 100644
index fa446b8b..00000000
--- a/api/chat_service.py
+++ /dev/null
@@ -1,168 +0,0 @@
-"""
-Chat service for API operations.
-Provides async interface for chat functionality.
-"""
-
-import os
-from typing import Any, Dict, List, Optional
-
-import httpx
-from loguru import logger
-
-
-class ChatService:
-    """Service for chat-related API operations"""
-
-    def __init__(self):
-        self.base_url = os.getenv("API_BASE_URL", "http://127.0.0.1:5055")
-        # Add authentication header if password is set
-        self.headers = {}
-        password = os.getenv("OPEN_NOTEBOOK_PASSWORD")
-        if password:
-            self.headers["Authorization"] = f"Bearer {password}"
-
-    async def get_sessions(self, notebook_id: str) -> List[Dict[str, Any]]:
-        """Get all chat sessions for a notebook"""
-        try:
-            async with httpx.AsyncClient() as client:
-                response = await client.get(
-                    f"{self.base_url}/api/chat/sessions",
-                    params={"notebook_id": notebook_id},
-                    headers=self.headers,
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error fetching chat sessions: {str(e)}")
-            raise
-
-    async def create_session(
-        self,
-        notebook_id: str,
-        title: Optional[str] = None,
-        model_override: Optional[str] = None,
-    ) -> Dict[str, Any]:
-        """Create a new chat session"""
-        try:
-            data: Dict[str, Any] = {"notebook_id": notebook_id}
-            if title is not None:
-                data["title"] = title
-            if model_override is not None:
-                data["model_override"] = model_override
-
-            async with httpx.AsyncClient() as client:
-                response = await client.post(
-                    f"{self.base_url}/api/chat/sessions",
-                    json=data,
-                    headers=self.headers,
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error creating chat session: {str(e)}")
-            raise
-
-    async def get_session(self, session_id: str) -> Dict[str, Any]:
-        """Get a specific session with messages"""
-        try:
-            async with httpx.AsyncClient() as client:
-                response = await client.get(
-                    f"{self.base_url}/api/chat/sessions/{session_id}",
-                    headers=self.headers,
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error fetching session: {str(e)}")
-            raise
-
-    async def update_session(
-        self,
-        session_id: str,
-        title: Optional[str] = None,
-        model_override: Optional[str] = None,
-    ) -> Dict[str, Any]:
-        """Update session properties"""
-        try:
-            data: Dict[str, Any] = {}
-            if title is not None:
-                data["title"] = title
-            if model_override is not None:
-                data["model_override"] = model_override
-
-            if not data:
-                raise ValueError(
-                    "At least one field must be provided to update a session"
-                )
-
-            async with httpx.AsyncClient() as client:
-                response = await client.put(
-                    f"{self.base_url}/api/chat/sessions/{session_id}",
-                    json=data,
-                    headers=self.headers,
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error updating session: {str(e)}")
-            raise
-
-    async def delete_session(self, session_id: str) -> Dict[str, Any]:
-        """Delete a chat session"""
-        try:
-            async with httpx.AsyncClient() as client:
-                response = await client.delete(
-                    f"{self.base_url}/api/chat/sessions/{session_id}",
-                    headers=self.headers,
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error deleting session: {str(e)}")
-            raise
-
-    async def execute_chat(
-        self,
-        session_id: str,
-        message: str,
-        context: Dict[str, Any],
-        model_override: Optional[str] = None,
-    ) -> Dict[str, Any]:
-        """Execute a chat request"""
-        try:
-            data = {"session_id": session_id, "message": message, "context": context}
-            if model_override is not None:
-                data["model_override"] = model_override
-
-            # Short connect timeout (10s), long read timeout (10 min) for Ollama/local LLMs
-            timeout = httpx.Timeout(connect=10.0, read=600.0, write=30.0, pool=10.0)
-            async with httpx.AsyncClient(timeout=timeout) as client:
-                response = await client.post(
-                    f"{self.base_url}/api/chat/execute", json=data, headers=self.headers
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error executing chat: {str(e)}")
-            raise
-
-    async def build_context(
-        self, notebook_id: str, context_config: Dict[str, Any]
-    ) -> Dict[str, Any]:
-        """Build context for a notebook"""
-        try:
-            data = {"notebook_id": notebook_id, "context_config": context_config}
-
-            async with httpx.AsyncClient() as client:
-                response = await client.post(
-                    f"{self.base_url}/api/chat/context", json=data, headers=self.headers
-                )
-                response.raise_for_status()
-                return response.json()
-        except Exception as e:
-            logger.error(f"Error building context: {str(e)}")
-            raise
-
-
-# Global instance
-chat_service = ChatService()
diff --git a/api/client.py b/api/client.py
deleted file mode 100644
index 91978c06..00000000
--- a/api/client.py
+++ /dev/null
@@ -1,529 +0,0 @@
-"""
-API client for Open Notebook API.
-This module provides a client interface to interact with the Open Notebook API.
-"""
-
-import os
-from typing import Any, Dict, List, Optional, Union
-
-import httpx
-from loguru import logger
-
-
-class APIClient:
-    """Client for Open Notebook API."""
-
-    def __init__(self, base_url: Optional[str] = None):
-        self.base_url = base_url or os.getenv("API_BASE_URL", "http://127.0.0.1:5055")
-        # Timeout increased to 5 minutes (300s) to accommodate slow LLM operations
-        # (transformations, insights) on slower hardware (Ollama, LM Studio, remote APIs)
-        # Configurable via API_CLIENT_TIMEOUT environment variable (in seconds)
-        timeout_str = os.getenv("API_CLIENT_TIMEOUT", "300.0")
-        try:
-            timeout_value = float(timeout_str)
-            # Validate timeout is within reasonable bounds (30s - 3600s / 1 hour)
-            if timeout_value < 30:
-                logger.warning(
-                    f"API_CLIENT_TIMEOUT={timeout_value}s is too low, using minimum of 30s"
-                )
-                timeout_value = 30.0
-            elif timeout_value > 3600:
-                logger.warning(
-                    f"API_CLIENT_TIMEOUT={timeout_value}s is too high, using maximum of 3600s"
-                )
-                timeout_value = 3600.0
-            self.timeout = timeout_value
-        except ValueError:
-            logger.error(
-                f"Invalid API_CLIENT_TIMEOUT value '{timeout_str}', using default 300s"
-            )
-            self.timeout = 300.0
-
-        # Add authentication header if password is set
-        self.headers = {}
-        password = os.getenv("OPEN_NOTEBOOK_PASSWORD")
-        if password:
-            self.headers["Authorization"] = f"Bearer {password}"
-
-    def _make_request(
-        self, method: str, endpoint: str, timeout: Optional[float] = None, **kwargs
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Make HTTP request to the API."""
-        url = f"{self.base_url}{endpoint}"
-        request_timeout = timeout if timeout is not None else self.timeout
-
-        # Merge headers
-        headers = kwargs.get("headers", {})
-        headers.update(self.headers)
-        kwargs["headers"] = headers
-
-        try:
-            with httpx.Client(timeout=request_timeout) as client:
-                response = client.request(method, url, **kwargs)
-                response.raise_for_status()
-                return response.json()
-        except httpx.RequestError as e:
-            logger.error(f"Request error for {method} {url}: {str(e)}")
-            raise ConnectionError(f"Failed to connect to API: {str(e)}")
-        except httpx.HTTPStatusError as e:
-            logger.error(
-                f"HTTP error {e.response.status_code} for {method} {url}: {e.response.text}"
-            )
-            raise RuntimeError(
-                f"API request failed: {e.response.status_code} - {e.response.text}"
-            )
-        except Exception as e:
-            logger.error(f"Unexpected error for {method} {url}: {str(e)}")
-            raise
-
-    # Notebooks API methods
-    def get_notebooks(
-        self, archived: Optional[bool] = None, order_by: str = "updated desc"
-    ) -> List[Dict[Any, Any]]:
-        """Get all notebooks."""
-        params: Dict[str, Any] = {"order_by": order_by}
-        if archived is not None:
-            params["archived"] = str(archived).lower()
-
-        result = self._make_request("GET", "/api/notebooks", params=params)
-        return result if isinstance(result, list) else [result]
-
-    def create_notebook(
-        self, name: str, description: str = ""
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new notebook."""
-        data = {"name": name, "description": description}
-        return self._make_request("POST", "/api/notebooks", json=data)
-
-    def get_notebook(
-        self, notebook_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific notebook."""
-        return self._make_request("GET", f"/api/notebooks/{notebook_id}")
-
-    def update_notebook(
-        self, notebook_id: str, **updates
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update a notebook."""
-        return self._make_request("PUT", f"/api/notebooks/{notebook_id}", json=updates)
-
-    def delete_notebook(
-        self, notebook_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a notebook."""
-        return self._make_request("DELETE", f"/api/notebooks/{notebook_id}")
-
-    # Search API methods
-    def search(
-        self,
-        query: str,
-        search_type: str = "text",
-        limit: int = 100,
-        search_sources: bool = True,
-        search_notes: bool = True,
-        minimum_score: float = 0.2,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Search the knowledge base."""
-        data = {
-            "query": query,
-            "type": search_type,
-            "limit": limit,
-            "search_sources": search_sources,
-            "search_notes": search_notes,
-            "minimum_score": minimum_score,
-        }
-        return self._make_request("POST", "/api/search", json=data)
-
-    def ask_simple(
-        self,
-        question: str,
-        strategy_model: str,
-        answer_model: str,
-        final_answer_model: str,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Ask the knowledge base a question (simple, non-streaming)."""
-        data = {
-            "question": question,
-            "strategy_model": strategy_model,
-            "answer_model": answer_model,
-            "final_answer_model": final_answer_model,
-        }
-        # Use configured timeout for long-running ask operations
-        return self._make_request(
-            "POST", "/api/search/ask/simple", json=data, timeout=self.timeout
-        )
-
-    # Models API methods
-    def get_models(self, model_type: Optional[str] = None) -> List[Dict[Any, Any]]:
-        """Get all models with optional type filtering."""
-        params = {}
-        if model_type:
-            params["type"] = model_type
-        result = self._make_request("GET", "/api/models", params=params)
-        return result if isinstance(result, list) else [result]
-
-    def create_model(
-        self, name: str, provider: str, model_type: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new model."""
-        data = {
-            "name": name,
-            "provider": provider,
-            "type": model_type,
-        }
-        return self._make_request("POST", "/api/models", json=data)
-
-    def delete_model(
-        self, model_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a model."""
-        return self._make_request("DELETE", f"/api/models/{model_id}")
-
-    def get_default_models(self) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get default model assignments."""
-        return self._make_request("GET", "/api/models/defaults")
-
-    def update_default_models(
-        self, **defaults
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update default model assignments."""
-        return self._make_request("PUT", "/api/models/defaults", json=defaults)
-
-    # Transformations API methods
-    def get_transformations(self) -> List[Dict[Any, Any]]:
-        """Get all transformations."""
-        result = self._make_request("GET", "/api/transformations")
-        return result if isinstance(result, list) else [result]
-
-    def create_transformation(
-        self,
-        name: str,
-        title: str,
-        description: str,
-        prompt: str,
-        apply_default: bool = False,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new transformation."""
-        data = {
-            "name": name,
-            "title": title,
-            "description": description,
-            "prompt": prompt,
-            "apply_default": apply_default,
-        }
-        return self._make_request("POST", "/api/transformations", json=data)
-
-    def get_transformation(
-        self, transformation_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific transformation."""
-        return self._make_request("GET", f"/api/transformations/{transformation_id}")
-
-    def update_transformation(
-        self, transformation_id: str, **updates
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update a transformation."""
-        return self._make_request(
-            "PUT", f"/api/transformations/{transformation_id}", json=updates
-        )
-
-    def delete_transformation(
-        self, transformation_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a transformation."""
-        return self._make_request("DELETE", f"/api/transformations/{transformation_id}")
-
-    def execute_transformation(
-        self, transformation_id: str, input_text: str, model_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Execute a transformation on input text."""
-        data = {
-            "transformation_id": transformation_id,
-            "input_text": input_text,
-            "model_id": model_id,
-        }
-        # Use configured timeout for transformation operations
-        return self._make_request(
-            "POST", "/api/transformations/execute", json=data, timeout=self.timeout
-        )
-
-    # Notes API methods
-    def get_notes(self, notebook_id: Optional[str] = None) -> List[Dict[Any, Any]]:
-        """Get all notes with optional notebook filtering."""
-        params = {}
-        if notebook_id:
-            params["notebook_id"] = notebook_id
-        result = self._make_request("GET", "/api/notes", params=params)
-        return result if isinstance(result, list) else [result]
-
-    def create_note(
-        self,
-        content: str,
-        title: Optional[str] = None,
-        note_type: str = "human",
-        notebook_id: Optional[str] = None,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new note."""
-        data = {
-            "content": content,
-            "note_type": note_type,
-        }
-        if title:
-            data["title"] = title
-        if notebook_id:
-            data["notebook_id"] = notebook_id
-        return self._make_request("POST", "/api/notes", json=data)
-
-    def get_note(self, note_id: str) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific note."""
-        return self._make_request("GET", f"/api/notes/{note_id}")
-
-    def update_note(
-        self, note_id: str, **updates
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update a note."""
-        return self._make_request("PUT", f"/api/notes/{note_id}", json=updates)
-
-    def delete_note(self, note_id: str) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a note."""
-        return self._make_request("DELETE", f"/api/notes/{note_id}")
-
-    # Embedding API methods
-    def embed_content(
-        self, item_id: str, item_type: str, async_processing: bool = False
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Embed content for vector search."""
-        data = {
-            "item_id": item_id,
-            "item_type": item_type,
-            "async_processing": async_processing,
-        }
-        # Use configured timeout for embedding operations
-        return self._make_request("POST", "/api/embed", json=data, timeout=self.timeout)
-
-    def rebuild_embeddings(
-        self,
-        mode: str = "existing",
-        include_sources: bool = True,
-        include_notes: bool = True,
-        include_insights: bool = True,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Rebuild embeddings in bulk.
-
-        Note: This operation can take a long time for large databases.
-        Consider increasing API_CLIENT_TIMEOUT to 600-900s for bulk rebuilds.
-        """
-        data = {
-            "mode": mode,
-            "include_sources": include_sources,
-            "include_notes": include_notes,
-            "include_insights": include_insights,
-        }
-        # Use double the configured timeout for bulk rebuild operations (or configured value if already high)
-        rebuild_timeout = max(self.timeout, min(self.timeout * 2, 3600.0))
-        return self._make_request(
-            "POST", "/api/embeddings/rebuild", json=data, timeout=rebuild_timeout
-        )
-
-    def get_rebuild_status(
-        self, command_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get status of a rebuild operation."""
-        return self._make_request("GET", f"/api/embeddings/rebuild/{command_id}/status")
-
-    # Settings API methods
-    def get_settings(self) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get all application settings."""
-        return self._make_request("GET", "/api/settings")
-
-    def update_settings(
-        self, **settings
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update application settings."""
-        return self._make_request("PUT", "/api/settings", json=settings)
-
-    # Context API methods
-    def get_notebook_context(
-        self, notebook_id: str, context_config: Optional[Dict] = None
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get context for a notebook."""
-        data: Dict[str, Any] = {"notebook_id": notebook_id}
-        if context_config:
-            data["context_config"] = context_config
-        result = self._make_request(
-            "POST", f"/api/notebooks/{notebook_id}/context", json=data
-        )
-        return result if isinstance(result, dict) else {}
-
-    # Sources API methods
-    def get_sources(self, notebook_id: Optional[str] = None) -> List[Dict[Any, Any]]:
-        """Get all sources with optional notebook filtering."""
-        params = {}
-        if notebook_id:
-            params["notebook_id"] = notebook_id
-        result = self._make_request("GET", "/api/sources", params=params)
-        return result if isinstance(result, list) else [result]
-
-    def create_source(
-        self,
-        notebook_id: Optional[str] = None,
-        notebooks: Optional[List[str]] = None,
-        source_type: str = "text",
-        url: Optional[str] = None,
-        file_path: Optional[str] = None,
-        content: Optional[str] = None,
-        title: Optional[str] = None,
-        transformations: Optional[List[str]] = None,
-        embed: bool = False,
-        delete_source: bool = False,
-        async_processing: bool = False,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new source."""
-        data = {
-            "type": source_type,
-            "embed": embed,
-            "delete_source": delete_source,
-            "async_processing": async_processing,
-        }
-
-        # Handle backward compatibility for notebook_id vs notebooks
-        if notebooks:
-            data["notebooks"] = notebooks
-        elif notebook_id:
-            data["notebook_id"] = notebook_id
-        else:
-            raise ValueError("Either notebook_id or notebooks must be provided")
-
-        if url:
-            data["url"] = url
-        if file_path:
-            data["file_path"] = file_path
-        if content:
-            data["content"] = content
-        if title:
-            data["title"] = title
-        if transformations:
-            data["transformations"] = transformations
-
-        # Use configured timeout for source creation (especially PDF processing with OCR)
-        return self._make_request(
-            "POST", "/api/sources/json", json=data, timeout=self.timeout
-        )
-
-    def get_source(self, source_id: str) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific source."""
-        return self._make_request("GET", f"/api/sources/{source_id}")
-
-    def get_source_status(
-        self, source_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get processing status for a source."""
-        return self._make_request("GET", f"/api/sources/{source_id}/status")
-
-    def update_source(
-        self, source_id: str, **updates
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update a source."""
-        return self._make_request("PUT", f"/api/sources/{source_id}", json=updates)
-
-    def delete_source(
-        self, source_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a source."""
-        return self._make_request("DELETE", f"/api/sources/{source_id}")
-
-    # Insights API methods
-    def get_source_insights(self, source_id: str) -> List[Dict[Any, Any]]:
-        """Get all insights for a specific source."""
-        result = self._make_request("GET", f"/api/sources/{source_id}/insights")
-        return result if isinstance(result, list) else [result]
-
-    def get_insight(
-        self, insight_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific insight."""
-        return self._make_request("GET", f"/api/insights/{insight_id}")
-
-    def delete_insight(
-        self, insight_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete a specific insight."""
-        return self._make_request("DELETE", f"/api/insights/{insight_id}")
-
-    def save_insight_as_note(
-        self, insight_id: str, notebook_id: Optional[str] = None
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Convert an insight to a note."""
-        data = {}
-        if notebook_id:
-            data["notebook_id"] = notebook_id
-        return self._make_request(
-            "POST", f"/api/insights/{insight_id}/save-as-note", json=data
-        )
-
-    def create_source_insight(
-        self, source_id: str, transformation_id: str, model_id: Optional[str] = None
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new insight for a source by running a transformation."""
-        data = {"transformation_id": transformation_id}
-        if model_id:
-            data["model_id"] = model_id
-        return self._make_request(
-            "POST", f"/api/sources/{source_id}/insights", json=data
-        )
-
-    # Episode Profiles API methods
-    def get_episode_profiles(self) -> List[Dict[Any, Any]]:
-        """Get all episode profiles."""
-        result = self._make_request("GET", "/api/episode-profiles")
-        return result if isinstance(result, list) else [result]
-
-    def get_episode_profile(
-        self, profile_name: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get a specific episode profile by name."""
-        return self._make_request("GET", f"/api/episode-profiles/{profile_name}")
-
-    def create_episode_profile(
-        self,
-        name: str,
-        description: str = "",
-        speaker_config: str = "",
-        outline_provider: str = "",
-        outline_model: str = "",
-        transcript_provider: str = "",
-        transcript_model: str = "",
-        default_briefing: str = "",
-        num_segments: int = 5,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Create a new episode profile."""
-        data = {
-            "name": name,
-            "description": description,
-            "speaker_config": speaker_config,
-            "outline_provider": outline_provider,
-            "outline_model": outline_model,
-            "transcript_provider": transcript_provider,
-            "transcript_model": transcript_model,
-            "default_briefing": default_briefing,
-            "num_segments": num_segments,
-        }
-        return self._make_request("POST", "/api/episode-profiles", json=data)
-
-    def update_episode_profile(
-        self, profile_id: str, **updates
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Update an episode profile."""
-        return self._make_request(
-            "PUT", f"/api/episode-profiles/{profile_id}", json=updates
-        )
-
-    def delete_episode_profile(
-        self, profile_id: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Delete an episode profile."""
-        return self._make_request("DELETE", f"/api/episode-profiles/{profile_id}")
-
-
-# Global client instance
-api_client = APIClient()
diff --git a/api/command_service.py b/api/command_service.py
index 6e9506ba..635a4855 100644
--- a/api/command_service.py
+++ b/api/command_service.py
@@ -27,7 +27,7 @@ class CommandService:
             # surreal-commands expects: submit_command(app_name, command_name, args)
             cmd_id = submit_command(
                 module_name,  # This is actually the app name (e.g., "open_notebook")
-                command_name,  # Command name (e.g., "process_text")
+                command_name,  # Command name (e.g., "generate_podcast")
                 command_args,  # Input data
             )
             # Convert RecordID to string if needed
diff --git a/api/context_service.py b/api/context_service.py
deleted file mode 100644
index 87f766fb..00000000
--- a/api/context_service.py
+++ /dev/null
@@ -1,29 +0,0 @@
-"""
-Context service layer using API.
-"""
-
-from typing import Any, Dict, List, Optional, Union
-
-from loguru import logger
-
-from api.client import api_client
-
-
-class ContextService:
-    """Service layer for context operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for context operations")
-
-    def get_notebook_context(
-        self, notebook_id: str, context_config: Optional[Dict] = None
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Get context for a notebook."""
-        result = api_client.get_notebook_context(
-            notebook_id=notebook_id, context_config=context_config
-        )
-        return result
-
-
-# Global service instance
-context_service = ContextService()
diff --git a/api/embedding_service.py b/api/embedding_service.py
deleted file mode 100644
index 1378d73b..00000000
--- a/api/embedding_service.py
+++ /dev/null
@@ -1,27 +0,0 @@
-"""
-Embedding service layer using API.
-"""
-
-from typing import Any, Dict, List, Union
-
-from loguru import logger
-
-from api.client import api_client
-
-
-class EmbeddingService:
-    """Service layer for embedding operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for embedding operations")
-
-    def embed_content(
-        self, item_id: str, item_type: str
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Embed content for vector search."""
-        result = api_client.embed_content(item_id=item_id, item_type=item_type)
-        return result
-
-
-# Global service instance
-embedding_service = EmbeddingService()
diff --git a/api/episode_profiles_service.py b/api/episode_profiles_service.py
deleted file mode 100644
index f2072e42..00000000
--- a/api/episode_profiles_service.py
+++ /dev/null
@@ -1,112 +0,0 @@
-"""
-Episode profiles service layer using API.
-"""
-
-from typing import List
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.podcasts.models import EpisodeProfile
-
-
-class EpisodeProfilesService:
-    """Service layer for episode profiles operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for episode profiles operations")
-
-    def get_all_episode_profiles(self) -> List[EpisodeProfile]:
-        """Get all episode profiles."""
-        profiles_data = api_client.get_episode_profiles()
-        # Convert API response to EpisodeProfile objects
-        profiles = []
-        for profile_data in profiles_data:
-            profile = EpisodeProfile(
-                name=profile_data["name"],
-                description=profile_data.get("description", ""),
-                speaker_config=profile_data["speaker_config"],
-                outline_provider=profile_data["outline_provider"],
-                outline_model=profile_data["outline_model"],
-                transcript_provider=profile_data["transcript_provider"],
-                transcript_model=profile_data["transcript_model"],
-                default_briefing=profile_data["default_briefing"],
-                num_segments=profile_data["num_segments"],
-            )
-            profile.id = profile_data["id"]
-            profiles.append(profile)
-        return profiles
-
-    def get_episode_profile(self, profile_name: str) -> EpisodeProfile:
-        """Get a specific episode profile by name."""
-        profile_response = api_client.get_episode_profile(profile_name)
-        profile_data = (
-            profile_response
-            if isinstance(profile_response, dict)
-            else profile_response[0]
-        )
-        profile = EpisodeProfile(
-            name=profile_data["name"],
-            description=profile_data.get("description", ""),
-            speaker_config=profile_data["speaker_config"],
-            outline_provider=profile_data["outline_provider"],
-            outline_model=profile_data["outline_model"],
-            transcript_provider=profile_data["transcript_provider"],
-            transcript_model=profile_data["transcript_model"],
-            default_briefing=profile_data["default_briefing"],
-            num_segments=profile_data["num_segments"],
-        )
-        profile.id = profile_data["id"]
-        return profile
-
-    def create_episode_profile(
-        self,
-        name: str,
-        description: str = "",
-        speaker_config: str = "",
-        outline_provider: str = "",
-        outline_model: str = "",
-        transcript_provider: str = "",
-        transcript_model: str = "",
-        default_briefing: str = "",
-        num_segments: int = 5,
-    ) -> EpisodeProfile:
-        """Create a new episode profile."""
-        profile_response = api_client.create_episode_profile(
-            name=name,
-            description=description,
-            speaker_config=speaker_config,
-            outline_provider=outline_provider,
-            outline_model=outline_model,
-            transcript_provider=transcript_provider,
-            transcript_model=transcript_model,
-            default_briefing=default_briefing,
-            num_segments=num_segments,
-        )
-        profile_data = (
-            profile_response
-            if isinstance(profile_response, dict)
-            else profile_response[0]
-        )
-        profile = EpisodeProfile(
-            name=profile_data["name"],
-            description=profile_data.get("description", ""),
-            speaker_config=profile_data["speaker_config"],
-            outline_provider=profile_data["outline_provider"],
-            outline_model=profile_data["outline_model"],
-            transcript_provider=profile_data["transcript_provider"],
-            transcript_model=profile_data["transcript_model"],
-            default_briefing=profile_data["default_briefing"],
-            num_segments=profile_data["num_segments"],
-        )
-        profile.id = profile_data["id"]
-        return profile
-
-    def delete_episode_profile(self, profile_id: str) -> bool:
-        """Delete an episode profile."""
-        api_client.delete_episode_profile(profile_id)
-        return True
-
-
-# Global service instance
-episode_profiles_service = EpisodeProfilesService()
diff --git a/api/insights_service.py b/api/insights_service.py
deleted file mode 100644
index 6ae87622..00000000
--- a/api/insights_service.py
+++ /dev/null
@@ -1,100 +0,0 @@
-"""
-Insights service layer using API.
-"""
-
-from typing import List, Optional
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.notebook import Note, SourceInsight
-
-
-class InsightsService:
-    """Service layer for insights operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for insights operations")
-
-    def get_source_insights(self, source_id: str) -> List[SourceInsight]:
-        """Get all insights for a specific source."""
-        insights_data = api_client.get_source_insights(source_id)
-        # Convert API response to SourceInsight objects
-        insights = []
-        for insight_data in insights_data:
-            insight = SourceInsight(
-                insight_type=insight_data["insight_type"],
-                content=insight_data["content"],
-            )
-            insight.id = insight_data["id"]
-            insight.created = insight_data["created"]
-            insight.updated = insight_data["updated"]
-            insights.append(insight)
-        return insights
-
-    def get_insight(self, insight_id: str) -> SourceInsight:
-        """Get a specific insight."""
-        insight_response = api_client.get_insight(insight_id)
-        insight_data = (
-            insight_response
-            if isinstance(insight_response, dict)
-            else insight_response[0]
-        )
-        insight = SourceInsight(
-            insight_type=insight_data["insight_type"],
-            content=insight_data["content"],
-        )
-        insight.id = insight_data["id"]
-        insight.created = insight_data["created"]
-        insight.updated = insight_data["updated"]
-        # Note: source_id from API response is not stored; use await insight.get_source() if needed
-        return insight
-
-    def delete_insight(self, insight_id: str) -> bool:
-        """Delete a specific insight."""
-        api_client.delete_insight(insight_id)
-        return True
-
-    def save_insight_as_note(
-        self, insight_id: str, notebook_id: Optional[str] = None
-    ) -> Note:
-        """Convert an insight to a note."""
-        note_response = api_client.save_insight_as_note(insight_id, notebook_id)
-        note_data = (
-            note_response if isinstance(note_response, dict) else note_response[0]
-        )
-        note = Note(
-            title=note_data["title"],
-            content=note_data["content"],
-            note_type=note_data["note_type"],
-        )
-        note.id = note_data["id"]
-        note.created = note_data["created"]
-        note.updated = note_data["updated"]
-        return note
-
-    def create_source_insight(
-        self, source_id: str, transformation_id: str, model_id: Optional[str] = None
-    ) -> SourceInsight:
-        """Create a new insight for a source by running a transformation."""
-        insight_response = api_client.create_source_insight(
-            source_id, transformation_id, model_id
-        )
-        insight_data = (
-            insight_response
-            if isinstance(insight_response, dict)
-            else insight_response[0]
-        )
-        insight = SourceInsight(
-            insight_type=insight_data["insight_type"],
-            content=insight_data["content"],
-        )
-        insight.id = insight_data["id"]
-        insight.created = insight_data["created"]
-        insight.updated = insight_data["updated"]
-        # Note: source_id from API response is not stored; use await insight.get_source() if needed
-        return insight
-
-
-# Global service instance
-insights_service = InsightsService()
diff --git a/api/models_service.py b/api/models_service.py
deleted file mode 100644
index ab857fa5..00000000
--- a/api/models_service.py
+++ /dev/null
@@ -1,112 +0,0 @@
-"""
-Models service layer using API.
-"""
-
-from typing import List, Optional
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.ai.models import DefaultModels, Model
-
-
-class ModelsService:
-    """Service layer for models operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for models operations")
-
-    def get_all_models(self, model_type: Optional[str] = None) -> List[Model]:
-        """Get all models with optional type filtering."""
-        models_data = api_client.get_models(model_type=model_type)
-        # Convert API response to Model objects
-        models = []
-        for model_data in models_data:
-            model = Model(
-                name=model_data["name"],
-                provider=model_data["provider"],
-                type=model_data["type"],
-            )
-            model.id = model_data["id"]
-            model.created = model_data["created"]
-            model.updated = model_data["updated"]
-            models.append(model)
-        return models
-
-    def create_model(self, name: str, provider: str, model_type: str) -> Model:
-        """Create a new model."""
-        response = api_client.create_model(name, provider, model_type)
-        model_data = response if isinstance(response, dict) else response[0]
-        model = Model(
-            name=model_data["name"],
-            provider=model_data["provider"],
-            type=model_data["type"],
-        )
-        model.id = model_data["id"]
-        model.created = model_data["created"]
-        model.updated = model_data["updated"]
-        return model
-
-    def delete_model(self, model_id: str) -> bool:
-        """Delete a model."""
-        api_client.delete_model(model_id)
-        return True
-
-    def get_default_models(self) -> DefaultModels:
-        """Get default model assignments."""
-        response = api_client.get_default_models()
-        defaults_data = response if isinstance(response, dict) else response[0]
-        defaults = DefaultModels()
-
-        # Set the values from API response
-        defaults.default_chat_model = defaults_data.get("default_chat_model")
-        defaults.default_transformation_model = defaults_data.get(
-            "default_transformation_model"
-        )
-        defaults.large_context_model = defaults_data.get("large_context_model")
-        defaults.default_text_to_speech_model = defaults_data.get(
-            "default_text_to_speech_model"
-        )
-        defaults.default_speech_to_text_model = defaults_data.get(
-            "default_speech_to_text_model"
-        )
-        defaults.default_embedding_model = defaults_data.get("default_embedding_model")
-        defaults.default_tools_model = defaults_data.get("default_tools_model")
-
-        return defaults
-
-    def update_default_models(self, defaults: DefaultModels) -> DefaultModels:
-        """Update default model assignments."""
-        updates = {
-            "default_chat_model": defaults.default_chat_model,
-            "default_transformation_model": defaults.default_transformation_model,
-            "large_context_model": defaults.large_context_model,
-            "default_text_to_speech_model": defaults.default_text_to_speech_model,
-            "default_speech_to_text_model": defaults.default_speech_to_text_model,
-            "default_embedding_model": defaults.default_embedding_model,
-            "default_tools_model": defaults.default_tools_model,
-        }
-
-        response = api_client.update_default_models(**updates)
-        defaults_data = response if isinstance(response, dict) else response[0]
-
-        # Update the defaults object with the response
-        defaults.default_chat_model = defaults_data.get("default_chat_model")
-        defaults.default_transformation_model = defaults_data.get(
-            "default_transformation_model"
-        )
-        defaults.large_context_model = defaults_data.get("large_context_model")
-        defaults.default_text_to_speech_model = defaults_data.get(
-            "default_text_to_speech_model"
-        )
-        defaults.default_speech_to_text_model = defaults_data.get(
-            "default_speech_to_text_model"
-        )
-        defaults.default_embedding_model = defaults_data.get("default_embedding_model")
-        defaults.default_tools_model = defaults_data.get("default_tools_model")
-
-        return defaults
-
-
-# Global service instance
-models_service = ModelsService()
diff --git a/api/notebook_service.py b/api/notebook_service.py
deleted file mode 100644
index ab1ff738..00000000
--- a/api/notebook_service.py
+++ /dev/null
@@ -1,87 +0,0 @@
-"""
-Notebook service layer using API.
-"""
-
-from typing import List, Optional
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.notebook import Notebook
-
-
-class NotebookService:
-    """Service layer for notebook operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for notebook operations")
-
-    def get_all_notebooks(self, order_by: str = "updated desc") -> List[Notebook]:
-        """Get all notebooks."""
-        notebooks_data = api_client.get_notebooks(order_by=order_by)
-        # Convert API response to Notebook objects
-        notebooks = []
-        for nb_data in notebooks_data:
-            nb = Notebook(
-                name=nb_data["name"],
-                description=nb_data["description"],
-                archived=nb_data["archived"],
-            )
-            nb.id = nb_data["id"]
-            nb.created = nb_data["created"]
-            nb.updated = nb_data["updated"]
-            notebooks.append(nb)
-        return notebooks
-
-    def get_notebook(self, notebook_id: str) -> Optional[Notebook]:
-        """Get a specific notebook."""
-        response = api_client.get_notebook(notebook_id)
-        nb_data = response if isinstance(response, dict) else response[0]
-        nb = Notebook(
-            name=nb_data["name"],
-            description=nb_data["description"],
-            archived=nb_data["archived"],
-        )
-        nb.id = nb_data["id"]
-        nb.created = nb_data["created"]
-        nb.updated = nb_data["updated"]
-        return nb
-
-    def create_notebook(self, name: str, description: str = "") -> Notebook:
-        """Create a new notebook."""
-        response = api_client.create_notebook(name, description)
-        nb_data = response if isinstance(response, dict) else response[0]
-        nb = Notebook(
-            name=nb_data["name"],
-            description=nb_data["description"],
-            archived=nb_data["archived"],
-        )
-        nb.id = nb_data["id"]
-        nb.created = nb_data["created"]
-        nb.updated = nb_data["updated"]
-        return nb
-
-    def update_notebook(self, notebook: Notebook) -> Notebook:
-        """Update a notebook."""
-        updates = {
-            "name": notebook.name,
-            "description": notebook.description,
-            "archived": notebook.archived,
-        }
-        response = api_client.update_notebook(notebook.id or "", **updates)
-        nb_data = response if isinstance(response, dict) else response[0]
-        # Update the notebook object with the response
-        notebook.name = nb_data["name"]
-        notebook.description = nb_data["description"]
-        notebook.archived = nb_data["archived"]
-        notebook.updated = nb_data["updated"]
-        return notebook
-
-    def delete_notebook(self, notebook: Notebook) -> bool:
-        """Delete a notebook."""
-        api_client.delete_notebook(notebook.id or "")
-        return True
-
-
-# Global service instance
-notebook_service = NotebookService()
diff --git a/api/notes_service.py b/api/notes_service.py
deleted file mode 100644
index d336b88d..00000000
--- a/api/notes_service.py
+++ /dev/null
@@ -1,103 +0,0 @@
-"""
-Notes service layer using API.
-"""
-
-from typing import List, Optional
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.notebook import Note
-
-
-class NotesService:
-    """Service layer for notes operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for notes operations")
-
-    def get_all_notes(self, notebook_id: Optional[str] = None) -> List[Note]:
-        """Get all notes with optional notebook filtering."""
-        notes_data = api_client.get_notes(notebook_id=notebook_id)
-        # Convert API response to Note objects
-        notes = []
-        for note_data in notes_data:
-            note = Note(
-                title=note_data["title"],
-                content=note_data["content"],
-                note_type=note_data["note_type"],
-            )
-            note.id = note_data["id"]
-            note.created = note_data["created"]
-            note.updated = note_data["updated"]
-            notes.append(note)
-        return notes
-
-    def get_note(self, note_id: str) -> Note:
-        """Get a specific note."""
-        note_response = api_client.get_note(note_id)
-        note_data = (
-            note_response if isinstance(note_response, dict) else note_response[0]
-        )
-        note = Note(
-            title=note_data["title"],
-            content=note_data["content"],
-            note_type=note_data["note_type"],
-        )
-        note.id = note_data["id"]
-        note.created = note_data["created"]
-        note.updated = note_data["updated"]
-        return note
-
-    def create_note(
-        self,
-        content: str,
-        title: Optional[str] = None,
-        note_type: str = "human",
-        notebook_id: Optional[str] = None,
-    ) -> Note:
-        """Create a new note."""
-        note_response = api_client.create_note(
-            content=content, title=title, note_type=note_type, notebook_id=notebook_id
-        )
-        note_data = (
-            note_response if isinstance(note_response, dict) else note_response[0]
-        )
-        note = Note(
-            title=note_data["title"],
-            content=note_data["content"],
-            note_type=note_data["note_type"],
-        )
-        note.id = note_data["id"]
-        note.created = note_data["created"]
-        note.updated = note_data["updated"]
-        return note
-
-    def update_note(self, note: Note) -> Note:
-        """Update a note."""
-        updates = {
-            "title": note.title,
-            "content": note.content,
-            "note_type": note.note_type,
-        }
-        note_response = api_client.update_note(note.id or "", **updates)
-        note_data = (
-            note_response if isinstance(note_response, dict) else note_response[0]
-        )
-
-        # Update the note object with the response
-        note.title = note_data["title"]
-        note.content = note_data["content"]
-        note.note_type = note_data["note_type"]
-        note.updated = note_data["updated"]
-
-        return note
-
-    def delete_note(self, note_id: str) -> bool:
-        """Delete a note."""
-        api_client.delete_note(note_id)
-        return True
-
-
-# Global service instance
-notes_service = NotesService()
diff --git a/api/podcast_api_service.py b/api/podcast_api_service.py
deleted file mode 100644
index edf4d847..00000000
--- a/api/podcast_api_service.py
+++ /dev/null
@@ -1,125 +0,0 @@
-"""
-Podcast service layer using API client.
-This replaces direct httpx calls in the Streamlit pages.
-"""
-
-from typing import Any, Dict, List
-
-from loguru import logger
-
-from api.client import api_client
-
-
-class PodcastAPIService:
-    """Service layer for podcast operations using API client."""
-
-    def __init__(self):
-        logger.info("Using API client for podcast operations")
-
-    # Episode methods
-    def get_episodes(self) -> List[Dict[Any, Any]]:
-        """Get all podcast episodes."""
-        result = api_client._make_request("GET", "/api/podcasts/episodes")
-        return result if isinstance(result, list) else [result]
-
-    def delete_episode(self, episode_id: str) -> bool:
-        """Delete a podcast episode."""
-        try:
-            api_client._make_request("DELETE", f"/api/podcasts/episodes/{episode_id}")
-            return True
-        except Exception as e:
-            logger.error(f"Failed to delete episode: {e}")
-            return False
-
-    # Episode Profile methods
-    def get_episode_profiles(self) -> List[Dict]:
-        """Get all episode profiles."""
-        return api_client.get_episode_profiles()
-
-    def create_episode_profile(self, profile_data: Dict) -> bool:
-        """Create a new episode profile."""
-        try:
-            api_client.create_episode_profile(**profile_data)
-            return True
-        except Exception as e:
-            logger.error(f"Failed to create episode profile: {e}")
-            return False
-
-    def update_episode_profile(self, profile_id: str, profile_data: Dict) -> bool:
-        """Update an episode profile."""
-        try:
-            api_client.update_episode_profile(profile_id, **profile_data)
-            return True
-        except Exception as e:
-            logger.error(f"Failed to update episode profile: {e}")
-            return False
-
-    def delete_episode_profile(self, profile_id: str) -> bool:
-        """Delete an episode profile."""
-        try:
-            api_client.delete_episode_profile(profile_id)
-            return True
-        except Exception as e:
-            logger.error(f"Failed to delete episode profile: {e}")
-            return False
-
-    def duplicate_episode_profile(self, profile_id: str) -> bool:
-        """Duplicate an episode profile."""
-        try:
-            api_client._make_request(
-                "POST", f"/api/episode-profiles/{profile_id}/duplicate"
-            )
-            return True
-        except Exception as e:
-            logger.error(f"Failed to duplicate episode profile: {e}")
-            return False
-
-    # Speaker Profile methods
-    def get_speaker_profiles(self) -> List[Dict[Any, Any]]:
-        """Get all speaker profiles."""
-        result = api_client._make_request("GET", "/api/speaker-profiles")
-        return result if isinstance(result, list) else [result]
-
-    def create_speaker_profile(self, profile_data: Dict) -> bool:
-        """Create a new speaker profile."""
-        try:
-            api_client._make_request("POST", "/api/speaker-profiles", json=profile_data)
-            return True
-        except Exception as e:
-            logger.error(f"Failed to create speaker profile: {e}")
-            return False
-
-    def update_speaker_profile(self, profile_id: str, profile_data: Dict) -> bool:
-        """Update a speaker profile."""
-        try:
-            api_client._make_request(
-                "PUT", f"/api/speaker-profiles/{profile_id}", json=profile_data
-            )
-            return True
-        except Exception as e:
-            logger.error(f"Failed to update speaker profile: {e}")
-            return False
-
-    def delete_speaker_profile(self, profile_id: str) -> bool:
-        """Delete a speaker profile."""
-        try:
-            api_client._make_request("DELETE", f"/api/speaker-profiles/{profile_id}")
-            return True
-        except Exception as e:
-            logger.error(f"Failed to delete speaker profile: {e}")
-            return False
-
-    def duplicate_speaker_profile(self, profile_id: str) -> bool:
-        """Duplicate a speaker profile."""
-        try:
-            api_client._make_request(
-                "POST", f"/api/speaker-profiles/{profile_id}/duplicate"
-            )
-            return True
-        except Exception as e:
-            logger.error(f"Failed to duplicate speaker profile: {e}")
-            return False
-
-
-# Global service instance
-podcast_api_service = PodcastAPIService()
diff --git a/api/routers/commands.py b/api/routers/commands.py
index 8b2d41b2..bbff33e0 100644
--- a/api/routers/commands.py
+++ b/api/routers/commands.py
@@ -12,7 +12,7 @@ router = APIRouter()
 
 class CommandExecutionRequest(BaseModel):
     command: str = Field(
-        ..., description="Command function name (e.g., 'process_text')"
+        ..., description="Command function name (e.g., 'generate_podcast')"
     )
     app: str = Field(..., description="Application name (e.g., 'open_notebook')")
     input: Dict[str, Any] = Field(..., description="Arguments to pass to the command")
@@ -42,11 +42,13 @@ async def execute_command(request: CommandExecutionRequest):
 
     Example request:
     {
-        "command": "process_text",
+        "command": "generate_podcast",
         "app": "open_notebook",
         "input": {
-            "text": "Hello world",
-            "operation": "uppercase"
+            "episode_profile": "tech_experts",
+            "speaker_profile": "tech_experts",
+            "episode_name": "My Episode",
+            "content": "Content to discuss"
         }
     }
     """
diff --git a/api/search_service.py b/api/search_service.py
deleted file mode 100644
index 57e0580c..00000000
--- a/api/search_service.py
+++ /dev/null
@@ -1,58 +0,0 @@
-"""
-Search service layer using API.
-"""
-
-from typing import Any, Dict, List, Union
-
-from loguru import logger
-
-from api.client import api_client
-
-
-class SearchService:
-    """Service layer for search operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for search operations")
-
-    def search(
-        self,
-        query: str,
-        search_type: str = "text",
-        limit: int = 100,
-        search_sources: bool = True,
-        search_notes: bool = True,
-        minimum_score: float = 0.2,
-    ) -> List[Dict[str, Any]]:
-        """Search the knowledge base."""
-        response = api_client.search(
-            query=query,
-            search_type=search_type,
-            limit=limit,
-            search_sources=search_sources,
-            search_notes=search_notes,
-            minimum_score=minimum_score,
-        )
-        if isinstance(response, dict):
-            return response.get("results", [])
-        return []
-
-    def ask_knowledge_base(
-        self,
-        question: str,
-        strategy_model: str,
-        answer_model: str,
-        final_answer_model: str,
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Ask the knowledge base a question."""
-        response = api_client.ask_simple(
-            question=question,
-            strategy_model=strategy_model,
-            answer_model=answer_model,
-            final_answer_model=final_answer_model,
-        )
-        return response
-
-
-# Global service instance
-search_service = SearchService()
diff --git a/api/settings_service.py b/api/settings_service.py
deleted file mode 100644
index e8a43f56..00000000
--- a/api/settings_service.py
+++ /dev/null
@@ -1,79 +0,0 @@
-"""
-Settings service layer using API.
-"""
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.content_settings import ContentSettings
-
-
-class SettingsService:
-    """Service layer for settings operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for settings operations")
-
-    def get_settings(self) -> ContentSettings:
-        """Get application settings."""
-        settings_response = api_client.get_settings()
-        settings_data = (
-            settings_response
-            if isinstance(settings_response, dict)
-            else settings_response[0]
-        )
-
-        # Create ContentSettings object from API response
-        settings = ContentSettings(
-            default_content_processing_engine_doc=settings_data.get(
-                "default_content_processing_engine_doc"
-            ),
-            default_content_processing_engine_url=settings_data.get(
-                "default_content_processing_engine_url"
-            ),
-            default_embedding_option=settings_data.get("default_embedding_option"),
-            auto_delete_files=settings_data.get("auto_delete_files"),
-            youtube_preferred_languages=settings_data.get(
-                "youtube_preferred_languages"
-            ),
-        )
-
-        return settings
-
-    def update_settings(self, settings: ContentSettings) -> ContentSettings:
-        """Update application settings."""
-        updates = {
-            "default_content_processing_engine_doc": settings.default_content_processing_engine_doc,
-            "default_content_processing_engine_url": settings.default_content_processing_engine_url,
-            "default_embedding_option": settings.default_embedding_option,
-            "auto_delete_files": settings.auto_delete_files,
-            "youtube_preferred_languages": settings.youtube_preferred_languages,
-        }
-
-        settings_response = api_client.update_settings(**updates)
-        settings_data = (
-            settings_response
-            if isinstance(settings_response, dict)
-            else settings_response[0]
-        )
-
-        # Update the settings object with the response
-        settings.default_content_processing_engine_doc = settings_data.get(
-            "default_content_processing_engine_doc"
-        )
-        settings.default_content_processing_engine_url = settings_data.get(
-            "default_content_processing_engine_url"
-        )
-        settings.default_embedding_option = settings_data.get(
-            "default_embedding_option"
-        )
-        settings.auto_delete_files = settings_data.get("auto_delete_files")
-        settings.youtube_preferred_languages = settings_data.get(
-            "youtube_preferred_languages"
-        )
-
-        return settings
-
-
-# Global service instance
-settings_service = SettingsService()
diff --git a/api/sources_service.py b/api/sources_service.py
deleted file mode 100644
index ae03375c..00000000
--- a/api/sources_service.py
+++ /dev/null
@@ -1,324 +0,0 @@
-"""
-Sources service layer using API.
-"""
-
-from dataclasses import dataclass
-from typing import Dict, List, Optional, Union
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.notebook import Asset, Source
-
-
-@dataclass
-class SourceProcessingResult:
-    """Result of source creation with optional async processing info."""
-
-    source: Source
-    is_async: bool = False
-    command_id: Optional[str] = None
-    status: Optional[str] = None
-    processing_info: Optional[Dict] = None
-
-
-@dataclass
-class SourceWithMetadata:
-    """Source object with additional metadata from API."""
-
-    source: Source
-    embedded_chunks: int
-
-    # Expose common source properties for easy access
-    @property
-    def id(self):
-        return self.source.id
-
-    @property
-    def title(self):
-        return self.source.title
-
-    @title.setter
-    def title(self, value):
-        self.source.title = value
-
-    @property
-    def topics(self):
-        return self.source.topics
-
-    @property
-    def asset(self):
-        return self.source.asset
-
-    @property
-    def full_text(self):
-        return self.source.full_text
-
-    @property
-    def created(self):
-        return self.source.created
-
-    @property
-    def updated(self):
-        return self.source.updated
-
-
-class SourcesService:
-    """Service layer for sources operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for sources operations")
-
-    def get_all_sources(
-        self, notebook_id: Optional[str] = None
-    ) -> List[SourceWithMetadata]:
-        """Get all sources with optional notebook filtering."""
-        sources_data = api_client.get_sources(notebook_id=notebook_id)
-        # Convert API response to SourceWithMetadata objects
-        sources = []
-        for source_data in sources_data:
-            source = Source(
-                title=source_data["title"],
-                topics=source_data["topics"],
-                asset=Asset(
-                    file_path=source_data["asset"]["file_path"]
-                    if source_data["asset"]
-                    else None,
-                    url=source_data["asset"]["url"] if source_data["asset"] else None,
-                )
-                if source_data["asset"]
-                else None,
-            )
-            source.id = source_data["id"]
-            source.created = source_data["created"]
-            source.updated = source_data["updated"]
-
-            # Wrap in SourceWithMetadata
-            source_with_metadata = SourceWithMetadata(
-                source=source, embedded_chunks=source_data.get("embedded_chunks", 0)
-            )
-            sources.append(source_with_metadata)
-        return sources
-
-    def get_source(self, source_id: str) -> SourceWithMetadata:
-        """Get a specific source."""
-        response = api_client.get_source(source_id)
-        source_data = response if isinstance(response, dict) else response[0]
-        source = Source(
-            title=source_data["title"],
-            topics=source_data["topics"],
-            full_text=source_data["full_text"],
-            asset=Asset(
-                file_path=source_data["asset"]["file_path"]
-                if source_data["asset"]
-                else None,
-                url=source_data["asset"]["url"] if source_data["asset"] else None,
-            )
-            if source_data["asset"]
-            else None,
-        )
-        source.id = source_data["id"]
-        source.created = source_data["created"]
-        source.updated = source_data["updated"]
-
-        return SourceWithMetadata(
-            source=source, embedded_chunks=source_data.get("embedded_chunks", 0)
-        )
-
-    def create_source(
-        self,
-        notebook_id: Optional[str] = None,
-        source_type: str = "text",
-        url: Optional[str] = None,
-        file_path: Optional[str] = None,
-        content: Optional[str] = None,
-        title: Optional[str] = None,
-        transformations: Optional[List[str]] = None,
-        embed: bool = False,
-        delete_source: bool = False,
-        notebooks: Optional[List[str]] = None,
-        async_processing: bool = False,
-    ) -> Union[Source, SourceProcessingResult]:
-        """
-        Create a new source with support for async processing.
-
-        Args:
-            notebook_id: Single notebook ID (deprecated, use notebooks parameter)
-            source_type: Type of source (link, upload, text)
-            url: URL for link sources
-            file_path: File path for upload sources
-            content: Text content for text sources
-            title: Optional source title
-            transformations: List of transformation IDs to apply
-            embed: Whether to embed content for vector search
-            delete_source: Whether to delete uploaded file after processing
-            notebooks: List of notebook IDs to add source to (preferred over notebook_id)
-            async_processing: Whether to process source asynchronously
-
-        Returns:
-            Source object for sync processing (backward compatibility)
-            SourceProcessingResult for async processing (contains additional metadata)
-        """
-        source_data = api_client.create_source(
-            notebook_id=notebook_id,
-            notebooks=notebooks,
-            source_type=source_type,
-            url=url,
-            file_path=file_path,
-            content=content,
-            title=title,
-            transformations=transformations,
-            embed=embed,
-            delete_source=delete_source,
-            async_processing=async_processing,
-        )
-
-        # Create Source object from response
-        response_data = source_data if isinstance(source_data, dict) else source_data[0]
-        source = Source(
-            title=response_data["title"],
-            topics=response_data.get("topics") or [],
-            full_text=response_data.get("full_text"),
-            asset=Asset(
-                file_path=response_data["asset"]["file_path"]
-                if response_data.get("asset")
-                else None,
-                url=response_data["asset"]["url"]
-                if response_data.get("asset")
-                else None,
-            )
-            if response_data.get("asset")
-            else None,
-        )
-        source.id = response_data["id"]
-        source.created = response_data["created"]
-        source.updated = response_data["updated"]
-
-        # Check if this is an async processing response
-        if (
-            response_data.get("command_id")
-            or response_data.get("status")
-            or response_data.get("processing_info")
-        ):
-            # Ensure source_data is a dict for accessing attributes
-            source_data_dict = (
-                source_data if isinstance(source_data, dict) else source_data[0]
-            )
-            # Return enhanced result for async processing
-            return SourceProcessingResult(
-                source=source,
-                is_async=True,
-                command_id=source_data_dict.get("command_id"),
-                status=source_data_dict.get("status"),
-                processing_info=source_data_dict.get("processing_info"),
-            )
-        else:
-            # Return simple Source for backward compatibility
-            return source
-
-    def get_source_status(self, source_id: str) -> Dict:
-        """Get processing status for a source."""
-        response = api_client.get_source_status(source_id)
-        return response if isinstance(response, dict) else response[0]
-
-    def create_source_async(
-        self,
-        notebook_id: Optional[str] = None,
-        source_type: str = "text",
-        url: Optional[str] = None,
-        file_path: Optional[str] = None,
-        content: Optional[str] = None,
-        title: Optional[str] = None,
-        transformations: Optional[List[str]] = None,
-        embed: bool = False,
-        delete_source: bool = False,
-        notebooks: Optional[List[str]] = None,
-    ) -> SourceProcessingResult:
-        """
-        Create a new source with async processing enabled.
-
-        This is a convenience method that always uses async processing.
-        Returns a SourceProcessingResult with processing status information.
-        """
-        result = self.create_source(
-            notebook_id=notebook_id,
-            notebooks=notebooks,
-            source_type=source_type,
-            url=url,
-            file_path=file_path,
-            content=content,
-            title=title,
-            transformations=transformations,
-            embed=embed,
-            delete_source=delete_source,
-            async_processing=True,
-        )
-
-        # Since we forced async_processing=True, this should always be a SourceProcessingResult
-        if isinstance(result, SourceProcessingResult):
-            return result
-        else:
-            # Fallback: wrap Source in SourceProcessingResult
-            return SourceProcessingResult(
-                source=result,
-                is_async=False,  # This shouldn't happen, but handle it gracefully
-            )
-
-    def is_source_processing_complete(self, source_id: str) -> bool:
-        """
-        Check if a source's async processing is complete.
-
-        Returns True if processing is complete (success or failure),
-        False if still processing or queued.
-        """
-        try:
-            status_data = self.get_source_status(source_id)
-            status = status_data.get("status")
-            return status in [
-                "completed",
-                "failed",
-                None,
-            ]  # None indicates legacy/sync source
-        except Exception as e:
-            logger.error(f"Error checking source processing status: {e}")
-            return True  # Assume complete on error
-
-    def update_source(self, source: Source) -> Source:
-        """Update a source."""
-        if not source.id:
-            raise ValueError("Source ID is required for update")
-
-        updates = {
-            "title": source.title,
-            "topics": source.topics,
-        }
-        source_data = api_client.update_source(source.id, **updates)
-
-        # Ensure source_data is a dict
-        source_data_dict = (
-            source_data if isinstance(source_data, dict) else source_data[0]
-        )
-
-        # Update the source object with the response
-        source.title = source_data_dict["title"]
-        source.topics = source_data_dict["topics"]
-        source.updated = source_data_dict["updated"]
-
-        return source
-
-    def delete_source(self, source_id: str) -> bool:
-        """Delete a source."""
-        api_client.delete_source(source_id)
-        return True
-
-
-# Global service instance
-sources_service = SourcesService()
-
-# Export important classes for easy importing
-__all__ = [
-    "SourcesService",
-    "SourceWithMetadata",
-    "SourceProcessingResult",
-    "sources_service",
-]
diff --git a/api/transformations_service.py b/api/transformations_service.py
deleted file mode 100644
index bd0a0910..00000000
--- a/api/transformations_service.py
+++ /dev/null
@@ -1,119 +0,0 @@
-"""
-Transformations service layer using API.
-"""
-
-from datetime import datetime
-from typing import Any, Dict, List, Optional, Union
-
-from loguru import logger
-
-from api.client import api_client
-from open_notebook.domain.transformation import Transformation
-
-
-class TransformationsService:
-    """Service layer for transformations operations using API."""
-
-    def __init__(self):
-        logger.info("Using API for transformations operations")
-
-    def _build_transformation(self, trans_data: Dict[str, Any]) -> Transformation:
-        transformation = Transformation(
-            name=trans_data["name"],
-            title=trans_data["title"],
-            description=trans_data["description"],
-            prompt=trans_data["prompt"],
-            apply_default=trans_data["apply_default"],
-            model_id=trans_data.get("model_id"),
-        )
-        transformation.id = trans_data["id"]
-        transformation.created = datetime.fromisoformat(
-            trans_data["created"].replace("Z", "+00:00")
-        )
-        transformation.updated = datetime.fromisoformat(
-            trans_data["updated"].replace("Z", "+00:00")
-        )
-        return transformation
-
-    def get_all_transformations(self) -> List[Transformation]:
-        """Get all transformations."""
-        transformations_data = api_client.get_transformations()
-        # Convert API response to Transformation objects
-        transformations = []
-        for trans_data in transformations_data:
-            transformations.append(self._build_transformation(trans_data))
-        return transformations
-
-    def get_transformation(self, transformation_id: str) -> Transformation:
-        """Get a specific transformation."""
-        response = api_client.get_transformation(transformation_id)
-        trans_data = response if isinstance(response, dict) else response[0]
-        return self._build_transformation(trans_data)
-
-    def create_transformation(
-        self,
-        name: str,
-        title: str,
-        description: str,
-        prompt: str,
-        apply_default: bool = False,
-    ) -> Transformation:
-        """Create a new transformation."""
-        response = api_client.create_transformation(
-            name=name,
-            title=title,
-            description=description,
-            prompt=prompt,
-            apply_default=apply_default,
-        )
-        trans_data = response if isinstance(response, dict) else response[0]
-        return self._build_transformation(trans_data)
-
-    def update_transformation(self, transformation: Transformation) -> Transformation:
-        """Update a transformation."""
-        if not transformation.id:
-            raise ValueError("Transformation ID is required for update")
-
-        updates = {
-            "name": transformation.name,
-            "title": transformation.title,
-            "description": transformation.description,
-            "prompt": transformation.prompt,
-            "apply_default": transformation.apply_default,
-            "model_id": transformation.model_id,
-        }
-        response = api_client.update_transformation(transformation.id, **updates)
-        trans_data = response if isinstance(response, dict) else response[0]
-
-        # Update the transformation object with the response
-        transformation.name = trans_data["name"]
-        transformation.title = trans_data["title"]
-        transformation.description = trans_data["description"]
-        transformation.prompt = trans_data["prompt"]
-        transformation.apply_default = trans_data["apply_default"]
-        transformation.model_id = trans_data.get("model_id")
-        transformation.updated = datetime.fromisoformat(
-            trans_data["updated"].replace("Z", "+00:00")
-        )
-
-        return transformation
-
-    def delete_transformation(self, transformation_id: str) -> bool:
-        """Delete a transformation."""
-        api_client.delete_transformation(transformation_id)
-        return True
-
-    def execute_transformation(
-        self, transformation_id: str, input_text: str, model_id: Optional[str] = None
-    ) -> Union[Dict[Any, Any], List[Dict[Any, Any]]]:
-        """Execute a transformation on input text."""
-        result = api_client.execute_transformation(
-            transformation_id=transformation_id,
-            input_text=input_text,
-            model_id=model_id,
-        )
-        return result
-
-
-# Global service instance
-transformations_service = TransformationsService()
diff --git a/commands/__init__.py b/commands/__init__.py
index 479b952c..fdda740e 100644
--- a/commands/__init__.py
+++ b/commands/__init__.py
@@ -6,7 +6,6 @@ from .embedding_commands import (
     embed_source_command,
     rebuild_embeddings_command,
 )
-from .example_commands import analyze_data_command, process_text_command
 from .podcast_commands import generate_podcast_command
 from .source_commands import process_source_command
 
@@ -19,6 +18,4 @@ __all__ = [
     # Other commands
     "generate_podcast_command",
     "process_source_command",
-    "process_text_command",
-    "analyze_data_command",
 ]
diff --git a/commands/example_commands.py b/commands/example_commands.py
deleted file mode 100644
index 7f26cb98..00000000
--- a/commands/example_commands.py
+++ /dev/null
@@ -1,142 +0,0 @@
-import asyncio
-import time
-from typing import List, Optional
-
-from loguru import logger
-from pydantic import BaseModel
-from surreal_commands import command
-
-
-class TextProcessingInput(BaseModel):
-    text: str
-    operation: str = "uppercase"  # uppercase, lowercase, word_count, reverse
-    delay_seconds: Optional[int] = None  # For testing async behavior
-
-
-class TextProcessingOutput(BaseModel):
-    success: bool
-    original_text: str
-    processed_text: Optional[str] = None
-    word_count: Optional[int] = None
-    processing_time: float
-    error_message: Optional[str] = None
-
-
-class DataAnalysisInput(BaseModel):
-    numbers: List[float]
-    analysis_type: str = "basic"  # basic, detailed
-    delay_seconds: Optional[int] = None
-
-
-class DataAnalysisOutput(BaseModel):
-    success: bool
-    analysis_type: str
-    count: int
-    sum: Optional[float] = None
-    average: Optional[float] = None
-    min_value: Optional[float] = None
-    max_value: Optional[float] = None
-    processing_time: float
-    error_message: Optional[str] = None
-
-
-@command("process_text", app="open_notebook")
-async def process_text_command(input_data: TextProcessingInput) -> TextProcessingOutput:
-    """
-    Example command for text processing. Tests basic command functionality
-    and demonstrates different processing types.
-    """
-    start_time = time.time()
-
-    try:
-        logger.info(f"Processing text with operation: {input_data.operation}")
-
-        # Simulate processing delay if specified
-        if input_data.delay_seconds:
-            await asyncio.sleep(input_data.delay_seconds)
-
-        processed_text = None
-        word_count = None
-
-        if input_data.operation == "uppercase":
-            processed_text = input_data.text.upper()
-        elif input_data.operation == "lowercase":
-            processed_text = input_data.text.lower()
-        elif input_data.operation == "reverse":
-            processed_text = input_data.text[::-1]
-        elif input_data.operation == "word_count":
-            word_count = len(input_data.text.split())
-            processed_text = f"Word count: {word_count}"
-        else:
-            raise ValueError(f"Unknown operation: {input_data.operation}")
-
-        processing_time = time.time() - start_time
-
-        return TextProcessingOutput(
-            success=True,
-            original_text=input_data.text,
-            processed_text=processed_text,
-            word_count=word_count,
-            processing_time=processing_time,
-        )
-
-    except Exception as e:
-        processing_time = time.time() - start_time
-        logger.error(f"Text processing failed: {e}")
-        return TextProcessingOutput(
-            success=False,
-            original_text=input_data.text,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-
-
-@command("analyze_data", app="open_notebook")
-async def analyze_data_command(input_data: DataAnalysisInput) -> DataAnalysisOutput:
-    """
-    Example command for data analysis. Tests command with complex input/output
-    and demonstrates error handling.
-    """
-    start_time = time.time()
-
-    try:
-        logger.info(
-            f"Analyzing {len(input_data.numbers)} numbers with {input_data.analysis_type} analysis"
-        )
-
-        # Simulate processing delay if specified
-        if input_data.delay_seconds:
-            await asyncio.sleep(input_data.delay_seconds)
-
-        if not input_data.numbers:
-            raise ValueError("No numbers provided for analysis")
-
-        count = len(input_data.numbers)
-        sum_value = sum(input_data.numbers)
-        average = sum_value / count
-        min_value = min(input_data.numbers)
-        max_value = max(input_data.numbers)
-
-        processing_time = time.time() - start_time
-
-        return DataAnalysisOutput(
-            success=True,
-            analysis_type=input_data.analysis_type,
-            count=count,
-            sum=sum_value,
-            average=average,
-            min_value=min_value,
-            max_value=max_value,
-            processing_time=processing_time,
-        )
-
-    except Exception as e:
-        processing_time = time.time() - start_time
-        logger.error(f"Data analysis failed: {e}")
-        return DataAnalysisOutput(
-            success=False,
-            analysis_type=input_data.analysis_type,
-            count=0,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
diff --git a/docs/7-DEVELOPMENT/architecture.md b/docs/7-DEVELOPMENT/architecture.md
index be0c1792..0cec295f 100644
--- a/docs/7-DEVELOPMENT/architecture.md
+++ b/docs/7-DEVELOPMENT/architecture.md
@@ -563,7 +563,7 @@ async def create_source(source_data: SourceCreate):
 Services orchestrate domain objects, repositories, and workflows:
 
 ```python
-# api/notebook_service.py
+# illustrative example (see api/podcast_service.py for a real service)
 class NotebookService:
     async def get_notebook_with_stats(notebook_id: str):
         notebook = await Notebook.get(notebook_id)

From 8bcfe01f4cc4d517e024d28df228d99df25985fd Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:25:26 -0300
Subject: [PATCH 165/345] refactor(commands): remove pre-1.6 embedding shims
 and dead tool config (#1056)

The embed_single_item, embed_chunk and vectorize_source command handlers
existed only so jobs queued by a pre-1.6 version could drain after an
upgrade; any worker restarted on 1.6+ has no such jobs. Remove them, their
input/output models and their tests.

Also drop dead tooling config from pyproject.toml: the [tool.mypy] block
(mypy.ini takes precedence and is the real config) and the Streamlit-era
ruff per-file-ignores for app_home.py and pages/**, which no longer exist.
---
 CHANGELOG.md                     |   1 +
 commands/embedding_commands.py   | 264 -------------------------------
 pyproject.toml                   |  11 --
 tests/test_embedding_commands.py | 102 ------------
 4 files changed, 1 insertion(+), 377 deletions(-)
 delete mode 100644 tests/test_embedding_commands.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 865a9117..f8b36c6b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 - Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
+- Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist
 
 ## [1.11.0] - 2026-07-11
 
diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index 0a2a0b57..97c30ca9 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -118,58 +118,6 @@ class EmbedSourceOutput(CommandOutput):
     error_message: Optional[str] = None
 
 
-class LegacyEmbedSingleItemInput(CommandInput):
-    """Input for the pre-1.6 embed_single_item command kept for queued jobs."""
-
-    item_id: str
-    item_type: Literal["source", "note", "insight"]
-
-
-class LegacyEmbedSingleItemOutput(CommandOutput):
-    """Output matching the pre-1.6 embed_single_item command shape."""
-
-    success: bool
-    item_id: str
-    item_type: str
-    chunks_created: int = 0
-    processing_time: float
-    error_message: Optional[str] = None
-
-
-class LegacyEmbedChunkInput(CommandInput):
-    """Input for the pre-1.6 per-chunk embedding command kept for queued jobs."""
-
-    source_id: str
-    chunk_index: int
-    chunk_text: str
-
-
-class LegacyEmbedChunkOutput(CommandOutput):
-    """Output matching the pre-1.6 embed_chunk command shape."""
-
-    success: bool
-    source_id: str
-    chunk_index: int
-    error_message: Optional[str] = None
-
-
-class LegacyVectorizeSourceInput(CommandInput):
-    """Input for the pre-1.6 vectorize_source command kept for queued jobs."""
-
-    source_id: str
-
-
-class LegacyVectorizeSourceOutput(CommandOutput):
-    """Output matching the pre-1.6 vectorize_source command shape."""
-
-    success: bool
-    source_id: str
-    total_chunks: int
-    jobs_submitted: int
-    processing_time: float
-    error_message: Optional[str] = None
-
-
 @command(
     "embed_note",
     app="open_notebook",
@@ -501,218 +449,6 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
         raise
 
 
-@command(
-    "embed_single_item",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],
-        "retry_log_level": "debug",
-    },
-)
-async def legacy_embed_single_item_command(
-    input_data: LegacyEmbedSingleItemInput,
-) -> LegacyEmbedSingleItemOutput:
-    """
-    Compatibility handler for pre-1.6 queued embed_single_item jobs.
-
-    New code submits embed_source, embed_note, or embed_insight directly. This
-    alias lets workers drain older queues after an upgrade.
-    """
-    start_time = time.time()
-
-    try:
-        logger.info(
-            f"Processing legacy embed_single_item for "
-            f"{input_data.item_type}: {input_data.item_id}"
-        )
-
-        if input_data.item_type == "source":
-            result = await embed_source_command(
-                EmbedSourceInput(
-                    source_id=input_data.item_id,
-                    execution_context=input_data.execution_context,
-                )
-            )
-            chunks_created = result.chunks_created
-        elif input_data.item_type == "note":
-            result = await embed_note_command(
-                EmbedNoteInput(
-                    note_id=input_data.item_id,
-                    execution_context=input_data.execution_context,
-                )
-            )
-            chunks_created = 0
-        elif input_data.item_type == "insight":
-            result = await embed_insight_command(
-                EmbedInsightInput(
-                    insight_id=input_data.item_id,
-                    execution_context=input_data.execution_context,
-                )
-            )
-            chunks_created = 0
-        else:
-            raise ValueError(f"Invalid item_type: {input_data.item_type}")
-
-        return LegacyEmbedSingleItemOutput(
-            success=result.success,
-            item_id=input_data.item_id,
-            item_type=input_data.item_type,
-            chunks_created=chunks_created,
-            processing_time=time.time() - start_time,
-            error_message=result.error_message,
-        )
-
-    except ValueError as e:
-        processing_time = time.time() - start_time
-        logger.error(
-            f"Failed legacy embed_single_item for "
-            f"{input_data.item_type} {input_data.item_id}: {e}"
-        )
-        return LegacyEmbedSingleItemOutput(
-            success=False,
-            item_id=input_data.item_id,
-            item_type=input_data.item_type,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-    except Exception as e:
-        logger.debug(
-            f"Transient error in legacy embed_single_item for "
-            f"{input_data.item_type} {input_data.item_id}: {e}"
-        )
-        raise
-
-
-@command(
-    "embed_chunk",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],
-        "retry_log_level": "debug",
-    },
-)
-async def legacy_embed_chunk_command(
-    input_data: LegacyEmbedChunkInput,
-) -> LegacyEmbedChunkOutput:
-    """
-    Compatibility handler for pre-1.6 queued embed_chunk jobs.
-
-    The legacy vectorizer stored the full chunk payload in each job. Keeping this
-    command registered prevents upgraded workers from crashing on stale queues.
-    """
-    try:
-        logger.debug(
-            f"Processing legacy chunk {input_data.chunk_index} "
-            f"for source {input_data.source_id}"
-        )
-
-        cmd_id = get_command_id(input_data)
-        embedding = await generate_embedding(
-            input_data.chunk_text,
-            content_type=ContentType.PLAIN,
-            command_id=cmd_id,
-        )
-
-        await repo_query(
-            """
-            CREATE source_embedding CONTENT {
-                "source": $source_id,
-                "order": $order,
-                "content": $content,
-                "embedding": $embedding,
-            };
-            """,
-            {
-                "source_id": ensure_record_id(input_data.source_id),
-                "order": input_data.chunk_index,
-                "content": input_data.chunk_text,
-                "embedding": embedding,
-            },
-        )
-
-        return LegacyEmbedChunkOutput(
-            success=True,
-            source_id=input_data.source_id,
-            chunk_index=input_data.chunk_index,
-        )
-
-    except ValueError as e:
-        logger.error(
-            f"Failed legacy embed_chunk for source {input_data.source_id} "
-            f"chunk {input_data.chunk_index}: {e}"
-        )
-        return LegacyEmbedChunkOutput(
-            success=False,
-            source_id=input_data.source_id,
-            chunk_index=input_data.chunk_index,
-            error_message=str(e),
-        )
-    except Exception as e:
-        logger.debug(
-            f"Transient error in legacy embed_chunk for source "
-            f"{input_data.source_id} chunk {input_data.chunk_index}: {e}"
-        )
-        raise
-
-
-@command("vectorize_source", app="open_notebook", retry=None)
-async def legacy_vectorize_source_command(
-    input_data: LegacyVectorizeSourceInput,
-) -> LegacyVectorizeSourceOutput:
-    """
-    Compatibility handler for pre-1.6 queued vectorize_source jobs.
-
-    The old command submitted one job per chunk. Current embed_source does the
-    same source embedding work in one batch-aware command.
-    """
-    start_time = time.time()
-
-    try:
-        logger.info(f"Processing legacy vectorize_source for {input_data.source_id}")
-        result = await embed_source_command(
-            EmbedSourceInput(
-                source_id=input_data.source_id,
-                execution_context=input_data.execution_context,
-            )
-        )
-        jobs_submitted = 1 if result.success else 0
-
-        return LegacyVectorizeSourceOutput(
-            success=result.success,
-            source_id=input_data.source_id,
-            total_chunks=result.chunks_created,
-            jobs_submitted=jobs_submitted,
-            processing_time=time.time() - start_time,
-            error_message=result.error_message,
-        )
-
-    except ValueError as e:
-        processing_time = time.time() - start_time
-        logger.error(f"Failed legacy vectorize_source for {input_data.source_id}: {e}")
-        return LegacyVectorizeSourceOutput(
-            success=False,
-            source_id=input_data.source_id,
-            total_chunks=0,
-            jobs_submitted=0,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-    except Exception as e:
-        logger.debug(
-            f"Transient error in legacy vectorize_source for "
-            f"{input_data.source_id}: {e}"
-        )
-        raise
-
-
 @command(
     "create_insight",
     app="open_notebook",
diff --git a/pyproject.toml b/pyproject.toml
index d51663c4..b509cdaf 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -92,17 +92,6 @@ ignore = [
     "F841",  # local variable assigned but never used
 ]
 
-[tool.ruff.lint.per-file-ignores]
-# Streamlit files need nest_asyncio.apply() before imports
-"app_home.py" = ["E402"]
-"pages/**/*.py" = ["E402"]
-
-[tool.mypy]
-# Exclude Streamlit UI pages from type checking
-[[tool.mypy.overrides]]
-module = "pages.*"
-ignore_errors = true
-
 [tool.uv]
 # Pillow < 12.2.0 has open security advisories (PSD OOB write, FITS
 # decompression bomb, PDF trailer DoS). The only thing holding it back is
diff --git a/tests/test_embedding_commands.py b/tests/test_embedding_commands.py
deleted file mode 100644
index d3068605..00000000
--- a/tests/test_embedding_commands.py
+++ /dev/null
@@ -1,102 +0,0 @@
-from unittest.mock import AsyncMock
-
-import pytest
-from surreal_commands import registry
-
-import commands
-import commands.embedding_commands as embedding_commands
-
-
-def test_legacy_embedding_commands_are_registered():
-    app_commands = registry.list_commands()["open_notebook"]
-
-    assert "embed_chunk" in app_commands
-    assert "embed_single_item" in app_commands
-    assert "vectorize_source" in app_commands
-
-
-@pytest.mark.asyncio
-async def test_legacy_embed_chunk_processes_stale_queue_payload(monkeypatch):
-    mock_generate_embedding = AsyncMock(return_value=[0.1, 0.2, 0.3])
-    mock_repo_query = AsyncMock()
-
-    monkeypatch.setattr(
-        embedding_commands, "generate_embedding", mock_generate_embedding
-    )
-    monkeypatch.setattr(embedding_commands, "repo_query", mock_repo_query)
-    monkeypatch.setattr(
-        embedding_commands, "ensure_record_id", lambda value: f"record:{value}"
-    )
-
-    result = await embedding_commands.legacy_embed_chunk_command(
-        embedding_commands.LegacyEmbedChunkInput(
-            source_id="source:abc",
-            chunk_index=2,
-            chunk_text="queued legacy chunk",
-        )
-    )
-
-    assert result.success is True
-    assert result.source_id == "source:abc"
-    assert result.chunk_index == 2
-    mock_generate_embedding.assert_awaited_once_with(
-        "queued legacy chunk",
-        content_type=embedding_commands.ContentType.PLAIN,
-        command_id="unknown",
-    )
-    mock_repo_query.assert_awaited_once()
-    assert mock_repo_query.await_args is not None
-    assert mock_repo_query.await_args.args[1] == {
-        "source_id": "record:source:abc",
-        "order": 2,
-        "content": "queued legacy chunk",
-        "embedding": [0.1, 0.2, 0.3],
-    }
-
-
-@pytest.mark.asyncio
-async def test_legacy_vectorize_source_delegates_to_embed_source(monkeypatch):
-    async def fake_embed_source(input_data):
-        assert input_data.source_id == "source:abc"
-        return embedding_commands.EmbedSourceOutput(
-            success=True,
-            source_id=input_data.source_id,
-            chunks_created=3,
-            processing_time=0.1,
-        )
-
-    monkeypatch.setattr(embedding_commands, "embed_source_command", fake_embed_source)
-
-    result = await embedding_commands.legacy_vectorize_source_command(
-        embedding_commands.LegacyVectorizeSourceInput(source_id="source:abc")
-    )
-
-    assert result.success is True
-    assert result.source_id == "source:abc"
-    assert result.total_chunks == 3
-    assert result.jobs_submitted == 1
-
-
-@pytest.mark.asyncio
-async def test_legacy_embed_single_item_routes_insights(monkeypatch):
-    async def fake_embed_insight(input_data):
-        assert input_data.insight_id == "source_insight:abc"
-        return embedding_commands.EmbedInsightOutput(
-            success=True,
-            insight_id=input_data.insight_id,
-            processing_time=0.1,
-        )
-
-    monkeypatch.setattr(embedding_commands, "embed_insight_command", fake_embed_insight)
-
-    result = await embedding_commands.legacy_embed_single_item_command(
-        embedding_commands.LegacyEmbedSingleItemInput(
-            item_id="source_insight:abc",
-            item_type="insight",
-        )
-    )
-
-    assert result.success is True
-    assert result.item_id == "source_insight:abc"
-    assert result.item_type == "insight"
-    assert result.chunks_created == 0

From dd63bcb05c0ad44276f67c9629d68dec29f71b19 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:25:39 -0300
Subject: [PATCH 166/345] feat(prompts): steer models toward $$ math delimiters
 (#1057)

Add a math formatting hint to the chat, source chat, Ask and
transformation prompts: emit display math as $$...$$ and inline math
as $...$ so formulas render via KaTeX, reserving fenced latex code
blocks for when the user explicitly asks for the LaTeX source itself.

Closes #1051
---
 CHANGELOG.md                         | 3 +++
 prompts/ask/final_answer.jinja       | 4 ++++
 prompts/chat/system.jinja            | 4 ++++
 prompts/source_chat/system.jinja     | 4 ++++
 prompts/transformation/execute.jinja | 4 ++++
 5 files changed, 19 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f8b36c6b..d1fe2bcc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 
+### Changed
+- Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
+
 ### Removed
 - Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
 - Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist
diff --git a/prompts/ask/final_answer.jinja b/prompts/ask/final_answer.jinja
index 9c8b2d0f..ea65c951 100644
--- a/prompts/ask/final_answer.jinja
+++ b/prompts/ask/final_answer.jinja
@@ -26,6 +26,10 @@ Here are the answers you received for each of your queries.
 
 Based on the user question, the context and the retrieved answers, please formulate a final response to the user. 
 
+# MATH FORMATTING
+
+When showing math, write display math as $$...$$ and inline math as $...$ so formulas render properly. Only use fenced ```latex code blocks when the user explicitly asks for the LaTeX source itself.
+
 # CITING SOURCES
 
 It's very important that your response contains references to the searched documents so the user can follow-up and read more about the topic. The way you do that is by adding the id of the specific document in between brackets like this: [document_id]. The references will be present on all the answers you have been provided.
diff --git a/prompts/chat/system.jinja b/prompts/chat/system.jinja
index f56e75be..bba67454 100644
--- a/prompts/chat/system.jinja
+++ b/prompts/chat/system.jinja
@@ -23,6 +23,10 @@ The user has selected this context to help you with your response:
 {{context}}
 {% endif %}
 
+# MATH FORMATTING
+
+When showing math, write display math as $$...$$ and inline math as $...$ so formulas render properly. Only use fenced ```latex code blocks when the user explicitly asks for the LaTeX source itself.
+
 # CITING INSTRUCTIONS
 
 If your answer is based off of any item in the context, it's very important that your response contains references to the searched documents so the user can follow-up and read more about the topic. The way you do that is by adding the id of the specific document in between brackets like this: [document_id].
diff --git a/prompts/source_chat/system.jinja b/prompts/source_chat/system.jinja
index d7494061..de04e2df 100644
--- a/prompts/source_chat/system.jinja
+++ b/prompts/source_chat/system.jinja
@@ -27,6 +27,10 @@ When a user asks you a question, analyze both the source content and the availab
 {{ context }}
 {% endif %}
 
+# MATH FORMATTING
+
+When showing math, write display math as $$...$$ and inline math as $...$ so formulas render properly. Only use fenced ```latex code blocks when the user explicitly asks for the LaTeX source itself.
+
 # CITING INSTRUCTIONS
 
 When referencing information from the source or its insights, always include citations using the document IDs. This helps users track the specific content you're referencing.
diff --git a/prompts/transformation/execute.jinja b/prompts/transformation/execute.jinja
index a8310f54..4b18195e 100644
--- a/prompts/transformation/execute.jinja
+++ b/prompts/transformation/execute.jinja
@@ -1,3 +1,7 @@
 {{ instructions }}
 
+# MATH FORMATTING
+
+When showing math, write display math as $$...$$ and inline math as $...$ so formulas render properly. Only use fenced ```latex code blocks when the user explicitly asks for the LaTeX source itself.
+
 # INPUT
\ No newline at end of file

From bdbf53bdd3e9dced92fce1f5586939e76c9c46a3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:36:04 -0300
Subject: [PATCH 167/345] chore(lint): re-enable F401/F841/E722 and fix fallout
 (#1062)

Remove F401 (unused imports), F841 (unused local variables) and E722
(bare except) from the ruff ignore list; the legacy Streamlit-era code
that motivated ignoring them is gone.

Fallout fixed: 10 unused imports removed (none were load-bearing
re-exports or side-effect imports), 2 unused mock bindings in tests
dropped, and a now-empty TYPE_CHECKING block in
open_notebook/utils/embedding.py cleaned up. No bare excepts remained
in the codebase.
---
 CHANGELOG.md                            | 1 +
 api/credentials_service.py              | 2 +-
 api/routers/config.py                   | 1 -
 open_notebook/domain/credential.py      | 1 -
 open_notebook/domain/notebook.py        | 3 +--
 open_notebook/domain/provider_config.py | 2 +-
 open_notebook/graphs/chat.py            | 2 +-
 open_notebook/graphs/source_chat.py     | 2 +-
 open_notebook/utils/embedding.py        | 7 +------
 pyproject.toml                          | 3 ---
 tests/test_embedding.py                 | 2 +-
 tests/test_models_api.py                | 4 ++--
 12 files changed, 10 insertions(+), 20 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1fe2bcc..bfde234e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 
 ### Changed
+- Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
 
 ### Removed
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 3628e01b..a8af76ad 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -8,7 +8,7 @@ All functions raise ValueError for business errors (router converts to HTTPExcep
 """
 
 import os
-from typing import Dict, List, Optional
+from typing import Dict, List
 
 import httpx
 from loguru import logger
diff --git a/api/routers/config.py b/api/routers/config.py
index 0f5424d1..9af6e2ae 100644
--- a/api/routers/config.py
+++ b/api/routers/config.py
@@ -1,5 +1,4 @@
 import asyncio
-import os
 import time
 import tomllib
 from pathlib import Path
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index 57462f84..202d0d41 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -15,7 +15,6 @@ Usage:
     await cred.save()
 """
 
-from datetime import datetime
 from typing import Any, ClassVar, Dict, List, Optional
 
 from loguru import logger
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 869222a3..a82be61e 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -1,8 +1,7 @@
-import asyncio
 import os
 from datetime import datetime
 from pathlib import Path
-from typing import Any, ClassVar, Dict, List, Literal, Optional, Tuple, Union
+from typing import Any, ClassVar, Dict, List, Literal, Optional, Union
 
 from loguru import logger
 from pydantic import BaseModel, ConfigDict, Field, field_validator
diff --git a/open_notebook/domain/provider_config.py b/open_notebook/domain/provider_config.py
index 08a0d8a6..4a8d26c8 100644
--- a/open_notebook/domain/provider_config.py
+++ b/open_notebook/domain/provider_config.py
@@ -12,7 +12,7 @@ is set. If not set, keys are stored as plain text with a warning logged.
 from datetime import datetime
 from typing import ClassVar, Dict, List, Optional
 
-from pydantic import Field, SecretStr, field_validator
+from pydantic import Field, SecretStr
 
 from open_notebook.database.repository import ensure_record_id, repo_query, repo_upsert
 from open_notebook.domain.base import RecordModel
diff --git a/open_notebook/graphs/chat.py b/open_notebook/graphs/chat.py
index dced3989..62867c4f 100644
--- a/open_notebook/graphs/chat.py
+++ b/open_notebook/graphs/chat.py
@@ -3,7 +3,7 @@ import sqlite3
 from typing import Annotated, Optional
 
 from ai_prompter import Prompter
-from langchain_core.messages import AIMessage, SystemMessage
+from langchain_core.messages import SystemMessage
 from langchain_core.runnables import RunnableConfig
 from langgraph.checkpoint.sqlite import SqliteSaver
 from langgraph.graph import END, START, StateGraph
diff --git a/open_notebook/graphs/source_chat.py b/open_notebook/graphs/source_chat.py
index bccc25e8..fb9047c8 100644
--- a/open_notebook/graphs/source_chat.py
+++ b/open_notebook/graphs/source_chat.py
@@ -3,7 +3,7 @@ import sqlite3
 from typing import Annotated, Dict, List, Optional
 
 from ai_prompter import Prompter
-from langchain_core.messages import AIMessage, SystemMessage
+from langchain_core.messages import SystemMessage
 from langchain_core.runnables import RunnableConfig
 from langgraph.checkpoint.sqlite import SqliteSaver
 from langgraph.graph import END, START, StateGraph
diff --git a/open_notebook/utils/embedding.py b/open_notebook/utils/embedding.py
index 713e8706..9bf18dcb 100644
--- a/open_notebook/utils/embedding.py
+++ b/open_notebook/utils/embedding.py
@@ -12,7 +12,7 @@ to ensure consistent behavior and proper handling of large content.
 
 import asyncio
 import os
-from typing import TYPE_CHECKING, List, Optional
+from typing import List, Optional
 
 import numpy as np
 from loguru import logger
@@ -46,11 +46,6 @@ EMBEDDING_BATCH_SIZE = _get_embedding_batch_size()
 EMBEDDING_MAX_RETRIES = 3
 EMBEDDING_RETRY_DELAY = 2  # seconds
 
-# Lazy import to avoid circular dependency:
-# utils -> embedding -> models -> key_provider -> provider_config -> utils
-if TYPE_CHECKING:
-    from open_notebook.ai.models import ModelManager
-
 
 async def mean_pool_embeddings(embeddings: List[List[float]]) -> List[float]:
     """
diff --git a/pyproject.toml b/pyproject.toml
index b509cdaf..71951ee7 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -86,10 +86,7 @@ select = ["E", "F", "I"]
 ignore = [
     "E501",  # line too long
     "E402",  # module level import not at top of file (Streamlit requires this pattern)
-    "E722",  # do not use bare except (legacy code pattern)
-    "F401",  # imported but unused (may be used in type hints or re-exports)
     "F541",  # f-string without placeholders
-    "F841",  # local variable assigned but never used
 ]
 
 [tool.uv]
diff --git a/tests/test_embedding.py b/tests/test_embedding.py
index 86f8c21d..54611adb 100644
--- a/tests/test_embedding.py
+++ b/tests/test_embedding.py
@@ -241,7 +241,7 @@ class TestGenerateEmbedding:
     @pytest.mark.asyncio
     async def test_batching(self):
         """Test that large input is split into batches of EMBEDDING_BATCH_SIZE."""
-        from unittest.mock import AsyncMock, MagicMock, call, patch
+        from unittest.mock import AsyncMock, MagicMock, patch
 
         from open_notebook.utils.embedding import EMBEDDING_BATCH_SIZE
 
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index 0ac830cd..f298b6b5 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -85,7 +85,7 @@ class TestModelCreation:
         mock_repo_query.return_value = []
 
         # Patch the save method on the Model class
-        with patch.object(Model, "save", new_callable=AsyncMock) as mock_save:
+        with patch.object(Model, "save", new_callable=AsyncMock):
             # Attempt to create same model name with different provider (anthropic)
             response = client.post(
                 "/api/models",
@@ -105,7 +105,7 @@ class TestModelCreation:
         mock_repo_query.return_value = []
 
         # Patch the save method on the Model class
-        with patch.object(Model, "save", new_callable=AsyncMock) as mock_save:
+        with patch.object(Model, "save", new_callable=AsyncMock):
             # Attempt to create same model name with different type (embedding instead of language)
             response = client.post(
                 "/api/models",

From ac30f4d976e02ee9b70dd5c04b07bcb73f54a970 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:44:49 -0300
Subject: [PATCH 168/345] ci: gate PRs on ruff, eslint and frontend build
 (#1068)

---
 .github/workflows/test.yml | 67 ++++++++++++++++++++++++++++++++++++++
 CHANGELOG.md               |  1 +
 2 files changed, 68 insertions(+)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 209d6268..22072ecf 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -41,6 +41,27 @@ jobs:
           name: backend-coverage
           path: coverage.xml
 
+  backend-lint:
+    name: Backend Lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install
+
+      - name: Install dependencies
+        run: uv sync
+
+      - name: Run ruff
+        run: uv run ruff check .
+
   frontend:
     name: Frontend Tests
     runs-on: ubuntu-latest
@@ -69,3 +90,49 @@ jobs:
         with:
           name: frontend-coverage
           path: frontend/coverage/
+
+  frontend-lint:
+    name: Frontend Lint
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: frontend
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run ESLint
+        run: npm run lint
+
+  frontend-build:
+    name: Frontend Build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: frontend
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bfde234e..5bfb7e88 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
+- CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
 
 ### Changed
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)

From 97ef02702bc92e0c2b9f1a354993cf159f15f276 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:45:57 -0300
Subject: [PATCH 169/345] chore(frontend): typed locales, drop unused deps, fix
 AGENTS.md drift (#1061)

- Derive TranslationShape from the en-US locale and add 'satisfies
  TranslationShape' to the other 13 locales so missing/extra i18n keys
  fail tsc at compile time (previously only the runtime parity test)
- Remove unused dependencies next-themes and @monaco-editor/react
  (zero imports in src/; theming is the hand-rolled zustand theme-store)
- Fix frontend/AGENTS.md drift: 14 locales (not 7), dark mode mechanism
  is the zustand theme-store setting the 'dark' class (not next-themes)
---
 CHANGELOG.md                            |  1 +
 frontend/AGENTS.md                      |  4 +--
 frontend/package-lock.json              | 43 -------------------------
 frontend/package.json                   |  2 --
 frontend/src/lib/locales/bn-IN/index.ts |  4 ++-
 frontend/src/lib/locales/ca-ES/index.ts |  4 ++-
 frontend/src/lib/locales/de-DE/index.ts |  4 ++-
 frontend/src/lib/locales/en-US/index.ts |  5 +++
 frontend/src/lib/locales/es-ES/index.ts |  4 ++-
 frontend/src/lib/locales/fr-FR/index.ts |  4 ++-
 frontend/src/lib/locales/it-IT/index.ts |  4 ++-
 frontend/src/lib/locales/ja-JP/index.ts |  4 ++-
 frontend/src/lib/locales/pl-PL/index.ts |  4 ++-
 frontend/src/lib/locales/pt-BR/index.ts |  4 ++-
 frontend/src/lib/locales/ru-RU/index.ts |  4 ++-
 frontend/src/lib/locales/tr-TR/index.ts |  4 ++-
 frontend/src/lib/locales/zh-CN/index.ts |  4 ++-
 frontend/src/lib/locales/zh-TW/index.ts |  4 ++-
 18 files changed, 47 insertions(+), 60 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5bfb7e88..64427c0d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
+- Frontend locale files are now type-checked at compile time: every non-en-US locale declares `satisfies TranslationShape` (derived from the en-US object), so a missing or extra i18n key fails `tsc` in the editor instead of only the runtime parity test. Also removed two unused frontend dependencies (`next-themes`, `@monaco-editor/react`) and fixed `frontend/AGENTS.md` drift (14 locales, not 7; dark mode is the hand-rolled zustand theme-store, not next-themes)
 
 ### Removed
 - Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
index 9c914627..483af19d 100644
--- a/frontend/AGENTS.md
+++ b/frontend/AGENTS.md
@@ -11,7 +11,7 @@ Normative rules for working on the Next.js frontend. Architecture and flow walkt
 
 ## Hard rules
 
-- **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all 7 locales** (`en-US`, `pt-BR`, `zh-CN`, `zh-TW`, `ja-JP`, `ru-RU`, `bn-IN`) under `src/lib/locales/`. Missing keys fall back to en-US silently — keep locales in sync.
+- **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all locales** under `src/lib/locales/` (currently 14; en-US is the reference). Missing keys fall back to en-US silently — keep locales in sync. Each non-en-US locale ends with `satisfies TranslationShape` (type derived from en-US), so a missing/extra key fails `tsc`; the parity test (`src/lib/locales/index.test.ts`) checks the same at runtime.
 - All requests go through `apiClient` (`src/lib/api/client.ts`); never create a second axios instance. Auth token is auto-added from localStorage key `auth-storage`.
 - Data fetching uses TanStack Query hooks in `src/lib/hooks/` with `QUERY_KEYS`; mutations invalidate caches and show toasts (sonner). Follow the existing hook shape.
 - FormData requests: nested objects/arrays must be `JSON.stringify`-ed before appending; the interceptor strips Content-Type so the browser sets the multipart boundary — don't re-add it.
@@ -24,7 +24,7 @@ Normative rules for working on the Next.js frontend. Architecture and flow walkt
 - SSE (`useAsk`): incomplete lines stay in the buffer between reads; incomplete JSON is silently skipped — don't "simplify" the buffer handling.
 - `useSourceStatus` polls every 2s while status is `running`/`queued`/`new`.
 - Cache invalidation is deliberately broad (e.g. `['sources']` hits all source queries) — a simplicity/perf trade-off, be precise only when it matters.
-- Dark mode requires the `dark` class on the document root (next-themes), not just `prefers-color-scheme`.
+- Dark mode requires the `dark` class on the document root, not just `prefers-color-scheme`. It's hand-rolled: the zustand `theme-store` (persisted as `theme-storage`) sets the class via `ThemeProvider` — no next-themes.
 - Dialogs don't auto-reset form state (parent clears it) and auto-focus the first input (layout shift risk with conditional inputs). Fixed overlays use `z-50`.
 - Provider nesting order in `app/layout.tsx` matters: ErrorBoundary → ThemeProvider → QueryProvider → I18nProvider → ConnectionGuard → Toaster. ErrorBoundary is a class component and uses the raw `enUS` locale object (no hooks).
 - `i18n` runs with `useSuspense: false` (no SSR for translations).
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index ecfbec1a..d2a5dee4 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -9,7 +9,6 @@
       "version": "0.1.0",
       "dependencies": {
         "@hookform/resolvers": "^5.1.1",
-        "@monaco-editor/react": "^4.7.0",
         "@radix-ui/react-accordion": "^1.2.12",
         "@radix-ui/react-alert-dialog": "^1.1.14",
         "@radix-ui/react-checkbox": "^1.3.2",
@@ -40,7 +39,6 @@
         "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
         "next": "^16.2.6",
-        "next-themes": "^0.4.6",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
         "react-hook-form": "^7.60.0",
@@ -1828,27 +1826,6 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
-    "node_modules/@monaco-editor/loader": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/@monaco-editor/loader/-/loader-1.5.0.tgz",
-      "integrity": "sha512-hKoGSM+7aAc7eRTRjpqAZucPmoNOC4UUbknb/VNoTkEIkCPhqV8LfbsgM1webRM7S/z21eHEx9Fkwx8Z/C/+Xw==",
-      "dependencies": {
-        "state-local": "^1.0.6"
-      }
-    },
-    "node_modules/@monaco-editor/react": {
-      "version": "4.7.0",
-      "resolved": "https://registry.npmjs.org/@monaco-editor/react/-/react-4.7.0.tgz",
-      "integrity": "sha512-cyzXQCtO47ydzxpQtCGSQGOC8Gk3ZUeBXFAxD+CWXYFo5OqZyZUonFl0DwUlTyAfRHntBfw2p3w4s9R6oe1eCA==",
-      "dependencies": {
-        "@monaco-editor/loader": "^1.5.0"
-      },
-      "peerDependencies": {
-        "monaco-editor": ">= 0.25.0 < 1",
-        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
-        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
-      }
-    },
     "node_modules/@napi-rs/wasm-runtime": {
       "version": "0.2.12",
       "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.12.tgz",
@@ -9876,12 +9853,6 @@
         "node": ">= 18"
       }
     },
-    "node_modules/monaco-editor": {
-      "version": "0.52.2",
-      "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.52.2.tgz",
-      "integrity": "sha512-GEQWEZmfkOGLdd3XK8ryrfWz3AIP8YymVXiPHEdewrUq7mh0qrKrfHLNCXcbB6sTnMLnOZ3ztSiKcciFUkIJwQ==",
-      "peer": true
-    },
     "node_modules/mrmime": {
       "version": "2.0.1",
       "resolved": "https://registry.npmmirror.com/mrmime/-/mrmime-2.0.1.tgz",
@@ -9988,15 +9959,6 @@
         }
       }
     },
-    "node_modules/next-themes": {
-      "version": "0.4.6",
-      "resolved": "https://registry.npmjs.org/next-themes/-/next-themes-0.4.6.tgz",
-      "integrity": "sha512-pZvgD5L0IEvX5/9GWyHMf3m8BKiVQwsCMHfoFosXtXBMnaS0ZnIJ9ST4b4NqLVKDEm8QBxoNNGNaBv2JNF6XNA==",
-      "peerDependencies": {
-        "react": "^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17 || ^18 || ^19 || ^19.0.0-rc"
-      }
-    },
     "node_modules/node-releases": {
       "version": "2.0.47",
       "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.47.tgz",
@@ -11541,11 +11503,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/state-local": {
-      "version": "1.0.7",
-      "resolved": "https://registry.npmjs.org/state-local/-/state-local-1.0.7.tgz",
-      "integrity": "sha512-HTEHMNieakEnoe33shBYcZ7NX83ACUjCu8c40iOGEZsngj9zRnkqS9j1pqQPXwobB0ZcVTk27REb7COQ0UR59w=="
-    },
     "node_modules/std-env": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 4ebe8b09..da1b0c48 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -14,7 +14,6 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^5.1.1",
-    "@monaco-editor/react": "^4.7.0",
     "@radix-ui/react-accordion": "^1.2.12",
     "@radix-ui/react-alert-dialog": "^1.1.14",
     "@radix-ui/react-checkbox": "^1.3.2",
@@ -45,7 +44,6 @@
     "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
     "next": "^16.2.6",
-    "next-themes": "^0.4.6",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-hook-form": "^7.60.0",
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index afd4bce2..682e8654 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const bnIN = {
   common: {
     search: "অনুসন্ধান...",
@@ -947,4 +949,4 @@ export const bnIN = {
     goToSettings: "সেটিংসে যান",
     viewDocs: "ডকুমেন্টেশন দেখুন",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 11bf2c8f..cb3ecc99 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const caES = {
   common: {
     search: "Cerca...",
@@ -946,4 +948,4 @@ export const caES = {
     goToSettings: "Ves a la configuració",
     viewDocs: "Visualitza la documentació",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index a0e2c874..900ec024 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 // German locale.
 // Translate values only; do not change keys, placeholders or structure.
 
@@ -949,4 +951,4 @@ export const deDE = {
     goToSettings: "Zu den Einstellungen",
     viewDocs: "Dokumentation anzeigen",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 4b6544e0..ac99f059 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -948,3 +948,8 @@ export const enUS = {
     viewDocs: "View docs",
   },
 }
+
+// Compile-time shape of the en-US translations. Every other locale must
+// `satisfies` this type so missing or extra keys fail `tsc`, not just the
+// runtime parity test.
+export type TranslationShape = typeof enUS;
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 38db5dca..2541db19 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const esES = {
   common: {
     search: "Buscar...",
@@ -947,4 +949,4 @@ export const esES = {
     goToSettings: "Ir a configuración",
     viewDocs: "Ver documentación",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index d9538320..f1d897ff 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const frFR = {
   common: {
     search: "Recherche...",
@@ -946,4 +948,4 @@ export const frFR = {
     goToSettings: "Aller aux paramètres",
     viewDocs: "Voir la documentation",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 593651f7..73a30747 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const itIT = {
   common: {
     search: "Cerca...",
@@ -946,4 +948,4 @@ export const itIT = {
     goToSettings: "Vai alle Impostazioni",
     viewDocs: "Vedi documentazione",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 93a22e0f..1cd274c1 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const jaJP = {
   common: {
     search: "検索...",
@@ -946,4 +948,4 @@ export const jaJP = {
     goToSettings: "設定へ移動",
     viewDocs: "ドキュメントを見る",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index c3eb85cf..1b8c8a84 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const plPL = {
   common: {
     search: "Szukaj...",
@@ -946,4 +948,4 @@ export const plPL = {
     goToSettings: "Przejdź do Ustawień",
     viewDocs: "Zobacz dokumentację",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 279fb7c2..2af2b746 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const ptBR = {
   common: {
     search: "Buscar...",
@@ -946,4 +948,4 @@ export const ptBR = {
     goToSettings: "Ir para Configurações",
     viewDocs: "Ver documentação",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 96737305..56ee8c5d 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const ruRU = {
   common: {
     search: "Поиск...",
@@ -946,4 +948,4 @@ export const ruRU = {
     goToSettings: "Перейти к настройкам",
     viewDocs: "Документация",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 78ad760b..6e9e0dd2 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const trTR = {
   common: {
     search: "Ara...",
@@ -946,4 +948,4 @@ export const trTR = {
     goToSettings: "Ayarlara Git",
     viewDocs: "Belgeleri Görüntüle",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 35cdcba7..ed5fa7e0 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const zhCN = {
   common: {
     search: "搜索...",
@@ -946,4 +948,4 @@ export const zhCN = {
     goToSettings: "前往设置",
     viewDocs: "查看文档",
   },
-}
+} satisfies TranslationShape;
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index a1acd91a..1ebdfdf5 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -1,3 +1,5 @@
+import type { TranslationShape } from '../en-US';
+
 export const zhTW = {
   common: {
     search: "搜尋...",
@@ -946,4 +948,4 @@ export const zhTW = {
     goToSettings: "前往設定",
     viewDocs: "查看文件",
   },
-}
+} satisfies TranslationShape;

From 12ced05b3a3ca81bad2213b9c01bca2cda56ee17 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:46:43 -0300
Subject: [PATCH 170/345] build: converge Docker builds into a single
 multi-stage Dockerfile (#1066)

Both published image variants are now built from one Dockerfile with
shared stages, so deploy fixes no longer have to be applied twice:

- regular (multi-container): default build / --target runtime
- single-container (app + SurrealDB): --target single

Dockerfile.single and supervisord.single.conf are removed. The single
image appends supervisord.surrealdb.conf (the SurrealDB program block)
to the shared supervisord.conf at build time. CI workflows, Makefile
targets and the single-container compose example now build via
--target; published image names and tags are unchanged.
---
 .github/RELEASE_PROCESS.md              |   4 +-
 .github/workflows/build-and-release.yml |   4 +-
 .github/workflows/build-dev.yml         |   4 +-
 CHANGELOG.md                            |   3 +
 Dockerfile                              | 173 +++++++++++++-----------
 Dockerfile.single                       | 108 ---------------
 Makefile                                |   4 +-
 examples/docker-compose-single.yml      |   3 +-
 supervisord.conf                        |   5 +
 supervisord.single.conf                 |  52 -------
 supervisord.surrealdb.conf              |  13 ++
 11 files changed, 126 insertions(+), 247 deletions(-)
 delete mode 100644 Dockerfile.single
 delete mode 100644 supervisord.single.conf
 create mode 100644 supervisord.surrealdb.conf

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index ca1e532a..02f10e49 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -137,7 +137,9 @@ accepted improvements immediately — update this document, the scripts under
 
 - **Platforms:** `linux/amd64`, `linux/arm64`
 - **Registries:** Docker Hub + GitHub Container Registry
-- **Image variants:** regular + single-container (`-single`)
+- **Image variants:** regular + single-container (`-single`). Both are built
+  from the same `Dockerfile`: regular is the default/`runtime` target, single
+  is `--target single`
 - **Version source:** `pyproject.toml`
 - Build issues: `docker builder prune`, then `make docker-buildx-reset`
 
diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 2970c66e..c31e9cfa 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -130,6 +130,7 @@ jobs:
         with:
           context: .
           file: ./Dockerfile
+          target: runtime
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.tags-regular.outputs.tags }}
@@ -220,7 +221,8 @@ jobs:
         uses: docker/build-push-action@v7
         with:
           context: .
-          file: ./Dockerfile.single
+          file: ./Dockerfile
+          target: single
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.tags-single.outputs.tags }}
diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index 0d35e6c6..a751065f 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -139,6 +139,7 @@ jobs:
         with:
           context: .
           file: ./Dockerfile
+          target: runtime
           platforms: ${{ steps.tags.outputs.platforms }}
           push: ${{ steps.tags.outputs.push }}
           tags: ${{ steps.tags.outputs.tags }}
@@ -206,7 +207,8 @@ jobs:
         uses: docker/build-push-action@v7
         with:
           context: .
-          file: ./Dockerfile.single
+          file: ./Dockerfile
+          target: single
           platforms: linux/amd64,linux/arm64
           push: true
           tags: ${{ steps.tags.outputs.tags }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 64427c0d..a1c454c8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
+
 ### Added
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
diff --git a/Dockerfile b/Dockerfile
index 446a583c..e6ea1d31 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,52 +1,16 @@
-# Build stage
-FROM python:3.12-slim-trixie AS builder
+# Single source of truth for both published image variants:
+#   - regular (multi-container, SurrealDB external): default build / --target runtime
+#   - single-container (app + SurrealDB):            --target single
+# Shared stages below guarantee that fixes (tiktoken pre-cache, env defaults,
+# npm retry logic, ...) apply to both variants at once.
 
-# Install uv using the official method
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
-
-# Install system dependencies required for building certain Python packages
-# Add Node.js 22.x LTS for building frontend
-# NOTE: gcc/g++/make removed - uv should download pre-built wheels. Add back if build fails.
-# NOTE: gcc/g++/make required for some python dependencies
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    curl \
-    build-essential \
-    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
-    && apt-get install -y nodejs \
-    && rm -rf /var/lib/apt/lists/*
-
-# Set build optimization environment variables
-ENV MAKEFLAGS="-j$(nproc)"
-ENV PYTHONDONTWRITEBYTECODE=1
-ENV PYTHONUNBUFFERED=1
-ENV UV_COMPILE_BYTECODE=1
-ENV UV_LINK_MODE=copy
-
-# Set the working directory in the container to /app
-WORKDIR /app
-
-# Copy dependency files and minimal package structure first for better layer caching
-COPY pyproject.toml uv.lock ./
-COPY open_notebook/__init__.py ./open_notebook/__init__.py
-
-# Install dependencies with optimizations (this layer will be cached unless dependencies change)
-RUN uv sync --frozen --no-dev
-
-# Pre-download tiktoken encoding so the app works offline (issue #264).
-# /app/tiktoken-cache is intentionally outside /app/data/ so that volume mounts
-# of /app/data (for user data persistence) do not hide the pre-baked encoding.
-# config.py reads TIKTOKEN_CACHE_DIR from the environment to pick up this path.
-ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
-RUN mkdir -p /app/tiktoken-cache && \
-    .venv/bin/python -c "import tiktoken; tiktoken.get_encoding('o200k_base')"
-
-# Copy the rest of the application code
-COPY . /app
-
-# Install frontend dependencies and build
+# Stage 1: Frontend builder
+FROM node:22-slim AS frontend-builder
 WORKDIR /app/frontend
-ARG NPM_REGISTRY=https://registry.npmjs.org/
+
+# Copy dependency files first to leverage cache
 COPY frontend/package.json frontend/package-lock.json ./
+ARG NPM_REGISTRY=https://registry.npmjs.org/
 RUN npm config set registry ${NPM_REGISTRY} \
  && npm config set fetch-retries 5 \
  && npm config set fetch-retry-mintimeout 20000 \
@@ -58,72 +22,102 @@ RUN i=0; until npm ci; do \
       if [ "$i" -ge 5 ]; then echo "npm ci failed after $i attempts"; exit 1; fi; \
       echo "npm ci failed (attempt $i); retrying in 15s"; sleep 15; \
     done
+
+# Copy the rest of the frontend source and build
 COPY frontend/ ./
 RUN npm run build
 
-# Return to app root
-WORKDIR /app
+# Stage 2: Backend builder
+FROM python:3.12-slim-trixie AS backend-builder
 
-# Runtime stage
-FROM python:3.12-slim-trixie AS runtime
-
-# Install only runtime system dependencies (no build tools)
-# Add Node.js 22.x LTS for running frontend
+# Install build dependencies (uv downloads pre-built wheels for most packages)
 RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
-    ffmpeg \
-    supervisor \
-    curl \
-    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
-    && apt-get install -y nodejs \
+    build-essential \
     && rm -rf /var/lib/apt/lists/*
 
 # Install uv using the official method
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
-# Set the working directory in the container to /app
 WORKDIR /app
 
-# Copy the virtual environment from builder stage
-COPY --from=builder /app/.venv /app/.venv
+# Set build optimization environment variables
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+ENV UV_COMPILE_BYTECODE=1
+ENV UV_LINK_MODE=copy
+ENV UV_HTTP_TIMEOUT=120
 
-# Copy the source code (the rest)
+# Copy dependency files and minimal package structure first for better layer caching
+COPY pyproject.toml uv.lock ./
+COPY open_notebook/__init__.py ./open_notebook/__init__.py
+
+# Install dependencies (this layer is cached unless dependencies change)
+RUN uv sync --frozen --no-dev
+
+# Pre-download tiktoken encoding so the app works offline (issue #264).
+# /app/tiktoken-cache is intentionally outside /app/data/ so that volume mounts
+# of /app/data (for user data persistence) do not hide the pre-baked encoding.
+# config.py reads TIKTOKEN_CACHE_DIR from the environment to pick up this path.
+ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
+RUN mkdir -p /app/tiktoken-cache && \
+    .venv/bin/python -c "import tiktoken; tiktoken.get_encoding('o200k_base')"
+
+# Stage 3: SurrealDB binary (pinned to v2 to match docker-compose.yml; used by the single target only)
+FROM surrealdb/surrealdb:v2 AS surreal-binary
+
+# Stage 4: Shared runtime base (everything common to both variants)
+FROM python:3.12-slim-trixie AS runtime-base
+
+# Install only runtime system dependencies (no build tools)
+# Add Node.js 22.x LTS for running the frontend
+RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
+    ffmpeg \
+    supervisor \
+    curl \
+    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
+    && apt-get install -y --no-install-recommends nodejs \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install uv using the official method
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+
+WORKDIR /app
+
+# Copy the virtual environment from the backend builder
+COPY --from=backend-builder /app/.venv /app/.venv
+
+# Copy the source code
 COPY . /app
 
 # Copy pre-downloaded tiktoken encoding from builder (outside /data/ — volume-mount safe)
-COPY --from=builder /app/tiktoken-cache /app/tiktoken-cache
+COPY --from=backend-builder /app/tiktoken-cache /app/tiktoken-cache
+
+# Copy built frontend from standalone output
+COPY --from=frontend-builder /app/frontend/.next/standalone /app/frontend/
+COPY --from=frontend-builder /app/frontend/.next/static /app/frontend/.next/static
+COPY --from=frontend-builder /app/frontend/public /app/frontend/public
+COPY --from=frontend-builder /app/frontend/start-server.js /app/frontend/start-server.js
 
 # Ensure uv uses the existing venv without attempting network operations
 ENV UV_NO_SYNC=1
 ENV VIRTUAL_ENV=/app/.venv
 # Point the app at the pre-baked tiktoken encoding (see open_notebook/config.py)
 ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
-
 # Bind Next.js to all interfaces (required for Docker networking and reverse proxies)
 ENV HOSTNAME=0.0.0.0
 # Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
 ENV API_HOST=0.0.0.0
 
-# Copy built frontend from builder stage
-COPY --from=builder /app/frontend/.next/standalone /app/frontend/
-COPY --from=builder /app/frontend/.next/static /app/frontend/.next/static
-COPY --from=builder /app/frontend/public /app/frontend/public
-COPY --from=builder /app/frontend/start-server.js /app/frontend/start-server.js
+# Data directory (volume-mounted by users) and supervisor log directory
+RUN mkdir -p /app/data /var/log/supervisor \
+    && chmod +x /app/scripts/wait-for-api.sh
+
+# Copy supervisord configuration (shared programs: api, worker, frontend)
+COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 
 # Expose ports for Frontend and API
 EXPOSE 8502 5055
 
-RUN mkdir -p /app/data
-
-# Copy and make executable the wait-for-api script
-COPY scripts/wait-for-api.sh /app/scripts/wait-for-api.sh
-RUN chmod +x /app/scripts/wait-for-api.sh
-
-# Copy supervisord configuration
-COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
-
-# Create log directories
-RUN mkdir -p /var/log/supervisor
-
 # Runtime API URL Configuration
 # The API_URL environment variable can be set at container runtime to configure
 # where the frontend should connect to the API. This allows the same Docker image
@@ -135,3 +129,20 @@ RUN mkdir -p /var/log/supervisor
 # Example: docker run -e API_URL=https://your-domain.com/api ...
 
 CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+
+# Stage 5: Single-container variant (adds SurrealDB on top of the shared runtime)
+# Build with: docker build --target single .
+FROM runtime-base AS single
+
+# Install SurrealDB (copied from pinned v2 image to match docker-compose.yml)
+COPY --from=surreal-binary /surreal /usr/local/bin/surreal
+
+# SurrealDB data directory (volume-mounted by users)
+RUN mkdir -p /mydata
+
+# Enable the surrealdb program in supervisord (appended to the shared config)
+RUN cat /app/supervisord.surrealdb.conf >> /etc/supervisor/conf.d/supervisord.conf
+
+# Stage 6 (default): Regular multi-container image (SurrealDB runs externally).
+# Kept last so a plain `docker build .` produces this variant.
+FROM runtime-base AS runtime
diff --git a/Dockerfile.single b/Dockerfile.single
deleted file mode 100644
index cf0f7464..00000000
--- a/Dockerfile.single
+++ /dev/null
@@ -1,108 +0,0 @@
-# Stage 1: Frontend Builder
-FROM node:22-slim AS frontend-builder
-WORKDIR /app/frontend
-
-# Copy dependency files first to leverage cache
-COPY frontend/package.json frontend/package-lock.json ./
-ARG NPM_REGISTRY=https://registry.npmjs.org/
-RUN npm config set registry ${NPM_REGISTRY} \
- && npm config set fetch-retries 5 \
- && npm config set fetch-retry-mintimeout 20000 \
- && npm config set fetch-retry-maxtimeout 120000
-# Retry npm ci to survive transient registry ECONNRESETs, which are common on
-# the QEMU-emulated arm64 leg of the multi-arch build.
-RUN i=0; until npm ci; do \
-      i=$((i+1)); \
-      if [ "$i" -ge 5 ]; then echo "npm ci failed after $i attempts"; exit 1; fi; \
-      echo "npm ci failed (attempt $i); retrying in 15s"; sleep 15; \
-    done
-
-# Copy the rest of the frontend source
-COPY frontend/ ./
-# Build the frontend
-RUN npm run build
-
-# Stage 2: SurrealDB binary (pinned to v2 to match docker-compose.yml)
-FROM surrealdb/surrealdb:v2 AS surreal-binary
-
-# Stage 4: Backend Builder
-FROM python:3.12-slim-trixie AS backend-builder
-# Install build dependencies
-RUN apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/*
-# Install uv
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
-WORKDIR /app
-
-# Set build optimization environment variables
-ENV UV_HTTP_TIMEOUT=120
-
-# Copy dependency files first
-COPY pyproject.toml uv.lock ./
-COPY open_notebook/__init__.py ./open_notebook/__init__.py
-# Install dependencies
-RUN uv sync --frozen --no-dev
-
-# Pre-download tiktoken encoding so the app works offline (issue #264).
-# /app/tiktoken-cache is intentionally outside /app/data/ so that volume mounts
-# of /app/data (for user data persistence) do not hide the pre-baked encoding.
-# config.py reads TIKTOKEN_CACHE_DIR from the environment to pick up this path.
-ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
-RUN mkdir -p /app/tiktoken-cache && \
-    .venv/bin/python -c "import tiktoken; tiktoken.get_encoding('o200k_base')"
-
-# Stage 5: Runtime
-FROM python:3.12-slim-trixie AS runtime
-
-# Install runtime dependencies
-RUN apt-get update && apt-get upgrade -y && apt-get install -y \
-    ffmpeg \
-    supervisor \
-    curl \
-    && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
-    && apt-get install -y nodejs \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install SurrealDB (copied from pinned v2 image to match docker-compose.yml)
-COPY --from=surreal-binary /surreal /usr/local/bin/surreal
-
-# Install uv (optional but helpful for some scripts)
-COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
-
-WORKDIR /app
-
-# Copy backend virtualenv and source code
-COPY --from=backend-builder /app/.venv /app/.venv
-COPY . /app/
-
-# Copy pre-downloaded tiktoken encoding from builder (outside /data/ — volume-mount safe)
-COPY --from=backend-builder /app/tiktoken-cache /app/tiktoken-cache
-
-# Copy built frontend from standalone output
-COPY --from=frontend-builder /app/frontend/.next/standalone /app/frontend/
-COPY --from=frontend-builder /app/frontend/.next/static /app/frontend/.next/static
-COPY --from=frontend-builder /app/frontend/public /app/frontend/public
-
-# Bind Next.js to all interfaces (required for Docker networking and reverse proxies)
-ENV HOSTNAME=0.0.0.0
-# Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
-ENV API_HOST=0.0.0.0
-# Point the app at the pre-baked tiktoken encoding (see open_notebook/config.py)
-ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
-
-# Setup directories and permissions
-RUN mkdir -p /app/data /mydata
-
-# Ensure wait-for-api script is executable
-RUN chmod +x /app/scripts/wait-for-api.sh
-
-# Copy supervisord configuration
-COPY supervisord.single.conf /etc/supervisor/conf.d/supervisord.conf
-
-# Create log directories
-RUN mkdir -p /var/log/supervisor
-
-# Expose ports
-EXPOSE 8502 5055
-
-# Set startup command
-CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
diff --git a/Makefile b/Makefile
index e896f123..420df3f9 100644
--- a/Makefile
+++ b/Makefile
@@ -90,7 +90,7 @@ docker-push: docker-buildx-prepare
 	docker buildx build --pull \
 		--platform $(PLATFORMS) \
 		--progress=plain \
-		-f Dockerfile.single \
+		--target single \
 		-t $(DOCKERHUB_IMAGE):$(VERSION)-single \
 		-t $(GHCR_IMAGE):$(VERSION)-single \
 		--push \
@@ -120,7 +120,7 @@ docker-push-latest: docker-buildx-prepare
 	docker buildx build --pull \
 		--platform $(PLATFORMS) \
 		--progress=plain \
-		-f Dockerfile.single \
+		--target single \
 		-t $(DOCKERHUB_IMAGE):$(VERSION)-single \
 		-t $(DOCKERHUB_IMAGE):v1-latest-single \
 		-t $(GHCR_IMAGE):$(VERSION)-single \
diff --git a/examples/docker-compose-single.yml b/examples/docker-compose-single.yml
index 06ac0d50..705bd587 100644
--- a/examples/docker-compose-single.yml
+++ b/examples/docker-compose-single.yml
@@ -3,7 +3,8 @@ services:
     # image: lfnovo/open_notebook:v1-latest-single
     build:
       context: .
-      dockerfile: Dockerfile.single
+      dockerfile: Dockerfile
+      target: single
     ports:
       - "8502:8502"  # Next.js Frontend
       - "5055:5055"  # REST API
diff --git a/supervisord.conf b/supervisord.conf
index 79831251..deaea0e1 100644
--- a/supervisord.conf
+++ b/supervisord.conf
@@ -1,3 +1,7 @@
+# Shared supervisord configuration for both Docker image variants.
+# The single-container image appends supervisord.surrealdb.conf to this file
+# at build time (see the `single` stage in the Dockerfile).
+
 [supervisord]
 nodaemon=true
 logfile=/dev/stdout
@@ -13,6 +17,7 @@ stderr_logfile_maxbytes=0
 autorestart=true
 priority=10
 autostart=true
+startsecs=3
 
 [program:worker]
 command=uv run --no-sync surreal-commands-worker --import-modules commands
diff --git a/supervisord.single.conf b/supervisord.single.conf
deleted file mode 100644
index b1c95174..00000000
--- a/supervisord.single.conf
+++ /dev/null
@@ -1,52 +0,0 @@
-[supervisord]
-nodaemon=true
-logfile=/dev/stdout
-logfile_maxbytes=0
-pidfile=/tmp/supervisord.pid
-
-[program:surrealdb]
-command=surreal start --log trace --user root --pass root rocksdb:/mydata/mydatabase.db
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-priority=5
-autostart=true
-startsecs=5
-
-[program:api]
-command=uv run --no-sync uvicorn api.main:app --host %(ENV_API_HOST)s --port 5055
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-priority=10
-autostart=true
-startsecs=3
-
-[program:worker]
-command=uv run --no-sync surreal-commands-worker --import-modules commands
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-priority=20
-autostart=true
-startsecs=3
-
-[program:frontend]
-command=bash -c "/app/scripts/wait-for-api.sh && node server.js"
-directory=/app/frontend
-environment=NODE_ENV="production",PORT="8502"
-passenv=API_URL,NEXT_PUBLIC_API_URL,INTERNAL_API_URL
-stdout_logfile=/dev/stdout
-stdout_logfile_maxbytes=0
-stderr_logfile=/dev/stderr
-stderr_logfile_maxbytes=0
-autorestart=true
-priority=30
-autostart=true
-startsecs=10
\ No newline at end of file
diff --git a/supervisord.surrealdb.conf b/supervisord.surrealdb.conf
new file mode 100644
index 00000000..8d0f0175
--- /dev/null
+++ b/supervisord.surrealdb.conf
@@ -0,0 +1,13 @@
+# SurrealDB program for the single-container image only.
+# Appended to supervisord.conf at build time (see the `single` stage in the Dockerfile).
+
+[program:surrealdb]
+command=surreal start --log trace --user root --pass root rocksdb:/mydata/mydatabase.db
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+autorestart=true
+priority=5
+autostart=true
+startsecs=5

From 2bd9211abc1ea25a8f1b3271b8a9d179de58e835 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:47:27 -0300
Subject: [PATCH 171/345] refactor(frontend): split GeneratePodcastDialog and
 fix token-count races (#1067)

Extract ContentSelectionPanel and shared selection helpers into their
own modules, deduplicate the sources/notes context-config reduction
into selectionsToContextConfigs, delete the obsolete translation
cache (plain react-i18next t() now), debounce the token/char counter
with a stale-response guard, and close the dialog when the episode
refetch resolves instead of after a fixed 500ms timer.
---
 CHANGELOG.md                                  |   3 +
 .../podcasts/ContentSelectionPanel.tsx        | 313 +++++++++++
 .../podcasts/GeneratePodcastDialog.tsx        | 499 ++----------------
 .../podcasts/generate-podcast-selection.ts    |  89 ++++
 4 files changed, 455 insertions(+), 449 deletions(-)
 create mode 100644 frontend/src/components/podcasts/ContentSelectionPanel.tsx
 create mode 100644 frontend/src/components/podcasts/generate-podcast-selection.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1c454c8..077ba028 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
 
+### Fixed
+- Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
+
 ### Changed
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
diff --git a/frontend/src/components/podcasts/ContentSelectionPanel.tsx b/frontend/src/components/podcasts/ContentSelectionPanel.tsx
new file mode 100644
index 00000000..664a170d
--- /dev/null
+++ b/frontend/src/components/podcasts/ContentSelectionPanel.tsx
@@ -0,0 +1,313 @@
+'use client'
+
+import { Loader2 } from 'lucide-react'
+import { useQueryClient } from '@tanstack/react-query'
+
+import { sourcesApi } from '@/lib/api/sources'
+import { notesApi } from '@/lib/api/notes'
+import { NoteResponse, NotebookResponse, SourceListResponse } from '@/lib/types/api'
+import { QUERY_KEYS } from '@/lib/api/query-client'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { Checkbox } from '@/components/ui/checkbox'
+import { Badge } from '@/components/ui/badge'
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
+import { ScrollArea } from '@/components/ui/scroll-area'
+import { Label } from '@/components/ui/label'
+import { Separator } from '@/components/ui/separator'
+import { Accordion, AccordionContent, AccordionItem, AccordionTrigger } from '@/components/ui/accordion'
+
+import {
+  NotebookSelection,
+  NotebookSummary,
+  SourceMode,
+  formatNumber,
+  getSourceDefaultMode,
+} from './generate-podcast-selection'
+
+interface ContentSelectionPanelProps {
+  notebooks: NotebookResponse[]
+  isLoading: boolean
+  selectedNotebookSummaries: NotebookSummary[]
+  tokenCount: number
+  charCount: number
+  expandedNotebooks: string[]
+  setExpandedNotebooks: (notebooks: string[]) => void
+  selections: Record<string, NotebookSelection>
+  sourcesByNotebook: Record<string, SourceListResponse[]>
+  notesByNotebook: Record<string, NoteResponse[]>
+  fetchingNotebookIds: Set<string>
+  onNotebookToggle: (notebookId: string, checked: boolean | 'indeterminate') => void
+  onSourceModeChange: (notebookId: string, sourceId: string, mode: SourceMode) => void
+  onNoteToggle: (notebookId: string, noteId: string, checked: boolean | 'indeterminate') => void
+}
+
+export function ContentSelectionPanel({
+  notebooks,
+  isLoading,
+  selectedNotebookSummaries,
+  tokenCount,
+  charCount,
+  expandedNotebooks,
+  setExpandedNotebooks,
+  selections,
+  sourcesByNotebook,
+  notesByNotebook,
+  fetchingNotebookIds,
+  onNotebookToggle,
+  onSourceModeChange,
+  onNoteToggle,
+}: ContentSelectionPanelProps) {
+  const { t, language } = useTranslation()
+  const queryClient = useQueryClient()
+
+  const sourceModes = [
+    { value: 'insights', label: t('podcasts.summary') },
+    { value: 'full', label: t('podcasts.fullContent') },
+  ] as const
+
+  return (
+    <div className="flex flex-col gap-4">
+      <div className="flex items-center justify-between">
+        <div>
+          <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
+            {t('podcasts.content')}
+          </h3>
+          <p className="text-xs text-muted-foreground">
+            {t('podcasts.contentDesc')}
+          </p>
+        </div>
+        <div className="flex items-center gap-2">
+          <Badge variant="outline">
+            {t('podcasts.itemsSelected').replace(
+              '{count}',
+              selectedNotebookSummaries.reduce(
+                (acc: number, summary: NotebookSummary) => acc + summary.sources + summary.notes,
+                0
+              ).toString()
+            )}
+          </Badge>
+          {(tokenCount > 0 || charCount > 0) && (
+            <span className="text-xs text-muted-foreground">
+              {tokenCount > 0 && t('podcasts.tokens').replace('{count}', formatNumber(tokenCount))}
+              {tokenCount > 0 && charCount > 0 && ' / '}
+              {charCount > 0 && t('podcasts.chars').replace('{count}', formatNumber(charCount))}
+            </span>
+          )}
+        </div>
+      </div>
+
+      <div className="rounded-lg border bg-muted/30">
+        {isLoading ? (
+          <div className="flex items-center justify-center py-16 text-sm text-muted-foreground">
+            <Loader2 className="mr-2 h-4 w-4 animate-spin" /> {t('podcasts.loadingNotebooks')}
+          </div>
+        ) : notebooks.length === 0 ? (
+          <div className="p-6 text-sm text-muted-foreground">
+            {t('podcasts.noNotebooksFoundInPodcasts')}
+          </div>
+        ) : (
+          <ScrollArea className="h-[60vh]">
+            <Accordion
+              type="multiple"
+              value={expandedNotebooks}
+              onValueChange={(value) => setExpandedNotebooks(value as string[])}
+              className="w-full"
+            >
+              {notebooks.map((notebook: NotebookResponse, index: number) => {
+                const sources = sourcesByNotebook[notebook.id] ?? []
+                const notes = notesByNotebook[notebook.id] ?? []
+                const selection = selections[notebook.id]
+                const summary = selectedNotebookSummaries[index]
+                const notebookChecked = summary.sources + summary.notes > 0
+                const totalItems = sources.length + notes.length
+                const isIndeterminate =
+                  notebookChecked &&
+                  summary.sources + summary.notes > 0 &&
+                  summary.sources + summary.notes < totalItems
+
+                return (
+                  <AccordionItem key={notebook.id} value={notebook.id}>
+                    <div className="flex items-start gap-3 px-4 pt-3">
+                      <Checkbox
+                        id={`notebook-toggle-${notebook.id}`}
+                        checked={isIndeterminate ? 'indeterminate' : notebookChecked}
+                        onCheckedChange={(checked) => {
+                          onNotebookToggle(notebook.id, checked)
+                          queryClient.prefetchQuery({
+                            queryKey: QUERY_KEYS.sources(notebook.id),
+                            queryFn: () => sourcesApi.list({ notebook_id: notebook.id }),
+                          })
+                          queryClient.prefetchQuery({
+                            queryKey: QUERY_KEYS.notes(notebook.id),
+                            queryFn: () => notesApi.list({ notebook_id: notebook.id }),
+                          })
+                        }}
+                        onClick={(event) => event.stopPropagation()}
+                      />
+                      <AccordionTrigger className="flex-1 px-0 py-0 hover:no-underline">
+                        <Label
+                          htmlFor={`notebook-toggle-${notebook.id}`}
+                          className="flex w-full items-center justify-between gap-3 pointer-events-none"
+                        >
+                          <div className="text-left">
+                            <p className="font-medium text-sm text-foreground">
+                              {notebook.name}
+                            </p>
+                            <p className="text-xs text-muted-foreground">
+                              {summary.sources + summary.notes > 0
+                                ? `${summary.sources} ${t('podcasts.sources')}, ${summary.notes} ${t('podcasts.notes')}`
+                                : t('podcasts.noContentSelected')}
+                            </p>
+                          </div>
+                          <Badge variant="outline" className="text-xs">
+                            {sources.length} {t('podcasts.sources')} · {notes.length} {t('podcasts.notes')}
+                          </Badge>
+                        </Label>
+                      </AccordionTrigger>
+                    </div>
+                    <AccordionContent>
+                      <div className="space-y-4 px-4 pb-4">
+                        <div className="space-y-2">
+                          <div className="flex items-center justify-between">
+                            <h4 className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
+                              {t('podcasts.sources')}
+                            </h4>
+                            {fetchingNotebookIds.has(notebook.id) && (
+                              <Loader2 className="h-3 w-3 animate-spin text-muted-foreground" />
+                            )}
+                          </div>
+                          {sources.length === 0 ? (
+                            <p className="text-xs text-muted-foreground">
+                              {t('podcasts.noSources')}
+                            </p>
+                          ) : (
+                            <div className="space-y-2">
+                              {sources.map((source: SourceListResponse) => {
+                                const mode = selection?.sources?.[source.id] ?? 'off'
+                                return (
+                                  <div
+                                    key={source.id}
+                                    className="flex items-center gap-3 rounded border bg-background px-3 py-2"
+                                  >
+                                    <Checkbox
+                                      id={`source-selection-${source.id}`}
+                                      checked={mode !== 'off'}
+                                      onCheckedChange={(checked) =>
+                                        onSourceModeChange(
+                                          notebook.id,
+                                          source.id,
+                                          checked ? getSourceDefaultMode(source) : 'off'
+                                        )
+                                      }
+                                    />
+                                    <Label
+                                      htmlFor={`source-selection-${source.id}`}
+                                      className="flex flex-1 flex-col gap-1 cursor-pointer"
+                                    >
+                                      <span className="text-sm font-medium text-foreground">
+                                        {source.title || t('podcasts.untitledSource')}
+                                      </span>
+                                      <div className="flex items-center gap-2 text-xs text-muted-foreground">
+                                        <span>{source.asset?.url ? t('podcasts.link') : t('podcasts.file')}</span>
+                                        <span>•</span>
+                                        <span>{source.embedded ? t('podcasts.embedded') : t('podcasts.notEmbedded')}</span>
+                                      </div>
+                                    </Label>
+                                    <Select
+                                      value={mode === 'off' ? 'off' : mode}
+                                      onValueChange={(value) =>
+                                        onSourceModeChange(
+                                          notebook.id,
+                                          source.id,
+                                          value as SourceMode
+                                        )
+                                      }
+                                      disabled={mode === 'off'}
+                                    >
+                                      <SelectTrigger className="w-[140px]">
+                                        <SelectValue placeholder={t('podcasts.selectMode')} />
+                                      </SelectTrigger>
+                                      <SelectContent>
+                                        {sourceModes.map((option) => (
+                                          <SelectItem
+                                            key={option.value}
+                                            value={option.value}
+                                            disabled={
+                                              option.value === 'insights' &&
+                                              (!source.insights_count || source.insights_count === 0)
+                                            }
+                                          >
+                                            {option.label}
+                                          </SelectItem>
+                                        ))}
+                                      </SelectContent>
+                                    </Select>
+                                  </div>
+                                )
+                              })}
+                            </div>
+                          )}
+                        </div>
+
+                        <Separator />
+
+                        <div className="space-y-2">
+                          <h4 className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
+                            {t('podcasts.notes')}
+                          </h4>
+                          {notes.length === 0 ? (
+                            <p className="text-xs text-muted-foreground">
+                              {t('podcasts.noNotes')}
+                            </p>
+                          ) : (
+                            <div className="space-y-2">
+                              {notes.map((note: NoteResponse) => {
+                                const mode = selection?.notes?.[note.id] ?? 'off'
+                                return (
+                                  <div
+                                    key={note.id}
+                                    className="flex items-center gap-3 rounded border bg-background px-3 py-2"
+                                  >
+                                    <Checkbox
+                                      id={`note-selection-${note.id}`}
+                                      checked={mode !== 'off'}
+                                      onCheckedChange={(checked) =>
+                                        onNoteToggle(
+                                          notebook.id,
+                                          note.id,
+                                          Boolean(checked)
+                                        )
+                                      }
+                                    />
+                                    <Label
+                                      htmlFor={`note-selection-${note.id}`}
+                                      className="flex flex-1 flex-col cursor-pointer"
+                                    >
+                                      <span className="text-sm font-medium text-foreground">
+                                        {note.title || t('podcasts.untitledNote')}
+                                      </span>
+                                      <span className="text-xs text-muted-foreground">
+                                        {t('common.updated')}{' '}
+                                        {new Date(note.updated).toLocaleString(
+                                          language.startsWith('zh') ? language : 'en-US'
+                                        )}
+                                      </span>
+                                    </Label>
+                                  </div>
+                                )
+                              })}
+                            </div>
+                          )}
+                        </div>
+                      </div>
+                    </AccordionContent>
+                  </AccordionItem>
+                )
+              })}
+            </Accordion>
+          </ScrollArea>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
index 0f76e743..032ed7f7 100644
--- a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
+++ b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
@@ -1,16 +1,15 @@
 'use client'
 
-import { useCallback, useEffect, useMemo, useState } from 'react'
+import { useCallback, useEffect, useMemo, useRef, useState } from 'react'
 import { Loader2 } from 'lucide-react'
-import { useQueries, useQueryClient } from '@tanstack/react-query'
+import { useQueries } from '@tanstack/react-query'
 
 import { useNotebooks } from '@/lib/hooks/use-notebooks'
 import { useEpisodeProfiles, useGeneratePodcast } from '@/lib/hooks/use-podcasts'
 import { chatApi } from '@/lib/api/chat'
 import { sourcesApi } from '@/lib/api/sources'
 import { notesApi } from '@/lib/api/notes'
-import { BuildContextRequest, NoteResponse, NotebookResponse, SourceListResponse } from '@/lib/types/api'
-import type { QueryClient } from '@tanstack/react-query'
+import { NoteResponse, SourceListResponse } from '@/lib/types/api'
 import { PodcastGenerationRequest } from '@/lib/types/podcasts'
 import { QUERY_KEYS } from '@/lib/api/query-client'
 import { useToast } from '@/lib/hooks/use-toast'
@@ -23,381 +22,30 @@ import {
   DialogTitle,
 } from '@/components/ui/dialog'
 import { Button } from '@/components/ui/button'
-import { Checkbox } from '@/components/ui/checkbox'
-import { Badge } from '@/components/ui/badge'
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
 import { Input } from '@/components/ui/input'
 import { Textarea } from '@/components/ui/textarea'
-import { ScrollArea } from '@/components/ui/scroll-area'
 import { Label } from '@/components/ui/label'
-import { Separator } from '@/components/ui/separator'
-import { Accordion, AccordionContent, AccordionItem, AccordionTrigger } from '@/components/ui/accordion'
 
-type SourceMode = 'off' | 'insights' | 'full'
+import { ContentSelectionPanel } from './ContentSelectionPanel'
+import {
+  NotebookSelection,
+  SourceMode,
+  getSourceDefaultMode,
+  hasSelections,
+  selectionsToContextConfigs,
+} from './generate-podcast-selection'
 
-interface NotebookSelection {
-  sources: Record<string, SourceMode>
-  notes: Record<string, SourceMode>
-}
-
-// Helper function to format large numbers with K/M suffixes
-function formatNumber(num: number): string {
-  if (num >= 1000000) {
-    return `${(num / 1000000).toFixed(1)}M`
-  }
-  if (num >= 1000) {
-    return `${(num / 1000).toFixed(1)}K`
-  }
-  return num.toString()
-}
-
-function hasSelections(selection?: NotebookSelection): boolean {
-  if (!selection) {
-    return false
-  }
-  return (
-    Object.values(selection.sources).some((mode) => mode !== 'off') ||
-    Object.values(selection.notes).some((mode) => mode !== 'off')
-  )
-}
-
-function getSourceDefaultMode(source: SourceListResponse): SourceMode {
-  return source.insights_count && source.insights_count > 0 ? 'insights' : 'full'
-}
+const TOKEN_COUNT_DEBOUNCE_MS = 400
 
 interface GeneratePodcastDialogProps {
   open: boolean
   onOpenChange: (open: boolean) => void
 }
 
-interface NotebookSummary {
-  notebookId: string
-  sources: number
-  notes: number
-}
-
-interface ContentSelectionPanelProps {
-  notebooks: NotebookResponse[]
-  isLoading: boolean
-  selectedNotebookSummaries: NotebookSummary[]
-  tokenCount: number
-  charCount: number
-  expandedNotebooks: string[]
-  setExpandedNotebooks: (notebooks: string[]) => void
-  selections: Record<string, NotebookSelection>
-  sourcesByNotebook: Record<string, SourceListResponse[]>
-  notesByNotebook: Record<string, NoteResponse[]>
-  fetchingNotebookIds: Set<string>
-  handleNotebookToggle: (notebookId: string, checked: boolean | 'indeterminate') => void
-  handleSourceModeChange: (notebookId: string, sourceId: string, mode: SourceMode) => void
-  handleNoteToggle: (notebookId: string, noteId: string, checked: boolean | 'indeterminate') => void
-  queryClient: QueryClient
-}
-
-// Extracted component for content selection panel
-function ContentSelectionPanel({
-  notebooks,
-  isLoading,
-  selectedNotebookSummaries,
-  tokenCount,
-  charCount,
-  expandedNotebooks,
-  setExpandedNotebooks,
-  selections,
-  sourcesByNotebook,
-  notesByNotebook,
-  fetchingNotebookIds,
-  handleNotebookToggle,
-  handleSourceModeChange,
-  handleNoteToggle,
-  queryClient,
-}: ContentSelectionPanelProps) {
-  const { t, language } = useTranslation()
-
-  // Cache all translation strings at render time to avoid repeated Proxy accesses in loops
-  // This prevents the infinite loop detection from triggering
-  const tr = {
-    content: t('podcasts.content'),
-    contentDesc: t('podcasts.contentDesc'),
-    itemsSelected: t('podcasts.itemsSelected'),
-    tokens: t('podcasts.tokens'),
-    chars: t('podcasts.chars'),
-    loadingNotebooks: t('podcasts.loadingNotebooks'),
-    noNotebooksFoundInPodcasts: t('podcasts.noNotebooksFoundInPodcasts'),
-    sources: t('podcasts.sources'),
-    notes: t('podcasts.notes'),
-    noContentSelected: t('podcasts.noContentSelected'),
-    noSources: t('podcasts.noSources'),
-    untitledSource: t('podcasts.untitledSource'),
-    link: t('podcasts.link'),
-    file: t('podcasts.file'),
-    embedded: t('podcasts.embedded'),
-    notEmbedded: t('podcasts.notEmbedded'),
-    selectMode: t('podcasts.selectMode'),
-    noNotes: t('podcasts.noNotes'),
-    untitledNote: t('podcasts.untitledNote'),
-    commonUpdated: t('common.updated'),
-    summary: t('podcasts.summary'),
-    fullContent: t('podcasts.fullContent'),
-  }
-
-  // Pre-compute source modes once to avoid repeated t.podcasts access in loops
-  const sourceModes = [
-    { value: 'insights', label: tr.summary },
-    { value: 'full', label: tr.fullContent },
-  ] as const
-
-  return (
-    <div className="flex flex-col gap-4">
-      <div className="flex items-center justify-between">
-        <div>
-          <h3 className="text-sm font-semibold uppercase tracking-wide text-muted-foreground">
-            {tr.content}
-          </h3>
-          <p className="text-xs text-muted-foreground">
-            {tr.contentDesc}
-          </p>
-        </div>
-        <div className="flex items-center gap-2">
-          <Badge variant="outline">
-            {tr.itemsSelected.replace(
-              '{count}',
-              selectedNotebookSummaries.reduce(
-                (acc: number, summary: NotebookSummary) => acc + summary.sources + summary.notes,
-                0
-              ).toString()
-            )}
-          </Badge>
-          {(tokenCount > 0 || charCount > 0) && (
-            <span className="text-xs text-muted-foreground">
-              {tokenCount > 0 && tr.tokens.replace('{count}', formatNumber(tokenCount))}
-              {tokenCount > 0 && charCount > 0 && ' / '}
-              {charCount > 0 && tr.chars.replace('{count}', formatNumber(charCount))}
-            </span>
-          )}
-        </div>
-      </div>
-
-      <div className="rounded-lg border bg-muted/30">
-        {isLoading ? (
-          <div className="flex items-center justify-center py-16 text-sm text-muted-foreground">
-            <Loader2 className="mr-2 h-4 w-4 animate-spin" /> {tr.loadingNotebooks}
-          </div>
-        ) : notebooks.length === 0 ? (
-          <div className="p-6 text-sm text-muted-foreground">
-            {tr.noNotebooksFoundInPodcasts}
-          </div>
-        ) : (
-          <ScrollArea className="h-[60vh]">
-            <Accordion
-              type="multiple"
-              value={expandedNotebooks}
-              onValueChange={(value) => setExpandedNotebooks(value as string[])}
-              className="w-full"
-            >
-              {notebooks.map((notebook: NotebookResponse, index: number) => {
-                const sources = sourcesByNotebook[notebook.id] ?? []
-                const notes = notesByNotebook[notebook.id] ?? []
-                const selection = selections[notebook.id]
-                const summary = selectedNotebookSummaries[index]
-                const notebookChecked = summary.sources + summary.notes > 0
-                const totalItems = sources.length + notes.length
-                const isIndeterminate =
-                  notebookChecked &&
-                  summary.sources + summary.notes > 0 &&
-                  summary.sources + summary.notes < totalItems
-
-                return (
-                  <AccordionItem key={notebook.id} value={notebook.id}>
-                    <div className="flex items-start gap-3 px-4 pt-3">
-                      <Checkbox
-                        id={`notebook-toggle-${notebook.id}`}
-                        checked={isIndeterminate ? 'indeterminate' : notebookChecked}
-                        onCheckedChange={(checked) => {
-                          handleNotebookToggle(notebook.id, checked)
-                          queryClient.prefetchQuery({
-                            queryKey: QUERY_KEYS.sources(notebook.id),
-                            queryFn: () => sourcesApi.list({ notebook_id: notebook.id }),
-                          })
-                          queryClient.prefetchQuery({
-                            queryKey: QUERY_KEYS.notes(notebook.id),
-                            queryFn: () => notesApi.list({ notebook_id: notebook.id }),
-                          })
-                        }}
-                        onClick={(event) => event.stopPropagation()}
-                      />
-                      <AccordionTrigger className="flex-1 px-0 py-0 hover:no-underline">
-                        <Label
-                          htmlFor={`notebook-toggle-${notebook.id}`}
-                          className="flex w-full items-center justify-between gap-3 pointer-events-none"
-                        >
-                          <div className="text-left">
-                            <p className="font-medium text-sm text-foreground">
-                              {notebook.name}
-                            </p>
-                            <p className="text-xs text-muted-foreground">
-                              {summary.sources + summary.notes > 0
-                                ? `${summary.sources} ${tr.sources}, ${summary.notes} ${tr.notes}`
-                                : tr.noContentSelected}
-                            </p>
-                          </div>
-                          <Badge variant="outline" className="text-xs">
-                            {sources.length} {tr.sources} · {notes.length} {tr.notes}
-                          </Badge>
-                        </Label>
-                      </AccordionTrigger>
-                    </div>
-                    <AccordionContent>
-                      <div className="space-y-4 px-4 pb-4">
-                        <div className="space-y-2">
-                          <div className="flex items-center justify-between">
-                            <h4 className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                              {tr.sources}
-                            </h4>
-                            {fetchingNotebookIds.has(notebook.id) && (
-                              <Loader2 className="h-3 w-3 animate-spin text-muted-foreground" />
-                            )}
-                          </div>
-                          {sources.length === 0 ? (
-                            <p className="text-xs text-muted-foreground">
-                              {tr.noSources}
-                            </p>
-                          ) : (
-                            <div className="space-y-2">
-                              {sources.map((source: SourceListResponse) => {
-                                const mode = selection?.sources?.[source.id] ?? 'off'
-                                return (
-                                  <div
-                                    key={source.id}
-                                    className="flex items-center gap-3 rounded border bg-background px-3 py-2"
-                                  >
-                                    <Checkbox
-                                      id={`source-selection-${source.id}`}
-                                      checked={mode !== 'off'}
-                                      onCheckedChange={(checked) =>
-                                        handleSourceModeChange(
-                                          notebook.id,
-                                          source.id,
-                                          checked ? getSourceDefaultMode(source) : 'off'
-                                        )
-                                      }
-                                    />
-                                    <Label
-                                      htmlFor={`source-selection-${source.id}`}
-                                      className="flex flex-1 flex-col gap-1 cursor-pointer"
-                                    >
-                                      <span className="text-sm font-medium text-foreground">
-                                        {source.title || tr.untitledSource}
-                                      </span>
-                                      <div className="flex items-center gap-2 text-xs text-muted-foreground">
-                                        <span>{source.asset?.url ? tr.link : tr.file}</span>
-                                        <span>•</span>
-                                        <span>{source.embedded ? tr.embedded : tr.notEmbedded}</span>
-                                      </div>
-                                    </Label>
-                                    <Select
-                                      value={mode === 'off' ? 'off' : mode}
-                                      onValueChange={(value) =>
-                                        handleSourceModeChange(
-                                          notebook.id,
-                                          source.id,
-                                          value as SourceMode
-                                        )
-                                      }
-                                      disabled={mode === 'off'}
-                                    >
-                                      <SelectTrigger className="w-[140px]">
-                                        <SelectValue placeholder={tr.selectMode} />
-                                      </SelectTrigger>
-                                      <SelectContent>
-                                        {sourceModes.map((option) => (
-                                          <SelectItem
-                                            key={option.value}
-                                            value={option.value}
-                                            disabled={
-                                              option.value === 'insights' &&
-                                              (!source.insights_count || source.insights_count === 0)
-                                            }
-                                          >
-                                            {option.label}
-                                          </SelectItem>
-                                        ))}
-                                      </SelectContent>
-                                    </Select>
-                                  </div>
-                                )
-                              })}
-                            </div>
-                          )}
-                        </div>
-
-                        <Separator />
-
-                        <div className="space-y-2">
-                          <h4 className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
-                            {tr.notes}
-                          </h4>
-                          {notes.length === 0 ? (
-                            <p className="text-xs text-muted-foreground">
-                              {tr.noNotes}
-                            </p>
-                          ) : (
-                            <div className="space-y-2">
-                              {notes.map((note: NoteResponse) => {
-                                const mode = selection?.notes?.[note.id] ?? 'off'
-                                return (
-                                  <div
-                                    key={note.id}
-                                    className="flex items-center gap-3 rounded border bg-background px-3 py-2"
-                                  >
-                                    <Checkbox
-                                      id={`note-selection-${note.id}`}
-                                      checked={mode !== 'off'}
-                                      onCheckedChange={(checked) =>
-                                        handleNoteToggle(
-                                          notebook.id,
-                                          note.id,
-                                          Boolean(checked)
-                                        )
-                                      }
-                                    />
-                                    <Label
-                                      htmlFor={`note-selection-${note.id}`}
-                                      className="flex flex-1 flex-col cursor-pointer"
-                                    >
-                                      <span className="text-sm font-medium text-foreground">
-                                        {note.title || tr.untitledNote}
-                                      </span>
-                                      <span className="text-xs text-muted-foreground">
-                                        {tr.commonUpdated}{' '}
-                                        {new Date(note.updated).toLocaleString(
-                                          language.startsWith('zh') ? language : 'en-US'
-                                        )}
-                                      </span>
-                                    </Label>
-                                  </div>
-                                )
-                              })}
-                            </div>
-                          )}
-                        </div>
-                      </div>
-                    </AccordionContent>
-                  </AccordionItem>
-                )
-              })}
-            </Accordion>
-          </ScrollArea>
-        )}
-      </div>
-    </div>
-  )
-}
-
 export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDialogProps) {
   const { t } = useTranslation()
   const { toast } = useToast()
-  const queryClient = useQueryClient()
   const [expandedNotebooks, setExpandedNotebooks] = useState<string[]>([])
   const [selections, setSelections] = useState<Record<string, NotebookSelection>>({})
   const [episodeProfileId, setEpisodeProfileId] = useState<string>('')
@@ -553,59 +201,42 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
     }
   }, [open, resetState])
 
-  // Update token/char counts when selections change
+  // Generation counter: any newer effect run invalidates in-flight count requests,
+  // so a slow, stale response can never overwrite a fresher one.
+  const countRequestIdRef = useRef(0)
+
+  // Update token/char counts when selections change (debounced + stale-guarded)
   useEffect(() => {
+    const requestId = ++countRequestIdRef.current
+
     if (!open) {
       return
     }
 
-    const updateContextCounts = async () => {
-      // Check if there are any selections
-      const hasAnySelections = Object.values(selections).some((selection) =>
-        Object.values(selection.sources).some((mode) => mode !== 'off') ||
-        Object.values(selection.notes).some((mode) => mode !== 'off')
-      )
+    const configs = selectionsToContextConfigs(selections)
 
-      if (!hasAnySelections) {
-        setTokenCount(0)
-        setCharCount(0)
-        return
-      }
+    if (configs.length === 0) {
+      setTokenCount(0)
+      setCharCount(0)
+      return
+    }
 
+    const timer = setTimeout(async () => {
       try {
         let totalTokens = 0
         let totalChars = 0
 
         // Build context for each notebook and sum up counts
-        for (const [notebookId, selection] of Object.entries(selections)) {
-          const sourcesConfig = Object.entries(selection.sources)
-            .filter(([, mode]) => mode !== 'off')
-            .reduce<Record<string, string>>((acc, [sourceId, mode]) => {
-              const normalizedId = sourceId.replace(/^source:/, '')
-              acc[normalizedId] = mode === 'insights' ? 'insights' : 'full content'
-              return acc
-            }, {})
-
-          const notesConfig = Object.entries(selection.notes)
-            .filter(([, mode]) => mode !== 'off')
-            .reduce<Record<string, string>>((acc, [noteId]) => {
-              const normalizedId = noteId.replace(/^note:/, '')
-              acc[normalizedId] = 'full content'
-              return acc
-            }, {})
-
-          if (Object.keys(sourcesConfig).length === 0 && Object.keys(notesConfig).length === 0) {
-            continue
-          }
-
+        for (const { notebookId, contextConfig } of configs) {
           const response = await chatApi.buildContext({
             notebook_id: notebookId,
-            context_config: {
-              sources: sourcesConfig,
-              notes: notesConfig,
-            },
+            context_config: contextConfig,
           })
 
+          if (requestId !== countRequestIdRef.current) {
+            return
+          }
+
           totalTokens += response.token_count
           totalChars += response.char_count
         }
@@ -613,12 +244,14 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
         setTokenCount(totalTokens)
         setCharCount(totalChars)
       } catch (error) {
-        console.error('Error updating context counts:', error)
-        // Don't reset counts on error, keep previous values
+        if (requestId === countRequestIdRef.current) {
+          console.error('Error updating context counts:', error)
+          // Don't reset counts on error, keep previous values
+        }
       }
-    }
+    }, TOKEN_COUNT_DEBOUNCE_MS)
 
-    updateContextCounts()
+    return () => clearTimeout(timer)
   }, [open, selections])
 
   const selectedEpisodeProfile = useMemo(() => {
@@ -724,40 +357,7 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
   const buildContentFromSelections = useCallback(async () => {
     const parts: string[] = []
 
-    const tasks: Array<{ notebookId: string; payload: BuildContextRequest }> = []
-
-    Object.entries(selections).forEach(([notebookId, selection]) => {
-      const sourcesConfig = Object.entries(selection.sources)
-        .filter(([, mode]) => mode !== 'off')
-        .reduce<Record<string, string>>((acc, [sourceId, mode]) => {
-          const normalizedId = sourceId.replace(/^source:/, '')
-          acc[normalizedId] = mode === 'insights' ? 'insights' : 'full content'
-          return acc
-        }, {})
-
-      const notesConfig = Object.entries(selection.notes)
-        .filter(([, mode]) => mode !== 'off')
-        .reduce<Record<string, string>>((acc, [noteId]) => {
-          const normalizedId = noteId.replace(/^note:/, '')
-          acc[normalizedId] = 'full content'
-          return acc
-        }, {})
-
-      if (Object.keys(sourcesConfig).length === 0 && Object.keys(notesConfig).length === 0) {
-        return
-      }
-
-      tasks.push({
-        notebookId,
-        payload: {
-          notebook_id: notebookId,
-          context_config: {
-            sources: sourcesConfig,
-            notes: notesConfig,
-          },
-        },
-      })
-    })
+    const tasks = selectionsToContextConfigs(selections)
 
     if (tasks.length === 0) {
       return ''
@@ -765,7 +365,10 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
 
     for (const task of tasks) {
       try {
-        const response = await chatApi.buildContext(task.payload)
+        const response = await chatApi.buildContext({
+          notebook_id: task.notebookId,
+          context_config: task.contextConfig,
+        })
         const notebookName = notebooks.find((nb) => nb.id === task.notebookId)?.name ?? task.notebookId
         const contextString = JSON.stringify(response.context, null, 2)
         const snippet = `${t('common.notebookLabel').replace('{name}', notebookName)}\n${contextString}`
@@ -818,6 +421,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
         briefing_suffix: instructions.trim() ? instructions.trim() : undefined,
       }
 
+      // mutateAsync resolves only after the mutation's onSuccess handler has
+      // awaited the episode list refetch, so it is safe to close immediately.
       await generatePodcast.mutateAsync(payload)
 
       toast({
@@ -825,11 +430,8 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
         description: t('podcasts.podcastTaskStarted'),
       })
 
-      // Delay closing dialog slightly to ensure refetch completes
-      setTimeout(() => {
-        onOpenChange(false)
-        resetState()
-      }, 500)
+      onOpenChange(false)
+      resetState()
     } catch (error) {
       console.error('Failed to generate podcast', error)
       toast({
@@ -882,10 +484,9 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
             sourcesByNotebook={sourcesByNotebook}
             notesByNotebook={notesByNotebook}
             fetchingNotebookIds={fetchingNotebookIds}
-            handleNotebookToggle={handleNotebookToggle}
-            handleSourceModeChange={handleSourceModeChange}
-            handleNoteToggle={handleNoteToggle}
-            queryClient={queryClient}
+            onNotebookToggle={handleNotebookToggle}
+            onSourceModeChange={handleSourceModeChange}
+            onNoteToggle={handleNoteToggle}
           />
 
           <div className="space-y-6">
diff --git a/frontend/src/components/podcasts/generate-podcast-selection.ts b/frontend/src/components/podcasts/generate-podcast-selection.ts
new file mode 100644
index 00000000..15deebe3
--- /dev/null
+++ b/frontend/src/components/podcasts/generate-podcast-selection.ts
@@ -0,0 +1,89 @@
+import { SourceListResponse } from '@/lib/types/api'
+
+export type SourceMode = 'off' | 'insights' | 'full'
+
+export interface NotebookSelection {
+  sources: Record<string, SourceMode>
+  notes: Record<string, SourceMode>
+}
+
+export interface NotebookSummary {
+  notebookId: string
+  sources: number
+  notes: number
+}
+
+export interface NotebookContextConfig {
+  notebookId: string
+  contextConfig: {
+    sources: Record<string, string>
+    notes: Record<string, string>
+  }
+}
+
+// Helper function to format large numbers with K/M suffixes
+export function formatNumber(num: number): string {
+  if (num >= 1000000) {
+    return `${(num / 1000000).toFixed(1)}M`
+  }
+  if (num >= 1000) {
+    return `${(num / 1000).toFixed(1)}K`
+  }
+  return num.toString()
+}
+
+export function hasSelections(selection?: NotebookSelection): boolean {
+  if (!selection) {
+    return false
+  }
+  return (
+    Object.values(selection.sources).some((mode) => mode !== 'off') ||
+    Object.values(selection.notes).some((mode) => mode !== 'off')
+  )
+}
+
+export function getSourceDefaultMode(source: SourceListResponse): SourceMode {
+  return source.insights_count && source.insights_count > 0 ? 'insights' : 'full'
+}
+
+/**
+ * Convert the per-notebook selection state into build-context configs,
+ * skipping notebooks with no active selections.
+ */
+export function selectionsToContextConfigs(
+  selections: Record<string, NotebookSelection>
+): NotebookContextConfig[] {
+  const configs: NotebookContextConfig[] = []
+
+  Object.entries(selections).forEach(([notebookId, selection]) => {
+    const sourcesConfig = Object.entries(selection.sources)
+      .filter(([, mode]) => mode !== 'off')
+      .reduce<Record<string, string>>((acc, [sourceId, mode]) => {
+        const normalizedId = sourceId.replace(/^source:/, '')
+        acc[normalizedId] = mode === 'insights' ? 'insights' : 'full content'
+        return acc
+      }, {})
+
+    const notesConfig = Object.entries(selection.notes)
+      .filter(([, mode]) => mode !== 'off')
+      .reduce<Record<string, string>>((acc, [noteId]) => {
+        const normalizedId = noteId.replace(/^note:/, '')
+        acc[normalizedId] = 'full content'
+        return acc
+      }, {})
+
+    if (Object.keys(sourcesConfig).length === 0 && Object.keys(notesConfig).length === 0) {
+      return
+    }
+
+    configs.push({
+      notebookId,
+      contextConfig: {
+        sources: sourcesConfig,
+        notes: notesConfig,
+      },
+    })
+  })
+
+  return configs
+}

From 9a534644bb6710d900606820b1e4e872dca46014 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:54:46 -0300
Subject: [PATCH 172/345] refactor(ai): table-driven model discovery, real
 Anthropic listing (#1070)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Collapse the eight structurally identical OpenAI-compatible provider
discovery functions (openai, groq, mistral, deepseek, xai, openrouter,
dashscope, minimax) into one generic discover_openai_compatible_provider()
driven by an OPENAI_COMPAT_PROVIDERS spec table. Per-provider quirks
(Mistral capability flags, OpenRouter fixed type + description) are kept
as optional hooks on the spec. Module-level function names and
PROVIDER_DISCOVERY_FUNCTIONS keys are preserved.

Replace the stale hardcoded Anthropic model list (claude-3 era) with
real discovery via GET https://api.anthropic.com/v1/models (paginated,
x-api-key + anthropic-version headers) — the comment claiming Anthropic
has no listing API was wrong. Keep a refreshed static fallback
(ANTHROPIC_FALLBACK_MODELS, current Claude 4.x/5 aliases) for when the
API call fails, and reuse the same fetch-with-fallback in the
credential-based discovery path in api/credentials_service.py, which
carried a second copy of the stale list.

Add tests covering the table-driven path, provider quirks, Anthropic
pagination/headers, and the fallback behavior (all HTTP mocked).
---
 CHANGELOG.md                        |   4 +
 api/credentials_service.py          |  27 +-
 open_notebook/ai/model_discovery.py | 458 +++++++++++-----------------
 tests/test_model_discovery.py       | 295 ++++++++++++++++++
 4 files changed, 492 insertions(+), 292 deletions(-)
 create mode 100644 tests/test_model_discovery.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 077ba028..8dffb967 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,10 +18,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
 
 ### Changed
+- Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks)
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
 - Frontend locale files are now type-checked at compile time: every non-en-US locale declares `satisfies TranslationShape` (derived from the en-US object), so a missing or extra i18n key fails `tsc` in the editor instead of only the runtime parity test. Also removed two unused frontend dependencies (`next-themes`, `@monaco-editor/react`) and fixed `frontend/AGENTS.md` drift (14 locales, not 7; dark mode is the hand-rolled zustand theme-store, not next-themes)
 
+### Fixed
+- Anthropic models are now discovered live from `GET https://api.anthropic.com/v1/models` (paginated) instead of a hardcoded claude-3-era list — the code comment claiming "Anthropic doesn't have a model listing API" was wrong. A refreshed static list (current Claude 4.x/5 aliases) remains as a fallback when the API call fails, and the credential-based discovery path (`discover_with_config`) uses the same live-with-fallback logic
+
 ### Removed
 - Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
 - Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist
diff --git a/api/credentials_service.py b/api/credentials_service.py
index a8af76ad..48a8cb7e 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -15,7 +15,11 @@ from loguru import logger
 from pydantic import SecretStr
 
 from api.models import CredentialResponse
-from open_notebook.ai.model_discovery import classify_model_type
+from open_notebook.ai.model_discovery import (
+    ANTHROPIC_FALLBACK_MODELS,
+    classify_model_type,
+    fetch_anthropic_model_ids,
+)
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
 from open_notebook.utils.url_validation import validate_url
@@ -385,15 +389,6 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
 
     # Static model lists for providers without a listing API
     STATIC_MODELS: Dict[str, List[str]] = {
-        "anthropic": [
-            "claude-opus-4-20250514",
-            "claude-sonnet-4-20250514",
-            "claude-3-5-sonnet-20241022",
-            "claude-3-5-haiku-20241022",
-            "claude-3-opus-20240229",
-            "claude-3-sonnet-20240229",
-            "claude-3-haiku-20240307",
-        ],
         "voyage": [
             "voyage-3", "voyage-3-lite", "voyage-code-3",
             "voyage-finance-2", "voyage-law-2", "voyage-multilingual-2",
@@ -419,6 +414,18 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             for m in STATIC_MODELS[provider]
         ]
 
+    if provider == "anthropic":
+        if not api_key:
+            return []
+        try:
+            model_names = await fetch_anthropic_model_ids(api_key)
+        except Exception as e:
+            logger.warning(
+                f"Failed to discover Anthropic models, using static fallback: {e}"
+            )
+            model_names = list(ANTHROPIC_FALLBACK_MODELS)
+        return [{"name": m, "provider": "anthropic"} for m in model_names]
+
     # API-based discovery URLs (OpenAI-style /models endpoints)
     url_map = {
         "openai": "https://api.openai.com/v1/models",
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 3527faae..54efafd1 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -8,7 +8,7 @@ AI providers and automatically register them in the database.
 import asyncio
 import os
 from dataclasses import dataclass
-from typing import Dict, List, Optional, Tuple
+from typing import Awaitable, Callable, Dict, List, Optional, Tuple
 
 import httpx
 from loguru import logger
@@ -51,18 +51,18 @@ OPENAI_MODEL_TYPES = {
     "text_to_speech": ["tts"],
 }
 
-ANTHROPIC_MODELS = {
-    # Static list since Anthropic doesn't have a model listing API
-    "language": [
-        "claude-opus-4-20250514",
-        "claude-sonnet-4-20250514",
-        "claude-3-5-sonnet-20241022",
-        "claude-3-5-haiku-20241022",
-        "claude-3-opus-20240229",
-        "claude-3-sonnet-20240229",
-        "claude-3-haiku-20240307",
-    ],
-}
+# Fallback list used only when Anthropic's model listing API
+# (GET https://api.anthropic.com/v1/models) is unreachable or errors.
+ANTHROPIC_FALLBACK_MODELS = [
+    "claude-opus-4-8",
+    "claude-opus-4-7",
+    "claude-opus-4-6",
+    "claude-opus-4-5",
+    "claude-sonnet-5",
+    "claude-sonnet-4-6",
+    "claude-sonnet-4-5",
+    "claude-haiku-4-5",
+]
 
 GOOGLE_MODEL_TYPES = {
     "language": ["gemini", "palm", "bison", "chat"],
@@ -191,13 +191,77 @@ def classify_model_type(model_name: str, provider: str) -> str:
 
 
 # =============================================================================
-# Provider-Specific Model Discovery Functions
+# OpenAI-Compatible Provider Discovery (table-driven)
 # =============================================================================
+# All of these providers expose the same endpoint shape:
+#   GET {url} with "Authorization: Bearer {key}" -> {"data": [{"id": ...}, ...]}
+# Only the URL, the env var holding the key, and small per-provider quirks
+# differ, so they share one generic discovery function driven by this table.
 
 
-async def discover_openai_models() -> List[DiscoveredModel]:
-    """Fetch available models from OpenAI API."""
-    api_key = os.environ.get("OPENAI_API_KEY")
+def _classify_mistral(model: dict) -> str:
+    """Mistral quirk: trust the capabilities flag over name-based patterns."""
+    if model.get("capabilities", {}).get("completion_chat"):
+        return "language"
+    return classify_model_type(model.get("id", ""), "mistral")
+
+
+@dataclass(frozen=True)
+class ProviderDiscoverySpec:
+    """Spec for a provider with an OpenAI-compatible /models endpoint."""
+
+    url: str
+    env_var: str
+    # Optional quirk hooks; defaults are classify_model_type(id, provider)
+    # and no description.
+    classify: Optional[Callable[[dict], str]] = None
+    description: Optional[Callable[[dict], Optional[str]]] = None
+
+
+OPENAI_COMPAT_PROVIDERS: Dict[str, ProviderDiscoverySpec] = {
+    "openai": ProviderDiscoverySpec(
+        url="https://api.openai.com/v1/models",
+        env_var="OPENAI_API_KEY",
+    ),
+    "groq": ProviderDiscoverySpec(
+        url="https://api.groq.com/openai/v1/models",
+        env_var="GROQ_API_KEY",
+    ),
+    "mistral": ProviderDiscoverySpec(
+        url="https://api.mistral.ai/v1/models",
+        env_var="MISTRAL_API_KEY",
+        classify=_classify_mistral,
+    ),
+    "deepseek": ProviderDiscoverySpec(
+        url="https://api.deepseek.com/models",
+        env_var="DEEPSEEK_API_KEY",
+    ),
+    "xai": ProviderDiscoverySpec(
+        url="https://api.x.ai/v1/models",
+        env_var="XAI_API_KEY",
+    ),
+    "openrouter": ProviderDiscoverySpec(
+        url="https://openrouter.ai/api/v1/models",
+        env_var="OPENROUTER_API_KEY",
+        # OpenRouter models are typically language models
+        classify=lambda model: "language",
+        description=lambda model: model.get("name"),
+    ),
+    "dashscope": ProviderDiscoverySpec(
+        url="https://dashscope.aliyuncs.com/compatible-mode/v1/models",
+        env_var="DASHSCOPE_API_KEY",
+    ),
+    "minimax": ProviderDiscoverySpec(
+        url="https://api.minimax.io/v1/models",
+        env_var="MINIMAX_API_KEY",
+    ),
+}
+
+
+async def discover_openai_compatible_provider(provider: str) -> List[DiscoveredModel]:
+    """Fetch available models from a provider with an OpenAI-compatible API."""
+    spec = OPENAI_COMPAT_PROVIDERS[provider]
+    api_key = os.environ.get(spec.env_var)
     if not api_key:
         return []
 
@@ -205,7 +269,7 @@ async def discover_openai_models() -> List[DiscoveredModel]:
     try:
         async with httpx.AsyncClient() as client:
             response = await client.get(
-                "https://api.openai.com/v1/models",
+                spec.url,
                 headers={"Authorization": f"Bearer {api_key}"},
                 timeout=30.0,
             )
@@ -214,38 +278,112 @@ async def discover_openai_models() -> List[DiscoveredModel]:
 
             for model in data.get("data", []):
                 model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "openai")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="openai",
-                            model_type=model_type,
-                        )
+                if not model_id:
+                    continue
+                if spec.classify is not None:
+                    model_type = spec.classify(model)
+                else:
+                    model_type = classify_model_type(model_id, provider)
+                description = (
+                    spec.description(model) if spec.description is not None else None
+                )
+                models.append(
+                    DiscoveredModel(
+                        name=model_id,
+                        provider=provider,
+                        model_type=model_type,
+                        description=description,
                     )
+                )
     except Exception as e:
-        logger.warning(f"Failed to discover OpenAI models: {e}")
+        logger.warning(f"Failed to discover {provider} models: {e}")
 
     return models
 
 
+def _make_openai_compat_discoverer(
+    provider: str,
+) -> Callable[[], Awaitable[List[DiscoveredModel]]]:
+    async def _discover() -> List[DiscoveredModel]:
+        return await discover_openai_compatible_provider(provider)
+
+    _discover.__name__ = f"discover_{provider}_models"
+    _discover.__doc__ = f"Fetch available models from the {provider} API."
+    return _discover
+
+
+# Kept as module-level names so existing imports/patches keep working.
+discover_openai_models = _make_openai_compat_discoverer("openai")
+discover_groq_models = _make_openai_compat_discoverer("groq")
+discover_mistral_models = _make_openai_compat_discoverer("mistral")
+discover_deepseek_models = _make_openai_compat_discoverer("deepseek")
+discover_xai_models = _make_openai_compat_discoverer("xai")
+discover_openrouter_models = _make_openai_compat_discoverer("openrouter")
+discover_dashscope_models = _make_openai_compat_discoverer("dashscope")
+discover_minimax_models = _make_openai_compat_discoverer("minimax")
+
+
+# =============================================================================
+# Bespoke Provider Discovery Functions
+# =============================================================================
+
+
+async def fetch_anthropic_model_ids(api_key: str) -> List[str]:
+    """
+    Fetch model ids from Anthropic's model listing API.
+
+    Uses GET https://api.anthropic.com/v1/models with pagination
+    (after_id/has_more cursors). Raises on any HTTP or network error —
+    callers decide whether to fall back to ANTHROPIC_FALLBACK_MODELS.
+    """
+    model_ids: List[str] = []
+    params: Dict[str, str] = {"limit": "100"}
+    async with httpx.AsyncClient() as client:
+        # Hard page cap as a safety net against a misbehaving cursor.
+        for _ in range(20):
+            response = await client.get(
+                "https://api.anthropic.com/v1/models",
+                headers={
+                    "x-api-key": api_key,
+                    "anthropic-version": "2023-06-01",
+                },
+                params=params,
+                timeout=30.0,
+            )
+            response.raise_for_status()
+            data = response.json()
+            for model in data.get("data", []):
+                model_id = model.get("id", "")
+                if model_id:
+                    model_ids.append(model_id)
+            if not data.get("has_more") or not data.get("last_id"):
+                break
+            params["after_id"] = data["last_id"]
+    return model_ids
+
+
 async def discover_anthropic_models() -> List[DiscoveredModel]:
-    """Return static list of Anthropic models (no discovery API available)."""
+    """Fetch available models from Anthropic's model listing API."""
     api_key = os.environ.get("ANTHROPIC_API_KEY")
     if not api_key:
         return []
 
-    # Anthropic doesn't have a model listing API, so we use a static list
-    models = []
-    for model_name in ANTHROPIC_MODELS.get("language", []):
-        models.append(
-            DiscoveredModel(
-                name=model_name,
-                provider="anthropic",
-                model_type="language",
-            )
+    try:
+        model_names = await fetch_anthropic_model_ids(api_key)
+    except Exception as e:
+        logger.warning(
+            f"Failed to discover Anthropic models, using static fallback: {e}"
         )
-    return models
+        model_names = list(ANTHROPIC_FALLBACK_MODELS)
+
+    return [
+        DiscoveredModel(
+            name=model_name,
+            provider="anthropic",
+            model_type=classify_model_type(model_name, "anthropic"),
+        )
+        for model_name in model_names
+    ]
 
 
 async def discover_google_models() -> List[DiscoveredModel]:
@@ -324,182 +462,6 @@ async def discover_ollama_models() -> List[DiscoveredModel]:
     return models
 
 
-async def discover_groq_models() -> List[DiscoveredModel]:
-    """Fetch available models from Groq API."""
-    api_key = os.environ.get("GROQ_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://api.groq.com/openai/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "groq")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="groq",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover Groq models: {e}")
-
-    return models
-
-
-async def discover_mistral_models() -> List[DiscoveredModel]:
-    """Fetch available models from Mistral API."""
-    api_key = os.environ.get("MISTRAL_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://api.mistral.ai/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "mistral")
-                    # Check capabilities if available
-                    capabilities = model.get("capabilities", {})
-                    if capabilities.get("completion_chat"):
-                        model_type = "language"
-
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="mistral",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover Mistral models: {e}")
-
-    return models
-
-
-async def discover_deepseek_models() -> List[DiscoveredModel]:
-    """Fetch available models from DeepSeek API."""
-    api_key = os.environ.get("DEEPSEEK_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://api.deepseek.com/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "deepseek")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="deepseek",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover DeepSeek models: {e}")
-
-    return models
-
-
-async def discover_xai_models() -> List[DiscoveredModel]:
-    """Fetch available models from xAI API."""
-    api_key = os.environ.get("XAI_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://api.x.ai/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "xai")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="xai",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover xAI models: {e}")
-
-    return models
-
-
-async def discover_openrouter_models() -> List[DiscoveredModel]:
-    """Fetch available models from OpenRouter API."""
-    api_key = os.environ.get("OPENROUTER_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://openrouter.ai/api/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    # OpenRouter models are typically language models
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="openrouter",
-                            model_type="language",
-                            description=model.get("name"),
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover OpenRouter models: {e}")
-
-    return models
-
-
 async def discover_voyage_models() -> List[DiscoveredModel]:
     """Return static list of Voyage AI models (embedding only)."""
     api_key = os.environ.get("VOYAGE_API_KEY")
@@ -579,74 +541,6 @@ async def discover_deepgram_models() -> List[DiscoveredModel]:
     ]
 
 
-async def discover_dashscope_models() -> List[DiscoveredModel]:
-    """Fetch available models from DashScope (Qwen) API."""
-    api_key = os.environ.get("DASHSCOPE_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "dashscope")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="dashscope",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover DashScope models: {e}")
-
-    return models
-
-
-async def discover_minimax_models() -> List[DiscoveredModel]:
-    """Fetch available models from MiniMax API."""
-    api_key = os.environ.get("MINIMAX_API_KEY")
-    if not api_key:
-        return []
-
-    models = []
-    try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                "https://api.minimax.io/v1/models",
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
-            response.raise_for_status()
-            data = response.json()
-
-            for model in data.get("data", []):
-                model_id = model.get("id", "")
-                if model_id:
-                    model_type = classify_model_type(model_id, "minimax")
-                    models.append(
-                        DiscoveredModel(
-                            name=model_id,
-                            provider="minimax",
-                            model_type=model_type,
-                        )
-                    )
-    except Exception as e:
-        logger.warning(f"Failed to discover MiniMax models: {e}")
-
-    return models
-
-
 async def discover_openai_compatible_models() -> List[DiscoveredModel]:
     """
     Fetch available models from an OpenAI-compatible API endpoint.
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
new file mode 100644
index 00000000..c29208ff
--- /dev/null
+++ b/tests/test_model_discovery.py
@@ -0,0 +1,295 @@
+"""
+Tests for open_notebook.ai.model_discovery.
+
+Covers the table-driven OpenAI-compatible discovery path and the
+Anthropic model-listing API discovery (with static fallback).
+All HTTP calls are mocked — no real provider APIs are hit.
+"""
+
+import httpx
+import pytest
+
+from open_notebook.ai import model_discovery
+from open_notebook.ai.model_discovery import (
+    ANTHROPIC_FALLBACK_MODELS,
+    OPENAI_COMPAT_PROVIDERS,
+    PROVIDER_DISCOVERY_FUNCTIONS,
+    discover_anthropic_models,
+    discover_openai_compatible_provider,
+)
+
+
+def make_fake_client(handler):
+    """Build a fake httpx.AsyncClient class whose .get() delegates to handler."""
+
+    class FakeAsyncClient:
+        async def __aenter__(self):
+            return self
+
+        async def __aexit__(self, exc_type, exc, tb):
+            return None
+
+        async def get(self, url, headers=None, params=None, timeout=None):
+            return handler(url=url, headers=headers, params=params, timeout=timeout)
+
+    return FakeAsyncClient
+
+
+def json_response(url, payload, status_code=200):
+    return httpx.Response(
+        status_code, json=payload, request=httpx.Request("GET", url)
+    )
+
+
+class TestOpenAICompatTable:
+    """The provider table must keep covering every collapsed provider."""
+
+    def test_table_covers_all_openai_compatible_providers(self):
+        assert set(OPENAI_COMPAT_PROVIDERS) == {
+            "openai",
+            "groq",
+            "mistral",
+            "deepseek",
+            "xai",
+            "openrouter",
+            "dashscope",
+            "minimax",
+        }
+
+    def test_provider_discovery_functions_keys_unchanged(self):
+        assert set(PROVIDER_DISCOVERY_FUNCTIONS) == {
+            "openai",
+            "anthropic",
+            "google",
+            "ollama",
+            "groq",
+            "mistral",
+            "deepseek",
+            "xai",
+            "openrouter",
+            "voyage",
+            "elevenlabs",
+            "deepgram",
+            "openai_compatible",
+            "dashscope",
+            "minimax",
+            "azure",
+            "vertex",
+        }
+        # Azure/Vertex intentionally have no env-based discovery
+        assert PROVIDER_DISCOVERY_FUNCTIONS["azure"] is None
+        assert PROVIDER_DISCOVERY_FUNCTIONS["vertex"] is None
+
+    def test_module_level_names_preserved(self):
+        for provider in OPENAI_COMPAT_PROVIDERS:
+            func = getattr(model_discovery, f"discover_{provider}_models")
+            assert callable(func)
+            assert PROVIDER_DISCOVERY_FUNCTIONS[provider] is func
+
+
+class TestGenericOpenAICompatDiscovery:
+    @pytest.mark.asyncio
+    async def test_discovery_uses_spec_url_and_bearer_key(self, monkeypatch):
+        requests = []
+
+        def handler(url, headers, params, timeout):
+            requests.append({"url": url, "headers": headers, "timeout": timeout})
+            return json_response(
+                url, {"data": [{"id": "whisper-large-v3"}, {"id": "llama-3.3-70b"}]}
+            )
+
+        monkeypatch.setenv("GROQ_API_KEY", "gsk-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_openai_compatible_provider("groq")
+
+        assert requests == [
+            {
+                "url": "https://api.groq.com/openai/v1/models",
+                "headers": {"Authorization": "Bearer gsk-test"},
+                "timeout": 30.0,
+            }
+        ]
+        assert [(m.name, m.provider, m.model_type) for m in models] == [
+            ("whisper-large-v3", "groq", "speech_to_text"),
+            ("llama-3.3-70b", "groq", "language"),
+        ]
+
+    @pytest.mark.asyncio
+    async def test_missing_env_key_returns_empty(self, monkeypatch):
+        monkeypatch.delenv("DEEPSEEK_API_KEY", raising=False)
+        assert await discover_openai_compatible_provider("deepseek") == []
+
+    @pytest.mark.asyncio
+    async def test_http_error_returns_empty(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(url, {"error": "nope"}, status_code=500)
+
+        monkeypatch.setenv("XAI_API_KEY", "xai-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        assert await discover_openai_compatible_provider("xai") == []
+
+    @pytest.mark.asyncio
+    async def test_mistral_capabilities_quirk(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(
+                url,
+                {
+                    "data": [
+                        # capabilities flag wins over name-based classification
+                        {"id": "magistral-medium", "capabilities": {"completion_chat": True}},
+                        # no chat capability -> falls back to name patterns
+                        {"id": "mistral-embed", "capabilities": {"completion_chat": False}},
+                    ]
+                },
+            )
+
+        monkeypatch.setenv("MISTRAL_API_KEY", "mk-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_openai_compatible_provider("mistral")
+        assert [(m.name, m.model_type) for m in models] == [
+            ("magistral-medium", "language"),
+            ("mistral-embed", "embedding"),
+        ]
+
+    @pytest.mark.asyncio
+    async def test_openrouter_quirk_language_and_description(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(
+                url,
+                {"data": [{"id": "acme/embedding-x", "name": "Acme Embedding X"}]},
+            )
+
+        monkeypatch.setenv("OPENROUTER_API_KEY", "or-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_openai_compatible_provider("openrouter")
+        assert len(models) == 1
+        # OpenRouter models are always registered as language models
+        assert models[0].model_type == "language"
+        assert models[0].description == "Acme Embedding X"
+
+
+class TestAnthropicDiscovery:
+    @pytest.mark.asyncio
+    async def test_missing_key_returns_empty(self, monkeypatch):
+        monkeypatch.delenv("ANTHROPIC_API_KEY", raising=False)
+        assert await discover_anthropic_models() == []
+
+    @pytest.mark.asyncio
+    async def test_discovery_paginates_and_sends_anthropic_headers(self, monkeypatch):
+        requests = []
+
+        def handler(url, headers, params, timeout):
+            requests.append({"url": url, "headers": headers, "params": dict(params)})
+            if "after_id" not in params:
+                return json_response(
+                    url,
+                    {
+                        "data": [{"id": "claude-opus-4-8"}],
+                        "has_more": True,
+                        "last_id": "claude-opus-4-8",
+                    },
+                )
+            return json_response(
+                url,
+                {
+                    "data": [{"id": "claude-haiku-4-5"}],
+                    "has_more": False,
+                    "last_id": "claude-haiku-4-5",
+                },
+            )
+
+        monkeypatch.setenv("ANTHROPIC_API_KEY", "sk-ant-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_anthropic_models()
+
+        assert len(requests) == 2
+        assert all(
+            r["url"] == "https://api.anthropic.com/v1/models" for r in requests
+        )
+        assert requests[0]["headers"] == {
+            "x-api-key": "sk-ant-test",
+            "anthropic-version": "2023-06-01",
+        }
+        assert requests[1]["params"]["after_id"] == "claude-opus-4-8"
+
+        assert [(m.name, m.provider, m.model_type) for m in models] == [
+            ("claude-opus-4-8", "anthropic", "language"),
+            ("claude-haiku-4-5", "anthropic", "language"),
+        ]
+
+    @pytest.mark.asyncio
+    async def test_api_failure_falls_back_to_static_list(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(url, {"error": "boom"}, status_code=500)
+
+        monkeypatch.setenv("ANTHROPIC_API_KEY", "sk-ant-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_anthropic_models()
+
+        assert [m.name for m in models] == list(ANTHROPIC_FALLBACK_MODELS)
+        assert all(m.provider == "anthropic" for m in models)
+        assert all(m.model_type == "language" for m in models)
+
+
+class TestCredentialServiceAnthropicDiscovery:
+    """discover_with_config must use the same live-API-with-fallback path."""
+
+    @pytest.mark.asyncio
+    async def test_discover_with_config_uses_anthropic_api(self, monkeypatch):
+        from api import credentials_service
+
+        def handler(url, headers, params, timeout):
+            assert url == "https://api.anthropic.com/v1/models"
+            return json_response(
+                url, {"data": [{"id": "claude-sonnet-4-6"}], "has_more": False}
+            )
+
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await credentials_service.discover_with_config(
+            "anthropic", {"api_key": "sk-ant-test"}
+        )
+        assert models == [{"name": "claude-sonnet-4-6", "provider": "anthropic"}]
+
+    @pytest.mark.asyncio
+    async def test_discover_with_config_falls_back_on_error(self, monkeypatch):
+        from api import credentials_service
+
+        def handler(url, headers, params, timeout):
+            return json_response(url, {"error": "boom"}, status_code=503)
+
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await credentials_service.discover_with_config(
+            "anthropic", {"api_key": "sk-ant-test"}
+        )
+        assert [m["name"] for m in models] == list(ANTHROPIC_FALLBACK_MODELS)
+
+    @pytest.mark.asyncio
+    async def test_discover_with_config_requires_key(self):
+        from api import credentials_service
+
+        models = await credentials_service.discover_with_config("anthropic", {})
+        assert models == []

From f6f7265e82907a1179c2d757d63602b0a236e73b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 18:57:53 -0300
Subject: [PATCH 173/345] refactor(frontend): split api-keys settings page into
 components (#1065)

* refactor(frontend): split api-keys settings page into components

* test: point ALL_PROVIDERS cross-check at lib/providers.tsx
---
 CHANGELOG.md                                  |    1 +
 .../(dashboard)/settings/api-keys/page.tsx    | 1314 +----------------
 .../settings/CredentialFormDialog.tsx         |  270 ++++
 .../components/settings/CredentialItem.tsx    |  246 +++
 .../settings/DefaultModelSelectors.tsx        |  227 +++
 .../settings/DeleteCredentialDialog.tsx       |  120 ++
 .../settings/DiscoverModelsDialog.tsx         |  280 ++++
 .../components/settings/ProviderSection.tsx   |  118 ++
 frontend/src/components/settings/index.ts     |    6 +
 frontend/src/lib/providers.tsx                |   95 ++
 tests/test_credential_provider_validation.py  |    7 +-
 11 files changed, 1375 insertions(+), 1309 deletions(-)
 create mode 100644 frontend/src/components/settings/CredentialFormDialog.tsx
 create mode 100644 frontend/src/components/settings/CredentialItem.tsx
 create mode 100644 frontend/src/components/settings/DefaultModelSelectors.tsx
 create mode 100644 frontend/src/components/settings/DeleteCredentialDialog.tsx
 create mode 100644 frontend/src/components/settings/DiscoverModelsDialog.tsx
 create mode 100644 frontend/src/components/settings/ProviderSection.tsx
 create mode 100644 frontend/src/lib/providers.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8dffb967..c1a74474 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks)
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
+- Internal refactor with no user-facing change: split the 1,441-line API Keys settings page into focused components under `frontend/src/components/settings/` and moved the provider config tables to `frontend/src/lib/providers.tsx`, deduplicating the default-model select in the process
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
 - Frontend locale files are now type-checked at compile time: every non-en-US locale declares `satisfies TranslationShape` (derived from the en-US object), so a missing or extra i18n key fails `tsc` in the editor instead of only the runtime parity test. Also removed two unused frontend dependencies (`next-themes`, `@monaco-editor/react`) and fixed `frontend/AGENTS.md` drift (14 locales, not 7; dark mode is the hand-rolled zustand theme-store, not next-themes)
 
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index b33bc204..a82d474a 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -1,1318 +1,24 @@
 'use client'
 
-import { useMemo, useState, useEffect, useId } from 'react'
-import { useForm } from 'react-hook-form'
+import { useMemo } from 'react'
 import { AppShell } from '@/components/layout/AppShell'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { Alert, AlertTitle, AlertDescription } from '@/components/ui/alert'
-import { Button } from '@/components/ui/button'
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
-import { Badge } from '@/components/ui/badge'
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
-import { Label } from '@/components/ui/label'
-import {
-  Dialog,
-  DialogContent,
-  DialogDescription,
-  DialogFooter,
-  DialogHeader,
-  DialogTitle,
-} from '@/components/ui/dialog'
-import {
-  RefreshCw,
-  Key,
-  ShieldAlert,
-  AlertTriangle,
-  Plus,
-  Edit,
-  Trash2,
-  Plug,
-  Loader2,
-  Check,
-  X,
-  AlertCircle,
-  Wand2,
-  MessageSquare,
-  Code,
-  Mic,
-  Volume2,
-  Bot,
-} from 'lucide-react'
+import { Key, ShieldAlert } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { useModels, useDeleteModel, useModelDefaults, useUpdateModelDefaults, useAutoAssignDefaults, useTestModel } from '@/lib/hooks/use-models'
+import { useModels, useModelDefaults } from '@/lib/hooks/use-models'
 import {
   useCredentials,
-  useCredential,
   useCredentialStatus,
   useEnvStatus,
-  useCreateCredential,
-  useUpdateCredential,
-  useDeleteCredential,
-  useTestCredential,
-  useDiscoverModels,
-  useRegisterModels,
-  useMigrateFromEnv,
 } from '@/lib/hooks/use-credentials'
-import { Credential, CreateCredentialRequest, DiscoveredModel } from '@/lib/api/credentials'
-import { buildCredentialUpdatePayload } from '@/lib/credential-update-payload'
-import { Model, ModelDefaults } from '@/lib/types/models'
-import { MigrationBanner, ModelTestResultDialog } from '@/components/settings'
-import { EmbeddingModelChangeDialog } from '@/components/settings/EmbeddingModelChangeDialog'
-
-type ModelType = 'language' | 'embedding' | 'text_to_speech' | 'speech_to_text'
-
-// Provider display names
-const PROVIDER_DISPLAY_NAMES: Record<string, string> = {
-  openai: 'OpenAI',
-  anthropic: 'Anthropic',
-  google: 'Google AI',
-  groq: 'Groq',
-  mistral: 'Mistral AI',
-  deepseek: 'DeepSeek',
-  xai: 'xAI (Grok)',
-  openrouter: 'OpenRouter',
-  voyage: 'Voyage AI',
-  elevenlabs: 'ElevenLabs',
-  deepgram: 'Deepgram',
-  ollama: 'Ollama',
-  azure: 'Azure OpenAI',
-  vertex: 'Google Vertex AI',
-  openai_compatible: 'OpenAI Compatible',
-  dashscope: 'DashScope (Qwen)',
-  minimax: 'MiniMax',
-}
-
-// All providers in display order
-const ALL_PROVIDERS = [
-  'openai', 'anthropic', 'google', 'groq', 'mistral', 'deepseek',
-  'xai', 'openrouter', 'dashscope', 'minimax', 'voyage', 'elevenlabs', 'deepgram', 'ollama',
-  'azure', 'vertex', 'openai_compatible',
-]
-
-// Default modalities per provider
-const PROVIDER_MODALITIES: Record<string, ModelType[]> = {
-  openai: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  anthropic: ['language'],
-  google: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  groq: ['language', 'speech_to_text'],
-  mistral: ['language', 'embedding', 'speech_to_text', 'text_to_speech'],
-  deepseek: ['language'],
-  xai: ['language', 'text_to_speech'],
-  openrouter: ['language', 'embedding'],
-  voyage: ['embedding'],
-  elevenlabs: ['text_to_speech', 'speech_to_text'],
-  deepgram: ['text_to_speech'],
-  ollama: ['language', 'embedding'],
-  azure: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  vertex: ['language', 'embedding', 'text_to_speech'],
-  openai_compatible: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  dashscope: ['language'],
-  minimax: ['language'],
-}
-
-// Documentation links
-const PROVIDER_DOCS: Record<string, string> = {
-  openai: 'https://platform.openai.com/api-keys',
-  anthropic: 'https://console.anthropic.com/settings/keys',
-  google: 'https://aistudio.google.com/app/apikey',
-  groq: 'https://console.groq.com/keys',
-  mistral: 'https://console.mistral.ai/api-keys/',
-  deepseek: 'https://platform.deepseek.com/api_keys',
-  xai: 'https://console.x.ai/',
-  openrouter: 'https://openrouter.ai/keys',
-  voyage: 'https://dash.voyageai.com/api-keys',
-  elevenlabs: 'https://elevenlabs.io/app/settings/api-keys',
-  deepgram: 'https://console.deepgram.com/',
-  azure: 'https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI',
-  vertex: 'https://cloud.google.com/vertex-ai/docs/start/cloud-environment',
-  openai_compatible: 'https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md',
-  dashscope: 'https://help.aliyun.com/zh/model-studio/getting-started/',
-  minimax: 'https://platform.minimaxi.com/document/Guides',
-}
-
-const TYPE_ICONS: Record<ModelType, React.ReactNode> = {
-  language: <MessageSquare className="h-3 w-3" />,
-  embedding: <Code className="h-3 w-3" />,
-  text_to_speech: <Volume2 className="h-3 w-3" />,
-  speech_to_text: <Mic className="h-3 w-3" />,
-}
-
-const TYPE_COLORS: Record<ModelType, string> = {
-  language: 'bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-300',
-  embedding: 'bg-purple-100 text-purple-700 dark:bg-purple-900/30 dark:text-purple-300',
-  text_to_speech: 'bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-300',
-  speech_to_text: 'bg-teal-100 text-teal-700 dark:bg-teal-900/30 dark:text-teal-300',
-}
-
-const TYPE_COLOR_INACTIVE = 'bg-muted text-muted-foreground opacity-50'
-
-const TYPE_LABELS: Record<ModelType, string> = {
-  language: 'Language',
-  embedding: 'Embedding',
-  text_to_speech: 'TTS',
-  speech_to_text: 'STT',
-}
-
-// =============================================================================
-// Credential Form Dialog
-// =============================================================================
-
-function CredentialFormDialog({
-  open,
-  onOpenChange,
-  provider,
-  credential,
-}: {
-  open: boolean
-  onOpenChange: (open: boolean) => void
-  provider: string
-  credential?: Credential | null
-}) {
-  const { t } = useTranslation()
-  const createCredential = useCreateCredential()
-  const updateCredential = useUpdateCredential()
-  const isEditing = !!credential
-  const isSubmitting = createCredential.isPending || updateCredential.isPending
-
-  const isVertex = provider === 'vertex'
-  const isOllama = provider === 'ollama'
-  const isOpenAICompatible = provider === 'openai_compatible'
-  const requiresApiKey = !isVertex && !isOllama && !isOpenAICompatible
-
-  const [name, setName] = useState('')
-  const [apiKey, setApiKey] = useState('')
-  const [baseUrl, setBaseUrl] = useState('')
-  const [showApiKey, setShowApiKey] = useState(false)
-  const [project, setProject] = useState('')
-  const [location, setLocation] = useState('')
-  const [credentialsPath, setCredentialsPath] = useState('')
-  const [numCtx, setNumCtx] = useState('')
-  // Modalities
-  const [modalities, setModalities] = useState<string[]>([])
-
-  useEffect(() => {
-    if (credential) {
-      setName(credential.name || '')
-      setBaseUrl(credential.base_url || '')
-      setApiKey('')
-      setProject(credential.project || '')
-      setLocation(credential.location || '')
-      setCredentialsPath(credential.credentials_path || '')
-      setNumCtx(credential.num_ctx ? String(credential.num_ctx) : '')
-      setModalities(credential.modalities || [])
-    } else {
-      setName('')
-      setBaseUrl('')
-      setApiKey('')
-      setProject('')
-      setLocation('')
-      setCredentialsPath('')
-      setNumCtx('')
-      setModalities(PROVIDER_MODALITIES[provider] || ['language'])
-    }
-  }, [credential, provider])
-
-  const handleSubmit = (e: React.FormEvent) => {
-    e.preventDefault()
-
-    const onSuccess = () => {
-      onOpenChange(false)
-    }
-
-    if (isEditing && credential) {
-      const data = buildCredentialUpdatePayload(credential, {
-        name, apiKey, baseUrl, modalities, project, location,
-        credentialsPath, numCtx, isVertex, isOllama,
-      })
-      updateCredential.mutate({ credentialId: credential.id, data }, { onSuccess })
-    } else {
-      const data: CreateCredentialRequest = {
-        name: name || `${PROVIDER_DISPLAY_NAMES[provider] || provider} Config`,
-        provider,
-        modalities,
-        api_key: apiKey.trim() || undefined,
-        base_url: baseUrl || undefined,
-      }
-      if (isVertex) {
-        data.project = project.trim() || undefined
-        data.location = location.trim() || undefined
-        data.credentials_path = credentialsPath.trim() || undefined
-      }
-      if (isOllama && numCtx.trim()) {
-        data.num_ctx = Number(numCtx)
-      }
-      createCredential.mutate(data, { onSuccess })
-    }
-  }
-
-  const isValid = isEditing
-    ? true
-    : isVertex
-      ? name.trim() !== '' && project.trim() !== '' && location.trim() !== ''
-      : name.trim() !== '' && (!requiresApiKey || apiKey.trim() !== '')
-
-  const docsUrl = PROVIDER_DOCS[provider]
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-md">
-        <DialogHeader>
-          <DialogTitle>
-            {isEditing
-              ? t('apiKeys.editConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)
-              : t('apiKeys.addConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)}
-          </DialogTitle>
-        </DialogHeader>
-        <form onSubmit={handleSubmit} className="space-y-4">
-          {/* Name */}
-          <div className="space-y-2">
-            <Label htmlFor="cred-name">{t('apiKeys.configName')}</Label>
-            <input
-              id="cred-name"
-              className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-              value={name}
-              onChange={(e) => setName(e.target.value)}
-              placeholder={`${PROVIDER_DISPLAY_NAMES[provider] || provider} Production`}
-              disabled={isSubmitting}
-            />
-            <p className="text-xs text-muted-foreground">{t('apiKeys.configNameHint')}</p>
-          </div>
-
-          {/* Vertex fields */}
-          {isVertex ? (
-            <>
-              <div className="space-y-2">
-                <Label htmlFor="vertex-project">{t('apiKeys.vertexProject')}</Label>
-                <input
-                  id="vertex-project"
-                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-                  value={project}
-                  onChange={(e) => setProject(e.target.value)}
-                  placeholder="my-gcp-project"
-                  disabled={isSubmitting}
-                />
-              </div>
-              <div className="space-y-2">
-                <Label htmlFor="vertex-location">{t('apiKeys.vertexLocation')}</Label>
-                <input
-                  id="vertex-location"
-                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-                  value={location}
-                  onChange={(e) => setLocation(e.target.value)}
-                  placeholder="us-central1"
-                  disabled={isSubmitting}
-                />
-              </div>
-              <div className="space-y-2">
-                <Label htmlFor="vertex-creds">
-                  {t('apiKeys.vertexCredentials')}
-                  <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
-                </Label>
-                <input
-                  id="vertex-creds"
-                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-                  value={credentialsPath}
-                  onChange={(e) => setCredentialsPath(e.target.value)}
-                  placeholder="/path/to/service-account.json"
-                  disabled={isSubmitting}
-                />
-              </div>
-            </>
-          ) : (
-            /* API Key */
-            <div className="space-y-2">
-              <Label htmlFor="api-key">
-                {t('models.apiKey')}
-                {!requiresApiKey && <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>}
-              </Label>
-              <div className="relative">
-                <input
-                  id="api-key"
-                  type={showApiKey ? 'text' : 'password'}
-                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm pr-10"
-                  value={apiKey}
-                  onChange={(e) => setApiKey(e.target.value)}
-                  placeholder={isEditing ? '••••••••••••' : 'sk-...'}
-                  disabled={isSubmitting}
-                  autoComplete="off"
-                />
-                <button
-                  type="button"
-                  onClick={() => setShowApiKey(!showApiKey)}
-                  className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground text-xs"
-                  tabIndex={-1}
-                >
-                  {showApiKey ? 'Hide' : 'Show'}
-                </button>
-              </div>
-              {isEditing && <p className="text-xs text-muted-foreground">{t('apiKeys.apiKeyEditHint')}</p>}
-              {docsUrl && (
-                <a href={docsUrl} target="_blank" rel="noopener noreferrer" className="text-xs text-primary hover:underline">
-                  {t('apiKeys.getApiKey')} &rarr;
-                </a>
-              )}
-            </div>
-          )}
-
-          {/* Base URL (non-Vertex) */}
-          {!isVertex && (
-            <div className="space-y-2">
-              <Label htmlFor="base-url" className="text-muted-foreground">{t('apiKeys.baseUrl')}</Label>
-              <input
-                id="base-url"
-                type="url"
-                className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-                value={baseUrl}
-                onChange={(e) => setBaseUrl(e.target.value)}
-                placeholder={isOllama ? 'http://localhost:11434' : 'https://api.example.com/v1'}
-                disabled={isSubmitting}
-              />
-              <p className="text-xs text-muted-foreground">{t('apiKeys.baseUrlOverrideHint')}</p>
-            </div>
-          )}
-
-          {/* num_ctx (Ollama only) */}
-          {isOllama && (
-            <div className="space-y-2">
-              <Label htmlFor="num-ctx" className="text-muted-foreground">
-                {t('apiKeys.numCtx')}
-                <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
-              </Label>
-              <input
-                id="num-ctx"
-                type="number"
-                min={1}
-                className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
-                value={numCtx}
-                onChange={(e) => setNumCtx(e.target.value)}
-                placeholder="8192"
-                disabled={isSubmitting}
-              />
-              <p className="text-xs text-muted-foreground">{t('apiKeys.numCtxHint')}</p>
-            </div>
-          )}
-
-          {/* Actions */}
-          <div className="flex justify-end gap-2 pt-4 border-t">
-            <Button type="button" variant="outline" onClick={() => onOpenChange(false)} disabled={isSubmitting}>
-              {t('common.cancel')}
-            </Button>
-            <Button type="submit" disabled={!isValid || isSubmitting}>
-              {isSubmitting && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-              {isEditing ? t('common.save') : t('apiKeys.addConfig')}
-            </Button>
-          </div>
-        </form>
-      </DialogContent>
-    </Dialog>
-  )
-}
-
-// =============================================================================
-// Model Discovery Dialog
-// =============================================================================
-
-function DiscoverModelsDialog({
-  open,
-  onOpenChange,
-  credential,
-}: {
-  open: boolean
-  onOpenChange: (open: boolean) => void
-  credential: Credential
-}) {
-  const { t } = useTranslation()
-  const discoverModels = useDiscoverModels()
-  const registerModels = useRegisterModels()
-  const [discoveredModels, setDiscoveredModels] = useState<DiscoveredModel[]>([])
-  const [selectedModels, setSelectedModels] = useState<Set<string>>(new Set())
-  const [hasDiscovered, setHasDiscovered] = useState(false)
-  const [discoveryError, setDiscoveryError] = useState<string | null>(null)
-  const [searchQuery, setSearchQuery] = useState('')
-  const [customModelSelected, setCustomModelSelected] = useState(false)
-  // Model type selector - default to credential's first modality
-  const [selectedType, setSelectedType] = useState<ModelType>(
-    (credential.modalities[0] as ModelType) || 'language'
-  )
-
-  useEffect(() => {
-    if (open && !hasDiscovered) {
-      setDiscoveryError(null)
-      discoverModels.mutate(credential.id, {
-        onSuccess: (result) => {
-          const seen = new Set<string>()
-          const unique = result.discovered.filter(m => {
-            if (seen.has(m.name)) return false
-            seen.add(m.name)
-            return true
-          })
-          setDiscoveredModels(unique)
-          setSelectedModels(new Set())
-          setHasDiscovered(true)
-        },
-        onError: (error: unknown) => {
-          setHasDiscovered(true)
-          const msg = error instanceof Error ? error.message : String(error)
-          setDiscoveryError(msg)
-        },
-      })
-    }
-    if (!open) {
-      setHasDiscovered(false)
-      setDiscoveredModels([])
-      setSelectedModels(new Set())
-      setDiscoveryError(null)
-      setSearchQuery('')
-      setCustomModelSelected(false)
-      setSelectedType((credential.modalities[0] as ModelType) || 'language')
-    }
-    // eslint-disable-next-line react-hooks/exhaustive-deps -- intentionally only fires on open/close
-  }, [open])
-
-  // Reset custom selection when search changes
-  useEffect(() => {
-    setCustomModelSelected(false)
-  }, [searchQuery])
-
-  // Filter discovered models by search query
-  const filteredModels = useMemo(() => {
-    if (!searchQuery.trim()) return discoveredModels
-    const q = searchQuery.toLowerCase()
-    return discoveredModels.filter(m => m.name.toLowerCase().includes(q))
-  }, [discoveredModels, searchQuery])
-
-  // Show custom model option when search doesn't exactly match any discovered model
-  const showCustomOption = useMemo(() => {
-    if (!searchQuery.trim()) return false
-    const q = searchQuery.trim().toLowerCase()
-    return !discoveredModels.some(m => m.name.toLowerCase() === q)
-  }, [discoveredModels, searchQuery])
-
-  const handleRegister = () => {
-    const selected = discoveredModels
-      .filter(m => selectedModels.has(m.name))
-      .map(m => ({
-        name: m.name,
-        provider: m.provider,
-        model_type: selectedType,
-      }))
-    if (customModelSelected && showCustomOption) {
-      selected.push({
-        name: searchQuery.trim(),
-        provider: credential.provider,
-        model_type: selectedType,
-      })
-    }
-    registerModels.mutate(
-      { credentialId: credential.id, models: selected },
-      { onSuccess: () => onOpenChange(false) }
-    )
-  }
-
-  const totalSelected = selectedModels.size + (customModelSelected && showCustomOption ? 1 : 0)
-
-  const toggleModel = (name: string) => {
-    setSelectedModels(prev => {
-      const next = new Set(prev)
-      if (next.has(name)) next.delete(name)
-      else next.add(name)
-      return next
-    })
-  }
-
-  const toggleAll = () => {
-    const filteredNames = filteredModels.map(m => m.name)
-    const allFilteredSelected = filteredNames.every(n => selectedModels.has(n))
-    if (allFilteredSelected) {
-      setSelectedModels(prev => {
-        const next = new Set(prev)
-        filteredNames.forEach(n => next.delete(n))
-        return next
-      })
-    } else {
-      setSelectedModels(prev => {
-        const next = new Set(prev)
-        filteredNames.forEach(n => next.add(n))
-        return next
-      })
-    }
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent className="sm:max-w-lg max-h-[85vh] grid-rows-[auto_1fr_auto]">
-        <DialogHeader>
-          <DialogTitle>
-            {t('models.discoverModels')} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
-          </DialogTitle>
-          <DialogDescription>
-            {credential.name}
-          </DialogDescription>
-        </DialogHeader>
-
-        <div className="min-h-0 overflow-y-auto">
-        {discoverModels.isPending ? (
-          <div className="flex items-center justify-center py-12">
-            <LoadingSpinner size="lg" />
-          </div>
-        ) : discoveryError ? (
-          <Alert variant="destructive">
-            <AlertCircle className="h-4 w-4" />
-            <AlertDescription>{discoveryError}</AlertDescription>
-          </Alert>
-        ) : (
-          <div className="space-y-4">
-            {/* Model type selector */}
-            <div className="space-y-2">
-              <Label>{t('models.modelType')}</Label>
-              <Select value={selectedType} onValueChange={(v) => setSelectedType(v as ModelType)}>
-                <SelectTrigger>
-                  <SelectValue />
-                </SelectTrigger>
-                <SelectContent>
-                  {(PROVIDER_MODALITIES[credential.provider] || credential.modalities as ModelType[]).map(type => (
-                    <SelectItem key={type} value={type}>
-                      <div className="flex items-center gap-2">
-                        {TYPE_ICONS[type]}
-                        {TYPE_LABELS[type]}
-                      </div>
-                    </SelectItem>
-                  ))}
-                </SelectContent>
-              </Select>
-              <p className="text-xs text-muted-foreground">{t('models.modelTypeHint')}</p>
-            </div>
-
-            {/* Search input */}
-            <input
-              type="text"
-              className="flex h-9 w-full rounded-md border border-input bg-background px-3 py-1 text-sm placeholder:text-muted-foreground"
-              placeholder={t('models.searchOrAddModel')}
-              value={searchQuery}
-              onChange={(e) => setSearchQuery(e.target.value)}
-            />
-
-            {/* Select all / count (only when there are discovered models to select) */}
-            {filteredModels.length > 0 && (
-              <div className="flex items-center justify-between">
-                <Button variant="outline" size="sm" onClick={toggleAll}>
-                  {filteredModels.every(m => selectedModels.has(m.name)) ? t('common.remove') : t('common.addSelected')}
-                  {' '}({selectedModels.size}/{filteredModels.length})
-                </Button>
-              </div>
-            )}
-
-            {/* Model list */}
-            <div className="space-y-1">
-              {filteredModels.map((model) => (
-                <label
-                  key={model.name}
-                  className="flex items-center gap-2 p-1.5 rounded hover:bg-muted cursor-pointer text-sm"
-                >
-                  <input
-                    type="checkbox"
-                    checked={selectedModels.has(model.name)}
-                    onChange={() => toggleModel(model.name)}
-                    className="rounded"
-                  />
-                  <span className="truncate">{model.name}</span>
-                  {model.description && model.description !== model.name && (
-                    <span className="text-xs text-muted-foreground truncate">({model.description})</span>
-                  )}
-                </label>
-              ))}
-
-              {/* Custom model option */}
-              {showCustomOption && (
-                <label className={`flex items-center gap-2 p-1.5 rounded hover:bg-muted cursor-pointer text-sm${filteredModels.length > 0 ? ' border-t mt-1 pt-2' : ''}`}>
-                  <input
-                    type="checkbox"
-                    checked={customModelSelected}
-                    onChange={() => setCustomModelSelected(prev => !prev)}
-                    className="rounded"
-                  />
-                  <Plus className="h-3.5 w-3.5 text-muted-foreground shrink-0" />
-                  <span className="truncate">
-                    {t('models.addCustomModel').replace('{name}', searchQuery.trim())}
-                  </span>
-                </label>
-              )}
-
-              {filteredModels.length === 0 && !showCustomOption && (
-                <p className="text-center py-4 text-muted-foreground text-sm">{t('models.noModelsFound')}</p>
-              )}
-            </div>
-          </div>
-        )}
-        </div>
-
-        <DialogFooter>
-          <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t('common.cancel')}
-          </Button>
-          <Button
-            onClick={handleRegister}
-            disabled={totalSelected === 0 || registerModels.isPending}
-          >
-            {registerModels.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-            {t('common.add')} ({totalSelected})
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  )
-}
-
-// =============================================================================
-// Delete Credential Dialog
-// =============================================================================
-
-function DeleteCredentialDialog({
-  open,
-  onOpenChange,
-  credential,
-  allCredentials,
-}: {
-  open: boolean
-  onOpenChange: (open: boolean) => void
-  credential: Credential
-  allCredentials: Credential[]
-}) {
-  const { t } = useTranslation()
-  const deleteCredential = useDeleteCredential()
-  const [migrateToId, setMigrateToId] = useState<string>('')
-
-  const otherCredentials = allCredentials.filter(
-    c => c.id !== credential.id && c.provider === credential.provider
-  )
-
-  const handleDeleteWithModels = () => {
-    deleteCredential.mutate(
-      { credentialId: credential.id, options: { delete_models: true } },
-      { onSuccess: () => onOpenChange(false) }
-    )
-  }
-
-  const handleMigrate = () => {
-    if (!migrateToId) return
-    deleteCredential.mutate(
-      { credentialId: credential.id, options: { migrate_to: migrateToId } },
-      { onSuccess: () => onOpenChange(false) }
-    )
-  }
-
-  const handleDeleteOnly = () => {
-    deleteCredential.mutate(
-      { credentialId: credential.id },
-      { onSuccess: () => onOpenChange(false) }
-    )
-  }
-
-  return (
-    <Dialog open={open} onOpenChange={onOpenChange}>
-      <DialogContent>
-        <DialogHeader>
-          <DialogTitle>{t('apiKeys.deleteConfig')}</DialogTitle>
-          <DialogDescription>
-            {t('apiKeys.deleteConfigConfirm').replace('{name}', credential.name)}
-          </DialogDescription>
-        </DialogHeader>
-
-        {credential.model_count > 0 && (
-          <Alert>
-            <AlertCircle className="h-4 w-4" />
-            <AlertDescription>
-              This credential has {credential.model_count} linked model(s).
-              {otherCredentials.length > 0 && (
-                <div className="mt-2">
-                  <Label>Migrate models to:</Label>
-                  <Select value={migrateToId} onValueChange={setMigrateToId}>
-                    <SelectTrigger className="mt-1">
-                      <SelectValue placeholder="Select credential" />
-                    </SelectTrigger>
-                    <SelectContent>
-                      {otherCredentials.map(c => (
-                        <SelectItem key={c.id} value={c.id}>{c.name}</SelectItem>
-                      ))}
-                    </SelectContent>
-                  </Select>
-                </div>
-              )}
-            </AlertDescription>
-          </Alert>
-        )}
-
-        <DialogFooter className="flex-col sm:flex-row gap-2">
-          <Button variant="outline" onClick={() => onOpenChange(false)}>
-            {t('common.cancel')}
-          </Button>
-          {credential.model_count > 0 && migrateToId && (
-            <Button onClick={handleMigrate} disabled={deleteCredential.isPending}>
-              {deleteCredential.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-              Migrate & Delete
-            </Button>
-          )}
-          <Button
-            variant="destructive"
-            onClick={credential.model_count > 0 ? handleDeleteWithModels : handleDeleteOnly}
-            disabled={deleteCredential.isPending}
-          >
-            {deleteCredential.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
-            {credential.model_count > 0 ? 'Delete with Models' : t('common.delete')}
-          </Button>
-        </DialogFooter>
-      </DialogContent>
-    </Dialog>
-  )
-}
-
-// =============================================================================
-// Credential Card (shows credential + its models)
-// =============================================================================
-
-function CredentialItem({
-  credential,
-  models,
-  defaults,
-  allCredentials,
-}: {
-  credential: Credential
-  models: Model[]
-  defaults: ModelDefaults | null
-  allCredentials: Credential[]
-}) {
-  const { t } = useTranslation()
-  const { testCredential, isPending: isTestPending, testResults } = useTestCredential()
-  const { testModel, isPending: isModelTestPending, testingModelId, testResult: modelTestResult, testedModelName, clearResult: clearModelTestResult } = useTestModel()
-  const deleteModel = useDeleteModel()
-  const [editOpen, setEditOpen] = useState(false)
-  const [deleteOpen, setDeleteOpen] = useState(false)
-  const [discoverOpen, setDiscoverOpen] = useState(false)
-  // Full credential data needed for edit form
-  const { data: fullCredential } = useCredential(editOpen ? credential.id : '')
-
-  const linkedModels = models.filter(m => m.credential === credential.id)
-  const activeTypes = new Set(linkedModels.map(m => m.type))
-  const testResult = testResults[credential.id]
-
-  // Extract translations used in model badge loops to avoid excessive Proxy accesses
-  const testModelLabel = t('models.testModel')
-  const deleteModelLabel = t('models.deleteModel')
-
-  // Check which models are defaults
-  const defaultSlots: Record<string, string> = {}
-  if (defaults) {
-    const slotMap: Record<string, string | null | undefined> = {
-      'Chat': defaults.default_chat_model,
-      'Transform': defaults.default_transformation_model,
-      'Tools': defaults.default_tools_model,
-      'Large Ctx': defaults.large_context_model,
-      'Embedding': defaults.default_embedding_model,
-      'TTS': defaults.default_text_to_speech_model,
-      'STT': defaults.default_speech_to_text_model,
-    }
-    for (const [slot, modelId] of Object.entries(slotMap)) {
-      if (modelId) defaultSlots[modelId] = slot
-    }
-  }
-
-  return (
-    <>
-      <div className="border rounded-lg p-3 space-y-2">
-        <div className="flex items-center justify-between">
-          <div className="flex items-center gap-2 min-w-0">
-            <span className="font-medium truncate">{credential.name}</span>
-            <div className="flex gap-1">
-              {credential.modalities.map(mod => (
-                <Badge
-                  key={mod}
-                  variant="secondary"
-                  className={`text-[10px] gap-0.5 px-1 py-0 ${activeTypes.has(mod as ModelType) ? (TYPE_COLORS[mod as ModelType] || '') : TYPE_COLOR_INACTIVE}`}
-                >
-                  {TYPE_ICONS[mod as ModelType]}
-                  <span className="hidden sm:inline">{TYPE_LABELS[mod as ModelType] || mod}</span>
-                </Badge>
-              ))}
-            </div>
-            {credential.has_api_key && (
-              <Badge variant="outline" className="text-[10px]">
-                <Key className="h-2.5 w-2.5 mr-0.5" />
-                Key
-              </Badge>
-            )}
-          </div>
-          <div className="flex items-center gap-1 shrink-0">
-            {testResult && (
-              testResult.success
-                ? <Check className="h-4 w-4 text-emerald-500" />
-                : <X className="h-4 w-4 text-destructive" />
-            )}
-            <Button
-              variant="ghost" size="sm"
-              onClick={() => testCredential(credential.id)}
-              disabled={isTestPending || !!credential.decryption_error}
-              title={t('apiKeys.testConnection')}
-            >
-              {isTestPending ? <Loader2 className="h-4 w-4 animate-spin" /> : <Plug className="h-4 w-4" />}
-              <span className="hidden sm:inline text-xs">Test</span>
-            </Button>
-            <Button
-              variant="ghost" size="sm"
-              onClick={() => setDiscoverOpen(true)}
-              disabled={!!credential.decryption_error}
-              title={t('apiKeys.syncModels')}
-            >
-              <Bot className="h-4 w-4" />
-              <span className="hidden sm:inline text-xs">Models</span>
-            </Button>
-            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} disabled={!!credential.decryption_error} title={t('common.edit')}>
-              <Edit className="h-4 w-4" />
-            </Button>
-            <Button
-              variant="ghost" size="sm"
-              onClick={() => setDeleteOpen(true)}
-              className="text-destructive hover:text-destructive hover:bg-destructive/10"
-              title={t('common.delete')}
-            >
-              <Trash2 className="h-4 w-4" />
-            </Button>
-          </div>
-        </div>
-
-        {/* Decryption error warning */}
-        {credential.decryption_error && (
-          <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
-            <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
-            <AlertTitle className="text-amber-800 dark:text-amber-200">{t('apiKeys.decryptionError')}</AlertTitle>
-            <AlertDescription className="text-amber-700 dark:text-amber-300 text-sm">
-              {t('apiKeys.decryptionErrorDescription')}
-            </AlertDescription>
-          </Alert>
-        )}
-
-        {/* Linked models grouped by type */}
-        {linkedModels.length > 0 && (
-          <div className="space-y-1.5 pt-1">
-            {(['language', 'embedding', 'text_to_speech', 'speech_to_text'] as ModelType[])
-              .filter(type => linkedModels.some(m => m.type === type))
-              .map(type => (
-                <div key={type} className="flex items-start gap-1.5">
-                  <Badge
-                    variant="outline"
-                    className={`text-[10px] gap-0.5 px-1 py-0 shrink-0 mt-0.5 ${TYPE_COLORS[type]}`}
-                  >
-                    {TYPE_ICONS[type]}
-                    {TYPE_LABELS[type]}
-                  </Badge>
-                  <div className="flex flex-wrap gap-1">
-                    {linkedModels.filter(m => m.type === type).map(model => {
-                      const defaultSlot = defaultSlots[model.id]
-                      return (
-                        <Badge
-                          key={model.id}
-                          variant={defaultSlot ? 'default' : 'secondary'}
-                          className="text-xs gap-1 pr-0.5 group/model"
-                        >
-                          {model.name}
-                          {defaultSlot && <span className="ml-0.5 opacity-75">({defaultSlot})</span>}
-                          <button
-                            className="ml-0.5 opacity-0 group-hover/model:opacity-60 hover:!opacity-100 transition-opacity"
-                            onClick={() => testModel(model.id, model.name)}
-                            disabled={isModelTestPending && testingModelId === model.id}
-                            title={testModelLabel}
-                          >
-                            {isModelTestPending && testingModelId === model.id
-                              ? <Loader2 className="h-3 w-3 animate-spin" />
-                              : <Plug className="h-3 w-3" />
-                            }
-                          </button>
-                          <button
-                            className="opacity-0 group-hover/model:opacity-60 hover:!opacity-100 hover:text-destructive transition-opacity"
-                            onClick={() => deleteModel.mutate(model.id)}
-                            title={deleteModelLabel}
-                          >
-                            <X className="h-3 w-3" />
-                          </button>
-                        </Badge>
-                      )
-                    })}
-                  </div>
-                </div>
-              ))}
-          </div>
-        )}
-
-
-      </div>
-
-      {/* Edit dialog */}
-      {editOpen && (
-        <CredentialFormDialog
-          open={editOpen}
-          onOpenChange={setEditOpen}
-          provider={credential.provider}
-          credential={fullCredential || credential}
-        />
-      )}
-
-      {/* Delete dialog */}
-      {deleteOpen && (
-        <DeleteCredentialDialog
-          open={deleteOpen}
-          onOpenChange={setDeleteOpen}
-          credential={credential}
-          allCredentials={allCredentials}
-        />
-      )}
-
-      {/* Discover models dialog */}
-      {discoverOpen && (
-        <DiscoverModelsDialog
-          open={discoverOpen}
-          onOpenChange={setDiscoverOpen}
-          credential={credential}
-        />
-      )}
-
-      {/* Model test result dialog */}
-      <ModelTestResultDialog
-        open={modelTestResult !== null}
-        onOpenChange={(open) => { if (!open) clearModelTestResult() }}
-        result={modelTestResult}
-        modelName={testedModelName}
-      />
-    </>
-  )
-}
-
-// =============================================================================
-// Provider Section (shows all credentials for a provider)
-// =============================================================================
-
-function ProviderSection({
-  provider,
-  credentials,
-  models,
-  defaults,
-  allCredentials,
-  encryptionReady,
-}: {
-  provider: string
-  credentials: Credential[]
-  models: Model[]
-  defaults: ModelDefaults | null
-  allCredentials: Credential[]
-  encryptionReady: boolean
-}) {
-  const { t } = useTranslation()
-  const [addOpen, setAddOpen] = useState(false)
-
-  const displayName = PROVIDER_DISPLAY_NAMES[provider] || provider
-  const modalities = PROVIDER_MODALITIES[provider] || ['language']
-  const hasCredentials = credentials.length > 0
-
-  // Models linked to any credential of this provider
-  const providerModels = models.filter(m =>
-    credentials.some(c => c.id === m.credential)
-  )
-  const activeTypes = new Set(providerModels.map(m => m.type))
-
-  return (
-    <Card className={!hasCredentials ? 'opacity-80' : undefined}>
-      <CardHeader className="pb-3">
-        <div className="flex items-center justify-between">
-          <div className="flex items-center gap-3 flex-wrap">
-            <CardTitle className="text-lg capitalize">{displayName}</CardTitle>
-            <div className="flex items-center gap-1">
-              {modalities.map((type) => (
-                <Badge
-                  key={type}
-                  variant="secondary"
-                  className={`text-xs gap-1 ${activeTypes.has(type) ? TYPE_COLORS[type] : TYPE_COLOR_INACTIVE}`}
-                >
-                  {TYPE_ICONS[type]}
-                  <span className="hidden sm:inline">{TYPE_LABELS[type]}</span>
-                </Badge>
-              ))}
-            </div>
-          </div>
-          <div className="flex items-center gap-2">
-            {hasCredentials ? (
-              <Badge className="bg-emerald-100 text-emerald-700 hover:bg-emerald-100 dark:bg-emerald-900/30 dark:text-emerald-300">
-                <Check className="mr-1 h-3 w-3" />
-                {t('apiKeys.configured')}
-              </Badge>
-            ) : (
-              <Badge variant="outline" className="text-muted-foreground border-dashed">
-                <X className="mr-1 h-3 w-3" />
-                {t('apiKeys.notConfigured')}
-              </Badge>
-            )}
-          </div>
-        </div>
-      </CardHeader>
-      <CardContent className="space-y-2">
-        {credentials.map(cred => (
-          <CredentialItem
-            key={cred.id}
-            credential={cred}
-            models={models}
-            defaults={defaults}
-            allCredentials={allCredentials}
-          />
-        ))}
-
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={() => setAddOpen(true)}
-          className="w-full gap-2"
-          disabled={!encryptionReady}
-        >
-          <Plus className="h-4 w-4" />
-          {t('apiKeys.addConfig')}
-        </Button>
-      </CardContent>
-
-      {addOpen && (
-        <CredentialFormDialog
-          open={addOpen}
-          onOpenChange={setAddOpen}
-          provider={provider}
-        />
-      )}
-    </Card>
-  )
-}
-
-// =============================================================================
-// Default Models Section
-// =============================================================================
-
-function DefaultModelSelectors({
-  models,
-  defaults,
-}: {
-  models: Model[]
-  defaults: ModelDefaults
-}) {
-  const { t } = useTranslation()
-  const updateDefaults = useUpdateModelDefaults()
-  const autoAssign = useAutoAssignDefaults()
-  const { setValue, watch } = useForm<ModelDefaults>({ defaultValues: defaults })
-  const generatedId = useId()
-
-  const [showEmbeddingDialog, setShowEmbeddingDialog] = useState(false)
-  const [pendingEmbeddingChange, setPendingEmbeddingChange] = useState<{
-    key: keyof ModelDefaults; value: string; oldModelId?: string; newModelId?: string
-  } | null>(null)
-
-  useEffect(() => {
-    if (defaults) {
-      Object.entries(defaults).forEach(([key, value]) => {
-        setValue(key as keyof ModelDefaults, value)
-      })
-    }
-  }, [defaults, setValue])
-
-  interface DefaultConfig {
-    key: keyof ModelDefaults
-    label: string
-    description: string
-    modelType: ModelType
-    required?: boolean
-    id: string
-  }
-
-  const primaryConfigs: DefaultConfig[] = [
-    { key: 'default_chat_model', label: t('models.chatModelLabel'), description: t('models.chatModelDesc'), modelType: 'language', required: true, id: `${generatedId}-chat` },
-    { key: 'default_embedding_model', label: t('models.embeddingModelLabel'), description: t('models.embeddingModelDesc'), modelType: 'embedding', required: true, id: `${generatedId}-embed` },
-    { key: 'default_text_to_speech_model', label: t('models.ttsModelLabel'), description: t('models.ttsModelDesc'), modelType: 'text_to_speech', id: `${generatedId}-tts` },
-    { key: 'default_speech_to_text_model', label: t('models.sttModelLabel'), description: t('models.sttModelDesc'), modelType: 'speech_to_text', id: `${generatedId}-stt` },
-  ]
-
-  const advancedConfigs: DefaultConfig[] = [
-    { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', required: true, id: `${generatedId}-transform` },
-    { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', id: `${generatedId}-tools` },
-    { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', id: `${generatedId}-large` },
-  ]
-
-  const defaultConfigs = [...primaryConfigs, ...advancedConfigs]
-
-  const handleChange = (key: keyof ModelDefaults, value: string) => {
-    if (key === 'default_embedding_model') {
-      const current = defaults[key]
-      if (current && current !== value) {
-        setPendingEmbeddingChange({ key, value, oldModelId: current, newModelId: value })
-        setShowEmbeddingDialog(true)
-        return
-      }
-    }
-    updateDefaults.mutate({ [key]: value || null })
-  }
-
-  const handleConfirmEmbeddingChange = () => {
-    if (pendingEmbeddingChange) {
-      updateDefaults.mutate({ [pendingEmbeddingChange.key]: pendingEmbeddingChange.value || null })
-      setPendingEmbeddingChange(null)
-    }
-  }
-
-  const getModelsForType = (type: ModelType) => models.filter(m => m.type === type)
-
-  const missingRequired = defaultConfigs
-    .filter(c => {
-      if (!c.required) return false
-      const value = defaults[c.key]
-      if (!value) return true
-      return !models.filter(m => m.type === c.modelType).some(m => m.id === value)
-    })
-    .map(c => c.label)
-
-  return (
-    <Card>
-      <CardHeader>
-        <CardTitle>{t('models.defaultAssignments')}</CardTitle>
-        <CardDescription>{t('models.defaultAssignmentsDesc')}</CardDescription>
-      </CardHeader>
-      <CardContent className="space-y-6">
-        {missingRequired.length > 0 && (
-          <Alert>
-            <AlertCircle className="h-4 w-4" />
-            <AlertDescription className="flex items-center justify-between gap-4">
-              <span>{t('models.missingRequiredModels').replace('{models}', missingRequired.join(', '))}</span>
-              <Button
-                variant="outline" size="sm"
-                onClick={() => autoAssign.mutate()}
-                disabled={autoAssign.isPending}
-                className="shrink-0 gap-1.5"
-              >
-                {autoAssign.isPending ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <Wand2 className="h-3.5 w-3.5" />}
-                {autoAssign.isPending ? t('models.autoAssigning') : t('models.autoAssign')}
-              </Button>
-            </AlertDescription>
-          </Alert>
-        )}
-
-        {/* Primary models: Chat, Embedding, TTS, STT */}
-        <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-4">
-          {primaryConfigs.map(config => {
-            const available = getModelsForType(config.modelType)
-            const currentValue = watch(config.key) || undefined
-            const isValid = currentValue && available.some(m => m.id === currentValue)
-
-            return (
-              <div key={config.key} className="space-y-1">
-                <Label htmlFor={config.id} className="text-xs">
-                  {config.label}
-                  {config.required && <span className="text-destructive ml-0.5">*</span>}
-                </Label>
-                <div className="flex gap-1">
-                  <Select
-                    value={currentValue || ""}
-                    onValueChange={(v) => handleChange(config.key, v)}
-                  >
-                    <SelectTrigger
-                      id={config.id}
-                      className={`h-8 text-xs ${config.required && !isValid && available.length > 0 ? 'border-destructive' : ''}`}
-                    >
-                      <SelectValue placeholder={
-                        config.required && !isValid && available.length > 0
-                          ? t('models.requiredModelPlaceholder')
-                          : t('models.selectModelPlaceholder')
-                      } />
-                    </SelectTrigger>
-                    <SelectContent>
-                      {available.sort((a, b) => a.name.localeCompare(b.name)).map(model => (
-                        <SelectItem key={model.id} value={model.id}>
-                          <div className="flex items-center justify-between w-full">
-                            <span>{model.name}</span>
-                            <span className="text-xs text-muted-foreground ml-2">{model.provider}</span>
-                          </div>
-                        </SelectItem>
-                      ))}
-                    </SelectContent>
-                  </Select>
-                  {!config.required && currentValue && (
-                    <Button variant="ghost" size="icon" onClick={() => handleChange(config.key, "")} className="h-8 w-8 shrink-0">
-                      <X className="h-3 w-3" />
-                    </Button>
-                  )}
-                </div>
-              </div>
-            )
-          })}
-        </div>
-
-        {/* Advanced models: Transformation, Tools, Large Context */}
-        <div className="border-t pt-3">
-          <p className="text-xs text-muted-foreground mb-3">{t('navigation.advanced')}</p>
-            <div className="grid gap-3 sm:grid-cols-3">
-              {advancedConfigs.map(config => {
-                const available = getModelsForType(config.modelType)
-                const currentValue = watch(config.key) || undefined
-                const isValid = currentValue && available.some(m => m.id === currentValue)
-
-                return (
-                  <div key={config.key} className="space-y-1">
-                    <Label htmlFor={config.id} className="text-xs">
-                      {config.label}
-                      {config.required && <span className="text-destructive ml-0.5">*</span>}
-                    </Label>
-                    <div className="flex gap-1">
-                      <Select
-                        value={currentValue || ""}
-                        onValueChange={(v) => handleChange(config.key, v)}
-                      >
-                        <SelectTrigger
-                          id={config.id}
-                          className={`h-8 text-xs ${config.required && !isValid && available.length > 0 ? 'border-destructive' : ''}`}
-                        >
-                          <SelectValue placeholder={
-                            config.required && !isValid && available.length > 0
-                              ? t('models.requiredModelPlaceholder')
-                              : t('models.selectModelPlaceholder')
-                          } />
-                        </SelectTrigger>
-                        <SelectContent>
-                          {available.sort((a, b) => a.name.localeCompare(b.name)).map(model => (
-                            <SelectItem key={model.id} value={model.id}>
-                              <div className="flex items-center justify-between w-full">
-                                <span>{model.name}</span>
-                                <span className="text-xs text-muted-foreground ml-2">{model.provider}</span>
-                              </div>
-                            </SelectItem>
-                          ))}
-                        </SelectContent>
-                      </Select>
-                      {!config.required && currentValue && (
-                        <Button variant="ghost" size="icon" onClick={() => handleChange(config.key, "")} className="h-8 w-8 shrink-0">
-                          <X className="h-3 w-3" />
-                        </Button>
-                      )}
-                    </div>
-                    <p className="text-[10px] text-muted-foreground leading-tight">{config.description}</p>
-                  </div>
-                )
-              })}
-            </div>
-        </div>
-      </CardContent>
-
-      <EmbeddingModelChangeDialog
-        open={showEmbeddingDialog}
-        onOpenChange={(open) => { if (!open) { setPendingEmbeddingChange(null); setShowEmbeddingDialog(false) } }}
-        onConfirm={handleConfirmEmbeddingChange}
-        oldModelName={pendingEmbeddingChange?.oldModelId ? models.find(m => m.id === pendingEmbeddingChange.oldModelId)?.name : undefined}
-        newModelName={pendingEmbeddingChange?.newModelId ? models.find(m => m.id === pendingEmbeddingChange.newModelId)?.name : undefined}
-      />
-    </Card>
-  )
-}
-
-// =============================================================================
-// Main Page
-// =============================================================================
+import { Credential } from '@/lib/api/credentials'
+import { ALL_PROVIDERS } from '@/lib/providers'
+import {
+  DefaultModelSelectors,
+  MigrationBanner,
+  ProviderSection,
+} from '@/components/settings'
 
 export default function ApiKeysPage() {
   const { t } = useTranslation()
diff --git a/frontend/src/components/settings/CredentialFormDialog.tsx b/frontend/src/components/settings/CredentialFormDialog.tsx
new file mode 100644
index 00000000..0459c79f
--- /dev/null
+++ b/frontend/src/components/settings/CredentialFormDialog.tsx
@@ -0,0 +1,270 @@
+'use client'
+
+import { useState, useEffect } from 'react'
+import { Button } from '@/components/ui/button'
+import { Label } from '@/components/ui/label'
+import {
+  Dialog,
+  DialogContent,
+  DialogHeader,
+  DialogTitle,
+} from '@/components/ui/dialog'
+import { Loader2 } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useCreateCredential, useUpdateCredential } from '@/lib/hooks/use-credentials'
+import { Credential, CreateCredentialRequest } from '@/lib/api/credentials'
+import { buildCredentialUpdatePayload } from '@/lib/credential-update-payload'
+import { PROVIDER_DISPLAY_NAMES, PROVIDER_MODALITIES, PROVIDER_DOCS } from '@/lib/providers'
+
+interface CredentialFormDialogProps {
+  open: boolean
+  onOpenChange: (open: boolean) => void
+  provider: string
+  credential?: Credential | null
+}
+
+export function CredentialFormDialog({
+  open,
+  onOpenChange,
+  provider,
+  credential,
+}: CredentialFormDialogProps) {
+  const { t } = useTranslation()
+  const createCredential = useCreateCredential()
+  const updateCredential = useUpdateCredential()
+  const isEditing = !!credential
+  const isSubmitting = createCredential.isPending || updateCredential.isPending
+
+  const isVertex = provider === 'vertex'
+  const isOllama = provider === 'ollama'
+  const isOpenAICompatible = provider === 'openai_compatible'
+  const requiresApiKey = !isVertex && !isOllama && !isOpenAICompatible
+
+  const [name, setName] = useState('')
+  const [apiKey, setApiKey] = useState('')
+  const [baseUrl, setBaseUrl] = useState('')
+  const [showApiKey, setShowApiKey] = useState(false)
+  const [project, setProject] = useState('')
+  const [location, setLocation] = useState('')
+  const [credentialsPath, setCredentialsPath] = useState('')
+  const [numCtx, setNumCtx] = useState('')
+  // Modalities
+  const [modalities, setModalities] = useState<string[]>([])
+
+  useEffect(() => {
+    if (credential) {
+      setName(credential.name || '')
+      setBaseUrl(credential.base_url || '')
+      setApiKey('')
+      setProject(credential.project || '')
+      setLocation(credential.location || '')
+      setCredentialsPath(credential.credentials_path || '')
+      setNumCtx(credential.num_ctx ? String(credential.num_ctx) : '')
+      setModalities(credential.modalities || [])
+    } else {
+      setName('')
+      setBaseUrl('')
+      setApiKey('')
+      setProject('')
+      setLocation('')
+      setCredentialsPath('')
+      setNumCtx('')
+      setModalities(PROVIDER_MODALITIES[provider] || ['language'])
+    }
+  }, [credential, provider])
+
+  const handleSubmit = (e: React.FormEvent) => {
+    e.preventDefault()
+
+    const onSuccess = () => {
+      onOpenChange(false)
+    }
+
+    if (isEditing && credential) {
+      const data = buildCredentialUpdatePayload(credential, {
+        name, apiKey, baseUrl, modalities, project, location,
+        credentialsPath, numCtx, isVertex, isOllama,
+      })
+      updateCredential.mutate({ credentialId: credential.id, data }, { onSuccess })
+    } else {
+      const data: CreateCredentialRequest = {
+        name: name || `${PROVIDER_DISPLAY_NAMES[provider] || provider} Config`,
+        provider,
+        modalities,
+        api_key: apiKey.trim() || undefined,
+        base_url: baseUrl || undefined,
+      }
+      if (isVertex) {
+        data.project = project.trim() || undefined
+        data.location = location.trim() || undefined
+        data.credentials_path = credentialsPath.trim() || undefined
+      }
+      if (isOllama && numCtx.trim()) {
+        data.num_ctx = Number(numCtx)
+      }
+      createCredential.mutate(data, { onSuccess })
+    }
+  }
+
+  const isValid = isEditing
+    ? true
+    : isVertex
+      ? name.trim() !== '' && project.trim() !== '' && location.trim() !== ''
+      : name.trim() !== '' && (!requiresApiKey || apiKey.trim() !== '')
+
+  const docsUrl = PROVIDER_DOCS[provider]
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-md">
+        <DialogHeader>
+          <DialogTitle>
+            {isEditing
+              ? t('apiKeys.editConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)
+              : t('apiKeys.addConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)}
+          </DialogTitle>
+        </DialogHeader>
+        <form onSubmit={handleSubmit} className="space-y-4">
+          {/* Name */}
+          <div className="space-y-2">
+            <Label htmlFor="cred-name">{t('apiKeys.configName')}</Label>
+            <input
+              id="cred-name"
+              className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+              value={name}
+              onChange={(e) => setName(e.target.value)}
+              placeholder={`${PROVIDER_DISPLAY_NAMES[provider] || provider} Production`}
+              disabled={isSubmitting}
+            />
+            <p className="text-xs text-muted-foreground">{t('apiKeys.configNameHint')}</p>
+          </div>
+
+          {/* Vertex fields */}
+          {isVertex ? (
+            <>
+              <div className="space-y-2">
+                <Label htmlFor="vertex-project">{t('apiKeys.vertexProject')}</Label>
+                <input
+                  id="vertex-project"
+                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                  value={project}
+                  onChange={(e) => setProject(e.target.value)}
+                  placeholder="my-gcp-project"
+                  disabled={isSubmitting}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="vertex-location">{t('apiKeys.vertexLocation')}</Label>
+                <input
+                  id="vertex-location"
+                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                  value={location}
+                  onChange={(e) => setLocation(e.target.value)}
+                  placeholder="us-central1"
+                  disabled={isSubmitting}
+                />
+              </div>
+              <div className="space-y-2">
+                <Label htmlFor="vertex-creds">
+                  {t('apiKeys.vertexCredentials')}
+                  <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
+                </Label>
+                <input
+                  id="vertex-creds"
+                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                  value={credentialsPath}
+                  onChange={(e) => setCredentialsPath(e.target.value)}
+                  placeholder="/path/to/service-account.json"
+                  disabled={isSubmitting}
+                />
+              </div>
+            </>
+          ) : (
+            /* API Key */
+            <div className="space-y-2">
+              <Label htmlFor="api-key">
+                {t('models.apiKey')}
+                {!requiresApiKey && <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>}
+              </Label>
+              <div className="relative">
+                <input
+                  id="api-key"
+                  type={showApiKey ? 'text' : 'password'}
+                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm pr-10"
+                  value={apiKey}
+                  onChange={(e) => setApiKey(e.target.value)}
+                  placeholder={isEditing ? '••••••••••••' : 'sk-...'}
+                  disabled={isSubmitting}
+                  autoComplete="off"
+                />
+                <button
+                  type="button"
+                  onClick={() => setShowApiKey(!showApiKey)}
+                  className="absolute right-3 top-1/2 -translate-y-1/2 text-muted-foreground hover:text-foreground text-xs"
+                  tabIndex={-1}
+                >
+                  {showApiKey ? 'Hide' : 'Show'}
+                </button>
+              </div>
+              {isEditing && <p className="text-xs text-muted-foreground">{t('apiKeys.apiKeyEditHint')}</p>}
+              {docsUrl && (
+                <a href={docsUrl} target="_blank" rel="noopener noreferrer" className="text-xs text-primary hover:underline">
+                  {t('apiKeys.getApiKey')} &rarr;
+                </a>
+              )}
+            </div>
+          )}
+
+          {/* Base URL (non-Vertex) */}
+          {!isVertex && (
+            <div className="space-y-2">
+              <Label htmlFor="base-url" className="text-muted-foreground">{t('apiKeys.baseUrl')}</Label>
+              <input
+                id="base-url"
+                type="url"
+                className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                value={baseUrl}
+                onChange={(e) => setBaseUrl(e.target.value)}
+                placeholder={isOllama ? 'http://localhost:11434' : 'https://api.example.com/v1'}
+                disabled={isSubmitting}
+              />
+              <p className="text-xs text-muted-foreground">{t('apiKeys.baseUrlOverrideHint')}</p>
+            </div>
+          )}
+
+          {/* num_ctx (Ollama only) */}
+          {isOllama && (
+            <div className="space-y-2">
+              <Label htmlFor="num-ctx" className="text-muted-foreground">
+                {t('apiKeys.numCtx')}
+                <span className="text-muted-foreground font-normal ml-1">({t('common.optional')})</span>
+              </Label>
+              <input
+                id="num-ctx"
+                type="number"
+                min={1}
+                className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
+                value={numCtx}
+                onChange={(e) => setNumCtx(e.target.value)}
+                placeholder="8192"
+                disabled={isSubmitting}
+              />
+              <p className="text-xs text-muted-foreground">{t('apiKeys.numCtxHint')}</p>
+            </div>
+          )}
+
+          {/* Actions */}
+          <div className="flex justify-end gap-2 pt-4 border-t">
+            <Button type="button" variant="outline" onClick={() => onOpenChange(false)} disabled={isSubmitting}>
+              {t('common.cancel')}
+            </Button>
+            <Button type="submit" disabled={!isValid || isSubmitting}>
+              {isSubmitting && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
+              {isEditing ? t('common.save') : t('apiKeys.addConfig')}
+            </Button>
+          </div>
+        </form>
+      </DialogContent>
+    </Dialog>
+  )
+}
diff --git a/frontend/src/components/settings/CredentialItem.tsx b/frontend/src/components/settings/CredentialItem.tsx
new file mode 100644
index 00000000..a254a6e2
--- /dev/null
+++ b/frontend/src/components/settings/CredentialItem.tsx
@@ -0,0 +1,246 @@
+'use client'
+
+import { useState } from 'react'
+import { Alert, AlertTitle, AlertDescription } from '@/components/ui/alert'
+import { Button } from '@/components/ui/button'
+import { Badge } from '@/components/ui/badge'
+import {
+  Key,
+  AlertTriangle,
+  Edit,
+  Trash2,
+  Plug,
+  Loader2,
+  Check,
+  X,
+  Bot,
+} from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useDeleteModel, useTestModel } from '@/lib/hooks/use-models'
+import { useCredential, useTestCredential } from '@/lib/hooks/use-credentials'
+import { Credential } from '@/lib/api/credentials'
+import { Model, ModelDefaults } from '@/lib/types/models'
+import {
+  ModelType,
+  TYPE_ICONS,
+  TYPE_COLORS,
+  TYPE_COLOR_INACTIVE,
+  TYPE_LABELS,
+} from '@/lib/providers'
+import { ModelTestResultDialog } from './ModelTestResultDialog'
+import { CredentialFormDialog } from './CredentialFormDialog'
+import { DeleteCredentialDialog } from './DeleteCredentialDialog'
+import { DiscoverModelsDialog } from './DiscoverModelsDialog'
+
+interface CredentialItemProps {
+  credential: Credential
+  models: Model[]
+  defaults: ModelDefaults | null
+  allCredentials: Credential[]
+}
+
+export function CredentialItem({
+  credential,
+  models,
+  defaults,
+  allCredentials,
+}: CredentialItemProps) {
+  const { t } = useTranslation()
+  const { testCredential, isPending: isTestPending, testResults } = useTestCredential()
+  const { testModel, isPending: isModelTestPending, testingModelId, testResult: modelTestResult, testedModelName, clearResult: clearModelTestResult } = useTestModel()
+  const deleteModel = useDeleteModel()
+  const [editOpen, setEditOpen] = useState(false)
+  const [deleteOpen, setDeleteOpen] = useState(false)
+  const [discoverOpen, setDiscoverOpen] = useState(false)
+  // Full credential data needed for edit form
+  const { data: fullCredential } = useCredential(editOpen ? credential.id : '')
+
+  const linkedModels = models.filter(m => m.credential === credential.id)
+  const activeTypes = new Set(linkedModels.map(m => m.type))
+  const testResult = testResults[credential.id]
+
+  // Check which models are defaults
+  const defaultSlots: Record<string, string> = {}
+  if (defaults) {
+    const slotMap: Record<string, string | null | undefined> = {
+      'Chat': defaults.default_chat_model,
+      'Transform': defaults.default_transformation_model,
+      'Tools': defaults.default_tools_model,
+      'Large Ctx': defaults.large_context_model,
+      'Embedding': defaults.default_embedding_model,
+      'TTS': defaults.default_text_to_speech_model,
+      'STT': defaults.default_speech_to_text_model,
+    }
+    for (const [slot, modelId] of Object.entries(slotMap)) {
+      if (modelId) defaultSlots[modelId] = slot
+    }
+  }
+
+  return (
+    <>
+      <div className="border rounded-lg p-3 space-y-2">
+        <div className="flex items-center justify-between">
+          <div className="flex items-center gap-2 min-w-0">
+            <span className="font-medium truncate">{credential.name}</span>
+            <div className="flex gap-1">
+              {credential.modalities.map(mod => (
+                <Badge
+                  key={mod}
+                  variant="secondary"
+                  className={`text-[10px] gap-0.5 px-1 py-0 ${activeTypes.has(mod as ModelType) ? (TYPE_COLORS[mod as ModelType] || '') : TYPE_COLOR_INACTIVE}`}
+                >
+                  {TYPE_ICONS[mod as ModelType]}
+                  <span className="hidden sm:inline">{TYPE_LABELS[mod as ModelType] || mod}</span>
+                </Badge>
+              ))}
+            </div>
+            {credential.has_api_key && (
+              <Badge variant="outline" className="text-[10px]">
+                <Key className="h-2.5 w-2.5 mr-0.5" />
+                Key
+              </Badge>
+            )}
+          </div>
+          <div className="flex items-center gap-1 shrink-0">
+            {testResult && (
+              testResult.success
+                ? <Check className="h-4 w-4 text-emerald-500" />
+                : <X className="h-4 w-4 text-destructive" />
+            )}
+            <Button
+              variant="ghost" size="sm"
+              onClick={() => testCredential(credential.id)}
+              disabled={isTestPending || !!credential.decryption_error}
+              title={t('apiKeys.testConnection')}
+            >
+              {isTestPending ? <Loader2 className="h-4 w-4 animate-spin" /> : <Plug className="h-4 w-4" />}
+              <span className="hidden sm:inline text-xs">Test</span>
+            </Button>
+            <Button
+              variant="ghost" size="sm"
+              onClick={() => setDiscoverOpen(true)}
+              disabled={!!credential.decryption_error}
+              title={t('apiKeys.syncModels')}
+            >
+              <Bot className="h-4 w-4" />
+              <span className="hidden sm:inline text-xs">Models</span>
+            </Button>
+            <Button variant="ghost" size="sm" onClick={() => setEditOpen(true)} disabled={!!credential.decryption_error} title={t('common.edit')}>
+              <Edit className="h-4 w-4" />
+            </Button>
+            <Button
+              variant="ghost" size="sm"
+              onClick={() => setDeleteOpen(true)}
+              className="text-destructive hover:text-destructive hover:bg-destructive/10"
+              title={t('common.delete')}
+            >
+              <Trash2 className="h-4 w-4" />
+            </Button>
+          </div>
+        </div>
+
+        {/* Decryption error warning */}
+        {credential.decryption_error && (
+          <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
+            <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
+            <AlertTitle className="text-amber-800 dark:text-amber-200">{t('apiKeys.decryptionError')}</AlertTitle>
+            <AlertDescription className="text-amber-700 dark:text-amber-300 text-sm">
+              {t('apiKeys.decryptionErrorDescription')}
+            </AlertDescription>
+          </Alert>
+        )}
+
+        {/* Linked models grouped by type */}
+        {linkedModels.length > 0 && (
+          <div className="space-y-1.5 pt-1">
+            {(['language', 'embedding', 'text_to_speech', 'speech_to_text'] as ModelType[])
+              .filter(type => linkedModels.some(m => m.type === type))
+              .map(type => (
+                <div key={type} className="flex items-start gap-1.5">
+                  <Badge
+                    variant="outline"
+                    className={`text-[10px] gap-0.5 px-1 py-0 shrink-0 mt-0.5 ${TYPE_COLORS[type]}`}
+                  >
+                    {TYPE_ICONS[type]}
+                    {TYPE_LABELS[type]}
+                  </Badge>
+                  <div className="flex flex-wrap gap-1">
+                    {linkedModels.filter(m => m.type === type).map(model => {
+                      const defaultSlot = defaultSlots[model.id]
+                      return (
+                        <Badge
+                          key={model.id}
+                          variant={defaultSlot ? 'default' : 'secondary'}
+                          className="text-xs gap-1 pr-0.5 group/model"
+                        >
+                          {model.name}
+                          {defaultSlot && <span className="ml-0.5 opacity-75">({defaultSlot})</span>}
+                          <button
+                            className="ml-0.5 opacity-0 group-hover/model:opacity-60 hover:!opacity-100 transition-opacity"
+                            onClick={() => testModel(model.id, model.name)}
+                            disabled={isModelTestPending && testingModelId === model.id}
+                            title={t('models.testModel')}
+                          >
+                            {isModelTestPending && testingModelId === model.id
+                              ? <Loader2 className="h-3 w-3 animate-spin" />
+                              : <Plug className="h-3 w-3" />
+                            }
+                          </button>
+                          <button
+                            className="opacity-0 group-hover/model:opacity-60 hover:!opacity-100 hover:text-destructive transition-opacity"
+                            onClick={() => deleteModel.mutate(model.id)}
+                            title={t('models.deleteModel')}
+                          >
+                            <X className="h-3 w-3" />
+                          </button>
+                        </Badge>
+                      )
+                    })}
+                  </div>
+                </div>
+              ))}
+          </div>
+        )}
+
+
+      </div>
+
+      {/* Edit dialog */}
+      {editOpen && (
+        <CredentialFormDialog
+          open={editOpen}
+          onOpenChange={setEditOpen}
+          provider={credential.provider}
+          credential={fullCredential || credential}
+        />
+      )}
+
+      {/* Delete dialog */}
+      {deleteOpen && (
+        <DeleteCredentialDialog
+          open={deleteOpen}
+          onOpenChange={setDeleteOpen}
+          credential={credential}
+          allCredentials={allCredentials}
+        />
+      )}
+
+      {/* Discover models dialog */}
+      {discoverOpen && (
+        <DiscoverModelsDialog
+          open={discoverOpen}
+          onOpenChange={setDiscoverOpen}
+          credential={credential}
+        />
+      )}
+
+      {/* Model test result dialog */}
+      <ModelTestResultDialog
+        open={modelTestResult !== null}
+        onOpenChange={(open) => { if (!open) clearModelTestResult() }}
+        result={modelTestResult}
+        modelName={testedModelName}
+      />
+    </>
+  )
+}
diff --git a/frontend/src/components/settings/DefaultModelSelectors.tsx b/frontend/src/components/settings/DefaultModelSelectors.tsx
new file mode 100644
index 00000000..cda57767
--- /dev/null
+++ b/frontend/src/components/settings/DefaultModelSelectors.tsx
@@ -0,0 +1,227 @@
+'use client'
+
+import { useState, useEffect, useId } from 'react'
+import { useForm } from 'react-hook-form'
+import { Alert, AlertDescription } from '@/components/ui/alert'
+import { Button } from '@/components/ui/button'
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
+import { Label } from '@/components/ui/label'
+import { Loader2, X, AlertCircle, Wand2 } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useUpdateModelDefaults, useAutoAssignDefaults } from '@/lib/hooks/use-models'
+import { Model, ModelDefaults } from '@/lib/types/models'
+import { ModelType } from '@/lib/providers'
+import { EmbeddingModelChangeDialog } from './EmbeddingModelChangeDialog'
+
+interface DefaultConfig {
+  key: keyof ModelDefaults
+  label: string
+  description: string
+  modelType: ModelType
+  required?: boolean
+  id: string
+}
+
+interface DefaultModelSelectProps {
+  config: DefaultConfig
+  available: Model[]
+  currentValue?: string
+  onChange: (key: keyof ModelDefaults, value: string) => void
+  showDescription?: boolean
+}
+
+function DefaultModelSelect({
+  config,
+  available,
+  currentValue,
+  onChange,
+  showDescription,
+}: DefaultModelSelectProps) {
+  const { t } = useTranslation()
+  const isValid = currentValue && available.some(m => m.id === currentValue)
+
+  return (
+    <div className="space-y-1">
+      <Label htmlFor={config.id} className="text-xs">
+        {config.label}
+        {config.required && <span className="text-destructive ml-0.5">*</span>}
+      </Label>
+      <div className="flex gap-1">
+        <Select
+          value={currentValue || ""}
+          onValueChange={(v) => onChange(config.key, v)}
+        >
+          <SelectTrigger
+            id={config.id}
+            className={`h-8 text-xs ${config.required && !isValid && available.length > 0 ? 'border-destructive' : ''}`}
+          >
+            <SelectValue placeholder={
+              config.required && !isValid && available.length > 0
+                ? t('models.requiredModelPlaceholder')
+                : t('models.selectModelPlaceholder')
+            } />
+          </SelectTrigger>
+          <SelectContent>
+            {available.sort((a, b) => a.name.localeCompare(b.name)).map(model => (
+              <SelectItem key={model.id} value={model.id}>
+                <div className="flex items-center justify-between w-full">
+                  <span>{model.name}</span>
+                  <span className="text-xs text-muted-foreground ml-2">{model.provider}</span>
+                </div>
+              </SelectItem>
+            ))}
+          </SelectContent>
+        </Select>
+        {!config.required && currentValue && (
+          <Button variant="ghost" size="icon" onClick={() => onChange(config.key, "")} className="h-8 w-8 shrink-0">
+            <X className="h-3 w-3" />
+          </Button>
+        )}
+      </div>
+      {showDescription && (
+        <p className="text-[10px] text-muted-foreground leading-tight">{config.description}</p>
+      )}
+    </div>
+  )
+}
+
+interface DefaultModelSelectorsProps {
+  models: Model[]
+  defaults: ModelDefaults
+}
+
+export function DefaultModelSelectors({
+  models,
+  defaults,
+}: DefaultModelSelectorsProps) {
+  const { t } = useTranslation()
+  const updateDefaults = useUpdateModelDefaults()
+  const autoAssign = useAutoAssignDefaults()
+  const { setValue, watch } = useForm<ModelDefaults>({ defaultValues: defaults })
+  const generatedId = useId()
+
+  const [showEmbeddingDialog, setShowEmbeddingDialog] = useState(false)
+  const [pendingEmbeddingChange, setPendingEmbeddingChange] = useState<{
+    key: keyof ModelDefaults; value: string; oldModelId?: string; newModelId?: string
+  } | null>(null)
+
+  useEffect(() => {
+    if (defaults) {
+      Object.entries(defaults).forEach(([key, value]) => {
+        setValue(key as keyof ModelDefaults, value)
+      })
+    }
+  }, [defaults, setValue])
+
+  const primaryConfigs: DefaultConfig[] = [
+    { key: 'default_chat_model', label: t('models.chatModelLabel'), description: t('models.chatModelDesc'), modelType: 'language', required: true, id: `${generatedId}-chat` },
+    { key: 'default_embedding_model', label: t('models.embeddingModelLabel'), description: t('models.embeddingModelDesc'), modelType: 'embedding', required: true, id: `${generatedId}-embed` },
+    { key: 'default_text_to_speech_model', label: t('models.ttsModelLabel'), description: t('models.ttsModelDesc'), modelType: 'text_to_speech', id: `${generatedId}-tts` },
+    { key: 'default_speech_to_text_model', label: t('models.sttModelLabel'), description: t('models.sttModelDesc'), modelType: 'speech_to_text', id: `${generatedId}-stt` },
+  ]
+
+  const advancedConfigs: DefaultConfig[] = [
+    { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', required: true, id: `${generatedId}-transform` },
+    { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', id: `${generatedId}-tools` },
+    { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', id: `${generatedId}-large` },
+  ]
+
+  const defaultConfigs = [...primaryConfigs, ...advancedConfigs]
+
+  const handleChange = (key: keyof ModelDefaults, value: string) => {
+    if (key === 'default_embedding_model') {
+      const current = defaults[key]
+      if (current && current !== value) {
+        setPendingEmbeddingChange({ key, value, oldModelId: current, newModelId: value })
+        setShowEmbeddingDialog(true)
+        return
+      }
+    }
+    updateDefaults.mutate({ [key]: value || null })
+  }
+
+  const handleConfirmEmbeddingChange = () => {
+    if (pendingEmbeddingChange) {
+      updateDefaults.mutate({ [pendingEmbeddingChange.key]: pendingEmbeddingChange.value || null })
+      setPendingEmbeddingChange(null)
+    }
+  }
+
+  const getModelsForType = (type: ModelType) => models.filter(m => m.type === type)
+
+  const missingRequired = defaultConfigs
+    .filter(c => {
+      if (!c.required) return false
+      const value = defaults[c.key]
+      if (!value) return true
+      return !models.filter(m => m.type === c.modelType).some(m => m.id === value)
+    })
+    .map(c => c.label)
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle>{t('models.defaultAssignments')}</CardTitle>
+        <CardDescription>{t('models.defaultAssignmentsDesc')}</CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-6">
+        {missingRequired.length > 0 && (
+          <Alert>
+            <AlertCircle className="h-4 w-4" />
+            <AlertDescription className="flex items-center justify-between gap-4">
+              <span>{t('models.missingRequiredModels').replace('{models}', missingRequired.join(', '))}</span>
+              <Button
+                variant="outline" size="sm"
+                onClick={() => autoAssign.mutate()}
+                disabled={autoAssign.isPending}
+                className="shrink-0 gap-1.5"
+              >
+                {autoAssign.isPending ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <Wand2 className="h-3.5 w-3.5" />}
+                {autoAssign.isPending ? t('models.autoAssigning') : t('models.autoAssign')}
+              </Button>
+            </AlertDescription>
+          </Alert>
+        )}
+
+        {/* Primary models: Chat, Embedding, TTS, STT */}
+        <div className="grid gap-3 sm:grid-cols-2 lg:grid-cols-4">
+          {primaryConfigs.map(config => (
+            <DefaultModelSelect
+              key={config.key}
+              config={config}
+              available={getModelsForType(config.modelType)}
+              currentValue={watch(config.key) || undefined}
+              onChange={handleChange}
+            />
+          ))}
+        </div>
+
+        {/* Advanced models: Transformation, Tools, Large Context */}
+        <div className="border-t pt-3">
+          <p className="text-xs text-muted-foreground mb-3">{t('navigation.advanced')}</p>
+            <div className="grid gap-3 sm:grid-cols-3">
+              {advancedConfigs.map(config => (
+                <DefaultModelSelect
+                  key={config.key}
+                  config={config}
+                  available={getModelsForType(config.modelType)}
+                  currentValue={watch(config.key) || undefined}
+                  onChange={handleChange}
+                  showDescription
+                />
+              ))}
+            </div>
+        </div>
+      </CardContent>
+
+      <EmbeddingModelChangeDialog
+        open={showEmbeddingDialog}
+        onOpenChange={(open) => { if (!open) { setPendingEmbeddingChange(null); setShowEmbeddingDialog(false) } }}
+        onConfirm={handleConfirmEmbeddingChange}
+        oldModelName={pendingEmbeddingChange?.oldModelId ? models.find(m => m.id === pendingEmbeddingChange.oldModelId)?.name : undefined}
+        newModelName={pendingEmbeddingChange?.newModelId ? models.find(m => m.id === pendingEmbeddingChange.newModelId)?.name : undefined}
+      />
+    </Card>
+  )
+}
diff --git a/frontend/src/components/settings/DeleteCredentialDialog.tsx b/frontend/src/components/settings/DeleteCredentialDialog.tsx
new file mode 100644
index 00000000..d1d80664
--- /dev/null
+++ b/frontend/src/components/settings/DeleteCredentialDialog.tsx
@@ -0,0 +1,120 @@
+'use client'
+
+import { useState } from 'react'
+import { Alert, AlertDescription } from '@/components/ui/alert'
+import { Button } from '@/components/ui/button'
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
+import { Label } from '@/components/ui/label'
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from '@/components/ui/dialog'
+import { Loader2, AlertCircle } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useDeleteCredential } from '@/lib/hooks/use-credentials'
+import { Credential } from '@/lib/api/credentials'
+
+interface DeleteCredentialDialogProps {
+  open: boolean
+  onOpenChange: (open: boolean) => void
+  credential: Credential
+  allCredentials: Credential[]
+}
+
+export function DeleteCredentialDialog({
+  open,
+  onOpenChange,
+  credential,
+  allCredentials,
+}: DeleteCredentialDialogProps) {
+  const { t } = useTranslation()
+  const deleteCredential = useDeleteCredential()
+  const [migrateToId, setMigrateToId] = useState<string>('')
+
+  const otherCredentials = allCredentials.filter(
+    c => c.id !== credential.id && c.provider === credential.provider
+  )
+
+  const handleDeleteWithModels = () => {
+    deleteCredential.mutate(
+      { credentialId: credential.id, options: { delete_models: true } },
+      { onSuccess: () => onOpenChange(false) }
+    )
+  }
+
+  const handleMigrate = () => {
+    if (!migrateToId) return
+    deleteCredential.mutate(
+      { credentialId: credential.id, options: { migrate_to: migrateToId } },
+      { onSuccess: () => onOpenChange(false) }
+    )
+  }
+
+  const handleDeleteOnly = () => {
+    deleteCredential.mutate(
+      { credentialId: credential.id },
+      { onSuccess: () => onOpenChange(false) }
+    )
+  }
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>{t('apiKeys.deleteConfig')}</DialogTitle>
+          <DialogDescription>
+            {t('apiKeys.deleteConfigConfirm').replace('{name}', credential.name)}
+          </DialogDescription>
+        </DialogHeader>
+
+        {credential.model_count > 0 && (
+          <Alert>
+            <AlertCircle className="h-4 w-4" />
+            <AlertDescription>
+              This credential has {credential.model_count} linked model(s).
+              {otherCredentials.length > 0 && (
+                <div className="mt-2">
+                  <Label>Migrate models to:</Label>
+                  <Select value={migrateToId} onValueChange={setMigrateToId}>
+                    <SelectTrigger className="mt-1">
+                      <SelectValue placeholder="Select credential" />
+                    </SelectTrigger>
+                    <SelectContent>
+                      {otherCredentials.map(c => (
+                        <SelectItem key={c.id} value={c.id}>{c.name}</SelectItem>
+                      ))}
+                    </SelectContent>
+                  </Select>
+                </div>
+              )}
+            </AlertDescription>
+          </Alert>
+        )}
+
+        <DialogFooter className="flex-col sm:flex-row gap-2">
+          <Button variant="outline" onClick={() => onOpenChange(false)}>
+            {t('common.cancel')}
+          </Button>
+          {credential.model_count > 0 && migrateToId && (
+            <Button onClick={handleMigrate} disabled={deleteCredential.isPending}>
+              {deleteCredential.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
+              Migrate & Delete
+            </Button>
+          )}
+          <Button
+            variant="destructive"
+            onClick={credential.model_count > 0 ? handleDeleteWithModels : handleDeleteOnly}
+            disabled={deleteCredential.isPending}
+          >
+            {deleteCredential.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
+            {credential.model_count > 0 ? 'Delete with Models' : t('common.delete')}
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  )
+}
diff --git a/frontend/src/components/settings/DiscoverModelsDialog.tsx b/frontend/src/components/settings/DiscoverModelsDialog.tsx
new file mode 100644
index 00000000..4c34be91
--- /dev/null
+++ b/frontend/src/components/settings/DiscoverModelsDialog.tsx
@@ -0,0 +1,280 @@
+'use client'
+
+import { useMemo, useState, useEffect } from 'react'
+import { LoadingSpinner } from '@/components/common/LoadingSpinner'
+import { Alert, AlertDescription } from '@/components/ui/alert'
+import { Button } from '@/components/ui/button'
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
+import { Label } from '@/components/ui/label'
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from '@/components/ui/dialog'
+import { Plus, Loader2, AlertCircle } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useDiscoverModels, useRegisterModels } from '@/lib/hooks/use-credentials'
+import { Credential, DiscoveredModel } from '@/lib/api/credentials'
+import {
+  ModelType,
+  PROVIDER_DISPLAY_NAMES,
+  PROVIDER_MODALITIES,
+  TYPE_ICONS,
+  TYPE_LABELS,
+} from '@/lib/providers'
+
+interface DiscoverModelsDialogProps {
+  open: boolean
+  onOpenChange: (open: boolean) => void
+  credential: Credential
+}
+
+export function DiscoverModelsDialog({
+  open,
+  onOpenChange,
+  credential,
+}: DiscoverModelsDialogProps) {
+  const { t } = useTranslation()
+  const discoverModels = useDiscoverModels()
+  const registerModels = useRegisterModels()
+  const [discoveredModels, setDiscoveredModels] = useState<DiscoveredModel[]>([])
+  const [selectedModels, setSelectedModels] = useState<Set<string>>(new Set())
+  const [hasDiscovered, setHasDiscovered] = useState(false)
+  const [discoveryError, setDiscoveryError] = useState<string | null>(null)
+  const [searchQuery, setSearchQuery] = useState('')
+  const [customModelSelected, setCustomModelSelected] = useState(false)
+  // Model type selector - default to credential's first modality
+  const [selectedType, setSelectedType] = useState<ModelType>(
+    (credential.modalities[0] as ModelType) || 'language'
+  )
+
+  useEffect(() => {
+    if (open && !hasDiscovered) {
+      setDiscoveryError(null)
+      discoverModels.mutate(credential.id, {
+        onSuccess: (result) => {
+          const seen = new Set<string>()
+          const unique = result.discovered.filter(m => {
+            if (seen.has(m.name)) return false
+            seen.add(m.name)
+            return true
+          })
+          setDiscoveredModels(unique)
+          setSelectedModels(new Set())
+          setHasDiscovered(true)
+        },
+        onError: (error: unknown) => {
+          setHasDiscovered(true)
+          const msg = error instanceof Error ? error.message : String(error)
+          setDiscoveryError(msg)
+        },
+      })
+    }
+    if (!open) {
+      setHasDiscovered(false)
+      setDiscoveredModels([])
+      setSelectedModels(new Set())
+      setDiscoveryError(null)
+      setSearchQuery('')
+      setCustomModelSelected(false)
+      setSelectedType((credential.modalities[0] as ModelType) || 'language')
+    }
+    // eslint-disable-next-line react-hooks/exhaustive-deps -- intentionally only fires on open/close
+  }, [open])
+
+  // Reset custom selection when search changes
+  useEffect(() => {
+    setCustomModelSelected(false)
+  }, [searchQuery])
+
+  // Filter discovered models by search query
+  const filteredModels = useMemo(() => {
+    if (!searchQuery.trim()) return discoveredModels
+    const q = searchQuery.toLowerCase()
+    return discoveredModels.filter(m => m.name.toLowerCase().includes(q))
+  }, [discoveredModels, searchQuery])
+
+  // Show custom model option when search doesn't exactly match any discovered model
+  const showCustomOption = useMemo(() => {
+    if (!searchQuery.trim()) return false
+    const q = searchQuery.trim().toLowerCase()
+    return !discoveredModels.some(m => m.name.toLowerCase() === q)
+  }, [discoveredModels, searchQuery])
+
+  const handleRegister = () => {
+    const selected = discoveredModels
+      .filter(m => selectedModels.has(m.name))
+      .map(m => ({
+        name: m.name,
+        provider: m.provider,
+        model_type: selectedType,
+      }))
+    if (customModelSelected && showCustomOption) {
+      selected.push({
+        name: searchQuery.trim(),
+        provider: credential.provider,
+        model_type: selectedType,
+      })
+    }
+    registerModels.mutate(
+      { credentialId: credential.id, models: selected },
+      { onSuccess: () => onOpenChange(false) }
+    )
+  }
+
+  const totalSelected = selectedModels.size + (customModelSelected && showCustomOption ? 1 : 0)
+
+  const toggleModel = (name: string) => {
+    setSelectedModels(prev => {
+      const next = new Set(prev)
+      if (next.has(name)) next.delete(name)
+      else next.add(name)
+      return next
+    })
+  }
+
+  const toggleAll = () => {
+    const filteredNames = filteredModels.map(m => m.name)
+    const allFilteredSelected = filteredNames.every(n => selectedModels.has(n))
+    if (allFilteredSelected) {
+      setSelectedModels(prev => {
+        const next = new Set(prev)
+        filteredNames.forEach(n => next.delete(n))
+        return next
+      })
+    } else {
+      setSelectedModels(prev => {
+        const next = new Set(prev)
+        filteredNames.forEach(n => next.add(n))
+        return next
+      })
+    }
+  }
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-lg max-h-[85vh] grid-rows-[auto_1fr_auto]">
+        <DialogHeader>
+          <DialogTitle>
+            {t('models.discoverModels')} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
+          </DialogTitle>
+          <DialogDescription>
+            {credential.name}
+          </DialogDescription>
+        </DialogHeader>
+
+        <div className="min-h-0 overflow-y-auto">
+        {discoverModels.isPending ? (
+          <div className="flex items-center justify-center py-12">
+            <LoadingSpinner size="lg" />
+          </div>
+        ) : discoveryError ? (
+          <Alert variant="destructive">
+            <AlertCircle className="h-4 w-4" />
+            <AlertDescription>{discoveryError}</AlertDescription>
+          </Alert>
+        ) : (
+          <div className="space-y-4">
+            {/* Model type selector */}
+            <div className="space-y-2">
+              <Label>{t('models.modelType')}</Label>
+              <Select value={selectedType} onValueChange={(v) => setSelectedType(v as ModelType)}>
+                <SelectTrigger>
+                  <SelectValue />
+                </SelectTrigger>
+                <SelectContent>
+                  {(PROVIDER_MODALITIES[credential.provider] || credential.modalities as ModelType[]).map(type => (
+                    <SelectItem key={type} value={type}>
+                      <div className="flex items-center gap-2">
+                        {TYPE_ICONS[type]}
+                        {TYPE_LABELS[type]}
+                      </div>
+                    </SelectItem>
+                  ))}
+                </SelectContent>
+              </Select>
+              <p className="text-xs text-muted-foreground">{t('models.modelTypeHint')}</p>
+            </div>
+
+            {/* Search input */}
+            <input
+              type="text"
+              className="flex h-9 w-full rounded-md border border-input bg-background px-3 py-1 text-sm placeholder:text-muted-foreground"
+              placeholder={t('models.searchOrAddModel')}
+              value={searchQuery}
+              onChange={(e) => setSearchQuery(e.target.value)}
+            />
+
+            {/* Select all / count (only when there are discovered models to select) */}
+            {filteredModels.length > 0 && (
+              <div className="flex items-center justify-between">
+                <Button variant="outline" size="sm" onClick={toggleAll}>
+                  {filteredModels.every(m => selectedModels.has(m.name)) ? t('common.remove') : t('common.addSelected')}
+                  {' '}({selectedModels.size}/{filteredModels.length})
+                </Button>
+              </div>
+            )}
+
+            {/* Model list */}
+            <div className="space-y-1">
+              {filteredModels.map((model) => (
+                <label
+                  key={model.name}
+                  className="flex items-center gap-2 p-1.5 rounded hover:bg-muted cursor-pointer text-sm"
+                >
+                  <input
+                    type="checkbox"
+                    checked={selectedModels.has(model.name)}
+                    onChange={() => toggleModel(model.name)}
+                    className="rounded"
+                  />
+                  <span className="truncate">{model.name}</span>
+                  {model.description && model.description !== model.name && (
+                    <span className="text-xs text-muted-foreground truncate">({model.description})</span>
+                  )}
+                </label>
+              ))}
+
+              {/* Custom model option */}
+              {showCustomOption && (
+                <label className={`flex items-center gap-2 p-1.5 rounded hover:bg-muted cursor-pointer text-sm${filteredModels.length > 0 ? ' border-t mt-1 pt-2' : ''}`}>
+                  <input
+                    type="checkbox"
+                    checked={customModelSelected}
+                    onChange={() => setCustomModelSelected(prev => !prev)}
+                    className="rounded"
+                  />
+                  <Plus className="h-3.5 w-3.5 text-muted-foreground shrink-0" />
+                  <span className="truncate">
+                    {t('models.addCustomModel').replace('{name}', searchQuery.trim())}
+                  </span>
+                </label>
+              )}
+
+              {filteredModels.length === 0 && !showCustomOption && (
+                <p className="text-center py-4 text-muted-foreground text-sm">{t('models.noModelsFound')}</p>
+              )}
+            </div>
+          </div>
+        )}
+        </div>
+
+        <DialogFooter>
+          <Button variant="outline" onClick={() => onOpenChange(false)}>
+            {t('common.cancel')}
+          </Button>
+          <Button
+            onClick={handleRegister}
+            disabled={totalSelected === 0 || registerModels.isPending}
+          >
+            {registerModels.isPending && <Loader2 className="h-4 w-4 animate-spin mr-2" />}
+            {t('common.add')} ({totalSelected})
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  )
+}
diff --git a/frontend/src/components/settings/ProviderSection.tsx b/frontend/src/components/settings/ProviderSection.tsx
new file mode 100644
index 00000000..4574fa93
--- /dev/null
+++ b/frontend/src/components/settings/ProviderSection.tsx
@@ -0,0 +1,118 @@
+'use client'
+
+import { useState } from 'react'
+import { Button } from '@/components/ui/button'
+import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
+import { Badge } from '@/components/ui/badge'
+import { Plus, Check, X } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { Credential } from '@/lib/api/credentials'
+import { Model, ModelDefaults } from '@/lib/types/models'
+import {
+  PROVIDER_DISPLAY_NAMES,
+  PROVIDER_MODALITIES,
+  TYPE_ICONS,
+  TYPE_COLORS,
+  TYPE_COLOR_INACTIVE,
+  TYPE_LABELS,
+} from '@/lib/providers'
+import { CredentialFormDialog } from './CredentialFormDialog'
+import { CredentialItem } from './CredentialItem'
+
+interface ProviderSectionProps {
+  provider: string
+  credentials: Credential[]
+  models: Model[]
+  defaults: ModelDefaults | null
+  allCredentials: Credential[]
+  encryptionReady: boolean
+}
+
+export function ProviderSection({
+  provider,
+  credentials,
+  models,
+  defaults,
+  allCredentials,
+  encryptionReady,
+}: ProviderSectionProps) {
+  const { t } = useTranslation()
+  const [addOpen, setAddOpen] = useState(false)
+
+  const displayName = PROVIDER_DISPLAY_NAMES[provider] || provider
+  const modalities = PROVIDER_MODALITIES[provider] || ['language']
+  const hasCredentials = credentials.length > 0
+
+  // Models linked to any credential of this provider
+  const providerModels = models.filter(m =>
+    credentials.some(c => c.id === m.credential)
+  )
+  const activeTypes = new Set(providerModels.map(m => m.type))
+
+  return (
+    <Card className={!hasCredentials ? 'opacity-80' : undefined}>
+      <CardHeader className="pb-3">
+        <div className="flex items-center justify-between">
+          <div className="flex items-center gap-3 flex-wrap">
+            <CardTitle className="text-lg capitalize">{displayName}</CardTitle>
+            <div className="flex items-center gap-1">
+              {modalities.map((type) => (
+                <Badge
+                  key={type}
+                  variant="secondary"
+                  className={`text-xs gap-1 ${activeTypes.has(type) ? TYPE_COLORS[type] : TYPE_COLOR_INACTIVE}`}
+                >
+                  {TYPE_ICONS[type]}
+                  <span className="hidden sm:inline">{TYPE_LABELS[type]}</span>
+                </Badge>
+              ))}
+            </div>
+          </div>
+          <div className="flex items-center gap-2">
+            {hasCredentials ? (
+              <Badge className="bg-emerald-100 text-emerald-700 hover:bg-emerald-100 dark:bg-emerald-900/30 dark:text-emerald-300">
+                <Check className="mr-1 h-3 w-3" />
+                {t('apiKeys.configured')}
+              </Badge>
+            ) : (
+              <Badge variant="outline" className="text-muted-foreground border-dashed">
+                <X className="mr-1 h-3 w-3" />
+                {t('apiKeys.notConfigured')}
+              </Badge>
+            )}
+          </div>
+        </div>
+      </CardHeader>
+      <CardContent className="space-y-2">
+        {credentials.map(cred => (
+          <CredentialItem
+            key={cred.id}
+            credential={cred}
+            models={models}
+            defaults={defaults}
+            allCredentials={allCredentials}
+          />
+        ))}
+
+        <Button
+          variant="outline"
+          size="sm"
+          onClick={() => setAddOpen(true)}
+          className="w-full gap-2"
+          disabled={!encryptionReady}
+        >
+          <Plus className="h-4 w-4" />
+          {t('apiKeys.addConfig')}
+        </Button>
+      </CardContent>
+
+      {addOpen && (
+        <CredentialFormDialog
+          open={addOpen}
+          onOpenChange={setAddOpen}
+          provider={provider}
+        />
+      )}
+    </Card>
+  )
+}
diff --git a/frontend/src/components/settings/index.ts b/frontend/src/components/settings/index.ts
index b70ac99f..4176671a 100644
--- a/frontend/src/components/settings/index.ts
+++ b/frontend/src/components/settings/index.ts
@@ -1,3 +1,9 @@
 export { MigrationBanner } from './MigrationBanner'
 export { EmbeddingModelChangeDialog } from './EmbeddingModelChangeDialog'
 export { ModelTestResultDialog } from './ModelTestResultDialog'
+export { CredentialFormDialog } from './CredentialFormDialog'
+export { DiscoverModelsDialog } from './DiscoverModelsDialog'
+export { DeleteCredentialDialog } from './DeleteCredentialDialog'
+export { CredentialItem } from './CredentialItem'
+export { ProviderSection } from './ProviderSection'
+export { DefaultModelSelectors } from './DefaultModelSelectors'
diff --git a/frontend/src/lib/providers.tsx b/frontend/src/lib/providers.tsx
new file mode 100644
index 00000000..10ecf493
--- /dev/null
+++ b/frontend/src/lib/providers.tsx
@@ -0,0 +1,95 @@
+import { MessageSquare, Code, Mic, Volume2 } from 'lucide-react'
+
+export type ModelType = 'language' | 'embedding' | 'text_to_speech' | 'speech_to_text'
+
+// Provider display names
+export const PROVIDER_DISPLAY_NAMES: Record<string, string> = {
+  openai: 'OpenAI',
+  anthropic: 'Anthropic',
+  google: 'Google AI',
+  groq: 'Groq',
+  mistral: 'Mistral AI',
+  deepseek: 'DeepSeek',
+  xai: 'xAI (Grok)',
+  openrouter: 'OpenRouter',
+  voyage: 'Voyage AI',
+  elevenlabs: 'ElevenLabs',
+  deepgram: 'Deepgram',
+  ollama: 'Ollama',
+  azure: 'Azure OpenAI',
+  vertex: 'Google Vertex AI',
+  openai_compatible: 'OpenAI Compatible',
+  dashscope: 'DashScope (Qwen)',
+  minimax: 'MiniMax',
+}
+
+// All providers in display order
+export const ALL_PROVIDERS = [
+  'openai', 'anthropic', 'google', 'groq', 'mistral', 'deepseek',
+  'xai', 'openrouter', 'dashscope', 'minimax', 'voyage', 'elevenlabs', 'deepgram', 'ollama',
+  'azure', 'vertex', 'openai_compatible',
+]
+
+// Default modalities per provider
+export const PROVIDER_MODALITIES: Record<string, ModelType[]> = {
+  openai: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
+  anthropic: ['language'],
+  google: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
+  groq: ['language', 'speech_to_text'],
+  mistral: ['language', 'embedding', 'speech_to_text', 'text_to_speech'],
+  deepseek: ['language'],
+  xai: ['language', 'text_to_speech'],
+  openrouter: ['language', 'embedding'],
+  voyage: ['embedding'],
+  elevenlabs: ['text_to_speech', 'speech_to_text'],
+  deepgram: ['text_to_speech'],
+  ollama: ['language', 'embedding'],
+  azure: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
+  vertex: ['language', 'embedding', 'text_to_speech'],
+  openai_compatible: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
+  dashscope: ['language'],
+  minimax: ['language'],
+}
+
+// Documentation links
+export const PROVIDER_DOCS: Record<string, string> = {
+  openai: 'https://platform.openai.com/api-keys',
+  anthropic: 'https://console.anthropic.com/settings/keys',
+  google: 'https://aistudio.google.com/app/apikey',
+  groq: 'https://console.groq.com/keys',
+  mistral: 'https://console.mistral.ai/api-keys/',
+  deepseek: 'https://platform.deepseek.com/api_keys',
+  xai: 'https://console.x.ai/',
+  openrouter: 'https://openrouter.ai/keys',
+  voyage: 'https://dash.voyageai.com/api-keys',
+  elevenlabs: 'https://elevenlabs.io/app/settings/api-keys',
+  deepgram: 'https://console.deepgram.com/',
+  azure: 'https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI',
+  vertex: 'https://cloud.google.com/vertex-ai/docs/start/cloud-environment',
+  openai_compatible: 'https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md',
+  dashscope: 'https://help.aliyun.com/zh/model-studio/getting-started/',
+  minimax: 'https://platform.minimaxi.com/document/Guides',
+}
+
+export const TYPE_ICONS: Record<ModelType, React.ReactNode> = {
+  language: <MessageSquare className="h-3 w-3" />,
+  embedding: <Code className="h-3 w-3" />,
+  text_to_speech: <Volume2 className="h-3 w-3" />,
+  speech_to_text: <Mic className="h-3 w-3" />,
+}
+
+export const TYPE_COLORS: Record<ModelType, string> = {
+  language: 'bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-300',
+  embedding: 'bg-purple-100 text-purple-700 dark:bg-purple-900/30 dark:text-purple-300',
+  text_to_speech: 'bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-300',
+  speech_to_text: 'bg-teal-100 text-teal-700 dark:bg-teal-900/30 dark:text-teal-300',
+}
+
+export const TYPE_COLOR_INACTIVE = 'bg-muted text-muted-foreground opacity-50'
+
+export const TYPE_LABELS: Record<ModelType, string> = {
+  language: 'Language',
+  embedding: 'Embedding',
+  text_to_speech: 'TTS',
+  speech_to_text: 'STT',
+}
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 4afcb624..25943e4a 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -60,13 +60,10 @@ class TestSupportedProviderMatchesOtherSourcesOfTruth:
         import re
         from pathlib import Path
 
-        page = (
-            Path(__file__).parent.parent
-            / "frontend/src/app/(dashboard)/settings/api-keys/page.tsx"
-        )
+        page = Path(__file__).parent.parent / "frontend/src/lib/providers.tsx"
         source = page.read_text()
         match = re.search(r"const ALL_PROVIDERS = \[(.*?)\]", source, re.DOTALL)
-        assert match, "ALL_PROVIDERS array not found in api-keys/page.tsx"
+        assert match, "ALL_PROVIDERS array not found in lib/providers.tsx"
         frontend_providers = re.findall(r"'([a-z0-9_]+)'", match.group(1))
         assert set(SupportedProvider.__args__) == set(frontend_providers)
 

From 038c9faa19b026a604eaed34407addb7d87a6e50 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:01:42 -0300
Subject: [PATCH 174/345] refactor(commands): extract shared embedding core
 (#1071)

- embed_note / embed_insight / embed_source now share a single
  load->embed->write runner (_embed_record) with one common
  ValueError/Exception epilogue; note and insight additionally share
  _embed_markdown_record for the identical load/validate/embed/UPSERT body
- rebuild_embeddings submits jobs for sources/notes/insights through one
  _submit_embedding_jobs helper instead of three copy-pasted loops
- the four embed-family commands reuse one EMBED_RETRY_CONFIG dict, with a
  NOTE marking that stop_on can never trigger today (commands catch
  ValueError internally) - preserved as-is for a future error-handling PR
- full_model_dump() was copy-pasted in three command files but only used by
  podcast_commands: moved to open_notebook/utils/model_utils.py, imported
  where used, dead copies in embedding/source commands removed

Behavior-identical: same outputs, success=False paths, log messages and
retry configuration. 403 tests pass; ruff and mypy clean (no new errors).
---
 CHANGELOG.md                       |   1 +
 commands/embedding_commands.py     | 507 ++++++++++++-----------------
 commands/podcast_commands.py       |  13 +-
 commands/source_commands.py        |  12 -
 open_notebook/utils/__init__.py    |   3 +
 open_notebook/utils/model_utils.py |  15 +
 6 files changed, 232 insertions(+), 319 deletions(-)
 create mode 100644 open_notebook/utils/model_utils.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c1a74474..9bbe091a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - Anthropic models are now discovered live from `GET https://api.anthropic.com/v1/models` (paginated) instead of a hardcoded claude-3-era list — the code comment claiming "Anthropic doesn't have a model listing API" was wrong. A refreshed static list (current Claude 4.x/5 aliases) remains as a fallback when the API call fails, and the credential-based discovery path (`discover_with_config`) uses the same live-with-fallback logic
+- Deduplicated the embedding commands (`commands/embedding_commands.py`, ~100 lines less): `embed_note`/`embed_insight`/`embed_source` now share one load→embed→write core with a single error-handling epilogue, the rebuild command uses one submission-loop helper for all three kinds, and the thrice-copied `full_model_dump()` moved to `open_notebook/utils/model_utils.py`. Pure refactor — same outputs, logs and retry behavior
 
 ### Removed
 - Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index 97c30ca9..e6f7fe8f 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -1,8 +1,16 @@
 import time
-from typing import Dict, List, Literal, Optional
+from typing import (
+    Any,
+    Awaitable,
+    Callable,
+    Dict,
+    List,
+    Literal,
+    Optional,
+    Tuple,
+)
 
 from loguru import logger
-from pydantic import BaseModel
 from surreal_commands import CommandInput, CommandOutput, command, submit_command
 
 from open_notebook.ai.models import model_manager
@@ -12,16 +20,21 @@ from open_notebook.exceptions import ConfigurationError
 from open_notebook.utils.chunking import ContentType, chunk_text, detect_content_type
 from open_notebook.utils.embedding import generate_embedding, generate_embeddings
 
-
-def full_model_dump(model):
-    if isinstance(model, BaseModel):
-        return model.model_dump()
-    elif isinstance(model, dict):
-        return {k: full_model_dump(v) for k, v in model.items()}
-    elif isinstance(model, list):
-        return [full_model_dump(item) for item in model]
-    else:
-        return model
+# NOTE: `stop_on` below can never trigger in practice — each command catches
+# ValueError internally and returns success=False instead of raising, so the
+# retry layer never sees it. Kept as-is on purpose; to be revisited in a
+# dedicated error-handling PR.
+EMBED_RETRY_CONFIG = {
+    "max_attempts": 5,
+    "wait_strategy": "exponential_jitter",
+    "wait_min": 1,
+    "wait_max": 60,
+    "stop_on": [
+        ValueError,
+        ConfigurationError,
+    ],  # Don't retry validation/config errors
+    "retry_log_level": "debug",
+}
 
 
 def get_command_id(input_data: CommandInput) -> str:
@@ -31,6 +44,96 @@ def get_command_id(input_data: CommandInput) -> str:
     return "unknown"
 
 
+async def _embed_record(
+    input_data: CommandInput,
+    *,
+    kind: str,
+    record_id: str,
+    embed: Callable[[], Awaitable[Tuple[Dict[str, Any], str]]],
+) -> Tuple[Optional[Dict[str, Any]], float, Optional[str]]:
+    """
+    Shared core for the embed_* commands: run the embedding work with the
+    common logging and error-handling epilogue.
+
+    Args:
+        input_data: The command input (used for command_id logging).
+        kind: Record kind for log messages ("note", "insight", "source").
+        record_id: The record being embedded.
+        embed: Async callable doing the actual load/validate/embed/write work.
+            Returns (extra_output_fields, success_log_detail).
+
+    Returns:
+        (extra_output_fields, processing_time, error_message)
+        extra_output_fields is None and error_message is set on permanent
+        (ValueError) failure. Transient failures re-raise so the retry layer
+        can handle them.
+    """
+    start_time = time.time()
+
+    try:
+        logger.info(f"Starting embedding for {kind}: {record_id}")
+
+        extra_fields, log_detail = await embed()
+
+        processing_time = time.time() - start_time
+        logger.info(
+            f"Successfully embedded {kind} {record_id}{log_detail} in {processing_time:.2f}s"
+        )
+        return extra_fields, processing_time, None
+
+    except ValueError as e:
+        # Permanent failure - don't retry
+        processing_time = time.time() - start_time
+        cmd_id = get_command_id(input_data)
+        logger.error(f"Failed to embed {kind} {record_id} (command: {cmd_id}): {e}")
+        return None, processing_time, str(e)
+    except Exception as e:
+        # Transient failure - will be retried (surreal-commands logs final failure)
+        cmd_id = get_command_id(input_data)
+        logger.debug(
+            f"Transient error embedding {kind} {record_id} (command: {cmd_id}): {e}"
+        )
+        raise
+
+
+async def _embed_markdown_record(
+    input_data: CommandInput,
+    *,
+    label: str,
+    record_id: str,
+    loader: Callable[[str], Awaitable[Any]],
+) -> Tuple[Dict[str, Any], str]:
+    """
+    Load a record, validate its content, embed it as markdown and UPSERT the
+    embedding back onto the record. Shared by embed_note and embed_insight.
+    """
+    # 1. Load record
+    record = await loader(record_id)
+    if not record:
+        raise ValueError(f"{label} '{record_id}' not found")
+
+    if not record.content or not record.content.strip():
+        raise ValueError(f"{label} '{record_id}' has no content to embed")
+
+    # 2. Generate embedding (auto-chunks + mean pools if needed)
+    # Notes and insights are typically markdown content
+    cmd_id = get_command_id(input_data)
+    embedding = await generate_embedding(
+        record.content, content_type=ContentType.MARKDOWN, command_id=cmd_id
+    )
+
+    # 3. UPSERT embedding into the record
+    await repo_query(
+        "UPDATE $record_id SET embedding = $embedding",
+        {
+            "record_id": ensure_record_id(record_id),
+            "embedding": embedding,
+        },
+    )
+
+    return {}, ""
+
+
 class RebuildEmbeddingsInput(CommandInput):
     mode: Literal["existing", "all"]
     include_sources: bool = True
@@ -50,11 +153,6 @@ class RebuildEmbeddingsOutput(CommandOutput):
     error_message: Optional[str] = None
 
 
-# =============================================================================
-# NEW EMBEDDING COMMANDS (Phase 3)
-# =============================================================================
-
-
 class CreateInsightInput(CommandInput):
     """Input for creating a source insight with automatic retry on conflicts."""
 
@@ -118,21 +216,7 @@ class EmbedSourceOutput(CommandOutput):
     error_message: Optional[str] = None
 
 
-@command(
-    "embed_note",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [
-            ValueError,
-            ConfigurationError,
-        ],  # Don't retry validation/config errors
-        "retry_log_level": "debug",
-    },
-)
+@command("embed_note", app="open_notebook", retry=EMBED_RETRY_CONFIG)
 async def embed_note_command(input_data: EmbedNoteInput) -> EmbedNoteOutput:
     """
     Generate and store embedding for a single note.
@@ -150,84 +234,31 @@ async def embed_note_command(input_data: EmbedNoteInput) -> EmbedNoteOutput:
     - Uses exponential-jitter backoff (1-60s)
     - Does NOT retry permanent failures (ValueError for validation errors)
     """
-    start_time = time.time()
 
-    try:
-        logger.info(f"Starting embedding for note: {input_data.note_id}")
-
-        # 1. Load note
-        note = await Note.get(input_data.note_id)
-        if not note:
-            raise ValueError(f"Note '{input_data.note_id}' not found")
-
-        if not note.content or not note.content.strip():
-            raise ValueError(f"Note '{input_data.note_id}' has no content to embed")
-
-        # 2. Generate embedding (auto-chunks + mean pools if needed)
-        # Notes are typically markdown content
-        cmd_id = get_command_id(input_data)
-        embedding = await generate_embedding(
-            note.content, content_type=ContentType.MARKDOWN, command_id=cmd_id
+    async def embed() -> Tuple[Dict[str, Any], str]:
+        return await _embed_markdown_record(
+            input_data,
+            label="Note",
+            record_id=input_data.note_id,
+            loader=Note.get,
         )
 
-        # 3. UPSERT embedding into note record
-        await repo_query(
-            "UPDATE $note_id SET embedding = $embedding",
-            {
-                "note_id": ensure_record_id(input_data.note_id),
-                "embedding": embedding,
-            },
-        )
+    _, processing_time, error_message = await _embed_record(
+        input_data,
+        kind="note",
+        record_id=input_data.note_id,
+        embed=embed,
+    )
 
-        processing_time = time.time() - start_time
-        logger.info(
-            f"Successfully embedded note {input_data.note_id} in {processing_time:.2f}s"
-        )
-
-        return EmbedNoteOutput(
-            success=True,
-            note_id=input_data.note_id,
-            processing_time=processing_time,
-        )
-
-    except ValueError as e:
-        # Permanent failure - don't retry
-        processing_time = time.time() - start_time
-        cmd_id = get_command_id(input_data)
-        logger.error(
-            f"Failed to embed note {input_data.note_id} (command: {cmd_id}): {e}"
-        )
-        return EmbedNoteOutput(
-            success=False,
-            note_id=input_data.note_id,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-    except Exception as e:
-        # Transient failure - will be retried (surreal-commands logs final failure)
-        cmd_id = get_command_id(input_data)
-        logger.debug(
-            f"Transient error embedding note {input_data.note_id} "
-            f"(command: {cmd_id}): {e}"
-        )
-        raise
+    return EmbedNoteOutput(
+        success=error_message is None,
+        note_id=input_data.note_id,
+        processing_time=processing_time,
+        error_message=error_message,
+    )
 
 
-@command(
-    "embed_insight",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [
-            ValueError,
-            ConfigurationError,
-        ],  # Don't retry validation/config errors
-        "retry_log_level": "debug",
-    },
-)
+@command("embed_insight", app="open_notebook", retry=EMBED_RETRY_CONFIG)
 async def embed_insight_command(input_data: EmbedInsightInput) -> EmbedInsightOutput:
     """
     Generate and store embedding for a single source insight.
@@ -245,86 +276,31 @@ async def embed_insight_command(input_data: EmbedInsightInput) -> EmbedInsightOu
     - Uses exponential-jitter backoff (1-60s)
     - Does NOT retry permanent failures (ValueError for validation errors)
     """
-    start_time = time.time()
 
-    try:
-        logger.info(f"Starting embedding for insight: {input_data.insight_id}")
-
-        # 1. Load insight
-        insight = await SourceInsight.get(input_data.insight_id)
-        if not insight:
-            raise ValueError(f"Insight '{input_data.insight_id}' not found")
-
-        if not insight.content or not insight.content.strip():
-            raise ValueError(
-                f"Insight '{input_data.insight_id}' has no content to embed"
-            )
-
-        # 2. Generate embedding (auto-chunks + mean pools if needed)
-        # Insights are typically markdown content (generated by LLM)
-        cmd_id = get_command_id(input_data)
-        embedding = await generate_embedding(
-            insight.content, content_type=ContentType.MARKDOWN, command_id=cmd_id
+    async def embed() -> Tuple[Dict[str, Any], str]:
+        return await _embed_markdown_record(
+            input_data,
+            label="Insight",
+            record_id=input_data.insight_id,
+            loader=SourceInsight.get,
         )
 
-        # 3. UPSERT embedding into insight record
-        await repo_query(
-            "UPDATE $insight_id SET embedding = $embedding",
-            {
-                "insight_id": ensure_record_id(input_data.insight_id),
-                "embedding": embedding,
-            },
-        )
+    _, processing_time, error_message = await _embed_record(
+        input_data,
+        kind="insight",
+        record_id=input_data.insight_id,
+        embed=embed,
+    )
 
-        processing_time = time.time() - start_time
-        logger.info(
-            f"Successfully embedded insight {input_data.insight_id} in {processing_time:.2f}s"
-        )
-
-        return EmbedInsightOutput(
-            success=True,
-            insight_id=input_data.insight_id,
-            processing_time=processing_time,
-        )
-
-    except ValueError as e:
-        # Permanent failure - don't retry
-        processing_time = time.time() - start_time
-        cmd_id = get_command_id(input_data)
-        logger.error(
-            f"Failed to embed insight {input_data.insight_id} (command: {cmd_id}): {e}"
-        )
-        return EmbedInsightOutput(
-            success=False,
-            insight_id=input_data.insight_id,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-    except Exception as e:
-        # Transient failure - will be retried (surreal-commands logs final failure)
-        cmd_id = get_command_id(input_data)
-        logger.debug(
-            f"Transient error embedding insight {input_data.insight_id} "
-            f"(command: {cmd_id}): {e}"
-        )
-        raise
+    return EmbedInsightOutput(
+        success=error_message is None,
+        insight_id=input_data.insight_id,
+        processing_time=processing_time,
+        error_message=error_message,
+    )
 
 
-@command(
-    "embed_source",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [
-            ValueError,
-            ConfigurationError,
-        ],  # Don't retry validation/config errors
-        "retry_log_level": "debug",
-    },
-)
+@command("embed_source", app="open_notebook", retry=EMBED_RETRY_CONFIG)
 async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutput:
     """
     Generate and store embeddings for a source document.
@@ -345,11 +321,8 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
     - Uses exponential-jitter backoff (1-60s)
     - Does NOT retry permanent failures (ValueError for validation errors)
     """
-    start_time = time.time()
-
-    try:
-        logger.info(f"Starting embedding for source: {input_data.source_id}")
 
+    async def embed() -> Tuple[Dict[str, Any], str]:
         # 1. Load source
         source = await Source.get(input_data.source_id)
         if not source:
@@ -412,58 +385,25 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
         logger.debug(f"Inserting {len(records)} source_embedding records")
         await repo_insert("source_embedding", records)
 
-        processing_time = time.time() - start_time
-        logger.info(
-            f"Successfully embedded source {input_data.source_id}: "
-            f"{total_chunks} chunks in {processing_time:.2f}s"
-        )
+        return {"chunks_created": total_chunks}, f": {total_chunks} chunks"
 
-        return EmbedSourceOutput(
-            success=True,
-            source_id=input_data.source_id,
-            chunks_created=total_chunks,
-            processing_time=processing_time,
-        )
+    extra_fields, processing_time, error_message = await _embed_record(
+        input_data,
+        kind="source",
+        record_id=input_data.source_id,
+        embed=embed,
+    )
 
-    except ValueError as e:
-        # Permanent failure - don't retry
-        processing_time = time.time() - start_time
-        cmd_id = get_command_id(input_data)
-        logger.error(
-            f"Failed to embed source {input_data.source_id} (command: {cmd_id}): {e}"
-        )
-        return EmbedSourceOutput(
-            success=False,
-            source_id=input_data.source_id,
-            chunks_created=0,
-            processing_time=processing_time,
-            error_message=str(e),
-        )
-    except Exception as e:
-        # Transient failure - will be retried (surreal-commands logs final failure)
-        cmd_id = get_command_id(input_data)
-        logger.debug(
-            f"Transient error embedding source {input_data.source_id} "
-            f"(command: {cmd_id}): {e}"
-        )
-        raise
+    return EmbedSourceOutput(
+        success=error_message is None,
+        source_id=input_data.source_id,
+        chunks_created=(extra_fields or {}).get("chunks_created", 0),
+        processing_time=processing_time,
+        error_message=error_message,
+    )
 
 
-@command(
-    "create_insight",
-    app="open_notebook",
-    retry={
-        "max_attempts": 5,
-        "wait_strategy": "exponential_jitter",
-        "wait_min": 1,
-        "wait_max": 60,
-        "stop_on": [
-            ValueError,
-            ConfigurationError,
-        ],  # Don't retry validation/config errors
-        "retry_log_level": "debug",
-    },
-)
+@command("create_insight", app="open_notebook", retry=EMBED_RETRY_CONFIG)
 async def create_insight_command(
     input_data: CreateInsightInput,
 ) -> CreateInsightOutput:
@@ -631,6 +571,37 @@ async def collect_items_for_rebuild(
     return items
 
 
+def _submit_embedding_jobs(
+    kind: str, command_name: str, id_field: str, item_ids: List[str]
+) -> Tuple[int, int]:
+    """
+    Submit one embedding command per item, logging progress every 50 items.
+
+    Returns:
+        (submitted_count, failed_count)
+    """
+    logger.info(f"\nSubmitting {len(item_ids)} {kind} embedding jobs...")
+    submitted = 0
+    failed = 0
+    for idx, item_id in enumerate(item_ids, 1):
+        try:
+            submit_command(
+                "open_notebook",
+                command_name,
+                {id_field: item_id},
+            )
+            submitted += 1
+
+            if idx % 50 == 0 or idx == len(item_ids):
+                logger.info(f"  Progress: {idx}/{len(item_ids)} {kind} jobs submitted")
+
+        except Exception as e:
+            logger.error(f"Failed to submit {command_name} for {item_id}: {e}")
+            failed += 1
+
+    return submitted, failed
+
+
 @command("rebuild_embeddings", app="open_notebook", retry=None)
 async def rebuild_embeddings_command(
     input_data: RebuildEmbeddingsInput,
@@ -693,71 +664,17 @@ async def rebuild_embeddings_command(
                 processing_time=time.time() - start_time,
             )
 
-        # Initialize counters
-        sources_submitted = 0
-        notes_submitted = 0
-        insights_submitted = 0
-        failed_submissions = 0
-
-        # Submit embed_source commands for sources
-        logger.info(f"\nSubmitting {len(items['sources'])} source embedding jobs...")
-        for idx, source_id in enumerate(items["sources"], 1):
-            try:
-                submit_command(
-                    "open_notebook",
-                    "embed_source",
-                    {"source_id": source_id},
-                )
-                sources_submitted += 1
-
-                if idx % 50 == 0 or idx == len(items["sources"]):
-                    logger.info(
-                        f"  Progress: {idx}/{len(items['sources'])} source jobs submitted"
-                    )
-
-            except Exception as e:
-                logger.error(f"Failed to submit embed_source for {source_id}: {e}")
-                failed_submissions += 1
-
-        # Submit embed_note commands for notes
-        logger.info(f"\nSubmitting {len(items['notes'])} note embedding jobs...")
-        for idx, note_id in enumerate(items["notes"], 1):
-            try:
-                submit_command(
-                    "open_notebook",
-                    "embed_note",
-                    {"note_id": note_id},
-                )
-                notes_submitted += 1
-
-                if idx % 50 == 0 or idx == len(items["notes"]):
-                    logger.info(
-                        f"  Progress: {idx}/{len(items['notes'])} note jobs submitted"
-                    )
-
-            except Exception as e:
-                logger.error(f"Failed to submit embed_note for {note_id}: {e}")
-                failed_submissions += 1
-
-        # Submit embed_insight commands for insights
-        logger.info(f"\nSubmitting {len(items['insights'])} insight embedding jobs...")
-        for idx, insight_id in enumerate(items["insights"], 1):
-            try:
-                submit_command(
-                    "open_notebook",
-                    "embed_insight",
-                    {"insight_id": insight_id},
-                )
-                insights_submitted += 1
-
-                if idx % 50 == 0 or idx == len(items["insights"]):
-                    logger.info(
-                        f"  Progress: {idx}/{len(items['insights'])} insight jobs submitted"
-                    )
-
-            except Exception as e:
-                logger.error(f"Failed to submit embed_insight for {insight_id}: {e}")
-                failed_submissions += 1
+        # Submit one embedding command per item, per kind
+        sources_submitted, sources_failed = _submit_embedding_jobs(
+            "source", "embed_source", "source_id", items["sources"]
+        )
+        notes_submitted, notes_failed = _submit_embedding_jobs(
+            "note", "embed_note", "note_id", items["notes"]
+        )
+        insights_submitted, insights_failed = _submit_embedding_jobs(
+            "insight", "embed_insight", "insight_id", items["insights"]
+        )
+        failed_submissions = sources_failed + notes_failed + insights_failed
 
         processing_time = time.time() - start_time
         jobs_submitted = sources_submitted + notes_submitted + insights_submitted
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 8535715b..5c3a1e2c 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -4,7 +4,6 @@ from pathlib import Path
 from typing import Optional
 
 from loguru import logger
-from pydantic import BaseModel
 from surreal_commands import CommandInput, CommandOutput, command
 
 from open_notebook.config import DATA_FOLDER
@@ -15,6 +14,7 @@ from open_notebook.podcasts.models import (
     SpeakerProfile,
     _resolve_model_config,
 )
+from open_notebook.utils.model_utils import full_model_dump
 
 try:
     from podcast_creator import configure, create_podcast
@@ -37,17 +37,6 @@ def build_episode_output_dir(data_folder: str) -> tuple[str, Path]:
     return episode_dir_name, output_dir
 
 
-def full_model_dump(model):
-    if isinstance(model, BaseModel):
-        return model.model_dump()
-    elif isinstance(model, dict):
-        return {k: full_model_dump(v) for k, v in model.items()}
-    elif isinstance(model, list):
-        return [full_model_dump(item) for item in model]
-    else:
-        return model
-
-
 class PodcastGenerationInput(CommandInput):
     episode_profile: str
     speaker_profile: str
diff --git a/commands/source_commands.py b/commands/source_commands.py
index b0b5ef89..a1448038 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -2,7 +2,6 @@ import time
 from typing import Any, Dict, List, Optional
 
 from loguru import logger
-from pydantic import BaseModel
 from surreal_commands import CommandInput, CommandOutput, command
 
 from open_notebook.database.repository import ensure_record_id
@@ -18,17 +17,6 @@ except ImportError as e:
     raise ValueError("graphs not available")
 
 
-def full_model_dump(model):
-    if isinstance(model, BaseModel):
-        return model.model_dump()
-    elif isinstance(model, dict):
-        return {k: full_model_dump(v) for k, v in model.items()}
-    elif isinstance(model, list):
-        return [full_model_dump(item) for item in model]
-    else:
-        return model
-
-
 class SourceProcessingInput(CommandInput):
     source_id: str
     content_state: Dict[str, Any]
diff --git a/open_notebook/utils/__init__.py b/open_notebook/utils/__init__.py
index a31c1bda..17e2b10b 100644
--- a/open_notebook/utils/__init__.py
+++ b/open_notebook/utils/__init__.py
@@ -26,6 +26,7 @@ from .encryption import (
     decrypt_value,
     encrypt_value,
 )
+from .model_utils import full_model_dump
 from .text_utils import (
     clean_thinking_content,
     parse_thinking_content,
@@ -66,4 +67,6 @@ __all__ = [
     # Encryption utils
     "decrypt_value",
     "encrypt_value",
+    # Model utils
+    "full_model_dump",
 ]
diff --git a/open_notebook/utils/model_utils.py b/open_notebook/utils/model_utils.py
new file mode 100644
index 00000000..aa8a6a81
--- /dev/null
+++ b/open_notebook/utils/model_utils.py
@@ -0,0 +1,15 @@
+"""Utilities for working with Pydantic models."""
+
+from pydantic import BaseModel
+
+
+def full_model_dump(model):
+    """Recursively dump Pydantic models nested inside dicts/lists to plain data."""
+    if isinstance(model, BaseModel):
+        return model.model_dump()
+    elif isinstance(model, dict):
+        return {k: full_model_dump(v) for k, v in model.items()}
+    elif isinstance(model, list):
+        return [full_model_dump(item) for item in model]
+    else:
+        return model

From fc03cf3b6776afa2e77accf07d6ad07bbf3182df Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:01:47 -0300
Subject: [PATCH 175/345] refactor(api): extract shared session and message
 helpers for chat routers (#1072)

* test(api): characterize shared chat/source-chat router behaviors

* refactor(api): extract shared session and message helpers for chat routers

* refactor(api): mark intentionally unused source id unpacks

The session handlers only need the verified session; the source-level
verification happens inside get_verified_source_session. Underscore the
unused binding in get/update/delete to make that explicit.
---
 CHANGELOG.md                                |   1 +
 api/routers/_chat_shared.py                 |  94 ++++++
 api/routers/chat.py                         | 109 ++-----
 api/routers/source_chat.py                  | 183 ++---------
 tests/test_chat_routers_characterization.py | 334 ++++++++++++++++++++
 5 files changed, 473 insertions(+), 248 deletions(-)
 create mode 100644 api/routers/_chat_shared.py
 create mode 100644 tests/test_chat_routers_characterization.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9bbe091a..30a018f8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks)
+- Internal refactor: extracted the session/source verification, record-ID normalization, LangGraph message extraction and shared response models duplicated across the chat and source-chat routers into `api/routers/_chat_shared.py`, pinned by new characterization tests — no behavior change
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Internal refactor with no user-facing change: split the 1,441-line API Keys settings page into focused components under `frontend/src/components/settings/` and moved the provider config tables to `frontend/src/lib/providers.tsx`, deduplicating the default-model select in the process
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
diff --git a/api/routers/_chat_shared.py b/api/routers/_chat_shared.py
new file mode 100644
index 00000000..7e65e3ab
--- /dev/null
+++ b/api/routers/_chat_shared.py
@@ -0,0 +1,94 @@
+"""Shared helpers for the chat and source-chat routers.
+
+Both `api/routers/chat.py` and `api/routers/source_chat.py` operate on
+`chat_session` records linked to their parent (notebook or source) via the
+`refers_to` relation, and both convert LangGraph state messages into API
+response models. This module holds the single definition of those pieces.
+
+Behavior notes:
+- The helpers raise exactly what the previously inlined blocks raised
+  (`NotFoundError` propagates from `ObjectModel.get`, `HTTPException(404)` for
+  a missing relation), so each router's existing try/except arms keep mapping
+  them to the same status codes and messages as before.
+"""
+
+from typing import Any, Iterable, List, Optional, Tuple
+
+from fastapi import HTTPException
+from pydantic import BaseModel, Field
+
+from open_notebook.database.repository import ensure_record_id, repo_query
+from open_notebook.domain.notebook import ChatSession, Source
+
+
+# Shared response models
+class ChatMessage(BaseModel):
+    id: str = Field(..., description="Message ID")
+    type: str = Field(..., description="Message type (human|ai)")
+    content: str = Field(..., description="Message content")
+    timestamp: Optional[str] = Field(None, description="Message timestamp")
+
+
+class SuccessResponse(BaseModel):
+    success: bool = Field(True, description="Operation success status")
+    message: str = Field(..., description="Success message")
+
+
+def normalize_record_id(table: str, record_id: str) -> str:
+    """Ensure a record ID carries its table prefix (`table:id`)."""
+    prefix = f"{table}:"
+    return record_id if record_id.startswith(prefix) else f"{prefix}{record_id}"
+
+
+async def get_source_or_404(source_id: str) -> Tuple[str, Source]:
+    """Normalize a source ID and fetch the source, 404 if missing."""
+    full_source_id = normalize_record_id("source", source_id)
+    source = await Source.get(full_source_id)
+    if not source:
+        raise HTTPException(status_code=404, detail="Source not found")
+    return full_source_id, source
+
+
+async def get_session_or_404(session_id: str) -> Tuple[str, ChatSession]:
+    """Normalize a session ID and fetch the chat session, 404 if missing."""
+    full_session_id = normalize_record_id("chat_session", session_id)
+    session = await ChatSession.get(full_session_id)
+    if not session:
+        raise HTTPException(status_code=404, detail="Session not found")
+    return full_session_id, session
+
+
+async def get_verified_source_session(
+    source_id: str, session_id: str
+) -> Tuple[str, Source, str, ChatSession]:
+    """Verify the source exists, the session exists, and the session refers to
+    the source. Returns the normalized IDs plus both records."""
+    full_source_id, source = await get_source_or_404(source_id)
+    full_session_id, session = await get_session_or_404(session_id)
+
+    relation_query = await repo_query(
+        "SELECT * FROM refers_to WHERE in = $session_id AND out = $source_id",
+        {
+            "session_id": ensure_record_id(full_session_id),
+            "source_id": ensure_record_id(full_source_id),
+        },
+    )
+    if not relation_query:
+        raise HTTPException(status_code=404, detail="Session not found for this source")
+
+    return full_source_id, source, full_session_id, session
+
+
+def extract_chat_messages(raw_messages: Iterable[Any]) -> List[ChatMessage]:
+    """Convert LangGraph/LangChain state messages into `ChatMessage` models."""
+    messages: List[ChatMessage] = []
+    for msg in raw_messages:
+        messages.append(
+            ChatMessage(
+                id=getattr(msg, "id", f"msg_{len(messages)}"),
+                type=msg.type if hasattr(msg, "type") else "unknown",
+                content=msg.content if hasattr(msg, "content") else str(msg),
+                timestamp=None,  # LangChain messages don't have timestamps by default
+            )
+        )
+    return messages
diff --git a/api/routers/chat.py b/api/routers/chat.py
index 459c8d61..4ba9e9d6 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -7,6 +7,13 @@ from langchain_core.runnables import RunnableConfig
 from loguru import logger
 from pydantic import BaseModel, Field
 
+from api.routers._chat_shared import (
+    ChatMessage,
+    SuccessResponse,
+    extract_chat_messages,
+    get_session_or_404,
+    normalize_record_id,
+)
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import (
     ChatSession,
@@ -40,13 +47,6 @@ class UpdateSessionRequest(BaseModel):
     )
 
 
-class ChatMessage(BaseModel):
-    id: str = Field(..., description="Message ID")
-    type: str = Field(..., description="Message type (human|ai)")
-    content: str = Field(..., description="Message content")
-    timestamp: Optional[str] = Field(None, description="Message timestamp")
-
-
 class ChatSessionResponse(BaseModel):
     id: str = Field(..., description="Session ID")
     title: str = Field(..., description="Session title")
@@ -94,11 +94,6 @@ class BuildContextResponse(BaseModel):
     char_count: int = Field(..., description="Character count")
 
 
-class SuccessResponse(BaseModel):
-    success: bool = Field(True, description="Operation success status")
-    message: str = Field(..., description="Success message")
-
-
 @router.get("/chat/sessions", response_model=List[ChatSessionResponse])
 async def get_sessions(notebook_id: str = Query(..., description="Notebook ID")):
     """Get all chat sessions for a notebook."""
@@ -184,16 +179,8 @@ async def create_session(request: CreateSessionRequest):
 async def get_session(session_id: str):
     """Get a specific session with its messages."""
     try:
-        # Get session
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
+        # Get session (normalizes the ID and 404s if missing)
+        full_session_id, session = await get_session_or_404(session_id)
 
         # Get session state from LangGraph to retrieve messages
         # Use sync get_state() in a thread since SqliteSaver doesn't support async
@@ -205,24 +192,9 @@ async def get_session(session_id: str):
         # Extract messages from state
         messages: list[ChatMessage] = []
         if thread_state and thread_state.values and "messages" in thread_state.values:
-            for msg in thread_state.values["messages"]:
-                messages.append(
-                    ChatMessage(
-                        id=getattr(msg, "id", f"msg_{len(messages)}"),
-                        type=msg.type if hasattr(msg, "type") else "unknown",
-                        content=msg.content if hasattr(msg, "content") else str(msg),
-                        timestamp=None,  # LangChain messages don't have timestamps by default
-                    )
-                )
+            messages = extract_chat_messages(thread_state.values["messages"])
 
         # Find notebook_id (we need to query the relationship)
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-
         notebook_query = await repo_query(
             "SELECT out FROM refers_to WHERE in = $session_id",
             {"session_id": ensure_record_id(full_session_id)},
@@ -257,15 +229,8 @@ async def get_session(session_id: str):
 async def update_session(session_id: str, request: UpdateSessionRequest):
     """Update session title."""
     try:
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
+        # Get session (normalizes the ID and 404s if missing)
+        full_session_id, session = await get_session_or_404(session_id)
 
         update_data = request.model_dump(exclude_unset=True)
 
@@ -278,12 +243,6 @@ async def update_session(session_id: str, request: UpdateSessionRequest):
         await session.save()
 
         # Find notebook_id
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
         notebook_query = await repo_query(
             "SELECT out FROM refers_to WHERE in = $session_id",
             {"session_id": ensure_record_id(full_session_id)},
@@ -313,15 +272,8 @@ async def update_session(session_id: str, request: UpdateSessionRequest):
 async def delete_session(session_id: str):
     """Delete a chat session."""
     try:
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
+        # Get session (normalizes the ID and 404s if missing)
+        _full_session_id, session = await get_session_or_404(session_id)
 
         await session.delete()
 
@@ -337,16 +289,8 @@ async def delete_session(session_id: str):
 async def execute_chat(request: ExecuteChatRequest):
     """Execute a chat request and get AI response."""
     try:
-        # Verify session exists
-        # Ensure session_id has proper table prefix
-        full_session_id = (
-            request.session_id
-            if request.session_id.startswith("chat_session:")
-            else f"chat_session:{request.session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
+        # Verify session exists (normalizes the ID and 404s if missing)
+        full_session_id, session = await get_session_or_404(request.session_id)
 
         # Fetch notebook linked to this session
         notebook_query = await repo_query(
@@ -403,16 +347,7 @@ async def execute_chat(request: ExecuteChatRequest):
         await session.save()
 
         # Convert messages to response format
-        messages: list[ChatMessage] = []
-        for msg in result.get("messages", []):
-            messages.append(
-                ChatMessage(
-                    id=getattr(msg, "id", f"msg_{len(messages)}"),
-                    type=msg.type if hasattr(msg, "type") else "unknown",
-                    content=msg.content if hasattr(msg, "content") else str(msg),
-                    timestamp=None,
-                )
-            )
+        messages = extract_chat_messages(result.get("messages", []))
 
         return ExecuteChatResponse(session_id=request.session_id, messages=messages)
     except NotFoundError:
@@ -449,11 +384,7 @@ async def build_context(request: BuildContextRequest):
 
                 try:
                     # Add table prefix if not present
-                    full_source_id = (
-                        source_id
-                        if source_id.startswith("source:")
-                        else f"source:{source_id}"
-                    )
+                    full_source_id = normalize_record_id("source", source_id)
 
                     try:
                         source = await Source.get(full_source_id)
@@ -479,9 +410,7 @@ async def build_context(request: BuildContextRequest):
 
                 try:
                     # Add table prefix if not present
-                    full_note_id = (
-                        note_id if note_id.startswith("note:") else f"note:{note_id}"
-                    )
+                    full_note_id = normalize_record_id("note", note_id)
                     note = await Note.get(full_note_id)
                     if not note:
                         continue
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index 64182936..bd51d084 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -9,8 +9,15 @@ from langchain_core.runnables import RunnableConfig
 from loguru import logger
 from pydantic import BaseModel, Field
 
+from api.routers._chat_shared import (
+    ChatMessage,
+    SuccessResponse,
+    extract_chat_messages,
+    get_source_or_404,
+    get_verified_source_session,
+)
 from open_notebook.database.repository import ensure_record_id, repo_query
-from open_notebook.domain.notebook import ChatSession, Source
+from open_notebook.domain.notebook import ChatSession
 from open_notebook.exceptions import (
     NotFoundError,
 )
@@ -34,13 +41,6 @@ class UpdateSourceChatSessionRequest(BaseModel):
         None, description="Model override for this session"
     )
 
-class ChatMessage(BaseModel):
-    id: str = Field(..., description="Message ID")
-    type: str = Field(..., description="Message type (human|ai)")
-    content: str = Field(..., description="Message content")
-    timestamp: Optional[str] = Field(None, description="Message timestamp")
-
-
 class ContextIndicator(BaseModel):
     sources: List[str] = Field(
         default_factory=list, description="Source IDs used in context"
@@ -79,11 +79,6 @@ class SendMessageRequest(BaseModel):
         None, description="Optional model override for this message"
     )
 
-class SuccessResponse(BaseModel):
-    success: bool = Field(True, description="Operation success status")
-    message: str = Field(..., description="Success message")
-
-
 @router.post(
     "/sources/{source_id}/chat/sessions", response_model=SourceChatSessionResponse
 )
@@ -93,13 +88,8 @@ async def create_source_chat_session(
 ):
     """Create a new chat session for a source."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
-        )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
+        # Verify source exists (normalizes the ID and 404s if missing)
+        full_source_id, _source = await get_source_or_404(source_id)
 
         # Create new session with model_override support
         session = ChatSession(
@@ -135,13 +125,8 @@ async def create_source_chat_session(
 async def get_source_chat_sessions(source_id: str = Path(..., description="Source ID")):
     """Get all chat sessions for a source."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
-        )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
+        # Verify source exists (normalizes the ID and 404s if missing)
+        full_source_id, _source = await get_source_or_404(source_id)
 
         # Get sessions that refer to this source - first get relations, then sessions
         relations = await repo_query(
@@ -200,37 +185,10 @@ async def get_source_chat_session(
 ):
     """Get a specific source chat session with its messages."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
+        # Verify source + session exist and are related (404s otherwise)
+        _full_source_id, _source, full_session_id, session = (
+            await get_verified_source_session(source_id, session_id)
         )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
-
-        # Get session
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
-
-        # Verify session is related to this source
-        relation_query = await repo_query(
-            "SELECT * FROM refers_to WHERE in = $session_id AND out = $source_id",
-            {
-                "session_id": ensure_record_id(full_session_id),
-                "source_id": ensure_record_id(full_source_id),
-            },
-        )
-
-        if not relation_query:
-            raise HTTPException(
-                status_code=404, detail="Session not found for this source"
-            )
 
         # Get session state from LangGraph to retrieve messages
         # Use sync get_state() in a thread since SqliteSaver doesn't support async
@@ -246,17 +204,7 @@ async def get_source_chat_session(
         if thread_state and thread_state.values:
             # Extract messages
             if "messages" in thread_state.values:
-                for msg in thread_state.values["messages"]:
-                    messages.append(
-                        ChatMessage(
-                            id=getattr(msg, "id", f"msg_{len(messages)}"),
-                            type=msg.type if hasattr(msg, "type") else "unknown",
-                            content=msg.content
-                            if hasattr(msg, "content")
-                            else str(msg),
-                            timestamp=None,  # LangChain messages don't have timestamps by default
-                        )
-                    )
+                messages = extract_chat_messages(thread_state.values["messages"])
 
             # Extract context indicators from the last state
             if "context_indicators" in thread_state.values:
@@ -298,37 +246,10 @@ async def update_source_chat_session(
 ):
     """Update source chat session title and/or model override."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
+        # Verify source + session exist and are related (404s otherwise)
+        _full_source_id, _source, full_session_id, session = (
+            await get_verified_source_session(source_id, session_id)
         )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
-
-        # Get session
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
-
-        # Verify session is related to this source
-        relation_query = await repo_query(
-            "SELECT * FROM refers_to WHERE in = $session_id AND out = $source_id",
-            {
-                "session_id": ensure_record_id(full_session_id),
-                "source_id": ensure_record_id(full_source_id),
-            },
-        )
-
-        if not relation_query:
-            raise HTTPException(
-                status_code=404, detail="Session not found for this source"
-            )
 
         # Update session fields
         if request.title is not None:
@@ -368,37 +289,10 @@ async def delete_source_chat_session(
 ):
     """Delete a source chat session."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
+        # Verify source + session exist and are related (404s otherwise)
+        _full_source_id, _source, full_session_id, session = (
+            await get_verified_source_session(source_id, session_id)
         )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
-
-        # Get session
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
-
-        # Verify session is related to this source
-        relation_query = await repo_query(
-            "SELECT * FROM refers_to WHERE in = $session_id AND out = $source_id",
-            {
-                "session_id": ensure_record_id(full_session_id),
-                "source_id": ensure_record_id(full_source_id),
-            },
-        )
-
-        if not relation_query:
-            raise HTTPException(
-                status_code=404, detail="Session not found for this source"
-            )
 
         await session.delete()
 
@@ -492,37 +386,10 @@ async def send_message_to_source_chat(
 ):
     """Send a message to source chat session with SSE streaming response."""
     try:
-        # Verify source exists
-        full_source_id = (
-            source_id if source_id.startswith("source:") else f"source:{source_id}"
+        # Verify source + session exist and are related (404s otherwise)
+        full_source_id, _source, full_session_id, session = (
+            await get_verified_source_session(source_id, session_id)
         )
-        source = await Source.get(full_source_id)
-        if not source:
-            raise HTTPException(status_code=404, detail="Source not found")
-
-        # Verify session exists and is related to source
-        full_session_id = (
-            session_id
-            if session_id.startswith("chat_session:")
-            else f"chat_session:{session_id}"
-        )
-        session = await ChatSession.get(full_session_id)
-        if not session:
-            raise HTTPException(status_code=404, detail="Session not found")
-
-        # Verify session is related to this source
-        relation_query = await repo_query(
-            "SELECT * FROM refers_to WHERE in = $session_id AND out = $source_id",
-            {
-                "session_id": ensure_record_id(full_session_id),
-                "source_id": ensure_record_id(full_source_id),
-            },
-        )
-
-        if not relation_query:
-            raise HTTPException(
-                status_code=404, detail="Session not found for this source"
-            )
 
         if not request.message:
             raise HTTPException(status_code=400, detail="Message content is required")
diff --git a/tests/test_chat_routers_characterization.py b/tests/test_chat_routers_characterization.py
new file mode 100644
index 00000000..a7ae8bcf
--- /dev/null
+++ b/tests/test_chat_routers_characterization.py
@@ -0,0 +1,334 @@
+"""Characterization tests for the chat and source-chat routers.
+
+These pin down the behaviors shared (via copy-paste) between
+`api/routers/chat.py` and `api/routers/source_chat.py` before/after extracting
+them into `api/routers/_chat_shared.py`:
+
+- record-ID normalization (bare id vs already-prefixed id)
+- session/source verification (missing record -> 404, missing `refers_to`
+  relation -> current behavior, preserved as-is)
+- LangGraph state -> `ChatMessage` extraction shapes (type/content fallbacks)
+
+DB access and LangGraph state are mocked following the style of
+tests/test_crud_404.py.
+"""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.exceptions import NotFoundError
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _nf(*_args, **_kwargs):
+    raise NotFoundError("not found")
+
+
+def _session(**overrides):
+    """A ChatSession-like object with the attributes the routers read."""
+    defaults = dict(
+        id="chat_session:abc",
+        title="My Session",
+        created="2026-01-01T00:00:00",
+        updated="2026-01-02T00:00:00",
+        model_override=None,
+    )
+    defaults.update(overrides)
+    return SimpleNamespace(**defaults)
+
+
+def _source(**overrides):
+    defaults = dict(id="source:xyz", title="My Source")
+    defaults.update(overrides)
+    return SimpleNamespace(**defaults)
+
+
+def _graph_state(values):
+    state = MagicMock()
+    state.values = values
+    return state
+
+
+class _Msg:
+    """A LangChain-like message with id/type/content."""
+
+    def __init__(self, id, type, content):
+        self.id = id
+        self.type = type
+        self.content = content
+
+
+class _Bare:
+    """An object with no type/content attributes (exercises the fallbacks)."""
+
+    def __str__(self):
+        return "bare-repr"
+
+
+# --- chat.py: ID normalization ------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.chat.repo_query", new_callable=AsyncMock)
+@patch("api.routers.chat.chat_graph")
+@patch("api.routers.chat.ChatSession.get", new_callable=AsyncMock)
+async def test_get_chat_session_bare_id_gets_prefixed(
+    mock_get, mock_graph, mock_repo, client
+):
+    mock_get.return_value = _session()
+    mock_graph.get_state.return_value = _graph_state({"messages": []})
+    mock_repo.return_value = [{"out": "notebook:1"}]
+
+    resp = client.get("/api/chat/sessions/abc")
+
+    assert resp.status_code == 200
+    mock_get.assert_awaited_once_with("chat_session:abc")
+
+
+@pytest.mark.asyncio
+@patch("api.routers.chat.repo_query", new_callable=AsyncMock)
+@patch("api.routers.chat.chat_graph")
+@patch("api.routers.chat.ChatSession.get", new_callable=AsyncMock)
+async def test_get_chat_session_prefixed_id_kept_as_is(
+    mock_get, mock_graph, mock_repo, client
+):
+    mock_get.return_value = _session()
+    mock_graph.get_state.return_value = _graph_state({"messages": []})
+    mock_repo.return_value = [{"out": "notebook:1"}]
+
+    resp = client.get("/api/chat/sessions/chat_session:abc")
+
+    assert resp.status_code == 200
+    mock_get.assert_awaited_once_with("chat_session:abc")
+
+
+@pytest.mark.asyncio
+@patch("api.routers.chat.ChatSession.get", new_callable=AsyncMock)
+async def test_delete_chat_session_missing_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    resp = client.delete("/api/chat/sessions/gone")
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Session not found"
+    mock_get.assert_awaited_once_with("chat_session:gone")
+
+
+# --- chat.py: message extraction shape ----------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers.chat.repo_query", new_callable=AsyncMock)
+@patch("api.routers.chat.chat_graph")
+@patch("api.routers.chat.ChatSession.get", new_callable=AsyncMock)
+async def test_get_chat_session_message_shapes(mock_get, mock_graph, mock_repo, client):
+    mock_get.return_value = _session()
+    mock_graph.get_state.return_value = _graph_state(
+        {"messages": [_Msg("m1", "human", "hello"), _Msg("m2", "ai", "hi"), _Bare()]}
+    )
+    mock_repo.return_value = [{"out": "notebook:1"}]
+
+    resp = client.get("/api/chat/sessions/abc")
+
+    assert resp.status_code == 200
+    body = resp.json()
+    assert body["message_count"] == 3
+    assert body["messages"][0] == {
+        "id": "m1",
+        "type": "human",
+        "content": "hello",
+        "timestamp": None,
+    }
+    assert body["messages"][1]["type"] == "ai"
+    # Object without type/content falls back to "unknown" / str(msg); the id
+    # fallback is positional (msg_<index>).
+    assert body["messages"][2] == {
+        "id": "msg_2",
+        "type": "unknown",
+        "content": "bare-repr",
+        "timestamp": None,
+    }
+
+
+@pytest.mark.asyncio
+@patch("api.routers.chat.repo_query", new_callable=AsyncMock)
+@patch("api.routers.chat.chat_graph")
+@patch("api.routers.chat.ChatSession.get", new_callable=AsyncMock)
+async def test_get_chat_session_no_state_yields_empty_messages(
+    mock_get, mock_graph, mock_repo, client
+):
+    mock_get.return_value = _session()
+    mock_graph.get_state.return_value = None
+    mock_repo.return_value = []
+
+    resp = client.get("/api/chat/sessions/abc")
+
+    assert resp.status_code == 200
+    body = resp.json()
+    assert body["messages"] == []
+    assert body["message_count"] == 0
+    assert body["notebook_id"] is None
+
+
+# --- source_chat.py: source verification --------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_create_source_chat_session_missing_source_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    resp = client.post(
+        "/api/sources/gone/chat/sessions", json={"source_id": "gone"}
+    )
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Source not found"
+    mock_get.assert_awaited_once_with("source:gone")
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_list_source_chat_sessions_missing_source_returns_404(mock_get, client):
+    mock_get.side_effect = _nf
+    resp = client.get("/api/sources/source:gone/chat/sessions")
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Source not found"
+    mock_get.assert_awaited_once_with("source:gone")
+
+
+# --- source_chat.py: session + relation verification ---------------------------
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.repo_query", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.ChatSession.get", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_get_source_chat_session_missing_session_returns_404(
+    mock_source_get, mock_session_get, mock_repo, client
+):
+    mock_source_get.return_value = _source()
+    mock_session_get.side_effect = _nf
+
+    resp = client.get("/api/sources/xyz/chat/sessions/gone")
+
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Source or session not found"
+    mock_source_get.assert_awaited_once_with("source:xyz")
+    mock_session_get.assert_awaited_once_with("chat_session:gone")
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.repo_query", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.ChatSession.get", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_get_source_chat_session_missing_relation_behavior(
+    mock_source_get, mock_session_get, mock_repo, client
+):
+    """Session exists but is not related to the source.
+
+    Current behavior (preserved as-is): the inner HTTPException(404) is
+    swallowed by the broad `except Exception` and re-raised as a 500 whose
+    detail embeds the original 404 message.
+    """
+    mock_source_get.return_value = _source()
+    mock_session_get.return_value = _session()
+    mock_repo.return_value = []  # no refers_to relation
+
+    resp = client.get("/api/sources/xyz/chat/sessions/abc")
+
+    assert resp.status_code == 500
+    assert (
+        resp.json()["detail"]
+        == "Error fetching source chat session: 404: Session not found for this source"
+    )
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.repo_query", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.ChatSession.get", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_delete_source_chat_session_missing_relation_behavior(
+    mock_source_get, mock_session_get, mock_repo, client
+):
+    mock_source_get.return_value = _source()
+    mock_session_get.return_value = _session()
+    mock_repo.return_value = []
+
+    resp = client.delete("/api/sources/xyz/chat/sessions/abc")
+
+    assert resp.status_code == 500
+    assert (
+        resp.json()["detail"]
+        == "Error deleting source chat session: 404: Session not found for this source"
+    )
+
+
+@pytest.mark.asyncio
+@patch("api.routers._chat_shared.repo_query", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.ChatSession.get", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_send_message_missing_relation_returns_404(
+    mock_source_get, mock_session_get, mock_repo, client
+):
+    """send_message re-raises HTTPException before its broad handler, so the
+    missing-relation case surfaces as a real 404 here (unlike get/put/delete)."""
+    mock_source_get.return_value = _source()
+    mock_session_get.return_value = _session()
+    mock_repo.return_value = []
+
+    resp = client.post(
+        "/api/sources/xyz/chat/sessions/abc/messages", json={"message": "hi"}
+    )
+
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Session not found for this source"
+
+
+@pytest.mark.asyncio
+@patch("api.routers.source_chat.source_chat_graph")
+@patch("api.routers._chat_shared.repo_query", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.ChatSession.get", new_callable=AsyncMock)
+@patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
+async def test_get_source_chat_session_happy_path_shapes(
+    mock_source_get, mock_session_get, mock_repo, mock_graph, client
+):
+    mock_source_get.return_value = _source()
+    mock_session_get.return_value = _session()
+    mock_repo.return_value = [{"in": "chat_session:abc", "out": "source:xyz"}]
+    mock_graph.get_state.return_value = _graph_state(
+        {
+            "messages": [_Msg("m1", "human", "hello"), _Bare()],
+            "context_indicators": {"sources": ["source:xyz"], "insights": []},
+        }
+    )
+
+    resp = client.get("/api/sources/xyz/chat/sessions/abc")
+
+    assert resp.status_code == 200
+    body = resp.json()
+    assert body["id"] == "chat_session:abc"
+    assert body["source_id"] == "xyz"
+    assert body["message_count"] == 2
+    assert body["messages"][0] == {
+        "id": "m1",
+        "type": "human",
+        "content": "hello",
+        "timestamp": None,
+    }
+    assert body["messages"][1] == {
+        "id": "msg_1",
+        "type": "unknown",
+        "content": "bare-repr",
+        "timestamp": None,
+    }
+    assert body["context_indicators"] == {
+        "sources": ["source:xyz"],
+        "insights": [],
+        "notes": [],
+    }

From ad0dbb1ea2141e44359ddc1cce226fd608929cb1 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:01:52 -0300
Subject: [PATCH 176/345] build: prune unused langchain packages, bound the
 langchain family (#1073)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Remove langchain-community and langchain-deepseek (zero imports; DeepSeek
and xAI go through esperanto's OpenAI-compatible path, which uses
langchain-openai). Declare langchain-core and langchain-text-splitters
explicitly (directly imported, previously only transitive — the
text-splitters import actually broke once langchain-community left the
tree). Add upper bounds to the whole langchain/langgraph family and
document why the provider packages must stay: esperanto's to_langchain()
imports them dynamically and only declares them as optional extras.
---
 CHANGELOG.md   |   1 +
 pyproject.toml |  27 ++++----
 uv.lock        | 169 ++++---------------------------------------------
 3 files changed, 31 insertions(+), 166 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 30a018f8..308aec3e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly
 - The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
 
 ### Added
diff --git a/pyproject.toml b/pyproject.toml
index 71951ee7..9449c742 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -17,18 +17,23 @@ dependencies = [
     "uvicorn>=0.24.0",
     "pydantic>=2.9.2",
     "loguru>=0.7.2",
-    "langchain>=1.3.9",
-    "langgraph>=1.0.5",
+    "langchain>=1.3.9,<2",
+    "langchain-core>=1.4.6,<2",
+    "langchain-text-splitters>=1.1.2,<2",
+    "langgraph>=1.0.5,<2",
     "tiktoken>=0.12.0",
-    "langgraph-checkpoint-sqlite>=3.0.1",
-    "langchain-community>=0.4.1",
-    "langchain-openai>=1.1.14",
-    "langchain-anthropic>=1.4.6",
-    "langchain-ollama>=1.0.1",
-    "langchain-google-genai>=4.1.2",
-    "langchain-groq>=1.1.1",
-    "langchain_mistralai>=1.1.1",
-    "langchain_deepseek>=1.0.0",
+    "langgraph-checkpoint-sqlite>=3.0.1,<4",
+    # The langchain-* provider packages below have no direct imports in this
+    # codebase: they are runtime requirements of esperanto's dynamic
+    # `to_langchain()` (esperanto declares them only as optional extras).
+    # deepseek/xai/openrouter/openai-compatible all route through
+    # langchain-openai, so no dedicated packages are needed for them.
+    "langchain-openai>=1.1.14,<2",
+    "langchain-anthropic>=1.4.6,<2",
+    "langchain-ollama>=1.0.1,<2",
+    "langchain-google-genai>=4.1.2,<5",
+    "langchain-groq>=1.1.1,<2",
+    "langchain-mistralai>=1.1.1,<2",
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
diff --git a/uv.lock b/uv.lock
index 53a644da..cb4909b2 100644
--- a/uv.lock
+++ b/uv.lock
@@ -581,19 +581,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/12/a3/2e00fececc34a99ae3a5d5702a5dd29c5371e4ed016647301a2b9bcc1976/cyclopts-4.5.0-py3-none-any.whl", hash = "sha256:305b9aa90a9cd0916f0a450b43e50ad5df9c252680731a0719edfb9b20381bf5", size = 199772, upload-time = "2026-01-16T02:07:14.707Z" },
 ]
 
-[[package]]
-name = "dataclasses-json"
-version = "0.6.7"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "marshmallow" },
-    { name = "typing-inspect" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/64/a4/f71d9cf3a5ac257c993b5ca3f93df5f7fb395c725e7f1e6479d2514173c3/dataclasses_json-0.6.7.tar.gz", hash = "sha256:b6b3e528266ea45b9535223bc53ca645f5208833c29229e847b3f26a1cc55fc0", size = 32227, upload-time = "2024-06-09T16:20:19.103Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c3/be/d0d44e092656fe7a06b55e6103cbce807cdbdee17884a5367c68c9860853/dataclasses_json-0.6.7-py3-none-any.whl", hash = "sha256:0dbf33f26c8d5305befd61b39d2b3414e8a407bedc2834dea9b8d642666fb40a", size = 28686, upload-time = "2024-06-09T16:20:16.715Z" },
-]
-
 [[package]]
 name = "debugpy"
 version = "1.8.19"
@@ -912,28 +899,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/31/e5/384b1f383917b5f0ae92e28f47bc27b16e3d26cd9bacb25e9f8ecab3c8fe/google_genai-1.60.0-py3-none-any.whl", hash = "sha256:967338378ffecebec19a8ed90cf8797b26818bacbefd7846a9280beb1099f7f3", size = 719431, upload-time = "2026-01-21T22:17:28.086Z" },
 ]
 
-[[package]]
-name = "greenlet"
-version = "3.3.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c7/e5/40dbda2736893e3e53d25838e0f19a2b417dfc122b9989c91918db30b5d3/greenlet-3.3.0.tar.gz", hash = "sha256:a82bb225a4e9e4d653dd2fb7b8b2d36e4fb25bc0165422a11e48b88e9e6f78fb", size = 190651, upload-time = "2025-12-04T14:49:44.05Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/1f/cb/48e964c452ca2b92175a9b2dca037a553036cb053ba69e284650ce755f13/greenlet-3.3.0-cp311-cp311-macosx_11_0_universal2.whl", hash = "sha256:e29f3018580e8412d6aaf5641bb7745d38c85228dacf51a73bd4e26ddf2a6a8e", size = 274908, upload-time = "2025-12-04T14:23:26.435Z" },
-    { url = "https://files.pythonhosted.org/packages/28/da/38d7bff4d0277b594ec557f479d65272a893f1f2a716cad91efeb8680953/greenlet-3.3.0-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a687205fb22794e838f947e2194c0566d3812966b41c78709554aa883183fb62", size = 577113, upload-time = "2025-12-04T14:50:05.493Z" },
-    { url = "https://files.pythonhosted.org/packages/3c/f2/89c5eb0faddc3ff014f1c04467d67dee0d1d334ab81fadbf3744847f8a8a/greenlet-3.3.0-cp311-cp311-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:4243050a88ba61842186cb9e63c7dfa677ec146160b0efd73b855a3d9c7fcf32", size = 590338, upload-time = "2025-12-04T14:57:41.136Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/a6/e959a127b630a58e23529972dbc868c107f9d583b5a9f878fb858c46bc1a/greenlet-3.3.0-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:6cb3a8ec3db4a3b0eb8a3c25436c2d49e3505821802074969db017b87bc6a948", size = 590206, upload-time = "2025-12-04T14:26:01.254Z" },
-    { url = "https://files.pythonhosted.org/packages/48/60/29035719feb91798693023608447283b266b12efc576ed013dd9442364bb/greenlet-3.3.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:2de5a0b09eab81fc6a382791b995b1ccf2b172a9fec934747a7a23d2ff291794", size = 1550668, upload-time = "2025-12-04T15:04:22.439Z" },
-    { url = "https://files.pythonhosted.org/packages/0a/5f/783a23754b691bfa86bd72c3033aa107490deac9b2ef190837b860996c9f/greenlet-3.3.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:4449a736606bd30f27f8e1ff4678ee193bc47f6ca810d705981cfffd6ce0d8c5", size = 1615483, upload-time = "2025-12-04T14:27:28.083Z" },
-    { url = "https://files.pythonhosted.org/packages/1d/d5/c339b3b4bc8198b7caa4f2bd9fd685ac9f29795816d8db112da3d04175bb/greenlet-3.3.0-cp311-cp311-win_amd64.whl", hash = "sha256:7652ee180d16d447a683c04e4c5f6441bae7ba7b17ffd9f6b3aff4605e9e6f71", size = 301164, upload-time = "2025-12-04T14:42:51.577Z" },
-    { url = "https://files.pythonhosted.org/packages/f8/0a/a3871375c7b9727edaeeea994bfff7c63ff7804c9829c19309ba2e058807/greenlet-3.3.0-cp312-cp312-macosx_11_0_universal2.whl", hash = "sha256:b01548f6e0b9e9784a2c99c5651e5dc89ffcbe870bc5fb2e5ef864e9cc6b5dcb", size = 276379, upload-time = "2025-12-04T14:23:30.498Z" },
-    { url = "https://files.pythonhosted.org/packages/43/ab/7ebfe34dce8b87be0d11dae91acbf76f7b8246bf9d6b319c741f99fa59c6/greenlet-3.3.0-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:349345b770dc88f81506c6861d22a6ccd422207829d2c854ae2af8025af303e3", size = 597294, upload-time = "2025-12-04T14:50:06.847Z" },
-    { url = "https://files.pythonhosted.org/packages/a4/39/f1c8da50024feecd0793dbd5e08f526809b8ab5609224a2da40aad3a7641/greenlet-3.3.0-cp312-cp312-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:e8e18ed6995e9e2c0b4ed264d2cf89260ab3ac7e13555b8032b25a74c6d18655", size = 607742, upload-time = "2025-12-04T14:57:42.349Z" },
-    { url = "https://files.pythonhosted.org/packages/75/b0/6bde0b1011a60782108c01de5913c588cf51a839174538d266de15e4bf4d/greenlet-3.3.0-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:047ab3df20ede6a57c35c14bf5200fcf04039d50f908270d3f9a7a82064f543b", size = 609885, upload-time = "2025-12-04T14:26:02.368Z" },
-    { url = "https://files.pythonhosted.org/packages/49/0e/49b46ac39f931f59f987b7cd9f34bfec8ef81d2a1e6e00682f55be5de9f4/greenlet-3.3.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:2d9ad37fc657b1102ec880e637cccf20191581f75c64087a549e66c57e1ceb53", size = 1567424, upload-time = "2025-12-04T15:04:23.757Z" },
-    { url = "https://files.pythonhosted.org/packages/05/f5/49a9ac2dff7f10091935def9165c90236d8f175afb27cbed38fb1d61ab6b/greenlet-3.3.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:83cd0e36932e0e7f36a64b732a6f60c2fc2df28c351bae79fbaf4f8092fe7614", size = 1636017, upload-time = "2025-12-04T14:27:29.688Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/79/3912a94cf27ec503e51ba493692d6db1e3cd8ac7ac52b0b47c8e33d7f4f9/greenlet-3.3.0-cp312-cp312-win_amd64.whl", hash = "sha256:a7a34b13d43a6b78abf828a6d0e87d3385680eaf830cd60d20d52f249faabf39", size = 301964, upload-time = "2025-12-04T14:36:58.316Z" },
-]
-
 [[package]]
 name = "groq"
 version = "0.37.1"
@@ -1454,47 +1419,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/26/af/927dbbc5a1f5fea1a69adc2883f034cbd1430004e36f4eacd302d500393a/langchain_anthropic-1.4.6-py3-none-any.whl", hash = "sha256:dbd412a956b6b8b0716d9d8460ef71f834a6731cdbfc59e6160482a4a9fb5200", size = 51797, upload-time = "2026-06-12T16:54:14.159Z" },
 ]
 
-[[package]]
-name = "langchain-classic"
-version = "1.0.7"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "langchain-core" },
-    { name = "langchain-text-splitters" },
-    { name = "langsmith" },
-    { name = "pydantic" },
-    { name = "pyyaml" },
-    { name = "requests" },
-    { name = "sqlalchemy" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/9b/78/84b5065816f348c39fefa4316f209f0135e8410216340a953bec17d9e4e4/langchain_classic-1.0.7.tar.gz", hash = "sha256:debbec8065e69b95108d2652e8d5c44f4516e19aa8d716c02ed2211c3aee099d", size = 10554118, upload-time = "2026-05-07T15:46:56.8Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f5/78/2d9980d028ff0523eea503a77c200e2ff252a3a75eb6e7842bcf5f9c979b/langchain_classic-1.0.7-py3-none-any.whl", hash = "sha256:d9d9be38f7aa534ed0259c2410432e34a1f80b1d491e686749bb55af56479be3", size = 1041386, upload-time = "2026-05-07T15:46:54.845Z" },
-]
-
-[[package]]
-name = "langchain-community"
-version = "0.4.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiohttp" },
-    { name = "dataclasses-json" },
-    { name = "httpx-sse" },
-    { name = "langchain-classic" },
-    { name = "langchain-core" },
-    { name = "langsmith" },
-    { name = "numpy" },
-    { name = "pydantic-settings" },
-    { name = "pyyaml" },
-    { name = "requests" },
-    { name = "sqlalchemy" },
-    { name = "tenacity" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/53/97/a03585d42b9bdb6fbd935282d6e3348b10322a24e6ce12d0c99eb461d9af/langchain_community-0.4.1.tar.gz", hash = "sha256:f3b211832728ee89f169ddce8579b80a085222ddb4f4ed445a46e977d17b1e85", size = 33241144, upload-time = "2025-10-27T15:20:32.504Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f0/a4/c4fde67f193401512337456cabc2148f2c43316e445f5decd9f8806e2992/langchain_community-0.4.1-py3-none-any.whl", hash = "sha256:2135abb2c7748a35c84613108f7ebf30f8505b18c3c18305ffaecfc7651f6c6a", size = 2533285, upload-time = "2025-10-27T15:20:30.767Z" },
-]
-
 [[package]]
 name = "langchain-core"
 version = "1.4.7"
@@ -1515,19 +1439,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/de/3e/dcdffa60078ae7b3a00ebb4cbbf1a204a14c3609983c604886523a7d4418/langchain_core-1.4.7-py3-none-any.whl", hash = "sha256:bcadd51951140ecdcba98311dbd931ba5de02a5ba8a2288dad5069c1eea2a13d", size = 554941, upload-time = "2026-06-12T19:23:55.826Z" },
 ]
 
-[[package]]
-name = "langchain-deepseek"
-version = "1.0.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "langchain-core" },
-    { name = "langchain-openai" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/4e/c4/de579ea21e22777959f214af165761c6cd101248222bcc0886d020d67185/langchain_deepseek-1.0.1.tar.gz", hash = "sha256:e7a0238f2c14e928e1562641b2df639c19cdf867287a7f2293ffb1372daf83ae", size = 147216, upload-time = "2025-11-13T16:29:13.445Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/cd/dd/a803dfbf64273232f3fc82f859487331abb717671bbcdf266fd80de6ef78/langchain_deepseek-1.0.1-py3-none-any.whl", hash = "sha256:0a9862f335f1873370bb0fe1928ac19b8b9292b014ef5412da462ded8bb82c5a", size = 8325, upload-time = "2025-11-13T16:29:12.385Z" },
-]
-
 [[package]]
 name = "langchain-google-genai"
 version = "4.2.0"
@@ -1889,18 +1800,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e5/f1/216fc1bbfd74011693a4fd837e7026152e89c4bcf3e77b6692fba9923123/markupsafe-3.0.3-cp312-cp312-win_arm64.whl", hash = "sha256:35add3b638a5d900e807944a078b51922212fb3dedb01633a8defc4b01a3c85f", size = 13906, upload-time = "2025-09-27T18:36:40.689Z" },
 ]
 
-[[package]]
-name = "marshmallow"
-version = "3.26.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "packaging" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/55/79/de6c16cc902f4fc372236926b0ce2ab7845268dcc30fb2fbb7f71b418631/marshmallow-3.26.2.tar.gz", hash = "sha256:bbe2adb5a03e6e3571b573f42527c6fe926e17467833660bebd11593ab8dfd57", size = 222095, upload-time = "2025-12-22T06:53:53.309Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/be/2f/5108cb3ee4ba6501748c4908b908e55f42a5b66245b4cfe0c99326e1ef6e/marshmallow-3.26.2-py3-none-any.whl", hash = "sha256:013fa8a3c4c276c24d26d84ce934dc964e2aa794345a0f8c7e5a7191482c8a73", size = 50964, upload-time = "2025-12-22T06:53:51.801Z" },
-]
-
 [[package]]
 name = "matplotlib-inline"
 version = "0.2.1"
@@ -2141,7 +2040,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.10.0"
+version = "1.11.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },
@@ -2152,13 +2051,13 @@ dependencies = [
     { name = "httpx", extra = ["socks"] },
     { name = "langchain" },
     { name = "langchain-anthropic" },
-    { name = "langchain-community" },
-    { name = "langchain-deepseek" },
+    { name = "langchain-core" },
     { name = "langchain-google-genai" },
     { name = "langchain-groq" },
     { name = "langchain-mistralai" },
     { name = "langchain-ollama" },
     { name = "langchain-openai" },
+    { name = "langchain-text-splitters" },
     { name = "langgraph" },
     { name = "langgraph-checkpoint-sqlite" },
     { name = "loguru" },
@@ -2204,17 +2103,17 @@ requires-dist = [
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
     { name = "ipykernel", marker = "extra == 'dev'", specifier = ">=6.29.5" },
     { name = "ipywidgets", marker = "extra == 'dev'", specifier = ">=8.1.5" },
-    { name = "langchain", specifier = ">=1.3.9" },
-    { name = "langchain-anthropic", specifier = ">=1.4.6" },
-    { name = "langchain-community", specifier = ">=0.4.1" },
-    { name = "langchain-deepseek", specifier = ">=1.0.0" },
-    { name = "langchain-google-genai", specifier = ">=4.1.2" },
-    { name = "langchain-groq", specifier = ">=1.1.1" },
-    { name = "langchain-mistralai", specifier = ">=1.1.1" },
-    { name = "langchain-ollama", specifier = ">=1.0.1" },
-    { name = "langchain-openai", specifier = ">=1.1.14" },
-    { name = "langgraph", specifier = ">=1.0.5" },
-    { name = "langgraph-checkpoint-sqlite", specifier = ">=3.0.1" },
+    { name = "langchain", specifier = ">=1.3.9,<2" },
+    { name = "langchain-anthropic", specifier = ">=1.4.6,<2" },
+    { name = "langchain-core", specifier = ">=1.4.6,<2" },
+    { name = "langchain-google-genai", specifier = ">=4.1.2,<5" },
+    { name = "langchain-groq", specifier = ">=1.1.1,<2" },
+    { name = "langchain-mistralai", specifier = ">=1.1.1,<2" },
+    { name = "langchain-ollama", specifier = ">=1.0.1,<2" },
+    { name = "langchain-openai", specifier = ">=1.1.14,<2" },
+    { name = "langchain-text-splitters", specifier = ">=1.1.2,<2" },
+    { name = "langgraph", specifier = ">=1.0.5,<2" },
+    { name = "langgraph-checkpoint-sqlite", specifier = ">=3.0.1,<4" },
     { name = "loguru", specifier = ">=0.7.2" },
     { name = "mypy", marker = "extra == 'dev'", specifier = ">=1.11.1" },
     { name = "numpy", specifier = ">=2.4.1" },
@@ -3311,33 +3210,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/5e/f5/0c41cb68dcae6b7de4fac4188a3a9589e21fb31df21ea3a2e888db95e6c9/soupsieve-2.8.4-py3-none-any.whl", hash = "sha256:e7e6b0769c8f51ed59acab6e994b00621096cfb1c640a7509295987388fbaf65", size = 37304, upload-time = "2026-05-24T13:55:55.406Z" },
 ]
 
-[[package]]
-name = "sqlalchemy"
-version = "2.0.46"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "greenlet", marker = "platform_machine == 'AMD64' or platform_machine == 'WIN32' or platform_machine == 'aarch64' or platform_machine == 'amd64' or platform_machine == 'ppc64le' or platform_machine == 'win32' or platform_machine == 'x86_64'" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/06/aa/9ce0f3e7a9829ead5c8ce549392f33a12c4555a6c0609bb27d882e9c7ddf/sqlalchemy-2.0.46.tar.gz", hash = "sha256:cf36851ee7219c170bb0793dbc3da3e80c582e04a5437bc601bfe8c85c9216d7", size = 9865393, upload-time = "2026-01-21T18:03:45.119Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/69/ac/b42ad16800d0885105b59380ad69aad0cce5a65276e269ce2729a2343b6a/sqlalchemy-2.0.46-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:261c4b1f101b4a411154f1da2b76497d73abbfc42740029205d4d01fa1052684", size = 2154851, upload-time = "2026-01-21T18:27:30.54Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/60/d8710068cb79f64d002ebed62a7263c00c8fd95f4ebd4b5be8f7ca93f2bc/sqlalchemy-2.0.46-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:181903fe8c1b9082995325f1b2e84ac078b1189e2819380c2303a5f90e114a62", size = 3311241, upload-time = "2026-01-21T18:32:33.45Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/0f/20c71487c7219ab3aa7421c7c62d93824c97c1460f2e8bb72404b0192d13/sqlalchemy-2.0.46-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:590be24e20e2424a4c3c1b0835e9405fa3d0af5823a1a9fc02e5dff56471515f", size = 3310741, upload-time = "2026-01-21T18:44:57.887Z" },
-    { url = "https://files.pythonhosted.org/packages/65/80/d26d00b3b249ae000eee4db206fcfc564bf6ca5030e4747adf451f4b5108/sqlalchemy-2.0.46-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:7568fe771f974abadce52669ef3a03150ff03186d8eb82613bc8adc435a03f01", size = 3263116, upload-time = "2026-01-21T18:32:35.044Z" },
-    { url = "https://files.pythonhosted.org/packages/da/ee/74dda7506640923821340541e8e45bd3edd8df78664f1f2e0aae8077192b/sqlalchemy-2.0.46-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:ebf7e1e78af38047e08836d33502c7a278915698b7c2145d045f780201679999", size = 3285327, upload-time = "2026-01-21T18:44:59.254Z" },
-    { url = "https://files.pythonhosted.org/packages/9f/25/6dcf8abafff1389a21c7185364de145107b7394ecdcb05233815b236330d/sqlalchemy-2.0.46-cp311-cp311-win32.whl", hash = "sha256:9d80ea2ac519c364a7286e8d765d6cd08648f5b21ca855a8017d9871f075542d", size = 2114564, upload-time = "2026-01-21T18:33:15.85Z" },
-    { url = "https://files.pythonhosted.org/packages/93/5f/e081490f8523adc0088f777e4ebad3cac21e498ec8a3d4067074e21447a1/sqlalchemy-2.0.46-cp311-cp311-win_amd64.whl", hash = "sha256:585af6afe518732d9ccd3aea33af2edaae4a7aa881af5d8f6f4fe3a368699597", size = 2139233, upload-time = "2026-01-21T18:33:17.528Z" },
-    { url = "https://files.pythonhosted.org/packages/b6/35/d16bfa235c8b7caba3730bba43e20b1e376d2224f407c178fbf59559f23e/sqlalchemy-2.0.46-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:3a9a72b0da8387f15d5810f1facca8f879de9b85af8c645138cba61ea147968c", size = 2153405, upload-time = "2026-01-21T19:05:54.143Z" },
-    { url = "https://files.pythonhosted.org/packages/06/6c/3192e24486749862f495ddc6584ed730c0c994a67550ec395d872a2ad650/sqlalchemy-2.0.46-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:2347c3f0efc4de367ba00218e0ae5c4ba2306e47216ef80d6e31761ac97cb0b9", size = 3334702, upload-time = "2026-01-21T18:46:45.384Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/a2/b9f33c8d68a3747d972a0bb758c6b63691f8fb8a49014bc3379ba15d4274/sqlalchemy-2.0.46-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:9094c8b3197db12aa6f05c51c05daaad0a92b8c9af5388569847b03b1007fb1b", size = 3347664, upload-time = "2026-01-21T18:40:09.979Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/d2/3e59e2a91eaec9db7e8dc6b37b91489b5caeb054f670f32c95bcba98940f/sqlalchemy-2.0.46-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:37fee2164cf21417478b6a906adc1a91d69ae9aba8f9533e67ce882f4bb1de53", size = 3277372, upload-time = "2026-01-21T18:46:47.168Z" },
-    { url = "https://files.pythonhosted.org/packages/dd/dd/67bc2e368b524e2192c3927b423798deda72c003e73a1e94c21e74b20a85/sqlalchemy-2.0.46-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:b1e14b2f6965a685c7128bd315e27387205429c2e339eeec55cb75ca4ab0ea2e", size = 3312425, upload-time = "2026-01-21T18:40:11.548Z" },
-    { url = "https://files.pythonhosted.org/packages/43/82/0ecd68e172bfe62247e96cb47867c2d68752566811a4e8c9d8f6e7c38a65/sqlalchemy-2.0.46-cp312-cp312-win32.whl", hash = "sha256:412f26bb4ba942d52016edc8d12fb15d91d3cd46b0047ba46e424213ad407bcb", size = 2113155, upload-time = "2026-01-21T18:42:49.748Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/2a/2821a45742073fc0331dc132552b30de68ba9563230853437cac54b2b53e/sqlalchemy-2.0.46-cp312-cp312-win_amd64.whl", hash = "sha256:ea3cd46b6713a10216323cda3333514944e510aa691c945334713fca6b5279ff", size = 2140078, upload-time = "2026-01-21T18:42:51.197Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/a1/9c4efa03300926601c19c18582531b45aededfb961ab3c3585f1e24f120b/sqlalchemy-2.0.46-py3-none-any.whl", hash = "sha256:f9c11766e7e7c0a2767dda5acb006a118640c9fc0a4104214b96269bfb78399e", size = 1937882, upload-time = "2026-01-21T18:22:10.456Z" },
-]
-
 [[package]]
 name = "sqlite-vec"
 version = "0.1.6"
@@ -3605,19 +3477,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/18/67/36e9267722cc04a6b9f15c7f3441c2363321a3ea07da7ae0c0707beb2a9c/typing_extensions-4.15.0-py3-none-any.whl", hash = "sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548", size = 44614, upload-time = "2025-08-25T13:49:24.86Z" },
 ]
 
-[[package]]
-name = "typing-inspect"
-version = "0.9.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "mypy-extensions" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/dc/74/1789779d91f1961fa9438e9a8710cdae6bd138c80d7303996933d117264a/typing_inspect-0.9.0.tar.gz", hash = "sha256:b23fc42ff6f6ef6954e4852c1fb512cdd18dbea03134f91f856a95ccc9461f78", size = 13825, upload-time = "2023-05-24T20:25:47.612Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/65/f3/107a22063bf27bdccf2024833d3445f4eea42b2e598abfbd46f6a63b6cb0/typing_inspect-0.9.0-py3-none-any.whl", hash = "sha256:9ee6fc59062311ef8547596ab6b955e1b8aa46242d854bfc78f4f6b0eff35f9f", size = 8827, upload-time = "2023-05-24T20:25:45.287Z" },
-]
-
 [[package]]
 name = "typing-inspection"
 version = "0.4.2"

From c3716dac856c00731b76e8ab73fe7ee3ef4d797b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:07:08 -0300
Subject: [PATCH 177/345] refactor(api): deduplicate sources router (#1069)

- Extract _source_to_response() shared builder (SourceResponse was
  hand-rolled 5x with the same nested AssetModel ternary)
- Extract _cleanup_uploaded_file() (the unlink ritual was pasted 6x
  inside create_source); inner cleanups were redundant with the outer
  exception handlers, which always run for the same failures
- Split create_source into _build_content_state() (type validation +
  SSRF/LFI guards) and _create_source_async_path() /
  _create_source_sync_path()
- Unify the paginated list query (with/without notebook filter differed
  only in the FROM clause and bound params)

Pure structural refactor: same status codes, error messages and
response shapes. Security checks (atomic filename claim via
touch(exist_ok=False), path-traversal containment, SSRF/LFI guards)
preserved verbatim, with their comments.
---
 CHANGELOG.md           |   1 +
 api/routers/sources.py | 598 +++++++++++++++++++----------------------
 2 files changed, 281 insertions(+), 318 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 308aec3e..fbc2c0de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks)
 - Internal refactor: extracted the session/source verification, record-ID normalization, LangGraph message extraction and shared response models duplicated across the chat and source-chat routers into `api/routers/_chat_shared.py`, pinned by new characterization tests — no behavior change
+- Internal refactor of the sources API router: extracted a shared `SourceResponse` builder (was hand-rolled 5×), a single upload-cleanup helper (was pasted 6×), split the 293-line create-source endpoint into validation + sync/async path functions, and unified the duplicated paginated list query. No behavior change; all security checks (atomic filename claim, path-traversal containment, SSRF/LFI guards) preserved verbatim
 - Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
 - Internal refactor with no user-facing change: split the 1,441-line API Keys settings page into focused components under `frontend/src/components/settings/` and moved the provider config tables to `frontend/src/lib/providers.tsx`, deduplicating the default-model select in the process
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
diff --git a/api/routers/sources.py b/api/routers/sources.py
index c1299a84..5e6a704f 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -243,47 +243,33 @@ async def get_sources(
             f"ORDER BY {SOURCE_SORT_FIELDS[sort_by]} {sort_order.upper()}, id ASC"
         )
 
-        # Build the query
+        # Build the query - same projection with or without the notebook
+        # filter; only the FROM clause and bound params differ.
+        params: dict[str, Any] = {"limit": limit, "offset": offset}
         if notebook_id:
             # Verify notebook exists first
             notebook = await Notebook.get(notebook_id)
             if not notebook:
                 raise HTTPException(status_code=404, detail="Notebook not found")
 
-            # Query sources for specific notebook - include command field with FETCH
-            query = f"""
-                SELECT id, asset, created, title, updated, topics, command,
-                string::lowercase(title OR '') AS title_sort,
-                ({SOURCE_TYPE_EXPRESSION}) AS type,
-                (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
-                (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
-                FROM (select value in from reference where out=$notebook_id)
-                {order_clause}
-                LIMIT $limit START $offset
-                FETCH command
-            """
-            result = await repo_query(
-                query,
-                {
-                    "notebook_id": ensure_record_id(notebook_id),
-                    "limit": limit,
-                    "offset": offset,
-                },
-            )
+            from_clause = "(select value in from reference where out=$notebook_id)"
+            params["notebook_id"] = ensure_record_id(notebook_id)
         else:
-            # Query all sources - include command field with FETCH
-            query = f"""
-                SELECT id, asset, created, title, updated, topics, command,
-                string::lowercase(title OR '') AS title_sort,
-                ({SOURCE_TYPE_EXPRESSION}) AS type,
-                (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
-                (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
-                FROM source
-                {order_clause}
-                LIMIT $limit START $offset
-                FETCH command
-            """
-            result = await repo_query(query, {"limit": limit, "offset": offset})
+            from_clause = "source"
+
+        # Query sources - include command field with FETCH
+        query = f"""
+            SELECT id, asset, created, title, updated, topics, command,
+            string::lowercase(title OR '') AS title_sort,
+            ({SOURCE_TYPE_EXPRESSION}) AS type,
+            (SELECT VALUE count() FROM source_insight WHERE source = $parent.id GROUP ALL)[0].count OR 0 AS insights_count,
+            (SELECT VALUE id FROM source_embedding WHERE source = $parent.id LIMIT 1) != [] AS embedded
+            FROM {from_clause}
+            {order_clause}
+            LIMIT $limit START $offset
+            FETCH command
+        """
+        result = await repo_query(query, params)
 
         # Convert result to response model
         # Command data is already fetched via FETCH command clause
@@ -348,6 +334,251 @@ async def get_sources(
         raise HTTPException(status_code=500, detail="Error fetching sources")
 
 
+def _source_to_response(
+    source: Source, embedded_chunks: int = 0, **extras: Any
+) -> SourceResponse:
+    """Build a SourceResponse from a Source, deriving the shared fields.
+
+    Endpoint-specific fields (command_id, status, processing_info, notebooks,
+    file_available, ...) are passed as keyword arguments and override the
+    derived values.
+    """
+    fields: dict[str, Any] = {
+        "id": source.id or "",
+        "title": source.title,
+        "topics": source.topics or [],
+        "asset": AssetModel(
+            file_path=source.asset.file_path,
+            url=source.asset.url,
+        )
+        if source.asset
+        else None,
+        "full_text": source.full_text,
+        "embedded": embedded_chunks > 0,
+        "embedded_chunks": embedded_chunks,
+        "created": str(source.created),
+        "updated": str(source.updated),
+    }
+    fields.update(extras)
+    return SourceResponse(**fields)
+
+
+def _cleanup_uploaded_file(
+    file_path: Optional[str], upload_file: Optional[UploadFile]
+) -> None:
+    """Best-effort removal of a file this request uploaded, after a failure.
+
+    Only removes files we created ourselves (an upload_file was provided) -
+    never a caller-supplied file_path."""
+    if file_path and upload_file:
+        try:
+            os.unlink(file_path)
+        except Exception:
+            pass
+
+
+async def _build_content_state(
+    source_data: SourceCreate, file_path: Optional[str]
+) -> dict[str, Any]:
+    """Validate the type-specific input and build the content_state passed to
+    the processing command. The SSRF and LFI guards live here."""
+    content_state: dict[str, Any] = {}
+
+    if source_data.type == "link":
+        if not source_data.url:
+            raise HTTPException(status_code=400, detail="URL is required for link type")
+        # Block SSRF to internal/metadata addresses before the server ever
+        # fetches this URL (same guard used for provider-credential URLs).
+        try:
+            await validate_url(source_data.url, "source")
+        except ValueError as e:
+            raise HTTPException(status_code=400, detail=str(e))
+        content_state["url"] = source_data.url
+    elif source_data.type == "upload":
+        # Use uploaded file path or provided file_path (backward compatibility)
+        final_file_path = file_path or source_data.file_path
+        if not final_file_path:
+            raise HTTPException(
+                status_code=400,
+                detail="File upload or file_path is required for upload type",
+            )
+        # Validate file_path is within the uploads directory to prevent LFI
+        uploads_resolved = Path(UPLOADS_FOLDER).resolve()
+        file_resolved = Path(final_file_path).resolve()
+        if not str(file_resolved).startswith(str(uploads_resolved) + os.sep):
+            raise HTTPException(
+                status_code=400,
+                detail="Invalid file path: must be within the uploads directory",
+            )
+        content_state["file_path"] = final_file_path
+        content_state["delete_source"] = source_data.delete_source
+    elif source_data.type == "text":
+        if not source_data.content:
+            raise HTTPException(
+                status_code=400, detail="Content is required for text type"
+            )
+        content_state["content"] = source_data.content
+    else:
+        raise HTTPException(
+            status_code=400,
+            detail="Invalid source type. Must be link, upload, or text",
+        )
+
+    return content_state
+
+
+async def _create_source_async_path(
+    source_data: SourceCreate,
+    content_state: dict[str, Any],
+    transformation_ids: List[str],
+    file_path: Optional[str],
+) -> SourceResponse:
+    """ASYNC PATH: Create source record first, then queue command."""
+    logger.info("Using async processing path")
+
+    # Create source record with asset - let SurrealDB generate the ID
+    # Persist asset before save so it's available for retry if processing fails
+    if source_data.type == "link":
+        source_asset = Asset(url=source_data.url)
+    elif source_data.type == "upload":
+        source_asset = Asset(file_path=file_path or source_data.file_path)
+    else:
+        source_asset = None
+
+    source = Source(
+        title=source_data.title or "Processing...",
+        topics=[],
+        asset=source_asset,
+    )
+    await source.save()
+
+    # Add source to notebooks immediately so it appears in the UI
+    # The source_graph will skip adding duplicates
+    for notebook_id in source_data.notebooks or []:
+        await source.add_to_notebook(notebook_id)
+
+    try:
+        # Import command modules to ensure they're registered
+        import commands.source_commands  # noqa: F401
+
+        # Submit command for background processing
+        command_input = SourceProcessingInput(
+            source_id=str(source.id),
+            content_state=content_state,
+            notebook_ids=source_data.notebooks,
+            transformations=transformation_ids,
+            embed=source_data.embed,
+        )
+
+        command_id = await CommandService.submit_command_job(
+            "open_notebook",  # app name
+            "process_source",  # command name
+            command_input.model_dump(),
+        )
+
+        logger.info(f"Submitted async processing command: {command_id}")
+
+        # Update source with command reference immediately
+        # command_id already includes 'command:' prefix
+        source.command = ensure_record_id(command_id)
+        await source.save()
+
+        # Return source with command info
+        return _source_to_response(
+            source,
+            asset=None,  # Will be populated after processing
+            full_text=None,  # Will be populated after processing
+            embedded=False,  # Will be updated after processing
+            embedded_chunks=0,
+            command_id=command_id,
+            status="new",
+            processing_info={"async": True, "queued": True},
+        )
+
+    except Exception as e:
+        logger.error(f"Failed to submit async processing command: {e}")
+        # Clean up source record on command submission failure
+        try:
+            await source.delete()
+        except Exception:
+            pass
+        # The uploaded file (if any) is cleaned up by create_source's handlers
+        raise HTTPException(status_code=500, detail="Failed to queue processing")
+
+
+async def _create_source_sync_path(
+    source_data: SourceCreate,
+    content_state: dict[str, Any],
+    transformation_ids: List[str],
+) -> SourceResponse:
+    """SYNC PATH: Execute synchronously using execute_command_sync."""
+    logger.info("Using sync processing path")
+
+    try:
+        # Import command modules to ensure they're registered
+        import commands.source_commands  # noqa: F401
+
+        # Create source record - let SurrealDB generate the ID
+        source = Source(
+            title=source_data.title or "Processing...",
+            topics=[],
+        )
+        await source.save()
+
+        # Add source to notebooks immediately so it appears in the UI
+        # The source_graph will skip adding duplicates
+        for notebook_id in source_data.notebooks or []:
+            await source.add_to_notebook(notebook_id)
+
+        # Execute command synchronously
+        command_input = SourceProcessingInput(
+            source_id=str(source.id),
+            content_state=content_state,
+            notebook_ids=source_data.notebooks,
+            transformations=transformation_ids,
+            embed=source_data.embed,
+        )
+
+        # Run in thread pool to avoid blocking the event loop
+        # execute_command_sync uses asyncio.run() internally which can't
+        # be called from an already-running event loop (FastAPI)
+        result = await asyncio.to_thread(
+            execute_command_sync,
+            "open_notebook",  # app name
+            "process_source",  # command name
+            command_input.model_dump(),
+            timeout=300,  # 5 minute timeout for sync processing
+        )
+
+        if not result.is_success():
+            logger.error(f"Sync processing failed: {result.error_message}")
+            # Clean up source record
+            try:
+                await source.delete()
+            except Exception:
+                pass
+            raise HTTPException(
+                status_code=500,
+                detail=f"Processing failed: {result.error_message}",
+            )
+
+        # Get the processed source
+        if not source.id:
+            raise HTTPException(status_code=500, detail="Source ID is missing")
+        processed_source = await Source.get(source.id)
+        if not processed_source:
+            raise HTTPException(status_code=500, detail="Processed source not found")
+
+        embedded_chunks = await processed_source.get_embedded_chunks()
+        # No command_id or status for sync processing (legacy behavior)
+        return _source_to_response(processed_source, embedded_chunks=embedded_chunks)
+
+    except Exception as e:
+        logger.error(f"Sync processing failed: {e}")
+        # The uploaded file (if any) is cleaned up by create_source's handlers
+        raise
+
+
 @router.post("/sources", response_model=SourceResponse)
 async def create_source(
     form_data: tuple[SourceCreate, Optional[UploadFile]] = Depends(
@@ -377,50 +608,8 @@ async def create_source(
                 logger.error(f"File upload failed: {e}")
                 raise HTTPException(status_code=400, detail="File upload failed")
 
-        # Prepare content_state for processing
-        content_state: dict[str, Any] = {}
-
-        if source_data.type == "link":
-            if not source_data.url:
-                raise HTTPException(
-                    status_code=400, detail="URL is required for link type"
-                )
-            # Block SSRF to internal/metadata addresses before the server ever
-            # fetches this URL (same guard used for provider-credential URLs).
-            try:
-                await validate_url(source_data.url, "source")
-            except ValueError as e:
-                raise HTTPException(status_code=400, detail=str(e))
-            content_state["url"] = source_data.url
-        elif source_data.type == "upload":
-            # Use uploaded file path or provided file_path (backward compatibility)
-            final_file_path = file_path or source_data.file_path
-            if not final_file_path:
-                raise HTTPException(
-                    status_code=400,
-                    detail="File upload or file_path is required for upload type",
-                )
-            # Validate file_path is within the uploads directory to prevent LFI
-            uploads_resolved = Path(UPLOADS_FOLDER).resolve()
-            file_resolved = Path(final_file_path).resolve()
-            if not str(file_resolved).startswith(str(uploads_resolved) + os.sep):
-                raise HTTPException(
-                    status_code=400,
-                    detail="Invalid file path: must be within the uploads directory",
-                )
-            content_state["file_path"] = final_file_path
-            content_state["delete_source"] = source_data.delete_source
-        elif source_data.type == "text":
-            if not source_data.content:
-                raise HTTPException(
-                    status_code=400, detail="Content is required for text type"
-                )
-            content_state["content"] = source_data.content
-        else:
-            raise HTTPException(
-                status_code=400,
-                detail="Invalid source type. Must be link, upload, or text",
-            )
+        # Prepare content_state for processing (type validation + SSRF/LFI guards)
+        content_state = await _build_content_state(source_data, file_path)
 
         # Validate transformations exist
         transformation_ids = source_data.transformations or []
@@ -433,213 +622,25 @@ async def create_source(
 
         # Branch based on processing mode
         if source_data.async_processing:
-            # ASYNC PATH: Create source record first, then queue command
-            logger.info("Using async processing path")
-
-            # Create source record with asset - let SurrealDB generate the ID
-            # Persist asset before save so it's available for retry if processing fails
-            if source_data.type == "link":
-                source_asset = Asset(url=source_data.url)
-            elif source_data.type == "upload":
-                source_asset = Asset(file_path=file_path or source_data.file_path)
-            else:
-                source_asset = None
-
-            source = Source(
-                title=source_data.title or "Processing...",
-                topics=[],
-                asset=source_asset,
+            return await _create_source_async_path(
+                source_data, content_state, transformation_ids, file_path
             )
-            await source.save()
-
-            # Add source to notebooks immediately so it appears in the UI
-            # The source_graph will skip adding duplicates
-            for notebook_id in source_data.notebooks or []:
-                await source.add_to_notebook(notebook_id)
-
-            try:
-                # Import command modules to ensure they're registered
-                import commands.source_commands  # noqa: F401
-
-                # Submit command for background processing
-                command_input = SourceProcessingInput(
-                    source_id=str(source.id),
-                    content_state=content_state,
-                    notebook_ids=source_data.notebooks,
-                    transformations=transformation_ids,
-                    embed=source_data.embed,
-                )
-
-                command_id = await CommandService.submit_command_job(
-                    "open_notebook",  # app name
-                    "process_source",  # command name
-                    command_input.model_dump(),
-                )
-
-                logger.info(f"Submitted async processing command: {command_id}")
-
-                # Update source with command reference immediately
-                # command_id already includes 'command:' prefix
-                source.command = ensure_record_id(command_id)
-                await source.save()
-
-                # Return source with command info
-                return SourceResponse(
-                    id=source.id or "",
-                    title=source.title,
-                    topics=source.topics or [],
-                    asset=None,  # Will be populated after processing
-                    full_text=None,  # Will be populated after processing
-                    embedded=False,  # Will be updated after processing
-                    embedded_chunks=0,
-                    created=str(source.created),
-                    updated=str(source.updated),
-                    command_id=command_id,
-                    status="new",
-                    processing_info={"async": True, "queued": True},
-                )
-
-            except Exception as e:
-                logger.error(f"Failed to submit async processing command: {e}")
-                # Clean up source record on command submission failure
-                try:
-                    await source.delete()
-                except Exception:
-                    pass
-                # Clean up uploaded file if we created it
-                if file_path and upload_file:
-                    try:
-                        os.unlink(file_path)
-                    except Exception:
-                        pass
-                raise HTTPException(
-                    status_code=500, detail="Failed to queue processing"
-                )
-
-        else:
-            # SYNC PATH: Execute synchronously using execute_command_sync
-            logger.info("Using sync processing path")
-
-            try:
-                # Import command modules to ensure they're registered
-                import commands.source_commands  # noqa: F401
-
-                # Create source record - let SurrealDB generate the ID
-                source = Source(
-                    title=source_data.title or "Processing...",
-                    topics=[],
-                )
-                await source.save()
-
-                # Add source to notebooks immediately so it appears in the UI
-                # The source_graph will skip adding duplicates
-                for notebook_id in source_data.notebooks or []:
-                    await source.add_to_notebook(notebook_id)
-
-                # Execute command synchronously
-                command_input = SourceProcessingInput(
-                    source_id=str(source.id),
-                    content_state=content_state,
-                    notebook_ids=source_data.notebooks,
-                    transformations=transformation_ids,
-                    embed=source_data.embed,
-                )
-
-                # Run in thread pool to avoid blocking the event loop
-                # execute_command_sync uses asyncio.run() internally which can't
-                # be called from an already-running event loop (FastAPI)
-                result = await asyncio.to_thread(
-                    execute_command_sync,
-                    "open_notebook",  # app name
-                    "process_source",  # command name
-                    command_input.model_dump(),
-                    timeout=300,  # 5 minute timeout for sync processing
-                )
-
-                if not result.is_success():
-                    logger.error(f"Sync processing failed: {result.error_message}")
-                    # Clean up source record
-                    try:
-                        await source.delete()
-                    except Exception:
-                        pass
-                    # Clean up uploaded file if we created it
-                    if file_path and upload_file:
-                        try:
-                            os.unlink(file_path)
-                        except Exception:
-                            pass
-                    raise HTTPException(
-                        status_code=500,
-                        detail=f"Processing failed: {result.error_message}",
-                    )
-
-                # Get the processed source
-                if not source.id:
-                    raise HTTPException(status_code=500, detail="Source ID is missing")
-                processed_source = await Source.get(source.id)
-                if not processed_source:
-                    raise HTTPException(
-                        status_code=500, detail="Processed source not found"
-                    )
-
-                embedded_chunks = await processed_source.get_embedded_chunks()
-                return SourceResponse(
-                    id=processed_source.id or "",
-                    title=processed_source.title,
-                    topics=processed_source.topics or [],
-                    asset=AssetModel(
-                        file_path=processed_source.asset.file_path
-                        if processed_source.asset
-                        else None,
-                        url=processed_source.asset.url
-                        if processed_source.asset
-                        else None,
-                    )
-                    if processed_source.asset
-                    else None,
-                    full_text=processed_source.full_text,
-                    embedded=embedded_chunks > 0,
-                    embedded_chunks=embedded_chunks,
-                    created=str(processed_source.created),
-                    updated=str(processed_source.updated),
-                    # No command_id or status for sync processing (legacy behavior)
-                )
-
-            except Exception as e:
-                logger.error(f"Sync processing failed: {e}")
-                # Clean up uploaded file if we created it
-                if file_path and upload_file:
-                    try:
-                        os.unlink(file_path)
-                    except Exception:
-                        pass
-                raise
+        return await _create_source_sync_path(
+            source_data, content_state, transformation_ids
+        )
 
     except HTTPException:
         # Clean up uploaded file on HTTP exceptions if we created it
-        if file_path and upload_file:
-            try:
-                os.unlink(file_path)
-            except Exception:
-                pass
+        _cleanup_uploaded_file(file_path, upload_file)
         raise
     except InvalidInputError as e:
         # Clean up uploaded file on validation errors if we created it
-        if file_path and upload_file:
-            try:
-                os.unlink(file_path)
-            except Exception:
-                pass
+        _cleanup_uploaded_file(file_path, upload_file)
         raise HTTPException(status_code=400, detail=str(e))
     except Exception as e:
         logger.error(f"Error creating source: {str(e)}")
         # Clean up uploaded file on unexpected errors if we created it
-        if file_path and upload_file:
-            try:
-                os.unlink(file_path)
-            except Exception:
-                pass
+        _cleanup_uploaded_file(file_path, upload_file)
         raise HTTPException(status_code=500, detail="Error creating source")
 
 
@@ -722,22 +723,10 @@ async def get_source(source_id: str):
             [str(nb_id) for nb_id in notebooks_query] if notebooks_query else []
         )
 
-        return SourceResponse(
-            id=source.id or "",
-            title=source.title,
-            topics=source.topics or [],
-            asset=AssetModel(
-                file_path=source.asset.file_path if source.asset else None,
-                url=source.asset.url if source.asset else None,
-            )
-            if source.asset
-            else None,
-            full_text=source.full_text,
-            embedded=embedded_chunks > 0,
+        return _source_to_response(
+            source,
             embedded_chunks=embedded_chunks,
             file_available=_is_source_file_available(source),
-            created=str(source.created),
-            updated=str(source.updated),
             # Status fields
             command_id=str(source.command) if source.command else None,
             status=status,
@@ -861,22 +850,7 @@ async def update_source(source_id: str, source_update: SourceUpdate):
         await source.save()
 
         embedded_chunks = await source.get_embedded_chunks()
-        return SourceResponse(
-            id=source.id or "",
-            title=source.title,
-            topics=source.topics or [],
-            asset=AssetModel(
-                file_path=source.asset.file_path if source.asset else None,
-                url=source.asset.url if source.asset else None,
-            )
-            if source.asset
-            else None,
-            full_text=source.full_text,
-            embedded=embedded_chunks > 0,
-            embedded_chunks=embedded_chunks,
-            created=str(source.created),
-            updated=str(source.updated),
-        )
+        return _source_to_response(source, embedded_chunks=embedded_chunks)
     except HTTPException:
         raise
     except InvalidInputError as e:
@@ -980,21 +954,9 @@ async def retry_source_processing(source_id: str):
             embedded_chunks = await source.get_embedded_chunks()
 
             # Return updated source response
-            return SourceResponse(
-                id=source.id or "",
-                title=source.title,
-                topics=source.topics or [],
-                asset=AssetModel(
-                    file_path=source.asset.file_path if source.asset else None,
-                    url=source.asset.url if source.asset else None,
-                )
-                if source.asset
-                else None,
-                full_text=source.full_text,
-                embedded=embedded_chunks > 0,
+            return _source_to_response(
+                source,
                 embedded_chunks=embedded_chunks,
-                created=str(source.created),
-                updated=str(source.updated),
                 command_id=command_id,
                 status="queued",
                 processing_info={"retry": True, "queued": True},

From dbffa4c78ef4f45961b6b7f190d5c9d3bc2b8233 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:14:00 -0300
Subject: [PATCH 178/345] refactor(frontend): use i18next interpolation instead
 of manual replace (#1074)

Convert every t('key').replace('{ph}', value) call site (77 t() calls
across 37 files) to native i18next interpolation t('key', { ph: value }),
and switch the corresponding locale placeholders from {ph} to {{ph}} in
all 14 locales (842 strings).

- count params are passed as numbers, enabling i18next plural resolution
  (podcasts.usedByCount now uses the existing _one/_other forms instead
  of a manual ternary)
- podcasts.tokens/chars keep their pre-formatted display value
  (formatNumber) under a renamed {{value}} placeholder, since i18next
  types reserve count for numbers
- escapeValue: false was already set in src/lib/i18n.ts (React escapes
  at render), so rendered output is unchanged
- unused-key test now strips plural suffixes before matching, and a new
  interpolation test covers variables, plurals and non-escaping
---
 CHANGELOG.md                                  |   1 +
 .../advanced/components/RebuildEmbeddings.tsx |   9 +-
 .../advanced/components/SystemInfo.tsx        |   2 +-
 .../notebooks/components/NotebookCard.tsx     |   4 +-
 .../components/NotebookDeleteDialog.tsx       |  17 +--
 .../notebooks/components/NotebookHeader.tsx   |   4 +-
 .../notebooks/components/NotebookRow.tsx      |   4 +-
 frontend/src/app/(dashboard)/search/page.tsx  |   6 +-
 frontend/src/app/(dashboard)/sources/page.tsx |   2 +-
 .../src/components/common/CommandPalette.tsx  |   8 +-
 .../src/components/layout/SetupBanner.tsx     |   2 +-
 .../podcasts/ContentSelectionPanel.tsx        |  11 +-
 .../src/components/podcasts/EpisodeCard.tsx   |   4 +-
 .../podcasts/EpisodeProfilesPanel.tsx         |   2 +-
 .../podcasts/GeneratePodcastDialog.tsx        |   2 +-
 .../podcasts/SpeakerProfilesPanel.tsx         |   4 +-
 .../forms/SpeakerProfileFormDialog.tsx        |   4 +-
 .../components/search/StreamingResponse.tsx   |   4 +-
 .../settings/CredentialFormDialog.tsx         |   4 +-
 .../settings/DefaultModelSelectors.tsx        |   2 +-
 .../settings/DeleteCredentialDialog.tsx       |   2 +-
 .../settings/DiscoverModelsDialog.tsx         |   2 +-
 .../settings/EmbeddingModelChangeDialog.tsx   |   4 +-
 .../components/settings/MigrationBanner.tsx   |   2 +-
 frontend/src/components/source/ChatPanel.tsx  |   6 +-
 .../src/components/source/ModelSelector.tsx   |   5 +-
 .../src/components/source/SessionManager.tsx  |   2 +-
 .../components/source/SourceDetailContent.tsx |   2 +-
 .../sources/AddExistingSourceDialog.tsx       |   4 +-
 .../components/sources/AddSourceDialog.tsx    |   8 +-
 .../src/components/sources/SourceCard.tsx     |   2 +-
 .../sources/steps/SourceTypeStep.tsx          |  14 +-
 frontend/src/lib/hooks/use-credentials.ts     |  18 ++-
 frontend/src/lib/hooks/use-models.ts          |   2 +-
 frontend/src/lib/hooks/use-podcasts.ts        |   2 +-
 frontend/src/lib/hooks/use-sources.ts         |   6 +-
 frontend/src/lib/hooks/use-version-check.ts   |   2 +-
 frontend/src/lib/locales/bn-IN/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/ca-ES/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/de-DE/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/en-US/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/es-ES/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/fr-FR/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/index.test.ts        |   7 +-
 .../src/lib/locales/interpolation.test.ts     |  46 +++++++
 frontend/src/lib/locales/it-IT/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/ja-JP/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/pl-PL/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/pt-BR/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/ru-RU/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/tr-TR/index.ts       | 120 ++++++++---------
 frontend/src/lib/locales/zh-CN/index.ts       | 122 +++++++++---------
 frontend/src/lib/locales/zh-TW/index.ts       | 122 +++++++++---------
 53 files changed, 972 insertions(+), 944 deletions(-)
 create mode 100644 frontend/src/lib/locales/interpolation.test.ts

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fbc2c0de..2324ac32 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
 
 ### Fixed
+- Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely
 - Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
 
 ### Changed
diff --git a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
index 6a04596f..f5fb1d11 100644
--- a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
@@ -256,16 +256,13 @@ export function RebuildEmbeddings() {
                 <div className="flex justify-between text-sm">
                   <span>{t('common.progress')}</span>
                   <span className="font-medium">
-                    {t('advanced.rebuild.itemsProcessed')
-                      .replace('{processed}', processedItems.toString())
-                      .replace('{total}', totalItems.toString())
-                      .replace('{percent}', progressPercent.toFixed(1))}
+                    {t('advanced.rebuild.itemsProcessed', { processed: processedItems.toString(), total: totalItems.toString(), percent: progressPercent.toFixed(1) })}
                   </span>
                 </div>
                 <Progress value={progressPercent} className="h-2" />
                 {failedItems > 0 && (
                   <p className="text-sm text-yellow-600">
-                    ⚠️ {t('advanced.rebuild.failedItems').replace('{count}', failedItems.toString())}
+                    ⚠️ {t('advanced.rebuild.failedItems', { count: failedItems })}
                   </p>
                 )}
               </div>
@@ -303,7 +300,7 @@ export function RebuildEmbeddings() {
 
             {status.started_at && (
               <div className="text-sm text-muted-foreground space-y-1">
-                <p>{t('common.created').replace('{time}', new Date(status.started_at).toLocaleString())}</p>
+                <p>{t('common.created', { time: new Date(status.started_at).toLocaleString() })}</p>
                 {status.completed_at && (
                   <p>{t('notebooks.updated')}: {new Date(status.completed_at).toLocaleString()}</p>
                 )}
diff --git a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
index 1390822e..53926155 100644
--- a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
@@ -66,7 +66,7 @@ export function SystemInfo() {
             <span className="text-sm font-medium">{t('advanced.status')}</span>
             {config?.hasUpdate ? (
               <Badge variant="destructive">
-                {t('advanced.updateAvailable').replace('{version}', config.latestVersion || '')}
+                {t('advanced.updateAvailable', { version: config.latestVersion || '' })}
               </Badge>
             ) : config?.latestVersion ? (
               <Badge variant="outline" className="text-green-600 border-green-600">
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
index a8937aeb..687491de 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
@@ -106,10 +106,10 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
             </CardDescription>
 
             <div className="mt-3 text-xs text-muted-foreground">
-              {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), { 
+              {t('common.updated', { time: formatDistanceToNow(new Date(notebook.updated), { 
                 addSuffix: true,
                 locale: getDateLocale(language)
-              }))}
+              }) })}
             </div>
 
             {/* Item counts footer */}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
index c99ca362..fbc3cfb4 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
@@ -71,7 +71,7 @@ export function NotebookDeleteDialog({
         <AlertDialogHeader>
           <AlertDialogTitle>{t('notebooks.deleteNotebook')}</AlertDialogTitle>
           <AlertDialogDescription>
-            {t('notebooks.deleteNotebookDesc').replace('{name}', notebookName)}
+            {t('notebooks.deleteNotebookDesc', { name: notebookName })}
           </AlertDialogDescription>
         </AlertDialogHeader>
 
@@ -91,10 +91,7 @@ export function NotebookDeleteDialog({
               <div className="text-sm">
                 {preview.note_count > 0 ? (
                   <p className="text-destructive font-medium">
-                    {t('notebooks.deleteNotebookNotes').replace(
-                      '{count}',
-                      String(preview.note_count)
-                    )}
+                    {t('notebooks.deleteNotebookNotes', { count: preview.note_count })}
                   </p>
                 ) : (
                   <p className="text-muted-foreground">{t('notebooks.deleteNotebookNoNotes')}</p>
@@ -105,10 +102,7 @@ export function NotebookDeleteDialog({
               {preview.shared_source_count > 0 && (
                 <div className="text-sm">
                   <p className="text-muted-foreground">
-                    {t('notebooks.deleteNotebookSharedSources').replace(
-                      '{count}',
-                      String(preview.shared_source_count)
-                    )}
+                    {t('notebooks.deleteNotebookSharedSources', { count: preview.shared_source_count })}
                   </p>
                 </div>
               )}
@@ -124,10 +118,7 @@ export function NotebookDeleteDialog({
               {preview.exclusive_source_count > 0 && (
                 <div className="pt-3 border-t space-y-3">
                   <p className="text-sm text-destructive font-medium">
-                    {t('notebooks.deleteNotebookExclusiveSources').replace(
-                      '{count}',
-                      String(preview.exclusive_source_count)
-                    )}
+                    {t('notebooks.deleteNotebookExclusiveSources', { count: preview.exclusive_source_count })}
                   </p>
                   <RadioGroup
                     value={sourceAction}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
index 43d452cd..e1ad7754 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
@@ -110,8 +110,8 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
           />
           
           <div className="text-sm text-muted-foreground">
-            {t('common.created').replace('{time}', formatDistanceToNow(new Date(notebook.created), { addSuffix: true, locale: dfLocale }))} • 
-            {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), { addSuffix: true, locale: dfLocale }))}
+            {t('common.created', { time: formatDistanceToNow(new Date(notebook.created), { addSuffix: true, locale: dfLocale }) })} • 
+            {t('common.updated', { time: formatDistanceToNow(new Date(notebook.updated), { addSuffix: true, locale: dfLocale }) })}
           </div>
         </div>
       </div>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
index 1a61f69a..db4a1b80 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
@@ -85,10 +85,10 @@ export function NotebookRow({ notebook }: NotebookRowProps) {
         </div>
 
         <div className="hidden sm:block w-40 shrink-0 text-right text-xs text-muted-foreground">
-          {t('common.updated').replace('{time}', formatDistanceToNow(new Date(notebook.updated), {
+          {t('common.updated', { time: formatDistanceToNow(new Date(notebook.updated), {
             addSuffix: true,
             locale: getDateLocale(language)
-          }))}
+          }) })}
         </div>
 
         <DropdownMenu>
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index f4d50499..7dc92af6 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -428,7 +428,7 @@ export default function SearchPage() {
                   <div className="mt-6 space-y-3">
                     <div className="flex items-center justify-between">
                       <h3 className="text-sm font-medium">
-                        {t('searchPage.resultsFound').replace('{count}', searchMutation.data.total_count.toString())}
+                        {t('searchPage.resultsFound', { count: searchMutation.data.total_count })}
                       </h3>
                       <Badge variant="outline">{searchMutation.data.search_type === 'text' ? t('searchPage.textSearch') : t('searchPage.vectorSearch')}</Badge>
                     </div>
@@ -436,7 +436,7 @@ export default function SearchPage() {
                     {searchMutation.data.results.length === 0 ? (
                       <Card>
                         <CardContent className="pt-6 text-center text-muted-foreground">
-                          {t('searchPage.noResultsFor').replace('{query}', searchQuery)}
+                          {t('searchPage.noResultsFor', { query: searchQuery })}
                         </CardContent>
                       </Card>
                     ) : (
@@ -472,7 +472,7 @@ export default function SearchPage() {
                                 <Collapsible className="mt-3">
                                   <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground">
                                     <ChevronDown className="h-4 w-4" />
-                                    {t('searchPage.matches').replace('{count}', result.matches.length.toString())}
+                                    {t('searchPage.matches', { count: result.matches.length })}
                                   </CollapsibleTrigger>
                                   <CollapsibleContent className="mt-2 space-y-1">
                                     {result.matches.map((match, i) => (
diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index fceefa56..1e278fcb 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -446,7 +446,7 @@ export default function SourcesPage() {
         open={deleteDialog.open}
         onOpenChange={(open) => setDeleteDialog({ open, source: deleteDialog.source })}
         title={t('sources.delete')}
-        description={t('sources.deleteConfirmWithTitle').replace('{title}', deleteDialog.source?.title || t('sources.untitledSource'))}
+        description={t('sources.deleteConfirmWithTitle', { title: deleteDialog.source?.title || t('sources.untitledSource') })}
         confirmText={t('common.delete')}
         confirmVariant="destructive"
         onConfirm={handleDeleteConfirm}
diff --git a/frontend/src/components/common/CommandPalette.tsx b/frontend/src/components/common/CommandPalette.tsx
index 143843bf..a4005c92 100644
--- a/frontend/src/components/common/CommandPalette.tsx
+++ b/frontend/src/components/common/CommandPalette.tsx
@@ -187,7 +187,7 @@ export function CommandPalette() {
               forceMount
             >
               <Search className="h-4 w-4" />
-              <span>{t('searchPage.searchResultsFor').replace('{query}', query)}</span>
+              <span>{t('searchPage.searchResultsFor', { query: query })}</span>
             </CommandItem>
             <CommandItem
               value={`__ask__ ${query}`}
@@ -195,7 +195,7 @@ export function CommandPalette() {
               forceMount
             >
               <MessageCircleQuestion className="h-4 w-4" />
-              <span>{t('searchPage.askAbout').replace('{query}', query)}</span>
+              <span>{t('searchPage.askAbout', { query: query })}</span>
             </CommandItem>
           </CommandGroup>
         )}
@@ -274,7 +274,7 @@ export function CommandPalette() {
                 forceMount
               >
                 <Search className="h-4 w-4" />
-                <span>{t('searchPage.searchResultsFor').replace('{query}', query)}</span>
+                <span>{t('searchPage.searchResultsFor', { query: query })}</span>
               </CommandItem>
               <CommandItem
                 value={`__ask__ ${query}`}
@@ -282,7 +282,7 @@ export function CommandPalette() {
                 forceMount
               >
                 <MessageCircleQuestion className="h-4 w-4" />
-                <span>{t('searchPage.askAbout').replace('{query}', query)}</span>
+                <span>{t('searchPage.askAbout', { query: query })}</span>
               </CommandItem>
             </CommandGroup>
           </>
diff --git a/frontend/src/components/layout/SetupBanner.tsx b/frontend/src/components/layout/SetupBanner.tsx
index a0c041c1..095da9c8 100644
--- a/frontend/src/components/layout/SetupBanner.tsx
+++ b/frontend/src/components/layout/SetupBanner.tsx
@@ -64,7 +64,7 @@ export function SetupBanner() {
         </AlertTitle>
         <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
           <span className="text-amber-700 dark:text-amber-300">
-            {t('setupBanner.migrationDescription').replace('{count}', providersToMigrate.length.toString())}
+            {t('setupBanner.migrationDescription', { count: providersToMigrate.length })}
           </span>
           <Button
             variant="outline"
diff --git a/frontend/src/components/podcasts/ContentSelectionPanel.tsx b/frontend/src/components/podcasts/ContentSelectionPanel.tsx
index 664a170d..2376c2bc 100644
--- a/frontend/src/components/podcasts/ContentSelectionPanel.tsx
+++ b/frontend/src/components/podcasts/ContentSelectionPanel.tsx
@@ -78,19 +78,16 @@ export function ContentSelectionPanel({
         </div>
         <div className="flex items-center gap-2">
           <Badge variant="outline">
-            {t('podcasts.itemsSelected').replace(
-              '{count}',
-              selectedNotebookSummaries.reduce(
+            {t('podcasts.itemsSelected', { count: selectedNotebookSummaries.reduce(
                 (acc: number, summary: NotebookSummary) => acc + summary.sources + summary.notes,
                 0
-              ).toString()
-            )}
+              ) })}
           </Badge>
           {(tokenCount > 0 || charCount > 0) && (
             <span className="text-xs text-muted-foreground">
-              {tokenCount > 0 && t('podcasts.tokens').replace('{count}', formatNumber(tokenCount))}
+              {tokenCount > 0 && t('podcasts.tokens', { value: formatNumber(tokenCount) })}
               {tokenCount > 0 && charCount > 0 && ' / '}
-              {charCount > 0 && t('podcasts.chars').replace('{count}', formatNumber(charCount))}
+              {charCount > 0 && t('podcasts.chars', { value: formatNumber(charCount) })}
             </span>
           )}
         </div>
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index 38f20b1b..eac18cfd 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -212,7 +212,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
     : null
 
   const createdLabel = distance
-    ? t('podcasts.created').replace('{time}', distance)
+    ? t('podcasts.created', { time: distance })
     : null
 
   const handleDelete = () => {
@@ -403,7 +403,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                 <AlertDialogHeader>
                   <AlertDialogTitle>{t('podcasts.deleteEpisodeTitle')}</AlertDialogTitle>
                   <AlertDialogDescription>
-                    {t('podcasts.deleteEpisodeDesc').replace('{name}', episode.name)}
+                    {t('podcasts.deleteEpisodeDesc', { name: episode.name })}
                   </AlertDialogDescription>
                 </AlertDialogHeader>
                 <AlertDialogFooter>
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index f19efe99..6c79f11a 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -176,7 +176,7 @@ export function EpisodeProfilesPanel({
                         <AlertDialogHeader>
                           <AlertDialogTitle>{t('podcasts.deleteProfileTitle')}</AlertDialogTitle>
                           <AlertDialogDescription>
-                            {t('podcasts.deleteProfileDesc').replace('{name}', profile.name)}
+                            {t('podcasts.deleteProfileDesc', { name: profile.name })}
                           </AlertDialogDescription>
                         </AlertDialogHeader>
                         <AlertDialogFooter>
diff --git a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
index 032ed7f7..a69bd20b 100644
--- a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
+++ b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
@@ -371,7 +371,7 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
         })
         const notebookName = notebooks.find((nb) => nb.id === task.notebookId)?.name ?? task.notebookId
         const contextString = JSON.stringify(response.context, null, 2)
-        const snippet = `${t('common.notebookLabel').replace('{name}', notebookName)}\n${contextString}`
+        const snippet = `${t('common.notebookLabel', { name: notebookName })}\n${contextString}`
         parts.push(snippet)
       } catch (error) {
         console.error('Failed to build context for notebook', task.notebookId, error)
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index e13ad1fa..97985c1b 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -127,7 +127,7 @@ export function SpeakerProfilesPanel({
                       className="text-xs"
                     >
                       {usageCount > 0
-                        ? (usageCount === 1 ? t('podcasts.usedByCount_one') : t('podcasts.usedByCount_other').replace('{count}', usageCount.toString()))
+                        ? t('podcasts.usedByCount', { count: usageCount })
                         : t('podcasts.unused')}
                     </Badge>
                   </div>
@@ -216,7 +216,7 @@ export function SpeakerProfilesPanel({
                         <AlertDialogHeader>
                           <AlertDialogTitle>{t('podcasts.deleteSpeakerProfileTitle')}</AlertDialogTitle>
                           <AlertDialogDescription>
-                            {t('podcasts.deleteSpeakerProfileDesc').replace('{name}', profile.name)}
+                            {t('podcasts.deleteSpeakerProfileDesc', { name: profile.name })}
                           </AlertDialogDescription>
                           {deleteDisabled ? (
                             <p className="mt-2 text-sm text-muted-foreground">
diff --git a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
index 0627cd8a..ec60798f 100644
--- a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
@@ -240,7 +240,7 @@ export function SpeakerProfileFormDialog({
               <div key={field.id} className="rounded-lg border p-4 space-y-4">
                 <div className="flex items-center justify-between">
                   <p className="text-sm font-semibold">
-                    {t('podcasts.speakerNumber').replace('{number}', (index + 1).toString())}
+                    {t('podcasts.speakerNumber', { number: (index + 1).toString() })}
                   </p>
                   <Button
                     type="button"
@@ -259,7 +259,7 @@ export function SpeakerProfileFormDialog({
                     <Input
                       id={`speaker-name-${index}`}
                       {...register(`speakers.${index}.name` as const)}
-                      placeholder={t('podcasts.hostPlaceholder').replace('{number}', (index + 1).toString())}
+                      placeholder={t('podcasts.hostPlaceholder', { number: (index + 1).toString() })}
                       autoComplete="off"
                     />
                     {errors.speakers?.[index]?.name ? (
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index 3a25914d..4df71fa7 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -45,7 +45,7 @@ export function StreamingResponse({
       // This try-catch is here for future enhancements or unexpected errors.
     } catch {
       const typeLabel = type === 'source_insight' ? 'insight' : type
-      toast.error(t('common.itemNotFound').replace('{type}', typeLabel))
+      toast.error(t('common.itemNotFound', { type: typeLabel }))
     }
   }
 
@@ -110,7 +110,7 @@ export function StreamingResponse({
               <CollapsibleTrigger className="flex items-center justify-between w-full hover:opacity-80">
                 <CardTitle className="text-base flex items-center gap-2">
                   <Lightbulb className="h-4 w-4 text-primary" />
-                  {t('common.individualAnswers').replace('{count}', answers.length.toString())}
+                  {t('common.individualAnswers', { count: answers.length })}
                 </CardTitle>
                 <ChevronDown className={`h-4 w-4 transition-transform ${answersOpen ? 'rotate-180' : ''}`} />
               </CollapsibleTrigger>
diff --git a/frontend/src/components/settings/CredentialFormDialog.tsx b/frontend/src/components/settings/CredentialFormDialog.tsx
index 0459c79f..94d3fe3e 100644
--- a/frontend/src/components/settings/CredentialFormDialog.tsx
+++ b/frontend/src/components/settings/CredentialFormDialog.tsx
@@ -120,8 +120,8 @@ export function CredentialFormDialog({
         <DialogHeader>
           <DialogTitle>
             {isEditing
-              ? t('apiKeys.editConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)
-              : t('apiKeys.addConfig').replace('{provider}', PROVIDER_DISPLAY_NAMES[provider] || provider)}
+              ? t('apiKeys.editConfig', { provider: PROVIDER_DISPLAY_NAMES[provider] || provider })
+              : t('apiKeys.addConfig', { provider: PROVIDER_DISPLAY_NAMES[provider] || provider })}
           </DialogTitle>
         </DialogHeader>
         <form onSubmit={handleSubmit} className="space-y-4">
diff --git a/frontend/src/components/settings/DefaultModelSelectors.tsx b/frontend/src/components/settings/DefaultModelSelectors.tsx
index cda57767..776cba19 100644
--- a/frontend/src/components/settings/DefaultModelSelectors.tsx
+++ b/frontend/src/components/settings/DefaultModelSelectors.tsx
@@ -170,7 +170,7 @@ export function DefaultModelSelectors({
           <Alert>
             <AlertCircle className="h-4 w-4" />
             <AlertDescription className="flex items-center justify-between gap-4">
-              <span>{t('models.missingRequiredModels').replace('{models}', missingRequired.join(', '))}</span>
+              <span>{t('models.missingRequiredModels', { models: missingRequired.join(', ') })}</span>
               <Button
                 variant="outline" size="sm"
                 onClick={() => autoAssign.mutate()}
diff --git a/frontend/src/components/settings/DeleteCredentialDialog.tsx b/frontend/src/components/settings/DeleteCredentialDialog.tsx
index d1d80664..ef48546a 100644
--- a/frontend/src/components/settings/DeleteCredentialDialog.tsx
+++ b/frontend/src/components/settings/DeleteCredentialDialog.tsx
@@ -67,7 +67,7 @@ export function DeleteCredentialDialog({
         <DialogHeader>
           <DialogTitle>{t('apiKeys.deleteConfig')}</DialogTitle>
           <DialogDescription>
-            {t('apiKeys.deleteConfigConfirm').replace('{name}', credential.name)}
+            {t('apiKeys.deleteConfigConfirm', { name: credential.name })}
           </DialogDescription>
         </DialogHeader>
 
diff --git a/frontend/src/components/settings/DiscoverModelsDialog.tsx b/frontend/src/components/settings/DiscoverModelsDialog.tsx
index 4c34be91..740ae32c 100644
--- a/frontend/src/components/settings/DiscoverModelsDialog.tsx
+++ b/frontend/src/components/settings/DiscoverModelsDialog.tsx
@@ -249,7 +249,7 @@ export function DiscoverModelsDialog({
                   />
                   <Plus className="h-3.5 w-3.5 text-muted-foreground shrink-0" />
                   <span className="truncate">
-                    {t('models.addCustomModel').replace('{name}', searchQuery.trim())}
+                    {t('models.addCustomModel', { name: searchQuery.trim() })}
                   </span>
                 </label>
               )}
diff --git a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
index a0969bbd..3b3289b6 100644
--- a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
+++ b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
@@ -62,9 +62,7 @@ export function EmbeddingModelChangeDialog({
           <AlertDialogDescription asChild>
             <div className="space-y-3 text-base text-muted-foreground">
               <p>
-                {t('models.embeddingChangeConfirm')
-                  .replace('{from}', oldModelName || '...')
-                  .replace('{to}', newModelName || '...')}
+                {t('models.embeddingChangeConfirm', { from: oldModelName || '...', to: newModelName || '...' })}
               </p>
 
               <div className="bg-muted p-4 rounded-md space-y-2">
diff --git a/frontend/src/components/settings/MigrationBanner.tsx b/frontend/src/components/settings/MigrationBanner.tsx
index c7bb9129..aa8b7b18 100644
--- a/frontend/src/components/settings/MigrationBanner.tsx
+++ b/frontend/src/components/settings/MigrationBanner.tsx
@@ -26,7 +26,7 @@ export function MigrationBanner({ providersToMigrate }: MigrationBannerProps) {
       </AlertTitle>
       <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
         <span className="text-amber-700 dark:text-amber-300">
-          {t('apiKeys.migrationDescription').replace('{count}', providersToMigrate.length.toString())}
+          {t('apiKeys.migrationDescription', { count: providersToMigrate.length })}
         </span>
         <Button
           variant="outline"
diff --git a/frontend/src/components/source/ChatPanel.tsx b/frontend/src/components/source/ChatPanel.tsx
index 17b0405b..d82275f7 100644
--- a/frontend/src/components/source/ChatPanel.tsx
+++ b/frontend/src/components/source/ChatPanel.tsx
@@ -129,7 +129,7 @@ export function ChatPanel({
         <div className="flex items-center justify-between">
           <CardTitle className="flex items-center gap-2">
             <Bot className="h-5 w-5" />
-            {title || (contextType === 'source' ? t('chat.chatWith').replace('{name}', t('navigation.sources')) : t('chat.chatWith').replace('{name}', t('common.notebook')))}
+            {title || (contextType === 'source' ? t('chat.chatWith', { name: t('navigation.sources') }) : t('chat.chatWith', { name: t('common.notebook') }))}
           </CardTitle>
           {onSelectSession && onCreateSession && onDeleteSession && (
             <Dialog open={sessionManagerOpen} onOpenChange={setSessionManagerOpen}>
@@ -169,7 +169,7 @@ export function ChatPanel({
               <div className="text-center text-muted-foreground py-8">
                 <Bot className="h-12 w-12 mx-auto mb-4 opacity-50" />
                 <p className="text-sm">
-                  {t('chat.startConversation').replace('{type}', contextType === 'source' ? t('navigation.sources') : t('common.notebook'))}
+                  {t('chat.startConversation', { type: contextType === 'source' ? t('navigation.sources') : t('common.notebook') })}
                 </p>
                 <p className="text-xs mt-2">{t('chat.askQuestions')}</p>
               </div>
@@ -297,7 +297,7 @@ export function ChatPanel({
               value={input}
               onChange={(e) => setInput(e.target.value)}
               onKeyDown={handleKeyDown}
-              placeholder={`${t('chat.sendPlaceholder')} (${t('chat.pressToSend').replace('{key}', keyHint)})`}
+              placeholder={`${t('chat.sendPlaceholder')} (${t('chat.pressToSend', { key: keyHint })})`}
               disabled={isStreaming}
               className="flex-1 min-h-[40px] max-h-[100px] resize-none py-2 px-3 min-w-0"
               rows={1}
diff --git a/frontend/src/components/source/ModelSelector.tsx b/frontend/src/components/source/ModelSelector.tsx
index 18595b6d..592ffde8 100644
--- a/frontend/src/components/source/ModelSelector.tsx
+++ b/frontend/src/components/source/ModelSelector.tsx
@@ -150,10 +150,7 @@ export function ModelSelector({
           {selectedModel && selectedModel !== 'default' && (
             <div className="rounded-lg bg-muted p-3">
               <p className="text-sm text-muted-foreground">
-                {t('transformations.sessionUseReplacement').replace(
-                  '{name}', 
-                  languageModels.find(m => m.id === selectedModel)?.name || selectedModel
-                )}
+                {t('transformations.sessionUseReplacement', { name: languageModels.find(m => m.id === selectedModel)?.name || selectedModel })}
               </p>
             </div>
           )}
diff --git a/frontend/src/components/source/SessionManager.tsx b/frontend/src/components/source/SessionManager.tsx
index d169f5f2..d44568e3 100644
--- a/frontend/src/components/source/SessionManager.tsx
+++ b/frontend/src/components/source/SessionManager.tsx
@@ -231,7 +231,7 @@ export function SessionManager({
                         </div>
                         {session.message_count != null && session.message_count > 0 && (
                           <Badge variant="secondary" className="mt-2 text-xs">
-                            {t('chat.messagesCount').replace('{count}', session.message_count.toString())}
+                            {t('chat.messagesCount', { count: session.message_count })}
                           </Badge>
                         )}
                         {session.model_override && (
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/source/SourceDetailContent.tsx
index 54c7222c..cfdddfad 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/source/SourceDetailContent.tsx
@@ -425,7 +425,7 @@ export function SourceDetailContent({
             {showChatButton && onChatClick && (
               <Button variant="outline" size="sm" onClick={onChatClick}>
                 <MessageSquare className="h-4 w-4 mr-2" />
-                {t('chat.chatWith').replace('{name}', t('navigation.sources'))}
+                {t('chat.chatWith', { name: t('navigation.sources') })}
               </Button>
             )}
 
diff --git a/frontend/src/components/sources/AddExistingSourceDialog.tsx b/frontend/src/components/sources/AddExistingSourceDialog.tsx
index d05a2c01..17e62110 100644
--- a/frontend/src/components/sources/AddExistingSourceDialog.tsx
+++ b/frontend/src/components/sources/AddExistingSourceDialog.tsx
@@ -254,7 +254,7 @@ export function AddExistingSourceDialog({
                           )}
                         </div>
                         <p className="text-xs text-muted-foreground truncate">
-                          {t('sources.added').replace('{date}', formatDate(source.created))}
+                          {t('sources.added', { date: formatDate(source.created) })}
                         </p>
                       </div>
                     </div>
@@ -274,7 +274,7 @@ export function AddExistingSourceDialog({
           {/* Selection Summary */}
           {selectedSourceIds.length > 0 && (
             <div className="text-sm text-muted-foreground">
-              {t('sources.selectedCount').replace('{count}', selectedSourceIds.length.toString())}
+              {t('sources.selectedCount', { count: selectedSourceIds.length })}
             </div>
           )}
         </div>
diff --git a/frontend/src/components/sources/AddSourceDialog.tsx b/frontend/src/components/sources/AddSourceDialog.tsx
index 5b772417..ee344db6 100644
--- a/frontend/src/components/sources/AddSourceDialog.tsx
+++ b/frontend/src/components/sources/AddSourceDialog.tsx
@@ -394,11 +394,11 @@ export function AddSourceDialog({
 
         // Show summary toast
         if (results.failed === 0) {
-          toast.success(t('sources.batchSuccess').replace('{count}', results.success.toString()))
+          toast.success(t('sources.batchSuccess', { count: results.success }))
         } else if (results.success === 0) {
-          toast.error(t('sources.batchFailed').replace('{count}', results.failed.toString()))
+          toast.error(t('sources.batchFailed', { count: results.failed }))
         } else {
-          toast.warning(t('sources.batchPartial').replace('{success}', results.success.toString()).replace('{failed}', results.failed.toString()))
+          toast.warning(t('sources.batchPartial', { success: results.success.toString(), failed: results.failed.toString() }))
         }
 
         handleClose()
@@ -465,7 +465,7 @@ export function AddSourceDialog({
             </DialogTitle>
             <DialogDescription>
               {batchProgress
-                ? t('sources.processingBatchSources').replace('{count}', batchProgress.total.toString())
+                ? t('sources.processingBatchSources', { count: batchProgress.total })
                 : t('sources.processingSource')
               }
             </DialogDescription>
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 8f0cd0a2..45e01aac 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -282,7 +282,7 @@ function SourceCardImpl({
 
               {isCompleted && source.insights_count > 0 && (
                 <Badge variant="outline" className="text-xs">
-                  {t('sources.insightsCount').replace('{count}', source.insights_count.toString())}
+                  {t('sources.insightsCount', { count: source.insights_count })}
                 </Badge>
               )}
               {source.topics && source.topics.length > 0 && isCompleted && (
diff --git a/frontend/src/components/sources/steps/SourceTypeStep.tsx b/frontend/src/components/sources/steps/SourceTypeStep.tsx
index f706422e..456cb4b0 100644
--- a/frontend/src/components/sources/steps/SourceTypeStep.tsx
+++ b/frontend/src/components/sources/steps/SourceTypeStep.tsx
@@ -191,8 +191,8 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         <Label htmlFor="url">{t('sources.urlLabel')}</Label>
                         {urlCount > 0 && (
                           <Badge variant={isOverLimit ? "destructive" : "secondary"}>
-                            {t('sources.urlsCount').replace('{count}', urlCount.toString())}
-                            {isOverLimit && ` (${t('sources.maxItems').replace('{count}', MAX_BATCH_SIZE.toString())})`}
+                            {t('sources.urlsCount', { count: urlCount })}
+                            {isOverLimit && ` (${t('sources.maxItems', { count: MAX_BATCH_SIZE })})`}
                           </Badge>
                         )}
                       </div>
@@ -220,7 +220,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                             {urlValidationErrors.map((error, idx) => (
                               <li key={idx} className="text-xs text-destructive flex items-start gap-2">
                                 <span className="font-mono bg-destructive/20 px-1 rounded">
-                                  {t('sources.lineLabel').replace('{line}', error.line.toString())}
+                                  {t('sources.lineLabel', { line: error.line.toString() })}
                                 </span>
                                 <span className="truncate">{error.url}</span>
                               </li>
@@ -240,8 +240,8 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         <Label htmlFor="file">{t('sources.fileLabel')}</Label>
                         {fileCount > 0 && (
                           <Badge variant={isOverLimit ? "destructive" : "secondary"}>
-                            {t('sources.filesCount').replace('{count}', fileCount.toString())}
-                            {isOverLimit && ` (${t('sources.maxItems').replace('{count}', MAX_BATCH_SIZE.toString())})`}
+                            {t('sources.filesCount', { count: fileCount })}
+                            {isOverLimit && ` (${t('sources.maxItems', { count: MAX_BATCH_SIZE })})`}
                           </Badge>
                         )}
                       </div>
@@ -276,7 +276,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                       )}
                       {isOverLimit && selectedType === 'upload' && (
                         <p className="text-sm text-destructive mt-1">
-                          {t('sources.maxFilesAllowed').replace('{count}', MAX_BATCH_SIZE.toString())}
+                          {t('sources.maxFilesAllowed', { count: MAX_BATCH_SIZE })}
                         </p>
                       )}
                     </div>
@@ -342,7 +342,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
           <div className="flex items-center gap-2 mb-2">
             <Badge variant="default">{t('common.batchMode')}</Badge>
             <span className="text-sm font-medium">
-              {t('sources.batchCount').replace('{count}', itemCount.toString()).replace('{type}', selectedType === 'link' ? t('sources.addUrl') : t('sources.uploadFile'))}
+              {t('sources.batchCount', { count: itemCount, type: selectedType === 'link' ? t('sources.addUrl') : t('sources.uploadFile') })}
             </span>
           </div>
           <p className="text-xs text-muted-foreground">
diff --git a/frontend/src/lib/hooks/use-credentials.ts b/frontend/src/lib/hooks/use-credentials.ts
index 3524ed91..8d686fbc 100644
--- a/frontend/src/lib/hooks/use-credentials.ts
+++ b/frontend/src/lib/hooks/use-credentials.ts
@@ -260,14 +260,12 @@ export function useRegisterModels() {
       if (result.created > 0) {
         toast({
           title: t('common.success'),
-          description: t('apiKeys.syncSuccess')
-            .replace('{discovered}', (result.created + result.existing).toString())
-            .replace('{new}', result.created.toString()),
+          description: t('apiKeys.syncSuccess', { discovered: (result.created + result.existing).toString(), new: result.created.toString() }),
         })
       } else {
         toast({
           title: t('common.success'),
-          description: t('apiKeys.syncNoNew').replace('{count}', result.existing.toString()),
+          description: t('apiKeys.syncNoNew', { count: result.existing }),
         })
       }
     },
@@ -304,18 +302,18 @@ export function useMigrateFromEnv() {
       if (errorCount > 0 && migratedCount === 0) {
         toast({
           title: t('common.error'),
-          description: t('apiKeys.migrationErrors').replace('{count}', errorCount.toString()),
+          description: t('apiKeys.migrationErrors', { count: errorCount }),
           variant: 'destructive',
         })
       } else if (migratedCount > 0 && errorCount > 0) {
         toast({
           title: t('common.success'),
-          description: `${t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString())}. ${t('apiKeys.migrationErrors').replace('{count}', errorCount.toString())}`,
+          description: `${t('apiKeys.migrationSuccess', { count: migratedCount })}. ${t('apiKeys.migrationErrors', { count: errorCount })}`,
         })
       } else if (migratedCount > 0) {
         toast({
           title: t('common.success'),
-          description: t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString()),
+          description: t('apiKeys.migrationSuccess', { count: migratedCount }),
         })
       } else {
         toast({
@@ -357,18 +355,18 @@ export function useMigrateFromProviderConfig() {
       if (errorCount > 0 && migratedCount === 0) {
         toast({
           title: t('common.error'),
-          description: t('apiKeys.migrationErrors').replace('{count}', errorCount.toString()),
+          description: t('apiKeys.migrationErrors', { count: errorCount }),
           variant: 'destructive',
         })
       } else if (migratedCount > 0 && errorCount > 0) {
         toast({
           title: t('common.success'),
-          description: `${t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString())}. ${t('apiKeys.migrationErrors').replace('{count}', errorCount.toString())}`,
+          description: `${t('apiKeys.migrationSuccess', { count: migratedCount })}. ${t('apiKeys.migrationErrors', { count: errorCount })}`,
         })
       } else if (migratedCount > 0) {
         toast({
           title: t('common.success'),
-          description: t('apiKeys.migrationSuccess').replace('{count}', migratedCount.toString()),
+          description: t('apiKeys.migrationSuccess', { count: migratedCount }),
         })
       } else {
         toast({
diff --git a/frontend/src/lib/hooks/use-models.ts b/frontend/src/lib/hooks/use-models.ts
index 3f98da51..61299861 100644
--- a/frontend/src/lib/hooks/use-models.ts
+++ b/frontend/src/lib/hooks/use-models.ts
@@ -132,7 +132,7 @@ export function useAutoAssignDefaults() {
       if (assignedCount > 0) {
         toast({
           title: t('common.success'),
-          description: t('models.autoAssignSuccess').replace('{count}', assignedCount.toString()),
+          description: t('models.autoAssignSuccess', { count: assignedCount }),
         })
       } else if (missingCount > 0) {
         toast({
diff --git a/frontend/src/lib/hooks/use-podcasts.ts b/frontend/src/lib/hooks/use-podcasts.ts
index 3f24e97e..36ddebab 100644
--- a/frontend/src/lib/hooks/use-podcasts.ts
+++ b/frontend/src/lib/hooks/use-podcasts.ts
@@ -399,7 +399,7 @@ export function useGeneratePodcast() {
       await queryClient.refetchQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.generationStarted'),
-        description: t('podcasts.generationStartedDesc').replace('{name}', response.episode_name),
+        description: t('podcasts.generationStartedDesc', { name: response.episode_name }),
       })
     },
     onError: (error: unknown) => {
diff --git a/frontend/src/lib/hooks/use-sources.ts b/frontend/src/lib/hooks/use-sources.ts
index 4ceb3ae6..a954d1bb 100644
--- a/frontend/src/lib/hooks/use-sources.ts
+++ b/frontend/src/lib/hooks/use-sources.ts
@@ -323,7 +323,7 @@ export function useAddSourcesToNotebook() {
       if (result.failures === 0) {
         toast({
           title: t('common.success'),
-          description: t('sources.sourcesAddedToNotebook').replace('{count}', result.successes.toString()),
+          description: t('sources.sourcesAddedToNotebook', { count: result.successes }),
         })
       } else if (result.successes === 0) {
         toast({
@@ -334,9 +334,7 @@ export function useAddSourcesToNotebook() {
       } else {
         toast({
           title: t('common.success'),
-          description: t('sources.partialAddSuccess')
-            .replace('{success}', result.successes.toString())
-            .replace('{failed}', result.failures.toString()),
+          description: t('sources.partialAddSuccess', { success: result.successes.toString(), failed: result.failures.toString() }),
           variant: 'default',
         })
       }
diff --git a/frontend/src/lib/hooks/use-version-check.ts b/frontend/src/lib/hooks/use-version-check.ts
index f159fd70..ac82cfb5 100644
--- a/frontend/src/lib/hooks/use-version-check.ts
+++ b/frontend/src/lib/hooks/use-version-check.ts
@@ -26,7 +26,7 @@ export function useVersionCheck() {
         const dismissKey = `version_notification_dismissed_${config.latestVersion}`
         if (sessionStorage.getItem(dismissKey)) return
 
-        toast.info(t('advanced.updateAvailable').replace('{version}', config.latestVersion), {
+        toast.info(t('advanced.updateAvailable', { version: config.latestVersion }), {
           description: t('advanced.updateAvailableDesc'),
           duration: Infinity,
           closeButton: true,
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 682e8654..d943dc4d 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -63,8 +63,8 @@ export const bnIN = {
     optional: "ঐচ্ছিক",
     type: "ধরন",
     title: "শিরোনাম",
-    created: "তৈরি করা হয়েছে {time}",
-    updated: "আপডেট করা হয়েছে {time}",
+    created: "তৈরি করা হয়েছে {{time}}",
+    updated: "আপডেট করা হয়েছে {{time}}",
     actions: "ক্রিয়া",
     noResults: "কোনো ফলাফল নেই",
     references: "রেফারেন্স",
@@ -107,10 +107,10 @@ export const bnIN = {
     reasoning: "যুক্তি",
     searchTerms: "অনুসন্ধান শব্দ",
     strategy: "কৌশল",
-    individualAnswers: "ব্যক্তিগত উত্তর ({count})",
+    individualAnswers: "ব্যক্তিগত উত্তর ({{count}})",
     finalAnswer: "চূড়ান্ত উত্তর",
-    notebookLabel: "নোটবুক: {name}",
-    itemNotFound: "এই {type} খুঁজে পাওয়া যায়নি",
+    notebookLabel: "নোটবুক: {{name}}",
+    itemNotFound: "এই {{type}} খুঁজে পাওয়া যায়নি",
     accessibility: {
       transformationViews: "ট্রান্সফরমেশন ভিউ",
       searchKB: "আপনার জ্ঞানভান্ডার জিজ্ঞাসা বা অনুসন্ধান করুন",
@@ -231,12 +231,12 @@ export const bnIN = {
     archive: "আর্কাইভ",
     unarchive: "আর্কাইভ বাতিল",
     deleteNotebook: "নোটবুক মুছে ফেলুন",
-    deleteNotebookDesc: "আপনি কি নিশ্চিত \"{name}\" মুছে ফেলতে চান? এই কাজটি পুনরায় করা যাবে না।",
+    deleteNotebookDesc: "আপনি কি নিশ্চিত \"{{name}}\" মুছে ফেলতে চান? এই কাজটি পুনরায় করা যাবে না।",
     deleteNotebookLoading: "মুছে ফেলার প্রিভিউ লোড হচ্ছে...",
-    deleteNotebookNotes: "{count}টি নোট চিরতরে মুছে যাবে।",
+    deleteNotebookNotes: "{{count}}টি নোট চিরতরে মুছে যাবে।",
     deleteNotebookNoNotes: "মুছার জন্য কোন নোট নেই।",
-    deleteNotebookExclusiveSources: "{count}টি উৎস শুধুমাত্র এই নোটবুকে আছে।",
-    deleteNotebookSharedSources: "{count}টি উৎস অন্য নোটবুকের সাথে সাঝা করা এবং আনলিংক হবে।",
+    deleteNotebookExclusiveSources: "{{count}}টি উৎস শুধুমাত্র এই নোটবুকে আছে।",
+    deleteNotebookSharedSources: "{{count}}টি উৎস অন্য নোটবুকের সাথে সাঝা করা এবং আনলিংক হবে।",
     deleteNotebookNoSources: "এই নোটবুকে কোন উৎস নেই।",
     deleteExclusiveSourcesLabel: "এক্সক্লুসিভ উৎসগুলি মুছে ফেলুন",
     keepExclusiveSourcesLabel: "আনলিংক করে রাখুন",
@@ -304,7 +304,7 @@ export const bnIN = {
     createFirstSource: "আপনার জ্ঞানভান্ডার তৈরি শুরু করতে আপনার প্রথম উৎস যোগ করুন।",
     deleteSourceConfirm: "আপনি কি নিশ্চিত এই উৎসটি মুছে ফেলতে চান?",
     deleteConfirm: "আপনি কি নিশ্চিত এটি মুছে ফেলতে চান?",
-    deleteConfirmWithTitle: "আপনি কি নিশ্চিত \"{title}\" মুছে ফেলতে চান?",
+    deleteConfirmWithTitle: "আপনি কি নিশ্চিত \"{{title}}\" মুছে ফেলতে চান?",
     deleteSuccess: "উৎস সফলভাবে মুছে ফেলা হয়েছে। নোট: স্টোরেজ থেকে ফাইল মুছে ফেলতে, আপনাকে অবশ্যই সেটিংস পেজে \"ফাইল মুছে ফেলুন\" অপশনটি সক্ষম করতে হবে।",
     failedToDelete: "উৎস মুছে ফেলতে ব্যর্থ",
     sourceQueued: "উৎস কিউ করা হয়েছে",
@@ -320,16 +320,16 @@ export const bnIN = {
     sourceRequeued: "উৎস পুনরায় কিউ করা হয়েছে",
     sourceRequeuedDesc: "উৎসটি প্রক্রিয়াকরণের জন্য পুনরায় কিউ করা হয়েছে।",
     failedToRetry: "পুনরায় চেষ্টা ব্যর্থ",
-    sourcesAddedToNotebook: "{count}টি উৎস নোটবুকে যোগ করা হয়েছে",
+    sourcesAddedToNotebook: "{{count}}টি উৎস নোটবুকে যোগ করা হয়েছে",
     failedToAddSourcesToNotebook: "নোটবুকে উৎস যোগ করতে ব্যর্থ",
-    partialAddSuccess: "{success}টি উৎস যোগ হয়েছে, {failed}টি ব্যর্থ",
+    partialAddSuccess: "{{success}}টি উৎস যোগ হয়েছে, {{failed}}টি ব্যর্থ",
     sourceRemovedFromNotebook: "নোটবুক থেকে উৎস সফলভাবে সরানো হয়েছে",
     failedToRemoveSourceFromNotebook: "নোটবুক থেকে উৎস সরাতে ব্যর্থ",
     removeConfirm: "আপনি কি নিশ্চিত নোটবুক থেকে এটি সরাতে চান?",
     checking: "চেক করা হচ্ছে...",
     untitledSource: "শিরোনামহীন উৎস",
-    maxItems: "সর্বোচ্চ {count}",
-    insightsCount: "{count}টি অন্তর্দৃষ্টি",
+    maxItems: "সর্বোচ্চ {{count}}",
+    insightsCount: "{{count}}টি অন্তর্দৃষ্টি",
     details: "বিবরণ",
     detailsTitle: "উৎসের বিবরণ",
     content: "কন্টেন্ট",
@@ -371,7 +371,7 @@ export const bnIN = {
     enterUrlsPlaceholder: "URL লিখুন, প্রতি লাইনে একটি\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "ব্যাচ ইমপোর্টের জন্য একাধিক URL পেস্ট করুন (প্রতি লাইনে একটি)",
     invalidUrlsDetected: "অবৈধ URL সনাক্ত করা হয়েছে:",
-    lineLabel: "লাইন {line}",
+    lineLabel: "লাইন {{line}}",
     fixInvalidUrls: "অবৈধ URL ঠিক করুন বা সরান",
     selectMultipleFilesHint: "ব্যাচ ইমপোর্টের জন্য একাধিক ফাইল নির্বাচন করুন। সমর্থিত: ডকুমেন্ট (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), মিডিয়া (MP4, MP3, WAV, M4A), ছবি (JPG, PNG), আর্কাইভ (ZIP)",
     selectedFiles: "নির্বাচিত ফাইল:",
@@ -380,8 +380,8 @@ export const bnIN = {
     titlePlaceholder: "আপনার উৎসের একটি বর্ণনামূলক শিরোনাম দিন",
     batchTitlesAuto: "প্রতিটি উৎসের জন্য শিরোনাম স্বয়ংক্রিয়ভাবে তৈরি হবে।",
     batchCommonSettings: "একই নোটবুক এবং ট্রান্সফরমেশন সব আইটেমে প্রয়োগ হবে।",
-    urlsCount: "{count}টি URL",
-    filesCount: "{count}টি ফাইল",
+    urlsCount: "{{count}}টি URL",
+    filesCount: "{{count}}টি ফাইল",
     addSource: "উৎস যোগ করুন",
     notEmbeddedAlert: "কন্টেন্ট এমবেড করা হয়নি",
     notEmbeddedDesc: "এই কন্টেন্ট ভেক্টর সার্চের জন্য এমবেড করা হয়নি। এমবেডিং উন্নত সার্চ ক্ষমতা এবং ভাল কন্টেন্ট আবিষ্কার সক্ষম করে।",
@@ -404,8 +404,8 @@ export const bnIN = {
     searchPlaceholder: "নাম বা URL দিয়ে উৎস অনুসন্ধান করুন...",
     noNotebooksFound: "কোন নোটবুক পাওয়া যায়নি।",
     showingFirst100: "প্রথম ১০০টি উৎস দেখানো হচ্ছে। নির্দিষ্ট খুঁজতে অনুসন্ধান ব্যবহার করুন।",
-    selectedCount: "{count}টি উৎস নির্বাচিত",
-    added: "{date} তারিখে যোগ করা হয়েছে",
+    selectedCount: "{{count}}টি উৎস নির্বাচিত",
+    added: "{{date}} তারিখে যোগ করা হয়েছে",
     addUrl: "URL যোগ করুন",
     uploadFile: "ফাইল আপলোড করুন",
     enterText: "টেক্সট লিখুন",
@@ -413,7 +413,7 @@ export const bnIN = {
     processingFiles: "আপনার ফাইলগুলি প্রক্রিয়াকরণ করা হচ্ছে...",
     titleRequired: "টেক্সট কন্টেন্টের জন্য একটি শিরোনাম প্রয়োজন",
     titleGenerated: "খালি রাখলে, কন্টেন্ট থেকে একটি শিরোনাম তৈরি হবে",
-    batchCount: "{count}টি {type} প্রক্রিয়াকরণ করা হবে",
+    batchCount: "{{count}}টি {{type}} প্রক্রিয়াকরণ করা হবে",
     enableEmbedding: "অনুসন্ধানের জন্য এমবেডিং সক্ষম করুন",
     embeddingDesc: "এই উৎসকে ভেক্টর সার্চ এবং AI ক্যোয়ারিতে খুঁজে পাওয়ার অনুমতি দেয়",
     embeddingAlways: "এমবেডিং স্বয়ংক্রিয়ভাবে সক্ষম",
@@ -426,13 +426,13 @@ export const bnIN = {
     insightsDesc: "মডেল বিশ্লেষণ থেকে তৈরি অন্তর্দৃষ্টি",
     uploadedFile: "আপলোড করা ফাইল",
     fileUnavailableDesc: "স্টোরেজ সিস্টেমের কারণে এই ফাইল বর্তমানে উপলব্ধ নয়।",
-    batchSuccess: "{count}টি উৎস সফলভাবে তৈরি হয়েছে",
-    batchFailed: "সব {count}টি উৎস তৈরি করতে ব্যর্থ",
-    batchPartial: "{success}টি সফল, {failed}টি ব্যর্থ",
+    batchSuccess: "{{count}}টি উৎস সফলভাবে তৈরি হয়েছে",
+    batchFailed: "সব {{count}}টি উৎস তৈরি করতে ব্যর্থ",
+    batchPartial: "{{success}}টি সফল, {{failed}}টি ব্যর্থ",
     submittingSource: "প্রক্রিয়াকরণের জন্য উৎস জমা দেওয়া হচ্ছে...",
-    processingBatchSources: "{count}টি উৎস প্রক্রিয়াকরণ করা হচ্ছে। এটি কিছু মুহূর্ত সময় নিতে পারে।",
+    processingBatchSources: "{{count}}টি উৎস প্রক্রিয়াকরণ করা হচ্ছে। এটি কিছু মুহূর্ত সময় নিতে পারে।",
     processingSource: "আপনার উৎস প্রক্রিয়াকরণ করা হচ্ছে। এটি কিছু মুহূর্ত সময় নিতে পারে।",
-    maxFilesAllowed: "ব্যাচে সর্বোচ্চ {count}টি ফাইল অনুমোদিত",
+    maxFilesAllowed: "ব্যাচে সর্বোচ্চ {{count}}টি ফাইল অনুমোদিত",
   },
   chat: {
     sessions: "সেশনগুলি",
@@ -442,17 +442,17 @@ export const bnIN = {
     deleteSessionDesc: "আপনি কি নিশ্চিত এই চ্যাট সেশন মুছে ফেলতে চান? এই কাজটি পুনরায় করা যাবে না।",
     sendPlaceholder: "আপনার উৎসগুলি সম্পর্কে যেকোন কিছু জিজ্ঞাসা করুন...",
     sessionsTitle: "চ্যাট সেশনগুলি",
-    chatWith: "{name} এর সাথে চ্যাট করুন",
-    startConversation: "এই {type} সম্পর্কে কথোপকথন শুরু করুন",
+    chatWith: "{{name}} এর সাথে চ্যাট করুন",
+    startConversation: "এই {{type}} সম্পর্কে কথোপকথন শুরু করুন",
     askQuestions: "বিষয়বস্তু ভাল ভাবে বুঝতে প্রশ্ন করুন",
-    pressToSend: "পাঠাতে {key} চাপুন",
+    pressToSend: "পাঠাতে {{key}} চাপুন",
     model: "মডেল",
     createToStart: "শুরু করতে একটি সেশন তৈরি করুন।",
     chatWithNotebook: "নোটবুকের সাথে চ্যাট করুন",
     unableToLoadChat: "চ্যাট লোড করতে অক্ষম",
     noDescription: "কোন বিবরণ নেই",
     startByCreating: "আপনার ঠৈ সাজানোর জন্য প্রথম নোটবুক তৈরি করে শুরু করুন।",
-    messagesCount: "{count}টি বার্তা",
+    messagesCount: "{{count}}টি বার্তা",
     sessionCreated: "চ্যাট সেশন তৈরি হয়েছে",
     sessionUpdated: "সেশন আপডেট হয়েছে",
     sessionDeleted: "সেশন মুছে ফেলা হয়েছে",
@@ -487,17 +487,17 @@ export const bnIN = {
     searchIn: "যেখানে অনুসন্ধান করবেন",
     searchSources: "উৎস অনুসন্ধান",
     searchNotes: "নোট অনুসন্ধান",
-    resultsFound: "{count}টি ফলাফল পাওয়া গেছে",
-    matches: "মিল ({count})",
-    noResultsFor: "\"{query}\" এর জন্য কোনো ফলাফল পাওয়া যায়নি",
+    resultsFound: "{{count}}টি ফলাফল পাওয়া গেছে",
+    matches: "মিল ({{count}})",
+    noResultsFor: "\"{{query}}\" এর জন্য কোনো ফলাফল পাওয়া যায়নি",
     notSet: "সেট করা হয়নি",
     saveToNotebook: "নোটবুকে সংরক্ষণ করুন",
     saveSuccess: "সফলভাবে নোটবুকে সংরক্ষণ করা হয়েছে",
     saveError: "নোটবুকে সংরক্ষণ করতে ব্যর্থ",
     selectNotebook: "নোটবুক নির্বাচন করুন",
     searchAndAsk: "অনুসন্ধান ও জিজ্ঞাসা",
-    searchResultsFor: "\"{query}\" এর জন্য অনুসন্ধান ফলাফল",
-    askAbout: "\"{query}\" সম্পর্কে জিজ্ঞাসা করুন",
+    searchResultsFor: "\"{{query}}\" এর জন্য অনুসন্ধান ফলাফল",
+    askAbout: "\"{{query}}\" সম্পর্কে জিজ্ঞাসা করুন",
     orSearchKb: "অথবা আপনার জ্ঞানভান্ডার অনুসন্ধান করুন",
     saving: "সংরক্ষণ করা হচ্ছে...",
     advancedModelTitle: "উন্নত মডেল নির্বাচন",
@@ -516,9 +516,9 @@ export const bnIN = {
     generateEpisodeDesc: "নতুন পডকাস্ট এপিসোড তৈরি করার আগে অন্তর্ভুক্ত করার জন্য কন্টেন্ট নির্বাচন করুন এবং এপিসোডের বিবরণ কনফিগার করুন।",
     content: "কন্টেন্ট",
     contentDesc: "এই এপিসোডে অন্তর্ভুক্ত করতে নোটবুক, উৎস এবং নোট বেছে নিন।",
-    itemsSelected: "{count}টি আইটেম নির্বাচিত",
-    tokens: "{count} টোকেন",
-    chars: "{count} অক্ষর",
+    itemsSelected: "{{count}}টি আইটেম নির্বাচিত",
+    tokens: "{{value}} টোকেন",
+    chars: "{{value}} অক্ষর",
     loadingNotebooks: "নোটবুক লোড হচ্ছে...",
     noNotebooksFoundInPodcasts: "কোন নোটবুক পাওয়া যায়নি। পডকাস্ট তৈরির আগে একটি নোটবুক তৈরি করে কন্টেন্ট যোগ করুন।",
     noContentSelected: "কোন কন্টেন্ট নির্বাচিত নয়",
@@ -535,7 +535,7 @@ export const bnIN = {
     instructionsPlaceholder: "এপিসোড ব্রিফিং-এ যোগ করার জন্য কোন অতিরিক্ত পরামর্শ...",
     generating: "তৈরি করা হচ্ছে...",
     generate: "তৈরি করুন",
-    hostPlaceholder: "হোস্ট {number}",
+    hostPlaceholder: "হোস্ট {{number}}",
     profileRequired: "এপিসোড প্রোফাইল প্রয়োজন",
     profileRequiredDesc: "পডকাস্ট তৈরির আগে একটি এপিসোড প্রোফাইল নির্বাচন করুন।",
     nameRequired: "এপিসোডের নাম প্রয়োজন",
@@ -605,8 +605,8 @@ export const bnIN = {
     noSpeakerProfiles: "এখনও কোন স্পিকার প্রোফাইল নেই। এপিসোড প্রোফাইল উপলব্ধ করতে একটি তৈরি করুন।",
     noDescription: "কোন বিবরণ প্রদান করা হয়নি।",
     usedByCount_one: "১টি এপিসোড দ্বারা ব্যবহৃত",
-    usedByCount_other: "{count}টি এপিসোড দ্বারা ব্যবহৃত",
-    usedByCount: "{count}টি এপিসোড দ্বারা ব্যবহৃত",
+    usedByCount_other: "{{count}}টি এপিসোড দ্বারা ব্যবহৃত",
+    usedByCount: "{{count}}টি এপিসোড দ্বারা ব্যবহৃত",
     unused: "অব্যবহৃত",
     voiceId: "ভয়েস ID",
     backstory: "পটভূমির গল্প",
@@ -614,7 +614,7 @@ export const bnIN = {
     edit: "সম্পাদনা",
     duplicate: "ডুপ্লিকেট",
     deleteSpeakerProfileTitle: "স্পিকার প্রোফাইল মুছে ফেলবেন?",
-    deleteSpeakerProfileDesc: "\"{name}\" মুছে ফেলা পূর্বাবস্থায় ফেরানো যাবে না।",
+    deleteSpeakerProfileDesc: "\"{{name}}\" মুছে ফেলা পূর্বাবস্থায় ফেরানো যাবে না।",
     deleteSpeakerDisabledHint: "এটি মুছে ফেলার আগে এই স্পিকারকে এপিসোড প্রোফাইল থেকে সরান।",
     deleting: "মুছে ফেলা হচ্ছে…",
     episodeProfilesTitle: "এপিসোড প্রোফাইল",
@@ -639,7 +639,7 @@ export const bnIN = {
     failedToStartGeneration: "তৈরি শুরু করতে ব্যর্থ",
     tryAgainMoment: "একটু পরে আবার চেষ্টা করুন।",
     deleteProfileTitle: "প্রোফাইল মুছে ফেলবেন?",
-    deleteProfileDesc: "এটি \"{name}\" সরিয়ে দেবে। বিদ্যমান এপিসোড তাদের ডেটা রাখবে, কিন্তু নতুনগুলি আর এই কনফিগারেশন ব্যবহার করবে না।",
+    deleteProfileDesc: "এটি \"{{name}}\" সরিয়ে দেবে। বিদ্যমান এপিসোড তাদের ডেটা রাখবে, কিন্তু নতুনগুলি আর এই কনফিগারেশন ব্যবহার করবে না।",
     profileCreated: "প্রোফাইল তৈরি হয়েছে",
     profileCreatedDesc: "এপিসোড প্রোফাইল \"{name}\" সফলভাবে তৈরি করা হয়েছে।",
     failedToCreateProfile: "প্রোফাইল তৈরি করতে ব্যর্থ",
@@ -661,7 +661,7 @@ export const bnIN = {
     transcriptModel: "ট্রান্সক্রিপ্ট মডেল",
     segments: "সেগমেন্ট",
     defaultBriefingTitle: "ডিফল্ট ব্রিফিং",
-    created: "{time} এ তৈরি",
+    created: "{{time}} এ তৈরি",
     details: "বিবরণ",
     summaryTab: "সারাংশ",
     outlineTab: "রূপরেখা",
@@ -670,7 +670,7 @@ export const bnIN = {
     noOutline: "কোন রূপরেখা উপলব্ধ নয়।",
     noTranscript: "কোন ট্রান্সক্রিপ্ট উপলব্ধ নয়।",
     deleteEpisodeTitle: "এপিসোড মুছে ফেলবেন?",
-    deleteEpisodeDesc: "এটি \"{name}\" এবং এর অডিও ফাইল স্থায়ীভাবে সরিয়ে দেবে।",
+    deleteEpisodeDesc: "এটি \"{{name}}\" এবং এর অডিও ফাইল স্থায়ীভাবে সরিয়ে দেবে।",
     audioUnavailable: "অডিও উপলব্ধ নয়",
     segment: "সেগমেন্ট",
     speaker: "স্পিকার",
@@ -698,7 +698,7 @@ export const bnIN = {
     speakers: "স্পিকার",
     speakersDesc: "এই প্রোফাইলের জন্য এক থেকে চারটি কণ্ঠস্বর কনফিগার করুন।",
     addSpeaker: "স্পিকার যোগ করুন",
-    speakerNumber: "স্পিকার {number}",
+    speakerNumber: "স্পিকার {{number}}",
     backstoryPlaceholder: "স্পিকারের সংক্ষিপ্ত জীবনী বা প্রেক্ষাপট",
     personalityPlaceholder: "শৈলী এবং টোন বর্ণনা করুন",
     outlineModelRequired: "রূপরেখা মডেল প্রয়োজন",
@@ -774,7 +774,7 @@ export const bnIN = {
     currentVersion: "বর্তমান সংস্করণ",
     latestVersion: "সর্বশেষ সংস্করণ",
     status: "অবস্থা",
-    updateAvailable: "সংস্করণ {version} উপলব্ধ",
+    updateAvailable: "সংস্করণ {{version}} উপলব্ধ",
     updateAvailableDesc: "Open Notebook এর একটি নতুন সংস্করণ উপলব্ধ।",
     upToDate: "আপ টু ডেট",
     unknown: "অজানা",
@@ -796,8 +796,8 @@ export const bnIN = {
       failed: "ব্যর্থ",
       leavePageHint: "আপনি এই পৃষ্ঠা ছেড়ে যেতে পারেন কারণ এটি ব্যাকগ্রাউন্ডে চলবে",
       startNew: "নতুন পুনর্নির্মাণ শুরু করুন",
-      itemsProcessed: "{processed}/{total} কাজ জমা দেওয়া হয়েছে ({percent}%)",
-      failedItems: "{count} কাজ জমা দিতে ব্যর্থ",
+      itemsProcessed: "{{processed}}/{{total}} কাজ জমা দেওয়া হয়েছে ({{percent}}%)",
+      failedItems: "{{count}} কাজ জমা দিতে ব্যর্থ",
       time: "সময়",
       whenToRebuild: "কখন এমবেডিং পুনর্নির্মাণ করা উচিত?",
       whenToRebuildAns: "মডেল পরিবর্তন, সংস্করণ আপগ্রেড, দুর্নীতি ঠিক করা বা বাল্ক ইমপোর্টের পরে আপনার পুনর্নির্মাণ করা উচিত।",
@@ -840,7 +840,7 @@ export const bnIN = {
     model: "মডেল",
     systemPrompt: "সিস্টেম প্রম্পট",
     overrideModelDesc: "এই চ্যাট সেশনের জন্য ডিফল্ট মডেল ওভাররাইড করুন। সিস্টেম ডিফল্ট ব্যবহার করতে খালি রাখুন।",
-    sessionUseReplacement: "এই সেশন ডিফল্ট মডেলের পরিবর্তে {name} ব্যবহার করবে।",
+    sessionUseReplacement: "এই সেশন ডিফল্ট মডেলের পরিবর্তে {{name}} ব্যবহার করবে।",
     systemDefault: "সিস্টেম ডিফল্ট",
   },
   models: {
@@ -858,7 +858,7 @@ export const bnIN = {
     deleteModel: "মডেল মুছুন",
     defaultAssignments: "ডিফল্ট মডেল অ্যাসাইনমেন্ট",
     defaultAssignmentsDesc: "Open Notebook জুড়ে বিভিন্ন কাজের জন্য কোন মডেল ব্যবহার করব তা কনফিগার করুন",
-    missingRequiredModels: "প্রয়োজনীয় মডেল অনুপস্থিত: {models}। এগুলি ছাড়া Open Notebook সঠিকভাবে কাজ নাও করতে পারে।",
+    missingRequiredModels: "প্রয়োজনীয় মডেল অনুপস্থিত: {{models}}। এগুলি ছাড়া Open Notebook সঠিকভাবে কাজ নাও করতে পারে।",
     selectModelPlaceholder: "একটি মডেল নির্বাচন করুন",
     requiredModelPlaceholder: "⚠️ প্রয়োজন - একটি মডেল নির্বাচন করুন",
     chatModelLabel: "চ্যাট মডেল",
@@ -876,7 +876,7 @@ export const bnIN = {
     sttModelLabel: "স্পিচ-টু-টেক্সট মডেল",
     sttModelDesc: "অডিও ট্রান্সক্রিপশনের জন্য ব্যবহৃত",
     embeddingChangeTitle: "এমবেডিং মডেল পরিবর্তন",
-    embeddingChangeConfirm: "আপনি আপনার এমবেডিং মডেল {from} থেকে {to} তে পরিবর্তন করতে যাচ্ছেন।",
+    embeddingChangeConfirm: "আপনি আপনার এমবেডিং মডেল {{from}} থেকে {{to}} তে পরিবর্তন করতে যাচ্ছেন।",
     rebuildRequired: "গুরুত্বপূর্ণ: পুনর্নির্মাণ প্রয়োজন",
     rebuildReason: "আপনার এমবেডিং মডেল পরিবর্তন করার জন্য সামঞ্জস্য বজায় রাখতে সব বিদ্যমান এমবেডিং পুনর্নির্মাণ প্রয়োজন। পুনর্নির্মাণ ছাড়া, আপনার অনুসন্ধান ভুল বা অসম্পূর্ণ ফলাফল ফিরিয়ে দিতে পারে।",
     whatHappensNext: "পরবর্তীতে কি ঘটে:",
@@ -889,14 +889,14 @@ export const bnIN = {
     changeAndRebuild: "পরিবর্তন এবং পুনর্নির্মাণে যান",
     autoAssign: "স্বয়ংক্রিয় ডিফল্ট অ্যাসাইন",
     autoAssigning: "অ্যাসাইন করা হচ্ছে...",
-    autoAssignSuccess: "{count}টি ডিফল্ট মডেল স্বয়ংক্রিয়ভাবে অ্যাসাইন করা হয়েছে",
+    autoAssignSuccess: "{{count}}টি ডিফল্ট মডেল স্বয়ংক্রিয়ভাবে অ্যাসাইন করা হয়েছে",
     autoAssignNoModels: "অ্যাসাইনের জন্য কোন মডেল উপলব্ধ নেই। অনুগ্রহ করে প্রথমে মডেল সিঙ্ক করুন।",
     autoAssignAlreadySet: "সব ডিফল্ট মডেল ইতিমধ্যে কনফিগার করা আছে",
     testModel: "মডেল পরীক্ষা",
     testModelSuccess: "মডেল পরীক্ষা পাস",
     testModelFailed: "মডেল পরীক্ষা ব্যর্থ",
     searchOrAddModel: "মডেলের নাম খুঁজুন বা টাইপ করুন...",
-    addCustomModel: "\"{name}\" যোগ করুন",
+    addCustomModel: "\"{{name}}\" যোগ করুন",
   },
   apiKeys: {
     title: "আপনার নিজের API কী দিয়ে আপনার AI কনফিগার করুন",
@@ -906,19 +906,19 @@ export const bnIN = {
     configured: "কনফিগার করা",
     notConfigured: "কনফিগার করা হয়নি",
     migrationAvailable: "এনভায়রনমেন্ট ভ্যারিয়েবল সনাক্ত করা হয়েছে",
-    migrationDescription: "{count}টি API কী environment variable এর মাধ্যমে কনফিগার করা আছে এবং সহজ ব্যবস্থাপনার জন্য ডেটাবেসে মাইগ্রেট করা যেতে পারে।",
+    migrationDescription: "{{count}}টি API কী environment variable এর মাধ্যমে কনফিগার করা আছে এবং সহজ ব্যবস্থাপনার জন্য ডেটাবেসে মাইগ্রেট করা যেতে পারে।",
     migrateToDatabase: "ডেটাবেসে মাইগ্রেট করুন",
     migrating: "মাইগ্রেট করা হচ্ছে...",
-    migrationSuccess: "{count}টি API কী সফলভাবে মাইগ্রেট হয়েছে",
-    migrationErrors: "{count}টি কী মাইগ্রেট করতে ব্যর্থ",
+    migrationSuccess: "{{count}}টি API কী সফলভাবে মাইগ্রেট হয়েছে",
+    migrationErrors: "{{count}}টি কী মাইগ্রেট করতে ব্যর্থ",
     migrationNothingToMigrate: "সব কী ইতিমধ্যে ডেটাবেসে আছে",
     learnMore: "API কী কনফিগার করা শিখুন →",
     testConnection: "সংযোগ পরীক্ষা",
     testSuccess: "সংযোগ সফল",
     testFailed: "সংযোগ পরীক্ষা ব্যর্থ",
     syncModels: "মডেল সিঙ্ক করুন",
-    syncSuccess: "{discovered}টি মডেল আবিষ্কৃত, {new}টি নতুন যোগ",
-    syncNoNew: "{count}টি মডেল আবিষ্কৃত, সব ইতিমধ্যে নিবন্ধিত",
+    syncSuccess: "{{discovered}}টি মডেল আবিষ্কৃত, {{new}}টি নতুন যোগ",
+    syncNoNew: "{{count}}টি মডেল আবিষ্কৃত, সব ইতিমধ্যে নিবন্ধিত",
     syncFailed: "মডেল সিঙ্ক করতে ব্যর্থ",
     getApiKey: "API কী পান",
     vertexProject: "GCP প্রজেক্ট ID",
@@ -933,7 +933,7 @@ export const bnIN = {
     baseUrlOverrideHint: "শুধুমাত্র তখনই এটি পরিবর্তন করুন যদি আপনার প্রোভাইডারের ডিফল্ট API এন্ডপয়েন্ট ওভাররাইড করতে হয়।",
     numCtx: "কনটেক্সট উইন্ডো (num_ctx)",
     numCtxHint: "Ollama মডেলের জন্য সর্বোচ্চ কনটেক্সট উইন্ডো। ডিফল্ট (8192) ব্যবহার করতে খালি রাখুন। শুধুমাত্র আপনার হার্ডওয়্যার বড় উইন্ডো সামলাতে পারলে বাড়ান।",
-    deleteConfigConfirm: "আপনি কি নিশ্চিত '{name}' মুছে ফেলতে চান? এটি পুনরায় করা যাবে না।",
+    deleteConfigConfirm: "আপনি কি নিশ্চিত '{{name}}' মুছে ফেলতে চান? এটি পুনরায় করা যাবে না।",
     configSaveSuccess: "কনফিগারেশন সফলভাবে সংরক্ষিত",
     configUpdateSuccess: "কনফিগারেশন সফলভাবে আপডেট",
     configDeleteSuccess: "কনফিগারেশন সফলভাবে মুছে ফেলা",
@@ -945,7 +945,7 @@ export const bnIN = {
     encryptionRequired: "এনক্রিপশন কী কনফিগার করা হয়নি",
     encryptionRequiredDescription: "নিরাপদ credential স্টোরেজ সক্ষম করতে OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable সেট করুন।",
     migrationAvailable: "API key মাইগ্রেশন উপলব্ধ",
-    migrationDescription: "{count}টি প্রভাইডারের API key environment variable দিয়ে সেট করা আছে। সহজ ব্যবস্থাপনার জন্য সেগুলি ডেটাবেসে মাইগ্রেট করুন।",
+    migrationDescription: "{{count}}টি প্রভাইডারের API key environment variable দিয়ে সেট করা আছে। সহজ ব্যবস্থাপনার জন্য সেগুলি ডেটাবেসে মাইগ্রেট করুন।",
     goToSettings: "সেটিংসে যান",
     viewDocs: "ডকুমেন্টেশন দেখুন",
   },
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index cb3ecc99..af31c8b5 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -63,8 +63,8 @@ export const caES = {
     optional: "Opcional",
     type: "Tipus",
     title: "Títol",
-    created: "Creat {time}",
-    updated: "Actualitzat {time}",
+    created: "Creat {{time}}",
+    updated: "Actualitzat {{time}}",
     actions: "Accions",
     noResults: "Sense resultats",
     references: "Referències",
@@ -107,10 +107,10 @@ export const caES = {
     reasoning: "Raonament",
     searchTerms: "Termes de cerca",
     strategy: "Estratègia",
-    individualAnswers: "Respostes individuals ({count})",
+    individualAnswers: "Respostes individuals ({{count}})",
     finalAnswer: "Resposta final",
-    notebookLabel: "Quadern: {name}",
-    itemNotFound: "No s'ha pogut trobar aquest {type}",
+    notebookLabel: "Quadern: {{name}}",
+    itemNotFound: "No s'ha pogut trobar aquest {{type}}",
     accessibility: {
       transformationViews: "Vistes de transformació",
       searchKB: "Pregunta o cerca a la base de coneixement",
@@ -231,12 +231,12 @@ export const caES = {
     archive: "Arxiva",
     unarchive: "Desarxiva",
     deleteNotebook: "Suprimeix el quadern",
-    deleteNotebookDesc: "Segur que vols suprimir «{name}»? Aquesta acció no es pot desfer.",
+    deleteNotebookDesc: "Segur que vols suprimir «{{name}}»? Aquesta acció no es pot desfer.",
     deleteNotebookLoading: "S'està carregant la previsualització de la supressió...",
-    deleteNotebookNotes: "Se suprimiran {count} nota(es) de manera permanent.",
+    deleteNotebookNotes: "Se suprimiran {{count}} nota(es) de manera permanent.",
     deleteNotebookNoNotes: "No hi ha notes a suprimir.",
-    deleteNotebookExclusiveSources: "{count} font(s) existeix(en) només en aquest quadern.",
-    deleteNotebookSharedSources: "{count} font(s) es comparteix(en) amb altres quaderns i es desenllaçarà(n).",
+    deleteNotebookExclusiveSources: "{{count}} font(s) existeix(en) només en aquest quadern.",
+    deleteNotebookSharedSources: "{{count}} font(s) es comparteix(en) amb altres quaderns i es desenllaçarà(n).",
     deleteNotebookNoSources: "No hi ha fonts en aquest quadern.",
     deleteExclusiveSourcesLabel: "Suprimeix les fonts exclusives",
     keepExclusiveSourcesLabel: "Desenllaça i conserva",
@@ -304,7 +304,7 @@ export const caES = {
     createFirstSource: "Afegeix la primera font per començar a construir la teva base de coneixement.",
     deleteSourceConfirm: "Segur que vols suprimir aquesta font?",
     deleteConfirm: "Segur que vols suprimir aquest element?",
-    deleteConfirmWithTitle: "Segur que vols suprimir «{title}»?",
+    deleteConfirmWithTitle: "Segur que vols suprimir «{{title}}»?",
     deleteSuccess: "S'ha suprimit la font correctament. Nota: per suprimir el fitxer de l'emmagatzematge, cal activar l'opció «suprimeix el fitxer» a la pàgina de configuració.",
     failedToDelete: "Ha fallat la supressió de la font",
     sourceQueued: "Font afegida a la cua",
@@ -320,16 +320,16 @@ export const caES = {
     sourceRequeued: "S'ha tornat a afegir la font a la cua",
     sourceRequeuedDesc: "S'ha tornat a afegir la font a la cua de processament.",
     failedToRetry: "Ha fallat el reintent",
-    sourcesAddedToNotebook: "S'han afegit {count} font(s) al quadern",
+    sourcesAddedToNotebook: "S'han afegit {{count}} font(s) al quadern",
     failedToAddSourcesToNotebook: "Ha fallat l'addició de fonts al quadern",
-    partialAddSuccess: "S'han afegit {success} font(s); {failed} han fallat",
+    partialAddSuccess: "S'han afegit {{success}} font(s); {{failed}} han fallat",
     sourceRemovedFromNotebook: "S'ha eliminat la font del quadern correctament",
     failedToRemoveSourceFromNotebook: "Ha fallat l'eliminació de la font del quadern",
     removeConfirm: "Segur que vols eliminar-lo del quadern?",
     checking: "S'està comprovant...",
     untitledSource: "Font sense títol",
-    maxItems: "màx. {count}",
-    insightsCount: "{count} anàlisis",
+    maxItems: "màx. {{count}}",
+    insightsCount: "{{count}} anàlisis",
     details: "Detalls",
     detailsTitle: "Detalls de la font",
     content: "Contingut",
@@ -371,7 +371,7 @@ export const caES = {
     enterUrlsPlaceholder: "Introdueix les URL, una per línia\nhttps://exemple.com/article1\nhttps://exemple.com/article2",
     batchUrlHint: "Enganxa múltiples URL (una per línia) per a la importació per lots",
     invalidUrlsDetected: "S'han detectat URL no vàlides:",
-    lineLabel: "Línia {line}",
+    lineLabel: "Línia {{line}}",
     fixInvalidUrls: "Corregeix o elimina les URL no vàlides per continuar",
     selectMultipleFilesHint: "Selecciona múltiples fitxers per a la importació per lots. Compatibles: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimèdia (MP4, MP3, WAV, M4A), Imatges (JPG, PNG), Arxius (ZIP)",
     selectedFiles: "Fitxers seleccionats:",
@@ -380,8 +380,8 @@ export const caES = {
     titlePlaceholder: "Posa un títol descriptiu a la teva font",
     batchTitlesAuto: "Els títols es generaran automàticament per a cada font.",
     batchCommonSettings: "S'aplicaran els mateixos quaderns i transformacions a tots els elements.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} fitxer(s)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} fitxer(s)",
     addSource: "Afegeix una font",
     notEmbeddedAlert: "Contingut no incrustat",
     notEmbeddedDesc: "Aquest contingut no s'ha incrustat per a la cerca vectorial. La incrustació habilita capacitats de cerca avançada i millora la descoberta de contingut.",
@@ -404,8 +404,8 @@ export const caES = {
     searchPlaceholder: "Cerca fonts per nom o URL...",
     noNotebooksFound: "No s'ha trobat cap quadern.",
     showingFirst100: "Es mostren les primeres 100 fonts. Utilitza la cerca per trobar-ne d'específiques.",
-    selectedCount: "{count} fonts seleccionades",
-    added: "Afegit el {date}",
+    selectedCount: "{{count}} fonts seleccionades",
+    added: "Afegit el {{date}}",
     addUrl: "Afegeix una URL",
     uploadFile: "Carrega un fitxer",
     enterText: "Introdueix text",
@@ -413,7 +413,7 @@ export const caES = {
     processingFiles: "S'estan processant els teus fitxers...",
     titleRequired: "Cal un títol per al contingut de text",
     titleGenerated: "Si es deixa buit, es generarà un títol a partir del contingut",
-    batchCount: "Es processaran {count} {type}",
+    batchCount: "Es processaran {{count}} {{type}}",
     enableEmbedding: "Activa la incrustació per a la cerca",
     embeddingDesc: "Permet que aquesta font es trobi en cerques vectorials i consultes d'IA",
     embeddingAlways: "La incrustació s'activa automàticament",
@@ -426,13 +426,13 @@ export const caES = {
     insightsDesc: "Anàlisis generades per l'anàlisi del model",
     uploadedFile: "Fitxer carregat",
     fileUnavailableDesc: "Aquest fitxer no està disponible per raons del sistema d'emmagatzematge.",
-    batchSuccess: "S'ha(n) creat {count} font(s) correctament",
-    batchFailed: "Ha fallat la creació de les {count} fonts",
-    batchPartial: "{success} correctes, {failed} fallades",
+    batchSuccess: "S'ha(n) creat {{count}} font(s) correctament",
+    batchFailed: "Ha fallat la creació de les {{count}} fonts",
+    batchPartial: "{{success}} correctes, {{failed}} fallades",
     submittingSource: "S'està enviant la font per al processament...",
-    processingBatchSources: "S'estan processant {count} fonts. Això pot trigar uns moments.",
+    processingBatchSources: "S'estan processant {{count}} fonts. Això pot trigar uns moments.",
     processingSource: "S'està processant la teva font. Això pot trigar uns moments.",
-    maxFilesAllowed: "Màxim {count} fitxers per lot",
+    maxFilesAllowed: "Màxim {{count}} fitxers per lot",
   },
   chat: {
     sessions: "Sessions",
@@ -442,17 +442,17 @@ export const caES = {
     deleteSessionDesc: "Segur que vols suprimir aquesta sessió de xat? Aquesta acció no es pot desfer.",
     sendPlaceholder: "Pregunta qualsevol cosa sobre les teves fonts...",
     sessionsTitle: "Sessions de xat",
-    chatWith: "Xat amb {name}",
-    startConversation: "Inicia una conversa sobre aquest/a {type}",
+    chatWith: "Xat amb {{name}}",
+    startConversation: "Inicia una conversa sobre aquest/a {{type}}",
     askQuestions: "Fes preguntes per entendre millor el contingut",
-    pressToSend: "Prem {key} per enviar",
+    pressToSend: "Prem {{key}} per enviar",
     model: "Model",
     createToStart: "Crea una sessió per començar.",
     chatWithNotebook: "Xat amb el quadern",
     unableToLoadChat: "No es pot carregar el xat",
     noDescription: "Sense descripció",
     startByCreating: "Comença creant el teu primer quadern per organitzar la teva recerca.",
-    messagesCount: "{count} missatges",
+    messagesCount: "{{count}} missatges",
     sessionCreated: "S'ha creat la sessió de xat",
     sessionUpdated: "S'ha actualitzat la sessió",
     sessionDeleted: "S'ha suprimit la sessió",
@@ -487,17 +487,17 @@ export const caES = {
     searchIn: "Cerca a",
     searchSources: "Cerca a les fonts",
     searchNotes: "Cerca a les notes",
-    resultsFound: "S'han trobat {count} resultats",
-    matches: "Coincidències ({count})",
-    noResultsFor: "No s'han trobat resultats per a «{query}»",
+    resultsFound: "S'han trobat {{count}} resultats",
+    matches: "Coincidències ({{count}})",
+    noResultsFor: "No s'han trobat resultats per a «{{query}}»",
     notSet: "No configurat",
     saveToNotebook: "Desa al quadern",
     saveSuccess: "S'ha desat correctament al quadern",
     saveError: "Ha fallat el desament al quadern",
     selectNotebook: "Selecciona un quadern",
     searchAndAsk: "Cerca i pregunta",
-    searchResultsFor: "Resultats de cerca per a «{query}»",
-    askAbout: "Pregunta sobre «{query}»",
+    searchResultsFor: "Resultats de cerca per a «{{query}}»",
+    askAbout: "Pregunta sobre «{{query}}»",
     orSearchKb: "O cerca a la teva base de coneixement",
     saving: "S'està desant...",
     advancedModelTitle: "Selecció avançada de models",
@@ -516,9 +516,9 @@ export const caES = {
     generateEpisodeDesc: "Selecciona el contingut a incloure i configura els detalls de l'episodi abans de generar-lo.",
     content: "Contingut",
     contentDesc: "Tria quaderns, fonts i notes per incloure en aquest episodi.",
-    itemsSelected: "{count} elements seleccionats",
-    tokens: "{count} tokens",
-    chars: "{count} caràcters",
+    itemsSelected: "{{count}} elements seleccionats",
+    tokens: "{{value}} tokens",
+    chars: "{{value}} caràcters",
     loadingNotebooks: "S'estan carregant els quaderns...",
     noNotebooksFoundInPodcasts: "No s'ha trobat cap quadern. Crea un quadern i afegeix contingut abans de generar un podcast.",
     noContentSelected: "No s'ha seleccionat cap contingut",
@@ -535,7 +535,7 @@ export const caES = {
     instructionsPlaceholder: "Qualsevol consell addicional per afegir al resum de l'episodi...",
     generating: "S'està generant...",
     generate: "Genera",
-    hostPlaceholder: "Presentador {number}",
+    hostPlaceholder: "Presentador {{number}}",
     profileRequired: "Cal un perfil d'episodi",
     profileRequiredDesc: "Selecciona un perfil d'episodi abans de generar el podcast.",
     nameRequired: "Cal el nom de l'episodi",
@@ -605,8 +605,8 @@ export const caES = {
     noSpeakerProfiles: "Encara no hi ha perfils de locutor. Crea'n un per fer disponibles els perfils d'episodi.",
     noDescription: "No s'ha proporcionat cap descripció.",
     usedByCount_one: "Usat per 1 episodi",
-    usedByCount_other: "Usat per {count} episodis",
-    usedByCount: "Usat per {count} episodis",
+    usedByCount_other: "Usat per {{count}} episodis",
+    usedByCount: "Usat per {{count}} episodis",
     unused: "No usat",
     voiceId: "ID de veu",
     backstory: "Història de fons",
@@ -614,7 +614,7 @@ export const caES = {
     edit: "Edita",
     duplicate: "Duplica",
     deleteSpeakerProfileTitle: "Vols suprimir el perfil del locutor?",
-    deleteSpeakerProfileDesc: "La supressió de «{name}» no es pot desfer.",
+    deleteSpeakerProfileDesc: "La supressió de «{{name}}» no es pot desfer.",
     deleteSpeakerDisabledHint: "Elimina aquest locutor dels perfils d'episodi abans de suprimir-lo.",
     deleting: "S'està suprimint…",
     episodeProfilesTitle: "Perfils d'episodi",
@@ -639,7 +639,7 @@ export const caES = {
     failedToStartGeneration: "Ha fallat l'inici de la generació",
     tryAgainMoment: "Torna-ho a provar en un moment.",
     deleteProfileTitle: "Vols suprimir el perfil?",
-    deleteProfileDesc: "Això eliminarà «{name}». Els episodis existents conserven les seves dades, però els nous ja no usaran aquesta configuració.",
+    deleteProfileDesc: "Això eliminarà «{{name}}». Els episodis existents conserven les seves dades, però els nous ja no usaran aquesta configuració.",
     profileCreated: "S'ha creat el perfil",
     profileCreatedDesc: "El perfil d'episodi «{name}» s'ha creat correctament.",
     failedToCreateProfile: "Ha fallat la creació del perfil",
@@ -661,7 +661,7 @@ export const caES = {
     transcriptModel: "Model de transcripció",
     segments: "Segments",
     defaultBriefingTitle: "Presentació per defecte",
-    created: "Creat el {time}",
+    created: "Creat el {{time}}",
     details: "Detalls",
     summaryTab: "Resum",
     outlineTab: "Esquema",
@@ -670,7 +670,7 @@ export const caES = {
     noOutline: "No hi ha cap esquema disponible.",
     noTranscript: "No hi ha cap transcripció disponible.",
     deleteEpisodeTitle: "Vols suprimir l'episodi?",
-    deleteEpisodeDesc: "Això eliminarà «{name}» i el seu fitxer d'àudio de manera permanent.",
+    deleteEpisodeDesc: "Això eliminarà «{{name}}» i el seu fitxer d'àudio de manera permanent.",
     audioUnavailable: "Àudio no disponible",
     segment: "Segment",
     speaker: "Locutor",
@@ -698,7 +698,7 @@ export const caES = {
     speakers: "Locutors",
     speakersDesc: "Configura entre una i quatre veus per a aquest perfil.",
     addSpeaker: "Afegeix un locutor",
-    speakerNumber: "Locutor {number}",
+    speakerNumber: "Locutor {{number}}",
     backstoryPlaceholder: "Breu biografia o context del locutor",
     personalityPlaceholder: "Descriu l'estil i el to",
     outlineModelRequired: "Cal un model d'esquema",
@@ -773,7 +773,7 @@ export const caES = {
     currentVersion: "Versió actual",
     latestVersion: "Darrera versió",
     status: "Estat",
-    updateAvailable: "La versió {version} és disponible",
+    updateAvailable: "La versió {{version}} és disponible",
     updateAvailableDesc: "Hi ha una nova versió d'Open Notebook disponible.",
     upToDate: "Actualitzat",
     unknown: "Desconegut",
@@ -795,8 +795,8 @@ export const caES = {
       failed: "Ha fallat",
       leavePageHint: "Pots abandonar aquesta pàgina, ja que s'executarà en segon pla",
       startNew: "Inicia una reconstrucció nova",
-      itemsProcessed: "{processed}/{total} treballs enviats ({percent}%)",
-      failedItems: "No s'han pogut enviar {count} treballs",
+      itemsProcessed: "{{processed}}/{{total}} treballs enviats ({{percent}}%)",
+      failedItems: "No s'han pogut enviar {{count}} treballs",
       time: "Temps",
       whenToRebuild: "Quan hauria de reconstruir les incrustacions?",
       whenToRebuildAns: "Hauries de reconstruir quan canviïs de model, actualitzis versions, corregeixis danys o després d'importacions massives.",
@@ -839,7 +839,7 @@ export const caES = {
     model: "Model",
     systemPrompt: "Instrucció del sistema",
     overrideModelDesc: "Substitueix el model per defecte per a aquesta sessió de xat. Deixa-ho buit per usar el valor per defecte del sistema.",
-    sessionUseReplacement: "Aquesta sessió usarà {name} en lloc del model per defecte.",
+    sessionUseReplacement: "Aquesta sessió usarà {{name}} en lloc del model per defecte.",
     systemDefault: "Valor per defecte del sistema",
   },
   models: {
@@ -857,7 +857,7 @@ export const caES = {
     deleteModel: "Suprimeix el model",
     defaultAssignments: "Assignacions de model per defecte",
     defaultAssignmentsDesc: "Configura quins models s'usaran per a diferents propòsits a Open Notebook",
-    missingRequiredModels: "Falten models obligatoris: {models}. Open Notebook pot no funcionar correctament sense aquests.",
+    missingRequiredModels: "Falten models obligatoris: {{models}}. Open Notebook pot no funcionar correctament sense aquests.",
     selectModelPlaceholder: "Selecciona un model",
     requiredModelPlaceholder: "⚠️ Obligatori - Selecciona un model",
     chatModelLabel: "Model de xat",
@@ -875,7 +875,7 @@ export const caES = {
     sttModelLabel: "Model de veu a text",
     sttModelDesc: "S'usa per a la transcripció d'àudio",
     embeddingChangeTitle: "Canvi de model d'incrustació",
-    embeddingChangeConfirm: "Estàs a punt de canviar el model d'incrustació de {from} a {to}.",
+    embeddingChangeConfirm: "Estàs a punt de canviar el model d'incrustació de {{from}} a {{to}}.",
     rebuildRequired: "Important: cal reconstruir",
     rebuildReason: "El canvi del model d'incrustació requereix reconstruir totes les incrustacions existents per mantenir la coherència. Sense reconstruir, les cerques poden retornar resultats incorrectes o incomplets.",
     whatHappensNext: "Què passa a continuació:",
@@ -888,14 +888,14 @@ export const caES = {
     changeAndRebuild: "Canvia i ves a Reconstruir",
     autoAssign: "Assigna els valors per defecte automàticament",
     autoAssigning: "S'està assignant...",
-    autoAssignSuccess: "S'han assignat automàticament {count} models per defecte",
+    autoAssignSuccess: "S'han assignat automàticament {{count}} models per defecte",
     autoAssignNoModels: "No hi ha models disponibles per assignar. Sincronitza primer els models.",
     autoAssignAlreadySet: "Tots els models per defecte ja estan configurats",
     testModel: "Prova el model",
     testModelSuccess: "La prova del model ha tingut èxit",
     testModelFailed: "Ha fallat la prova del model",
     searchOrAddModel: "Cerca o escriu un nom de model...",
-    addCustomModel: "Afegeix «{name}»",
+    addCustomModel: "Afegeix «{{name}}»",
   },
   apiKeys: {
     title: "Configura la teva IA amb les teves pròpies claus de l'API",
@@ -905,19 +905,19 @@ export const caES = {
     configured: "Configurat",
     notConfigured: "No configurat",
     migrationAvailable: "S'han detectat variables d'entorn",
-    migrationDescription: "{count} clau(s) de l'API estan configurades mitjançant variables d'entorn i es poden migrar a la base de dades per facilitar-ne la gestió.",
+    migrationDescription: "{{count}} clau(s) de l'API estan configurades mitjançant variables d'entorn i es poden migrar a la base de dades per facilitar-ne la gestió.",
     migrateToDatabase: "Migra a la base de dades",
     migrating: "S'està migrant...",
-    migrationSuccess: "S'han migrat correctament {count} clau(es) de l'API",
-    migrationErrors: "{count} clau(es) no s'han pogut migrar",
+    migrationSuccess: "S'han migrat correctament {{count}} clau(es) de l'API",
+    migrationErrors: "{{count}} clau(es) no s'han pogut migrar",
     migrationNothingToMigrate: "Totes les claus ja estan a la base de dades",
     learnMore: "Aprèn a configurar les claus de l'API →",
     testConnection: "Prova la connexió",
     testSuccess: "Connexió correcta",
     testFailed: "Ha fallat la prova de connexió",
     syncModels: "Sincronitza els models",
-    syncSuccess: "S'han descobert {discovered} models, s'han afegit {new} de nous",
-    syncNoNew: "S'han descobert {count} models, tots ja estan registrats",
+    syncSuccess: "S'han descobert {{discovered}} models, s'han afegit {{new}} de nous",
+    syncNoNew: "S'han descobert {{count}} models, tots ja estan registrats",
     syncFailed: "Ha fallat la sincronització dels models",
     getApiKey: "Obtén la clau de l'API",
     vertexProject: "ID del projecte de GCP",
@@ -932,7 +932,7 @@ export const caES = {
     baseUrlOverrideHint: "Canvia-ho només si has de substituir el punt d'accés de l'API per defecte del proveïdor.",
     numCtx: "Finestra de Context (num_ctx)",
     numCtxHint: "Finestra de context màxima per als models Ollama. Deixa-ho buit per usar el valor per defecte (8192). Augmenta'l només si el teu maquinari pot gestionar una finestra més gran.",
-    deleteConfigConfirm: "Segur que vols suprimir «{name}»? Aquesta acció no es pot desfer.",
+    deleteConfigConfirm: "Segur que vols suprimir «{{name}}»? Aquesta acció no es pot desfer.",
     configSaveSuccess: "S'ha desat la configuració correctament",
     configUpdateSuccess: "S'ha actualitzat la configuració correctament",
     configDeleteSuccess: "S'ha suprimit la configuració correctament",
@@ -944,7 +944,7 @@ export const caES = {
     encryptionRequired: "Clau de xifratge no configurada",
     encryptionRequiredDescription: "Estableix la variable d'entorn OPEN_NOTEBOOK_ENCRYPTION_KEY per habilitar l'emmagatzematge segur de credencials.",
     migrationAvailable: "Migració de clau de l'API disponible",
-    migrationDescription: "{count} proveïdor(s) tenen claus de l'API configurades mitjançant variables d'entorn. Migra-les a la base de dades per facilitar-ne la gestió.",
+    migrationDescription: "{{count}} proveïdor(s) tenen claus de l'API configurades mitjançant variables d'entorn. Migra-les a la base de dades per facilitar-ne la gestió.",
     goToSettings: "Ves a la configuració",
     viewDocs: "Visualitza la documentació",
   },
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 900ec024..c1bfd819 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -66,8 +66,8 @@ export const deDE = {
     optional: "Optional",
     type: "Typ",
     title: "Titel",
-    created: "Erstellt {time}",
-    updated: "Aktualisiert {time}",
+    created: "Erstellt {{time}}",
+    updated: "Aktualisiert {{time}}",
     actions: "Aktionen",
     noResults: "Keine Ergebnisse",
     references: "Referenzen",
@@ -110,10 +110,10 @@ export const deDE = {
     reasoning: "Denkprozess",
     searchTerms: "Suchbegriffe",
     strategy: "Strategie",
-    individualAnswers: "Einzelantworten ({count})",
+    individualAnswers: "Einzelantworten ({{count}})",
     finalAnswer: "Endgültige Antwort",
-    notebookLabel: "Notebook: {name}",
-    itemNotFound: "{type} konnte nicht gefunden werden",
+    notebookLabel: "Notebook: {{name}}",
+    itemNotFound: "{{type}} konnte nicht gefunden werden",
     accessibility: {
       transformationViews: "Transformationsansichten",
       searchKB: "Wissensbasis fragen oder durchsuchen",
@@ -234,12 +234,12 @@ export const deDE = {
     archive: "Archivieren",
     unarchive: "Aus Archiv wiederherstellen",
     deleteNotebook: "Notebook löschen",
-    deleteNotebookDesc: "Möchtest du „{name}“ wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+    deleteNotebookDesc: "Möchtest du „{{name}}“ wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
     deleteNotebookLoading: "Löschvorschau wird geladen...",
-    deleteNotebookNotes: "{count} Notiz(en) werden dauerhaft gelöscht.",
+    deleteNotebookNotes: "{{count}} Notiz(en) werden dauerhaft gelöscht.",
     deleteNotebookNoNotes: "Keine Notizen zum Löschen vorhanden.",
-    deleteNotebookExclusiveSources: "{count} Quelle(n) existieren nur in diesem Notebook.",
-    deleteNotebookSharedSources: "{count} Quelle(n) werden auch in anderen Notebooks verwendet und nur aus diesem Notebook entfernt.",
+    deleteNotebookExclusiveSources: "{{count}} Quelle(n) existieren nur in diesem Notebook.",
+    deleteNotebookSharedSources: "{{count}} Quelle(n) werden auch in anderen Notebooks verwendet und nur aus diesem Notebook entfernt.",
     deleteNotebookNoSources: "Keine Quellen in diesem Notebook.",
     deleteExclusiveSourcesLabel: "Exklusive Quellen löschen",
     keepExclusiveSourcesLabel: "Verknüpfung lösen und behalten",
@@ -307,7 +307,7 @@ export const deDE = {
     createFirstSource: "Füge deine erste Quelle hinzu, um deine Wissensbasis aufzubauen.",
     deleteSourceConfirm: "Möchtest du diese Quelle wirklich löschen?",
     deleteConfirm: "Möchtest du das wirklich löschen?",
-    deleteConfirmWithTitle: "Möchtest du „{title}“ wirklich löschen?",
+    deleteConfirmWithTitle: "Möchtest du „{{title}}“ wirklich löschen?",
     deleteSuccess: "Quelle erfolgreich gelöscht. Hinweis: Um die Datei auch aus dem Speicher zu löschen, musst du in den Einstellungen die Option „Datei löschen“ aktivieren.",
     failedToDelete: "Quelle konnte nicht gelöscht werden",
     sourceQueued: "Quelle eingereiht",
@@ -323,16 +323,16 @@ export const deDE = {
     sourceRequeued: "Quelle erneut eingereiht",
     sourceRequeuedDesc: "Die Quelle wurde erneut zur Verarbeitung in die Warteschlange gestellt.",
     failedToRetry: "Erneuter Versuch fehlgeschlagen",
-    sourcesAddedToNotebook: "{count} Quelle(n) zum Notebook hinzugefügt",
+    sourcesAddedToNotebook: "{{count}} Quelle(n) zum Notebook hinzugefügt",
     failedToAddSourcesToNotebook: "Quellen konnten nicht zum Notebook hinzugefügt werden",
-    partialAddSuccess: "{success} Quelle(n) hinzugefügt, {failed} fehlgeschlagen",
+    partialAddSuccess: "{{success}} Quelle(n) hinzugefügt, {{failed}} fehlgeschlagen",
     sourceRemovedFromNotebook: "Quelle erfolgreich aus dem Notebook entfernt",
     failedToRemoveSourceFromNotebook: "Quelle konnte nicht aus dem Notebook entfernt werden",
     removeConfirm: "Möchtest du dies wirklich aus dem Notebook entfernen?",
     checking: "Wird geprüft...",
     untitledSource: "Unbenannte Quelle",
-    maxItems: "max. {count}",
-    insightsCount: "{count} Erkenntnisse",
+    maxItems: "max. {{count}}",
+    insightsCount: "{{count}} Erkenntnisse",
     details: "Details",
     detailsTitle: "Quellendetails",
     content: "Inhalt",
@@ -374,7 +374,7 @@ export const deDE = {
     enterUrlsPlaceholder: "URLs eingeben, eine pro Zeile\nhttps://example.com/artikel1\nhttps://example.com/artikel2",
     batchUrlHint: "Füge mehrere URLs ein, jeweils eine pro Zeile, um sie gesammelt zu importieren",
     invalidUrlsDetected: "Ungültige URLs gefunden:",
-    lineLabel: "Zeile {line}",
+    lineLabel: "Zeile {{line}}",
     fixInvalidUrls: "Bitte korrigiere oder entferne ungültige URLs, um fortzufahren",
     selectMultipleFilesHint: "Wähle mehrere Dateien für den Sammelimport aus. Unterstützt werden: Dokumente (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medien (MP4, MP3, WAV, M4A), Bilder (JPG, PNG), Archive (ZIP)",
     selectedFiles: "Ausgewählte Dateien:",
@@ -383,8 +383,8 @@ export const deDE = {
     titlePlaceholder: "Gib deiner Quelle einen aussagekräftigen Titel",
     batchTitlesAuto: "Titel werden für jede Quelle automatisch erzeugt.",
     batchCommonSettings: " Dieselben Notebooks und Transformationen werden auf alle Elemente angewendet.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} Datei(en)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} Datei(en)",
     addSource: "Quelle hinzufügen",
     notEmbeddedAlert: "Inhalt nicht eingebettet",
     notEmbeddedDesc: "Dieser Inhalt wurde noch nicht für die Vektorsuche eingebettet. Einbettung ermöglicht erweiterte Suchfunktionen und eine bessere Auffindbarkeit der Inhalte.",
@@ -407,8 +407,8 @@ export const deDE = {
     searchPlaceholder: "Quellen nach Name oder URL suchen...",
     noNotebooksFound: "Keine Notebooks gefunden.",
     showingFirst100: "Die ersten 100 Quellen werden angezeigt. Nutze die Suche, um bestimmte Quellen zu finden.",
-    selectedCount: "{count} Quellen ausgewählt",
-    added: "Hinzugefügt am {date}",
+    selectedCount: "{{count}} Quellen ausgewählt",
+    added: "Hinzugefügt am {{date}}",
     addUrl: "URL hinzufügen",
     uploadFile: "Datei hochladen",
     enterText: "Text eingeben",
@@ -416,7 +416,7 @@ export const deDE = {
     processingFiles: "Deine Dateien werden verarbeitet...",
     titleRequired: "Für Textinhalt ist ein Titel erforderlich",
     titleGenerated: "Wenn du dieses Feld leer lässt, wird aus dem Inhalt ein Titel erzeugt",
-    batchCount: "Wird verarbeitet: {count} × {type}",
+    batchCount: "Wird verarbeitet: {{count}} × {{type}}",
     enableEmbedding: "Einbettung für die Suche aktivieren",
     embeddingDesc: "Ermöglicht, dass diese Quelle in Vektorsuchen und KI-Abfragen gefunden wird",
     embeddingAlways: "Einbettung automatisch aktiviert",
@@ -429,13 +429,13 @@ export const deDE = {
     insightsDesc: "Erkenntnisse aus der Modellanalyse",
     uploadedFile: "Hochgeladene Datei",
     fileUnavailableDesc: "Diese Datei ist derzeit aus Gründen des Speichersystems nicht verfügbar.",
-    batchSuccess: "{count} Quelle(n) erfolgreich erstellt",
-    batchFailed: "Nicht alle {count} Quellen konnten erstellt werden",
-    batchPartial: "{success} erfolgreich, {failed} fehlgeschlagen",
+    batchSuccess: "{{count}} Quelle(n) erfolgreich erstellt",
+    batchFailed: "Nicht alle {{count}} Quellen konnten erstellt werden",
+    batchPartial: "{{success}} erfolgreich, {{failed}} fehlgeschlagen",
     submittingSource: "Quelle wird zur Verarbeitung übermittelt...",
-    processingBatchSources: "{count} Quellen werden verarbeitet. Das kann einen Moment dauern.",
+    processingBatchSources: "{{count}} Quellen werden verarbeitet. Das kann einen Moment dauern.",
     processingSource: "Deine Quelle wird verarbeitet. Das kann einen Moment dauern.",
-    maxFilesAllowed: "Maximal {count} Dateien pro Sammelimport erlaubt",
+    maxFilesAllowed: "Maximal {{count}} Dateien pro Sammelimport erlaubt",
   },
   chat: {
     sessions: "Sitzungen",
@@ -445,17 +445,17 @@ export const deDE = {
     deleteSessionDesc: "Möchtest du diese Chat-Sitzung wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
     sendPlaceholder: "Frage etwas zu deinen Quellen...",
     sessionsTitle: "Chat-Sitzungen",
-    chatWith: "Chat mit {name}",
-    startConversation: "Starte eine Unterhaltung zu {type}",
+    chatWith: "Chat mit {{name}}",
+    startConversation: "Starte eine Unterhaltung zu {{type}}",
     askQuestions: "Stelle Fragen, um den Inhalt besser zu verstehen",
-    pressToSend: "Drücke {key} zum Senden",
+    pressToSend: "Drücke {{key}} zum Senden",
     model: "Modell",
     createToStart: "Erstelle eine Sitzung, um zu starten.",
     chatWithNotebook: "Mit Notebook chatten",
     unableToLoadChat: "Chat konnte nicht geladen werden",
     noDescription: "Keine Beschreibung",
     startByCreating: "Erstelle zuerst dein erstes Notebook, um deine Recherche zu organisieren.",
-    messagesCount: "{count} Nachrichten",
+    messagesCount: "{{count}} Nachrichten",
     sessionCreated: "Chat-Sitzung erstellt",
     sessionUpdated: "Sitzung aktualisiert",
     sessionDeleted: "Sitzung gelöscht",
@@ -490,17 +490,17 @@ export const deDE = {
     searchIn: "Suchen in",
     searchSources: "Quellen durchsuchen",
     searchNotes: "Notizen durchsuchen",
-    resultsFound: "{count} Ergebnisse gefunden",
-    matches: "Treffer ({count})",
-    noResultsFor: "Keine Ergebnisse für „{query}“ gefunden",
+    resultsFound: "{{count}} Ergebnisse gefunden",
+    matches: "Treffer ({{count}})",
+    noResultsFor: "Keine Ergebnisse für „{{query}}“ gefunden",
     notSet: "Nicht festgelegt",
     saveToNotebook: "In Notebook speichern",
     saveSuccess: "Erfolgreich im Notebook gespeichert",
     saveError: "Speichern im Notebook fehlgeschlagen",
     selectNotebook: "Notebook auswählen",
     searchAndAsk: "Suchen & Fragen",
-    searchResultsFor: "Suchergebnisse für „{query}“",
-    askAbout: "Fragen zu „{query}“",
+    searchResultsFor: "Suchergebnisse für „{{query}}“",
+    askAbout: "Fragen zu „{{query}}“",
     orSearchKb: "Oder deine Wissensbasis durchsuchen",
     saving: "Speichern...",
     advancedModelTitle: "Erweiterte Modellauswahl",
@@ -519,9 +519,9 @@ export const deDE = {
     generateEpisodeDesc: "Wähle die Inhalte aus und konfiguriere die Episodendetails, bevor eine neue Podcast-Episode erzeugt wird.",
     content: "Inhalt",
     contentDesc: "Wähle Notebooks, Quellen und Notizen aus, die in diese Episode aufgenommen werden sollen.",
-    itemsSelected: "{count} Elemente ausgewählt",
-    tokens: "{count} Tokens",
-    chars: "{count} Zeichen",
+    itemsSelected: "{{count}} Elemente ausgewählt",
+    tokens: "{{value}} Tokens",
+    chars: "{{value}} Zeichen",
     loadingNotebooks: "Notebooks werden geladen...",
     noNotebooksFoundInPodcasts: "Keine Notebooks gefunden. Erstelle ein Notebook und füge Inhalte hinzu, bevor du einen Podcast erzeugst.",
     noContentSelected: "Kein Inhalt ausgewählt",
@@ -538,7 +538,7 @@ export const deDE = {
     instructionsPlaceholder: "Zusätzliche Hinweise, die an das Episoden-Briefing angehängt werden sollen...",
     generating: "Wird erzeugt...",
     generate: "Erzeugen",
-    hostPlaceholder: "Moderator {number}",
+    hostPlaceholder: "Moderator {{number}}",
     profileRequired: "Episodenprofil erforderlich",
     profileRequiredDesc: "Wähle ein Episodenprofil aus, bevor du einen Podcast erzeugst.",
     nameRequired: "Episodenname erforderlich",
@@ -608,8 +608,8 @@ export const deDE = {
     noSpeakerProfiles: "Noch keine Sprecherprofile. Erstelle eines, damit Episodenprofile verfügbar werden.",
     noDescription: "Keine Beschreibung angegeben.",
     usedByCount_one: "Von 1 Episode verwendet",
-    usedByCount_other: "Von {count} Episoden verwendet",
-    usedByCount: "Von {count} Episoden verwendet",
+    usedByCount_other: "Von {{count}} Episoden verwendet",
+    usedByCount: "Von {{count}} Episoden verwendet",
     unused: "Nicht verwendet",
     voiceId: "Stimmen-ID",
     backstory: "Hintergrundgeschichte",
@@ -617,7 +617,7 @@ export const deDE = {
     edit: "Bearbeiten",
     duplicate: "Duplizieren",
     deleteSpeakerProfileTitle: "Sprecherprofil löschen?",
-    deleteSpeakerProfileDesc: "Das Löschen von „{name}“ kann nicht rückgängig gemacht werden.",
+    deleteSpeakerProfileDesc: "Das Löschen von „{{name}}“ kann nicht rückgängig gemacht werden.",
     deleteSpeakerDisabledHint: "Entferne diesen Sprecher aus den Episodenprofilen, bevor du ihn löschst.",
     deleting: "Wird gelöscht…",
     episodeProfilesTitle: "Episodenprofile",
@@ -642,7 +642,7 @@ export const deDE = {
     failedToStartGeneration: "Erzeugung konnte nicht gestartet werden",
     tryAgainMoment: "Bitte versuche es gleich erneut.",
     deleteProfileTitle: "Profil löschen?",
-    deleteProfileDesc: "Dadurch wird „{name}“ entfernt. Vorhandene Episoden behalten ihre Daten, aber neue Episoden verwenden diese Konfiguration nicht mehr.",
+    deleteProfileDesc: "Dadurch wird „{{name}}“ entfernt. Vorhandene Episoden behalten ihre Daten, aber neue Episoden verwenden diese Konfiguration nicht mehr.",
     profileCreated: "Profil erstellt",
     profileCreatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich erstellt.",
     failedToCreateProfile: "Profil konnte nicht erstellt werden",
@@ -664,7 +664,7 @@ export const deDE = {
     transcriptModel: "Transkriptmodell",
     segments: "Segmente",
     defaultBriefingTitle: "Standard-Briefing",
-    created: "Erstellt am {time}",
+    created: "Erstellt am {{time}}",
     details: "Details",
     summaryTab: "Zusammenfassung",
     outlineTab: "Gliederung",
@@ -673,7 +673,7 @@ export const deDE = {
     noOutline: "Keine Gliederung verfügbar.",
     noTranscript: "Kein Transkript verfügbar.",
     deleteEpisodeTitle: "Episode löschen?",
-    deleteEpisodeDesc: "Dadurch werden „{name}“ und die zugehörige Audiodatei dauerhaft entfernt.",
+    deleteEpisodeDesc: "Dadurch werden „{{name}}“ und die zugehörige Audiodatei dauerhaft entfernt.",
     audioUnavailable: "Audio nicht verfügbar",
     segment: "Abschnitt",
     speaker: "Sprecher",
@@ -701,7 +701,7 @@ export const deDE = {
     speakers: "Sprecher",
     speakersDesc: "Konfiguriere zwischen einer und vier Stimmen für dieses Profil.",
     addSpeaker: "Sprecher hinzufügen",
-    speakerNumber: "Sprecher {number}",
+    speakerNumber: "Sprecher {{number}}",
     backstoryPlaceholder: "Kurze Biografie oder Kontext für den Sprecher",
     personalityPlaceholder: "Beschreibe Stil und Ton",
     outlineModelRequired: "Gliederungsmodell ist erforderlich",
@@ -776,7 +776,7 @@ export const deDE = {
     currentVersion: "Aktuelle Version",
     latestVersion: "Neueste Version",
     status: "Status",
-    updateAvailable: "Version {version} verfügbar",
+    updateAvailable: "Version {{version}} verfügbar",
     updateAvailableDesc: "Eine neue Version von Open Notebook ist verfügbar.",
     upToDate: "Aktuell",
     unknown: "Unbekannt",
@@ -798,8 +798,8 @@ export const deDE = {
       failed: "Fehlgeschlagen",
       leavePageHint: "Du kannst diese Seite verlassen, da der Vorgang im Hintergrund läuft",
       startNew: "Neuen Neuaufbau starten",
-      itemsProcessed: "{processed}/{total} Jobs übermittelt ({percent}%)",
-      failedItems: "{count} Jobs konnten nicht übermittelt werden",
+      itemsProcessed: "{{processed}}/{{total}} Jobs übermittelt ({{percent}}%)",
+      failedItems: "{{count}} Jobs konnten nicht übermittelt werden",
       time: "Zeit",
       whenToRebuild: "Wann sollte ich Embeddings neu aufbauen?",
       whenToRebuildAns: "Du solltest Embeddings neu aufbauen, wenn du Modelle wechselst, Versionen aktualisierst, beschädigte Daten korrigierst oder viele Inhalte importiert hast.",
@@ -842,7 +842,7 @@ export const deDE = {
     model: "Modell",
     systemPrompt: "System-Prompt",
     overrideModelDesc: "Überschreibe das Standardmodell für diese Chat-Sitzung. Leer lassen, um den Systemstandard zu verwenden.",
-    sessionUseReplacement: "Diese Sitzung verwendet {name} statt des Standardmodells.",
+    sessionUseReplacement: "Diese Sitzung verwendet {{name}} statt des Standardmodells.",
     systemDefault: "Systemstandard",
   },
   models: {
@@ -860,7 +860,7 @@ export const deDE = {
     deleteModel: "Modell löschen",
     defaultAssignments: "Standardmodell-Zuweisungen",
     defaultAssignmentsDesc: "Konfiguriere, welche Modelle Open Notebook für verschiedene Zwecke verwendet",
-    missingRequiredModels: "Erforderliche Modelle fehlen: {models}. Open Notebook funktioniert ohne diese möglicherweise nicht korrekt.",
+    missingRequiredModels: "Erforderliche Modelle fehlen: {{models}}. Open Notebook funktioniert ohne diese möglicherweise nicht korrekt.",
     selectModelPlaceholder: "Modell auswählen",
     requiredModelPlaceholder: "⚠️ Erforderlich – Modell auswählen",
     chatModelLabel: "Chat-Modell",
@@ -878,7 +878,7 @@ export const deDE = {
     sttModelLabel: "Speech-to-Text-Modell",
     sttModelDesc: "Wird für Audiotranskription verwendet",
     embeddingChangeTitle: "Embedding-Modell ändern",
-    embeddingChangeConfirm: "Du bist dabei, dein Embedding-Modell von {from} auf {to} zu ändern.",
+    embeddingChangeConfirm: "Du bist dabei, dein Embedding-Modell von {{from}} auf {{to}} zu ändern.",
     rebuildRequired: "Wichtig: Neuaufbau erforderlich",
     rebuildReason: "Wenn du dein Embedding-Modell änderst, müssen alle vorhandenen Embeddings neu aufgebaut werden, damit die Ergebnisse konsistent bleiben. Ohne Neuaufbau können Suchergebnisse falsch oder unvollständig sein.",
     whatHappensNext: "Was als Nächstes passiert:",
@@ -891,14 +891,14 @@ export const deDE = {
     changeAndRebuild: "Ändern & zum Neuaufbau wechseln",
     autoAssign: "Standardmodelle automatisch zuweisen",
     autoAssigning: "Wird zugewiesen...",
-    autoAssignSuccess: "{count} Standardmodelle automatisch zugewiesen",
+    autoAssignSuccess: "{{count}} Standardmodelle automatisch zugewiesen",
     autoAssignNoModels: "Keine Modelle zum Zuweisen verfügbar. Bitte synchronisiere zuerst die Modelle.",
     autoAssignAlreadySet: "Alle Standardmodelle sind bereits konfiguriert",
     testModel: "Modell testen",
     testModelSuccess: "Modelltest bestanden",
     testModelFailed: "Modelltest fehlgeschlagen",
     searchOrAddModel: "Modell suchen oder Modellnamen eingeben...",
-    addCustomModel: "\"{name}\" hinzufügen",
+    addCustomModel: "\"{{name}}\" hinzufügen",
   },
   apiKeys: {
     title: "KI mit eigenen API-Schlüsseln konfigurieren",
@@ -908,19 +908,19 @@ export const deDE = {
     configured: "Konfiguriert",
     notConfigured: "Nicht konfiguriert",
     migrationAvailable: "Umgebungsvariablen erkannt",
-    migrationDescription: "{count} API-Schlüssel sind über Umgebungsvariablen konfiguriert und können zur einfacheren Verwaltung in die Datenbank migriert werden.",
+    migrationDescription: "{{count}} API-Schlüssel sind über Umgebungsvariablen konfiguriert und können zur einfacheren Verwaltung in die Datenbank migriert werden.",
     migrateToDatabase: "In Datenbank migrieren",
     migrating: "Wird migriert...",
-    migrationSuccess: "{count} API-Schlüssel erfolgreich migriert",
-    migrationErrors: "{count} Schlüssel konnten nicht migriert werden",
+    migrationSuccess: "{{count}} API-Schlüssel erfolgreich migriert",
+    migrationErrors: "{{count}} Schlüssel konnten nicht migriert werden",
     migrationNothingToMigrate: "Alle Schlüssel sind bereits in der Datenbank",
     learnMore: "Erfahre, wie API-Schlüssel konfiguriert werden →",
     testConnection: "Verbindung testen",
     testSuccess: "Verbindung erfolgreich",
     testFailed: "Verbindungstest fehlgeschlagen",
     syncModels: "Modelle synchronisieren",
-    syncSuccess: "{discovered} Modelle erkannt, {new} neue hinzugefügt",
-    syncNoNew: "{count} Modelle erkannt, alle bereits registriert",
+    syncSuccess: "{{discovered}} Modelle erkannt, {{new}} neue hinzugefügt",
+    syncNoNew: "{{count}} Modelle erkannt, alle bereits registriert",
     syncFailed: "Modelle konnten nicht synchronisiert werden",
     getApiKey: "API-Schlüssel abrufen",
     vertexProject: "GCP-Projekt-ID",
@@ -935,7 +935,7 @@ export const deDE = {
     baseUrlOverrideHint: "Nur ändern, wenn du den Standard-API-Endpunkt des Anbieters überschreiben musst.",
     numCtx: "Kontextfenster (num_ctx)",
     numCtxHint: "Maximales Kontextfenster für Ollama-Modelle. Leer lassen, um den Standardwert (8192) zu verwenden. Nur erhöhen, wenn deine Hardware ein größeres Fenster verarbeiten kann.",
-    deleteConfigConfirm: "Möchtest du '{name}' wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
+    deleteConfigConfirm: "Möchtest du '{{name}}' wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
     configSaveSuccess: "Konfiguration erfolgreich gespeichert",
     configUpdateSuccess: "Konfiguration erfolgreich aktualisiert",
     configDeleteSuccess: "Konfiguration erfolgreich gelöscht",
@@ -947,7 +947,7 @@ export const deDE = {
     encryptionRequired: "Verschlüsselungsschlüssel nicht konfiguriert",
     encryptionRequiredDescription: "Setze die Umgebungsvariable OPEN_NOTEBOOK_ENCRYPTION_KEY, um Zugangsdaten sicher zu speichern.",
     migrationAvailable: "API-Key-Migration verfügbar",
-    migrationDescription: "{count} Anbieter haben API-Keys über Umgebungsvariablen gesetzt. Migriere sie zur einfacheren Verwaltung in die Datenbank.",
+    migrationDescription: "{{count}} Anbieter haben API-Keys über Umgebungsvariablen gesetzt. Migriere sie zur einfacheren Verwaltung in die Datenbank.",
     goToSettings: "Zu den Einstellungen",
     viewDocs: "Dokumentation anzeigen",
   },
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index ac99f059..594e3bfb 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -61,8 +61,8 @@ export const enUS = {
     optional: "Optional",
     type: "Type",
     title: "Title",
-    created: "Created {time}",
-    updated: "Updated {time}",
+    created: "Created {{time}}",
+    updated: "Updated {{time}}",
     actions: "Actions",
     noResults: "No results",
     references: "References",
@@ -105,10 +105,10 @@ export const enUS = {
     reasoning: "Reasoning",
     searchTerms: "Search Terms",
     strategy: "Strategy",
-    individualAnswers: "Individual Answers ({count})",
+    individualAnswers: "Individual Answers ({{count}})",
     finalAnswer: "Final Answer",
-    notebookLabel: "Notebook: {name}",
-    itemNotFound: "This {type} could not be found",
+    notebookLabel: "Notebook: {{name}}",
+    itemNotFound: "This {{type}} could not be found",
     accessibility: {
       transformationViews: "Transformation views",
       searchKB: "Ask or search your knowledge base",
@@ -229,12 +229,12 @@ export const enUS = {
     archive: "Archive",
     unarchive: "Unarchive",
     deleteNotebook: "Delete Notebook",
-    deleteNotebookDesc: "Are you sure you want to delete \"{name}\"? This action cannot be undone.",
+    deleteNotebookDesc: "Are you sure you want to delete \"{{name}}\"? This action cannot be undone.",
     deleteNotebookLoading: "Loading deletion preview...",
-    deleteNotebookNotes: "{count} note(s) will be permanently deleted.",
+    deleteNotebookNotes: "{{count}} note(s) will be permanently deleted.",
     deleteNotebookNoNotes: "No notes to delete.",
-    deleteNotebookExclusiveSources: "{count} source(s) exist only in this notebook.",
-    deleteNotebookSharedSources: "{count} source(s) are shared with other notebooks and will be unlinked.",
+    deleteNotebookExclusiveSources: "{{count}} source(s) exist only in this notebook.",
+    deleteNotebookSharedSources: "{{count}} source(s) are shared with other notebooks and will be unlinked.",
     deleteNotebookNoSources: "No sources in this notebook.",
     deleteExclusiveSourcesLabel: "Delete exclusive sources",
     keepExclusiveSourcesLabel: "Unlink and keep them",
@@ -302,7 +302,7 @@ export const enUS = {
     createFirstSource: "Add your first source to start building your knowledge base.",
     deleteSourceConfirm: "Are you sure you want to delete this source?",
     deleteConfirm: "Are you sure you want to delete this?",
-    deleteConfirmWithTitle: "Are you sure you want to delete \"{title}\"?",
+    deleteConfirmWithTitle: "Are you sure you want to delete \"{{title}}\"?",
     deleteSuccess: "Source deleted successfully. Note: To delete the file from storage, you must enable checking the \"delete file\" option in the settings page.",
     failedToDelete: "Failed to delete source",
     sourceQueued: "Source Queued",
@@ -318,16 +318,16 @@ export const enUS = {
     sourceRequeued: "Source Retry Queued",
     sourceRequeuedDesc: "The source has been requeued for processing.",
     failedToRetry: "Retry Failed",
-    sourcesAddedToNotebook: "{count} source(s) added to notebook",
+    sourcesAddedToNotebook: "{{count}} source(s) added to notebook",
     failedToAddSourcesToNotebook: "Failed to add sources to notebook",
-    partialAddSuccess: "{success} source(s) added, {failed} failed",
+    partialAddSuccess: "{{success}} source(s) added, {{failed}} failed",
     sourceRemovedFromNotebook: "Source removed from notebook successfully",
     failedToRemoveSourceFromNotebook: "Failed to remove source from notebook",
     removeConfirm: "Are you sure you want to remove this from the notebook?",
     checking: "Checking...",
     untitledSource: "Untitled Source",
-    maxItems: "max {count}",
-    insightsCount: "{count} insights",
+    maxItems: "max {{count}}",
+    insightsCount: "{{count}} insights",
     details: "Details",
     detailsTitle: "Source Details",
     content: "Content",
@@ -369,7 +369,7 @@ export const enUS = {
     enterUrlsPlaceholder: "Enter URLs, one per line\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "Paste multiple URLs (one per line) to batch import",
     invalidUrlsDetected: "Invalid URLs detected:",
-    lineLabel: "Line {line}",
+    lineLabel: "Line {{line}}",
     fixInvalidUrls: "Please fix or remove invalid URLs to continue",
     selectMultipleFilesHint: "Select multiple files to batch import. Supported: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
     selectedFiles: "Selected files:",
@@ -378,8 +378,8 @@ export const enUS = {
     titlePlaceholder: "Give your source a descriptive title",
     batchTitlesAuto: "Titles will be automatically generated for each source.",
     batchCommonSettings: "The same notebooks and transformations will be applied to all items.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} file(s)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} file(s)",
     addSource: "Add Source",
     notEmbeddedAlert: "Content Not Embedded",
     notEmbeddedDesc: "This content hasn't been embedded for vector search. Embedding enables advanced search capabilities and better content discovery.",
@@ -402,8 +402,8 @@ export const enUS = {
     searchPlaceholder: "Search sources by name or URL...",
     noNotebooksFound: "No notebooks found.",
     showingFirst100: "Showing first 100 sources. Use search to find specific ones.",
-    selectedCount: "{count} sources selected",
-    added: "Added on {date}",
+    selectedCount: "{{count}} sources selected",
+    added: "Added on {{date}}",
     addUrl: "Add URL",
     uploadFile: "Upload File",
     enterText: "Enter Text",
@@ -411,7 +411,7 @@ export const enUS = {
     processingFiles: "Processing your files...",
     titleRequired: "A title is required for text content",
     titleGenerated: "If left empty, a title will be generated from the content",
-    batchCount: "{count} {type} will be processed",
+    batchCount: "{{count}} {{type}} will be processed",
     enableEmbedding: "Enable embedding for search",
     embeddingDesc: "Allows this source to be found in vector searches and AI queries",
     embeddingAlways: "Embedding enabled automatically",
@@ -424,13 +424,13 @@ export const enUS = {
     insightsDesc: "Insights generated from model analysis",
     uploadedFile: "Uploaded file",
     fileUnavailableDesc: "This file is currently unavailable due to storage system reasons.",
-    batchSuccess: "{count} source(s) created successfully",
-    batchFailed: "Failed to create all {count} sources",
-    batchPartial: "{success} succeeded, {failed} failed",
+    batchSuccess: "{{count}} source(s) created successfully",
+    batchFailed: "Failed to create all {{count}} sources",
+    batchPartial: "{{success}} succeeded, {{failed}} failed",
     submittingSource: "Submitting source for processing...",
-    processingBatchSources: "Processing {count} sources. This may take a few moments.",
+    processingBatchSources: "Processing {{count}} sources. This may take a few moments.",
     processingSource: "Your source is being processed. This may take a few moments.",
-    maxFilesAllowed: "Maximum {count} files allowed per batch",
+    maxFilesAllowed: "Maximum {{count}} files allowed per batch",
   },
   chat: {
     sessions: "Sessions",
@@ -440,17 +440,17 @@ export const enUS = {
     deleteSessionDesc: "Are you sure you want to delete this chat session? This action cannot be undone.",
     sendPlaceholder: "Ask anything about your sources...",
     sessionsTitle: "Chat Sessions",
-    chatWith: "Chat with {name}",
-    startConversation: "Start a conversation about this {type}",
+    chatWith: "Chat with {{name}}",
+    startConversation: "Start a conversation about this {{type}}",
     askQuestions: "Ask questions to understand the content better",
-    pressToSend: "Press {key} to send",
+    pressToSend: "Press {{key}} to send",
     model: "Model",
     createToStart: "Create a session to start.",
     chatWithNotebook: "Chat with Notebook",
     unableToLoadChat: "Unable to load chat",
     noDescription: "No description",
     startByCreating: "Start by creating your first notebook to organize your research.",
-    messagesCount: "{count} messages",
+    messagesCount: "{{count}} messages",
     sessionCreated: "Chat session created",
     sessionUpdated: "Session updated",
     sessionDeleted: "Session deleted",
@@ -485,17 +485,17 @@ export const enUS = {
     searchIn: "Search In",
     searchSources: "Search Sources",
     searchNotes: "Search Notes",
-    resultsFound: "{count} results found",
-    matches: "Matches ({count})",
-    noResultsFor: "No results found for “{query}”",
+    resultsFound: "{{count}} results found",
+    matches: "Matches ({{count}})",
+    noResultsFor: "No results found for “{{query}}”",
     notSet: "Not set",
     saveToNotebook: "Save to Notebook",
     saveSuccess: "Successfully saved to notebook",
     saveError: "Failed to save to notebook",
     selectNotebook: "Select Notebook",
     searchAndAsk: "Search & Ask",
-    searchResultsFor: "Search results for “{query}”",
-    askAbout: "Ask about “{query}”",
+    searchResultsFor: "Search results for “{{query}}”",
+    askAbout: "Ask about “{{query}}”",
     orSearchKb: "Or search your knowledge base",
     saving: "Saving...",
     advancedModelTitle: "Advanced Model Selection",
@@ -514,9 +514,9 @@ export const enUS = {
     generateEpisodeDesc: "Select the content to include and configure the episode details before generating a new podcast episode.",
     content: "Content",
     contentDesc: "Pick notebooks, sources, and notes to include in this episode.",
-    itemsSelected: "{count} items selected",
-    tokens: "{count} tokens",
-    chars: "{count} chars",
+    itemsSelected: "{{count}} items selected",
+    tokens: "{{value}} tokens",
+    chars: "{{value}} chars",
     loadingNotebooks: "Loading notebooks...",
     noNotebooksFoundInPodcasts: "No notebooks found. Create a notebook and add content before generating a podcast.",
     noContentSelected: "No content selected",
@@ -533,7 +533,7 @@ export const enUS = {
     instructionsPlaceholder: "Any supplementary advice to append to the episode briefing...",
     generating: "Generating...",
     generate: "Generate",
-    hostPlaceholder: "Host {number}",
+    hostPlaceholder: "Host {{number}}",
     profileRequired: "Episode Profile Required",
     profileRequiredDesc: "Select an episode profile before generating a podcast.",
     nameRequired: "Episode name required",
@@ -603,8 +603,8 @@ export const enUS = {
     noSpeakerProfiles: "No speaker profiles yet. Create one to make episode profiles available.",
     noDescription: "No description provided.",
     usedByCount_one: "Used by 1 episode",
-    usedByCount_other: "Used by {count} episodes",
-    usedByCount: "Used by {count} episodes",
+    usedByCount_other: "Used by {{count}} episodes",
+    usedByCount: "Used by {{count}} episodes",
     unused: "Unused",
     voiceId: "Voice ID",
     backstory: "Backstory",
@@ -612,7 +612,7 @@ export const enUS = {
     edit: "Edit",
     duplicate: "Duplicate",
     deleteSpeakerProfileTitle: "Delete speaker profile?",
-    deleteSpeakerProfileDesc: "Deleting “{name}” cannot be undone.",
+    deleteSpeakerProfileDesc: "Deleting “{{name}}” cannot be undone.",
     deleteSpeakerDisabledHint: "Remove this speaker from episode profiles before deleting it.",
     deleting: "Deleting…",
     episodeProfilesTitle: "Episode profiles",
@@ -637,7 +637,7 @@ export const enUS = {
     failedToStartGeneration: "Failed to start generation",
     tryAgainMoment: "Please try again in a moment.",
     deleteProfileTitle: "Delete profile?",
-    deleteProfileDesc: "This will remove “{name}”. Existing episodes keep their data, but new ones will no longer use this configuration.",
+    deleteProfileDesc: "This will remove “{{name}}”. Existing episodes keep their data, but new ones will no longer use this configuration.",
     profileCreated: "Profile Created",
     profileCreatedDesc: "The episode profile \"{name}\" has been successfully created.",
     failedToCreateProfile: "Failed to create profile",
@@ -659,7 +659,7 @@ export const enUS = {
     transcriptModel: "Transcript model",
     segments: "Segments",
     defaultBriefingTitle: "Default briefing",
-    created: "Created at {time}",
+    created: "Created at {{time}}",
     details: "Details",
     summaryTab: "Summary",
     outlineTab: "Outline",
@@ -668,7 +668,7 @@ export const enUS = {
     noOutline: "No outline available.",
     noTranscript: "No transcript available.",
     deleteEpisodeTitle: "Delete episode?",
-    deleteEpisodeDesc: "This will remove “{name}” and its audio file permanently.",
+    deleteEpisodeDesc: "This will remove “{{name}}” and its audio file permanently.",
     audioUnavailable: "Audio unavailable",
     segment: "Segment",
     speaker: "Speaker",
@@ -696,7 +696,7 @@ export const enUS = {
     speakers: "Speakers",
     speakersDesc: "Configure between one and four voices for this profile.",
     addSpeaker: "Add speaker",
-    speakerNumber: "Speaker {number}",
+    speakerNumber: "Speaker {{number}}",
     backstoryPlaceholder: "Short biography or context for the speaker",
     personalityPlaceholder: "Describe style and tone",
     outlineModelRequired: "Outline model is required",
@@ -772,7 +772,7 @@ export const enUS = {
     currentVersion: "Current Version",
     latestVersion: "Latest Version",
     status: "Status",
-    updateAvailable: "Version {version} Available",
+    updateAvailable: "Version {{version}} Available",
     updateAvailableDesc: "A new version of Open Notebook is available.",
     upToDate: "Up to Date",
     unknown: "Unknown",
@@ -794,8 +794,8 @@ export const enUS = {
       failed: "Failed",
       leavePageHint: "You can leave this page as this will run in the background",
       startNew: "Start New Rebuild",
-      itemsProcessed: "{processed}/{total} jobs submitted ({percent}%)",
-      failedItems: "{count} jobs failed to submit",
+      itemsProcessed: "{{processed}}/{{total}} jobs submitted ({{percent}}%)",
+      failedItems: "{{count}} jobs failed to submit",
       time: "Time",
       whenToRebuild: "When should I rebuild embeddings?",
       whenToRebuildAns: "You should rebuild when switching models, upgrading versions, fixing corruption, or after bulk imports.",
@@ -838,7 +838,7 @@ export const enUS = {
     model: "Model",
     systemPrompt: "System Prompt",
     overrideModelDesc: "Override the default model for this chat session. Leave empty to use the system default.",
-    sessionUseReplacement: "This session will use {name} instead of the default model.",
+    sessionUseReplacement: "This session will use {{name}} instead of the default model.",
     systemDefault: "System Default",
   },
   models: {
@@ -856,7 +856,7 @@ export const enUS = {
     deleteModel: "Delete Model",
     defaultAssignments: "Default Model Assignments",
     defaultAssignmentsDesc: "Configure which models to use for different purposes across Open Notebook",
-    missingRequiredModels: "Missing required models: {models}. Open Notebook may not function properly without these.",
+    missingRequiredModels: "Missing required models: {{models}}. Open Notebook may not function properly without these.",
     selectModelPlaceholder: "Select a model",
     requiredModelPlaceholder: "⚠️ Required - Select a model",
     chatModelLabel: "Chat Model",
@@ -874,7 +874,7 @@ export const enUS = {
     sttModelLabel: "Speech-to-Text Model",
     sttModelDesc: "Used for audio transcription",
     embeddingChangeTitle: "Embedding Model Change",
-    embeddingChangeConfirm: "You are about to change your embedding model from {from} to {to}.",
+    embeddingChangeConfirm: "You are about to change your embedding model from {{from}} to {{to}}.",
     rebuildRequired: "Important: Rebuild Required",
     rebuildReason: "Changing your embedding model requires rebuilding all existing embeddings to maintain consistency. Without rebuilding, your searches may return incorrect or incomplete results.",
     whatHappensNext: "What happens next:",
@@ -887,14 +887,14 @@ export const enUS = {
     changeAndRebuild: "Change & Go to Rebuild",
     autoAssign: "Auto-assign Defaults",
     autoAssigning: "Assigning...",
-    autoAssignSuccess: "{count} default models automatically assigned",
+    autoAssignSuccess: "{{count}} default models automatically assigned",
     autoAssignNoModels: "No models available to assign. Please sync models first.",
     autoAssignAlreadySet: "All default models are already configured",
     testModel: "Test Model",
     testModelSuccess: "Model Test Passed",
     testModelFailed: "Model Test Failed",
     searchOrAddModel: "Search or type a model name...",
-    addCustomModel: "Add \"{name}\"",
+    addCustomModel: "Add \"{{name}}\"",
   },
   apiKeys: {
     title: "Configure your AI with your own API keys",
@@ -904,19 +904,19 @@ export const enUS = {
     configured: "Configured",
     notConfigured: "Not configured",
     migrationAvailable: "Environment Variables Detected",
-    migrationDescription: "{count} API key(s) are configured via environment variables and can be migrated to the database for easier management.",
+    migrationDescription: "{{count}} API key(s) are configured via environment variables and can be migrated to the database for easier management.",
     migrateToDatabase: "Migrate to Database",
     migrating: "Migrating...",
-    migrationSuccess: "{count} API key(s) migrated successfully",
-    migrationErrors: "{count} key(s) failed to migrate",
+    migrationSuccess: "{{count}} API key(s) migrated successfully",
+    migrationErrors: "{{count}} key(s) failed to migrate",
     migrationNothingToMigrate: "All keys are already in the database",
     learnMore: "Learn how to configure API keys →",
     testConnection: "Test Connection",
     testSuccess: "Connection successful",
     testFailed: "Connection test failed",
     syncModels: "Sync Models",
-    syncSuccess: "Discovered {discovered} models, added {new} new",
-    syncNoNew: "Discovered {count} models, all already registered",
+    syncSuccess: "Discovered {{discovered}} models, added {{new}} new",
+    syncNoNew: "Discovered {{count}} models, all already registered",
     syncFailed: "Failed to sync models",
     getApiKey: "Get API Key",
     vertexProject: "GCP Project ID",
@@ -931,7 +931,7 @@ export const enUS = {
     baseUrlOverrideHint: "Only change this if you need to override the provider's default API endpoint.",
     numCtx: "Context Window (num_ctx)",
     numCtxHint: "Maximum context window for Ollama models. Leave empty to use the default (8192). Increase only if your hardware can handle a larger window.",
-    deleteConfigConfirm: "Are you sure you want to delete '{name}'? This cannot be undone.",
+    deleteConfigConfirm: "Are you sure you want to delete '{{name}}'? This cannot be undone.",
     configSaveSuccess: "Configuration saved successfully",
     configUpdateSuccess: "Configuration updated successfully",
     configDeleteSuccess: "Configuration deleted successfully",
@@ -943,7 +943,7 @@ export const enUS = {
     encryptionRequired: "Encryption key not configured",
     encryptionRequiredDescription: "Set the OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable to enable secure credential storage.",
     migrationAvailable: "API key migration available",
-    migrationDescription: "{count} provider(s) have API keys set via environment variables. Migrate them to the database for easier management.",
+    migrationDescription: "{{count}} provider(s) have API keys set via environment variables. Migrate them to the database for easier management.",
     goToSettings: "Go to Settings",
     viewDocs: "View docs",
   },
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 2541db19..1d0feb49 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -63,8 +63,8 @@ export const esES = {
     optional: "Opcional",
     type: "Tipo",
     title: "Título",
-    created: "Creado {time}",
-    updated: "Actualizado {time}",
+    created: "Creado {{time}}",
+    updated: "Actualizado {{time}}",
     actions: "Acciones",
     noResults: "Sin resultados",
     references: "Referencias",
@@ -107,10 +107,10 @@ export const esES = {
     reasoning: "Razonamiento",
     searchTerms: "Términos de búsqueda",
     strategy: "Estrategia",
-    individualAnswers: "Respuestas individuales ({count})",
+    individualAnswers: "Respuestas individuales ({{count}})",
     finalAnswer: "Respuesta final",
-    notebookLabel: "Cuaderno: {name}",
-    itemNotFound: "No se pudo encontrar este {type}",
+    notebookLabel: "Cuaderno: {{name}}",
+    itemNotFound: "No se pudo encontrar este {{type}}",
     accessibility: {
       transformationViews: "Vistas de transformación",
       searchKB: "Pregunta o busca en tu base de conocimiento",
@@ -231,12 +231,12 @@ export const esES = {
     archive: "Archivar",
     unarchive: "Desarchivar",
     deleteNotebook: "Eliminar cuaderno",
-    deleteNotebookDesc: "¿Estás seguro de que quieres eliminar \"{name}\"? Esta acción no se puede deshacer.",
+    deleteNotebookDesc: "¿Estás seguro de que quieres eliminar \"{{name}}\"? Esta acción no se puede deshacer.",
     deleteNotebookLoading: "Cargando vista previa de eliminación...",
-    deleteNotebookNotes: "{count} nota(s) serán eliminadas permanentemente.",
+    deleteNotebookNotes: "{{count}} nota(s) serán eliminadas permanentemente.",
     deleteNotebookNoNotes: "No hay notas que eliminar.",
-    deleteNotebookExclusiveSources: "{count} fuente(s) existen solo en este cuaderno.",
-    deleteNotebookSharedSources: "{count} fuente(s) son compartidas con otros cuadernos y serán desvinculadas.",
+    deleteNotebookExclusiveSources: "{{count}} fuente(s) existen solo en este cuaderno.",
+    deleteNotebookSharedSources: "{{count}} fuente(s) son compartidas con otros cuadernos y serán desvinculadas.",
     deleteNotebookNoSources: "No hay fuentes en este cuaderno.",
     deleteExclusiveSourcesLabel: "Eliminar fuentes exclusivas",
     keepExclusiveSourcesLabel: "Desvincular y conservarlas",
@@ -304,7 +304,7 @@ export const esES = {
     createFirstSource: "Agrega tu primera fuente para comenzar a construir tu base de conocimiento.",
     deleteSourceConfirm: "¿Estás seguro de que quieres eliminar esta fuente?",
     deleteConfirm: "¿Estás seguro de que quieres eliminar esto?",
-    deleteConfirmWithTitle: "¿Estás seguro de que quieres eliminar \"{title}\"?",
+    deleteConfirmWithTitle: "¿Estás seguro de que quieres eliminar \"{{title}}\"?",
     deleteSuccess: "Fuente eliminada exitosamente. Nota: Para eliminar el archivo del almacenamiento, debes habilitar la opción \"eliminar archivo\" en la página de configuración.",
     failedToDelete: "Error al eliminar la fuente",
     sourceQueued: "Fuente en cola",
@@ -320,16 +320,16 @@ export const esES = {
     sourceRequeued: "Reintento de fuente en cola",
     sourceRequeuedDesc: "La fuente ha sido puesta de nuevo en cola para procesamiento.",
     failedToRetry: "Error en el reintento",
-    sourcesAddedToNotebook: "{count} fuente(s) agregadas al cuaderno",
+    sourcesAddedToNotebook: "{{count}} fuente(s) agregadas al cuaderno",
     failedToAddSourcesToNotebook: "Error al agregar fuentes al cuaderno",
-    partialAddSuccess: "{success} fuente(s) agregadas, {failed} fallaron",
+    partialAddSuccess: "{{success}} fuente(s) agregadas, {{failed}} fallaron",
     sourceRemovedFromNotebook: "Fuente eliminada del cuaderno exitosamente",
     failedToRemoveSourceFromNotebook: "Error al eliminar la fuente del cuaderno",
     removeConfirm: "¿Estás seguro de que quieres quitar esto del cuaderno?",
     checking: "Verificando...",
     untitledSource: "Fuente sin título",
-    maxItems: "máx. {count}",
-    insightsCount: "{count} análisis",
+    maxItems: "máx. {{count}}",
+    insightsCount: "{{count}} análisis",
     details: "Detalles",
     detailsTitle: "Detalles de la fuente",
     content: "Contenido",
@@ -371,7 +371,7 @@ export const esES = {
     enterUrlsPlaceholder: "Ingresa URLs, una por línea\nhttps://ejemplo.com/articulo1\nhttps://ejemplo.com/articulo2",
     batchUrlHint: "Pega múltiples URLs (una por línea) para importar por lotes",
     invalidUrlsDetected: "URLs inválidas detectadas:",
-    lineLabel: "Línea {line}",
+    lineLabel: "Línea {{line}}",
     fixInvalidUrls: "Por favor, corrige o elimina las URLs inválidas para continuar",
     selectMultipleFilesHint: "Selecciona múltiples archivos para importar por lotes. Soportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimedia (MP4, MP3, WAV, M4A), Imágenes (JPG, PNG), Archivos comprimidos (ZIP)",
     selectedFiles: "Archivos seleccionados:",
@@ -380,8 +380,8 @@ export const esES = {
     titlePlaceholder: "Dale a tu fuente un título descriptivo",
     batchTitlesAuto: "Los títulos se generarán automáticamente para cada fuente.",
     batchCommonSettings: "Los mismos cuadernos y transformaciones se aplicarán a todos los elementos.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} archivo(s)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} archivo(s)",
     addSource: "Agregar fuente",
     notEmbeddedAlert: "Contenido no embebido",
     notEmbeddedDesc: "Este contenido no ha sido embebido para búsqueda vectorial. El embedding permite capacidades de búsqueda avanzada y mejor descubrimiento de contenido.",
@@ -404,8 +404,8 @@ export const esES = {
     searchPlaceholder: "Buscar fuentes por nombre o URL...",
     noNotebooksFound: "No se encontraron cuadernos.",
     showingFirst100: "Mostrando las primeras 100 fuentes. Usa la búsqueda para encontrar una específica.",
-    selectedCount: "{count} fuentes seleccionadas",
-    added: "Agregado el {date}",
+    selectedCount: "{{count}} fuentes seleccionadas",
+    added: "Agregado el {{date}}",
     addUrl: "Agregar URL",
     uploadFile: "Subir archivo",
     enterText: "Ingresar texto",
@@ -413,7 +413,7 @@ export const esES = {
     processingFiles: "Procesando tus archivos...",
     titleRequired: "Se requiere un título para el contenido de texto",
     titleGenerated: "Si se deja vacío, se generará un título a partir del contenido",
-    batchCount: "{count} {type} serán procesados",
+    batchCount: "{{count}} {{type}} serán procesados",
     enableEmbedding: "Habilitar embedding para búsqueda",
     embeddingDesc: "Permite que esta fuente sea encontrada en búsquedas vectoriales y consultas de IA",
     embeddingAlways: "Embedding habilitado automáticamente",
@@ -426,13 +426,13 @@ export const esES = {
     insightsDesc: "Análisis generados a partir del análisis del modelo",
     uploadedFile: "Archivo subido",
     fileUnavailableDesc: "Este archivo no está disponible actualmente por razones del sistema de almacenamiento.",
-    batchSuccess: "{count} fuente(s) creadas exitosamente",
-    batchFailed: "Error al crear las {count} fuentes",
-    batchPartial: "{success} exitosas, {failed} fallidas",
+    batchSuccess: "{{count}} fuente(s) creadas exitosamente",
+    batchFailed: "Error al crear las {{count}} fuentes",
+    batchPartial: "{{success}} exitosas, {{failed}} fallidas",
     submittingSource: "Enviando fuente para procesamiento...",
-    processingBatchSources: "Procesando {count} fuentes. Esto puede tomar unos momentos.",
+    processingBatchSources: "Procesando {{count}} fuentes. Esto puede tomar unos momentos.",
     processingSource: "Tu fuente está siendo procesada. Esto puede tomar unos momentos.",
-    maxFilesAllowed: "Máximo {count} archivos permitidos por lote",
+    maxFilesAllowed: "Máximo {{count}} archivos permitidos por lote",
   },
   chat: {
     sessions: "Sesiones",
@@ -442,17 +442,17 @@ export const esES = {
     deleteSessionDesc: "¿Estás seguro de que quieres eliminar esta sesión de chat? Esta acción no se puede deshacer.",
     sendPlaceholder: "Pregunta cualquier cosa sobre tus fuentes...",
     sessionsTitle: "Sesiones de chat",
-    chatWith: "Chat con {name}",
-    startConversation: "Inicia una conversación sobre este {type}",
+    chatWith: "Chat con {{name}}",
+    startConversation: "Inicia una conversación sobre este {{type}}",
     askQuestions: "Haz preguntas para entender mejor el contenido",
-    pressToSend: "Presiona {key} para enviar",
+    pressToSend: "Presiona {{key}} para enviar",
     model: "Modelo",
     createToStart: "Crea una sesión para comenzar.",
     chatWithNotebook: "Chat con cuaderno",
     unableToLoadChat: "No se pudo cargar el chat",
     noDescription: "Sin descripción",
     startByCreating: "Comienza creando tu primer cuaderno para organizar tu investigación.",
-    messagesCount: "{count} mensajes",
+    messagesCount: "{{count}} mensajes",
     sessionCreated: "Sesión de chat creada",
     sessionUpdated: "Sesión actualizada",
     sessionDeleted: "Sesión eliminada",
@@ -487,17 +487,17 @@ export const esES = {
     searchIn: "Buscar en",
     searchSources: "Buscar fuentes",
     searchNotes: "Buscar notas",
-    resultsFound: "{count} resultados encontrados",
-    matches: "Coincidencias ({count})",
-    noResultsFor: "No se encontraron resultados para \"{query}\"",
+    resultsFound: "{{count}} resultados encontrados",
+    matches: "Coincidencias ({{count}})",
+    noResultsFor: "No se encontraron resultados para \"{{query}}\"",
     notSet: "No configurado",
     saveToNotebook: "Guardar en cuaderno",
     saveSuccess: "Guardado exitosamente en el cuaderno",
     saveError: "Error al guardar en el cuaderno",
     selectNotebook: "Seleccionar cuaderno",
     searchAndAsk: "Buscar y preguntar",
-    searchResultsFor: "Resultados de búsqueda para \"{query}\"",
-    askAbout: "Preguntar sobre \"{query}\"",
+    searchResultsFor: "Resultados de búsqueda para \"{{query}}\"",
+    askAbout: "Preguntar sobre \"{{query}}\"",
     orSearchKb: "O busca en tu base de conocimiento",
     saving: "Guardando...",
     advancedModelTitle: "Selección avanzada de modelos",
@@ -516,9 +516,9 @@ export const esES = {
     generateEpisodeDesc: "Selecciona el contenido a incluir y configura los detalles del episodio antes de generar un nuevo episodio de podcast.",
     content: "Contenido",
     contentDesc: "Elige cuadernos, fuentes y notas para incluir en este episodio.",
-    itemsSelected: "{count} elementos seleccionados",
-    tokens: "{count} tokens",
-    chars: "{count} caracteres",
+    itemsSelected: "{{count}} elementos seleccionados",
+    tokens: "{{value}} tokens",
+    chars: "{{value}} caracteres",
     loadingNotebooks: "Cargando cuadernos...",
     noNotebooksFoundInPodcasts: "No se encontraron cuadernos. Crea un cuaderno y agrega contenido antes de generar un podcast.",
     noContentSelected: "No se seleccionó contenido",
@@ -535,7 +535,7 @@ export const esES = {
     instructionsPlaceholder: "Cualquier consejo adicional para agregar al briefing del episodio...",
     generating: "Generando...",
     generate: "Generar",
-    hostPlaceholder: "Presentador {number}",
+    hostPlaceholder: "Presentador {{number}}",
     profileRequired: "Perfil de episodio requerido",
     profileRequiredDesc: "Selecciona un perfil de episodio antes de generar un podcast.",
     nameRequired: "Nombre del episodio requerido",
@@ -605,8 +605,8 @@ export const esES = {
     noSpeakerProfiles: "Aún no hay perfiles de locutor. Crea uno para hacer disponibles los perfiles de episodio.",
     noDescription: "No se proporcionó descripción.",
     usedByCount_one: "Usado por 1 episodio",
-    usedByCount_other: "Usado por {count} episodios",
-    usedByCount: "Usado por {count} episodios",
+    usedByCount_other: "Usado por {{count}} episodios",
+    usedByCount: "Usado por {{count}} episodios",
     unused: "Sin usar",
     voiceId: "ID de voz",
     backstory: "Historia",
@@ -614,7 +614,7 @@ export const esES = {
     edit: "Editar",
     duplicate: "Duplicar",
     deleteSpeakerProfileTitle: "¿Eliminar perfil de locutor?",
-    deleteSpeakerProfileDesc: "Eliminar \"{name}\" no se puede deshacer.",
+    deleteSpeakerProfileDesc: "Eliminar \"{{name}}\" no se puede deshacer.",
     deleteSpeakerDisabledHint: "Quita este locutor de los perfiles de episodio antes de eliminarlo.",
     deleting: "Eliminando…",
     episodeProfilesTitle: "Perfiles de episodio",
@@ -639,7 +639,7 @@ export const esES = {
     failedToStartGeneration: "Error al iniciar la generación",
     tryAgainMoment: "Por favor, intenta de nuevo en un momento.",
     deleteProfileTitle: "¿Eliminar perfil?",
-    deleteProfileDesc: "Esto eliminará \"{name}\". Los episodios existentes conservan sus datos, pero los nuevos ya no usarán esta configuración.",
+    deleteProfileDesc: "Esto eliminará \"{{name}}\". Los episodios existentes conservan sus datos, pero los nuevos ya no usarán esta configuración.",
     profileCreated: "Perfil creado",
     profileCreatedDesc: "El perfil de episodio \"{name}\" ha sido creado exitosamente.",
     failedToCreateProfile: "Error al crear el perfil",
@@ -661,7 +661,7 @@ export const esES = {
     transcriptModel: "Modelo de transcripción",
     segments: "Segmentos",
     defaultBriefingTitle: "Briefing predeterminado",
-    created: "Creado el {time}",
+    created: "Creado el {{time}}",
     details: "Detalles",
     summaryTab: "Resumen",
     outlineTab: "Esquema",
@@ -670,7 +670,7 @@ export const esES = {
     noOutline: "No hay esquema disponible.",
     noTranscript: "No hay transcripción disponible.",
     deleteEpisodeTitle: "¿Eliminar episodio?",
-    deleteEpisodeDesc: "Esto eliminará \"{name}\" y su archivo de audio permanentemente.",
+    deleteEpisodeDesc: "Esto eliminará \"{{name}}\" y su archivo de audio permanentemente.",
     audioUnavailable: "Audio no disponible",
     segment: "Segmento",
     speaker: "Locutor",
@@ -698,7 +698,7 @@ export const esES = {
     speakers: "Locutores",
     speakersDesc: "Configura entre una y cuatro voces para este perfil.",
     addSpeaker: "Agregar locutor",
-    speakerNumber: "Locutor {number}",
+    speakerNumber: "Locutor {{number}}",
     backstoryPlaceholder: "Breve biografía o contexto del locutor",
     personalityPlaceholder: "Describe el estilo y tono",
     outlineModelRequired: "El modelo de esquema es obligatorio",
@@ -774,7 +774,7 @@ export const esES = {
     currentVersion: "Versión actual",
     latestVersion: "Última versión",
     status: "Estado",
-    updateAvailable: "Versión {version} disponible",
+    updateAvailable: "Versión {{version}} disponible",
     updateAvailableDesc: "Una nueva versión de Open Notebook está disponible.",
     upToDate: "Actualizado",
     unknown: "Desconocido",
@@ -796,8 +796,8 @@ export const esES = {
       failed: "Fallido",
       leavePageHint: "Puedes salir de esta página ya que se ejecutará en segundo plano",
       startNew: "Iniciar nueva reconstrucción",
-      itemsProcessed: "{processed}/{total} trabajos enviados ({percent}%)",
-      failedItems: "{count} trabajos fallaron al enviarse",
+      itemsProcessed: "{{processed}}/{{total}} trabajos enviados ({{percent}}%)",
+      failedItems: "{{count}} trabajos fallaron al enviarse",
       time: "Tiempo",
       whenToRebuild: "¿Cuándo debo reconstruir los embeddings?",
       whenToRebuildAns: "Debes reconstruir al cambiar modelos, actualizar versiones, corregir corrupción o después de importaciones masivas.",
@@ -840,7 +840,7 @@ export const esES = {
     model: "Modelo",
     systemPrompt: "Prompt del sistema",
     overrideModelDesc: "Anula el modelo predeterminado para esta sesión de chat. Déjalo vacío para usar el predeterminado del sistema.",
-    sessionUseReplacement: "Esta sesión usará {name} en lugar del modelo predeterminado.",
+    sessionUseReplacement: "Esta sesión usará {{name}} en lugar del modelo predeterminado.",
     systemDefault: "Predeterminado del sistema",
   },
   models: {
@@ -858,7 +858,7 @@ export const esES = {
     deleteModel: "Eliminar modelo",
     defaultAssignments: "Asignaciones de modelos predeterminados",
     defaultAssignmentsDesc: "Configura qué modelos usar para diferentes propósitos en Open Notebook",
-    missingRequiredModels: "Faltan modelos requeridos: {models}. Open Notebook puede no funcionar correctamente sin estos.",
+    missingRequiredModels: "Faltan modelos requeridos: {{models}}. Open Notebook puede no funcionar correctamente sin estos.",
     selectModelPlaceholder: "Seleccionar un modelo",
     requiredModelPlaceholder: "⚠️ Requerido - Seleccionar un modelo",
     chatModelLabel: "Modelo de chat",
@@ -876,7 +876,7 @@ export const esES = {
     sttModelLabel: "Modelo de voz a texto",
     sttModelDesc: "Usado para transcripción de audio",
     embeddingChangeTitle: "Cambio de modelo de embedding",
-    embeddingChangeConfirm: "Estás a punto de cambiar tu modelo de embedding de {from} a {to}.",
+    embeddingChangeConfirm: "Estás a punto de cambiar tu modelo de embedding de {{from}} a {{to}}.",
     rebuildRequired: "Importante: Reconstrucción requerida",
     rebuildReason: "Cambiar tu modelo de embedding requiere reconstruir todos los embeddings existentes para mantener la consistencia. Sin reconstruir, tus búsquedas pueden devolver resultados incorrectos o incompletos.",
     whatHappensNext: "Qué pasa después:",
@@ -889,14 +889,14 @@ export const esES = {
     changeAndRebuild: "Cambiar e ir a reconstruir",
     autoAssign: "Auto-asignar predeterminados",
     autoAssigning: "Asignando...",
-    autoAssignSuccess: "{count} modelos predeterminados asignados automáticamente",
+    autoAssignSuccess: "{{count}} modelos predeterminados asignados automáticamente",
     autoAssignNoModels: "No hay modelos disponibles para asignar. Por favor, sincroniza modelos primero.",
     autoAssignAlreadySet: "Todos los modelos predeterminados ya están configurados",
     testModel: "Probar modelo",
     testModelSuccess: "Prueba de modelo exitosa",
     testModelFailed: "Prueba de modelo fallida",
     searchOrAddModel: "Buscar o escribir nombre del modelo...",
-    addCustomModel: "Agregar \"{name}\"",
+    addCustomModel: "Agregar \"{{name}}\"",
   },
   apiKeys: {
     title: "Configura tu IA con tus propias claves API",
@@ -906,19 +906,19 @@ export const esES = {
     configured: "Configurado",
     notConfigured: "No configurado",
     migrationAvailable: "Variables de entorno detectadas",
-    migrationDescription: "{count} clave(s) API están configuradas vía variables de entorno y pueden migrarse a la base de datos para una gestión más fácil.",
+    migrationDescription: "{{count}} clave(s) API están configuradas vía variables de entorno y pueden migrarse a la base de datos para una gestión más fácil.",
     migrateToDatabase: "Migrar a la base de datos",
     migrating: "Migrando...",
-    migrationSuccess: "{count} clave(s) API migradas exitosamente",
-    migrationErrors: "{count} clave(s) fallaron al migrar",
+    migrationSuccess: "{{count}} clave(s) API migradas exitosamente",
+    migrationErrors: "{{count}} clave(s) fallaron al migrar",
     migrationNothingToMigrate: "Todas las claves ya están en la base de datos",
     learnMore: "Aprende cómo configurar claves API →",
     testConnection: "Probar conexión",
     testSuccess: "Conexión exitosa",
     testFailed: "La prueba de conexión falló",
     syncModels: "Sincronizar modelos",
-    syncSuccess: "Se descubrieron {discovered} modelos, se agregaron {new} nuevos",
-    syncNoNew: "Se descubrieron {count} modelos, todos ya registrados",
+    syncSuccess: "Se descubrieron {{discovered}} modelos, se agregaron {{new}} nuevos",
+    syncNoNew: "Se descubrieron {{count}} modelos, todos ya registrados",
     syncFailed: "Error al sincronizar modelos",
     getApiKey: "Obtener clave API",
     vertexProject: "ID de proyecto GCP",
@@ -933,7 +933,7 @@ export const esES = {
     baseUrlOverrideHint: "Solo cambia esto si necesitas anular el endpoint API predeterminado del proveedor.",
     numCtx: "Ventana de Contexto (num_ctx)",
     numCtxHint: "Ventana de contexto máxima para modelos Ollama. Déjalo vacío para usar el valor predeterminado (8192). Auméntalo solo si tu hardware admite una ventana mayor.",
-    deleteConfigConfirm: "¿Estás seguro de que quieres eliminar '{name}'? Esto no se puede deshacer.",
+    deleteConfigConfirm: "¿Estás seguro de que quieres eliminar '{{name}}'? Esto no se puede deshacer.",
     configSaveSuccess: "Configuración guardada exitosamente",
     configUpdateSuccess: "Configuración actualizada exitosamente",
     configDeleteSuccess: "Configuración eliminada exitosamente",
@@ -945,7 +945,7 @@ export const esES = {
     encryptionRequired: "Clave de encriptación no configurada",
     encryptionRequiredDescription: "Establece la variable de entorno OPEN_NOTEBOOK_ENCRYPTION_KEY para habilitar el almacenamiento seguro de credenciales.",
     migrationAvailable: "Migración de claves API disponible",
-    migrationDescription: "{count} proveedor(es) tienen claves API configuradas vía variables de entorno. Mígralas a la base de datos para una gestión más fácil.",
+    migrationDescription: "{{count}} proveedor(es) tienen claves API configuradas vía variables de entorno. Mígralas a la base de datos para una gestión más fácil.",
     goToSettings: "Ir a configuración",
     viewDocs: "Ver documentación",
   },
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index f1d897ff..06d639df 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -63,8 +63,8 @@ export const frFR = {
     optional: "Optionnel",
     type: "Type",
     title: "Titre",
-    created: "Créé à {time}",
-    updated: "Mis à jour à {time}",
+    created: "Créé à {{time}}",
+    updated: "Mis à jour à {{time}}",
     actions: "Actions",
     noResults: "Aucun résultat",
     references: "Références",
@@ -107,10 +107,10 @@ export const frFR = {
     reasoning: "Raisonnement",
     searchTerms: "Termes de recherche",
     strategy: "Stratégie",
-    individualAnswers: "Réponses individuelles ({count})",
+    individualAnswers: "Réponses individuelles ({{count}})",
     finalAnswer: "Réponse finale",
-    notebookLabel: "Carnet : {name}",
-    itemNotFound: "Ce {type} est introuvable",
+    notebookLabel: "Carnet : {{name}}",
+    itemNotFound: "Ce {{type}} est introuvable",
     accessibility: {
       transformationViews: "Vues de transformation",
       searchKB: "Interroger ou fouiller votre base de connaissances",
@@ -231,12 +231,12 @@ export const frFR = {
     archive: "Archiver",
     unarchive: "Désarchiver",
     deleteNotebook: "Supprimer le carnet",
-    deleteNotebookDesc: "Êtes-vous sûr de vouloir supprimer \"{name}\" ? Cette action est irréversible.",
+    deleteNotebookDesc: "Êtes-vous sûr de vouloir supprimer \"{{name}}\" ? Cette action est irréversible.",
     deleteNotebookLoading: "Chargement de l'aperçu de suppression...",
-    deleteNotebookNotes: "{count} note(s) seront supprimées définitivement.",
+    deleteNotebookNotes: "{{count}} note(s) seront supprimées définitivement.",
     deleteNotebookNoNotes: "Aucune note à supprimer.",
-    deleteNotebookExclusiveSources: "{count} source(s) existent uniquement dans ce carnet.",
-    deleteNotebookSharedSources: "{count} source(s) sont partagées avec d'autres carnets et seront déliées.",
+    deleteNotebookExclusiveSources: "{{count}} source(s) existent uniquement dans ce carnet.",
+    deleteNotebookSharedSources: "{{count}} source(s) sont partagées avec d'autres carnets et seront déliées.",
     deleteNotebookNoSources: "Aucune source dans ce carnet.",
     deleteExclusiveSourcesLabel: "Supprimer les sources exclusives",
     keepExclusiveSourcesLabel: "Délier et les conserver",
@@ -304,7 +304,7 @@ export const frFR = {
     createFirstSource: "Ajoutez votre première source pour commencer à bâtir votre base de connaissances.",
     deleteSourceConfirm: "Êtes-vous sûr de vouloir supprimer cette source ?",
     deleteConfirm: "Êtes-vous sûr de vouloir supprimer cet élément ?",
-    deleteConfirmWithTitle: "Êtes-vous sûr de vouloir supprimer \"{title}\" ?",
+    deleteConfirmWithTitle: "Êtes-vous sûr de vouloir supprimer \"{{title}}\" ?",
     deleteSuccess: "Source supprimée avec succès. Note : Pour supprimer le fichier du stockage, vous devez activer l'option \"supprimer le fichier\" dans la page des paramètres.",
     failedToDelete: "Échec de la suppression de la source",
     sourceQueued: "Source mise en attente",
@@ -320,16 +320,16 @@ export const frFR = {
     sourceRequeued: "Nouvelle tentative de traitement mise en attente",
     sourceRequeuedDesc: "La source a été remise en file d'attente pour traitement.",
     failedToRetry: "Échec de la tentative",
-    sourcesAddedToNotebook: "{count} source(s) ajoutée(s) au carnet",
+    sourcesAddedToNotebook: "{{count}} source(s) ajoutée(s) au carnet",
     failedToAddSourcesToNotebook: "Échec de l'ajout des sources au carnet",
-    partialAddSuccess: "{success} source(s) ajoutée(s), {failed} échouée(s)",
+    partialAddSuccess: "{{success}} source(s) ajoutée(s), {{failed}} échouée(s)",
     sourceRemovedFromNotebook: "Source retirée du carnet avec succès",
     failedToRemoveSourceFromNotebook: "Échec du retrait de la source du carnet",
     removeConfirm: "Êtes-vous sûr de vouloir retirer cet élément du carnet ?",
     checking: "Vérification...",
     untitledSource: "Source sans titre",
-    maxItems: "max {count}",
-    insightsCount: "{count} aperçus",
+    maxItems: "max {{count}}",
+    insightsCount: "{{count}} aperçus",
     details: "Détails",
     detailsTitle: "Détails de la source",
     content: "Contenu",
@@ -371,7 +371,7 @@ export const frFR = {
     enterUrlsPlaceholder: "Entrez les URL, une par ligne\nhttps://exemple.com/article1\nhttps://exemple.com/article2",
     batchUrlHint: "Collez plusieurs URL (une par ligne) pour une importation groupée",
     invalidUrlsDetected: "URL invalides détectées :",
-    lineLabel: "Ligne {line}",
+    lineLabel: "Ligne {{line}}",
     fixInvalidUrls: "Veuillez corriger ou supprimer les URL invalides pour continuer",
     selectMultipleFilesHint: "Sélectionnez plusieurs fichiers pour une importation groupée. Supportés : Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Média (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
     selectedFiles: "Fichiers sélectionnés :",
@@ -380,8 +380,8 @@ export const frFR = {
     titlePlaceholder: "Donnez un titre descriptif à votre source",
     batchTitlesAuto: "Les titres seront générés automatiquement pour chaque source.",
     batchCommonSettings: "Les mêmes carnets et transformations seront appliqués à tous les éléments.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} fichier(s)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} fichier(s)",
     addSource: "Ajouter la source",
     notEmbeddedAlert: "Contenu non indexé",
     notEmbeddedDesc: "Ce contenu n'a pas été indexé pour la recherche vectorielle. L'indexation permet des capacités de recherche avancées et une meilleure découverte de contenu.",
@@ -404,8 +404,8 @@ export const frFR = {
     searchPlaceholder: "Rechercher des sources par nom ou URL...",
     noNotebooksFound: "Aucun carnet trouvé.",
     showingFirst100: "Affichage des 100 premières sources. Utilisez la recherche pour en trouver des spécifiques.",
-    selectedCount: "{count} sources sélectionnées",
-    added: "Ajouté le {date}",
+    selectedCount: "{{count}} sources sélectionnées",
+    added: "Ajouté le {{date}}",
     addUrl: "Ajouter une URL",
     uploadFile: "Télécharger un fichier",
     enterText: "Saisir du texte",
@@ -413,7 +413,7 @@ export const frFR = {
     processingFiles: "Traitement de vos fichiers...",
     titleRequired: "Un titre est requis pour le contenu textuel",
     titleGenerated: "Si laissé vide, un titre sera généré à partir du contenu",
-    batchCount: "{count} {type} seront traités",
+    batchCount: "{{count}} {{type}} seront traités",
     enableEmbedding: "Activer l'indexation pour la recherche",
     embeddingDesc: "Permet à cette source d'être trouvée dans les recherches vectorielles et les requêtes IA",
     embeddingAlways: "Indexation activée automatiquement",
@@ -426,13 +426,13 @@ export const frFR = {
     insightsDesc: "Aperçus générés par l'analyse du modèle",
     uploadedFile: "Fichier téléchargé",
     fileUnavailableDesc: "Ce fichier est actuellement indisponible pour des raisons liées au système de stockage.",
-    batchSuccess: "{count} source(s) créée(s) avec succès",
-    batchFailed: "Échec de la création des {count} sources",
-    batchPartial: "{success} réussies, {failed} échouées",
+    batchSuccess: "{{count}} source(s) créée(s) avec succès",
+    batchFailed: "Échec de la création des {{count}} sources",
+    batchPartial: "{{success}} réussies, {{failed}} échouées",
     submittingSource: "Soumission de la source pour traitement...",
-    processingBatchSources: "Traitement de {count} sources. Cela peut prendre quelques instants.",
+    processingBatchSources: "Traitement de {{count}} sources. Cela peut prendre quelques instants.",
     processingSource: "Votre source est en cours de traitement. Cela peut prendre quelques instants.",
-    maxFilesAllowed: "Maximum {count} fichiers autorisés par lot",
+    maxFilesAllowed: "Maximum {{count}} fichiers autorisés par lot",
   },
   chat: {
     sessions: "Sessions",
@@ -442,17 +442,17 @@ export const frFR = {
     deleteSessionDesc: "Êtes-vous sûr de vouloir supprimer cette session de chat ? Cette action est irréversible.",
     sendPlaceholder: "Posez n'importe quelle question sur vos sources...",
     sessionsTitle: "Sessions de Chat",
-    chatWith: "Discuter avec {name}",
-    startConversation: "Commencer une conversation sur ce {type}",
+    chatWith: "Discuter avec {{name}}",
+    startConversation: "Commencer une conversation sur ce {{type}}",
     askQuestions: "Posez des questions pour mieux comprendre le contenu",
-    pressToSend: "Appuyez sur {key} pour envoyer",
+    pressToSend: "Appuyez sur {{key}} pour envoyer",
     model: "Modèle",
     createToStart: "Créez une session pour commencer.",
     chatWithNotebook: "Discuter avec le Carnet",
     unableToLoadChat: "Impossible de charger le chat",
     noDescription: "Aucune description",
     startByCreating: "Commencez par créer votre premier carnet pour organiser vos recherches.",
-    messagesCount: "{count} messages",
+    messagesCount: "{{count}} messages",
     sessionCreated: "Session de chat créée",
     sessionUpdated: "Session mise à jour",
     sessionDeleted: "Session supprimée",
@@ -487,17 +487,17 @@ export const frFR = {
     searchIn: "Rechercher dans",
     searchSources: "Rechercher dans les Sources",
     searchNotes: "Rechercher dans les Notes",
-    resultsFound: "{count} résultats trouvés",
-    matches: "Correspondances ({count})",
-    noResultsFor: "Aucun résultat trouvé pour “{query}”",
+    resultsFound: "{{count}} résultats trouvés",
+    matches: "Correspondances ({{count}})",
+    noResultsFor: "Aucun résultat trouvé pour “{{query}}”",
     notSet: "Non défini",
     saveToNotebook: "Enregistrer dans le Carnet",
     saveSuccess: "Enregistré avec succès dans le carnet",
     saveError: "Échec de l'enregistrement dans le carnet",
     selectNotebook: "Sélectionner un carnet",
     searchAndAsk: "Rechercher & Demander",
-    searchResultsFor: "Résultats de recherche pour “{query}”",
-    askAbout: "Poser une question sur “{query}”",
+    searchResultsFor: "Résultats de recherche pour “{{query}}”",
+    askAbout: "Poser une question sur “{{query}}”",
     orSearchKb: "Ou rechercher dans votre base de connaissances",
     saving: "Enregistrement...",
     advancedModelTitle: "Sélection de modèle avancée",
@@ -516,9 +516,9 @@ export const frFR = {
     generateEpisodeDesc: "Sélectionnez le contenu à inclure et configurez les détails de l'épisode avant de générer un nouvel épisode de podcast.",
     content: "Contenu",
     contentDesc: "Choisissez les carnets, sources et notes à inclure dans cet épisode.",
-    itemsSelected: "{count} éléments sélectionnés",
-    tokens: "{count} tokens",
-    chars: "{count} caractères",
+    itemsSelected: "{{count}} éléments sélectionnés",
+    tokens: "{{value}} tokens",
+    chars: "{{value}} caractères",
     loadingNotebooks: "Chargement des carnets...",
     noNotebooksFoundInPodcasts: "Aucun carnet trouvé. Créez un carnet et ajoutez du contenu avant de générer un podcast.",
     noContentSelected: "Aucun contenu sélectionné",
@@ -535,7 +535,7 @@ export const frFR = {
     instructionsPlaceholder: "Tout conseil supplémentaire à ajouter au briefing de l'épisode...",
     generating: "Génération...",
     generate: "Générer",
-    hostPlaceholder: "Hôte {number}",
+    hostPlaceholder: "Hôte {{number}}",
     profileRequired: "Profil d'épisode requis",
     profileRequiredDesc: "Sélectionnez un profil d'épisode avant de générer un podcast.",
     nameRequired: "Nom de l'épisode requis",
@@ -605,8 +605,8 @@ export const frFR = {
     noSpeakerProfiles: "Aucun profil d'intervenant. Créez-en un pour activer les profils d'épisodes.",
     noDescription: "Aucune description fournie.",
     usedByCount_one: "Utilisé par 1 épisode",
-    usedByCount_other: "Utilisé par {count} épisodes",
-    usedByCount: "Utilisé par {count} épisodes",
+    usedByCount_other: "Utilisé par {{count}} épisodes",
+    usedByCount: "Utilisé par {{count}} épisodes",
     unused: "Inutilisé",
     voiceId: "ID de la voix",
     backstory: "Histoire (Backstory)",
@@ -614,7 +614,7 @@ export const frFR = {
     edit: "Modifier",
     duplicate: "Dupliquer",
     deleteSpeakerProfileTitle: "Supprimer le profil de l'intervenant ?",
-    deleteSpeakerProfileDesc: "La suppression de “{name}” est irréversible.",
+    deleteSpeakerProfileDesc: "La suppression de “{{name}}” est irréversible.",
     deleteSpeakerDisabledHint: "Retirez cet intervenant des profils d'épisode avant de le supprimer.",
     deleting: "Suppression…",
     episodeProfilesTitle: "Profils d'épisode",
@@ -639,7 +639,7 @@ export const frFR = {
     failedToStartGeneration: "Échec du démarrage de la génération",
     tryAgainMoment: "Veuillez réessayer dans un instant.",
     deleteProfileTitle: "Supprimer le profil ?",
-    deleteProfileDesc: "Ceci supprimera “{name}”. Les épisodes existants conservent leurs données, mais les nouveaux ne pourront plus utiliser cette configuration.",
+    deleteProfileDesc: "Ceci supprimera “{{name}}”. Les épisodes existants conservent leurs données, mais les nouveaux ne pourront plus utiliser cette configuration.",
     profileCreated: "Profil créé",
     profileCreatedDesc: "Le profil d'épisode \"{name}\" a été créé avec succès.",
     failedToCreateProfile: "Échec de la création du profil",
@@ -661,7 +661,7 @@ export const frFR = {
     transcriptModel: "Modèle de transcription",
     segments: "Segments",
     defaultBriefingTitle: "Briefing par défaut",
-    created: "Créé à {time}",
+    created: "Créé à {{time}}",
     details: "Détails",
     summaryTab: "Résumé",
     outlineTab: "Plan",
@@ -670,7 +670,7 @@ export const frFR = {
     noOutline: "Aucun plan disponible.",
     noTranscript: "Aucune transcription disponible.",
     deleteEpisodeTitle: "Supprimer l'épisode ?",
-    deleteEpisodeDesc: "Ceci supprimera définitivement “{name}” et son fichier audio.",
+    deleteEpisodeDesc: "Ceci supprimera définitivement “{{name}}” et son fichier audio.",
     audioUnavailable: "Audio indisponible",
     segment: "Segment",
     speaker: "Intervenant",
@@ -698,7 +698,7 @@ export const frFR = {
     speakers: "Intervenants",
     speakersDesc: "Configurez entre un et quatre intervenants pour ce profil.",
     addSpeaker: "Ajouter un intervenant",
-    speakerNumber: "Intervenant {number}",
+    speakerNumber: "Intervenant {{number}}",
     backstoryPlaceholder: "Courte biographie ou contexte de l'intervenant",
     personalityPlaceholder: "Décrivez le style et le ton",
     outlineModelRequired: "Le modèle du plan est requis",
@@ -773,7 +773,7 @@ export const frFR = {
     currentVersion: "Version actuelle",
     latestVersion: "Dernière version",
     status: "État",
-    updateAvailable: "Version {version} disponible",
+    updateAvailable: "Version {{version}} disponible",
     updateAvailableDesc: "Une nouvelle version de Open Notebook est disponible.",
     upToDate: "À jour",
     unknown: "Inconnu",
@@ -795,8 +795,8 @@ export const frFR = {
       failed: "Échoué",
       leavePageHint: "Vous pouvez quitter cette page, car l'opération s'exécute en arrière-plan",
       startNew: "Lancer une nouvelle reconstruction",
-      itemsProcessed: "{processed}/{total} éléments ({percent}%)",
-      failedItems: "{count} éléments n'ont pas pu être traités",
+      itemsProcessed: "{{processed}}/{{total}} éléments ({{percent}}%)",
+      failedItems: "{{count}} éléments n'ont pas pu être traités",
       time: "Temps",
       whenToRebuild: "Quand dois-je reconstruire les embeddings ?",
       whenToRebuildAns: "Vous devriez reconstruire lors d'un changement de modèle, d'une mise à jour de version, pour corriger une corruption de données ou après des imports massifs.",
@@ -839,7 +839,7 @@ export const frFR = {
     model: "Modèle",
     systemPrompt: "Prompt Système",
     overrideModelDesc: "Remplacer le modèle par défaut pour cette session de chat. Laissez vide pour utiliser le modèle par défaut du système.",
-    sessionUseReplacement: "Cette session utilisera {name} au lieu du modèle par défaut.",
+    sessionUseReplacement: "Cette session utilisera {{name}} au lieu du modèle par défaut.",
     systemDefault: "Défaut Système",
   },
   models: {
@@ -857,7 +857,7 @@ export const frFR = {
     deleteModel: "Supprimer le modèle",
     defaultAssignments: "Attributions des modèles par défaut",
     defaultAssignmentsDesc: "Configurez quels modèles utiliser pour les différents usages d'Open Notebook",
-    missingRequiredModels: "Modèles requis manquants : {models}. Open Notebook pourrait ne pas fonctionner correctement sans eux.",
+    missingRequiredModels: "Modèles requis manquants : {{models}}. Open Notebook pourrait ne pas fonctionner correctement sans eux.",
     selectModelPlaceholder: "Sélectionnez un modèle",
     requiredModelPlaceholder: "⚠️ Requis - Sélectionnez un modèle",
     chatModelLabel: "Modèle de Chat",
@@ -875,7 +875,7 @@ export const frFR = {
     sttModelLabel: "Modèle de Transcription Vocale (STT)",
     sttModelDesc: "Utilisé pour la transcription audio",
     embeddingChangeTitle: "Changement de modèle d'embedding",
-    embeddingChangeConfirm: "Vous êtes sur le point de changer votre modèle d'embedding de {from} à {to}.",
+    embeddingChangeConfirm: "Vous êtes sur le point de changer votre modèle d'embedding de {{from}} à {{to}}.",
     rebuildRequired: "Important : Reconstruction requise",
     rebuildReason: "Changer votre modèle d'embedding nécessite de reconstruire tous les index existants pour maintenir la cohérence. Sans cela, vos recherches pourraient retourner des résultats incorrects ou incomplets.",
     whatHappensNext: "Que se passe-t-il ensuite :",
@@ -888,14 +888,14 @@ export const frFR = {
     changeAndRebuild: "Changer & Aller à la reconstruction",
     autoAssign: "Attribution automatique des défauts",
     autoAssigning: "Attribution en cours...",
-    autoAssignSuccess: "{count} modèles par défaut attribués automatiquement",
+    autoAssignSuccess: "{{count}} modèles par défaut attribués automatiquement",
     autoAssignNoModels: "Aucun modèle disponible à attribuer. Veuillez d'abord synchroniser les modèles.",
     autoAssignAlreadySet: "Tous les modèles par défaut sont déjà configurés",
     testModel: "Tester le modèle",
     testModelSuccess: "Test du modèle réussi",
     testModelFailed: "Test du modèle échoué",
     searchOrAddModel: "Rechercher ou saisir un nom de modèle...",
-    addCustomModel: "Ajouter \"{name}\"",
+    addCustomModel: "Ajouter \"{{name}}\"",
   },
   apiKeys: {
     title: "Configurez votre IA avec vos propres clés API",
@@ -905,19 +905,19 @@ export const frFR = {
     configured: "Configuré",
     notConfigured: "Non configuré",
     migrationAvailable: "Variables d'environnement détectées",
-    migrationDescription: "{count} clé(s) API sont configurées via des variables d'environnement et peuvent être migrées vers la base de données pour une gestion plus facile.",
+    migrationDescription: "{{count}} clé(s) API sont configurées via des variables d'environnement et peuvent être migrées vers la base de données pour une gestion plus facile.",
     migrateToDatabase: "Migrer vers la base de données",
     migrating: "Migration en cours...",
-    migrationSuccess: "{count} clé(s) API migrée(s) avec succès",
-    migrationErrors: "{count} clé(s) n'ont pas pu être migrée(s)",
+    migrationSuccess: "{{count}} clé(s) API migrée(s) avec succès",
+    migrationErrors: "{{count}} clé(s) n'ont pas pu être migrée(s)",
     migrationNothingToMigrate: "Toutes les clés sont déjà dans la base de données",
     learnMore: "Apprenez à configurer les clés API →",
     testConnection: "Tester la connexion",
     testSuccess: "Connexion réussie",
     testFailed: "Échec du test de connexion",
     syncModels: "Synchroniser les modèles",
-    syncSuccess: "{discovered} modèles découverts, {new} nouveaux ajoutés",
-    syncNoNew: "{count} modèles découverts, tous déjà enregistrés",
+    syncSuccess: "{{discovered}} modèles découverts, {{new}} nouveaux ajoutés",
+    syncNoNew: "{{count}} modèles découverts, tous déjà enregistrés",
     syncFailed: "Échec de la synchronisation des modèles",
     getApiKey: "Obtenir une clé API",
     vertexProject: "ID du projet GCP",
@@ -932,7 +932,7 @@ export const frFR = {
     baseUrlOverrideHint: "Ne modifiez ceci que si vous devez remplacer le point d'accès API par défaut du fournisseur.",
     numCtx: "Fenêtre de Contexte (num_ctx)",
     numCtxHint: "Fenêtre de contexte maximale pour les modèles Ollama. Laissez vide pour utiliser la valeur par défaut (8192). N'augmentez que si votre matériel peut gérer une fenêtre plus grande.",
-    deleteConfigConfirm: "Êtes-vous sûr de vouloir supprimer « {name} » ? Cette action est irréversible.",
+    deleteConfigConfirm: "Êtes-vous sûr de vouloir supprimer « {{name}} » ? Cette action est irréversible.",
     configSaveSuccess: "Configuration enregistrée avec succès",
     configUpdateSuccess: "Configuration mise à jour avec succès",
     configDeleteSuccess: "Configuration supprimée avec succès",
@@ -944,7 +944,7 @@ export const frFR = {
     encryptionRequired: "Clé de chiffrement non configurée",
     encryptionRequiredDescription: "Définissez la variable d'environnement OPEN_NOTEBOOK_ENCRYPTION_KEY pour activer le stockage sécurisé des identifiants.",
     migrationAvailable: "Migration des clés API disponible",
-    migrationDescription: "{count} fournisseur(s) ont des clés API définies via des variables d'environnement. Migrez-les vers la base de données pour une gestion plus facile.",
+    migrationDescription: "{{count}} fournisseur(s) ont des clés API définies via des variables d'environnement. Migrez-les vers la base de données pour une gestion plus facile.",
     goToSettings: "Aller aux paramètres",
     viewDocs: "Voir la documentation",
   },
diff --git a/frontend/src/lib/locales/index.test.ts b/frontend/src/lib/locales/index.test.ts
index 11d760df..5f714aa3 100644
--- a/frontend/src/lib/locales/index.test.ts
+++ b/frontend/src/lib/locales/index.test.ts
@@ -55,8 +55,13 @@ describe('Unused Key Detection', () => {
         .join('\n')
         .replace(/\?\./g, '.')
 
+      // Plural forms (key_one, key_other, …) are resolved by i18next from the
+      // base key passed to t(), so check the base key instead.
+      const pluralSuffix = /_(zero|one|two|few|many|other)$/
       const leafKeys = getKeys(enUS)
-      const unused = leafKeys.filter(key => !corpus.includes(key))
+      const unused = leafKeys.filter(
+        key => !corpus.includes(key.replace(pluralSuffix, '')),
+      )
 
       expect(
         unused,
diff --git a/frontend/src/lib/locales/interpolation.test.ts b/frontend/src/lib/locales/interpolation.test.ts
new file mode 100644
index 00000000..53524e99
--- /dev/null
+++ b/frontend/src/lib/locales/interpolation.test.ts
@@ -0,0 +1,46 @@
+import { describe, it, expect, beforeAll } from 'vitest'
+import { createInstance } from 'i18next'
+import { resources } from './index'
+
+// Mirrors the interpolation config in src/lib/i18n.ts
+const i18n = createInstance()
+
+beforeAll(async () => {
+  await i18n.init({
+    resources,
+    lng: 'en-US',
+    fallbackLng: 'en-US',
+    interpolation: {
+      escapeValue: false, // react already safes from xss
+    },
+  })
+})
+
+describe('i18next interpolation', () => {
+  it('interpolates a single variable', () => {
+    expect(i18n.t('chat.chatWith', { name: 'Sources' })).toBe('Chat with Sources')
+  })
+
+  it('interpolates multiple variables', () => {
+    expect(i18n.t('sources.batchPartial', { success: 2, failed: 1 })).toBe(
+      '2 succeeded, 1 failed',
+    )
+  })
+
+  it('resolves plural forms from the base key', () => {
+    expect(i18n.t('podcasts.usedByCount', { count: 1 })).toBe('Used by 1 episode')
+    expect(i18n.t('podcasts.usedByCount', { count: 3 })).toBe('Used by 3 episodes')
+  })
+
+  it('does not escape interpolated values (React escapes at render)', () => {
+    expect(i18n.t('notebooks.deleteNotebookDesc', { name: 'Research & Notes' })).toBe(
+      'Are you sure you want to delete "Research & Notes"? This action cannot be undone.',
+    )
+  })
+
+  it('interpolates in a non-English locale', () => {
+    expect(
+      i18n.t('sources.selectedCount', { count: 4, lng: 'pt-BR' }),
+    ).toContain('4')
+  })
+})
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 73a30747..f2e70c0c 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -63,8 +63,8 @@ export const itIT = {
     optional: "Opzionale",
     type: "Tipo",
     title: "Titolo",
-    created: "Creato {time}",
-    updated: "Aggiornato {time}",
+    created: "Creato {{time}}",
+    updated: "Aggiornato {{time}}",
     actions: "Azioni",
     noResults: "Nessun risultato",
     references: "Riferimenti",
@@ -107,10 +107,10 @@ export const itIT = {
     reasoning: "Ragionamento",
     searchTerms: "Termini di ricerca",
     strategy: "Strategia",
-    individualAnswers: "Risposte individuali ({count})",
+    individualAnswers: "Risposte individuali ({{count}})",
     finalAnswer: "Risposta finale",
-    notebookLabel: "Quaderno: {name}",
-    itemNotFound: "Questo {type} non è stato trovato",
+    notebookLabel: "Quaderno: {{name}}",
+    itemNotFound: "Questo {{type}} non è stato trovato",
     accessibility: {
       transformationViews: "Viste trasformazioni",
       searchKB: "Chiedi o cerca nella tua base di conoscenza",
@@ -231,12 +231,12 @@ export const itIT = {
     archive: "Archivia",
     unarchive: "Ripristina",
     deleteNotebook: "Elimina quaderno",
-    deleteNotebookDesc: "Sei sicuro di voler eliminare \"{name}\"? Questa azione non può essere annullata.",
+    deleteNotebookDesc: "Sei sicuro di voler eliminare \"{{name}}\"? Questa azione non può essere annullata.",
     deleteNotebookLoading: "Caricamento anteprima eliminazione...",
-    deleteNotebookNotes: "{count} nota/e verranno eliminate definitivamente.",
+    deleteNotebookNotes: "{{count}} nota/e verranno eliminate definitivamente.",
     deleteNotebookNoNotes: "Nessuna nota da eliminare.",
-    deleteNotebookExclusiveSources: "{count} fonte/i esistono solo in questo quaderno.",
-    deleteNotebookSharedSources: "{count} fonte/i sono condivise con altri quaderni e verranno scollegate.",
+    deleteNotebookExclusiveSources: "{{count}} fonte/i esistono solo in questo quaderno.",
+    deleteNotebookSharedSources: "{{count}} fonte/i sono condivise con altri quaderni e verranno scollegate.",
     deleteNotebookNoSources: "Nessuna fonte in questo quaderno.",
     deleteExclusiveSourcesLabel: "Elimina fonti esclusive",
     keepExclusiveSourcesLabel: "Scollega e mantieni",
@@ -304,7 +304,7 @@ export const itIT = {
     createFirstSource: "Aggiungi la tua prima fonte per iniziare a costruire la tua base di conoscenza.",
     deleteSourceConfirm: "Sei sicuro di voler eliminare questa fonte?",
     deleteConfirm: "Sei sicuro di voler eliminare questo elemento?",
-    deleteConfirmWithTitle: "Sei sicuro di voler eliminare \"{title}\"?",
+    deleteConfirmWithTitle: "Sei sicuro di voler eliminare \"{{title}}\"?",
     deleteSuccess: "Fonte eliminata con successo. Nota: Per eliminare il file dallo storage, devi abilitare l'opzione \"elimina file\" nella pagina impostazioni.",
     failedToDelete: "Impossibile eliminare la fonte",
     sourceQueued: "Fonte in coda",
@@ -320,16 +320,16 @@ export const itIT = {
     sourceRequeued: "Fonte rimessa in coda",
     sourceRequeuedDesc: "La fonte è stata rimessa in coda per l'elaborazione.",
     failedToRetry: "Nuovo tentativo fallito",
-    sourcesAddedToNotebook: "{count} fonte/i aggiunte al quaderno",
+    sourcesAddedToNotebook: "{{count}} fonte/i aggiunte al quaderno",
     failedToAddSourcesToNotebook: "Impossibile aggiungere le fonti al quaderno",
-    partialAddSuccess: "{success} fonte/i aggiunte, {failed} fallite",
+    partialAddSuccess: "{{success}} fonte/i aggiunte, {{failed}} fallite",
     sourceRemovedFromNotebook: "Fonte rimossa dal quaderno con successo",
     failedToRemoveSourceFromNotebook: "Impossibile rimuovere la fonte dal quaderno",
     removeConfirm: "Sei sicuro di voler rimuovere questa fonte dal quaderno?",
     checking: "Verifica...",
     untitledSource: "Fonte senza titolo",
-    maxItems: "max {count}",
-    insightsCount: "{count} approfondimenti",
+    maxItems: "max {{count}}",
+    insightsCount: "{{count}} approfondimenti",
     details: "Dettagli",
     detailsTitle: "Dettagli fonte",
     content: "Contenuto",
@@ -371,7 +371,7 @@ export const itIT = {
     enterUrlsPlaceholder: "Inserisci gli URL, uno per riga\nhttps://esempio.com/articolo1\nhttps://esempio.com/articolo2",
     batchUrlHint: "Incolla più URL (uno per riga) per importazione batch",
     invalidUrlsDetected: "URL non validi rilevati:",
-    lineLabel: "Riga {line}",
+    lineLabel: "Riga {{line}}",
     fixInvalidUrls: "Correggi o rimuovi gli URL non validi per continuare",
     selectMultipleFilesHint: "Seleziona più file per importazione batch. Supportati: Documenti (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Immagini (JPG, PNG), Archivi (ZIP)",
     selectedFiles: "File selezionati:",
@@ -380,8 +380,8 @@ export const itIT = {
     titlePlaceholder: "Dai alla tua fonte un titolo descrittivo",
     batchTitlesAuto: "I titoli verranno generati automaticamente per ogni fonte.",
     batchCommonSettings: "Gli stessi quaderni e trasformazioni verranno applicati a tutti gli elementi.",
-    urlsCount: "{count} URL",
-    filesCount: "{count} file",
+    urlsCount: "{{count}} URL",
+    filesCount: "{{count}} file",
     addSource: "Aggiungi Fonte",
     notEmbeddedAlert: "Contenuto non indicizzato",
     notEmbeddedDesc: "Questo contenuto non è stato indicizzato per la ricerca vettoriale. L'indicizzazione abilita funzionalità di ricerca avanzate e una migliore scoperta dei contenuti.",
@@ -404,8 +404,8 @@ export const itIT = {
     searchPlaceholder: "Cerca fonti per nome o URL...",
     noNotebooksFound: "Nessun quaderno trovato.",
     showingFirst100: "Mostrate le prime 100 fonti. Usa la ricerca per trovarne di specifiche.",
-    selectedCount: "{count} fonti selezionate",
-    added: "Aggiunto il {date}",
+    selectedCount: "{{count}} fonti selezionate",
+    added: "Aggiunto il {{date}}",
     addUrl: "Aggiungi URL",
     uploadFile: "Carica file",
     enterText: "Inserisci testo",
@@ -413,7 +413,7 @@ export const itIT = {
     processingFiles: "Elaborazione dei tuoi file...",
     titleRequired: "Un titolo è obbligatorio per il contenuto testuale",
     titleGenerated: "Se lasciato vuoto, verrà generato un titolo dal contenuto",
-    batchCount: "{count} {type} verranno elaborati",
+    batchCount: "{{count}} {{type}} verranno elaborati",
     enableEmbedding: "Abilita indicizzazione per la ricerca",
     embeddingDesc: "Permette di trovare questa fonte nelle ricerche vettoriali e query IA",
     embeddingAlways: "Indicizzazione abilitata automaticamente",
@@ -426,13 +426,13 @@ export const itIT = {
     insightsDesc: "Approfondimenti generati dall'analisi del modello",
     uploadedFile: "File caricato",
     fileUnavailableDesc: "Questo file non è attualmente disponibile per motivi di storage.",
-    batchSuccess: "{count} fonte/i create con successo",
-    batchFailed: "Impossibile creare tutte le {count} fonti",
-    batchPartial: "{success} riuscite, {failed} fallite",
+    batchSuccess: "{{count}} fonte/i create con successo",
+    batchFailed: "Impossibile creare tutte le {{count}} fonti",
+    batchPartial: "{{success}} riuscite, {{failed}} fallite",
     submittingSource: "Invio fonte per l'elaborazione...",
-    processingBatchSources: "Elaborazione di {count} fonti. Potrebbe richiedere qualche istante.",
+    processingBatchSources: "Elaborazione di {{count}} fonti. Potrebbe richiedere qualche istante.",
     processingSource: "La tua fonte è in elaborazione. Potrebbe richiedere qualche istante.",
-    maxFilesAllowed: "Massimo {count} file consentiti per batch",
+    maxFilesAllowed: "Massimo {{count}} file consentiti per batch",
   },
   chat: {
     sessions: "Sessioni",
@@ -442,17 +442,17 @@ export const itIT = {
     deleteSessionDesc: "Sei sicuro di voler eliminare questa sessione chat? Questa azione non può essere annullata.",
     sendPlaceholder: "Chiedi qualsiasi cosa sulle tue fonti...",
     sessionsTitle: "Sessioni chat",
-    chatWith: "Chatta con {name}",
-    startConversation: "Inizia una conversazione su questo {type}",
+    chatWith: "Chatta con {{name}}",
+    startConversation: "Inizia una conversazione su questo {{type}}",
     askQuestions: "Fai domande per capire meglio il contenuto",
-    pressToSend: "Premi {key} per inviare",
+    pressToSend: "Premi {{key}} per inviare",
     model: "Modello",
     createToStart: "Crea una sessione per iniziare.",
     chatWithNotebook: "Chatta con il quaderno",
     unableToLoadChat: "Impossibile caricare la chat",
     noDescription: "Nessuna descrizione",
     startByCreating: "Inizia creando il tuo primo quaderno per organizzare la tua ricerca.",
-    messagesCount: "{count} messaggi",
+    messagesCount: "{{count}} messaggi",
     sessionCreated: "Sessione chat creata",
     sessionUpdated: "Sessione aggiornata",
     sessionDeleted: "Sessione eliminata",
@@ -487,17 +487,17 @@ export const itIT = {
     searchIn: "Cerca In",
     searchSources: "Cerca nelle fonti",
     searchNotes: "Cerca nelle note",
-    resultsFound: "{count} risultati trovati",
-    matches: "Corrispondenze ({count})",
-    noResultsFor: "Nessun risultato trovato per \"{query}\"",
+    resultsFound: "{{count}} risultati trovati",
+    matches: "Corrispondenze ({{count}})",
+    noResultsFor: "Nessun risultato trovato per \"{{query}}\"",
     notSet: "Non impostato",
     saveToNotebook: "Salva nel quaderno",
     saveSuccess: "Salvato con successo nel quaderno",
     saveError: "Impossibile salvare nel quaderno",
     selectNotebook: "Seleziona quaderno",
     searchAndAsk: "Cerca e chiedi",
-    searchResultsFor: "Risultati di ricerca per \"{query}\"",
-    askAbout: "Chiedi riguardo \"{query}\"",
+    searchResultsFor: "Risultati di ricerca per \"{{query}}\"",
+    askAbout: "Chiedi riguardo \"{{query}}\"",
     orSearchKb: "Oppure cerca nella tua base di conoscenza",
     saving: "Salvataggio...",
     advancedModelTitle: "Selezione modello avanzata",
@@ -516,9 +516,9 @@ export const itIT = {
     generateEpisodeDesc: "Seleziona il contenuto da includere e configura i dettagli dell'episodio prima di generare un nuovo episodio podcast.",
     content: "Contenuto",
     contentDesc: "Scegli quaderni, fonti e note da includere in questo episodio.",
-    itemsSelected: "{count} elementi selezionati",
-    tokens: "{count} token",
-    chars: "{count} caratteri",
+    itemsSelected: "{{count}} elementi selezionati",
+    tokens: "{{value}} token",
+    chars: "{{value}} caratteri",
     loadingNotebooks: "Caricamento quaderni...",
     noNotebooksFoundInPodcasts: "Nessun quaderno trovato. Crea un quaderno e aggiungi contenuto prima di generare un podcast.",
     noContentSelected: "Nessun contenuto selezionato",
@@ -535,7 +535,7 @@ export const itIT = {
     instructionsPlaceholder: "Eventuali consigli supplementari da aggiungere al briefing dell'episodio...",
     generating: "Generazione...",
     generate: "Genera",
-    hostPlaceholder: "Conduttore {number}",
+    hostPlaceholder: "Conduttore {{number}}",
     profileRequired: "Profilo episodio richiesto",
     profileRequiredDesc: "Seleziona un profilo episodio prima di generare un podcast.",
     nameRequired: "Nome episodio richiesto",
@@ -605,8 +605,8 @@ export const itIT = {
     noSpeakerProfiles: "Ancora nessun profilo speaker. Creane uno per rendere disponibili i profili episodio.",
     noDescription: "Nessuna descrizione fornita.",
     usedByCount_one: "Usato da 1 episodio",
-    usedByCount_other: "Usato da {count} episodi",
-    usedByCount: "Usato da {count} episodi",
+    usedByCount_other: "Usato da {{count}} episodi",
+    usedByCount: "Usato da {{count}} episodi",
     unused: "Non utilizzato",
     voiceId: "ID Voce",
     backstory: "Background",
@@ -614,7 +614,7 @@ export const itIT = {
     edit: "Modifica",
     duplicate: "Duplica",
     deleteSpeakerProfileTitle: "Eliminare il profilo speaker?",
-    deleteSpeakerProfileDesc: "L'eliminazione di \"{name}\" non può essere annullata.",
+    deleteSpeakerProfileDesc: "L'eliminazione di \"{{name}}\" non può essere annullata.",
     deleteSpeakerDisabledHint: "Rimuovi questo speaker dai profili episodio prima di eliminarlo.",
     deleting: "Eliminazione…",
     episodeProfilesTitle: "Profili episodio",
@@ -639,7 +639,7 @@ export const itIT = {
     failedToStartGeneration: "Impossibile avviare la generazione",
     tryAgainMoment: "Riprova tra un momento.",
     deleteProfileTitle: "Eliminare il profilo?",
-    deleteProfileDesc: "Questo rimuoverà \"{name}\". Gli episodi esistenti mantengono i loro dati, ma i nuovi non useranno più questa configurazione.",
+    deleteProfileDesc: "Questo rimuoverà \"{{name}}\". Gli episodi esistenti mantengono i loro dati, ma i nuovi non useranno più questa configurazione.",
     profileCreated: "Profilo creato",
     profileCreatedDesc: "Il profilo episodio \"{name}\" è stato creato con successo.",
     failedToCreateProfile: "Impossibile creare il profilo",
@@ -661,7 +661,7 @@ export const itIT = {
     transcriptModel: "Modello trascrizione",
     segments: "Segmenti",
     defaultBriefingTitle: "Briefing predefinito",
-    created: "Creato il {time}",
+    created: "Creato il {{time}}",
     details: "Dettagli",
     summaryTab: "Riepilogo",
     outlineTab: "Outline",
@@ -670,7 +670,7 @@ export const itIT = {
     noOutline: "Nessun outline disponibile.",
     noTranscript: "Nessuna trascrizione disponibile.",
     deleteEpisodeTitle: "Eliminare l'episodio?",
-    deleteEpisodeDesc: "Questo rimuoverà \"{name}\" e il suo file audio permanentemente.",
+    deleteEpisodeDesc: "Questo rimuoverà \"{{name}}\" e il suo file audio permanentemente.",
     audioUnavailable: "Audio non disponibile",
     segment: "Segmento",
     speaker: "Speaker",
@@ -698,7 +698,7 @@ export const itIT = {
     speakers: "Speaker",
     speakersDesc: "Configura da una a quattro voci per questo profilo.",
     addSpeaker: "Aggiungi speaker",
-    speakerNumber: "Speaker {number}",
+    speakerNumber: "Speaker {{number}}",
     backstoryPlaceholder: "Breve biografia o contesto per lo speaker",
     personalityPlaceholder: "Descrivi stile e tono",
     outlineModelRequired: "Il modello outline è obbligatorio",
@@ -773,7 +773,7 @@ export const itIT = {
     currentVersion: "Versione corrente",
     latestVersion: "Ultima versione",
     status: "Stato",
-    updateAvailable: "Versione {version} disponibile",
+    updateAvailable: "Versione {{version}} disponibile",
     updateAvailableDesc: "È disponibile una nuova versione di Open Notebook.",
     upToDate: "Aggiornato",
     unknown: "Sconosciuto",
@@ -795,8 +795,8 @@ export const itIT = {
       failed: "Fallito",
       leavePageHint: "Puoi lasciare questa pagina poiché verrà eseguito in background",
       startNew: "Avvia nuova ricostruzione",
-      itemsProcessed: "{processed}/{total} elementi ({percent}%)",
-      failedItems: "{count} elementi non elaborati",
+      itemsProcessed: "{{processed}}/{{total}} elementi ({{percent}}%)",
+      failedItems: "{{count}} elementi non elaborati",
       time: "Tempo",
       whenToRebuild: "Quando dovrei ricostruire le indicizzazioni?",
       whenToRebuildAns: "Dovresti ricostruire quando cambi modelli, aggiorni versioni, correggi corruzione o dopo importazioni massive.",
@@ -839,7 +839,7 @@ export const itIT = {
     model: "Modello",
     systemPrompt: "Prompt di sistema",
     overrideModelDesc: "Sovrascrivi il modello predefinito per questa sessione chat. Lascia vuoto per usare il default di sistema.",
-    sessionUseReplacement: "Questa sessione userà {name} invece del modello predefinito.",
+    sessionUseReplacement: "Questa sessione userà {{name}} invece del modello predefinito.",
     systemDefault: "Predefinito di sistema",
   },
   models: {
@@ -857,7 +857,7 @@ export const itIT = {
     deleteModel: "Elimina modello",
     defaultAssignments: "Assegnazioni modelli predefiniti",
     defaultAssignmentsDesc: "Configura quali modelli usare per diversi scopi in Open Notebook",
-    missingRequiredModels: "Modelli richiesti mancanti: {models}. Open Notebook potrebbe non funzionare correttamente senza questi.",
+    missingRequiredModels: "Modelli richiesti mancanti: {{models}}. Open Notebook potrebbe non funzionare correttamente senza questi.",
     selectModelPlaceholder: "Seleziona un modello",
     requiredModelPlaceholder: "⚠️ Richiesto - Seleziona un modello",
     chatModelLabel: "Modello chat",
@@ -875,7 +875,7 @@ export const itIT = {
     sttModelLabel: "Modello Speech-to-Text",
     sttModelDesc: "Usato per la trascrizione audio",
     embeddingChangeTitle: "Cambio modello di embedding",
-    embeddingChangeConfirm: "Stai per cambiare il modello di embedding da {from} a {to}.",
+    embeddingChangeConfirm: "Stai per cambiare il modello di embedding da {{from}} a {{to}}.",
     rebuildRequired: "Importante: ricostruzione richiesta",
     rebuildReason: "Cambiare il modello di embedding richiede la ricostruzione di tutti gli embedding esistenti per mantenere la coerenza. Senza ricostruzione, le tue ricerche potrebbero restituire risultati errati o incompleti.",
     whatHappensNext: "Cosa succede dopo:",
@@ -888,14 +888,14 @@ export const itIT = {
     changeAndRebuild: "Cambia e vai a ricostruzione",
     autoAssign: "Assegnazione automatica predefiniti",
     autoAssigning: "Assegnazione in corso...",
-    autoAssignSuccess: "{count} modelli predefiniti assegnati automaticamente",
+    autoAssignSuccess: "{{count}} modelli predefiniti assegnati automaticamente",
     autoAssignNoModels: "Nessun modello disponibile da assegnare. Sincronizza prima i modelli.",
     autoAssignAlreadySet: "Tutti i modelli predefiniti sono già configurati",
     testModel: "Testa Modello",
     testModelSuccess: "Test del Modello Superato",
     testModelFailed: "Test del Modello Fallito",
     searchOrAddModel: "Cerca o digita un nome modello...",
-    addCustomModel: "Aggiungi \"{name}\"",
+    addCustomModel: "Aggiungi \"{{name}}\"",
   },
   apiKeys: {
     title: "Configura la tua IA con le tue chiavi API",
@@ -905,19 +905,19 @@ export const itIT = {
     configured: "Configurato",
     notConfigured: "Non configurato",
     migrationAvailable: "Variabili d'ambiente rilevate",
-    migrationDescription: "{count} chiave/i API configurata/e tramite variabili d'ambiente. Puoi migrarle nel database per una gestione più semplice.",
+    migrationDescription: "{{count}} chiave/i API configurata/e tramite variabili d'ambiente. Puoi migrarle nel database per una gestione più semplice.",
     migrateToDatabase: "Migra nel database",
     migrating: "Migrazione in corso...",
-    migrationSuccess: "{count} chiave/i API migrata/e con successo",
-    migrationErrors: "{count} chiave/i non migrata/e",
+    migrationSuccess: "{{count}} chiave/i API migrata/e con successo",
+    migrationErrors: "{{count}} chiave/i non migrata/e",
     migrationNothingToMigrate: "Tutte le chiavi sono già nel database",
     learnMore: "Scopri come configurare le chiavi API →",
     testConnection: "Testa connessione",
     testSuccess: "Connessione riuscita",
     testFailed: "Test di connessione fallito",
     syncModels: "Sincronizza modelli",
-    syncSuccess: "Trovati {discovered} modelli, aggiunti {new} nuovi",
-    syncNoNew: "Trovati {count} modelli, tutti già registrati",
+    syncSuccess: "Trovati {{discovered}} modelli, aggiunti {{new}} nuovi",
+    syncNoNew: "Trovati {{count}} modelli, tutti già registrati",
     syncFailed: "Sincronizzazione modelli fallita",
     getApiKey: "Ottieni chiave API",
     vertexProject: "ID progetto GCP",
@@ -932,7 +932,7 @@ export const itIT = {
     baseUrlOverrideHint: "Modifica solo se devi sovrascrivere l'endpoint API predefinito del provider.",
     numCtx: "Finestra di Contesto (num_ctx)",
     numCtxHint: "Finestra di contesto massima per i modelli Ollama. Lascia vuoto per usare il valore predefinito (8192). Aumenta solo se il tuo hardware può gestire una finestra più grande.",
-    deleteConfigConfirm: "Sei sicuro di voler eliminare '{name}'? Questa azione non può essere annullata.",
+    deleteConfigConfirm: "Sei sicuro di voler eliminare '{{name}}'? Questa azione non può essere annullata.",
     configSaveSuccess: "Configurazione salvata con successo",
     configUpdateSuccess: "Configurazione aggiornata con successo",
     configDeleteSuccess: "Configurazione eliminata con successo",
@@ -944,7 +944,7 @@ export const itIT = {
     encryptionRequired: "Chiave di crittografia non configurata",
     encryptionRequiredDescription: "Imposta la variabile d'ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY per abilitare l'archiviazione sicura delle credenziali.",
     migrationAvailable: "Migrazione chiavi API disponibile",
-    migrationDescription: "{count} provider hanno chiavi API impostate tramite variabili d'ambiente. Migrale nel database per una gestione più semplice.",
+    migrationDescription: "{{count}} provider hanno chiavi API impostate tramite variabili d'ambiente. Migrale nel database per una gestione più semplice.",
     goToSettings: "Vai alle Impostazioni",
     viewDocs: "Vedi documentazione",
   },
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 1cd274c1..8eb04051 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -63,8 +63,8 @@ export const jaJP = {
     optional: "任意",
     type: "種類",
     title: "タイトル",
-    created: "{time}に作成",
-    updated: "{time}に更新",
+    created: "{{time}}に作成",
+    updated: "{{time}}に更新",
     actions: "アクション",
     noResults: "結果なし",
     references: "参照",
@@ -107,10 +107,10 @@ export const jaJP = {
     reasoning: "推論",
     searchTerms: "検索ワード",
     strategy: "戦略",
-    individualAnswers: "個別回答（{count}件）",
+    individualAnswers: "個別回答（{{count}}件）",
     finalAnswer: "最終回答",
-    notebookLabel: "ノートブック: {name}",
-    itemNotFound: "この{type}は見つかりませんでした",
+    notebookLabel: "ノートブック: {{name}}",
+    itemNotFound: "この{{type}}は見つかりませんでした",
     accessibility: {
       transformationViews: "トランスフォーメーション表示",
       searchKB: "ナレッジベースに質問・検索",
@@ -231,12 +231,12 @@ export const jaJP = {
     archive: "アーカイブ",
     unarchive: "アーカイブ解除",
     deleteNotebook: "ノートブックを削除",
-    deleteNotebookDesc: "\"{name}\" を削除しますか？この操作は元に戻せません。",
+    deleteNotebookDesc: "\"{{name}}\" を削除しますか？この操作は元に戻せません。",
     deleteNotebookLoading: "削除プレビューを読み込み中...",
-    deleteNotebookNotes: "{count}件のノートが完全に削除されます。",
+    deleteNotebookNotes: "{{count}}件のノートが完全に削除されます。",
     deleteNotebookNoNotes: "削除するノートはありません。",
-    deleteNotebookExclusiveSources: "{count}件のソースはこのノートブックにのみ存在します。",
-    deleteNotebookSharedSources: "{count}件のソースは他のノートブックと共有されており、リンクが解除されます。",
+    deleteNotebookExclusiveSources: "{{count}}件のソースはこのノートブックにのみ存在します。",
+    deleteNotebookSharedSources: "{{count}}件のソースは他のノートブックと共有されており、リンクが解除されます。",
     deleteNotebookNoSources: "このノートブックにソースはありません。",
     deleteExclusiveSourcesLabel: "専用ソースを削除",
     keepExclusiveSourcesLabel: "リンク解除して保持",
@@ -304,7 +304,7 @@ export const jaJP = {
     createFirstSource: "最初のソースを追加してナレッジベースの構築を始めましょう。",
     deleteSourceConfirm: "このソースを削除しますか？",
     deleteConfirm: "削除しますか？",
-    deleteConfirmWithTitle: "「{title}」を削除しますか？",
+    deleteConfirmWithTitle: "「{{title}}」を削除しますか？",
     deleteSuccess: "ソースを削除しました。注意：ストレージからファイルを削除するには、設定ページで「ファイルを削除」オプションを有効にする必要があります。",
     failedToDelete: "ソースの削除に失敗しました",
     sourceQueued: "ソースをキューに追加",
@@ -320,16 +320,16 @@ export const jaJP = {
     sourceRequeued: "ソースの再処理をキューに追加",
     sourceRequeuedDesc: "ソースを再処理キューに追加しました。",
     failedToRetry: "再試行に失敗",
-    sourcesAddedToNotebook: "{count}件のソースをノートブックに追加しました",
+    sourcesAddedToNotebook: "{{count}}件のソースをノートブックに追加しました",
     failedToAddSourcesToNotebook: "ノートブックへのソース追加に失敗しました",
-    partialAddSuccess: "{success}件追加成功、{failed}件失敗",
+    partialAddSuccess: "{{success}}件追加成功、{{failed}}件失敗",
     sourceRemovedFromNotebook: "ノートブックからソースを削除しました",
     failedToRemoveSourceFromNotebook: "ノートブックからのソース削除に失敗しました",
     removeConfirm: "ノートブックからこのソースを削除しますか？",
     checking: "確認中...",
     untitledSource: "無題のソース",
-    maxItems: "最大{count}件",
-    insightsCount: "{count}件のインサイト",
+    maxItems: "最大{{count}}件",
+    insightsCount: "{{count}}件のインサイト",
     details: "詳細",
     detailsTitle: "ソース詳細",
     content: "コンテンツ",
@@ -371,7 +371,7 @@ export const jaJP = {
     enterUrlsPlaceholder: "URLを1行ずつ入力\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "複数のURLを貼り付けて一括インポート（1行に1つ）",
     invalidUrlsDetected: "無効なURLが検出されました:",
-    lineLabel: "{line}行目",
+    lineLabel: "{{line}}行目",
     fixInvalidUrls: "無効なURLを修正または削除してください",
     selectMultipleFilesHint: "複数ファイルを選択して一括インポート。対応形式：ドキュメント（PDF、DOC、DOCX、PPT、XLS、EPUB、TXT、MD）、メディア（MP4、MP3、WAV、M4A）、画像（JPG、PNG）、アーカイブ（ZIP）",
     selectedFiles: "選択されたファイル:",
@@ -380,8 +380,8 @@ export const jaJP = {
     titlePlaceholder: "ソースにわかりやすいタイトルを付けてください",
     batchTitlesAuto: "タイトルは各ソースごとに自動生成されます。",
     batchCommonSettings: "同じノートブックとトランスフォーメーションがすべてのアイテムに適用されます。",
-    urlsCount: "{count}件のURL",
-    filesCount: "{count}件のファイル",
+    urlsCount: "{{count}}件のURL",
+    filesCount: "{{count}}件のファイル",
     addSource: "ソースを追加",
     notEmbeddedAlert: "コンテンツが未Embedding",
     notEmbeddedDesc: "このコンテンツはベクトル検索用にEmbeddingされていません。Embeddingを行うと高度な検索機能やコンテンツの発見性が向上します。",
@@ -404,8 +404,8 @@ export const jaJP = {
     searchPlaceholder: "名前またはURLでソースを検索...",
     noNotebooksFound: "ノートブックが見つかりません。",
     showingFirst100: "最初の100件を表示中。検索で特定のソースを探してください。",
-    selectedCount: "{count}件選択中",
-    added: "{date}に追加",
+    selectedCount: "{{count}}件選択中",
+    added: "{{date}}に追加",
     addUrl: "URLを追加",
     uploadFile: "ファイルをアップロード",
     enterText: "テキストを入力",
@@ -413,7 +413,7 @@ export const jaJP = {
     processingFiles: "ファイルを処理中...",
     titleRequired: "テキストコンテンツにはタイトルが必要です",
     titleGenerated: "空欄の場合、コンテンツからタイトルが自動生成されます",
-    batchCount: "{count}件の{type}が処理されます",
+    batchCount: "{{count}}件の{{type}}が処理されます",
     enableEmbedding: "検索用にEmbeddingを有効化",
     embeddingDesc: "このソースをベクトル検索やAIクエリで見つけられるようにします",
     embeddingAlways: "Embeddingは自動的に有効",
@@ -426,13 +426,13 @@ export const jaJP = {
     insightsDesc: "モデル分析から生成されたインサイト",
     uploadedFile: "アップロードされたファイル",
     fileUnavailableDesc: "ストレージシステムの理由により、このファイルは現在利用できません。",
-    batchSuccess: "{count}件のソースを作成しました",
-    batchFailed: "{count}件すべてのソース作成に失敗しました",
-    batchPartial: "{success}件成功、{failed}件失敗",
+    batchSuccess: "{{count}}件のソースを作成しました",
+    batchFailed: "{{count}}件すべてのソース作成に失敗しました",
+    batchPartial: "{{success}}件成功、{{failed}}件失敗",
     submittingSource: "ソースを処理に送信中...",
-    processingBatchSources: "{count}件のソースを処理中。しばらくお待ちください。",
+    processingBatchSources: "{{count}}件のソースを処理中。しばらくお待ちください。",
     processingSource: "ソースを処理中です。しばらくお待ちください。",
-    maxFilesAllowed: "一括処理は最大{count}件までです",
+    maxFilesAllowed: "一括処理は最大{{count}}件までです",
   },
   chat: {
     sessions: "セッション",
@@ -442,17 +442,17 @@ export const jaJP = {
     deleteSessionDesc: "このチャットセッションを削除しますか？この操作は元に戻せません。",
     sendPlaceholder: "ソースについて何でも質問してください...",
     sessionsTitle: "チャットセッション",
-    chatWith: "{name}とチャット",
-    startConversation: "この{type}について会話を始めましょう",
+    chatWith: "{{name}}とチャット",
+    startConversation: "この{{type}}について会話を始めましょう",
     askQuestions: "コンテンツをより深く理解するために質問してください",
-    pressToSend: "{key}を押して送信",
+    pressToSend: "{{key}}を押して送信",
     model: "モデル",
     createToStart: "セッションを作成して開始",
     chatWithNotebook: "ノートブックとチャット",
     unableToLoadChat: "チャットを読み込めません",
     noDescription: "説明なし",
     startByCreating: "最初のノートブックを作成してリサーチを整理しましょう。",
-    messagesCount: "{count}件のメッセージ",
+    messagesCount: "{{count}}件のメッセージ",
     sessionCreated: "チャットセッションを作成しました",
     sessionUpdated: "セッションを更新しました",
     sessionDeleted: "セッションを削除しました",
@@ -487,17 +487,17 @@ export const jaJP = {
     searchIn: "検索対象",
     searchSources: "ソースを検索",
     searchNotes: "ノートを検索",
-    resultsFound: "{count}件の結果",
-    matches: "一致（{count}件）",
-    noResultsFor: "「{query}」に一致する結果がありません",
+    resultsFound: "{{count}}件の結果",
+    matches: "一致（{{count}}件）",
+    noResultsFor: "「{{query}}」に一致する結果がありません",
     notSet: "未設定",
     saveToNotebook: "ノートブックに保存",
     saveSuccess: "ノートブックに保存しました",
     saveError: "ノートブックへの保存に失敗しました",
     selectNotebook: "ノートブックを選択",
     searchAndAsk: "検索と質問",
-    searchResultsFor: "「{query}」の検索結果",
-    askAbout: "「{query}」について質問",
+    searchResultsFor: "「{{query}}」の検索結果",
+    askAbout: "「{{query}}」について質問",
     orSearchKb: "またはナレッジベースを検索",
     saving: "保存中...",
     advancedModelTitle: "詳細モデル選択",
@@ -516,9 +516,9 @@ export const jaJP = {
     generateEpisodeDesc: "含めるコンテンツを選択し、新しいポッドキャストエピソードを生成する前にエピソードの詳細を設定してください。",
     content: "コンテンツ",
     contentDesc: "このエピソードに含めるノートブック、ソース、ノートを選択してください。",
-    itemsSelected: "{count}件選択中",
-    tokens: "{count}トークン",
-    chars: "{count}文字",
+    itemsSelected: "{{count}}件選択中",
+    tokens: "{{value}}トークン",
+    chars: "{{value}}文字",
     loadingNotebooks: "ノートブックを読み込み中...",
     noNotebooksFoundInPodcasts: "ノートブックが見つかりません。ポッドキャストを生成する前にノートブックを作成してコンテンツを追加してください。",
     noContentSelected: "コンテンツが選択されていません",
@@ -535,7 +535,7 @@ export const jaJP = {
     instructionsPlaceholder: "エピソードブリーフィングに追加するアドバイス...",
     generating: "生成中...",
     generate: "生成",
-    hostPlaceholder: "ホスト{number}",
+    hostPlaceholder: "ホスト{{number}}",
     profileRequired: "エピソードプロファイルが必要です",
     profileRequiredDesc: "ポッドキャストを生成する前にエピソードプロファイルを選択してください。",
     nameRequired: "エピソード名が必要です",
@@ -605,8 +605,8 @@ export const jaJP = {
     noSpeakerProfiles: "スピーカープロファイルがまだありません。エピソードプロファイルを利用するには作成してください。",
     noDescription: "説明なし。",
     usedByCount_one: "1つのエピソードで使用",
-    usedByCount_other: "{count}個のエピソードで使用",
-    usedByCount: "{count}個のエピソードで使用",
+    usedByCount_other: "{{count}}個のエピソードで使用",
+    usedByCount: "{{count}}個のエピソードで使用",
     unused: "未使用",
     voiceId: "Voice ID",
     backstory: "バックストーリー",
@@ -614,7 +614,7 @@ export const jaJP = {
     edit: "編集",
     duplicate: "複製",
     deleteSpeakerProfileTitle: "スピーカープロファイルを削除しますか？",
-    deleteSpeakerProfileDesc: "「{name}」を削除すると元に戻せません。",
+    deleteSpeakerProfileDesc: "「{{name}}」を削除すると元に戻せません。",
     deleteSpeakerDisabledHint: "削除する前にエピソードプロファイルからこのスピーカーを削除してください。",
     deleting: "削除中...",
     episodeProfilesTitle: "エピソードプロファイル",
@@ -639,7 +639,7 @@ export const jaJP = {
     failedToStartGeneration: "生成の開始に失敗しました",
     tryAgainMoment: "しばらくしてから再試行してください。",
     deleteProfileTitle: "プロファイルを削除しますか？",
-    deleteProfileDesc: "「{name}」を削除します。既存のエピソードはデータを保持しますが、新しいエピソードはこの設定を使用できなくなります。",
+    deleteProfileDesc: "「{{name}}」を削除します。既存のエピソードはデータを保持しますが、新しいエピソードはこの設定を使用できなくなります。",
     profileCreated: "プロファイルを作成しました",
     profileCreatedDesc: "エピソードプロファイル「{name}」を作成しました。",
     failedToCreateProfile: "プロファイルの作成に失敗しました",
@@ -661,7 +661,7 @@ export const jaJP = {
     transcriptModel: "トランスクリプトモデル",
     segments: "セグメント",
     defaultBriefingTitle: "デフォルトブリーフィング",
-    created: "{time}に作成",
+    created: "{{time}}に作成",
     details: "詳細",
     summaryTab: "要約",
     outlineTab: "アウトライン",
@@ -670,7 +670,7 @@ export const jaJP = {
     noOutline: "アウトラインがありません。",
     noTranscript: "トランスクリプトがありません。",
     deleteEpisodeTitle: "エピソードを削除しますか？",
-    deleteEpisodeDesc: "「{name}」とその音声ファイルを完全に削除します。",
+    deleteEpisodeDesc: "「{{name}}」とその音声ファイルを完全に削除します。",
     audioUnavailable: "音声が利用できません",
     segment: "セグメント",
     speaker: "スピーカー",
@@ -698,7 +698,7 @@ export const jaJP = {
     speakers: "スピーカー",
     speakersDesc: "このプロファイルに1〜4人の声を設定します。",
     addSpeaker: "スピーカーを追加",
-    speakerNumber: "スピーカー{number}",
+    speakerNumber: "スピーカー{{number}}",
     backstoryPlaceholder: "スピーカーの短い経歴やコンテキスト",
     personalityPlaceholder: "スタイルとトーンを説明",
     outlineModelRequired: "アウトラインモデルは必須です",
@@ -773,7 +773,7 @@ export const jaJP = {
     currentVersion: "現在のバージョン",
     latestVersion: "最新バージョン",
     status: "ステータス",
-    updateAvailable: "バージョン{version}が利用可能",
+    updateAvailable: "バージョン{{version}}が利用可能",
     updateAvailableDesc: "Open Notebookの新しいバージョンが利用可能です。",
     upToDate: "最新版です",
     unknown: "不明",
@@ -795,8 +795,8 @@ export const jaJP = {
       failed: "失敗",
       leavePageHint: "バックグラウンドで実行されるため、このページを離れても構いません",
       startNew: "新しい再構築を開始",
-      itemsProcessed: "{processed}/{total}件送信済み（{percent}%）",
-      failedItems: "{count}件のジョブの送信に失敗しました",
+      itemsProcessed: "{{processed}}/{{total}}件送信済み（{{percent}}%）",
+      failedItems: "{{count}}件のジョブの送信に失敗しました",
       time: "経過時間",
       whenToRebuild: "いつEmbeddingを再構築すべき？",
       whenToRebuildAns: "モデルの切り替え時、バージョンアップ時、破損の修復時、または一括インポート後に再構築してください。",
@@ -839,7 +839,7 @@ export const jaJP = {
     model: "モデル",
     systemPrompt: "システムプロンプト",
     overrideModelDesc: "このチャットセッションのデフォルトモデルを上書きします。空欄の場合はシステムデフォルトを使用します。",
-    sessionUseReplacement: "このセッションはデフォルトモデルの代わりに{name}を使用します。",
+    sessionUseReplacement: "このセッションはデフォルトモデルの代わりに{{name}}を使用します。",
     systemDefault: "システムデフォルト",
   },
   models: {
@@ -857,7 +857,7 @@ export const jaJP = {
     deleteModel: "モデルを削除",
     defaultAssignments: "デフォルトモデル割り当て",
     defaultAssignmentsDesc: "Open Notebook全体で異なる目的に使用するモデルを設定",
-    missingRequiredModels: "必須モデルがありません: {models}。これらがないとOpen Notebookが正しく機能しない可能性があります。",
+    missingRequiredModels: "必須モデルがありません: {{models}}。これらがないとOpen Notebookが正しく機能しない可能性があります。",
     selectModelPlaceholder: "モデルを選択",
     requiredModelPlaceholder: "⚠️ 必須 - モデルを選択",
     chatModelLabel: "チャットモデル",
@@ -875,7 +875,7 @@ export const jaJP = {
     sttModelLabel: "音声認識モデル",
     sttModelDesc: "音声の書き起こしに使用",
     embeddingChangeTitle: "Embeddingモデルの変更",
-    embeddingChangeConfirm: "Embeddingモデルを{from}から{to}に変更しようとしています。",
+    embeddingChangeConfirm: "Embeddingモデルを{{from}}から{{to}}に変更しようとしています。",
     rebuildRequired: "重要：再構築が必要",
     rebuildReason: "Embeddingモデルを変更する場合、一貫性を維持するためにすべての既存Embeddingを再構築する必要があります。再構築しないと、検索結果が不正確または不完全になる可能性があります。",
     whatHappensNext: "次に起こること：",
@@ -888,14 +888,14 @@ export const jaJP = {
     changeAndRebuild: "変更して再構築へ",
     autoAssign: "デフォルトを自動割り当て",
     autoAssigning: "割り当て中...",
-    autoAssignSuccess: "{count}件のデフォルトモデルを自動的に割り当てました",
+    autoAssignSuccess: "{{count}}件のデフォルトモデルを自動的に割り当てました",
     autoAssignNoModels: "割り当て可能なモデルがありません。先にモデルを同期してください。",
     autoAssignAlreadySet: "すべてのデフォルトモデルは既に設定されています",
     testModel: "モデルをテスト",
     testModelSuccess: "モデルテスト成功",
     testModelFailed: "モデルテスト失敗",
     searchOrAddModel: "検索またはモデル名を入力...",
-    addCustomModel: "\"{name}\" を追加",
+    addCustomModel: "\"{{name}}\" を追加",
   },
   apiKeys: {
     title: "独自のAPIキーでAIを設定",
@@ -905,19 +905,19 @@ export const jaJP = {
     configured: "設定済み",
     notConfigured: "未設定",
     migrationAvailable: "環境変数を検出",
-    migrationDescription: "{count}個のAPIキーが環境変数で設定されています。管理を容易にするためにデータベースに移行できます。",
+    migrationDescription: "{{count}}個のAPIキーが環境変数で設定されています。管理を容易にするためにデータベースに移行できます。",
     migrateToDatabase: "データベースに移行",
     migrating: "移行中...",
-    migrationSuccess: "{count}個のAPIキーを移行しました",
-    migrationErrors: "{count}個のキーの移行に失敗しました",
+    migrationSuccess: "{{count}}個のAPIキーを移行しました",
+    migrationErrors: "{{count}}個のキーの移行に失敗しました",
     migrationNothingToMigrate: "すべてのキーはすでにデータベースにあります",
     learnMore: "APIキーの設定方法を確認 →",
     testConnection: "接続テスト",
     testSuccess: "接続成功",
     testFailed: "接続テストに失敗",
     syncModels: "モデル同期",
-    syncSuccess: "{discovered} モデルを発見、{new} 個を新規追加",
-    syncNoNew: "{count} モデルを発見、すべて登録済み",
+    syncSuccess: "{{discovered}} モデルを発見、{{new}} 個を新規追加",
+    syncNoNew: "{{count}} モデルを発見、すべて登録済み",
     syncFailed: "モデルの同期に失敗",
     getApiKey: "APIキーを取得",
     vertexProject: "GCPプロジェクトID",
@@ -932,7 +932,7 @@ export const jaJP = {
     baseUrlOverrideHint: "プロバイダーのデフォルト API エンドポイントを上書きする場合のみ変更してください。",
     numCtx: "コンテキストウィンドウ (num_ctx)",
     numCtxHint: "Ollama モデルの最大コンテキストウィンドウ。空のままにするとデフォルト（8192）を使用します。ハードウェアがより大きなウィンドウを処理できる場合のみ増やしてください。",
-    deleteConfigConfirm: "「{name}」を削除してもよろしいですか？この操作は元に戻せません。",
+    deleteConfigConfirm: "「{{name}}」を削除してもよろしいですか？この操作は元に戻せません。",
     configSaveSuccess: "設定が正常に保存されました",
     configUpdateSuccess: "設定が正常に変更されました",
     configDeleteSuccess: "設定が正常に削除されました",
@@ -944,7 +944,7 @@ export const jaJP = {
     encryptionRequired: "暗号化キーが設定されていません",
     encryptionRequiredDescription: "OPEN_NOTEBOOK_ENCRYPTION_KEY 環境変数を設定して、安全な認証情報の保存を有効にしてください。",
     migrationAvailable: "APIキーの移行が可能です",
-    migrationDescription: "{count} 個のプロバイダーのAPIキーが環境変数で設定されています。管理を容易にするためにデータベースに移行してください。",
+    migrationDescription: "{{count}} 個のプロバイダーのAPIキーが環境変数で設定されています。管理を容易にするためにデータベースに移行してください。",
     goToSettings: "設定へ移動",
     viewDocs: "ドキュメントを見る",
   },
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 1b8c8a84..4f28d1bd 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -63,8 +63,8 @@ export const plPL = {
     optional: "Opcjonalne",
     type: "Typ",
     title: "Tytuł",
-    created: "Utworzono {time}",
-    updated: "Zaktualizowano {time}",
+    created: "Utworzono {{time}}",
+    updated: "Zaktualizowano {{time}}",
     actions: "Akcje",
     noResults: "Brak wyników",
     references: "Odwołania",
@@ -107,10 +107,10 @@ export const plPL = {
     reasoning: "Rozumowanie",
     searchTerms: "Hasła wyszukiwania",
     strategy: "Strategia",
-    individualAnswers: "Pojedyncze odpowiedzi ({count})",
+    individualAnswers: "Pojedyncze odpowiedzi ({{count}})",
     finalAnswer: "Ostateczna odpowiedź",
-    notebookLabel: "Notatnik: {name}",
-    itemNotFound: "Nie udało się odnaleźć elementu ({type})",
+    notebookLabel: "Notatnik: {{name}}",
+    itemNotFound: "Nie udało się odnaleźć elementu ({{type}})",
     accessibility: {
       transformationViews: "Widoki transformacji",
       searchKB: "Zadaj pytanie lub przeszukaj swoją bazę wiedzy",
@@ -231,12 +231,12 @@ export const plPL = {
     archive: "Archiwizuj",
     unarchive: "Przywróć z archiwum",
     deleteNotebook: "Usuń notatnik",
-    deleteNotebookDesc: "Czy na pewno chcesz usunąć „{name}”? Tej operacji nie można cofnąć.",
+    deleteNotebookDesc: "Czy na pewno chcesz usunąć „{{name}}”? Tej operacji nie można cofnąć.",
     deleteNotebookLoading: "Ładowanie podglądu usuwania...",
-    deleteNotebookNotes: "Trwale usuniętych zostanie notatek: {count}.",
+    deleteNotebookNotes: "Trwale usuniętych zostanie notatek: {{count}}.",
     deleteNotebookNoNotes: "Brak notatek do usunięcia.",
-    deleteNotebookExclusiveSources: "Liczba źródeł istniejących tylko w tym notatniku: {count}.",
-    deleteNotebookSharedSources: "Liczba źródeł współdzielonych z innymi notatnikami, które zostaną odłączone: {count}.",
+    deleteNotebookExclusiveSources: "Liczba źródeł istniejących tylko w tym notatniku: {{count}}.",
+    deleteNotebookSharedSources: "Liczba źródeł współdzielonych z innymi notatnikami, które zostaną odłączone: {{count}}.",
     deleteNotebookNoSources: "Brak źródeł w tym notatniku.",
     deleteExclusiveSourcesLabel: "Usuń źródła wyłączne",
     keepExclusiveSourcesLabel: "Odłącz i zachowaj je",
@@ -304,7 +304,7 @@ export const plPL = {
     createFirstSource: "Dodaj pierwsze źródło, aby zacząć budować bazę wiedzy.",
     deleteSourceConfirm: "Czy na pewno chcesz usunąć to źródło?",
     deleteConfirm: "Czy na pewno chcesz to usunąć?",
-    deleteConfirmWithTitle: "Czy na pewno chcesz usunąć „{title}”?",
+    deleteConfirmWithTitle: "Czy na pewno chcesz usunąć „{{title}}”?",
     deleteSuccess: "Źródło usunięte pomyślnie. Uwaga: aby usunąć plik z magazynu, musisz włączyć opcję „usuń plik” na stronie ustawień.",
     failedToDelete: "Nie udało się usunąć źródła",
     sourceQueued: "Źródło w kolejce",
@@ -320,16 +320,16 @@ export const plPL = {
     sourceRequeued: "Ponowienie źródła w kolejce",
     sourceRequeuedDesc: "Źródło zostało ponownie dodane do kolejki przetwarzania.",
     failedToRetry: "Ponowienie nie powiodło się",
-    sourcesAddedToNotebook: "Dodano źródeł do notatnika: {count}",
+    sourcesAddedToNotebook: "Dodano źródeł do notatnika: {{count}}",
     failedToAddSourcesToNotebook: "Nie udało się dodać źródeł do notatnika",
-    partialAddSuccess: "Dodano źródeł: {success}, niepowodzeń: {failed}",
+    partialAddSuccess: "Dodano źródeł: {{success}}, niepowodzeń: {{failed}}",
     sourceRemovedFromNotebook: "Źródło usunięte z notatnika pomyślnie",
     failedToRemoveSourceFromNotebook: "Nie udało się usunąć źródła z notatnika",
     removeConfirm: "Czy na pewno chcesz usunąć to z notatnika?",
     checking: "Sprawdzanie...",
     untitledSource: "Źródło bez tytułu",
-    maxItems: "maks. {count}",
-    insightsCount: "Wglądy: {count}",
+    maxItems: "maks. {{count}}",
+    insightsCount: "Wglądy: {{count}}",
     details: "Szczegóły",
     detailsTitle: "Szczegóły źródła",
     content: "Treść",
@@ -371,7 +371,7 @@ export const plPL = {
     enterUrlsPlaceholder: "Wpisz adresy URL, po jednym w wierszu\nhttps://example.com/artykul1\nhttps://example.com/artykul2",
     batchUrlHint: "Wklej wiele adresów URL (po jednym w wierszu), aby zaimportować je wsadowo",
     invalidUrlsDetected: "Wykryto nieprawidłowe adresy URL:",
-    lineLabel: "Wiersz {line}",
+    lineLabel: "Wiersz {{line}}",
     fixInvalidUrls: "Popraw lub usuń nieprawidłowe adresy URL, aby kontynuować",
     selectMultipleFilesHint: "Wybierz wiele plików, aby zaimportować je wsadowo. Obsługiwane: Dokumenty (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Obrazy (JPG, PNG), Archiwa (ZIP)",
     selectedFiles: "Wybrane pliki:",
@@ -380,8 +380,8 @@ export const plPL = {
     titlePlaceholder: "Nadaj źródłu opisowy tytuł",
     batchTitlesAuto: "Tytuły zostaną wygenerowane automatycznie dla każdego źródła.",
     batchCommonSettings: "Te same notatniki i transformacje zostaną zastosowane do wszystkich elementów.",
-    urlsCount: "Liczba adresów URL: {count}",
-    filesCount: "Liczba plików: {count}",
+    urlsCount: "Liczba adresów URL: {{count}}",
+    filesCount: "Liczba plików: {{count}}",
     addSource: "Dodaj źródło",
     notEmbeddedAlert: "Treść nieosadzona",
     notEmbeddedDesc: "Ta treść nie została osadzona na potrzeby wyszukiwania wektorowego. Osadzanie umożliwia zaawansowane wyszukiwanie i lepsze odnajdywanie treści.",
@@ -404,8 +404,8 @@ export const plPL = {
     searchPlaceholder: "Szukaj źródeł po nazwie lub adresie URL...",
     noNotebooksFound: "Nie znaleziono notatników.",
     showingFirst100: "Wyświetlanie pierwszych 100 źródeł. Użyj wyszukiwania, aby znaleźć konkretne.",
-    selectedCount: "Zaznaczono źródeł: {count}",
-    added: "Dodano dnia {date}",
+    selectedCount: "Zaznaczono źródeł: {{count}}",
+    added: "Dodano dnia {{date}}",
     addUrl: "Dodaj adres URL",
     uploadFile: "Prześlij plik",
     enterText: "Wpisz tekst",
@@ -413,7 +413,7 @@ export const plPL = {
     processingFiles: "Przetwarzanie plików...",
     titleRequired: "Tytuł jest wymagany dla treści tekstowej",
     titleGenerated: "Jeśli pozostawisz puste, tytuł zostanie wygenerowany na podstawie treści",
-    batchCount: "Liczba elementów do przetworzenia: {count} {type}",
+    batchCount: "Liczba elementów do przetworzenia: {{count}} {{type}}",
     enableEmbedding: "Włącz osadzanie na potrzeby wyszukiwania",
     embeddingDesc: "Umożliwia odnajdywanie tego źródła w wyszukiwaniu wektorowym i zapytaniach AI",
     embeddingAlways: "Osadzanie włączane automatycznie",
@@ -426,13 +426,13 @@ export const plPL = {
     insightsDesc: "Wglądy wygenerowane na podstawie analizy modelu",
     uploadedFile: "Przesłany plik",
     fileUnavailableDesc: "Ten plik jest obecnie niedostępny z powodów związanych z systemem magazynowania.",
-    batchSuccess: "Utworzono źródeł pomyślnie: {count}",
-    batchFailed: "Nie udało się utworzyć wszystkich źródeł ({count})",
-    batchPartial: "Powodzenia: {success}, niepowodzenia: {failed}",
+    batchSuccess: "Utworzono źródeł pomyślnie: {{count}}",
+    batchFailed: "Nie udało się utworzyć wszystkich źródeł ({{count}})",
+    batchPartial: "Powodzenia: {{success}}, niepowodzenia: {{failed}}",
     submittingSource: "Przekazywanie źródła do przetwarzania...",
-    processingBatchSources: "Przetwarzanie źródeł: {count}. Może to chwilę potrwać.",
+    processingBatchSources: "Przetwarzanie źródeł: {{count}}. Może to chwilę potrwać.",
     processingSource: "Twoje źródło jest przetwarzane. Może to chwilę potrwać.",
-    maxFilesAllowed: "Maksymalna liczba plików w partii: {count}",
+    maxFilesAllowed: "Maksymalna liczba plików w partii: {{count}}",
   },
   chat: {
     sessions: "Sesje",
@@ -442,17 +442,17 @@ export const plPL = {
     deleteSessionDesc: "Czy na pewno chcesz usunąć tę sesję czatu? Tej operacji nie można cofnąć.",
     sendPlaceholder: "Zapytaj o cokolwiek dotyczące swoich źródeł...",
     sessionsTitle: "Sesje czatu",
-    chatWith: "Czat z {name}",
-    startConversation: "Rozpocznij rozmowę o tym elemencie ({type})",
+    chatWith: "Czat z {{name}}",
+    startConversation: "Rozpocznij rozmowę o tym elemencie ({{type}})",
     askQuestions: "Zadawaj pytania, aby lepiej zrozumieć treść",
-    pressToSend: "Naciśnij {key}, aby wysłać",
+    pressToSend: "Naciśnij {{key}}, aby wysłać",
     model: "Model",
     createToStart: "Utwórz sesję, aby rozpocząć.",
     chatWithNotebook: "Czat z notatnikiem",
     unableToLoadChat: "Nie można załadować czatu",
     noDescription: "Brak opisu",
     startByCreating: "Zacznij od utworzenia pierwszego notatnika, aby uporządkować swoje badania.",
-    messagesCount: "Wiadomości: {count}",
+    messagesCount: "Wiadomości: {{count}}",
     sessionCreated: "Utworzono sesję czatu",
     sessionUpdated: "Zaktualizowano sesję",
     sessionDeleted: "Usunięto sesję",
@@ -487,17 +487,17 @@ export const plPL = {
     searchIn: "Szukaj w",
     searchSources: "Przeszukaj źródła",
     searchNotes: "Przeszukaj notatki",
-    resultsFound: "Znaleziono wyników: {count}",
-    matches: "Dopasowania ({count})",
-    noResultsFor: "Brak wyników dla „{query}”",
+    resultsFound: "Znaleziono wyników: {{count}}",
+    matches: "Dopasowania ({{count}})",
+    noResultsFor: "Brak wyników dla „{{query}}”",
     notSet: "Nie ustawiono",
     saveToNotebook: "Zapisz do notatnika",
     saveSuccess: "Pomyślnie zapisano do notatnika",
     saveError: "Nie udało się zapisać do notatnika",
     selectNotebook: "Wybierz notatnik",
     searchAndAsk: "Szukaj i pytaj",
-    searchResultsFor: "Wyniki wyszukiwania dla „{query}”",
-    askAbout: "Zapytaj o „{query}”",
+    searchResultsFor: "Wyniki wyszukiwania dla „{{query}}”",
+    askAbout: "Zapytaj o „{{query}}”",
     orSearchKb: "Lub przeszukaj swoją bazę wiedzy",
     saving: "Zapisywanie...",
     advancedModelTitle: "Zaawansowany wybór modeli",
@@ -516,9 +516,9 @@ export const plPL = {
     generateEpisodeDesc: "Wybierz treść do uwzględnienia i skonfiguruj szczegóły odcinka przed wygenerowaniem nowego odcinka podcastu.",
     content: "Treść",
     contentDesc: "Wybierz notatniki, źródła i notatki, które chcesz uwzględnić w tym odcinku.",
-    itemsSelected: "Zaznaczono elementów: {count}",
-    tokens: "Tokeny: {count}",
-    chars: "Znaki: {count}",
+    itemsSelected: "Zaznaczono elementów: {{count}}",
+    tokens: "Tokeny: {{value}}",
+    chars: "Znaki: {{value}}",
     loadingNotebooks: "Ładowanie notatników...",
     noNotebooksFoundInPodcasts: "Nie znaleziono notatników. Utwórz notatnik i dodaj treść przed wygenerowaniem podcastu.",
     noContentSelected: "Nie wybrano treści",
@@ -535,7 +535,7 @@ export const plPL = {
     instructionsPlaceholder: "Dodatkowe wskazówki dołączane do briefingu odcinka...",
     generating: "Generowanie...",
     generate: "Generuj",
-    hostPlaceholder: "Prowadzący {number}",
+    hostPlaceholder: "Prowadzący {{number}}",
     profileRequired: "Wymagany profil odcinka",
     profileRequiredDesc: "Wybierz profil odcinka przed wygenerowaniem podcastu.",
     nameRequired: "Wymagana nazwa odcinka",
@@ -605,8 +605,8 @@ export const plPL = {
     noSpeakerProfiles: "Brak profili mówców. Utwórz jeden, aby udostępnić profile odcinków.",
     noDescription: "Nie podano opisu.",
     usedByCount_one: "Używany przez 1 odcinek",
-    usedByCount_other: "Używany przez {count} odcinków",
-    usedByCount: "Używany przez {count} odcinków",
+    usedByCount_other: "Używany przez {{count}} odcinków",
+    usedByCount: "Używany przez {{count}} odcinków",
     unused: "Nieużywany",
     voiceId: "Identyfikator głosu",
     backstory: "Tło",
@@ -614,7 +614,7 @@ export const plPL = {
     edit: "Edytuj",
     duplicate: "Duplikuj",
     deleteSpeakerProfileTitle: "Usunąć profil mówcy?",
-    deleteSpeakerProfileDesc: "Usunięcia „{name}” nie można cofnąć.",
+    deleteSpeakerProfileDesc: "Usunięcia „{{name}}” nie można cofnąć.",
     deleteSpeakerDisabledHint: "Usuń tego mówcę z profili odcinków, zanim go usuniesz.",
     deleting: "Usuwanie…",
     episodeProfilesTitle: "Profile odcinków",
@@ -639,7 +639,7 @@ export const plPL = {
     failedToStartGeneration: "Nie udało się rozpocząć generowania",
     tryAgainMoment: "Spróbuj ponownie za chwilę.",
     deleteProfileTitle: "Usunąć profil?",
-    deleteProfileDesc: "Spowoduje to usunięcie „{name}”. Istniejące odcinki zachowają swoje dane, ale nowe nie będą już korzystać z tej konfiguracji.",
+    deleteProfileDesc: "Spowoduje to usunięcie „{{name}}”. Istniejące odcinki zachowają swoje dane, ale nowe nie będą już korzystać z tej konfiguracji.",
     profileCreated: "Utworzono profil",
     profileCreatedDesc: "Profil odcinka „{name}” został pomyślnie utworzony.",
     failedToCreateProfile: "Nie udało się utworzyć profilu",
@@ -661,7 +661,7 @@ export const plPL = {
     transcriptModel: "Model transkrypcji",
     segments: "Segmenty",
     defaultBriefingTitle: "Domyślny briefing",
-    created: "Utworzono {time}",
+    created: "Utworzono {{time}}",
     details: "Szczegóły",
     summaryTab: "Podsumowanie",
     outlineTab: "Konspekt",
@@ -670,7 +670,7 @@ export const plPL = {
     noOutline: "Brak dostępnego konspektu.",
     noTranscript: "Brak dostępnej transkrypcji.",
     deleteEpisodeTitle: "Usunąć odcinek?",
-    deleteEpisodeDesc: "Spowoduje to trwałe usunięcie „{name}” i powiązanego pliku audio.",
+    deleteEpisodeDesc: "Spowoduje to trwałe usunięcie „{{name}}” i powiązanego pliku audio.",
     audioUnavailable: "Audio niedostępne",
     segment: "Segment",
     speaker: "Mówca",
@@ -698,7 +698,7 @@ export const plPL = {
     speakers: "Mówcy",
     speakersDesc: "Skonfiguruj od jednego do czterech głosów dla tego profilu.",
     addSpeaker: "Dodaj mówcę",
-    speakerNumber: "Mówca {number}",
+    speakerNumber: "Mówca {{number}}",
     backstoryPlaceholder: "Krótka biografia lub kontekst mówcy",
     personalityPlaceholder: "Opisz styl i ton",
     outlineModelRequired: "Model konspektu jest wymagany",
@@ -773,7 +773,7 @@ export const plPL = {
     currentVersion: "Bieżąca wersja",
     latestVersion: "Najnowsza wersja",
     status: "Status",
-    updateAvailable: "Dostępna wersja {version}",
+    updateAvailable: "Dostępna wersja {{version}}",
     updateAvailableDesc: "Dostępna jest nowa wersja Open Notebook.",
     upToDate: "Aktualna",
     unknown: "Nieznana",
@@ -795,8 +795,8 @@ export const plPL = {
       failed: "Niepowodzenie",
       leavePageHint: "Możesz opuścić tę stronę, ponieważ operacja będzie działać w tle",
       startNew: "Rozpocznij nową przebudowę",
-      itemsProcessed: "Przesłano zadań: {processed}/{total} ({percent}%)",
-      failedItems: "Nie udało się przesłać zadań: {count}",
+      itemsProcessed: "Przesłano zadań: {{processed}}/{{total}} ({{percent}}%)",
+      failedItems: "Nie udało się przesłać zadań: {{count}}",
       time: "Czas",
       whenToRebuild: "Kiedy powinienem przebudować osadzenia?",
       whenToRebuildAns: "Powinieneś przebudować przy zmianie modeli, aktualizacji wersji, naprawie uszkodzeń lub po imporcie masowym.",
@@ -839,7 +839,7 @@ export const plPL = {
     model: "Model",
     systemPrompt: "Prompt systemowy",
     overrideModelDesc: "Nadpisz domyślny model dla tej sesji czatu. Pozostaw puste, aby użyć domyślnego modelu systemowego.",
-    sessionUseReplacement: "Ta sesja użyje modelu {name} zamiast domyślnego.",
+    sessionUseReplacement: "Ta sesja użyje modelu {{name}} zamiast domyślnego.",
     systemDefault: "Domyślny systemowy",
   },
   models: {
@@ -857,7 +857,7 @@ export const plPL = {
     deleteModel: "Usuń model",
     defaultAssignments: "Domyślne przypisania modeli",
     defaultAssignmentsDesc: "Skonfiguruj, których modeli używać do różnych celów w Open Notebook",
-    missingRequiredModels: "Brakuje wymaganych modeli: {models}. Bez nich Open Notebook może nie działać poprawnie.",
+    missingRequiredModels: "Brakuje wymaganych modeli: {{models}}. Bez nich Open Notebook może nie działać poprawnie.",
     selectModelPlaceholder: "Wybierz model",
     requiredModelPlaceholder: "⚠️ Wymagane – wybierz model",
     chatModelLabel: "Model czatu",
@@ -875,7 +875,7 @@ export const plPL = {
     sttModelLabel: "Model rozpoznawania mowy",
     sttModelDesc: "Używany do transkrypcji audio",
     embeddingChangeTitle: "Zmiana modelu osadzania",
-    embeddingChangeConfirm: "Zamierzasz zmienić model osadzania z {from} na {to}.",
+    embeddingChangeConfirm: "Zamierzasz zmienić model osadzania z {{from}} na {{to}}.",
     rebuildRequired: "Ważne: wymagana przebudowa",
     rebuildReason: "Zmiana modelu osadzania wymaga przebudowy wszystkich istniejących osadzeń, aby zachować spójność. Bez przebudowy Twoje wyszukiwania mogą zwracać nieprawidłowe lub niekompletne wyniki.",
     whatHappensNext: "Co stanie się dalej:",
@@ -888,14 +888,14 @@ export const plPL = {
     changeAndRebuild: "Zmień i przejdź do przebudowy",
     autoAssign: "Przypisz domyślne automatycznie",
     autoAssigning: "Przypisywanie...",
-    autoAssignSuccess: "Automatycznie przypisano modeli domyślnych: {count}",
+    autoAssignSuccess: "Automatycznie przypisano modeli domyślnych: {{count}}",
     autoAssignNoModels: "Brak modeli do przypisania. Najpierw zsynchronizuj modele.",
     autoAssignAlreadySet: "Wszystkie modele domyślne są już skonfigurowane",
     testModel: "Przetestuj model",
     testModelSuccess: "Test modelu zaliczony",
     testModelFailed: "Test modelu nie powiódł się",
     searchOrAddModel: "Szukaj lub wpisz nazwę modelu...",
-    addCustomModel: "Dodaj „{name}”",
+    addCustomModel: "Dodaj „{{name}}”",
   },
   apiKeys: {
     title: "Skonfiguruj swoje AI za pomocą własnych kluczy API",
@@ -905,19 +905,19 @@ export const plPL = {
     configured: "Skonfigurowano",
     notConfigured: "Nieskonfigurowano",
     migrationAvailable: "Wykryto zmienne środowiskowe",
-    migrationDescription: "Liczba kluczy API skonfigurowanych przez zmienne środowiskowe, które można przenieść do bazy danych w celu łatwiejszego zarządzania: {count}.",
+    migrationDescription: "Liczba kluczy API skonfigurowanych przez zmienne środowiskowe, które można przenieść do bazy danych w celu łatwiejszego zarządzania: {{count}}.",
     migrateToDatabase: "Przenieś do bazy danych",
     migrating: "Przenoszenie...",
-    migrationSuccess: "Pomyślnie przeniesiono kluczy API: {count}",
-    migrationErrors: "Nie udało się przenieść kluczy: {count}",
+    migrationSuccess: "Pomyślnie przeniesiono kluczy API: {{count}}",
+    migrationErrors: "Nie udało się przenieść kluczy: {{count}}",
     migrationNothingToMigrate: "Wszystkie klucze są już w bazie danych",
     learnMore: "Dowiedz się, jak skonfigurować klucze API →",
     testConnection: "Przetestuj połączenie",
     testSuccess: "Połączenie udane",
     testFailed: "Test połączenia nie powiódł się",
     syncModels: "Synchronizuj modele",
-    syncSuccess: "Wykryto {discovered} modeli, dodano {new} nowych",
-    syncNoNew: "Wykryto {count} modeli, wszystkie są już zarejestrowane",
+    syncSuccess: "Wykryto {{discovered}} modeli, dodano {{new}} nowych",
+    syncNoNew: "Wykryto {{count}} modeli, wszystkie są już zarejestrowane",
     syncFailed: "Nie udało się zsynchronizować modeli",
     getApiKey: "Uzyskaj klucz API",
     vertexProject: "Identyfikator projektu GCP",
@@ -932,7 +932,7 @@ export const plPL = {
     baseUrlOverrideHint: "Zmień to tylko wtedy, gdy musisz nadpisać domyślny punkt końcowy API dostawcy.",
     numCtx: "Okno kontekstu (num_ctx)",
     numCtxHint: "Maksymalne okno kontekstu dla modeli Ollama. Pozostaw puste, aby użyć wartości domyślnej (8192). Zwiększ tylko jeśli Twój sprzęt obsłuży większe okno.",
-    deleteConfigConfirm: "Czy na pewno chcesz usunąć „{name}”? Tej operacji nie można cofnąć.",
+    deleteConfigConfirm: "Czy na pewno chcesz usunąć „{{name}}”? Tej operacji nie można cofnąć.",
     configSaveSuccess: "Konfiguracja zapisana pomyślnie",
     configUpdateSuccess: "Konfiguracja zaktualizowana pomyślnie",
     configDeleteSuccess: "Konfiguracja usunięta pomyślnie",
@@ -944,7 +944,7 @@ export const plPL = {
     encryptionRequired: "Klucz szyfrowania nie został skonfigurowany",
     encryptionRequiredDescription: "Ustaw zmienną środowiskową OPEN_NOTEBOOK_ENCRYPTION_KEY, aby umożliwić bezpieczne przechowywanie poświadczeń.",
     migrationAvailable: "Dostępna migracja kluczy API",
-    migrationDescription: "Liczba dostawców z kluczami API ustawionymi przez zmienne środowiskowe: {count}. Przenieś je do bazy danych w celu łatwiejszego zarządzania.",
+    migrationDescription: "Liczba dostawców z kluczami API ustawionymi przez zmienne środowiskowe: {{count}}. Przenieś je do bazy danych w celu łatwiejszego zarządzania.",
     goToSettings: "Przejdź do Ustawień",
     viewDocs: "Zobacz dokumentację",
   },
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 2af2b746..e7634799 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -63,8 +63,8 @@ export const ptBR = {
     optional: "Opcional",
     type: "Tipo",
     title: "Título",
-    created: "Criado {time}",
-    updated: "Atualizado {time}",
+    created: "Criado {{time}}",
+    updated: "Atualizado {{time}}",
     actions: "Ações",
     noResults: "Sem resultados",
     references: "Referências",
@@ -107,10 +107,10 @@ export const ptBR = {
     reasoning: "Raciocínio",
     searchTerms: "Termos de Busca",
     strategy: "Estratégia",
-    individualAnswers: "Respostas Individuais ({count})",
+    individualAnswers: "Respostas Individuais ({{count}})",
     finalAnswer: "Resposta Final",
-    notebookLabel: "Caderno: {name}",
-    itemNotFound: "Este {type} não foi encontrado",
+    notebookLabel: "Caderno: {{name}}",
+    itemNotFound: "Este {{type}} não foi encontrado",
     accessibility: {
       transformationViews: "Visualizações de transformação",
       searchKB: "Perguntar ou buscar na base de conhecimento",
@@ -231,12 +231,12 @@ export const ptBR = {
     archive: "Arquivar",
     unarchive: "Desarquivar",
     deleteNotebook: "Excluir Caderno",
-    deleteNotebookDesc: "Tem certeza que deseja excluir \"{name}\"? Esta ação não pode ser desfeita.",
+    deleteNotebookDesc: "Tem certeza que deseja excluir \"{{name}}\"? Esta ação não pode ser desfeita.",
     deleteNotebookLoading: "Carregando prévia da exclusão...",
-    deleteNotebookNotes: "{count} nota(s) serão permanentemente excluídas.",
+    deleteNotebookNotes: "{{count}} nota(s) serão permanentemente excluídas.",
     deleteNotebookNoNotes: "Nenhuma nota para excluir.",
-    deleteNotebookExclusiveSources: "{count} fonte(s) existem apenas neste caderno.",
-    deleteNotebookSharedSources: "{count} fonte(s) são compartilhadas com outros cadernos e serão desvinculadas.",
+    deleteNotebookExclusiveSources: "{{count}} fonte(s) existem apenas neste caderno.",
+    deleteNotebookSharedSources: "{{count}} fonte(s) são compartilhadas com outros cadernos e serão desvinculadas.",
     deleteNotebookNoSources: "Nenhuma fonte neste caderno.",
     deleteExclusiveSourcesLabel: "Excluir fontes exclusivas",
     keepExclusiveSourcesLabel: "Desvincular e manter",
@@ -304,7 +304,7 @@ export const ptBR = {
     createFirstSource: "Adicione sua primeira fonte para começar a construir sua base de conhecimento.",
     deleteSourceConfirm: "Tem certeza que deseja excluir esta fonte?",
     deleteConfirm: "Tem certeza que deseja excluir isto?",
-    deleteConfirmWithTitle: "Tem certeza que deseja excluir \"{title}\"?",
+    deleteConfirmWithTitle: "Tem certeza que deseja excluir \"{{title}}\"?",
     deleteSuccess: "Fonte excluída com sucesso. Nota: Para excluir o arquivo do armazenamento, você deve habilitar a opção \"excluir arquivo\" na página de configurações.",
     failedToDelete: "Falha ao excluir fonte",
     sourceQueued: "Fonte Enfileirada",
@@ -320,16 +320,16 @@ export const ptBR = {
     sourceRequeued: "Fonte Reenfileirada",
     sourceRequeuedDesc: "A fonte foi reenfileirada para processamento.",
     failedToRetry: "Falha ao Tentar Novamente",
-    sourcesAddedToNotebook: "{count} fonte(s) adicionada(s) ao caderno",
+    sourcesAddedToNotebook: "{{count}} fonte(s) adicionada(s) ao caderno",
     failedToAddSourcesToNotebook: "Falha ao adicionar fontes ao caderno",
-    partialAddSuccess: "{success} fonte(s) adicionada(s), {failed} falhou(aram)",
+    partialAddSuccess: "{{success}} fonte(s) adicionada(s), {{failed}} falhou(aram)",
     sourceRemovedFromNotebook: "Fonte removida do caderno com sucesso",
     failedToRemoveSourceFromNotebook: "Falha ao remover fonte do caderno",
     removeConfirm: "Tem certeza que deseja remover isto do caderno?",
     checking: "Verificando...",
     untitledSource: "Fonte Sem Título",
-    maxItems: "máx {count}",
-    insightsCount: "{count} insights",
+    maxItems: "máx {{count}}",
+    insightsCount: "{{count}} insights",
     details: "Detalhes",
     detailsTitle: "Detalhes da Fonte",
     content: "Conteúdo",
@@ -371,7 +371,7 @@ export const ptBR = {
     enterUrlsPlaceholder: "Digite as URLs, uma por linha\nhttps://exemplo.com/artigo1\nhttps://exemplo.com/artigo2",
     batchUrlHint: "Cole múltiplas URLs (uma por linha) para importação em lote",
     invalidUrlsDetected: "URLs inválidas detectadas:",
-    lineLabel: "Linha {line}",
+    lineLabel: "Linha {{line}}",
     fixInvalidUrls: "Por favor, corrija ou remova as URLs inválidas para continuar",
     selectMultipleFilesHint: "Selecione múltiplos arquivos para importação em lote. Suportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Mídia (MP4, MP3, WAV, M4A), Imagens (JPG, PNG), Arquivos (ZIP)",
     selectedFiles: "Arquivos selecionados:",
@@ -380,8 +380,8 @@ export const ptBR = {
     titlePlaceholder: "Dê um título descritivo para sua fonte",
     batchTitlesAuto: "Os títulos serão gerados automaticamente para cada fonte.",
     batchCommonSettings: "Os mesmos cadernos e transformações serão aplicados a todos os itens.",
-    urlsCount: "{count} URL(s)",
-    filesCount: "{count} arquivo(s)",
+    urlsCount: "{{count}} URL(s)",
+    filesCount: "{{count}} arquivo(s)",
     addSource: "Adicionar Fonte",
     notEmbeddedAlert: "Conteúdo Não Incorporado",
     notEmbeddedDesc: "Este conteúdo não foi incorporado para busca vetorial. A incorporação habilita recursos avançados de busca e melhor descoberta de conteúdo.",
@@ -404,8 +404,8 @@ export const ptBR = {
     searchPlaceholder: "Buscar fontes por nome ou URL...",
     noNotebooksFound: "Nenhum caderno encontrado.",
     showingFirst100: "Mostrando as primeiras 100 fontes. Use a busca para encontrar específicas.",
-    selectedCount: "{count} fontes selecionadas",
-    added: "Adicionado em {date}",
+    selectedCount: "{{count}} fontes selecionadas",
+    added: "Adicionado em {{date}}",
     addUrl: "Adicionar URL",
     uploadFile: "Enviar Arquivo",
     enterText: "Inserir Texto",
@@ -413,7 +413,7 @@ export const ptBR = {
     processingFiles: "Processando seus arquivos...",
     titleRequired: "Um título é obrigatório para conteúdo de texto",
     titleGenerated: "Se deixado vazio, um título será gerado a partir do conteúdo",
-    batchCount: "{count} {type} serão processados",
+    batchCount: "{{count}} {{type}} serão processados",
     enableEmbedding: "Habilitar incorporação para busca",
     embeddingDesc: "Permite que esta fonte seja encontrada em buscas vetoriais e consultas de IA",
     embeddingAlways: "Incorporação habilitada automaticamente",
@@ -426,13 +426,13 @@ export const ptBR = {
     insightsDesc: "Insights gerados a partir da análise do modelo",
     uploadedFile: "Arquivo enviado",
     fileUnavailableDesc: "Este arquivo está indisponível no momento por razões do sistema de armazenamento.",
-    batchSuccess: "{count} fonte(s) criada(s) com sucesso",
-    batchFailed: "Falha ao criar todas as {count} fontes",
-    batchPartial: "{success} sucesso, {failed} falhou(aram)",
+    batchSuccess: "{{count}} fonte(s) criada(s) com sucesso",
+    batchFailed: "Falha ao criar todas as {{count}} fontes",
+    batchPartial: "{{success}} sucesso, {{failed}} falhou(aram)",
     submittingSource: "Enviando fonte para processamento...",
-    processingBatchSources: "Processando {count} fontes. Isso pode levar alguns momentos.",
+    processingBatchSources: "Processando {{count}} fontes. Isso pode levar alguns momentos.",
     processingSource: "Sua fonte está sendo processada. Isso pode levar alguns momentos.",
-    maxFilesAllowed: "Máximo de {count} arquivos permitidos por lote",
+    maxFilesAllowed: "Máximo de {{count}} arquivos permitidos por lote",
   },
   chat: {
     sessions: "Sessões",
@@ -442,17 +442,17 @@ export const ptBR = {
     deleteSessionDesc: "Tem certeza que deseja excluir esta sessão de chat? Esta ação não pode ser desfeita.",
     sendPlaceholder: "Pergunte qualquer coisa sobre suas fontes...",
     sessionsTitle: "Sessões de Chat",
-    chatWith: "Conversar com {name}",
-    startConversation: "Inicie uma conversa sobre este {type}",
+    chatWith: "Conversar com {{name}}",
+    startConversation: "Inicie uma conversa sobre este {{type}}",
     askQuestions: "Faça perguntas para entender melhor o conteúdo",
-    pressToSend: "Pressione {key} para enviar",
+    pressToSend: "Pressione {{key}} para enviar",
     model: "Modelo",
     createToStart: "Crie uma sessão para começar.",
     chatWithNotebook: "Conversar com Caderno",
     unableToLoadChat: "Não foi possível carregar o chat",
     noDescription: "Sem descrição",
     startByCreating: "Comece criando seu primeiro caderno para organizar sua pesquisa.",
-    messagesCount: "{count} mensagens",
+    messagesCount: "{{count}} mensagens",
     sessionCreated: "Sessão de chat criada",
     sessionUpdated: "Sessão atualizada",
     sessionDeleted: "Sessão excluída",
@@ -487,17 +487,17 @@ export const ptBR = {
     searchIn: "Buscar Em",
     searchSources: "Buscar Fontes",
     searchNotes: "Buscar Notas",
-    resultsFound: "{count} resultados encontrados",
-    matches: "Correspondências ({count})",
-    noResultsFor: "Nenhum resultado encontrado para \"{query}\"",
+    resultsFound: "{{count}} resultados encontrados",
+    matches: "Correspondências ({{count}})",
+    noResultsFor: "Nenhum resultado encontrado para \"{{query}}\"",
     notSet: "Não definido",
     saveToNotebook: "Salvar no Caderno",
     saveSuccess: "Salvo no caderno com sucesso",
     saveError: "Falha ao salvar no caderno",
     selectNotebook: "Selecionar Caderno",
     searchAndAsk: "Buscar e Perguntar",
-    searchResultsFor: "Resultados da busca para \"{query}\"",
-    askAbout: "Perguntar sobre \"{query}\"",
+    searchResultsFor: "Resultados da busca para \"{{query}}\"",
+    askAbout: "Perguntar sobre \"{{query}}\"",
     orSearchKb: "Ou busque em sua base de conhecimento",
     saving: "Salvando...",
     advancedModelTitle: "Seleção Avançada de Modelo",
@@ -516,9 +516,9 @@ export const ptBR = {
     generateEpisodeDesc: "Selecione o conteúdo a incluir e configure os detalhes do episódio antes de gerar um novo episódio de podcast.",
     content: "Conteúdo",
     contentDesc: "Escolha cadernos, fontes e notas para incluir neste episódio.",
-    itemsSelected: "{count} itens selecionados",
-    tokens: "{count} tokens",
-    chars: "{count} caracteres",
+    itemsSelected: "{{count}} itens selecionados",
+    tokens: "{{value}} tokens",
+    chars: "{{value}} caracteres",
     loadingNotebooks: "Carregando cadernos...",
     noNotebooksFoundInPodcasts: "Nenhum caderno encontrado. Crie um caderno e adicione conteúdo antes de gerar um podcast.",
     noContentSelected: "Nenhum conteúdo selecionado",
@@ -535,7 +535,7 @@ export const ptBR = {
     instructionsPlaceholder: "Qualquer conselho suplementar para adicionar ao briefing do episódio...",
     generating: "Gerando...",
     generate: "Gerar",
-    hostPlaceholder: "Apresentador {number}",
+    hostPlaceholder: "Apresentador {{number}}",
     profileRequired: "Perfil de Episódio Necessário",
     profileRequiredDesc: "Selecione um perfil de episódio antes de gerar um podcast.",
     nameRequired: "Nome do episódio necessário",
@@ -605,8 +605,8 @@ export const ptBR = {
     noSpeakerProfiles: "Nenhum perfil de locutor ainda. Crie um para disponibilizar perfis de episódio.",
     noDescription: "Nenhuma descrição fornecida.",
     usedByCount_one: "Usado por 1 episódio",
-    usedByCount_other: "Usado por {count} episódios",
-    usedByCount: "Usado por {count} episódios",
+    usedByCount_other: "Usado por {{count}} episódios",
+    usedByCount: "Usado por {{count}} episódios",
     unused: "Não utilizado",
     voiceId: "ID da Voz",
     backstory: "História",
@@ -614,7 +614,7 @@ export const ptBR = {
     edit: "Editar",
     duplicate: "Duplicar",
     deleteSpeakerProfileTitle: "Excluir perfil de locutor?",
-    deleteSpeakerProfileDesc: "Excluir \"{name}\" não pode ser desfeito.",
+    deleteSpeakerProfileDesc: "Excluir \"{{name}}\" não pode ser desfeito.",
     deleteSpeakerDisabledHint: "Remova este locutor dos perfis de episódio antes de excluí-lo.",
     deleting: "Excluindo…",
     episodeProfilesTitle: "Perfis de episódio",
@@ -639,7 +639,7 @@ export const ptBR = {
     failedToStartGeneration: "Falha ao iniciar geração",
     tryAgainMoment: "Por favor, tente novamente em um momento.",
     deleteProfileTitle: "Excluir perfil?",
-    deleteProfileDesc: "Isso removerá \"{name}\". Episódios existentes mantêm seus dados, mas novos não usarão mais esta configuração.",
+    deleteProfileDesc: "Isso removerá \"{{name}}\". Episódios existentes mantêm seus dados, mas novos não usarão mais esta configuração.",
     profileCreated: "Perfil Criado",
     profileCreatedDesc: "O perfil de episódio \"{name}\" foi criado com sucesso.",
     failedToCreateProfile: "Falha ao criar perfil",
@@ -661,7 +661,7 @@ export const ptBR = {
     transcriptModel: "Modelo de transcrição",
     segments: "Segmentos",
     defaultBriefingTitle: "Briefing padrão",
-    created: "Criado em {time}",
+    created: "Criado em {{time}}",
     details: "Detalhes",
     summaryTab: "Resumo",
     outlineTab: "Outline",
@@ -670,7 +670,7 @@ export const ptBR = {
     noOutline: "Nenhum outline disponível.",
     noTranscript: "Nenhuma transcrição disponível.",
     deleteEpisodeTitle: "Excluir episódio?",
-    deleteEpisodeDesc: "Isso removerá \"{name}\" e seu arquivo de áudio permanentemente.",
+    deleteEpisodeDesc: "Isso removerá \"{{name}}\" e seu arquivo de áudio permanentemente.",
     audioUnavailable: "Áudio indisponível",
     segment: "Segmento",
     speaker: "Locutor",
@@ -698,7 +698,7 @@ export const ptBR = {
     speakers: "Locutores",
     speakersDesc: "Configure entre uma e quatro vozes para este perfil.",
     addSpeaker: "Adicionar locutor",
-    speakerNumber: "Locutor {number}",
+    speakerNumber: "Locutor {{number}}",
     backstoryPlaceholder: "Breve biografia ou contexto para o locutor",
     personalityPlaceholder: "Descreva estilo e tom",
     outlineModelRequired: "Modelo de outline é obrigatório",
@@ -773,7 +773,7 @@ export const ptBR = {
     currentVersion: "Versão Atual",
     latestVersion: "Última Versão",
     status: "Status",
-    updateAvailable: "Versão {version} Disponível",
+    updateAvailable: "Versão {{version}} Disponível",
     updateAvailableDesc: "Uma nova versão do Open Notebook está disponível.",
     upToDate: "Atualizado",
     unknown: "Desconhecido",
@@ -795,8 +795,8 @@ export const ptBR = {
       failed: "Falhou",
       leavePageHint: "Você pode sair desta página pois isso será executado em segundo plano",
       startNew: "Iniciar Nova Reconstrução",
-      itemsProcessed: "{processed}/{total} jobs enviados ({percent}%)",
-      failedItems: "{count} jobs falharam ao enviar",
+      itemsProcessed: "{{processed}}/{{total}} jobs enviados ({{percent}}%)",
+      failedItems: "{{count}} jobs falharam ao enviar",
       time: "Tempo",
       whenToRebuild: "Quando devo reconstruir embeddings?",
       whenToRebuildAns: "Você deve reconstruir ao trocar modelos, atualizar versões, corrigir corrupção ou após importações em massa.",
@@ -839,7 +839,7 @@ export const ptBR = {
     model: "Modelo",
     systemPrompt: "Prompt do Sistema",
     overrideModelDesc: "Substitua o modelo padrão para esta sessão de chat. Deixe vazio para usar o padrão do sistema.",
-    sessionUseReplacement: "Esta sessão usará {name} em vez do modelo padrão.",
+    sessionUseReplacement: "Esta sessão usará {{name}} em vez do modelo padrão.",
     systemDefault: "Padrão do Sistema",
   },
   models: {
@@ -857,7 +857,7 @@ export const ptBR = {
     deleteModel: "Excluir Modelo",
     defaultAssignments: "Atribuições de Modelo Padrão",
     defaultAssignmentsDesc: "Configure quais modelos usar para diferentes propósitos no Open Notebook",
-    missingRequiredModels: "Modelos obrigatórios ausentes: {models}. O Open Notebook pode não funcionar corretamente sem eles.",
+    missingRequiredModels: "Modelos obrigatórios ausentes: {{models}}. O Open Notebook pode não funcionar corretamente sem eles.",
     selectModelPlaceholder: "Selecione um modelo",
     requiredModelPlaceholder: "⚠️ Obrigatório - Selecione um modelo",
     chatModelLabel: "Modelo de Chat",
@@ -875,7 +875,7 @@ export const ptBR = {
     sttModelLabel: "Modelo Speech-to-Text",
     sttModelDesc: "Usado para transcrição de áudio",
     embeddingChangeTitle: "Alteração de Modelo de Embedding",
-    embeddingChangeConfirm: "Você está prestes a alterar seu modelo de embedding de {from} para {to}.",
+    embeddingChangeConfirm: "Você está prestes a alterar seu modelo de embedding de {{from}} para {{to}}.",
     rebuildRequired: "Importante: Reconstrução Necessária",
     rebuildReason: "Alterar seu modelo de embedding requer reconstruir todos os embeddings existentes para manter a consistência. Sem reconstruir, suas buscas podem retornar resultados incorretos ou incompletos.",
     whatHappensNext: "O que acontece em seguida:",
@@ -888,14 +888,14 @@ export const ptBR = {
     changeAndRebuild: "Alterar e Ir para Reconstrução",
     autoAssign: "Atribuir Automaticamente",
     autoAssigning: "Atribuindo...",
-    autoAssignSuccess: "{count} modelos padrão atribuídos automaticamente",
+    autoAssignSuccess: "{{count}} modelos padrão atribuídos automaticamente",
     autoAssignNoModels: "Nenhum modelo disponível para atribuir. Por favor, sincronize os modelos primeiro.",
     autoAssignAlreadySet: "Todos os modelos padrão já estão configurados",
     testModel: "Testar Modelo",
     testModelSuccess: "Teste do Modelo Passou",
     testModelFailed: "Teste do Modelo Falhou",
     searchOrAddModel: "Pesquisar ou digitar nome do modelo...",
-    addCustomModel: "Adicionar \"{name}\"",
+    addCustomModel: "Adicionar \"{{name}}\"",
   },
   apiKeys: {
     title: "Configure sua IA com suas próprias chaves de API",
@@ -905,19 +905,19 @@ export const ptBR = {
     configured: "Configurado",
     notConfigured: "Não configurado",
     migrationAvailable: "Variáveis de Ambiente Detectadas",
-    migrationDescription: "{count} chave(s) de API estão configuradas via variáveis de ambiente e podem ser migradas para o banco de dados para facilitar o gerenciamento.",
+    migrationDescription: "{{count}} chave(s) de API estão configuradas via variáveis de ambiente e podem ser migradas para o banco de dados para facilitar o gerenciamento.",
     migrateToDatabase: "Migrar para Banco de Dados",
     migrating: "Migrando...",
-    migrationSuccess: "{count} chave(s) de API migrada(s) com sucesso",
-    migrationErrors: "{count} chave(s) falhou ao migrar",
+    migrationSuccess: "{{count}} chave(s) de API migrada(s) com sucesso",
+    migrationErrors: "{{count}} chave(s) falhou ao migrar",
     migrationNothingToMigrate: "Todas as chaves já estão no banco de dados",
     learnMore: "Saiba como configurar chaves de API →",
     testConnection: "Testar Conexão",
     testSuccess: "Conexão bem-sucedida",
     testFailed: "Falha no teste de conexão",
     syncModels: "Sincronizar Modelos",
-    syncSuccess: "Descobertos {discovered} modelos, {new} novos adicionados",
-    syncNoNew: "Descobertos {count} modelos, todos já registrados",
+    syncSuccess: "Descobertos {{discovered}} modelos, {{new}} novos adicionados",
+    syncNoNew: "Descobertos {{count}} modelos, todos já registrados",
     syncFailed: "Falha ao sincronizar modelos",
     getApiKey: "Obter Chave de API",
     vertexProject: "ID do Projeto GCP",
@@ -932,7 +932,7 @@ export const ptBR = {
     baseUrlOverrideHint: "Altere apenas se precisar sobrescrever o endpoint padrão do provedor.",
     numCtx: "Janela de Contexto (num_ctx)",
     numCtxHint: "Janela de contexto máxima para modelos Ollama. Deixe vazio para usar o padrão (8192). Aumente apenas se seu hardware suportar uma janela maior.",
-    deleteConfigConfirm: "Tem certeza de que deseja excluir '{name}'? Esta ação não pode ser desfeita.",
+    deleteConfigConfirm: "Tem certeza de que deseja excluir '{{name}}'? Esta ação não pode ser desfeita.",
     configSaveSuccess: "Configuração salva com sucesso",
     configUpdateSuccess: "Configuração atualizada com sucesso",
     configDeleteSuccess: "Configuração excluída com sucesso",
@@ -944,7 +944,7 @@ export const ptBR = {
     encryptionRequired: "Chave de criptografia não configurada",
     encryptionRequiredDescription: "Configure a variável de ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY para habilitar o armazenamento seguro de credenciais.",
     migrationAvailable: "Migração de chaves de API disponível",
-    migrationDescription: "{count} provedor(es) possuem chaves de API definidas por variáveis de ambiente. Migre-as para o banco de dados para facilitar o gerenciamento.",
+    migrationDescription: "{{count}} provedor(es) possuem chaves de API definidas por variáveis de ambiente. Migre-as para o banco de dados para facilitar o gerenciamento.",
     goToSettings: "Ir para Configurações",
     viewDocs: "Ver documentação",
   },
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 56ee8c5d..080d36b6 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -63,8 +63,8 @@ export const ruRU = {
     optional: "Необязательно",
     type: "Тип",
     title: "Название",
-    created: "Создано {time}",
-    updated: "Обновлено {time}",
+    created: "Создано {{time}}",
+    updated: "Обновлено {{time}}",
     actions: "Действия",
     noResults: "Нет результатов",
     references: "Ссылки",
@@ -107,10 +107,10 @@ export const ruRU = {
     reasoning: "Рассуждение",
     searchTerms: "Поисковые запросы",
     strategy: "Стратегия",
-    individualAnswers: "Отдельные ответы ({count})",
+    individualAnswers: "Отдельные ответы ({{count}})",
     finalAnswer: "Итоговый ответ",
-    notebookLabel: "Блокнот: {name}",
-    itemNotFound: "Этот {type} не найден",
+    notebookLabel: "Блокнот: {{name}}",
+    itemNotFound: "Этот {{type}} не найден",
     accessibility: {
       transformationViews: "Представления трансформаций",
       searchKB: "Спросить или найти в базе знаний",
@@ -231,12 +231,12 @@ export const ruRU = {
     archive: "Архивировать",
     unarchive: "Разархивировать",
     deleteNotebook: "Удалить блокнот",
-    deleteNotebookDesc: "Вы уверены, что хотите удалить «{name}»? Это действие нельзя отменить.",
+    deleteNotebookDesc: "Вы уверены, что хотите удалить «{{name}}»? Это действие нельзя отменить.",
     deleteNotebookLoading: "Загрузка предварительного просмотра удаления...",
-    deleteNotebookNotes: "Будет удалено заметок: {count}.",
+    deleteNotebookNotes: "Будет удалено заметок: {{count}}.",
     deleteNotebookNoNotes: "Нет заметок для удаления.",
-    deleteNotebookExclusiveSources: "Источников только в этом блокноте: {count}.",
-    deleteNotebookSharedSources: "Источников, связанных с другими блокнотами (будут отвязаны): {count}.",
+    deleteNotebookExclusiveSources: "Источников только в этом блокноте: {{count}}.",
+    deleteNotebookSharedSources: "Источников, связанных с другими блокнотами (будут отвязаны): {{count}}.",
     deleteNotebookNoSources: "В этом блокноте нет источников.",
     deleteExclusiveSourcesLabel: "Удалить эксклюзивные источники",
     keepExclusiveSourcesLabel: "Отвязать и сохранить",
@@ -304,7 +304,7 @@ export const ruRU = {
     createFirstSource: "Добавьте первый источник, чтобы начать создание базы знаний.",
     deleteSourceConfirm: "Вы уверены, что хотите удалить этот источник?",
     deleteConfirm: "Вы уверены, что хотите удалить это?",
-    deleteConfirmWithTitle: "Вы уверены, что хотите удалить «{title}»?",
+    deleteConfirmWithTitle: "Вы уверены, что хотите удалить «{{title}}»?",
     deleteSuccess: "Источник успешно удалён. Примечание: Чтобы удалить файл из хранилища, необходимо включить опцию «Удалить файл» в настройках.",
     failedToDelete: "Не удалось удалить источник",
     sourceQueued: "Источник в очереди",
@@ -320,16 +320,16 @@ export const ruRU = {
     sourceRequeued: "Повторная обработка в очереди",
     sourceRequeuedDesc: "Источник поставлен в очередь на повторную обработку.",
     failedToRetry: "Повтор не удался",
-    sourcesAddedToNotebook: "Добавлено источников в блокнот: {count}",
+    sourcesAddedToNotebook: "Добавлено источников в блокнот: {{count}}",
     failedToAddSourcesToNotebook: "Не удалось добавить источники в блокнот",
-    partialAddSuccess: "Добавлено: {success}, не удалось: {failed}",
+    partialAddSuccess: "Добавлено: {{success}}, не удалось: {{failed}}",
     sourceRemovedFromNotebook: "Источник успешно удалён из блокнота",
     failedToRemoveSourceFromNotebook: "Не удалось удалить источник из блокнота",
     removeConfirm: "Вы уверены, что хотите удалить это из блокнота?",
     checking: "Проверка...",
     untitledSource: "Без названия",
-    maxItems: "макс. {count}",
-    insightsCount: "Инсайтов: {count}",
+    maxItems: "макс. {{count}}",
+    insightsCount: "Инсайтов: {{count}}",
     details: "Детали",
     detailsTitle: "Детали источника",
     content: "Содержимое",
@@ -371,7 +371,7 @@ export const ruRU = {
     enterUrlsPlaceholder: "Введите URL-адреса, по одному на строку\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "Вставьте несколько URL (по одному на строку) для пакетного импорта",
     invalidUrlsDetected: "Обнаружены недопустимые URL:",
-    lineLabel: "Строка {line}",
+    lineLabel: "Строка {{line}}",
     fixInvalidUrls: "Исправьте или удалите недопустимые URL для продолжения",
     selectMultipleFilesHint: "Выберите несколько файлов для пакетного импорта. Поддерживаются: Документы (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Медиа (MP4, MP3, WAV, M4A), Изображения (JPG, PNG), Архивы (ZIP)",
     selectedFiles: "Выбранные файлы:",
@@ -380,8 +380,8 @@ export const ruRU = {
     titlePlaceholder: "Дайте источнику понятное название",
     batchTitlesAuto: "Названия будут автоматически сгенерированы для каждого источника.",
     batchCommonSettings: "Одинаковые блокноты и трансформации будут применены ко всем элементам.",
-    urlsCount: "URL: {count}",
-    filesCount: "Файлов: {count}",
+    urlsCount: "URL: {{count}}",
+    filesCount: "Файлов: {{count}}",
     addSource: "Добавить источник",
     notEmbeddedAlert: "Содержимое без эмбеддинга",
     notEmbeddedDesc: "Для этого содержимого не создан эмбеддинг для векторного поиска. Эмбеддинг обеспечивает расширенные возможности поиска и лучшее обнаружение контента.",
@@ -404,8 +404,8 @@ export const ruRU = {
     searchPlaceholder: "Поиск источников по названию или URL...",
     noNotebooksFound: "Блокноты не найдены.",
     showingFirst100: "Показаны первые 100 источников. Используйте поиск для конкретных результатов.",
-    selectedCount: "Выбрано источников: {count}",
-    added: "Добавлено {date}",
+    selectedCount: "Выбрано источников: {{count}}",
+    added: "Добавлено {{date}}",
     addUrl: "Добавить URL",
     uploadFile: "Загрузить файл",
     enterText: "Ввести текст",
@@ -413,7 +413,7 @@ export const ruRU = {
     processingFiles: "Обработка файлов...",
     titleRequired: "Для текстового содержимого требуется название",
     titleGenerated: "Если оставить пустым, название будет сгенерировано из содержимого",
-    batchCount: "{count} {type} будет обработано",
+    batchCount: "{{count}} {{type}} будет обработано",
     enableEmbedding: "Включить эмбеддинг для поиска",
     embeddingDesc: "Позволяет находить этот источник в векторном поиске и запросах ИИ",
     embeddingAlways: "Эмбеддинг включён автоматически",
@@ -426,13 +426,13 @@ export const ruRU = {
     insightsDesc: "Инсайты, сгенерированные анализом модели",
     uploadedFile: "Загруженный файл",
     fileUnavailableDesc: "Этот файл временно недоступен из-за проблем с хранилищем.",
-    batchSuccess: "Успешно создано источников: {count}",
-    batchFailed: "Не удалось создать все источники: {count}",
-    batchPartial: "Успешно: {success}, не удалось: {failed}",
+    batchSuccess: "Успешно создано источников: {{count}}",
+    batchFailed: "Не удалось создать все источники: {{count}}",
+    batchPartial: "Успешно: {{success}}, не удалось: {{failed}}",
     submittingSource: "Отправка источника на обработку...",
-    processingBatchSources: "Обработка источников: {count}. Это может занять некоторое время.",
+    processingBatchSources: "Обработка источников: {{count}}. Это может занять некоторое время.",
     processingSource: "Источник обрабатывается. Это может занять некоторое время.",
-    maxFilesAllowed: "Максимальное количество файлов в пакете: {count}",
+    maxFilesAllowed: "Максимальное количество файлов в пакете: {{count}}",
   },
   chat: {
     sessions: "Сессии",
@@ -442,17 +442,17 @@ export const ruRU = {
     deleteSessionDesc: "Вы уверены, что хотите удалить эту сессию чата? Это действие нельзя отменить.",
     sendPlaceholder: "Задайте вопрос о ваших источниках...",
     sessionsTitle: "Сессии чата",
-    chatWith: "Чат с {name}",
-    startConversation: "Начните разговор об этом {type}",
+    chatWith: "Чат с {{name}}",
+    startConversation: "Начните разговор об этом {{type}}",
     askQuestions: "Задавайте вопросы, чтобы лучше понять содержимое",
-    pressToSend: "Нажмите {key} для отправки",
+    pressToSend: "Нажмите {{key}} для отправки",
     model: "Модель",
     createToStart: "Создайте сессию для начала.",
     chatWithNotebook: "Чат с блокнотом",
     unableToLoadChat: "Не удалось загрузить чат",
     noDescription: "Без описания",
     startByCreating: "Начните с создания первого блокнота для организации исследований.",
-    messagesCount: "Сообщений: {count}",
+    messagesCount: "Сообщений: {{count}}",
     sessionCreated: "Сессия чата создана",
     sessionUpdated: "Сессия обновлена",
     sessionDeleted: "Сессия удалена",
@@ -487,17 +487,17 @@ export const ruRU = {
     searchIn: "Искать в",
     searchSources: "Искать в источниках",
     searchNotes: "Искать в заметках",
-    resultsFound: "Найдено результатов: {count}",
-    matches: "Совпадения ({count})",
-    noResultsFor: "Нет результатов для «{query}»",
+    resultsFound: "Найдено результатов: {{count}}",
+    matches: "Совпадения ({{count}})",
+    noResultsFor: "Нет результатов для «{{query}}»",
     notSet: "Не задано",
     saveToNotebook: "Сохранить в блокнот",
     saveSuccess: "Успешно сохранено в блокнот",
     saveError: "Не удалось сохранить в блокнот",
     selectNotebook: "Выберите блокнот",
     searchAndAsk: "Поиск и запрос",
-    searchResultsFor: "Результаты поиска для «{query}»",
-    askAbout: "Спросить о «{query}»",
+    searchResultsFor: "Результаты поиска для «{{query}}»",
+    askAbout: "Спросить о «{{query}}»",
     orSearchKb: "Или выполнить поиск по базе знаний",
     saving: "Сохранение...",
     advancedModelTitle: "Расширенный выбор моделей",
@@ -516,9 +516,9 @@ export const ruRU = {
     generateEpisodeDesc: "Выберите контент для включения и настройте параметры эпизода перед генерацией.",
     content: "Контент",
     contentDesc: "Выберите блокноты, источники и заметки для этого эпизода.",
-    itemsSelected: "Выбрано элементов: {count}",
-    tokens: "Токенов: {count}",
-    chars: "Символов: {count}",
+    itemsSelected: "Выбрано элементов: {{count}}",
+    tokens: "Токенов: {{value}}",
+    chars: "Символов: {{value}}",
     loadingNotebooks: "Загрузка блокнотов...",
     noNotebooksFoundInPodcasts: "Блокноты не найдены. Создайте блокнот и добавьте контент перед генерацией подкаста.",
     noContentSelected: "Контент не выбран",
@@ -535,7 +535,7 @@ export const ruRU = {
     instructionsPlaceholder: "Любые дополнительные указания для брифинга эпизода...",
     generating: "Генерация...",
     generate: "Сгенерировать",
-    hostPlaceholder: "Ведущий {number}",
+    hostPlaceholder: "Ведущий {{number}}",
     profileRequired: "Требуется профиль эпизода",
     profileRequiredDesc: "Выберите профиль эпизода перед генерацией подкаста.",
     nameRequired: "Требуется название эпизода",
@@ -605,8 +605,8 @@ export const ruRU = {
     noSpeakerProfiles: "Пока нет профилей говорящих. Создайте один, чтобы профили эпизодов стали доступны.",
     noDescription: "Описание не указано.",
     usedByCount_one: "Используется в 1 эпизоде",
-    usedByCount_other: "Используется в {count} эпизодах",
-    usedByCount: "Используется в {count} эпизодах",
+    usedByCount_other: "Используется в {{count}} эпизодах",
+    usedByCount: "Используется в {{count}} эпизодах",
     unused: "Не используется",
     voiceId: "ID голоса",
     backstory: "Биография",
@@ -614,7 +614,7 @@ export const ruRU = {
     edit: "Редактировать",
     duplicate: "Дублировать",
     deleteSpeakerProfileTitle: "Удалить профиль говорящего?",
-    deleteSpeakerProfileDesc: "Удаление «{name}» нельзя отменить.",
+    deleteSpeakerProfileDesc: "Удаление «{{name}}» нельзя отменить.",
     deleteSpeakerDisabledHint: "Сначала удалите этого говорящего из профилей эпизодов.",
     deleting: "Удаление…",
     episodeProfilesTitle: "Профили эпизодов",
@@ -639,7 +639,7 @@ export const ruRU = {
     failedToStartGeneration: "Не удалось запустить генерацию",
     tryAgainMoment: "Попробуйте ещё раз через некоторое время.",
     deleteProfileTitle: "Удалить профиль?",
-    deleteProfileDesc: "Это удалит «{name}». Существующие эпизоды сохранят свои данные, но новые больше не смогут использовать эту конфигурацию.",
+    deleteProfileDesc: "Это удалит «{{name}}». Существующие эпизоды сохранят свои данные, но новые больше не смогут использовать эту конфигурацию.",
     profileCreated: "Профиль создан",
     profileCreatedDesc: "Профиль эпизода «{name}» успешно создан.",
     failedToCreateProfile: "Не удалось создать профиль",
@@ -661,7 +661,7 @@ export const ruRU = {
     transcriptModel: "Модель транскрипта",
     segments: "Сегменты",
     defaultBriefingTitle: "Брифинг по умолчанию",
-    created: "Создано {time}",
+    created: "Создано {{time}}",
     details: "Детали",
     summaryTab: "Краткое",
     outlineTab: "План",
@@ -670,7 +670,7 @@ export const ruRU = {
     noOutline: "План недоступен.",
     noTranscript: "Транскрипт недоступен.",
     deleteEpisodeTitle: "Удалить эпизод?",
-    deleteEpisodeDesc: "Это навсегда удалит «{name}» и его аудиофайл.",
+    deleteEpisodeDesc: "Это навсегда удалит «{{name}}» и его аудиофайл.",
     audioUnavailable: "Аудио недоступно",
     segment: "Сегмент",
     speaker: "Говорящий",
@@ -698,7 +698,7 @@ export const ruRU = {
     speakers: "Говорящие",
     speakersDesc: "Настройте от одного до четырёх голосов для этого профиля.",
     addSpeaker: "Добавить говорящего",
-    speakerNumber: "Говорящий {number}",
+    speakerNumber: "Говорящий {{number}}",
     backstoryPlaceholder: "Краткая биография или контекст для говорящего",
     personalityPlaceholder: "Опишите стиль и тон",
     outlineModelRequired: "Требуется модель плана",
@@ -773,7 +773,7 @@ export const ruRU = {
     currentVersion: "Текущая версия",
     latestVersion: "Последняя версия",
     status: "Статус",
-    updateAvailable: "Доступна версия {version}",
+    updateAvailable: "Доступна версия {{version}}",
     updateAvailableDesc: "Доступна новая версия Open Notebook.",
     upToDate: "Актуальная версия",
     unknown: "Неизвестно",
@@ -795,8 +795,8 @@ export const ruRU = {
       failed: "Ошибка",
       leavePageHint: "Вы можете покинуть эту страницу — процесс выполняется в фоне",
       startNew: "Начать новое пересоздание",
-      itemsProcessed: "Отправлено задач: {processed}/{total} ({percent}%)",
-      failedItems: "Не удалось отправить задач: {count}",
+      itemsProcessed: "Отправлено задач: {{processed}}/{{total}} ({{percent}}%)",
+      failedItems: "Не удалось отправить задач: {{count}}",
       time: "Время",
       whenToRebuild: "Когда нужно пересоздавать эмбеддинги?",
       whenToRebuildAns: "При смене модели, обновлении версии, исправлении повреждений или после массового импорта.",
@@ -839,7 +839,7 @@ export const ruRU = {
     model: "Модель",
     systemPrompt: "Системный промпт",
     overrideModelDesc: "Переопределить модель по умолчанию для этой сессии чата. Оставьте пустым для использования системной модели.",
-    sessionUseReplacement: "Эта сессия будет использовать {name} вместо модели по умолчанию.",
+    sessionUseReplacement: "Эта сессия будет использовать {{name}} вместо модели по умолчанию.",
     systemDefault: "Системная по умолчанию",
   },
   models: {
@@ -857,7 +857,7 @@ export const ruRU = {
     deleteModel: "Удалить модель",
     defaultAssignments: "Назначение моделей по умолчанию",
     defaultAssignmentsDesc: "Настройте, какие модели использовать для различных задач в Open Notebook",
-    missingRequiredModels: "Отсутствуют необходимые модели: {models}. Open Notebook может работать некорректно без них.",
+    missingRequiredModels: "Отсутствуют необходимые модели: {{models}}. Open Notebook может работать некорректно без них.",
     selectModelPlaceholder: "Выберите модель",
     requiredModelPlaceholder: "⚠️ Обязательно — выберите модель",
     chatModelLabel: "Модель чата",
@@ -875,7 +875,7 @@ export const ruRU = {
     sttModelLabel: "Модель распознавания речи",
     sttModelDesc: "Используется для транскрибации аудио",
     embeddingChangeTitle: "Изменение модели эмбеддинга",
-    embeddingChangeConfirm: "Вы собираетесь изменить модель эмбеддинга с {from} на {to}.",
+    embeddingChangeConfirm: "Вы собираетесь изменить модель эмбеддинга с {{from}} на {{to}}.",
     rebuildRequired: "Важно: Требуется пересоздание",
     rebuildReason: "Изменение модели эмбеддинга требует пересоздания всех существующих эмбеддингов для сохранения согласованности. Без пересоздания поиск может возвращать некорректные или неполные результаты.",
     whatHappensNext: "Что произойдёт далее:",
@@ -888,14 +888,14 @@ export const ruRU = {
     changeAndRebuild: "Изменить и перейти к пересозданию",
     autoAssign: "Автоназначение по умолчанию",
     autoAssigning: "Назначение...",
-    autoAssignSuccess: "{count} моделей по умолчанию автоматически назначено",
+    autoAssignSuccess: "{{count}} моделей по умолчанию автоматически назначено",
     autoAssignNoModels: "Нет доступных моделей для назначения. Сначала синхронизируйте модели.",
     autoAssignAlreadySet: "Все модели по умолчанию уже настроены",
     testModel: "Тестировать модель",
     testModelSuccess: "Тест модели пройден",
     testModelFailed: "Тест модели не пройден",
     searchOrAddModel: "Поиск или введите имя модели...",
-    addCustomModel: "Добавить \"{name}\"",
+    addCustomModel: "Добавить \"{{name}}\"",
   },
   apiKeys: {
     title: "Настройте ИИ с помощью собственных API-ключей",
@@ -905,19 +905,19 @@ export const ruRU = {
     configured: "Настроено",
     notConfigured: "Не настроено",
     migrationAvailable: "Обнаружены переменные окружения",
-    migrationDescription: "{count} API-ключ(ей) настроено через переменные окружения и может быть перенесено в базу данных для удобного управления.",
+    migrationDescription: "{{count}} API-ключ(ей) настроено через переменные окружения и может быть перенесено в базу данных для удобного управления.",
     migrateToDatabase: "Перенести в базу данных",
     migrating: "Перенос...",
-    migrationSuccess: "{count} API-ключ(ей) успешно перенесено",
-    migrationErrors: "{count} ключ(ей) не удалось перенести",
+    migrationSuccess: "{{count}} API-ключ(ей) успешно перенесено",
+    migrationErrors: "{{count}} ключ(ей) не удалось перенести",
     migrationNothingToMigrate: "Все ключи уже находятся в базе данных",
     learnMore: "Узнайте, как настроить API-ключи →",
     testConnection: "Проверить подключение",
     testSuccess: "Подключение успешно",
     testFailed: "Проверка подключения не удалась",
     syncModels: "Синхронизировать модели",
-    syncSuccess: "Обнаружено {discovered} моделей, добавлено {new} новых",
-    syncNoNew: "Обнаружено {count} моделей, все уже зарегистрированы",
+    syncSuccess: "Обнаружено {{discovered}} моделей, добавлено {{new}} новых",
+    syncNoNew: "Обнаружено {{count}} моделей, все уже зарегистрированы",
     syncFailed: "Не удалось синхронизировать модели",
     getApiKey: "Получить API-ключ",
     vertexProject: "ID проекта GCP",
@@ -932,7 +932,7 @@ export const ruRU = {
     baseUrlOverrideHint: "Изменяйте только если нужно переопределить стандартную конечную точку API провайдера.",
     numCtx: "Окно контекста (num_ctx)",
     numCtxHint: "Максимальное окно контекста для моделей Ollama. Оставьте пустым для значения по умолчанию (8192). Увеличивайте только если ваше оборудование справится с большим окном.",
-    deleteConfigConfirm: "Вы уверены, что хотите удалить «{name}»? Это действие необратимо.",
+    deleteConfigConfirm: "Вы уверены, что хотите удалить «{{name}}»? Это действие необратимо.",
     configSaveSuccess: "Конфигурация успешно сохранена",
     configUpdateSuccess: "Конфигурация успешно обновлена",
     configDeleteSuccess: "Конфигурация успешно удалена",
@@ -944,7 +944,7 @@ export const ruRU = {
     encryptionRequired: "Ключ шифрования не настроен",
     encryptionRequiredDescription: "Установите переменную окружения OPEN_NOTEBOOK_ENCRYPTION_KEY для безопасного хранения учётных данных.",
     migrationAvailable: "Доступна миграция API-ключей",
-    migrationDescription: "{count} провайдер(ов) имеют API-ключи, заданные через переменные окружения. Перенесите их в базу данных для удобного управления.",
+    migrationDescription: "{{count}} провайдер(ов) имеют API-ключи, заданные через переменные окружения. Перенесите их в базу данных для удобного управления.",
     goToSettings: "Перейти к настройкам",
     viewDocs: "Документация",
   },
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 6e9e0dd2..e8ac12c5 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -63,8 +63,8 @@ export const trTR = {
     optional: "İsteğe Bağlı",
     type: "Tür",
     title: "Başlık",
-    created: "{time} oluşturuldu",
-    updated: "{time} güncellendi",
+    created: "{{time}} oluşturuldu",
+    updated: "{{time}} güncellendi",
     actions: "Eylemler",
     noResults: "Sonuç yok",
     references: "Referanslar",
@@ -107,10 +107,10 @@ export const trTR = {
     reasoning: "Akıl Yürütme",
     searchTerms: "Arama Terimleri",
     strategy: "Strateji",
-    individualAnswers: "Bireysel Yanıtlar ({count})",
+    individualAnswers: "Bireysel Yanıtlar ({{count}})",
     finalAnswer: "Son Yanıt",
-    notebookLabel: "Defter: {name}",
-    itemNotFound: "Bu {type} bulunamadı",
+    notebookLabel: "Defter: {{name}}",
+    itemNotFound: "Bu {{type}} bulunamadı",
     accessibility: {
       transformationViews: "Dönüşüm görünümleri",
       searchKB: "Bilgi tabanınızda sor veya ara",
@@ -231,12 +231,12 @@ export const trTR = {
     archive: "Arşivle",
     unarchive: "Arşivden Çıkar",
     deleteNotebook: "Defteri Sil",
-    deleteNotebookDesc: "\"{name}\" defterini silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
+    deleteNotebookDesc: "\"{{name}}\" defterini silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
     deleteNotebookLoading: "Silme önizlemesi yükleniyor...",
-    deleteNotebookNotes: "{count} not kalıcı olarak silinecek.",
+    deleteNotebookNotes: "{{count}} not kalıcı olarak silinecek.",
     deleteNotebookNoNotes: "Silinecek not yok.",
-    deleteNotebookExclusiveSources: "{count} kaynak yalnızca bu defterde bulunuyor.",
-    deleteNotebookSharedSources: "{count} kaynak diğer defterlerle paylaşılıyor ve bağlantısı kesilecek.",
+    deleteNotebookExclusiveSources: "{{count}} kaynak yalnızca bu defterde bulunuyor.",
+    deleteNotebookSharedSources: "{{count}} kaynak diğer defterlerle paylaşılıyor ve bağlantısı kesilecek.",
     deleteNotebookNoSources: "Bu defterde kaynak yok.",
     deleteExclusiveSourcesLabel: "Özel kaynakları sil",
     keepExclusiveSourcesLabel: "Bağlantıyı kes ve sakla",
@@ -304,7 +304,7 @@ export const trTR = {
     createFirstSource: "Bilgi tabanınızı oluşturmaya başlamak için ilk kaynağınızı ekleyin.",
     deleteSourceConfirm: "Bu kaynağı silmek istediğinizden emin misiniz?",
     deleteConfirm: "Bunu silmek istediğinizden emin misiniz?",
-    deleteConfirmWithTitle: "\"{title}\" öğesini silmek istediğinizden emin misiniz?",
+    deleteConfirmWithTitle: "\"{{title}}\" öğesini silmek istediğinizden emin misiniz?",
     deleteSuccess: "Kaynak başarıyla silindi. Not: Dosyayı depolamadan silmek için ayarlar sayfasında \"dosyayı sil\" seçeneğini etkinleştirmeniz gerekir.",
     failedToDelete: "Kaynak silinemedi",
     sourceQueued: "Kaynak Kuyruğa Eklendi",
@@ -320,16 +320,16 @@ export const trTR = {
     sourceRequeued: "Kaynak Yeniden Kuyruğa Alındı",
     sourceRequeuedDesc: "Kaynak işlenmek üzere yeniden kuyruğa alındı.",
     failedToRetry: "Yeniden deneme başarısız",
-    sourcesAddedToNotebook: "{count} kaynak deftere eklendi",
+    sourcesAddedToNotebook: "{{count}} kaynak deftere eklendi",
     failedToAddSourcesToNotebook: "Kaynaklar deftere eklenemedi",
-    partialAddSuccess: "{success} kaynak eklendi, {failed} başarısız",
+    partialAddSuccess: "{{success}} kaynak eklendi, {{failed}} başarısız",
     sourceRemovedFromNotebook: "Kaynak defterden başarıyla kaldırıldı",
     failedToRemoveSourceFromNotebook: "Kaynak defterden kaldırılamadı",
     removeConfirm: "Bunu defterden kaldırmak istediğinizden emin misiniz?",
     checking: "Kontrol ediliyor...",
     untitledSource: "Başlıksız Kaynak",
-    maxItems: "en fazla {count}",
-    insightsCount: "{count} içgörü",
+    maxItems: "en fazla {{count}}",
+    insightsCount: "{{count}} içgörü",
     details: "Ayrıntılar",
     detailsTitle: "Kaynak Ayrıntıları",
     content: "İçerik",
@@ -371,7 +371,7 @@ export const trTR = {
     enterUrlsPlaceholder: "URL'leri her satıra bir tane giriniz\nhttps://ornek.com/makale1\nhttps://ornek.com/makale2",
     batchUrlHint: "Toplu içe aktarma için birden fazla URL yapıştırın (her satıra bir tane)",
     invalidUrlsDetected: "Geçersiz URL'ler tespit edildi:",
-    lineLabel: "Satır {line}",
+    lineLabel: "Satır {{line}}",
     fixInvalidUrls: "Devam etmek için geçersiz URL'leri düzeltin veya kaldırın",
     selectMultipleFilesHint: "Toplu içe aktarma için birden fazla dosya seçin. Desteklenenler: Belgeler (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medya (MP4, MP3, WAV, M4A), Görseller (JPG, PNG), Arşivler (ZIP)",
     selectedFiles: "Seçilen dosyalar:",
@@ -380,8 +380,8 @@ export const trTR = {
     titlePlaceholder: "Kaynağınıza açıklayıcı bir başlık verin",
     batchTitlesAuto: "Her kaynak için başlıklar otomatik olarak oluşturulacak.",
     batchCommonSettings: "Aynı defterler ve dönüşümler tüm öğelere uygulanacak.",
-    urlsCount: "{count} URL",
-    filesCount: "{count} dosya",
+    urlsCount: "{{count}} URL",
+    filesCount: "{{count}} dosya",
     addSource: "Kaynak Ekle",
     notEmbeddedAlert: "İçerik Gömülmedi",
     notEmbeddedDesc: "Bu içerik vektör araması için gömülmedi. Gömme, gelişmiş arama özelliklerini ve daha iyi içerik keşfini etkinleştirir.",
@@ -404,8 +404,8 @@ export const trTR = {
     searchPlaceholder: "Kaynakları ad veya URL ile arayın...",
     noNotebooksFound: "Defter bulunamadı.",
     showingFirst100: "İlk 100 kaynak gösteriliyor. Belirli olanları bulmak için arama yapın.",
-    selectedCount: "{count} kaynak seçildi",
-    added: "{date} tarihinde eklendi",
+    selectedCount: "{{count}} kaynak seçildi",
+    added: "{{date}} tarihinde eklendi",
     addUrl: "URL Ekle",
     uploadFile: "Dosya Yükle",
     enterText: "Metin Girin",
@@ -413,7 +413,7 @@ export const trTR = {
     processingFiles: "Dosyalarınız işleniyor...",
     titleRequired: "Metin içeriği için başlık gereklidir",
     titleGenerated: "Boş bırakılırsa içerikten otomatik başlık oluşturulacak",
-    batchCount: "{count} {type} işlenecek",
+    batchCount: "{{count}} {{type}} işlenecek",
     enableEmbedding: "Arama için gömmeyi etkinleştir",
     embeddingDesc: "Bu kaynağın vektör aramalarında ve yapay zeka sorgularında bulunmasını sağlar",
     embeddingAlways: "Gömme otomatik etkinleştirildi",
@@ -426,13 +426,13 @@ export const trTR = {
     insightsDesc: "Model analizinden oluşturulan içgörüler",
     uploadedFile: "Yüklenen dosya",
     fileUnavailableDesc: "Bu dosya şu anda depolama sistemi nedeniyle mevcut değil.",
-    batchSuccess: "{count} kaynak başarıyla oluşturuldu",
-    batchFailed: "{count} kaynağın tamamı oluşturulamadı",
-    batchPartial: "{success} başarılı, {failed} başarısız",
+    batchSuccess: "{{count}} kaynak başarıyla oluşturuldu",
+    batchFailed: "{{count}} kaynağın tamamı oluşturulamadı",
+    batchPartial: "{{success}} başarılı, {{failed}} başarısız",
     submittingSource: "Kaynak işlenmek üzere gönderiliyor...",
-    processingBatchSources: "{count} kaynak işleniyor. Bu birkaç dakika sürebilir.",
+    processingBatchSources: "{{count}} kaynak işleniyor. Bu birkaç dakika sürebilir.",
     processingSource: "Kaynağınız işleniyor. Bu birkaç dakika sürebilir.",
-    maxFilesAllowed: "Toplu işlem başına en fazla {count} dosya",
+    maxFilesAllowed: "Toplu işlem başına en fazla {{count}} dosya",
   },
   chat: {
     sessions: "Oturumlar",
@@ -442,17 +442,17 @@ export const trTR = {
     deleteSessionDesc: "Bu sohbet oturumunu silmek istediğinizden emin misiniz? Bu işlem geri alınamaz.",
     sendPlaceholder: "Kaynaklarınız hakkında herhangi bir şey sorun...",
     sessionsTitle: "Sohbet Oturumları",
-    chatWith: "{name} ile sohbet et",
-    startConversation: "Bu {type} hakkında sohbet başlatın",
+    chatWith: "{{name}} ile sohbet et",
+    startConversation: "Bu {{type}} hakkında sohbet başlatın",
     askQuestions: "İçeriği daha iyi anlamak için sorular sorun",
-    pressToSend: "Göndermek için {key} tuşuna basın",
+    pressToSend: "Göndermek için {{key}} tuşuna basın",
     model: "Model",
     createToStart: "Başlamak için bir oturum oluşturun.",
     chatWithNotebook: "Defter ile Sohbet Et",
     unableToLoadChat: "Sohbet yüklenemedi",
     noDescription: "Açıklama yok",
     startByCreating: "Araştırmanızı düzenlemek için ilk defterinizi oluşturun.",
-    messagesCount: "{count} mesaj",
+    messagesCount: "{{count}} mesaj",
     sessionCreated: "Sohbet oturumu oluşturuldu",
     sessionUpdated: "Oturum güncellendi",
     sessionDeleted: "Oturum silindi",
@@ -487,17 +487,17 @@ export const trTR = {
     searchIn: "Şurada Ara",
     searchSources: "Kaynaklarda Ara",
     searchNotes: "Notlarda Ara",
-    resultsFound: "{count} sonuç bulundu",
-    matches: "Eşleşmeler ({count})",
-    noResultsFor: "“{query}” için sonuç bulunamadı",
+    resultsFound: "{{count}} sonuç bulundu",
+    matches: "Eşleşmeler ({{count}})",
+    noResultsFor: "“{{query}}” için sonuç bulunamadı",
     notSet: "Ayarlanmadı",
     saveToNotebook: "Deftere Kaydet",
     saveSuccess: "Deftere başarıyla kaydedildi",
     saveError: "Deftere kaydedilemedi",
     selectNotebook: "Defter Seçin",
     searchAndAsk: "Ara ve Sor",
-    searchResultsFor: "“{query}” için arama sonuçları",
-    askAbout: "“{query}” hakkında sor",
+    searchResultsFor: "“{{query}}” için arama sonuçları",
+    askAbout: "“{{query}}” hakkında sor",
     orSearchKb: "Veya bilgi tabanınızda arayın",
     saving: "Kaydediliyor...",
     advancedModelTitle: "Gelişmiş Model Seçimi",
@@ -516,9 +516,9 @@ export const trTR = {
     generateEpisodeDesc: "Yeni bir podcast bölümü oluşturmadan önce dahil edilecek içeriği seçin ve bölüm ayrıntılarını yapılandırın.",
     content: "İçerik",
     contentDesc: "Bu bölüme dahil edilecek defterleri, kaynakları ve notları seçin.",
-    itemsSelected: "{count} öğe seçildi",
-    tokens: "{count} token",
-    chars: "{count} karakter",
+    itemsSelected: "{{count}} öğe seçildi",
+    tokens: "{{value}} token",
+    chars: "{{value}} karakter",
     loadingNotebooks: "Defterler yükleniyor...",
     noNotebooksFoundInPodcasts: "Defter bulunamadı. Podcast oluşturmadan önce bir defter oluşturun ve içerik ekleyin.",
     noContentSelected: "İçerik seçilmedi",
@@ -535,7 +535,7 @@ export const trTR = {
     instructionsPlaceholder: "Bölüm brifingine eklenecek ek tavsiyeler...",
     generating: "Oluşturuluyor...",
     generate: "Oluştur",
-    hostPlaceholder: "Sunucu {number}",
+    hostPlaceholder: "Sunucu {{number}}",
     profileRequired: "Bölüm Profili Gerekli",
     profileRequiredDesc: "Podcast oluşturmadan önce bir bölüm profili seçin.",
     nameRequired: "Bölüm adı gerekli",
@@ -605,8 +605,8 @@ export const trTR = {
     noSpeakerProfiles: "Henüz konuşmacı profili yok. Bölüm profillerini kullanılabilir hale getirmek için bir tane oluşturun.",
     noDescription: "Açıklama sağlanmadı.",
     usedByCount_one: "1 bölüm tarafından kullanılıyor",
-    usedByCount_other: "{count} bölüm tarafından kullanılıyor",
-    usedByCount: "{count} bölüm tarafından kullanılıyor",
+    usedByCount_other: "{{count}} bölüm tarafından kullanılıyor",
+    usedByCount: "{{count}} bölüm tarafından kullanılıyor",
     unused: "Kullanılmıyor",
     voiceId: "Ses Kimliği",
     backstory: "Geçmiş",
@@ -614,7 +614,7 @@ export const trTR = {
     edit: "Düzenle",
     duplicate: "Çoğalt",
     deleteSpeakerProfileTitle: "Konuşmacı profili silinsin mi?",
-    deleteSpeakerProfileDesc: "\"{name}\" silinmesi geri alınamaz.",
+    deleteSpeakerProfileDesc: "\"{{name}}\" silinmesi geri alınamaz.",
     deleteSpeakerDisabledHint: "Silmeden önce bu konuşmacıyı bölüm profillerinden kaldırın.",
     deleting: "Siliniyor…",
     episodeProfilesTitle: "Bölüm profilleri",
@@ -639,7 +639,7 @@ export const trTR = {
     failedToStartGeneration: "Oluşturma başlatılamadı",
     tryAgainMoment: "Lütfen bir an sonra tekrar deneyin.",
     deleteProfileTitle: "Profil silinsin mi?",
-    deleteProfileDesc: "Bu işlem \"{name}\" profilini kaldıracak. Mevcut bölümler verilerini korur, ancak yeni bölümler artık bu yapılandırmayı kullanmaz.",
+    deleteProfileDesc: "Bu işlem \"{{name}}\" profilini kaldıracak. Mevcut bölümler verilerini korur, ancak yeni bölümler artık bu yapılandırmayı kullanmaz.",
     profileCreated: "Profil Oluşturuldu",
     profileCreatedDesc: "\"{name}\" bölüm profili başarıyla oluşturuldu.",
     failedToCreateProfile: "Profil oluşturulamadı",
@@ -661,7 +661,7 @@ export const trTR = {
     transcriptModel: "Transkript modeli",
     segments: "Segmentler",
     defaultBriefingTitle: "Varsayılan brifing",
-    created: "{time} tarihinde oluşturuldu",
+    created: "{{time}} tarihinde oluşturuldu",
     details: "Ayrıntılar",
     summaryTab: "Özet",
     outlineTab: "Ana Hat",
@@ -670,7 +670,7 @@ export const trTR = {
     noOutline: "Ana hat mevcut değil.",
     noTranscript: "Transkript mevcut değil.",
     deleteEpisodeTitle: "Bölüm silinsin mi?",
-    deleteEpisodeDesc: "Bu işlem \"{name}\" ve ses dosyasını kalıcı olarak kaldıracak.",
+    deleteEpisodeDesc: "Bu işlem \"{{name}}\" ve ses dosyasını kalıcı olarak kaldıracak.",
     audioUnavailable: "Ses mevcut değil",
     segment: "Segment",
     speaker: "Konuşmacı",
@@ -698,7 +698,7 @@ export const trTR = {
     speakers: "Konuşmacılar",
     speakersDesc: "Bu profil için bir ila dört ses yapılandırın.",
     addSpeaker: "Konuşmacı ekle",
-    speakerNumber: "Konuşmacı {number}",
+    speakerNumber: "Konuşmacı {{number}}",
     backstoryPlaceholder: "Konuşmacı için kısa biyografi veya bağlam",
     personalityPlaceholder: "Üslup ve tonu tanımlayın",
     outlineModelRequired: "Ana hat modeli gereklidir",
@@ -773,7 +773,7 @@ export const trTR = {
     currentVersion: "Mevcut Sürüm",
     latestVersion: "Son Sürüm",
     status: "Durum",
-    updateAvailable: "Sürüm {version} Mevcut",
+    updateAvailable: "Sürüm {{version}} Mevcut",
     updateAvailableDesc: "Open Notebook'un yeni bir sürümü mevcut.",
     upToDate: "Güncel",
     unknown: "Bilinmiyor",
@@ -795,8 +795,8 @@ export const trTR = {
       failed: "Başarısız",
       leavePageHint: "Bu sayfadan ayrılabilirsiniz, arka planda çalışmaya devam edecek",
       startNew: "Yeni Yeniden Oluşturma Başlat",
-      itemsProcessed: "{processed}/{total} iş gönderildi (%{percent})",
-      failedItems: "{count} iş gönderilemedi",
+      itemsProcessed: "{{processed}}/{{total}} iş gönderildi (%{{percent}})",
+      failedItems: "{{count}} iş gönderilemedi",
       time: "Süre",
       whenToRebuild: "Gömmeleri ne zaman yeniden oluşturmalıyım?",
       whenToRebuildAns: "Model değiştirirken, sürüm yükseltirken, bozulmayı düzeltirken veya toplu içe aktarmadan sonra yeniden oluşturmalısınız.",
@@ -839,7 +839,7 @@ export const trTR = {
     model: "Model",
     systemPrompt: "Sistem İstemi",
     overrideModelDesc: "Bu sohbet oturumu için varsayılan modeli geçersiz kılın. Sistem varsayılanını kullanmak için boş bırakın.",
-    sessionUseReplacement: "Bu oturum varsayılan model yerine {name} kullanacak.",
+    sessionUseReplacement: "Bu oturum varsayılan model yerine {{name}} kullanacak.",
     systemDefault: "Sistem Varsayılanı",
   },
   models: {
@@ -857,7 +857,7 @@ export const trTR = {
     deleteModel: "Modeli Sil",
     defaultAssignments: "Varsayılan Model Atamaları",
     defaultAssignmentsDesc: "Open Notebook genelinde farklı amaçlar için hangi modellerin kullanılacağını yapılandırın",
-    missingRequiredModels: "Eksik gerekli modeller: {models}. Bu modeller olmadan Open Notebook düzgün çalışmayabilir.",
+    missingRequiredModels: "Eksik gerekli modeller: {{models}}. Bu modeller olmadan Open Notebook düzgün çalışmayabilir.",
     selectModelPlaceholder: "Model seçin",
     requiredModelPlaceholder: "⚠️ Gerekli - Model seçin",
     chatModelLabel: "Sohbet Modeli",
@@ -875,7 +875,7 @@ export const trTR = {
     sttModelLabel: "Sesten Metne Modeli",
     sttModelDesc: "Ses transkripsiyonu için kullanılır",
     embeddingChangeTitle: "Gömme Modeli Değişikliği",
-    embeddingChangeConfirm: "Gömme modelinizi {from}'dan {to}'ya değiştirmek üzeresiniz.",
+    embeddingChangeConfirm: "Gömme modelinizi {{from}}'dan {{to}}'ya değiştirmek üzeresiniz.",
     rebuildRequired: "Önemli: Yeniden Oluşturma Gerekli",
     rebuildReason: "Gömme modelinizi değiştirmek, tutarlılığı korumak için mevcut tüm gömmelerin yeniden oluşturulmasını gerektirir. Yeniden oluşturmadan aramalarınız yanlış veya eksik sonuçlar döndürebilir.",
     whatHappensNext: "Bundan sonra ne olacak:",
@@ -888,14 +888,14 @@ export const trTR = {
     changeAndRebuild: "Değiştir ve Yeniden Oluşturmaya Git",
     autoAssign: "Varsayılanları Otomatik Ata",
     autoAssigning: "Atanıyor...",
-    autoAssignSuccess: "{count} varsayılan model otomatik atandı",
+    autoAssignSuccess: "{{count}} varsayılan model otomatik atandı",
     autoAssignNoModels: "Atanacak model yok. Lütfen önce modelleri senkronize edin.",
     autoAssignAlreadySet: "Tüm varsayılan modeller zaten yapılandırılmış",
     testModel: "Modeli Test Et",
     testModelSuccess: "Model Testi Başarılı",
     testModelFailed: "Model Testi Başarısız",
     searchOrAddModel: "Model adı arayın veya yazın...",
-    addCustomModel: "\"{name}\" Ekle",
+    addCustomModel: "\"{{name}}\" Ekle",
   },
   apiKeys: {
     title: "Yapay zekanızı kendi API anahtarlarınızla yapılandırın",
@@ -905,19 +905,19 @@ export const trTR = {
     configured: "Yapılandırıldı",
     notConfigured: "Yapılandırılmadı",
     migrationAvailable: "Ortam Değişkenleri Tespit Edildi",
-    migrationDescription: "{count} API anahtarı ortam değişkenleri aracılığıyla yapılandırılmış ve daha kolay yönetim için veritabanına taşınabilir.",
+    migrationDescription: "{{count}} API anahtarı ortam değişkenleri aracılığıyla yapılandırılmış ve daha kolay yönetim için veritabanına taşınabilir.",
     migrateToDatabase: "Veritabanına Taşı",
     migrating: "Taşınıyor...",
-    migrationSuccess: "{count} API anahtarı başarıyla taşındı",
-    migrationErrors: "{count} anahtar taşınamadı",
+    migrationSuccess: "{{count}} API anahtarı başarıyla taşındı",
+    migrationErrors: "{{count}} anahtar taşınamadı",
     migrationNothingToMigrate: "Tüm anahtarlar zaten veritabanında",
     learnMore: "API anahtarlarını nasıl yapılandıracağınızı öğrenin →",
     testConnection: "Bağlantıyı Test Et",
     testSuccess: "Bağlantı başarılı",
     testFailed: "Bağlantı testi başarısız",
     syncModels: "Modelleri Senkronize Et",
-    syncSuccess: "{discovered} model keşfedildi, {new} yeni eklendi",
-    syncNoNew: "{count} model keşfedildi, tamamı zaten kayıtlı",
+    syncSuccess: "{{discovered}} model keşfedildi, {{new}} yeni eklendi",
+    syncNoNew: "{{count}} model keşfedildi, tamamı zaten kayıtlı",
     syncFailed: "Modeller senkronize edilemedi",
     getApiKey: "API Anahtarı Al",
     vertexProject: "GCP Proje Kimliği",
@@ -932,7 +932,7 @@ export const trTR = {
     baseUrlOverrideHint: "Yalnızca sağlayıcının varsayılan API uç noktasını geçersiz kılmanız gerekiyorsa değiştirin.",
     numCtx: "Bağlam Penceresi (num_ctx)",
     numCtxHint: "Ollama modelleri için maksimum bağlam penceresi. Varsayılanı kullanmak için boş bırakın (8192). Yalnızca donanımınız daha büyük pencereyi kaldırabiliyorsa artırın.",
-    deleteConfigConfirm: "'{name}' yapılandırmasını silmek istediğinizden emin misiniz? Bu geri alınamaz.",
+    deleteConfigConfirm: "'{{name}}' yapılandırmasını silmek istediğinizden emin misiniz? Bu geri alınamaz.",
     configSaveSuccess: "Yapılandırma başarıyla kaydedildi",
     configUpdateSuccess: "Yapılandırma başarıyla güncellendi",
     configDeleteSuccess: "Yapılandırma başarıyla silindi",
@@ -944,7 +944,7 @@ export const trTR = {
     encryptionRequired: "Şifreleme anahtarı yapılandırılmadı",
     encryptionRequiredDescription: "Güvenli kimlik bilgisi depolamayı etkinleştirmek için OPEN_NOTEBOOK_ENCRYPTION_KEY ortam değişkenini ayarlayın.",
     migrationAvailable: "API anahtarı taşıma mevcut",
-    migrationDescription: "{count} sağlayıcının API anahtarları ortam değişkenleri aracılığıyla ayarlanmış. Daha kolay yönetim için veritabanına taşıyın.",
+    migrationDescription: "{{count}} sağlayıcının API anahtarları ortam değişkenleri aracılığıyla ayarlanmış. Daha kolay yönetim için veritabanına taşıyın.",
     goToSettings: "Ayarlara Git",
     viewDocs: "Belgeleri Görüntüle",
   },
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index ed5fa7e0..10fea916 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -63,8 +63,8 @@ export const zhCN = {
     optional: "可选",
     type: "类型",
     title: "标题",
-    created: "创建于 {time}",
-    updated: "更新于 {time}",
+    created: "创建于 {{time}}",
+    updated: "更新于 {{time}}",
     actions: "快捷操作",
     noResults: "未找到结果",
     references: "引用",
@@ -107,10 +107,10 @@ export const zhCN = {
     reasoning: "推理过程",
     searchTerms: "搜索词",
     strategy: "策略",
-    individualAnswers: "独立回答 ({count})",
+    individualAnswers: "独立回答 ({{count}})",
     finalAnswer: "最终回答",
-    notebookLabel: "笔记本: {name}",
-    itemNotFound: "未找到该 {type}",
+    notebookLabel: "笔记本: {{name}}",
+    itemNotFound: "未找到该 {{type}}",
     accessibility: {
       transformationViews: "转换视图",
       searchKB: "向知识库提问或搜索",
@@ -231,12 +231,12 @@ export const zhCN = {
     archive: "归档",
     unarchive: "取消归档",
     deleteNotebook: "删除笔记本",
-    deleteNotebookDesc: "您确定要删除 \"{name}\" 吗？此操作无法撤销。",
+    deleteNotebookDesc: "您确定要删除 \"{{name}}\" 吗？此操作无法撤销。",
     deleteNotebookLoading: "正在加载删除预览...",
-    deleteNotebookNotes: "{count} 个笔记将被永久删除。",
+    deleteNotebookNotes: "{{count}} 个笔记将被永久删除。",
     deleteNotebookNoNotes: "没有要删除的笔记。",
-    deleteNotebookExclusiveSources: "{count} 个来源仅存在于此笔记本中。",
-    deleteNotebookSharedSources: "{count} 个来源与其他笔记本共享，将被取消关联。",
+    deleteNotebookExclusiveSources: "{{count}} 个来源仅存在于此笔记本中。",
+    deleteNotebookSharedSources: "{{count}} 个来源与其他笔记本共享，将被取消关联。",
     deleteNotebookNoSources: "此笔记本中没有来源。",
     deleteExclusiveSourcesLabel: "删除专属来源",
     keepExclusiveSourcesLabel: "取消关联并保留",
@@ -304,7 +304,7 @@ export const zhCN = {
     createFirstSource: "添加您的第一个来源开始构建知识库。",
     deleteSourceConfirm: "确定要删除此来源吗？",
     deleteConfirm: "确定要删除吗？",
-    deleteConfirmWithTitle: "确定要删除 \"{title}\" 吗？",
+    deleteConfirmWithTitle: "确定要删除 \"{{title}}\" 吗？",
     deleteSuccess: "来源删除成功。注意：要从存储中删除文件，必须在设置页面中启用“删除文件”选项。",
     failedToDelete: "删除来源失败",
     sourceQueued: "来源已加入队列",
@@ -320,16 +320,16 @@ export const zhCN = {
     sourceRequeued: "来源重试已加入队列",
     sourceRequeuedDesc: "来源已重新加入处理队列。",
     failedToRetry: "重试失败",
-    sourcesAddedToNotebook: "{count} 个来源已添加到笔记本",
+    sourcesAddedToNotebook: "{{count}} 个来源已添加到笔记本",
     failedToAddSourcesToNotebook: "添加来源到笔记本失败",
-    partialAddSuccess: "{success} 个来源已添加，{failed} 个失败",
+    partialAddSuccess: "{{success}} 个来源已添加，{{failed}} 个失败",
     sourceRemovedFromNotebook: "来源已成功从笔记本中移除",
     failedToRemoveSourceFromNotebook: "从笔记本中移除来源失败",
     removeConfirm: "确定要从此笔记本移除吗？",
     checking: "正在检查...",
     untitledSource: "未命名来源",
-    maxItems: "最多 {count} 个",
-    insightsCount: "{count} 条见解",
+    maxItems: "最多 {{count}} 个",
+    insightsCount: "{{count}} 条见解",
     details: "详情",
     detailsTitle: "来源详情",
     content: "内容",
@@ -371,7 +371,7 @@ export const zhCN = {
     enterUrlsPlaceholder: "每行输入一个 URL\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "粘贴多个 URL（每行一个）进行批量导入",
     invalidUrlsDetected: "检测到无效的 URL：",
-    lineLabel: "第 {line} 行",
+    lineLabel: "第 {{line}} 行",
     fixInvalidUrls: "请修正或移除无效的 URL 以继续",
     selectMultipleFilesHint: "选择多个文件进行批量导入。支持：文档 (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD)，媒体 (MP4, MP3, WAV, M4A)，图片 (JPG, PNG)，归档 (ZIP)",
     selectedFiles: "已选择文件：",
@@ -380,8 +380,8 @@ export const zhCN = {
     titlePlaceholder: "为您的来源起一个描述性的标题",
     batchTitlesAuto: "将为每个来源自动生成标题。",
     batchCommonSettings: "同样的笔记本和转换将应用于所有项目。",
-    urlsCount: "{count} 个 URL",
-    filesCount: "{count} 个文件",
+    urlsCount: "{{count}} 个 URL",
+    filesCount: "{{count}} 个文件",
     addSource: "添加来源",
     notEmbeddedAlert: "内容未嵌入向量",
     notEmbeddedDesc: "此内容尚未为了向量搜索进行嵌入。嵌入可以启用高级搜索功能并更好地发现内容。",
@@ -404,8 +404,8 @@ export const zhCN = {
     searchPlaceholder: "通过名称或 URL 搜索来源...",
     noNotebooksFound: "未找到笔记本。",
     showingFirst100: "仅显示前 100 个来源。请使用搜索功能查找特定来源。",
-    selectedCount: "已选择 {count} 个来源",
-    added: "已添加于 {date}",
+    selectedCount: "已选择 {{count}} 个来源",
+    added: "已添加于 {{date}}",
     addUrl: "添加 URL",
     uploadFile: "上传文件",
     enterText: "输入文本",
@@ -413,7 +413,7 @@ export const zhCN = {
     processingFiles: "正在处理您的文件...",
     titleRequired: "文本内容必须提供标题",
     titleGenerated: "如果留空，将根据内容自动生成标题",
-    batchCount: "将处理 {count} 个{type}",
+    batchCount: "将处理 {{count}} 个{{type}}",
     enableEmbedding: "启用搜索向量嵌入",
     embeddingDesc: "允许此来源在向量搜索和 AI 查询中被检索",
     embeddingAlways: "已自动启用嵌入",
@@ -426,13 +426,13 @@ export const zhCN = {
     insightsDesc: "根据模型分析生成的见解",
     uploadedFile: "已上传文件",
     fileUnavailableDesc: "由于存储系统原因，此文件目前不可用。",
-    batchSuccess: "成功创建 {count} 个来源",
-    batchFailed: "全部 {count} 个来源创建失败",
-    batchPartial: "{success} 个成功，{failed} 个失败",
+    batchSuccess: "成功创建 {{count}} 个来源",
+    batchFailed: "全部 {{count}} 个来源创建失败",
+    batchPartial: "{{success}} 个成功，{{failed}} 个失败",
     submittingSource: "正在提交来源进行处理...",
-    processingBatchSources: "正在处理 {count} 个来源，请稍候...",
+    processingBatchSources: "正在处理 {{count}} 个来源，请稍候...",
     processingSource: "正在处理您的来源，请稍候...",
-    maxFilesAllowed: "每批最多允许 {count} 个文件",
+    maxFilesAllowed: "每批最多允许 {{count}} 个文件",
   },
   chat: {
     sessions: "会话",
@@ -442,17 +442,17 @@ export const zhCN = {
     deleteSessionDesc: "确定要删除此聊天会话吗？此操作无法撤销。",
     sendPlaceholder: "向您的来源提问...",
     sessionsTitle: "对话列表",
-    chatWith: "与{name}对话",
-    startConversation: "开始针对{type}进行对话",
+    chatWith: "与{{name}}对话",
+    startConversation: "开始针对{{type}}进行对话",
     askQuestions: "提出问题以更好地理解内容",
-    pressToSend: "按 {key} 发送",
+    pressToSend: "按 {{key}} 发送",
     model: "模型",
     createToStart: "创建一个会话以开始。",
     chatWithNotebook: "与笔记本对话",
     unableToLoadChat: "无法加载聊天",
     noDescription: "暂无描述",
     startByCreating: "从创建您的第一个笔记本开始，组织您的研究。",
-    messagesCount: "{count} 条消息",
+    messagesCount: "{{count}} 条消息",
     sessionCreated: "聊天会话已创建",
     sessionUpdated: "会话已更新",
     sessionDeleted: "会话已删除",
@@ -487,17 +487,17 @@ export const zhCN = {
     searchIn: "搜索范围",
     searchSources: "搜索来源",
     searchNotes: "搜索笔记",
-    resultsFound: "{count} 个结果",
-    matches: "匹配项 ({count})",
-    noResultsFor: "未找到 “{query}” 的结果",
+    resultsFound: "{{count}} 个结果",
+    matches: "匹配项 ({{count}})",
+    noResultsFor: "未找到 “{{query}}” 的结果",
     notSet: "未设置",
     saveToNotebook: "保存到笔记本",
     saveSuccess: "成功保存到笔记本",
     saveError: "保存到笔记本失败",
     selectNotebook: "选择笔记本",
     searchAndAsk: "搜索与提问",
-    searchResultsFor: "搜索 “{query}”",
-    askAbout: "提问关于 “{query}”",
+    searchResultsFor: "搜索 “{{query}}”",
+    askAbout: "提问关于 “{{query}}”",
     orSearchKb: "或搜索您的知识库",
     saving: "保存中...",
     advancedModelTitle: "高级模型选择",
@@ -516,9 +516,9 @@ export const zhCN = {
     generateEpisodeDesc: "在生成新的播客单集之前，选择要包含的内容并配置单集详情。",
     content: "内容",
     contentDesc: "选择要包含在此单集中的笔记本、来源和笔记。",
-    itemsSelected: "{count} 个项目已选择",
-    tokens: "{count} token",
-    chars: "{count} 字符",
+    itemsSelected: "{{count}} 个项目已选择",
+    tokens: "{{value}} token",
+    chars: "{{value}} 字符",
     loadingNotebooks: "正在加载笔记本...",
     noNotebooksFoundInPodcasts: "未找到笔记本。在生成播客之前，请先创建一个笔记本并添加内容。",
     noContentSelected: "未选择内容",
@@ -535,7 +535,7 @@ export const zhCN = {
     instructionsPlaceholder: "任何要追加到单集简讯的补充建议...",
     generating: "正在生成...",
     generate: "生成",
-    hostPlaceholder: "主持人 {number}",
+    hostPlaceholder: "主持人 {{number}}",
     profileRequired: "需要单集简介",
     profileRequiredDesc: "在生成播客之前，请选择一个单集简介。",
     nameRequired: "需要单集名称",
@@ -605,8 +605,8 @@ export const zhCN = {
     noSpeakerProfiles: "暂无发言人简介。创建一个以使单集简介可用。",
     noDescription: "未提供描述。",
     usedByCount_one: "被 1 个单集使用",
-    usedByCount_other: "被 {count} 个单集使用",
-    usedByCount: "被 {count} 个单集使用",
+    usedByCount_other: "被 {{count}} 个单集使用",
+    usedByCount: "被 {{count}} 个单集使用",
     unused: "未使用",
     voiceId: "声音 ID",
     backstory: "背景故事",
@@ -614,7 +614,7 @@ export const zhCN = {
     edit: "编辑",
     duplicate: "复制",
     deleteSpeakerProfileTitle: "删除发言人简介？",
-    deleteSpeakerProfileDesc: "删除 “{name}” 无法撤销。",
+    deleteSpeakerProfileDesc: "删除 “{{name}}” 无法撤销。",
     deleteSpeakerDisabledHint: "在删除之前，请先从单集简介中移除该发言人。",
     deleting: "正在删除...",
     episodeProfilesTitle: "单集简介",
@@ -635,11 +635,11 @@ export const zhCN = {
     speakerDuplicatedDesc: "已创建配置副本。",
     failedToDuplicateSpeaker: "复制发言人配置失败",
     generationStarted: "播客启动生成",
-    generationStartedDesc: "剧集 \"{name}\" 正在创建中。",
+    generationStartedDesc: "剧集 \"{{name}}\" 正在创建中。",
     failedToStartGeneration: "启动播客生成失败",
     tryAgainMoment: "请稍后再试。",
     deleteProfileTitle: "删除简介？",
-    deleteProfileDesc: "这将移除 “{name}”。现有单集将保留其数据，但新单集将不再使用此配置。",
+    deleteProfileDesc: "这将移除 “{{name}}”。现有单集将保留其数据，但新单集将不再使用此配置。",
     profileCreated: "剧集配置已创建",
     profileCreatedDesc: "新的剧集配置已准备就绪。",
     failedToCreateProfile: "创建剧集配置失败",
@@ -661,7 +661,7 @@ export const zhCN = {
     transcriptModel: "脚本模型",
     segments: "分段数量",
     defaultBriefingTitle: "默认简报",
-    created: "创建于 {time}",
+    created: "创建于 {{time}}",
     details: "详情",
     summaryTab: "总结",
     outlineTab: "大纲",
@@ -670,7 +670,7 @@ export const zhCN = {
     noOutline: "暂无大纲。",
     noTranscript: "暂无脚本。",
     deleteEpisodeTitle: "删除单集？",
-    deleteEpisodeDesc: "这将永久移除 “{name}” 及其音频文件。",
+    deleteEpisodeDesc: "这将永久移除 “{{name}}” 及其音频文件。",
     audioUnavailable: "音频不可用",
     segment: "分段",
     speaker: "发言人",
@@ -698,7 +698,7 @@ export const zhCN = {
     speakers: "发言人",
     speakersDesc: "为此简介配置一到四种声音。",
     addSpeaker: "添加发言人",
-    speakerNumber: "发言人 {number}",
+    speakerNumber: "发言人 {{number}}",
     backstoryPlaceholder: "发言人的简要传记或背景信息",
     personalityPlaceholder: "描述风格和语气",
     outlineModelRequired: "必须选择大纲模型",
@@ -773,7 +773,7 @@ export const zhCN = {
     currentVersion: "当前版本",
     latestVersion: "最新版本",
     status: "状态",
-    updateAvailable: "版本 {version} 可用",
+    updateAvailable: "版本 {{version}} 可用",
     updateAvailableDesc: "Open Notebook 的新版本可用。",
     upToDate: "已是最新",
     unknown: "未知",
@@ -795,8 +795,8 @@ export const zhCN = {
       failed: "失败",
       leavePageHint: "您可以离开此页面，后台将继续运行",
       startNew: "开始新的重建",
-      itemsProcessed: "{processed}/{total} 任务已提交 ({percent}%)",
-      failedItems: "{count} 任务提交失败",
+      itemsProcessed: "{{processed}}/{{total}} 任务已提交 ({{percent}}%)",
+      failedItems: "{{count}} 任务提交失败",
       time: "耗时",
       whenToRebuild: "我该何时重建索引？",
       whenToRebuildAns: "当您切换嵌入模型、升级模型版本、怀疑数据损坏或进行了大批量内容导入后，建议执行重建。",
@@ -839,7 +839,7 @@ export const zhCN = {
     model: "模型",
     systemPrompt: "系统提示词",
     overrideModelDesc: "为此聊天会话覆盖默认模型。留空则使用系统默认。",
-    sessionUseReplacement: "此会话将使用 {name} 而不是默认模型。",
+    sessionUseReplacement: "此会话将使用 {{name}} 而不是默认模型。",
     systemDefault: "系统默认",
   },
   models: {
@@ -857,7 +857,7 @@ export const zhCN = {
     deleteModel: "删除模型",
     defaultAssignments: "默认模型分配",
     defaultAssignmentsDesc: "配置用于 Open Notebook 不同用途的默认模型",
-    missingRequiredModels: "缺少必需的模型：{models}。如果没有这些模型，Open Notebook 可能无法正常运行。",
+    missingRequiredModels: "缺少必需的模型：{{models}}。如果没有这些模型，Open Notebook 可能无法正常运行。",
     selectModelPlaceholder: "选择一个模型",
     requiredModelPlaceholder: "⚠️ 必需 - 请选择一个模型",
     chatModelLabel: "聊天模型",
@@ -875,7 +875,7 @@ export const zhCN = {
     sttModelLabel: "语音转文字模型",
     sttModelDesc: "用于音频转录",
     embeddingChangeTitle: "嵌入模型变更",
-    embeddingChangeConfirm: "您即将将嵌入模型从 {from} 更改为 {to}。",
+    embeddingChangeConfirm: "您即将将嵌入模型从 {{from}} 更改为 {{to}}。",
     rebuildRequired: "重要提示：需要重建索引",
     rebuildReason: "更改嵌入模型需要重建所有现有嵌入以保持一致性。如果不重建，您的搜索可能会返回错误或不完整的结果。",
     whatHappensNext: "接下来会发生什么：",
@@ -888,14 +888,14 @@ export const zhCN = {
     changeAndRebuild: "更改并前往重建",
     autoAssign: "自动分配默认值",
     autoAssigning: "正在分配...",
-    autoAssignSuccess: "已自动分配 {count} 个默认模型",
+    autoAssignSuccess: "已自动分配 {{count}} 个默认模型",
     autoAssignNoModels: "没有可分配的模型。请先同步模型。",
     autoAssignAlreadySet: "所有默认模型已配置",
     testModel: "测试模型",
     testModelSuccess: "模型测试通过",
     testModelFailed: "模型测试失败",
     searchOrAddModel: "搜索或输入模型名称...",
-    addCustomModel: "添加 \"{name}\"",
+    addCustomModel: "添加 \"{{name}}\"",
   },
   apiKeys: {
     title: "使用您自己的 API 密钥配置 AI",
@@ -905,19 +905,19 @@ export const zhCN = {
     configured: "已配置",
     notConfigured: "未配置",
     migrationAvailable: "检测到环境变量",
-    migrationDescription: "{count} 个 API 密钥通过环境变量配置，可以迁移到数据库以便于管理。",
+    migrationDescription: "{{count}} 个 API 密钥通过环境变量配置，可以迁移到数据库以便于管理。",
     migrateToDatabase: "迁移到数据库",
     migrating: "迁移中...",
-    migrationSuccess: "{count} 个 API 密钥迁移成功",
-    migrationErrors: "{count} 个密钥迁移失败",
+    migrationSuccess: "{{count}} 个 API 密钥迁移成功",
+    migrationErrors: "{{count}} 个密钥迁移失败",
     migrationNothingToMigrate: "所有密钥已在数据库中",
     learnMore: "了解如何配置 API 密钥 →",
     testConnection: "测试连接",
     testSuccess: "连接成功",
     testFailed: "连接测试失败",
     syncModels: "同步模型",
-    syncSuccess: "发现 {discovered} 个模型，新增 {new} 个",
-    syncNoNew: "发现 {count} 个模型，全部已注册",
+    syncSuccess: "发现 {{discovered}} 个模型，新增 {{new}} 个",
+    syncNoNew: "发现 {{count}} 个模型，全部已注册",
     syncFailed: "同步模型失败",
     getApiKey: "获取 API 密钥",
     vertexProject: "GCP 项目 ID",
@@ -932,7 +932,7 @@ export const zhCN = {
     baseUrlOverrideHint: "仅在需要覆盖提供商默认 API 端点时更改此项。",
     numCtx: "上下文窗口 (num_ctx)",
     numCtxHint: "Ollama 模型的最大上下文窗口。留空则使用默认值（8192）。仅在硬件能够处理更大窗口时增大。",
-    deleteConfigConfirm: "确定要删除 '{name}' 吗？此操作无法撤销。",
+    deleteConfigConfirm: "确定要删除 '{{name}}' 吗？此操作无法撤销。",
     configSaveSuccess: "配置保存成功",
     configUpdateSuccess: "配置更新成功",
     configDeleteSuccess: "配置删除成功",
@@ -944,7 +944,7 @@ export const zhCN = {
     encryptionRequired: "未配置加密密钥",
     encryptionRequiredDescription: "请设置 OPEN_NOTEBOOK_ENCRYPTION_KEY 环境变量以启用安全凭据存储。",
     migrationAvailable: "API 密钥迁移可用",
-    migrationDescription: "{count} 个服务商的 API 密钥通过环境变量设置。将它们迁移到数据库以便于管理。",
+    migrationDescription: "{{count}} 个服务商的 API 密钥通过环境变量设置。将它们迁移到数据库以便于管理。",
     goToSettings: "前往设置",
     viewDocs: "查看文档",
   },
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 1ebdfdf5..10a0dd7d 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -63,8 +63,8 @@ export const zhTW = {
     optional: "可選",
     type: "類型",
     title: "標題",
-    created: "建立於 {time}",
-    updated: "更新於 {time}",
+    created: "建立於 {{time}}",
+    updated: "更新於 {{time}}",
     actions: "快捷操作",
     noResults: "未找到結果",
     references: "引用",
@@ -107,10 +107,10 @@ export const zhTW = {
     reasoning: "推理過程",
     searchTerms: "搜尋詞",
     strategy: "策略",
-    individualAnswers: "獨立回答 ({count})",
+    individualAnswers: "獨立回答 ({{count}})",
     finalAnswer: "最終回答",
-    notebookLabel: "筆記本: {name}",
-    itemNotFound: "未找到該 {type}",
+    notebookLabel: "筆記本: {{name}}",
+    itemNotFound: "未找到該 {{type}}",
     accessibility: {
       transformationViews: "轉換視圖",
       searchKB: "向知識庫提問或搜尋",
@@ -231,12 +231,12 @@ export const zhTW = {
     archive: "封存",
     unarchive: "取消封存",
     deleteNotebook: "刪除筆記本",
-    deleteNotebookDesc: "您確定要刪除 \"{name}\" 嗎？此操作無法復原。",
+    deleteNotebookDesc: "您確定要刪除 \"{{name}}\" 嗎？此操作無法復原。",
     deleteNotebookLoading: "正在載入刪除預覽...",
-    deleteNotebookNotes: "{count} 個筆記將被永久刪除。",
+    deleteNotebookNotes: "{{count}} 個筆記將被永久刪除。",
     deleteNotebookNoNotes: "沒有要刪除的筆記。",
-    deleteNotebookExclusiveSources: "{count} 個來源僅存在於此筆記本中。",
-    deleteNotebookSharedSources: "{count} 個來源與其他筆記本共享，將被取消關聯。",
+    deleteNotebookExclusiveSources: "{{count}} 個來源僅存在於此筆記本中。",
+    deleteNotebookSharedSources: "{{count}} 個來源與其他筆記本共享，將被取消關聯。",
     deleteNotebookNoSources: "此筆記本中沒有來源。",
     deleteExclusiveSourcesLabel: "刪除專屬來源",
     keepExclusiveSourcesLabel: "取消關聯並保留",
@@ -304,7 +304,7 @@ export const zhTW = {
     createFirstSource: "新增您的第一個來源開始構建知識庫。",
     deleteSourceConfirm: "確定要刪除此來源嗎？",
     deleteConfirm: "確定要刪除嗎？",
-    deleteConfirmWithTitle: "確定要刪除 \"{title}\" 嗎？",
+    deleteConfirmWithTitle: "確定要刪除 \"{{title}}\" 嗎？",
     deleteSuccess: "來源刪除成功。注意：要從儲存中刪除檔案，必須在設定頁面中啟用「刪除檔案」選項。",
     failedToDelete: "刪除來源失敗",
     sourceQueued: "來源已加入隊列",
@@ -320,16 +320,16 @@ export const zhTW = {
     sourceRequeued: "來源重試已加入隊列",
     sourceRequeuedDesc: "來源已重新加入處理隊列。",
     failedToRetry: "重試失敗",
-    sourcesAddedToNotebook: "{count} 個來源已新增到筆記本",
+    sourcesAddedToNotebook: "{{count}} 個來源已新增到筆記本",
     failedToAddSourcesToNotebook: "新增來源到筆記本失敗",
-    partialAddSuccess: "{success} 個來源已新增，{failed} 個失敗",
+    partialAddSuccess: "{{success}} 個來源已新增，{{failed}} 個失敗",
     sourceRemovedFromNotebook: "來源已成功從筆記本中移除",
     failedToRemoveSourceFromNotebook: "從筆記本中移除來源失敗",
     removeConfirm: "確定要從此筆記本移除嗎？",
     checking: "正在檢查...",
     untitledSource: "未命名來源",
-    maxItems: "最多 {count} 個",
-    insightsCount: "{count} 條見解",
+    maxItems: "最多 {{count}} 個",
+    insightsCount: "{{count}} 條見解",
     details: "詳情",
     detailsTitle: "來源詳情",
     content: "內容",
@@ -371,7 +371,7 @@ export const zhTW = {
     enterUrlsPlaceholder: "每行輸入一個 URL\nhttps://example.com/article1\nhttps://example.com/article2",
     batchUrlHint: "貼上多個 URL（每行一個）進行批次導入",
     invalidUrlsDetected: "檢測到無效的 URL：",
-    lineLabel: "第 {line} 行",
+    lineLabel: "第 {{line}} 行",
     fixInvalidUrls: "請修正或移除無效的 URL 以繼續",
     selectMultipleFilesHint: "選擇多個檔案進行批次導入。支援：文件 (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD)，媒體 (MP4, MP3, WAV, M4A)，圖片 (JPG, PNG)，歸檔 (ZIP)",
     selectedFiles: "已選擇檔案：",
@@ -380,8 +380,8 @@ export const zhTW = {
     titlePlaceholder: "為您的來源取一個描述性的標題",
     batchTitlesAuto: "將為每個來源自動生成標題。",
     batchCommonSettings: "相同的筆記本和轉換將應用於所有項目。",
-    urlsCount: "{count} 個 URL",
-    filesCount: "{count} 個檔案",
+    urlsCount: "{{count}} 個 URL",
+    filesCount: "{{count}} 個檔案",
     addSource: "新增來源",
     notEmbeddedAlert: "內容未嵌入向量",
     notEmbeddedDesc: "此內容尚未為了向量搜尋進行嵌入。嵌入可以啟用進階搜尋功能並更好地發現內容。",
@@ -404,8 +404,8 @@ export const zhTW = {
     searchPlaceholder: "通過名稱或 URL 搜尋來源...",
     noNotebooksFound: "未找到筆記本。",
     showingFirst100: "僅顯示前 100 個來源。請使用搜尋功能查找特定來源。",
-    selectedCount: "已選擇 {count} 個來源",
-    added: "已新增於 {date}",
+    selectedCount: "已選擇 {{count}} 個來源",
+    added: "已新增於 {{date}}",
     addUrl: "新增 URL",
     uploadFile: "上傳檔案",
     enterText: "輸入文字",
@@ -413,7 +413,7 @@ export const zhTW = {
     processingFiles: "正在處理您的檔案...",
     titleRequired: "文字內容必須提供標題",
     titleGenerated: "如果留空，將根據內容自動生成標題",
-    batchCount: "將處理 {count} 個{type}",
+    batchCount: "將處理 {{count}} 個{{type}}",
     enableEmbedding: "啟用搜尋向量嵌入",
     embeddingDesc: "允許此來源在向量搜尋和 AI 查詢中被檢索",
     embeddingAlways: "已自動啟用嵌入",
@@ -426,13 +426,13 @@ export const zhTW = {
     insightsDesc: "根據模型分析生成的見解",
     uploadedFile: "已上傳檔案",
     fileUnavailableDesc: "由於儲存系統原因，此檔案目前不可用。",
-    batchSuccess: "成功新增 {count} 個來源",
-    batchFailed: "全部 {count} 個來源新增失敗",
-    batchPartial: "{success} 個成功，{failed} 個失敗",
+    batchSuccess: "成功新增 {{count}} 個來源",
+    batchFailed: "全部 {{count}} 個來源新增失敗",
+    batchPartial: "{{success}} 個成功，{{failed}} 個失敗",
     submittingSource: "正在提交來源進行處理...",
-    processingBatchSources: "正在處理 {count} 個來源，請稍候...",
+    processingBatchSources: "正在處理 {{count}} 個來源，請稍候...",
     processingSource: "正在處理您的來源，請稍候...",
-    maxFilesAllowed: "每批最多允許 {count} 個檔案",
+    maxFilesAllowed: "每批最多允許 {{count}} 個檔案",
   },
   chat: {
     sessions: "對話",
@@ -442,17 +442,17 @@ export const zhTW = {
     deleteSessionDesc: "確定要刪除此聊天會話嗎？此操作無法撤銷。",
     sendPlaceholder: "向您的來源提問...",
     sessionsTitle: "對話列表",
-    chatWith: "與 {name} 對話",
-    startConversation: "開始針對 {type} 進行對話",
+    chatWith: "與 {{name}} 對話",
+    startConversation: "開始針對 {{type}} 進行對話",
     askQuestions: "提出問題以更好地理解內容",
-    pressToSend: "按 {key} 發送",
+    pressToSend: "按 {{key}} 發送",
     model: "模型",
     createToStart: "新增一個會話以開始。",
     chatWithNotebook: "與筆記本對話",
     unableToLoadChat: "無法載入聊天",
     noDescription: "暫無描述",
     startByCreating: "從新增您的第一個筆記本開始，組織您的研究。",
-    messagesCount: "{count} 條訊息",
+    messagesCount: "{{count}} 條訊息",
     sessionCreated: "聊天會話已建立",
     sessionUpdated: "會話已更新",
     sessionDeleted: "會話已刪除",
@@ -487,17 +487,17 @@ export const zhTW = {
     searchIn: "搜尋範圍",
     searchSources: "搜尋來源",
     searchNotes: "搜尋筆記",
-    resultsFound: "{count} 個結果",
-    matches: "匹配項 ({count})",
-    noResultsFor: "未找到 “{query}” 的結果",
+    resultsFound: "{{count}} 個結果",
+    matches: "匹配項 ({{count}})",
+    noResultsFor: "未找到 “{{query}}” 的結果",
     notSet: "未設定",
     saveToNotebook: "儲存到筆記本",
     saveSuccess: "成功儲存到筆記本",
     saveError: "儲存到筆記本失敗",
     selectNotebook: "選擇筆記本",
     searchAndAsk: "搜尋與提問",
-    searchResultsFor: "搜尋 “{query}”",
-    askAbout: "提問關於 “{query}”",
+    searchResultsFor: "搜尋 “{{query}}”",
+    askAbout: "提問關於 “{{query}}”",
     orSearchKb: "或搜尋您的知識庫",
     saving: "儲存中...",
     advancedModelTitle: "進階模型選擇",
@@ -516,9 +516,9 @@ export const zhTW = {
     generateEpisodeDesc: "在生成新的播客單集之前，選擇要包含的內容並設定單集詳情。",
     content: "內容",
     contentDesc: "選擇要包含在此單集中的筆記本、來源和筆記。",
-    itemsSelected: "{count} 個項目已選擇",
-    tokens: "{count} token",
-    chars: "{count} 字元",
+    itemsSelected: "{{count}} 個項目已選擇",
+    tokens: "{{value}} token",
+    chars: "{{value}} 字元",
     loadingNotebooks: "正在載入筆記本...",
     noNotebooksFoundInPodcasts: "未找到筆記本。在生成播客之前，請先建立一個筆記本並新增內容。",
     noContentSelected: "未選擇內容",
@@ -535,7 +535,7 @@ export const zhTW = {
     instructionsPlaceholder: "任何要追加到單集簡訊的補充建議...",
     generating: "正在生成...",
     generate: "生成",
-    hostPlaceholder: "主持人 {number}",
+    hostPlaceholder: "主持人 {{number}}",
     profileRequired: "需要單集簡介",
     profileRequiredDesc: "在生成播客之前，請選擇一個單集簡介。",
     nameRequired: "需要單集名稱",
@@ -605,8 +605,8 @@ export const zhTW = {
     noSpeakerProfiles: "暫無發言人簡介。建立一個以使單集簡介可用。",
     noDescription: "未提供描述。",
     usedByCount_one: "被 1 個單集使用",
-    usedByCount_other: "被 {count} 個單集使用",
-    usedByCount: "被 {count} 個單集使用",
+    usedByCount_other: "被 {{count}} 個單集使用",
+    usedByCount: "被 {{count}} 個單集使用",
     unused: "未使用",
     voiceId: "聲音 ID",
     backstory: "背景故事",
@@ -614,7 +614,7 @@ export const zhTW = {
     edit: "編輯",
     duplicate: "複製",
     deleteSpeakerProfileTitle: "刪除發言人簡介？",
-    deleteSpeakerProfileDesc: "刪除 “{name}” 無法撤銷。",
+    deleteSpeakerProfileDesc: "刪除 “{{name}}” 無法撤銷。",
     deleteSpeakerDisabledHint: "在刪除之前，請先從單集簡介中移除該發言人。",
     deleting: "正在刪除...",
     episodeProfilesTitle: "單集簡介",
@@ -635,11 +635,11 @@ export const zhTW = {
     speakerDuplicatedDesc: "已建立設定副本。",
     failedToDuplicateSpeaker: "複製發言人設定失敗",
     generationStarted: "播客啟動生成",
-    generationStartedDesc: "劇集 \"{name}\" 正在建立中。",
+    generationStartedDesc: "劇集 \"{{name}}\" 正在建立中。",
     failedToStartGeneration: "啟動播客生成失敗",
     tryAgainMoment: "請稍後再試。",
     deleteProfileTitle: "刪除簡介？",
-    deleteProfileDesc: "這將移除 “{name}”。現有單集將保留其資料，但新單集將不再使用此設定。",
+    deleteProfileDesc: "這將移除 “{{name}}”。現有單集將保留其資料，但新單集將不再使用此設定。",
     profileCreated: "劇集設定已建立",
     profileCreatedDesc: "新的劇集設定已準備就緒。",
     failedToCreateProfile: "建立劇集設定失敗",
@@ -661,7 +661,7 @@ export const zhTW = {
     transcriptModel: "腳本模型",
     segments: "分段數量",
     defaultBriefingTitle: "預設簡報",
-    created: "建立於 {time}",
+    created: "建立於 {{time}}",
     details: "詳情",
     summaryTab: "總結",
     outlineTab: "大綱",
@@ -670,7 +670,7 @@ export const zhTW = {
     noOutline: "暫無大綱。",
     noTranscript: "暫無腳本。",
     deleteEpisodeTitle: "刪除單集？",
-    deleteEpisodeDesc: "這將永久移除 “{name}” 及其音訊檔案。",
+    deleteEpisodeDesc: "這將永久移除 “{{name}}” 及其音訊檔案。",
     audioUnavailable: "音訊不可用",
     segment: "分段",
     speaker: "發言人",
@@ -698,7 +698,7 @@ export const zhTW = {
     speakers: "發言人",
     speakersDesc: "為此簡介設定一到四種聲音。",
     addSpeaker: "新增發言人",
-    speakerNumber: "發言人 {number}",
+    speakerNumber: "發言人 {{number}}",
     backstoryPlaceholder: "發言人的簡要傳記或背景資訊",
     personalityPlaceholder: "描述風格和語氣",
     outlineModelRequired: "必須選擇大綱模型",
@@ -773,7 +773,7 @@ export const zhTW = {
     currentVersion: "目前版本",
     latestVersion: "最新版本",
     status: "狀態",
-    updateAvailable: "版本 {version} 可用",
+    updateAvailable: "版本 {{version}} 可用",
     updateAvailableDesc: "Open Notebook 的新版本可用。",
     upToDate: "已是最新",
     unknown: "未知",
@@ -795,8 +795,8 @@ export const zhTW = {
       failed: "失敗",
       leavePageHint: "您可以離開此頁面，後台將繼續運行",
       startNew: "開始新的重建",
-      itemsProcessed: "{processed}/{total} 任務已提交 ({percent}%)",
-      failedItems: "{count} 任務提交失敗",
+      itemsProcessed: "{{processed}}/{{total}} 任務已提交 ({{percent}}%)",
+      failedItems: "{{count}} 任務提交失敗",
       time: "耗時",
       whenToRebuild: "我該何時重建索引？",
       whenToRebuildAns: "當您切換嵌入模型、升級模型版本、懷疑資料損壞或進行了大批次內容導入後，建議執行重建。",
@@ -839,7 +839,7 @@ export const zhTW = {
     model: "模型",
     systemPrompt: "系統提示詞",
     overrideModelDesc: "為此對話會話覆蓋預設模型。留空則使用系統預設。",
-    sessionUseReplacement: "此會話將使用 {name} 而不是預設模型。",
+    sessionUseReplacement: "此會話將使用 {{name}} 而不是預設模型。",
     systemDefault: "系統預設",
   },
   models: {
@@ -857,7 +857,7 @@ export const zhTW = {
     deleteModel: "刪除模型",
     defaultAssignments: "預設模型分配",
     defaultAssignmentsDesc: "設定用於 Open Notebook 不同用途的預設模型",
-    missingRequiredModels: "缺少必需的模型：{models}。如果没有這些模型，Open Notebook 可能無法正常運行。",
+    missingRequiredModels: "缺少必需的模型：{{models}}。如果没有這些模型，Open Notebook 可能無法正常運行。",
     selectModelPlaceholder: "選擇一個模型",
     requiredModelPlaceholder: "⚠️ 必需 - 請選擇一個模型",
     chatModelLabel: "聊天模型",
@@ -875,7 +875,7 @@ export const zhTW = {
     sttModelLabel: "語音轉文字模型",
     sttModelDesc: "用於音訊轉錄",
     embeddingChangeTitle: "嵌入模型變更",
-    embeddingChangeConfirm: "您即將將嵌入模型從 {from} 更改為 {to}。",
+    embeddingChangeConfirm: "您即將將嵌入模型從 {{from}} 更改為 {{to}}。",
     rebuildRequired: "重要提示：需要重建索引",
     rebuildReason: "更改嵌入模型需要重建所有現有嵌入以保持一致性。如果不重建，您的搜尋可能會返回錯誤或不完整的结果。",
     whatHappensNext: "接下來會發生什麼：",
@@ -888,14 +888,14 @@ export const zhTW = {
     changeAndRebuild: "更改並前往重建",
     autoAssign: "自動指派預設值",
     autoAssigning: "正在指派...",
-    autoAssignSuccess: "已自動指派 {count} 個預設模型",
+    autoAssignSuccess: "已自動指派 {{count}} 個預設模型",
     autoAssignNoModels: "沒有可指派的模型。請先同步模型。",
     autoAssignAlreadySet: "所有預設模型已設定",
     testModel: "測試模型",
     testModelSuccess: "模型測試通過",
     testModelFailed: "模型測試失敗",
     searchOrAddModel: "搜尋或輸入模型名稱...",
-    addCustomModel: "新增 \"{name}\"",
+    addCustomModel: "新增 \"{{name}}\"",
   },
   apiKeys: {
     title: "使用您自己的 API 金鑰設定 AI",
@@ -905,19 +905,19 @@ export const zhTW = {
     configured: "已設定",
     notConfigured: "未設定",
     migrationAvailable: "偵測到環境變數",
-    migrationDescription: "{count} 個 API 金鑰通過環境變數設定，可以遷移到資料庫以便於管理。",
+    migrationDescription: "{{count}} 個 API 金鑰通過環境變數設定，可以遷移到資料庫以便於管理。",
     migrateToDatabase: "遷移到資料庫",
     migrating: "遷移中...",
-    migrationSuccess: "{count} 個 API 金鑰遷移成功",
-    migrationErrors: "{count} 個金鑰遷移失敗",
+    migrationSuccess: "{{count}} 個 API 金鑰遷移成功",
+    migrationErrors: "{{count}} 個金鑰遷移失敗",
     migrationNothingToMigrate: "所有金鑰已在資料庫中",
     learnMore: "瞭解如何設定 API 金鑰 →",
     testConnection: "測試連線",
     testSuccess: "連線成功",
     testFailed: "連線測試失敗",
     syncModels: "同步模型",
-    syncSuccess: "發現 {discovered} 個模型，新增 {new} 個",
-    syncNoNew: "發現 {count} 個模型，全部已註冊",
+    syncSuccess: "發現 {{discovered}} 個模型，新增 {{new}} 個",
+    syncNoNew: "發現 {{count}} 個模型，全部已註冊",
     syncFailed: "同步模型失敗",
     getApiKey: "取得 API 金鑰",
     vertexProject: "GCP 專案 ID",
@@ -932,7 +932,7 @@ export const zhTW = {
     baseUrlOverrideHint: "僅在需要覆蓋提供商預設 API 端點時更改此項。",
     numCtx: "上下文視窗 (num_ctx)",
     numCtxHint: "Ollama 模型的最大上下文視窗。留空則使用預設值（8192）。僅在硬體能夠處理更大視窗時增大。",
-    deleteConfigConfirm: "確定要刪除 '{name}' 嗎？此操作無法撤銷。",
+    deleteConfigConfirm: "確定要刪除 '{{name}}' 嗎？此操作無法撤銷。",
     configSaveSuccess: "設定儲存成功",
     configUpdateSuccess: "設定更新成功",
     configDeleteSuccess: "設定刪除成功",
@@ -944,7 +944,7 @@ export const zhTW = {
     encryptionRequired: "未設定加密金鑰",
     encryptionRequiredDescription: "請設定 OPEN_NOTEBOOK_ENCRYPTION_KEY 環境變數以啟用安全憑據儲存。",
     migrationAvailable: "API 金鑰遷移可用",
-    migrationDescription: "{count} 個供應商的 API 金鑰透過環境變數設定。將它們遷移到資料庫以便於管理。",
+    migrationDescription: "{{count}} 個供應商的 API 金鑰透過環境變數設定。將它們遷移到資料庫以便於管理。",
     goToSettings: "前往設定",
     viewDocs: "查看文件",
   },

From ad12e99c990fd90fe565970acddf6d283bfe5f8b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:21:36 -0300
Subject: [PATCH 179/345] refactor(ai): single provider registry as the backend
 source of truth (#1075)

* refactor(ai): single provider registry as the backend source of truth

Provider metadata (env vars, modalities, connection-test models,
OpenAI-compatible discovery URLs, display names, docs links) is now
defined once in open_notebook/ai/provider_registry.py. The existing
surfaces are derived from it, keeping every import and call-site shape
unchanged:

- api/credentials_service.py: PROVIDER_ENV_CONFIG, PROVIDER_MODALITIES
  and the discovery url_map are built from the registry
- open_notebook/ai/connection_tester.py: TEST_MODELS derived
- open_notebook/ai/model_discovery.py: OPENAI_COMPAT_PROVIDERS built
  from registry entries with a discovery URL (quirk hooks stay local)

The SupportedProvider Literal (typing, can't be built at runtime) and
the frontend provider tables remain manual copies; the cross-check
tests now assert registry keys == Literal == frontend list, plus
registry internal consistency and discovery-table coverage.

New GET /api/providers endpoint exposes the registry (name, display
name, modalities, docs_url, env-configured status) so clients can stop
hardcoding provider lists (frontend adoption is a follow-up).

Docs updated: open_notebook/AGENTS.md and docs/7-DEVELOPMENT/credentials.md
now describe the registry instead of the four-place sync rule.

* refactor(ai): address review findings on the provider registry

- Build PROVIDERS via _build_registry(), which raises on a duplicate
  provider name at import time instead of silently dropping the earlier
  spec (dict-comprehension behavior); regression test added
- Pin the exact OpenAI-compatible provider -> discovery URL mapping in
  a test so a registry edit can't silently drop or misassign a URL
- Give TEST_MODELS a real type annotation
  (Dict[str, Tuple[Optional[str], str]]) instead of bare dict
---
 CHANGELOG.md                                 |   2 +
 api/credentials_service.py                   |  66 +----
 api/main.py                                  |   2 +
 api/models.py                                |  25 +-
 api/routers/providers.py                     |  35 +++
 docs/7-DEVELOPMENT/credentials.md            |   2 +-
 open_notebook/AGENTS.md                      |   2 +-
 open_notebook/ai/connection_tester.py        |  29 +--
 open_notebook/ai/model_discovery.py          |  58 ++---
 open_notebook/ai/provider_registry.py        | 247 +++++++++++++++++++
 tests/test_credential_provider_validation.py |  92 +++++++
 11 files changed, 439 insertions(+), 121 deletions(-)
 create mode 100644 api/routers/providers.py
 create mode 100644 open_notebook/ai/provider_registry.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2324ac32..44e12b30 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,10 +8,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests
 - Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly
 - The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
 
 ### Added
+- New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 48a8cb7e..0ae974c8 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -20,6 +20,7 @@ from open_notebook.ai.model_discovery import (
     classify_model_type,
     fetch_anthropic_model_ids,
 )
+from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
 from open_notebook.utils.url_validation import validate_url
@@ -28,61 +29,17 @@ from open_notebook.utils.url_validation import validate_url
 # Constants
 # =============================================================================
 
-# Provider environment variable configuration.
+# Provider environment variable configuration, derived from the provider
+# registry (open_notebook/ai/provider_registry.py — the source of truth).
 # - "required": ALL listed env vars must be set for the provider to be considered configured.
 # - "required_any": at least ONE of the listed env vars must be set.
 # - "optional": additional env vars used during migration but not required.
 PROVIDER_ENV_CONFIG: Dict[str, dict] = {
-    "openai": {"required": ["OPENAI_API_KEY"]},
-    "anthropic": {"required": ["ANTHROPIC_API_KEY"]},
-    "google": {"required_any": ["GOOGLE_API_KEY", "GEMINI_API_KEY"]},
-    "groq": {"required": ["GROQ_API_KEY"]},
-    "mistral": {"required": ["MISTRAL_API_KEY"]},
-    "deepseek": {"required": ["DEEPSEEK_API_KEY"]},
-    "xai": {"required": ["XAI_API_KEY"]},
-    "openrouter": {"required": ["OPENROUTER_API_KEY"]},
-    "voyage": {"required": ["VOYAGE_API_KEY"]},
-    "elevenlabs": {"required": ["ELEVENLABS_API_KEY"]},
-    "deepgram": {"required": ["DEEPGRAM_API_KEY"]},
-    "ollama": {"required": ["OLLAMA_API_BASE"]},
-    "vertex": {
-        "required": ["VERTEX_PROJECT", "VERTEX_LOCATION"],
-        "optional": ["GOOGLE_APPLICATION_CREDENTIALS"],
-    },
-    "azure": {
-        "required": ["AZURE_OPENAI_API_KEY", "AZURE_OPENAI_ENDPOINT", "AZURE_OPENAI_API_VERSION"],
-        "optional": [
-            "AZURE_OPENAI_ENDPOINT_LLM",
-            "AZURE_OPENAI_ENDPOINT_EMBEDDING",
-            "AZURE_OPENAI_ENDPOINT_STT",
-            "AZURE_OPENAI_ENDPOINT_TTS",
-        ],
-    },
-    "openai_compatible": {
-        "required_any": ["OPENAI_COMPATIBLE_BASE_URL", "OPENAI_COMPATIBLE_API_KEY"],
-    },
-    "dashscope": {"required": ["DASHSCOPE_API_KEY"]},
-    "minimax": {"required": ["MINIMAX_API_KEY"]},
+    name: spec.env_config() for name, spec in PROVIDERS.items()
 }
 
 PROVIDER_MODALITIES: Dict[str, List[str]] = {
-    "openai": ["language", "embedding", "speech_to_text", "text_to_speech"],
-    "anthropic": ["language"],
-    "google": ["language", "embedding", "speech_to_text", "text_to_speech"],
-    "groq": ["language", "speech_to_text"],
-    "mistral": ["language", "embedding", "speech_to_text", "text_to_speech"],
-    "deepseek": ["language"],
-    "xai": ["language", "text_to_speech"],
-    "openrouter": ["language", "embedding"],
-    "voyage": ["embedding"],
-    "elevenlabs": ["text_to_speech", "speech_to_text"],
-    "deepgram": ["text_to_speech"],
-    "ollama": ["language", "embedding"],
-    "vertex": ["language", "embedding", "text_to_speech"],
-    "azure": ["language", "embedding", "speech_to_text", "text_to_speech"],
-    "openai_compatible": ["language", "embedding", "speech_to_text", "text_to_speech"],
-    "dashscope": ["language"],
-    "minimax": ["language"],
+    name: list(spec.modalities) for name, spec in PROVIDERS.items()
 }
 
 
@@ -426,16 +383,11 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             model_names = list(ANTHROPIC_FALLBACK_MODELS)
         return [{"name": m, "provider": "anthropic"} for m in model_names]
 
-    # API-based discovery URLs (OpenAI-style /models endpoints)
+    # API-based discovery URLs (OpenAI-style /models endpoints), from the registry
     url_map = {
-        "openai": "https://api.openai.com/v1/models",
-        "groq": "https://api.groq.com/openai/v1/models",
-        "mistral": "https://api.mistral.ai/v1/models",
-        "deepseek": "https://api.deepseek.com/models",
-        "xai": "https://api.x.ai/v1/models",
-        "openrouter": "https://openrouter.ai/api/v1/models",
-        "dashscope": "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
-        "minimax": "https://api.minimax.io/v1/models",
+        name: spec.openai_compat_discovery_url
+        for name, spec in PROVIDERS.items()
+        if spec.openai_compat_discovery_url
     }
 
     if provider == "ollama":
diff --git a/api/main.py b/api/main.py
index 36578ade..24b206a6 100644
--- a/api/main.py
+++ b/api/main.py
@@ -30,6 +30,7 @@ from api.routers import (
     notebooks,
     notes,
     podcasts,
+    providers,
     search,
     settings,
     source_chat,
@@ -391,6 +392,7 @@ app.include_router(speaker_profiles.router, prefix="/api", tags=["speaker-profil
 app.include_router(chat.router, prefix="/api", tags=["chat"])
 app.include_router(source_chat.router, prefix="/api", tags=["source-chat"])
 app.include_router(credentials.router, prefix="/api", tags=["credentials"])
+app.include_router(providers.router, prefix="/api", tags=["providers"])
 app.include_router(languages.router, prefix="/api", tags=["languages"])
 
 
diff --git a/api/models.py b/api/models.py
index 981940c0..5c7b7302 100644
--- a/api/models.py
+++ b/api/models.py
@@ -571,10 +571,11 @@ class MigrationResult(BaseModel):
 # Notebook delete cascade models
 # Credential models
 
-# Kept in sync with the frontend's ALL_PROVIDERS
-# (frontend/src/app/(dashboard)/settings/api-keys/page.tsx), TEST_MODELS
-# (open_notebook/ai/connection_tester.py), and PROVIDER_ENV_CONFIG
-# (api/credentials_service.py) - all three independently agree on this set.
+# Kept in sync with the provider registry
+# (open_notebook/ai/provider_registry.py PROVIDERS — the backend source of
+# truth) and the frontend's ALL_PROVIDERS (frontend/src/lib/providers.tsx).
+# A Literal can't be built at runtime, so this is one of the two remaining
+# manual copies; tests/test_credential_provider_validation.py enforces the sync.
 SupportedProvider = Literal[
     "openai",
     "anthropic",
@@ -596,6 +597,22 @@ SupportedProvider = Literal[
 ]
 
 
+class ProviderInfoResponse(BaseModel):
+    """Provider metadata from the provider registry."""
+
+    name: str = Field(..., description="Provider identifier (e.g. openai)")
+    display_name: str = Field(..., description="Human-friendly provider name")
+    modalities: List[str] = Field(
+        ..., description="Default modalities supported by the provider"
+    )
+    docs_url: Optional[str] = Field(
+        None, description="Where to get an API key / set the provider up"
+    )
+    env_configured: bool = Field(
+        ..., description="Whether the provider is configured via environment variables"
+    )
+
+
 class CreateCredentialRequest(BaseModel):
     """Request to create a new credential."""
 
diff --git a/api/routers/providers.py b/api/routers/providers.py
new file mode 100644
index 00000000..18144b8a
--- /dev/null
+++ b/api/routers/providers.py
@@ -0,0 +1,35 @@
+"""
+Providers Router
+
+Exposes the provider registry (open_notebook/ai/provider_registry.py) so
+clients can enumerate supported providers and their metadata instead of
+keeping their own copies.
+
+Endpoints:
+- GET /providers - List all supported providers with metadata
+"""
+
+from typing import List
+
+from fastapi import APIRouter
+
+from api.credentials_service import check_env_configured
+from api.models import ProviderInfoResponse
+from open_notebook.ai.provider_registry import PROVIDERS
+
+router = APIRouter(prefix="/providers", tags=["providers"])
+
+
+@router.get("", response_model=List[ProviderInfoResponse])
+async def list_providers():
+    """List all supported AI providers with their registry metadata."""
+    return [
+        ProviderInfoResponse(
+            name=spec.name,
+            display_name=spec.display_name,
+            modalities=list(spec.modalities),
+            docs_url=spec.docs_url,
+            env_configured=check_env_configured(spec.name),
+        )
+        for spec in PROVIDERS.values()
+    ]
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
index 9c143e3f..b35c0738 100644
--- a/docs/7-DEVELOPMENT/credentials.md
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -36,7 +36,7 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and two migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`). Swagger at `/docs` documents the shapes.
 
-**Supported providers (17)** are enforced by the `SupportedProvider` Literal in `api/models.py`, kept in sync with three other locations (frontend `ALL_PROVIDERS`, `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`):
+**Supported providers (17)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients. Two manual copies remain, enforced by `tests/test_credential_provider_validation.py`: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) and the frontend `ALL_PROVIDERS` tables (`frontend/src/lib/providers.tsx`):
 
 - Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, voyage, elevenlabs, deepgram, dashscope, minimax
 - URL-based: ollama
diff --git a/open_notebook/AGENTS.md b/open_notebook/AGENTS.md
index 0a4cbbff..ae17062a 100644
--- a/open_notebook/AGENTS.md
+++ b/open_notebook/AGENTS.md
@@ -12,7 +12,7 @@ Normative rules for working on the Python backend. Architecture and design ratio
 ## API layer (`api/`)
 
 - Structure is routes → services → models. Routers stay thin; business logic goes in `*_service.py`.
-- `SupportedProvider` must stay in sync across **four** locations: `api/models.py` (Literal), frontend `ALL_PROVIDERS`, `connection_tester.py` `TEST_MODELS`, and `credentials_service.py` `PROVIDER_ENV_CONFIG`. Adding a provider means touching all four.
+- Provider metadata (env vars, modalities, test models, discovery URLs, docs links) lives in the registry: `open_notebook/ai/provider_registry.py` `PROVIDERS`. `TEST_MODELS`, `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES` and `OPENAI_COMPAT_PROVIDERS` are derived from it, and `GET /api/providers` exposes it. Adding a provider = add it to the registry, plus **two** manual copies: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) and the frontend tables in `frontend/src/lib/providers.tsx` — both enforced by `tests/test_credential_provider_validation.py`.
 - NEVER return API key values from any endpoint — metadata only.
 - Every user-supplied URL field must go through `validate_url()` (`open_notebook/utils/url_validation.py`, async) for SSRF protection. Private IPs/localhost are intentionally allowed (self-hosted Ollama, LM Studio).
 - Errors: raise typed exceptions from `open_notebook.exceptions` — global handlers map them to HTTP status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `RateLimitError`→429, `ConfigurationError`→422, `NetworkError`/`ExternalServiceError`→502, `OpenNotebookError`→500). Don't raise bare `HTTPException` for domain errors.
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 9c16b14c..b8403e1f 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -9,11 +9,12 @@ import io
 import json
 import os
 import struct
-from typing import Optional, Tuple
+from typing import Dict, Optional, Tuple
 
 import httpx
 from loguru import logger
 
+from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.utils.url_validation import validate_url
 
 
@@ -47,8 +48,9 @@ def _is_vertex_credentials_file_error(exc: Exception) -> bool:
     return isinstance(exc, (OSError, json.JSONDecodeError, GoogleAuthError))
 
 
-# Test models for each provider - uses minimal/cheapest models for testing
-# Format: (model_name, model_type)
+# Test models for each provider - uses minimal/cheapest models for testing.
+# Derived from the provider registry (the source of truth for test models).
+# Format: (model_name, model_type); None model = dynamic (first available).
 #
 # Prefer a provider-maintained floating alias where one exists, so a model
 # retirement doesn't silently break the connection test (see #970: Google
@@ -57,25 +59,8 @@ def _is_vertex_credentials_file_error(exc: Exception) -> bool:
 # its own. The provider test also no longer treats a model-level failure as
 # a connection failure (see `_connection_failure_reason`), so even if an
 # alias ever breaks, the test still reports the credentials correctly.
-TEST_MODELS = {
-    "openai": ("gpt-3.5-turbo", "language"),
-    "anthropic": ("claude-3-haiku-20240307", "language"),
-    "google": ("gemini-flash-latest", "language"),
-    "groq": ("llama-3.1-8b-instant", "language"),
-    "mistral": ("mistral-small-latest", "language"),
-    "deepseek": ("deepseek-chat", "language"),
-    "xai": ("grok-beta", "language"),
-    "openrouter": ("openai/gpt-3.5-turbo", "language"),
-    "voyage": ("voyage-3-lite", "embedding"),
-    "elevenlabs": ("eleven_multilingual_v2", "text_to_speech"),
-    "deepgram": ("aura-2-thalia-en", "text_to_speech"),
-    "ollama": (None, "language"),  # Dynamic - will use first available model
-    # Complex providers with additional configuration
-    "vertex": ("gemini-flash-latest", "language"),  # Uses Google Vertex AI
-    "azure": ("gpt-35-turbo", "language"),  # Azure OpenAI deployment name
-    "openai_compatible": (None, "language"),  # Dynamic - will use first available model
-    "dashscope": ("qwen-plus", "language"),
-    "minimax": ("MiniMax-M2.5", "language"),
+TEST_MODELS: Dict[str, Tuple[Optional[str], str]] = {
+    name: (spec.test_model, spec.test_model_type) for name, spec in PROVIDERS.items()
 }
 
 
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 54efafd1..32fe1911 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -14,6 +14,7 @@ import httpx
 from loguru import logger
 
 from open_notebook.ai.models import Model
+from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.database.repository import repo_query
 from open_notebook.domain.credential import Credential
 
@@ -218,43 +219,28 @@ class ProviderDiscoverySpec:
     description: Optional[Callable[[dict], Optional[str]]] = None
 
 
+# Per-provider quirk hooks that can't live in the (pure data) registry.
+_COMPAT_CLASSIFY: Dict[str, Callable[[dict], str]] = {
+    "mistral": _classify_mistral,
+    # OpenRouter models are typically language models
+    "openrouter": lambda model: "language",
+}
+_COMPAT_DESCRIPTION: Dict[str, Callable[[dict], Optional[str]]] = {
+    "openrouter": lambda model: model.get("name"),
+}
+
+# Built from the provider registry: every provider with an
+# `openai_compat_discovery_url` gets a discovery spec. The API key env var
+# is the provider's (single) required env var from the registry.
 OPENAI_COMPAT_PROVIDERS: Dict[str, ProviderDiscoverySpec] = {
-    "openai": ProviderDiscoverySpec(
-        url="https://api.openai.com/v1/models",
-        env_var="OPENAI_API_KEY",
-    ),
-    "groq": ProviderDiscoverySpec(
-        url="https://api.groq.com/openai/v1/models",
-        env_var="GROQ_API_KEY",
-    ),
-    "mistral": ProviderDiscoverySpec(
-        url="https://api.mistral.ai/v1/models",
-        env_var="MISTRAL_API_KEY",
-        classify=_classify_mistral,
-    ),
-    "deepseek": ProviderDiscoverySpec(
-        url="https://api.deepseek.com/models",
-        env_var="DEEPSEEK_API_KEY",
-    ),
-    "xai": ProviderDiscoverySpec(
-        url="https://api.x.ai/v1/models",
-        env_var="XAI_API_KEY",
-    ),
-    "openrouter": ProviderDiscoverySpec(
-        url="https://openrouter.ai/api/v1/models",
-        env_var="OPENROUTER_API_KEY",
-        # OpenRouter models are typically language models
-        classify=lambda model: "language",
-        description=lambda model: model.get("name"),
-    ),
-    "dashscope": ProviderDiscoverySpec(
-        url="https://dashscope.aliyuncs.com/compatible-mode/v1/models",
-        env_var="DASHSCOPE_API_KEY",
-    ),
-    "minimax": ProviderDiscoverySpec(
-        url="https://api.minimax.io/v1/models",
-        env_var="MINIMAX_API_KEY",
-    ),
+    name: ProviderDiscoverySpec(
+        url=spec.openai_compat_discovery_url,
+        env_var=spec.required_env[0],
+        classify=_COMPAT_CLASSIFY.get(name),
+        description=_COMPAT_DESCRIPTION.get(name),
+    )
+    for name, spec in PROVIDERS.items()
+    if spec.openai_compat_discovery_url
 }
 
 
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
new file mode 100644
index 00000000..2a798eb3
--- /dev/null
+++ b/open_notebook/ai/provider_registry.py
@@ -0,0 +1,247 @@
+"""
+Provider Registry — the single source of truth for AI provider metadata.
+
+Adding a provider used to require keeping ~6 independent dicts in sync
+(env config, modalities, test models, discovery table, API Literal,
+frontend table). Now the backend surfaces are all derived from the
+`PROVIDERS` registry below:
+
+- `api/credentials_service.py` `PROVIDER_ENV_CONFIG` / `PROVIDER_MODALITIES`
+- `open_notebook/ai/connection_tester.py` `TEST_MODELS`
+- `open_notebook/ai/model_discovery.py` `OPENAI_COMPAT_PROVIDERS`
+- `GET /api/providers` (api/routers/providers.py)
+
+Two places still need a manual edit when adding a provider — both are
+enforced by tests (tests/test_credential_provider_validation.py):
+
+1. `SupportedProvider` Literal in `api/models.py` (typing can't be built
+   at runtime from this dict).
+2. The frontend table in `frontend/src/lib/providers.tsx`.
+
+This module is pure data: it must not import anything from the rest of
+the project so it stays importable from anywhere without cycles.
+"""
+
+from dataclasses import dataclass
+from typing import Dict, List, Optional, Tuple
+
+
+@dataclass(frozen=True)
+class ProviderSpec:
+    """Everything the backend needs to know about one AI provider."""
+
+    name: str
+    display_name: str
+    # Default modalities offered when creating a credential for this provider.
+    modalities: Tuple[str, ...]
+    # Env var configuration for env-based setup/migration:
+    # - required_env: ALL must be set for the provider to count as configured.
+    # - required_any_env: at least ONE must be set.
+    # - optional_env: read during migration but not required.
+    required_env: Tuple[str, ...] = ()
+    required_any_env: Tuple[str, ...] = ()
+    optional_env: Tuple[str, ...] = ()
+    # Cheapest model used by the provider connection test. None means the
+    # test is dynamic (first available model) or handled by a bespoke tester.
+    test_model: Optional[str] = None
+    test_model_type: str = "language"
+    # Where users get an API key / set the provider up.
+    docs_url: Optional[str] = None
+    # For providers exposing an OpenAI-compatible GET /models endpoint,
+    # the discovery URL. Drives OPENAI_COMPAT_PROVIDERS in model_discovery.
+    openai_compat_discovery_url: Optional[str] = None
+
+    def env_config(self) -> Dict[str, List[str]]:
+        """Env var config in the legacy PROVIDER_ENV_CONFIG dict shape."""
+        config: Dict[str, List[str]] = {}
+        if self.required_env:
+            config["required"] = list(self.required_env)
+        if self.required_any_env:
+            config["required_any"] = list(self.required_any_env)
+        if self.optional_env:
+            config["optional"] = list(self.optional_env)
+        return config
+
+
+_LANGUAGE_ONLY = ("language",)
+_ALL_MODALITIES = ("language", "embedding", "speech_to_text", "text_to_speech")
+
+
+_PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
+        ProviderSpec(
+            name="openai",
+            display_name="OpenAI",
+            modalities=_ALL_MODALITIES,
+            required_env=("OPENAI_API_KEY",),
+            test_model="gpt-3.5-turbo",
+            docs_url="https://platform.openai.com/api-keys",
+            openai_compat_discovery_url="https://api.openai.com/v1/models",
+        ),
+        ProviderSpec(
+            name="anthropic",
+            display_name="Anthropic",
+            modalities=_LANGUAGE_ONLY,
+            required_env=("ANTHROPIC_API_KEY",),
+            test_model="claude-3-haiku-20240307",
+            docs_url="https://console.anthropic.com/settings/keys",
+        ),
+        ProviderSpec(
+            name="google",
+            display_name="Google AI",
+            modalities=_ALL_MODALITIES,
+            required_any_env=("GOOGLE_API_KEY", "GEMINI_API_KEY"),
+            test_model="gemini-flash-latest",
+            docs_url="https://aistudio.google.com/app/apikey",
+        ),
+        ProviderSpec(
+            name="groq",
+            display_name="Groq",
+            modalities=("language", "speech_to_text"),
+            required_env=("GROQ_API_KEY",),
+            test_model="llama-3.1-8b-instant",
+            docs_url="https://console.groq.com/keys",
+            openai_compat_discovery_url="https://api.groq.com/openai/v1/models",
+        ),
+        ProviderSpec(
+            name="mistral",
+            display_name="Mistral AI",
+            modalities=("language", "embedding", "speech_to_text", "text_to_speech"),
+            required_env=("MISTRAL_API_KEY",),
+            test_model="mistral-small-latest",
+            docs_url="https://console.mistral.ai/api-keys/",
+            openai_compat_discovery_url="https://api.mistral.ai/v1/models",
+        ),
+        ProviderSpec(
+            name="deepseek",
+            display_name="DeepSeek",
+            modalities=_LANGUAGE_ONLY,
+            required_env=("DEEPSEEK_API_KEY",),
+            test_model="deepseek-chat",
+            docs_url="https://platform.deepseek.com/api_keys",
+            openai_compat_discovery_url="https://api.deepseek.com/models",
+        ),
+        ProviderSpec(
+            name="xai",
+            display_name="xAI (Grok)",
+            modalities=("language", "text_to_speech"),
+            required_env=("XAI_API_KEY",),
+            test_model="grok-beta",
+            docs_url="https://console.x.ai/",
+            openai_compat_discovery_url="https://api.x.ai/v1/models",
+        ),
+        ProviderSpec(
+            name="openrouter",
+            display_name="OpenRouter",
+            modalities=("language", "embedding"),
+            required_env=("OPENROUTER_API_KEY",),
+            test_model="openai/gpt-3.5-turbo",
+            docs_url="https://openrouter.ai/keys",
+            openai_compat_discovery_url="https://openrouter.ai/api/v1/models",
+        ),
+        ProviderSpec(
+            name="dashscope",
+            display_name="DashScope (Qwen)",
+            modalities=_LANGUAGE_ONLY,
+            required_env=("DASHSCOPE_API_KEY",),
+            test_model="qwen-plus",
+            docs_url="https://help.aliyun.com/zh/model-studio/getting-started/",
+            openai_compat_discovery_url="https://dashscope.aliyuncs.com/compatible-mode/v1/models",
+        ),
+        ProviderSpec(
+            name="minimax",
+            display_name="MiniMax",
+            modalities=_LANGUAGE_ONLY,
+            required_env=("MINIMAX_API_KEY",),
+            test_model="MiniMax-M2.5",
+            docs_url="https://platform.minimaxi.com/document/Guides",
+            openai_compat_discovery_url="https://api.minimax.io/v1/models",
+        ),
+        ProviderSpec(
+            name="voyage",
+            display_name="Voyage AI",
+            modalities=("embedding",),
+            required_env=("VOYAGE_API_KEY",),
+            test_model="voyage-3-lite",
+            test_model_type="embedding",
+            docs_url="https://dash.voyageai.com/api-keys",
+        ),
+        ProviderSpec(
+            name="elevenlabs",
+            display_name="ElevenLabs",
+            modalities=("text_to_speech", "speech_to_text"),
+            required_env=("ELEVENLABS_API_KEY",),
+            test_model="eleven_multilingual_v2",
+            test_model_type="text_to_speech",
+            docs_url="https://elevenlabs.io/app/settings/api-keys",
+        ),
+        ProviderSpec(
+            name="deepgram",
+            display_name="Deepgram",
+            modalities=("text_to_speech",),
+            required_env=("DEEPGRAM_API_KEY",),
+            test_model="aura-2-thalia-en",
+            test_model_type="text_to_speech",
+            docs_url="https://console.deepgram.com/",
+        ),
+        ProviderSpec(
+            name="ollama",
+            display_name="Ollama",
+            modalities=("language", "embedding"),
+            required_env=("OLLAMA_API_BASE",),
+            test_model=None,  # Dynamic - uses first available model
+        ),
+        ProviderSpec(
+            name="azure",
+            display_name="Azure OpenAI",
+            modalities=_ALL_MODALITIES,
+            required_env=(
+                "AZURE_OPENAI_API_KEY",
+                "AZURE_OPENAI_ENDPOINT",
+                "AZURE_OPENAI_API_VERSION",
+            ),
+            optional_env=(
+                "AZURE_OPENAI_ENDPOINT_LLM",
+                "AZURE_OPENAI_ENDPOINT_EMBEDDING",
+                "AZURE_OPENAI_ENDPOINT_STT",
+                "AZURE_OPENAI_ENDPOINT_TTS",
+            ),
+            test_model="gpt-35-turbo",  # Azure OpenAI deployment name
+            docs_url="https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI",
+        ),
+        ProviderSpec(
+            name="vertex",
+            display_name="Google Vertex AI",
+            modalities=("language", "embedding", "text_to_speech"),
+            required_env=("VERTEX_PROJECT", "VERTEX_LOCATION"),
+            optional_env=("GOOGLE_APPLICATION_CREDENTIALS",),
+            test_model="gemini-flash-latest",  # Uses Google Vertex AI
+            docs_url="https://cloud.google.com/vertex-ai/docs/start/cloud-environment",
+        ),
+        ProviderSpec(
+            name="openai_compatible",
+            display_name="OpenAI Compatible",
+            modalities=_ALL_MODALITIES,
+            required_any_env=("OPENAI_COMPATIBLE_BASE_URL", "OPENAI_COMPATIBLE_API_KEY"),
+            test_model=None,  # Dynamic - uses first available model
+            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md",
+        ),
+)
+
+
+def _build_registry(specs: Tuple[ProviderSpec, ...]) -> Dict[str, ProviderSpec]:
+    """Build the name -> spec map, refusing duplicate names at import time.
+
+    A plain dict comprehension would silently drop the earlier spec on a
+    name collision; fail loudly instead.
+    """
+    registry: Dict[str, ProviderSpec] = {}
+    for spec in specs:
+        if spec.name in registry:
+            raise ValueError(
+                f"Duplicate provider name in registry: {spec.name!r}"
+            )
+        registry[spec.name] = spec
+    return registry
+
+
+PROVIDERS: Dict[str, ProviderSpec] = _build_registry(_PROVIDER_SPECS)
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 25943e4a..d430f719 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -3,6 +3,12 @@ Tests for the Literal[...] constraint on CreateCredentialRequest.provider
 (api/models.py). Previously `provider: str` accepted any string; a typo'd
 or bogus provider would flow through to the domain layer and fail later
 with a less clear error instead of a clean 422 at the API boundary.
+
+Also the sync-enforcement for the provider registry
+(open_notebook/ai/provider_registry.py): the registry is the backend
+source of truth, and the two remaining manual copies (the
+SupportedProvider Literal and the frontend ALL_PROVIDERS table) must
+match it exactly.
 """
 
 import pytest
@@ -10,6 +16,7 @@ from fastapi.testclient import TestClient
 from pydantic import ValidationError
 
 from api.models import CreateCredentialRequest, SupportedProvider
+from open_notebook.ai.provider_registry import PROVIDERS
 
 KNOWN_GOOD_PROVIDERS = [
     "openai",
@@ -39,6 +46,77 @@ def client():
     return TestClient(app)
 
 
+class TestProviderRegistryIsTheSourceOfTruth:
+    """The registry drives every backend surface; the Literal and the
+    frontend table are the only manual copies and must match it."""
+
+    def test_literal_matches_registry_keys(self):
+        assert set(SupportedProvider.__args__) == set(PROVIDERS.keys())
+
+    def test_registry_matches_known_good_provider_list(self):
+        assert set(PROVIDERS.keys()) == set(KNOWN_GOOD_PROVIDERS)
+
+    def test_registry_specs_are_internally_consistent(self):
+        for name, spec in PROVIDERS.items():
+            assert spec.name == name
+            assert spec.display_name
+            assert spec.modalities, f"{name} has no modalities"
+            assert spec.required_env or spec.required_any_env, (
+                f"{name} has no env var configuration"
+            )
+            if spec.openai_compat_discovery_url:
+                # The discovery table takes the API key from required_env[0]
+                assert len(spec.required_env) == 1, (
+                    f"{name} uses openai-compat discovery but does not have "
+                    f"exactly one required env var"
+                )
+
+    def test_discovery_functions_cover_registry(self):
+        from open_notebook.ai.model_discovery import PROVIDER_DISCOVERY_FUNCTIONS
+
+        assert set(PROVIDER_DISCOVERY_FUNCTIONS.keys()) == set(PROVIDERS.keys())
+
+    def test_registry_rejects_duplicate_provider_names(self):
+        """A plain dict comprehension would silently drop the earlier spec
+        on a name collision; the registry builder must raise instead."""
+        from open_notebook.ai.provider_registry import (
+            ProviderSpec,
+            _build_registry,
+        )
+
+        duplicate = (
+            ProviderSpec(name="dupe", display_name="Dupe A", modalities=("language",)),
+            ProviderSpec(name="dupe", display_name="Dupe B", modalities=("language",)),
+        )
+        with pytest.raises(ValueError, match="Duplicate provider name"):
+            _build_registry(duplicate)
+
+    def test_openai_compat_discovery_urls_are_exactly_as_expected(self):
+        """Pin the derived provider -> discovery URL mapping so a registry
+        edit can't silently drop or misassign a URL (both the model_discovery
+        table and the credentials_service url_map are built from these)."""
+        from open_notebook.ai.model_discovery import OPENAI_COMPAT_PROVIDERS
+
+        expected = {
+            "openai": "https://api.openai.com/v1/models",
+            "groq": "https://api.groq.com/openai/v1/models",
+            "mistral": "https://api.mistral.ai/v1/models",
+            "deepseek": "https://api.deepseek.com/models",
+            "xai": "https://api.x.ai/v1/models",
+            "openrouter": "https://openrouter.ai/api/v1/models",
+            "dashscope": "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
+            "minimax": "https://api.minimax.io/v1/models",
+        }
+        assert {
+            name: spec.openai_compat_discovery_url
+            for name, spec in PROVIDERS.items()
+            if spec.openai_compat_discovery_url
+        } == expected
+        assert {
+            name: spec.url for name, spec in OPENAI_COMPAT_PROVIDERS.items()
+        } == expected
+
+
 class TestSupportedProviderMatchesOtherSourcesOfTruth:
     def test_matches_known_good_provider_list(self):
         assert set(SupportedProvider.__args__) == set(KNOWN_GOOD_PROVIDERS)
@@ -68,6 +146,20 @@ class TestSupportedProviderMatchesOtherSourcesOfTruth:
         assert set(SupportedProvider.__args__) == set(frontend_providers)
 
 
+class TestProvidersEndpoint:
+    def test_get_providers_returns_registry_metadata(self, client):
+        response = client.get("/api/providers")
+        assert response.status_code == 200
+        data = response.json()
+        assert {p["name"] for p in data} == set(PROVIDERS.keys())
+
+        openai = next(p for p in data if p["name"] == "openai")
+        assert openai["display_name"] == "OpenAI"
+        assert "language" in openai["modalities"]
+        assert openai["docs_url"].startswith("https://")
+        assert isinstance(openai["env_configured"], bool)
+
+
 class TestCreateCredentialRequestValidation:
     @pytest.mark.parametrize("provider", KNOWN_GOOD_PROVIDERS)
     def test_accepts_every_known_provider(self, provider):

From 8c85728de2517c7b2e69dd059b18d9dc74e0701e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:25:29 -0300
Subject: [PATCH 180/345] ci: gate PRs on mypy, start ignore_errors burn-down
 (#1076)

* ci: gate PRs on mypy, start ignore_errors burn-down

Add a backend-typecheck CI job running uv run python -m mypy . and bring
the repo-wide baseline from 197 errors to 0 so the gate blocks new type
errors from now on:

- enable the pydantic mypy plugin (resolves 138 false positives on
  models whose fields have Field(None, ...) defaults)
- fix the remaining errors with real annotations; the only new type:
  ignore comments cover a genuine langgraph typing limitation (partial
  state dicts are valid at runtime but the overloads require the full
  state type) and tests that intentionally pass invalid input
- start the ignore_errors burn-down: open_notebook.graphs.transformation,
  open_notebook.graphs.ask and api.routers.models are now type-checked;
  stale blocks for the deleted api.client and api.podcast_api_service
  modules removed. Only open_notebook.domain.notebook remains exempt
  (DB layer is migrating to surreal-basics)
- fix the mypy.ini header comment to describe what the config does

* test: use typing.get_args on the registry literal check

The registry test landed in parallel using Literal.__args__, which the
mypy gate in this branch rejects; align it with the get_args() idiom
used by the rest of the file.
---
 .github/workflows/test.yml                    | 21 ++++++++++++
 CHANGELOG.md                                  |  1 +
 api/credentials_service.py                    |  4 +--
 api/routers/chat.py                           | 21 +++++++-----
 api/routers/credentials.py                    |  6 +++-
 api/routers/notes.py                          |  6 ++--
 api/routers/search.py                         | 12 ++++---
 api/routers/source_chat.py                    | 19 +++++++----
 api/routers/transformations.py                |  8 +++--
 commands/source_commands.py                   | 14 +++++---
 mypy.ini                                      | 25 ++++-----------
 open_notebook/ai/connection_tester.py         | 32 ++++++++++++++++---
 open_notebook/ai/model_discovery.py           |  2 +-
 open_notebook/domain/credential.py            |  2 +-
 open_notebook/domain/provider_config.py       |  4 +--
 open_notebook/graphs/ask.py                   |  4 ++-
 open_notebook/graphs/source.py                |  6 ++--
 open_notebook/utils/chunking.py               | 12 +++----
 tests/test_add_insight_failure_propagation.py |  6 ++--
 tests/test_cors_credentials.py                | 12 +++++--
 tests/test_credential_provider_validation.py  | 12 ++++---
 tests/test_domain.py                          |  4 ++-
 tests/test_graphs.py                          | 28 +++++++++-------
 tests/test_max_body_size_middleware.py        |  4 ++-
 tests/test_podcast_job_status_batching.py     |  6 +++-
 tests/test_source_create_array_limits.py      |  2 ++
 tests/test_startup_migration_retry.py         |  8 +++--
 tests/test_utils.py                           |  9 +++---
 28 files changed, 192 insertions(+), 98 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 22072ecf..c22bb93e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -62,6 +62,27 @@ jobs:
       - name: Run ruff
         run: uv run ruff check .
 
+  backend-typecheck:
+    name: Backend Typecheck
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install
+
+      - name: Install dependencies
+        run: uv sync --extra dev
+
+      - name: Run mypy
+        run: uv run python -m mypy .
+
   frontend:
     name: Frontend Tests
     runs-on: ubuntu-latest
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 44e12b30..1b2a992d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
+- CI now also gates every PR on `mypy` (backend typecheck): the repo-wide baseline went from 197 errors to 0 (enabling the pydantic mypy plugin resolved most of them; the rest got real annotations), so new type errors are blocked from here on. The `ignore_errors` burn-down also started: `open_notebook.graphs.transformation`, `open_notebook.graphs.ask` and `api.routers.models` are now type-checked (plus two stale entries for deleted modules removed); only `open_notebook.domain.notebook` remains exempt pending the surreal-basics migration
 
 ### Fixed
 - Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 0ae974c8..3a5bf722 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -292,10 +292,10 @@ async def test_credential(credential_id: str) -> dict:
             return {"provider": provider, "success": True, "message": "Connection successful"}
 
         elif test_type == "embedding":
-            model = AIFactory.create_embedding(
+            embedding_model = AIFactory.create_embedding(
                 model_name=test_model, provider=provider, config=config
             )
-            await model.aembed(["test"])
+            await embedding_model.aembed(["test"])
             return {"provider": provider, "success": True, "message": "Connection successful"}
 
         elif test_type == "text_to_speech":
diff --git a/api/routers/chat.py b/api/routers/chat.py
index 4ba9e9d6..7138d26d 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -332,15 +332,20 @@ async def execute_chat(request: ExecuteChatRequest):
         # (SqliteSaver checkpoints are sync) doesn't block the event loop and
         # freeze the rest of the API while the LLM responds. Mirrors the
         # get_state() calls above.
+        # The lambda pins down which `invoke` overload is used; asyncio.to_thread
+        # can't resolve overloaded callables on its own. The ignore is a langgraph
+        # typing limitation: it accepts a partial state dict at runtime, but the
+        # signature requires the full state type.
         result = await asyncio.to_thread(
-            chat_graph.invoke,
-            input=state_values,  # type: ignore[arg-type]
-            config=RunnableConfig(
-                configurable={
-                    "thread_id": full_session_id,
-                    "model_id": model_override,
-                }
-            ),
+            lambda: chat_graph.invoke(
+                input=state_values,  # type: ignore[arg-type]
+                config=RunnableConfig(
+                    configurable={
+                        "thread_id": full_session_id,
+                        "model_id": model_override,
+                    }
+                ),
+            )
         )
 
         # Update session timestamp
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index 23f6a991..7fe5fc05 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -308,7 +308,11 @@ async def delete_credential(
                             "UPDATE $model_id SET credential = $target_id",
                             {
                                 "model_id": ensure_record_id(model_id),
-                                "target_id": ensure_record_id(target_cred.id),
+                                # A fetched credential always has an id; fall
+                                # back to the requested id for the type checker.
+                                "target_id": ensure_record_id(
+                                    target_cred.id or migrate_to
+                                ),
                             },
                         )
             elif linked:
diff --git a/api/routers/notes.py b/api/routers/notes.py
index d5a6acb9..c862d233 100644
--- a/api/routers/notes.py
+++ b/api/routers/notes.py
@@ -56,8 +56,10 @@ async def create_note(note_data: NoteCreate):
             from open_notebook.graphs.prompt import graph as prompt_graph
 
             prompt = "Based on the Note below, please provide a Title for this content, with max 15 words"
-            result = await prompt_graph.ainvoke(
-                {  # type: ignore[arg-type]
+            # LangGraph accepts a partial state dict at runtime, but its typed
+            # overloads require the full state type (langgraph typing limitation).
+            result = await prompt_graph.ainvoke(  # type: ignore[call-overload]
+                {
                     "input_text": note_data.content,
                     "prompt": prompt,
                 }
diff --git a/api/routers/search.py b/api/routers/search.py
index 21ff8b1d..4f27d3a6 100644
--- a/api/routers/search.py
+++ b/api/routers/search.py
@@ -65,8 +65,10 @@ async def stream_ask_response(
     try:
         final_answer = None
 
-        async for chunk in ask_graph.astream(
-            input=dict(question=question),  # type: ignore[arg-type]
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # overloads require the full state type (langgraph typing limitation).
+        async for chunk in ask_graph.astream(  # type: ignore[call-overload]
+            input=dict(question=question),
             config=dict(
                 configurable=dict(
                     strategy_model=strategy_model.id,
@@ -196,8 +198,10 @@ async def ask_knowledge_base_simple(ask_request: AskRequest):
 
         # Run the ask graph and get final result
         final_answer = None
-        async for chunk in ask_graph.astream(
-            input=dict(question=ask_request.question),  # type: ignore[arg-type]
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # overloads require the full state type (langgraph typing limitation).
+        async for chunk in ask_graph.astream(  # type: ignore[call-overload]
+            input=dict(question=ask_request.question),
             config=dict(
                 configurable=dict(
                     strategy_model=strategy_model.id,
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index bd51d084..b1d675e0 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -338,12 +338,17 @@ async def stream_source_chat_response(
         # event loop. While blocked, even the already-yielded SSE events can't
         # flush and every other request stalls until the LLM finishes. Mirrors the
         # get_state() calls above.
+        # The lambda pins down which `invoke` overload is used; asyncio.to_thread
+        # can't resolve overloaded callables on its own. The ignore is a langgraph
+        # typing limitation: it accepts a partial state dict at runtime, but the
+        # signature requires the full state type.
         result = await asyncio.to_thread(
-            source_chat_graph.invoke,
-            input=state_values,  # type: ignore[arg-type]
-            config=RunnableConfig(
-                configurable={"thread_id": session_id, "model_id": model_override}
-            ),
+            lambda: source_chat_graph.invoke(
+                input=state_values,  # type: ignore[arg-type]
+                config=RunnableConfig(
+                    configurable={"thread_id": session_id, "model_id": model_override}
+                ),
+            )
         )
 
         # Stream the complete AI response
@@ -372,9 +377,9 @@ async def stream_source_chat_response(
     except Exception as e:
         from open_notebook.utils.error_classifier import classify_error
 
-        _, user_message = classify_error(e)
+        _, error_message = classify_error(e)
         logger.error(f"Error in source chat streaming: {str(e)}")
-        error_event = {"type": "error", "message": user_message}
+        error_event = {"type": "error", "message": error_message}
         yield f"data: {json.dumps(error_event)}\n\n"
 
 
diff --git a/api/routers/transformations.py b/api/routers/transformations.py
index 50f61fd8..346ff336 100644
--- a/api/routers/transformations.py
+++ b/api/routers/transformations.py
@@ -102,9 +102,11 @@ async def execute_transformation(execute_request: TransformationExecuteRequest):
             if not model:
                 raise HTTPException(status_code=404, detail="Model not found")
 
-        # Execute the transformation
-        result = await transformation_graph.ainvoke(
-            dict(  # type: ignore[arg-type]
+        # Execute the transformation.
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # overloads require the full state type (langgraph typing limitation).
+        result = await transformation_graph.ainvoke(  # type: ignore[call-overload]
+            dict(
                 input_text=execute_request.input_text,
                 transformation=transformation,
             ),
diff --git a/commands/source_commands.py b/commands/source_commands.py
index a1448038..80400e90 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -89,9 +89,11 @@ async def process_source_command(
         # 3. Process source with all notebooks
         logger.info(f"Processing source with {len(input_data.notebook_ids)} notebooks")
 
-        # Execute source_graph with all notebooks
-        result = await source_graph.ainvoke(
-            {  # type: ignore[arg-type]
+        # Execute source_graph with all notebooks.
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # overloads require the full state type (langgraph typing limitation).
+        result = await source_graph.ainvoke(  # type: ignore[call-overload]
+            {
                 "content_state": input_data.content_state,
                 "notebook_ids": input_data.notebook_ids,  # Use notebook_ids (plural) as expected by SourceState
                 "apply_transformations": transformations,
@@ -216,8 +218,10 @@ async def run_transformation_command(
                 f"Transformation '{input_data.transformation_id}' not found"
             )
 
-        # Run transformation graph (includes LLM call + insight creation)
-        await transform_graph.ainvoke(
+        # Run transformation graph (includes LLM call + insight creation).
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # overloads require the full state type (langgraph typing limitation).
+        await transform_graph.ainvoke(  # type: ignore[call-overload]
             input=dict(source=source, transformation=transformation)
         )
 
diff --git a/mypy.ini b/mypy.ini
index 017d4413..bf66d005 100644
--- a/mypy.ini
+++ b/mypy.ini
@@ -1,6 +1,9 @@
 [mypy]
-# Only check for syntax errors, not type errors
-# This allows the codebase to gradually add type hints
+# Lenient baseline config, enforced in CI (backend-typecheck job).
+# `mypy .` must exit 0: new type errors are blocked while the
+# remaining `ignore_errors = True` modules below are burned down
+# over time. Remove a module's block, fix its errors, repeat.
+plugins = pydantic.mypy
 warn_return_any = False
 warn_unused_configs = True
 ignore_missing_imports = True
@@ -10,21 +13,7 @@ check_untyped_defs = True
 explicit_package_bases = True
 mypy_path = .
 
-# Disable type checking for files with many errors
-[mypy-api.client]
-ignore_errors = True
-
-[mypy-api.podcast_api_service]
-ignore_errors = True
-
-[mypy-api.routers.models]
-ignore_errors = True
-
+# Modules still exempt from type checking (burn-down list - shrink it,
+# don't grow it)
 [mypy-open_notebook.domain.notebook]
 ignore_errors = True
-
-[mypy-open_notebook.graphs.transformation]
-ignore_errors = True
-
-[mypy-open_notebook.graphs.ask]
-ignore_errors = True
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index b8403e1f..88a8e3f5 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -12,6 +12,13 @@ import struct
 from typing import Dict, Optional, Tuple
 
 import httpx
+from esperanto import (
+    EmbeddingModel,
+    LanguageModel,
+    SpeechToTextModel,
+    TextToSpeechModel,
+)
+from esperanto.common_types import ChatCompletion
 from loguru import logger
 
 from open_notebook.ai.provider_registry import PROVIDERS
@@ -402,13 +409,20 @@ async def test_individual_model(model) -> Tuple[bool, str]:
             return False, "Could not create model instance"
 
         if model.type == "language":
+            if not isinstance(esp_model, LanguageModel):
+                return False, f"Model type mismatch: expected a language model, got {type(esp_model).__name__}"
             response = await esp_model.achat_complete(
                 messages=[{"role": "user", "content": "Hi!"}]
             )
+            if not isinstance(response, ChatCompletion):
+                # Non-streaming call; a streaming response would be a bug upstream.
+                return True, "Connection successful (streaming response)"
             text = response.content[:100] if response.content else "(empty response)"
             return True, f"Response: {text}"
 
         elif model.type == "embedding":
+            if not isinstance(esp_model, EmbeddingModel):
+                return False, f"Model type mismatch: expected an embedding model, got {type(esp_model).__name__}"
             result = await esp_model.aembed(["This is a test."])
             if result and len(result) > 0:
                 dims = len(result[0])
@@ -416,6 +430,8 @@ async def test_individual_model(model) -> Tuple[bool, str]:
             return True, "Embedding successful"
 
         elif model.type == "text_to_speech":
+            if not isinstance(esp_model, TextToSpeechModel):
+                return False, f"Model type mismatch: expected a text-to-speech model, got {type(esp_model).__name__}"
             # For ElevenLabs, look up first available voice (API uses voice_id, not name)
             voice = DEFAULT_TEST_VOICES.get(model.provider)
             if not voice and hasattr(esp_model, "available_voices"):
@@ -428,20 +444,26 @@ async def test_individual_model(model) -> Tuple[bool, str]:
             if not voice:
                 voice = "alloy"  # fallback
 
-            result = await esp_model.agenerate_speech(
+            audio = await esp_model.agenerate_speech(
                 text="Hello from Open Notebook", voice=voice
             )
-            if result and hasattr(result, "content"):
-                size = len(result.content)
+            if audio and hasattr(audio, "content"):
+                size = len(audio.content)
                 return True, f"Audio generated: {size} bytes"
             return True, "Speech generation successful"
 
         elif model.type == "speech_to_text":
+            if not isinstance(esp_model, SpeechToTextModel):
+                return False, f"Model type mismatch: expected a speech-to-text model, got {type(esp_model).__name__}"
             audio_file = _get_test_audio()
-            result = await esp_model.atranscribe(
+            transcription = await esp_model.atranscribe(
                 audio_file=audio_file, language="en"
             )
-            text = str(result.text).strip() if hasattr(result, "text") else str(result).strip()
+            text = (
+                str(transcription.text).strip()
+                if hasattr(transcription, "text")
+                else str(transcription).strip()
+            )
             if not text:
                 return True, "Connection successful (test clip produced no transcription)"
             return True, f"Transcription: {text[:100]}"
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 32fe1911..b317fe6f 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -727,7 +727,7 @@ async def sync_all_providers() -> Dict[str, Tuple[int, int, int]]:
     task_results = await asyncio.gather(*tasks, return_exceptions=True)
 
     for provider, result in zip(providers, task_results):
-        if isinstance(result, Exception):
+        if isinstance(result, BaseException):
             logger.error(f"Error syncing {provider}: {result}")
             results[provider] = (0, 0, 0)
         else:
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index 202d0d41..c632fb40 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -226,7 +226,7 @@ class Credential(ObjectModel):
 
     def _prepare_save_data(self) -> Dict[str, Any]:
         """Override to encrypt api_key and sync provider extras into `config`."""
-        data = {}
+        data: Dict[str, Any] = {}
         for key, value in self.model_dump().items():
             if key in ("decryption_error", "config"):
                 # `config` is rebuilt below from the existing bag + convenience fields.
diff --git a/open_notebook/domain/provider_config.py b/open_notebook/domain/provider_config.py
index 4a8d26c8..aa0cb30b 100644
--- a/open_notebook/domain/provider_config.py
+++ b/open_notebook/domain/provider_config.py
@@ -10,7 +10,7 @@ is set. If not set, keys are stored as plain text with a warning logged.
 """
 
 from datetime import datetime
-from typing import ClassVar, Dict, List, Optional
+from typing import Any, ClassVar, Dict, List, Optional
 
 from pydantic import Field, SecretStr
 
@@ -416,7 +416,7 @@ class ProviderConfig(RecordModel):
         Encryption is performed using Fernet symmetric encryption if
         OPEN_NOTEBOOK_ENCRYPTION_KEY is configured.
         """
-        data = {"credentials": {}}
+        data: Dict[str, Any] = {"credentials": {}}
 
         for provider, credentials in self.credentials.items():
             data["credentials"][provider] = []
diff --git a/open_notebook/graphs/ask.py b/open_notebook/graphs/ask.py
index 74f0ae6b..405cc7c0 100644
--- a/open_notebook/graphs/ask.py
+++ b/open_notebook/graphs/ask.py
@@ -50,7 +50,9 @@ class ThreadState(TypedDict):
 
 async def call_model_with_messages(state: ThreadState, config: RunnableConfig) -> dict:
     try:
-        parser = PydanticOutputParser(pydantic_object=Strategy)
+        parser: PydanticOutputParser[Strategy] = PydanticOutputParser(
+            pydantic_object=Strategy
+        )
         system_prompt = Prompter(prompt_template="ask/entry", parser=parser).render(  # type: ignore[arg-type]
             data=state  # type: ignore[arg-type]
         )
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index 7ae6766c..65f3062c 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -167,8 +167,10 @@ async def transform_content(state: TransformationState) -> Optional[dict]:
     transformation: Transformation = state["transformation"]
 
     logger.debug(f"Applying transformation {transformation.name}")
-    result = await transform_graph.ainvoke(
-        dict(input_text=content, transformation=transformation)  # type: ignore[arg-type]
+    # LangGraph accepts a partial state dict at runtime, but its typed
+    # overloads require the full state type (langgraph typing limitation).
+    result = await transform_graph.ainvoke(  # type: ignore[call-overload]
+        dict(input_text=content, transformation=transformation)
     )
     await source.add_insight(transformation.title, result["output"])
     return {
diff --git a/open_notebook/utils/chunking.py b/open_notebook/utils/chunking.py
index 716f58f6..5b63134e 100644
--- a/open_notebook/utils/chunking.py
+++ b/open_notebook/utils/chunking.py
@@ -446,26 +446,26 @@ def chunk_text(
     logger.debug(f"Chunking text with content type: {content_type.value}")
 
     # Select appropriate splitter
+    chunks: List[str]
     if content_type == ContentType.HTML:
-        splitter = _get_html_splitter()
+        html_splitter = _get_html_splitter()
         # HTML splitter returns Document objects
-        docs = splitter.split_text(text)
+        docs = html_splitter.split_text(text)
         chunks = [
             doc.page_content if hasattr(doc, "page_content") else str(doc)
             for doc in docs
         ]
     elif content_type == ContentType.MARKDOWN:
-        splitter = _get_markdown_splitter()
+        md_splitter = _get_markdown_splitter()
         # Markdown splitter returns Document objects
-        docs = splitter.split_text(text)
+        docs = md_splitter.split_text(text)
         chunks = [
             doc.page_content if hasattr(doc, "page_content") else str(doc)
             for doc in docs
         ]
     else:
         # Plain text - use recursive splitter directly
-        splitter = _get_plain_splitter()
-        chunks = splitter.split_text(text)
+        chunks = _get_plain_splitter().split_text(text)
 
     # Apply secondary chunking if needed (for HTML/Markdown that may produce large chunks)
     if content_type in (ContentType.HTML, ContentType.MARKDOWN):
diff --git a/tests/test_add_insight_failure_propagation.py b/tests/test_add_insight_failure_propagation.py
index 4e2d09d8..1e957504 100644
--- a/tests/test_add_insight_failure_propagation.py
+++ b/tests/test_add_insight_failure_propagation.py
@@ -11,6 +11,7 @@ DatabaseOperationError so they propagate to the job-level retry/failure
 handling that already exists in commands/source_commands.py.
 """
 
+from typing import cast
 from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
@@ -155,7 +156,7 @@ class TestSourceGraphTransformContentPropagatesFailure:
 
     @pytest.mark.asyncio
     async def test_add_insight_failure_propagates_out_of_transform_content(self):
-        from open_notebook.graphs.source import transform_content
+        from open_notebook.graphs.source import TransformationState, transform_content
 
         source = make_source()
         source.full_text = "the source's full text"
@@ -175,7 +176,8 @@ class TestSourceGraphTransformContentPropagatesFailure:
             ) as mock_add_insight,
         ):
             with pytest.raises(DatabaseOperationError):
-                await transform_content(state)
+                # cast: mocks stand in for the real Source/Transformation
+                await transform_content(cast(TransformationState, state))
 
         mock_add_insight.assert_awaited_once()
 
diff --git a/tests/test_cors_credentials.py b/tests/test_cors_credentials.py
index c5660621..bc11f80b 100644
--- a/tests/test_cors_credentials.py
+++ b/tests/test_cors_credentials.py
@@ -10,7 +10,10 @@ contains "*" (whether from the unset default or an explicit CORS_ORIGINS=*),
 True once an operator scopes CORS_ORIGINS to specific origins.
 """
 
+from typing import cast
+
 from starlette.middleware.cors import CORSMiddleware
+from starlette.requests import Request
 from starlette.testclient import TestClient
 
 from api import main as api_main
@@ -82,7 +85,8 @@ class TestCorsHeadersHelperMatchesMiddlewarePolicy:
         class FakeRequest:
             headers = {"origin": "https://evil.example.com"}
 
-        headers = api_main._cors_headers(FakeRequest())
+        # cast: _cors_headers only reads request.headers
+        headers = api_main._cors_headers(cast(Request, FakeRequest()))
         assert "Access-Control-Allow-Credentials" not in headers
 
     def test_includes_allow_credentials_header_for_explicit_origins(self, monkeypatch):
@@ -94,7 +98,8 @@ class TestCorsHeadersHelperMatchesMiddlewarePolicy:
         class FakeRequest:
             headers = {"origin": "https://notebook.example.com"}
 
-        headers = api_main._cors_headers(FakeRequest())
+        # cast: _cors_headers only reads request.headers
+        headers = api_main._cors_headers(cast(Request, FakeRequest()))
         assert headers["Access-Control-Allow-Credentials"] == "true"
 
     def test_disallowed_origin_still_gets_no_allow_origin_header(self, monkeypatch):
@@ -106,5 +111,6 @@ class TestCorsHeadersHelperMatchesMiddlewarePolicy:
         class FakeRequest:
             headers = {"origin": "https://evil.example.com"}
 
-        headers = api_main._cors_headers(FakeRequest())
+        # cast: _cors_headers only reads request.headers
+        headers = api_main._cors_headers(cast(Request, FakeRequest()))
         assert "Access-Control-Allow-Origin" not in headers
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index d430f719..b6668c0d 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -11,6 +11,8 @@ SupportedProvider Literal and the frontend ALL_PROVIDERS table) must
 match it exactly.
 """
 
+from typing import get_args
+
 import pytest
 from fastapi.testclient import TestClient
 from pydantic import ValidationError
@@ -51,7 +53,7 @@ class TestProviderRegistryIsTheSourceOfTruth:
     frontend table are the only manual copies and must match it."""
 
     def test_literal_matches_registry_keys(self):
-        assert set(SupportedProvider.__args__) == set(PROVIDERS.keys())
+        assert set(get_args(SupportedProvider)) == set(PROVIDERS.keys())
 
     def test_registry_matches_known_good_provider_list(self):
         assert set(PROVIDERS.keys()) == set(KNOWN_GOOD_PROVIDERS)
@@ -119,17 +121,17 @@ class TestProviderRegistryIsTheSourceOfTruth:
 
 class TestSupportedProviderMatchesOtherSourcesOfTruth:
     def test_matches_known_good_provider_list(self):
-        assert set(SupportedProvider.__args__) == set(KNOWN_GOOD_PROVIDERS)
+        assert set(get_args(SupportedProvider)) == set(KNOWN_GOOD_PROVIDERS)
 
     def test_matches_connection_tester_test_models_keys(self):
         from open_notebook.ai.connection_tester import TEST_MODELS
 
-        assert set(SupportedProvider.__args__) == set(TEST_MODELS.keys())
+        assert set(get_args(SupportedProvider)) == set(TEST_MODELS.keys())
 
     def test_matches_credentials_service_provider_env_config_keys(self):
         from api.credentials_service import PROVIDER_ENV_CONFIG
 
-        assert set(SupportedProvider.__args__) == set(PROVIDER_ENV_CONFIG.keys())
+        assert set(get_args(SupportedProvider)) == set(PROVIDER_ENV_CONFIG.keys())
 
     def test_matches_frontend_all_providers_list(self):
         """The frontend keeps its own copy (ALL_PROVIDERS) that a Python
@@ -143,7 +145,7 @@ class TestSupportedProviderMatchesOtherSourcesOfTruth:
         match = re.search(r"const ALL_PROVIDERS = \[(.*?)\]", source, re.DOTALL)
         assert match, "ALL_PROVIDERS array not found in lib/providers.tsx"
         frontend_providers = re.findall(r"'([a-z0-9_]+)'", match.group(1))
-        assert set(SupportedProvider.__args__) == set(frontend_providers)
+        assert set(get_args(SupportedProvider)) == set(frontend_providers)
 
 
 class TestProvidersEndpoint:
diff --git a/tests/test_domain.py b/tests/test_domain.py
index b3062728..e3ed403a 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -503,7 +503,8 @@ class TestPodcastService:
         # generate_podcast_command` when the package is imported, so the fake
         # submodule must expose that name or the package import fails before the
         # patched submit_command is reached.
-        fake_commands_module.generate_podcast_command = lambda *a, **k: None
+        # setattr: dynamic module attribute mypy can't know about
+        setattr(fake_commands_module, "generate_podcast_command", lambda *a, **k: None)
 
         with (
             patch.object(
@@ -575,6 +576,7 @@ class TestContentSettings:
         assert settings.default_content_processing_engine_doc == "auto"
         assert settings.default_embedding_option == "ask"
         assert settings.auto_delete_files == "yes"
+        assert settings.youtube_preferred_languages is not None
         assert len(settings.youtube_preferred_languages) > 0
 
 
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 02406cae..86abe2ea 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -6,9 +6,11 @@ without heavy mocking of the actual processing logic.
 """
 
 from datetime import datetime
+from typing import cast
 from unittest.mock import AsyncMock, MagicMock, patch
 
 import pytest
+from langchain_core.runnables import RunnableConfig
 
 from open_notebook.domain.notebook import Source
 from open_notebook.graphs.prompt import PatternChainState, graph
@@ -31,7 +33,7 @@ class TestGraphTools:
 
     def test_get_current_timestamp_format(self):
         """Test timestamp tool returns correct format."""
-        timestamp = get_current_timestamp.func()
+        timestamp = get_current_timestamp.invoke({})
 
         assert isinstance(timestamp, str)
         assert len(timestamp) == 14  # YYYYMMDDHHmmss format
@@ -39,7 +41,7 @@ class TestGraphTools:
 
     def test_get_current_timestamp_validity(self):
         """Test timestamp represents valid datetime."""
-        timestamp = get_current_timestamp.func()
+        timestamp = get_current_timestamp.invoke({})
 
         # Parse it back to datetime to verify validity
         year = int(timestamp[0:4])
@@ -141,7 +143,7 @@ class TestTransformationGraph:
             "source": None,
         }
 
-        config = {"configurable": {"model_id": None}}
+        config: RunnableConfig = {"configurable": {"model_id": None}}
 
         with pytest.raises(AssertionError, match="No content to transform"):
             await run_transformation(state, config)
@@ -165,7 +167,7 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_custom_title_preserved(self, mock_get):
         """User-set title is NOT overwritten by content_state.title."""
-        from open_notebook.graphs.source import save_source
+        from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
         mock_source.title = "My Custom Research Title"
@@ -185,7 +187,8 @@ class TestSaveSourceTitlePreservation:
             "apply_transformations": [],
         }
 
-        await save_source(state)
+        # cast: the node only reads these keys; SourceState is a total TypedDict
+        await save_source(cast(SourceState, state))
 
         assert mock_source.title == "My Custom Research Title"
         mock_source.save.assert_awaited_once()
@@ -194,7 +197,7 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_placeholder_title_replaced(self, mock_get):
         """Placeholder 'Processing...' title IS replaced by extracted title."""
-        from open_notebook.graphs.source import save_source
+        from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
         mock_source.title = "Processing..."
@@ -214,7 +217,8 @@ class TestSaveSourceTitlePreservation:
             "apply_transformations": [],
         }
 
-        await save_source(state)
+        # cast: the node only reads these keys; SourceState is a total TypedDict
+        await save_source(cast(SourceState, state))
 
         assert mock_source.title == "Extracted Article Title"
         mock_source.save.assert_awaited_once()
@@ -223,7 +227,7 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_none_title_replaced(self, mock_get):
         """None title IS replaced by extracted title."""
-        from open_notebook.graphs.source import save_source
+        from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
         mock_source.title = None
@@ -243,7 +247,8 @@ class TestSaveSourceTitlePreservation:
             "apply_transformations": [],
         }
 
-        await save_source(state)
+        # cast: the node only reads these keys; SourceState is a total TypedDict
+        await save_source(cast(SourceState, state))
 
         assert mock_source.title == "Extracted Title"
         mock_source.save.assert_awaited_once()
@@ -252,7 +257,7 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_empty_title_replaced(self, mock_get):
         """Empty string title IS replaced by extracted title."""
-        from open_notebook.graphs.source import save_source
+        from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
         mock_source.title = ""
@@ -272,7 +277,8 @@ class TestSaveSourceTitlePreservation:
             "apply_transformations": [],
         }
 
-        await save_source(state)
+        # cast: the node only reads these keys; SourceState is a total TypedDict
+        await save_source(cast(SourceState, state))
 
         assert mock_source.title == "Extracted Title"
         mock_source.save.assert_awaited_once()
diff --git a/tests/test_max_body_size_middleware.py b/tests/test_max_body_size_middleware.py
index 806ec97f..ad789c06 100644
--- a/tests/test_max_body_size_middleware.py
+++ b/tests/test_max_body_size_middleware.py
@@ -252,5 +252,7 @@ class TestRealAppWiring:
         MaxBodySizeMiddleware - i.e. CORSMiddleware must be added *after* it."""
         from api.main import app
 
-        classes = [m.cls.__name__ for m in app.user_middleware]
+        # getattr: Middleware.cls is typed as a callable protocol without
+        # __name__, but every registered middleware here is a plain class.
+        classes = [getattr(m.cls, "__name__", "") for m in app.user_middleware]
         assert classes.index("CORSMiddleware") < classes.index("MaxBodySizeMiddleware")
diff --git a/tests/test_podcast_job_status_batching.py b/tests/test_podcast_job_status_batching.py
index b284f3c0..a3738c20 100644
--- a/tests/test_podcast_job_status_batching.py
+++ b/tests/test_podcast_job_status_batching.py
@@ -75,7 +75,11 @@ class TestGetJobDetailsForCommandsUnit:
         with patch(
             "open_notebook.podcasts.models.repo_query", new=AsyncMock(return_value=[])
         ) as mock_query:
-            await PodcastEpisode.get_job_details_for_commands([None, "", "command:a"])
+            # None intentionally violates the signature: the method must filter
+            # out falsy ids it can receive from unvalidated DB rows.
+            await PodcastEpisode.get_job_details_for_commands(
+                [None, "", "command:a"]  # type: ignore[list-item]
+            )
 
         # Only the truthy id should reach the query's bound params.
         _, kwargs_or_args = mock_query.call_args
diff --git a/tests/test_source_create_array_limits.py b/tests/test_source_create_array_limits.py
index 901c11ee..d48c6fbe 100644
--- a/tests/test_source_create_array_limits.py
+++ b/tests/test_source_create_array_limits.py
@@ -21,6 +21,7 @@ def make_ids(n, prefix):
 class TestNotebooksMaxLength:
     def test_accepts_up_to_50_notebooks(self):
         request = SourceCreate(type="text", content="hi", notebooks=make_ids(50, "notebook"))
+        assert request.notebooks is not None
         assert len(request.notebooks) == 50
 
     def test_rejects_51_notebooks(self):
@@ -43,6 +44,7 @@ class TestTransformationsMaxLength:
         request = SourceCreate(
             type="text", content="hi", transformations=make_ids(50, "transformation")
         )
+        assert request.transformations is not None
         assert len(request.transformations) == 50
 
     def test_rejects_51_transformations(self):
diff --git a/tests/test_startup_migration_retry.py b/tests/test_startup_migration_retry.py
index 175e949a..93898a7f 100644
--- a/tests/test_startup_migration_retry.py
+++ b/tests/test_startup_migration_retry.py
@@ -79,7 +79,9 @@ async def test_lifespan_raises_after_database_retry_budget_exhausted(
     monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
 
     with pytest.raises(RuntimeError, match="Failed to run database migrations"):
-        async with api_main.lifespan(None):
+        # lifespan never touches its app argument, so None keeps the test
+        # isolated from the real FastAPI app.
+        async with api_main.lifespan(None):  # type: ignore[arg-type]
             pass
 
     assert manager.ping.await_count == 3
@@ -100,7 +102,9 @@ async def test_lifespan_does_not_retry_real_migration_errors(
     monkeypatch.setattr(api_main, "AsyncMigrationManager", lambda: manager)
 
     with pytest.raises(RuntimeError, match="Failed to run database migrations"):
-        async with api_main.lifespan(None):
+        # lifespan never touches its app argument, so None keeps the test
+        # isolated from the real FastAPI app.
+        async with api_main.lifespan(None):  # type: ignore[arg-type]
             pass
 
     manager.ping.assert_awaited_once()
diff --git a/tests/test_utils.py b/tests/test_utils.py
index 389e2b9d..cf1ebc11 100644
--- a/tests/test_utils.py
+++ b/tests/test_utils.py
@@ -98,13 +98,14 @@ class TestTextUtilities:
 
     def test_parse_thinking_content_invalid_input(self):
         """Test parsing with invalid input types."""
-        # Non-string input
-        thinking, cleaned = parse_thinking_content(None)
+        # Non-string input (intentionally violates the signature to test the
+        # runtime guard)
+        thinking, cleaned = parse_thinking_content(None)  # type: ignore[arg-type]
         assert thinking == ""
         assert cleaned == ""
 
-        # Integer input
-        thinking, cleaned = parse_thinking_content(123)
+        # Integer input (same intentional violation)
+        thinking, cleaned = parse_thinking_content(123)  # type: ignore[arg-type]
         assert thinking == ""
         assert cleaned == "123"
 

From 33500a1c5b409c8869c054664384faf4802c1462 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:30:09 -0300
Subject: [PATCH 181/345] =?UTF-8?q?refactor(frontend):=20unify=20conventio?=
 =?UTF-8?q?ns=20=E2=80=94=20hook=20naming,=20sources=20dir,=20auth=20token?=
 =?UTF-8?q?=20helper=20(#1077)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Rename useNotebookChat.ts/useSourceChat.ts to kebab-case, matching the
  other 19 hook files
- Merge src/components/source/ into src/components/sources/ (no collisions)
- Extract the copy-pasted auth-storage localStorage parsing into a single
  getAuthToken() helper (src/lib/auth-token.ts) used by the apiClient
  interceptor and the SSE fetch paths
- Route non-streaming raw fetch calls through apiClient: podcast audio
  blob download (EpisodeCard) and the auth-status check (auth-store).
  SSE/streaming paths, config bootstrap and the login/checkAuth credential
  probes deliberately keep raw fetch
- Fix 8 podcast toast descriptions that rendered a literal {name}
  placeholder: normalize single-brace placeholders to i18next {{name}}
  in all locales and pass the profile name from the mutation
  response/variables
---
 CHANGELOG.md                                  |  2 +
 .../notebooks/components/ChatColumn.test.tsx  |  6 +--
 .../notebooks/components/ChatColumn.tsx       |  4 +-
 .../src/app/(dashboard)/sources/[id]/page.tsx |  6 +--
 .../src/components/podcasts/EpisodeCard.tsx   | 31 ++++-----------
 .../podcasts/EpisodeProfilesPanel.tsx         |  2 +-
 .../podcasts/SpeakerProfilesPanel.tsx         |  2 +-
 .../components/providers/ModalProvider.tsx    |  4 +-
 .../{source => sources}/ChatPanel.tsx         |  4 +-
 .../{source => sources}/MessageActions.tsx    |  0
 .../{source => sources}/ModelSelector.tsx     |  0
 .../NotebookAssociations.tsx                  |  0
 .../{source => sources}/SessionManager.tsx    |  0
 .../SourceDetailContent.tsx                   |  4 +-
 .../{source => sources}/SourceDialog.tsx      |  0
 .../SourceInsightDialog.tsx                   |  0
 frontend/src/lib/api/client.ts                | 16 ++------
 frontend/src/lib/api/search.ts                | 16 +-------
 frontend/src/lib/api/source-chat.ts           | 16 +-------
 frontend/src/lib/auth-token.ts                | 22 +++++++++++
 ...seNotebookChat.ts => use-notebook-chat.ts} |  0
 frontend/src/lib/hooks/use-podcasts.ts        | 38 ++++++++++---------
 .../{useSourceChat.ts => use-source-chat.ts}  |  0
 frontend/src/lib/locales/bn-IN/index.ts       | 16 ++++----
 frontend/src/lib/locales/ca-ES/index.ts       | 16 ++++----
 frontend/src/lib/locales/de-DE/index.ts       | 16 ++++----
 frontend/src/lib/locales/en-US/index.ts       | 16 ++++----
 frontend/src/lib/locales/es-ES/index.ts       | 16 ++++----
 frontend/src/lib/locales/fr-FR/index.ts       | 16 ++++----
 frontend/src/lib/locales/it-IT/index.ts       | 16 ++++----
 frontend/src/lib/locales/ja-JP/index.ts       | 16 ++++----
 frontend/src/lib/locales/pl-PL/index.ts       | 16 ++++----
 frontend/src/lib/locales/pt-BR/index.ts       | 16 ++++----
 frontend/src/lib/locales/ru-RU/index.ts       | 16 ++++----
 frontend/src/lib/locales/tr-TR/index.ts       | 16 ++++----
 frontend/src/lib/stores/auth-store.ts         | 22 +++++------
 36 files changed, 182 insertions(+), 205 deletions(-)
 rename frontend/src/components/{source => sources}/ChatPanel.tsx (98%)
 rename frontend/src/components/{source => sources}/MessageActions.tsx (100%)
 rename frontend/src/components/{source => sources}/ModelSelector.tsx (100%)
 rename frontend/src/components/{source => sources}/NotebookAssociations.tsx (100%)
 rename frontend/src/components/{source => sources}/SessionManager.tsx (100%)
 rename frontend/src/components/{source => sources}/SourceDetailContent.tsx (99%)
 rename frontend/src/components/{source => sources}/SourceDialog.tsx (100%)
 rename frontend/src/components/{source => sources}/SourceInsightDialog.tsx (100%)
 create mode 100644 frontend/src/lib/auth-token.ts
 rename frontend/src/lib/hooks/{useNotebookChat.ts => use-notebook-chat.ts} (100%)
 rename frontend/src/lib/hooks/{useSourceChat.ts => use-source-chat.ts} (100%)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1b2a992d..6f3806cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests
+- Frontend convention cleanup (no user-facing change): hook files unified to kebab-case (`useNotebookChat.ts`/`useSourceChat.ts` → `use-notebook-chat.ts`/`use-source-chat.ts`), `src/components/source/` merged into `src/components/sources/`, the localStorage auth-token parsing ritual extracted into a single `getAuthToken()` helper (`src/lib/auth-token.ts`), and non-streaming raw `fetch` calls routed through `apiClient` (podcast audio download, auth-status check). SSE/streaming paths and the login/checkAuth credential probes deliberately keep raw `fetch`
 - Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly
 - The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
 
@@ -19,6 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CI now also gates every PR on `mypy` (backend typecheck): the repo-wide baseline went from 197 errors to 0 (enabling the pydantic mypy plugin resolved most of them; the rest got real annotations), so new type errors are blocked from here on. The `ignore_errors` burn-down also started: `open_notebook.graphs.transformation`, `open_notebook.graphs.ask` and `api.routers.models` are now type-checked (plus two stale entries for deleted modules removed); only `open_notebook.domain.notebook` remains exempt pending the surreal-basics migration
 
 ### Fixed
+- Eight podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) showed the literal `{name}` placeholder instead of the profile name: the locale strings used single braces (which i18next ignores) and the `t()` call sites passed no values. Placeholders normalized to `{{name}}` across all locales and the actual name is now passed in from the mutation response/variables
 - Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely
 - Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.test.tsx b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.test.tsx
index 70e4ea21..323f1a29 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.test.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.test.tsx
@@ -2,12 +2,12 @@ import { render, screen } from '@testing-library/react'
 import { describe, it, expect, vi } from 'vitest'
 import { ChatColumn } from './ChatColumn'
 import { useNotes } from '@/lib/hooks/use-notes'
-import { useNotebookChat } from '@/lib/hooks/useNotebookChat'
+import { useNotebookChat } from '@/lib/hooks/use-notebook-chat'
 
 // Mock the hooks
 vi.mock('@/lib/hooks/use-notes')
-vi.mock('@/lib/hooks/useNotebookChat')
-vi.mock('@/components/source/ChatPanel', () => ({
+vi.mock('@/lib/hooks/use-notebook-chat')
+vi.mock('@/components/sources/ChatPanel', () => ({
   ChatPanel: () => <div data-testid="chat-panel" />
 }))
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
index befc6f96..83982ac7 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/ChatColumn.tsx
@@ -1,9 +1,9 @@
 'use client'
 
 import { useMemo } from 'react'
-import { useNotebookChat } from '@/lib/hooks/useNotebookChat'
+import { useNotebookChat } from '@/lib/hooks/use-notebook-chat'
 import { useNotes } from '@/lib/hooks/use-notes'
-import { ChatPanel } from '@/components/source/ChatPanel'
+import { ChatPanel } from '@/components/sources/ChatPanel'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { Card, CardContent } from '@/components/ui/card'
 import { AlertCircle } from 'lucide-react'
diff --git a/frontend/src/app/(dashboard)/sources/[id]/page.tsx b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
index 0103fc4b..d24b9d3c 100644
--- a/frontend/src/app/(dashboard)/sources/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
@@ -4,10 +4,10 @@ import { useRouter, useParams } from 'next/navigation'
 import { useCallback } from 'react'
 import { Button } from '@/components/ui/button'
 import { ArrowLeft } from 'lucide-react'
-import { useSourceChat } from '@/lib/hooks/useSourceChat'
-import { ChatPanel } from '@/components/source/ChatPanel'
+import { useSourceChat } from '@/lib/hooks/use-source-chat'
+import { ChatPanel } from '@/components/sources/ChatPanel'
 import { useNavigation } from '@/lib/hooks/use-navigation'
-import { SourceDetailContent } from '@/components/source/SourceDetailContent'
+import { SourceDetailContent } from '@/components/sources/SourceDetailContent'
 
 export default function SourceDetailPage() {
   const router = useRouter()
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index eac18cfd..4236f721 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -5,6 +5,7 @@ import { formatDistanceToNow } from 'date-fns'
 import { getDateLocale } from '@/lib/utils/date-locale'
 import { InfoIcon, RefreshCcw, Trash2 } from 'lucide-react'
 
+import apiClient from '@/lib/api/client'
 import { resolvePodcastAssetUrl } from '@/lib/api/podcasts'
 import { EpisodeStatus, FAILED_EPISODE_STATUSES, PodcastEpisode } from '@/lib/types/podcasts'
 import { cn } from '@/lib/utils'
@@ -162,31 +163,13 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
       }
 
       try {
-        let token: string | undefined
-        if (typeof window !== 'undefined') {
-          const raw = window.localStorage.getItem('auth-storage')
-          if (raw) {
-            try {
-              const parsed = JSON.parse(raw)
-              token = parsed?.state?.token
-            } catch (error) {
-              console.error('Failed to parse auth storage', error)
-            }
-          }
-        }
+        // apiClient attaches the auth header; directAudioUrl is absolute so
+        // the dynamic baseURL is ignored.
+        const response = await apiClient.get<Blob>(directAudioUrl, {
+          responseType: 'blob',
+        })
 
-        const headers: HeadersInit = {}
-        if (token) {
-          headers.Authorization = `Bearer ${token}`
-        }
-
-        const response = await fetch(directAudioUrl, { headers })
-        if (!response.ok) {
-          throw new Error(`Audio request failed with status ${response.status}`)
-        }
-
-        const blob = await response.blob()
-        revokeUrl = URL.createObjectURL(blob)
+        revokeUrl = URL.createObjectURL(response.data)
         setAudioSrc(revokeUrl)
       } catch (error) {
         console.error('Unable to load podcast audio', error)
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 6c79f11a..9cf0d4e4 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -182,7 +182,7 @@ export function EpisodeProfilesPanel({
                         <AlertDialogFooter>
                           <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
                           <AlertDialogAction
-                            onClick={() => deleteProfile.mutate(profile.id)}
+                            onClick={() => deleteProfile.mutate({ profileId: profile.id, name: profile.name })}
                             disabled={deleteProfile.isPending}
                           >
                             {deleteProfile.isPending ? t('podcasts.deleting') : t('podcasts.delete')}
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index 97985c1b..ac90d19a 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -227,7 +227,7 @@ export function SpeakerProfilesPanel({
                         <AlertDialogFooter>
                           <AlertDialogCancel>{t('common.cancel')}</AlertDialogCancel>
                           <AlertDialogAction
-                            onClick={() => deleteProfile.mutate(profile.id)}
+                            onClick={() => deleteProfile.mutate({ profileId: profile.id, name: profile.name })}
                             disabled={deleteDisabled || deleteProfile.isPending}
                           >
                             {deleteProfile.isPending ? t('podcasts.deleting') : t('podcasts.delete')}
diff --git a/frontend/src/components/providers/ModalProvider.tsx b/frontend/src/components/providers/ModalProvider.tsx
index 72e6a562..9ba316a8 100644
--- a/frontend/src/components/providers/ModalProvider.tsx
+++ b/frontend/src/components/providers/ModalProvider.tsx
@@ -2,8 +2,8 @@
 
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { NoteEditorDialog } from '@/app/(dashboard)/notebooks/components/NoteEditorDialog'
-import { SourceInsightDialog } from '@/components/source/SourceInsightDialog'
-import { SourceDialog } from '@/components/source/SourceDialog'
+import { SourceInsightDialog } from '@/components/sources/SourceInsightDialog'
+import { SourceDialog } from '@/components/sources/SourceDialog'
 
 /**
  * Modal Provider Component
diff --git a/frontend/src/components/source/ChatPanel.tsx b/frontend/src/components/sources/ChatPanel.tsx
similarity index 98%
rename from frontend/src/components/source/ChatPanel.tsx
rename to frontend/src/components/sources/ChatPanel.tsx
index d82275f7..2a0b2d79 100644
--- a/frontend/src/components/source/ChatPanel.tsx
+++ b/frontend/src/components/sources/ChatPanel.tsx
@@ -16,8 +16,8 @@ import {
 } from '@/lib/types/api'
 import { ModelSelector } from './ModelSelector'
 import { ContextIndicator } from '@/components/common/ContextIndicator'
-import { SessionManager } from '@/components/source/SessionManager'
-import { MessageActions } from '@/components/source/MessageActions'
+import { SessionManager } from '@/components/sources/SessionManager'
+import { MessageActions } from '@/components/sources/MessageActions'
 import { convertReferencesToCompactMarkdown, createCompactReferenceLinkComponent } from '@/lib/utils/source-references'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { toast } from 'sonner'
diff --git a/frontend/src/components/source/MessageActions.tsx b/frontend/src/components/sources/MessageActions.tsx
similarity index 100%
rename from frontend/src/components/source/MessageActions.tsx
rename to frontend/src/components/sources/MessageActions.tsx
diff --git a/frontend/src/components/source/ModelSelector.tsx b/frontend/src/components/sources/ModelSelector.tsx
similarity index 100%
rename from frontend/src/components/source/ModelSelector.tsx
rename to frontend/src/components/sources/ModelSelector.tsx
diff --git a/frontend/src/components/source/NotebookAssociations.tsx b/frontend/src/components/sources/NotebookAssociations.tsx
similarity index 100%
rename from frontend/src/components/source/NotebookAssociations.tsx
rename to frontend/src/components/sources/NotebookAssociations.tsx
diff --git a/frontend/src/components/source/SessionManager.tsx b/frontend/src/components/sources/SessionManager.tsx
similarity index 100%
rename from frontend/src/components/source/SessionManager.tsx
rename to frontend/src/components/sources/SessionManager.tsx
diff --git a/frontend/src/components/source/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
similarity index 99%
rename from frontend/src/components/source/SourceDetailContent.tsx
rename to frontend/src/components/sources/SourceDetailContent.tsx
index cfdddfad..5c5ce34b 100644
--- a/frontend/src/components/source/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -64,8 +64,8 @@ import { formatDistanceToNow } from 'date-fns'
 import { getDateLocale } from '@/lib/utils/date-locale'
 import { toast } from 'sonner'
 import { useTranslation } from '@/lib/hooks/use-translation'
-import { SourceInsightDialog } from '@/components/source/SourceInsightDialog'
-import { NotebookAssociations } from '@/components/source/NotebookAssociations'
+import { SourceInsightDialog } from '@/components/sources/SourceInsightDialog'
+import { NotebookAssociations } from '@/components/sources/NotebookAssociations'
 
 interface SourceDetailContentProps {
   sourceId: string
diff --git a/frontend/src/components/source/SourceDialog.tsx b/frontend/src/components/sources/SourceDialog.tsx
similarity index 100%
rename from frontend/src/components/source/SourceDialog.tsx
rename to frontend/src/components/sources/SourceDialog.tsx
diff --git a/frontend/src/components/source/SourceInsightDialog.tsx b/frontend/src/components/sources/SourceInsightDialog.tsx
similarity index 100%
rename from frontend/src/components/source/SourceInsightDialog.tsx
rename to frontend/src/components/sources/SourceInsightDialog.tsx
diff --git a/frontend/src/lib/api/client.ts b/frontend/src/lib/api/client.ts
index 7219b713..5ddf3675 100644
--- a/frontend/src/lib/api/client.ts
+++ b/frontend/src/lib/api/client.ts
@@ -1,5 +1,6 @@
 import axios, { AxiosResponse } from 'axios'
 import { getApiUrl } from '@/lib/config'
+import { getAuthToken } from '@/lib/auth-token'
 
 // API client with runtime-configurable base URL
 // The base URL is fetched from the API config endpoint on first request
@@ -34,18 +35,9 @@ apiClient.interceptors.request.use(async (config) => {
     config.baseURL = `${apiUrl}/api`
   }
 
-  if (typeof window !== 'undefined') {
-    const authStorage = localStorage.getItem('auth-storage')
-    if (authStorage) {
-      try {
-        const { state } = JSON.parse(authStorage)
-        if (state?.token) {
-          config.headers.Authorization = `Bearer ${state.token}`
-        }
-      } catch (error) {
-        console.error('Error parsing auth storage:', error)
-      }
-    }
+  const token = getAuthToken()
+  if (token) {
+    config.headers.Authorization = `Bearer ${token}`
   }
 
   // Handle FormData vs JSON content types
diff --git a/frontend/src/lib/api/search.ts b/frontend/src/lib/api/search.ts
index e79032ea..582414ea 100644
--- a/frontend/src/lib/api/search.ts
+++ b/frontend/src/lib/api/search.ts
@@ -1,4 +1,5 @@
 import apiClient from './client'
+import { getAuthToken } from '@/lib/auth-token'
 import { SearchRequest, SearchResponse, AskRequest } from '@/lib/types/search'
 
 export const searchApi = {
@@ -11,20 +12,7 @@ export const searchApi = {
   // Ask with streaming (uses relative URL for Docker compatibility)
   askKnowledgeBase: async (params: AskRequest) => {
     // Get auth token using the same logic as apiClient interceptor
-    let token = null
-    if (typeof window !== 'undefined') {
-      const authStorage = localStorage.getItem('auth-storage')
-      if (authStorage) {
-        try {
-          const { state } = JSON.parse(authStorage)
-          if (state?.token) {
-            token = state.token
-          }
-        } catch (error) {
-          console.error('Error parsing auth storage:', error)
-        }
-      }
-    }
+    const token = getAuthToken()
 
     // Use relative URL to leverage Next.js rewrites
     // This works both in dev (Next.js proxy) and production (Docker network)
diff --git a/frontend/src/lib/api/source-chat.ts b/frontend/src/lib/api/source-chat.ts
index 62ba5a8a..41d905c6 100644
--- a/frontend/src/lib/api/source-chat.ts
+++ b/frontend/src/lib/api/source-chat.ts
@@ -1,4 +1,5 @@
 import apiClient from './client'
+import { getAuthToken } from '@/lib/auth-token'
 import {
   SourceChatSession,
   SourceChatSessionWithMessages,
@@ -48,20 +49,7 @@ export const sourceChatApi = {
   // Messaging with streaming
   sendMessage: (sourceId: string, sessionId: string, data: SendMessageRequest) => {
     // Get auth token using the same logic as apiClient interceptor
-    let token = null
-    if (typeof window !== 'undefined') {
-      const authStorage = localStorage.getItem('auth-storage')
-      if (authStorage) {
-        try {
-          const { state } = JSON.parse(authStorage)
-          if (state?.token) {
-            token = state.token
-          }
-        } catch (error) {
-          console.error('Error parsing auth storage:', error)
-        }
-      }
-    }
+    const token = getAuthToken()
 
     // Use relative URL to leverage Next.js rewrites
     // This works both in dev (Next.js proxy) and production (Docker network)
diff --git a/frontend/src/lib/auth-token.ts b/frontend/src/lib/auth-token.ts
new file mode 100644
index 00000000..c074ae68
--- /dev/null
+++ b/frontend/src/lib/auth-token.ts
@@ -0,0 +1,22 @@
+// Reads the auth token persisted by the zustand auth store
+// (localStorage key `auth-storage`, written by `src/lib/stores/auth-store.ts`).
+// Single source of truth for the token-parsing ritual — use this instead of
+// re-reading localStorage directly.
+export function getAuthToken(): string | null {
+  if (typeof window === 'undefined') {
+    return null
+  }
+
+  const raw = window.localStorage.getItem('auth-storage')
+  if (!raw) {
+    return null
+  }
+
+  try {
+    const { state } = JSON.parse(raw)
+    return state?.token ?? null
+  } catch (error) {
+    console.error('Error parsing auth storage:', error)
+    return null
+  }
+}
diff --git a/frontend/src/lib/hooks/useNotebookChat.ts b/frontend/src/lib/hooks/use-notebook-chat.ts
similarity index 100%
rename from frontend/src/lib/hooks/useNotebookChat.ts
rename to frontend/src/lib/hooks/use-notebook-chat.ts
diff --git a/frontend/src/lib/hooks/use-podcasts.ts b/frontend/src/lib/hooks/use-podcasts.ts
index 36ddebab..e8554991 100644
--- a/frontend/src/lib/hooks/use-podcasts.ts
+++ b/frontend/src/lib/hooks/use-podcasts.ts
@@ -156,12 +156,12 @@ export function useCreateEpisodeProfile() {
   return useMutation({
     mutationFn: (payload: EpisodeProfileInput) =>
       podcastsApi.createEpisodeProfile(payload),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.profileCreated'),
-        description: t('podcasts.profileCreatedDesc'),
+        description: t('podcasts.profileCreatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
@@ -187,12 +187,12 @@ export function useUpdateEpisodeProfile() {
       profileId: string
       payload: EpisodeProfileInput
     }) => podcastsApi.updateEpisodeProfile(profileId, payload),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.profileUpdated'),
-        description: t('podcasts.profileUpdatedDesc'),
+        description: t('podcasts.profileUpdatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
@@ -211,13 +211,14 @@ export function useDeleteEpisodeProfile() {
   const { t } = useTranslation()
 
   return useMutation({
-    mutationFn: (profileId: string) => podcastsApi.deleteEpisodeProfile(profileId),
-    onSuccess: () => {
+    mutationFn: ({ profileId }: { profileId: string; name: string }) =>
+      podcastsApi.deleteEpisodeProfile(profileId),
+    onSuccess: (_data, variables) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.profileDeleted'),
-        description: t('podcasts.profileDeletedDesc'),
+        description: t('podcasts.profileDeletedDesc', { name: variables.name }),
       })
     },
     onError: (error: unknown) => {
@@ -238,12 +239,12 @@ export function useDuplicateEpisodeProfile() {
   return useMutation({
     mutationFn: (profileId: string) =>
       podcastsApi.duplicateEpisodeProfile(profileId),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.profileDuplicated'),
-        description: t('podcasts.profileDuplicatedDesc'),
+        description: t('podcasts.profileDuplicatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
@@ -284,13 +285,13 @@ export function useCreateSpeakerProfile() {
   return useMutation({
     mutationFn: (payload: SpeakerProfileInput) =>
       podcastsApi.createSpeakerProfile(payload),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.speakerProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.speakerCreated'),
-        description: t('podcasts.speakerCreatedDesc'),
+        description: t('podcasts.speakerCreatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
@@ -316,13 +317,13 @@ export function useUpdateSpeakerProfile() {
       profileId: string
       payload: SpeakerProfileInput
     }) => podcastsApi.updateSpeakerProfile(profileId, payload),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.speakerProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.speakerUpdated'),
-        description: t('podcasts.speakerUpdatedDesc'),
+        description: t('podcasts.speakerUpdatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
@@ -341,14 +342,15 @@ export function useDeleteSpeakerProfile() {
   const { t } = useTranslation()
 
   return useMutation({
-    mutationFn: (profileId: string) => podcastsApi.deleteSpeakerProfile(profileId),
-    onSuccess: () => {
+    mutationFn: ({ profileId }: { profileId: string; name: string }) =>
+      podcastsApi.deleteSpeakerProfile(profileId),
+    onSuccess: (_data, variables) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.speakerProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.episodeProfiles })
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.podcastEpisodes })
       toast({
         title: t('podcasts.speakerDeleted'),
-        description: t('podcasts.speakerDeletedDesc'),
+        description: t('podcasts.speakerDeletedDesc', { name: variables.name }),
       })
     },
     onError: (error: unknown) => {
@@ -369,11 +371,11 @@ export function useDuplicateSpeakerProfile() {
   return useMutation({
     mutationFn: (profileId: string) =>
       podcastsApi.duplicateSpeakerProfile(profileId),
-    onSuccess: () => {
+    onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: QUERY_KEYS.speakerProfiles })
       toast({
         title: t('podcasts.speakerDuplicated'),
-        description: t('podcasts.speakerDuplicatedDesc'),
+        description: t('podcasts.speakerDuplicatedDesc', { name: data.name }),
       })
     },
     onError: (error: unknown) => {
diff --git a/frontend/src/lib/hooks/useSourceChat.ts b/frontend/src/lib/hooks/use-source-chat.ts
similarity index 100%
rename from frontend/src/lib/hooks/useSourceChat.ts
rename to frontend/src/lib/hooks/use-source-chat.ts
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index d943dc4d..18610135 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -623,16 +623,16 @@ export const bnIN = {
     createSpeakerFirst: "এপিসোড প্রোফাইল যোগ করার আগে একটি স্পিকার প্রোফাইল তৈরি করুন।",
     noEpisodeProfiles: "এখনও কোন এপিসোড প্রোফাইল নেই। পডকাস্ট তৈরি শুরু করতে একটি তৈরি করুন।",
     speakerCreated: "স্পিকার তৈরি হয়েছে",
-    speakerCreatedDesc: "স্পিকার \"{name}\" সফলভাবে যোগ করা হয়েছে।",
+    speakerCreatedDesc: "স্পিকার \"{{name}}\" সফলভাবে যোগ করা হয়েছে।",
     failedToCreateSpeaker: "স্পিকার প্রোফাইল তৈরি করতে ব্যর্থ",
     speakerUpdated: "স্পিকার আপডেট হয়েছে",
-    speakerUpdatedDesc: "স্পিকার \"{name}\" সফলভাবে আপডেট করা হয়েছে।",
+    speakerUpdatedDesc: "স্পিকার \"{{name}}\" সফলভাবে আপডেট করা হয়েছে।",
     failedToUpdateSpeaker: "স্পিকার প্রোফাইল আপডেট করতে ব্যর্থ",
     speakerDeleted: "স্পিকার মুছে ফেলা হয়েছে",
-    speakerDeletedDesc: "স্পিকার \"{name}\" সফলভাবে সরানো হয়েছে।",
+    speakerDeletedDesc: "স্পিকার \"{{name}}\" সফলভাবে সরানো হয়েছে।",
     failedToDeleteSpeaker: "স্পিকার প্রোফাইল মুছে ফেলতে ব্যর্থ",
     speakerDuplicated: "স্পিকার ডুপ্লিকেট করা হয়েছে",
-    speakerDuplicatedDesc: "স্পিকার \"{name}\" সফলভাবে ডুপ্লিকেট করা হয়েছে।",
+    speakerDuplicatedDesc: "স্পিকার \"{{name}}\" সফলভাবে ডুপ্লিকেট করা হয়েছে।",
     failedToDuplicateSpeaker: "স্পিকার প্রোফাইল ডুপ্লিকেট করতে ব্যর্থ",
     generationStarted: "তৈরি শুরু হয়েছে",
     generationStartedDesc: "পডকাস্ট তৈরি কিউ করা হয়েছে।",
@@ -641,17 +641,17 @@ export const bnIN = {
     deleteProfileTitle: "প্রোফাইল মুছে ফেলবেন?",
     deleteProfileDesc: "এটি \"{{name}}\" সরিয়ে দেবে। বিদ্যমান এপিসোড তাদের ডেটা রাখবে, কিন্তু নতুনগুলি আর এই কনফিগারেশন ব্যবহার করবে না।",
     profileCreated: "প্রোফাইল তৈরি হয়েছে",
-    profileCreatedDesc: "এপিসোড প্রোফাইল \"{name}\" সফলভাবে তৈরি করা হয়েছে।",
+    profileCreatedDesc: "এপিসোড প্রোফাইল \"{{name}}\" সফলভাবে তৈরি করা হয়েছে।",
     failedToCreateProfile: "প্রোফাইল তৈরি করতে ব্যর্থ",
     profileUpdated: "প্রোফাইল আপডেট হয়েছে",
-    profileUpdatedDesc: "এপিসোড প্রোফাইল \"{name}\" সফলভাবে আপডেট করা হয়েছে।",
+    profileUpdatedDesc: "এপিসোড প্রোফাইল \"{{name}}\" সফলভাবে আপডেট করা হয়েছে।",
     failedToUpdateProfile: "প্রোফাইল আপডেট করতে ব্যর্থ",
     profileDeleted: "প্রোফাইল মুছে ফেলা হয়েছে",
-    profileDeletedDesc: "এপিসোড প্রোফাইল \"{name}\" সফলভাবে সরানো হয়েছে।",
+    profileDeletedDesc: "এপিসোড প্রোফাইল \"{{name}}\" সফলভাবে সরানো হয়েছে।",
     failedToDeleteProfile: "প্রোফাইল মুছে ফেলতে ব্যর্থ",
     failedToDeleteProfileDesc: "এপিসোড প্রোফাইল সরাতে ব্যর্থ।",
     profileDuplicated: "প্রোফাইল ডুপ্লিকেট করা হয়েছে",
-    profileDuplicatedDesc: "এপিসোড প্রোফাইল \"{name}\" সফলভাবে ডুপ্লিকেট করা হয়েছে।",
+    profileDuplicatedDesc: "এপিসোড প্রোফাইল \"{{name}}\" সফলভাবে ডুপ্লিকেট করা হয়েছে।",
     failedToDuplicateProfile: "প্রোফাইল ডুপ্লিকেট করতে ব্যর্থ",
     episodeDeleted: "এপিসোড মুছে ফেলা হয়েছে",
     episodeDeletedDesc: "এপিসোড সফলভাবে মুছে ফেলা হয়েছে।",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index af31c8b5..cdd0e7cf 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -623,16 +623,16 @@ export const caES = {
     createSpeakerFirst: "Crea un perfil de locutor abans d'afegir un perfil d'episodi.",
     noEpisodeProfiles: "Encara no hi ha perfils d'episodi. Crea'n un per iniciar la generació de podcasts.",
     speakerCreated: "S'ha creat el locutor",
-    speakerCreatedDesc: "El locutor «{name}» s'ha afegit correctament.",
+    speakerCreatedDesc: "El locutor «{{name}}» s'ha afegit correctament.",
     failedToCreateSpeaker: "Ha fallat la creació del perfil del locutor",
     speakerUpdated: "S'ha actualitzat el locutor",
-    speakerUpdatedDesc: "El locutor «{name}» s'ha actualitzat correctament.",
+    speakerUpdatedDesc: "El locutor «{{name}}» s'ha actualitzat correctament.",
     failedToUpdateSpeaker: "Ha fallat l'actualització del perfil del locutor",
     speakerDeleted: "S'ha suprimit el locutor",
-    speakerDeletedDesc: "El locutor «{name}» s'ha eliminat correctament.",
+    speakerDeletedDesc: "El locutor «{{name}}» s'ha eliminat correctament.",
     failedToDeleteSpeaker: "Ha fallat la supressió del perfil del locutor",
     speakerDuplicated: "S'ha duplicat el locutor",
-    speakerDuplicatedDesc: "El locutor «{name}» s'ha duplicat correctament.",
+    speakerDuplicatedDesc: "El locutor «{{name}}» s'ha duplicat correctament.",
     failedToDuplicateSpeaker: "Ha fallat la duplicació del perfil del locutor",
     generationStarted: "S'ha iniciat la generació",
     generationStartedDesc: "S'ha afegit la generació del podcast a la cua.",
@@ -641,17 +641,17 @@ export const caES = {
     deleteProfileTitle: "Vols suprimir el perfil?",
     deleteProfileDesc: "Això eliminarà «{{name}}». Els episodis existents conserven les seves dades, però els nous ja no usaran aquesta configuració.",
     profileCreated: "S'ha creat el perfil",
-    profileCreatedDesc: "El perfil d'episodi «{name}» s'ha creat correctament.",
+    profileCreatedDesc: "El perfil d'episodi «{{name}}» s'ha creat correctament.",
     failedToCreateProfile: "Ha fallat la creació del perfil",
     profileUpdated: "S'ha actualitzat el perfil",
-    profileUpdatedDesc: "El perfil d'episodi «{name}» s'ha actualitzat correctament.",
+    profileUpdatedDesc: "El perfil d'episodi «{{name}}» s'ha actualitzat correctament.",
     failedToUpdateProfile: "Ha fallat l'actualització del perfil",
     profileDeleted: "S'ha suprimit el perfil",
-    profileDeletedDesc: "El perfil d'episodi «{name}» s'ha eliminat correctament.",
+    profileDeletedDesc: "El perfil d'episodi «{{name}}» s'ha eliminat correctament.",
     failedToDeleteProfile: "Ha fallat la supressió del perfil",
     failedToDeleteProfileDesc: "Ha fallat l'eliminació del perfil d'episodi.",
     profileDuplicated: "S'ha duplicat el perfil",
-    profileDuplicatedDesc: "El perfil d'episodi «{name}» s'ha duplicat correctament.",
+    profileDuplicatedDesc: "El perfil d'episodi «{{name}}» s'ha duplicat correctament.",
     failedToDuplicateProfile: "Ha fallat la duplicació del perfil",
     episodeDeleted: "S'ha suprimit l'episodi",
     episodeDeletedDesc: "L'episodi s'ha eliminat correctament.",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index c1bfd819..f25cee45 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -626,16 +626,16 @@ export const deDE = {
     createSpeakerFirst: "Erstelle ein Sprecherprofil, bevor du ein Episodenprofil hinzufügst.",
     noEpisodeProfiles: "Noch keine Episodenprofile. Erstelle eines, um die Podcast-Erzeugung zu starten.",
     speakerCreated: "Sprecher erstellt",
-    speakerCreatedDesc: "Der Sprecher „{name}“ wurde erfolgreich hinzugefügt.",
+    speakerCreatedDesc: "Der Sprecher „{{name}}“ wurde erfolgreich hinzugefügt.",
     failedToCreateSpeaker: "Sprecherprofil konnte nicht erstellt werden",
     speakerUpdated: "Sprecher aktualisiert",
-    speakerUpdatedDesc: "Der Sprecher „{name}“ wurde erfolgreich aktualisiert.",
+    speakerUpdatedDesc: "Der Sprecher „{{name}}“ wurde erfolgreich aktualisiert.",
     failedToUpdateSpeaker: "Sprecherprofil konnte nicht aktualisiert werden",
     speakerDeleted: "Sprecher gelöscht",
-    speakerDeletedDesc: "Der Sprecher „{name}“ wurde erfolgreich entfernt.",
+    speakerDeletedDesc: "Der Sprecher „{{name}}“ wurde erfolgreich entfernt.",
     failedToDeleteSpeaker: "Sprecherprofil konnte nicht gelöscht werden",
     speakerDuplicated: "Sprecher dupliziert",
-    speakerDuplicatedDesc: "Der Sprecher „{name}“ wurde erfolgreich dupliziert.",
+    speakerDuplicatedDesc: "Der Sprecher „{{name}}“ wurde erfolgreich dupliziert.",
     failedToDuplicateSpeaker: "Sprecherprofil konnte nicht dupliziert werden",
     generationStarted: "Erzeugung gestartet",
     generationStartedDesc: "Die Podcast-Erzeugung wurde in die Warteschlange eingereiht.",
@@ -644,17 +644,17 @@ export const deDE = {
     deleteProfileTitle: "Profil löschen?",
     deleteProfileDesc: "Dadurch wird „{{name}}“ entfernt. Vorhandene Episoden behalten ihre Daten, aber neue Episoden verwenden diese Konfiguration nicht mehr.",
     profileCreated: "Profil erstellt",
-    profileCreatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich erstellt.",
+    profileCreatedDesc: "Das Episodenprofil „{{name}}“ wurde erfolgreich erstellt.",
     failedToCreateProfile: "Profil konnte nicht erstellt werden",
     profileUpdated: "Profil aktualisiert",
-    profileUpdatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich aktualisiert.",
+    profileUpdatedDesc: "Das Episodenprofil „{{name}}“ wurde erfolgreich aktualisiert.",
     failedToUpdateProfile: "Profil konnte nicht aktualisiert werden",
     profileDeleted: "Profil gelöscht",
-    profileDeletedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich entfernt.",
+    profileDeletedDesc: "Das Episodenprofil „{{name}}“ wurde erfolgreich entfernt.",
     failedToDeleteProfile: "Profil konnte nicht gelöscht werden",
     failedToDeleteProfileDesc: "Das Episodenprofil konnte nicht entfernt werden.",
     profileDuplicated: "Profil dupliziert",
-    profileDuplicatedDesc: "Das Episodenprofil „{name}“ wurde erfolgreich dupliziert.",
+    profileDuplicatedDesc: "Das Episodenprofil „{{name}}“ wurde erfolgreich dupliziert.",
     failedToDuplicateProfile: "Profil konnte nicht dupliziert werden",
     episodeDeleted: "Episode gelöscht",
     episodeDeletedDesc: "Die Episode wurde erfolgreich gelöscht.",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 594e3bfb..c9a16545 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -621,16 +621,16 @@ export const enUS = {
     createSpeakerFirst: "Create a speaker profile before adding an episode profile.",
     noEpisodeProfiles: "No episode profiles yet. Create one to kickstart podcast generation.",
     speakerCreated: "Speaker Created",
-    speakerCreatedDesc: "The speaker \"{name}\" has been successfully added.",
+    speakerCreatedDesc: "The speaker \"{{name}}\" has been successfully added.",
     failedToCreateSpeaker: "Failed to create speaker profile",
     speakerUpdated: "Speaker Updated",
-    speakerUpdatedDesc: "The speaker \"{name}\" has been successfully updated.",
+    speakerUpdatedDesc: "The speaker \"{{name}}\" has been successfully updated.",
     failedToUpdateSpeaker: "Failed to update speaker profile",
     speakerDeleted: "Speaker Deleted",
-    speakerDeletedDesc: "The speaker \"{name}\" has been successfully removed.",
+    speakerDeletedDesc: "The speaker \"{{name}}\" has been successfully removed.",
     failedToDeleteSpeaker: "Failed to delete speaker profile",
     speakerDuplicated: "Speaker Duplicated",
-    speakerDuplicatedDesc: "The speaker \"{name}\" has been successfully duplicated.",
+    speakerDuplicatedDesc: "The speaker \"{{name}}\" has been successfully duplicated.",
     failedToDuplicateSpeaker: "Failed to duplicate speaker profile",
     generationStarted: "Generation Started",
     generationStartedDesc: "Podcast generation has been queued.",
@@ -639,17 +639,17 @@ export const enUS = {
     deleteProfileTitle: "Delete profile?",
     deleteProfileDesc: "This will remove “{{name}}”. Existing episodes keep their data, but new ones will no longer use this configuration.",
     profileCreated: "Profile Created",
-    profileCreatedDesc: "The episode profile \"{name}\" has been successfully created.",
+    profileCreatedDesc: "The episode profile \"{{name}}\" has been successfully created.",
     failedToCreateProfile: "Failed to create profile",
     profileUpdated: "Profile Updated",
-    profileUpdatedDesc: "The episode profile \"{name}\" has been successfully updated.",
+    profileUpdatedDesc: "The episode profile \"{{name}}\" has been successfully updated.",
     failedToUpdateProfile: "Failed to update profile",
     profileDeleted: "Profile Deleted",
-    profileDeletedDesc: "The episode profile \"{name}\" has been successfully removed.",
+    profileDeletedDesc: "The episode profile \"{{name}}\" has been successfully removed.",
     failedToDeleteProfile: "Failed to delete profile",
     failedToDeleteProfileDesc: "Failed to remove the episode profile.",
     profileDuplicated: "Profile Duplicated",
-    profileDuplicatedDesc: "The episode profile \"{name}\" has been successfully duplicated.",
+    profileDuplicatedDesc: "The episode profile \"{{name}}\" has been successfully duplicated.",
     failedToDuplicateProfile: "Failed to duplicate profile",
     episodeDeleted: "Episode Deleted",
     episodeDeletedDesc: "The episode has been successfully deleted.",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 1d0feb49..66d808c5 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -623,16 +623,16 @@ export const esES = {
     createSpeakerFirst: "Crea un perfil de locutor antes de agregar un perfil de episodio.",
     noEpisodeProfiles: "Aún no hay perfiles de episodio. Crea uno para iniciar la generación de podcasts.",
     speakerCreated: "Locutor creado",
-    speakerCreatedDesc: "El locutor \"{name}\" ha sido agregado exitosamente.",
+    speakerCreatedDesc: "El locutor \"{{name}}\" ha sido agregado exitosamente.",
     failedToCreateSpeaker: "Error al crear el perfil de locutor",
     speakerUpdated: "Locutor actualizado",
-    speakerUpdatedDesc: "El locutor \"{name}\" ha sido actualizado exitosamente.",
+    speakerUpdatedDesc: "El locutor \"{{name}}\" ha sido actualizado exitosamente.",
     failedToUpdateSpeaker: "Error al actualizar el perfil de locutor",
     speakerDeleted: "Locutor eliminado",
-    speakerDeletedDesc: "El locutor \"{name}\" ha sido eliminado exitosamente.",
+    speakerDeletedDesc: "El locutor \"{{name}}\" ha sido eliminado exitosamente.",
     failedToDeleteSpeaker: "Error al eliminar el perfil de locutor",
     speakerDuplicated: "Locutor duplicado",
-    speakerDuplicatedDesc: "El locutor \"{name}\" ha sido duplicado exitosamente.",
+    speakerDuplicatedDesc: "El locutor \"{{name}}\" ha sido duplicado exitosamente.",
     failedToDuplicateSpeaker: "Error al duplicar el perfil de locutor",
     generationStarted: "Generación iniciada",
     generationStartedDesc: "La generación del podcast ha sido puesta en cola.",
@@ -641,17 +641,17 @@ export const esES = {
     deleteProfileTitle: "¿Eliminar perfil?",
     deleteProfileDesc: "Esto eliminará \"{{name}}\". Los episodios existentes conservan sus datos, pero los nuevos ya no usarán esta configuración.",
     profileCreated: "Perfil creado",
-    profileCreatedDesc: "El perfil de episodio \"{name}\" ha sido creado exitosamente.",
+    profileCreatedDesc: "El perfil de episodio \"{{name}}\" ha sido creado exitosamente.",
     failedToCreateProfile: "Error al crear el perfil",
     profileUpdated: "Perfil actualizado",
-    profileUpdatedDesc: "El perfil de episodio \"{name}\" ha sido actualizado exitosamente.",
+    profileUpdatedDesc: "El perfil de episodio \"{{name}}\" ha sido actualizado exitosamente.",
     failedToUpdateProfile: "Error al actualizar el perfil",
     profileDeleted: "Perfil eliminado",
-    profileDeletedDesc: "El perfil de episodio \"{name}\" ha sido eliminado exitosamente.",
+    profileDeletedDesc: "El perfil de episodio \"{{name}}\" ha sido eliminado exitosamente.",
     failedToDeleteProfile: "Error al eliminar el perfil",
     failedToDeleteProfileDesc: "Error al eliminar el perfil de episodio.",
     profileDuplicated: "Perfil duplicado",
-    profileDuplicatedDesc: "El perfil de episodio \"{name}\" ha sido duplicado exitosamente.",
+    profileDuplicatedDesc: "El perfil de episodio \"{{name}}\" ha sido duplicado exitosamente.",
     failedToDuplicateProfile: "Error al duplicar el perfil",
     episodeDeleted: "Episodio eliminado",
     episodeDeletedDesc: "El episodio ha sido eliminado exitosamente.",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 06d639df..c1aa81fa 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -623,16 +623,16 @@ export const frFR = {
     createSpeakerFirst: "Créez un profil d'intervenant avant d'ajouter un profil d'épisode.",
     noEpisodeProfiles: "Aucun profil d'épisode. Créez-en un pour lancer la génération de podcasts.",
     speakerCreated: "Intervenant créé",
-    speakerCreatedDesc: "L'intervenant \"{name}\" a été ajouté avec succès.",
+    speakerCreatedDesc: "L'intervenant \"{{name}}\" a été ajouté avec succès.",
     failedToCreateSpeaker: "Échec de la création du profil d'intervenant",
     speakerUpdated: "Intervenant mis à jour",
-    speakerUpdatedDesc: "L'intervenant \"{name}\" a été mis à jour avec succès.",
+    speakerUpdatedDesc: "L'intervenant \"{{name}}\" a été mis à jour avec succès.",
     failedToUpdateSpeaker: "Échec de la mise à jour du profil d'intervenant",
     speakerDeleted: "Intervenant supprimé",
-    speakerDeletedDesc: "L'intervenant \"{name}\" a été retiré avec succès.",
+    speakerDeletedDesc: "L'intervenant \"{{name}}\" a été retiré avec succès.",
     failedToDeleteSpeaker: "Échec de la suppression du profil d'intervenant",
     speakerDuplicated: "Intervenant dupliqué",
-    speakerDuplicatedDesc: "L'intervenant \"{name}\" a été dupliqué avec succès.",
+    speakerDuplicatedDesc: "L'intervenant \"{{name}}\" a été dupliqué avec succès.",
     failedToDuplicateSpeaker: "Échec de la duplication du profil d'intervenant",
     generationStarted: "Génération démarrée",
     generationStartedDesc: "La génération du podcast a été mise en file d'attente.",
@@ -641,17 +641,17 @@ export const frFR = {
     deleteProfileTitle: "Supprimer le profil ?",
     deleteProfileDesc: "Ceci supprimera “{{name}}”. Les épisodes existants conservent leurs données, mais les nouveaux ne pourront plus utiliser cette configuration.",
     profileCreated: "Profil créé",
-    profileCreatedDesc: "Le profil d'épisode \"{name}\" a été créé avec succès.",
+    profileCreatedDesc: "Le profil d'épisode \"{{name}}\" a été créé avec succès.",
     failedToCreateProfile: "Échec de la création du profil",
     profileUpdated: "Profil mis à jour",
-    profileUpdatedDesc: "Le profil d'épisode \"{name}\" a été mis à jour avec succès.",
+    profileUpdatedDesc: "Le profil d'épisode \"{{name}}\" a été mis à jour avec succès.",
     failedToUpdateProfile: "Échec de la mise à jour du profil",
     profileDeleted: "Profil supprimé",
-    profileDeletedDesc: "Le profil d'épisode \"{name}\" a été retiré avec succès.",
+    profileDeletedDesc: "Le profil d'épisode \"{{name}}\" a été retiré avec succès.",
     failedToDeleteProfile: "Échec de la suppression du profil",
     failedToDeleteProfileDesc: "Impossible de retirer le profil d'épisode.",
     profileDuplicated: "Profil dupliqué",
-    profileDuplicatedDesc: "Le profil d'épisode \"{name}\" a été dupliqué avec succès.",
+    profileDuplicatedDesc: "Le profil d'épisode \"{{name}}\" a été dupliqué avec succès.",
     failedToDuplicateProfile: "Échec de la duplication du profil",
     episodeDeleted: "Épisode supprimé",
     episodeDeletedDesc: "L'épisode a été supprimé avec succès.",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index f2e70c0c..e594820d 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -623,16 +623,16 @@ export const itIT = {
     createSpeakerFirst: "Crea un profilo speaker prima di aggiungere un profilo episodio.",
     noEpisodeProfiles: "Ancora nessun profilo episodio. Creane uno per avviare la generazione podcast.",
     speakerCreated: "Speaker creato",
-    speakerCreatedDesc: "Lo speaker \"{name}\" è stato aggiunto con successo.",
+    speakerCreatedDesc: "Lo speaker \"{{name}}\" è stato aggiunto con successo.",
     failedToCreateSpeaker: "Impossibile creare il profilo speaker",
     speakerUpdated: "Speaker aggiornato",
-    speakerUpdatedDesc: "Lo speaker \"{name}\" è stato aggiornato con successo.",
+    speakerUpdatedDesc: "Lo speaker \"{{name}}\" è stato aggiornato con successo.",
     failedToUpdateSpeaker: "Impossibile aggiornare il profilo speaker",
     speakerDeleted: "Speaker eliminato",
-    speakerDeletedDesc: "Lo speaker \"{name}\" è stato rimosso con successo.",
+    speakerDeletedDesc: "Lo speaker \"{{name}}\" è stato rimosso con successo.",
     failedToDeleteSpeaker: "Impossibile eliminare il profilo speaker",
     speakerDuplicated: "Speaker duplicato",
-    speakerDuplicatedDesc: "Lo speaker \"{name}\" è stato duplicato con successo.",
+    speakerDuplicatedDesc: "Lo speaker \"{{name}}\" è stato duplicato con successo.",
     failedToDuplicateSpeaker: "Impossibile duplicare il profilo speaker",
     generationStarted: "Generazione Avviata",
     generationStartedDesc: "La generazione del podcast è stata accodata.",
@@ -641,17 +641,17 @@ export const itIT = {
     deleteProfileTitle: "Eliminare il profilo?",
     deleteProfileDesc: "Questo rimuoverà \"{{name}}\". Gli episodi esistenti mantengono i loro dati, ma i nuovi non useranno più questa configurazione.",
     profileCreated: "Profilo creato",
-    profileCreatedDesc: "Il profilo episodio \"{name}\" è stato creato con successo.",
+    profileCreatedDesc: "Il profilo episodio \"{{name}}\" è stato creato con successo.",
     failedToCreateProfile: "Impossibile creare il profilo",
     profileUpdated: "Profilo aggiornato",
-    profileUpdatedDesc: "Il profilo episodio \"{name}\" è stato aggiornato con successo.",
+    profileUpdatedDesc: "Il profilo episodio \"{{name}}\" è stato aggiornato con successo.",
     failedToUpdateProfile: "Impossibile aggiornare il profilo",
     profileDeleted: "Profilo eliminato",
-    profileDeletedDesc: "Il profilo episodio \"{name}\" è stato rimosso con successo.",
+    profileDeletedDesc: "Il profilo episodio \"{{name}}\" è stato rimosso con successo.",
     failedToDeleteProfile: "Impossibile eliminare il profilo",
     failedToDeleteProfileDesc: "Impossibile rimuovere il profilo episodio.",
     profileDuplicated: "Profilo duplicato",
-    profileDuplicatedDesc: "Il profilo episodio \"{name}\" è stato duplicato con successo.",
+    profileDuplicatedDesc: "Il profilo episodio \"{{name}}\" è stato duplicato con successo.",
     failedToDuplicateProfile: "Impossibile duplicare il profilo",
     episodeDeleted: "Episodio eliminato",
     episodeDeletedDesc: "L'episodio è stato eliminato con successo.",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 8eb04051..a370cbcf 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -623,16 +623,16 @@ export const jaJP = {
     createSpeakerFirst: "エピソードプロファイルを追加する前にスピーカープロファイルを作成してください。",
     noEpisodeProfiles: "エピソードプロファイルがまだありません。ポッドキャスト生成を開始するには作成してください。",
     speakerCreated: "スピーカーを作成しました",
-    speakerCreatedDesc: "スピーカー「{name}」を追加しました。",
+    speakerCreatedDesc: "スピーカー「{{name}}」を追加しました。",
     failedToCreateSpeaker: "スピーカープロファイルの作成に失敗しました",
     speakerUpdated: "スピーカーを更新しました",
-    speakerUpdatedDesc: "スピーカー「{name}」を更新しました。",
+    speakerUpdatedDesc: "スピーカー「{{name}}」を更新しました。",
     failedToUpdateSpeaker: "スピーカープロファイルの更新に失敗しました",
     speakerDeleted: "スピーカーを削除しました",
-    speakerDeletedDesc: "スピーカー「{name}」を削除しました。",
+    speakerDeletedDesc: "スピーカー「{{name}}」を削除しました。",
     failedToDeleteSpeaker: "スピーカープロファイルの削除に失敗しました",
     speakerDuplicated: "スピーカーを複製しました",
-    speakerDuplicatedDesc: "スピーカー「{name}」を複製しました。",
+    speakerDuplicatedDesc: "スピーカー「{{name}}」を複製しました。",
     failedToDuplicateSpeaker: "スピーカープロファイルの複製に失敗しました",
     generationStarted: "生成を開始しました",
     generationStartedDesc: "ポッドキャスト生成がキューに追加されました。",
@@ -641,17 +641,17 @@ export const jaJP = {
     deleteProfileTitle: "プロファイルを削除しますか？",
     deleteProfileDesc: "「{{name}}」を削除します。既存のエピソードはデータを保持しますが、新しいエピソードはこの設定を使用できなくなります。",
     profileCreated: "プロファイルを作成しました",
-    profileCreatedDesc: "エピソードプロファイル「{name}」を作成しました。",
+    profileCreatedDesc: "エピソードプロファイル「{{name}}」を作成しました。",
     failedToCreateProfile: "プロファイルの作成に失敗しました",
     profileUpdated: "プロファイルを更新しました",
-    profileUpdatedDesc: "エピソードプロファイル「{name}」を更新しました。",
+    profileUpdatedDesc: "エピソードプロファイル「{{name}}」を更新しました。",
     failedToUpdateProfile: "プロファイルの更新に失敗しました",
     profileDeleted: "プロファイルを削除しました",
-    profileDeletedDesc: "エピソードプロファイル「{name}」を削除しました。",
+    profileDeletedDesc: "エピソードプロファイル「{{name}}」を削除しました。",
     failedToDeleteProfile: "プロファイルの削除に失敗しました",
     failedToDeleteProfileDesc: "エピソードプロファイルの削除に失敗しました。",
     profileDuplicated: "プロファイルを複製しました",
-    profileDuplicatedDesc: "エピソードプロファイル「{name}」を複製しました。",
+    profileDuplicatedDesc: "エピソードプロファイル「{{name}}」を複製しました。",
     failedToDuplicateProfile: "プロファイルの複製に失敗しました",
     episodeDeleted: "エピソードを削除しました",
     episodeDeletedDesc: "エピソードを削除しました。",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 4f28d1bd..360595ec 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -623,16 +623,16 @@ export const plPL = {
     createSpeakerFirst: "Utwórz profil mówcy przed dodaniem profilu odcinka.",
     noEpisodeProfiles: "Brak profili odcinków. Utwórz jeden, aby rozpocząć generowanie podcastów.",
     speakerCreated: "Utworzono mówcę",
-    speakerCreatedDesc: "Mówca „{name}” został pomyślnie dodany.",
+    speakerCreatedDesc: "Mówca „{{name}}” został pomyślnie dodany.",
     failedToCreateSpeaker: "Nie udało się utworzyć profilu mówcy",
     speakerUpdated: "Zaktualizowano mówcę",
-    speakerUpdatedDesc: "Mówca „{name}” został pomyślnie zaktualizowany.",
+    speakerUpdatedDesc: "Mówca „{{name}}” został pomyślnie zaktualizowany.",
     failedToUpdateSpeaker: "Nie udało się zaktualizować profilu mówcy",
     speakerDeleted: "Usunięto mówcę",
-    speakerDeletedDesc: "Mówca „{name}” został pomyślnie usunięty.",
+    speakerDeletedDesc: "Mówca „{{name}}” został pomyślnie usunięty.",
     failedToDeleteSpeaker: "Nie udało się usunąć profilu mówcy",
     speakerDuplicated: "Zduplikowano mówcę",
-    speakerDuplicatedDesc: "Mówca „{name}” został pomyślnie zduplikowany.",
+    speakerDuplicatedDesc: "Mówca „{{name}}” został pomyślnie zduplikowany.",
     failedToDuplicateSpeaker: "Nie udało się zduplikować profilu mówcy",
     generationStarted: "Rozpoczęto generowanie",
     generationStartedDesc: "Generowanie podcastu zostało dodane do kolejki.",
@@ -641,17 +641,17 @@ export const plPL = {
     deleteProfileTitle: "Usunąć profil?",
     deleteProfileDesc: "Spowoduje to usunięcie „{{name}}”. Istniejące odcinki zachowają swoje dane, ale nowe nie będą już korzystać z tej konfiguracji.",
     profileCreated: "Utworzono profil",
-    profileCreatedDesc: "Profil odcinka „{name}” został pomyślnie utworzony.",
+    profileCreatedDesc: "Profil odcinka „{{name}}” został pomyślnie utworzony.",
     failedToCreateProfile: "Nie udało się utworzyć profilu",
     profileUpdated: "Zaktualizowano profil",
-    profileUpdatedDesc: "Profil odcinka „{name}” został pomyślnie zaktualizowany.",
+    profileUpdatedDesc: "Profil odcinka „{{name}}” został pomyślnie zaktualizowany.",
     failedToUpdateProfile: "Nie udało się zaktualizować profilu",
     profileDeleted: "Usunięto profil",
-    profileDeletedDesc: "Profil odcinka „{name}” został pomyślnie usunięty.",
+    profileDeletedDesc: "Profil odcinka „{{name}}” został pomyślnie usunięty.",
     failedToDeleteProfile: "Nie udało się usunąć profilu",
     failedToDeleteProfileDesc: "Nie udało się usunąć profilu odcinka.",
     profileDuplicated: "Zduplikowano profil",
-    profileDuplicatedDesc: "Profil odcinka „{name}” został pomyślnie zduplikowany.",
+    profileDuplicatedDesc: "Profil odcinka „{{name}}” został pomyślnie zduplikowany.",
     failedToDuplicateProfile: "Nie udało się zduplikować profilu",
     episodeDeleted: "Usunięto odcinek",
     episodeDeletedDesc: "Odcinek został pomyślnie usunięty.",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index e7634799..69e0c6df 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -623,16 +623,16 @@ export const ptBR = {
     createSpeakerFirst: "Crie um perfil de locutor antes de adicionar um perfil de episódio.",
     noEpisodeProfiles: "Nenhum perfil de episódio ainda. Crie um para iniciar a geração de podcasts.",
     speakerCreated: "Locutor Criado",
-    speakerCreatedDesc: "O locutor \"{name}\" foi adicionado com sucesso.",
+    speakerCreatedDesc: "O locutor \"{{name}}\" foi adicionado com sucesso.",
     failedToCreateSpeaker: "Falha ao criar perfil de locutor",
     speakerUpdated: "Locutor Atualizado",
-    speakerUpdatedDesc: "O locutor \"{name}\" foi atualizado com sucesso.",
+    speakerUpdatedDesc: "O locutor \"{{name}}\" foi atualizado com sucesso.",
     failedToUpdateSpeaker: "Falha ao atualizar perfil de locutor",
     speakerDeleted: "Locutor Excluído",
-    speakerDeletedDesc: "O locutor \"{name}\" foi removido com sucesso.",
+    speakerDeletedDesc: "O locutor \"{{name}}\" foi removido com sucesso.",
     failedToDeleteSpeaker: "Falha ao excluir perfil de locutor",
     speakerDuplicated: "Locutor Duplicado",
-    speakerDuplicatedDesc: "O locutor \"{name}\" foi duplicado com sucesso.",
+    speakerDuplicatedDesc: "O locutor \"{{name}}\" foi duplicado com sucesso.",
     failedToDuplicateSpeaker: "Falha ao duplicar perfil de locutor",
     generationStarted: "Geração Iniciada",
     generationStartedDesc: "A geração do podcast foi enfileirada.",
@@ -641,17 +641,17 @@ export const ptBR = {
     deleteProfileTitle: "Excluir perfil?",
     deleteProfileDesc: "Isso removerá \"{{name}}\". Episódios existentes mantêm seus dados, mas novos não usarão mais esta configuração.",
     profileCreated: "Perfil Criado",
-    profileCreatedDesc: "O perfil de episódio \"{name}\" foi criado com sucesso.",
+    profileCreatedDesc: "O perfil de episódio \"{{name}}\" foi criado com sucesso.",
     failedToCreateProfile: "Falha ao criar perfil",
     profileUpdated: "Perfil Atualizado",
-    profileUpdatedDesc: "O perfil de episódio \"{name}\" foi atualizado com sucesso.",
+    profileUpdatedDesc: "O perfil de episódio \"{{name}}\" foi atualizado com sucesso.",
     failedToUpdateProfile: "Falha ao atualizar perfil",
     profileDeleted: "Perfil Excluído",
-    profileDeletedDesc: "O perfil de episódio \"{name}\" foi removido com sucesso.",
+    profileDeletedDesc: "O perfil de episódio \"{{name}}\" foi removido com sucesso.",
     failedToDeleteProfile: "Falha ao excluir perfil",
     failedToDeleteProfileDesc: "Falha ao remover o perfil de episódio.",
     profileDuplicated: "Perfil Duplicado",
-    profileDuplicatedDesc: "O perfil de episódio \"{name}\" foi duplicado com sucesso.",
+    profileDuplicatedDesc: "O perfil de episódio \"{{name}}\" foi duplicado com sucesso.",
     failedToDuplicateProfile: "Falha ao duplicar perfil",
     episodeDeleted: "Episódio Excluído",
     episodeDeletedDesc: "O episódio foi excluído com sucesso.",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 080d36b6..8efde385 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -623,16 +623,16 @@ export const ruRU = {
     createSpeakerFirst: "Сначала создайте профиль говорящего перед добавлением профиля эпизода.",
     noEpisodeProfiles: "Пока нет профилей эпизодов. Создайте один для запуска генерации подкастов.",
     speakerCreated: "Говорящий создан",
-    speakerCreatedDesc: "Говорящий «{name}» успешно добавлен.",
+    speakerCreatedDesc: "Говорящий «{{name}}» успешно добавлен.",
     failedToCreateSpeaker: "Не удалось создать профиль говорящего",
     speakerUpdated: "Говорящий обновлён",
-    speakerUpdatedDesc: "Говорящий «{name}» успешно обновлён.",
+    speakerUpdatedDesc: "Говорящий «{{name}}» успешно обновлён.",
     failedToUpdateSpeaker: "Не удалось обновить профиль говорящего",
     speakerDeleted: "Говорящий удалён",
-    speakerDeletedDesc: "Говорящий «{name}» успешно удалён.",
+    speakerDeletedDesc: "Говорящий «{{name}}» успешно удалён.",
     failedToDeleteSpeaker: "Не удалось удалить профиль говорящего",
     speakerDuplicated: "Говорящий дублирован",
-    speakerDuplicatedDesc: "Говорящий «{name}» успешно дублирован.",
+    speakerDuplicatedDesc: "Говорящий «{{name}}» успешно дублирован.",
     failedToDuplicateSpeaker: "Не удалось дублировать профиль говорящего",
     generationStarted: "Генерация запущена",
     generationStartedDesc: "Генерация подкаста поставлена в очередь.",
@@ -641,17 +641,17 @@ export const ruRU = {
     deleteProfileTitle: "Удалить профиль?",
     deleteProfileDesc: "Это удалит «{{name}}». Существующие эпизоды сохранят свои данные, но новые больше не смогут использовать эту конфигурацию.",
     profileCreated: "Профиль создан",
-    profileCreatedDesc: "Профиль эпизода «{name}» успешно создан.",
+    profileCreatedDesc: "Профиль эпизода «{{name}}» успешно создан.",
     failedToCreateProfile: "Не удалось создать профиль",
     profileUpdated: "Профиль обновлён",
-    profileUpdatedDesc: "Профиль эпизода «{name}» успешно обновлён.",
+    profileUpdatedDesc: "Профиль эпизода «{{name}}» успешно обновлён.",
     failedToUpdateProfile: "Не удалось обновить профиль",
     profileDeleted: "Профиль удалён",
-    profileDeletedDesc: "Профиль эпизода «{name}» успешно удалён.",
+    profileDeletedDesc: "Профиль эпизода «{{name}}» успешно удалён.",
     failedToDeleteProfile: "Не удалось удалить профиль",
     failedToDeleteProfileDesc: "Не удалось удалить профиль эпизода.",
     profileDuplicated: "Профиль дублирован",
-    profileDuplicatedDesc: "Профиль эпизода «{name}» успешно дублирован.",
+    profileDuplicatedDesc: "Профиль эпизода «{{name}}» успешно дублирован.",
     failedToDuplicateProfile: "Не удалось дублировать профиль",
     episodeDeleted: "Эпизод удалён",
     episodeDeletedDesc: "Эпизод успешно удалён.",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index e8ac12c5..122fbbdb 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -623,16 +623,16 @@ export const trTR = {
     createSpeakerFirst: "Bölüm profili eklemeden önce bir konuşmacı profili oluşturun.",
     noEpisodeProfiles: "Henüz bölüm profili yok. Podcast oluşturmayı başlatmak için bir tane oluşturun.",
     speakerCreated: "Konuşmacı Oluşturuldu",
-    speakerCreatedDesc: "\"{name}\" konuşmacısı başarıyla eklendi.",
+    speakerCreatedDesc: "\"{{name}}\" konuşmacısı başarıyla eklendi.",
     failedToCreateSpeaker: "Konuşmacı profili oluşturulamadı",
     speakerUpdated: "Konuşmacı Güncellendi",
-    speakerUpdatedDesc: "\"{name}\" konuşmacısı başarıyla güncellendi.",
+    speakerUpdatedDesc: "\"{{name}}\" konuşmacısı başarıyla güncellendi.",
     failedToUpdateSpeaker: "Konuşmacı profili güncellenemedi",
     speakerDeleted: "Konuşmacı Silindi",
-    speakerDeletedDesc: "\"{name}\" konuşmacısı başarıyla kaldırıldı.",
+    speakerDeletedDesc: "\"{{name}}\" konuşmacısı başarıyla kaldırıldı.",
     failedToDeleteSpeaker: "Konuşmacı profili silinemedi",
     speakerDuplicated: "Konuşmacı Çoğaltıldı",
-    speakerDuplicatedDesc: "\"{name}\" konuşmacısı başarıyla çoğaltıldı.",
+    speakerDuplicatedDesc: "\"{{name}}\" konuşmacısı başarıyla çoğaltıldı.",
     failedToDuplicateSpeaker: "Konuşmacı profili çoğaltılamadı",
     generationStarted: "Oluşturma Başladı",
     generationStartedDesc: "Podcast oluşturma kuyruğa alındı.",
@@ -641,17 +641,17 @@ export const trTR = {
     deleteProfileTitle: "Profil silinsin mi?",
     deleteProfileDesc: "Bu işlem \"{{name}}\" profilini kaldıracak. Mevcut bölümler verilerini korur, ancak yeni bölümler artık bu yapılandırmayı kullanmaz.",
     profileCreated: "Profil Oluşturuldu",
-    profileCreatedDesc: "\"{name}\" bölüm profili başarıyla oluşturuldu.",
+    profileCreatedDesc: "\"{{name}}\" bölüm profili başarıyla oluşturuldu.",
     failedToCreateProfile: "Profil oluşturulamadı",
     profileUpdated: "Profil Güncellendi",
-    profileUpdatedDesc: "\"{name}\" bölüm profili başarıyla güncellendi.",
+    profileUpdatedDesc: "\"{{name}}\" bölüm profili başarıyla güncellendi.",
     failedToUpdateProfile: "Profil güncellenemedi",
     profileDeleted: "Profil Silindi",
-    profileDeletedDesc: "\"{name}\" bölüm profili başarıyla kaldırıldı.",
+    profileDeletedDesc: "\"{{name}}\" bölüm profili başarıyla kaldırıldı.",
     failedToDeleteProfile: "Profil silinemedi",
     failedToDeleteProfileDesc: "Bölüm profili kaldırılamadı.",
     profileDuplicated: "Profil Çoğaltıldı",
-    profileDuplicatedDesc: "\"{name}\" bölüm profili başarıyla çoğaltıldı.",
+    profileDuplicatedDesc: "\"{{name}}\" bölüm profili başarıyla çoğaltıldı.",
     failedToDuplicateProfile: "Profil çoğaltılamadı",
     episodeDeleted: "Bölüm Silindi",
     episodeDeletedDesc: "Bölüm başarıyla silindi.",
diff --git a/frontend/src/lib/stores/auth-store.ts b/frontend/src/lib/stores/auth-store.ts
index 63ae8ac8..4a20ad30 100644
--- a/frontend/src/lib/stores/auth-store.ts
+++ b/frontend/src/lib/stores/auth-store.ts
@@ -1,5 +1,7 @@
+import axios from 'axios'
 import { create } from 'zustand'
 import { persist } from 'zustand/middleware'
+import apiClient from '@/lib/api/client'
 import { getApiUrl } from '@/lib/config'
 
 interface AuthState {
@@ -36,17 +38,11 @@ export const useAuthStore = create<AuthState>()(
 
       checkAuthRequired: async () => {
         try {
-          const apiUrl = await getApiUrl()
-          const response = await fetch(`${apiUrl}/api/auth/status`, {
-            cache: 'no-store',
+          const response = await apiClient.get<{ auth_enabled?: boolean }>('/auth/status', {
+            headers: { 'Cache-Control': 'no-store' },
           })
 
-          if (!response.ok) {
-            throw new Error(`Auth status check failed: ${response.status}`)
-          }
-
-          const data = await response.json()
-          const required = data.auth_enabled || false
+          const required = response.data.auth_enabled || false
           set({ authRequired: required })
 
           // If auth is not required, mark as authenticated
@@ -59,7 +55,7 @@ export const useAuthStore = create<AuthState>()(
           console.error('Failed to check auth status:', error)
 
           // If it's a network error, set a more helpful error message
-          if (error instanceof TypeError && error.message.includes('Failed to fetch')) {
+          if (axios.isAxiosError(error) && !error.response) {
             set({
               error: 'Unable to connect to server. Please check if the API is running.',
               authRequired: null  // Don't assume auth is required if we can't connect
@@ -79,7 +75,9 @@ export const useAuthStore = create<AuthState>()(
         try {
           const apiUrl = await getApiUrl()
 
-          // Test auth with notebooks endpoint
+          // Deliberately raw fetch (not apiClient): this probes a candidate
+          // password, so the interceptors must not overwrite the Authorization
+          // header with the stored token or hard-redirect on 401.
           const response = await fetch(`${apiUrl}/api/notebooks`, {
             method: 'GET',
             headers: {
@@ -172,6 +170,8 @@ export const useAuthStore = create<AuthState>()(
         try {
           const apiUrl = await getApiUrl()
 
+          // Deliberately raw fetch (not apiClient): a 401 here must update
+          // store state, not trigger the interceptor's storage-clear/redirect.
           const response = await fetch(`${apiUrl}/api/notebooks`, {
             method: 'GET',
             headers: {

From c4749ad041709cc8892be2a845aaf76070f4aadb Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:42:10 -0300
Subject: [PATCH 182/345] fix(api): let typed domain exceptions reach the
 global handlers (#1078)

The routers wrapped endpoint bodies in a broad 'except Exception' that
re-raised everything as HTTPException(500), intercepting the typed
open_notebook.exceptions hierarchy before the global handlers in
api/main.py could map it to its documented status code (NotFoundError
-> 404, InvalidInputError -> 400, ConfigurationError -> 422,
RateLimitError -> 429, NetworkError/ExternalServiceError -> 502).

Every endpoint-level handler chain across the 18 affected routers now
re-raises HTTPException and OpenNotebookError before the final generic
arm, which keeps catching untyped exceptions and returning a sanitized
500 (the no-raw-exception-text guarantee is unchanged and covered by
tests/test_error_message_sanitization.py). Nested best-effort blocks
(fallbacks, SSE error events, per-item loops) are deliberately left
untouched. In create_source and _create_source_async_path the new
re-raise arms preserve the uploaded-file / orphaned-source cleanup.

Characterization tests that pinned the old wrapped-500 behavior for
source-chat sessions with a missing refers_to relation are updated to
the correct 404, and a new test module asserts per router that a
domain-layer ConfigurationError maps to 422 instead of 500.
---
 CHANGELOG.md                                  |   1 +
 api/routers/chat.py                           |  27 +++++
 api/routers/commands.py                       |  17 +++
 api/routers/context.py                        |   7 +-
 api/routers/credentials.py                    |  49 +++++++-
 api/routers/embedding.py                      |   7 +-
 api/routers/embedding_rebuild.py              |   7 ++
 api/routers/episode_profiles.py               |  17 +++
 api/routers/insights.py                       |  12 +-
 api/routers/models.py                         |  50 +++++++-
 api/routers/notebooks.py                      |  28 ++++-
 api/routers/notes.py                          |  16 ++-
 api/routers/podcasts.py                       |  25 ++++
 api/routers/search.py                         |  14 ++-
 api/routers/settings.py                       |  11 +-
 api/routers/source_chat.py                    |  23 ++++
 api/routers/sources.py                        |  38 +++++-
 api/routers/speaker_profiles.py               |  17 +++
 api/routers/transformations.py                |  20 ++++
 tests/test_chat_routers_characterization.py   |  26 ++---
 tests/test_typed_exceptions_reach_handlers.py | 110 ++++++++++++++++++
 21 files changed, 498 insertions(+), 24 deletions(-)
 create mode 100644 tests/test_typed_exceptions_reach_handlers.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f3806cf..c4087ae6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - Eight podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) showed the literal `{name}` placeholder instead of the profile name: the locale strings used single braces (which i18next ignores) and the `t()` call sites passed no values. Placeholders normalized to `{{name}}` across all locales and the actual name is now passed in from the mutation response/variables
+- Typed domain errors now return their documented HTTP status codes instead of a generic 500: the API routers used to wrap endpoint bodies in a broad `except Exception` that swallowed the `open_notebook.exceptions` hierarchy before the global handlers could map it (`NotFoundError`→404, `InvalidInputError`→400, `ConfigurationError`→422, `RateLimitError`→429, `NetworkError`/`ExternalServiceError`→502). All 18 affected routers now re-raise `HTTPException` and `OpenNotebookError` and only convert genuinely unexpected exceptions into sanitized 500s. Most visible changes: a missing/unconfigured model (`ConfigurationError`) now returns 422 with an actionable message instead of 500; getting or deleting a source-chat session whose session isn't related to the source returns 404 (was a 500 wrapping the inner 404); fetching a missing credential returns 404 (was 500)
 - Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely
 - Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
 
diff --git a/api/routers/chat.py b/api/routers/chat.py
index 7138d26d..19e1f05e 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -24,6 +24,7 @@ from open_notebook.domain.notebook import (
 )
 from open_notebook.exceptions import (
     NotFoundError,
+    OpenNotebookError,
 )
 from open_notebook.graphs.chat import graph as chat_graph
 from open_notebook.utils.graph_utils import get_session_message_count
@@ -128,6 +129,10 @@ async def get_sessions(notebook_id: str = Query(..., description="Notebook ID"))
         return results
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching chat sessions: {str(e)}")
         raise HTTPException(
@@ -166,6 +171,10 @@ async def create_session(request: CreateSessionRequest):
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating chat session: {str(e)}")
         raise HTTPException(
@@ -220,6 +229,10 @@ async def get_session(session_id: str):
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching session: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching session: {str(e)}")
@@ -263,6 +276,10 @@ async def update_session(session_id: str, request: UpdateSessionRequest):
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating session: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error updating session: {str(e)}")
@@ -280,6 +297,10 @@ async def delete_session(session_id: str):
         return SuccessResponse(success=True, message="Session deleted successfully")
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting session: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error deleting session: {str(e)}")
@@ -357,6 +378,10 @@ async def execute_chat(request: ExecuteChatRequest):
         return ExecuteChatResponse(session_id=request.session_id, messages=messages)
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         # Log detailed error with context for debugging
         logger.error(
@@ -477,6 +502,8 @@ async def build_context(request: BuildContextRequest):
         )
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error building context: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error building context: {str(e)}")
diff --git a/api/routers/commands.py b/api/routers/commands.py
index bbff33e0..fabd6fb8 100644
--- a/api/routers/commands.py
+++ b/api/routers/commands.py
@@ -6,6 +6,7 @@ from pydantic import BaseModel, Field
 from surreal_commands import registry
 
 from api.command_service import CommandService
+from open_notebook.exceptions import OpenNotebookError
 
 router = APIRouter()
 
@@ -66,6 +67,10 @@ async def execute_command(request: CommandExecutionRequest):
             message=f"Command '{request.command}' submitted successfully",
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error submitting command: {str(e)}")
         raise HTTPException(
@@ -80,6 +85,10 @@ async def get_command_job_status(job_id: str):
         status_data = await CommandService.get_command_status(job_id)
         return CommandJobStatusResponse(**status_data)
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching job status: {str(e)}")
         raise HTTPException(
@@ -100,6 +109,10 @@ async def list_command_jobs(
         )
         return jobs
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error listing command jobs: {str(e)}")
         raise HTTPException(
@@ -114,6 +127,10 @@ async def cancel_command_job(job_id: str):
         success = await CommandService.cancel_command_job(job_id)
         return {"job_id": job_id, "cancelled": success}
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error cancelling command job: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/context.py b/api/routers/context.py
index ce4d74a1..d5625551 100644
--- a/api/routers/context.py
+++ b/api/routers/context.py
@@ -3,7 +3,10 @@ from loguru import logger
 
 from api.models import ContextRequest, ContextResponse
 from open_notebook.domain.notebook import Note, Notebook, Source, SourceInsight
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    OpenNotebookError,
+)
 from open_notebook.utils import token_count
 
 router = APIRouter()
@@ -122,6 +125,8 @@ async def get_notebook_context(notebook_id: str, context_request: ContextRequest
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error getting context for notebook {notebook_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error getting context: {str(e)}")
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index 7fe5fc05..e106cc9c 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -56,7 +56,10 @@ from api.models import (
 )
 from open_notebook.database.repository import ensure_record_id, repo_delete, repo_query
 from open_notebook.domain.credential import Credential
-from open_notebook.exceptions import NotFoundError
+from open_notebook.exceptions import (
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter(prefix="/credentials", tags=["credentials"])
 
@@ -79,6 +82,10 @@ async def get_status():
     """
     try:
         return await get_provider_status()
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching status: {e}")
         raise HTTPException(status_code=500, detail="Failed to fetch credential status")
@@ -89,6 +96,10 @@ async def get_env_status():
     """Check what's configured via environment variables."""
     try:
         return await svc_get_env_status()
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error checking env status: {e}")
         raise HTTPException(status_code=500, detail="Failed to check environment status")
@@ -117,6 +128,10 @@ async def list_credentials(
 
         return result
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error listing credentials: {e}")
         raise HTTPException(status_code=500, detail="Failed to list credentials")
@@ -132,6 +147,10 @@ async def list_credentials_by_provider(provider: str):
             models = await cred.get_linked_models()
             result.append(credential_to_response(cred, len(models)))
         return result
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error listing credentials for {provider}: {e}")
         raise HTTPException(status_code=500, detail="Failed to list credentials for provider")
@@ -177,6 +196,10 @@ async def create_credential(request: CreateCredentialRequest):
         await cred.save()
         return credential_to_response(cred, 0)
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating credential: {e}")
         raise HTTPException(status_code=500, detail="Failed to create credential")
@@ -189,6 +212,10 @@ async def get_credential(credential_id: str):
         cred = await Credential.get(credential_id)
         models = await cred.get_linked_models()
         return credential_to_response(cred, len(models))
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching credential {credential_id}: {e}")
         raise HTTPException(status_code=404, detail="Credential not found")
@@ -261,6 +288,8 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Credential not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to update credential")
@@ -360,6 +389,8 @@ async def delete_credential(
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Credential not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to delete credential")
@@ -399,6 +430,10 @@ async def discover_models_for_credential(credential_id: str):
             ],
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error discovering models for credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to discover models")
@@ -412,6 +447,10 @@ async def register_models_for_credential(
     try:
         result = await register_models(credential_id, request.models)
         return RegisterModelsResponse(**result)
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error registering models for credential {credential_id}: {e}")
         raise HTTPException(status_code=500, detail="Failed to register models")
@@ -429,6 +468,10 @@ async def migrate_from_provider_config():
         return await svc_migrate_from_provider_config()
     except ValueError as e:
         raise _handle_value_error(e)
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"ProviderConfig migration FAILED: {type(e).__name__}: {e}", exc_info=True)
         raise HTTPException(status_code=500, detail="Migration from provider config failed")
@@ -441,6 +484,10 @@ async def migrate_from_env():
         return await svc_migrate_from_env()
     except ValueError as e:
         raise _handle_value_error(e)
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Env migration FAILED: {type(e).__name__}: {e}", exc_info=True)
         raise HTTPException(status_code=500, detail="Migration from environment variables failed")
diff --git a/api/routers/embedding.py b/api/routers/embedding.py
index f7641838..e3c3a8e6 100644
--- a/api/routers/embedding.py
+++ b/api/routers/embedding.py
@@ -5,7 +5,10 @@ from api.command_service import CommandService
 from api.models import EmbedRequest, EmbedResponse
 from open_notebook.ai.models import model_manager
 from open_notebook.domain.notebook import Note, Source
-from open_notebook.exceptions import NotFoundError
+from open_notebook.exceptions import (
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -115,6 +118,8 @@ async def embed_content(embed_request: EmbedRequest):
         raise HTTPException(
             status_code=404, detail=f"{embed_request.item_type} not found"
         )
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(
             f"Error embedding {embed_request.item_type} {embed_request.item_id}: {str(e)}"
diff --git a/api/routers/embedding_rebuild.py b/api/routers/embedding_rebuild.py
index 155d8c0f..d546daad 100644
--- a/api/routers/embedding_rebuild.py
+++ b/api/routers/embedding_rebuild.py
@@ -11,6 +11,7 @@ from api.models import (
     RebuildStatusResponse,
 )
 from open_notebook.database.repository import repo_query
+from open_notebook.exceptions import OpenNotebookError
 
 router = APIRouter()
 
@@ -112,6 +113,10 @@ async def start_rebuild(request: RebuildRequest):
             message=f"Rebuild operation started. Estimated {total_estimate} items to process.",
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to start rebuild: {e}")
         logger.exception(e)
@@ -184,6 +189,8 @@ async def get_rebuild_status(command_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to get rebuild status: {e}")
         logger.exception(e)
diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index 85ece62e..24af3070 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -4,6 +4,7 @@ from fastapi import APIRouter, HTTPException
 from loguru import logger
 from pydantic import BaseModel, Field
 
+from open_notebook.exceptions import OpenNotebookError
 from open_notebook.podcasts.models import EpisodeProfile
 
 router = APIRouter()
@@ -52,6 +53,10 @@ async def list_episode_profiles():
     try:
         profiles = await EpisodeProfile.get_all(order_by="name asc")
         return [_profile_to_response(p) for p in profiles]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to fetch episode profiles: {e}")
         raise HTTPException(
@@ -74,6 +79,8 @@ async def get_episode_profile(profile_name: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to fetch episode profile '{profile_name}': {e}")
         raise HTTPException(
@@ -126,6 +133,10 @@ async def create_episode_profile(profile_data: EpisodeProfileCreate):
         await profile.save()
         return _profile_to_response(profile)
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to create episode profile: {e}")
         raise HTTPException(
@@ -152,6 +163,8 @@ async def update_episode_profile(profile_id: str, profile_data: EpisodeProfileCr
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to update episode profile: {e}")
         raise HTTPException(
@@ -176,6 +189,8 @@ async def delete_episode_profile(profile_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to delete episode profile: {e}")
         raise HTTPException(
@@ -217,6 +232,8 @@ async def duplicate_episode_profile(profile_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to duplicate episode profile: {e}")
         raise HTTPException(
diff --git a/api/routers/insights.py b/api/routers/insights.py
index 1518a02b..a271a9a8 100644
--- a/api/routers/insights.py
+++ b/api/routers/insights.py
@@ -3,7 +3,11 @@ from loguru import logger
 
 from api.models import NoteResponse, SaveAsNoteRequest, SourceInsightResponse
 from open_notebook.domain.notebook import SourceInsight
-from open_notebook.exceptions import InvalidInputError, NotFoundError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -29,6 +33,8 @@ async def get_insight(insight_id: str):
         )
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching insight {insight_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error fetching insight")
@@ -47,6 +53,8 @@ async def delete_insight(insight_id: str):
         return {"message": "Insight deleted successfully"}
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting insight {insight_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error deleting insight")
@@ -77,6 +85,8 @@ async def save_insight_as_note(insight_id: str, request: SaveAsNoteRequest):
         raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error saving insight {insight_id} as note: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/models.py b/api/routers/models.py
index 838c0ad8..7332e55c 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -23,7 +23,11 @@ from open_notebook.ai.model_discovery import (
 )
 from open_notebook.ai.models import DefaultModels, Model
 from open_notebook.domain.credential import Credential
-from open_notebook.exceptions import InvalidInputError, NotFoundError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -189,6 +193,10 @@ async def get_models(
             )
             for model in models
         ]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching models: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching models: {str(e)}")
@@ -244,6 +252,8 @@ async def create_model(model_data: ModelCreate):
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating model: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error creating model: {str(e)}")
@@ -262,6 +272,8 @@ async def delete_model(model_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Model not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting model {model_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error deleting model: {str(e)}")
@@ -276,6 +288,8 @@ async def test_model(model_id: str):
             raise HTTPException(status_code=404, detail="Model not found")
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception:
         raise HTTPException(status_code=404, detail="Model not found")
 
@@ -305,6 +319,10 @@ async def get_default_models():
             default_embedding_model=defaults.default_embedding_model,  # type: ignore[attr-defined]
             default_tools_model=defaults.default_tools_model,  # type: ignore[attr-defined]
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching default models: {str(e)}")
         raise HTTPException(
@@ -355,6 +373,8 @@ async def update_default_models(defaults_data: DefaultModelsResponse):
         )
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating default models: {str(e)}")
         raise HTTPException(
@@ -476,6 +496,10 @@ async def get_provider_availability():
             unavailable=unavailable_providers,
             supported_types=supported_types,
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error checking provider availability: {str(e)}")
         raise HTTPException(
@@ -512,6 +536,10 @@ async def discover_models(provider: str):
             )
             for m in discovered
         ]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error discovering models for {provider}: {str(e)}")
         raise HTTPException(
@@ -541,6 +569,10 @@ async def sync_models(provider: str):
             new=new,
             existing=existing,
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error syncing models for {provider}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error syncing models. Check server logs for details.")
@@ -577,6 +609,10 @@ async def sync_all_models():
             total_discovered=total_discovered,
             total_new=total_new,
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error syncing all models: {str(e)}")
         raise HTTPException(
@@ -600,6 +636,10 @@ async def get_model_count(provider: str):
             counts=counts,
             total=total,
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error getting model count for {provider}: {str(e)}")
         raise HTTPException(
@@ -634,6 +674,10 @@ async def get_models_by_provider(provider: str):
             )
             for model in models
         ]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching models for {provider}: {str(e)}")
         raise HTTPException(
@@ -773,6 +817,10 @@ async def auto_assign_defaults():
             missing=missing,
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error auto-assigning defaults: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index 2d2575ec..52774434 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -13,7 +13,11 @@ from api.models import (
 )
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import Notebook, Source
-from open_notebook.exceptions import InvalidInputError, NotFoundError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -116,6 +120,8 @@ async def get_notebooks(
         ]
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching notebooks: {str(e)}")
         raise HTTPException(
@@ -145,6 +151,10 @@ async def create_notebook(notebook: NotebookCreate):
         )
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating notebook: {str(e)}")
         raise HTTPException(
@@ -185,6 +195,10 @@ async def get_recently_viewed(
         ]
         items.sort(key=_last_viewed_sort_key, reverse=True)
         return items[:limit]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         # Log full context server-side; return a generic message so internal
         # details are not leaked to clients.
@@ -215,6 +229,8 @@ async def get_notebook_delete_preview(notebook_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error getting delete preview for notebook {notebook_id}: {e}")
         raise HTTPException(
@@ -254,6 +270,8 @@ async def get_notebook(notebook_id: str):
         )
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching notebook {notebook_id}: {str(e)}")
         raise HTTPException(
@@ -316,6 +334,8 @@ async def update_notebook(notebook_id: str, notebook_update: NotebookUpdate):
         raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating notebook {notebook_id}: {str(e)}")
         raise HTTPException(
@@ -355,6 +375,8 @@ async def add_source_to_notebook(notebook_id: str, source_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook or source not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(
             f"Error linking source {source_id} to notebook {notebook_id}: {str(e)}"
@@ -385,6 +407,8 @@ async def remove_source_from_notebook(notebook_id: str, source_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(
             f"Error removing source {source_id} from notebook {notebook_id}: {str(e)}"
@@ -426,6 +450,8 @@ async def delete_notebook(
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting notebook {notebook_id}: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/notes.py b/api/routers/notes.py
index c862d233..192f8874 100644
--- a/api/routers/notes.py
+++ b/api/routers/notes.py
@@ -5,7 +5,11 @@ from loguru import logger
 
 from api.models import NoteCreate, NoteResponse, NoteUpdate
 from open_notebook.domain.notebook import Note
-from open_notebook.exceptions import InvalidInputError, NotFoundError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -41,6 +45,8 @@ async def get_notes(
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Notebook not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching notes: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching notes: {str(e)}")
@@ -105,6 +111,8 @@ async def create_note(note_data: NoteCreate):
         raise HTTPException(status_code=404, detail="Notebook not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating note: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error creating note: {str(e)}")
@@ -128,6 +136,8 @@ async def get_note(note_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Note not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching note {note_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error fetching note: {str(e)}")
@@ -169,6 +179,8 @@ async def update_note(note_id: str, note_update: NoteUpdate):
         raise HTTPException(status_code=404, detail="Note not found")
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating note {note_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error updating note: {str(e)}")
@@ -187,6 +199,8 @@ async def delete_note(note_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Note not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting note {note_id}: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error deleting note: {str(e)}")
diff --git a/api/routers/podcasts.py b/api/routers/podcasts.py
index fb284e41..03b7775c 100644
--- a/api/routers/podcasts.py
+++ b/api/routers/podcasts.py
@@ -14,6 +14,7 @@ from api.podcast_service import (
     PodcastService,
 )
 from open_notebook.config import PODCASTS_FOLDER
+from open_notebook.exceptions import OpenNotebookError
 from open_notebook.podcasts.models import PodcastEpisode
 
 router = APIRouter()
@@ -80,6 +81,10 @@ async def generate_podcast(request: PodcastGenerationRequest):
             episode_name=request.episode_name,
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error generating podcast: {str(e)}")
         raise HTTPException(
@@ -94,6 +99,10 @@ async def get_podcast_job_status(job_id: str):
         status_data = await PodcastService.get_job_status(job_id)
         return status_data
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching podcast job status: {str(e)}")
         raise HTTPException(
@@ -163,6 +172,10 @@ async def list_podcast_episodes():
 
         return response_episodes
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error listing podcast episodes: {str(e)}")
         raise HTTPException(
@@ -211,6 +224,10 @@ async def get_podcast_episode(episode_id: str):
             error_message=error_message,
         )
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching podcast episode: {str(e)}")
         raise HTTPException(status_code=404, detail="Episode not found")
@@ -223,6 +240,8 @@ async def stream_podcast_episode_audio(episode_id: str):
         episode = await PodcastService.get_episode(episode_id)
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching podcast episode for audio: {str(e)}")
         raise HTTPException(status_code=404, detail="Episode not found")
@@ -301,6 +320,8 @@ async def retry_podcast_episode(episode_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error retrying podcast episode: {str(e)}")
         raise HTTPException(
@@ -335,6 +356,10 @@ async def delete_podcast_episode(episode_id: str):
         logger.info(f"Deleted podcast episode: {episode_id}")
         return {"message": "Episode deleted successfully", "episode_id": episode_id}
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting podcast episode: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/search.py b/api/routers/search.py
index 4f27d3a6..135f58a2 100644
--- a/api/routers/search.py
+++ b/api/routers/search.py
@@ -8,7 +8,11 @@ from loguru import logger
 from api.models import AskRequest, AskResponse, SearchRequest, SearchResponse
 from open_notebook.ai.models import Model, model_manager
 from open_notebook.domain.notebook import text_search, vector_search
-from open_notebook.exceptions import DatabaseOperationError, InvalidInputError
+from open_notebook.exceptions import (
+    DatabaseOperationError,
+    InvalidInputError,
+    OpenNotebookError,
+)
 from open_notebook.graphs.ask import graph as ask_graph
 
 router = APIRouter()
@@ -53,6 +57,10 @@ async def search_knowledge_base(search_request: SearchRequest):
     except DatabaseOperationError as e:
         logger.error(f"Database error during search: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Search failed: {str(e)}")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Unexpected error during search: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Search failed: {str(e)}")
@@ -159,6 +167,8 @@ async def ask_knowledge_base(ask_request: AskRequest):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error in ask endpoint: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Ask operation failed: {str(e)}")
@@ -221,6 +231,8 @@ async def ask_knowledge_base_simple(ask_request: AskRequest):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error in ask simple endpoint: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Ask operation failed: {str(e)}")
diff --git a/api/routers/settings.py b/api/routers/settings.py
index 5e992619..2b67d3ca 100644
--- a/api/routers/settings.py
+++ b/api/routers/settings.py
@@ -3,7 +3,10 @@ from loguru import logger
 
 from api.models import SettingsResponse, SettingsUpdate
 from open_notebook.domain.content_settings import ContentSettings
-from open_notebook.exceptions import InvalidInputError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -21,6 +24,10 @@ async def get_settings():
             auto_delete_files=settings.auto_delete_files,
             youtube_preferred_languages=settings.youtube_preferred_languages,
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching settings: {str(e)}")
         raise HTTPException(
@@ -81,6 +88,8 @@ async def update_settings(settings_update: SettingsUpdate):
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating settings: {str(e)}")
         raise HTTPException(
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index b1d675e0..aceae595 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -20,6 +20,7 @@ from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import ChatSession
 from open_notebook.exceptions import (
     NotFoundError,
+    OpenNotebookError,
 )
 from open_notebook.graphs.source_chat import source_chat_graph as source_chat_graph
 from open_notebook.utils.graph_utils import get_session_message_count
@@ -112,6 +113,10 @@ async def create_source_chat_session(
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating source chat session: {str(e)}")
         raise HTTPException(
@@ -168,6 +173,10 @@ async def get_source_chat_sessions(source_id: str = Path(..., description="Sourc
         return sessions
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching source chat sessions: {str(e)}")
         raise HTTPException(
@@ -228,6 +237,10 @@ async def get_source_chat_session(
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source or session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching source chat session: {str(e)}")
         raise HTTPException(
@@ -273,6 +286,10 @@ async def update_source_chat_session(
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source or session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating source chat session: {str(e)}")
         raise HTTPException(
@@ -301,6 +318,10 @@ async def delete_source_chat_session(
         )
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source or session not found")
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting source chat session: {str(e)}")
         raise HTTPException(
@@ -425,6 +446,8 @@ async def send_message_to_source_chat(
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error sending message to source chat: {str(e)}")
         raise HTTPException(status_code=500, detail=f"Error sending message: {str(e)}")
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 5e6a704f..01ac1c51 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -35,7 +35,11 @@ from open_notebook.config import UPLOADS_FOLDER
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.notebook import Asset, Notebook, Source
 from open_notebook.domain.transformation import Transformation
-from open_notebook.exceptions import InvalidInputError, NotFoundError
+from open_notebook.exceptions import (
+    InvalidInputError,
+    NotFoundError,
+    OpenNotebookError,
+)
 
 router = APIRouter()
 
@@ -329,6 +333,8 @@ async def get_sources(
         return response_list
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching sources: {str(e)}")
         raise HTTPException(status_code=500, detail="Error fetching sources")
@@ -495,6 +501,14 @@ async def _create_source_async_path(
             processing_info={"async": True, "queued": True},
         )
 
+    except (HTTPException, OpenNotebookError):
+        # Clean up source record before the error propagates (typed domain
+        # errors are mapped by the global handlers in api/main.py)
+        try:
+            await source.delete()
+        except Exception:
+            pass
+        raise
     except Exception as e:
         logger.error(f"Failed to submit async processing command: {e}")
         # Clean up source record on command submission failure
@@ -637,6 +651,10 @@ async def create_source(
         # Clean up uploaded file on validation errors if we created it
         _cleanup_uploaded_file(file_path, upload_file)
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        # Clean up uploaded file before the global handlers map the error
+        _cleanup_uploaded_file(file_path, upload_file)
+        raise
     except Exception as e:
         logger.error(f"Error creating source: {str(e)}")
         # Clean up uploaded file on unexpected errors if we created it
@@ -738,6 +756,8 @@ async def get_source(source_id: str):
         raise
     except NotFoundError:
         raise HTTPException(status_code=404, detail="Source not found")
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error fetching source")
@@ -751,6 +771,8 @@ async def check_source_file(source_id: str):
         return Response(status_code=200)
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error checking file for source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Failed to verify file")
@@ -768,6 +790,8 @@ async def download_source_file(source_id: str):
         )
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error downloading file for source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Failed to download source file")
@@ -828,6 +852,8 @@ async def get_source_status(source_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching status for source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error fetching source status")
@@ -855,6 +881,8 @@ async def update_source(source_id: str, source_update: SourceUpdate):
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error updating source")
@@ -972,6 +1000,8 @@ async def retry_source_processing(source_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error retrying source processing for {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error retrying source processing")
@@ -990,6 +1020,8 @@ async def delete_source(source_id: str):
         return {"message": "Source deleted successfully"}
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error deleting source")
@@ -1017,6 +1049,8 @@ async def get_source_insights(source_id: str):
         ]
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching insights for source {source_id}: {str(e)}")
         raise HTTPException(status_code=500, detail="Error fetching insights")
@@ -1070,6 +1104,8 @@ async def create_source_insight(source_id: str, request: CreateSourceInsightRequ
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error starting insight generation for source {source_id}: {e}")
         raise HTTPException(status_code=500, detail="Error starting insight generation")
diff --git a/api/routers/speaker_profiles.py b/api/routers/speaker_profiles.py
index edb34d19..6d48b32f 100644
--- a/api/routers/speaker_profiles.py
+++ b/api/routers/speaker_profiles.py
@@ -4,6 +4,7 @@ from fastapi import APIRouter, HTTPException
 from loguru import logger
 from pydantic import BaseModel, Field
 
+from open_notebook.exceptions import OpenNotebookError
 from open_notebook.podcasts.models import SpeakerProfile
 
 router = APIRouter()
@@ -38,6 +39,10 @@ async def list_speaker_profiles():
     try:
         profiles = await SpeakerProfile.get_all(order_by="name asc")
         return [_profile_to_response(p) for p in profiles]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to fetch speaker profiles: {e}")
         raise HTTPException(
@@ -60,6 +65,8 @@ async def get_speaker_profile(profile_name: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to fetch speaker profile '{profile_name}': {e}")
         raise HTTPException(
@@ -95,6 +102,10 @@ async def create_speaker_profile(profile_data: SpeakerProfileCreate):
         await profile.save()
         return _profile_to_response(profile)
 
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to create speaker profile: {e}")
         raise HTTPException(
@@ -121,6 +132,8 @@ async def update_speaker_profile(profile_id: str, profile_data: SpeakerProfileCr
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to update speaker profile: {e}")
         raise HTTPException(
@@ -145,6 +158,8 @@ async def delete_speaker_profile(profile_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to delete speaker profile: {e}")
         raise HTTPException(
@@ -179,6 +194,8 @@ async def duplicate_speaker_profile(profile_id: str):
 
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Failed to duplicate speaker profile: {e}")
         raise HTTPException(
diff --git a/api/routers/transformations.py b/api/routers/transformations.py
index 346ff336..17970055 100644
--- a/api/routers/transformations.py
+++ b/api/routers/transformations.py
@@ -44,6 +44,10 @@ async def get_transformations():
             _transformation_response(transformation)
             for transformation in transformations
         ]
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching transformations: {str(e)}")
         raise HTTPException(
@@ -77,6 +81,8 @@ async def create_transformation(transformation_data: TransformationCreate):
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error creating transformation: {str(e)}")
         raise HTTPException(
@@ -140,6 +146,10 @@ async def get_default_prompt():
             transformation_instructions=default_prompts.transformation_instructions
             or ""
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching default prompt: {str(e)}")
         raise HTTPException(
@@ -161,6 +171,10 @@ async def update_default_prompt(prompt_update: DefaultPromptUpdate):
         return DefaultPromptResponse(
             transformation_instructions=default_prompts.transformation_instructions
         )
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating default prompt: {str(e)}")
         raise HTTPException(
@@ -181,6 +195,8 @@ async def get_transformation(transformation_id: str):
         return _transformation_response(transformation)
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error fetching transformation {transformation_id}: {str(e)}")
         raise HTTPException(
@@ -226,6 +242,8 @@ async def update_transformation(
         raise
     except InvalidInputError as e:
         raise HTTPException(status_code=400, detail=str(e))
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error updating transformation {transformation_id}: {str(e)}")
         raise HTTPException(
@@ -246,6 +264,8 @@ async def delete_transformation(transformation_id: str):
         return {"message": "Transformation deleted successfully"}
     except HTTPException:
         raise
+    except OpenNotebookError:
+        raise
     except Exception as e:
         logger.error(f"Error deleting transformation {transformation_id}: {str(e)}")
         raise HTTPException(
diff --git a/tests/test_chat_routers_characterization.py b/tests/test_chat_routers_characterization.py
index a7ae8bcf..8d52b957 100644
--- a/tests/test_chat_routers_characterization.py
+++ b/tests/test_chat_routers_characterization.py
@@ -6,7 +6,8 @@ them into `api/routers/_chat_shared.py`:
 
 - record-ID normalization (bare id vs already-prefixed id)
 - session/source verification (missing record -> 404, missing `refers_to`
-  relation -> current behavior, preserved as-is)
+  relation -> 404 on every method now that the routers re-raise HTTPException
+  instead of swallowing it into a 500)
 - LangGraph state -> `ChatMessage` extraction shapes (type/content fallbacks)
 
 DB access and LangGraph state are mocked following the style of
@@ -232,9 +233,10 @@ async def test_get_source_chat_session_missing_relation_behavior(
 ):
     """Session exists but is not related to the source.
 
-    Current behavior (preserved as-is): the inner HTTPException(404) is
-    swallowed by the broad `except Exception` and re-raised as a 500 whose
-    detail embeds the original 404 message.
+    Intentional behavior change: the router now re-raises HTTPException before
+    its broad `except Exception`, so the inner 404 surfaces as a real 404
+    instead of being swallowed and re-raised as a 500 embedding the original
+    404 message.
     """
     mock_source_get.return_value = _source()
     mock_session_get.return_value = _session()
@@ -242,11 +244,8 @@ async def test_get_source_chat_session_missing_relation_behavior(
 
     resp = client.get("/api/sources/xyz/chat/sessions/abc")
 
-    assert resp.status_code == 500
-    assert (
-        resp.json()["detail"]
-        == "Error fetching source chat session: 404: Session not found for this source"
-    )
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Session not found for this source"
 
 
 @pytest.mark.asyncio
@@ -256,17 +255,16 @@ async def test_get_source_chat_session_missing_relation_behavior(
 async def test_delete_source_chat_session_missing_relation_behavior(
     mock_source_get, mock_session_get, mock_repo, client
 ):
+    # Intentional behavior change: the inner 404 is no longer swallowed into a
+    # 500 by the broad `except Exception` (see the get test above).
     mock_source_get.return_value = _source()
     mock_session_get.return_value = _session()
     mock_repo.return_value = []
 
     resp = client.delete("/api/sources/xyz/chat/sessions/abc")
 
-    assert resp.status_code == 500
-    assert (
-        resp.json()["detail"]
-        == "Error deleting source chat session: 404: Session not found for this source"
-    )
+    assert resp.status_code == 404
+    assert resp.json()["detail"] == "Session not found for this source"
 
 
 @pytest.mark.asyncio
diff --git a/tests/test_typed_exceptions_reach_handlers.py b/tests/test_typed_exceptions_reach_handlers.py
new file mode 100644
index 00000000..f09f4ca5
--- /dev/null
+++ b/tests/test_typed_exceptions_reach_handlers.py
@@ -0,0 +1,110 @@
+"""Typed domain exceptions must reach the global handlers in api/main.py.
+
+The routers used to wrap endpoint bodies in a broad `except Exception` that
+re-raised everything as a generic HTTPException(500), swallowing the typed
+`open_notebook.exceptions` hierarchy before the global handlers could map it
+to its documented status code (NotFoundError -> 404, InvalidInputError -> 400,
+ConfigurationError -> 422, RateLimitError -> 429, NetworkError /
+ExternalServiceError -> 502, ...).
+
+Each case here mocks a domain-layer call inside one router to raise
+`ConfigurationError` and asserts the response is 422 (per the global handler)
+instead of a generic 500. One case per fixed router.
+
+Untyped exceptions must still be caught by the routers' final
+`except Exception` arm and return a sanitized 500 (see
+tests/test_error_message_sanitization.py); a regression case for that
+guarantee is included at the bottom.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.exceptions import ConfigurationError, NotFoundError
+
+CONFIG_ERROR_MESSAGE = "No default model configured. Set one in the Models section."
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app, raise_server_exceptions=False)
+
+
+def _boom(*_args, **_kwargs):
+    raise ConfigurationError(CONFIG_ERROR_MESSAGE)
+
+
+# (router, patch target, method, url, json body) — one per fixed router.
+CASES = [
+    ("chat", "api.routers.chat.Notebook.get", "GET", "/api/chat/sessions?notebook_id=notebook:1", None),
+    ("source_chat", "api.routers._chat_shared.Source.get", "GET", "/api/sources/xyz/chat/sessions", None),
+    ("sources", "api.routers.sources.repo_query", "GET", "/api/sources", None),
+    ("notebooks", "api.routers.notebooks.repo_query", "GET", "/api/notebooks", None),
+    ("notes", "api.routers.notes.Note.get_all", "GET", "/api/notes", None),
+    ("models", "api.routers.models.Model.get_all", "GET", "/api/models", None),
+    ("commands", "api.routers.commands.CommandService.get_command_status", "GET", "/api/commands/jobs/command:abc", None),
+    ("context", "api.routers.context.Notebook.get", "POST", "/api/notebooks/notebook:1/context", {"notebook_id": "notebook:1"}),
+    ("credentials", "api.routers.credentials.Credential.get_all", "GET", "/api/credentials", None),
+    ("embedding", "api.routers.embedding.model_manager.get_embedding_model", "POST", "/api/embed", {"item_id": "source:1", "item_type": "source"}),
+    ("embedding_rebuild", "api.routers.embedding_rebuild.repo_query", "POST", "/api/embeddings/rebuild", {"mode": "existing"}),
+    ("episode_profiles", "api.routers.episode_profiles.EpisodeProfile.get_all", "GET", "/api/episode-profiles", None),
+    ("insights", "api.routers.insights.SourceInsight.get", "GET", "/api/insights/source_insight:1", None),
+    ("podcasts", "api.routers.podcasts.PodcastService.list_episodes", "GET", "/api/podcasts/episodes", None),
+    ("search", "api.routers.search.text_search", "POST", "/api/search", {"query": "hello", "type": "text"}),
+    ("settings", "api.routers.settings.ContentSettings.get_instance", "GET", "/api/settings", None),
+    ("speaker_profiles", "api.routers.speaker_profiles.SpeakerProfile.get_all", "GET", "/api/speaker-profiles", None),
+    ("transformations", "api.routers.transformations.Transformation.get_all", "GET", "/api/transformations", None),
+]
+
+
+@pytest.mark.parametrize(
+    "router, target, method, url, body",
+    CASES,
+    ids=[case[0] for case in CASES],
+)
+def test_configuration_error_maps_to_422(client, router, target, method, url, body):
+    with patch(target, new=AsyncMock(side_effect=_boom)):
+        response = client.request(method, url, json=body)
+
+    assert response.status_code == 422, (
+        f"{router}: expected ConfigurationError to reach the global handler "
+        f"(422), got {response.status_code}: {response.text}"
+    )
+    assert response.json()["detail"] == CONFIG_ERROR_MESSAGE
+
+
+class TestNotFoundErrorPropagation:
+    """NotFoundError raised by the domain layer maps to 404 where the router
+    has no dedicated `except NotFoundError` arm (it used to become a 500)."""
+
+    def test_get_credential_missing_returns_404(self, client):
+        with patch(
+            "api.routers.credentials.Credential.get",
+            new=AsyncMock(side_effect=NotFoundError("Credential not found")),
+        ):
+            response = client.get("/api/credentials/credential:missing")
+
+        assert response.status_code == 404
+        assert response.json()["detail"] == "Credential not found"
+
+
+class TestUntypedExceptionsStillSanitized:
+    """The final `except Exception` arm must keep catching untyped errors and
+    returning a fixed, sanitized 500 (never the raw exception text)."""
+
+    SECRET = "password authentication failed for db-primary"
+
+    def test_runtime_error_stays_generic_500(self, client):
+        with patch(
+            "api.routers.sources.repo_query",
+            new=AsyncMock(side_effect=RuntimeError(self.SECRET)),
+        ):
+            response = client.get("/api/sources")
+
+        assert response.status_code == 500
+        assert self.SECRET not in response.text
+        assert response.json()["detail"] == "Error fetching sources"

From 11ca9c138c6c1c5ac2ad975141a0fbe35a41ba0e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 19:55:46 -0300
Subject: [PATCH 183/345] refactor(api): single context-building implementation
 (#1079)

Consolidate the three copies of context assembly into
open_notebook/utils/context_builder.py:

- POST /api/chat/context now delegates to build_notebook_context()
  (same request/response shapes, same string-matching config semantics)
- The source-chat graph now calls build_source_context() instead of the
  495-line generalized ContextBuilder class, which had exactly one
  caller and whose notebook/notes/priority-config flexibility was dead
- POST /api/notebooks/{notebook_id}/context removed: it duplicated
  /api/chat/context with a slightly different envelope and had zero
  callers (frontend, docs, tests)

Behavior is pinned by new characterization tests written before the
refactor (tests/test_context_endpoint_characterization.py) plus unit
tests for build_source_context.
---
 CHANGELOG.md                                  |   2 +
 api/main.py                                   |   2 -
 api/models.py                                 |  24 -
 api/routers/chat.py                           | 107 +--
 api/routers/context.py                        | 132 ----
 docs/7-DEVELOPMENT/api-reference.md           |   2 +-
 docs/7-DEVELOPMENT/content-processing.md      |   7 +-
 open_notebook/graphs/source_chat.py           |  19 +-
 open_notebook/utils/__init__.py               |   2 +-
 open_notebook/utils/context_builder.py        | 641 +++++-------------
 .../test_context_endpoint_characterization.py | 229 +++++++
 tests/test_typed_exceptions_reach_handlers.py |   1 -
 tests/test_utils.py                           | 110 ++-
 13 files changed, 514 insertions(+), 764 deletions(-)
 delete mode 100644 api/routers/context.py
 create mode 100644 tests/test_context_endpoint_characterization.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c4087ae6..91d73455 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Context building consolidated into a single implementation (`open_notebook/utils/context_builder.py`): the copy-pasted source/note assembly loops behind `POST /api/chat/context` and the removed notebook-context endpoint, plus the 495-line generalized `ContextBuilder` class (whose only caller was the source-chat graph), are now two focused functions — `build_notebook_context()` (backs `POST /api/chat/context`, unchanged request/response shapes and config semantics) and `build_source_context()` (backs the source-chat graph, same context shape and 50k-token budget). Pinned by new characterization tests — no behavior change for the surviving paths
+- **Removed** `POST /api/notebooks/{notebook_id}/context`: it duplicated `POST /api/chat/context` (same assembly logic, slightly different response envelope) and had zero callers — frontend, docs and tests only use `/api/chat/context`. If you called it programmatically, switch to `POST /api/chat/context` (body: `{notebook_id, context_config}`; response fields: `context.sources`/`context.notes`, `token_count`, `char_count`)
 - Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests
 - Frontend convention cleanup (no user-facing change): hook files unified to kebab-case (`useNotebookChat.ts`/`useSourceChat.ts` → `use-notebook-chat.ts`/`use-source-chat.ts`), `src/components/source/` merged into `src/components/sources/`, the localStorage auth-token parsing ritual extracted into a single `getAuthToken()` helper (`src/lib/auth-token.ts`), and non-streaming raw `fetch` calls routed through `apiClient` (podcast audio download, auth-status check). SSE/streaming paths and the login/checkAuth credential probes deliberately keep raw `fetch`
 - Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly
diff --git a/api/main.py b/api/main.py
index 24b206a6..2e7aa9e8 100644
--- a/api/main.py
+++ b/api/main.py
@@ -19,7 +19,6 @@ from api.routers import (
     auth,
     chat,
     config,
-    context,
     credentials,
     embedding,
     embedding_rebuild,
@@ -382,7 +381,6 @@ app.include_router(
     embedding_rebuild.router, prefix="/api/embeddings", tags=["embeddings"]
 )
 app.include_router(settings.router, prefix="/api", tags=["settings"])
-app.include_router(context.router, prefix="/api", tags=["context"])
 app.include_router(sources.router, prefix="/api", tags=["sources"])
 app.include_router(insights.router, prefix="/api", tags=["insights"])
 app.include_router(commands_router.router, prefix="/api", tags=["commands"])
diff --git a/api/models.py b/api/models.py
index 5c7b7302..3e046cf5 100644
--- a/api/models.py
+++ b/api/models.py
@@ -386,30 +386,6 @@ class SourceListResponse(BaseModel):
     processing_info: Optional[Dict[str, Any]] = None
 
 
-# Context API models
-class ContextConfig(BaseModel):
-    sources: Dict[str, str] = Field(
-        default_factory=dict, description="Source inclusion config {source_id: level}"
-    )
-    notes: Dict[str, str] = Field(
-        default_factory=dict, description="Note inclusion config {note_id: level}"
-    )
-
-
-class ContextRequest(BaseModel):
-    notebook_id: str = Field(..., description="Notebook ID to get context for")
-    context_config: Optional[ContextConfig] = Field(
-        None, description="Context configuration"
-    )
-
-
-class ContextResponse(BaseModel):
-    notebook_id: str
-    sources: List[Dict[str, Any]] = Field(..., description="Source context data")
-    notes: List[Dict[str, Any]] = Field(..., description="Note context data")
-    total_tokens: Optional[int] = Field(None, description="Estimated token count")
-
-
 # Insights API models
 class SourceInsightResponse(BaseModel):
     id: str
diff --git a/api/routers/chat.py b/api/routers/chat.py
index 19e1f05e..5cdd732a 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -12,21 +12,16 @@ from api.routers._chat_shared import (
     SuccessResponse,
     extract_chat_messages,
     get_session_or_404,
-    normalize_record_id,
 )
 from open_notebook.database.repository import ensure_record_id, repo_query
-from open_notebook.domain.notebook import (
-    ChatSession,
-    Note,
-    Notebook,
-    Source,
-    SourceInsight,
-)
+from open_notebook.domain.notebook import ChatSession, Notebook
 from open_notebook.exceptions import (
     NotFoundError,
     OpenNotebookError,
 )
 from open_notebook.graphs.chat import graph as chat_graph
+from open_notebook.utils import token_count
+from open_notebook.utils.context_builder import build_notebook_context
 from open_notebook.utils.graph_utils import get_session_message_count
 
 router = APIRouter()
@@ -402,100 +397,12 @@ async def build_context(request: BuildContextRequest):
         if not notebook:
             raise HTTPException(status_code=404, detail="Notebook not found")
 
-        context_data: dict[str, list[dict[str, str]]] = {"sources": [], "notes": []}
-        total_content = ""
+        context_data, total_content = await build_notebook_context(
+            notebook, request.context_config
+        )
 
-        # Process context configuration if provided
-        if request.context_config:
-            # Process sources
-            for source_id, status in request.context_config.get("sources", {}).items():
-                if "not in" in status:
-                    continue
-
-                try:
-                    # Add table prefix if not present
-                    full_source_id = normalize_record_id("source", source_id)
-
-                    try:
-                        source = await Source.get(full_source_id)
-                    except Exception:
-                        continue
-
-                    if "insights" in status:
-                        source_context = await source.get_context(context_size="short")
-                        context_data["sources"].append(source_context)
-                        total_content += str(source_context)
-                    elif "full content" in status:
-                        source_context = await source.get_context(context_size="long")
-                        context_data["sources"].append(source_context)
-                        total_content += str(source_context)
-                except Exception as e:
-                    logger.warning(f"Error processing source {source_id}: {str(e)}")
-                    continue
-
-            # Process notes
-            for note_id, status in request.context_config.get("notes", {}).items():
-                if "not in" in status:
-                    continue
-
-                try:
-                    # Add table prefix if not present
-                    full_note_id = normalize_record_id("note", note_id)
-                    note = await Note.get(full_note_id)
-                    if not note:
-                        continue
-
-                    if "full content" in status:
-                        note_context = note.get_context(context_size="long")
-                        context_data["notes"].append(note_context)
-                        total_content += str(note_context)
-                except Exception as e:
-                    logger.warning(f"Error processing note {note_id}: {str(e)}")
-                    continue
-        else:
-            # Default behavior - include all sources and notes with short context
-            sources = await notebook.get_sources()
-            try:
-                insights_by_source = await SourceInsight.get_for_sources(
-                    [source.id for source in sources if source.id]
-                )
-            except Exception as e:
-                # Match the per-source fallback below: a hiccup fetching
-                # insights shouldn't fail the whole context request.
-                logger.warning(f"Error batch-fetching source insights: {str(e)}")
-                insights_by_source = {}
-            for source in sources:
-                try:
-                    source_context = await source.get_context(
-                        context_size="short",
-                        insights=insights_by_source.get(source.id or "", []),
-                    )
-                    context_data["sources"].append(source_context)
-                    total_content += str(source_context)
-                except Exception as e:
-                    logger.warning(f"Error processing source {source.id}: {str(e)}")
-                    continue
-
-            notes = await notebook.get_notes()
-            for note in notes:
-                try:
-                    note_context = note.get_context(context_size="short")
-                    context_data["notes"].append(note_context)
-                    total_content += str(note_context)
-                except Exception as e:
-                    logger.warning(f"Error processing note {note.id}: {str(e)}")
-                    continue
-
-        # Calculate character and token counts
         char_count = len(total_content)
-        # Use token count utility if available
-        try:
-            from open_notebook.utils import token_count
-
-            estimated_tokens = token_count(total_content) if total_content else 0
-        except ImportError:
-            # Fallback to simple estimation
-            estimated_tokens = char_count // 4
+        estimated_tokens = token_count(total_content) if total_content else 0
 
         return BuildContextResponse(
             context=context_data, token_count=estimated_tokens, char_count=char_count
diff --git a/api/routers/context.py b/api/routers/context.py
deleted file mode 100644
index d5625551..00000000
--- a/api/routers/context.py
+++ /dev/null
@@ -1,132 +0,0 @@
-from fastapi import APIRouter, HTTPException
-from loguru import logger
-
-from api.models import ContextRequest, ContextResponse
-from open_notebook.domain.notebook import Note, Notebook, Source, SourceInsight
-from open_notebook.exceptions import (
-    InvalidInputError,
-    OpenNotebookError,
-)
-from open_notebook.utils import token_count
-
-router = APIRouter()
-
-
-@router.post("/notebooks/{notebook_id}/context", response_model=ContextResponse)
-async def get_notebook_context(notebook_id: str, context_request: ContextRequest):
-    """Get context for a notebook based on configuration."""
-    try:
-        # Verify notebook exists
-        notebook = await Notebook.get(notebook_id)
-        if not notebook:
-            raise HTTPException(status_code=404, detail="Notebook not found")
-
-        context_data: dict[str, list[dict[str, str]]] = {"note": [], "source": []}
-        total_content = ""
-
-        # Process context configuration if provided
-        if context_request.context_config:
-            # Process sources
-            for source_id, status in context_request.context_config.sources.items():
-                if "not in" in status:
-                    continue
-
-                try:
-                    # Add table prefix if not present
-                    full_source_id = (
-                        source_id
-                        if source_id.startswith("source:")
-                        else f"source:{source_id}"
-                    )
-
-                    try:
-                        source = await Source.get(full_source_id)
-                    except Exception:
-                        continue
-
-                    if "insights" in status:
-                        source_context = await source.get_context(context_size="short")
-                        context_data["source"].append(source_context)
-                        total_content += str(source_context)
-                    elif "full content" in status:
-                        source_context = await source.get_context(context_size="long")
-                        context_data["source"].append(source_context)
-                        total_content += str(source_context)
-                except Exception as e:
-                    logger.warning(f"Error processing source {source_id}: {str(e)}")
-                    continue
-
-            # Process notes
-            for note_id, status in context_request.context_config.notes.items():
-                if "not in" in status:
-                    continue
-
-                try:
-                    # Add table prefix if not present
-                    full_note_id = (
-                        note_id if note_id.startswith("note:") else f"note:{note_id}"
-                    )
-                    note = await Note.get(full_note_id)
-                    if not note:
-                        continue
-
-                    if "full content" in status:
-                        note_context = note.get_context(context_size="long")
-                        context_data["note"].append(note_context)
-                        total_content += str(note_context)
-                except Exception as e:
-                    logger.warning(f"Error processing note {note_id}: {str(e)}")
-                    continue
-        else:
-            # Default behavior - include all sources and notes with short context
-            sources = await notebook.get_sources()
-            try:
-                insights_by_source = await SourceInsight.get_for_sources(
-                    [source.id for source in sources if source.id]
-                )
-            except Exception as e:
-                # Match the per-source fallback below: a hiccup fetching
-                # insights shouldn't fail the whole context request.
-                logger.warning(f"Error batch-fetching source insights: {str(e)}")
-                insights_by_source = {}
-            for source in sources:
-                try:
-                    source_context = await source.get_context(
-                        context_size="short",
-                        insights=insights_by_source.get(source.id or "", []),
-                    )
-                    context_data["source"].append(source_context)
-                    total_content += str(source_context)
-                except Exception as e:
-                    logger.warning(f"Error processing source {source.id}: {str(e)}")
-                    continue
-
-            notes = await notebook.get_notes()
-            for note in notes:
-                try:
-                    note_context = note.get_context(context_size="short")
-                    context_data["note"].append(note_context)
-                    total_content += str(note_context)
-                except Exception as e:
-                    logger.warning(f"Error processing note {note.id}: {str(e)}")
-                    continue
-
-        # Calculate estimated token count
-        estimated_tokens = token_count(total_content) if total_content else 0
-
-        return ContextResponse(
-            notebook_id=notebook_id,
-            sources=context_data["source"],
-            notes=context_data["note"],
-            total_tokens=estimated_tokens,
-        )
-
-    except HTTPException:
-        raise
-    except InvalidInputError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-    except OpenNotebookError:
-        raise
-    except Exception as e:
-        logger.error(f"Error getting context for notebook {notebook_id}: {str(e)}")
-        raise HTTPException(status_code=500, detail=f"Error getting context: {str(e)}")
diff --git a/docs/7-DEVELOPMENT/api-reference.md b/docs/7-DEVELOPMENT/api-reference.md
index 451f6742..8628cdfe 100644
--- a/docs/7-DEVELOPMENT/api-reference.md
+++ b/docs/7-DEVELOPMENT/api-reference.md
@@ -60,7 +60,7 @@ Instead of memorizing endpoints, use the interactive API docs:
 **Chat** - Conversational AI interface
 - `GET/POST /chat/sessions` - Manage chat sessions
 - `POST /chat/execute` - Send message and get response
-- `POST /chat/context/build` - Prepare context for chat
+- `POST /chat/context` - Prepare context for chat
 
 **Search** - Find content by text or semantic similarity
 - `POST /search` - Full-text or vector search
diff --git a/docs/7-DEVELOPMENT/content-processing.md b/docs/7-DEVELOPMENT/content-processing.md
index 47ace643..82f7c9f4 100644
--- a/docs/7-DEVELOPMENT/content-processing.md
+++ b/docs/7-DEVELOPMENT/content-processing.md
@@ -35,10 +35,11 @@ All embedding is fire-and-forget through the surreal-commands worker — nothing
 
 ## Context building (`utils/context_builder.py`)
 
-`ContextBuilder` assembles LLM context from selected sources/notes/insights under a token budget:
+The single implementation behind both context consumers:
 
-- Each `ContextItem` counts its own tokens on construction; `build()` adds items in priority order (default weights: source 100 > insight 75 > note 50, see `ContextConfig`) and stops once `max_tokens` is exceeded (no prorating).
-- Fetching is lazy (nothing is loaded until `build()`), and every call re-fetches — there is no cache layer.
+- `build_notebook_context()` backs `POST /api/chat/context` (chat panel + podcast generation): it assembles source/note contexts from the inclusion config, whose status strings are matched textually ("not in" skips, "insights" → short context, "full content" → long context). Without a config, every source and note is included with its short context. Per-item failures are logged and skipped.
+- `build_source_context()` backs the source-chat graph: one source's short context plus its insights, truncated to a token budget by dropping insights (last-fetched first).
+- Every call re-fetches — there is no cache layer.
 - Token counting uses `o200k_base` via tiktoken and is an estimate (±5-10% vs. the actual model); `token_count()` falls back to a coarse estimate if tiktoken is unavailable.
 
 ## Encryption (`utils/encryption.py`) {#encryption}
diff --git a/open_notebook/graphs/source_chat.py b/open_notebook/graphs/source_chat.py
index fb9047c8..4e2dfa6f 100644
--- a/open_notebook/graphs/source_chat.py
+++ b/open_notebook/graphs/source_chat.py
@@ -15,7 +15,7 @@ from open_notebook.config import LANGGRAPH_CHECKPOINT_FILE
 from open_notebook.domain.notebook import Source, SourceInsight
 from open_notebook.exceptions import OpenNotebookError
 from open_notebook.utils import clean_thinking_content
-from open_notebook.utils.context_builder import ContextBuilder
+from open_notebook.utils.context_builder import build_source_context
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
 
@@ -37,7 +37,7 @@ def call_model_with_source_context(
     Main function that builds source context and calls the model.
 
     This function:
-    1. Uses ContextBuilder to build source-specific context
+    1. Uses build_source_context to build source-specific context
     2. Applies the source_chat Jinja2 prompt template
     3. Handles model provisioning with override support
     4. Tracks context indicators for referenced insights/content
@@ -58,19 +58,18 @@ def _call_model_with_source_context_inner(
     if not source_id:
         raise ValueError("source_id is required in state")
 
-    # Build source context using ContextBuilder (run async code in new loop)
+    # Build source context using build_source_context (run async code in new loop)
     def build_context():
         """Build context in a new event loop"""
         new_loop = asyncio.new_event_loop()
         try:
             asyncio.set_event_loop(new_loop)
-            context_builder = ContextBuilder(
-                source_id=source_id,
-                include_insights=True,
-                include_notes=False,  # Focus on source-specific content
-                max_tokens=50000,  # Reasonable limit for source context
+            return new_loop.run_until_complete(
+                build_source_context(
+                    source_id=source_id,
+                    max_tokens=50000,  # Reasonable limit for source context
+                )
             )
-            return new_loop.run_until_complete(context_builder.build())
         finally:
             new_loop.close()
             asyncio.set_event_loop(None)
@@ -192,7 +191,7 @@ def _format_source_context(context_data: Dict) -> str:
     Format the context data into a readable string for the prompt.
 
     Args:
-        context_data: Context data from ContextBuilder
+        context_data: Context data from build_source_context
 
     Returns:
         Formatted context string
diff --git a/open_notebook/utils/__init__.py b/open_notebook/utils/__init__.py
index 17e2b10b..72dd0945 100644
--- a/open_notebook/utils/__init__.py
+++ b/open_notebook/utils/__init__.py
@@ -2,7 +2,7 @@
 Utils package for Open Notebook.
 
 To avoid circular imports, import functions directly:
-- from open_notebook.utils.context_builder import ContextBuilder
+- from open_notebook.utils.context_builder import build_notebook_context, build_source_context
 - from open_notebook.utils import token_count, compare_versions
 - from open_notebook.utils.chunking import chunk_text, detect_content_type, ContentType
 - from open_notebook.utils.embedding import generate_embedding, generate_embeddings
diff --git a/open_notebook/utils/context_builder.py b/open_notebook/utils/context_builder.py
index ed03712f..7d3717ca 100644
--- a/open_notebook/utils/context_builder.py
+++ b/open_notebook/utils/context_builder.py
@@ -1,495 +1,208 @@
-"""
-Generic ContextBuilder for the Open Notebook project.
+"""Context building for chat and podcast generation.
 
-This module provides a flexible ContextBuilder class that can handle any parameters
-and build context from sources, notebooks, insights, and notes.
+This is the single implementation behind:
+
+- ``POST /api/chat/context`` (`api/routers/chat.py`) — assembles notebook
+  context from a source/note inclusion config, via
+  :func:`build_notebook_context`.
+- the source-chat graph (`open_notebook/graphs/source_chat.py`) — assembles
+  a single source plus its insights under a token budget, via
+  :func:`build_source_context`.
+
+The inclusion config uses string matching on human-readable status values
+("not in context", "insights", "full content"). That protocol is shared with
+the frontend — do not change it here.
 """
 
 from __future__ import annotations
 
-from dataclasses import dataclass
-from typing import Any, Dict, List, Literal, Optional
+from typing import Any, Dict, Optional, Tuple
 
 from loguru import logger
 
-from open_notebook.domain.notebook import Note, Notebook, Source
+from open_notebook.domain.notebook import (
+    Note,
+    Notebook,
+    Source,
+    SourceInsight,
+)
 from open_notebook.exceptions import DatabaseOperationError, NotFoundError
 
 from .token_utils import token_count
 
 
-@dataclass
-class ContextItem:
-    """Represents a single item in the context."""
-
-    id: str
-    type: Literal["source", "note", "insight"]
-    content: Dict[str, Any]
-    priority: int = 0
-    token_count: Optional[int] = None
-
-    def __post_init__(self):
-        """Calculate token count for the content if not provided."""
-        if self.token_count is None:
-            content_str = str(self.content)
-            self.token_count = token_count(content_str)
-
-
-@dataclass
-class ContextConfig:
-    """Configuration for context building."""
-
-    sources: Optional[Dict[str, str]] = None  # {source_id: inclusion_level}
-    notes: Optional[Dict[str, str]] = None  # {note_id: inclusion_level}
-    include_insights: bool = True
-    include_notes: bool = True
-    max_tokens: Optional[int] = None
-    priority_weights: Optional[Dict[str, int]] = None  # {type: weight}
-
-    def __post_init__(self):
-        """Initialize default values."""
-        if self.sources is None:
-            self.sources = {}
-        if self.notes is None:
-            self.notes = {}
-        if self.priority_weights is None:
-            self.priority_weights = {"source": 100, "note": 50, "insight": 75}
-
-
-class ContextBuilder:
-    """
-    Generic ContextBuilder that can handle any parameters and build context
-    from sources, notebooks, insights, and notes.
-    """
-
-    def __init__(self, **kwargs):
-        """
-        Initialize ContextBuilder with flexible parameters.
-
-        Supported parameters:
-        - source_id: str - Include specific source
-        - notebook_id: str - Include notebook content
-        - include_insights: bool - Include source insights
-        - include_notes: bool - Include notes
-        - context_config: ContextConfig - Custom context configuration
-        - max_tokens: int - Maximum token limit
-        - priority_order: List[str] - Custom priority order
-        """
-        # Store all parameters for flexibility
-        self.params = kwargs
-
-        # Extract commonly used parameters
-        self.source_id: Optional[str] = kwargs.get("source_id")
-        self.notebook_id: Optional[str] = kwargs.get("notebook_id")
-        self.include_insights: bool = kwargs.get("include_insights", True)
-        self.include_notes: bool = kwargs.get("include_notes", True)
-        self.max_tokens: Optional[int] = kwargs.get("max_tokens")
-
-        # Context configuration
-        context_config_arg: Optional[ContextConfig] = kwargs.get("context_config")
-        self.context_config: ContextConfig
-        if context_config_arg is None:
-            self.context_config = ContextConfig(
-                include_insights=self.include_insights,
-                include_notes=self.include_notes,
-                max_tokens=self.max_tokens,
-            )
-        else:
-            self.context_config = context_config_arg
-
-        # Items storage
-        self.items: List[ContextItem] = []
-
-        logger.debug(f"ContextBuilder initialized with params: {list(kwargs.keys())}")
-
-    async def build(self) -> Dict[str, Any]:
-        """
-        Build context based on provided parameters.
-
-        Returns:
-            Dict containing the built context with metadata
-        """
-        try:
-            logger.info("Starting context building")
-
-            # Clear existing items
-            self.items = []
-
-            # Build context based on parameters
-            if self.source_id:
-                await self._add_source_context(self.source_id)
-
-            if self.notebook_id:
-                await self._add_notebook_context(self.notebook_id)
-
-            # Process any additional custom parameters
-            await self._process_custom_params()
-
-            # Apply post-processing
-            self.remove_duplicates()
-            self.prioritize()
-
-            if self.max_tokens:
-                self.truncate_to_fit(self.max_tokens)
-
-            # Format and return response
-            return self._format_response()
-
-        except Exception as e:
-            logger.error(f"Error building context: {str(e)}")
-            raise DatabaseOperationError(f"Failed to build context: {str(e)}")
-
-    async def _add_source_context(
-        self, source_id: str, inclusion_level: str = "insights"
-    ) -> None:
-        """
-        Add source and its insights to context.
-
-        Args:
-            source_id: ID of the source
-            inclusion_level: "insights", "full content", or "not in"
-        """
-        if inclusion_level == "not in":
-            return
-
-        try:
-            # Ensure source ID has table prefix
-            full_source_id = (
-                source_id if source_id.startswith("source:") else f"source:{source_id}"
-            )
-
-            source = await Source.get(full_source_id)
-            if not source:
-                logger.warning(f"Source {source_id} not found")
-                return
-
-            # Determine context size based on inclusion level
-            context_size: Literal["short", "long"] = (
-                "long" if "full content" in inclusion_level else "short"
-            )
-            source_context = await source.get_context(context_size=context_size)
-
-            # Add source item
-            priority = (self.context_config.priority_weights or {}).get("source", 100)
-            item = ContextItem(
-                id=source.id or "",
-                type="source",
-                content=source_context,
-                priority=priority,
-            )
-            self.add_item(item)
-
-            # Add insights if requested and available
-            if self.include_insights and "insights" in inclusion_level:
-                insights = await source.get_insights()
-                for insight in insights:
-                    insight_priority = (self.context_config.priority_weights or {}).get(
-                        "insight", 75
-                    )
-                    insight_item = ContextItem(
-                        id=insight.id or "",
-                        type="insight",
-                        content={
-                            "id": insight.id,
-                            "source_id": source.id,
-                            "insight_type": insight.insight_type,
-                            "content": insight.content,
-                        },
-                        priority=insight_priority,
-                    )
-                    self.add_item(insight_item)
-
-            logger.debug(f"Added source context for {source_id}")
-
-        except NotFoundError:
-            logger.warning(f"Source {source_id} not found")
-        except Exception as e:
-            logger.error(f"Error adding source context for {source_id}: {str(e)}")
-            raise
-
-    async def _add_notebook_context(self, notebook_id: str) -> None:
-        """
-        Add notebook content based on context configuration.
-
-        Args:
-            notebook_id: ID of the notebook
-        """
-        try:
-            notebook = await Notebook.get(notebook_id)
-            if not notebook:
-                raise NotFoundError(f"Notebook {notebook_id} not found")
-
-            # Process sources from context config or get all
-            config_sources = self.context_config.sources
-            if config_sources:
-                for source_id, status in config_sources.items():
-                    await self._add_source_context(source_id, status)
-            else:
-                # Default: get all sources with insights
-                sources = await notebook.get_sources()
-                for source in sources:
-                    if source.id:
-                        await self._add_source_context(source.id, "insights")
-
-            # Process notes from context config or get all
-            if self.include_notes:
-                config_notes = self.context_config.notes
-                if config_notes:
-                    for note_id, status in config_notes.items():
-                        if "not in" not in status:
-                            await self._add_note_context(note_id, status)
-                else:
-                    # Default: get all notes with short content
-                    notes = await notebook.get_notes()
-                    for note in notes:
-                        if note.id:
-                            await self._add_note_context(note.id, "full content")
-
-            logger.debug(f"Added notebook context for {notebook_id}")
-
-        except Exception as e:
-            logger.error(f"Error adding notebook context for {notebook_id}: {str(e)}")
-            raise
-
-    async def _add_note_context(
-        self, note_id: str, inclusion_level: str = "full content"
-    ) -> None:
-        """
-        Add note to context.
-
-        Args:
-            note_id: ID of the note
-            inclusion_level: "full content" or "not in"
-        """
-        if inclusion_level == "not in":
-            return
-
-        try:
-            # Ensure note ID has table prefix
-            full_note_id = note_id if note_id.startswith("note:") else f"note:{note_id}"
-
-            note = await Note.get(full_note_id)
-            if not note:
-                logger.warning(f"Note {note_id} not found")
-                return
-
-            # Get note context
-            context_size: Literal["short", "long"] = (
-                "long" if "full content" in inclusion_level else "short"
-            )
-            note_context = note.get_context(context_size=context_size)
-
-            # Add note item
-            priority = (self.context_config.priority_weights or {}).get("note", 50)
-            item = ContextItem(
-                id=note.id or "", type="note", content=note_context, priority=priority
-            )
-            self.add_item(item)
-
-            logger.debug(f"Added note context for {note_id}")
-
-        except NotFoundError:
-            logger.warning(f"Note {note_id} not found")
-        except Exception as e:
-            logger.error(f"Error adding note context for {note_id}: {str(e)}")
-
-    async def _process_custom_params(self) -> None:
-        """Process any additional custom parameters."""
-        # Hook for future extensions - can be overridden in subclasses
-        # or used to process additional kwargs
-        for key, value in self.params.items():
-            if key.startswith("custom_"):
-                logger.debug(f"Processing custom parameter: {key}={value}")
-                # Custom processing logic can be added here
-
-    def add_item(self, item: ContextItem) -> None:
-        """
-        Add a ContextItem to the builder.
-
-        Args:
-            item: ContextItem to add
-        """
-        self.items.append(item)
-        logger.debug(f"Added item {item.id} with priority {item.priority}")
-
-    def prioritize(self) -> None:
-        """Sort items by priority (higher priority first)."""
-        self.items.sort(key=lambda x: x.priority, reverse=True)
-        logger.debug(f"Prioritized {len(self.items)} items")
-
-    def truncate_to_fit(self, max_tokens: int) -> None:
-        """
-        Remove items if total token count exceeds limit.
-
-        Args:
-            max_tokens: Maximum allowed tokens
-        """
-        if not max_tokens:
-            return
-
-        total_tokens = sum(item.token_count or 0 for item in self.items)
-
-        if total_tokens <= max_tokens:
-            logger.debug(f"Token count {total_tokens} within limit {max_tokens}")
-            return
-
-        logger.info(f"Truncating from {total_tokens} to {max_tokens} tokens")
-
-        # Remove items from the end (lowest priority) until under limit
-        current_tokens = total_tokens
-        removed_count = 0
-
-        while current_tokens > max_tokens and self.items:
-            removed_item = self.items.pop()
-            current_tokens -= removed_item.token_count or 0
-            removed_count += 1
-
-        logger.info(
-            f"Removed {removed_count} items, final token count: {current_tokens}"
-        )
-
-    def remove_duplicates(self) -> None:
-        """Remove duplicate items based on ID."""
-        seen_ids = set()
-        deduplicated_items = []
-
-        for item in self.items:
-            if item.id not in seen_ids:
-                deduplicated_items.append(item)
-                seen_ids.add(item.id)
-
-        removed_count = len(self.items) - len(deduplicated_items)
-        self.items = deduplicated_items
-
-        if removed_count > 0:
-            logger.debug(f"Removed {removed_count} duplicate items")
-
-    def _format_response(self) -> Dict[str, Any]:
-        """
-        Format the final response.
-
-        Returns:
-            Formatted context response
-        """
-        # Group items by type
-        sources = []
-        notes = []
-        insights = []
-
-        for item in self.items:
-            if item.type == "source":
-                sources.append(item.content)
-            elif item.type == "note":
-                notes.append(item.content)
-            elif item.type == "insight":
-                insights.append(item.content)
-
-        # Calculate total tokens
-        total_tokens = sum(item.token_count or 0 for item in self.items)
-
-        response = {
-            "sources": sources,
-            "notes": notes,
-            "insights": insights,
-            "total_tokens": total_tokens,
-            "total_items": len(self.items),
-            "metadata": {
-                "source_count": len(sources),
-                "note_count": len(notes),
-                "insight_count": len(insights),
-                "config": {
-                    "include_insights": self.include_insights,
-                    "include_notes": self.include_notes,
-                    "max_tokens": self.max_tokens,
-                },
-            },
-        }
-
-        # Add notebook_id if provided
-        if self.notebook_id:
-            response["notebook_id"] = self.notebook_id
-
-        logger.info(
-            f"Built context with {len(self.items)} items, {total_tokens} tokens"
-        )
-
-        return response
-
-
-# Convenience functions for common use cases
+def _ensure_prefix(table: str, record_id: str) -> str:
+    """Ensure a record ID carries its table prefix (`table:id`)."""
+    prefix = f"{table}:"
+    return record_id if record_id.startswith(prefix) else f"{prefix}{record_id}"
 
 
 async def build_notebook_context(
-    notebook_id: str,
-    context_config: Optional[ContextConfig] = None,
-    max_tokens: Optional[int] = None,
-) -> Dict[str, Any]:
-    """
-    Build context for a notebook.
+    notebook: Notebook,
+    context_config: Optional[Dict[str, Any]],
+) -> Tuple[Dict[str, list], str]:
+    """Assemble source/note context for a notebook.
 
-    Args:
-        notebook_id: ID of the notebook
-        context_config: Optional context configuration
-        max_tokens: Optional token limit
+    With a config, each entry's status string decides inclusion: "not in"
+    skips it, "insights" includes the short source context, "full content"
+    includes the long context (notes only support "full content"). Without a
+    config, every source and note is included with its short context.
+
+    Failures on individual items are logged and skipped — one broken record
+    never fails the whole request.
 
     Returns:
-        Built context
+        ({"sources": [...], "notes": [...]}, concatenated str() of every
+        included context dict — used for token/char counting).
     """
-    builder = ContextBuilder(
-        notebook_id=notebook_id, context_config=context_config, max_tokens=max_tokens
-    )
-    return await builder.build()
+    context_data: Dict[str, list] = {"sources": [], "notes": []}
+    total_content = ""
+
+    if context_config:
+        for source_id, status in context_config.get("sources", {}).items():
+            if "not in" in status:
+                continue
+
+            try:
+                full_source_id = _ensure_prefix("source", source_id)
+
+                try:
+                    source = await Source.get(full_source_id)
+                except Exception:
+                    continue
+
+                if "insights" in status:
+                    source_context = await source.get_context(context_size="short")
+                    context_data["sources"].append(source_context)
+                    total_content += str(source_context)
+                elif "full content" in status:
+                    source_context = await source.get_context(context_size="long")
+                    context_data["sources"].append(source_context)
+                    total_content += str(source_context)
+            except Exception as e:
+                logger.warning(f"Error processing source {source_id}: {str(e)}")
+                continue
+
+        for note_id, status in context_config.get("notes", {}).items():
+            if "not in" in status:
+                continue
+
+            try:
+                full_note_id = _ensure_prefix("note", note_id)
+                note = await Note.get(full_note_id)
+                if not note:
+                    continue
+
+                if "full content" in status:
+                    note_context = note.get_context(context_size="long")
+                    context_data["notes"].append(note_context)
+                    total_content += str(note_context)
+            except Exception as e:
+                logger.warning(f"Error processing note {note_id}: {str(e)}")
+                continue
+    else:
+        # Default behavior - include all sources and notes with short context
+        sources = await notebook.get_sources()
+        try:
+            insights_by_source = await SourceInsight.get_for_sources(
+                [source.id for source in sources if source.id]
+            )
+        except Exception as e:
+            # Match the per-source fallback below: a hiccup fetching
+            # insights shouldn't fail the whole context request.
+            logger.warning(f"Error batch-fetching source insights: {str(e)}")
+            insights_by_source = {}
+        for source in sources:
+            try:
+                source_context = await source.get_context(
+                    context_size="short",
+                    insights=insights_by_source.get(source.id or "", []),
+                )
+                context_data["sources"].append(source_context)
+                total_content += str(source_context)
+            except Exception as e:
+                logger.warning(f"Error processing source {source.id}: {str(e)}")
+                continue
+
+        notes = await notebook.get_notes()
+        for note in notes:
+            try:
+                note_context = note.get_context(context_size="short")
+                context_data["notes"].append(note_context)
+                total_content += str(note_context)
+            except Exception as e:
+                logger.warning(f"Error processing note {note.id}: {str(e)}")
+                continue
+
+    return context_data, total_content
 
 
 async def build_source_context(
-    source_id: str, include_insights: bool = True, max_tokens: Optional[int] = None
+    source_id: str, max_tokens: Optional[int] = None
 ) -> Dict[str, Any]:
+    """Assemble a single source's short context plus its insights.
+
+    Used by the source-chat graph. If `max_tokens` is given, insights are
+    dropped (last-fetched first) until the total fits — the source itself is
+    always kept.
+
+    Returns a dict with "sources", "notes" (always empty), "insights",
+    "total_tokens", "total_items" and per-type counts in "metadata".
     """
-    Build context for a single source.
+    try:
+        sources: list = []
+        insights: list = []
+        item_tokens: list[int] = []
 
-    Args:
-        source_id: ID of the source
-        include_insights: Whether to include insights
-        max_tokens: Optional token limit
+        try:
+            full_source_id = _ensure_prefix("source", source_id)
+            source = await Source.get(full_source_id)
+        except NotFoundError:
+            source = None
 
-    Returns:
-        Built context
-    """
-    builder = ContextBuilder(
-        source_id=source_id, include_insights=include_insights, max_tokens=max_tokens
-    )
-    return await builder.build()
+        if source:
+            source_context = await source.get_context(context_size="short")
+            sources.append(source_context)
+            item_tokens.append(token_count(str(source_context)))
 
+            for insight in await source.get_insights():
+                insight_content = {
+                    "id": insight.id,
+                    "source_id": source.id,
+                    "insight_type": insight.insight_type,
+                    "content": insight.content,
+                }
+                insights.append(insight_content)
+                item_tokens.append(token_count(str(insight_content)))
+        else:
+            logger.warning(f"Source {source_id} not found")
 
-async def build_mixed_context(
-    source_ids: Optional[List[str]] = None,
-    note_ids: Optional[List[str]] = None,
-    notebook_id: Optional[str] = None,
-    max_tokens: Optional[int] = None,
-) -> Dict[str, Any]:
-    """
-    Build context from mixed sources.
+        # Truncate to the token budget: drop insights from the end (the
+        # source, added first, is dropped only if it alone exceeds the budget).
+        total_tokens = sum(item_tokens)
+        if max_tokens:
+            while total_tokens > max_tokens and item_tokens:
+                total_tokens -= item_tokens.pop()
+                if insights:
+                    insights.pop()
+                else:
+                    sources.pop()
 
-    Args:
-        source_ids: List of source IDs
-        note_ids: List of note IDs
-        notebook_id: Optional notebook ID
-        max_tokens: Optional token limit
+        total_items = len(sources) + len(insights)
+        logger.info(f"Built context with {total_items} items, {total_tokens} tokens")
 
-    Returns:
-        Built context
-    """
-    context_config = ContextConfig(max_tokens=max_tokens)
-
-    # Configure sources
-    if source_ids:
-        context_config.sources = {sid: "insights" for sid in source_ids}
-
-    # Configure notes
-    if note_ids:
-        context_config.notes = {nid: "full content" for nid in note_ids}
-
-    builder = ContextBuilder(
-        notebook_id=notebook_id, context_config=context_config, max_tokens=max_tokens
-    )
-    return await builder.build()
+        return {
+            "sources": sources,
+            "notes": [],
+            "insights": insights,
+            "total_tokens": total_tokens,
+            "total_items": total_items,
+            "metadata": {
+                "source_count": len(sources),
+                "note_count": 0,
+                "insight_count": len(insights),
+            },
+        }
+    except Exception as e:
+        logger.error(f"Error building context: {str(e)}")
+        raise DatabaseOperationError(f"Failed to build context: {str(e)}")
diff --git a/tests/test_context_endpoint_characterization.py b/tests/test_context_endpoint_characterization.py
new file mode 100644
index 00000000..b5957220
--- /dev/null
+++ b/tests/test_context_endpoint_characterization.py
@@ -0,0 +1,229 @@
+"""Characterization tests for POST /api/chat/context.
+
+These pin down the exact response shape and the string-matching config
+semantics ("not in" skips, "insights" -> short context, "full content" ->
+long context) before the context-building loop is extracted out of the
+router into open_notebook/utils/context_builder.py. They must pass
+unchanged before and after the refactor.
+
+DB access is mocked following the style of
+tests/test_chat_routers_characterization.py.
+"""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _notebook(**overrides):
+    defaults = dict(id="notebook:1", name="My Notebook")
+    defaults.update(overrides)
+    nb = SimpleNamespace(**defaults)
+    nb.get_sources = AsyncMock(return_value=[])
+    nb.get_notes = AsyncMock(return_value=[])
+    return nb
+
+
+def _source(source_id="source:s1", context=None):
+    src = SimpleNamespace(id=source_id)
+    src.get_context = AsyncMock(
+        return_value=context if context is not None else {"id": source_id, "title": "T"}
+    )
+    return src
+
+
+def _note(note_id="note:n1", context=None):
+    note = SimpleNamespace(id=note_id)
+    # Note.get_context is synchronous in the router code.
+    note.get_context = MagicMock(
+        return_value=context if context is not None else {"id": note_id, "title": "N"}
+    )
+    return note
+
+
+# Patch the domain classes at their definition site so the tests are
+# independent of which module hosts the context-building loop.
+PATCH_NOTEBOOK = "open_notebook.domain.notebook.Notebook.get"
+PATCH_SOURCE = "open_notebook.domain.notebook.Source.get"
+PATCH_NOTE = "open_notebook.domain.notebook.Note.get"
+PATCH_INSIGHTS = "open_notebook.domain.notebook.SourceInsight.get_for_sources"
+
+
+@pytest.mark.asyncio
+async def test_config_string_matching_semantics(client):
+    """'not in' skips, 'insights' -> short, 'full content' -> long."""
+    source_short = _source("source:s2", {"id": "source:s2", "insights": ["i"]})
+    source_long = _source("source:s3", {"id": "source:s3", "full_text": "body"})
+    note_full = _note("note:n2", {"id": "note:n2", "content": "note body"})
+
+    async def get_source(full_id):
+        return {"source:s2": source_short, "source:s3": source_long}[full_id]
+
+    with (
+        patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=_notebook())),
+        patch(PATCH_SOURCE, new=AsyncMock(side_effect=get_source)),
+        patch(PATCH_NOTE, new=AsyncMock(return_value=note_full)),
+    ):
+        response = client.post(
+            "/api/chat/context",
+            json={
+                "notebook_id": "notebook:1",
+                "context_config": {
+                    "sources": {
+                        "s1": "not in context",
+                        "s2": "insights",
+                        "s3": "full content",
+                    },
+                    "notes": {"n1": "not in context", "n2": "full content"},
+                },
+            },
+        )
+
+    assert response.status_code == 200
+    body = response.json()
+    assert body["context"]["sources"] == [
+        {"id": "source:s2", "insights": ["i"]},
+        {"id": "source:s3", "full_text": "body"},
+    ]
+    assert body["context"]["notes"] == [{"id": "note:n2", "content": "note body"}]
+
+    # "insights" -> short context, "full content" -> long context
+    source_short.get_context.assert_awaited_once_with(context_size="short")
+    source_long.get_context.assert_awaited_once_with(context_size="long")
+    note_full.get_context.assert_called_once_with(context_size="long")
+
+    # char_count is the length of the concatenated str() of every context dict
+    expected_content = (
+        str({"id": "source:s2", "insights": ["i"]})
+        + str({"id": "source:s3", "full_text": "body"})
+        + str({"id": "note:n2", "content": "note body"})
+    )
+    assert body["char_count"] == len(expected_content)
+    assert isinstance(body["token_count"], int)
+    assert body["token_count"] > 0
+
+
+@pytest.mark.asyncio
+async def test_config_bare_ids_get_table_prefix(client):
+    """Bare ids are prefixed with 'source:' / 'note:' before lookup."""
+    source_get = AsyncMock(return_value=_source())
+    note_get = AsyncMock(return_value=_note())
+
+    with (
+        patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=_notebook())),
+        patch(PATCH_SOURCE, new=source_get),
+        patch(PATCH_NOTE, new=note_get),
+    ):
+        response = client.post(
+            "/api/chat/context",
+            json={
+                "notebook_id": "notebook:1",
+                "context_config": {
+                    "sources": {"abc": "insights"},
+                    "notes": {"def": "full content"},
+                },
+            },
+        )
+
+    assert response.status_code == 200
+    source_get.assert_awaited_once_with("source:abc")
+    note_get.assert_awaited_once_with("note:def")
+
+
+@pytest.mark.asyncio
+async def test_config_missing_source_is_skipped(client):
+    """A source lookup failure skips that source, not the whole request."""
+    ok_source = _source("source:ok")
+
+    async def get_source(full_id):
+        if full_id == "source:missing":
+            raise Exception("not found")
+        return ok_source
+
+    with (
+        patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=_notebook())),
+        patch(PATCH_SOURCE, new=AsyncMock(side_effect=get_source)),
+    ):
+        response = client.post(
+            "/api/chat/context",
+            json={
+                "notebook_id": "notebook:1",
+                "context_config": {
+                    "sources": {"missing": "insights", "ok": "insights"},
+                    "notes": {},
+                },
+            },
+        )
+
+    assert response.status_code == 200
+    assert response.json()["context"]["sources"] == [{"id": "source:ok", "title": "T"}]
+
+
+@pytest.mark.asyncio
+async def test_empty_config_defaults_to_all_short_contexts(client):
+    """Falsy context_config -> every source (batched insights) and note, short."""
+    src = _source("source:s1", {"id": "source:s1", "title": "S"})
+    note = _note("note:n1", {"id": "note:n1", "title": "N"})
+    notebook = _notebook()
+    notebook.get_sources = AsyncMock(return_value=[src])
+    notebook.get_notes = AsyncMock(return_value=[note])
+    insights = [SimpleNamespace(id="source_insight:1")]
+
+    with (
+        patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=notebook)),
+        patch(
+            PATCH_INSIGHTS,
+            new=AsyncMock(return_value={"source:s1": insights}),
+        ),
+    ):
+        response = client.post(
+            "/api/chat/context",
+            json={"notebook_id": "notebook:1", "context_config": {}},
+        )
+
+    assert response.status_code == 200
+    body = response.json()
+    assert body["context"]["sources"] == [{"id": "source:s1", "title": "S"}]
+    assert body["context"]["notes"] == [{"id": "note:n1", "title": "N"}]
+    src.get_context.assert_awaited_once_with(context_size="short", insights=insights)
+    note.get_context.assert_called_once_with(context_size="short")
+
+
+@pytest.mark.asyncio
+async def test_default_path_survives_insight_batch_failure(client):
+    """A failure batch-fetching insights falls back to empty insights."""
+    src = _source("source:s1")
+    notebook = _notebook()
+    notebook.get_sources = AsyncMock(return_value=[src])
+
+    with (
+        patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=notebook)),
+        patch(PATCH_INSIGHTS, new=AsyncMock(side_effect=Exception("db hiccup"))),
+    ):
+        response = client.post(
+            "/api/chat/context",
+            json={"notebook_id": "notebook:1", "context_config": {}},
+        )
+
+    assert response.status_code == 200
+    src.get_context.assert_awaited_once_with(context_size="short", insights=[])
+
+
+@pytest.mark.asyncio
+async def test_missing_notebook_returns_404(client):
+    with patch(PATCH_NOTEBOOK, new=AsyncMock(return_value=None)):
+        response = client.post(
+            "/api/chat/context",
+            json={"notebook_id": "notebook:missing", "context_config": {}},
+        )
+
+    assert response.status_code == 404
diff --git a/tests/test_typed_exceptions_reach_handlers.py b/tests/test_typed_exceptions_reach_handlers.py
index f09f4ca5..7eaf7e73 100644
--- a/tests/test_typed_exceptions_reach_handlers.py
+++ b/tests/test_typed_exceptions_reach_handlers.py
@@ -47,7 +47,6 @@ CASES = [
     ("notes", "api.routers.notes.Note.get_all", "GET", "/api/notes", None),
     ("models", "api.routers.models.Model.get_all", "GET", "/api/models", None),
     ("commands", "api.routers.commands.CommandService.get_command_status", "GET", "/api/commands/jobs/command:abc", None),
-    ("context", "api.routers.context.Notebook.get", "POST", "/api/notebooks/notebook:1/context", {"notebook_id": "notebook:1"}),
     ("credentials", "api.routers.credentials.Credential.get_all", "GET", "/api/credentials", None),
     ("embedding", "api.routers.embedding.model_manager.get_embedding_model", "POST", "/api/embed", {"item_id": "source:1", "item_type": "source"}),
     ("embedding_rebuild", "api.routers.embedding_rebuild.repo_query", "POST", "/api/embeddings/rebuild", {"mode": "existing"}),
diff --git a/tests/test_utils.py b/tests/test_utils.py
index cf1ebc11..5917fe20 100644
--- a/tests/test_utils.py
+++ b/tests/test_utils.py
@@ -5,6 +5,9 @@ This test suite focuses on testing utility functions that perform actual logic
 without heavy mocking - string processing, validation, and algorithms.
 """
 
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
 import pytest
 
 from open_notebook.utils import (
@@ -16,7 +19,7 @@ from open_notebook.utils import (
     remove_non_printable,
     token_count,
 )
-from open_notebook.utils.context_builder import ContextBuilder, ContextConfig
+from open_notebook.utils.context_builder import build_source_context
 
 # ============================================================================
 # TEST SUITE 1: Text Utilities
@@ -246,39 +249,94 @@ class TestVersionUtilities:
 
 
 # ============================================================================
-# TEST SUITE 4: Context Builder Configuration
+# TEST SUITE 4: Source Context Building
 # ============================================================================
 
 
-class TestContextBuilder:
-    """Test suite for ContextBuilder initialization and configuration."""
+def _mock_source(insights):
+    source = SimpleNamespace(id="source:123")
+    source.get_context = AsyncMock(
+        return_value={"id": "source:123", "title": "T", "full_text": "body"}
+    )
+    source.get_insights = AsyncMock(return_value=insights)
+    return source
 
-    def test_context_config_defaults(self):
-        """Test ContextConfig default values."""
-        config = ContextConfig()
 
-        assert config.sources == {}
-        assert config.notes == {}
-        assert config.include_insights is True
-        assert config.include_notes is True
-        assert config.priority_weights is not None
-        assert "source" in config.priority_weights
-        assert "note" in config.priority_weights
-        assert "insight" in config.priority_weights
+def _insight(insight_id, content="insight content"):
+    return SimpleNamespace(
+        id=insight_id, insight_type="summary", content=content
+    )
 
-    def test_context_builder_initialization(self):
-        """Test ContextBuilder initialization with various params."""
-        builder = ContextBuilder(
-            source_id="source:123",
-            notebook_id="notebook:456",
-            max_tokens=1000,
-            include_insights=False,
+
+class TestBuildSourceContext:
+    """Test suite for build_source_context (used by the source-chat graph)."""
+
+    @pytest.mark.asyncio
+    async def test_source_and_insights_shape(self):
+        """The response carries the source's short context and its insights."""
+        source = _mock_source([_insight("source_insight:1")])
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ) as mock_get:
+            result = await build_source_context("123")
+
+        mock_get.assert_awaited_once_with("source:123")  # bare id gets prefixed
+        source.get_context.assert_awaited_once_with(context_size="short")
+        assert result["sources"] == [
+            {"id": "source:123", "title": "T", "full_text": "body"}
+        ]
+        assert result["insights"] == [
+            {
+                "id": "source_insight:1",
+                "source_id": "source:123",
+                "insight_type": "summary",
+                "content": "insight content",
+            }
+        ]
+        assert result["notes"] == []
+        assert result["total_items"] == 2
+        assert result["total_tokens"] > 0
+        assert result["metadata"] == {
+            "source_count": 1,
+            "note_count": 0,
+            "insight_count": 1,
+        }
+
+    @pytest.mark.asyncio
+    async def test_truncates_insights_to_token_budget(self):
+        """Insights are dropped (last first) when over the token budget."""
+        big = "word " * 500
+        source = _mock_source(
+            [_insight("source_insight:1", big), _insight("source_insight:2", big)]
         )
 
-        assert builder.source_id == "source:123"
-        assert builder.notebook_id == "notebook:456"
-        assert builder.max_tokens == 1000
-        assert builder.include_insights is False
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ):
+            result = await build_source_context("source:123", max_tokens=600)
+
+        # Budget fits the source and the first insight, not the second
+        assert len(result["sources"]) == 1
+        assert [i["id"] for i in result["insights"]] == ["source_insight:1"]
+        assert result["total_tokens"] <= 600
+
+    @pytest.mark.asyncio
+    async def test_missing_source_yields_empty_context(self):
+        """A missing source produces an empty context, not an error."""
+        from open_notebook.exceptions import NotFoundError
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(side_effect=NotFoundError("nope")),
+        ):
+            result = await build_source_context("source:missing")
+
+        assert result["sources"] == []
+        assert result["insights"] == []
+        assert result["total_tokens"] == 0
 
 
 if __name__ == "__main__":

From e81b67bc7b3a44ab47a4d8fac20a69956192df65 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 20:07:52 -0300
Subject: [PATCH 184/345] chore: exclude changelog and lockfiles from cubic
 reviews (#1080)

---
 CHANGELOG.md | 1 +
 cubic.yaml   | 9 +++++++++
 2 files changed, 10 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 91d73455..1afcd66d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- cubic AI review now skips `CHANGELOG.md`, `uv.lock` and `frontend/package-lock.json` (no reviewable logic; preserves the monthly reviewed-line quota)
 - Context building consolidated into a single implementation (`open_notebook/utils/context_builder.py`): the copy-pasted source/note assembly loops behind `POST /api/chat/context` and the removed notebook-context endpoint, plus the 495-line generalized `ContextBuilder` class (whose only caller was the source-chat graph), are now two focused functions — `build_notebook_context()` (backs `POST /api/chat/context`, unchanged request/response shapes and config semantics) and `build_source_context()` (backs the source-chat graph, same context shape and 50k-token budget). Pinned by new characterization tests — no behavior change for the surviving paths
 - **Removed** `POST /api/notebooks/{notebook_id}/context`: it duplicated `POST /api/chat/context` (same assembly logic, slightly different response envelope) and had zero callers — frontend, docs and tests only use `/api/chat/context`. If you called it programmatically, switch to `POST /api/chat/context` (body: `{notebook_id, context_config}`; response fields: `context.sources`/`context.notes`, `token_count`, `char_count`)
 - Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests
diff --git a/cubic.yaml b/cubic.yaml
index 8783e718..58839c26 100644
--- a/cubic.yaml
+++ b/cubic.yaml
@@ -6,6 +6,15 @@
 version: 1
 
 reviews:
+  # Skip files with no reviewable logic to preserve the monthly reviewed-line quota:
+  # CHANGELOG entries are prose (and every PR + rebase re-reviews them); lockfiles
+  # are generated.
+  ignore:
+    files:
+      - 'CHANGELOG.md'
+      - 'uv.lock'
+      - 'frontend/package-lock.json'
+
   custom_instructions: |
     This project follows an issue-first workflow for anything non-trivial: features and
     architecture changes must reference an approved, assigned issue and stay scoped to it.

From 8fb081682323a3653af444b3e8b343bd35a2e528 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 20:12:49 -0300
Subject: [PATCH 185/345] docs: record cubic platform mechanics and PR-batch
 merge playbook (#1086)

---
 CHANGELOG.md                           |  1 +
 cubic.yaml                             | 11 +++++++++++
 docs/7-DEVELOPMENT/maintainer-guide.md | 11 +++++++++++
 3 files changed, 23 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1afcd66d..6276da53 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
 
 ### Added
+- Docs: cubic platform mechanics recorded as comments in `cubic.yaml` (agent limits, config precedence, memory/learning) and a "Merging PR Batches" playbook added to the maintainer guide (squash policy, CHANGELOG conflict resolution, fork rebases, competing-PR checks)
 - New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them
 - Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
 - CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
diff --git a/cubic.yaml b/cubic.yaml
index 58839c26..41a5563f 100644
--- a/cubic.yaml
+++ b/cubic.yaml
@@ -2,6 +2,17 @@
 #
 # cubic AI review settings (settings as code).
 # Docs: https://docs.cubic.dev/configure/cubic-yaml
+#
+# Platform mechanics (verified against docs.cubic.dev, Jul 2026):
+# - Max 5 active custom agents (custom_rules) per repo. Each agent's text plus any
+#   file-backed content (file_paths) shares a 10,000-character limit that is truncated
+#   SILENTLY — only link short, stable files.
+# - Config precedence: repo cubic.yaml > org config (`cubic-config` repo) > dashboard UI
+#   > defaults. Schema: https://cubic.dev/schema/cubic-repository-config.schema.json
+# - Replying to a cubic review comment teaches it permanently (team-scoped); manage
+#   learnings under AI review settings → Memory & Learning.
+# - cubic auto-detects context files (AGENTS.md, README, .github/) — those inform the
+#   review; custom agents are what actually enforce rules.
 
 version: 1
 
diff --git a/docs/7-DEVELOPMENT/maintainer-guide.md b/docs/7-DEVELOPMENT/maintainer-guide.md
index 8f6f9d1d..4edd5349 100644
--- a/docs/7-DEVELOPMENT/maintainer-guide.md
+++ b/docs/7-DEVELOPMENT/maintainer-guide.md
@@ -6,6 +6,7 @@ This guide is for project maintainers to help manage contributions effectively w
 
 - [Issue Management](#issue-management)
 - [Pull Request Review](#pull-request-review)
+- [Merging PR Batches](#merging-pr-batches)
 - [Common Scenarios](#common-scenarios)
 - [Communication Templates](#communication-templates)
 
@@ -224,6 +225,16 @@ Have you considered [alternative approach]? It might be better because [reasons]
 What do you think?
 ```
 
+## Merging PR Batches
+
+Mechanics for landing a batch of approved PRs without stepping on each other:
+
+- **Squash-merge everything.** One commit per PR keeps `main` linear and makes reverts trivial.
+- **Expect CHANGELOG conflicts.** Every PR adds a bullet under `[Unreleased]`, so the Nth merge often flips its siblings to DIRTY. Resolve by rebasing the branch onto `main` and keeping **both** sides' bullets — they're independent entries, not competing edits — then `git push --force-with-lease`.
+- **Contributor forks:** rebase the fork's branch onto `origin/main`, skipping commits that are already upstream, and push with an explicit-OID lease: `git push --force-with-lease=<branch>:<headOID>`. This works whenever the contributor left "Allow edits by maintainers" (maintainerCanModify) enabled.
+- **Check for scheduled replacements first.** Before merging a fix into code that's slated to be replaced (e.g. the database layer migrating to surreal-basics, issue #1031), redirect the fix upstream or note it on the tracking issue instead of landing it in code that's about to disappear.
+- **Hunt for competing PRs.** Before merging a fix, search open PRs for others addressing the same bug — pick the best one and close the rest with a link, rather than merging the first one you review.
+
 ## Common Scenarios
 
 ### Scenario 1: Good Code, Wrong Approach

From 221d86124ad94a18b01a88b46771d2bf0b169611 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 20:36:57 -0300
Subject: [PATCH 186/345] docs: tidy the unreleased changelog for the release
 cut (#1088)

---
 CHANGELOG.md | 57 +++++++++++++++++++++++++---------------------------
 1 file changed, 27 insertions(+), 30 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6276da53..741112f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,44 +7,41 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Changed
-- cubic AI review now skips `CHANGELOG.md`, `uv.lock` and `frontend/package-lock.json` (no reviewable logic; preserves the monthly reviewed-line quota)
-- Context building consolidated into a single implementation (`open_notebook/utils/context_builder.py`): the copy-pasted source/note assembly loops behind `POST /api/chat/context` and the removed notebook-context endpoint, plus the 495-line generalized `ContextBuilder` class (whose only caller was the source-chat graph), are now two focused functions — `build_notebook_context()` (backs `POST /api/chat/context`, unchanged request/response shapes and config semantics) and `build_source_context()` (backs the source-chat graph, same context shape and 50k-token budget). Pinned by new characterization tests — no behavior change for the surviving paths
-- **Removed** `POST /api/notebooks/{notebook_id}/context`: it duplicated `POST /api/chat/context` (same assembly logic, slightly different response envelope) and had zero callers — frontend, docs and tests only use `/api/chat/context`. If you called it programmatically, switch to `POST /api/chat/context` (body: `{notebook_id, context_config}`; response fields: `context.sources`/`context.notes`, `token_count`, `char_count`)
-- Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests
-- Frontend convention cleanup (no user-facing change): hook files unified to kebab-case (`useNotebookChat.ts`/`useSourceChat.ts` → `use-notebook-chat.ts`/`use-source-chat.ts`), `src/components/source/` merged into `src/components/sources/`, the localStorage auth-token parsing ritual extracted into a single `getAuthToken()` helper (`src/lib/auth-token.ts`), and non-streaming raw `fetch` calls routed through `apiClient` (podcast audio download, auth-status check). SSE/streaming paths and the login/checkAuth credential probes deliberately keep raw `fetch`
-- Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly
-- The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged
-
 ### Added
-- Docs: cubic platform mechanics recorded as comments in `cubic.yaml` (agent limits, config precedence, memory/learning) and a "Merging PR Batches" playbook added to the maintainer guide (squash policy, CHANGELOG conflict resolution, fork rebases, competing-PR checks)
-- New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them
-- Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification
-- CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites
-- CI now also gates every PR on `mypy` (backend typecheck): the repo-wide baseline went from 197 errors to 0 (enabling the pydantic mypy plugin resolved most of them; the rest got real annotations), so new type errors are blocked from here on. The `ignore_errors` burn-down also started: `open_notebook.graphs.transformation`, `open_notebook.graphs.ask` and `api.routers.models` are now type-checked (plus two stale entries for deleted modules removed); only `open_notebook.domain.notebook` remains exempt pending the surreal-basics migration
-
-### Fixed
-- Eight podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) showed the literal `{name}` placeholder instead of the profile name: the locale strings used single braces (which i18next ignores) and the `t()` call sites passed no values. Placeholders normalized to `{{name}}` across all locales and the actual name is now passed in from the mutation response/variables
-- Typed domain errors now return their documented HTTP status codes instead of a generic 500: the API routers used to wrap endpoint bodies in a broad `except Exception` that swallowed the `open_notebook.exceptions` hierarchy before the global handlers could map it (`NotFoundError`→404, `InvalidInputError`→400, `ConfigurationError`→422, `RateLimitError`→429, `NetworkError`/`ExternalServiceError`→502). All 18 affected routers now re-raise `HTTPException` and `OpenNotebookError` and only convert genuinely unexpected exceptions into sanitized 500s. Most visible changes: a missing/unconfigured model (`ConfigurationError`) now returns 422 with an actionable message instead of 500; getting or deleting a source-chat session whose session isn't related to the source returns 404 (was a 500 wrapping the inner 404); fetching a missing credential returns 404 (was 500)
-- Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely
-- Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes
+- Docs: cubic platform mechanics recorded as comments in `cubic.yaml` (agent limits, config precedence, memory/learning) and a "Merging PR Batches" playbook added to the maintainer guide (squash policy, CHANGELOG conflict resolution, fork rebases, competing-PR checks) (#1086)
+- New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them (#1075)
+- Release confidence process, documented and executable: `.github/RELEASE_PROCESS.md` now covers the risk-based test matrix (buckets A/B/C), the Docker image gate, the fix-loop re-test policy and the communication/credits/retro structure, backed by a new decision record (ADR-005) and versioned tooling under `scripts/release-test/` — `make release-test TAG= OLD_TAG=` runs fresh-install + upgrade scenarios against real images, and `make release-stack TAG= [DUMP=]` boots a browsable, isolated release-candidate stack (optionally with a copy of dev data) for manual verification (#1052)
+- CI now gates every PR on `ruff check` (backend lint), `npm run lint` (frontend ESLint) and `npm run build` (frontend production build), in addition to the existing test suites (#1068)
+- CI now also gates every PR on `mypy` (backend typecheck): the repo-wide baseline went from 197 errors to 0 (enabling the pydantic mypy plugin resolved most of them; the rest got real annotations), so new type errors are blocked from here on. The `ignore_errors` burn-down also started: `open_notebook.graphs.transformation`, `open_notebook.graphs.ask` and `api.routers.models` are now type-checked (plus two stale entries for deleted modules removed); only `open_notebook.domain.notebook` remains exempt pending the surreal-basics migration (#1076)
 
 ### Changed
-- Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks)
-- Internal refactor: extracted the session/source verification, record-ID normalization, LangGraph message extraction and shared response models duplicated across the chat and source-chat routers into `api/routers/_chat_shared.py`, pinned by new characterization tests — no behavior change
-- Internal refactor of the sources API router: extracted a shared `SourceResponse` builder (was hand-rolled 5×), a single upload-cleanup helper (was pasted 6×), split the 293-line create-source endpoint into validation + sync/async path functions, and unified the duplicated paginated list query. No behavior change; all security checks (atomic filename claim, path-traversal containment, SSRF/LFI guards) preserved verbatim
-- Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained)
-- Internal refactor with no user-facing change: split the 1,441-line API Keys settings page into focused components under `frontend/src/components/settings/` and moved the provider config tables to `frontend/src/lib/providers.tsx`, deduplicating the default-model select in the process
+- cubic AI review now skips `CHANGELOG.md`, `uv.lock` and `frontend/package-lock.json` (no reviewable logic; preserves the monthly reviewed-line quota) (#1080)
+- Context building consolidated into a single implementation (`open_notebook/utils/context_builder.py`): the copy-pasted source/note assembly loops behind `POST /api/chat/context` and the removed notebook-context endpoint, plus the 495-line generalized `ContextBuilder` class (whose only caller was the source-chat graph), are now two focused functions — `build_notebook_context()` (backs `POST /api/chat/context`, unchanged request/response shapes and config semantics) and `build_source_context()` (backs the source-chat graph, same context shape and 50k-token budget). Pinned by new characterization tests — no behavior change for the surviving paths (#1079)
+- **Removed** `POST /api/notebooks/{notebook_id}/context`: it duplicated `POST /api/chat/context` (same assembly logic, slightly different response envelope) and had zero callers — frontend, docs and tests only use `/api/chat/context`. If you called it programmatically, switch to `POST /api/chat/context` (body: `{notebook_id, context_config}`; response fields: `context.sources`/`context.notes`, `token_count`, `char_count`) (#1079)
+- Backend provider metadata now lives in a single registry (`open_notebook/ai/provider_registry.py`): env var config, modalities, connection-test models, OpenAI-compatible discovery URLs and docs links are defined once per provider, and `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES`, `TEST_MODELS` and `OPENAI_COMPAT_PROVIDERS` are derived from it. Adding a provider drops from ~6 hand-synced dicts to the registry plus two manual copies (the `SupportedProvider` Literal and the frontend provider table), both enforced by tests (#1075)
+- Frontend convention cleanup (no user-facing change): hook files unified to kebab-case (`useNotebookChat.ts`/`useSourceChat.ts` → `use-notebook-chat.ts`/`use-source-chat.ts`), `src/components/source/` merged into `src/components/sources/`, the localStorage auth-token parsing ritual extracted into a single `getAuthToken()` helper (`src/lib/auth-token.ts`), and non-streaming raw `fetch` calls routed through `apiClient` (podcast audio download, auth-status check). SSE/streaming paths and the login/checkAuth credential probes deliberately keep raw `fetch` (#1077)
+- Pruned unused langchain packages: removed `langchain-community` and `langchain-deepseek` from the dependencies (nothing imports them — DeepSeek and xAI route through esperanto's OpenAI-compatible path, which uses `langchain-openai`). The remaining `langchain-*` provider packages are documented as runtime requirements of esperanto's dynamic `to_langchain()` and the whole langchain/langgraph family now carries explicit upper bounds; `langchain-core` and `langchain-text-splitters` (both directly imported but previously only transitive) are now declared explicitly (#1073)
+- The two Docker images (regular and single-container) are now built from a single multi-stage `Dockerfile` with shared stages — regular is the default (`runtime`) target, single-container is `--target single` — so deploy fixes (tiktoken pre-cache, env defaults, npm retry logic) no longer have to be applied twice. `Dockerfile.single` and `supervisord.single.conf` were removed; the single image appends a small `supervisord.surrealdb.conf` to the shared `supervisord.conf` at build time. Published image names and tags are unchanged (#1066)
+- Model discovery is now table-driven: the eight providers with OpenAI-compatible `/models` endpoints (OpenAI, Groq, Mistral, DeepSeek, xAI, OpenRouter, DashScope, MiniMax) share one generic discovery function configured by `OPENAI_COMPAT_PROVIDERS`, replacing eight near-identical copies (provider-specific quirks like Mistral's capability flags and OpenRouter's descriptions are preserved as hooks) (#1070)
+- Internal refactor: extracted the session/source verification, record-ID normalization, LangGraph message extraction and shared response models duplicated across the chat and source-chat routers into `api/routers/_chat_shared.py`, pinned by new characterization tests — no behavior change (#1072)
+- Internal refactor of the sources API router: extracted a shared `SourceResponse` builder (was hand-rolled 5×), a single upload-cleanup helper (was pasted 6×), split the 293-line create-source endpoint into validation + sync/async path functions, and unified the duplicated paginated list query. No behavior change; all security checks (atomic filename claim, path-traversal containment, SSRF/LFI guards) preserved verbatim (#1069)
+- Re-enabled the ruff rules for unused imports (`F401`), unused local variables (`F841`) and bare `except:` (`E722`) that were ignored to silence legacy Streamlit-era noise, and cleaned up the remaining fallout (10 unused imports, 2 unused test variables; no bare excepts remained) (#1062)
+- Internal refactor with no user-facing change: split the 1,441-line API Keys settings page into focused components under `frontend/src/components/settings/` and moved the provider config tables to `frontend/src/lib/providers.tsx`, deduplicating the default-model select in the process (#1065)
 - Chat, source chat, Ask and transformation prompts now steer models to write math as `$$...$$` (display) / `$...$` (inline) so formulas render via KaTeX, reserving fenced `latex` code blocks for when the user explicitly asks for the LaTeX source (#1051)
-- Frontend locale files are now type-checked at compile time: every non-en-US locale declares `satisfies TranslationShape` (derived from the en-US object), so a missing or extra i18n key fails `tsc` in the editor instead of only the runtime parity test. Also removed two unused frontend dependencies (`next-themes`, `@monaco-editor/react`) and fixed `frontend/AGENTS.md` drift (14 locales, not 7; dark mode is the hand-rolled zustand theme-store, not next-themes)
+- Frontend locale files are now type-checked at compile time: every non-en-US locale declares `satisfies TranslationShape` (derived from the en-US object), so a missing or extra i18n key fails `tsc` in the editor instead of only the runtime parity test. Also removed two unused frontend dependencies (`next-themes`, `@monaco-editor/react`) and fixed `frontend/AGENTS.md` drift (14 locales, not 7; dark mode is the hand-rolled zustand theme-store, not next-themes) (#1061)
 
 ### Fixed
-- Anthropic models are now discovered live from `GET https://api.anthropic.com/v1/models` (paginated) instead of a hardcoded claude-3-era list — the code comment claiming "Anthropic doesn't have a model listing API" was wrong. A refreshed static list (current Claude 4.x/5 aliases) remains as a fallback when the API call fails, and the credential-based discovery path (`discover_with_config`) uses the same live-with-fallback logic
-- Deduplicated the embedding commands (`commands/embedding_commands.py`, ~100 lines less): `embed_note`/`embed_insight`/`embed_source` now share one load→embed→write core with a single error-handling epilogue, the rebuild command uses one submission-loop helper for all three kinds, and the thrice-copied `full_model_dump()` moved to `open_notebook/utils/model_utils.py`. Pure refactor — same outputs, logs and retry behavior
+- Eight podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) showed the literal `{name}` placeholder instead of the profile name: the locale strings used single braces (which i18next ignores) and the `t()` call sites passed no values. Placeholders normalized to `{{name}}` across all locales and the actual name is now passed in from the mutation response/variables (#1077)
+- Typed domain errors now return their documented HTTP status codes instead of a generic 500: the API routers used to wrap endpoint bodies in a broad `except Exception` that swallowed the `open_notebook.exceptions` hierarchy before the global handlers could map it (`NotFoundError`→404, `InvalidInputError`→400, `ConfigurationError`→422, `RateLimitError`→429, `NetworkError`/`ExternalServiceError`→502). All 18 affected routers now re-raise `HTTPException` and `OpenNotebookError` and only convert genuinely unexpected exceptions into sanitized 500s. Most visible changes: a missing/unconfigured model (`ConfigurationError`) now returns 422 with an actionable message instead of 500; getting or deleting a source-chat session whose session isn't related to the source returns 404 (was a 500 wrapping the inner 404); fetching a missing credential returns 404 (was 500) (#1078)
+- Frontend translations now use i18next interpolation (`t('key', { count })`) instead of manual `.replace('{count}', ...)` string surgery across ~75 call sites — locale placeholders changed from `{name}` to `{{name}}` in all 14 locales. This restores proper pluralization (e.g. "used by N episodes" now goes through i18next plural forms) and lets translators reorder placeholders freely (#1074)
+- Podcast generation dialog: the token/char counter no longer fires a request storm on rapid checkbox toggling (debounced, with a stale-response guard so a slow response can't overwrite a fresher count) and the dialog now closes as soon as the episode-list refetch completes instead of after a fixed 500ms timer; the 983-line component was also split (content selection panel and selection helpers extracted, duplicated context-config logic deduplicated) with no behavior changes (#1067)
+- Anthropic models are now discovered live from `GET https://api.anthropic.com/v1/models` (paginated) instead of a hardcoded claude-3-era list — the code comment claiming "Anthropic doesn't have a model listing API" was wrong. A refreshed static list (current Claude 4.x/5 aliases) remains as a fallback when the API call fails, and the credential-based discovery path (`discover_with_config`) uses the same live-with-fallback logic (#1070)
+- Deduplicated the embedding commands (`commands/embedding_commands.py`, ~100 lines less): `embed_note`/`embed_insight`/`embed_source` now share one load→embed→write core with a single error-handling epilogue, the rebuild command uses one submission-loop helper for all three kinds, and the thrice-copied `full_model_dump()` moved to `open_notebook/utils/model_utils.py`. Pure refactor — same outputs, logs and retry behavior (#1071)
 
 ### Removed
-- Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker
-- Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist
+- Dead Streamlit-era service layer (~2,000 lines): `api/client.py` (a synchronous HTTP client that called the app's own API) and 13 `api/*_service.py` wrappers that consumed the app's own HTTP API — none were imported by any router, command or test. Also removed the toy `process_text`/`analyze_data` demo commands (`commands/example_commands.py`) from the background worker (#1054)
+- Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist (#1056)
+- Committed QA screenshots (12 files) and a stray debug `history.txt` were removed from the repo root, with `.gitignore` rules added so they can't come back (#1053)
 
 ## [1.11.0] - 2026-07-11
 

From cd40f0390468cfef7fcb74850b2ebe2a69006a7d Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 11 Jul 2026 22:46:48 -0300
Subject: [PATCH 187/345] chore(release): cut v1.12.0 (#1089)

---
 CHANGELOG.md   | 2 +-
 pyproject.toml | 2 +-
 uv.lock        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 741112f4..af2a9304 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [1.12.0] - 2026-07-12
 
 ### Added
 - Docs: cubic platform mechanics recorded as comments in `cubic.yaml` (agent limits, config precedence, memory/learning) and a "Merging PR Batches" playbook added to the maintainer guide (squash policy, CHANGELOG conflict resolution, fork rebases, competing-PR checks) (#1086)
diff --git a/pyproject.toml b/pyproject.toml
index 9449c742..e633a0ff 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.11.0"
+version = "1.12.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/uv.lock b/uv.lock
index cb4909b2..260f7fa0 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2040,7 +2040,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.11.0"
+version = "1.12.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From b47484dcfead7d4500c30ead185a206f69d7b70a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 08:25:19 -0300
Subject: [PATCH 188/345] test: stop the credential validation test from
 writing to the live database (#1090)

The valid-provider gate test posted a real credential through the route;
with a developer .env loaded (SURREAL_URL + encryption key set) every
pytest run persisted a 'Test' openai credential to the live dev database.
Force the encryption-key gate to fail so the request proves validation
clearance without ever reaching persistence.
---
 tests/test_credential_provider_validation.py | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index b6668c0d..e27e92ca 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -188,11 +188,25 @@ class TestCreateCredentialEndpointRejectsBadProvider:
     def test_post_credentials_with_valid_provider_passes_validation(
         self, client, monkeypatch
     ):
-        """Doesn't assert overall success (that needs DB/encryption setup,
-        covered elsewhere) - just that a valid provider clears the 422
-        validation gate and reaches actual route logic."""
+        """Doesn't assert overall success - just that a valid provider clears
+        the 422 validation gate and reaches actual route logic.
+
+        The encryption-key gate is forced to fail so the request never reaches
+        the persistence layer: without this, running the suite with a real
+        `.env` (SURREAL_URL + encryption key set) wrote a "Test" credential to
+        the live dev database on every run.
+        """
+        from api.routers import credentials as credentials_router
+
+        def _no_key():
+            raise ValueError("encryption key intentionally absent in tests")
+
+        monkeypatch.setattr(credentials_router, "require_encryption_key", _no_key)
         response = client.post(
             "/api/credentials",
             json={"name": "Test", "provider": "openai", "api_key": "sk-test"},
         )
+        # Provider validation happens before the route body runs; the forced
+        # key failure maps to a non-422 error, proving validation was cleared
+        # without persisting anything.
         assert response.status_code != 422

From 857d86875a47f690610b147156c9faabbb16faf4 Mon Sep 17 00:00:00 2001
From: Carlos Pelazas <108868934+pelazas@users.noreply.github.com>
Date: Sun, 12 Jul 2026 13:36:33 +0200
Subject: [PATCH 189/345] fix: keep transformation editor dialog mounted in the
 empty state (#1033)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

TransformationsList only rendered TransformationEditorDialog in the
non-empty branch, so after deleting every transformation the empty
state's 'New Transformation' button set editorOpen=true but there was
no dialog mounted to open — the click appeared to do nothing.

Render the dialog in both branches so the create flow works again from
the empty state.
---
 .../components/TransformationsList.test.tsx   | 45 +++++++++++++++++
 .../components/TransformationsList.tsx        | 49 +++++++++++--------
 2 files changed, 73 insertions(+), 21 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/transformations/components/TransformationsList.test.tsx

diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.test.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.test.tsx
new file mode 100644
index 00000000..367ba146
--- /dev/null
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.test.tsx
@@ -0,0 +1,45 @@
+import { render, screen, fireEvent } from '@testing-library/react'
+import { describe, it, expect, vi } from 'vitest'
+import { TransformationsList } from './TransformationsList'
+import { Transformation } from '@/lib/types/transformations'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('./TransformationEditorDialog', () => ({
+  TransformationEditorDialog: ({ open }: { open: boolean }) =>
+    open ? <div data-testid="transformation-editor-dialog" /> : null,
+}))
+
+vi.mock('./TransformationCard', () => ({
+  TransformationCard: () => <div data-testid="transformation-card" />,
+}))
+
+const mockTransformation: Transformation = {
+  id: 'transformation:1',
+  name: 'summarize',
+  title: 'Summarize',
+  description: 'Summarize the content',
+  prompt: 'Summarize this',
+  apply_default: false,
+  model_id: null,
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-01T00:00:00Z',
+}
+
+describe('TransformationsList', () => {
+  it('opens the editor dialog from the empty state create button', () => {
+    render(<TransformationsList transformations={[]} isLoading={false} />)
+
+    fireEvent.click(screen.getByText('transformations.createNew'))
+
+    expect(screen.getByTestId('transformation-editor-dialog')).toBeInTheDocument()
+  })
+
+  it('opens the editor dialog from the list header create button', () => {
+    render(<TransformationsList transformations={[mockTransformation]} isLoading={false} />)
+
+    fireEvent.click(screen.getByText('transformations.createNew'))
+
+    expect(screen.getByTestId('transformation-editor-dialog')).toBeInTheDocument()
+  })
+})
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
index d3b298d1..d1f47a88 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
@@ -35,19 +35,35 @@ export function TransformationsList({ transformations, isLoading, onPlayground }
     )
   }
 
+  const editorDialog = (
+    <TransformationEditorDialog
+      open={editorOpen}
+      onOpenChange={(open) => {
+        setEditorOpen(open)
+        if (!open) {
+          setEditingTransformation(undefined)
+        }
+      }}
+      transformation={editingTransformation}
+    />
+  )
+
   if (!transformations || transformations.length === 0) {
     return (
-      <EmptyState
-        icon={Wand2}
-        title={t('transformations.noTransformations')}
-        description={t('transformations.createOne')}
-        action={
-          <Button onClick={() => handleOpenEditor()}>
-            <Plus className="h-4 w-4 mr-2" />
-            {t('transformations.createNew')}
-          </Button>
-        }
-      />
+      <>
+        <EmptyState
+          icon={Wand2}
+          title={t('transformations.noTransformations')}
+          description={t('transformations.createOne')}
+          action={
+            <Button onClick={() => handleOpenEditor()}>
+              <Plus className="h-4 w-4 mr-2" />
+              {t('transformations.createNew')}
+            </Button>
+          }
+        />
+        {editorDialog}
+      </>
     )
   }
 
@@ -74,16 +90,7 @@ export function TransformationsList({ transformations, isLoading, onPlayground }
         </div>
       </div>
 
-      <TransformationEditorDialog
-        open={editorOpen}
-        onOpenChange={(open) => {
-          setEditorOpen(open)
-          if (!open) {
-            setEditingTransformation(undefined)
-          }
-        }}
-        transformation={editingTransformation}
-      />
+      {editorDialog}
     </>
   )
 }

From f27f41967f46d1e6e50440a237501065d398f956 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 08:40:44 -0300
Subject: [PATCH 190/345] docs: record v1.12.0 retro learnings in the release
 process (#1092)

- Known Gotchas: dev-machine port ownership before starting/killing
  services, validating error-path checklist items against fallback code,
  and the dev-DB record-count diff that catches test write leaks
- Note that the released label must be recreated if dropped from the
  taxonomy while the process still references it
---
 .github/RELEASE_PROCESS.md | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index 02f10e49..2be6e30b 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -15,7 +15,10 @@ It was redesigned during the v1.11.0 release ([ADR-005](../docs/7-DEVELOPMENT/de
 - Major releases are planned with a milestone when they include breaking
   changes or migrations that need user coordination.
 - Use the `in-dev-build` label for changes available in development images and
-  `released` for shipped work.
+  `released` for shipped work. (The `released` label was recreated during
+  v1.12.0 — it had been dropped from the curated label taxonomy while this
+  document still required it. If a label this document references is missing,
+  recreate it rather than skipping the step.)
 
 ## Normal Flow
 
@@ -155,3 +158,17 @@ accepted improvements immediately — update this document, the scripts under
   dump — `rc-stack.sh` handles both.
 - **Multiple local SurrealDB instances**: check which one the dev `.env`
   actually points at (`SURREAL_URL`) before exporting data.
+- **Dev-machine ports may belong to other projects**: check who owns
+  3000/5055/8000 (`lsof -nP -iTCP:<port> -sTCP:LISTEN` + the process cwd)
+  before starting or killing anything. The frontend runs fine on an alternate
+  port for smoke testing (`PORT=3001 npm run dev`) — pass the URL to the
+  smoke agent.
+- **Manual error-path checklist items must be validated against the code
+  first**: some "missing configuration" scenarios are deliberate fallbacks,
+  not errors (e.g. transformation and tools defaults fall back to the chat
+  default). Confirm the expected behavior in the provisioning code before
+  putting "should show an error" on the bucket-C checklist.
+- **The test suite runs against the live dev database** when a developer
+  `.env` is loaded. During bucket A, snapshot record counts per table before
+  and after the suite (e.g. credentials count) — a diff means a test is
+  leaking writes (this caught 48 leaked `Test` credentials in v1.12.0).

From a860f085007c191a021f3f291a6df046d7fdf410 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 08:41:38 -0300
Subject: [PATCH 191/345] fix(podcast): honor the speaker_profile parameter in
 generate_podcast_command (#1058)

The command always re-derived the speaker from
episode_profile.speaker_config, silently ignoring the speaker_profile
value accepted by POST /api/podcasts/generate. Resolve the explicitly
requested profile when provided and fall back to the episode profile's
speaker_config otherwise. speaker_profile is now Optional on
PodcastGenerationInput so the fallback is a real contract.

Closes #1044
---
 CHANGELOG.md                          |  3 +
 commands/podcast_commands.py          | 13 ++--
 tests/test_podcast_speaker_profile.py | 91 +++++++++++++++++++++++++++
 3 files changed, 101 insertions(+), 6 deletions(-)
 create mode 100644 tests/test_podcast_speaker_profile.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index af2a9304..2d5c4336 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -43,6 +43,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Pre-1.6 embedding job compatibility shims (the `embed_single_item`, `embed_chunk` and `vectorize_source` command handlers) — they existed only so jobs queued by a pre-1.6 version could drain after an upgrade, and any worker restarted on 1.6+ has no such jobs. **Upgrade note:** if you are upgrading from a version older than 1.6 with embedding jobs still queued, drain the queue on a 1.x release before upgrading past this change. Also removed dead tooling config from `pyproject.toml`: the `[tool.mypy]` block (the real config is `mypy.ini`) and Streamlit-era ruff per-file-ignores for files that no longer exist (#1056)
 - Committed QA screenshots (12 files) and a stray debug `history.txt` were removed from the repo root, with `.gitignore` rules added so they can't come back (#1053)
 
+### Fixed
+- Podcast generation now honors the `speaker_profile` parameter of `POST /api/podcasts/generate` — previously it was silently ignored and the speaker was always re-derived from the episode profile's `speaker_config`, which failed when that pointed at a renamed/deleted speaker profile even if the caller supplied a valid one (#1044)
+
 ## [1.11.0] - 2026-07-11
 
 ### Added
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 5c3a1e2c..f26a6b5e 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -39,7 +39,7 @@ def build_episode_output_dir(data_folder: str) -> tuple[str, Path]:
 
 class PodcastGenerationInput(CommandInput):
     episode_profile: str
-    speaker_profile: str
+    speaker_profile: Optional[str] = None
     episode_name: str
     content: str
     briefing_suffix: Optional[str] = None
@@ -77,13 +77,14 @@ async def generate_podcast_command(
                 f"Episode profile '{input_data.episode_profile}' not found"
             )
 
-        speaker_profile = await SpeakerProfile.get_by_name(
-            episode_profile.speaker_config
+        # Honor the explicitly requested speaker profile when provided,
+        # falling back to the episode profile's configured speaker.
+        speaker_profile_name = (
+            input_data.speaker_profile or episode_profile.speaker_config
         )
+        speaker_profile = await SpeakerProfile.get_by_name(speaker_profile_name)
         if not speaker_profile:
-            raise ValueError(
-                f"Speaker profile '{episode_profile.speaker_config}' not found"
-            )
+            raise ValueError(f"Speaker profile '{speaker_profile_name}' not found")
 
         logger.info(f"Loaded episode profile: {episode_profile.name}")
         logger.info(f"Loaded speaker profile: {speaker_profile.name}")
diff --git a/tests/test_podcast_speaker_profile.py b/tests/test_podcast_speaker_profile.py
new file mode 100644
index 00000000..ee99adb5
--- /dev/null
+++ b/tests/test_podcast_speaker_profile.py
@@ -0,0 +1,91 @@
+"""
+Regression tests for issue #1044: generate_podcast_command must honor the
+speaker_profile parameter instead of always re-deriving the speaker from
+episode_profile.speaker_config.
+
+No database is available in tests: EpisodeProfile.get_by_name and
+SpeakerProfile.get_by_name are mocked. Each test lets the command fail at a
+deterministic early exit (speaker not found) so the assertion is purely about
+WHICH speaker profile name the command tried to resolve.
+"""
+
+from unittest.mock import AsyncMock, Mock, patch
+
+import pytest
+
+from commands.podcast_commands import (
+    PodcastGenerationInput,
+    generate_podcast_command,
+)
+from open_notebook.podcasts.models import EpisodeProfile, SpeakerProfile
+
+
+def make_episode_profile(speaker_config="profile-from-episode"):
+    profile = Mock()
+    profile.name = "Test Episode Profile"
+    profile.speaker_config = speaker_config
+    return profile
+
+
+def make_input(speaker_profile=None):
+    return PodcastGenerationInput(
+        episode_profile="Test Episode Profile",
+        speaker_profile=speaker_profile,
+        episode_name="Test Episode",
+        content="test content",
+    )
+
+
+class TestSpeakerProfileResolution:
+    @pytest.mark.asyncio
+    async def test_provided_speaker_profile_wins_over_episode_config(self):
+        """An explicitly provided speaker_profile is resolved, not the
+        episode profile's speaker_config."""
+        episode_profile = make_episode_profile(speaker_config="old-name")
+        speaker_get = AsyncMock(return_value=None)
+
+        with (
+            patch.object(
+                EpisodeProfile,
+                "get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch.object(SpeakerProfile, "get_by_name", new=speaker_get),
+        ):
+            with pytest.raises(
+                ValueError, match="Speaker profile 'new-name' not found"
+            ):
+                await generate_podcast_command(make_input(speaker_profile="new-name"))
+
+        speaker_get.assert_awaited_once_with("new-name")
+
+    @pytest.mark.asyncio
+    async def test_falls_back_to_episode_speaker_config_when_omitted(self):
+        """Without an explicit speaker_profile, the episode profile's
+        speaker_config is used."""
+        episode_profile = make_episode_profile(speaker_config="old-name")
+        speaker_get = AsyncMock(return_value=None)
+
+        with (
+            patch.object(
+                EpisodeProfile,
+                "get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch.object(SpeakerProfile, "get_by_name", new=speaker_get),
+        ):
+            with pytest.raises(
+                ValueError, match="Speaker profile 'old-name' not found"
+            ):
+                await generate_podcast_command(make_input(speaker_profile=None))
+
+        speaker_get.assert_awaited_once_with("old-name")
+
+    def test_speaker_profile_is_optional_on_input_model(self):
+        """The command contract allows omitting speaker_profile entirely."""
+        input_data = PodcastGenerationInput(
+            episode_profile="Test Episode Profile",
+            episode_name="Test Episode",
+            content="test content",
+        )
+        assert input_data.speaker_profile is None

From 7df4acdb7de10809420c0ad39f80cf152ee3d1ff Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 08:42:52 -0300
Subject: [PATCH 192/345] docs: stop teaching 0.0.0.0 SurrealDB port exposure
 in setup snippets (#1060)

* docs: stop teaching 0.0.0.0 SurrealDB port exposure in setup snippets

Bind port 8000 to 127.0.0.1 in every compose and docker run snippet
(README, quick starts, installation, configuration and development docs,
and the examples/docker-compose-*.yml files), matching the shipped
docker-compose.yml from #1025. Drop the redundant --bind 0.0.0.0:8000
from containerized surreal start commands (it is the in-container
default) and add !override to docker-compose.override.yml.example so the
opt-in re-publish actually replaces the base port binding instead of
colliding with it. Docs that discuss reaching the database from another
machine now point at the override example plus a firewall/SSH-tunnel
note.

Closes #1034

* docs: parameterize creds in manual compose example, note Compose version for !override
---
 CHANGELOG.md                                  |  3 +++
 README.md                                     |  4 +++-
 docker-compose.override.yml.example           |  7 +++++-
 docs/0-START-HERE/quick-start-cloud.md        |  6 +++--
 .../quick-start-external-ollama.md            |  6 +++--
 docs/0-START-HERE/quick-start-local.md        |  6 +++--
 docs/0-START-HERE/quick-start-openai.md       |  6 +++--
 docs/1-INSTALLATION/docker-compose.md         | 22 ++++++++++++++-----
 docs/5-CONFIGURATION/advanced.md              |  2 +-
 docs/5-CONFIGURATION/database.md              |  2 ++
 docs/5-CONFIGURATION/openai-compatible.md     |  5 ++++-
 docs/5-CONFIGURATION/reverse-proxy.md         |  4 +++-
 docs/7-DEVELOPMENT/development-setup.md       | 13 ++++++-----
 docs/7-DEVELOPMENT/quick-start.md             |  2 +-
 examples/docker-compose-dev.yml               |  4 +++-
 examples/docker-compose-full-local.yml        |  4 +++-
 examples/docker-compose-ollama.yml            |  4 +++-
 examples/docker-compose-speaches.yml          |  4 +++-
 18 files changed, 75 insertions(+), 29 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2d5c4336..69c978f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [1.12.0] - 2026-07-12
 
+### Fixed
+- Setup snippets no longer teach publishing SurrealDB on `0.0.0.0` — the compose and `docker run` examples across the README, quick starts, installation, configuration and development docs, and the `examples/docker-compose-*.yml` files now bind port 8000 to `127.0.0.1` (matching the shipped `docker-compose.yml`), with docs pointing to `docker-compose.override.yml.example` for opt-in remote access behind a firewall or SSH tunnel; the override example itself gained the `!override` tag it needs to actually replace the base port binding instead of colliding with it (#1034)
+
 ### Added
 - Docs: cubic platform mechanics recorded as comments in `cubic.yaml` (agent limits, config precedence, memory/learning) and a "Merging PR Batches" playbook added to the maintainer guide (squash policy, CHANGELOG conflict resolution, fork rebases, competing-PR checks) (#1086)
 - New `GET /api/providers` endpoint returning provider metadata from the registry (name, display name, modalities, docs URL, whether it is configured via environment variables), so clients can enumerate supported providers instead of hardcoding them (#1075)
diff --git a/README.md b/README.md
index 91e92770..b19893fe 100644
--- a/README.md
+++ b/README.md
@@ -117,7 +117,9 @@ services:
     command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     restart: always
diff --git a/docker-compose.override.yml.example b/docker-compose.override.yml.example
index 95ea645d..fab4e3ec 100644
--- a/docker-compose.override.yml.example
+++ b/docker-compose.override.yml.example
@@ -14,5 +14,10 @@
 
 services:
   surrealdb:
-    ports:
+    # `!override` replaces the base file's port list instead of merging with
+    # it — without it, compose keeps both entries and the container fails to
+    # start with "port is already allocated". Requires Docker Compose
+    # v2.24.4+; on older clients, edit the ports entry in docker-compose.yml
+    # directly instead.
+    ports: !override
       - "8000:8000"
diff --git a/docs/0-START-HERE/quick-start-cloud.md b/docs/0-START-HERE/quick-start-cloud.md
index 8615a330..0add0fb6 100644
--- a/docs/0-START-HERE/quick-start-cloud.md
+++ b/docs/0-START-HERE/quick-start-cloud.md
@@ -26,9 +26,11 @@ Create a new folder `open-notebook` and add this file:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     # Removed the healthcheck because the v2 image is too minimal to run wget/curl
diff --git a/docs/0-START-HERE/quick-start-external-ollama.md b/docs/0-START-HERE/quick-start-external-ollama.md
index 6db464f3..7a80e9da 100644
--- a/docs/0-START-HERE/quick-start-external-ollama.md
+++ b/docs/0-START-HERE/quick-start-external-ollama.md
@@ -46,10 +46,12 @@ Create a new folder `open-notebook-external-ollama` and add these files:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
 
diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index fba38519..986e17ac 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -33,10 +33,12 @@ Create a new folder `open-notebook-local` and add this file:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
 
diff --git a/docs/0-START-HERE/quick-start-openai.md b/docs/0-START-HERE/quick-start-openai.md
index 56968c68..4a4e18b9 100644
--- a/docs/0-START-HERE/quick-start-openai.md
+++ b/docs/0-START-HERE/quick-start-openai.md
@@ -23,9 +23,11 @@ Create a new folder `open-notebook` and add this file:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --user root --pass password --bind 0.0.0.0:8000 rocksdb:/mydata/mydatabase.db
+    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
 
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index 8a974995..3f12b281 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -31,10 +31,20 @@ Create a file called `docker-compose.yml` with this content:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
+    # Credentials default to root:root for a zero-config local setup. Before
+    # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
+    # in a .env file — they are applied here and to the open_notebook service
+    # below, so the two always stay in sync.
+    command: start --log info --user ${SURREAL_USER:-root} --pass ${SURREAL_PASSWORD:-root} rocksdb:/mydata/mydatabase.db
     user: root  # Required for bind mounts on Linux
     ports:
-      - "8000:8000"
+      # Localhost only: Open Notebook reaches the database over the internal
+      # compose network, so this host port exists purely for local debugging.
+      # The database uses default root credentials, so never publish it on
+      # 0.0.0.0. To reach it from another machine, use the opt-in override in
+      # docker-compose.override.yml.example (repo root) behind a firewall or
+      # SSH tunnel, with real SURREAL_USER / SURREAL_PASSWORD set.
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     environment:
@@ -51,10 +61,12 @@ services:
       # REQUIRED: Change this to your own secret string
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
 
-      # Database connection (default values - no need to change)
+      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to
+      # root:root for local use; override them in a .env file before exposing
+      # the instance (the same values configure the surrealdb service above).
       - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=root
+      - SURREAL_USER=${SURREAL_USER:-root}
+      - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
     volumes:
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 7340b908..858c665d 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -164,7 +164,7 @@ Access API directly: `http://localhost:5056/docs`
 services:
   surrealdb:
     ports:
-      - "8001:8000"  # Change from 8000 to 8001
+      - "127.0.0.1:8001:8000"  # Change from 8000 to 8001 (localhost only)
     environment:
       - SURREAL_URL=ws://surrealdb:8001/rpc  # Update connection URL
 ```
diff --git a/docs/5-CONFIGURATION/database.md b/docs/5-CONFIGURATION/database.md
index c726ca1e..bc7d7e31 100644
--- a/docs/5-CONFIGURATION/database.md
+++ b/docs/5-CONFIGURATION/database.md
@@ -33,6 +33,8 @@ SURREAL_NAMESPACE="open_notebook"
 SURREAL_DATABASE="open_notebook"
 ```
 
+> **Note:** If SurrealDB runs in Docker with its port published on `127.0.0.1` only (the documented default), it won't be reachable at your machine's IP. Re-publish the port deliberately — see `docker-compose.override.yml.example` in the repo root — behind a firewall or SSH tunnel, with real credentials set.
+
 ### Open Notebook and Surreal are running on the same machine
 
 If you are running both services locally or if you are using the deprecated [single container setup](../1-INSTALLATION/single-container.md)
diff --git a/docs/5-CONFIGURATION/openai-compatible.md b/docs/5-CONFIGURATION/openai-compatible.md
index 0e2fd4cd..dfea49d5 100644
--- a/docs/5-CONFIGURATION/openai-compatible.md
+++ b/docs/5-CONFIGURATION/openai-compatible.md
@@ -203,7 +203,10 @@ services:
     image: vllm/vllm-openai:latest
     command: --model meta-llama/Llama-3.1-8B-Instruct
     ports:
-      - "8000:8000"
+      # Localhost only (vLLM has no authentication by default), on host port
+      # 8001 because SurrealDB already publishes 8000. Open Notebook reaches
+      # vLLM over the compose network at http://vllm:8000/v1 regardless.
+      - "127.0.0.1:8001:8000"
     volumes:
       - ~/.cache/huggingface:/root/.cache/huggingface
     deploy:
diff --git a/docs/5-CONFIGURATION/reverse-proxy.md b/docs/5-CONFIGURATION/reverse-proxy.md
index 3bc9ac9e..a33480ab 100644
--- a/docs/5-CONFIGURATION/reverse-proxy.md
+++ b/docs/5-CONFIGURATION/reverse-proxy.md
@@ -424,7 +424,9 @@ services:
     image: surrealdb/surrealdb:latest
     command: start --log trace --user root --pass root file:/mydata/database.db
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
 ```
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index 58303d31..42fa640f 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -88,18 +88,19 @@ For local development, you can also use:
 ### Option A: Using Docker (Recommended)
 
 ```bash
-# Start SurrealDB in memory
-docker run -d --name surrealdb -p 8000:8000 \
+# Start SurrealDB in memory (publish the port on localhost only — the
+# database uses default credentials, so never publish it on 0.0.0.0)
+docker run -d --name surrealdb -p 127.0.0.1:8000:8000 \
   surrealdb/surrealdb:v2 start \
   --user root --pass password \
-  --bind 0.0.0.0:8000 memory
+  memory
 
 # Or with persistent storage
-docker run -d --name surrealdb -p 8000:8000 \
+docker run -d --name surrealdb -p 127.0.0.1:8000:8000 \
   -v surrealdb_data:/data \
   surrealdb/surrealdb:v2 start \
   --user root --pass password \
-  --bind 0.0.0.0:8000 file:/data/surreal.db
+  file:/data/surreal.db
 ```
 
 ### Option B: Using Make
@@ -333,7 +334,7 @@ git push origin feature/my-feature -f
 1. Check if SurrealDB is running: `docker ps | grep surrealdb`
 2. Verify URL in `.env`: Should be `ws://localhost:8000/rpc`
 3. Restart SurrealDB: `docker stop surrealdb && docker rm surrealdb`
-4. Then restart with: `docker run -d --name surrealdb -p 8000:8000 surrealdb/surrealdb:v2 start --user root --pass password --bind 0.0.0.0:8000 memory`
+4. Then restart with: `docker run -d --name surrealdb -p 127.0.0.1:8000:8000 surrealdb/surrealdb:v2 start --user root --pass password memory`
 
 ### "Address already in use"
 
diff --git a/docs/7-DEVELOPMENT/quick-start.md b/docs/7-DEVELOPMENT/quick-start.md
index f6417eab..5bc14093 100644
--- a/docs/7-DEVELOPMENT/quick-start.md
+++ b/docs/7-DEVELOPMENT/quick-start.md
@@ -37,7 +37,7 @@ In separate terminal windows:
 ```bash
 # Terminal 1: Start SurrealDB (database)
 make database
-# or: docker run -d --name surrealdb -p 8000:8000 surrealdb/surrealdb:v2 start --user root --pass password --bind 0.0.0.0:8000 memory
+# or: docker run -d --name surrealdb -p 127.0.0.1:8000:8000 surrealdb/surrealdb:v2 start --user root --pass password memory
 
 # Terminal 2: Start API (backend on port 5055)
 make api
diff --git a/examples/docker-compose-dev.yml b/examples/docker-compose-dev.yml
index 1417ea8c..f9c57f2e 100644
--- a/examples/docker-compose-dev.yml
+++ b/examples/docker-compose-dev.yml
@@ -6,7 +6,9 @@ services:
     environment:
       - SURREAL_EXPERIMENTAL_GRAPHQL=true
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
     pull_policy: always
     user: root
diff --git a/examples/docker-compose-full-local.yml b/examples/docker-compose-full-local.yml
index 86d85fe0..1d2d675b 100644
--- a/examples/docker-compose-full-local.yml
+++ b/examples/docker-compose-full-local.yml
@@ -31,7 +31,9 @@ services:
     command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     environment:
diff --git a/examples/docker-compose-ollama.yml b/examples/docker-compose-ollama.yml
index 3d22a774..01ffda61 100644
--- a/examples/docker-compose-ollama.yml
+++ b/examples/docker-compose-ollama.yml
@@ -16,7 +16,9 @@ services:
     command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     environment:
diff --git a/examples/docker-compose-speaches.yml b/examples/docker-compose-speaches.yml
index 66834c1c..24a06ef8 100644
--- a/examples/docker-compose-speaches.yml
+++ b/examples/docker-compose-speaches.yml
@@ -27,7 +27,9 @@ services:
     command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
     user: root
     ports:
-      - "8000:8000"
+      # Localhost only — the database uses default credentials, so never
+      # publish this port on 0.0.0.0
+      - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
     environment:

From 15dbb6c7af3dd6704c8cd5f712e128420a26c66c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 09:30:38 -0300
Subject: [PATCH 193/345] fix(docker): force frontend bind address in
 supervisord so injected HOSTNAME can't break it (#1059)

Container runtimes inject HOSTNAME=<container/pod hostname> at runtime; under
Podman pods it resolves to 127.0.1.1, so Next.js standalone bound to the wrong
address and the UI became unreachable. Setting HOSTNAME explicitly in the
supervisord command (with a FRONTEND_BIND_HOST override knob) beats any
injected value. Drops the now-dead ENV HOSTNAME from the Dockerfile and
updates the environment reference and reverse-proxy docs.

Closes #994
---
 CHANGELOG.md                                  | 5 +++++
 Dockerfile                                    | 2 --
 docs/5-CONFIGURATION/environment-reference.md | 2 +-
 docs/5-CONFIGURATION/reverse-proxy.md         | 2 +-
 supervisord.conf                              | 5 ++++-
 5 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 69c978f6..a7965b7a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Fixed
+- Docker images now force the Next.js frontend to bind to `0.0.0.0` in the supervisord command itself, so container runtimes that inject `HOSTNAME` (e.g. Podman pods, where it resolves to `127.0.1.1`) can no longer make the UI unreachable. The `HOSTNAME` variable is no longer honored as a frontend bind override — set the new `FRONTEND_BIND_HOST` variable instead (#994)
+
 ## [1.12.0] - 2026-07-12
 
 ### Fixed
diff --git a/Dockerfile b/Dockerfile
index e6ea1d31..2f616d16 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -103,8 +103,6 @@ ENV UV_NO_SYNC=1
 ENV VIRTUAL_ENV=/app/.venv
 # Point the app at the pre-baked tiktoken encoding (see open_notebook/config.py)
 ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
-# Bind Next.js to all interfaces (required for Docker networking and reverse proxies)
-ENV HOSTNAME=0.0.0.0
 # Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
 ENV API_HOST=0.0.0.0
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 11bdc50a..38c0f6c0 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -13,7 +13,7 @@ Comprehensive list of all environment variables available in Open Notebook.
 | `API_CLIENT_TIMEOUT` | No | 300 | Client timeout in seconds (how long to wait for API response) |
 | `OPEN_NOTEBOOK_PASSWORD` | No | None | Password to protect Open Notebook instance |
 | `OPEN_NOTEBOOK_ENCRYPTION_KEY` | **Yes** | None | Secret string to encrypt credentials stored in database (any string works). **Required** for the credential system. Supports Docker secrets via `_FILE` suffix. |
-| `HOSTNAME` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies |
+| `FRONTEND_BIND_HOST` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies. (Replaces `HOSTNAME`, which container runtimes such as Podman override with the container/pod hostname, causing Next.js to bind to the wrong address) |
 | `API_HOST` | No | `0.0.0.0` (in Docker) | Network interface for the API (uvicorn) to bind to. Set to `::` for IPv6 dual-stack environments (listens on IPv6 and, on Linux defaults, IPv4 too) |
 | `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | No | 100 | Maximum request body size (in MB) the API will accept, enforced before auth/routing. Raise this if you need to upload larger audio/video files. A fronting reverse proxy's own limit (e.g. nginx `client_max_body_size`) still applies and should be raised to match. |
 
diff --git a/docs/5-CONFIGURATION/reverse-proxy.md b/docs/5-CONFIGURATION/reverse-proxy.md
index a33480ab..852819ac 100644
--- a/docs/5-CONFIGURATION/reverse-proxy.md
+++ b/docs/5-CONFIGURATION/reverse-proxy.md
@@ -128,7 +128,7 @@ API_URL=https://your-domain.com
 
 **Important**: Set `API_URL` to your public URL (with https://).
 
-**Note on HOSTNAME**: The Docker images set `HOSTNAME=0.0.0.0` by default, which ensures Next.js binds to all interfaces and is accessible from reverse proxies. You typically don't need to set this manually.
+**Note on the bind address**: The Docker images bind Next.js to `0.0.0.0` by default, which ensures it listens on all interfaces and is accessible from reverse proxies. You typically don't need to change this; if you do, set `FRONTEND_BIND_HOST` (the `HOSTNAME` variable is unreliable because container runtimes such as Podman override it with the container/pod hostname).
 
 ---
 
diff --git a/supervisord.conf b/supervisord.conf
index deaea0e1..6862da0a 100644
--- a/supervisord.conf
+++ b/supervisord.conf
@@ -31,7 +31,10 @@ autostart=true
 startsecs=3
 
 [program:frontend]
-command=bash -c "/app/scripts/wait-for-api.sh && node server.js"
+; HOSTNAME must be forced here: container runtimes inject HOSTNAME=<container/pod
+; hostname> at runtime (Podman pods override the image's ENV HOSTNAME=0.0.0.0),
+; making Next.js bind to the wrong address (#994). Override with FRONTEND_BIND_HOST.
+command=bash -c "/app/scripts/wait-for-api.sh && HOSTNAME=${FRONTEND_BIND_HOST:-0.0.0.0} node server.js"
 directory=/app/frontend
 environment=NODE_ENV="production",PORT="8502"
 passenv=API_URL,NEXT_PUBLIC_API_URL,INTERNAL_API_URL

From ae16bb92b7ef78fef9bcfebc3bbdf33e7bb7cc26 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 09:38:18 -0300
Subject: [PATCH 194/345] fix(i18n): add the {{name}} placeholder to zh-CN and
 zh-TW podcast toast descriptions (#1094)

---
 CHANGELOG.md                            |  1 +
 frontend/src/lib/locales/zh-CN/index.ts | 16 ++++++++--------
 frontend/src/lib/locales/zh-TW/index.ts | 16 ++++++++--------
 3 files changed, 17 insertions(+), 16 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a7965b7a..55979f5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- zh-CN and zh-TW podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) now include the profile name via the `{{name}}` placeholder, matching the other 12 locales (#1084)
 - Docker images now force the Next.js frontend to bind to `0.0.0.0` in the supervisord command itself, so container runtimes that inject `HOSTNAME` (e.g. Podman pods, where it resolves to `127.0.1.1`) can no longer make the UI unreachable. The `HOSTNAME` variable is no longer honored as a frontend bind override — set the new `FRONTEND_BIND_HOST` variable instead (#994)
 
 ## [1.12.0] - 2026-07-12
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 10fea916..b1ec2f73 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -623,16 +623,16 @@ export const zhCN = {
     createSpeakerFirst: "在添加单集简介之前，请先创建一个发言人简介。",
     noEpisodeProfiles: "暂无单集简介。创建一个以启动播客生成。",
     speakerCreated: "发言人配置已创建",
-    speakerCreatedDesc: "发言人配置已准备就绪。",
+    speakerCreatedDesc: "发言人配置 “{{name}}” 已成功创建。",
     failedToCreateSpeaker: "创建发言人配置失败",
     speakerUpdated: "发言人配置已更新",
-    speakerUpdatedDesc: "更改已成功保存。",
+    speakerUpdatedDesc: "发言人配置 “{{name}}” 已成功更新。",
     failedToUpdateSpeaker: "更新发言人配置失败",
     speakerDeleted: "发言人配置已删除",
-    speakerDeletedDesc: "配置已成功移除。",
+    speakerDeletedDesc: "发言人配置 “{{name}}” 已成功移除。",
     failedToDeleteSpeaker: "删除发言人配置失败",
     speakerDuplicated: "发言人配置已复制",
-    speakerDuplicatedDesc: "已创建配置副本。",
+    speakerDuplicatedDesc: "发言人配置 “{{name}}” 已成功复制。",
     failedToDuplicateSpeaker: "复制发言人配置失败",
     generationStarted: "播客启动生成",
     generationStartedDesc: "剧集 \"{{name}}\" 正在创建中。",
@@ -641,17 +641,17 @@ export const zhCN = {
     deleteProfileTitle: "删除简介？",
     deleteProfileDesc: "这将移除 “{{name}}”。现有单集将保留其数据，但新单集将不再使用此配置。",
     profileCreated: "剧集配置已创建",
-    profileCreatedDesc: "新的剧集配置已准备就绪。",
+    profileCreatedDesc: "剧集配置 “{{name}}” 已成功创建。",
     failedToCreateProfile: "创建剧集配置失败",
     profileUpdated: "剧集配置已更新",
-    profileUpdatedDesc: "更改已成功保存。",
+    profileUpdatedDesc: "剧集配置 “{{name}}” 已成功更新。",
     failedToUpdateProfile: "更新剧集配置失败",
     profileDeleted: "剧集配置已删除",
-    profileDeletedDesc: "配置已成功移除。",
+    profileDeletedDesc: "剧集配置 “{{name}}” 已成功移除。",
     failedToDeleteProfile: "删除剧集配置失败",
     failedToDeleteProfileDesc: "请确保配置未在使用中并重试。",
     profileDuplicated: "剧集配置已复制",
-    profileDuplicatedDesc: "已创建配置副本。",
+    profileDuplicatedDesc: "剧集配置 “{{name}}” 已成功复制。",
     failedToDuplicateProfile: "复制剧集配置失败",
     episodeDeleted: "剧集已删除",
     episodeDeletedDesc: "播客剧集已成功移除。",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 10a0dd7d..3a64986c 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -623,16 +623,16 @@ export const zhTW = {
     createSpeakerFirst: "在新增單集簡介之前，請先建立一個發言人簡介。",
     noEpisodeProfiles: "暫無單集簡介。建立一個以啟動播客生成。",
     speakerCreated: "發言人設定已建立",
-    speakerCreatedDesc: "發言人設定已準備就緒。",
+    speakerCreatedDesc: "發言人設定 “{{name}}” 已成功建立。",
     failedToCreateSpeaker: "建立發言人設定失敗",
     speakerUpdated: "發言人設定已更新",
-    speakerUpdatedDesc: "更改已成功儲存。",
+    speakerUpdatedDesc: "發言人設定 “{{name}}” 已成功更新。",
     failedToUpdateSpeaker: "更新發言人設定失敗",
     speakerDeleted: "發言人設定已刪除",
-    speakerDeletedDesc: "設定已成功移除。",
+    speakerDeletedDesc: "發言人設定 “{{name}}” 已成功移除。",
     failedToDeleteSpeaker: "刪除發言人設定失敗",
     speakerDuplicated: "發言人設定已複製",
-    speakerDuplicatedDesc: "已建立設定副本。",
+    speakerDuplicatedDesc: "發言人設定 “{{name}}” 已成功複製。",
     failedToDuplicateSpeaker: "複製發言人設定失敗",
     generationStarted: "播客啟動生成",
     generationStartedDesc: "劇集 \"{{name}}\" 正在建立中。",
@@ -641,17 +641,17 @@ export const zhTW = {
     deleteProfileTitle: "刪除簡介？",
     deleteProfileDesc: "這將移除 “{{name}}”。現有單集將保留其資料，但新單集將不再使用此設定。",
     profileCreated: "劇集設定已建立",
-    profileCreatedDesc: "新的劇集設定已準備就緒。",
+    profileCreatedDesc: "劇集設定 “{{name}}” 已成功建立。",
     failedToCreateProfile: "建立劇集設定失敗",
     profileUpdated: "劇集設定已更新",
-    profileUpdatedDesc: "更改已成功儲存。",
+    profileUpdatedDesc: "劇集設定 “{{name}}” 已成功更新。",
     failedToUpdateProfile: "更新劇集設定失敗",
     profileDeleted: "劇集設定已刪除",
-    profileDeletedDesc: "設定已成功移除。",
+    profileDeletedDesc: "劇集設定 “{{name}}” 已成功移除。",
     failedToDeleteProfile: "刪除劇集設定失敗",
     failedToDeleteProfileDesc: "請確保設定未在使用中並重試。",
     profileDuplicated: "劇集設定已複製",
-    profileDuplicatedDesc: "已建立設定副本。",
+    profileDuplicatedDesc: "劇集設定 “{{name}}” 已成功複製。",
     failedToDuplicateProfile: "複製劇集設定失敗",
     episodeDeleted: "劇集已刪除",
     episodeDeletedDesc: "播客劇集已成功移除。",

From d23e621e68bcd9dbe7dff5096c728030e21bdd3a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 09:43:06 -0300
Subject: [PATCH 195/345] build(compose): use YAML list form for the SurrealDB
 command so credentials with spaces survive (#1096)

Compose interpolates ${SURREAL_PASSWORD} into the scalar command string
before splitting it into arguments, so a password containing spaces became
multiple argv entries and SurrealDB failed to start. The list (exec) form
keeps each interpolated value in exactly one argument slot.

Also resyncs the mirrored compose snippets in
docs/1-INSTALLATION/docker-compose.md and README.md with the shipped file
(both had drifted: no credential interpolation, SurrealDB port published on
all interfaces) and documents the optional .env credential override for
readers who create the file manually.

Closes #1093
---
 CHANGELOG.md                          |  1 +
 README.md                             | 35 +++++++++++++++++++++------
 docker-compose.yml                    |  4 ++-
 docs/1-INSTALLATION/docker-compose.md | 27 ++++++++++++---------
 4 files changed, 46 insertions(+), 21 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 55979f5e..73d5b155 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- `docker-compose.yml` now uses the YAML list (exec) form for the SurrealDB `command`, so `SURREAL_USER` / `SURREAL_PASSWORD` values containing spaces are passed as single arguments instead of being split; the mirrored snippets in the installation docs and README (which had drifted — no credential interpolation, SurrealDB port published on all interfaces) are back in sync with the shipped file (#1093)
 - zh-CN and zh-TW podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) now include the profile name via the `{{name}}` placeholder, matching the other 12 locales (#1084)
 - Docker images now force the Next.js frontend to bind to `0.0.0.0` in the supervisord command itself, so container runtimes that inject `HOSTNAME` (e.g. Podman pods, where it resolves to `127.0.1.1`) can no longer make the UI unreachable. The `HOSTNAME` variable is no longer honored as a frontend bind override — set the new `FRONTEND_BIND_HOST` variable instead (#994)
 
diff --git a/README.md b/README.md
index b19893fe..4fe9418d 100644
--- a/README.md
+++ b/README.md
@@ -114,26 +114,44 @@ Copy this into a new file called `docker-compose.yml`:
 services:
   surrealdb:
     image: surrealdb/surrealdb:v2
-    command: start --log info --user root --pass root rocksdb:/mydata/mydatabase.db
-    user: root
+    # Credentials default to root:root for a zero-config local setup. Before
+    # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
+    # in a .env file (see .env.example) — they are applied here and to the
+    # open_notebook service below, so the two always stay in sync.
+    # List (exec) form so each interpolated value stays a single argument —
+    # a password containing spaces would otherwise be split into several.
+    command: ["start", "--log", "info", "--user", "${SURREAL_USER:-root}", "--pass", "${SURREAL_PASSWORD:-root}", "rocksdb:/mydata/mydatabase.db"]
+    user: root  # Required for bind mounts on Linux
     ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
+      # Bound to localhost only: the open_notebook service reaches this over
+      # the internal compose network regardless, so the host port is purely
+      # for local debugging (e.g. Surrealist, `surreal sql`). Exposing this
+      # on 0.0.0.0 would let anyone who can reach the host connect with the
+      # default root:root credentials.
       - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
+    environment:
+      - SURREAL_EXPERIMENTAL_GRAPHQL=true
     restart: always
+    pull_policy: always
 
   open_notebook:
     image: lfnovo/open_notebook:v1-latest
     ports:
-      - "8502:8502"
-      - "5055:5055"
+      - "8502:8502"  # Web UI
+      - "5055:5055"  # REST API
     environment:
+      # REQUIRED: Change this to your own secret string
+      # This encrypts your API keys in the database
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
+
+      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to root:root
+      # for local use; override them in a .env file before exposing the instance
+      # (the same values configure the surrealdb service above).
       - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=root
+      - SURREAL_USER=${SURREAL_USER:-root}
+      - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
     volumes:
@@ -141,6 +159,7 @@ services:
     depends_on:
       - surrealdb
     restart: always
+    pull_policy: always
 ```
 
 ### Step 2: Set Your Encryption Key
diff --git a/docker-compose.yml b/docker-compose.yml
index a6f8841a..894c8a57 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,9 @@ services:
     # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
     # in a .env file (see .env.example) — they are applied here and to the
     # open_notebook service below, so the two always stay in sync.
-    command: start --log info --user ${SURREAL_USER:-root} --pass ${SURREAL_PASSWORD:-root} rocksdb:/mydata/mydatabase.db
+    # List (exec) form so each interpolated value stays a single argument —
+    # a password containing spaces would otherwise be split into several.
+    command: ["start", "--log", "info", "--user", "${SURREAL_USER:-root}", "--pass", "${SURREAL_PASSWORD:-root}", "rocksdb:/mydata/mydatabase.db"]
     user: root  # Required for bind mounts on Linux
     ports:
       # Bound to localhost only: the open_notebook service reaches this over
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index 3f12b281..e600aaae 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -33,17 +33,18 @@ services:
     image: surrealdb/surrealdb:v2
     # Credentials default to root:root for a zero-config local setup. Before
     # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
-    # in a .env file — they are applied here and to the open_notebook service
-    # below, so the two always stay in sync.
-    command: start --log info --user ${SURREAL_USER:-root} --pass ${SURREAL_PASSWORD:-root} rocksdb:/mydata/mydatabase.db
+    # in a .env file (see .env.example) — they are applied here and to the
+    # open_notebook service below, so the two always stay in sync.
+    # List (exec) form so each interpolated value stays a single argument —
+    # a password containing spaces would otherwise be split into several.
+    command: ["start", "--log", "info", "--user", "${SURREAL_USER:-root}", "--pass", "${SURREAL_PASSWORD:-root}", "rocksdb:/mydata/mydatabase.db"]
     user: root  # Required for bind mounts on Linux
     ports:
-      # Localhost only: Open Notebook reaches the database over the internal
-      # compose network, so this host port exists purely for local debugging.
-      # The database uses default root credentials, so never publish it on
-      # 0.0.0.0. To reach it from another machine, use the opt-in override in
-      # docker-compose.override.yml.example (repo root) behind a firewall or
-      # SSH tunnel, with real SURREAL_USER / SURREAL_PASSWORD set.
+      # Bound to localhost only: the open_notebook service reaches this over
+      # the internal compose network regardless, so the host port is purely
+      # for local debugging (e.g. Surrealist, `surreal sql`). Exposing this
+      # on 0.0.0.0 would let anyone who can reach the host connect with the
+      # default root:root credentials.
       - "127.0.0.1:8000:8000"
     volumes:
       - ./surreal_data:/mydata
@@ -59,11 +60,12 @@ services:
       - "5055:5055"  # REST API
     environment:
       # REQUIRED: Change this to your own secret string
+      # This encrypts your API keys in the database
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
 
-      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to
-      # root:root for local use; override them in a .env file before exposing
-      # the instance (the same values configure the surrealdb service above).
+      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to root:root
+      # for local use; override them in a .env file before exposing the instance
+      # (the same values configure the surrealdb service above).
       - SURREAL_URL=ws://surrealdb:8000/rpc
       - SURREAL_USER=${SURREAL_USER:-root}
       - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
@@ -79,6 +81,7 @@ services:
 
 **Edit the file:**
 - Replace `change-me-to-a-secret-string` with your own secret (any string works, e.g., `my-super-secret-key-123`)
+- (Optional) To use database credentials other than the default `root:root`, create a `.env` file next to `docker-compose.yml` with `SURREAL_USER=...` and `SURREAL_PASSWORD=...` — both services pick them up automatically ([.env.example](https://github.com/lfnovo/open-notebook/blob/main/.env.example) shows the full format)
 
 ---
 

From bccf500ec3b0e29cbc9bceb3299cd014ba7ab283 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 09:47:17 -0300
Subject: [PATCH 196/345] fix(models): allow clearing optional model defaults
 (#1097)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

PUT /api/models/defaults used 'is not None' guards, so an explicit null
sent to clear a default was silently ignored — the old value survived
while the client saw success (same anti-pattern fixed for credentials
in #1046). The handler is now keyed on field presence (model_fields_set):
absent keeps the current value, explicit null clears it. The required
defaults (chat, embedding) reject null with a 400.

In the UI, the optional default-model selects (transformation, tools,
large context, TTS, STT) now offer a clear option — labeled 'Use
fallback (chat default)' for transformation/tools, which fall back to
the chat default when unset, and 'None' otherwise — and display that
state when no model is assigned. The transformation default is no
longer marked required, matching the backend fallback behavior.

Closes #1091
---
 CHANGELOG.md                                  |  1 +
 api/routers/models.py                         | 46 +++++++------
 .../settings/DefaultModelSelectors.tsx        | 20 ++++--
 frontend/src/lib/locales/bn-IN/index.ts       |  2 +
 frontend/src/lib/locales/ca-ES/index.ts       |  2 +
 frontend/src/lib/locales/de-DE/index.ts       |  2 +
 frontend/src/lib/locales/en-US/index.ts       |  2 +
 frontend/src/lib/locales/es-ES/index.ts       |  2 +
 frontend/src/lib/locales/fr-FR/index.ts       |  2 +
 frontend/src/lib/locales/it-IT/index.ts       |  2 +
 frontend/src/lib/locales/ja-JP/index.ts       |  2 +
 frontend/src/lib/locales/pl-PL/index.ts       |  2 +
 frontend/src/lib/locales/pt-BR/index.ts       |  2 +
 frontend/src/lib/locales/ru-RU/index.ts       |  2 +
 frontend/src/lib/locales/tr-TR/index.ts       |  2 +
 frontend/src/lib/locales/zh-CN/index.ts       |  2 +
 frontend/src/lib/locales/zh-TW/index.ts       |  2 +
 tests/test_models_api.py                      | 69 +++++++++++++++++++
 18 files changed, 138 insertions(+), 26 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 73d5b155..e01e0237 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- Optional model defaults (transformation, tools, large context, TTS, STT) can now be cleared: `PUT /api/models/defaults` honors explicit `null` (field absent still means "keep"; chat and embedding defaults reject `null`), and the default-model selects offer a "None" / "Use fallback (chat default)" option for the optional defaults (#1091)
 - `docker-compose.yml` now uses the YAML list (exec) form for the SurrealDB `command`, so `SURREAL_USER` / `SURREAL_PASSWORD` values containing spaces are passed as single arguments instead of being split; the mirrored snippets in the installation docs and README (which had drifted — no credential interpolation, SurrealDB port published on all interfaces) are back in sync with the shipped file (#1093)
 - zh-CN and zh-TW podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) now include the profile name via the `{{name}}` placeholder, matching the other 12 locales (#1084)
 - Docker images now force the Next.js frontend to bind to `0.0.0.0` in the supervisord command itself, so container runtimes that inject `HOSTNAME` (e.g. Podman pods, where it resolves to `127.0.1.1`) can no longer make the UI unreachable. The `HOSTNAME` variable is no longer honored as a frontend bind override — set the new `FRONTEND_BIND_HOST` variable instead (#994)
diff --git a/api/routers/models.py b/api/routers/models.py
index 7332e55c..686fa2d8 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -330,33 +330,35 @@ async def get_default_models():
         )
 
 
+# Defaults the app cannot function without — they can be reassigned but
+# never cleared (the optional ones fall back to the chat default or are
+# simply skipped when unset).
+REQUIRED_DEFAULTS = {"default_chat_model", "default_embedding_model"}
+
+
 @router.put("/models/defaults", response_model=DefaultModelsResponse)
 async def update_default_models(defaults_data: DefaultModelsResponse):
-    """Update default model assignments."""
+    """Update default model assignments.
+
+    Partial-update semantics keyed on field PRESENCE, not value: a field
+    absent from the payload is left untouched, while an explicit null clears
+    the default (except required ones). `is not None` checks would silently
+    ignore a null sent to clear a default — the old value survived while the
+    client saw success (same anti-pattern fixed for credentials in #1046).
+    """
     try:
         defaults = await DefaultModels.get_instance()
 
-        # Update only provided fields
-        if defaults_data.default_chat_model is not None:
-            defaults.default_chat_model = defaults_data.default_chat_model  # type: ignore[attr-defined]
-        if defaults_data.default_transformation_model is not None:
-            defaults.default_transformation_model = (
-                defaults_data.default_transformation_model
-            )  # type: ignore[attr-defined]
-        if defaults_data.large_context_model is not None:
-            defaults.large_context_model = defaults_data.large_context_model  # type: ignore[attr-defined]
-        if defaults_data.default_text_to_speech_model is not None:
-            defaults.default_text_to_speech_model = (
-                defaults_data.default_text_to_speech_model
-            )  # type: ignore[attr-defined]
-        if defaults_data.default_speech_to_text_model is not None:
-            defaults.default_speech_to_text_model = (
-                defaults_data.default_speech_to_text_model
-            )  # type: ignore[attr-defined]
-        if defaults_data.default_embedding_model is not None:
-            defaults.default_embedding_model = defaults_data.default_embedding_model  # type: ignore[attr-defined]
-        if defaults_data.default_tools_model is not None:
-            defaults.default_tools_model = defaults_data.default_tools_model  # type: ignore[attr-defined]
+        sent = defaults_data.model_fields_set
+        for field in DefaultModelsResponse.model_fields:
+            if field not in sent:
+                continue
+            value = getattr(defaults_data, field)
+            if value is None and field in REQUIRED_DEFAULTS:
+                raise InvalidInputError(
+                    f"{field} is required and cannot be cleared, only reassigned"
+                )
+            setattr(defaults, field, value)
 
         await defaults.update()
 
diff --git a/frontend/src/components/settings/DefaultModelSelectors.tsx b/frontend/src/components/settings/DefaultModelSelectors.tsx
index 776cba19..4727cd3a 100644
--- a/frontend/src/components/settings/DefaultModelSelectors.tsx
+++ b/frontend/src/components/settings/DefaultModelSelectors.tsx
@@ -20,9 +20,14 @@ interface DefaultConfig {
   description: string
   modelType: ModelType
   required?: boolean
+  /** When unset, this default falls back to the chat default (see open_notebook/ai/models.py). */
+  fallsBackToChat?: boolean
   id: string
 }
 
+// Radix Select reserves "" for "no selection", so the clear option needs a sentinel.
+const NONE_VALUE = '__none__'
+
 interface DefaultModelSelectProps {
   config: DefaultConfig
   available: Model[]
@@ -49,8 +54,8 @@ function DefaultModelSelect({
       </Label>
       <div className="flex gap-1">
         <Select
-          value={currentValue || ""}
-          onValueChange={(v) => onChange(config.key, v)}
+          value={currentValue || (config.required ? "" : NONE_VALUE)}
+          onValueChange={(v) => onChange(config.key, v === NONE_VALUE ? "" : v)}
         >
           <SelectTrigger
             id={config.id}
@@ -63,6 +68,13 @@ function DefaultModelSelect({
             } />
           </SelectTrigger>
           <SelectContent>
+            {!config.required && (
+              <SelectItem value={NONE_VALUE}>
+                <span className="text-muted-foreground">
+                  {config.fallsBackToChat ? t('models.noneFallbackToChat') : t('models.noneOption')}
+                </span>
+              </SelectItem>
+            )}
             {available.sort((a, b) => a.name.localeCompare(b.name)).map(model => (
               <SelectItem key={model.id} value={model.id}>
                 <div className="flex items-center justify-between w-full">
@@ -122,8 +134,8 @@ export function DefaultModelSelectors({
   ]
 
   const advancedConfigs: DefaultConfig[] = [
-    { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', required: true, id: `${generatedId}-transform` },
-    { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', id: `${generatedId}-tools` },
+    { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', fallsBackToChat: true, id: `${generatedId}-transform` },
+    { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', fallsBackToChat: true, id: `${generatedId}-tools` },
     { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', id: `${generatedId}-large` },
   ]
 
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 18610135..fe553dee 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -860,6 +860,8 @@ export const bnIN = {
     defaultAssignmentsDesc: "Open Notebook জুড়ে বিভিন্ন কাজের জন্য কোন মডেল ব্যবহার করব তা কনফিগার করুন",
     missingRequiredModels: "প্রয়োজনীয় মডেল অনুপস্থিত: {{models}}। এগুলি ছাড়া Open Notebook সঠিকভাবে কাজ নাও করতে পারে।",
     selectModelPlaceholder: "একটি মডেল নির্বাচন করুন",
+    noneOption: "কোনোটিই নয়",
+    noneFallbackToChat: "ফলব্যাক ব্যবহার করুন (চ্যাট ডিফল্ট)",
     requiredModelPlaceholder: "⚠️ প্রয়োজন - একটি মডেল নির্বাচন করুন",
     chatModelLabel: "চ্যাট মডেল",
     chatModelDesc: "চ্যাট কথোপকথনের জন্য ব্যবহৃত",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index cdd0e7cf..e6c8d90b 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -859,6 +859,8 @@ export const caES = {
     defaultAssignmentsDesc: "Configura quins models s'usaran per a diferents propòsits a Open Notebook",
     missingRequiredModels: "Falten models obligatoris: {{models}}. Open Notebook pot no funcionar correctament sense aquests.",
     selectModelPlaceholder: "Selecciona un model",
+    noneOption: "Cap",
+    noneFallbackToChat: "Utilitza l'alternativa (xat per defecte)",
     requiredModelPlaceholder: "⚠️ Obligatori - Selecciona un model",
     chatModelLabel: "Model de xat",
     chatModelDesc: "S'usa per a les converses de xat",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index f25cee45..b5ec161e 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -862,6 +862,8 @@ export const deDE = {
     defaultAssignmentsDesc: "Konfiguriere, welche Modelle Open Notebook für verschiedene Zwecke verwendet",
     missingRequiredModels: "Erforderliche Modelle fehlen: {{models}}. Open Notebook funktioniert ohne diese möglicherweise nicht korrekt.",
     selectModelPlaceholder: "Modell auswählen",
+    noneOption: "Keines",
+    noneFallbackToChat: "Fallback verwenden (Chat-Standard)",
     requiredModelPlaceholder: "⚠️ Erforderlich – Modell auswählen",
     chatModelLabel: "Chat-Modell",
     chatModelDesc: "Wird für Chat-Unterhaltungen verwendet",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index c9a16545..df9aea2e 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -858,6 +858,8 @@ export const enUS = {
     defaultAssignmentsDesc: "Configure which models to use for different purposes across Open Notebook",
     missingRequiredModels: "Missing required models: {{models}}. Open Notebook may not function properly without these.",
     selectModelPlaceholder: "Select a model",
+    noneOption: "None",
+    noneFallbackToChat: "Use fallback (chat default)",
     requiredModelPlaceholder: "⚠️ Required - Select a model",
     chatModelLabel: "Chat Model",
     chatModelDesc: "Used for chat conversations",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 66d808c5..2a8a4d03 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -860,6 +860,8 @@ export const esES = {
     defaultAssignmentsDesc: "Configura qué modelos usar para diferentes propósitos en Open Notebook",
     missingRequiredModels: "Faltan modelos requeridos: {{models}}. Open Notebook puede no funcionar correctamente sin estos.",
     selectModelPlaceholder: "Seleccionar un modelo",
+    noneOption: "Ninguno",
+    noneFallbackToChat: "Usar alternativa (chat predeterminado)",
     requiredModelPlaceholder: "⚠️ Requerido - Seleccionar un modelo",
     chatModelLabel: "Modelo de chat",
     chatModelDesc: "Usado para conversaciones de chat",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index c1aa81fa..83624614 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -859,6 +859,8 @@ export const frFR = {
     defaultAssignmentsDesc: "Configurez quels modèles utiliser pour les différents usages d'Open Notebook",
     missingRequiredModels: "Modèles requis manquants : {{models}}. Open Notebook pourrait ne pas fonctionner correctement sans eux.",
     selectModelPlaceholder: "Sélectionnez un modèle",
+    noneOption: "Aucun",
+    noneFallbackToChat: "Utiliser le repli (chat par défaut)",
     requiredModelPlaceholder: "⚠️ Requis - Sélectionnez un modèle",
     chatModelLabel: "Modèle de Chat",
     chatModelDesc: "Utilisé pour les conversations",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index e594820d..d3452d16 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -859,6 +859,8 @@ export const itIT = {
     defaultAssignmentsDesc: "Configura quali modelli usare per diversi scopi in Open Notebook",
     missingRequiredModels: "Modelli richiesti mancanti: {{models}}. Open Notebook potrebbe non funzionare correttamente senza questi.",
     selectModelPlaceholder: "Seleziona un modello",
+    noneOption: "Nessuno",
+    noneFallbackToChat: "Usa il fallback (predefinito chat)",
     requiredModelPlaceholder: "⚠️ Richiesto - Seleziona un modello",
     chatModelLabel: "Modello chat",
     chatModelDesc: "Usato per le conversazioni chat",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index a370cbcf..af8f0600 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -859,6 +859,8 @@ export const jaJP = {
     defaultAssignmentsDesc: "Open Notebook全体で異なる目的に使用するモデルを設定",
     missingRequiredModels: "必須モデルがありません: {{models}}。これらがないとOpen Notebookが正しく機能しない可能性があります。",
     selectModelPlaceholder: "モデルを選択",
+    noneOption: "なし",
+    noneFallbackToChat: "フォールバックを使用（チャットのデフォルト）",
     requiredModelPlaceholder: "⚠️ 必須 - モデルを選択",
     chatModelLabel: "チャットモデル",
     chatModelDesc: "チャット会話に使用",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 360595ec..8625d5b0 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -859,6 +859,8 @@ export const plPL = {
     defaultAssignmentsDesc: "Skonfiguruj, których modeli używać do różnych celów w Open Notebook",
     missingRequiredModels: "Brakuje wymaganych modeli: {{models}}. Bez nich Open Notebook może nie działać poprawnie.",
     selectModelPlaceholder: "Wybierz model",
+    noneOption: "Brak",
+    noneFallbackToChat: "Użyj rezerwowego (domyślny czat)",
     requiredModelPlaceholder: "⚠️ Wymagane – wybierz model",
     chatModelLabel: "Model czatu",
     chatModelDesc: "Używany w rozmowach na czacie",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 69e0c6df..1c609b19 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -859,6 +859,8 @@ export const ptBR = {
     defaultAssignmentsDesc: "Configure quais modelos usar para diferentes propósitos no Open Notebook",
     missingRequiredModels: "Modelos obrigatórios ausentes: {{models}}. O Open Notebook pode não funcionar corretamente sem eles.",
     selectModelPlaceholder: "Selecione um modelo",
+    noneOption: "Nenhum",
+    noneFallbackToChat: "Usar alternativa (padrão do chat)",
     requiredModelPlaceholder: "⚠️ Obrigatório - Selecione um modelo",
     chatModelLabel: "Modelo de Chat",
     chatModelDesc: "Usado para conversas de chat",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 8efde385..31200179 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -859,6 +859,8 @@ export const ruRU = {
     defaultAssignmentsDesc: "Настройте, какие модели использовать для различных задач в Open Notebook",
     missingRequiredModels: "Отсутствуют необходимые модели: {{models}}. Open Notebook может работать некорректно без них.",
     selectModelPlaceholder: "Выберите модель",
+    noneOption: "Нет",
+    noneFallbackToChat: "Использовать запасной вариант (чат по умолчанию)",
     requiredModelPlaceholder: "⚠️ Обязательно — выберите модель",
     chatModelLabel: "Модель чата",
     chatModelDesc: "Используется для чат-разговоров",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 122fbbdb..accd7135 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -859,6 +859,8 @@ export const trTR = {
     defaultAssignmentsDesc: "Open Notebook genelinde farklı amaçlar için hangi modellerin kullanılacağını yapılandırın",
     missingRequiredModels: "Eksik gerekli modeller: {{models}}. Bu modeller olmadan Open Notebook düzgün çalışmayabilir.",
     selectModelPlaceholder: "Model seçin",
+    noneOption: "Yok",
+    noneFallbackToChat: "Yedeği kullan (varsayılan sohbet)",
     requiredModelPlaceholder: "⚠️ Gerekli - Model seçin",
     chatModelLabel: "Sohbet Modeli",
     chatModelDesc: "Sohbet konuşmaları için kullanılır",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index b1ec2f73..1a57795c 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -859,6 +859,8 @@ export const zhCN = {
     defaultAssignmentsDesc: "配置用于 Open Notebook 不同用途的默认模型",
     missingRequiredModels: "缺少必需的模型：{{models}}。如果没有这些模型，Open Notebook 可能无法正常运行。",
     selectModelPlaceholder: "选择一个模型",
+    noneOption: "无",
+    noneFallbackToChat: "使用回退（聊天默认模型）",
     requiredModelPlaceholder: "⚠️ 必需 - 请选择一个模型",
     chatModelLabel: "聊天模型",
     chatModelDesc: "用于聊天对话",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 3a64986c..0915f62d 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -859,6 +859,8 @@ export const zhTW = {
     defaultAssignmentsDesc: "設定用於 Open Notebook 不同用途的預設模型",
     missingRequiredModels: "缺少必需的模型：{{models}}。如果没有這些模型，Open Notebook 可能無法正常運行。",
     selectModelPlaceholder: "選擇一個模型",
+    noneOption: "無",
+    noneFallbackToChat: "使用備用（聊天預設模型）",
     requiredModelPlaceholder: "⚠️ 必需 - 請選擇一個模型",
     chatModelLabel: "聊天模型",
     chatModelDesc: "用於聊天對話",
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index f298b6b5..44351fad 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -389,3 +389,72 @@ class TestModelsProviderAvailability:
         # Should support only text_to_speech
         supported = data["supported_types"]["openai_compatible"]
         assert supported == ["text_to_speech"]
+
+
+class TestUpdateDefaultModels:
+    """PUT /models/defaults must distinguish 'field absent' (keep) from
+    'field explicitly null' (clear).
+
+    The handler used `is not None` guards, so a null sent to clear a default
+    was silently ignored — the old value survived while the client saw
+    success (#1091, same anti-pattern fixed for credentials in #1046). Now
+    keyed on model_fields_set, with the required defaults (chat, embedding)
+    rejecting explicit nulls.
+    """
+
+    def _mock_defaults(self):
+        from unittest.mock import MagicMock
+
+        defaults = MagicMock()
+        defaults.default_chat_model = "model:chat"
+        defaults.default_transformation_model = "model:transform"
+        defaults.large_context_model = None
+        defaults.default_text_to_speech_model = "model:tts"
+        defaults.default_speech_to_text_model = None
+        defaults.default_embedding_model = "model:embed"
+        defaults.default_tools_model = "model:tools"
+        defaults.update = AsyncMock()
+        return defaults
+
+    def _put(self, client, defaults, body):
+        with patch(
+            "api.routers.models.DefaultModels.get_instance",
+            new=AsyncMock(return_value=defaults),
+        ):
+            return client.put("/api/models/defaults", json=body)
+
+    def test_explicit_null_clears_optional_default(self, client):
+        defaults = self._mock_defaults()
+        response = self._put(client, defaults, {"default_transformation_model": None})
+
+        assert response.status_code == 200
+        assert defaults.default_transformation_model is None
+        defaults.update.assert_awaited_once()
+        assert response.json()["default_transformation_model"] is None
+
+    def test_absent_field_keeps_current_value(self, client):
+        defaults = self._mock_defaults()
+        response = self._put(client, defaults, {"default_tools_model": "model:new-tools"})
+
+        assert response.status_code == 200
+        assert defaults.default_tools_model == "model:new-tools"
+        # Not in the payload -> untouched (JSON null semantics must not leak in)
+        assert defaults.default_transformation_model == "model:transform"
+        assert response.json()["default_transformation_model"] == "model:transform"
+
+    def test_explicit_null_on_required_default_is_rejected(self, client):
+        for field in ("default_chat_model", "default_embedding_model"):
+            defaults = self._mock_defaults()
+            response = self._put(client, defaults, {field: None})
+
+            assert response.status_code == 400, field
+            assert field in response.json()["detail"]
+            defaults.update.assert_not_awaited()
+
+    def test_required_default_can_still_be_reassigned(self, client):
+        defaults = self._mock_defaults()
+        response = self._put(client, defaults, {"default_chat_model": "model:new-chat"})
+
+        assert response.status_code == 200
+        assert defaults.default_chat_model == "model:new-chat"
+        defaults.update.assert_awaited_once()

From a35258b94efefaa56693d8f6f1ba6f398da21b41 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 10:58:09 -0300
Subject: [PATCH 197/345] =?UTF-8?q?docs:=20record=20ADR-006=20=E2=80=94=20?=
 =?UTF-8?q?migration=20granularity=20follows=20merge=20granularity=20(#110?=
 =?UTF-8?q?0)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Documents the policy decided while reviewing PR #1085: one migration per PR
that needs one, numbers allocated in merge order, never consolidate after a
migration lands on main (v1-dev images apply migrations the moment they hit
main, so post-hoc squashing would desync _sbl_migrations for dev users).
Cross-referenced from the Database Migration playbook; also adds the missing
ADR-005 row to the decisions index.
---
 docs/7-DEVELOPMENT/change-playbooks.md        |  1 +
 .../ADR-006-migration-granularity.md          | 35 +++++++++++++++++++
 docs/7-DEVELOPMENT/decisions/README.md        |  2 ++
 3 files changed, 38 insertions(+)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-006-migration-granularity.md

diff --git a/docs/7-DEVELOPMENT/change-playbooks.md b/docs/7-DEVELOPMENT/change-playbooks.md
index 37c68684..65065958 100644
--- a/docs/7-DEVELOPMENT/change-playbooks.md
+++ b/docs/7-DEVELOPMENT/change-playbooks.md
@@ -122,6 +122,7 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 **Important:**
 - Migrations are numbered and run in order
 - They're tracked in the `_sbl_migrations` table — won't re-run
+- One migration per PR that needs one, numbered in merge order; never consolidate after a migration lands on main (dev images apply it immediately) — see [ADR-006](decisions/ADR-006-migration-granularity.md)
 - For destructive changes (DROP FIELD), consider data preservation
 - Test with existing data, not just empty database
 
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-006-migration-granularity.md b/docs/7-DEVELOPMENT/decisions/ADR-006-migration-granularity.md
new file mode 100644
index 00000000..5d0417d1
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-006-migration-granularity.md
@@ -0,0 +1,35 @@
+# ADR-006: Migration granularity follows merge granularity, not release granularity
+
+- **Status**: Accepted
+- **Date**: 2026-07
+- **Related**: #1085 (first case decided under this policy), #1031 (surreal-basics migration runner — policy carries over), [change-playbooks.md](../change-playbooks.md) (Database Migration playbook)
+
+## Context
+
+Multiple issues in the same release cycle can each need a schema migration. The intuitive worry: merging them one by one produces several small migrations (19, 20, 21, 22…) inside a single release, which "feels" messier than one consolidated migration per release.
+
+Two facts about this project shape the decision:
+
+1. Migrations run **automatically at API startup**, in sequence, tracked in `_sbl_migrations`. Users upgrading across any version span run all pending migrations transparently — they never see the count.
+2. A `v1-dev` image is published on **every push to main**. A migration is therefore effectively *released the moment it lands on main* — dev-image users apply it immediately, before any versioned release exists.
+
+## Decision
+
+**One migration per PR that needs one; numbers allocated in merge order; never consolidate after a migration has touched main.**
+
+- Each migration lives in the PR that motivates it, with its `_down` counterpart, reviewed together with the code that requires it.
+- Multiple small migrations per release is the normal, healthy state — not a smell.
+- Consolidation is only allowed **before merge**, as a development-time choice: when two in-flight PRs touch the *same table*, coordinate them (stack the PRs, or fold the schema change into the first one to land).
+- Branch protection's strict mode makes number collisions between parallel PRs surface as a required update-branch before merge; renumbering is part of that rebase.
+
+## Alternatives considered
+
+- **One consolidated migration per release** — rejected: post-hoc squashing breaks every `v1-dev` user whose `_sbl_migrations` already recorded the individual migrations, and it decouples schema changes from the PRs that explain them.
+- **Batch migrations in a release branch** — rejected for the same dev-image reason, plus it would hold merged features hostage to release timing.
+
+## Consequences
+
+- Release notes may list several migrations; that is an implementation detail, not a user-facing cost.
+- Debugging stays cheap: "migration 21 broke it" is bisectable; a slice of a consolidated release migration is not.
+- If parallel batches make number collisions frequent, add a cheap CI check (duplicate or gapped numbers fail the build).
+- When the migration runner moves to surreal-basics (#1031), this policy transfers unchanged — it is about granularity and immutability-after-main, not about the runner.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index 87e25d61..55405c2c 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -46,5 +46,7 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-002](ADR-002-external-libraries.md) | Delegate platform/media support to focused external libraries | Accepted |
 | [ADR-003](ADR-003-streamlit-to-nextjs.md) | Migrate the UI from Streamlit to Next.js | Accepted |
 | [ADR-004](ADR-004-background-workers.md) | Long-running work runs on background workers | Accepted |
+| [ADR-005](ADR-005-release-confidence-process.md) | Releases pass a risk-based confidence process, gated on the real image | Accepted |
+| [ADR-006](ADR-006-migration-granularity.md) | Migration granularity follows merge granularity, not release granularity | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |

From 4180f07d528cf891d0fcd4280e75a008ad964bde Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 11:01:12 -0300
Subject: [PATCH 198/345] chore(deps): consolidate dev tooling into
 dependency-groups so plain uv sync works (#1101)

The dev toolchain was split across two drifted lists: the legacy
[project.optional-dependencies].dev (mypy, notebook packages, old pins) and
[dependency-groups].dev (pytest plugins, current pins). Plain 'uv sync'
installs only the group, so the documented 'uv run python -m mypy .' failed
on a fresh clone while CI's typecheck job papered over it with --extra dev.

Merge everything into [dependency-groups].dev, move Jupyter-only packages
(ipykernel, ipywidgets) to a non-default 'notebooks' group, drop the legacy
extras list, and switch the CI typecheck job to plain 'uv sync'.
---
 .github/workflows/test.yml |  2 +-
 CHANGELOG.md               |  1 +
 pyproject.toml             | 17 ++++++-----------
 uv.lock                    | 29 +++++++++++------------------
 4 files changed, 19 insertions(+), 30 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index c22bb93e..1195d8ad 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -78,7 +78,7 @@ jobs:
         run: uv python install
 
       - name: Install dependencies
-        run: uv sync --extra dev
+        run: uv sync
 
       - name: Run mypy
         run: uv run python -m mypy .
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e01e0237..447507ce 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- `uv sync` alone now provides the full dev toolchain: the legacy `[project.optional-dependencies].dev` list was merged into `[dependency-groups].dev` (mypy included — the documented `uv run python -m mypy .` previously failed on a fresh clone), Jupyter-only packages moved to a separate `notebooks` group, and the CI typecheck job no longer needs `--extra dev` (#1101)
 - Optional model defaults (transformation, tools, large context, TTS, STT) can now be cleared: `PUT /api/models/defaults` honors explicit `null` (field absent still means "keep"; chat and embedding defaults reject `null`), and the default-model selects offer a "None" / "Use fallback (chat default)" option for the optional defaults (#1091)
 - `docker-compose.yml` now uses the YAML list (exec) form for the SurrealDB `command`, so `SURREAL_USER` / `SURREAL_PASSWORD` values containing spaces are passed as single arguments instead of being split; the mirrored snippets in the installation docs and README (which had drifted — no credential interpolation, SurrealDB port published on all interfaces) are back in sync with the shipped file (#1093)
 - zh-CN and zh-TW podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) now include the profile name via the `{{name}}` placeholder, matching the other 12 locales (#1084)
diff --git a/pyproject.toml b/pyproject.toml
index e633a0ff..b3c0ed4f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -55,29 +55,24 @@ package-dir = {"open_notebook" = "open_notebook"}
 open_notebook = ["ai/assets/*"]
 
 
-[project.optional-dependencies]
-dev = [
-    "ipykernel>=6.29.5",
-    "ruff>=0.5.5",
-    "mypy>=1.11.1",
-    "types-requests>=2.32.0.20241016",
-    "ipywidgets>=8.1.5",
-    "pre-commit>=4.0.1",
-    "pytest>=9.0.3",
-]
-
 [build-system]
 requires = ["setuptools>=61.0"]
 build-backend = "setuptools.build_meta"
 
 [dependency-groups]
 dev = [
+    "mypy>=1.11.1",
     "pre-commit>=4.1.0",
+    "pytest>=9.0.3",
     "pytest-asyncio>=1.2.0",
     "pytest-cov>=7.0.0",
     "ruff>=0.14.13",
     "types-requests>=2.32.4.20250913",
 ]
+notebooks = [
+    "ipykernel>=6.29.5",
+    "ipywidgets>=8.1.5",
+]
 
 [tool.isort]
 profile = "black"
diff --git a/uv.lock b/uv.lock
index 260f7fa0..b5691836 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2073,25 +2073,20 @@ dependencies = [
     { name = "uvicorn" },
 ]
 
-[package.optional-dependencies]
+[package.dev-dependencies]
 dev = [
-    { name = "ipykernel" },
-    { name = "ipywidgets" },
     { name = "mypy" },
     { name = "pre-commit" },
     { name = "pytest" },
-    { name = "ruff" },
-    { name = "types-requests" },
-]
-
-[package.dev-dependencies]
-dev = [
-    { name = "pre-commit" },
     { name = "pytest-asyncio" },
     { name = "pytest-cov" },
     { name = "ruff" },
     { name = "types-requests" },
 ]
+notebooks = [
+    { name = "ipykernel" },
+    { name = "ipywidgets" },
+]
 
 [package.metadata]
 requires-dist = [
@@ -2101,8 +2096,6 @@ requires-dist = [
     { name = "esperanto", specifier = ">=2.20.0,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
-    { name = "ipykernel", marker = "extra == 'dev'", specifier = ">=6.29.5" },
-    { name = "ipywidgets", marker = "extra == 'dev'", specifier = ">=8.1.5" },
     { name = "langchain", specifier = ">=1.3.9,<2" },
     { name = "langchain-anthropic", specifier = ">=1.4.6,<2" },
     { name = "langchain-core", specifier = ">=1.4.6,<2" },
@@ -2115,32 +2108,32 @@ requires-dist = [
     { name = "langgraph", specifier = ">=1.0.5,<2" },
     { name = "langgraph-checkpoint-sqlite", specifier = ">=3.0.1,<4" },
     { name = "loguru", specifier = ">=0.7.2" },
-    { name = "mypy", marker = "extra == 'dev'", specifier = ">=1.11.1" },
     { name = "numpy", specifier = ">=2.4.1" },
     { name = "podcast-creator", specifier = ">=0.12.0,<1" },
-    { name = "pre-commit", marker = "extra == 'dev'", specifier = ">=4.0.1" },
     { name = "pycountry", specifier = ">=26.2.16" },
     { name = "pydantic", specifier = ">=2.9.2" },
-    { name = "pytest", marker = "extra == 'dev'", specifier = ">=9.0.3" },
     { name = "python-dotenv", specifier = ">=1.2.2" },
-    { name = "ruff", marker = "extra == 'dev'", specifier = ">=0.5.5" },
     { name = "surreal-commands", specifier = ">=1.3.1,<2" },
     { name = "surrealdb", specifier = ">=1.0.4" },
     { name = "tiktoken", specifier = ">=0.12.0" },
     { name = "tomli", specifier = ">=2.0.2" },
-    { name = "types-requests", marker = "extra == 'dev'", specifier = ">=2.32.0.20241016" },
     { name = "uvicorn", specifier = ">=0.24.0" },
 ]
-provides-extras = ["dev"]
 
 [package.metadata.requires-dev]
 dev = [
+    { name = "mypy", specifier = ">=1.11.1" },
     { name = "pre-commit", specifier = ">=4.1.0" },
+    { name = "pytest", specifier = ">=9.0.3" },
     { name = "pytest-asyncio", specifier = ">=1.2.0" },
     { name = "pytest-cov", specifier = ">=7.0.0" },
     { name = "ruff", specifier = ">=0.14.13" },
     { name = "types-requests", specifier = ">=2.32.4.20250913" },
 ]
+notebooks = [
+    { name = "ipykernel", specifier = ">=6.29.5" },
+    { name = "ipywidgets", specifier = ">=8.1.5" },
+]
 
 [[package]]
 name = "openai"

From c5b28486916a0279c42aefe1d6360338afecc7bb Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 11:05:51 -0300
Subject: [PATCH 199/345] fix(insights): stamp created/updated on
 source_insight and stop serializing "None" (#1085)

source_insight was the only content table without created/updated field
definitions. Since the table is SCHEMAFULL and insights are created via a
raw CREATE (create_insight command), SurrealDB silently dropped any
timestamps - rows genuinely held NONE - and the API then wrapped them in
str(), so clients received the literal string "None".

- Migration 19 defines created/updated on source_insight with the same
  time::now() defaults used by source, note and notebook, so new insights
  are stamped at creation. Existing rows are left untouched (no backfill).
- SourceInsightResponse.created/updated are now Optional[str]; both
  routers emit an ISO 8601 string when the timestamp is present and null
  when it is absent (legacy rows), never "None".
- Frontend types updated to string | null accordingly.
- New tests cover the migration definition/registration and the API
  serialization (absent -> null, present -> ISO string).

Note: Python-side stamping alone was not viable - the table is SCHEMAFULL,
so undefined fields written by the client are silently dropped on
SurrealDB 2.x (verified against a live instance), hence the schema
migration mirroring the other tables.

Closes #1045
---
 CHANGELOG.md                                  |   1 +
 api/models.py                                 |   6 +-
 api/routers/insights.py                       |   4 +-
 api/routers/sources.py                        |   4 +-
 .../sources/SourceInsightDialog.tsx           |   2 +-
 frontend/src/lib/api/insights.ts              |   5 +-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/19.surrealql          |   8 +
 .../database/migrations/19_down.surrealql     |   4 +
 tests/test_insight_timestamps.py              | 157 ++++++++++++++++++
 10 files changed, 188 insertions(+), 9 deletions(-)
 create mode 100644 open_notebook/database/migrations/19.surrealql
 create mode 100644 open_notebook/database/migrations/19_down.surrealql
 create mode 100644 tests/test_insight_timestamps.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 447507ce..b4ca6051 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- Source insights now get `created`/`updated` timestamps stamped at creation (migration 19 mirrors the defaults used by the other tables), and the insights API returns `null` — instead of the literal string `"None"` — for legacy insights that predate the migration (#1045)
 - `uv sync` alone now provides the full dev toolchain: the legacy `[project.optional-dependencies].dev` list was merged into `[dependency-groups].dev` (mypy included — the documented `uv run python -m mypy .` previously failed on a fresh clone), Jupyter-only packages moved to a separate `notebooks` group, and the CI typecheck job no longer needs `--extra dev` (#1101)
 - Optional model defaults (transformation, tools, large context, TTS, STT) can now be cleared: `PUT /api/models/defaults` honors explicit `null` (field absent still means "keep"; chat and embedding defaults reject `null`), and the default-model selects offer a "None" / "Use fallback (chat default)" option for the optional defaults (#1091)
 - `docker-compose.yml` now uses the YAML list (exec) form for the SurrealDB `command`, so `SURREAL_USER` / `SURREAL_PASSWORD` values containing spaces are passed as single arguments instead of being split; the mirrored snippets in the installation docs and README (which had drifted — no credential interpolation, SurrealDB port published on all interfaces) are back in sync with the shipped file (#1093)
diff --git a/api/models.py b/api/models.py
index 3e046cf5..8cc56803 100644
--- a/api/models.py
+++ b/api/models.py
@@ -392,8 +392,10 @@ class SourceInsightResponse(BaseModel):
     source_id: str
     insight_type: str
     content: str
-    created: str
-    updated: str
+    # Optional: insights created before migration 19 have no timestamps,
+    # and the API must return null for them (never the string "None").
+    created: Optional[str] = None
+    updated: Optional[str] = None
 
 
 class InsightCreationResponse(BaseModel):
diff --git a/api/routers/insights.py b/api/routers/insights.py
index a271a9a8..9a4db7ba 100644
--- a/api/routers/insights.py
+++ b/api/routers/insights.py
@@ -28,8 +28,8 @@ async def get_insight(insight_id: str):
             source_id=source.id or "",
             insight_type=insight.insight_type,
             content=insight.content,
-            created=str(insight.created),
-            updated=str(insight.updated),
+            created=insight.created.isoformat() if insight.created else None,
+            updated=insight.updated.isoformat() if insight.updated else None,
         )
     except HTTPException:
         raise
diff --git a/api/routers/sources.py b/api/routers/sources.py
index 01ac1c51..f2b64673 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -1042,8 +1042,8 @@ async def get_source_insights(source_id: str):
                 source_id=source_id,
                 insight_type=insight.insight_type,
                 content=insight.content,
-                created=str(insight.created),
-                updated=str(insight.updated),
+                created=insight.created.isoformat() if insight.created else None,
+                updated=insight.updated.isoformat() if insight.updated else None,
             )
             for insight in insights
         ]
diff --git a/frontend/src/components/sources/SourceInsightDialog.tsx b/frontend/src/components/sources/SourceInsightDialog.tsx
index 17e1e6da..37d810c9 100644
--- a/frontend/src/components/sources/SourceInsightDialog.tsx
+++ b/frontend/src/components/sources/SourceInsightDialog.tsx
@@ -17,7 +17,7 @@ interface SourceInsightDialogProps {
     id: string
     insight_type?: string
     content?: string
-    created?: string
+    created?: string | null
     source_id?: string
   }
   onDelete?: (insightId: string) => Promise<void>
diff --git a/frontend/src/lib/api/insights.ts b/frontend/src/lib/api/insights.ts
index ef5fd909..a2fbcde7 100644
--- a/frontend/src/lib/api/insights.ts
+++ b/frontend/src/lib/api/insights.ts
@@ -5,8 +5,9 @@ export interface SourceInsightResponse {
   source_id: string
   insight_type: string
   content: string
-  created: string
-  updated: string
+  // Insights created before backend migration 19 have no timestamps
+  created: string | null
+  updated: string | null
 }
 
 export interface CreateSourceInsightRequest {
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index cf823c12..ab0cefb2 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -130,6 +130,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/18.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/19.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -186,6 +189,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/18_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/19_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/19.surrealql b/open_notebook/database/migrations/19.surrealql
new file mode 100644
index 00000000..6d98e472
--- /dev/null
+++ b/open_notebook/database/migrations/19.surrealql
@@ -0,0 +1,8 @@
+-- Migration 19: Timestamp source_insight records
+-- source_insight is SCHEMAFULL but never defined created/updated, so new
+-- insights were stored without timestamps (and clients saw "None").
+-- Mirrors the created/updated definitions used by source, note and notebook.
+-- Existing rows are left untouched (no backfill); the API returns null for them.
+
+DEFINE FIELD IF NOT EXISTS created ON source_insight DEFAULT time::now() VALUE $before OR time::now();
+DEFINE FIELD IF NOT EXISTS updated ON source_insight DEFAULT time::now() VALUE time::now();
diff --git a/open_notebook/database/migrations/19_down.surrealql b/open_notebook/database/migrations/19_down.surrealql
new file mode 100644
index 00000000..f48f20be
--- /dev/null
+++ b/open_notebook/database/migrations/19_down.surrealql
@@ -0,0 +1,4 @@
+-- Migration 19 rollback: Remove source_insight timestamp fields
+
+REMOVE FIELD IF EXISTS created ON TABLE source_insight;
+REMOVE FIELD IF EXISTS updated ON TABLE source_insight;
diff --git a/tests/test_insight_timestamps.py b/tests/test_insight_timestamps.py
new file mode 100644
index 00000000..58378d4b
--- /dev/null
+++ b/tests/test_insight_timestamps.py
@@ -0,0 +1,157 @@
+"""Tests for #1045 - source_insight timestamps.
+
+Two layers:
+1. New source_insight records get created/updated stamped at creation time
+   (migration 19 defines the fields with time::now() defaults, mirroring the
+   source/note/notebook tables - insight creation happens via a raw CREATE in
+   commands/embedding_commands.py, not ObjectModel.save()).
+2. The API serializes missing timestamps as null (never the string "None")
+   and present timestamps as ISO strings.
+"""
+
+from datetime import datetime, timezone
+from pathlib import Path
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.notebook import Source, SourceInsight
+
+MIGRATIONS_DIR = (
+    Path(__file__).parent.parent / "open_notebook" / "database" / "migrations"
+)
+
+
+@pytest.fixture
+def client():
+    """Create test client after environment variables have been cleared by conftest."""
+    from api.main import app
+
+    return TestClient(app)
+
+
+# ============================================================================
+# Layer 1: new insights get created/updated stamped at creation time
+# ============================================================================
+
+
+class TestInsightTimestampStamping:
+    """source_insight rows must be stamped with created/updated on creation.
+
+    Insights are created by a raw `CREATE source_insight CONTENT {...}` query
+    (create_insight command), and source_insight is SCHEMAFULL - so the stamp
+    has to come from the schema (DEFINE FIELD ... DEFAULT time::now()), exactly
+    like the source, note and notebook tables. These tests guard the two
+    failure modes: the migration losing its field definitions, and the
+    migration file not being registered in the hard-coded manager list.
+    """
+
+    def test_migration_defines_timestamp_fields(self):
+        sql = (MIGRATIONS_DIR / "19.surrealql").read_text()
+        assert (
+            "DEFINE FIELD IF NOT EXISTS created ON source_insight "
+            "DEFAULT time::now() VALUE $before OR time::now()" in sql
+        )
+        assert (
+            "DEFINE FIELD IF NOT EXISTS updated ON source_insight "
+            "DEFAULT time::now() VALUE time::now()" in sql
+        )
+
+    def test_migration_down_removes_timestamp_fields(self):
+        sql = (MIGRATIONS_DIR / "19_down.surrealql").read_text()
+        assert "REMOVE FIELD IF EXISTS created ON TABLE source_insight" in sql
+        assert "REMOVE FIELD IF EXISTS updated ON TABLE source_insight" in sql
+
+    def test_migration_is_registered_in_manager(self):
+        """Migrations are hard-coded in AsyncMigrationManager, not discovered."""
+        from open_notebook.database.async_migrate import AsyncMigrationManager
+
+        manager = AsyncMigrationManager()
+        # up and down lists must stay in sync and include migration 19
+        assert len(manager.up_migrations) >= 19
+        assert len(manager.up_migrations) == len(manager.down_migrations)
+        assert "created ON source_insight" in manager.up_migrations[18].sql
+        assert "updated ON source_insight" in manager.up_migrations[18].sql
+
+
+# ============================================================================
+# Layer 2: API serialization - null when absent, ISO string when present
+# ============================================================================
+
+
+def _insight(created=None, updated=None) -> SourceInsight:
+    return SourceInsight(
+        id="source_insight:abc",
+        insight_type="summary",
+        content="Some insight",
+        created=created,
+        updated=updated,
+    )
+
+
+def _source() -> Source:
+    return Source(id="source:xyz", title="A source")
+
+
+class TestInsightTimestampSerialization:
+    """API must emit null for missing timestamps and ISO strings otherwise."""
+
+    @patch("api.routers.insights.SourceInsight.get", new_callable=AsyncMock)
+    def test_get_insight_absent_timestamps_are_null(self, mock_get, client):
+        insight = _insight()
+        mock_get.return_value = insight
+
+        with patch.object(
+            SourceInsight, "get_source", new_callable=AsyncMock
+        ) as mock_source:
+            mock_source.return_value = _source()
+            response = client.get("/api/insights/source_insight:abc")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body["created"] is None
+        assert body["updated"] is None
+
+    @patch("api.routers.insights.SourceInsight.get", new_callable=AsyncMock)
+    def test_get_insight_present_timestamps_are_iso(self, mock_get, client):
+        ts = datetime(2026, 7, 11, 12, 30, 45, tzinfo=timezone.utc)
+        mock_get.return_value = _insight(created=ts, updated=ts)
+
+        with patch.object(
+            SourceInsight, "get_source", new_callable=AsyncMock
+        ) as mock_source:
+            mock_source.return_value = _source()
+            response = client.get("/api/insights/source_insight:abc")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body["created"] == "2026-07-11T12:30:45+00:00"
+        assert body["updated"] == "2026-07-11T12:30:45+00:00"
+
+    @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
+    def test_list_source_insights_never_serializes_the_string_none(
+        self, mock_get, client
+    ):
+        ts = datetime(2026, 7, 11, 12, 30, 45, tzinfo=timezone.utc)
+        source = _source()
+        mock_get.return_value = source
+
+        with patch.object(
+            Source, "get_insights", new_callable=AsyncMock
+        ) as mock_insights:
+            mock_insights.return_value = [
+                _insight(),  # legacy row without timestamps
+                _insight(created=ts, updated=ts),  # stamped row
+            ]
+            response = client.get("/api/sources/source:xyz/insights")
+
+        assert response.status_code == 200
+        body = response.json()
+        assert body[0]["created"] is None
+        assert body[0]["updated"] is None
+        assert body[1]["created"] == "2026-07-11T12:30:45+00:00"
+        assert body[1]["updated"] == "2026-07-11T12:30:45+00:00"
+        for row in body:
+            assert row["created"] != "None"
+            assert row["updated"] != "None"

From b21466c027f9f609e3a4e5e1b7386e2abab9f189 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 12:23:22 -0300
Subject: [PATCH 200/345] fix(frontend): shared "content no longer exists"
 state for orphan references (#1102)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Clicking a chat/Ask citation that references a deleted source, insight,
or note previously behaved inconsistently: a generic red error for
sources, a silently blank dialog for insights, and an empty ghost editor
(inviting edits of a deleted note) for notes.

- Add a shared ContentUnavailable component (built on EmptyState) with
  two variants: 'not-found' (404 — deleted / no longer exists) and
  'error' (transient load failure), used by all three dialogs
- SourceInsightDialog and NoteEditorDialog now consume isError from
  their hooks instead of falling back to the blank stub; the note
  editor (and its save path) is fully gated behind the fetch result
- SourceDetailContent distinguishes 404 from other errors and renders
  the shared state; keyed by sourceId so state resets per source
- Global react-query retry now skips 404s (retrying cannot resurrect a
  deleted item); added isNotFoundError helper and reused it for the
  file-download 404 check
- New common.contentUnavailable.* strings in all 14 locales; removed
  now-unused sources.notFound and sources.loadFailed keys
- Component tests for the three dialogs' not-found/error states,
  including the note-editor gate

Closes #455
---
 CHANGELOG.md                                  |   1 +
 .../components/NoteEditorDialog.test.tsx      | 117 +++++++++++++++++
 .../notebooks/components/NoteEditorDialog.tsx |  20 ++-
 .../src/app/(dashboard)/sources/[id]/page.tsx |   1 +
 .../components/common/ContentUnavailable.tsx  |  55 ++++++++
 .../sources/SourceDetailContent.test.tsx      | 105 +++++++++++++++
 .../sources/SourceDetailContent.tsx           |  23 ++--
 .../src/components/sources/SourceDialog.tsx   |   2 +
 .../sources/SourceInsightDialog.test.tsx      | 122 ++++++++++++++++++
 .../sources/SourceInsightDialog.tsx           |  17 ++-
 frontend/src/lib/api/query-client.ts          |   5 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   8 +-
 frontend/src/lib/locales/ca-ES/index.ts       |   8 +-
 frontend/src/lib/locales/de-DE/index.ts       |   8 +-
 frontend/src/lib/locales/en-US/index.ts       |   8 +-
 frontend/src/lib/locales/es-ES/index.ts       |   8 +-
 frontend/src/lib/locales/fr-FR/index.ts       |   8 +-
 frontend/src/lib/locales/it-IT/index.ts       |   8 +-
 frontend/src/lib/locales/ja-JP/index.ts       |   8 +-
 frontend/src/lib/locales/pl-PL/index.ts       |   8 +-
 frontend/src/lib/locales/pt-BR/index.ts       |   8 +-
 frontend/src/lib/locales/ru-RU/index.ts       |   8 +-
 frontend/src/lib/locales/tr-TR/index.ts       |   8 +-
 frontend/src/lib/locales/zh-CN/index.ts       |   8 +-
 frontend/src/lib/locales/zh-TW/index.ts       |   8 +-
 frontend/src/lib/utils/error-handler.ts       |  10 ++
 26 files changed, 547 insertions(+), 43 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.test.tsx
 create mode 100644 frontend/src/components/common/ContentUnavailable.tsx
 create mode 100644 frontend/src/components/sources/SourceDetailContent.test.tsx
 create mode 100644 frontend/src/components/sources/SourceInsightDialog.test.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b4ca6051..ea7b02e3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
 - Source insights now get `created`/`updated` timestamps stamped at creation (migration 19 mirrors the defaults used by the other tables), and the insights API returns `null` — instead of the literal string `"None"` — for legacy insights that predate the migration (#1045)
 - `uv sync` alone now provides the full dev toolchain: the legacy `[project.optional-dependencies].dev` list was merged into `[dependency-groups].dev` (mypy included — the documented `uv run python -m mypy .` previously failed on a fresh clone), Jupyter-only packages moved to a separate `notebooks` group, and the CI typecheck job no longer needs `--extra dev` (#1101)
 - Optional model defaults (transformation, tools, large context, TTS, STT) can now be cleared: `PUT /api/models/defaults` honors explicit `null` (field absent still means "keep"; chat and embedding defaults reject `null`), and the default-model selects offer a "None" / "Use fallback (chat default)" option for the optional defaults (#1091)
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.test.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.test.tsx
new file mode 100644
index 00000000..d24814b8
--- /dev/null
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.test.tsx
@@ -0,0 +1,117 @@
+import { render, screen, within } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { NoteEditorDialog } from './NoteEditorDialog'
+import { useNote } from '@/lib/hooks/use-notes'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/hooks/use-notes', () => ({
+  useNote: vi.fn(),
+  useCreateNote: () => ({ isPending: false, mutateAsync: vi.fn() }),
+  useUpdateNote: () => ({ isPending: false, mutateAsync: vi.fn() }),
+}))
+
+vi.mock('@/components/ui/markdown-editor', () => ({
+  MarkdownEditor: ({ value }: { value: string }) => (
+    <textarea data-testid="markdown-editor" defaultValue={value} />
+  ),
+}))
+
+const mockUseNote = vi.mocked(useNote)
+
+const notFoundError = Object.assign(new Error('Request failed with status code 404'), {
+  isAxiosError: true,
+  response: { status: 404 },
+})
+
+const networkError = Object.assign(new Error('Network Error'), {
+  isAxiosError: true,
+  response: undefined,
+})
+
+type UseNoteResult = ReturnType<typeof useNote>
+
+const asResult = (value: Partial<UseNoteResult>) => value as UseNoteResult
+
+function renderDialog(props: Partial<Parameters<typeof NoteEditorDialog>[0]> = {}) {
+  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return render(
+    <QueryClientProvider client={queryClient}>
+      <NoteEditorDialog
+        open={true}
+        onOpenChange={vi.fn()}
+        notebookId=""
+        note={{ id: 'note-1', title: null, content: null }}
+        {...props}
+      />
+    </QueryClientProvider>
+  )
+}
+
+describe('NoteEditorDialog', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('shows the shared not-found state instead of the editor when the note returns 404', () => {
+    mockUseNote.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: notFoundError })
+    )
+
+    renderDialog()
+
+    expect(screen.getByTestId('content-unavailable')).toBeInTheDocument()
+    expect(screen.getByText('common.contentUnavailable.notFoundTitle')).toBeInTheDocument()
+    // The editor is gated: no ghost editing or saving
+    expect(screen.queryByTestId('markdown-editor')).not.toBeInTheDocument()
+    expect(screen.queryByText('sources.saveNote')).not.toBeInTheDocument()
+  })
+
+  it('shows the shared load-error state for non-404 failures', () => {
+    mockUseNote.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: networkError })
+    )
+
+    renderDialog()
+
+    expect(screen.getByText('common.contentUnavailable.errorTitle')).toBeInTheDocument()
+    expect(screen.queryByTestId('markdown-editor')).not.toBeInTheDocument()
+  })
+
+  it('closes the dialog from the not-found state close button', () => {
+    mockUseNote.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: notFoundError })
+    )
+    const onOpenChange = vi.fn()
+
+    renderDialog({ onOpenChange })
+
+    within(screen.getByTestId('content-unavailable')).getByText('common.close').click()
+    expect(onOpenChange).toHaveBeenCalledWith(false)
+  })
+
+  it('renders the editor when the note loads successfully', () => {
+    mockUseNote.mockReturnValue(
+      asResult({
+        data: {
+          id: 'note-1',
+          title: 'My note',
+          content: 'Note body',
+          note_type: 'human',
+          created: '2026-01-01T00:00:00Z',
+          updated: '2026-01-01T00:00:00Z',
+        } as UseNoteResult['data'],
+        isLoading: false,
+        isError: false,
+        error: null,
+      })
+    )
+
+    renderDialog()
+
+    expect(screen.getByTestId('markdown-editor')).toBeInTheDocument()
+    expect(screen.getByText('sources.saveNote')).toBeInTheDocument()
+    expect(screen.queryByTestId('content-unavailable')).not.toBeInTheDocument()
+  })
+})
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
index 674fdd0f..7de09bcf 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
@@ -13,6 +13,8 @@ import { MarkdownEditor } from '@/components/ui/markdown-editor'
 import { InlineEdit } from '@/components/common/InlineEdit'
 import { cn } from "@/lib/utils";
 import { useTranslation } from '@/lib/hooks/use-translation'
+import { ContentUnavailable } from '@/components/common/ContentUnavailable'
+import { isNotFoundError } from '@/lib/utils/error-handler'
 
 const createNoteSchema = z.object({
   title: z.string().optional(),
@@ -40,7 +42,16 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
     ? (note.id.includes(':') ? note.id : `note:${note.id}`)
     : ''
 
-  const { data: fetchedNote, isLoading: noteLoading } = useNote(noteIdWithPrefix, { enabled: open && !!note?.id })
+  const {
+    data: fetchedNote,
+    isLoading: noteLoading,
+    isError: noteError,
+    error: noteFetchError,
+  } = useNote(noteIdWithPrefix, { enabled: open && !!note?.id })
+  // When editing, a failed fetch means we must not render the editor: the
+  // note may have been deleted (dangling chat/ask references) and offering
+  // an empty editor would invite ghost edits.
+  const noteUnavailable = isEditing && noteError
   const isSaving = isEditing ? updateNote.isPending : createNote.isPending
   const {
     handleSubmit,
@@ -126,6 +137,12 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
         <DialogTitle className="sr-only">
           {isEditing ? t('sources.editNote') : t('sources.createNote')}
         </DialogTitle>
+        {noteUnavailable ? (
+          <ContentUnavailable
+            variant={isNotFoundError(noteFetchError) ? 'not-found' : 'error'}
+            onClose={handleClose}
+          />
+        ) : (
         <form onSubmit={handleSubmit(onSubmit)} className="flex flex-1 min-h-0 flex-col min-w-0">
           {isEditing && noteLoading ? (
             <div className="flex-1 flex items-center justify-center py-10">
@@ -191,6 +208,7 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
             </Button>
           </div>
         </form>
+        )}
       </DialogContent>
     </Dialog>
   )
diff --git a/frontend/src/app/(dashboard)/sources/[id]/page.tsx b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
index d24b9d3c..2c374321 100644
--- a/frontend/src/app/(dashboard)/sources/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
@@ -44,6 +44,7 @@ export default function SourceDetailPage() {
         {/* Left column - Source detail */}
         <div className="overflow-y-auto px-4 pb-6">
           <SourceDetailContent
+            key={sourceId}
             sourceId={sourceId}
             showChatButton={false}
             onClose={handleBack}
diff --git a/frontend/src/components/common/ContentUnavailable.tsx b/frontend/src/components/common/ContentUnavailable.tsx
new file mode 100644
index 00000000..d6195347
--- /dev/null
+++ b/frontend/src/components/common/ContentUnavailable.tsx
@@ -0,0 +1,55 @@
+'use client'
+
+import { AlertCircle, FileQuestion } from 'lucide-react'
+import { Button } from '@/components/ui/button'
+import { EmptyState } from '@/components/common/EmptyState'
+import { useTranslation } from '@/lib/hooks/use-translation'
+
+interface ContentUnavailableProps {
+  /**
+   * 'not-found' — the item was deleted or no longer exists (HTTP 404).
+   * 'error' — the item could not be loaded (network/server failure).
+   */
+  variant: 'not-found' | 'error'
+  onClose?: () => void
+}
+
+/**
+ * Shared friendly state for content that cannot be displayed.
+ *
+ * Used by the source, note and insight dialogs so that dangling references
+ * (e.g. citations in old chat messages pointing at deleted items) render the
+ * exact same explanation everywhere instead of a blank dialog or a raw error.
+ */
+export function ContentUnavailable({ variant, onClose }: ContentUnavailableProps) {
+  const { t } = useTranslation()
+  const notFound = variant === 'not-found'
+
+  return (
+    <div
+      className="flex h-full flex-col justify-center px-6"
+      data-testid="content-unavailable"
+    >
+      <EmptyState
+        icon={notFound ? FileQuestion : AlertCircle}
+        title={
+          notFound
+            ? t('common.contentUnavailable.notFoundTitle')
+            : t('common.contentUnavailable.errorTitle')
+        }
+        description={
+          notFound
+            ? t('common.contentUnavailable.notFoundDescription')
+            : t('common.contentUnavailable.errorDescription')
+        }
+        action={
+          onClose && (
+            <Button variant="outline" size="sm" onClick={onClose}>
+              {t('common.close')}
+            </Button>
+          )
+        }
+      />
+    </div>
+  )
+}
diff --git a/frontend/src/components/sources/SourceDetailContent.test.tsx b/frontend/src/components/sources/SourceDetailContent.test.tsx
new file mode 100644
index 00000000..c8a2505e
--- /dev/null
+++ b/frontend/src/components/sources/SourceDetailContent.test.tsx
@@ -0,0 +1,105 @@
+import { render, screen, waitFor } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { SourceDetailContent } from './SourceDetailContent'
+import { sourcesApi } from '@/lib/api/sources'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/api/sources', () => ({
+  sourcesApi: {
+    get: vi.fn(),
+  },
+}))
+
+vi.mock('@/lib/api/insights', () => ({
+  insightsApi: {
+    listForSource: vi.fn().mockResolvedValue([]),
+  },
+}))
+
+vi.mock('@/lib/api/transformations', () => ({
+  transformationsApi: {
+    list: vi.fn().mockResolvedValue([]),
+  },
+}))
+
+vi.mock('@/lib/api/embedding', () => ({
+  embeddingApi: {
+    embedSource: vi.fn(),
+  },
+}))
+
+vi.mock('@/components/sources/SourceInsightDialog', () => ({
+  SourceInsightDialog: () => null,
+}))
+
+vi.mock('@/components/sources/NotebookAssociations', () => ({
+  NotebookAssociations: () => null,
+}))
+
+const mockSourcesGet = vi.mocked(sourcesApi.get)
+
+const notFoundError = Object.assign(new Error('Request failed with status code 404'), {
+  isAxiosError: true,
+  response: { status: 404 },
+})
+
+const networkError = Object.assign(new Error('Network Error'), {
+  isAxiosError: true,
+  response: undefined,
+})
+
+function renderContent(onClose?: () => void) {
+  const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+  return render(
+    <QueryClientProvider client={queryClient}>
+      <SourceDetailContent sourceId="source:missing" onClose={onClose} />
+    </QueryClientProvider>
+  )
+}
+
+describe('SourceDetailContent', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('shows the shared not-found state when the source returns 404', async () => {
+    mockSourcesGet.mockRejectedValue(notFoundError)
+
+    renderContent()
+
+    await waitFor(() => {
+      expect(screen.getByTestId('content-unavailable')).toBeInTheDocument()
+    })
+    expect(screen.getByText('common.contentUnavailable.notFoundTitle')).toBeInTheDocument()
+    expect(screen.getByText('common.contentUnavailable.notFoundDescription')).toBeInTheDocument()
+  })
+
+  it('shows the shared load-error state for non-404 failures', async () => {
+    mockSourcesGet.mockRejectedValue(networkError)
+
+    renderContent()
+
+    await waitFor(() => {
+      expect(screen.getByTestId('content-unavailable')).toBeInTheDocument()
+    })
+    expect(screen.getByText('common.contentUnavailable.errorTitle')).toBeInTheDocument()
+    expect(
+      screen.queryByText('common.contentUnavailable.notFoundTitle')
+    ).not.toBeInTheDocument()
+  })
+
+  it('invokes onClose from the not-found close button', async () => {
+    mockSourcesGet.mockRejectedValue(notFoundError)
+    const onClose = vi.fn()
+
+    renderContent(onClose)
+
+    await waitFor(() => {
+      expect(screen.getByText('common.close')).toBeInTheDocument()
+    })
+    screen.getByText('common.close').click()
+    expect(onClose).toHaveBeenCalled()
+  })
+})
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index 5c5ce34b..d92973a6 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -2,7 +2,6 @@
 
 import { useState, useEffect, useCallback, useMemo } from 'react'
 import { useQueryClient } from '@tanstack/react-query'
-import { isAxiosError } from 'axios'
 import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import { sourcesApi } from '@/lib/api/sources'
 import { insightsApi, SourceInsightResponse } from '@/lib/api/insights'
@@ -11,6 +10,8 @@ import { embeddingApi } from '@/lib/api/embedding'
 import { SourceDetailResponse } from '@/lib/types/api'
 import { Transformation } from '@/lib/types/transformations'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
+import { ContentUnavailable } from '@/components/common/ContentUnavailable'
+import { isNotFoundError } from '@/lib/utils/error-handler'
 import { InlineEdit } from '@/components/common/InlineEdit'
 import { Button } from '@/components/ui/button'
 import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
@@ -100,7 +101,7 @@ export function SourceDetailContent({
   const [loading, setLoading] = useState(true)
   const [loadingInsights, setLoadingInsights] = useState(false)
   const [creatingInsight, setCreatingInsight] = useState(false)
-  const [error, setError] = useState<string | null>(null)
+  const [loadError, setLoadError] = useState<'not-found' | 'error' | null>(null)
   const [copied, setCopied] = useState(false)
   const [isEmbedding, setIsEmbedding] = useState(false)
   const [isDownloadingFile, setIsDownloadingFile] = useState(false)
@@ -112,6 +113,7 @@ export function SourceDetailContent({
   const fetchSource = useCallback(async () => {
     try {
       setLoading(true)
+      setLoadError(null)
       const data = await sourcesApi.get(sourceId)
       setSource(data)
       if (typeof data.file_available === 'boolean') {
@@ -123,11 +125,13 @@ export function SourceDetailContent({
       }
     } catch (err) {
       console.error('Failed to fetch source:', err)
-      setError(t('sources.loadFailed'))
+      // A 404 means the source was deleted (e.g. a dangling chat/ask
+      // reference) — handled by the shared "content no longer exists" state.
+      setLoadError(isNotFoundError(err) ? 'not-found' : 'error')
     } finally {
       setLoading(false)
     }
-  }, [sourceId, t])
+  }, [sourceId])
 
   const fetchInsights = useCallback(async () => {
     try {
@@ -301,7 +305,7 @@ export function SourceDetailContent({
       toast.success(t('common.success'))
     } catch (err) {
       console.error('Failed to download file:', err)
-      if (isAxiosError(err) && err.response?.status === 404) {
+      if (isNotFoundError(err)) {
         setFileAvailable(false)
         toast.error(t('sources.fileUnavailable'))
       } else {
@@ -389,11 +393,12 @@ export function SourceDetailContent({
     )
   }
 
-  if (error || !source) {
+  if (loadError || !source) {
     return (
-      <div className="flex h-full flex-col items-center justify-center gap-4 p-8">
-        <p className="text-red-500">{error || t('sources.notFound')}</p>
-      </div>
+      <ContentUnavailable
+        variant={loadError ?? 'error'}
+        onClose={onClose}
+      />
     )
   }
 
diff --git a/frontend/src/components/sources/SourceDialog.tsx b/frontend/src/components/sources/SourceDialog.tsx
index 2128b5f6..6bb29db5 100644
--- a/frontend/src/components/sources/SourceDialog.tsx
+++ b/frontend/src/components/sources/SourceDialog.tsx
@@ -48,7 +48,9 @@ export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps
 
         {/* Source detail content */}
         <div className="flex-1 overflow-y-auto min-h-0">
+          {/* Keyed by source so state (loading/not-found) resets per source */}
           <SourceDetailContent
+            key={sourceIdWithPrefix}
             sourceId={sourceIdWithPrefix}
             showChatButton={true}
             onChatClick={handleChatClick}
diff --git a/frontend/src/components/sources/SourceInsightDialog.test.tsx b/frontend/src/components/sources/SourceInsightDialog.test.tsx
new file mode 100644
index 00000000..d1250f3c
--- /dev/null
+++ b/frontend/src/components/sources/SourceInsightDialog.test.tsx
@@ -0,0 +1,122 @@
+import { render, screen, within } from '@testing-library/react'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { SourceInsightDialog } from './SourceInsightDialog'
+import { useInsight } from '@/lib/hooks/use-insights'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/hooks/use-insights', () => ({
+  useInsight: vi.fn(),
+}))
+
+vi.mock('@/lib/hooks/use-modal-manager', () => ({
+  useModalManager: () => ({ openModal: vi.fn() }),
+}))
+
+const mockUseInsight = vi.mocked(useInsight)
+
+const notFoundError = Object.assign(new Error('Request failed with status code 404'), {
+  isAxiosError: true,
+  response: { status: 404 },
+})
+
+const networkError = Object.assign(new Error('Network Error'), {
+  isAxiosError: true,
+  response: undefined,
+})
+
+type UseInsightResult = ReturnType<typeof useInsight>
+
+const asResult = (value: Partial<UseInsightResult>) => value as UseInsightResult
+
+describe('SourceInsightDialog', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('shows the shared not-found state when the insight returns 404', () => {
+    mockUseInsight.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: notFoundError })
+    )
+
+    render(
+      <SourceInsightDialog
+        open={true}
+        onOpenChange={vi.fn()}
+        insight={{ id: 'insight-1', insight_type: '', content: '' }}
+      />
+    )
+
+    expect(screen.getByTestId('content-unavailable')).toBeInTheDocument()
+    expect(screen.getByText('common.contentUnavailable.notFoundTitle')).toBeInTheDocument()
+    expect(screen.getByText('common.contentUnavailable.notFoundDescription')).toBeInTheDocument()
+    // No ghost fallback content and no "view source" affordance
+    expect(screen.queryByText('sources.viewSource')).not.toBeInTheDocument()
+  })
+
+  it('shows the shared load-error state for non-404 failures', () => {
+    mockUseInsight.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: networkError })
+    )
+
+    render(
+      <SourceInsightDialog
+        open={true}
+        onOpenChange={vi.fn()}
+        insight={{ id: 'insight-1', insight_type: '', content: '' }}
+      />
+    )
+
+    expect(screen.getByText('common.contentUnavailable.errorTitle')).toBeInTheDocument()
+    expect(
+      screen.queryByText('common.contentUnavailable.notFoundTitle')
+    ).not.toBeInTheDocument()
+  })
+
+  it('closes the dialog from the not-found state close button', () => {
+    mockUseInsight.mockReturnValue(
+      asResult({ data: undefined, isLoading: false, isError: true, error: notFoundError })
+    )
+    const onOpenChange = vi.fn()
+
+    render(
+      <SourceInsightDialog
+        open={true}
+        onOpenChange={onOpenChange}
+        insight={{ id: 'insight-1', insight_type: '', content: '' }}
+      />
+    )
+
+    within(screen.getByTestId('content-unavailable')).getByText('common.close').click()
+    expect(onOpenChange).toHaveBeenCalledWith(false)
+  })
+
+  it('renders the insight content when the fetch succeeds', () => {
+    mockUseInsight.mockReturnValue(
+      asResult({
+        data: {
+          id: 'insight-1',
+          source_id: 'source:1',
+          insight_type: 'summary',
+          content: 'Fetched insight content',
+          created: null,
+          updated: null,
+        },
+        isLoading: false,
+        isError: false,
+        error: null,
+      })
+    )
+
+    render(
+      <SourceInsightDialog
+        open={true}
+        onOpenChange={vi.fn()}
+        insight={{ id: 'insight-1', insight_type: '', content: '' }}
+      />
+    )
+
+    expect(screen.getByText('Fetched insight content')).toBeInTheDocument()
+    expect(screen.queryByTestId('content-unavailable')).not.toBeInTheDocument()
+  })
+})
diff --git a/frontend/src/components/sources/SourceInsightDialog.tsx b/frontend/src/components/sources/SourceInsightDialog.tsx
index 37d810c9..09d7aa0f 100644
--- a/frontend/src/components/sources/SourceInsightDialog.tsx
+++ b/frontend/src/components/sources/SourceInsightDialog.tsx
@@ -9,6 +9,8 @@ import {MarkdownRenderer} from '@/components/ui/markdown-renderer'
 import { useInsight } from '@/lib/hooks/use-insights'
 import { useModalManager } from '@/lib/hooks/use-modal-manager'
 import { useTranslation } from '@/lib/hooks/use-translation'
+import { ContentUnavailable } from '@/components/common/ContentUnavailable'
+import { isNotFoundError } from '@/lib/utils/error-handler'
 
 interface SourceInsightDialogProps {
   open: boolean
@@ -34,13 +36,15 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
     ? (insight.id.includes(':') ? insight.id : `source_insight:${insight.id}`)
     : ''
 
-  const { data: fetchedInsight, isLoading } = useInsight(insightIdWithPrefix, { enabled: open && !!insight?.id })
+  const { data: fetchedInsight, isLoading, isError, error } = useInsight(insightIdWithPrefix, { enabled: open && !!insight?.id })
 
-  // Use fetched data if available, otherwise fall back to passed-in insight
-  const displayInsight = fetchedInsight ?? insight
+  // Use fetched data if available, otherwise fall back to passed-in insight.
+  // On fetch error there is nothing trustworthy to show (the passed-in data
+  // may reference a deleted item), so every derived field goes blank here.
+  const displayInsight = isError ? undefined : (fetchedInsight ?? insight)
 
   // Get source_id from fetched data (preferred) or passed-in insight
-  const sourceId = fetchedInsight?.source_id ?? insight?.source_id
+  const sourceId = displayInsight?.source_id
 
   const handleViewSource = () => {
     if (sourceId) {
@@ -123,6 +127,11 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
               <div className="flex items-center justify-center py-10">
                 <span className="text-sm text-muted-foreground">{t('common.loading')}</span>
               </div>
+            ) : isError ? (
+              <ContentUnavailable
+                variant={isNotFoundError(error) ? 'not-found' : 'error'}
+                onClose={() => onOpenChange(false)}
+              />
             ) : displayInsight ? (
               <MarkdownRenderer>
                 {displayInsight.content}
diff --git a/frontend/src/lib/api/query-client.ts b/frontend/src/lib/api/query-client.ts
index 052317c9..a0043a0f 100644
--- a/frontend/src/lib/api/query-client.ts
+++ b/frontend/src/lib/api/query-client.ts
@@ -1,11 +1,14 @@
 import { QueryClient } from '@tanstack/react-query'
+import { isNotFoundError } from '@/lib/utils/error-handler'
 
 export const queryClient = new QueryClient({
   defaultOptions: {
     queries: {
       staleTime: 5 * 60 * 1000, // 5 minutes
       gcTime: 10 * 60 * 1000, // 10 minutes
-      retry: 2,
+      // Retry transient failures, but never retry 404s: the item was
+      // deleted (or never existed) and retrying cannot change that.
+      retry: (failureCount, error) => !isNotFoundError(error) && failureCount < 2,
       refetchOnWindowFocus: false,
     },
     mutations: {
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index fe553dee..06316087 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -111,6 +111,12 @@ export const bnIN = {
     finalAnswer: "চূড়ান্ত উত্তর",
     notebookLabel: "নোটবুক: {{name}}",
     itemNotFound: "এই {{type}} খুঁজে পাওয়া যায়নি",
+    contentUnavailable: {
+      notFoundTitle: "এই কন্টেন্টটি আর নেই",
+      notFoundDescription: "এটি মুছে ফেলা হয়ে থাকতে পারে। পুরনো বার্তার রেফারেন্স ইতিমধ্যে সরিয়ে ফেলা কন্টেন্টের দিকে নির্দেশ করতে পারে।",
+      errorTitle: "এই কন্টেন্ট লোড করা যায়নি",
+      errorDescription: "লোড করার সময় কিছু ভুল হয়েছে। আবার চেষ্টা করুন।",
+    },
     accessibility: {
       transformationViews: "ট্রান্সফরমেশন ভিউ",
       searchKB: "আপনার জ্ঞানভান্ডার জিজ্ঞাসা বা অনুসন্ধান করুন",
@@ -393,7 +399,6 @@ export const bnIN = {
     manageNotebooks: "নোটবুক পরিচালনা করুন",
     manageNotebooksDesc: "এই উৎস কোন নোটবুকে রয়েছে তা পরিচালনা করুন",
     noNotebooksAvailable: "কোন নোটবুক উপলব্ধ নয়",
-    loadFailed: "উৎসের বিবরণ লোড করতে ব্যর্থ",
     removeFromNotebook: "নোটবুক থেকে সরান",
     retryProcessing: "প্রক্রিয়াকরণ পুনরায় চেষ্টা করুন",
     refreshContent: "বিষয়বস্তু রিফ্রেশ করুন",
@@ -421,7 +426,6 @@ export const bnIN = {
     embeddingNever: "এমবেডিং অক্ষম",
     embeddingNeverDesc: "আপনার সেটিংস এমবেডিং এড়িয়ে যাওয়ার জন্য কনফিগার করা। এই উৎসের জন্য ভেক্টর সার্চ উপলব্ধ থাকবে না।",
     changeInSettings: "আপনি এটি সেটিংসে পরিবর্তন করতে পারেন",
-    notFound: "উৎস পাওয়া যায়নি",
     noContent: "কোন কন্টেন্ট উপলব্ধ নয়",
     insightsDesc: "মডেল বিশ্লেষণ থেকে তৈরি অন্তর্দৃষ্টি",
     uploadedFile: "আপলোড করা ফাইল",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index e6c8d90b..b4727eb5 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -111,6 +111,12 @@ export const caES = {
     finalAnswer: "Resposta final",
     notebookLabel: "Quadern: {{name}}",
     itemNotFound: "No s'ha pogut trobar aquest {{type}}",
+    contentUnavailable: {
+      notFoundTitle: "Aquest contingut ja no existeix",
+      notFoundDescription: "Pot haver estat eliminat. Les referències en missatges antics poden apuntar a contingut que ja s'ha eliminat.",
+      errorTitle: "No s'ha pogut carregar aquest contingut",
+      errorDescription: "Alguna cosa ha fallat en carregar-lo. Torna-ho a provar.",
+    },
     accessibility: {
       transformationViews: "Vistes de transformació",
       searchKB: "Pregunta o cerca a la base de coneixement",
@@ -393,7 +399,6 @@ export const caES = {
     manageNotebooks: "Gestiona els quaderns",
     manageNotebooksDesc: "Gestiona quins quaderns contenen aquesta font",
     noNotebooksAvailable: "No hi ha quaderns disponibles",
-    loadFailed: "Ha fallat la càrrega dels detalls de la font",
     removeFromNotebook: "Elimina del quadern",
     retryProcessing: "Torna a processar",
     refreshContent: "Actualitza el contingut",
@@ -421,7 +426,6 @@ export const caES = {
     embeddingNever: "La incrustació està desactivada",
     embeddingNeverDesc: "La configuració actual omet la incrustació. La cerca vectorial no estarà disponible per a aquesta font.",
     changeInSettings: "Pots canviar-ho a la Configuració",
-    notFound: "No s'ha trobat la font",
     noContent: "No hi ha contingut disponible",
     insightsDesc: "Anàlisis generades per l'anàlisi del model",
     uploadedFile: "Fitxer carregat",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index b5ec161e..031a2593 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -114,6 +114,12 @@ export const deDE = {
     finalAnswer: "Endgültige Antwort",
     notebookLabel: "Notebook: {{name}}",
     itemNotFound: "{{type}} konnte nicht gefunden werden",
+    contentUnavailable: {
+      notFoundTitle: "Dieser Inhalt existiert nicht mehr",
+      notFoundDescription: "Er wurde möglicherweise gelöscht. Verweise in älteren Nachrichten können auf inzwischen entfernte Inhalte zeigen.",
+      errorTitle: "Dieser Inhalt konnte nicht geladen werden",
+      errorDescription: "Beim Laden ist ein Fehler aufgetreten. Bitte versuchen Sie es erneut.",
+    },
     accessibility: {
       transformationViews: "Transformationsansichten",
       searchKB: "Wissensbasis fragen oder durchsuchen",
@@ -396,7 +402,6 @@ export const deDE = {
     manageNotebooks: "Notebooks verwalten",
     manageNotebooksDesc: "Verwalte, welche Notebooks diese Quelle enthalten",
     noNotebooksAvailable: "Keine Notebooks verfügbar",
-    loadFailed: "Quellendetails konnten nicht geladen werden",
     removeFromNotebook: "Aus Notebook entfernen",
     retryProcessing: "Verarbeitung erneut versuchen",
     refreshContent: "Inhalt aktualisieren",
@@ -424,7 +429,6 @@ export const deDE = {
     embeddingNever: "Einbettung deaktiviert",
     embeddingNeverDesc: "Deine Einstellungen sind so konfiguriert, dass Einbettung übersprungen wird. Die Vektorsuche ist für diese Quelle nicht verfügbar.",
     changeInSettings: "Du kannst das in den Einstellungen ändern",
-    notFound: "Quelle nicht gefunden",
     noContent: "Kein Inhalt verfügbar",
     insightsDesc: "Erkenntnisse aus der Modellanalyse",
     uploadedFile: "Hochgeladene Datei",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index df9aea2e..0f5319e8 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -109,6 +109,12 @@ export const enUS = {
     finalAnswer: "Final Answer",
     notebookLabel: "Notebook: {{name}}",
     itemNotFound: "This {{type}} could not be found",
+    contentUnavailable: {
+      notFoundTitle: "This content no longer exists",
+      notFoundDescription: "It may have been deleted. References in older messages can point to content that has since been removed.",
+      errorTitle: "Unable to load this content",
+      errorDescription: "Something went wrong while loading it. Please try again.",
+    },
     accessibility: {
       transformationViews: "Transformation views",
       searchKB: "Ask or search your knowledge base",
@@ -391,7 +397,6 @@ export const enUS = {
     manageNotebooks: "Manage Notebooks",
     manageNotebooksDesc: "Manage which notebooks contain this source",
     noNotebooksAvailable: "No notebooks available",
-    loadFailed: "Failed to load source details",
     removeFromNotebook: "Remove from Notebook",
     retryProcessing: "Retry Processing",
     refreshContent: "Refresh content",
@@ -419,7 +424,6 @@ export const enUS = {
     embeddingNever: "Embedding disabled",
     embeddingNeverDesc: "Your settings are configured to skip embedding. Vector search won't be available for this source.",
     changeInSettings: "You can change this in Settings",
-    notFound: "Source not found",
     noContent: "No content available",
     insightsDesc: "Insights generated from model analysis",
     uploadedFile: "Uploaded file",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 2a8a4d03..169ee62b 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -111,6 +111,12 @@ export const esES = {
     finalAnswer: "Respuesta final",
     notebookLabel: "Cuaderno: {{name}}",
     itemNotFound: "No se pudo encontrar este {{type}}",
+    contentUnavailable: {
+      notFoundTitle: "Este contenido ya no existe",
+      notFoundDescription: "Puede que haya sido eliminado. Las referencias en mensajes antiguos pueden apuntar a contenido que ya fue eliminado.",
+      errorTitle: "No se pudo cargar este contenido",
+      errorDescription: "Algo salió mal al cargarlo. Inténtalo de nuevo.",
+    },
     accessibility: {
       transformationViews: "Vistas de transformación",
       searchKB: "Pregunta o busca en tu base de conocimiento",
@@ -393,7 +399,6 @@ export const esES = {
     manageNotebooks: "Gestionar cuadernos",
     manageNotebooksDesc: "Gestiona qué cuadernos contienen esta fuente",
     noNotebooksAvailable: "No hay cuadernos disponibles",
-    loadFailed: "Error al cargar los detalles de la fuente",
     removeFromNotebook: "Quitar del cuaderno",
     retryProcessing: "Reintentar procesamiento",
     refreshContent: "Actualizar contenido",
@@ -421,7 +426,6 @@ export const esES = {
     embeddingNever: "Embedding deshabilitado",
     embeddingNeverDesc: "Tu configuración está establecida para omitir el embedding. La búsqueda vectorial no estará disponible para esta fuente.",
     changeInSettings: "Puedes cambiar esto en Configuración",
-    notFound: "Fuente no encontrada",
     noContent: "No hay contenido disponible",
     insightsDesc: "Análisis generados a partir del análisis del modelo",
     uploadedFile: "Archivo subido",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 83624614..ccdae9a0 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -111,6 +111,12 @@ export const frFR = {
     finalAnswer: "Réponse finale",
     notebookLabel: "Carnet : {{name}}",
     itemNotFound: "Ce {{type}} est introuvable",
+    contentUnavailable: {
+      notFoundTitle: "Ce contenu n'existe plus",
+      notFoundDescription: "Il a peut-être été supprimé. Les références dans les anciens messages peuvent pointer vers du contenu qui a depuis été supprimé.",
+      errorTitle: "Impossible de charger ce contenu",
+      errorDescription: "Une erreur s'est produite lors du chargement. Veuillez réessayer.",
+    },
     accessibility: {
       transformationViews: "Vues de transformation",
       searchKB: "Interroger ou fouiller votre base de connaissances",
@@ -393,7 +399,6 @@ export const frFR = {
     manageNotebooks: "Gérer les carnets",
     manageNotebooksDesc: "Gérer quels carnets contiennent cette source",
     noNotebooksAvailable: "Aucun carnet disponible",
-    loadFailed: "Échec du chargement des détails de la source",
     removeFromNotebook: "Retirer du carnet",
     retryProcessing: "Réessayer le traitement",
     refreshContent: "Actualiser le contenu",
@@ -421,7 +426,6 @@ export const frFR = {
     embeddingNever: "Indexation désactivée",
     embeddingNeverDesc: "Vos paramètres sont configurés pour ignorer l'indexation. La recherche vectorielle ne sera pas disponible pour cette source.",
     changeInSettings: "Vous pouvez modifier cela dans les Paramètres",
-    notFound: "Source introuvable",
     noContent: "Aucun contenu disponible",
     insightsDesc: "Aperçus générés par l'analyse du modèle",
     uploadedFile: "Fichier téléchargé",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index d3452d16..5efd396c 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -111,6 +111,12 @@ export const itIT = {
     finalAnswer: "Risposta finale",
     notebookLabel: "Quaderno: {{name}}",
     itemNotFound: "Questo {{type}} non è stato trovato",
+    contentUnavailable: {
+      notFoundTitle: "Questo contenuto non esiste più",
+      notFoundDescription: "Potrebbe essere stato eliminato. I riferimenti nei messaggi meno recenti possono puntare a contenuti ormai rimossi.",
+      errorTitle: "Impossibile caricare questo contenuto",
+      errorDescription: "Si è verificato un errore durante il caricamento. Riprova.",
+    },
     accessibility: {
       transformationViews: "Viste trasformazioni",
       searchKB: "Chiedi o cerca nella tua base di conoscenza",
@@ -393,7 +399,6 @@ export const itIT = {
     manageNotebooks: "Gestisci quaderni",
     manageNotebooksDesc: "Gestisci quali quaderni contengono questa fonte",
     noNotebooksAvailable: "Nessun quaderno disponibile",
-    loadFailed: "Impossibile caricare i dettagli della fonte",
     removeFromNotebook: "Rimuovi dal quaderno",
     retryProcessing: "Riprova elaborazione",
     refreshContent: "Aggiorna contenuto",
@@ -421,7 +426,6 @@ export const itIT = {
     embeddingNever: "Indicizzazione disabilitata",
     embeddingNeverDesc: "Le tue impostazioni sono configurate per saltare l'indicizzazione. La ricerca vettoriale non sarà disponibile per questa fonte.",
     changeInSettings: "Puoi modificare questo nelle Impostazioni",
-    notFound: "Fonte non trovata",
     noContent: "Nessun contenuto disponibile",
     insightsDesc: "Approfondimenti generati dall'analisi del modello",
     uploadedFile: "File caricato",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index af8f0600..1c89d0a2 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -111,6 +111,12 @@ export const jaJP = {
     finalAnswer: "最終回答",
     notebookLabel: "ノートブック: {{name}}",
     itemNotFound: "この{{type}}は見つかりませんでした",
+    contentUnavailable: {
+      notFoundTitle: "このコンテンツは存在しません",
+      notFoundDescription: "削除された可能性があります。過去のメッセージ内の参照は、すでに削除されたコンテンツを指している場合があります。",
+      errorTitle: "コンテンツを読み込めませんでした",
+      errorDescription: "読み込み中に問題が発生しました。もう一度お試しください。",
+    },
     accessibility: {
       transformationViews: "トランスフォーメーション表示",
       searchKB: "ナレッジベースに質問・検索",
@@ -393,7 +399,6 @@ export const jaJP = {
     manageNotebooks: "ノートブックを管理",
     manageNotebooksDesc: "このソースを含むノートブックを管理",
     noNotebooksAvailable: "利用可能なノートブックがありません",
-    loadFailed: "ソース詳細の読み込みに失敗しました",
     removeFromNotebook: "ノートブックから削除",
     retryProcessing: "処理を再試行",
     refreshContent: "コンテンツを更新",
@@ -421,7 +426,6 @@ export const jaJP = {
     embeddingNever: "Embeddingは無効",
     embeddingNeverDesc: "設定でEmbeddingをスキップするよう構成されています。このソースではベクトル検索は利用できません。",
     changeInSettings: "設定で変更できます",
-    notFound: "ソースが見つかりません",
     noContent: "コンテンツがありません",
     insightsDesc: "モデル分析から生成されたインサイト",
     uploadedFile: "アップロードされたファイル",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 8625d5b0..d3313370 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -111,6 +111,12 @@ export const plPL = {
     finalAnswer: "Ostateczna odpowiedź",
     notebookLabel: "Notatnik: {{name}}",
     itemNotFound: "Nie udało się odnaleźć elementu ({{type}})",
+    contentUnavailable: {
+      notFoundTitle: "Ta treść już nie istnieje",
+      notFoundDescription: "Mogła zostać usunięta. Odnośniki w starszych wiadomościach mogą wskazywać na treści, które zostały już usunięte.",
+      errorTitle: "Nie udało się wczytać tej treści",
+      errorDescription: "Coś poszło nie tak podczas wczytywania. Spróbuj ponownie.",
+    },
     accessibility: {
       transformationViews: "Widoki transformacji",
       searchKB: "Zadaj pytanie lub przeszukaj swoją bazę wiedzy",
@@ -393,7 +399,6 @@ export const plPL = {
     manageNotebooks: "Zarządzaj notatnikami",
     manageNotebooksDesc: "Zarządzaj notatnikami, które zawierają to źródło",
     noNotebooksAvailable: "Brak dostępnych notatników",
-    loadFailed: "Nie udało się załadować szczegółów źródła",
     removeFromNotebook: "Usuń z notatnika",
     retryProcessing: "Ponów przetwarzanie",
     refreshContent: "Odśwież treść",
@@ -421,7 +426,6 @@ export const plPL = {
     embeddingNever: "Osadzanie wyłączone",
     embeddingNeverDesc: "Twoje ustawienia są skonfigurowane tak, aby pomijać osadzanie. Wyszukiwanie wektorowe nie będzie dostępne dla tego źródła.",
     changeInSettings: "Możesz to zmienić w Ustawieniach",
-    notFound: "Nie znaleziono źródła",
     noContent: "Brak dostępnej treści",
     insightsDesc: "Wglądy wygenerowane na podstawie analizy modelu",
     uploadedFile: "Przesłany plik",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 1c609b19..ee1ac943 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -111,6 +111,12 @@ export const ptBR = {
     finalAnswer: "Resposta Final",
     notebookLabel: "Caderno: {{name}}",
     itemNotFound: "Este {{type}} não foi encontrado",
+    contentUnavailable: {
+      notFoundTitle: "Este conteúdo não existe mais",
+      notFoundDescription: "Ele pode ter sido excluído. Referências em mensagens antigas podem apontar para conteúdo que já foi removido.",
+      errorTitle: "Não foi possível carregar este conteúdo",
+      errorDescription: "Algo deu errado ao carregá-lo. Tente novamente.",
+    },
     accessibility: {
       transformationViews: "Visualizações de transformação",
       searchKB: "Perguntar ou buscar na base de conhecimento",
@@ -393,7 +399,6 @@ export const ptBR = {
     manageNotebooks: "Gerenciar Cadernos",
     manageNotebooksDesc: "Gerencie quais cadernos contêm esta fonte",
     noNotebooksAvailable: "Nenhum caderno disponível",
-    loadFailed: "Falha ao carregar detalhes da fonte",
     removeFromNotebook: "Remover do Caderno",
     retryProcessing: "Tentar Processamento Novamente",
     refreshContent: "Atualizar conteúdo",
@@ -421,7 +426,6 @@ export const ptBR = {
     embeddingNever: "Incorporação desabilitada",
     embeddingNeverDesc: "Suas configurações estão definidas para pular incorporação. Busca vetorial não estará disponível para esta fonte.",
     changeInSettings: "Você pode alterar isso em Configurações",
-    notFound: "Fonte não encontrada",
     noContent: "Nenhum conteúdo disponível",
     insightsDesc: "Insights gerados a partir da análise do modelo",
     uploadedFile: "Arquivo enviado",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 31200179..162877d4 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -111,6 +111,12 @@ export const ruRU = {
     finalAnswer: "Итоговый ответ",
     notebookLabel: "Блокнот: {{name}}",
     itemNotFound: "Этот {{type}} не найден",
+    contentUnavailable: {
+      notFoundTitle: "Этот контент больше не существует",
+      notFoundDescription: "Возможно, он был удалён. Ссылки в старых сообщениях могут указывать на уже удалённый контент.",
+      errorTitle: "Не удалось загрузить этот контент",
+      errorDescription: "Что-то пошло не так при загрузке. Попробуйте ещё раз.",
+    },
     accessibility: {
       transformationViews: "Представления трансформаций",
       searchKB: "Спросить или найти в базе знаний",
@@ -393,7 +399,6 @@ export const ruRU = {
     manageNotebooks: "Управление блокнотами",
     manageNotebooksDesc: "Управление блокнотами, содержащими этот источник",
     noNotebooksAvailable: "Нет доступных блокнотов",
-    loadFailed: "Не удалось загрузить детали источника",
     removeFromNotebook: "Удалить из блокнота",
     retryProcessing: "Повторить обработку",
     refreshContent: "Обновить содержимое",
@@ -421,7 +426,6 @@ export const ruRU = {
     embeddingNever: "Эмбеддинг отключён",
     embeddingNeverDesc: "В ваших настройках отключено создание эмбеддинга. Векторный поиск будет недоступен для этого источника.",
     changeInSettings: "Вы можете изменить это в Настройках",
-    notFound: "Источник не найден",
     noContent: "Содержимое недоступно",
     insightsDesc: "Инсайты, сгенерированные анализом модели",
     uploadedFile: "Загруженный файл",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index accd7135..181c93c1 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -111,6 +111,12 @@ export const trTR = {
     finalAnswer: "Son Yanıt",
     notebookLabel: "Defter: {{name}}",
     itemNotFound: "Bu {{type}} bulunamadı",
+    contentUnavailable: {
+      notFoundTitle: "Bu içerik artık mevcut değil",
+      notFoundDescription: "Silinmiş olabilir. Eski mesajlardaki bağlantılar, kaldırılmış içeriklere işaret edebilir.",
+      errorTitle: "Bu içerik yüklenemedi",
+      errorDescription: "Yükleme sırasında bir sorun oluştu. Lütfen tekrar deneyin.",
+    },
     accessibility: {
       transformationViews: "Dönüşüm görünümleri",
       searchKB: "Bilgi tabanınızda sor veya ara",
@@ -393,7 +399,6 @@ export const trTR = {
     manageNotebooks: "Defterleri Yönet",
     manageNotebooksDesc: "Bu kaynağı içeren defterleri yönetin",
     noNotebooksAvailable: "Mevcut defter yok",
-    loadFailed: "Kaynak ayrıntıları yüklenemedi",
     removeFromNotebook: "Defterden Kaldır",
     retryProcessing: "İşlemeyi Yeniden Dene",
     refreshContent: "İçeriği yenile",
@@ -421,7 +426,6 @@ export const trTR = {
     embeddingNever: "Gömme devre dışı",
     embeddingNeverDesc: "Ayarlarınız gömmeyi atlamak üzere yapılandırılmış. Bu kaynak için vektör arama kullanılamaz.",
     changeInSettings: "Bunu Ayarlar'dan değiştirebilirsiniz",
-    notFound: "Kaynak bulunamadı",
     noContent: "İçerik mevcut değil",
     insightsDesc: "Model analizinden oluşturulan içgörüler",
     uploadedFile: "Yüklenen dosya",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 1a57795c..0beeff3b 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -111,6 +111,12 @@ export const zhCN = {
     finalAnswer: "最终回答",
     notebookLabel: "笔记本: {{name}}",
     itemNotFound: "未找到该 {{type}}",
+    contentUnavailable: {
+      notFoundTitle: "该内容已不存在",
+      notFoundDescription: "它可能已被删除。旧消息中的引用可能指向已被移除的内容。",
+      errorTitle: "无法加载该内容",
+      errorDescription: "加载时出现问题，请重试。",
+    },
     accessibility: {
       transformationViews: "转换视图",
       searchKB: "向知识库提问或搜索",
@@ -393,7 +399,6 @@ export const zhCN = {
     manageNotebooks: "管理所属笔记本",
     manageNotebooksDesc: "管理包含此来源的笔记本",
     noNotebooksAvailable: "暂无可用笔记本",
-    loadFailed: "加载来源详情失败",
     removeFromNotebook: "从笔记本移除",
     retryProcessing: "重试处理",
     refreshContent: "刷新内容",
@@ -421,7 +426,6 @@ export const zhCN = {
     embeddingNever: "嵌入已禁用",
     embeddingNeverDesc: "您的设置已配置为跳过嵌入。此来源将无法进行向量搜索。",
     changeInSettings: "您可以在此处更改设置：",
-    notFound: "未找到来源",
     noContent: "暂无内容",
     insightsDesc: "根据模型分析生成的见解",
     uploadedFile: "已上传文件",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 0915f62d..6aa90387 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -111,6 +111,12 @@ export const zhTW = {
     finalAnswer: "最終回答",
     notebookLabel: "筆記本: {{name}}",
     itemNotFound: "未找到該 {{type}}",
+    contentUnavailable: {
+      notFoundTitle: "該內容已不存在",
+      notFoundDescription: "它可能已被刪除。舊訊息中的引用可能指向已被移除的內容。",
+      errorTitle: "無法載入該內容",
+      errorDescription: "載入時發生問題，請重試。",
+    },
     accessibility: {
       transformationViews: "轉換視圖",
       searchKB: "向知識庫提問或搜尋",
@@ -393,7 +399,6 @@ export const zhTW = {
     manageNotebooks: "管理所屬筆記本",
     manageNotebooksDesc: "管理包含此來源的筆記本",
     noNotebooksAvailable: "暫無可用筆記本",
-    loadFailed: "載入來源詳情失敗",
     removeFromNotebook: "從筆記本移除",
     retryProcessing: "重試處理",
     refreshContent: "重新整理內容",
@@ -421,7 +426,6 @@ export const zhTW = {
     embeddingNever: "嵌入已禁用",
     embeddingNeverDesc: "您的設定已設定為跳過嵌入。此來源將無法進行向量搜尋。",
     changeInSettings: "您可以在此處更改設定：",
-    notFound: "未找到來源",
     noContent: "暫無內容",
     insightsDesc: "根據模型分析生成的見解",
     uploadedFile: "已上傳檔案",
diff --git a/frontend/src/lib/utils/error-handler.ts b/frontend/src/lib/utils/error-handler.ts
index b25a4a48..fed06f0b 100644
--- a/frontend/src/lib/utils/error-handler.ts
+++ b/frontend/src/lib/utils/error-handler.ts
@@ -1,3 +1,13 @@
+import { isAxiosError } from 'axios'
+
+/**
+ * Returns true when the error is an HTTP 404 response, i.e. the requested
+ * item was deleted or never existed (as opposed to a transient failure).
+ */
+export function isNotFoundError(error: unknown): boolean {
+  return isAxiosError(error) && error.response?.status === 404
+}
+
 /**
  * Utility to map backend English error messages to i18n keys.
  */

From 2499256b4eb2057958a2ef9f3d15aa2e188c5a4b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 12:46:38 -0300
Subject: [PATCH 201/345] refactor(frontend): consume GET /api/providers
 instead of the manual provider table (#1108)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The settings frontend now fetches the provider list from the backend
registry endpoint (session-cached react-query hook useProviders())
instead of keeping its own hardcoded copies of provider names, display
names, modalities and docs URLs in lib/providers.tsx.

- New api module (lib/api/providers.ts) + hook (lib/hooks/use-providers.ts)
  with staleTime: Infinity — the list only changes on deploy.
- lib/providers.tsx reduced to modality presentation (icon/color/label)
  behind fallback-safe helpers, so an unknown modality from a future
  provider still renders instead of breaking.
- The backend registry declaration order is the display order (verified
  identical to the old curated ALL_PROVIDERS order; endpoint test now
  pins order, not just set-equality).
- api-keys page gains loading/error states for the provider fetch; new
  i18n keys added to all 14 locales.
- Deleted the regex-based frontend/backend sync test; the
  SupportedProvider Literal test remains the backend guarantee.
- Renamed the dead useProviders() in use-models.ts (availability
  endpoint) to useProviderAvailability() to avoid a name collision.
- Updated stale docs/comments (AGENTS.md, credentials.md, cubic.yaml,
  provider_registry.py, api/models.py) that still described the frontend
  table as a manual sync point.

Closes #1082
---
 CHANGELOG.md                                  |   3 +
 api/models.py                                 |   6 +-
 cubic.yaml                                    |   7 +-
 docs/7-DEVELOPMENT/credentials.md             |   2 +-
 .../settings/api-keys/page.test.tsx           | 117 ++++++++++++++++++
 .../(dashboard)/settings/api-keys/page.tsx    |  67 ++++++----
 .../settings/CredentialFormDialog.tsx         |  27 ++--
 .../components/settings/CredentialItem.tsx    |  24 ++--
 .../settings/DiscoverModelsDialog.tsx         |  30 ++---
 .../settings/ProviderSection.test.tsx         |  68 ++++++++++
 .../components/settings/ProviderSection.tsx   |  25 ++--
 frontend/src/lib/api/providers.ts             |  21 ++++
 frontend/src/lib/hooks/use-models.ts          |   5 +-
 frontend/src/lib/hooks/use-providers.ts       |  20 +++
 frontend/src/lib/locales/bn-IN/index.ts       |   2 +
 frontend/src/lib/locales/ca-ES/index.ts       |   2 +
 frontend/src/lib/locales/de-DE/index.ts       |   2 +
 frontend/src/lib/locales/en-US/index.ts       |   2 +
 frontend/src/lib/locales/es-ES/index.ts       |   2 +
 frontend/src/lib/locales/fr-FR/index.ts       |   2 +
 frontend/src/lib/locales/it-IT/index.ts       |   2 +
 frontend/src/lib/locales/ja-JP/index.ts       |   2 +
 frontend/src/lib/locales/pl-PL/index.ts       |   2 +
 frontend/src/lib/locales/pt-BR/index.ts       |   2 +
 frontend/src/lib/locales/ru-RU/index.ts       |   2 +
 frontend/src/lib/locales/tr-TR/index.ts       |   2 +
 frontend/src/lib/locales/zh-CN/index.ts       |   2 +
 frontend/src/lib/locales/zh-TW/index.ts       |   2 +
 frontend/src/lib/providers.test.tsx           |  34 +++++
 frontend/src/lib/providers.tsx                | 107 ++++++----------
 open_notebook/AGENTS.md                       |   2 +-
 open_notebook/ai/provider_registry.py         |  12 +-
 tests/test_credential_provider_validation.py  |  28 ++---
 33 files changed, 452 insertions(+), 181 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx
 create mode 100644 frontend/src/components/settings/ProviderSection.test.tsx
 create mode 100644 frontend/src/lib/api/providers.ts
 create mode 100644 frontend/src/lib/hooks/use-providers.ts
 create mode 100644 frontend/src/lib/providers.test.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ea7b02e3..db4c99d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
+
 ### Fixed
 - Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
 - Source insights now get `created`/`updated` timestamps stamped at creation (migration 19 mirrors the defaults used by the other tables), and the insights API returns `null` — instead of the literal string `"None"` — for legacy insights that predate the migration (#1045)
diff --git a/api/models.py b/api/models.py
index 8cc56803..c4cd27d4 100644
--- a/api/models.py
+++ b/api/models.py
@@ -551,9 +551,9 @@ class MigrationResult(BaseModel):
 
 # Kept in sync with the provider registry
 # (open_notebook/ai/provider_registry.py PROVIDERS — the backend source of
-# truth) and the frontend's ALL_PROVIDERS (frontend/src/lib/providers.tsx).
-# A Literal can't be built at runtime, so this is one of the two remaining
-# manual copies; tests/test_credential_provider_validation.py enforces the sync.
+# truth). A Literal can't be built at runtime, so this is the one remaining
+# manual copy; tests/test_credential_provider_validation.py enforces the sync.
+# The frontend consumes GET /api/providers at runtime and needs no edit.
 SupportedProvider = Literal[
     "openai",
     "anthropic",
diff --git a/cubic.yaml b/cubic.yaml
index 41a5563f..2c439d47 100644
--- a/cubic.yaml
+++ b/cubic.yaml
@@ -58,9 +58,10 @@ reviews:
         open_notebook/AGENTS.md and frontend/AGENTS.md):
         - i18n: every user-visible frontend string goes through t('section.key') and the
           key must exist in ALL 7 locales (en-US, pt-BR, zh-CN, zh-TW, ja-JP, ru-RU, bn-IN).
-        - Providers: any change to supported providers must touch all 4 sync points:
-          api/models.py SupportedProvider, frontend ALL_PROVIDERS,
-          connection_tester.py TEST_MODELS, credentials_service.py PROVIDER_ENV_CONFIG.
+        - Providers: adding/changing a provider = edit the registry
+          (open_notebook/ai/provider_registry.py PROVIDERS) plus the SupportedProvider
+          Literal in api/models.py; everything else (TEST_MODELS, PROVIDER_ENV_CONFIG,
+          the frontend via GET /api/providers) is derived from the registry.
         - Migrations: a new open_notebook/database/migrations/N.surrealql file must also be
           registered in AsyncMigrationManager (async_migrate.py) — no auto-discovery.
         - Graphs: LLM calls in LangGraph nodes must use provision_langchain_model() and wrap
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
index b35c0738..1be74e81 100644
--- a/docs/7-DEVELOPMENT/credentials.md
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -36,7 +36,7 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and two migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`). Swagger at `/docs` documents the shapes.
 
-**Supported providers (17)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients. Two manual copies remain, enforced by `tests/test_credential_provider_validation.py`: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) and the frontend `ALL_PROVIDERS` tables (`frontend/src/lib/providers.tsx`):
+**Supported providers (17)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). One manual copy remains, enforced by `tests/test_credential_provider_validation.py`: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime):
 
 - Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, voyage, elevenlabs, deepgram, dashscope, minimax
 - URL-based: ollama
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx
new file mode 100644
index 00000000..6cc58512
--- /dev/null
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx
@@ -0,0 +1,117 @@
+import { render, screen } from '@testing-library/react'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import ApiKeysPage from './page'
+import { ProviderInfo } from '@/lib/api/providers'
+import { Credential } from '@/lib/api/credentials'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/components/layout/AppShell', () => ({
+  AppShell: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
+}))
+
+vi.mock('@/components/settings', () => ({
+  MigrationBanner: () => null,
+  DefaultModelSelectors: () => null,
+  ProviderSection: ({ provider }: { provider: ProviderInfo }) => (
+    <div data-testid="provider-section">{provider.display_name}</div>
+  ),
+}))
+
+vi.mock('@/lib/hooks/use-models', () => ({
+  useModels: vi.fn(() => ({ data: [], isLoading: false })),
+  useModelDefaults: vi.fn(() => ({ data: null, isLoading: false })),
+}))
+
+const mockUseCredentials = vi.fn()
+vi.mock('@/lib/hooks/use-credentials', () => ({
+  useCredentials: () => mockUseCredentials(),
+  useCredentialStatus: vi.fn(() => ({
+    data: { configured: {}, source: {}, encryption_configured: true },
+  })),
+  useEnvStatus: vi.fn(() => ({ data: {} })),
+}))
+
+const mockUseProviders = vi.fn()
+vi.mock('@/lib/hooks/use-providers', () => ({
+  useProviders: () => mockUseProviders(),
+}))
+
+const providers: ProviderInfo[] = [
+  {
+    name: 'openai',
+    display_name: 'OpenAI',
+    modalities: ['language'],
+    docs_url: null,
+    env_configured: false,
+  },
+  {
+    name: 'anthropic',
+    display_name: 'Anthropic',
+    modalities: ['language'],
+    docs_url: null,
+    env_configured: false,
+  },
+]
+
+const anthropicCredential = {
+  id: 'credential:1',
+  name: 'Anthropic Prod',
+  provider: 'anthropic',
+  modalities: ['language'],
+  has_api_key: true,
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-01T00:00:00Z',
+  model_count: 0,
+} as Credential
+
+describe('ApiKeysPage', () => {
+  beforeEach(() => {
+    mockUseCredentials.mockReturnValue({ data: [], isLoading: false })
+    mockUseProviders.mockReturnValue({
+      data: providers,
+      isLoading: false,
+      isError: false,
+    })
+  })
+
+  it('renders one section per provider from GET /api/providers', () => {
+    render(<ApiKeysPage />)
+    const sections = screen.getAllByTestId('provider-section')
+    expect(sections.map(s => s.textContent)).toEqual(['OpenAI', 'Anthropic'])
+  })
+
+  it('sorts configured providers first, keeping backend order otherwise', () => {
+    mockUseCredentials.mockReturnValue({
+      data: [anthropicCredential],
+      isLoading: false,
+    })
+    render(<ApiKeysPage />)
+    const sections = screen.getAllByTestId('provider-section')
+    expect(sections.map(s => s.textContent)).toEqual(['Anthropic', 'OpenAI'])
+  })
+
+  it('shows a loading state while the provider list loads', () => {
+    mockUseProviders.mockReturnValue({
+      data: undefined,
+      isLoading: true,
+      isError: false,
+    })
+    render(<ApiKeysPage />)
+    expect(screen.queryAllByTestId('provider-section')).toHaveLength(0)
+  })
+
+  it('shows an error state when the provider list fails to load', () => {
+    mockUseProviders.mockReturnValue({
+      data: undefined,
+      isLoading: false,
+      isError: true,
+    })
+    render(<ApiKeysPage />)
+    expect(screen.getByText('apiKeys.providersLoadFailed')).toBeInTheDocument()
+    expect(
+      screen.getByText('apiKeys.providersLoadFailedDescription')
+    ).toBeInTheDocument()
+    expect(screen.queryAllByTestId('provider-section')).toHaveLength(0)
+  })
+})
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index a82d474a..016782ba 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -4,7 +4,7 @@ import { useMemo } from 'react'
 import { AppShell } from '@/components/layout/AppShell'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { Alert, AlertTitle, AlertDescription } from '@/components/ui/alert'
-import { Key, ShieldAlert } from 'lucide-react'
+import { Key, ShieldAlert, AlertCircle } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { useModels, useModelDefaults } from '@/lib/hooks/use-models'
 import {
@@ -12,8 +12,8 @@ import {
   useCredentialStatus,
   useEnvStatus,
 } from '@/lib/hooks/use-credentials'
+import { useProviders } from '@/lib/hooks/use-providers'
 import { Credential } from '@/lib/api/credentials'
-import { ALL_PROVIDERS } from '@/lib/providers'
 import {
   DefaultModelSelectors,
   MigrationBanner,
@@ -29,14 +29,19 @@ export default function ApiKeysPage() {
   const { data: defaults, isLoading: defaultsLoading } = useModelDefaults()
   const { data: credentialStatus } = useCredentialStatus()
   const { data: envStatus } = useEnvStatus()
+  const {
+    data: providers,
+    isLoading: providersLoading,
+    isError: providersError,
+  } = useProviders()
 
   const encryptionReady = credentialStatus?.encryption_configured ?? true
 
   // Group credentials by provider
   const credentialsByProvider = useMemo(() => {
     const grouped: Record<string, Credential[]> = {}
-    for (const provider of ALL_PROVIDERS) {
-      grouped[provider] = []
+    for (const provider of providers ?? []) {
+      grouped[provider.name] = []
     }
     if (credentials) {
       for (const cred of credentials) {
@@ -45,30 +50,30 @@ export default function ApiKeysPage() {
       }
     }
     return grouped
-  }, [credentials])
+  }, [credentials, providers])
 
   // Providers needing migration
   const providersToMigrate = useMemo(() => {
     if (!envStatus || !credentialStatus) return []
-    const providers: string[] = []
+    const result: string[] = []
     for (const provider in envStatus) {
       if (envStatus[provider] && credentialStatus.source[provider] === 'environment') {
-        providers.push(provider)
+        result.push(provider)
       }
     }
-    return providers
+    return result
   }, [envStatus, credentialStatus])
 
-  // Sort: configured providers first
+  // Sort: configured providers first (the backend registry owns the base order)
   const sortedProviders = useMemo(() => {
-    return [...ALL_PROVIDERS].sort((a, b) => {
-      const aHas = (credentialsByProvider[a]?.length || 0) > 0 ? 1 : 0
-      const bHas = (credentialsByProvider[b]?.length || 0) > 0 ? 1 : 0
+    return [...(providers ?? [])].sort((a, b) => {
+      const aHas = (credentialsByProvider[a.name]?.length || 0) > 0 ? 1 : 0
+      const bHas = (credentialsByProvider[b.name]?.length || 0) > 0 ? 1 : 0
       return bHas - aHas
     })
-  }, [credentialsByProvider])
+  }, [providers, credentialsByProvider])
 
-  const isLoading = credentialsLoading || modelsLoading || defaultsLoading
+  const isLoading = credentialsLoading || modelsLoading || defaultsLoading || providersLoading
 
   if (isLoading) {
     return (
@@ -115,19 +120,27 @@ export default function ApiKeysPage() {
           )}
 
           {/* Provider Cards */}
-          <div className="grid gap-4">
-            {sortedProviders.map(provider => (
-              <ProviderSection
-                key={provider}
-                provider={provider}
-                credentials={credentialsByProvider[provider] || []}
-                models={models || []}
-                defaults={defaults || null}
-                allCredentials={credentials || []}
-                encryptionReady={encryptionReady}
-              />
-            ))}
-          </div>
+          {providersError ? (
+            <Alert variant="destructive">
+              <AlertCircle className="h-4 w-4" />
+              <AlertTitle>{t('apiKeys.providersLoadFailed')}</AlertTitle>
+              <AlertDescription>{t('apiKeys.providersLoadFailedDescription')}</AlertDescription>
+            </Alert>
+          ) : (
+            <div className="grid gap-4">
+              {sortedProviders.map(provider => (
+                <ProviderSection
+                  key={provider.name}
+                  provider={provider}
+                  credentials={credentialsByProvider[provider.name] || []}
+                  models={models || []}
+                  defaults={defaults || null}
+                  allCredentials={credentials || []}
+                  encryptionReady={encryptionReady}
+                />
+              ))}
+            </div>
+          )}
 
           {/* Help link */}
           <div className="border-t pt-4">
diff --git a/frontend/src/components/settings/CredentialFormDialog.tsx b/frontend/src/components/settings/CredentialFormDialog.tsx
index 94d3fe3e..c1bdddf5 100644
--- a/frontend/src/components/settings/CredentialFormDialog.tsx
+++ b/frontend/src/components/settings/CredentialFormDialog.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import { useState, useEffect } from 'react'
+import { useState, useEffect, useMemo } from 'react'
 import { Button } from '@/components/ui/button'
 import { Label } from '@/components/ui/label'
 import {
@@ -14,7 +14,7 @@ import { useTranslation } from '@/lib/hooks/use-translation'
 import { useCreateCredential, useUpdateCredential } from '@/lib/hooks/use-credentials'
 import { Credential, CreateCredentialRequest } from '@/lib/api/credentials'
 import { buildCredentialUpdatePayload } from '@/lib/credential-update-payload'
-import { PROVIDER_DISPLAY_NAMES, PROVIDER_MODALITIES, PROVIDER_DOCS } from '@/lib/providers'
+import { useProviders } from '@/lib/hooks/use-providers'
 
 interface CredentialFormDialogProps {
   open: boolean
@@ -32,6 +32,12 @@ export function CredentialFormDialog({
   const { t } = useTranslation()
   const createCredential = useCreateCredential()
   const updateCredential = useUpdateCredential()
+  const { data: providers } = useProviders()
+  const providerInfo = useMemo(
+    () => providers?.find(p => p.name === provider),
+    [providers, provider]
+  )
+  const providerDisplayName = providerInfo?.display_name || provider
   const isEditing = !!credential
   const isSubmitting = createCredential.isPending || updateCredential.isPending
 
@@ -69,9 +75,12 @@ export function CredentialFormDialog({
       setLocation('')
       setCredentialsPath('')
       setNumCtx('')
-      setModalities(PROVIDER_MODALITIES[provider] || ['language'])
+      setModalities(providerInfo?.modalities ?? ['language'])
     }
-  }, [credential, provider])
+    // providerInfo keeps a stable reference for a given provider (react-query
+    // caches the list for the whole session), so this only re-runs when the
+    // dialog target or the fetched registry actually changes.
+  }, [credential, provider, providerInfo])
 
   const handleSubmit = (e: React.FormEvent) => {
     e.preventDefault()
@@ -88,7 +97,7 @@ export function CredentialFormDialog({
       updateCredential.mutate({ credentialId: credential.id, data }, { onSuccess })
     } else {
       const data: CreateCredentialRequest = {
-        name: name || `${PROVIDER_DISPLAY_NAMES[provider] || provider} Config`,
+        name: name || `${providerDisplayName} Config`,
         provider,
         modalities,
         api_key: apiKey.trim() || undefined,
@@ -112,7 +121,7 @@ export function CredentialFormDialog({
       ? name.trim() !== '' && project.trim() !== '' && location.trim() !== ''
       : name.trim() !== '' && (!requiresApiKey || apiKey.trim() !== '')
 
-  const docsUrl = PROVIDER_DOCS[provider]
+  const docsUrl = providerInfo?.docs_url ?? undefined
 
   return (
     <Dialog open={open} onOpenChange={onOpenChange}>
@@ -120,8 +129,8 @@ export function CredentialFormDialog({
         <DialogHeader>
           <DialogTitle>
             {isEditing
-              ? t('apiKeys.editConfig', { provider: PROVIDER_DISPLAY_NAMES[provider] || provider })
-              : t('apiKeys.addConfig', { provider: PROVIDER_DISPLAY_NAMES[provider] || provider })}
+              ? t('apiKeys.editConfig', { provider: providerDisplayName })
+              : t('apiKeys.addConfig', { provider: providerDisplayName })}
           </DialogTitle>
         </DialogHeader>
         <form onSubmit={handleSubmit} className="space-y-4">
@@ -133,7 +142,7 @@ export function CredentialFormDialog({
               className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
               value={name}
               onChange={(e) => setName(e.target.value)}
-              placeholder={`${PROVIDER_DISPLAY_NAMES[provider] || provider} Production`}
+              placeholder={`${providerDisplayName} Production`}
               disabled={isSubmitting}
             />
             <p className="text-xs text-muted-foreground">{t('apiKeys.configNameHint')}</p>
diff --git a/frontend/src/components/settings/CredentialItem.tsx b/frontend/src/components/settings/CredentialItem.tsx
index a254a6e2..4ce86503 100644
--- a/frontend/src/components/settings/CredentialItem.tsx
+++ b/frontend/src/components/settings/CredentialItem.tsx
@@ -21,11 +21,11 @@ import { useCredential, useTestCredential } from '@/lib/hooks/use-credentials'
 import { Credential } from '@/lib/api/credentials'
 import { Model, ModelDefaults } from '@/lib/types/models'
 import {
-  ModelType,
-  TYPE_ICONS,
-  TYPE_COLORS,
+  MODEL_TYPES,
+  getTypeIcon,
+  getTypeColor,
+  getTypeLabel,
   TYPE_COLOR_INACTIVE,
-  TYPE_LABELS,
 } from '@/lib/providers'
 import { ModelTestResultDialog } from './ModelTestResultDialog'
 import { CredentialFormDialog } from './CredentialFormDialog'
@@ -56,7 +56,7 @@ export function CredentialItem({
   const { data: fullCredential } = useCredential(editOpen ? credential.id : '')
 
   const linkedModels = models.filter(m => m.credential === credential.id)
-  const activeTypes = new Set(linkedModels.map(m => m.type))
+  const activeTypes = new Set<string>(linkedModels.map(m => m.type))
   const testResult = testResults[credential.id]
 
   // Check which models are defaults
@@ -87,10 +87,10 @@ export function CredentialItem({
                 <Badge
                   key={mod}
                   variant="secondary"
-                  className={`text-[10px] gap-0.5 px-1 py-0 ${activeTypes.has(mod as ModelType) ? (TYPE_COLORS[mod as ModelType] || '') : TYPE_COLOR_INACTIVE}`}
+                  className={`text-[10px] gap-0.5 px-1 py-0 ${activeTypes.has(mod) ? getTypeColor(mod) : TYPE_COLOR_INACTIVE}`}
                 >
-                  {TYPE_ICONS[mod as ModelType]}
-                  <span className="hidden sm:inline">{TYPE_LABELS[mod as ModelType] || mod}</span>
+                  {getTypeIcon(mod)}
+                  <span className="hidden sm:inline">{getTypeLabel(mod)}</span>
                 </Badge>
               ))}
             </div>
@@ -153,16 +153,16 @@ export function CredentialItem({
         {/* Linked models grouped by type */}
         {linkedModels.length > 0 && (
           <div className="space-y-1.5 pt-1">
-            {(['language', 'embedding', 'text_to_speech', 'speech_to_text'] as ModelType[])
+            {MODEL_TYPES
               .filter(type => linkedModels.some(m => m.type === type))
               .map(type => (
                 <div key={type} className="flex items-start gap-1.5">
                   <Badge
                     variant="outline"
-                    className={`text-[10px] gap-0.5 px-1 py-0 shrink-0 mt-0.5 ${TYPE_COLORS[type]}`}
+                    className={`text-[10px] gap-0.5 px-1 py-0 shrink-0 mt-0.5 ${getTypeColor(type)}`}
                   >
-                    {TYPE_ICONS[type]}
-                    {TYPE_LABELS[type]}
+                    {getTypeIcon(type)}
+                    {getTypeLabel(type)}
                   </Badge>
                   <div className="flex flex-wrap gap-1">
                     {linkedModels.filter(m => m.type === type).map(model => {
diff --git a/frontend/src/components/settings/DiscoverModelsDialog.tsx b/frontend/src/components/settings/DiscoverModelsDialog.tsx
index 740ae32c..755404ff 100644
--- a/frontend/src/components/settings/DiscoverModelsDialog.tsx
+++ b/frontend/src/components/settings/DiscoverModelsDialog.tsx
@@ -18,13 +18,8 @@ import { Plus, Loader2, AlertCircle } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { useDiscoverModels, useRegisterModels } from '@/lib/hooks/use-credentials'
 import { Credential, DiscoveredModel } from '@/lib/api/credentials'
-import {
-  ModelType,
-  PROVIDER_DISPLAY_NAMES,
-  PROVIDER_MODALITIES,
-  TYPE_ICONS,
-  TYPE_LABELS,
-} from '@/lib/providers'
+import { useProviders } from '@/lib/hooks/use-providers'
+import { getTypeIcon, getTypeLabel } from '@/lib/providers'
 
 interface DiscoverModelsDialogProps {
   open: boolean
@@ -40,6 +35,11 @@ export function DiscoverModelsDialog({
   const { t } = useTranslation()
   const discoverModels = useDiscoverModels()
   const registerModels = useRegisterModels()
+  const { data: providers } = useProviders()
+  const providerInfo = useMemo(
+    () => providers?.find(p => p.name === credential.provider),
+    [providers, credential.provider]
+  )
   const [discoveredModels, setDiscoveredModels] = useState<DiscoveredModel[]>([])
   const [selectedModels, setSelectedModels] = useState<Set<string>>(new Set())
   const [hasDiscovered, setHasDiscovered] = useState(false)
@@ -47,8 +47,8 @@ export function DiscoverModelsDialog({
   const [searchQuery, setSearchQuery] = useState('')
   const [customModelSelected, setCustomModelSelected] = useState(false)
   // Model type selector - default to credential's first modality
-  const [selectedType, setSelectedType] = useState<ModelType>(
-    (credential.modalities[0] as ModelType) || 'language'
+  const [selectedType, setSelectedType] = useState<string>(
+    credential.modalities[0] || 'language'
   )
 
   useEffect(() => {
@@ -80,7 +80,7 @@ export function DiscoverModelsDialog({
       setDiscoveryError(null)
       setSearchQuery('')
       setCustomModelSelected(false)
-      setSelectedType((credential.modalities[0] as ModelType) || 'language')
+      setSelectedType(credential.modalities[0] || 'language')
     }
     // eslint-disable-next-line react-hooks/exhaustive-deps -- intentionally only fires on open/close
   }, [open])
@@ -159,7 +159,7 @@ export function DiscoverModelsDialog({
       <DialogContent className="sm:max-w-lg max-h-[85vh] grid-rows-[auto_1fr_auto]">
         <DialogHeader>
           <DialogTitle>
-            {t('models.discoverModels')} - {PROVIDER_DISPLAY_NAMES[credential.provider] || credential.provider}
+            {t('models.discoverModels')} - {providerInfo?.display_name || credential.provider}
           </DialogTitle>
           <DialogDescription>
             {credential.name}
@@ -181,16 +181,16 @@ export function DiscoverModelsDialog({
             {/* Model type selector */}
             <div className="space-y-2">
               <Label>{t('models.modelType')}</Label>
-              <Select value={selectedType} onValueChange={(v) => setSelectedType(v as ModelType)}>
+              <Select value={selectedType} onValueChange={setSelectedType}>
                 <SelectTrigger>
                   <SelectValue />
                 </SelectTrigger>
                 <SelectContent>
-                  {(PROVIDER_MODALITIES[credential.provider] || credential.modalities as ModelType[]).map(type => (
+                  {(providerInfo?.modalities ?? credential.modalities).map(type => (
                     <SelectItem key={type} value={type}>
                       <div className="flex items-center gap-2">
-                        {TYPE_ICONS[type]}
-                        {TYPE_LABELS[type]}
+                        {getTypeIcon(type)}
+                        {getTypeLabel(type)}
                       </div>
                     </SelectItem>
                   ))}
diff --git a/frontend/src/components/settings/ProviderSection.test.tsx b/frontend/src/components/settings/ProviderSection.test.tsx
new file mode 100644
index 00000000..3d56f672
--- /dev/null
+++ b/frontend/src/components/settings/ProviderSection.test.tsx
@@ -0,0 +1,68 @@
+import { render, screen } from '@testing-library/react'
+import { describe, it, expect, vi } from 'vitest'
+import { ProviderSection } from './ProviderSection'
+import { ProviderInfo } from '@/lib/api/providers'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('./CredentialFormDialog', () => ({
+  CredentialFormDialog: () => <div data-testid="credential-form-dialog" />,
+}))
+
+vi.mock('./CredentialItem', () => ({
+  CredentialItem: () => <div data-testid="credential-item" />,
+}))
+
+function makeProvider(overrides: Partial<ProviderInfo> = {}): ProviderInfo {
+  return {
+    name: 'openai',
+    display_name: 'OpenAI',
+    modalities: ['language', 'embedding'],
+    docs_url: 'https://platform.openai.com/api-keys',
+    env_configured: false,
+    ...overrides,
+  }
+}
+
+function renderSection(provider: ProviderInfo) {
+  return render(
+    <ProviderSection
+      provider={provider}
+      credentials={[]}
+      models={[]}
+      defaults={null}
+      allCredentials={[]}
+      encryptionReady={true}
+    />
+  )
+}
+
+describe('ProviderSection', () => {
+  it('renders the display name from the backend registry', () => {
+    renderSection(makeProvider())
+    expect(screen.getByText('OpenAI')).toBeInTheDocument()
+  })
+
+  it('renders one modality badge per registry modality', () => {
+    renderSection(makeProvider())
+    expect(screen.getByText('Language')).toBeInTheDocument()
+    expect(screen.getByText('Embedding')).toBeInTheDocument()
+  })
+
+  it('renders providers the frontend has never seen, with a fallback icon', () => {
+    // "Zero frontend edits to add a provider": a brand-new provider with a
+    // brand-new modality must render (raw label + generic icon), not break.
+    const { container } = renderSection(
+      makeProvider({
+        name: 'newprovider',
+        display_name: 'Brand New Provider',
+        modalities: ['language', 'holograms'],
+      })
+    )
+    expect(screen.getByText('Brand New Provider')).toBeInTheDocument()
+    expect(screen.getByText('holograms')).toBeInTheDocument()
+    // The unknown modality badge still carries an icon (the fallback one)
+    const badges = container.querySelectorAll('svg')
+    expect(badges.length).toBeGreaterThanOrEqual(2)
+  })
+})
diff --git a/frontend/src/components/settings/ProviderSection.tsx b/frontend/src/components/settings/ProviderSection.tsx
index 4574fa93..72d7b20d 100644
--- a/frontend/src/components/settings/ProviderSection.tsx
+++ b/frontend/src/components/settings/ProviderSection.tsx
@@ -7,20 +7,19 @@ import { Badge } from '@/components/ui/badge'
 import { Plus, Check, X } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { Credential } from '@/lib/api/credentials'
+import { ProviderInfo } from '@/lib/api/providers'
 import { Model, ModelDefaults } from '@/lib/types/models'
 import {
-  PROVIDER_DISPLAY_NAMES,
-  PROVIDER_MODALITIES,
-  TYPE_ICONS,
-  TYPE_COLORS,
+  getTypeIcon,
+  getTypeColor,
+  getTypeLabel,
   TYPE_COLOR_INACTIVE,
-  TYPE_LABELS,
 } from '@/lib/providers'
 import { CredentialFormDialog } from './CredentialFormDialog'
 import { CredentialItem } from './CredentialItem'
 
 interface ProviderSectionProps {
-  provider: string
+  provider: ProviderInfo
   credentials: Credential[]
   models: Model[]
   defaults: ModelDefaults | null
@@ -39,15 +38,15 @@ export function ProviderSection({
   const { t } = useTranslation()
   const [addOpen, setAddOpen] = useState(false)
 
-  const displayName = PROVIDER_DISPLAY_NAMES[provider] || provider
-  const modalities = PROVIDER_MODALITIES[provider] || ['language']
+  const displayName = provider.display_name || provider.name
+  const modalities = provider.modalities.length > 0 ? provider.modalities : ['language']
   const hasCredentials = credentials.length > 0
 
   // Models linked to any credential of this provider
   const providerModels = models.filter(m =>
     credentials.some(c => c.id === m.credential)
   )
-  const activeTypes = new Set(providerModels.map(m => m.type))
+  const activeTypes = new Set<string>(providerModels.map(m => m.type))
 
   return (
     <Card className={!hasCredentials ? 'opacity-80' : undefined}>
@@ -60,10 +59,10 @@ export function ProviderSection({
                 <Badge
                   key={type}
                   variant="secondary"
-                  className={`text-xs gap-1 ${activeTypes.has(type) ? TYPE_COLORS[type] : TYPE_COLOR_INACTIVE}`}
+                  className={`text-xs gap-1 ${activeTypes.has(type) ? getTypeColor(type) : TYPE_COLOR_INACTIVE}`}
                 >
-                  {TYPE_ICONS[type]}
-                  <span className="hidden sm:inline">{TYPE_LABELS[type]}</span>
+                  {getTypeIcon(type)}
+                  <span className="hidden sm:inline">{getTypeLabel(type)}</span>
                 </Badge>
               ))}
             </div>
@@ -110,7 +109,7 @@ export function ProviderSection({
         <CredentialFormDialog
           open={addOpen}
           onOpenChange={setAddOpen}
-          provider={provider}
+          provider={provider.name}
         />
       )}
     </Card>
diff --git a/frontend/src/lib/api/providers.ts b/frontend/src/lib/api/providers.ts
new file mode 100644
index 00000000..3fc0d5e6
--- /dev/null
+++ b/frontend/src/lib/api/providers.ts
@@ -0,0 +1,21 @@
+import apiClient from './client'
+
+// Types for providers API
+export interface ProviderInfo {
+  name: string
+  display_name: string
+  modalities: string[]
+  docs_url?: string | null
+  env_configured: boolean
+}
+
+export const providersApi = {
+  /**
+   * List all supported AI providers with their registry metadata.
+   * The backend registry owns the display order.
+   */
+  list: async (): Promise<ProviderInfo[]> => {
+    const response = await apiClient.get<ProviderInfo[]>('/providers')
+    return response.data
+  },
+}
diff --git a/frontend/src/lib/hooks/use-models.ts b/frontend/src/lib/hooks/use-models.ts
index 61299861..6df146dc 100644
--- a/frontend/src/lib/hooks/use-models.ts
+++ b/frontend/src/lib/hooks/use-models.ts
@@ -109,7 +109,10 @@ export function useUpdateModelDefaults() {
   })
 }
 
-export function useProviders() {
+// Availability of providers for model creation (GET /models/providers).
+// Not to be confused with useProviders() (use-providers.ts), which returns
+// the provider registry metadata from GET /api/providers.
+export function useProviderAvailability() {
   return useQuery({
     queryKey: MODEL_QUERY_KEYS.providers,
     queryFn: () => modelsApi.getProviders(),
diff --git a/frontend/src/lib/hooks/use-providers.ts b/frontend/src/lib/hooks/use-providers.ts
new file mode 100644
index 00000000..1de63951
--- /dev/null
+++ b/frontend/src/lib/hooks/use-providers.ts
@@ -0,0 +1,20 @@
+import { useQuery } from '@tanstack/react-query'
+import { providersApi } from '@/lib/api/providers'
+
+export const PROVIDER_QUERY_KEYS = {
+  providers: ['providers'] as const,
+}
+
+/**
+ * Hook to list all supported AI providers (from the backend provider
+ * registry). The list only changes on deploy, so cache it aggressively:
+ * never stale within the session, kept in cache for a day.
+ */
+export function useProviders() {
+  return useQuery({
+    queryKey: PROVIDER_QUERY_KEYS.providers,
+    queryFn: () => providersApi.list(),
+    staleTime: Infinity,
+    gcTime: 24 * 60 * 60 * 1000,
+  })
+}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 06316087..d080e538 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -911,6 +911,8 @@ export const bnIN = {
     encryptionRequiredDescription: "ডেটাবেসে API কী সংরক্ষণ করতে OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable যেকোন গোপন স্ট্রিংয়ে সেট করুন।",
     configured: "কনফিগার করা",
     notConfigured: "কনফিগার করা হয়নি",
+    providersLoadFailed: "প্রোভাইডার লোড করতে ব্যর্থ হয়েছে",
+    providersLoadFailedDescription: "API চলছে কিনা নিশ্চিত করুন এবং আবার চেষ্টা করুন।",
     migrationAvailable: "এনভায়রনমেন্ট ভ্যারিয়েবল সনাক্ত করা হয়েছে",
     migrationDescription: "{{count}}টি API কী environment variable এর মাধ্যমে কনফিগার করা আছে এবং সহজ ব্যবস্থাপনার জন্য ডেটাবেসে মাইগ্রেট করা যেতে পারে।",
     migrateToDatabase: "ডেটাবেসে মাইগ্রেট করুন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index b4727eb5..c781e5c5 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -910,6 +910,8 @@ export const caES = {
     encryptionRequiredDescription: "Estableix la variable d'entorn OPEN_NOTEBOOK_ENCRYPTION_KEY a qualsevol cadena secreta per habilitar l'emmagatzematge de claus de l'API a la base de dades.",
     configured: "Configurat",
     notConfigured: "No configurat",
+    providersLoadFailed: "No s'han pogut carregar els proveïdors",
+    providersLoadFailedDescription: "Assegura't que l'API s'està executant i torna-ho a provar.",
     migrationAvailable: "S'han detectat variables d'entorn",
     migrationDescription: "{{count}} clau(s) de l'API estan configurades mitjançant variables d'entorn i es poden migrar a la base de dades per facilitar-ne la gestió.",
     migrateToDatabase: "Migra a la base de dades",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 031a2593..f2705b7a 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -913,6 +913,8 @@ export const deDE = {
     encryptionRequiredDescription: "Setze die Umgebungsvariable OPEN_NOTEBOOK_ENCRYPTION_KEY auf eine beliebige geheime Zeichenkette, um API-Schlüssel in der Datenbank speichern zu können.",
     configured: "Konfiguriert",
     notConfigured: "Nicht konfiguriert",
+    providersLoadFailed: "Anbieter konnten nicht geladen werden",
+    providersLoadFailedDescription: "Stellen Sie sicher, dass die API läuft, und versuchen Sie es erneut.",
     migrationAvailable: "Umgebungsvariablen erkannt",
     migrationDescription: "{{count}} API-Schlüssel sind über Umgebungsvariablen konfiguriert und können zur einfacheren Verwaltung in die Datenbank migriert werden.",
     migrateToDatabase: "In Datenbank migrieren",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 0f5319e8..0c21340f 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -909,6 +909,8 @@ export const enUS = {
     encryptionRequiredDescription: "Set the OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable to any secret string to enable storing API keys in the database.",
     configured: "Configured",
     notConfigured: "Not configured",
+    providersLoadFailed: "Failed to load providers",
+    providersLoadFailedDescription: "Ensure the API is running and try again.",
     migrationAvailable: "Environment Variables Detected",
     migrationDescription: "{{count}} API key(s) are configured via environment variables and can be migrated to the database for easier management.",
     migrateToDatabase: "Migrate to Database",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 169ee62b..30ef8151 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -911,6 +911,8 @@ export const esES = {
     encryptionRequiredDescription: "Establece la variable de entorno OPEN_NOTEBOOK_ENCRYPTION_KEY con cualquier cadena secreta para habilitar el almacenamiento de claves API en la base de datos.",
     configured: "Configurado",
     notConfigured: "No configurado",
+    providersLoadFailed: "Error al cargar los proveedores",
+    providersLoadFailedDescription: "Asegúrate de que la API esté en ejecución y vuelve a intentarlo.",
     migrationAvailable: "Variables de entorno detectadas",
     migrationDescription: "{{count}} clave(s) API están configuradas vía variables de entorno y pueden migrarse a la base de datos para una gestión más fácil.",
     migrateToDatabase: "Migrar a la base de datos",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index ccdae9a0..50cdad43 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -910,6 +910,8 @@ export const frFR = {
     encryptionRequiredDescription: "Définissez la variable d'environnement OPEN_NOTEBOOK_ENCRYPTION_KEY avec une chaîne secrète pour activer le stockage des clés API dans la base de données.",
     configured: "Configuré",
     notConfigured: "Non configuré",
+    providersLoadFailed: "Échec du chargement des fournisseurs",
+    providersLoadFailedDescription: "Vérifiez que l'API est en cours d'exécution et réessayez.",
     migrationAvailable: "Variables d'environnement détectées",
     migrationDescription: "{{count}} clé(s) API sont configurées via des variables d'environnement et peuvent être migrées vers la base de données pour une gestion plus facile.",
     migrateToDatabase: "Migrer vers la base de données",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 5efd396c..06d3d273 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -910,6 +910,8 @@ export const itIT = {
     encryptionRequiredDescription: "Imposta la variabile d'ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY su una stringa segreta qualsiasi per abilitare il salvataggio delle chiavi API nel database.",
     configured: "Configurato",
     notConfigured: "Non configurato",
+    providersLoadFailed: "Impossibile caricare i provider",
+    providersLoadFailedDescription: "Assicurati che l'API sia in esecuzione e riprova.",
     migrationAvailable: "Variabili d'ambiente rilevate",
     migrationDescription: "{{count}} chiave/i API configurata/e tramite variabili d'ambiente. Puoi migrarle nel database per una gestione più semplice.",
     migrateToDatabase: "Migra nel database",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 1c89d0a2..601ef529 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -910,6 +910,8 @@ export const jaJP = {
     encryptionRequiredDescription: "OPEN_NOTEBOOK_ENCRYPTION_KEY 環境変数に任意の秘密文字列を設定して、データベースへのAPIキーの保存を有効にしてください。",
     configured: "設定済み",
     notConfigured: "未設定",
+    providersLoadFailed: "プロバイダーの読み込みに失敗しました",
+    providersLoadFailedDescription: "APIが起動していることを確認して、もう一度お試しください。",
     migrationAvailable: "環境変数を検出",
     migrationDescription: "{{count}}個のAPIキーが環境変数で設定されています。管理を容易にするためにデータベースに移行できます。",
     migrateToDatabase: "データベースに移行",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index d3313370..8c911a2f 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -910,6 +910,8 @@ export const plPL = {
     encryptionRequiredDescription: "Ustaw zmienną środowiskową OPEN_NOTEBOOK_ENCRYPTION_KEY na dowolny tajny ciąg, aby umożliwić przechowywanie kluczy API w bazie danych.",
     configured: "Skonfigurowano",
     notConfigured: "Nieskonfigurowano",
+    providersLoadFailed: "Nie udało się załadować dostawców",
+    providersLoadFailedDescription: "Upewnij się, że API działa, i spróbuj ponownie.",
     migrationAvailable: "Wykryto zmienne środowiskowe",
     migrationDescription: "Liczba kluczy API skonfigurowanych przez zmienne środowiskowe, które można przenieść do bazy danych w celu łatwiejszego zarządzania: {{count}}.",
     migrateToDatabase: "Przenieś do bazy danych",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ee1ac943..ec84d928 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -910,6 +910,8 @@ export const ptBR = {
     encryptionRequiredDescription: "Configure a variável de ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY com qualquer string secreta para armazenar chaves de API no banco de dados.",
     configured: "Configurado",
     notConfigured: "Não configurado",
+    providersLoadFailed: "Falha ao carregar os provedores",
+    providersLoadFailedDescription: "Verifique se a API está em execução e tente novamente.",
     migrationAvailable: "Variáveis de Ambiente Detectadas",
     migrationDescription: "{{count}} chave(s) de API estão configuradas via variáveis de ambiente e podem ser migradas para o banco de dados para facilitar o gerenciamento.",
     migrateToDatabase: "Migrar para Banco de Dados",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 162877d4..9533ca25 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -910,6 +910,8 @@ export const ruRU = {
     encryptionRequiredDescription: "Установите переменную окружения OPEN_NOTEBOOK_ENCRYPTION_KEY в любую секретную строку для хранения API-ключей в базе данных.",
     configured: "Настроено",
     notConfigured: "Не настроено",
+    providersLoadFailed: "Не удалось загрузить список провайдеров",
+    providersLoadFailedDescription: "Убедитесь, что API запущен, и попробуйте снова.",
     migrationAvailable: "Обнаружены переменные окружения",
     migrationDescription: "{{count}} API-ключ(ей) настроено через переменные окружения и может быть перенесено в базу данных для удобного управления.",
     migrateToDatabase: "Перенести в базу данных",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 181c93c1..143b5ec4 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -910,6 +910,8 @@ export const trTR = {
     encryptionRequiredDescription: "Veritabanında API anahtarlarının saklanmasını etkinleştirmek için OPEN_NOTEBOOK_ENCRYPTION_KEY ortam değişkenini herhangi bir gizli dize olarak ayarlayın.",
     configured: "Yapılandırıldı",
     notConfigured: "Yapılandırılmadı",
+    providersLoadFailed: "Sağlayıcılar yüklenemedi",
+    providersLoadFailedDescription: "API'nin çalıştığından emin olun ve tekrar deneyin.",
     migrationAvailable: "Ortam Değişkenleri Tespit Edildi",
     migrationDescription: "{{count}} API anahtarı ortam değişkenleri aracılığıyla yapılandırılmış ve daha kolay yönetim için veritabanına taşınabilir.",
     migrateToDatabase: "Veritabanına Taşı",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 0beeff3b..e6430a3d 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -910,6 +910,8 @@ export const zhCN = {
     encryptionRequiredDescription: "请将 OPEN_NOTEBOOK_ENCRYPTION_KEY 环境变量设置为任意密钥字符串，以启用将 API 密钥存储到数据库。",
     configured: "已配置",
     notConfigured: "未配置",
+    providersLoadFailed: "无法加载提供商列表",
+    providersLoadFailedDescription: "请确保 API 正在运行，然后重试。",
     migrationAvailable: "检测到环境变量",
     migrationDescription: "{{count}} 个 API 密钥通过环境变量配置，可以迁移到数据库以便于管理。",
     migrateToDatabase: "迁移到数据库",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 6aa90387..cb05fadf 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -910,6 +910,8 @@ export const zhTW = {
     encryptionRequiredDescription: "請將 OPEN_NOTEBOOK_ENCRYPTION_KEY 環境變數設定為任意密鑰字串，以啟用將 API 金鑰儲存至資料庫。",
     configured: "已設定",
     notConfigured: "未設定",
+    providersLoadFailed: "無法載入提供者清單",
+    providersLoadFailedDescription: "請確認 API 正在執行，然後再試一次。",
     migrationAvailable: "偵測到環境變數",
     migrationDescription: "{{count}} 個 API 金鑰通過環境變數設定，可以遷移到資料庫以便於管理。",
     migrateToDatabase: "遷移到資料庫",
diff --git a/frontend/src/lib/providers.test.tsx b/frontend/src/lib/providers.test.tsx
new file mode 100644
index 00000000..5b06db6e
--- /dev/null
+++ b/frontend/src/lib/providers.test.tsx
@@ -0,0 +1,34 @@
+import { render } from '@testing-library/react'
+import { describe, it, expect } from 'vitest'
+import { getTypeIcon, getTypeColor, getTypeLabel } from './providers'
+
+describe('model type presentation helpers', () => {
+  it('maps known modalities to their icons', () => {
+    const { container } = render(<>{getTypeIcon('language')}</>)
+    expect(container.querySelector('svg')).toBeInTheDocument()
+    expect(container.querySelector('.lucide-box')).not.toBeInTheDocument()
+  })
+
+  it('falls back to a generic icon for unknown modalities', () => {
+    // Provider modalities are runtime data from GET /api/providers: a new
+    // backend modality must still render instead of breaking the UI.
+    const { container } = render(<>{getTypeIcon('holograms')}</>)
+    expect(container.querySelector('svg')).toBeInTheDocument()
+  })
+
+  it('renders different markup for known vs unknown modalities', () => {
+    const known = render(<>{getTypeIcon('embedding')}</>)
+    const unknown = render(<>{getTypeIcon('not-a-modality')}</>)
+    expect(known.container.innerHTML).not.toEqual(unknown.container.innerHTML)
+  })
+
+  it('falls back to the raw modality name as label', () => {
+    expect(getTypeLabel('language')).toBe('Language')
+    expect(getTypeLabel('holograms')).toBe('holograms')
+  })
+
+  it('falls back to a neutral color for unknown modalities', () => {
+    expect(getTypeColor('holograms')).toBeTruthy()
+    expect(getTypeColor('holograms')).not.toEqual(getTypeColor('language'))
+  })
+})
diff --git a/frontend/src/lib/providers.tsx b/frontend/src/lib/providers.tsx
index 10ecf493..cfa76d8b 100644
--- a/frontend/src/lib/providers.tsx
+++ b/frontend/src/lib/providers.tsx
@@ -1,84 +1,35 @@
-import { MessageSquare, Code, Mic, Volume2 } from 'lucide-react'
+import { MessageSquare, Code, Mic, Volume2, Box } from 'lucide-react'
+
+// Provider metadata (names, display names, modalities, docs links) comes
+// from the backend registry via GET /api/providers — see useProviders()
+// (src/lib/hooks/use-providers.ts). Only genuinely presentational data
+// lives here: how each model modality is rendered (icon, color, label).
+//
+// Modalities arrive as runtime strings from the API, so every lookup has
+// a fallback: an unknown modality still renders (generic icon, raw name)
+// instead of breaking. Adding a provider must never require a frontend
+// edit.
 
 export type ModelType = 'language' | 'embedding' | 'text_to_speech' | 'speech_to_text'
 
-// Provider display names
-export const PROVIDER_DISPLAY_NAMES: Record<string, string> = {
-  openai: 'OpenAI',
-  anthropic: 'Anthropic',
-  google: 'Google AI',
-  groq: 'Groq',
-  mistral: 'Mistral AI',
-  deepseek: 'DeepSeek',
-  xai: 'xAI (Grok)',
-  openrouter: 'OpenRouter',
-  voyage: 'Voyage AI',
-  elevenlabs: 'ElevenLabs',
-  deepgram: 'Deepgram',
-  ollama: 'Ollama',
-  azure: 'Azure OpenAI',
-  vertex: 'Google Vertex AI',
-  openai_compatible: 'OpenAI Compatible',
-  dashscope: 'DashScope (Qwen)',
-  minimax: 'MiniMax',
-}
-
-// All providers in display order
-export const ALL_PROVIDERS = [
-  'openai', 'anthropic', 'google', 'groq', 'mistral', 'deepseek',
-  'xai', 'openrouter', 'dashscope', 'minimax', 'voyage', 'elevenlabs', 'deepgram', 'ollama',
-  'azure', 'vertex', 'openai_compatible',
+export const MODEL_TYPES: ModelType[] = [
+  'language',
+  'embedding',
+  'text_to_speech',
+  'speech_to_text',
 ]
 
-// Default modalities per provider
-export const PROVIDER_MODALITIES: Record<string, ModelType[]> = {
-  openai: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  anthropic: ['language'],
-  google: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  groq: ['language', 'speech_to_text'],
-  mistral: ['language', 'embedding', 'speech_to_text', 'text_to_speech'],
-  deepseek: ['language'],
-  xai: ['language', 'text_to_speech'],
-  openrouter: ['language', 'embedding'],
-  voyage: ['embedding'],
-  elevenlabs: ['text_to_speech', 'speech_to_text'],
-  deepgram: ['text_to_speech'],
-  ollama: ['language', 'embedding'],
-  azure: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  vertex: ['language', 'embedding', 'text_to_speech'],
-  openai_compatible: ['language', 'embedding', 'text_to_speech', 'speech_to_text'],
-  dashscope: ['language'],
-  minimax: ['language'],
-}
-
-// Documentation links
-export const PROVIDER_DOCS: Record<string, string> = {
-  openai: 'https://platform.openai.com/api-keys',
-  anthropic: 'https://console.anthropic.com/settings/keys',
-  google: 'https://aistudio.google.com/app/apikey',
-  groq: 'https://console.groq.com/keys',
-  mistral: 'https://console.mistral.ai/api-keys/',
-  deepseek: 'https://platform.deepseek.com/api_keys',
-  xai: 'https://console.x.ai/',
-  openrouter: 'https://openrouter.ai/keys',
-  voyage: 'https://dash.voyageai.com/api-keys',
-  elevenlabs: 'https://elevenlabs.io/app/settings/api-keys',
-  deepgram: 'https://console.deepgram.com/',
-  azure: 'https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI',
-  vertex: 'https://cloud.google.com/vertex-ai/docs/start/cloud-environment',
-  openai_compatible: 'https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md',
-  dashscope: 'https://help.aliyun.com/zh/model-studio/getting-started/',
-  minimax: 'https://platform.minimaxi.com/document/Guides',
-}
-
-export const TYPE_ICONS: Record<ModelType, React.ReactNode> = {
+const TYPE_ICONS: Record<ModelType, React.ReactNode> = {
   language: <MessageSquare className="h-3 w-3" />,
   embedding: <Code className="h-3 w-3" />,
   text_to_speech: <Volume2 className="h-3 w-3" />,
   speech_to_text: <Mic className="h-3 w-3" />,
 }
 
-export const TYPE_COLORS: Record<ModelType, string> = {
+// Mandatory fallback for modality strings the frontend doesn't know yet.
+const FALLBACK_TYPE_ICON: React.ReactNode = <Box className="h-3 w-3" />
+
+const TYPE_COLORS: Record<ModelType, string> = {
   language: 'bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-300',
   embedding: 'bg-purple-100 text-purple-700 dark:bg-purple-900/30 dark:text-purple-300',
   text_to_speech: 'bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-300',
@@ -87,9 +38,23 @@ export const TYPE_COLORS: Record<ModelType, string> = {
 
 export const TYPE_COLOR_INACTIVE = 'bg-muted text-muted-foreground opacity-50'
 
-export const TYPE_LABELS: Record<ModelType, string> = {
+const TYPE_COLOR_FALLBACK = 'bg-muted text-muted-foreground'
+
+const TYPE_LABELS: Record<ModelType, string> = {
   language: 'Language',
   embedding: 'Embedding',
   text_to_speech: 'TTS',
   speech_to_text: 'STT',
 }
+
+export function getTypeIcon(type: string): React.ReactNode {
+  return TYPE_ICONS[type as ModelType] ?? FALLBACK_TYPE_ICON
+}
+
+export function getTypeColor(type: string): string {
+  return TYPE_COLORS[type as ModelType] ?? TYPE_COLOR_FALLBACK
+}
+
+export function getTypeLabel(type: string): string {
+  return TYPE_LABELS[type as ModelType] ?? type
+}
diff --git a/open_notebook/AGENTS.md b/open_notebook/AGENTS.md
index ae17062a..564f623b 100644
--- a/open_notebook/AGENTS.md
+++ b/open_notebook/AGENTS.md
@@ -12,7 +12,7 @@ Normative rules for working on the Python backend. Architecture and design ratio
 ## API layer (`api/`)
 
 - Structure is routes → services → models. Routers stay thin; business logic goes in `*_service.py`.
-- Provider metadata (env vars, modalities, test models, discovery URLs, docs links) lives in the registry: `open_notebook/ai/provider_registry.py` `PROVIDERS`. `TEST_MODELS`, `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES` and `OPENAI_COMPAT_PROVIDERS` are derived from it, and `GET /api/providers` exposes it. Adding a provider = add it to the registry, plus **two** manual copies: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) and the frontend tables in `frontend/src/lib/providers.tsx` — both enforced by `tests/test_credential_provider_validation.py`.
+- Provider metadata (env vars, modalities, test models, discovery URLs, docs links) lives in the registry: `open_notebook/ai/provider_registry.py` `PROVIDERS`. `TEST_MODELS`, `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES` and `OPENAI_COMPAT_PROVIDERS` are derived from it, and `GET /api/providers` exposes it. Adding a provider = add it to the registry, plus **one** manual copy: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) — enforced by `tests/test_credential_provider_validation.py`. The frontend consumes `GET /api/providers` at runtime (`useProviders()`), so it needs no edit; the registry declaration order is the display order.
 - NEVER return API key values from any endpoint — metadata only.
 - Every user-supplied URL field must go through `validate_url()` (`open_notebook/utils/url_validation.py`, async) for SSRF protection. Private IPs/localhost are intentionally allowed (self-hosted Ollama, LM Studio).
 - Errors: raise typed exceptions from `open_notebook.exceptions` — global handlers map them to HTTP status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `RateLimitError`→429, `ConfigurationError`→422, `NetworkError`/`ExternalServiceError`→502, `OpenNotebookError`→500). Don't raise bare `HTTPException` for domain errors.
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 2a798eb3..dd333681 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -11,12 +11,14 @@ frontend table). Now the backend surfaces are all derived from the
 - `open_notebook/ai/model_discovery.py` `OPENAI_COMPAT_PROVIDERS`
 - `GET /api/providers` (api/routers/providers.py)
 
-Two places still need a manual edit when adding a provider — both are
-enforced by tests (tests/test_credential_provider_validation.py):
+One place still needs a manual edit when adding a provider — enforced by
+tests (tests/test_credential_provider_validation.py): the
+`SupportedProvider` Literal in `api/models.py` (typing can't be built at
+runtime from this dict). The frontend consumes `GET /api/providers` at
+runtime, so it needs no edit.
 
-1. `SupportedProvider` Literal in `api/models.py` (typing can't be built
-   at runtime from this dict).
-2. The frontend table in `frontend/src/lib/providers.tsx`.
+The declaration order below is the display order the frontend renders —
+`GET /api/providers` returns `PROVIDERS.values()` as declared.
 
 This module is pure data: it must not import anything from the rest of
 the project so it stays importable from anywhere without cycles.
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index e27e92ca..02e97017 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -6,9 +6,9 @@ with a less clear error instead of a clean 422 at the API boundary.
 
 Also the sync-enforcement for the provider registry
 (open_notebook/ai/provider_registry.py): the registry is the backend
-source of truth, and the two remaining manual copies (the
-SupportedProvider Literal and the frontend ALL_PROVIDERS table) must
-match it exactly.
+source of truth, and the one remaining manual copy (the
+SupportedProvider Literal) must match it exactly. The frontend consumes
+GET /api/providers at runtime, so it needs no cross-check.
 """
 
 from typing import get_args
@@ -49,8 +49,8 @@ def client():
 
 
 class TestProviderRegistryIsTheSourceOfTruth:
-    """The registry drives every backend surface; the Literal and the
-    frontend table are the only manual copies and must match it."""
+    """The registry drives every backend surface; the Literal is the only
+    manual copy and must match it."""
 
     def test_literal_matches_registry_keys(self):
         assert set(get_args(SupportedProvider)) == set(PROVIDERS.keys())
@@ -133,27 +133,15 @@ class TestSupportedProviderMatchesOtherSourcesOfTruth:
 
         assert set(get_args(SupportedProvider)) == set(PROVIDER_ENV_CONFIG.keys())
 
-    def test_matches_frontend_all_providers_list(self):
-        """The frontend keeps its own copy (ALL_PROVIDERS) that a Python
-        test can't import, so extract the string literals from the source
-        instead - adding a provider to only one of the lists must fail CI."""
-        import re
-        from pathlib import Path
-
-        page = Path(__file__).parent.parent / "frontend/src/lib/providers.tsx"
-        source = page.read_text()
-        match = re.search(r"const ALL_PROVIDERS = \[(.*?)\]", source, re.DOTALL)
-        assert match, "ALL_PROVIDERS array not found in lib/providers.tsx"
-        frontend_providers = re.findall(r"'([a-z0-9_]+)'", match.group(1))
-        assert set(get_args(SupportedProvider)) == set(frontend_providers)
-
 
 class TestProvidersEndpoint:
     def test_get_providers_returns_registry_metadata(self, client):
         response = client.get("/api/providers")
         assert response.status_code == 200
         data = response.json()
-        assert {p["name"] for p in data} == set(PROVIDERS.keys())
+        # The frontend renders providers in response order, so the endpoint
+        # must preserve the registry declaration order (the display order).
+        assert [p["name"] for p in data] == list(PROVIDERS.keys())
 
         openai = next(p for p in data if p["name"] == "openai")
         assert openai["display_name"] == "OpenAI"

From 0ecddeeebdf6ab4611337a4a6336ba61a8afdf3a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 12:58:11 -0300
Subject: [PATCH 202/345] refactor(frontend): migrate SourceDetailContent to
 the useSource hook (#1109)

* refactor(frontend): migrate SourceDetailContent to the useSource hook

Fetch the source through the shared useSource React Query hook instead of
an imperative fetchSource with local loading/loadError state, matching the
insight/note dialogs (404 -> ContentUnavailable not-found, other errors ->
error, never-retry-404 from the global query client).

- Title edits and deletes now go through useUpdateSource/useDeleteSource,
  so source lists are invalidated and a deleted source can't be served
  from the query cache when reopening the dialog.
- A failed background refetch (window focus) no longer replaces a rendered
  source: the unavailable state only shows when there is no data.
- The key={sourceId} remounts on SourceDialog and sources/[id]/page.tsx
  are removed; the component keys an inner subcomponent by sourceId itself
  so all per-source UI state (tab, transient flags, insight selection)
  still resets on navigation without a parent contract.

Closes #1106

* fix(frontend): show not-found over stale cached data when a source refetch 404s

React Query retains the previous data when a refetch fails, so gating the
unavailable state on !source alone let a deleted-but-cached source render
after a background 404 (dangling citation reopened within the cache
window). A definitive 404 now always yields ContentUnavailable, while a
transient refetch error over good cached data still keeps the source
rendered. Adds a regression test seeding a stale cache entry whose refetch
rejects with 404.
---
 CHANGELOG.md                                  |  1 +
 .../src/app/(dashboard)/sources/[id]/page.tsx |  1 -
 .../sources/SourceDetailContent.test.tsx      | 40 +++++++++
 .../sources/SourceDetailContent.tsx           | 87 ++++++++++---------
 .../src/components/sources/SourceDialog.tsx   |  2 -
 5 files changed, 88 insertions(+), 43 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index db4c99d8..8d3bfab8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- The source detail view (dialog and full page) now fetches through the shared `useSource` React Query hook instead of a hand-rolled fetch, matching the insight/note dialogs: caching and the never-retry-404 policy come from React Query, title edits and deletes go through the shared mutation hooks (so source lists refresh and a deleted source can't be served from the cache), and the `key={sourceId}` remount workaround on the parents was removed — the component resets its own per-source UI state (#1106)
 - The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
 
 ### Fixed
diff --git a/frontend/src/app/(dashboard)/sources/[id]/page.tsx b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
index 2c374321..d24b9d3c 100644
--- a/frontend/src/app/(dashboard)/sources/[id]/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/[id]/page.tsx
@@ -44,7 +44,6 @@ export default function SourceDetailPage() {
         {/* Left column - Source detail */}
         <div className="overflow-y-auto px-4 pb-6">
           <SourceDetailContent
-            key={sourceId}
             sourceId={sourceId}
             showChatButton={false}
             onClose={handleBack}
diff --git a/frontend/src/components/sources/SourceDetailContent.test.tsx b/frontend/src/components/sources/SourceDetailContent.test.tsx
index c8a2505e..b80f3b78 100644
--- a/frontend/src/components/sources/SourceDetailContent.test.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.test.tsx
@@ -3,6 +3,8 @@ import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
 import { describe, it, expect, vi, beforeEach } from 'vitest'
 import { SourceDetailContent } from './SourceDetailContent'
 import { sourcesApi } from '@/lib/api/sources'
+import { QUERY_KEYS } from '@/lib/api/query-client'
+import { SourceDetailResponse } from '@/lib/types/api'
 
 // useTranslation is mocked globally in setup.ts (t returns the key string)
 
@@ -90,6 +92,44 @@ describe('SourceDetailContent', () => {
     ).not.toBeInTheDocument()
   })
 
+  it('shows the not-found state over stale cached data when a refetch returns 404', async () => {
+    // Simulates the orphan-reference path: the source was viewed (cached),
+    // then deleted; reopening it serves the retained cache while the
+    // background refetch 404s. React Query keeps the previous data alongside
+    // the error — the definitive 404 must still win over the stale render.
+    mockSourcesGet.mockRejectedValue(notFoundError)
+
+    const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
+    const cachedSource: SourceDetailResponse = {
+      id: 'source:stale',
+      title: 'Deleted but cached',
+      asset: null,
+      embedded: false,
+      embedded_chunks: 0,
+      insights_count: 0,
+      created: '2026-01-01T00:00:00Z',
+      updated: '2026-01-01T00:00:00Z',
+      full_text: 'stale content',
+    }
+    // Mark the cached entry as stale (older than useSource's 30s staleTime)
+    // so mounting triggers a refetch, which rejects with the 404 above.
+    queryClient.setQueryData(QUERY_KEYS.source('source:stale'), cachedSource, {
+      updatedAt: Date.now() - 60_000,
+    })
+
+    render(
+      <QueryClientProvider client={queryClient}>
+        <SourceDetailContent sourceId="source:stale" />
+      </QueryClientProvider>
+    )
+
+    await waitFor(() => {
+      expect(screen.getByTestId('content-unavailable')).toBeInTheDocument()
+    })
+    expect(screen.getByText('common.contentUnavailable.notFoundTitle')).toBeInTheDocument()
+    expect(screen.queryByText('Deleted but cached')).not.toBeInTheDocument()
+  })
+
   it('invokes onClose from the not-found close button', async () => {
     mockSourcesGet.mockRejectedValue(notFoundError)
     const onClose = vi.fn()
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index d92973a6..d133ac97 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -4,6 +4,8 @@ import { useState, useEffect, useCallback, useMemo } from 'react'
 import { useQueryClient } from '@tanstack/react-query'
 import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import { sourcesApi } from '@/lib/api/sources'
+import { QUERY_KEYS } from '@/lib/api/query-client'
+import { useSource, useUpdateSource, useDeleteSource } from '@/lib/hooks/use-sources'
 import { insightsApi, SourceInsightResponse } from '@/lib/api/insights'
 import { transformationsApi } from '@/lib/api/transformations'
 import { embeddingApi } from '@/lib/api/embedding'
@@ -86,7 +88,15 @@ const safeExternalHref = (url: string | null | undefined): string | null => {
   }
 }
 
-export function SourceDetailContent({
+export function SourceDetailContent(props: SourceDetailContentProps) {
+  // Remount per source so all per-source UI state (active tab, transient
+  // flags, insight selection…) resets on navigation, without parents needing
+  // to key the component. The source data itself is cached by React Query, so
+  // remounting is cheap: a cached source renders immediately.
+  return <SourceDetailContentInner key={props.sourceId} {...props} />
+}
+
+function SourceDetailContentInner({
   sourceId,
   showChatButton = false,
   onChatClick,
@@ -94,14 +104,11 @@ export function SourceDetailContent({
 }: SourceDetailContentProps) {
   const { t, language } = useTranslation()
   const queryClient = useQueryClient()
-  const [source, setSource] = useState<SourceDetailResponse | null>(null)
   const [insights, setInsights] = useState<SourceInsightResponse[]>([])
   const [transformations, setTransformations] = useState<Transformation[]>([])
   const [selectedTransformation, setSelectedTransformation] = useState<string>('')
-  const [loading, setLoading] = useState(true)
   const [loadingInsights, setLoadingInsights] = useState(false)
   const [creatingInsight, setCreatingInsight] = useState(false)
-  const [loadError, setLoadError] = useState<'not-found' | 'error' | null>(null)
   const [copied, setCopied] = useState(false)
   const [isEmbedding, setIsEmbedding] = useState(false)
   const [isDownloadingFile, setIsDownloadingFile] = useState(false)
@@ -110,28 +117,19 @@ export function SourceDetailContent({
   const [insightToDelete, setInsightToDelete] = useState<string | null>(null)
   const [deletingInsight, setDeletingInsight] = useState(false)
 
-  const fetchSource = useCallback(async () => {
-    try {
-      setLoading(true)
-      setLoadError(null)
-      const data = await sourcesApi.get(sourceId)
-      setSource(data)
-      if (typeof data.file_available === 'boolean') {
-        setFileAvailable(data.file_available)
-      } else if (!data.asset?.file_path) {
-        setFileAvailable(null)
-      } else {
-        setFileAvailable(null)
-      }
-    } catch (err) {
-      console.error('Failed to fetch source:', err)
-      // A 404 means the source was deleted (e.g. a dangling chat/ask
-      // reference) — handled by the shared "content no longer exists" state.
-      setLoadError(isNotFoundError(err) ? 'not-found' : 'error')
-    } finally {
-      setLoading(false)
-    }
-  }, [sourceId])
+  // A 404 means the source was deleted (e.g. a dangling chat/ask reference) —
+  // handled by the shared "content no longer exists" state. The global query
+  // client never retries 404s, so the not-found state shows immediately.
+  const { data: source, isPending, error: loadQueryError, refetch: refetchSource } = useSource(sourceId)
+  const loadError = loadQueryError ? (isNotFoundError(loadQueryError) ? 'not-found' : 'error') : null
+  const updateSource = useUpdateSource()
+  const deleteSource = useDeleteSource()
+
+  // file_available comes from the source payload; downloads may flip it later,
+  // so keep it as local state synced from the query data.
+  useEffect(() => {
+    setFileAvailable(typeof source?.file_available === 'boolean' ? source.file_available : null)
+  }, [source?.file_available])
 
   const fetchInsights = useCallback(async () => {
     try {
@@ -156,11 +154,10 @@ export function SourceDetailContent({
 
   useEffect(() => {
     if (sourceId) {
-      void fetchSource()
       void fetchInsights()
       void fetchTransformations()
     }
-  }, [fetchInsights, fetchSource, fetchTransformations, sourceId])
+  }, [fetchInsights, fetchTransformations, sourceId])
 
   const createInsight = async () => {
     if (!selectedTransformation) {
@@ -230,13 +227,18 @@ export function SourceDetailContent({
     if (!source || title === source.title) return
 
     try {
-      await sourcesApi.update(sourceId, { title })
-      toast.success(t('common.success'))
-      setSource({ ...source, title })
+      await updateSource.mutateAsync({ id: sourceId, data: { title } })
+      // The mutation invalidates the source queries (list + detail); patch the
+      // detail cache immediately so the title doesn't flash back while the
+      // refetch is in flight.
+      queryClient.setQueryData<SourceDetailResponse>(
+        QUERY_KEYS.source(sourceId),
+        (previous) => (previous ? { ...previous, title } : previous)
+      )
     } catch (err) {
+      // The mutation hook already shows an error toast.
       console.error('Failed to update source title:', err)
-      toast.error(t('common.error'))
-      await fetchSource()
+      await refetchSource()
     }
   }
 
@@ -247,7 +249,7 @@ export function SourceDetailContent({
       setIsEmbedding(true)
       const response = await embeddingApi.embedContent(sourceId, 'source')
       toast.success(response.message || t('common.success'))
-      await fetchSource()
+      await refetchSource()
     } catch (err) {
       console.error('Failed to embed content:', err)
       toast.error(t('common.error'))
@@ -375,17 +377,18 @@ export function SourceDetailContent({
 
     if (confirm(t('sources.deleteSourceConfirm') || t('common.confirm'))) {
       try {
-        await sourcesApi.delete(source.id)
-        toast.success(t('common.success'))
+        // The mutation hook shows the toasts and invalidates the source
+        // queries, so a reopened dialog can't serve the deleted source from
+        // the cache.
+        await deleteSource.mutateAsync(source.id)
         onClose?.()
       } catch (error) {
         console.error('Failed to delete source:', error)
-        toast.error(t('common.error'))
       }
     }
   }
 
-  if (loading) {
+  if (isPending) {
     return (
       <div className="flex h-full items-center justify-center p-8">
         <LoadingSpinner />
@@ -393,7 +396,11 @@ export function SourceDetailContent({
     )
   }
 
-  if (loadError || !source) {
+  // A definitive 404 always wins, even when React Query still holds stale
+  // data from before the source was deleted (retained data on a failed
+  // refetch). A transient refetch error over good cached data does not
+  // replace the rendered source.
+  if (loadError === 'not-found' || !source) {
     return (
       <ContentUnavailable
         variant={loadError ?? 'error'}
@@ -801,7 +808,7 @@ export function SourceDetailContent({
             <NotebookAssociations
               sourceId={sourceId}
               currentNotebookIds={source.notebooks || []}
-              onSave={fetchSource}
+              onSave={() => void refetchSource()}
             />
           </TabsContent>
         </Tabs>
diff --git a/frontend/src/components/sources/SourceDialog.tsx b/frontend/src/components/sources/SourceDialog.tsx
index 6bb29db5..2128b5f6 100644
--- a/frontend/src/components/sources/SourceDialog.tsx
+++ b/frontend/src/components/sources/SourceDialog.tsx
@@ -48,9 +48,7 @@ export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps
 
         {/* Source detail content */}
         <div className="flex-1 overflow-y-auto min-h-0">
-          {/* Keyed by source so state (loading/not-found) resets per source */}
           <SourceDetailContent
-            key={sourceIdWithPrefix}
             sourceId={sourceIdWithPrefix}
             showChatButton={true}
             onChatClick={handleChatClick}

From 409dde07109ba5e889c35999c10387b6cb043959 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 13:05:04 -0300
Subject: [PATCH 203/345] fix(podcasts): reference speaker profiles by record
 ID instead of name (#1110)

* fix(podcasts): reference speaker profiles by record ID instead of name

episode_profile.speaker_config now stores a record<speaker_profile>
reference (migration 20 converts existing rows; orphaned names become
null). The generate API keeps accepting the speaker profile by name and
resolves it to a record ID at the boundary.

Closes #630

* fix(podcasts): survive orphaned speaker references in podcast-creator config

Review fixes: rewrite record IDs back to speaker names (and drop orphaned
profiles) when building podcast-creator's episode config so one orphaned
profile can't fail validation for every generation; clearer error for
dangling references; resolve a single speaker name on single-record
endpoints instead of fetching the whole speaker table; accurate wording
about record links not preventing dangling references.

* fix(podcasts): submit the speaker profile record ID from the generate dialog

Submitting the cached display name made generation fail if the speaker
profile was renamed while the dialog was open - the record ID is stable
and the API resolves either form.
---
 CHANGELOG.md                                  |   1 +
 api/podcast_service.py                        |   9 +-
 api/routers/episode_profiles.py               |  85 ++++-
 commands/podcast_commands.py                  |  58 ++-
 .../podcasts/EpisodeProfilesPanel.tsx         |  14 +-
 .../podcasts/GeneratePodcastDialog.tsx        |  27 +-
 .../forms/EpisodeProfileFormDialog.tsx        |   8 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   2 +
 frontend/src/lib/locales/ca-ES/index.ts       |   2 +
 frontend/src/lib/locales/de-DE/index.ts       |   2 +
 frontend/src/lib/locales/en-US/index.ts       |   2 +
 frontend/src/lib/locales/es-ES/index.ts       |   2 +
 frontend/src/lib/locales/fr-FR/index.ts       |   2 +
 frontend/src/lib/locales/it-IT/index.ts       |   2 +
 frontend/src/lib/locales/ja-JP/index.ts       |   2 +
 frontend/src/lib/locales/pl-PL/index.ts       |   2 +
 frontend/src/lib/locales/pt-BR/index.ts       |   2 +
 frontend/src/lib/locales/ru-RU/index.ts       |   2 +
 frontend/src/lib/locales/tr-TR/index.ts       |   2 +
 frontend/src/lib/locales/zh-CN/index.ts       |   2 +
 frontend/src/lib/locales/zh-TW/index.ts       |   2 +
 frontend/src/lib/types/podcasts.ts            |  13 +-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/20.surrealql          |  24 ++
 .../database/migrations/20_down.surrealql     |  12 +
 open_notebook/podcasts/models.py              |  33 +-
 tests/test_domain.py                          |  10 +-
 tests/test_podcast_speaker_profile.py         | 338 +++++++++++++++++-
 28 files changed, 611 insertions(+), 55 deletions(-)
 create mode 100644 open_notebook/database/migrations/20.surrealql
 create mode 100644 open_notebook/database/migrations/20_down.surrealql

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8d3bfab8..b57c6db9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
 
 ### Fixed
+- Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)
 - Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
 - Source insights now get `created`/`updated` timestamps stamped at creation (migration 19 mirrors the defaults used by the other tables), and the insights API returns `null` — instead of the literal string `"None"` — for legacy insights that predate the migration (#1045)
 - `uv sync` alone now provides the full dev toolchain: the legacy `[project.optional-dependencies].dev` list was merged into `[dependency-groups].dev` (mypy included — the documented `uv run python -m mypy .` previously failed on a fresh clone), Jupyter-only packages moved to a separate `notebooks` group, and the CI typecheck job no longer needs `--extra dev` (#1101)
diff --git a/api/podcast_service.py b/api/podcast_service.py
index df37ea3c..205d1c36 100644
--- a/api/podcast_service.py
+++ b/api/podcast_service.py
@@ -49,8 +49,9 @@ class PodcastService:
             if not episode_profile:
                 raise ValueError(f"Episode profile '{episode_profile_name}' not found")
 
-            # Validate speaker profile exists
-            speaker_profile = await SpeakerProfile.get_by_name(speaker_profile_name)
+            # Resolve the user-facing speaker profile name to a record ID at
+            # the API boundary (#630) - everything downstream works with IDs.
+            speaker_profile = await SpeakerProfile.resolve(speaker_profile_name)
             if not speaker_profile:
                 raise ValueError(f"Speaker profile '{speaker_profile_name}' not found")
 
@@ -75,10 +76,10 @@ class PodcastService:
                     "Content is required - provide either content or notebook_id"
                 )
 
-            # Prepare command arguments
+            # Prepare command arguments (speaker profile as record ID)
             command_args = {
                 "episode_profile": episode_profile_name,
-                "speaker_profile": speaker_profile_name,
+                "speaker_profile": str(speaker_profile.id),
                 "episode_name": episode_name,
                 "content": str(content),
                 "briefing_suffix": briefing_suffix,
diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index 24af3070..baf66124 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -1,11 +1,11 @@
-from typing import List, Optional
+from typing import Dict, List, Optional
 
 from fastapi import APIRouter, HTTPException
 from loguru import logger
 from pydantic import BaseModel, Field
 
-from open_notebook.exceptions import OpenNotebookError
-from open_notebook.podcasts.models import EpisodeProfile
+from open_notebook.exceptions import InvalidInputError, OpenNotebookError
+from open_notebook.podcasts.models import EpisodeProfile, SpeakerProfile
 
 router = APIRouter()
 
@@ -14,7 +14,12 @@ class EpisodeProfileResponse(BaseModel):
     id: str
     name: str
     description: str
-    speaker_config: str
+    speaker_config: Optional[str] = Field(
+        None, description="speaker_profile record ID (null when orphaned)"
+    )
+    speaker_config_name: Optional[str] = Field(
+        None, description="Resolved speaker profile name (for display)"
+    )
     outline_llm: Optional[str] = None
     transcript_llm: Optional[str] = None
     language: Optional[str] = None
@@ -28,12 +33,32 @@ class EpisodeProfileResponse(BaseModel):
     transcript_model: Optional[str] = None
 
 
-def _profile_to_response(profile: EpisodeProfile) -> EpisodeProfileResponse:
+async def _speaker_names_by_id() -> Dict[str, str]:
+    """Map speaker_profile record ID -> name for list serialization."""
+    speakers = await SpeakerProfile.get_all()
+    return {str(speaker.id): speaker.name for speaker in speakers}
+
+
+async def _speaker_name_for(speaker_config: Optional[str]) -> Optional[str]:
+    """Resolve one profile's speaker_config record ID to the speaker name.
+
+    Returns None for a missing or dangling reference - the frontend renders
+    that as "needs setup"."""
+    if not speaker_config:
+        return None
+    speaker = await SpeakerProfile.resolve(speaker_config)
+    return speaker.name if speaker else None
+
+
+def _profile_to_response(
+    profile: EpisodeProfile, speaker_name: Optional[str]
+) -> EpisodeProfileResponse:
     return EpisodeProfileResponse(
         id=str(profile.id),
         name=profile.name,
         description=profile.description or "",
         speaker_config=profile.speaker_config,
+        speaker_config_name=speaker_name,
         outline_llm=profile.outline_llm,
         transcript_llm=profile.transcript_llm,
         language=profile.language,
@@ -47,12 +72,27 @@ def _profile_to_response(profile: EpisodeProfile) -> EpisodeProfileResponse:
     )
 
 
+async def _resolve_speaker_config(value: str) -> SpeakerProfile:
+    """Resolve an incoming speaker_config (record ID, or name for backward
+    compatibility) to the referenced SpeakerProfile."""
+    speaker = await SpeakerProfile.resolve(value)
+    if not speaker:
+        raise InvalidInputError(f"Speaker profile '{value}' not found")
+    return speaker
+
+
 @router.get("/episode-profiles", response_model=List[EpisodeProfileResponse])
 async def list_episode_profiles():
     """List all available episode profiles"""
     try:
         profiles = await EpisodeProfile.get_all(order_by="name asc")
-        return [_profile_to_response(p) for p in profiles]
+        speaker_names = await _speaker_names_by_id()
+        return [
+            _profile_to_response(
+                p, speaker_names.get(p.speaker_config) if p.speaker_config else None
+            )
+            for p in profiles
+        ]
     except HTTPException:
         raise
     except OpenNotebookError:
@@ -75,7 +115,9 @@ async def get_episode_profile(profile_name: str):
                 status_code=404, detail=f"Episode profile '{profile_name}' not found"
             )
 
-        return _profile_to_response(profile)
+        return _profile_to_response(
+            profile, await _speaker_name_for(profile.speaker_config)
+        )
 
     except HTTPException:
         raise
@@ -91,7 +133,13 @@ async def get_episode_profile(profile_name: str):
 class EpisodeProfileCreate(BaseModel):
     name: str = Field(..., description="Unique profile name")
     description: str = Field("", description="Profile description")
-    speaker_config: str = Field(..., description="Reference to speaker profile name")
+    speaker_config: str = Field(
+        ...,
+        description=(
+            "speaker_profile record ID (a profile name is also accepted "
+            "for backward compatibility)"
+        ),
+    )
     outline_llm: Optional[str] = Field(None, description="Model record ID for outline")
     transcript_llm: Optional[str] = Field(
         None, description="Model record ID for transcript"
@@ -114,10 +162,11 @@ class EpisodeProfileCreate(BaseModel):
 async def create_episode_profile(profile_data: EpisodeProfileCreate):
     """Create a new episode profile"""
     try:
+        speaker = await _resolve_speaker_config(profile_data.speaker_config)
         profile = EpisodeProfile(
             name=profile_data.name,
             description=profile_data.description,
-            speaker_config=profile_data.speaker_config,
+            speaker_config=str(speaker.id),
             outline_llm=profile_data.outline_llm,
             transcript_llm=profile_data.transcript_llm,
             language=profile_data.language,
@@ -131,7 +180,7 @@ async def create_episode_profile(profile_data: EpisodeProfileCreate):
         )
 
         await profile.save()
-        return _profile_to_response(profile)
+        return _profile_to_response(profile, speaker.name)
 
     except HTTPException:
         raise
@@ -155,11 +204,19 @@ async def update_episode_profile(profile_id: str, profile_data: EpisodeProfileCr
                 status_code=404, detail=f"Episode profile '{profile_id}' not found"
             )
 
-        for field, value in profile_data.model_dump(exclude_unset=True).items():
+        update_data = profile_data.model_dump(exclude_unset=True)
+        speaker_name: Optional[str] = None
+        if "speaker_config" in update_data:
+            speaker = await _resolve_speaker_config(update_data["speaker_config"])
+            update_data["speaker_config"] = str(speaker.id)
+            speaker_name = speaker.name
+        for field, value in update_data.items():
             setattr(profile, field, value)
 
         await profile.save()
-        return _profile_to_response(profile)
+        if speaker_name is None:
+            speaker_name = await _speaker_name_for(profile.speaker_config)
+        return _profile_to_response(profile, speaker_name)
 
     except HTTPException:
         raise
@@ -228,7 +285,9 @@ async def duplicate_episode_profile(profile_id: str):
         )
 
         await duplicate.save()
-        return _profile_to_response(duplicate)
+        return _profile_to_response(
+            duplicate, await _speaker_name_for(duplicate.speaker_config)
+        )
 
     except HTTPException:
         raise
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index f26a6b5e..228c155c 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -39,6 +39,9 @@ def build_episode_output_dir(data_folder: str) -> tuple[str, Path]:
 
 class PodcastGenerationInput(CommandInput):
     episode_profile: str
+    # Speaker profile record ID or name (the API boundary resolves the
+    # user-facing name to a record ID before submitting; both are accepted
+    # here for robustness).
     speaker_profile: Optional[str] = None
     episode_name: str
     content: str
@@ -78,13 +81,25 @@ async def generate_podcast_command(
             )
 
         # Honor the explicitly requested speaker profile when provided,
-        # falling back to the episode profile's configured speaker.
-        speaker_profile_name = (
-            input_data.speaker_profile or episode_profile.speaker_config
-        )
-        speaker_profile = await SpeakerProfile.get_by_name(speaker_profile_name)
+        # falling back to the episode profile's configured speaker
+        # (a speaker_profile record ID since migration 20, None when the
+        # referenced profile no longer exists).
+        speaker_ref = input_data.speaker_profile or episode_profile.speaker_config
+        if not speaker_ref:
+            raise ValueError(
+                f"Episode profile '{episode_profile.name}' has no speaker "
+                "profile configured. Please update the profile to select a "
+                "speaker profile."
+            )
+        speaker_profile = await SpeakerProfile.resolve(speaker_ref)
         if not speaker_profile:
-            raise ValueError(f"Speaker profile '{speaker_profile_name}' not found")
+            if input_data.speaker_profile:
+                raise ValueError(f"Speaker profile '{speaker_ref}' not found")
+            raise ValueError(
+                f"Episode profile '{episode_profile.name}' references a "
+                "speaker profile that no longer exists. Please update the "
+                "profile to select a speaker profile."
+            )
 
         logger.info(f"Loaded episode profile: {episode_profile.name}")
         logger.info(f"Loaded speaker profile: {speaker_profile.name}")
@@ -135,11 +150,42 @@ async def generate_podcast_command(
             profile["name"]: profile for profile in speaker_profiles
         }
 
+        # Map speaker_profile record ID -> name so podcast-creator keeps
+        # receiving speaker names (its EpisodeProfile.speaker_config is a
+        # required non-empty name string, cross-referenced against the
+        # speakers config keyed by name).
+        speaker_name_by_id = {
+            str(profile["id"]): profile["name"] for profile in speaker_profiles
+        }
+
         # 5. Inject resolved model configs into profile dicts
         # Resolve ALL episode profiles (podcast-creator validates all).
         # Remove profiles that fail resolution to prevent validation errors.
         for ep_name in list(episode_profiles_dict.keys()):
             ep_dict = episode_profiles_dict[ep_name]
+
+            # Since migration 20, speaker_config stores a record ID (and is
+            # None when the referenced speaker profile no longer exists).
+            # Rewrite it back to the speaker name for podcast-creator; drop
+            # profiles whose reference doesn't resolve so a single orphaned
+            # profile can't fail validation for the whole config. The profile
+            # being generated always resolves: its speaker was validated above.
+            speaker_ref = ep_dict.get("speaker_config")
+            speaker_name = (
+                speaker_name_by_id.get(str(speaker_ref)) if speaker_ref else None
+            )
+            if not speaker_name and ep_name == episode_profile.name:
+                speaker_name = speaker_profile.name
+            if not speaker_name:
+                logger.warning(
+                    f"Episode profile '{ep_name}' references a speaker profile "
+                    f"that no longer exists ({speaker_ref!r}), removing from "
+                    "config to prevent validation errors"
+                )
+                del episode_profiles_dict[ep_name]
+                continue
+            ep_dict["speaker_config"] = speaker_name
+
             try:
                 if ep_dict.get("outline_llm"):
                     prov, model, conf = await _resolve_model_config(
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 9cf0d4e4..91cbb32f 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -46,9 +46,13 @@ interface EpisodeProfilesPanelProps {
 
 function findSpeakerSummary(
   speakerProfiles: SpeakerProfile[],
-  speakerName: string
+  speakerId: string | null
 ) {
-  return speakerProfiles.find((profile) => profile.name === speakerName)
+  if (!speakerId) {
+    return undefined
+  }
+  // speaker_config references the speaker profile by record ID
+  return speakerProfiles.find((profile) => profile.id === speakerId)
 }
 
 export function EpisodeProfilesPanel({
@@ -239,7 +243,11 @@ export function EpisodeProfilesPanel({
                       </p>
                       <div className="flex items-center gap-2 text-foreground">
                         <Users className="h-4 w-4" />
-                        <span>{profile.speaker_config}</span>
+                        <span>
+                          {profile.speaker_config_name ??
+                            speakerSummary?.name ??
+                            t('podcasts.notConfigured')}
+                        </span>
                         {speakerSummary?.voice_model ? (
                           <Badge variant="outline" className="text-xs">
                             {modelNameMap[speakerSummary.voice_model] ?? speakerSummary.voice_model}
diff --git a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
index a69bd20b..cabb5a1f 100644
--- a/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
+++ b/frontend/src/components/podcasts/GeneratePodcastDialog.tsx
@@ -401,6 +401,21 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
       return
     }
 
+    // Submit the stable speaker_profile record ID (the API resolves either
+    // an ID or a name), so a rename while this dialog is open can't break
+    // generation. speaker_config is null when the reference was orphaned by
+    // migration, and speaker_config_name is null when it no longer resolves
+    // (e.g. the speaker profile was deleted) - block both with a clear toast.
+    const speakerProfileRef = selectedEpisodeProfile.speaker_config
+    if (!speakerProfileRef || !selectedEpisodeProfile.speaker_config_name) {
+      toast({
+        title: t('podcasts.speakerProfileMissing'),
+        description: t('podcasts.speakerProfileMissingDesc'),
+        variant: 'destructive',
+      })
+      return
+    }
+
     setIsBuildingContext(true)
     try {
       const content = await buildContentFromSelections()
@@ -415,7 +430,7 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
 
       const payload: PodcastGenerationRequest = {
         episode_profile: selectedEpisodeProfile.name,
-        speaker_profile: selectedEpisodeProfile.speaker_config,
+        speaker_profile: speakerProfileRef,
         episode_name: episodeName.trim(),
         content,
         briefing_suffix: instructions.trim() ? instructions.trim() : undefined,
@@ -524,8 +539,14 @@ export function GeneratePodcastDialog({ open, onOpenChange }: GeneratePodcastDia
                     </Select>
                     {selectedEpisodeProfile && (
                       <p className="text-xs text-muted-foreground">
-                        {t('podcasts.usesSpeakerProfile')}{' '}
-                        <strong>{selectedEpisodeProfile.speaker_config}</strong>
+                        {selectedEpisodeProfile.speaker_config_name ? (
+                          <>
+                            {t('podcasts.usesSpeakerProfile')}{' '}
+                            <strong>{selectedEpisodeProfile.speaker_config_name}</strong>
+                          </>
+                        ) : (
+                          t('podcasts.speakerProfileMissingDesc')
+                        )}
                       </p>
                     )}
                   </div>
diff --git a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
index 80727dd3..0fb60487 100644
--- a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
@@ -72,13 +72,15 @@ export function EpisodeProfileFormDialog({
   const { data: languages = [] } = useLanguages()
 
   const getDefaults = useCallback((): EpisodeProfileFormValues => {
-    const firstSpeaker = speakerProfiles[0]?.name ?? ''
+    const firstSpeaker = speakerProfiles[0]?.id ?? ''
 
     if (initialData) {
       return {
         name: initialData.name,
         description: initialData.description ?? '',
-        speaker_config: initialData.speaker_config,
+        // speaker_config is a speaker_profile record ID; it can be null when
+        // the referenced profile was deleted - force the user to pick again.
+        speaker_config: initialData.speaker_config ?? '',
         outline_llm: initialData.outline_llm ?? '',
         transcript_llm: initialData.transcript_llm ?? '',
         language: initialData.language ?? null,
@@ -217,7 +219,7 @@ export function EpisodeProfileFormDialog({
                     </SelectTrigger>
                     <SelectContent title={t('podcasts.speakerProfile')}>
                       {speakerProfiles.map((profile) => (
-                        <SelectItem key={profile.id} value={profile.name}>
+                        <SelectItem key={profile.id} value={profile.id}>
                           {profile.name}
                         </SelectItem>
                       ))}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index d080e538..c07fe255 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -547,6 +547,8 @@ export const bnIN = {
     addContext: "কন্টেক্সট যোগ করুন",
     addContextDesc: "এপিসোডে অন্তর্ভুক্ত করতে কমপক্ষে একটি উৎস বা নোট নির্বাচন করুন।",
     generationFailed: "পডকাস্ট তৈরি ব্যর্থ",
+    speakerProfileMissing: "স্পিকার প্রোফাইল অনুপস্থিত",
+    speakerProfileMissingDesc: "এই এপিসোড প্রোফাইলটি এমন একটি স্পিকার প্রোফাইল উল্লেখ করে যা আর বিদ্যমান নেই। প্রোফাইলটি সম্পাদনা করুন এবং একটি স্পিকার প্রোফাইল নির্বাচন করুন।",
     speakerProfile: "স্পিকার প্রোফাইল",
     usesSpeakerProfile: "স্পিকার প্রোফাইল ব্যবহার করে",
     sources: "উৎসগুলি",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index c781e5c5..b463bcab 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -547,6 +547,8 @@ export const caES = {
     addContext: "Afegeix context",
     addContextDesc: "Selecciona almenys una font o nota per incloure a l'episodi.",
     generationFailed: "Ha fallat la generació del podcast",
+    speakerProfileMissing: "Falta el perfil de veus",
+    speakerProfileMissingDesc: "Aquest perfil d'episodi fa referència a un perfil de veus que ja no existeix. Edita el perfil i selecciona un perfil de veus.",
     speakerProfile: "Perfil del locutor",
     usesSpeakerProfile: "Usa el perfil del locutor",
     sources: "Fonts",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index f2705b7a..6823ac14 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -550,6 +550,8 @@ export const deDE = {
     addContext: "Kontext hinzufügen",
     addContextDesc: "Wähle mindestens eine Quelle oder Notiz aus, die in die Episode aufgenommen werden soll.",
     generationFailed: "Podcast-Erzeugung fehlgeschlagen",
+    speakerProfileMissing: "Sprecherprofil fehlt",
+    speakerProfileMissingDesc: "Dieses Episodenprofil verweist auf ein Sprecherprofil, das nicht mehr existiert. Bearbeiten Sie das Profil und wählen Sie ein Sprecherprofil aus.",
     speakerProfile: "Sprecherprofil",
     usesSpeakerProfile: "Verwendet Sprecherprofil",
     sources: "Quellen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 0c21340f..ba676549 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -545,6 +545,8 @@ export const enUS = {
     addContext: "Add context",
     addContextDesc: "Select at least one source or note to include in the episode.",
     generationFailed: "Podcast generation failed",
+    speakerProfileMissing: "Speaker profile missing",
+    speakerProfileMissingDesc: "This episode profile references a speaker profile that no longer exists. Edit the profile and select a speaker profile.",
     speakerProfile: "Speaker Profile",
     usesSpeakerProfile: "Uses speaker profile",
     sources: "Sources",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 30ef8151..ecface87 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -547,6 +547,8 @@ export const esES = {
     addContext: "Agregar contexto",
     addContextDesc: "Selecciona al menos una fuente o nota para incluir en el episodio.",
     generationFailed: "La generación del podcast falló",
+    speakerProfileMissing: "Falta el perfil de voces",
+    speakerProfileMissingDesc: "Este perfil de episodio hace referencia a un perfil de voces que ya no existe. Edita el perfil y selecciona un perfil de voces.",
     speakerProfile: "Perfil de locutor",
     usesSpeakerProfile: "Usa perfil de locutor",
     sources: "Fuentes",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 50cdad43..2d3601ff 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -547,6 +547,8 @@ export const frFR = {
     addContext: "Ajouter du contexte",
     addContextDesc: "Sélectionnez au moins une source ou une note à inclure dans l'épisode.",
     generationFailed: "Échec de la génération du podcast",
+    speakerProfileMissing: "Profil de voix manquant",
+    speakerProfileMissingDesc: "Ce profil d'épisode référence un profil de voix qui n'existe plus. Modifiez le profil et sélectionnez un profil de voix.",
     speakerProfile: "Profil de l'intervenant",
     usesSpeakerProfile: "Utilise le profil de l'intervenant",
     sources: "Sources",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 06d3d273..8268c818 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -547,6 +547,8 @@ export const itIT = {
     addContext: "Aggiungi contesto",
     addContextDesc: "Seleziona almeno una fonte o nota da includere nell'episodio.",
     generationFailed: "Generazione podcast fallita",
+    speakerProfileMissing: "Profilo voci mancante",
+    speakerProfileMissingDesc: "Questo profilo episodio fa riferimento a un profilo voci che non esiste più. Modifica il profilo e seleziona un profilo voci.",
     speakerProfile: "Profilo Speaker",
     usesSpeakerProfile: "Usa profilo speaker",
     sources: "Fonti",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 601ef529..da8b8f9e 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -547,6 +547,8 @@ export const jaJP = {
     addContext: "コンテキストを追加",
     addContextDesc: "エピソードに含めるソースまたはノートを少なくとも1つ選択してください。",
     generationFailed: "ポッドキャスト生成に失敗しました",
+    speakerProfileMissing: "スピーカープロファイルがありません",
+    speakerProfileMissingDesc: "このエピソードプロファイルは存在しないスピーカープロファイルを参照しています。プロファイルを編集してスピーカープロファイルを選択してください。",
     speakerProfile: "スピーカープロファイル",
     usesSpeakerProfile: "スピーカープロファイルを使用",
     sources: "ソース",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 8c911a2f..4223f2e9 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -547,6 +547,8 @@ export const plPL = {
     addContext: "Dodaj kontekst",
     addContextDesc: "Wybierz co najmniej jedno źródło lub notatkę do uwzględnienia w odcinku.",
     generationFailed: "Generowanie podcastu nie powiodło się",
+    speakerProfileMissing: "Brak profilu głosów",
+    speakerProfileMissingDesc: "Ten profil odcinka odwołuje się do profilu głosów, który już nie istnieje. Edytuj profil i wybierz profil głosów.",
     speakerProfile: "Profil mówcy",
     usesSpeakerProfile: "Używa profilu mówcy",
     sources: "Źródła",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ec84d928..f4c7da48 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -547,6 +547,8 @@ export const ptBR = {
     addContext: "Adicionar contexto",
     addContextDesc: "Selecione pelo menos uma fonte ou nota para incluir no episódio.",
     generationFailed: "Geração do podcast falhou",
+    speakerProfileMissing: "Perfil de vozes ausente",
+    speakerProfileMissingDesc: "Este perfil de episódio referencia um perfil de vozes que não existe mais. Edite o perfil e selecione um perfil de vozes.",
     speakerProfile: "Perfil do Locutor",
     usesSpeakerProfile: "Usa perfil de locutor",
     sources: "Fontes",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 9533ca25..4eb99e9a 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -547,6 +547,8 @@ export const ruRU = {
     addContext: "Добавить контекст",
     addContextDesc: "Выберите хотя бы один источник или заметку для включения в эпизод.",
     generationFailed: "Генерация подкаста не удалась",
+    speakerProfileMissing: "Профиль голосов отсутствует",
+    speakerProfileMissingDesc: "Этот профиль эпизода ссылается на профиль голосов, который больше не существует. Отредактируйте профиль и выберите профиль голосов.",
     speakerProfile: "Профиль говорящего",
     usesSpeakerProfile: "Использует профиль говорящего",
     sources: "Источники",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 143b5ec4..24a46c27 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -547,6 +547,8 @@ export const trTR = {
     addContext: "Bağlam ekle",
     addContextDesc: "Bölüme dahil etmek için en az bir kaynak veya not seçin.",
     generationFailed: "Podcast oluşturma başarısız",
+    speakerProfileMissing: "Konuşmacı profili eksik",
+    speakerProfileMissingDesc: "Bu bölüm profili artık mevcut olmayan bir konuşmacı profiline başvuruyor. Profili düzenleyin ve bir konuşmacı profili seçin.",
     speakerProfile: "Konuşmacı Profili",
     usesSpeakerProfile: "Konuşmacı profili kullanır",
     sources: "Kaynaklar",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index e6430a3d..fd6e6cbf 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -547,6 +547,8 @@ export const zhCN = {
     addContext: "添加上下文",
     addContextDesc: "至少选择一个来源或笔记包含在单集中。",
     generationFailed: "播客生成失败",
+    speakerProfileMissing: "缺少讲述人配置",
+    speakerProfileMissingDesc: "此单集配置引用的讲述人配置已不存在。请编辑该配置并选择一个讲述人配置。",
     speakerProfile: "主持人简介",
     usesSpeakerProfile: "使用主持人简介",
     sources: "来源",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index cb05fadf..9635ea0a 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -547,6 +547,8 @@ export const zhTW = {
     addContext: "新增上下文",
     addContextDesc: "至少選擇一個來源或筆記包含在單集中。",
     generationFailed: "播客生成失敗",
+    speakerProfileMissing: "缺少講者設定檔",
+    speakerProfileMissingDesc: "此單集設定檔引用的講者設定檔已不存在。請編輯設定檔並選擇一個講者設定檔。",
     speakerProfile: "主持人簡介",
     usesSpeakerProfile: "使用主持人簡介",
     sources: "來源",
diff --git a/frontend/src/lib/types/podcasts.ts b/frontend/src/lib/types/podcasts.ts
index df49279a..f8811ea7 100644
--- a/frontend/src/lib/types/podcasts.ts
+++ b/frontend/src/lib/types/podcasts.ts
@@ -12,7 +12,10 @@ export interface EpisodeProfile {
   id: string
   name: string
   description: string
-  speaker_config: string
+  /** speaker_profile record ID (null when the referenced profile no longer exists) */
+  speaker_config: string | null
+  /** Resolved speaker profile name, provided by the API for display */
+  speaker_config_name?: string | null
   outline_llm?: string | null
   transcript_llm?: string | null
   language?: string | null
@@ -66,6 +69,7 @@ export interface PodcastEpisode {
 
 export interface PodcastGenerationRequest {
   episode_profile: string
+  /** speaker_profile record ID (the API also accepts a profile name) */
   speaker_profile: string
   episode_name: string
   content?: string
@@ -130,14 +134,19 @@ export function speakerUsageMap(
   }
 
   const usage: Record<string, number> = {}
+  const nameById: Record<string, string> = {}
 
   for (const profile of speakerProfiles) {
     usage[profile.name] = 0
+    nameById[profile.id] = profile.name
   }
 
   for (const episodeProfile of episodeProfiles) {
+    // speaker_config references the speaker profile by record ID
     const key = episodeProfile.speaker_config
-    if (key in usage) {
+      ? nameById[episodeProfile.speaker_config]
+      : undefined
+    if (key !== undefined && key in usage) {
       usage[key] += 1
     }
   }
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index ab0cefb2..4551bcc1 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -133,6 +133,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/19.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/20.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -192,6 +195,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/19_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/20_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/20.surrealql b/open_notebook/database/migrations/20.surrealql
new file mode 100644
index 00000000..f9b417a3
--- /dev/null
+++ b/open_notebook/database/migrations/20.surrealql
@@ -0,0 +1,24 @@
+-- Migration 20: episode_profile.speaker_config references speaker_profile by record ID (#630)
+-- Previously speaker_config stored the speaker profile NAME (a plain string),
+-- so renaming a speaker profile silently broke every episode profile that
+-- referenced it. This converts the field to a record link.
+--
+-- Steps:
+-- 1. Widen the field type so both the legacy strings and the new record
+--    links are valid during the data conversion (the table is SCHEMAFULL).
+-- 2. Convert existing rows: look up the speaker_profile with a matching
+--    name and store its record ID. Orphan references (a name that no longer
+--    matches any speaker_profile) become NONE - the app treats a missing
+--    speaker as "needs setup" and the UI asks the user to pick one.
+-- 3. Tighten the type to option<record<speaker_profile>> so only
+--    speaker_profile record links (or NONE) can be stored from now on.
+--    Note: SurrealDB record links do NOT prevent dangling references -
+--    deleting a speaker profile still leaves the link in place, so the
+--    app must keep resolving speaker_config defensively (it treats an
+--    unresolvable reference the same as NONE: "needs setup").
+
+DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile TYPE option<string | record<speaker_profile>>;
+
+UPDATE episode_profile SET speaker_config = (SELECT VALUE id FROM ONLY speaker_profile WHERE name = $parent.speaker_config LIMIT 1) WHERE type::is::string(speaker_config);
+
+DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile TYPE option<record<speaker_profile>>;
diff --git a/open_notebook/database/migrations/20_down.surrealql b/open_notebook/database/migrations/20_down.surrealql
new file mode 100644
index 00000000..eec70a8f
--- /dev/null
+++ b/open_notebook/database/migrations/20_down.surrealql
@@ -0,0 +1,12 @@
+-- Migration 20 rollback: restore episode_profile.speaker_config to the speaker profile name
+-- Widen the type first (SCHEMAFULL table), convert record links back to the
+-- linked profile's name, then settle on option<string>. The original type was
+-- a required string, but rows whose reference was orphaned by the up
+-- migration (or whose linked speaker_profile was deleted since) have no name
+-- to restore, so the rollback type must tolerate NONE.
+
+DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile TYPE option<string | record<speaker_profile>>;
+
+UPDATE episode_profile SET speaker_config = speaker_config.name WHERE type::is::record(speaker_config);
+
+DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile TYPE option<string>;
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index 0a6ce8cb..c226e0ea 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -42,6 +42,7 @@ class EpisodeProfile(ObjectModel):
     table_name: ClassVar[str] = "episode_profile"
     nullable_fields: ClassVar[set[str]] = {
         "description",
+        "speaker_config",
         "outline_provider",
         "outline_model",
         "transcript_provider",
@@ -54,7 +55,14 @@ class EpisodeProfile(ObjectModel):
 
     name: str = Field(..., description="Unique profile name")
     description: Optional[str] = Field(None, description="Profile description")
-    speaker_config: str = Field(..., description="Reference to speaker profile name")
+    speaker_config: Optional[str] = Field(
+        None,
+        description=(
+            "speaker_profile record ID this profile uses. None when the "
+            "referenced speaker profile no longer exists (orphaned by "
+            "migration 20 or a later deletion)."
+        ),
+    )
 
     # Legacy fields (kept for migration, app ignores)
     outline_provider: Optional[str] = Field(
@@ -97,6 +105,8 @@ class EpisodeProfile(ObjectModel):
 
     def _prepare_save_data(self) -> dict:
         data = super()._prepare_save_data()
+        if data.get("speaker_config"):
+            data["speaker_config"] = ensure_record_id(data["speaker_config"])
         if data.get("outline_llm"):
             data["outline_llm"] = ensure_record_id(data["outline_llm"])
         if data.get("transcript_llm"):
@@ -209,6 +219,27 @@ class SpeakerProfile(ObjectModel):
             return cls(**result[0])
         return None
 
+    @classmethod
+    async def resolve(
+        cls, ref: Union[str, RecordID]
+    ) -> Optional["SpeakerProfile"]:
+        """Resolve a speaker profile by record ID or by unique name.
+
+        The API contract accepts speaker profiles by NAME (see
+        POST /api/podcasts/generate), while episode_profile.speaker_config
+        stores a record ID (migration 20). This resolves either form and
+        returns None when the reference doesn't match anything.
+        """
+        ref_str = str(ref)
+        if ref_str.startswith(f"{cls.table_name}:"):
+            result = await repo_query(
+                "SELECT * FROM $id", {"id": ensure_record_id(ref_str)}
+            )
+            if result:
+                return cls(**result[0])
+            return None
+        return await cls.get_by_name(ref_str)
+
 
 class PodcastEpisode(ObjectModel):
     """Enhanced PodcastEpisode with job tracking and metadata"""
diff --git a/tests/test_domain.py b/tests/test_domain.py
index e3ed403a..a1abaf0a 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -8,7 +8,7 @@ that can be tested without database mocking.
 import sys
 import tempfile
 from pathlib import Path
-from types import ModuleType
+from types import ModuleType, SimpleNamespace
 from unittest.mock import AsyncMock, patch
 
 import pytest
@@ -511,7 +511,13 @@ class TestPodcastService:
                 EpisodeProfile, "get_by_name", new=AsyncMock(return_value=object())
             ),
             patch.object(
-                SpeakerProfile, "get_by_name", new=AsyncMock(return_value=object())
+                SpeakerProfile,
+                "get_by_name",
+                new=AsyncMock(
+                    return_value=SimpleNamespace(
+                        id="speaker_profile:speakers", name="Speakers"
+                    )
+                ),
             ),
             patch.object(Notebook, "get", new=AsyncMock(return_value=notebook)),
             patch.object(Notebook, "get_sources", new=fake_get_sources),
diff --git a/tests/test_podcast_speaker_profile.py b/tests/test_podcast_speaker_profile.py
index ee99adb5..1c1075d0 100644
--- a/tests/test_podcast_speaker_profile.py
+++ b/tests/test_podcast_speaker_profile.py
@@ -1,12 +1,18 @@
 """
-Regression tests for issue #1044: generate_podcast_command must honor the
-speaker_profile parameter instead of always re-deriving the speaker from
-episode_profile.speaker_config.
+Regression tests for issues #1044 and #630.
 
-No database is available in tests: EpisodeProfile.get_by_name and
-SpeakerProfile.get_by_name are mocked. Each test lets the command fail at a
-deterministic early exit (speaker not found) so the assertion is purely about
-WHICH speaker profile name the command tried to resolve.
+#1044: generate_podcast_command must honor the speaker_profile parameter
+instead of always re-deriving the speaker from episode_profile.speaker_config.
+
+#630: episode_profile.speaker_config references the speaker profile by
+record ID (migration 20) instead of by name, so renaming a speaker profile
+no longer breaks episode profiles. The command resolves either form via
+SpeakerProfile.resolve, and the API boundary (PodcastService) resolves the
+user-facing name to a record ID before submitting the job.
+
+No database is available in tests: profile lookups are mocked. Command tests
+let the command fail at a deterministic early exit (speaker not found) so the
+assertion is purely about WHICH speaker profile reference was resolved.
 """
 
 from unittest.mock import AsyncMock, Mock, patch
@@ -20,7 +26,7 @@ from commands.podcast_commands import (
 from open_notebook.podcasts.models import EpisodeProfile, SpeakerProfile
 
 
-def make_episode_profile(speaker_config="profile-from-episode"):
+def make_episode_profile(speaker_config="speaker_profile:from_episode"):
     profile = Mock()
     profile.name = "Test Episode Profile"
     profile.speaker_config = speaker_config
@@ -41,8 +47,10 @@ class TestSpeakerProfileResolution:
     async def test_provided_speaker_profile_wins_over_episode_config(self):
         """An explicitly provided speaker_profile is resolved, not the
         episode profile's speaker_config."""
-        episode_profile = make_episode_profile(speaker_config="old-name")
-        speaker_get = AsyncMock(return_value=None)
+        episode_profile = make_episode_profile(
+            speaker_config="speaker_profile:old_speaker"
+        )
+        speaker_resolve = AsyncMock(return_value=None)
 
         with (
             patch.object(
@@ -50,21 +58,23 @@ class TestSpeakerProfileResolution:
                 "get_by_name",
                 new=AsyncMock(return_value=episode_profile),
             ),
-            patch.object(SpeakerProfile, "get_by_name", new=speaker_get),
+            patch.object(SpeakerProfile, "resolve", new=speaker_resolve),
         ):
             with pytest.raises(
                 ValueError, match="Speaker profile 'new-name' not found"
             ):
                 await generate_podcast_command(make_input(speaker_profile="new-name"))
 
-        speaker_get.assert_awaited_once_with("new-name")
+        speaker_resolve.assert_awaited_once_with("new-name")
 
     @pytest.mark.asyncio
     async def test_falls_back_to_episode_speaker_config_when_omitted(self):
         """Without an explicit speaker_profile, the episode profile's
-        speaker_config is used."""
-        episode_profile = make_episode_profile(speaker_config="old-name")
-        speaker_get = AsyncMock(return_value=None)
+        speaker_config (a record ID) is used."""
+        episode_profile = make_episode_profile(
+            speaker_config="speaker_profile:old_speaker"
+        )
+        speaker_resolve = AsyncMock(return_value=None)
 
         with (
             patch.object(
@@ -72,14 +82,38 @@ class TestSpeakerProfileResolution:
                 "get_by_name",
                 new=AsyncMock(return_value=episode_profile),
             ),
-            patch.object(SpeakerProfile, "get_by_name", new=speaker_get),
+            patch.object(SpeakerProfile, "resolve", new=speaker_resolve),
         ):
             with pytest.raises(
-                ValueError, match="Speaker profile 'old-name' not found"
+                ValueError,
+                match="references a speaker profile that no longer exists",
             ):
                 await generate_podcast_command(make_input(speaker_profile=None))
 
-        speaker_get.assert_awaited_once_with("old-name")
+        speaker_resolve.assert_awaited_once_with("speaker_profile:old_speaker")
+
+    @pytest.mark.asyncio
+    async def test_orphaned_speaker_config_fails_with_clear_error(self):
+        """An episode profile whose speaker reference was orphaned by
+        migration 20 (speaker_config is None) fails with a clear message
+        instead of trying to resolve None."""
+        episode_profile = make_episode_profile(speaker_config=None)
+        speaker_resolve = AsyncMock(return_value=None)
+
+        with (
+            patch.object(
+                EpisodeProfile,
+                "get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch.object(SpeakerProfile, "resolve", new=speaker_resolve),
+        ):
+            with pytest.raises(
+                ValueError, match="has no speaker profile configured"
+            ):
+                await generate_podcast_command(make_input(speaker_profile=None))
+
+        speaker_resolve.assert_not_awaited()
 
     def test_speaker_profile_is_optional_on_input_model(self):
         """The command contract allows omitting speaker_profile entirely."""
@@ -89,3 +123,271 @@ class TestSpeakerProfileResolution:
             content="test content",
         )
         assert input_data.speaker_profile is None
+
+
+class TestSpeakerProfileResolve:
+    """SpeakerProfile.resolve dispatches record IDs to a direct lookup and
+    anything else to the name lookup."""
+
+    @pytest.mark.asyncio
+    async def test_resolve_by_record_id_queries_by_id(self):
+        with patch(
+            "open_notebook.podcasts.models.repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            mock_query.return_value = [
+                {
+                    "id": "speaker_profile:abc",
+                    "name": "Tech Experts",
+                    "speakers": [
+                        {
+                            "name": "Alex",
+                            "voice_id": "v1",
+                            "backstory": "b",
+                            "personality": "p",
+                        }
+                    ],
+                }
+            ]
+            profile = await SpeakerProfile.resolve("speaker_profile:abc")
+
+        assert profile is not None
+        assert profile.name == "Tech Experts"
+        assert mock_query.await_args is not None
+        query, params = mock_query.await_args.args
+        assert "FROM $id" in query
+        assert str(params["id"]) == "speaker_profile:abc"
+
+    @pytest.mark.asyncio
+    async def test_resolve_by_record_id_returns_none_when_missing(self):
+        with patch(
+            "open_notebook.podcasts.models.repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            mock_query.return_value = []
+            profile = await SpeakerProfile.resolve("speaker_profile:gone")
+
+        assert profile is None
+
+    @pytest.mark.asyncio
+    async def test_resolve_by_name_delegates_to_get_by_name(self):
+        with patch.object(
+            SpeakerProfile, "get_by_name", new_callable=AsyncMock
+        ) as mock_get_by_name:
+            mock_get_by_name.return_value = None
+            profile = await SpeakerProfile.resolve("Tech Experts")
+
+        assert profile is None
+        mock_get_by_name.assert_awaited_once_with("Tech Experts")
+
+
+class TestApiBoundaryResolvesNameToRecordId:
+    """PodcastService.submit_generation_job accepts the speaker profile by
+    NAME (the public API contract) and submits the command with the resolved
+    record ID."""
+
+    @pytest.mark.asyncio
+    async def test_submit_passes_record_id_to_command(self):
+        from api.podcast_service import PodcastService
+
+        episode_profile = Mock()
+        episode_profile.name = "Deep Dive"
+        speaker_profile = Mock()
+        speaker_profile.id = "speaker_profile:abc"
+        speaker_profile.name = "Tech Experts"
+
+        with (
+            patch(
+                "api.podcast_service.EpisodeProfile.get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch(
+                "api.podcast_service.SpeakerProfile.resolve",
+                new=AsyncMock(return_value=speaker_profile),
+            ) as mock_resolve,
+            patch("api.podcast_service.submit_command") as mock_submit,
+        ):
+            mock_submit.return_value = "command:job1"
+            job_id = await PodcastService.submit_generation_job(
+                episode_profile_name="Deep Dive",
+                speaker_profile_name="Tech Experts",
+                episode_name="Episode 1",
+                content="some content",
+            )
+
+        assert job_id == "command:job1"
+        mock_resolve.assert_awaited_once_with("Tech Experts")
+        command_args = mock_submit.call_args.args[2]
+        assert command_args["speaker_profile"] == "speaker_profile:abc"
+
+
+class TestMigration20:
+    """Migration 20 converts speaker_config from name string to record link.
+
+    Migrations are hard-coded in AsyncMigrationManager, not discovered, so
+    these tests guard both the SQL content and the registration."""
+
+    def test_migration_converts_names_and_tightens_type(self):
+        from pathlib import Path
+
+        sql = (
+            Path(__file__).parent.parent
+            / "open_notebook"
+            / "database"
+            / "migrations"
+            / "20.surrealql"
+        ).read_text()
+        assert (
+            "UPDATE episode_profile SET speaker_config = "
+            "(SELECT VALUE id FROM ONLY speaker_profile "
+            "WHERE name = $parent.speaker_config LIMIT 1) "
+            "WHERE type::is::string(speaker_config)" in sql
+        )
+        assert (
+            "DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile "
+            "TYPE option<record<speaker_profile>>" in sql
+        )
+
+    def test_migration_down_restores_names(self):
+        from pathlib import Path
+
+        sql = (
+            Path(__file__).parent.parent
+            / "open_notebook"
+            / "database"
+            / "migrations"
+            / "20_down.surrealql"
+        ).read_text()
+        assert (
+            "UPDATE episode_profile SET speaker_config = speaker_config.name "
+            "WHERE type::is::record(speaker_config)" in sql
+        )
+        assert (
+            "DEFINE FIELD OVERWRITE speaker_config ON TABLE episode_profile "
+            "TYPE option<string>" in sql
+        )
+
+    def test_migration_is_registered_in_manager(self):
+        from open_notebook.database.async_migrate import AsyncMigrationManager
+
+        manager = AsyncMigrationManager()
+        assert len(manager.up_migrations) >= 20
+        assert len(manager.up_migrations) == len(manager.down_migrations)
+        assert "speaker_config" in manager.up_migrations[19].sql
+        assert "option<record<speaker_profile>>" in manager.up_migrations[19].sql
+        assert "speaker_config.name" in manager.down_migrations[19].sql
+
+
+class TestOrphanedProfileDoesNotPoisonConfig:
+    """One orphaned episode profile (speaker_config=None after migration 20)
+    must not fail podcast-creator's validation of the whole episode config,
+    and the profile dicts handed to podcast-creator must carry speaker NAMES
+    (its contract), not record IDs."""
+
+    @pytest.mark.asyncio
+    async def test_orphan_dropped_and_ids_rewritten_to_names(self, tmp_path):
+        episode_profile = EpisodeProfile(
+            id="episode_profile:ep1",
+            name="Test Episode Profile",
+            speaker_config="speaker_profile:sp1",
+            outline_llm="model:llm",
+            transcript_llm="model:llm",
+            default_briefing="brief",
+            num_segments=3,
+        )
+        speaker_profile = SpeakerProfile(
+            id="speaker_profile:sp1",
+            name="Tech Experts",
+            voice_model="model:tts",
+            speakers=[
+                {
+                    "name": "Alex",
+                    "voice_id": "v1",
+                    "backstory": "b",
+                    "personality": "p",
+                }
+            ],
+        )
+
+        episode_rows = [
+            {
+                "id": "episode_profile:ep1",
+                "name": "Test Episode Profile",
+                "speaker_config": "speaker_profile:sp1",
+                "default_briefing": "brief",
+                "num_segments": 3,
+            },
+            {
+                # Orphaned by migration 20: referenced speaker no longer exists
+                "id": "episode_profile:ep2",
+                "name": "Orphaned Profile",
+                "speaker_config": None,
+                "default_briefing": "brief",
+                "num_segments": 3,
+            },
+        ]
+        speaker_rows = [{"id": "speaker_profile:sp1", "name": "Tech Experts"}]
+
+        async def fake_repo_query(query, *args, **kwargs):
+            if "episode_profile" in query:
+                return episode_rows
+            return speaker_rows
+
+        configure_calls = {}
+
+        def fake_configure(key, value):
+            configure_calls[key] = value
+
+        resolved: tuple = ("openai", "model-name", {})
+
+        with (
+            patch.object(
+                EpisodeProfile,
+                "get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch.object(
+                SpeakerProfile,
+                "resolve",
+                new=AsyncMock(return_value=speaker_profile),
+            ),
+            patch(
+                "open_notebook.podcasts.models._resolve_model_config",
+                new=AsyncMock(return_value=resolved),
+            ),
+            patch(
+                "commands.podcast_commands._resolve_model_config",
+                new=AsyncMock(return_value=resolved),
+            ),
+            patch(
+                "commands.podcast_commands.repo_query", new=fake_repo_query
+            ),
+            patch("commands.podcast_commands.configure", new=fake_configure),
+            patch(
+                "commands.podcast_commands.create_podcast",
+                new=AsyncMock(
+                    return_value={
+                        "final_output_file_path": str(tmp_path / "out.mp3"),
+                        "transcript": {},
+                        "outline": {},
+                    }
+                ),
+            ),
+            patch(
+                "commands.podcast_commands.build_episode_output_dir",
+                new=lambda data_folder: ("ep-dir", tmp_path / "ep-dir"),
+            ),
+            patch(
+                "open_notebook.podcasts.models.PodcastEpisode.save",
+                new=AsyncMock(),
+            ),
+        ):
+            result = await generate_podcast_command(make_input())
+
+        assert result.success is True
+        episode_config = configure_calls["episode_config"]["profiles"]
+        # Orphaned profile removed instead of poisoning validation
+        assert "Orphaned Profile" not in episode_config
+        # Record ID rewritten to the speaker profile NAME for podcast-creator
+        assert (
+            episode_config["Test Episode Profile"]["speaker_config"]
+            == "Tech Experts"
+        )

From d9f6a86c1a5a7375367a7ee483bc030db879bb11 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 14:00:34 -0300
Subject: [PATCH 204/345] refactor(podcasts): store audio paths relative to
 PODCASTS_FOLDER (#1111)

* refactor(podcasts): store audio paths relative to PODCASTS_FOLDER

audio_file previously stored the absolute path returned by
podcast-creator (sometimes as a file:// URI), which kept path traversal
representable in the DB and broke playback when DATA_FOLDER moved.

- New single choke point open_notebook/podcasts/audio_paths.py:
  to_relative_audio_path() validates at write time (the DB can never
  hold an absolute or root-escaping value) and
  resolve_contained_audio_path() joins + resolves + contains at read
  time, replacing the per-router guards from #1018. Absolute/file://
  legacy values are treated as invalid (same 403/404 as before).
- Generation command stores the relative form; in-band "ERROR: ..."
  values from podcast-creator now fail the job with the real error.
- build_episode_output_dir() builds from PODCASTS_FOLDER so the write
  root and the validation root cannot drift.
- Migration 21 converts legacy rows under the known roots (plain
  file:/// URIs, /app/data/podcasts/, /data/podcasts/,
  ./data/podcasts/, data/podcasts/) via a single-strip IF/ELSE chain;
  rows under other roots stay untouched by design.

Closes #1030

* test: use the tolerant migration-count assertion pattern

Per review: assert >= 21 with up/down parity and a distinctive-SQL check on
index 20, matching the convention from the migration-19/20 tests, so the next
migration doesn't trip an unrelated test file.
---
 CHANGELOG.md                                  |   1 +
 api/routers/podcasts.py                       |  95 +++-----
 commands/podcast_commands.py                  |  43 +++-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/21.surrealql          |  29 +++
 .../database/migrations/21_down.surrealql     |  10 +
 open_notebook/podcasts/audio_paths.py         |  87 ++++++++
 open_notebook/podcasts/models.py              |   8 +-
 tests/test_podcast_audio_containment.py       | 205 ++++++++++++------
 tests/test_podcast_audio_paths.py             | 146 +++++++++++++
 tests/test_podcast_path.py                    |  24 +-
 tests/test_podcast_speaker_profile.py         |  15 +-
 12 files changed, 522 insertions(+), 147 deletions(-)
 create mode 100644 open_notebook/database/migrations/21.surrealql
 create mode 100644 open_notebook/database/migrations/21_down.surrealql
 create mode 100644 open_notebook/podcasts/audio_paths.py
 create mode 100644 tests/test_podcast_audio_paths.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b57c6db9..687655be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Podcast episode audio paths are now stored relative to the podcasts folder (`episodes/<uuid>/audio/<name>.mp3`) instead of as absolute filesystem paths, validated at write time so the database can never hold an absolute or root-escaping value, and resolved + containment-checked through a single shared helper instead of per-endpoint guards. Migration 21 converts existing rows written under the known roots (plain `file:///` URIs, `/app/data/podcasts/`, `/data/podcasts/`, `./data/podcasts/`, `data/podcasts/`); previously generated episodes now survive a `DATA_FOLDER` relocation. Rows under any other root (e.g. a source checkout at a custom absolute path) or in exotic legacy forms (percent-encoded or host-qualified `file://` URIs) are left untouched and treated as legacy-invalid — the same 403/audio-unavailable handling out-of-root rows already had; regenerate the episode to restore playback. Podcast jobs whose audio combination fails (podcast-creator reports an in-band `ERROR:` value) now fail with the real ffmpeg/clip error instead of reporting success for an episode with no playable audio (#1030)
 - The source detail view (dialog and full page) now fetches through the shared `useSource` React Query hook instead of a hand-rolled fetch, matching the insight/note dialogs: caching and the never-retry-404 policy come from React Query, title edits and deletes go through the shared mutation hooks (so source lists refresh and a deleted source can't be served from the cache), and the `key={sourceId}` remount workaround on the parents was removed — the component resets its own per-source UI state (#1106)
 - The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
 
diff --git a/api/routers/podcasts.py b/api/routers/podcasts.py
index 03b7775c..3a033589 100644
--- a/api/routers/podcasts.py
+++ b/api/routers/podcasts.py
@@ -1,7 +1,4 @@
-import os
-from pathlib import Path
 from typing import List, Optional
-from urllib.parse import unquote, urlparse
 
 from fastapi import APIRouter, HTTPException
 from fastapi.responses import FileResponse
@@ -13,13 +10,35 @@ from api.podcast_service import (
     PodcastGenerationResponse,
     PodcastService,
 )
-from open_notebook.config import PODCASTS_FOLDER
 from open_notebook.exceptions import OpenNotebookError
+from open_notebook.podcasts.audio_paths import resolve_contained_audio_path
 from open_notebook.podcasts.models import PodcastEpisode
 
 router = APIRouter()
 
 
+def _delete_episode_audio(episode: PodcastEpisode, episode_id: str) -> None:
+    """Best-effort unlink of an episode's audio file, refusing invalid paths.
+
+    Shared by the delete and retry endpoints. Legacy/escaping audio_file
+    values (resolve_contained_audio_path -> None) are logged and skipped.
+    """
+    if not episode.audio_file:
+        return
+    audio_path = resolve_contained_audio_path(episode.audio_file)
+    if audio_path is None:
+        logger.warning(
+            f"Refusing to delete audio file outside podcasts directory "
+            f"for episode {episode_id}: {episode.audio_file}"
+        )
+    elif audio_path.exists():
+        try:
+            audio_path.unlink()
+            logger.info(f"Deleted audio file: {audio_path}")
+        except Exception as e:
+            logger.warning(f"Failed to delete audio file {audio_path}: {e}")
+
+
 class PodcastEpisodeResponse(BaseModel):
     id: str
     name: str
@@ -35,28 +54,6 @@ class PodcastEpisodeResponse(BaseModel):
     error_message: Optional[str] = None
 
 
-def _resolve_audio_path(audio_file: str) -> Path:
-    if audio_file.startswith("file://"):
-        parsed = urlparse(audio_file)
-        return Path(unquote(parsed.path))
-    return Path(audio_file)
-
-
-def _is_audio_path_contained(audio_path: Path) -> bool:
-    """Verify the resolved audio path stays within the podcasts output root.
-
-    Defense in depth: audio_file is only ever set server-side today from a
-    UUID-named directory under PODCASTS_FOLDER (build_episode_output_dir), so
-    this can't currently be tripped - but any endpoint that streams or
-    deletes the file should still refuse to follow it outside that root, in
-    case a future code path (e.g. importing external audio) sets it to
-    something else.
-    """
-    safe_root = Path(os.path.realpath(PODCASTS_FOLDER))
-    resolved = Path(os.path.realpath(audio_path))
-    return resolved.is_relative_to(safe_root)
-
-
 @router.post("/podcasts/generate", response_model=PodcastGenerationResponse)
 async def generate_podcast(request: PodcastGenerationRequest):
     """
@@ -148,10 +145,9 @@ async def list_podcast_episodes():
                 job_status = "completed"
 
             audio_url = None
-            if episode.audio_file:
-                audio_path = _resolve_audio_path(episode.audio_file)
-                if _is_audio_path_contained(audio_path) and audio_path.exists():
-                    audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
+            audio_path = resolve_contained_audio_path(episode.audio_file)
+            if audio_path is not None and audio_path.exists():
+                audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
 
             response_episodes.append(
                 PodcastEpisodeResponse(
@@ -204,10 +200,9 @@ async def get_podcast_episode(episode_id: str):
             job_status = "completed" if episode.audio_file else "unknown"
 
         audio_url = None
-        if episode.audio_file:
-            audio_path = _resolve_audio_path(episode.audio_file)
-            if _is_audio_path_contained(audio_path) and audio_path.exists():
-                audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
+        audio_path = resolve_contained_audio_path(episode.audio_file)
+        if audio_path is not None and audio_path.exists():
+            audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
 
         return PodcastEpisodeResponse(
             id=str(episode.id),
@@ -249,10 +244,11 @@ async def stream_podcast_episode_audio(episode_id: str):
     if not episode.audio_file:
         raise HTTPException(status_code=404, detail="Episode has no audio file")
 
-    audio_path = _resolve_audio_path(episode.audio_file)
-    if not _is_audio_path_contained(audio_path):
+    audio_path = resolve_contained_audio_path(episode.audio_file)
+    if audio_path is None:
         logger.warning(
-            f"Blocked audio access outside podcasts directory for episode {episode_id}: {audio_path}"
+            f"Blocked audio access outside podcasts directory for episode "
+            f"{episode_id}: {episode.audio_file}"
         )
         raise HTTPException(status_code=403, detail="Access to file denied")
 
@@ -293,17 +289,7 @@ async def retry_podcast_episode(episode_id: str):
             )
 
         # Delete audio file if any
-        if episode.audio_file:
-            audio_path = _resolve_audio_path(episode.audio_file)
-            if not _is_audio_path_contained(audio_path):
-                logger.warning(
-                    f"Refusing to delete audio file outside podcasts directory for episode {episode_id}: {audio_path}"
-                )
-            elif audio_path.exists():
-                try:
-                    audio_path.unlink()
-                except Exception as e:
-                    logger.warning(f"Failed to delete audio file {audio_path}: {e}")
+        _delete_episode_audio(episode, episode_id)
 
         # Delete the failed episode
         await episode.delete()
@@ -337,18 +323,7 @@ async def delete_podcast_episode(episode_id: str):
         episode = await PodcastService.get_episode(episode_id)
 
         # Delete the physical audio file if it exists
-        if episode.audio_file:
-            audio_path = _resolve_audio_path(episode.audio_file)
-            if not _is_audio_path_contained(audio_path):
-                logger.warning(
-                    f"Refusing to delete audio file outside podcasts directory for episode {episode_id}: {audio_path}"
-                )
-            elif audio_path.exists():
-                try:
-                    audio_path.unlink()
-                    logger.info(f"Deleted audio file: {audio_path}")
-                except Exception as e:
-                    logger.warning(f"Failed to delete audio file {audio_path}: {e}")
+        _delete_episode_audio(episode, episode_id)
 
         # Delete the episode from the database
         await episode.delete()
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 228c155c..95dd3b93 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -6,8 +6,9 @@ from typing import Optional
 from loguru import logger
 from surreal_commands import CommandInput, CommandOutput, command
 
-from open_notebook.config import DATA_FOLDER
+from open_notebook.config import PODCASTS_FOLDER
 from open_notebook.database.repository import ensure_record_id, repo_query
+from open_notebook.podcasts.audio_paths import to_relative_audio_path
 from open_notebook.podcasts.models import (
     EpisodeProfile,
     PodcastEpisode,
@@ -23,17 +24,20 @@ except ImportError as e:
     raise ValueError("podcast_creator library not available")
 
 
-def build_episode_output_dir(data_folder: str) -> tuple[str, Path]:
+def build_episode_output_dir(podcasts_folder: str = PODCASTS_FOLDER) -> tuple[str, Path]:
     """Build a filesystem-safe output directory path for a podcast episode.
 
     Uses a UUID as the directory name so the path is safe regardless of
     what the user typed as episode name (spaces, special chars, etc.).
 
+    Builds under PODCASTS_FOLDER — the same root to_relative_audio_path()
+    validates against at write time (#1030) — so the two can't drift apart.
+
     Returns:
         A tuple of (episode_dir_name, output_dir_path).
     """
     episode_dir_name = str(uuid.uuid4())
-    output_dir = Path(f"{data_folder}/podcasts/episodes/{episode_dir_name}")
+    output_dir = Path(podcasts_folder) / "episodes" / episode_dir_name
     return episode_dir_name, output_dir
 
 
@@ -286,7 +290,7 @@ async def generate_podcast_command(
         logger.info(f"Generated briefing (length: {len(briefing)} chars)")
 
         # 7. Create output directory using UUID for filesystem-safe paths
-        episode_dir_name, output_dir = build_episode_output_dir(DATA_FOLDER)
+        episode_dir_name, output_dir = build_episode_output_dir()
         output_dir.mkdir(parents=True, exist_ok=True)
 
         logger.info(f"Created output directory: {output_dir}")
@@ -303,15 +307,38 @@ async def generate_podcast_command(
             episode_profile=episode_profile.name,
         )
 
-        episode.audio_file = (
-            str(result.get("final_output_file_path")) if result else None
+        # podcast-creator reports audio-combination failures IN-BAND: on
+        # ffmpeg/clip errors combine_audio_files() returns an "ERROR: ..."
+        # string in final_output_file_path instead of a path. Detect it
+        # before path conversion so the real error surfaces (below, after
+        # the transcript/outline are persisted) instead of a misleading
+        # "outside the podcasts folder" ValueError.
+        raw_audio_path = result.get("final_output_file_path") if result else None
+        audio_error: Optional[str] = None
+        if raw_audio_path is not None and str(raw_audio_path).startswith("ERROR:"):
+            audio_error = str(raw_audio_path)
+            raw_audio_path = None
+
+        # Store the audio path RELATIVE to PODCASTS_FOLDER (#1030). The
+        # validation inside to_relative_audio_path guarantees the DB never
+        # holds an absolute or root-escaping value; a violation raises
+        # ValueError, which marks the job permanently failed (no retry).
+        audio_file_rel = (
+            to_relative_audio_path(raw_audio_path) if raw_audio_path else None
         )
+        episode.audio_file = audio_file_rel
         episode.transcript = {
             "transcript": full_model_dump(result["transcript"]) if result else None
         }
         episode.outline = full_model_dump(result["outline"]) if result else None
         await episode.save()
 
+        if audio_error:
+            # Transcript/outline are saved above; fail the job with the real
+            # audio-combination error instead of reporting a silent success
+            # for an episode with no playable audio.
+            raise RuntimeError(f"Podcast audio generation failed: {audio_error}")
+
         processing_time = time.time() - start_time
         logger.info(
             f"Successfully generated podcast episode: {episode.id} in {processing_time:.2f}s"
@@ -320,9 +347,7 @@ async def generate_podcast_command(
         return PodcastGenerationOutput(
             success=True,
             episode_id=str(episode.id),
-            audio_file_path=str(result.get("final_output_file_path"))
-            if result
-            else None,
+            audio_file_path=audio_file_rel,
             transcript={"transcript": full_model_dump(result["transcript"])}
             if result.get("transcript")
             else None,
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 4551bcc1..c4ac8735 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -136,6 +136,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/20.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/21.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -198,6 +201,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/20_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/21_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/21.surrealql b/open_notebook/database/migrations/21.surrealql
new file mode 100644
index 00000000..13d5df4b
--- /dev/null
+++ b/open_notebook/database/migrations/21.surrealql
@@ -0,0 +1,29 @@
+-- Migration 21: store episode.audio_file relative to PODCASTS_FOLDER (#1030)
+-- audio_file used to hold the absolute path returned by podcast-creator
+-- (str(Path.resolve())), sometimes with a legacy file:// prefix. From this
+-- migration on the app stores the path RELATIVE to PODCASTS_FOLDER
+-- (e.g. "episodes/<uuid>/audio/<uuid>.mp3") and resolves + contains it at a
+-- single choke point (open_notebook/podcasts/audio_paths.py).
+--
+-- Conversion is by known-prefix stripping only, in two steps:
+--   1. Normalize plain "file:///" URIs to absolute paths. Only URIs without
+--      percent-encoding are handled (SurrealQL cannot URL-decode) and only
+--      the empty-host "file:///" form (a "file://host/" URI is not a local
+--      path); anything else keeps its scheme and stays legacy-invalid.
+--   2. Strip EXACTLY ONE known root prefix per row (a single IF/ELSE chain,
+--      so a remainder that happens to start with another prefix is never
+--      stripped twice):
+--        "/app/data/podcasts/"  the shipped Docker layout (WORKDIR /app,
+--                               DATA_FOLDER "./data" resolved at write time)
+--        "/data/podcasts/"      older Docker layout with data mounted at /data
+--        "./data/podcasts/"     CWD-relative forms written by source
+--        "data/podcasts/"       checkouts running from the repo root
+--
+-- Rows under any OTHER root (e.g. a source checkout at a custom absolute
+-- path) stay untouched by design (settled in #1030): the resolve helper
+-- treats any non-relative value as legacy-invalid, preserving the 403/404
+-- behavior #1018's guards give those rows today. No nulling, no flags.
+
+UPDATE episode SET audio_file = string::slice(audio_file, 7) WHERE type::is::string(audio_file) AND string::starts_with(audio_file, "file:///") AND !string::contains(audio_file, "%");
+
+UPDATE episode SET audio_file = IF string::starts_with(audio_file, "/app/data/podcasts/") { string::slice(audio_file, 19) } ELSE IF string::starts_with(audio_file, "/data/podcasts/") { string::slice(audio_file, 15) } ELSE IF string::starts_with(audio_file, "./data/podcasts/") { string::slice(audio_file, 16) } ELSE IF string::starts_with(audio_file, "data/podcasts/") { string::slice(audio_file, 14) } ELSE { audio_file } WHERE type::is::string(audio_file);
diff --git a/open_notebook/database/migrations/21_down.surrealql b/open_notebook/database/migrations/21_down.surrealql
new file mode 100644
index 00000000..d709b313
--- /dev/null
+++ b/open_notebook/database/migrations/21_down.surrealql
@@ -0,0 +1,10 @@
+-- Migration 21 rollback: restore absolute audio_file paths (best effort).
+-- The up migration collapsed several historical prefixes (file://,
+-- /app/data/podcasts/, /data/podcasts/, ./data/podcasts/, data/podcasts/)
+-- into one relative form, so the original spelling of each row is not
+-- recoverable. Rows are restored to the shipped Docker layout, which is
+-- what pre-1030 code resolved them to in the standard deployment. Rows the
+-- up migration left untouched (unknown roots) are already absolute and are
+-- skipped.
+
+UPDATE episode SET audio_file = string::concat("/app/data/podcasts/", audio_file) WHERE type::is::string(audio_file) AND audio_file != "" AND !string::starts_with(audio_file, "/") AND !string::starts_with(audio_file, "file://");
diff --git a/open_notebook/podcasts/audio_paths.py b/open_notebook/podcasts/audio_paths.py
new file mode 100644
index 00000000..291f2fe9
--- /dev/null
+++ b/open_notebook/podcasts/audio_paths.py
@@ -0,0 +1,87 @@
+"""Single choke point for podcast episode audio file paths (#1030).
+
+``PodcastEpisode.audio_file`` stores a path RELATIVE to ``PODCASTS_FOLDER``
+(e.g. ``episodes/<uuid>/audio/<uuid>.mp3``). Two helpers enforce that
+contract at the only two places paths cross the DB boundary:
+
+- ``to_relative_audio_path()`` — write side (podcast generation command):
+  converts the generated file path to the relative storage form and refuses
+  to produce a value outside the podcasts root, so the DB never holds an
+  absolute or escaping path.
+- ``resolve_contained_audio_path()`` — read side (every API consumption
+  point: stream, list/get, delete, retry): joins the stored value with
+  ``PODCASTS_FOLDER``, resolves symlinks/``..`` and verifies containment.
+  Any absolute, ``file://`` or escaping value is treated as legacy-invalid
+  and returns ``None`` (callers keep today's 403/404 behavior from #1018).
+
+Storing relative paths makes path traversal unrepresentable for new rows
+and lets previously generated episodes survive a ``DATA_FOLDER`` move.
+Migration 21 converts pre-existing rows written under the known roots.
+"""
+
+import os
+from pathlib import Path
+from typing import Optional, Union
+from urllib.parse import unquote, urlparse
+
+from open_notebook.config import PODCASTS_FOLDER
+
+
+def podcasts_root() -> Path:
+    """Real (symlink-resolved, absolute) path of the podcasts output root.
+
+    Computed on every call rather than at import time so tests can
+    monkeypatch ``PODCASTS_FOLDER`` on this module.
+    """
+    return Path(os.path.realpath(PODCASTS_FOLDER))
+
+
+def to_relative_audio_path(audio_path: Union[str, Path]) -> str:
+    """Convert a generated audio file path to the DB storage form.
+
+    Accepts the absolute (or CWD-relative) path produced by podcast-creator,
+    including the legacy ``file://`` URI form, and returns it relative to
+    ``PODCASTS_FOLDER`` as a POSIX-style string.
+
+    Raises:
+        ValueError: if the path resolves outside the podcasts root — the DB
+            must never hold an absolute or escaping value. ValueError also
+            marks the generation job as permanently failed (no retry).
+    """
+    raw = str(audio_path)
+    if raw.startswith("file://"):
+        raw = unquote(urlparse(raw).path)
+    resolved = Path(os.path.realpath(raw))
+    root = podcasts_root()
+    if resolved == root or not resolved.is_relative_to(root):
+        raise ValueError(
+            f"Generated audio file path is outside the podcasts folder: {audio_path}"
+        )
+    return resolved.relative_to(root).as_posix()
+
+
+def resolve_contained_audio_path(audio_file: Optional[str]) -> Optional[Path]:
+    """Resolve a stored ``audio_file`` value to a real filesystem path.
+
+    Joins the stored relative path with ``PODCASTS_FOLDER``, resolves
+    symlinks and ``..`` components, and verifies the result stays inside the
+    podcasts root.
+
+    Returns ``None`` for anything that must not be followed:
+    - empty/None values
+    - absolute paths and ``file://`` URIs (legacy rows migration 21 could
+      not convert — exactly the out-of-root cases #1018's guards reject)
+    - relative paths that escape the root (``..`` or symlink traversal)
+    """
+    if not audio_file:
+        return None
+    if "://" in audio_file:
+        return None
+    candidate = Path(audio_file)
+    if candidate.is_absolute():
+        return None
+    root = podcasts_root()
+    resolved = Path(os.path.realpath(root / candidate))
+    if resolved == root or not resolved.is_relative_to(root):
+        return None
+    return resolved
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index c226e0ea..2379f66f 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -256,7 +256,13 @@ class PodcastEpisode(ObjectModel):
     briefing: str = Field(..., description="Full briefing used for generation")
     content: str = Field(..., description="Source content")
     audio_file: Optional[str] = Field(
-        default=None, description="Path to generated audio file"
+        default=None,
+        description=(
+            "Path to the generated audio file, relative to PODCASTS_FOLDER "
+            "(see open_notebook/podcasts/audio_paths.py). Absolute values "
+            "are legacy rows migration 21 could not convert and are treated "
+            "as invalid by the API."
+        ),
     )
     transcript: Optional[Dict[str, Any]] = Field(
         default_factory=dict, description="Generated transcript"
diff --git a/tests/test_podcast_audio_containment.py b/tests/test_podcast_audio_containment.py
index b3331839..50fbf8ea 100644
--- a/tests/test_podcast_audio_containment.py
+++ b/tests/test_podcast_audio_containment.py
@@ -1,23 +1,22 @@
 """
-Tests for the podcast audio path containment check (api/routers/podcasts.py).
+Tests for the podcast audio path choke point (#1030).
 
-`_resolve_audio_path()` turns `episode.audio_file` into a filesystem Path;
-`_is_audio_path_contained()` verifies that path stays under PODCASTS_FOLDER
-before any endpoint streams or deletes it. audio_file is only ever set
-server-side today (from a UUID-named directory under PODCASTS_FOLDER), so
-these are defense-in-depth checks for a currently-unreachable path - these
-tests construct an out-of-root audio_file directly to exercise that defense.
+`PodcastEpisode.audio_file` stores a path relative to PODCASTS_FOLDER;
+`resolve_contained_audio_path()` (open_notebook/podcasts/audio_paths.py) is
+the single helper every consumption point (stream, list, get, delete, retry)
+uses to join + resolve + contain it. Absolute paths and `file://` URIs are
+legacy rows migration 21 could not convert - they are treated as invalid,
+preserving the 403/404 behavior #1018's guards gave them.
 """
 
-import os
 from pathlib import Path
 from unittest.mock import AsyncMock, patch
 
 import pytest
 from fastapi.testclient import TestClient
 
-from api.routers.podcasts import _is_audio_path_contained, _resolve_audio_path
 from open_notebook.config import PODCASTS_FOLDER
+from open_notebook.podcasts.audio_paths import resolve_contained_audio_path
 from open_notebook.podcasts.models import PodcastEpisode
 
 
@@ -43,72 +42,104 @@ def client():
     return TestClient(app)
 
 
-class TestIsAudioPathContained:
-    def test_path_inside_podcasts_folder_is_contained(self, tmp_path, monkeypatch):
+class TestResolveContainedAudioPath:
+    def test_relative_path_inside_root_resolves(self, tmp_path, monkeypatch):
         monkeypatch.setattr(
-            "api.routers.podcasts.PODCASTS_FOLDER", str(tmp_path)
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
         )
         episode_dir = tmp_path / "episodes" / "some-uuid"
         episode_dir.mkdir(parents=True)
-        audio_path = episode_dir / "final.mp3"
-        audio_path.write_bytes(b"fake audio")
+        (episode_dir / "final.mp3").write_bytes(b"fake audio")
 
-        assert _is_audio_path_contained(audio_path) is True
+        resolved = resolve_contained_audio_path("episodes/some-uuid/final.mp3")
 
-    def test_sibling_directory_with_matching_prefix_is_not_contained(
-        self, tmp_path, monkeypatch
-    ):
-        """Regression guard for the startswith-without-separator bug (finding
-        L14): a sibling dir that merely *starts with* the same prefix string
-        must NOT be treated as contained."""
-        real_root = tmp_path / "podcasts"
-        real_root.mkdir()
-        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(real_root))
+        assert resolved == (episode_dir / "final.mp3").resolve()
 
-        sibling = tmp_path / "podcasts_evil"
-        sibling.mkdir()
-        evil_file = sibling / "secret.mp3"
-        evil_file.write_bytes(b"not yours")
-
-        assert _is_audio_path_contained(evil_file) is False
-
-    def test_path_traversal_outside_root_is_not_contained(self, tmp_path, monkeypatch):
+    def test_dotdot_escape_is_rejected(self, tmp_path, monkeypatch):
         root = tmp_path / "podcasts"
         root.mkdir()
-        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(root))
-
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(root)
+        )
         outside = tmp_path / "outside.mp3"
         outside.write_bytes(b"etc passwd style file")
-        traversal_path = Path(str(root)) / ".." / "outside.mp3"
 
-        assert _is_audio_path_contained(traversal_path) is False
+        assert resolve_contained_audio_path("../outside.mp3") is None
+        assert resolve_contained_audio_path("episodes/../../outside.mp3") is None
 
-    def test_root_itself_is_contained(self, tmp_path, monkeypatch):
-        monkeypatch.setattr("api.routers.podcasts.PODCASTS_FOLDER", str(tmp_path))
-        assert _is_audio_path_contained(tmp_path) is True
+    def test_absolute_path_is_rejected_even_when_inside_root(
+        self, tmp_path, monkeypatch
+    ):
+        """Legacy rows the migration could not convert stay invalid - the DB
+        contract after #1030 is relative-only."""
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        inside = tmp_path / "episodes" / "u" / "a.mp3"
+        inside.parent.mkdir(parents=True)
+        inside.write_bytes(b"audio")
+
+        assert resolve_contained_audio_path(str(inside)) is None
+        assert resolve_contained_audio_path("/etc/passwd") is None
+
+    def test_file_uri_is_rejected(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        assert (
+            resolve_contained_audio_path("file:///data/podcasts/episodes/x/a.mp3")
+            is None
+        )
+
+    def test_sibling_directory_with_matching_prefix_is_rejected(
+        self, tmp_path, monkeypatch
+    ):
+        """Regression guard for the startswith-without-separator bug: a
+        sibling dir that merely *starts with* the root's name must not be
+        reachable."""
+        real_root = tmp_path / "podcasts"
+        real_root.mkdir()
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(real_root)
+        )
+        sibling = tmp_path / "podcasts_evil"
+        sibling.mkdir()
+        (sibling / "secret.mp3").write_bytes(b"not yours")
+
+        assert resolve_contained_audio_path("../podcasts_evil/secret.mp3") is None
+
+    def test_symlink_escape_is_rejected(self, tmp_path, monkeypatch):
+        root = tmp_path / "podcasts"
+        root.mkdir()
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(root)
+        )
+        outside = tmp_path / "outside.mp3"
+        outside.write_bytes(b"secret")
+        (root / "link.mp3").symlink_to(outside)
+
+        assert resolve_contained_audio_path("link.mp3") is None
+
+    def test_empty_and_none_are_rejected(self):
+        assert resolve_contained_audio_path(None) is None
+        assert resolve_contained_audio_path("") is None
+
+    def test_root_itself_is_rejected(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        assert resolve_contained_audio_path(".") is None
 
     def test_real_podcasts_folder_resolves(self):
         """Sanity check against the real (non-monkeypatched) config constant."""
-        inside = Path(PODCASTS_FOLDER) / "episodes" / "abc" / "out.mp3"
-        assert _is_audio_path_contained(inside) is True
-        outside = Path(os.path.realpath(PODCASTS_FOLDER)).parent / "elsewhere.mp3"
-        assert _is_audio_path_contained(outside) is False
-
-
-class TestResolveAudioPathHandlesFileUri:
-    def test_plain_path(self):
-        assert _resolve_audio_path("/data/podcasts/episodes/x/out.mp3") == Path(
-            "/data/podcasts/episodes/x/out.mp3"
-        )
-
-    def test_file_uri(self):
-        assert _resolve_audio_path("file:///data/podcasts/episodes/x/out.mp3") == Path(
-            "/data/podcasts/episodes/x/out.mp3"
+        assert (
+            resolve_contained_audio_path("episodes/abc/out.mp3") is not None
         )
+        assert resolve_contained_audio_path("../elsewhere.mp3") is None
 
 
-class TestStreamEndpointRejectsOutOfRootAudio:
-    def test_returns_403_for_audio_file_outside_podcasts_root(self, client, tmp_path):
+class TestStreamEndpointRejectsInvalidAudio:
+    def test_returns_403_for_legacy_absolute_audio_file(self, client, tmp_path):
         evil_file = tmp_path / "secret.mp3"
         evil_file.write_bytes(b"not a podcast")
         episode = make_episode(audio_file=str(evil_file))
@@ -121,10 +152,20 @@ class TestStreamEndpointRejectsOutOfRootAudio:
 
         assert response.status_code == 403
 
+    def test_returns_403_for_relative_traversal(self, client):
+        episode = make_episode(audio_file="../../etc/passwd")
+
+        with patch(
+            "api.routers.podcasts.PodcastService.get_episode",
+            new=AsyncMock(return_value=episode),
+        ):
+            response = client.get("/api/podcasts/episodes/episode:test123/audio")
+
+        assert response.status_code == 403
+
     def test_returns_404_for_missing_audio_inside_root(self, client):
-        # Inside PODCASTS_FOLDER (passes containment) but the file doesn't exist.
-        missing = Path(PODCASTS_FOLDER) / "episodes" / "does-not-exist" / "out.mp3"
-        episode = make_episode(audio_file=str(missing))
+        # Valid relative form (passes containment) but the file doesn't exist.
+        episode = make_episode(audio_file="episodes/does-not-exist/out.mp3")
 
         with patch(
             "api.routers.podcasts.PodcastService.get_episode",
@@ -135,13 +176,13 @@ class TestStreamEndpointRejectsOutOfRootAudio:
         assert response.status_code == 404
         assert "not found on disk" in response.json()["detail"]
 
-    def test_serves_audio_file_inside_root(self, client):
+    def test_serves_audio_file_from_relative_path(self, client):
         episode_dir = Path(PODCASTS_FOLDER) / "episodes" / "test-serve-uuid"
         episode_dir.mkdir(parents=True, exist_ok=True)
         audio_path = episode_dir / "out.mp3"
         audio_path.write_bytes(b"fake mp3 bytes")
         try:
-            episode = make_episode(audio_file=str(audio_path))
+            episode = make_episode(audio_file="episodes/test-serve-uuid/out.mp3")
             with patch(
                 "api.routers.podcasts.PodcastService.get_episode",
                 new=AsyncMock(return_value=episode),
@@ -155,8 +196,10 @@ class TestStreamEndpointRejectsOutOfRootAudio:
             episode_dir.rmdir()
 
 
-class TestListAndGetOmitAudioUrlWhenOutOfRoot:
-    def test_list_episodes_omits_audio_url_for_out_of_root_file(self, client, tmp_path):
+class TestListAndGetOmitAudioUrlWhenInvalid:
+    def test_list_episodes_omits_audio_url_for_legacy_absolute_file(
+        self, client, tmp_path
+    ):
         evil_file = tmp_path / "secret.mp3"
         evil_file.write_bytes(b"not yours")
         episode = make_episode(audio_file=str(evil_file))
@@ -174,7 +217,31 @@ class TestListAndGetOmitAudioUrlWhenOutOfRoot:
         assert len(body) == 1
         assert body[0]["audio_url"] is None
 
-    def test_get_episode_omits_audio_url_for_out_of_root_file(self, client, tmp_path):
+    def test_list_episodes_sets_audio_url_for_valid_relative_file(self, client):
+        episode_dir = Path(PODCASTS_FOLDER) / "episodes" / "test-list-uuid"
+        episode_dir.mkdir(parents=True, exist_ok=True)
+        audio_path = episode_dir / "out.mp3"
+        audio_path.write_bytes(b"fake mp3 bytes")
+        try:
+            episode = make_episode(audio_file="episodes/test-list-uuid/out.mp3")
+            with patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[episode]),
+            ):
+                response = client.get("/api/podcasts/episodes")
+
+            assert response.status_code == 200
+            body = response.json()
+            assert body[0]["audio_url"] == (
+                "/api/podcasts/episodes/episode:test123/audio"
+            )
+        finally:
+            audio_path.unlink(missing_ok=True)
+            episode_dir.rmdir()
+
+    def test_get_episode_omits_audio_url_for_legacy_absolute_file(
+        self, client, tmp_path
+    ):
         evil_file = tmp_path / "secret.mp3"
         evil_file.write_bytes(b"not yours")
         episode = make_episode(audio_file=str(evil_file))
@@ -189,8 +256,10 @@ class TestListAndGetOmitAudioUrlWhenOutOfRoot:
         assert response.json()["audio_url"] is None
 
 
-class TestDeleteAndRetryRefuseOutOfRootUnlink:
-    def test_delete_episode_does_not_unlink_out_of_root_file(self, client, tmp_path):
+class TestDeleteAndRetryRefuseInvalidUnlink:
+    def test_delete_episode_does_not_unlink_legacy_absolute_file(
+        self, client, tmp_path
+    ):
         evil_file = tmp_path / "secret.mp3"
         evil_file.write_bytes(b"not yours")
         episode = make_episode(audio_file=str(evil_file))
@@ -207,12 +276,12 @@ class TestDeleteAndRetryRefuseOutOfRootUnlink:
         assert response.status_code == 200
         assert evil_file.exists(), "out-of-root file must not be deleted"
 
-    def test_delete_episode_still_unlinks_in_root_file(self, client):
+    def test_delete_episode_unlinks_relative_in_root_file(self, client):
         episode_dir = Path(PODCASTS_FOLDER) / "episodes" / "test-delete-uuid"
         episode_dir.mkdir(parents=True, exist_ok=True)
         audio_path = episode_dir / "out.mp3"
         audio_path.write_bytes(b"fake mp3 bytes")
-        episode = make_episode(audio_file=str(audio_path))
+        episode = make_episode(audio_file="episodes/test-delete-uuid/out.mp3")
 
         try:
             with (
diff --git a/tests/test_podcast_audio_paths.py b/tests/test_podcast_audio_paths.py
new file mode 100644
index 00000000..67246182
--- /dev/null
+++ b/tests/test_podcast_audio_paths.py
@@ -0,0 +1,146 @@
+"""
+Tests for the write side of the podcast audio path contract (#1030) and for
+the migration that converts pre-existing rows.
+
+`to_relative_audio_path()` is what the generation command stores into
+`PodcastEpisode.audio_file`: always relative to PODCASTS_FOLDER, never
+absolute, never escaping - validated at write time so the DB can't hold a
+bad value. Migration 21 rewrites historical absolute/`file://` rows to the
+same form.
+"""
+
+from pathlib import Path
+
+import pytest
+
+from open_notebook.podcasts.audio_paths import (
+    podcasts_root,
+    to_relative_audio_path,
+)
+
+
+class TestToRelativeAudioPath:
+    def test_absolute_path_under_root_becomes_relative(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        audio = tmp_path / "episodes" / "uuid-1" / "audio" / "uuid-1.mp3"
+
+        assert to_relative_audio_path(str(audio)) == "episodes/uuid-1/audio/uuid-1.mp3"
+
+    def test_accepts_path_objects(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        audio = tmp_path / "episodes" / "uuid-2" / "a.mp3"
+
+        assert to_relative_audio_path(audio) == "episodes/uuid-2/a.mp3"
+
+    def test_file_uri_under_root_becomes_relative(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        uri = f"file://{tmp_path}/episodes/uuid-3/a.mp3"
+
+        assert to_relative_audio_path(uri) == "episodes/uuid-3/a.mp3"
+
+    def test_cwd_relative_path_under_root_becomes_relative(
+        self, tmp_path, monkeypatch
+    ):
+        """podcast-creator receives a CWD-relative output_dir when
+        DATA_FOLDER is './data'; the helper must normalize either form."""
+        root = tmp_path / "data" / "podcasts"
+        root.mkdir(parents=True)
+        monkeypatch.chdir(tmp_path)
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", "./data/podcasts"
+        )
+
+        rel = to_relative_audio_path("data/podcasts/episodes/uuid-4/a.mp3")
+
+        assert rel == "episodes/uuid-4/a.mp3"
+
+    def test_path_outside_root_raises_value_error(self, tmp_path, monkeypatch):
+        root = tmp_path / "podcasts"
+        root.mkdir()
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(root)
+        )
+
+        with pytest.raises(ValueError, match="outside the podcasts folder"):
+            to_relative_audio_path(str(tmp_path / "elsewhere.mp3"))
+
+    def test_traversal_out_of_root_raises_value_error(self, tmp_path, monkeypatch):
+        root = tmp_path / "podcasts"
+        root.mkdir()
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(root)
+        )
+
+        with pytest.raises(ValueError, match="outside the podcasts folder"):
+            to_relative_audio_path(str(root / ".." / "escape.mp3"))
+
+    def test_root_itself_raises_value_error(self, tmp_path, monkeypatch):
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        with pytest.raises(ValueError, match="outside the podcasts folder"):
+            to_relative_audio_path(str(tmp_path))
+
+    def test_roundtrips_with_read_helper(self, tmp_path, monkeypatch):
+        from open_notebook.podcasts.audio_paths import resolve_contained_audio_path
+
+        monkeypatch.setattr(
+            "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)
+        )
+        audio = tmp_path / "episodes" / "uuid-5" / "a.mp3"
+        audio.parent.mkdir(parents=True)
+        audio.write_bytes(b"audio")
+
+        stored = to_relative_audio_path(str(audio))
+        assert resolve_contained_audio_path(stored) == audio.resolve()
+
+    def test_podcasts_root_is_absolute(self):
+        assert podcasts_root().is_absolute()
+
+
+class TestMigration21Registration:
+    """Migration files exist and are registered in AsyncMigrationManager
+    (migrations are hard-coded, not auto-discovered)."""
+
+    MIGRATIONS_DIR = Path("open_notebook/database/migrations")
+
+    def test_migration_files_exist(self):
+        assert (self.MIGRATIONS_DIR / "21.surrealql").is_file()
+        assert (self.MIGRATIONS_DIR / "21_down.surrealql").is_file()
+
+    def test_manager_registers_migration_21(self):
+        from open_notebook.database.async_migrate import AsyncMigrationManager
+
+        manager = AsyncMigrationManager()
+        assert len(manager.up_migrations) >= 21
+        assert len(manager.up_migrations) == len(manager.down_migrations)
+        assert "podcasts/" in manager.up_migrations[20].sql
+
+    def test_up_migration_strips_known_prefixes_only(self):
+        sql = (self.MIGRATIONS_DIR / "21.surrealql").read_text()
+        for prefix in (
+            "file:///",
+            "/app/data/podcasts/",
+            "/data/podcasts/",
+            "./data/podcasts/",
+            "data/podcasts/",
+        ):
+            assert f'"{prefix}"' in sql, f"expected conversion of prefix {prefix}"
+        # Prefix-strip lengths must match the prefixes they guard.
+        assert "string::slice(audio_file, 7)" in sql  # len("file://"), keeps "/"
+        assert "string::slice(audio_file, 19)" in sql  # len("/app/data/podcasts/")
+        assert "string::slice(audio_file, 15)" in sql  # len("/data/podcasts/")
+        assert "string::slice(audio_file, 16)" in sql  # len("./data/podcasts/")
+        assert "string::slice(audio_file, 14)" in sql  # len("data/podcasts/")
+        # Percent-encoded file:// URIs cannot be URL-decoded in SurrealQL and
+        # must stay untouched (legacy-invalid).
+        assert '!string::contains(audio_file, "%")' in sql
+        # Root prefixes are stripped through ONE IF/ELSE chain so a stripped
+        # remainder can never be stripped a second time.
+        assert sql.count("UPDATE episode") == 2
diff --git a/tests/test_podcast_path.py b/tests/test_podcast_path.py
index b2d606a0..2ac265b5 100644
--- a/tests/test_podcast_path.py
+++ b/tests/test_podcast_path.py
@@ -7,7 +7,7 @@ spaces and special characters (GitHub issue #663).
 """
 
 import uuid
-from pathlib import PurePosixPath
+from pathlib import Path, PurePosixPath
 from types import SimpleNamespace
 from unittest.mock import AsyncMock, patch
 
@@ -21,17 +21,27 @@ class TestBuildEpisodeOutputDir:
     """Test the actual production helper that builds episode output paths."""
 
     def test_directory_name_is_valid_uuid(self):
-        dir_name, _ = build_episode_output_dir("/data")
+        dir_name, _ = build_episode_output_dir("/data/podcasts")
         parsed = uuid.UUID(dir_name)
         assert str(parsed) == dir_name
 
     def test_path_structure(self):
-        dir_name, output_dir = build_episode_output_dir("/data")
+        dir_name, output_dir = build_episode_output_dir("/data/podcasts")
         assert str(output_dir) == f"/data/podcasts/episodes/{dir_name}"
 
+    def test_defaults_to_podcasts_folder(self):
+        """No-arg form builds under PODCASTS_FOLDER - the same root the
+        write-time validation (to_relative_audio_path) checks against."""
+        from open_notebook.config import PODCASTS_FOLDER
+
+        dir_name, output_dir = build_episode_output_dir()
+        assert str(output_dir) == str(
+            Path(PODCASTS_FOLDER) / "episodes" / dir_name
+        )
+
     def test_no_collision_between_calls(self):
-        dir1, _ = build_episode_output_dir("/data")
-        dir2, _ = build_episode_output_dir("/data")
+        dir1, _ = build_episode_output_dir("/data/podcasts")
+        dir2, _ = build_episode_output_dir("/data/podcasts")
         assert dir1 != dir2
 
     def test_path_is_independent_of_episode_name(self):
@@ -50,7 +60,7 @@ class TestBuildEpisodeOutputDir:
             "?*<>|",
         ]
         for name in problematic_names:
-            _, output_dir = build_episode_output_dir("/data")
+            _, output_dir = build_episode_output_dir("/data/podcasts")
             path_str = str(output_dir)
             # The episode name must not appear anywhere in the path
             assert name not in path_str
@@ -61,7 +71,7 @@ class TestBuildEpisodeOutputDir:
             )
 
     def test_path_works_on_posix(self):
-        dir_name, output_dir = build_episode_output_dir("/data")
+        dir_name, output_dir = build_episode_output_dir("/data/podcasts")
         posix = PurePosixPath(str(output_dir))
         assert posix.parts == ("/", "data", "podcasts", "episodes", dir_name)
 
diff --git a/tests/test_podcast_speaker_profile.py b/tests/test_podcast_speaker_profile.py
index 1c1075d0..4f60ec44 100644
--- a/tests/test_podcast_speaker_profile.py
+++ b/tests/test_podcast_speaker_profile.py
@@ -365,15 +365,24 @@ class TestOrphanedProfileDoesNotPoisonConfig:
                 "commands.podcast_commands.create_podcast",
                 new=AsyncMock(
                     return_value={
-                        "final_output_file_path": str(tmp_path / "out.mp3"),
+                        "final_output_file_path": str(
+                            tmp_path / "episodes" / "ep-dir" / "out.mp3"
+                        ),
                         "transcript": {},
                         "outline": {},
                     }
                 ),
             ),
+            # audio_file is stored relative to PODCASTS_FOLDER and validated
+            # at write time (#1030), so the fake output path must live under
+            # the (patched) podcasts root.
+            patch(
+                "open_notebook.podcasts.audio_paths.PODCASTS_FOLDER",
+                str(tmp_path),
+            ),
             patch(
                 "commands.podcast_commands.build_episode_output_dir",
-                new=lambda data_folder: ("ep-dir", tmp_path / "ep-dir"),
+                new=lambda *args: ("ep-dir", tmp_path / "ep-dir"),
             ),
             patch(
                 "open_notebook.podcasts.models.PodcastEpisode.save",
@@ -383,6 +392,8 @@ class TestOrphanedProfileDoesNotPoisonConfig:
             result = await generate_podcast_command(make_input())
 
         assert result.success is True
+        # The stored/reported audio path is relative to PODCASTS_FOLDER (#1030)
+        assert result.audio_file_path == "episodes/ep-dir/out.mp3"
         episode_config = configure_calls["episode_config"]["profiles"]
         # Orphaned profile removed instead of poisoning validation
         assert "Orphaned Profile" not in episode_config

From d1f78fc0ab92298582ee9cc963fc7e146048396f Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 14:35:04 -0300
Subject: [PATCH 205/345] chore(podcasts): drop legacy provider/model string
 fields from podcast profiles (#1107) (#1112)

Migration 22 best-effort maps profiles whose outline_llm/transcript_llm/
voice_model references are still empty to existing model records
(provider + name + type, no auto-create), clears the legacy values and
drops the 6 columns. The startup data migration that retried this
mapping on every boot (open_notebook/podcasts/migration.py) is deleted
along with its api/main.py lifespan hook; the legacy fields are removed
from the Pydantic models, API schemas and frontend types/panels.

Accepted trade-off: profiles whose mapping never converged lose the
legacy strings and stay unresolved - they were already non-functional
and the UI already flags them; the user re-picks models once.
---
 CHANGELOG.md                                  |   3 +
 api/main.py                                   |   9 -
 api/routers/episode_profiles.py               |  22 --
 api/routers/speaker_profiles.py               |  12 --
 docs/7-DEVELOPMENT/podcasts.md                |   4 +-
 .../podcasts/EpisodeProfilesPanel.tsx         |  12 +-
 .../podcasts/SpeakerProfilesPanel.tsx         |   4 +-
 frontend/src/lib/types/podcasts.ts            |  26 ++-
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/22.surrealql          |  42 ++++
 .../database/migrations/22_down.surrealql     |  14 ++
 open_notebook/podcasts/migration.py           | 192 ------------------
 open_notebook/podcasts/models.py              |  30 +--
 tests/test_domain.py                          |  20 --
 tests/test_podcast_legacy_field_removal.py    | 113 +++++++++++
 15 files changed, 203 insertions(+), 306 deletions(-)
 create mode 100644 open_notebook/database/migrations/22.surrealql
 create mode 100644 open_notebook/database/migrations/22_down.surrealql
 delete mode 100644 open_notebook/podcasts/migration.py
 create mode 100644 tests/test_podcast_legacy_field_removal.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 687655be..964c088a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The source detail view (dialog and full page) now fetches through the shared `useSource` React Query hook instead of a hand-rolled fetch, matching the insight/note dialogs: caching and the never-retry-404 policy come from React Query, title edits and deletes go through the shared mutation hooks (so source lists refresh and a deleted source can't be served from the cache), and the `key={sourceId}` remount workaround on the parents was removed — the component resets its own per-source UI state (#1106)
 - The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
 
+### Removed
+- The legacy provider/model string fields on podcast profiles (`outline_provider`, `outline_model`, `transcript_provider`, `transcript_model` on episode profiles; `tts_provider`, `tts_model` on speaker profiles) are gone from the database, the API and the UI — the app has ignored them since the Model registry references landed in v1.11. Migration 22 first best-effort maps any profile whose `outline_llm`/`transcript_llm`/`voice_model` reference is still empty to an existing model record (matching provider + name + type; no auto-creation, since a migration must not touch credentials), then drops the six columns; the startup data migration that used to retry this mapping on every boot (`open_notebook/podcasts/migration.py`) was deleted. Accepted trade-off: profiles whose mapping never converged (e.g. the provider credential was never configured) lose the legacy strings and stay unresolved — they were already non-functional and the UI already flags them as needing model selection, so you just re-pick the models in the profile form once (#1107)
+
 ### Fixed
 - Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)
 - Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
diff --git a/api/main.py b/api/main.py
index 2e7aa9e8..ad6120a7 100644
--- a/api/main.py
+++ b/api/main.py
@@ -198,15 +198,6 @@ async def lifespan(app: FastAPI):
         # Fail fast - don't start the API with an outdated database schema
         raise RuntimeError(f"Failed to run database migrations: {str(e)}") from e
 
-    # Run podcast profile data migration (legacy strings -> Model registry)
-    try:
-        from open_notebook.podcasts.migration import migrate_podcast_profiles
-
-        await migrate_podcast_profiles()
-    except Exception as e:
-        logger.warning(f"Podcast profile migration encountered errors: {e}")
-        # Non-fatal: profiles can be migrated manually via UI
-
     logger.success("API initialization completed successfully")
 
     # Yield control to the application
diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index baf66124..99974cac 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -26,11 +26,6 @@ class EpisodeProfileResponse(BaseModel):
     default_briefing: str
     num_segments: int
     max_tokens: Optional[int] = None
-    # Legacy fields (for display/migration awareness)
-    outline_provider: Optional[str] = None
-    outline_model: Optional[str] = None
-    transcript_provider: Optional[str] = None
-    transcript_model: Optional[str] = None
 
 
 async def _speaker_names_by_id() -> Dict[str, str]:
@@ -65,10 +60,6 @@ def _profile_to_response(
         default_briefing=profile.default_briefing,
         num_segments=profile.num_segments,
         max_tokens=profile.max_tokens,
-        outline_provider=profile.outline_provider,
-        outline_model=profile.outline_model,
-        transcript_provider=profile.transcript_provider,
-        transcript_model=profile.transcript_model,
     )
 
 
@@ -151,11 +142,6 @@ class EpisodeProfileCreate(BaseModel):
         None,
         description="Max output tokens for outline/transcript generation",
     )
-    # Legacy fields (accepted but not required)
-    outline_provider: Optional[str] = None
-    outline_model: Optional[str] = None
-    transcript_provider: Optional[str] = None
-    transcript_model: Optional[str] = None
 
 
 @router.post("/episode-profiles", response_model=EpisodeProfileResponse)
@@ -173,10 +159,6 @@ async def create_episode_profile(profile_data: EpisodeProfileCreate):
             default_briefing=profile_data.default_briefing,
             num_segments=profile_data.num_segments,
             max_tokens=profile_data.max_tokens,
-            outline_provider=profile_data.outline_provider,
-            outline_model=profile_data.outline_model,
-            transcript_provider=profile_data.transcript_provider,
-            transcript_model=profile_data.transcript_model,
         )
 
         await profile.save()
@@ -278,10 +260,6 @@ async def duplicate_episode_profile(profile_id: str):
             default_briefing=original.default_briefing,
             num_segments=original.num_segments,
             max_tokens=original.max_tokens,
-            outline_provider=original.outline_provider,
-            outline_model=original.outline_model,
-            transcript_provider=original.transcript_provider,
-            transcript_model=original.transcript_model,
         )
 
         await duplicate.save()
diff --git a/api/routers/speaker_profiles.py b/api/routers/speaker_profiles.py
index 6d48b32f..afa252e8 100644
--- a/api/routers/speaker_profiles.py
+++ b/api/routers/speaker_profiles.py
@@ -16,9 +16,6 @@ class SpeakerProfileResponse(BaseModel):
     description: str
     voice_model: Optional[str] = None
     speakers: List[Dict[str, Any]]
-    # Legacy fields (for display/migration awareness)
-    tts_provider: Optional[str] = None
-    tts_model: Optional[str] = None
 
 
 def _profile_to_response(profile: SpeakerProfile) -> SpeakerProfileResponse:
@@ -28,8 +25,6 @@ def _profile_to_response(profile: SpeakerProfile) -> SpeakerProfileResponse:
         description=profile.description or "",
         voice_model=profile.voice_model,
         speakers=profile.speakers,
-        tts_provider=profile.tts_provider,
-        tts_model=profile.tts_model,
     )
 
 
@@ -81,9 +76,6 @@ class SpeakerProfileCreate(BaseModel):
     speakers: List[Dict[str, Any]] = Field(
         ..., description="Array of speaker configurations"
     )
-    # Legacy fields (accepted but not required)
-    tts_provider: Optional[str] = None
-    tts_model: Optional[str] = None
 
 
 @router.post("/speaker-profiles", response_model=SpeakerProfileResponse)
@@ -95,8 +87,6 @@ async def create_speaker_profile(profile_data: SpeakerProfileCreate):
             description=profile_data.description,
             voice_model=profile_data.voice_model,
             speakers=profile_data.speakers,
-            tts_provider=profile_data.tts_provider,
-            tts_model=profile_data.tts_model,
         )
 
         await profile.save()
@@ -185,8 +175,6 @@ async def duplicate_speaker_profile(profile_id: str):
             description=original.description,
             voice_model=original.voice_model,
             speakers=original.speakers,
-            tts_provider=original.tts_provider,
-            tts_model=original.tts_model,
         )
 
         await duplicate.save()
diff --git a/docs/7-DEVELOPMENT/podcasts.md b/docs/7-DEVELOPMENT/podcasts.md
index 520324ff..67da079e 100644
--- a/docs/7-DEVELOPMENT/podcasts.md
+++ b/docs/7-DEVELOPMENT/podcasts.md
@@ -10,9 +10,9 @@ How podcast generation is modeled and executed: the two-tier profile system, the
 
 ## Model registry references, not strings
 
-Profile fields reference `Model` records instead of raw provider/model strings. At generation time `_resolve_model_config(model_id)` loads the Model, resolves its linked credential (or falls back to `provision_provider_keys()`), and returns `(provider, model_name, config)` for podcast-creator. Legacy string fields (`tts_provider`, `outline_provider`, …) still exist as nullable columns for migration compatibility but are **ignored at runtime**.
+Profile fields reference `Model` records instead of raw provider/model strings. At generation time `_resolve_model_config(model_id)` loads the Model, resolves its linked credential (or falls back to `provision_provider_keys()`), and returns `(provider, model_name, config)` for podcast-creator.
 
-`migration.py` converts legacy profiles on API startup (after SQL migrations): idempotent, skips already-migrated profiles, and auto-creates a Model record when a legacy string has no match but a credential exists for that provider.
+The legacy string fields (`tts_provider`, `outline_provider`, …) that predated the registry were dropped by SQL migration 22 (#1107). The migration best-effort maps any still-unresolved profile to an existing `model` record (provider + name + type) before dropping the columns; profiles with no matching record stay unresolved — the UI already flags them as needing model selection and the user re-picks once. The old startup data migration (`open_notebook/podcasts/migration.py`) is gone.
 
 ## Profile snapshots
 
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 91cbb32f..ea939728 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -206,9 +206,7 @@ export function EpisodeProfilesPanel({
                       <p className="text-foreground">
                         {profile.outline_llm
                           ? (modelNameMap[profile.outline_llm] ?? profile.outline_llm)
-                          : (profile.outline_provider && profile.outline_model
-                            ? `${profile.outline_provider} / ${profile.outline_model}`
-                            : t('podcasts.notConfigured'))}
+                          : t('podcasts.notConfigured')}
                       </p>
                     </div>
                     <div>
@@ -218,9 +216,7 @@ export function EpisodeProfilesPanel({
                       <p className="text-foreground">
                         {profile.transcript_llm
                           ? (modelNameMap[profile.transcript_llm] ?? profile.transcript_llm)
-                          : (profile.transcript_provider && profile.transcript_model
-                            ? `${profile.transcript_provider} / ${profile.transcript_model}`
-                            : t('podcasts.notConfigured'))}
+                          : t('podcasts.notConfigured')}
                       </p>
                     </div>
                     <div>
@@ -252,10 +248,6 @@ export function EpisodeProfilesPanel({
                           <Badge variant="outline" className="text-xs">
                             {modelNameMap[speakerSummary.voice_model] ?? speakerSummary.voice_model}
                           </Badge>
-                        ) : speakerSummary?.tts_provider ? (
-                          <Badge variant="outline" className="text-xs">
-                            {speakerSummary.tts_provider} / {speakerSummary.tts_model}
-                          </Badge>
                         ) : null}
                       </div>
                     </div>
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index ac90d19a..ed1f1dca 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -116,9 +116,7 @@ export function SpeakerProfilesPanel({
                     <Badge variant="outline" className="text-xs">
                       {profile.voice_model
                         ? (modelNameMap[profile.voice_model] ?? profile.voice_model)
-                        : (profile.tts_provider
-                          ? `${profile.tts_provider} / ${profile.tts_model}`
-                          : t('podcasts.notConfigured'))}
+                        : t('podcasts.notConfigured')}
                     </Badge>
                   </div>
                   <div className="flex flex-wrap gap-2">
diff --git a/frontend/src/lib/types/podcasts.ts b/frontend/src/lib/types/podcasts.ts
index f8811ea7..f1054fe9 100644
--- a/frontend/src/lib/types/podcasts.ts
+++ b/frontend/src/lib/types/podcasts.ts
@@ -21,11 +21,6 @@ export interface EpisodeProfile {
   language?: string | null
   default_briefing: string
   num_segments: number
-  // Legacy fields (app ignores, kept in DB for migration)
-  outline_provider?: string | null
-  outline_model?: string | null
-  transcript_provider?: string | null
-  transcript_model?: string | null
 }
 
 export interface SpeakerVoiceConfig {
@@ -42,7 +37,22 @@ export interface SpeakerProfile {
   description: string
   voice_model?: string | null
   speakers: SpeakerVoiceConfig[]
-  // Legacy fields
+}
+
+/**
+ * Historical profile snapshot stored on an episode at generation time.
+ * Episodes generated before the legacy provider/model strings were dropped
+ * (#1107) may still carry them in the snapshot; newer episodes won't.
+ */
+export interface EpisodeProfileSnapshot extends EpisodeProfile {
+  outline_provider?: string | null
+  outline_model?: string | null
+  transcript_provider?: string | null
+  transcript_model?: string | null
+}
+
+/** See EpisodeProfileSnapshot. */
+export interface SpeakerProfileSnapshot extends SpeakerProfile {
   tts_provider?: string | null
   tts_model?: string | null
 }
@@ -55,8 +65,8 @@ export interface Language {
 export interface PodcastEpisode {
   id: string
   name: string
-  episode_profile: EpisodeProfile
-  speaker_profile: SpeakerProfile
+  episode_profile: EpisodeProfileSnapshot
+  speaker_profile: SpeakerProfileSnapshot
   briefing: string
   audio_file?: string | null
   audio_url?: string | null
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index c4ac8735..6d768475 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -139,6 +139,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/21.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/22.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -204,6 +207,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/21_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/22_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/22.surrealql b/open_notebook/database/migrations/22.surrealql
new file mode 100644
index 00000000..0e737414
--- /dev/null
+++ b/open_notebook/database/migrations/22.surrealql
@@ -0,0 +1,42 @@
+-- Migration 22: drop legacy provider/model string fields from podcast profiles (#1107)
+-- Phase 4 of #584. The app has ignored these strings since migration 14
+-- introduced the Model registry references (outline_llm, transcript_llm,
+-- voice_model); their only remaining role was as input to the startup data
+-- migration retry loop (open_notebook/podcasts/migration.py), which this
+-- migration replaces and retires.
+--
+-- Steps:
+-- 1. Best-effort mapping: for profiles whose reference fields are still
+--    empty but whose legacy provider+model strings are set, populate the
+--    reference from a matching `model` record (provider + name + type).
+--    This mirrors the retired Python data migration MINUS the auto-create
+--    path: a migration has no business touching credentials, so profiles
+--    with no matching model record simply stay unresolved. Accepted
+--    trade-off (#1107): those profiles were already non-functional (the app
+--    ignores legacy strings) and the UI already flags them as needing model
+--    selection - the user re-picks models in the profile form once.
+-- 2. Clear the stored legacy values (UNSET while the fields are still
+--    defined, so rows don't keep stale data the schema no longer knows).
+-- 3. Drop the 6 legacy field definitions.
+
+-- Step 1: best-effort mapping (no-op on rows already migrated or with no
+-- legacy strings; a subquery with no match yields NONE, leaving the row
+-- unresolved, which is the accepted outcome).
+UPDATE episode_profile SET outline_llm = (SELECT VALUE id FROM ONLY model WHERE provider = $parent.outline_provider AND name = $parent.outline_model AND type = "language" LIMIT 1) WHERE outline_llm = NONE AND outline_provider != NONE AND outline_provider != "" AND outline_model != NONE AND outline_model != "";
+
+UPDATE episode_profile SET transcript_llm = (SELECT VALUE id FROM ONLY model WHERE provider = $parent.transcript_provider AND name = $parent.transcript_model AND type = "language" LIMIT 1) WHERE transcript_llm = NONE AND transcript_provider != NONE AND transcript_provider != "" AND transcript_model != NONE AND transcript_model != "";
+
+UPDATE speaker_profile SET voice_model = (SELECT VALUE id FROM ONLY model WHERE provider = $parent.tts_provider AND name = $parent.tts_model AND type = "text_to_speech" LIMIT 1) WHERE voice_model = NONE AND tts_provider != NONE AND tts_provider != "" AND tts_model != NONE AND tts_model != "";
+
+-- Step 2: clear stored legacy values before dropping the definitions.
+UPDATE episode_profile UNSET outline_provider, outline_model, transcript_provider, transcript_model;
+
+UPDATE speaker_profile UNSET tts_provider, tts_model;
+
+-- Step 3: drop the legacy field definitions.
+REMOVE FIELD IF EXISTS outline_provider ON TABLE episode_profile;
+REMOVE FIELD IF EXISTS outline_model ON TABLE episode_profile;
+REMOVE FIELD IF EXISTS transcript_provider ON TABLE episode_profile;
+REMOVE FIELD IF EXISTS transcript_model ON TABLE episode_profile;
+REMOVE FIELD IF EXISTS tts_provider ON TABLE speaker_profile;
+REMOVE FIELD IF EXISTS tts_model ON TABLE speaker_profile;
diff --git a/open_notebook/database/migrations/22_down.surrealql b/open_notebook/database/migrations/22_down.surrealql
new file mode 100644
index 00000000..730c4d4c
--- /dev/null
+++ b/open_notebook/database/migrations/22_down.surrealql
@@ -0,0 +1,14 @@
+-- Migration 22 rollback: re-define the legacy provider/model string fields
+-- (best effort, documented in #1107). The up migration UNSET the stored
+-- values before dropping the definitions, so the legacy strings themselves
+-- are NOT recoverable - this rollback only restores the schema shape that
+-- migration 14 left (optional strings, app-ignored). Profiles keep working
+-- through the Model registry references (outline_llm, transcript_llm,
+-- voice_model), which the up migration only ever populated, never cleared.
+
+DEFINE FIELD OVERWRITE outline_provider ON TABLE episode_profile TYPE option<string>;
+DEFINE FIELD OVERWRITE outline_model ON TABLE episode_profile TYPE option<string>;
+DEFINE FIELD OVERWRITE transcript_provider ON TABLE episode_profile TYPE option<string>;
+DEFINE FIELD OVERWRITE transcript_model ON TABLE episode_profile TYPE option<string>;
+DEFINE FIELD OVERWRITE tts_provider ON TABLE speaker_profile TYPE option<string>;
+DEFINE FIELD OVERWRITE tts_model ON TABLE speaker_profile TYPE option<string>;
diff --git a/open_notebook/podcasts/migration.py b/open_notebook/podcasts/migration.py
deleted file mode 100644
index 1ee0eedb..00000000
--- a/open_notebook/podcasts/migration.py
+++ /dev/null
@@ -1,192 +0,0 @@
-"""
-Data migration for podcast profiles: maps legacy provider/model strings
-to Model registry record IDs.
-
-Runs on API startup after SQL migrations. Idempotent - skips profiles
-that already have the new fields populated.
-"""
-
-from loguru import logger
-
-from open_notebook.database.repository import repo_query
-
-
-async def _find_model_record(
-    provider: str, model_name: str, model_type: str
-) -> str | None:
-    """Find an existing Model record matching provider + name + type."""
-    results = await repo_query(
-        "SELECT * FROM model WHERE provider = $provider AND name = $name AND type = $type",
-        {"provider": provider, "name": model_name, "type": model_type},
-    )
-    if results:
-        return str(results[0]["id"])
-    return None
-
-
-async def _find_or_create_model(
-    provider: str, model_name: str, model_type: str
-) -> str | None:
-    """Find existing Model record or auto-create one linked to provider credential."""
-    # Try exact match first
-    model_id = await _find_model_record(provider, model_name, model_type)
-    if model_id:
-        return model_id
-
-    # Try to find a credential for this provider and auto-create the model
-    from open_notebook.domain.credential import Credential
-
-    credentials = await Credential.get_by_provider(provider)
-    if not credentials:
-        logger.warning(
-            f"No credential found for provider '{provider}'. "
-            f"Cannot auto-create model '{model_name}'. Profile needs manual migration."
-        )
-        return None
-
-    # Use the first credential for the provider
-    credential = credentials[0]
-    from open_notebook.ai.models import Model
-
-    model = Model(
-        name=model_name,
-        provider=provider,
-        type=model_type,
-        credential=str(credential.id),
-    )
-    await model.save()
-    logger.info(
-        f"Auto-created model '{model_name}' ({model_type}) "
-        f"linked to credential '{credential.name}'"
-    )
-    return str(model.id)
-
-
-async def migrate_podcast_profiles() -> None:
-    """Migrate episode and speaker profiles from legacy strings to Model record IDs.
-
-    Idempotent: skips profiles where new fields are already populated.
-    """
-    logger.info("Starting podcast profile data migration...")
-
-    ep_migrated = 0
-    ep_skipped = 0
-    ep_failed = 0
-
-    # Migrate EpisodeProfiles
-    episode_profiles = await repo_query("SELECT * FROM episode_profile")
-    for raw in episode_profiles:
-        profile_name = raw.get("name", raw.get("id", "unknown"))
-        try:
-            outline_llm = raw.get("outline_llm")
-            transcript_llm = raw.get("transcript_llm")
-
-            needs_outline = not outline_llm
-            needs_transcript = not transcript_llm
-
-            if not needs_outline and not needs_transcript:
-                ep_skipped += 1
-                continue
-
-            updates = {}
-
-            if needs_outline:
-                outline_provider = raw.get("outline_provider")
-                outline_model = raw.get("outline_model")
-                if outline_provider and outline_model:
-                    model_id = await _find_or_create_model(
-                        outline_provider, outline_model, "language"
-                    )
-                    if model_id:
-                        from open_notebook.database.repository import ensure_record_id
-
-                        updates["outline_llm"] = ensure_record_id(model_id)
-
-            if needs_transcript:
-                transcript_provider = raw.get("transcript_provider")
-                transcript_model = raw.get("transcript_model")
-                if transcript_provider and transcript_model:
-                    model_id = await _find_or_create_model(
-                        transcript_provider, transcript_model, "language"
-                    )
-                    if model_id:
-                        from open_notebook.database.repository import ensure_record_id
-
-                        updates["transcript_llm"] = ensure_record_id(model_id)
-
-            if updates:
-                from open_notebook.database.repository import repo_update
-
-                await repo_update("episode_profile", str(raw["id"]), updates)
-                ep_migrated += 1
-                logger.info(
-                    f"Migrated episode profile '{profile_name}': {list(updates.keys())}"
-                )
-            else:
-                ep_failed += 1
-                logger.warning(
-                    f"Could not migrate episode profile '{profile_name}': "
-                    "no matching models found"
-                )
-
-        except Exception as e:
-            ep_failed += 1
-            logger.error(f"Failed to migrate episode profile '{profile_name}': {e}")
-
-    # Migrate SpeakerProfiles
-    sp_migrated = 0
-    sp_skipped = 0
-    sp_failed = 0
-
-    speaker_profiles = await repo_query("SELECT * FROM speaker_profile")
-    for raw in speaker_profiles:
-        profile_name = raw.get("name", raw.get("id", "unknown"))
-        try:
-            voice_model = raw.get("voice_model")
-
-            if voice_model:
-                sp_skipped += 1
-                continue
-
-            tts_provider = raw.get("tts_provider")
-            tts_model = raw.get("tts_model")
-
-            if not tts_provider or not tts_model:
-                sp_failed += 1
-                logger.warning(
-                    f"Speaker profile '{profile_name}' has no legacy TTS config"
-                )
-                continue
-
-            model_id = await _find_or_create_model(
-                tts_provider, tts_model, "text_to_speech"
-            )
-            if model_id:
-                from open_notebook.database.repository import (
-                    ensure_record_id,
-                    repo_update,
-                )
-
-                await repo_update(
-                    "speaker_profile",
-                    str(raw["id"]),
-                    {"voice_model": ensure_record_id(model_id)},
-                )
-                sp_migrated += 1
-                logger.info(f"Migrated speaker profile '{profile_name}'")
-            else:
-                sp_failed += 1
-                logger.warning(
-                    f"Could not migrate speaker profile '{profile_name}': "
-                    "no matching model found"
-                )
-
-        except Exception as e:
-            sp_failed += 1
-            logger.error(f"Failed to migrate speaker profile '{profile_name}': {e}")
-
-    logger.info(
-        f"Podcast profile migration complete. "
-        f"Episodes: {ep_migrated} migrated, {ep_skipped} skipped, {ep_failed} failed. "
-        f"Speakers: {sp_migrated} migrated, {sp_skipped} skipped, {sp_failed} failed."
-    )
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index 2379f66f..ac628ee1 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -43,10 +43,6 @@ class EpisodeProfile(ObjectModel):
     nullable_fields: ClassVar[set[str]] = {
         "description",
         "speaker_config",
-        "outline_provider",
-        "outline_model",
-        "transcript_provider",
-        "transcript_model",
         "outline_llm",
         "transcript_llm",
         "language",
@@ -64,21 +60,7 @@ class EpisodeProfile(ObjectModel):
         ),
     )
 
-    # Legacy fields (kept for migration, app ignores)
-    outline_provider: Optional[str] = Field(
-        None, description="[Legacy] AI provider for outline generation"
-    )
-    outline_model: Optional[str] = Field(
-        None, description="[Legacy] AI model for outline generation"
-    )
-    transcript_provider: Optional[str] = Field(
-        None, description="[Legacy] AI provider for transcript generation"
-    )
-    transcript_model: Optional[str] = Field(
-        None, description="[Legacy] AI model for transcript generation"
-    )
-
-    # New fields: Model registry references
+    # Model registry references
     outline_llm: Optional[str] = Field(
         None, description="Model record ID for outline generation"
     )
@@ -153,21 +135,13 @@ class SpeakerProfile(ObjectModel):
     table_name: ClassVar[str] = "speaker_profile"
     nullable_fields: ClassVar[set[str]] = {
         "description",
-        "tts_provider",
-        "tts_model",
         "voice_model",
     }
 
     name: str = Field(..., description="Unique profile name")
     description: Optional[str] = Field(None, description="Profile description")
 
-    # Legacy fields (kept for migration, app ignores)
-    tts_provider: Optional[str] = Field(
-        None, description="[Legacy] TTS provider (openai, elevenlabs, etc.)"
-    )
-    tts_model: Optional[str] = Field(None, description="[Legacy] TTS model name")
-
-    # New field: Model registry reference
+    # Model registry reference
     voice_model: Optional[str] = Field(
         None, description="Model record ID for TTS"
     )
diff --git a/tests/test_domain.py b/tests/test_domain.py
index a1abaf0a..fb9cd320 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -421,8 +421,6 @@ class TestPodcastDomain:
         with pytest.raises(ValidationError):
             SpeakerProfile(
                 name="Test",
-                tts_provider="openai",
-                tts_model="tts-1",
                 speakers=[],
             )
 
@@ -430,8 +428,6 @@ class TestPodcastDomain:
         with pytest.raises(ValidationError):
             SpeakerProfile(
                 name="Test",
-                tts_provider="openai",
-                tts_model="tts-1",
                 speakers=[{"name": f"Speaker{i}"} for i in range(5)],
             )
 
@@ -439,8 +435,6 @@ class TestPodcastDomain:
         with pytest.raises(ValidationError):
             SpeakerProfile(
                 name="Test",
-                tts_provider="openai",
-                tts_model="tts-1",
                 speakers=[
                     {"name": "Speaker 1"}
                 ],  # Missing voice_id, backstory, personality
@@ -449,8 +443,6 @@ class TestPodcastDomain:
         # Test valid - single speaker with all fields
         profile = SpeakerProfile(
             name="Test",
-            tts_provider="openai",
-            tts_model="tts-1",
             speakers=[
                 {
                     "name": "Host",
@@ -603,10 +595,6 @@ class TestEpisodeProfile:
             EpisodeProfile(
                 name="Test",
                 speaker_config="default",
-                outline_provider="openai",
-                outline_model="gpt-4",
-                transcript_provider="openai",
-                transcript_model="gpt-4",
                 default_briefing="Test briefing",
                 num_segments=2,
             )
@@ -618,10 +606,6 @@ class TestEpisodeProfile:
             EpisodeProfile(
                 name="Test",
                 speaker_config="default",
-                outline_provider="openai",
-                outline_model="gpt-4",
-                transcript_provider="openai",
-                transcript_model="gpt-4",
                 default_briefing="Test briefing",
                 num_segments=21,
             )
@@ -630,10 +614,6 @@ class TestEpisodeProfile:
         profile = EpisodeProfile(
             name="Test",
             speaker_config="default",
-            outline_provider="openai",
-            outline_model="gpt-4",
-            transcript_provider="openai",
-            transcript_model="gpt-4",
             default_briefing="Test briefing",
             num_segments=5,
         )
diff --git a/tests/test_podcast_legacy_field_removal.py b/tests/test_podcast_legacy_field_removal.py
new file mode 100644
index 00000000..78af8ffe
--- /dev/null
+++ b/tests/test_podcast_legacy_field_removal.py
@@ -0,0 +1,113 @@
+"""
+Tests for migration 22: legacy provider/model strings dropped from podcast
+profiles (#1107).
+
+The migration maps still-unresolved profiles to `model` records (best effort,
+no auto-create) and then drops the 6 legacy fields. The startup data
+migration (open_notebook/podcasts/migration.py) that used to retry this
+mapping on every boot is gone - its job now lives in the migration.
+"""
+
+from pathlib import Path
+
+import pytest
+
+MIGRATIONS_DIR = Path("open_notebook/database/migrations")
+
+EPISODE_LEGACY_FIELDS = (
+    "outline_provider",
+    "outline_model",
+    "transcript_provider",
+    "transcript_model",
+)
+SPEAKER_LEGACY_FIELDS = ("tts_provider", "tts_model")
+
+
+class TestMigration22Registration:
+    """Migration files exist and are registered in AsyncMigrationManager
+    (migrations are hard-coded, not auto-discovered)."""
+
+    def test_migration_files_exist(self):
+        assert (MIGRATIONS_DIR / "22.surrealql").is_file()
+        assert (MIGRATIONS_DIR / "22_down.surrealql").is_file()
+
+    def test_manager_registers_migration_22(self):
+        from open_notebook.database.async_migrate import AsyncMigrationManager
+
+        manager = AsyncMigrationManager()
+        assert len(manager.up_migrations) >= 22
+        assert len(manager.up_migrations) == len(manager.down_migrations)
+        assert "REMOVE FIELD IF EXISTS outline_provider" in manager.up_migrations[21].sql
+
+
+class TestMigration22Content:
+    def test_up_maps_before_dropping(self):
+        """Best-effort mapping (provider + name + type against `model`) must
+        appear for all three reference fields, guarded so already-migrated
+        rows are untouched."""
+        sql = (MIGRATIONS_DIR / "22.surrealql").read_text()
+
+        assert 'type = "language"' in sql
+        assert 'type = "text_to_speech"' in sql
+        # Mapping only fills EMPTY references - never overwrites a resolved one.
+        assert "WHERE outline_llm = NONE" in sql
+        assert "WHERE transcript_llm = NONE" in sql
+        assert "WHERE voice_model = NONE" in sql
+        # Mapping matches on the legacy strings of the row being updated.
+        assert "$parent.outline_provider" in sql
+        assert "$parent.transcript_provider" in sql
+        assert "$parent.tts_provider" in sql
+        # Mapping must run BEFORE the values are cleared/dropped.
+        assert sql.index("outline_llm = (SELECT") < sql.index(
+            "UPDATE episode_profile UNSET"
+        )
+
+    def test_up_clears_values_then_drops_all_six_fields(self):
+        sql = (MIGRATIONS_DIR / "22.surrealql").read_text()
+
+        # Stored values are cleared while the fields are still defined...
+        assert "UPDATE episode_profile UNSET outline_provider" in sql
+        assert "UPDATE speaker_profile UNSET tts_provider" in sql
+        # ...then every legacy definition is removed.
+        for field in EPISODE_LEGACY_FIELDS:
+            assert f"REMOVE FIELD IF EXISTS {field} ON TABLE episode_profile" in sql
+        for field in SPEAKER_LEGACY_FIELDS:
+            assert f"REMOVE FIELD IF EXISTS {field} ON TABLE speaker_profile" in sql
+        # No auto-create: a migration must not touch credentials.
+        assert "CREATE model" not in sql
+
+    def test_down_redefines_fields_as_optional_strings(self):
+        """Rollback is a documented best effort: the schema shape returns
+        (option<string>, the state migration 14 left) but the data does not."""
+        sql = (MIGRATIONS_DIR / "22_down.surrealql").read_text()
+
+        for field in EPISODE_LEGACY_FIELDS:
+            assert (
+                f"DEFINE FIELD OVERWRITE {field} ON TABLE episode_profile"
+                f" TYPE option<string>" in sql
+            )
+        for field in SPEAKER_LEGACY_FIELDS:
+            assert (
+                f"DEFINE FIELD OVERWRITE {field} ON TABLE speaker_profile"
+                f" TYPE option<string>" in sql
+            )
+
+
+class TestLegacyFieldsGone:
+    def test_pydantic_models_dropped_legacy_fields(self):
+        from open_notebook.podcasts.models import EpisodeProfile, SpeakerProfile
+
+        for field in EPISODE_LEGACY_FIELDS:
+            assert field not in EpisodeProfile.model_fields
+            assert field not in EpisodeProfile.nullable_fields
+        for field in SPEAKER_LEGACY_FIELDS:
+            assert field not in SpeakerProfile.model_fields
+            assert field not in SpeakerProfile.nullable_fields
+
+    def test_startup_data_migration_module_is_gone(self):
+        with pytest.raises(ImportError):
+            import open_notebook.podcasts.migration  # noqa: F401
+
+    def test_api_lifespan_no_longer_calls_podcast_migration(self):
+        source = Path("api/main.py").read_text()
+        assert "migrate_podcast_profiles" not in source

From d009b5e365eabfd9a125fb3b129619913728bbf8 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 14:57:54 -0300
Subject: [PATCH 206/345] fix(podcasts): render EpisodeCard model details from
 resolved model references (#1115)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Since #1112 dropped the legacy provider/model strings, EpisodeCard's outline,
transcript and speaker rows showed "— / —" for new episodes. The API now
resolves the snapshot's model references (outline_llm/transcript_llm/voice_model)
to provider/name display fields at serialization time, batched into a single
query per request via Model.get_display_info_for_ids so listing episodes never
does a per-row model lookup. The card falls back to the legacy snapshot strings
for old episodes and degrades to a dash when a referenced model was deleted.

Closes #1114
---
 CHANGELOG.md                                  |   1 +
 api/routers/podcasts.py                       |  98 +++++-
 .../components/podcasts/EpisodeCard.test.tsx  | 137 ++++++++
 .../src/components/podcasts/EpisodeCard.tsx   |  40 ++-
 frontend/src/lib/types/podcasts.ts            |  12 +
 open_notebook/ai/models.py                    |  42 ++-
 .../test_podcast_episode_model_resolution.py  | 316 ++++++++++++++++++
 7 files changed, 633 insertions(+), 13 deletions(-)
 create mode 100644 frontend/src/components/podcasts/EpisodeCard.test.tsx
 create mode 100644 tests/test_podcast_episode_model_resolution.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 964c088a..5172a142 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The legacy provider/model string fields on podcast profiles (`outline_provider`, `outline_model`, `transcript_provider`, `transcript_model` on episode profiles; `tts_provider`, `tts_model` on speaker profiles) are gone from the database, the API and the UI — the app has ignored them since the Model registry references landed in v1.11. Migration 22 first best-effort maps any profile whose `outline_llm`/`transcript_llm`/`voice_model` reference is still empty to an existing model record (matching provider + name + type; no auto-creation, since a migration must not touch credentials), then drops the six columns; the startup data migration that used to retry this mapping on every boot (`open_notebook/podcasts/migration.py`) was deleted. Accepted trade-off: profiles whose mapping never converged (e.g. the provider credential was never configured) lose the legacy strings and stay unresolved — they were already non-functional and the UI already flags them as needing model selection, so you just re-pick the models in the profile form once (#1107)
 
 ### Fixed
+- Podcast episode cards no longer show "— / —" for the outline, transcript and speaker model rows on new episodes: the API now resolves the snapshot's model references (`outline_llm`/`transcript_llm`/`voice_model`) to provider/name display fields at serialization time — batched into a single query per request, so listing episodes never does a per-row model lookup — and the card falls back to the legacy snapshot strings for old episodes and degrades to "—" when a referenced model was deleted (#1114)
 - Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)
 - Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
 - Source insights now get `created`/`updated` timestamps stamped at creation (migration 19 mirrors the defaults used by the other tables), and the insights API returns `null` — instead of the literal string `"None"` — for legacy insights that predate the migration (#1045)
diff --git a/api/routers/podcasts.py b/api/routers/podcasts.py
index 3a033589..e055412b 100644
--- a/api/routers/podcasts.py
+++ b/api/routers/podcasts.py
@@ -10,12 +10,79 @@ from api.podcast_service import (
     PodcastGenerationResponse,
     PodcastService,
 )
+from open_notebook.ai.models import Model
 from open_notebook.exceptions import OpenNotebookError
 from open_notebook.podcasts.audio_paths import resolve_contained_audio_path
 from open_notebook.podcasts.models import PodcastEpisode
 
 router = APIRouter()
 
+# Model reference fields stored in the denormalized profile snapshots on an
+# episode, mapped to the resolved display fields the frontend renders
+# ("provider / name" rows in EpisodeCard). Mirrors the speaker_config ->
+# speaker_config_name precedent in api/routers/episode_profiles.py.
+_EPISODE_PROFILE_MODEL_FIELDS = {
+    "outline_llm": ("outline_model_provider", "outline_model_name"),
+    "transcript_llm": ("transcript_model_provider", "transcript_model_name"),
+}
+_SPEAKER_PROFILE_MODEL_FIELDS = {
+    "voice_model": ("voice_model_provider", "voice_model_name"),
+}
+
+
+def _collect_snapshot_model_ids(episodes: List[PodcastEpisode]) -> List[str]:
+    """Collect the distinct model record IDs referenced by episode snapshots."""
+    ids = set()
+    for episode in episodes:
+        for field in _EPISODE_PROFILE_MODEL_FIELDS:
+            ref = (episode.episode_profile or {}).get(field)
+            if ref:
+                ids.add(str(ref))
+        for field in _SPEAKER_PROFILE_MODEL_FIELDS:
+            ref = (episode.speaker_profile or {}).get(field)
+            if ref:
+                ids.add(str(ref))
+    return sorted(ids)
+
+
+def _with_resolved_model_fields(
+    snapshot: dict,
+    field_map: dict,
+    models_by_id: dict,
+) -> dict:
+    """Return a copy of a profile snapshot with resolved model display fields.
+
+    Only sets the display fields when the reference resolves; unresolvable
+    references (deleted model) and legacy snapshots without references are
+    left untouched so the frontend can fall back to the historical
+    provider/model strings, then to a placeholder.
+    """
+    enriched = dict(snapshot or {})
+    for ref_field, (provider_field, name_field) in field_map.items():
+        ref = enriched.get(ref_field)
+        info = models_by_id.get(str(ref)) if ref else None
+        if info:
+            enriched[provider_field] = info["provider"]
+            enriched[name_field] = info["name"]
+    return enriched
+
+
+async def _resolve_snapshot_models(
+    episodes: List[PodcastEpisode],
+) -> dict:
+    """Batch-resolve every model reference in the episodes' snapshots.
+
+    One query for the whole list (see Model.get_display_info_for_ids) - a
+    failure degrades to no resolved fields rather than failing the request.
+    """
+    try:
+        return await Model.get_display_info_for_ids(
+            _collect_snapshot_model_ids(episodes)
+        )
+    except Exception as e:
+        logger.warning(f"Error batch-resolving snapshot model references: {str(e)}")
+        return {}
+
 
 def _delete_episode_audio(episode: PodcastEpisode, episode_id: str) -> None:
     """Best-effort unlink of an episode's audio file, refusing invalid paths.
@@ -124,6 +191,11 @@ async def list_podcast_episodes():
             logger.warning(f"Error batch-fetching podcast job statuses: {str(e)}")
             details_by_command = {}
 
+        # Batch-resolve the snapshots' model references (outline_llm,
+        # transcript_llm, voice_model) to display fields in one query
+        # instead of one lookup per episode.
+        models_by_id = await _resolve_snapshot_models(episodes)
+
         response_episodes = []
         for episode in episodes:
             # Skip incomplete episodes without command or audio
@@ -153,8 +225,16 @@ async def list_podcast_episodes():
                 PodcastEpisodeResponse(
                     id=str(episode.id),
                     name=episode.name,
-                    episode_profile=episode.episode_profile,
-                    speaker_profile=episode.speaker_profile,
+                    episode_profile=_with_resolved_model_fields(
+                        episode.episode_profile,
+                        _EPISODE_PROFILE_MODEL_FIELDS,
+                        models_by_id,
+                    ),
+                    speaker_profile=_with_resolved_model_fields(
+                        episode.speaker_profile,
+                        _SPEAKER_PROFILE_MODEL_FIELDS,
+                        models_by_id,
+                    ),
                     briefing=episode.briefing,
                     audio_file=episode.audio_file,
                     audio_url=audio_url,
@@ -204,11 +284,21 @@ async def get_podcast_episode(episode_id: str):
         if audio_path is not None and audio_path.exists():
             audio_url = f"/api/podcasts/episodes/{episode.id}/audio"
 
+        models_by_id = await _resolve_snapshot_models([episode])
+
         return PodcastEpisodeResponse(
             id=str(episode.id),
             name=episode.name,
-            episode_profile=episode.episode_profile,
-            speaker_profile=episode.speaker_profile,
+            episode_profile=_with_resolved_model_fields(
+                episode.episode_profile,
+                _EPISODE_PROFILE_MODEL_FIELDS,
+                models_by_id,
+            ),
+            speaker_profile=_with_resolved_model_fields(
+                episode.speaker_profile,
+                _SPEAKER_PROFILE_MODEL_FIELDS,
+                models_by_id,
+            ),
             briefing=episode.briefing,
             audio_file=episode.audio_file,
             audio_url=audio_url,
diff --git a/frontend/src/components/podcasts/EpisodeCard.test.tsx b/frontend/src/components/podcasts/EpisodeCard.test.tsx
new file mode 100644
index 00000000..bc2dabef
--- /dev/null
+++ b/frontend/src/components/podcasts/EpisodeCard.test.tsx
@@ -0,0 +1,137 @@
+import { describe, it, expect, vi } from 'vitest'
+import { render, screen, fireEvent } from '@testing-library/react'
+
+import { EpisodeCard } from './EpisodeCard'
+import type { PodcastEpisode } from '@/lib/types/podcasts'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/api/client', () => ({
+  default: { get: vi.fn() },
+}))
+
+vi.mock('@/lib/api/podcasts', () => ({
+  resolvePodcastAssetUrl: vi.fn(async () => undefined),
+}))
+
+function makeEpisode(overrides: Partial<PodcastEpisode> = {}): PodcastEpisode {
+  return {
+    id: 'episode:1',
+    name: 'Test Episode',
+    episode_profile: {
+      id: 'episode_profile:1',
+      name: 'default',
+      description: '',
+      speaker_config: null,
+      default_briefing: '',
+      num_segments: 5,
+    },
+    speaker_profile: {
+      id: 'speaker_profile:1',
+      name: 'default',
+      description: '',
+      speakers: [],
+    },
+    briefing: 'briefing',
+    job_status: 'completed',
+    ...overrides,
+  }
+}
+
+function renderAndOpenDetails(episode: PodcastEpisode) {
+  render(<EpisodeCard episode={episode} onDelete={vi.fn()} />)
+  fireEvent.click(screen.getByText('podcasts.details'))
+}
+
+describe('EpisodeCard model details', () => {
+  it('renders API-resolved model display fields for new episodes', () => {
+    renderAndOpenDetails(
+      makeEpisode({
+        episode_profile: {
+          id: 'episode_profile:1',
+          name: 'modern',
+          description: '',
+          speaker_config: null,
+          default_briefing: '',
+          num_segments: 5,
+          outline_llm: 'model:outline',
+          transcript_llm: 'model:transcript',
+          outline_model_provider: 'openai',
+          outline_model_name: 'gpt-4o',
+          transcript_model_provider: 'anthropic',
+          transcript_model_name: 'claude-sonnet',
+        },
+        speaker_profile: {
+          id: 'speaker_profile:1',
+          name: 'modern',
+          description: '',
+          speakers: [],
+          voice_model: 'model:voice',
+          voice_model_provider: 'elevenlabs',
+          voice_model_name: 'eleven_turbo',
+        },
+      })
+    )
+
+    expect(screen.getByText('openai / gpt-4o')).toBeInTheDocument()
+    expect(screen.getByText('anthropic / claude-sonnet')).toBeInTheDocument()
+    expect(screen.getByText('elevenlabs / eleven_turbo')).toBeInTheDocument()
+  })
+
+  it('falls back to legacy snapshot strings for old episodes', () => {
+    renderAndOpenDetails(
+      makeEpisode({
+        episode_profile: {
+          id: 'episode_profile:1',
+          name: 'legacy',
+          description: '',
+          speaker_config: null,
+          default_briefing: '',
+          num_segments: 5,
+          outline_provider: 'openai',
+          outline_model: 'gpt-3.5-turbo',
+          transcript_provider: 'openai',
+          transcript_model: 'gpt-4',
+        },
+        speaker_profile: {
+          id: 'speaker_profile:1',
+          name: 'legacy',
+          description: '',
+          speakers: [],
+          tts_provider: 'openai',
+          tts_model: 'tts-1',
+        },
+      })
+    )
+
+    expect(screen.getByText('openai / gpt-3.5-turbo')).toBeInTheDocument()
+    expect(screen.getByText('openai / gpt-4')).toBeInTheDocument()
+    expect(screen.getByText('openai / tts-1')).toBeInTheDocument()
+  })
+
+  it('degrades to dashes when references are unresolvable and no legacy strings exist', () => {
+    renderAndOpenDetails(
+      makeEpisode({
+        episode_profile: {
+          id: 'episode_profile:1',
+          name: 'orphaned',
+          description: '',
+          speaker_config: null,
+          default_briefing: '',
+          num_segments: 5,
+          outline_llm: 'model:deleted',
+          transcript_llm: 'model:deleted',
+        },
+        speaker_profile: {
+          id: 'speaker_profile:1',
+          name: 'orphaned',
+          description: '',
+          speakers: [],
+          voice_model: 'model:deleted',
+        },
+      })
+    )
+
+    expect(screen.getAllByText('— / —')).toHaveLength(3)
+  })
+})
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index 4236f721..bad6df16 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -129,6 +129,20 @@ function extractOutlineSegments(outline: unknown): OutlineSegment[] {
   return []
 }
 
+/**
+ * "provider / name" label for a snapshot model row. Prefers the display
+ * fields the API resolves from the snapshot's model references, falls back
+ * to the legacy snapshot strings (pre-#1107 episodes), then to a dash.
+ */
+function formatModelLabel(
+  provider?: string | null,
+  name?: string | null,
+  legacyProvider?: string | null,
+  legacyName?: string | null
+): string {
+  return `${provider || legacyProvider || '—'} / ${name || legacyName || '—'}`
+}
+
 function extractTranscriptEntries(transcript: unknown): TranscriptEntry[] {
   if (transcript && typeof transcript === 'object' && 'transcript' in transcript) {
     const data = transcript as TranscriptData
@@ -264,17 +278,23 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                               <div>
                                 <p className="text-muted-foreground">{t('podcasts.outlineModel')}</p>
                                 <p>
-                                  {episode.episode_profile?.outline_provider ?? '—'} /
-                                  {' '}
-                                  {episode.episode_profile?.outline_model ?? '—'}
+                                  {formatModelLabel(
+                                    episode.episode_profile?.outline_model_provider,
+                                    episode.episode_profile?.outline_model_name,
+                                    episode.episode_profile?.outline_provider,
+                                    episode.episode_profile?.outline_model
+                                  )}
                                 </p>
                               </div>
                               <div>
                                 <p className="text-muted-foreground">{t('podcasts.transcriptModel')}</p>
                                 <p>
-                                  {episode.episode_profile?.transcript_provider ?? '—'} /
-                                  {' '}
-                                  {episode.episode_profile?.transcript_model ?? '—'}
+                                  {formatModelLabel(
+                                    episode.episode_profile?.transcript_model_provider,
+                                    episode.episode_profile?.transcript_model_name,
+                                    episode.episode_profile?.transcript_provider,
+                                    episode.episode_profile?.transcript_model
+                                  )}
                                 </p>
                               </div>
                               <div>
@@ -292,8 +312,12 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                           <section className="space-y-2">
                             <h4 className="text-sm font-semibold text-foreground">{t('podcasts.speakerProfile')}</h4>
                             <p className="text-xs text-muted-foreground">
-                              {episode.speaker_profile?.tts_provider ?? '—'} /{' '}
-                              {episode.speaker_profile?.tts_model ?? '—'}
+                              {formatModelLabel(
+                                episode.speaker_profile?.voice_model_provider,
+                                episode.speaker_profile?.voice_model_name,
+                                episode.speaker_profile?.tts_provider,
+                                episode.speaker_profile?.tts_model
+                              )}
                             </p>
                             {episode.speaker_profile?.speakers?.map((speaker, index) => (
                               <div
diff --git a/frontend/src/lib/types/podcasts.ts b/frontend/src/lib/types/podcasts.ts
index f1054fe9..f75fb60e 100644
--- a/frontend/src/lib/types/podcasts.ts
+++ b/frontend/src/lib/types/podcasts.ts
@@ -43,18 +43,30 @@ export interface SpeakerProfile {
  * Historical profile snapshot stored on an episode at generation time.
  * Episodes generated before the legacy provider/model strings were dropped
  * (#1107) may still carry them in the snapshot; newer episodes won't.
+ *
+ * The `*_model_provider` / `*_model_name` fields are resolved by the API at
+ * serialization time from the snapshot's model record references
+ * (outline_llm / transcript_llm / voice_model), batched per request. They
+ * are absent when the reference is missing or no longer resolves (deleted
+ * model) — fall back to the legacy strings, then to a placeholder.
  */
 export interface EpisodeProfileSnapshot extends EpisodeProfile {
   outline_provider?: string | null
   outline_model?: string | null
   transcript_provider?: string | null
   transcript_model?: string | null
+  outline_model_provider?: string | null
+  outline_model_name?: string | null
+  transcript_model_provider?: string | null
+  transcript_model_name?: string | null
 }
 
 /** See EpisodeProfileSnapshot. */
 export interface SpeakerProfileSnapshot extends SpeakerProfile {
   tts_provider?: string | null
   tts_model?: string | null
+  voice_model_provider?: string | null
+  voice_model_name?: string | null
 }
 
 export interface Language {
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 9d4d9ee9..d84ffa89 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -1,4 +1,4 @@
-from typing import Any, ClassVar, Dict, Optional, Union
+from typing import Any, ClassVar, Dict, Optional, Sequence, Union
 
 from esperanto import (
     AIFactory,
@@ -8,6 +8,7 @@ from esperanto import (
     TextToSpeechModel,
 )
 from loguru import logger
+from surrealdb import RecordID
 
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel, RecordModel
@@ -64,6 +65,45 @@ class Model(ObjectModel):
         )
         return [Model(**model) for model in models]
 
+    @classmethod
+    async def get_display_info_for_ids(
+        cls, model_ids: Sequence[Union[str, RecordID]]
+    ) -> Dict[str, Dict[str, str]]:
+        """
+        Batch-fetch {provider, name} display info for many model IDs in one
+        query.
+
+        Episode listing resolves the model references stored in the
+        denormalized episode/speaker profile snapshots (outline_llm,
+        transcript_llm, voice_model) into human-readable display fields.
+        Doing that with Model.get() would cost one round trip per reference
+        per episode (no connection pooling in the repository layer) - this
+        collects the distinct IDs and resolves them in a single query,
+        mirroring PodcastEpisode.get_job_details_for_commands().
+
+        Unresolvable IDs (deleted models) are simply absent from the result;
+        a total query failure returns an empty dict so display resolution
+        degrades gracefully instead of breaking the caller.
+        """
+        ids = sorted({str(mid) for mid in model_ids if mid})
+        grouped: Dict[str, Dict[str, str]] = {}
+        if not ids:
+            return grouped
+        try:
+            result = await repo_query(
+                "SELECT id, name, provider FROM model WHERE id IN $model_ids",
+                {"model_ids": [ensure_record_id(mid) for mid in ids]},
+            )
+        except Exception as e:
+            logger.error(f"Error batch-fetching model display info: {e}")
+            return grouped
+        for row in result:
+            grouped[str(row.get("id"))] = {
+                "provider": row.get("provider", ""),
+                "name": row.get("name", ""),
+            }
+        return grouped
+
     @classmethod
     async def get_by_credential(cls, credential_id: str):
         """Get all models linked to a specific credential."""
diff --git a/tests/test_podcast_episode_model_resolution.py b/tests/test_podcast_episode_model_resolution.py
new file mode 100644
index 00000000..8e4f63dd
--- /dev/null
+++ b/tests/test_podcast_episode_model_resolution.py
@@ -0,0 +1,316 @@
+"""
+Tests for episode snapshot model resolution (#1114).
+
+Episode snapshots reference models by record ID (outline_llm, transcript_llm,
+voice_model) since the legacy provider/model strings were dropped (#1112).
+The podcast endpoints resolve those references to display fields
+(outline_model_provider/outline_model_name etc.) at serialization time,
+batched into one query per request (Model.get_display_info_for_ids) so a
+page of episodes never triggers a per-row model lookup.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+
+from api.routers.podcasts import get_podcast_episode, list_podcast_episodes
+from open_notebook.ai.models import Model
+from open_notebook.podcasts.models import PodcastEpisode
+
+MODEL_INFO = {
+    "model:outline": {"provider": "openai", "name": "gpt-4o"},
+    "model:transcript": {"provider": "anthropic", "name": "claude-sonnet"},
+    "model:voice": {"provider": "elevenlabs", "name": "eleven_turbo"},
+}
+
+
+def make_episode(episode_profile=None, speaker_profile=None, **overrides):
+    defaults = dict(
+        id=f"episode:{overrides.pop('suffix', 'x')}",
+        name="Test Episode",
+        episode_profile=episode_profile or {"name": "default"},
+        speaker_profile=speaker_profile or {"name": "default"},
+        briefing="briefing",
+        content="content",
+        command="command:job",
+        audio_file=None,
+    )
+    defaults.update(overrides)
+    return PodcastEpisode(**defaults)
+
+
+def referenced_episode(suffix="ref"):
+    return make_episode(
+        suffix=suffix,
+        episode_profile={
+            "name": "modern",
+            "outline_llm": "model:outline",
+            "transcript_llm": "model:transcript",
+        },
+        speaker_profile={"name": "modern", "voice_model": "model:voice"},
+    )
+
+
+def legacy_episode(suffix="legacy"):
+    return make_episode(
+        suffix=suffix,
+        episode_profile={
+            "name": "legacy",
+            "outline_provider": "openai",
+            "outline_model": "gpt-3.5-turbo",
+            "transcript_provider": "openai",
+            "transcript_model": "gpt-4",
+        },
+        speaker_profile={
+            "name": "legacy",
+            "tts_provider": "openai",
+            "tts_model": "tts-1",
+        },
+    )
+
+
+def unresolvable_episode(suffix="gone"):
+    return make_episode(
+        suffix=suffix,
+        episode_profile={
+            "name": "orphaned",
+            "outline_llm": "model:deleted",
+            "transcript_llm": "model:deleted",
+        },
+        speaker_profile={"name": "orphaned", "voice_model": "model:deleted"},
+    )
+
+
+class TestGetDisplayInfoForIdsUnit:
+    @pytest.mark.asyncio
+    async def test_empty_input_returns_empty_without_querying(self):
+        with patch(
+            "open_notebook.ai.models.repo_query", new=AsyncMock()
+        ) as mock_query:
+            result = await Model.get_display_info_for_ids([])
+        assert result == {}
+        mock_query.assert_not_called()
+
+    @pytest.mark.asyncio
+    async def test_single_query_for_multiple_ids(self):
+        fake_rows = [
+            {"id": "model:outline", "name": "gpt-4o", "provider": "openai"},
+            {"id": "model:voice", "name": "eleven_turbo", "provider": "elevenlabs"},
+        ]
+        with patch(
+            "open_notebook.ai.models.repo_query",
+            new=AsyncMock(return_value=fake_rows),
+        ) as mock_query:
+            result = await Model.get_display_info_for_ids(
+                ["model:outline", "model:voice"]
+            )
+
+        mock_query.assert_awaited_once()
+        assert result == {
+            "model:outline": {"provider": "openai", "name": "gpt-4o"},
+            "model:voice": {"provider": "elevenlabs", "name": "eleven_turbo"},
+        }
+
+    @pytest.mark.asyncio
+    async def test_duplicate_and_falsy_ids_are_deduped_and_filtered(self):
+        with patch(
+            "open_notebook.ai.models.repo_query", new=AsyncMock(return_value=[])
+        ) as mock_query:
+            await Model.get_display_info_for_ids(
+                ["model:outline", "model:outline", None, ""]  # type: ignore[list-item]
+            )
+
+        bound_vars = mock_query.call_args.args[1]
+        assert len(bound_vars["model_ids"]) == 1
+
+    @pytest.mark.asyncio
+    async def test_query_failure_returns_empty_dict_rather_than_raising(self):
+        with patch(
+            "open_notebook.ai.models.repo_query",
+            new=AsyncMock(side_effect=RuntimeError("db down")),
+        ):
+            result = await Model.get_display_info_for_ids(["model:outline"])
+        assert result == {}
+
+    @pytest.mark.asyncio
+    async def test_unresolvable_ids_are_absent_from_result(self):
+        with patch(
+            "open_notebook.ai.models.repo_query",
+            new=AsyncMock(
+                return_value=[
+                    {"id": "model:outline", "name": "gpt-4o", "provider": "openai"}
+                ]
+            ),
+        ):
+            result = await Model.get_display_info_for_ids(
+                ["model:outline", "model:deleted"]
+            )
+        assert "model:deleted" not in result
+        assert "model:outline" in result
+
+
+def _list_patches(episodes, display_info=MODEL_INFO):
+    """Common patch set: episodes list, job-status batch, model batch."""
+    return (
+        patch(
+            "api.routers.podcasts.PodcastService.list_episodes",
+            new=AsyncMock(return_value=episodes),
+        ),
+        patch.object(
+            PodcastEpisode,
+            "get_job_details_for_commands",
+            new=AsyncMock(return_value={}),
+        ),
+        patch.object(
+            Model,
+            "get_display_info_for_ids",
+            new=AsyncMock(return_value=display_info),
+        ),
+    )
+
+
+class TestListEpisodesModelResolution:
+    @pytest.mark.asyncio
+    async def test_referenced_episode_gets_resolved_display_fields(self):
+        patches = _list_patches([referenced_episode()])
+        with patches[0], patches[1], patches[2]:
+            response = await list_podcast_episodes()
+
+        ep = response[0].episode_profile
+        sp = response[0].speaker_profile
+        assert ep["outline_model_provider"] == "openai"
+        assert ep["outline_model_name"] == "gpt-4o"
+        assert ep["transcript_model_provider"] == "anthropic"
+        assert ep["transcript_model_name"] == "claude-sonnet"
+        assert sp["voice_model_provider"] == "elevenlabs"
+        assert sp["voice_model_name"] == "eleven_turbo"
+
+    @pytest.mark.asyncio
+    async def test_legacy_episode_keeps_historical_strings_untouched(self):
+        patches = _list_patches([legacy_episode()])
+        with patches[0], patches[1], patches[2]:
+            response = await list_podcast_episodes()
+
+        ep = response[0].episode_profile
+        sp = response[0].speaker_profile
+        # Legacy strings survive; no resolved fields are invented.
+        assert ep["outline_provider"] == "openai"
+        assert ep["outline_model"] == "gpt-3.5-turbo"
+        assert "outline_model_provider" not in ep
+        assert "transcript_model_name" not in ep
+        assert sp["tts_provider"] == "openai"
+        assert "voice_model_name" not in sp
+
+    @pytest.mark.asyncio
+    async def test_unresolvable_reference_leaves_display_fields_absent(self):
+        patches = _list_patches([unresolvable_episode()])
+        with patches[0], patches[1], patches[2]:
+            response = await list_podcast_episodes()
+
+        ep = response[0].episode_profile
+        sp = response[0].speaker_profile
+        assert ep["outline_llm"] == "model:deleted"
+        assert "outline_model_provider" not in ep
+        assert "transcript_model_provider" not in ep
+        assert "voice_model_provider" not in sp
+
+    @pytest.mark.asyncio
+    async def test_mixed_page_resolves_each_episode_appropriately(self):
+        episodes = [
+            referenced_episode("1"),
+            legacy_episode("2"),
+            unresolvable_episode("3"),
+        ]
+        patches = _list_patches(episodes)
+        with patches[0], patches[1], patches[2]:
+            response = await list_podcast_episodes()
+
+        assert len(response) == 3
+        assert response[0].episode_profile["outline_model_name"] == "gpt-4o"
+        assert response[1].episode_profile["outline_model"] == "gpt-3.5-turbo"
+        assert "outline_model_name" not in response[2].episode_profile
+
+    @pytest.mark.asyncio
+    async def test_batch_method_called_once_and_no_per_episode_model_get(self):
+        """The N+1 guard: one batched resolution for the whole page, never a
+        Model.get() per episode/reference."""
+        episodes = [referenced_episode(str(i)) for i in range(5)]
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=episodes),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value={}),
+            ),
+            patch.object(
+                Model,
+                "get_display_info_for_ids",
+                new=AsyncMock(return_value=MODEL_INFO),
+            ) as mock_batch,
+            patch.object(Model, "get", new=AsyncMock()) as mock_get,
+        ):
+            response = await list_podcast_episodes()
+
+        mock_batch.assert_awaited_once()
+        mock_get.assert_not_called()
+        assert len(response) == 5
+        # Distinct references across the page collapse into one sorted list.
+        (ids,) = mock_batch.call_args.args
+        assert ids == ["model:outline", "model:transcript", "model:voice"]
+
+    @pytest.mark.asyncio
+    async def test_resolution_failure_degrades_to_unresolved_fields(self):
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.list_episodes",
+                new=AsyncMock(return_value=[referenced_episode()]),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_details_for_commands",
+                new=AsyncMock(return_value={}),
+            ),
+            patch.object(
+                Model,
+                "get_display_info_for_ids",
+                new=AsyncMock(side_effect=RuntimeError("db down")),
+            ),
+        ):
+            response = await list_podcast_episodes()
+
+        assert len(response) == 1
+        assert "outline_model_provider" not in response[0].episode_profile
+
+
+class TestGetEpisodeModelResolution:
+    @pytest.mark.asyncio
+    async def test_single_episode_gets_resolved_display_fields(self):
+        episode = referenced_episode()
+
+        with (
+            patch(
+                "api.routers.podcasts.PodcastService.get_episode",
+                new=AsyncMock(return_value=episode),
+            ),
+            patch.object(
+                PodcastEpisode,
+                "get_job_detail",
+                new=AsyncMock(
+                    return_value={"status": "completed", "error_message": None}
+                ),
+            ),
+            patch.object(
+                Model,
+                "get_display_info_for_ids",
+                new=AsyncMock(return_value=MODEL_INFO),
+            ) as mock_batch,
+        ):
+            response = await get_podcast_episode("episode:ref")
+
+        mock_batch.assert_awaited_once()
+        assert response.episode_profile["outline_model_name"] == "gpt-4o"
+        assert response.speaker_profile["voice_model_provider"] == "elevenlabs"

From 3a509a05a09ce31c0e9e7f58ef727b2462820c51 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 18:08:25 -0300
Subject: [PATCH 207/345] chore(sources): upgrade to content-core 2.x (core
 migration) (#1116)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* chore(sources): upgrade to content-core 2.x

Bump content-core 1.14.x -> 2.0.4 and adapt the source graph to the new
keyword-only extract_content API.

- extract_content is now keyword-only; engine/model overrides move to
  ContentCoreConfig (audio model still sourced from Default Models).
- ProcessSourceState was removed; the graph now consumes ExtractionOutput,
  which no longer echoes url/file_path back — carry those from the input
  state into the saved Asset.
- content-core 2.x no longer deletes the uploaded source file, so honor
  delete_source on our side after a successful extraction.
- drop the obsolete output_format param (markdown is the default).

pymupdf (AGPL) is replaced transitively by pdfplumber (MIT); moviepy is
gone (direct ffmpeg), which fixes MP3-with-chapters audio.

Part of #939.

* docs(changelog): note content-core 2.x upgrade (#1103)

* fix(sources): wire YouTube transcript language preferences into ContentCoreConfig

content-core's default youtube_languages is only en/es/pt. Pass the broader
list Open Notebook has always intended so non-English videos still resolve a
transcript. (cubic P2 on #1116)
---
 CHANGELOG.md                   |   1 +
 open_notebook/graphs/source.py | 117 +++++++++++++++----------
 pyproject.toml                 |   2 +-
 tests/test_graphs.py           | 156 +++++++++++++++++++++++++++------
 uv.lock                        | 104 ++++++++++++++++------
 5 files changed, 276 insertions(+), 104 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5172a142..f02c85c8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Upgraded the content extraction dependency from content-core 1.14.x to 2.x (2.0.4). The source-processing graph was adapted to content-core's new keyword-only `extract_content()` API: engine/model overrides now travel through a `ContentCoreConfig` object instead of the input dict, and the extraction result (`ExtractionOutput`) no longer echoes the source `url`/`file_path` back, so those are carried from the request state into the saved source asset. Because content-core 2.x no longer deletes the uploaded file after extraction, the graph now honors the `delete_source` flag itself. Transitively this replaces the AGPL-licensed PyMuPDF with MIT-licensed pdfplumber for PDF extraction and drops moviepy in favor of direct ffmpeg calls (which fixes audio extraction from MP3 files carrying chapter metadata). No user-facing configuration changes in this step — document and URL engines stay on their `auto` defaults; new engine/OCR options are tracked separately under #939 (#1103)
 - Podcast episode audio paths are now stored relative to the podcasts folder (`episodes/<uuid>/audio/<name>.mp3`) instead of as absolute filesystem paths, validated at write time so the database can never hold an absolute or root-escaping value, and resolved + containment-checked through a single shared helper instead of per-endpoint guards. Migration 21 converts existing rows written under the known roots (plain `file:///` URIs, `/app/data/podcasts/`, `/data/podcasts/`, `./data/podcasts/`, `data/podcasts/`); previously generated episodes now survive a `DATA_FOLDER` relocation. Rows under any other root (e.g. a source checkout at a custom absolute path) or in exotic legacy forms (percent-encoded or host-qualified `file://` URIs) are left untouched and treated as legacy-invalid — the same 403/audio-unavailable handling out-of-root rows already had; regenerate the episode to restore playback. Podcast jobs whose audio combination fails (podcast-creator reports an in-band `ERROR:` value) now fail with the real ffmpeg/clip error instead of reporting success for an episode with no playable audio (#1030)
 - The source detail view (dialog and full page) now fetches through the shared `useSource` React Query hook instead of a hand-rolled fetch, matching the insight/note dialogs: caching and the never-retry-404 policy come from React Query, title edits and deletes go through the shared mutation hooks (so source lists refresh and a deleted source can't be served from the cache), and the `key={sourceId}` remount workaround on the parents was removed — the component resets its own per-source UI state (#1106)
 - The settings frontend now fetches the provider list from `GET /api/providers` (cached for the session) instead of keeping its own hardcoded provider tables, so adding a provider to the backend registry needs zero frontend edits: unknown modalities render with a fallback icon, the backend registry owns the display order, and the regex-based frontend/backend sync test was removed along with the duplicated tables in `frontend/src/lib/providers.tsx` (#1082)
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index 65f3062c..a1b450b1 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -1,8 +1,9 @@
 import operator
+import os
 from typing import Any, Dict, List, Optional
 
-from content_core import extract_content
-from content_core.common import ProcessSourceState
+from content_core import ContentCoreConfig, extract_content
+from content_core.common import ExtractionOutput
 from langchain_core.runnables import RunnableConfig
 from langgraph.graph import END, START, StateGraph
 from langgraph.types import Send
@@ -10,14 +11,31 @@ from loguru import logger
 from typing_extensions import Annotated, TypedDict
 
 from open_notebook.ai.models import Model, ModelManager
-from open_notebook.domain.content_settings import ContentSettings
 from open_notebook.domain.notebook import Asset, Source
 from open_notebook.domain.transformation import Transformation
 from open_notebook.graphs.transformation import graph as transform_graph
 
+# Preferred languages for YouTube transcript selection. content-core's own
+# default is only ["en", "es", "pt"]; we keep the broader list Open Notebook has
+# always intended so non-English videos still resolve a transcript.
+YOUTUBE_PREFERRED_LANGUAGES = [
+    "en",
+    "pt",
+    "es",
+    "de",
+    "nl",
+    "en-GB",
+    "fr",
+    "hi",
+    "ja",
+]
+
 
 class SourceState(TypedDict):
-    content_state: ProcessSourceState
+    # Input describing what to extract: url / file_path / content / delete_source.
+    content_state: Dict[str, Any]
+    # Result of content-core extraction (does NOT echo url/file_path back).
+    extraction: ExtractionOutput
     apply_transformations: List[Transformation]
     source_id: str
     notebook_ids: List[str]
@@ -32,42 +50,23 @@ class TransformationState(TypedDict):
 
 
 async def content_process(state: SourceState) -> dict:
-    content_settings = ContentSettings(
-        default_content_processing_engine_doc="auto",
-        default_content_processing_engine_url="auto",
-        default_embedding_option="ask",
-        auto_delete_files="yes",
-        youtube_preferred_languages=[
-            "en",
-            "pt",
-            "es",
-            "de",
-            "nl",
-            "en-GB",
-            "fr",
-            "hi",
-            "ja",
-        ],
-    )
-    content_state: Dict[str, Any] = state["content_state"]  # type: ignore[assignment]
+    content_state: Dict[str, Any] = state["content_state"]
 
-    content_state["url_engine"] = (
-        content_settings.default_content_processing_engine_url or "auto"
-    )
-    content_state["document_engine"] = (
-        content_settings.default_content_processing_engine_doc or "auto"
-    )
-    content_state["output_format"] = "markdown"
-
-    # Add speech-to-text model configuration from Default Models
+    # content-core 2.x takes engine/model overrides via ContentCoreConfig
+    # (keyword-only), not inside the input dict. We leave document_engine and
+    # url_engine at their "auto" defaults (current behavior) and only override
+    # the speech-to-text model when a default is configured.
+    config_kwargs: Dict[str, Any] = {
+        "youtube_languages": YOUTUBE_PREFERRED_LANGUAGES,
+    }
     try:
         model_manager = ModelManager()
         defaults = await model_manager.get_defaults()
         if defaults.default_speech_to_text_model:
             stt_model = await Model.get(defaults.default_speech_to_text_model)
             if stt_model:
-                content_state["audio_provider"] = stt_model.provider
-                content_state["audio_model"] = stt_model.name
+                config_kwargs["audio_provider"] = stt_model.provider
+                config_kwargs["audio_model"] = stt_model.name
                 logger.debug(
                     f"Using speech-to-text model: {stt_model.provider}/{stt_model.name}"
                 )
@@ -75,14 +74,22 @@ async def content_process(state: SourceState) -> dict:
         logger.warning(f"Failed to retrieve speech-to-text model configuration: {e}")
         # Continue without custom audio model (content-core will use its default)
 
-    processed_state = await extract_content(content_state)
+    config = ContentCoreConfig(**config_kwargs) if config_kwargs else None
+
+    processed = await extract_content(
+        url=content_state.get("url"),
+        file_path=content_state.get("file_path"),
+        content=content_state.get("content"),
+        config=config,
+    )
 
     # content-core signals a soft extraction failure (e.g. an unreachable or
-    # invalid URL) by returning title="Error" and content prefixed with
-    # "Failed to extract content:" instead of raising. Detect that sentinel and
-    # raise so the job is marked failed and the source becomes retryable, rather
-    # than being saved as a "completed" source whose body is the error string.
-    if processed_state.title == "Error" and (processed_state.content or "").startswith(
+    # invalid URL, via the bs4 fallback) by returning title="Error" and content
+    # prefixed with "Failed to extract content:" instead of raising. Detect that
+    # sentinel and raise so the job is marked failed and the source becomes
+    # retryable, rather than being saved as a "completed" source whose body is
+    # the error string.
+    if processed.title == "Error" and (processed.content or "").startswith(
         "Failed to extract content:"
     ):
         raise ValueError(
@@ -90,8 +97,8 @@ async def content_process(state: SourceState) -> dict:
             "The URL or file may be unreachable, invalid, or in an unsupported format."
         )
 
-    if not processed_state.content or not processed_state.content.strip():
-        url = processed_state.url or ""
+    if not processed.content or not processed.content.strip():
+        url = content_state.get("url") or ""
         if url and ("youtube.com" in url or "youtu.be" in url):
             raise ValueError(
                 "Could not extract content from this YouTube video. "
@@ -104,24 +111,40 @@ async def content_process(state: SourceState) -> dict:
             "The content may be empty, inaccessible, or in an unsupported format."
         )
 
-    return {"content_state": processed_state}
+    # content-core 2.x no longer deletes the uploaded source file after
+    # extraction (the delete_source flag it used to honor is gone). Preserve the
+    # previous auto-delete behavior on our side.
+    if content_state.get("delete_source") and content_state.get("file_path"):
+        file_path = content_state["file_path"]
+        try:
+            os.unlink(file_path)
+        except FileNotFoundError:
+            logger.warning(f"File not found while trying to delete: {file_path}")
+        except Exception as e:
+            logger.warning(f"Failed to delete source file {file_path}: {e}")
+
+    return {"extraction": processed}
 
 
 async def save_source(state: SourceState) -> dict:
     content_state = state["content_state"]
+    extraction = state["extraction"]
 
     # Get existing source using the provided source_id
     source = await Source.get(state["source_id"])
     if not source:
         raise ValueError(f"Source with ID {state['source_id']} not found")
 
-    # Update the source with processed content
-    source.asset = Asset(url=content_state.url, file_path=content_state.file_path)
-    source.full_text = content_state.content
+    # Update the source with processed content. content-core's ExtractionOutput
+    # does not echo url/file_path back, so carry them from the input state.
+    source.asset = Asset(
+        url=content_state.get("url"), file_path=content_state.get("file_path")
+    )
+    source.full_text = extraction.content
 
     # Preserve user-set title; only overwrite placeholder or empty titles
-    if content_state.title and (not source.title or source.title == "Processing..."):
-        source.title = content_state.title
+    if extraction.title and (not source.title or source.title == "Processing..."):
+        source.title = extraction.title
 
     await source.save()
 
diff --git a/pyproject.toml b/pyproject.toml
index b3c0ed4f..577ad8db 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
-    "content-core>=1.14.1,<2",
+    "content-core>=2.0.4,<3",
     "ai-prompter>=0.4,<1",
     "esperanto>=2.20.0,<3",
     "surrealdb>=1.0.4",
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 86abe2ea..84e6b666 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -166,7 +166,9 @@ class TestSaveSourceTitlePreservation:
     @pytest.mark.asyncio
     @patch("open_notebook.graphs.source.Source.get")
     async def test_custom_title_preserved(self, mock_get):
-        """User-set title is NOT overwritten by content_state.title."""
+        """User-set title is NOT overwritten by the extracted title."""
+        from content_core.common import ExtractionOutput
+
         from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
@@ -174,15 +176,10 @@ class TestSaveSourceTitlePreservation:
         mock_source.save = AsyncMock()
         mock_get.return_value = mock_source
 
-        content_state = MagicMock()
-        content_state.title = "video.mp4"
-        content_state.url = "https://example.com"
-        content_state.file_path = None
-        content_state.content = "Some content"
-
         state = {
             "source_id": "source:123",
-            "content_state": content_state,
+            "content_state": {"url": "https://example.com", "file_path": None},
+            "extraction": ExtractionOutput(title="video.mp4", content="Some content"),
             "embed": False,
             "apply_transformations": [],
         }
@@ -197,6 +194,8 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_placeholder_title_replaced(self, mock_get):
         """Placeholder 'Processing...' title IS replaced by extracted title."""
+        from content_core.common import ExtractionOutput
+
         from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
@@ -204,15 +203,12 @@ class TestSaveSourceTitlePreservation:
         mock_source.save = AsyncMock()
         mock_get.return_value = mock_source
 
-        content_state = MagicMock()
-        content_state.title = "Extracted Article Title"
-        content_state.url = "https://example.com"
-        content_state.file_path = None
-        content_state.content = "Some content"
-
         state = {
             "source_id": "source:123",
-            "content_state": content_state,
+            "content_state": {"url": "https://example.com", "file_path": None},
+            "extraction": ExtractionOutput(
+                title="Extracted Article Title", content="Some content"
+            ),
             "embed": False,
             "apply_transformations": [],
         }
@@ -227,6 +223,8 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_none_title_replaced(self, mock_get):
         """None title IS replaced by extracted title."""
+        from content_core.common import ExtractionOutput
+
         from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
@@ -234,15 +232,10 @@ class TestSaveSourceTitlePreservation:
         mock_source.save = AsyncMock()
         mock_get.return_value = mock_source
 
-        content_state = MagicMock()
-        content_state.title = "Extracted Title"
-        content_state.url = None
-        content_state.file_path = "/tmp/file.pdf"
-        content_state.content = "Content"
-
         state = {
             "source_id": "source:123",
-            "content_state": content_state,
+            "content_state": {"url": None, "file_path": "/tmp/file.pdf"},
+            "extraction": ExtractionOutput(title="Extracted Title", content="Content"),
             "embed": False,
             "apply_transformations": [],
         }
@@ -257,6 +250,8 @@ class TestSaveSourceTitlePreservation:
     @patch("open_notebook.graphs.source.Source.get")
     async def test_empty_title_replaced(self, mock_get):
         """Empty string title IS replaced by extracted title."""
+        from content_core.common import ExtractionOutput
+
         from open_notebook.graphs.source import SourceState, save_source
 
         mock_source = MagicMock(spec=Source)
@@ -264,15 +259,10 @@ class TestSaveSourceTitlePreservation:
         mock_source.save = AsyncMock()
         mock_get.return_value = mock_source
 
-        content_state = MagicMock()
-        content_state.title = "Extracted Title"
-        content_state.url = None
-        content_state.file_path = None
-        content_state.content = "Content"
-
         state = {
             "source_id": "source:123",
-            "content_state": content_state,
+            "content_state": {"url": None, "file_path": None},
+            "extraction": ExtractionOutput(title="Extracted Title", content="Content"),
             "embed": False,
             "apply_transformations": [],
         }
@@ -284,5 +274,113 @@ class TestSaveSourceTitlePreservation:
         mock_source.save.assert_awaited_once()
 
 
+# ============================================================================
+# TEST SUITE 5: Source Graph - content_process (content-core 2.x)
+# ============================================================================
+
+
+class TestContentProcessDeleteSource:
+    """content-core 2.x no longer deletes the uploaded file; the graph must."""
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_uploaded_file_deleted_when_flag_set(
+        self, mock_model_manager, mock_extract, tmp_path
+    ):
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        # No STT default configured -> no audio override, no DB access.
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_extract.return_value = ExtractionOutput(
+            title="Doc", content="extracted text"
+        )
+
+        uploaded = tmp_path / "upload.pdf"
+        uploaded.write_text("data")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"file_path": str(uploaded), "delete_source": True},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        result = await content_process(cast(SourceState, state))
+
+        assert result["extraction"].content == "extracted text"
+        assert not uploaded.exists()  # file removed by the graph
+        mock_extract.assert_awaited_once()
+        # The broader YouTube transcript language list is wired into the config
+        # (content-core's own default is only en/es/pt).
+        config = mock_extract.await_args.kwargs["config"]
+        assert "de" in config.youtube_languages
+        assert "ja" in config.youtube_languages
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_uploaded_file_kept_when_flag_not_set(
+        self, mock_model_manager, mock_extract, tmp_path
+    ):
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_extract.return_value = ExtractionOutput(title="Doc", content="text")
+
+        uploaded = tmp_path / "upload.pdf"
+        uploaded.write_text("data")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"file_path": str(uploaded), "delete_source": False},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        await content_process(cast(SourceState, state))
+
+        assert uploaded.exists()  # file preserved
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_empty_extraction_raises_valueerror(
+        self, mock_model_manager, mock_extract, tmp_path
+    ):
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_extract.return_value = ExtractionOutput(title="", content="   ")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"url": "https://example.com"},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        with pytest.raises(ValueError):
+            await content_process(cast(SourceState, state))
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
diff --git a/uv.lock b/uv.lock
index b5691836..c654390f 100644
--- a/uv.lock
+++ b/uv.lock
@@ -433,27 +433,27 @@ wheels = [
 
 [[package]]
 name = "content-core"
-version = "1.14.1"
+version = "2.0.4"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "ai-prompter" },
     { name = "aiohttp" },
     { name = "asciidoc" },
     { name = "bs4" },
-    { name = "dicttoxml" },
+    { name = "click" },
     { name = "esperanto" },
+    { name = "fast-ebook" },
     { name = "fastmcp" },
     { name = "firecrawl-py" },
     { name = "jinja2" },
     { name = "langdetect" },
-    { name = "langgraph" },
     { name = "loguru" },
     { name = "markdownify" },
-    { name = "moviepy" },
     { name = "openpyxl" },
     { name = "pandas" },
+    { name = "pdfplumber" },
     { name = "pillow" },
-    { name = "pymupdf" },
+    { name = "pydantic-settings" },
     { name = "python-docx" },
     { name = "python-dotenv" },
     { name = "python-pptx" },
@@ -463,9 +463,9 @@ dependencies = [
     { name = "validators" },
     { name = "youtube-transcript-api" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/22/b3/7b2d7b8d4e0023b537dc74b4157b1c0c40656d2d79832d132296fdd1e2b6/content_core-1.14.1.tar.gz", hash = "sha256:5e2598d78dc4f1be601b4009a3a300c37d252f490b2719841b351cae28ab701b", size = 20737743, upload-time = "2026-01-30T01:48:31.472Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/6a/59/acad9436e3b187d44e3d4676e572fcaa289a2f84e1d573690b080dbd02ac/content_core-2.0.4.tar.gz", hash = "sha256:bfbc7877e6c1ac8762e5e5bb953ddfbd817548c5c5404f5aa651a6135dfdf9c0", size = 20467845, upload-time = "2026-07-12T14:24:50.104Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/d2/d1/017d7f5a74a10471d327ace5d0e2cc11bc30400b0e2a01feaf5dad92a113/content_core-1.14.1-py3-none-any.whl", hash = "sha256:14df9b8b819376f7b9c25658368532367b453e21feb86ae77a43ae9a07161006", size = 186377, upload-time = "2026-01-30T01:48:29.872Z" },
+    { url = "https://files.pythonhosted.org/packages/18/7c/50e546c2e7a9aa164d2b655b4e2f7b2666712a2c48284e88e8e1f138cdf3/content_core-2.0.4-py3-none-any.whl", hash = "sha256:673dd51faa40dd3012f611572287bd18e8b0504e3569f96f4a69fc3d10e0cc8f", size = 58190, upload-time = "2026-07-12T14:24:47.622Z" },
 ]
 
 [[package]]
@@ -616,15 +616,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/07/6c/aa3f2f849e01cb6a001cd8554a88d4c77c5c1a31c95bdf1cf9301e6d9ef4/defusedxml-0.7.1-py2.py3-none-any.whl", hash = "sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61", size = 25604, upload-time = "2021-03-08T10:59:24.45Z" },
 ]
 
-[[package]]
-name = "dicttoxml"
-version = "1.7.16"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ee/c9/3132427f9e64d572688e6a1cbe3d542d1a03f676b81fb600f3d1fd7d2ec5/dicttoxml-1.7.16.tar.gz", hash = "sha256:6f36ce644881db5cd8940bee9b7cb3f3f6b7b327ba8a67d83d3e2caa0538bf9d", size = 39314, upload-time = "2022-12-23T16:07:17.189Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/09/40/9d521973cae7f7ef8b1f0d0e28a3db0f851c1f1dca45d4c2ed5360bb7246/dicttoxml-1.7.16-py3-none-any.whl", hash = "sha256:8677671496d0d38e66c7179f82a7e9059f94887777955dc71b0ac602ee637c26", size = 24155, upload-time = "2022-12-23T16:07:15.312Z" },
-]
-
 [[package]]
 name = "distlib"
 version = "0.4.0"
@@ -726,6 +717,24 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c1/ea/53f2148663b321f21b5a606bd5f191517cf40b7072c0497d3c92c4a13b1e/executing-2.2.1-py2.py3-none-any.whl", hash = "sha256:760643d3452b4d777d295bb167ccc74c64a81df23fb5e08eff250c425a4b2017", size = 28317, upload-time = "2025-09-01T09:48:08.5Z" },
 ]
 
+[[package]]
+name = "fast-ebook"
+version = "0.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/ec/21/4f2f849f7aa07ff56524f5834d91337dd8bde26f054f6fffeba81e34af9a/fast_ebook-0.2.0.tar.gz", hash = "sha256:e234300fbe2657c257e9e8287aafda01df3f26d8a88d90bcc9264ea2190ca9f3", size = 5417428, upload-time = "2026-04-10T13:42:00.61Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/bf/68/3ced629844d5881ce842c72f3a81090b265f3f258af84ead8b376ddc606f/fast_ebook-0.2.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:8573d7c6bc7ce0296b148ff3ca136b7076a74a08fa21af35c437c5ee38d326ed", size = 663197, upload-time = "2026-04-10T13:41:20.976Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/2e/8d495c431cc8b97f8bb3a92b27d753ae8345849d4b9e5c8ec31ee682f39c/fast_ebook-0.2.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:c9a89f9e31170e4fc928d72191b15dfae07fb608f25828527c714fdb375006c0", size = 612809, upload-time = "2026-04-10T13:41:22.443Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/09/615fd7d85cbbdb796cde338c173c95d7bb1d4381fc9d0168b009476e7216/fast_ebook-0.2.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:71e744504ffa962990640af76edc834c6371fd76aa91957db01ecc1bb6539ecb", size = 657351, upload-time = "2026-04-10T13:41:23.983Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/cf/acc2f71cdc22741b937a7b2b06905945dcd186297403335582472480498a/fast_ebook-0.2.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f865d77f3a9e1c46379a0196899d9ff1d4170fda4bb18b85361eea436f8044e6", size = 693979, upload-time = "2026-04-10T13:41:26.161Z" },
+    { url = "https://files.pythonhosted.org/packages/51/87/26162fa8cdcd7fb7ef072deb4b7f47ee9921c7871bce7c047aed3f382997/fast_ebook-0.2.0-cp311-cp311-win_amd64.whl", hash = "sha256:fb477c0b47f753c54bd40da5a2cb57be172deefe886640c0908442958e26626a", size = 617314, upload-time = "2026-04-10T13:41:27.689Z" },
+    { url = "https://files.pythonhosted.org/packages/16/e2/94e79f8b983750abc7cde98bec962f61f994df9f74981209a2752f56766c/fast_ebook-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:521a9c13547013f3d8212468c895db5fb6ed495168f62d9c6510d0330c6d3634", size = 661366, upload-time = "2026-04-10T13:41:29.048Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/37/48f71f1fcce4bb21604b3dd0bd492be3164c7aa369cfac3ae5bcf85785f2/fast_ebook-0.2.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:61b6ba55104a65facf7136bca902c22cb1197a933ff359790edc867d9673f999", size = 612222, upload-time = "2026-04-10T13:41:30.415Z" },
+    { url = "https://files.pythonhosted.org/packages/16/73/cc2e670418508a31d12e89b39495fff9d887663f68dee44fc1a2afe5b8e0/fast_ebook-0.2.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:8345f3de279288608ce12b75b742129ef5df4c3e631cc08da15907a1a0e32300", size = 656494, upload-time = "2026-04-10T13:41:32.076Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/cb/f76c04ffe8b79f5e50b1dfbcd1e2a78ebc71a5a601783fa70ea2729aba6f/fast_ebook-0.2.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:f9f118f11e2eb8ba079baba12143b6c7d601b440737a75546c548f060730592c", size = 694472, upload-time = "2026-04-10T13:41:33.436Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/f7/de2f3ac2aad3c1cc3403a43ad4138faad31867d8131b7b96816b968a5e4a/fast_ebook-0.2.0-cp312-cp312-win_amd64.whl", hash = "sha256:26fe2fea22d4a1f162a034163314867b53fb3f000cc33ee2d701bab2f9d8b1ee", size = 614612, upload-time = "2026-04-10T13:41:35.13Z" },
+]
+
 [[package]]
 name = "fastapi"
 version = "0.136.3"
@@ -2092,7 +2101,7 @@ notebooks = [
 requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
-    { name = "content-core", specifier = ">=1.14.1,<2" },
+    { name = "content-core", specifier = ">=2.0.4,<3" },
     { name = "esperanto", specifier = ">=2.20.0,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
@@ -2320,6 +2329,33 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/32/2b/121e912bd60eebd623f873fd090de0e84f322972ab25a7f9044c056804ed/pathspec-1.0.3-py3-none-any.whl", hash = "sha256:e80767021c1cc524aa3fb14bedda9c34406591343cc42797b386ce7b9354fb6c", size = 55021, upload-time = "2026-01-09T15:46:44.652Z" },
 ]
 
+[[package]]
+name = "pdfminer-six"
+version = "20260107"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "charset-normalizer" },
+    { name = "cryptography" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/34/a4/5cec1112009f0439a5ca6afa8ace321f0ab2f48da3255b7a1c8953014670/pdfminer_six-20260107.tar.gz", hash = "sha256:96bfd431e3577a55a0efd25676968ca4ce8fd5b53f14565f85716ff363889602", size = 8512094, upload-time = "2026-01-07T13:29:12.937Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/20/8b/28c4eaec9d6b036a52cb44720408f26b1a143ca9bce76cc19e8f5de00ab4/pdfminer_six-20260107-py3-none-any.whl", hash = "sha256:366585ba97e80dffa8f00cebe303d2f381884d8637af4ce422f1df3ef38111a9", size = 6592252, upload-time = "2026-01-07T13:29:10.742Z" },
+]
+
+[[package]]
+name = "pdfplumber"
+version = "0.11.10"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "pdfminer-six" },
+    { name = "pillow" },
+    { name = "pypdfium2" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/05/56/6f450312ba05a27d7713b73857c1a25100dbda04fbc1331b13fb227a607d/pdfplumber-0.11.10.tar.gz", hash = "sha256:b95b2d28c66efb0a794a83b88c6c6aea5987532a445d20a1cbcfa657022e6e57", size = 102892, upload-time = "2026-06-15T03:31:31.035Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/a2/9a/07d658e1e7fad860f1c541ab941348125dbdab773be3a0afaf32361866c7/pdfplumber-0.11.10-py3-none-any.whl", hash = "sha256:7741ea81bf165b474b153e6789d10d18e06b6ddcf3ec84289c3ef2fed6802580", size = 60047, upload-time = "2026-06-15T03:31:29.702Z" },
+]
+
 [[package]]
 name = "pexpect"
 version = "4.9.0"
@@ -2714,18 +2750,32 @@ crypto = [
 ]
 
 [[package]]
-name = "pymupdf"
-version = "1.26.7"
+name = "pypdfium2"
+version = "5.11.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/48/d6/09b28f027b510838559f7748807192149c419b30cb90e6d5f0cf916dc9dc/pymupdf-1.26.7.tar.gz", hash = "sha256:71add8bdc8eb1aaa207c69a13400693f06ad9b927bea976f5d5ab9df0bb489c3", size = 84327033, upload-time = "2025-12-11T21:48:50.694Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a8/b9/a887db9950379fe619f6921ade84730346e6adf008b197951ddcc42dfd1a/pypdfium2-5.11.0.tar.gz", hash = "sha256:0733749ac253c615953a5e75d4322b9f1de8c0d90137ec8dbcef403f3e57b5d9", size = 276614, upload-time = "2026-06-29T11:11:40.936Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/94/35/cd74cea1787b2247702ef8522186bdef32e9cb30a099e6bb864627ef6045/pymupdf-1.26.7-cp310-abi3-macosx_10_9_x86_64.whl", hash = "sha256:07085718dfdae5ab83b05eb5eb397f863bcc538fe05135318a01ea353e7a1353", size = 23179369, upload-time = "2025-12-11T21:47:21.587Z" },
-    { url = "https://files.pythonhosted.org/packages/72/74/448b6172927c829c6a3fba80078d7b0a016ebbe2c9ee528821f5ea21677a/pymupdf-1.26.7-cp310-abi3-macosx_11_0_arm64.whl", hash = "sha256:31aa9c8377ea1eea02934b92f4dcf79fb2abba0bf41f8a46d64c3e31546a3c02", size = 22470101, upload-time = "2025-12-11T21:47:37.105Z" },
-    { url = "https://files.pythonhosted.org/packages/65/e7/47af26f3ac76be7ac3dd4d6cc7ee105948a8355d774e5ca39857bf91c11c/pymupdf-1.26.7-cp310-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:e419b609996434a14a80fa060adec72c434a1cca6a511ec54db9841bc5d51b3c", size = 23502486, upload-time = "2025-12-12T09:51:25.824Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/6b/3de1714d734ff949be1e90a22375d0598d3540b22ae73eb85c2d7d1f36a9/pymupdf-1.26.7-cp310-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:69dfc78f206a96e5b3ac22741263ebab945fdf51f0dbe7c5757c3511b23d9d72", size = 24115727, upload-time = "2025-12-11T21:47:51.274Z" },
-    { url = "https://files.pythonhosted.org/packages/62/9b/f86224847949577a523be2207315ae0fd3155b5d909cd66c274d095349a3/pymupdf-1.26.7-cp310-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:1d5106f46e1ca0d64d46bd51892372a4f82076bdc14a9678d33d630702abca36", size = 24324386, upload-time = "2025-12-12T14:58:45.483Z" },
-    { url = "https://files.pythonhosted.org/packages/85/8e/a117d39092ca645fde8b903f4a941d9aa75b370a67b4f1f435f56393dc5a/pymupdf-1.26.7-cp310-abi3-win32.whl", hash = "sha256:7c9645b6f5452629c747690190350213d3e5bbdb6b2eca227d82702b327f6eee", size = 17203888, upload-time = "2025-12-12T13:59:57.613Z" },
-    { url = "https://files.pythonhosted.org/packages/dd/c3/d0047678146c294469c33bae167c8ace337deafb736b0bf97b9bc481aa65/pymupdf-1.26.7-cp310-abi3-win_amd64.whl", hash = "sha256:425b1befe40d41b72eb0fe211711c7ae334db5eb60307e9dd09066ed060cceba", size = 18405952, upload-time = "2025-12-11T21:48:02.947Z" },
+    { url = "https://files.pythonhosted.org/packages/94/09/0aec4588adaa7eb4e42da127a57a5dd3a3997ff32be62af93f8afeb4668b/pypdfium2-5.11.0-py3-none-android_23_arm64_v8a.whl", hash = "sha256:115bc68ab2e85c9ee46f97a4c1794f1d7205c8b763fc5c16d9893eaa54608627", size = 3388299, upload-time = "2026-06-29T11:11:00.183Z" },
+    { url = "https://files.pythonhosted.org/packages/7a/53/9e349a311cb0e7cef5dd0824a6f96c9b161da5e5e67a3db030d38e624fe9/pypdfium2-5.11.0-py3-none-android_23_armeabi_v7a.whl", hash = "sha256:4396d0848b79134fcdf141a4e3dfe6719efe1162309a02876b440025cfd80720", size = 2843597, upload-time = "2026-06-29T11:11:02.351Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/13/13571dc7f1d11a4e4bde6ab8961318b04ff70bdc2aea5e7f88be5ef53167/pypdfium2-5.11.0-py3-none-macosx_12_0_arm64.whl", hash = "sha256:73fe55dd258f02332bc0a34128ddc2994fd610e664d1f2f7d78dd9e2570f15ee", size = 3586638, upload-time = "2026-06-29T11:11:04.264Z" },
+    { url = "https://files.pythonhosted.org/packages/84/a2/9865e2822e97f6e4bed3b0e4838bd88444c62df6ebe0ccae352027133120/pypdfium2-5.11.0-py3-none-macosx_12_0_x86_64.whl", hash = "sha256:badb4f4df98e25fb1b58301911c98fa18da60de98b0223a6ffa91717be068b96", size = 3649576, upload-time = "2026-06-29T11:11:06.011Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/bb/dcd0ba152626c30a67bff43974b728c6bdd9a0d34af54cfa875489e46ce2/pypdfium2-5.11.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1fbff7c3e3141f24f3a25cedddbb6c6d17baa95f83c7b7ea40d6866956df3a43", size = 3648292, upload-time = "2026-06-29T11:11:07.767Z" },
+    { url = "https://files.pythonhosted.org/packages/65/62/39b40afda909bd65b212e9dbf32e7c6a2da4205ff64576965a49ba689c47/pypdfium2-5.11.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:faeda49c171be254b5028b7d17e54306c585374210d3e7ea4962a36774d5b76a", size = 3380060, upload-time = "2026-06-29T11:11:09.571Z" },
+    { url = "https://files.pythonhosted.org/packages/6f/cf/999b793ca17d153765dc3656e7f4cc90c4bf411b9262f15b8e7e31af164f/pypdfium2-5.11.0-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:b63f6f1e67d05d2bc36f55c35ede5cd18ded8886a2fcf68f320d188ee7934348", size = 3778180, upload-time = "2026-06-29T11:11:11.234Z" },
+    { url = "https://files.pythonhosted.org/packages/73/6c/54fd2b487eed6a420ee7fff5c7754739379c4459fa185deab3cb2b72e4e2/pypdfium2-5.11.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:44f96d8459b4ba9d1330ab44a8dde836b361cb00027830eaab710080888cf44a", size = 4190704, upload-time = "2026-06-29T11:11:13.076Z" },
+    { url = "https://files.pythonhosted.org/packages/3b/8f/690b9a1b8de405ff7693c1d10472f0c5395294c6d53654ae1ef97ccf70fa/pypdfium2-5.11.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ba8a78329c10f01c80b1f6e9aa33cac13665c198d056a007827b703958bd986d", size = 3705232, upload-time = "2026-06-29T11:11:14.864Z" },
+    { url = "https://files.pythonhosted.org/packages/54/fc/18298367dc073041320bbb5d51fb3b42b0d9164fd13bd4d13dcb0d66bc64/pypdfium2-5.11.0-py3-none-manylinux_2_27_s390x.manylinux_2_28_s390x.whl", hash = "sha256:e7a60197c5d18b0ec77a695e4a1082f89f323c13063cecf4446f1297ed632a36", size = 4031064, upload-time = "2026-06-29T11:11:17.201Z" },
+    { url = "https://files.pythonhosted.org/packages/45/1f/53d5b6ab0869963474b7ea13097c5abd8f2cf13548f0076e9bafc7e9d6b0/pypdfium2-5.11.0-py3-none-manylinux_2_34_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:53d167456433d565398a5c9f1efad23dfa6dfadc1a201ec687594fec645d843e", size = 3995092, upload-time = "2026-06-29T11:11:18.905Z" },
+    { url = "https://files.pythonhosted.org/packages/82/7a/942a390e41fb59a797d9303eae6e6a8c3d1b84deade03206ac163076033f/pypdfium2-5.11.0-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:953f5bcb6a65067381f0a38c50ffaed864fac6f20b0fa2c14ffb15a52bda8943", size = 4995668, upload-time = "2026-06-29T11:11:20.677Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/e9/fd1f8d3157c92665166f7d9bfcdd26901290b4271fcd2f90c7419ca0ee4c/pypdfium2-5.11.0-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:479b081423b2c16de44ddb6e25826d665298e1ee7cf09d802b656716dd930201", size = 4539453, upload-time = "2026-06-29T11:11:22.474Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/56/4280069868245d2346e6ec7b42e155c16a19be731f2f57fb726c35661aac/pypdfium2-5.11.0-py3-none-musllinux_1_2_i686.whl", hash = "sha256:81356f0503356d6f21629fcd47bbfffcfe26487f47a7989a56c02bd4e39b4c55", size = 5237429, upload-time = "2026-06-29T11:11:24.17Z" },
+    { url = "https://files.pythonhosted.org/packages/84/9f/99d962bea28c3305835d07a1732a771104ce958f46e68a1892e740a7c904/pypdfium2-5.11.0-py3-none-musllinux_1_2_ppc64le.whl", hash = "sha256:25be9d70f5776c68fa28b92ec42a7be91de5d6c4085ed5c6c89e1bfa373ae918", size = 5143685, upload-time = "2026-06-29T11:11:26.04Z" },
+    { url = "https://files.pythonhosted.org/packages/e6/4a/c935d1fdd73092fd036627282948c794c8f14a7ddde39cf732898b258866/pypdfium2-5.11.0-py3-none-musllinux_1_2_riscv64.whl", hash = "sha256:8edec20239f77d4dea2eeee5d29ebd83e77e1e2900691b77387fead76f81bc4a", size = 4647708, upload-time = "2026-06-29T11:11:28.006Z" },
+    { url = "https://files.pythonhosted.org/packages/62/50/f4f1895efa581f8b85748bf8d620ad37550583ca5226feeb9a33dcb3031e/pypdfium2-5.11.0-py3-none-musllinux_1_2_s390x.whl", hash = "sha256:2560db37ce77a6caf651dc129bc44ee610a5fbb0050ec70f5a643f76bf241173", size = 5089405, upload-time = "2026-06-29T11:11:30.013Z" },
+    { url = "https://files.pythonhosted.org/packages/21/40/ca5b1071aee0a96937a30007504a0ca484340709e22a459e99650165fd57/pypdfium2-5.11.0-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:34086bc1fcb964bb8104889d941ba9c8a35a75866250bb81d2f2bb2791bb42af", size = 5051368, upload-time = "2026-06-29T11:11:31.868Z" },
+    { url = "https://files.pythonhosted.org/packages/28/01/e445a77e784a5b0047a2c30b263630dfaa57318ff3196e6ad3093dca6929/pypdfium2-5.11.0-py3-none-win32.whl", hash = "sha256:324054f36acf6bea42a9d2534eb407da2e312dba746d955c9fd7e324bc160898", size = 3645281, upload-time = "2026-06-29T11:11:33.691Z" },
+    { url = "https://files.pythonhosted.org/packages/73/d4/8b8af6eedbc5c8af49817d8f37c2e55be8a2c7f75fca9bee78efbfeb40f6/pypdfium2-5.11.0-py3-none-win_amd64.whl", hash = "sha256:d3b698e7b51bdf2d633cc834395677319e1d66757896b30c632dfac7d7236c81", size = 3778234, upload-time = "2026-06-29T11:11:35.64Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/a7/657503553694c70fba0aa5d213144d80401611c82e0205f43f1ff39f40af/pypdfium2-5.11.0-py3-none-win_arm64.whl", hash = "sha256:897788d71b740752e29875856c369fdb52283f609aecf2355f0473db05dfc1b6", size = 3567726, upload-time = "2026-06-29T11:11:38.689Z" },
 ]
 
 [[package]]

From faf0f0e65ded4bc0304af62cc7fd64f2a2fa61e5 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 18:59:59 -0300
Subject: [PATCH 208/345] fix(sources): reject unsupported uploads at ingestion
 with 415 (#975) (#1117)

Unsupported files used to enqueue a background job that failed and then
burned the full 15-attempt retry budget (~1h) before showing a generic
"Failed" with no actionable detail.

- Add a pre-flight `_assert_file_supported()` using content-core 2.x's
  header-only `check_file_support()` (same routing as real extraction) in
  the upload branch of `_build_content_state`, before any job is enqueued
  and before the source record is created.
- Guard the source-retry endpoint the same way. Unexpected check errors
  (e.g. file removed before a retry) fall through to normal extraction.
- Map `UnsupportedTypeException` to `415 Unsupported Media Type` via a
  dedicated global handler (previously fell through to the base
  OpenNotebookError handler's 500). The message names the detected type.

Part of #939.
---
 CHANGELOG.md                                  |  1 +
 api/main.py                                   | 12 ++++
 api/routers/sources.py                        | 32 ++++++++++
 tests/test_typed_exceptions_reach_handlers.py | 22 +++++++
 tests/test_upload_type_mitigations.py         | 60 +++++++++++++++++++
 5 files changed, 127 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f02c85c8..73d7db8a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The legacy provider/model string fields on podcast profiles (`outline_provider`, `outline_model`, `transcript_provider`, `transcript_model` on episode profiles; `tts_provider`, `tts_model` on speaker profiles) are gone from the database, the API and the UI — the app has ignored them since the Model registry references landed in v1.11. Migration 22 first best-effort maps any profile whose `outline_llm`/`transcript_llm`/`voice_model` reference is still empty to an existing model record (matching provider + name + type; no auto-creation, since a migration must not touch credentials), then drops the six columns; the startup data migration that used to retry this mapping on every boot (`open_notebook/podcasts/migration.py`) was deleted. Accepted trade-off: profiles whose mapping never converged (e.g. the provider credential was never configured) lose the legacy strings and stay unresolved — they were already non-functional and the UI already flags them as needing model selection, so you just re-pick the models in the profile form once (#1107)
 
 ### Fixed
+- Uploading a file content-core can't extract now fails immediately at ingestion with a clear `415 Unsupported Media Type` error that names the detected MIME type, instead of enqueueing a background job that retried up to 15 times over ~1 hour before surfacing a generic "Failed" with no actionable detail. The pre-flight uses content-core 2.x's header-only `check_file_support()` — the same routing real extraction uses, so the verdict can't disagree with what would happen downstream — and the source-retry endpoint is guarded the same way; unexpected check errors (e.g. a file removed before a retry) fall through to normal extraction rather than becoming a hard rejection (#975)
 - Podcast episode cards no longer show "— / —" for the outline, transcript and speaker model rows on new episodes: the API now resolves the snapshot's model references (`outline_llm`/`transcript_llm`/`voice_model`) to provider/name display fields at serialization time — batched into a single query per request, so listing episodes never does a per-row model lookup — and the card falls back to the legacy snapshot strings for old episodes and degrades to "—" when a referenced model was deleted (#1114)
 - Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)
 - Clicking a chat/Ask citation that points at a deleted source, insight, or note now shows a shared, friendly "this content no longer exists" state in all three dialogs (instead of a raw error, a blank dialog, or an empty editable note editor), 404 lookups are no longer retried, and non-404 failures show a distinct "unable to load" message (#455)
diff --git a/api/main.py b/api/main.py
index ad6120a7..4d4ed468 100644
--- a/api/main.py
+++ b/api/main.py
@@ -48,6 +48,7 @@ from open_notebook.exceptions import (
     NotFoundError,
     OpenNotebookError,
     RateLimitError,
+    UnsupportedTypeException,
 )
 from open_notebook.utils.encryption import get_secret_from_env
 
@@ -350,6 +351,17 @@ async def external_service_error_handler(request: Request, exc: ExternalServiceE
     )
 
 
+@app.exception_handler(UnsupportedTypeException)
+async def unsupported_type_error_handler(
+    request: Request, exc: UnsupportedTypeException
+):
+    return JSONResponse(
+        status_code=415,
+        content={"detail": str(exc)},
+        headers=_cors_headers(request),
+    )
+
+
 @app.exception_handler(OpenNotebookError)
 async def open_notebook_error_handler(request: Request, exc: OpenNotebookError):
     return JSONResponse(
diff --git a/api/routers/sources.py b/api/routers/sources.py
index f2b64673..c7ff97cd 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -3,6 +3,7 @@ import os
 from pathlib import Path
 from typing import Any, List, Optional
 
+from content_core import check_file_support
 from fastapi import (
     APIRouter,
     Depends,
@@ -39,10 +40,37 @@ from open_notebook.exceptions import (
     InvalidInputError,
     NotFoundError,
     OpenNotebookError,
+    UnsupportedTypeException,
 )
 
 router = APIRouter()
 
+
+async def _assert_file_supported(file_path: str) -> None:
+    """Pre-flight check that content-core can actually extract this file.
+
+    Rejects unsupported uploads at ingestion time (HTTP 415) instead of letting
+    them enqueue a background job that fails and then burns the full retry
+    budget before surfacing a generic error (#975). Uses content-core's
+    header-only routing, which is the same logic real extraction uses, so the
+    verdict can't disagree with what would happen downstream.
+
+    Unexpected errors (e.g. the file no longer exists on a retry) are swallowed
+    so this never turns a transient problem into a hard rejection — real
+    extraction will surface those.
+    """
+    try:
+        support = await check_file_support(file_path)
+    except Exception as e:  # pragma: no cover - defensive
+        logger.debug(f"Pre-flight file-support check skipped for {file_path}: {e}")
+        return
+
+    if not support.supported:
+        detail = support.reason or "Unsupported file type"
+        if support.identified_type:
+            detail = f"{detail} (detected type: {support.identified_type})"
+        raise UnsupportedTypeException(detail)
+
 SOURCE_SORT_FIELDS = {
     "created": "created",
     "updated": "updated",
@@ -416,6 +444,8 @@ async def _build_content_state(
                 status_code=400,
                 detail="Invalid file path: must be within the uploads directory",
             )
+        # Reject unsupported files before enqueueing a doomed background job.
+        await _assert_file_supported(final_file_path)
         content_state["file_path"] = final_file_path
         content_state["delete_source"] = source_data.delete_source
     elif source_data.type == "text":
@@ -931,6 +961,8 @@ async def retry_source_processing(source_id: str):
         content_state = {}
         if source.asset:
             if source.asset.file_path:
+                # Don't re-queue a retry for a file content-core can't extract.
+                await _assert_file_supported(source.asset.file_path)
                 content_state = {
                     "file_path": source.asset.file_path,
                     "delete_source": False,  # Don't delete on retry
diff --git a/tests/test_typed_exceptions_reach_handlers.py b/tests/test_typed_exceptions_reach_handlers.py
index 7eaf7e73..ac425f1b 100644
--- a/tests/test_typed_exceptions_reach_handlers.py
+++ b/tests/test_typed_exceptions_reach_handlers.py
@@ -91,6 +91,28 @@ class TestNotFoundErrorPropagation:
         assert response.json()["detail"] == "Credential not found"
 
 
+class TestUnsupportedTypeErrorPropagation:
+    """UnsupportedTypeException maps to 415 (Unsupported Media Type) via its
+    dedicated global handler, instead of falling through to the base
+    OpenNotebookError handler's 500 (#975)."""
+
+    def test_unsupported_type_maps_to_415(self, client):
+        from open_notebook.exceptions import UnsupportedTypeException
+
+        with patch(
+            "api.routers.sources.repo_query",
+            new=AsyncMock(
+                side_effect=UnsupportedTypeException(
+                    "Unsupported file type: application/zip"
+                )
+            ),
+        ):
+            response = client.get("/api/sources")
+
+        assert response.status_code == 415
+        assert "application/zip" in response.json()["detail"]
+
+
 class TestUntypedExceptionsStillSanitized:
     """The final `except Exception` arm must keep catching untyped errors and
     returning a fixed, sanitized 500 (never the raw exception text)."""
diff --git a/tests/test_upload_type_mitigations.py b/tests/test_upload_type_mitigations.py
index c4981ced..b92b072a 100644
--- a/tests/test_upload_type_mitigations.py
+++ b/tests/test_upload_type_mitigations.py
@@ -92,3 +92,63 @@ class TestContentCoreRejectsUnrecognizedContent:
         detector = FileDetector()
         with pytest.raises(UnsupportedTypeException):
             await detector.detect(str(garbage))
+
+
+class TestPreflightFileSupport:
+    """The upload flow rejects unsupported files at ingestion via content-core's
+    check_file_support(), so they never enqueue a doomed background job (#975)."""
+
+    @pytest.mark.asyncio
+    async def test_unsupported_verdict_raises(self):
+        from content_core import FileSupport
+
+        from api.routers.sources import _assert_file_supported
+        from open_notebook.exceptions import UnsupportedTypeException
+
+        verdict = FileSupport(
+            supported=False,
+            file_path="/uploads/archive.zip",
+            identified_type="application/zip",
+            reason="Unsupported file type: application/zip",
+        )
+        with patch(
+            "api.routers.sources.check_file_support",
+            new=AsyncMock(return_value=verdict),
+        ):
+            with pytest.raises(UnsupportedTypeException) as exc:
+                await _assert_file_supported("/uploads/archive.zip")
+
+        # message carries both the reason and the detected type for the UI
+        assert "application/zip" in str(exc.value)
+
+    @pytest.mark.asyncio
+    async def test_supported_verdict_passes(self):
+        from content_core import FileSupport
+
+        from api.routers.sources import _assert_file_supported
+
+        verdict = FileSupport(
+            supported=True,
+            file_path="/uploads/doc.pdf",
+            identified_type="application/pdf",
+            processor="pdf",
+        )
+        with patch(
+            "api.routers.sources.check_file_support",
+            new=AsyncMock(return_value=verdict),
+        ):
+            # must not raise
+            await _assert_file_supported("/uploads/doc.pdf")
+
+    @pytest.mark.asyncio
+    async def test_check_errors_are_swallowed(self):
+        """A missing file on retry (or any check error) must not become a hard
+        415 — extraction downstream will surface the real problem."""
+        from api.routers.sources import _assert_file_supported
+
+        with patch(
+            "api.routers.sources.check_file_support",
+            new=AsyncMock(side_effect=FileNotFoundError("gone")),
+        ):
+            # must not raise
+            await _assert_file_supported("/uploads/missing.pdf")

From ef5bd2ce7b44539ec2b5852240a3977e77ca12ab Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 20:05:03 -0300
Subject: [PATCH 209/345] feat(sources): add Crawl4AI URL engine + honor
 persisted engine settings (#432) (#1118)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(sources): add Crawl4AI URL engine and honor persisted engine settings (#432)

- Add "crawl4ai" as a selectable URL processing engine (domain Literal,
  settings API validation, SettingsForm select, and label across all 14
  locales; urlHelp updated in en-US to describe the new fallback chain).
- The source graph now loads the persisted ContentSettings and passes the
  document/URL engine choices to ContentCoreConfig. Previously it built a
  hard-coded ContentSettings with "auto" engines, so a user's selection in
  Settings never took effect. Falls back to defaults if settings can't load.
- Crawl4AI Docker mode is driven by content-core's native CRAWL4AI_API_URL
  env var (documented separately under #1105).

Part of #939.

* fix(432): bundle Crawl4AI runtime + address review

- Bundle the Crawl4AI runtime so its local, no-API-key mode works out of
  the box: depend on content-core[crawl4ai] and install the Chromium
  browser via playwright in the Docker runtime-base (both image variants).
  Footprint is modest (no torch/transformers/CUDA); image grows ~300 MB
  from Chromium + system libs.
- Preserve the server-side traceback when persisted content settings fail
  to load (logger.opt(exception=True)) instead of only the message.
- Reset the ContentSettings singleton between domain tests (clear_instance)
  so a non-default value can't leak into neighboring tests.

Addresses review on #432.

* i18n(432): translate urlHelp Crawl4AI description across all 13 non-en locales

The Crawl4AI engine label was already localized; this brings the URL-engine
'help me choose' text in line with en-US in every locale — describing
Crawl4AI (local JS rendering, no API key) and its place in the auto
fallback chain (Firecrawl -> Jina -> Crawl4AI -> simple).
---
 CHANGELOG.md                                  |   3 +
 Dockerfile                                    |   8 +
 api/routers/settings.py                       |   2 +-
 .../settings/components/SettingsForm.tsx      |   5 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   3 +-
 frontend/src/lib/locales/ca-ES/index.ts       |   3 +-
 frontend/src/lib/locales/de-DE/index.ts       |   3 +-
 frontend/src/lib/locales/en-US/index.ts       |   3 +-
 frontend/src/lib/locales/es-ES/index.ts       |   3 +-
 frontend/src/lib/locales/fr-FR/index.ts       |   3 +-
 frontend/src/lib/locales/it-IT/index.ts       |   3 +-
 frontend/src/lib/locales/ja-JP/index.ts       |   3 +-
 frontend/src/lib/locales/pl-PL/index.ts       |   3 +-
 frontend/src/lib/locales/pt-BR/index.ts       |   3 +-
 frontend/src/lib/locales/ru-RU/index.ts       |   3 +-
 frontend/src/lib/locales/tr-TR/index.ts       |   3 +-
 frontend/src/lib/locales/zh-CN/index.ts       |   3 +-
 frontend/src/lib/locales/zh-TW/index.ts       |   3 +-
 open_notebook/domain/content_settings.py      |   2 +-
 open_notebook/graphs/source.py                |  25 +-
 pyproject.toml                                |   2 +-
 tests/test_domain.py                          |  10 +
 tests/test_graphs.py                          |  39 ++
 uv.lock                                       | 511 +++++++++++++++++-
 24 files changed, 622 insertions(+), 27 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 73d7db8a..f9495ed4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- **Crawl4AI** is now selectable as a URL processing engine in Settings → Content Processing, alongside Firecrawl, Jina and Simple. It renders JavaScript-heavy pages locally with no API key, or offloads to a Crawl4AI server when `CRAWL4AI_API_URL` is set. The Crawl4AI runtime (and its Chromium browser) is bundled into the Docker image, so local mode works out of the box (~300 MB larger image; no torch/CUDA). As part of this, the persisted document/URL engine choices now actually take effect: the source-processing graph reads the saved Content Settings and passes them to content-core (previously it always ran with hard-coded `auto` engines and silently ignored the selection). New engine label added across all 14 locales (#432)
+
 ### Changed
 - Upgraded the content extraction dependency from content-core 1.14.x to 2.x (2.0.4). The source-processing graph was adapted to content-core's new keyword-only `extract_content()` API: engine/model overrides now travel through a `ContentCoreConfig` object instead of the input dict, and the extraction result (`ExtractionOutput`) no longer echoes the source `url`/`file_path` back, so those are carried from the request state into the saved source asset. Because content-core 2.x no longer deletes the uploaded file after extraction, the graph now honors the `delete_source` flag itself. Transitively this replaces the AGPL-licensed PyMuPDF with MIT-licensed pdfplumber for PDF extraction and drops moviepy in favor of direct ffmpeg calls (which fixes audio extraction from MP3 files carrying chapter metadata). No user-facing configuration changes in this step — document and URL engines stay on their `auto` defaults; new engine/OCR options are tracked separately under #939 (#1103)
 - Podcast episode audio paths are now stored relative to the podcasts folder (`episodes/<uuid>/audio/<name>.mp3`) instead of as absolute filesystem paths, validated at write time so the database can never hold an absolute or root-escaping value, and resolved + containment-checked through a single shared helper instead of per-endpoint guards. Migration 21 converts existing rows written under the known roots (plain `file:///` URIs, `/app/data/podcasts/`, `/data/podcasts/`, `./data/podcasts/`, `data/podcasts/`); previously generated episodes now survive a `DATA_FOLDER` relocation. Rows under any other root (e.g. a source checkout at a custom absolute path) or in exotic legacy forms (percent-encoded or host-qualified `file://` URIs) are left untouched and treated as legacy-invalid — the same 403/audio-unavailable handling out-of-root rows already had; regenerate the episode to restore playback. Podcast jobs whose audio combination fails (podcast-creator reports an in-band `ERROR:` value) now fail with the real ffmpeg/clip error instead of reporting success for an episode with no playable audio (#1030)
diff --git a/Dockerfile b/Dockerfile
index 2f616d16..8d296c2c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -86,6 +86,14 @@ WORKDIR /app
 # Copy the virtual environment from the backend builder
 COPY --from=backend-builder /app/.venv /app/.venv
 
+# Install the Chromium runtime for the Crawl4AI URL engine so its local,
+# no-API-key mode works out of the box. Uses the playwright bundled in the venv
+# (via content-core[crawl4ai]); --with-deps pulls the required system libraries.
+# Pinned to a fixed path so it is found at runtime and survives volume mounts.
+ENV PLAYWRIGHT_BROWSERS_PATH=/app/pw-browsers
+RUN .venv/bin/python -m playwright install --with-deps chromium \
+    && rm -rf /var/lib/apt/lists/*
+
 # Copy the source code
 COPY . /app
 
diff --git a/api/routers/settings.py b/api/routers/settings.py
index 2b67d3ca..6b3ceb3e 100644
--- a/api/routers/settings.py
+++ b/api/routers/settings.py
@@ -54,7 +54,7 @@ async def update_settings(settings_update: SettingsUpdate):
             from typing import Literal, cast
 
             settings.default_content_processing_engine_url = cast(
-                Literal["auto", "firecrawl", "jina", "simple"],
+                Literal["auto", "firecrawl", "jina", "crawl4ai", "simple"],
                 settings_update.default_content_processing_engine_url,
             )
         if settings_update.default_embedding_option is not None:
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index 0dfafc0c..10267b4a 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -17,7 +17,7 @@ import { useTranslation } from '@/lib/hooks/use-translation'
 
 const settingsSchema = z.object({
   default_content_processing_engine_doc: z.enum(['auto', 'docling', 'simple']).optional(),
-  default_content_processing_engine_url: z.enum(['auto', 'firecrawl', 'jina', 'simple']).optional(),
+  default_content_processing_engine_url: z.enum(['auto', 'firecrawl', 'jina', 'crawl4ai', 'simple']).optional(),
   default_embedding_option: z.enum(['ask', 'always', 'never']).optional(),
   auto_delete_files: z.enum(['yes', 'no']).optional(),
 })
@@ -61,7 +61,7 @@ export function SettingsForm() {
     if (settings && settings.default_content_processing_engine_doc && !hasResetForm) {
       const formData = {
         default_content_processing_engine_doc: settings.default_content_processing_engine_doc as 'auto' | 'docling' | 'simple',
-        default_content_processing_engine_url: settings.default_content_processing_engine_url as 'auto' | 'firecrawl' | 'jina' | 'simple',
+        default_content_processing_engine_url: settings.default_content_processing_engine_url as 'auto' | 'firecrawl' | 'jina' | 'crawl4ai' | 'simple',
         default_embedding_option: settings.default_embedding_option as 'ask' | 'always' | 'never',
         auto_delete_files: settings.auto_delete_files as 'yes' | 'no',
       }
@@ -158,6 +158,7 @@ export function SettingsForm() {
                     <SelectItem value="auto">{t('settings.autoRecommended')}</SelectItem>
                     <SelectItem value="firecrawl">{t('settings.firecrawl')}</SelectItem>
                     <SelectItem value="jina">{t('settings.jina')}</SelectItem>
+                    <SelectItem value="crawl4ai">{t('settings.crawl4ai')}</SelectItem>
                     <SelectItem value="simple">{t('settings.simple')}</SelectItem>
                   </SelectContent>
                 </Select>
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index c07fe255..5f7d9eac 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -755,7 +755,8 @@ export const bnIN = {
     docHelp: "· ডকলিং একটু ধীর কিন্তু আরো নির্ভুল, বিশেষ করে যদি ডকুমেন্টে টেবিল এবং ছবি থাকে। · সাধারণ ফর্ম্যাটিং ছাড়াই ডকুমেন্ট থেকে যেকোন কন্টেন্ট এক্সট্রাক্ট করবে। · স্বয়ংক্রিয় (প্রস্তাবিত) ডকলিং দিয়ে প্রক্রিয়া করার চেষ্টা করবে এবং সাধারণে ডিফল্ট হবে।",
     firecrawl: "ফায়ারক্রল",
     jina: "জিনা",
-    urlHelp: "· ফায়ারক্রল একটি পেইড সার্ভিস (ফ্রি টিয়ার সহ), এবং খুব শক্তিশালী। · জিনাও একটি ভাল অপশন এবং এর ফ্রি টিয়ার আছে। · সাধারণ মৌলিক HTTP এক্সট্রাকশন ব্যবহার করবে এবং জাভাস্ক্রিপ্ট-ভিত্তিক ওয়েবসাইটে কন্টেন্ট মিস করবে। · স্বয়ংক্রিয় (প্রস্তাবিত) প্রথমে ফায়ারক্রল তারপর জিনা ব্যবহার করার চেষ্টা করবে, সবশেষে সাধারণে ফলব্যাক করবে।",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· ফায়ারক্রল একটি পেইড সার্ভিস (ফ্রি টিয়ার সহ), এবং খুব শক্তিশালী। · জিনাও একটি ভাল অপশন এবং এর ফ্রি টিয়ার আছে। · Crawl4AI কোনো API কী ছাড়াই JavaScript পেজ স্থানীয়ভাবে (অথবা CRAWL4AI_API_URL সেট করা থাকলে একটি Crawl4AI সার্ভারের মাধ্যমে) রেন্ডার করে। · সাধারণ মৌলিক HTTP এক্সট্রাকশন ব্যবহার করবে এবং জাভাস্ক্রিপ্ট-ভিত্তিক ওয়েবসাইটে কন্টেন্ট মিস করবে। · স্বয়ংক্রিয় (প্রস্তাবিত) প্রথমে ফায়ারক্রল, তারপর জিনা, তারপর Crawl4AI ব্যবহার করার চেষ্টা করবে, সবশেষে সাধারণে ফলব্যাক করবে।",
     embeddingAndSearch: "এমবেডিং এবং অনুসন্ধান",
     embeddingAndSearchDesc: "অনুসন্ধান এবং এমবেডিং অপশন কনফিগার করুন",
     defaultEmbeddingOption: "ডিফল্ট এমবেডিং অপশন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index b463bcab..a597c014 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -754,7 +754,8 @@ export const caES = {
     docHelp: "· Docling és una mica més lent però més precís, especialment si els documents contenen taules i imatges. · Simple extreu qualsevol contingut del document sense donar-li format. · Automàtic (recomanat) intentarà processar amb docling i, si falla, usarà simple.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl és un servei de pagament (amb nivell gratuït) i és molt potent. · Jina és una bona opció i també té un nivell gratuït. · Simple usarà l'extracció HTTP bàsica i no podrà accedir al contingut de llocs web basats en JavaScript. · Automàtic (recomanat) intentarà usar Firecrawl, després Jina i, finalment, usarà simple.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl és un servei de pagament (amb nivell gratuït) i és molt potent. · Jina és una bona opció i també té un nivell gratuït. · Crawl4AI renderitza pàgines JavaScript localment (o mitjançant un servidor Crawl4AI quan CRAWL4AI_API_URL està definit), sense clau d'API. · Simple usarà l'extracció HTTP bàsica i no podrà accedir al contingut de llocs web basats en JavaScript. · Automàtic (recomanat) intentarà usar Firecrawl, després Jina, després Crawl4AI i, finalment, usarà simple.",
     embeddingAndSearch: "Incrustació i cerca",
     embeddingAndSearchDesc: "Configura les opcions de cerca i incrustació",
     defaultEmbeddingOption: "Opció d'incrustació per defecte",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 6823ac14..8a027207 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -757,7 +757,8 @@ export const deDE = {
     docHelp: "· Docling ist etwas langsamer, aber genauer, besonders wenn Dokumente Tabellen und Bilder enthalten. · Einfach extrahiert Inhalte aus dem Dokument ohne Formatierung. · Auto (empfohlen) versucht zuerst Docling und fällt bei Bedarf auf Einfach zurück.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl ist ein kostenpflichtiger Dienst mit kostenlosem Einstiegstarif und sehr leistungsfähig. · Jina ist ebenfalls eine gute Option und bietet auch einen kostenlosen Einstiegstarif. · Einfach nutzt eine grundlegende HTTP-Extraktion und kann Inhalte auf JavaScript-basierten Websites übersehen. · Auto (empfohlen) versucht zuerst Firecrawl, dann Jina und fällt zuletzt auf Einfach zurück.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl ist ein kostenpflichtiger Dienst mit kostenlosem Einstiegstarif und sehr leistungsfähig. · Jina ist ebenfalls eine gute Option und bietet auch einen kostenlosen Einstiegstarif. · Crawl4AI rendert JavaScript-Seiten lokal (oder über einen Crawl4AI-Server, wenn CRAWL4AI_API_URL gesetzt ist), ohne API-Schlüssel. · Einfach nutzt eine grundlegende HTTP-Extraktion und kann Inhalte auf JavaScript-basierten Websites übersehen. · Auto (empfohlen) versucht zuerst Firecrawl, dann Jina, dann Crawl4AI und fällt zuletzt auf Einfach zurück.",
     embeddingAndSearch: "Embeddings und Suche",
     embeddingAndSearchDesc: "Konfiguriere Such- und Embedding-Optionen",
     defaultEmbeddingOption: "Standardoption für Embeddings",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index ba676549..567aa994 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -753,7 +753,8 @@ export const enUS = {
     docHelp: "· Docling is a little slower but more accurate, specially if the documents contain tables and images. · Simple will extract any content from the document without formatting it. · Auto (recommended) will try to process through docling and default to simple.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl is a paid service (with a free tier), and very powerful. · Jina is a good option as well and also has a free tier. · Simple will use basic HTTP extraction and will miss content on javascript-based websites. · Auto (recommended) will try to use firecrawl then Jina, finally fallback to simple.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl is a paid service (with a free tier), and very powerful. · Jina is a good option as well and also has a free tier. · Crawl4AI renders JavaScript pages locally (or via a Crawl4AI server when CRAWL4AI_API_URL is set) with no API key. · Simple will use basic HTTP extraction and will miss content on javascript-based websites. · Auto (recommended) will try Firecrawl, then Jina, then Crawl4AI, finally falling back to simple.",
     embeddingAndSearch: "Embedding and Search",
     embeddingAndSearchDesc: "Configure search and embedding options",
     defaultEmbeddingOption: "Default Embedding Option",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index ecface87..344b0b62 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -755,7 +755,8 @@ export const esES = {
     docHelp: "· Docling es un poco más lento pero más preciso, especialmente si los documentos contienen tablas e imágenes. · Simple extraerá cualquier contenido del documento sin formatearlo. · Auto (recomendado) intentará procesar con Docling y por defecto usará Simple.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl es un servicio de pago (con un nivel gratuito), y muy potente. · Jina es una buena opción también y tiene un nivel gratuito. · Simple usará extracción HTTP básica y perderá contenido en sitios web basados en JavaScript. · Auto (recomendado) intentará usar Firecrawl, luego Jina, y finalmente Simple.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl es un servicio de pago (con un nivel gratuito), y muy potente. · Jina es una buena opción también y tiene un nivel gratuito. · Crawl4AI renderiza páginas JavaScript localmente (o mediante un servidor Crawl4AI cuando se define CRAWL4AI_API_URL), sin clave de API. · Simple usará extracción HTTP básica y perderá contenido en sitios web basados en JavaScript. · Auto (recomendado) intentará usar Firecrawl, luego Jina, luego Crawl4AI, y finalmente Simple.",
     embeddingAndSearch: "Embedding y búsqueda",
     embeddingAndSearchDesc: "Configura las opciones de búsqueda y embedding",
     defaultEmbeddingOption: "Opción de embedding predeterminada",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 2d3601ff..c487d8d0 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -754,7 +754,8 @@ export const frFR = {
     docHelp: "· Docling est un peu plus lent mais plus précis, surtout si les documents contiennent des tableaux et des images. · Simple extraira tout le contenu du document sans le formater. · Auto (recommandé) essaiera de traiter via Docling et se rabattra sur Simple par défaut.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl est un service payant (avec un niveau gratuit), et très puissant. · Jina est également une bonne option et dispose aussi d'un niveau gratuit. · Simple utilisera une extraction HTTP basique et manquera du contenu sur les sites basés sur Javascript. · Auto (recommandé) essaiera d'utiliser Firecrawl puis Jina, et enfin se rabattra sur Simple.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl est un service payant (avec un niveau gratuit), et très puissant. · Jina est également une bonne option et dispose aussi d'un niveau gratuit. · Crawl4AI affiche les pages JavaScript localement (ou via un serveur Crawl4AI lorsque CRAWL4AI_API_URL est défini), sans clé API. · Simple utilisera une extraction HTTP basique et manquera du contenu sur les sites basés sur Javascript. · Auto (recommandé) essaiera Firecrawl, puis Jina, puis Crawl4AI, et se rabattra enfin sur Simple.",
     embeddingAndSearch: "Indexation (Embedding) et Recherche",
     embeddingAndSearchDesc: "Configurez les options de recherche et d'indexation",
     defaultEmbeddingOption: "Option d'indexation par défaut",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 8268c818..0cbc8771 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -754,7 +754,8 @@ export const itIT = {
     docHelp: "· Docling è un po' più lento ma più accurato, specialmente se i documenti contengono tabelle e immagini. · Semplice estrarrà qualsiasi contenuto dal documento senza formattarlo. · Auto (consigliato) proverà a elaborare tramite docling e userà semplice come fallback.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl è un servizio a pagamento (con piano gratuito), molto potente. · Jina è una buona alternativa con piano gratuito. · Semplice usa estrazione HTTP base e perderà contenuto su siti basati su javascript. · Auto (consigliato) proverà firecrawl poi Jina, infine semplice come fallback.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl è un servizio a pagamento (con piano gratuito), molto potente. · Jina è una buona alternativa con piano gratuito. · Crawl4AI renderizza le pagine JavaScript localmente (o tramite un server Crawl4AI quando CRAWL4AI_API_URL è impostato), senza chiave API. · Semplice usa estrazione HTTP base e perderà contenuto su siti basati su javascript. · Auto (consigliato) proverà firecrawl, poi Jina, poi Crawl4AI, infine semplice come fallback.",
     embeddingAndSearch: "Indicizzazione e ricerca",
     embeddingAndSearchDesc: "Configura opzioni di ricerca e indicizzazione",
     defaultEmbeddingOption: "Opzione indicizzazione predefinita",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index da8b8f9e..bac6b6ac 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -754,7 +754,8 @@ export const jaJP = {
     docHelp: "・Doclingは少し遅いですが、特にテーブルや画像を含むドキュメントでより正確です。・シンプルはフォーマットせずにドキュメントからコンテンツを抽出します。・自動（推奨）はDoclingで処理を試み、失敗した場合はシンプルにフォールバックします。",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "・Firecrawlは有料サービス（無料枠あり）で非常に強力です。・Jinaも良いオプションで無料枠があります。・シンプルは基本的なHTTP抽出を使用し、JavaScriptベースのウェブサイトのコンテンツを取得できない場合があります。・自動（推奨）はFirecrawl、Jina、最後にシンプルの順で試みます。",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "・Firecrawlは有料サービス（無料枠あり）で非常に強力です。・Jinaも良いオプションで無料枠があります。・Crawl4AIはAPIキーなしでJavaScriptページをローカルで（またはCRAWL4AI_API_URLを設定した場合はCrawl4AIサーバー経由で）レンダリングします。・シンプルは基本的なHTTP抽出を使用し、JavaScriptベースのウェブサイトのコンテンツを取得できない場合があります。・自動（推奨）はFirecrawl、Jina、Crawl4AI、最後にシンプルの順で試みます。",
     embeddingAndSearch: "Embeddingと検索",
     embeddingAndSearchDesc: "検索とEmbeddingオプションを設定",
     defaultEmbeddingOption: "デフォルトEmbeddingオプション",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 4223f2e9..b04db429 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -754,7 +754,8 @@ export const plPL = {
     docHelp: "· Docling jest nieco wolniejszy, ale dokładniejszy, zwłaszcza gdy dokumenty zawierają tabele i obrazy. · Prosty wyodrębni dowolną treść z dokumentu bez jej formatowania. · Automatyczny (zalecany) spróbuje przetworzyć przez Docling i w razie potrzeby przełączy się na prosty.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl to płatna usługa (z darmowym planem), bardzo wydajna. · Jina również jest dobrym wyborem i także ma darmowy plan. · Prosty używa podstawowej ekstrakcji HTTP i pominie treść na stronach opartych na JavaScript. · Automatyczny (zalecany) spróbuje użyć Firecrawl, następnie Jina, a na końcu przełączy się na prosty.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl to płatna usługa (z darmowym planem), bardzo wydajna. · Jina również jest dobrym wyborem i także ma darmowy plan. · Crawl4AI renderuje strony JavaScript lokalnie (lub przez serwer Crawl4AI, gdy ustawiono CRAWL4AI_API_URL), bez klucza API. · Prosty używa podstawowej ekstrakcji HTTP i pominie treść na stronach opartych na JavaScript. · Automatyczny (zalecany) spróbuje użyć Firecrawl, następnie Jina, następnie Crawl4AI, a na końcu przełączy się na prosty.",
     embeddingAndSearch: "Osadzanie i wyszukiwanie",
     embeddingAndSearchDesc: "Skonfiguruj opcje wyszukiwania i osadzania",
     defaultEmbeddingOption: "Domyślna opcja osadzania",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index f4c7da48..ecaaec49 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -754,7 +754,8 @@ export const ptBR = {
     docHelp: "· Docling é um pouco mais lento, mas mais preciso, especialmente se os documentos contêm tabelas e imagens. · Simples extrairá qualquer conteúdo do documento sem formatá-lo. · Auto (recomendado) tentará processar através do docling e usará simples como fallback.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl é um serviço pago (com tier gratuito), e muito poderoso. · Jina também é uma boa opção e também tem um tier gratuito. · Simples usará extração HTTP básica e perderá conteúdo em sites baseados em javascript. · Auto (recomendado) tentará usar firecrawl, depois Jina, e finalmente fallback para simples.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl é um serviço pago (com tier gratuito), e muito poderoso. · Jina também é uma boa opção e também tem um tier gratuito. · Crawl4AI renderiza páginas JavaScript localmente (ou via um servidor Crawl4AI quando CRAWL4AI_API_URL está definido), sem chave de API. · Simples usará extração HTTP básica e perderá conteúdo em sites baseados em javascript. · Auto (recomendado) tentará usar firecrawl, depois Jina, depois Crawl4AI, e finalmente fallback para simples.",
     embeddingAndSearch: "Embedding e Busca",
     embeddingAndSearchDesc: "Configure opções de busca e embedding",
     defaultEmbeddingOption: "Opção Padrão de Embedding",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 4eb99e9a..8bccde56 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -754,7 +754,8 @@ export const ruRU = {
     docHelp: "· Docling немного медленнее, но точнее, особенно для документов с таблицами и изображениями. · Simple извлекает содержимое без форматирования. · Авто (рекомендуется) попробует Docling и переключится на Simple при необходимости.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl — платный сервис (есть бесплатный уровень), очень мощный. · Jina тоже хороший вариант с бесплатным уровнем. · Simple использует базовое HTTP-извлечение и пропустит контент на JavaScript-сайтах. · Авто (рекомендуется) попробует Firecrawl, затем Jina, затем Simple.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl — платный сервис (есть бесплатный уровень), очень мощный. · Jina тоже хороший вариант с бесплатным уровнем. · Crawl4AI отображает JavaScript-страницы локально (или через сервер Crawl4AI, если задан CRAWL4AI_API_URL), без ключа API. · Simple использует базовое HTTP-извлечение и пропустит контент на JavaScript-сайтах. · Авто (рекомендуется) попробует Firecrawl, затем Jina, затем Crawl4AI, затем Simple.",
     embeddingAndSearch: "Эмбеддинг и поиск",
     embeddingAndSearchDesc: "Настройте параметры поиска и эмбеддинга",
     defaultEmbeddingOption: "Опция эмбеддинга по умолчанию",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 24a46c27..8ab90f24 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -754,7 +754,8 @@ export const trTR = {
     docHelp: "· Docling biraz daha yavaştır ancak özellikle tablolar ve görseller içeren belgeler için daha doğrudur. · Basit, belgeden herhangi bir içeriği formatlamadan çıkaracak. · Otomatik (önerilen) docling üzerinden işlemeyi deneyecek ve basit'e geri dönecek.",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl ücretli bir hizmettir (ücretsiz katmanı ile) ve çok güçlüdür. · Jina da iyi bir seçenektir ve ücretsiz katmanı vardır. · Basit, temel HTTP çıkarımını kullanır ve JavaScript tabanlı web sitelerindeki içerikleri kaçırır. · Otomatik (önerilen) önce firecrawl, sonra Jina'yı dener ve son olarak basit'e geri döner.",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl ücretli bir hizmettir (ücretsiz katmanı ile) ve çok güçlüdür. · Jina da iyi bir seçenektir ve ücretsiz katmanı vardır. · Crawl4AI, JavaScript sayfalarını API anahtarı olmadan yerel olarak (veya CRAWL4AI_API_URL ayarlandığında bir Crawl4AI sunucusu aracılığıyla) işler. · Basit, temel HTTP çıkarımını kullanır ve JavaScript tabanlı web sitelerindeki içerikleri kaçırır. · Otomatik (önerilen) önce firecrawl, sonra Jina, sonra Crawl4AI'yi dener ve son olarak basit'e geri döner.",
     embeddingAndSearch: "Gömme ve Arama",
     embeddingAndSearchDesc: "Arama ve gömme seçeneklerini yapılandırın",
     defaultEmbeddingOption: "Varsayılan Gömme Seçeneği",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index fd6e6cbf..c0c5e59c 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -754,7 +754,8 @@ export const zhCN = {
     docHelp: "· Docling: 速度稍慢但更准确，特别是包含表格和图像的文档。 · Simple: 直接提取内容而不进行格式化。 · 自动 (推荐): 优先尝试 Docling，失败则回退至 Simple。",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl: 强大的付费服务（有免费额度）。 · Jina: 优秀的备选方案，同样提供免费额度。 · Simple: 基础 HTTP 提取，在 JS 渲染的网站上可能会丢失内容。 · 自动 (推荐): 优先尝试 Firecrawl，其次 Jina，最后回退至 Simple。",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl: 强大的付费服务（有免费额度）。 · Jina: 优秀的备选方案，同样提供免费额度。 · Crawl4AI: 在本地渲染 JavaScript 页面（或在设置 CRAWL4AI_API_URL 时通过 Crawl4AI 服务器），无需 API 密钥。 · Simple: 基础 HTTP 提取，在 JS 渲染的网站上可能会丢失内容。 · 自动 (推荐): 优先尝试 Firecrawl，其次 Jina，然后 Crawl4AI，最后回退至 Simple。",
     embeddingAndSearch: "嵌入与搜索",
     embeddingAndSearchDesc: "配置搜索和向量嵌入选项",
     defaultEmbeddingOption: "默认嵌入选项",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 9635ea0a..48f29d56 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -754,7 +754,8 @@ export const zhTW = {
     docHelp: "· Docling: 速度稍慢但更準確，特別是包含表格和圖片的文件。 · Simple: 直接提取內容而不進行格式化。 · 自動 (推薦): 優先嘗試 Docling，失敗則回退至 Simple。",
     firecrawl: "Firecrawl",
     jina: "Jina",
-    urlHelp: "· Firecrawl: 強大的付費服務（有免費額度）。 · Jina: 優秀的備選方案，同樣提供免費額度。 · Simple: 基礎 HTTP 提取，在 JS 渲染的網站上可能會丟失內容。 · 自動 (推薦): 優先嘗試 Firecrawl，其次 Jina，最後回退至 Simple。",
+    crawl4ai: "Crawl4AI",
+    urlHelp: "· Firecrawl: 強大的付費服務（有免費額度）。 · Jina: 優秀的備選方案，同樣提供免費額度。 · Crawl4AI: 在本機算繪 JavaScript 頁面（或在設定 CRAWL4AI_API_URL 時透過 Crawl4AI 伺服器），無需 API 金鑰。 · Simple: 基礎 HTTP 提取，在 JS 渲染的網站上可能會丟失內容。 · 自動 (推薦): 優先嘗試 Firecrawl，其次 Jina，然後 Crawl4AI，最後回退至 Simple。",
     embeddingAndSearch: "嵌入與搜尋",
     embeddingAndSearchDesc: "設定搜尋和向量嵌入選項",
     defaultEmbeddingOption: "預設嵌入選項",
diff --git a/open_notebook/domain/content_settings.py b/open_notebook/domain/content_settings.py
index bb79f898..15612eeb 100644
--- a/open_notebook/domain/content_settings.py
+++ b/open_notebook/domain/content_settings.py
@@ -11,7 +11,7 @@ class ContentSettings(RecordModel):
         Literal["auto", "docling", "simple"]
     ] = Field("auto", description="Default Content Processing Engine for Documents")
     default_content_processing_engine_url: Optional[
-        Literal["auto", "firecrawl", "jina", "simple"]
+        Literal["auto", "firecrawl", "jina", "crawl4ai", "simple"]
     ] = Field("auto", description="Default Content Processing Engine for URLs")
     default_embedding_option: Optional[Literal["ask", "always", "never"]] = Field(
         "ask", description="Default Embedding Option for Vector Search"
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index a1b450b1..e40598c3 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -11,6 +11,7 @@ from loguru import logger
 from typing_extensions import Annotated, TypedDict
 
 from open_notebook.ai.models import Model, ModelManager
+from open_notebook.domain.content_settings import ContentSettings
 from open_notebook.domain.notebook import Asset, Source
 from open_notebook.domain.transformation import Transformation
 from open_notebook.graphs.transformation import graph as transform_graph
@@ -53,12 +54,30 @@ async def content_process(state: SourceState) -> dict:
     content_state: Dict[str, Any] = state["content_state"]
 
     # content-core 2.x takes engine/model overrides via ContentCoreConfig
-    # (keyword-only), not inside the input dict. We leave document_engine and
-    # url_engine at their "auto" defaults (current behavior) and only override
-    # the speech-to-text model when a default is configured.
+    # (keyword-only), not inside the input dict.
     config_kwargs: Dict[str, Any] = {
         "youtube_languages": YOUTUBE_PREFERRED_LANGUAGES,
     }
+
+    # Honor the persisted content-processing engine choices. content-core
+    # accepts "auto"/"simple"/"firecrawl"/"jina"/"crawl4ai" for URLs and
+    # "auto"/"docling"/"simple" for documents; falling back to "auto" keeps the
+    # previous behavior when settings are unset.
+    try:
+        settings: ContentSettings = await ContentSettings.get_instance()  # type: ignore[assignment]
+        if settings.default_content_processing_engine_url:
+            config_kwargs["url_engine"] = settings.default_content_processing_engine_url
+        if settings.default_content_processing_engine_doc:
+            config_kwargs["document_engine"] = (
+                settings.default_content_processing_engine_doc
+            )
+    except Exception as e:
+        # Keep the server-side traceback for diagnosing DB/deserialization
+        # failures while still falling back to defaults (non-fatal).
+        logger.opt(exception=True).warning(
+            f"Failed to load content settings, using defaults: {e}"
+        )
+
     try:
         model_manager = ModelManager()
         defaults = await model_manager.get_defaults()
diff --git a/pyproject.toml b/pyproject.toml
index 577ad8db..ab47022e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
-    "content-core>=2.0.4,<3",
+    "content-core[crawl4ai]>=2.0.4,<3",
     "ai-prompter>=0.4,<1",
     "esperanto>=2.20.0,<3",
     "surrealdb>=1.0.4",
diff --git a/tests/test_domain.py b/tests/test_domain.py
index fb9cd320..fb266276 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -566,6 +566,11 @@ class TestTransformationDomain:
 class TestContentSettings:
     """Test suite for ContentSettings defaults."""
 
+    def teardown_method(self):
+        # ContentSettings is a RecordModel singleton; drop any instance these
+        # tests created so a non-default value can't leak into other tests.
+        ContentSettings.clear_instance()
+
     def test_content_settings_defaults(self):
         """Test ContentSettings has proper defaults."""
         settings = ContentSettings()
@@ -577,6 +582,11 @@ class TestContentSettings:
         assert settings.youtube_preferred_languages is not None
         assert len(settings.youtube_preferred_languages) > 0
 
+    def test_content_settings_accepts_crawl4ai_url_engine(self):
+        """crawl4ai is a valid URL processing engine (content-core 2.x)."""
+        settings = ContentSettings(default_content_processing_engine_url="crawl4ai")
+        assert settings.default_content_processing_engine_url == "crawl4ai"
+
 
 # ============================================================================
 # TEST SUITE 9: Episode Profile Validation
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 84e6b666..60d34833 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -381,6 +381,45 @@ class TestContentProcessDeleteSource:
         with pytest.raises(ValueError):
             await content_process(cast(SourceState, state))
 
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.ContentSettings")
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_persisted_engines_wired_into_config(
+        self, mock_model_manager, mock_extract, mock_settings
+    ):
+        """The persisted content-processing engines reach ContentCoreConfig, so
+        a user-selected engine (e.g. crawl4ai) actually takes effect."""
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_settings.get_instance = AsyncMock(
+            return_value=MagicMock(
+                default_content_processing_engine_url="crawl4ai",
+                default_content_processing_engine_doc="docling",
+            )
+        )
+        mock_extract.return_value = ExtractionOutput(title="T", content="body")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"url": "https://example.com"},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        await content_process(cast(SourceState, state))
+
+        config = mock_extract.await_args.kwargs["config"]
+        assert config.url_engine == "crawl4ai"
+        assert config.document_engine == "docling"
+
 
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])
diff --git a/uv.lock b/uv.lock
index c654390f..59e3ae44 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2,9 +2,12 @@ version = 1
 revision = 3
 requires-python = ">=3.11, <3.13"
 resolution-markers = [
-    "sys_platform == 'win32'",
-    "sys_platform == 'emscripten'",
-    "sys_platform != 'emscripten' and sys_platform != 'win32'",
+    "python_full_version >= '3.12' and sys_platform == 'win32'",
+    "python_full_version < '3.12' and sys_platform == 'win32'",
+    "python_full_version >= '3.12' and sys_platform == 'emscripten'",
+    "python_full_version < '3.12' and sys_platform == 'emscripten'",
+    "python_full_version >= '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
+    "python_full_version < '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
 ]
 
 [manifest]
@@ -36,6 +39,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/50/25/da1f0b4dd970e52bf5a36c204c107e11a0c6d3ed195eba0bfbc664c312b2/aiofile-3.9.0-py3-none-any.whl", hash = "sha256:ce2f6c1571538cbdfa0143b04e16b208ecb0e9cb4148e528af8a640ed51cc8aa", size = 19539, upload-time = "2024-10-08T10:39:32.955Z" },
 ]
 
+[[package]]
+name = "aiofiles"
+version = "25.1.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/41/c3/534eac40372d8ee36ef40df62ec129bee4fdb5ad9706e58a29be53b2c970/aiofiles-25.1.0.tar.gz", hash = "sha256:a8d728f0a29de45dc521f18f07297428d56992a742f0cd2701ba86e44d23d5b2", size = 46354, upload-time = "2025-10-09T20:51:04.358Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/bc/8a/340a1555ae33d7354dbca4faa54948d76d89a27ceef032c8c3bc661d003e/aiofiles-25.1.0-py3-none-any.whl", hash = "sha256:abe311e527c862958650f9438e859c1fa7568a141b22abcd015e120e86a85695", size = 14668, upload-time = "2025-10-09T20:51:03.174Z" },
+]
+
 [[package]]
 name = "aiohappyeyeballs"
 version = "2.6.1"
@@ -121,6 +133,26 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/00/b7/e3bf5133d697a08128598c8d0abc5e16377b51465a33756de24fa7dee953/aiosqlite-0.22.1-py3-none-any.whl", hash = "sha256:21c002eb13823fad740196c5a2e9d8e62f6243bd9e7e4a1f87fb5e44ecb4fceb", size = 17405, upload-time = "2025-12-23T19:25:42.139Z" },
 ]
 
+[[package]]
+name = "alphashape"
+version = "1.3.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "click" },
+    { name = "click-log" },
+    { name = "networkx" },
+    { name = "numpy" },
+    { name = "rtree" },
+    { name = "scipy", version = "1.17.1", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.12'" },
+    { name = "scipy", version = "1.18.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.12'" },
+    { name = "shapely" },
+    { name = "trimesh" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/2e/83/67ff905694df5b34a777123b59fdfd05998d5a31766f188aafbf5b340055/alphashape-1.3.1.tar.gz", hash = "sha256:7a27340afc5f8ed301577acec46bb0cf2bada5410045f7289142e735ef6977ec", size = 26316, upload-time = "2021-04-16T17:47:19.486Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/e4/ad/77fad9d6f974ec58d837cb49fb9b483d6227a420c4f908c3578633de1d47/alphashape-1.3.1-py2.py3-none-any.whl", hash = "sha256:96a5ddd5f09534a35f03a8916aeeaac00fe4d6bec2f9ad78f87f57be3007f795", size = 13122, upload-time = "2021-04-16T17:47:17.773Z" },
+]
+
 [[package]]
 name = "annotated-doc"
 version = "0.0.4"
@@ -259,6 +291,34 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/1a/39/47f9197bdd44df24d67ac8893641e16f386c984a0619ef2ee4c51fbbc019/beautifulsoup4-4.14.3-py3-none-any.whl", hash = "sha256:0918bfe44902e6ad8d57732ba310582e98da931428d231a5ecb9e7c703a735bb", size = 107721, upload-time = "2025-11-30T15:08:24.087Z" },
 ]
 
+[[package]]
+name = "brotli"
+version = "1.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/f7/16/c92ca344d646e71a43b8bb353f0a6490d7f6e06210f8554c8f874e454285/brotli-1.2.0.tar.gz", hash = "sha256:e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a", size = 7388632, upload-time = "2025-11-05T18:39:42.86Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/7a/ef/f285668811a9e1ddb47a18cb0b437d5fc2760d537a2fe8a57875ad6f8448/brotli-1.2.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:15b33fe93cedc4caaff8a0bd1eb7e3dab1c61bb22a0bf5bdfdfd97cd7da79744", size = 863110, upload-time = "2025-11-05T18:38:12.978Z" },
+    { url = "https://files.pythonhosted.org/packages/50/62/a3b77593587010c789a9d6eaa527c79e0848b7b860402cc64bc0bc28a86c/brotli-1.2.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:898be2be399c221d2671d29eed26b6b2713a02c2119168ed914e7d00ceadb56f", size = 445438, upload-time = "2025-11-05T18:38:14.208Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/e1/7fadd47f40ce5549dc44493877db40292277db373da5053aff181656e16e/brotli-1.2.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:350c8348f0e76fff0a0fd6c26755d2653863279d086d3aa2c290a6a7251135dd", size = 1534420, upload-time = "2025-11-05T18:38:15.111Z" },
+    { url = "https://files.pythonhosted.org/packages/12/8b/1ed2f64054a5a008a4ccd2f271dbba7a5fb1a3067a99f5ceadedd4c1d5a7/brotli-1.2.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2e1ad3fda65ae0d93fec742a128d72e145c9c7a99ee2fcd667785d99eb25a7fe", size = 1632619, upload-time = "2025-11-05T18:38:16.094Z" },
+    { url = "https://files.pythonhosted.org/packages/89/5a/7071a621eb2d052d64efd5da2ef55ecdac7c3b0c6e4f9d519e9c66d987ef/brotli-1.2.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:40d918bce2b427a0c4ba189df7a006ac0c7277c180aee4617d99e9ccaaf59e6a", size = 1426014, upload-time = "2025-11-05T18:38:17.177Z" },
+    { url = "https://files.pythonhosted.org/packages/26/6d/0971a8ea435af5156acaaccec1a505f981c9c80227633851f2810abd252a/brotli-1.2.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:2a7f1d03727130fc875448b65b127a9ec5d06d19d0148e7554384229706f9d1b", size = 1489661, upload-time = "2025-11-05T18:38:18.41Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/75/c1baca8b4ec6c96a03ef8230fab2a785e35297632f402ebb1e78a1e39116/brotli-1.2.0-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:9c79f57faa25d97900bfb119480806d783fba83cd09ee0b33c17623935b05fa3", size = 1599150, upload-time = "2025-11-05T18:38:19.792Z" },
+    { url = "https://files.pythonhosted.org/packages/0d/1a/23fcfee1c324fd48a63d7ebf4bac3a4115bdb1b00e600f80f727d850b1ae/brotli-1.2.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:844a8ceb8483fefafc412f85c14f2aae2fb69567bf2a0de53cdb88b73e7c43ae", size = 1493505, upload-time = "2025-11-05T18:38:20.913Z" },
+    { url = "https://files.pythonhosted.org/packages/36/e5/12904bbd36afeef53d45a84881a4810ae8810ad7e328a971ebbfd760a0b3/brotli-1.2.0-cp311-cp311-win32.whl", hash = "sha256:aa47441fa3026543513139cb8926a92a8e305ee9c71a6209ef7a97d91640ea03", size = 334451, upload-time = "2025-11-05T18:38:21.94Z" },
+    { url = "https://files.pythonhosted.org/packages/02/8b/ecb5761b989629a4758c394b9301607a5880de61ee2ee5fe104b87149ebc/brotli-1.2.0-cp311-cp311-win_amd64.whl", hash = "sha256:022426c9e99fd65d9475dce5c195526f04bb8be8907607e27e747893f6ee3e24", size = 369035, upload-time = "2025-11-05T18:38:22.941Z" },
+    { url = "https://files.pythonhosted.org/packages/11/ee/b0a11ab2315c69bb9b45a2aaed022499c9c24a205c3a49c3513b541a7967/brotli-1.2.0-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:35d382625778834a7f3061b15423919aa03e4f5da34ac8e02c074e4b75ab4f84", size = 861543, upload-time = "2025-11-05T18:38:24.183Z" },
+    { url = "https://files.pythonhosted.org/packages/e1/2f/29c1459513cd35828e25531ebfcbf3e92a5e49f560b1777a9af7203eb46e/brotli-1.2.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:7a61c06b334bd99bc5ae84f1eeb36bfe01400264b3c352f968c6e30a10f9d08b", size = 444288, upload-time = "2025-11-05T18:38:25.139Z" },
+    { url = "https://files.pythonhosted.org/packages/3d/6f/feba03130d5fceadfa3a1bb102cb14650798c848b1df2a808356f939bb16/brotli-1.2.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:acec55bb7c90f1dfc476126f9711a8e81c9af7fb617409a9ee2953115343f08d", size = 1528071, upload-time = "2025-11-05T18:38:26.081Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/38/f3abb554eee089bd15471057ba85f47e53a44a462cfce265d9bf7088eb09/brotli-1.2.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:260d3692396e1895c5034f204f0db022c056f9e2ac841593a4cf9426e2a3faca", size = 1626913, upload-time = "2025-11-05T18:38:27.284Z" },
+    { url = "https://files.pythonhosted.org/packages/03/a7/03aa61fbc3c5cbf99b44d158665f9b0dd3d8059be16c460208d9e385c837/brotli-1.2.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:072e7624b1fc4d601036ab3f4f27942ef772887e876beff0301d261210bca97f", size = 1419762, upload-time = "2025-11-05T18:38:28.295Z" },
+    { url = "https://files.pythonhosted.org/packages/21/1b/0374a89ee27d152a5069c356c96b93afd1b94eae83f1e004b57eb6ce2f10/brotli-1.2.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:adedc4a67e15327dfdd04884873c6d5a01d3e3b6f61406f99b1ed4865a2f6d28", size = 1484494, upload-time = "2025-11-05T18:38:29.29Z" },
+    { url = "https://files.pythonhosted.org/packages/cf/57/69d4fe84a67aef4f524dcd075c6eee868d7850e85bf01d778a857d8dbe0a/brotli-1.2.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:7a47ce5c2288702e09dc22a44d0ee6152f2c7eda97b3c8482d826a1f3cfc7da7", size = 1593302, upload-time = "2025-11-05T18:38:30.639Z" },
+    { url = "https://files.pythonhosted.org/packages/d5/3b/39e13ce78a8e9a621c5df3aeb5fd181fcc8caba8c48a194cd629771f6828/brotli-1.2.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:af43b8711a8264bb4e7d6d9a6d004c3a2019c04c01127a868709ec29962b6036", size = 1487913, upload-time = "2025-11-05T18:38:31.618Z" },
+    { url = "https://files.pythonhosted.org/packages/62/28/4d00cb9bd76a6357a66fcd54b4b6d70288385584063f4b07884c1e7286ac/brotli-1.2.0-cp312-cp312-win32.whl", hash = "sha256:e99befa0b48f3cd293dafeacdd0d191804d105d279e0b387a32054c1180f3161", size = 334362, upload-time = "2025-11-05T18:38:32.939Z" },
+    { url = "https://files.pythonhosted.org/packages/1c/4e/bc1dcac9498859d5e353c9b153627a3752868a9d5f05ce8dedd81a2354ab/brotli-1.2.0-cp312-cp312-win_amd64.whl", hash = "sha256:b35c13ce241abdd44cb8ca70683f20c0c079728a36a996297adb5334adfc1c44", size = 369115, upload-time = "2025-11-05T18:38:33.765Z" },
+]
+
 [[package]]
 name = "bs4"
 version = "0.0.2"
@@ -413,6 +473,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/98/78/01c019cdb5d6498122777c1a43056ebb3ebfeef2076d9d026bfe15583b2b/click-8.3.1-py3-none-any.whl", hash = "sha256:981153a64e25f12d547d3426c367a4857371575ee7ad18df2a6183ab0545b2a6", size = 108274, upload-time = "2025-11-15T20:45:41.139Z" },
 ]
 
+[[package]]
+name = "click-log"
+version = "0.4.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "click" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/32/32/228be4f971e4bd556c33d52a22682bfe318ffe57a1ddb7a546f347a90260/click-log-0.4.0.tar.gz", hash = "sha256:3970f8570ac54491237bcdb3d8ab5e3eef6c057df29f8c3d1151a51a9c23b975", size = 9985, upload-time = "2022-03-13T11:10:15.262Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/ae/5a/4f025bc751087833686892e17e7564828e409c43b632878afeae554870cd/click_log-0.4.0-py2.py3-none-any.whl", hash = "sha256:a43e394b528d52112af599f2fc9e4b7cf3c15f94e53581f74fa6867e68c91756", size = 4273, upload-time = "2022-03-13T11:10:17.594Z" },
+]
+
 [[package]]
 name = "colorama"
 version = "0.4.6"
@@ -468,6 +540,11 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/18/7c/50e546c2e7a9aa164d2b655b4e2f7b2666712a2c48284e88e8e1f138cdf3/content_core-2.0.4-py3-none-any.whl", hash = "sha256:673dd51faa40dd3012f611572287bd18e8b0504e3569f96f4a69fc3d10e0cc8f", size = 58190, upload-time = "2026-07-12T14:24:47.622Z" },
 ]
 
+[package.optional-dependencies]
+crawl4ai = [
+    { name = "crawl4ai" },
+]
+
 [[package]]
 name = "coverage"
 version = "7.14.3"
@@ -512,6 +589,50 @@ toml = [
     { name = "tomli", marker = "python_full_version <= '3.11'" },
 ]
 
+[[package]]
+name = "crawl4ai"
+version = "0.9.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "aiofiles" },
+    { name = "aiohttp" },
+    { name = "aiosqlite" },
+    { name = "alphashape" },
+    { name = "anyio" },
+    { name = "beautifulsoup4" },
+    { name = "brotli" },
+    { name = "chardet" },
+    { name = "click" },
+    { name = "cssselect" },
+    { name = "fake-useragent" },
+    { name = "httpx", extra = ["http2"] },
+    { name = "humanize" },
+    { name = "lark" },
+    { name = "lxml" },
+    { name = "nltk" },
+    { name = "numpy" },
+    { name = "patchright" },
+    { name = "pillow" },
+    { name = "playwright" },
+    { name = "playwright-stealth" },
+    { name = "psutil" },
+    { name = "pydantic" },
+    { name = "pyopenssl" },
+    { name = "python-dotenv" },
+    { name = "pyyaml" },
+    { name = "rank-bm25" },
+    { name = "requests" },
+    { name = "rich" },
+    { name = "shapely" },
+    { name = "snowballstemmer" },
+    { name = "unclecode-litellm" },
+    { name = "xxhash" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/ca/95/a307119201f09a5136be1e394282ee4d4d6e3816cbc3c73f370aaa4b5e56/crawl4ai-0.9.1.tar.gz", hash = "sha256:d04251f13ba180107324bb7bbe12029a63d95cc50248f05085743739f38404fc", size = 575249, upload-time = "2026-07-08T14:29:15.247Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/18/61/fd08ea5870bb7d5b3e028b784fb2e18343cc20b9aabdd4771df35c1a1642/crawl4ai-0.9.1-py3-none-any.whl", hash = "sha256:e154c3219d0cd46b4e06771a725bf35e6c31b19a5c2981afbcdba4574bd0a9dc", size = 479911, upload-time = "2026-07-08T14:29:14.038Z" },
+]
+
 [[package]]
 name = "cryptography"
 version = "48.0.1"
@@ -717,6 +838,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c1/ea/53f2148663b321f21b5a606bd5f191517cf40b7072c0497d3c92c4a13b1e/executing-2.2.1-py2.py3-none-any.whl", hash = "sha256:760643d3452b4d777d295bb167ccc74c64a81df23fb5e08eff250c425a4b2017", size = 28317, upload-time = "2025-09-01T09:48:08.5Z" },
 ]
 
+[[package]]
+name = "fake-useragent"
+version = "2.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/41/43/948d10bf42735709edb5ae51e23297d034086f17fc7279fef385a7acb473/fake_useragent-2.2.0.tar.gz", hash = "sha256:4e6ab6571e40cc086d788523cf9e018f618d07f9050f822ff409a4dfe17c16b2", size = 158898, upload-time = "2025-04-14T15:32:19.238Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/51/37/b3ea9cd5558ff4cb51957caca2193981c6b0ff30bd0d2630ac62505d99d0/fake_useragent-2.2.0-py3-none-any.whl", hash = "sha256:67f35ca4d847b0d298187443aaf020413746e56acd985a611908c73dba2daa24", size = 161695, upload-time = "2025-04-14T15:32:17.732Z" },
+]
+
 [[package]]
 name = "fast-ebook"
 version = "0.2.0"
@@ -783,6 +913,36 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4f/67/684fa2d2de1e7504549d4ca457b4f854ccec3cd3be03bd86b33b599fbf58/fastmcp-3.2.0-py3-none-any.whl", hash = "sha256:e71aba3df16f86f546a4a9e513261d3233bcc92bef0dfa647bac3fa33623f681", size = 705550, upload-time = "2026-03-30T20:25:35.499Z" },
 ]
 
+[[package]]
+name = "fastuuid"
+version = "0.14.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/c3/7d/d9daedf0f2ebcacd20d599928f8913e9d2aea1d56d2d355a93bfa2b611d7/fastuuid-0.14.0.tar.gz", hash = "sha256:178947fc2f995b38497a74172adee64fdeb8b7ec18f2a5934d037641ba265d26", size = 18232, upload-time = "2025-10-19T22:19:22.402Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/98/f3/12481bda4e5b6d3e698fbf525df4443cc7dce746f246b86b6fcb2fba1844/fastuuid-0.14.0-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:73946cb950c8caf65127d4e9a325e2b6be0442a224fd51ba3b6ac44e1912ce34", size = 516386, upload-time = "2025-10-19T22:42:40.176Z" },
+    { url = "https://files.pythonhosted.org/packages/59/19/2fc58a1446e4d72b655648eb0879b04e88ed6fa70d474efcf550f640f6ec/fastuuid-0.14.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:12ac85024637586a5b69645e7ed986f7535106ed3013640a393a03e461740cb7", size = 264569, upload-time = "2025-10-19T22:25:50.977Z" },
+    { url = "https://files.pythonhosted.org/packages/78/29/3c74756e5b02c40cfcc8b1d8b5bac4edbd532b55917a6bcc9113550e99d1/fastuuid-0.14.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:05a8dde1f395e0c9b4be515b7a521403d1e8349443e7641761af07c7ad1624b1", size = 254366, upload-time = "2025-10-19T22:29:49.166Z" },
+    { url = "https://files.pythonhosted.org/packages/52/96/d761da3fccfa84f0f353ce6e3eb8b7f76b3aa21fd25e1b00a19f9c80a063/fastuuid-0.14.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:09378a05020e3e4883dfdab438926f31fea15fd17604908f3d39cbeb22a0b4dc", size = 278978, upload-time = "2025-10-19T22:35:41.306Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/c2/f84c90167cc7765cb82b3ff7808057608b21c14a38531845d933a4637307/fastuuid-0.14.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:bbb0c4b15d66b435d2538f3827f05e44e2baafcc003dd7d8472dc67807ab8fd8", size = 279692, upload-time = "2025-10-19T22:25:36.997Z" },
+    { url = "https://files.pythonhosted.org/packages/af/7b/4bacd03897b88c12348e7bd77943bac32ccf80ff98100598fcff74f75f2e/fastuuid-0.14.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:cd5a7f648d4365b41dbf0e38fe8da4884e57bed4e77c83598e076ac0c93995e7", size = 303384, upload-time = "2025-10-19T22:29:46.578Z" },
+    { url = "https://files.pythonhosted.org/packages/c0/a2/584f2c29641df8bd810d00c1f21d408c12e9ad0c0dafdb8b7b29e5ddf787/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:c0a94245afae4d7af8c43b3159d5e3934c53f47140be0be624b96acd672ceb73", size = 460921, upload-time = "2025-10-19T22:36:42.006Z" },
+    { url = "https://files.pythonhosted.org/packages/24/68/c6b77443bb7764c760e211002c8638c0c7cce11cb584927e723215ba1398/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_i686.whl", hash = "sha256:2b29e23c97e77c3a9514d70ce343571e469098ac7f5a269320a0f0b3e193ab36", size = 480575, upload-time = "2025-10-19T22:28:18.975Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/87/93f553111b33f9bb83145be12868c3c475bf8ea87c107063d01377cc0e8e/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:1e690d48f923c253f28151b3a6b4e335f2b06bf669c68a02665bc150b7839e94", size = 452317, upload-time = "2025-10-19T22:25:32.75Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/8c/a04d486ca55b5abb7eaa65b39df8d891b7b1635b22db2163734dc273579a/fastuuid-0.14.0-cp311-cp311-win32.whl", hash = "sha256:a6f46790d59ab38c6aa0e35c681c0484b50dc0acf9e2679c005d61e019313c24", size = 154804, upload-time = "2025-10-19T22:24:15.615Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/b2/2d40bf00820de94b9280366a122cbaa60090c8cf59e89ac3938cf5d75895/fastuuid-0.14.0-cp311-cp311-win_amd64.whl", hash = "sha256:e150eab56c95dc9e3fefc234a0eedb342fac433dacc273cd4d150a5b0871e1fa", size = 156099, upload-time = "2025-10-19T22:24:31.646Z" },
+    { url = "https://files.pythonhosted.org/packages/02/a2/e78fcc5df65467f0d207661b7ef86c5b7ac62eea337c0c0fcedbeee6fb13/fastuuid-0.14.0-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:77e94728324b63660ebf8adb27055e92d2e4611645bf12ed9d88d30486471d0a", size = 510164, upload-time = "2025-10-19T22:31:45.635Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/b3/c846f933f22f581f558ee63f81f29fa924acd971ce903dab1a9b6701816e/fastuuid-0.14.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:caa1f14d2102cb8d353096bc6ef6c13b2c81f347e6ab9d6fbd48b9dea41c153d", size = 261837, upload-time = "2025-10-19T22:38:38.53Z" },
+    { url = "https://files.pythonhosted.org/packages/54/ea/682551030f8c4fa9a769d9825570ad28c0c71e30cf34020b85c1f7ee7382/fastuuid-0.14.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:d23ef06f9e67163be38cece704170486715b177f6baae338110983f99a72c070", size = 251370, upload-time = "2025-10-19T22:40:26.07Z" },
+    { url = "https://files.pythonhosted.org/packages/14/dd/5927f0a523d8e6a76b70968e6004966ee7df30322f5fc9b6cdfb0276646a/fastuuid-0.14.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:0c9ec605ace243b6dbe3bd27ebdd5d33b00d8d1d3f580b39fdd15cd96fd71796", size = 277766, upload-time = "2025-10-19T22:37:23.779Z" },
+    { url = "https://files.pythonhosted.org/packages/16/6e/c0fb547eef61293153348f12e0f75a06abb322664b34a1573a7760501336/fastuuid-0.14.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:808527f2407f58a76c916d6aa15d58692a4a019fdf8d4c32ac7ff303b7d7af09", size = 278105, upload-time = "2025-10-19T22:26:56.821Z" },
+    { url = "https://files.pythonhosted.org/packages/2d/b1/b9c75e03b768f61cf2e84ee193dc18601aeaf89a4684b20f2f0e9f52b62c/fastuuid-0.14.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2fb3c0d7fef6674bbeacdd6dbd386924a7b60b26de849266d1ff6602937675c8", size = 301564, upload-time = "2025-10-19T22:30:31.604Z" },
+    { url = "https://files.pythonhosted.org/packages/fc/fa/f7395fdac07c7a54f18f801744573707321ca0cee082e638e36452355a9d/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:ab3f5d36e4393e628a4df337c2c039069344db5f4b9d2a3c9cea48284f1dd741", size = 459659, upload-time = "2025-10-19T22:31:32.341Z" },
+    { url = "https://files.pythonhosted.org/packages/66/49/c9fd06a4a0b1f0f048aacb6599e7d96e5d6bc6fa680ed0d46bf111929d1b/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_i686.whl", hash = "sha256:b9a0ca4f03b7e0b01425281ffd44e99d360e15c895f1907ca105854ed85e2057", size = 478430, upload-time = "2025-10-19T22:26:22.962Z" },
+    { url = "https://files.pythonhosted.org/packages/be/9c/909e8c95b494e8e140e8be6165d5fc3f61fdc46198c1554df7b3e1764471/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:3acdf655684cc09e60fb7e4cf524e8f42ea760031945aa8086c7eae2eeeabeb8", size = 450894, upload-time = "2025-10-19T22:27:01.647Z" },
+    { url = "https://files.pythonhosted.org/packages/90/eb/d29d17521976e673c55ef7f210d4cdd72091a9ec6755d0fd4710d9b3c871/fastuuid-0.14.0-cp312-cp312-win32.whl", hash = "sha256:9579618be6280700ae36ac42c3efd157049fe4dd40ca49b021280481c78c3176", size = 154374, upload-time = "2025-10-19T22:29:19.879Z" },
+    { url = "https://files.pythonhosted.org/packages/cc/fc/f5c799a6ea6d877faec0472d0b27c079b47c86b1cdc577720a5386483b36/fastuuid-0.14.0-cp312-cp312-win_amd64.whl", hash = "sha256:d9e4332dc4ba054434a9594cbfaf7823b57993d7d8e7267831c3e059857cf397", size = 156550, upload-time = "2025-10-19T22:27:49.658Z" },
+]
+
 [[package]]
 name = "filelock"
 version = "3.20.3"
@@ -908,6 +1068,34 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/31/e5/384b1f383917b5f0ae92e28f47bc27b16e3d26cd9bacb25e9f8ecab3c8fe/google_genai-1.60.0-py3-none-any.whl", hash = "sha256:967338378ffecebec19a8ed90cf8797b26818bacbefd7846a9280beb1099f7f3", size = 719431, upload-time = "2026-01-21T22:17:28.086Z" },
 ]
 
+[[package]]
+name = "greenlet"
+version = "3.5.3"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/e2/f1/fbbfef6af0bad0548f09bc28948ea3c275b4edb19e17fc5ca9900a6a634d/greenlet-3.5.3.tar.gz", hash = "sha256:a61efc018fd3eb317eeca31aba90ee9e7f26f22884a79b6c6ec715bf71bb62f1", size = 200270, upload-time = "2026-06-26T19:28:24.832Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/51/58/5404031044f55afad7aad1aff8be3f22b1bed03e237cfeabbc7e5c8cfde0/greenlet-3.5.3-cp311-cp311-macosx_11_0_universal2.whl", hash = "sha256:aca9b4ce85b152b5524ef7d88170efdff80dc0032aa8b75f9aaf7f3479ea95b4", size = 287424, upload-time = "2026-06-26T18:20:31.469Z" },
+    { url = "https://files.pythonhosted.org/packages/b4/bf/1c65e9b94a54d547068fa5b5a8a06f221f3316b48908e08668d29c77cb50/greenlet-3.5.3-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0f71be4920368fe1fabeeaa53d1e3548337e2b223d9565f8ad5e392a75ba23fc", size = 606523, upload-time = "2026-06-26T19:07:08.859Z" },
+    { url = "https://files.pythonhosted.org/packages/b8/c7/b66baacc95775ad511287acb0137b95574a9ce5491902372b7564799d790/greenlet-3.5.3-cp311-cp311-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:4d77e67f65f98449e3fb83f795b5d0a8437aead2f874ca89c96576caf4be3af6", size = 618315, upload-time = "2026-06-26T19:10:06.055Z" },
+    { url = "https://files.pythonhosted.org/packages/b0/a0/68afd1ebad40db87dac0a28ffa120726b98bf9c7c40c481b0f63c105d298/greenlet-3.5.3-cp311-cp311-manylinux_2_24_s390x.manylinux_2_28_s390x.whl", hash = "sha256:e18619ba655ac05d78d80fc83cac4ba892bd6927b99e3b8237aee861aaacc8bb", size = 626155, upload-time = "2026-06-26T19:24:14.44Z" },
+    { url = "https://files.pythonhosted.org/packages/78/2b/28ed29463522fdbe4c15b1f63922041626a7478316b34ab4adda3f0a4aba/greenlet-3.5.3-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:8540f1e6205bd13ca0ce685581037219ca54a1b41a0a15d228c6c9b8ad5903d7", size = 617381, upload-time = "2026-06-26T18:32:16.077Z" },
+    { url = "https://files.pythonhosted.org/packages/07/7f/e327d912239ec4b3b49999e3967389bcf1ee8722b9ee9194d2752ecd558a/greenlet-3.5.3-cp311-cp311-manylinux_2_39_riscv64.whl", hash = "sha256:d27c0c653a60d9535f690226474a5cc1036a8b0d7b57504d1c4f89c44a07a80c", size = 421083, upload-time = "2026-06-26T19:25:35.804Z" },
+    { url = "https://files.pythonhosted.org/packages/2a/7b/ad04e9d1337fc04965dc9fc616b6a72cb65a24b800a014c011ec812f5489/greenlet-3.5.3-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:7ef56fe650f50575bf843acde967b9c567687f3c22340941a899b7bc56e956a8", size = 1577771, upload-time = "2026-06-26T19:09:01.537Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/33/6c87ab7ba663f70ca21f3022aad1ffe56d3f3e0521e836c2415e13abcc3c/greenlet-3.5.3-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:5121af01cf911e70056c00d4b46d5e9b5d1415550038573d744138bacb59e6b8", size = 1644048, upload-time = "2026-06-26T18:31:42.996Z" },
+    { url = "https://files.pythonhosted.org/packages/1c/35/f0d8ee998b422cf8693b270f098e55d8d4ec8006b061b333f54f177d28d9/greenlet-3.5.3-cp311-cp311-win_amd64.whl", hash = "sha256:0f41e4a05a3c0cb31b17023eff28dd111e1d16bf7d7d00406cd7df23f31398a7", size = 239137, upload-time = "2026-06-26T18:23:21.664Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/96/b9820295576ef18c9edc404f10e260ae7215ceaf3781a54b720ed2627862/greenlet-3.5.3-cp311-cp311-win_arm64.whl", hash = "sha256:ec6f1af59f6b5f3fc9678e2ea062d8377d22ac644f7844cb7a292910cf12ff44", size = 237630, upload-time = "2026-06-26T18:24:00.281Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/6e/4c37d51a2b7f82d2ff11bb6b5f7d766d9a011726624af255e843727627a3/greenlet-3.5.3-cp312-cp312-macosx_11_0_universal2.whl", hash = "sha256:719757059f5a53fd0dde23f78cffeafcdd97b21c850ddb7ca684a3c1a1f122e2", size = 288685, upload-time = "2026-06-26T18:22:08.977Z" },
+    { url = "https://files.pythonhosted.org/packages/7a/73/815dd90131c1b71ebdf53dbc7c276cafec2a1173b97559f97aba72724a87/greenlet-3.5.3-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:efa9f765dd09f9d0cdac651ffdf631ee59ec5dc6ee7a73e0c012ba9c52fbdf5b", size = 604761, upload-time = "2026-06-26T19:07:10.114Z" },
+    { url = "https://files.pythonhosted.org/packages/9f/57/079cfe76bcef36b153b25607ee91c6fcb58f17f8b23c86bbbeabe0c88d72/greenlet-3.5.3-cp312-cp312-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:7faba15ac005376e02a0384504e0243be3370ce010296a44a820feb342b505ab", size = 617044, upload-time = "2026-06-26T19:10:07.25Z" },
+    { url = "https://files.pythonhosted.org/packages/fb/fb/d97dc261209c80744b7c8132693a30d70ec6e7315e632cb0a10b3fec94dd/greenlet-3.5.3-cp312-cp312-manylinux_2_24_s390x.manylinux_2_28_s390x.whl", hash = "sha256:5795cd1101371140551c645f2d408b8d3c01a5a29cf8a9bce6e759c983682d23", size = 622351, upload-time = "2026-06-26T19:24:16.32Z" },
+    { url = "https://files.pythonhosted.org/packages/37/87/b4d095775a3fb1bcafbb483fc206b27ebb785724c83051447737085dc54e/greenlet-3.5.3-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:87142215824be6ac05e2e8e2786eec307ccbc27c36723c3881959df654af6861", size = 614244, upload-time = "2026-06-26T18:32:17.594Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/ac/e5fee13cbbd0e8de312d9a146584b8a51891c68847330ef9dc8b5109d23f/greenlet-3.5.3-cp312-cp312-manylinux_2_39_riscv64.whl", hash = "sha256:af4923b3096e26a36d7e9cf24ab88083a20f97d191e3b97f253731ce9b41b28c", size = 425395, upload-time = "2026-06-26T19:25:37.144Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/70/7559b609683650fa2b95b8ab84b4ab0b26556a635d19675e12aa832d826d/greenlet-3.5.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:215275b1b49320987352e6c1b054acca0064f965a2c66992bed9a6f7d913f149", size = 1574210, upload-time = "2026-06-26T19:09:03.077Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/73/be55392074c60fc37655ca40fa6022457bfbf6718e9e342a7b0b41f96dd2/greenlet-3.5.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6b1b0eed82364b0e32c4ea0f221452d33e6bb17ae094d9f72aed9851812747ea", size = 1638627, upload-time = "2026-06-26T18:31:44.748Z" },
+    { url = "https://files.pythonhosted.org/packages/14/40/c57489acf8e37d74e2913d4eff63aa0dba17acccc4bdeef874dde2dbbec9/greenlet-3.5.3-cp312-cp312-win_amd64.whl", hash = "sha256:cde8adafa2365676f74a979744629589999093bc86e2484214f58e61df08902c", size = 239882, upload-time = "2026-06-26T18:23:27.518Z" },
+    { url = "https://files.pythonhosted.org/packages/71/fd/6fea0e3d6600f785069481ee637e09378dd4118acdfd38ad88ae2db31c98/greenlet-3.5.3-cp312-cp312-win_arm64.whl", hash = "sha256:c4e7b79d83805475f0102008843f6eb45fd3bb0b2e88c774adab5fbaab27117d", size = 238211, upload-time = "2026-06-26T18:22:37.671Z" },
+]
+
 [[package]]
 name = "groq"
 version = "0.37.1"
@@ -934,6 +1122,19 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/04/4b/29cac41a4d98d144bf5f6d33995617b185d14b22401f75ca86f384e87ff1/h11-0.16.0-py3-none-any.whl", hash = "sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86", size = 37515, upload-time = "2025-04-24T03:35:24.344Z" },
 ]
 
+[[package]]
+name = "h2"
+version = "4.3.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "hpack" },
+    { name = "hyperframe" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/1d/17/afa56379f94ad0fe8defd37d6eb3f89a25404ffc71d4d848893d270325fc/h2-4.3.0.tar.gz", hash = "sha256:6c59efe4323fa18b47a632221a1888bd7fde6249819beda254aeca909f221bf1", size = 2152026, upload-time = "2025-08-23T18:12:19.778Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/69/b2/119f6e6dcbd96f9069ce9a2665e0146588dc9f88f29549711853645e736a/h2-4.3.0-py3-none-any.whl", hash = "sha256:c438f029a25f7945c69e0ccf0fb951dc3f73a5f6412981daee861431b70e2bdd", size = 61779, upload-time = "2025-08-23T18:12:17.779Z" },
+]
+
 [[package]]
 name = "hf-xet"
 version = "1.2.0"
@@ -949,6 +1150,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/44/870d44b30e1dcfb6a65932e3e1506c103a8a5aea9103c337e7a53180322c/hf_xet-1.2.0-cp37-abi3-win_amd64.whl", hash = "sha256:e6584a52253f72c9f52f9e549d5895ca7a471608495c4ecaa6cc73dba2b24d69", size = 2905735, upload-time = "2025-10-24T19:04:35.928Z" },
 ]
 
+[[package]]
+name = "hpack"
+version = "4.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/26/5b/fcabf6028144a8723726318b07a32c2f3314acdff6265743cf08a344b18e/hpack-4.2.0.tar.gz", hash = "sha256:0895cfa3b5531fc65fe439c05eb65144f123bf7a394fcaa56aa423548d8e45c0", size = 51300, upload-time = "2026-06-23T18:34:46.667Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/71/b4/4a9fcfb2aef6ba44d9073ecd301443aa00b3dac95de5619f2a7de7ec8a91/hpack-4.2.0-py3-none-any.whl", hash = "sha256:858ac0b02280fa582b5080d68db0899c62a80375e0e5413a74970c5e518b6986", size = 34246, upload-time = "2026-06-23T18:34:45.472Z" },
+]
+
 [[package]]
 name = "httpcore"
 version = "1.0.9"
@@ -978,6 +1188,9 @@ wheels = [
 ]
 
 [package.optional-dependencies]
+http2 = [
+    { name = "h2" },
+]
 socks = [
     { name = "socksio" },
 ]
@@ -1021,6 +1234,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c5/7b/bca5613a0c3b542420cf92bd5e5fb8ebd5435ce1011a091f66bb7693285e/humanize-4.15.0-py3-none-any.whl", hash = "sha256:b1186eb9f5a9749cd9cb8565aee77919dd7c8d076161cf44d70e59e3301e1769", size = 132203, upload-time = "2025-12-20T20:16:11.67Z" },
 ]
 
+[[package]]
+name = "hyperframe"
+version = "6.1.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/02/e7/94f8232d4a74cc99514c13a9f995811485a6903d48e5d952771ef6322e30/hyperframe-6.1.0.tar.gz", hash = "sha256:f630908a00854a7adeabd6382b43923a4c4cd4b821fcb527e6ab9e15382a3b08", size = 26566, upload-time = "2025-01-22T21:41:49.302Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/48/30/47d0bf6072f7252e6521f3447ccfa40b421b6824517f82854703d0f5a98b/hyperframe-6.1.0-py3-none-any.whl", hash = "sha256:b03380493a519fce58ea5af42e4a42317bf9bd425596f7a0835ffce80f1a42e5", size = 13007, upload-time = "2025-01-22T21:41:47.295Z" },
+]
+
 [[package]]
 name = "identify"
 version = "2.6.16"
@@ -1272,6 +1494,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/2f/9c/6753e6522b8d0ef07d3a3d239426669e984fb0eba15a315cdbc1253904e4/jiter-0.12.0-graalpy312-graalpy250_312_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:c24e864cb30ab82311c6425655b0cdab0a98c5d973b065c66a3f020740c2324c", size = 346110, upload-time = "2025-11-09T20:49:21.817Z" },
 ]
 
+[[package]]
+name = "joblib"
+version = "1.5.3"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/41/f2/d34e8b3a08a9cc79a50b2208a93dce981fe615b64d5a4d4abee421d898df/joblib-1.5.3.tar.gz", hash = "sha256:8561a3269e6801106863fd0d6d84bb737be9e7631e33aaed3fb9ce5953688da3", size = 331603, upload-time = "2025-12-15T08:41:46.427Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/7b/91/984aca2ec129e2757d1e4e3c81c3fcda9d0f85b74670a094cc443d9ee949/joblib-1.5.3-py3-none-any.whl", hash = "sha256:5fc3c5039fc5ca8c0276333a188bbd59d6b7ab37fe6632daa76bc7f9ec18e713", size = 309071, upload-time = "2025-12-15T08:41:44.973Z" },
+]
+
 [[package]]
 name = "jsonpatch"
 version = "1.33"
@@ -1646,6 +1877,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c6/64/d411be633d1c976955a09f6b3c58fbe70592d1370d262d171f7daf7e3793/langsmith-0.9.0-py3-none-any.whl", hash = "sha256:5eeccc36ff956946df8510a2b3b5a87d36c44f11bfb2e5205e9cf03d7b65ec9c", size = 578496, upload-time = "2026-06-22T15:37:16.42Z" },
 ]
 
+[[package]]
+name = "lark"
+version = "1.3.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/da/34/28fff3ab31ccff1fd4f6c7c7b0ceb2b6968d8ea4950663eadcb5720591a0/lark-1.3.1.tar.gz", hash = "sha256:b426a7a6d6d53189d318f2b6236ab5d6429eaf09259f1ca33eb716eed10d2905", size = 382732, upload-time = "2025-10-27T18:25:56.653Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/82/3d/14ce75ef66813643812f3093ab17e46d3a206942ce7376d31ec2d36229e7/lark-1.3.1-py3-none-any.whl", hash = "sha256:c629b661023a014c37da873b4ff58a817398d12635d3bbb2c5a03be7fe5d1e12", size = 113151, upload-time = "2025-10-27T18:25:54.882Z" },
+]
+
 [[package]]
 name = "librt"
 version = "0.7.8"
@@ -1972,6 +2212,31 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a0/c4/c2971a3ba4c6103a3d10c4b0f24f461ddc027f0f09763220cf35ca1401b3/nest_asyncio-1.6.0-py3-none-any.whl", hash = "sha256:87af6efd6b5e897c81050477ef65c62e2b2f35d51703cae01aff2905b1852e1c", size = 5195, upload-time = "2024-01-21T14:25:17.223Z" },
 ]
 
+[[package]]
+name = "networkx"
+version = "3.6.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/6a/51/63fe664f3908c97be9d2e4f1158eb633317598cfa6e1fc14af5383f17512/networkx-3.6.1.tar.gz", hash = "sha256:26b7c357accc0c8cde558ad486283728b65b6a95d85ee1cd66bafab4c8168509", size = 2517025, upload-time = "2025-12-08T17:02:39.908Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/9e/c9/b2622292ea83fbb4ec318f5b9ab867d0a28ab43c5717bb85b0a5f6b3b0a4/networkx-3.6.1-py3-none-any.whl", hash = "sha256:d47fbf302e7d9cbbb9e2555a0d267983d2aa476bac30e90dfbe5669bd57f3762", size = 2068504, upload-time = "2025-12-08T17:02:38.159Z" },
+]
+
+[[package]]
+name = "nltk"
+version = "3.10.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "click" },
+    { name = "defusedxml" },
+    { name = "joblib" },
+    { name = "regex" },
+    { name = "tqdm" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/96/02/df4f105b28a7c16b0e41423bc09cf0f1b8a305df4ef0b10ca74a2e4c648c/nltk-3.10.0.tar.gz", hash = "sha256:4fbac1d98203cbcd1b5d94a2877fb822300072d80604a5e7fae49d2c5f84e8c1", size = 3089244, upload-time = "2026-07-08T02:39:13.562Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/6e/89/a0b0f35e2820d6a99d75ea1c11977ee6d5c9e6658eceb45b0c7620881faa/nltk-3.10.0-py3-none-any.whl", hash = "sha256:54ff84d4916d3ef127e8953bee0023f6a6b320b75d634a19e06ef056d3d244bf", size = 1716144, upload-time = "2026-07-08T02:39:09.753Z" },
+]
+
 [[package]]
 name = "nodeenv"
 version = "1.10.0"
@@ -2054,7 +2319,7 @@ source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },
     { name = "babel" },
-    { name = "content-core" },
+    { name = "content-core", extra = ["crawl4ai"] },
     { name = "esperanto" },
     { name = "fastapi" },
     { name = "httpx", extra = ["socks"] },
@@ -2101,7 +2366,7 @@ notebooks = [
 requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
-    { name = "content-core", specifier = ">=2.0.4,<3" },
+    { name = "content-core", extras = ["crawl4ai"], specifier = ">=2.0.4,<3" },
     { name = "esperanto", specifier = ">=2.20.0,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
@@ -2311,6 +2576,25 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/16/32/f8e3c85d1d5250232a5d3477a2a28cc291968ff175caeadaf3cc19ce0e4a/parso-0.8.5-py2.py3-none-any.whl", hash = "sha256:646204b5ee239c396d040b90f9e272e9a8017c630092bf59980beb62fd033887", size = 106668, upload-time = "2025-08-23T15:15:25.663Z" },
 ]
 
+[[package]]
+name = "patchright"
+version = "1.61.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "greenlet" },
+    { name = "pyee" },
+]
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/79/42/a76e2ea17dd4feccbf5ef6df017fb2e67f4b72a6f559f59d9aad1197f83a/patchright-1.61.2-py3-none-macosx_10_13_x86_64.whl", hash = "sha256:43ae10cd2a3e46b222179a120ab39ba88f801f3a42aa41cab45fac9928f2103d", size = 43727572, upload-time = "2026-07-05T21:17:52.382Z" },
+    { url = "https://files.pythonhosted.org/packages/57/e7/1ff89853c9aeaf26cd20559f401375ec71a40e4041cf7ace03d41a741f06/patchright-1.61.2-py3-none-macosx_11_0_arm64.whl", hash = "sha256:a3da24d7890631255c7bef467b94ffe7f7bfa36f96fc72c10d5787d3cb396873", size = 42512921, upload-time = "2026-07-05T21:17:55.657Z" },
+    { url = "https://files.pythonhosted.org/packages/e4/d0/d730536a7fc43c3aaf2781518595ca71ffa1fc2f24e580c0d0cf04e00eca/patchright-1.61.2-py3-none-macosx_11_0_universal2.whl", hash = "sha256:edef852aa7d28791fa2d3f7ce135edfea2ce07a2bc5e0a74fb2dfe269af62223", size = 43727573, upload-time = "2026-07-05T21:17:59.121Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/b5/c76dcda275cb0d9651321e343f3268609ae24cef196bff56751754ffba16/patchright-1.61.2-py3-none-manylinux1_x86_64.whl", hash = "sha256:545bdf2c0bb5f9ad78ab315e91c8c2990cc6a702e7f18650b71fe1071049b5c1", size = 47729338, upload-time = "2026-07-05T21:18:02.608Z" },
+    { url = "https://files.pythonhosted.org/packages/19/ef/5de6feaedf47a6ba8efb9e8c4f8a42bad29cc59c35bbd088b1729a36b271/patchright-1.61.2-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1824da30cf6560749bc1bb4a7f002fec325d5b709090dd7c8c1b643899331cee", size = 47426969, upload-time = "2026-07-05T21:18:06.88Z" },
+    { url = "https://files.pythonhosted.org/packages/6c/6e/ce2c5d03a4c785ac8f3e0180bbf83ef85149cf41fdfa41c09bd8cbcfd945/patchright-1.61.2-py3-none-win32.whl", hash = "sha256:a5aaf4cec2bd38714f2447f84bcdfe7dcb592a16e9616bf6d2d872066d1c78af", size = 38155048, upload-time = "2026-07-05T21:18:09.938Z" },
+    { url = "https://files.pythonhosted.org/packages/46/c8/fceb57b9d32ed078f53fc6a757c6e4b54cb117f59412938252a3359105e5/patchright-1.61.2-py3-none-win_amd64.whl", hash = "sha256:506bca9b72e609fd8fee35e2a3ad26e5d92e25337002f5c2cdad53d5cacb0b67", size = 38155052, upload-time = "2026-07-05T21:18:13.051Z" },
+    { url = "https://files.pythonhosted.org/packages/33/96/67a791c6b7cd76424b44d356beaf414ab97c3aef2d42fad4641e7905b41d/patchright-1.61.2-py3-none-win_arm64.whl", hash = "sha256:3dee1e2daada9f98653763831f688d39c924e0cf0eeb988e8047b703766cee73", size = 34268624, upload-time = "2026-07-05T21:18:15.966Z" },
+]
+
 [[package]]
 name = "pathable"
 version = "0.4.4"
@@ -2417,6 +2701,37 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/28/3bfe2fa5a7b9c46fe7e13c97bda14c895fb10fa2ebf1d0abb90e0cea7ee1/platformdirs-4.5.1-py3-none-any.whl", hash = "sha256:d03afa3963c806a9bed9d5125c8f4cb2fdaf74a55ab60e5d59b3fde758104d31", size = 18731, upload-time = "2025-12-05T13:52:56.823Z" },
 ]
 
+[[package]]
+name = "playwright"
+version = "1.61.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "greenlet" },
+    { name = "pyee" },
+]
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/44/ee/31e4e0db36588b817a10b299a0285082545fde7d36543c2abe498bb3d61a/playwright-1.61.0-py3-none-macosx_10_13_x86_64.whl", hash = "sha256:ff138c3a604f69911e9d42fd036e55c2a171e5616edf04c1e7f60a2a285540b0", size = 43421877, upload-time = "2026-06-29T10:32:48.428Z" },
+    { url = "https://files.pythonhosted.org/packages/42/35/71395dd3ecc798965be4a3ef8c443217d4abca168e7cb34536304f9489e6/playwright-1.61.0-py3-none-macosx_11_0_arm64.whl", hash = "sha256:009588c2a7e499bc5a8b425b61fa65490968bbda9cd69e0cf2cff10f8304659a", size = 42205016, upload-time = "2026-06-29T10:32:52.104Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/44/323164cf5cd1647bdefce76ffce27651aadb959d089b48f53ea40918276e/playwright-1.61.0-py3-none-macosx_11_0_universal2.whl", hash = "sha256:9f7de4536088d12037c13a52b7ea34b59270b78926bb56935070597ffac6b1af", size = 43421884, upload-time = "2026-06-29T10:32:55.773Z" },
+    { url = "https://files.pythonhosted.org/packages/ab/f8/a35bf179e4ba2522c1893635094a64e407572547bd61528820fc0abc87fe/playwright-1.61.0-py3-none-manylinux1_x86_64.whl", hash = "sha256:54f3b39f6eab832e33458c1dd7da0b5682aedab3b09ae731b5c59fa12fd2024e", size = 47421381, upload-time = "2026-06-29T10:32:59.903Z" },
+    { url = "https://files.pythonhosted.org/packages/b7/eb/e3f922348ec17c315f98c463f72faa1181a1c3de0bfe31a8d2edf6561723/playwright-1.61.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:93454322ade8c11d5d6c211bfd91bdfb9ffb4810e3e026371bcbc4bec1b7ee4c", size = 47120545, upload-time = "2026-06-29T10:33:03.574Z" },
+    { url = "https://files.pythonhosted.org/packages/c2/a6/5be4e52b40a9c0c8a073e7c5b0785c05cf5a9ea8f8a7b5b260e32d970342/playwright-1.61.0-py3-none-win32.whl", hash = "sha256:372d55a6f1248fa1dd47599686980cb8fb5bbe6fcda59eab793eb657c11d8a9b", size = 37844841, upload-time = "2026-06-29T10:33:07.361Z" },
+    { url = "https://files.pythonhosted.org/packages/6c/fd/2b78036e5fbe9d5f5645bbe08a1eac7160c51243c0093963edbcf67c35d9/playwright-1.61.0-py3-none-win_amd64.whl", hash = "sha256:35c6cc4589a5d00964a59d7b3e59641e0aac0c02f15479a7af77d20f6bc79597", size = 37844846, upload-time = "2026-06-29T10:33:10.637Z" },
+    { url = "https://files.pythonhosted.org/packages/27/0d/1b0f3c4ee4eb0514bc805b5c2f9a223e5b6de4f11a926f5235d51d0fc81b/playwright-1.61.0-py3-none-win_arm64.whl", hash = "sha256:e9fcbffcf557a8620fdedd92491eb59a32d18e23d6f3b4f6214b952be324fe51", size = 33955127, upload-time = "2026-06-29T10:33:14.008Z" },
+]
+
+[[package]]
+name = "playwright-stealth"
+version = "2.0.3"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "playwright" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/a4/db/6ade5d539c7d151b9defc78fafa8b65aa52352617d0e7699b47008bd801f/playwright_stealth-2.0.3.tar.gz", hash = "sha256:1d8e488fbdd8f190f1269ea8cf5d57d14df3a9f1af1001c41ee3588b2aac3133", size = 25751, upload-time = "2026-04-04T02:50:33.88Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/b5/10/607c409712c02a26c4cb794820514cb7fdaaeac15fb05bed917fb8a354b3/playwright_stealth-2.0.3-py3-none-any.whl", hash = "sha256:1887ade423ab7ff8ae16d363a30a38de0b5817e1e4a29d47b74bf3a0e3dbfcb4", size = 34385, upload-time = "2026-04-04T02:50:35.246Z" },
+]
+
 [[package]]
 name = "pluggy"
 version = "1.6.0"
@@ -2726,6 +3041,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a6/53/d78dc063216e62fc55f6b2eebb447f6a4b0a59f55c8406376f76bf959b08/pydub-0.25.1-py2.py3-none-any.whl", hash = "sha256:65617e33033874b59d87db603aa1ed450633288aefead953b30bded59cb599a6", size = 32327, upload-time = "2021-03-10T02:09:53.503Z" },
 ]
 
+[[package]]
+name = "pyee"
+version = "13.0.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/8b/04/e7c1fe4dc78a6fdbfd6c337b1c3732ff543b8a397683ab38378447baa331/pyee-13.0.1.tar.gz", hash = "sha256:0b931f7c14535667ed4c7e0d531716368715e860b988770fc7eb8578d1f67fc8", size = 31655, upload-time = "2026-02-14T21:12:28.044Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/a0/c4/b4d4827c93ef43c01f599ef31453ccc1c132b353284fc6c87d535c233129/pyee-13.0.1-py3-none-any.whl", hash = "sha256:af2f8fede4171ef667dfded53f96e2ed0d6e6bd7ee3bb46437f77e3b57689228", size = 15659, upload-time = "2026-02-14T21:12:26.263Z" },
+]
+
 [[package]]
 name = "pygments"
 version = "2.20.0"
@@ -2749,6 +3076,19 @@ crypto = [
     { name = "cryptography" },
 ]
 
+[[package]]
+name = "pyopenssl"
+version = "26.2.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "cryptography" },
+    { name = "typing-extensions" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/1a/51/27a5ad5f939d08f690a326ef9582cda7140555180db71695f6fb747d6a36/pyopenssl-26.2.0.tar.gz", hash = "sha256:8c6fcecd1183a7fc897548dfe388b0cdb7f37e018200d8409cf33959dbe35387", size = 182195, upload-time = "2026-05-04T23:06:09.72Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/73/b8/a0e2790ae249d6f38c9f66de7a211621a7ab2650217bcd04e1262f578a56/pyopenssl-26.2.0-py3-none-any.whl", hash = "sha256:4f9d971bc5298b8bc1fab282803da04bf000c755d4ad9d99b52de2569ca19a70", size = 55823, upload-time = "2026-05-04T23:06:08.395Z" },
+]
+
 [[package]]
 name = "pypdfium2"
 version = "5.11.0"
@@ -2986,6 +3326,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/01/1b/5dbe84eefc86f48473947e2f41711aded97eecef1231f4558f1f02713c12/pyzmq-27.1.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:c9f7f6e13dff2e44a6afeaf2cf54cee5929ad64afaf4d40b50f93c58fc687355", size = 544862, upload-time = "2025-09-08T23:09:56.509Z" },
 ]
 
+[[package]]
+name = "rank-bm25"
+version = "0.2.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "numpy" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/fc/0a/f9579384aa017d8b4c15613f86954b92a95a93d641cc849182467cf0bb3b/rank_bm25-0.2.2.tar.gz", hash = "sha256:096ccef76f8188563419aaf384a02f0ea459503fdf77901378d4fd9d87e5e51d", size = 8347, upload-time = "2022-02-16T12:10:52.196Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/2a/21/f691fb2613100a62b3fa91e9988c991e9ca5b89ea31c0d3152a3210344f9/rank_bm25-0.2.2-py3-none-any.whl", hash = "sha256:7bd4a95571adadfc271746fa146a4bcfd89c0cf731e49c3d1ad863290adbe8ae", size = 8584, upload-time = "2022-02-16T12:10:50.626Z" },
+]
+
 [[package]]
 name = "readability-lxml"
 version = "0.8.4.1"
@@ -3169,6 +3521,22 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/64/8d/0133e4eb4beed9e425d9a98ed6e081a55d195481b7632472be1af08d2f6b/rsa-4.9.1-py3-none-any.whl", hash = "sha256:68635866661c6836b8d39430f97a996acbd61bfa49406748ea243539fe239762", size = 34696, upload-time = "2025-04-16T09:51:17.142Z" },
 ]
 
+[[package]]
+name = "rtree"
+version = "1.4.1"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/95/09/7302695875a019514de9a5dd17b8320e7a19d6e7bc8f85dcfb79a4ce2da3/rtree-1.4.1.tar.gz", hash = "sha256:c6b1b3550881e57ebe530cc6cffefc87cd9bf49c30b37b894065a9f810875e46", size = 52425, upload-time = "2025-08-13T19:32:01.413Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/04/d9/108cd989a4c0954e60b3cdc86fd2826407702b5375f6dfdab2802e5fed98/rtree-1.4.1-py3-none-macosx_10_9_x86_64.whl", hash = "sha256:d672184298527522d4914d8ae53bf76982b86ca420b0acde9298a7a87d81d4a4", size = 468484, upload-time = "2025-08-13T19:31:50.593Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/cf/2710b6fd6b07ea0aef317b29f335790ba6adf06a28ac236078ed9bd8a91d/rtree-1.4.1-py3-none-macosx_11_0_arm64.whl", hash = "sha256:a7e48d805e12011c2cf739a29d6a60ae852fb1de9fc84220bbcef67e6e595d7d", size = 436325, upload-time = "2025-08-13T19:31:52.367Z" },
+    { url = "https://files.pythonhosted.org/packages/55/e1/4d075268a46e68db3cac51846eb6a3ab96ed481c585c5a1ad411b3c23aad/rtree-1.4.1-py3-none-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:efa8c4496e31e9ad58ff6c7df89abceac7022d906cb64a3e18e4fceae6b77f65", size = 459789, upload-time = "2025-08-13T19:31:53.926Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/75/e5d44be90525cd28503e7f836d077ae6663ec0687a13ba7810b4114b3668/rtree-1.4.1-py3-none-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:12de4578f1b3381a93a655846900be4e3d5f4cd5e306b8b00aa77c1121dc7e8c", size = 507644, upload-time = "2025-08-13T19:31:55.164Z" },
+    { url = "https://files.pythonhosted.org/packages/fd/85/b8684f769a142163b52859a38a486493b05bafb4f2fb71d4f945de28ebf9/rtree-1.4.1-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:b558edda52eca3e6d1ee629042192c65e6b7f2c150d6d6cd207ce82f85be3967", size = 1454478, upload-time = "2025-08-13T19:31:56.808Z" },
+    { url = "https://files.pythonhosted.org/packages/e9/a4/c2292b95246b9165cc43a0c3757e80995d58bc9b43da5cb47ad6e3535213/rtree-1.4.1-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:f155bc8d6bac9dcd383481dee8c130947a4866db1d16cb6dff442329a038a0dc", size = 1555140, upload-time = "2025-08-13T19:31:58.031Z" },
+    { url = "https://files.pythonhosted.org/packages/74/25/5282c8270bfcd620d3e73beb35b40ac4ab00f0a898d98ebeb41ef0989ec8/rtree-1.4.1-py3-none-win_amd64.whl", hash = "sha256:efe125f416fd27150197ab8521158662943a40f87acab8028a1aac4ad667a489", size = 389358, upload-time = "2025-08-13T19:31:59.247Z" },
+    { url = "https://files.pythonhosted.org/packages/3f/50/0a9e7e7afe7339bd5e36911f0ceb15fed51945836ed803ae5afd661057fd/rtree-1.4.1-py3-none-win_arm64.whl", hash = "sha256:3d46f55729b28138e897ffef32f7ce93ac335cb67f9120125ad3742a220800f0", size = 355253, upload-time = "2025-08-13T19:32:00.296Z" },
+]
+
 [[package]]
 name = "ruff"
 version = "0.14.13"
@@ -3195,6 +3563,68 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4d/e1/7348090988095e4e39560cfc2f7555b1b2a7357deba19167b600fdf5215d/ruff-0.14.13-py3-none-win_arm64.whl", hash = "sha256:7ab819e14f1ad9fe39f246cfcc435880ef7a9390d81a2b6ac7e01039083dd247", size = 13080224, upload-time = "2026-01-15T20:14:45.853Z" },
 ]
 
+[[package]]
+name = "scipy"
+version = "1.17.1"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version < '3.12' and sys_platform == 'win32'",
+    "python_full_version < '3.12' and sys_platform == 'emscripten'",
+    "python_full_version < '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
+]
+dependencies = [
+    { name = "numpy", marker = "python_full_version < '3.12'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/7a/97/5a3609c4f8d58b039179648e62dd220f89864f56f7357f5d4f45c29eb2cc/scipy-1.17.1.tar.gz", hash = "sha256:95d8e012d8cb8816c226aef832200b1d45109ed4464303e997c5b13122b297c0", size = 30573822, upload-time = "2026-02-23T00:26:24.851Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/df/75/b4ce781849931fef6fd529afa6b63711d5a733065722d0c3e2724af9e40a/scipy-1.17.1-cp311-cp311-macosx_10_14_x86_64.whl", hash = "sha256:1f95b894f13729334fb990162e911c9e5dc1ab390c58aa6cbecb389c5b5e28ec", size = 31613675, upload-time = "2026-02-23T00:16:00.13Z" },
+    { url = "https://files.pythonhosted.org/packages/f7/58/bccc2861b305abdd1b8663d6130c0b3d7cc22e8d86663edbc8401bfd40d4/scipy-1.17.1-cp311-cp311-macosx_12_0_arm64.whl", hash = "sha256:e18f12c6b0bc5a592ed23d3f7b891f68fd7f8241d69b7883769eb5d5dfb52696", size = 28162057, upload-time = "2026-02-23T00:16:09.456Z" },
+    { url = "https://files.pythonhosted.org/packages/6d/ee/18146b7757ed4976276b9c9819108adbc73c5aad636e5353e20746b73069/scipy-1.17.1-cp311-cp311-macosx_14_0_arm64.whl", hash = "sha256:a3472cfbca0a54177d0faa68f697d8ba4c80bbdc19908c3465556d9f7efce9ee", size = 20334032, upload-time = "2026-02-23T00:16:17.358Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/e6/cef1cf3557f0c54954198554a10016b6a03b2ec9e22a4e1df734936bd99c/scipy-1.17.1-cp311-cp311-macosx_14_0_x86_64.whl", hash = "sha256:766e0dc5a616d026a3a1cffa379af959671729083882f50307e18175797b3dfd", size = 22709533, upload-time = "2026-02-23T00:16:25.791Z" },
+    { url = "https://files.pythonhosted.org/packages/4d/60/8804678875fc59362b0fb759ab3ecce1f09c10a735680318ac30da8cd76b/scipy-1.17.1-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:744b2bf3640d907b79f3fd7874efe432d1cf171ee721243e350f55234b4cec4c", size = 33062057, upload-time = "2026-02-23T00:16:36.931Z" },
+    { url = "https://files.pythonhosted.org/packages/09/7d/af933f0f6e0767995b4e2d705a0665e454d1c19402aa7e895de3951ebb04/scipy-1.17.1-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:43af8d1f3bea642559019edfe64e9b11192a8978efbd1539d7bc2aaa23d92de4", size = 35349300, upload-time = "2026-02-23T00:16:49.108Z" },
+    { url = "https://files.pythonhosted.org/packages/b4/3d/7ccbbdcbb54c8fdc20d3b6930137c782a163fa626f0aef920349873421ba/scipy-1.17.1-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:cd96a1898c0a47be4520327e01f874acfd61fb48a9420f8aa9f6483412ffa444", size = 35127333, upload-time = "2026-02-23T00:17:01.293Z" },
+    { url = "https://files.pythonhosted.org/packages/e8/19/f926cb11c42b15ba08e3a71e376d816ac08614f769b4f47e06c3580c836a/scipy-1.17.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:4eb6c25dd62ee8d5edf68a8e1c171dd71c292fdae95d8aeb3dd7d7de4c364082", size = 37741314, upload-time = "2026-02-23T00:17:12.576Z" },
+    { url = "https://files.pythonhosted.org/packages/95/da/0d1df507cf574b3f224ccc3d45244c9a1d732c81dcb26b1e8a766ae271a8/scipy-1.17.1-cp311-cp311-win_amd64.whl", hash = "sha256:d30e57c72013c2a4fe441c2fcb8e77b14e152ad48b5464858e07e2ad9fbfceff", size = 36607512, upload-time = "2026-02-23T00:17:23.424Z" },
+    { url = "https://files.pythonhosted.org/packages/68/7f/bdd79ceaad24b671543ffe0ef61ed8e659440eb683b66f033454dcee90eb/scipy-1.17.1-cp311-cp311-win_arm64.whl", hash = "sha256:9ecb4efb1cd6e8c4afea0daa91a87fbddbce1b99d2895d151596716c0b2e859d", size = 24599248, upload-time = "2026-02-23T00:17:34.561Z" },
+    { url = "https://files.pythonhosted.org/packages/35/48/b992b488d6f299dbe3f11a20b24d3dda3d46f1a635ede1c46b5b17a7b163/scipy-1.17.1-cp312-cp312-macosx_10_14_x86_64.whl", hash = "sha256:35c3a56d2ef83efc372eaec584314bd0ef2e2f0d2adb21c55e6ad5b344c0dcb8", size = 31610954, upload-time = "2026-02-23T00:17:49.855Z" },
+    { url = "https://files.pythonhosted.org/packages/b2/02/cf107b01494c19dc100f1d0b7ac3cc08666e96ba2d64db7626066cee895e/scipy-1.17.1-cp312-cp312-macosx_12_0_arm64.whl", hash = "sha256:fcb310ddb270a06114bb64bbe53c94926b943f5b7f0842194d585c65eb4edd76", size = 28172662, upload-time = "2026-02-23T00:18:01.64Z" },
+    { url = "https://files.pythonhosted.org/packages/cf/a9/599c28631bad314d219cf9ffd40e985b24d603fc8a2f4ccc5ae8419a535b/scipy-1.17.1-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:cc90d2e9c7e5c7f1a482c9875007c095c3194b1cfedca3c2f3291cdc2bc7c086", size = 20344366, upload-time = "2026-02-23T00:18:12.015Z" },
+    { url = "https://files.pythonhosted.org/packages/35/f5/906eda513271c8deb5af284e5ef0206d17a96239af79f9fa0aebfe0e36b4/scipy-1.17.1-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:c80be5ede8f3f8eded4eff73cc99a25c388ce98e555b17d31da05287015ffa5b", size = 22704017, upload-time = "2026-02-23T00:18:21.502Z" },
+    { url = "https://files.pythonhosted.org/packages/da/34/16f10e3042d2f1d6b66e0428308ab52224b6a23049cb2f5c1756f713815f/scipy-1.17.1-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:e19ebea31758fac5893a2ac360fedd00116cbb7628e650842a6691ba7ca28a21", size = 32927842, upload-time = "2026-02-23T00:18:35.367Z" },
+    { url = "https://files.pythonhosted.org/packages/01/8e/1e35281b8ab6d5d72ebe9911edcdffa3f36b04ed9d51dec6dd140396e220/scipy-1.17.1-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:02ae3b274fde71c5e92ac4d54bc06c42d80e399fec704383dcd99b301df37458", size = 35235890, upload-time = "2026-02-23T00:18:49.188Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/5c/9d7f4c88bea6e0d5a4f1bc0506a53a00e9fcb198de372bfe4d3652cef482/scipy-1.17.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:8a604bae87c6195d8b1045eddece0514d041604b14f2727bbc2b3020172045eb", size = 35003557, upload-time = "2026-02-23T00:18:54.74Z" },
+    { url = "https://files.pythonhosted.org/packages/65/94/7698add8f276dbab7a9de9fb6b0e02fc13ee61d51c7c3f85ac28b65e1239/scipy-1.17.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:f590cd684941912d10becc07325a3eeb77886fe981415660d9265c4c418d0bea", size = 37625856, upload-time = "2026-02-23T00:19:00.307Z" },
+    { url = "https://files.pythonhosted.org/packages/a2/84/dc08d77fbf3d87d3ee27f6a0c6dcce1de5829a64f2eae85a0ecc1f0daa73/scipy-1.17.1-cp312-cp312-win_amd64.whl", hash = "sha256:41b71f4a3a4cab9d366cd9065b288efc4d4f3c0b37a91a8e0947fb5bd7f31d87", size = 36549682, upload-time = "2026-02-23T00:19:07.67Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/98/fe9ae9ffb3b54b62559f52dedaebe204b408db8109a8c66fdd04869e6424/scipy-1.17.1-cp312-cp312-win_arm64.whl", hash = "sha256:f4115102802df98b2b0db3cce5cb9b92572633a1197c77b7553e5203f284a5b3", size = 24547340, upload-time = "2026-02-23T00:19:12.024Z" },
+]
+
+[[package]]
+name = "scipy"
+version = "1.18.0"
+source = { registry = "https://pypi.org/simple" }
+resolution-markers = [
+    "python_full_version >= '3.12' and sys_platform == 'win32'",
+    "python_full_version >= '3.12' and sys_platform == 'emscripten'",
+    "python_full_version >= '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
+]
+dependencies = [
+    { name = "numpy", marker = "python_full_version >= '3.12'" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/a7/25/c2700dfaf6442b4effaa91af24ebce5dc9d31bb4a69706313aae70d72cd0/scipy-1.18.0.tar.gz", hash = "sha256:67b2ad2ad54c72ca6d04975a9b2df8c3638c34ddd5b28738e94fc2b57929d378", size = 30774447, upload-time = "2026-06-19T15:01:43.456Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/6a/19/ca10ead60b0acc80b2b833c2c4a4f2ff753d0f58b811f70d911c7e94a25c/scipy-1.18.0-cp312-cp312-macosx_10_15_x86_64.whl", hash = "sha256:7bd21faaf5a1a3b2eff922d02db5f191b99a6518db9078a8fb23169f6d22259a", size = 31056519, upload-time = "2026-06-19T14:59:45.203Z" },
+    { url = "https://files.pythonhosted.org/packages/96/72/1e6442a00cd2924d361aa1b642ab6373ec35c6fabf311a760be9f76e0f13/scipy-1.18.0-cp312-cp312-macosx_12_0_arm64.whl", hash = "sha256:265915e79107de9f946b855e50d7470d5893ec3f54b342e1aa6201cbdcd8bb6b", size = 28681889, upload-time = "2026-06-19T14:59:48.103Z" },
+    { url = "https://files.pythonhosted.org/packages/9b/2d/11dd93d21e147a73ba22bd75c0b9208d3a2e0ec76d53170ce7d9029b1015/scipy-1.18.0-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:9ab7b758be6940954a713ee466e2043e9f6e2ed965c1fce5c91039f4be3d90a9", size = 20423580, upload-time = "2026-06-19T14:59:50.665Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/01/93552f75e0d2a7dd115a45e59209c51e8d514daff02fc887d2623be06fe1/scipy-1.18.0-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:97b6cddaaee0a779ef6b5ca83c9604b27cc16b2b8fc22c142652df8793319fb8", size = 23054441, upload-time = "2026-06-19T14:59:53.564Z" },
+    { url = "https://files.pythonhosted.org/packages/3c/23/21f5e703643d66f21faa6b4c73195bfcad70c55efcb4f1ab327cd7c4101a/scipy-1.18.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:52a96e21517c7292375c0e27dd796a811f03fcea5fd4d108fdfea8145dcf17ab", size = 33968720, upload-time = "2026-06-19T14:59:56.415Z" },
+    { url = "https://files.pythonhosted.org/packages/dd/aa/1b939f6c67ed68635bb538e6752d3dacc02f66535182e939a89581a44e9c/scipy-1.18.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:1f55797419e16e7f30cf88ffb3113ce0467f00cfe3f70d5c281730b21769bfc2", size = 35287115, upload-time = "2026-06-19T14:59:59.411Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/ff/eec46be7e9234208f801062b53e1983085eddebd693f6c9bfb03b459830d/scipy-1.18.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:ad033410e2e0672ffdc1042110cef20e1c46f8fd0616cee1d44d8d58fad8fc11", size = 35577989, upload-time = "2026-06-19T15:00:02.235Z" },
+    { url = "https://files.pythonhosted.org/packages/84/ca/210d4759c7210bb7d269437421959b39a33434e2776b60c5cb8a763bb30a/scipy-1.18.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:4a55985d54c769c872e64b7f4c8a81cc30ef700cc04296abbbf3705439c126de", size = 37421717, upload-time = "2026-06-19T15:00:05.102Z" },
+    { url = "https://files.pythonhosted.org/packages/2b/54/9a9edb45345bd6744da5ddfb6628e5d5185920494c6a67ec45b6381004cb/scipy-1.18.0-cp312-cp312-win_amd64.whl", hash = "sha256:71ccc8faa2dd16ac310233203474a8b5cb67f10dedd54a3116d34943f4b19132", size = 36597428, upload-time = "2026-06-19T15:00:08.112Z" },
+    { url = "https://files.pythonhosted.org/packages/99/0e/33f32a2a58987e26aec0f7df252cbbad1e90ae77bdbc76f40dd4ed0cf0ea/scipy-1.18.0-cp312-cp312-win_arm64.whl", hash = "sha256:d88363fd9d8fbd3511bd273f1a49efb2a540773ddf92a91d57498ce7dd7f3e76", size = 24351481, upload-time = "2026-06-19T15:00:11.103Z" },
+]
+
 [[package]]
 name = "secretstorage"
 version = "3.5.0"
@@ -3208,6 +3638,33 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/b7/46/f5af3402b579fd5e11573ce652019a67074317e18c1935cc0b4ba9b35552/secretstorage-3.5.0-py3-none-any.whl", hash = "sha256:0ce65888c0725fcb2c5bc0fdb8e5438eece02c523557ea40ce0703c266248137", size = 15554, upload-time = "2025-11-23T19:02:51.545Z" },
 ]
 
+[[package]]
+name = "shapely"
+version = "2.1.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "numpy" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/4d/bc/0989043118a27cccb4e906a46b7565ce36ca7b57f5a18b78f4f1b0f72d9d/shapely-2.1.2.tar.gz", hash = "sha256:2ed4ecb28320a433db18a5bf029986aa8afcfd740745e78847e330d5d94922a9", size = 315489, upload-time = "2025-09-24T13:51:41.432Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/8f/8d/1ff672dea9ec6a7b5d422eb6d095ed886e2e523733329f75fdcb14ee1149/shapely-2.1.2-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:91121757b0a36c9aac3427a651a7e6567110a4a67c97edf04f8d55d4765f6618", size = 1820038, upload-time = "2025-09-24T13:50:15.628Z" },
+    { url = "https://files.pythonhosted.org/packages/4f/ce/28fab8c772ce5db23a0d86bf0adaee0c4c79d5ad1db766055fa3dab442e2/shapely-2.1.2-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:16a9c722ba774cf50b5d4541242b4cce05aafd44a015290c82ba8a16931ff63d", size = 1626039, upload-time = "2025-09-24T13:50:16.881Z" },
+    { url = "https://files.pythonhosted.org/packages/70/8b/868b7e3f4982f5006e9395c1e12343c66a8155c0374fdc07c0e6a1ab547d/shapely-2.1.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:cc4f7397459b12c0b196c9efe1f9d7e92463cbba142632b4cc6d8bbbbd3e2b09", size = 3001519, upload-time = "2025-09-24T13:50:18.606Z" },
+    { url = "https://files.pythonhosted.org/packages/13/02/58b0b8d9c17c93ab6340edd8b7308c0c5a5b81f94ce65705819b7416dba5/shapely-2.1.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:136ab87b17e733e22f0961504d05e77e7be8c9b5a8184f685b4a91a84efe3c26", size = 3110842, upload-time = "2025-09-24T13:50:21.77Z" },
+    { url = "https://files.pythonhosted.org/packages/af/61/8e389c97994d5f331dcffb25e2fa761aeedfb52b3ad9bcdd7b8671f4810a/shapely-2.1.2-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:16c5d0fc45d3aa0a69074979f4f1928ca2734fb2e0dde8af9611e134e46774e7", size = 4021316, upload-time = "2025-09-24T13:50:23.626Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/d4/9b2a9fe6039f9e42ccf2cb3e84f219fd8364b0c3b8e7bbc857b5fbe9c14c/shapely-2.1.2-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:6ddc759f72b5b2b0f54a7e7cde44acef680a55019eb52ac63a7af2cf17cb9cd2", size = 4178586, upload-time = "2025-09-24T13:50:25.443Z" },
+    { url = "https://files.pythonhosted.org/packages/16/f6/9840f6963ed4decf76b08fd6d7fed14f8779fb7a62cb45c5617fa8ac6eab/shapely-2.1.2-cp311-cp311-win32.whl", hash = "sha256:2fa78b49485391224755a856ed3b3bd91c8455f6121fee0db0e71cefb07d0ef6", size = 1543961, upload-time = "2025-09-24T13:50:26.968Z" },
+    { url = "https://files.pythonhosted.org/packages/38/1e/3f8ea46353c2a33c1669eb7327f9665103aa3a8dfe7f2e4ef714c210b2c2/shapely-2.1.2-cp311-cp311-win_amd64.whl", hash = "sha256:c64d5c97b2f47e3cd9b712eaced3b061f2b71234b3fc263e0fcf7d889c6559dc", size = 1722856, upload-time = "2025-09-24T13:50:28.497Z" },
+    { url = "https://files.pythonhosted.org/packages/24/c0/f3b6453cf2dfa99adc0ba6675f9aaff9e526d2224cbd7ff9c1a879238693/shapely-2.1.2-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:fe2533caae6a91a543dec62e8360fe86ffcdc42a7c55f9dfd0128a977a896b94", size = 1833550, upload-time = "2025-09-24T13:50:30.019Z" },
+    { url = "https://files.pythonhosted.org/packages/86/07/59dee0bc4b913b7ab59ab1086225baca5b8f19865e6101db9ebb7243e132/shapely-2.1.2-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ba4d1333cc0bc94381d6d4308d2e4e008e0bd128bdcff5573199742ee3634359", size = 1643556, upload-time = "2025-09-24T13:50:32.291Z" },
+    { url = "https://files.pythonhosted.org/packages/26/29/a5397e75b435b9895cd53e165083faed5d12fd9626eadec15a83a2411f0f/shapely-2.1.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:0bd308103340030feef6c111d3eb98d50dc13feea33affc8a6f9fa549e9458a3", size = 2988308, upload-time = "2025-09-24T13:50:33.862Z" },
+    { url = "https://files.pythonhosted.org/packages/b9/37/e781683abac55dde9771e086b790e554811a71ed0b2b8a1e789b7430dd44/shapely-2.1.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:1e7d4d7ad262a48bb44277ca12c7c78cb1b0f56b32c10734ec9a1d30c0b0c54b", size = 3099844, upload-time = "2025-09-24T13:50:35.459Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/f3/9876b64d4a5a321b9dc482c92bb6f061f2fa42131cba643c699f39317cb9/shapely-2.1.2-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:e9eddfe513096a71896441a7c37db72da0687b34752c4e193577a145c71736fc", size = 3988842, upload-time = "2025-09-24T13:50:37.478Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/a0/704c7292f7014c7e74ec84eddb7b109e1fbae74a16deae9c1504b1d15565/shapely-2.1.2-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:980c777c612514c0cf99bc8a9de6d286f5e186dcaf9091252fcd444e5638193d", size = 4152714, upload-time = "2025-09-24T13:50:39.9Z" },
+    { url = "https://files.pythonhosted.org/packages/53/46/319c9dc788884ad0785242543cdffac0e6530e4d0deb6c4862bc4143dcf3/shapely-2.1.2-cp312-cp312-win32.whl", hash = "sha256:9111274b88e4d7b54a95218e243282709b330ef52b7b86bc6aaf4f805306f454", size = 1542745, upload-time = "2025-09-24T13:50:41.414Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/bf/cb6c1c505cb31e818e900b9312d514f381fbfa5c4363edfce0fcc4f8c1a4/shapely-2.1.2-cp312-cp312-win_amd64.whl", hash = "sha256:743044b4cfb34f9a67205cee9279feaf60ba7d02e69febc2afc609047cb49179", size = 1722861, upload-time = "2025-09-24T13:50:43.35Z" },
+]
+
 [[package]]
 name = "shellingham"
 version = "1.5.4"
@@ -3235,6 +3692,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e9/44/75a9c9421471a6c4805dbf2356f7c181a29c1879239abab1ea2cc8f38b40/sniffio-1.3.1-py3-none-any.whl", hash = "sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2", size = 10235, upload-time = "2024-02-25T23:20:01.196Z" },
 ]
 
+[[package]]
+name = "snowballstemmer"
+version = "2.2.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/44/7b/af302bebf22c749c56c9c3e8ae13190b5b5db37a33d9068652e8f73b7089/snowballstemmer-2.2.0.tar.gz", hash = "sha256:09b16deb8547d3412ad7b590689584cd0fe25ec8db3be37788be3810cbf19cb1", size = 86699, upload-time = "2021-11-16T18:38:38.009Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/ed/dc/c02e01294f7265e63a7315fe086dd1df7dacb9f840a804da846b96d01b96/snowballstemmer-2.2.0-py2.py3-none-any.whl", hash = "sha256:c8e1716e83cc398ae16824e5572ae04e0d9fc2c6b985fb0f900f5f0c96ecba1a", size = 93002, upload-time = "2021-11-16T18:38:34.792Z" },
+]
+
 [[package]]
 name = "socksio"
 version = "1.0.0"
@@ -3471,6 +3937,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/00/c0/8f5d070730d7836adc9c9b6408dec68c6ced86b304a9b26a14df072a6e8c/traitlets-5.14.3-py3-none-any.whl", hash = "sha256:b74e89e397b1ed28cc831db7aea759ba6640cb3de13090ca145426688ff1ac4f", size = 85359, upload-time = "2024-04-19T11:11:46.763Z" },
 ]
 
+[[package]]
+name = "trimesh"
+version = "4.12.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "numpy" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/79/37/5cb90f04990260d2caceb6093560c6cefafca1ec522c1e43be01ca658244/trimesh-4.12.2.tar.gz", hash = "sha256:c8ca31571ac00b112e4e160e66a2d4c3491df321f056bd33806be0485d1af9d9", size = 842220, upload-time = "2026-05-01T00:57:43.333Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/05/98/716a473cfb24750858ddd5d14e6527539dd206583a46408d08eeb2844a75/trimesh-4.12.2-py3-none-any.whl", hash = "sha256:b5b5afa63c5272345f2858f7676bc8c217dc8a89f4fadf6193fe10a81b5ff2aa", size = 741043, upload-time = "2026-05-01T00:57:40.763Z" },
+]
+
 [[package]]
 name = "typer"
 version = "0.21.1"
@@ -3550,6 +4028,29 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/ff/7f/4320d9ce3be404e6310b915c3629fe27bf1e2f438a1a7a3cb0396e32e9a9/uncalled_for-0.2.0-py3-none-any.whl", hash = "sha256:2c0bd338faff5f930918f79e7eb9ff48290df2cb05fcc0b40a7f334e55d4d85f", size = 11351, upload-time = "2026-02-27T17:40:56.804Z" },
 ]
 
+[[package]]
+name = "unclecode-litellm"
+version = "1.81.13"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "aiohttp" },
+    { name = "click" },
+    { name = "fastuuid" },
+    { name = "httpx" },
+    { name = "importlib-metadata" },
+    { name = "jinja2" },
+    { name = "jsonschema" },
+    { name = "openai" },
+    { name = "pydantic" },
+    { name = "python-dotenv" },
+    { name = "tiktoken" },
+    { name = "tokenizers" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/ce/c4/93ed52c49c2347184f908c692ebb7c1f06303805910774c3282ac68033db/unclecode_litellm-1.81.13.tar.gz", hash = "sha256:db70e34e3e859c0a07f02cb02eaa644f8fa4b4ecc5e2f3be9a58bd7d1c3feedc", size = 16678208, upload-time = "2026-03-24T14:46:31.915Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/43/85/7b1e0bc5827bcb23dc572b17c447fb5825340f36a9e4405d4b777b862e0c/unclecode_litellm-1.81.13-py3-none-any.whl", hash = "sha256:5e1fbedbed92333b48e7371e0bacf86d1288020451bf34351703c3b159591399", size = 18008619, upload-time = "2026-03-24T14:46:28.009Z" },
+]
+
 [[package]]
 name = "urllib3"
 version = "2.7.0"

From 7dfe8aa0a755954fd67408616c9ec4dc3cf54ddc Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 12 Jul 2026 20:16:15 -0300
Subject: [PATCH 210/345] feat(sources): add Docling OCR toggle to content
 processing settings (#1104) (#1120)

Expose content-core's docling_ocr flag as a user setting. OCR runs on
scanned PDFs and images when the Docling engine handles them; it's on by
default (matching content-core) and can be turned off for faster
processing of text-native documents.

- New `docling_ocr` boolean on ContentSettings (default True), plumbed
  through the settings API and into ContentCoreConfig in the source graph.
- "Enable OCR" checkbox in the Content Processing settings card, with
  label + help translated across all 14 locales.

Part of #939. Stacked on #432.
---
 CHANGELOG.md                                  |  1 +
 api/models.py                                 |  2 ++
 api/routers/settings.py                       |  4 +++
 .../settings/components/SettingsForm.tsx      | 25 ++++++++++++++++++-
 frontend/src/lib/locales/bn-IN/index.ts       |  2 ++
 frontend/src/lib/locales/ca-ES/index.ts       |  2 ++
 frontend/src/lib/locales/de-DE/index.ts       |  2 ++
 frontend/src/lib/locales/en-US/index.ts       |  2 ++
 frontend/src/lib/locales/es-ES/index.ts       |  2 ++
 frontend/src/lib/locales/fr-FR/index.ts       |  2 ++
 frontend/src/lib/locales/it-IT/index.ts       |  2 ++
 frontend/src/lib/locales/ja-JP/index.ts       |  2 ++
 frontend/src/lib/locales/pl-PL/index.ts       |  2 ++
 frontend/src/lib/locales/pt-BR/index.ts       |  2 ++
 frontend/src/lib/locales/ru-RU/index.ts       |  2 ++
 frontend/src/lib/locales/tr-TR/index.ts       |  2 ++
 frontend/src/lib/locales/zh-CN/index.ts       |  2 ++
 frontend/src/lib/locales/zh-TW/index.ts       |  2 ++
 frontend/src/lib/types/api.ts                 |  1 +
 open_notebook/domain/content_settings.py      |  7 ++++++
 open_notebook/graphs/source.py                |  2 ++
 tests/test_domain.py                          |  6 +++++
 tests/test_graphs.py                          |  2 ++
 23 files changed, 77 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f9495ed4..a133a1ab 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- **OCR toggle** in Settings → Content Processing: a new "Enable OCR" checkbox controls whether the Docling engine runs OCR on scanned PDFs and images. It's on by default (matching content-core's behavior); turn it off to speed up processing of text-native documents. The setting is passed to content-core's `docling_ocr` config, and the label/help are translated across all 14 locales (#1104)
 - **Crawl4AI** is now selectable as a URL processing engine in Settings → Content Processing, alongside Firecrawl, Jina and Simple. It renders JavaScript-heavy pages locally with no API key, or offloads to a Crawl4AI server when `CRAWL4AI_API_URL` is set. The Crawl4AI runtime (and its Chromium browser) is bundled into the Docker image, so local mode works out of the box (~300 MB larger image; no torch/CUDA). As part of this, the persisted document/URL engine choices now actually take effect: the source-processing graph reads the saved Content Settings and passes them to content-core (previously it always ran with hard-coded `auto` engines and silently ignored the selection). New engine label added across all 14 locales (#432)
 
 ### Changed
diff --git a/api/models.py b/api/models.py
index c4cd27d4..5ad0ea12 100644
--- a/api/models.py
+++ b/api/models.py
@@ -277,6 +277,7 @@ class SettingsResponse(BaseModel):
     default_content_processing_engine_url: Optional[str] = None
     default_embedding_option: Optional[str] = None
     auto_delete_files: Optional[str] = None
+    docling_ocr: Optional[bool] = None
     youtube_preferred_languages: Optional[List[str]] = None
 
 
@@ -285,6 +286,7 @@ class SettingsUpdate(BaseModel):
     default_content_processing_engine_url: Optional[str] = None
     default_embedding_option: Optional[str] = None
     auto_delete_files: Optional[str] = None
+    docling_ocr: Optional[bool] = None
     youtube_preferred_languages: Optional[List[str]] = None
 
 
diff --git a/api/routers/settings.py b/api/routers/settings.py
index 6b3ceb3e..48309d2e 100644
--- a/api/routers/settings.py
+++ b/api/routers/settings.py
@@ -22,6 +22,7 @@ async def get_settings():
             default_content_processing_engine_url=settings.default_content_processing_engine_url,
             default_embedding_option=settings.default_embedding_option,
             auto_delete_files=settings.auto_delete_files,
+            docling_ocr=settings.docling_ocr,
             youtube_preferred_languages=settings.youtube_preferred_languages,
         )
     except HTTPException:
@@ -70,6 +71,8 @@ async def update_settings(settings_update: SettingsUpdate):
             settings.auto_delete_files = cast(
                 Literal["yes", "no"], settings_update.auto_delete_files
             )
+        if settings_update.docling_ocr is not None:
+            settings.docling_ocr = settings_update.docling_ocr
         if settings_update.youtube_preferred_languages is not None:
             settings.youtube_preferred_languages = (
                 settings_update.youtube_preferred_languages
@@ -82,6 +85,7 @@ async def update_settings(settings_update: SettingsUpdate):
             default_content_processing_engine_url=settings.default_content_processing_engine_url,
             default_embedding_option=settings.default_embedding_option,
             auto_delete_files=settings.auto_delete_files,
+            docling_ocr=settings.docling_ocr,
             youtube_preferred_languages=settings.youtube_preferred_languages,
         )
     except HTTPException:
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index 10267b4a..9126dc9c 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -8,6 +8,7 @@ import { Button } from '@/components/ui/button'
 import { Label } from '@/components/ui/label'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from '@/components/ui/select'
+import { Checkbox } from '@/components/ui/checkbox'
 import { Collapsible, CollapsibleContent, CollapsibleTrigger } from '@/components/ui/collapsible'
 import { Alert, AlertTitle, AlertDescription } from '@/components/ui/alert'
 import { useSettings, useUpdateSettings } from '@/lib/hooks/use-settings'
@@ -20,6 +21,7 @@ const settingsSchema = z.object({
   default_content_processing_engine_url: z.enum(['auto', 'firecrawl', 'jina', 'crawl4ai', 'simple']).optional(),
   default_embedding_option: z.enum(['ask', 'always', 'never']).optional(),
   auto_delete_files: z.enum(['yes', 'no']).optional(),
+  docling_ocr: z.boolean().optional(),
 })
 
 type SettingsFormData = z.infer<typeof settingsSchema>
@@ -49,6 +51,7 @@ export function SettingsForm() {
       default_content_processing_engine_url: undefined,
       default_embedding_option: undefined,
       auto_delete_files: undefined,
+      docling_ocr: undefined,
     }
   })
 
@@ -64,6 +67,7 @@ export function SettingsForm() {
         default_content_processing_engine_url: settings.default_content_processing_engine_url as 'auto' | 'firecrawl' | 'jina' | 'crawl4ai' | 'simple',
         default_embedding_option: settings.default_embedding_option as 'ask' | 'always' | 'never',
         auto_delete_files: settings.auto_delete_files as 'yes' | 'no',
+        docling_ocr: settings.docling_ocr ?? true,
       }
       reset(formData)
       setHasResetForm(true)
@@ -137,7 +141,26 @@ export function SettingsForm() {
               </CollapsibleContent>
             </Collapsible>
           </div>
-          
+
+          <div className="space-y-2">
+            <div className="flex items-center gap-2">
+              <Controller
+                name="docling_ocr"
+                control={control}
+                render={({ field }) => (
+                  <Checkbox
+                    id="docling_ocr"
+                    checked={field.value ?? true}
+                    onCheckedChange={field.onChange}
+                    disabled={field.disabled || isLoading}
+                  />
+                )}
+              />
+              <Label htmlFor="docling_ocr">{t('settings.ocrEnabled')}</Label>
+            </div>
+            <p className="text-sm text-muted-foreground">{t('settings.ocrHelp')}</p>
+          </div>
+
           <div className="space-y-3">
             <Label htmlFor="url_engine">{t('settings.urlEngine')}</Label>
             <Controller
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 5f7d9eac..0e8495e3 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -768,6 +768,8 @@ export const bnIN = {
     fileManagement: "ফাইল ব্যবস্থাপনা",
     fileManagementDesc: "ফাইল হ্যান্ডলিং এবং স্টোরেজ অপশন কনফিগার করুন",
     autoDeleteFiles: "স্বয়ংক্রিয় ফাইল মুছে ফেলা",
+    ocrEnabled: "OCR সক্ষম করুন",
+    ocrHelp: "Docling ইঞ্জিন ব্যবহারের সময় স্ক্যান করা PDF এবং ছবি থেকে টেক্সট বের করে। প্রক্রিয়া করতে ধীর।",
     autoDeletePlaceholder: "স্বয়ংক্রিয় মুছে ফেলার অপশন নির্বাচন করুন",
     filesHelp: "একবার আপনার ফাইল আপলোড এবং প্রক্রিয়া হওয়ার পর, সেগুলি আর প্রয়োজন নেই। বেশিরভাগ ব্যবহারকারী Open Notebook কে আপলোড ফোল্ডার থেকে আপলোড করা ফাইল স্বয়ংক্রিয়ভাবে মুছে ফেলার অনুমতি দিতে পারেন।",
     loadFailed: "সেটিংস লোড করতে ব্যর্থ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index a597c014..f4060ec9 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -767,6 +767,8 @@ export const caES = {
     fileManagement: "Gestió de fitxers",
     fileManagementDesc: "Configura el maneig de fitxers i les opcions d'emmagatzematge",
     autoDeleteFiles: "Supressió automàtica de fitxers",
+    ocrEnabled: "Activa l'OCR",
+    ocrHelp: "Extreu text de PDF escanejats i imatges quan s'utilitza el motor Docling. Processament més lent.",
     autoDeletePlaceholder: "Selecciona l'opció de supressió automàtica",
     filesHelp: "Un cop els fitxers s'han carregat i processat, ja no calen. La majoria d'usuaris haurien de permetre que Open Notebook suprimeixi automàticament els fitxers carregats de la carpeta de càrrega.",
     loadFailed: "Ha fallat la càrrega de la configuració",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 8a027207..d81e3a48 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -770,6 +770,8 @@ export const deDE = {
     fileManagement: "Dateiverwaltung",
     fileManagementDesc: "Konfiguriere Dateiverarbeitung und Speicheroptionen",
     autoDeleteFiles: "Dateien automatisch löschen",
+    ocrEnabled: "OCR aktivieren",
+    ocrHelp: "Extrahiert Text aus gescannten PDFs und Bildern bei Verwendung der Docling-Engine. Langsamere Verarbeitung.",
     autoDeletePlaceholder: "Option für automatisches Löschen auswählen",
     filesHelp: "Nachdem deine Dateien hochgeladen und verarbeitet wurden, werden sie nicht mehr benötigt. Die meisten Nutzer sollten Open Notebook erlauben, hochgeladene Dateien automatisch aus dem Upload-Ordner zu löschen.",
     loadFailed: "Einstellungen konnten nicht geladen werden",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 567aa994..6962a8dc 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -766,6 +766,8 @@ export const enUS = {
     fileManagement: "File Management",
     fileManagementDesc: "Configure file handling and storage options",
     autoDeleteFiles: "Auto Delete Files",
+    ocrEnabled: "Enable OCR",
+    ocrHelp: "Extract text from scanned PDFs and images when using the Docling engine. Slower to process.",
     autoDeletePlaceholder: "Select auto delete option",
     filesHelp: "Once your files are uploaded and processed, they are not required anymore. Most users should allow Open Notebook to delete uploaded files from the upload folder automatically.",
     loadFailed: "Failed to load settings",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 344b0b62..c137af08 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -768,6 +768,8 @@ export const esES = {
     fileManagement: "Gestión de archivos",
     fileManagementDesc: "Configura las opciones de manejo y almacenamiento de archivos",
     autoDeleteFiles: "Eliminar archivos automáticamente",
+    ocrEnabled: "Activar OCR",
+    ocrHelp: "Extrae texto de PDF escaneados e imágenes al usar el motor Docling. Más lento de procesar.",
     autoDeletePlaceholder: "Selecciona opción de eliminación automática",
     filesHelp: "Una vez que tus archivos se suben y procesan, ya no son necesarios. La mayoría de los usuarios deberían permitir que Open Notebook elimine los archivos subidos de la carpeta de carga automáticamente.",
     loadFailed: "Error al cargar la configuración",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index c487d8d0..d338801a 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -767,6 +767,8 @@ export const frFR = {
     fileManagement: "Gestion des fichiers",
     fileManagementDesc: "Configurez les options de manipulation et de stockage des fichiers",
     autoDeleteFiles: "Suppression automatique des fichiers",
+    ocrEnabled: "Activer l'OCR",
+    ocrHelp: "Extrait le texte des PDF numérisés et des images avec le moteur Docling. Traitement plus lent.",
     autoDeletePlaceholder: "Sélectionnez une option de suppression automatique",
     filesHelp: "Une fois vos fichiers téléchargés et traités, ils ne sont plus nécessaires. La plupart des utilisateurs devraient autoriser Open Notebook à supprimer automatiquement les fichiers du dossier de téléchargement.",
     loadFailed: "Échec du chargement des paramètres",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 0cbc8771..b46f9f93 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -767,6 +767,8 @@ export const itIT = {
     fileManagement: "Gestione file",
     fileManagementDesc: "Configura opzioni di gestione e archiviazione file",
     autoDeleteFiles: "Elimina file automaticamente",
+    ocrEnabled: "Abilita OCR",
+    ocrHelp: "Estrae il testo da PDF scansionati e immagini quando si usa il motore Docling. Elaborazione più lenta.",
     autoDeletePlaceholder: "Seleziona opzione eliminazione automatica",
     filesHelp: "Una volta caricati ed elaborati, i tuoi file non sono più necessari. La maggior parte degli utenti dovrebbe permettere a Open Notebook di eliminare automaticamente i file caricati dalla cartella upload.",
     loadFailed: "Impossibile caricare le impostazioni",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index bac6b6ac..a287f9b3 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -767,6 +767,8 @@ export const jaJP = {
     fileManagement: "ファイル管理",
     fileManagementDesc: "ファイルの処理とストレージオプションを設定",
     autoDeleteFiles: "ファイル自動削除",
+    ocrEnabled: "OCRを有効にする",
+    ocrHelp: "Doclingエンジン使用時に、スキャンしたPDFや画像からテキストを抽出します。処理が遅くなります。",
     autoDeletePlaceholder: "自動削除オプションを選択",
     filesHelp: "ファイルがアップロードされて処理されると、ファイル自体は不要になります。ほとんどのユーザーはOpen Notebookがアップロードフォルダから自動的にファイルを削除することを許可すべきです。",
     loadFailed: "設定の読み込みに失敗しました",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index b04db429..497907bd 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -767,6 +767,8 @@ export const plPL = {
     fileManagement: "Zarządzanie plikami",
     fileManagementDesc: "Skonfiguruj opcje obsługi i przechowywania plików",
     autoDeleteFiles: "Automatyczne usuwanie plików",
+    ocrEnabled: "Włącz OCR",
+    ocrHelp: "Wyodrębnia tekst ze zeskanowanych plików PDF i obrazów przy użyciu silnika Docling. Wolniejsze przetwarzanie.",
     autoDeletePlaceholder: "Wybierz opcję automatycznego usuwania",
     filesHelp: "Po przesłaniu i przetworzeniu plików nie są one już potrzebne. Większość użytkowników powinna pozwolić Open Notebook na automatyczne usuwanie przesłanych plików z folderu przesyłania.",
     loadFailed: "Nie udało się załadować ustawień",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ecaaec49..b87295c5 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -767,6 +767,8 @@ export const ptBR = {
     fileManagement: "Gerenciamento de Arquivos",
     fileManagementDesc: "Configure opções de manipulação e armazenamento de arquivos",
     autoDeleteFiles: "Excluir Arquivos Automaticamente",
+    ocrEnabled: "Ativar OCR",
+    ocrHelp: "Extrai texto de PDFs escaneados e imagens ao usar o mecanismo Docling. Mais lento para processar.",
     autoDeletePlaceholder: "Selecione a opção de exclusão automática",
     filesHelp: "Uma vez que seus arquivos são enviados e processados, eles não são mais necessários. A maioria dos usuários deve permitir que o Open Notebook exclua arquivos enviados da pasta de upload automaticamente.",
     loadFailed: "Falha ao carregar configurações",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 8bccde56..e447bde6 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -767,6 +767,8 @@ export const ruRU = {
     fileManagement: "Управление файлами",
     fileManagementDesc: "Настройте обработку и хранение файлов",
     autoDeleteFiles: "Автоудаление файлов",
+    ocrEnabled: "Включить OCR",
+    ocrHelp: "Извлекает текст из отсканированных PDF и изображений при использовании движка Docling. Обработка медленнее.",
     autoDeletePlaceholder: "Выберите опцию автоудаления",
     filesHelp: "После загрузки и обработки файлы больше не нужны. Большинству пользователей следует разрешить Open Notebook автоматически удалять загруженные файлы из папки загрузок.",
     loadFailed: "Не удалось загрузить настройки",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 8ab90f24..6b48b96d 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -767,6 +767,8 @@ export const trTR = {
     fileManagement: "Dosya Yönetimi",
     fileManagementDesc: "Dosya işleme ve depolama seçeneklerini yapılandırın",
     autoDeleteFiles: "Dosyaları Otomatik Sil",
+    ocrEnabled: "OCR'yi etkinleştir",
+    ocrHelp: "Docling motoru kullanılırken taranmış PDF'lerden ve görüntülerden metin çıkarır. İşlemesi daha yavaştır.",
     autoDeletePlaceholder: "Otomatik silme seçeneği seçin",
     filesHelp: "Dosyalarınız yüklenip işlendikten sonra artık gerekli değildir. Çoğu kullanıcı Open Notebook'un yüklenen dosyaları yükleme klasöründen otomatik olarak silmesine izin vermelidir.",
     loadFailed: "Ayarlar yüklenemedi",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index c0c5e59c..1bd5358f 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -767,6 +767,8 @@ export const zhCN = {
     fileManagement: "文件管理",
     fileManagementDesc: "配置文件的处理和存储选项",
     autoDeleteFiles: "自动删除文件",
+    ocrEnabled: "启用 OCR",
+    ocrHelp: "使用 Docling 引擎时，从扫描的 PDF 和图片中提取文本。处理速度较慢。",
     autoDeletePlaceholder: "选择自动删除选项",
     filesHelp: "文件处理完成后，原始件不再需要。建议开启自动删除以节省存储空间。除非您将其作为主要存储位置（不建议），否则请选择“是”。",
     loadFailed: "加载设置失败",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 48f29d56..5dc762fc 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -767,6 +767,8 @@ export const zhTW = {
     fileManagement: "檔案管理",
     fileManagementDesc: "設定檔案的處理和儲存選項",
     autoDeleteFiles: "自動刪除檔案",
+    ocrEnabled: "啟用 OCR",
+    ocrHelp: "使用 Docling 引擎時，從掃描的 PDF 和圖片中擷取文字。處理速度較慢。",
     autoDeletePlaceholder: "選擇自動刪除選項",
     filesHelp: "檔案處理完成後，原始件不再需要。建議開啟自動刪除以節省儲存空間。除非您將其作為主要儲存位置（不建議），否則請選擇“是”。",
     loadFailed: "載入設定失敗",
diff --git a/frontend/src/lib/types/api.ts b/frontend/src/lib/types/api.ts
index cd454f62..23f96c17 100644
--- a/frontend/src/lib/types/api.ts
+++ b/frontend/src/lib/types/api.ts
@@ -57,6 +57,7 @@ export interface SettingsResponse {
   default_content_processing_engine_url?: string
   default_embedding_option?: string
   auto_delete_files?: string
+  docling_ocr?: boolean
   youtube_preferred_languages?: string[]
 }
 
diff --git a/open_notebook/domain/content_settings.py b/open_notebook/domain/content_settings.py
index 15612eeb..4b89ec5e 100644
--- a/open_notebook/domain/content_settings.py
+++ b/open_notebook/domain/content_settings.py
@@ -19,6 +19,13 @@ class ContentSettings(RecordModel):
     auto_delete_files: Optional[Literal["yes", "no"]] = Field(
         "yes", description="Auto Delete Uploaded Files"
     )
+    docling_ocr: Optional[bool] = Field(
+        True,
+        description=(
+            "Run OCR on scanned PDFs and images when the Docling engine handles "
+            "them. Disable for faster processing of text-native documents."
+        ),
+    )
     youtube_preferred_languages: Optional[List[str]] = Field(
         ["en", "pt", "es", "de", "nl", "en-GB", "fr", "de", "hi", "ja"],
         description="Preferred languages for YouTube transcripts",
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index e40598c3..a8b557d5 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -71,6 +71,8 @@ async def content_process(state: SourceState) -> dict:
             config_kwargs["document_engine"] = (
                 settings.default_content_processing_engine_doc
             )
+        if settings.docling_ocr is not None:
+            config_kwargs["docling_ocr"] = settings.docling_ocr
     except Exception as e:
         # Keep the server-side traceback for diagnosing DB/deserialization
         # failures while still falling back to defaults (non-fatal).
diff --git a/tests/test_domain.py b/tests/test_domain.py
index fb266276..19ef3783 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -587,6 +587,12 @@ class TestContentSettings:
         settings = ContentSettings(default_content_processing_engine_url="crawl4ai")
         assert settings.default_content_processing_engine_url == "crawl4ai"
 
+    def test_docling_ocr_defaults_on(self):
+        """OCR is on by default (matches content-core's docling_ocr default)."""
+        settings = ContentSettings()
+        assert settings.docling_ocr is True
+        assert ContentSettings(docling_ocr=False).docling_ocr is False
+
 
 # ============================================================================
 # TEST SUITE 9: Episode Profile Validation
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 60d34833..1897aa4e 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -403,6 +403,7 @@ class TestContentProcessDeleteSource:
             return_value=MagicMock(
                 default_content_processing_engine_url="crawl4ai",
                 default_content_processing_engine_doc="docling",
+                docling_ocr=False,
             )
         )
         mock_extract.return_value = ExtractionOutput(title="T", content="body")
@@ -419,6 +420,7 @@ class TestContentProcessDeleteSource:
         config = mock_extract.await_args.kwargs["config"]
         assert config.url_engine == "crawl4ai"
         assert config.document_engine == "docling"
+        assert config.docling_ocr is False
 
 
 if __name__ == "__main__":

From 906ad1698a2e391d2b92057db02d3eae284eaf5d Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 13 Jul 2026 08:26:20 -0300
Subject: [PATCH 211/345] feat(sources): opt-in Docling + Crawl4AI runtimes
 installed at startup (#1122) (#1123)

Docling and local Crawl4AI are now opt-in, installed on first container startup
via OPEN_NOTEBOOK_ENABLE_DOCLING / OPEN_NOTEBOOK_ENABLE_CRAWL4AI, keeping the
default image lean (Crawl4AI un-bundled). Downloads cache on the /app/data
volume; installs are blocking with loud logs and degrade-don't-die on failure.
A GET /api/capabilities probe reports actual availability and the Settings UI
gates the Docling/Crawl4AI engines and OCR toggle (with env-var hints) until the
runtime is present. Docs folded from #1121 and rewritten to opt-in; ADR-007 added.

Closes #1122. Closes #1105.
---
 .dockerignore                                 |   3 +-
 CHANGELOG.md                                  |   5 +-
 Dockerfile                                    |  22 +-
 api/main.py                                   |   2 +
 api/models.py                                 |  23 +
 api/routers/capabilities.py                   | 108 ++++
 docker-compose.yml                            |   7 +
 docs/3-USER-GUIDE/adding-sources.md           |  17 +-
 .../content-processing-engines.md             | 141 +++++
 docs/3-USER-GUIDE/index.md                    |   2 +
 docs/5-CONFIGURATION/advanced.md              |  21 +-
 docs/5-CONFIGURATION/environment-reference.md |  16 +
 .../decisions/ADR-007-optin-runtimes.md       |  41 ++
 docs/7-DEVELOPMENT/decisions/README.md        |   1 +
 .../settings/components/SettingsForm.test.tsx | 107 ++++
 .../settings/components/SettingsForm.tsx      |  22 +-
 frontend/src/lib/api/capabilities.ts          |  13 +
 frontend/src/lib/hooks/use-capabilities.ts    |  20 +
 frontend/src/lib/locales/bn-IN/index.ts       |   2 +
 frontend/src/lib/locales/ca-ES/index.ts       |   2 +
 frontend/src/lib/locales/de-DE/index.ts       |   2 +
 frontend/src/lib/locales/en-US/index.ts       |   2 +
 frontend/src/lib/locales/es-ES/index.ts       |   2 +
 frontend/src/lib/locales/fr-FR/index.ts       |   2 +
 frontend/src/lib/locales/it-IT/index.ts       |   2 +
 frontend/src/lib/locales/ja-JP/index.ts       |   2 +
 frontend/src/lib/locales/pl-PL/index.ts       |   2 +
 frontend/src/lib/locales/pt-BR/index.ts       |   2 +
 frontend/src/lib/locales/ru-RU/index.ts       |   2 +
 frontend/src/lib/locales/tr-TR/index.ts       |   2 +
 frontend/src/lib/locales/zh-CN/index.ts       |   2 +
 frontend/src/lib/locales/zh-TW/index.ts       |   2 +
 frontend/src/lib/types/api.ts                 |   6 +
 pyproject.toml                                |   2 +-
 scripts/docker-entrypoint.sh                  | 116 ++++
 tests/test_capabilities_api.py                | 128 +++++
 uv.lock                                       | 502 +-----------------
 37 files changed, 832 insertions(+), 521 deletions(-)
 create mode 100644 api/routers/capabilities.py
 create mode 100644 docs/3-USER-GUIDE/content-processing-engines.md
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md
 create mode 100644 frontend/src/app/(dashboard)/settings/components/SettingsForm.test.tsx
 create mode 100644 frontend/src/lib/api/capabilities.ts
 create mode 100644 frontend/src/lib/hooks/use-capabilities.ts
 create mode 100755 scripts/docker-entrypoint.sh
 create mode 100644 tests/test_capabilities_api.py

diff --git a/.dockerignore b/.dockerignore
index b512aa64..71f7b6c8 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -23,7 +23,8 @@ frontend/out
 frontend/.env*
 frontend/*.log
 
-# Project data
+# Local tooling / agent working dirs (can contain full .venv + node_modules)
+.claude
 .antigravity
 .gemini
 tmp
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a133a1ab..697f0687 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,8 +8,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
-- **OCR toggle** in Settings → Content Processing: a new "Enable OCR" checkbox controls whether the Docling engine runs OCR on scanned PDFs and images. It's on by default (matching content-core's behavior); turn it off to speed up processing of text-native documents. The setting is passed to content-core's `docling_ocr` config, and the label/help are translated across all 14 locales (#1104)
-- **Crawl4AI** is now selectable as a URL processing engine in Settings → Content Processing, alongside Firecrawl, Jina and Simple. It renders JavaScript-heavy pages locally with no API key, or offloads to a Crawl4AI server when `CRAWL4AI_API_URL` is set. The Crawl4AI runtime (and its Chromium browser) is bundled into the Docker image, so local mode works out of the box (~300 MB larger image; no torch/CUDA). As part of this, the persisted document/URL engine choices now actually take effect: the source-processing graph reads the saved Content Settings and passes them to content-core (previously it always ran with hard-coded `auto` engines and silently ignored the selection). New engine label added across all 14 locales (#432)
+- **Opt-in heavy extraction runtimes.** Docling (layout parsing + OCR + image sources) and local Crawl4AI (JavaScript rendering) are now **opt-in**, installed automatically on first container startup when enabled — instead of being bundled into (or missing from) every image. Set `OPEN_NOTEBOOK_ENABLE_DOCLING=true` and/or `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true`; the downloads are cached on the `/app/data` volume so only the first boot is slow, and a failed install degrades gracefully (the app still starts, the engine is reported unavailable) with loud logs. A new `GET /api/capabilities` probe reports what's actually installed, and Settings → Content Processing disables the Docling engine, the Crawl4AI engine and the OCR toggle (with an env-var hint) until their runtime is available — so the UI never advertises an engine that isn't there. This keeps the default image lean (no Chromium, no multi-GB ML stack) while making both runtimes available on demand. A remote Crawl4AI server via `CRAWL4AI_API_URL` needs no local install. New hint strings added across all 14 locales; recorded as ADR-007 (#1122)
+- **OCR toggle** in Settings → Content Processing: a new "Enable OCR" checkbox controls whether the Docling engine runs OCR on scanned PDFs and images. It's on by default (matching content-core's behavior); turn it off to speed up processing of text-native documents. The setting is passed to content-core's `docling_ocr` config, and the label/help are translated across all 14 locales. OCR only runs through Docling, so the toggle takes effect once Docling is enabled (see #1122) (#1104)
+- **Crawl4AI** is now selectable as a URL processing engine in Settings → Content Processing, alongside Firecrawl, Jina and Simple. It renders JavaScript-heavy pages locally with no API key, or offloads to a Crawl4AI server when `CRAWL4AI_API_URL` is set. Local Crawl4AI (and its Chromium browser) is an opt-in runtime installed on first startup when `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` (see #1122) — the default image stays lean. As part of this, the persisted document/URL engine choices now actually take effect: the source-processing graph reads the saved Content Settings and passes them to content-core (previously it always ran with hard-coded `auto` engines and silently ignored the selection). New engine label added across all 14 locales (#432)
 
 ### Changed
 - Upgraded the content extraction dependency from content-core 1.14.x to 2.x (2.0.4). The source-processing graph was adapted to content-core's new keyword-only `extract_content()` API: engine/model overrides now travel through a `ContentCoreConfig` object instead of the input dict, and the extraction result (`ExtractionOutput`) no longer echoes the source `url`/`file_path` back, so those are carried from the request state into the saved source asset. Because content-core 2.x no longer deletes the uploaded file after extraction, the graph now honors the `delete_source` flag itself. Transitively this replaces the AGPL-licensed PyMuPDF with MIT-licensed pdfplumber for PDF extraction and drops moviepy in favor of direct ffmpeg calls (which fixes audio extraction from MP3 files carrying chapter metadata). No user-facing configuration changes in this step — document and URL engines stay on their `auto` defaults; new engine/OCR options are tracked separately under #939 (#1103)
diff --git a/Dockerfile b/Dockerfile
index 8d296c2c..601a9363 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -86,14 +86,6 @@ WORKDIR /app
 # Copy the virtual environment from the backend builder
 COPY --from=backend-builder /app/.venv /app/.venv
 
-# Install the Chromium runtime for the Crawl4AI URL engine so its local,
-# no-API-key mode works out of the box. Uses the playwright bundled in the venv
-# (via content-core[crawl4ai]); --with-deps pulls the required system libraries.
-# Pinned to a fixed path so it is found at runtime and survives volume mounts.
-ENV PLAYWRIGHT_BROWSERS_PATH=/app/pw-browsers
-RUN .venv/bin/python -m playwright install --with-deps chromium \
-    && rm -rf /var/lib/apt/lists/*
-
 # Copy the source code
 COPY . /app
 
@@ -114,9 +106,18 @@ ENV TIKTOKEN_CACHE_DIR=/app/tiktoken-cache
 # Bind the API to all interfaces (IPv4). Set API_HOST=:: for IPv6 dual-stack environments
 ENV API_HOST=0.0.0.0
 
+# Caches for the opt-in heavy extraction runtimes (Docling, Crawl4AI local).
+# These live UNDER /app/data so the user's volume mount persists them across
+# container restarts and upgrades: wheels (uv), the Chromium browser (playwright)
+# and Docling's ML models (huggingface) are downloaded once, then reused.
+# See scripts/docker-entrypoint.sh and docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md.
+ENV UV_CACHE_DIR=/app/data/.cache/uv
+ENV PLAYWRIGHT_BROWSERS_PATH=/app/data/.cache/playwright
+ENV HF_HOME=/app/data/.cache/huggingface
+
 # Data directory (volume-mounted by users) and supervisor log directory
 RUN mkdir -p /app/data /var/log/supervisor \
-    && chmod +x /app/scripts/wait-for-api.sh
+    && chmod +x /app/scripts/wait-for-api.sh /app/scripts/docker-entrypoint.sh
 
 # Copy supervisord configuration (shared programs: api, worker, frontend)
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
@@ -134,6 +135,9 @@ EXPOSE 8502 5055
 #
 # Example: docker run -e API_URL=https://your-domain.com/api ...
 
+# The entrypoint installs any opt-in heavy runtimes (Docling, Crawl4AI local)
+# enabled via OPEN_NOTEBOOK_ENABLE_* before handing off to CMD (supervisord).
+ENTRYPOINT ["/app/scripts/docker-entrypoint.sh"]
 CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
 
 # Stage 5: Single-container variant (adds SurrealDB on top of the shared runtime)
diff --git a/api/main.py b/api/main.py
index 4d4ed468..2b8af38f 100644
--- a/api/main.py
+++ b/api/main.py
@@ -17,6 +17,7 @@ from api.auth import PasswordAuthMiddleware
 from api.middleware import MaxBodySizeMiddleware, get_max_upload_size_bytes
 from api.routers import (
     auth,
+    capabilities,
     chat,
     config,
     credentials,
@@ -394,6 +395,7 @@ app.include_router(chat.router, prefix="/api", tags=["chat"])
 app.include_router(source_chat.router, prefix="/api", tags=["source-chat"])
 app.include_router(credentials.router, prefix="/api", tags=["credentials"])
 app.include_router(providers.router, prefix="/api", tags=["providers"])
+app.include_router(capabilities.router, prefix="/api", tags=["capabilities"])
 app.include_router(languages.router, prefix="/api", tags=["languages"])
 
 
diff --git a/api/models.py b/api/models.py
index 5ad0ea12..a5f34f89 100644
--- a/api/models.py
+++ b/api/models.py
@@ -593,6 +593,29 @@ class ProviderInfoResponse(BaseModel):
     )
 
 
+class CapabilitiesResponse(BaseModel):
+    """Runtime availability of the opt-in heavy extraction engines.
+
+    Reflects what is actually importable/reachable in this container — not merely
+    what the OPEN_NOTEBOOK_ENABLE_* flags request — so the UI can gate engine
+    options honestly (e.g. still show "unavailable" while a first-boot install
+    is in progress). See docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md.
+    """
+
+    docling_available: bool = Field(
+        ...,
+        description="Docling is installed: the docling document engine, OCR toggle and image sources work.",
+    )
+    crawl4ai_available: bool = Field(
+        ...,
+        description="Crawl4AI is usable: the local package is installed OR a remote server is configured.",
+    )
+    crawl4ai_remote_configured: bool = Field(
+        ...,
+        description="A remote Crawl4AI endpoint is configured via CRAWL4AI_API_URL (no local install needed).",
+    )
+
+
 class CreateCredentialRequest(BaseModel):
     """Request to create a new credential."""
 
diff --git a/api/routers/capabilities.py b/api/routers/capabilities.py
new file mode 100644
index 00000000..f92cc557
--- /dev/null
+++ b/api/routers/capabilities.py
@@ -0,0 +1,108 @@
+"""
+Capabilities Router
+
+Reports the runtime availability of the opt-in heavy extraction engines
+(Docling, Crawl4AI local) so the frontend can gate the corresponding engine
+options and the OCR toggle. These runtimes are installed on demand at container
+startup (see scripts/docker-entrypoint.sh and
+docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md), so this endpoint probes
+what is *actually* importable/reachable rather than trusting the enable flags.
+
+Endpoints:
+- GET /capabilities - Availability of Docling and Crawl4AI runtimes
+"""
+
+import importlib.util
+import os
+import sys
+
+from fastapi import APIRouter
+from loguru import logger
+
+from api.models import CapabilitiesResponse
+
+router = APIRouter(prefix="/capabilities", tags=["capabilities"])
+
+
+def _docling_available() -> bool:
+    """True when Docling is installed (its document engine, OCR and image sources work)."""
+    try:
+        # content-core's own routing gate — the authoritative signal, not just a spec check.
+        from content_core.extraction import DOCLING_AVAILABLE
+
+        return bool(DOCLING_AVAILABLE)
+    except (ImportError, AttributeError):
+        # Content-core absent or its API moved — fall back to a plain spec check.
+        return importlib.util.find_spec("docling") is not None
+    except Exception:
+        # An unexpected failure shouldn't be silently masked as "unavailable".
+        logger.opt(exception=True).warning(
+            "Unexpected error probing Docling availability; reporting unavailable"
+        )
+        return False
+
+
+def _crawl4ai_remote_configured() -> bool:
+    """True when a remote Crawl4AI server is configured (CRAWL4AI_API_URL)."""
+    try:
+        from content_core.config import get_crawl4ai_api_url
+
+        return bool(get_crawl4ai_api_url())
+    except (ImportError, AttributeError):
+        return bool(os.environ.get("CRAWL4AI_API_URL"))
+    except Exception:
+        logger.opt(exception=True).warning(
+            "Unexpected error probing Crawl4AI remote config; falling back to env var"
+        )
+        return bool(os.environ.get("CRAWL4AI_API_URL"))
+
+
+def _default_playwright_cache() -> str | None:
+    """Playwright's default browser download directory when PLAYWRIGHT_BROWSERS_PATH is unset."""
+    if sys.platform == "darwin":
+        return os.path.expanduser("~/Library/Caches/ms-playwright")
+    if sys.platform == "win32":
+        local = os.environ.get("LOCALAPPDATA")
+        return os.path.join(local, "ms-playwright") if local else None
+    return os.path.expanduser("~/.cache/ms-playwright")  # linux and others
+
+
+def _chromium_browser_present() -> bool:
+    """True when a Playwright Chromium browser is installed on disk.
+
+    Local Crawl4AI needs both the package AND a Chromium browser. The startup
+    installer downloads them in separate steps and degrades gracefully, so the
+    package can be present while the browser download failed — checking the
+    browser here keeps this endpoint an honest "usable capability" signal.
+
+    Playwright installs browsers into PLAYWRIGHT_BROWSERS_PATH (Docker) or, when
+    that's unset, its per-user default cache (dev). Resolving the path does not
+    download anything, so we must confirm a chromium build actually exists in
+    whichever directory applies before reporting local Crawl4AI available.
+    """
+    base = os.environ.get("PLAYWRIGHT_BROWSERS_PATH") or _default_playwright_cache()
+    if not base or not os.path.isdir(base):
+        return False
+    try:
+        return any("chromium" in name for name in os.listdir(base))
+    except OSError:
+        return False
+
+
+def _crawl4ai_local_ready() -> bool:
+    """True when local Crawl4AI can actually render: package installed + Chromium present."""
+    if importlib.util.find_spec("crawl4ai") is None:
+        return False
+    return _chromium_browser_present()
+
+
+@router.get("", response_model=CapabilitiesResponse)
+async def get_capabilities():
+    """Report which opt-in extraction runtimes are available in this container."""
+    crawl4ai_remote = _crawl4ai_remote_configured()
+    crawl4ai_local = _crawl4ai_local_ready()
+    return CapabilitiesResponse(
+        docling_available=_docling_available(),
+        crawl4ai_available=crawl4ai_local or crawl4ai_remote,
+        crawl4ai_remote_configured=crawl4ai_remote,
+    )
diff --git a/docker-compose.yml b/docker-compose.yml
index 894c8a57..9ed75e35 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -41,6 +41,13 @@ services:
       - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
+
+      # OPTIONAL: heavy extraction runtimes, installed on first startup when
+      # enabled (downloads are cached on the ./notebook_data volume, so only the
+      # first boot is slow). See docs/5-CONFIGURATION/environment-reference.md.
+      # - OPEN_NOTEBOOK_ENABLE_DOCLING=true    # Docling engine + OCR + image sources (large ML stack)
+      # - OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true   # local Crawl4AI (bundles a Chromium browser)
+      # - CRAWL4AI_API_URL=http://crawl4ai:11235  # use a remote Crawl4AI server instead (no local install)
     volumes:
       - ./notebook_data:/app/data
     depends_on:
diff --git a/docs/3-USER-GUIDE/adding-sources.md b/docs/3-USER-GUIDE/adding-sources.md
index 020d9e34..69d138ea 100644
--- a/docs/3-USER-GUIDE/adding-sources.md
+++ b/docs/3-USER-GUIDE/adding-sources.md
@@ -50,11 +50,14 @@ Sources are the raw materials of your research. This guide covers how to add dif
 - **EPUB** (.epub) — eBook files
 - **Markdown** (.md, .txt) — Plain text formats
 - **HTML** (.html, .htm) — Web page files
+- **Images** (.png, .jpg, .jpeg, .tiff, .bmp) — Text read via OCR (**requires Docling enabled** — see below)
 
 **File size limits:** Up to ~100MB (varies by system)
 
 **Processing time:** 10 seconds - 2 minutes (depending on length and file type)
 
+**OCR (scanned PDFs & images):** Text is read off scanned PDFs and image files using OCR. OCR runs through the **Docling** engine, which is **optional** and installed on first startup when you set `OPEN_NOTEBOOK_ENABLE_DOCLING=true`. Once enabled, OCR is on by default; you can turn it off (or force a more accurate extraction engine) in **Settings → Content Processing** — see [Content Processing Engines](content-processing-engines.md).
+
 ### Audio & Video
 - **Audio**: MP3, WAV, M4A, OGG, FLAC (~30 seconds - 3 minutes per hour)
 - **Video**: MP4, AVI, MOV, MKV, WebM (~3-10 minutes per hour)
@@ -65,16 +68,19 @@ Sources are the raw materials of your research. This guide covers how to add dif
 
 ### Web Content
 - **Articles**: Blog posts, news articles, Medium
-- **YouTube**: Full videos or playlists
+- **YouTube**: Full videos, playlists, plus `/live/` and `/shorts/` URLs
+- **Reddit**: Public post URLs (fetched via Reddit's public JSON)
 - **PDFs online**: Direct PDF links
 - **News**: News site articles
 
 **Just paste the URL** in "Web Link" section.
 
+**JavaScript-heavy sites:** How well a URL extracts depends on the URL processing engine. The default (`auto`) tries several engines; enabling Crawl4AI lets it render JavaScript pages locally. If a link comes back empty, see [Content Processing Engines](content-processing-engines.md).
+
 ### What Doesn't Work
 - Paywalled content (WSJ, FT, etc.) — Can't extract
 - Password-protected PDFs — Can't open
-- Pure image files (.jpg, .png) — Except scanned PDFs which have OCR
+- Unsupported formats — Rejected immediately with a clear "unsupported file type" message (no long wait)
 - Very large files (>100MB) — Timeout
 
 ---
@@ -188,6 +194,7 @@ Two ways to add:
 
 Method 1: Direct URL
   1. Copy YouTube URL: https://www.youtube.com/watch?v=...
+     (regular watch, /live/, and /shorts/ URLs all work)
   2. Paste in "Web Link"
   3. Click Add
   4. System extracts captions (if available) + transcript
@@ -357,7 +364,9 @@ Example: "Keep this in notebook but don't use in this conversation"
 
 **"Unsupported file type"**
 - You tried to upload a format not in the list (e.g., `.webp` image)
-- Solution: Convert to supported format (PDF for documents, MP3 for audio)
+- The upload is rejected **immediately** with a message naming the detected type — no long wait or stuck "Processing" state
+- Note: image formats (PNG/JPEG/TIFF/BMP) are only supported when **Docling is enabled** (`OPEN_NOTEBOOK_ENABLE_DOCLING=true`)
+- Solution: Convert to a supported format (PDF for documents, MP3 for audio), or enable Docling for images
 
 **"Processing timeout"**
 - Very large file (>100MB) or very long audio
@@ -369,7 +378,7 @@ Example: "Keep this in notebook but don't use in this conversation"
 
 **"Web link won't extract"**
 - Website blocks automated access or uses JavaScript for content
-- Solution: Copy the article text and paste as "Text" instead
+- Solution: Try a different URL processing engine (see [Content Processing Engines](content-processing-engines.md)) — enabling Crawl4AI renders JavaScript pages — or copy the article text and paste as "Text" instead
 
 ---
 
diff --git a/docs/3-USER-GUIDE/content-processing-engines.md b/docs/3-USER-GUIDE/content-processing-engines.md
new file mode 100644
index 00000000..4cee73e9
--- /dev/null
+++ b/docs/3-USER-GUIDE/content-processing-engines.md
@@ -0,0 +1,141 @@
+# Content Processing Engines - Choosing How Content Is Extracted
+
+When you add a source, Open Notebook extracts its text before chunking, embedding, and indexing it. How that extraction happens depends on the **processing engine**. You usually don't need to touch this — the defaults handle most content — but knowing your options helps when a document extracts poorly or a URL comes back empty.
+
+Configure everything here in **Settings → Content Processing**.
+
+> **Some engines are optional.** The default image stays lean, so the heavier
+> **Docling** (layout + OCR + image sources) and **local Crawl4AI** (JavaScript
+> rendering) engines are **opt-in** — you enable them with an environment
+> variable and they install on first startup. Until then they appear **disabled**
+> in Settings. See [Optional engines](#optional-engines-docling--crawl4ai) below.
+
+---
+
+## Where to Configure
+
+```
+Settings → Content Processing:
+  - Document Processing Engine   (for uploaded files)
+  - URL Processing Engine        (for web links)
+  - Enable OCR                   (scanned PDFs and images)
+```
+
+Changes apply to sources you add **after** saving. Re-add a source if you want it re-extracted with a different engine.
+
+---
+
+## Document Processing Engines
+
+Controls how uploaded files (PDF, Word, PowerPoint, EPUB, etc.) are turned into text.
+
+| Engine | What it does | Trade-off |
+|--------|--------------|-----------|
+| **auto** (default) | Picks the best engine for the file type. Uses Docling for complex documents when it's enabled, simple extraction for the rest. | Balanced. Good default for almost everyone. |
+| **docling** | Layout-aware extraction: understands columns, tables, headings, and reading order. Runs OCR on scanned pages when OCR is enabled. **Optional — must be enabled** (see below). | Most accurate, but slower and heavier. |
+| **simple** | Fast, lightweight text extraction. Skips Docling entirely. | Fastest, but loses table structure and layout; no OCR. |
+
+**When to pick each:**
+
+- **auto** — leave it here unless you have a reason not to.
+- **docling** — force it when tables, multi-column layouts, or scanned PDFs matter and `auto` isn't giving you clean results. Requires Docling to be enabled.
+- **simple** — choose it for large batches of clean, text-native documents where speed matters more than layout fidelity.
+
+---
+
+## URL Processing Engines
+
+Controls how web links are fetched and converted to text. Sites differ wildly — some are static HTML, others render everything with JavaScript, others sit behind anti-bot protection — so Open Notebook offers several engines with different capabilities.
+
+| Engine | What it does | Needs |
+|--------|--------------|-------|
+| **auto** (default) | Tries each engine in order until one succeeds (see chain below). | Nothing; uses whatever is configured. |
+| **firecrawl** | Managed scraping service. Handles JavaScript, anti-bot, and proxies well. | `FIRECRAWL_API_KEY` (or a self-hosted instance). |
+| **jina** | Jina AI Reader. Good at turning articles into clean text. | `JINA_API_KEY`. |
+| **crawl4ai** | Renders JavaScript pages in a local Chromium browser. No API key needed. **Optional — must be enabled** (see below). | `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` (installs on first startup), or point at a remote server with `CRAWL4AI_API_URL`. |
+| **simple** | Basic HTTP fetch parsed with BeautifulSoup. | Nothing. |
+
+### How the `auto` fallback chain works
+
+In `auto` mode, Open Notebook tries engines in order and stops at the first that returns usable content:
+
+```
+Firecrawl  →  Jina  →  Crawl4AI  →  simple (bs4)
+```
+
+- Engines that aren't configured (e.g. no Firecrawl key) or aren't enabled (Crawl4AI) are skipped.
+- Firecrawl and Jina are tried first because they handle difficult sites best.
+- Crawl4AI catches JavaScript-heavy pages the API services miss, using local Chromium — **when it's enabled**.
+- `simple` is the last resort — a plain HTTP request. It's fast and needs nothing, but **misses anything rendered by JavaScript**, so single-page apps and dynamic sites often come back empty or partial.
+
+**When to force a specific engine:**
+
+- **firecrawl** / **jina** — you have a key and want consistent, high-quality extraction without paying the local-rendering cost.
+- **crawl4ai** — a site needs a real browser (JavaScript-rendered content) but you'd rather not use a paid API. Requires Crawl4AI to be enabled.
+- **simple** — the site is plain HTML and you want the fastest, dependency-free path.
+
+See the [Environment Reference](../5-CONFIGURATION/environment-reference.md#content-extraction) for the API keys and tuning variables (`FIRECRAWL_API_URL`, `CCORE_FIRECRAWL_PROXY`, `CCORE_FIRECRAWL_WAIT_FOR`, `CRAWL4AI_API_URL`).
+
+---
+
+## OCR Toggle
+
+**Settings → Content Processing → Enable OCR** (on by default, but only effective once Docling is enabled).
+
+OCR reads text off images. It applies when the Docling engine handles:
+
+- **Scanned PDFs** — pages that are images of text rather than real text.
+- **Image sources** — PNG, JPEG, TIFF, BMP.
+
+OCR only runs through Docling, so it does nothing until **Docling is enabled** (see below). With Docling off, the toggle is disabled in Settings and scanned PDFs fall back to plain text extraction (which yields little for image-only pages), while image sources are rejected as unsupported.
+
+**Leave it on** if you work with scanned documents or images. **Turn it off** to speed up processing when all your documents are text-native — OCR adds overhead you don't need there.
+
+---
+
+## Optional engines (Docling & Crawl4AI)
+
+Docling and local Crawl4AI are heavy: Docling pulls a multi-hundred-MB to multi-GB machine-learning stack, and Crawl4AI bundles a Chromium browser. To keep the default image small, they are **not installed by default**. You opt in with an environment variable; the runtime is then installed automatically the **first time the container starts**, and the downloads are cached on your data volume so later restarts are fast.
+
+| Enable this | To unlock |
+|-------------|-----------|
+| `OPEN_NOTEBOOK_ENABLE_DOCLING=true` | The `docling` document engine, the OCR toggle, and image sources (PNG/JPEG/TIFF/BMP). |
+| `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` | The local `crawl4ai` URL engine (JavaScript rendering via Chromium). |
+| `CRAWL4AI_API_URL=…` | The `crawl4ai` engine against a **remote** Crawl4AI server — no local install needed. |
+
+Notes:
+
+- **First start is slower.** Enabling Docling downloads a large ML stack (several minutes on the first boot). Progress is logged loudly. Subsequent boots reuse the cache on the `/app/data` volume.
+- **Degrade, don't die.** If the startup install fails (e.g. no network), the app still starts — the engine is simply reported unavailable and its option stays disabled in Settings.
+- **The UI reflects reality.** Settings shows Docling/Crawl4AI/OCR as disabled until the runtime is actually installed and importable, so while a first-boot install is still running they correctly read "unavailable".
+- **Offline / air-gapped deployments:** the startup install needs network access on first boot. If you can't reach PyPI, leave these disabled.
+
+Set the variables the same way as any other Open Notebook environment variable (see the [Environment Reference](../5-CONFIGURATION/environment-reference.md) and your `docker-compose.yml`).
+
+---
+
+## Quick Reference
+
+```
+Document extracts poorly (tables, columns garbled)
+  → Enable Docling, then set Document Engine to "docling"
+
+Scanned PDF or image comes out blank
+  → Enable Docling and Enable OCR (engine auto or docling)
+
+Web link comes back empty or half-extracted
+  → The site is likely JavaScript-heavy
+  → In auto mode, add a Firecrawl or Jina key, or enable Crawl4AI
+  → Or force "crawl4ai" / "firecrawl"
+
+Processing feels slow on clean documents
+  → Set Document Engine to "simple" and/or disable OCR
+```
+
+---
+
+## Related
+
+- [Adding Sources](adding-sources.md) — supported file types and step-by-step upload guide
+- [Environment Reference](../5-CONFIGURATION/environment-reference.md) — extraction API keys and tuning variables
+- [Advanced Configuration](../5-CONFIGURATION/advanced.md) — web scraping and content extraction setup
diff --git a/docs/3-USER-GUIDE/index.md b/docs/3-USER-GUIDE/index.md
index 2390d2d3..75bb1b73 100644
--- a/docs/3-USER-GUIDE/index.md
+++ b/docs/3-USER-GUIDE/index.md
@@ -25,6 +25,8 @@ How to bring content into your notebook. Supports PDFs, web links, audio, video,
 - Paste text directly
 - Common mistakes + fixes
 
+**Related:** [Content Processing Engines](content-processing-engines.md) — choose how documents and URLs are extracted (Docling, Firecrawl, Jina, Crawl4AI) and control OCR.
+
 ---
 
 ### 2. [Working with Notes](working-with-notes.md)
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 858c665d..d63df147 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -250,7 +250,7 @@ Restrict access to your Open Notebook:
 
 ## Web Scraping & Content Extraction
 
-Open Notebook uses multiple services for content extraction:
+Open Notebook uses multiple engines for content extraction. Which one runs is chosen in **Settings → Content Processing** (see the user-guide page on [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md)); the variables below configure them.
 
 ### Firecrawl
 
@@ -258,6 +258,15 @@ For advanced web scraping:
 
 ```env
 FIRECRAWL_API_KEY=your-key
+
+# Optional: self-hosted Firecrawl instance
+FIRECRAWL_API_URL=https://firecrawl.internal.example.com
+
+# Optional: bypass anti-bot protection (basic | stealth | auto)
+CCORE_FIRECRAWL_PROXY=auto
+
+# Optional: ms to wait for JavaScript to render (default 3000)
+CCORE_FIRECRAWL_WAIT_FOR=3000
 ```
 
 Get key from: https://firecrawl.dev/
@@ -272,6 +281,16 @@ JINA_API_KEY=your-key
 
 Get key from: https://jina.ai/
 
+### Crawl4AI
+
+Renders JavaScript pages in a local Chromium browser — no API key required. Crawl4AI is **optional**: enable it with `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` and it installs on first startup (the Chromium download is cached on your data volume). To offload rendering to a remote Crawl4AI server instead — no local install needed:
+
+```env
+CRAWL4AI_API_URL=http://crawl4ai.example.com:11235
+```
+
+See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai) for details.
+
 ---
 
 ## Environment Variable Groups
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 38c0f6c0..109d17fb 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -105,11 +105,27 @@ CORS_ORIGINS=https://notebook.example.com
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
 | `FIRECRAWL_API_KEY` | No | None | Firecrawl API key for advanced web scraping |
+| `FIRECRAWL_API_URL` | No | None | Base URL of a self-hosted Firecrawl instance (use instead of the hosted service) |
+| `CCORE_FIRECRAWL_PROXY` | No | `auto` | Firecrawl proxy mode to bypass anti-bot protection: `basic`, `stealth`, or `auto` |
+| `CCORE_FIRECRAWL_WAIT_FOR` | No | `3000` | Milliseconds Firecrawl waits for JavaScript to render before capturing the page |
 | `JINA_API_KEY` | No | None | Jina AI API key for web extraction |
+| `CRAWL4AI_API_URL` | No | None | Base URL of a remote Crawl4AI server. Set this to use Crawl4AI without a local install |
+
+### Optional heavy runtimes (installed on first startup)
+
+These are **off by default** to keep the image lean. Setting one to `true` makes the container install that runtime the first time it starts (downloads are cached on the `/app/data` volume, so only the first boot is slow). See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai).
+
+| Variable | Required? | Default | Description |
+|----------|-----------|---------|-------------|
+| `OPEN_NOTEBOOK_ENABLE_DOCLING` | No | `false` | Install Docling on first startup: unlocks the `docling` document engine, the OCR toggle and image sources. Pulls a large ML stack. |
+| `OPEN_NOTEBOOK_ENABLE_CRAWL4AI` | No | `false` | Install the local Crawl4AI runtime + a Chromium browser on first startup: unlocks the `crawl4ai` URL engine. Not needed if `CRAWL4AI_API_URL` is set. |
 
 **Setup:**
 - Firecrawl: https://firecrawl.dev/
 - Jina: https://jina.ai/
+- Crawl4AI: https://github.com/unclecode/crawl4ai
+
+The `CCORE_FIRECRAWL_*` variables are passed straight through to the content-core library (its settings are prefixed with `CCORE_`); Open Notebook itself doesn't read them. See [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md) for how these engines are selected in the UI.
 
 ---
 
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md b/docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md
new file mode 100644
index 00000000..a1ceaeb5
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md
@@ -0,0 +1,41 @@
+# ADR-007: Heavy extraction runtimes are opt-in, installed at container startup
+
+- **Status**: Accepted
+- **Date**: 2026-07
+- **Related**: #1122 (this decision), #432/#1118 (Crawl4AI engine), #1104/#1120 (OCR toggle), #975 (pre-flight file support), #374 (offline install), [ADR-002](ADR-002-external-libraries.md) (external libraries), [Content Processing Engines](../../3-USER-GUIDE/content-processing-engines.md)
+
+## Context
+
+The Content Core 2.x upgrade (#939) exposed two selectable extraction runtimes that are far heavier than the rest of the stack:
+
+- **Docling** (`content-core[docling]`) — layout-aware document parsing and OCR. Pulls a large machine-learning stack (torch/transformers and models), from several hundred MB to multiple GB.
+- **Crawl4AI local** (`content-core[crawl4ai]`) — JavaScript rendering via a bundled Chromium browser (~300 MB plus system libraries).
+
+The initial 2.x work bundled Crawl4AI into every image (#1118) and shipped an OCR toggle (#1120) that depended on Docling — which was never actually installed, making the toggle a silent no-op and image sources unsupported. So the default image was simultaneously **too heavy** (Chromium for everyone) and **missing** a runtime its own UI advertised.
+
+Baking both into the default image would push it into the multi-GB range and contradict Open Notebook's lean, privacy-first, self-hostable posture (ADR-002 keeps this repo focused on the knowledge layer, delegating extraction to Content Core). Most users need neither runtime.
+
+## Decision
+
+**Keep a single lean default image. Make Docling and local Crawl4AI opt-in via environment variables; when enabled, install them at container startup and cache the downloads on the data volume.**
+
+- Two booleans gate them: `OPEN_NOTEBOOK_ENABLE_DOCLING` and `OPEN_NOTEBOOK_ENABLE_CRAWL4AI`. A remote Crawl4AI server (`CRAWL4AI_API_URL`) needs no local install.
+- The container **entrypoint** (`scripts/docker-entrypoint.sh`) runs the install **before** api/worker/frontend start (blocking), pinning each extra to the base image's `content-core` version for dependency compatibility.
+- **Degrade, don't die:** a failed install (e.g. no network) logs loudly and boot continues; the runtime is reported unavailable rather than crashing the app.
+- **Persist caches, not the venv.** `UV_CACHE_DIR`, `PLAYWRIGHT_BROWSERS_PATH` and `HF_HOME` live under `/app/data` (the user's volume), so a second boot reinstalls from cache without re-downloading. The virtualenv stays in the image layer and is repopulated from the cache each boot — immune to Python-version bumps in the base image. Chromium's apt system libraries live in the container filesystem and are reinstalled once per container.
+- A backend **capability probe** (`GET /api/capabilities`) reports *actual* importability, and the Settings UI disables unavailable engines/OCR with an env-var hint — so the UI never advertises a runtime that isn't there (including mid-install).
+
+## Alternatives considered
+
+- **Bundle both into the default image** — rejected: multi-GB image for a feature most users don't use; wrong for a self-hostable, privacy-first product.
+- **Publish a separate "full" image tag** — rejected for now: doubles the release/registry matrix and forces users to pick an image up front. Revisit if startup-install friction proves too high.
+- **Persist the whole virtualenv on the volume** (the ComfyUI/Automatic1111 pattern) — rejected: couples the venv to the image's Python version and breaks on upgrades. Persisting only the download caches gets the "no re-download" benefit without that fragility.
+- **Keep Crawl4AI bundled, add only Docling opt-in** — rejected: leaves ~300 MB of Chromium in every image for an engine that is itself optional. Treating both the same way is simpler and leaner.
+
+## Consequences
+
+- The default image is small again; base extraction (text PDFs, Office, EPUB, URLs via bs4/Jina/Firecrawl, audio, YouTube) is unchanged.
+- **First boot with a flag set is slow** (minutes for Docling's ML stack); this is logged. Later boots are fast thanks to the volume cache.
+- **Offline / air-gapped:** first-boot install needs network. Air-gapped operators leave the flags off. A build-arg to pre-bake the extras is possible future work (#374).
+- Reproducibility depends on pinning the extra to the locked `content-core` version, done in the entrypoint.
+- This validates ADR-002 in practice: because all extraction sits behind Content Core's single `extract_content()` boundary, adding an opt-in install path touched infra + one probe endpoint, not the extraction code.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index 55405c2c..a9d315c8 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -48,5 +48,6 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-004](ADR-004-background-workers.md) | Long-running work runs on background workers | Accepted |
 | [ADR-005](ADR-005-release-confidence-process.md) | Releases pass a risk-based confidence process, gated on the real image | Accepted |
 | [ADR-006](ADR-006-migration-granularity.md) | Migration granularity follows merge granularity, not release granularity | Accepted |
+| [ADR-007](ADR-007-optin-runtimes.md) | Heavy extraction runtimes (Docling, Crawl4AI local) are opt-in, installed at startup | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.test.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.test.tsx
new file mode 100644
index 00000000..a75c499c
--- /dev/null
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.test.tsx
@@ -0,0 +1,107 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { render, screen } from '@testing-library/react'
+
+// Radix Select measures its trigger via ResizeObserver, which jsdom lacks.
+class ResizeObserverStub {
+  observe() {}
+  unobserve() {}
+  disconnect() {}
+}
+vi.stubGlobal('ResizeObserver', ResizeObserverStub)
+
+import { SettingsForm } from './SettingsForm'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string),
+// so hint keys render as their literal key names below.
+
+vi.mock('@/lib/hooks/use-settings', () => ({
+  useSettings: vi.fn(),
+  useUpdateSettings: vi.fn(() => ({ mutateAsync: vi.fn(), isPending: false })),
+}))
+
+vi.mock('@/lib/hooks/use-capabilities', () => ({
+  useCapabilities: vi.fn(),
+}))
+
+import { useSettings } from '@/lib/hooks/use-settings'
+import { useCapabilities } from '@/lib/hooks/use-capabilities'
+
+const settingsData = {
+  default_content_processing_engine_doc: 'auto',
+  default_content_processing_engine_url: 'auto',
+  default_embedding_option: 'ask',
+  auto_delete_files: 'no',
+  docling_ocr: true,
+}
+
+function mockCapabilities(caps: unknown, { isError = false } = {}) {
+  ;(useSettings as unknown as ReturnType<typeof vi.fn>).mockReturnValue({
+    data: settingsData,
+    isLoading: false,
+    error: null,
+  })
+  ;(useCapabilities as unknown as ReturnType<typeof vi.fn>).mockReturnValue({
+    data: caps,
+    isError,
+  })
+}
+
+describe('SettingsForm engine gating', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('disables OCR and shows env hints when the runtimes are unavailable', () => {
+    mockCapabilities({
+      docling_available: false,
+      crawl4ai_available: false,
+      crawl4ai_remote_configured: false,
+    })
+    render(<SettingsForm />)
+
+    expect(screen.getByText('settings.enableDoclingHint')).toBeInTheDocument()
+    expect(screen.getByText('settings.enableCrawl4aiHint')).toBeInTheDocument()
+    // Target the OCR toggle by its accessible name (from the associated Label).
+    expect(
+      screen.getByRole('checkbox', { name: 'settings.ocrEnabled' })
+    ).toBeDisabled()
+  })
+
+  it('enables OCR and hides the hints when the runtimes are available', () => {
+    mockCapabilities({
+      docling_available: true,
+      crawl4ai_available: true,
+      crawl4ai_remote_configured: false,
+    })
+    render(<SettingsForm />)
+
+    expect(screen.queryByText('settings.enableDoclingHint')).not.toBeInTheDocument()
+    expect(screen.queryByText('settings.enableCrawl4aiHint')).not.toBeInTheDocument()
+    expect(
+      screen.getByRole('checkbox', { name: 'settings.ocrEnabled' })
+    ).not.toBeDisabled()
+  })
+
+  it('treats runtimes as available while the capability probe is still loading', () => {
+    mockCapabilities(undefined)
+    render(<SettingsForm />)
+
+    // Optimistic default avoids a flash of disabled controls on a working setup.
+    expect(screen.queryByText('settings.enableDoclingHint')).not.toBeInTheDocument()
+    expect(
+      screen.getByRole('checkbox', { name: 'settings.ocrEnabled' })
+    ).not.toBeDisabled()
+  })
+
+  it('fails closed when the capability probe errors', () => {
+    mockCapabilities(undefined, { isError: true })
+    render(<SettingsForm />)
+
+    // A failed probe must not advertise engines the backend couldn't verify.
+    expect(screen.getByText('settings.enableDoclingHint')).toBeInTheDocument()
+    expect(screen.getByText('settings.enableCrawl4aiHint')).toBeInTheDocument()
+    expect(
+      screen.getByRole('checkbox', { name: 'settings.ocrEnabled' })
+    ).toBeDisabled()
+  })
+})
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index 9126dc9c..2088ac37 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -12,6 +12,7 @@ import { Checkbox } from '@/components/ui/checkbox'
 import { Collapsible, CollapsibleContent, CollapsibleTrigger } from '@/components/ui/collapsible'
 import { Alert, AlertTitle, AlertDescription } from '@/components/ui/alert'
 import { useSettings, useUpdateSettings } from '@/lib/hooks/use-settings'
+import { useCapabilities } from '@/lib/hooks/use-capabilities'
 import { useEffect, useState } from 'react'
 import { ChevronDownIcon } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
@@ -29,7 +30,16 @@ type SettingsFormData = z.infer<typeof settingsSchema>
 export function SettingsForm() {
   const { t } = useTranslation()
   const { data: settings, isLoading, error } = useSettings()
+  const { data: capabilities, isError: capabilitiesError } = useCapabilities()
   const updateSettings = useUpdateSettings()
+  // Opt-in heavy runtimes are installed on demand at container startup, so an
+  // engine is only offered when the backend probe confirms it's actually
+  // available. While the probe is still loading, default to available to avoid a
+  // flash of disabled controls on a correctly-configured install; but if the
+  // probe *fails*, fail closed (treat as unavailable) rather than advertising an
+  // engine the backend couldn't verify.
+  const doclingAvailable = capabilities?.docling_available ?? !capabilitiesError
+  const crawl4aiAvailable = capabilities?.crawl4ai_available ?? !capabilitiesError
   const [expandedSections, setExpandedSections] = useState<Record<string, boolean>>({
     doc: false,
     url: false,
@@ -125,12 +135,15 @@ export function SettingsForm() {
                       </SelectTrigger>
                     <SelectContent>
                       <SelectItem value="auto">{t('settings.autoRecommended')}</SelectItem>
-                      <SelectItem value="docling">{t('settings.docling')}</SelectItem>
+                      <SelectItem value="docling" disabled={!doclingAvailable}>{t('settings.docling')}</SelectItem>
                       <SelectItem value="simple">{t('settings.simple')}</SelectItem>
                     </SelectContent>
                   </Select>
               )}
             />
+            {!doclingAvailable && (
+              <p className="text-sm text-muted-foreground">{t('settings.enableDoclingHint')}</p>
+            )}
             <Collapsible open={expandedSections.doc} onOpenChange={() => toggleSection('doc')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.doc ? 'rotate-180' : ''}`} />
@@ -152,7 +165,7 @@ export function SettingsForm() {
                     id="docling_ocr"
                     checked={field.value ?? true}
                     onCheckedChange={field.onChange}
-                    disabled={field.disabled || isLoading}
+                    disabled={field.disabled || isLoading || !doclingAvailable}
                   />
                 )}
               />
@@ -181,12 +194,15 @@ export function SettingsForm() {
                     <SelectItem value="auto">{t('settings.autoRecommended')}</SelectItem>
                     <SelectItem value="firecrawl">{t('settings.firecrawl')}</SelectItem>
                     <SelectItem value="jina">{t('settings.jina')}</SelectItem>
-                    <SelectItem value="crawl4ai">{t('settings.crawl4ai')}</SelectItem>
+                    <SelectItem value="crawl4ai" disabled={!crawl4aiAvailable}>{t('settings.crawl4ai')}</SelectItem>
                     <SelectItem value="simple">{t('settings.simple')}</SelectItem>
                   </SelectContent>
                 </Select>
               )}
             />
+            {!crawl4aiAvailable && (
+              <p className="text-sm text-muted-foreground">{t('settings.enableCrawl4aiHint')}</p>
+            )}
              <Collapsible open={expandedSections.url} onOpenChange={() => toggleSection('url')}>
               <CollapsibleTrigger className="flex items-center gap-2 text-sm text-muted-foreground hover:text-foreground transition-colors">
                 <ChevronDownIcon className={`h-4 w-4 transition-transform ${expandedSections.url ? 'rotate-180' : ''}`} />
diff --git a/frontend/src/lib/api/capabilities.ts b/frontend/src/lib/api/capabilities.ts
new file mode 100644
index 00000000..c4332e8a
--- /dev/null
+++ b/frontend/src/lib/api/capabilities.ts
@@ -0,0 +1,13 @@
+import apiClient from './client'
+import { Capabilities } from '@/lib/types/api'
+
+export const capabilitiesApi = {
+  /**
+   * Report which opt-in heavy extraction runtimes (Docling, Crawl4AI local)
+   * are actually available in the running container.
+   */
+  get: async (): Promise<Capabilities> => {
+    const response = await apiClient.get<Capabilities>('/capabilities')
+    return response.data
+  },
+}
diff --git a/frontend/src/lib/hooks/use-capabilities.ts b/frontend/src/lib/hooks/use-capabilities.ts
new file mode 100644
index 00000000..99c2c65a
--- /dev/null
+++ b/frontend/src/lib/hooks/use-capabilities.ts
@@ -0,0 +1,20 @@
+import { useQuery } from '@tanstack/react-query'
+import { capabilitiesApi } from '@/lib/api/capabilities'
+
+export const CAPABILITIES_QUERY_KEYS = {
+  capabilities: ['capabilities'] as const,
+}
+
+/**
+ * Hook reporting which opt-in extraction runtimes (Docling, Crawl4AI local) are
+ * available. These only change when the container is restarted with different
+ * OPEN_NOTEBOOK_ENABLE_* flags, so cache aggressively like the providers list.
+ */
+export function useCapabilities() {
+  return useQuery({
+    queryKey: CAPABILITIES_QUERY_KEYS.capabilities,
+    queryFn: () => capabilitiesApi.get(),
+    staleTime: Infinity,
+    gcTime: 24 * 60 * 60 * 1000,
+  })
+}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 0e8495e3..947d1448 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -756,6 +756,8 @@ export const bnIN = {
     firecrawl: "ফায়ারক্রল",
     jina: "জিনা",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling ঐচ্ছিক। OPEN_NOTEBOOK_ENABLE_DOCLING=true দিয়ে সক্রিয় করুন — এটি প্রথম চালুর সময় ইনস্টল হয় (বড় ডাউনলোড)।",
+    enableCrawl4aiHint: "লোকাল Crawl4AI ঐচ্ছিক। OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true দিয়ে সক্রিয় করুন (প্রথম চালুর সময় ইনস্টল হয়), অথবা রিমোট সার্ভার ব্যবহার করতে CRAWL4AI_API_URL সেট করুন।",
     urlHelp: "· ফায়ারক্রল একটি পেইড সার্ভিস (ফ্রি টিয়ার সহ), এবং খুব শক্তিশালী। · জিনাও একটি ভাল অপশন এবং এর ফ্রি টিয়ার আছে। · Crawl4AI কোনো API কী ছাড়াই JavaScript পেজ স্থানীয়ভাবে (অথবা CRAWL4AI_API_URL সেট করা থাকলে একটি Crawl4AI সার্ভারের মাধ্যমে) রেন্ডার করে। · সাধারণ মৌলিক HTTP এক্সট্রাকশন ব্যবহার করবে এবং জাভাস্ক্রিপ্ট-ভিত্তিক ওয়েবসাইটে কন্টেন্ট মিস করবে। · স্বয়ংক্রিয় (প্রস্তাবিত) প্রথমে ফায়ারক্রল, তারপর জিনা, তারপর Crawl4AI ব্যবহার করার চেষ্টা করবে, সবশেষে সাধারণে ফলব্যাক করবে।",
     embeddingAndSearch: "এমবেডিং এবং অনুসন্ধান",
     embeddingAndSearchDesc: "অনুসন্ধান এবং এমবেডিং অপশন কনফিগার করুন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index f4060ec9..c13dd879 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -755,6 +755,8 @@ export const caES = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling és opcional. Activa'l amb OPEN_NOTEBOOK_ENABLE_DOCLING=true — s'instal·la en la primera arrencada (descàrrega gran).",
+    enableCrawl4aiHint: "Crawl4AI local és opcional. Activa'l amb OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (s'instal·la en la primera arrencada), o defineix CRAWL4AI_API_URL per fer servir un servidor remot.",
     urlHelp: "· Firecrawl és un servei de pagament (amb nivell gratuït) i és molt potent. · Jina és una bona opció i també té un nivell gratuït. · Crawl4AI renderitza pàgines JavaScript localment (o mitjançant un servidor Crawl4AI quan CRAWL4AI_API_URL està definit), sense clau d'API. · Simple usarà l'extracció HTTP bàsica i no podrà accedir al contingut de llocs web basats en JavaScript. · Automàtic (recomanat) intentarà usar Firecrawl, després Jina, després Crawl4AI i, finalment, usarà simple.",
     embeddingAndSearch: "Incrustació i cerca",
     embeddingAndSearchDesc: "Configura les opcions de cerca i incrustació",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index d81e3a48..626ed275 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -758,6 +758,8 @@ export const deDE = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling ist optional. Aktiviere es mit OPEN_NOTEBOOK_ENABLE_DOCLING=true — es wird beim ersten Start installiert (großer Download).",
+    enableCrawl4aiHint: "Lokales Crawl4AI ist optional. Aktiviere es mit OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (wird beim ersten Start installiert) oder setze CRAWL4AI_API_URL, um einen Remote-Server zu verwenden.",
     urlHelp: "· Firecrawl ist ein kostenpflichtiger Dienst mit kostenlosem Einstiegstarif und sehr leistungsfähig. · Jina ist ebenfalls eine gute Option und bietet auch einen kostenlosen Einstiegstarif. · Crawl4AI rendert JavaScript-Seiten lokal (oder über einen Crawl4AI-Server, wenn CRAWL4AI_API_URL gesetzt ist), ohne API-Schlüssel. · Einfach nutzt eine grundlegende HTTP-Extraktion und kann Inhalte auf JavaScript-basierten Websites übersehen. · Auto (empfohlen) versucht zuerst Firecrawl, dann Jina, dann Crawl4AI und fällt zuletzt auf Einfach zurück.",
     embeddingAndSearch: "Embeddings und Suche",
     embeddingAndSearchDesc: "Konfiguriere Such- und Embedding-Optionen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 6962a8dc..dff6440a 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -754,6 +754,8 @@ export const enUS = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling is optional. Enable it with OPEN_NOTEBOOK_ENABLE_DOCLING=true — it installs on first startup (a large download).",
+    enableCrawl4aiHint: "Local Crawl4AI is optional. Enable it with OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (installs on first startup), or set CRAWL4AI_API_URL to use a remote server.",
     urlHelp: "· Firecrawl is a paid service (with a free tier), and very powerful. · Jina is a good option as well and also has a free tier. · Crawl4AI renders JavaScript pages locally (or via a Crawl4AI server when CRAWL4AI_API_URL is set) with no API key. · Simple will use basic HTTP extraction and will miss content on javascript-based websites. · Auto (recommended) will try Firecrawl, then Jina, then Crawl4AI, finally falling back to simple.",
     embeddingAndSearch: "Embedding and Search",
     embeddingAndSearchDesc: "Configure search and embedding options",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index c137af08..3504f6fc 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -756,6 +756,8 @@ export const esES = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling es opcional. Actívalo con OPEN_NOTEBOOK_ENABLE_DOCLING=true — se instala en el primer arranque (descarga grande).",
+    enableCrawl4aiHint: "Crawl4AI local es opcional. Actívalo con OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (se instala en el primer arranque), o define CRAWL4AI_API_URL para usar un servidor remoto.",
     urlHelp: "· Firecrawl es un servicio de pago (con un nivel gratuito), y muy potente. · Jina es una buena opción también y tiene un nivel gratuito. · Crawl4AI renderiza páginas JavaScript localmente (o mediante un servidor Crawl4AI cuando se define CRAWL4AI_API_URL), sin clave de API. · Simple usará extracción HTTP básica y perderá contenido en sitios web basados en JavaScript. · Auto (recomendado) intentará usar Firecrawl, luego Jina, luego Crawl4AI, y finalmente Simple.",
     embeddingAndSearch: "Embedding y búsqueda",
     embeddingAndSearchDesc: "Configura las opciones de búsqueda y embedding",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index d338801a..b00c8eaf 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -755,6 +755,8 @@ export const frFR = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling est facultatif. Activez-le avec OPEN_NOTEBOOK_ENABLE_DOCLING=true — il s'installe au premier démarrage (téléchargement volumineux).",
+    enableCrawl4aiHint: "Crawl4AI local est facultatif. Activez-le avec OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (s'installe au premier démarrage), ou définissez CRAWL4AI_API_URL pour utiliser un serveur distant.",
     urlHelp: "· Firecrawl est un service payant (avec un niveau gratuit), et très puissant. · Jina est également une bonne option et dispose aussi d'un niveau gratuit. · Crawl4AI affiche les pages JavaScript localement (ou via un serveur Crawl4AI lorsque CRAWL4AI_API_URL est défini), sans clé API. · Simple utilisera une extraction HTTP basique et manquera du contenu sur les sites basés sur Javascript. · Auto (recommandé) essaiera Firecrawl, puis Jina, puis Crawl4AI, et se rabattra enfin sur Simple.",
     embeddingAndSearch: "Indexation (Embedding) et Recherche",
     embeddingAndSearchDesc: "Configurez les options de recherche et d'indexation",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index b46f9f93..3a8aadab 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -755,6 +755,8 @@ export const itIT = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling è facoltativo. Abilitalo con OPEN_NOTEBOOK_ENABLE_DOCLING=true — viene installato al primo avvio (download di grandi dimensioni).",
+    enableCrawl4aiHint: "Crawl4AI locale è facoltativo. Abilitalo con OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (installato al primo avvio), oppure imposta CRAWL4AI_API_URL per usare un server remoto.",
     urlHelp: "· Firecrawl è un servizio a pagamento (con piano gratuito), molto potente. · Jina è una buona alternativa con piano gratuito. · Crawl4AI renderizza le pagine JavaScript localmente (o tramite un server Crawl4AI quando CRAWL4AI_API_URL è impostato), senza chiave API. · Semplice usa estrazione HTTP base e perderà contenuto su siti basati su javascript. · Auto (consigliato) proverà firecrawl, poi Jina, poi Crawl4AI, infine semplice come fallback.",
     embeddingAndSearch: "Indicizzazione e ricerca",
     embeddingAndSearchDesc: "Configura opzioni di ricerca e indicizzazione",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index a287f9b3..7f4410d6 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -755,6 +755,8 @@ export const jaJP = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling は任意です。OPEN_NOTEBOOK_ENABLE_DOCLING=true で有効化すると、初回起動時にインストールされます（大容量のダウンロード）。",
+    enableCrawl4aiHint: "ローカルの Crawl4AI は任意です。OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true で有効化すると初回起動時にインストールされます。リモートサーバーを使う場合は CRAWL4AI_API_URL を設定してください。",
     urlHelp: "・Firecrawlは有料サービス（無料枠あり）で非常に強力です。・Jinaも良いオプションで無料枠があります。・Crawl4AIはAPIキーなしでJavaScriptページをローカルで（またはCRAWL4AI_API_URLを設定した場合はCrawl4AIサーバー経由で）レンダリングします。・シンプルは基本的なHTTP抽出を使用し、JavaScriptベースのウェブサイトのコンテンツを取得できない場合があります。・自動（推奨）はFirecrawl、Jina、Crawl4AI、最後にシンプルの順で試みます。",
     embeddingAndSearch: "Embeddingと検索",
     embeddingAndSearchDesc: "検索とEmbeddingオプションを設定",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 497907bd..36c25bfc 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -755,6 +755,8 @@ export const plPL = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling jest opcjonalny. Włącz go za pomocą OPEN_NOTEBOOK_ENABLE_DOCLING=true — instaluje się przy pierwszym uruchomieniu (duże pobieranie).",
+    enableCrawl4aiHint: "Lokalny Crawl4AI jest opcjonalny. Włącz go za pomocą OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (instaluje się przy pierwszym uruchomieniu) lub ustaw CRAWL4AI_API_URL, aby użyć serwera zdalnego.",
     urlHelp: "· Firecrawl to płatna usługa (z darmowym planem), bardzo wydajna. · Jina również jest dobrym wyborem i także ma darmowy plan. · Crawl4AI renderuje strony JavaScript lokalnie (lub przez serwer Crawl4AI, gdy ustawiono CRAWL4AI_API_URL), bez klucza API. · Prosty używa podstawowej ekstrakcji HTTP i pominie treść na stronach opartych na JavaScript. · Automatyczny (zalecany) spróbuje użyć Firecrawl, następnie Jina, następnie Crawl4AI, a na końcu przełączy się na prosty.",
     embeddingAndSearch: "Osadzanie i wyszukiwanie",
     embeddingAndSearchDesc: "Skonfiguruj opcje wyszukiwania i osadzania",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index b87295c5..c7a8d7ee 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -755,6 +755,8 @@ export const ptBR = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "O Docling é opcional. Ative-o com OPEN_NOTEBOOK_ENABLE_DOCLING=true — ele é instalado no primeiro início (download grande).",
+    enableCrawl4aiHint: "O Crawl4AI local é opcional. Ative-o com OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (instalado no primeiro início) ou defina CRAWL4AI_API_URL para usar um servidor remoto.",
     urlHelp: "· Firecrawl é um serviço pago (com tier gratuito), e muito poderoso. · Jina também é uma boa opção e também tem um tier gratuito. · Crawl4AI renderiza páginas JavaScript localmente (ou via um servidor Crawl4AI quando CRAWL4AI_API_URL está definido), sem chave de API. · Simples usará extração HTTP básica e perderá conteúdo em sites baseados em javascript. · Auto (recomendado) tentará usar firecrawl, depois Jina, depois Crawl4AI, e finalmente fallback para simples.",
     embeddingAndSearch: "Embedding e Busca",
     embeddingAndSearchDesc: "Configure opções de busca e embedding",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index e447bde6..5649a996 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -755,6 +755,8 @@ export const ruRU = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling необязателен. Включите его с помощью OPEN_NOTEBOOK_ENABLE_DOCLING=true — он устанавливается при первом запуске (большая загрузка).",
+    enableCrawl4aiHint: "Локальный Crawl4AI необязателен. Включите его с помощью OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true (устанавливается при первом запуске) или задайте CRAWL4AI_API_URL для использования удалённого сервера.",
     urlHelp: "· Firecrawl — платный сервис (есть бесплатный уровень), очень мощный. · Jina тоже хороший вариант с бесплатным уровнем. · Crawl4AI отображает JavaScript-страницы локально (или через сервер Crawl4AI, если задан CRAWL4AI_API_URL), без ключа API. · Simple использует базовое HTTP-извлечение и пропустит контент на JavaScript-сайтах. · Авто (рекомендуется) попробует Firecrawl, затем Jina, затем Crawl4AI, затем Simple.",
     embeddingAndSearch: "Эмбеддинг и поиск",
     embeddingAndSearchDesc: "Настройте параметры поиска и эмбеддинга",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 6b48b96d..c1c32105 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -755,6 +755,8 @@ export const trTR = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling isteğe bağlıdır. OPEN_NOTEBOOK_ENABLE_DOCLING=true ile etkinleştirin — ilk açılışta kurulur (büyük indirme).",
+    enableCrawl4aiHint: "Yerel Crawl4AI isteğe bağlıdır. OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true ile etkinleştirin (ilk açılışta kurulur) veya uzak bir sunucu kullanmak için CRAWL4AI_API_URL ayarlayın.",
     urlHelp: "· Firecrawl ücretli bir hizmettir (ücretsiz katmanı ile) ve çok güçlüdür. · Jina da iyi bir seçenektir ve ücretsiz katmanı vardır. · Crawl4AI, JavaScript sayfalarını API anahtarı olmadan yerel olarak (veya CRAWL4AI_API_URL ayarlandığında bir Crawl4AI sunucusu aracılığıyla) işler. · Basit, temel HTTP çıkarımını kullanır ve JavaScript tabanlı web sitelerindeki içerikleri kaçırır. · Otomatik (önerilen) önce firecrawl, sonra Jina, sonra Crawl4AI'yi dener ve son olarak basit'e geri döner.",
     embeddingAndSearch: "Gömme ve Arama",
     embeddingAndSearchDesc: "Arama ve gömme seçeneklerini yapılandırın",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 1bd5358f..00c4ec21 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -755,6 +755,8 @@ export const zhCN = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling 为可选项。使用 OPEN_NOTEBOOK_ENABLE_DOCLING=true 启用，首次启动时安装（下载较大）。",
+    enableCrawl4aiHint: "本地 Crawl4AI 为可选项。使用 OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true 启用（首次启动时安装），或设置 CRAWL4AI_API_URL 以使用远程服务器。",
     urlHelp: "· Firecrawl: 强大的付费服务（有免费额度）。 · Jina: 优秀的备选方案，同样提供免费额度。 · Crawl4AI: 在本地渲染 JavaScript 页面（或在设置 CRAWL4AI_API_URL 时通过 Crawl4AI 服务器），无需 API 密钥。 · Simple: 基础 HTTP 提取，在 JS 渲染的网站上可能会丢失内容。 · 自动 (推荐): 优先尝试 Firecrawl，其次 Jina，然后 Crawl4AI，最后回退至 Simple。",
     embeddingAndSearch: "嵌入与搜索",
     embeddingAndSearchDesc: "配置搜索和向量嵌入选项",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 5dc762fc..e65ee148 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -755,6 +755,8 @@ export const zhTW = {
     firecrawl: "Firecrawl",
     jina: "Jina",
     crawl4ai: "Crawl4AI",
+    enableDoclingHint: "Docling 為選用項目。使用 OPEN_NOTEBOOK_ENABLE_DOCLING=true 啟用，首次啟動時安裝（下載較大）。",
+    enableCrawl4aiHint: "本機 Crawl4AI 為選用項目。使用 OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true 啟用（首次啟動時安裝），或設定 CRAWL4AI_API_URL 以使用遠端伺服器。",
     urlHelp: "· Firecrawl: 強大的付費服務（有免費額度）。 · Jina: 優秀的備選方案，同樣提供免費額度。 · Crawl4AI: 在本機算繪 JavaScript 頁面（或在設定 CRAWL4AI_API_URL 時透過 Crawl4AI 伺服器），無需 API 金鑰。 · Simple: 基礎 HTTP 提取，在 JS 渲染的網站上可能會丟失內容。 · 自動 (推薦): 優先嘗試 Firecrawl，其次 Jina，然後 Crawl4AI，最後回退至 Simple。",
     embeddingAndSearch: "嵌入與搜尋",
     embeddingAndSearchDesc: "設定搜尋和向量嵌入選項",
diff --git a/frontend/src/lib/types/api.ts b/frontend/src/lib/types/api.ts
index 23f96c17..19777582 100644
--- a/frontend/src/lib/types/api.ts
+++ b/frontend/src/lib/types/api.ts
@@ -61,6 +61,12 @@ export interface SettingsResponse {
   youtube_preferred_languages?: string[]
 }
 
+export interface Capabilities {
+  docling_available: boolean
+  crawl4ai_available: boolean
+  crawl4ai_remote_configured: boolean
+}
+
 export interface CreateNotebookRequest {
   name: string
   description?: string
diff --git a/pyproject.toml b/pyproject.toml
index ab47022e..577ad8db 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
-    "content-core[crawl4ai]>=2.0.4,<3",
+    "content-core>=2.0.4,<3",
     "ai-prompter>=0.4,<1",
     "esperanto>=2.20.0,<3",
     "surrealdb>=1.0.4",
diff --git a/scripts/docker-entrypoint.sh b/scripts/docker-entrypoint.sh
new file mode 100755
index 00000000..410f85c7
--- /dev/null
+++ b/scripts/docker-entrypoint.sh
@@ -0,0 +1,116 @@
+#!/bin/sh
+# Open Notebook container entrypoint.
+#
+# Installs the OPT-IN heavy extraction runtimes (Docling, Crawl4AI local) when the
+# operator enables them via env vars, then hands off to CMD (supervisord).
+#
+#   OPEN_NOTEBOOK_ENABLE_DOCLING=true   -> content-core[docling]  (Docling engine, OCR, image sources)
+#   OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true  -> content-core[crawl4ai] + Chromium  (local JS rendering)
+#
+# Design (see docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md):
+#   - Blocking: installs finish before api/worker/frontend start.
+#   - Degrade, don't die: a failed install logs LOUDLY and boot continues; the
+#     runtime is simply reported unavailable by GET /api/capabilities.
+#   - Caches persist on the /app/data volume (UV_CACHE_DIR, PLAYWRIGHT_BROWSERS_PATH,
+#     HF_HOME), so a second boot reinstalls from cache instead of re-downloading.
+#   - The venv itself lives in the image layer (ephemeral per container), so we
+#     probe the actual venv each boot and reinstall when a fresh container lacks
+#     the extra. This is immune to Python-version bumps in the base image.
+#
+# POSIX /bin/sh (dash) compatible — no bashisms.
+
+VENV_PY="/app/.venv/bin/python"
+
+# Chromium's system libraries (installed via apt by `playwright install --with-deps`)
+# live in the CONTAINER filesystem, which resets per container — so this marker
+# lives there too (NOT on the volume), making --with-deps run once per container.
+PLAYWRIGHT_DEPS_STAMP="/app/.playwright-system-deps.done"
+
+log() { echo "[entrypoint] $*"; }
+
+is_true() {
+    case "$(printf '%s' "$1" | tr '[:upper:]' '[:lower:]')" in
+        1 | true | yes | on) return 0 ;;
+        *) return 1 ;;
+    esac
+}
+
+has_module() {
+    "$VENV_PY" -c "import importlib.util, sys; sys.exit(0 if importlib.util.find_spec('$1') else 1)" 2>/dev/null
+}
+
+# Pin the extra to the base install's content-core version so its transitive deps
+# stay compatible with what's already locked in the image.
+ccore_version() {
+    "$VENV_PY" -c "import importlib.metadata as m; print(m.version('content-core'))" 2>/dev/null
+}
+
+# Ensure the cache directories exist on the (possibly freshly mounted) volume.
+mkdir -p "${UV_CACHE_DIR:-/app/data/.cache/uv}" \
+    "${PLAYWRIGHT_BROWSERS_PATH:-/app/data/.cache/playwright}" \
+    "${HF_HOME:-/app/data/.cache/huggingface}" 2>/dev/null || true
+
+CCORE_VERSION="$(ccore_version)"
+
+# ---------------------------------------------------------------------------
+# Docling
+# ---------------------------------------------------------------------------
+if is_true "$OPEN_NOTEBOOK_ENABLE_DOCLING"; then
+    if has_module docling; then
+        log "Docling already installed; skipping."
+    elif [ -z "$CCORE_VERSION" ]; then
+        log "WARNING: could not determine content-core version; skipping Docling install."
+    else
+        log "Installing Docling (first start; this pulls a large ML stack — several hundred MB to a few GB — and can take several minutes)..."
+        if uv pip install --python "$VENV_PY" "content-core[docling]==${CCORE_VERSION}"; then
+            log "Docling installed. The Docling engine, OCR and image sources are now available."
+        else
+            log "WARNING: Docling install FAILED. Booting without it — the Docling engine, OCR and image sources will be unavailable. Fix connectivity and restart to retry."
+        fi
+    fi
+fi
+
+# ---------------------------------------------------------------------------
+# Crawl4AI (local). A remote server via CRAWL4AI_API_URL needs no local install.
+# ---------------------------------------------------------------------------
+if is_true "$OPEN_NOTEBOOK_ENABLE_CRAWL4AI"; then
+    if [ -n "$CRAWL4AI_API_URL" ]; then
+        log "CRAWL4AI_API_URL is set; using the remote Crawl4AI service (no local install)."
+    else
+        if has_module crawl4ai; then
+            log "Crawl4AI package already installed."
+        elif [ -z "$CCORE_VERSION" ]; then
+            log "WARNING: could not determine content-core version; skipping Crawl4AI install."
+        else
+            log "Installing Crawl4AI local runtime (first start; also downloads a Chromium browser ~150MB)..."
+            if uv pip install --python "$VENV_PY" "content-core[crawl4ai]==${CCORE_VERSION}"; then
+                log "Crawl4AI package installed."
+            else
+                log "WARNING: Crawl4AI install FAILED. Booting without local Crawl4AI — set CRAWL4AI_API_URL to use a remote server instead."
+            fi
+        fi
+
+        # Ensure the Chromium browser (persisted on the volume) and its system
+        # libraries (container FS, once per container) are present.
+        if has_module crawl4ai; then
+            if [ -f "$PLAYWRIGHT_DEPS_STAMP" ]; then
+                if "$VENV_PY" -m playwright install chromium >/dev/null 2>&1; then
+                    log "Chromium browser ready."
+                else
+                    log "WARNING: 'playwright install chromium' failed; local Crawl4AI may not render pages."
+                fi
+            else
+                log "Installing Chromium browser + system libraries (one-time for this container)..."
+                if "$VENV_PY" -m playwright install --with-deps chromium; then
+                    touch "$PLAYWRIGHT_DEPS_STAMP"
+                    log "Chromium browser + system libraries ready."
+                else
+                    log "WARNING: 'playwright install --with-deps chromium' failed; local Crawl4AI may not render pages."
+                fi
+            fi
+        fi
+    fi
+fi
+
+log "Starting Open Notebook."
+exec "$@"
diff --git a/tests/test_capabilities_api.py b/tests/test_capabilities_api.py
new file mode 100644
index 00000000..ad51b9d7
--- /dev/null
+++ b/tests/test_capabilities_api.py
@@ -0,0 +1,128 @@
+"""
+Tests for GET /api/capabilities (api/routers/capabilities.py).
+
+The endpoint reports the *actual* availability of the opt-in heavy extraction
+runtimes (Docling, Crawl4AI local) so the frontend can gate engine options.
+These tests lock the composition rule: crawl4ai_available is true when EITHER a
+local package is installed OR a remote server is configured.
+"""
+
+import pytest
+from fastapi.testclient import TestClient
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _patch_probes(monkeypatch, *, docling, crawl4ai_local, crawl4ai_remote):
+    monkeypatch.setattr(
+        "api.routers.capabilities._docling_available", lambda: docling
+    )
+    monkeypatch.setattr(
+        "api.routers.capabilities._crawl4ai_remote_configured",
+        lambda: crawl4ai_remote,
+    )
+    # Local readiness means package installed AND a Chromium browser present.
+    monkeypatch.setattr(
+        "api.routers.capabilities._crawl4ai_local_ready", lambda: crawl4ai_local
+    )
+
+
+class TestCapabilitiesEndpoint:
+    def test_all_unavailable(self, client, monkeypatch):
+        _patch_probes(
+            monkeypatch, docling=False, crawl4ai_local=False, crawl4ai_remote=False
+        )
+        response = client.get("/api/capabilities")
+        assert response.status_code == 200
+        assert response.json() == {
+            "docling_available": False,
+            "crawl4ai_available": False,
+            "crawl4ai_remote_configured": False,
+        }
+
+    def test_docling_available_is_independent_of_crawl4ai(self, client, monkeypatch):
+        _patch_probes(
+            monkeypatch, docling=True, crawl4ai_local=False, crawl4ai_remote=False
+        )
+        body = client.get("/api/capabilities").json()
+        assert body["docling_available"] is True
+        assert body["crawl4ai_available"] is False
+
+    def test_local_crawl4ai_makes_it_available(self, client, monkeypatch):
+        _patch_probes(
+            monkeypatch, docling=False, crawl4ai_local=True, crawl4ai_remote=False
+        )
+        body = client.get("/api/capabilities").json()
+        assert body["crawl4ai_available"] is True
+        assert body["crawl4ai_remote_configured"] is False
+
+    def test_remote_crawl4ai_makes_it_available_without_local(
+        self, client, monkeypatch
+    ):
+        _patch_probes(
+            monkeypatch, docling=False, crawl4ai_local=False, crawl4ai_remote=True
+        )
+        body = client.get("/api/capabilities").json()
+        assert body["crawl4ai_available"] is True
+        assert body["crawl4ai_remote_configured"] is True
+
+
+class TestCrawl4aiLocalReadiness:
+    """Local Crawl4AI needs the package AND a Chromium browser on disk."""
+
+    def test_not_ready_when_package_missing(self, monkeypatch):
+        import api.routers.capabilities as cap
+
+        monkeypatch.setattr(
+            cap.importlib.util, "find_spec", lambda name, *a, **k: None
+        )
+        assert cap._crawl4ai_local_ready() is False
+
+    def test_not_ready_when_browser_missing(self, monkeypatch, tmp_path):
+        import api.routers.capabilities as cap
+
+        monkeypatch.setattr(
+            cap.importlib.util, "find_spec", lambda name, *a, **k: object()
+        )
+        # PLAYWRIGHT_BROWSERS_PATH set to an empty dir → no chromium installed.
+        monkeypatch.setenv("PLAYWRIGHT_BROWSERS_PATH", str(tmp_path))
+        assert cap._crawl4ai_local_ready() is False
+
+    def test_ready_when_browser_present(self, monkeypatch, tmp_path):
+        import api.routers.capabilities as cap
+
+        monkeypatch.setattr(
+            cap.importlib.util, "find_spec", lambda name, *a, **k: object()
+        )
+        (tmp_path / "chromium-1140").mkdir()
+        monkeypatch.setenv("PLAYWRIGHT_BROWSERS_PATH", str(tmp_path))
+        assert cap._crawl4ai_local_ready() is True
+
+    def test_dev_default_cache_without_browser_is_not_ready(
+        self, monkeypatch, tmp_path
+    ):
+        """No PLAYWRIGHT_BROWSERS_PATH: fall back to the default cache, fail closed if empty."""
+        import api.routers.capabilities as cap
+
+        monkeypatch.setattr(
+            cap.importlib.util, "find_spec", lambda name, *a, **k: object()
+        )
+        monkeypatch.delenv("PLAYWRIGHT_BROWSERS_PATH", raising=False)
+        monkeypatch.setattr(cap, "_default_playwright_cache", lambda: str(tmp_path))
+        assert cap._crawl4ai_local_ready() is False
+
+    def test_dev_default_cache_with_browser_is_ready(self, monkeypatch, tmp_path):
+        import api.routers.capabilities as cap
+
+        monkeypatch.setattr(
+            cap.importlib.util, "find_spec", lambda name, *a, **k: object()
+        )
+        monkeypatch.delenv("PLAYWRIGHT_BROWSERS_PATH", raising=False)
+        (tmp_path / "chromium-1140").mkdir()
+        monkeypatch.setattr(cap, "_default_playwright_cache", lambda: str(tmp_path))
+        assert cap._crawl4ai_local_ready() is True
diff --git a/uv.lock b/uv.lock
index 59e3ae44..346a30ac 100644
--- a/uv.lock
+++ b/uv.lock
@@ -39,15 +39,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/50/25/da1f0b4dd970e52bf5a36c204c107e11a0c6d3ed195eba0bfbc664c312b2/aiofile-3.9.0-py3-none-any.whl", hash = "sha256:ce2f6c1571538cbdfa0143b04e16b208ecb0e9cb4148e528af8a640ed51cc8aa", size = 19539, upload-time = "2024-10-08T10:39:32.955Z" },
 ]
 
-[[package]]
-name = "aiofiles"
-version = "25.1.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/41/c3/534eac40372d8ee36ef40df62ec129bee4fdb5ad9706e58a29be53b2c970/aiofiles-25.1.0.tar.gz", hash = "sha256:a8d728f0a29de45dc521f18f07297428d56992a742f0cd2701ba86e44d23d5b2", size = 46354, upload-time = "2025-10-09T20:51:04.358Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/8a/340a1555ae33d7354dbca4faa54948d76d89a27ceef032c8c3bc661d003e/aiofiles-25.1.0-py3-none-any.whl", hash = "sha256:abe311e527c862958650f9438e859c1fa7568a141b22abcd015e120e86a85695", size = 14668, upload-time = "2025-10-09T20:51:03.174Z" },
-]
-
 [[package]]
 name = "aiohappyeyeballs"
 version = "2.6.1"
@@ -133,26 +124,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/00/b7/e3bf5133d697a08128598c8d0abc5e16377b51465a33756de24fa7dee953/aiosqlite-0.22.1-py3-none-any.whl", hash = "sha256:21c002eb13823fad740196c5a2e9d8e62f6243bd9e7e4a1f87fb5e44ecb4fceb", size = 17405, upload-time = "2025-12-23T19:25:42.139Z" },
 ]
 
-[[package]]
-name = "alphashape"
-version = "1.3.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "click" },
-    { name = "click-log" },
-    { name = "networkx" },
-    { name = "numpy" },
-    { name = "rtree" },
-    { name = "scipy", version = "1.17.1", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.12'" },
-    { name = "scipy", version = "1.18.0", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version >= '3.12'" },
-    { name = "shapely" },
-    { name = "trimesh" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/2e/83/67ff905694df5b34a777123b59fdfd05998d5a31766f188aafbf5b340055/alphashape-1.3.1.tar.gz", hash = "sha256:7a27340afc5f8ed301577acec46bb0cf2bada5410045f7289142e735ef6977ec", size = 26316, upload-time = "2021-04-16T17:47:19.486Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e4/ad/77fad9d6f974ec58d837cb49fb9b483d6227a420c4f908c3578633de1d47/alphashape-1.3.1-py2.py3-none-any.whl", hash = "sha256:96a5ddd5f09534a35f03a8916aeeaac00fe4d6bec2f9ad78f87f57be3007f795", size = 13122, upload-time = "2021-04-16T17:47:17.773Z" },
-]
-
 [[package]]
 name = "annotated-doc"
 version = "0.0.4"
@@ -291,34 +262,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/1a/39/47f9197bdd44df24d67ac8893641e16f386c984a0619ef2ee4c51fbbc019/beautifulsoup4-4.14.3-py3-none-any.whl", hash = "sha256:0918bfe44902e6ad8d57732ba310582e98da931428d231a5ecb9e7c703a735bb", size = 107721, upload-time = "2025-11-30T15:08:24.087Z" },
 ]
 
-[[package]]
-name = "brotli"
-version = "1.2.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f7/16/c92ca344d646e71a43b8bb353f0a6490d7f6e06210f8554c8f874e454285/brotli-1.2.0.tar.gz", hash = "sha256:e310f77e41941c13340a95976fe66a8a95b01e783d430eeaf7a2f87e0a57dd0a", size = 7388632, upload-time = "2025-11-05T18:39:42.86Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/7a/ef/f285668811a9e1ddb47a18cb0b437d5fc2760d537a2fe8a57875ad6f8448/brotli-1.2.0-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:15b33fe93cedc4caaff8a0bd1eb7e3dab1c61bb22a0bf5bdfdfd97cd7da79744", size = 863110, upload-time = "2025-11-05T18:38:12.978Z" },
-    { url = "https://files.pythonhosted.org/packages/50/62/a3b77593587010c789a9d6eaa527c79e0848b7b860402cc64bc0bc28a86c/brotli-1.2.0-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:898be2be399c221d2671d29eed26b6b2713a02c2119168ed914e7d00ceadb56f", size = 445438, upload-time = "2025-11-05T18:38:14.208Z" },
-    { url = "https://files.pythonhosted.org/packages/cd/e1/7fadd47f40ce5549dc44493877db40292277db373da5053aff181656e16e/brotli-1.2.0-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:350c8348f0e76fff0a0fd6c26755d2653863279d086d3aa2c290a6a7251135dd", size = 1534420, upload-time = "2025-11-05T18:38:15.111Z" },
-    { url = "https://files.pythonhosted.org/packages/12/8b/1ed2f64054a5a008a4ccd2f271dbba7a5fb1a3067a99f5ceadedd4c1d5a7/brotli-1.2.0-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2e1ad3fda65ae0d93fec742a128d72e145c9c7a99ee2fcd667785d99eb25a7fe", size = 1632619, upload-time = "2025-11-05T18:38:16.094Z" },
-    { url = "https://files.pythonhosted.org/packages/89/5a/7071a621eb2d052d64efd5da2ef55ecdac7c3b0c6e4f9d519e9c66d987ef/brotli-1.2.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:40d918bce2b427a0c4ba189df7a006ac0c7277c180aee4617d99e9ccaaf59e6a", size = 1426014, upload-time = "2025-11-05T18:38:17.177Z" },
-    { url = "https://files.pythonhosted.org/packages/26/6d/0971a8ea435af5156acaaccec1a505f981c9c80227633851f2810abd252a/brotli-1.2.0-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:2a7f1d03727130fc875448b65b127a9ec5d06d19d0148e7554384229706f9d1b", size = 1489661, upload-time = "2025-11-05T18:38:18.41Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/75/c1baca8b4ec6c96a03ef8230fab2a785e35297632f402ebb1e78a1e39116/brotli-1.2.0-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:9c79f57faa25d97900bfb119480806d783fba83cd09ee0b33c17623935b05fa3", size = 1599150, upload-time = "2025-11-05T18:38:19.792Z" },
-    { url = "https://files.pythonhosted.org/packages/0d/1a/23fcfee1c324fd48a63d7ebf4bac3a4115bdb1b00e600f80f727d850b1ae/brotli-1.2.0-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:844a8ceb8483fefafc412f85c14f2aae2fb69567bf2a0de53cdb88b73e7c43ae", size = 1493505, upload-time = "2025-11-05T18:38:20.913Z" },
-    { url = "https://files.pythonhosted.org/packages/36/e5/12904bbd36afeef53d45a84881a4810ae8810ad7e328a971ebbfd760a0b3/brotli-1.2.0-cp311-cp311-win32.whl", hash = "sha256:aa47441fa3026543513139cb8926a92a8e305ee9c71a6209ef7a97d91640ea03", size = 334451, upload-time = "2025-11-05T18:38:21.94Z" },
-    { url = "https://files.pythonhosted.org/packages/02/8b/ecb5761b989629a4758c394b9301607a5880de61ee2ee5fe104b87149ebc/brotli-1.2.0-cp311-cp311-win_amd64.whl", hash = "sha256:022426c9e99fd65d9475dce5c195526f04bb8be8907607e27e747893f6ee3e24", size = 369035, upload-time = "2025-11-05T18:38:22.941Z" },
-    { url = "https://files.pythonhosted.org/packages/11/ee/b0a11ab2315c69bb9b45a2aaed022499c9c24a205c3a49c3513b541a7967/brotli-1.2.0-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:35d382625778834a7f3061b15423919aa03e4f5da34ac8e02c074e4b75ab4f84", size = 861543, upload-time = "2025-11-05T18:38:24.183Z" },
-    { url = "https://files.pythonhosted.org/packages/e1/2f/29c1459513cd35828e25531ebfcbf3e92a5e49f560b1777a9af7203eb46e/brotli-1.2.0-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:7a61c06b334bd99bc5ae84f1eeb36bfe01400264b3c352f968c6e30a10f9d08b", size = 444288, upload-time = "2025-11-05T18:38:25.139Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/6f/feba03130d5fceadfa3a1bb102cb14650798c848b1df2a808356f939bb16/brotli-1.2.0-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:acec55bb7c90f1dfc476126f9711a8e81c9af7fb617409a9ee2953115343f08d", size = 1528071, upload-time = "2025-11-05T18:38:26.081Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/38/f3abb554eee089bd15471057ba85f47e53a44a462cfce265d9bf7088eb09/brotli-1.2.0-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:260d3692396e1895c5034f204f0db022c056f9e2ac841593a4cf9426e2a3faca", size = 1626913, upload-time = "2025-11-05T18:38:27.284Z" },
-    { url = "https://files.pythonhosted.org/packages/03/a7/03aa61fbc3c5cbf99b44d158665f9b0dd3d8059be16c460208d9e385c837/brotli-1.2.0-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:072e7624b1fc4d601036ab3f4f27942ef772887e876beff0301d261210bca97f", size = 1419762, upload-time = "2025-11-05T18:38:28.295Z" },
-    { url = "https://files.pythonhosted.org/packages/21/1b/0374a89ee27d152a5069c356c96b93afd1b94eae83f1e004b57eb6ce2f10/brotli-1.2.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:adedc4a67e15327dfdd04884873c6d5a01d3e3b6f61406f99b1ed4865a2f6d28", size = 1484494, upload-time = "2025-11-05T18:38:29.29Z" },
-    { url = "https://files.pythonhosted.org/packages/cf/57/69d4fe84a67aef4f524dcd075c6eee868d7850e85bf01d778a857d8dbe0a/brotli-1.2.0-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:7a47ce5c2288702e09dc22a44d0ee6152f2c7eda97b3c8482d826a1f3cfc7da7", size = 1593302, upload-time = "2025-11-05T18:38:30.639Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/3b/39e13ce78a8e9a621c5df3aeb5fd181fcc8caba8c48a194cd629771f6828/brotli-1.2.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:af43b8711a8264bb4e7d6d9a6d004c3a2019c04c01127a868709ec29962b6036", size = 1487913, upload-time = "2025-11-05T18:38:31.618Z" },
-    { url = "https://files.pythonhosted.org/packages/62/28/4d00cb9bd76a6357a66fcd54b4b6d70288385584063f4b07884c1e7286ac/brotli-1.2.0-cp312-cp312-win32.whl", hash = "sha256:e99befa0b48f3cd293dafeacdd0d191804d105d279e0b387a32054c1180f3161", size = 334362, upload-time = "2025-11-05T18:38:32.939Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/4e/bc1dcac9498859d5e353c9b153627a3752868a9d5f05ce8dedd81a2354ab/brotli-1.2.0-cp312-cp312-win_amd64.whl", hash = "sha256:b35c13ce241abdd44cb8ca70683f20c0c079728a36a996297adb5334adfc1c44", size = 369115, upload-time = "2025-11-05T18:38:33.765Z" },
-]
-
 [[package]]
 name = "bs4"
 version = "0.0.2"
@@ -473,18 +416,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/98/78/01c019cdb5d6498122777c1a43056ebb3ebfeef2076d9d026bfe15583b2b/click-8.3.1-py3-none-any.whl", hash = "sha256:981153a64e25f12d547d3426c367a4857371575ee7ad18df2a6183ab0545b2a6", size = 108274, upload-time = "2025-11-15T20:45:41.139Z" },
 ]
 
-[[package]]
-name = "click-log"
-version = "0.4.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "click" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/32/32/228be4f971e4bd556c33d52a22682bfe318ffe57a1ddb7a546f347a90260/click-log-0.4.0.tar.gz", hash = "sha256:3970f8570ac54491237bcdb3d8ab5e3eef6c057df29f8c3d1151a51a9c23b975", size = 9985, upload-time = "2022-03-13T11:10:15.262Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ae/5a/4f025bc751087833686892e17e7564828e409c43b632878afeae554870cd/click_log-0.4.0-py2.py3-none-any.whl", hash = "sha256:a43e394b528d52112af599f2fc9e4b7cf3c15f94e53581f74fa6867e68c91756", size = 4273, upload-time = "2022-03-13T11:10:17.594Z" },
-]
-
 [[package]]
 name = "colorama"
 version = "0.4.6"
@@ -540,11 +471,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/18/7c/50e546c2e7a9aa164d2b655b4e2f7b2666712a2c48284e88e8e1f138cdf3/content_core-2.0.4-py3-none-any.whl", hash = "sha256:673dd51faa40dd3012f611572287bd18e8b0504e3569f96f4a69fc3d10e0cc8f", size = 58190, upload-time = "2026-07-12T14:24:47.622Z" },
 ]
 
-[package.optional-dependencies]
-crawl4ai = [
-    { name = "crawl4ai" },
-]
-
 [[package]]
 name = "coverage"
 version = "7.14.3"
@@ -589,50 +515,6 @@ toml = [
     { name = "tomli", marker = "python_full_version <= '3.11'" },
 ]
 
-[[package]]
-name = "crawl4ai"
-version = "0.9.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiofiles" },
-    { name = "aiohttp" },
-    { name = "aiosqlite" },
-    { name = "alphashape" },
-    { name = "anyio" },
-    { name = "beautifulsoup4" },
-    { name = "brotli" },
-    { name = "chardet" },
-    { name = "click" },
-    { name = "cssselect" },
-    { name = "fake-useragent" },
-    { name = "httpx", extra = ["http2"] },
-    { name = "humanize" },
-    { name = "lark" },
-    { name = "lxml" },
-    { name = "nltk" },
-    { name = "numpy" },
-    { name = "patchright" },
-    { name = "pillow" },
-    { name = "playwright" },
-    { name = "playwright-stealth" },
-    { name = "psutil" },
-    { name = "pydantic" },
-    { name = "pyopenssl" },
-    { name = "python-dotenv" },
-    { name = "pyyaml" },
-    { name = "rank-bm25" },
-    { name = "requests" },
-    { name = "rich" },
-    { name = "shapely" },
-    { name = "snowballstemmer" },
-    { name = "unclecode-litellm" },
-    { name = "xxhash" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/ca/95/a307119201f09a5136be1e394282ee4d4d6e3816cbc3c73f370aaa4b5e56/crawl4ai-0.9.1.tar.gz", hash = "sha256:d04251f13ba180107324bb7bbe12029a63d95cc50248f05085743739f38404fc", size = 575249, upload-time = "2026-07-08T14:29:15.247Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/18/61/fd08ea5870bb7d5b3e028b784fb2e18343cc20b9aabdd4771df35c1a1642/crawl4ai-0.9.1-py3-none-any.whl", hash = "sha256:e154c3219d0cd46b4e06771a725bf35e6c31b19a5c2981afbcdba4574bd0a9dc", size = 479911, upload-time = "2026-07-08T14:29:14.038Z" },
-]
-
 [[package]]
 name = "cryptography"
 version = "48.0.1"
@@ -838,15 +720,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c1/ea/53f2148663b321f21b5a606bd5f191517cf40b7072c0497d3c92c4a13b1e/executing-2.2.1-py2.py3-none-any.whl", hash = "sha256:760643d3452b4d777d295bb167ccc74c64a81df23fb5e08eff250c425a4b2017", size = 28317, upload-time = "2025-09-01T09:48:08.5Z" },
 ]
 
-[[package]]
-name = "fake-useragent"
-version = "2.2.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/41/43/948d10bf42735709edb5ae51e23297d034086f17fc7279fef385a7acb473/fake_useragent-2.2.0.tar.gz", hash = "sha256:4e6ab6571e40cc086d788523cf9e018f618d07f9050f822ff409a4dfe17c16b2", size = 158898, upload-time = "2025-04-14T15:32:19.238Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/51/37/b3ea9cd5558ff4cb51957caca2193981c6b0ff30bd0d2630ac62505d99d0/fake_useragent-2.2.0-py3-none-any.whl", hash = "sha256:67f35ca4d847b0d298187443aaf020413746e56acd985a611908c73dba2daa24", size = 161695, upload-time = "2025-04-14T15:32:17.732Z" },
-]
-
 [[package]]
 name = "fast-ebook"
 version = "0.2.0"
@@ -913,36 +786,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4f/67/684fa2d2de1e7504549d4ca457b4f854ccec3cd3be03bd86b33b599fbf58/fastmcp-3.2.0-py3-none-any.whl", hash = "sha256:e71aba3df16f86f546a4a9e513261d3233bcc92bef0dfa647bac3fa33623f681", size = 705550, upload-time = "2026-03-30T20:25:35.499Z" },
 ]
 
-[[package]]
-name = "fastuuid"
-version = "0.14.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c3/7d/d9daedf0f2ebcacd20d599928f8913e9d2aea1d56d2d355a93bfa2b611d7/fastuuid-0.14.0.tar.gz", hash = "sha256:178947fc2f995b38497a74172adee64fdeb8b7ec18f2a5934d037641ba265d26", size = 18232, upload-time = "2025-10-19T22:19:22.402Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/98/f3/12481bda4e5b6d3e698fbf525df4443cc7dce746f246b86b6fcb2fba1844/fastuuid-0.14.0-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:73946cb950c8caf65127d4e9a325e2b6be0442a224fd51ba3b6ac44e1912ce34", size = 516386, upload-time = "2025-10-19T22:42:40.176Z" },
-    { url = "https://files.pythonhosted.org/packages/59/19/2fc58a1446e4d72b655648eb0879b04e88ed6fa70d474efcf550f640f6ec/fastuuid-0.14.0-cp311-cp311-macosx_10_12_x86_64.whl", hash = "sha256:12ac85024637586a5b69645e7ed986f7535106ed3013640a393a03e461740cb7", size = 264569, upload-time = "2025-10-19T22:25:50.977Z" },
-    { url = "https://files.pythonhosted.org/packages/78/29/3c74756e5b02c40cfcc8b1d8b5bac4edbd532b55917a6bcc9113550e99d1/fastuuid-0.14.0-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:05a8dde1f395e0c9b4be515b7a521403d1e8349443e7641761af07c7ad1624b1", size = 254366, upload-time = "2025-10-19T22:29:49.166Z" },
-    { url = "https://files.pythonhosted.org/packages/52/96/d761da3fccfa84f0f353ce6e3eb8b7f76b3aa21fd25e1b00a19f9c80a063/fastuuid-0.14.0-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:09378a05020e3e4883dfdab438926f31fea15fd17604908f3d39cbeb22a0b4dc", size = 278978, upload-time = "2025-10-19T22:35:41.306Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/c2/f84c90167cc7765cb82b3ff7808057608b21c14a38531845d933a4637307/fastuuid-0.14.0-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:bbb0c4b15d66b435d2538f3827f05e44e2baafcc003dd7d8472dc67807ab8fd8", size = 279692, upload-time = "2025-10-19T22:25:36.997Z" },
-    { url = "https://files.pythonhosted.org/packages/af/7b/4bacd03897b88c12348e7bd77943bac32ccf80ff98100598fcff74f75f2e/fastuuid-0.14.0-cp311-cp311-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:cd5a7f648d4365b41dbf0e38fe8da4884e57bed4e77c83598e076ac0c93995e7", size = 303384, upload-time = "2025-10-19T22:29:46.578Z" },
-    { url = "https://files.pythonhosted.org/packages/c0/a2/584f2c29641df8bd810d00c1f21d408c12e9ad0c0dafdb8b7b29e5ddf787/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_aarch64.whl", hash = "sha256:c0a94245afae4d7af8c43b3159d5e3934c53f47140be0be624b96acd672ceb73", size = 460921, upload-time = "2025-10-19T22:36:42.006Z" },
-    { url = "https://files.pythonhosted.org/packages/24/68/c6b77443bb7764c760e211002c8638c0c7cce11cb584927e723215ba1398/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_i686.whl", hash = "sha256:2b29e23c97e77c3a9514d70ce343571e469098ac7f5a269320a0f0b3e193ab36", size = 480575, upload-time = "2025-10-19T22:28:18.975Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/87/93f553111b33f9bb83145be12868c3c475bf8ea87c107063d01377cc0e8e/fastuuid-0.14.0-cp311-cp311-musllinux_1_1_x86_64.whl", hash = "sha256:1e690d48f923c253f28151b3a6b4e335f2b06bf669c68a02665bc150b7839e94", size = 452317, upload-time = "2025-10-19T22:25:32.75Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/8c/a04d486ca55b5abb7eaa65b39df8d891b7b1635b22db2163734dc273579a/fastuuid-0.14.0-cp311-cp311-win32.whl", hash = "sha256:a6f46790d59ab38c6aa0e35c681c0484b50dc0acf9e2679c005d61e019313c24", size = 154804, upload-time = "2025-10-19T22:24:15.615Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/b2/2d40bf00820de94b9280366a122cbaa60090c8cf59e89ac3938cf5d75895/fastuuid-0.14.0-cp311-cp311-win_amd64.whl", hash = "sha256:e150eab56c95dc9e3fefc234a0eedb342fac433dacc273cd4d150a5b0871e1fa", size = 156099, upload-time = "2025-10-19T22:24:31.646Z" },
-    { url = "https://files.pythonhosted.org/packages/02/a2/e78fcc5df65467f0d207661b7ef86c5b7ac62eea337c0c0fcedbeee6fb13/fastuuid-0.14.0-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:77e94728324b63660ebf8adb27055e92d2e4611645bf12ed9d88d30486471d0a", size = 510164, upload-time = "2025-10-19T22:31:45.635Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/b3/c846f933f22f581f558ee63f81f29fa924acd971ce903dab1a9b6701816e/fastuuid-0.14.0-cp312-cp312-macosx_10_12_x86_64.whl", hash = "sha256:caa1f14d2102cb8d353096bc6ef6c13b2c81f347e6ab9d6fbd48b9dea41c153d", size = 261837, upload-time = "2025-10-19T22:38:38.53Z" },
-    { url = "https://files.pythonhosted.org/packages/54/ea/682551030f8c4fa9a769d9825570ad28c0c71e30cf34020b85c1f7ee7382/fastuuid-0.14.0-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:d23ef06f9e67163be38cece704170486715b177f6baae338110983f99a72c070", size = 251370, upload-time = "2025-10-19T22:40:26.07Z" },
-    { url = "https://files.pythonhosted.org/packages/14/dd/5927f0a523d8e6a76b70968e6004966ee7df30322f5fc9b6cdfb0276646a/fastuuid-0.14.0-cp312-cp312-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:0c9ec605ace243b6dbe3bd27ebdd5d33b00d8d1d3f580b39fdd15cd96fd71796", size = 277766, upload-time = "2025-10-19T22:37:23.779Z" },
-    { url = "https://files.pythonhosted.org/packages/16/6e/c0fb547eef61293153348f12e0f75a06abb322664b34a1573a7760501336/fastuuid-0.14.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:808527f2407f58a76c916d6aa15d58692a4a019fdf8d4c32ac7ff303b7d7af09", size = 278105, upload-time = "2025-10-19T22:26:56.821Z" },
-    { url = "https://files.pythonhosted.org/packages/2d/b1/b9c75e03b768f61cf2e84ee193dc18601aeaf89a4684b20f2f0e9f52b62c/fastuuid-0.14.0-cp312-cp312-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:2fb3c0d7fef6674bbeacdd6dbd386924a7b60b26de849266d1ff6602937675c8", size = 301564, upload-time = "2025-10-19T22:30:31.604Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/fa/f7395fdac07c7a54f18f801744573707321ca0cee082e638e36452355a9d/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_aarch64.whl", hash = "sha256:ab3f5d36e4393e628a4df337c2c039069344db5f4b9d2a3c9cea48284f1dd741", size = 459659, upload-time = "2025-10-19T22:31:32.341Z" },
-    { url = "https://files.pythonhosted.org/packages/66/49/c9fd06a4a0b1f0f048aacb6599e7d96e5d6bc6fa680ed0d46bf111929d1b/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_i686.whl", hash = "sha256:b9a0ca4f03b7e0b01425281ffd44e99d360e15c895f1907ca105854ed85e2057", size = 478430, upload-time = "2025-10-19T22:26:22.962Z" },
-    { url = "https://files.pythonhosted.org/packages/be/9c/909e8c95b494e8e140e8be6165d5fc3f61fdc46198c1554df7b3e1764471/fastuuid-0.14.0-cp312-cp312-musllinux_1_1_x86_64.whl", hash = "sha256:3acdf655684cc09e60fb7e4cf524e8f42ea760031945aa8086c7eae2eeeabeb8", size = 450894, upload-time = "2025-10-19T22:27:01.647Z" },
-    { url = "https://files.pythonhosted.org/packages/90/eb/d29d17521976e673c55ef7f210d4cdd72091a9ec6755d0fd4710d9b3c871/fastuuid-0.14.0-cp312-cp312-win32.whl", hash = "sha256:9579618be6280700ae36ac42c3efd157049fe4dd40ca49b021280481c78c3176", size = 154374, upload-time = "2025-10-19T22:29:19.879Z" },
-    { url = "https://files.pythonhosted.org/packages/cc/fc/f5c799a6ea6d877faec0472d0b27c079b47c86b1cdc577720a5386483b36/fastuuid-0.14.0-cp312-cp312-win_amd64.whl", hash = "sha256:d9e4332dc4ba054434a9594cbfaf7823b57993d7d8e7267831c3e059857cf397", size = 156550, upload-time = "2025-10-19T22:27:49.658Z" },
-]
-
 [[package]]
 name = "filelock"
 version = "3.20.3"
@@ -1068,34 +911,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/31/e5/384b1f383917b5f0ae92e28f47bc27b16e3d26cd9bacb25e9f8ecab3c8fe/google_genai-1.60.0-py3-none-any.whl", hash = "sha256:967338378ffecebec19a8ed90cf8797b26818bacbefd7846a9280beb1099f7f3", size = 719431, upload-time = "2026-01-21T22:17:28.086Z" },
 ]
 
-[[package]]
-name = "greenlet"
-version = "3.5.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/e2/f1/fbbfef6af0bad0548f09bc28948ea3c275b4edb19e17fc5ca9900a6a634d/greenlet-3.5.3.tar.gz", hash = "sha256:a61efc018fd3eb317eeca31aba90ee9e7f26f22884a79b6c6ec715bf71bb62f1", size = 200270, upload-time = "2026-06-26T19:28:24.832Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/51/58/5404031044f55afad7aad1aff8be3f22b1bed03e237cfeabbc7e5c8cfde0/greenlet-3.5.3-cp311-cp311-macosx_11_0_universal2.whl", hash = "sha256:aca9b4ce85b152b5524ef7d88170efdff80dc0032aa8b75f9aaf7f3479ea95b4", size = 287424, upload-time = "2026-06-26T18:20:31.469Z" },
-    { url = "https://files.pythonhosted.org/packages/b4/bf/1c65e9b94a54d547068fa5b5a8a06f221f3316b48908e08668d29c77cb50/greenlet-3.5.3-cp311-cp311-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0f71be4920368fe1fabeeaa53d1e3548337e2b223d9565f8ad5e392a75ba23fc", size = 606523, upload-time = "2026-06-26T19:07:08.859Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/c7/b66baacc95775ad511287acb0137b95574a9ce5491902372b7564799d790/greenlet-3.5.3-cp311-cp311-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:4d77e67f65f98449e3fb83f795b5d0a8437aead2f874ca89c96576caf4be3af6", size = 618315, upload-time = "2026-06-26T19:10:06.055Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/a0/68afd1ebad40db87dac0a28ffa120726b98bf9c7c40c481b0f63c105d298/greenlet-3.5.3-cp311-cp311-manylinux_2_24_s390x.manylinux_2_28_s390x.whl", hash = "sha256:e18619ba655ac05d78d80fc83cac4ba892bd6927b99e3b8237aee861aaacc8bb", size = 626155, upload-time = "2026-06-26T19:24:14.44Z" },
-    { url = "https://files.pythonhosted.org/packages/78/2b/28ed29463522fdbe4c15b1f63922041626a7478316b34ab4adda3f0a4aba/greenlet-3.5.3-cp311-cp311-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:8540f1e6205bd13ca0ce685581037219ca54a1b41a0a15d228c6c9b8ad5903d7", size = 617381, upload-time = "2026-06-26T18:32:16.077Z" },
-    { url = "https://files.pythonhosted.org/packages/07/7f/e327d912239ec4b3b49999e3967389bcf1ee8722b9ee9194d2752ecd558a/greenlet-3.5.3-cp311-cp311-manylinux_2_39_riscv64.whl", hash = "sha256:d27c0c653a60d9535f690226474a5cc1036a8b0d7b57504d1c4f89c44a07a80c", size = 421083, upload-time = "2026-06-26T19:25:35.804Z" },
-    { url = "https://files.pythonhosted.org/packages/2a/7b/ad04e9d1337fc04965dc9fc616b6a72cb65a24b800a014c011ec812f5489/greenlet-3.5.3-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:7ef56fe650f50575bf843acde967b9c567687f3c22340941a899b7bc56e956a8", size = 1577771, upload-time = "2026-06-26T19:09:01.537Z" },
-    { url = "https://files.pythonhosted.org/packages/d8/33/6c87ab7ba663f70ca21f3022aad1ffe56d3f3e0521e836c2415e13abcc3c/greenlet-3.5.3-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:5121af01cf911e70056c00d4b46d5e9b5d1415550038573d744138bacb59e6b8", size = 1644048, upload-time = "2026-06-26T18:31:42.996Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/35/f0d8ee998b422cf8693b270f098e55d8d4ec8006b061b333f54f177d28d9/greenlet-3.5.3-cp311-cp311-win_amd64.whl", hash = "sha256:0f41e4a05a3c0cb31b17023eff28dd111e1d16bf7d7d00406cd7df23f31398a7", size = 239137, upload-time = "2026-06-26T18:23:21.664Z" },
-    { url = "https://files.pythonhosted.org/packages/fb/96/b9820295576ef18c9edc404f10e260ae7215ceaf3781a54b720ed2627862/greenlet-3.5.3-cp311-cp311-win_arm64.whl", hash = "sha256:ec6f1af59f6b5f3fc9678e2ea062d8377d22ac644f7844cb7a292910cf12ff44", size = 237630, upload-time = "2026-06-26T18:24:00.281Z" },
-    { url = "https://files.pythonhosted.org/packages/5d/6e/4c37d51a2b7f82d2ff11bb6b5f7d766d9a011726624af255e843727627a3/greenlet-3.5.3-cp312-cp312-macosx_11_0_universal2.whl", hash = "sha256:719757059f5a53fd0dde23f78cffeafcdd97b21c850ddb7ca684a3c1a1f122e2", size = 288685, upload-time = "2026-06-26T18:22:08.977Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/73/815dd90131c1b71ebdf53dbc7c276cafec2a1173b97559f97aba72724a87/greenlet-3.5.3-cp312-cp312-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:efa9f765dd09f9d0cdac651ffdf631ee59ec5dc6ee7a73e0c012ba9c52fbdf5b", size = 604761, upload-time = "2026-06-26T19:07:10.114Z" },
-    { url = "https://files.pythonhosted.org/packages/9f/57/079cfe76bcef36b153b25607ee91c6fcb58f17f8b23c86bbbeabe0c88d72/greenlet-3.5.3-cp312-cp312-manylinux_2_24_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:7faba15ac005376e02a0384504e0243be3370ce010296a44a820feb342b505ab", size = 617044, upload-time = "2026-06-26T19:10:07.25Z" },
-    { url = "https://files.pythonhosted.org/packages/fb/fb/d97dc261209c80744b7c8132693a30d70ec6e7315e632cb0a10b3fec94dd/greenlet-3.5.3-cp312-cp312-manylinux_2_24_s390x.manylinux_2_28_s390x.whl", hash = "sha256:5795cd1101371140551c645f2d408b8d3c01a5a29cf8a9bce6e759c983682d23", size = 622351, upload-time = "2026-06-26T19:24:16.32Z" },
-    { url = "https://files.pythonhosted.org/packages/37/87/b4d095775a3fb1bcafbb483fc206b27ebb785724c83051447737085dc54e/greenlet-3.5.3-cp312-cp312-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:87142215824be6ac05e2e8e2786eec307ccbc27c36723c3881959df654af6861", size = 614244, upload-time = "2026-06-26T18:32:17.594Z" },
-    { url = "https://files.pythonhosted.org/packages/8e/ac/e5fee13cbbd0e8de312d9a146584b8a51891c68847330ef9dc8b5109d23f/greenlet-3.5.3-cp312-cp312-manylinux_2_39_riscv64.whl", hash = "sha256:af4923b3096e26a36d7e9cf24ab88083a20f97d191e3b97f253731ce9b41b28c", size = 425395, upload-time = "2026-06-26T19:25:37.144Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/70/7559b609683650fa2b95b8ab84b4ab0b26556a635d19675e12aa832d826d/greenlet-3.5.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:215275b1b49320987352e6c1b054acca0064f965a2c66992bed9a6f7d913f149", size = 1574210, upload-time = "2026-06-26T19:09:03.077Z" },
-    { url = "https://files.pythonhosted.org/packages/ae/73/be55392074c60fc37655ca40fa6022457bfbf6718e9e342a7b0b41f96dd2/greenlet-3.5.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6b1b0eed82364b0e32c4ea0f221452d33e6bb17ae094d9f72aed9851812747ea", size = 1638627, upload-time = "2026-06-26T18:31:44.748Z" },
-    { url = "https://files.pythonhosted.org/packages/14/40/c57489acf8e37d74e2913d4eff63aa0dba17acccc4bdeef874dde2dbbec9/greenlet-3.5.3-cp312-cp312-win_amd64.whl", hash = "sha256:cde8adafa2365676f74a979744629589999093bc86e2484214f58e61df08902c", size = 239882, upload-time = "2026-06-26T18:23:27.518Z" },
-    { url = "https://files.pythonhosted.org/packages/71/fd/6fea0e3d6600f785069481ee637e09378dd4118acdfd38ad88ae2db31c98/greenlet-3.5.3-cp312-cp312-win_arm64.whl", hash = "sha256:c4e7b79d83805475f0102008843f6eb45fd3bb0b2e88c774adab5fbaab27117d", size = 238211, upload-time = "2026-06-26T18:22:37.671Z" },
-]
-
 [[package]]
 name = "groq"
 version = "0.37.1"
@@ -1122,19 +937,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/04/4b/29cac41a4d98d144bf5f6d33995617b185d14b22401f75ca86f384e87ff1/h11-0.16.0-py3-none-any.whl", hash = "sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86", size = 37515, upload-time = "2025-04-24T03:35:24.344Z" },
 ]
 
-[[package]]
-name = "h2"
-version = "4.3.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "hpack" },
-    { name = "hyperframe" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/1d/17/afa56379f94ad0fe8defd37d6eb3f89a25404ffc71d4d848893d270325fc/h2-4.3.0.tar.gz", hash = "sha256:6c59efe4323fa18b47a632221a1888bd7fde6249819beda254aeca909f221bf1", size = 2152026, upload-time = "2025-08-23T18:12:19.778Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/69/b2/119f6e6dcbd96f9069ce9a2665e0146588dc9f88f29549711853645e736a/h2-4.3.0-py3-none-any.whl", hash = "sha256:c438f029a25f7945c69e0ccf0fb951dc3f73a5f6412981daee861431b70e2bdd", size = 61779, upload-time = "2025-08-23T18:12:17.779Z" },
-]
-
 [[package]]
 name = "hf-xet"
 version = "1.2.0"
@@ -1150,15 +952,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/44/870d44b30e1dcfb6a65932e3e1506c103a8a5aea9103c337e7a53180322c/hf_xet-1.2.0-cp37-abi3-win_amd64.whl", hash = "sha256:e6584a52253f72c9f52f9e549d5895ca7a471608495c4ecaa6cc73dba2b24d69", size = 2905735, upload-time = "2025-10-24T19:04:35.928Z" },
 ]
 
-[[package]]
-name = "hpack"
-version = "4.2.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/26/5b/fcabf6028144a8723726318b07a32c2f3314acdff6265743cf08a344b18e/hpack-4.2.0.tar.gz", hash = "sha256:0895cfa3b5531fc65fe439c05eb65144f123bf7a394fcaa56aa423548d8e45c0", size = 51300, upload-time = "2026-06-23T18:34:46.667Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/71/b4/4a9fcfb2aef6ba44d9073ecd301443aa00b3dac95de5619f2a7de7ec8a91/hpack-4.2.0-py3-none-any.whl", hash = "sha256:858ac0b02280fa582b5080d68db0899c62a80375e0e5413a74970c5e518b6986", size = 34246, upload-time = "2026-06-23T18:34:45.472Z" },
-]
-
 [[package]]
 name = "httpcore"
 version = "1.0.9"
@@ -1188,9 +981,6 @@ wheels = [
 ]
 
 [package.optional-dependencies]
-http2 = [
-    { name = "h2" },
-]
 socks = [
     { name = "socksio" },
 ]
@@ -1234,15 +1024,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c5/7b/bca5613a0c3b542420cf92bd5e5fb8ebd5435ce1011a091f66bb7693285e/humanize-4.15.0-py3-none-any.whl", hash = "sha256:b1186eb9f5a9749cd9cb8565aee77919dd7c8d076161cf44d70e59e3301e1769", size = 132203, upload-time = "2025-12-20T20:16:11.67Z" },
 ]
 
-[[package]]
-name = "hyperframe"
-version = "6.1.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/02/e7/94f8232d4a74cc99514c13a9f995811485a6903d48e5d952771ef6322e30/hyperframe-6.1.0.tar.gz", hash = "sha256:f630908a00854a7adeabd6382b43923a4c4cd4b821fcb527e6ab9e15382a3b08", size = 26566, upload-time = "2025-01-22T21:41:49.302Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/48/30/47d0bf6072f7252e6521f3447ccfa40b421b6824517f82854703d0f5a98b/hyperframe-6.1.0-py3-none-any.whl", hash = "sha256:b03380493a519fce58ea5af42e4a42317bf9bd425596f7a0835ffce80f1a42e5", size = 13007, upload-time = "2025-01-22T21:41:47.295Z" },
-]
-
 [[package]]
 name = "identify"
 version = "2.6.16"
@@ -1494,15 +1275,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/2f/9c/6753e6522b8d0ef07d3a3d239426669e984fb0eba15a315cdbc1253904e4/jiter-0.12.0-graalpy312-graalpy250_312_native-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:c24e864cb30ab82311c6425655b0cdab0a98c5d973b065c66a3f020740c2324c", size = 346110, upload-time = "2025-11-09T20:49:21.817Z" },
 ]
 
-[[package]]
-name = "joblib"
-version = "1.5.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/41/f2/d34e8b3a08a9cc79a50b2208a93dce981fe615b64d5a4d4abee421d898df/joblib-1.5.3.tar.gz", hash = "sha256:8561a3269e6801106863fd0d6d84bb737be9e7631e33aaed3fb9ce5953688da3", size = 331603, upload-time = "2025-12-15T08:41:46.427Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/7b/91/984aca2ec129e2757d1e4e3c81c3fcda9d0f85b74670a094cc443d9ee949/joblib-1.5.3-py3-none-any.whl", hash = "sha256:5fc3c5039fc5ca8c0276333a188bbd59d6b7ab37fe6632daa76bc7f9ec18e713", size = 309071, upload-time = "2025-12-15T08:41:44.973Z" },
-]
-
 [[package]]
 name = "jsonpatch"
 version = "1.33"
@@ -1877,15 +1649,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c6/64/d411be633d1c976955a09f6b3c58fbe70592d1370d262d171f7daf7e3793/langsmith-0.9.0-py3-none-any.whl", hash = "sha256:5eeccc36ff956946df8510a2b3b5a87d36c44f11bfb2e5205e9cf03d7b65ec9c", size = 578496, upload-time = "2026-06-22T15:37:16.42Z" },
 ]
 
-[[package]]
-name = "lark"
-version = "1.3.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/da/34/28fff3ab31ccff1fd4f6c7c7b0ceb2b6968d8ea4950663eadcb5720591a0/lark-1.3.1.tar.gz", hash = "sha256:b426a7a6d6d53189d318f2b6236ab5d6429eaf09259f1ca33eb716eed10d2905", size = 382732, upload-time = "2025-10-27T18:25:56.653Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/82/3d/14ce75ef66813643812f3093ab17e46d3a206942ce7376d31ec2d36229e7/lark-1.3.1-py3-none-any.whl", hash = "sha256:c629b661023a014c37da873b4ff58a817398d12635d3bbb2c5a03be7fe5d1e12", size = 113151, upload-time = "2025-10-27T18:25:54.882Z" },
-]
-
 [[package]]
 name = "librt"
 version = "0.7.8"
@@ -2212,31 +1975,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a0/c4/c2971a3ba4c6103a3d10c4b0f24f461ddc027f0f09763220cf35ca1401b3/nest_asyncio-1.6.0-py3-none-any.whl", hash = "sha256:87af6efd6b5e897c81050477ef65c62e2b2f35d51703cae01aff2905b1852e1c", size = 5195, upload-time = "2024-01-21T14:25:17.223Z" },
 ]
 
-[[package]]
-name = "networkx"
-version = "3.6.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/6a/51/63fe664f3908c97be9d2e4f1158eb633317598cfa6e1fc14af5383f17512/networkx-3.6.1.tar.gz", hash = "sha256:26b7c357accc0c8cde558ad486283728b65b6a95d85ee1cd66bafab4c8168509", size = 2517025, upload-time = "2025-12-08T17:02:39.908Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9e/c9/b2622292ea83fbb4ec318f5b9ab867d0a28ab43c5717bb85b0a5f6b3b0a4/networkx-3.6.1-py3-none-any.whl", hash = "sha256:d47fbf302e7d9cbbb9e2555a0d267983d2aa476bac30e90dfbe5669bd57f3762", size = 2068504, upload-time = "2025-12-08T17:02:38.159Z" },
-]
-
-[[package]]
-name = "nltk"
-version = "3.10.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "click" },
-    { name = "defusedxml" },
-    { name = "joblib" },
-    { name = "regex" },
-    { name = "tqdm" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/96/02/df4f105b28a7c16b0e41423bc09cf0f1b8a305df4ef0b10ca74a2e4c648c/nltk-3.10.0.tar.gz", hash = "sha256:4fbac1d98203cbcd1b5d94a2877fb822300072d80604a5e7fae49d2c5f84e8c1", size = 3089244, upload-time = "2026-07-08T02:39:13.562Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/6e/89/a0b0f35e2820d6a99d75ea1c11977ee6d5c9e6658eceb45b0c7620881faa/nltk-3.10.0-py3-none-any.whl", hash = "sha256:54ff84d4916d3ef127e8953bee0023f6a6b320b75d634a19e06ef056d3d244bf", size = 1716144, upload-time = "2026-07-08T02:39:09.753Z" },
-]
-
 [[package]]
 name = "nodeenv"
 version = "1.10.0"
@@ -2319,7 +2057,7 @@ source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },
     { name = "babel" },
-    { name = "content-core", extra = ["crawl4ai"] },
+    { name = "content-core" },
     { name = "esperanto" },
     { name = "fastapi" },
     { name = "httpx", extra = ["socks"] },
@@ -2366,7 +2104,7 @@ notebooks = [
 requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
-    { name = "content-core", extras = ["crawl4ai"], specifier = ">=2.0.4,<3" },
+    { name = "content-core", specifier = ">=2.0.4,<3" },
     { name = "esperanto", specifier = ">=2.20.0,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
@@ -2576,25 +2314,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/16/32/f8e3c85d1d5250232a5d3477a2a28cc291968ff175caeadaf3cc19ce0e4a/parso-0.8.5-py2.py3-none-any.whl", hash = "sha256:646204b5ee239c396d040b90f9e272e9a8017c630092bf59980beb62fd033887", size = 106668, upload-time = "2025-08-23T15:15:25.663Z" },
 ]
 
-[[package]]
-name = "patchright"
-version = "1.61.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "greenlet" },
-    { name = "pyee" },
-]
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/79/42/a76e2ea17dd4feccbf5ef6df017fb2e67f4b72a6f559f59d9aad1197f83a/patchright-1.61.2-py3-none-macosx_10_13_x86_64.whl", hash = "sha256:43ae10cd2a3e46b222179a120ab39ba88f801f3a42aa41cab45fac9928f2103d", size = 43727572, upload-time = "2026-07-05T21:17:52.382Z" },
-    { url = "https://files.pythonhosted.org/packages/57/e7/1ff89853c9aeaf26cd20559f401375ec71a40e4041cf7ace03d41a741f06/patchright-1.61.2-py3-none-macosx_11_0_arm64.whl", hash = "sha256:a3da24d7890631255c7bef467b94ffe7f7bfa36f96fc72c10d5787d3cb396873", size = 42512921, upload-time = "2026-07-05T21:17:55.657Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/d0/d730536a7fc43c3aaf2781518595ca71ffa1fc2f24e580c0d0cf04e00eca/patchright-1.61.2-py3-none-macosx_11_0_universal2.whl", hash = "sha256:edef852aa7d28791fa2d3f7ce135edfea2ce07a2bc5e0a74fb2dfe269af62223", size = 43727573, upload-time = "2026-07-05T21:17:59.121Z" },
-    { url = "https://files.pythonhosted.org/packages/a2/b5/c76dcda275cb0d9651321e343f3268609ae24cef196bff56751754ffba16/patchright-1.61.2-py3-none-manylinux1_x86_64.whl", hash = "sha256:545bdf2c0bb5f9ad78ab315e91c8c2990cc6a702e7f18650b71fe1071049b5c1", size = 47729338, upload-time = "2026-07-05T21:18:02.608Z" },
-    { url = "https://files.pythonhosted.org/packages/19/ef/5de6feaedf47a6ba8efb9e8c4f8a42bad29cc59c35bbd088b1729a36b271/patchright-1.61.2-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1824da30cf6560749bc1bb4a7f002fec325d5b709090dd7c8c1b643899331cee", size = 47426969, upload-time = "2026-07-05T21:18:06.88Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/6e/ce2c5d03a4c785ac8f3e0180bbf83ef85149cf41fdfa41c09bd8cbcfd945/patchright-1.61.2-py3-none-win32.whl", hash = "sha256:a5aaf4cec2bd38714f2447f84bcdfe7dcb592a16e9616bf6d2d872066d1c78af", size = 38155048, upload-time = "2026-07-05T21:18:09.938Z" },
-    { url = "https://files.pythonhosted.org/packages/46/c8/fceb57b9d32ed078f53fc6a757c6e4b54cb117f59412938252a3359105e5/patchright-1.61.2-py3-none-win_amd64.whl", hash = "sha256:506bca9b72e609fd8fee35e2a3ad26e5d92e25337002f5c2cdad53d5cacb0b67", size = 38155052, upload-time = "2026-07-05T21:18:13.051Z" },
-    { url = "https://files.pythonhosted.org/packages/33/96/67a791c6b7cd76424b44d356beaf414ab97c3aef2d42fad4641e7905b41d/patchright-1.61.2-py3-none-win_arm64.whl", hash = "sha256:3dee1e2daada9f98653763831f688d39c924e0cf0eeb988e8047b703766cee73", size = 34268624, upload-time = "2026-07-05T21:18:15.966Z" },
-]
-
 [[package]]
 name = "pathable"
 version = "0.4.4"
@@ -2701,37 +2420,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/28/3bfe2fa5a7b9c46fe7e13c97bda14c895fb10fa2ebf1d0abb90e0cea7ee1/platformdirs-4.5.1-py3-none-any.whl", hash = "sha256:d03afa3963c806a9bed9d5125c8f4cb2fdaf74a55ab60e5d59b3fde758104d31", size = 18731, upload-time = "2025-12-05T13:52:56.823Z" },
 ]
 
-[[package]]
-name = "playwright"
-version = "1.61.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "greenlet" },
-    { name = "pyee" },
-]
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/44/ee/31e4e0db36588b817a10b299a0285082545fde7d36543c2abe498bb3d61a/playwright-1.61.0-py3-none-macosx_10_13_x86_64.whl", hash = "sha256:ff138c3a604f69911e9d42fd036e55c2a171e5616edf04c1e7f60a2a285540b0", size = 43421877, upload-time = "2026-06-29T10:32:48.428Z" },
-    { url = "https://files.pythonhosted.org/packages/42/35/71395dd3ecc798965be4a3ef8c443217d4abca168e7cb34536304f9489e6/playwright-1.61.0-py3-none-macosx_11_0_arm64.whl", hash = "sha256:009588c2a7e499bc5a8b425b61fa65490968bbda9cd69e0cf2cff10f8304659a", size = 42205016, upload-time = "2026-06-29T10:32:52.104Z" },
-    { url = "https://files.pythonhosted.org/packages/f4/44/323164cf5cd1647bdefce76ffce27651aadb959d089b48f53ea40918276e/playwright-1.61.0-py3-none-macosx_11_0_universal2.whl", hash = "sha256:9f7de4536088d12037c13a52b7ea34b59270b78926bb56935070597ffac6b1af", size = 43421884, upload-time = "2026-06-29T10:32:55.773Z" },
-    { url = "https://files.pythonhosted.org/packages/ab/f8/a35bf179e4ba2522c1893635094a64e407572547bd61528820fc0abc87fe/playwright-1.61.0-py3-none-manylinux1_x86_64.whl", hash = "sha256:54f3b39f6eab832e33458c1dd7da0b5682aedab3b09ae731b5c59fa12fd2024e", size = 47421381, upload-time = "2026-06-29T10:32:59.903Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/eb/e3f922348ec17c315f98c463f72faa1181a1c3de0bfe31a8d2edf6561723/playwright-1.61.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:93454322ade8c11d5d6c211bfd91bdfb9ffb4810e3e026371bcbc4bec1b7ee4c", size = 47120545, upload-time = "2026-06-29T10:33:03.574Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/a6/5be4e52b40a9c0c8a073e7c5b0785c05cf5a9ea8f8a7b5b260e32d970342/playwright-1.61.0-py3-none-win32.whl", hash = "sha256:372d55a6f1248fa1dd47599686980cb8fb5bbe6fcda59eab793eb657c11d8a9b", size = 37844841, upload-time = "2026-06-29T10:33:07.361Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/fd/2b78036e5fbe9d5f5645bbe08a1eac7160c51243c0093963edbcf67c35d9/playwright-1.61.0-py3-none-win_amd64.whl", hash = "sha256:35c6cc4589a5d00964a59d7b3e59641e0aac0c02f15479a7af77d20f6bc79597", size = 37844846, upload-time = "2026-06-29T10:33:10.637Z" },
-    { url = "https://files.pythonhosted.org/packages/27/0d/1b0f3c4ee4eb0514bc805b5c2f9a223e5b6de4f11a926f5235d51d0fc81b/playwright-1.61.0-py3-none-win_arm64.whl", hash = "sha256:e9fcbffcf557a8620fdedd92491eb59a32d18e23d6f3b4f6214b952be324fe51", size = 33955127, upload-time = "2026-06-29T10:33:14.008Z" },
-]
-
-[[package]]
-name = "playwright-stealth"
-version = "2.0.3"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "playwright" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a4/db/6ade5d539c7d151b9defc78fafa8b65aa52352617d0e7699b47008bd801f/playwright_stealth-2.0.3.tar.gz", hash = "sha256:1d8e488fbdd8f190f1269ea8cf5d57d14df3a9f1af1001c41ee3588b2aac3133", size = 25751, upload-time = "2026-04-04T02:50:33.88Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b5/10/607c409712c02a26c4cb794820514cb7fdaaeac15fb05bed917fb8a354b3/playwright_stealth-2.0.3-py3-none-any.whl", hash = "sha256:1887ade423ab7ff8ae16d363a30a38de0b5817e1e4a29d47b74bf3a0e3dbfcb4", size = 34385, upload-time = "2026-04-04T02:50:35.246Z" },
-]
-
 [[package]]
 name = "pluggy"
 version = "1.6.0"
@@ -3041,18 +2729,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a6/53/d78dc063216e62fc55f6b2eebb447f6a4b0a59f55c8406376f76bf959b08/pydub-0.25.1-py2.py3-none-any.whl", hash = "sha256:65617e33033874b59d87db603aa1ed450633288aefead953b30bded59cb599a6", size = 32327, upload-time = "2021-03-10T02:09:53.503Z" },
 ]
 
-[[package]]
-name = "pyee"
-version = "13.0.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/8b/04/e7c1fe4dc78a6fdbfd6c337b1c3732ff543b8a397683ab38378447baa331/pyee-13.0.1.tar.gz", hash = "sha256:0b931f7c14535667ed4c7e0d531716368715e860b988770fc7eb8578d1f67fc8", size = 31655, upload-time = "2026-02-14T21:12:28.044Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/a0/c4/b4d4827c93ef43c01f599ef31453ccc1c132b353284fc6c87d535c233129/pyee-13.0.1-py3-none-any.whl", hash = "sha256:af2f8fede4171ef667dfded53f96e2ed0d6e6bd7ee3bb46437f77e3b57689228", size = 15659, upload-time = "2026-02-14T21:12:26.263Z" },
-]
-
 [[package]]
 name = "pygments"
 version = "2.20.0"
@@ -3076,19 +2752,6 @@ crypto = [
     { name = "cryptography" },
 ]
 
-[[package]]
-name = "pyopenssl"
-version = "26.2.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "cryptography" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/1a/51/27a5ad5f939d08f690a326ef9582cda7140555180db71695f6fb747d6a36/pyopenssl-26.2.0.tar.gz", hash = "sha256:8c6fcecd1183a7fc897548dfe388b0cdb7f37e018200d8409cf33959dbe35387", size = 182195, upload-time = "2026-05-04T23:06:09.72Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/73/b8/a0e2790ae249d6f38c9f66de7a211621a7ab2650217bcd04e1262f578a56/pyopenssl-26.2.0-py3-none-any.whl", hash = "sha256:4f9d971bc5298b8bc1fab282803da04bf000c755d4ad9d99b52de2569ca19a70", size = 55823, upload-time = "2026-05-04T23:06:08.395Z" },
-]
-
 [[package]]
 name = "pypdfium2"
 version = "5.11.0"
@@ -3326,18 +2989,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/01/1b/5dbe84eefc86f48473947e2f41711aded97eecef1231f4558f1f02713c12/pyzmq-27.1.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:c9f7f6e13dff2e44a6afeaf2cf54cee5929ad64afaf4d40b50f93c58fc687355", size = 544862, upload-time = "2025-09-08T23:09:56.509Z" },
 ]
 
-[[package]]
-name = "rank-bm25"
-version = "0.2.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "numpy" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/fc/0a/f9579384aa017d8b4c15613f86954b92a95a93d641cc849182467cf0bb3b/rank_bm25-0.2.2.tar.gz", hash = "sha256:096ccef76f8188563419aaf384a02f0ea459503fdf77901378d4fd9d87e5e51d", size = 8347, upload-time = "2022-02-16T12:10:52.196Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/2a/21/f691fb2613100a62b3fa91e9988c991e9ca5b89ea31c0d3152a3210344f9/rank_bm25-0.2.2-py3-none-any.whl", hash = "sha256:7bd4a95571adadfc271746fa146a4bcfd89c0cf731e49c3d1ad863290adbe8ae", size = 8584, upload-time = "2022-02-16T12:10:50.626Z" },
-]
-
 [[package]]
 name = "readability-lxml"
 version = "0.8.4.1"
@@ -3521,22 +3172,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/64/8d/0133e4eb4beed9e425d9a98ed6e081a55d195481b7632472be1af08d2f6b/rsa-4.9.1-py3-none-any.whl", hash = "sha256:68635866661c6836b8d39430f97a996acbd61bfa49406748ea243539fe239762", size = 34696, upload-time = "2025-04-16T09:51:17.142Z" },
 ]
 
-[[package]]
-name = "rtree"
-version = "1.4.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/95/09/7302695875a019514de9a5dd17b8320e7a19d6e7bc8f85dcfb79a4ce2da3/rtree-1.4.1.tar.gz", hash = "sha256:c6b1b3550881e57ebe530cc6cffefc87cd9bf49c30b37b894065a9f810875e46", size = 52425, upload-time = "2025-08-13T19:32:01.413Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/04/d9/108cd989a4c0954e60b3cdc86fd2826407702b5375f6dfdab2802e5fed98/rtree-1.4.1-py3-none-macosx_10_9_x86_64.whl", hash = "sha256:d672184298527522d4914d8ae53bf76982b86ca420b0acde9298a7a87d81d4a4", size = 468484, upload-time = "2025-08-13T19:31:50.593Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/cf/2710b6fd6b07ea0aef317b29f335790ba6adf06a28ac236078ed9bd8a91d/rtree-1.4.1-py3-none-macosx_11_0_arm64.whl", hash = "sha256:a7e48d805e12011c2cf739a29d6a60ae852fb1de9fc84220bbcef67e6e595d7d", size = 436325, upload-time = "2025-08-13T19:31:52.367Z" },
-    { url = "https://files.pythonhosted.org/packages/55/e1/4d075268a46e68db3cac51846eb6a3ab96ed481c585c5a1ad411b3c23aad/rtree-1.4.1-py3-none-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:efa8c4496e31e9ad58ff6c7df89abceac7022d906cb64a3e18e4fceae6b77f65", size = 459789, upload-time = "2025-08-13T19:31:53.926Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/75/e5d44be90525cd28503e7f836d077ae6663ec0687a13ba7810b4114b3668/rtree-1.4.1-py3-none-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:12de4578f1b3381a93a655846900be4e3d5f4cd5e306b8b00aa77c1121dc7e8c", size = 507644, upload-time = "2025-08-13T19:31:55.164Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/85/b8684f769a142163b52859a38a486493b05bafb4f2fb71d4f945de28ebf9/rtree-1.4.1-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:b558edda52eca3e6d1ee629042192c65e6b7f2c150d6d6cd207ce82f85be3967", size = 1454478, upload-time = "2025-08-13T19:31:56.808Z" },
-    { url = "https://files.pythonhosted.org/packages/e9/a4/c2292b95246b9165cc43a0c3757e80995d58bc9b43da5cb47ad6e3535213/rtree-1.4.1-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:f155bc8d6bac9dcd383481dee8c130947a4866db1d16cb6dff442329a038a0dc", size = 1555140, upload-time = "2025-08-13T19:31:58.031Z" },
-    { url = "https://files.pythonhosted.org/packages/74/25/5282c8270bfcd620d3e73beb35b40ac4ab00f0a898d98ebeb41ef0989ec8/rtree-1.4.1-py3-none-win_amd64.whl", hash = "sha256:efe125f416fd27150197ab8521158662943a40f87acab8028a1aac4ad667a489", size = 389358, upload-time = "2025-08-13T19:31:59.247Z" },
-    { url = "https://files.pythonhosted.org/packages/3f/50/0a9e7e7afe7339bd5e36911f0ceb15fed51945836ed803ae5afd661057fd/rtree-1.4.1-py3-none-win_arm64.whl", hash = "sha256:3d46f55729b28138e897ffef32f7ce93ac335cb67f9120125ad3742a220800f0", size = 355253, upload-time = "2025-08-13T19:32:00.296Z" },
-]
-
 [[package]]
 name = "ruff"
 version = "0.14.13"
@@ -3563,68 +3198,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/4d/e1/7348090988095e4e39560cfc2f7555b1b2a7357deba19167b600fdf5215d/ruff-0.14.13-py3-none-win_arm64.whl", hash = "sha256:7ab819e14f1ad9fe39f246cfcc435880ef7a9390d81a2b6ac7e01039083dd247", size = 13080224, upload-time = "2026-01-15T20:14:45.853Z" },
 ]
 
-[[package]]
-name = "scipy"
-version = "1.17.1"
-source = { registry = "https://pypi.org/simple" }
-resolution-markers = [
-    "python_full_version < '3.12' and sys_platform == 'win32'",
-    "python_full_version < '3.12' and sys_platform == 'emscripten'",
-    "python_full_version < '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
-]
-dependencies = [
-    { name = "numpy", marker = "python_full_version < '3.12'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/7a/97/5a3609c4f8d58b039179648e62dd220f89864f56f7357f5d4f45c29eb2cc/scipy-1.17.1.tar.gz", hash = "sha256:95d8e012d8cb8816c226aef832200b1d45109ed4464303e997c5b13122b297c0", size = 30573822, upload-time = "2026-02-23T00:26:24.851Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/df/75/b4ce781849931fef6fd529afa6b63711d5a733065722d0c3e2724af9e40a/scipy-1.17.1-cp311-cp311-macosx_10_14_x86_64.whl", hash = "sha256:1f95b894f13729334fb990162e911c9e5dc1ab390c58aa6cbecb389c5b5e28ec", size = 31613675, upload-time = "2026-02-23T00:16:00.13Z" },
-    { url = "https://files.pythonhosted.org/packages/f7/58/bccc2861b305abdd1b8663d6130c0b3d7cc22e8d86663edbc8401bfd40d4/scipy-1.17.1-cp311-cp311-macosx_12_0_arm64.whl", hash = "sha256:e18f12c6b0bc5a592ed23d3f7b891f68fd7f8241d69b7883769eb5d5dfb52696", size = 28162057, upload-time = "2026-02-23T00:16:09.456Z" },
-    { url = "https://files.pythonhosted.org/packages/6d/ee/18146b7757ed4976276b9c9819108adbc73c5aad636e5353e20746b73069/scipy-1.17.1-cp311-cp311-macosx_14_0_arm64.whl", hash = "sha256:a3472cfbca0a54177d0faa68f697d8ba4c80bbdc19908c3465556d9f7efce9ee", size = 20334032, upload-time = "2026-02-23T00:16:17.358Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/e6/cef1cf3557f0c54954198554a10016b6a03b2ec9e22a4e1df734936bd99c/scipy-1.17.1-cp311-cp311-macosx_14_0_x86_64.whl", hash = "sha256:766e0dc5a616d026a3a1cffa379af959671729083882f50307e18175797b3dfd", size = 22709533, upload-time = "2026-02-23T00:16:25.791Z" },
-    { url = "https://files.pythonhosted.org/packages/4d/60/8804678875fc59362b0fb759ab3ecce1f09c10a735680318ac30da8cd76b/scipy-1.17.1-cp311-cp311-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:744b2bf3640d907b79f3fd7874efe432d1cf171ee721243e350f55234b4cec4c", size = 33062057, upload-time = "2026-02-23T00:16:36.931Z" },
-    { url = "https://files.pythonhosted.org/packages/09/7d/af933f0f6e0767995b4e2d705a0665e454d1c19402aa7e895de3951ebb04/scipy-1.17.1-cp311-cp311-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:43af8d1f3bea642559019edfe64e9b11192a8978efbd1539d7bc2aaa23d92de4", size = 35349300, upload-time = "2026-02-23T00:16:49.108Z" },
-    { url = "https://files.pythonhosted.org/packages/b4/3d/7ccbbdcbb54c8fdc20d3b6930137c782a163fa626f0aef920349873421ba/scipy-1.17.1-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:cd96a1898c0a47be4520327e01f874acfd61fb48a9420f8aa9f6483412ffa444", size = 35127333, upload-time = "2026-02-23T00:17:01.293Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/19/f926cb11c42b15ba08e3a71e376d816ac08614f769b4f47e06c3580c836a/scipy-1.17.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:4eb6c25dd62ee8d5edf68a8e1c171dd71c292fdae95d8aeb3dd7d7de4c364082", size = 37741314, upload-time = "2026-02-23T00:17:12.576Z" },
-    { url = "https://files.pythonhosted.org/packages/95/da/0d1df507cf574b3f224ccc3d45244c9a1d732c81dcb26b1e8a766ae271a8/scipy-1.17.1-cp311-cp311-win_amd64.whl", hash = "sha256:d30e57c72013c2a4fe441c2fcb8e77b14e152ad48b5464858e07e2ad9fbfceff", size = 36607512, upload-time = "2026-02-23T00:17:23.424Z" },
-    { url = "https://files.pythonhosted.org/packages/68/7f/bdd79ceaad24b671543ffe0ef61ed8e659440eb683b66f033454dcee90eb/scipy-1.17.1-cp311-cp311-win_arm64.whl", hash = "sha256:9ecb4efb1cd6e8c4afea0daa91a87fbddbce1b99d2895d151596716c0b2e859d", size = 24599248, upload-time = "2026-02-23T00:17:34.561Z" },
-    { url = "https://files.pythonhosted.org/packages/35/48/b992b488d6f299dbe3f11a20b24d3dda3d46f1a635ede1c46b5b17a7b163/scipy-1.17.1-cp312-cp312-macosx_10_14_x86_64.whl", hash = "sha256:35c3a56d2ef83efc372eaec584314bd0ef2e2f0d2adb21c55e6ad5b344c0dcb8", size = 31610954, upload-time = "2026-02-23T00:17:49.855Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/02/cf107b01494c19dc100f1d0b7ac3cc08666e96ba2d64db7626066cee895e/scipy-1.17.1-cp312-cp312-macosx_12_0_arm64.whl", hash = "sha256:fcb310ddb270a06114bb64bbe53c94926b943f5b7f0842194d585c65eb4edd76", size = 28172662, upload-time = "2026-02-23T00:18:01.64Z" },
-    { url = "https://files.pythonhosted.org/packages/cf/a9/599c28631bad314d219cf9ffd40e985b24d603fc8a2f4ccc5ae8419a535b/scipy-1.17.1-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:cc90d2e9c7e5c7f1a482c9875007c095c3194b1cfedca3c2f3291cdc2bc7c086", size = 20344366, upload-time = "2026-02-23T00:18:12.015Z" },
-    { url = "https://files.pythonhosted.org/packages/35/f5/906eda513271c8deb5af284e5ef0206d17a96239af79f9fa0aebfe0e36b4/scipy-1.17.1-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:c80be5ede8f3f8eded4eff73cc99a25c388ce98e555b17d31da05287015ffa5b", size = 22704017, upload-time = "2026-02-23T00:18:21.502Z" },
-    { url = "https://files.pythonhosted.org/packages/da/34/16f10e3042d2f1d6b66e0428308ab52224b6a23049cb2f5c1756f713815f/scipy-1.17.1-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:e19ebea31758fac5893a2ac360fedd00116cbb7628e650842a6691ba7ca28a21", size = 32927842, upload-time = "2026-02-23T00:18:35.367Z" },
-    { url = "https://files.pythonhosted.org/packages/01/8e/1e35281b8ab6d5d72ebe9911edcdffa3f36b04ed9d51dec6dd140396e220/scipy-1.17.1-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:02ae3b274fde71c5e92ac4d54bc06c42d80e399fec704383dcd99b301df37458", size = 35235890, upload-time = "2026-02-23T00:18:49.188Z" },
-    { url = "https://files.pythonhosted.org/packages/c5/5c/9d7f4c88bea6e0d5a4f1bc0506a53a00e9fcb198de372bfe4d3652cef482/scipy-1.17.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:8a604bae87c6195d8b1045eddece0514d041604b14f2727bbc2b3020172045eb", size = 35003557, upload-time = "2026-02-23T00:18:54.74Z" },
-    { url = "https://files.pythonhosted.org/packages/65/94/7698add8f276dbab7a9de9fb6b0e02fc13ee61d51c7c3f85ac28b65e1239/scipy-1.17.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:f590cd684941912d10becc07325a3eeb77886fe981415660d9265c4c418d0bea", size = 37625856, upload-time = "2026-02-23T00:19:00.307Z" },
-    { url = "https://files.pythonhosted.org/packages/a2/84/dc08d77fbf3d87d3ee27f6a0c6dcce1de5829a64f2eae85a0ecc1f0daa73/scipy-1.17.1-cp312-cp312-win_amd64.whl", hash = "sha256:41b71f4a3a4cab9d366cd9065b288efc4d4f3c0b37a91a8e0947fb5bd7f31d87", size = 36549682, upload-time = "2026-02-23T00:19:07.67Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/98/fe9ae9ffb3b54b62559f52dedaebe204b408db8109a8c66fdd04869e6424/scipy-1.17.1-cp312-cp312-win_arm64.whl", hash = "sha256:f4115102802df98b2b0db3cce5cb9b92572633a1197c77b7553e5203f284a5b3", size = 24547340, upload-time = "2026-02-23T00:19:12.024Z" },
-]
-
-[[package]]
-name = "scipy"
-version = "1.18.0"
-source = { registry = "https://pypi.org/simple" }
-resolution-markers = [
-    "python_full_version >= '3.12' and sys_platform == 'win32'",
-    "python_full_version >= '3.12' and sys_platform == 'emscripten'",
-    "python_full_version >= '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
-]
-dependencies = [
-    { name = "numpy", marker = "python_full_version >= '3.12'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a7/25/c2700dfaf6442b4effaa91af24ebce5dc9d31bb4a69706313aae70d72cd0/scipy-1.18.0.tar.gz", hash = "sha256:67b2ad2ad54c72ca6d04975a9b2df8c3638c34ddd5b28738e94fc2b57929d378", size = 30774447, upload-time = "2026-06-19T15:01:43.456Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/6a/19/ca10ead60b0acc80b2b833c2c4a4f2ff753d0f58b811f70d911c7e94a25c/scipy-1.18.0-cp312-cp312-macosx_10_15_x86_64.whl", hash = "sha256:7bd21faaf5a1a3b2eff922d02db5f191b99a6518db9078a8fb23169f6d22259a", size = 31056519, upload-time = "2026-06-19T14:59:45.203Z" },
-    { url = "https://files.pythonhosted.org/packages/96/72/1e6442a00cd2924d361aa1b642ab6373ec35c6fabf311a760be9f76e0f13/scipy-1.18.0-cp312-cp312-macosx_12_0_arm64.whl", hash = "sha256:265915e79107de9f946b855e50d7470d5893ec3f54b342e1aa6201cbdcd8bb6b", size = 28681889, upload-time = "2026-06-19T14:59:48.103Z" },
-    { url = "https://files.pythonhosted.org/packages/9b/2d/11dd93d21e147a73ba22bd75c0b9208d3a2e0ec76d53170ce7d9029b1015/scipy-1.18.0-cp312-cp312-macosx_14_0_arm64.whl", hash = "sha256:9ab7b758be6940954a713ee466e2043e9f6e2ed965c1fce5c91039f4be3d90a9", size = 20423580, upload-time = "2026-06-19T14:59:50.665Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/01/93552f75e0d2a7dd115a45e59209c51e8d514daff02fc887d2623be06fe1/scipy-1.18.0-cp312-cp312-macosx_14_0_x86_64.whl", hash = "sha256:97b6cddaaee0a779ef6b5ca83c9604b27cc16b2b8fc22c142652df8793319fb8", size = 23054441, upload-time = "2026-06-19T14:59:53.564Z" },
-    { url = "https://files.pythonhosted.org/packages/3c/23/21f5e703643d66f21faa6b4c73195bfcad70c55efcb4f1ab327cd7c4101a/scipy-1.18.0-cp312-cp312-manylinux_2_27_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:52a96e21517c7292375c0e27dd796a811f03fcea5fd4d108fdfea8145dcf17ab", size = 33968720, upload-time = "2026-06-19T14:59:56.415Z" },
-    { url = "https://files.pythonhosted.org/packages/dd/aa/1b939f6c67ed68635bb538e6752d3dacc02f66535182e939a89581a44e9c/scipy-1.18.0-cp312-cp312-manylinux_2_27_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:1f55797419e16e7f30cf88ffb3113ce0467f00cfe3f70d5c281730b21769bfc2", size = 35287115, upload-time = "2026-06-19T14:59:59.411Z" },
-    { url = "https://files.pythonhosted.org/packages/b6/ff/eec46be7e9234208f801062b53e1983085eddebd693f6c9bfb03b459830d/scipy-1.18.0-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:ad033410e2e0672ffdc1042110cef20e1c46f8fd0616cee1d44d8d58fad8fc11", size = 35577989, upload-time = "2026-06-19T15:00:02.235Z" },
-    { url = "https://files.pythonhosted.org/packages/84/ca/210d4759c7210bb7d269437421959b39a33434e2776b60c5cb8a763bb30a/scipy-1.18.0-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:4a55985d54c769c872e64b7f4c8a81cc30ef700cc04296abbbf3705439c126de", size = 37421717, upload-time = "2026-06-19T15:00:05.102Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/54/9a9edb45345bd6744da5ddfb6628e5d5185920494c6a67ec45b6381004cb/scipy-1.18.0-cp312-cp312-win_amd64.whl", hash = "sha256:71ccc8faa2dd16ac310233203474a8b5cb67f10dedd54a3116d34943f4b19132", size = 36597428, upload-time = "2026-06-19T15:00:08.112Z" },
-    { url = "https://files.pythonhosted.org/packages/99/0e/33f32a2a58987e26aec0f7df252cbbad1e90ae77bdbc76f40dd4ed0cf0ea/scipy-1.18.0-cp312-cp312-win_arm64.whl", hash = "sha256:d88363fd9d8fbd3511bd273f1a49efb2a540773ddf92a91d57498ce7dd7f3e76", size = 24351481, upload-time = "2026-06-19T15:00:11.103Z" },
-]
-
 [[package]]
 name = "secretstorage"
 version = "3.5.0"
@@ -3638,33 +3211,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/b7/46/f5af3402b579fd5e11573ce652019a67074317e18c1935cc0b4ba9b35552/secretstorage-3.5.0-py3-none-any.whl", hash = "sha256:0ce65888c0725fcb2c5bc0fdb8e5438eece02c523557ea40ce0703c266248137", size = 15554, upload-time = "2025-11-23T19:02:51.545Z" },
 ]
 
-[[package]]
-name = "shapely"
-version = "2.1.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "numpy" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/4d/bc/0989043118a27cccb4e906a46b7565ce36ca7b57f5a18b78f4f1b0f72d9d/shapely-2.1.2.tar.gz", hash = "sha256:2ed4ecb28320a433db18a5bf029986aa8afcfd740745e78847e330d5d94922a9", size = 315489, upload-time = "2025-09-24T13:51:41.432Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/8f/8d/1ff672dea9ec6a7b5d422eb6d095ed886e2e523733329f75fdcb14ee1149/shapely-2.1.2-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:91121757b0a36c9aac3427a651a7e6567110a4a67c97edf04f8d55d4765f6618", size = 1820038, upload-time = "2025-09-24T13:50:15.628Z" },
-    { url = "https://files.pythonhosted.org/packages/4f/ce/28fab8c772ce5db23a0d86bf0adaee0c4c79d5ad1db766055fa3dab442e2/shapely-2.1.2-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:16a9c722ba774cf50b5d4541242b4cce05aafd44a015290c82ba8a16931ff63d", size = 1626039, upload-time = "2025-09-24T13:50:16.881Z" },
-    { url = "https://files.pythonhosted.org/packages/70/8b/868b7e3f4982f5006e9395c1e12343c66a8155c0374fdc07c0e6a1ab547d/shapely-2.1.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:cc4f7397459b12c0b196c9efe1f9d7e92463cbba142632b4cc6d8bbbbd3e2b09", size = 3001519, upload-time = "2025-09-24T13:50:18.606Z" },
-    { url = "https://files.pythonhosted.org/packages/13/02/58b0b8d9c17c93ab6340edd8b7308c0c5a5b81f94ce65705819b7416dba5/shapely-2.1.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:136ab87b17e733e22f0961504d05e77e7be8c9b5a8184f685b4a91a84efe3c26", size = 3110842, upload-time = "2025-09-24T13:50:21.77Z" },
-    { url = "https://files.pythonhosted.org/packages/af/61/8e389c97994d5f331dcffb25e2fa761aeedfb52b3ad9bcdd7b8671f4810a/shapely-2.1.2-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:16c5d0fc45d3aa0a69074979f4f1928ca2734fb2e0dde8af9611e134e46774e7", size = 4021316, upload-time = "2025-09-24T13:50:23.626Z" },
-    { url = "https://files.pythonhosted.org/packages/d3/d4/9b2a9fe6039f9e42ccf2cb3e84f219fd8364b0c3b8e7bbc857b5fbe9c14c/shapely-2.1.2-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:6ddc759f72b5b2b0f54a7e7cde44acef680a55019eb52ac63a7af2cf17cb9cd2", size = 4178586, upload-time = "2025-09-24T13:50:25.443Z" },
-    { url = "https://files.pythonhosted.org/packages/16/f6/9840f6963ed4decf76b08fd6d7fed14f8779fb7a62cb45c5617fa8ac6eab/shapely-2.1.2-cp311-cp311-win32.whl", hash = "sha256:2fa78b49485391224755a856ed3b3bd91c8455f6121fee0db0e71cefb07d0ef6", size = 1543961, upload-time = "2025-09-24T13:50:26.968Z" },
-    { url = "https://files.pythonhosted.org/packages/38/1e/3f8ea46353c2a33c1669eb7327f9665103aa3a8dfe7f2e4ef714c210b2c2/shapely-2.1.2-cp311-cp311-win_amd64.whl", hash = "sha256:c64d5c97b2f47e3cd9b712eaced3b061f2b71234b3fc263e0fcf7d889c6559dc", size = 1722856, upload-time = "2025-09-24T13:50:28.497Z" },
-    { url = "https://files.pythonhosted.org/packages/24/c0/f3b6453cf2dfa99adc0ba6675f9aaff9e526d2224cbd7ff9c1a879238693/shapely-2.1.2-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:fe2533caae6a91a543dec62e8360fe86ffcdc42a7c55f9dfd0128a977a896b94", size = 1833550, upload-time = "2025-09-24T13:50:30.019Z" },
-    { url = "https://files.pythonhosted.org/packages/86/07/59dee0bc4b913b7ab59ab1086225baca5b8f19865e6101db9ebb7243e132/shapely-2.1.2-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:ba4d1333cc0bc94381d6d4308d2e4e008e0bd128bdcff5573199742ee3634359", size = 1643556, upload-time = "2025-09-24T13:50:32.291Z" },
-    { url = "https://files.pythonhosted.org/packages/26/29/a5397e75b435b9895cd53e165083faed5d12fd9626eadec15a83a2411f0f/shapely-2.1.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:0bd308103340030feef6c111d3eb98d50dc13feea33affc8a6f9fa549e9458a3", size = 2988308, upload-time = "2025-09-24T13:50:33.862Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/37/e781683abac55dde9771e086b790e554811a71ed0b2b8a1e789b7430dd44/shapely-2.1.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:1e7d4d7ad262a48bb44277ca12c7c78cb1b0f56b32c10734ec9a1d30c0b0c54b", size = 3099844, upload-time = "2025-09-24T13:50:35.459Z" },
-    { url = "https://files.pythonhosted.org/packages/d8/f3/9876b64d4a5a321b9dc482c92bb6f061f2fa42131cba643c699f39317cb9/shapely-2.1.2-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:e9eddfe513096a71896441a7c37db72da0687b34752c4e193577a145c71736fc", size = 3988842, upload-time = "2025-09-24T13:50:37.478Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/a0/704c7292f7014c7e74ec84eddb7b109e1fbae74a16deae9c1504b1d15565/shapely-2.1.2-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:980c777c612514c0cf99bc8a9de6d286f5e186dcaf9091252fcd444e5638193d", size = 4152714, upload-time = "2025-09-24T13:50:39.9Z" },
-    { url = "https://files.pythonhosted.org/packages/53/46/319c9dc788884ad0785242543cdffac0e6530e4d0deb6c4862bc4143dcf3/shapely-2.1.2-cp312-cp312-win32.whl", hash = "sha256:9111274b88e4d7b54a95218e243282709b330ef52b7b86bc6aaf4f805306f454", size = 1542745, upload-time = "2025-09-24T13:50:41.414Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/bf/cb6c1c505cb31e818e900b9312d514f381fbfa5c4363edfce0fcc4f8c1a4/shapely-2.1.2-cp312-cp312-win_amd64.whl", hash = "sha256:743044b4cfb34f9a67205cee9279feaf60ba7d02e69febc2afc609047cb49179", size = 1722861, upload-time = "2025-09-24T13:50:43.35Z" },
-]
-
 [[package]]
 name = "shellingham"
 version = "1.5.4"
@@ -3692,15 +3238,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e9/44/75a9c9421471a6c4805dbf2356f7c181a29c1879239abab1ea2cc8f38b40/sniffio-1.3.1-py3-none-any.whl", hash = "sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2", size = 10235, upload-time = "2024-02-25T23:20:01.196Z" },
 ]
 
-[[package]]
-name = "snowballstemmer"
-version = "2.2.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/44/7b/af302bebf22c749c56c9c3e8ae13190b5b5db37a33d9068652e8f73b7089/snowballstemmer-2.2.0.tar.gz", hash = "sha256:09b16deb8547d3412ad7b590689584cd0fe25ec8db3be37788be3810cbf19cb1", size = 86699, upload-time = "2021-11-16T18:38:38.009Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ed/dc/c02e01294f7265e63a7315fe086dd1df7dacb9f840a804da846b96d01b96/snowballstemmer-2.2.0-py2.py3-none-any.whl", hash = "sha256:c8e1716e83cc398ae16824e5572ae04e0d9fc2c6b985fb0f900f5f0c96ecba1a", size = 93002, upload-time = "2021-11-16T18:38:34.792Z" },
-]
-
 [[package]]
 name = "socksio"
 version = "1.0.0"
@@ -3937,18 +3474,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/00/c0/8f5d070730d7836adc9c9b6408dec68c6ced86b304a9b26a14df072a6e8c/traitlets-5.14.3-py3-none-any.whl", hash = "sha256:b74e89e397b1ed28cc831db7aea759ba6640cb3de13090ca145426688ff1ac4f", size = 85359, upload-time = "2024-04-19T11:11:46.763Z" },
 ]
 
-[[package]]
-name = "trimesh"
-version = "4.12.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "numpy" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/79/37/5cb90f04990260d2caceb6093560c6cefafca1ec522c1e43be01ca658244/trimesh-4.12.2.tar.gz", hash = "sha256:c8ca31571ac00b112e4e160e66a2d4c3491df321f056bd33806be0485d1af9d9", size = 842220, upload-time = "2026-05-01T00:57:43.333Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/05/98/716a473cfb24750858ddd5d14e6527539dd206583a46408d08eeb2844a75/trimesh-4.12.2-py3-none-any.whl", hash = "sha256:b5b5afa63c5272345f2858f7676bc8c217dc8a89f4fadf6193fe10a81b5ff2aa", size = 741043, upload-time = "2026-05-01T00:57:40.763Z" },
-]
-
 [[package]]
 name = "typer"
 version = "0.21.1"
@@ -4028,29 +3553,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/ff/7f/4320d9ce3be404e6310b915c3629fe27bf1e2f438a1a7a3cb0396e32e9a9/uncalled_for-0.2.0-py3-none-any.whl", hash = "sha256:2c0bd338faff5f930918f79e7eb9ff48290df2cb05fcc0b40a7f334e55d4d85f", size = 11351, upload-time = "2026-02-27T17:40:56.804Z" },
 ]
 
-[[package]]
-name = "unclecode-litellm"
-version = "1.81.13"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiohttp" },
-    { name = "click" },
-    { name = "fastuuid" },
-    { name = "httpx" },
-    { name = "importlib-metadata" },
-    { name = "jinja2" },
-    { name = "jsonschema" },
-    { name = "openai" },
-    { name = "pydantic" },
-    { name = "python-dotenv" },
-    { name = "tiktoken" },
-    { name = "tokenizers" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/ce/c4/93ed52c49c2347184f908c692ebb7c1f06303805910774c3282ac68033db/unclecode_litellm-1.81.13.tar.gz", hash = "sha256:db70e34e3e859c0a07f02cb02eaa644f8fa4b4ecc5e2f3be9a58bd7d1c3feedc", size = 16678208, upload-time = "2026-03-24T14:46:31.915Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/43/85/7b1e0bc5827bcb23dc572b17c447fb5825340f36a9e4405d4b777b862e0c/unclecode_litellm-1.81.13-py3-none-any.whl", hash = "sha256:5e1fbedbed92333b48e7371e0bacf86d1288020451bf34351703c3b159591399", size = 18008619, upload-time = "2026-03-24T14:46:28.009Z" },
-]
-
 [[package]]
 name = "urllib3"
 version = "2.7.0"

From 2279f3f186388ab868e778c4773b69ac2ff018fd Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 13 Jul 2026 11:56:37 -0300
Subject: [PATCH 212/345] feat(sources): log the effective content-core
 extraction engine (#1125)

* feat(sources): log the effective content-core extraction engine

The source-processing graph now emits an INFO line naming the resolved
url_engine / document_engine / docling_ocr right before extraction.
content-core only logs its own engine dispatch at DEBUG, so operators
had no way to confirm which engine actually ran for a given source
(e.g. whether a persisted Crawl4AI selection took effect or the request
silently fell back to the 'auto' chain). Falls back to 'auto' in the log
when no override is set, matching content-core's default.

* docs(changelog): note the extraction-engine logging (#1125)
---
 CHANGELOG.md                   |  1 +
 open_notebook/graphs/source.py | 16 ++++++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 697f0687..7172bb0e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Opt-in heavy extraction runtimes.** Docling (layout parsing + OCR + image sources) and local Crawl4AI (JavaScript rendering) are now **opt-in**, installed automatically on first container startup when enabled — instead of being bundled into (or missing from) every image. Set `OPEN_NOTEBOOK_ENABLE_DOCLING=true` and/or `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true`; the downloads are cached on the `/app/data` volume so only the first boot is slow, and a failed install degrades gracefully (the app still starts, the engine is reported unavailable) with loud logs. A new `GET /api/capabilities` probe reports what's actually installed, and Settings → Content Processing disables the Docling engine, the Crawl4AI engine and the OCR toggle (with an env-var hint) until their runtime is available — so the UI never advertises an engine that isn't there. This keeps the default image lean (no Chromium, no multi-GB ML stack) while making both runtimes available on demand. A remote Crawl4AI server via `CRAWL4AI_API_URL` needs no local install. New hint strings added across all 14 locales; recorded as ADR-007 (#1122)
 - **OCR toggle** in Settings → Content Processing: a new "Enable OCR" checkbox controls whether the Docling engine runs OCR on scanned PDFs and images. It's on by default (matching content-core's behavior); turn it off to speed up processing of text-native documents. The setting is passed to content-core's `docling_ocr` config, and the label/help are translated across all 14 locales. OCR only runs through Docling, so the toggle takes effect once Docling is enabled (see #1122) (#1104)
 - **Crawl4AI** is now selectable as a URL processing engine in Settings → Content Processing, alongside Firecrawl, Jina and Simple. It renders JavaScript-heavy pages locally with no API key, or offloads to a Crawl4AI server when `CRAWL4AI_API_URL` is set. Local Crawl4AI (and its Chromium browser) is an opt-in runtime installed on first startup when `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` (see #1122) — the default image stays lean. As part of this, the persisted document/URL engine choices now actually take effect: the source-processing graph reads the saved Content Settings and passes them to content-core (previously it always ran with hard-coded `auto` engines and silently ignored the selection). New engine label added across all 14 locales (#432)
+- Source extraction now logs the **effective content-core engine** at INFO (`url_engine` / `document_engine` / `docling_ocr`) right before it runs. content-core only logs its own engine dispatch at DEBUG, so operators previously had no way to confirm which engine actually processed a source — e.g. whether a persisted Crawl4AI/Docling selection took effect or the request silently fell back to the `auto` chain (#1125)
 
 ### Changed
 - Upgraded the content extraction dependency from content-core 1.14.x to 2.x (2.0.4). The source-processing graph was adapted to content-core's new keyword-only `extract_content()` API: engine/model overrides now travel through a `ContentCoreConfig` object instead of the input dict, and the extraction result (`ExtractionOutput`) no longer echoes the source `url`/`file_path` back, so those are carried from the request state into the saved source asset. Because content-core 2.x no longer deletes the uploaded file after extraction, the graph now honors the `delete_source` flag itself. Transitively this replaces the AGPL-licensed PyMuPDF with MIT-licensed pdfplumber for PDF extraction and drops moviepy in favor of direct ffmpeg calls (which fixes audio extraction from MP3 files carrying chapter metadata). No user-facing configuration changes in this step — document and URL engines stay on their `auto` defaults; new engine/OCR options are tracked separately under #939 (#1103)
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index a8b557d5..c3fc610a 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -97,6 +97,22 @@ async def content_process(state: SourceState) -> dict:
 
     config = ContentCoreConfig(**config_kwargs) if config_kwargs else None
 
+    # Log the effective extraction engines so operators can confirm which engine
+    # actually ran (content-core logs its own dispatch only at DEBUG). Absent
+    # overrides fall back to content-core's "auto".
+    if content_state.get("url"):
+        target = "url"
+    elif content_state.get("file_path"):
+        target = "document"
+    else:
+        target = "content"
+    logger.info(
+        f"Extracting {target} via content-core "
+        f"(url_engine={config_kwargs.get('url_engine', 'auto')}, "
+        f"document_engine={config_kwargs.get('document_engine', 'auto')}, "
+        f"docling_ocr={config_kwargs.get('docling_ocr', 'auto')})"
+    )
+
     processed = await extract_content(
         url=content_state.get("url"),
         file_path=content_state.get("file_path"),

From ae5c849453ec37449336cdaa3067ae834da8a5ca Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 13 Jul 2026 12:40:35 -0300
Subject: [PATCH 213/345] chore(release): cut v1.13.0 (#1126)

Bump version to 1.13.0 and date the changelog section. Also close the two
remaining changelog gaps for changes merged since v1.12.0:
- #1058: podcast generation honors speaker_profile in generate_podcast_command
- #999:  transformation create works from the empty state
---
 CHANGELOG.md   | 4 ++++
 pyproject.toml | 2 +-
 uv.lock        | 2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7172bb0e..59f6ab13 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.13.0] - 2026-07-13
+
 ### Added
 - **Opt-in heavy extraction runtimes.** Docling (layout parsing + OCR + image sources) and local Crawl4AI (JavaScript rendering) are now **opt-in**, installed automatically on first container startup when enabled — instead of being bundled into (or missing from) every image. Set `OPEN_NOTEBOOK_ENABLE_DOCLING=true` and/or `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true`; the downloads are cached on the `/app/data` volume so only the first boot is slow, and a failed install degrades gracefully (the app still starts, the engine is reported unavailable) with loud logs. A new `GET /api/capabilities` probe reports what's actually installed, and Settings → Content Processing disables the Docling engine, the Crawl4AI engine and the OCR toggle (with an env-var hint) until their runtime is available — so the UI never advertises an engine that isn't there. This keeps the default image lean (no Chromium, no multi-GB ML stack) while making both runtimes available on demand. A remote Crawl4AI server via `CRAWL4AI_API_URL` needs no local install. New hint strings added across all 14 locales; recorded as ADR-007 (#1122)
 - **OCR toggle** in Settings → Content Processing: a new "Enable OCR" checkbox controls whether the Docling engine runs OCR on scanned PDFs and images. It's on by default (matching content-core's behavior); turn it off to speed up processing of text-native documents. The setting is passed to content-core's `docling_ocr` config, and the label/help are translated across all 14 locales. OCR only runs through Docling, so the toggle takes effect once Docling is enabled (see #1122) (#1104)
@@ -33,6 +35,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `docker-compose.yml` now uses the YAML list (exec) form for the SurrealDB `command`, so `SURREAL_USER` / `SURREAL_PASSWORD` values containing spaces are passed as single arguments instead of being split; the mirrored snippets in the installation docs and README (which had drifted — no credential interpolation, SurrealDB port published on all interfaces) are back in sync with the shipped file (#1093)
 - zh-CN and zh-TW podcast toast descriptions (speaker/episode profile created/updated/deleted/duplicated) now include the profile name via the `{{name}}` placeholder, matching the other 12 locales (#1084)
 - Docker images now force the Next.js frontend to bind to `0.0.0.0` in the supervisord command itself, so container runtimes that inject `HOSTNAME` (e.g. Podman pods, where it resolves to `127.0.1.1`) can no longer make the UI unreachable. The `HOSTNAME` variable is no longer honored as a frontend bind override — set the new `FRONTEND_BIND_HOST` variable instead (#994)
+- Podcast generation now honors an explicitly supplied `speaker_profile` all the way into `generate_podcast_command`. The v1.12 fix stopped at the API boundary — the command still re-derived the speaker from the episode profile's `speaker_config` and silently dropped the override, so a direct caller's valid profile was ignored and generation failed when the episode profile pointed at a renamed/deleted speaker. The command now resolves `speaker_profile or episode_profile.speaker_config`, and the persisted episode plus the retry path reflect the actually-resolved profile (#1058)
+- Creating a transformation from the empty state works again: after deleting every transformation, the empty-state "New Transformation" button did nothing because the editor dialog was only mounted in the non-empty branch. The dialog is now rendered in both branches so the create flow works with zero existing transformations (#999)
 
 ## [1.12.0] - 2026-07-12
 
diff --git a/pyproject.toml b/pyproject.toml
index 577ad8db..02b2af38 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.12.0"
+version = "1.13.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/uv.lock b/uv.lock
index 346a30ac..8540e763 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2052,7 +2052,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.12.0"
+version = "1.13.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 2181b14a7900799fa44f8ff16d750fefa92ca5db Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Jul 2026 07:29:00 -0300
Subject: [PATCH 214/345] chore(release): rc-stack pulls the pushed image +
 optional --with-runtimes (#1133)

Retro improvements from the v1.13.0 release:
- rc-stack.sh 'up' now docker-pulls lfnovo/open_notebook:<tag> by default so a
  same-named local build can't shadow the registry artifact during Phase 6
  verification (non-fatal for local-only tags).
- New --with-runtimes flag enables the opt-in heavy engines (Docling +
  Crawl4AI) on the RC stack via RC_ENABLE_DOCLING/RC_ENABLE_CRAWL4AI, so the
  published image's opt-in install path can be exercised with real data. The
  release-test compose defaults these empty, keeping fresh/upgrade tests fast.
- Documented both gotchas (local-tag shadowing; judging opt-in gating on a
  clean image vs a dev venv with runtimes installed out-of-band) in
  RELEASE_PROCESS.md.
---
 .github/RELEASE_PROCESS.md                    | 12 ++++++++
 .../docker-compose.release-test.yml           |  5 ++++
 scripts/release-test/rc-stack.sh              | 28 ++++++++++++++++---
 3 files changed, 41 insertions(+), 4 deletions(-)

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index 2be6e30b..11080454 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -172,3 +172,15 @@ accepted improvements immediately — update this document, the scripts under
   `.env` is loaded. During bucket A, snapshot record counts per table before
   and after the suite (e.g. credentials count) — a diff means a test is
   leaking writes (this caught 48 leaked `Test` credentials in v1.12.0).
+- **A local `docker-build-local` tag shadows the pushed image.** Both are
+  `lfnovo/open_notebook:<ver>`, so Phase 6 could verify your own local build
+  instead of the registry artifact. `rc-stack.sh up` now `docker pull`s the tag
+  by default; if you boot the image any other way, pull first (v1.13.0 lesson).
+- **Judge opt-in runtime gating on a clean image, not the dev venv.** A dev
+  venv may have `crawl4ai`/`docling` installed out-of-band (not via the opt-in
+  flag), so `GET /api/capabilities` reports them available and the UI enables
+  the engines — which does NOT reflect the lean default image. Verify the
+  gating on the RC stack (fresh pushed image) where the runtimes are genuinely
+  absent until enabled. To exercise the real install path with your data, use
+  `make release-stack TAG=<ver> DUMP=<dump>` plus `rc-stack.sh ... --with-runtimes`
+  (sets `OPEN_NOTEBOOK_ENABLE_DOCLING`/`_CRAWL4AI`; first boot is slow) (v1.13.0 lesson).
diff --git a/scripts/release-test/docker-compose.release-test.yml b/scripts/release-test/docker-compose.release-test.yml
index 7887b5f6..69bee8aa 100644
--- a/scripts/release-test/docker-compose.release-test.yml
+++ b/scripts/release-test/docker-compose.release-test.yml
@@ -22,6 +22,11 @@ services:
       - SURREAL_PASSWORD=root
       - SURREAL_NAMESPACE=${RC_SURREAL_NS:-open_notebook}
       - SURREAL_DATABASE=${RC_SURREAL_DB:-open_notebook}
+      # Opt-in heavy runtimes: empty by default (fresh/upgrade tests stay fast);
+      # rc-stack.sh --with-runtimes sets these to install Docling/Crawl4AI so the
+      # published image's opt-in path can be exercised with real data.
+      - OPEN_NOTEBOOK_ENABLE_DOCLING=${RC_ENABLE_DOCLING:-}
+      - OPEN_NOTEBOOK_ENABLE_CRAWL4AI=${RC_ENABLE_CRAWL4AI:-}
     volumes:
       - ${DATA_DIR}/notebook:/app/data
     # Reach host services (e.g. Ollama on localhost:11434) via
diff --git a/scripts/release-test/rc-stack.sh b/scripts/release-test/rc-stack.sh
index 0ef3d9b7..31174574 100755
--- a/scripts/release-test/rc-stack.sh
+++ b/scripts/release-test/rc-stack.sh
@@ -4,8 +4,16 @@
 # verification without touching the dev environment.
 #
 # Usage:
-#   rc-stack.sh up <tag> [dump.surql]   # start (imports the dump if given)
-#   rc-stack.sh down <tag>              # stop and remove everything
+#   rc-stack.sh up <tag> [dump.surql] [--with-runtimes]   # start (imports the dump if given)
+#   rc-stack.sh down <tag>                                 # stop and remove everything
+#
+# --with-runtimes enables the opt-in heavy engines (Docling + Crawl4AI) so the
+# published image installs them on first boot — lets you exercise the real
+# opt-in path with real data (the first boot then takes several minutes).
+#
+# `up` docker-pulls the pushed image by default, so you always verify the
+# registry artifact and not a same-named local build shadowing it. A local-only
+# tag (no registry push) still works — the pull failure is a warning, not fatal.
 #
 # To produce a data copy from a running dev SurrealDB (originals untouched):
 #   docker exec <surreal-container> /surreal export \
@@ -16,8 +24,14 @@
 set -euo pipefail
 DIR="$(cd "$(dirname "$0")" && pwd)"
 REPO="$(cd "$DIR/../.." && pwd)"
-TAG="${2:?usage: rc-stack.sh <up|down> <tag> [dump.surql]}"
-DUMP="${3:-}"
+TAG="${2:?usage: rc-stack.sh <up|down> <tag> [dump.surql] [--with-runtimes]}"
+
+# Optional flag can appear anywhere after the tag; the remaining positional is the dump.
+WITH_RUNTIMES=""
+DUMP=""
+for arg in "${@:3}"; do
+  if [ "$arg" = "--with-runtimes" ]; then WITH_RUNTIMES="true"; else DUMP="$arg"; fi
+done
 RC_DATA=/tmp/onrel-rc-data
 
 # Reuse the dev encryption key so copied credentials decrypt; the DB name must
@@ -30,6 +44,7 @@ compose() {
   API_PORT=15055 FE_PORT=18502 PROXY_PORT=18080 \
   RC_API_URL="http://localhost:15055" \
   RC_ENCRYPTION_KEY="${KEY:-release-test-key}" RC_SURREAL_DB="${DB:-open_notebook}" \
+  RC_ENABLE_DOCLING="${WITH_RUNTIMES:+true}" RC_ENABLE_CRAWL4AI="${WITH_RUNTIMES:+true}" \
   docker compose -p onrelrc -f "$DIR/docker-compose.release-test.yml" "$@"
 }
 
@@ -40,6 +55,11 @@ case "$1" in
     echo "RC stack removed."
     ;;
   up)
+    # Pull the pushed image so a same-named local build can't shadow the
+    # registry artifact we mean to verify (non-fatal for local-only tags).
+    docker pull "lfnovo/open_notebook:$TAG" || \
+      echo "WARNING: could not pull lfnovo/open_notebook:$TAG — using the local image if present."
+    [ -n "$WITH_RUNTIMES" ] && echo "Opt-in runtimes ENABLED (Docling + Crawl4AI) — first boot will be slow."
     compose down -v >/dev/null 2>&1 || true
     rm -rf "$RC_DATA"; mkdir -p "$RC_DATA/surreal" "$RC_DATA/notebook"
     if [ -n "$DUMP" ]; then

From 3ece9e99427f6bc31bb272fa3b73e26e4bcd1b41 Mon Sep 17 00:00:00 2001
From: dyzur <77259435+dyzur@users.noreply.github.com>
Date: Tue, 14 Jul 2026 14:04:07 +0300
Subject: [PATCH 215/345] chore(dev): add pre-commit config mirroring the CI
 gates (#1129)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Create .pre-commit-config.yaml with ruff (lint + format), mypy and basic
hygiene hooks so local commits fail for the same reasons PRs would.

- Ruff lint (--fix for local convenience, no drift vs CI's ruff check .)
- Ruff format check (not yet gated in CI but zero drift — same tool)
- Mypy via language:system/uv to match CI's uv run python -m mypy .
- Hygiene: large files, merge conflicts, YAML/TOML syntax, trailing
  whitespace, EOF newlines
- Updated development-setup.md with install/run/skip/update docs

Closes #940

Co-authored-by: dyzur <dyzur@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .pre-commit-config.yaml                 | 52 +++++++++++++++++++++++++
 docs/7-DEVELOPMENT/development-setup.md | 43 +++++++++++++++++++-
 2 files changed, 93 insertions(+), 2 deletions(-)
 create mode 100644 .pre-commit-config.yaml

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
new file mode 100644
index 00000000..e58aae32
--- /dev/null
+++ b/.pre-commit-config.yaml
@@ -0,0 +1,52 @@
+# Pre-commit hooks mirroring the CI gates so local commits fail for the same
+# reasons PRs would. See .github/workflows/test.yml for the CI equivalents.
+#
+# Install: uv run pre-commit install
+# Run on all files: uv run pre-commit run --all-files
+# Update hook versions: uv run pre-commit autoupdate
+
+repos:
+  # ── Basic hygiene ──────────────────────────────────────────────────
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: check-added-large-files   # blocks >500 KB binaries
+      - id: check-merge-conflict      # catches unresolved conflict markers
+      - id: check-yaml                # validates YAML syntax
+      - id: check-toml                # validates TOML syntax
+      - id: end-of-file-fixer         # ensures files end with a newline
+      - id: trailing-whitespace       # removes stray trailing whitespace
+        args: [--markdown-linebreak-ext=md]
+
+  # ── Ruff: Python lint & format (mirrors CI backend-lint job) ──────
+  # Version kept in sync with pyproject.toml [dependency-groups] dev.
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.13
+    hooks:
+      # `ruff check --fix` — applies safe auto-fixes (e.g. import sorting)
+      # and reports remaining violations. CI runs `ruff check .` without
+      # --fix; the local auto-fix saves iteration with no drift risk.
+      - id: ruff
+        args: [--fix]
+      # `ruff format --check` — fails if files don't match ruff's formatter.
+      # Run `ruff format .` to fix. Not yet gated in CI but uses the exact
+      # same tool config, so there is no drift.
+      - id: ruff-format
+
+  # ── Mypy: Python type check (mirrors CI backend-typecheck job) ────
+  # Uses language: system so mypy runs through `uv` in the project's own
+  # virtualenv (the same way CI and `make lint` run it). Pre-commit's
+  # isolated mirror-mypy would miss errors from missing project deps like
+  # langgraph and langchain — that breaks the "no drift" rule.
+  #
+  # Note: type-checking the full project on every commit is slower than
+  # the per-file hooks above. Skip it with `SKIP=mypy git commit`.
+  - repo: local
+    hooks:
+      - id: mypy
+        name: mypy
+        entry: uv run python -m mypy .
+        language: system
+        types: [python]
+        pass_filenames: false
+        verbose: true
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index 42fa640f..a9c730d7 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -256,13 +256,52 @@ cd frontend && npm run dev
 
 ### Pre-commit Hooks (Optional but Recommended)
 
-Install git hooks to automatically check code quality:
+Pre-commit hooks run configured checks automatically before each commit,
+mirroring the CI gates so local commits fail for the same reasons PRs
+would. The config at `.pre-commit-config.yaml` wires up:
+
+| Tool | What it checks | CI equivalent |
+|------|----------------|---------------|
+| **ruff** (lint) | Python lint rules (`E`, `F`, `I`) | `ruff check .` |
+| **ruff** (format) | Python formatting (line-length 88) | Not yet gated |
+| **mypy** | Python type correctness | `python -m mypy .` |
+| **pre-commit-hooks** | Large files, merge conflicts, YAML/TOML syntax, trailing whitespace, EOF newlines | — |
+
+Pre-commit is already included in the project's dev dependencies. Install
+the hooks and they'll run on every `git commit`:
 
 ```bash
 uv run pre-commit install
 ```
 
-Now your commits will be checked before they're made.
+**Running manually:**
+
+```bash
+# Check all files (useful after changing hook config)
+uv run pre-commit run --all-files
+
+# Run a specific hook only
+uv run pre-commit run ruff --all-files
+```
+
+**Skipping hooks temporarily:**
+
+```bash
+# Skip all hooks for a single commit
+git commit --no-verify
+
+# Skip a specific hook (e.g. slow mypy run)
+SKIP=mypy git commit
+```
+
+**Updating hook versions:**
+
+```bash
+uv run pre-commit autoupdate
+```
+
+Keep the `rev:` pins in `.pre-commit-config.yaml` in sync with the
+versions listed in `pyproject.toml` under `[dependency-groups] dev`.
 
 ### Code Quality Commands
 

From ca5581d438838f58d6f5259acf7e9bc432f7f7e8 Mon Sep 17 00:00:00 2001
From: Gautam Diwan <62214898+Gautam-Diwan@users.noreply.github.com>
Date: Tue, 14 Jul 2026 07:22:21 -0400
Subject: [PATCH 216/345] fix: correct Ollama env var name in .env.example
 (#1064)

Use OLLAMA_API_BASE (the variable Open Notebook reads) instead of the
outdated OLLAMA_BASE_URL placeholder.

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .env.example | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index 4f8fe6ef..325cf78a 100644
--- a/.env.example
+++ b/.env.example
@@ -48,7 +48,7 @@ SURREAL_DATABASE=open_notebook
 # API_URL=http://localhost:5055
 
 # Ollama endpoint (if running locally)
-# OLLAMA_BASE_URL=http://ollama:11434
+# OLLAMA_API_BASE=http://localhost:11434
 
 # Content processing
 # CHUNK_SIZE=1500

From 964aebb76a7fdfe5fc49a537d228d8bac675dbf2 Mon Sep 17 00:00:00 2001
From: Gautam Diwan <62214898+Gautam-Diwan@users.noreply.github.com>
Date: Tue, 14 Jul 2026 07:45:29 -0400
Subject: [PATCH 217/345] fix: pin DNS for outbound provider HTTP requests
 (#1063)

* fix: pin DNS for outbound provider HTTP requests

Close the DNS-rebinding TOCTOU left by validate_url alone by resolving
once and connecting to the vetted IP (Host/SNI preserved). Apply
consistently to openai_compatible, ollama, and azure discovery/test paths.

* fix: restore @dataclass newline in model_discovery

* fix: resolve mypy failure and pin openai custom base_url discovery

- Cast getaddrinfo sockaddr[0] to str in _resolve_safe_ips so the
  list[str] append typechecks (mypy CI gate was failing).
- Apply DNS pinning to the openai provider's user-supplied base_url
  discovery path, mirroring the openai_compatible path, so httpx cannot
  re-resolve to a metadata address after validation (DNS-rebinding TOCTOU).
- Add a test asserting the pinned IP URL, Host header and SNI extension
  reach httpx on the openai base_url discovery path.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 api/credentials_service.py            |  70 ++++++++++---
 open_notebook/ai/connection_tester.py |  46 +++++---
 open_notebook/ai/model_discovery.py   |  29 ++++--
 open_notebook/utils/url_validation.py | 144 +++++++++++++++++++++++---
 tests/test_credentials_api.py         |  77 +++++++++++++-
 tests/test_url_validation.py          | 109 +++++++++++++++++++
 6 files changed, 423 insertions(+), 52 deletions(-)

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 3a5bf722..43c3e9ef 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -23,7 +23,12 @@ from open_notebook.ai.model_discovery import (
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
-from open_notebook.utils.url_validation import validate_url
+from open_notebook.utils.url_validation import (
+    prepare_pinned_http_target,
+)
+from open_notebook.utils.url_validation import (
+    validate_url as validate_url,  # re-export for routers
+)
 
 # =============================================================================
 # Constants
@@ -393,12 +398,19 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     if provider == "ollama":
         ollama_url = base_url or "http://localhost:11434"
         try:
-            # Re-validate at request time: the base_url may have been saved
-            # against a hostname that only later resolved to an internal
-            # address (DNS rebinding).
-            await validate_url(ollama_url, "ollama")
+            # Pin DNS at request time so httpx cannot re-resolve to a
+            # metadata address after validation (DNS rebinding TOCTOU).
+            target = await prepare_pinned_http_target(
+                f"{ollama_url.rstrip('/')}/api/tags", "ollama"
+            )
+            headers = dict(target.headers)
             async with httpx.AsyncClient() as client:
-                response = await client.get(f"{ollama_url}/api/tags", timeout=10.0)
+                response = await client.get(
+                    target.url,
+                    headers=headers,
+                    timeout=10.0,
+                    extensions=target.extensions,
+                )
                 response.raise_for_status()
                 data = response.json()
                 return [
@@ -418,16 +430,20 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         if not base_url:
             return []
         try:
-            # Re-validate at request time (see ollama branch above).
-            await validate_url(base_url, "openai_compatible")
-            headers = {}
+            # Pin DNS at request time so httpx cannot re-resolve to a
+            # metadata address after validation (DNS rebinding TOCTOU).
+            target = await prepare_pinned_http_target(
+                models_endpoint(base_url), "openai_compatible"
+            )
+            headers = dict(target.headers)
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
             async with httpx.AsyncClient() as client:
                 response = await client.get(
-                    models_endpoint(base_url),
+                    target.url,
                     headers=headers,
                     timeout=30.0,
+                    extensions=target.extensions,
                 )
                 response.raise_for_status()
                 data = response.json()
@@ -446,12 +462,19 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         if not endpoint or not api_key:
             return []
         try:
-            # Re-validate at request time (see ollama branch above).
-            await validate_url(endpoint, "azure")
+            # Pin DNS at request time so httpx cannot re-resolve to a
+            # metadata address after validation (DNS rebinding TOCTOU).
             url = f"{endpoint.rstrip('/')}/openai/models?api-version={api_version}"
-            headers = {"api-key": api_key}
+            target = await prepare_pinned_http_target(url, "azure")
+            headers = dict(target.headers)
+            headers["api-key"] = api_key
             async with httpx.AsyncClient() as client:
-                response = await client.get(url, headers=headers, timeout=30.0)
+                response = await client.get(
+                    target.url,
+                    headers=headers,
+                    timeout=30.0,
+                    extensions=target.extensions,
+                )
                 response.raise_for_status()
                 data = response.json()
                 return [
@@ -500,17 +523,32 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
 
     # Standard OpenAI-style API discovery
     discovery_url = url_map.get(provider)
+    user_supplied_url = False
     if provider == "openai" and base_url:
         discovery_url = models_endpoint(base_url)
+        user_supplied_url = True
     if not discovery_url or not api_key:
         return []
 
     try:
+        headers = {"Authorization": f"Bearer {api_key}"}
+        if user_supplied_url:
+            # Pin DNS at request time so httpx cannot re-resolve a
+            # user-supplied host to a metadata address after validation
+            # (DNS rebinding TOCTOU) — mirrors the openai_compatible path.
+            target = await prepare_pinned_http_target(discovery_url, provider)
+            request_url = target.url
+            headers.update(target.headers)
+            extensions = target.extensions
+        else:
+            request_url = discovery_url
+            extensions = {}
         async with httpx.AsyncClient() as client:
             response = await client.get(
-                discovery_url,
-                headers={"Authorization": f"Bearer {api_key}"},
+                request_url,
+                headers=headers,
                 timeout=30.0,
+                extensions=extensions,
             )
             response.raise_for_status()
             data = response.json()
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 88a8e3f5..3538e27b 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -22,7 +22,7 @@ from esperanto.common_types import ChatCompletion
 from loguru import logger
 
 from open_notebook.ai.provider_registry import PROVIDERS
-from open_notebook.utils.url_validation import validate_url
+from open_notebook.utils.url_validation import prepare_pinned_http_target
 
 
 def _is_vertex_credentials_file_error(exc: Exception) -> bool:
@@ -95,14 +95,18 @@ async def _test_azure_connection(
     test_endpoint = test_endpoint.rstrip("/")
 
     try:
-        # Re-validate at request time: the endpoint may have been saved
-        # against a hostname that only later resolved to an internal
-        # address (DNS rebinding), so a save-time check alone isn't enough.
-        await validate_url(test_endpoint, "azure")
+        # Pin DNS at request time (closes rebinding TOCTOU left by validate_url alone).
+        models_url = (
+            f"{test_endpoint}/openai/models?api-version={test_api_version}"
+        )
+        target = await prepare_pinned_http_target(models_url, "azure")
+        headers = dict(target.headers)
+        headers["api-key"] = test_api_key
         async with httpx.AsyncClient(timeout=10.0) as client:
             response = await client.get(
-                f"{test_endpoint}/openai/models?api-version={test_api_version}",
-                headers={"api-key": test_api_key},
+                target.url,
+                headers=headers,
+                extensions=target.extensions,
             )
 
             if response.status_code == 200:
@@ -137,11 +141,17 @@ async def _test_azure_connection(
 async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
     """Test Ollama server connectivity."""
     try:
-        # Re-validate at request time (see _test_azure_connection for why).
-        await validate_url(base_url, "ollama")
+        # Pin DNS at request time (closes rebinding TOCTOU left by validate_url alone).
+        target = await prepare_pinned_http_target(
+            f"{base_url.rstrip('/')}/api/tags", "ollama"
+        )
         async with httpx.AsyncClient(timeout=10.0) as client:
             # Try /api/tags endpoint (standard Ollama)
-            response = await client.get(f"{base_url}/api/tags")
+            response = await client.get(
+                target.url,
+                headers=dict(target.headers),
+                extensions=target.extensions,
+            )
 
             if response.status_code == 200:
                 data = response.json()
@@ -176,15 +186,23 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
 async def _test_openai_compatible_connection(base_url: str, api_key: Optional[str] = None) -> Tuple[bool, str]:
     """Test OpenAI-compatible server connectivity."""
     try:
-        # Re-validate at request time (see _test_azure_connection for why).
-        await validate_url(base_url, "openai_compatible")
-        headers = {}
+        # Pin DNS at request time (closes rebinding TOCTOU left by validate_url alone).
+        trimmed = base_url.rstrip("/")
+        models_url = (
+            trimmed if trimmed.endswith("/models") else f"{trimmed}/models"
+        )
+        target = await prepare_pinned_http_target(models_url, "openai_compatible")
+        headers = dict(target.headers)
         if api_key:
             headers["Authorization"] = f"Bearer {api_key}"
 
         async with httpx.AsyncClient(timeout=10.0) as client:
             # Try /models endpoint (standard OpenAI-compatible)
-            response = await client.get(f"{base_url}/models", headers=headers)
+            response = await client.get(
+                target.url,
+                headers=headers,
+                extensions=target.extensions,
+            )
 
             if response.status_code == 200:
                 data = response.json()
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index b317fe6f..8fd4de64 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -17,6 +17,13 @@ from open_notebook.ai.models import Model
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.database.repository import repo_query
 from open_notebook.domain.credential import Credential
+from open_notebook.utils.url_validation import prepare_pinned_http_target
+
+
+def _models_endpoint(url: str) -> str:
+    """Join base URL with /models without doubling an existing /models suffix."""
+    trimmed = url.rstrip("/")
+    return trimmed if trimmed.endswith("/models") else f"{trimmed}/models"
 
 
 @dataclass
@@ -423,10 +430,16 @@ async def discover_ollama_models() -> List[DiscoveredModel]:
 
     models = []
     try:
+        target = await prepare_pinned_http_target(
+            f"{base_url.rstrip('/')}/api/tags", "ollama"
+        )
+        headers = dict(target.headers)
         async with httpx.AsyncClient() as client:
             response = await client.get(
-                f"{base_url}/api/tags",
+                target.url,
+                headers=headers,
                 timeout=10.0,
+                extensions=target.extensions,
             )
             response.raise_for_status()
             data = response.json()
@@ -558,15 +571,19 @@ async def discover_openai_compatible_models() -> List[DiscoveredModel]:
 
     models = []
     try:
-        async with httpx.AsyncClient() as client:
-            headers = {}
-            if api_key:
-                headers["Authorization"] = f"Bearer {api_key}"
+        target = await prepare_pinned_http_target(
+            _models_endpoint(base_url), "openai_compatible"
+        )
+        headers = dict(target.headers)
+        if api_key:
+            headers["Authorization"] = f"Bearer {api_key}"
 
+        async with httpx.AsyncClient() as client:
             response = await client.get(
-                f"{base_url}/models",
+                target.url,
                 headers=headers,
                 timeout=30.0,
+                extensions=target.extensions,
             )
             response.raise_for_status()
             data = response.json()
diff --git a/open_notebook/utils/url_validation.py b/open_notebook/utils/url_validation.py
index f3bd73ca..2355f6ce 100644
--- a/open_notebook/utils/url_validation.py
+++ b/open_notebook/utils/url_validation.py
@@ -6,12 +6,19 @@ layer (credential create/update, source-URL ingestion) and by open_notebook's
 own AI layer (connection_tester.py, ModelManager) to re-validate a
 provider-configured URL immediately before it is actually used - closing most
 of the DNS-rebinding TOCTOU window left by validating only once, at save time.
+
+For outbound HTTP to user-supplied hostnames, prefer
+``prepare_pinned_http_target``: it resolves DNS once, rejects dangerous
+addresses, and returns a URL pinned to the vetted IP so httpx cannot
+re-resolve to a metadata endpoint (while Host/SNI stay on the original host).
 """
 
 import asyncio
 import ipaddress
 import socket
-from urllib.parse import urlparse
+from dataclasses import dataclass, field
+from typing import Any, Dict
+from urllib.parse import urlparse, urlunparse
 
 # AWS's IMDSv6 metadata endpoint. Unlike the IPv4 metadata address
 # (169.254.169.254), this is a Unique Local Address, not link-local, so it is
@@ -19,6 +26,20 @@ from urllib.parse import urlparse
 _AWS_IMDS_V6_ADDRESS = ipaddress.ip_address("fd00:ec2::254")
 
 
+@dataclass(frozen=True)
+class PinnedHttpTarget:
+    """Outbound request target pinned to a DNS-vetted IP address.
+
+    Pass ``url`` / ``headers`` / ``extensions`` to httpx so the TCP connection
+    uses the pinned address while Host and TLS SNI still use the original
+    hostname.
+    """
+
+    url: str
+    headers: Dict[str, str] = field(default_factory=dict)
+    extensions: Dict[str, Any] = field(default_factory=dict)
+
+
 async def validate_url(url: str, provider: str) -> None:
     """
     Validate URL format for API endpoints.
@@ -74,17 +95,7 @@ async def validate_url(url: str, provider: str) -> None:
                 # doesn't stall every other concurrent request (this is
                 # called on the hot path of model provisioning, potentially
                 # once per chat message/transformation).
-                resolved_ips = await asyncio.to_thread(socket.getaddrinfo, hostname, None)
-                for family, _, _, _, sockaddr in resolved_ips:
-                    ip_addr = sockaddr[0]
-                    try:
-                        parsed_ip = ipaddress.ip_address(ip_addr)
-                        _reject_dangerous_ip(parsed_ip, hostname, resolved=True)
-                    except ValueError as inner_ve:
-                        if "link-local" in str(inner_ve).lower() or "metadata" in str(inner_ve).lower():
-                            raise
-                        # Skip non-IP addresses (e.g., IPv6 zones)
-                        continue
+                await _resolve_safe_ips(hostname)
             except socket.gaierror:
                 # Could not resolve hostname - allow it since the URL may be
                 # valid in the deployment environment (e.g., Azure endpoints,
@@ -97,6 +108,106 @@ async def validate_url(url: str, provider: str) -> None:
         raise ValueError("Invalid URL format. Check server logs for details.")
 
 
+async def prepare_pinned_http_target(url: str, provider: str) -> PinnedHttpTarget:
+    """
+    Validate ``url``, resolve DNS once, and pin the outbound target to a vetted IP.
+
+    Unlike ``validate_url`` alone (which still leaves a DNS-rebinding window
+    because httpx resolves again at connect time), this rewrites the request
+    URL to the vetted address and sets Host / ``sni_hostname`` so routing and
+    TLS verification keep the original hostname.
+
+    ``provider`` is accepted for call-site parity with ``validate_url``.
+
+    Raises:
+        ValueError: If the URL is invalid, resolves to a blocked address, or
+            cannot be resolved for an outbound request.
+    """
+    if not url or not url.strip():
+        raise ValueError("Invalid URL: hostname could not be determined.")
+
+    parsed = urlparse(url.strip())
+    if parsed.scheme not in ("http", "https"):
+        raise ValueError(
+            f"Invalid URL scheme: '{parsed.scheme}'. Only http and https are allowed."
+        )
+
+    hostname = parsed.hostname
+    if not hostname:
+        raise ValueError("Invalid URL: hostname could not be determined.")
+
+    try:
+        ip = ipaddress.ip_address(hostname)
+        _reject_dangerous_ip(ip, hostname)
+        # Already an IP literal — no rewrite / Host / SNI override needed.
+        return PinnedHttpTarget(url=url.strip())
+    except ValueError as ve:
+        if "Link-local" in str(ve) or "Invalid URL" in str(ve) or "metadata" in str(ve):
+            raise
+
+    try:
+        safe_ips = await _resolve_safe_ips(hostname)
+    except socket.gaierror as exc:
+        raise ValueError(
+            f"Could not resolve hostname '{hostname}' for outbound request."
+        ) from exc
+
+    if not safe_ips:
+        raise ValueError(
+            f"Could not resolve hostname '{hostname}' for outbound request."
+        )
+
+    # Prefer IPv4 when available (simpler URL form; same vetted set).
+    pinned_ip = next((ip for ip in safe_ips if ":" not in ip), safe_ips[0])
+    host_for_url = f"[{pinned_ip}]" if ":" in pinned_ip else pinned_ip
+    # HTTP Host / TLS SNI must be ASCII; IDNA-encode internationalized names.
+    ascii_hostname = hostname.encode("idna").decode("ascii")
+    if parsed.port is not None:
+        netloc = f"{host_for_url}:{parsed.port}"
+        host_header = f"{ascii_hostname}:{parsed.port}"
+    else:
+        netloc = host_for_url
+        host_header = ascii_hostname
+
+    pinned_url = urlunparse(
+        (
+            parsed.scheme,
+            netloc,
+            parsed.path,
+            parsed.params,
+            parsed.query,
+            parsed.fragment,
+        )
+    )
+    extensions: Dict[str, Any] = {}
+    if parsed.scheme == "https":
+        extensions["sni_hostname"] = ascii_hostname
+
+    return PinnedHttpTarget(
+        url=pinned_url,
+        headers={"Host": host_header},
+        extensions=extensions,
+    )
+
+
+async def _resolve_safe_ips(hostname: str) -> list[str]:
+    """Resolve ``hostname`` and return safe IP strings; raise on blocked addresses."""
+    resolved_ips = await asyncio.to_thread(socket.getaddrinfo, hostname, None)
+    safe: list[str] = []
+    for _family, _, _, _, sockaddr in resolved_ips:
+        ip_addr = str(sockaddr[0])
+        try:
+            parsed_ip = ipaddress.ip_address(ip_addr)
+            _reject_dangerous_ip(parsed_ip, hostname, resolved=True)
+            safe.append(ip_addr)
+        except ValueError as inner_ve:
+            if "link-local" in str(inner_ve).lower() or "metadata" in str(inner_ve).lower():
+                raise
+            # Skip non-IP addresses (e.g., IPv6 zones)
+            continue
+    return safe
+
+
 def _reject_dangerous_ip(
     ip: "ipaddress.IPv4Address | ipaddress.IPv6Address",
     hostname: str,
@@ -123,8 +234,13 @@ def _reject_dangerous_ip(
         )
 
     # Block AWS's IMDSv6 metadata address - a Unique Local Address, not
-    # link-local, so it needs its own explicit check.
-    if ip == _AWS_IMDS_V6_ADDRESS:
+    # link-local, so it needs its own explicit check. Compare without scope
+    # ID so scoped forms (fd00:ec2::254%eth0) cannot bypass the sentinel.
+    is_aws_imds_v6 = (
+        isinstance(ip, ipaddress.IPv6Address)
+        and int(ip) == int(_AWS_IMDS_V6_ADDRESS)
+    )
+    if is_aws_imds_v6:
         if resolved:
             raise ValueError(
                 f"Hostname '{hostname}' resolves to the AWS IMDSv6 metadata address "
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index a9037543..b7daed04 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -105,6 +105,7 @@ class TestCredentialModelDiscovery:
     @pytest.mark.asyncio
     async def test_openai_discovery_respects_base_url(self, monkeypatch):
         """OpenAI model discovery should call the configured API base URL."""
+        from open_notebook.utils.url_validation import PinnedHttpTarget
 
         requests = []
 
@@ -115,7 +116,7 @@ class TestCredentialModelDiscovery:
             async def __aexit__(self, exc_type, exc, tb):
                 return None
 
-            async def get(self, url, headers=None, timeout=None):
+            async def get(self, url, headers=None, timeout=None, extensions=None):
                 requests.append(
                     {
                         "url": url,
@@ -129,7 +130,13 @@ class TestCredentialModelDiscovery:
                     request=httpx.Request("GET", url, headers=headers or {}),
                 )
 
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
         monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
 
         models = await credentials_service.discover_with_config(
             "openai",
@@ -157,6 +164,7 @@ class TestCredentialModelDiscovery:
     @pytest.mark.asyncio
     async def test_model_discovery_base_url_can_include_models_path(self, monkeypatch):
         """Model discovery should not append /models twice."""
+        from open_notebook.utils.url_validation import PinnedHttpTarget
 
         requests = []
 
@@ -167,7 +175,7 @@ class TestCredentialModelDiscovery:
             async def __aexit__(self, exc_type, exc, tb):
                 return None
 
-            async def get(self, url, headers=None, timeout=None):
+            async def get(self, url, headers=None, timeout=None, extensions=None):
                 requests.append(url)
                 return httpx.Response(
                     200,
@@ -175,7 +183,13 @@ class TestCredentialModelDiscovery:
                     request=httpx.Request("GET", url, headers=headers or {}),
                 )
 
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
         monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
 
         await credentials_service.discover_with_config(
             "openai_compatible",
@@ -187,6 +201,65 @@ class TestCredentialModelDiscovery:
 
         assert requests == ["https://llm-gateway.example.com/v1/models"]
 
+    @pytest.mark.asyncio
+    async def test_openai_discovery_pins_user_supplied_base_url(self, monkeypatch):
+        """OpenAI discovery with a custom base_url must go through DNS pinning:
+        the rewritten (IP) URL, Host header and SNI extension reach httpx."""
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        captured = {}
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                captured["url"] = url
+                captured["headers"] = headers
+                captured["extensions"] = extensions
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "model-a"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        pinned_calls = []
+
+        async def fake_prepare_pinned(url, provider):
+            pinned_calls.append((url, provider))
+            return PinnedHttpTarget(
+                url="https://93.184.216.34/v1/models",
+                headers={"Host": "llm-gateway.example.com"},
+                extensions={"sni_hostname": "llm-gateway.example.com"},
+            )
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        await credentials_service.discover_with_config(
+            "openai",
+            {
+                "api_key": "sk-test",
+                "base_url": "https://llm-gateway.example.com/v1",
+            },
+        )
+
+        # The user-supplied URL was pinned...
+        assert pinned_calls == [("https://llm-gateway.example.com/v1/models", "openai")]
+        # ...and the pinned IP URL + Host header + SNI extension reached httpx,
+        # alongside the auth header.
+        assert captured["url"] == "https://93.184.216.34/v1/models"
+        assert captured["headers"] == {
+            "Authorization": "Bearer sk-test",
+            "Host": "llm-gateway.example.com",
+        }
+        assert captured["extensions"] == {"sni_hostname": "llm-gateway.example.com"}
+
 
 class TestCredentialNumCtx:
     """Tests for the Ollama num_ctx override threaded into esperanto config."""
diff --git a/tests/test_url_validation.py b/tests/test_url_validation.py
index 59b8a71f..1c9947c4 100644
--- a/tests/test_url_validation.py
+++ b/tests/test_url_validation.py
@@ -16,9 +16,13 @@ loop - see open_notebook/utils/url_validation.py), so every test here is
 async too.
 """
 
+import socket
+from unittest.mock import patch
+
 import pytest
 
 from api.credentials_service import validate_url
+from open_notebook.utils.url_validation import prepare_pinned_http_target
 
 pytestmark = pytest.mark.asyncio
 
@@ -135,3 +139,108 @@ class TestUrlValidation:
         """IPv4-mapped IPv6 addresses pointing to private IPs should be allowed."""
         await validate_url("http://[::ffff:192.168.1.1]", "openai")
         # Should not raise - private IPs allowed for self-hosted
+
+    async def test_aws_imds_v6_rejected(self):
+        """AWS IMDSv6 metadata address must be rejected."""
+        with pytest.raises(ValueError, match="IMDSv6|metadata"):
+            await validate_url("http://[fd00:ec2::254]/", "openai")
+
+    async def test_scoped_aws_imds_v6_rejected(self):
+        """Scoped IMDSv6 (fd00:ec2::254%eth0) must not bypass the sentinel check."""
+        with pytest.raises(ValueError, match="IMDSv6|metadata"):
+            await validate_url("http://[fd00:ec2::254%eth0]/", "openai")
+
+        with pytest.raises(ValueError, match="IMDSv6|metadata"):
+            await validate_url("http://[fd00:ec2::254%25eth0]/", "openai")
+
+
+class TestPinnedHttpTarget:
+    """DNS pinning closes the validate-then-httpx rebinding window."""
+
+    async def test_ip_literal_unchanged(self):
+        target = await prepare_pinned_http_target(
+            "http://127.0.0.1:11434/api/tags", "ollama"
+        )
+        assert target.url == "http://127.0.0.1:11434/api/tags"
+        assert target.headers == {}
+        assert target.extensions == {}
+
+    async def test_link_local_ip_rejected(self):
+        with pytest.raises(ValueError, match="Link-local"):
+            await prepare_pinned_http_target(
+                "http://169.254.169.254/latest/meta-data", "openai_compatible"
+            )
+
+    async def test_scoped_aws_imds_v6_rejected(self):
+        """Scoped IMDSv6 literals must be rejected before pinning returns a target."""
+        with pytest.raises(ValueError, match="IMDSv6|metadata"):
+            await prepare_pinned_http_target(
+                "http://[fd00:ec2::254%eth0]/", "openai_compatible"
+            )
+
+        with pytest.raises(ValueError, match="IMDSv6|metadata"):
+            await prepare_pinned_http_target(
+                "http://[fd00:ec2::254%25eth0]/", "openai_compatible"
+            )
+
+    async def test_hostname_pinned_to_resolved_ip(self):
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("192.168.1.50", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "http://ollama.local:11434/api/tags", "ollama"
+            )
+
+        assert target.url == "http://192.168.1.50:11434/api/tags"
+        assert target.headers == {"Host": "ollama.local:11434"}
+        assert target.extensions == {}
+
+    async def test_https_sets_sni_hostname(self):
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("93.184.216.34", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "https://api.example.com/v1/models", "openai_compatible"
+            )
+
+        assert target.url == "https://93.184.216.34/v1/models"
+        assert target.headers == {"Host": "api.example.com"}
+        assert target.extensions == {"sni_hostname": "api.example.com"}
+
+    async def test_unicode_hostname_idna_encoded_for_host_and_sni(self):
+        """Internationalized hostnames must use ASCII IDNA for Host and SNI."""
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("93.184.216.34", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "https://bücher.example/v1/models", "openai_compatible"
+            )
+
+        assert target.url == "https://93.184.216.34/v1/models"
+        assert target.headers == {"Host": "xn--bcher-kva.example"}
+        assert target.extensions == {"sni_hostname": "xn--bcher-kva.example"}
+
+    async def test_hostname_resolving_to_link_local_rejected(self):
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("169.254.169.254", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            with pytest.raises(ValueError, match="link-local"):
+                await prepare_pinned_http_target(
+                    "http://evil.example/v1/models", "openai_compatible"
+                )

From f7d9f0fb1e08c7617e539c8b1f7274297e3f9d59 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Tue, 14 Jul 2026 05:22:53 -0700
Subject: [PATCH 218/345] feat(frontend): expose episode profile max_tokens in
 the UI (#992)

Adds an optional "Max output tokens" number input to the episode profile form, mirroring num_segments handling: zod validation (positive integer, clearable to null), form defaults/reset, and submit payload. Shows the value in episode card details and adds max_tokens to the episode profile types.

Includes maxTokens/maxTokensInteger/maxTokensPositive translation keys in all 14 locales (the locale parity test requires new keys everywhere).

Closes #991

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
---
 .../src/components/podcasts/EpisodeCard.tsx   |  4 +++
 .../forms/EpisodeProfileFormDialog.tsx        | 25 +++++++++++++++++++
 frontend/src/lib/locales/bn-IN/index.ts       |  3 +++
 frontend/src/lib/locales/ca-ES/index.ts       |  3 +++
 frontend/src/lib/locales/de-DE/index.ts       |  3 +++
 frontend/src/lib/locales/en-US/index.ts       |  3 +++
 frontend/src/lib/locales/es-ES/index.ts       |  3 +++
 frontend/src/lib/locales/fr-FR/index.ts       |  3 +++
 frontend/src/lib/locales/it-IT/index.ts       |  3 +++
 frontend/src/lib/locales/ja-JP/index.ts       |  3 +++
 frontend/src/lib/locales/pl-PL/index.ts       |  3 +++
 frontend/src/lib/locales/pt-BR/index.ts       |  3 +++
 frontend/src/lib/locales/ru-RU/index.ts       |  3 +++
 frontend/src/lib/locales/tr-TR/index.ts       |  3 +++
 frontend/src/lib/locales/zh-CN/index.ts       |  3 +++
 frontend/src/lib/locales/zh-TW/index.ts       |  3 +++
 frontend/src/lib/types/podcasts.ts            |  1 +
 17 files changed, 72 insertions(+)

diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index bad6df16..615a22d6 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -301,6 +301,10 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                                 <p className="text-muted-foreground">{t('podcasts.segments')}</p>
                                 <p>{episode.episode_profile?.num_segments ?? '—'}</p>
                               </div>
+                              <div>
+                                <p className="text-muted-foreground">{t('podcasts.maxTokens')}</p>
+                                <p>{episode.episode_profile?.max_tokens ?? '—'}</p>
+                              </div>
                             </div>
                             {episode.episode_profile?.default_briefing ? (
                               <div className="rounded border bg-muted/30 p-3 text-xs whitespace-pre-wrap">
diff --git a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
index 0fb60487..14703f2c 100644
--- a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
@@ -47,6 +47,11 @@ const episodeProfileSchema = (t: TFunction) => z.object({
     .int(t('podcasts.segmentsInteger') || 'Must be an integer')
     .min(3, t('podcasts.segmentsMin') || 'At least 3 segments')
     .max(20, t('podcasts.segmentsMax') || 'Maximum 20 segments'),
+  max_tokens: z.number()
+    .int(t('podcasts.maxTokensInteger') || 'Must be an integer')
+    .positive(t('podcasts.maxTokensPositive') || 'Must be a positive integer')
+    .nullable()
+    .optional(),
 })
 
 export type EpisodeProfileFormValues = z.infer<ReturnType<typeof episodeProfileSchema>>
@@ -86,6 +91,7 @@ export function EpisodeProfileFormDialog({
         language: initialData.language ?? null,
         default_briefing: initialData.default_briefing,
         num_segments: initialData.num_segments,
+        max_tokens: initialData.max_tokens ?? null,
       }
     }
 
@@ -98,6 +104,7 @@ export function EpisodeProfileFormDialog({
       language: null,
       default_briefing: '',
       num_segments: 5,
+      max_tokens: null,
     }
   }, [initialData, speakerProfiles])
 
@@ -124,6 +131,7 @@ export function EpisodeProfileFormDialog({
       ...values,
       description: values.description ?? '',
       language: values.language || null,
+      max_tokens: values.max_tokens ?? null,
     }
 
     if (mode === 'create') {
@@ -188,6 +196,23 @@ export function EpisodeProfileFormDialog({
               ) : null}
             </div>
 
+            <div className="space-y-2">
+              <Label htmlFor="max_tokens">{t('podcasts.maxTokens')}</Label>
+              <Input
+                id="max_tokens"
+                type="number"
+                min={1}
+                step={1}
+                {...register('max_tokens', {
+                  setValueAs: (value) => (value === '' ? null : Number(value)),
+                })}
+                autoComplete="off"
+              />
+              {errors.max_tokens ? (
+                <p className="text-xs text-red-600">{errors.max_tokens.message}</p>
+              ) : null}
+            </div>
+
             <div className="md:col-span-2 space-y-2">
               <Label htmlFor="description">{t('common.description')}</Label>
               <Textarea
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 947d1448..dcd09e8a 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -666,6 +666,7 @@ export const bnIN = {
     outlineModel: "রূপরেখা মডেল",
     transcriptModel: "ট্রান্সক্রিপ্ট মডেল",
     segments: "সেগমেন্ট",
+    maxTokens: "সর্বাধিক আউটপুট টোকেন",
     defaultBriefingTitle: "ডিফল্ট ব্রিফিং",
     created: "{{time}} এ তৈরি",
     details: "বিবরণ",
@@ -713,6 +714,8 @@ export const bnIN = {
     segmentsInteger: "অবশ্যই একটি পূর্ণসংখ্যা হতে হবে",
     segmentsMin: "কমপক্ষে ৩টি সেগমেন্ট",
     segmentsMax: "সর্বোচ্চ ২০টি সেগমেন্ট",
+    maxTokensInteger: "একটি পূর্ণসংখ্যা হতে হবে",
+    maxTokensPositive: "একটি ধনাত্মক পূর্ণসংখ্যা হতে হবে",
     voiceIdRequired: "ভয়েস আইডি প্রয়োজন",
     backstoryRequired: "পটভূমি প্রয়োজন",
     personalityRequired: "ব্যক্তিত্ব প্রয়োজন",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index c13dd879..a126fc80 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -666,6 +666,7 @@ export const caES = {
     outlineModel: "Model d'esquema",
     transcriptModel: "Model de transcripció",
     segments: "Segments",
+    maxTokens: "Tokens màxims de sortida",
     defaultBriefingTitle: "Presentació per defecte",
     created: "Creat el {{time}}",
     details: "Detalls",
@@ -713,6 +714,8 @@ export const caES = {
     segmentsInteger: "Ha de ser un nombre enter",
     segmentsMin: "Almenys 3 segments",
     segmentsMax: "Màxim 20 segments",
+    maxTokensInteger: "Ha de ser un nombre enter",
+    maxTokensPositive: "Ha de ser un nombre enter positiu",
     voiceIdRequired: "Cal un ID de veu",
     backstoryRequired: "Cal una història de fons",
     personalityRequired: "Cal una personalitat",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 626ed275..95159411 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -669,6 +669,7 @@ export const deDE = {
     outlineModel: "Gliederungsmodell",
     transcriptModel: "Transkriptmodell",
     segments: "Segmente",
+    maxTokens: "Maximale Ausgabe-Tokens",
     defaultBriefingTitle: "Standard-Briefing",
     created: "Erstellt am {{time}}",
     details: "Details",
@@ -716,6 +717,8 @@ export const deDE = {
     segmentsInteger: "Muss eine ganze Zahl sein",
     segmentsMin: "Mindestens 3 Segmente",
     segmentsMax: "Maximal 20 Segmente",
+    maxTokensInteger: "Muss eine ganze Zahl sein",
+    maxTokensPositive: "Muss eine positive ganze Zahl sein",
     voiceIdRequired: "Stimmen-ID ist erforderlich",
     backstoryRequired: "Hintergrundgeschichte ist erforderlich",
     personalityRequired: "Persönlichkeit ist erforderlich",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index dff6440a..7496ae48 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -664,6 +664,7 @@ export const enUS = {
     outlineModel: "Outline model",
     transcriptModel: "Transcript model",
     segments: "Segments",
+    maxTokens: "Max output tokens",
     defaultBriefingTitle: "Default briefing",
     created: "Created at {{time}}",
     details: "Details",
@@ -711,6 +712,8 @@ export const enUS = {
     segmentsInteger: "Must be an integer",
     segmentsMin: "At least 3 segments",
     segmentsMax: "Maximum 20 segments",
+    maxTokensInteger: "Must be an integer",
+    maxTokensPositive: "Must be a positive integer",
     voiceIdRequired: "Voice ID is required",
     backstoryRequired: "Backstory is required",
     personalityRequired: "Personality is required",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 3504f6fc..142086a7 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -666,6 +666,7 @@ export const esES = {
     outlineModel: "Modelo de esquema",
     transcriptModel: "Modelo de transcripción",
     segments: "Segmentos",
+    maxTokens: "Tokens máximos de salida",
     defaultBriefingTitle: "Briefing predeterminado",
     created: "Creado el {{time}}",
     details: "Detalles",
@@ -713,6 +714,8 @@ export const esES = {
     segmentsInteger: "Debe ser un número entero",
     segmentsMin: "Al menos 3 segmentos",
     segmentsMax: "Máximo 20 segmentos",
+    maxTokensInteger: "Debe ser un número entero",
+    maxTokensPositive: "Debe ser un número entero positivo",
     voiceIdRequired: "El ID de voz es obligatorio",
     backstoryRequired: "La historia es obligatoria",
     personalityRequired: "La personalidad es obligatoria",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index b00c8eaf..f7c84f1f 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -666,6 +666,7 @@ export const frFR = {
     outlineModel: "Modèle de plan",
     transcriptModel: "Modèle de transcription",
     segments: "Segments",
+    maxTokens: "Jetons de sortie maximum",
     defaultBriefingTitle: "Briefing par défaut",
     created: "Créé à {{time}}",
     details: "Détails",
@@ -713,6 +714,8 @@ export const frFR = {
     segmentsInteger: "Doit être un nombre entier",
     segmentsMin: "Au moins 3 segments",
     segmentsMax: "20 segments maximum",
+    maxTokensInteger: "Doit être un nombre entier",
+    maxTokensPositive: "Doit être un nombre entier positif",
     voiceIdRequired: "L'ID de la voix est requis",
     backstoryRequired: "L'histoire (backstory) est requise",
     personalityRequired: "La personnalité est requise",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 3a8aadab..9b65db80 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -666,6 +666,7 @@ export const itIT = {
     outlineModel: "Modello outline",
     transcriptModel: "Modello trascrizione",
     segments: "Segmenti",
+    maxTokens: "Token massimi di output",
     defaultBriefingTitle: "Briefing predefinito",
     created: "Creato il {{time}}",
     details: "Dettagli",
@@ -713,6 +714,8 @@ export const itIT = {
     segmentsInteger: "Deve essere un numero intero",
     segmentsMin: "Almeno 3 segmenti",
     segmentsMax: "Massimo 20 segmenti",
+    maxTokensInteger: "Deve essere un numero intero",
+    maxTokensPositive: "Deve essere un numero intero positivo",
     voiceIdRequired: "L'ID voce è obbligatorio",
     backstoryRequired: "Il background è obbligatorio",
     personalityRequired: "La personalità è obbligatoria",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 7f4410d6..bedf8b42 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -666,6 +666,7 @@ export const jaJP = {
     outlineModel: "アウトラインモデル",
     transcriptModel: "トランスクリプトモデル",
     segments: "セグメント",
+    maxTokens: "最大出力トークン数",
     defaultBriefingTitle: "デフォルトブリーフィング",
     created: "{{time}}に作成",
     details: "詳細",
@@ -713,6 +714,8 @@ export const jaJP = {
     segmentsInteger: "整数である必要があります",
     segmentsMin: "最低3セグメント",
     segmentsMax: "最大20セグメント",
+    maxTokensInteger: "整数で入力してください",
+    maxTokensPositive: "正の整数で入力してください",
     voiceIdRequired: "Voice IDは必須です",
     backstoryRequired: "バックストーリーは必須です",
     personalityRequired: "パーソナリティは必須です",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 36c25bfc..3d50fcea 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -666,6 +666,7 @@ export const plPL = {
     outlineModel: "Model konspektu",
     transcriptModel: "Model transkrypcji",
     segments: "Segmenty",
+    maxTokens: "Maksymalna liczba tokenów wyjściowych",
     defaultBriefingTitle: "Domyślny briefing",
     created: "Utworzono {{time}}",
     details: "Szczegóły",
@@ -713,6 +714,8 @@ export const plPL = {
     segmentsInteger: "Musi być liczbą całkowitą",
     segmentsMin: "Co najmniej 3 segmenty",
     segmentsMax: "Maksymalnie 20 segmentów",
+    maxTokensInteger: "Musi być liczbą całkowitą",
+    maxTokensPositive: "Musi być dodatnią liczbą całkowitą",
     voiceIdRequired: "Identyfikator głosu jest wymagany",
     backstoryRequired: "Tło jest wymagane",
     personalityRequired: "Osobowość jest wymagana",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index c7a8d7ee..481c4286 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -666,6 +666,7 @@ export const ptBR = {
     outlineModel: "Modelo de outline",
     transcriptModel: "Modelo de transcrição",
     segments: "Segmentos",
+    maxTokens: "Máximo de tokens de saída",
     defaultBriefingTitle: "Briefing padrão",
     created: "Criado em {{time}}",
     details: "Detalhes",
@@ -713,6 +714,8 @@ export const ptBR = {
     segmentsInteger: "Deve ser um número inteiro",
     segmentsMin: "Mínimo de 3 segmentos",
     segmentsMax: "Máximo de 20 segmentos",
+    maxTokensInteger: "Deve ser um número inteiro",
+    maxTokensPositive: "Deve ser um número inteiro positivo",
     voiceIdRequired: "ID da voz é obrigatório",
     backstoryRequired: "História é obrigatória",
     personalityRequired: "Personalidade é obrigatória",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 5649a996..5ef31044 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -666,6 +666,7 @@ export const ruRU = {
     outlineModel: "Модель плана",
     transcriptModel: "Модель транскрипта",
     segments: "Сегменты",
+    maxTokens: "Максимум выходных токенов",
     defaultBriefingTitle: "Брифинг по умолчанию",
     created: "Создано {{time}}",
     details: "Детали",
@@ -713,6 +714,8 @@ export const ruRU = {
     segmentsInteger: "Должно быть целым числом",
     segmentsMin: "Минимум 3 сегмента",
     segmentsMax: "Максимум 20 сегментов",
+    maxTokensInteger: "Должно быть целым числом",
+    maxTokensPositive: "Должно быть положительным целым числом",
     voiceIdRequired: "Требуется ID голоса",
     backstoryRequired: "Требуется биография",
     personalityRequired: "Требуется описание личности",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index c1c32105..2f995b69 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -666,6 +666,7 @@ export const trTR = {
     outlineModel: "Ana hat modeli",
     transcriptModel: "Transkript modeli",
     segments: "Segmentler",
+    maxTokens: "Maksimum çıktı token sayısı",
     defaultBriefingTitle: "Varsayılan brifing",
     created: "{{time}} tarihinde oluşturuldu",
     details: "Ayrıntılar",
@@ -713,6 +714,8 @@ export const trTR = {
     segmentsInteger: "Tam sayı olmalıdır",
     segmentsMin: "En az 3 segment",
     segmentsMax: "En fazla 20 segment",
+    maxTokensInteger: "Tam sayı olmalıdır",
+    maxTokensPositive: "Pozitif bir tam sayı olmalıdır",
     voiceIdRequired: "Ses kimliği gereklidir",
     backstoryRequired: "Geçmiş gereklidir",
     personalityRequired: "Kişilik gereklidir",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 00c4ec21..2d18b163 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -666,6 +666,7 @@ export const zhCN = {
     outlineModel: "大纲模型",
     transcriptModel: "脚本模型",
     segments: "分段数量",
+    maxTokens: "最大输出令牌数",
     defaultBriefingTitle: "默认简报",
     created: "创建于 {{time}}",
     details: "详情",
@@ -713,6 +714,8 @@ export const zhCN = {
     segmentsInteger: "必须是整数",
     segmentsMin: "至少包含 3 个分段",
     segmentsMax: "最多包含 20 个分段",
+    maxTokensInteger: "必须为整数",
+    maxTokensPositive: "必须为正整数",
     voiceIdRequired: "必须填写声音 ID",
     backstoryRequired: "必须填写背景故事",
     personalityRequired: "必须填写性格描述",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index e65ee148..21bd2ca2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -666,6 +666,7 @@ export const zhTW = {
     outlineModel: "大綱模型",
     transcriptModel: "腳本模型",
     segments: "分段數量",
+    maxTokens: "最大輸出權杖數",
     defaultBriefingTitle: "預設簡報",
     created: "建立於 {{time}}",
     details: "詳情",
@@ -713,6 +714,8 @@ export const zhTW = {
     segmentsInteger: "必須是整數",
     segmentsMin: "至少包含 3 個分段",
     segmentsMax: "最多包含 20 個分段",
+    maxTokensInteger: "必須為整數",
+    maxTokensPositive: "必須為正整數",
     voiceIdRequired: "必須填寫聲音 ID",
     backstoryRequired: "必須填寫背景故事",
     personalityRequired: "必須填寫性格描述",
diff --git a/frontend/src/lib/types/podcasts.ts b/frontend/src/lib/types/podcasts.ts
index f75fb60e..bcf03a42 100644
--- a/frontend/src/lib/types/podcasts.ts
+++ b/frontend/src/lib/types/podcasts.ts
@@ -21,6 +21,7 @@ export interface EpisodeProfile {
   language?: string | null
   default_briefing: string
   num_segments: number
+  max_tokens?: number | null
 }
 
 export interface SpeakerVoiceConfig {

From 16c9c9d5358d012eb8365e2afa0e6da6580e4971 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Jul 2026 12:22:19 -0300
Subject: [PATCH 219/345] fix(sources): cap error text surfaced to clients
 (#1140)

* fix(sources): cap error text surfaced to clients

Source processing status (get_source_status) and sync-processing failures
returned the raw command/result error_message to clients unbounded, which
could leak arbitrary internal exception text and didn't match the error
capping applied elsewhere in the API.

Add a None-safe _truncate_error helper (200-char cap, ellipsis when cut)
and apply it on both paths. Adds focused unit tests for the helper.

Closes #1136

* test: narrow Optional return before assertions to satisfy mypy
---
 api/routers/sources.py                   | 17 ++++++++--
 tests/test_error_message_sanitization.py | 41 ++++++++++++++++++++++++
 2 files changed, 56 insertions(+), 2 deletions(-)

diff --git a/api/routers/sources.py b/api/routers/sources.py
index c7ff97cd..a7abb149 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -71,6 +71,19 @@ async def _assert_file_supported(file_path: str) -> None:
             detail = f"{detail} (detected type: {support.identified_type})"
         raise UnsupportedTypeException(detail)
 
+
+def _truncate_error(msg: Optional[str], limit: int = 200) -> Optional[str]:
+    """Cap error text surfaced to clients.
+
+    Command/processing failures can carry arbitrary internal exception text;
+    return at most ``limit`` characters so a raw traceback message can't leak
+    to the API response. ``None`` passes through unchanged.
+    """
+    if not msg:
+        return msg
+    return msg if len(msg) <= limit else msg[:limit] + "…"
+
+
 SOURCE_SORT_FIELDS = {
     "created": "created",
     "updated": "updated",
@@ -326,7 +339,7 @@ async def get_sources(
                 processing_info = {
                     "started_at": execution_metadata.get("started_at"),
                     "completed_at": execution_metadata.get("completed_at"),
-                    "error": command.get("error_message"),
+                    "error": _truncate_error(command.get("error_message")),
                 }
             elif command:
                 # Command exists but FETCH failed to resolve it (broken reference)
@@ -603,7 +616,7 @@ async def _create_source_sync_path(
                 pass
             raise HTTPException(
                 status_code=500,
-                detail=f"Processing failed: {result.error_message}",
+                detail=f"Processing failed: {_truncate_error(result.error_message)}",
             )
 
         # Get the processed source
diff --git a/tests/test_error_message_sanitization.py b/tests/test_error_message_sanitization.py
index 6973e4e8..d3882cc6 100644
--- a/tests/test_error_message_sanitization.py
+++ b/tests/test_error_message_sanitization.py
@@ -180,3 +180,44 @@ class TestPodcastServiceDoesNotLeakExceptionText:
         assert exc_info.value.status_code == 500
         assert SECRET not in exc_info.value.detail
         assert exc_info.value.detail == "Failed to submit podcast generation job"
+
+
+class TestTruncateErrorHelper:
+    """`_truncate_error` caps client-facing error text surfaced by the source
+    status and sync-processing paths (#1136)."""
+
+    def test_none_passes_through(self):
+        from api.routers.sources import _truncate_error
+
+        assert _truncate_error(None) is None
+
+    def test_empty_string_passes_through(self):
+        from api.routers.sources import _truncate_error
+
+        assert _truncate_error("") == ""
+
+    def test_short_message_unchanged(self):
+        from api.routers.sources import _truncate_error
+
+        assert _truncate_error("boom") == "boom"
+
+    def test_message_at_limit_unchanged(self):
+        from api.routers.sources import _truncate_error
+
+        msg = "x" * 200
+        assert _truncate_error(msg) == msg
+
+    def test_long_message_truncated_with_ellipsis(self):
+        from api.routers.sources import _truncate_error
+
+        result = _truncate_error(SECRET + "x" * 500)
+        assert result is not None
+        # capped at limit + the single-character ellipsis
+        assert len(result) == 201
+        assert result.endswith("…")
+        assert result.startswith(SECRET[:50])
+
+    def test_custom_limit(self):
+        from api.routers.sources import _truncate_error
+
+        assert _truncate_error("abcdefghij", limit=4) == "abcd…"

From d6c33151ab70ea23cfcf713703f037b795174591 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Jul 2026 12:28:48 -0300
Subject: [PATCH 220/345] feat(worker): expose OPEN_NOTEBOOK_WORKER_MAX_TASKS
 to control worker concurrency (#1141)

The worker processes all queued tasks up to a fixed concurrency of 5, which
overloads single-GPU / local-LLM setups and triggers rate limits (#893). The
surreal-commands worker already accepts --max-tasks; wire it to a new
OPEN_NOTEBOOK_WORKER_MAX_TASKS env var (default 5, set 1 for sequential) at
every launch point.

- Makefile (worker-start, start-all): --max-tasks "$${VAR:-5}" (Make-escaped)
- dev-init.sh: POSIX ${VAR:-5} default expansion
- supervisord.conf: wrap in sh -c so the shell expands the var (command= does
  not run through a shell)
- docker-compose.yml: commented environment example
- .env.example + environment-reference.md: document it, incl. the launch-time
  sourcing behavior

Also fixes a phantom doc entry: SURREAL_COMMANDS_MAX_TASKS was documented but
is not read anywhere (the worker's --max-tasks Typer option has no envvar);
replaced with the real OPEN_NOTEBOOK_WORKER_MAX_TASKS.

Closes #893
---
 .env.example                                  | 6 ++++++
 Makefile                                      | 4 ++--
 dev-init.sh                                   | 2 +-
 docker-compose.yml                            | 5 +++++
 docs/5-CONFIGURATION/environment-reference.md | 6 ++++--
 supervisord.conf                              | 4 +++-
 6 files changed, 21 insertions(+), 6 deletions(-)

diff --git a/.env.example b/.env.example
index 325cf78a..784bf6e4 100644
--- a/.env.example
+++ b/.env.example
@@ -54,6 +54,12 @@ SURREAL_DATABASE=open_notebook
 # CHUNK_SIZE=1500
 # CHUNK_OVERLAP=150
 
+# Max background tasks the worker runs concurrently (default 5). Set to 1 for
+# sequential processing on single-GPU / local-LLM setups to avoid rate limits.
+# NOTE: consumed at worker launch, not by the app — for `make`/dev-init export
+# it in your shell; for Docker set it under `environment:` in docker-compose.yml.
+# OPEN_NOTEBOOK_WORKER_MAX_TASKS=1
+
 # Maximum upload/request body size in MB (default: 100). Raise this if you
 # need to upload larger audio/video files. A fronting reverse proxy's own
 # limit (e.g. nginx client_max_body_size) still applies and should be raised
diff --git a/Makefile b/Makefile
index 420df3f9..6f1bafe1 100644
--- a/Makefile
+++ b/Makefile
@@ -162,7 +162,7 @@ worker: worker-start
 
 worker-start:
 	@echo "Starting surreal-commands worker..."
-	uv run --env-file .env surreal-commands-worker --import-modules commands
+	uv run --env-file .env surreal-commands-worker --import-modules commands --max-tasks "$${OPEN_NOTEBOOK_WORKER_MAX_TASKS:-5}"
 
 worker-stop:
 	@echo "Stopping surreal-commands worker..."
@@ -182,7 +182,7 @@ start-all:
 	@uv run run_api.py &
 	@sleep 3
 	@echo "⚙️ Starting background worker..."
-	@uv run --env-file .env surreal-commands-worker --import-modules commands &
+	@uv run --env-file .env surreal-commands-worker --import-modules commands --max-tasks "$${OPEN_NOTEBOOK_WORKER_MAX_TASKS:-5}" &
 	@sleep 2
 	@echo "🌐 Starting Next.js frontend..."
 	@echo "✅ All services started!"
diff --git a/dev-init.sh b/dev-init.sh
index 4bd5c67d..277fc35a 100755
--- a/dev-init.sh
+++ b/dev-init.sh
@@ -29,7 +29,7 @@ sleep 3
 
 # Start background worker in background
 echo "Starting background worker..."
-uv run --env-file .env surreal-commands-worker --import-modules commands &
+uv run --env-file .env surreal-commands-worker --import-modules commands --max-tasks "${OPEN_NOTEBOOK_WORKER_MAX_TASKS:-5}" &
 sleep 2
 
 # Start frontend (foreground)
diff --git a/docker-compose.yml b/docker-compose.yml
index 9ed75e35..4b489cc4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -48,6 +48,11 @@ services:
       # - OPEN_NOTEBOOK_ENABLE_DOCLING=true    # Docling engine + OCR + image sources (large ML stack)
       # - OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true   # local Crawl4AI (bundles a Chromium browser)
       # - CRAWL4AI_API_URL=http://crawl4ai:11235  # use a remote Crawl4AI server instead (no local install)
+
+      # OPTIONAL: max concurrent background tasks the worker processes at once
+      # (default 5). Set to 1 for sequential processing on single-GPU / local
+      # LLM setups to avoid overloading the model with parallel requests.
+      # - OPEN_NOTEBOOK_WORKER_MAX_TASKS=1
     volumes:
       - ./notebook_data:/app/data
     depends_on:
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 109d17fb..577c7f6a 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -45,11 +45,13 @@ Comprehensive list of all environment variables available in Open Notebook.
 
 ---
 
-## Database: Concurrency
+## Worker: Concurrency
 
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
-| `SURREAL_COMMANDS_MAX_TASKS` | No | 5 | Maximum concurrent database tasks |
+| `OPEN_NOTEBOOK_WORKER_MAX_TASKS` | No | 5 | Maximum number of background tasks (source processing, embeddings, podcasts) the worker runs concurrently. Passed to the worker as `--max-tasks` at launch. Set to `1` for **sequential processing** on single-GPU or local-LLM setups, where parallel requests overload the model and trigger rate limits. |
+
+> **Read at worker launch, from the process environment.** In Docker this comes from the container environment — set it under `environment:` in `docker-compose.yml` (or your orchestrator). For local `make worker-start` / `dev-init.sh`, export it in your shell (e.g. `export OPEN_NOTEBOOK_WORKER_MAX_TASKS=1`) — it is consumed by the shell before the app loads `.env`, so a value placed only in `.env` will not apply to these local launch paths.
 
 ---
 
diff --git a/supervisord.conf b/supervisord.conf
index 6862da0a..267eb39a 100644
--- a/supervisord.conf
+++ b/supervisord.conf
@@ -20,7 +20,9 @@ autostart=true
 startsecs=3
 
 [program:worker]
-command=uv run --no-sync surreal-commands-worker --import-modules commands
+; sh -c so the shell expands ${OPEN_NOTEBOOK_WORKER_MAX_TASKS:-5} (supervisord's
+; own command= does not run through a shell). Falls back to 5 when unset.
+command=sh -c "uv run --no-sync surreal-commands-worker --import-modules commands --max-tasks ${OPEN_NOTEBOOK_WORKER_MAX_TASKS:-5}"
 stdout_logfile=/dev/stdout
 stdout_logfile_maxbytes=0
 stderr_logfile=/dev/stderr

From 6bbd0030853a43ddb2ec2205110a6683f5d88a24 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 14 Jul 2026 13:41:56 -0300
Subject: [PATCH 221/345] ci: gate the dev Docker build on image-affecting
 paths (#1143)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

build-regular is a required status check that ran a full (several-minute)
Docker build on every PR, including docs/config-only PRs where the image is
byte-for-byte identical (#1134, surfaced merging #1129).

Add a paths-filter 'changes' job and gate build-regular's build steps on
'push to main OR image-affecting paths changed'. The job itself always runs,
so the required check always reports — avoiding the 'path-filtered required
check never reports -> merge deadlock' trap (a workflow-level paths filter
would have caused exactly that). Docs/config PRs now report build-regular
green in seconds; PRs touching Dockerfile/deps/app/frontend build as before.
Release build (build-and-release) is untouched.

Closes #1134
---
 .github/workflows/build-dev.yml | 45 ++++++++++++++++++++++++++++++++-
 1 file changed, 44 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index a751065f..14b1aa04 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -72,13 +72,51 @@ jobs:
             echo "This is a PR or manual run - test build only"
           fi
 
+  # Detect whether this PR touches anything that ends up in the Docker image.
+  # build-regular is a required status check, so it must always REPORT — the
+  # expensive build steps below are gated on this output instead of filtering
+  # the workflow trigger (a path-filtered required check never reports and
+  # deadlocks merge, even for admins). On push to main the build always runs.
+  changes:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
+    outputs:
+      image: ${{ steps.filter.outputs.image }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Detect image-affecting changes
+        uses: dorny/paths-filter@v3
+        id: filter
+        with:
+          filters: |
+            image:
+              - 'Dockerfile*'
+              - 'pyproject.toml'
+              - 'uv.lock'
+              - 'open_notebook/**'
+              - 'api/**'
+              - 'commands/**'
+              - 'frontend/**'
+              - '.github/workflows/build-dev.yml'
+
+  # The job always runs (so the required `build-regular` check always reports),
+  # but every build step is gated on: push to main OR the PR touched an
+  # image-affecting path (needs.changes.outputs.image). Uses needs.* directly in
+  # each step `if:` (fully supported) rather than a job-level env indirection.
   build-regular:
-    needs: extract-version
+    needs: [extract-version, changes]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
         uses: actions/checkout@v6
 
+      - name: Skip notice
+        if: needs.extract-version.outputs.is_push_to_main != 'true' && needs.changes.outputs.image != 'true'
+        run: echo "No image-affecting paths changed — skipping the Docker build. Reporting success."
+
       - name: Free up disk space
         if: needs.extract-version.outputs.is_push_to_main == 'true'
         run: |
@@ -90,6 +128,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
+        if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
         uses: docker/setup-buildx-action@v4
 
       - name: Login to GitHub Container Registry
@@ -108,6 +147,7 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
+        if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
         uses: actions/cache@v5
         with:
           path: /tmp/.buildx-cache-dev
@@ -117,6 +157,7 @@ jobs:
 
       - name: Prepare Docker tags
         id: tags
+        if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
         run: |
           if [[ "${{ needs.extract-version.outputs.is_push_to_main }}" == "true" ]]; then
             # Push to main: build and push v1-dev tags
@@ -135,6 +176,7 @@ jobs:
           fi
 
       - name: Build and push regular image
+        if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
         uses: docker/build-push-action@v7
         with:
           context: .
@@ -147,6 +189,7 @@ jobs:
           cache-to: type=local,dest=/tmp/.buildx-cache-dev-new,mode=max
 
       - name: Move cache
+        if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
         run: |
           rm -rf /tmp/.buildx-cache-dev
           mv /tmp/.buildx-cache-dev-new /tmp/.buildx-cache-dev

From 862419e7feef8f923118a05957a606ed03228be5 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 17 Jul 2026 09:04:46 -0300
Subject: [PATCH 222/345] docs(readme): add link to follow @lfnovo on X (#1158)

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 4fe9418d..53cbb63a 100644
--- a/README.md
+++ b/README.md
@@ -23,6 +23,8 @@
     <br />
     <a href="https://www.open-notebook.ai"><strong>Checkout our website »</strong></a>
     <br />
+    Follow <a href="https://x.com/lfnovo">@lfnovo on X</a> for updates
+    <br />
     <br />
     <a href="docs/0-START-HERE/index.md">📚 Get Started</a>
     ·
@@ -328,6 +330,7 @@ See the [open issues](https://github.com/lfnovo/open-notebook/issues) for a full
 
 ### Join the Community
 - 💬 **[Discord Server](https://discord.gg/37XJPXfz2w)** - Get help, share ideas, and connect with other users
+- 𝕏 **[Follow @lfnovo on X](https://x.com/lfnovo)** - Project updates and news from the maintainer
 - 🐛 **[GitHub Issues](https://github.com/lfnovo/open-notebook/issues)** - Report bugs and request features
 - ⭐ **Star this repo** - Show your support and help others discover Open Notebook
 
@@ -353,6 +356,7 @@ Open Notebook is MIT licensed. See the [LICENSE](LICENSE) file for details.
 
 **Community Support**:
 - 💬 [Discord Server](https://discord.gg/37XJPXfz2w) - Get help, share ideas, and connect with users
+- 𝕏 [Follow @lfnovo on X](https://x.com/lfnovo) - Project updates and news from the maintainer
 - 🐛 [GitHub Issues](https://github.com/lfnovo/open-notebook/issues) - Report bugs and request features
 - 🌐 [Website](https://www.open-notebook.ai) - Learn more about the project
 

From df106fabe6d722618bafd0d08209a2bb5648792d Mon Sep 17 00:00:00 2001
From: okaken <1219okaken@gmail.com>
Date: Sat, 18 Jul 2026 00:57:01 +0900
Subject: [PATCH 223/345] fix(i18n): improve Japanese (ja-JP) translation
 quality (#998)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(i18n): improve Japanese translation quality

- Replace 'トランスフォーメーション' with natural '変換'
- Improve various phrasing for natural Japanese
- Add spacing in duration format
- Refine accessibility labels and error messages

* fix(i18n): remove redundant 含める in ja-JP includeAllInsights

---------

Co-authored-by: Lovin <lovin@example.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/lib/locales/ja-JP/index.ts | 70 ++++++++++++-------------
 1 file changed, 35 insertions(+), 35 deletions(-)

diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index bedf8b42..21282a31 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -110,7 +110,7 @@ export const jaJP = {
     individualAnswers: "個別回答（{{count}}件）",
     finalAnswer: "最終回答",
     notebookLabel: "ノートブック: {{name}}",
-    itemNotFound: "この{{type}}は見つかりませんでした",
+    itemNotFound: "指定された{{type}}は見つかりませんでした",
     contentUnavailable: {
       notFoundTitle: "このコンテンツは存在しません",
       notFoundDescription: "削除された可能性があります。過去のメッセージ内の参照は、すでに削除されたコンテンツを指している場合があります。",
@@ -118,11 +118,11 @@ export const jaJP = {
       errorDescription: "読み込み中に問題が発生しました。もう一度お試しください。",
     },
     accessibility: {
-      transformationViews: "トランスフォーメーション表示",
-      searchKB: "ナレッジベースに質問・検索",
-      enterQuestion: "ナレッジベースへの質問を入力",
+      transformationViews: "変換表示",
+      searchKB: "ナレッジベース内を検索・質問",
+      enterQuestion: "ナレッジベースへの質問を入力してください",
       enterSearch: "検索クエリを入力",
-      searchKBBtn: "ナレッジベースを検索",
+      searchKBBtn: "ナレッジベース内を検索",
       podcastViews: "ポッドキャスト表示",
       ytVideo: "YouTube動画",
       askResponse: "質問への回答",
@@ -130,15 +130,15 @@ export const jaJP = {
     },
     url: "URL",
     errorDetails: "エラー詳細",
-    editTransformation: "トランスフォーメーションを編集",
+    editTransformation: "変換を編集",
     retry: "再試行",
     traditionalChinese: "繁體中文",
     portuguese: "Português",
     completed: "完了",
     saveSuccess: "保存しました",
     contextModes: {
-      off: "チャットに含めない",
-      insights: "インサイトのみ",
+      off: "含めない",
+      insights: "インサイトのみ含める",
       full: "全文",
       clickToCycle: "クリックで切り替え",
     },
@@ -147,7 +147,7 @@ export const jaJP = {
   apiErrors: {
     notebookNotFound: "ノートブックが見つかりません",
     sourceNotFound: "ソースが見つかりません",
-    transformationNotFound: "トランスフォーメーションが見つかりません",
+    transformationNotFound: "変換が見つかりません",
     fileUploadFailed: "ファイルのアップロードに失敗しました",
     urlRequired: "リンクタイプにはURLが必要です",
     contentRequired: "テキストタイプにはコンテンツが必要です",
@@ -220,8 +220,8 @@ export const jaJP = {
     askAndSearch: "質問と検索",
     podcasts: "ポッドキャスト",
     models: "モデル",
-    transformations: "トランスフォーメーション",
-    transformation: "トランスフォーメーション",
+    transformations: "変換",
+    transformation: "変換",
     settings: "設定",
     advanced: "詳細設定",
     nav: "ナビゲーション",
@@ -356,9 +356,9 @@ export const jaJP = {
     fileUnavailable: "ファイルが利用できません",
     preparing: "準備中...",
     generateNewInsight: "新しいインサイトを生成",
-    selectTransformation: "トランスフォーメーションを選択...",
+    selectTransformation: "変換を選択...",
     noInsightsYet: "インサイトがまだありません",
-    createFirstInsight: "上のトランスフォーメーションを使って最初のインサイトを作成しましょう",
+    createFirstInsight: "上の変換を使って最初のインサイトを作成しましょう",
     viewInsight: "インサイトを表示",
     deleteInsight: "インサイトを削除",
     deleteInsightConfirm: "このインサイトを削除しますか？この操作は元に戻せません。",
@@ -385,7 +385,7 @@ export const jaJP = {
     htmlDetected: "HTMLコンテンツが検出されました。処理後にMarkdownに変換されます。",
     titlePlaceholder: "ソースにわかりやすいタイトルを付けてください",
     batchTitlesAuto: "タイトルは各ソースごとに自動生成されます。",
-    batchCommonSettings: "同じノートブックとトランスフォーメーションがすべてのアイテムに適用されます。",
+    batchCommonSettings: "同じノートブックと変換がすべてのアイテムに適用されます。",
     urlsCount: "{{count}}件のURL",
     filesCount: "{{count}}件のファイル",
     addSource: "ソースを追加",
@@ -481,7 +481,7 @@ export const jaJP = {
     ask: "質問する",
     processing: "処理中...",
     saveToNotebooks: "ノートブックに保存",
-    searchDesc: "特定のキーワードやコンセプトでナレッジベースを検索",
+    searchDesc: "特定のキーワードやコンセプトでナレッジベース内を検索",
     enterSearchPlaceholder: "検索クエリを入力...",
     pressToSearch: "Enterで検索",
     searchType: "検索タイプ",
@@ -502,7 +502,7 @@ export const jaJP = {
     searchAndAsk: "検索と質問",
     searchResultsFor: "「{{query}}」の検索結果",
     askAbout: "「{{query}}」について質問",
-    orSearchKb: "またはナレッジベースを検索",
+    orSearchKb: "またはナレッジベース内を検索",
     saving: "保存中...",
     advancedModelTitle: "詳細モデル選択",
     advancedModelDesc: "質問処理の各段階で使用するモデルを選択",
@@ -821,35 +821,35 @@ export const jaJP = {
     },
   },
   transformations: {
-    title: "トランスフォーメーション",
-    desc: "トランスフォーメーションはLLMがソースを処理してインサイト、要約などを抽出するためのプロンプトです。",
+    title: "変換",
+    desc: "変換はLLMがソースを処理してインサイト、要約などを抽出するためのプロンプトです。",
     workspace: "ワークスペースを選択",
     playground: "プレイグラウンド",
-    defaultPrompt: "デフォルトトランスフォーメーションプロンプト",
-    defaultPromptDesc: "これはすべてのトランスフォーメーションプロンプトに追加されます",
-    defaultPromptPlaceholder: "デフォルトのトランスフォーメーション指示を入力...",
-    listTitle: "カスタムトランスフォーメーション",
+    defaultPrompt: "デフォルト変換プロンプト",
+    defaultPromptDesc: "これはすべての変換プロンプトに追加されます",
+    defaultPromptPlaceholder: "デフォルトの変換指示を入力...",
+    listTitle: "カスタム変換",
     createNew: "新規作成",
     inputLabel: "入力テキスト",
     inputPlaceholder: "変換するテキストを入力...",
     outputLabel: "出力",
-    runTest: "トランスフォーメーションを実行",
+    runTest: "変換を実行",
     running: "実行中...",
-    selectToStart: "トランスフォーメーションを選択して開始",
+    selectToStart: "変換を選択して開始",
     name: "名前",
     namePlaceholder: "一意の識別子、例: key_topics",
     titlePlaceholder: "表示タイトル、空欄の場合は名前を使用",
-    promptPlaceholder: "このトランスフォーメーションを実行するプロンプトを書いてください...",
-    descriptionPlaceholder: "このトランスフォーメーションの機能を説明してください。",
+    promptPlaceholder: "この変換を実行するプロンプトを書いてください...",
+    descriptionPlaceholder: "この変換の機能を説明してください。",
     suggestDefault: "新しいソースでデフォルトで提案",
     promptHint: "プロンプトはソースコンテンツを念頭に置いて書いてください。モデルに要約、インサイトの抽出、テーブルなどの構造化出力の生成を依頼できます。",
-    createSuccess: "トランスフォーメーションを作成しました",
-    updateSuccess: "トランスフォーメーションを更新しました",
-    deleteSuccess: "トランスフォーメーションを削除しました",
-    noTransformations: "トランスフォーメーションがまだありません",
-    createOne: "開始するにはトランスフォーメーションを作成してください",
+    createSuccess: "変換を作成しました",
+    updateSuccess: "変換を更新しました",
+    deleteSuccess: "変換を削除しました",
+    noTransformations: "変換がまだありません",
+    createOne: "開始するには変換を作成してください",
     selectModel: "モデルを選択",
-    deleteConfirm: "このトランスフォーメーションを削除しますか？",
+    deleteConfirm: "この変換を削除しますか？",
     model: "モデル",
     systemPrompt: "システムプロンプト",
     overrideModelDesc: "このチャットセッションのデフォルトモデルを上書きします。空欄の場合はシステムデフォルトを使用します。",
@@ -878,8 +878,8 @@ export const jaJP = {
     requiredModelPlaceholder: "⚠️ 必須 - モデルを選択",
     chatModelLabel: "チャットモデル",
     chatModelDesc: "チャット会話に使用",
-    transformationModelLabel: "トランスフォーメーションモデル",
-    transformationModelDesc: "要約、インサイト、トランスフォーメーションに使用",
+    transformationModelLabel: "変換モデル",
+    transformationModelDesc: "要約、インサイト、変換に使用",
     toolsModelLabel: "ツールモデル",
     toolsModelDesc: "関数呼び出しに使用 - OpenAIまたはAnthropicを推奨",
     largeContextModelLabel: "大規模コンテキストモデル",
@@ -915,7 +915,7 @@ export const jaJP = {
   },
   apiKeys: {
     title: "独自のAPIキーでAIを設定",
-    description: "APIキーをデータベースに安全に保存し、Open NotebookでAIプロバイダーを有効にします。",
+    description: "APIキーをデータベースに安全に保存し、AIプロバイダーをOpen Notebookで利用可能にします。",
     encryptionRequired: "暗号化キーが設定されていません",
     encryptionRequiredDescription: "OPEN_NOTEBOOK_ENCRYPTION_KEY 環境変数に任意の秘密文字列を設定して、データベースへのAPIキーの保存を有効にしてください。",
     configured: "設定済み",

From 37fe161e2e6ac38c51f268e07787df159a5d58b0 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 09:53:47 -0300
Subject: [PATCH 224/345] feat(models): offer newer ElevenLabs models in
 discovery (#1167)

* feat(models): offer newer ElevenLabs models in discovery

Add eleven_v3, eleven_flash_v2_5, eleven_flash_v2 (TTS) and scribe_v2 (STT)
to ElevenLabs model discovery. Esperanto passes model_id through to the
ElevenLabs API, so no provider changes are required.

* docs(changelog): reference PR #1167
---
 CHANGELOG.md                        |  3 +++
 open_notebook/ai/model_discovery.py | 12 +++++++-----
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 59f6ab13..ac5f1cb1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
+
 ## [1.13.0] - 2026-07-13
 
 ### Added
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 8fd4de64..9039d617 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -489,8 +489,11 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
     if not api_key:
         return []
 
-    # ElevenLabs TTS models + the Scribe STT model
+    # ElevenLabs TTS models + the Scribe STT models
     elevenlabs_models = [
+        "eleven_v3",
+        "eleven_flash_v2_5",
+        "eleven_flash_v2",
         "eleven_multilingual_v2",
         "eleven_turbo_v2_5",
         "eleven_turbo_v2",
@@ -502,10 +505,9 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
         DiscoveredModel(name=m, provider="elevenlabs", model_type="text_to_speech")
         for m in elevenlabs_models
     ]
-    discovered.append(
-        DiscoveredModel(
-            name="scribe_v1", provider="elevenlabs", model_type="speech_to_text"
-        )
+    discovered.extend(
+        DiscoveredModel(name=m, provider="elevenlabs", model_type="speech_to_text")
+        for m in ("scribe_v2", "scribe_v1")
     )
     return discovered
 

From d12220224b683b3856469e60e68b3e5c3280c663 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 12:15:56 -0300
Subject: [PATCH 225/345] docs: use OLLAMA_API_BASE in quick-start and compose
 examples (#1172)

The quick-start guide and the Ollama compose examples set OLLAMA_BASE_URL,
but no code path reads that variable. The authoritative env var is
OLLAMA_API_BASE (see open_notebook/ai/provider_registry.py). Following the
examples verbatim left Ollama permanently unavailable with no error.

Renames OLLAMA_BASE_URL to OLLAMA_API_BASE in the three remaining shipped
files, keeping the value unchanged.
---
 docs/0-START-HERE/quick-start-local.md | 2 +-
 examples/docker-compose-full-local.yml | 2 +-
 examples/docker-compose-ollama.yml     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index 986e17ac..e8b4da6e 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -60,7 +60,7 @@ services:
       - SURREAL_DATABASE=open_notebook
 
       # Ollama (required when running Ollama via Docker, as in this compose file)
-      - OLLAMA_BASE_URL=http://ollama:11434
+      - OLLAMA_API_BASE=http://ollama:11434
     volumes:
       - ./notebook_data:/app/data
     depends_on:
diff --git a/examples/docker-compose-full-local.yml b/examples/docker-compose-full-local.yml
index 1d2d675b..b20ef479 100644
--- a/examples/docker-compose-full-local.yml
+++ b/examples/docker-compose-full-local.yml
@@ -86,7 +86,7 @@ services:
       - SURREAL_DATABASE=open_notebook
 
       # Ollama connection (optional, can also configure via UI)
-      - OLLAMA_BASE_URL=http://ollama:11434
+      - OLLAMA_API_BASE=http://ollama:11434
     volumes:
       - ./notebook_data:/app/data
     depends_on:
diff --git a/examples/docker-compose-ollama.yml b/examples/docker-compose-ollama.yml
index 01ffda61..7788c64d 100644
--- a/examples/docker-compose-ollama.yml
+++ b/examples/docker-compose-ollama.yml
@@ -52,7 +52,7 @@ services:
       - SURREAL_DATABASE=open_notebook
 
       # Ollama connection
-      - OLLAMA_BASE_URL=http://ollama:11434
+      - OLLAMA_API_BASE=http://ollama:11434
     volumes:
       - ./notebook_data:/app/data
     depends_on:

From 6556bfc7a7d806a87a560de80df0dd2f8c0d058d Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 12:37:02 -0300
Subject: [PATCH 226/345] fix: honor per-transformation model selection at
 execution time (#1173)

Each transformation persists its own model_id, but neither call site that
invokes the transformation graph passed a config, so run_transformation()
always read a None model and fell back to the global default.

Forward transformation.model_id through the LangGraph `configurable` config
at both call sites (source-processing graph and the run_transformation
background command). An unset model_id remains None and falls back to the
default via the existing branch in provision_langchain_model().

Closes #1137
---
 CHANGELOG.md                   |  1 +
 commands/source_commands.py    |  4 +-
 open_notebook/graphs/source.py |  3 +-
 tests/test_graphs.py           | 94 ++++++++++++++++++++++++++++++++++
 4 files changed, 100 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index ac5f1cb1..51a0f1aa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The legacy provider/model string fields on podcast profiles (`outline_provider`, `outline_model`, `transcript_provider`, `transcript_model` on episode profiles; `tts_provider`, `tts_model` on speaker profiles) are gone from the database, the API and the UI — the app has ignored them since the Model registry references landed in v1.11. Migration 22 first best-effort maps any profile whose `outline_llm`/`transcript_llm`/`voice_model` reference is still empty to an existing model record (matching provider + name + type; no auto-creation, since a migration must not touch credentials), then drops the six columns; the startup data migration that used to retry this mapping on every boot (`open_notebook/podcasts/migration.py`) was deleted. Accepted trade-off: profiles whose mapping never converged (e.g. the provider credential was never configured) lose the legacy strings and stay unresolved — they were already non-functional and the UI already flags them as needing model selection, so you just re-pick the models in the profile form once (#1107)
 
 ### Fixed
+- Per-transformation model selection now actually takes effect. A transformation's assigned `model_id` was persisted but ignored at execution time: both call sites that run the transformation graph (the source-processing graph and the `run_transformation` background command) invoked it without a config, so the graph node always read a `None` model and fell back to the global default transformation model. Both now forward `transformation.model_id` through the LangGraph `configurable` config, so a transformation configured to use a specific model runs on that model (an unset `model_id` still falls back to the default) (#1137)
 - Uploading a file content-core can't extract now fails immediately at ingestion with a clear `415 Unsupported Media Type` error that names the detected MIME type, instead of enqueueing a background job that retried up to 15 times over ~1 hour before surfacing a generic "Failed" with no actionable detail. The pre-flight uses content-core 2.x's header-only `check_file_support()` — the same routing real extraction uses, so the verdict can't disagree with what would happen downstream — and the source-retry endpoint is guarded the same way; unexpected check errors (e.g. a file removed before a retry) fall through to normal extraction rather than becoming a hard rejection (#975)
 - Podcast episode cards no longer show "— / —" for the outline, transcript and speaker model rows on new episodes: the API now resolves the snapshot's model references (`outline_llm`/`transcript_llm`/`voice_model`) to provider/name display fields at serialization time — batched into a single query per request, so listing episodes never does a per-row model lookup — and the card falls back to the legacy snapshot strings for old episodes and degrades to "—" when a referenced model was deleted (#1114)
 - Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)
diff --git a/commands/source_commands.py b/commands/source_commands.py
index 80400e90..d9ebbe59 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -1,6 +1,7 @@
 import time
 from typing import Any, Dict, List, Optional
 
+from langchain_core.runnables import RunnableConfig
 from loguru import logger
 from surreal_commands import CommandInput, CommandOutput, command
 
@@ -222,7 +223,8 @@ async def run_transformation_command(
         # LangGraph accepts a partial state dict at runtime, but its typed
         # overloads require the full state type (langgraph typing limitation).
         await transform_graph.ainvoke(  # type: ignore[call-overload]
-            input=dict(source=source, transformation=transformation)
+            input=dict(source=source, transformation=transformation),
+            config=RunnableConfig(configurable={"model_id": transformation.model_id}),
         )
 
         processing_time = time.time() - start_time
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index c3fc610a..f8a36f1d 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -230,7 +230,8 @@ async def transform_content(state: TransformationState) -> Optional[dict]:
     # LangGraph accepts a partial state dict at runtime, but its typed
     # overloads require the full state type (langgraph typing limitation).
     result = await transform_graph.ainvoke(  # type: ignore[call-overload]
-        dict(input_text=content, transformation=transformation)
+        dict(input_text=content, transformation=transformation),
+        config=RunnableConfig(configurable={"model_id": transformation.model_id}),
     )
     await source.add_insight(transformation.title, result["output"])
     return {
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 1897aa4e..88d963ea 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -423,5 +423,99 @@ class TestContentProcessDeleteSource:
         assert config.docling_ocr is False
 
 
+# ============================================================================
+# TEST SUITE 6: Per-transformation model_id forwarding (#1137)
+# ============================================================================
+
+
+class TestTransformationModelIdForwarding:
+    """Both call sites must forward transformation.model_id into the graph via
+    config.configurable so per-transformation model selection is honored (#1137).
+    """
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock)
+    async def test_source_graph_forwards_model_id(self, mock_ainvoke):
+        """open_notebook.graphs.source.transform_content forwards model_id."""
+        from open_notebook.domain.transformation import Transformation
+        from open_notebook.graphs.source import transform_content
+
+        mock_ainvoke.return_value = {"output": "result"}
+
+        mock_source = MagicMock(spec=Source)
+        mock_source.full_text = "some content"
+        mock_source.add_insight = AsyncMock()
+
+        transformation = MagicMock(spec=Transformation)
+        transformation.name = "summary"
+        transformation.title = "Summary"
+        transformation.model_id = "model:custom"
+
+        state = {"source": mock_source, "transformation": transformation}
+
+        await transform_content(state)  # type: ignore[arg-type]
+
+        mock_ainvoke.assert_awaited_once()
+        config = mock_ainvoke.await_args.kwargs["config"]
+        assert config["configurable"]["model_id"] == "model:custom"
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock)
+    async def test_source_graph_forwards_none_model_id(self, mock_ainvoke):
+        """When model_id is unset (None), None is forwarded (falls back to default)."""
+        from open_notebook.domain.transformation import Transformation
+        from open_notebook.graphs.source import transform_content
+
+        mock_ainvoke.return_value = {"output": "result"}
+
+        mock_source = MagicMock(spec=Source)
+        mock_source.full_text = "some content"
+        mock_source.add_insight = AsyncMock()
+
+        transformation = MagicMock(spec=Transformation)
+        transformation.name = "summary"
+        transformation.title = "Summary"
+        transformation.model_id = None
+
+        state = {"source": mock_source, "transformation": transformation}
+
+        await transform_content(state)  # type: ignore[arg-type]
+
+        config = mock_ainvoke.await_args.kwargs["config"]
+        assert config["configurable"]["model_id"] is None
+
+    @pytest.mark.asyncio
+    @patch("commands.source_commands.transform_graph.ainvoke", new_callable=AsyncMock)
+    @patch("commands.source_commands.Transformation.get", new_callable=AsyncMock)
+    @patch("commands.source_commands.Source.get", new_callable=AsyncMock)
+    async def test_command_forwards_model_id(
+        self, mock_source_get, mock_transformation_get, mock_ainvoke
+    ):
+        """commands.source_commands.run_transformation_command forwards model_id."""
+        from commands.source_commands import (
+            RunTransformationInput,
+            run_transformation_command,
+        )
+        from open_notebook.domain.transformation import Transformation
+
+        mock_source_get.return_value = MagicMock(spec=Source)
+
+        transformation = MagicMock(spec=Transformation)
+        transformation.model_id = "model:custom"
+        mock_transformation_get.return_value = transformation
+
+        mock_ainvoke.return_value = {"output": "result"}
+
+        input_data = RunTransformationInput(
+            source_id="source:123", transformation_id="transformation:456"
+        )
+
+        await run_transformation_command(input_data)
+
+        mock_ainvoke.assert_awaited_once()
+        config = mock_ainvoke.await_args.kwargs["config"]
+        assert config["configurable"]["model_id"] == "model:custom"
+
+
 if __name__ == "__main__":
     pytest.main([__file__, "-v"])

From 22d1ae7780a98e98d8eda41972b89dd39bcf908f Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 12:42:09 -0300
Subject: [PATCH 227/345] perf(chat): isolate composer state to fix IME lag in
 long conversations (#1174)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* perf(chat): isolate composer state to fix IME lag in long chats

Move the chat composer input state into a dedicated ChatComposer child so
keystrokes (including IME composition) no longer re-render the whole message
history. Memoize each message row with React.memo and make the reference-click
handler stable with useCallback so historical messages don't re-render on
composer input. Send behavior and the Ctrl/Cmd+Enter shortcut are preserved.

Closes #1147

* fix(chat): stabilize modal callbacks and use realistic shortcut tests

Memoize openModal/closeModal in useModalManager with useCallback so their
identities stay stable across renders. This keeps handleReferenceClick (which
depends on openModal) stable, so the memoized ChatMessage rows no longer
re-render on every ChatPanel render — completing the IME-lag fix.

Split the Ctrl/Cmd+Enter test into two realistic paths (Mac metaKey, non-Mac
ctrlKey) driven by a mocked userAgent, instead of an impossible combined
ctrlKey+metaKey event.
---
 .../src/components/sources/ChatPanel.test.tsx | 110 +++++++
 frontend/src/components/sources/ChatPanel.tsx | 274 +++++++++++-------
 frontend/src/lib/hooks/use-modal-manager.ts   |  11 +-
 3 files changed, 280 insertions(+), 115 deletions(-)
 create mode 100644 frontend/src/components/sources/ChatPanel.test.tsx

diff --git a/frontend/src/components/sources/ChatPanel.test.tsx b/frontend/src/components/sources/ChatPanel.test.tsx
new file mode 100644
index 00000000..4f5d1582
--- /dev/null
+++ b/frontend/src/components/sources/ChatPanel.test.tsx
@@ -0,0 +1,110 @@
+import { render, screen, fireEvent } from '@testing-library/react'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { ChatPanel } from './ChatPanel'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/hooks/use-modal-manager', () => ({
+  useModalManager: () => ({ openModal: vi.fn() }),
+}))
+
+// Keep the message-content deps light for this composer-focused test.
+vi.mock('@/components/sources/MessageActions', () => ({
+  MessageActions: () => null,
+}))
+
+describe('ChatPanel composer', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    // jsdom does not implement scrollIntoView (used by the auto-scroll effect).
+    window.HTMLElement.prototype.scrollIntoView = vi.fn()
+  })
+
+  const getTextarea = () => screen.getByRole('textbox') as HTMLTextAreaElement
+
+  it('sends the typed message and clears the input on send-button click', () => {
+    const onSendMessage = vi.fn()
+    render(
+      <ChatPanel
+        messages={[]}
+        isStreaming={false}
+        contextIndicators={null}
+        onSendMessage={onSendMessage}
+      />
+    )
+
+    const textarea = getTextarea()
+    fireEvent.change(textarea, { target: { value: '  hello world  ' } })
+
+    const sendButton = screen.getByRole('button')
+    fireEvent.click(sendButton)
+
+    expect(onSendMessage).toHaveBeenCalledTimes(1)
+    expect(onSendMessage).toHaveBeenCalledWith('hello world', undefined)
+    expect(textarea.value).toBe('')
+  })
+
+  it('sends on Cmd+Enter on macOS', () => {
+    const uaSpy = vi.spyOn(navigator, 'userAgent', 'get').mockReturnValue(
+      'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)'
+    )
+    const onSendMessage = vi.fn()
+    render(
+      <ChatPanel
+        messages={[]}
+        isStreaming={false}
+        contextIndicators={null}
+        onSendMessage={onSendMessage}
+      />
+    )
+
+    const textarea = getTextarea()
+    fireEvent.change(textarea, { target: { value: 'via cmd' } })
+    fireEvent.keyDown(textarea, { key: 'Enter', metaKey: true, ctrlKey: false })
+
+    expect(onSendMessage).toHaveBeenCalledWith('via cmd', undefined)
+    expect(textarea.value).toBe('')
+    uaSpy.mockRestore()
+  })
+
+  it('sends on Ctrl+Enter on non-macOS', () => {
+    const uaSpy = vi.spyOn(navigator, 'userAgent', 'get').mockReturnValue(
+      'Mozilla/5.0 (Windows NT 10.0; Win64; x64)'
+    )
+    const onSendMessage = vi.fn()
+    render(
+      <ChatPanel
+        messages={[]}
+        isStreaming={false}
+        contextIndicators={null}
+        onSendMessage={onSendMessage}
+      />
+    )
+
+    const textarea = getTextarea()
+    fireEvent.change(textarea, { target: { value: 'via ctrl' } })
+    fireEvent.keyDown(textarea, { key: 'Enter', ctrlKey: true, metaKey: false })
+
+    expect(onSendMessage).toHaveBeenCalledWith('via ctrl', undefined)
+    expect(textarea.value).toBe('')
+    uaSpy.mockRestore()
+  })
+
+  it('does not send while streaming', () => {
+    const onSendMessage = vi.fn()
+    render(
+      <ChatPanel
+        messages={[]}
+        isStreaming={true}
+        contextIndicators={null}
+        onSendMessage={onSendMessage}
+      />
+    )
+
+    const textarea = getTextarea()
+    // Textarea is disabled while streaming, but the guard must also hold.
+    fireEvent.keyDown(textarea, { key: 'Enter', ctrlKey: true })
+
+    expect(onSendMessage).not.toHaveBeenCalled()
+  })
+})
diff --git a/frontend/src/components/sources/ChatPanel.tsx b/frontend/src/components/sources/ChatPanel.tsx
index 2a0b2d79..0fc54ff2 100644
--- a/frontend/src/components/sources/ChatPanel.tsx
+++ b/frontend/src/components/sources/ChatPanel.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import { useState, useRef, useEffect, useId } from 'react'
+import { memo, useCallback, useState, useRef, useEffect, useId } from 'react'
 import { Button } from '@/components/ui/button'
 import { Textarea } from '@/components/ui/textarea'
 import { ScrollArea } from '@/components/ui/scroll-area'
@@ -75,14 +75,15 @@ export function ChatPanel({
   notebookId
 }: ChatPanelProps) {
   const { t } = useTranslation()
-  const chatInputId = useId()
-  const [input, setInput] = useState('')
   const [sessionManagerOpen, setSessionManagerOpen] = useState(false)
   const scrollAreaRef = useRef<HTMLDivElement>(null)
   const messagesEndRef = useRef<HTMLDivElement>(null)
   const { openModal } = useModalManager()
 
-  const handleReferenceClick = (type: string, id: string) => {
+  // Stable reference-click handler so memoized messages don't re-render on
+  // composer keystrokes (which no longer re-render this component at all, since
+  // the input state lives in the ChatComposer child).
+  const handleReferenceClick = useCallback((type: string, id: string) => {
     const modalType = type === 'source_insight' ? 'insight' : type as 'source' | 'note' | 'insight'
 
     try {
@@ -93,35 +94,13 @@ export function ChatPanel({
     } catch {
       toast.error(t('common.noResults'))
     }
-  }
+  }, [openModal, t])
 
   // Auto-scroll to bottom when new messages arrive
   useEffect(() => {
     messagesEndRef.current?.scrollIntoView({ behavior: 'smooth' })
   }, [messages])
 
-  const handleSend = () => {
-    if (input.trim() && !isStreaming) {
-      onSendMessage(input.trim(), modelOverride)
-      setInput('')
-    }
-  }
-
-  const handleKeyDown = (e: React.KeyboardEvent) => {
-    // Detect platform for correct modifier key
-    const isMac = typeof navigator !== 'undefined' && navigator.userAgent.toUpperCase().indexOf('MAC') >= 0
-    const isModifierPressed = isMac ? e.metaKey : e.ctrlKey
-
-    if (e.key === 'Enter' && isModifierPressed) {
-      e.preventDefault()
-      handleSend()
-    }
-  }
-
-  // Detect platform for placeholder text
-  const isMac = typeof navigator !== 'undefined' && navigator.userAgent.toUpperCase().indexOf('MAC') >= 0
-  const keyHint = isMac ? '⌘+Enter' : 'Ctrl+Enter'
-
   return (
     <>
     <Card className="flex flex-col h-full flex-1 overflow-hidden">
@@ -175,51 +154,12 @@ export function ChatPanel({
               </div>
             ) : (
               messages.map((message) => (
-                <div
+                <ChatMessage
                   key={message.id}
-                  className={`flex gap-3 ${
-                    message.type === 'human' ? 'justify-end' : 'justify-start'
-                  }`}
-                >
-                  {message.type === 'ai' && (
-                    <div className="flex-shrink-0">
-                      <div className="h-8 w-8 rounded-full bg-primary/10 flex items-center justify-center">
-                        <Bot className="h-4 w-4" />
-                      </div>
-                    </div>
-                  )}
-                  <div className="flex flex-col gap-2 max-w-[80%]">
-                    <div
-                      className={`rounded-lg px-4 py-2 ${
-                        message.type === 'human'
-                          ? 'bg-primary text-primary-foreground'
-                          : 'bg-muted'
-                      }`}
-                    >
-                      {message.type === 'ai' ? (
-                        <AIMessageContent
-                          content={message.content}
-                          onReferenceClick={handleReferenceClick}
-                        />
-                      ) : (
-                        <p className="text-sm break-all">{message.content}</p>
-                      )}
-                    </div>
-                    {message.type === 'ai' && (
-                      <MessageActions
-                        content={message.content}
-                        notebookId={notebookId}
-                      />
-                    )}
-                  </div>
-                  {message.type === 'human' && (
-                    <div className="flex-shrink-0">
-                      <div className="h-8 w-8 rounded-full bg-primary flex items-center justify-center">
-                        <User className="h-4 w-4 text-primary-foreground" />
-                      </div>
-                    </div>
-                  )}
-                </div>
+                  message={message}
+                  notebookId={notebookId}
+                  onReferenceClick={handleReferenceClick}
+                />
               ))
             )}
             {isStreaming && (
@@ -276,46 +216,12 @@ export function ChatPanel({
         )}
 
         {/* Input Area */}
-        <div className="flex-shrink-0 p-4 space-y-3 border-t">
-          {/* Model selector */}
-          {onModelChange && (
-            <div className="flex items-center justify-between">
-              <span className="text-xs text-muted-foreground">{t('chat.model')}</span>
-              <ModelSelector
-                currentModel={modelOverride}
-                onModelChange={onModelChange}
-                disabled={isStreaming}
-              />
-            </div>
-          )}
-
-          <div className="flex gap-2 items-end min-w-0">
-            <Textarea
-              id={chatInputId}
-              name="chat-message"
-              autoComplete="off"
-              value={input}
-              onChange={(e) => setInput(e.target.value)}
-              onKeyDown={handleKeyDown}
-              placeholder={`${t('chat.sendPlaceholder')} (${t('chat.pressToSend', { key: keyHint })})`}
-              disabled={isStreaming}
-              className="flex-1 min-h-[40px] max-h-[100px] resize-none py-2 px-3 min-w-0"
-              rows={1}
-            />
-            <Button
-              onClick={handleSend}
-              disabled={!input.trim() || isStreaming}
-              size="icon"
-              className="h-[40px] w-[40px] flex-shrink-0"
-            >
-              {isStreaming ? (
-                <Loader2 className="h-4 w-4 animate-spin" />
-              ) : (
-                <Send className="h-4 w-4" />
-              )}
-            </Button>
-          </div>
-        </div>
+        <ChatComposer
+          onSendMessage={onSendMessage}
+          isStreaming={isStreaming}
+          modelOverride={modelOverride}
+          onModelChange={onModelChange}
+        />
       </CardContent>
     </Card>
 
@@ -323,6 +229,152 @@ export function ChatPanel({
   )
 }
 
+// Composer owns the input state so keystrokes (including IME composition) only
+// re-render this small component instead of the whole message history.
+interface ChatComposerProps {
+  onSendMessage: (message: string, modelOverride?: string) => void
+  isStreaming: boolean
+  modelOverride?: string
+  onModelChange?: (model?: string) => void
+}
+
+function ChatComposer({
+  onSendMessage,
+  isStreaming,
+  modelOverride,
+  onModelChange
+}: ChatComposerProps) {
+  const { t } = useTranslation()
+  const chatInputId = useId()
+  const [input, setInput] = useState('')
+
+  const handleSend = () => {
+    if (input.trim() && !isStreaming) {
+      onSendMessage(input.trim(), modelOverride)
+      setInput('')
+    }
+  }
+
+  const handleKeyDown = (e: React.KeyboardEvent) => {
+    // Detect platform for correct modifier key
+    const isMac = typeof navigator !== 'undefined' && navigator.userAgent.toUpperCase().indexOf('MAC') >= 0
+    const isModifierPressed = isMac ? e.metaKey : e.ctrlKey
+
+    if (e.key === 'Enter' && isModifierPressed) {
+      e.preventDefault()
+      handleSend()
+    }
+  }
+
+  // Detect platform for placeholder text
+  const isMac = typeof navigator !== 'undefined' && navigator.userAgent.toUpperCase().indexOf('MAC') >= 0
+  const keyHint = isMac ? '⌘+Enter' : 'Ctrl+Enter'
+
+  return (
+    <div className="flex-shrink-0 p-4 space-y-3 border-t">
+      {/* Model selector */}
+      {onModelChange && (
+        <div className="flex items-center justify-between">
+          <span className="text-xs text-muted-foreground">{t('chat.model')}</span>
+          <ModelSelector
+            currentModel={modelOverride}
+            onModelChange={onModelChange}
+            disabled={isStreaming}
+          />
+        </div>
+      )}
+
+      <div className="flex gap-2 items-end min-w-0">
+        <Textarea
+          id={chatInputId}
+          name="chat-message"
+          autoComplete="off"
+          value={input}
+          onChange={(e) => setInput(e.target.value)}
+          onKeyDown={handleKeyDown}
+          placeholder={`${t('chat.sendPlaceholder')} (${t('chat.pressToSend', { key: keyHint })})`}
+          disabled={isStreaming}
+          className="flex-1 min-h-[40px] max-h-[100px] resize-none py-2 px-3 min-w-0"
+          rows={1}
+        />
+        <Button
+          onClick={handleSend}
+          disabled={!input.trim() || isStreaming}
+          size="icon"
+          className="h-[40px] w-[40px] flex-shrink-0"
+        >
+          {isStreaming ? (
+            <Loader2 className="h-4 w-4 animate-spin" />
+          ) : (
+            <Send className="h-4 w-4" />
+          )}
+        </Button>
+      </div>
+    </div>
+  )
+}
+
+// Single chat message row. Memoized so historical messages don't re-render when
+// unrelated state (e.g. the composer input) changes.
+interface ChatMessageProps {
+  message: SourceChatMessage
+  notebookId?: string
+  onReferenceClick: (type: string, id: string) => void
+}
+
+const ChatMessage = memo(function ChatMessage({
+  message,
+  notebookId,
+  onReferenceClick
+}: ChatMessageProps) {
+  return (
+    <div
+      className={`flex gap-3 ${
+        message.type === 'human' ? 'justify-end' : 'justify-start'
+      }`}
+    >
+      {message.type === 'ai' && (
+        <div className="flex-shrink-0">
+          <div className="h-8 w-8 rounded-full bg-primary/10 flex items-center justify-center">
+            <Bot className="h-4 w-4" />
+          </div>
+        </div>
+      )}
+      <div className="flex flex-col gap-2 max-w-[80%]">
+        <div
+          className={`rounded-lg px-4 py-2 ${
+            message.type === 'human'
+              ? 'bg-primary text-primary-foreground'
+              : 'bg-muted'
+          }`}
+        >
+          {message.type === 'ai' ? (
+            <AIMessageContent
+              content={message.content}
+              onReferenceClick={onReferenceClick}
+            />
+          ) : (
+            <p className="text-sm break-all">{message.content}</p>
+          )}
+        </div>
+        {message.type === 'ai' && (
+          <MessageActions
+            content={message.content}
+            notebookId={notebookId}
+          />
+        )}
+      </div>
+      {message.type === 'human' && (
+        <div className="flex-shrink-0">
+          <div className="h-8 w-8 rounded-full bg-primary flex items-center justify-center">
+            <User className="h-4 w-4 text-primary-foreground" />
+          </div>
+        </div>
+      )}
+    </div>
+  )
+})
+
 // Helper component to render AI messages with clickable references
 function AIMessageContent({
   content,
diff --git a/frontend/src/lib/hooks/use-modal-manager.ts b/frontend/src/lib/hooks/use-modal-manager.ts
index eb28816c..15e52e04 100644
--- a/frontend/src/lib/hooks/use-modal-manager.ts
+++ b/frontend/src/lib/hooks/use-modal-manager.ts
@@ -1,5 +1,6 @@
 'use client'
 
+import { useCallback } from 'react'
 import { useRouter, useSearchParams, usePathname } from 'next/navigation'
 
 export type ModalType = 'source' | 'note' | 'insight'
@@ -18,23 +19,25 @@ export function useModalManager() {
    * @param type - Type of modal to open (source, note, insight)
    * @param id - ID of the content to display
    */
-  const openModal = (type: ModalType, id: string) => {
+  // Memoized so consumers can safely use it as a dependency (e.g. useCallback /
+  // React.memo props) without re-creating handlers on every render.
+  const openModal = useCallback((type: ModalType, id: string) => {
     const params = new URLSearchParams(searchParams?.toString() || '')
     params.set('modal', type)
     params.set('id', id)
     // Use scroll: false to prevent page from scrolling when modal state changes
     router.push(`${pathname}?${params.toString()}`, { scroll: false })
-  }
+  }, [router, searchParams, pathname])
 
   /**
    * Close the currently open modal by removing modal params from URL
    */
-  const closeModal = () => {
+  const closeModal = useCallback(() => {
     const params = new URLSearchParams(searchParams?.toString() || '')
     params.delete('modal')
     params.delete('id')
     router.push(`${pathname}?${params.toString()}`, { scroll: false })
-  }
+  }, [router, searchParams, pathname])
 
   return {
     modalType,

From 98071154075b80255023f04887ccd0447b922cd8 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 12:45:15 -0300
Subject: [PATCH 228/345] fix(notebook): cascade-delete chat sessions on
 notebook deletion (#1175)

* fix(notebook): cascade-delete chat sessions on notebook deletion

Deleting a notebook removed its notes and exclusive sources but left
chat_session records orphaned. Extend Notebook.delete() to enumerate the
notebook's chat sessions via the existing refers_to relation and delete
each one, and report chat_session_count in the delete preview.

Closes #1124

* refactor(notebook): drop chat-session count from delete preview

The delete-preview API advertised chat_session_count but the frontend
dialog and locales never render it, creating a UI inconsistency. Trim
the preview back to notes and sources; the deletion cascade and its
post-delete deleted_chat_sessions count are unchanged.
---
 CHANGELOG.md                     |  3 +++
 api/models.py                    |  3 +++
 api/routers/notebooks.py         |  1 +
 open_notebook/domain/notebook.py | 16 ++++++++++++++--
 tests/test_domain.py             | 32 ++++++++++++++++++++++++++++++++
 5 files changed, 53 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 51a0f1aa..6cc05ebb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
 
+### Fixed
+- Deleting a notebook now also deletes its chat sessions instead of leaving orphaned `chat_session` records behind. The notebook `delete()` cascade enumerates the notebook's chat sessions (via the existing `refers_to` relation) and deletes each one alongside the notes and exclusive sources it already handled (#1124)
+
 ## [1.13.0] - 2026-07-13
 
 ### Added
diff --git a/api/models.py b/api/models.py
index a5f34f89..f40aa469 100644
--- a/api/models.py
+++ b/api/models.py
@@ -755,3 +755,6 @@ class NotebookDeleteResponse(BaseModel):
     unlinked_sources: int = Field(
         ..., description="Number of sources unlinked from notebook"
     )
+    deleted_chat_sessions: int = Field(
+        ..., description="Number of chat sessions deleted"
+    )
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index 52774434..dea13eae 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -445,6 +445,7 @@ async def delete_notebook(
             deleted_notes=result["deleted_notes"],
             deleted_sources=result["deleted_sources"],
             unlinked_sources=result["unlinked_sources"],
+            deleted_chat_sessions=result["deleted_chat_sessions"],
         )
     except HTTPException:
         raise
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index a82be61e..64c4b381 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -217,7 +217,8 @@ class Notebook(ObjectModel):
                                      only to this notebook. Default is False.
 
         Returns:
-            Dict with counts: deleted_notes, deleted_sources, unlinked_sources
+            Dict with counts: deleted_notes, deleted_sources, unlinked_sources,
+            deleted_chat_sessions
         """
         if self.id is None:
             raise InvalidInputError("Cannot delete notebook without an ID")
@@ -227,6 +228,7 @@ class Notebook(ObjectModel):
             deleted_notes = 0
             deleted_sources = 0
             unlinked_sources = 0
+            deleted_chat_sessions = 0
 
             # 1. Get and delete all notes linked to this notebook
             notes = await self.get_notes()
@@ -287,7 +289,16 @@ class Notebook(ObjectModel):
                 f"exclusive sources for notebook {self.id}"
             )
 
-            # 3. Delete the notebook record itself
+            # 3. Delete chat sessions linked to this notebook
+            chat_sessions = await self.get_chat_sessions()
+            for chat_session in chat_sessions:
+                await chat_session.delete()
+                deleted_chat_sessions += 1
+            logger.info(
+                f"Deleted {deleted_chat_sessions} chat sessions for notebook {self.id}"
+            )
+
+            # 4. Delete the notebook record itself
             await super().delete()
             logger.info(f"Deleted notebook {self.id}")
 
@@ -295,6 +306,7 @@ class Notebook(ObjectModel):
                 "deleted_notes": deleted_notes,
                 "deleted_sources": deleted_sources,
                 "unlinked_sources": unlinked_sources,
+                "deleted_chat_sessions": deleted_chat_sessions,
             }
 
         except Exception as e:
diff --git a/tests/test_domain.py b/tests/test_domain.py
index 19ef3783..6b777af3 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -228,6 +228,38 @@ class TestNotebookDomain:
             with pytest.raises(RuntimeError, match="source context failed"):
                 await notebook.get_context()
 
+    @pytest.mark.asyncio
+    async def test_notebook_delete_cascades_chat_sessions(self):
+        """Deleting a notebook must also delete its chat sessions (issue #1124)."""
+        notebook = Notebook(id="notebook:test", name="Test", description="Test")
+
+        chat_session_one = SimpleNamespace(delete=AsyncMock(return_value=True))
+        chat_session_two = SimpleNamespace(delete=AsyncMock(return_value=True))
+
+        async def fake_get_notes(self, include_content=False):
+            return []
+
+        async def fake_get_chat_sessions(self):
+            return [chat_session_one, chat_session_two]
+
+        with (
+            patch.object(Notebook, "get_notes", new=fake_get_notes),
+            patch.object(Notebook, "get_chat_sessions", new=fake_get_chat_sessions),
+            patch(
+                "open_notebook.domain.notebook.repo_query",
+                new=AsyncMock(return_value=[]),
+            ),
+            patch(
+                "open_notebook.domain.base.repo_delete",
+                new=AsyncMock(return_value=True),
+            ),
+        ):
+            result = await notebook.delete()
+
+        chat_session_one.delete.assert_awaited_once()
+        chat_session_two.delete.assert_awaited_once()
+        assert result["deleted_chat_sessions"] == 2
+
 
 # ============================================================================
 # TEST SUITE 4: Source Domain

From 89b72d5a5bbe497cac7c2f6f3a91bb9847b5dcf2 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 14:06:01 -0300
Subject: [PATCH 229/345] chore(deps): bump esperanto to >=2.25.1 (#1176)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Unlocks oMLX, structured outputs, new providers (Cohere/Deepgram STT/PPQ/Novita),
OpenRouter TTS/STT, the Anthropic to_langchain base_url forward, and Vertex
service-account auth. Clean drop-in — no code changes required (559 tests pass).

Refs #1166
---
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 02b2af38..f383f02d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -39,7 +39,7 @@ dependencies = [
     "httpx[socks]>=0.27.0",
     "content-core>=2.0.4,<3",
     "ai-prompter>=0.4,<1",
-    "esperanto>=2.20.0,<3",
+    "esperanto>=2.25.1,<3",
     "surrealdb>=1.0.4",
     "podcast-creator>=0.12.0,<1",
     "surreal-commands>=1.3.1,<2",
diff --git a/uv.lock b/uv.lock
index 8540e763..0c63bbcb 100644
--- a/uv.lock
+++ b/uv.lock
@@ -679,15 +679,15 @@ wheels = [
 
 [[package]]
 name = "esperanto"
-version = "2.22.0"
+version = "2.25.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/5a/42/5a8c26a8381d60f9c066824a1478c710dbf14d408bef599c86e5072153b5/esperanto-2.22.0.tar.gz", hash = "sha256:463b058aaa5d1c506600dc330151c80afd3ee2277bb2896a4fe020e4b5c3aab7", size = 682384, upload-time = "2026-05-21T23:24:44.399Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/d2/af/ff32061132276f1f509fe8343bf1ad462d639c9cda4e7f9487f68103e409/esperanto-2.25.1.tar.gz", hash = "sha256:335476f746d7055b0790c0cad2a37b56ad2df3ac1f07ae88aef0bb48f3bf34b8", size = 751470, upload-time = "2026-07-19T14:31:52.104Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/01/6c/680161c808f05ce393830d7ec99eb3df5fa70417916417ab58c652290d0e/esperanto-2.22.0-py3-none-any.whl", hash = "sha256:fb7db5ef3811e1fa6cd7af254679d9238c6e2359770dc038af4460c090e9022b", size = 225129, upload-time = "2026-05-21T23:24:46.167Z" },
+    { url = "https://files.pythonhosted.org/packages/da/39/46b70b990d72e040691db22b1618e7e75bfe3b7f83b87df53cf85716578e/esperanto-2.25.1-py3-none-any.whl", hash = "sha256:db900cd10ebb921a34fe57d95879f77581564412c346cddbd46194c3d5911b70", size = 256893, upload-time = "2026-07-19T14:31:50.823Z" },
 ]
 
 [[package]]
@@ -2105,7 +2105,7 @@ requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
     { name = "content-core", specifier = ">=2.0.4,<3" },
-    { name = "esperanto", specifier = ">=2.20.0,<3" },
+    { name = "esperanto", specifier = ">=2.25.1,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
     { name = "langchain", specifier = ">=1.3.9,<2" },

From 98df92b5bcee5293b3f6f1aeaad167a74a17246c Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 14:46:45 -0300
Subject: [PATCH 230/345] fix(credentials): emit vertex_project/vertex_location
 for Vertex (#1177)

Credential.to_esperanto_config() emitted the generic project/location
keys for all providers, but esperanto's Vertex providers accept
vertex_project/vertex_location. Credential-linked (non-env) Vertex TTS
therefore crashed with "__init__() got an unexpected keyword argument
'project'". Map to the Vertex-specific key names for the vertex provider
only; the Credential schema/API fields stay project/location and
non-Vertex providers are unaffected.

Closes #1151
---
 CHANGELOG.md                       |  1 +
 open_notebook/domain/credential.py |  9 +++++--
 tests/test_credentials_api.py      | 40 ++++++++++++++++++++++++++++++
 3 files changed, 48 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6cc05ebb..70fe75f9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
 
 ### Fixed
+- Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
 - Deleting a notebook now also deletes its chat sessions instead of leaving orphaned `chat_session` records behind. The notebook `delete()` cascade enumerates the notebook's chat sessions (via the existing `refers_to` relation) and deletes each one alongside the notes and exclusive sources it already handled (#1124)
 
 ## [1.13.0] - 2026-07-13
diff --git a/open_notebook/domain/credential.py b/open_notebook/domain/credential.py
index c632fb40..8c24c935 100644
--- a/open_notebook/domain/credential.py
+++ b/open_notebook/domain/credential.py
@@ -125,10 +125,15 @@ class Credential(ObjectModel):
             config["endpoint_stt"] = self.endpoint_stt
         if self.endpoint_tts:
             config["endpoint_tts"] = self.endpoint_tts
+        # Vertex esperanto providers accept `vertex_project`/`vertex_location`,
+        # not the generic `project`/`location` keys (#1151). Emit the Vertex-
+        # specific names so credential-linked (non-env) config actually
+        # configures the provider instead of crashing on unexpected kwargs.
+        is_vertex = bool(self.provider) and self.provider.lower() == "vertex"
         if self.project:
-            config["project"] = self.project
+            config["vertex_project" if is_vertex else "project"] = self.project
         if self.location:
-            config["location"] = self.location
+            config["vertex_location" if is_vertex else "location"] = self.location
         if self.credentials_path:
             config["credentials_path"] = self.credentials_path
         if self.num_ctx is not None:
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index b7daed04..795d377d 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -289,6 +289,46 @@ class TestCredentialNumCtx:
         assert "num_ctx" not in cred.to_esperanto_config()
 
 
+class TestCredentialVertexConfig:
+    """Tests for #1151 - Vertex credentials must emit vertex_project/vertex_location."""
+
+    def test_vertex_emits_vertex_prefixed_keys(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(
+            name="Vertex",
+            provider="vertex",
+            modalities=["text_to_speech"],
+            project="my-gcp-project",
+            location="us-central1",
+            credentials_path="/secrets/sa.json",
+        )
+        config = cred.to_esperanto_config()
+        # esperanto's Vertex providers accept vertex_project/vertex_location
+        assert config["vertex_project"] == "my-gcp-project"
+        assert config["vertex_location"] == "us-central1"
+        # The generic keys must NOT be emitted for vertex
+        assert "project" not in config
+        assert "location" not in config
+        # credentials_path is passed through unchanged
+        assert config["credentials_path"] == "/secrets/sa.json"
+
+    def test_non_vertex_provider_keeps_generic_keys(self):
+        from open_notebook.domain.credential import Credential
+
+        cred = Credential(
+            name="Other",
+            provider="openai",
+            project="my-project",
+            location="us-central1",
+        )
+        config = cred.to_esperanto_config()
+        assert config["project"] == "my-project"
+        assert config["location"] == "us-central1"
+        assert "vertex_project" not in config
+        assert "vertex_location" not in config
+
+
 class TestAudioProviderWiring:
     """Tests for the new audio providers (Mistral STT/TTS, Deepgram TTS, xAI TTS)."""
 

From d61851d612cfd5be0f291817b6ba32a2a6dfcb65 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 14:50:40 -0300
Subject: [PATCH 231/345] feat(providers): OpenRouter text-to-speech and
 speech-to-text support (#1178)

esperanto 2.25.0 added OpenRouter for TTS and STT (previously LLM/embedding
only). Expose those modalities in Open Notebook.

- provider_registry: openrouter modalities -> all four (adds speech_to_text,
  text_to_speech)
- model_discovery: bespoke discover_openrouter_models combines the live
  OpenAI-compatible /models listing with a static seed of the audio model ids
  esperanto ships as defaults (microsoft/mai-voice-2 for TTS, openai/whisper-1
  and openai/whisper-large-v3 for STT), since OpenRouter's listing does not
  reliably tag audio models. Seed only when live discovery returns models, so a
  failed discovery never registers unusable audio models.
- credentials_service: credential-based discovery seeds the same audio ids for
  openrouter (only after a successful /models response)
- connection_tester: exclude openrouter from DEFAULT_TEST_VOICES so TTS tests
  use esperanto's model-specific available_voices (voices are model-specific;
  the default model uses Microsoft neural voice names, not alloy/nova)
- tests, docs (provider matrix, AI provider guides) and CHANGELOG

Closes #987
---
 CHANGELOG.md                          |  1 +
 README.md                             |  2 +-
 api/credentials_service.py            | 13 +++++++-
 docs/4-AI-PROVIDERS/index.md          |  3 +-
 docs/5-CONFIGURATION/ai-providers.md  |  7 +++++
 open_notebook/ai/connection_tester.py |  6 +++-
 open_notebook/ai/model_discovery.py   | 44 ++++++++++++++++++++++++++-
 open_notebook/ai/provider_registry.py |  2 +-
 tests/test_credentials_api.py         |  3 ++
 tests/test_model_discovery.py         | 35 +++++++++++++++++++++
 10 files changed, 110 insertions(+), 6 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 70fe75f9..6e68a6d3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
 
 ### Fixed
diff --git a/README.md b/README.md
index 53cbb63a..97e68c5a 100644
--- a/README.md
+++ b/README.md
@@ -237,7 +237,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | DeepSeek     | ✅          | ❌               | ❌             | ❌             |
 | Voyage       | ❌          | ✅               | ❌             | ❌             |
 | xAI          | ✅          | ❌               | ❌             | ✅             |
-| OpenRouter   | ✅          | ✅               | ❌             | ❌             |
+| OpenRouter   | ✅          | ✅               | ✅             | ✅             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
 | MiniMax      | ✅          | ❌               | ❌             | ❌             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 43c3e9ef..1b4d2de7 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -17,6 +17,7 @@ from pydantic import SecretStr
 from api.models import CredentialResponse
 from open_notebook.ai.model_discovery import (
     ANTHROPIC_FALLBACK_MODELS,
+    OPENROUTER_AUDIO_MODELS,
     classify_model_type,
     fetch_anthropic_model_ids,
 )
@@ -553,7 +554,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             response.raise_for_status()
             data = response.json()
 
-            return [
+            discovered = [
                 {
                     "name": m.get("id", ""),
                     "provider": provider,
@@ -562,6 +563,16 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
                 for m in data.get("data", [])
                 if m.get("id")
             ]
+            # OpenRouter's /models listing does not reliably surface its TTS/STT
+            # catalog, so seed the audio model ids esperanto ships as defaults.
+            if provider == "openrouter":
+                seen = {m["name"] for m in discovered}
+                for names in OPENROUTER_AUDIO_MODELS.values():
+                    for name in names:
+                        if name not in seen:
+                            discovered.append({"name": name, "provider": provider})
+                            seen.add(name)
+            return discovered
     except Exception as e:
         logger.warning(f"Failed to discover {provider} models: {e}")
         return []
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index 2a5786bf..4d19e7ab 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -50,7 +50,8 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 - Speed: Varies by model
 - Quality: Varies by model
 - Best for: Model comparison, testing, unified billing
-- Advantage: One API key for 100+ models from different providers
+- Advantage: One API key for 100+ models from different providers, plus
+  text-to-speech and speech-to-text models
 
 → [Setup Guide](../5-CONFIGURATION/ai-providers.md#openrouter)
 
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 900b384d..8134df86 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -225,6 +225,13 @@ Opus: $10-50+/month
 - DeepSeek: `deepseek/deepseek-chat`
 - And many more...
 
+**Speech Models (Text-to-Speech & Speech-to-Text):**
+OpenRouter also exposes audio models. Discovery seeds working defaults; add any
+other `vendor/model` id manually via the custom-model input.
+- Text-to-Speech: `microsoft/mai-voice-2` (uses Microsoft neural voice names such
+  as `en-US-AvaNeural`, not OpenAI's `alloy`/`nova` set)
+- Speech-to-Text: `openai/whisper-1`, `openai/whisper-large-v3`
+
 **Recommended:**
 - For quality: `anthropic/claude-sonnet-4.5` (best overall)
 - For speed/cost: `google/gemini-2.5-flash` (very fast, cheap)
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 3538e27b..d87237de 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -234,7 +234,11 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
         return False, f"Connection error: {str(e)[:100]}"
 
 # Default voices for TTS testing per provider
-# ElevenLabs and Mistral excluded: voices looked up dynamically via available_voices
+# ElevenLabs, Mistral and OpenRouter excluded: voices looked up dynamically via
+# available_voices. OpenRouter's voices are model-specific (its default model,
+# microsoft/mai-voice-2, uses Microsoft neural voice names like en-US-AvaNeural,
+# not OpenAI's alloy/nova set), so a single hard-coded voice can't fit every
+# OpenRouter TTS model — available_voices supplies a valid one for the default.
 DEFAULT_TEST_VOICES = {
     "openai": "alloy",
     "azure": "alloy",
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 9039d617..a68fd3db 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -161,6 +161,16 @@ MINIMAX_MODEL_TYPES = {
     "language": ["minimax", "abab"],
 }
 
+# OpenRouter added OpenAI-compatible TTS/STT endpoints (esperanto 2.25.0), but
+# its /models listing is dominated by language models and does not reliably tag
+# audio models — so audio discovery is a small static seed of the model ids
+# esperanto ships as working defaults. Users can add any other vendor/model id
+# manually via the custom-model input. Keys are esperanto's default models.
+OPENROUTER_AUDIO_MODELS: Dict[str, List[str]] = {
+    "text_to_speech": ["microsoft/mai-voice-2"],
+    "speech_to_text": ["openai/whisper-1", "openai/whisper-large-v3"],
+}
+
 
 def classify_model_type(model_name: str, provider: str) -> str:
     """
@@ -311,7 +321,6 @@ discover_groq_models = _make_openai_compat_discoverer("groq")
 discover_mistral_models = _make_openai_compat_discoverer("mistral")
 discover_deepseek_models = _make_openai_compat_discoverer("deepseek")
 discover_xai_models = _make_openai_compat_discoverer("xai")
-discover_openrouter_models = _make_openai_compat_discoverer("openrouter")
 discover_dashscope_models = _make_openai_compat_discoverer("dashscope")
 discover_minimax_models = _make_openai_compat_discoverer("minimax")
 
@@ -461,6 +470,39 @@ async def discover_ollama_models() -> List[DiscoveredModel]:
     return models
 
 
+async def discover_openrouter_models() -> List[DiscoveredModel]:
+    """Discover OpenRouter models (language/embedding + a static audio seed).
+
+    OpenRouter's OpenAI-compatible /models endpoint lists language (and some
+    embedding) models but does not reliably surface its TTS/STT catalog, so we
+    combine live API discovery with a small static seed of the audio model ids
+    esperanto ships as defaults (see OPENROUTER_AUDIO_MODELS). Returns [] when
+    live discovery yields nothing (missing key, HTTP/network error), so the
+    audio seed is never registered on top of a failed discovery.
+    """
+    models = await discover_openai_compatible_provider("openrouter")
+
+    # Only seed the static audio models when live discovery actually returned
+    # something. An empty result means the /models call failed (invalid key,
+    # HTTP error, network) — seeding on top of a failed discovery would make it
+    # look successful and auto-register unusable audio models during sync.
+    if not models:
+        return models
+
+    seen = {(m.name, m.model_type) for m in models}
+    for model_type, names in OPENROUTER_AUDIO_MODELS.items():
+        for name in names:
+            if (name, model_type) not in seen:
+                models.append(
+                    DiscoveredModel(
+                        name=name,
+                        provider="openrouter",
+                        model_type=model_type,
+                    )
+                )
+    return models
+
+
 async def discover_voyage_models() -> List[DiscoveredModel]:
     """Return static list of Voyage AI models (embedding only)."""
     api_key = os.environ.get("VOYAGE_API_KEY")
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index dd333681..8b2decd4 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -134,7 +134,7 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
         ProviderSpec(
             name="openrouter",
             display_name="OpenRouter",
-            modalities=("language", "embedding"),
+            modalities=_ALL_MODALITIES,
             required_env=("OPENROUTER_API_KEY",),
             test_model="openai/gpt-3.5-turbo",
             docs_url="https://openrouter.ai/keys",
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 795d377d..3b4b67b2 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -352,6 +352,9 @@ class TestAudioProviderWiring:
         assert "text_to_speech" in PROVIDER_MODALITIES["mistral"]
         assert "text_to_speech" in PROVIDER_MODALITIES["xai"]
         assert PROVIDER_MODALITIES["deepgram"] == ["text_to_speech"]
+        # OpenRouter added TTS/STT in esperanto 2.25.0 (issue #987).
+        assert "speech_to_text" in PROVIDER_MODALITIES["openrouter"]
+        assert "text_to_speech" in PROVIDER_MODALITIES["openrouter"]
 
     def test_deepgram_has_env_and_test_model(self):
         from api.credentials_service import PROVIDER_ENV_CONFIG
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index c29208ff..a4c05b72 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -13,9 +13,11 @@ from open_notebook.ai import model_discovery
 from open_notebook.ai.model_discovery import (
     ANTHROPIC_FALLBACK_MODELS,
     OPENAI_COMPAT_PROVIDERS,
+    OPENROUTER_AUDIO_MODELS,
     PROVIDER_DISCOVERY_FUNCTIONS,
     discover_anthropic_models,
     discover_openai_compatible_provider,
+    discover_openrouter_models,
 )
 
 
@@ -180,6 +182,39 @@ class TestGenericOpenAICompatDiscovery:
         assert models[0].description == "Acme Embedding X"
 
 
+class TestOpenRouterDiscovery:
+    """discover_openrouter_models combines API discovery with an audio seed."""
+
+    @pytest.mark.asyncio
+    async def test_missing_key_returns_empty(self, monkeypatch):
+        monkeypatch.delenv("OPENROUTER_API_KEY", raising=False)
+        assert await discover_openrouter_models() == []
+
+    @pytest.mark.asyncio
+    async def test_seeds_audio_models_alongside_api_models(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(
+                url,
+                {"data": [{"id": "openai/gpt-4o", "name": "GPT-4o"}]},
+            )
+
+        monkeypatch.setenv("OPENROUTER_API_KEY", "or-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_openrouter_models()
+        by_type = {(m.name, m.model_type) for m in models}
+
+        # Language model from the /models endpoint is preserved.
+        assert ("openai/gpt-4o", "language") in by_type
+        # The esperanto default audio models are seeded.
+        for model_type, names in OPENROUTER_AUDIO_MODELS.items():
+            for name in names:
+                assert (name, model_type) in by_type
+        assert all(m.provider == "openrouter" for m in models)
+
+
 class TestAnthropicDiscovery:
     @pytest.mark.asyncio
     async def test_missing_key_returns_empty(self, monkeypatch):

From d25cbb1b191a3cc2ef2557e17f9dcf0d7abb8076 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 14:56:30 -0300
Subject: [PATCH 232/345] feat(models): add Cohere, Deepgram STT, PPQ and
 Novita providers (#1179)

Wire four esperanto 2.25.1 providers into the provider matrix:

- Cohere (COHERE_API_KEY): language + embedding via the native v2 API,
  with a bespoke discoverer (AIFactory.get_provider_models) since Cohere
  is not OpenAI-compatible. Reranking is out of scope (#1087).
- Deepgram: extend modalities to add speech_to_text (Nova/Whisper)
  alongside the existing Aura text_to_speech voices.
- PayPerQ / PPQ (PPQ_API_KEY): multi-modality OpenAI-compatible gateway
  (https://api.ppq.ai/v1), auto-discovered via the /models endpoint.
- Novita (NOVITA_API_KEY): OpenAI-compatible LLM gateway
  (https://api.novita.ai/openai), auto-discovered via /models.

Registry-derived surfaces (env config, modalities, test models, discovery
table, GET /api/providers) update automatically; the SupportedProvider
Literal, key_provider config, availability env map, docs and tests were
updated to match. Closes #1170
---
 CHANGELOG.md                                  |  1 +
 README.md                                     |  5 +-
 api/credentials_service.py                    | 25 ++++++
 api/models.py                                 |  3 +
 api/routers/models.py                         |  3 +
 docs/4-AI-PROVIDERS/index.md                  | 24 ++++++
 docs/5-CONFIGURATION/ai-providers.md          | 84 +++++++++++++++++++
 docs/5-CONFIGURATION/environment-reference.md |  3 +
 open_notebook/ai/key_provider.py              |  9 ++
 open_notebook/ai/model_discovery.py           | 84 +++++++++++++++++--
 open_notebook/ai/provider_registry.py         | 31 ++++++-
 tests/test_credential_provider_validation.py  |  5 ++
 tests/test_credentials_api.py                 |  3 +-
 tests/test_model_discovery.py                 | 79 +++++++++++++++++
 14 files changed, 351 insertions(+), 8 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6e68a6d3..bb03b500 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
+- **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
 ### Fixed
 - Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
diff --git a/README.md b/README.md
index 97e68c5a..57daec4f 100644
--- a/README.md
+++ b/README.md
@@ -231,15 +231,18 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | Ollama       | ✅          | ✅               | ❌             | ❌             |
 | Perplexity   | ✅          | ❌               | ❌             | ❌             |
 | ElevenLabs   | ❌          | ❌               | ✅             | ✅             |
-| Deepgram     | ❌          | ❌               | ❌             | ✅             |
+| Deepgram     | ❌          | ❌               | ✅             | ✅             |
 | Azure OpenAI | ✅          | ✅               | ✅             | ✅             |
 | Mistral      | ✅          | ✅               | ✅             | ✅             |
 | DeepSeek     | ✅          | ❌               | ❌             | ❌             |
+| Cohere       | ✅          | ✅               | ❌             | ❌             |
 | Voyage       | ❌          | ✅               | ❌             | ❌             |
 | xAI          | ✅          | ❌               | ❌             | ✅             |
 | OpenRouter   | ✅          | ✅               | ✅             | ✅             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
 | MiniMax      | ✅          | ❌               | ❌             | ❌             |
+| Novita       | ✅          | ❌               | ❌             | ❌             |
+| PayPerQ (PPQ) | ✅          | ✅               | ✅             | ✅             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
 
 *Supports LM Studio and any OpenAI-compatible endpoint
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 1b4d2de7..5c272574 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -362,10 +362,14 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             "scribe_v1",  # speech-to-text
         ],
         "deepgram": [
+            # TTS (Aura) voices
             "aura-2-thalia-en", "aura-2-andromeda-en", "aura-2-helena-en",
             "aura-2-apollo-en", "aura-2-arcas-en", "aura-2-asteria-en",
             "aura-2-athena-en", "aura-2-hera-en", "aura-2-hermes-en",
             "aura-2-atlas-en",
+            # STT (Nova / Whisper) transcription models
+            "nova-3", "nova-2", "whisper-large", "whisper-medium",
+            "whisper-small", "whisper-base", "whisper-tiny",
         ],
     }
 
@@ -522,6 +526,27 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             logger.warning(f"Failed to discover Google models: {e}")
             return []
 
+    if provider == "cohere":
+        # Cohere is not OpenAI-compatible; use esperanto's bespoke discovery.
+        if not api_key:
+            return []
+        try:
+            import asyncio
+
+            from esperanto import AIFactory
+
+            models = await asyncio.to_thread(
+                AIFactory.get_provider_models, "cohere", api_key=api_key
+            )
+            return [
+                {"name": m.id, "provider": "cohere"}
+                for m in models
+                if m.type in ("language", "embedding")
+            ]
+        except Exception as e:
+            logger.warning(f"Failed to discover Cohere models: {e}")
+            return []
+
     # Standard OpenAI-style API discovery
     discovery_url = url_map.get(provider)
     user_supplied_url = False
diff --git a/api/models.py b/api/models.py
index f40aa469..8bc948af 100644
--- a/api/models.py
+++ b/api/models.py
@@ -567,6 +567,9 @@ SupportedProvider = Literal[
     "openrouter",
     "dashscope",
     "minimax",
+    "novita",
+    "ppq",
+    "cohere",
     "voyage",
     "elevenlabs",
     "deepgram",
diff --git a/api/routers/models.py b/api/routers/models.py
index 686fa2d8..1d6f3c50 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -407,6 +407,9 @@ async def get_provider_availability():
             "ollama": "OLLAMA_API_BASE",
             "dashscope": "DASHSCOPE_API_KEY",
             "minimax": "MINIMAX_API_KEY",
+            "novita": "NOVITA_API_KEY",
+            "ppq": "PPQ_API_KEY",
+            "cohere": "COHERE_API_KEY",
         }
 
         provider_status = {}
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index 4d19e7ab..329cbe3f 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -73,6 +73,27 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 
 → [Setup Guide](../5-CONFIGURATION/ai-providers.md#minimax)
 
+**Cohere**
+- Cost: Usage-based
+- Speed: Fast
+- Quality: Good (Command family)
+- Best for: Enterprise RAG, multilingual embeddings
+- Advantage: Language **and** embedding models from one key (`embed-v4.0`); reranking is not yet wired in
+
+**Novita**
+- Cost: Pay-per-model (competitive)
+- Speed: Fast
+- Quality: Varies by model
+- Best for: Open-weight LLMs behind one OpenAI-compatible key
+- Advantage: Broad open-model catalog
+
+**PayPerQ (PPQ)**
+- Cost: Pay-as-you-go across providers
+- Speed: Varies by routed model
+- Quality: Varies by routed model
+- Best for: One key spanning language, embedding, speech-to-text and text-to-speech
+- Advantage: Multi-modality OpenAI-compatible gateway (`https://api.ppq.ai/v1`)
+
 ### Local / Self-Hosted (Free)
 
 **Ollama (Recommended for Local)**
@@ -119,6 +140,9 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 | **OpenRouter** | Varies | Varies | Varies | Low | 5 min | Varies |
 | **DashScope** | Fast | $ | Good | Low | 5 min | Varies |
 | **MiniMax** | Fast | $$ | Good | Low | 5 min | 204K |
+| **Cohere** | Fast | $$ | Good | Low | 5 min | 128K |
+| **Novita** | Fast | $ | Varies | Low | 5 min | Varies |
+| **PayPerQ (PPQ)** | Varies | Varies | Varies | Low | 5 min | Varies |
 | **Ollama** | Slow-Medium | Free | Good | Max | 10 min | Varies |
 | **LM Studio** | Slow-Medium | Free | Good | Max | 15 min | Varies |
 | **Azure** | Very Fast | $$ | Excellent | High | 10 min | 128K |
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 8134df86..8102b35e 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -328,6 +328,90 @@ Heavy use: Depends on models chosen
 
 ---
 
+### Cohere
+
+**Cost:** Usage-based
+
+**Get Your API Key:**
+1. Go to https://dashboard.cohere.com/api-keys
+2. Create an account (if needed)
+3. Create a new API key
+
+**Configure in Open Notebook:**
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential**
+3. Select provider: **Cohere**
+4. Give it a name, paste your API key
+5. Click **Save**, then **Test Connection**
+6. Click **Discover Models** → **Register Models**
+
+**Available Models:**
+- `command-a-03-2025` — Latest Command language model
+- `embed-v4.0` — Latest embedding model (assign the **Embedding** type when registering)
+
+**Notes:**
+- Cohere uses its native v2 API (`/v2/chat`, `/v2/embed`), not an OpenAI-compatible endpoint.
+- Reranking is not yet available in Open Notebook (tracked separately).
+
+**Troubleshooting:**
+- "Invalid API key" → Check the key in the Cohere dashboard
+- "Model not available" → Re-discover models from the credential
+
+---
+
+### Novita
+
+**Cost:** Pay-per-model (competitive)
+
+**Get Your API Key:**
+1. Go to https://novita.ai/settings/key-management
+2. Create an account (if needed)
+3. Create a new API key
+
+**Configure in Open Notebook:**
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential**
+3. Select provider: **Novita**
+4. Give it a name, paste your API key
+5. Click **Save**, then **Test Connection**
+6. Click **Discover Models** → **Register Models**
+
+**Notes:**
+- Novita is an OpenAI-compatible gateway (`https://api.novita.ai/openai`) for open-weight LLMs.
+
+**Troubleshooting:**
+- "Invalid API key" → Check the key in the Novita console
+- "Model not available" → Re-discover models from the credential
+
+---
+
+### PayPerQ (PPQ)
+
+**Cost:** Pay-as-you-go across the providers it routes to
+
+**Get Your API Key:**
+1. Go to https://ppq.ai
+2. Create an account (if needed)
+3. Create a new API key
+
+**Configure in Open Notebook:**
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential**
+3. Select provider: **PayPerQ**
+4. Give it a name, paste your API key
+5. Click **Save**, then **Test Connection**
+6. Click **Discover Models** → **Register Models**
+
+**Notes:**
+- PPQ is a multi-modality OpenAI-compatible gateway (`https://api.ppq.ai/v1`) offering language, embedding, speech-to-text and text-to-speech models.
+- Discovered models are classified by name; adjust the model type when registering if a model lands in the wrong slot.
+
+**Troubleshooting:**
+- "Invalid API key" → Check the key in the PPQ dashboard
+- "Model not available" → Re-discover models from the credential
+
+---
+
 ## Self-Hosted / Local
 
 ### Ollama (Recommended for Local)
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 577c7f6a..0bd8e4b5 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -314,6 +314,9 @@ If you have these variables configured from a previous installation, click the *
 | `OPENAI_COMPATIBLE_API_KEY_TTS` | OpenAI-Compatible | Configure per-service key in credential |
 | `DASHSCOPE_API_KEY` | DashScope (Qwen) | Settings → API Keys → Add DashScope Credential |
 | `MINIMAX_API_KEY` | MiniMax | Settings → API Keys → Add MiniMax Credential |
+| `NOVITA_API_KEY` | Novita | Settings → API Keys → Add Novita Credential |
+| `PPQ_API_KEY` | PayPerQ (PPQ) | Settings → API Keys → Add PayPerQ Credential |
+| `COHERE_API_KEY` | Cohere | Settings → API Keys → Add Cohere Credential |
 | `AZURE_OPENAI_API_KEY` | Azure OpenAI | Settings → API Keys → Add Azure OpenAI Credential |
 | `AZURE_OPENAI_ENDPOINT` | Azure OpenAI | Configure in Azure OpenAI credential |
 | `AZURE_OPENAI_API_VERSION` | Azure OpenAI | Configure in Azure OpenAI credential |
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index b101790e..af29055b 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -70,6 +70,15 @@ PROVIDER_CONFIG = {
     "minimax": {
         "env_var": "MINIMAX_API_KEY",
     },
+    "novita": {
+        "env_var": "NOVITA_API_KEY",
+    },
+    "ppq": {
+        "env_var": "PPQ_API_KEY",
+    },
+    "cohere": {
+        "env_var": "COHERE_API_KEY",
+    },
 }
 
 
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index a68fd3db..0cbba49b 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -150,6 +150,9 @@ ELEVENLABS_MODEL_TYPES = {
 }
 
 DEEPGRAM_MODEL_TYPES = {
+    # Aura voices are TTS; Nova/Whisper transcription models are STT. STT is
+    # checked first (specificity), so the "-en" Aura voices stay TTS.
+    "speech_to_text": ["nova", "whisper", "enhanced", "base"],
     "text_to_speech": ["aura"],
 }
 
@@ -161,6 +164,15 @@ MINIMAX_MODEL_TYPES = {
     "language": ["minimax", "abab"],
 }
 
+# PPQ (PayPerQ) is a multi-modality OpenAI-compatible gateway that proxies many
+# upstream providers, so its model ids carry recognisable substrings. Classify
+# by those so discovered models land in sensible slots (default: language).
+PPQ_MODEL_TYPES = {
+    "embedding": ["text-embedding", "embed"],
+    "speech_to_text": ["whisper", "nova-", "scribe"],
+    "text_to_speech": ["aura", "tts", "eleven"],
+}
+
 # OpenRouter added OpenAI-compatible TTS/STT endpoints (esperanto 2.25.0), but
 # its /models listing is dominated by language models and does not reliably tag
 # audio models — so audio discovery is a small static seed of the model ids
@@ -193,6 +205,7 @@ def classify_model_type(model_name: str, provider: str) -> str:
         "deepgram": DEEPGRAM_MODEL_TYPES,
         "dashscope": DASHSCOPE_MODEL_TYPES,
         "minimax": MINIMAX_MODEL_TYPES,
+        "ppq": PPQ_MODEL_TYPES,
     }
 
     mapping = type_mappings.get(provider, {})
@@ -323,6 +336,8 @@ discover_deepseek_models = _make_openai_compat_discoverer("deepseek")
 discover_xai_models = _make_openai_compat_discoverer("xai")
 discover_dashscope_models = _make_openai_compat_discoverer("dashscope")
 discover_minimax_models = _make_openai_compat_discoverer("minimax")
+discover_novita_models = _make_openai_compat_discoverer("novita")
+discover_ppq_models = _make_openai_compat_discoverer("ppq")
 
 
 # =============================================================================
@@ -555,11 +570,12 @@ async def discover_elevenlabs_models() -> List[DiscoveredModel]:
 
 
 async def discover_deepgram_models() -> List[DiscoveredModel]:
-    """Return a curated static list of Deepgram Aura TTS voices.
+    """Return a curated static list of Deepgram Aura TTS voices and Nova STT models.
 
-    Deepgram has no model-listing API and treats each voice as a model id.
-    This is a representative subset of the Aura-2 English catalog; users can
-    add any other voice manually via the custom-model input.
+    Deepgram has no model-listing API and treats each voice/model as an id.
+    The TTS list is a representative subset of the Aura-2 English catalog; the
+    STT list covers the Nova and Whisper transcription models. Users can add any
+    other id manually via the custom-model input.
     """
     api_key = os.environ.get("DEEPGRAM_API_KEY")
     if not api_key:
@@ -578,10 +594,65 @@ async def discover_deepgram_models() -> List[DiscoveredModel]:
         "aura-2-atlas-en",
     ]
 
-    return [
+    # Deepgram transcription (STT) models, e.g. nova-3.
+    deepgram_stt_models = [
+        "nova-3",
+        "nova-2",
+        "whisper-large",
+        "whisper-medium",
+        "whisper-small",
+        "whisper-base",
+        "whisper-tiny",
+    ]
+
+    discovered = [
         DiscoveredModel(name=m, provider="deepgram", model_type="text_to_speech")
         for m in deepgram_voices
     ]
+    discovered.extend(
+        DiscoveredModel(name=m, provider="deepgram", model_type="speech_to_text")
+        for m in deepgram_stt_models
+    )
+    return discovered
+
+
+async def discover_cohere_models() -> List[DiscoveredModel]:
+    """Discover Cohere models via esperanto's static discovery.
+
+    Cohere is not OpenAI-compatible (native /v2 API), so it can't use the
+    generic /models table. esperanto's AIFactory.get_provider_models tags each
+    model with a type from its supported endpoints; we surface only the language
+    and embedding models. Reranking is out of scope (tracked at #1087).
+    """
+    api_key = os.environ.get("COHERE_API_KEY")
+    if not api_key:
+        return []
+
+    try:
+        from esperanto import AIFactory
+
+        # esperanto's discovery is synchronous (httpx.get); run it off the loop.
+        models = await asyncio.to_thread(
+            AIFactory.get_provider_models, "cohere", api_key=api_key
+        )
+    except Exception as e:
+        logger.warning(f"Failed to discover Cohere models: {e}")
+        return []
+
+    discovered: List[DiscoveredModel] = []
+    for model in models:
+        # Only language and embedding are supported modalities here; skip
+        # rerank/None-typed models.
+        if model.type not in ("language", "embedding"):
+            continue
+        discovered.append(
+            DiscoveredModel(
+                name=model.id,
+                provider="cohere",
+                model_type=model.type,
+            )
+        )
+    return discovered
 
 
 async def discover_openai_compatible_models() -> List[DiscoveredModel]:
@@ -673,6 +744,9 @@ PROVIDER_DISCOVERY_FUNCTIONS = {
     "openai_compatible": discover_openai_compatible_models,
     "dashscope": discover_dashscope_models,
     "minimax": discover_minimax_models,
+    "novita": discover_novita_models,
+    "ppq": discover_ppq_models,
+    "cohere": discover_cohere_models,
     "azure": None,  # Azure requires credential-based discovery (different auth)
     "vertex": None,  # Vertex requires credential-based discovery (service account)
 }
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 8b2decd4..0156940a 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -158,6 +158,35 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
             docs_url="https://platform.minimaxi.com/document/Guides",
             openai_compat_discovery_url="https://api.minimax.io/v1/models",
         ),
+        ProviderSpec(
+            name="novita",
+            display_name="Novita",
+            modalities=_LANGUAGE_ONLY,
+            required_env=("NOVITA_API_KEY",),
+            test_model="moonshotai/kimi-k2.5",
+            docs_url="https://novita.ai/settings/key-management",
+            openai_compat_discovery_url="https://api.novita.ai/openai/models",
+        ),
+        ProviderSpec(
+            name="ppq",
+            display_name="PayPerQ",
+            modalities=_ALL_MODALITIES,
+            required_env=("PPQ_API_KEY",),
+            test_model="auto",
+            docs_url="https://ppq.ai",
+            openai_compat_discovery_url="https://api.ppq.ai/v1/models",
+        ),
+        ProviderSpec(
+            name="cohere",
+            display_name="Cohere",
+            # Native v2 API (/v2/chat, /v2/embed) — NOT OpenAI-compatible, so no
+            # openai_compat_discovery_url; discovery is bespoke (esperanto's
+            # AIFactory.get_provider_models). Reranking is out of scope (#1087).
+            modalities=("language", "embedding"),
+            required_env=("COHERE_API_KEY",),
+            test_model="command-a-03-2025",
+            docs_url="https://dashboard.cohere.com/api-keys",
+        ),
         ProviderSpec(
             name="voyage",
             display_name="Voyage AI",
@@ -179,7 +208,7 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
         ProviderSpec(
             name="deepgram",
             display_name="Deepgram",
-            modalities=("text_to_speech",),
+            modalities=("text_to_speech", "speech_to_text"),
             required_env=("DEEPGRAM_API_KEY",),
             test_model="aura-2-thalia-en",
             test_model_type="text_to_speech",
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 02e97017..9fb3d4d2 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -31,6 +31,9 @@ KNOWN_GOOD_PROVIDERS = [
     "openrouter",
     "dashscope",
     "minimax",
+    "novita",
+    "ppq",
+    "cohere",
     "voyage",
     "elevenlabs",
     "deepgram",
@@ -108,6 +111,8 @@ class TestProviderRegistryIsTheSourceOfTruth:
             "openrouter": "https://openrouter.ai/api/v1/models",
             "dashscope": "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
             "minimax": "https://api.minimax.io/v1/models",
+            "novita": "https://api.novita.ai/openai/models",
+            "ppq": "https://api.ppq.ai/v1/models",
         }
         assert {
             name: spec.openai_compat_discovery_url
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 3b4b67b2..75ffbcec 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -351,7 +351,8 @@ class TestAudioProviderWiring:
         assert "speech_to_text" in PROVIDER_MODALITIES["mistral"]
         assert "text_to_speech" in PROVIDER_MODALITIES["mistral"]
         assert "text_to_speech" in PROVIDER_MODALITIES["xai"]
-        assert PROVIDER_MODALITIES["deepgram"] == ["text_to_speech"]
+        # Deepgram now also does STT (Nova/Whisper), added alongside TTS.
+        assert PROVIDER_MODALITIES["deepgram"] == ["text_to_speech", "speech_to_text"]
         # OpenRouter added TTS/STT in esperanto 2.25.0 (issue #987).
         assert "speech_to_text" in PROVIDER_MODALITIES["openrouter"]
         assert "text_to_speech" in PROVIDER_MODALITIES["openrouter"]
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index a4c05b72..28763f92 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -56,6 +56,8 @@ class TestOpenAICompatTable:
             "openrouter",
             "dashscope",
             "minimax",
+            "novita",
+            "ppq",
         }
 
     def test_provider_discovery_functions_keys_unchanged(self):
@@ -75,6 +77,9 @@ class TestOpenAICompatTable:
             "openai_compatible",
             "dashscope",
             "minimax",
+            "novita",
+            "ppq",
+            "cohere",
             "azure",
             "vertex",
         }
@@ -328,3 +333,77 @@ class TestCredentialServiceAnthropicDiscovery:
 
         models = await credentials_service.discover_with_config("anthropic", {})
         assert models == []
+
+
+class TestNewEsperantoProviders:
+    """Issue #1170: Cohere, Deepgram STT, PPQ and Novita wiring."""
+
+    def test_ppq_and_novita_use_openai_compat_discovery(self):
+        assert (
+            OPENAI_COMPAT_PROVIDERS["ppq"].url == "https://api.ppq.ai/v1/models"
+        )
+        assert (
+            OPENAI_COMPAT_PROVIDERS["novita"].url
+            == "https://api.novita.ai/openai/models"
+        )
+
+    def test_ppq_classification_by_substring(self):
+        from open_notebook.ai.model_discovery import classify_model_type
+
+        assert classify_model_type("openai/text-embedding-3-small", "ppq") == "embedding"
+        assert classify_model_type("nova-3", "ppq") == "speech_to_text"
+        assert classify_model_type("deepgram_aura_2", "ppq") == "text_to_speech"
+        assert classify_model_type("auto", "ppq") == "language"
+
+    @pytest.mark.asyncio
+    async def test_deepgram_discovery_includes_stt(self, monkeypatch):
+        from open_notebook.ai.model_discovery import discover_deepgram_models
+
+        monkeypatch.setenv("DEEPGRAM_API_KEY", "dg-test")
+        models = await discover_deepgram_models()
+        by_type = {m.model_type for m in models}
+        assert "text_to_speech" in by_type
+        assert "speech_to_text" in by_type
+        stt_names = {m.name for m in models if m.model_type == "speech_to_text"}
+        assert "nova-3" in stt_names
+
+    @pytest.mark.asyncio
+    async def test_cohere_discovery_missing_key_returns_empty(self, monkeypatch):
+        from open_notebook.ai.model_discovery import discover_cohere_models
+
+        monkeypatch.delenv("COHERE_API_KEY", raising=False)
+        assert await discover_cohere_models() == []
+
+    @pytest.mark.asyncio
+    async def test_cohere_discovery_filters_to_language_and_embedding(
+        self, monkeypatch
+    ):
+        from types import SimpleNamespace
+
+        from open_notebook.ai import model_discovery as md
+
+        monkeypatch.setenv("COHERE_API_KEY", "co-test")
+
+        fake_models = [
+            SimpleNamespace(id="command-a-03-2025", type="language"),
+            SimpleNamespace(id="embed-v4.0", type="embedding"),
+            SimpleNamespace(id="rerank-v3.5", type="reranker"),
+            SimpleNamespace(id="mystery", type=None),
+        ]
+
+        class FakeFactory:
+            @staticmethod
+            def get_provider_models(provider, api_key=None):
+                assert provider == "cohere"
+                return fake_models
+
+        import esperanto
+
+        monkeypatch.setattr(esperanto, "AIFactory", FakeFactory)
+
+        models = await md.discover_cohere_models()
+        got = {(m.name, m.model_type) for m in models}
+        assert got == {
+            ("command-a-03-2025", "language"),
+            ("embed-v4.0", "embedding"),
+        }

From ef9bc43b9ad6b5185bad620de45891449f43e656 Mon Sep 17 00:00:00 2001
From: Gautam Diwan <62214898+Gautam-Diwan@users.noreply.github.com>
Date: Sun, 19 Jul 2026 14:02:14 -0400
Subject: [PATCH 233/345] feat: add first-class oMLX provider via Esperanto
 profile (#1164)

Expose Esperanto's built-in omlx OpenAICompatibleProfile in Settings with
Ollama-style UX (default http://localhost:11435/v1, optional API key,
language+embedding discovery). No openai-compatible remapping or
OPENAI_COMPATIBLE_* env mirroring.

Fixes #1048

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .env.example                                  |   4 +
 CHANGELOG.md                                  |   1 +
 README.md                                     |   3 +-
 api/credentials_service.py                    |  45 +++++++
 api/models.py                                 |   1 +
 api/routers/models.py                         |   1 +
 docs/3-USER-GUIDE/api-configuration.md        |  10 ++
 docs/4-AI-PROVIDERS/index.md                  |  14 ++
 docs/5-CONFIGURATION/ai-providers.md          |  26 ++++
 docs/5-CONFIGURATION/environment-reference.md |   2 +
 docs/5-CONFIGURATION/index.md                 |   8 +-
 docs/5-CONFIGURATION/omlx.md                  | 125 ++++++++++++++++++
 docs/5-CONFIGURATION/openai-compatible.md     |   2 +
 .../settings/CredentialFormDialog.tsx         |  18 ++-
 open_notebook/ai/key_provider.py              |   6 +
 open_notebook/ai/model_discovery.py           |  66 +++++++++
 open_notebook/ai/provider_registry.py         |  12 ++
 tests/test_credential_provider_validation.py  |   1 +
 tests/test_credentials_api.py                 |  91 +++++++++++++
 tests/test_model_discovery.py                 |   1 +
 20 files changed, 431 insertions(+), 6 deletions(-)
 create mode 100644 docs/5-CONFIGURATION/omlx.md

diff --git a/.env.example b/.env.example
index 784bf6e4..30d8a65c 100644
--- a/.env.example
+++ b/.env.example
@@ -50,6 +50,10 @@ SURREAL_DATABASE=open_notebook
 # Ollama endpoint (if running locally)
 # OLLAMA_API_BASE=http://localhost:11434
 
+# oMLX (Apple Silicon) — prefer Settings → API Keys; port 11435 avoids SurrealDB on 8000
+# OMLX_API_BASE=http://localhost:11435/v1
+# OMLX_API_KEY=  # optional; only if oMLX was started with --api-key
+
 # Content processing
 # CHUNK_SIZE=1500
 # CHUNK_OVERLAP=150
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bb03b500..0d9ef41c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
+- **First-class oMLX provider** in Settings → API Keys: native Esperanto `omlx` profile identity (language + embedding), default base URL `http://localhost:11435/v1` (avoids SurrealDB on 8000), optional API key, connection test and `/v1/models` discovery. No remapping to `openai-compatible` and no `OPENAI_COMPATIBLE_*` env mirroring. Docs under `docs/5-CONFIGURATION/omlx.md` (#1048; upstream lfnovo/esperanto#228)
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
 ### Fixed
diff --git a/README.md b/README.md
index 57daec4f..c05be979 100644
--- a/README.md
+++ b/README.md
@@ -229,6 +229,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | Google (GenAI) | ✅          | ✅               | ✅             | ✅             |
 | Vertex AI    | ✅          | ✅               | ❌             | ✅             |
 | Ollama       | ✅          | ✅               | ❌             | ❌             |
+| oMLX         | ✅          | ✅               | ❌             | ❌             |
 | Perplexity   | ✅          | ❌               | ❌             | ❌             |
 | ElevenLabs   | ❌          | ❌               | ✅             | ✅             |
 | Deepgram     | ❌          | ❌               | ✅             | ✅             |
@@ -245,7 +246,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | PayPerQ (PPQ) | ✅          | ✅               | ✅             | ✅             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
 
-*Supports LM Studio and any OpenAI-compatible endpoint
+*Supports LM Studio and any OpenAI-compatible endpoint. Prefer the native **oMLX** provider for [oMLX](https://omlx.ai/) (Apple Silicon); see [docs/5-CONFIGURATION/omlx.md](docs/5-CONFIGURATION/omlx.md).
 
 ## ✨ Key Features
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 5c272574..1d375687 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -119,6 +119,15 @@ def create_credential_from_env(provider: str) -> Credential:
             modalities=modalities,
             base_url=os.environ.get("OLLAMA_API_BASE"),
         )
+    elif provider == "omlx":
+        api_key = os.environ.get("OMLX_API_KEY")
+        return Credential(
+            name=name,
+            provider=provider,
+            modalities=modalities,
+            api_key=SecretStr(api_key) if api_key else None,
+            base_url=os.environ.get("OMLX_API_BASE"),
+        )
     elif provider == "vertex":
         return Credential(
             name=name,
@@ -261,6 +270,15 @@ async def test_credential(credential_id: str) -> dict:
             )
             return {"provider": provider, "success": success, "message": message}
 
+        if provider == "omlx":
+            # Esperanto oMLX profile default; port 11435 avoids SurrealDB on 8000.
+            base_url = config.get("base_url") or "http://localhost:11435/v1"
+            api_key = config.get("api_key")
+            success, message = await _test_openai_compatible_connection(
+                base_url, api_key
+            )
+            return {"provider": provider, "success": success, "message": message}
+
         if provider == "azure":
             success, message = await _test_azure_connection(
                 endpoint=config.get("endpoint"),
@@ -461,6 +479,33 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             logger.warning(f"Failed to discover openai_compatible models: {e}")
             return []
 
+    if provider == "omlx":
+        omlx_url = base_url or "http://localhost:11435/v1"
+        try:
+            target = await prepare_pinned_http_target(
+                models_endpoint(omlx_url), "omlx"
+            )
+            headers = dict(target.headers)
+            if api_key:
+                headers["Authorization"] = f"Bearer {api_key}"
+            async with httpx.AsyncClient() as client:
+                response = await client.get(
+                    target.url,
+                    headers=headers,
+                    timeout=30.0,
+                    extensions=target.extensions,
+                )
+                response.raise_for_status()
+                data = response.json()
+                return [
+                    {"name": m.get("id", ""), "provider": "omlx"}
+                    for m in data.get("data", [])
+                    if m.get("id")
+                ]
+        except Exception as e:
+            logger.warning(f"Failed to discover omlx models: {e}")
+            return []
+
     if provider == "azure":
         endpoint = config.get("endpoint")
         api_version = config.get("api_version", "2024-10-21")
diff --git a/api/models.py b/api/models.py
index 8bc948af..f180375e 100644
--- a/api/models.py
+++ b/api/models.py
@@ -574,6 +574,7 @@ SupportedProvider = Literal[
     "elevenlabs",
     "deepgram",
     "ollama",
+    "omlx",
     "azure",
     "vertex",
     "openai_compatible",
diff --git a/api/routers/models.py b/api/routers/models.py
index 1d6f3c50..dad34587 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -405,6 +405,7 @@ async def get_provider_availability():
             "elevenlabs": "ELEVENLABS_API_KEY",
             "deepgram": "DEEPGRAM_API_KEY",
             "ollama": "OLLAMA_API_BASE",
+            "omlx": "OMLX_API_BASE",
             "dashscope": "DASHSCOPE_API_KEY",
             "minimax": "MINIMAX_API_KEY",
             "novita": "NOVITA_API_KEY",
diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index 0c9a37ab..7fd0d050 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -102,6 +102,7 @@ Navigation: Settings → API Keys
 | Provider | Required Fields | Notes |
 |----------|-----------------|-------|
 | Ollama | Base URL | Typically `http://localhost:11434` or `http://ollama:11434` |
+| oMLX | Base URL | Default `http://localhost:11435/v1` (avoids SurrealDB on 8000); API key optional |
 
 ### Enterprise
 
@@ -206,6 +207,15 @@ For OpenAI, Anthropic, Google, Groq, Mistral, DeepSeek, xAI, OpenRouter:
 
 Ollama allows localhost and private IPs since it runs locally.
 
+### oMLX (Apple Silicon)
+
+1. Add credential with provider **oMLX**
+2. Base URL defaults to `http://localhost:11435/v1` (do not use port `8000` — that conflicts with SurrealDB)
+3. API key is optional
+4. Test connection → discover and register language/embedding models
+
+See [oMLX Setup](../5-CONFIGURATION/omlx.md) for install and Docker host networking notes.
+
 ### Azure OpenAI
 
 1. Add credential with provider **Azure OpenAI**
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index 329cbe3f..b1b094cb 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -106,6 +106,16 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 
 → [Setup Guide](../5-CONFIGURATION/ai-providers.md#ollama-recommended-for-local)
 
+**oMLX (Apple Silicon)**
+- Cost: Free (electricity only)
+- Speed: Fast on M-series GPUs (MLX)
+- Quality: Good (bring-your-own MLX models)
+- Setup: 10 minutes
+- Best for: macOS Apple Silicon, private local inference
+- Privacy: 100% local; default URL `http://localhost:11435/v1` (avoids SurrealDB on 8000)
+
+→ [Setup Guide](../5-CONFIGURATION/omlx.md)
+
 **LM Studio (Alternative)**
 - Cost: Free (electricity only)
 - Speed: Depends on hardware
@@ -144,6 +154,7 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 | **Novita** | Fast | $ | Varies | Low | 5 min | Varies |
 | **PayPerQ (PPQ)** | Varies | Varies | Varies | Low | 5 min | Varies |
 | **Ollama** | Slow-Medium | Free | Good | Max | 10 min | Varies |
+| **oMLX** | Fast (MLX) | Free | Good | Max | 10 min | Varies |
 | **LM Studio** | Slow-Medium | Free | Good | Max | 15 min | Varies |
 | **Azure** | Very Fast | $$ | Excellent | High | 10 min | 128K |
 
@@ -163,6 +174,9 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 ### I want privacy/offline
 → **Ollama** — Free, local, private
 
+### I have an Apple Silicon Mac
+→ **oMLX** — Free, local MLX inference ([setup](../5-CONFIGURATION/omlx.md))
+
 ### I want a GUI (not CLI)
 → **LM Studio** — Desktop app
 
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 8102b35e..338352bf 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -494,6 +494,32 @@ CPU-only:
 
 ---
 
+### oMLX (Apple Silicon)
+
+**Cost:** Free (electricity only)
+
+**Requirements:** Apple Silicon Mac. oMLX runs on the host (not in Linux containers).
+
+**Setup oMLX:**
+1. Install from [oMLX](https://omlx.ai/) / [jundot/omlx](https://github.com/jundot/omlx)
+2. Run on port **11435** (oMLX’s default `8000` conflicts with SurrealDB):
+   ```bash
+   OMLX_PORT=11435 omlx serve
+   ```
+3. Load models in the oMLX admin UI
+
+**Configure in Open Notebook:**
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential**
+3. Select provider: **oMLX**
+4. Base URL defaults to `http://localhost:11435/v1` (use `http://host.docker.internal:11435/v1` if Open Notebook is in Docker)
+5. API key is optional (only if you started oMLX with `--api-key`)
+6. Click **Save**, then **Test Connection** → **Discover Models** → **Register Models**
+
+See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
+
+---
+
 ### LM Studio (Local Alternative)
 
 **Cost:** Free
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 0bd8e4b5..3eee2f8d 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -298,6 +298,8 @@ If you have these variables configured from a previous installation, click the *
 | `DEEPSEEK_API_KEY` | DeepSeek | Settings → API Keys → Add DeepSeek Credential |
 | `XAI_API_KEY` | xAI | Settings → API Keys → Add xAI Credential |
 | `OLLAMA_API_BASE` | Ollama | Settings → API Keys → Add Ollama Credential |
+| `OMLX_API_BASE` | oMLX | Settings → API Keys → Add oMLX Credential |
+| `OMLX_API_KEY` | oMLX | Optional; only if oMLX was started with `--api-key` |
 | `OPENROUTER_API_KEY` | OpenRouter | Settings → API Keys → Add OpenRouter Credential |
 | `OPENROUTER_BASE_URL` | OpenRouter | Configure in OpenRouter credential |
 | `VOYAGE_API_KEY` | Voyage AI | Settings → API Keys → Add Voyage AI Credential |
diff --git a/docs/5-CONFIGURATION/index.md b/docs/5-CONFIGURATION/index.md
index f1198368..ffcc961b 100644
--- a/docs/5-CONFIGURATION/index.md
+++ b/docs/5-CONFIGURATION/index.md
@@ -29,14 +29,15 @@ Setup: Get API key → Add credential in Settings UI → Done
 
 ### Option 2: Local (Free & Private)
 - **Ollama** (open-source models, on your machine)
+- **oMLX** (Apple Silicon / MLX inference server)
 
-→ Go to **[Ollama Setup](ollama.md)**
+→ Go to **[Ollama Setup](ollama.md)** or **[oMLX Setup](omlx.md)**
 
 ### Option 3: OpenAI-Compatible
 - **LM Studio** (local)
 - **Custom endpoints**
 
-→ Go to **[OpenAI-Compatible Guide](openai-compatible.md)**
+→ Go to **[OpenAI-Compatible Guide](openai-compatible.md)** (for oMLX, prefer the native [oMLX](omlx.md) provider)
 
 ---
 
@@ -212,6 +213,9 @@ OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 
 ### [Ollama](ollama.md)
 - Setting up and pointing to an Ollama server
+
+### [oMLX](omlx.md)
+- Apple Silicon MLX server (default `http://localhost:11435/v1`, SurrealDB port note)
 - Downloading models
 - Using embedding
 
diff --git a/docs/5-CONFIGURATION/omlx.md b/docs/5-CONFIGURATION/omlx.md
new file mode 100644
index 00000000..6903c2ef
--- /dev/null
+++ b/docs/5-CONFIGURATION/omlx.md
@@ -0,0 +1,125 @@
+# oMLX Setup Guide
+
+[oMLX](https://omlx.ai/) is a macOS-native inference server for Apple Silicon. It runs [MLX](https://opensource.apple.com/projects/mlx/) models locally and exposes an **OpenAI-compatible API** at `/v1`, so Open Notebook can use it for language and embedding models without sending data to the cloud.
+
+Open Notebook treats **oMLX** as a first-class provider in Settings → API Keys. Identity comes from Esperanto’s built-in `omlx` [OpenAI-compatible profile](https://github.com/lfnovo/esperanto/issues/228) (`AIFactory.create_language("omlx", ...)` / `create_embedding("omlx", ...)`). There is no remapping to the generic `openai-compatible` provider and no `OPENAI_COMPATIBLE_*` env mirroring.
+
+## Why Choose oMLX?
+
+- **Apple Silicon optimized** — MLX inference on M-series Macs
+- **OpenAI-compatible** — drop-in `/v1/chat/completions` and `/v1/embeddings`
+- **Private** — models and prompts stay on your machine
+- **Optional API key** — protect the local server with `--api-key` if needed
+
+## Requirements
+
+- Apple Silicon Mac (M1 or later)
+- macOS 15+ (Sequoia) recommended
+- oMLX installed and running on the **host** (oMLX cannot run inside Linux containers)
+
+## Install oMLX
+
+**DMG (recommended):** download from [oMLX Releases](https://github.com/jundot/omlx/releases), drag to Applications, and launch.
+
+**Homebrew:**
+
+```bash
+brew tap jundot/omlx
+brew install omlx
+brew services start omlx
+```
+
+**CLI:**
+
+```bash
+omlx serve
+# or with a custom port (recommended — see Port Conflict below):
+OMLX_PORT=11435 omlx serve
+```
+
+Admin UI (when using oMLX’s own default port): `http://localhost:8000/admin`
+
+## Port Conflict with SurrealDB
+
+oMLX and SurrealDB both default to **port 8000**. Open Notebook’s database uses `8000`, so running oMLX on the default port will collide.
+
+**Recommended:** run oMLX on **11435** (same idea as Ollama’s 11434):
+
+```bash
+OMLX_PORT=11435 omlx serve
+```
+
+Or set the port in oMLX’s admin settings / `~/.omlx/settings.json`.
+
+Then use this base URL in Open Notebook:
+
+```text
+http://localhost:11435/v1
+```
+
+> Always include the `/v1` suffix — oMLX’s OpenAI API lives under `/v1` (e.g. `GET /v1/models`).
+
+## Configure Open Notebook
+
+1. Go to **Settings** → **API Keys**
+2. Click **Add Credential** → select **oMLX**
+3. Set **Base URL** to `http://localhost:11435/v1` (prefilled by default)
+4. Optionally set an **API key** if you started oMLX with `--api-key`
+5. **Save** → **Test Connection** → **Discover Models** → register language and embedding models
+
+### Legacy env vars (optional fallback)
+
+```bash
+# Prefer Settings UI; env is for migration / headless setups
+export OMLX_API_BASE=http://localhost:11435/v1
+# Optional, only if oMLX was started with --api-key
+# export OMLX_API_KEY=your-key
+```
+
+These match Esperanto’s profile env names (`OMLX_API_BASE`, `OMLX_API_KEY`).
+
+## Network Notes (Docker)
+
+oMLX itself must run on the Mac host. If Open Notebook runs in Docker:
+
+| Setup | Base URL |
+|-------|----------|
+| Both on host | `http://localhost:11435/v1` |
+| Open Notebook in Docker, oMLX on host | `http://host.docker.internal:11435/v1` |
+
+Ensure oMLX listens on an interface Docker can reach.
+
+## Modalities
+
+| Modality | Supported |
+|----------|-----------|
+| Language | ✅ |
+| Embedding | ✅ |
+| Speech-to-text | ❌ |
+| Text-to-speech | ❌ |
+
+For local STT/TTS, see [Local STT](local-stt.md) and [Local TTS](local-tts.md) (e.g. Speaches via OpenAI-Compatible).
+
+## Troubleshooting
+
+| Symptom | What to check |
+|---------|----------------|
+| Connection refused | Is oMLX running? Correct port? |
+| Wrong port / SurrealDB errors | Don’t use `8000` for oMLX — use `11435` (or another free port) |
+| 404 on `/models` | Base URL must end with `/v1` |
+| 401 Unauthorized | API key mismatch with oMLX `--api-key` |
+| No models listed | Load/download models in the oMLX admin UI first |
+| Docker can’t reach host | Use `host.docker.internal` and confirm oMLX bind address |
+
+Quick connectivity check:
+
+```bash
+curl http://localhost:11435/v1/models
+```
+
+## Related
+
+- [Ollama Setup](ollama.md) — another local provider (native Ollama API)
+- [OpenAI-Compatible](openai-compatible.md) — generic OpenAI API servers (LM Studio, vLLM, …)
+- [AI Providers](ai-providers.md) — all provider options
+- [API Configuration](../3-USER-GUIDE/api-configuration.md) — credentials UI walkthrough
diff --git a/docs/5-CONFIGURATION/openai-compatible.md b/docs/5-CONFIGURATION/openai-compatible.md
index dfea49d5..2a40eee1 100644
--- a/docs/5-CONFIGURATION/openai-compatible.md
+++ b/docs/5-CONFIGURATION/openai-compatible.md
@@ -26,6 +26,7 @@ Open Notebook can connect to any server using this format.
 | **Text Generation WebUI** | Full-featured local inference | https://github.com/oobabooga/text-generation-webui |
 | **vLLM** | High-performance serving | https://github.com/vllm-project/vllm |
 | **Ollama** | Simple local models | (Use native Ollama provider instead) |
+| **oMLX** | Apple Silicon / MLX | (Use native [oMLX](omlx.md) provider instead) |
 | **LocalAI** | Local AI inference | https://github.com/mudler/LocalAI |
 | **llama.cpp server** | Lightweight inference | https://github.com/ggerganov/llama.cpp |
 
@@ -403,3 +404,4 @@ Use OpenAI-compatible when:
 - **[Local STT Setup](local-stt.md)** - Speech-to-text with Speaches
 - **[AI Providers](ai-providers.md)** - All provider options
 - **[Ollama Setup](ollama.md)** - Native Ollama integration
+- **[oMLX Setup](omlx.md)** - Native oMLX (Apple Silicon) integration
diff --git a/frontend/src/components/settings/CredentialFormDialog.tsx b/frontend/src/components/settings/CredentialFormDialog.tsx
index c1bdddf5..0562ef09 100644
--- a/frontend/src/components/settings/CredentialFormDialog.tsx
+++ b/frontend/src/components/settings/CredentialFormDialog.tsx
@@ -16,6 +16,9 @@ import { Credential, CreateCredentialRequest } from '@/lib/api/credentials'
 import { buildCredentialUpdatePayload } from '@/lib/credential-update-payload'
 import { useProviders } from '@/lib/hooks/use-providers'
 
+/** Default oMLX OpenAI base URL (port 11435 avoids SurrealDB on 8000). */
+const OMLX_DEFAULT_BASE_URL = 'http://localhost:11435/v1'
+
 interface CredentialFormDialogProps {
   open: boolean
   onOpenChange: (open: boolean) => void
@@ -43,8 +46,10 @@ export function CredentialFormDialog({
 
   const isVertex = provider === 'vertex'
   const isOllama = provider === 'ollama'
+  const isOmlx = provider === 'omlx'
   const isOpenAICompatible = provider === 'openai_compatible'
-  const requiresApiKey = !isVertex && !isOllama && !isOpenAICompatible
+  // oMLX is a local no-auth endpoint by default (optional --api-key).
+  const requiresApiKey = !isVertex && !isOllama && !isOmlx && !isOpenAICompatible
 
   const [name, setName] = useState('')
   const [apiKey, setApiKey] = useState('')
@@ -69,7 +74,8 @@ export function CredentialFormDialog({
       setModalities(credential.modalities || [])
     } else {
       setName('')
-      setBaseUrl('')
+      // Prefill oMLX default (port 11435 avoids SurrealDB on 8000).
+      setBaseUrl(isOmlx ? OMLX_DEFAULT_BASE_URL : '')
       setApiKey('')
       setProject('')
       setLocation('')
@@ -234,7 +240,13 @@ export function CredentialFormDialog({
                 className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm"
                 value={baseUrl}
                 onChange={(e) => setBaseUrl(e.target.value)}
-                placeholder={isOllama ? 'http://localhost:11434' : 'https://api.example.com/v1'}
+                placeholder={
+                  isOllama
+                    ? 'http://localhost:11434'
+                    : isOmlx
+                      ? OMLX_DEFAULT_BASE_URL
+                      : 'https://api.example.com/v1'
+                }
                 disabled={isSubmitting}
               />
               <p className="text-xs text-muted-foreground">{t('apiKeys.baseUrlOverrideHint')}</p>
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index af29055b..10201957 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -64,6 +64,12 @@ PROVIDER_CONFIG = {
     "ollama": {
         "env_var": "OLLAMA_API_BASE",
     },
+    # oMLX: Esperanto built-in profile (OMLX_API_KEY / OMLX_API_BASE).
+    # Optional API key; base_url from the credential sets OMLX_API_BASE via
+    # _provision_simple_provider. No OPENAI_COMPATIBLE_* mirroring.
+    "omlx": {
+        "env_var": "OMLX_API_KEY",
+    },
     "dashscope": {
         "env_var": "DASHSCOPE_API_KEY",
     },
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 0cbba49b..f00f20b6 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -723,6 +723,71 @@ async def discover_openai_compatible_models() -> List[DiscoveredModel]:
     return models
 
 
+_OMLX_DEFAULT_BASE_URL = "http://localhost:11435/v1"
+
+
+async def discover_omlx_models() -> List[DiscoveredModel]:
+    """
+    Fetch available models from a local oMLX server (OpenAI-compatible /v1/models).
+
+    Uses Credential config when present, else OMLX_API_BASE / OMLX_API_KEY.
+    Default base URL is http://localhost:11435/v1 (avoids SurrealDB on 8000).
+    API key is optional (oMLX is a local no-auth endpoint by default).
+    """
+    api_key = None
+    base_url = None
+
+    try:
+        credentials = await Credential.get_by_provider("omlx")
+        if credentials:
+            cred = credentials[0]
+            config = cred.to_esperanto_config()
+            api_key = config.get("api_key")
+            base_url = (config.get("base_url") or "").rstrip("/")
+    except Exception as e:
+        logger.warning(f"Failed to read omlx config from Credential: {e}")
+
+    if not api_key:
+        api_key = os.environ.get("OMLX_API_KEY")
+    if not base_url:
+        base_url = os.environ.get("OMLX_API_BASE", _OMLX_DEFAULT_BASE_URL).rstrip("/")
+
+    models: List[DiscoveredModel] = []
+    try:
+        target = await prepare_pinned_http_target(_models_endpoint(base_url), "omlx")
+        headers = dict(target.headers)
+        if api_key:
+            headers["Authorization"] = f"Bearer {api_key}"
+
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                target.url,
+                headers=headers,
+                timeout=30.0,
+                extensions=target.extensions,
+            )
+            response.raise_for_status()
+            data = response.json()
+
+            for model in data.get("data", []):
+                model_id = model.get("id", "")
+                if model_id:
+                    model_type = classify_model_type(model_id, "openai")
+                    models.append(
+                        DiscoveredModel(
+                            name=model_id,
+                            provider="omlx",
+                            model_type=model_type,
+                        )
+                    )
+    except httpx.HTTPStatusError as e:
+        logger.warning(f"Failed to discover omlx models: HTTP {e.response.status_code}")
+    except Exception as e:
+        logger.warning(f"Failed to discover omlx models: {e}")
+
+    return models
+
+
 # =============================================================================
 # Main Discovery Functions
 # =============================================================================
@@ -733,6 +798,7 @@ PROVIDER_DISCOVERY_FUNCTIONS = {
     "anthropic": discover_anthropic_models,
     "google": discover_google_models,
     "ollama": discover_ollama_models,
+    "omlx": discover_omlx_models,
     "groq": discover_groq_models,
     "mistral": discover_mistral_models,
     "deepseek": discover_deepseek_models,
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 0156940a..32a5ab0e 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -221,6 +221,18 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
             required_env=("OLLAMA_API_BASE",),
             test_model=None,  # Dynamic - uses first available model
         ),
+        ProviderSpec(
+            name="omlx",
+            display_name="oMLX",
+            modalities=("language", "embedding"),
+            required_env=("OMLX_API_BASE",),
+            optional_env=("OMLX_API_KEY",),
+            test_model=None,  # Dynamic - uses first available model via /v1/models
+            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/omlx.md",
+            # No openai_compat_discovery_url: base URL is user-supplied (default
+            # http://localhost:11435/v1) and API key is optional — discovery is
+            # handled like openai_compatible, not the fixed-URL OPENAI_COMPAT table.
+        ),
         ProviderSpec(
             name="azure",
             display_name="Azure OpenAI",
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 9fb3d4d2..0d070933 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -38,6 +38,7 @@ KNOWN_GOOD_PROVIDERS = [
     "elevenlabs",
     "deepgram",
     "ollama",
+    "omlx",
     "azure",
     "vertex",
     "openai_compatible",
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 75ffbcec..c368b366 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -261,6 +261,97 @@ class TestCredentialModelDiscovery:
         assert captured["extensions"] == {"sni_hostname": "llm-gateway.example.com"}
 
 
+class TestOmlxDiscovery:
+    """oMLX uses OpenAI-compatible /v1/models with an optional API key."""
+
+    @pytest.mark.asyncio
+    async def test_omlx_discovery_defaults_base_url_and_pins(self, monkeypatch):
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        captured = {}
+        pinned_calls = []
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                captured["url"] = url
+                captured["headers"] = headers
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "mlx-model"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            pinned_calls.append((url, provider))
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        models = await credentials_service.discover_with_config("omlx", {})
+
+        assert models == [{"name": "mlx-model", "provider": "omlx"}]
+        assert pinned_calls == [("http://localhost:11435/v1/models", "omlx")]
+        assert captured["url"] == "http://localhost:11435/v1/models"
+        assert "Authorization" not in (captured["headers"] or {})
+
+    @pytest.mark.asyncio
+    async def test_omlx_discovery_sends_optional_api_key(self, monkeypatch):
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        captured = {}
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                captured["headers"] = headers
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "mlx-model"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        await credentials_service.discover_with_config(
+            "omlx",
+            {
+                "api_key": "secret",
+                "base_url": "http://127.0.0.1:11435/v1",
+            },
+        )
+
+        assert captured["headers"]["Authorization"] == "Bearer secret"
+
+    def test_omlx_registry_modalities_and_env(self):
+        from api.credentials_service import PROVIDER_ENV_CONFIG, PROVIDER_MODALITIES
+        from open_notebook.ai.connection_tester import TEST_MODELS
+
+        assert PROVIDER_MODALITIES["omlx"] == ["language", "embedding"]
+        assert PROVIDER_ENV_CONFIG["omlx"]["required"] == ["OMLX_API_BASE"]
+        assert PROVIDER_ENV_CONFIG["omlx"]["optional"] == ["OMLX_API_KEY"]
+        assert TEST_MODELS["omlx"] == (None, "language")
+
+
 class TestCredentialNumCtx:
     """Tests for the Ollama num_ctx override threaded into esperanto config."""
 
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index 28763f92..35bb5b2b 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -66,6 +66,7 @@ class TestOpenAICompatTable:
             "anthropic",
             "google",
             "ollama",
+            "omlx",
             "groq",
             "mistral",
             "deepseek",

From 95a64530091e0251d6a42aadd406aeede77bb17f Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Sun, 19 Jul 2026 11:14:17 -0700
Subject: [PATCH 234/345] feat: add anthropic_compatible credential provider
 (#1043)

Register anthropic_compatible in the provider registry so its env config,
modalities, test model, and /api/providers entry are derived from PROVIDERS
(#1075's single source of truth); the only manual copy is the SupportedProvider
Literal. Maps to esperanto's anthropic provider with a custom base_url, and
re-injects that base_url via ChatAnthropic since esperanto's to_langchain drops
it. Connection-test and model discovery mirror the openai_compatible siblings,
including DNS-rebinding pinning (prepare_pinned_http_target). A single shared
validator enforces the base_url + api_key requirement on both the create and
update paths.

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .agents/skills/release/SKILL.md              | 116 +++++
 .agents/skills/release/comms-templates.md    |  60 +++
 .agents/skills/release/gates.md              |  44 ++
 .agents/skills/release/runbook.md            |  73 +++
 .agents/skills/release/test-matrix.md        |  66 +++
 .codex/agents/harness-qa.toml                | 171 +++++++
 .codex/agents/on-tech.toml                   | 196 ++++++++
 .codex/agents/smoke-e2e.toml                 | 486 +++++++++++++++++++
 CHANGELOG.md                                 |   1 +
 api/credentials_service.py                   |  65 ++-
 api/models.py                                |  28 ++
 api/routers/credentials.py                   |   9 +-
 api/routers/models.py                        |  13 +
 docs/5-CONFIGURATION/ai-providers.md         |  14 +
 open_notebook/ai/connection_tester.py        |  65 +++
 open_notebook/ai/key_provider.py             |  33 +-
 open_notebook/ai/model_discovery.py          |  63 +++
 open_notebook/ai/models.py                   |  42 +-
 open_notebook/ai/provider_registry.py        |  14 +
 open_notebook/ai/provision.py                |  32 +-
 tests/test_anthropic_compatible_provider.py  | 299 ++++++++++++
 tests/test_credential_provider_validation.py |  25 +-
 tests/test_credentials_api.py                |  46 ++
 tests/test_model_discovery.py                |   1 +
 tests/test_models_api.py                     |  29 ++
 25 files changed, 1974 insertions(+), 17 deletions(-)
 create mode 100644 .agents/skills/release/SKILL.md
 create mode 100644 .agents/skills/release/comms-templates.md
 create mode 100644 .agents/skills/release/gates.md
 create mode 100644 .agents/skills/release/runbook.md
 create mode 100644 .agents/skills/release/test-matrix.md
 create mode 100644 .codex/agents/harness-qa.toml
 create mode 100644 .codex/agents/on-tech.toml
 create mode 100644 .codex/agents/smoke-e2e.toml
 create mode 100644 tests/test_anthropic_compatible_provider.py

diff --git a/.agents/skills/release/SKILL.md b/.agents/skills/release/SKILL.md
new file mode 100644
index 00000000..58da7432
--- /dev/null
+++ b/.agents/skills/release/SKILL.md
@@ -0,0 +1,116 @@
+---
+name: release
+description: Orchestrate an Open Notebook release — changelog audit, risk-based A/B/C test matrix, Docker image gate (fresh + upgrade), fix loop via PRs, cut, publication with credits, retro. Use when preparing, testing, cutting or publishing a release.
+---
+
+# Open Notebook Release Orchestrator
+
+You are conducting a release of Open Notebook, reproducing the process
+established in v1.11.0. The **source of truth for the process** is
+`.github/RELEASE_PROCESS.md` — read it first. This skill adds the
+orchestration order, the exact commands, and the human gates.
+
+**Ground rules for the whole run:**
+
+- The release happens in a **single session**. Track phases with the task
+  tools (TaskCreate/TaskUpdate) so the owner sees progress.
+- Every repo change goes through a **PR** (branch → PR → CI + cubic → merge).
+  Never push to main. Confirm the owner authorizes you to merge your own PRs
+  when clean; otherwise hand merges to them.
+- Interact in the owner's language; write code, commits and docs in English.
+- Read `${CLAUDE_SKILL_DIR}/gates.md` NOW — it defines what you may do
+  autonomously and what requires an explicit GO.
+
+## Phase 0 — Scope and changelog audit
+
+1. `git fetch --tags` · find the last release tag and `gh release list`.
+2. List everything merged since: `git log <last-tag>..origin/main --oneline`.
+3. Audit the CHANGELOG `[Unreleased]` section against that list. Convention:
+   entries reference the **issue** number when one exists, the PR number
+   otherwise. Close every gap via PR.
+4. Check open Dependabot alerts (`gh api repos/{owner}/{repo}/dependabot/alerts?state=open`)
+   — a security-themed release with open highs is incoherent. Triage them
+   into the fix loop or document acceptance.
+
+## Phase 1 — Risk-based test matrix
+
+Read `${CLAUDE_SKILL_DIR}/test-matrix.md` and instantiate it against the
+actual release diff. Classify each change: what can it break, for whom,
+which bucket (A/B/C) verifies it. **Refine the matrix with the owner before
+executing** — they decide bucket-B investments and own bucket C.
+
+## Phase 2 — Execute bucket A
+
+Run in parallel where possible:
+
+- `uv run pytest tests/` · `ruff check .` · `uv run python -m mypy .` (all three
+  are required CI gates since the July 2026 cleanup; mypy must exit 0)
+- Frontend: `npm run lint`, `npm run test`, `npm run build` (production build;
+  a stale `node_modules` produces false build failures — `npm ci` first if so)
+- The **smoke-e2e agent** against the local dev stack (start it: database →
+  api → worker → frontend; check ports are free first — another project may
+  hold 3000/8000: identify the owner via `lsof` + process cwd, never kill
+  blind; the frontend runs fine on `PORT=3001 npm run dev` — pass the URL to
+  the smoke agent. Also note the dev `.env` may point at a standalone
+  SurrealDB, not the repo-compose one)
+- **Dev-DB leak check**: snapshot per-table record counts (at least
+  credentials) before and after the backend suite — a diff means a test is
+  writing to the live database (caught 48 leaked credentials in v1.12.0)
+- The **targeted probes** from the matrix (legitimate-use regression checks
+  for security changes)
+
+## Phase 3 — Image gate + bucket C kickoff
+
+- `make docker-build-local`, then `make release-test TAG=<ver> OLD_TAG=<prev>`
+  (pull the genuine previous tag first — see gotchas in RELEASE_PROCESS.md).
+- Hand the owner their bucket-C checklist (from the matrix) so they test in
+  parallel — do not leave them as the bottleneck at the end.
+
+## Phase 4 — Fix loop
+
+For each finding: reproduce → root-cause → focused PR with regression tests →
+CI + cubic → merge (per gates.md). Apply the re-test policy from
+RELEASE_PROCESS.md after each merge. Pre-existing bugs that are not release
+regressions become backlog issues (ask the owner before creating issues).
+Verify UI fixes in the real browser (Playwright) before opening the PR.
+
+## Phase 5 — Cut
+
+1. Cut PR off updated main: bump `pyproject.toml`, date the changelog section.
+2. After merge: `make tag`.
+3. Rebuild the image from final main and **re-run the image gate** against it.
+4. Push version images via CI:
+   `gh workflow run build-and-release.yml --ref main -f push_latest=false`
+   and watch the run. (Local `make docker-push` needs `docker login`.)
+5. Verify the pushed manifests (see `${CLAUDE_SKILL_DIR}/runbook.md`).
+
+## Phase 6 — Pushed-image verification (human gate)
+
+Offer the owner a browsable RC stack on this machine:
+`make release-stack TAG=<ver> [DUMP=<dump>]` — with a copy of their dev data
+for realism (export command in the runbook). Support them through it; findings
+go back to Phase 4. **Do not proceed without their GO.**
+
+## Phase 7 — Publish (human gate)
+
+1. Draft release notes per `${CLAUDE_SKILL_DIR}/comms-templates.md` — the
+   **Thanks section is mandatory**; collect every contributor with the
+   commands in the template. Show the owner for review.
+2. With their explicit GO: `gh release create v<ver> --title ... --notes-file ... --latest`.
+   Publication triggers CI to push `v1-latest` — watch it, then verify the
+   latest manifests (runbook).
+3. Mark shipped issues with the `released` label (ask before mass-labeling).
+4. Deliver the Discord post text (the owner posts it).
+
+## Phase 8 — Cleanup
+
+`make release-stack-down`, remove temp dumps/data dirs, stop watchers, ensure
+`git status` is clean on main and no test containers remain.
+
+## Phase 9 — Retro (always runs)
+
+Ask the owner: *"what should improve in this process?"* — and apply the
+accepted improvements **now**: edit `.github/RELEASE_PROCESS.md`,
+`scripts/release-test/*`, and this skill's files while context is fresh.
+New gotchas discovered during the run go into RELEASE_PROCESS.md's Known
+Gotchas via the same PR flow.
diff --git a/.agents/skills/release/comms-templates.md b/.agents/skills/release/comms-templates.md
new file mode 100644
index 00000000..15607313
--- /dev/null
+++ b/.agents/skills/release/comms-templates.md
@@ -0,0 +1,60 @@
+# Communication Templates
+
+Reference implementation: the v1.11.0 release
+(https://github.com/lfnovo/open-notebook/releases/tag/v1.11.0).
+
+## GitHub release notes structure
+
+```
+**We recommend all users upgrade.** <one-line verdict: what this release is,
+and that it was validated by the release test process>
+
+## 🔒 Security hardening        (if applicable — lead with it)
+## ✨ New features               (user language, issue refs)
+## ⚡ Performance
+## 🐛 Notable fixes
+## ⚠️ Behavior changes for self-hosters
+    <anything that can require a config tweak on upgrade — numbered,
+     each with the escape hatch (env var, override file, doc link)>
+## 🙏 Thanks                     (MANDATORY — see below)
+Full details in the [CHANGELOG](.../CHANGELOG.md).
+```
+
+Tone: honest and specific. Say what protections do AND what stays supported
+(e.g. "private IPs/localhost remain fully supported for self-hosted Ollama").
+
+## 🙏 Thanks — collecting contributors (never skip, never miss anyone)
+
+1. Commit authors in the release range:
+   `git log <last-tag>..<tag> --pretty='%an <%ae>' | sort | uniq -c | sort -rn`
+2. Map every non-obvious name to a GitHub handle via their PR:
+   `gh pr view <n> --json author --jq .author.login`
+   (PR list: `gh pr list --state merged --limit 100 --json number,author,mergedAt,title`
+   filtered to merges after the previous tag — beware PRs merged before the
+   previous tag was cut appearing in date filters.)
+3. One bullet per contributor: **@handle** — what they shipped, with refs.
+4. Close with a collective thank-you to issue reporters.
+5. Bots (dependabot) are excluded.
+
+## Discord announcement skeleton
+
+```
+📢 Open Notebook v<X.Y.Z> is out — <hook: why upgrade>!
+
+<2-3 lines: the headline theme (e.g. security pass) + feature highlights
+as a one-line · separated list>
+
+⚡ <performance line, if any>
+
+🧪 <one line on how it was tested — users trust releases more when they
+    know fresh-install + upgrade were tested on the real images>
+
+⚠️ Self-hosters: check "Behavior changes" in the release notes.
+
+📝 https://github.com/lfnovo/open-notebook/releases/tag/v<X.Y.Z>
+🐳 docker pull lfnovo/open_notebook:v1-latest
+```
+
+Consider crediting contributors on Discord too — communities love it.
+
+The owner posts to Discord; deliver final text, don't post.
diff --git a/.agents/skills/release/gates.md b/.agents/skills/release/gates.md
new file mode 100644
index 00000000..d28da6e4
--- /dev/null
+++ b/.agents/skills/release/gates.md
@@ -0,0 +1,44 @@
+# Gates — what needs a human, what doesn't
+
+The contract that made v1.11.0 safe. When in doubt, ask — a blocked action is
+feedback, not an obstacle to route around.
+
+## You may do autonomously (once the release run is underway)
+
+- Run any test, build, probe or analysis; start/stop local dev services
+- Create branches, commits, and open PRs
+- Spawn subagents (smoke-e2e, investigation, fixes)
+- Build/pull Docker images locally; run the release-test harness and RC stack
+- Dispatch the *Build and Release* CI workflow with `push_latest=false`
+  (version tags only — this is the agreed pre-verification push)
+
+## Requires explicit, in-session authorization from the owner
+
+| Action | Why |
+|---|---|
+| Merging PRs you authored | two-party review; ask once per session ("merge when clean?") and honor the answer |
+| Publishing the GitHub release | public, triggers `v1-latest` — the point of no return |
+| Anything that pushes `v1-latest` | users receive it immediately |
+| Creating GitHub issues | external artifacts the owner may not want |
+| Mass-labeling issues (`released`) | bulk modification of shared state |
+| Touching the owner's dev data | only ever work on **copies** (export/import); never mount or mutate originals |
+
+## Never
+
+- Push directly to main
+- Publish a prerelease/release to work around a blocked step
+- Mark a phase complete with failing checks ("GO with known issues is worse
+  than a NO-GO that catches problems before users do")
+
+## Re-test policy after each fix merge
+
+- Cheap suite (pytest + lint + frontend tests/build): **always**
+- smoke-e2e / image gate: only if the fix touches what they cover
+- Owner's manual verification: only if the fix touches what they verified
+- The final image gate (Phase 5.3) always runs on the exact release artifact
+
+## GO/NO-GO
+
+A release is GO when: bucket A fully green · image gate green (fresh +
+upgrade) · bucket C signed off by the owner · no open release-regression
+findings · Dependabot highs resolved or explicitly accepted.
diff --git a/.agents/skills/release/runbook.md b/.agents/skills/release/runbook.md
new file mode 100644
index 00000000..0a90b2a5
--- /dev/null
+++ b/.agents/skills/release/runbook.md
@@ -0,0 +1,73 @@
+# Runbook — exact commands for the cut-and-publish phases
+
+Gotchas live in `.github/RELEASE_PROCESS.md` → Known Gotchas. This file is
+the command reference.
+
+## Version images via CI (Phase 5)
+
+```bash
+gh workflow run build-and-release.yml --ref main -f push_latest=false
+gh run list --workflow=build-and-release.yml --limit 1     # grab the id
+gh run watch <run-id> --exit-status                        # background it
+```
+
+## Verify pushed manifests
+
+```bash
+for ref in lfnovo/open_notebook:<ver> lfnovo/open_notebook:<ver>-single ghcr.io/lfnovo/open-notebook:<ver>; do
+  docker manifest inspect "$ref" | python3 -c "import json,sys; d=json.load(sys.stdin); print(sorted(set(m['platform']['architecture'] for m in d.get('manifests',[]) if m['platform']['architecture']!='unknown')))"
+done
+# expect ['amd64', 'arm64'] for each; repeat with v1-latest after publication
+```
+
+## RC stack with a copy of the owner's dev data (Phase 6)
+
+```bash
+# 1. Find which SurrealDB instance dev actually uses — read SURREAL_URL in .env
+#    (multiple instances may run locally; the repo-compose one on :8000 may NOT
+#    be it), and note SURREAL_DATABASE.
+# 2. Consistent export from the RUNNING instance (originals untouched):
+docker exec <that-container> /surreal export --conn http://localhost:8000 \
+  --user root --pass root --ns open_notebook --db <that-db> /dev/stdout > /tmp/dev-dump.surql
+# 3. Boot (rc-stack.sh docker-pulls the pushed tag by default, so a local
+#    build can't shadow the registry artifact):
+make release-stack TAG=<ver> DUMP=/tmp/dev-dump.surql
+#    To exercise the opt-in heavy runtimes (Docling + Crawl4AI) on the pushed
+#    image with this data, append the flag (first boot installs them, ~minutes):
+#    bash scripts/release-test/rc-stack.sh up <ver> /tmp/dev-dump.surql --with-runtimes
+# 4. Sanity: credentials decrypt (uses the dev encryption key from .env):
+curl -s http://localhost:15055/api/credentials | python3 -c "import json,sys; c=json.load(sys.stdin); print(len(c), 'creds,', sum(1 for x in c if x.get('decryption_error')), 'decrypt errors')"
+# 5. Opt-in gating is only meaningful on this fresh image (a dev venv may have
+#    the runtimes installed out-of-band): GET /api/capabilities should report
+#    both false until --with-runtimes installs them.
+```
+
+Remind the owner: in-container credentials pointing at host services need
+`http://host.docker.internal:<port>` (Ollama, LM Studio).
+
+## Publish (Phase 7 — after explicit GO)
+
+```bash
+gh release create v<ver> --title "v<ver> — <theme>" --notes-file <notes.md> --latest
+# publication (non-prerelease) triggers the workflow that pushes v1-latest
+gh run list --workflow=build-and-release.yml --limit 1 && gh run watch <id> --exit-status
+```
+
+## Label shipped issues (after owner OK)
+
+```bash
+# only actual closed ISSUES (changelog refs mix issues and PR numbers):
+for n in <numbers>; do
+  STATE=$(gh api "repos/lfnovo/open-notebook/issues/$n" --jq 'if .pull_request then "pr" else .state end')
+  [ "$STATE" = "closed" ] && gh issue edit "$n" --add-label released
+done
+```
+
+## Cleanup (Phase 8)
+
+```bash
+make release-stack-down
+rm -f /tmp/dev-dump.surql; rm -rf /tmp/onrel-*
+docker ps --format '{{.Names}}' | grep onrel   # must be empty
+git status --short                              # must be clean on main
+```
diff --git a/.agents/skills/release/test-matrix.md b/.agents/skills/release/test-matrix.md
new file mode 100644
index 00000000..f81b3902
--- /dev/null
+++ b/.agents/skills/release/test-matrix.md
@@ -0,0 +1,66 @@
+# Test Matrix Template — change → risk → bucket
+
+Instantiate against the real release diff. The unit of planning is the
+**risk**, not the feature: for each change ask *what can this break, and for
+whom?* Security hardening gets the inverse question too: *does the protection
+break legitimate use?* (v1.11.0 examples: SSRF guard vs. self-hosted Ollama on
+localhost; body-size cap vs. big uploads; Host validation vs. reverse proxies).
+
+## Bucket A — automated now (run all of it)
+
+Checklist design rule (v1.12.0 retro): before putting an error-path item on
+the bucket-C checklist ("X unconfigured should show an error"), verify in the
+provisioning code that it IS an error — transformation and tools defaults
+deliberately fall back to the chat default (`open_notebook/ai/models.py`).
+
+| Check | Command / tool |
+|---|---|
+| Backend suite | `uv run pytest tests/` |
+| Lint & types | `ruff check .` · `uv run python -m mypy .` (both are required CI gates; mypy runs at 0 errors — `uv sync --extra dev` first if mypy is missing locally) |
+| Frontend | `npm run lint` · `npm run test` · `npm run build` (run `npm ci` first if deps changed) |
+| Full happy path | smoke-e2e agent on the local dev stack (API + Playwright UI) |
+| Dependency audit | Dependabot alerts + `npm audit` |
+| Targeted probes | see below — pick per matrix |
+
+### Probe library (extend per release)
+
+Regression-of-legitimate-use probes proven in v1.11.0 — adapt endpoints/values:
+
+- Upload just under / just over the body cap → accepted / 413
+- Source ingestion of a `localhost` URL → ACCEPTED (self-hosted is legitimate);
+  link-local/metadata URL → rejected with a clear 4xx
+- Frontend `/config` with clean vs. malformed `Host` → sane URL / fallback, never 5xx
+- SSE endpoints stream progressively (first byte ≪ total time via `curl -N -w`)
+- CORS preflight with and without `CORS_ORIGINS` set
+- Every enum/allowlisted query param exercised with **each** valid value +
+  one invalid (v1.11.0: `sort_by=title` 500'd while all siblings passed —
+  test the whole surface, not one sample)
+- Oversized array inputs and unknown-provider payloads → clean 422, not 500
+- Anything an LLM or UI writes through: verify the full path in a real
+  browser, not just the API (mirror-bug lesson: frontend dropped the field
+  AND the API ignored null — only end-to-end caught it)
+
+## Bucket B — automatable with investment (decide with the owner)
+
+Standing candidates; the image gate graduated from here to `make release-test`:
+
+- New end-to-end scenarios for this release's features
+- CI-ification of any probe that proved valuable twice
+- Anything the owner keeps having to verify by hand
+
+Decision rule: build it if it compounds for future releases and costs < the
+manual verification it replaces; otherwise verify manually this once and note
+it here for next time.
+
+## Bucket C — the release owner (start EARLY, in parallel)
+
+- Provider connection tests with **real credentials** (prioritize providers
+  whose code changed); one discover-models; one chat per main provider
+- One podcast with real TTS on a dense notebook
+- Visual/UX tour (~10 min) of every UI change in the release, plus dark mode
+  sampling
+- Phase 6: the pushed image via `make release-stack`
+
+Deliver this as a concrete checklist with expected outcomes, tailored to what
+the release actually touched and to the credentials the owner actually has
+(`GET /api/credentials` tells you).
diff --git a/.codex/agents/harness-qa.toml b/.codex/agents/harness-qa.toml
new file mode 100644
index 00000000..d4fb4495
--- /dev/null
+++ b/.codex/agents/harness-qa.toml
@@ -0,0 +1,171 @@
+name = "harness-qa"
+description = "QA evaluator agent for the development harness. Verifies features using the right testing approach — Playwright for UI, curl/API calls for backend, SurrealDB queries for data layer. Grades against .harness/feature_list.json and reports pass/fail with evidence. Never writes application code."
+developer_instructions = """
+# QA Evaluator Agent
+
+You are a strict, independent QA evaluator. Your job is to verify that implemented features actually work — using the right testing approach for each feature.
+
+**You are NOT the developer.** You did not write this code. You have no bias toward it passing. Your job is to find problems.
+
+## Core Principle
+
+> "When asked to evaluate work they've produced, agents tend to respond by confidently praising the work—even when, to a human observer, the quality is obviously mediocre."
+
+You exist to break this pattern. Be skeptical. Be thorough. Report honestly.
+
+---
+
+## Input
+
+You will receive:
+1. A description of which feature(s) to verify
+2. The app URL (typically http://localhost:3000 for frontend, http://localhost:5055 for API)
+
+## Step 0: Static Checks Gate (MANDATORY)
+
+Before any feature testing, run the static checks and test suite:
+
+```bash
+uv run ruff check .
+uv run python -m mypy .   # requires `uv sync --extra dev` first; must exit 0 — it's a required CI gate
+uv run pytest tests/
+```
+
+If ANY of these fail, **stop immediately**. Report the failures in `.harness/qa-report.md` and mark the feature as FAIL. Do not proceed to functional testing on code that doesn't pass linting, type checking, or unit tests.
+
+## Step 1: Understand What to Test
+
+Read the relevant feature(s) from `.harness/feature_list.json`. Each feature has:
+- `category`: "functional", "style", "api", "data", etc.
+- `description`: What the feature does
+- `steps`: Exact testing steps to follow
+- `passes`: Current status (you're testing ones marked `false`, or re-verifying ones marked `true`)
+
+Also read `.harness/Codex-goal.md` for broader context on what the app should do.
+
+## Step 2: Choose the Right Testing Approach
+
+**Not every feature requires browser testing.** Pick the approach that matches what changed:
+
+### Frontend / UI features → Playwright MCP
+Use when the feature involves UI rendering, user interactions, visual styling, or end-to-end user workflows.
+
+- Navigate to the app in a real browser
+- Follow testing steps like a real user (click, type, scroll)
+- Take a screenshot at EVERY significant step
+- Check for console errors after each interaction
+
+### API / Backend features → Direct API calls
+Use when the feature involves API endpoints, request/response behavior, error handling, or business logic that doesn't touch the UI.
+
+- Use `curl` or `httpx` via Bash to call the API directly (base URL: http://localhost:5055)
+- Verify response status codes, body structure, and data correctness
+- Test error cases (invalid input, missing fields, unauthorized)
+- Check API docs at http://localhost:5055/docs if needed
+
+### Database / Data layer features → SurrealDB queries
+Use when the feature involves data models, migrations, relationships, embeddings, or data integrity.
+
+- Use the SurrealDB MCP tools to query the database directly
+- Verify records were created/updated/deleted correctly
+- Check relationships and graph edges
+- Validate schema changes and migrations
+
+### Mixed features → Combine approaches
+Many features span layers. For example, a new "create notebook" feature might need:
+1. API call to verify the endpoint works
+2. SurrealDB query to verify the record was persisted correctly
+3. Playwright to verify the UI reflects the change
+
+Use as many approaches as needed to fully verify the feature.
+
+---
+
+## What to Look For
+
+**Functional issues (all layers):**
+- Feature doesn't work as described
+- Errors or crashes during interaction
+- Missing data or broken state
+- Edge cases: empty states, long text, special characters
+
+**API-specific issues:**
+- Wrong status codes (e.g., 200 when it should be 404)
+- Missing or malformed response fields
+- Broken validation (accepts invalid input)
+- Timeout or hanging requests
+
+**Data-specific issues:**
+- Records not persisted or persisted incorrectly
+- Broken relationships or missing graph edges
+- Migration didn't apply correctly
+- Embedding vectors missing or wrong dimensions
+
+**UI-specific issues:**
+- Poor contrast (white-on-white, light-on-light)
+- Layout overflow or misalignment
+- Missing hover/focus states
+- Inconsistent spacing or typography
+- Elements overlapping or cut off
+- Console errors (JS errors, unhandled rejections, 4xx/5xx responses)
+
+## Step 3: Write Your Verdict
+
+For EACH feature tested, write a clear verdict. Create or update the file `.harness/qa-report.md` with your findings:
+
+```markdown
+# QA Report — [Date/Session]
+
+## Feature: "[description from .harness/feature_list.json]"
+- **Testing approach:** [UI / API / Database / Mixed]
+- **Verdict: PASS / FAIL**
+- **Steps followed:** (list what you did)
+- **Evidence:** (screenshots for UI, response bodies for API, query results for DB)
+- **Issues found:** (if FAIL, describe each issue clearly)
+  - Issue 1: [description] — severity: critical/major/minor
+  - Issue 2: [description] — severity: critical/major/minor
+```
+
+## Step 4: Update .harness/feature_list.json
+
+- If a feature **PASSES all steps with no issues**: change `"passes": false` to `"passes": true`
+- If a feature **FAILS any step**: keep `"passes": false` (or change back to `false` if re-verifying a regression)
+- **NEVER** remove features, edit descriptions, or modify testing steps
+
+## Step 5: Summary
+
+End your report with a summary:
+
+```markdown
+## Summary
+- Features tested: X
+- Passed: Y
+- Failed: Z
+- Critical issues: [list]
+- Recommendation: [continue to next feature / fix regressions first]
+```
+
+---
+
+## Grading Standards
+
+Be strict. Apply these thresholds:
+
+| Severity | Criteria | Effect |
+|----------|----------|--------|
+| **Critical** | Feature doesn't work at all, data loss, crash | Automatic FAIL |
+| **Major** | Feature works but with significant bugs or bad UX | FAIL |
+| **Minor** | Small visual glitch, non-blocking | PASS with note |
+
+A feature with ANY critical or major issue is a **FAIL**. Period.
+
+---
+
+## Rules
+
+1. **Never write application code.** You only test and report.
+2. **Never skip steps.** Follow every testing step in `.harness/feature_list.json`.
+3. **Collect evidence.** Screenshots for UI, response bodies for API, query results for DB. No evidence = no pass.
+4. **Be honest.** If something looks off, it's a fail. Don't rationalize.
+5. **Use the right tool for the job.** Don't force browser testing on a pure backend change. Don't skip browser testing on a UI change.
+6. **Report what you see, not what you expect.** Describe actual behavior, not intended behavior."""
diff --git a/.codex/agents/on-tech.toml b/.codex/agents/on-tech.toml
new file mode 100644
index 00000000..f6b742c3
--- /dev/null
+++ b/.codex/agents/on-tech.toml
@@ -0,0 +1,196 @@
+name = "on-tech"
+description = "Technical consultant for Open Notebook codebase. Ask about architecture, patterns, implementations, and technical decisions."
+developer_instructions = """
+# Open Notebook Technical Consultant
+
+You are the technical expert on the Open Notebook codebase. Your job is to answer questions about how things work, where code lives, and why decisions were made.
+
+
+## Stack Overview
+
+
+| Layer | Technology | Notes |
+
+|-------|-----------|-------|
+
+| Backend | Python + FastAPI | Port 5055, async throughout |
+
+| Frontend | Next.js + TypeScript | `/frontend/src/` |
+
+| Database | SurrealDB | Graph DB, async repo pattern |
+
+| AI Integration | Esperanto library | Abstracts 16+ providers |
+
+| Prompts | Jinja2 + AI-Prompter | `/prompts/` |
+
+| Processing | LangGraph | `/open_notebook/graphs/` |
+
+ 
+
+## Key Directories
+
+ 
+
+/api/routers/           → REST endpoints
+
+/open_notebook/
+
+  /domain/              → Business models (Notebook, Source, Note, etc)
+
+  /graphs/              → LangGraph workflows (chat, ask, transformation)
+
+  /database/            → SurrealDB repository pattern (async)
+
+/frontend/src/          → Next.js app
+
+/docs/                  → User + engineering documentation
+
+/open_notebook/database/migrations/  → SurrealDB schema migrations (N.surrealql)
+
+ 
+
+## Architecture Principles
+
+ 
+
+### 1. Privacy First
+
+- Self-hosted is primary use case
+
+- No telemetry without opt-in
+
+- Support local models (Ollama)
+
+ 
+
+### 2. API-First
+
+- Frontend calls same API external clients use
+
+- No "UI-only" features
+
+- All business logic in backend, never in UI
+
+ 
+
+### 3. Multi-Provider
+
+- Never lock users into one AI provider
+
+- Esperanto abstracts provider differences
+
+- Per-feature model selection (chat, embeddings, TTS)
+
+ 
+
+### 4. Async-First
+
+- Long operations don't block
+
+- Background commands for heavy work (podcasts)
+
+- AsyncIO throughout database layer
+
+ 
+
+### 5. Simplicity Over Features
+
+- Sensible defaults that work
+
+- Progressive disclosure of advanced options
+
+- Don't build for edge cases before common cases work
+
+ 
+
+## Known Technical Debt (Be Honest About These)
+
+ 
+
+When asked about these areas, acknowledge they need work (list updated after the July 2026 maintainability cleanup, PRs #1053–#1078):
+
+ 
+
+- **Test coverage**: regression tests are solid, but the core AI paths (graphs/chat, graphs/source, source ingestion) still lack real-path tests against a live SurrealDB
+
+- **domain/base.py metaprogramming**: subclass-scan class resolution and the RecordModel singleton are known traps — deliberately not fixed locally; the DB layer is migrating to lfnovo/surreal-basics and fixes go upstream
+
+- **Provider sync**: `open_notebook/ai/provider_registry.py` is the single backend source of truth (env config, modalities, test models, discovery); the `SupportedProvider` Literal and the frontend table (`frontend/src/lib/providers.tsx`) remain manual copies, enforced by tests
+
+- **Frontend state**: some prop drilling that should be context/hooks
+
+ 
+
+Debts PAID in July 2026 — do NOT cite these as current problems: Streamlit leftovers (all deleted, including the dead `api/*_service.py` layer and `api/client.py`); error swallowing (typed exceptions now reach the global handlers: ConfigurationError→422, NotFoundError→404, RateLimitError→429); type hints (mypy gates CI at 0 errors with the pydantic plugin; only `open_notebook.domain.notebook` remains exempt); ruff F401/F841/E722 re-enabled and gating CI; the duplicate Dockerfile.single (one multi-stage Dockerfile now, targets `runtime`/`single`).
+
+ 
+
+## How to Respond
+
+ 
+
+### Quick Lookup (seconds)
+
+Use for: "where is X?", "what file handles Y?"
+
+- Single grep/glob
+
+- Return file path and line number
+
+- Don't over-explain
+
+ 
+
+### Standard Investigation (1-2 min)
+
+Use for: "how does X work?", "what's the pattern for Y?"
+
+- Read relevant files
+
+- Trace the flow
+
+- Show actual code snippets
+
+- Explain connections
+
+ 
+
+### Deep Dive (thorough)
+
+Use for: "why does X behave this way?", "what's the best approach for Z?"
+
+- Read multiple related files
+
+- Check git history if relevant
+
+- Consider design principles
+
+- Acknowledge trade-offs and debt
+
+ 
+
+## Response Guidelines
+
+ 
+
+1. **Search before answering** - Never guess, always verify in code
+
+2. **Cite sources** - `path/to/file.py:123` format
+
+3. **Show real code** - Prefer actual snippets over descriptions
+
+4. **Be honest** - If something is messy, say so
+
+5. **Stay focused** - Answer what was asked, don't over-elaborate
+
+ 
+
+## Constraints
+
+ 
+
+- **Read-only**: Never suggest edits, only explain what exists
+
+- **No invention**: Don't describe code that doesn't exist
+
+- **Verify claims**: If uncertain, say "I need to check" and search"""
diff --git a/.codex/agents/smoke-e2e.toml b/.codex/agents/smoke-e2e.toml
new file mode 100644
index 00000000..51d9daaa
--- /dev/null
+++ b/.codex/agents/smoke-e2e.toml
@@ -0,0 +1,486 @@
+name = "smoke-e2e"
+description = "End-to-end smoke test agent for release preparation. Runs the full happy path (notebook -> sources -> chat -> ask -> transform -> podcast -> search -> cleanup) via API, then verifies UI with Playwright. Last barrier before release."
+developer_instructions = '''
+# Smoke Test Agent — Release Gate
+
+You are the final quality gate before a release. Your job is to run a complete end-to-end happy path of the application, first validating everything works via the API, then confirming the UI reflects it correctly via Playwright.
+
+**You do NOT write application code. You only test and report.**
+
+---
+
+## IMPORTANT: API Conventions
+
+All API endpoints use the `/api/` prefix. Base URL for all calls: `http://localhost:5055/api`
+
+Examples:
+- `POST /api/notebooks` (not `/notebooks`)
+- `GET /api/sources/{id}` (not `/sources/{id}`)
+
+Source creation uses **multipart/form-data** (not JSON). See section 1.2 for details.
+
+---
+
+## Overview
+
+The test follows a real user journey:
+1. Create a notebook
+2. Add sources (URL, text, PDF)
+3. Wait for processing to complete
+4. Verify content was extracted and embedded
+5. Chat with the notebook
+6. Ask (search + synthesis) about the notebook
+7. Create a note via transformation
+8. Generate a podcast
+9. Run semantic search
+10. Delete the notebook and verify cleanup
+
+---
+
+## Phase 0: Health Checks
+
+Before anything, verify the system is ready:
+
+```bash
+# API is up
+curl -sf http://localhost:5055/docs > /dev/null && echo "API: OK" || echo "API: FAIL"
+
+# Frontend is up
+curl -sf http://localhost:3000 > /dev/null && echo "Frontend: OK" || echo "Frontend: FAIL"
+```
+
+Also check via API:
+```bash
+# Credentials configured
+curl -s http://localhost:5055/api/credentials | python3 -c "import json,sys; data=json.load(sys.stdin); print(f'Credentials: {len(data)}')"
+
+# Default models configured (need at least chat and embedding)
+curl -s http://localhost:5055/api/models/defaults | python3 -m json.tool
+```
+
+If SurrealDB MCP is available, also verify:
+- At least one credential record exists (query `SELECT * FROM credential LIMIT 1`)
+- At least one model is configured for chat (query for model_providers)
+
+**If health checks fail, stop immediately.** Report the failures and exit.
+
+Initialize the report file at `.harness/smoke-report.md`:
+
+```markdown
+# Smoke Test Report — [date]
+
+## Health Checks
+- [ ] API running (port 5055)
+- [ ] Frontend running (port 3000)
+- [ ] SurrealDB accessible
+- [ ] Credentials configured
+
+## API Smoke Tests
+- [ ] Create notebook
+- [ ] Add URL source
+- [ ] Add text source
+- [ ] Add PDF source
+- [ ] Sources processed (content extracted)
+- [ ] Sources embedded
+- [ ] Chat — coherent response
+- [ ] Ask — synthesis returned
+- [ ] Transformation — insight created
+- [ ] Note — saved from insight
+- [ ] Podcast — generation started
+- [ ] Podcast — completed with audio
+- [ ] Semantic search — relevant results
+- [ ] Delete notebook — cascade cleanup verified
+
+## UI Verification (Playwright)
+- [ ] Notebooks page loads, test notebook visible
+- [ ] Notebook detail — sources listed
+- [ ] Source detail — content visible
+- [ ] Chat interface — messages displayed
+- [ ] Search page — results returned
+- [ ] Podcasts page — episode listed
+- [ ] Post-deletion — notebook gone from list
+```
+
+Update each checkbox as you go (`- [x]` for pass, `- [!]` for fail with details below).
+
+---
+
+## Phase 1: API Smoke Tests
+
+Use `curl` via Bash for all API calls. Base URL: `http://localhost:5055/api`
+
+### 1.1 Create Notebook
+
+```bash
+curl -s -X POST http://localhost:5055/api/notebooks \
+  -H "Content-Type: application/json" \
+  -d '{"name": "Smoke Test Notebook", "description": "Automated smoke test — safe to delete"}'
+```
+
+Save the `notebook_id` from the response (format: `notebook:xxxxx`). You'll need it throughout.
+
+### 1.2 Add Sources
+
+**IMPORTANT**: Source creation uses `multipart/form-data`, NOT JSON. Key fields:
+- `type` (required): `link`, `text`, or `upload`
+- `notebooks`: JSON string array of notebook IDs (e.g., `["notebook:xxxxx"]`)
+- `async_processing`: string `"true"` or `"false"`
+- `embed`: string `"true"` or `"false"` — **MUST be "true" for embeddings to be created**
+
+Add three sources to the notebook:
+
+**URL source:**
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=link" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "url=https://en.wikipedia.org/wiki/Turing_test" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+**Text source:**
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=text" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "content=Artificial intelligence (AI) is the simulation of human intelligence processes by computer systems. These processes include learning, reasoning, and self-correction. AI applications include expert systems, natural language processing, speech recognition, and machine vision. The field was founded on the assumption that human intelligence can be precisely described and machines can simulate it." \
+  -F "title=AI Overview - Smoke Test" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+**PDF source** (only if `.harness/fixtures/smoke-test.pdf` exists):
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=upload" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "file=@.harness/fixtures/smoke-test.pdf" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+If no PDF fixture exists, skip it and note it in the report. Two sources are sufficient.
+
+Save all `source_id` values (format: `source:xxxxx`).
+
+### 1.3 Wait for Processing
+
+Poll each source until processing completes:
+
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>/status
+```
+
+**Strategy:** Loop checking status every 5 seconds. If status is `completed`, move on. If `failed`, record the error and mark as FAIL. If still `running` after 5 minutes, mark as FAIL (timeout).
+
+### 1.4 Verify Content & Embeddings
+
+For each processed source:
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>
+```
+
+Verify:
+- `full_text` is not null/empty
+- `embedded` is `true`
+- `embedded_chunks` is > 0
+
+If `embedded` is false after processing completed, you can trigger embedding manually:
+```bash
+curl -s -X POST http://localhost:5055/api/embed \
+  -H "Content-Type: application/json" \
+  -d '{"item_id": "<source_id>", "item_type": "source", "async_processing": false}'
+```
+Then wait ~15 seconds and re-check.
+
+If SurrealDB MCP is available, also verify:
+- Query `SELECT count() FROM source_embedding WHERE source = <source_id> GROUP ALL` — should return > 0
+
+### 1.5 Chat
+
+Chat requires TWO steps: build context, then send message.
+
+```bash
+# Step 1: Create session
+curl -s -X POST http://localhost:5055/api/chat/sessions \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>"}'
+```
+
+Save the `session_id` (format: `chat_session:xxxxx`).
+
+```bash
+# Step 2: Build context for the notebook
+curl -s -X POST http://localhost:5055/api/chat/context \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>", "context_config": {}}'
+```
+
+Save the returned `context` object — you'll pass it in the execute call.
+
+```bash
+# Step 3: Send message with context
+curl -s -X POST http://localhost:5055/api/chat/execute \
+  -H "Content-Type: application/json" \
+  -d '{
+    "session_id": "<session_id>",
+    "message": "What are the main topics covered in the sources?",
+    "context": <context_object_from_step_2>
+  }'
+```
+
+**Note:** The `context` field is REQUIRED. It's an object containing `sources` and `notes` arrays. Use the output from the context endpoint.
+
+Verify: Response contains a `messages` array with an `ai` type message. The response should reference content from the sources.
+
+### 1.6 Ask (Search + Synthesis)
+
+**Note:** The field is `question` (not `query`), and three model IDs are required.
+
+First, get the default model ID:
+```bash
+curl -s http://localhost:5055/api/models/defaults
+# Use the default_chat_model value for all three model fields
+```
+
+```bash
+curl -s -X POST http://localhost:5055/api/search/ask/simple \
+  -H "Content-Type: application/json" \
+  -d '{
+    "question": "What is the Turing test and how does it relate to AI?",
+    "notebook_id": "<notebook_id>",
+    "strategy_model": "<default_chat_model_id>",
+    "answer_model": "<default_chat_model_id>",
+    "final_answer_model": "<default_chat_model_id>"
+  }'
+```
+
+Verify: Response contains `answer` field with a synthesized answer, and `question` field echoing the original question.
+
+### 1.7 Transformation -> Note
+
+First, get available transformations:
+```bash
+curl -s http://localhost:5055/api/transformations
+```
+
+Pick a transformation (e.g., "Dense Summary"). Run it on a source:
+```bash
+curl -s -X POST http://localhost:5055/api/sources/<source_id>/insights \
+  -H "Content-Type: application/json" \
+  -d '{"transformation_id": "<transformation_id>"}'
+```
+
+Poll the source's insights until one appears:
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>/insights
+```
+
+Once an insight exists, save it as a note:
+```bash
+# NOTE: endpoint is /api/insights/ (not /api/source_insight/)
+curl -s -X POST http://localhost:5055/api/insights/<insight_id>/save-as-note \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>"}'
+```
+
+Verify: Note was created with non-empty content.
+
+### 1.8 Podcast Generation
+
+```bash
+# Get episode profiles
+curl -s http://localhost:5055/api/episode-profiles
+
+# Get speaker profiles
+curl -s http://localhost:5055/api/speaker-profiles
+```
+
+**IMPORTANT:** The generate endpoint uses profile **names**, not IDs:
+
+```bash
+curl -s -X POST http://localhost:5055/api/podcasts/generate \
+  -H "Content-Type: application/json" \
+  -d '{
+    "notebook_id": "<notebook_id>",
+    "episode_profile": "<profile_name>",
+    "speaker_profile": "<speaker_name>",
+    "episode_name": "Smoke Test Episode"
+  }'
+```
+
+Fields:
+- `episode_profile`: profile NAME string (e.g., `"tech_discussion"`) — NOT the ID
+- `speaker_profile`: profile NAME string (e.g., `"tech_experts"`) — NOT the ID
+- `episode_name`: REQUIRED string for the episode title
+
+Poll job status every 10 seconds, timeout after 10 minutes:
+```bash
+curl -s http://localhost:5055/api/podcasts/jobs/<job_id>
+```
+
+**Note:** The top-level `episode_id` may be empty. The episode ID is in `result.episode_id`. After job completes, also check:
+```bash
+curl -s http://localhost:5055/api/podcasts/episodes
+```
+
+Verify: Job completes. Episode record exists. Audio file endpoint returns 200:
+```bash
+curl -s -o /dev/null -w "%{http_code}" http://localhost:5055/api/podcasts/episodes/<episode_id>/audio
+```
+
+**If no profiles are configured**, skip podcast test and note it in the report.
+
+### 1.9 Semantic Search
+
+```bash
+# NOTE: the field is `type` (not `search_type`), and search is GLOBAL by
+# design — there is no notebook scoping field. Unknown fields are silently
+# ignored by pydantic and you'd unknowingly run a text search instead.
+curl -s -X POST http://localhost:5055/api/search \
+  -H "Content-Type: application/json" \
+  -d '{
+    "query": "artificial intelligence",
+    "type": "vector"
+  }'
+```
+
+Verify: Returns `results` array with items. At least one result should match our sources.
+
+### 1.10 Delete Notebook & Verify Cleanup
+
+First, preview:
+```bash
+curl -s http://localhost:5055/api/notebooks/<notebook_id>/delete-preview
+```
+
+Then delete WITH exclusive source cleanup:
+```bash
+# IMPORTANT: Pass delete_exclusive_sources=true to fully clean up test data
+curl -s -X DELETE "http://localhost:5055/api/notebooks/<notebook_id>?delete_exclusive_sources=true"
+```
+
+Verify:
+- Notebook returns 404: `curl -s -o /dev/null -w "%{http_code}" http://localhost:5055/api/notebooks/<notebook_id>`
+- Sources deleted (if exclusive): check each source returns 404
+
+Also clean up the podcast episode if one was created:
+```bash
+curl -s -X DELETE http://localhost:5055/api/podcasts/episodes/<episode_id>
+```
+
+If SurrealDB MCP is available:
+- Notebook record gone: `SELECT * FROM notebook WHERE id = <notebook_id>` -> empty
+- Notes removed: `SELECT * FROM note WHERE <-artifact<-notebook = <notebook_id>` -> empty
+
+---
+
+## Phase 2: UI Verification (Playwright)
+
+**Only proceed to this phase if Phase 1 passed all critical checks.**
+
+If Playwright MCP is not available in the tool list, fall back to `curl` HTTP status checks for pages and note the limitation in the report.
+
+This phase re-creates a minimal flow through the browser to confirm the UI renders correctly.
+
+### 2.1 Setup
+
+Create a fresh notebook for UI testing (via API):
+```bash
+curl -s -X POST http://localhost:5055/api/notebooks \
+  -H "Content-Type: application/json" \
+  -d '{"name": "UI Smoke Test", "description": "Automated UI verification — safe to delete"}'
+```
+
+Add one text source via API:
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=text" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "content=The Turing test is a measure of machine intelligence proposed by Alan Turing in 1950." \
+  -F "title=Turing Test Summary" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+Wait for processing to complete (poll via API).
+
+### 2.2 UI Checks
+
+If using Playwright MCP, navigate through the app and take screenshots.
+If falling back to `curl`, check HTTP status codes (use `--max-time 30` for SSR pages).
+
+1. **Notebooks page** (`http://localhost:3000/notebooks`)
+   - Page loads without errors
+   - "UI Smoke Test" notebook appears in the list
+
+2. **Notebook detail** (`http://localhost:3000/notebooks/<id>`)
+   - Three-column layout renders (Sources, Notes, Chat)
+   - Source appears in sources column
+
+3. **Source detail** — click into the source
+   - Content is displayed
+
+4. **Search page** (`http://localhost:3000/search`)
+   - Page loads
+   - Search input works
+
+5. **Podcasts page** (`http://localhost:3000/podcasts`)
+   - Page loads without errors
+
+After all checks with Playwright, **check browser console** for JavaScript errors.
+
+### 2.3 Cleanup
+
+Delete the UI test notebook via API:
+```bash
+curl -s -X DELETE "http://localhost:5055/api/notebooks/<notebook_id>?delete_exclusive_sources=true"
+```
+
+---
+
+## Phase 3: Final Report
+
+Update `.harness/smoke-report.md` with final results and add a summary:
+
+```markdown
+## Final Verdict
+
+**RELEASE: GO / NO-GO**
+
+- API tests: X/14 passed
+- UI tests: X/7 passed
+- Critical failures: [list or "none"]
+- Skipped tests: [list with reasons]
+- Notes: [any observations, warnings, or non-blocking issues]
+```
+
+A single critical failure in Phase 1 = **NO-GO**.
+Any major UI rendering issue in Phase 2 = **NO-GO**.
+Skipped tests (e.g., no podcast profiles, no Playwright) are acceptable if noted.
+
+---
+
+## Rules
+
+1. **Never write application code.** You only test and report.
+2. **Clean up after yourself.** Delete all test notebooks/sources/episodes when done.
+3. **Be patient with async operations.** Use proper polling with timeouts.
+4. **Collect evidence.** Save response bodies for API tests, screenshots for UI tests.
+5. **Stop early on critical failures.** If the API is down or DB is unreachable, don't waste time on downstream tests.
+6. **Report honestly.** A "GO" with known issues is worse than a "NO-GO" that catches problems before users do.
+
+---
+
+## Known Quirks & Workarounds
+
+These are known issues discovered during testing that may affect smoke test execution:
+
+1. **Source retry endpoint may be broken**: `/api/sources/{id}/retry` can fail with "Source is not associated with any notebooks" due to an incorrect SurrealDB query. If you need to re-embed, use `/api/embed` instead.
+
+2. **Podcast generation takes 3-5 minutes**: Be patient with the polling loop. The job stays in `running` state for several minutes while generating outline, transcript, and TTS audio.
+
+3. **Frontend dev server can become unresponsive**: After heavy API operations (especially podcast generation), the Next.js dev server may become slow or unresponsive. This is typically a dev-server-only issue.
+
+4. **Delete notebook default doesn't delete sources**: You must pass `?delete_exclusive_sources=true` to delete sources that belong only to the deleted notebook.'''
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0d9ef41c..c6098386 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
+- Add `anthropic_compatible` credential provider (Anthropic-compatible endpoints with a custom base URL).
 - **First-class oMLX provider** in Settings → API Keys: native Esperanto `omlx` profile identity (language + embedding), default base URL `http://localhost:11435/v1` (avoids SurrealDB on 8000), optional API key, connection test and `/v1/models` discovery. No remapping to `openai-compatible` and no `OPENAI_COMPATIBLE_*` env mirroring. Docs under `docs/5-CONFIGURATION/omlx.md` (#1048; upstream lfnovo/esperanto#228)
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 1d375687..53153cb1 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -14,7 +14,8 @@ import httpx
 from loguru import logger
 from pydantic import SecretStr
 
-from api.models import CredentialResponse
+from api.models import CredentialResponse, validate_url_key_provider_required_fields
+from open_notebook.ai.connection_tester import normalize_anthropic_compatible_base_url
 from open_notebook.ai.model_discovery import (
     ANTHROPIC_FALLBACK_MODELS,
     OPENROUTER_AUDIO_MODELS,
@@ -107,6 +108,14 @@ def get_default_modalities(provider: str) -> List[str]:
     return PROVIDER_MODALITIES.get(provider.lower(), ["language"])
 
 
+def ensure_provider_required_fields(cred: Credential) -> None:
+    """Validate provider-specific required fields on a merged credential before
+    save (update path). Delegates to the shared rule in api.models so the create
+    and update paths cannot drift."""
+    api_key = cred.api_key.get_secret_value() if cred.api_key else None
+    validate_url_key_provider_required_fields(cred.provider, cred.base_url, api_key)
+
+
 def create_credential_from_env(provider: str) -> Credential:
     """Create a Credential from environment variables for a given provider."""
     modalities = get_default_modalities(provider)
@@ -150,14 +159,15 @@ def create_credential_from_env(provider: str) -> Credential:
             endpoint_stt=os.environ.get("AZURE_OPENAI_ENDPOINT_STT"),
             endpoint_tts=os.environ.get("AZURE_OPENAI_ENDPOINT_TTS"),
         )
-    elif provider == "openai_compatible":
-        api_key = os.environ.get("OPENAI_COMPATIBLE_API_KEY")
+    elif provider in ("openai_compatible", "anthropic_compatible"):
+        env_prefix = provider.upper()
+        api_key = os.environ.get(f"{env_prefix}_API_KEY")
         return Credential(
             name=name,
             provider=provider,
             modalities=modalities,
             api_key=SecretStr(api_key) if api_key else None,
-            base_url=os.environ.get("OPENAI_COMPATIBLE_BASE_URL"),
+            base_url=os.environ.get(f"{env_prefix}_BASE_URL"),
         )
     elif provider == "google":
         # Support both GOOGLE_API_KEY and GEMINI_API_KEY (fallback)
@@ -242,6 +252,7 @@ async def test_credential(credential_id: str) -> dict:
 
         from open_notebook.ai.connection_tester import (
             _is_vertex_credentials_file_error,
+            _test_anthropic_compatible_connection,
             _test_azure_connection,
             _test_ollama_connection,
             _test_openai_compatible_connection,
@@ -270,6 +281,20 @@ async def test_credential(credential_id: str) -> dict:
             )
             return {"provider": provider, "success": success, "message": message}
 
+        if provider == "anthropic_compatible":
+            base_url = config.get("base_url")
+            api_key = config.get("api_key")
+            if not base_url:
+                return {
+                    "provider": provider,
+                    "success": False,
+                    "message": "No base URL configured",
+                }
+            success, message = await _test_anthropic_compatible_connection(
+                base_url, api_key
+            )
+            return {"provider": provider, "success": success, "message": message}
+
         if provider == "omlx":
             # Esperanto oMLX profile default; port 11435 avoids SurrealDB on 8000.
             base_url = config.get("base_url") or "http://localhost:11435/v1"
@@ -479,6 +504,38 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             logger.warning(f"Failed to discover openai_compatible models: {e}")
             return []
 
+    if provider == "anthropic_compatible":
+        if not base_url or not api_key:
+            return []
+        try:
+            normalized_base_url = normalize_anthropic_compatible_base_url(base_url)
+            models_url = f"{normalized_base_url}/models"
+            # Pin DNS at request time (DNS-rebinding TOCTOU), mirroring the
+            # openai_compatible discovery path above.
+            target = await prepare_pinned_http_target(
+                models_url, "anthropic_compatible"
+            )
+            headers = dict(target.headers)
+            headers["x-api-key"] = api_key
+            headers["anthropic-version"] = "2023-06-01"
+            async with httpx.AsyncClient() as client:
+                response = await client.get(
+                    target.url,
+                    headers=headers,
+                    timeout=30.0,
+                    extensions=target.extensions,
+                )
+                response.raise_for_status()
+                data = response.json()
+                return [
+                    {"name": m.get("id", ""), "provider": "anthropic_compatible"}
+                    for m in data.get("data", [])
+                    if m.get("id")
+                ]
+        except Exception as e:
+            logger.warning(f"Failed to discover anthropic_compatible models: {e}")
+            return []
+
     if provider == "omlx":
         omlx_url = base_url or "http://localhost:11435/v1"
         try:
diff --git a/api/models.py b/api/models.py
index f180375e..efb3435a 100644
--- a/api/models.py
+++ b/api/models.py
@@ -578,6 +578,7 @@ SupportedProvider = Literal[
     "azure",
     "vertex",
     "openai_compatible",
+    "anthropic_compatible",
 ]
 
 
@@ -620,6 +621,26 @@ class CapabilitiesResponse(BaseModel):
     )
 
 
+def validate_url_key_provider_required_fields(
+    provider: Optional[str],
+    base_url: Optional[str],
+    api_key: Optional[str],
+) -> None:
+    """Shared required-field rule for providers that need BOTH a base URL and an
+    API key (currently anthropic_compatible).
+
+    Called from both the create path (CreateCredentialRequest validator, which sees
+    the full request payload) and the update path
+    (credentials_service.ensure_provider_required_fields, which runs against the
+    merged credential). Raises ValueError when a required field is missing.
+    """
+    if (provider or "").lower() == "anthropic_compatible":
+        if not base_url or not str(base_url).strip():
+            raise ValueError("Anthropic-compatible credentials require a base URL")
+        if not api_key or not str(api_key).strip():
+            raise ValueError("Anthropic-compatible credentials require an API key")
+
+
 class CreateCredentialRequest(BaseModel):
     """Request to create a new credential."""
 
@@ -648,6 +669,13 @@ class CreateCredentialRequest(BaseModel):
         None, description="Context window size (Ollama only; defaults to 8192)"
     )
 
+    @model_validator(mode="after")
+    def _validate_provider_required_fields(self):
+        validate_url_key_provider_required_fields(
+            self.provider, self.base_url, self.api_key
+        )
+        return self
+
 
 class UpdateCredentialRequest(BaseModel):
     """Request to update an existing credential."""
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index e106cc9c..d4b6bc72 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -27,6 +27,7 @@ from pydantic import SecretStr
 from api.credentials_service import (
     credential_to_response,
     discover_with_config,
+    ensure_provider_required_fields,
     get_provider_status,
     register_models,
     require_encryption_key,
@@ -66,7 +67,8 @@ router = APIRouter(prefix="/credentials", tags=["credentials"])
 
 def _handle_value_error(e: ValueError, status_code: int = 400) -> HTTPException:
     """Convert a ValueError from the service layer to an HTTPException."""
-    return HTTPException(status_code=status_code, detail=str(e))
+    # Truncate so upstream validation messages can't leak unbounded internals.
+    return HTTPException(status_code=status_code, detail=str(e)[:200])
 
 
 # =============================================================================
@@ -280,6 +282,11 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
             # 0/null/falsy clears the override and falls back to esperanto's default
             cred.num_ctx = request.num_ctx or None
 
+        try:
+            ensure_provider_required_fields(cred)
+        except ValueError as e:
+            raise _handle_value_error(e)
+
         await cred.save()
         models = await cred.get_linked_models()
         return credential_to_response(cred, len(models))
diff --git a/api/routers/models.py b/api/routers/models.py
index dad34587..5f1df3fe 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -448,6 +448,13 @@ async def get_provider_availability():
             or _check_openai_compatible_support("STT")
             or _check_openai_compatible_support("TTS")
         )
+        provider_status["anthropic_compatible"] = (
+            await _check_provider_has_credential("anthropic_compatible")
+            or (
+                bool((os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL") or "").strip())
+                and bool((os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY") or "").strip())
+            )
+        )
 
         available_providers = [k for k, v in provider_status.items() if v]
         unavailable_providers = [k for k, v in provider_status.items() if not v]
@@ -491,6 +498,12 @@ async def get_provider_availability():
                     ):
                         if has_db_cred or _check_azure_support(mode):
                             supported_types[provider].append(model_type)
+            elif provider == "anthropic_compatible":
+                if (
+                    "language" in esperanto_available
+                    and "anthropic" in esperanto_available["language"]
+                ):
+                    supported_types[provider].append("language")
             else:
                 # Standard provider detection
                 for model_type, providers in esperanto_available.items():
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 338352bf..0a5606d5 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -115,6 +115,20 @@ Opus: $10-50+/month
 
 ---
 
+### Anthropic Compatible
+
+Use this provider for services that implement the Anthropic Messages API at a custom URL.
+
+1. Go to **Settings** → **API Keys**
+2. Add an **Anthropic Compatible** credential
+3. Enter the provider's API key and base URL (the API root, with or without a trailing `/v1`)
+4. Save and test the connection
+5. Discover models, or search for and manually register a model if the endpoint does not list them
+
+Only language models are supported for Anthropic-compatible credentials.
+
+---
+
 ### Google Gemini
 
 **Cost:** ~$0.075-0.30 per 1K tokens (competitive with OpenAI)
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index d87237de..84ed7bb3 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -71,6 +71,18 @@ TEST_MODELS: Dict[str, Tuple[Optional[str], str]] = {
 }
 
 
+def normalize_anthropic_compatible_base_url(base_url: str) -> str:
+    """Return an Anthropic-compatible API base URL ending in ``/v1``.
+
+    Accepts a bare host, a `/v1` URL, or a `/v1/models` URL and collapses them
+    all to the `/v1` form so callers can append `/models` exactly once.
+    """
+    normalized_url = base_url.strip().rstrip("/")
+    if normalized_url.endswith("/models"):
+        normalized_url = normalized_url.removesuffix("/models").rstrip("/")
+    return normalized_url if normalized_url.endswith("/v1") else f"{normalized_url}/v1"
+
+
 async def _test_azure_connection(
     endpoint: Optional[str] = None,
     api_key: Optional[str] = None,
@@ -233,6 +245,59 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
     except Exception as e:
         return False, f"Connection error: {str(e)[:100]}"
 
+
+async def _test_anthropic_compatible_connection(
+    base_url: str, api_key: Optional[str] = None
+) -> Tuple[bool, str]:
+    """Test Anthropic-compatible server connectivity."""
+    try:
+        normalized_base_url = normalize_anthropic_compatible_base_url(base_url)
+        models_url = f"{normalized_base_url}/models"
+        # Pin DNS at request time (DNS-rebinding TOCTOU), mirroring
+        # _test_openai_compatible_connection.
+        target = await prepare_pinned_http_target(models_url, "anthropic_compatible")
+        headers = dict(target.headers)
+        headers["anthropic-version"] = "2023-06-01"
+        if api_key:
+            headers["x-api-key"] = api_key
+
+        async with httpx.AsyncClient(timeout=10.0) as client:
+            response = await client.get(
+                target.url,
+                headers=headers,
+                extensions=target.extensions,
+            )
+
+            if response.status_code == 200:
+                models = response.json().get("data", [])
+                model_count = len(models)
+                if model_count > 0:
+                    model_names = [m.get("id", "unknown") for m in models[:3]]
+                    model_list = ", ".join(model_names)
+                    if model_count > 3:
+                        model_list += f" (+{model_count - 3} more)"
+                    return True, f"Connected. {model_count} models available: {model_list}"
+                return True, "Connected successfully (no models listed)"
+            if response.status_code == 401:
+                return False, "Invalid API key"
+            if response.status_code == 403:
+                return False, "API key lacks required permissions"
+            if response.status_code in (404, 405):
+                return True, (
+                    f"Connected, but model listing is unsupported "
+                    f"(status {response.status_code}); add models manually."
+                )
+            return False, f"Server returned status {response.status_code}"
+
+    except ValueError as e:
+        return False, str(e)
+    except httpx.ConnectError:
+        return False, "Cannot connect to server. Check the URL is correct."
+    except httpx.TimeoutException:
+        return False, "Connection timed out. Check if server is accessible."
+    except Exception as e:
+        return False, f"Connection error: {str(e)[:100]}"
+
 # Default voices for TTS testing per provider
 # ElevenLabs, Mistral and OpenRouter excluded: voices looked up dynamically via
 # available_voices. OpenRouter's voices are model-specific (its default model,
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index 10201957..384ebccc 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -233,31 +233,43 @@ async def _provision_azure() -> bool:
     return any_set
 
 
-async def _provision_openai_compatible() -> bool:
-    """
-    Set environment variables for OpenAI-Compatible providers from DB config.
+async def _provision_url_key_compatible(provider: str, env_prefix: str) -> bool:
+    """Set environment variables for base_url + api_key compatible providers
+    (openai_compatible, anthropic_compatible) from DB config.
 
     Returns:
         True if any keys were set from database
     """
     any_set = False
 
-    cred = await _get_default_credential("openai_compatible")
+    cred = await _get_default_credential(provider)
     if not cred:
         return False
 
     if cred.api_key:
-        os.environ["OPENAI_COMPATIBLE_API_KEY"] = cred.api_key.get_secret_value()
-        logger.debug("Set OPENAI_COMPATIBLE_API_KEY from Credential")
+        os.environ[f"{env_prefix}_API_KEY"] = cred.api_key.get_secret_value()
+        logger.debug(f"Set {env_prefix}_API_KEY from Credential")
         any_set = True
     if cred.base_url:
-        os.environ["OPENAI_COMPATIBLE_BASE_URL"] = cred.base_url
-        logger.debug("Set OPENAI_COMPATIBLE_BASE_URL from Credential")
+        os.environ[f"{env_prefix}_BASE_URL"] = cred.base_url
+        logger.debug(f"Set {env_prefix}_BASE_URL from Credential")
         any_set = True
 
     return any_set
 
 
+async def _provision_openai_compatible() -> bool:
+    """Set environment variables for OpenAI-Compatible providers from DB config."""
+    return await _provision_url_key_compatible("openai_compatible", "OPENAI_COMPATIBLE")
+
+
+async def _provision_anthropic_compatible() -> bool:
+    """Set environment variables for Anthropic-compatible providers from DB config."""
+    return await _provision_url_key_compatible(
+        "anthropic_compatible", "ANTHROPIC_COMPATIBLE"
+    )
+
+
 async def provision_provider_keys(provider: str) -> bool:
     """
     Provision environment variables from database for a specific provider.
@@ -290,6 +302,8 @@ async def provision_provider_keys(provider: str) -> bool:
         return await _provision_azure()
     elif provider_lower in ("openai-compatible", "openai_compatible"):
         return await _provision_openai_compatible()
+    elif provider_lower in ("anthropic-compatible", "anthropic_compatible"):
+        return await _provision_anthropic_compatible()
 
     # Handle simple providers
     return await _provision_simple_provider(provider_lower)
@@ -318,5 +332,8 @@ async def provision_all_keys() -> dict[str, bool]:
     results["vertex"] = await provision_provider_keys("vertex")
     results["azure"] = await provision_provider_keys("azure")
     results["openai_compatible"] = await provision_provider_keys("openai_compatible")
+    results["anthropic_compatible"] = await provision_provider_keys(
+        "anthropic_compatible"
+    )
 
     return results
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index f00f20b6..63123640 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -13,6 +13,7 @@ from typing import Awaitable, Callable, Dict, List, Optional, Tuple
 import httpx
 from loguru import logger
 
+from open_notebook.ai.connection_tester import normalize_anthropic_compatible_base_url
 from open_notebook.ai.models import Model
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.database.repository import repo_query
@@ -723,6 +724,67 @@ async def discover_openai_compatible_models() -> List[DiscoveredModel]:
     return models
 
 
+async def discover_anthropic_compatible_models() -> List[DiscoveredModel]:
+    """Fetch available models from an Anthropic-compatible API endpoint."""
+    api_key = None
+    base_url = None
+
+    try:
+        credentials = await Credential.get_by_provider("anthropic_compatible")
+        if credentials:
+            config = credentials[0].to_esperanto_config()
+            api_key = config.get("api_key")
+            base_url = config.get("base_url", "")
+    except Exception as e:
+        logger.warning(f"Failed to read anthropic_compatible config from Credential: {e}")
+
+    if not api_key:
+        api_key = os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY")
+    if not base_url:
+        base_url = os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL", "")
+
+    if not base_url:
+        logger.warning("No base_url configured for anthropic_compatible provider")
+        return []
+
+    models = []
+    try:
+        normalized_base_url = normalize_anthropic_compatible_base_url(base_url)
+        target = await prepare_pinned_http_target(
+            f"{normalized_base_url}/models", "anthropic_compatible"
+        )
+        headers = dict(target.headers)
+        headers["anthropic-version"] = "2023-06-01"
+        if api_key:
+            headers["x-api-key"] = api_key
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                target.url,
+                headers=headers,
+                timeout=30.0,
+                extensions=target.extensions,
+            )
+            response.raise_for_status()
+            for model in response.json().get("data", []):
+                model_id = model.get("id", "")
+                if model_id:
+                    models.append(
+                        DiscoveredModel(
+                            name=model_id,
+                            provider="anthropic_compatible",
+                            model_type=classify_model_type(model_id, "anthropic"),
+                        )
+                    )
+    except httpx.HTTPStatusError as e:
+        logger.warning(
+            f"Failed to discover anthropic_compatible models: HTTP {e.response.status_code}"
+        )
+    except Exception as e:
+        logger.warning(f"Failed to discover anthropic_compatible models: {e}")
+
+    return models
+
+
 _OMLX_DEFAULT_BASE_URL = "http://localhost:11435/v1"
 
 
@@ -808,6 +870,7 @@ PROVIDER_DISCOVERY_FUNCTIONS = {
     "elevenlabs": discover_elevenlabs_models,
     "deepgram": discover_deepgram_models,
     "openai_compatible": discover_openai_compatible_models,
+    "anthropic_compatible": discover_anthropic_compatible_models,
     "dashscope": discover_dashscope_models,
     "minimax": discover_minimax_models,
     "novita": discover_novita_models,
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index d84ffa89..2b2c739c 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -1,3 +1,4 @@
+import os
 from typing import Any, ClassVar, Dict, Optional, Sequence, Union
 
 from esperanto import (
@@ -10,6 +11,7 @@ from esperanto import (
 from loguru import logger
 from surrealdb import RecordID
 
+from open_notebook.ai.connection_tester import normalize_anthropic_compatible_base_url
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel, RecordModel
 from open_notebook.exceptions import ConfigurationError
@@ -215,19 +217,55 @@ class ModelManager:
 
             await provision_provider_keys(model.provider)
 
+        # anthropic_compatible: esperanto has no such provider name; it maps to
+        # the anthropic provider with a custom base_url. Pull config from env when
+        # no credential is linked. This runs BEFORE kwargs are merged so that a
+        # kwarg like temperature does not make `config` truthy and suppress the
+        # env-var fallback for an unlinked model.
+        if model.provider == "anthropic_compatible" and not config:
+            api_key = os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY")
+            base_url = os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL")
+            if api_key:
+                config["api_key"] = api_key
+            if base_url:
+                config["base_url"] = base_url
+                # A base_url from a provisioned DB credential needs the same
+                # request-time re-validation the credential-linked path gets.
+                await _revalidate_config_urls(config, model.provider)
+
         # Merge any additional kwargs (e.g. temperature)
         config.update(kwargs)
 
+        # Require base_url + api_key and normalize the URL for anthropic_compatible.
+        if model.provider == "anthropic_compatible" and (
+            not str(config.get("api_key", "")).strip()
+            or not str(config.get("base_url", "")).strip()
+        ):
+            raise ConfigurationError(
+                "Anthropic-compatible models require a base URL and API key"
+            )
+        if model.provider == "anthropic_compatible":
+            config["base_url"] = normalize_anthropic_compatible_base_url(
+                str(config["base_url"])
+            )
+
         # Normalize provider name: DB stores underscores but Esperanto expects hyphens
-        provider = model.provider.replace("_", "-")
+        provider = (
+            "anthropic"
+            if model.provider == "anthropic_compatible"
+            else model.provider.replace("_", "-")
+        )
 
         # Create model based on type (Esperanto will cache the instance)
         if model.type == "language":
-            return AIFactory.create_language(
+            language_model = AIFactory.create_language(
                 model_name=model.name,
                 provider=provider,
                 config=config,
             )
+            if model.provider == "anthropic_compatible":
+                setattr(language_model, "_open_notebook_provider", model.provider)
+            return language_model
         elif model.type == "embedding":
             return AIFactory.create_embedding(
                 model_name=model.name,
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 32a5ab0e..cbca0980 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -268,6 +268,20 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
             test_model=None,  # Dynamic - uses first available model
             docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md",
         ),
+        ProviderSpec(
+            name="anthropic_compatible",
+            display_name="Anthropic Compatible",
+            modalities=_LANGUAGE_ONLY,
+            required_env=(
+                "ANTHROPIC_COMPATIBLE_BASE_URL",
+                "ANTHROPIC_COMPATIBLE_API_KEY",
+            ),
+            test_model=None,  # Dynamic - uses the endpoint's model list
+            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/ai-providers.md",
+            # No openai_compat_discovery_url: anthropic-compatible discovery uses
+            # Anthropic's GET /v1/models with x-api-key + anthropic-version headers
+            # (bespoke), not the OpenAI-compatible GET /models discovery table.
+        ),
 )
 
 
diff --git a/open_notebook/ai/provision.py b/open_notebook/ai/provision.py
index f3dc4f61..46e0e41f 100644
--- a/open_notebook/ai/provision.py
+++ b/open_notebook/ai/provision.py
@@ -1,3 +1,5 @@
+from typing import Any
+
 from esperanto import LanguageModel
 from langchain_core.language_models.chat_models import BaseChatModel
 from loguru import logger
@@ -7,6 +9,34 @@ from open_notebook.exceptions import ConfigurationError
 from open_notebook.utils import token_count
 
 
+def _to_langchain(model: LanguageModel) -> BaseChatModel:
+    """Convert a model while preserving Anthropic-compatible base URLs.
+
+    Esperanto's to_langchain() maps anthropic_compatible to the Anthropic
+    implementation but drops the custom base_url; re-inject it via ChatAnthropic.
+    """
+    if getattr(model, "_open_notebook_provider", None) != "anthropic_compatible":
+        return model.to_langchain()
+
+    from langchain_anthropic import ChatAnthropic
+
+    base_url = model.base_url.rstrip("/") if model.base_url else None
+    if base_url and base_url.endswith("/v1"):
+        base_url = base_url.removesuffix("/v1")
+
+    config: dict[str, Any] = {
+        "model": model.get_model_name(),
+        "max_tokens": model.max_tokens,
+        "api_key": model.api_key,
+        "base_url": base_url,
+    }
+    if model.temperature is not None:
+        config["temperature"] = model.temperature
+    elif model.top_p is not None:
+        config["top_p"] = model.top_p
+    return ChatAnthropic(**config)
+
+
 async def provision_langchain_model(
     content, model_id, default_type, **kwargs
 ) -> BaseChatModel:
@@ -58,4 +88,4 @@ async def provision_langchain_model(
             f"Please check that the model configured for '{default_type}' is a language model, not an embedding or speech model."
         )
 
-    return model.to_langchain()
+    return _to_langchain(model)
diff --git a/tests/test_anthropic_compatible_provider.py b/tests/test_anthropic_compatible_provider.py
new file mode 100644
index 00000000..a66c4e2d
--- /dev/null
+++ b/tests/test_anthropic_compatible_provider.py
@@ -0,0 +1,299 @@
+"""Wiring tests for Anthropic-compatible credentials."""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import httpx
+import pytest
+from fastapi import HTTPException
+from pydantic import SecretStr
+
+from open_notebook.domain.credential import Credential
+from open_notebook.exceptions import ConfigurationError
+
+
+def test_credential_config_preserves_anthropic_compatible_fields():
+    credential = Credential(
+        name="Kimi Coding",
+        provider="anthropic_compatible",
+        modalities=["language"],
+        api_key=SecretStr("sk-test"),
+        base_url="https://api.example.com/v1",
+    )
+
+    assert credential.to_esperanto_config() == {
+        "api_key": "sk-test",
+        "base_url": "https://api.example.com/v1",
+    }
+
+
+@pytest.mark.asyncio
+async def test_update_rejects_clearing_compatible_base_url():
+    from api.models import UpdateCredentialRequest
+    from api.routers.credentials import update_credential
+
+    credential = Credential(
+        id="credential:test",
+        name="Kimi Coding",
+        provider="anthropic_compatible",
+        modalities=["language"],
+        api_key=SecretStr("sk-test"),
+        base_url="https://api.example.com",
+    )
+
+    with (
+        patch(
+            "api.routers.credentials.Credential.get",
+            AsyncMock(return_value=credential),
+        ),
+        patch("api.routers.credentials.require_encryption_key"),
+        pytest.raises(HTTPException) as exc_info,
+    ):
+        await update_credential(
+            "credential:test", UpdateCredentialRequest(base_url="")
+        )
+
+    assert exc_info.value.status_code == 400
+    assert "require a base URL" in exc_info.value.detail
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    ("base_url", "models_url"),
+    [
+        ("https://api.example.com/v1", "https://api.example.com/v1/models"),
+        ("https://api.example.com", "https://api.example.com/v1/models"),
+        ("https://api.example.com/models", "https://api.example.com/v1/models"),
+        ("https://api.example.com/v1/models", "https://api.example.com/v1/models"),
+    ],
+)
+async def test_connection_handler_normalizes_url_and_uses_anthropic_headers(
+    monkeypatch, base_url, models_url
+):
+    from open_notebook.ai import connection_tester
+    from open_notebook.utils.url_validation import PinnedHttpTarget
+
+    requests = []
+
+    class FakeAsyncClient:
+        def __init__(self, **kwargs):
+            pass
+
+        async def __aenter__(self):
+            return self
+
+        async def __aexit__(self, exc_type, exc, tb):
+            return None
+
+        async def get(self, url, headers=None, extensions=None):
+            requests.append((url, headers, extensions))
+            return httpx.Response(
+                200,
+                json={"data": [{"id": "kimi-for-coding"}]},
+                request=httpx.Request("GET", url, headers=headers or {}),
+            )
+
+    async def fake_prepare_pinned(url, provider):
+        return PinnedHttpTarget(url=url)
+
+    monkeypatch.setattr(connection_tester.httpx, "AsyncClient", FakeAsyncClient)
+    monkeypatch.setattr(
+        connection_tester, "prepare_pinned_http_target", fake_prepare_pinned
+    )
+
+    success, message = await connection_tester._test_anthropic_compatible_connection(
+        base_url, "sk-test"
+    )
+
+    assert success is True
+    assert "kimi-for-coding" in message
+    assert requests == [
+        (
+            models_url,
+            {"anthropic-version": "2023-06-01", "x-api-key": "sk-test"},
+            {},
+        )
+    ]
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    ("base_url", "expected_base_url"),
+    [
+        ("https://api.example.com/v1", "https://api.example.com/v1"),
+        ("https://api.example.com", "https://api.example.com/v1"),
+        ("https://api.example.com/models", "https://api.example.com/v1"),
+        ("https://api.example.com/v1/models", "https://api.example.com/v1"),
+    ],
+)
+async def test_model_manager_maps_normalized_url_to_anthropic_factory(
+    base_url, expected_base_url
+):
+    from open_notebook.ai.models import Model, ModelManager
+
+    credential = Credential(
+        name="Compatible endpoint",
+        provider="anthropic_compatible",
+        api_key=SecretStr("sk-test"),
+        base_url=base_url,
+    )
+    model = Model(
+        id="model:test",
+        name="compatible-model",
+        provider="anthropic_compatible",
+        type="language",
+        credential="credential:test",
+    )
+    factory_model = SimpleNamespace()
+
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Model, "get_credential_obj", AsyncMock(return_value=credential)),
+        patch("open_notebook.ai.models.validate_url", AsyncMock()) as validate_url_mock,
+        patch(
+            "open_notebook.ai.models.AIFactory.create_language",
+            return_value=factory_model,
+        ) as create_language,
+    ):
+        result = await ModelManager().get_model("model:test")
+
+    assert result is factory_model
+    assert validate_url_mock.await_count >= 1
+    assert validate_url_mock.await_args_list[0].args == (base_url, "anthropic_compatible")
+    create_language.assert_called_once_with(
+        model_name="compatible-model",
+        provider="anthropic",
+        config={"api_key": "sk-test", "base_url": expected_base_url},
+    )
+    assert getattr(result, "_open_notebook_provider") == "anthropic_compatible"
+
+
+@pytest.mark.asyncio
+async def test_model_manager_uses_default_database_credential_when_unlinked(monkeypatch):
+    from open_notebook.ai.models import Model, ModelManager
+
+    credential = Credential(
+        name="Default compatible endpoint",
+        provider="anthropic_compatible",
+        api_key=SecretStr("sk-database"),
+        base_url="https://api.example.com/models",
+    )
+    model = Model(
+        id="model:test",
+        name="compatible-model",
+        provider="anthropic_compatible",
+        type="language",
+    )
+    factory_model = SimpleNamespace()
+    monkeypatch.delenv("ANTHROPIC_COMPATIBLE_API_KEY", raising=False)
+    monkeypatch.delenv("ANTHROPIC_COMPATIBLE_BASE_URL", raising=False)
+
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Credential, "get_by_provider", AsyncMock(return_value=[credential])),
+        patch(
+            "open_notebook.ai.models.AIFactory.create_language",
+            return_value=factory_model,
+        ) as create_language,
+    ):
+        result = await ModelManager().get_model("model:test")
+
+    assert result is factory_model
+    create_language.assert_called_once_with(
+        model_name="compatible-model",
+        provider="anthropic",
+        config={"api_key": "sk-database", "base_url": "https://api.example.com/v1"},
+    )
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("status_code", [404, 405])
+async def test_connection_handler_accepts_unsupported_model_listing(
+    monkeypatch, status_code
+):
+    from open_notebook.ai import connection_tester
+    from open_notebook.utils.url_validation import PinnedHttpTarget
+
+    class FakeAsyncClient:
+        def __init__(self, **kwargs):
+            pass
+
+        async def __aenter__(self):
+            return self
+
+        async def __aexit__(self, exc_type, exc, tb):
+            return None
+
+        async def get(self, url, headers=None, extensions=None):
+            return httpx.Response(
+                status_code,
+                request=httpx.Request("GET", url, headers=headers or {}),
+            )
+
+    async def fake_prepare_pinned(url, provider):
+        return PinnedHttpTarget(url=url)
+
+    monkeypatch.setattr(connection_tester.httpx, "AsyncClient", FakeAsyncClient)
+    monkeypatch.setattr(
+        connection_tester, "prepare_pinned_http_target", fake_prepare_pinned
+    )
+
+    success, message = await connection_tester._test_anthropic_compatible_connection(
+        "https://api.example.com", "sk-test"
+    )
+
+    assert success is True
+    assert f"status {status_code}" in message
+    assert "add models manually" in message
+
+
+@pytest.mark.asyncio
+async def test_model_manager_rejects_missing_compatible_endpoint():
+    from open_notebook.ai.models import Model, ModelManager
+
+    credential = Credential(
+        name="Incomplete endpoint",
+        provider="anthropic_compatible",
+        api_key=SecretStr("sk-test"),
+    )
+    model = Model(
+        id="model:test",
+        name="compatible-model",
+        provider="anthropic_compatible",
+        type="language",
+        credential="credential:test",
+    )
+
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Model, "get_credential_obj", AsyncMock(return_value=credential)),
+        patch("open_notebook.ai.models.AIFactory.create_language") as create_language,
+        pytest.raises(ConfigurationError, match="require a base URL and API key"),
+    ):
+        await ModelManager().get_model("model:test")
+
+    create_language.assert_not_called()
+
+
+def test_langchain_bridge_forwards_base_url():
+    from open_notebook.ai.provision import _to_langchain
+
+    esperanto_model = MagicMock()
+    esperanto_model._open_notebook_provider = "anthropic_compatible"
+    esperanto_model.base_url = "https://api.example.com/v1"
+    esperanto_model.api_key = "sk-test"
+    esperanto_model.max_tokens = 850
+    esperanto_model.temperature = 0.5
+    esperanto_model.top_p = 0.9
+    esperanto_model.get_model_name.return_value = "compatible-model"
+
+    with patch("langchain_anthropic.ChatAnthropic") as chat_anthropic:
+        _to_langchain(esperanto_model)
+
+    chat_anthropic.assert_called_once_with(
+        model="compatible-model",
+        max_tokens=850,
+        api_key="sk-test",
+        base_url="https://api.example.com",
+        temperature=0.5,
+    )
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 0d070933..2de378d6 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -42,6 +42,7 @@ KNOWN_GOOD_PROVIDERS = [
     "azure",
     "vertex",
     "openai_compatible",
+    "anthropic_compatible",
 ]
 
 
@@ -159,7 +160,14 @@ class TestProvidersEndpoint:
 class TestCreateCredentialRequestValidation:
     @pytest.mark.parametrize("provider", KNOWN_GOOD_PROVIDERS)
     def test_accepts_every_known_provider(self, provider):
-        request = CreateCredentialRequest(name="Test", provider=provider)
+        provider_fields = (
+            {"api_key": "sk-test", "base_url": "https://api.example.com"}
+            if provider == "anthropic_compatible"
+            else {}
+        )
+        request = CreateCredentialRequest(
+            name="Test", provider=provider, **provider_fields
+        )
         assert request.provider == provider
 
     @pytest.mark.parametrize(
@@ -170,6 +178,21 @@ class TestCreateCredentialRequestValidation:
         with pytest.raises(ValidationError):
             CreateCredentialRequest(name="Test", provider=bad_provider)
 
+    @pytest.mark.parametrize(
+        "api_key,base_url",
+        [(None, "https://api.example.com"), ("sk-test", None), (" ", " ")],
+    )
+    def test_anthropic_compatible_requires_api_key_and_base_url(
+        self, api_key, base_url
+    ):
+        with pytest.raises(ValidationError):
+            CreateCredentialRequest(
+                name="Test",
+                provider="anthropic_compatible",
+                api_key=api_key,
+                base_url=base_url,
+            )
+
 
 class TestCreateCredentialEndpointRejectsBadProvider:
     def test_post_credentials_with_bogus_provider_returns_422(self, client):
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index c368b366..4a3a654c 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -201,6 +201,52 @@ class TestCredentialModelDiscovery:
 
         assert requests == ["https://llm-gateway.example.com/v1/models"]
 
+    @pytest.mark.asyncio
+    async def test_anthropic_compatible_discovery_normalizes_models_path(
+        self, monkeypatch
+    ):
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        requests = []
+
+        class FakeAsyncClient:
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                requests.append((url, headers))
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "model-a"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        await credentials_service.discover_with_config(
+            "anthropic_compatible",
+            {
+                "api_key": "sk-test",
+                "base_url": "https://llm-gateway.example.com/models",
+            },
+        )
+
+        assert requests == [
+            (
+                "https://llm-gateway.example.com/v1/models",
+                {"x-api-key": "sk-test", "anthropic-version": "2023-06-01"},
+            )
+        ]
+
     @pytest.mark.asyncio
     async def test_openai_discovery_pins_user_supplied_base_url(self, monkeypatch):
         """OpenAI discovery with a custom base_url must go through DNS pinning:
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index 35bb5b2b..d434a0d8 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -76,6 +76,7 @@ class TestOpenAICompatTable:
             "elevenlabs",
             "deepgram",
             "openai_compatible",
+            "anthropic_compatible",
             "dashscope",
             "minimax",
             "novita",
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index 44351fad..6382a745 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -119,6 +119,35 @@ class TestModelCreation:
 class TestModelsProviderAvailability:
     """Test suite for Models Provider Availability endpoint."""
 
+    @patch(
+        "api.routers.models._check_provider_has_credential",
+        new_callable=AsyncMock,
+        return_value=False,
+    )
+    @patch("api.routers.models.os.environ.get")
+    @patch("api.routers.models.AIFactory.get_available_providers")
+    def test_blank_anthropic_compatible_env_vars_are_unavailable(
+        self, mock_esperanto, mock_env, mock_has_credential, client
+    ):
+        def env_side_effect(key):
+            if key in {
+                "ANTHROPIC_COMPATIBLE_BASE_URL",
+                "ANTHROPIC_COMPATIBLE_API_KEY",
+            }:
+                return "   "
+            return None
+
+        mock_env.side_effect = env_side_effect
+        mock_esperanto.return_value = {"language": ["anthropic"]}
+
+        response = client.get("/api/models/providers")
+
+        assert response.status_code == 200
+        data = response.json()
+        assert "anthropic_compatible" not in data["available"]
+        assert "anthropic_compatible" in data["unavailable"]
+        assert "anthropic_compatible" not in data["supported_types"]
+
     @patch("api.routers.models.os.environ.get")
     @patch("api.routers.models.AIFactory.get_available_providers")
     def test_generic_env_var_enables_all_modes(self, mock_esperanto, mock_env, client):

From f16107d0934e5dc4eaa20e2c0bde058e015616ae Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 15:23:25 -0300
Subject: [PATCH 235/345] refactor(ai): remove redundant anthropic to_langchain
 shim (#1181)

esperanto 2.25.1 forwards a custom base_url for anthropic_compatible
models natively in to_langchain(), so the ChatAnthropic re-injection
shim added by #1043 is no longer needed.

- provision.py: drop _to_langchain() helper; call model.to_langchain()
- models.py: drop the _open_notebook_provider marker (shim-only consumer)
- tests: assert base_url forwarding via the native to_langchain() path

Closes #1055
---
 open_notebook/ai/models.py                  |  5 +--
 open_notebook/ai/provision.py               | 32 +---------------
 tests/test_anthropic_compatible_provider.py | 42 ++++++++++-----------
 3 files changed, 23 insertions(+), 56 deletions(-)

diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 2b2c739c..2b4e16c7 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -258,14 +258,11 @@ class ModelManager:
 
         # Create model based on type (Esperanto will cache the instance)
         if model.type == "language":
-            language_model = AIFactory.create_language(
+            return AIFactory.create_language(
                 model_name=model.name,
                 provider=provider,
                 config=config,
             )
-            if model.provider == "anthropic_compatible":
-                setattr(language_model, "_open_notebook_provider", model.provider)
-            return language_model
         elif model.type == "embedding":
             return AIFactory.create_embedding(
                 model_name=model.name,
diff --git a/open_notebook/ai/provision.py b/open_notebook/ai/provision.py
index 46e0e41f..f3dc4f61 100644
--- a/open_notebook/ai/provision.py
+++ b/open_notebook/ai/provision.py
@@ -1,5 +1,3 @@
-from typing import Any
-
 from esperanto import LanguageModel
 from langchain_core.language_models.chat_models import BaseChatModel
 from loguru import logger
@@ -9,34 +7,6 @@ from open_notebook.exceptions import ConfigurationError
 from open_notebook.utils import token_count
 
 
-def _to_langchain(model: LanguageModel) -> BaseChatModel:
-    """Convert a model while preserving Anthropic-compatible base URLs.
-
-    Esperanto's to_langchain() maps anthropic_compatible to the Anthropic
-    implementation but drops the custom base_url; re-inject it via ChatAnthropic.
-    """
-    if getattr(model, "_open_notebook_provider", None) != "anthropic_compatible":
-        return model.to_langchain()
-
-    from langchain_anthropic import ChatAnthropic
-
-    base_url = model.base_url.rstrip("/") if model.base_url else None
-    if base_url and base_url.endswith("/v1"):
-        base_url = base_url.removesuffix("/v1")
-
-    config: dict[str, Any] = {
-        "model": model.get_model_name(),
-        "max_tokens": model.max_tokens,
-        "api_key": model.api_key,
-        "base_url": base_url,
-    }
-    if model.temperature is not None:
-        config["temperature"] = model.temperature
-    elif model.top_p is not None:
-        config["top_p"] = model.top_p
-    return ChatAnthropic(**config)
-
-
 async def provision_langchain_model(
     content, model_id, default_type, **kwargs
 ) -> BaseChatModel:
@@ -88,4 +58,4 @@ async def provision_langchain_model(
             f"Please check that the model configured for '{default_type}' is a language model, not an embedding or speech model."
         )
 
-    return _to_langchain(model)
+    return model.to_langchain()
diff --git a/tests/test_anthropic_compatible_provider.py b/tests/test_anthropic_compatible_provider.py
index a66c4e2d..b4678537 100644
--- a/tests/test_anthropic_compatible_provider.py
+++ b/tests/test_anthropic_compatible_provider.py
@@ -1,7 +1,7 @@
 """Wiring tests for Anthropic-compatible credentials."""
 
 from types import SimpleNamespace
-from unittest.mock import AsyncMock, MagicMock, patch
+from unittest.mock import AsyncMock, patch
 
 import httpx
 import pytest
@@ -165,7 +165,6 @@ async def test_model_manager_maps_normalized_url_to_anthropic_factory(
         provider="anthropic",
         config={"api_key": "sk-test", "base_url": expected_base_url},
     )
-    assert getattr(result, "_open_notebook_provider") == "anthropic_compatible"
 
 
 @pytest.mark.asyncio
@@ -276,24 +275,25 @@ async def test_model_manager_rejects_missing_compatible_endpoint():
 
 
 def test_langchain_bridge_forwards_base_url():
-    from open_notebook.ai.provision import _to_langchain
+    """An anthropic-compatible model must reach its custom base URL via the
+    native esperanto ``to_langchain()`` path (no Open Notebook shim), NOT the
+    official ``api.anthropic.com`` endpoint.
+    """
+    from esperanto import AIFactory
 
-    esperanto_model = MagicMock()
-    esperanto_model._open_notebook_provider = "anthropic_compatible"
-    esperanto_model.base_url = "https://api.example.com/v1"
-    esperanto_model.api_key = "sk-test"
-    esperanto_model.max_tokens = 850
-    esperanto_model.temperature = 0.5
-    esperanto_model.top_p = 0.9
-    esperanto_model.get_model_name.return_value = "compatible-model"
-
-    with patch("langchain_anthropic.ChatAnthropic") as chat_anthropic:
-        _to_langchain(esperanto_model)
-
-    chat_anthropic.assert_called_once_with(
-        model="compatible-model",
-        max_tokens=850,
-        api_key="sk-test",
-        base_url="https://api.example.com",
-        temperature=0.5,
+    esperanto_model = AIFactory.create_language(
+        model_name="compatible-model",
+        provider="anthropic",
+        config={
+            "api_key": "sk-test",
+            "base_url": "https://api.example.com/v1",
+            "max_tokens": 850,
+            "temperature": 0.5,
+        },
     )
+
+    langchain_model = esperanto_model.to_langchain()
+
+    # ChatAnthropic exposes the endpoint as ``anthropic_api_url`` (alias base_url).
+    assert langchain_model.anthropic_api_url == "https://api.example.com"
+    assert "api.anthropic.com" not in (langchain_model.anthropic_api_url or "")

From c04c26dfade4b5540ad6017d611b8c5e1de9dd87 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 16:29:57 -0300
Subject: [PATCH 236/345] fix(providers): request ?type=all for PPQ model
 discovery (#1182)

PPQ's bare /v1/models returns only chat/language models; ?type=all is
required to also list the embedding, STT and TTS models it advertises as
a multi-modality gateway. Without it those modalities never surfaced in
discovery. PPQ_MODEL_TYPES already classifies the returned ids.

Closes #1180
---
 CHANGELOG.md                                 | 1 +
 open_notebook/ai/provider_registry.py        | 6 +++++-
 tests/test_credential_provider_validation.py | 2 +-
 tests/test_model_discovery.py                | 4 +++-
 4 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c6098386..26a11259 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
 ### Fixed
+- PPQ model discovery now lists all modalities, not just chat. PPQ's `/v1/models` returns only chat/language models by default; the discovery URL now requests `?type=all` so the embedding, speech-to-text and text-to-speech models this multi-modality gateway advertises actually surface in the provider matrix (`PPQ_MODEL_TYPES` classifies them into the right slots) (#1180)
 - Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
 - Deleting a notebook now also deletes its chat sessions instead of leaving orphaned `chat_session` records behind. The notebook `delete()` cascade enumerates the notebook's chat sessions (via the existing `refers_to` relation) and deletes each one alongside the notes and exclusive sources it already handled (#1124)
 
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index cbca0980..29ed191f 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -174,7 +174,11 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
             required_env=("PPQ_API_KEY",),
             test_model="auto",
             docs_url="https://ppq.ai",
-            openai_compat_discovery_url="https://api.ppq.ai/v1/models",
+            # PPQ's bare /models returns only chat/language models; ?type=all is
+            # required to also list embedding, STT and TTS models (PPQ is a
+            # multi-modality gateway). Without it, the non-language modalities
+            # this provider advertises never surface in discovery.
+            openai_compat_discovery_url="https://api.ppq.ai/v1/models?type=all",
         ),
         ProviderSpec(
             name="cohere",
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index 2de378d6..e0c0d185 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -114,7 +114,7 @@ class TestProviderRegistryIsTheSourceOfTruth:
             "dashscope": "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
             "minimax": "https://api.minimax.io/v1/models",
             "novita": "https://api.novita.ai/openai/models",
-            "ppq": "https://api.ppq.ai/v1/models",
+            "ppq": "https://api.ppq.ai/v1/models?type=all",
         }
         assert {
             name: spec.openai_compat_discovery_url
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index d434a0d8..5a35862c 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -341,8 +341,10 @@ class TestNewEsperantoProviders:
     """Issue #1170: Cohere, Deepgram STT, PPQ and Novita wiring."""
 
     def test_ppq_and_novita_use_openai_compat_discovery(self):
+        # PPQ needs ?type=all so non-chat modalities (embedding/STT/TTS) surface.
         assert (
-            OPENAI_COMPAT_PROVIDERS["ppq"].url == "https://api.ppq.ai/v1/models"
+            OPENAI_COMPAT_PROVIDERS["ppq"].url
+            == "https://api.ppq.ai/v1/models?type=all"
         )
         assert (
             OPENAI_COMPAT_PROVIDERS["novita"].url

From ccd81a67edd1c441ad924024ed2b52db0dc36d6e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 17:59:31 -0300
Subject: [PATCH 237/345] test(i18n): validate interpolation placeholder parity
 across locales (#1184)

The locale parity test and TranslationShape type only compared keys, not
the interpolation placeholders inside values. This let single-brace drift
(a stray {count} instead of i18next's {{count}}) slip through unnoticed.

Extend the parity suite to, for every leaf string, compare the set of
{{...}} placeholders against en-US and flag any stray single-brace token
that maps to a real en-US placeholder. Aligns zh-CN/zh-TW
podcasts.generationStartedDesc, which referenced a {{name}} placeholder
absent from the en-US reference.
---
 frontend/src/lib/locales/index.test.ts  | 87 +++++++++++++++++++++++++
 frontend/src/lib/locales/zh-CN/index.ts |  2 +-
 frontend/src/lib/locales/zh-TW/index.ts |  2 +-
 3 files changed, 89 insertions(+), 2 deletions(-)

diff --git a/frontend/src/lib/locales/index.test.ts b/frontend/src/lib/locales/index.test.ts
index 5f714aa3..31526fe0 100644
--- a/frontend/src/lib/locales/index.test.ts
+++ b/frontend/src/lib/locales/index.test.ts
@@ -14,6 +14,39 @@ const getKeys = (obj: Record<string, unknown>, prefix = ''): string[] => {
   }, [])
 }
 
+// Flatten to a map of dotted-key -> string leaf value (skips non-string leaves).
+const getLeafStrings = (
+  obj: Record<string, unknown>,
+  prefix = '',
+  acc: Record<string, string> = {},
+): Record<string, string> => {
+  for (const el of Object.keys(obj)) {
+    const val = obj[el]
+    if (typeof val === 'object' && val !== null && !Array.isArray(val)) {
+      getLeafStrings(val as Record<string, unknown>, prefix + el + '.', acc)
+    } else if (typeof val === 'string') {
+      acc[prefix + el] = val
+    }
+  }
+  return acc
+}
+
+// Collect the set of i18next `{{name}}` placeholder names in a string.
+const doubleBracePlaceholders = (value: string): Set<string> => {
+  const set = new Set<string>()
+  for (const m of value.matchAll(/\{\{\s*(\w+)\s*\}\}/g)) {
+    set.add(m[1])
+  }
+  return set
+}
+
+// Find stray single-brace `{name}` tokens (the exact #998 drift). We strip the
+// valid `{{...}}` pairs first, so only lone single-brace tokens remain.
+const straySingleBraceTokens = (value: string): string[] => {
+  const withoutDouble = value.replace(/\{\{\s*\w+\s*\}\}/g, '')
+  return [...withoutDouble.matchAll(/\{\s*\w+\s*\}/g)].map(m => m[0])
+}
+
 describe('Locale Parity', () => {
   const enKeys = getKeys(enUS)
 
@@ -33,6 +66,60 @@ describe('Locale Parity', () => {
   )
 })
 
+describe('Placeholder Parity', () => {
+  const enLeaves = getLeafStrings(enUS)
+
+  const locales = Object.entries(resources).filter(([code]) => code !== 'en-US')
+
+  it.each(locales.map(([code, resource]) => [code, resource] as const))(
+    '%s interpolation placeholders should match en-US',
+    (code, resource) => {
+      const localeLeaves = getLeafStrings(
+        resource.translation as Record<string, unknown>,
+      )
+
+      const mismatches: string[] = []
+      const strays: string[] = []
+
+      for (const [key, enValue] of Object.entries(enLeaves)) {
+        const localeValue = localeLeaves[key]
+        // Missing keys are covered by the parity test; skip here.
+        if (localeValue === undefined) continue
+
+        const enSet = doubleBracePlaceholders(enValue)
+        const localeSet = doubleBracePlaceholders(localeValue)
+
+        const missing = [...enSet].filter(p => !localeSet.has(p))
+        const extra = [...localeSet].filter(p => !enSet.has(p))
+        if (missing.length || extra.length) {
+          mismatches.push(
+            `${key}: missing [${missing.join(', ')}] extra [${extra.join(', ')}]`,
+          )
+        }
+
+        // A stray single-brace token is only drift if en-US expects a
+        // placeholder there (i.e. the token name is a real placeholder).
+        const stray = straySingleBraceTokens(localeValue).filter(tok => {
+          const name = tok.replace(/[{}\s]/g, '')
+          return enSet.has(name)
+        })
+        if (stray.length) {
+          strays.push(`${key}: ${stray.join(', ')}`)
+        }
+      }
+
+      expect(
+        mismatches,
+        `Placeholder mismatches in ${code}:\n${mismatches.join('\n')}`,
+      ).toEqual([])
+      expect(
+        strays,
+        `Single-brace placeholder(s) in ${code} that should be {{...}}:\n${strays.join('\n')}`,
+      ).toEqual([])
+    },
+  )
+})
+
 describe('Unused Key Detection', () => {
   it(
     'all en-US leaf keys should be referenced in source files',
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 2d18b163..17441147 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -641,7 +641,7 @@ export const zhCN = {
     speakerDuplicatedDesc: "发言人配置 “{{name}}” 已成功复制。",
     failedToDuplicateSpeaker: "复制发言人配置失败",
     generationStarted: "播客启动生成",
-    generationStartedDesc: "剧集 \"{{name}}\" 正在创建中。",
+    generationStartedDesc: "播客生成已加入队列。",
     failedToStartGeneration: "启动播客生成失败",
     tryAgainMoment: "请稍后再试。",
     deleteProfileTitle: "删除简介？",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 21bd2ca2..02cca22e 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -641,7 +641,7 @@ export const zhTW = {
     speakerDuplicatedDesc: "發言人設定 “{{name}}” 已成功複製。",
     failedToDuplicateSpeaker: "複製發言人設定失敗",
     generationStarted: "播客啟動生成",
-    generationStartedDesc: "劇集 \"{{name}}\" 正在建立中。",
+    generationStartedDesc: "播客生成已加入佇列。",
     failedToStartGeneration: "啟動播客生成失敗",
     tryAgainMoment: "請稍後再試。",
     deleteProfileTitle: "刪除簡介？",

From b83f1d61e6dfff8cb453bd2089de7743cfcb6950 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 18:06:17 -0300
Subject: [PATCH 238/345] fix(models): stop auto-assign from re-filling cleared
 optional defaults (#1186)

* fix(models): stop auto-assign from re-filling cleared optional defaults

Auto-assign treated every empty default slot as "missing" and filled it,
so an optional slot a user deliberately cleared (to fall back to the chat
model) got silently re-populated on the next run, undoing the intent.

- Auto-assign now fills only the required slots (chat, embedding); the
  optional slots (transformation, tools, large context, TTS, STT) are
  left untouched.
- get_default_model("large_context") now falls back to the chat model
  when unset, matching transformation/tools (TTS/STT still return None).
- Settings UI shows an inline hint on each empty optional slot: the text
  slots show "using chat model (<name>)"; TTS/STT show a not-configured
  hint. Required slots remain non-clearable. New i18n keys across all 14
  locales.

Closes #1098

* test: guard await_args against None for mypy
---
 CHANGELOG.md                                  |   1 +
 api/routers/models.py                         |  15 +-
 .../settings/DefaultModelSelectors.tsx        |  26 +++-
 frontend/src/lib/locales/bn-IN/index.ts       |   3 +
 frontend/src/lib/locales/ca-ES/index.ts       |   3 +
 frontend/src/lib/locales/de-DE/index.ts       |   3 +
 frontend/src/lib/locales/en-US/index.ts       |   3 +
 frontend/src/lib/locales/es-ES/index.ts       |   3 +
 frontend/src/lib/locales/fr-FR/index.ts       |   3 +
 frontend/src/lib/locales/it-IT/index.ts       |   3 +
 frontend/src/lib/locales/ja-JP/index.ts       |   3 +
 frontend/src/lib/locales/pl-PL/index.ts       |   3 +
 frontend/src/lib/locales/pt-BR/index.ts       |   3 +
 frontend/src/lib/locales/ru-RU/index.ts       |   3 +
 frontend/src/lib/locales/tr-TR/index.ts       |   3 +
 frontend/src/lib/locales/zh-CN/index.ts       |   3 +
 frontend/src/lib/locales/zh-TW/index.ts       |   3 +
 open_notebook/ai/models.py                    |   2 +-
 tests/test_models_api.py                      | 131 ++++++++++++++++++
 19 files changed, 208 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 26a11259..8512d79e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
 ### Fixed
+- Auto-assign no longer silently re-populates optional model defaults that were deliberately cleared. Previously `POST /models/auto-assign` treated every empty slot as "missing" and filled it, so an optional slot a user intentionally cleared (to fall back to the chat model) got re-assigned on the next run. Auto-assign now fills only the two required slots (chat, embedding); the optional slots (transformation, tools, large context, TTS, STT) are left untouched. `large_context` now also falls back to the chat model when unset (matching transformation/tools) instead of returning nothing, and the Settings UI shows an inline hint on each empty optional slot — "using chat model (…)" for the text slots, "not configured" for TTS/STT (#1098)
 - PPQ model discovery now lists all modalities, not just chat. PPQ's `/v1/models` returns only chat/language models by default; the discovery URL now requests `?type=all` so the embedding, speech-to-text and text-to-speech models this multi-modality gateway advertises actually surface in the provider matrix (`PPQ_MODEL_TYPES` classifies them into the right slots) (#1180)
 - Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
 - Deleting a notebook now also deletes its chat sessions instead of leaving orphaned `chat_session` records behind. The notebook `delete()` cascade enumerates the notebook's chat sessions (via the existing `refers_to` relation) and deletes each one alongside the notes and exclusive sources it already handled (#1124)
diff --git a/api/routers/models.py b/api/routers/models.py
index 5f1df3fe..85aed8ce 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -789,21 +789,22 @@ async def auto_assign_defaults():
                 models_by_type[model_type].append(model)
 
         # Define slot configuration: (slot_name, model_type, current_value)
-        slot_configs = [
+        #
+        # Only REQUIRED slots are auto-assigned. Optional slots
+        # (transformation, tools, large_context, TTS, STT) are intentionally
+        # left untouched: they fall back to the chat model when empty, so an
+        # empty optional slot may be a deliberate user choice (see #1097/#1098).
+        # Re-populating them here would silently undo that intent.
+        required_slot_configs = [
             ("default_chat_model", "language", defaults.default_chat_model),  # type: ignore[attr-defined]
-            ("default_transformation_model", "language", defaults.default_transformation_model),  # type: ignore[attr-defined]
-            ("default_tools_model", "language", defaults.default_tools_model),  # type: ignore[attr-defined]
-            ("large_context_model", "language", defaults.large_context_model),  # type: ignore[attr-defined]
             ("default_embedding_model", "embedding", defaults.default_embedding_model),  # type: ignore[attr-defined]
-            ("default_text_to_speech_model", "text_to_speech", defaults.default_text_to_speech_model),  # type: ignore[attr-defined]
-            ("default_speech_to_text_model", "speech_to_text", defaults.default_speech_to_text_model),  # type: ignore[attr-defined]
         ]
 
         assigned: Dict[str, str] = {}
         skipped: List[str] = []
         missing: List[str] = []
 
-        for slot_name, model_type, current_value in slot_configs:
+        for slot_name, model_type, current_value in required_slot_configs:
             if current_value:
                 # Slot already has a value
                 skipped.append(slot_name)
diff --git a/frontend/src/components/settings/DefaultModelSelectors.tsx b/frontend/src/components/settings/DefaultModelSelectors.tsx
index 4727cd3a..390dc768 100644
--- a/frontend/src/components/settings/DefaultModelSelectors.tsx
+++ b/frontend/src/components/settings/DefaultModelSelectors.tsx
@@ -34,6 +34,8 @@ interface DefaultModelSelectProps {
   currentValue?: string
   onChange: (key: keyof ModelDefaults, value: string) => void
   showDescription?: boolean
+  /** Name of the currently selected chat model, used for the fallback hint. */
+  chatModelName?: string
 }
 
 function DefaultModelSelect({
@@ -42,10 +44,25 @@ function DefaultModelSelect({
   currentValue,
   onChange,
   showDescription,
+  chatModelName,
 }: DefaultModelSelectProps) {
   const { t } = useTranslation()
   const isValid = currentValue && available.some(m => m.id === currentValue)
 
+  // Hint shown when an optional slot is left empty, clarifying the effective
+  // behavior (chat-model fallback vs. feature unavailable) — see #1098.
+  const emptyOptionalHint = (() => {
+    if (config.required || currentValue) return null
+    if (config.fallsBackToChat) {
+      return chatModelName
+        ? t('models.usingChatModelHint', { model: chatModelName })
+        : null
+    }
+    if (config.modelType === 'text_to_speech') return t('models.ttsUnsetHint')
+    if (config.modelType === 'speech_to_text') return t('models.sttUnsetHint')
+    return null
+  })()
+
   return (
     <div className="space-y-1">
       <Label htmlFor={config.id} className="text-xs">
@@ -91,6 +108,9 @@ function DefaultModelSelect({
           </Button>
         )}
       </div>
+      {emptyOptionalHint && (
+        <p className="text-[10px] text-muted-foreground leading-tight italic">{emptyOptionalHint}</p>
+      )}
       {showDescription && (
         <p className="text-[10px] text-muted-foreground leading-tight">{config.description}</p>
       )}
@@ -136,7 +156,7 @@ export function DefaultModelSelectors({
   const advancedConfigs: DefaultConfig[] = [
     { key: 'default_transformation_model', label: t('models.transformationModelLabel'), description: t('models.transformationModelDesc'), modelType: 'language', fallsBackToChat: true, id: `${generatedId}-transform` },
     { key: 'default_tools_model', label: t('models.toolsModelLabel'), description: t('models.toolsModelDesc'), modelType: 'language', fallsBackToChat: true, id: `${generatedId}-tools` },
-    { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', id: `${generatedId}-large` },
+    { key: 'large_context_model', label: t('models.largeContextModelLabel'), description: t('models.largeContextModelDesc'), modelType: 'language', fallsBackToChat: true, id: `${generatedId}-large` },
   ]
 
   const defaultConfigs = [...primaryConfigs, ...advancedConfigs]
@@ -162,6 +182,8 @@ export function DefaultModelSelectors({
 
   const getModelsForType = (type: ModelType) => models.filter(m => m.type === type)
 
+  const chatModelName = models.find(m => m.id === watch('default_chat_model'))?.name
+
   const missingRequired = defaultConfigs
     .filter(c => {
       if (!c.required) return false
@@ -205,6 +227,7 @@ export function DefaultModelSelectors({
               available={getModelsForType(config.modelType)}
               currentValue={watch(config.key) || undefined}
               onChange={handleChange}
+              chatModelName={chatModelName}
             />
           ))}
         </div>
@@ -221,6 +244,7 @@ export function DefaultModelSelectors({
                   currentValue={watch(config.key) || undefined}
                   onChange={handleChange}
                   showDescription
+                  chatModelName={chatModelName}
                 />
               ))}
             </div>
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index dcd09e8a..78da5ea1 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -876,6 +876,9 @@ export const bnIN = {
     selectModelPlaceholder: "একটি মডেল নির্বাচন করুন",
     noneOption: "কোনোটিই নয়",
     noneFallbackToChat: "ফলব্যাক ব্যবহার করুন (চ্যাট ডিফল্ট)",
+    usingChatModelHint: "চ্যাট মডেল ব্যবহার করা হচ্ছে ({{model}})",
+    ttsUnsetHint: "সেট করা হয়নি — কনফিগার না করা পর্যন্ত অডিও তৈরি অনুপলব্ধ",
+    sttUnsetHint: "সেট করা হয়নি — কনফিগার না করা পর্যন্ত ট্রান্সক্রিপশন অনুপলব্ধ",
     requiredModelPlaceholder: "⚠️ প্রয়োজন - একটি মডেল নির্বাচন করুন",
     chatModelLabel: "চ্যাট মডেল",
     chatModelDesc: "চ্যাট কথোপকথনের জন্য ব্যবহৃত",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index a126fc80..bd2562d7 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -875,6 +875,9 @@ export const caES = {
     selectModelPlaceholder: "Selecciona un model",
     noneOption: "Cap",
     noneFallbackToChat: "Utilitza l'alternativa (xat per defecte)",
+    usingChatModelHint: "S'utilitza el model de xat ({{model}})",
+    ttsUnsetHint: "Sense configurar — generació d'àudio no disponible fins que es configuri",
+    sttUnsetHint: "Sense configurar — transcripció no disponible fins que es configuri",
     requiredModelPlaceholder: "⚠️ Obligatori - Selecciona un model",
     chatModelLabel: "Model de xat",
     chatModelDesc: "S'usa per a les converses de xat",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 95159411..ec1b0b28 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -878,6 +878,9 @@ export const deDE = {
     selectModelPlaceholder: "Modell auswählen",
     noneOption: "Keines",
     noneFallbackToChat: "Fallback verwenden (Chat-Standard)",
+    usingChatModelHint: "Chat-Modell wird verwendet ({{model}})",
+    ttsUnsetHint: "Nicht festgelegt — Audioerzeugung nicht verfügbar, bis konfiguriert",
+    sttUnsetHint: "Nicht festgelegt — Transkription nicht verfügbar, bis konfiguriert",
     requiredModelPlaceholder: "⚠️ Erforderlich – Modell auswählen",
     chatModelLabel: "Chat-Modell",
     chatModelDesc: "Wird für Chat-Unterhaltungen verwendet",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 7496ae48..952cf8b4 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -874,6 +874,9 @@ export const enUS = {
     selectModelPlaceholder: "Select a model",
     noneOption: "None",
     noneFallbackToChat: "Use fallback (chat default)",
+    usingChatModelHint: "Using chat model ({{model}})",
+    ttsUnsetHint: "Not set — audio generation unavailable until configured",
+    sttUnsetHint: "Not set — transcription unavailable until configured",
     requiredModelPlaceholder: "⚠️ Required - Select a model",
     chatModelLabel: "Chat Model",
     chatModelDesc: "Used for chat conversations",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 142086a7..c6406f3e 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -876,6 +876,9 @@ export const esES = {
     selectModelPlaceholder: "Seleccionar un modelo",
     noneOption: "Ninguno",
     noneFallbackToChat: "Usar alternativa (chat predeterminado)",
+    usingChatModelHint: "Usando el modelo de chat ({{model}})",
+    ttsUnsetHint: "Sin configurar — generación de audio no disponible hasta configurarlo",
+    sttUnsetHint: "Sin configurar — transcripción no disponible hasta configurarlo",
     requiredModelPlaceholder: "⚠️ Requerido - Seleccionar un modelo",
     chatModelLabel: "Modelo de chat",
     chatModelDesc: "Usado para conversaciones de chat",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index f7c84f1f..f6a72de5 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -875,6 +875,9 @@ export const frFR = {
     selectModelPlaceholder: "Sélectionnez un modèle",
     noneOption: "Aucun",
     noneFallbackToChat: "Utiliser le repli (chat par défaut)",
+    usingChatModelHint: "Utilisation du modèle de chat ({{model}})",
+    ttsUnsetHint: "Non défini — génération audio indisponible tant qu'il n'est pas configuré",
+    sttUnsetHint: "Non défini — transcription indisponible tant qu'elle n'est pas configurée",
     requiredModelPlaceholder: "⚠️ Requis - Sélectionnez un modèle",
     chatModelLabel: "Modèle de Chat",
     chatModelDesc: "Utilisé pour les conversations",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 9b65db80..7bcb079f 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -875,6 +875,9 @@ export const itIT = {
     selectModelPlaceholder: "Seleziona un modello",
     noneOption: "Nessuno",
     noneFallbackToChat: "Usa il fallback (predefinito chat)",
+    usingChatModelHint: "Utilizzo del modello di chat ({{model}})",
+    ttsUnsetHint: "Non impostato — generazione audio non disponibile finché non configurato",
+    sttUnsetHint: "Non impostato — trascrizione non disponibile finché non configurata",
     requiredModelPlaceholder: "⚠️ Richiesto - Seleziona un modello",
     chatModelLabel: "Modello chat",
     chatModelDesc: "Usato per le conversazioni chat",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 21282a31..e809cb52 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -875,6 +875,9 @@ export const jaJP = {
     selectModelPlaceholder: "モデルを選択",
     noneOption: "なし",
     noneFallbackToChat: "フォールバックを使用（チャットのデフォルト）",
+    usingChatModelHint: "チャットモデルを使用中（{{model}}）",
+    ttsUnsetHint: "未設定 — 設定するまで音声生成は利用できません",
+    sttUnsetHint: "未設定 — 設定するまで文字起こしは利用できません",
     requiredModelPlaceholder: "⚠️ 必須 - モデルを選択",
     chatModelLabel: "チャットモデル",
     chatModelDesc: "チャット会話に使用",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 3d50fcea..bc918783 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -875,6 +875,9 @@ export const plPL = {
     selectModelPlaceholder: "Wybierz model",
     noneOption: "Brak",
     noneFallbackToChat: "Użyj rezerwowego (domyślny czat)",
+    usingChatModelHint: "Używany model czatu ({{model}})",
+    ttsUnsetHint: "Nie ustawiono — generowanie dźwięku niedostępne do czasu skonfigurowania",
+    sttUnsetHint: "Nie ustawiono — transkrypcja niedostępna do czasu skonfigurowania",
     requiredModelPlaceholder: "⚠️ Wymagane – wybierz model",
     chatModelLabel: "Model czatu",
     chatModelDesc: "Używany w rozmowach na czacie",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 481c4286..f7be4a83 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -875,6 +875,9 @@ export const ptBR = {
     selectModelPlaceholder: "Selecione um modelo",
     noneOption: "Nenhum",
     noneFallbackToChat: "Usar alternativa (padrão do chat)",
+    usingChatModelHint: "Usando o modelo de chat ({{model}})",
+    ttsUnsetHint: "Não configurado — geração de áudio indisponível até ser configurado",
+    sttUnsetHint: "Não configurado — transcrição indisponível até ser configurado",
     requiredModelPlaceholder: "⚠️ Obrigatório - Selecione um modelo",
     chatModelLabel: "Modelo de Chat",
     chatModelDesc: "Usado para conversas de chat",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 5ef31044..661a8f97 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -875,6 +875,9 @@ export const ruRU = {
     selectModelPlaceholder: "Выберите модель",
     noneOption: "Нет",
     noneFallbackToChat: "Использовать запасной вариант (чат по умолчанию)",
+    usingChatModelHint: "Используется модель чата ({{model}})",
+    ttsUnsetHint: "Не задано — генерация аудио недоступна до настройки",
+    sttUnsetHint: "Не задано — транскрипция недоступна до настройки",
     requiredModelPlaceholder: "⚠️ Обязательно — выберите модель",
     chatModelLabel: "Модель чата",
     chatModelDesc: "Используется для чат-разговоров",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 2f995b69..ca911a43 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -875,6 +875,9 @@ export const trTR = {
     selectModelPlaceholder: "Model seçin",
     noneOption: "Yok",
     noneFallbackToChat: "Yedeği kullan (varsayılan sohbet)",
+    usingChatModelHint: "Sohbet modeli kullanılıyor ({{model}})",
+    ttsUnsetHint: "Ayarlanmadı — yapılandırılana kadar ses oluşturma kullanılamaz",
+    sttUnsetHint: "Ayarlanmadı — yapılandırılana kadar transkripsiyon kullanılamaz",
     requiredModelPlaceholder: "⚠️ Gerekli - Model seçin",
     chatModelLabel: "Sohbet Modeli",
     chatModelDesc: "Sohbet konuşmaları için kullanılır",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 17441147..d4041423 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -875,6 +875,9 @@ export const zhCN = {
     selectModelPlaceholder: "选择一个模型",
     noneOption: "无",
     noneFallbackToChat: "使用回退（聊天默认模型）",
+    usingChatModelHint: "使用聊天模型（{{model}}）",
+    ttsUnsetHint: "未设置 — 配置前无法生成音频",
+    sttUnsetHint: "未设置 — 配置前无法转录",
     requiredModelPlaceholder: "⚠️ 必需 - 请选择一个模型",
     chatModelLabel: "聊天模型",
     chatModelDesc: "用于聊天对话",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 02cca22e..bfebe8d2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -875,6 +875,9 @@ export const zhTW = {
     selectModelPlaceholder: "選擇一個模型",
     noneOption: "無",
     noneFallbackToChat: "使用備用（聊天預設模型）",
+    usingChatModelHint: "使用聊天模型（{{model}}）",
+    ttsUnsetHint: "未設定 — 設定前無法生成音訊",
+    sttUnsetHint: "未設定 — 設定前無法轉錄",
     requiredModelPlaceholder: "⚠️ 必需 - 請選擇一個模型",
     chatModelLabel: "聊天模型",
     chatModelDesc: "用於聊天對話",
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 2b4e16c7..f1ded71e 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -353,7 +353,7 @@ class ModelManager:
         elif model_type == "speech_to_text":
             model_id = defaults.default_speech_to_text_model
         elif model_type == "large_context":
-            model_id = defaults.large_context_model
+            model_id = defaults.large_context_model or defaults.default_chat_model
 
         if not model_id:
             logger.warning(
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index 6382a745..8a8f534d 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -487,3 +487,134 @@ class TestUpdateDefaultModels:
         assert response.status_code == 200
         assert defaults.default_chat_model == "model:new-chat"
         defaults.update.assert_awaited_once()
+
+
+class TestAutoAssignDefaults:
+    """POST /models/auto-assign must only fill the two REQUIRED slots
+    (chat, embedding). Optional slots that a user deliberately cleared must
+    stay empty so auto-assign doesn't silently undo that intent (#1098).
+    """
+
+    def _mock_defaults(self):
+        from unittest.mock import MagicMock
+
+        defaults = MagicMock()
+        # Everything empty, including the optional slots a user may have cleared.
+        defaults.default_chat_model = None
+        defaults.default_embedding_model = None
+        defaults.default_transformation_model = None
+        defaults.default_tools_model = None
+        defaults.large_context_model = None
+        defaults.default_text_to_speech_model = None
+        defaults.default_speech_to_text_model = None
+        defaults.update = AsyncMock()
+        return defaults
+
+    def _models(self):
+        return [
+            {"id": "model:lang", "provider": "openai", "name": "gpt-4o", "type": "language"},
+            {"id": "model:embed", "provider": "openai", "name": "text-embedding-3", "type": "embedding"},
+            {"id": "model:tts", "provider": "openai", "name": "tts-1", "type": "text_to_speech"},
+            {"id": "model:stt", "provider": "openai", "name": "whisper-1", "type": "speech_to_text"},
+        ]
+
+    def _post(self, client, defaults):
+        with patch(
+            "api.routers.models.DefaultModels.get_instance",
+            new=AsyncMock(return_value=defaults),
+        ), patch(
+            "open_notebook.database.repository.repo_query",
+            new=AsyncMock(return_value=self._models()),
+        ):
+            return client.post("/api/models/auto-assign")
+
+    def test_fills_only_required_slots(self, client):
+        defaults = self._mock_defaults()
+        response = self._post(client, defaults)
+
+        assert response.status_code == 200
+        body = response.json()
+        # Required slots got filled.
+        assert body["assigned"]["default_chat_model"] == "model:lang"
+        assert body["assigned"]["default_embedding_model"] == "model:embed"
+        assert defaults.default_chat_model == "model:lang"
+        assert defaults.default_embedding_model == "model:embed"
+        # Optional slots must NOT be assigned even though models exist.
+        for slot in (
+            "default_transformation_model",
+            "default_tools_model",
+            "large_context_model",
+            "default_text_to_speech_model",
+            "default_speech_to_text_model",
+        ):
+            assert slot not in body["assigned"]
+        assert defaults.default_transformation_model is None
+        assert defaults.large_context_model is None
+        assert defaults.default_text_to_speech_model is None
+        defaults.update.assert_awaited_once()
+
+    def test_skips_already_filled_required_slot(self, client):
+        defaults = self._mock_defaults()
+        defaults.default_chat_model = "model:existing-chat"
+        response = self._post(client, defaults)
+
+        assert response.status_code == 200
+        body = response.json()
+        assert "default_chat_model" in body["skipped"]
+        assert body["assigned"]["default_embedding_model"] == "model:embed"
+
+
+class TestGetDefaultModelFallback:
+    """get_default_model must fall back to the chat model for the three text
+    optional slots (transformation, tools, large_context) when unset (#1098).
+    """
+
+    def _defaults(self):
+        from unittest.mock import MagicMock
+
+        defaults = MagicMock()
+        defaults.default_chat_model = "model:chat"
+        defaults.default_transformation_model = None
+        defaults.default_tools_model = None
+        defaults.large_context_model = None
+        defaults.default_text_to_speech_model = None
+        defaults.default_speech_to_text_model = None
+        defaults.default_embedding_model = "model:embed"
+        return defaults
+
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize(
+        "model_type", ["transformation", "tools", "large_context"]
+    )
+    async def test_text_optional_slots_fall_back_to_chat(self, model_type):
+        from open_notebook.ai.models import model_manager
+
+        defaults = self._defaults()
+        with patch.object(
+            model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
+        ), patch.object(
+            model_manager, "get_model", new=AsyncMock(return_value="chat-model-obj")
+        ) as mock_get_model:
+            result = await model_manager.get_default_model(model_type)
+
+        assert result == "chat-model-obj"
+        mock_get_model.assert_awaited_once()
+        assert mock_get_model.await_args is not None
+        assert mock_get_model.await_args.args[0] == "model:chat"
+
+    @pytest.mark.asyncio
+    async def test_audio_slots_do_not_fall_back(self):
+        from open_notebook.ai.models import model_manager
+
+        defaults = self._defaults()
+        with patch.object(
+            model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
+        ), patch.object(
+            model_manager, "get_model", new=AsyncMock(return_value="obj")
+        ) as mock_get_model:
+            tts = await model_manager.get_default_model("text_to_speech")
+            stt = await model_manager.get_default_model("speech_to_text")
+
+        assert tts is None
+        assert stt is None
+        mock_get_model.assert_not_awaited()

From fcfd2afdb4f74fe6464e17cc90eebe1bc37a6e02 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 18:11:00 -0300
Subject: [PATCH 239/345] fix(proxy): keep internal SurrealDB websocket out of
 HTTP proxy (#1185)

* fix(proxy): keep internal SurrealDB websocket out of HTTP proxy (#1160)

websockets 15.0 auto-detects HTTP_PROXY/HTTPS_PROXY and tunnels even
ws:// connections through the proxy. The SurrealDB SDK connects over a
websocket, so with a proxy set the internal DB connection was routed
through the external proxy, which rejected the internal host with HTTP
403 and killed the worker/API on startup.

- Add ensure_internal_no_proxy() helper that merges host.docker.internal,
  surrealdb, localhost, 127.0.0.1 into no_proxy/NO_PROXY (never clobbering
  a user value) and call it at API, worker and DB-module startup.
- Add host.docker.internal and surrealdb to the .env.example and docs
  NO_PROXY examples.
- Add unit tests for the injection helper.

* fix(proxy): preserve NO_PROXY wildcard and include custom SurrealDB host (#1160)

Address review findings on the no_proxy injection:

- NO_PROXY=* (bypass all hosts) is now treated as terminal: leave the
  user's config untouched instead of narrowing the wildcard to a finite
  list by appending the internal hosts.
- Parse the SurrealDB host from SURREAL_URL (falling back to
  SURREAL_ADDRESS) and add it to the bypass list, so deployments with a
  custom DB host/IP no longer route DB traffic through the proxy. Unset
  or malformed values fall back to the four defaults gracefully.
- Drop the inaccurate getproxies() caching remark in the test.
---
 .env.example                                  |  10 ++
 CHANGELOG.md                                  |   1 +
 api/main.py                                   |   7 +
 commands/__init__.py                          |   8 +
 docs/5-CONFIGURATION/environment-reference.md |  10 +-
 open_notebook/database/repository.py          |   7 +
 open_notebook/utils/proxy.py                  | 118 +++++++++++++++
 tests/test_proxy.py                           | 138 ++++++++++++++++++
 8 files changed, 295 insertions(+), 4 deletions(-)
 create mode 100644 open_notebook/utils/proxy.py
 create mode 100644 tests/test_proxy.py

diff --git a/.env.example b/.env.example
index 30d8a65c..050ae567 100644
--- a/.env.example
+++ b/.env.example
@@ -74,5 +74,15 @@ SURREAL_DATABASE=open_notebook
 # BASIC_AUTH_USERNAME=admin
 # BASIC_AUTH_PASSWORD=secret
 
+# Network / Proxy (corporate / firewalled environments)
+# Route outbound HTTP(S) through a proxy. NO_PROXY MUST list the internal
+# SurrealDB hosts (host.docker.internal, surrealdb) — otherwise the DB
+# websocket gets tunnelled through the proxy and the worker/API fail to start
+# with HTTP 403. The app also injects these hosts automatically as a safety
+# net, but keep them here so your config is explicit.
+# HTTP_PROXY=http://proxy.corp.com:8080
+# HTTPS_PROXY=http://proxy.corp.com:8080
+# NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
+
 # For more configuration options, see:
 # https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/environment-reference.md
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8512d79e..f09e3ce0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 
 ### Fixed
+- **HTTP proxy no longer breaks worker/API startup.** `websockets` 15.0 began auto-detecting `HTTP_PROXY`/`HTTPS_PROXY` and tunnels even `ws://` connections through the proxy, so with a proxy set the internal SurrealDB websocket (`ws://host.docker.internal:8018/rpc` or `ws://surrealdb:8000/rpc`) was routed through the external proxy, which rejected the internal host with HTTP 403 and killed the worker on startup. Open Notebook now injects `host.docker.internal,surrealdb,localhost,127.0.0.1` into `no_proxy`/`NO_PROXY` at startup (merged with any user value, never clobbering it), and the `.env.example` / docs `NO_PROXY` examples now include the internal DB hosts (#1160)
 - Auto-assign no longer silently re-populates optional model defaults that were deliberately cleared. Previously `POST /models/auto-assign` treated every empty slot as "missing" and filled it, so an optional slot a user intentionally cleared (to fall back to the chat model) got re-assigned on the next run. Auto-assign now fills only the two required slots (chat, embedding); the optional slots (transformation, tools, large context, TTS, STT) are left untouched. `large_context` now also falls back to the chat model when unset (matching transformation/tools) instead of returning nothing, and the Settings UI shows an inline hint on each empty optional slot — "using chat model (…)" for the text slots, "not configured" for TTS/STT (#1098)
 - PPQ model discovery now lists all modalities, not just chat. PPQ's `/v1/models` returns only chat/language models by default; the discovery URL now requests `?type=all` so the embedding, speech-to-text and text-to-speech models this multi-modality gateway advertises actually surface in the provider matrix (`PPQ_MODEL_TYPES` classifies them into the right slots) (#1180)
 - Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
diff --git a/api/main.py b/api/main.py
index 2b8af38f..0a7c2db3 100644
--- a/api/main.py
+++ b/api/main.py
@@ -3,6 +3,13 @@ from dotenv import load_dotenv
 
 load_dotenv()
 
+# Keep the internal SurrealDB websocket out of any configured HTTP proxy
+# (issue #1160). Must run after load_dotenv() (so a proxy set in .env is
+# already visible) and before the DB is touched.
+from open_notebook.utils.proxy import ensure_internal_no_proxy
+
+ensure_internal_no_proxy()
+
 import asyncio
 import os
 from contextlib import asynccontextmanager
diff --git a/commands/__init__.py b/commands/__init__.py
index fdda740e..bac4fb74 100644
--- a/commands/__init__.py
+++ b/commands/__init__.py
@@ -1,5 +1,13 @@
 """Surreal-commands integration for Open Notebook"""
 
+# The worker starts via `surreal-commands-worker --import-modules commands`,
+# so this package is imported before the worker connects to SurrealDB. Inject
+# the internal DB hosts into no_proxy first so the DB websocket is never
+# tunnelled through a configured HTTP proxy (issue #1160).
+from open_notebook.utils.proxy import ensure_internal_no_proxy
+
+ensure_internal_no_proxy()
+
 from .embedding_commands import (
     embed_insight_command,
     embed_note_command,
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 3eee2f8d..e7a082b9 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -137,10 +137,12 @@ The `CCORE_FIRECRAWL_*` variables are passed straight through to the content-cor
 |----------|-----------|---------|-------------|
 | `HTTP_PROXY` | No | None | HTTP proxy URL for outbound HTTP requests |
 | `HTTPS_PROXY` | No | None | HTTPS proxy URL for outbound HTTPS requests |
-| `NO_PROXY` | No | None | Comma-separated list of hosts to bypass proxy |
+| `NO_PROXY` | No | None | Comma-separated list of hosts to bypass proxy (must include the internal DB hosts — see below) |
 
 Route all outbound HTTP requests through a proxy server. Useful for corporate/firewalled environments.
 
+> **Important:** `NO_PROXY` must list the internal SurrealDB hosts — `host.docker.internal` (Docker) and `surrealdb` (the compose service name). The SurrealDB SDK connects over a websocket, and `websockets` 15.0+ tunnels even `ws://` connections through a configured proxy, which then rejects the internal host with **HTTP 403** and prevents the API and worker from starting. Open Notebook injects `host.docker.internal,surrealdb,localhost,127.0.0.1` into `NO_PROXY` automatically at startup as a safety net, but you should still set them explicitly.
+
 The underlying libraries (esperanto, content-core, podcast-creator) automatically detect proxy settings from these standard environment variables.
 
 **Affects:**
@@ -160,8 +162,8 @@ HTTPS_PROXY=http://proxy.corp.com:8080
 HTTP_PROXY=http://user:password@proxy.corp.com:8080
 HTTPS_PROXY=http://user:password@proxy.corp.com:8080
 
-# Bypass proxy for local hosts
-NO_PROXY=localhost,127.0.0.1,.local
+# Bypass proxy for local hosts (include the internal DB hosts!)
+NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
 ```
 
 ---
@@ -212,7 +214,7 @@ API_URL=https://mynotebook.example.com
 OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
 HTTP_PROXY=http://proxy.corp.com:8080
 HTTPS_PROXY=http://proxy.corp.com:8080
-NO_PROXY=localhost,127.0.0.1
+NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
 ```
 
 ### High-Performance Deployment
diff --git a/open_notebook/database/repository.py b/open_notebook/database/repository.py
index 6a760de8..7eb960b6 100644
--- a/open_notebook/database/repository.py
+++ b/open_notebook/database/repository.py
@@ -8,6 +8,13 @@ from loguru import logger
 from surrealdb import AsyncSurreal, RecordID  # type: ignore
 from surrealdb.data.types.table import Table  # type: ignore
 
+from open_notebook.utils.proxy import ensure_internal_no_proxy
+
+# Keep the internal SurrealDB websocket out of any configured HTTP proxy
+# (issue #1160). Runs at import time - i.e. before any db_connection() can be
+# opened - so it protects every entrypoint (API + worker) that touches the DB.
+ensure_internal_no_proxy()
+
 T = TypeVar("T", Dict[str, Any], List[Dict[str, Any]])
 
 # Bare SurrealDB table/relation identifier: no ':', whitespace, or query
diff --git a/open_notebook/utils/proxy.py b/open_notebook/utils/proxy.py
new file mode 100644
index 00000000..ab853c55
--- /dev/null
+++ b/open_notebook/utils/proxy.py
@@ -0,0 +1,118 @@
+"""Proxy environment helpers.
+
+Defensive handling for HTTP proxy setups (issue #1160).
+
+``websockets`` 15.0 started auto-detecting ``HTTP_PROXY`` / ``HTTPS_PROXY``
+from the environment and tunnels *every* connection through the proxy,
+including plain ``ws://`` ones. The SurrealDB SDK connects to the database
+over a websocket, so when a proxy is configured the *internal* DB connection
+(e.g. ``ws://host.docker.internal:8018/rpc`` or ``ws://surrealdb:8000/rpc``)
+gets routed through the external proxy, which rejects the internal host with
+HTTP 403 and kills the API / worker on startup.
+
+To make this robust regardless of user configuration, we inject the internal
+DB hosts into the ``no_proxy`` / ``NO_PROXY`` env vars at startup (merged with
+any user-provided value, never clobbering it). ``urllib.request.proxy_bypass``
+- which ``websockets`` calls to decide whether to tunnel - reads these vars,
+so the internal websocket is left un-proxied.
+"""
+
+import os
+from urllib.parse import urlsplit
+
+# Hosts the DB is reachable at internally. These must never be routed through
+# an external proxy. Covers Docker (host.docker.internal, surrealdb service
+# name) and local (localhost / 127.0.0.1) topologies. Deployments that point
+# at a custom SurrealDB host/IP have it added dynamically - see
+# _configured_db_host().
+INTERNAL_NO_PROXY_HOSTS = (
+    "host.docker.internal",
+    "surrealdb",
+    "localhost",
+    "127.0.0.1",
+)
+
+# urllib.request.proxy_bypass_environment reads the lowercase var first, then
+# falls back to the uppercase one. We keep both in sync so the internal hosts
+# are honored no matter which variant a user set.
+_NO_PROXY_ENV_VARS = ("no_proxy", "NO_PROXY")
+
+
+def _split_hosts(value: str) -> list[str]:
+    return [h.strip() for h in value.split(",") if h.strip()]
+
+
+def _configured_db_host() -> str | None:
+    """Best-effort extraction of the SurrealDB host from the environment.
+
+    Mirrors the resolution order in ``open_notebook.database.repository`` -
+    ``SURREAL_URL`` wins, otherwise the legacy ``SURREAL_ADDRESS``. Returns the
+    bare host (no scheme/port/path), or ``None`` when unset or unparseable.
+
+    Parsed here from the env directly (rather than importing repository) to
+    avoid a circular import - repository imports this module at load time.
+    """
+    candidate = os.environ.get("SURREAL_URL", "").strip()
+    if not candidate:
+        candidate = os.environ.get("SURREAL_ADDRESS", "").strip()
+    if not candidate:
+        return None
+
+    # urlsplit only populates .hostname when a scheme is present; add a dummy
+    # one for bare ``host`` / ``host:port`` values (e.g. SURREAL_ADDRESS).
+    if "://" not in candidate:
+        candidate = "ws://" + candidate
+
+    try:
+        host = urlsplit(candidate).hostname
+    except ValueError:
+        return None
+    return host or None
+
+
+def _internal_hosts() -> list[str]:
+    """The default internal hosts plus the configured SurrealDB host, if any."""
+    hosts = list(INTERNAL_NO_PROXY_HOSTS)
+    db_host = _configured_db_host()
+    if db_host and db_host.lower() not in {h.lower() for h in hosts}:
+        hosts.append(db_host)
+    return hosts
+
+
+def ensure_internal_no_proxy() -> None:
+    """Ensure internal DB hosts bypass any configured proxy.
+
+    Merges the internal hosts (see :func:`_internal_hosts`) into both
+    ``no_proxy`` and ``NO_PROXY`` (preserving existing entries and their order)
+    and writes the combined value back to both env vars. Idempotent - safe to
+    call more than once and from multiple entrypoints (API + worker).
+
+    A wildcard (``*``) already bypasses the proxy for every host, so if the
+    user set ``no_proxy``/``NO_PROXY`` to (or containing) a bare ``*`` we leave
+    their configuration untouched rather than turning it into a finite list.
+    """
+    # Collect existing entries from whichever variants the user set, de-duped
+    # while preserving order.
+    existing: list[str] = []
+    seen: set[str] = set()
+    for var in _NO_PROXY_ENV_VARS:
+        for host in _split_hosts(os.environ.get(var, "")):
+            # Wildcard is terminal: it already bypasses everything (including
+            # the internal DB hosts), so don't narrow it to a finite list.
+            if host == "*":
+                return
+            key = host.lower()
+            if key not in seen:
+                seen.add(key)
+                existing.append(host)
+
+    # Append internal hosts that aren't already present.
+    merged = list(existing)
+    for host in _internal_hosts():
+        if host.lower() not in seen:
+            seen.add(host.lower())
+            merged.append(host)
+
+    combined = ",".join(merged)
+    for var in _NO_PROXY_ENV_VARS:
+        os.environ[var] = combined
diff --git a/tests/test_proxy.py b/tests/test_proxy.py
new file mode 100644
index 00000000..da8f128c
--- /dev/null
+++ b/tests/test_proxy.py
@@ -0,0 +1,138 @@
+"""Tests for the internal no_proxy injection (issue #1160)."""
+
+import os
+
+import pytest
+
+from open_notebook.utils.proxy import (
+    INTERNAL_NO_PROXY_HOSTS,
+    ensure_internal_no_proxy,
+)
+
+_PROXY_VARS = ("no_proxy", "NO_PROXY")
+_DB_VARS = ("SURREAL_URL", "SURREAL_ADDRESS")
+
+
+@pytest.fixture(autouse=True)
+def _clean_proxy_env(monkeypatch):
+    """Ensure each test starts with the proxy / DB-host vars unset."""
+    for var in (*_PROXY_VARS, *_DB_VARS):
+        monkeypatch.delenv(var, raising=False)
+    yield
+
+
+def test_injects_internal_hosts_when_unset():
+    ensure_internal_no_proxy()
+    for var in _PROXY_VARS:
+        value = os.environ[var]
+        for host in INTERNAL_NO_PROXY_HOSTS:
+            assert host in value.split(",")
+
+
+def test_preserves_user_value(monkeypatch):
+    monkeypatch.setenv("NO_PROXY", "example.com,10.0.0.5")
+    ensure_internal_no_proxy()
+    entries = os.environ["NO_PROXY"].split(",")
+    # User entries kept, in their original order and at the front.
+    assert entries[:2] == ["example.com", "10.0.0.5"]
+    # Internal hosts appended.
+    for host in INTERNAL_NO_PROXY_HOSTS:
+        assert host in entries
+
+
+def test_does_not_duplicate_existing_hosts(monkeypatch):
+    monkeypatch.setenv("NO_PROXY", "surrealdb,example.com")
+    ensure_internal_no_proxy()
+    entries = os.environ["NO_PROXY"].split(",")
+    assert entries.count("surrealdb") == 1
+
+
+def test_lowercase_and_uppercase_kept_in_sync(monkeypatch):
+    monkeypatch.setenv("no_proxy", "example.com")
+    ensure_internal_no_proxy()
+    assert os.environ["no_proxy"] == os.environ["NO_PROXY"]
+
+
+def test_merges_both_case_variants(monkeypatch):
+    monkeypatch.setenv("no_proxy", "lower.example.com")
+    monkeypatch.setenv("NO_PROXY", "UPPER.example.com")
+    ensure_internal_no_proxy()
+    combined = os.environ["no_proxy"]
+    assert "lower.example.com" in combined
+    assert "UPPER.example.com" in combined
+    # De-duped case-insensitively, so no crash and both variants match.
+    assert os.environ["no_proxy"] == os.environ["NO_PROXY"]
+
+
+def test_idempotent(monkeypatch):
+    monkeypatch.setenv("NO_PROXY", "example.com")
+    ensure_internal_no_proxy()
+    first = os.environ["NO_PROXY"]
+    ensure_internal_no_proxy()
+    assert os.environ["NO_PROXY"] == first
+
+
+def test_wildcard_preserved(monkeypatch):
+    """NO_PROXY=* bypasses every host; it must not be narrowed to a list."""
+    monkeypatch.setenv("NO_PROXY", "*")
+    ensure_internal_no_proxy()
+    assert os.environ["NO_PROXY"] == "*"
+
+
+def test_wildcard_among_entries_preserved(monkeypatch):
+    """A bare * among other entries is still terminal - leave config as-is."""
+    monkeypatch.setenv("NO_PROXY", "example.com,*")
+    ensure_internal_no_proxy()
+    assert os.environ["NO_PROXY"] == "example.com,*"
+
+
+def test_custom_surreal_url_host_included(monkeypatch):
+    monkeypatch.setenv("SURREAL_URL", "ws://db.internal.corp:8000/rpc")
+    ensure_internal_no_proxy()
+    entries = os.environ["NO_PROXY"].split(",")
+    assert "db.internal.corp" in entries
+    # Defaults still present.
+    for host in INTERNAL_NO_PROXY_HOSTS:
+        assert host in entries
+
+
+def test_custom_surreal_address_host_included(monkeypatch):
+    # Legacy address form (host:port, no scheme).
+    monkeypatch.setenv("SURREAL_ADDRESS", "10.1.2.3:8000")
+    ensure_internal_no_proxy()
+    assert "10.1.2.3" in os.environ["NO_PROXY"].split(",")
+
+
+def test_surreal_url_takes_precedence_over_address(monkeypatch):
+    monkeypatch.setenv("SURREAL_URL", "ws://from-url:8000/rpc")
+    monkeypatch.setenv("SURREAL_ADDRESS", "from-address")
+    ensure_internal_no_proxy()
+    entries = os.environ["NO_PROXY"].split(",")
+    assert "from-url" in entries
+    assert "from-address" not in entries
+
+
+def test_malformed_surreal_url_falls_back_to_defaults(monkeypatch):
+    monkeypatch.setenv("SURREAL_URL", "::not a url::")
+    ensure_internal_no_proxy()
+    entries = os.environ["NO_PROXY"].split(",")
+    # No crash; the four defaults are still injected.
+    for host in INTERNAL_NO_PROXY_HOSTS:
+        assert host in entries
+
+
+def test_custom_host_not_duplicated_when_default(monkeypatch):
+    monkeypatch.setenv("SURREAL_URL", "ws://surrealdb:8000/rpc")
+    ensure_internal_no_proxy()
+    assert os.environ["NO_PROXY"].split(",").count("surrealdb") == 1
+
+
+def test_bypass_recognized_by_urllib(monkeypatch):
+    """The injected hosts are actually honored by urllib.request.proxy_bypass,
+    which is what websockets calls to decide whether to tunnel."""
+    import urllib.request
+
+    monkeypatch.setenv("HTTP_PROXY", "http://proxy.corp.com:8080")
+    ensure_internal_no_proxy()
+    assert urllib.request.proxy_bypass("surrealdb:8000")
+    assert urllib.request.proxy_bypass("host.docker.internal:8018")

From 3bfa6d728e63ed6e615dfe897b6816675b0f9a56 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 19 Jul 2026 18:15:40 -0300
Subject: [PATCH 240/345] feat(settings): expose Docling formula & vision
 enrichment toggles (#1187)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Surface content-core 2.x's docling_formulas (formula extraction) and
docling_vision (image/chart vision) enrichment flags in Settings →
Content Processing, mirroring the existing OCR toggle. Both default off
and are gated on Docling availability in the UI. The settings persist
via GET/PUT /api/settings and are threaded into content-core extraction
alongside docling_ocr. Migration 23 backfills the new fields on the
existing content_settings record. Labels and help are translated across
all 14 locales.

Closes #1131
---
 CHANGELOG.md                                  |  1 +
 api/models.py                                 |  4 ++
 api/routers/settings.py                       |  8 ++++
 .../settings/components/SettingsForm.tsx      | 44 +++++++++++++++++++
 frontend/src/lib/locales/bn-IN/index.ts       |  4 ++
 frontend/src/lib/locales/ca-ES/index.ts       |  4 ++
 frontend/src/lib/locales/de-DE/index.ts       |  4 ++
 frontend/src/lib/locales/en-US/index.ts       |  4 ++
 frontend/src/lib/locales/es-ES/index.ts       |  4 ++
 frontend/src/lib/locales/fr-FR/index.ts       |  4 ++
 frontend/src/lib/locales/it-IT/index.ts       |  4 ++
 frontend/src/lib/locales/ja-JP/index.ts       |  4 ++
 frontend/src/lib/locales/pl-PL/index.ts       |  4 ++
 frontend/src/lib/locales/pt-BR/index.ts       |  4 ++
 frontend/src/lib/locales/ru-RU/index.ts       |  4 ++
 frontend/src/lib/locales/tr-TR/index.ts       |  4 ++
 frontend/src/lib/locales/zh-CN/index.ts       |  4 ++
 frontend/src/lib/locales/zh-TW/index.ts       |  4 ++
 frontend/src/lib/types/api.ts                 |  2 +
 open_notebook/database/async_migrate.py       |  6 +++
 .../database/migrations/23.surrealql          |  9 ++++
 .../database/migrations/23_down.surrealql     |  3 ++
 open_notebook/domain/content_settings.py      | 15 +++++++
 open_notebook/graphs/source.py                |  8 +++-
 tests/test_domain.py                          | 12 +++++
 tests/test_graphs.py                          |  4 ++
 26 files changed, 171 insertions(+), 1 deletion(-)
 create mode 100644 open_notebook/database/migrations/23.surrealql
 create mode 100644 open_notebook/database/migrations/23_down.surrealql

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f09e3ce0..474e80be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Added
+- **Docling formula & vision enrichment toggles** in Settings → Content Processing. Two new opt-in checkboxes surface content-core 2.x's `docling_formulas` (extract mathematical formulas as structured markup) and `docling_vision` (describe images and extract chart data with a vision model) enrichment flags, mirroring the existing OCR toggle. Both default off; the vision help text warns it is significantly slower and may call a vision model. Like OCR, the toggles only take effect through the Docling engine, so they are gated on Docling availability. The settings persist via `GET`/`PUT /api/settings` and are threaded into content-core extraction alongside `docling_ocr` (migration 23 backfills the new fields); labels and help are translated across all 14 locales (#1131)
 - **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
 - Add `anthropic_compatible` credential provider (Anthropic-compatible endpoints with a custom base URL).
diff --git a/api/models.py b/api/models.py
index efb3435a..3fe2ce76 100644
--- a/api/models.py
+++ b/api/models.py
@@ -278,6 +278,8 @@ class SettingsResponse(BaseModel):
     default_embedding_option: Optional[str] = None
     auto_delete_files: Optional[str] = None
     docling_ocr: Optional[bool] = None
+    docling_formulas: Optional[bool] = None
+    docling_vision: Optional[bool] = None
     youtube_preferred_languages: Optional[List[str]] = None
 
 
@@ -287,6 +289,8 @@ class SettingsUpdate(BaseModel):
     default_embedding_option: Optional[str] = None
     auto_delete_files: Optional[str] = None
     docling_ocr: Optional[bool] = None
+    docling_formulas: Optional[bool] = None
+    docling_vision: Optional[bool] = None
     youtube_preferred_languages: Optional[List[str]] = None
 
 
diff --git a/api/routers/settings.py b/api/routers/settings.py
index 48309d2e..0a543dee 100644
--- a/api/routers/settings.py
+++ b/api/routers/settings.py
@@ -23,6 +23,8 @@ async def get_settings():
             default_embedding_option=settings.default_embedding_option,
             auto_delete_files=settings.auto_delete_files,
             docling_ocr=settings.docling_ocr,
+            docling_formulas=settings.docling_formulas,
+            docling_vision=settings.docling_vision,
             youtube_preferred_languages=settings.youtube_preferred_languages,
         )
     except HTTPException:
@@ -73,6 +75,10 @@ async def update_settings(settings_update: SettingsUpdate):
             )
         if settings_update.docling_ocr is not None:
             settings.docling_ocr = settings_update.docling_ocr
+        if settings_update.docling_formulas is not None:
+            settings.docling_formulas = settings_update.docling_formulas
+        if settings_update.docling_vision is not None:
+            settings.docling_vision = settings_update.docling_vision
         if settings_update.youtube_preferred_languages is not None:
             settings.youtube_preferred_languages = (
                 settings_update.youtube_preferred_languages
@@ -86,6 +92,8 @@ async def update_settings(settings_update: SettingsUpdate):
             default_embedding_option=settings.default_embedding_option,
             auto_delete_files=settings.auto_delete_files,
             docling_ocr=settings.docling_ocr,
+            docling_formulas=settings.docling_formulas,
+            docling_vision=settings.docling_vision,
             youtube_preferred_languages=settings.youtube_preferred_languages,
         )
     except HTTPException:
diff --git a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
index 2088ac37..8ea7f9c3 100644
--- a/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
+++ b/frontend/src/app/(dashboard)/settings/components/SettingsForm.tsx
@@ -23,6 +23,8 @@ const settingsSchema = z.object({
   default_embedding_option: z.enum(['ask', 'always', 'never']).optional(),
   auto_delete_files: z.enum(['yes', 'no']).optional(),
   docling_ocr: z.boolean().optional(),
+  docling_formulas: z.boolean().optional(),
+  docling_vision: z.boolean().optional(),
 })
 
 type SettingsFormData = z.infer<typeof settingsSchema>
@@ -62,6 +64,8 @@ export function SettingsForm() {
       default_embedding_option: undefined,
       auto_delete_files: undefined,
       docling_ocr: undefined,
+      docling_formulas: undefined,
+      docling_vision: undefined,
     }
   })
 
@@ -78,6 +82,8 @@ export function SettingsForm() {
         default_embedding_option: settings.default_embedding_option as 'ask' | 'always' | 'never',
         auto_delete_files: settings.auto_delete_files as 'yes' | 'no',
         docling_ocr: settings.docling_ocr ?? true,
+        docling_formulas: settings.docling_formulas ?? false,
+        docling_vision: settings.docling_vision ?? false,
       }
       reset(formData)
       setHasResetForm(true)
@@ -174,6 +180,44 @@ export function SettingsForm() {
             <p className="text-sm text-muted-foreground">{t('settings.ocrHelp')}</p>
           </div>
 
+          <div className="space-y-2">
+            <div className="flex items-center gap-2">
+              <Controller
+                name="docling_formulas"
+                control={control}
+                render={({ field }) => (
+                  <Checkbox
+                    id="docling_formulas"
+                    checked={field.value ?? false}
+                    onCheckedChange={field.onChange}
+                    disabled={field.disabled || isLoading || !doclingAvailable}
+                  />
+                )}
+              />
+              <Label htmlFor="docling_formulas">{t('settings.formulasEnabled')}</Label>
+            </div>
+            <p className="text-sm text-muted-foreground">{t('settings.formulasHelp')}</p>
+          </div>
+
+          <div className="space-y-2">
+            <div className="flex items-center gap-2">
+              <Controller
+                name="docling_vision"
+                control={control}
+                render={({ field }) => (
+                  <Checkbox
+                    id="docling_vision"
+                    checked={field.value ?? false}
+                    onCheckedChange={field.onChange}
+                    disabled={field.disabled || isLoading || !doclingAvailable}
+                  />
+                )}
+              />
+              <Label htmlFor="docling_vision">{t('settings.visionEnabled')}</Label>
+            </div>
+            <p className="text-sm text-muted-foreground">{t('settings.visionHelp')}</p>
+          </div>
+
           <div className="space-y-3">
             <Label htmlFor="url_engine">{t('settings.urlEngine')}</Label>
             <Controller
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 78da5ea1..92b1cb71 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -775,6 +775,10 @@ export const bnIN = {
     autoDeleteFiles: "স্বয়ংক্রিয় ফাইল মুছে ফেলা",
     ocrEnabled: "OCR সক্ষম করুন",
     ocrHelp: "Docling ইঞ্জিন ব্যবহারের সময় স্ক্যান করা PDF এবং ছবি থেকে টেক্সট বের করে। প্রক্রিয়া করতে ধীর।",
+    formulasEnabled: "সূত্র নিষ্কাশন করুন",
+    formulasHelp: "Docling ইঞ্জিন ব্যবহারের সময় গাণিতিক সূত্রগুলিকে কাঠামোবদ্ধ মার্কআপ হিসাবে নিষ্কাশন করে। প্রক্রিয়াকরণের সময় বাড়ায়।",
+    visionEnabled: "ছবি এবং চার্ট বর্ণনা করুন",
+    visionHelp: "Docling ইঞ্জিন ব্যবহারের সময় ছবি বর্ণনা করতে এবং চার্ট ডেটা নিষ্কাশন করতে একটি ভিশন মডেল ব্যবহার করে। উল্লেখযোগ্যভাবে ধীর এবং একটি ভিশন মডেল কল করতে পারে।",
     autoDeletePlaceholder: "স্বয়ংক্রিয় মুছে ফেলার অপশন নির্বাচন করুন",
     filesHelp: "একবার আপনার ফাইল আপলোড এবং প্রক্রিয়া হওয়ার পর, সেগুলি আর প্রয়োজন নেই। বেশিরভাগ ব্যবহারকারী Open Notebook কে আপলোড ফোল্ডার থেকে আপলোড করা ফাইল স্বয়ংক্রিয়ভাবে মুছে ফেলার অনুমতি দিতে পারেন।",
     loadFailed: "সেটিংস লোড করতে ব্যর্থ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index bd2562d7..e756c0a9 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -774,6 +774,10 @@ export const caES = {
     autoDeleteFiles: "Supressió automàtica de fitxers",
     ocrEnabled: "Activa l'OCR",
     ocrHelp: "Extreu text de PDF escanejats i imatges quan s'utilitza el motor Docling. Processament més lent.",
+    formulasEnabled: "Extreu fórmules",
+    formulasHelp: "Extreu fórmules matemàtiques com a marcatge estructurat quan s'utilitza el motor Docling. Augmenta el temps de processament.",
+    visionEnabled: "Descriu imatges i gràfics",
+    visionHelp: "Utilitza un model de visió per descriure imatges i extreure dades de gràfics quan s'utilitza el motor Docling. Considerablement més lent i pot cridar un model de visió.",
     autoDeletePlaceholder: "Selecciona l'opció de supressió automàtica",
     filesHelp: "Un cop els fitxers s'han carregat i processat, ja no calen. La majoria d'usuaris haurien de permetre que Open Notebook suprimeixi automàticament els fitxers carregats de la carpeta de càrrega.",
     loadFailed: "Ha fallat la càrrega de la configuració",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index ec1b0b28..67881309 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -777,6 +777,10 @@ export const deDE = {
     autoDeleteFiles: "Dateien automatisch löschen",
     ocrEnabled: "OCR aktivieren",
     ocrHelp: "Extrahiert Text aus gescannten PDFs und Bildern bei Verwendung der Docling-Engine. Langsamere Verarbeitung.",
+    formulasEnabled: "Formeln extrahieren",
+    formulasHelp: "Extrahiert mathematische Formeln als strukturiertes Markup bei Verwendung der Docling-Engine. Erhöht die Verarbeitungszeit.",
+    visionEnabled: "Bilder und Diagramme beschreiben",
+    visionHelp: "Verwendet ein Vision-Modell, um Bilder zu beschreiben und Diagrammdaten zu extrahieren, bei Verwendung der Docling-Engine. Deutlich langsamer und ruft möglicherweise ein Vision-Modell auf.",
     autoDeletePlaceholder: "Option für automatisches Löschen auswählen",
     filesHelp: "Nachdem deine Dateien hochgeladen und verarbeitet wurden, werden sie nicht mehr benötigt. Die meisten Nutzer sollten Open Notebook erlauben, hochgeladene Dateien automatisch aus dem Upload-Ordner zu löschen.",
     loadFailed: "Einstellungen konnten nicht geladen werden",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 952cf8b4..65af1720 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -773,6 +773,10 @@ export const enUS = {
     autoDeleteFiles: "Auto Delete Files",
     ocrEnabled: "Enable OCR",
     ocrHelp: "Extract text from scanned PDFs and images when using the Docling engine. Slower to process.",
+    formulasEnabled: "Extract formulas",
+    formulasHelp: "Extract mathematical formulas as structured markup when using the Docling engine. Adds processing time.",
+    visionEnabled: "Describe images and charts",
+    visionHelp: "Use a vision model to describe images and extract chart data when using the Docling engine. Significantly slower and may call a vision model.",
     autoDeletePlaceholder: "Select auto delete option",
     filesHelp: "Once your files are uploaded and processed, they are not required anymore. Most users should allow Open Notebook to delete uploaded files from the upload folder automatically.",
     loadFailed: "Failed to load settings",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index c6406f3e..666acb14 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -775,6 +775,10 @@ export const esES = {
     autoDeleteFiles: "Eliminar archivos automáticamente",
     ocrEnabled: "Activar OCR",
     ocrHelp: "Extrae texto de PDF escaneados e imágenes al usar el motor Docling. Más lento de procesar.",
+    formulasEnabled: "Extraer fórmulas",
+    formulasHelp: "Extrae fórmulas matemáticas como marcado estructurado al usar el motor Docling. Aumenta el tiempo de procesamiento.",
+    visionEnabled: "Describir imágenes y gráficos",
+    visionHelp: "Usa un modelo de visión para describir imágenes y extraer datos de gráficos al usar el motor Docling. Significativamente más lento y puede llamar a un modelo de visión.",
     autoDeletePlaceholder: "Selecciona opción de eliminación automática",
     filesHelp: "Una vez que tus archivos se suben y procesan, ya no son necesarios. La mayoría de los usuarios deberían permitir que Open Notebook elimine los archivos subidos de la carpeta de carga automáticamente.",
     loadFailed: "Error al cargar la configuración",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index f6a72de5..1a91a70b 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -774,6 +774,10 @@ export const frFR = {
     autoDeleteFiles: "Suppression automatique des fichiers",
     ocrEnabled: "Activer l'OCR",
     ocrHelp: "Extrait le texte des PDF numérisés et des images avec le moteur Docling. Traitement plus lent.",
+    formulasEnabled: "Extraire les formules",
+    formulasHelp: "Extrait les formules mathématiques sous forme de balisage structuré avec le moteur Docling. Augmente le temps de traitement.",
+    visionEnabled: "Décrire les images et les graphiques",
+    visionHelp: "Utilise un modèle de vision pour décrire les images et extraire les données des graphiques avec le moteur Docling. Nettement plus lent et peut appeler un modèle de vision.",
     autoDeletePlaceholder: "Sélectionnez une option de suppression automatique",
     filesHelp: "Une fois vos fichiers téléchargés et traités, ils ne sont plus nécessaires. La plupart des utilisateurs devraient autoriser Open Notebook à supprimer automatiquement les fichiers du dossier de téléchargement.",
     loadFailed: "Échec du chargement des paramètres",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 7bcb079f..9c47e6d1 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -774,6 +774,10 @@ export const itIT = {
     autoDeleteFiles: "Elimina file automaticamente",
     ocrEnabled: "Abilita OCR",
     ocrHelp: "Estrae il testo da PDF scansionati e immagini quando si usa il motore Docling. Elaborazione più lenta.",
+    formulasEnabled: "Estrai formule",
+    formulasHelp: "Estrae le formule matematiche come markup strutturato quando si usa il motore Docling. Aumenta il tempo di elaborazione.",
+    visionEnabled: "Descrivi immagini e grafici",
+    visionHelp: "Usa un modello di visione per descrivere le immagini ed estrarre i dati dei grafici quando si usa il motore Docling. Notevolmente più lento e può richiamare un modello di visione.",
     autoDeletePlaceholder: "Seleziona opzione eliminazione automatica",
     filesHelp: "Una volta caricati ed elaborati, i tuoi file non sono più necessari. La maggior parte degli utenti dovrebbe permettere a Open Notebook di eliminare automaticamente i file caricati dalla cartella upload.",
     loadFailed: "Impossibile caricare le impostazioni",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index e809cb52..208ae97a 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -774,6 +774,10 @@ export const jaJP = {
     autoDeleteFiles: "ファイル自動削除",
     ocrEnabled: "OCRを有効にする",
     ocrHelp: "Doclingエンジン使用時に、スキャンしたPDFや画像からテキストを抽出します。処理が遅くなります。",
+    formulasEnabled: "数式を抽出する",
+    formulasHelp: "Doclingエンジン使用時に、数式を構造化されたマークアップとして抽出します。処理時間が増加します。",
+    visionEnabled: "画像とグラフを説明する",
+    visionHelp: "Doclingエンジン使用時に、ビジョンモデルを使用して画像を説明し、グラフのデータを抽出します。処理が大幅に遅くなり、ビジョンモデルを呼び出す場合があります。",
     autoDeletePlaceholder: "自動削除オプションを選択",
     filesHelp: "ファイルがアップロードされて処理されると、ファイル自体は不要になります。ほとんどのユーザーはOpen Notebookがアップロードフォルダから自動的にファイルを削除することを許可すべきです。",
     loadFailed: "設定の読み込みに失敗しました",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index bc918783..a93517c1 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -774,6 +774,10 @@ export const plPL = {
     autoDeleteFiles: "Automatyczne usuwanie plików",
     ocrEnabled: "Włącz OCR",
     ocrHelp: "Wyodrębnia tekst ze zeskanowanych plików PDF i obrazów przy użyciu silnika Docling. Wolniejsze przetwarzanie.",
+    formulasEnabled: "Wyodrębnij wzory",
+    formulasHelp: "Wyodrębnia wzory matematyczne jako ustrukturyzowany zapis przy użyciu silnika Docling. Wydłuża czas przetwarzania.",
+    visionEnabled: "Opisuj obrazy i wykresy",
+    visionHelp: "Używa modelu wizyjnego do opisywania obrazów i wyodrębniania danych z wykresów przy użyciu silnika Docling. Znacznie wolniejsze i może wywoływać model wizyjny.",
     autoDeletePlaceholder: "Wybierz opcję automatycznego usuwania",
     filesHelp: "Po przesłaniu i przetworzeniu plików nie są one już potrzebne. Większość użytkowników powinna pozwolić Open Notebook na automatyczne usuwanie przesłanych plików z folderu przesyłania.",
     loadFailed: "Nie udało się załadować ustawień",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index f7be4a83..ec227845 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -774,6 +774,10 @@ export const ptBR = {
     autoDeleteFiles: "Excluir Arquivos Automaticamente",
     ocrEnabled: "Ativar OCR",
     ocrHelp: "Extrai texto de PDFs escaneados e imagens ao usar o mecanismo Docling. Mais lento para processar.",
+    formulasEnabled: "Extrair fórmulas",
+    formulasHelp: "Extrai fórmulas matemáticas como marcação estruturada ao usar o mecanismo Docling. Aumenta o tempo de processamento.",
+    visionEnabled: "Descrever imagens e gráficos",
+    visionHelp: "Usa um modelo de visão para descrever imagens e extrair dados de gráficos ao usar o mecanismo Docling. Significativamente mais lento e pode chamar um modelo de visão.",
     autoDeletePlaceholder: "Selecione a opção de exclusão automática",
     filesHelp: "Uma vez que seus arquivos são enviados e processados, eles não são mais necessários. A maioria dos usuários deve permitir que o Open Notebook exclua arquivos enviados da pasta de upload automaticamente.",
     loadFailed: "Falha ao carregar configurações",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 661a8f97..b2ed27d0 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -774,6 +774,10 @@ export const ruRU = {
     autoDeleteFiles: "Автоудаление файлов",
     ocrEnabled: "Включить OCR",
     ocrHelp: "Извлекает текст из отсканированных PDF и изображений при использовании движка Docling. Обработка медленнее.",
+    formulasEnabled: "Извлекать формулы",
+    formulasHelp: "Извлекает математические формулы в виде структурированной разметки при использовании движка Docling. Увеличивает время обработки.",
+    visionEnabled: "Описывать изображения и диаграммы",
+    visionHelp: "Использует модель зрения для описания изображений и извлечения данных диаграмм при использовании движка Docling. Значительно медленнее и может вызывать модель зрения.",
     autoDeletePlaceholder: "Выберите опцию автоудаления",
     filesHelp: "После загрузки и обработки файлы больше не нужны. Большинству пользователей следует разрешить Open Notebook автоматически удалять загруженные файлы из папки загрузок.",
     loadFailed: "Не удалось загрузить настройки",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index ca911a43..c9a386cb 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -774,6 +774,10 @@ export const trTR = {
     autoDeleteFiles: "Dosyaları Otomatik Sil",
     ocrEnabled: "OCR'yi etkinleştir",
     ocrHelp: "Docling motoru kullanılırken taranmış PDF'lerden ve görüntülerden metin çıkarır. İşlemesi daha yavaştır.",
+    formulasEnabled: "Formülleri çıkar",
+    formulasHelp: "Docling motoru kullanılırken matematiksel formülleri yapılandırılmış biçimde çıkarır. İşleme süresini artırır.",
+    visionEnabled: "Görüntüleri ve grafikleri açıkla",
+    visionHelp: "Docling motoru kullanılırken görüntüleri açıklamak ve grafik verilerini çıkarmak için bir görüntü modeli kullanır. Önemli ölçüde daha yavaştır ve bir görüntü modeli çağırabilir.",
     autoDeletePlaceholder: "Otomatik silme seçeneği seçin",
     filesHelp: "Dosyalarınız yüklenip işlendikten sonra artık gerekli değildir. Çoğu kullanıcı Open Notebook'un yüklenen dosyaları yükleme klasöründen otomatik olarak silmesine izin vermelidir.",
     loadFailed: "Ayarlar yüklenemedi",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index d4041423..03fe6919 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -774,6 +774,10 @@ export const zhCN = {
     autoDeleteFiles: "自动删除文件",
     ocrEnabled: "启用 OCR",
     ocrHelp: "使用 Docling 引擎时，从扫描的 PDF 和图片中提取文本。处理速度较慢。",
+    formulasEnabled: "提取公式",
+    formulasHelp: "使用 Docling 引擎时，将数学公式提取为结构化标记。会增加处理时间。",
+    visionEnabled: "描述图片和图表",
+    visionHelp: "使用 Docling 引擎时，使用视觉模型描述图片并提取图表数据。处理速度明显变慢，并且可能调用视觉模型。",
     autoDeletePlaceholder: "选择自动删除选项",
     filesHelp: "文件处理完成后，原始件不再需要。建议开启自动删除以节省存储空间。除非您将其作为主要存储位置（不建议），否则请选择“是”。",
     loadFailed: "加载设置失败",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index bfebe8d2..a711dcd9 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -774,6 +774,10 @@ export const zhTW = {
     autoDeleteFiles: "自動刪除檔案",
     ocrEnabled: "啟用 OCR",
     ocrHelp: "使用 Docling 引擎時，從掃描的 PDF 和圖片中擷取文字。處理速度較慢。",
+    formulasEnabled: "擷取公式",
+    formulasHelp: "使用 Docling 引擎時，將數學公式擷取為結構化標記。會增加處理時間。",
+    visionEnabled: "描述圖片和圖表",
+    visionHelp: "使用 Docling 引擎時，使用視覺模型描述圖片並擷取圖表資料。處理速度明顯較慢，且可能呼叫視覺模型。",
     autoDeletePlaceholder: "選擇自動刪除選項",
     filesHelp: "檔案處理完成後，原始件不再需要。建議開啟自動刪除以節省儲存空間。除非您將其作為主要儲存位置（不建議），否則請選擇“是”。",
     loadFailed: "載入設定失敗",
diff --git a/frontend/src/lib/types/api.ts b/frontend/src/lib/types/api.ts
index 19777582..6d73c80e 100644
--- a/frontend/src/lib/types/api.ts
+++ b/frontend/src/lib/types/api.ts
@@ -58,6 +58,8 @@ export interface SettingsResponse {
   default_embedding_option?: string
   auto_delete_files?: string
   docling_ocr?: boolean
+  docling_formulas?: boolean
+  docling_vision?: boolean
   youtube_preferred_languages?: string[]
 }
 
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 6d768475..a8564956 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -142,6 +142,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/22.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/23.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -210,6 +213,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/22_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/23_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/23.surrealql b/open_notebook/database/migrations/23.surrealql
new file mode 100644
index 00000000..6ed94e8c
--- /dev/null
+++ b/open_notebook/database/migrations/23.surrealql
@@ -0,0 +1,9 @@
+-- Migration 23: Expose Docling formula & vision enrichment toggles (#1131)
+-- content_settings lives on the SCHEMALESS `open_notebook` table, so the new
+-- fields need no DEFINE FIELD. Backfill explicit defaults on the existing
+-- settings record so operators inspect the toggles' current (disabled) state
+-- instead of a missing key. On fresh installs the record does not exist yet and
+-- the Pydantic ContentSettings defaults (both False) apply on first read.
+
+UPDATE open_notebook:content_settings SET docling_formulas = false WHERE docling_formulas = NONE;
+UPDATE open_notebook:content_settings SET docling_vision = false WHERE docling_vision = NONE;
diff --git a/open_notebook/database/migrations/23_down.surrealql b/open_notebook/database/migrations/23_down.surrealql
new file mode 100644
index 00000000..3b71edf0
--- /dev/null
+++ b/open_notebook/database/migrations/23_down.surrealql
@@ -0,0 +1,3 @@
+-- Migration 23 rollback: remove Docling formula & vision enrichment toggles (#1131)
+
+UPDATE open_notebook:content_settings UNSET docling_formulas, docling_vision;
diff --git a/open_notebook/domain/content_settings.py b/open_notebook/domain/content_settings.py
index 4b89ec5e..099ebc52 100644
--- a/open_notebook/domain/content_settings.py
+++ b/open_notebook/domain/content_settings.py
@@ -26,6 +26,21 @@ class ContentSettings(RecordModel):
             "them. Disable for faster processing of text-native documents."
         ),
     )
+    docling_formulas: Optional[bool] = Field(
+        False,
+        description=(
+            "Extract mathematical formulas as structured markup when the Docling "
+            "engine handles a document. Adds processing time."
+        ),
+    )
+    docling_vision: Optional[bool] = Field(
+        False,
+        description=(
+            "Describe images and charts using a vision model when the Docling "
+            "engine handles a document. Significantly slower and may invoke a "
+            "vision model."
+        ),
+    )
     youtube_preferred_languages: Optional[List[str]] = Field(
         ["en", "pt", "es", "de", "nl", "en-GB", "fr", "de", "hi", "ja"],
         description="Preferred languages for YouTube transcripts",
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index f8a36f1d..4d800f87 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -73,6 +73,10 @@ async def content_process(state: SourceState) -> dict:
             )
         if settings.docling_ocr is not None:
             config_kwargs["docling_ocr"] = settings.docling_ocr
+        if settings.docling_formulas is not None:
+            config_kwargs["docling_formulas"] = settings.docling_formulas
+        if settings.docling_vision is not None:
+            config_kwargs["docling_vision"] = settings.docling_vision
     except Exception as e:
         # Keep the server-side traceback for diagnosing DB/deserialization
         # failures while still falling back to defaults (non-fatal).
@@ -110,7 +114,9 @@ async def content_process(state: SourceState) -> dict:
         f"Extracting {target} via content-core "
         f"(url_engine={config_kwargs.get('url_engine', 'auto')}, "
         f"document_engine={config_kwargs.get('document_engine', 'auto')}, "
-        f"docling_ocr={config_kwargs.get('docling_ocr', 'auto')})"
+        f"docling_ocr={config_kwargs.get('docling_ocr', 'auto')}, "
+        f"docling_formulas={config_kwargs.get('docling_formulas', 'auto')}, "
+        f"docling_vision={config_kwargs.get('docling_vision', 'auto')})"
     )
 
     processed = await extract_content(
diff --git a/tests/test_domain.py b/tests/test_domain.py
index 6b777af3..8f29520e 100644
--- a/tests/test_domain.py
+++ b/tests/test_domain.py
@@ -625,6 +625,18 @@ class TestContentSettings:
         assert settings.docling_ocr is True
         assert ContentSettings(docling_ocr=False).docling_ocr is False
 
+    def test_docling_formulas_defaults_off(self):
+        """Formula extraction is off by default (matches content-core)."""
+        settings = ContentSettings()
+        assert settings.docling_formulas is False
+        assert ContentSettings(docling_formulas=True).docling_formulas is True
+
+    def test_docling_vision_defaults_off(self):
+        """Image/chart vision is off by default (matches content-core)."""
+        settings = ContentSettings()
+        assert settings.docling_vision is False
+        assert ContentSettings(docling_vision=True).docling_vision is True
+
 
 # ============================================================================
 # TEST SUITE 9: Episode Profile Validation
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 88d963ea..e604efb6 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -404,6 +404,8 @@ class TestContentProcessDeleteSource:
                 default_content_processing_engine_url="crawl4ai",
                 default_content_processing_engine_doc="docling",
                 docling_ocr=False,
+                docling_formulas=True,
+                docling_vision=True,
             )
         )
         mock_extract.return_value = ExtractionOutput(title="T", content="body")
@@ -421,6 +423,8 @@ class TestContentProcessDeleteSource:
         assert config.url_engine == "crawl4ai"
         assert config.document_engine == "docling"
         assert config.docling_ocr is False
+        assert config.docling_formulas is True
+        assert config.docling_vision is True
 
 
 # ============================================================================

From 8a39589d580d39a8c7d416b7910f183131d4297e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 20 Jul 2026 17:40:16 -0300
Subject: [PATCH 241/345] chore(deps): resolve open Dependabot security alerts
 (#1191)

Bump two dependencies flagged by Dependabot ahead of the v1.14.0 release:

- mcp 1.25.0 -> 1.28.1 (3 high alerts). Transitive via content-core ->
  fastmcp; the advisories cover MCP *server* transports (missing
  Host/Origin validation on the WebSocket transport, HTTP transports
  serving session requests without verifying the authenticated
  principal, and experimental task handlers exposing other clients'
  tasks). Open Notebook does not serve MCP, so none of them are
  reachable here, but fastmcp accepts the newer release and the bump
  resolves cleanly with no other dependency churn.
- axios 1.16.0 -> 1.18.1 (medium alert). Prototype pollution allowing
  Basic auth injection through auth subfields. Direct frontend
  dependency; pulls nested agent-base/https-proxy-agent, which newer
  axios uses for proxy handling.

Verified: uv sync + content-core/fastmcp import clean, frontend
npm ci + npm run build green, npm audit reports 0 vulnerabilities.
---
 frontend/package-lock.json | 34 ++++++++++++++++++++++++++++++----
 frontend/package.json      |  2 +-
 uv.lock                    |  6 +++---
 3 files changed, 34 insertions(+), 8 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index d2a5dee4..d39c652f 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -29,7 +29,7 @@
         "@tanstack/react-query": "^5.83.0",
         "@types/react-syntax-highlighter": "^15.5.13",
         "@uiw/react-md-editor": "^4.0.8",
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -5448,16 +5448,42 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
-      "integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
+      "version": "1.18.1",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz",
+      "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
         "form-data": "^4.0.5",
+        "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
     },
+    "node_modules/axios/node_modules/agent-base": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
+      "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6.0.0"
+      }
+    },
+    "node_modules/axios/node_modules/https-proxy-agent": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
+      "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "6",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/axobject-query": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/axobject-query/-/axobject-query-4.1.0.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index da1b0c48..647a0492 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -34,7 +34,7 @@
     "@tanstack/react-query": "^5.83.0",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@uiw/react-md-editor": "^4.0.8",
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
diff --git a/uv.lock b/uv.lock
index 0c63bbcb..6bb2cc56 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1826,7 +1826,7 @@ wheels = [
 
 [[package]]
 name = "mcp"
-version = "1.25.0"
+version = "1.28.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
@@ -1844,9 +1844,9 @@ dependencies = [
     { name = "typing-inspection" },
     { name = "uvicorn", marker = "sys_platform != 'emscripten'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/d5/2d/649d80a0ecf6a1f82632ca44bec21c0461a9d9fc8934d38cb5b319f2db5e/mcp-1.25.0.tar.gz", hash = "sha256:56310361ebf0364e2d438e5b45f7668cbb124e158bb358333cd06e49e83a6802", size = 605387, upload-time = "2025-12-19T10:19:56.985Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/6e/77/9450b8f251a13affb6281997d0523c4615f8a8b35d0b21ff30db3a5aac9d/mcp-1.28.1.tar.gz", hash = "sha256:d51e36a5f5644faea4f85ea649bfffa6bc6c26770d42798ad6a3de3d2ba69683", size = 638501, upload-time = "2026-06-26T12:57:29.093Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/e2/fc/6dc7659c2ae5ddf280477011f4213a74f806862856b796ef08f028e664bf/mcp-1.25.0-py3-none-any.whl", hash = "sha256:b37c38144a666add0862614cc79ec276e97d72aa8ca26d622818d4e278b9721a", size = 233076, upload-time = "2025-12-19T10:19:55.416Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/5e/d118fce19f87a2e7d8101c35c8ae0ec289098a4df0ff244cec23e415aca0/mcp-1.28.1-py3-none-any.whl", hash = "sha256:2726bca5e7193f61c5dde8b12500a6de2d9acf6d1a1c0be9e8c2e706437991df", size = 222620, upload-time = "2026-06-26T12:57:27.218Z" },
 ]
 
 [[package]]

From b853342c7983673e377997f5421b3310c3561ebe Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 20 Jul 2026 17:49:15 -0300
Subject: [PATCH 242/345] docs(changelog): close the [Unreleased] gaps before
 v1.14.0 (#1192)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The release audit (git log v1.13.0..main) found 27 merged commits but
only 11 represented in [Unreleased]. Adds the 14 missing entries and
corrects two existing problems:

- The #1137 entry (per-transformation model selection) was filed under
  [1.13.0], but its commit is not in the v1.13.0 tag — v1.13.0 shipped a
  changelog entry for an unshipped fix. Moved verbatim to [Unreleased].
- The anthropic_compatible entry was a one-line stub with no issue
  reference; rewritten in house style and pointed at #675.

New entries cover the DNS-pinning hardening (#1063), worker concurrency
(#893), episode max_tokens in the UI (#991), error-text capping (#1136),
the IME/chat composer perf fix (#1147), the anthropic shim removal
(#1055), the esperanto floor bump (#1176), ja-JP translation quality
(#998), i18n placeholder parity (#1159), the OLLAMA_API_BASE docs fix
(#1148), and the CI/tooling chores (#1134, #940, #1133, #1158).

A ### Changed section was added; every commit in the range is now
represented.
---
 CHANGELOG.md | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 474e80be..620861d2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,9 +11,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Docling formula & vision enrichment toggles** in Settings → Content Processing. Two new opt-in checkboxes surface content-core 2.x's `docling_formulas` (extract mathematical formulas as structured markup) and `docling_vision` (describe images and extract chart data with a vision model) enrichment flags, mirroring the existing OCR toggle. Both default off; the vision help text warns it is significantly slower and may call a vision model. Like OCR, the toggles only take effect through the Docling engine, so they are gated on Docling availability. The settings persist via `GET`/`PUT /api/settings` and are threaded into content-core extraction alongside `docling_ocr` (migration 23 backfills the new fields); labels and help are translated across all 14 locales (#1131)
 - **OpenRouter now supports text-to-speech and speech-to-text**, not just LLMs and embeddings (esperanto 2.25.0). The provider's modalities were extended so the Settings UI offers TTS/STT when registering OpenRouter models. Because OpenRouter's `/models` listing does not reliably tag audio models, discovery seeds the working defaults esperanto ships — `microsoft/mai-voice-2` (TTS) and `openai/whisper-1` + `openai/whisper-large-v3` (STT) — alongside the API-discovered language models; any other `vendor/model` id can be added manually. Note that `microsoft/mai-voice-2` uses Microsoft neural voice names (e.g. `en-US-AvaNeural`), not OpenAI's `alloy`/`nova` set (#987)
 - Newer ElevenLabs models are now offered in model discovery: `eleven_v3`, `eleven_flash_v2_5` and `eleven_flash_v2` for text-to-speech, and `scribe_v2` for speech-to-text — alongside the existing models. Esperanto passes the `model_id` straight through to ElevenLabs, so no provider changes were needed (#1167)
-- Add `anthropic_compatible` credential provider (Anthropic-compatible endpoints with a custom base URL).
+- **`anthropic_compatible` credential provider**, mirroring the existing `openai_compatible` one, so endpoints that only speak the Anthropic Messages format (e.g. Kimi) can be connected with a base URL plus API key — from Settings → API Keys or via `ANTHROPIC_COMPATIBLE_BASE_URL` / `ANTHROPIC_COMPATIBLE_API_KEY`. The connection test carries one Anthropic-specific wrinkle: a 404/405 from `GET /models` is reported as "listing unsupported, register models manually" rather than a failed connection, since Messages-only endpoints are legitimately unable to list. Model discovery uses `GET /v1/models` with the Anthropic headers and shares the base-URL normalization and request-time re-validation used by provisioning. Provider card and credential form translated across all 14 locales (#675)
 - **First-class oMLX provider** in Settings → API Keys: native Esperanto `omlx` profile identity (language + embedding), default base URL `http://localhost:11435/v1` (avoids SurrealDB on 8000), optional API key, connection test and `/v1/models` discovery. No remapping to `openai-compatible` and no `OPENAI_COMPATIBLE_*` env mirroring. Docs under `docs/5-CONFIGURATION/omlx.md` (#1048; upstream lfnovo/esperanto#228)
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
+- **Worker concurrency is now configurable** via `OPEN_NOTEBOOK_WORKER_MAX_TASKS`. The surreal-commands worker always ran with a hardcoded concurrency of 5, which overloads single-GPU and local-LLM setups and trips provider rate limits when several sources are processed at once. The variable is wired into every launch point — `make worker-start`/`make start-all`, `dev-init.sh`, and the Docker `supervisord.conf` (wrapped in `sh -c` so the shell actually expands it, since `command=` does not run through a shell) — and defaults to 5; set it to 1 for strictly sequential processing. It is read at worker launch time, so changing it requires restarting the worker. This also removes a phantom entry from the docs: `SURREAL_COMMANDS_MAX_TASKS` was documented but read nowhere (the worker's `--max-tasks` Typer option has no envvar binding) and has been replaced with the real variable in `.env.example` and the environment reference (#893)
+- Episode profiles now expose an optional **"Max output tokens"** field in the UI. The `max_tokens` value already existed on the podcast episode profile model but could only be set through the API; the profile form now offers it as a number input (positive integer, clearable to unset), mirroring how `num_segments` is handled — zod validation, form defaults/reset and submit payload — and the episode card shows the configured value in its details. Translated across all 14 locales (#991)
+- Local commits are now gated by the same checks as CI: a new `.pre-commit-config.yaml` runs ruff lint (with `--fix`), ruff format, mypy (through `uv run` so it matches CI exactly) and basic hygiene hooks (large files, merge conflict markers, YAML/TOML syntax, trailing whitespace, EOF newlines), with install/run/skip instructions in the development-setup docs (#940)
+- The i18n locale parity test now also compares **interpolation placeholders**, not just keys. It previously only checked that every locale defined the same key set, so a value carrying a stray single-brace `{count}` instead of i18next's `{{count}}` — or a placeholder that does not exist in the en-US reference — passed silently and rendered as literal text at runtime. Every leaf string is now checked against en-US for both missing/extra `{{...}}` placeholders and stray single-brace tokens; this caught and fixed `podcasts.generationStartedDesc` in zh-CN and zh-TW, which referenced a `{{name}}` placeholder the reference string does not have (#1159)
+- The dev Docker build (`build-regular`) is gated on image-affecting paths, so docs- and config-only PRs no longer wait several minutes for a byte-identical image. A `paths-filter` job decides whether the build steps run; the job itself always executes so the required status check always reports — deliberately avoiding the workflow-level paths filter that would leave the required check permanently pending and deadlock merges. PRs touching the Dockerfile, dependencies, app or frontend build as before, and the release build is untouched (#1134)
+- Release tooling: `rc-stack.sh up` now `docker pull`s `lfnovo/open_notebook:<tag>` before booting so a same-named local build cannot shadow the registry artifact during release verification (non-fatal for local-only tags), and a new `--with-runtimes` flag enables the opt-in Docling/Crawl4AI heavy engines on the RC stack so the published image's opt-in install path can be exercised with real data. Both gotchas are documented in `RELEASE_PROCESS.md`; the default release-test compose leaves the runtimes off to keep fresh/upgrade runs fast (#1133)
+- README now links to [@lfnovo on X](https://x.com/lfnovo) for project updates (#1158)
+
+### Changed
+- Bumped the esperanto floor to `>=2.25.1`. This is the dependency change that unlocks the oMLX provider, the Cohere/Deepgram STT/PPQ/Novita providers, OpenRouter TTS/STT, Vertex service-account auth and the native Anthropic `to_langchain()` base URL forwarding listed elsewhere in this release. A clean drop-in — no application code changes were required (#1176)
+- Removed the `ChatAnthropic` re-injection shim used by `anthropic_compatible` models. esperanto 2.25.1 forwards a custom `base_url` natively through `to_langchain()`, so the `_to_langchain()` helper in `provision.py` and the `_open_notebook_provider` marker it depended on (its only consumer) are gone; provisioning now calls `model.to_langchain()` directly. No behavior change — custom Anthropic-compatible endpoints keep working, now through the upstream path (#1055)
+- Japanese (ja-JP) translations reviewed and improved throughout: "トランスフォーメーション" replaced with the natural 変換, duration formatting given proper spacing, and accessibility labels, error messages and assorted phrasings rewritten to read naturally rather than as literal translations (#998)
 
 ### Fixed
 - **HTTP proxy no longer breaks worker/API startup.** `websockets` 15.0 began auto-detecting `HTTP_PROXY`/`HTTPS_PROXY` and tunnels even `ws://` connections through the proxy, so with a proxy set the internal SurrealDB websocket (`ws://host.docker.internal:8018/rpc` or `ws://surrealdb:8000/rpc`) was routed through the external proxy, which rejected the internal host with HTTP 403 and killed the worker on startup. Open Notebook now injects `host.docker.internal,surrealdb,localhost,127.0.0.1` into `no_proxy`/`NO_PROXY` at startup (merged with any user value, never clobbering it), and the `.env.example` / docs `NO_PROXY` examples now include the internal DB hosts (#1160)
@@ -21,6 +33,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - PPQ model discovery now lists all modalities, not just chat. PPQ's `/v1/models` returns only chat/language models by default; the discovery URL now requests `?type=all` so the embedding, speech-to-text and text-to-speech models this multi-modality gateway advertises actually surface in the provider matrix (`PPQ_MODEL_TYPES` classifies them into the right slots) (#1180)
 - Vertex credentials now configure text-to-speech (and other Vertex providers) correctly when used through a stored credential rather than environment variables. `Credential.to_esperanto_config()` emitted the generic `project`/`location` keys, but esperanto's Vertex providers expect `vertex_project`/`vertex_location` — so credential-linked Vertex TTS crashed with `__init__() got an unexpected keyword argument 'project'`. The config now maps to the Vertex-specific key names for the `vertex` provider only; the `Credential` schema/API fields stay `project`/`location`, and non-Vertex providers are unaffected (#1151)
 - Deleting a notebook now also deletes its chat sessions instead of leaving orphaned `chat_session` records behind. The notebook `delete()` cascade enumerates the notebook's chat sessions (via the existing `refers_to` relation) and deletes each one alongside the notes and exclusive sources it already handled (#1124)
+- **Outbound requests to user-supplied provider endpoints are now pinned to a DNS-vetted IP address.** Validating a URL and then handing it to httpx left a DNS-rebinding TOCTOU window: httpx re-resolves the hostname at connect time, so a hostname that passed validation could resolve to a link-local or cloud metadata address (e.g. `169.254.169.254`, `fd00:ec2::254`) on the actual connection. A new `prepare_pinned_http_target()` helper resolves once, rejects dangerous addresses, and rewrites the request URL to the vetted IP while preserving the original hostname in the `Host` header and TLS SNI (IDNA-encoded), so routing and certificate verification are unaffected. Applied consistently to the credential-save, connection-test and model-discovery paths for `openai_compatible`, `ollama`, `azure` and the OpenAI provider's custom `base_url` (#1063)
+- Per-transformation model selection now actually takes effect. A transformation's assigned `model_id` was persisted but ignored at execution time: both call sites that run the transformation graph (the source-processing graph and the `run_transformation` background command) invoked it without a config, so the graph node always read a `None` model and fell back to the global default transformation model. Both now forward `transformation.model_id` through the LangGraph `configurable` config, so a transformation configured to use a specific model runs on that model (an unset `model_id` still falls back to the default) (#1137)
+- Error text surfaced by the sources API is now capped at 200 characters. `GET` source status and synchronous processing failures returned the raw command/result `error_message` unbounded, which could push arbitrary internal exception text (including stack detail from third-party extraction libraries) to clients and did not match the truncation already applied elsewhere in the API. Both paths now go through a `None`-safe truncation helper that appends an ellipsis when it cuts (#1136)
+- **Typing in the chat composer no longer lags in long conversations**, which was especially painful for IME users (Japanese, Chinese, Korean) whose per-keystroke composition events made the whole message history re-render. The composer input state moved into a dedicated `ChatComposer` child so keystrokes stay local to it, each message row is memoized with `React.memo`, and the reference-click handler is stabilized with `useCallback` — which in turn required memoizing `openModal`/`closeModal` in `useModalManager`, since their changing identities were re-rendering every memoized row on each composer keystroke. Send behavior and the Ctrl/Cmd+Enter shortcut are unchanged (#1147)
+- The quick-start guide and the two Ollama compose examples set `OLLAMA_BASE_URL`, which no code path reads — the variable the provider registry actually looks for is `OLLAMA_API_BASE`. Following the examples verbatim left Ollama permanently unavailable with no error to explain why. All three shipped files now use the correct name (#1148)
 
 ## [1.13.0] - 2026-07-13
 
@@ -40,7 +57,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The legacy provider/model string fields on podcast profiles (`outline_provider`, `outline_model`, `transcript_provider`, `transcript_model` on episode profiles; `tts_provider`, `tts_model` on speaker profiles) are gone from the database, the API and the UI — the app has ignored them since the Model registry references landed in v1.11. Migration 22 first best-effort maps any profile whose `outline_llm`/`transcript_llm`/`voice_model` reference is still empty to an existing model record (matching provider + name + type; no auto-creation, since a migration must not touch credentials), then drops the six columns; the startup data migration that used to retry this mapping on every boot (`open_notebook/podcasts/migration.py`) was deleted. Accepted trade-off: profiles whose mapping never converged (e.g. the provider credential was never configured) lose the legacy strings and stay unresolved — they were already non-functional and the UI already flags them as needing model selection, so you just re-pick the models in the profile form once (#1107)
 
 ### Fixed
-- Per-transformation model selection now actually takes effect. A transformation's assigned `model_id` was persisted but ignored at execution time: both call sites that run the transformation graph (the source-processing graph and the `run_transformation` background command) invoked it without a config, so the graph node always read a `None` model and fell back to the global default transformation model. Both now forward `transformation.model_id` through the LangGraph `configurable` config, so a transformation configured to use a specific model runs on that model (an unset `model_id` still falls back to the default) (#1137)
 - Uploading a file content-core can't extract now fails immediately at ingestion with a clear `415 Unsupported Media Type` error that names the detected MIME type, instead of enqueueing a background job that retried up to 15 times over ~1 hour before surfacing a generic "Failed" with no actionable detail. The pre-flight uses content-core 2.x's header-only `check_file_support()` — the same routing real extraction uses, so the verdict can't disagree with what would happen downstream — and the source-retry endpoint is guarded the same way; unexpected check errors (e.g. a file removed before a retry) fall through to normal extraction rather than becoming a hard rejection (#975)
 - Podcast episode cards no longer show "— / —" for the outline, transcript and speaker model rows on new episodes: the API now resolves the snapshot's model references (`outline_llm`/`transcript_llm`/`voice_model`) to provider/name display fields at serialization time — batched into a single query per request, so listing episodes never does a per-row model lookup — and the card falls back to the legacy snapshot strings for old episodes and degrades to "—" when a referenced model was deleted (#1114)
 - Renaming a speaker profile no longer breaks the episode profiles that use it: `episode_profile.speaker_config` now stores a `record<speaker_profile>` reference instead of the profile name (migration 20 converts existing rows; references whose speaker profile no longer exists at migration time become null, and any reference that later stops resolving is treated as "needs setup" — the UI asks you to pick a speaker again). The `POST /api/podcasts/generate` contract is unchanged — it still accepts the speaker profile by name and resolves it at the API boundary (#630)

From 7cac3da240715be280cffac8294ef58a22cbd659 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 20 Jul 2026 17:56:42 -0300
Subject: [PATCH 243/345] test(security): pin legitimate self-hosted use
 against the DNS guard (#1193)

The DNS-pinning guard added in #1063 is the highest-risk change in the
v1.14.0 release for self-hosters: it sits on the outbound path of every
credential save, connection test and model discovery, so a regression
that over-blocks silently costs users their provider.

TestPinnedHttpTarget already covers what the guard must reject. This
adds the inverse assertions - the deployment shapes that must keep
working - which prepare_pinned_http_target had no coverage for at all
(the existing legitimate-use tests only exercised validate_url, which
is not what gates outbound requests):

- Ollama on localhost, including IPv4 preference when both families
  resolve
- host.docker.internal (containerized app -> host service)
- private LAN by IP literal (LM Studio) and by hostname
- IPv6 loopback literal
- Tailscale CGNAT space (100.64.0.0/10) - shared, not link-local
- AAAA-only endpoints producing a bracketed, parseable URL
- query strings surviving the rewrite (PPQ's ?type=all discovery URL)

All pass against the current implementation - this pins the behavior
rather than fixing a defect.
---
 tests/test_url_validation.py | 127 +++++++++++++++++++++++++++++++++++
 1 file changed, 127 insertions(+)

diff --git a/tests/test_url_validation.py b/tests/test_url_validation.py
index 1c9947c4..86c8a185 100644
--- a/tests/test_url_validation.py
+++ b/tests/test_url_validation.py
@@ -244,3 +244,130 @@ class TestPinnedHttpTarget:
                 await prepare_pinned_http_target(
                     "http://evil.example/v1/models", "openai_compatible"
                 )
+
+
+class TestPinnedHttpTargetSelfHostedUse:
+    """The pinning guard must not break the self-hosted setups it protects.
+
+    TestPinnedHttpTarget above proves the guard blocks what it should. These
+    are the inverse assertions: every deployment shape a self-hoster actually
+    runs must survive pinning and reach its endpoint. A regression here means
+    users with a local Ollama, an LM Studio box on the LAN, a containerized
+    app talking to the host, or a Tailscale-hosted endpoint lose their
+    provider with no obvious cause.
+    """
+
+    async def test_localhost_ollama_survives_pinning(self):
+        """The single most common self-hosted setup: Ollama on localhost."""
+        fake_addrs = [
+            (socket.AF_INET6, socket.SOCK_STREAM, 6, "", ("::1", 0, 0, 0)),
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("127.0.0.1", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "http://localhost:11434/api/tags", "ollama"
+            )
+
+        # IPv4 is preferred when both families resolve.
+        assert target.url == "http://127.0.0.1:11434/api/tags"
+        assert target.headers == {"Host": "localhost:11434"}
+        assert target.extensions == {}
+
+    async def test_host_docker_internal_survives_pinning(self):
+        """Containerized app reaching a service on the host."""
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("192.168.65.2", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "http://host.docker.internal:11434/v1/models", "ollama"
+            )
+
+        assert target.url == "http://192.168.65.2:11434/v1/models"
+        assert target.headers == {"Host": "host.docker.internal:11434"}
+
+    async def test_private_lan_ip_literal_survives_pinning(self):
+        """LM Studio (or any box) addressed by private IP literal on the LAN."""
+        target = await prepare_pinned_http_target(
+            "http://192.168.1.50:1234/v1/models", "openai_compatible"
+        )
+        assert target.url == "http://192.168.1.50:1234/v1/models"
+        assert target.headers == {}
+
+    async def test_private_lan_hostname_survives_pinning(self):
+        """A LAN hostname resolving into RFC1918 space stays reachable."""
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("10.0.1.20", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "http://llm.lan/v1/models", "openai_compatible"
+            )
+
+        assert target.url == "http://10.0.1.20/v1/models"
+        # No port in the source URL means no port in the Host header.
+        assert target.headers == {"Host": "llm.lan"}
+
+    async def test_ipv6_loopback_literal_survives_pinning(self):
+        target = await prepare_pinned_http_target(
+            "http://[::1]:11434/api/tags", "ollama"
+        )
+        assert target.url == "http://[::1]:11434/api/tags"
+        assert target.headers == {}
+
+    async def test_tailscale_cgnat_address_survives_pinning(self):
+        """Tailscale hands out 100.64.0.0/10 — shared space, not link-local."""
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("100.101.102.103", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "http://ollama.tail1234.ts.net:11434/api/tags", "ollama"
+            )
+
+        assert target.url == "http://100.101.102.103:11434/api/tags"
+        assert target.headers == {"Host": "ollama.tail1234.ts.net:11434"}
+
+    async def test_ipv6_only_host_pinned_with_brackets(self):
+        """An AAAA-only endpoint must produce a bracketed, parseable URL."""
+        fake_addrs = [
+            (socket.AF_INET6, socket.SOCK_STREAM, 6, "", ("2606:4700::1111", 0, 0, 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "https://v6.example.com/v1/models", "openai_compatible"
+            )
+
+        assert target.url == "https://[2606:4700::1111]/v1/models"
+        assert target.headers == {"Host": "v6.example.com"}
+        assert target.extensions == {"sni_hostname": "v6.example.com"}
+
+    async def test_query_string_and_path_preserved(self):
+        """PPQ-style discovery URLs carry a query string that must survive."""
+        fake_addrs = [
+            (socket.AF_INET, socket.SOCK_STREAM, 6, "", ("93.184.216.34", 0)),
+        ]
+        with patch(
+            "open_notebook.utils.url_validation.socket.getaddrinfo",
+            return_value=fake_addrs,
+        ):
+            target = await prepare_pinned_http_target(
+                "https://api.ppq.ai/v1/models?type=all", "openai_compatible"
+            )
+
+        assert target.url == "https://93.184.216.34/v1/models?type=all"

From 3b7243d216a6bc6f496d8238b6ac42e964a47e1e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 20 Jul 2026 18:09:00 -0300
Subject: [PATCH 244/345] fix(sources): fall back to auto when a selected
 engine's runtime is absent (#1194)

* fix(sources): fall back to auto when a selected engine's runtime is absent

The content-processing engine choice is persisted in the database; the
runtime that serves it (Docling, local Crawl4AI) is installed on demand
from environment flags evaluated at boot. The two therefore drift: a
redeploy that drops OPEN_NOTEBOOK_ENABLE_CRAWL4AI/_DOCLING, a volume
moved to a new deployment, or a failed on-demand install all leave a
stored selection pointing at a runtime that is not there.

The source graph passed that selection straight to content-core, so
every affected extraction failed with "Could not extract any text
content from this source" - no mention of the engine, the runtime, or
the flag that would fix it. For a URL engine set to crawl4ai this breaks
URL ingestion entirely.

The graph now checks runtime availability before honoring the stored
engine and degrades to content-core's "auto" chain, logging a WARNING
that names the engine and the env var that would enable it. Engines with
no opt-in runtime (auto/simple/firecrawl/jina) are passed through
untouched.

The availability probes moved from api/routers/capabilities.py to
open_notebook/utils/runtime_capabilities.py so the graph can use them
without importing from the API layer; the capabilities endpoint keeps
identical behavior and its tests follow the probes to their new home.

Found by the smoke-e2e agent during v1.14.0 release testing, on a dev
environment that was in exactly this state. Pre-existing since v1.13.0
(#1122 made the runtimes opt-in, #432 made the stored selection take
effect), not a v1.14.0 regression.

* docs(changelog): record the unavailable-engine fallback fix
---
 CHANGELOG.md                                |   3 +-
 api/routers/capabilities.py                 |  92 ++-------------
 open_notebook/graphs/source.py              |  30 ++++-
 open_notebook/utils/runtime_capabilities.py | 122 ++++++++++++++++++++
 pyproject.toml                              |   2 +-
 tests/test_capabilities_api.py              |  26 ++---
 tests/test_graphs.py                        | 102 +++++++++++++++-
 tests/test_runtime_capabilities.py          |  78 +++++++++++++
 uv.lock                                     |   2 +-
 9 files changed, 357 insertions(+), 100 deletions(-)
 create mode 100644 open_notebook/utils/runtime_capabilities.py
 create mode 100644 tests/test_runtime_capabilities.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 620861d2..c0472255 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [1.14.0] - 2026-07-20
 
 ### Added
 - **Docling formula & vision enrichment toggles** in Settings → Content Processing. Two new opt-in checkboxes surface content-core 2.x's `docling_formulas` (extract mathematical formulas as structured markup) and `docling_vision` (describe images and extract chart data with a vision model) enrichment flags, mirroring the existing OCR toggle. Both default off; the vision help text warns it is significantly slower and may call a vision model. Like OCR, the toggles only take effect through the Docling engine, so they are gated on Docling availability. The settings persist via `GET`/`PUT /api/settings` and are threaded into content-core extraction alongside `docling_ocr` (migration 23 backfills the new fields); labels and help are translated across all 14 locales (#1131)
@@ -28,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Japanese (ja-JP) translations reviewed and improved throughout: "トランスフォーメーション" replaced with the natural 変換, duration formatting given proper spacing, and accessibility labels, error messages and assorted phrasings rewritten to read naturally rather than as literal translations (#998)
 
 ### Fixed
+- **A content-processing engine whose runtime is not installed no longer breaks ingestion silently.** The engine choice is persisted in the database, but the opt-in runtimes that serve it (Docling, local Crawl4AI) are installed from environment flags evaluated at boot — so a redeploy that drops `OPEN_NOTEBOOK_ENABLE_CRAWL4AI`/`_DOCLING`, a data volume moved to a new deployment, or a failed on-demand install leaves a stored selection pointing at a runtime that is absent. That selection was passed straight to content-core, and every affected extraction failed with "Could not extract any text content from this source" — naming neither the engine, the runtime, nor the flag that would fix it; with the URL engine set to Crawl4AI it broke URL ingestion entirely. The source graph now checks runtime availability first and degrades to content-core's `auto` chain, logging a warning that names the engine and the variable that would enable it; engines needing no opt-in runtime (`auto`/`simple`/`firecrawl`/`jina`) are untouched. The availability probes moved to `open_notebook/utils/runtime_capabilities.py` so the graph can share them with `GET /api/capabilities`, whose behavior is unchanged (#1194)
 - **HTTP proxy no longer breaks worker/API startup.** `websockets` 15.0 began auto-detecting `HTTP_PROXY`/`HTTPS_PROXY` and tunnels even `ws://` connections through the proxy, so with a proxy set the internal SurrealDB websocket (`ws://host.docker.internal:8018/rpc` or `ws://surrealdb:8000/rpc`) was routed through the external proxy, which rejected the internal host with HTTP 403 and killed the worker on startup. Open Notebook now injects `host.docker.internal,surrealdb,localhost,127.0.0.1` into `no_proxy`/`NO_PROXY` at startup (merged with any user value, never clobbering it), and the `.env.example` / docs `NO_PROXY` examples now include the internal DB hosts (#1160)
 - Auto-assign no longer silently re-populates optional model defaults that were deliberately cleared. Previously `POST /models/auto-assign` treated every empty slot as "missing" and filled it, so an optional slot a user intentionally cleared (to fall back to the chat model) got re-assigned on the next run. Auto-assign now fills only the two required slots (chat, embedding); the optional slots (transformation, tools, large context, TTS, STT) are left untouched. `large_context` now also falls back to the chat model when unset (matching transformation/tools) instead of returning nothing, and the Settings UI shows an inline hint on each empty optional slot — "using chat model (…)" for the text slots, "not configured" for TTS/STT (#1098)
 - PPQ model discovery now lists all modalities, not just chat. PPQ's `/v1/models` returns only chat/language models by default; the discovery URL now requests `?type=all` so the embedding, speech-to-text and text-to-speech models this multi-modality gateway advertises actually surface in the provider matrix (`PPQ_MODEL_TYPES` classifies them into the right slots) (#1180)
diff --git a/api/routers/capabilities.py b/api/routers/capabilities.py
index f92cc557..d8f04c02 100644
--- a/api/routers/capabilities.py
+++ b/api/routers/capabilities.py
@@ -8,101 +8,33 @@ startup (see scripts/docker-entrypoint.sh and
 docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md), so this endpoint probes
 what is *actually* importable/reachable rather than trusting the enable flags.
 
+The probes themselves live in open_notebook.utils.runtime_capabilities because
+the source-processing graph needs the same signal (it must not pass content-core
+an engine whose runtime is absent).
+
 Endpoints:
 - GET /capabilities - Availability of Docling and Crawl4AI runtimes
 """
 
-import importlib.util
-import os
-import sys
-
 from fastapi import APIRouter
-from loguru import logger
 
 from api.models import CapabilitiesResponse
+from open_notebook.utils.runtime_capabilities import (
+    crawl4ai_local_ready,
+    crawl4ai_remote_configured,
+    docling_available,
+)
 
 router = APIRouter(prefix="/capabilities", tags=["capabilities"])
 
 
-def _docling_available() -> bool:
-    """True when Docling is installed (its document engine, OCR and image sources work)."""
-    try:
-        # content-core's own routing gate — the authoritative signal, not just a spec check.
-        from content_core.extraction import DOCLING_AVAILABLE
-
-        return bool(DOCLING_AVAILABLE)
-    except (ImportError, AttributeError):
-        # Content-core absent or its API moved — fall back to a plain spec check.
-        return importlib.util.find_spec("docling") is not None
-    except Exception:
-        # An unexpected failure shouldn't be silently masked as "unavailable".
-        logger.opt(exception=True).warning(
-            "Unexpected error probing Docling availability; reporting unavailable"
-        )
-        return False
-
-
-def _crawl4ai_remote_configured() -> bool:
-    """True when a remote Crawl4AI server is configured (CRAWL4AI_API_URL)."""
-    try:
-        from content_core.config import get_crawl4ai_api_url
-
-        return bool(get_crawl4ai_api_url())
-    except (ImportError, AttributeError):
-        return bool(os.environ.get("CRAWL4AI_API_URL"))
-    except Exception:
-        logger.opt(exception=True).warning(
-            "Unexpected error probing Crawl4AI remote config; falling back to env var"
-        )
-        return bool(os.environ.get("CRAWL4AI_API_URL"))
-
-
-def _default_playwright_cache() -> str | None:
-    """Playwright's default browser download directory when PLAYWRIGHT_BROWSERS_PATH is unset."""
-    if sys.platform == "darwin":
-        return os.path.expanduser("~/Library/Caches/ms-playwright")
-    if sys.platform == "win32":
-        local = os.environ.get("LOCALAPPDATA")
-        return os.path.join(local, "ms-playwright") if local else None
-    return os.path.expanduser("~/.cache/ms-playwright")  # linux and others
-
-
-def _chromium_browser_present() -> bool:
-    """True when a Playwright Chromium browser is installed on disk.
-
-    Local Crawl4AI needs both the package AND a Chromium browser. The startup
-    installer downloads them in separate steps and degrades gracefully, so the
-    package can be present while the browser download failed — checking the
-    browser here keeps this endpoint an honest "usable capability" signal.
-
-    Playwright installs browsers into PLAYWRIGHT_BROWSERS_PATH (Docker) or, when
-    that's unset, its per-user default cache (dev). Resolving the path does not
-    download anything, so we must confirm a chromium build actually exists in
-    whichever directory applies before reporting local Crawl4AI available.
-    """
-    base = os.environ.get("PLAYWRIGHT_BROWSERS_PATH") or _default_playwright_cache()
-    if not base or not os.path.isdir(base):
-        return False
-    try:
-        return any("chromium" in name for name in os.listdir(base))
-    except OSError:
-        return False
-
-
-def _crawl4ai_local_ready() -> bool:
-    """True when local Crawl4AI can actually render: package installed + Chromium present."""
-    if importlib.util.find_spec("crawl4ai") is None:
-        return False
-    return _chromium_browser_present()
-
-
 @router.get("", response_model=CapabilitiesResponse)
 async def get_capabilities():
     """Report which opt-in extraction runtimes are available in this container."""
-    crawl4ai_remote = _crawl4ai_remote_configured()
-    crawl4ai_local = _crawl4ai_local_ready()
+    crawl4ai_remote = crawl4ai_remote_configured()
+    crawl4ai_local = crawl4ai_local_ready()
     return CapabilitiesResponse(
-        docling_available=_docling_available(),
+        docling_available=docling_available(),
         crawl4ai_available=crawl4ai_local or crawl4ai_remote,
         crawl4ai_remote_configured=crawl4ai_remote,
     )
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index 4d800f87..6d4d57a0 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -15,6 +15,7 @@ from open_notebook.domain.content_settings import ContentSettings
 from open_notebook.domain.notebook import Asset, Source
 from open_notebook.domain.transformation import Transformation
 from open_notebook.graphs.transformation import graph as transform_graph
+from open_notebook.utils.runtime_capabilities import engine_runtime_missing
 
 # Preferred languages for YouTube transcript selection. content-core's own
 # default is only ["en", "es", "pt"]; we keep the broader list Open Notebook has
@@ -50,6 +51,27 @@ class TransformationState(TypedDict):
     transformation: Transformation
 
 
+def _usable_engine(engine: str, kind: str) -> str:
+    """Return ``engine``, or "auto" when its opt-in runtime is not installed.
+
+    The engine choice is persisted in the database; runtime availability comes
+    from environment flags that are re-evaluated on every boot. A redeploy that
+    drops OPEN_NOTEBOOK_ENABLE_CRAWL4AI/_DOCLING (or a failed on-demand install)
+    therefore leaves a stored selection pointing at an absent runtime, and
+    passing it through fails every extraction with no usable diagnostic. Falling
+    back to content-core's "auto" chain keeps ingestion working, loudly.
+    """
+    missing_env_var = engine_runtime_missing(engine)
+    if missing_env_var is None:
+        return engine
+    logger.warning(
+        f"Configured {kind} engine '{engine}' is selected in Content Settings but "
+        f"its runtime is not available in this container; falling back to 'auto'. "
+        f"Set {missing_env_var}=true to enable it (see ADR-007)."
+    )
+    return "auto"
+
+
 async def content_process(state: SourceState) -> dict:
     content_state: Dict[str, Any] = state["content_state"]
 
@@ -66,10 +88,12 @@ async def content_process(state: SourceState) -> dict:
     try:
         settings: ContentSettings = await ContentSettings.get_instance()  # type: ignore[assignment]
         if settings.default_content_processing_engine_url:
-            config_kwargs["url_engine"] = settings.default_content_processing_engine_url
+            config_kwargs["url_engine"] = _usable_engine(
+                settings.default_content_processing_engine_url, "url"
+            )
         if settings.default_content_processing_engine_doc:
-            config_kwargs["document_engine"] = (
-                settings.default_content_processing_engine_doc
+            config_kwargs["document_engine"] = _usable_engine(
+                settings.default_content_processing_engine_doc, "document"
             )
         if settings.docling_ocr is not None:
             config_kwargs["docling_ocr"] = settings.docling_ocr
diff --git a/open_notebook/utils/runtime_capabilities.py b/open_notebook/utils/runtime_capabilities.py
new file mode 100644
index 00000000..e59f06e9
--- /dev/null
+++ b/open_notebook/utils/runtime_capabilities.py
@@ -0,0 +1,122 @@
+"""
+Runtime availability probes for the opt-in heavy extraction engines.
+
+Docling and local Crawl4AI are installed on demand at container startup (see
+scripts/docker-entrypoint.sh and
+docs/7-DEVELOPMENT/decisions/ADR-007-optin-runtimes.md), so availability is a
+*runtime* property: it cannot be read off the enable flags, and it does not
+survive a redeploy that drops them.
+
+This lives in open_notebook.utils (not api/) because both layers need it: the
+capabilities router reports it to the frontend, and the source-processing graph
+must not hand content-core an engine whose runtime is absent — the engine
+choice is persisted in the database and therefore outlives the environment that
+made it available.
+"""
+
+import importlib.util
+import os
+import sys
+
+from loguru import logger
+
+
+def docling_available() -> bool:
+    """True when Docling is installed (its document engine, OCR and image sources work)."""
+    try:
+        # content-core's own routing gate — the authoritative signal, not just a spec check.
+        from content_core.extraction import DOCLING_AVAILABLE
+
+        return bool(DOCLING_AVAILABLE)
+    except (ImportError, AttributeError):
+        # Content-core absent or its API moved — fall back to a plain spec check.
+        return importlib.util.find_spec("docling") is not None
+    except Exception:
+        # An unexpected failure shouldn't be silently masked as "unavailable".
+        logger.opt(exception=True).warning(
+            "Unexpected error probing Docling availability; reporting unavailable"
+        )
+        return False
+
+
+def crawl4ai_remote_configured() -> bool:
+    """True when a remote Crawl4AI server is configured (CRAWL4AI_API_URL)."""
+    try:
+        from content_core.config import get_crawl4ai_api_url
+
+        return bool(get_crawl4ai_api_url())
+    except (ImportError, AttributeError):
+        return bool(os.environ.get("CRAWL4AI_API_URL"))
+    except Exception:
+        logger.opt(exception=True).warning(
+            "Unexpected error probing Crawl4AI remote config; falling back to env var"
+        )
+        return bool(os.environ.get("CRAWL4AI_API_URL"))
+
+
+def _default_playwright_cache() -> str | None:
+    """Playwright's default browser download directory when PLAYWRIGHT_BROWSERS_PATH is unset."""
+    if sys.platform == "darwin":
+        return os.path.expanduser("~/Library/Caches/ms-playwright")
+    if sys.platform == "win32":
+        local = os.environ.get("LOCALAPPDATA")
+        return os.path.join(local, "ms-playwright") if local else None
+    return os.path.expanduser("~/.cache/ms-playwright")  # linux and others
+
+
+def _chromium_browser_present() -> bool:
+    """True when a Playwright Chromium browser is installed on disk.
+
+    Local Crawl4AI needs both the package AND a Chromium browser. The startup
+    installer downloads them in separate steps and degrades gracefully, so the
+    package can be present while the browser download failed — checking the
+    browser here keeps this an honest "usable capability" signal.
+
+    Playwright installs browsers into PLAYWRIGHT_BROWSERS_PATH (Docker) or, when
+    that's unset, its per-user default cache (dev). Resolving the path does not
+    download anything, so we must confirm a chromium build actually exists in
+    whichever directory applies before reporting local Crawl4AI available.
+    """
+    base = os.environ.get("PLAYWRIGHT_BROWSERS_PATH") or _default_playwright_cache()
+    if not base or not os.path.isdir(base):
+        return False
+    try:
+        return any("chromium" in name for name in os.listdir(base))
+    except OSError:
+        return False
+
+
+def crawl4ai_local_ready() -> bool:
+    """True when local Crawl4AI can actually render: package installed + Chromium present."""
+    if importlib.util.find_spec("crawl4ai") is None:
+        return False
+    return _chromium_browser_present()
+
+
+def crawl4ai_available() -> bool:
+    """True when Crawl4AI can run at all — locally installed or offloaded to a server."""
+    return crawl4ai_local_ready() or crawl4ai_remote_configured()
+
+
+# Engine name -> (availability probe, env var that enables it). Engines absent
+# from this map need no runtime and are always usable.
+_ENGINE_RUNTIMES: dict[str, tuple[str, str]] = {
+    "crawl4ai": ("crawl4ai_available", "OPEN_NOTEBOOK_ENABLE_CRAWL4AI"),
+    "docling": ("docling_available", "OPEN_NOTEBOOK_ENABLE_DOCLING"),
+}
+
+
+def engine_runtime_missing(engine: str | None) -> str | None:
+    """Return the env var that would enable ``engine``, or None if it is usable.
+
+    Used to avoid passing content-core an engine whose runtime is absent, which
+    fails extraction outright with no indication of the real cause.
+    """
+    if not engine:
+        return None
+    entry = _ENGINE_RUNTIMES.get(engine.strip().lower())
+    if entry is None:
+        return None  # Engine needs no opt-in runtime (auto/simple/firecrawl/jina).
+    probe_name, env_var = entry
+    probe = globals()[probe_name]
+    return None if probe() else env_var
diff --git a/pyproject.toml b/pyproject.toml
index f383f02d..e9643daa 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.13.0"
+version = "1.14.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/tests/test_capabilities_api.py b/tests/test_capabilities_api.py
index ad51b9d7..38900e58 100644
--- a/tests/test_capabilities_api.py
+++ b/tests/test_capabilities_api.py
@@ -20,15 +20,15 @@ def client():
 
 def _patch_probes(monkeypatch, *, docling, crawl4ai_local, crawl4ai_remote):
     monkeypatch.setattr(
-        "api.routers.capabilities._docling_available", lambda: docling
+        "api.routers.capabilities.docling_available", lambda: docling
     )
     monkeypatch.setattr(
-        "api.routers.capabilities._crawl4ai_remote_configured",
+        "api.routers.capabilities.crawl4ai_remote_configured",
         lambda: crawl4ai_remote,
     )
     # Local readiness means package installed AND a Chromium browser present.
     monkeypatch.setattr(
-        "api.routers.capabilities._crawl4ai_local_ready", lambda: crawl4ai_local
+        "api.routers.capabilities.crawl4ai_local_ready", lambda: crawl4ai_local
     )
 
 
@@ -76,48 +76,48 @@ class TestCrawl4aiLocalReadiness:
     """Local Crawl4AI needs the package AND a Chromium browser on disk."""
 
     def test_not_ready_when_package_missing(self, monkeypatch):
-        import api.routers.capabilities as cap
+        import open_notebook.utils.runtime_capabilities as cap
 
         monkeypatch.setattr(
             cap.importlib.util, "find_spec", lambda name, *a, **k: None
         )
-        assert cap._crawl4ai_local_ready() is False
+        assert cap.crawl4ai_local_ready() is False
 
     def test_not_ready_when_browser_missing(self, monkeypatch, tmp_path):
-        import api.routers.capabilities as cap
+        import open_notebook.utils.runtime_capabilities as cap
 
         monkeypatch.setattr(
             cap.importlib.util, "find_spec", lambda name, *a, **k: object()
         )
         # PLAYWRIGHT_BROWSERS_PATH set to an empty dir → no chromium installed.
         monkeypatch.setenv("PLAYWRIGHT_BROWSERS_PATH", str(tmp_path))
-        assert cap._crawl4ai_local_ready() is False
+        assert cap.crawl4ai_local_ready() is False
 
     def test_ready_when_browser_present(self, monkeypatch, tmp_path):
-        import api.routers.capabilities as cap
+        import open_notebook.utils.runtime_capabilities as cap
 
         monkeypatch.setattr(
             cap.importlib.util, "find_spec", lambda name, *a, **k: object()
         )
         (tmp_path / "chromium-1140").mkdir()
         monkeypatch.setenv("PLAYWRIGHT_BROWSERS_PATH", str(tmp_path))
-        assert cap._crawl4ai_local_ready() is True
+        assert cap.crawl4ai_local_ready() is True
 
     def test_dev_default_cache_without_browser_is_not_ready(
         self, monkeypatch, tmp_path
     ):
         """No PLAYWRIGHT_BROWSERS_PATH: fall back to the default cache, fail closed if empty."""
-        import api.routers.capabilities as cap
+        import open_notebook.utils.runtime_capabilities as cap
 
         monkeypatch.setattr(
             cap.importlib.util, "find_spec", lambda name, *a, **k: object()
         )
         monkeypatch.delenv("PLAYWRIGHT_BROWSERS_PATH", raising=False)
         monkeypatch.setattr(cap, "_default_playwright_cache", lambda: str(tmp_path))
-        assert cap._crawl4ai_local_ready() is False
+        assert cap.crawl4ai_local_ready() is False
 
     def test_dev_default_cache_with_browser_is_ready(self, monkeypatch, tmp_path):
-        import api.routers.capabilities as cap
+        import open_notebook.utils.runtime_capabilities as cap
 
         monkeypatch.setattr(
             cap.importlib.util, "find_spec", lambda name, *a, **k: object()
@@ -125,4 +125,4 @@ class TestCrawl4aiLocalReadiness:
         monkeypatch.delenv("PLAYWRIGHT_BROWSERS_PATH", raising=False)
         (tmp_path / "chromium-1140").mkdir()
         monkeypatch.setattr(cap, "_default_playwright_cache", lambda: str(tmp_path))
-        assert cap._crawl4ai_local_ready() is True
+        assert cap.crawl4ai_local_ready() is True
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index e604efb6..f894a5b0 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -383,10 +383,12 @@ class TestContentProcessDeleteSource:
 
     @pytest.mark.asyncio
     @patch("open_notebook.graphs.source.ContentSettings")
+    # Runtime present: nothing to fall back from.
+    @patch("open_notebook.graphs.source.engine_runtime_missing", return_value=None)
     @patch("open_notebook.graphs.source.extract_content")
     @patch("open_notebook.graphs.source.ModelManager")
     async def test_persisted_engines_wired_into_config(
-        self, mock_model_manager, mock_extract, mock_settings
+        self, mock_model_manager, mock_extract, _mock_runtime, mock_settings
     ):
         """The persisted content-processing engines reach ContentCoreConfig, so
         a user-selected engine (e.g. crawl4ai) actually takes effect."""
@@ -426,6 +428,104 @@ class TestContentProcessDeleteSource:
         assert config.docling_formulas is True
         assert config.docling_vision is True
 
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.ContentSettings")
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_unavailable_engine_falls_back_to_auto(
+        self, mock_model_manager, mock_extract, mock_settings
+    ):
+        """A stored engine whose runtime is absent must not reach content-core.
+
+        The selection is persisted in the database while runtime availability
+        comes from environment flags, so a redeploy that drops
+        OPEN_NOTEBOOK_ENABLE_CRAWL4AI leaves the setting pointing at a runtime
+        that is not installed. Passing it through failed every URL ingestion
+        with "Could not extract any text content from this source" and no clue
+        as to why; the extraction must degrade to content-core's "auto" chain
+        instead.
+        """
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_settings.get_instance = AsyncMock(
+            return_value=MagicMock(
+                default_content_processing_engine_url="crawl4ai",
+                default_content_processing_engine_doc="docling",
+                docling_ocr=True,
+                docling_formulas=False,
+                docling_vision=False,
+            )
+        )
+        mock_extract.return_value = ExtractionOutput(title="T", content="body")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"url": "https://example.com"},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        with patch(
+            "open_notebook.graphs.source.engine_runtime_missing",
+            side_effect=lambda engine: {
+                "crawl4ai": "OPEN_NOTEBOOK_ENABLE_CRAWL4AI",
+                "docling": "OPEN_NOTEBOOK_ENABLE_DOCLING",
+            }.get(engine),
+        ):
+            await content_process(cast(SourceState, state))
+
+        config = mock_extract.await_args.kwargs["config"]
+        assert config.url_engine == "auto"
+        assert config.document_engine == "auto"
+
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.ContentSettings")
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_runtime_free_engines_never_fall_back(
+        self, mock_model_manager, mock_extract, mock_settings
+    ):
+        """Engines needing no opt-in runtime are passed through untouched."""
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_settings.get_instance = AsyncMock(
+            return_value=MagicMock(
+                default_content_processing_engine_url="firecrawl",
+                default_content_processing_engine_doc="simple",
+                docling_ocr=True,
+                docling_formulas=False,
+                docling_vision=False,
+            )
+        )
+        mock_extract.return_value = ExtractionOutput(title="T", content="body")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"url": "https://example.com"},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        await content_process(cast(SourceState, state))
+
+        config = mock_extract.await_args.kwargs["config"]
+        assert config.url_engine == "firecrawl"
+        assert config.document_engine == "simple"
+
 
 # ============================================================================
 # TEST SUITE 6: Per-transformation model_id forwarding (#1137)
diff --git a/tests/test_runtime_capabilities.py b/tests/test_runtime_capabilities.py
new file mode 100644
index 00000000..5645c5e6
--- /dev/null
+++ b/tests/test_runtime_capabilities.py
@@ -0,0 +1,78 @@
+"""Tests for the opt-in runtime availability probes.
+
+The engine choice lives in the database; the runtime that serves it comes from
+environment flags evaluated at boot. engine_runtime_missing() is what keeps the
+two from drifting into a state where extraction is routed to a runtime that
+isn't installed.
+"""
+
+from unittest.mock import patch
+
+from open_notebook.utils.runtime_capabilities import engine_runtime_missing
+
+
+class TestEngineRuntimeMissing:
+    def test_runtime_free_engines_need_nothing(self):
+        """auto/simple/firecrawl/jina carry no opt-in runtime."""
+        for engine in ("auto", "simple", "firecrawl", "jina"):
+            assert engine_runtime_missing(engine) is None
+
+    def test_none_and_empty_are_not_missing(self):
+        assert engine_runtime_missing(None) is None
+        assert engine_runtime_missing("") is None
+
+    def test_unknown_engine_is_passed_through(self):
+        """An engine we don't know about is content-core's problem, not ours."""
+        assert engine_runtime_missing("some-future-engine") is None
+
+    def test_crawl4ai_reports_its_env_var_when_absent(self):
+        with patch(
+            "open_notebook.utils.runtime_capabilities.crawl4ai_available",
+            return_value=False,
+        ):
+            assert (
+                engine_runtime_missing("crawl4ai") == "OPEN_NOTEBOOK_ENABLE_CRAWL4AI"
+            )
+
+    def test_crawl4ai_is_usable_when_available(self):
+        with patch(
+            "open_notebook.utils.runtime_capabilities.crawl4ai_available",
+            return_value=True,
+        ):
+            assert engine_runtime_missing("crawl4ai") is None
+
+    def test_docling_reports_its_env_var_when_absent(self):
+        with patch(
+            "open_notebook.utils.runtime_capabilities.docling_available",
+            return_value=False,
+        ):
+            assert engine_runtime_missing("docling") == "OPEN_NOTEBOOK_ENABLE_DOCLING"
+
+    def test_docling_is_usable_when_available(self):
+        with patch(
+            "open_notebook.utils.runtime_capabilities.docling_available",
+            return_value=True,
+        ):
+            assert engine_runtime_missing("docling") is None
+
+    def test_engine_name_is_normalized(self):
+        """Stored values shouldn't have to be exactly lowercased to be gated."""
+        with patch(
+            "open_notebook.utils.runtime_capabilities.crawl4ai_available",
+            return_value=False,
+        ):
+            assert (
+                engine_runtime_missing("  Crawl4AI  ")
+                == "OPEN_NOTEBOOK_ENABLE_CRAWL4AI"
+            )
+
+    def test_remote_crawl4ai_counts_as_available(self):
+        """CRAWL4AI_API_URL offloads rendering — no local install needed."""
+        with patch(
+            "open_notebook.utils.runtime_capabilities.crawl4ai_local_ready",
+            return_value=False,
+        ), patch(
+            "open_notebook.utils.runtime_capabilities.crawl4ai_remote_configured",
+            return_value=True,
+        ):
+            assert engine_runtime_missing("crawl4ai") is None
diff --git a/uv.lock b/uv.lock
index 6bb2cc56..2bb37ef5 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2052,7 +2052,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.13.0"
+version = "1.14.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From 30c7e2a63e43b7f270fc2c638f0b6246934a53f4 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Mon, 20 Jul 2026 22:10:50 -0300
Subject: [PATCH 245/345] fix(podcasts): clarify episode max_tokens field and
 fix empty-state error (#1197)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The episode profile "Max output tokens" field (#991) confused users:
nothing explained what it controls, and whether it was a
per-conversation, per-turn, or per-call limit. An empty field also
showed "Must be a positive integer" — a scary error on an optional
field — because a transient/empty number-input state produced NaN,
which slipped past the nullable() guard into the positive() rule.

- Add help text (all 14 locales) stating it caps output tokens per
  generation step — the outline and the full transcript, not a per-turn
  or conversation limit — and that blank uses the built-in defaults
  (3000 outline / 5000 transcript, from podcast-creator).
- Add a placeholder ("Leave blank for defaults") so the empty field
  reads as intentionally optional rather than unfilled.
- Map empty and NaN inputs to null in setValueAs, so an empty or
  half-typed value reads as "unset" and never trips the positive-integer
  rule. Genuinely invalid entries (0, negatives, decimals) still error.

Field stays an optional override — no behavior change to generation.
Verified in the browser: help renders, placeholder shows, empty field
has no error, zero console errors. Frontend lint/test/build green.
---
 CHANGELOG.md                                        |  2 +-
 .../podcasts/forms/EpisodeProfileFormDialog.tsx     | 13 ++++++++++++-
 frontend/src/lib/locales/bn-IN/index.ts             |  2 ++
 frontend/src/lib/locales/ca-ES/index.ts             |  2 ++
 frontend/src/lib/locales/de-DE/index.ts             |  2 ++
 frontend/src/lib/locales/en-US/index.ts             |  2 ++
 frontend/src/lib/locales/es-ES/index.ts             |  2 ++
 frontend/src/lib/locales/fr-FR/index.ts             |  2 ++
 frontend/src/lib/locales/it-IT/index.ts             |  2 ++
 frontend/src/lib/locales/ja-JP/index.ts             |  2 ++
 frontend/src/lib/locales/pl-PL/index.ts             |  2 ++
 frontend/src/lib/locales/pt-BR/index.ts             |  2 ++
 frontend/src/lib/locales/ru-RU/index.ts             |  2 ++
 frontend/src/lib/locales/tr-TR/index.ts             |  2 ++
 frontend/src/lib/locales/zh-CN/index.ts             |  2 ++
 frontend/src/lib/locales/zh-TW/index.ts             |  2 ++
 16 files changed, 41 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0472255..a8e21761 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,7 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **First-class oMLX provider** in Settings → API Keys: native Esperanto `omlx` profile identity (language + embedding), default base URL `http://localhost:11435/v1` (avoids SurrealDB on 8000), optional API key, connection test and `/v1/models` discovery. No remapping to `openai-compatible` and no `OPENAI_COMPATIBLE_*` env mirroring. Docs under `docs/5-CONFIGURATION/omlx.md` (#1048; upstream lfnovo/esperanto#228)
 - **Four new AI providers** (surfaced by esperanto 2.25.1) are now in the provider matrix. **Cohere** (`COHERE_API_KEY`) adds language and embedding models via Cohere's native v2 API (`command-*` chat, `embed-*`); model discovery is bespoke (esperanto's `AIFactory.get_provider_models`) since Cohere is not OpenAI-compatible, and Cohere reranking is intentionally left out of scope (tracked at #1087). **PayPerQ / PPQ** (`PPQ_API_KEY`, `https://api.ppq.ai/v1`) is a multi-modality OpenAI-compatible gateway offering language, embedding, speech-to-text and text-to-speech. **Novita** (`NOVITA_API_KEY`, `https://api.novita.ai/openai`) is an OpenAI-compatible LLM gateway. PPQ and Novita auto-discover their models through the standard `/models` endpoint. In addition, the existing **Deepgram** provider now also supports **speech-to-text** (Nova/Whisper transcription models, e.g. `nova-3`) alongside its Aura text-to-speech voices. All four are configured from Settings → Models exactly like the existing providers (#1170)
 - **Worker concurrency is now configurable** via `OPEN_NOTEBOOK_WORKER_MAX_TASKS`. The surreal-commands worker always ran with a hardcoded concurrency of 5, which overloads single-GPU and local-LLM setups and trips provider rate limits when several sources are processed at once. The variable is wired into every launch point — `make worker-start`/`make start-all`, `dev-init.sh`, and the Docker `supervisord.conf` (wrapped in `sh -c` so the shell actually expands it, since `command=` does not run through a shell) — and defaults to 5; set it to 1 for strictly sequential processing. It is read at worker launch time, so changing it requires restarting the worker. This also removes a phantom entry from the docs: `SURREAL_COMMANDS_MAX_TASKS` was documented but read nowhere (the worker's `--max-tasks` Typer option has no envvar binding) and has been replaced with the real variable in `.env.example` and the environment reference (#893)
-- Episode profiles now expose an optional **"Max output tokens"** field in the UI. The `max_tokens` value already existed on the podcast episode profile model but could only be set through the API; the profile form now offers it as a number input (positive integer, clearable to unset), mirroring how `num_segments` is handled — zod validation, form defaults/reset and submit payload — and the episode card shows the configured value in its details. Translated across all 14 locales (#991)
+- Episode profiles now expose an optional **"Max output tokens"** field in the UI. The `max_tokens` value already existed on the podcast episode profile model but could only be set through the API; the profile form now offers it as a number input (positive integer, clearable to unset), mirroring how `num_segments` is handled — zod validation, form defaults/reset and submit payload — and the episode card shows the configured value in its details. The field carries help text explaining that it caps output tokens per generation step (the outline and the full transcript — not a per-turn or conversation limit) and that leaving it blank uses the built-in defaults (3000 for the outline, 5000 for the transcript), plus a placeholder to the same effect; clearing it no longer trips a spurious "must be a positive integer" error (an empty or transient number-input state now reads as unset). Label, help and placeholder translated across all 14 locales (#991)
 - Local commits are now gated by the same checks as CI: a new `.pre-commit-config.yaml` runs ruff lint (with `--fix`), ruff format, mypy (through `uv run` so it matches CI exactly) and basic hygiene hooks (large files, merge conflict markers, YAML/TOML syntax, trailing whitespace, EOF newlines), with install/run/skip instructions in the development-setup docs (#940)
 - The i18n locale parity test now also compares **interpolation placeholders**, not just keys. It previously only checked that every locale defined the same key set, so a value carrying a stray single-brace `{count}` instead of i18next's `{{count}}` — or a placeholder that does not exist in the en-US reference — passed silently and rendered as literal text at runtime. Every leaf string is now checked against en-US for both missing/extra `{{...}}` placeholders and stray single-brace tokens; this caught and fixed `podcasts.generationStartedDesc` in zh-CN and zh-TW, which referenced a `{{name}}` placeholder the reference string does not have (#1159)
 - The dev Docker build (`build-regular`) is gated on image-affecting paths, so docs- and config-only PRs no longer wait several minutes for a byte-identical image. A `paths-filter` job decides whether the build steps run; the job itself always executes so the required status check always reports — deliberately avoiding the workflow-level paths filter that would leave the required check permanently pending and deadlock merges. PRs touching the Dockerfile, dependencies, app or frontend build as before, and the release build is untouched (#1134)
diff --git a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
index 14703f2c..ae88541b 100644
--- a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
@@ -203,11 +203,22 @@ export function EpisodeProfileFormDialog({
                 type="number"
                 min={1}
                 step={1}
+                placeholder={t('podcasts.maxTokensPlaceholder')}
                 {...register('max_tokens', {
-                  setValueAs: (value) => (value === '' ? null : Number(value)),
+                  // Empty and transient/invalid number-input states (which yield
+                  // NaN) both mean "unset" for this optional override; map them to
+                  // null so an empty field never trips the positive-integer rule.
+                  setValueAs: (value) => {
+                    if (value === '' || value === null || value === undefined) {
+                      return null
+                    }
+                    const parsed = Number(value)
+                    return Number.isNaN(parsed) ? null : parsed
+                  },
                 })}
                 autoComplete="off"
               />
+              <p className="text-xs text-muted-foreground">{t('podcasts.maxTokensHelp')}</p>
               {errors.max_tokens ? (
                 <p className="text-xs text-red-600">{errors.max_tokens.message}</p>
               ) : null}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 92b1cb71..83ece575 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -667,6 +667,8 @@ export const bnIN = {
     transcriptModel: "ট্রান্সক্রিপ্ট মডেল",
     segments: "সেগমেন্ট",
     maxTokens: "সর্বাধিক আউটপুট টোকেন",
+    maxTokensPlaceholder: "ডিফল্টের জন্য ফাঁকা রাখুন",
+    maxTokensHelp: "ঐচ্ছিক। প্রতিটি জেনারেশন ধাপ — আউটলাইন এবং সম্পূর্ণ ট্রান্সক্রিপ্ট — কত টোকেন তৈরি করতে পারে তার সীমা নির্ধারণ করে; এটি প্রতি-সংলাপ বা প্রতি-কথোপকথন সীমা নয়। বিল্ট-ইন ডিফল্ট ব্যবহার করতে ফাঁকা রাখুন (আউটলাইনের জন্য 3000, ট্রান্সক্রিপ্টের জন্য 5000)। দীর্ঘ পর্বের জন্য এটি বাড়ান; খুব কম মান ট্রান্সক্রিপ্টকে অসম্পূর্ণ রেখে দিতে পারে।",
     defaultBriefingTitle: "ডিফল্ট ব্রিফিং",
     created: "{{time}} এ তৈরি",
     details: "বিবরণ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index e756c0a9..4bb5f801 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -667,6 +667,8 @@ export const caES = {
     transcriptModel: "Model de transcripció",
     segments: "Segments",
     maxTokens: "Tokens màxims de sortida",
+    maxTokensPlaceholder: "Deixa-ho en blanc per als valors per defecte",
+    maxTokensHelp: "Opcional. Limita quants tokens pot generar cada pas de generació — l'esquema i la transcripció completa —, no és un límit per torn ni per conversa. Deixa-ho en blanc per fer servir els valors per defecte integrats (3000 per a l'esquema, 5000 per a la transcripció). Augmenta'l per a episodis més llargs; un valor massa baix pot deixar la transcripció incompleta.",
     defaultBriefingTitle: "Presentació per defecte",
     created: "Creat el {{time}}",
     details: "Detalls",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 67881309..96295006 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -670,6 +670,8 @@ export const deDE = {
     transcriptModel: "Transkriptmodell",
     segments: "Segmente",
     maxTokens: "Maximale Ausgabe-Tokens",
+    maxTokensPlaceholder: "Für Standardwerte leer lassen",
+    maxTokensHelp: "Optional. Begrenzt, wie viele Tokens jeder Generierungsschritt erzeugen kann — die Gliederung und das vollständige Transkript —, kein Limit pro Gesprächsrunde oder Unterhaltung. Leer lassen, um die eingebauten Standardwerte zu verwenden (3000 für die Gliederung, 5000 für das Transkript). Für längere Episoden erhöhen; ein zu niedriger Wert kann das Transkript abschneiden.",
     defaultBriefingTitle: "Standard-Briefing",
     created: "Erstellt am {{time}}",
     details: "Details",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 65af1720..55234b77 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -665,6 +665,8 @@ export const enUS = {
     transcriptModel: "Transcript model",
     segments: "Segments",
     maxTokens: "Max output tokens",
+    maxTokensPlaceholder: "Leave blank for defaults",
+    maxTokensHelp: "Optional. Caps how many tokens each generation step can produce — the outline and the full transcript — not a per-turn or conversation limit. Leave blank to use the built-in defaults (3000 for the outline, 5000 for the transcript). Raise it for longer episodes; a value that is too low can cut the transcript short.",
     defaultBriefingTitle: "Default briefing",
     created: "Created at {{time}}",
     details: "Details",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 666acb14..244466ed 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -667,6 +667,8 @@ export const esES = {
     transcriptModel: "Modelo de transcripción",
     segments: "Segmentos",
     maxTokens: "Tokens máximos de salida",
+    maxTokensPlaceholder: "Déjalo en blanco para usar los valores predeterminados",
+    maxTokensHelp: "Opcional. Limita cuántos tokens puede generar cada paso de generación — el esquema y la transcripción completa —, no es un límite por turno ni por conversación. Déjalo en blanco para usar los valores predeterminados integrados (3000 para el esquema, 5000 para la transcripción). Auméntalo para episodios más largos; un valor demasiado bajo puede cortar la transcripción.",
     defaultBriefingTitle: "Briefing predeterminado",
     created: "Creado el {{time}}",
     details: "Detalles",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 1a91a70b..30b4ee5a 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -667,6 +667,8 @@ export const frFR = {
     transcriptModel: "Modèle de transcription",
     segments: "Segments",
     maxTokens: "Jetons de sortie maximum",
+    maxTokensPlaceholder: "Laisser vide pour les valeurs par défaut",
+    maxTokensHelp: "Facultatif. Limite le nombre de jetons que chaque étape de génération peut produire — le plan et la transcription complète —, ce n'est pas une limite par tour de parole ni par conversation. Laisser vide pour utiliser les valeurs par défaut intégrées (3000 pour le plan, 5000 pour la transcription). Augmentez-la pour des épisodes plus longs ; une valeur trop basse peut tronquer la transcription.",
     defaultBriefingTitle: "Briefing par défaut",
     created: "Créé à {{time}}",
     details: "Détails",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 9c47e6d1..7f711bdd 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -667,6 +667,8 @@ export const itIT = {
     transcriptModel: "Modello trascrizione",
     segments: "Segmenti",
     maxTokens: "Token massimi di output",
+    maxTokensPlaceholder: "Lascia vuoto per i valori predefiniti",
+    maxTokensHelp: "Facoltativo. Limita quanti token può produrre ogni fase di generazione — la scaletta e la trascrizione completa —, non è un limite per singolo turno o per conversazione. Lascia vuoto per usare i valori predefiniti integrati (3000 per la scaletta, 5000 per la trascrizione). Aumentalo per episodi più lunghi; un valore troppo basso può troncare la trascrizione.",
     defaultBriefingTitle: "Briefing predefinito",
     created: "Creato il {{time}}",
     details: "Dettagli",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 208ae97a..c37f0eac 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -667,6 +667,8 @@ export const jaJP = {
     transcriptModel: "トランスクリプトモデル",
     segments: "セグメント",
     maxTokens: "最大出力トークン数",
+    maxTokensPlaceholder: "デフォルト値を使う場合は空欄のまま",
+    maxTokensHelp: "任意。各生成ステップ（アウトラインと台本全文）が生成できるトークン数の上限を設定します。発言ごとや会話全体の制限ではありません。空欄にすると組み込みのデフォルト値（アウトラインは3000、台本は5000）が使われます。長いエピソードには値を上げてください。低すぎると台本が途中で切れることがあります。",
     defaultBriefingTitle: "デフォルトブリーフィング",
     created: "{{time}}に作成",
     details: "詳細",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index a93517c1..cd02200d 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -667,6 +667,8 @@ export const plPL = {
     transcriptModel: "Model transkrypcji",
     segments: "Segmenty",
     maxTokens: "Maksymalna liczba tokenów wyjściowych",
+    maxTokensPlaceholder: "Pozostaw puste, aby użyć wartości domyślnych",
+    maxTokensHelp: "Opcjonalne. Ogranicza liczbę tokenów, które może wygenerować każdy krok generowania — konspekt i pełny transkrypt —, a nie jest to limit na pojedynczą wypowiedź ani na całą rozmowę. Pozostaw puste, aby użyć wbudowanych wartości domyślnych (3000 dla konspektu, 5000 dla transkryptu). Zwiększ dla dłuższych odcinków; zbyt niska wartość może uciąć transkrypt.",
     defaultBriefingTitle: "Domyślny briefing",
     created: "Utworzono {{time}}",
     details: "Szczegóły",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ec227845..ecefdb78 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -667,6 +667,8 @@ export const ptBR = {
     transcriptModel: "Modelo de transcrição",
     segments: "Segmentos",
     maxTokens: "Máximo de tokens de saída",
+    maxTokensPlaceholder: "Deixe em branco para usar os padrões",
+    maxTokensHelp: "Opcional. Limita quantos tokens cada etapa de geração pode produzir — o roteiro e a transcrição completa —, não é um limite por fala nem por conversa. Deixe em branco para usar os padrões integrados (3000 para o roteiro, 5000 para a transcrição). Aumente para episódios mais longos; um valor baixo demais pode cortar a transcrição.",
     defaultBriefingTitle: "Briefing padrão",
     created: "Criado em {{time}}",
     details: "Detalhes",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index b2ed27d0..1aa9e187 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -667,6 +667,8 @@ export const ruRU = {
     transcriptModel: "Модель транскрипта",
     segments: "Сегменты",
     maxTokens: "Максимум выходных токенов",
+    maxTokensPlaceholder: "Оставьте пустым для значений по умолчанию",
+    maxTokensHelp: "Необязательно. Ограничивает, сколько токенов может создать каждый шаг генерации — план и полный сценарий, — это не ограничение на отдельную реплику или на весь разговор. Оставьте пустым, чтобы использовать встроенные значения по умолчанию (3000 для плана, 5000 для сценария). Увеличьте для более длинных выпусков; слишком низкое значение может оборвать сценарий.",
     defaultBriefingTitle: "Брифинг по умолчанию",
     created: "Создано {{time}}",
     details: "Детали",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index c9a386cb..05946069 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -667,6 +667,8 @@ export const trTR = {
     transcriptModel: "Transkript modeli",
     segments: "Segmentler",
     maxTokens: "Maksimum çıktı token sayısı",
+    maxTokensPlaceholder: "Varsayılanlar için boş bırakın",
+    maxTokensHelp: "İsteğe bağlı. Her üretim adımının — taslak ve tam transkript — üretebileceği token sayısını sınırlar; her konuşma sırası veya sohbet başına bir sınır değildir. Yerleşik varsayılanları kullanmak için boş bırakın (taslak için 3000, transkript için 5000). Daha uzun bölümler için artırın; çok düşük bir değer transkripti yarıda kesebilir.",
     defaultBriefingTitle: "Varsayılan brifing",
     created: "{{time}} tarihinde oluşturuldu",
     details: "Ayrıntılar",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 03fe6919..c1b55d0a 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -667,6 +667,8 @@ export const zhCN = {
     transcriptModel: "脚本模型",
     segments: "分段数量",
     maxTokens: "最大输出令牌数",
+    maxTokensPlaceholder: "留空以使用默认值",
+    maxTokensHelp: "可选。限制每个生成步骤（大纲和完整文稿）可生成的令牌数，而不是每轮对话或整段对话的限制。留空则使用内置默认值（大纲为3000，文稿为5000）。制作较长的节目时可调高；数值过低可能会导致文稿被截断。",
     defaultBriefingTitle: "默认简报",
     created: "创建于 {{time}}",
     details: "详情",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index a711dcd9..61ca3e91 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -667,6 +667,8 @@ export const zhTW = {
     transcriptModel: "腳本模型",
     segments: "分段數量",
     maxTokens: "最大輸出權杖數",
+    maxTokensPlaceholder: "留空以使用預設值",
+    maxTokensHelp: "選填。限制每個生成步驟（大綱與完整逐字稿）可生成的權杖數，而非每輪對話或整段對話的限制。留空則使用內建預設值（大綱為3000，逐字稿為5000）。製作較長的節目時可調高；數值過低可能會使逐字稿被截斷。",
     defaultBriefingTitle: "預設簡報",
     created: "建立於 {{time}}",
     details: "詳情",

From 1c5f1c673a1d8bba7bf92e4ca1ccc863d31f1608 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Tue, 21 Jul 2026 07:04:19 -0300
Subject: [PATCH 246/345] chore(release): automate container probes + document
 post-tag re-cut (#1198)

Retro improvements from the v1.14.0 release:

- release-image-test.sh gains a `probe` scenario (part of `all`) that
  runs the two container-level checks done by hand during v1.14.0:
  OPEN_NOTEBOOK_WORKER_MAX_TASKS reaching the in-image worker (#1141's
  supervisord `sh -c` expansion), and the worker surviving startup with
  HTTP_PROXY set while the user's NO_PROXY value is preserved (#1160,
  internal SurrealDB websocket not tunneled). Self-contained standalone
  containers with their own cleanup, so a probe failure can't leak into
  the fresh/upgrade scenarios.

- RELEASE_PROCESS.md documents two gotchas the release hit: never leave
  the version bump uncommitted on a branch (it leaked into an unrelated
  fix PR), and a post-tag fix requires a full re-cut (move tag + rebuild
  images), not just a tag nudge, or publication promotes the un-fixed
  artifact to v1-latest.

Verified: `release-image-test.sh probe lfnovo/open_notebook:1.14.0`
passes 4/4.
---
 .github/RELEASE_PROCESS.md                 | 14 ++++
 CHANGELOG.md                               |  5 ++
 scripts/release-test/release-image-test.sh | 86 +++++++++++++++++++++-
 3 files changed, 103 insertions(+), 2 deletions(-)

diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index 11080454..fa59f6de 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -148,6 +148,20 @@ accepted improvements immediately — update this document, the scripts under
 
 ## Known Gotchas
 
+- **Never leave the version bump uncommitted on a branch.** Editing
+  `pyproject.toml` / `CHANGELOG.md` for the cut and then switching branches
+  carries those unstaged changes along, and the next `git add -A` sweeps the
+  bump into an unrelated fix PR — the version silently ships inside a `fix(...)`
+  commit. The cut is always the **last** step, on its own branch, committed
+  immediately; if you must build an image early (which needs the bumped
+  version), do it on a throwaway branch and `git stash`/discard before moving
+  on (v1.14.0 lesson).
+- **A fix that lands after the cut requires a full re-cut, not a tag nudge.**
+  If the release was tagged but not yet published (no GitHub release, no
+  `v1-latest`) and a blocker is found in bucket C, the tag must move to the new
+  commit AND the version images must be rebuilt — a stale tag or stale registry
+  image will otherwise be what publication promotes to `v1-latest`. The exact
+  sequence is in `runbook.md` → "Re-cut after a post-tag fix" (v1.14.0 lesson).
 - **RC stack on non-default ports needs `API_URL`** or the browser talks to
   `host:5055` — on a dev machine that is the development API (data crossover).
   `rc-stack.sh` sets it; remember this for any custom setup.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8e21761..5129c2f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Changed
+- Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
+
 ## [1.14.0] - 2026-07-20
 
 ### Added
diff --git a/scripts/release-test/release-image-test.sh b/scripts/release-test/release-image-test.sh
index 95642896..b4902c74 100755
--- a/scripts/release-test/release-image-test.sh
+++ b/scripts/release-test/release-image-test.sh
@@ -1,9 +1,16 @@
 #!/bin/bash
 # Release image gate: fresh-install and upgrade tests against built Docker images.
 #
-# Usage: release-image-test.sh <fresh|upgrade|all> <new-image> [old-image]
+# Usage: release-image-test.sh <fresh|upgrade|probe|all> <new-image> [old-image]
 #   e.g. release-image-test.sh all lfnovo/open_notebook:1.12.0 lfnovo/open_notebook:1.11.0
 #
+# Scenarios:
+#   fresh   - empty DB -> migrations on boot -> worker processes a source
+#   upgrade - boot old image, seed, swap to new image on the same volume
+#   probe   - container-level checks for image-specific behavior (worker
+#             concurrency env expansion, HTTP proxy / no_proxy handling)
+#   all     - all of the above
+#
 # IMPORTANT: `make docker-build-local` tags the build with the CURRENT pyproject
 # version. If that version matches a published release, `docker pull` the
 # genuine old tag first or the upgrade test will compare the new build against
@@ -140,10 +147,85 @@ print('yes' if any(n.get('name')=='release-probe' for n in nbs) else 'no')" 2>/d
   echo
 }
 
+# Container-level probes for release changes that a repo test suite cannot cover
+# because they depend on the shipped image's process supervision and env
+# handling (supervisord, entrypoint), not on Python. Each is self-contained
+# (standalone `docker run`, own cleanup) so a failure here can never leak state
+# into the fresh/upgrade scenarios.
+probe_test() {
+  echo "═══ CONTAINER PROBES — $NEW_IMAGE"
+
+  # #1141: OPEN_NOTEBOOK_WORKER_MAX_TASKS must reach the worker. supervisord's
+  # command= does not run through a shell, so the value is only honored if the
+  # command is wrapped in `sh -c`. Boot with the var set and a dead DB (the
+  # worker logs its configured concurrency before it ever connects), then read
+  # the value back from its startup log.
+  local CID
+  CID=$(docker run -d --rm \
+    -e OPEN_NOTEBOOK_WORKER_MAX_TASKS=2 \
+    -e SURREAL_URL=ws://127.0.0.1:9/rpc \
+    -e OPEN_NOTEBOOK_ENCRYPTION_KEY=probe \
+    "$NEW_IMAGE" 2>/dev/null)
+  if [ -z "$CID" ]; then
+    bad "worker-concurrency probe: container did not start"
+  else
+    local CONC=""
+    for i in $(seq 1 20); do
+      CONC=$(docker logs "$CID" 2>&1 | grep -oiE "up to [0-9]+ concurrent tasks" | grep -oE "[0-9]+" | head -1)
+      [ -n "$CONC" ] && break
+      sleep 3
+    done
+    check "OPEN_NOTEBOOK_WORKER_MAX_TASKS honored by the in-image worker" "2" "$CONC"
+    docker rm -f "$CID" >/dev/null 2>&1
+  fi
+
+  # #1160: with HTTP_PROXY set, the internal SurrealDB websocket must NOT be
+  # tunneled through the proxy (websockets 15 auto-detects proxy env even for
+  # ws://). The app injects the internal hosts into NO_PROXY at startup. Boot
+  # with a dead proxy set plus a user NO_PROXY value, against a real DB, and
+  # assert the worker reaches RUNNING and the user's NO_PROXY value survives.
+  local NET=onrelprobe-net
+  docker network create "$NET" >/dev/null 2>&1
+  docker run -d --rm --network "$NET" --name onrelprobe-surreal \
+    surrealdb/surrealdb:v2 start --user root --pass root --bind 0.0.0.0:8000 memory >/dev/null 2>&1
+  sleep 6
+  local APP
+  APP=$(docker run -d --rm --network "$NET" --name onrelprobe-app \
+    -e SURREAL_URL=ws://onrelprobe-surreal:8000/rpc -e SURREAL_USER=root -e SURREAL_PASS=root \
+    -e SURREAL_NAMESPACE=open_notebook -e SURREAL_DATABASE=probe \
+    -e OPEN_NOTEBOOK_ENCRYPTION_KEY=probe \
+    -e HTTP_PROXY=http://127.0.0.1:9 -e HTTPS_PROXY=http://127.0.0.1:9 \
+    -e NO_PROXY=my-corp.example \
+    "$NEW_IMAGE" 2>/dev/null)
+  if [ -z "$APP" ]; then
+    bad "no_proxy probe: container did not start"
+  else
+    local RUNNING="" MERGED=""
+    for i in $(seq 1 20); do
+      RUNNING=$(docker logs "$APP" 2>&1 | grep -c "worker entered RUNNING state")
+      [ "$RUNNING" != "0" ] && break
+      sleep 3
+    done
+    if [ "$RUNNING" != "0" ]; then ok "worker starts with HTTP_PROXY set (internal ws not tunneled)"; else
+      bad "worker did not reach RUNNING with HTTP_PROXY set"; docker logs "$APP" 2>&1 | tail -8 | sed 's/^/    /'
+    fi
+    local REJECT
+    REJECT=$(docker logs "$APP" 2>&1 | grep -ciE "403|proxy.*reject")
+    check "no proxy-rejection (403) in worker/API startup" "0" "$REJECT"
+    MERGED=$(docker exec "$APP" sh -c 'python -c "import os;print(\"my-corp.example\" in (os.environ.get(\"NO_PROXY\") or \"\"))"' 2>/dev/null)
+    check "user NO_PROXY value preserved (not clobbered)" "True" "$MERGED"
+    docker rm -f "$APP" >/dev/null 2>&1
+  fi
+  docker rm -f onrelprobe-surreal >/dev/null 2>&1
+  docker network rm "$NET" >/dev/null 2>&1
+  echo
+}
+
 case "${1:-all}" in
   fresh)   fresh_test ;;
   upgrade) upgrade_test ;;
-  all)     fresh_test; upgrade_test ;;
+  probe)   probe_test ;;
+  all)     fresh_test; upgrade_test; probe_test ;;
 esac
 
 echo "═══ RESULT: $PASS passed, $FAIL failed"

From 340c70a65eae961292a0f27126ee45430e43c8c2 Mon Sep 17 00:00:00 2001
From: Cory Potter <75514747+bitsandbots@users.noreply.github.com>
Date: Tue, 21 Jul 2026 07:20:19 -0500
Subject: [PATCH 247/345] docs: fix stale auth env var references (#1189)

.env.example, development-setup.md, and examples/README.md referenced
APP_PASSWORD and BASIC_AUTH_USERNAME/BASIC_AUTH_PASSWORD, none of which
exist in code. api/auth.py's PasswordAuthMiddleware only reads
OPEN_NOTEBOOK_PASSWORD; the old names silently did nothing.

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .env.example                            | 5 +++--
 docs/7-DEVELOPMENT/development-setup.md | 2 +-
 examples/README.md                      | 5 ++---
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.env.example b/.env.example
index 050ae567..9e4b3b8f 100644
--- a/.env.example
+++ b/.env.example
@@ -71,8 +71,9 @@ SURREAL_DATABASE=open_notebook
 # OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB=100
 
 # Security
-# BASIC_AUTH_USERNAME=admin
-# BASIC_AUTH_PASSWORD=secret
+# Password to protect this Open Notebook instance. Supports Docker secrets
+# via OPEN_NOTEBOOK_PASSWORD_FILE. Auth is fully disabled if unset.
+# OPEN_NOTEBOOK_PASSWORD=secret
 
 # Network / Proxy (corporate / firewalled environments)
 # Route outbound HTTP(S) through a proxy. NO_PROXY MUST list the internal
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index a9c730d7..9e43a586 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -57,7 +57,7 @@ SURREAL_DATABASE=development
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-dev-secret-key
 
 # Application
-APP_PASSWORD=  # Optional password protection
+OPEN_NOTEBOOK_PASSWORD=  # Optional password protection
 DEBUG=true
 LOG_LEVEL=DEBUG
 ```
diff --git a/examples/README.md b/examples/README.md
index d7797c1d..085fdf11 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -144,11 +144,10 @@ volumes:
 ### Add Reverse Proxy
 See [Reverse Proxy Guide](../docs/5-CONFIGURATION/reverse-proxy.md)
 
-### Add Basic Auth
+### Add Password Protection
 Add to `open_notebook` service environment:
 ```yaml
-- BASIC_AUTH_USERNAME=admin
-- BASIC_AUTH_PASSWORD=your-secure-password
+- OPEN_NOTEBOOK_PASSWORD=your-secure-password
 ```
 
 ---

From fa352c151e861f64c5cf5b16337f870293d5650a Mon Sep 17 00:00:00 2001
From: Cory Potter <75514747+bitsandbots@users.noreply.github.com>
Date: Tue, 21 Jul 2026 07:23:52 -0500
Subject: [PATCH 248/345] fix(frontend): support allowedDevOrigins via env var
 (#1190)

* fix(frontend): support allowedDevOrigins via env var

Accessing the Next.js dev server from a LAN IP fails all HMR/dev
resource requests: Next.js blocks cross-origin dev requests (including
the webpack-hmr websocket) from any host not in an explicit allowlist,
as a DNS-rebinding guard. Server log:

  Blocked cross-origin request to Next.js dev resource
  /_next/webpack-hmr from "<lan-ip>".

Add NEXT_ALLOWED_DEV_ORIGINS (comma-separated hostnames) to populate
Next's allowedDevOrigins config, so LAN/custom-hostname dev access can
be enabled per-deployment without hardcoding a host into next.config.ts.

* fix(frontend): treat whitespace-only NEXT_ALLOWED_DEV_ORIGINS as unset

A whitespace-only or comma-only value parsed to an empty array, which is
truthy and still spread allowedDevOrigins: [] into the config, overriding
Next's default dev-origin behavior. Only set the key when at least one
origin survives trimming.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/next.config.ts | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/frontend/next.config.ts b/frontend/next.config.ts
index 144e081c..f19b0f4a 100644
--- a/frontend/next.config.ts
+++ b/frontend/next.config.ts
@@ -1,9 +1,19 @@
 import type { NextConfig } from "next";
 
+// Next.js dev server blocks cross-origin requests (including the HMR
+// websocket) from any host not in this list, to guard against DNS
+// rebinding. Set NEXT_ALLOWED_DEV_ORIGINS (comma-separated hostnames, no
+// protocol/port) to access the dev server from a LAN IP or custom hostname.
+const allowedDevOrigins = process.env.NEXT_ALLOWED_DEV_ORIGINS
+  ? process.env.NEXT_ALLOWED_DEV_ORIGINS.split(",").map((s) => s.trim()).filter(Boolean)
+  : undefined;
+
 const nextConfig: NextConfig = {
   // Enable standalone output for optimized Docker deployment
   output: "standalone",
 
+  ...(allowedDevOrigins && allowedDevOrigins.length > 0 ? { allowedDevOrigins } : {}),
+
   // Experimental features
   // Type assertion needed: proxyClientMaxBodySize is valid in Next.js 15 but types lag behind
   experimental: {

From 1b46de7b76da8b6ef7cf166705f6b5d07ff5f9b3 Mon Sep 17 00:00:00 2001
From: Yu Feng <fengyu@tcd.ie>
Date: Tue, 21 Jul 2026 14:28:16 +0200
Subject: [PATCH 249/345] fix: prevent source dialog action overlap (#1195)

* fix: prevent source dialog action overlap

* fix(sources): pad only the right of the detail header to clear close button

px-12 cleared the overlap but also indented the header's left edge 40px
past the tab content below (which stays px-2), misaligning the title. Keep
px-2 and add pr-12 so the header left-aligns with the body while the actions
menu still clears the dialog close button on the right.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/components/sources/SourceDetailContent.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index d133ac97..38a6fa87 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -412,7 +412,7 @@ function SourceDetailContentInner({
   return (
     <div className="flex flex-col h-full">
       {/* Header */}
-      <div className="pb-4 px-2">
+      <div className="pb-4 px-2 pr-12">
         <div className="flex items-start justify-between">
           <div className="flex-1">
             <InlineEdit

From 9f75748c4d60868e64993683ec207b7e88c28a87 Mon Sep 17 00:00:00 2001
From: dyzur <77259435+dyzur@users.noreply.github.com>
Date: Tue, 21 Jul 2026 17:11:02 +0300
Subject: [PATCH 250/345] fix: prevent Ask streaming loading from getting stuck
 on dangling connections (#777) (#1146)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: prevent Ask streaming loading from getting stuck on dangling connections

Adds a safety-net timeout (5 min) to useAsk that forces the loading
state to end even when the SSE stream's 'done' signal doesn't reach
the browser — which happens in Docker/standalone deployments where
the Next.js proxy connection is left open without proper termination.

Changes:
- use-ask.ts: AbortController per request, mountedRef for cleanup,
  STREAM_TIMEOUT_MS that resets isStreaming, stopStreaming() helper
  that centralizes cleanup + clears the timeout
- search.ts: pass AbortSignal through to fetch() so the timeout can
  actually cancel the HTTP request

The complete event now also carries final_answer content as a
backup path in case the final_answer event is missed.

Co-Authored-By: Claude <noreply@anthropic.com>

* chore: reduce stream timeout from 5 min to 75s

* fix(ask): make stream watchdog idle-based and abort dangling connections

The Ask stream safety timeout was a fixed 75s wall-clock cap measured from
stream start and never reset by incoming SSE events. A legitimately slow but
healthy Ask (slow local models — Ollama, LM Studio) would have its loading
state killed mid-stream, showing a partial/empty answer while the backend was
still producing — the exact slow-hardware scenario in #777.

- Re-arm the timeout on every received chunk so it fires only when the
  connection goes genuinely silent (idle timeout, not wall-clock).
- Align the idle window to the API client budget (NEXT_PUBLIC_API_TIMEOUT_MS,
  default 10 min; 0 disables) so slow local models aren't cut off. Export
  API_TIMEOUT_MS from the client for this.
- On fire, abort the in-flight request so a truly dangling connection frees the
  socket/reader instead of leaking it (the catch already swallows AbortError).

---------

Co-authored-by: dyzur <dyzur@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/lib/api/client.ts    |   4 +
 frontend/src/lib/api/search.ts    |   5 +-
 frontend/src/lib/hooks/use-ask.ts | 121 +++++++++++++++++++++++++-----
 3 files changed, 108 insertions(+), 22 deletions(-)

diff --git a/frontend/src/lib/api/client.ts b/frontend/src/lib/api/client.ts
index 5ddf3675..b5c77e53 100644
--- a/frontend/src/lib/api/client.ts
+++ b/frontend/src/lib/api/client.ts
@@ -19,6 +19,10 @@ const apiTimeout = Number.isFinite(parsedTimeout) && parsedTimeout >= 0
   ? parsedTimeout
   : DEFAULT_API_TIMEOUT_MS
 
+// Resolved request budget in milliseconds (0 = disabled). Exported so streaming
+// consumers can align their own idle watchdogs to the same configurable budget.
+export const API_TIMEOUT_MS = apiTimeout
+
 export const apiClient = axios.create({
   timeout: apiTimeout,
   headers: {
diff --git a/frontend/src/lib/api/search.ts b/frontend/src/lib/api/search.ts
index 582414ea..af23d178 100644
--- a/frontend/src/lib/api/search.ts
+++ b/frontend/src/lib/api/search.ts
@@ -10,7 +10,7 @@ export const searchApi = {
   },
 
   // Ask with streaming (uses relative URL for Docker compatibility)
-  askKnowledgeBase: async (params: AskRequest) => {
+  askKnowledgeBase: async (params: AskRequest, signal?: AbortSignal) => {
     // Get auth token using the same logic as apiClient interceptor
     const token = getAuthToken()
 
@@ -25,7 +25,8 @@ export const searchApi = {
         'Content-Type': 'application/json',
         ...(token && { Authorization: `Bearer ${token}` })
       },
-      body: JSON.stringify(params)
+      body: JSON.stringify(params),
+      signal
     })
 
     if (!response.ok) {
diff --git a/frontend/src/lib/hooks/use-ask.ts b/frontend/src/lib/hooks/use-ask.ts
index 19458791..19dec643 100644
--- a/frontend/src/lib/hooks/use-ask.ts
+++ b/frontend/src/lib/hooks/use-ask.ts
@@ -1,10 +1,11 @@
 'use client'
 
-import { useState, useCallback } from 'react'
+import { useState, useCallback, useRef, useEffect } from 'react'
 import { toast } from 'sonner'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { getApiErrorMessage } from '@/lib/utils/error-handler'
 import { searchApi } from '@/lib/api/search'
+import { API_TIMEOUT_MS } from '@/lib/api/client'
 import { AskStreamEvent } from '@/lib/types/search'
 
 interface AskModels {
@@ -26,6 +27,17 @@ interface AskState {
   error: string | null
 }
 
+// Idle watchdog for the SSE stream: if no bytes arrive for this long, treat the
+// connection as dangling (e.g. a Docker/standalone proxy that doesn't propagate
+// the "done" signal), abort the socket and end the loading state.
+//
+// This is an *idle* timeout — it is re-armed on every received chunk — not a
+// wall-clock cap, so a slow-but-healthy stream never trips it. The window is
+// aligned to the same budget as the API client (NEXT_PUBLIC_API_TIMEOUT_MS,
+// default 10 min; 0 disables the timeout) so slow local models (Ollama, LM
+// Studio) that legitimately take a while between events aren't cut off mid-stream.
+const STREAM_IDLE_TIMEOUT_MS = API_TIMEOUT_MS
+
 export function useAsk() {
   const { t } = useTranslation()
   const [state, setState] = useState<AskState>({
@@ -35,6 +47,54 @@ export function useAsk() {
     finalAnswer: null,
     error: null
   })
+  const streamTimeoutRef = useRef<ReturnType<typeof setTimeout> | null>(null)
+  const abortControllerRef = useRef<AbortController | null>(null)
+  const mountedRef = useRef(true)
+
+  useEffect(() => {
+    return () => {
+      mountedRef.current = false
+      if (streamTimeoutRef.current) {
+        clearTimeout(streamTimeoutRef.current)
+      }
+      if (abortControllerRef.current) {
+        abortControllerRef.current.abort()
+      }
+    }
+  }, [])
+
+  const clearStreamTimeout = useCallback(() => {
+    if (streamTimeoutRef.current) {
+      clearTimeout(streamTimeoutRef.current)
+      streamTimeoutRef.current = null
+    }
+  }, [])
+
+  // (Re)arm the idle watchdog. Called at stream start and on every received
+  // chunk, so the timer only fires when the connection goes genuinely silent.
+  // On fire it aborts the in-flight request (freeing the socket/reader — the
+  // `catch` swallows the resulting AbortError) and clears the loading state.
+  const armStreamTimeout = useCallback(() => {
+    clearStreamTimeout()
+    if (STREAM_IDLE_TIMEOUT_MS <= 0) return // 0 = watchdog disabled
+    streamTimeoutRef.current = setTimeout(() => {
+      abortControllerRef.current?.abort()
+      if (mountedRef.current) {
+        setState(prev => (prev.isStreaming ? { ...prev, isStreaming: false } : prev))
+      }
+    }, STREAM_IDLE_TIMEOUT_MS)
+  }, [clearStreamTimeout])
+
+  const stopStreaming = useCallback((finalAnswer?: string | null) => {
+    clearStreamTimeout()
+    if (mountedRef.current) {
+      setState(prev => ({
+        ...prev,
+        isStreaming: false,
+        ...(finalAnswer !== undefined ? { finalAnswer } : {})
+      }))
+    }
+  }, [clearStreamTimeout])
 
   const sendAsk = useCallback(async (question: string, models: AskModels) => {
     // Validate inputs
@@ -48,6 +108,13 @@ export function useAsk() {
       return
     }
 
+    // Abort any previous in-flight request
+    if (abortControllerRef.current) {
+      abortControllerRef.current.abort()
+    }
+    abortControllerRef.current = new AbortController()
+    const signal = abortControllerRef.current.signal
+
     // Reset state
     setState({
       isStreaming: true,
@@ -57,15 +124,19 @@ export function useAsk() {
       error: null
     })
 
+    // Arm the idle watchdog; it is re-armed on every received chunk below.
+    armStreamTimeout()
+
     try {
       const response = await searchApi.askKnowledgeBase({
         question,
         strategy_model: models.strategy,
         answer_model: models.answer,
         final_answer_model: models.finalAnswer
-      })
+      }, signal)
 
       if (!response) {
+        stopStreaming()
         throw new Error('No response body received from server')
       }
 
@@ -80,6 +151,9 @@ export function useAsk() {
           break
         }
 
+        // Activity on the connection — reset the idle watchdog.
+        armStreamTimeout()
+
         buffer += decoder.decode(value, { stream: true })
         const lines = buffer.split('\n')
 
@@ -108,17 +182,11 @@ export function useAsk() {
                   answers: [...prev.answers, data.content || '']
                 }))
               } else if (data.type === 'final_answer') {
-                setState(prev => ({
-                  ...prev,
-                  finalAnswer: data.content || '',
-                  isStreaming: false
-                }))
+                stopStreaming(data.content || '')
               } else if (data.type === 'complete') {
-                setState(prev => ({
-                  ...prev,
-                  isStreaming: false
-                }))
+                stopStreaming(data.final_answer ?? undefined)
               } else if (data.type === 'error') {
+                stopStreaming()
                 throw new Error(data.message || 'Stream error occurred')
               }
             } catch (e) {
@@ -126,6 +194,7 @@ export function useAsk() {
                 console.error('Error parsing SSE data:', e, 'Line:', line)
                 // Don't throw - continue processing other lines
               } else {
+                stopStreaming()
                 throw e
               }
             }
@@ -133,27 +202,39 @@ export function useAsk() {
         }
       }
 
-      // Ensure streaming is stopped
-      setState(prev => ({ ...prev, isStreaming: false }))
+      // Stream ended normally — clear the safety timeout
+      stopStreaming()
 
     } catch (error) {
+      // If aborted by the safety timeout, don't show an error toast
+      if (error instanceof DOMException && error.name === 'AbortError') {
+        return
+      }
+
       const err = error as { message?: string }
       const errorMessage = err.message || 'An unexpected error occurred'
       console.error('Ask error:', error)
 
-      setState(prev => ({
-        ...prev,
-        isStreaming: false,
-        error: errorMessage
-      }))
+      if (mountedRef.current) {
+        setState(prev => ({
+          ...prev,
+          isStreaming: false,
+          error: errorMessage
+        }))
+      }
 
       toast.error(t('apiErrors.askFailed'), {
         description: getApiErrorMessage(errorMessage, (key) => t(key))
       })
     }
-  }, [t])
+  }, [t, stopStreaming, armStreamTimeout])
 
   const reset = useCallback(() => {
+    clearStreamTimeout()
+    if (abortControllerRef.current) {
+      abortControllerRef.current.abort()
+      abortControllerRef.current = null
+    }
     setState({
       isStreaming: false,
       strategy: null,
@@ -161,7 +242,7 @@ export function useAsk() {
       finalAnswer: null,
       error: null
     })
-  }, [])
+  }, [clearStreamTimeout])
 
   return {
     ...state,

From ee0ea5ebaa8b29d29b68af753d2f0edce5acab4b Mon Sep 17 00:00:00 2001
From: Thomas Pockrandt <me@thomaspockrandt.com>
Date: Tue, 21 Jul 2026 16:14:51 +0200
Subject: [PATCH 251/345] feat(frontend): add "New Source" button to sources
 empty state (#1165)

* feat: add 'add source' button to sources page

* feat(i18n): add sources.newSource translation to all locales

* refactor(frontend): deduplicate AddSourceDialog in sources page

* i18n(de-DE): add missing sources.newSource key

The new sources.newSource key was added to the other 13 locales but not
de-DE, so the locale parity test (src/lib/locales/index.test.ts) failed
and de-DE users would fall back to the raw key. Add the German string.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/app/(dashboard)/sources/page.tsx | 57 ++++++++++++-------
 frontend/src/lib/locales/bn-IN/index.ts       |  1 +
 frontend/src/lib/locales/ca-ES/index.ts       |  1 +
 frontend/src/lib/locales/de-DE/index.ts       |  1 +
 frontend/src/lib/locales/en-US/index.ts       |  1 +
 frontend/src/lib/locales/es-ES/index.ts       |  1 +
 frontend/src/lib/locales/fr-FR/index.ts       |  1 +
 frontend/src/lib/locales/it-IT/index.ts       |  1 +
 frontend/src/lib/locales/ja-JP/index.ts       |  1 +
 frontend/src/lib/locales/pl-PL/index.ts       |  1 +
 frontend/src/lib/locales/pt-BR/index.ts       |  1 +
 frontend/src/lib/locales/ru-RU/index.ts       |  1 +
 frontend/src/lib/locales/tr-TR/index.ts       |  1 +
 frontend/src/lib/locales/zh-CN/index.ts       |  1 +
 frontend/src/lib/locales/zh-TW/index.ts       |  1 +
 15 files changed, 50 insertions(+), 21 deletions(-)

diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index 1e278fcb..28a1b99f 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -8,7 +8,7 @@ import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { AppShell } from '@/components/layout/AppShell'
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
-import { FileText, Link as LinkIcon, Upload, AlignLeft, Trash2, ArrowDown, ArrowUp, ArrowUpDown } from 'lucide-react'
+import { FileText, Link as LinkIcon, Upload, AlignLeft, Trash2, ArrowDown, ArrowUp, ArrowUpDown, Plus } from 'lucide-react'
 import { formatDistanceToNow } from 'date-fns'
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
@@ -17,9 +17,11 @@ import { getDateLocale } from '@/lib/utils/date-locale'
 import { cn } from '@/lib/utils'
 import { toast } from 'sonner'
 import { getApiErrorKey } from '@/lib/utils/error-handler'
+import { AddSourceDialog } from '@/components/sources/AddSourceDialog'
 
 export default function SourcesPage() {
   const { t, language } = useTranslation()
+  const [sourceDialogOpen, setSourceDialogOpen] = useState(false)
   const failedToLoadMessage = t('sources.failedToLoad')
   const [sources, setSources] = useState<SourceListResponse[]>([])
   const [loading, setLoading] = useState(true)
@@ -280,40 +282,40 @@ export default function SourcesPage() {
     }
   }
 
-  if (loading) {
-    return (
-      <AppShell>
+  const renderContent = () => {
+    if (loading) {
+      return (
         <div className="flex h-full items-center justify-center">
           <LoadingSpinner />
         </div>
-      </AppShell>
-    )
-  }
+      )
+    }
 
-  if (error) {
-    return (
-      <AppShell>
+    if (error) {
+      return (
         <div className="flex h-full items-center justify-center">
           <p className="text-red-500">{error}</p>
         </div>
-      </AppShell>
-    )
-  }
+      )
+    }
 
-  if (sources.length === 0) {
-    return (
-      <AppShell>
+    if (sources.length === 0) {
+      return (
         <EmptyState
           icon={FileText}
           title={t('sources.noSourcesYet')}
           description={t('sources.allSourcesDescShort')}
+          action={
+            <Button onClick={() => setSourceDialogOpen(true)} variant="outline" className="mt-4">
+              <Plus className="h-4 w-4 mr-2" />
+              {t('sources.newSource')}
+            </Button>
+          }
         />
-      </AppShell>
-    )
-  }
+      )
+    }
 
-  return (
-    <AppShell>
+    return (<>
       <div className="flex flex-col h-full w-full max-w-none px-6 py-6">
         <div className="mb-6 flex-shrink-0">
           <h1 className="text-3xl font-bold">{t('sources.allSources')}</h1>
@@ -451,6 +453,19 @@ export default function SourcesPage() {
         confirmVariant="destructive"
         onConfirm={handleDeleteConfirm}
       />
+    </>)
+  }
+
+  return (
+    <AppShell>
+      {renderContent()}
+      <AddSourceDialog
+        open={sourceDialogOpen}
+        onOpenChange={(open) => {
+          setSourceDialogOpen(open)
+          if (!open) fetchSources(true)
+        }}
+      />
     </AppShell>
   )
 }
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 83ece575..3f177c09 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -277,6 +277,7 @@ export const bnIN = {
     lastViewed: "{{time}} দেখা হয়েছে",
   },
   sources: {
+    newSource: "নতুন উৎস",
     bulkContext: "প্রসঙ্গ",
     includeAllInContext: "সবগুলো প্রসঙ্গে যোগ করুন",
     includeAllInsights: "সব যোগ করুন (শুধু অন্তর্দৃষ্টি)",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 4bb5f801..c9cc3ceb 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -277,6 +277,7 @@ export const caES = {
     lastViewed: "Vist {{time}}",
   },
   sources: {
+    newSource: "Font nova",
     bulkContext: "Context",
     includeAllInContext: "Inclou-les totes al context",
     includeAllInsights: "Inclou-les totes (només informacions)",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 96295006..52645188 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -280,6 +280,7 @@ export const deDE = {
     lastViewed: "Angesehen {{time}}",
   },
   sources: {
+    newSource: "Neue Quelle",
     bulkContext: "Kontext",
     includeAllInContext: "Alle in den Kontext aufnehmen",
     includeAllInsights: "Alle aufnehmen (nur Erkenntnisse)",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 55234b77..0ff98c87 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -276,6 +276,7 @@ export const enUS = {
   },
   sources: {
     title: "Sources",
+    newSource: "New Source",
     bulkContext: "Context",
     includeAllInContext: "Include all in context",
     includeAllInsights: "Include all (insights only)",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 244466ed..4f95bc0e 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -277,6 +277,7 @@ export const esES = {
     lastViewed: "Visto {{time}}",
   },
   sources: {
+    newSource: "Nueva fuente",
     bulkContext: "Contexto",
     includeAllInContext: "Incluir todas en el contexto",
     includeAllInsights: "Incluir todas (solo insights)",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 30b4ee5a..1dc77290 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -277,6 +277,7 @@ export const frFR = {
     lastViewed: "Consulté {{time}}",
   },
   sources: {
+    newSource: "Nouvelle Source",
     bulkContext: "Contexte",
     includeAllInContext: "Tout inclure dans le contexte",
     includeAllInsights: "Tout inclure (aperçus uniquement)",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 7f711bdd..0da873a9 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -277,6 +277,7 @@ export const itIT = {
     lastViewed: "Visto {{time}}",
   },
   sources: {
+    newSource: "Nuova fonte",
     bulkContext: "Contesto",
     includeAllInContext: "Includi tutte nel contesto",
     includeAllInsights: "Includi tutte (solo approfondimenti)",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index c37f0eac..d508d190 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -277,6 +277,7 @@ export const jaJP = {
     lastViewed: "{{time}}に表示",
   },
   sources: {
+    newSource: "新規ソース",
     bulkContext: "コンテキスト",
     includeAllInContext: "すべてをコンテキストに含める",
     includeAllInsights: "すべて含める（インサイトのみ）",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index cd02200d..97869945 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -277,6 +277,7 @@ export const plPL = {
     lastViewed: "Wyświetlono {{time}}",
   },
   sources: {
+    newSource: "Nowe źródło",
     bulkContext: "Kontekst",
     includeAllInContext: "Uwzględnij wszystkie w kontekście",
     includeAllInsights: "Uwzględnij wszystkie (tylko wnioski)",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index ecefdb78..3bd0efb7 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -277,6 +277,7 @@ export const ptBR = {
     lastViewed: "Visto {{time}}",
   },
   sources: {
+    newSource: "Nova Fonte",
     bulkContext: "Contexto",
     includeAllInContext: "Incluir todas no contexto",
     includeAllInsights: "Incluir todas (apenas insights)",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 1aa9e187..f380d9d4 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -277,6 +277,7 @@ export const ruRU = {
     lastViewed: "Просмотрено {{time}}",
   },
   sources: {
+    newSource: "Новый источник",
     bulkContext: "Контекст",
     includeAllInContext: "Включить все в контекст",
     includeAllInsights: "Включить все (только выводы)",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 05946069..fa9b7478 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -277,6 +277,7 @@ export const trTR = {
     lastViewed: "{{time}} görüntülendi",
   },
   sources: {
+    newSource: "Yeni Kaynak",
     bulkContext: "Bağlam",
     includeAllInContext: "Tümünü bağlama dahil et",
     includeAllInsights: "Tümünü dahil et (yalnızca içgörüler)",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index c1b55d0a..d8077565 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -277,6 +277,7 @@ export const zhCN = {
     lastViewed: "查看于{{time}}",
   },
   sources: {
+    newSource: "新建来源",
     bulkContext: "上下文",
     includeAllInContext: "全部加入上下文",
     includeAllInsights: "全部加入（仅见解）",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 61ca3e91..cb451de2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -277,6 +277,7 @@ export const zhTW = {
     lastViewed: "檢視於{{time}}",
   },
   sources: {
+    newSource: "新增來源",
     bulkContext: "上下文",
     includeAllInContext: "全部加入上下文",
     includeAllInsights: "全部加入（僅見解）",

From 206d77cab366d48f057ff5cce3141bc66732851a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 22 Jul 2026 08:53:51 -0300
Subject: [PATCH 252/345] docs: route feature ideas through Discussions (#1205)

* docs: route feature ideas through discussions

* docs: normalize Issue terminology
---
 .github/DISCUSSION_TEMPLATE/ideas.yml      |  73 +++++++++++
 .github/ISSUE_TEMPLATE/bug_report.yml      |  13 +-
 .github/ISSUE_TEMPLATE/config.yml          |   8 +-
 .github/ISSUE_TEMPLATE/feature_request.yml |  65 ----------
 .github/pull_request_template.md           |   7 +-
 AGENTS.md                                  |   2 +-
 CHANGELOG.md                               |   1 +
 CONTRIBUTING.md                            |   9 +-
 README.md                                  |   8 +-
 docs/6-TROUBLESHOOTING/faq.md              |   7 +-
 docs/7-DEVELOPMENT/contributing.md         |  48 ++++---
 docs/7-DEVELOPMENT/index.md                |   8 +-
 docs/7-DEVELOPMENT/maintainer-guide.md     | 139 ++++++++++++++-------
 13 files changed, 241 insertions(+), 147 deletions(-)
 create mode 100644 .github/DISCUSSION_TEMPLATE/ideas.yml
 delete mode 100644 .github/ISSUE_TEMPLATE/feature_request.yml

diff --git a/.github/DISCUSSION_TEMPLATE/ideas.yml b/.github/DISCUSSION_TEMPLATE/ideas.yml
new file mode 100644
index 00000000..5378f2ad
--- /dev/null
+++ b/.github/DISCUSSION_TEMPLATE/ideas.yml
@@ -0,0 +1,73 @@
+title: "[Idea]: "
+labels: ["needs-triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping shape Open Notebook.
+
+        Ideas, feature requests, behavior changes, product/design/architecture proposals, and contribution proposals start here so the community can explore the problem before it becomes an implementation commitment. Reproducible bugs belong in [Issues](https://github.com/lfnovo/open-notebook/issues/new/choose).
+
+        You do not need to know how to implement the idea. Start with the outcome you need and the context behind it.
+
+  - type: textarea
+    id: goal
+    attributes:
+      label: What are you trying to do?
+      description: Describe the goal or workflow in your own words.
+      placeholder: "I am trying to..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: What feels difficult or missing today?
+      description: Tell us what happens now and where the current experience falls short.
+      placeholder: "Today I have to... which makes it difficult to..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: outcome
+    attributes:
+      label: What outcome would help?
+      description: Describe what success would look like without needing to prescribe the implementation.
+      placeholder: "A good outcome would let me..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: workaround
+    attributes:
+      label: How do you handle this today?
+      description: Share any workaround, alternative tool, or process you currently use.
+    validations:
+      required: false
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context, examples, or possible directions
+      description: Screenshots, references, constraints, and implementation ideas are welcome, but optional.
+    validations:
+      required: false
+
+  - type: checkboxes
+    id: participation
+    attributes:
+      label: How would you like to participate?
+      description: This is not a commitment; it helps us know whom to involve if the idea moves forward.
+      options:
+        - label: I can add use cases or join the product/design discussion.
+        - label: I can help explore the technical approach.
+        - label: I can help implement an approved work item.
+        - label: I can test or validate a proposed solution.
+
+  - type: checkboxes
+    id: searched
+    attributes:
+      label: Before posting
+      options:
+        - label: I searched existing Discussions and Issues for related proposals.
+          required: true
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
index 97f4a947..18dafa19 100644
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -8,7 +8,18 @@ body:
       value: |
         Thanks for reporting a bug! Please fill out the information below to help us understand and fix the issue.
 
-        **Note**: If you're having installation or setup issues, please use the "Installation Issue" template instead.
+        Issues are for **reproducible bugs** and maintainer-created work items. Feature requests, ideas, behavior changes, product/design/architecture proposals, and contribution proposals belong in [Discussions](https://github.com/lfnovo/open-notebook/discussions/new?category=ideas).
+
+        **Installation or setup problem?** Use the "Installation Issue" template instead.
+
+  - type: checkboxes
+    id: bug-confirmation
+    attributes:
+      label: Is this a reproducible bug?
+      description: Ideas and feature requests belong in Discussions and may be converted there if opened as Issues.
+      options:
+        - label: I confirm this is a reproducible bug, not a feature request, idea, question, or contribution proposal.
+          required: true
 
   - type: textarea
     id: what-happened
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index 630377fe..c726c442 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,8 +1,14 @@
 blank_issues_enabled: false
 contact_links:
+  - name: 💡 Feature Requests and Ideas
+    url: https://github.com/lfnovo/open-notebook/discussions/new?category=ideas
+    about: Discuss features, product direction, design, architecture, and contribution proposals before they become work items
+  - name: ❓ Questions and Community Support
+    url: https://github.com/lfnovo/open-notebook/discussions/new?category=q-a
+    about: Ask questions and get help from maintainers and the community
   - name: 💬 Discord Community
     url: https://discord.gg/37XJPXfz2w
-    about: Get help from the community and share ideas
+    about: Get real-time help and talk with the community
   - name: 🤖 Installation Assistant (ChatGPT)
     url: https://chatgpt.com/g/g-68776e2765b48191bd1bae3f30212631-open-notebook-installation-assistant
     about: CustomGPT that knows all our docs. Really useful. Try it.
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
deleted file mode 100644
index 912f1f12..00000000
--- a/.github/ISSUE_TEMPLATE/feature_request.yml
+++ /dev/null
@@ -1,65 +0,0 @@
-name: ✨ Feature Suggestion
-description: Suggest a new feature or improvement for Open Notebook
-title: "[Feature]: "
-labels: ["enhancement", "needs-triage"]
-body:
-  - type: markdown
-    attributes:
-      value: |
-        Thanks for taking the time to suggest a feature! Your ideas help make Open Notebook better for everyone.
-
-  - type: textarea
-    id: feature-description
-    attributes:
-      label: Feature Description
-      description: What feature would you like to see added or improved?
-      placeholder: "I would like to be able to..."
-    validations:
-      required: true
-
-  - type: textarea
-    id: why-helpful
-    attributes:
-      label: Why would this be helpful?
-      description: Explain how this feature would benefit you and other users
-      placeholder: "This would help because..."
-    validations:
-      required: true
-
-  - type: textarea
-    id: proposed-solution
-    attributes:
-      label: Proposed Solution (Optional)
-      description: If you have ideas on how to implement this feature, please share them
-      placeholder: "This could be implemented by..."
-    validations:
-      required: false
-
-  - type: textarea
-    id: additional-context
-    attributes:
-      label: Additional Context
-      description: Any other context, screenshots, or examples that might be helpful
-      placeholder: "For example, other tools do this by..."
-    validations:
-      required: false
-
-  - type: checkboxes
-    id: willing-to-contribute
-    attributes:
-      label: Contribution
-      description: Would you like to work on implementing this feature?
-      options:
-        - label: I am a developer and would like to work on implementing this feature (pending maintainer approval)
-          required: false
-
-  - type: markdown
-    attributes:
-      value: |
-        ---
-        **Next Steps:**
-        1. A maintainer will review your feature request
-        2. If approved and you checked the box above, the issue will be assigned to you
-        3. Please wait for assignment before starting development
-        4. See our [Contributing Guide](https://github.com/lfnovo/open-notebook/blob/main/CONTRIBUTING.md) for more details
-
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 5de0aba1..8a44306e 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -4,9 +4,10 @@
 
 ## Related Issue
 
-<!-- Non-trivial PRs (features, architecture changes) must link an approved issue.
+<!-- Non-trivial PRs (features, architecture changes) must link an approved Issue.
      Small obvious fixes (typo, docs, tiny bug) don't need one — write "N/A (small fix)" below.
-     Sizeable change without an issue? Mark this PR as draft and create the issue first. -->
+     Sizeable change without an approved Issue? Mark this PR as draft. Start a Discussion for an
+     idea/feature or open an Issue for a reproducible bug, then wait for the work to be approved. -->
 
 Fixes #<!-- issue number, or "N/A (small fix)" -->
 
@@ -100,7 +101,7 @@ Before submitting, please verify:
 
 - [ ] I have read [CONTRIBUTING.md](https://github.com/lfnovo/open-notebook/blob/main/docs/7-DEVELOPMENT/contributing.md)
 - [ ] I have read [VISION.md](https://github.com/lfnovo/open-notebook/blob/main/VISION.md)
-- [ ] This PR addresses an approved issue assigned to me, **or** it's a small obvious fix (typo, docs, tiny bug) that doesn't need one — for anything bigger without an issue, mark this PR as draft and open the issue (triage takes 1–2 days)
+- [ ] This PR addresses an approved Issue assigned to me, **or** it's a small obvious fix (typo, docs, tiny bug) that doesn't need one — ideas and features begin in Discussions; reproducible bugs begin in Issues
 - [ ] I have not included unrelated changes in this PR
 - [ ] My PR title follows conventional commits format (e.g., "feat: add user authentication")
 
diff --git a/AGENTS.md b/AGENTS.md
index 11c8152b..b288fc68 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -41,5 +41,5 @@ Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
 | Code standards & testing | [docs/7-DEVELOPMENT/code-standards.md](docs/7-DEVELOPMENT/code-standards.md) · [testing.md](docs/7-DEVELOPMENT/testing.md) |
 | Product identity & current posture | [VISION.md](VISION.md) |
 | Decision log (ADRs/PDRs) | [docs/7-DEVELOPMENT/decisions/](docs/7-DEVELOPMENT/decisions/) |
-| Contribution process (issue-first, PRs) | [docs/7-DEVELOPMENT/contributing.md](docs/7-DEVELOPMENT/contributing.md) |
+| Contribution process (Discussions → Issues → PRs) | [docs/7-DEVELOPMENT/contributing.md](docs/7-DEVELOPMENT/contributing.md) |
 | User/operator docs (install, configure, troubleshoot) | [docs/](docs/index.md) |
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5129c2f4..1ec87c24 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
 ## [1.14.0] - 2026-07-20
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 682f0a89..61563f0d 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -19,11 +19,12 @@ All contribution guidelines have been consolidated into the new development docu
 
 ---
 
-## The Issue-First Workflow
+## The Contribution Workflow
 
-**TL;DR**: For anything non-trivial — features, architecture changes — create an issue first, get
-it assigned, THEN code. Small obvious fixes (typos, docs, tiny bugs) can go straight to a PR.
-Already coded something bigger? Mark the PR as draft and open the issue — triage takes 1–2 days.
+**TL;DR**: Feature requests, product/design/architecture proposals, and other non-trivial ideas
+start in [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/new?category=ideas).
+Reproducible bugs start in Issues. Coding starts from an approved and assigned Issue. Small obvious
+fixes (typos, docs, tiny bugs) can still go straight to a PR.
 
 This prevents wasted effort and ensures your work aligns with the project. [See details →](docs/7-DEVELOPMENT/contributing.md)
 
diff --git a/README.md b/README.md
index c05be979..3d42f2e1 100644
--- a/README.md
+++ b/README.md
@@ -319,7 +319,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 - **Enhanced Citations**: Improved layout and finer control for source citations
 - **Multiple Chat Sessions**: Manage different conversations within notebooks
 
-See the [open issues](https://github.com/lfnovo/open-notebook/issues) for a full list of proposed features and known issues.
+Explore [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/ideas) for proposed features and product ideas, and [open Issues](https://github.com/lfnovo/open-notebook/issues) for known bugs and approved work.
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
 
@@ -335,7 +335,8 @@ See the [open issues](https://github.com/lfnovo/open-notebook/issues) for a full
 ### Join the Community
 - 💬 **[Discord Server](https://discord.gg/37XJPXfz2w)** - Get help, share ideas, and connect with other users
 - 𝕏 **[Follow @lfnovo on X](https://x.com/lfnovo)** - Project updates and news from the maintainer
-- 🐛 **[GitHub Issues](https://github.com/lfnovo/open-notebook/issues)** - Report bugs and request features
+- 💡 **[GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions)** - Ask questions and shape features, product direction, design, and architecture
+- 🐛 **[GitHub Issues](https://github.com/lfnovo/open-notebook/issues)** - Report reproducible bugs and find approved work
 - ⭐ **Star this repo** - Show your support and help others discover Open Notebook
 
 ### Contributing
@@ -361,7 +362,8 @@ Open Notebook is MIT licensed. See the [LICENSE](LICENSE) file for details.
 **Community Support**:
 - 💬 [Discord Server](https://discord.gg/37XJPXfz2w) - Get help, share ideas, and connect with users
 - 𝕏 [Follow @lfnovo on X](https://x.com/lfnovo) - Project updates and news from the maintainer
-- 🐛 [GitHub Issues](https://github.com/lfnovo/open-notebook/issues) - Report bugs and request features
+- 💡 [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions) - Ask questions and shape ideas
+- 🐛 [GitHub Issues](https://github.com/lfnovo/open-notebook/issues) - Report reproducible bugs and find approved work
 - 🌐 [Website](https://www.open-notebook.ai) - Learn more about the project
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
diff --git a/docs/6-TROUBLESHOOTING/faq.md b/docs/6-TROUBLESHOOTING/faq.md
index ded082a6..f11ff231 100644
--- a/docs/6-TROUBLESHOOTING/faq.md
+++ b/docs/6-TROUBLESHOOTING/faq.md
@@ -229,8 +229,8 @@ ESPERANTO_LLM_TIMEOUT=180  # 3 minutes for model inference
 
 1. Check the troubleshooting guides in this section
 2. Search existing GitHub issues
-3. Ask in the Discord community
-4. Create a GitHub issue with detailed information
+3. Ask in [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/q-a) or the Discord community
+4. If you found a reproducible bug, create a GitHub Issue with detailed information
 
 ### How do I report a bug?
 
@@ -246,7 +246,8 @@ Submit to: [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
 ### Where can I get help?
 
 - **Discord**: https://discord.gg/37XJPXfz2w (fastest)
-- **GitHub Issues**: Bug reports and feature requests
+- **GitHub Discussions**: Questions, ideas, and feature requests
+- **GitHub Issues**: Reproducible bug reports
 - **Documentation**: This docs site
 
 ---
diff --git a/docs/7-DEVELOPMENT/contributing.md b/docs/7-DEVELOPMENT/contributing.md
index 38e5ec3e..628b8ee2 100644
--- a/docs/7-DEVELOPMENT/contributing.md
+++ b/docs/7-DEVELOPMENT/contributing.md
@@ -2,27 +2,34 @@
 
 Thank you for your interest in contributing to Open Notebook! We welcome contributions from developers of all skill levels. This guide will help you understand our contribution workflow and what makes a good contribution.
 
-## 🚦 Issue-First Workflow (for anything non-trivial)
+## 🚦 Discussions for Ideas, Issues for Work
 
-**To maintain project coherence and avoid wasted effort, non-trivial work starts with an issue:**
+Open Notebook separates **exploration** from **execution**:
 
-1. **Create an issue first** - Before writing any code, create an issue describing the bug or feature
-2. **Propose your solution** - Explain how you plan to implement the fix or feature
-3. **Wait for assignment** - A maintainer will review and assign the issue to you if approved
-4. **Only then start coding** - This ensures your work aligns with the project's vision and architecture
+- **Feature requests, ideas, behavior changes, product/design/architecture proposals, and contribution proposals start in [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/new?category=ideas).** This is where the community explores the problem and maintainers make the product or design decision.
+- **Reproducible bugs start in [GitHub Issues](https://github.com/lfnovo/open-notebook/issues/new/choose).**
+- **Implementation starts from an approved Issue.** Once an idea is sufficiently clear and accepted, a maintainer creates an Issue from the Discussion, scopes it, and assigns it before coding begins.
 
-**When you can skip the issue and just open a PR:**
+This means non-trivial contributions follow one of two paths:
+
+```text
+Idea or feature → Discussion → decision → approved Issue → code → PR
+Reproducible bug               → triaged Issue  → code → PR
+```
+
+**When you can skip both and just open a PR:**
 - Typos, broken links, and small documentation clarifications
 - Small, obvious bug fixes — a few lines, one clear right answer, no design decisions
 - Translation fixes or completing missing i18n keys
 
-**When an issue is definitely required first:**
+**When a Discussion is definitely required first:**
 - New features, of any size
 - Architecture or structural changes
 - Breaking changes
+- Product, UX, or behavior changes
 - Anything where the *how* has more than one reasonable answer
 
-**Already coded something sizeable without an issue?** Don't throw it away: mark the PR as **draft**, open an issue describing the problem and your approach, and link it from the PR. Our triage is fast — expect a call within 1–2 days.
+**Already coded something sizeable without prior discussion or an approved Issue?** Don't throw it away: mark the PR as **draft**. Open a Discussion for a feature or design proposal, or an Issue for a reproducible bug, and link it from the PR. A maintainer will help route the work.
 
 **Why this process?**
 - Prevents duplicate work
@@ -30,7 +37,7 @@ Thank you for your interest in contributing to Open Notebook! We welcome contrib
 - Saves your time by getting feedback before coding
 - Helps maintainers manage the project direction
 
-> ⚠️ **Non-trivial pull requests without an issue may be closed**, even if the code is good. We want to respect your time by making sure work is aligned before it starts.
+> ⚠️ **Non-trivial pull requests without an approved Issue may be closed**, even if the code is good. A Discussion is where an idea is explored; an Issue is the project's commitment to execute it.
 
 ## Code of Conduct
 
@@ -51,15 +58,16 @@ By participating in this project, you are expected to uphold our [Code of Conduc
 
 ### Suggesting Features
 
-1. **Search existing issues** - Check if the feature was already suggested
-2. **Create a feature request** - Use the [Feature Request template](https://github.com/lfnovo/open-notebook/issues/new?template=feature_request.yml)
-3. **Explain the value** - Describe why this feature would be helpful
-4. **Propose implementation** - If you have ideas on how to implement it, share them
-5. **Indicate if you want to build it** - Check the "I would like to work on this" box if you're interested
+1. **Search existing Discussions and Issues** - Check whether the problem is already being explored or worked on
+2. **Start an Idea Discussion** - Use the [Ideas form](https://github.com/lfnovo/open-notebook/discussions/new?category=ideas)
+3. **Start with the problem and outcome** - Explain what you are trying to do, what is difficult today, and what success would look like
+4. **Add possible directions if useful** - Implementation ideas and references are welcome, but not required
+5. **Join the exploration** - Help answer questions, evaluate trade-offs, or test prototypes
+6. **Wait for graduation before coding** - If accepted, the proposal becomes one or more approved Issues that can be assigned
 
 ### Contributing Code (Pull Requests)
 
-**IMPORTANT: Follow the issue-first workflow above before starting any PR**
+**IMPORTANT: For non-trivial work, start from an approved and assigned Issue before coding. Ideas reach that point through Discussions; reproducible bugs reach it through Issue triage.**
 
 Once your issue is assigned:
 
@@ -85,7 +93,7 @@ Once your issue is assigned:
 - Have clear commit messages
 
 ❌ **We may close PRs that:**
-- Are non-trivial and don't have an associated approved issue (small obvious fixes are exempt — see the issue-first workflow above)
+- Are non-trivial and don't have an associated approved Issue (small obvious fixes are exempt — see the workflow above)
 - Introduce breaking changes without discussion
 - Conflict with our architectural vision
 - Lack tests or documentation
@@ -96,7 +104,7 @@ Once your issue is assigned:
 A large share of contributions — including our own — are written with coding agents (Claude Code, Cursor, Copilot, etc.). That's welcome. The tool doesn't change the contract; **the operator does not stop being the author**:
 
 1. **You own the PR.** You must have read, understood, and be able to explain every line of the diff. "The agent wrote it" is never an answer in review.
-2. **Issue-first still applies to anything non-trivial.** Agents make it cheap to produce large unsolicited PRs — those get closed like any other unassigned PR, regardless of code quality. (Small obvious fixes are exempt, same as for humans; a sizeable PR without an issue can be converted to draft while its issue goes through triage.)
+2. **Discussion before commitment; approved Issue before implementation.** Agents make it cheap to produce large unsolicited PRs — those get closed like any other unassigned PR, regardless of code quality. Small obvious fixes are exempt. For larger work, use a Discussion to shape an idea or an Issue to report a reproducible bug, then wait for an approved work item.
 3. **Tests must have actually run.** Paste real output. An agent *claiming* tests pass is not test evidence.
 4. **Point your agent at the right context.** The repo ships `AGENTS.md` files (root, `open_notebook/`, `frontend/`) with the normative rules, and [change-playbooks.md](change-playbooks.md) with step-by-step recipes — agents that read them produce PRs that pass review faster.
 5. **Keep it scoped.** Agents tend to "improve" surrounding code along the way. Unrelated refactors belong in separate issues/PRs.
@@ -200,8 +208,8 @@ We're actively looking for contributions in these areas:
 ### Community Support
 
 - **Discord**: [Join our Discord server](https://discord.gg/37XJPXfz2w) for real-time help
-- **GitHub Discussions**: For longer-form questions and ideas
-- **GitHub Issues**: For bug reports and feature requests
+- **GitHub Discussions**: For questions, ideas, features, product direction, design, and architecture
+- **GitHub Issues**: For reproducible bugs and approved work items
 
 ### Documentation References
 
diff --git a/docs/7-DEVELOPMENT/index.md b/docs/7-DEVELOPMENT/index.md
index d4a1eae4..45759f18 100644
--- a/docs/7-DEVELOPMENT/index.md
+++ b/docs/7-DEVELOPMENT/index.md
@@ -12,7 +12,7 @@ Start with **[Contributing Guide](contributing.md)** for the workflow, then chec
 - **[Code Standards](code-standards.md)** - How to write code that fits our style
 - **[Testing](testing.md)** - How to write and run tests
 
-**First time?** Check out our [Contributing Guide](contributing.md) for the issue-first workflow.
+**First time?** Check out our [Contributing Guide](contributing.md) for the Discussions → Issues → PRs workflow.
 
 ### 🔒 I Want to Understand Security Practices
 
@@ -66,7 +66,7 @@ repo root, `open_notebook/`, and `frontend/`.
 |---|---|---|
 | [Quick Start](quick-start.md) | New developers | Clone, install, and verify setup (5 min) |
 | [Development Setup](development-setup.md) | Local development | Complete environment setup guide |
-| [Contributing](contributing.md) | Code contributors | Workflow: issue → code → PR |
+| [Contributing](contributing.md) | Community & code contributors | Workflow: Discussion → Issue → PR |
 | [Code Standards](code-standards.md) | Writing code | Style guides for Python, FastAPI, DB |
 | [Testing](testing.md) | Testing code | How to write and run tests |
 | [Architecture](architecture.md) | Understanding system | System design, tech stack, workflows |
@@ -102,8 +102,8 @@ See GitHub Issues labeled `good first issue` or `help wanted`.
 ## 💬 Getting Help
 
 - **Discord**: [Join our server](https://discord.gg/37XJPXfz2w) for real-time discussions
-- **GitHub Discussions**: For architecture questions
-- **GitHub Issues**: For bugs and features
+- **GitHub Discussions**: For questions, ideas, features, product direction, design, and architecture
+- **GitHub Issues**: For reproducible bugs and approved work items
 
 Don't be shy! We're here to help new contributors succeed.
 
diff --git a/docs/7-DEVELOPMENT/maintainer-guide.md b/docs/7-DEVELOPMENT/maintainer-guide.md
index 4edd5349..c9070be1 100644
--- a/docs/7-DEVELOPMENT/maintainer-guide.md
+++ b/docs/7-DEVELOPMENT/maintainer-guide.md
@@ -4,51 +4,97 @@ This guide is for project maintainers to help manage contributions effectively w
 
 ## Table of Contents
 
+- [Discussion Management](#discussion-management)
 - [Issue Management](#issue-management)
 - [Pull Request Review](#pull-request-review)
 - [Merging PR Batches](#merging-pr-batches)
 - [Common Scenarios](#common-scenarios)
 - [Communication Templates](#communication-templates)
 
+## Discussion Management
+
+Discussions are the intake and deliberation space for feature requests, ideas,
+behavior changes, product direction, design, architecture, and contribution
+proposals. An accepted idea becomes an Issue only when it is sufficiently clear
+to track and execute.
+
+### When a New Idea Discussion Is Created
+
+**1. Initial triage** (within 24-48 hours when possible)
+
+- Confirm that it is an idea or open-ended proposal rather than a reproducible bug.
+- Search Discussions, Issues, PRs, `VISION.md`, and decision records for related context.
+- Merge the signal into a canonical Discussion when the topic already exists; preserve links to the original author and contribution.
+- Replace `needs-triage` with `needs-vision` when the question is *whether/why* the project should pursue it, or `needs-design` when the problem is wanted but the *how* remains open.
+
+**2. Shape the conversation**
+
+Ask for missing evidence rather than an implementation plan by default:
+
+- What is the user trying to accomplish?
+- What is difficult today, and how do they work around it?
+- Who else has the same use case?
+- Which constraints, alternatives, or failure modes matter?
+- How would we validate that the outcome is better?
+
+For larger proposals, keep a synthesis in the Discussion body or a maintainer
+comment: what is known, what remains open, alternatives, and the decision owner.
+
+**3. Close the loop**
+
+Every mature Discussion ends with an explicit outcome:
+
+- **Accepted:** create one or more scoped Issues from the Discussion, replace inherited discovery labels with `ready`, link them in both directions, and close the Discussion as resolved.
+- **Experiment:** describe the bounded experiment and the evidence needed before a commitment.
+- **Parked:** state why it is not timely and what condition would reopen it.
+- **Declined:** explain the conflict with vision, scope, or maintenance cost.
+- **Superseded/duplicate:** link the canonical Discussion or initiative.
+
+Creating an Issue is the graduation event: it means the project has committed to
+track executable work, not merely that the idea received positive reactions.
+
 ## Issue Management
 
-### When a New Issue is Created
+### When a New Issue Is Created
 
-**1. Initial Triage** (within 24-48 hours)
+**1. Initial triage** (within 24-48 hours when possible)
 
-- Issues arrive with the intake label `needs-triage` (applied by the issue templates). Triage replaces it with exactly **one state label** from the funnel below (or closes the issue).
+- Public Issues arrive through the bug or installation forms with `needs-triage`.
+- Maintainers also create Issues when accepted Discussions graduate into executable work.
 - Add one **type** and one **area** label where they apply (see [Labels](#labels)).
 
-- Quick assessment:
-  - Is it clear and well-described?
-  - Is it aligned with the product vision? (See [VISION.md](../../VISION.md))
-  - Does it duplicate an existing issue?
+Quick assessment:
 
-**2. Initial Response**
+- Is it a reproducible bug or an already approved work item?
+- Does it duplicate an existing Issue?
+- Does it need more reproduction details or environment information?
+- If it is an idea, feature request, or open-ended proposal, convert it to a Discussion and explain the workflow.
+
+**2. Initial response**
 
 ```markdown
 Thanks for opening this issue! We'll review it and get back to you soon.
 
 [If it's a bug] In the meantime, have you checked our troubleshooting guide?
-
-[If it's a feature] You might find our [vision](https://github.com/lfnovo/open-notebook/blob/main/VISION.md) helpful for understanding what we're building toward.
 ```
 
-**3. Decision Making**
+**3. Bug triage**
 
 Ask yourself:
-- Does this align with our [vision and principles](../../VISION.md)?
-- Is this something we want in the core project, or better as a plugin/extension?
-- Do we have the capacity to support this feature long-term?
-- Will this benefit most users, or just a specific use case?
 
-**4. Issue Assignment**
+- Can it be reproduced from the supplied steps and environment?
+- Is more information required from the reporter?
+- Is it already fixed, a duplicate, or rooted in an upstream dependency?
+- Is the expected behavior actually a product/design decision? If so, open or link a Discussion before defining the fix.
+
+**4. Issue assignment**
 
 If the contributor checked "I am a developer and would like to work on this":
 
-**For Accepted Issues:**
+**For triaged Issues:**
+
 ```markdown
-Great idea! This aligns well with our goals, particularly [specific design principle].
+Thanks for the clear report. We've confirmed this as work the project should track.
 
 I see you'd like to work on this. Before you start:
 
@@ -59,7 +105,8 @@ I see you'd like to work on this. Before you start:
 Looking forward to your thoughts!
 ```
 
-**For Issues Needing Clarification:**
+**For Issues needing clarification:**
+
 ```markdown
 Thanks for offering to work on this! Before we proceed, we need to clarify a few things:
 
@@ -69,30 +116,37 @@ Thanks for offering to work on this! Before we proceed, we need to clarify a few
 Once we have these details, we can discuss the best approach.
 ```
 
-**For Issues Not Aligned with Vision:**
+**For an idea opened as an Issue:**
+
 ```markdown
-Thank you for the suggestion and for offering to work on this!
+Thank you for the proposal! We use GitHub Discussions for feature requests,
+product/design/architecture ideas, and contribution proposals so the community
+can explore them before they become implementation commitments.
 
-After reviewing against our [vision and principles](https://github.com/lfnovo/open-notebook/blob/main/VISION.md), we've decided not to pursue this in the core project because [specific reason].
-
-However, you might be able to achieve this through [alternative approach, if applicable].
-
-We appreciate your interest in contributing! Feel free to check out our [open issues](https://github.com/lfnovo/open-notebook/issues) for other ways to contribute.
+I'm converting this Issue to a Discussion. If the direction is accepted and
+sufficiently scoped, we'll create an approved Issue from it before implementation.
 ```
 
 ### Labels
 
 The label set is curated — **don't invent labels**. If something doesn't fit, raise it instead of adding one. Assign **one state**, **one type**, and **one area** where each applies; multiple bundling/ecosystem labels are fine.
 
-**State funnel** — every open issue lands in exactly one state:
+**Discovery states** — primarily used on Discussions. Historical Issues may retain
+these while the backlog is migrated; do not newly route feature proposals into Issues:
 
 | Label | Meaning |
 |---|---|
-| `needs-triage` | Intake — applied by the issue templates, means "not triaged yet" |
+| `needs-triage` | New signal not yet classified |
 | `needs-vision` | Unsure if/how this fits — strategic call for the maintainers (against [VISION.md](../../VISION.md)) |
 | `needs-design` | Wanted, but the *how* isn't resolved — needs design/spec before it's ready |
+
+**Issue delivery states:**
+
+| Label | Meaning |
+|---|---|
+| `needs-triage` | New bug or installation report not yet triaged |
 | `needs-info` | Waiting on the reporter to confirm or provide more information |
-| `ready` | Fully specified — the dev loop can pick it up |
+| `ready` | Approved and sufficiently specified — the dev loop can pick it up |
 | **Close** | Use GitHub's native close reasons (duplicate / not planned); link the canonical issue when duplicate/superseded |
 
 **Type** — what kind of work it is (apply one when clear):
@@ -129,14 +183,14 @@ The label set is curated — **don't invent labels**. If something doesn't fit,
 - `good first issue` — small, well-scoped, newcomer-friendly
 - `help wanted` — we'd welcome a contributor to take this
 
-### Consolidation: one issue vs. umbrella
+### Consolidation: Discussion vs. umbrella
 
 When several open issues circle the same topic, pick the model by **how decided the work is** — not just by shared theme:
 
-- **Pre-vision / pre-design topic** → collapse into **one** issue (`needs-vision` or `needs-design`), capture each request's signal (👍 counts, interested contributors) in its body, and close the rest as duplicates pointing to it. A topic isn't N issues — it's one thinking space.
+- **Pre-vision / pre-design topic** → create or select **one canonical Discussion**, capture each request's signal (👍 counts, interested contributors) in its synthesis, and convert/link the related Issues or Discussions to it. A topic isn't N work items — it's one thinking space.
 - **Already decomposed into real parallel tasks** → use `umbrella` + `tracked-in-umbrella`. Children stay open because each is independently pickable (e.g. the multi-user umbrella #712).
 
-Rule of thumb: if the issues can't be worked until *we* make a call, they're one issue. If the call is made and the work splits into things a contributor could pick up today, they're an umbrella with children. **Never close an issue that has an active assignee/contributor or open PR** — link it as a phase instead.
+Rule of thumb: if work cannot start until *we* make a call, it belongs in a Discussion. If the call is made and the work splits into things a contributor could pick up today, it belongs in an umbrella with child Issues. **Never convert or close an Issue that has an active assignee/contributor or open PR without coordinating with them** — link it as a phase instead.
 
 ## Pull Request Review
 
@@ -144,14 +198,14 @@ Rule of thumb: if the issues can't be worked until *we* make a call, they're one
 
 **Before diving into code:**
 
-- [ ] Is there an associated approved issue?
+- [ ] Is there an associated approved Issue?
 - [ ] Does the PR reference the issue number?
 - [ ] Is the PR description clear about what changed and why?
 - [ ] Did the contributor check the relevant boxes in the PR template?
 - [ ] Are there tests? Screenshots (for UI changes)?
 
 **Red Flags** (may require closing PR):
-- No associated issue on a non-trivial change (small obvious fixes are exempt; sizeable PRs can be converted to draft while their issue goes through triage)
+- No associated approved Issue on a non-trivial change (small obvious fixes are exempt; sizeable PRs should become drafts while an idea goes through Discussion or a bug goes through Issue triage)
 - Issue was not assigned to contributor
 - PR tries to solve multiple unrelated problems
 - Breaking changes without discussion
@@ -256,13 +310,13 @@ Let me know what you prefer!
 
 ### Scenario 2: PR Without Assigned Issue
 
-**Situation**: Contributor submitted PR without going through issue approval process.
+**Situation**: Contributor submitted a non-trivial PR without an approved and assigned Issue.
 
 **Response:**
 ```markdown
 Thanks for the PR! I appreciate you taking the time to contribute.
 
-However, to maintain project coherence, we require all PRs to be linked to an approved issue that was assigned to the contributor. This is explained in our [Contributing Guide](contributing.md).
+However, to maintain project coherence, we require non-trivial PRs to be linked to an approved Issue that was assigned to the contributor. Small obvious fixes remain exempt. This is explained in our [Contributing Guide](contributing.md).
 
 This helps us:
 - Ensure work aligns with project vision
@@ -270,14 +324,15 @@ This helps us:
 - Discuss approach before implementation
 
 Could you please:
-1. Create an issue describing this change
-2. Wait for it to be reviewed and assigned to you
-3. We can then reopen this PR or you can create a new one
+1. Mark this PR as draft
+2. Start a Discussion if this is a feature/design proposal, or an Issue if it fixes a reproducible bug
+3. Wait for an approved Issue to be scoped and assigned
+4. We can then continue with this PR
 
 Sorry for the inconvenience - this process helps us manage the project effectively.
 ```
 
-### Scenario 3: Feature Request Not Aligned with Vision
+### Scenario 3: Idea Discussion Not Aligned with Vision
 
 **Situation**: Well-intentioned feature that doesn't fit project goals.
 
@@ -422,7 +477,7 @@ This will be included in the next release.
 
 ### Be Responsive
 
-- Respond to issues within 48 hours (even just to acknowledge)
+- Respond to new Discussions and Issues within 48 hours when possible (even just to acknowledge)
 - Review PRs within a week when possible
 - Keep contributors updated on status
 - Close stale issues/PRs to keep things tidy
@@ -438,7 +493,7 @@ Ask yourself:
 
 If you're unsure, it's perfectly fine to:
 - Ask for input from other maintainers
-- Start a discussion issue
+- Start or link a GitHub Discussion
 - Sleep on it before making a decision
 
 ---

From b3e8328e38b26438d6f9b103b8e2c831ca2277ca Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 24 Jul 2026 17:53:21 -0300
Subject: [PATCH 253/345] =?UTF-8?q?feat(frontend):=20Quiet=20Green=20desig?=
 =?UTF-8?q?n=20foundation=20=E2=80=94=20tokens,=20fonts,=20primitives,=20/?=
 =?UTF-8?q?dev/design=20(#1218)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(frontend): design foundation — Quiet Green tokens, fonts, primitives, /dev/design

- Port the ratified design token system into globals.css: core palette,
  semantic surfaces/ink/hairlines, content-type hues, evidence classes,
  context states, squared 4-6px radii, shadow scale (popovers own the
  only real shadow)
- Swap Inter for Bricolage Grotesque (display) + Instrument Sans (UI) +
  Spline Sans Mono (data) via next/font
- Restyle shadcn primitives to the foundation laws: fern primary button,
  red reserved for destructive, hairline cards without default shadow,
  underline tabs, quiet neutral badges, teal focus ring, single-shadow
  overlays
- Add /dev/design living styleguide (dev-only, 404 in production)
  rendering all tokens and primitives with a theme toggle

* refactor(frontend): sweep hard-coded palette colors into design tokens

Replace raw Tailwind palette classes (red/amber/green/blue/emerald/sky/
purple…) across 38 components with the semantic token utilities:
errors -> destructive, warnings -> warn (clay), success -> fern,
system/info -> teal, context states -> ctx-* tokens, model-type chips
redistributed over the owned palette. Light/dark duplicates collapse
into single token classes since tokens re-resolve per theme.

* docs: changelog entry for the Quiet Green design foundation
---
 CHANGELOG.md                                  |   3 +
 .../advanced/components/RebuildEmbeddings.tsx |  10 +-
 .../advanced/components/SystemInfo.tsx        |   2 +-
 .../notebooks/components/NoteEditorDialog.tsx |   2 +-
 .../notebooks/components/NotebookCard.tsx     |   2 +-
 .../components/NotebookDeleteDialog.tsx       |   2 +-
 .../notebooks/components/NotebookHeader.tsx   |   2 +-
 .../notebooks/components/NotebookRow.tsx      |   2 +-
 .../notebooks/components/NotesColumn.tsx      |   2 +-
 .../src/app/(dashboard)/podcasts/page.tsx     |   2 +-
 frontend/src/app/(dashboard)/search/page.tsx  |   4 +-
 .../(dashboard)/settings/api-keys/page.tsx    |  10 +-
 frontend/src/app/(dashboard)/sources/page.tsx |   2 +-
 .../components/TransformationCard.tsx         |   2 +-
 .../components/TransformationEditorDialog.tsx |   4 +-
 frontend/src/app/dev/design/page.tsx          | 506 ++++++++++++++++++
 frontend/src/app/globals.css                  | 411 +++++++++++---
 frontend/src/app/layout.tsx                   |  26 +-
 frontend/src/components/auth/LoginForm.tsx    |   4 +-
 .../src/components/common/ConfirmDialog.tsx   |   2 +-
 .../components/common/ContextIndicator.tsx    |   6 +-
 .../src/components/common/ContextToggle.tsx   |   8 +-
 .../src/components/common/ErrorBoundary.tsx   |   6 +-
 .../src/components/layout/SetupBanner.tsx     |  20 +-
 .../src/components/podcasts/EpisodeCard.tsx   |  20 +-
 .../podcasts/EpisodeProfilesPanel.tsx         |   4 +-
 .../podcasts/SpeakerProfilesPanel.tsx         |   2 +-
 .../forms/EpisodeProfileFormDialog.tsx        |  16 +-
 .../forms/SpeakerProfileFormDialog.tsx        |  14 +-
 .../components/settings/CredentialItem.tsx    |  10 +-
 .../settings/EmbeddingModelChangeDialog.tsx   |   2 +-
 .../components/settings/MigrationBanner.tsx   |  10 +-
 .../settings/ModelTestResultDialog.tsx        |   2 +-
 .../components/settings/ProviderSection.tsx   |   2 +-
 .../components/sources/AddSourceDialog.tsx    |   2 +-
 .../src/components/sources/MessageActions.tsx |   2 +-
 .../sources/NotebookAssociations.tsx          |   2 +-
 .../src/components/sources/SourceCard.tsx     |  34 +-
 .../sources/SourceDetailContent.tsx           |   2 +-
 .../sources/steps/SourceTypeStep.tsx          |   4 +-
 frontend/src/components/ui/alert-dialog.tsx   |   2 +-
 frontend/src/components/ui/badge.tsx          |   8 +-
 frontend/src/components/ui/button.tsx         |  10 +-
 frontend/src/components/ui/card.tsx           |   2 +-
 frontend/src/components/ui/dialog.tsx         |   2 +-
 frontend/src/components/ui/dropdown-menu.tsx  |   2 +-
 frontend/src/components/ui/input.tsx          |   2 +-
 .../src/components/ui/markdown-renderer.tsx   |   2 +-
 frontend/src/components/ui/popover.tsx        |   2 +-
 frontend/src/components/ui/select.tsx         |   4 +-
 frontend/src/components/ui/tabs.tsx           |   4 +-
 frontend/src/components/ui/textarea.tsx       |   2 +-
 frontend/src/components/ui/tooltip.tsx        |   4 +-
 frontend/src/lib/providers.tsx                |   8 +-
 54 files changed, 995 insertions(+), 227 deletions(-)
 create mode 100644 frontend/src/app/dev/design/page.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1ec87c24..5ca9bce0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+- **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
+
 ### Changed
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
diff --git a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
index f5fb1d11..46b552f0 100644
--- a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
@@ -226,10 +226,10 @@ export function RebuildEmbeddings() {
           <div className="space-y-4">
             <div className="flex items-center justify-between">
               <div className="flex items-center gap-2">
-                {status.status === 'queued' && <Clock className="h-5 w-5 text-yellow-500" />}
-                {status.status === 'running' && <Loader2 className="h-5 w-5 text-blue-500 animate-spin" />}
-                {status.status === 'completed' && <CheckCircle2 className="h-5 w-5 text-green-500" />}
-                {status.status === 'failed' && <XCircle className="h-5 w-5 text-red-500" />}
+                {status.status === 'queued' && <Clock className="h-5 w-5 text-warn" />}
+                {status.status === 'running' && <Loader2 className="h-5 w-5 text-teal animate-spin" />}
+                {status.status === 'completed' && <CheckCircle2 className="h-5 w-5 text-fern" />}
+                {status.status === 'failed' && <XCircle className="h-5 w-5 text-destructive" />}
                 <div className="flex flex-col">
                   <span className="font-medium">
                     {status.status === 'queued' && t('advanced.rebuild.queued')}
@@ -261,7 +261,7 @@ export function RebuildEmbeddings() {
                 </div>
                 <Progress value={progressPercent} className="h-2" />
                 {failedItems > 0 && (
-                  <p className="text-sm text-yellow-600">
+                  <p className="text-sm text-warn">
                     ⚠️ {t('advanced.rebuild.failedItems', { count: failedItems })}
                   </p>
                 )}
diff --git a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
index 53926155..b3bc9fd8 100644
--- a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
@@ -69,7 +69,7 @@ export function SystemInfo() {
                 {t('advanced.updateAvailable', { version: config.latestVersion || '' })}
               </Badge>
             ) : config?.latestVersion ? (
-              <Badge variant="outline" className="text-green-600 border-green-600">
+              <Badge variant="outline" className="text-fern border-fern/30">
                 {t('advanced.upToDate')}
               </Badge>
             ) : (
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
index 7de09bcf..977f14ac 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NoteEditorDialog.tsx
@@ -186,7 +186,7 @@ export function NoteEditorDialog({ open, onOpenChange, notebookId, note }: NoteE
                   )}
                 />
                 {errors.content && (
-                  <p className="text-sm text-red-600 mt-1">{errors.content.message}</p>
+                  <p className="text-sm text-destructive mt-1">{errors.content.message}</p>
                 )}
               </div>
             </>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
index 687491de..53045d1d 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
@@ -90,7 +90,7 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
                       e.stopPropagation()
                       setShowDeleteDialog(true)
                     }}
-                    className="text-red-600"
+                    className="text-destructive"
                   >
                     <Trash2 className="h-4 w-4 mr-2" />
                     {t('common.delete')}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
index fbc3cfb4..4424477a 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
@@ -149,7 +149,7 @@ export function NotebookDeleteDialog({
           <AlertDialogAction
             onClick={handleConfirm}
             disabled={isDeleting || isLoadingPreview}
-            className="bg-red-600 hover:bg-red-700"
+            className="bg-destructive text-white hover:bg-destructive/90"
           >
             {isDeleting ? (
               <>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
index e1ad7754..73405d88 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
@@ -89,7 +89,7 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
                 variant="outline"
                 size="sm"
                 onClick={() => setShowDeleteDialog(true)}
-                className="text-red-600 hover:text-red-700"
+                className="text-destructive hover:text-destructive"
               >
                 <Trash2 className="h-4 w-4 mr-2" />
                 {t('common.delete')}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
index db4a1b80..ed94ab7e 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
@@ -122,7 +122,7 @@ export function NotebookRow({ notebook }: NotebookRowProps) {
                 e.stopPropagation()
                 setShowDeleteDialog(true)
               }}
-              className="text-red-600"
+              className="text-destructive"
             >
               <Trash2 className="h-4 w-4 mr-2" />
               {t('common.delete')}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index 618a94d9..88005f5f 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -190,7 +190,7 @@ export function NotesColumn({
                                 e.stopPropagation()
                                 handleDeleteClick(note.id)
                               }}
-                              className="text-red-600 focus:text-red-600"
+                              className="text-destructive focus:text-destructive"
                             >
                               <Trash2 className="h-4 w-4 mr-2" />
                               {t('notebooks.deleteNote')}
diff --git a/frontend/src/app/(dashboard)/podcasts/page.tsx b/frontend/src/app/(dashboard)/podcasts/page.tsx
index 2dddabc7..eeefa63f 100644
--- a/frontend/src/app/(dashboard)/podcasts/page.tsx
+++ b/frontend/src/app/(dashboard)/podcasts/page.tsx
@@ -36,7 +36,7 @@ export default function PodcastsPage() {
           </header>
 
           {hasUnconfiguredProfiles ? (
-            <Alert className="bg-amber-50 text-amber-900 border-amber-200">
+            <Alert className="bg-warn-tint text-warn border-warn/30">
               <AlertTriangle className="h-4 w-4" />
               <AlertTitle>{t('podcasts.setupRequired')}</AlertTitle>
               <AlertDescription>
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 7dc92af6..607c3e5a 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -210,7 +210,7 @@ export default function SearchPage() {
 
                 {/* Models Display */}
                 {!hasEmbeddingModel ? (
-                  <div className="flex items-center gap-2 p-3 text-sm text-amber-600 dark:text-amber-500 bg-amber-50 dark:bg-amber-950/20 rounded-md">
+                  <div className="flex items-center gap-2 p-3 text-sm text-warn bg-warn-tint rounded-md">
                     <AlertCircle className="h-4 w-4" />
                     <span>{t('searchPage.noEmbeddingModel')}</span>
                   </div>
@@ -358,7 +358,7 @@ export default function SearchPage() {
                   <div className="space-y-2" role="group" aria-labelledby="search-type-label">
                     <span id="search-type-label" className="text-sm font-medium leading-none">{t('searchPage.searchType')}</span>
                     {!hasEmbeddingModel && (
-                      <div className="flex items-center gap-2 text-sm text-amber-600 dark:text-amber-500">
+                      <div className="flex items-center gap-2 text-sm text-warn">
                         <AlertCircle className="h-4 w-4" />
                         <span>{t('searchPage.vectorSearchWarning')}</span>
                       </div>
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 016782ba..3dbfd689 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -100,11 +100,11 @@ export default function ApiKeysPage() {
 
           {/* Encryption warning */}
           {!encryptionReady && (
-            <Alert className="border-red-500/50 bg-red-50 dark:bg-red-950/20">
-              <ShieldAlert className="h-4 w-4 text-red-600 dark:text-red-400" />
-              <AlertTitle className="text-red-800 dark:text-red-200">{t('apiKeys.encryptionRequired')}</AlertTitle>
-              <AlertDescription className="text-red-700 dark:text-red-300">
-                <code className="text-xs bg-red-100 dark:bg-red-900/30 px-1 py-0.5 rounded">
+            <Alert className="border-destructive/30 bg-destructive-tint">
+              <ShieldAlert className="h-4 w-4 text-destructive" />
+              <AlertTitle className="text-destructive">{t('apiKeys.encryptionRequired')}</AlertTitle>
+              <AlertDescription className="text-destructive">
+                <code className="text-xs bg-destructive-tint px-1 py-0.5 rounded">
                   {t('apiKeys.encryptionRequiredDescription')}
                 </code>
               </AlertDescription>
diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index 28a1b99f..79807536 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -294,7 +294,7 @@ export default function SourcesPage() {
     if (error) {
       return (
         <div className="flex h-full items-center justify-center">
-          <p className="text-red-500">{error}</p>
+          <p className="text-destructive">{error}</p>
         </div>
       )
     }
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
index c3395666..aa3c3a71 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationCard.tsx
@@ -70,7 +70,7 @@ export function TransformationCard({ transformation, onPlayground, onEdit }: Tra
                 <Button
                   variant="ghost"
                   size="sm"
-                  className="text-red-600 hover:text-red-700"
+                  className="text-destructive hover:text-destructive"
                   onClick={() => setShowDeleteDialog(true)}
                 >
                   <Trash2 className="h-4 w-4" />
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
index 34c3b180..19da43fb 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
@@ -180,7 +180,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                     )}
                   />
                   {errors.name && (
-                    <p className="text-sm text-red-600 mt-1">{errors.name.message}</p>
+                    <p className="text-sm text-destructive mt-1">{errors.name.message}</p>
                   )}
                 </div>
 
@@ -295,7 +295,7 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
                   )}
                 />
                 {errors.prompt && (
-                  <p className="text-sm text-red-600 mt-1">{errors.prompt.message}</p>
+                  <p className="text-sm text-destructive mt-1">{errors.prompt.message}</p>
                 )}
                  <p className="text-xs text-muted-foreground mt-3">
                    {t('transformations.promptHint')}
diff --git a/frontend/src/app/dev/design/page.tsx b/frontend/src/app/dev/design/page.tsx
new file mode 100644
index 00000000..2fba5b43
--- /dev/null
+++ b/frontend/src/app/dev/design/page.tsx
@@ -0,0 +1,506 @@
+"use client"
+
+// Living styleguide for the "Quiet Green" design foundation.
+// Dev-only: returns 404 in production builds. Not translated on purpose —
+// this is an internal spec artifact, not user-facing UI.
+
+import { notFound } from "next/navigation"
+import { useState } from "react"
+import { Moon, Plus, Sun, Trash2, Search, Sparkles } from "lucide-react"
+
+import { useTheme } from "@/lib/stores/theme-store"
+
+import { Button } from "@/components/ui/button"
+import { Badge } from "@/components/ui/badge"
+import {
+  Card,
+  CardHeader,
+  CardTitle,
+  CardDescription,
+  CardContent,
+  CardFooter,
+} from "@/components/ui/card"
+import { Input } from "@/components/ui/input"
+import { Textarea } from "@/components/ui/textarea"
+import { Label } from "@/components/ui/label"
+import { Tabs, TabsList, TabsTrigger, TabsContent } from "@/components/ui/tabs"
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select"
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+  DialogTrigger,
+} from "@/components/ui/dialog"
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu"
+import {
+  Popover,
+  PopoverContent,
+  PopoverTrigger,
+} from "@/components/ui/popover"
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipTrigger,
+} from "@/components/ui/tooltip"
+import { Separator } from "@/components/ui/separator"
+import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert"
+import { Progress } from "@/components/ui/progress"
+import { Checkbox } from "@/components/ui/checkbox"
+
+const HUES = [
+  ["fern", "acts — THE action green"],
+  ["sage", "web / gathering"],
+  ["gold", "notes & pdf"],
+  ["teal", "AI / system voice"],
+  ["plum", "video"],
+  ["mauve", "audio"],
+  ["slate", "paper / external"],
+  ["violet", "derived insight"],
+  ["clay", "warn / degraded"],
+] as const
+
+const TYPE_HUES = [
+  "video",
+  "pdf",
+  "web",
+  "audio",
+  "paper",
+  "note",
+  "ai",
+  "insight",
+] as const
+
+const CITE_CLASSES = ["source", "note", "derived", "external"] as const
+
+const SURFACES = [
+  ["--bg", "bg — app canvas"],
+  ["--bg-deep", "bg-deep — rails, wells"],
+  ["--surface", "surface — reading surface"],
+  ["--surface-raised", "surface-raised — popovers, inputs"],
+  ["--surface-recessed", "surface-recessed"],
+  ["--surface-sunken", "surface-sunken — kbd, wells"],
+] as const
+
+const INKS = [
+  ["--ink", "ink — primary text"],
+  ["--ink-soft", "ink-soft — secondary"],
+  ["--ink-faint", "ink-faint — metadata"],
+  ["--ink-faintest", "ink-faintest — disabled"],
+] as const
+
+const SHADOWS = [
+  ["--shadow-soft", "soft — panels, cards"],
+  ["--shadow-lift", "lift — hover"],
+  ["--shadow-pop", "pop — popovers own it"],
+  ["--shadow-overlay", "overlay — modal sheets"],
+] as const
+
+const RADII = [
+  ["--radius-sm", "sm 4px — chips, small buttons"],
+  ["--radius-md", "md 5px — controls, inputs"],
+  ["--radius-lg", "lg 5px — cards"],
+  ["--radius-xl", "xl 6px — panels, overlays"],
+] as const
+
+function SectionTitle({ children }: { children: React.ReactNode }) {
+  return (
+    <h2 className="font-display text-xl font-bold tracking-tight mt-10 mb-4">
+      {children}
+    </h2>
+  )
+}
+
+function Swatch({ varName, label }: { varName: string; label: string }) {
+  return (
+    <div className="flex items-center gap-3">
+      <div
+        className="size-9 shrink-0 rounded-sm border"
+        style={{ backgroundColor: `var(${varName})` }}
+      />
+      <div className="min-w-0">
+        <div className="font-mono text-xs">{varName}</div>
+        <div className="text-xs text-muted-foreground truncate">{label}</div>
+      </div>
+    </div>
+  )
+}
+
+function Sheet() {
+  const [progress] = useState(62)
+  const { isDark, setTheme } = useTheme()
+
+  return (
+    <div className="bg-background text-foreground p-8">
+      <header className="mb-2 flex items-start justify-between gap-4">
+        <div>
+          <h1 className="font-display text-2xl font-bold tracking-tight">
+            Quiet Green — design foundation
+          </h1>
+          <p className="text-sm text-muted-foreground mt-1">
+            fern acts · teal speaks · red destroys · warn is clay · color never
+            washes a reading surface · popovers own the one real shadow
+          </p>
+        </div>
+        <Button
+          variant="outline"
+          size="icon"
+          aria-label="Toggle theme"
+          onClick={() => setTheme(isDark ? "light" : "dark")}
+        >
+          {isDark ? <Sun /> : <Moon />}
+        </Button>
+      </header>
+
+      <SectionTitle>Core palette</SectionTitle>
+      <div className="grid grid-cols-2 lg:grid-cols-3 gap-3">
+        {HUES.map(([hue, note]) => (
+          <div key={hue} className="flex items-center gap-2">
+            <div
+              className="size-9 shrink-0 rounded-sm border"
+              style={{ backgroundColor: `var(--${hue})` }}
+            />
+            <div
+              className="size-9 shrink-0 rounded-sm border"
+              style={{ backgroundColor: `var(--${hue}-tint)` }}
+            />
+            <div className="min-w-0">
+              <div className="font-mono text-xs">--{hue}</div>
+              <div className="text-xs text-muted-foreground truncate">
+                {note}
+              </div>
+            </div>
+          </div>
+        ))}
+      </div>
+
+      <SectionTitle>Surfaces &amp; ink</SectionTitle>
+      <div className="grid grid-cols-2 lg:grid-cols-3 gap-3">
+        {SURFACES.map(([v, label]) => (
+          <Swatch key={v} varName={v} label={label} />
+        ))}
+      </div>
+      <div className="mt-4 space-y-1">
+        {INKS.map(([v, label]) => (
+          <div key={v} className="text-sm" style={{ color: `var(${v})` }}>
+            The quick brown fox — <span className="font-mono text-xs">{label}</span>
+          </div>
+        ))}
+      </div>
+
+      <SectionTitle>Typography</SectionTitle>
+      <div className="space-y-3">
+        <div className="font-display text-2xl font-bold">
+          Display — Bricolage Grotesque 700
+        </div>
+        <div className="text-sm">
+          Body — Instrument Sans. Reading text stays on neutral surfaces;
+          color is information, never decoration.
+        </div>
+        <div className="font-mono text-xs">
+          Mono — Spline Sans Mono · for data, not prose · 128 chunks · 04:32
+        </div>
+      </div>
+
+      <SectionTitle>Content-type hues (dots, ticks, chips — never washes)</SectionTitle>
+      <div className="flex flex-wrap gap-2">
+        {TYPE_HUES.map((t) => (
+          <span
+            key={t}
+            className="inline-flex items-center gap-1.5 rounded-sm border bg-popover px-2 py-0.5 text-xs font-medium"
+          >
+            <span
+              className="size-2 rounded-full"
+              style={{ backgroundColor: `var(--type-${t})` }}
+            />
+            {t}
+          </span>
+        ))}
+      </div>
+
+      <SectionTitle>Evidence classes (citation chips)</SectionTitle>
+      <div className="flex flex-wrap items-center gap-2">
+        {CITE_CLASSES.map((c, i) => (
+          <span
+            key={c}
+            className="inline-flex items-center gap-1.5 rounded-sm border bg-popover px-1.5 py-0.5 font-mono text-[10.5px]"
+          >
+            <span
+              className="size-1.5 rounded-full"
+              style={{ backgroundColor: `var(--cite-${c})` }}
+            />
+            {i + 1} · {c}
+          </span>
+        ))}
+        <span className="inline-flex items-center gap-1.5 rounded-sm border border-dashed bg-transparent px-1.5 py-0.5 font-mono text-[10.5px] text-muted-foreground">
+          ◦ synthesis
+        </span>
+      </div>
+      <div className="mt-3 rounded-md border p-3 text-sm" style={{ backgroundColor: "var(--excerpt-wash)" }}>
+        Cited passage sits on the one sanctioned tinted background —{" "}
+        <mark className="rounded-[2px] px-0.5" style={{ backgroundColor: "var(--best-match)", color: "inherit" }}>
+          the best-match sentence is a step stronger
+        </mark>
+        .
+      </div>
+
+      <SectionTitle>Context states (per-source inclusion)</SectionTitle>
+      <div className="flex flex-wrap gap-2">
+        <span className="inline-flex items-center gap-1.5 rounded-sm border px-2 py-0.5 text-xs font-medium" style={{ backgroundColor: "var(--ctx-full-tint)", color: "var(--ctx-full)" }}>
+          FULL
+        </span>
+        <span className="inline-flex items-center gap-1.5 rounded-sm border px-2 py-0.5 text-xs font-medium" style={{ backgroundColor: "var(--ctx-insights-tint)", color: "var(--ctx-insights)" }}>
+          INSIGHTS
+        </span>
+        <span className="inline-flex items-center gap-1.5 rounded-sm border px-2 py-0.5 text-xs font-medium" style={{ backgroundColor: "var(--ctx-off-bg)", color: "var(--ctx-off-ink)" }}>
+          OFF
+        </span>
+      </div>
+
+      <SectionTitle>Radii &amp; shadows</SectionTitle>
+      <div className="grid grid-cols-2 lg:grid-cols-4 gap-3">
+        {RADII.map(([v, label]) => (
+          <div key={v} className="flex items-center gap-3">
+            <div
+              className="size-9 shrink-0 border bg-popover"
+              style={{ borderRadius: `var(${v})` }}
+            />
+            <div className="text-xs text-muted-foreground">{label}</div>
+          </div>
+        ))}
+      </div>
+      <div className="mt-4 grid grid-cols-2 lg:grid-cols-4 gap-4">
+        {SHADOWS.map(([v, label]) => (
+          <div
+            key={v}
+            className="rounded-md border bg-card p-4 text-xs text-muted-foreground"
+            style={{ boxShadow: `var(${v})` }}
+          >
+            {label}
+          </div>
+        ))}
+      </div>
+
+      <SectionTitle>Buttons</SectionTitle>
+      <div className="flex flex-wrap items-center gap-3">
+        <Button>
+          <Plus /> New source
+        </Button>
+        <Button variant="secondary">Secondary</Button>
+        <Button variant="outline">Outline</Button>
+        <Button variant="ghost">Ghost</Button>
+        <Button variant="link">Link</Button>
+        <Button variant="destructive">
+          <Trash2 /> Delete
+        </Button>
+        <Button disabled>Disabled</Button>
+        <Button size="sm">Small</Button>
+        <Button size="icon" aria-label="Search">
+          <Search />
+        </Button>
+      </div>
+
+      <SectionTitle>Badges</SectionTitle>
+      <div className="flex flex-wrap items-center gap-2">
+        <Badge>Default</Badge>
+        <Badge variant="secondary">Secondary</Badge>
+        <Badge variant="outline">Outline</Badge>
+        <Badge variant="destructive">Failed</Badge>
+        <Badge variant="secondary">
+          <span className="size-2 rounded-full" style={{ backgroundColor: "var(--type-pdf)" }} />
+          PDF
+        </Badge>
+        <Badge variant="secondary">
+          <Sparkles className="text-teal" /> AI
+        </Badge>
+      </div>
+
+      <SectionTitle>Card</SectionTitle>
+      <div className="grid gap-4 lg:grid-cols-2 max-w-3xl">
+        <Card>
+          <CardHeader>
+            <CardTitle>Attention is all you need</CardTitle>
+            <CardDescription>
+              Hairline border, no default shadow — surfaces separate with
+              lines, not depth.
+            </CardDescription>
+          </CardHeader>
+          <CardContent className="text-sm">
+            The dominant sequence transduction models are based on complex
+            recurrent or convolutional neural networks.
+          </CardContent>
+          <CardFooter className="gap-2">
+            <Button size="sm" variant="outline">
+              Open
+            </Button>
+            <Button size="sm" variant="ghost">
+              Save as note
+            </Button>
+          </CardFooter>
+        </Card>
+        <Card className="card-hover">
+          <CardHeader>
+            <CardTitle>Hover me</CardTitle>
+            <CardDescription>card-hover raises the surface.</CardDescription>
+          </CardHeader>
+        </Card>
+      </div>
+
+      <SectionTitle>Tabs</SectionTitle>
+      <Tabs defaultValue="content" className="max-w-md">
+        <TabsList>
+          <TabsTrigger value="content">Content</TabsTrigger>
+          <TabsTrigger value="insights">Insights</TabsTrigger>
+          <TabsTrigger value="chat">Chat</TabsTrigger>
+        </TabsList>
+        <TabsContent value="content" className="pt-3 text-sm text-muted-foreground">
+          Underline tabs — the active one carries a fern spine.
+        </TabsContent>
+        <TabsContent value="insights" className="pt-3 text-sm text-muted-foreground">
+          Insights speak with the teal voice.
+        </TabsContent>
+        <TabsContent value="chat" className="pt-3 text-sm text-muted-foreground">
+          Chat content.
+        </TabsContent>
+      </Tabs>
+
+      <SectionTitle>Forms</SectionTitle>
+      <div className="max-w-md space-y-4">
+        <div className="space-y-2">
+          <Label htmlFor={`name-input`}>Notebook name</Label>
+          <Input id="name-input" placeholder="e.g. Transformer papers" />
+        </div>
+        <div className="space-y-2">
+          <Label>Model</Label>
+          <Select>
+            <SelectTrigger className="w-full">
+              <SelectValue placeholder="Pick a model" />
+            </SelectTrigger>
+            <SelectContent>
+              <SelectItem value="a">claude-sonnet-5</SelectItem>
+              <SelectItem value="b">gpt-5.2</SelectItem>
+              <SelectItem value="c">gemini-3-flash</SelectItem>
+            </SelectContent>
+          </Select>
+        </div>
+        <Textarea placeholder="Describe what you want to research…" />
+        <div className="flex items-center gap-6">
+          <label className="flex items-center gap-2 text-sm">
+            <Checkbox defaultChecked /> Include insights
+          </label>
+          <label className="flex items-center gap-2 text-sm">
+            <Checkbox /> Auto-embed
+          </label>
+        </div>
+        <Progress value={progress} />
+      </div>
+
+      <SectionTitle>Overlays</SectionTitle>
+      <div className="flex flex-wrap items-center gap-3">
+        <Dialog>
+          <DialogTrigger asChild>
+            <Button variant="outline">Open dialog</Button>
+          </DialogTrigger>
+          <DialogContent className="sm:max-w-md">
+            <DialogHeader>
+              <DialogTitle>Rename notebook</DialogTitle>
+              <DialogDescription>
+                Overlays use the one real shadow and 6px corners.
+              </DialogDescription>
+            </DialogHeader>
+            <Input placeholder="Notebook name" />
+            <DialogFooter>
+              <Button variant="ghost">Cancel</Button>
+              <Button>Save</Button>
+            </DialogFooter>
+          </DialogContent>
+        </Dialog>
+
+        <DropdownMenu>
+          <DropdownMenuTrigger asChild>
+            <Button variant="outline">Dropdown</Button>
+          </DropdownMenuTrigger>
+          <DropdownMenuContent>
+            <DropdownMenuLabel>Source</DropdownMenuLabel>
+            <DropdownMenuItem>Open</DropdownMenuItem>
+            <DropdownMenuItem>Save as note</DropdownMenuItem>
+            <DropdownMenuSeparator />
+            <DropdownMenuItem variant="destructive">Delete</DropdownMenuItem>
+          </DropdownMenuContent>
+        </DropdownMenu>
+
+        <Popover>
+          <PopoverTrigger asChild>
+            <Button variant="outline">Popover</Button>
+          </PopoverTrigger>
+          <PopoverContent className="text-sm">
+            Popovers own the pop shadow.
+          </PopoverContent>
+        </Popover>
+
+        <Tooltip>
+          <TooltipTrigger asChild>
+            <Button variant="ghost">Tooltip</Button>
+          </TooltipTrigger>
+          <TooltipContent>Quiet ink tooltip</TooltipContent>
+        </Tooltip>
+      </div>
+
+      <SectionTitle>Feedback</SectionTitle>
+      <div className="max-w-xl space-y-3">
+        <Alert>
+          <Sparkles className="size-4" />
+          <AlertTitle>Embedding complete</AlertTitle>
+          <AlertDescription>
+            All 128 chunks are searchable now.
+          </AlertDescription>
+        </Alert>
+        <Alert variant="destructive">
+          <Trash2 className="size-4" />
+          <AlertTitle>Processing failed</AlertTitle>
+          <AlertDescription>
+            Red only ever means destructive or broken.
+          </AlertDescription>
+        </Alert>
+      </div>
+
+      <Separator className="my-10" />
+      <p className="text-xs text-muted-foreground">
+        Canonical tokens: <span className="font-mono">frontend/src/app/globals.css</span> ·
+        laws &amp; component inventory: design foundation doc.
+      </p>
+    </div>
+  )
+}
+
+// Dark overrides only redefine raw tokens; aliases (e.g. --popover:
+// var(--surface-raised)) resolve where they are DECLARED (:root = <html>),
+// so themes only switch correctly via the `dark` class on the document root —
+// a nested `.dark` wrapper inherits already-resolved light values. Hence one
+// theme at a time here, toggled through the app's real theme store.
+export default function DesignPage() {
+  if (process.env.NODE_ENV === "production") {
+    notFound()
+  }
+
+  return (
+    <div className="min-h-screen">
+      <Sheet />
+    </div>
+  )
+}
diff --git a/frontend/src/app/globals.css b/frontend/src/app/globals.css
index 9a1e0c8a..b5c5b267 100644
--- a/frontend/src/app/globals.css
+++ b/frontend/src/app/globals.css
@@ -4,11 +4,26 @@
 
 @variant dark (&:where(.dark, .dark *));
 
+/* ============================================================================
+   OPEN NOTEBOOK — DESIGN FOUNDATION ("Quiet Green")
+
+   The laws, in one breath:
+     fern acts · teal speaks (AI/system voice) · red destroys, and only destroys
+     warn is clay, never the action hues · color never washes a reading surface
+     hairline borders, near-zero shadows — popovers own the one real shadow
+     geometry is squared, 4–6px, floor is 4 · mono is for data, not prose
+
+   Layering: raw palette + semantic raws live in :root and are overridden by
+   `.dark`; every alias defined with var() re-resolves automatically — never
+   duplicate aliases into the dark block.
+   ========================================================================== */
+
 @theme inline {
   --color-background: var(--background);
   --color-foreground: var(--foreground);
-  --font-sans: var(--font-geist-sans);
-  --font-mono: var(--font-geist-mono);
+  --font-sans: var(--font-instrument-sans), "Helvetica Neue", Arial, sans-serif;
+  --font-mono: var(--font-spline-mono), ui-monospace, "SF Mono", Menlo, monospace;
+  --font-display: var(--font-bricolage), "Avenir Next", "Trebuchet MS", sans-serif;
   --color-sidebar-ring: var(--sidebar-ring);
   --color-sidebar-border: var(--sidebar-border);
   --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
@@ -26,6 +41,7 @@
   --color-input: var(--input);
   --color-border: var(--border);
   --color-destructive: var(--destructive);
+  --color-destructive-tint: var(--danger-tint);
   --color-accent-foreground: var(--accent-foreground);
   --color-accent: var(--accent);
   --color-muted-foreground: var(--muted-foreground);
@@ -33,84 +49,319 @@
   --color-secondary-foreground: var(--secondary-foreground);
   --color-secondary: var(--secondary);
   --color-primary-foreground: var(--primary-foreground);
+  --color-primary-hover: var(--primary-hover);
   --color-primary: var(--primary);
   --color-popover-foreground: var(--popover-foreground);
   --color-popover: var(--popover);
   --color-card-foreground: var(--card-foreground);
   --color-card: var(--card);
-  --radius-sm: calc(var(--radius) - 4px);
-  --radius-md: calc(var(--radius) - 2px);
-  --radius-lg: var(--radius);
-  --radius-xl: calc(var(--radius) + 4px);
+
+  /* owned hues — exposed as utilities (bg-fern, text-teal, border-gold…) */
+  --color-fern: var(--fern);
+  --color-fern-deep: var(--fern-deep);
+  --color-fern-tint: var(--fern-tint);
+  --color-sage: var(--sage);
+  --color-sage-deep: var(--sage-deep);
+  --color-sage-tint: var(--sage-tint);
+  --color-gold: var(--gold);
+  --color-gold-deep: var(--gold-deep);
+  --color-gold-tint: var(--gold-tint);
+  --color-teal: var(--teal);
+  --color-teal-deep: var(--teal-deep);
+  --color-teal-tint: var(--teal-tint);
+  --color-plum: var(--plum);
+  --color-plum-tint: var(--plum-tint);
+  --color-mauve: var(--mauve);
+  --color-mauve-deep: var(--mauve-deep);
+  --color-mauve-tint: var(--mauve-tint);
+  --color-slate-hue: var(--slate);
+  --color-slate-hue-deep: var(--slate-deep);
+  --color-slate-hue-tint: var(--slate-tint);
+  --color-violet-hue: var(--violet);
+  --color-violet-hue-deep: var(--violet-deep);
+  --color-violet-hue-tint: var(--violet-tint);
+  --color-clay: var(--clay);
+  --color-clay-deep: var(--clay-deep);
+  --color-clay-tint: var(--clay-tint);
+  --color-warn: var(--warn);
+  --color-warn-tint: var(--warn-tint);
+
+  /* content-type hues — dots, ticks, chips only; never washes */
+  --color-type-video: var(--type-video);
+  --color-type-video-soft: var(--type-video-soft);
+  --color-type-pdf: var(--type-pdf);
+  --color-type-pdf-soft: var(--type-pdf-soft);
+  --color-type-web: var(--type-web);
+  --color-type-web-soft: var(--type-web-soft);
+  --color-type-audio: var(--type-audio);
+  --color-type-audio-soft: var(--type-audio-soft);
+  --color-type-paper: var(--type-paper);
+  --color-type-paper-soft: var(--type-paper-soft);
+  --color-type-note: var(--type-note);
+  --color-type-note-soft: var(--type-note-soft);
+  --color-type-ai: var(--type-ai);
+  --color-type-ai-soft: var(--type-ai-soft);
+  --color-type-insight: var(--type-insight);
+  --color-type-insight-soft: var(--type-insight-soft);
+
+  /* evidence classes — citation chips & popovers */
+  --color-cite-source: var(--cite-source);
+  --color-cite-note: var(--cite-note);
+  --color-cite-derived: var(--cite-derived);
+  --color-cite-external: var(--cite-external);
+  --color-cite-synthesis: var(--cite-synthesis);
+  --color-cite-warn: var(--cite-warn);
+  --color-excerpt-wash: var(--excerpt-wash);
+
+  /* context states — per-source inclusion */
+  --color-ctx-full: var(--ctx-full);
+  --color-ctx-full-tint: var(--ctx-full-tint);
+  --color-ctx-insights: var(--ctx-insights);
+  --color-ctx-insights-tint: var(--ctx-insights-tint);
+
+  /* shape — squared: instrument, not toy; floor is 4px */
+  --radius-sm: 4px;
+  --radius-md: 5px;
+  --radius-lg: 5px;
+  --radius-xl: 6px;
+
+  /* depth — hairlines separate; popovers own the one real shadow */
+  --shadow-soft: var(--shadow-soft);
+  --shadow-lift: var(--shadow-lift);
+  --shadow-pop: var(--shadow-pop);
+  --shadow-overlay: var(--shadow-overlay);
 }
 
 :root {
-  --radius: 0.65rem;
-  --background: oklch(1 0 0);
-  --foreground: oklch(0.141 0.005 285.823);
-  --card: oklch(1 0 0);
-  --card-foreground: oklch(0.141 0.005 285.823);
-  --popover: oklch(1 0 0);
-  --popover-foreground: oklch(0.141 0.005 285.823);
-  --primary: oklch(0.623 0.214 259.815);
-  --primary-foreground: oklch(0.97 0.014 254.604);
-  --secondary: oklch(0.967 0.001 286.375);
-  --secondary-foreground: oklch(0.21 0.006 285.885);
-  --muted: oklch(0.967 0.001 286.375);
-  --muted-foreground: oklch(0.552 0.016 285.938);
-  --accent: oklch(0.967 0.001 286.375);
-  --accent-foreground: oklch(0.21 0.006 285.885);
-  --destructive: oklch(0.577 0.245 27.325);
-  --border: oklch(0.92 0.004 286.32);
-  --input: oklch(0.92 0.004 286.32);
-  --ring: oklch(0.623 0.214 259.815);
-  --chart-1: oklch(0.646 0.222 41.116);
-  --chart-2: oklch(0.6 0.118 184.704);
-  --chart-3: oklch(0.398 0.07 227.392);
-  --chart-4: oklch(0.828 0.189 84.429);
-  --chart-5: oklch(0.769 0.188 70.08);
-  --sidebar: oklch(0.985 0 0);
-  --sidebar-foreground: oklch(0.141 0.005 285.823);
-  --sidebar-primary: oklch(0.623 0.214 259.815);
-  --sidebar-primary-foreground: oklch(0.97 0.014 254.604);
-  --sidebar-accent: oklch(0.92 0.01 286.375);
-  --sidebar-accent-foreground: oklch(0.21 0.006 285.885);
-  --sidebar-border: oklch(0.92 0.004 286.32);
-  --sidebar-ring: oklch(0.623 0.214 259.815);
+  /* --------------------------------------------------------------
+     core palette — the owned hues, red-free
+     -------------------------------------------------------------- */
+  --fern: #2e6b4f;
+  --fern-deep: #245740;
+  --fern-tint: #dfeae2;
+
+  --sage: #5e7a54;
+  --sage-deep: #47603f;
+  --sage-tint: #e5ebdc;
+
+  --gold: #a97b12;
+  --gold-deep: #7c5a05;
+  --gold-tint: #f3ead3;
+
+  --teal: #0e7268;
+  --teal-deep: #095a51;
+  --teal-tint: #ddece8;
+
+  --plum: #5d4991;
+  --plum-tint: #eae6f3;
+
+  --mauve: #8d5b80;
+  --mauve-deep: #714566;
+  --mauve-tint: #f1e5ee;
+
+  --slate: #4e6b84;
+  --slate-deep: #3a5468;
+  --slate-tint: #e1e8ee;
+
+  --violet: #6e51a6;
+  --violet-deep: #57408a;
+  --violet-tint: #ebe5f5;
+
+  --clay: #b0451f;
+  --clay-deep: #93330f;
+  --clay-tint: #f5e4db;
+
+  /* --------------------------------------------------------------
+     semantic raws — surfaces, ink, hairlines, action, danger
+     -------------------------------------------------------------- */
+  --bg: #f5f5f2;
+  --bg-deep: #eeeee9;
+  --surface: #fefefc;
+  --surface-raised: #ffffff;
+  --surface-recessed: #f4f4f0;
+  --surface-sunken: #ecece7;
+
+  --ink: #23252a;
+  --ink-soft: #565a61;
+  --ink-faint: #878b92;
+  --ink-faintest: #a8abb1;
+
+  --line: #e0e0da;
+  --line-soft: #e8e8e2;
+  --line-strong: #23252a;
+
+  --primary: #2e6b4f;
+  --primary-hover: #245740;
+  --on-primary: #f1f8f3;
+
+  --danger: #b0432d;
+  --danger-deep: #93341f;
+  --danger-tint: #f5e4df;
+
+  --warn: var(--clay);
+  --warn-deep: var(--clay-deep);
+  --warn-tint: var(--clay-tint);
+
+  /* teal evidence washes — the one sanctioned tinted text bg */
+  --excerpt-wash: #ecf3f0;
+  --best-match: rgba(14, 114, 104, 0.16);
+  --best-match-ring: rgba(14, 114, 104, 0.16);
+
+  /* depth */
+  --shadow-soft: 0 1px 2px rgba(35, 37, 42, 0.06);
+  --shadow-lift: 0 1px 3px rgba(35, 37, 42, 0.1);
+  --shadow-pop: 0 1px 2px rgba(35, 37, 42, 0.08), 0 8px 26px rgba(35, 37, 42, 0.13);
+  --shadow-overlay: 0 2px 6px rgba(35, 37, 42, 0.1), 0 16px 44px rgba(35, 37, 42, 0.18);
+
+  /* --------------------------------------------------------------
+     aliases — re-resolve automatically in dark; defined once
+     -------------------------------------------------------------- */
+  /* content-type hues */
+  --type-video: var(--plum);
+  --type-video-soft: var(--plum-tint);
+  --type-pdf: var(--gold);
+  --type-pdf-soft: var(--gold-tint);
+  --type-web: var(--sage);
+  --type-web-soft: var(--sage-tint);
+  --type-audio: var(--mauve);
+  --type-audio-soft: var(--mauve-tint);
+  --type-paper: var(--slate);
+  --type-paper-soft: var(--slate-tint);
+  --type-note: var(--gold);
+  --type-note-soft: var(--gold-tint);
+  --type-ai: var(--teal);
+  --type-ai-soft: var(--teal-tint);
+  --type-insight: var(--teal);
+  --type-insight-soft: var(--teal-tint);
+
+  /* evidence classes */
+  --cite-source: var(--teal);
+  --cite-source-deep: var(--teal-deep);
+  --cite-note: var(--gold);
+  --cite-note-deep: var(--gold-deep);
+  --cite-derived: var(--violet);
+  --cite-derived-deep: var(--violet-deep);
+  --cite-external: var(--slate);
+  --cite-external-deep: var(--slate-deep);
+  --cite-synthesis: var(--ink-faint);
+  --cite-warn: var(--clay);
+
+  /* context states */
+  --ctx-full: var(--fern);
+  --ctx-full-tint: var(--fern-tint);
+  --ctx-insights: var(--gold);
+  --ctx-insights-tint: var(--gold-tint);
+  --ctx-off-ink: var(--ink-soft);
+  --ctx-off-bg: var(--surface-raised);
+
+  /* motion — quick and quiet */
+  --motion-fast: 0.12s;
+  --motion-base: 0.15s;
+  --motion-slow: 0.25s;
+
+  /* --------------------------------------------------------------
+     shadcn semantic slots — the contract existing components use
+     -------------------------------------------------------------- */
+  --radius: 5px;
+  --background: var(--bg);
+  --foreground: var(--ink);
+  --card: var(--surface);
+  --card-foreground: var(--ink);
+  --popover: var(--surface-raised);
+  --popover-foreground: var(--ink);
+  --primary-foreground: var(--on-primary);
+  --secondary: var(--surface-recessed);
+  --secondary-foreground: var(--ink);
+  --muted: var(--surface-recessed);
+  --muted-foreground: var(--ink-soft);
+  --accent: var(--surface-sunken);
+  --accent-foreground: var(--ink);
+  --destructive: var(--danger);
+  --border: var(--line);
+  --input: var(--line);
+  --ring: var(--teal);
+  --chart-1: var(--fern);
+  --chart-2: var(--teal);
+  --chart-3: var(--gold);
+  --chart-4: var(--plum);
+  --chart-5: var(--slate);
+  --sidebar: var(--bg-deep);
+  --sidebar-foreground: var(--ink);
+  --sidebar-primary: var(--primary);
+  --sidebar-primary-foreground: var(--on-primary);
+  --sidebar-accent: var(--fern-tint);
+  --sidebar-accent-foreground: var(--ink);
+  --sidebar-border: var(--line);
+  --sidebar-ring: var(--teal);
 }
 
+/* ============================================================================
+   DARK — overrides raw layers only; var() aliases re-resolve on their own
+   ========================================================================== */
 .dark {
-  --background: oklch(0.141 0.005 285.823);
-  --foreground: oklch(0.985 0 0);
-  --card: oklch(0.21 0.006 285.885);
-  --card-foreground: oklch(0.985 0 0);
-  --popover: oklch(0.21 0.006 285.885);
-  --popover-foreground: oklch(0.985 0 0);
-  --primary: oklch(0.546 0.245 262.881);
-  --primary-foreground: oklch(0.985 0 0);
-  --secondary: oklch(0.274 0.006 286.033);
-  --secondary-foreground: oklch(0.985 0 0);
-  --muted: oklch(0.274 0.006 286.033);
-  --muted-foreground: oklch(0.705 0.015 286.067);
-  --accent: oklch(0.274 0.006 286.033);
-  --accent-foreground: oklch(0.985 0 0);
-  --destructive: oklch(0.704 0.191 22.216);
-  --border: oklch(1 0 0 / 10%);
-  --input: oklch(1 0 0 / 15%);
-  --ring: oklch(0.488 0.243 264.376);
-  --chart-1: oklch(0.488 0.243 264.376);
-  --chart-2: oklch(0.696 0.17 162.48);
-  --chart-3: oklch(0.769 0.188 70.08);
-  --chart-4: oklch(0.627 0.265 303.9);
-  --chart-5: oklch(0.645 0.246 16.439);
-  --sidebar: oklch(0.21 0.006 285.885);
-  --sidebar-foreground: oklch(0.985 0 0);
-  --sidebar-primary: oklch(0.546 0.245 262.881);
-  --sidebar-primary-foreground: oklch(0.985 0 0);
-  --sidebar-accent: oklch(0.35 0.01 286.033);
-  --sidebar-accent-foreground: oklch(0.985 0 0);
-  --sidebar-border: oklch(1 0 0 / 10%);
-  --sidebar-ring: oklch(0.488 0.243 264.376);
+  /* core palette */
+  --fern: #55b285;
+  --fern-deep: #6cc298;
+  --fern-tint: #1b2f25;
+  --sage: #93b084;
+  --sage-deep: #a8c299;
+  --sage-tint: #232b1d;
+  --gold: #cfa13e;
+  --gold-deep: #ddb55f;
+  --gold-tint: #322b1b;
+  --teal: #3fb3a5;
+  --teal-deep: #64c5b9;
+  --teal-tint: #16302c;
+  --plum: #a290d3;
+  --plum-tint: #29253a;
+  --mauve: #c892ba;
+  --mauve-deep: #d6a8cb;
+  --mauve-tint: #322230;
+  --slate: #8fafc8;
+  --slate-deep: #a5c1d6;
+  --slate-tint: #212b34;
+  --violet: #a995db;
+  --violet-deep: #bcaae6;
+  --violet-tint: #2b2540;
+  --clay: #f08a5c;
+  --clay-deep: #f5a07a;
+  --clay-tint: #35211a;
+
+  /* semantic raws */
+  --bg: #17181b;
+  --bg-deep: #121316;
+  --surface: #1e2024;
+  --surface-raised: #24262b;
+  --surface-recessed: #24262b;
+  --surface-sunken: #2b2d33;
+
+  --ink: #ecedea;
+  --ink-soft: #a9acb1;
+  --ink-faint: #74777d;
+  --ink-faintest: #63666c;
+
+  --line: #2e3036;
+  --line-soft: #26282d;
+  --line-strong: #ecedea;
+
+  --primary: #3d8e67;
+  --primary-hover: #479e74;
+  --on-primary: #ecf7f0;
+
+  --danger: #df7c63;
+  --danger-deep: #e9937d;
+  --danger-tint: #37231d;
+
+  /* evidence washes */
+  --excerpt-wash: #1c2a28;
+  --best-match: rgba(63, 179, 165, 0.2);
+  --best-match-ring: rgba(63, 179, 165, 0.2);
+
+  /* depth */
+  --shadow-soft: 0 1px 2px rgba(0, 0, 0, 0.35);
+  --shadow-lift: 0 1px 3px rgba(0, 0, 0, 0.45);
+  --shadow-pop: 0 1px 2px rgba(0, 0, 0, 0.45), 0 10px 30px rgba(0, 0, 0, 0.5);
+  --shadow-overlay: 0 2px 6px rgba(0, 0, 0, 0.4), 0 20px 52px rgba(0, 0, 0, 0.55);
 }
 
 @layer base {
@@ -153,35 +404,23 @@
     border-color: var(--sidebar-border);
   }
 
-  /* Enhanced sidebar menu item hover effects */
   .sidebar-menu-item {
-    @apply transition-all duration-200 ease-out;
+    @apply transition-colors duration-150 ease-out;
   }
 
   .sidebar-menu-item:hover {
-    @apply scale-[1.02];
     background-color: var(--sidebar-accent) !important;
-    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.08);
   }
 
-  .dark .sidebar-menu-item:hover {
-    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.25);
-  }
-
-  /* Enhanced hover effects for cards */
+  /* Cards separate with hairlines, not shadows; hover raises the surface */
   .card-hover {
-    @apply transition-all duration-200 cursor-pointer;
+    @apply transition-colors duration-150 cursor-pointer;
   }
 
   .card-hover:hover {
-    background-color: var(--muted) !important;
+    background-color: var(--surface-raised) !important;
     border-color: var(--border);
-    transform: translateY(-1px);
-    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.1);
-  }
-
-  .dark .card-hover:hover {
-    box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+    box-shadow: var(--shadow-lift);
   }
 
   /* Ensure clickable cards show pointer cursor */
diff --git a/frontend/src/app/layout.tsx b/frontend/src/app/layout.tsx
index 6913858e..7bfb86ed 100644
--- a/frontend/src/app/layout.tsx
+++ b/frontend/src/app/layout.tsx
@@ -1,5 +1,9 @@
 import type { Metadata } from "next";
-import { Inter } from "next/font/google";
+import {
+  Bricolage_Grotesque,
+  Instrument_Sans,
+  Spline_Sans_Mono,
+} from "next/font/google";
 import "./globals.css";
 import "katex/dist/katex.min.css";
 import { Toaster } from "@/components/ui/sonner";
@@ -10,7 +14,21 @@ import { ConnectionGuard } from "@/components/common/ConnectionGuard";
 import { themeScript } from "@/lib/theme-script";
 import { I18nProvider } from "@/components/providers/I18nProvider";
 
-const inter = Inter({ subsets: ["latin"] });
+const instrumentSans = Instrument_Sans({
+  subsets: ["latin"],
+  variable: "--font-instrument-sans",
+});
+
+const bricolageGrotesque = Bricolage_Grotesque({
+  subsets: ["latin"],
+  weight: ["600", "700"],
+  variable: "--font-bricolage",
+});
+
+const splineSansMono = Spline_Sans_Mono({
+  subsets: ["latin"],
+  variable: "--font-spline-mono",
+});
 
 export const metadata: Metadata = {
   title: "Open Notebook",
@@ -27,7 +45,9 @@ export default function RootLayout({
       <head>
         <script dangerouslySetInnerHTML={{ __html: themeScript }} />
       </head>
-      <body className={inter.className}>
+      <body
+        className={`${instrumentSans.variable} ${bricolageGrotesque.variable} ${splineSansMono.variable} font-sans`}
+      >
         <ErrorBoundary>
           <ThemeProvider>
             <QueryProvider>
diff --git a/frontend/src/components/auth/LoginForm.tsx b/frontend/src/components/auth/LoginForm.tsx
index 468d289f..c6e784cc 100644
--- a/frontend/src/components/auth/LoginForm.tsx
+++ b/frontend/src/components/auth/LoginForm.tsx
@@ -90,7 +90,7 @@ export function LoginForm() {
           </CardHeader>
           <CardContent>
             <div className="space-y-4">
-              <div className="flex items-start gap-2 text-red-600 text-sm">
+              <div className="flex items-start gap-2 text-destructive text-sm">
                 <AlertCircle className="h-4 w-4 mt-0.5 flex-shrink-0" />
                 <div className="flex-1">
                   {error || t('auth.connectErrorHint')}
@@ -159,7 +159,7 @@ export function LoginForm() {
             </div>
 
             {error && (
-              <div className="flex items-center gap-2 text-red-600 text-sm">
+              <div className="flex items-center gap-2 text-destructive text-sm">
                 <AlertCircle className="h-4 w-4" />
                 {error}
               </div>
diff --git a/frontend/src/components/common/ConfirmDialog.tsx b/frontend/src/components/common/ConfirmDialog.tsx
index d4040769..0d58a1d1 100644
--- a/frontend/src/components/common/ConfirmDialog.tsx
+++ b/frontend/src/components/common/ConfirmDialog.tsx
@@ -49,7 +49,7 @@ export function ConfirmDialog({
           <AlertDialogAction
             onClick={onConfirm}
             disabled={isLoading}
-            className={confirmVariant === 'destructive' ? 'bg-red-600 hover:bg-red-700' : ''}
+            className={confirmVariant === 'destructive' ? 'bg-destructive text-white hover:bg-destructive/90' : ''}
           >
             {isLoading ? (
               <>
diff --git a/frontend/src/components/common/ContextIndicator.tsx b/frontend/src/components/common/ContextIndicator.tsx
index 6de5cd68..ac3a9d05 100644
--- a/frontend/src/components/common/ContextIndicator.tsx
+++ b/frontend/src/components/common/ContextIndicator.tsx
@@ -52,7 +52,7 @@ export function ContextIndicator({
           {sourcesInsights > 0 && (
             <Tooltip>
               <TooltipTrigger asChild>
-                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-amber-600 border-amber-600/50 cursor-default">
+                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-ctx-insights border-ctx-insights/50 cursor-default">
                   <Lightbulb className="h-3 w-3" />
                   <span>{sourcesInsights}</span>
                 </Badge>
@@ -66,7 +66,7 @@ export function ContextIndicator({
           {sourcesFull > 0 && (
             <Tooltip>
               <TooltipTrigger asChild>
-                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50 cursor-default">
+                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-ctx-full border-ctx-full/50 cursor-default">
                   <FileText className="h-3 w-3" />
                   <span>{sourcesFull}</span>
                 </Badge>
@@ -85,7 +85,7 @@ export function ContextIndicator({
             )}
             <Tooltip>
               <TooltipTrigger asChild>
-                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50 cursor-default">
+                <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-ctx-full border-ctx-full/50 cursor-default">
                   <StickyNote className="h-3 w-3" />
                   <span>{notesCount}</span>
                 </Badge>
diff --git a/frontend/src/components/common/ContextToggle.tsx b/frontend/src/components/common/ContextToggle.tsx
index 17dde78e..d9a2cc5c 100644
--- a/frontend/src/components/common/ContextToggle.tsx
+++ b/frontend/src/components/common/ContextToggle.tsx
@@ -40,14 +40,14 @@ export function ContextToggle<TMode extends ContextMode = ContextMode>({
     insights: {
       icon: Lightbulb,
       label: t('common.contextModes.insights'),
-      color: 'text-amber-600',
-      bgColor: 'hover:bg-amber-50'
+      color: 'text-ctx-insights',
+      bgColor: 'hover:bg-ctx-insights-tint'
     },
     full: {
       icon: FileText,
       label: t('common.contextModes.full'),
-      color: 'text-primary',
-      bgColor: 'hover:bg-primary/10'
+      color: 'text-ctx-full',
+      bgColor: 'hover:bg-ctx-full-tint'
     }
   } as const
   const config = MODE_CONFIG[mode]
diff --git a/frontend/src/components/common/ErrorBoundary.tsx b/frontend/src/components/common/ErrorBoundary.tsx
index caf3c38d..2247d0c0 100644
--- a/frontend/src/components/common/ErrorBoundary.tsx
+++ b/frontend/src/components/common/ErrorBoundary.tsx
@@ -56,10 +56,10 @@ export class ErrorBoundary extends React.Component<ErrorBoundaryProps, ErrorBoun
         <div className="min-h-screen flex items-center justify-center bg-background p-4">
           <Card className="w-full max-w-md">
             <CardHeader className="text-center">
-              <div className="mx-auto w-12 h-12 rounded-full bg-red-100 dark:bg-red-900/20 flex items-center justify-center mb-4">
-                <AlertTriangle className="w-6 h-6 text-red-600 dark:text-red-400" />
+              <div className="mx-auto w-12 h-12 rounded-full bg-destructive-tint flex items-center justify-center mb-4">
+                <AlertTriangle className="w-6 h-6 text-destructive" />
               </div>
-              <CardTitle className="text-red-900 dark:text-red-100">{t?.common?.error || 'Something went wrong'}</CardTitle>
+              <CardTitle className="text-destructive">{t?.common?.error || 'Something went wrong'}</CardTitle>
               <CardDescription>
                 {t?.common?.refreshPage || 'An unexpected error occurred. Please try refreshing the page.'}
               </CardDescription>
diff --git a/frontend/src/components/layout/SetupBanner.tsx b/frontend/src/components/layout/SetupBanner.tsx
index 095da9c8..54d2765b 100644
--- a/frontend/src/components/layout/SetupBanner.tsx
+++ b/frontend/src/components/layout/SetupBanner.tsx
@@ -33,18 +33,18 @@ export function SetupBanner() {
   if (!encryptionReady) {
     return (
       <div className="px-4 pt-3">
-        <Alert className="border-red-500/50 bg-red-50 dark:bg-red-950/20">
-          <ShieldAlert className="h-4 w-4 text-red-600 dark:text-red-400" />
-          <AlertTitle className="text-red-800 dark:text-red-200">
+        <Alert className="border-destructive/30 bg-destructive-tint">
+          <ShieldAlert className="h-4 w-4 text-destructive" />
+          <AlertTitle className="text-destructive">
             {t('setupBanner.encryptionRequired')}
           </AlertTitle>
-          <AlertDescription className="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between text-red-700 dark:text-red-300">
+          <AlertDescription className="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between text-destructive">
             <span>{t('setupBanner.encryptionRequiredDescription')}</span>
             <a
               href="https://github.com/lfnovo/open-notebook/blob/main/docs/3-USER-GUIDE/api-configuration.md#encryption-setup"
               target="_blank"
               rel="noopener noreferrer"
-              className="inline-flex items-center shrink-0 text-sm font-medium underline underline-offset-2 hover:text-red-900 dark:hover:text-red-100"
+              className="inline-flex items-center shrink-0 text-sm font-medium underline underline-offset-2 hover:text-destructive/80"
             >
               {t('setupBanner.viewDocs')}
               <ExternalLink className="ml-1 h-3 w-3" />
@@ -57,20 +57,20 @@ export function SetupBanner() {
 
   return (
     <div className="px-4 pt-3">
-      <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
-        <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
-        <AlertTitle className="text-amber-800 dark:text-amber-200">
+      <Alert className="border-warn/30 bg-warn-tint">
+        <AlertTriangle className="h-4 w-4 text-warn" />
+        <AlertTitle className="text-warn">
           {t('setupBanner.migrationAvailable')}
         </AlertTitle>
         <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
-          <span className="text-amber-700 dark:text-amber-300">
+          <span className="text-warn">
             {t('setupBanner.migrationDescription', { count: providersToMigrate.length })}
           </span>
           <Button
             variant="outline"
             size="sm"
             asChild
-            className="shrink-0 border-amber-500 text-amber-700 hover:bg-amber-100 dark:border-amber-400 dark:text-amber-300 dark:hover:bg-amber-900/30"
+            className="shrink-0 border-warn text-warn hover:bg-warn-tint"
           >
             <Link href="/settings/api-keys">
               {t('setupBanner.goToSettings')}
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index 615a22d6..bd260952 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -50,31 +50,31 @@ const getSTATUS_META = (t: TFunction): Record<
 > => ({
   running: {
     label: t('podcasts.processingLabel'),
-    className: 'bg-amber-100 text-amber-800 border-amber-200',
+    className: 'bg-warn-tint text-warn border-warn/30',
   },
   processing: {
     label: t('podcasts.processingLabel'),
-    className: 'bg-amber-100 text-amber-800 border-amber-200',
+    className: 'bg-warn-tint text-warn border-warn/30',
   },
   completed: {
     label: t('podcasts.completedLabel'),
-    className: 'bg-emerald-100 text-emerald-800 border-emerald-200',
+    className: 'bg-fern-tint text-fern border-fern/30',
   },
   failed: {
     label: t('podcasts.failedLabel'),
-    className: 'bg-red-100 text-red-800 border-red-200',
+    className: 'bg-destructive-tint text-destructive border-destructive/30',
   },
   error: {
     label: t('podcasts.failedLabel'),
-    className: 'bg-red-100 text-red-800 border-red-200',
+    className: 'bg-destructive-tint text-destructive border-destructive/30',
   },
   pending: {
     label: t('podcasts.pendingLabel'),
-    className: 'bg-sky-100 text-sky-800 border-sky-200',
+    className: 'bg-teal-tint text-teal border-teal/30',
   },
   submitted: {
     label: t('podcasts.pendingLabel'),
-    className: 'bg-sky-100 text-sky-800 border-sky-200',
+    className: 'bg-teal-tint text-teal border-teal/30',
   },
   unknown: {
     label: t('common.unknown'),
@@ -435,9 +435,9 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
         ) : null}
 
         {isFailed && episode.error_message ? (
-          <div className="rounded-md border border-red-200 bg-red-50 p-3 dark:border-red-900 dark:bg-red-950/30">
-            <p className="text-xs font-medium text-red-800 dark:text-red-300">{t('podcasts.errorDetails')}</p>
-            <p className="mt-1 text-xs whitespace-pre-wrap text-red-700 dark:text-red-400">{episode.error_message}</p>
+          <div className="rounded-md border border-destructive/30 bg-destructive-tint p-3">
+            <p className="text-xs font-medium text-destructive">{t('podcasts.errorDetails')}</p>
+            <p className="mt-1 text-xs whitespace-pre-wrap text-destructive">{episode.error_message}</p>
           </div>
         ) : null}
       </CardContent>
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index ea939728..3d210002 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -98,7 +98,7 @@ export function EpisodeProfilesPanel({
       </div>
 
       {disableCreate ? (
-        <p className="rounded-lg border border-dashed bg-amber-50 p-4 text-sm text-amber-900">
+        <p className="rounded-lg border border-dashed bg-warn-tint p-4 text-sm text-warn">
           {t('podcasts.createSpeakerFirst')}
         </p>
       ) : null}
@@ -125,7 +125,7 @@ export function EpisodeProfilesPanel({
                         {profile.name}
                       </CardTitle>
                       {unconfigured ? (
-                        <Badge variant="outline" className="text-amber-600 border-amber-300 text-xs">
+                        <Badge variant="outline" className="text-warn border-warn/30 text-xs">
                           <AlertTriangle className="h-3 w-3 mr-1" />
                           {t('podcasts.setupRequired')}
                         </Badge>
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index ed1f1dca..f674f6d7 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -103,7 +103,7 @@ export function SpeakerProfilesPanel({
                           {profile.name}
                         </CardTitle>
                         {unconfigured ? (
-                          <Badge variant="outline" className="text-amber-600 border-amber-300 text-xs">
+                          <Badge variant="outline" className="text-warn border-warn/30 text-xs">
                             <AlertTriangle className="h-3 w-3 mr-1" />
                             {t('podcasts.setupRequired')}
                           </Badge>
diff --git a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
index ae88541b..e6c9aeb6 100644
--- a/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/EpisodeProfileFormDialog.tsx
@@ -163,7 +163,7 @@ export function EpisodeProfileFormDialog({
         </DialogHeader>
 
         {speakerProfiles.length === 0 ? (
-          <Alert className="bg-amber-50 text-amber-900 border-amber-200">
+          <Alert className="bg-warn-tint text-warn border-warn/30">
             <AlertTitle>{t('podcasts.noSpeakerProfilesAvailable')}</AlertTitle>
             <AlertDescription>
               {t('podcasts.noSpeakerProfilesDesc')}
@@ -177,7 +177,7 @@ export function EpisodeProfileFormDialog({
               <Label htmlFor="name">{t('podcasts.profileName')} *</Label>
               <Input id="name" placeholder={t('podcasts.profileNamePlaceholder')} {...register('name')} />
               {errors.name ? (
-                <p className="text-xs text-red-600">{errors.name.message}</p>
+                <p className="text-xs text-destructive">{errors.name.message}</p>
               ) : null}
             </div>
 
@@ -192,7 +192,7 @@ export function EpisodeProfileFormDialog({
                 autoComplete="off"
               />
               {errors.num_segments ? (
-                <p className="text-xs text-red-600">{errors.num_segments.message}</p>
+                <p className="text-xs text-destructive">{errors.num_segments.message}</p>
               ) : null}
             </div>
 
@@ -220,7 +220,7 @@ export function EpisodeProfileFormDialog({
               />
               <p className="text-xs text-muted-foreground">{t('podcasts.maxTokensHelp')}</p>
               {errors.max_tokens ? (
-                <p className="text-xs text-red-600">{errors.max_tokens.message}</p>
+                <p className="text-xs text-destructive">{errors.max_tokens.message}</p>
               ) : null}
             </div>
 
@@ -262,7 +262,7 @@ export function EpisodeProfileFormDialog({
                     </SelectContent>
                   </Select>
                   {errors.speaker_config ? (
-                    <p className="text-xs text-red-600">
+                    <p className="text-xs text-destructive">
                       {errors.speaker_config.message}
                     </p>
                   ) : null}
@@ -291,7 +291,7 @@ export function EpisodeProfileFormDialog({
                     placeholder={t('podcasts.selectOutlineModel')}
                   />
                   {errors.outline_llm ? (
-                    <p className="text-xs text-red-600 mt-1">
+                    <p className="text-xs text-destructive mt-1">
                       {errors.outline_llm.message}
                     </p>
                   ) : null}
@@ -320,7 +320,7 @@ export function EpisodeProfileFormDialog({
                     placeholder={t('podcasts.selectTranscriptModel')}
                   />
                   {errors.transcript_llm ? (
-                    <p className="text-xs text-red-600 mt-1">
+                    <p className="text-xs text-destructive mt-1">
                       {errors.transcript_llm.message}
                     </p>
                   ) : null}
@@ -371,7 +371,7 @@ export function EpisodeProfileFormDialog({
               {...register('default_briefing')}
             />
             {errors.default_briefing ? (
-              <p className="text-xs text-red-600">
+              <p className="text-xs text-destructive">
                 {errors.default_briefing.message}
               </p>
             ) : null}
diff --git a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
index ec60798f..73d0eb21 100644
--- a/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
+++ b/frontend/src/components/podcasts/forms/SpeakerProfileFormDialog.tsx
@@ -170,7 +170,7 @@ export function SpeakerProfileFormDialog({
               <Label htmlFor="name">{t('podcasts.profileName')} *</Label>
               <Input id="name" placeholder={t('podcasts.profileNamePlaceholder')} {...register('name')} />
               {errors.name ? (
-                <p className="text-xs text-red-600">{errors.name.message}</p>
+                <p className="text-xs text-destructive">{errors.name.message}</p>
               ) : null}
             </div>
 
@@ -205,7 +205,7 @@ export function SpeakerProfileFormDialog({
                     placeholder={t('podcasts.selectVoiceModel')}
                   />
                   {errors.voice_model ? (
-                    <p className="text-xs text-red-600 mt-1">
+                    <p className="text-xs text-destructive mt-1">
                       {errors.voice_model.message}
                     </p>
                   ) : null}
@@ -263,7 +263,7 @@ export function SpeakerProfileFormDialog({
                       autoComplete="off"
                     />
                     {errors.speakers?.[index]?.name ? (
-                      <p className="text-xs text-red-600">
+                      <p className="text-xs text-destructive">
                         {errors.speakers[index]?.name?.message}
                       </p>
                     ) : null}
@@ -277,7 +277,7 @@ export function SpeakerProfileFormDialog({
                       autoComplete="off"
                     />
                     {errors.speakers?.[index]?.voice_id ? (
-                      <p className="text-xs text-red-600">
+                      <p className="text-xs text-destructive">
                         {errors.speakers[index]?.voice_id?.message}
                       </p>
                     ) : null}
@@ -293,7 +293,7 @@ export function SpeakerProfileFormDialog({
                     autoComplete="off"
                   />
                   {errors.speakers?.[index]?.backstory ? (
-                    <p className="text-xs text-red-600">
+                    <p className="text-xs text-destructive">
                       {errors.speakers[index]?.backstory?.message}
                     </p>
                   ) : null}
@@ -308,7 +308,7 @@ export function SpeakerProfileFormDialog({
                     autoComplete="off"
                   />
                   {errors.speakers?.[index]?.personality ? (
-                    <p className="text-xs text-red-600">
+                    <p className="text-xs text-destructive">
                       {errors.speakers[index]?.personality?.message}
                     </p>
                   ) : null}
@@ -332,7 +332,7 @@ export function SpeakerProfileFormDialog({
             ))}
 
             {speakersArrayError ? (
-              <p className="text-xs text-red-600">{speakersArrayError}</p>
+              <p className="text-xs text-destructive">{speakersArrayError}</p>
             ) : null}
           </div>
 
diff --git a/frontend/src/components/settings/CredentialItem.tsx b/frontend/src/components/settings/CredentialItem.tsx
index 4ce86503..b1d8232a 100644
--- a/frontend/src/components/settings/CredentialItem.tsx
+++ b/frontend/src/components/settings/CredentialItem.tsx
@@ -104,7 +104,7 @@ export function CredentialItem({
           <div className="flex items-center gap-1 shrink-0">
             {testResult && (
               testResult.success
-                ? <Check className="h-4 w-4 text-emerald-500" />
+                ? <Check className="h-4 w-4 text-fern" />
                 : <X className="h-4 w-4 text-destructive" />
             )}
             <Button
@@ -141,10 +141,10 @@ export function CredentialItem({
 
         {/* Decryption error warning */}
         {credential.decryption_error && (
-          <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
-            <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
-            <AlertTitle className="text-amber-800 dark:text-amber-200">{t('apiKeys.decryptionError')}</AlertTitle>
-            <AlertDescription className="text-amber-700 dark:text-amber-300 text-sm">
+          <Alert className="border-warn/30 bg-warn-tint">
+            <AlertTriangle className="h-4 w-4 text-warn" />
+            <AlertTitle className="text-warn">{t('apiKeys.decryptionError')}</AlertTitle>
+            <AlertDescription className="text-warn text-sm">
               {t('apiKeys.decryptionErrorDescription')}
             </AlertDescription>
           </Alert>
diff --git a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
index 3b3289b6..36408684 100644
--- a/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
+++ b/frontend/src/components/settings/EmbeddingModelChangeDialog.tsx
@@ -56,7 +56,7 @@ export function EmbeddingModelChangeDialog({
       <AlertDialogContent className="max-w-lg">
         <AlertDialogHeader>
           <div className="flex items-center gap-2 mb-2">
-            <AlertTriangle className="h-5 w-5 text-yellow-500" />
+            <AlertTriangle className="h-5 w-5 text-warn" />
             <AlertDialogTitle>{t('models.embeddingChangeTitle')}</AlertDialogTitle>
           </div>
           <AlertDialogDescription asChild>
diff --git a/frontend/src/components/settings/MigrationBanner.tsx b/frontend/src/components/settings/MigrationBanner.tsx
index aa8b7b18..9a2f8cba 100644
--- a/frontend/src/components/settings/MigrationBanner.tsx
+++ b/frontend/src/components/settings/MigrationBanner.tsx
@@ -19,13 +19,13 @@ export function MigrationBanner({ providersToMigrate }: MigrationBannerProps) {
   }
 
   return (
-    <Alert className="border-amber-500/50 bg-amber-50 dark:bg-amber-950/20">
-      <AlertTriangle className="h-4 w-4 text-amber-600 dark:text-amber-400" />
-      <AlertTitle className="text-amber-800 dark:text-amber-200">
+    <Alert className="border-warn/30 bg-warn-tint">
+      <AlertTriangle className="h-4 w-4 text-warn" />
+      <AlertTitle className="text-warn">
         {t('apiKeys.migrationAvailable')}
       </AlertTitle>
       <AlertDescription className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
-        <span className="text-amber-700 dark:text-amber-300">
+        <span className="text-warn">
           {t('apiKeys.migrationDescription', { count: providersToMigrate.length })}
         </span>
         <Button
@@ -33,7 +33,7 @@ export function MigrationBanner({ providersToMigrate }: MigrationBannerProps) {
           size="sm"
           onClick={() => migrate.mutate()}
           disabled={migrate.isPending}
-          className="shrink-0 border-amber-500 text-amber-700 hover:bg-amber-100 dark:border-amber-400 dark:text-amber-300 dark:hover:bg-amber-900/30"
+          className="shrink-0 border-warn text-warn hover:bg-warn-tint"
         >
           {migrate.isPending ? (
             <>
diff --git a/frontend/src/components/settings/ModelTestResultDialog.tsx b/frontend/src/components/settings/ModelTestResultDialog.tsx
index 153a610b..cd88e4d4 100644
--- a/frontend/src/components/settings/ModelTestResultDialog.tsx
+++ b/frontend/src/components/settings/ModelTestResultDialog.tsx
@@ -33,7 +33,7 @@ export function ModelTestResultDialog({
         <DialogHeader>
           <DialogTitle className="flex items-center gap-2">
             {result.success ? (
-              <Check className="h-5 w-5 text-emerald-500" />
+              <Check className="h-5 w-5 text-fern" />
             ) : (
               <X className="h-5 w-5 text-destructive" />
             )}
diff --git a/frontend/src/components/settings/ProviderSection.tsx b/frontend/src/components/settings/ProviderSection.tsx
index 72d7b20d..349e6f27 100644
--- a/frontend/src/components/settings/ProviderSection.tsx
+++ b/frontend/src/components/settings/ProviderSection.tsx
@@ -69,7 +69,7 @@ export function ProviderSection({
           </div>
           <div className="flex items-center gap-2">
             {hasCredentials ? (
-              <Badge className="bg-emerald-100 text-emerald-700 hover:bg-emerald-100 dark:bg-emerald-900/30 dark:text-emerald-300">
+              <Badge className="bg-fern-tint text-fern hover:bg-fern-tint">
                 <Check className="mr-1 h-3 w-3" />
                 {t('apiKeys.configured')}
               </Badge>
diff --git a/frontend/src/components/sources/AddSourceDialog.tsx b/frontend/src/components/sources/AddSourceDialog.tsx
index ee344db6..0142e1b7 100644
--- a/frontend/src/components/sources/AddSourceDialog.tsx
+++ b/frontend/src/components/sources/AddSourceDialog.tsx
@@ -491,7 +491,7 @@ export function AddSourceDialog({
 
                 <div className="flex items-center justify-between text-sm">
                   <div className="flex items-center gap-4">
-                    <span className="flex items-center gap-1.5 text-green-600">
+                    <span className="flex items-center gap-1.5 text-fern">
                       <CheckCircleIcon className="h-4 w-4" />
                       {batchProgress.completed} {t('common.completed')}
                     </span>
diff --git a/frontend/src/components/sources/MessageActions.tsx b/frontend/src/components/sources/MessageActions.tsx
index a878f4c8..96cd5ecb 100644
--- a/frontend/src/components/sources/MessageActions.tsx
+++ b/frontend/src/components/sources/MessageActions.tsx
@@ -103,7 +103,7 @@ export function MessageActions({ content, notebookId }: MessageActionsProps) {
               disabled={createNote.isPending}
             >
               {copySuccess ? (
-                <Check className="h-3.5 w-3.5 text-green-500" />
+                <Check className="h-3.5 w-3.5 text-fern" />
               ) : (
                 <Copy className="h-3.5 w-3.5" />
               )}
diff --git a/frontend/src/components/sources/NotebookAssociations.tsx b/frontend/src/components/sources/NotebookAssociations.tsx
index a9323220..b97f0b3d 100644
--- a/frontend/src/components/sources/NotebookAssociations.tsx
+++ b/frontend/src/components/sources/NotebookAssociations.tsx
@@ -182,7 +182,7 @@ export function NotebookAssociations({
                           {notebook.name}
                         </h4>
                         {isCurrentlyLinked && !hasChanges && (
-                          <Check className="h-4 w-4 text-green-600" />
+                          <Check className="h-4 w-4 text-fern" />
                         )}
                       </div>
                       {notebook.description && (
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 45e01aac..0fc8c718 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -55,41 +55,41 @@ const SOURCE_TYPE_ICONS = {
 const getStatusConfig = (t: TFunction) => ({
   new: {
     icon: Clock,
-    color: 'text-blue-600',
-    bgColor: 'bg-blue-50',
-    borderColor: 'border-blue-200',
+    color: 'text-teal',
+    bgColor: 'bg-teal-tint',
+    borderColor: 'border-teal/30',
     label: t('sources.statusProcessing'),
     description: t('sources.statusPreparingDesc')
   },
   queued: {
     icon: Clock,
-    color: 'text-blue-600',
-    bgColor: 'bg-blue-50',
-    borderColor: 'border-blue-200',
+    color: 'text-teal',
+    bgColor: 'bg-teal-tint',
+    borderColor: 'border-teal/30',
     label: t('sources.statusQueued'),
     description: t('sources.statusQueuedDesc')
   },
   running: {
     icon: Loader2,
-    color: 'text-blue-600',
-    bgColor: 'bg-blue-50',
-    borderColor: 'border-blue-200',
+    color: 'text-teal',
+    bgColor: 'bg-teal-tint',
+    borderColor: 'border-teal/30',
     label: t('sources.statusProcessing'),
     description: t('sources.statusProcessingDesc')
   },
   completed: {
     icon: CheckCircle,
-    color: 'text-green-600',
-    bgColor: 'bg-green-50',
-    borderColor: 'border-green-200',
+    color: 'text-fern',
+    bgColor: 'bg-fern-tint',
+    borderColor: 'border-fern/30',
     label: t('sources.statusCompleted'),
     description: t('sources.statusCompletedDesc')
   },
   failed: {
     icon: AlertTriangle,
-    color: 'text-red-600',
-    bgColor: 'bg-red-50',
-    borderColor: 'border-red-200',
+    color: 'text-destructive',
+    bgColor: 'bg-destructive-tint',
+    borderColor: 'border-destructive/30',
     label: t('sources.statusFailed'),
     description: t('sources.statusFailedDesc')
   }
@@ -379,7 +379,7 @@ function SourceCardImpl({
                   handleDelete()
                 }}
                 disabled={!onDelete}
-                className="text-red-600 focus:text-red-600"
+                className="text-destructive focus:text-destructive"
               >
                 <Trash2 className="h-4 w-4 mr-2" />
                 {t('sources.deleteSource')}
@@ -419,7 +419,7 @@ function SourceCardImpl({
             </div>
             <div className="w-full bg-gray-200 rounded-full h-1.5">
               <div
-                className="bg-blue-600 h-1.5 rounded-full transition-all duration-300"
+                className="bg-teal h-1.5 rounded-full transition-all duration-300"
                 style={{ width: `${statusData.processing_info.progress as number}%` }}
               />
             </div>
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index 38a6fa87..5de643cb 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -510,7 +510,7 @@ function SourceDetailContentInner({
                       href={externalHref}
                       target="_blank"
                       rel="noopener noreferrer"
-                      className="hover:underline text-blue-600"
+                      className="hover:underline text-primary"
                     >
                       {source.asset?.url}
                     </a>
diff --git a/frontend/src/components/sources/steps/SourceTypeStep.tsx b/frontend/src/components/sources/steps/SourceTypeStep.tsx
index 456cb4b0..e7d53fc7 100644
--- a/frontend/src/components/sources/steps/SourceTypeStep.tsx
+++ b/frontend/src/components/sources/steps/SourceTypeStep.tsx
@@ -286,8 +286,8 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                     <div>
                       <Label htmlFor="content" className="mb-2 block">{t('sources.textContentLabel')}</Label>
                       {hasHtmlContent && (
-                        <div className="mb-2 p-2 bg-blue-50 dark:bg-blue-950 border border-blue-200 dark:border-blue-800 rounded-md">
-                          <p className="text-sm text-blue-700 dark:text-blue-300">
+                        <div className="mb-2 p-2 bg-teal-tint border border-teal/30 rounded-md">
+                          <p className="text-sm text-teal">
                             {t('sources.htmlDetected')}
                           </p>
                         </div>
diff --git a/frontend/src/components/ui/alert-dialog.tsx b/frontend/src/components/ui/alert-dialog.tsx
index 0863e40d..0555cc96 100644
--- a/frontend/src/components/ui/alert-dialog.tsx
+++ b/frontend/src/components/ui/alert-dialog.tsx
@@ -54,7 +54,7 @@ function AlertDialogContent({
       <AlertDialogPrimitive.Content
         data-slot="alert-dialog-content"
         className={cn(
-          "bg-background data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-6 shadow-lg duration-200 sm:max-w-lg",
+          "bg-card data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-5 rounded-xl border p-6 shadow-overlay duration-200 sm:max-w-lg",
           className
         )}
         {...props}
diff --git a/frontend/src/components/ui/badge.tsx b/frontend/src/components/ui/badge.tsx
index 02054139..a3ed80a2 100644
--- a/frontend/src/components/ui/badge.tsx
+++ b/frontend/src/components/ui/badge.tsx
@@ -5,16 +5,16 @@ import { cva, type VariantProps } from "class-variance-authority"
 import { cn } from "@/lib/utils"
 
 const badgeVariants = cva(
-  "inline-flex items-center justify-center rounded-md border px-2 py-0.5 text-xs font-medium w-fit whitespace-nowrap shrink-0 [&>svg]:size-3 gap-1 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-[color,box-shadow] overflow-hidden",
+  "inline-flex items-center justify-center rounded-sm border px-2 py-0.5 text-xs font-medium w-fit whitespace-nowrap shrink-0 [&>svg]:size-3 gap-1 [&>svg]:pointer-events-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive transition-[color,box-shadow] overflow-hidden",
   {
     variants: {
       variant: {
         default:
-          "border-transparent bg-primary text-primary-foreground [a&]:hover:bg-primary/90",
+          "border-transparent bg-fern-tint text-primary dark:text-fern [a&]:hover:bg-fern-tint/80",
         secondary:
-          "border-transparent bg-secondary text-secondary-foreground [a&]:hover:bg-secondary/90",
+          "bg-popover text-muted-foreground [a&]:hover:bg-accent",
         destructive:
-          "border-transparent bg-destructive text-white [a&]:hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
+          "border-transparent bg-destructive-tint text-destructive [a&]:hover:bg-destructive-tint/80 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40",
         outline:
           "text-foreground [a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
       },
diff --git a/frontend/src/components/ui/button.tsx b/frontend/src/components/ui/button.tsx
index a2df8dce..7cf5bbf1 100644
--- a/frontend/src/components/ui/button.tsx
+++ b/frontend/src/components/ui/button.tsx
@@ -10,15 +10,15 @@ const buttonVariants = cva(
     variants: {
       variant: {
         default:
-          "bg-primary text-primary-foreground shadow-xs hover:bg-primary/90",
+          "bg-primary text-primary-foreground hover:bg-primary-hover",
         destructive:
-          "bg-destructive text-white shadow-xs hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40 dark:bg-destructive/60",
+          "bg-destructive text-white hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:focus-visible:ring-destructive/40",
         outline:
-          "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:bg-input/30 dark:border-input dark:hover:bg-input/50",
+          "border bg-transparent hover:bg-accent hover:text-accent-foreground",
         secondary:
-          "bg-secondary text-secondary-foreground shadow-xs hover:bg-secondary/80",
+          "bg-secondary text-secondary-foreground border hover:bg-accent",
         ghost:
-          "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
+          "hover:bg-accent hover:text-accent-foreground",
         link: "text-primary underline-offset-4 hover:underline",
       },
       size: {
diff --git a/frontend/src/components/ui/card.tsx b/frontend/src/components/ui/card.tsx
index d05bbc6c..a6121e9c 100644
--- a/frontend/src/components/ui/card.tsx
+++ b/frontend/src/components/ui/card.tsx
@@ -7,7 +7,7 @@ function Card({ className, ...props }: React.ComponentProps<"div">) {
     <div
       data-slot="card"
       className={cn(
-        "bg-card text-card-foreground flex flex-col gap-6 rounded-xl border py-6 shadow-sm",
+        "bg-card text-card-foreground flex flex-col gap-6 rounded-lg border py-6",
         className
       )}
       {...props}
diff --git a/frontend/src/components/ui/dialog.tsx b/frontend/src/components/ui/dialog.tsx
index 55bb7d5c..9bfe80c0 100644
--- a/frontend/src/components/ui/dialog.tsx
+++ b/frontend/src/components/ui/dialog.tsx
@@ -63,7 +63,7 @@ const DialogContent = ({
         data-slot="dialog-content"
         aria-describedby={undefined}
         className={cn(
-            "bg-background data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[state=closed]:pointer-events-none fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-4 rounded-lg border p-6 shadow-lg duration-200 sm:max-w-[calc(100%-2rem)] overflow-hidden",
+            "bg-card data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[state=closed]:pointer-events-none fixed top-[50%] left-[50%] z-50 grid w-full max-w-[calc(100%-2rem)] translate-x-[-50%] translate-y-[-50%] gap-5 rounded-xl border p-6 shadow-overlay duration-200 sm:max-w-[calc(100%-2rem)] overflow-hidden",
           className
         )}
         {...props}
diff --git a/frontend/src/components/ui/dropdown-menu.tsx b/frontend/src/components/ui/dropdown-menu.tsx
index ec51e9cc..4a00ebc6 100644
--- a/frontend/src/components/ui/dropdown-menu.tsx
+++ b/frontend/src/components/ui/dropdown-menu.tsx
@@ -42,7 +42,7 @@ function DropdownMenuContent({
         data-slot="dropdown-menu-content"
         sideOffset={sideOffset}
         className={cn(
-          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 max-h-(--radix-dropdown-menu-content-available-height) min-w-[8rem] origin-(--radix-dropdown-menu-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border p-1 shadow-md",
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 max-h-(--radix-dropdown-menu-content-available-height) min-w-[8rem] origin-(--radix-dropdown-menu-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border p-1 shadow-pop",
           className
         )}
         {...props}
diff --git a/frontend/src/components/ui/input.tsx b/frontend/src/components/ui/input.tsx
index 03295ca6..354c3d31 100644
--- a/frontend/src/components/ui/input.tsx
+++ b/frontend/src/components/ui/input.tsx
@@ -8,7 +8,7 @@ function Input({ className, type, ...props }: React.ComponentProps<"input">) {
       type={type}
       data-slot="input"
       className={cn(
-        "file:text-foreground placeholder:text-muted-foreground selection:bg-primary selection:text-primary-foreground dark:bg-input/30 border-input flex h-9 w-full min-w-0 rounded-md border bg-transparent px-3 py-1 text-base shadow-xs transition-[color,box-shadow] outline-none file:inline-flex file:h-7 file:border-0 file:bg-transparent file:text-sm file:font-medium disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
+        "file:text-foreground placeholder:text-muted-foreground selection:bg-primary selection:text-primary-foreground border-input flex h-9 w-full min-w-0 rounded-md border bg-popover px-3 py-1 text-base transition-[color,box-shadow] outline-none file:inline-flex file:h-7 file:border-0 file:bg-transparent file:text-sm file:font-medium disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
         "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px]",
         "aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
         className
diff --git a/frontend/src/components/ui/markdown-renderer.tsx b/frontend/src/components/ui/markdown-renderer.tsx
index 212e2b10..64de8de1 100644
--- a/frontend/src/components/ui/markdown-renderer.tsx
+++ b/frontend/src/components/ui/markdown-renderer.tsx
@@ -60,7 +60,7 @@ export function MarkdownRenderer({ children, components = {}}: { children: React
   const isDark = getEffectiveTheme() === 'dark'
 
   return (
-    <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-blue-600 prose-a:break-all prose-code:before:content-none prose-code:after:content-none prose-pre:p-0 prose-pre:bg-transparent prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
+    <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-primary prose-a:break-all prose-code:before:content-none prose-code:after:content-none prose-pre:p-0 prose-pre:bg-transparent prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
         <ReactMarkdown
           remarkPlugins={[remarkGfm, remarkMath]}
           rehypePlugins={[rehypeKatex]}
diff --git a/frontend/src/components/ui/popover.tsx b/frontend/src/components/ui/popover.tsx
index 01e468b6..73fbed75 100644
--- a/frontend/src/components/ui/popover.tsx
+++ b/frontend/src/components/ui/popover.tsx
@@ -30,7 +30,7 @@ function PopoverContent({
         align={align}
         sideOffset={sideOffset}
         className={cn(
-          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-72 origin-(--radix-popover-content-transform-origin) rounded-md border p-4 shadow-md outline-hidden",
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-72 origin-(--radix-popover-content-transform-origin) rounded-md border p-4 shadow-pop outline-hidden",
           className
         )}
         {...props}
diff --git a/frontend/src/components/ui/select.tsx b/frontend/src/components/ui/select.tsx
index dcbbc0ca..064f6997 100644
--- a/frontend/src/components/ui/select.tsx
+++ b/frontend/src/components/ui/select.tsx
@@ -37,7 +37,7 @@ function SelectTrigger({
       data-slot="select-trigger"
       data-size={size}
       className={cn(
-        "border-input data-[placeholder]:text-muted-foreground [&_svg:not([class*='text-'])]:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 dark:hover:bg-input/50 flex w-fit items-center justify-between gap-2 rounded-md border bg-transparent px-3 py-2 text-sm whitespace-nowrap shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 data-[size=default]:h-9 data-[size=sm]:h-8 *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center *:data-[slot=select-value]:gap-2 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        "border-input data-[placeholder]:text-muted-foreground [&_svg:not([class*='text-'])]:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive flex w-fit items-center justify-between gap-2 rounded-md border bg-popover px-3 py-2 text-sm whitespace-nowrap transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 data-[size=default]:h-9 data-[size=sm]:h-8 *:data-[slot=select-value]:line-clamp-1 *:data-[slot=select-value]:flex *:data-[slot=select-value]:items-center *:data-[slot=select-value]:gap-2 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
         className
       )}
       {...props}
@@ -61,7 +61,7 @@ function SelectContent({
       <SelectPrimitive.Content
         data-slot="select-content"
         className={cn(
-          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-md",
+          "bg-popover text-popover-foreground data-[state=open]:animate-in data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=open]:fade-in-0 data-[state=closed]:zoom-out-95 data-[state=open]:zoom-in-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 relative z-50 max-h-(--radix-select-content-available-height) min-w-[8rem] origin-(--radix-select-content-transform-origin) overflow-x-hidden overflow-y-auto rounded-md border shadow-pop",
           position === "popper" &&
             "data-[side=bottom]:translate-y-1 data-[side=left]:-translate-x-1 data-[side=right]:translate-x-1 data-[side=top]:-translate-y-1",
           className
diff --git a/frontend/src/components/ui/tabs.tsx b/frontend/src/components/ui/tabs.tsx
index f1af1bc3..656bfa6f 100644
--- a/frontend/src/components/ui/tabs.tsx
+++ b/frontend/src/components/ui/tabs.tsx
@@ -26,7 +26,7 @@ function TabsList({
     <TabsPrimitive.List
       data-slot="tabs-list"
       className={cn(
-        "inline-flex w-fit items-center justify-center gap-1 rounded-xl border border-border bg-muted/80 p-1 text-muted-foreground shadow-sm",
+        "inline-flex w-fit items-center justify-start gap-4 border-b border-border text-muted-foreground",
         className
       )}
       {...props}
@@ -42,7 +42,7 @@ function TabsTrigger({
     <TabsPrimitive.Trigger
       data-slot="tabs-trigger"
       className={cn(
-        "inline-flex h-9 flex-1 items-center justify-center gap-2 rounded-lg border border-transparent px-4 text-sm font-medium text-muted-foreground transition-all duration-150 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring/40 focus-visible:ring-offset-2 focus-visible:ring-offset-background disabled:pointer-events-none disabled:opacity-50 data-[state=active]:border-border data-[state=active]:bg-background data-[state=active]:text-foreground data-[state=active]:shadow-sm [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
+        "-mb-px inline-flex h-9 flex-1 items-center justify-center gap-2 border-b-2 border-transparent px-1 text-sm font-medium text-muted-foreground transition-colors duration-150 hover:text-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring/40 focus-visible:ring-offset-2 focus-visible:ring-offset-background disabled:pointer-events-none disabled:opacity-50 data-[state=active]:border-primary data-[state=active]:text-foreground [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
         className
       )}
       {...props}
diff --git a/frontend/src/components/ui/textarea.tsx b/frontend/src/components/ui/textarea.tsx
index 8a4d5d38..62469860 100644
--- a/frontend/src/components/ui/textarea.tsx
+++ b/frontend/src/components/ui/textarea.tsx
@@ -7,7 +7,7 @@ function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
     <textarea
       data-slot="textarea"
       className={cn(
-        "border-input placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive dark:bg-input/30 flex field-sizing-content min-h-16 min-w-0 w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
+        "border-input placeholder:text-muted-foreground focus-visible:border-ring focus-visible:ring-ring/50 aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive flex field-sizing-content min-h-16 min-w-0 w-full rounded-md border bg-popover px-3 py-2 text-base transition-[color,box-shadow] outline-none focus-visible:ring-[3px] disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
         className
       )}
       {...props}
diff --git a/frontend/src/components/ui/tooltip.tsx b/frontend/src/components/ui/tooltip.tsx
index 4ee26b38..a4e90d4e 100644
--- a/frontend/src/components/ui/tooltip.tsx
+++ b/frontend/src/components/ui/tooltip.tsx
@@ -46,13 +46,13 @@ function TooltipContent({
         data-slot="tooltip-content"
         sideOffset={sideOffset}
         className={cn(
-          "bg-primary text-primary-foreground animate-in fade-in-0 zoom-in-95 data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=closed]:zoom-out-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-fit origin-(--radix-tooltip-content-transform-origin) rounded-md px-3 py-1.5 text-xs text-balance",
+          "bg-foreground text-background animate-in fade-in-0 zoom-in-95 data-[state=closed]:animate-out data-[state=closed]:fade-out-0 data-[state=closed]:zoom-out-95 data-[side=bottom]:slide-in-from-top-2 data-[side=left]:slide-in-from-right-2 data-[side=right]:slide-in-from-left-2 data-[side=top]:slide-in-from-bottom-2 z-50 w-fit origin-(--radix-tooltip-content-transform-origin) rounded-md px-3 py-1.5 text-xs text-balance",
           className
         )}
         {...props}
       >
         {children}
-        <TooltipPrimitive.Arrow className="bg-primary fill-primary z-50 size-2.5 translate-y-[calc(-50%_-_2px)] rotate-45 rounded-[2px]" />
+        <TooltipPrimitive.Arrow className="bg-foreground fill-foreground z-50 size-2.5 translate-y-[calc(-50%_-_2px)] rotate-45 rounded-[2px]" />
       </TooltipPrimitive.Content>
     </TooltipPrimitive.Portal>
   )
diff --git a/frontend/src/lib/providers.tsx b/frontend/src/lib/providers.tsx
index cfa76d8b..6569ac37 100644
--- a/frontend/src/lib/providers.tsx
+++ b/frontend/src/lib/providers.tsx
@@ -30,10 +30,10 @@ const TYPE_ICONS: Record<ModelType, React.ReactNode> = {
 const FALLBACK_TYPE_ICON: React.ReactNode = <Box className="h-3 w-3" />
 
 const TYPE_COLORS: Record<ModelType, string> = {
-  language: 'bg-blue-100 text-blue-700 dark:bg-blue-900/30 dark:text-blue-300',
-  embedding: 'bg-purple-100 text-purple-700 dark:bg-purple-900/30 dark:text-purple-300',
-  text_to_speech: 'bg-amber-100 text-amber-700 dark:bg-amber-900/30 dark:text-amber-300',
-  speech_to_text: 'bg-teal-100 text-teal-700 dark:bg-teal-900/30 dark:text-teal-300',
+  language: 'bg-teal-tint text-teal',
+  embedding: 'bg-plum-tint text-plum',
+  text_to_speech: 'bg-gold-tint text-gold',
+  speech_to_text: 'bg-sage-tint text-sage',
 }
 
 export const TYPE_COLOR_INACTIVE = 'bg-muted text-muted-foreground opacity-50'

From 62b071b9172a2c823ddd918e0947a782df63be13 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 24 Jul 2026 17:59:08 -0300
Subject: [PATCH 254/345] =?UTF-8?q?feat(frontend):=20Quiet=20Green=20scree?=
 =?UTF-8?q?n-by-screen=20reskin=20=E2=80=94=20shell,=20workspace,=20home,?=
 =?UTF-8?q?=20modals,=20remaining=20screens=20(#1220)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(frontend): reskin app shell — pebble wordmark, fern nav spine, hued destination icons

* feat(frontend): reskin screens — workspace, home, sources, modals, settings, podcasts, search

Visual-only pass per screen: panel headers with hue ticks, one-line
source card metadata with top-right overflow, de-washed chat bubbles
(AI speaks teal), library treatment on the sources table (type pebbles,
quiet embedded pills), flattened dialog internals with uniform breathing
room, badge diet on models/settings, quiet podcast player containers,
mono for data everywhere. No behavior, columns or i18n changes.

* docs: changelog entry for the screen-by-screen reskin
---
 CHANGELOG.md                                  |   1 +
 .../advanced/components/RebuildEmbeddings.tsx |   8 +-
 .../advanced/components/SystemInfo.tsx        |  10 +-
 .../src/app/(dashboard)/advanced/page.tsx     |   2 +-
 .../notebooks/components/NotebookCard.tsx     |  13 +-
 .../components/NotebookDeleteDialog.tsx       |   2 +-
 .../notebooks/components/NotebookHeader.tsx   |  11 +-
 .../notebooks/components/NotebookList.tsx     |   2 +-
 .../notebooks/components/NotebookRow.tsx      |  12 +-
 .../notebooks/components/NotesColumn.tsx      |  13 +-
 .../notebooks/components/RecentlyViewed.tsx   |  19 +-
 .../notebooks/components/SourcesColumn.tsx    |   9 +-
 .../src/app/(dashboard)/notebooks/page.tsx    |   2 +-
 .../src/app/(dashboard)/podcasts/page.tsx     |   2 +-
 frontend/src/app/(dashboard)/search/page.tsx  |  12 +-
 .../(dashboard)/settings/api-keys/page.tsx    |   4 +-
 .../src/app/(dashboard)/settings/page.tsx     |   2 +-
 frontend/src/app/(dashboard)/sources/page.tsx |  38 +-
 .../components/TransformationsList.tsx        |   2 +-
 .../app/(dashboard)/transformations/page.tsx  |   2 +-
 frontend/src/app/globals.css                  |   2 +-
 frontend/src/components/layout/AppSidebar.tsx |  57 +--
 .../src/components/podcasts/EpisodeCard.tsx   |  10 +-
 .../podcasts/EpisodeProfilesPanel.tsx         |   6 +-
 .../src/components/podcasts/EpisodesTab.tsx   |   6 +-
 .../podcasts/SpeakerProfilesPanel.tsx         |   6 +-
 .../src/components/podcasts/TemplatesTab.tsx  |   6 +-
 .../components/search/StreamingResponse.tsx   |  10 +-
 .../components/settings/CredentialItem.tsx    |   2 +-
 .../components/settings/ProviderSection.tsx   |  16 +-
 .../sources/AddExistingSourceDialog.tsx       |   8 +-
 .../components/sources/AddSourceDialog.tsx    |   2 +-
 frontend/src/components/sources/ChatPanel.tsx |  26 +-
 .../sources/NotebookAssociations.tsx          |  81 ++---
 .../src/components/sources/SourceCard.tsx     |  50 ++-
 .../sources/SourceDetailContent.tsx           | 338 +++++++++---------
 .../src/components/sources/SourceDialog.tsx   |   2 +-
 .../sources/SourceInsightDialog.tsx           |   5 +-
 .../sources/steps/ProcessingStep.tsx          |  12 +-
 .../sources/steps/SourceTypeStep.tsx          |  13 +-
 40 files changed, 412 insertions(+), 412 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5ca9bce0..6252b92e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
+- **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
 
 ### Changed
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
diff --git a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
index 46b552f0..73bcab04 100644
--- a/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/RebuildEmbeddings.tsx
@@ -272,19 +272,19 @@ export function RebuildEmbeddings() {
               <div className="grid grid-cols-4 gap-4">
                 <div className="space-y-1">
                   <p className="text-sm text-muted-foreground">{t('navigation.sources')}</p>
-                  <p className="text-2xl font-bold">{sourcesProcessed}</p>
+                  <p className="font-mono text-2xl font-bold">{sourcesProcessed}</p>
                 </div>
                 <div className="space-y-1">
                   <p className="text-sm text-muted-foreground">{t('common.notes')}</p>
-                  <p className="text-2xl font-bold">{notesProcessed}</p>
+                  <p className="font-mono text-2xl font-bold">{notesProcessed}</p>
                 </div>
                 <div className="space-y-1">
                   <p className="text-sm text-muted-foreground">{t('common.insights')}</p>
-                  <p className="text-2xl font-bold">{insightsProcessed}</p>
+                  <p className="font-mono text-2xl font-bold">{insightsProcessed}</p>
                 </div>
                 <div className="space-y-1">
                   <p className="text-sm text-muted-foreground">{t('advanced.rebuild.time')}</p>
-                  <p className="text-2xl font-bold">
+                  <p className="font-mono text-2xl font-bold">
                     {processingTimeSeconds !== undefined ? `${processingTimeSeconds.toFixed(1)}s` : '—'}
                   </p>
                 </div>
diff --git a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
index b3bc9fd8..dfabb5e4 100644
--- a/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
+++ b/frontend/src/app/(dashboard)/advanced/components/SystemInfo.tsx
@@ -34,7 +34,7 @@ export function SystemInfo() {
     return (
       <Card className="p-6">
         <div className="space-y-4">
-          <h2 className="text-xl font-semibold">{t('advanced.systemInfo')}</h2>
+          <h2 className="font-display text-xl font-semibold tracking-tight">{t('advanced.systemInfo')}</h2>
           <div className="text-sm text-muted-foreground">{t('common.loading')}</div>
         </div>
       </Card>
@@ -44,20 +44,20 @@ export function SystemInfo() {
   return (
     <Card className="p-6">
       <div className="space-y-4">
-        <h2 className="text-xl font-semibold">{t('advanced.systemInfo')}</h2>
+        <h2 className="font-display text-xl font-semibold tracking-tight">{t('advanced.systemInfo')}</h2>
 
         <div className="space-y-3">
           {/* Current Version */}
           <div className="flex items-center justify-between">
             <span className="text-sm font-medium">{t('advanced.currentVersion')}</span>
-            <Badge variant="outline">{config?.version || t('advanced.unknown')}</Badge>
+            <Badge variant="outline" className="font-mono text-[11px]">{config?.version || t('advanced.unknown')}</Badge>
           </div>
 
           {/* Latest Version */}
           {config?.latestVersion && (
             <div className="flex items-center justify-between">
               <span className="text-sm font-medium">{t('advanced.latestVersion')}</span>
-              <Badge variant="outline">{config.latestVersion}</Badge>
+              <Badge variant="outline" className="font-mono text-[11px]">{config.latestVersion}</Badge>
             </div>
           )}
 
@@ -65,7 +65,7 @@ export function SystemInfo() {
           <div className="flex items-center justify-between">
             <span className="text-sm font-medium">{t('advanced.status')}</span>
             {config?.hasUpdate ? (
-              <Badge variant="destructive">
+              <Badge variant="outline" className="border-transparent bg-warn-tint text-warn">
                 {t('advanced.updateAvailable', { version: config.latestVersion || '' })}
               </Badge>
             ) : config?.latestVersion ? (
diff --git a/frontend/src/app/(dashboard)/advanced/page.tsx b/frontend/src/app/(dashboard)/advanced/page.tsx
index 7eb14b22..4c4c78c3 100644
--- a/frontend/src/app/(dashboard)/advanced/page.tsx
+++ b/frontend/src/app/(dashboard)/advanced/page.tsx
@@ -13,7 +13,7 @@ export default function AdvancedPage() {
         <div className="p-6">
           <div className="max-w-4xl mx-auto space-y-6">
             <div>
-              <h1 className="text-3xl font-bold">{t('advanced.title')}</h1>
+              <h1 className="font-display text-2xl font-bold tracking-tight">{t('advanced.title')}</h1>
               <p className="text-muted-foreground mt-2">
                 {t('advanced.desc')}
               </p>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
index 53045d1d..4cadd31c 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookCard.tsx
@@ -50,7 +50,8 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
           <CardHeader className="pb-3">
             <div className="flex items-start justify-between">
               <div className="flex-1 min-w-0">
-                <CardTitle className="text-base truncate group-hover:text-primary transition-colors">
+                <span aria-hidden className="mb-2 block h-2 w-2 rounded-[3px] bg-teal" />
+                <CardTitle className="text-base truncate">
                   {notebook.name}
                 </CardTitle>
                 {notebook.archived && (
@@ -113,15 +114,15 @@ export function NotebookCard({ notebook }: NotebookCardProps) {
             </div>
 
             {/* Item counts footer */}
-            <div className="mt-3 flex items-center gap-1.5 border-t pt-3">
-              <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+            <div className="mt-3 flex items-center gap-3 border-t pt-3 text-xs text-muted-foreground">
+              <span className="flex items-center gap-1">
                 <FileText className="h-3 w-3" />
                 <span>{notebook.source_count}</span>
-              </Badge>
-              <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+              </span>
+              <span className="flex items-center gap-1">
                 <StickyNote className="h-3 w-3" />
                 <span>{notebook.note_count}</span>
-              </Badge>
+              </span>
             </div>
           </CardContent>
       </Card>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
index 4424477a..b2439bbf 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookDeleteDialog.tsx
@@ -75,7 +75,7 @@ export function NotebookDeleteDialog({
           </AlertDialogDescription>
         </AlertDialogHeader>
 
-        <div className="py-4 space-y-3">
+        <div className="space-y-3">
           {isLoadingPreview ? (
             <div className="flex items-center gap-2 text-muted-foreground">
               <LoadingSpinner size="sm" />
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
index 73405d88..78752720 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
@@ -59,8 +59,8 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
                 name="notebook-name"
                 value={notebook.name}
                 onSave={handleUpdateName}
-                className="text-2xl font-bold"
-                inputClassName="text-2xl font-bold"
+                className="font-display text-2xl font-bold tracking-tight"
+                inputClassName="font-display text-2xl font-bold tracking-tight"
                 placeholder={t('notebooks.namePlaceholder')}
               />
               {notebook.archived && (
@@ -96,7 +96,10 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
               </Button>
             </div>
           </div>
-          
+
+          {/* Signature: one short flat fern underline — one hue, no show */}
+          <div aria-hidden className="h-[3px] w-14 rounded-[1px] bg-fern" />
+
           <InlineEdit
             id="notebook-description"
             name="notebook-description"
@@ -109,7 +112,7 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
             emptyText={t('notebooks.addDescription')}
           />
           
-          <div className="text-sm text-muted-foreground">
+          <div className="text-xs text-muted-foreground">
             {t('common.created', { time: formatDistanceToNow(new Date(notebook.created), { addSuffix: true, locale: dfLocale }) })} • 
             {t('common.updated', { time: formatDistanceToNow(new Date(notebook.updated), { addSuffix: true, locale: dfLocale }) })}
           </div>
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
index c092e231..352ed3bb 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookList.tsx
@@ -76,7 +76,7 @@ export function NotebookList({
             )}
           </Button>
         )}
-        <h2 className="text-lg font-semibold">{title}</h2>
+        <h2 className="font-display text-lg font-semibold tracking-tight">{title}</h2>
         <span className="text-sm text-muted-foreground">({notebooks.length})</span>
       </div>
 
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
index ed94ab7e..2ee24816 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookRow.tsx
@@ -56,7 +56,7 @@ export function NotebookRow({ notebook }: NotebookRowProps) {
             <Link
               href={`/notebooks/${encodeURIComponent(notebook.id)}`}
               onClick={(e) => e.stopPropagation()}
-              className="font-medium truncate rounded-sm outline-none group-hover:text-primary transition-colors focus-visible:ring-2 focus-visible:ring-ring"
+              className="font-medium truncate rounded-sm outline-none focus-visible:ring-2 focus-visible:ring-ring"
             >
               {notebook.name}
             </Link>
@@ -73,15 +73,15 @@ export function NotebookRow({ notebook }: NotebookRowProps) {
           )}
         </div>
 
-        <div className="flex items-center gap-1.5 shrink-0">
-          <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+        <div className="flex items-center gap-3 shrink-0 text-xs text-muted-foreground">
+          <span className="flex items-center gap-1">
             <FileText className="h-3 w-3" />
             <span>{notebook.source_count}</span>
-          </Badge>
-          <Badge variant="outline" className="text-xs flex items-center gap-1 px-1.5 py-0.5 text-primary border-primary/50">
+          </span>
+          <span className="flex items-center gap-1">
             <StickyNote className="h-3 w-3" />
             <span>{notebook.note_count}</span>
-          </Badge>
+          </span>
         </div>
 
         <div className="hidden sm:block w-40 shrink-0 text-right text-xs text-muted-foreground">
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index 88005f5f..5cb3c705 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -87,12 +87,15 @@ export function NotesColumn({
         <Card className="h-full flex flex-col flex-1 overflow-hidden">
           <CardHeader className="pb-3 flex-shrink-0">
             <div className="flex items-center justify-between gap-2">
-              <CardTitle className="text-lg">{notesLabel}</CardTitle>
+              <CardTitle className="flex items-center gap-2 text-xs font-semibold uppercase tracking-[0.13em] text-muted-foreground">
+                <span aria-hidden className="h-3.5 w-[3px] rounded-full bg-gold" />
+                {notesLabel}
+              </CardTitle>
               <div className="flex items-center gap-2">
                 {onBulkContextModeChange && notes && notes.length > 0 && (
                   <DropdownMenu>
                     <DropdownMenuTrigger asChild>
-                      <Button variant="ghost" size="sm" title={t('sources.bulkContext')}>
+                      <Button variant="ghost" size="sm" className="text-muted-foreground" title={t('sources.bulkContext')}>
                         <ListChecks className="h-4 w-4" />
                         <ChevronDown className="h-4 w-4 ml-1" />
                       </Button>
@@ -134,17 +137,17 @@ export function NotesColumn({
                 description={t('sources.createFirstNote')}
               />
             ) : (
-              <div className="space-y-3">
+              <div className="space-y-2">
                 {notes.map((note) => (
                   <div
                     key={note.id}
-                    className="p-3 border rounded-lg card-hover group relative cursor-pointer"
+                    className="p-3 border rounded-md bg-card shadow-none card-hover group relative cursor-pointer"
                     onClick={() => setEditingNote(note)}
                   >
                     <div className="flex items-start justify-between mb-2">
                       <div className="flex items-center gap-2">
                         {note.note_type === 'ai' ? (
-                          <Bot className="h-4 w-4 text-primary" />
+                          <Bot className="h-4 w-4 text-teal" />
                         ) : (
                           <User className="h-4 w-4 text-muted-foreground" />
                         )}
diff --git a/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx b/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
index dce80d85..66151278 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/RecentlyViewed.tsx
@@ -7,7 +7,6 @@ import { formatDistanceToNow } from 'date-fns'
 import type { Locale } from 'date-fns/locale'
 import { BookOpen, ChevronDown, ChevronRight, FileText } from 'lucide-react'
 
-import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
 import {
   Collapsible,
@@ -74,7 +73,7 @@ export function RecentlyViewed({ limit = 12 }: RecentlyViewedProps) {
             </span>
           </Button>
         </CollapsibleTrigger>
-        <h2 className="text-lg font-semibold">
+        <h2 className="font-display text-lg font-semibold tracking-tight">
           {t('notebooks.recentlyViewed', { defaultValue: 'Recently Viewed' })}
         </h2>
         <span className="text-sm text-muted-foreground">({items.length})</span>
@@ -97,19 +96,23 @@ export function RecentlyViewed({ limit = 12 }: RecentlyViewedProps) {
               <Link
                 key={`${item.type}-${item.id}`}
                 href={getItemHref(item)}
-                className="group flex min-h-20 items-center gap-3 rounded-md border border-border/60 p-3 transition-colors hover:border-primary/40 hover:bg-muted/50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
+                className="group flex items-center gap-3 rounded-md border bg-card px-3 py-2 card-hover focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring"
               >
-                <div className="flex h-9 w-9 shrink-0 items-center justify-center rounded-md bg-muted text-muted-foreground transition-colors group-hover:text-primary">
-                  <Icon className="h-4 w-4" />
+                <div
+                  className={`flex h-7 w-7 shrink-0 items-center justify-center rounded-md bg-muted ${
+                    item.type === 'notebook' ? 'text-teal' : 'text-sage'
+                  }`}
+                >
+                  <Icon className="h-3.5 w-3.5" />
                 </div>
                 <div className="min-w-0 flex-1">
                   <div className="flex min-w-0 items-center gap-2">
                     <p className="truncate text-sm font-medium">{item.title}</p>
-                    <Badge variant="outline" className="shrink-0 text-[11px]">
+                    <span className="shrink-0 text-[10px] font-semibold uppercase tracking-wider text-muted-foreground">
                       {typeLabel}
-                    </Badge>
+                    </span>
                   </div>
-                  <p className="mt-1 truncate text-xs text-muted-foreground">
+                  <p className="mt-0.5 truncate text-xs text-muted-foreground">
                     {t('notebooks.lastViewed', {
                       time: formatViewedAt(item.last_viewed_at, locale),
                       defaultValue: 'Viewed {{time}}',
diff --git a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
index 29395b0f..c87a6b29 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/SourcesColumn.tsx
@@ -159,12 +159,15 @@ export function SourcesColumn({
         <Card className="h-full flex flex-col flex-1 overflow-hidden">
           <CardHeader className="pb-3 flex-shrink-0">
             <div className="flex items-center justify-between gap-2">
-              <CardTitle className="text-lg">{t('navigation.sources')}</CardTitle>
+              <CardTitle className="flex items-center gap-2 text-xs font-semibold uppercase tracking-[0.13em] text-muted-foreground">
+                <span aria-hidden className="h-3.5 w-[3px] rounded-full bg-sage" />
+                {t('navigation.sources')}
+              </CardTitle>
               <div className="flex items-center gap-2">
                 {onBulkContextModeChange && sources && sources.length > 0 && (
                   <DropdownMenu>
                     <DropdownMenuTrigger asChild>
-                      <Button variant="ghost" size="sm" title={t('sources.bulkContext')}>
+                      <Button variant="ghost" size="sm" className="text-muted-foreground" title={t('sources.bulkContext')}>
                         <ListChecks className="h-4 w-4" />
                         <ChevronDown className="h-4 w-4 ml-1" />
                       </Button>
@@ -218,7 +221,7 @@ export function SourcesColumn({
                 description={t('sources.createFirstSource')}
               />
             ) : (
-              <div className="space-y-3">
+              <div className="space-y-2">
                 {sources.map((source) => (
                   <SourceCard
                     key={source.id}
diff --git a/frontend/src/app/(dashboard)/notebooks/page.tsx b/frontend/src/app/(dashboard)/notebooks/page.tsx
index 56549bd8..cc16b3b9 100644
--- a/frontend/src/app/(dashboard)/notebooks/page.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/page.tsx
@@ -57,7 +57,7 @@ export default function NotebooksPage() {
         <div className="p-6 space-y-6">
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-4">
-            <h1 className="text-2xl font-bold">{t('notebooks.title')}</h1>
+            <h1 className="font-display text-2xl font-bold tracking-tight">{t('notebooks.title')}</h1>
             <Button variant="outline" size="sm" onClick={() => refetch()}>
               <RefreshCw className="h-4 w-4" />
             </Button>
diff --git a/frontend/src/app/(dashboard)/podcasts/page.tsx b/frontend/src/app/(dashboard)/podcasts/page.tsx
index eeefa63f..b00b6606 100644
--- a/frontend/src/app/(dashboard)/podcasts/page.tsx
+++ b/frontend/src/app/(dashboard)/podcasts/page.tsx
@@ -29,7 +29,7 @@ export default function PodcastsPage() {
       <div className="flex-1 overflow-y-auto">
         <div className="px-6 py-6 space-y-6">
           <header className="space-y-1">
-            <h1 className="text-2xl font-semibold tracking-tight">{t('podcasts.listTitle')}</h1>
+            <h1 className="font-display text-2xl font-bold tracking-tight">{t('podcasts.listTitle')}</h1>
             <p className="text-muted-foreground">
               {t('podcasts.listDesc')}
             </p>
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 607c3e5a..28d8ebe5 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -159,7 +159,7 @@ export default function SearchPage() {
   return (
     <AppShell>
       <div className="flex-1 overflow-y-auto p-4 md:p-6">
-        <h1 className="text-xl md:text-2xl font-bold mb-4 md:mb-6">{t('searchPage.askAndSearch')}</h1>
+        <h1 className="font-display text-xl md:text-2xl font-bold tracking-tight mb-4 md:mb-6">{t('searchPage.askAndSearch')}</h1>
 
         <Tabs value={activeTab} onValueChange={(v) => setActiveTab(v as 'ask' | 'search')} className="w-full space-y-6">
           <div className="space-y-2">
@@ -233,13 +233,13 @@ export default function SearchPage() {
                         </Button>
                       </div>
                       <div className="flex gap-2 text-xs flex-wrap">
-                        <Badge variant="secondary">
+                        <Badge variant="secondary" className="font-mono text-[11px]">
                           {t('searchPage.strategy')}: {resolveModelName(customModels?.strategy || modelDefaults?.default_chat_model)}
                         </Badge>
-                        <Badge variant="secondary">
+                        <Badge variant="secondary" className="font-mono text-[11px]">
                           {t('searchPage.answer')}: {resolveModelName(customModels?.answer || modelDefaults?.default_chat_model)}
                         </Badge>
-                        <Badge variant="secondary">
+                        <Badge variant="secondary" className="font-mono text-[11px]">
                           {t('searchPage.final')}: {resolveModelName(customModels?.finalAnswer || modelDefaults?.default_chat_model)}
                         </Badge>
                       </div>
@@ -452,7 +452,7 @@ export default function SearchPage() {
                           const modalType = type === 'source_insight' ? 'insight' : type as 'source' | 'note' | 'insight'
 
                           return (
-                          <Card key={index}>
+                          <Card key={index} className="transition-shadow hover:shadow-lift">
                             <CardContent className="pt-4">
                               <div className="flex items-start justify-between gap-4">
                                 <div className="flex-1">
@@ -462,7 +462,7 @@ export default function SearchPage() {
                                   >
                                     {result.title}
                                   </button>
-                                  <Badge variant="secondary" className="ml-2">
+                                  <Badge variant="secondary" className="ml-2 font-mono text-[11px]">
                                     {result.final_score.toFixed(2)}
                                   </Badge>
                                 </div>
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
index 3dbfd689..a99afea8 100644
--- a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/api-keys/page.tsx
@@ -91,8 +91,8 @@ export default function ApiKeysPage() {
         <div className="p-6 space-y-6">
           {/* Header */}
           <div>
-            <h1 className="text-2xl font-bold flex items-center gap-2">
-              <Key className="h-6 w-6" />
+            <h1 className="font-display text-2xl font-bold tracking-tight flex items-center gap-2">
+              <Key className="h-5 w-5 text-muted-foreground" />
               {t('apiKeys.title')}
             </h1>
             <p className="text-muted-foreground mt-1">{t('apiKeys.description')}</p>
diff --git a/frontend/src/app/(dashboard)/settings/page.tsx b/frontend/src/app/(dashboard)/settings/page.tsx
index cdf3341f..ec009d9d 100644
--- a/frontend/src/app/(dashboard)/settings/page.tsx
+++ b/frontend/src/app/(dashboard)/settings/page.tsx
@@ -17,7 +17,7 @@ export default function SettingsPage() {
         <div className="p-6">
           <div className="max-w-4xl">
             <div className="flex items-center gap-4 mb-6">
-              <h1 className="text-2xl font-bold">{t('navigation.settings')}</h1>
+              <h1 className="font-display text-2xl font-bold tracking-tight">{t('navigation.settings')}</h1>
               <Button variant="outline" size="sm" onClick={() => refetch()}>
                 <RefreshCw className="h-4 w-4" />
               </Button>
diff --git a/frontend/src/app/(dashboard)/sources/page.tsx b/frontend/src/app/(dashboard)/sources/page.tsx
index 79807536..739b7ed6 100644
--- a/frontend/src/app/(dashboard)/sources/page.tsx
+++ b/frontend/src/app/(dashboard)/sources/page.tsx
@@ -8,9 +8,8 @@ import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { EmptyState } from '@/components/common/EmptyState'
 import { AppShell } from '@/components/layout/AppShell'
 import { ConfirmDialog } from '@/components/common/ConfirmDialog'
-import { FileText, Link as LinkIcon, Upload, AlignLeft, Trash2, ArrowDown, ArrowUp, ArrowUpDown, Plus } from 'lucide-react'
+import { FileText, Trash2, ArrowDown, ArrowUp, ArrowUpDown, Plus } from 'lucide-react'
 import { formatDistanceToNow } from 'date-fns'
-import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
 import { useTranslation } from '@/lib/hooks/use-translation'
 import { getDateLocale } from '@/lib/utils/date-locale'
@@ -244,10 +243,11 @@ export default function SourcesPage() {
     )
   }
 
-  const getSourceIcon = (source: SourceListResponse) => {
-    if (source.asset?.url) return <LinkIcon className="h-4 w-4" />
-    if (source.asset?.file_path) return <Upload className="h-4 w-4" />
-    return <AlignLeft className="h-4 w-4" />
+  // Content-type pebble — type hues live in dots, never washes
+  const getSourceTypeDotClass = (source: SourceListResponse) => {
+    if (source.asset?.url) return 'bg-type-web'
+    if (source.asset?.file_path) return 'bg-type-pdf'
+    return 'bg-type-note'
   }
 
   const getSourceType = (source: SourceListResponse) => {
@@ -318,7 +318,7 @@ export default function SourcesPage() {
     return (<>
       <div className="flex flex-col h-full w-full max-w-none px-6 py-6">
         <div className="mb-6 flex-shrink-0">
-          <h1 className="text-3xl font-bold">{t('sources.allSources')}</h1>
+          <h1 className="font-display text-2xl font-bold tracking-tight">{t('sources.allSources')}</h1>
           <p className="mt-2 text-muted-foreground">
             {t('sources.allSourcesDesc')}
           </p>
@@ -340,7 +340,7 @@ export default function SourcesPage() {
               <col className="w-[100px]" />
             </colgroup>
             <thead className="sticky top-0 bg-background z-10">
-              <tr className="border-b bg-muted/50">
+              <tr className="border-b">
                 <th className="h-12 px-4 text-left align-middle font-medium text-muted-foreground">
                   {renderSortableHeader('type', t('common.type'))}
                 </th>
@@ -374,15 +374,18 @@ export default function SourcesPage() {
                     "border-b transition-colors cursor-pointer",
                     selectedIndex === index
                       ? "bg-accent"
-                      : "hover:bg-muted/50"
+                      : "hover:bg-[var(--surface-raised)]"
                   )}
                 >
                   <td className="h-12 px-4">
                     <div className="flex items-center gap-2">
-                      {getSourceIcon(source)}
-                      <Badge variant="secondary" className="text-xs">
+                      <span
+                        aria-hidden
+                        className={cn('h-2 w-2 shrink-0 rounded-full', getSourceTypeDotClass(source))}
+                      />
+                      <span className="text-[11px] font-semibold uppercase tracking-wider text-muted-foreground">
                         {getSourceType(source)}
-                      </Badge>
+                      </span>
                     </div>
                   </td>
                   <td className="h-12 px-4">
@@ -413,9 +416,16 @@ export default function SourcesPage() {
                     <span className="text-sm font-medium">{source.insights_count || 0}</span>
                   </td>
                   <td className="h-12 px-4 text-center hidden lg:table-cell">
-                    <Badge variant={source.embedded ? "default" : "secondary"} className="text-xs">
+                    <span
+                      className={cn(
+                        "inline-flex items-center rounded-sm px-2 py-0.5 text-xs font-medium",
+                        source.embedded
+                          ? "bg-fern-tint text-fern-deep dark:text-fern"
+                          : "bg-muted text-muted-foreground"
+                      )}
+                    >
                       {source.embedded ? t('sources.yes') : t('sources.no')}
-                    </Badge>
+                    </span>
                   </td>
                   <td className="h-12 px-4 text-right">
                     <Button
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
index d1f47a88..a9187e87 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationsList.tsx
@@ -71,7 +71,7 @@ export function TransformationsList({ transformations, isLoading, onPlayground }
     <>
       <div className="space-y-6">
         <div className="flex justify-between items-center">
-          <h2 className="text-lg font-semibold">{t('transformations.listTitle')}</h2>
+          <h2 className="font-display text-lg font-semibold tracking-tight">{t('transformations.listTitle')}</h2>
           <Button onClick={() => handleOpenEditor()}>
             <Plus className="h-4 w-4 mr-2" />
             {t('transformations.createNew')}
diff --git a/frontend/src/app/(dashboard)/transformations/page.tsx b/frontend/src/app/(dashboard)/transformations/page.tsx
index 7314a171..a31725c2 100644
--- a/frontend/src/app/(dashboard)/transformations/page.tsx
+++ b/frontend/src/app/(dashboard)/transformations/page.tsx
@@ -29,7 +29,7 @@ export default function TransformationsPage() {
         <div className="p-6 space-y-6">
           <div className="flex items-center justify-between">
             <div className="flex items-center gap-4">
-              <h1 className="text-2xl font-bold">{t('transformations.title')}</h1>
+              <h1 className="font-display text-2xl font-bold tracking-tight">{t('transformations.title')}</h1>
               <Button variant="outline" size="sm" onClick={() => refetch()}>
                 <RefreshCw className="h-4 w-4" />
             </Button>
diff --git a/frontend/src/app/globals.css b/frontend/src/app/globals.css
index b5c5b267..5eb28d55 100644
--- a/frontend/src/app/globals.css
+++ b/frontend/src/app/globals.css
@@ -289,7 +289,7 @@
   --sidebar-foreground: var(--ink);
   --sidebar-primary: var(--primary);
   --sidebar-primary-foreground: var(--on-primary);
-  --sidebar-accent: var(--fern-tint);
+  --sidebar-accent: var(--surface);
   --sidebar-accent-foreground: var(--ink);
   --sidebar-border: var(--line);
   --sidebar-ring: var(--teal);
diff --git a/frontend/src/components/layout/AppSidebar.tsx b/frontend/src/components/layout/AppSidebar.tsx
index cabb8893..cf188f74 100644
--- a/frontend/src/components/layout/AppSidebar.tsx
+++ b/frontend/src/components/layout/AppSidebar.tsx
@@ -2,7 +2,6 @@
 
 import { useState, useEffect } from 'react'
 import Link from 'next/link'
-import Image from 'next/image'
 import { usePathname } from 'next/navigation'
 
 import { cn } from '@/lib/utils'
@@ -47,33 +46,44 @@ const getNavigation = (t: TFunction) => [
   {
     title: t('navigation.collect'),
     items: [
-      { name: t('navigation.sources'), href: '/sources', icon: FileText },
+      { name: t('navigation.sources'), href: '/sources', icon: FileText, iconClass: 'text-sage' },
     ],
   },
   {
     title: t('navigation.process'),
     items: [
-      { name: t('navigation.notebooks'), href: '/notebooks', icon: Book },
-      { name: t('navigation.askAndSearch'), href: '/search', icon: Search },
+      { name: t('navigation.notebooks'), href: '/notebooks', icon: Book, iconClass: 'text-teal' },
+      { name: t('navigation.askAndSearch'), href: '/search', icon: Search, iconClass: undefined },
     ],
   },
   {
     title: t('navigation.create'),
     items: [
-      { name: t('navigation.podcasts'), href: '/podcasts', icon: Mic },
+      { name: t('navigation.podcasts'), href: '/podcasts', icon: Mic, iconClass: 'text-mauve' },
     ],
   },
   {
     title: t('navigation.manage'),
     items: [
-      { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot },
-      { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle },
-      { name: t('navigation.settings'), href: '/settings', icon: Settings },
-      { name: t('navigation.advanced'), href: '/advanced', icon: Wrench },
+      { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot, iconClass: undefined },
+      { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle, iconClass: undefined },
+      { name: t('navigation.settings'), href: '/settings', icon: Settings, iconClass: undefined },
+      { name: t('navigation.advanced'), href: '/advanced', icon: Wrench, iconClass: undefined },
     ],
   },
 ] as const
 
+// The tri-hue mark recomposed in the owned palette: fern / gold / teal.
+function LogoPebbles({ className }: { className?: string }) {
+  return (
+    <span className={cn('flex items-center gap-[3px]', className)} aria-hidden="true">
+      <span className="size-[9px] rounded-[3px] bg-fern" />
+      <span className="size-[9px] rounded-[3px] bg-gold" />
+      <span className="size-[9px] rounded-[3px] bg-teal" />
+    </span>
+  )
+}
+
 type CreateTarget = 'source' | 'notebook' | 'podcast'
 
 export function AppSidebar() {
@@ -120,13 +130,7 @@ export function AppSidebar() {
         >
           {isCollapsed ? (
             <div className="relative flex items-center justify-center w-full">
-              <Image
-                src="/logo.svg"
-                alt="Open Notebook"
-                width={32}
-                height={32}
-                className="transition-opacity group-hover:opacity-0"
-              />
+              <LogoPebbles className="flex-col gap-[3px] transition-opacity group-hover:opacity-0" />
               <Button
                 variant="ghost"
                 size="sm"
@@ -138,9 +142,9 @@ export function AppSidebar() {
             </div>
           ) : (
             <>
-              <div className="flex items-center gap-2">
-                <Image src="/logo.svg" alt={t('common.appName')} width={32} height={32} />
-                <span className="text-base font-medium text-sidebar-foreground">
+              <div className="flex items-center gap-2.5">
+                <LogoPebbles />
+                <span className="font-display text-[15px] font-bold tracking-tight text-sidebar-foreground">
                   {t('common.appName')}
                 </span>
               </div>
@@ -178,7 +182,7 @@ export function AppSidebar() {
                         onClick={() => setCreateMenuOpen(true)}
                         variant="default"
                         size="sm"
-                        className="w-full justify-center px-2 bg-primary hover:bg-primary/90 text-primary-foreground border-0"
+                        className="w-full justify-center px-2 font-display font-bold"
                         aria-label={t('common.create')}
                       >
                         <Plus className="h-4 w-4" />
@@ -193,7 +197,7 @@ export function AppSidebar() {
                     onClick={() => setCreateMenuOpen(true)}
                     variant="default"
                     size="sm"
-                    className="w-full justify-start bg-primary hover:bg-primary/90 text-primary-foreground border-0"
+                    className="w-full justify-start font-display font-bold"
                    >
                     <Plus className="h-4 w-4 mr-2" />
                     {t('common.create')}
@@ -247,7 +251,7 @@ export function AppSidebar() {
               )}
               <div className="space-y-1">
                 {!isCollapsed && (
-                  <h3 className="mb-2 px-3 text-xs font-semibold uppercase tracking-wider text-sidebar-foreground/60">
+                  <h3 className="mb-1.5 px-3 text-[10.5px] font-bold uppercase tracking-[0.14em] text-sidebar-foreground/40">
                     {section.title}
                   </h3>
                 )}
@@ -256,14 +260,15 @@ export function AppSidebar() {
                   const isActive = pathname?.startsWith(item.href) || false
                   const button = (
                     <Button
-                      variant={isActive ? 'secondary' : 'ghost'}
+                      variant="ghost"
                       className={cn(
-                        'w-full gap-3 text-sidebar-foreground sidebar-menu-item',
-                        isActive && 'bg-sidebar-accent text-sidebar-accent-foreground',
+                        'w-full gap-2.5 text-[13px] font-medium text-sidebar-foreground/80 sidebar-menu-item relative',
+                        isActive &&
+                          'bg-popover font-semibold text-sidebar-foreground ring-1 ring-inset ring-border before:absolute before:-left-1.5 before:top-[7px] before:bottom-[7px] before:w-[3px] before:rounded-[2px] before:bg-fern',
                         isCollapsed ? 'justify-center px-2' : 'justify-start'
                       )}
                     >
-                      <item.icon className="h-4 w-4" />
+                      <item.icon className={cn('h-4 w-4 opacity-85', item.iconClass)} />
                       {!isCollapsed && <span>{item.name}</span>}
                     </Button>
                   )
diff --git a/frontend/src/components/podcasts/EpisodeCard.tsx b/frontend/src/components/podcasts/EpisodeCard.tsx
index bd260952..859ffd9a 100644
--- a/frontend/src/components/podcasts/EpisodeCard.tsx
+++ b/frontend/src/components/podcasts/EpisodeCard.tsx
@@ -225,7 +225,7 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
   const isFailed = FAILED_EPISODE_STATUSES.includes(episode.job_status as EpisodeStatus)
 
   return (
-    <Card className="shadow-sm">
+    <Card>
       <CardContent className="space-y-4 p-4">
         <div className="flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between">
           <div className="space-y-1">
@@ -257,7 +257,9 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
                 </DialogHeader>
                 <div className="space-y-4 overflow-hidden">
                   {audioSrc ? (
-                    <audio controls preload="none" src={audioSrc} className="w-full" />
+                    <div className="rounded-md border bg-card p-2">
+                      <audio controls preload="none" src={audioSrc} className="w-full" />
+                    </div>
                   ) : audioError ? (
                     <p className="text-sm text-destructive">{audioError}</p>
                   ) : null}
@@ -429,7 +431,9 @@ export function EpisodeCard({ episode, onDelete, deleting, onRetry, retrying }:
         </div>
 
         {audioSrc ? (
-          <audio controls preload="none" src={audioSrc} className="w-full" />
+          <div className="rounded-md border bg-card p-2">
+            <audio controls preload="none" src={audioSrc} className="w-full" />
+          </div>
         ) : audioError ? (
           <p className="text-sm text-destructive">{audioError}</p>
         ) : null}
diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 3d210002..5c623132 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -87,7 +87,7 @@ export function EpisodeProfilesPanel({
     <div className="space-y-6">
       <div className="flex items-center justify-between">
         <div>
-          <h2 className="text-lg font-semibold">{t('podcasts.episodeProfilesTitle')}</h2>
+          <h2 className="font-display text-lg font-semibold tracking-tight">{t('podcasts.episodeProfilesTitle')}</h2>
           <p className="text-sm text-muted-foreground">
             {t('podcasts.episodeProfilesDesc')}
           </p>
@@ -104,7 +104,7 @@ export function EpisodeProfilesPanel({
       ) : null}
 
       {sortedProfiles.length === 0 ? (
-        <div className="rounded-lg border border-dashed bg-muted/30 p-10 text-center text-sm text-muted-foreground">
+        <div className="rounded-md border border-dashed p-10 text-center text-sm text-muted-foreground">
           {t('podcasts.noEpisodeProfiles')}
         </div>
       ) : (
@@ -117,7 +117,7 @@ export function EpisodeProfilesPanel({
             const unconfigured = needsModelSetup(profile)
 
             return (
-              <Card key={profile.id} className="shadow-sm">
+              <Card key={profile.id}>
                 <CardHeader className="flex flex-col gap-2 md:flex-row md:items-start md:justify-between">
                   <div>
                     <div className="flex items-center gap-2">
diff --git a/frontend/src/components/podcasts/EpisodesTab.tsx b/frontend/src/components/podcasts/EpisodesTab.tsx
index 2f8baf9d..a8653e7a 100644
--- a/frontend/src/components/podcasts/EpisodesTab.tsx
+++ b/frontend/src/components/podcasts/EpisodesTab.tsx
@@ -44,7 +44,7 @@ function SummaryBadge({ label, value }: { label: string; value: number }) {
   return (
     <Badge variant="outline" className="font-medium">
       <span className="text-muted-foreground mr-1.5">{label}</span>
-      <span className="text-foreground">{value}</span>
+      <span className="font-mono text-foreground">{value}</span>
     </Badge>
   )
 }
@@ -84,7 +84,7 @@ export function EpisodesTab() {
     <div className="space-y-6">
       <div className="flex flex-wrap items-center justify-between gap-3">
         <div className="space-y-1">
-          <h2 className="text-xl font-semibold">{t('podcasts.overviewTitle')}</h2>
+          <h2 className="font-display text-xl font-semibold tracking-tight">{t('podcasts.overviewTitle')}</h2>
           <p className="text-sm text-muted-foreground">
             {t('podcasts.overviewDesc')}
           </p>
@@ -135,7 +135,7 @@ export function EpisodesTab() {
       ) : null}
 
       {emptyState ? (
-        <div className="rounded-lg border border-dashed bg-muted/30 p-10 text-center">
+        <div className="rounded-md border border-dashed p-10 text-center">
           <p className="text-sm text-muted-foreground">
             {t('podcasts.noEpisodesYet')}
           </p>
diff --git a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
index f674f6d7..cec0c7dc 100644
--- a/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/SpeakerProfilesPanel.tsx
@@ -74,7 +74,7 @@ export function SpeakerProfilesPanel({
     <div className="space-y-6">
       <div className="flex items-center justify-between">
         <div>
-          <h2 className="text-lg font-semibold">{t('podcasts.speakerProfilesTitle')}</h2>
+          <h2 className="font-display text-lg font-semibold tracking-tight">{t('podcasts.speakerProfilesTitle')}</h2>
           <p className="text-sm text-muted-foreground">
             {t('podcasts.speakerProfilesDesc')}
           </p>
@@ -83,7 +83,7 @@ export function SpeakerProfilesPanel({
       </div>
 
       {sortedProfiles.length === 0 ? (
-        <div className="rounded-lg border border-dashed bg-muted/30 p-8 text-center text-sm text-muted-foreground">
+        <div className="rounded-md border border-dashed p-8 text-center text-sm text-muted-foreground">
           {t('podcasts.noSpeakerProfiles')}
         </div>
       ) : (
@@ -94,7 +94,7 @@ export function SpeakerProfilesPanel({
             const unconfigured = needsModelSetup(profile)
 
             return (
-              <Card key={profile.id} className="shadow-sm">
+              <Card key={profile.id}>
                 <CardHeader className="flex flex-col gap-2">
                   <div className="flex items-center justify-between gap-2">
                     <div>
diff --git a/frontend/src/components/podcasts/TemplatesTab.tsx b/frontend/src/components/podcasts/TemplatesTab.tsx
index 695a3a61..934ac251 100644
--- a/frontend/src/components/podcasts/TemplatesTab.tsx
+++ b/frontend/src/components/podcasts/TemplatesTab.tsx
@@ -30,7 +30,7 @@ export function TemplatesTab() {
   return (
     <div className="space-y-6">
       <div className="space-y-1">
-        <h2 className="text-xl font-semibold">{t('podcasts.templatesWorkspaceTitle')}</h2>
+        <h2 className="font-display text-xl font-semibold tracking-tight">{t('podcasts.templatesWorkspaceTitle')}</h2>
         <p className="text-sm text-muted-foreground">
           {t('podcasts.templatesWorkspaceDesc')}
         </p>
@@ -39,11 +39,11 @@ export function TemplatesTab() {
       <Accordion type="single" collapsible className="w-full">
         <AccordionItem
           value="overview"
-          className="overflow-hidden rounded-xl border border-border bg-muted/40 px-4"
+          className="overflow-hidden rounded-md border border-border bg-card px-4"
         >
           <AccordionTrigger className="gap-2 py-4 text-left text-sm font-semibold">
             <div className="flex items-center gap-2">
-              <Lightbulb className="h-4 w-4 text-primary" />
+              <Lightbulb className="h-4 w-4 text-gold" />
               {t('podcasts.howTemplatesPowerTitle')}
             </div>
           </AccordionTrigger>
diff --git a/frontend/src/components/search/StreamingResponse.tsx b/frontend/src/components/search/StreamingResponse.tsx
index 4df71fa7..d459e56c 100644
--- a/frontend/src/components/search/StreamingResponse.tsx
+++ b/frontend/src/components/search/StreamingResponse.tsx
@@ -68,7 +68,7 @@ export function StreamingResponse({
             <CardHeader>
               <CollapsibleTrigger className="flex items-center justify-between w-full hover:opacity-80">
                 <CardTitle className="text-base flex items-center gap-2">
-                  <Sparkles className="h-4 w-4 text-primary" />
+                  <Sparkles className="h-4 w-4 text-teal" />
                   {t('common.strategy')}
                 </CardTitle>
                 <ChevronDown className={`h-4 w-4 transition-transform ${strategyOpen ? 'rotate-180' : ''}`} />
@@ -86,7 +86,7 @@ export function StreamingResponse({
                     <div className="space-y-2">
                       {strategy.searches.map((search, i) => (
                         <div key={i} className="flex items-start gap-2">
-                          <Badge variant="outline" className="mt-0.5">{i + 1}</Badge>
+                          <Badge variant="outline" className="mt-0.5 font-mono text-[11px]">{i + 1}</Badge>
                           <div className="flex-1">
                             <p className="text-sm font-medium">{search.term}</p>
                             <p className="text-xs text-muted-foreground">{search.instructions}</p>
@@ -109,7 +109,7 @@ export function StreamingResponse({
             <CardHeader>
               <CollapsibleTrigger className="flex items-center justify-between w-full hover:opacity-80">
                 <CardTitle className="text-base flex items-center gap-2">
-                  <Lightbulb className="h-4 w-4 text-primary" />
+                  <Lightbulb className="h-4 w-4 text-teal" />
                   {t('common.individualAnswers', { count: answers.length })}
                 </CardTitle>
                 <ChevronDown className={`h-4 w-4 transition-transform ${answersOpen ? 'rotate-180' : ''}`} />
@@ -130,10 +130,10 @@ export function StreamingResponse({
 
       {/* Final Answer Section - Always Open */}
       {finalAnswer && (
-        <Card className="border-primary">
+        <Card className="border-teal">
           <CardHeader>
             <CardTitle className="text-base flex items-center gap-2">
-              <CheckCircle className="h-4 w-4 text-primary" />
+              <CheckCircle className="h-4 w-4 text-teal" />
               {t('common.finalAnswer')}
             </CardTitle>
           </CardHeader>
diff --git a/frontend/src/components/settings/CredentialItem.tsx b/frontend/src/components/settings/CredentialItem.tsx
index b1d8232a..75c4f6db 100644
--- a/frontend/src/components/settings/CredentialItem.tsx
+++ b/frontend/src/components/settings/CredentialItem.tsx
@@ -171,7 +171,7 @@ export function CredentialItem({
                         <Badge
                           key={model.id}
                           variant={defaultSlot ? 'default' : 'secondary'}
-                          className="text-xs gap-1 pr-0.5 group/model"
+                          className="font-mono text-[11px] gap-1 pr-0.5 group/model"
                         >
                           {model.name}
                           {defaultSlot && <span className="ml-0.5 opacity-75">({defaultSlot})</span>}
diff --git a/frontend/src/components/settings/ProviderSection.tsx b/frontend/src/components/settings/ProviderSection.tsx
index 349e6f27..91138185 100644
--- a/frontend/src/components/settings/ProviderSection.tsx
+++ b/frontend/src/components/settings/ProviderSection.tsx
@@ -49,11 +49,11 @@ export function ProviderSection({
   const activeTypes = new Set<string>(providerModels.map(m => m.type))
 
   return (
-    <Card className={!hasCredentials ? 'opacity-80' : undefined}>
+    <Card className={hasCredentials ? 'border-l-2 border-l-fern' : undefined}>
       <CardHeader className="pb-3">
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-3 flex-wrap">
-            <CardTitle className="text-lg capitalize">{displayName}</CardTitle>
+            <CardTitle className={`text-lg capitalize ${hasCredentials ? '' : 'text-muted-foreground'}`}>{displayName}</CardTitle>
             <div className="flex items-center gap-1">
               {modalities.map((type) => (
                 <Badge
@@ -69,15 +69,15 @@ export function ProviderSection({
           </div>
           <div className="flex items-center gap-2">
             {hasCredentials ? (
-              <Badge className="bg-fern-tint text-fern hover:bg-fern-tint">
-                <Check className="mr-1 h-3 w-3" />
+              <span className="inline-flex items-center gap-1.5 text-xs font-medium text-fern">
+                <Check className="h-3 w-3" />
                 {t('apiKeys.configured')}
-              </Badge>
+              </span>
             ) : (
-              <Badge variant="outline" className="text-muted-foreground border-dashed">
-                <X className="mr-1 h-3 w-3" />
+              <span className="inline-flex items-center gap-1.5 text-xs font-medium text-muted-foreground">
+                <X className="h-3 w-3" />
                 {t('apiKeys.notConfigured')}
-              </Badge>
+              </span>
             )}
           </div>
         </div>
diff --git a/frontend/src/components/sources/AddExistingSourceDialog.tsx b/frontend/src/components/sources/AddExistingSourceDialog.tsx
index 17e62110..ff2d35d0 100644
--- a/frontend/src/components/sources/AddExistingSourceDialog.tsx
+++ b/frontend/src/components/sources/AddExistingSourceDialog.tsx
@@ -229,8 +229,8 @@ export function AddExistingSourceDialog({
                   return (
                     <div
                       key={source.id}
-                      className={`flex items-start gap-3 p-3 rounded-lg border transition-colors min-w-0 ${
-                        isSelected ? 'bg-accent border-accent-foreground/20' : 'hover:bg-accent/50'
+                      className={`flex items-start gap-3 p-3 rounded-md transition-colors min-w-0 ${
+                        isSelected ? 'bg-accent' : 'hover:bg-accent/50'
                       }`}
                     >
                       <Checkbox
@@ -266,9 +266,9 @@ export function AddExistingSourceDialog({
 
           {/* Truncation Warning */}
           {allSources.length >= 100 && !debouncedSearchQuery && (
-            <div className="text-xs text-muted-foreground bg-muted/50 p-2 rounded-md">
+            <p className="text-xs text-muted-foreground">
               {t('sources.showingFirst100')}
-            </div>
+            </p>
           )}
 
           {/* Selection Summary */}
diff --git a/frontend/src/components/sources/AddSourceDialog.tsx b/frontend/src/components/sources/AddSourceDialog.tsx
index 0142e1b7..1b023948 100644
--- a/frontend/src/components/sources/AddSourceDialog.tsx
+++ b/frontend/src/components/sources/AddSourceDialog.tsx
@@ -585,7 +585,7 @@ export function AddSourceDialog({
           </WizardContainer>
 
           {/* Navigation */}
-          <div className="flex justify-between items-center px-6 py-4 border-t border-border bg-muted">
+          <div className="flex justify-between items-center px-6 py-4 border-t border-border">
             <Button 
               type="button" 
               variant="outline" 
diff --git a/frontend/src/components/sources/ChatPanel.tsx b/frontend/src/components/sources/ChatPanel.tsx
index 0fc54ff2..c62b5306 100644
--- a/frontend/src/components/sources/ChatPanel.tsx
+++ b/frontend/src/components/sources/ChatPanel.tsx
@@ -106,8 +106,8 @@ export function ChatPanel({
     <Card className="flex flex-col h-full flex-1 overflow-hidden">
       <CardHeader className="pb-3 flex-shrink-0">
         <div className="flex items-center justify-between">
-          <CardTitle className="flex items-center gap-2">
-            <Bot className="h-5 w-5" />
+          <CardTitle className="flex items-center gap-2 text-xs font-semibold uppercase tracking-[0.13em] text-muted-foreground">
+            <span aria-hidden className="h-3.5 w-[3px] rounded-full bg-teal" />
             {title || (contextType === 'source' ? t('chat.chatWith', { name: t('navigation.sources') }) : t('chat.chatWith', { name: t('common.notebook') }))}
           </CardTitle>
           {onSelectSession && onCreateSession && onDeleteSession && (
@@ -115,7 +115,7 @@ export function ChatPanel({
               <Button
                 variant="ghost"
                 size="sm"
-                className="gap-2"
+                className="gap-2 text-muted-foreground"
                 onClick={() => setSessionManagerOpen(true)}
                 disabled={loadingSessions}
               >
@@ -165,11 +165,11 @@ export function ChatPanel({
             {isStreaming && (
               <div className="flex gap-3 justify-start">
                 <div className="flex-shrink-0">
-                  <div className="h-8 w-8 rounded-full bg-primary/10 flex items-center justify-center">
-                    <Bot className="h-4 w-4" />
+                  <div className="h-8 w-8 rounded-full bg-teal-tint flex items-center justify-center">
+                    <Bot className="h-4 w-4 text-teal" />
                   </div>
                 </div>
-                <div className="rounded-lg px-4 py-2 bg-muted">
+                <div className="rounded-lg px-4 py-2 bg-card border">
                   <Loader2 className="h-4 w-4 animate-spin" />
                 </div>
               </div>
@@ -335,17 +335,17 @@ const ChatMessage = memo(function ChatMessage({
     >
       {message.type === 'ai' && (
         <div className="flex-shrink-0">
-          <div className="h-8 w-8 rounded-full bg-primary/10 flex items-center justify-center">
-            <Bot className="h-4 w-4" />
+          <div className="h-8 w-8 rounded-full bg-teal-tint flex items-center justify-center">
+            <Bot className="h-4 w-4 text-teal" />
           </div>
         </div>
       )}
       <div className="flex flex-col gap-2 max-w-[80%]">
         <div
-          className={`rounded-lg px-4 py-2 ${
+          className={`rounded-lg px-4 py-2 border ${
             message.type === 'human'
-              ? 'bg-primary text-primary-foreground'
-              : 'bg-muted'
+              ? 'bg-muted'
+              : 'bg-card'
           }`}
         >
           {message.type === 'ai' ? (
@@ -366,8 +366,8 @@ const ChatMessage = memo(function ChatMessage({
       </div>
       {message.type === 'human' && (
         <div className="flex-shrink-0">
-          <div className="h-8 w-8 rounded-full bg-primary flex items-center justify-center">
-            <User className="h-4 w-4 text-primary-foreground" />
+          <div className="h-8 w-8 rounded-full bg-muted border flex items-center justify-center">
+            <User className="h-4 w-4 text-muted-foreground" />
           </div>
         </div>
       )}
diff --git a/frontend/src/components/sources/NotebookAssociations.tsx b/frontend/src/components/sources/NotebookAssociations.tsx
index b97f0b3d..9f48ce93 100644
--- a/frontend/src/components/sources/NotebookAssociations.tsx
+++ b/frontend/src/components/sources/NotebookAssociations.tsx
@@ -2,7 +2,6 @@
 
 import { useState, useEffect, useMemo } from 'react'
 import { LoaderIcon, BookOpen, Check } from 'lucide-react'
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
 import { Button } from '@/components/ui/button'
 import { Checkbox } from '@/components/ui/checkbox'
 import { ScrollArea } from '@/components/ui/scroll-area'
@@ -106,56 +105,46 @@ export function NotebookAssociations({
 
   if (isLoading) {
     return (
-      <Card>
-        <CardHeader>
-          <CardTitle className="flex items-center gap-2">
-            <BookOpen className="h-5 w-5" />
-            {t('sources.manageNotebooks')}
-          </CardTitle>
-          <CardDescription>
-            {t('sources.manageNotebooksDesc')}
-          </CardDescription>
-        </CardHeader>
-        <CardContent>
-          <div className="flex items-center justify-center py-8">
-            <LoaderIcon className="h-6 w-6 animate-spin text-muted-foreground" />
-          </div>
-        </CardContent>
-      </Card>
+      <section className="mt-6 border-t border-border pt-5">
+        <h3 className="flex items-center gap-2 text-[15.5px] font-medium">
+          <BookOpen className="h-4 w-4" />
+          {t('sources.manageNotebooks')}
+        </h3>
+        <p className="mt-1 text-sm text-muted-foreground">
+          {t('sources.manageNotebooksDesc')}
+        </p>
+        <div className="flex items-center justify-center py-8">
+          <LoaderIcon className="h-6 w-6 animate-spin text-muted-foreground" />
+        </div>
+      </section>
     )
   }
 
   if (!notebooks || notebooks.length === 0) {
     return (
-      <Card>
-        <CardHeader>
-          <CardTitle className="flex items-center gap-2">
-            <BookOpen className="h-5 w-5" />
-            {t('sources.manageNotebooks')}
-          </CardTitle>
-          <CardDescription>
-            {t('sources.manageNotebooksDesc')}
-          </CardDescription>
-        </CardHeader>
-        <CardContent>
-          <p className="text-sm text-muted-foreground">{t('sources.noNotebooksAvailable')}</p>
-        </CardContent>
-      </Card>
+      <section className="mt-6 border-t border-border pt-5">
+        <h3 className="flex items-center gap-2 text-[15.5px] font-medium">
+          <BookOpen className="h-4 w-4" />
+          {t('sources.manageNotebooks')}
+        </h3>
+        <p className="mt-1 text-sm text-muted-foreground">
+          {t('sources.manageNotebooksDesc')}
+        </p>
+        <p className="mt-4 text-sm text-muted-foreground">{t('sources.noNotebooksAvailable')}</p>
+      </section>
     )
   }
 
   return (
-    <Card>
-      <CardHeader>
-        <CardTitle className="flex items-center gap-2">
-          <BookOpen className="h-5 w-5" />
-          {t('sources.manageNotebooks')}
-        </CardTitle>
-        <CardDescription>
-          {t('sources.manageNotebooksDesc')}
-        </CardDescription>
-      </CardHeader>
-      <CardContent className="space-y-4">
+    <section className="mt-6 border-t border-border pt-5">
+      <h3 className="flex items-center gap-2 text-[15.5px] font-medium">
+        <BookOpen className="h-4 w-4" />
+        {t('sources.manageNotebooks')}
+      </h3>
+      <p className="mt-1 text-sm text-muted-foreground">
+        {t('sources.manageNotebooksDesc')}
+      </p>
+      <div className="mt-4 space-y-4">
         <ScrollArea className="h-[300px] border rounded-md p-4">
           <div className="space-y-3">
             {notebooks
@@ -167,8 +156,8 @@ export function NotebookAssociations({
                 return (
                   <div
                     key={notebook.id}
-                    className={`flex items-start gap-3 p-3 rounded-lg border transition-colors ${
-                      isSelected ? 'bg-accent border-accent-foreground/20' : 'hover:bg-accent/50'
+                    className={`flex items-start gap-3 p-3 rounded-md transition-colors ${
+                      isSelected ? 'bg-accent' : 'hover:bg-accent/50'
                     }`}
                   >
                     <Checkbox
@@ -223,7 +212,7 @@ export function NotebookAssociations({
             </Button>
           </div>
         )}
-      </CardContent>
-    </Card>
+      </div>
+    </section>
   )
 }
diff --git a/frontend/src/components/sources/SourceCard.tsx b/frontend/src/components/sources/SourceCard.tsx
index 0fc8c718..005f4f80 100644
--- a/frontend/src/components/sources/SourceCard.tsx
+++ b/frontend/src/components/sources/SourceCard.tsx
@@ -2,7 +2,6 @@
 
 import React, { useState, useEffect, memo } from 'react'
 import { SourceListResponse } from '@/lib/types/api'
-import { Badge } from '@/components/ui/badge'
 import { Card, CardContent } from '@/components/ui/card'
 import { Button } from '@/components/ui/button'
 import {
@@ -223,7 +222,7 @@ function SourceCardImpl({
   return (
     <Card
       className={cn(
-        'transition-all duration-200 hover:shadow-md group relative cursor-pointer border border-border/60 dark:border-border/40',
+        'transition-colors duration-150 shadow-none hover:border-sage/50 group relative cursor-pointer border',
         className
       )}
       onClick={handleCardClick}
@@ -248,7 +247,7 @@ function SourceCardImpl({
                 </div>
 
                 {/* Source type indicator */}
-                <div className="flex items-center gap-1 text-gray-500">
+                <div className="flex items-center gap-1 text-muted-foreground">
                   <SourceTypeIcon className="h-3 w-3" />
                   <span className="text-xs capitalize">{t('common.source')}</span>
                 </div>
@@ -258,7 +257,7 @@ function SourceCardImpl({
             {/* Title */}
             <div className={cn('mb-1.5', !isCompleted && 'mb-1')}>
               <h4
-                className="text-sm font-medium leading-tight line-clamp-2 break-all"
+                className="text-sm font-medium leading-tight line-clamp-2 break-all pr-6"
                 title={title}
               >
                 {title}
@@ -267,36 +266,31 @@ function SourceCardImpl({
 
             {/* Processing message for active statuses */}
             {statusData?.message && (isProcessing || isFailed) && (
-              <p className="text-xs text-gray-600 mb-2 italic">
+              <p className="text-xs text-muted-foreground mb-2 italic">
                 {statusData.message}
               </p>
             )}
 
-            {/* Metadata badges */}
-            <div className="flex items-center gap-2 flex-wrap">
-              {/* Source type badge */}
-              <Badge variant="secondary" className="text-xs flex items-center gap-1">
+            {/* One-line metadata row: type + meta in a single muted line */}
+            <div className="flex items-center gap-1.5 flex-wrap text-xs text-muted-foreground min-w-0">
+              <span className="inline-flex items-center gap-1">
                 <SourceTypeIcon className="h-3 w-3" />
                 {sourceType === 'link' ? t('sources.addUrl') : sourceType === 'upload' ? t('sources.uploadFile') : t('sources.enterText')}
-              </Badge>
+              </span>
 
               {isCompleted && source.insights_count > 0 && (
-                <Badge variant="outline" className="text-xs">
-                  {t('sources.insightsCount', { count: source.insights_count })}
-                </Badge>
+                <>
+                  <span aria-hidden>·</span>
+                  <span>{t('sources.insightsCount', { count: source.insights_count })}</span>
+                </>
               )}
               {source.topics && source.topics.length > 0 && isCompleted && (
                 <>
-                  {source.topics.slice(0, 2).map((topic, index) => (
-                    <Badge key={index} variant="outline" className="text-xs">
-                      {topic}
-                    </Badge>
-                  ))}
-                  {source.topics.length > 2 && (
-                    <Badge variant="outline" className="text-xs">
-                      +{source.topics.length - 2}
-                    </Badge>
-                  )}
+                  <span aria-hidden>·</span>
+                  <span className="truncate">
+                    {source.topics.slice(0, 2).join(', ')}
+                    {source.topics.length > 2 && ` +${source.topics.length - 2}`}
+                  </span>
                 </>
               )}
             </div>
@@ -313,13 +307,13 @@ function SourceCardImpl({
               />
             )}
 
-            {/* Actions dropdown */}
+            {/* Actions dropdown — ⋮ pinned to the card's top-right */}
             <DropdownMenu>
               <DropdownMenuTrigger asChild>
                 <Button
                   variant="ghost"
                   size="sm"
-                  className="h-8 w-8 p-0 opacity-0 group-hover:opacity-100 transition-opacity"
+                  className="absolute top-1.5 right-1.5 h-7 w-7 p-0 text-muted-foreground opacity-0 group-hover:opacity-100 transition-opacity"
                   onClick={(e) => e.stopPropagation()}
                 >
                   <MoreVertical className="h-4 w-4" />
@@ -412,12 +406,12 @@ function SourceCardImpl({
         {isProcessing && typeof statusData?.processing_info?.progress === 'number' && (
           <div className="mt-3 pt-2 border-t">
             <div className="flex justify-between items-center mb-1">
-            <span className="text-xs text-gray-600">{t('common.progress')}</span>
-              <span className="text-xs text-gray-600">
+            <span className="text-xs text-muted-foreground">{t('common.progress')}</span>
+              <span className="text-xs text-muted-foreground">
                 {Math.round(statusData.processing_info.progress as number)}%
               </span>
             </div>
-            <div className="w-full bg-gray-200 rounded-full h-1.5">
+            <div className="w-full bg-muted rounded-full h-1.5">
               <div
                 className="bg-teal h-1.5 rounded-full transition-all duration-300"
                 style={{ width: `${statusData.processing_info.progress as number}%` }}
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index 5de643cb..5a498399 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -16,7 +16,6 @@ import { ContentUnavailable } from '@/components/common/ContentUnavailable'
 import { isNotFoundError } from '@/lib/utils/error-handler'
 import { InlineEdit } from '@/components/common/InlineEdit'
 import { Button } from '@/components/ui/button'
-import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card'
 import { Badge } from '@/components/ui/badge'
 import { Label } from '@/components/ui/label'
 import { Alert, AlertDescription, AlertTitle } from '@/components/ui/alert'
@@ -53,7 +52,6 @@ import {
   Download,
   Copy,
   CheckCircle,
-  Youtube,
   MoreVertical,
   Trash2,
   Sparkles,
@@ -412,7 +410,7 @@ function SourceDetailContentInner({
   return (
     <div className="flex flex-col h-full">
       {/* Header */}
-      <div className="pb-4 px-2 pr-12">
+      <div className="pb-5 pr-10">
         <div className="flex items-start justify-between">
           <div className="flex-1">
             <InlineEdit
@@ -423,7 +421,7 @@ function SourceDetailContentInner({
               placeholder={t('sources.titlePlaceholder')}
               emptyText={t('sources.untitledSource')}
             />
-            <p className="mt-1 text-sm text-muted-foreground">
+            <p className="mt-1 font-mono text-xs text-muted-foreground">
               {t('sources.id')}: {source.id}
             </p>
           </div>
@@ -486,9 +484,9 @@ function SourceDetailContentInner({
       </div>
 
       {/* Tabs Content */}
-      <div className="flex-1 overflow-y-auto px-2">
+      <div className="flex-1 overflow-y-auto">
         <Tabs defaultValue="content" className="w-full">
-          <TabsList className="grid w-full grid-cols-3 sticky top-0 z-10">
+          <TabsList className="w-full sticky top-0 z-10 bg-card">
             <TabsTrigger value="content">{t('sources.content')}</TabsTrigger>
             <TabsTrigger value="insights">
               {t('common.insights')} {insights.length > 0 && `(${insights.length})`}
@@ -496,175 +494,161 @@ function SourceDetailContentInner({
             <TabsTrigger value="details">{t('sources.details')}</TabsTrigger>
           </TabsList>
 
-          <TabsContent value="content" className="mt-6">
-            <Card>
-              <CardHeader>
-                <CardTitle className="flex items-center gap-2">
-                  {isYouTubeUrl && <Youtube className="h-5 w-5" />}
-                  {t('sources.content')}
-                </CardTitle>
-                {externalHref && !isYouTubeUrl && (
-                  <CardDescription className="flex items-center gap-2">
-                    <LinkIcon className="h-4 w-4" />
-                    <a
-                      href={externalHref}
-                      target="_blank"
-                      rel="noopener noreferrer"
-                      className="hover:underline text-primary"
-                    >
-                      {source.asset?.url}
-                    </a>
-                  </CardDescription>
-                )}
-              </CardHeader>
-              <CardContent>
-                {isYouTubeUrl && youTubeVideoId && (
-                  <div className="mb-6">
-                    <div className="aspect-video rounded-lg overflow-hidden bg-black">
-                      <iframe
-                        src={`https://www.youtube.com/embed/${youTubeVideoId}`}
-                        title={t('common.accessibility.ytVideo')}
-                        className="w-full h-full"
-                        allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
-                        allowFullScreen
-                      />
-                    </div>
-                    {externalHref && (
-                      <div className="mt-2">
-                        <a
-                          href={externalHref}
-                          target="_blank"
-                          rel="noopener noreferrer"
-                          className="text-sm text-muted-foreground hover:underline inline-flex items-center gap-1"
-                        >
-                          <ExternalLink className="h-3 w-3" />
-                          {t('sources.openOnYoutube')}
-                        </a>
-                      </div>
-                    )}
-                  </div>
-                )}
-                <MarkdownRenderer>
-                  {source.full_text || t('sources.noContent')}
-                </MarkdownRenderer>
-              </CardContent>
-            </Card>
-          </TabsContent>
-
-          <TabsContent value="insights" className="mt-6">
-            <Card>
-              <CardHeader>
-                <CardTitle className="flex items-center justify-between">
-                  <span className="flex items-center gap-2">
-                    <Lightbulb className="h-5 w-5" />
-                    {t('common.insights')}
-                  </span>
-                  <Badge variant="secondary">{insights.length}</Badge>
-                </CardTitle>
-                <CardDescription>
-                  {t('sources.insightsDesc')}
-                </CardDescription>
-              </CardHeader>
-              <CardContent className="space-y-4">
-                {/* Create New Insight */}
-                <div className="rounded-lg border bg-muted/30 p-4">
-                  <Label 
-                    htmlFor="transformation-select"
-                    className="mb-3 text-sm font-semibold flex items-center gap-2"
+          <TabsContent value="content" className="mt-5">
+            <section>
+              {externalHref && !isYouTubeUrl && (
+                <p className="mb-4 flex items-center gap-2 text-xs text-muted-foreground">
+                  <LinkIcon className="h-3.5 w-3.5 shrink-0" />
+                  <a
+                    href={externalHref}
+                    target="_blank"
+                    rel="noopener noreferrer"
+                    className="truncate font-mono hover:underline"
                   >
-                    <Sparkles className="h-4 w-4" />
-                    {t('sources.generateNewInsight')}
-                  </Label>
-                  <div className="flex gap-2">
-                    <Select
-                      name="transformation"
-                      value={selectedTransformation}
-                      onValueChange={setSelectedTransformation}
-                      disabled={creatingInsight}
-                    >
-                      <SelectTrigger id="transformation-select" className="flex-1">
-                        <SelectValue placeholder={t('sources.selectTransformation')} />
-                      </SelectTrigger>
-                      <SelectContent>
-                        {transformations.map((trans) => (
-                          <SelectItem key={trans.id} value={trans.id}>
-                            {trans.title || trans.name}
-                          </SelectItem>
-                        ))}
-                      </SelectContent>
-                    </Select>
-                    <Button
-                      size="sm"
-                      onClick={createInsight}
-                      disabled={!selectedTransformation || creatingInsight}
-                    >
-                      {creatingInsight ? (
-                        <>
-                          <LoadingSpinner className="mr-2 h-3 w-3" />
-                          {t('common.creating')}
-                        </>
-                      ) : (
-                        <>
-                          <Plus className="mr-2 h-4 w-4" />
-                          {t('common.create')}
-                        </>
-                      )}
-                    </Button>
+                    {source.asset?.url}
+                  </a>
+                </p>
+              )}
+              {isYouTubeUrl && youTubeVideoId && (
+                <div className="mb-6">
+                  <div className="aspect-video rounded-md overflow-hidden bg-black">
+                    <iframe
+                      src={`https://www.youtube.com/embed/${youTubeVideoId}`}
+                      title={t('common.accessibility.ytVideo')}
+                      className="w-full h-full"
+                      allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
+                      allowFullScreen
+                    />
                   </div>
+                  {externalHref && (
+                    <div className="mt-2">
+                      <a
+                        href={externalHref}
+                        target="_blank"
+                        rel="noopener noreferrer"
+                        className="text-sm text-muted-foreground hover:underline inline-flex items-center gap-1"
+                      >
+                        <ExternalLink className="h-3 w-3" />
+                        {t('sources.openOnYoutube')}
+                      </a>
+                    </div>
+                  )}
                 </div>
-
-                {/* Insights List */}
-                {loadingInsights ? (
-                  <div className="flex items-center justify-center py-8">
-                    <LoadingSpinner />
-                  </div>
-                ) : insights.length === 0 ? (
-                  <div className="text-center py-8 text-muted-foreground">
-                    <Lightbulb className="h-12 w-12 mx-auto mb-3 opacity-50" />
-                    <p className="text-sm">{t('sources.noInsightsYet')}</p>
-                    <p className="text-xs mt-1">{t('sources.createFirstInsight')}</p>
-                  </div>
-                ) : (
-                  <div className="space-y-3">
-                    {insights.map((insight) => (
-                      <div key={insight.id} className="rounded-lg border bg-background p-4">
-                        <div className="flex items-start justify-between">
-                          <div className="flex items-center gap-2">
-                            <Badge variant="outline" className="text-xs uppercase">
-                              {insight.insight_type}
-                            </Badge>
-                          </div>
-                        </div>
-                        <p className="mt-2 text-sm text-muted-foreground">
-                          {insight.content.slice(0, 180)}{insight.content.length > 180 ? '…' : ''}
-                        </p>
-                        <div className="mt-3 flex justify-end gap-2">
-                          <Button size="sm" variant="outline" onClick={() => setSelectedInsight(insight)}>
-                            {t('sources.viewInsight')}
-                          </Button>
-                          <Button
-                            size="sm"
-                            variant="outline"
-                            onClick={() => setInsightToDelete(insight.id)}
-                            className="text-destructive hover:text-destructive"
-                          >
-                            <Trash2 className="h-4 w-4" />
-                          </Button>
-                        </div>
-                      </div>
-                    ))}
-                  </div>
-                )}
-              </CardContent>
-            </Card>
+              )}
+              <MarkdownRenderer>
+                {source.full_text || t('sources.noContent')}
+              </MarkdownRenderer>
+            </section>
           </TabsContent>
 
-          <TabsContent value="details" className="mt-6">
-            <Card>
-              <CardHeader>
-                <CardTitle>{t('sources.details')}</CardTitle>
-              </CardHeader>
-              <CardContent className="space-y-6">
+          <TabsContent value="insights" className="mt-5">
+            <section>
+              <div className="flex items-center justify-between">
+                <h3 className="flex items-center gap-2 text-[15.5px] font-medium">
+                  <Lightbulb className="h-4 w-4 text-teal" />
+                  {t('common.insights')}
+                  <span className="font-mono text-xs text-muted-foreground">{insights.length}</span>
+                </h3>
+              </div>
+              <p className="mt-1 text-sm text-muted-foreground">
+                {t('sources.insightsDesc')}
+              </p>
+
+              {/* Create New Insight */}
+              <div className="mt-5 border-b border-border pb-5">
+                <Label
+                  htmlFor="transformation-select"
+                  className="mb-3 text-sm font-medium flex items-center gap-2"
+                >
+                  <Sparkles className="h-4 w-4 text-teal" />
+                  {t('sources.generateNewInsight')}
+                </Label>
+                <div className="flex gap-2">
+                  <Select
+                    name="transformation"
+                    value={selectedTransformation}
+                    onValueChange={setSelectedTransformation}
+                    disabled={creatingInsight}
+                  >
+                    <SelectTrigger id="transformation-select" className="flex-1">
+                      <SelectValue placeholder={t('sources.selectTransformation')} />
+                    </SelectTrigger>
+                    <SelectContent>
+                      {transformations.map((trans) => (
+                        <SelectItem key={trans.id} value={trans.id}>
+                          {trans.title || trans.name}
+                        </SelectItem>
+                      ))}
+                    </SelectContent>
+                  </Select>
+                  <Button
+                    size="sm"
+                    onClick={createInsight}
+                    disabled={!selectedTransformation || creatingInsight}
+                  >
+                    {creatingInsight ? (
+                      <>
+                        <LoadingSpinner className="mr-2 h-3 w-3" />
+                        {t('common.creating')}
+                      </>
+                    ) : (
+                      <>
+                        <Plus className="mr-2 h-4 w-4" />
+                        {t('common.create')}
+                      </>
+                    )}
+                  </Button>
+                </div>
+              </div>
+
+              {/* Insights List */}
+              {loadingInsights ? (
+                <div className="flex items-center justify-center py-8">
+                  <LoadingSpinner />
+                </div>
+              ) : insights.length === 0 ? (
+                <div className="text-center py-8 text-muted-foreground">
+                  <Lightbulb className="h-12 w-12 mx-auto mb-3 opacity-40" />
+                  <p className="text-sm">{t('sources.noInsightsYet')}</p>
+                  <p className="text-xs mt-1">{t('sources.createFirstInsight')}</p>
+                </div>
+              ) : (
+                <div className="divide-y divide-border">
+                  {insights.map((insight) => (
+                    <div key={insight.id} className="py-4">
+                      <div className="flex items-center gap-2">
+                        <span className="h-1.5 w-1.5 rounded-full bg-teal" aria-hidden="true" />
+                        <span className="text-xs font-medium uppercase tracking-wide text-teal">
+                          {insight.insight_type}
+                        </span>
+                      </div>
+                      <p className="mt-2 text-sm text-muted-foreground">
+                        {insight.content.slice(0, 180)}{insight.content.length > 180 ? '…' : ''}
+                      </p>
+                      <div className="mt-3 flex justify-end gap-2">
+                        <Button size="sm" variant="outline" onClick={() => setSelectedInsight(insight)}>
+                          {t('sources.viewInsight')}
+                        </Button>
+                        <Button
+                          size="sm"
+                          variant="outline"
+                          onClick={() => setInsightToDelete(insight.id)}
+                          className="text-destructive hover:text-destructive"
+                        >
+                          <Trash2 className="h-4 w-4" />
+                        </Button>
+                      </div>
+                    </div>
+                  ))}
+                </div>
+              )}
+            </section>
+          </TabsContent>
+
+          <TabsContent value="details" className="mt-5">
+            <section className="space-y-5">
+              <h3 className="text-[15.5px] font-medium">{t('sources.details')}</h3>
+              <div className="space-y-5">
                 {/* Embedding Alert */}
                 {!source.embedded && (
                   <Alert>
@@ -692,7 +676,7 @@ function SourceDetailContentInner({
                 <div className="space-y-4">
                   {source.asset?.url && (
                     <div>
-                      <h3 className="mb-2 text-sm font-semibold">{t('common.url')}</h3>
+                      <h3 className="mb-2 text-sm font-medium">{t('common.url')}</h3>
                       <div className="flex items-center gap-2">
                         <code className="flex-1 rounded bg-muted px-2 py-1 text-sm">
                           {source.asset.url}
@@ -722,7 +706,7 @@ function SourceDetailContentInner({
 
                   {source.asset?.file_path && (
                     <div className="space-y-2">
-                      <h3 className="text-sm font-semibold">{t('sources.uploadedFile')}</h3>
+                      <h3 className="text-sm font-medium">{t('sources.uploadedFile')}</h3>
                       <div className="flex flex-wrap items-center gap-2">
                         <code className="rounded bg-muted px-2 py-1 text-sm">
                           {source.asset.file_path}
@@ -751,7 +735,7 @@ function SourceDetailContentInner({
 
                   {source.topics && source.topics.length > 0 && (
                     <div>
-                      <h3 className="mb-2 text-sm font-semibold">{t('sources.topics')}</h3>
+                      <h3 className="mb-2 text-sm font-medium">{t('sources.topics')}</h3>
                       <div className="flex flex-wrap gap-2">
                         {source.topics.map((topic, idx) => (
                           <Badge key={idx} variant="outline">
@@ -764,9 +748,9 @@ function SourceDetailContentInner({
                 </div>
 
                 {/* Metadata */}
-                <div>
+                <div className="border-t border-border pt-5">
                   <div className="flex items-center justify-between mb-3">
-                    <h3 className="text-sm font-semibold">{t('sources.metadata')}</h3>
+                    <h3 className="text-sm font-medium">{t('sources.metadata')}</h3>
                     <div className="flex items-center gap-2">
                       <Database className="h-3.5 w-3.5 text-muted-foreground" />
                       <Badge variant={source.embedded ? "default" : "secondary"} className="text-xs">
@@ -801,8 +785,8 @@ function SourceDetailContentInner({
                     </div>
                   </div>
                 </div>
-              </CardContent>
-            </Card>
+              </div>
+            </section>
 
             {/* Notebook Associations */}
             <NotebookAssociations
diff --git a/frontend/src/components/sources/SourceDialog.tsx b/frontend/src/components/sources/SourceDialog.tsx
index 2128b5f6..db12593f 100644
--- a/frontend/src/components/sources/SourceDialog.tsx
+++ b/frontend/src/components/sources/SourceDialog.tsx
@@ -47,7 +47,7 @@ export function SourceDialog({ open, onOpenChange, sourceId }: SourceDialogProps
         <DialogTitle className="sr-only">{t('sources.detailsTitle')}</DialogTitle>
 
         {/* Source detail content */}
-        <div className="flex-1 overflow-y-auto min-h-0">
+        <div className="flex-1 overflow-y-auto min-h-0 p-6">
           <SourceDetailContent
             sourceId={sourceIdWithPrefix}
             showChatButton={true}
diff --git a/frontend/src/components/sources/SourceInsightDialog.tsx b/frontend/src/components/sources/SourceInsightDialog.tsx
index 09d7aa0f..41ee3760 100644
--- a/frontend/src/components/sources/SourceInsightDialog.tsx
+++ b/frontend/src/components/sources/SourceInsightDialog.tsx
@@ -75,11 +75,12 @@ export function SourceInsightDialog({ open, onOpenChange, insight, onDelete }: S
     <Dialog open={open} onOpenChange={onOpenChange}>
       <DialogContent className="sm:max-w-3xl max-h-[90vh] flex flex-col">
         <DialogHeader>
-          <DialogTitle className="flex items-center justify-between gap-2">
+          <DialogTitle className="flex items-center justify-between gap-2 pr-8">
             <span>{t('sources.sourceInsight')}</span>
             <div className="flex items-center gap-2">
               {displayInsight?.insight_type && (
-                <Badge variant="outline" className="text-xs uppercase">
+                <Badge variant="outline" className="gap-1.5 text-xs uppercase">
+                  <span className="h-1.5 w-1.5 rounded-full bg-teal" aria-hidden="true" />
                   {displayInsight.insight_type}
                 </Badge>
               )}
diff --git a/frontend/src/components/sources/steps/ProcessingStep.tsx b/frontend/src/components/sources/steps/ProcessingStep.tsx
index 3c3d7933..03a9d537 100644
--- a/frontend/src/components/sources/steps/ProcessingStep.tsx
+++ b/frontend/src/components/sources/steps/ProcessingStep.tsx
@@ -91,12 +91,12 @@ export function ProcessingStep({
           )}
 
           {settings?.default_embedding_option === 'always' && (
-            <div className="p-3 rounded-md bg-primary/10 border border-primary/30">
+            <div className="p-3 rounded-md border border-border">
               <div className="flex items-start gap-3">
-                <div className="w-4 h-4 bg-primary rounded-full mt-0.5 flex-shrink-0"></div>
+                <div className="w-2 h-2 bg-primary rounded-full mt-1.5 flex-shrink-0"></div>
                 <div className="flex-1">
-                  <span className="text-sm font-medium block text-primary">{t('sources.embeddingAlways')}</span>
-                  <p className="text-xs text-primary mt-1">
+                  <span className="text-sm font-medium block text-foreground">{t('sources.embeddingAlways')}</span>
+                  <p className="text-xs text-muted-foreground mt-1">
                     {t('sources.embeddingAlwaysDesc')}
                     {t('sources.changeInSettings')} <span className="font-medium">{t('navigation.settings')}</span>.
                   </p>
@@ -106,9 +106,9 @@ export function ProcessingStep({
           )}
 
           {settings?.default_embedding_option === 'never' && (
-            <div className="p-3 rounded-md bg-muted border border-border">
+            <div className="p-3 rounded-md border border-border">
               <div className="flex items-start gap-3">
-                <div className="w-4 h-4 bg-muted-foreground rounded-full mt-0.5 flex-shrink-0"></div>
+                <div className="w-2 h-2 bg-muted-foreground rounded-full mt-1.5 flex-shrink-0"></div>
                 <div className="flex-1">
                   <span className="text-sm font-medium block text-foreground">{t('sources.embeddingNever')}</span>
                   <p className="text-xs text-muted-foreground mt-1">
diff --git a/frontend/src/components/sources/steps/SourceTypeStep.tsx b/frontend/src/components/sources/steps/SourceTypeStep.tsx
index e7d53fc7..ed77ed35 100644
--- a/frontend/src/components/sources/steps/SourceTypeStep.tsx
+++ b/frontend/src/components/sources/steps/SourceTypeStep.tsx
@@ -256,7 +256,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         {t('sources.selectMultipleFilesHint')}
                       </p>
                       {fileCount > 1 && fileInput instanceof FileList && (
-                        <div className="mt-2 p-3 bg-muted rounded-md">
+                        <div className="mt-2 p-3 rounded-md border border-border">
                           <p className="text-xs font-medium mb-2">{t('sources.selectedFiles')}</p>
                           <ul className="space-y-1 max-h-32 overflow-y-auto">
                             {Array.from(fileInput).map((file, idx) => (
@@ -286,11 +286,10 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                     <div>
                       <Label htmlFor="content" className="mb-2 block">{t('sources.textContentLabel')}</Label>
                       {hasHtmlContent && (
-                        <div className="mb-2 p-2 bg-teal-tint border border-teal/30 rounded-md">
-                          <p className="text-sm text-teal">
-                            {t('sources.htmlDetected')}
-                          </p>
-                        </div>
+                        <p className="mb-2 flex items-center gap-2 text-sm text-teal">
+                          <span className="h-1.5 w-1.5 rounded-full bg-teal" aria-hidden="true" />
+                          {t('sources.htmlDetected')}
+                        </p>
                       )}
                       <Textarea
                         id="content"
@@ -338,7 +337,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
 
       {/* Batch mode indicator */}
       {isBatchMode && (
-        <div className="p-4 bg-primary/5 border border-primary/20 rounded-lg">
+        <div className="p-4 rounded-md border border-border">
           <div className="flex items-center gap-2 mb-2">
             <Badge variant="default">{t('common.batchMode')}</Badge>
             <span className="text-sm font-medium">

From a7de90d38aaf18ee85fd661854d35c11e44613e2 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 1 Aug 2026 18:39:19 -0300
Subject: [PATCH 255/345] fix: include source content in Source Chat context
 (#1226)

* fix: include source content in Source Chat context

* fix: preserve insights for large source contexts

* fix: enforce tiny source context budgets

* test: cover source context availability states

* fix: omit notice-only source context

* fix: truncate source context by token prefixes

* perf: bound source context truncation search

* fix: budget rendered source chat context

* perf: reuse source context tokenization
---
 docs/7-DEVELOPMENT/content-processing.md |   2 +-
 open_notebook/graphs/source_chat.py      |  76 ++--
 open_notebook/utils/context_builder.py   | 347 +++++++++++++++++--
 prompts/source_chat/system.jinja         |   6 +-
 tests/test_utils.py                      | 420 ++++++++++++++++++++++-
 5 files changed, 763 insertions(+), 88 deletions(-)

diff --git a/docs/7-DEVELOPMENT/content-processing.md b/docs/7-DEVELOPMENT/content-processing.md
index 82f7c9f4..169b1bf1 100644
--- a/docs/7-DEVELOPMENT/content-processing.md
+++ b/docs/7-DEVELOPMENT/content-processing.md
@@ -38,7 +38,7 @@ All embedding is fire-and-forget through the surreal-commands worker — nothing
 The single implementation behind both context consumers:
 
 - `build_notebook_context()` backs `POST /api/chat/context` (chat panel + podcast generation): it assembles source/note contexts from the inclusion config, whose status strings are matched textually ("not in" skips, "insights" → short context, "full content" → long context). Without a config, every source and note is included with its short context. Per-item failures are logged and skipped.
-- `build_source_context()` backs the source-chat graph: one source's short context plus its insights, truncated to a token budget by dropping insights (last-fetched first).
+- `build_source_context()` backs the source-chat graph: it requests the source's long context and adds insights as separate budgeted items. Full source text is retained when it fits. For an oversized source, up to 20% of the token budget is reserved for fitting insights in fetch order, unused space returns to the source, and a near-maximal token-aligned source prefix carries an explicit truncation notice. Prefix selection uses a cached binary search plus bounded forward validation for local BPE non-monotonicity; the offline word-count fallback stays logarithmic. Budget enforcement and `total_tokens` use the shared Markdown renderer that supplies the prompt, while internal counts/status metadata are not rendered to the model. If the budget cannot fit the rendered source headers, the notice, and at least one non-whitespace source character, the source item is omitted and metadata reports `source_text_status="omitted_budget"` rather than presenting notice-only text as source content.
 - Every call re-fetches — there is no cache layer.
 - Token counting uses `o200k_base` via tiktoken and is an estimate (±5-10% vs. the actual model); `token_count()` falls back to a coarse estimate if tiktoken is unavailable.
 
diff --git a/open_notebook/graphs/source_chat.py b/open_notebook/graphs/source_chat.py
index 4e2dfa6f..43d67963 100644
--- a/open_notebook/graphs/source_chat.py
+++ b/open_notebook/graphs/source_chat.py
@@ -15,7 +15,10 @@ from open_notebook.config import LANGGRAPH_CHECKPOINT_FILE
 from open_notebook.domain.notebook import Source, SourceInsight
 from open_notebook.exceptions import OpenNotebookError
 from open_notebook.utils import clean_thinking_content
-from open_notebook.utils.context_builder import build_source_context
+from open_notebook.utils.context_builder import (
+    build_source_context,
+    format_source_context,
+)
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
 
@@ -30,6 +33,18 @@ class SourceChatState(TypedDict):
     context_indicators: Optional[Dict[str, List[str]]]
 
 
+def _source_content_is_available(
+    source_info: Dict,
+    context_data: Dict,
+) -> bool:
+    """Return whether source text, including a truncated prefix, is available."""
+    status = context_data.get("metadata", {}).get("source_text_status")
+    if status is not None:
+        return status in {"available", "truncated"}
+    full_text = source_info.get("full_text")
+    return isinstance(full_text, str) and bool(full_text.strip())
+
+
 def call_model_with_source_context(
     state: SourceChatState, config: RunnableConfig
 ) -> dict:
@@ -100,7 +115,12 @@ def _call_model_with_source_context_inner(
     if context_data.get("sources"):
         source_info = context_data["sources"][0]  # First source
         source = Source(**source_info) if isinstance(source_info, dict) else source_info
-        context_indicators["sources"].append(source.id)
+        if (
+            isinstance(source_info, dict)
+            and _source_content_is_available(source_info, context_data)
+            and source.id
+        ):
+            context_indicators["sources"].append(source.id)
 
     if context_data.get("insights"):
         for insight_data in context_data["insights"]:
@@ -187,56 +207,8 @@ def _call_model_with_source_context_inner(
 
 
 def _format_source_context(context_data: Dict) -> str:
-    """
-    Format the context data into a readable string for the prompt.
-
-    Args:
-        context_data: Context data from build_source_context
-
-    Returns:
-        Formatted context string
-    """
-    context_parts = []
-
-    # Add source information
-    if context_data.get("sources"):
-        context_parts.append("## SOURCE CONTENT")
-        for source in context_data["sources"]:
-            if isinstance(source, dict):
-                context_parts.append(f"**Source ID:** {source.get('id', 'Unknown')}")
-                context_parts.append(f"**Title:** {source.get('title', 'No title')}")
-                if source.get("full_text"):
-                    # Truncate full text if too long
-                    full_text = source["full_text"]
-                    if len(full_text) > 5000:
-                        full_text = full_text[:5000] + "...\n[Content truncated]"
-                    context_parts.append(f"**Content:**\n{full_text}")
-                context_parts.append("")  # Empty line for separation
-
-    # Add insights
-    if context_data.get("insights"):
-        context_parts.append("## SOURCE INSIGHTS")
-        for insight in context_data["insights"]:
-            if isinstance(insight, dict):
-                context_parts.append(f"**Insight ID:** {insight.get('id', 'Unknown')}")
-                context_parts.append(
-                    f"**Type:** {insight.get('insight_type', 'Unknown')}"
-                )
-                context_parts.append(
-                    f"**Content:** {insight.get('content', 'No content')}"
-                )
-                context_parts.append("")  # Empty line for separation
-
-    # Add metadata
-    if context_data.get("metadata"):
-        metadata = context_data["metadata"]
-        context_parts.append("## CONTEXT METADATA")
-        context_parts.append(f"- Source count: {metadata.get('source_count', 0)}")
-        context_parts.append(f"- Insight count: {metadata.get('insight_count', 0)}")
-        context_parts.append(f"- Total tokens: {context_data.get('total_tokens', 0)}")
-        context_parts.append("")
-
-    return "\n".join(context_parts)
+    """Format context through the builder's shared budgeted renderer."""
+    return format_source_context(context_data)
 
 
 # Create SQLite checkpointer
diff --git a/open_notebook/utils/context_builder.py b/open_notebook/utils/context_builder.py
index 7d3717ca..0c008e39 100644
--- a/open_notebook/utils/context_builder.py
+++ b/open_notebook/utils/context_builder.py
@@ -16,6 +16,7 @@ the frontend — do not change it here.
 
 from __future__ import annotations
 
+import re
 from typing import Any, Dict, Optional, Tuple
 
 from loguru import logger
@@ -30,6 +31,69 @@ from open_notebook.exceptions import DatabaseOperationError, NotFoundError
 
 from .token_utils import token_count
 
+SOURCE_TRUNCATION_NOTICE = (
+    "\n\n[Source content truncated to fit the context token budget.]"
+)
+SOURCE_INSIGHT_BUDGET_RATIO = 0.2
+TOKEN_PREFIX_VALIDATION_WINDOW = 16
+_TOKENIZER_UNSET = object()
+
+
+def format_source_context(context_data: Dict[str, Any]) -> str:
+    """Render the exact source/insight Markdown supplied to Source Chat."""
+    context_parts = []
+
+    if context_data.get("sources"):
+        context_parts.append("## SOURCE CONTENT")
+        for source in context_data["sources"]:
+            if isinstance(source, dict):
+                context_parts.append(f"**Source ID:** {source.get('id', 'Unknown')}")
+                context_parts.append(f"**Title:** {source.get('title', 'No title')}")
+                full_text = source.get("full_text")
+                if isinstance(full_text, str) and full_text.strip():
+                    context_parts.append(f"**Content:**\n{full_text}")
+                else:
+                    context_parts.append(
+                        "**Content:**\n[Source text is unavailable in this context.]"
+                    )
+                context_parts.append("")
+
+    if context_data.get("insights"):
+        context_parts.append("## SOURCE INSIGHTS")
+        for insight in context_data["insights"]:
+            if isinstance(insight, dict):
+                context_parts.append(
+                    f"**Insight ID:** {insight.get('id', 'Unknown')}"
+                )
+                context_parts.append(
+                    f"**Type:** {insight.get('insight_type', 'Unknown')}"
+                )
+                context_parts.append(
+                    f"**Content:** {insight.get('content', 'No content')}"
+                )
+                context_parts.append("")
+
+    return "\n".join(context_parts)
+
+
+def _rendered_source_context_tokens(
+    source: Optional[Dict[str, Any]],
+    insights: list[Dict[str, Any]],
+    encoding: Any = _TOKENIZER_UNSET,
+) -> int:
+    """Count the same Markdown payload that Source Chat sends to its prompt."""
+    rendered = format_source_context(
+        {
+            "sources": [source] if source is not None else [],
+            "insights": insights,
+        }
+    )
+    if encoding is _TOKENIZER_UNSET:
+        return token_count(rendered)
+    if encoding is None:
+        return int(len(rendered.split()) * 1.3)
+    return len(encoding.encode(rendered, disallowed_special=()))
+
 
 def _ensure_prefix(table: str, record_id: str) -> str:
     """Ensure a record ID carries its table prefix (`table:id`)."""
@@ -37,6 +101,166 @@ def _ensure_prefix(table: str, record_id: str) -> str:
     return record_id if record_id.startswith(prefix) else f"{prefix}{record_id}"
 
 
+def _truncate_source_to_token_budget(
+    source_context: Dict[str, Any],
+    max_tokens: int,
+    insights: Optional[list[Dict[str, Any]]] = None,
+    *,
+    encoding: Any = _TOKENIZER_UNSET,
+    source_tokens: Optional[list[int]] = None,
+    source_is_over_budget: bool = False,
+) -> tuple[Optional[Dict[str, Any]], bool]:
+    """Truncate source text to a token budget while retaining source metadata.
+
+    A near-maximal token-aligned prefix is retained with bounded validation for
+    local BPE non-monotonicity. The truncation notice is part of the budget so
+    downstream formatters never need a second size policy.
+
+    Args:
+        source_context: Long source context containing ``full_text``.
+        max_tokens: Maximum tokens available for rendered source context.
+        insights: Already selected insights that share the rendered budget.
+        encoding: Reusable tokenizer, ``None`` for the word-count fallback, or
+            the internal sentinel when the helper should resolve it itself.
+        source_tokens: Precomputed tokens for ``full_text``.
+        source_is_over_budget: Skip recounting the full rendered source when
+            the caller has already established that it exceeds ``max_tokens``.
+
+    Returns:
+        The budgeted source context (or ``None`` when even an explicit notice
+        cannot fit) and whether its text was truncated.
+    """
+    selected_insights = insights or []
+    if not source_is_over_budget and (
+        _rendered_source_context_tokens(
+            source_context,
+            selected_insights,
+            encoding,
+        )
+        <= max_tokens
+    ):
+        return source_context, False
+
+    full_text = source_context.get("full_text")
+    if not isinstance(full_text, str) or not full_text.strip():
+        return None, False
+
+    def candidate(prefix: str) -> Dict[str, Any]:
+        return {
+            **source_context,
+            "full_text": prefix + SOURCE_TRUNCATION_NOTICE,
+        }
+
+    # A very small budget may not even fit source metadata plus the notice.
+    # Omit the item; the caller records an explicit status in context metadata.
+    notice_only = candidate("")
+    if (
+        _rendered_source_context_tokens(
+            notice_only,
+            selected_insights,
+            encoding,
+        )
+        > max_tokens
+    ):
+        return None, True
+
+    def find_fitting_prefix(
+        upper_bound: int,
+        prefix_for_count,
+        validation_window: int,
+    ) -> Optional[Dict[str, Any]]:
+        """Find a large fitting prefix with bounded candidate re-encoding."""
+        evaluated: Dict[int, tuple[Dict[str, Any], bool]] = {}
+
+        def evaluate(prefix_count: int) -> tuple[Dict[str, Any], bool]:
+            if prefix_count not in evaluated:
+                prefix = prefix_for_count(prefix_count)
+                truncated = candidate(prefix)
+                evaluated[prefix_count] = (
+                    truncated,
+                    bool(prefix.strip())
+                    and _rendered_source_context_tokens(
+                        truncated,
+                        selected_insights,
+                        encoding,
+                    )
+                    <= max_tokens,
+                )
+            return evaluated[prefix_count]
+
+        low = 1
+        high = upper_bound
+        best_count = 0
+        best: Optional[Dict[str, Any]] = None
+        while low <= high:
+            midpoint = (low + high) // 2
+            truncated, fits = evaluate(midpoint)
+            if fits:
+                best_count = midpoint
+                best = truncated
+                low = midpoint + 1
+            else:
+                high = midpoint - 1
+
+        # BPE counts can be locally non-monotonic. Check a bounded window past
+        # the binary-search result without stopping at an over-budget candidate.
+        validation_start = best_count + 1 if best_count else 1
+        validation_end = min(
+            upper_bound,
+            best_count + validation_window,
+        )
+        for prefix_count in range(validation_start, validation_end + 1):
+            truncated, fits = evaluate(prefix_count)
+            if fits and prefix_count > best_count:
+                best_count = prefix_count
+                best = truncated
+
+        return best
+
+    try:
+        if encoding is _TOKENIZER_UNSET:
+            import tiktoken
+
+            encoding = tiktoken.get_encoding("o200k_base")
+        if encoding is None:
+            raise ImportError
+        if source_tokens is None:
+            source_tokens = encoding.encode(full_text, disallowed_special=())
+
+        def token_prefix(prefix_token_count: int) -> str:
+            return encoding.decode_bytes(
+                source_tokens[:prefix_token_count]
+            ).decode("utf-8", errors="ignore")
+
+        best = find_fitting_prefix(
+            min(len(source_tokens), max_tokens),
+            token_prefix,
+            TOKEN_PREFIX_VALIDATION_WINDOW,
+        )
+        if best is not None:
+            return best, True
+    except (ImportError, OSError):
+        # Match token_count's offline fallback with deterministic word-boundary
+        # prefixes. Its split-based estimate is monotonic, so binary search does
+        # not need the tokenizer path's validation window.
+        word_ends = [match.end() for match in re.finditer(r"\S+", full_text)]
+
+        def word_prefix(word_count: int) -> str:
+            return full_text[: word_ends[word_count - 1]]
+
+        best = find_fitting_prefix(
+            min(len(word_ends), max_tokens),
+            word_prefix,
+            0,
+        )
+        if best is not None:
+            return best, True
+
+    # A notice without any source characters is not useful source context.
+    # Omit it so callers can report ``omitted_budget`` honestly.
+    return None, True
+
+
 async def build_notebook_context(
     notebook: Notebook,
     context_config: Optional[Dict[str, Any]],
@@ -140,11 +364,13 @@ async def build_notebook_context(
 async def build_source_context(
     source_id: str, max_tokens: Optional[int] = None
 ) -> Dict[str, Any]:
-    """Assemble a single source's short context plus its insights.
+    """Assemble a single source's full text plus its insights.
 
-    Used by the source-chat graph. If `max_tokens` is given, insights are
-    dropped (last-fetched first) until the total fits — the source itself is
-    always kept.
+    Used by the source-chat graph. If ``max_tokens`` is given, the source text
+    is kept in full when it fits, then insights are retained in fetch order
+    while space remains. When the source alone exceeds the budget, a bounded
+    share is reserved for insights and the source is explicitly truncated into
+    the remaining space instead of being dropped.
 
     Returns a dict with "sources", "notes" (always empty), "insights",
     "total_tokens", "total_items" and per-type counts in "metadata".
@@ -152,7 +378,8 @@ async def build_source_context(
     try:
         sources: list = []
         insights: list = []
-        item_tokens: list[int] = []
+        source_truncated = False
+        source_text_status = "not_found"
 
         try:
             full_source_id = _ensure_prefix("source", source_id)
@@ -161,32 +388,106 @@ async def build_source_context(
             source = None
 
         if source:
-            source_context = await source.get_context(context_size="short")
-            sources.append(source_context)
-            item_tokens.append(token_count(str(source_context)))
+            insight_objects = await source.get_insights()
+            source_context = await source.get_context(
+                context_size="long",
+                insights=insight_objects,
+            )
+            # Insights have their own budgeted items below. Keeping the nested
+            # copy would double-count them while the formatter ignores it.
+            source_context = {**source_context, "insights": []}
+            budgeted_source: Optional[Dict[str, Any]] = source_context
 
-            for insight in await source.get_insights():
+            insight_items: list[Dict[str, Any]] = []
+            for insight in insight_objects:
                 insight_content = {
                     "id": insight.id,
                     "source_id": source.id,
                     "insight_type": insight.insight_type,
                     "content": insight.content,
                 }
-                insights.append(insight_content)
-                item_tokens.append(token_count(str(insight_content)))
+                insight_items.append(insight_content)
+
+            try:
+                import tiktoken
+
+                encoding = tiktoken.get_encoding("o200k_base")
+            except (ImportError, OSError):
+                encoding = None
+
+            rendered_source_tokens = _rendered_source_context_tokens(
+                source_context,
+                [],
+                encoding,
+            )
+
+            if max_tokens is None:
+                insights.extend(insight_items)
+            elif rendered_source_tokens > max_tokens:
+                # Large documents would otherwise consume the entire budget and
+                # silently remove every insight. Reserve a bounded share for
+                # insights, then give all unused space back to the source text.
+                insight_budget = int(max_tokens * SOURCE_INSIGHT_BUDGET_RATIO)
+                for insight_content in insight_items:
+                    candidate_insights = [*insights, insight_content]
+                    if (
+                        _rendered_source_context_tokens(
+                            None,
+                            candidate_insights,
+                            encoding,
+                        )
+                        > insight_budget
+                    ):
+                        continue
+                    insights.append(insight_content)
+
+                full_text = source_context.get("full_text")
+                encoded_source = (
+                    encoding.encode(full_text, disallowed_special=())
+                    if encoding is not None and isinstance(full_text, str)
+                    else None
+                )
+
+                budgeted_source, source_truncated = _truncate_source_to_token_budget(
+                    source_context,
+                    max_tokens,
+                    insights,
+                    encoding=encoding,
+                    source_tokens=encoded_source,
+                    source_is_over_budget=True,
+                )
+            else:
+                for insight_content in insight_items:
+                    candidate_insights = [*insights, insight_content]
+                    if _rendered_source_context_tokens(
+                        source_context,
+                        candidate_insights,
+                        encoding,
+                    ) > max_tokens:
+                        continue
+                    insights.append(insight_content)
+
+            if budgeted_source is None:
+                source_text_status = "omitted_budget"
+            else:
+                full_text = budgeted_source.get("full_text")
+                if isinstance(full_text, str) and full_text.strip():
+                    source_text_status = (
+                        "truncated" if source_truncated else "available"
+                    )
+                else:
+                    source_text_status = "missing"
+
+            if budgeted_source is not None:
+                sources.append(budgeted_source)
+            total_tokens = _rendered_source_context_tokens(
+                budgeted_source,
+                insights,
+                encoding,
+            )
         else:
             logger.warning(f"Source {source_id} not found")
-
-        # Truncate to the token budget: drop insights from the end (the
-        # source, added first, is dropped only if it alone exceeds the budget).
-        total_tokens = sum(item_tokens)
-        if max_tokens:
-            while total_tokens > max_tokens and item_tokens:
-                total_tokens -= item_tokens.pop()
-                if insights:
-                    insights.pop()
-                else:
-                    sources.pop()
+            total_tokens = 0
 
         total_items = len(sources) + len(insights)
         logger.info(f"Built context with {total_items} items, {total_tokens} tokens")
@@ -201,6 +502,8 @@ async def build_source_context(
                 "source_count": len(sources),
                 "note_count": 0,
                 "insight_count": len(insights),
+                "source_text_status": source_text_status,
+                "source_truncated": source_truncated,
             },
         }
     except Exception as e:
diff --git a/prompts/source_chat/system.jinja b/prompts/source_chat/system.jinja
index de04e2df..4b329a23 100644
--- a/prompts/source_chat/system.jinja
+++ b/prompts/source_chat/system.jinja
@@ -1,14 +1,14 @@
 # SYSTEM ROLE
-You are a specialized research assistant focused on helping users deeply understand and analyze a specific source document. You have access to the source content and its generated insights, and you can engage in detailed discussions about this material.
+You are a specialized research assistant focused on helping users deeply understand and analyze a specific source document. You may have access to the source content, its generated insights, or both, and you can engage in detailed discussions using the material actually provided.
 
 # CAPABILITIES
-- Deep analysis of the specific source document and its content
+- Deep analysis of the specific source document when its content is available
 - Access to AI-generated insights and analysis from this source
 - Can answer questions, explain concepts, and provide detailed analysis
 - Can reference specific sections and insights from the source
 
 # YOUR OPERATING METHOD
-When a user asks you a question, analyze both the source content and the available insights to provide comprehensive, accurate responses. Focus on helping the user understand the material, make connections, and explore ideas related to this specific source.
+When a user asks you a question, analyze the source content and available insights that appear in the context to provide comprehensive, accurate responses. If the source text is marked unavailable, say so instead of implying that you inspected it, and rely only on the metadata and insights that are actually present. Focus on helping the user understand the material, make connections, and explore ideas related to this specific source.
 
 {% if source %}
 # SOURCE INFORMATION
diff --git a/tests/test_utils.py b/tests/test_utils.py
index 5917fe20..d8d0e3fe 100644
--- a/tests/test_utils.py
+++ b/tests/test_utils.py
@@ -10,6 +10,11 @@ from unittest.mock import AsyncMock, patch
 
 import pytest
 
+from open_notebook.domain.notebook import Source
+from open_notebook.graphs.source_chat import (
+    _format_source_context,
+    _source_content_is_available,
+)
 from open_notebook.utils import (
     clean_thinking_content,
     compare_versions,
@@ -19,7 +24,11 @@ from open_notebook.utils import (
     remove_non_printable,
     token_count,
 )
-from open_notebook.utils.context_builder import build_source_context
+from open_notebook.utils.context_builder import (
+    SOURCE_TRUNCATION_NOTICE,
+    _truncate_source_to_token_budget,
+    build_source_context,
+)
 
 # ============================================================================
 # TEST SUITE 1: Text Utilities
@@ -263,9 +272,7 @@ def _mock_source(insights):
 
 
 def _insight(insight_id, content="insight content"):
-    return SimpleNamespace(
-        id=insight_id, insight_type="summary", content=content
-    )
+    return SimpleNamespace(id=insight_id, insight_type="summary", content=content)
 
 
 class TestBuildSourceContext:
@@ -273,7 +280,7 @@ class TestBuildSourceContext:
 
     @pytest.mark.asyncio
     async def test_source_and_insights_shape(self):
-        """The response carries the source's short context and its insights."""
+        """The response carries the source's full context and its insights."""
         source = _mock_source([_insight("source_insight:1")])
 
         with patch(
@@ -283,9 +290,17 @@ class TestBuildSourceContext:
             result = await build_source_context("123")
 
         mock_get.assert_awaited_once_with("source:123")  # bare id gets prefixed
-        source.get_context.assert_awaited_once_with(context_size="short")
+        source.get_context.assert_awaited_once_with(
+            context_size="long",
+            insights=source.get_insights.return_value,
+        )
         assert result["sources"] == [
-            {"id": "source:123", "title": "T", "full_text": "body"}
+            {
+                "id": "source:123",
+                "title": "T",
+                "full_text": "body",
+                "insights": [],
+            }
         ]
         assert result["insights"] == [
             {
@@ -302,12 +317,15 @@ class TestBuildSourceContext:
             "source_count": 1,
             "note_count": 0,
             "insight_count": 1,
+            "source_text_status": "available",
+            "source_truncated": False,
         }
+        assert result["total_tokens"] == token_count(_format_source_context(result))
 
     @pytest.mark.asyncio
-    async def test_truncates_insights_to_token_budget(self):
-        """Insights are dropped (last first) when over the token budget."""
-        big = "word " * 500
+    async def test_preserves_insights_that_fit_token_budget(self):
+        """Insights are retained in order while they fit the token budget."""
+        big = "word " * 300
         source = _mock_source(
             [_insight("source_insight:1", big), _insight("source_insight:2", big)]
         )
@@ -323,6 +341,387 @@ class TestBuildSourceContext:
         assert [i["id"] for i in result["insights"]] == ["source_insight:1"]
         assert result["total_tokens"] <= 600
 
+    @pytest.mark.asyncio
+    async def test_real_source_full_text_reaches_formatted_prompt(self):
+        """Source.get_context(long) carries persisted full text into the prompt."""
+        full_text = "Complete source text that must reach Source Chat."
+        source = Source(id="source:123", title="T", full_text=full_text)
+        mock_get_insights = AsyncMock(return_value=[])
+
+        with (
+            patch(
+                "open_notebook.utils.context_builder.Source.get",
+                new=AsyncMock(return_value=source),
+            ),
+            patch.object(Source, "get_insights", new=mock_get_insights),
+        ):
+            result = await build_source_context("source:123", max_tokens=500)
+
+        formatted = _format_source_context(result)
+        assert full_text in formatted
+        assert SOURCE_TRUNCATION_NOTICE not in formatted
+        assert result["metadata"]["source_text_status"] == "available"
+        assert result["metadata"]["source_truncated"] is False
+        mock_get_insights.assert_awaited_once_with()
+
+    @pytest.mark.asyncio
+    async def test_large_source_is_deterministically_and_explicitly_truncated(self):
+        """An oversized source keeps a marked prefix instead of disappearing."""
+        full_text = "evidence " * 1000
+        source = _mock_source([])
+        source.get_context.return_value["full_text"] = full_text
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ):
+            first = await build_source_context("source:123", max_tokens=120)
+            second = await build_source_context("source:123", max_tokens=120)
+
+        first_text = first["sources"][0]["full_text"]
+        assert first_text == second["sources"][0]["full_text"]
+        assert first_text.endswith(SOURCE_TRUNCATION_NOTICE)
+        assert len(first_text) < len(full_text)
+        assert first["total_tokens"] <= 120
+        assert first["metadata"]["source_text_status"] == "truncated"
+        assert first["metadata"]["source_truncated"] is True
+        assert first["total_tokens"] == token_count(_format_source_context(first))
+        assert _source_content_is_available(first["sources"][0], first)
+
+        formatted = _format_source_context(first)
+        assert first_text in formatted
+        assert SOURCE_TRUNCATION_NOTICE in formatted
+
+    @pytest.mark.parametrize(
+        ("status", "full_text", "expected"),
+        [
+            ("available", "complete text", True),
+            ("truncated", "partial text", True),
+            ("missing", "", False),
+            ("omitted_budget", "stale text", False),
+            (None, "legacy text", True),
+            (None, "", False),
+        ],
+    )
+    def test_source_content_availability_rules(
+        self,
+        status,
+        full_text,
+        expected,
+    ):
+        """Explicit statuses win, while legacy contexts fall back to their text."""
+        metadata = {} if status is None else {"source_text_status": status}
+
+        assert (
+            _source_content_is_available(
+                {"id": "source:123", "full_text": full_text},
+                {"metadata": metadata},
+            )
+            is expected
+        )
+
+    @pytest.mark.asyncio
+    async def test_large_source_reserves_budget_for_insights(self):
+        """An oversized source leaves deterministic headroom for insights."""
+        full_text = "evidence " * 1000
+        source = _mock_source([_insight("source_insight:1")])
+        source.get_context.return_value["full_text"] = full_text
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ):
+            result = await build_source_context("source:123", max_tokens=500)
+
+        assert [insight["id"] for insight in result["insights"]] == ["source_insight:1"]
+        assert result["sources"][0]["full_text"].endswith(SOURCE_TRUNCATION_NOTICE)
+        assert result["total_tokens"] <= 500
+        assert result["metadata"]["insight_count"] == 1
+        assert result["metadata"]["source_text_status"] == "truncated"
+
+    @pytest.mark.asyncio
+    async def test_tiny_budget_omits_source_with_explicit_status(self):
+        """A budget smaller than source metadata never returns oversized context."""
+        source = _mock_source([])
+        source.get_context.return_value["full_text"] = "evidence " * 1000
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ):
+            result = await build_source_context("source:123", max_tokens=1)
+
+        assert result["sources"] == []
+        assert result["total_tokens"] <= 1
+        assert result["metadata"]["source_text_status"] == "omitted_budget"
+
+    def test_notice_only_budget_omits_source(self):
+        """A truncation notice alone is not reported as available source text."""
+        source_context = {
+            "id": "source:123",
+            "title": "T",
+            "full_text": "evidence " * 100,
+            "insights": [],
+        }
+        notice_only = {
+            **source_context,
+            "full_text": SOURCE_TRUNCATION_NOTICE,
+        }
+        one_character = {
+            **source_context,
+            "full_text": "e" + SOURCE_TRUNCATION_NOTICE,
+        }
+        notice_tokens = token_count(
+            _format_source_context(
+                {"sources": [notice_only], "insights": []}
+            )
+        )
+        one_character_tokens = token_count(
+            _format_source_context(
+                {"sources": [one_character], "insights": []}
+            )
+        )
+        assert notice_tokens < one_character_tokens
+
+        budgeted_source, source_truncated = _truncate_source_to_token_budget(
+            source_context,
+            one_character_tokens - 1,
+        )
+
+        assert budgeted_source is None
+        assert source_truncated is True
+
+    def test_truncation_handles_non_monotonic_bpe_counts(self):
+        """A longer fitting token prefix survives a shorter over-budget one."""
+        full_text = "abcdefghij"
+        source_context = {
+            "id": "source:123",
+            "title": "T",
+            "full_text": full_text,
+            "insights": [],
+        }
+
+        class NonMonotonicEncoding:
+            def encode(self, text, **_kwargs):
+                if text == full_text:
+                    return list(range(len(full_text)))
+                if SOURCE_TRUNCATION_NOTICE in text:
+                    prefix = text.split("**Content:**\n", maxsplit=1)[1].split(
+                        SOURCE_TRUNCATION_NOTICE,
+                        maxsplit=1,
+                    )[0]
+                    token_counts = {8: 11, 9: 10, 10: 12}
+                    return list(range(token_counts.get(len(prefix), len(prefix) + 1)))
+                return list(range(20))
+
+            def decode_bytes(self, tokens):
+                return full_text[: len(tokens)].encode()
+
+        with patch(
+            "tiktoken.get_encoding",
+            return_value=NonMonotonicEncoding(),
+        ):
+            budgeted_source, source_truncated = _truncate_source_to_token_budget(
+                source_context,
+                max_tokens=10,
+            )
+
+        assert budgeted_source is not None
+        assert budgeted_source["full_text"] == (
+            full_text[:9] + SOURCE_TRUNCATION_NOTICE
+        )
+        assert source_truncated is True
+
+    def test_token_prefix_search_has_bounded_candidate_checks(self):
+        """Large tokenized sources do not trigger a linear re-encode scan."""
+        full_text = "x" * 10_000
+        source_context = {
+            "id": "source:123",
+            "title": "T",
+            "full_text": full_text,
+            "insights": [],
+        }
+
+        class CountingEncoding:
+            def __init__(self):
+                self.encode_calls = 0
+
+            def encode(self, text, **_kwargs):
+                self.encode_calls += 1
+                if text == full_text:
+                    return list(range(len(full_text)))
+                if SOURCE_TRUNCATION_NOTICE in text:
+                    prefix = text.split("**Content:**\n", maxsplit=1)[1].split(
+                        SOURCE_TRUNCATION_NOTICE,
+                        maxsplit=1,
+                    )[0]
+                    return list(range(len(prefix) + 20))
+                return list(range(len(full_text) + 20))
+
+            def decode_bytes(self, tokens):
+                return ("x" * len(tokens)).encode()
+
+        encoding = CountingEncoding()
+        with patch("tiktoken.get_encoding", return_value=encoding):
+            budgeted_source, source_truncated = _truncate_source_to_token_budget(
+                source_context,
+                max_tokens=1_000,
+            )
+
+        assert budgeted_source is not None
+        assert budgeted_source["full_text"].startswith("x" * 980)
+        assert source_truncated is True
+        assert encoding.encode_calls < 35
+
+    @pytest.mark.asyncio
+    async def test_large_source_reuses_initial_tokenization(self):
+        """Source Chat does not re-tokenize the full document during truncation."""
+        full_text = "x" * 10_000
+        source = _mock_source([])
+        source.get_context.return_value["full_text"] = full_text
+
+        class CountingEncoding:
+            def __init__(self):
+                self.full_text_calls = 0
+                self.full_render_calls = 0
+
+            def encode(self, text, **_kwargs):
+                if text == full_text:
+                    self.full_text_calls += 1
+                    return list(range(len(full_text)))
+                if full_text in text:
+                    self.full_render_calls += 1
+                    return list(range(len(full_text) + 20))
+                if SOURCE_TRUNCATION_NOTICE in text:
+                    prefix = text.split("**Content:**\n", maxsplit=1)[1].split(
+                        SOURCE_TRUNCATION_NOTICE,
+                        maxsplit=1,
+                    )[0]
+                    return list(range(len(prefix) + 20))
+                return []
+
+            def decode_bytes(self, tokens):
+                return ("x" * len(tokens)).encode()
+
+        encoding = CountingEncoding()
+        with (
+            patch(
+                "open_notebook.utils.context_builder.Source.get",
+                new=AsyncMock(return_value=source),
+            ),
+            patch("tiktoken.get_encoding", return_value=encoding),
+        ):
+            result = await build_source_context("source:123", max_tokens=1_000)
+
+        assert result["metadata"]["source_truncated"] is True
+        assert encoding.full_render_calls == 1
+        assert encoding.full_text_calls == 1
+
+    def test_incomplete_utf8_prefix_is_not_reported_as_source_text(self):
+        """A decoded-empty token prefix follows the omitted-budget path."""
+        full_text = "🙂"
+        source_context = {
+            "id": "source:123",
+            "title": "T",
+            "full_text": full_text,
+            "insights": [],
+        }
+
+        class IncompleteEncoding:
+            def encode(self, text, **_kwargs):
+                if text == full_text:
+                    return [1]
+                if SOURCE_TRUNCATION_NOTICE in text:
+                    return [1]
+                return list(range(20))
+
+            def decode_bytes(self, _tokens):
+                return b"\xf0"
+
+        with patch("tiktoken.get_encoding", return_value=IncompleteEncoding()):
+            budgeted_source, source_truncated = _truncate_source_to_token_budget(
+                source_context,
+                max_tokens=10,
+            )
+
+        assert budgeted_source is None
+        assert source_truncated is True
+
+    def test_word_fallback_search_has_logarithmic_candidate_checks(self):
+        """Offline fallback does not repeatedly scan every word prefix."""
+        full_text = "word " * 1_000
+        source_context = {
+            "id": "source:123",
+            "title": "T",
+            "full_text": full_text,
+            "insights": [],
+        }
+
+        def fallback_count(text):
+            return int(len(text.split()) * 1.3)
+
+        with (
+            patch("tiktoken.get_encoding", side_effect=OSError("offline")),
+            patch(
+                "open_notebook.utils.context_builder.token_count",
+                side_effect=fallback_count,
+            ) as mock_token_count,
+        ):
+            budgeted_source, source_truncated = _truncate_source_to_token_budget(
+                source_context,
+                max_tokens=100,
+            )
+
+        assert budgeted_source is not None
+        assert source_truncated is True
+        assert mock_token_count.call_count < 15
+
+    def test_formatter_does_not_apply_a_second_character_limit(self):
+        """Formatting preserves text already accepted by the token budget."""
+        full_text = "x" * 6000
+        formatted = _format_source_context(
+            {
+                "sources": [
+                    {
+                        "id": "source:123",
+                        "title": "T",
+                        "full_text": full_text,
+                    }
+                ],
+                "insights": [],
+                "total_tokens": token_count(full_text),
+                "metadata": {
+                    "source_count": 1,
+                    "insight_count": 0,
+                    "source_text_status": "available",
+                },
+            }
+        )
+
+        assert full_text in formatted
+        formatted_content = formatted.split("**Content:**\n", maxsplit=1)[1]
+        assert formatted_content == f"{full_text}\n"
+        assert "[Content truncated]" not in formatted
+        assert "CONTEXT METADATA" not in formatted
+
+    @pytest.mark.asyncio
+    async def test_missing_source_text_is_reported_honestly(self):
+        """A source without text is identified without a content indicator."""
+        source = _mock_source([_insight("source_insight:1")])
+        source.get_context.return_value["full_text"] = None
+
+        with patch(
+            "open_notebook.utils.context_builder.Source.get",
+            new=AsyncMock(return_value=source),
+        ):
+            result = await build_source_context("source:123", max_tokens=500)
+
+        formatted = _format_source_context(result)
+        assert "[Source text is unavailable in this context.]" in formatted
+        assert result["metadata"]["source_text_status"] == "missing"
+        assert not _source_content_is_available(result["sources"][0], result)
+        assert result["metadata"]["insight_count"] == 1
+
     @pytest.mark.asyncio
     async def test_missing_source_yields_empty_context(self):
         """A missing source produces an empty context, not an error."""
@@ -337,6 +736,7 @@ class TestBuildSourceContext:
         assert result["sources"] == []
         assert result["insights"] == []
         assert result["total_tokens"] == 0
+        assert result["metadata"]["source_text_status"] == "not_found"
 
 
 if __name__ == "__main__":

From 9bd5f89c5985ffd277cfacece995a75c3ff2ea2a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 2 Sep 2026 11:38:32 -0300
Subject: [PATCH 256/345] chore: version .claude skills and agents as shared
 project tooling (#1272)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* chore: version .claude skills and agents as shared project tooling

The process-discussions skill encodes the Discussion facilitation
mechanics announced publicly in the Open Contribution bets (#1212,
#1270); the release skill orchestrates the process documented in
.github/RELEASE_PROCESS.md; the QA agents (harness-qa, smoke-e2e)
support contributor and release workflows. Versioning them makes the
process inspectable and reviewable instead of living only on one
machine.

Personal state (settings.local.json, sessions, worktrees) stays
ignored via the .claude/* allowlist pattern.

* docs(skills): add incubating status, pull-based graduation and close-on-answer to process-discussions

* docs(skills,agents): address review findings — GHCR -single manifest check, contributor list truncation, global ask note, regenerable node ids
---
 .claude/agents/harness-qa.md                | 178 +++++++
 .claude/agents/smoke-e2e.md                 | 494 ++++++++++++++++++++
 .claude/skills/process-discussions/SKILL.md | 199 ++++++++
 .claude/skills/release/SKILL.md             | 116 +++++
 .claude/skills/release/comms-templates.md   |  62 +++
 .claude/skills/release/gates.md             |  44 ++
 .claude/skills/release/runbook.md           | 112 +++++
 .claude/skills/release/test-matrix.md       |  66 +++
 .gitignore                                  |   5 +-
 9 files changed, 1275 insertions(+), 1 deletion(-)
 create mode 100644 .claude/agents/harness-qa.md
 create mode 100644 .claude/agents/smoke-e2e.md
 create mode 100644 .claude/skills/process-discussions/SKILL.md
 create mode 100644 .claude/skills/release/SKILL.md
 create mode 100644 .claude/skills/release/comms-templates.md
 create mode 100644 .claude/skills/release/gates.md
 create mode 100644 .claude/skills/release/runbook.md
 create mode 100644 .claude/skills/release/test-matrix.md

diff --git a/.claude/agents/harness-qa.md b/.claude/agents/harness-qa.md
new file mode 100644
index 00000000..0b54b804
--- /dev/null
+++ b/.claude/agents/harness-qa.md
@@ -0,0 +1,178 @@
+---
+name: harness-qa
+description: "QA evaluator agent for the development harness. Verifies features using the right testing approach — Playwright for UI, curl/API calls for backend, SurrealDB queries for data layer. Grades against .harness/feature_list.json and reports pass/fail with evidence. Never writes application code."
+
+tools: Read, Write, Edit, Grep, Glob, Bash, mcp__playwright__*, mcp__surrealdb__*
+
+model: sonnet
+
+---
+
+# QA Evaluator Agent
+
+You are a strict, independent QA evaluator. Your job is to verify that implemented features actually work — using the right testing approach for each feature.
+
+**You are NOT the developer.** You did not write this code. You have no bias toward it passing. Your job is to find problems.
+
+## Core Principle
+
+> "When asked to evaluate work they've produced, agents tend to respond by confidently praising the work—even when, to a human observer, the quality is obviously mediocre."
+
+You exist to break this pattern. Be skeptical. Be thorough. Report honestly.
+
+---
+
+## Input
+
+You will receive:
+1. A description of which feature(s) to verify
+2. The app URL (typically http://localhost:3000 for frontend, http://localhost:5055 for API)
+
+## Step 0: Static Checks Gate (MANDATORY)
+
+Before any feature testing, run the static checks and test suite:
+
+```bash
+uv run ruff check .
+uv run python -m mypy .   # requires `uv sync --extra dev` first; must exit 0 — it's a required CI gate
+uv run pytest tests/
+```
+
+If ANY of these fail, **stop immediately**. Report the failures in `.harness/qa-report.md` and mark the feature as FAIL. Do not proceed to functional testing on code that doesn't pass linting, type checking, or unit tests.
+
+## Step 1: Understand What to Test
+
+Read the relevant feature(s) from `.harness/feature_list.json`. Each feature has:
+- `category`: "functional", "style", "api", "data", etc.
+- `description`: What the feature does
+- `steps`: Exact testing steps to follow
+- `passes`: Current status (you're testing ones marked `false`, or re-verifying ones marked `true`)
+
+Also read `.harness/claude-goal.md` for broader context on what the app should do.
+
+## Step 2: Choose the Right Testing Approach
+
+**Not every feature requires browser testing.** Pick the approach that matches what changed:
+
+### Frontend / UI features → Playwright MCP
+Use when the feature involves UI rendering, user interactions, visual styling, or end-to-end user workflows.
+
+- Navigate to the app in a real browser
+- Follow testing steps like a real user (click, type, scroll)
+- Take a screenshot at EVERY significant step
+- Check for console errors after each interaction
+
+### API / Backend features → Direct API calls
+Use when the feature involves API endpoints, request/response behavior, error handling, or business logic that doesn't touch the UI.
+
+- Use `curl` or `httpx` via Bash to call the API directly (base URL: http://localhost:5055)
+- Verify response status codes, body structure, and data correctness
+- Test error cases (invalid input, missing fields, unauthorized)
+- Check API docs at http://localhost:5055/docs if needed
+
+### Database / Data layer features → SurrealDB queries
+Use when the feature involves data models, migrations, relationships, embeddings, or data integrity.
+
+- Use the SurrealDB MCP tools to query the database directly
+- Verify records were created/updated/deleted correctly
+- Check relationships and graph edges
+- Validate schema changes and migrations
+
+### Mixed features → Combine approaches
+Many features span layers. For example, a new "create notebook" feature might need:
+1. API call to verify the endpoint works
+2. SurrealDB query to verify the record was persisted correctly
+3. Playwright to verify the UI reflects the change
+
+Use as many approaches as needed to fully verify the feature.
+
+---
+
+## What to Look For
+
+**Functional issues (all layers):**
+- Feature doesn't work as described
+- Errors or crashes during interaction
+- Missing data or broken state
+- Edge cases: empty states, long text, special characters
+
+**API-specific issues:**
+- Wrong status codes (e.g., 200 when it should be 404)
+- Missing or malformed response fields
+- Broken validation (accepts invalid input)
+- Timeout or hanging requests
+
+**Data-specific issues:**
+- Records not persisted or persisted incorrectly
+- Broken relationships or missing graph edges
+- Migration didn't apply correctly
+- Embedding vectors missing or wrong dimensions
+
+**UI-specific issues:**
+- Poor contrast (white-on-white, light-on-light)
+- Layout overflow or misalignment
+- Missing hover/focus states
+- Inconsistent spacing or typography
+- Elements overlapping or cut off
+- Console errors (JS errors, unhandled rejections, 4xx/5xx responses)
+
+## Step 3: Write Your Verdict
+
+For EACH feature tested, write a clear verdict. Create or update the file `.harness/qa-report.md` with your findings:
+
+```markdown
+# QA Report — [Date/Session]
+
+## Feature: "[description from .harness/feature_list.json]"
+- **Testing approach:** [UI / API / Database / Mixed]
+- **Verdict: PASS / FAIL**
+- **Steps followed:** (list what you did)
+- **Evidence:** (screenshots for UI, response bodies for API, query results for DB)
+- **Issues found:** (if FAIL, describe each issue clearly)
+  - Issue 1: [description] — severity: critical/major/minor
+  - Issue 2: [description] — severity: critical/major/minor
+```
+
+## Step 4: Update .harness/feature_list.json
+
+- If a feature **PASSES all steps with no issues**: change `"passes": false` to `"passes": true`
+- If a feature **FAILS any step**: keep `"passes": false` (or change back to `false` if re-verifying a regression)
+- **NEVER** remove features, edit descriptions, or modify testing steps
+
+## Step 5: Summary
+
+End your report with a summary:
+
+```markdown
+## Summary
+- Features tested: X
+- Passed: Y
+- Failed: Z
+- Critical issues: [list]
+- Recommendation: [continue to next feature / fix regressions first]
+```
+
+---
+
+## Grading Standards
+
+Be strict. Apply these thresholds:
+
+| Severity | Criteria | Effect |
+|----------|----------|--------|
+| **Critical** | Feature doesn't work at all, data loss, crash | Automatic FAIL |
+| **Major** | Feature works but with significant bugs or bad UX | FAIL |
+| **Minor** | Small visual glitch, non-blocking | PASS with note |
+
+A feature with ANY critical or major issue is a **FAIL**. Period.
+
+---
+
+## Rules
+
+1. **Never write application code.** You only test and report.
+2. **Never skip steps.** Follow every testing step in `.harness/feature_list.json`.
+3. **Collect evidence.** Screenshots for UI, response bodies for API, query results for DB. No evidence = no pass.
+4. **Be honest.** If something looks off, it's a fail. Don't rationalize.
+5. **Use the right tool for the job.** Don't force browser testing on a pure backend change. Don't skip browser testing on a UI change.
+6. **Report what you see, not what you expect.** Describe actual behavior, not intended behavior.
diff --git a/.claude/agents/smoke-e2e.md b/.claude/agents/smoke-e2e.md
new file mode 100644
index 00000000..762a0cfe
--- /dev/null
+++ b/.claude/agents/smoke-e2e.md
@@ -0,0 +1,494 @@
+---
+name: smoke-e2e
+description: "End-to-end smoke test agent for release preparation. Runs the full happy path (notebook -> sources -> chat -> ask -> transform -> podcast -> search -> cleanup) via API, then verifies UI with Playwright. Last barrier before release."
+
+tools: Read, Write, Edit, Grep, Glob, Bash, mcp__playwright__*, mcp__surrealdb__*
+
+model: sonnet
+
+---
+
+# Smoke Test Agent — Release Gate
+
+You are the final quality gate before a release. Your job is to run a complete end-to-end happy path of the application, first validating everything works via the API, then confirming the UI reflects it correctly via Playwright.
+
+**You do NOT write application code. You only test and report.**
+
+---
+
+## IMPORTANT: API Conventions
+
+All API endpoints use the `/api/` prefix. Base URL for all calls: `http://localhost:5055/api`
+
+Examples:
+- `POST /api/notebooks` (not `/notebooks`)
+- `GET /api/sources/{id}` (not `/sources/{id}`)
+
+Source creation uses **multipart/form-data** (not JSON). See section 1.2 for details.
+
+---
+
+## Overview
+
+The test follows a real user journey:
+1. Create a notebook
+2. Add sources (URL, text, PDF)
+3. Wait for processing to complete
+4. Verify content was extracted and embedded
+5. Chat with the notebook
+6. Ask (search + synthesis) about the notebook
+7. Create a note via transformation
+8. Generate a podcast
+9. Run semantic search
+10. Delete the notebook and verify cleanup
+
+---
+
+## Phase 0: Health Checks
+
+Before anything, verify the system is ready:
+
+```bash
+# API is up
+curl -sf http://localhost:5055/docs > /dev/null && echo "API: OK" || echo "API: FAIL"
+
+# Frontend is up
+curl -sf http://localhost:3000 > /dev/null && echo "Frontend: OK" || echo "Frontend: FAIL"
+```
+
+Also check via API:
+```bash
+# Credentials configured
+curl -s http://localhost:5055/api/credentials | python3 -c "import json,sys; data=json.load(sys.stdin); print(f'Credentials: {len(data)}')"
+
+# Default models configured (need at least chat and embedding)
+curl -s http://localhost:5055/api/models/defaults | python3 -m json.tool
+```
+
+If SurrealDB MCP is available, also verify:
+- At least one credential record exists (query `SELECT * FROM credential LIMIT 1`)
+- At least one model is configured for chat (query for model_providers)
+
+**If health checks fail, stop immediately.** Report the failures and exit.
+
+Initialize the report file at `.harness/smoke-report.md`:
+
+```markdown
+# Smoke Test Report — [date]
+
+## Health Checks
+- [ ] API running (port 5055)
+- [ ] Frontend running (port 3000)
+- [ ] SurrealDB accessible
+- [ ] Credentials configured
+
+## API Smoke Tests
+- [ ] Create notebook
+- [ ] Add URL source
+- [ ] Add text source
+- [ ] Add PDF source
+- [ ] Sources processed (content extracted)
+- [ ] Sources embedded
+- [ ] Chat — coherent response
+- [ ] Ask — synthesis returned
+- [ ] Transformation — insight created
+- [ ] Note — saved from insight
+- [ ] Podcast — generation started
+- [ ] Podcast — completed with audio
+- [ ] Semantic search — relevant results
+- [ ] Delete notebook — cascade cleanup verified
+
+## UI Verification (Playwright)
+- [ ] Notebooks page loads, test notebook visible
+- [ ] Notebook detail — sources listed
+- [ ] Source detail — content visible
+- [ ] Chat interface — messages displayed
+- [ ] Search page — results returned
+- [ ] Podcasts page — episode listed
+- [ ] Post-deletion — notebook gone from list
+```
+
+Update each checkbox as you go (`- [x]` for pass, `- [!]` for fail with details below).
+
+---
+
+## Phase 1: API Smoke Tests
+
+Use `curl` via Bash for all API calls. Base URL: `http://localhost:5055/api`
+
+### 1.1 Create Notebook
+
+```bash
+curl -s -X POST http://localhost:5055/api/notebooks \
+  -H "Content-Type: application/json" \
+  -d '{"name": "Smoke Test Notebook", "description": "Automated smoke test — safe to delete"}'
+```
+
+Save the `notebook_id` from the response (format: `notebook:xxxxx`). You'll need it throughout.
+
+### 1.2 Add Sources
+
+**IMPORTANT**: Source creation uses `multipart/form-data`, NOT JSON. Key fields:
+- `type` (required): `link`, `text`, or `upload`
+- `notebooks`: JSON string array of notebook IDs (e.g., `["notebook:xxxxx"]`)
+- `async_processing`: string `"true"` or `"false"`
+- `embed`: string `"true"` or `"false"` — **MUST be "true" for embeddings to be created**
+
+Add three sources to the notebook:
+
+**URL source:**
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=link" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "url=https://en.wikipedia.org/wiki/Turing_test" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+**Text source:**
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=text" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "content=Artificial intelligence (AI) is the simulation of human intelligence processes by computer systems. These processes include learning, reasoning, and self-correction. AI applications include expert systems, natural language processing, speech recognition, and machine vision. The field was founded on the assumption that human intelligence can be precisely described and machines can simulate it." \
+  -F "title=AI Overview - Smoke Test" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+**PDF source** (only if `.harness/fixtures/smoke-test.pdf` exists):
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=upload" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "file=@.harness/fixtures/smoke-test.pdf" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+If no PDF fixture exists, skip it and note it in the report. Two sources are sufficient.
+
+Save all `source_id` values (format: `source:xxxxx`).
+
+### 1.3 Wait for Processing
+
+Poll each source until processing completes:
+
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>/status
+```
+
+**Strategy:** Loop checking status every 5 seconds. If status is `completed`, move on. If `failed`, record the error and mark as FAIL. If still `running` after 5 minutes, mark as FAIL (timeout).
+
+### 1.4 Verify Content & Embeddings
+
+For each processed source:
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>
+```
+
+Verify:
+- `full_text` is not null/empty
+- `embedded` is `true`
+- `embedded_chunks` is > 0
+
+If `embedded` is false after processing completed, you can trigger embedding manually:
+```bash
+curl -s -X POST http://localhost:5055/api/embed \
+  -H "Content-Type: application/json" \
+  -d '{"item_id": "<source_id>", "item_type": "source", "async_processing": false}'
+```
+Then wait ~15 seconds and re-check.
+
+If SurrealDB MCP is available, also verify:
+- Query `SELECT count() FROM source_embedding WHERE source = <source_id> GROUP ALL` — should return > 0
+
+### 1.5 Chat
+
+Chat requires TWO steps: build context, then send message.
+
+```bash
+# Step 1: Create session
+curl -s -X POST http://localhost:5055/api/chat/sessions \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>"}'
+```
+
+Save the `session_id` (format: `chat_session:xxxxx`).
+
+```bash
+# Step 2: Build context for the notebook
+curl -s -X POST http://localhost:5055/api/chat/context \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>", "context_config": {}}'
+```
+
+Save the returned `context` object — you'll pass it in the execute call.
+
+```bash
+# Step 3: Send message with context
+curl -s -X POST http://localhost:5055/api/chat/execute \
+  -H "Content-Type: application/json" \
+  -d '{
+    "session_id": "<session_id>",
+    "message": "What are the main topics covered in the sources?",
+    "context": <context_object_from_step_2>
+  }'
+```
+
+**Note:** The `context` field is REQUIRED. It's an object containing `sources` and `notes` arrays. Use the output from the context endpoint.
+
+Verify: Response contains a `messages` array with an `ai` type message. The response should reference content from the sources.
+
+### 1.6 Ask (Search + Synthesis)
+
+**Note:** The field is `question` (not `query`), and three model IDs are required.
+
+First, get the default model ID:
+```bash
+curl -s http://localhost:5055/api/models/defaults
+# Use the default_chat_model value for all three model fields
+```
+
+```bash
+curl -s -X POST http://localhost:5055/api/search/ask/simple \
+  -H "Content-Type: application/json" \
+  -d '{
+    "question": "What is the Turing test and how does it relate to AI?",
+    "strategy_model": "<default_chat_model_id>",
+    "answer_model": "<default_chat_model_id>",
+    "final_answer_model": "<default_chat_model_id>"
+  }'
+```
+
+Verify: Response contains `answer` field with a synthesized answer, and `question` field echoing the original question.
+
+Note: ask is **global by design** — `AskRequest` (api/models.py) has no `notebook_id`; an unknown field is silently ignored by Pydantic, so never send one and never assume the answer is scoped to the smoke-test notebook (see 1.9).
+
+### 1.7 Transformation -> Note
+
+First, get available transformations:
+```bash
+curl -s http://localhost:5055/api/transformations
+```
+
+Pick a transformation (e.g., "Dense Summary"). Run it on a source:
+```bash
+curl -s -X POST http://localhost:5055/api/sources/<source_id>/insights \
+  -H "Content-Type: application/json" \
+  -d '{"transformation_id": "<transformation_id>"}'
+```
+
+Poll the source's insights until one appears:
+```bash
+curl -s http://localhost:5055/api/sources/<source_id>/insights
+```
+
+Once an insight exists, save it as a note:
+```bash
+# NOTE: endpoint is /api/insights/ (not /api/source_insight/)
+curl -s -X POST http://localhost:5055/api/insights/<insight_id>/save-as-note \
+  -H "Content-Type: application/json" \
+  -d '{"notebook_id": "<notebook_id>"}'
+```
+
+Verify: Note was created with non-empty content.
+
+### 1.8 Podcast Generation
+
+```bash
+# Get episode profiles
+curl -s http://localhost:5055/api/episode-profiles
+
+# Get speaker profiles
+curl -s http://localhost:5055/api/speaker-profiles
+```
+
+**IMPORTANT:** The generate endpoint uses profile **names**, not IDs:
+
+```bash
+curl -s -X POST http://localhost:5055/api/podcasts/generate \
+  -H "Content-Type: application/json" \
+  -d '{
+    "notebook_id": "<notebook_id>",
+    "episode_profile": "<profile_name>",
+    "speaker_profile": "<speaker_name>",
+    "episode_name": "Smoke Test Episode"
+  }'
+```
+
+Fields:
+- `episode_profile`: profile NAME string (e.g., `"tech_discussion"`) — NOT the ID
+- `speaker_profile`: profile NAME string (e.g., `"tech_experts"`) — NOT the ID
+- `episode_name`: REQUIRED string for the episode title
+
+Poll job status every 10 seconds, timeout after 10 minutes:
+```bash
+curl -s http://localhost:5055/api/podcasts/jobs/<job_id>
+```
+
+**Note:** The top-level `episode_id` may be empty. The episode ID is in `result.episode_id`. After job completes, also check:
+```bash
+curl -s http://localhost:5055/api/podcasts/episodes
+```
+
+Verify: Job completes. Episode record exists. Audio file endpoint returns 200:
+```bash
+curl -s -o /dev/null -w "%{http_code}" http://localhost:5055/api/podcasts/episodes/<episode_id>/audio
+```
+
+**If no profiles are configured**, skip podcast test and note it in the report.
+
+### 1.9 Semantic Search
+
+```bash
+# NOTE: the field is `type` (not `search_type`), and search is GLOBAL by
+# design — there is no notebook scoping field. Unknown fields are silently
+# ignored by pydantic and you'd unknowingly run a text search instead.
+curl -s -X POST http://localhost:5055/api/search \
+  -H "Content-Type: application/json" \
+  -d '{
+    "query": "artificial intelligence",
+    "type": "vector"
+  }'
+```
+
+Verify: Returns `results` array with items. At least one result should match our sources.
+
+### 1.10 Delete Notebook & Verify Cleanup
+
+First, preview:
+```bash
+curl -s http://localhost:5055/api/notebooks/<notebook_id>/delete-preview
+```
+
+Then delete WITH exclusive source cleanup:
+```bash
+# IMPORTANT: Pass delete_exclusive_sources=true to fully clean up test data
+curl -s -X DELETE "http://localhost:5055/api/notebooks/<notebook_id>?delete_exclusive_sources=true"
+```
+
+Verify:
+- Notebook returns 404: `curl -s -o /dev/null -w "%{http_code}" http://localhost:5055/api/notebooks/<notebook_id>`
+- Sources deleted (if exclusive): check each source returns 404
+
+Also clean up the podcast episode if one was created:
+```bash
+curl -s -X DELETE http://localhost:5055/api/podcasts/episodes/<episode_id>
+```
+
+If SurrealDB MCP is available:
+- Notebook record gone: `SELECT * FROM notebook WHERE id = <notebook_id>` -> empty
+- Notes removed: `SELECT * FROM note WHERE <-artifact<-notebook = <notebook_id>` -> empty
+
+---
+
+## Phase 2: UI Verification (Playwright)
+
+**Only proceed to this phase if Phase 1 passed all critical checks.**
+
+If Playwright MCP is not available in the tool list, fall back to `curl` HTTP status checks for pages and note the limitation in the report.
+
+This phase re-creates a minimal flow through the browser to confirm the UI renders correctly.
+
+### 2.1 Setup
+
+Create a fresh notebook for UI testing (via API):
+```bash
+curl -s -X POST http://localhost:5055/api/notebooks \
+  -H "Content-Type: application/json" \
+  -d '{"name": "UI Smoke Test", "description": "Automated UI verification — safe to delete"}'
+```
+
+Add one text source via API:
+```bash
+curl -s -X POST http://localhost:5055/api/sources \
+  -F "type=text" \
+  -F 'notebooks=["<notebook_id>"]' \
+  -F "content=The Turing test is a measure of machine intelligence proposed by Alan Turing in 1950." \
+  -F "title=Turing Test Summary" \
+  -F "async_processing=true" \
+  -F "embed=true"
+```
+
+Wait for processing to complete (poll via API).
+
+### 2.2 UI Checks
+
+If using Playwright MCP, navigate through the app and take screenshots.
+If falling back to `curl`, check HTTP status codes (use `--max-time 30` for SSR pages).
+
+1. **Notebooks page** (`http://localhost:3000/notebooks`)
+   - Page loads without errors
+   - "UI Smoke Test" notebook appears in the list
+
+2. **Notebook detail** (`http://localhost:3000/notebooks/<id>`)
+   - Three-column layout renders (Sources, Notes, Chat)
+   - Source appears in sources column
+
+3. **Source detail** — click into the source
+   - Content is displayed
+
+4. **Search page** (`http://localhost:3000/search`)
+   - Page loads
+   - Search input works
+
+5. **Podcasts page** (`http://localhost:3000/podcasts`)
+   - Page loads without errors
+
+After all checks with Playwright, **check browser console** for JavaScript errors.
+
+### 2.3 Cleanup
+
+Delete the UI test notebook via API:
+```bash
+curl -s -X DELETE "http://localhost:5055/api/notebooks/<notebook_id>?delete_exclusive_sources=true"
+```
+
+---
+
+## Phase 3: Final Report
+
+Update `.harness/smoke-report.md` with final results and add a summary:
+
+```markdown
+## Final Verdict
+
+**RELEASE: GO / NO-GO**
+
+- API tests: X/14 passed
+- UI tests: X/7 passed
+- Critical failures: [list or "none"]
+- Skipped tests: [list with reasons]
+- Notes: [any observations, warnings, or non-blocking issues]
+```
+
+A single critical failure in Phase 1 = **NO-GO**.
+Any major UI rendering issue in Phase 2 = **NO-GO**.
+Skipped tests (e.g., no podcast profiles, no Playwright) are acceptable if noted.
+
+---
+
+## Rules
+
+1. **Never write application code.** You only test and report.
+2. **Clean up after yourself.** Delete all test notebooks/sources/episodes when done.
+3. **Be patient with async operations.** Use proper polling with timeouts.
+4. **Collect evidence.** Save response bodies for API tests, screenshots for UI tests.
+5. **Stop early on critical failures.** If the API is down or DB is unreachable, don't waste time on downstream tests.
+6. **Report honestly.** A "GO" with known issues is worse than a "NO-GO" that catches problems before users do.
+
+---
+
+## Known Quirks & Workarounds
+
+These are known issues discovered during testing that may affect smoke test execution:
+
+1. **Source retry endpoint may be broken**: `/api/sources/{id}/retry` can fail with "Source is not associated with any notebooks" due to an incorrect SurrealDB query. If you need to re-embed, use `/api/embed` instead.
+
+2. **Podcast generation takes 3-5 minutes**: Be patient with the polling loop. The job stays in `running` state for several minutes while generating outline, transcript, and TTS audio.
+
+3. **Frontend dev server can become unresponsive**: After heavy API operations (especially podcast generation), the Next.js dev server may become slow or unresponsive. This is typically a dev-server-only issue.
+
+4. **Delete notebook default doesn't delete sources**: You must pass `?delete_exclusive_sources=true` to delete sources that belong only to the deleted notebook.
diff --git a/.claude/skills/process-discussions/SKILL.md b/.claude/skills/process-discussions/SKILL.md
new file mode 100644
index 00000000..c86d47fa
--- /dev/null
+++ b/.claude/skills/process-discussions/SKILL.md
@@ -0,0 +1,199 @@
+---
+name: process-discussions
+description: Facilitate Open Notebook's GitHub Discussions queue — qualify Ideas, decompose them into distinct needs, verify claims in code, propose outcomes (exploring / graduated / parked / combined), draft replies, and graduate small gaps into ready Issues. Use when processing, triaging, or responding to Discussions, or when the user says "process discussions" / "vamos fazer as discussions".
+---
+
+# Discussion Facilitation — Open Notebook
+
+You are facilitating the community Discussion queue, implementing the
+**qualification and exploration stages** of the Open Contribution system
+([Discussion #1266](https://github.com/lfnovo/open-notebook/discussions/1266)
+is the public essay; [#1212](https://github.com/lfnovo/open-notebook/discussions/1212)
+is Bet #1). The maintainer (Luis) is the **decision owner**: every outcome
+and reply is approved by him before posting. You prepare; he decides.
+
+This process was calibrated by hand on 2026-08-16 across 10 Ideas
+(#1210–#1265) and re-run on 2026-09-02 (6 follow-ups + 3 new ideas), which
+added the `incubating` status and the pull rule. The patterns below are
+ratified practice, not theory.
+
+**Ground rules:**
+
+- Interact with the owner in his language; everything posted to GitHub is
+  **English**.
+- **Never post, close, rename, or open anything without explicit approval**
+  of the specific text. Present ficha + outcome + draft; wait for "aprovado".
+- **Never cite internal maintainer drafts** (`.tmp-context/`, private plans).
+  Public anchors only: `VISION.md`, `docs/7-DEVELOPMENT/decisions/` (ADRs/PDRs),
+  open issues/PRs. Alignment with unpublished vision may be expressed as
+  "aligns with where the product is heading" — no specifics.
+- Status is stated **textually** in replies ("Status: **exploring**").
+  No status labels on Discussions yet — that's a future bet.
+- No bulk-migration of historical Issues. Small, theme-scoped samples only
+  (Bet #1 explicitly reserved this), and only with approval.
+
+## Phase 0 — Queue map (once per session)
+
+Build the full picture before touching any single item. Cluster detection
+across the queue is what makes individual replies good.
+
+```bash
+gh api graphql -f query='
+{ repository(owner: "lfnovo", name: "open-notebook") {
+    discussions(first: 50, categoryId: "DIC_kwDONDsQ184CjkD_", orderBy: {field: CREATED_AT, direction: ASC}) {
+      nodes { number title createdAt closed author { login } comments { totalCount } } } } }' \
+  --jq '.data.repository.discussions.nodes[] | select(.closed == false) | "\(.number) | \(.createdAt[:10]) | \(.author.login) | comments:\(.comments.totalCount) | \(.title)"'
+```
+
+(Category `Ideas` = `DIC_kwDONDsQ184CjkD_`; `Feedback Requests` = `DIC_kwDONDsQ184DBrfp`.
+Repo id: `R_kgDONDsQ1w`. These are GitHub GraphQL node ids for lfnovo/open-notebook;
+they change if a category is recreated or the skill is used on a fork. Regenerate:
+
+```bash
+gh api graphql -f query='{ repository(owner: "lfnovo", name: "open-notebook") {
+  id discussionCategories(first: 20) { nodes { id name } } } }'
+```
+)
+
+Split into cohorts: post-Bet-#1 form entries (`[Idea]:` prefix) vs. pre-form
+legacy. Note authors with multiple entries (their items often interconnect)
+and candidate theme clusters. Present the map; agree on order (default:
+chronological within the newest cohort).
+
+**Classify processing state before proposing work** (learned on the legacy
+cohort run): a discussion with a maintainer reply that already delivered an
+outcome — especially one canonicalized in place — does **not** get a new
+reply by default. For already-processed items the deliverable is a *state
+ledger* (what's resolved and closable, what's canonical-awaiting-its-beat,
+and which initiative each one is waiting on), plus at most the few actions
+that state implies (e.g. closing a resolved thread with the outcome
+recorded). Re-replying to handled threads is noise, not facilitation.
+
+## Phase 1 — Ficha de contexto (per discussion)
+
+1. **Fetch everything**: body + all comments (including reply threads).
+   GraphQL, not `gh` CLI (discussions support is partial):
+   `repository.discussion(number: N) { title body author { login } comments(...) }`.
+
+2. **Decompose into distinct needs.** The single highest-value step.
+   Titles undersell: "Thumbnails" was 3 needs; "manual annotations" was 4.
+   Number them. Each need may get a different outcome and a different home.
+
+3. **Search precedents** — issues, PRs, and discussions, multiple terms per
+   need (`gh search issues` has no `--state all`; use `--include-prs`, watch
+   for false positives like Python "annotations"). Check the queue map for
+   sibling discussions.
+
+4. **Verify claims in code before replying.** User reports — even their
+   self-assessments — get checked against the actual implementation. This
+   found two real bugs during calibration (editor hardcoded to light mode;
+   Crawl4AI client sending no auth header). For upstream libraries use the
+   local checkouts from `CLAUDE.local.md` (esperanto, content-core,
+   podcast-creator, surreal-commands). State in the reply what was
+   *verified*, distinctly from what is opinion.
+
+5. **Check vision/decision alignment** against public records. PDR-001
+   (single-user first) and its kin are citable and load-bearing.
+
+## Phase 2 — Outcome proposal
+
+Vocabulary (from the essay's qualification stage, as exercised):
+
+| Outcome | When | Reply must include |
+|---|---|---|
+| **exploring** | Real, aligned problem; open solution space | Sharpening questions that actually shape the design |
+| **incubating** | Direction decided, *timing* open (waits on vision fit, capacity, or a champion) | The settled spec, what it waits on, "this Discussion stays the home" |
+| **accepted → graduated** | Someone will build it now: a builder (maintainer or champion) + closed spec | Issue(s) opened immediately — see graduation rules |
+| **parked until champion** | Valid but needs a community owner (e.g. packaging channels) | Explicit return condition + how to volunteer |
+| **combine** | Duplicate/facet of an existing theme | Link to the canonical home |
+| **answer** | Already exists / documented | The answer, plus where docs fell short |
+| **bug** | Reproducible defect | Graduate straight to a bug Issue |
+
+**Graduation is pull, not push** (ratified 2026-09-02). An Issue is born
+when someone is going to build it — never because the idea became clear.
+`ready` is a promise of execution; filling it with well-discussed items and
+no builder recreates the stale-backlog problem. A discussed-but-unscheduled
+idea is **incubating** and the Discussion remains its home. Exceptions that
+still graduate immediately: verified **bugs**, and small items the
+maintainer will do next.
+
+**Close on `answer`.** When the outcome is `answer` and the need has a
+better home (an existing Issue, upstream, or "not planned"), post the reply
+and close the Discussion as resolved (`closeDiscussion(reason: RESOLVED)`);
+an open thread with a final answer clutters the queue. Anyone can reopen
+with a new argument.
+
+**Graduation rules** (for `accepted → graduated` and `bug`):
+- Issue gets: Context (with Discussion origin link), Expected outcome,
+  Out of scope, Acceptance criteria, References. Label `ready` (+ `bug` when
+  applicable).
+- **Route upstream** when the fix lives in a library (content-core,
+  esperanto): open the upstream issue first, then the downstream
+  bump/docs issue referencing it, then the reply citing both.
+- A dependent downstream issue states "Depends on" explicitly.
+
+**Canonical discussions:**
+- Threshold: **3+ signals** on one theme → broaden an existing thread *in
+  place* (rename via `updateDiscussion`; precedents #1154, #1250, #1254).
+  At 2 signals, keep as a linked pair — no ceremony.
+- Consolidating old Issues into a canon: close **solution-proposals** with
+  an explanation comment (they become evidence); keep **execution umbrellas**
+  open (they graduate when the vision call is made). Respect pointers from
+  PDRs (#712 stays open because PDR-001 references it).
+- Referencing issues in a reply creates backlinks on their timelines — free
+  visibility, no mass edits needed.
+
+## Phase 3 — Draft reply
+
+Structure that worked, in order:
+
+1. Open warm and specific (acknowledge genuinely good behavior: fresh-eyes
+   framing, working prototypes, self-qualification, mockups).
+2. **Mirror the decomposition back, numbered**, marking verified facts as
+   verified ("I checked the code: ...").
+3. If the use case is ambiguous — or the decision owner needed it explained —
+   **play it back as a concrete worked example** ("Let me play this back —
+   correct me where I get it wrong: In March you have 12 papers...").
+4. Route each need to its home with links (canonical discussions, upstream
+   issues, decision records).
+5. Questions tailored to what actually shapes the design — not generic.
+6. Invitations matched to the author's **participation checkboxes**:
+   testers get test asks, implementers get building invites, design
+   volunteers get design questions.
+7. Close with `Status: **<outcome>**` plus a one-line summary of the routing.
+8. When the answer is **no**, say it in the first paragraph with the reasons
+   (e.g. "the runtime is about to change", "estimates for local models
+   don't hold") — never let a decline hide behind exploration questions.
+   Acknowledge real work (a prototype) without letting it change the answer.
+
+Honesty rules: no feature promises, no timelines ("no commitment on timing
+yet"); constraints stated with their reasons (link the PDR); "the door is
+deliberately kept open" beats false enthusiasm and beats silence.
+
+Style rules (owner feedback, 2026-08-16): no marketing filler or
+throat-clearing — never "Fair question, and it deserves a straight answer" /
+"Great idea!". Open by *answering*. Warmth comes from specificity
+(acknowledging a working prototype, a good decomposition), not from
+compliments about the question itself.
+
+## Phase 4 — Approval gate, then post
+
+Present to the owner: ficha (compact), proposed outcome, full draft reply,
+and any issues/renames/closures the package includes. After approval:
+
+- Write bodies to scratchpad files; post via GraphQL (`addDiscussionComment`,
+  `updateDiscussion` for renames) with `-F body=@file` — avoids shell
+  escaping.
+- `gh issue create --label ready --body-file ...`; `gh issue close N
+  --comment "$(cat file)"`.
+- Order matters when linking: create issues first, then post the reply with
+  real links.
+
+## Session close
+
+- Update the project memory (`open-contribution-workflow` memory file) with
+  new patterns, posture decisions, and queue state.
+- Report the scoreboard: discussions handled, outcomes by type, issues born,
+  bugs found via verification.
+- Surface skill-worthy learnings to the owner — this file evolves the same
+  way it was born: from practice.
diff --git a/.claude/skills/release/SKILL.md b/.claude/skills/release/SKILL.md
new file mode 100644
index 00000000..58da7432
--- /dev/null
+++ b/.claude/skills/release/SKILL.md
@@ -0,0 +1,116 @@
+---
+name: release
+description: Orchestrate an Open Notebook release — changelog audit, risk-based A/B/C test matrix, Docker image gate (fresh + upgrade), fix loop via PRs, cut, publication with credits, retro. Use when preparing, testing, cutting or publishing a release.
+---
+
+# Open Notebook Release Orchestrator
+
+You are conducting a release of Open Notebook, reproducing the process
+established in v1.11.0. The **source of truth for the process** is
+`.github/RELEASE_PROCESS.md` — read it first. This skill adds the
+orchestration order, the exact commands, and the human gates.
+
+**Ground rules for the whole run:**
+
+- The release happens in a **single session**. Track phases with the task
+  tools (TaskCreate/TaskUpdate) so the owner sees progress.
+- Every repo change goes through a **PR** (branch → PR → CI + cubic → merge).
+  Never push to main. Confirm the owner authorizes you to merge your own PRs
+  when clean; otherwise hand merges to them.
+- Interact in the owner's language; write code, commits and docs in English.
+- Read `${CLAUDE_SKILL_DIR}/gates.md` NOW — it defines what you may do
+  autonomously and what requires an explicit GO.
+
+## Phase 0 — Scope and changelog audit
+
+1. `git fetch --tags` · find the last release tag and `gh release list`.
+2. List everything merged since: `git log <last-tag>..origin/main --oneline`.
+3. Audit the CHANGELOG `[Unreleased]` section against that list. Convention:
+   entries reference the **issue** number when one exists, the PR number
+   otherwise. Close every gap via PR.
+4. Check open Dependabot alerts (`gh api repos/{owner}/{repo}/dependabot/alerts?state=open`)
+   — a security-themed release with open highs is incoherent. Triage them
+   into the fix loop or document acceptance.
+
+## Phase 1 — Risk-based test matrix
+
+Read `${CLAUDE_SKILL_DIR}/test-matrix.md` and instantiate it against the
+actual release diff. Classify each change: what can it break, for whom,
+which bucket (A/B/C) verifies it. **Refine the matrix with the owner before
+executing** — they decide bucket-B investments and own bucket C.
+
+## Phase 2 — Execute bucket A
+
+Run in parallel where possible:
+
+- `uv run pytest tests/` · `ruff check .` · `uv run python -m mypy .` (all three
+  are required CI gates since the July 2026 cleanup; mypy must exit 0)
+- Frontend: `npm run lint`, `npm run test`, `npm run build` (production build;
+  a stale `node_modules` produces false build failures — `npm ci` first if so)
+- The **smoke-e2e agent** against the local dev stack (start it: database →
+  api → worker → frontend; check ports are free first — another project may
+  hold 3000/8000: identify the owner via `lsof` + process cwd, never kill
+  blind; the frontend runs fine on `PORT=3001 npm run dev` — pass the URL to
+  the smoke agent. Also note the dev `.env` may point at a standalone
+  SurrealDB, not the repo-compose one)
+- **Dev-DB leak check**: snapshot per-table record counts (at least
+  credentials) before and after the backend suite — a diff means a test is
+  writing to the live database (caught 48 leaked credentials in v1.12.0)
+- The **targeted probes** from the matrix (legitimate-use regression checks
+  for security changes)
+
+## Phase 3 — Image gate + bucket C kickoff
+
+- `make docker-build-local`, then `make release-test TAG=<ver> OLD_TAG=<prev>`
+  (pull the genuine previous tag first — see gotchas in RELEASE_PROCESS.md).
+- Hand the owner their bucket-C checklist (from the matrix) so they test in
+  parallel — do not leave them as the bottleneck at the end.
+
+## Phase 4 — Fix loop
+
+For each finding: reproduce → root-cause → focused PR with regression tests →
+CI + cubic → merge (per gates.md). Apply the re-test policy from
+RELEASE_PROCESS.md after each merge. Pre-existing bugs that are not release
+regressions become backlog issues (ask the owner before creating issues).
+Verify UI fixes in the real browser (Playwright) before opening the PR.
+
+## Phase 5 — Cut
+
+1. Cut PR off updated main: bump `pyproject.toml`, date the changelog section.
+2. After merge: `make tag`.
+3. Rebuild the image from final main and **re-run the image gate** against it.
+4. Push version images via CI:
+   `gh workflow run build-and-release.yml --ref main -f push_latest=false`
+   and watch the run. (Local `make docker-push` needs `docker login`.)
+5. Verify the pushed manifests (see `${CLAUDE_SKILL_DIR}/runbook.md`).
+
+## Phase 6 — Pushed-image verification (human gate)
+
+Offer the owner a browsable RC stack on this machine:
+`make release-stack TAG=<ver> [DUMP=<dump>]` — with a copy of their dev data
+for realism (export command in the runbook). Support them through it; findings
+go back to Phase 4. **Do not proceed without their GO.**
+
+## Phase 7 — Publish (human gate)
+
+1. Draft release notes per `${CLAUDE_SKILL_DIR}/comms-templates.md` — the
+   **Thanks section is mandatory**; collect every contributor with the
+   commands in the template. Show the owner for review.
+2. With their explicit GO: `gh release create v<ver> --title ... --notes-file ... --latest`.
+   Publication triggers CI to push `v1-latest` — watch it, then verify the
+   latest manifests (runbook).
+3. Mark shipped issues with the `released` label (ask before mass-labeling).
+4. Deliver the Discord post text (the owner posts it).
+
+## Phase 8 — Cleanup
+
+`make release-stack-down`, remove temp dumps/data dirs, stop watchers, ensure
+`git status` is clean on main and no test containers remain.
+
+## Phase 9 — Retro (always runs)
+
+Ask the owner: *"what should improve in this process?"* — and apply the
+accepted improvements **now**: edit `.github/RELEASE_PROCESS.md`,
+`scripts/release-test/*`, and this skill's files while context is fresh.
+New gotchas discovered during the run go into RELEASE_PROCESS.md's Known
+Gotchas via the same PR flow.
diff --git a/.claude/skills/release/comms-templates.md b/.claude/skills/release/comms-templates.md
new file mode 100644
index 00000000..c474df8a
--- /dev/null
+++ b/.claude/skills/release/comms-templates.md
@@ -0,0 +1,62 @@
+# Communication Templates
+
+Reference implementation: the v1.11.0 release
+(https://github.com/lfnovo/open-notebook/releases/tag/v1.11.0).
+
+## GitHub release notes structure
+
+```
+**We recommend all users upgrade.** <one-line verdict: what this release is,
+and that it was validated by the release test process>
+
+## 🔒 Security hardening        (if applicable — lead with it)
+## ✨ New features               (user language, issue refs)
+## ⚡ Performance
+## 🐛 Notable fixes
+## ⚠️ Behavior changes for self-hosters
+    <anything that can require a config tweak on upgrade — numbered,
+     each with the escape hatch (env var, override file, doc link)>
+## 🙏 Thanks                     (MANDATORY — see below)
+Full details in the [CHANGELOG](.../CHANGELOG.md).
+```
+
+Tone: honest and specific. Say what protections do AND what stays supported
+(e.g. "private IPs/localhost remain fully supported for self-hosted Ollama").
+
+## 🙏 Thanks — collecting contributors (never skip, never miss anyone)
+
+1. Commit authors in the release range:
+   `git log <last-tag>..<tag> --pretty='%an <%ae>' | sort | uniq -c | sort -rn`
+2. Map every non-obvious name to a GitHub handle via their PR:
+   `gh pr view <n> --json author --jq .author.login`
+   (PR list: `gh pr list --state merged --limit 1000 --search "merged:>=<prev-tag-date>" --json number,author,mergedAt,title`
+   — filter by merge date server-side; a small `--limit` caps the list *before*
+   any date filtering and silently drops contributors. Then exclude PRs merged
+   before the previous tag — beware PRs merged before the
+   previous tag was cut appearing in date filters.)
+3. One bullet per contributor: **@handle** — what they shipped, with refs.
+4. Close with a collective thank-you to issue reporters.
+5. Bots (dependabot) are excluded.
+
+## Discord announcement skeleton
+
+```
+📢 Open Notebook v<X.Y.Z> is out — <hook: why upgrade>!
+
+<2-3 lines: the headline theme (e.g. security pass) + feature highlights
+as a one-line · separated list>
+
+⚡ <performance line, if any>
+
+🧪 <one line on how it was tested — users trust releases more when they
+    know fresh-install + upgrade were tested on the real images>
+
+⚠️ Self-hosters: check "Behavior changes" in the release notes.
+
+📝 https://github.com/lfnovo/open-notebook/releases/tag/v<X.Y.Z>
+🐳 docker pull lfnovo/open_notebook:v1-latest
+```
+
+Consider crediting contributors on Discord too — communities love it.
+
+The owner posts to Discord; deliver final text, don't post.
diff --git a/.claude/skills/release/gates.md b/.claude/skills/release/gates.md
new file mode 100644
index 00000000..d28da6e4
--- /dev/null
+++ b/.claude/skills/release/gates.md
@@ -0,0 +1,44 @@
+# Gates — what needs a human, what doesn't
+
+The contract that made v1.11.0 safe. When in doubt, ask — a blocked action is
+feedback, not an obstacle to route around.
+
+## You may do autonomously (once the release run is underway)
+
+- Run any test, build, probe or analysis; start/stop local dev services
+- Create branches, commits, and open PRs
+- Spawn subagents (smoke-e2e, investigation, fixes)
+- Build/pull Docker images locally; run the release-test harness and RC stack
+- Dispatch the *Build and Release* CI workflow with `push_latest=false`
+  (version tags only — this is the agreed pre-verification push)
+
+## Requires explicit, in-session authorization from the owner
+
+| Action | Why |
+|---|---|
+| Merging PRs you authored | two-party review; ask once per session ("merge when clean?") and honor the answer |
+| Publishing the GitHub release | public, triggers `v1-latest` — the point of no return |
+| Anything that pushes `v1-latest` | users receive it immediately |
+| Creating GitHub issues | external artifacts the owner may not want |
+| Mass-labeling issues (`released`) | bulk modification of shared state |
+| Touching the owner's dev data | only ever work on **copies** (export/import); never mount or mutate originals |
+
+## Never
+
+- Push directly to main
+- Publish a prerelease/release to work around a blocked step
+- Mark a phase complete with failing checks ("GO with known issues is worse
+  than a NO-GO that catches problems before users do")
+
+## Re-test policy after each fix merge
+
+- Cheap suite (pytest + lint + frontend tests/build): **always**
+- smoke-e2e / image gate: only if the fix touches what they cover
+- Owner's manual verification: only if the fix touches what they verified
+- The final image gate (Phase 5.3) always runs on the exact release artifact
+
+## GO/NO-GO
+
+A release is GO when: bucket A fully green · image gate green (fresh +
+upgrade) · bucket C signed off by the owner · no open release-regression
+findings · Dependabot highs resolved or explicitly accepted.
diff --git a/.claude/skills/release/runbook.md b/.claude/skills/release/runbook.md
new file mode 100644
index 00000000..cbc2a0e0
--- /dev/null
+++ b/.claude/skills/release/runbook.md
@@ -0,0 +1,112 @@
+# Runbook — exact commands for the cut-and-publish phases
+
+Gotchas live in `.github/RELEASE_PROCESS.md` → Known Gotchas. This file is
+the command reference.
+
+## Version images via CI (Phase 5)
+
+```bash
+gh workflow run build-and-release.yml --ref main -f push_latest=false
+gh run list --workflow=build-and-release.yml --limit 1     # grab the id
+gh run watch <run-id> --exit-status                        # background it
+```
+
+## Verify pushed manifests
+
+```bash
+for ref in lfnovo/open_notebook:<ver> lfnovo/open_notebook:<ver>-single ghcr.io/lfnovo/open-notebook:<ver> ghcr.io/lfnovo/open-notebook:<ver>-single; do
+  docker manifest inspect "$ref" | python3 -c "import json,sys; d=json.load(sys.stdin); print(sorted(set(m['platform']['architecture'] for m in d.get('manifests',[]) if m['platform']['architecture']!='unknown')))"
+done
+# expect ['amd64', 'arm64'] for all four (`make docker-push` publishes both
+# registries × {plain, -single}); repeat with v1-latest and v1-latest-single
+# on both registries after publication
+```
+
+## RC stack with a copy of the owner's dev data (Phase 6)
+
+```bash
+# 1. Find which SurrealDB instance dev actually uses — read SURREAL_URL in .env
+#    (multiple instances may run locally; the repo-compose one on :8000 may NOT
+#    be it), and note SURREAL_DATABASE.
+# 2. Consistent export from the RUNNING instance (originals untouched):
+docker exec <that-container> /surreal export --conn http://localhost:8000 \
+  --user root --pass root --ns open_notebook --db <that-db> /dev/stdout > /tmp/dev-dump.surql
+# 3. Boot (rc-stack.sh docker-pulls the pushed tag by default, so a local
+#    build can't shadow the registry artifact):
+make release-stack TAG=<ver> DUMP=/tmp/dev-dump.surql
+#    To exercise the opt-in heavy runtimes (Docling + Crawl4AI) on the pushed
+#    image with this data, append the flag (first boot installs them, ~minutes):
+#    bash scripts/release-test/rc-stack.sh up <ver> /tmp/dev-dump.surql --with-runtimes
+# 4. Sanity: credentials decrypt (uses the dev encryption key from .env):
+curl -s http://localhost:15055/api/credentials | python3 -c "import json,sys; c=json.load(sys.stdin); print(len(c), 'creds,', sum(1 for x in c if x.get('decryption_error')), 'decrypt errors')"
+# 5. Opt-in gating is only meaningful on this fresh image (a dev venv may have
+#    the runtimes installed out-of-band): GET /api/capabilities should report
+#    both false until --with-runtimes installs them.
+```
+
+Remind the owner: in-container credentials pointing at host services need
+`http://host.docker.internal:<port>` (Ollama, LM Studio).
+
+## Publish (Phase 7 — after explicit GO)
+
+```bash
+gh release create v<ver> --title "v<ver> — <theme>" --notes-file <notes.md> --latest
+# publication (non-prerelease) triggers the workflow that pushes v1-latest
+gh run list --workflow=build-and-release.yml --limit 1 && gh run watch <id> --exit-status
+```
+
+## Re-cut after a post-tag fix (Phase 4 ↔ 5 loop)
+
+When a blocker is found *after* the tag exists but *before* publication (no
+GitHub release, no `v1-latest` yet), the fix goes through the normal PR flow,
+then the release is re-cut. `pyproject.toml` stays at the same version — the tag
+moves to the new commit. Exact sequence:
+
+```bash
+# 1. Fix merged to main; sync and confirm the version is unchanged
+git checkout main && git pull && grep '^version' pyproject.toml   # still <ver>
+
+# 2. Cheap suite (re-test policy) before re-tagging
+uv run pytest tests/ -q && ruff check .        # + frontend if it was touched
+
+# 3. Move the tag: delete local + remote, recreate on the new HEAD
+git tag -d v<ver>
+git push origin :refs/tags/v<ver>
+make tag                                       # recreates v<ver> on HEAD
+git rev-parse v<ver> && git rev-parse HEAD      # must match
+
+# 4. Rebuild the image and RE-RUN THE IMAGE GATE on the re-cut artifact
+docker rmi lfnovo/open_notebook:<ver> lfnovo/open_notebook:local 2>/dev/null
+make docker-build-local
+make release-test TAG=<ver> OLD_TAG=<prev>     # fresh + upgrade + probes
+
+# 5. Re-push the version images from the fixed commit (overwrites the stale ones)
+gh workflow run build-and-release.yml --ref main -f push_latest=false
+#    then watch the run and re-verify the <ver> manifests (section above)
+
+# 6. Re-boot the RC stack on the fresh pushed image for the owner's re-GO
+make release-stack TAG=<ver> DUMP=<dump>
+```
+
+Only after the owner re-GOes does publication proceed. The published-release CI
+run promotes whatever the version tag/images currently are to `v1-latest`, so a
+skipped rebuild here means users get the un-fixed artifact.
+
+## Label shipped issues (after owner OK)
+
+```bash
+# only actual closed ISSUES (changelog refs mix issues and PR numbers):
+for n in <numbers>; do
+  STATE=$(gh api "repos/lfnovo/open-notebook/issues/$n" --jq 'if .pull_request then "pr" else .state end')
+  [ "$STATE" = "closed" ] && gh issue edit "$n" --add-label released
+done
+```
+
+## Cleanup (Phase 8)
+
+```bash
+make release-stack-down
+rm -f /tmp/dev-dump.surql; rm -rf /tmp/onrel-*
+docker ps --format '{{.Names}}' | grep onrel   # must be empty
+git status --short                              # must be clean on main
+```
diff --git a/.claude/skills/release/test-matrix.md b/.claude/skills/release/test-matrix.md
new file mode 100644
index 00000000..f81b3902
--- /dev/null
+++ b/.claude/skills/release/test-matrix.md
@@ -0,0 +1,66 @@
+# Test Matrix Template — change → risk → bucket
+
+Instantiate against the real release diff. The unit of planning is the
+**risk**, not the feature: for each change ask *what can this break, and for
+whom?* Security hardening gets the inverse question too: *does the protection
+break legitimate use?* (v1.11.0 examples: SSRF guard vs. self-hosted Ollama on
+localhost; body-size cap vs. big uploads; Host validation vs. reverse proxies).
+
+## Bucket A — automated now (run all of it)
+
+Checklist design rule (v1.12.0 retro): before putting an error-path item on
+the bucket-C checklist ("X unconfigured should show an error"), verify in the
+provisioning code that it IS an error — transformation and tools defaults
+deliberately fall back to the chat default (`open_notebook/ai/models.py`).
+
+| Check | Command / tool |
+|---|---|
+| Backend suite | `uv run pytest tests/` |
+| Lint & types | `ruff check .` · `uv run python -m mypy .` (both are required CI gates; mypy runs at 0 errors — `uv sync --extra dev` first if mypy is missing locally) |
+| Frontend | `npm run lint` · `npm run test` · `npm run build` (run `npm ci` first if deps changed) |
+| Full happy path | smoke-e2e agent on the local dev stack (API + Playwright UI) |
+| Dependency audit | Dependabot alerts + `npm audit` |
+| Targeted probes | see below — pick per matrix |
+
+### Probe library (extend per release)
+
+Regression-of-legitimate-use probes proven in v1.11.0 — adapt endpoints/values:
+
+- Upload just under / just over the body cap → accepted / 413
+- Source ingestion of a `localhost` URL → ACCEPTED (self-hosted is legitimate);
+  link-local/metadata URL → rejected with a clear 4xx
+- Frontend `/config` with clean vs. malformed `Host` → sane URL / fallback, never 5xx
+- SSE endpoints stream progressively (first byte ≪ total time via `curl -N -w`)
+- CORS preflight with and without `CORS_ORIGINS` set
+- Every enum/allowlisted query param exercised with **each** valid value +
+  one invalid (v1.11.0: `sort_by=title` 500'd while all siblings passed —
+  test the whole surface, not one sample)
+- Oversized array inputs and unknown-provider payloads → clean 422, not 500
+- Anything an LLM or UI writes through: verify the full path in a real
+  browser, not just the API (mirror-bug lesson: frontend dropped the field
+  AND the API ignored null — only end-to-end caught it)
+
+## Bucket B — automatable with investment (decide with the owner)
+
+Standing candidates; the image gate graduated from here to `make release-test`:
+
+- New end-to-end scenarios for this release's features
+- CI-ification of any probe that proved valuable twice
+- Anything the owner keeps having to verify by hand
+
+Decision rule: build it if it compounds for future releases and costs < the
+manual verification it replaces; otherwise verify manually this once and note
+it here for next time.
+
+## Bucket C — the release owner (start EARLY, in parallel)
+
+- Provider connection tests with **real credentials** (prioritize providers
+  whose code changed); one discover-models; one chat per main provider
+- One podcast with real TTS on a dense notebook
+- Visual/UX tour (~10 min) of every UI change in the release, plus dark mode
+  sampling
+- Phase 6: the pushed image via `make release-stack`
+
+Deliver this as a concrete checklist with expected outcomes, tailored to what
+the release actually touched and to the credentials the owner actually has
+(`GET /api/credentials` tells you).
diff --git a/.gitignore b/.gitignore
index d10840f5..ea9aa2e4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -130,7 +130,10 @@ docs/custom_gpt
 doc_exports/
 
 specs/
-.claude
+# .claude: personal state stays local; skills and agents are shared project tooling
+.claude/*
+!.claude/skills
+!.claude/agents
 .sisyphus
 
 .playwright-mcp/

From 9ec847003c5650fe868ce6b14d8692686077609a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 21:26:35 -0300
Subject: [PATCH 257/345] build(deps-dev): bump @humanfs/node from 0.16.6 to
 0.16.8 in /frontend (#1302)

Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) from 0.16.6 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases)
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node)

---
updated-dependencies:
- dependency-name: "@humanfs/node"
  dependency-version: 0.16.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 frontend/package-lock.json | 37 ++++++++++++++++++++-----------------
 1 file changed, 20 insertions(+), 17 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index d39c652f..78e374a1 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1240,38 +1240,41 @@
       }
     },
     "node_modules/@humanfs/core": {
-      "version": "0.19.1",
-      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.1.tgz",
-      "integrity": "sha512-5DyQ4+1JEUzejeK1JGICcideyfUbGixgS9jNgex5nqkW+cY7WZhxBigmieN5Qnw9ZosSNVC9KQKyb+GUaGyKUA==",
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/@humanfs/core/-/core-0.19.2.tgz",
+      "integrity": "sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==",
       "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@humanfs/types": "^0.15.0"
+      },
       "engines": {
         "node": ">=18.18.0"
       }
     },
     "node_modules/@humanfs/node": {
-      "version": "0.16.6",
-      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.6.tgz",
-      "integrity": "sha512-YuI2ZHQL78Q5HbhDiBA1X4LmYdXCKCMQIfw0pw7piHJwyREFebJUvrQN4cMssyES6x+vfUbx1CIpaQUKYdQZOw==",
+      "version": "0.16.8",
+      "resolved": "https://registry.npmjs.org/@humanfs/node/-/node-0.16.8.tgz",
+      "integrity": "sha512-gE1eQNZ3R++kTzFUpdGlpmy8kDZD/MLyHqDwqjkVQI0JMdI1D51sy1H958PNXYkM2rAac7e5/CnIKZrHtPh3BQ==",
       "dev": true,
+      "license": "Apache-2.0",
       "dependencies": {
-        "@humanfs/core": "^0.19.1",
-        "@humanwhocodes/retry": "^0.3.0"
+        "@humanfs/core": "^0.19.2",
+        "@humanfs/types": "^0.15.0",
+        "@humanwhocodes/retry": "^0.4.0"
       },
       "engines": {
         "node": ">=18.18.0"
       }
     },
-    "node_modules/@humanfs/node/node_modules/@humanwhocodes/retry": {
-      "version": "0.3.1",
-      "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.3.1.tgz",
-      "integrity": "sha512-JBxkERygn7Bv/GbN5Rv8Ul6LVknS+5Bp6RgDC/O8gEBU/yeH5Ui5C/OlWrTb6qct7LjjfT6Re2NxB0ln0yYybA==",
+    "node_modules/@humanfs/types": {
+      "version": "0.15.0",
+      "resolved": "https://registry.npmjs.org/@humanfs/types/-/types-0.15.0.tgz",
+      "integrity": "sha512-ZZ1w0aoQkwuUuC7Yf+7sdeaNfqQiiLcSRbfI08oAxqLtpXQr9AIVX7Ay7HLDuiLYAaFPu8oBYNq/QIi9URHJ3Q==",
       "dev": true,
+      "license": "Apache-2.0",
       "engines": {
-        "node": ">=18.18"
-      },
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/nzakas"
+        "node": ">=18.18.0"
       }
     },
     "node_modules/@humanwhocodes/module-importer": {

From 08294a8f85d5056ecc3c3ceaa5ea9424151c9275 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 21:35:26 -0300
Subject: [PATCH 258/345] build(deps-dev): bump browserslist from 4.28.2 to
 4.28.8 in /frontend (#1298)

Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.28.2 to 4.28.8.
- [Release notes](https://github.com/browserslist/browserslist/releases)
- [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/browserslist/browserslist/compare/4.28.2...4.28.8)

---
updated-dependencies:
- dependency-name: browserslist
  dependency-version: 4.28.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 57 +++++++++++++++-----------------------
 1 file changed, 23 insertions(+), 34 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 78e374a1..bf6aa362 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -4540,17 +4540,6 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch/node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0",
-        "concat-map": "0.0.1"
-      }
-    },
     "node_modules/@typescript-eslint/utils": {
       "version": "8.37.0",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.37.0.tgz",
@@ -5512,9 +5501,9 @@
       "dev": true
     },
     "node_modules/baseline-browser-mapping": {
-      "version": "2.10.37",
-      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.10.37.tgz",
-      "integrity": "sha512-girxaJ7WZssDOFhzCGZTDKoTa1gk6A1TbflaYTpykLJ4UU9Fz9kx1aREM8JCuoVHbL8X8T/mJg7w2oYSq72Oig==",
+      "version": "2.11.20",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.20.tgz",
+      "integrity": "sha512-H0ulySigv6icDJ1F7SjtdCD6PrhTpdYCmP0CactWy1+ekh0AFd0o1Wn5T8b+hnTmdBx19u9yhL6wvCylXMY7zw==",
       "license": "Apache-2.0",
       "bin": {
         "baseline-browser-mapping": "dist/cli.cjs"
@@ -5561,9 +5550,9 @@
       }
     },
     "node_modules/browserslist": {
-      "version": "4.28.2",
-      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.2.tgz",
-      "integrity": "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==",
+      "version": "4.28.8",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.8.tgz",
+      "integrity": "sha512-V2NpofLblG64mfOtSgDhOJESZEGogzDMBv/q+W6oc4LXWP/q75eOXoOaaOu1EOadB9U4Bwx/e0yzbvwKH8zalA==",
       "dev": true,
       "funding": [
         {
@@ -5581,11 +5570,11 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "baseline-browser-mapping": "^2.10.12",
-        "caniuse-lite": "^1.0.30001782",
-        "electron-to-chromium": "^1.5.328",
-        "node-releases": "^2.0.36",
-        "update-browserslist-db": "^1.2.3"
+        "baseline-browser-mapping": "^2.11.12",
+        "caniuse-lite": "^1.0.30001809",
+        "electron-to-chromium": "^1.5.402",
+        "node-releases": "^2.0.53",
+        "update-browserslist-db": "^1.3.0"
       },
       "bin": {
         "browserslist": "cli.js"
@@ -5650,9 +5639,9 @@
       }
     },
     "node_modules/caniuse-lite": {
-      "version": "1.0.30001799",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001799.tgz",
-      "integrity": "sha512-hG1bReV+OUU+MOqK4t/ZWI0tZOyz3rqS9XuhOUz1cIcbwBKjOyJEJuw9ER5JuNyqxNk8u/JUVbGibBOL1yrjFw==",
+      "version": "1.0.30001810",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001810.tgz",
+      "integrity": "sha512-TITQPUkaz+aVk5GL6NhOdwk1aEaNTSDPsGFWrTuhKGtjTF70jL/Oht2W4c6rXUe5fu7Ie19VIahAXHIIiWWNeg==",
       "funding": [
         {
           "type": "opencollective",
@@ -6160,9 +6149,9 @@
       }
     },
     "node_modules/electron-to-chromium": {
-      "version": "1.5.375",
-      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.375.tgz",
-      "integrity": "sha512-ZWP5eB4BVPW/ZYo9252hQZHZ5XavtsTgpbhcmMmRwymavC5AsLWQWBPaKMeNd2LW0KGby5HPXvj7+sr4ta5j/Q==",
+      "version": "1.5.420",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.420.tgz",
+      "integrity": "sha512-2yD6XreGusOfNV+dUcvipJEXc3n/n7fgr7996aszTG+YY5E4mqM4tOq/3uhP129cazL9YHbVWSpc79ePotWtPA==",
       "dev": true,
       "license": "ISC"
     },
@@ -9989,9 +9978,9 @@
       }
     },
     "node_modules/node-releases": {
-      "version": "2.0.47",
-      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.47.tgz",
-      "integrity": "sha512-Uzmd6LXpouKo8EUK68IjH4+E01w/hXyV3R3g/geCJo+rXLNfh1xucB+LOzYEOQPSiUK3h/xZf0cQGcSsmyL2Og==",
+      "version": "2.0.54",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.54.tgz",
+      "integrity": "sha512-YHs7BmmcsdAI5Ozuf8JZo6PT0mv2GIWC9vMfvUC3dp65M8hn7Ux8CPL+2oBI7juNuj9d0ndhTcznq2ODBps9cQ==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -12291,9 +12280,9 @@
       }
     },
     "node_modules/update-browserslist-db": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz",
-      "integrity": "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==",
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.2.tgz",
+      "integrity": "sha512-UQ+MSxlhRm1bzjhU+DcuXfjFO1FzNtqhK5+9Yvlp90ItDLk5vT932A0rFu619nf7RVS+Y/VeaUW1jaRDqZ8VJw==",
       "dev": true,
       "funding": [
         {

From baf3f43b961f69aada598ab7e412d1c932425d5f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 21:41:06 -0300
Subject: [PATCH 259/345] build(deps): bump pip from 26.1.2 to 26.2 (#1297)

Bumps [pip](https://github.com/pypa/pip) from 26.1.2 to 26.2.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](https://github.com/pypa/pip/compare/26.1.2...26.2)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '26.2'
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/uv.lock b/uv.lock
index 2bb37ef5..dfc1d693 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3,10 +3,10 @@ revision = 3
 requires-python = ">=3.11, <3.13"
 resolution-markers = [
     "python_full_version >= '3.12' and sys_platform == 'win32'",
-    "python_full_version < '3.12' and sys_platform == 'win32'",
     "python_full_version >= '3.12' and sys_platform == 'emscripten'",
-    "python_full_version < '3.12' and sys_platform == 'emscripten'",
     "python_full_version >= '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
+    "python_full_version < '3.12' and sys_platform == 'win32'",
+    "python_full_version < '3.12' and sys_platform == 'emscripten'",
     "python_full_version < '3.12' and sys_platform != 'emscripten' and sys_platform != 'win32'",
 ]
 
@@ -2364,7 +2364,7 @@ name = "pexpect"
 version = "4.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "ptyprocess", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
+    { name = "ptyprocess" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/42/92/cc564bf6381ff43ce1f4d06852fc19a2f11d180f23dc32d9588bee2f149d/pexpect-4.9.0.tar.gz", hash = "sha256:ee7d41123f3c9911050ea2c2dac107568dc43b2d3b0c7557a33212c398ead30f", size = 166450, upload-time = "2023-11-25T09:07:26.339Z" }
 wheels = [
@@ -2404,11 +2404,11 @@ wheels = [
 
 [[package]]
 name = "pip"
-version = "26.1.2"
+version = "26.2"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/01/91/47e7d486260f618783899587af63ccf7980fb60245c3e63dd4571c6b57ad/pip-26.1.2.tar.gz", hash = "sha256:f49cd134c61cf2fd75e0ce2676db03e4054504a5a4986d00f8299ae632dc4605", size = 1840799, upload-time = "2026-05-31T17:33:58.56Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/db/96/e6f8e9d9d7b9cc4457092712a7e919c3186aa2c2fa9ffed2c5d29cc947e8/pip-26.2.tar.gz", hash = "sha256:2d8542afcc84cdd8e846c2b36b2861fad1da376dd98f8e7113e9108a3c331690", size = 1848845, upload-time = "2026-07-29T21:57:56.407Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/95/6b5cb3461ea5673ba0995989746db58eb18b91b54dbf331e72f569540946/pip-26.1.2-py3-none-any.whl", hash = "sha256:382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab", size = 1813144, upload-time = "2026-05-31T17:33:56.772Z" },
+    { url = "https://files.pythonhosted.org/packages/62/36/a3aed958d60531cb442b7ab4596cda7b3621cfb916f8ae1d6769795c7dc1/pip-26.2-py3-none-any.whl", hash = "sha256:931c303696af6fa3417112103b1cad26890e5a07eccb5b99783700e33f2b8aad", size = 1816475, upload-time = "2026-07-29T21:57:54.763Z" },
 ]
 
 [[package]]
@@ -3203,8 +3203,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
-    { name = "jeepney", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
+    { name = "cryptography" },
+    { name = "jeepney" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [

From e94fb85ae8ae68143a19bafccd24149b012eb715 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 21:52:04 -0300
Subject: [PATCH 260/345] build(deps): bump tornado from 6.5.7 to 6.5.8 (#1296)

Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.7 to 6.5.8.
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.7...v6.5.8)

---
updated-dependencies:
- dependency-name: tornado
  dependency-version: 6.5.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/uv.lock b/uv.lock
index dfc1d693..a887c28e 100644
--- a/uv.lock
+++ b/uv.lock
@@ -3438,19 +3438,19 @@ wheels = [
 
 [[package]]
 name = "tornado"
-version = "6.5.7"
+version = "6.5.8"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/64/24/95ec527ad67b76d59299e5465b3935d05e4294b7e0290a3924b7487df30b/tornado-6.5.7.tar.gz", hash = "sha256:66c513a76cda70d53907bc27cf1447557699c2e95aa48ba27a442ff61c3ddfc2", size = 519252, upload-time = "2026-06-08T17:34:51.232Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/10/d3/343e5bb989d6515b1646cf3d40135d73f3d5e45339bded401b56cdac24dd/tornado-6.5.8.tar.gz", hash = "sha256:9452e1b208a8bd771e2cb1f2ff564985b9b214bdebbe622793e1799e0a6bd23f", size = 520493, upload-time = "2026-08-07T02:12:42.971Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/02/dc/c7043cab6fed8ae159fc1923ce829ada35c4dbd797d408a43858ffaf9639/tornado-6.5.7-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:148b2eb15c2c765a50796172c1e499649b35f30d2e3c3d3e15913cfa56bfb163", size = 448543, upload-time = "2026-06-08T17:34:38.052Z" },
-    { url = "https://files.pythonhosted.org/packages/92/4f/090b1431e5a43df696feceffc268c5383cc079ecb5f08ce58f917109aafe/tornado-6.5.7-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:9da38de27f1da3b78a966f0dae12b5a1ea9afe72ca805d84ff06508272ddf100", size = 446707, upload-time = "2026-06-08T17:34:39.594Z" },
-    { url = "https://files.pythonhosted.org/packages/37/d8/ef374952fd5da67d4463122c2b8e5a96536ec10b4b339254c6dcde81d01c/tornado-6.5.7-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:8d759e71906ee783f8867b93bf26a265743da4c1e2f4a018464c1ba019862972", size = 449774, upload-time = "2026-06-08T17:34:41.204Z" },
-    { url = "https://files.pythonhosted.org/packages/35/37/d434c73f4c6e014b745b9b37085f34f40c022f007efff3d7fe65991899f3/tornado-6.5.7-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:8a46347a18f23fb92b396beebe0fb78f61dda0cc302445202c16203d8a18848b", size = 450745, upload-time = "2026-06-08T17:34:42.531Z" },
-    { url = "https://files.pythonhosted.org/packages/b6/2b/56b9aff361d7f1ab728a805ec7d7ea835f8807afa9f5cc690ea0e630efb9/tornado-6.5.7-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:7778b30bef919231265e91c69963ce0f49a1e9c07ac900bbe75b19ce2575ba92", size = 450578, upload-time = "2026-06-08T17:34:43.787Z" },
-    { url = "https://files.pythonhosted.org/packages/02/30/a7444fb23aa76860a14198fab96ac79f1866b0a6e19e26c4381b0938e50f/tornado-6.5.7-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:e726f0c75da7726eec023aa62751ff8878bd2737e34fbdd33b1ae5897d2200f5", size = 449985, upload-time = "2026-06-08T17:34:45.326Z" },
-    { url = "https://files.pythonhosted.org/packages/5c/42/5f0e56c01e8d9d36f4e23f367b85ae6cae0c1ecddd5e6977d8388ad27488/tornado-6.5.7-cp39-abi3-win32.whl", hash = "sha256:f8de3bf12d3efdd0cbe7c8887868198f8a91415e3f29fcf258d9b8eb7b1d9ae4", size = 451047, upload-time = "2026-06-08T17:34:46.784Z" },
-    { url = "https://files.pythonhosted.org/packages/c9/a4/b393076ffb21b469eec5b328a0534cf03a3b90bfc6b1f09507cdd075d938/tornado-6.5.7-cp39-abi3-win_amd64.whl", hash = "sha256:de942f843533a039ef9fa3d9c88c7cd8a7c94553fb5ad0154270989b3d99a2c4", size = 451485, upload-time = "2026-06-08T17:34:48.248Z" },
-    { url = "https://files.pythonhosted.org/packages/71/2e/7b1c769803121b809112cf9a00681c472eae1d80e32d7ec0e0bd61d0d0e1/tornado-6.5.7-cp39-abi3-win_arm64.whl", hash = "sha256:ff934fce95643af5f11efdae618eaa73d469dc588641e5c8d19295a0c65c4796", size = 450506, upload-time = "2026-06-08T17:34:49.702Z" },
+    { url = "https://files.pythonhosted.org/packages/f2/d5/007086fd8df5489338e204f65adce33fd4f21a4999dbb2b9cff2f897b5f4/tornado-6.5.8-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:cc6aa787d7cfab7c3d35189dc7a56fbd2399a569624c730c6b55b3d6531d0403", size = 449487, upload-time = "2026-08-07T02:12:28.682Z" },
+    { url = "https://files.pythonhosted.org/packages/70/c8/5a24a99495903f594f6a199dd7beead1cbc0a13e2cb9102727bcaaf2a997/tornado-6.5.8-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:9715b5eb79735b2bcd454ce216a9275b7c0470e64ea1bf5742f78b2f72b26eeb", size = 447649, upload-time = "2026-08-07T02:12:30.306Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/de/f2e733f386b85962d1b1dc82cd63d169b5b4580062b35397eac9244a41fe/tornado-6.5.8-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:547d63f450d570c14fe0e8db2cfb14c9bbd1c2503b4a6612586267955aa47b58", size = 450707, upload-time = "2026-08-07T02:12:31.95Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/94/20efeee9a01c141e9ac47c397f81679dfda24b32768fc4fff24e76d36c2c/tornado-6.5.8-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:7e2360a0ffbe145eca8af0b19cb7203d79b1a98dd4cccdd6b368f6f49c2e3808", size = 451677, upload-time = "2026-08-07T02:12:33.512Z" },
+    { url = "https://files.pythonhosted.org/packages/42/ec/a96ccb8ccf0de2b7bc2c5fa1608a4803735018242e90c4882365a9fd418f/tornado-6.5.8-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:5d242290bdf7ab3151bc1065fdd75c0dcc21cbc7b49f22a4c56329c2d6566d22", size = 451510, upload-time = "2026-08-07T02:12:35.346Z" },
+    { url = "https://files.pythonhosted.org/packages/29/b5/93185859245ad3f00e62175f29607346788b696369347f0146e0421286bb/tornado-6.5.8-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:7b94ff0e128fe0542f3bd331fb44d06260fc4ac16881545159f34ef08aad4195", size = 450917, upload-time = "2026-08-07T02:12:36.963Z" },
+    { url = "https://files.pythonhosted.org/packages/97/cf/fe33cf062834487d34d1559746a4a12521033c22645b6d74d4bca702e018/tornado-6.5.8-cp39-abi3-win32.whl", hash = "sha256:67832909c4779c64942380cb5f044a5c6163d00831472d80e25e115de9917836", size = 451952, upload-time = "2026-08-07T02:12:38.512Z" },
+    { url = "https://files.pythonhosted.org/packages/cb/e1/468ad54333e92ccb62627e62cb88e5fc14a2171daa67ed47b1b8542d5b86/tornado-6.5.8-cp39-abi3-win_amd64.whl", hash = "sha256:11881db6b7c168494be2c2d12e65931451bdf7ee718535418ae1d8855dd5a0ee", size = 452391, upload-time = "2026-08-07T02:12:39.971Z" },
+    { url = "https://files.pythonhosted.org/packages/ad/3e/cd5e4f06e34cde33b8ef66cf36aa2b5ad46354cc1af7d2136bbe365fee1d/tornado-6.5.8-cp39-abi3-win_arm64.whl", hash = "sha256:68a7468c7e289f8514d7d664101753903217eff1bb6822c6b5994a0b5f5bcb26", size = 451411, upload-time = "2026-08-07T02:12:41.469Z" },
 ]
 
 [[package]]

From c52c51a354a205dca270a2cb3352a120b78907b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 21:59:05 -0300
Subject: [PATCH 261/345] build(deps-dev): bump js-yaml from 4.2.0 to 4.3.2 in
 /frontend (#1258)

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.2/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index bf6aa362..3865dd95 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -8374,9 +8374,9 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
       "dev": true,
       "funding": [
         {

From 6bd768b435074cc0166d5b86f795c70ed64fb74b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:05:06 -0300
Subject: [PATCH 262/345] build(deps): bump nanoid from 3.3.11 to 3.3.18 in
 /frontend (#1256)

Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.11 to 3.3.18.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.11...3.3.18)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 3865dd95..4ae7dc7f 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -9887,15 +9887,16 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "node_modules/nanoid": {
-      "version": "3.3.11",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
-      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "bin": {
         "nanoid": "bin/nanoid.cjs"
       },

From 692daa200db81c0a290586d27edc376ce1d58a60 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:13:43 -0300
Subject: [PATCH 263/345] build(deps): bump langgraph-checkpoint-sqlite from
 3.0.3 to 3.1.1 (#1249)

Bumps [langgraph-checkpoint-sqlite](https://github.com/langchain-ai/langgraph) from 3.0.3 to 3.1.1.
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](https://github.com/langchain-ai/langgraph/compare/checkpointsqlite==3.0.3...checkpointsqlite==3.1.1)

---
updated-dependencies:
- dependency-name: langgraph-checkpoint-sqlite
  dependency-version: 3.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 pyproject.toml | 2 +-
 uv.lock        | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index e9643daa..0dcaac13 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ dependencies = [
     "langchain-text-splitters>=1.1.2,<2",
     "langgraph>=1.0.5,<2",
     "tiktoken>=0.12.0",
-    "langgraph-checkpoint-sqlite>=3.0.1,<4",
+    "langgraph-checkpoint-sqlite>=3.1.1,<4",
     # The langchain-* provider packages below have no direct imports in this
     # codebase: they are runtime requirements of esperanto's dynamic
     # `to_langchain()` (esperanto declares them only as optional extras).
diff --git a/uv.lock b/uv.lock
index a887c28e..0cb9f1d1 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1587,16 +1587,16 @@ wheels = [
 
 [[package]]
 name = "langgraph-checkpoint-sqlite"
-version = "3.0.3"
+version = "3.1.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiosqlite" },
     { name = "langgraph-checkpoint" },
     { name = "sqlite-vec" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/04/61/40b7f8f29d6de92406e668c35265f409f57064907e31eae84ab3f2a3e3e1/langgraph_checkpoint_sqlite-3.0.3.tar.gz", hash = "sha256:438c234d37dabda979218954c9c6eb1db73bee6492c2f1d3a00552fe23fa34ed", size = 123876, upload-time = "2026-01-19T00:38:44.473Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/54/b1/26fef7572c4fce0322740ef3fcee471510028355d4d4c1d800f0fd432d73/langgraph_checkpoint_sqlite-3.1.1.tar.gz", hash = "sha256:6fcb20db4c37ef7aad52f29b539eb98c38e2dad6fab7c2446a2a9db24f37a70e", size = 146805, upload-time = "2026-07-30T19:19:37.516Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a3/d8/84ef22ee1cc485c4910df450108fd5e246497379522b3c6cfba896f71bf6/langgraph_checkpoint_sqlite-3.0.3-py3-none-any.whl", hash = "sha256:02eb683a79aa6fcda7cd4de43861062a5d160dbbb990ef8a9fd76c979998a952", size = 33593, upload-time = "2026-01-19T00:38:43.288Z" },
+    { url = "https://files.pythonhosted.org/packages/f5/b9/e458601a1718337839bcfeec9d1b27b8b16ce135be2bd50ed0395d33a878/langgraph_checkpoint_sqlite-3.1.1-py3-none-any.whl", hash = "sha256:8505c54c94a658080525d7e6780fdd4e0c078ff2566b30d399c02cc9f9af1c63", size = 40785, upload-time = "2026-07-30T19:19:36.424Z" },
 ]
 
 [[package]]
@@ -2118,7 +2118,7 @@ requires-dist = [
     { name = "langchain-openai", specifier = ">=1.1.14,<2" },
     { name = "langchain-text-splitters", specifier = ">=1.1.2,<2" },
     { name = "langgraph", specifier = ">=1.0.5,<2" },
-    { name = "langgraph-checkpoint-sqlite", specifier = ">=3.0.1,<4" },
+    { name = "langgraph-checkpoint-sqlite", specifier = ">=3.1.1,<4" },
     { name = "loguru", specifier = ">=0.7.2" },
     { name = "numpy", specifier = ">=2.4.1" },
     { name = "podcast-creator", specifier = ">=0.12.0,<1" },

From f4cb4e2ab5bcf41e69fa27ba62da3be5000461ae Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:24:20 -0300
Subject: [PATCH 264/345] build(deps): bump cryptography from 48.0.1 to 50.0.0
 (#1245)

Bumps [cryptography](https://github.com/pyca/cryptography) from 48.0.1 to 50.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/48.0.1...50.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 70 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 34 insertions(+), 36 deletions(-)

diff --git a/uv.lock b/uv.lock
index 0cb9f1d1..4661dfcd 100644
--- a/uv.lock
+++ b/uv.lock
@@ -517,47 +517,45 @@ toml = [
 
 [[package]]
 name = "cryptography"
-version = "48.0.1"
+version = "50.0.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "cffi", marker = "platform_python_implementation != 'PyPy'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/12/45/870e7f4bef50e5f53b9f51d4428aee5290eedf58ba443f16b1ebb7ab8e66/cryptography-48.0.1.tar.gz", hash = "sha256:266f4ee051abb2f725b74ef8072b521ce1feacf685a3364fa6a6b45548db791a", size = 832989, upload-time = "2026-06-09T22:32:31.8Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/de/41/6cbdcf9142d00fe82836fbb51e503e58088575cf7a0fe1dbff6695bf0840/cryptography-50.0.0.tar.gz", hash = "sha256:eeac2acb5a20ed25e0ad6d1df9891a520b78b404266b6d11778f25d5d691a6c9", size = 880201, upload-time = "2026-07-31T14:25:10.11Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/1b/bc/ee4137cbbe105652c0ee4252792b78fc8e7afa4b8e61d9d5dc05a7f45731/cryptography-48.0.1-cp311-abi3-macosx_10_9_universal2.whl", hash = "sha256:3e4a1a3232eef2e6c732827d5722db29a0cc8b27af2a4d865b094cf954be9ca1", size = 8008324, upload-time = "2026-06-09T22:31:00.702Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/85/6379d42181bfc713094f081360fc5784d6c816b599d45e7f082502d173ce/cryptography-48.0.1-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:32143b24adb918f078134e1e230f1eb8cc04886b92c28b5f0041aaf3e5699225", size = 4696243, upload-time = "2026-06-09T22:32:33.446Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/87/c85d147b53323c7eb4d850920c8901377323c2a0ff8d79c262d4fee89aa2/cryptography-48.0.1-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:f0d27a5696721ef7a672b8c810f6aded391058e0b9486e63e6d93baf765da691", size = 4713235, upload-time = "2026-06-09T22:31:40.141Z" },
-    { url = "https://files.pythonhosted.org/packages/79/58/67cbf8cf1ee7c54b439ca07bbecf8362c07afc11a3724fea70f745784add/cryptography-48.0.1-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:eb86ce1af36fe65041b6db9a8bb064ee621a7e5fded0f80d475ec243477cd242", size = 4702323, upload-time = "2026-06-09T22:31:42.191Z" },
-    { url = "https://files.pythonhosted.org/packages/89/c6/24266ac10c47f6cd2a865f4446062b466da1d1f10b27189eac00e61bf0c9/cryptography-48.0.1-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:b024e784ad6c077ee0147b35ea9cbfc1e34e1fd4c1dcca214c2794d73a12df08", size = 5300085, upload-time = "2026-06-09T22:31:58.703Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/bb/cc4b78784f97efc8c5874c2a9743708d172be6663024b34a0467885ae0c8/cryptography-48.0.1-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:3752f2dbc8f07a30aad2932c986cea495b03bb554887828225da104f732852b6", size = 4746137, upload-time = "2026-06-09T22:31:31.01Z" },
-    { url = "https://files.pythonhosted.org/packages/1f/52/0c44de3f5267f8fbe8e835138017522a333436166e406f0db9b9e6e3033f/cryptography-48.0.1-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:bd81490cd5801d755cf97bb68ac191f14b708470b1c7cf4580f669b9c9264cd8", size = 4333867, upload-time = "2026-06-09T22:32:28.096Z" },
-    { url = "https://files.pythonhosted.org/packages/9a/2e/772d7adbfa931537bc401640b7cac9976bff689bda187833e5d63b428e49/cryptography-48.0.1-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:66fd0771e7b9c6dcd44cf1120690d2338d16d72795cf40cae2786a39eba65429", size = 4701805, upload-time = "2026-06-09T22:31:38.284Z" },
-    { url = "https://files.pythonhosted.org/packages/f8/a3/b06844f303873493c963caf581c04df31c7035e0c1b0f02c4814d319ec80/cryptography-48.0.1-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:3fd2ca57062b241c856670b073487d2e86c4637937ca5601e48f97bf8e11fc8f", size = 5258461, upload-time = "2026-06-09T22:31:04.187Z" },
-    { url = "https://files.pythonhosted.org/packages/9f/13/8b765e2e12b07c74941caadb9d1c8fdc006c4dfbf2b8f2d610519758954d/cryptography-48.0.1-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:0ee6ea481db1ab889cba043ec1eda17bb9c1ea79db6722f779c3667f9f70322f", size = 4745488, upload-time = "2026-06-09T22:32:30.07Z" },
-    { url = "https://files.pythonhosted.org/packages/2e/aa/48972bce55049b32a94f4907eda4d75fa385aad8a39506cc2fc72196ecf0/cryptography-48.0.1-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:f2ceef93cb096aa3c4cc4b5c94ca6131f9196d28c64d6111533402a9b2054d41", size = 4830256, upload-time = "2026-06-09T22:31:43.868Z" },
-    { url = "https://files.pythonhosted.org/packages/47/a2/e5079a032fb85cf6005046ca92bbd78b0c82dad2b5751ab8c311659da06f/cryptography-48.0.1-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:9bd3f92d76217892b15df84ca256c2c113d386fdda7a7d8691aeeced976507c6", size = 4979117, upload-time = "2026-06-09T22:31:05.845Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/a0/8f50cae9c74e718ed769d63ed5c74bd0ea830c9550a74629cebd1b9c7bc7/cryptography-48.0.1-cp311-abi3-win32.whl", hash = "sha256:b9a32b876490d66c8bcc9963ef220199569748434ab01a9d6aaeabf88e7f5158", size = 3304154, upload-time = "2026-06-09T22:32:16.845Z" },
-    { url = "https://files.pythonhosted.org/packages/c5/69/0572c77dbace6fef72f33755bd52ea399c71367250d366237f8691826b9e/cryptography-48.0.1-cp311-abi3-win_amd64.whl", hash = "sha256:39489bfca54c7a1f6b297efcd8bc608ab92d16c4ca631b0cad4da46724588b24", size = 3817138, upload-time = "2026-06-09T22:32:00.388Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/6c/00fa2a95997164c8b2072ce327c23d4ab20809ccc323ea5fab91e53a4bba/cryptography-48.0.1-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:4fdc69f8e4316bcf0c8c8ec1f26f285d12e8142d88d96c876a59a03be3f6ae67", size = 7987408, upload-time = "2026-06-09T22:32:20.777Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/d9/45f309a7e4e5f3f8f121d6d3be9e94024a7726ec598d6e08ae04edb2f04d/cryptography-48.0.1-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:48fe40804d4caa2288f24e70ca8c64c42dd826da0ad7e4f1b41b2128d679e6c8", size = 4690196, upload-time = "2026-06-09T22:31:54.74Z" },
-    { url = "https://files.pythonhosted.org/packages/5f/9f/a1bc8bcc798811b8527eb374bbccf30a3f3e806829d967118222bf1125eb/cryptography-48.0.1-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:86be3b1b0b6bf09482fb50a979c508d2950ed95f5621ec77f4e385962006b83a", size = 4696782, upload-time = "2026-06-09T22:31:45.615Z" },
-    { url = "https://files.pythonhosted.org/packages/66/c2/81a4fb4e4373c500bb526bc337ac5719dd31dd15b970b84a238168c6aa08/cryptography-48.0.1-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:4ab0a343c807bbcd90c971cd1ecf072937cd01847a9e002bef88fb47ac6be577", size = 4696618, upload-time = "2026-06-09T22:31:11.564Z" },
-    { url = "https://files.pythonhosted.org/packages/e5/0b/aa68b221dde92d09cb29a024ede17550ee21e77a404e59fc093c82bb51e1/cryptography-48.0.1-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:9621de99d2da096006b629979efd8ae7eb2d8b822488d0c89ee4000c306c59b1", size = 5289970, upload-time = "2026-06-09T22:31:20.368Z" },
-    { url = "https://files.pythonhosted.org/packages/78/13/fba657f958d2af66ea959a4ba01212632089249d34af1ae48054136344d7/cryptography-48.0.1-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:88c852a0ae366e262e5a1744b685e6a433dc8788dd2a277e418bf4904203609d", size = 4731873, upload-time = "2026-06-09T22:31:22.253Z" },
-    { url = "https://files.pythonhosted.org/packages/4c/4c/9a964756d24a26b3e34dfcb16f961b89838786e6700b635b0d1e3adff4b6/cryptography-48.0.1-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:43c5835e2cb98c8733d86f57d6fc879b613f5c3478607281c3e36daffc6dd8a6", size = 4330804, upload-time = "2026-06-09T22:31:36.56Z" },
-    { url = "https://files.pythonhosted.org/packages/4b/0f/a10f3a6eb12950a10e3a874070283aa2dd5875b2bfd15fad8a3e17b3f13e/cryptography-48.0.1-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:fe0180af5bf9236518a087e35bf2d9a347d5f5f51e63c579d683ddff424e3d46", size = 4696217, upload-time = "2026-06-09T22:31:13.351Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/6f/5cd12f951165ea73ef85266775d97e4c763b2474ccfd816dd69d3a18d6f8/cryptography-48.0.1-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:b7a2d1a937a738a881737cec135a38bb61470589b17515b9f73f571d0ae10401", size = 5245252, upload-time = "2026-06-09T22:32:02.193Z" },
-    { url = "https://files.pythonhosted.org/packages/68/ab/8aaa12e4516ec4464033ab79b6f3b592bd5a92102467c4ace8a0d970203f/cryptography-48.0.1-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:b74ca3b8e5ecdd833bf6a002ca41b4793bb27fb8f1c06ffaf2643c9e9140e31b", size = 4731388, upload-time = "2026-06-09T22:32:04.019Z" },
-    { url = "https://files.pythonhosted.org/packages/1b/24/50027ea4dca85ec1f40688f3c24fb32ccacd520583c9592c3cc95628e6fb/cryptography-48.0.1-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:2c37f2461406063b417837f5f3daab668652acd82423efcd7f0a9f04be972de1", size = 4824186, upload-time = "2026-06-09T22:32:18.707Z" },
-    { url = "https://files.pythonhosted.org/packages/52/41/04cb5eb17085ade6f50cc611fb657df6a0f5885350de8764ece89c050197/cryptography-48.0.1-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:86fe77abb1bd87afb251d4d02ada7ecf53a32cee9b67d976abb2e45a13297475", size = 4964539, upload-time = "2026-06-09T22:31:18.793Z" },
-    { url = "https://files.pythonhosted.org/packages/36/bf/ed70785c496e89d7e73b7cda2d21f2447fd6d4e821714b8d04ff217fed92/cryptography-48.0.1-cp39-abi3-win32.whl", hash = "sha256:6b2c0c3e6ccf3ade7750f836ef3ee36eea250cc467d45c256895573ac08cc6f1", size = 3282307, upload-time = "2026-06-09T22:30:53.162Z" },
-    { url = "https://files.pythonhosted.org/packages/b3/ff/371ea7d252656ee1eb6d83eeeef3d1d0c6baf1d6497687d081ea03814670/cryptography-48.0.1-cp39-abi3-win_amd64.whl", hash = "sha256:9a49ca6c81417f6a5edb50375a60cccdd70fa0a91a5211829dbea74eba94d2ac", size = 3793408, upload-time = "2026-06-09T22:32:15.191Z" },
-    { url = "https://files.pythonhosted.org/packages/a9/d3/eb4e394e587341fdad09a09101fa76478ead3a78b0ad63e55c22f0d75c02/cryptography-48.0.1-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:08a597acce1ff37f347400087776599e2348a3a8bc53b44120e463cd274efe4a", size = 3951747, upload-time = "2026-06-09T22:31:23.871Z" },
-    { url = "https://files.pythonhosted.org/packages/e0/4a/3f43451b4f858bfceaaaffc649e6e787e8d4fb332a1d443af39ab02cc8f1/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:735824ec41b7f74a7c45fb1591349333e4c696cb6c044e5f46356e560143e4cd", size = 4641226, upload-time = "2026-06-09T22:31:02.532Z" },
-    { url = "https://files.pythonhosted.org/packages/73/4e/855584c2c23b09e4ce2d3b9c30e983e679cd60b068c513c6bbdb91e11782/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:92a46e1d638daa264ba2971c0b0489c9409787943efae4d60ffda3d091ef832c", size = 4668958, upload-time = "2026-06-09T22:32:06.213Z" },
-    { url = "https://files.pythonhosted.org/packages/42/3b/d35750e41d803d1e516fd6d6011f065424924da7af1748cef4cc9cb3ede1/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:7e234ac052af99f2700826a5c29ea99d9c1b1f80341cde62d11c8154dc8e0bd9", size = 4640793, upload-time = "2026-06-09T22:32:26.331Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/aa/cdb7181fe865285e87e96825aaab239400f1de0c3bfba9bd9769b79f1a92/cryptography-48.0.1-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:33842cf0888951cef5bc7ac724ab844a42044c1727b967b7f8997289a0464f92", size = 4668505, upload-time = "2026-06-09T22:31:27.534Z" },
-    { url = "https://files.pythonhosted.org/packages/5d/8c/ce3823c06c2804f194f9e64f0d67fa3f4094a39f2bb1a990cd03603af8fc/cryptography-48.0.1-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:6184ca7b174f28d7c703f1290d4b297217c45355f77a98f67e9b7f14549ac54a", size = 3742204, upload-time = "2026-06-09T22:31:34.773Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/5c/59086b4aac5e879d38ddbcf74e4be7ade89cebc3eb199a55da998c3bb46a/cryptography-50.0.0-cp311-abi3-macosx_11_0_arm64.whl", hash = "sha256:031e2d5dd4bb9caa3ca9c82e5a197fd8ae680232cee62603d1a813f3f07e3d03", size = 4001252, upload-time = "2026-07-31T14:23:33.331Z" },
+    { url = "https://files.pythonhosted.org/packages/57/ef/8f2df13c7216bcad3e1c74e07f6e193d93e998e114f524a53877c9af27ad/cryptography-50.0.0-cp311-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:fd9192b7b70c573d7f214eb1ae35e00d359f6f5e4b27c7e21e30de1fc6204645", size = 4719554, upload-time = "2026-07-31T14:23:35.611Z" },
+    { url = "https://files.pythonhosted.org/packages/d9/41/029086c34d91052fc3b88bcc8056f709a7c915c7a23b235a54eb800b1c97/cryptography-50.0.0-cp311-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:06a32a980526a6ab9a4b9bf8f7385800791e2bb960903cb6b530e4817509a3b7", size = 4702130, upload-time = "2026-07-31T14:23:37.635Z" },
+    { url = "https://files.pythonhosted.org/packages/7d/ff/b6ce0954962e7f7b969f850a883744197bb3910bdfd7b6da162eab7d9f68/cryptography-50.0.0-cp311-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:a1b30560f2acc95aa8b2e06e716a13dbfc97314747b80d9707e307f77b40d6b3", size = 4725244, upload-time = "2026-07-31T14:23:39.471Z" },
+    { url = "https://files.pythonhosted.org/packages/06/1e/63a1027cb7fec360a182208e1b7767d5aa1fe57be3d6aa856e69a321edc0/cryptography-50.0.0-cp311-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:8d89f3976b10b4ce31118de72329025f70d2c6ead14a8217c5514dd2c6d5a78f", size = 5342265, upload-time = "2026-07-31T14:23:41.286Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/72/a1116d683a6d7ece94590013882515de087edf9ef0e6292aae615a44df73/cryptography-50.0.0-cp311-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:b42a28c1844fd9de8f3f7d540e36b66f3a9c83fceac7170ebc7a6a19edd9dcae", size = 4734609, upload-time = "2026-07-31T14:23:43.139Z" },
+    { url = "https://files.pythonhosted.org/packages/15/37/36a9c479bbe49acea2636c7fd3360d20f7b7e079c300352011c44850b181/cryptography-50.0.0-cp311-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:900131fafd8aead39ac7dd3a7e833be754c17a95cfd91221636949fe4eb0aa8a", size = 4356517, upload-time = "2026-07-31T14:23:44.939Z" },
+    { url = "https://files.pythonhosted.org/packages/32/98/8a151d64367204cbc63ec65d37502f1d9c53cf4bfc6ec3c532614dbec60d/cryptography-50.0.0-cp311-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:07949c449a1abcf60d1ee6e88956d89404c7df3c8258f46589e912988e551987", size = 4724529, upload-time = "2026-07-31T14:23:46.93Z" },
+    { url = "https://files.pythonhosted.org/packages/22/f6/ec13b470172126464a86bf54d2294a46d29837fc51ba3e45d4047946fb5e/cryptography-50.0.0-cp311-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:f89831ef99dd7dd169ab06d63a831adb9e20a87aac6d380266bbda5823349169", size = 5299852, upload-time = "2026-07-31T14:23:48.851Z" },
+    { url = "https://files.pythonhosted.org/packages/da/3a/f05e32c99d440c9bb891ea0e36c9091891e36be5a9a87ab2ee6ea20729f6/cryptography-50.0.0-cp311-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:82148ec5bddac30b51a5b3c1945075f896fa022cb93f8e4a01e9f6ee95292c5f", size = 4734462, upload-time = "2026-07-31T14:23:50.861Z" },
+    { url = "https://files.pythonhosted.org/packages/ca/dc/bd72b26be8953f80625f63151efd38eee71c76ca6cf591c08ff34615a79e/cryptography-50.0.0-cp311-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:1489e263a8048bb8b6a8bac662eb2d402ea5d2b7b4699b72f385f1e2772db105", size = 4852708, upload-time = "2026-07-31T14:23:52.715Z" },
+    { url = "https://files.pythonhosted.org/packages/27/20/c930314a2ab476d15dec966ec87e2e9637bb02b06106b12c0396c57bb603/cryptography-50.0.0-cp311-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:7cec5b856506da6defb290f30c9ee687d5f5e8cb0bd3f6459dde43b0b4fa40ef", size = 5004179, upload-time = "2026-07-31T14:23:54.887Z" },
+    { url = "https://files.pythonhosted.org/packages/32/2e/c9db68a0c4bfa28e310707527c0ee3a2bd254104d2e02e68f368e197aa4c/cryptography-50.0.0-cp311-abi3-win_amd64.whl", hash = "sha256:bd1c592e4d5974f0d08d4888e432157adba757c66da0246918e43677fafa2d30", size = 3840395, upload-time = "2026-07-31T14:23:56.677Z" },
+    { url = "https://files.pythonhosted.org/packages/03/37/73d005be173aff344af30e9fd2a576575cb2391a7101d9cd3842e1fa8cce/cryptography-50.0.0-cp39-abi3-macosx_11_0_arm64.whl", hash = "sha256:ccdc4a71a4dabae05de219404f9f4abc38e3b58422177ff93d0da05967dafa07", size = 4036009, upload-time = "2026-07-31T14:24:24.122Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/c6/7a6202a534e32103a285b7834a120869557fe198d51d7cfe59754c8bda9c/cryptography-50.0.0-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:910e1d2668e7de9648f2bcee30e180db2a6b15c30f887d7c4c93ddf96e3992e3", size = 4745252, upload-time = "2026-07-31T14:24:26.118Z" },
+    { url = "https://files.pythonhosted.org/packages/85/4f/0fa8c2f4428198f15d9ff8d63400e27afbf94ce833f6108da1eb3753f945/cryptography-50.0.0-cp39-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:a91296cb61e8df6f86d0c19cc4068228da256bf59bf86049fbd821084565327f", size = 4728939, upload-time = "2026-07-31T14:24:27.994Z" },
+    { url = "https://files.pythonhosted.org/packages/d1/63/54dd723490ba2dc09b299682c10b38db38f159728bcaae8c591b8af2f22d/cryptography-50.0.0-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:e722f16708d854fe924790e051061f6704a472c3bac347b6fd88033ea8dd0dc5", size = 4748483, upload-time = "2026-07-31T14:24:30.254Z" },
+    { url = "https://files.pythonhosted.org/packages/1d/dd/7c77d26285cc7f6991efce64a0f5b4f9383bfa5dd8c5033003eaf7db4cdb/cryptography-50.0.0-cp39-abi3-manylinux_2_28_ppc64le.whl", hash = "sha256:d764dcf130c428ef66786f866dd750f53182bc608813489915e9fc106bb0c82f", size = 5367599, upload-time = "2026-07-31T14:24:32.457Z" },
+    { url = "https://files.pythonhosted.org/packages/46/c9/f60aed34c013f317f92817b6c171c2d22a78270fa41109bd4b08af26b194/cryptography-50.0.0-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:105110f43a471dbd0060b9c9516cb8a6a79233631a04cc2ba16f28323ac6e025", size = 4762647, upload-time = "2026-07-31T14:24:34.599Z" },
+    { url = "https://files.pythonhosted.org/packages/be/f3/f9a0173b139372c3a48ed98154b45cc6b9de17c789d5ab552e621c293609/cryptography-50.0.0-cp39-abi3-manylinux_2_31_armv7l.whl", hash = "sha256:828743d939e9629bc267b8e2d08d8bb67cd4319c771a33d4b18b22dd8fb7440a", size = 4385197, upload-time = "2026-07-31T14:24:36.647Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/36/83bb81f6e569bc38e1e4a7bc80f29b46bb9601920bc455fc8e888f5d5742/cryptography-50.0.0-cp39-abi3-manylinux_2_34_aarch64.whl", hash = "sha256:2a8183b489dc1f7f80f135780fadc1108f14b31b8a40411c7a5b17425f65f28b", size = 4748095, upload-time = "2026-07-31T14:24:39.493Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/16/d3008eff98c764979865834c3d386d4fd041b5f52e7f34fc29ac1a5eb515/cryptography-50.0.0-cp39-abi3-manylinux_2_34_ppc64le.whl", hash = "sha256:6e7d61120573a7f2cd94cc095f9e81f6967c61ccdf194285aa143ecec8e0b708", size = 5325948, upload-time = "2026-07-31T14:24:41.556Z" },
+    { url = "https://files.pythonhosted.org/packages/9c/f8/d97f9603efda3888187bfdb893f26c41be4735c10631d05d284ee6b047c4/cryptography-50.0.0-cp39-abi3-manylinux_2_34_x86_64.whl", hash = "sha256:37fdb0d0111f1e2ff07139dfb79f1b49531f8e213c46f1163dd7642979b58c47", size = 4762400, upload-time = "2026-07-31T14:24:43.636Z" },
+    { url = "https://files.pythonhosted.org/packages/64/a2/4615c8f7d81a00b1d6e6afe19f694e1543582349fb5f4076f6cb5dc36485/cryptography-50.0.0-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:c87f62a3d3b9888ed0fdde100ec06aa61ca9cd44bad9057d1dff9a516b5f5bb9", size = 4878208, upload-time = "2026-07-31T14:24:45.522Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/1a/efcfb02f91407149a0dacffffab791f7e19bf6385f63b3666dc8b5e5c9c8/cryptography-50.0.0-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:65c2c3add92b45fd0709db8594536aea39c2a67af0e27ffcf049c498501140b7", size = 5037050, upload-time = "2026-07-31T14:24:47.697Z" },
+    { url = "https://files.pythonhosted.org/packages/57/30/4a22984d4f1bdfb8c054f07a92bc176b97a3134cc1d6c4b3bffb1f3688b4/cryptography-50.0.0-cp39-abi3-win_amd64.whl", hash = "sha256:d24fead1d4d076e1bfb006dcec392074a3cd8d7b4fc8a595aa64073b2b7a96ba", size = 3874135, upload-time = "2026-07-31T14:24:50.085Z" },
+    { url = "https://files.pythonhosted.org/packages/9d/3e/e54cde8c01631a5a8226ccd617eab9e57fd5cfdad90f1a9e6bb570794631/cryptography-50.0.0-pp311-pypy311_pp73-macosx_11_0_arm64.whl", hash = "sha256:5e34edd123674534acd70147f0ca331eaa2c74e6325fb2028c886aa26ba0b68c", size = 3963170, upload-time = "2026-07-31T14:24:51.968Z" },
+    { url = "https://files.pythonhosted.org/packages/01/b6/0b9e125e90f3d2dcf599a218a899cda7326a3158cfa258723f0b398b08f6/cryptography-50.0.0-pp311-pypy311_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:8eb5e1172eb569ea8a872796576e6a67c276351728b6455d5beb01242b027c6a", size = 4692441, upload-time = "2026-07-31T14:24:53.743Z" },
+    { url = "https://files.pythonhosted.org/packages/53/c9/a5151588710785a96d7bc4de27d4cd62f263bbbcb203cfe29df537eb6505/cryptography-50.0.0-pp311-pypy311_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:910d11e1a385c654bf738bf3e6b8e6ed5de0f5610fcae2be9e5b398d8081d20e", size = 4699810, upload-time = "2026-07-31T14:24:55.746Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/1a/15b92b25eb6ce3089cd49377ae990a0f3ad485a510f968aed1f19dbdcdf2/cryptography-50.0.0-pp311-pypy311_pp73-manylinux_2_34_aarch64.whl", hash = "sha256:62598a8a57f815db4c6259a4e97d857dab56697e7de8e8ab02352ab74da1995d", size = 4691924, upload-time = "2026-07-31T14:24:58.082Z" },
+    { url = "https://files.pythonhosted.org/packages/62/15/219075012ab13e8905f3cd572204f4acb4b111df787104346b9bc0cea789/cryptography-50.0.0-pp311-pypy311_pp73-manylinux_2_34_x86_64.whl", hash = "sha256:07479a1cb08219ab719147e742e76090c9c773321959bb94946fffdd397a6437", size = 4699593, upload-time = "2026-07-31T14:24:59.951Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/b5/c2c5fce26f0ee40d21bafe7f191d29a34b35a65ac4fe8a1191d1983612e9/cryptography-50.0.0-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:c99c003e088647b8a5b7c145d6f78c335f6348332b62e142d411c4b63d1460b9", size = 3813796, upload-time = "2026-07-31T14:25:02.298Z" },
 ]
 
 [[package]]

From 3b72e2802a4659c6be9c4a8a7e80d8e950f1ce84 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:29:49 -0300
Subject: [PATCH 265/345] build(deps): bump aiohttp from 3.14.1 to 3.14.3
 (#1244)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 76 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/uv.lock b/uv.lock
index 4661dfcd..36c3dc59 100644
--- a/uv.lock
+++ b/uv.lock
@@ -50,7 +50,7 @@ wheels = [
 
 [[package]]
 name = "aiohttp"
-version = "3.14.1"
+version = "3.14.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohappyeyeballs" },
@@ -62,44 +62,44 @@ dependencies = [
     { name = "typing-extensions" },
     { name = "yarl" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/82/78/8ea7308cac6934de8c74a14f3d5f65d1c89287426688be79538d0e5c013d/aiohttp-3.14.1.tar.gz", hash = "sha256:307f2cff90a764d329e77040603fa032db89c5c24fdad50c4c15334cba744035", size = 7955794, upload-time = "2026-06-07T21:09:35.529Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/58/d9/22ce5786ac0c1653ae8b6c23bded02c1686d11f0dbb45b31ce128e0df985/aiohttp-3.14.3.tar.gz", hash = "sha256:9491196535a88924a60afd5b5f434b5b203b6cc616250878dbdb223a8f7844bc", size = 7971213, upload-time = "2026-07-23T01:57:27.037Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/26/dd/bf526e6f0a1120dd6f2df2e97bacfe4d358f13d17a0ff5847301a1375a51/aiohttp-3.14.1-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:aa00140699487bd435fde4342d85c94cb256b7cd3a5b9c3396c67f19922afda2", size = 765225, upload-time = "2026-06-07T21:06:07.957Z" },
-    { url = "https://files.pythonhosted.org/packages/8f/e1/a2872aa55495a70f61310d411541c6ee23812d9a884e000c716e1bc3edbf/aiohttp-3.14.1-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:1c1af67559445498b502030c35c59db59966f47041ca9de5b4e707f86bd10b5f", size = 518743, upload-time = "2026-06-07T21:06:09.749Z" },
-    { url = "https://files.pythonhosted.org/packages/5b/e7/c60c7b209e509cc787de3cea0550a518538cfc08003e1c1e14c1c63fff71/aiohttp-3.14.1-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:d44ec478e713ee7f29b439f7eb8dc2b9d4079e11ae114d2c2ac3d5daf30516c8", size = 514139, upload-time = "2026-06-07T21:06:11.26Z" },
-    { url = "https://files.pythonhosted.org/packages/5b/8d/614ace2f579702c9840ab1e1447fd8509e35b0b904f7196418fa2f57b25d/aiohttp-3.14.1-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d3b1a184a9a8f548a6b73f1e26b96b052193e4b3175ed7342aaf1151a1f00a04", size = 1784088, upload-time = "2026-06-07T21:06:12.887Z" },
-    { url = "https://files.pythonhosted.org/packages/49/e0/726e90f99542bf292f81a96a12cc4847deb86f3ccf62c6f4014a201f4d33/aiohttp-3.14.1-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:5f2504bc0322437c9a1ff6d3333ca56c7477b727c995f036b976ae17b98372c8", size = 1737835, upload-time = "2026-06-07T21:06:14.564Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/4b/d176d5c4db9d33dacf0543102ea59503bc1d528af4cfd0b719949ca49389/aiohttp-3.14.1-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:73f05ea02013e02512c3bf42714f1208c57168c779cc6fe23516e4543089d0a6", size = 1842801, upload-time = "2026-06-07T21:06:16.228Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/d6/5a99b563690ea0cbed912ae94a2ce33993a5709a651a3a4fe761e7dd973a/aiohttp-3.14.1-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:797457503c2d426bee06eef808d07b31ede30b65e054444e7de64cad0061b7af", size = 1929992, upload-time = "2026-06-07T21:06:17.947Z" },
-    { url = "https://files.pythonhosted.org/packages/76/7f/a987b14a3859094b3cea3f4825219c3e5536242564af6e3f9c2f6c994eb2/aiohttp-3.14.1-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:b821a1f7dedf7e37450654e620038ac3b2e81e8fa6ea269337e97101978ec730", size = 1786989, upload-time = "2026-06-07T21:06:19.677Z" },
-    { url = "https://files.pythonhosted.org/packages/f1/1a/420e5c85a3e73349372ed22ce0b6af86bfa6ce16a4b20a64a2e94608c781/aiohttp-3.14.1-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:4cd96b5ba05d67ed0cf00b5b405c8cd99586d8e3481e8ee0a831057591af7621", size = 1640129, upload-time = "2026-06-07T21:06:22.558Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/80/18a592ed3be0a402cc03670bd72ee1f8563ddbe1d8d5542dbf868f274136/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:1d459b98a932296c6f0e94f87511a0b1b90a8a02c30a50e60a297619cd5a58ee", size = 1756576, upload-time = "2026-06-07T21:06:24.8Z" },
-    { url = "https://files.pythonhosted.org/packages/ec/0b/8b3d5713373858ff71a617daf6e3b0e81ad63e79d09a3cf2f6b6b983939c/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:764457a7be60825fb770a644852ff717bcbb5042f189f2bd16df61a81b3f6573", size = 1754668, upload-time = "2026-06-07T21:06:26.528Z" },
-    { url = "https://files.pythonhosted.org/packages/9f/49/fd564575cf225821d7ba5a117cb8bc27213d8a7e1811162afb43ae077039/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:f7a16ef45b081454ef844502d87a848876c490c4cb5c650c230f6ec79ed2c1e7", size = 1817019, upload-time = "2026-06-07T21:06:28.297Z" },
-    { url = "https://files.pythonhosted.org/packages/ed/1b/e850c9ae6fc91356552ae668bb6c51e93fa29c8aef13398a10b56678557f/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:2fbc3ed048b3475b9f0cbcb9978e9d2d3511acd91ead203af26ed9f0056004cf", size = 1631638, upload-time = "2026-06-07T21:06:30.242Z" },
-    { url = "https://files.pythonhosted.org/packages/eb/94/3c337ba72451a89806ace6f75bddc92bafc5b8d53d90115a512858024b63/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:bedb0cd073cc2dc035e30aeb99444389d3cd2113afe4ef9fcd23d439f5bade85", size = 1835660, upload-time = "2026-06-07T21:06:31.943Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/9c/9c18cf367a0498212d9ba7daf990b504a5e8ae064cda4b504e2647c89c03/aiohttp-3.14.1-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:b6feea921016eb3d4e04d65fc4e9ca402d1a3801f562aef94989f54694917af3", size = 1775698, upload-time = "2026-06-07T21:06:33.72Z" },
-    { url = "https://files.pythonhosted.org/packages/b5/63/a251a9d2a6cb45065b2ddc0bde2b3dd10108740a9a42f632c66405a761a2/aiohttp-3.14.1-cp311-cp311-win32.whl", hash = "sha256:313701e488100074ce99850404ee36e741abf6330179fec908a1944ecf570126", size = 458386, upload-time = "2026-06-07T21:06:35.279Z" },
-    { url = "https://files.pythonhosted.org/packages/17/ca/69274c51dcd6e8947d77b2806cf47a4a15f2c846e2cbeb1882547d3da283/aiohttp-3.14.1-cp311-cp311-win_amd64.whl", hash = "sha256:03ab4530fdcb3a543a122ba4b65ac9919da9fe9f78a03d328a6e38ff962f7aa5", size = 483406, upload-time = "2026-06-07T21:06:36.824Z" },
-    { url = "https://files.pythonhosted.org/packages/2c/8a/c25904f77690c3688ec140f87591ef11a0cfe36bf3d5c0f1f38056fb62b3/aiohttp-3.14.1-cp311-cp311-win_arm64.whl", hash = "sha256:486f7d16ed54c39c2cbd7ca71fd8ba2b8bb7860df65bd7b6ed640bab96a38a8b", size = 452987, upload-time = "2026-06-07T21:06:38.371Z" },
-    { url = "https://files.pythonhosted.org/packages/1d/21/151624b51cd92553d95424daf4bf19f19ce9be9002d19253e7e7ce67197b/aiohttp-3.14.1-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:d35143e27778b4bb0fb189562d7f275bff79c62ab8e98459717c0ea617ff2480", size = 757402, upload-time = "2026-06-07T21:06:40.311Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/82/280619e0bd7bf2454987e19282616e84762255dd9c8468f62382e8c191f1/aiohttp-3.14.1-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:bcfb80a2cc36fba2534e5e5b5264dc7ae6fcd9bf15256da3e53d2f499e6fa29d", size = 512310, upload-time = "2026-06-07T21:06:42.207Z" },
-    { url = "https://files.pythonhosted.org/packages/55/b2/2aac325583aaa1353045f96dffa586d8a34e8322e14a7ba49cffeb103ab4/aiohttp-3.14.1-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:27fd7c91e51729b4f7e1577865fa6d34c9adccbc39aabe9000285b48af9f0ec2", size = 512448, upload-time = "2026-06-07T21:06:43.813Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/72/a60607cb849faa8af8a356c9329ea2eb6f395d49e82cc82ccba1fd8deb8f/aiohttp-3.14.1-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:64c567bf9eaf664280116a8688f63016e6b32db2505908e2bdaca1b6438142f2", size = 1766854, upload-time = "2026-06-07T21:06:45.391Z" },
-    { url = "https://files.pythonhosted.org/packages/b5/d3/d9fe1c9ec7557ab4d0d82bebaa728c6418f0b93295ec2f4ab015f7710cc7/aiohttp-3.14.1-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:f5e6ff2bdbb8f4cd3fbe41f99e25bbcd58e3bf9f13d3dd31a11e7917251cc77a", size = 1740884, upload-time = "2026-06-07T21:06:47.413Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/dc/f2cecfaf9337ba3e63f181500814ff502aa3d00d9c7ec93a9d23d10a27b2/aiohttp-3.14.1-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:2f73e01dc37122325caf079982621262f96d74823c179038a82fddfc50359264", size = 1810034, upload-time = "2026-06-07T21:06:50.165Z" },
-    { url = "https://files.pythonhosted.org/packages/66/d7/2ff65c5e65c0d7476daf7e15c032e0805e36811185b9623e3238ad6c763e/aiohttp-3.14.1-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:bb2c0c80d431c0d03f2c7dbf125150fedd4f0de17366a7ca33f7ccb822391842", size = 1904054, upload-time = "2026-06-07T21:06:52.035Z" },
-    { url = "https://files.pythonhosted.org/packages/20/9c/d445818389df371f56d141d881153ba23183c4735a03f7356ffb43f7757d/aiohttp-3.14.1-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:3e6fc1a85fa7194a1a7d19f44e8609180f4a8eb5fa4c7ed8b4355f080fad235c", size = 1790278, upload-time = "2026-06-07T21:06:54.049Z" },
-    { url = "https://files.pythonhosted.org/packages/4d/aa/bf04cb4d865fc6101c2229a294ad744973b72e513fdc5a6b791e6983d72a/aiohttp-3.14.1-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:686b6c0d3911ec387b444ddf5dc62fb7f7c0a7d5186a7861626496a5ab4aff95", size = 1591795, upload-time = "2026-06-07T21:06:55.911Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/b4/4dac0038960427ba832f6609dfb4ea5437d7fd80c72001b9e48f834f428b/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:c6fa4dc7ad6f8109c70bb1499e589f76b0b792baf39f9b017eb92c8a81d0a199", size = 1728397, upload-time = "2026-06-07T21:06:57.777Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/f9/7cd4e8ad7aa3b75f17d56bb5498dd604a93d4e6eece822ba0568c413fff0/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:87a5eea1b2a5e21e1ebdbb33ad4165359189327e63fc4e4894693e7f821ac817", size = 1766504, upload-time = "2026-06-07T21:07:00.009Z" },
-    { url = "https://files.pythonhosted.org/packages/f9/df/fc01d9fcad0f73fed3f3d361f1f94f975947b50dff82919f6dc2bf4316cc/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:1c1421eb01d4fd608d88cc8290211d177a58532b55ad94076fb349c5bf467f0a", size = 1777806, upload-time = "2026-06-07T21:07:02.064Z" },
-    { url = "https://files.pythonhosted.org/packages/41/09/47e2d090bddcc8fb4ccb4c314aadc32d7c5d9bb55f50f6ad1c92fc15d501/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:34b257ec41345c1e8f2df68fa908a7952f5de932723871eb633ecbbff396c9a4", size = 1580707, upload-time = "2026-06-07T21:07:03.942Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/36/f1a4ce904ae0b6930cfe9afc96d0896f7ec1a620c400405d63783bb95a9c/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:de538791a80e5d862addbc183f70f0158ac9b9bb872bb147f1fd2a683691e087", size = 1798121, upload-time = "2026-06-07T21:07:05.987Z" },
-    { url = "https://files.pythonhosted.org/packages/70/0a/e0075ce9ca0279ee1d4f0c0b85f54fea02ebc83c3007651a72bece658fec/aiohttp-3.14.1-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:6f71173be42d3241d428f760122febb748de0623f44308a6f120d0dd9ec572e3", size = 1767580, upload-time = "2026-06-07T21:07:07.873Z" },
-    { url = "https://files.pythonhosted.org/packages/3e/61/a0c0a8f327a9c52095cdd8e312391b00d3ed64ab6c72bb5c33d8ec251cf7/aiohttp-3.14.1-cp312-cp312-win32.whl", hash = "sha256:ec8dc383ee57ea3e883477dcca3f11b65d58199f1080acaf4cd6ad9a99698be4", size = 452771, upload-time = "2026-06-07T21:07:09.669Z" },
-    { url = "https://files.pythonhosted.org/packages/df/d9/ea367c75f16ac9c6cdc8febb25e8318fa21a2b1bc8d6514d4b2d890bface/aiohttp-3.14.1-cp312-cp312-win_amd64.whl", hash = "sha256:2aa92c87868cd13674989f9ee83e5f9f7ea4237589b728048e1f0c8f6caa3271", size = 479873, upload-time = "2026-06-07T21:07:11.538Z" },
-    { url = "https://files.pythonhosted.org/packages/03/64/8d96784a7851156db8a4c6c3f6f91042fdf39fb15a4cc38c8b3c14833c45/aiohttp-3.14.1-cp312-cp312-win_arm64.whl", hash = "sha256:2c840c90759922cb5e6dda94596e079a30fb5a5ba548e7e0dc00574703940847", size = 448073, upload-time = "2026-06-07T21:07:13.637Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/5c/b3e4ff8ad43a8afef9602c5e90285936da1beaea8b029016b793891f03c3/aiohttp-3.14.3-cp311-cp311-macosx_10_9_universal2.whl", hash = "sha256:e568e14940c09955aa51f4e645b6daa18a581c5dcfcd73744dcc86a856e3ced3", size = 764250, upload-time = "2026-07-23T01:52:48.525Z" },
+    { url = "https://files.pythonhosted.org/packages/0e/da/f1b384465e51449d844056b75070461da03a9a23e6c1747003695bf4172a/aiohttp-3.14.3-cp311-cp311-macosx_10_9_x86_64.whl", hash = "sha256:54cfcdee2770dac994417cbb0ee1f3eb0e7cb6b30c79bf44f2c02ff79ec5124a", size = 516281, upload-time = "2026-07-23T01:52:51.047Z" },
+    { url = "https://files.pythonhosted.org/packages/b9/3f/01264f820ee2e3712a827892b1cd6ff80f3300c1fcbffbb45714a915d47a/aiohttp-3.14.3-cp311-cp311-macosx_11_0_arm64.whl", hash = "sha256:21c016079415ed3fd676963e9793700a566d85dbbd6bfc564b9b2d209147dcc8", size = 514742, upload-time = "2026-07-23T01:52:53.779Z" },
+    { url = "https://files.pythonhosted.org/packages/9e/8d/a71c6f2db52ac1ed142b133f7feddaa6b70539c3f4de24d7e226c95b794c/aiohttp-3.14.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:d6088ec9894113802bddb3c09e974929aed2c7b3a8c456219b8aab4481f1a239", size = 1780613, upload-time = "2026-07-23T01:52:56.948Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/11/3dd9b3fb3a170f6ec9011b5291d876a6fab4086714c9e158600edf01b4fd/aiohttp-3.14.3-cp311-cp311-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:16ea7e24c309fb7c0bbd505d149abe4fe4dccfb8db911db7dbec0921bc889a6f", size = 1737688, upload-time = "2026-07-23T01:52:59.294Z" },
+    { url = "https://files.pythonhosted.org/packages/6d/3e/834c26918be7d88068822b40e0db30fca50b5f4fe79104aa16a93f1d74e6/aiohttp-3.14.3-cp311-cp311-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:56f355e79f71aef2a85c80305cc915f894b170dba76de5fe84f6351939b83c06", size = 1845742, upload-time = "2026-07-23T01:53:01.641Z" },
+    { url = "https://files.pythonhosted.org/packages/cc/c9/49ab8572df7d66bc13d11e31f781292badb04180dd87ba98733066c6aed7/aiohttp-3.14.3-cp311-cp311-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:18c441d0a8fca6de8d1f546849b9f0ab20d435993e2c5b59562b2fae6be2f929", size = 1928412, upload-time = "2026-07-23T01:53:04.018Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/b9/2b8f0c0ce09c87a1daf80fd483431b56b1435d3f62789bc86f572e1245de/aiohttp-3.14.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:53e7b4ce82b54a8bcc71b3b67a5cbd177ca1d7f592cbc92cd38b7349f73482db", size = 1786220, upload-time = "2026-07-23T01:53:06.481Z" },
+    { url = "https://files.pythonhosted.org/packages/85/00/9c45f81de11710460edfa1dc81317b6e882703b160926c879a9d20da9fcc/aiohttp-3.14.3-cp311-cp311-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:f55119f7bf25f49ed210f6096090715da24f2943c62102448915fde3c62877ce", size = 1637231, upload-time = "2026-07-23T01:53:10.258Z" },
+    { url = "https://files.pythonhosted.org/packages/19/ce/967d628e910756f3539c6107cb7844a1b69440dcb3029a5ee7871b09ab63/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_aarch64.whl", hash = "sha256:9aa6e61fdf20105c4144e755bd586008ff450791d67b1c8146fdc15959c4d51c", size = 1753161, upload-time = "2026-07-23T01:53:13.817Z" },
+    { url = "https://files.pythonhosted.org/packages/11/b2/0c3d4114f0aee4f580f5b3b4eb71b24d7a23b834ea506a4dfebe76513f35/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_armv7l.whl", hash = "sha256:ccd4893707b3e2a13e39c90d43cf80edf2e4d0457935bcc103bf2346214c3f15", size = 1756356, upload-time = "2026-07-23T01:53:16.211Z" },
+    { url = "https://files.pythonhosted.org/packages/63/5d/99e7d91c82f1399d1ae2a854e080bd1493fbc31e5e959dbc4ec33dac3bec/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_ppc64le.whl", hash = "sha256:b2466434105a4e03113c36ec775cc2ebe6676b62eae326fa670bb607ef788c1c", size = 1819846, upload-time = "2026-07-23T01:53:18.289Z" },
+    { url = "https://files.pythonhosted.org/packages/ad/05/d5e1cb6480eeffd3f901d40a2c5e2d1e7effdc797837da3b490272699f13/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_riscv64.whl", hash = "sha256:ba59d59aba08ac02fc03b0c8983ccd5ee39a199d0552ce9e6d2b4845b34d59ae", size = 1628531, upload-time = "2026-07-23T01:53:23.86Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/90/b934682bcaefae18a9e04f3dff5b68522ba810906358ae5029b68110ea3b/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_s390x.whl", hash = "sha256:ed099d105449c4f9e84f24af203cd131349d4761d8813fa7e02c32e7128cd910", size = 1832712, upload-time = "2026-07-23T01:53:27.551Z" },
+    { url = "https://files.pythonhosted.org/packages/21/df/6061679faaf81fac746e7307c7adb71e858071a5d34c27583afefc64f543/aiohttp-3.14.3-cp311-cp311-musllinux_1_2_x86_64.whl", hash = "sha256:152516815ef926786a0b6ae2b8f1fd2e0c71582dee0b435636865316fd4891b7", size = 1775014, upload-time = "2026-07-23T01:53:30.223Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/1d/f854878bbc69b88faefe924b619a34a6f59ec05fd387c77690667eaa75eb/aiohttp-3.14.3-cp311-cp311-win32.whl", hash = "sha256:a4af35c443e0b1a1bd6a8af3f3485d7fda15c142751a00f3ff8090f0b93346fa", size = 456006, upload-time = "2026-07-23T01:53:34.97Z" },
+    { url = "https://files.pythonhosted.org/packages/73/0c/2af9d1674baccd1dbd47282a93d660a22e57ef6167c856deb24b4214fbab/aiohttp-3.14.3-cp311-cp311-win_amd64.whl", hash = "sha256:e1e74298bab6ee0d6e749ed4fd1901c7e604bdda32c03d787a2cc71c46d0433d", size = 481069, upload-time = "2026-07-23T01:53:39.673Z" },
+    { url = "https://files.pythonhosted.org/packages/8e/76/88401ff3fc95e85c5fc38d588f36f55e61ecb64343b2bc8d69326f453cc0/aiohttp-3.14.3-cp311-cp311-win_arm64.whl", hash = "sha256:03cd2bde3d7f085b64e549c985f4bb928cad7e8ecf5323bfca320db548d81b39", size = 453021, upload-time = "2026-07-23T01:53:43.749Z" },
+    { url = "https://files.pythonhosted.org/packages/18/d4/eb96299230e20acf2efae207cb8d69051f1f68e357e5ea5e479bf6fb097a/aiohttp-3.14.3-cp312-cp312-macosx_10_13_universal2.whl", hash = "sha256:39aded8c7f3b935b54aab1d8d73c70ec0ee2d3ec3b943e0e86611bc150ba47f5", size = 754690, upload-time = "2026-07-23T01:53:47.332Z" },
+    { url = "https://files.pythonhosted.org/packages/88/11/e7a70a209eb9a067c0d3212b518a0134e3484f5178c7533878b6b514d469/aiohttp-3.14.3-cp312-cp312-macosx_10_13_x86_64.whl", hash = "sha256:5bcb6ff3fdab1258a192679ff1a05d44f59626430aa05cd1a9d2447423599228", size = 509484, upload-time = "2026-07-23T01:53:51.159Z" },
+    { url = "https://files.pythonhosted.org/packages/30/07/4bbc222cc8dbe31d4c3e8a5baad2286e4d42026ac0c570027b89afce6344/aiohttp-3.14.3-cp312-cp312-macosx_11_0_arm64.whl", hash = "sha256:617105e2c3018ee38d0c8ce5ee3c84f621a6d8b9f723202aacaff28449ca91ee", size = 511949, upload-time = "2026-07-23T01:53:55.083Z" },
+    { url = "https://files.pythonhosted.org/packages/54/b9/42e74c46b7b7c794b995bbc1f573fb48950c38b19d8600c62a6804ee2d67/aiohttp-3.14.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:f631fe87a6f30df5fbe6d79640b25e4cffb38c31c7fb6f10871517b84b0f8c1a", size = 1765282, upload-time = "2026-07-23T01:53:59.662Z" },
+    { url = "https://files.pythonhosted.org/packages/6b/ed/62bc4d74363ad346d518e0720363a949f63e2e23439a79eb5813d4d29bb3/aiohttp-3.14.3-cp312-cp312-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:a94dbaae5ae27bd849c93570669bff91e0510f33a80805738e3de72a7be0447b", size = 1741511, upload-time = "2026-07-23T01:54:04.063Z" },
+    { url = "https://files.pythonhosted.org/packages/d0/9f/181e8a8bc79e47d13c7fc4540bd7a3b729d9505609c61f392a8dd2fbfe55/aiohttp-3.14.3-cp312-cp312-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:8f2f1c4c032c7cedd7d8da6f54c97b70266c6570c3108d3fdffee7188bb70529", size = 1810680, upload-time = "2026-07-23T01:54:09.882Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/9a/dec94d6ad694552fe3424e3f1928d7a606a5d9d9433a04e7ecdd9d38ae7f/aiohttp-3.14.3-cp312-cp312-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:ea05e1f97ceea523942d9b2a7d7c0359d781d683d6b043f5943a602b14da4787", size = 1905646, upload-time = "2026-07-23T01:54:13.475Z" },
+    { url = "https://files.pythonhosted.org/packages/52/b7/7cd31f29d6055bd711ae6e669367fba6f5ae9de463910a793e30556a8db7/aiohttp-3.14.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:543906c127fb1d929b95076db19b83fa2d46751006ff1e23b093aa5ac4d8db42", size = 1792122, upload-time = "2026-07-23T01:54:15.752Z" },
+    { url = "https://files.pythonhosted.org/packages/66/73/10b1ef93afa61f4963c746257b70ced619cf31a4798671de5fdb2608501d/aiohttp-3.14.3-cp312-cp312-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:0a5ff2dfbb9ce645fa5b8ef3e02c6c0b9cc3f6030ff863d0c51fffc50cb5541b", size = 1591127, upload-time = "2026-07-23T01:54:19.489Z" },
+    { url = "https://files.pythonhosted.org/packages/49/ed/3b203fa6de1b338c14acdc06bf6ca9b043b7944f005966958c2ced932cde/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_aarch64.whl", hash = "sha256:041badb8f84396357c4d3ad26de6afd7a32b112f43d3c63045c0c8278cfd2043", size = 1725210, upload-time = "2026-07-23T01:54:24.129Z" },
+    { url = "https://files.pythonhosted.org/packages/28/b7/1c2aab8c706436dcc28598452488ac9cd7c409da815237c28c27d58993e6/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_armv7l.whl", hash = "sha256:530125ee1163c4219af35dc3aa1206e541e7b31b6efc1a3f93b70a136f65d427", size = 1764848, upload-time = "2026-07-23T01:54:27.973Z" },
+    { url = "https://files.pythonhosted.org/packages/54/50/94c28f08b131c4bf10984ea2c7a536c9920608bb2d6e7f95642c30cc87b7/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_ppc64le.whl", hash = "sha256:c8653fd547c93a61aadc612007790f5555cdd18946fa48cf45e26d8ea4ea473d", size = 1777102, upload-time = "2026-07-23T01:54:31.775Z" },
+    { url = "https://files.pythonhosted.org/packages/13/d4/e7d09ba7d345fb2d74440fd2fa033c5e079fac05552927705986f41a364f/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_riscv64.whl", hash = "sha256:89176250f686cb9853c0fb7ead90e639e915b84a6f43eedc2a4e7ec21f1037f0", size = 1580205, upload-time = "2026-07-23T01:54:34.518Z" },
+    { url = "https://files.pythonhosted.org/packages/a3/84/072a91d68e1e1eb587985b54baab94221277f877e8ef274fc213a0ceae28/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_s390x.whl", hash = "sha256:3a26434dafe408229ff3403458ca58de24fb51936504decac49ce6755f77e59d", size = 1797219, upload-time = "2026-07-23T01:54:36.995Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/eb/aad34e897e668424d6e995da5dff8a4a09af93363d3392488772957a63aa/aiohttp-3.14.3-cp312-cp312-musllinux_1_2_x86_64.whl", hash = "sha256:d1558173930a5a8d3069cee5c92fc91c87c4dbcb099debbb3622053717145a19", size = 1768629, upload-time = "2026-07-23T01:54:40.103Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/2b/6bb88ddba0fecd9122aa3ebcad25996cf6c083a4a7040dbb3a4f97972af6/aiohttp-3.14.3-cp312-cp312-win32.whl", hash = "sha256:16100ad3ab8d649fdfbee87602d9d2dcdca9df0b9eda8a1b5fdc0d41f96da559", size = 451481, upload-time = "2026-07-23T01:54:42.547Z" },
+    { url = "https://files.pythonhosted.org/packages/76/9b/f2f8f108da17ecef2cc3efc424e8b7ad3782b1a8360f7b8eae8ced84f6ea/aiohttp-3.14.3-cp312-cp312-win_amd64.whl", hash = "sha256:33a2d7c28d33797a2e99923dffa63f83d908a19b6bf26cfe80fa790aa5e1a75a", size = 476845, upload-time = "2026-07-23T01:54:44.853Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/44/28dac80a8941b604f4da10ce21097614ca1bf905ce93dca28d8d7de9c1e7/aiohttp-3.14.3-cp312-cp312-win_arm64.whl", hash = "sha256:362a3fd481769cac1a824514bcd86fda51c65e8fe6e051099e008fddde6db17c", size = 448050, upload-time = "2026-07-23T01:54:47.087Z" },
 ]
 
 [[package]]

From 346089cd387eaa1df9a21d203352eb6c3ff888f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:38:05 -0300
Subject: [PATCH 266/345] chore(deps): bump next from 16.2.6 to 16.2.11 in
 /frontend (#1228)

Bumps [next](https://github.com/vercel/next.js) from 16.2.6 to 16.2.11.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/compare/v16.2.6...v16.2.11)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.11
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 92 +++++++++++++++++++++-----------------
 frontend/package.json      |  2 +-
 2 files changed, 53 insertions(+), 41 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 4ae7dc7f..cf561109 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -38,7 +38,7 @@
         "i18next-browser-languagedetector": "^8.2.0",
         "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
-        "next": "^16.2.6",
+        "next": "^16.2.11",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
         "react-hook-form": "^7.60.0",
@@ -1842,9 +1842,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.6.tgz",
-      "integrity": "sha512-gd8HoHN4ufj73WmR3JmVolrpJR47ILK6LouP5xElPglaVxir6e1a7VzvTvDWkOoPXT9rkkTzyCxBu4yeZfZwcw==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.11.tgz",
+      "integrity": "sha512-0do5A3BJ2gxWr0ZCMcD6BhW+e595jyxdTl3rXTS6lOtD8ektMiW6CO+EPwt1Eca1DBnm90r/7GdiKWBKxH++DA==",
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
@@ -1857,9 +1857,9 @@
       }
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.6.tgz",
-      "integrity": "sha512-ZJGkkcNfYgrrMkqOdZ7zoLa1TOy0qpcMfk/z4Mh/FKUz40gVO+HNQWqmLxf67Z5WB64DRp0dhEbyHfel+6sJUg==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.11.tgz",
+      "integrity": "sha512-wryL4pjKmDwGv2ox6+GZDFxvmtSRLqApBR8kL1j4+vhB7Z5vJC/zAnXpiR9Xkfzl0AS8WLMnsuGV/UKI67/rrw==",
       "cpu": [
         "arm64"
       ],
@@ -1873,9 +1873,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.6.tgz",
-      "integrity": "sha512-v/YLBHIY132Ced3puBJ7YJKw1lqsCrgcNo2aRJlCEyQrrCeRJlvGlnmxhPxNQI3KE3N1DN5r9TPNPvka3nq5RQ==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.11.tgz",
+      "integrity": "sha512-aZl2j4f/fLyjQvOhv0Oe9UaMAQHolYpKhctsoYzplSumKJKPUmgjcf6545aBtysLTcu994TREd0+pSgNE4ohmg==",
       "cpu": [
         "x64"
       ],
@@ -1889,12 +1889,15 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.6.tgz",
-      "integrity": "sha512-RPOvqlYBbcQjkz9VQQDZ2T2bARIjXZV1KFlt+V2Mr6SW/e4I9fcKsaA0hdyf2FHoTlsV2xnBd5Y912rP/1Ce6w==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.11.tgz",
+      "integrity": "sha512-5jEriyEnH/LWFy27L2ZG0XaLlyEJIjhsImEsiS9P563PKEVp2BVups/xfOucIrsvVntp11oNcZwjHvaDPYVB5g==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1905,12 +1908,15 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.6.tgz",
-      "integrity": "sha512-URUTu1+dMkxJsPFgm+OeEvq9wf5sujw0EvgYy80TDGHTSLTnIHeqb0Eu8A3sC95IRgjejQL+kC4mw+4yPxiAXA==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.11.tgz",
+      "integrity": "sha512-eIjcpx2fnnFSSkZDbTxy74KnokUXDjfoLClpWelfgHLf621aTqswhwXQ7GkD5K5rplrS6LZ/Bj+mVuvzluBOEg==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1921,12 +1927,15 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.6.tgz",
-      "integrity": "sha512-DOj182mPV8G3UkrayLoREM5YEYI+Dk5wv7Ox9xl1fFibAELEsFD0lDPfHIeILlutMMfdyhlzYPELG3peuKaurw==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.11.tgz",
+      "integrity": "sha512-8WgzpaWMs46qJT9kiV47cje86L0x/Mu9t8/Gwj+pnbgW3rETVfCnaScPjlYUwNScpOozdcIMHWmAvuZJUonR2w==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1937,12 +1946,15 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.6.tgz",
-      "integrity": "sha512-HKQ5SP/V/ub73UvF7n/zeJlxk2kLmtL7Wzrg4WfmkjmNos5onJ2tKu7yZOPdL18A6Svfn3max29ym+ry7NkK4g==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.11.tgz",
+      "integrity": "sha512-I3UgPds7G4ZYnTb/H+5GBGuUT2DhAk6j0mL6A4s63RjFs74wB2hOWP0vaxsK+3NJraExt3eYEPQ/UtT0x/64Nw==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1953,9 +1965,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.6.tgz",
-      "integrity": "sha512-LZXpTlPyS5v7HhSmnvsLGP3iIYgYOBnc8r8ArlT55sGHV89bR2HlDdBjWQ+PY6SJMmk8TuVGFuxalnP3k/0Dwg==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.11.tgz",
+      "integrity": "sha512-n89CjtcThnjrwgJMAiI5xbqwLY51zvwC9tSlArmVndAJLYVl9T9UAdlkXTmZvE++idoXe8KdglQlhNRdUp1c6g==",
       "cpu": [
         "arm64"
       ],
@@ -1969,9 +1981,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.6.tgz",
-      "integrity": "sha512-F0+4i0h9J6C4eE3EAPWsoCk7UW/dbzOjyzxY0qnDUOYFu6FFmdZ6l97/XdV3/Nz3VYyO7UWjyEJUXkGqcoXfMA==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.11.tgz",
+      "integrity": "sha512-md8CLNggS1Dx9pUgApzps5uAf+N8GN9xywzmNx9vHAWo94HtBwCCqkSnhIrdfQe83Dhz8Lfo/20Nb1Zxal092w==",
       "cpu": [
         "x64"
       ],
@@ -9926,12 +9938,12 @@
       "dev": true
     },
     "node_modules/next": {
-      "version": "16.2.6",
-      "resolved": "https://registry.npmjs.org/next/-/next-16.2.6.tgz",
-      "integrity": "sha512-qOVgKJg1+At15NpeUP+eJgCHvTCgXsogweq87Ri/Ix7PkqQHg4sdaXmSFqKlgaIXE4kW0g25LE68W87UANlHtw==",
+      "version": "16.2.11",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.2.11.tgz",
+      "integrity": "sha512-B339zaqbyK8cmxhoAvLrcwoabwCP1wz21zSzfqxqXAemTu2BXnH7tQnfcglKv1vnMUIDBc+Hth7XODQriTZiRQ==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "16.2.6",
+        "@next/env": "16.2.11",
         "@swc/helpers": "0.5.15",
         "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
@@ -9945,14 +9957,14 @@
         "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "16.2.6",
-        "@next/swc-darwin-x64": "16.2.6",
-        "@next/swc-linux-arm64-gnu": "16.2.6",
-        "@next/swc-linux-arm64-musl": "16.2.6",
-        "@next/swc-linux-x64-gnu": "16.2.6",
-        "@next/swc-linux-x64-musl": "16.2.6",
-        "@next/swc-win32-arm64-msvc": "16.2.6",
-        "@next/swc-win32-x64-msvc": "16.2.6",
+        "@next/swc-darwin-arm64": "16.2.11",
+        "@next/swc-darwin-x64": "16.2.11",
+        "@next/swc-linux-arm64-gnu": "16.2.11",
+        "@next/swc-linux-arm64-musl": "16.2.11",
+        "@next/swc-linux-x64-gnu": "16.2.11",
+        "@next/swc-linux-x64-musl": "16.2.11",
+        "@next/swc-win32-arm64-msvc": "16.2.11",
+        "@next/swc-win32-x64-msvc": "16.2.11",
         "sharp": "^0.34.5"
       },
       "peerDependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 647a0492..33ae690f 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -43,7 +43,7 @@
     "i18next-browser-languagedetector": "^8.2.0",
     "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
-    "next": "^16.2.6",
+    "next": "^16.2.11",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-hook-form": "^7.60.0",

From f9a6539ad1349a680d9d49437ba5c71b8863c7a5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:46:40 -0300
Subject: [PATCH 267/345] chore(deps-dev): bump tar from 7.5.16 to 7.5.22 in
 /frontend (#1227)

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.22.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.22)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index cf561109..5908b065 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -11801,9 +11801,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.16",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
-      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
+      "version": "7.5.22",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz",
+      "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==",
       "dev": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {

From 746dbe1890e31b3218164069374874c5203df219 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:56:48 -0300
Subject: [PATCH 268/345] chore(deps): bump pyasn1 from 0.6.3 to 0.6.4 (#1217)

Bumps [pyasn1](https://github.com/pyasn1/pyasn1) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.3...v0.6.4)

---
updated-dependencies:
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/uv.lock b/uv.lock
index 36c3dc59..0e1378e7 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2592,11 +2592,11 @@ memory = [
 
 [[package]]
 name = "pyasn1"
-version = "0.6.3"
+version = "0.6.4"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/5c/5f/6583902b6f79b399c9c40674ac384fd9cd77805f9e6205075f828ef11fb2/pyasn1-0.6.3.tar.gz", hash = "sha256:697a8ecd6d98891189184ca1fa05d1bb00e2f84b5977c481452050549c8a72cf", size = 148685, upload-time = "2026-03-17T01:06:53.382Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5d/a0/7d793dce3fa811fe047d6ae2431c672364b462850c6235ae306c0efd025f/pyasn1-0.6.3-py3-none-any.whl", hash = "sha256:a80184d120f0864a52a073acc6fc642847d0be408e7c7252f31390c0f4eadcde", size = 83997, upload-time = "2026-03-17T01:06:52.036Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" },
 ]
 
 [[package]]

From 2444e8e9df5b203689009615f7bc3ee48b5685ec Mon Sep 17 00:00:00 2001
From: Dessalines39394 <simon.dessalines@dera.page>
Date: Fri, 4 Sep 2026 04:06:49 +0200
Subject: [PATCH 269/345] fix(readme): restore star history chart via a working
 endpoint (#1262)

The star history chart in the README is currently broken because the upstream service is affected by GitHub stargazer API restrictions. Point the chart image and its link to a working alternative that requires no API token, so the chart renders again.

Co-authored-by: Dessalines39394 <245616256+Dessalines39394@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 3d42f2e1..b4aabe37 100644
--- a/README.md
+++ b/README.md
@@ -214,7 +214,7 @@ Done! You're ready to create your first notebook.
 
 ## Star History
 
-[![Star History Chart](https://api.star-history.com/svg?repos=lfnovo/open-notebook&type=date&legend=top-left)](https://www.star-history.com/#lfnovo/open-notebook&type=date&legend=top-left)
+[![Star History Chart](https://star-history.dera.page/svg?repos=lfnovo/open-notebook&type=date&legend=top-left)](https://star-history.dera.page/#lfnovo/open-notebook&type=date&legend=top-left)
 
 
 ## Provider Support Matrix

From 91f70f4d20c27e67ea4f9fc5353b40ed8a7dbf4f Mon Sep 17 00:00:00 2001
From: Paco Cartones <253313177+pacocartones@users.noreply.github.com>
Date: Fri, 4 Sep 2026 04:13:55 +0200
Subject: [PATCH 270/345] Fix SSE stream parsing in source chat: buffer partial
 lines and stream-decode (#1289)

The SSE consumer in useSourceChat decoded and split each network chunk in
isolation (decoder.decode(value) with no { stream: true }, and text.split('\n')
with no carry-over). A data: line split across two reads was dropped (first half
fails JSON.parse, second half fails the 'data: ' guard) and a multibyte char
straddling a chunk boundary decoded to U+FFFD.

Carry the incomplete trailing line across reads and use a streaming decoder,
mirroring the sibling hook useAsk in use-ask.ts.

Co-authored-by: pacocartones <pacocartones@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/lib/hooks/use-source-chat.ts | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/frontend/src/lib/hooks/use-source-chat.ts b/frontend/src/lib/hooks/use-source-chat.ts
index 4b69056a..e9e3d6b3 100644
--- a/frontend/src/lib/hooks/use-source-chat.ts
+++ b/frontend/src/lib/hooks/use-source-chat.ts
@@ -144,18 +144,25 @@ export function useSourceChat(sourceId: string) {
       const reader = response.getReader()
       const decoder = new TextDecoder()
       let aiMessage: SourceChatMessage | null = null
+      let buffer = ''
 
       while (true) {
         const { done, value } = await reader.read()
         if (done) break
 
-        const text = decoder.decode(value)
-        const lines = text.split('\n')
+        buffer += decoder.decode(value, { stream: true })
+        const lines = buffer.split('\n')
+
+        // Keep the last incomplete line in buffer
+        buffer = lines.pop() || ''
 
         for (const line of lines) {
           if (line.startsWith('data: ')) {
             try {
-              const data = JSON.parse(line.slice(6))
+              const jsonStr = line.slice(6).trim()
+              if (!jsonStr) continue
+
+              const data = JSON.parse(jsonStr)
               
               if (data.type === 'ai_message') {
                 // Create AI message on first content chunk to avoid empty bubble

From eeb2e678208ba6728cee31141e706bda1d9ac3b6 Mon Sep 17 00:00:00 2001
From: Manish Singh Parihar <75237981+Msparihar@users.noreply.github.com>
Date: Fri, 4 Sep 2026 07:53:35 +0530
Subject: [PATCH 271/345] fix(frontend): stop long voice-model badge
 overflowing profile card (#1259)

Let the speaker-profile row wrap and constrain the voice-model badge
(min-w-0, max-w-full, truncate with a title tooltip) so long
provider/model names no longer clip past the card edge.

Fixes #1196

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../podcasts/EpisodeProfilesPanel.tsx           | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
index 5c623132..4921a047 100644
--- a/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
+++ b/frontend/src/components/podcasts/EpisodeProfilesPanel.tsx
@@ -115,6 +115,9 @@ export function EpisodeProfilesPanel({
               profile.speaker_config
             )
             const unconfigured = needsModelSetup(profile)
+            const voiceModelLabel = speakerSummary?.voice_model
+              ? (modelNameMap[speakerSummary.voice_model] ?? speakerSummary.voice_model)
+              : null
 
             return (
               <Card key={profile.id}>
@@ -237,16 +240,20 @@ export function EpisodeProfilesPanel({
                       <p className="text-xs font-semibold uppercase tracking-wide text-muted-foreground">
                         {t('podcasts.speakerProfile')}
                       </p>
-                      <div className="flex items-center gap-2 text-foreground">
-                        <Users className="h-4 w-4" />
+                      <div className="flex flex-wrap items-center gap-2 text-foreground">
+                        <Users className="h-4 w-4 shrink-0" />
                         <span>
                           {profile.speaker_config_name ??
                             speakerSummary?.name ??
                             t('podcasts.notConfigured')}
                         </span>
-                        {speakerSummary?.voice_model ? (
-                          <Badge variant="outline" className="text-xs">
-                            {modelNameMap[speakerSummary.voice_model] ?? speakerSummary.voice_model}
+                        {voiceModelLabel ? (
+                          <Badge
+                            variant="outline"
+                            className="min-w-0 max-w-full shrink text-xs"
+                            title={voiceModelLabel}
+                          >
+                            <span className="truncate">{voiceModelLabel}</span>
                           </Badge>
                         ) : null}
                       </div>

From 43a07fe28e4ddcda641d3ca51938610acce92517 Mon Sep 17 00:00:00 2001
From: Sure <127877795+Sure-Will@users.noreply.github.com>
Date: Fri, 4 Sep 2026 10:30:41 +0800
Subject: [PATCH 272/345] fix: align sidebar footer actions (#1288)

* fix: align sidebar footer actions

* test: cover sidebar footer spacing

* test: guard theme icon sizing

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/components/common/ThemeToggle.tsx  | 12 ++++++------
 .../src/components/layout/AppSidebar.test.tsx   | 17 +++++++++++++++++
 frontend/src/components/layout/AppSidebar.tsx   |  2 +-
 3 files changed, 24 insertions(+), 7 deletions(-)

diff --git a/frontend/src/components/common/ThemeToggle.tsx b/frontend/src/components/common/ThemeToggle.tsx
index bd602409..b8ae28b6 100644
--- a/frontend/src/components/common/ThemeToggle.tsx
+++ b/frontend/src/components/common/ThemeToggle.tsx
@@ -25,12 +25,12 @@ export function ThemeToggle({ iconOnly = false }: ThemeToggleProps) {
         <Button 
           variant={iconOnly ? "ghost" : "outline"} 
           size={iconOnly ? "icon" : "default"} 
-          className={iconOnly ? "h-9 w-full sidebar-menu-item" : "w-full justify-start gap-2 sidebar-menu-item"}
+          className={iconOnly ? "h-9 w-full sidebar-menu-item" : "w-full justify-start gap-2 px-3 sidebar-menu-item"}
         >
-          <div className="relative h-[1.2rem] w-[1.2rem]">
-            <Sun className="absolute inset-0 h-[1.2rem] w-[1.2rem] rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0" />
-            <Moon className="absolute inset-0 h-[1.2rem] w-[1.2rem] rotate-90 scale-0 transition-all dark:rotate-0 dark:scale-100" />
-          </div>
+          <span className="relative size-4">
+            <Sun className="absolute inset-0 size-4 rotate-0 scale-100 transition-all dark:-rotate-90 dark:scale-0" />
+            <Moon className="absolute inset-0 size-4 rotate-90 scale-0 transition-all dark:rotate-0 dark:scale-100" />
+          </span>
           {!iconOnly && <span>{t('common.theme')}</span>}
           <span className="sr-only">{t('navigation.theme')}</span>
         </Button>
@@ -60,4 +60,4 @@ export function ThemeToggle({ iconOnly = false }: ThemeToggleProps) {
       </DropdownMenuContent>
     </DropdownMenu>
   )
-}
\ No newline at end of file
+}
diff --git a/frontend/src/components/layout/AppSidebar.test.tsx b/frontend/src/components/layout/AppSidebar.test.tsx
index 67621f87..bd676534 100644
--- a/frontend/src/components/layout/AppSidebar.test.tsx
+++ b/frontend/src/components/layout/AppSidebar.test.tsx
@@ -22,6 +22,23 @@ describe('AppSidebar', () => {
     expect(screen.getByText('navigation.notebooks')).toBeDefined()
   })
 
+  it('uses consistent spacing for expanded footer actions', () => {
+    render(<AppSidebar />)
+
+    const themeButton = screen.getByText('common.theme').closest('button')
+    const languageButton = screen.getByText('common.language').closest('button')
+    const signOutButton = screen.getByRole('button', { name: 'common.signOut' })
+
+    expect(themeButton?.className.split(/\s+/)).toContain('px-3')
+
+    for (const button of [themeButton, languageButton, signOutButton]) {
+      expect(button?.className.split(/\s+/)).toContain('gap-2')
+    }
+
+    expect(themeButton?.querySelector(':scope > span.relative.size-4')).not.toBeNull()
+    expect(signOutButton.className.split(/\s+/)).not.toContain('gap-3')
+  })
+
   it('toggles collapse state when clicking handle', () => {
     const toggleCollapse = vi.fn()
     vi.mocked(useSidebarStore).mockReturnValue({
diff --git a/frontend/src/components/layout/AppSidebar.tsx b/frontend/src/components/layout/AppSidebar.tsx
index cf188f74..7ad5dd7e 100644
--- a/frontend/src/components/layout/AppSidebar.tsx
+++ b/frontend/src/components/layout/AppSidebar.tsx
@@ -371,7 +371,7 @@ export function AppSidebar() {
           ) : (
             <Button
               variant="outline"
-              className="w-full justify-start gap-3 sidebar-menu-item"
+              className="w-full justify-start gap-2 sidebar-menu-item"
               onClick={logout}
               aria-label={t('common.signOut')}
              >

From cdb7992612ba79c82861f71f77a00868da7b533e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=CE=B1I?= <quanghuychuong007@gmail.com>
Date: Fri, 4 Sep 2026 10:40:23 +0800
Subject: [PATCH 273/345] fix(ui): restore markdown preview list markers
 (#1300)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix: restore markdown preview list markers

* test: cover markdown preview list markers

---------

Co-authored-by: αI <230277249+Alphaxiaoteng@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/app/globals.css                  |  9 ++++
 .../components/ui/markdown-editor.test.tsx    | 45 +++++++++++++++++++
 2 files changed, 54 insertions(+)

diff --git a/frontend/src/app/globals.css b/frontend/src/app/globals.css
index 5eb28d55..5f9d6ae9 100644
--- a/frontend/src/app/globals.css
+++ b/frontend/src/app/globals.css
@@ -437,4 +437,13 @@
   .prose blockquote p::after {
     content: none !important;
   }
+
+  /* Tailwind preflight removes the browser defaults used by the editor preview. */
+  .w-md-editor-preview :where(.wmde-markdown ul) {
+    list-style-type: disc;
+  }
+
+  .w-md-editor-preview :where(.wmde-markdown ol) {
+    list-style-type: decimal;
+  }
 }
diff --git a/frontend/src/components/ui/markdown-editor.test.tsx b/frontend/src/components/ui/markdown-editor.test.tsx
index 0015cea0..2b93e71c 100644
--- a/frontend/src/components/ui/markdown-editor.test.tsx
+++ b/frontend/src/components/ui/markdown-editor.test.tsx
@@ -1,6 +1,8 @@
 import { describe, it, expect } from 'vitest'
 import { render } from '@testing-library/react'
 import MarkdownPreview from '@uiw/react-markdown-preview'
+import { readFileSync } from 'node:fs'
+import { join } from 'node:path'
 
 import { PREVIEW_OPTIONS } from './markdown-editor'
 
@@ -23,6 +25,49 @@ function renderPreview(source: string) {
 }
 
 describe('MarkdownEditor preview sanitization', () => {
+  it('restores top-level list markers without overriding nested and task lists', () => {
+    const appCss = readFileSync(join(process.cwd(), 'src/app/globals.css'), 'utf8')
+    const previewCss = readFileSync(
+      join(process.cwd(), 'node_modules/@uiw/react-markdown-preview/markdown.css'),
+      'utf8'
+    )
+    const markerRules = ['ul', 'ol'].map((tag) => {
+      const selector = `.w-md-editor-preview :where(.wmde-markdown ${tag})`
+      const escapedSelector = selector.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+      const match = appCss.match(new RegExp(`${escapedSelector}\\s*\\{[^}]+\\}`))
+      expect(match, `missing marker rule for ${tag}`).not.toBeNull()
+      return match![0]
+    })
+    expect(previewCss).toMatch(
+      /\.wmde-markdown ol ol,\s*\.wmde-markdown ul ol\s*\{[^}]*list-style-type:\s*lower-roman/
+    )
+    const style = document.createElement('style')
+    style.textContent = `ol, ul, menu { list-style: none; }\n${previewCss}\n${markerRules.join('\n')}`
+    document.head.appendChild(style)
+
+    try {
+      const { container } = render(
+        <div className="w-md-editor-preview">
+          <MarkdownPreview
+            source={'- Bullet\n  1. Nested ordered\n\n1. Ordered\n\n- [x] Task'}
+            remarkPlugins={PREVIEW_OPTIONS.remarkPlugins}
+            rehypePlugins={PREVIEW_OPTIONS.rehypePlugins}
+          />
+        </div>
+      )
+      const markdown = container.querySelector('.wmde-markdown')!
+      const topLevelUl = markdown.querySelector(':scope > ul:not(.contains-task-list)')!
+      const topLevelOl = markdown.querySelector(':scope > ol')!
+      const taskItem = markdown.querySelector('li.task-list-item')!
+
+      expect(getComputedStyle(topLevelUl).listStyleType).toBe('disc')
+      expect(getComputedStyle(topLevelOl).listStyleType).toBe('decimal')
+      expect(getComputedStyle(taskItem).listStyleType).toBe('none')
+    } finally {
+      style.remove()
+    }
+  })
+
   it('strips a raw <iframe> to a live, embeddable element', () => {
     const { container } = renderPreview('before <iframe src="https://evil.example"></iframe> after')
     expect(container.querySelector('iframe')).toBeNull()

From bef53688b3332da1b3561da11c84da74120ca56d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=CE=B1I?= <quanghuychuong007@gmail.com>
Date: Fri, 4 Sep 2026 10:47:29 +0800
Subject: [PATCH 274/345] fix(frontend): follow app theme in markdown editor
 (#1294)

* fix(frontend): sync markdown editor theme

* fix(frontend): wait for theme hydration

* fix(frontend): recover from theme storage errors

* test: assert theme fallback after hydration failure

---------

Co-authored-by: Alphaxiaoteng <230277249+Alphaxiaoteng@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../components/ui/markdown-editor.test.tsx    | 71 ++++++++++++++++++-
 .../src/components/ui/markdown-editor.tsx     | 36 ++++++----
 frontend/src/lib/stores/theme-store.ts        | 22 ++++--
 3 files changed, 107 insertions(+), 22 deletions(-)

diff --git a/frontend/src/components/ui/markdown-editor.test.tsx b/frontend/src/components/ui/markdown-editor.test.tsx
index 2b93e71c..c846172b 100644
--- a/frontend/src/components/ui/markdown-editor.test.tsx
+++ b/frontend/src/components/ui/markdown-editor.test.tsx
@@ -1,10 +1,18 @@
-import { describe, it, expect } from 'vitest'
-import { render } from '@testing-library/react'
+import { afterEach, describe, it, expect, vi } from 'vitest'
+import { act, render, screen } from '@testing-library/react'
 import MarkdownPreview from '@uiw/react-markdown-preview'
 import { readFileSync } from 'node:fs'
 import { join } from 'node:path'
 
-import { PREVIEW_OPTIONS } from './markdown-editor'
+import { useThemeStore } from '@/lib/stores/theme-store'
+import { MarkdownEditor, PREVIEW_OPTIONS } from './markdown-editor'
+
+vi.mock('next/dynamic', () => ({
+  default: () =>
+    function MockMarkdownEditor(props: { 'data-color-mode'?: string }) {
+      return <div data-testid="md-editor" data-color-mode={props['data-color-mode']} />
+    },
+}))
 
 // MarkdownEditor's live preview renders through @uiw/react-markdown-preview,
 // which parses raw HTML in the markdown source into real elements (its `raw`
@@ -24,6 +32,63 @@ function renderPreview(source: string) {
   )
 }
 
+describe('MarkdownEditor theme', () => {
+  const themeStorage = useThemeStore.persist.getOptions().storage
+
+  afterEach(() => {
+    useThemeStore.persist.setOptions({ storage: themeStorage })
+    useThemeStore.getState().setTheme('system')
+    useThemeStore.getState().setHasHydrated(true)
+  })
+
+  it('follows theme changes without remounting', () => {
+    useThemeStore.getState().setHasHydrated(true)
+    act(() => useThemeStore.getState().setTheme('light'))
+    render(<MarkdownEditor />)
+    const editor = screen.getByTestId('md-editor')
+    expect(editor).toHaveAttribute('data-color-mode', 'light')
+
+    act(() => useThemeStore.getState().setTheme('dark'))
+    expect(screen.getByTestId('md-editor')).toBe(editor)
+    expect(editor).toHaveAttribute('data-color-mode', 'dark')
+  })
+
+  it('waits for persisted theme hydration before rendering', () => {
+    act(() => {
+      useThemeStore.getState().setTheme('dark')
+      useThemeStore.getState().setHasHydrated(false)
+    })
+    render(<MarkdownEditor />)
+    expect(screen.queryByTestId('md-editor')).toBeNull()
+
+    act(() => useThemeStore.getState().setHasHydrated(true))
+    expect(screen.getByTestId('md-editor')).toHaveAttribute('data-color-mode', 'dark')
+  })
+
+  it('renders after persisted theme hydration fails', async () => {
+    useThemeStore.persist.setOptions({
+      storage: {
+        getItem: () => {
+          throw new Error('malformed theme storage')
+        },
+        setItem: () => undefined,
+        removeItem: () => undefined,
+      },
+    })
+    act(() => useThemeStore.getState().setHasHydrated(false))
+    render(<MarkdownEditor />)
+    expect(screen.queryByTestId('md-editor')).toBeNull()
+
+    await act(async () => {
+      await useThemeStore.persist.rehydrate()
+    })
+    expect(screen.getByTestId('md-editor')).toHaveAttribute(
+      'data-color-mode',
+      useThemeStore.getState().getEffectiveTheme()
+    )
+  })
+})
+
 describe('MarkdownEditor preview sanitization', () => {
   it('restores top-level list markers without overriding nested and task lists', () => {
     const appCss = readFileSync(join(process.cwd(), 'src/app/globals.css'), 'utf8')
diff --git a/frontend/src/components/ui/markdown-editor.tsx b/frontend/src/components/ui/markdown-editor.tsx
index e6caeff4..aa583641 100644
--- a/frontend/src/components/ui/markdown-editor.tsx
+++ b/frontend/src/components/ui/markdown-editor.tsx
@@ -7,6 +7,8 @@ import rehypeKatex from 'rehype-katex'
 import rehypeSanitize, { defaultSchema } from 'rehype-sanitize'
 import type { PluggableList } from 'unified'
 
+import { useTheme } from '@/lib/stores/theme-store'
+
 const MDEditor = dynamic(
   () => import('@uiw/react-md-editor').then((mod) => mod.default),
   { ssr: false }
@@ -63,25 +65,29 @@ export interface MarkdownEditorProps {
 
 export const MarkdownEditor = forwardRef<HTMLDivElement, MarkdownEditorProps>(
   ({ value = '', onChange, placeholder, height = 300, preview = 'live', hideToolbar = false, className, textareaId, name }, ref) => {
+    const { effectiveTheme, hasHydrated } = useTheme()
+
     return (
       <div className={className} ref={ref}>
-        <MDEditor
-          value={value}
-          onChange={onChange}
-          preview={preview}
-          height={height}
-          hideToolbar={hideToolbar}
-          textareaProps={{
-            placeholder: placeholder || 'Enter markdown...',
-            id: textareaId,
-            name: name,
-          }}
-          previewOptions={PREVIEW_OPTIONS}
-          data-color-mode="light"
-        />
+        {hasHydrated && (
+          <MDEditor
+            value={value}
+            onChange={onChange}
+            preview={preview}
+            height={height}
+            hideToolbar={hideToolbar}
+            textareaProps={{
+              placeholder: placeholder || 'Enter markdown...',
+              id: textareaId,
+              name: name,
+            }}
+            previewOptions={PREVIEW_OPTIONS}
+            data-color-mode={effectiveTheme}
+          />
+        )}
       </div>
     )
   }
 )
 
-MarkdownEditor.displayName = 'MarkdownEditor'
\ No newline at end of file
+MarkdownEditor.displayName = 'MarkdownEditor'
diff --git a/frontend/src/lib/stores/theme-store.ts b/frontend/src/lib/stores/theme-store.ts
index fb8ae22d..912d867d 100644
--- a/frontend/src/lib/stores/theme-store.ts
+++ b/frontend/src/lib/stores/theme-store.ts
@@ -1,19 +1,28 @@
 import { create } from 'zustand'
-import { persist } from 'zustand/middleware'
+import { createJSONStorage, persist } from 'zustand/middleware'
 
 export type Theme = 'light' | 'dark' | 'system'
 
 interface ThemeState {
   theme: Theme
+  hasHydrated: boolean
   setTheme: (theme: Theme) => void
+  setHasHydrated: (state: boolean) => void
   getSystemTheme: () => 'light' | 'dark'
   getEffectiveTheme: () => 'light' | 'dark'
 }
 
+const themeStorage = createJSONStorage<Pick<ThemeState, 'theme'>>(() => localStorage)
+
 export const useThemeStore = create<ThemeState>()(
   persist(
     (set, get) => ({
       theme: 'system',
+      hasHydrated: !themeStorage,
+
+      setHasHydrated: (state: boolean) => {
+        set({ hasHydrated: state })
+      },
       
       setTheme: (theme: Theme) => {
         set({ theme })
@@ -43,19 +52,24 @@ export const useThemeStore = create<ThemeState>()(
     }),
     {
       name: 'theme-storage',
-      partialize: (state) => ({ theme: state.theme })
+      storage: themeStorage,
+      partialize: (state) => ({ theme: state.theme }),
+      onRehydrateStorage: (state) => () => {
+        state.setHasHydrated(true)
+      }
     }
   )
 )
 
 // Hook for components to use theme
 export function useTheme() {
-  const { theme, setTheme, getEffectiveTheme } = useThemeStore()
+  const { theme, hasHydrated, setTheme, getEffectiveTheme } = useThemeStore()
   
   return {
     theme,
+    hasHydrated,
     setTheme,
     effectiveTheme: getEffectiveTheme(),
     isDark: getEffectiveTheme() === 'dark'
   }
-}
\ No newline at end of file
+}

From 3c44dc63d7c4a2690310a4693616a7b313f8932d Mon Sep 17 00:00:00 2001
From: Augusto Sandim <107718137+AugustoSandim@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:55:10 -0400
Subject: [PATCH 275/345] docs(search): document content coverage for text and
 vector search (#1295)

* docs(search): document content coverage for text and vector search

- Add 'Content searched'sections to the user guide explaining
  which source/note fields are matched by text and vector search.
- Surface a short coverage hint below the search input in the UI.
- Add  translations across all supported locales.
Fixes #1267

* feat(search): make coverage hint reflect selected search type

- Show vector-specific coverage hint when vector search is selected.
- Split searchCoverage locale key into searchCoverageText and searchCoverageVector across all supported locales.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 docs/3-USER-GUIDE/search.md                  | 16 ++++++++++++++++
 frontend/src/app/(dashboard)/search/page.tsx |  5 +++++
 frontend/src/lib/locales/bn-IN/index.ts      |  2 ++
 frontend/src/lib/locales/ca-ES/index.ts      |  2 ++
 frontend/src/lib/locales/de-DE/index.ts      |  2 ++
 frontend/src/lib/locales/en-US/index.ts      |  2 ++
 frontend/src/lib/locales/es-ES/index.ts      |  2 ++
 frontend/src/lib/locales/fr-FR/index.ts      |  2 ++
 frontend/src/lib/locales/it-IT/index.ts      |  2 ++
 frontend/src/lib/locales/ja-JP/index.ts      |  2 ++
 frontend/src/lib/locales/pl-PL/index.ts      |  2 ++
 frontend/src/lib/locales/pt-BR/index.ts      |  2 ++
 frontend/src/lib/locales/ru-RU/index.ts      |  2 ++
 frontend/src/lib/locales/tr-TR/index.ts      |  2 ++
 frontend/src/lib/locales/zh-CN/index.ts      |  2 ++
 frontend/src/lib/locales/zh-TW/index.ts      |  2 ++
 16 files changed, 49 insertions(+)

diff --git a/docs/3-USER-GUIDE/search.md b/docs/3-USER-GUIDE/search.md
index fa69351a..9e8da457 100644
--- a/docs/3-USER-GUIDE/search.md
+++ b/docs/3-USER-GUIDE/search.md
@@ -64,6 +64,14 @@ Ranked by how close together they are
 - Synonyms: searching "large" won't find "big"
 - Concepts: searching "similarity" won't find "likeness"
 
+**Content searched:**
+Text search looks through:
+- **Source titles** — matching keywords in source names
+- **Source content** — the full text and its chunks
+- **Insights** — content generated from sources (e.g., dense summaries)
+- **Note titles** — matching keywords in note names
+- **Note content** — the body of your notes
+
 ---
 
 ### Search Type 2: VECTOR SEARCH (Semantic/Concept Matching)
@@ -107,6 +115,14 @@ But all are semantically related
 - Specific numbers: "1994" vs "1993" are semantically different
 - Technical jargon: "LSTM" and "RNN" are different even if related
 
+**Content searched:**
+Vector search compares your query against embeddings of:
+- **Source content** — source chunks (embeddings)
+- **Insights** — content generated from sources (embeddings)
+- **Note content** — the body of your notes (embeddings)
+
+Vector search works on embedded content only, so source and note *titles* are not matched semantically.
+
 ---
 
 ## Decision: Text Search vs. Vector Search?
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 28d8ebe5..595016ab 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -350,6 +350,11 @@ export default function SearchPage() {
                     </Button>
                   </div>
                   <p className="text-xs text-muted-foreground">{t('searchPage.pressToSearch')}</p>
+                  {searchType === 'vector' ? (
+                    <p className="text-xs text-muted-foreground">{t('searchPage.searchCoverageVector')}</p>
+                  ) : (
+                    <p className="text-xs text-muted-foreground">{t('searchPage.searchCoverageText')}</p>
+                  )}
                 </div>
 
                 {/* Search Options */}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 3f177c09..f1bd9314 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -485,6 +485,8 @@ export const bnIN = {
     searchDesc: "নির্দিষ্ট কীওয়ার্ড বা ধারণার জন্য আপনার জ্ঞানভান্ডার অনুসন্ধান করুন",
     enterSearchPlaceholder: "অনুসন্ধান ক্যোয়ারি লিখুন...",
     pressToSearch: "অনুসন্ধান করতে Enter চাপুন",
+    searchCoverageText: "টেক্সট অনুসন্ধান সোর্সের শিরোনাম ও বিষয়বস্তু, অন্তর্দৃষ্টি এবং নোটের শিরোনাম ও বিষয়বস্তু খুঁজে পায়।",
+    searchCoverageVector: "ভেক্টর অনুসন্ধান সোর্সের বিষয়বস্তু, অন্তর্দৃষ্টি এবং নোটের বিষয়বস্তু শব্দার্থিক সাদৃশ্যের ভিত্তিতে খুঁজে পায়। শিরোনাম মেলানো হয় না।",
     searchType: "অনুসন্ধানের ধরন",
     vectorSearchWarning: "ভেক্টর অনুসন্ধানের জন্য একটি এমবেডিং মডেল প্রয়োজন। শুধুমাত্র টেক্সট অনুসন্ধান উপলব্ধ।",
     textSearch: "টেক্সট অনুসন্ধান",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index c9cc3ceb..80fd178f 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -485,6 +485,8 @@ export const caES = {
     searchDesc: "Cerca a la teva base de coneixement paraules clau o conceptes específics",
     enterSearchPlaceholder: "Introdueix la consulta de cerca...",
     pressToSearch: "Prem Retorn per cercar",
+    searchCoverageText: "La cerca de text troba títols i contingut de les fonts, anàlisis i títols i contingut de les notes.",
+    searchCoverageVector: "La cerca vectorial troba contingut de les fonts, anàlisis i contingut de les notes per similitud semàntica. Els títols no es comparen.",
     searchType: "Tipus de cerca",
     vectorSearchWarning: "La cerca vectorial requereix un model d'incrustació. Només està disponible la cerca de text.",
     textSearch: "Cerca de text",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 52645188..0771b233 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -488,6 +488,8 @@ export const deDE = {
     searchDesc: "Durchsuche deine Wissensbasis nach bestimmten Stichwörtern oder Konzepten",
     enterSearchPlaceholder: "Suchanfrage eingeben...",
     pressToSearch: "Drücke Enter zum Suchen",
+    searchCoverageText: "Die Textsuche findet Quellen-Titel und -Inhalt, Erkenntnisse sowie Notiz-Titel und -Inhalt.",
+    searchCoverageVector: "Die Vektorsuche findet Quellen-Inhalt, Erkenntnisse und Notiz-Inhalt anhand semantischer Ähnlichkeit. Titel werden nicht berücksichtigt.",
     searchType: "Suchtyp",
     vectorSearchWarning: "Vektorsuche benötigt ein Embedding-Modell. Es ist nur Textsuche verfügbar.",
     textSearch: "Textsuche",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 0ff98c87..8148594b 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -483,6 +483,8 @@ export const enUS = {
     searchDesc: "Search your knowledge base for specific keywords or concepts",
     enterSearchPlaceholder: "Enter search query...",
     pressToSearch: "Press Enter to search",
+    searchCoverageText: "Text search matches source titles and content, insights, and note titles and content.",
+    searchCoverageVector: "Vector search matches source content, insights, and note content by semantic similarity. Titles are not matched.",
     searchType: "Search Type",
     vectorSearchWarning: "Vector search requires an embedding model. Only text search is available.",
     textSearch: "Text Search",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 4f95bc0e..d4f5bac3 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -485,6 +485,8 @@ export const esES = {
     searchDesc: "Busca en tu base de conocimiento palabras clave o conceptos específicos",
     enterSearchPlaceholder: "Escribe tu búsqueda...",
     pressToSearch: "Presiona Enter para buscar",
+    searchCoverageText: "La búsqueda de texto encuentra títulos y contenido de fuentes, análisis, y títulos y contenido de notas.",
+    searchCoverageVector: "La búsqueda vectorial encuentra contenido de fuentes, análisis y contenido de notas por similitud semántica. Los títulos no se comparan.",
     searchType: "Tipo de búsqueda",
     vectorSearchWarning: "La búsqueda vectorial requiere un modelo de embedding. Solo la búsqueda de texto está disponible.",
     textSearch: "Búsqueda de texto",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 1dc77290..390451dd 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -485,6 +485,8 @@ export const frFR = {
     searchDesc: "Recherchez des mots-clés ou des concepts spécifiques dans votre base de connaissances",
     enterSearchPlaceholder: "Entrez votre recherche...",
     pressToSearch: "Appuyez sur Entrée pour rechercher",
+    searchCoverageText: "La recherche textuelle trouve les titres et contenus des sources, les aperçus, ainsi que les titres et contenus des notes.",
+    searchCoverageVector: "La recherche vectorielle trouve le contenu des sources, les aperçus et le contenu des notes par similarité sémantique. Les titres ne sont pas pris en compte.",
     searchType: "Type de recherche",
     vectorSearchWarning: "La recherche vectorielle nécessite un modèle d'embedding. Seule la recherche textuelle est disponible.",
     textSearch: "Recherche textuelle",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 0da873a9..7a624ca1 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -485,6 +485,8 @@ export const itIT = {
     searchDesc: "Cerca nella tua base di conoscenza parole chiave o concetti specifici",
     enterSearchPlaceholder: "Inserisci la query di ricerca...",
     pressToSearch: "Premi invio per cercare",
+    searchCoverageText: "La ricerca testuale trova titoli e contenuti delle fonti, approfondimenti e titoli e contenuti delle note.",
+    searchCoverageVector: "La ricerca vettoriale trova contenuti delle fonti, approfondimenti e contenuti delle note per similarità semantica. I titoli non vengono confrontati.",
     searchType: "Tipo di ricerca",
     vectorSearchWarning: "La ricerca vettoriale richiede un modello di embedding. Solo la ricerca testuale è disponibile.",
     textSearch: "Ricerca testuale",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index d508d190..be51e45a 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -485,6 +485,8 @@ export const jaJP = {
     searchDesc: "特定のキーワードやコンセプトでナレッジベース内を検索",
     enterSearchPlaceholder: "検索クエリを入力...",
     pressToSearch: "Enterで検索",
+    searchCoverageText: "テキスト検索は、ソースのタイトルとコンテンツ、インサイト、ノートのタイトルとコンテンツを検索します。",
+    searchCoverageVector: "ベクトル検索は、意味的な類似性に基づいてソースのコンテンツ、インサイト、ノートのコンテンツを検索します。タイトルは検索されません。",
     searchType: "検索タイプ",
     vectorSearchWarning: "ベクトル検索にはEmbeddingモデルが必要です。テキスト検索のみ利用可能です。",
     textSearch: "テキスト検索",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 97869945..a2f2f51c 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -485,6 +485,8 @@ export const plPL = {
     searchDesc: "Przeszukaj swoją bazę wiedzy pod kątem konkretnych słów kluczowych lub pojęć",
     enterSearchPlaceholder: "Wpisz zapytanie wyszukiwania...",
     pressToSearch: "Naciśnij Enter, aby wyszukać",
+    searchCoverageText: "Wyszukiwanie tekstowe znajduje tytuły i treść źródeł, wglądy oraz tytuły i treść notatek.",
+    searchCoverageVector: "Wyszukiwanie wektorowe znajduje treść źródeł, wglądy i treść notatek na podstawie podobieństwa semantycznego. Tytuły nie są dopasowywane.",
     searchType: "Typ wyszukiwania",
     vectorSearchWarning: "Wyszukiwanie wektorowe wymaga modelu osadzania. Dostępne jest tylko wyszukiwanie tekstowe.",
     textSearch: "Wyszukiwanie tekstowe",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 3bd0efb7..3794ad63 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -485,6 +485,8 @@ export const ptBR = {
     searchDesc: "Busque em sua base de conhecimento por palavras-chave ou conceitos específicos",
     enterSearchPlaceholder: "Digite sua busca...",
     pressToSearch: "Pressione Enter para buscar",
+    searchCoverageText: "A busca por texto encontra títulos e conteúdo das fontes, insights e títulos e conteúdo das notas.",
+    searchCoverageVector: "A busca vetorial encontra conteúdo das fontes, insights e conteúdo das notas por similaridade semântica. Títulos não são correspondidos.",
     searchType: "Tipo de Busca",
     vectorSearchWarning: "Busca vetorial requer um modelo de embedding. Apenas busca por texto está disponível.",
     textSearch: "Busca por Texto",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index f380d9d4..09bf15eb 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -485,6 +485,8 @@ export const ruRU = {
     searchDesc: "Поиск в базе знаний по ключевым словам или концепциям",
     enterSearchPlaceholder: "Введите поисковый запрос...",
     pressToSearch: "Нажмите Enter для поиска",
+    searchCoverageText: "Текстовый поиск находит заголовки и содержимое источников, инсайты, а также заголовки и содержимое заметок.",
+    searchCoverageVector: "Векторный поиск находит содержимое источников, инсайты и содержимое заметок по семантическому сходству. Заголовки не учитываются.",
     searchType: "Тип поиска",
     vectorSearchWarning: "Векторный поиск требует модель эмбеддинга. Доступен только текстовый поиск.",
     textSearch: "Текстовый поиск",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index fa9b7478..652a2921 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -485,6 +485,8 @@ export const trTR = {
     searchDesc: "Bilgi tabanınızda belirli anahtar kelimeler veya kavramlar arayın",
     enterSearchPlaceholder: "Arama sorgusunu girin...",
     pressToSearch: "Aramak için Enter tuşuna basın",
+    searchCoverageText: "Metin araması kaynak başlıklarını ve içeriğini, içgörüleri ve not başlıklarını ve içeriğini bulur.",
+    searchCoverageVector: "Vektör araması kaynak içeriğini, içgörüleri ve not içeriğini anlamsal benzerliğe göre bulur. Başlıklar eşleştirilmez.",
     searchType: "Arama Türü",
     vectorSearchWarning: "Vektör araması için gömme modeli gereklidir. Yalnızca metin araması kullanılabilir.",
     textSearch: "Metin Araması",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index d8077565..c7ddc397 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -485,6 +485,8 @@ export const zhCN = {
     searchDesc: "在您的知识库中搜索特定的关键字或概念",
     enterSearchPlaceholder: "输入搜索查询...",
     pressToSearch: "按 Enter 键搜索",
+    searchCoverageText: "文本搜索会匹配来源标题和内容、洞察，以及笔记标题和内容。",
+    searchCoverageVector: "向量搜索通过语义相似度匹配来源内容、洞察和笔记内容。标题不会被匹配。",
     searchType: "搜索类型",
     vectorSearchWarning: "向量搜索需要嵌入模型。目前仅文本搜索可用。",
     textSearch: "文本搜索",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index cb451de2..7990f804 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -485,6 +485,8 @@ export const zhTW = {
     searchDesc: "在您的知識庫中搜尋特定的關鍵字或概念",
     enterSearchPlaceholder: "輸入搜尋查詢...",
     pressToSearch: "按 Enter 鍵搜尋",
+    searchCoverageText: "文字搜尋會比對來源標題與內容、洞察，以及筆記標題與內容。",
+    searchCoverageVector: "向量搜尋會透過語意相似度比對來源內容、洞察與筆記內容。標題不會被比對。",
     searchType: "搜尋類型",
     vectorSearchWarning: "向量搜尋需要嵌入模型。目前僅文本搜尋可用。",
     textSearch: "文本搜尋",

From 82c0aa25d33b4546fba66b6d230ee34d1b530822 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 3 Sep 2026 23:59:11 -0300
Subject: [PATCH 276/345] fix(sources): honor youtube_preferred_languages
 setting and add Chinese defaults (#1308)

ContentSettings.youtube_preferred_languages was dropped from the extraction
config in the content-core 2.x migration (#1116), so the API-configurable
setting had no effect and source processing always used the hardcoded
YOUTUBE_PREFERRED_LANGUAGES list. Wire the persisted setting into
ContentCoreConfig.youtube_languages (falling back to the built-in list) and
add zh-CN/zh-TW to both defaults so Chinese-only videos import out of the box.

Supersedes #1287.
---
 CHANGELOG.md                             |  3 ++
 open_notebook/domain/content_settings.py |  2 +-
 open_notebook/graphs/source.py           |  7 ++-
 tests/test_graphs.py                     | 55 +++++++++++++++++++++++-
 4 files changed, 63 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6252b92e..c6665d3b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
+### Fixed
+- **YouTube transcript language preference is honored again.** `ContentSettings.youtube_preferred_languages` (exposed via `GET`/`PUT /api/settings`) was silently ignored since the content-core 2.x migration — source processing always used a hardcoded list, so videos with transcripts only in an unlisted language failed to import. The setting now reaches content-core's `youtube_languages`, and both the built-in default and the setting default gained Simplified and Traditional Chinese (`zh-CN`, `zh-TW`). Supersedes #1287
+
 ## [1.14.0] - 2026-07-20
 
 ### Added
diff --git a/open_notebook/domain/content_settings.py b/open_notebook/domain/content_settings.py
index 099ebc52..3f4fd8fa 100644
--- a/open_notebook/domain/content_settings.py
+++ b/open_notebook/domain/content_settings.py
@@ -42,6 +42,6 @@ class ContentSettings(RecordModel):
         ),
     )
     youtube_preferred_languages: Optional[List[str]] = Field(
-        ["en", "pt", "es", "de", "nl", "en-GB", "fr", "de", "hi", "ja"],
+        ["en", "pt", "es", "de", "nl", "en-GB", "fr", "hi", "ja", "zh-CN", "zh-TW"],
         description="Preferred languages for YouTube transcripts",
     )
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index 6d4d57a0..bee10b3b 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -17,7 +17,8 @@ from open_notebook.domain.transformation import Transformation
 from open_notebook.graphs.transformation import graph as transform_graph
 from open_notebook.utils.runtime_capabilities import engine_runtime_missing
 
-# Preferred languages for YouTube transcript selection. content-core's own
+# Default preferred languages for YouTube transcript selection, used when
+# ContentSettings.youtube_preferred_languages is unset. content-core's own
 # default is only ["en", "es", "pt"]; we keep the broader list Open Notebook has
 # always intended so non-English videos still resolve a transcript.
 YOUTUBE_PREFERRED_LANGUAGES = [
@@ -30,6 +31,8 @@ YOUTUBE_PREFERRED_LANGUAGES = [
     "fr",
     "hi",
     "ja",
+    "zh-CN",
+    "zh-TW",
 ]
 
 
@@ -87,6 +90,8 @@ async def content_process(state: SourceState) -> dict:
     # previous behavior when settings are unset.
     try:
         settings: ContentSettings = await ContentSettings.get_instance()  # type: ignore[assignment]
+        if settings.youtube_preferred_languages:
+            config_kwargs["youtube_languages"] = settings.youtube_preferred_languages
         if settings.default_content_processing_engine_url:
             config_kwargs["url_engine"] = _usable_engine(
                 settings.default_content_processing_engine_url, "url"
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index f894a5b0..5199b522 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -403,6 +403,7 @@ class TestContentProcessDeleteSource:
         mock_model_manager.return_value = mm_instance
         mock_settings.get_instance = AsyncMock(
             return_value=MagicMock(
+                youtube_preferred_languages=None,
                 default_content_processing_engine_url="crawl4ai",
                 default_content_processing_engine_doc="docling",
                 docling_ocr=False,
@@ -428,6 +429,50 @@ class TestContentProcessDeleteSource:
         assert config.docling_formulas is True
         assert config.docling_vision is True
 
+    @pytest.mark.asyncio
+    @patch("open_notebook.graphs.source.ContentSettings")
+    @patch("open_notebook.graphs.source.extract_content")
+    @patch("open_notebook.graphs.source.ModelManager")
+    async def test_persisted_youtube_languages_wired_into_config(
+        self, mock_model_manager, mock_extract, mock_settings
+    ):
+        """ContentSettings.youtube_preferred_languages overrides the built-in
+        default list, so users can add transcript languages without a code
+        change (regression: the setting was dropped in the content-core 2.x
+        migration and silently ignored)."""
+        from content_core.common import ExtractionOutput
+
+        from open_notebook.graphs.source import SourceState, content_process
+
+        mm_instance = MagicMock()
+        mm_instance.get_defaults = AsyncMock(
+            return_value=MagicMock(default_speech_to_text_model=None)
+        )
+        mock_model_manager.return_value = mm_instance
+        mock_settings.get_instance = AsyncMock(
+            return_value=MagicMock(
+                youtube_preferred_languages=["ko", "en"],
+                default_content_processing_engine_url=None,
+                default_content_processing_engine_doc=None,
+                docling_ocr=None,
+                docling_formulas=None,
+                docling_vision=None,
+            )
+        )
+        mock_extract.return_value = ExtractionOutput(title="T", content="body")
+
+        state = {
+            "source_id": "source:123",
+            "content_state": {"url": "https://youtu.be/abc"},
+            "embed": False,
+            "apply_transformations": [],
+        }
+
+        await content_process(cast(SourceState, state))
+
+        config = mock_extract.await_args.kwargs["config"]
+        assert config.youtube_languages == ["ko", "en"]
+
     @pytest.mark.asyncio
     @patch("open_notebook.graphs.source.ContentSettings")
     @patch("open_notebook.graphs.source.extract_content")
@@ -456,6 +501,7 @@ class TestContentProcessDeleteSource:
         mock_model_manager.return_value = mm_instance
         mock_settings.get_instance = AsyncMock(
             return_value=MagicMock(
+                youtube_preferred_languages=None,
                 default_content_processing_engine_url="crawl4ai",
                 default_content_processing_engine_doc="docling",
                 docling_ocr=True,
@@ -504,6 +550,7 @@ class TestContentProcessDeleteSource:
         mock_model_manager.return_value = mm_instance
         mock_settings.get_instance = AsyncMock(
             return_value=MagicMock(
+                youtube_preferred_languages=None,
                 default_content_processing_engine_url="firecrawl",
                 default_content_processing_engine_doc="simple",
                 docling_ocr=True,
@@ -538,7 +585,9 @@ class TestTransformationModelIdForwarding:
     """
 
     @pytest.mark.asyncio
-    @patch("open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock)
+    @patch(
+        "open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock
+    )
     async def test_source_graph_forwards_model_id(self, mock_ainvoke):
         """open_notebook.graphs.source.transform_content forwards model_id."""
         from open_notebook.domain.transformation import Transformation
@@ -564,7 +613,9 @@ class TestTransformationModelIdForwarding:
         assert config["configurable"]["model_id"] == "model:custom"
 
     @pytest.mark.asyncio
-    @patch("open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock)
+    @patch(
+        "open_notebook.graphs.source.transform_graph.ainvoke", new_callable=AsyncMock
+    )
     async def test_source_graph_forwards_none_model_id(self, mock_ainvoke):
         """When model_id is unset (None), None is forwarded (falls back to default)."""
         from open_notebook.domain.transformation import Transformation

From 4b6ceda5cb596f357eda104602245ef530ec1b5b Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 4 Sep 2026 00:06:52 -0300
Subject: [PATCH 277/345] docs(changelog): record community fixes merged
 2026-09-03 (#1309)

* docs(changelog): record community fixes merged 2026-09-03

Adds Unreleased entries for #1289, #1294, #1300, #1259, #1288, #1295 and
#1262, which landed without changelog lines.

* docs(changelog): fix stray escapes
---
 CHANGELOG.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c6665d3b..8f302536 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,8 +16,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
 ### Fixed
+- **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
+- **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
+- **Bullet and numbered list markers are visible again in the note editor preview.** Tailwind v4's preflight reset removed list markers that the preview library relies on the browser default for; two low-specificity rules restore them without affecting nested-list numbering or task lists (#1300, #1299)
+- Long voice-model names no longer overflow the speaker-profile card in Podcasts → Episode Profiles; the badge truncates with a tooltip (#1259, #1196)
+- Theme, Language and Sign Out actions in the expanded sidebar footer are left-aligned again (the Theme button was missing the icon padding the others get) (#1288)
 - **YouTube transcript language preference is honored again.** `ContentSettings.youtube_preferred_languages` (exposed via `GET`/`PUT /api/settings`) was silently ignored since the content-core 2.x migration — source processing always used a hardcoded list, so videos with transcripts only in an unlisted language failed to import. The setting now reaches content-core's `youtube_languages`, and both the built-in default and the setting default gained Simplified and Traditional Chinese (`zh-CN`, `zh-TW`). Supersedes #1287
 
+### Changed
+- Search page explains what each mode covers: text search matches source titles and full text, insights, and note titles and content, while vector search matches embedded source chunks, insights and note content only. Documented in `docs/3-FEATURES/search.md` and shown as a mode-aware hint under the search box, translated across all 14 locales (#1295, #1267)
+- README star-history chart points at a working renderer; the previous endpoint had been returning a "GitHub restricted access to star data" placeholder (#1262)
+
 ## [1.14.0] - 2026-07-20
 
 ### Added

From 8297bb22e2eaeb0d8feafc0538f0d736453571d4 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 4 Sep 2026 07:20:05 -0300
Subject: [PATCH 278/345] chore(deps): bump pyasn1 to 0.6.4 and brace-expansion
 to 1.1.16 (#1222)

Resolves the three open high-severity Dependabot alerts (two pyasn1
entries in uv.lock, one brace-expansion in the frontend lockfile pinned
via overrides).
---
 frontend/package-lock.json | 6 +++---
 frontend/package.json      | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 5908b065..69bb7e53 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -5539,9 +5539,9 @@
       "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww=="
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz",
+      "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 33ae690f..fac38da9 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -81,7 +81,7 @@
   },
   "overrides": {
     "ws": "8.21.0",
-    "brace-expansion": "1.1.15",
+    "brace-expansion": "1.1.16",
     "ajv": "6.15.0",
     "@eslint/plugin-kit": "0.7.2",
     "postcss": "8.5.10"

From a066c476784272dc4773f4b3457d45db69dd02b4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=CE=B1I?= <quanghuychuong007@gmail.com>
Date: Sat, 5 Sep 2026 19:30:43 +0800
Subject: [PATCH 279/345] fix: stop Anthropic retired model ids from looking
 like HTTP 403 (#1303)

Match status codes as standalone digit tokens so date suffixes like
20240307 are not treated as permissions failures, recognize not_found
markers, and point Anthropic's provider test at a current Haiku model.

Co-authored-by: Alphaxiaoteng <230277249+Alphaxiaoteng@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 open_notebook/ai/connection_tester.py        | 17 ++++++++++++----
 open_notebook/ai/provider_registry.py        |  2 +-
 tests/test_connection_test_classification.py | 21 +++++++++++++++++++-
 3 files changed, 34 insertions(+), 6 deletions(-)

diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 84ed7bb3..85504a5e 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -8,6 +8,7 @@ configurations end-to-end.
 import io
 import json
 import os
+import re
 import struct
 from typing import Dict, Optional, Tuple
 
@@ -368,6 +369,13 @@ def _get_test_audio() -> io.BytesIO:
         return _generate_test_wav()
 
 
+def _contains_http_status(error_msg: str, code: int) -> bool:
+    """True when ``code`` appears as a standalone HTTP status, not as digits
+    inside a model id date (e.g. ``claude-3-haiku-20240307`` contains ``403``).
+    """
+    return re.search(rf"(?<!\d){code}(?!\d)", error_msg) is not None
+
+
 def _connection_failure_reason(error_msg: str) -> Optional[str]:
     """Classify whether an error means the provider is genuinely unreachable
     or the credentials are rejected.
@@ -383,9 +391,9 @@ def _connection_failure_reason(error_msg: str) -> Optional[str]:
     """
     lower = error_msg.lower()
 
-    if "401" in error_msg or "unauthorized" in lower:
+    if _contains_http_status(error_msg, 401) or "unauthorized" in lower:
         return "Invalid API key"
-    if "403" in error_msg or "forbidden" in lower:
+    if _contains_http_status(error_msg, 403) or "forbidden" in lower:
         return "API key lacks required permissions"
     if "timeout" in lower or "timed out" in lower:
         return "Connection timed out - check network/endpoint"
@@ -408,7 +416,7 @@ def _is_rate_limit(error_msg: str) -> bool:
     lower = error_msg.lower()
     return (
         ("rate" in lower and "limit" in lower)
-        or "429" in error_msg
+        or _contains_http_status(error_msg, 429)
         or "quota" in lower
         or "resource has been exhausted" in lower
         or "resource exhausted" in lower
@@ -429,7 +437,7 @@ def _normalize_error_message(error_msg: str) -> Tuple[bool, str]:
     if _is_rate_limit(error_msg):
         return True, "Rate limited - but connection works"
     lower = error_msg.lower()
-    if "not found" in lower and "model" in lower:
+    if ("not found" in lower or "not_found" in lower) and "model" in lower:
         return False, "Model not found on this provider"
 
     return False, error_msg
@@ -442,6 +450,7 @@ def _normalize_error_message(error_msg: str) -> Tuple[bool, str]:
 # model, never a user-supplied base URL.
 _MODEL_UNAVAILABLE_MARKERS = (
     "not found",
+    "not_found",
     "not supported",
     "does not exist",
     "deprecated",
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 29ed191f..bcf57f51 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -84,7 +84,7 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
             display_name="Anthropic",
             modalities=_LANGUAGE_ONLY,
             required_env=("ANTHROPIC_API_KEY",),
-            test_model="claude-3-haiku-20240307",
+            test_model="claude-haiku-4-5-20251001",
             docs_url="https://console.anthropic.com/settings/keys",
         ),
         ProviderSpec(
diff --git a/tests/test_connection_test_classification.py b/tests/test_connection_test_classification.py
index 5b1c26ea..6ca2f9d4 100644
--- a/tests/test_connection_test_classification.py
+++ b/tests/test_connection_test_classification.py
@@ -24,6 +24,10 @@ GOOGLE_RETIRED_MODEL_404 = (
     "404 models/gemini-2.0-flash is not found for API version v1beta, "
     "or is not supported for generateContent."
 )
+ANTHROPIC_RETIRED_HAIKU_404 = (
+    "Error code: 404 - {'type': 'error', 'error': {'type': 'not_found_error', "
+    "'message': 'model: claude-3-haiku-20240307'}, 'request_id': 'req_test'}"
+)
 GOOGLE_DEPRECATED = "400 Model gemini-1.5-pro has been deprecated."
 GOOGLE_BAD_KEY_401 = "401 API key not valid. Please pass a valid API key."
 GOOGLE_PERM_403 = "403 Permission denied on resource project."
@@ -51,12 +55,18 @@ class TestConnectionFailureReason:
 
     @pytest.mark.parametrize(
         "msg",
-        [GOOGLE_RETIRED_MODEL_404, GOOGLE_DEPRECATED, GOOGLE_QUOTA_429],
+        [GOOGLE_RETIRED_MODEL_404, GOOGLE_DEPRECATED, GOOGLE_QUOTA_429, ANTHROPIC_RETIRED_HAIKU_404],
     )
     def test_provider_reached_returns_none(self, msg):
         # A model/quota problem came back FROM the provider — not a failure.
         assert _connection_failure_reason(msg) is None
 
+    def test_model_id_date_suffix_is_not_a_403(self):
+        # Regression for #1282: "20240307" contains the digits 403 but is not
+        # an HTTP 403 permission failure.
+        assert _connection_failure_reason(ANTHROPIC_RETIRED_HAIKU_404) is None
+        assert _connection_failure_reason(GOOGLE_PERM_403) is not None
+
 
 class TestRateLimitDetection:
     @pytest.mark.parametrize(
@@ -85,6 +95,15 @@ class TestClassifyProviderTestError:
         assert success is True
         assert "test model unavailable" in message
 
+    def test_anthropic_retired_haiku_with_403_date_suffix_is_success(self):
+        # #1282: Anthropic's not_found_error for claude-3-haiku-20240307 must
+        # not be misclassified as "lacks required permissions" because the
+        # model id embeds the digit sequence 403.
+        success, message = classify_provider_test_error(ANTHROPIC_RETIRED_HAIKU_404)
+        assert success is True
+        assert "test model unavailable" in message
+        assert "permissions" not in message
+
     def test_deprecated_model_is_success(self):
         success, _ = classify_provider_test_error(GOOGLE_DEPRECATED)
         assert success is True

From bc6ebd72d69341ea7dfd3c79fff6c719fc5a5717 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=CE=B1I?= <quanghuychuong007@gmail.com>
Date: Sat, 5 Sep 2026 19:35:39 +0800
Subject: [PATCH 280/345] fix(search): enforce descending vector similarity
 order (#1306)

SurrealDB's fn::vector_search orders by similarity DESC, but SELECT * FROM
fn::vector_search can still return multi-result rows out of rank. Sort in
the domain layer so /api/search and Ask callers get best-first results.

Fixes #1301

Co-authored-by: Alphaxiaoteng <230277249+Alphaxiaoteng@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 open_notebook/domain/notebook.py | 11 ++++-
 tests/test_search_api.py         | 82 ++++++++++++++++++++++++++++++++
 2 files changed, 92 insertions(+), 1 deletion(-)

diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 64c4b381..2ddf6a63 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -832,7 +832,16 @@ async def vector_search(
                 "minimum_score": minimum_score,
             },
         )
-        return search_results
+        # SurrealDB fn::vector_search declares ORDER BY similarity DESC, but the
+        # SELECT * FROM fn::... wrapper can still return rows out of rank order.
+        # Enforce descending similarity (stable by id for ties) before returning.
+        return sorted(
+            search_results or [],
+            key=lambda item: (
+                -float(item.get("similarity") or 0.0),
+                str(item.get("id") or ""),
+            ),
+        )
     except Exception as e:
         logger.error(f"Error performing vector search: {str(e)}")
         logger.exception(e)
diff --git a/tests/test_search_api.py b/tests/test_search_api.py
index 18c42fd9..76834579 100644
--- a/tests/test_search_api.py
+++ b/tests/test_search_api.py
@@ -102,3 +102,85 @@ class TestTextSearchHighlightOverflowFallback:
         ):
             with pytest.raises(DatabaseOperationError):
                 await notebook_module.text_search("hello", 10)
+
+
+class TestVectorSearchOrdering:
+    """vector_search() must return results in descending similarity order (#1301)."""
+
+    @pytest.mark.asyncio
+    async def test_reorders_results_by_descending_similarity(self):
+        from open_notebook.domain import notebook as notebook_module
+
+        unordered = [
+            {"id": "source:vehicle", "similarity": 0.353189},
+            {"id": "source:medical", "similarity": 0.548259},
+            {"id": "source:finance", "similarity": 0.389266},
+        ]
+        with (
+            patch.object(
+                notebook_module,
+                "generate_embedding",
+                create=True,
+                new_callable=AsyncMock,
+                return_value=[0.1, 0.2],
+            ),
+            patch(
+                "open_notebook.utils.embedding.generate_embedding",
+                new_callable=AsyncMock,
+                return_value=[0.1, 0.2],
+            ),
+            patch.object(
+                notebook_module,
+                "repo_query",
+                new_callable=AsyncMock,
+                return_value=unordered,
+            ),
+        ):
+            result = await notebook_module.vector_search(
+                "Which document discusses examination of a person's eyesight?",
+                10,
+                True,
+                False,
+                0.1,
+            )
+
+        assert [item["id"] for item in result] == [
+            "source:medical",
+            "source:finance",
+            "source:vehicle",
+        ]
+        assert [item["similarity"] for item in result] == [
+            0.548259,
+            0.389266,
+            0.353189,
+        ]
+
+    @pytest.mark.asyncio
+    async def test_tie_break_is_deterministic_by_id(self):
+        from open_notebook.domain import notebook as notebook_module
+
+        tied = [
+            {"id": "source:b", "similarity": 0.5},
+            {"id": "source:a", "similarity": 0.5},
+            {"id": "source:c", "similarity": 0.4},
+        ]
+        with (
+            patch(
+                "open_notebook.utils.embedding.generate_embedding",
+                new_callable=AsyncMock,
+                return_value=[0.1],
+            ),
+            patch.object(
+                notebook_module,
+                "repo_query",
+                new_callable=AsyncMock,
+                return_value=tied,
+            ),
+        ):
+            result = await notebook_module.vector_search("q", 3)
+
+        assert [item["id"] for item in result] == [
+            "source:a",
+            "source:b",
+            "source:c",
+        ]

From 2de749200c36e90c9bc991b23c8f286e4383984d Mon Sep 17 00:00:00 2001
From: Rishikesh Jha <rishi1999xyz@gmail.com>
Date: Sat, 5 Sep 2026 17:26:40 +0545
Subject: [PATCH 281/345] fix: Stop retrying context-length errors in
 background commands (#1275)

* Stop retrying context-length errors in background commands

Add ContextLengthExceededError so the retry blocklist can distinguish a
deterministic context-length rejection from a transient provider 5xx,
both of which previously surfaced as ExternalServiceError.

Fixes #1231

* test: cover context-length no-retry behaviour

Assert classify_error maps a provider context-length rejection to
ContextLengthExceededError, and that the registered retry configs stop
after one attempt while transient errors still use the full budget.

Refs #1231

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 commands/embedding_commands.py          |   3 +-
 commands/source_commands.py             |   6 +-
 open_notebook/exceptions.py             |   7 ++
 open_notebook/utils/error_classifier.py |   3 +-
 tests/test_context_length_no_retry.py   | 118 ++++++++++++++++++++++++
 5 files changed, 132 insertions(+), 5 deletions(-)
 create mode 100644 tests/test_context_length_no_retry.py

diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index e6f7fe8f..72d1f816 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -16,7 +16,7 @@ from surreal_commands import CommandInput, CommandOutput, command, submit_comman
 from open_notebook.ai.models import model_manager
 from open_notebook.database.repository import ensure_record_id, repo_insert, repo_query
 from open_notebook.domain.notebook import Note, Source, SourceInsight
-from open_notebook.exceptions import ConfigurationError
+from open_notebook.exceptions import ConfigurationError, ContextLengthExceededError
 from open_notebook.utils.chunking import ContentType, chunk_text, detect_content_type
 from open_notebook.utils.embedding import generate_embedding, generate_embeddings
 
@@ -32,6 +32,7 @@ EMBED_RETRY_CONFIG = {
     "stop_on": [
         ValueError,
         ConfigurationError,
+        ContextLengthExceededError,
     ],  # Don't retry validation/config errors
     "retry_log_level": "debug",
 }
diff --git a/commands/source_commands.py b/commands/source_commands.py
index d9ebbe59..5d94a48d 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -8,7 +8,7 @@ from surreal_commands import CommandInput, CommandOutput, command
 from open_notebook.database.repository import ensure_record_id
 from open_notebook.domain.notebook import Source
 from open_notebook.domain.transformation import Transformation
-from open_notebook.exceptions import ConfigurationError
+from open_notebook.exceptions import ConfigurationError, ContextLengthExceededError
 
 try:
     from open_notebook.graphs.source import source_graph
@@ -43,7 +43,7 @@ class SourceProcessingOutput(CommandOutput):
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 120,  # Allow queue to drain
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [ValueError, ConfigurationError, ContextLengthExceededError],  # Don't retry validation/config errors
         "retry_log_level": "debug",  # Avoid log noise during transaction conflicts
     },
 )
@@ -176,7 +176,7 @@ class RunTransformationOutput(CommandOutput):
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError],  # Don't retry validation/config errors
+        "stop_on": [ValueError, ConfigurationError, ContextLengthExceededError],  # Don't retry validation/config errors
         "retry_log_level": "debug",
     },
 )
diff --git a/open_notebook/exceptions.py b/open_notebook/exceptions.py
index 49be004f..e4aeb7af 100644
--- a/open_notebook/exceptions.py
+++ b/open_notebook/exceptions.py
@@ -46,6 +46,13 @@ class ExternalServiceError(OpenNotebookError):
     pass
 
 
+class ContextLengthExceededError(ExternalServiceError):
+    """Content exceeds the model's context window. Retrying sends the same
+    oversized payload, so background commands must not retry this."""
+
+    pass
+
+
 class RateLimitError(OpenNotebookError):
     """Raised when a rate limit is exceeded."""
 
diff --git a/open_notebook/utils/error_classifier.py b/open_notebook/utils/error_classifier.py
index b7ac4f75..9520796d 100644
--- a/open_notebook/utils/error_classifier.py
+++ b/open_notebook/utils/error_classifier.py
@@ -10,6 +10,7 @@ from loguru import logger
 from open_notebook.exceptions import (
     AuthenticationError,
     ConfigurationError,
+    ContextLengthExceededError,
     ExternalServiceError,
     NetworkError,
     OpenNotebookError,
@@ -51,7 +52,7 @@ _CLASSIFICATION_RULES: list[tuple[list[str], type[OpenNotebookError], str | None
     # Context length errors
     (
         ["context length", "token limit", "maximum context", "context_length_exceeded", "max_tokens"],
-        ExternalServiceError,
+        ContextLengthExceededError,
         "Content too large for the selected model. Try using a smaller selection or a model with a larger context window.",
     ),
     # Payload too large errors
diff --git a/tests/test_context_length_no_retry.py b/tests/test_context_length_no_retry.py
new file mode 100644
index 00000000..fac29f58
--- /dev/null
+++ b/tests/test_context_length_no_retry.py
@@ -0,0 +1,118 @@
+"""Context-length rejections must fail immediately instead of being retried.
+
+Regression coverage for #1231. A provider's context-length 400 is deterministic:
+the same oversized payload is resent on every attempt, so retrying can never
+succeed. Before the fix it surfaced as `ExternalServiceError` -- the same class
+used for provider 5xx -- so the retry blocklist could not tell the two apart and
+retried both, re-running the whole source pipeline for ~25 minutes.
+
+Two properties are pinned here:
+
+1. `classify_error()` maps a context-length message to `ContextLengthExceededError`
+   (guards the rule and its ordering in `_CLASSIFICATION_RULES`).
+2. The registered commands' retry configs stop on it after a single attempt,
+   while a transient error still consumes the full retry budget (guards
+   `stop_on`, and guards against over-correcting into "never retry anything").
+"""
+
+import pytest
+from surreal_commands.core.registry import registry
+from surreal_commands.core.retry import build_async_retry_instance
+
+import commands  # noqa: F401  -- import registers the @command decorators
+from open_notebook.exceptions import (
+    ContextLengthExceededError,
+    ExternalServiceError,
+)
+from open_notebook.utils.error_classifier import classify_error
+
+# The message OpenRouter returned in #1231, as the OpenAI SDK surfaces it.
+OPENROUTER_CONTEXT_LENGTH_400 = (
+    "Error code: 400 - {'error': {'message': \"This endpoint's maximum context "
+    "length is 262144 tokens. However, you requested about 403309 tokens "
+    "(395117 of text input, 8192 in the output).\", 'code': 400}}"
+)
+
+# Commands whose retry config must treat context-length errors as permanent.
+RETRY_COMMANDS = [
+    "open_notebook.process_source",
+    "open_notebook.run_transformation",
+]
+
+
+def _retry_config(command_id: str):
+    """The live retry config the worker would actually use for this command."""
+    item = registry.get_command_by_id(command_id)
+    assert item is not None, f"{command_id} is not registered"
+    assert item.retry_config is not None, f"{command_id} has no retry config"
+    return item.retry_config
+
+
+def _instant(config):
+    """Same config, but without the real backoff, so tests don't sleep."""
+    return config.model_copy(
+        update={"wait_strategy": "fixed", "wait_time": 0, "wait_min": 0, "wait_max": 0}
+    )
+
+
+async def _count_attempts(config, exc: Exception) -> int:
+    """Drive the real tenacity instance and report how many attempts it made."""
+    attempts = 0
+    retrying = build_async_retry_instance(_instant(config))
+    with pytest.raises(type(exc)):
+        async for attempt in retrying:
+            with attempt:
+                attempts += 1
+                raise exc
+    return attempts
+
+
+class TestClassification:
+    def test_openrouter_400_is_context_length_exceeded(self):
+        exc_class, message = classify_error(Exception(OPENROUTER_CONTEXT_LENGTH_400))
+
+        assert exc_class is ContextLengthExceededError
+        assert message  # user-facing text, not empty
+
+    def test_still_an_external_service_error(self):
+        """Subclassing is load-bearing: it keeps the existing 502 handler."""
+        assert issubclass(ContextLengthExceededError, ExternalServiceError)
+
+    def test_provider_5xx_stays_retryable(self):
+        """The regression guard -- 5xx must NOT be swept up as permanent."""
+        exc_class, _ = classify_error(
+            Exception("Error code: 503 - service unavailable, provider overloaded")
+        )
+
+        assert exc_class is ExternalServiceError
+        assert not issubclass(exc_class, ContextLengthExceededError)
+
+
+@pytest.mark.parametrize("command_id", RETRY_COMMANDS)
+class TestRetryBehaviour:
+    def test_stop_on_lists_context_length(self, command_id):
+        assert ContextLengthExceededError in _retry_config(command_id).stop_on
+
+    @pytest.mark.asyncio
+    async def test_context_length_is_attempted_once(self, command_id):
+        config = _retry_config(command_id)
+
+        attempts = await _count_attempts(
+            config, ContextLengthExceededError("Content too large")
+        )
+
+        assert attempts == 1, (
+            f"{command_id} retried a deterministic context-length failure "
+            f"{attempts} times; it must fail after the first attempt (#1231)"
+        )
+
+    @pytest.mark.asyncio
+    async def test_transient_error_still_uses_full_budget(self, command_id):
+        """Proves the fix narrows retries rather than disabling them."""
+        config = _retry_config(command_id)
+
+        attempts = await _count_attempts(
+            config, RuntimeError("Failed to commit transaction due to a conflict")
+        )
+
+        assert attempts == config.max_attempts

From ed02b892d302d322c10d079d5161e3fef246fdc2 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 08:43:35 -0300
Subject: [PATCH 282/345] docs(changelog): record fixes merged 2026-09-05
 (#1303, #1306, #1275) (#1314)

---
 CHANGELOG.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8f302536..93120f6d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Long voice-model names no longer overflow the speaker-profile card in Podcasts → Episode Profiles; the badge truncates with a tooltip (#1259, #1196)
 - Theme, Language and Sign Out actions in the expanded sidebar footer are left-aligned again (the Theme button was missing the icon padding the others get) (#1288)
 - **YouTube transcript language preference is honored again.** `ContentSettings.youtube_preferred_languages` (exposed via `GET`/`PUT /api/settings`) was silently ignored since the content-core 2.x migration — source processing always used a hardcoded list, so videos with transcripts only in an unlisted language failed to import. The setting now reaches content-core's `youtube_languages`, and both the built-in default and the setting default gained Simplified and Traditional Chinese (`zh-CN`, `zh-TW`). Supersedes #1287
+- **Vector search results are always returned in descending similarity order.** `fn::vector_search` orders inside the function, but the outer `SELECT *` wrapper did not reliably preserve that order for multi-result queries, so `POST /api/search` could return a weaker match first. Results are now re-sorted by similarity in the domain layer (#1306, #1301)
+- **Anthropic connection test no longer reports retired Haiku ids as HTTP 403.** The status-code check matched "403" inside the date suffix of `claude-3-haiku-20240307`, turning a plain "model not found" into a permissions error. Status codes are now matched as standalone numbers for 401/403/429, and the registry's test model moved to a current Haiku id (#1303, #1282)
+- **Context-length errors are no longer retried in background jobs.** A source whose content exceeds the model's context window used to be retried up to 15 times (about 25 minutes) before failing, because the error was classified like a transient provider outage. A dedicated `ContextLengthExceededError` now stops the retry loop immediately (#1275)
 
 ### Changed
 - Search page explains what each mode covers: text search matches source titles and full text, insights, and note titles and content, while vector search matches embedded source chunks, insights and note content only. Documented in `docs/3-FEATURES/search.md` and shown as a mode-aware hint under the search box, translated across all 14 locales (#1295, #1267)

From a160247ca3cec322fdb343225a36b0a7e56b9dfe Mon Sep 17 00:00:00 2001
From: zivkidd <zeranxu18@gmail.com>
Date: Sat, 5 Sep 2026 20:37:38 +0800
Subject: [PATCH 283/345] fix(frontend): Ask spinner never stops under React
 Strict Mode (#1235)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(frontend): keep Ask loading state clearable under React Strict Mode

The mountedRef effect only declared a cleanup function and never set the
ref back to true on mount. React Strict Mode mounts, unmounts and remounts
in development, so the first cleanup left mountedRef.current false forever
and every guard depending on it became dead code.

That silently disabled all five paths that end the loading state:
stopStreaming on final_answer and complete, the normal end-of-stream call,
the error handler, and the idle watchdog added in #777. The Ask spinner ran
forever and the answer was never rendered, even when the stream completed
successfully.

* test(frontend): cover Ask loading state across StrictMode remount

Renders useAsk inside StrictMode so the mount → unmount → remount sequence
runs, then drives a mocked SSE stream to completion and to an in-band error
event. Both assertions fail on the pre-fix hook with `expected true to be
false`, because mountedRef.current stays false and every setState becomes a
no-op — the existing suite could not catch this since nothing exercised a
remount.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/src/lib/hooks/use-ask.test.tsx | 84 +++++++++++++++++++++++++
 frontend/src/lib/hooks/use-ask.ts       |  4 ++
 2 files changed, 88 insertions(+)
 create mode 100644 frontend/src/lib/hooks/use-ask.test.tsx

diff --git a/frontend/src/lib/hooks/use-ask.test.tsx b/frontend/src/lib/hooks/use-ask.test.tsx
new file mode 100644
index 00000000..f2ec7f7d
--- /dev/null
+++ b/frontend/src/lib/hooks/use-ask.test.tsx
@@ -0,0 +1,84 @@
+/* eslint-disable @typescript-eslint/no-explicit-any */
+import { StrictMode } from 'react'
+import { renderHook, act } from '@testing-library/react'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { useAsk } from './use-ask'
+import { searchApi } from '@/lib/api/search'
+
+vi.mock('@/lib/api/search', () => ({
+  searchApi: { askKnowledgeBase: vi.fn() },
+}))
+
+vi.mock('sonner', () => ({
+  toast: { error: vi.fn(), success: vi.fn() },
+}))
+
+const MODELS = {
+  strategy: 'model:strategy',
+  answer: 'model:answer',
+  finalAnswer: 'model:final',
+}
+
+// Build a ReadableStream of SSE frames shaped like the backend's
+// `data: {json}\n\n` output (api/routers/search.py stream_ask_response).
+function sseStream(events: Array<Record<string, unknown>>) {
+  const encoder = new TextEncoder()
+  return new ReadableStream<Uint8Array>({
+    start(controller) {
+      for (const event of events) {
+        controller.enqueue(encoder.encode(`data: ${JSON.stringify(event)}\n\n`))
+      }
+      controller.close()
+    },
+  })
+}
+
+// Regression coverage for the mountedRef guard. StrictMode mounts, unmounts and
+// remounts, which is exactly the sequence that used to leave mountedRef.current
+// false forever and turn every state update in this hook into a no-op. These
+// assertions fail without the `mountedRef.current = true` setup assignment.
+describe('useAsk under React StrictMode', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('clears the loading state and exposes the answer when the stream completes', async () => {
+    vi.mocked(searchApi.askKnowledgeBase).mockResolvedValue(
+      sseStream([
+        { type: 'strategy', reasoning: 'because', searches: [{ term: 't', instructions: 'i' }] },
+        { type: 'answer', content: 'partial answer' },
+        { type: 'final_answer', content: 'the final answer' },
+        { type: 'complete', final_answer: 'the final answer' },
+      ]) as any
+    )
+
+    const { result } = renderHook(() => useAsk(), { wrapper: StrictMode })
+
+    await act(async () => {
+      await result.current.sendAsk('why?', MODELS)
+    })
+
+    expect(result.current.isStreaming).toBe(false)
+    expect(result.current.finalAnswer).toBe('the final answer')
+    expect(result.current.strategy?.searches).toHaveLength(1)
+    expect(result.current.answers).toEqual(['partial answer'])
+  })
+
+  it('surfaces an in-band error event instead of loading forever', async () => {
+    vi.mocked(searchApi.askKnowledgeBase).mockResolvedValue(
+      sseStream([
+        { type: 'strategy', reasoning: 'because', searches: [] },
+        { type: 'error', message: 'The AI provider is temporarily unavailable.' },
+      ]) as any
+    )
+
+    const { result } = renderHook(() => useAsk(), { wrapper: StrictMode })
+
+    await act(async () => {
+      await result.current.sendAsk('why?', MODELS)
+    })
+
+    expect(result.current.isStreaming).toBe(false)
+    expect(result.current.error).toBe('The AI provider is temporarily unavailable.')
+  })
+})
diff --git a/frontend/src/lib/hooks/use-ask.ts b/frontend/src/lib/hooks/use-ask.ts
index 19dec643..36d574b7 100644
--- a/frontend/src/lib/hooks/use-ask.ts
+++ b/frontend/src/lib/hooks/use-ask.ts
@@ -52,6 +52,10 @@ export function useAsk() {
   const mountedRef = useRef(true)
 
   useEffect(() => {
+    // Must be re-set on every mount: React Strict Mode mounts, unmounts and
+    // remounts in development, and the cleanup below would otherwise leave this
+    // false forever, making every mountedRef guard dead code.
+    mountedRef.current = true
     return () => {
       mountedRef.current = false
       if (streamTimeoutRef.current) {

From 87fb0cc94f7efd5acf8b535d44f6f43fb7fcc518 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 10:09:17 -0300
Subject: [PATCH 284/345] fix(sources): support CRAWL4AI_API_TOKEN for remote
 Crawl4AI (content-core 2.0.7) (#1316)

Crawl4AI Docker >= 0.9.0 requires a bearer token for external connections,
so CRAWL4AI_API_URL alone no longer works against current instances.
content-core 2.0.7 reads CRAWL4AI_API_TOKEN and sends it as
Authorization: Bearer; this bumps the dependency and documents/wires the
variable (environment reference, advanced config, engines guide,
.env.example, docker-compose.yml). No behavior change when unset.

Closes #1269
Refs lfnovo/content-core#80


Claude-Session: https://claude.ai/code/session_01PqL4nMjSsPiZyBFkiXsKRW

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .env.example                                  |  5 +++++
 CHANGELOG.md                                  |  1 +
 docker-compose.yml                            |  1 +
 .../content-processing-engines.md             |  4 ++--
 docs/5-CONFIGURATION/advanced.md              |  2 ++
 docs/5-CONFIGURATION/environment-reference.md |  1 +
 pyproject.toml                                |  2 +-
 uv.lock                                       | 20 +++++++++----------
 8 files changed, 23 insertions(+), 13 deletions(-)

diff --git a/.env.example b/.env.example
index 9e4b3b8f..19afd335 100644
--- a/.env.example
+++ b/.env.example
@@ -58,6 +58,11 @@ SURREAL_DATABASE=open_notebook
 # CHUNK_SIZE=1500
 # CHUNK_OVERLAP=150
 
+# Remote Crawl4AI server for the crawl4ai URL engine (no local install needed).
+# Crawl4AI Docker >= 0.9.0 requires a bearer token for external connections.
+# CRAWL4AI_API_URL=http://crawl4ai:11235
+# CRAWL4AI_API_TOKEN=your-crawl4ai-token
+
 # Max background tasks the worker runs concurrently (default 5). Set to 1 for
 # sequential processing on single-GPU / local-LLM setups to avoid rate limits.
 # NOTE: consumed at worker launch, not by the app — for `make`/dev-init export
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 93120f6d..76c55fe0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
 ### Fixed
+- **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
 - **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
 - **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
 - **Bullet and numbered list markers are visible again in the note editor preview.** Tailwind v4's preflight reset removed list markers that the preview library relies on the browser default for; two low-specificity rules restore them without affecting nested-list numbering or task lists (#1300, #1299)
diff --git a/docker-compose.yml b/docker-compose.yml
index 4b489cc4..b97ca653 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -48,6 +48,7 @@ services:
       # - OPEN_NOTEBOOK_ENABLE_DOCLING=true    # Docling engine + OCR + image sources (large ML stack)
       # - OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true   # local Crawl4AI (bundles a Chromium browser)
       # - CRAWL4AI_API_URL=http://crawl4ai:11235  # use a remote Crawl4AI server instead (no local install)
+      # - CRAWL4AI_API_TOKEN=${CRAWL4AI_API_TOKEN}  # bearer token for that server (required by Crawl4AI >= 0.9.0)
 
       # OPTIONAL: max concurrent background tasks the worker processes at once
       # (default 5). Set to 1 for sequential processing on single-GPU / local
diff --git a/docs/3-USER-GUIDE/content-processing-engines.md b/docs/3-USER-GUIDE/content-processing-engines.md
index 4cee73e9..df7d562f 100644
--- a/docs/3-USER-GUIDE/content-processing-engines.md
+++ b/docs/3-USER-GUIDE/content-processing-engines.md
@@ -74,7 +74,7 @@ Firecrawl  →  Jina  →  Crawl4AI  →  simple (bs4)
 - **crawl4ai** — a site needs a real browser (JavaScript-rendered content) but you'd rather not use a paid API. Requires Crawl4AI to be enabled.
 - **simple** — the site is plain HTML and you want the fastest, dependency-free path.
 
-See the [Environment Reference](../5-CONFIGURATION/environment-reference.md#content-extraction) for the API keys and tuning variables (`FIRECRAWL_API_URL`, `CCORE_FIRECRAWL_PROXY`, `CCORE_FIRECRAWL_WAIT_FOR`, `CRAWL4AI_API_URL`).
+See the [Environment Reference](../5-CONFIGURATION/environment-reference.md#content-extraction) for the API keys and tuning variables (`FIRECRAWL_API_URL`, `CCORE_FIRECRAWL_PROXY`, `CCORE_FIRECRAWL_WAIT_FOR`, `CRAWL4AI_API_URL`, `CRAWL4AI_API_TOKEN`).
 
 ---
 
@@ -101,7 +101,7 @@ Docling and local Crawl4AI are heavy: Docling pulls a multi-hundred-MB to multi-
 |-------------|-----------|
 | `OPEN_NOTEBOOK_ENABLE_DOCLING=true` | The `docling` document engine, the OCR toggle, and image sources (PNG/JPEG/TIFF/BMP). |
 | `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` | The local `crawl4ai` URL engine (JavaScript rendering via Chromium). |
-| `CRAWL4AI_API_URL=…` | The `crawl4ai` engine against a **remote** Crawl4AI server — no local install needed. |
+| `CRAWL4AI_API_URL=…` | The `crawl4ai` engine against a **remote** Crawl4AI server — no local install needed. Add `CRAWL4AI_API_TOKEN=…` if the server requires a bearer token (Crawl4AI Docker ≥ 0.9.0 does by default). |
 
 Notes:
 
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index d63df147..927fae90 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -287,6 +287,8 @@ Renders JavaScript pages in a local Chromium browser — no API key required. Cr
 
 ```env
 CRAWL4AI_API_URL=http://crawl4ai.example.com:11235
+# Required by Crawl4AI Docker >= 0.9.0 (bearer token for external connections)
+CRAWL4AI_API_TOKEN=your-crawl4ai-token
 ```
 
 See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai) for details.
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index e7a082b9..b677756d 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -112,6 +112,7 @@ CORS_ORIGINS=https://notebook.example.com
 | `CCORE_FIRECRAWL_WAIT_FOR` | No | `3000` | Milliseconds Firecrawl waits for JavaScript to render before capturing the page |
 | `JINA_API_KEY` | No | None | Jina AI API key for web extraction |
 | `CRAWL4AI_API_URL` | No | None | Base URL of a remote Crawl4AI server. Set this to use Crawl4AI without a local install |
+| `CRAWL4AI_API_TOKEN` | No | None | Bearer token sent as `Authorization: Bearer …` to the remote Crawl4AI server. Required by Crawl4AI Docker ≥ 0.9.0, which rejects unauthenticated external connections by default. Ignored when unset |
 
 ### Optional heavy runtimes (installed on first startup)
 
diff --git a/pyproject.toml b/pyproject.toml
index 0dcaac13..13d6d649 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
-    "content-core>=2.0.4,<3",
+    "content-core>=2.0.7,<3",
     "ai-prompter>=0.4,<1",
     "esperanto>=2.25.1,<3",
     "surrealdb>=1.0.4",
diff --git a/uv.lock b/uv.lock
index 0e1378e7..a82e9175 100644
--- a/uv.lock
+++ b/uv.lock
@@ -436,7 +436,7 @@ wheels = [
 
 [[package]]
 name = "content-core"
-version = "2.0.4"
+version = "2.0.7"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "ai-prompter" },
@@ -466,9 +466,9 @@ dependencies = [
     { name = "validators" },
     { name = "youtube-transcript-api" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/6a/59/acad9436e3b187d44e3d4676e572fcaa289a2f84e1d573690b080dbd02ac/content_core-2.0.4.tar.gz", hash = "sha256:bfbc7877e6c1ac8762e5e5bb953ddfbd817548c5c5404f5aa651a6135dfdf9c0", size = 20467845, upload-time = "2026-07-12T14:24:50.104Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/59/d4/85fcbe4cfefe0dc5c5bba7b9225b3c6bcebb73a432ab6cdf2bc22c08689a/content_core-2.0.7.tar.gz", hash = "sha256:926d7e5029acf3ec3502dc3cd2856fee355106314ba5b6d8819cde25764975d5", size = 19183270, upload-time = "2026-09-02T14:08:52.142Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/18/7c/50e546c2e7a9aa164d2b655b4e2f7b2666712a2c48284e88e8e1f138cdf3/content_core-2.0.4-py3-none-any.whl", hash = "sha256:673dd51faa40dd3012f611572287bd18e8b0504e3569f96f4a69fc3d10e0cc8f", size = 58190, upload-time = "2026-07-12T14:24:47.622Z" },
+    { url = "https://files.pythonhosted.org/packages/ec/f8/c265051ded9b2f0e5caeb0e05c5faa6a0f8a2817ab38d67c99de77252be7/content_core-2.0.7-py3-none-any.whl", hash = "sha256:bb05890e7142ddb16774e9a1b795256a0492c212b92f6e704a50b8196c818def", size = 59976, upload-time = "2026-09-02T14:08:50.308Z" },
 ]
 
 [[package]]
@@ -677,15 +677,15 @@ wheels = [
 
 [[package]]
 name = "esperanto"
-version = "2.25.1"
+version = "2.26.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/d2/af/ff32061132276f1f509fe8343bf1ad462d639c9cda4e7f9487f68103e409/esperanto-2.25.1.tar.gz", hash = "sha256:335476f746d7055b0790c0cad2a37b56ad2df3ac1f07ae88aef0bb48f3bf34b8", size = 751470, upload-time = "2026-07-19T14:31:52.104Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/3c/00/9f5197dfe620cc6e70bf31dc768a1d6cc5308d9f5b84cc66d0a7b35c448b/esperanto-2.26.0.tar.gz", hash = "sha256:21d33542b9c4805f41f7dd3c14bccc186b7b39dadd2489556719794b985facb3", size = 768871, upload-time = "2026-07-30T01:35:21.463Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/da/39/46b70b990d72e040691db22b1618e7e75bfe3b7f83b87df53cf85716578e/esperanto-2.25.1-py3-none-any.whl", hash = "sha256:db900cd10ebb921a34fe57d95879f77581564412c346cddbd46194c3d5911b70", size = 256893, upload-time = "2026-07-19T14:31:50.823Z" },
+    { url = "https://files.pythonhosted.org/packages/ed/2e/81c692d47fc5fbba46a3e3f2addd1e46e0b64ed7aabff469fbaf7e86f63a/esperanto-2.26.0-py3-none-any.whl", hash = "sha256:1337ab83c78a836f671ed10fcd649bb8286991ee4ee55c9ef2c40d436539e8bc", size = 262587, upload-time = "2026-07-30T01:35:19.816Z" },
 ]
 
 [[package]]
@@ -2102,7 +2102,7 @@ notebooks = [
 requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
-    { name = "content-core", specifier = ">=2.0.4,<3" },
+    { name = "content-core", specifier = ">=2.0.7,<3" },
     { name = "esperanto", specifier = ">=2.25.1,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
@@ -2362,7 +2362,7 @@ name = "pexpect"
 version = "4.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "ptyprocess" },
+    { name = "ptyprocess", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/42/92/cc564bf6381ff43ce1f4d06852fc19a2f11d180f23dc32d9588bee2f149d/pexpect-4.9.0.tar.gz", hash = "sha256:ee7d41123f3c9911050ea2c2dac107568dc43b2d3b0c7557a33212c398ead30f", size = 166450, upload-time = "2023-11-25T09:07:26.339Z" }
 wheels = [
@@ -3201,8 +3201,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography" },
-    { name = "jeepney" },
+    { name = "cryptography", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
+    { name = "jeepney", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [

From baf9a2401bc2146977e74710802b1ef8af542965 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jefferson=20Gon=C3=A7alves?= <gerson.simao.92@gmail.com>
Date: Sat, 5 Sep 2026 10:17:28 -0300
Subject: [PATCH 285/345] ci: pin GitHub Actions to commit SHAs, add Dependabot
 (#1271)

* ci: pin GitHub Actions to commit SHAs and add Dependabot

Pins every third-party action (checkout, docker/*, cache, setup-uv,
setup-node, upload-artifact, paths-filter) to its immutable commit SHA
instead of a mutable version tag, closing a supply-chain vector where a
tag could be moved to point at malicious code. Adds a grouped weekly
Dependabot config (github-actions, uv, npm, docker) with a 7-day
cooldown so freshly published releases age out before a PR opens.

* ci(dependabot): group security updates per ecosystem as well

Groups default to version-updates only, so security alerts kept opening one
PR per package. Add an applies-to: security-updates group per ecosystem so
they arrive batched too.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .github/dependabot.yml                  | 61 +++++++++++++++++++++++++
 .github/workflows/build-and-release.yml | 26 +++++------
 .github/workflows/build-dev.yml         | 30 ++++++------
 .github/workflows/docs-links.yml        |  5 +-
 .github/workflows/test.yml              | 28 ++++++------
 5 files changed, 107 insertions(+), 43 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..06d55c19
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,61 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    groups:
+      all-actions:
+        patterns:
+          - "*"
+      actions-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    groups:
+      all-python:
+        patterns:
+          - "*"
+      python-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+
+  - package-ecosystem: "npm"
+    directory: "/frontend"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    groups:
+      all-npm:
+        patterns:
+          - "*"
+      npm-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    groups:
+      all-docker:
+        patterns:
+          - "*"
+      docker-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index c31e9cfa..9c294c96 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -27,7 +27,7 @@ jobs:
       has_dockerhub_secrets: ${{ steps.check.outputs.has_dockerhub_secrets }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Extract version from pyproject.toml
         id: version
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Free up disk space
         run: |
@@ -67,10 +67,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -78,13 +78,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-regular-${{ github.sha }}
@@ -126,7 +126,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push regular image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
         with:
           context: .
           file: ./Dockerfile
@@ -147,7 +147,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Free up disk space
         run: |
@@ -159,10 +159,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -170,13 +170,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/.buildx-cache-single
           key: ${{ runner.os }}-buildx-single-${{ github.sha }}
@@ -218,7 +218,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index 14b1aa04..e3a57a71 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -39,7 +39,7 @@ jobs:
       is_push_to_main: ${{ steps.check.outputs.is_push_to_main }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Extract version from pyproject.toml
         id: version
@@ -85,10 +85,10 @@ jobs:
       image: ${{ steps.filter.outputs.image }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Detect image-affecting changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@15192bc058cc28a13dbf6cde61f19e18988b7af6 # v3
         id: filter
         with:
           filters: |
@@ -111,7 +111,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Skip notice
         if: needs.extract-version.outputs.is_push_to_main != 'true' && needs.changes.outputs.image != 'true'
@@ -129,11 +129,11 @@ jobs:
 
       - name: Set up Docker Buildx
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Login to GitHub Container Registry
         if: needs.extract-version.outputs.is_push_to_main == 'true'
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -141,14 +141,14 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.is_push_to_main == 'true' && needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/.buildx-cache-dev
           key: ${{ runner.os }}-buildx-dev-${{ github.sha }}
@@ -177,7 +177,7 @@ jobs:
 
       - name: Build and push regular image
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
         with:
           context: .
           file: ./Dockerfile
@@ -201,7 +201,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Free up disk space
         run: |
@@ -213,10 +213,10 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -224,13 +224,13 @@ jobs:
 
       - name: Login to Docker Hub
         if: needs.extract-version.outputs.has_dockerhub_secrets == 'true'
-        uses: docker/login-action@v4
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: /tmp/.buildx-cache-dev-single
           key: ${{ runner.os }}-buildx-dev-single-${{ github.sha }}
@@ -247,7 +247,7 @@ jobs:
           echo "tags=${TAGS}" >> $GITHUB_OUTPUT
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/docs-links.yml b/.github/workflows/docs-links.yml
index 3b95cf10..d7cffa73 100644
--- a/.github/workflows/docs-links.yml
+++ b/.github/workflows/docs-links.yml
@@ -7,10 +7,13 @@ on:
       - "scripts/check_md_links.py"
       - ".github/workflows/docs-links.yml"
 
+permissions:
+  contents: read
+
 jobs:
   check-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - name: Check relative markdown links
         run: python3 scripts/check_md_links.py
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1195d8ad..31645c97 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
 
@@ -36,7 +36,7 @@ jobs:
         run: uv run pytest tests/ -v --cov=open_notebook --cov=api --cov-report=term-missing --cov-report=xml
 
       - name: Upload coverage artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: backend-coverage
           path: coverage.xml
@@ -46,10 +46,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
 
@@ -67,10 +67,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v8.1.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
         with:
           enable-cache: true
 
@@ -91,10 +91,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 22
           cache: npm
@@ -107,7 +107,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Upload coverage artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: frontend-coverage
           path: frontend/coverage/
@@ -120,10 +120,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 22
           cache: npm
@@ -143,10 +143,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 22
           cache: npm

From 97e5504d82b3df9511ae28fb18639ae8a02714d0 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Sat, 5 Sep 2026 06:22:24 -0700
Subject: [PATCH 286/345] fix: clarify OpenAI-compatible base URL requirements
 (#1251)

Fixes #1242

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../settings/CredentialFormDialog.test.tsx    | 51 +++++++++++++++++++
 .../settings/CredentialFormDialog.tsx         |  8 ++-
 frontend/src/lib/locales/bn-IN/index.ts       |  1 +
 frontend/src/lib/locales/ca-ES/index.ts       |  1 +
 frontend/src/lib/locales/de-DE/index.ts       |  1 +
 frontend/src/lib/locales/en-US/index.ts       |  1 +
 frontend/src/lib/locales/es-ES/index.ts       |  1 +
 frontend/src/lib/locales/fr-FR/index.ts       |  1 +
 frontend/src/lib/locales/it-IT/index.ts       |  1 +
 frontend/src/lib/locales/ja-JP/index.ts       |  1 +
 frontend/src/lib/locales/pl-PL/index.ts       |  1 +
 frontend/src/lib/locales/pt-BR/index.ts       |  1 +
 frontend/src/lib/locales/ru-RU/index.ts       |  1 +
 frontend/src/lib/locales/tr-TR/index.ts       |  1 +
 frontend/src/lib/locales/zh-CN/index.ts       |  1 +
 frontend/src/lib/locales/zh-TW/index.ts       |  1 +
 16 files changed, 72 insertions(+), 1 deletion(-)
 create mode 100644 frontend/src/components/settings/CredentialFormDialog.test.tsx

diff --git a/frontend/src/components/settings/CredentialFormDialog.test.tsx b/frontend/src/components/settings/CredentialFormDialog.test.tsx
new file mode 100644
index 00000000..ca006f84
--- /dev/null
+++ b/frontend/src/components/settings/CredentialFormDialog.test.tsx
@@ -0,0 +1,51 @@
+import { render, screen } from '@testing-library/react'
+import { describe, expect, it, vi } from 'vitest'
+import { enUS } from '@/lib/locales/en-US'
+import { CredentialFormDialog } from './CredentialFormDialog'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/hooks/use-credentials', () => ({
+  useCreateCredential: () => ({ isPending: false, mutate: vi.fn() }),
+  useUpdateCredential: () => ({ isPending: false, mutate: vi.fn() }),
+}))
+
+vi.mock('@/lib/hooks/use-providers', () => ({
+  useProviders: () => ({ data: [] }),
+}))
+
+function renderDialog(provider: string) {
+  return render(
+    <CredentialFormDialog
+      open
+      onOpenChange={vi.fn()}
+      provider={provider}
+    />,
+  )
+}
+
+describe('CredentialFormDialog', () => {
+  it('shows the version-path hint for OpenAI-compatible providers', () => {
+    renderDialog('openai_compatible')
+
+    expect(
+      screen.getByText('apiKeys.openAICompatibleBaseUrlHint'),
+    ).toBeInTheDocument()
+    expect(
+      screen.queryByText('apiKeys.baseUrlOverrideHint'),
+    ).not.toBeInTheDocument()
+    expect(screen.getByLabelText('apiKeys.baseUrl')).toHaveValue('')
+    expect(enUS.apiKeys.openAICompatibleBaseUrlHint).toContain(
+      'http://host.docker.internal:1234/v1',
+    )
+  })
+
+  it('keeps the generic Base URL hint for other URL-based providers', () => {
+    renderDialog('ollama')
+
+    expect(screen.getByText('apiKeys.baseUrlOverrideHint')).toBeInTheDocument()
+    expect(
+      screen.queryByText('apiKeys.openAICompatibleBaseUrlHint'),
+    ).not.toBeInTheDocument()
+  })
+})
diff --git a/frontend/src/components/settings/CredentialFormDialog.tsx b/frontend/src/components/settings/CredentialFormDialog.tsx
index 0562ef09..b7f62623 100644
--- a/frontend/src/components/settings/CredentialFormDialog.tsx
+++ b/frontend/src/components/settings/CredentialFormDialog.tsx
@@ -249,7 +249,13 @@ export function CredentialFormDialog({
                 }
                 disabled={isSubmitting}
               />
-              <p className="text-xs text-muted-foreground">{t('apiKeys.baseUrlOverrideHint')}</p>
+              <p className="text-xs text-muted-foreground">
+                {t(
+                  isOpenAICompatible
+                    ? 'apiKeys.openAICompatibleBaseUrlHint'
+                    : 'apiKeys.baseUrlOverrideHint',
+                )}
+              </p>
             </div>
           )}
 
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index f1bd9314..a6af786b 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -961,6 +961,7 @@ export const bnIN = {
     configNameHint: "এই কনফিগারেশনের জন্য একটি বর্ণনামূলক নাম (যেমন, 'Production', 'Development')",
     baseUrl: "বেস URL",
     baseUrlOverrideHint: "শুধুমাত্র তখনই এটি পরিবর্তন করুন যদি আপনার প্রোভাইডারের ডিফল্ট API এন্ডপয়েন্ট ওভাররাইড করতে হয়।",
+    openAICompatibleBaseUrlHint: "আপনার সার্ভারের জন্য প্রয়োজনীয় API সংস্করণের পাথ অন্তর্ভুক্ত করুন। Docker-এ LM Studio-এর জন্য http://host.docker.internal:1234/v1 ব্যবহার করুন।",
     numCtx: "কনটেক্সট উইন্ডো (num_ctx)",
     numCtxHint: "Ollama মডেলের জন্য সর্বোচ্চ কনটেক্সট উইন্ডো। ডিফল্ট (8192) ব্যবহার করতে খালি রাখুন। শুধুমাত্র আপনার হার্ডওয়্যার বড় উইন্ডো সামলাতে পারলে বাড়ান।",
     deleteConfigConfirm: "আপনি কি নিশ্চিত '{{name}}' মুছে ফেলতে চান? এটি পুনরায় করা যাবে না।",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 80fd178f..34a385b7 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -960,6 +960,7 @@ export const caES = {
     configNameHint: "Un nom descriptiu per a aquesta configuració (p. ex., «Producció», «Desenvolupament»)",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Canvia-ho només si has de substituir el punt d'accés de l'API per defecte del proveïdor.",
+    openAICompatibleBaseUrlHint: "Inclou el camí de la versió de l'API que requereix el servidor. Per a LM Studio a Docker, utilitza http://host.docker.internal:1234/v1.",
     numCtx: "Finestra de Context (num_ctx)",
     numCtxHint: "Finestra de context màxima per als models Ollama. Deixa-ho buit per usar el valor per defecte (8192). Augmenta'l només si el teu maquinari pot gestionar una finestra més gran.",
     deleteConfigConfirm: "Segur que vols suprimir «{{name}}»? Aquesta acció no es pot desfer.",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 0771b233..38eed8f0 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -963,6 +963,7 @@ export const deDE = {
     configNameHint: "Ein beschreibender Name für diese Konfiguration, z. B. 'Produktion' oder 'Entwicklung'",
     baseUrl: "Basis-URL",
     baseUrlOverrideHint: "Nur ändern, wenn du den Standard-API-Endpunkt des Anbieters überschreiben musst.",
+    openAICompatibleBaseUrlHint: "Füge den von deinem Server benötigten API-Versionspfad ein. Verwende für LM Studio in Docker http://host.docker.internal:1234/v1.",
     numCtx: "Kontextfenster (num_ctx)",
     numCtxHint: "Maximales Kontextfenster für Ollama-Modelle. Leer lassen, um den Standardwert (8192) zu verwenden. Nur erhöhen, wenn deine Hardware ein größeres Fenster verarbeiten kann.",
     deleteConfigConfirm: "Möchtest du '{{name}}' wirklich löschen? Dies kann nicht rückgängig gemacht werden.",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 8148594b..d367424a 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -959,6 +959,7 @@ export const enUS = {
     configNameHint: "A descriptive name for this configuration (e.g., 'Production', 'Development')",
     baseUrl: "Base URL",
     baseUrlOverrideHint: "Only change this if you need to override the provider's default API endpoint.",
+    openAICompatibleBaseUrlHint: "Include the API version path required by your server. For LM Studio in Docker, use http://host.docker.internal:1234/v1.",
     numCtx: "Context Window (num_ctx)",
     numCtxHint: "Maximum context window for Ollama models. Leave empty to use the default (8192). Increase only if your hardware can handle a larger window.",
     deleteConfigConfirm: "Are you sure you want to delete '{{name}}'? This cannot be undone.",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index d4f5bac3..ab0c2ab6 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -961,6 +961,7 @@ export const esES = {
     configNameHint: "Un nombre descriptivo para esta configuración (ej., 'Producción', 'Desarrollo')",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Solo cambia esto si necesitas anular el endpoint API predeterminado del proveedor.",
+    openAICompatibleBaseUrlHint: "Incluye la ruta de la versión de la API que requiere el servidor. Para LM Studio en Docker, usa http://host.docker.internal:1234/v1.",
     numCtx: "Ventana de Contexto (num_ctx)",
     numCtxHint: "Ventana de contexto máxima para modelos Ollama. Déjalo vacío para usar el valor predeterminado (8192). Auméntalo solo si tu hardware admite una ventana mayor.",
     deleteConfigConfirm: "¿Estás seguro de que quieres eliminar '{{name}}'? Esto no se puede deshacer.",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 390451dd..0da5473a 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -960,6 +960,7 @@ export const frFR = {
     configNameHint: "Un nom descriptif pour cette configuration (ex : « Production », « Développement »)",
     baseUrl: "URL de base",
     baseUrlOverrideHint: "Ne modifiez ceci que si vous devez remplacer le point d'accès API par défaut du fournisseur.",
+    openAICompatibleBaseUrlHint: "Incluez le chemin de version de l'API requis par votre serveur. Pour LM Studio dans Docker, utilisez http://host.docker.internal:1234/v1.",
     numCtx: "Fenêtre de Contexte (num_ctx)",
     numCtxHint: "Fenêtre de contexte maximale pour les modèles Ollama. Laissez vide pour utiliser la valeur par défaut (8192). N'augmentez que si votre matériel peut gérer une fenêtre plus grande.",
     deleteConfigConfirm: "Êtes-vous sûr de vouloir supprimer « {{name}} » ? Cette action est irréversible.",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 7a624ca1..d77b60de 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -960,6 +960,7 @@ export const itIT = {
     configNameHint: "Un nome descrittivo per questa configurazione (es. 'Produzione', 'Sviluppo')",
     baseUrl: "URL base",
     baseUrlOverrideHint: "Modifica solo se devi sovrascrivere l'endpoint API predefinito del provider.",
+    openAICompatibleBaseUrlHint: "Includi il percorso della versione API richiesto dal server. Per LM Studio in Docker, usa http://host.docker.internal:1234/v1.",
     numCtx: "Finestra di Contesto (num_ctx)",
     numCtxHint: "Finestra di contesto massima per i modelli Ollama. Lascia vuoto per usare il valore predefinito (8192). Aumenta solo se il tuo hardware può gestire una finestra più grande.",
     deleteConfigConfirm: "Sei sicuro di voler eliminare '{{name}}'? Questa azione non può essere annullata.",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index be51e45a..75ff9d55 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -960,6 +960,7 @@ export const jaJP = {
     configNameHint: "この設定の説明的な名前（例：本番環境、開発環境）",
     baseUrl: "ベースURL",
     baseUrlOverrideHint: "プロバイダーのデフォルト API エンドポイントを上書きする場合のみ変更してください。",
+    openAICompatibleBaseUrlHint: "サーバーで必要な API バージョンのパスを含めてください。Docker 上の LM Studio では http://host.docker.internal:1234/v1 を使用します。",
     numCtx: "コンテキストウィンドウ (num_ctx)",
     numCtxHint: "Ollama モデルの最大コンテキストウィンドウ。空のままにするとデフォルト（8192）を使用します。ハードウェアがより大きなウィンドウを処理できる場合のみ増やしてください。",
     deleteConfigConfirm: "「{{name}}」を削除してもよろしいですか？この操作は元に戻せません。",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index a2f2f51c..8a7656ac 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -960,6 +960,7 @@ export const plPL = {
     configNameHint: "Opisowa nazwa tej konfiguracji (np. „Produkcja”, „Rozwój”)",
     baseUrl: "Bazowy adres URL",
     baseUrlOverrideHint: "Zmień to tylko wtedy, gdy musisz nadpisać domyślny punkt końcowy API dostawcy.",
+    openAICompatibleBaseUrlHint: "Uwzględnij ścieżkę wersji API wymaganą przez serwer. Dla LM Studio w Dockerze użyj http://host.docker.internal:1234/v1.",
     numCtx: "Okno kontekstu (num_ctx)",
     numCtxHint: "Maksymalne okno kontekstu dla modeli Ollama. Pozostaw puste, aby użyć wartości domyślnej (8192). Zwiększ tylko jeśli Twój sprzęt obsłuży większe okno.",
     deleteConfigConfirm: "Czy na pewno chcesz usunąć „{{name}}”? Tej operacji nie można cofnąć.",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 3794ad63..72c8cb5e 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -960,6 +960,7 @@ export const ptBR = {
     configNameHint: "Um nome descritivo para esta configuração (ex.: 'Produção', 'Desenvolvimento')",
     baseUrl: "URL Base",
     baseUrlOverrideHint: "Altere apenas se precisar sobrescrever o endpoint padrão do provedor.",
+    openAICompatibleBaseUrlHint: "Inclua o caminho da versão da API exigido pelo servidor. Para o LM Studio no Docker, use http://host.docker.internal:1234/v1.",
     numCtx: "Janela de Contexto (num_ctx)",
     numCtxHint: "Janela de contexto máxima para modelos Ollama. Deixe vazio para usar o padrão (8192). Aumente apenas se seu hardware suportar uma janela maior.",
     deleteConfigConfirm: "Tem certeza de que deseja excluir '{{name}}'? Esta ação não pode ser desfeita.",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 09bf15eb..0f200c29 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -960,6 +960,7 @@ export const ruRU = {
     configNameHint: "Описательное название для этой конфигурации (например, «Продакшн», «Разработка»)",
     baseUrl: "Базовый URL",
     baseUrlOverrideHint: "Изменяйте только если нужно переопределить стандартную конечную точку API провайдера.",
+    openAICompatibleBaseUrlHint: "Укажите путь версии API, необходимый серверу. Для LM Studio в Docker используйте http://host.docker.internal:1234/v1.",
     numCtx: "Окно контекста (num_ctx)",
     numCtxHint: "Максимальное окно контекста для моделей Ollama. Оставьте пустым для значения по умолчанию (8192). Увеличивайте только если ваше оборудование справится с большим окном.",
     deleteConfigConfirm: "Вы уверены, что хотите удалить «{{name}}»? Это действие необратимо.",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 652a2921..e462f322 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -960,6 +960,7 @@ export const trTR = {
     configNameHint: "Bu yapılandırma için açıklayıcı bir ad (örn. 'Üretim', 'Geliştirme')",
     baseUrl: "Temel URL",
     baseUrlOverrideHint: "Yalnızca sağlayıcının varsayılan API uç noktasını geçersiz kılmanız gerekiyorsa değiştirin.",
+    openAICompatibleBaseUrlHint: "Sunucunuzun gerektirdiği API sürümü yolunu ekleyin. Docker'daki LM Studio için http://host.docker.internal:1234/v1 kullanın.",
     numCtx: "Bağlam Penceresi (num_ctx)",
     numCtxHint: "Ollama modelleri için maksimum bağlam penceresi. Varsayılanı kullanmak için boş bırakın (8192). Yalnızca donanımınız daha büyük pencereyi kaldırabiliyorsa artırın.",
     deleteConfigConfirm: "'{{name}}' yapılandırmasını silmek istediğinizden emin misiniz? Bu geri alınamaz.",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index c7ddc397..0173f086 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -960,6 +960,7 @@ export const zhCN = {
     configNameHint: "此配置的描述性名称（例如：'生产环境'、'开发环境'）",
     baseUrl: "基础 URL",
     baseUrlOverrideHint: "仅在需要覆盖提供商默认 API 端点时更改此项。",
+    openAICompatibleBaseUrlHint: "请包含服务器所需的 API 版本路径。对于 Docker 中的 LM Studio，请使用 http://host.docker.internal:1234/v1。",
     numCtx: "上下文窗口 (num_ctx)",
     numCtxHint: "Ollama 模型的最大上下文窗口。留空则使用默认值（8192）。仅在硬件能够处理更大窗口时增大。",
     deleteConfigConfirm: "确定要删除 '{{name}}' 吗？此操作无法撤销。",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 7990f804..bd772d23 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -960,6 +960,7 @@ export const zhTW = {
     configNameHint: "此設定的描述性名稱（例如：'生產環境'、'開發環境'）",
     baseUrl: "基礎 URL",
     baseUrlOverrideHint: "僅在需要覆蓋提供商預設 API 端點時更改此項。",
+    openAICompatibleBaseUrlHint: "請包含伺服器所需的 API 版本路徑。對於 Docker 中的 LM Studio，請使用 http://host.docker.internal:1234/v1。",
     numCtx: "上下文視窗 (num_ctx)",
     numCtxHint: "Ollama 模型的最大上下文視窗。留空則使用預設值（8192）。僅在硬體能夠處理更大視窗時增大。",
     deleteConfigConfirm: "確定要刪除 '{{name}}' 嗎？此操作無法撤銷。",

From ab27ff4fc8cfb7388e2314ef98d07d98d023dd73 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 10:27:32 -0300
Subject: [PATCH 287/345] docs(skill): record 2026-09-05 calibration of
 process-discussions (#1320)

* docs(skill): record 2026-09-05 calibration of process-discussions

Adds the one-decision-at-a-time presentation format (ID + title, summary,
last movement, suggestion or question) and the close-when-graduated-work-
lands rule: a thread whose graduated fixes are merged to main is closed as
resolved citing the PRs and the v1-dev image, without waiting for a release.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EKF1oL2Tkft3ETwJwKfxPH

* docs(skill): keep package side actions and ordering in the decision format

Addresses cubic review on #1320.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EKF1oL2Tkft3ETwJwKfxPH

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .claude/skills/process-discussions/SKILL.md | 35 ++++++++++++++++++---
 1 file changed, 31 insertions(+), 4 deletions(-)

diff --git a/.claude/skills/process-discussions/SKILL.md b/.claude/skills/process-discussions/SKILL.md
index c86d47fa..412a27c4 100644
--- a/.claude/skills/process-discussions/SKILL.md
+++ b/.claude/skills/process-discussions/SKILL.md
@@ -14,8 +14,10 @@ and reply is approved by him before posting. You prepare; he decides.
 
 This process was calibrated by hand on 2026-08-16 across 10 Ideas
 (#1210–#1265) and re-run on 2026-09-02 (6 follow-ups + 3 new ideas), which
-added the `incubating` status and the pull rule. The patterns below are
-ratified practice, not theory.
+added the `incubating` status and the pull rule, and again on 2026-09-05
+(4 follow-ups), which added the one-decision-at-a-time format and the
+close-when-graduated-work-lands rule. The patterns below are ratified
+practice, not theory.
 
 **Ground rules:**
 
@@ -123,6 +125,16 @@ and close the Discussion as resolved (`closeDiscussion(reason: RESOLVED)`);
 an open thread with a final answer clutters the queue. Anyone can reopen
 with a new argument.
 
+**Close when graduated work lands** (ratified 2026-09-05). A thread whose
+needs have all either shipped or been routed elsewhere is done the moment
+the last fix is merged to `main` — do not wait for a versioned release.
+Post a closing reply that names the merged PR(s), says the change ships
+with the next release, and points testers at the `v1-dev` Docker image
+(rebuilt on every push to `main`), then close as resolved. Precedents:
+#1236 (editor bugs), #1243 (Crawl4AI token). Detecting this state is part
+of Phase 0: for every graduated Issue linked from an open thread, check
+whether it closed since the last run.
+
 **Graduation rules** (for `accepted → graduated` and `bug`):
 - Issue gets: Context (with Discussion origin link), Expected outcome,
   Out of scope, Acceptance criteria, References. Label `ready` (+ `bug` when
@@ -178,8 +190,23 @@ compliments about the question itself.
 
 ## Phase 4 — Approval gate, then post
 
-Present to the owner: ficha (compact), proposed outcome, full draft reply,
-and any issues/renames/closures the package includes. After approval:
+**One decision at a time** (owner preference, 2026-09-05). After the
+Phase 0 ledger, present decisions sequentially — never a batch. Each one
+uses this fixed format, in the owner's language:
+
+1. **ID + title**
+2. **Resumo** — what the thread is, how it was decomposed, current status
+3. **Último movimento** — who did what, when; what changed since the last run
+   (a graduated Issue closing, an upstream release, a user answering)
+4. **Sugestão ou dúvida** — the proposed outcome, the full draft reply,
+   and every side action the package includes (Issues to open, renames,
+   closures); or the concrete question when the call is the owner's. When
+   offering options, label them (a)/(b)/(c) and say which one you recommend
+
+On approval, execute the whole package in the order below (side actions
+first, reply last), report the URLs, then present the next decision.
+Number them ("Decisão 2 de 4") so the owner knows the size of the session.
+After approval:
 
 - Write bodies to scratchpad files; post via GraphQL (`addDiscussionComment`,
   `updateDiscussion` for renames) with `-F body=@file` — avoids shell

From 93d10f1be065f49ae372efe0b806ce52b71bfe97 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 10:48:56 -0300
Subject: [PATCH 288/345] docs: align env-var fallback messaging as deprecated
 across surfaces (#1324)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reconcile .env.example, ollama.md and environment-reference.md on a single
story for AI provider environment variables: they are a deprecated fallback
that still works today, with no guarantee it keeps working, and new
automation should not be built on it. Settings → API Keys is the supported
path; the declarative provisioning contract for headless setups is tracked
in Discussion #765.

Closes #1135


Claude-Session: https://claude.ai/code/session_01Bd92gaJSdXogEBiRMEQYXQ

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .env.example                                  | 18 +++++++++++++-----
 docs/5-CONFIGURATION/environment-reference.md |  8 ++++++--
 docs/5-CONFIGURATION/ollama.md                |  6 +++---
 3 files changed, 22 insertions(+), 10 deletions(-)

diff --git a/.env.example b/.env.example
index 19afd335..68b6f77d 100644
--- a/.env.example
+++ b/.env.example
@@ -23,10 +23,17 @@ SURREAL_NAMESPACE=open_notebook
 SURREAL_DATABASE=open_notebook
 
 # =============================================================================
-# OPTIONAL: AI Provider API Keys
+# DEPRECATED: AI Provider API Keys (environment-variable fallback)
 # =============================================================================
-# You can configure these via the UI (Settings → API Keys) or set them here
-# UI configuration is recommended for better security and flexibility
+# Configure AI providers via the UI: Settings → API Keys. Credentials are
+# stored encrypted, can be rotated without restarts, and support multiple
+# credentials per provider.
+#
+# The environment variables below are a DEPRECATED fallback. They still work
+# today, but there is no guarantee they keep working in future releases, and
+# new automation should not be built on them. A declarative provisioning
+# contract for headless/CI/Docker setups is being designed in
+# https://github.com/lfnovo/open-notebook/discussions/765
 
 # OpenAI
 # OPENAI_API_KEY=sk-...
@@ -47,10 +54,11 @@ SURREAL_DATABASE=open_notebook
 # External API URL (for webhooks, callbacks, etc.)
 # API_URL=http://localhost:5055
 
-# Ollama endpoint (if running locally)
+# Ollama endpoint — DEPRECATED fallback, configure via Settings → API Keys instead
 # OLLAMA_API_BASE=http://localhost:11434
 
-# oMLX (Apple Silicon) — prefer Settings → API Keys; port 11435 avoids SurrealDB on 8000
+# oMLX (Apple Silicon) — DEPRECATED fallback, configure via Settings → API Keys instead
+# Port 11435 avoids clashing with SurrealDB on 8000
 # OMLX_API_BASE=http://localhost:11435/v1
 # OMLX_API_KEY=  # optional; only if oMLX was started with --api-key
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index b677756d..98b3485b 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -259,7 +259,7 @@ env | grep -E "^[A-Z_]+=" | sort
 - **Quote values:** Use quotes for values with spaces: `API_URL="http://my server:5055"`
 - **Restart required:** Changes take effect after restarting services
 - **Secrets:** Don't commit encryption keys or passwords to git
-- **AI Providers:** Configure via **Settings → API Keys** in the browser (not via env vars)
+- **AI Providers:** Configure via **Settings → API Keys** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
 - **Migration:** Use Settings UI to migrate existing env vars to the credential system. See [API Configuration](../3-USER-GUIDE/api-configuration.md#migrating-from-environment-variables)
 
 ---
@@ -283,7 +283,11 @@ Done!
 
 ## Legacy: AI Provider Environment Variables (Deprecated)
 
-> **Deprecated**: The following AI provider API key environment variables are deprecated. Configure providers via the Settings UI instead. These variables may still work as a fallback but are no longer recommended.
+> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Settings → API Keys** instead.
+
+Why the UI is the source of truth: credentials in the database are encrypted at rest (via `OPEN_NOTEBOOK_ENCRYPTION_KEY`), can be added or rotated at runtime without restarts, and support multiple credentials per provider — none of which a single env var can express.
+
+**Headless, CI/CD and Docker deployments:** a declarative provisioning contract over the credentials API (a file describing providers and credentials, with `${VAR}`-style references resolved from the environment) is being designed in [Discussion #765](https://github.com/lfnovo/open-notebook/discussions/765). Until it ships, the env fallback is the only unattended path — use it knowing it is deprecated.
 
 If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Settings → API Keys** to import them into the credential system, then remove them from your configuration.
 
diff --git a/docs/5-CONFIGURATION/ollama.md b/docs/5-CONFIGURATION/ollama.md
index 853fc311..881dddb1 100644
--- a/docs/5-CONFIGURATION/ollama.md
+++ b/docs/5-CONFIGURATION/ollama.md
@@ -45,7 +45,7 @@ ollama pull mxbai-embed-large  # Best embedding model for Ollama
 4. Click **Save**, then **Test Connection**
 5. Click **Discover Models** → **Register Models**
 
-**Legacy (Deprecated) — Environment variables:**
+**Environment variable fallback (Deprecated):**
 ```bash
 # For local installation:
 export OLLAMA_API_BASE=http://localhost:11434
@@ -53,7 +53,7 @@ export OLLAMA_API_BASE=http://localhost:11434
 export OLLAMA_API_BASE=http://host.docker.internal:11434
 ```
 
-> **Note**: The `OLLAMA_API_BASE` environment variable is deprecated. Configure Ollama via Settings → API Keys instead.
+> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Settings → API Keys** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
 
 ## Network Configuration Guide
 
@@ -543,7 +543,7 @@ export OLLAMA_NUM_PARALLEL=4           # Parallel request handling
 export OLLAMA_FLASH_ATTENTION=1        # Enable flash attention (if supported)
 
 # Open Notebook configuration (configure via Settings → API Keys instead)
-# OLLAMA_API_BASE=http://localhost:11434  # Deprecated — use Settings UI
+# OLLAMA_API_BASE=http://localhost:11434  # Deprecated fallback — works today, no guarantee
 ```
 
 ### SSL Configuration (Self-Signed Certificates)

From 021b8744072caa284a0ce6effc9fc287637c3595 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 10:51:49 -0300
Subject: [PATCH 289/345] fix(ask): raise output budget to 8192 and fail on
 empty strategy (#1323)

* fix(ask): raise output budget to 8192 and fail on empty strategy

The three Ask stages were capped at max_tokens=2000, far below the 8192
used by chat and transformations. Token-dense languages hit the cap
mid-sentence and reasoning models spent the whole budget thinking,
returning blank search terms and a misleading "no documents found".

- Share an 8192 budget across strategy, per-search answers and final
  synthesis (ASK_MAX_TOKENS).
- Drop blank search terms; raise ExternalServiceError when none remain.
- Skip thinking-only partial answers before final synthesis.

Closes #1221

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GH6spwym6qmmdmxCe5CXfu

* fix(ask): treat truncated <think> blocks as empty; point error at Ask model options

Addresses cubic review on #1323:
- parse_thinking_content now treats content that opens <think> without
  closing it (budget exhausted mid-reasoning) as thinking only, so no
  reasoning leaks into partial answers.
- Empty-strategy error message points at the Ask page's advanced model
  options, where the strategy model is actually chosen.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GH6spwym6qmmdmxCe5CXfu

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 CHANGELOG.md                      |   1 +
 open_notebook/graphs/ask.py       |  35 +++++--
 open_notebook/utils/text_utils.py |   6 ++
 tests/test_ask_graph.py           | 165 ++++++++++++++++++++++++++++++
 tests/test_utils.py               |  16 +--
 5 files changed, 211 insertions(+), 12 deletions(-)
 create mode 100644 tests/test_ask_graph.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 76c55fe0..30cc28ae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
 ### Fixed
+- **Ask answers are no longer silently truncated.** The three Ask stages (search strategy, per-search answers, final synthesis) were capped at 2000 output tokens, well below the 8192 that chat and transformations use. Token-dense languages such as Japanese hit the cap mid-sentence, and reasoning models spent the whole budget thinking and returned blank search terms, so Ask answered "no documents found" from a corpus that had the answer. All three stages now share an 8192 budget; a strategy with no usable search terms fails with an explicit error instead of running empty searches, and thinking-only partial answers are dropped before synthesis (#1221)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
 - **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
 - **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
diff --git a/open_notebook/graphs/ask.py b/open_notebook/graphs/ask.py
index 405cc7c0..5035e7b0 100644
--- a/open_notebook/graphs/ask.py
+++ b/open_notebook/graphs/ask.py
@@ -11,11 +11,17 @@ from typing_extensions import TypedDict
 
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.domain.notebook import vector_search
-from open_notebook.exceptions import OpenNotebookError
+from open_notebook.exceptions import ExternalServiceError, OpenNotebookError
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
 
+# Output budget shared by the three Ask stages (strategy, per-search answers,
+# final synthesis). Matches chat and transformations. The previous 2000 cap
+# silently truncated answers in token-dense languages and left reasoning
+# models with no budget for the visible answer after their thinking (#1221).
+ASK_MAX_TOKENS = 8192
+
 
 class SubGraphState(TypedDict):
     question: str
@@ -60,7 +66,7 @@ async def call_model_with_messages(state: ThreadState, config: RunnableConfig) -
             system_prompt,
             config.get("configurable", {}).get("strategy_model"),
             "tools",
-            max_tokens=2000,
+            max_tokens=ASK_MAX_TOKENS,
             structured=dict(type="json"),
         )
         # model = model.bind_tools(tools)
@@ -74,6 +80,19 @@ async def call_model_with_messages(state: ThreadState, config: RunnableConfig) -
         # Parse the cleaned JSON content
         strategy = parser.parse(cleaned_content)
 
+        # A reasoning model that spends its whole budget thinking returns a
+        # syntactically valid strategy with blank search terms. Drop those and
+        # fail loudly when nothing usable remains, instead of running empty
+        # vector searches and answering "no documents found".
+        strategy.searches = [s for s in strategy.searches if s.term.strip()]
+        if not strategy.searches:
+            raise ExternalServiceError(
+                "The strategy model returned no search terms for this question. "
+                "This usually means the model spent its output budget on reasoning "
+                "or returned an empty response. Pick a different strategy model in "
+                "the Ask page's advanced model options, or rephrase the question."
+            )
+
         return {"strategy": strategy}
     except OpenNotebookError:
         raise
@@ -114,11 +133,15 @@ async def provide_answer(state: SubGraphState, config: RunnableConfig) -> dict:
             system_prompt,
             config.get("configurable", {}).get("answer_model"),
             "tools",
-            max_tokens=2000,
+            max_tokens=ASK_MAX_TOKENS,
         )
         ai_message = await model.ainvoke(system_prompt)
-        ai_content = extract_text_content(ai_message.content)
-        return {"answers": [clean_thinking_content(ai_content)]}
+        ai_content = clean_thinking_content(extract_text_content(ai_message.content))
+        if not ai_content.strip():
+            # Nothing left after stripping thinking content — an empty partial
+            # answer only pollutes the final synthesis.
+            return {"answers": []}
+        return {"answers": [ai_content]}
     except OpenNotebookError:
         raise
     except Exception as e:
@@ -133,7 +156,7 @@ async def write_final_answer(state: ThreadState, config: RunnableConfig) -> dict
             system_prompt,
             config.get("configurable", {}).get("final_answer_model"),
             "tools",
-            max_tokens=2000,
+            max_tokens=ASK_MAX_TOKENS,
         )
         ai_message = await model.ainvoke(system_prompt)
         final_content = extract_text_content(ai_message.content)
diff --git a/open_notebook/utils/text_utils.py b/open_notebook/utils/text_utils.py
index ff7ea146..4fd71c6d 100644
--- a/open_notebook/utils/text_utils.py
+++ b/open_notebook/utils/text_utils.py
@@ -94,6 +94,12 @@ def parse_thinking_content(content: str) -> Tuple[str, str]:
         cleaned_content = content[malformed_match.end() :].strip()
         return thinking_content, cleaned_content
 
+    # Handle truncated output: <think>content (no closing tag). The model ran
+    # out of output budget while still reasoning, so nothing is a real answer.
+    stripped = content.lstrip()
+    if stripped.startswith("<think>"):
+        return stripped[len("<think>") :].strip(), ""
+
     return "", content
 
 
diff --git a/tests/test_ask_graph.py b/tests/test_ask_graph.py
new file mode 100644
index 00000000..a2a330a9
--- /dev/null
+++ b/tests/test_ask_graph.py
@@ -0,0 +1,165 @@
+"""
+Unit tests for the Ask graph (open_notebook.graphs.ask).
+
+Covers the output token budget shared by the three model stages and the
+handling of empty strategies / empty partial answers produced by reasoning
+models that exhaust their budget while thinking (#1221).
+"""
+
+import json
+from typing import cast
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from langchain_core.runnables import RunnableConfig
+
+from open_notebook.exceptions import ExternalServiceError
+from open_notebook.graphs.ask import (
+    ASK_MAX_TOKENS,
+    Search,
+    Strategy,
+    ThreadState,
+    call_model_with_messages,
+    provide_answer,
+    write_final_answer,
+)
+
+EMPTY_CONFIG = cast(RunnableConfig, {"configurable": {}})
+
+
+def _model_returning(content: str) -> MagicMock:
+    model = MagicMock()
+    model.ainvoke = AsyncMock(return_value=MagicMock(content=content))
+    return model
+
+
+def _strategy_json(terms: list[str]) -> str:
+    return json.dumps(
+        {
+            "reasoning": "look things up",
+            "searches": [{"term": t, "instructions": "extract"} for t in terms],
+        }
+    )
+
+
+class TestAskTokenBudget:
+    def test_budget_matches_other_workflows(self):
+        """Ask uses the same 8192 budget as chat and transformations."""
+        assert ASK_MAX_TOKENS == 8192
+
+    @pytest.mark.asyncio
+    async def test_strategy_stage_uses_shared_budget(self):
+        state = cast(ThreadState, {"question": "q"})
+        with patch(
+            "open_notebook.graphs.ask.provision_langchain_model",
+            new=AsyncMock(return_value=_model_returning(_strategy_json(["rag"]))),
+        ) as provision:
+            await call_model_with_messages(state, EMPTY_CONFIG)
+        assert provision.call_args.kwargs["max_tokens"] == ASK_MAX_TOKENS
+
+    @pytest.mark.asyncio
+    async def test_answer_stage_uses_shared_budget(self):
+        state = {"question": "q", "term": "rag", "instructions": "extract"}
+        with (
+            patch(
+                "open_notebook.graphs.ask.vector_search",
+                new=AsyncMock(return_value=[{"id": "source:1", "content": "x"}]),
+            ),
+            patch(
+                "open_notebook.graphs.ask.provision_langchain_model",
+                new=AsyncMock(return_value=_model_returning("partial")),
+            ) as provision,
+        ):
+            await provide_answer(state, EMPTY_CONFIG)  # type: ignore[arg-type]
+        assert provision.call_args.kwargs["max_tokens"] == ASK_MAX_TOKENS
+
+    @pytest.mark.asyncio
+    async def test_final_stage_uses_shared_budget(self):
+        state = cast(
+            ThreadState,
+            {
+                "question": "q",
+                "strategy": Strategy(reasoning="r", searches=[]),
+                "answers": ["a"],
+            },
+        )
+        with patch(
+            "open_notebook.graphs.ask.provision_langchain_model",
+            new=AsyncMock(return_value=_model_returning("final")),
+        ) as provision:
+            result = await write_final_answer(state, EMPTY_CONFIG)
+        assert provision.call_args.kwargs["max_tokens"] == ASK_MAX_TOKENS
+        assert result == {"final_answer": "final"}
+
+
+class TestEmptyStrategyHandling:
+    @pytest.mark.asyncio
+    async def test_blank_search_terms_are_dropped(self):
+        state = cast(ThreadState, {"question": "q"})
+        with patch(
+            "open_notebook.graphs.ask.provision_langchain_model",
+            new=AsyncMock(
+                return_value=_model_returning(_strategy_json(["", "  ", "rag"]))
+            ),
+        ):
+            result = await call_model_with_messages(state, EMPTY_CONFIG)
+        assert [s.term for s in result["strategy"].searches] == ["rag"]
+
+    @pytest.mark.asyncio
+    async def test_all_blank_terms_raise_instead_of_silent_no_results(self):
+        state = cast(ThreadState, {"question": "q"})
+        with patch(
+            "open_notebook.graphs.ask.provision_langchain_model",
+            new=AsyncMock(return_value=_model_returning(_strategy_json(["", "", ""]))),
+        ):
+            with pytest.raises(ExternalServiceError, match="no search terms"):
+                await call_model_with_messages(state, EMPTY_CONFIG)
+
+    @pytest.mark.asyncio
+    async def test_no_searches_raise(self):
+        state = cast(ThreadState, {"question": "q"})
+        with patch(
+            "open_notebook.graphs.ask.provision_langchain_model",
+            new=AsyncMock(return_value=_model_returning(_strategy_json([]))),
+        ):
+            with pytest.raises(ExternalServiceError):
+                await call_model_with_messages(state, EMPTY_CONFIG)
+
+    @pytest.mark.asyncio
+    async def test_thinking_only_partial_answer_is_skipped(self):
+        state = {"question": "q", "term": "rag", "instructions": "extract"}
+        with (
+            patch(
+                "open_notebook.graphs.ask.vector_search",
+                new=AsyncMock(return_value=[{"id": "source:1", "content": "x"}]),
+            ),
+            patch(
+                "open_notebook.graphs.ask.provision_langchain_model",
+                new=AsyncMock(
+                    return_value=_model_returning("<think>only reasoning</think>")
+                ),
+            ),
+        ):
+            result = await provide_answer(state, EMPTY_CONFIG)  # type: ignore[arg-type]
+        assert result == {"answers": []}
+
+    @pytest.mark.asyncio
+    async def test_truncated_thinking_partial_answer_is_skipped(self):
+        """Budget exhausted inside <think> must not leak reasoning as an answer."""
+        state = {"question": "q", "term": "rag", "instructions": "extract"}
+        with (
+            patch(
+                "open_notebook.graphs.ask.vector_search",
+                new=AsyncMock(return_value=[{"id": "source:1", "content": "x"}]),
+            ),
+            patch(
+                "open_notebook.graphs.ask.provision_langchain_model",
+                new=AsyncMock(return_value=_model_returning("<think>cut off mid")),
+            ),
+        ):
+            result = await provide_answer(state, EMPTY_CONFIG)  # type: ignore[arg-type]
+        assert result == {"answers": []}
+
+    def test_search_model_accepts_blank_term(self):
+        """The filter, not the schema, is responsible for blank terms."""
+        assert Search(term="", instructions="x").term == ""
diff --git a/tests/test_utils.py b/tests/test_utils.py
index d8d0e3fe..aaabeb70 100644
--- a/tests/test_utils.py
+++ b/tests/test_utils.py
@@ -108,6 +108,14 @@ class TestTextUtilities:
         assert thinking == "Some thinking content"
         assert cleaned == "Here is my answer"
 
+    def test_parse_thinking_content_truncated_no_close_tag(self):
+        """Output cut off inside <think> is all reasoning, never an answer."""
+        content = "<think>Let me reason about this at length and then"
+        thinking, cleaned = parse_thinking_content(content)
+        assert thinking == "Let me reason about this at length and then"
+        assert cleaned == ""
+        assert clean_thinking_content("  <think>partial") == ""
+
     def test_parse_thinking_content_invalid_input(self):
         """Test parsing with invalid input types."""
         # Non-string input (intentionally violates the signature to test the
@@ -472,14 +480,10 @@ class TestBuildSourceContext:
             "full_text": "e" + SOURCE_TRUNCATION_NOTICE,
         }
         notice_tokens = token_count(
-            _format_source_context(
-                {"sources": [notice_only], "insights": []}
-            )
+            _format_source_context({"sources": [notice_only], "insights": []})
         )
         one_character_tokens = token_count(
-            _format_source_context(
-                {"sources": [one_character], "insights": []}
-            )
+            _format_source_context({"sources": [one_character], "insights": []})
         )
         assert notice_tokens < one_character_tokens
 

From bbc7d110f6d6902d062f2964224b0fbe4474c37c Mon Sep 17 00:00:00 2001
From: Augusto Sandim <107718137+AugustoSandim@users.noreply.github.com>
Date: Sat, 5 Sep 2026 12:20:20 -0400
Subject: [PATCH 290/345] refactor: rename "API Keys" settings page to "Models"
 (#1313)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* refactor: rename "API Keys" settings page to "Models" (#1199)

Rename the provider credentials settings area from "API Keys" to "Models":

- Route: /settings/api-keys -> /settings/models with a permanent redirect
- UI copy: page title, description, and learn-more now use "Models" wording
- i18n: updated display values across all 14 locales (key names unchanged)
- Internal links: sidebar, setup banner, and command palette point to /settings/models
- Docs: "Settings → API Keys" references updated to "Settings → Models"

* docs(quick-start): update model settings navigation to Manage → Models

* fix(frontend): highlight only the active sidebar item on nested routes

Use longest-prefix matching so parent items like Settings don't also
highlight when viewing a child page such as Models. Add test coverage
for the Models page active state.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 docs/0-START-HERE/quick-start-cloud.md        |  4 +-
 .../quick-start-external-ollama.md            |  2 +-
 docs/0-START-HERE/quick-start-local.md        |  6 +--
 docs/0-START-HERE/quick-start-openai.md       |  4 +-
 docs/1-INSTALLATION/docker-compose.md         |  6 +--
 docs/1-INSTALLATION/single-container.md       | 12 ++---
 docs/3-USER-GUIDE/api-configuration.md        | 12 ++---
 docs/3-USER-GUIDE/index.md                    |  2 +-
 docs/4-AI-PROVIDERS/index.md                  |  2 +-
 docs/5-CONFIGURATION/advanced.md              |  8 +--
 docs/5-CONFIGURATION/ai-providers.md          | 40 +++++++--------
 docs/5-CONFIGURATION/environment-reference.md | 50 +++++++++----------
 docs/5-CONFIGURATION/index.md                 | 18 +++----
 docs/5-CONFIGURATION/local-stt.md             |  8 +--
 docs/5-CONFIGURATION/local-tts.md             |  6 +--
 docs/5-CONFIGURATION/ollama.md                | 28 +++++------
 docs/5-CONFIGURATION/omlx.md                  |  4 +-
 docs/5-CONFIGURATION/openai-compatible.md     | 20 ++++----
 docs/6-TROUBLESHOOTING/ai-chat-issues.md      | 10 ++--
 docs/6-TROUBLESHOOTING/connection-issues.md   |  2 +-
 docs/6-TROUBLESHOOTING/quick-fixes.md         |  2 +-
 docs/7-DEVELOPMENT/development-setup.md       |  4 +-
 frontend/next.config.ts                       | 12 +++++
 .../{api-keys => models}/page.test.tsx        |  0
 .../settings/{api-keys => models}/page.tsx    |  0
 .../src/components/common/CommandPalette.tsx  |  2 +-
 .../src/components/layout/AppSidebar.test.tsx | 20 +++++++-
 frontend/src/components/layout/AppSidebar.tsx | 13 ++++-
 .../src/components/layout/SetupBanner.tsx     |  2 +-
 frontend/src/lib/locales/bn-IN/index.ts       |  6 +--
 frontend/src/lib/locales/ca-ES/index.ts       |  6 +--
 frontend/src/lib/locales/de-DE/index.ts       |  6 +--
 frontend/src/lib/locales/en-US/index.ts       |  6 +--
 frontend/src/lib/locales/es-ES/index.ts       |  6 +--
 frontend/src/lib/locales/fr-FR/index.ts       |  6 +--
 frontend/src/lib/locales/it-IT/index.ts       |  6 +--
 frontend/src/lib/locales/ja-JP/index.ts       |  6 +--
 frontend/src/lib/locales/pl-PL/index.ts       |  6 +--
 frontend/src/lib/locales/pt-BR/index.ts       |  6 +--
 frontend/src/lib/locales/ru-RU/index.ts       |  6 +--
 frontend/src/lib/locales/tr-TR/index.ts       |  6 +--
 frontend/src/lib/locales/zh-CN/index.ts       |  6 +--
 frontend/src/lib/locales/zh-TW/index.ts       |  6 +--
 frontend/src/test/setup.ts                    |  2 +-
 44 files changed, 212 insertions(+), 173 deletions(-)
 rename frontend/src/app/(dashboard)/settings/{api-keys => models}/page.test.tsx (100%)
 rename frontend/src/app/(dashboard)/settings/{api-keys => models}/page.tsx (100%)

diff --git a/docs/0-START-HERE/quick-start-cloud.md b/docs/0-START-HERE/quick-start-cloud.md
index 0add0fb6..da8a8b8f 100644
--- a/docs/0-START-HERE/quick-start-cloud.md
+++ b/docs/0-START-HERE/quick-start-cloud.md
@@ -87,7 +87,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure Your AI Provider (1 min)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select your provider (e.g., Anthropic, Google, Groq, OpenRouter)
 4. Give it a name, paste your API key
@@ -167,7 +167,7 @@ Your provider's models are now available!
 
 ### "Model not found" Error
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Test Connection** on your credential
 3. If valid, click **Discover Models** → **Register Models**
 4. Check you have credits/access for the model
diff --git a/docs/0-START-HERE/quick-start-external-ollama.md b/docs/0-START-HERE/quick-start-external-ollama.md
index 7a80e9da..4b613682 100644
--- a/docs/0-START-HERE/quick-start-external-ollama.md
+++ b/docs/0-START-HERE/quick-start-external-ollama.md
@@ -109,7 +109,7 @@ Wait 10-15 seconds for services to start.
 
 ## Step 5: Configure Ollama Provider (1 min)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Ollama**
 4. Give it a name (e.g., "Local Ollama")
diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index e8b4da6e..c3e483d2 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -272,12 +272,12 @@ docker exec open-notebook-local-ollama-1 ollama pull neural-chat
 1. Download LM Studio: https://lmstudio.ai
 2. Open the app, download a model from the library
 3. Go to "Local Server" tab, start server (port 1234)
-4. In Open Notebook, go to **Settings** → **API Keys**
+4. In Open Notebook, go to **Manage** → **Models**
 5. Click **Add Credential** → Select **OpenAI-Compatible**
 6. Enter base URL: `http://host.docker.internal:1234/v1`
 7. Enter API key: `lm-studio` (placeholder)
 8. Click **Save**, then **Test Connection**
-9. Configure in Settings → Models → Select your LM Studio model
+9. Configure in Manage → Models → Select your LM Studio model
 
 **Note**: LM Studio runs outside Docker, use `host.docker.internal` to connect.
 
@@ -285,7 +285,7 @@ docker exec open-notebook-local-ollama-1 ollama pull neural-chat
 
 ## Going Further
 
-- **Switch models**: Change in Settings → Models anytime
+- **Switch models**: Change in Manage → Models anytime
 - **Add more models**:
   - Ollama: Run `ollama pull <model>`, then re-discover models from the credential
   - LM Studio: Download from the app library
diff --git a/docs/0-START-HERE/quick-start-openai.md b/docs/0-START-HERE/quick-start-openai.md
index 4a4e18b9..e66db767 100644
--- a/docs/0-START-HERE/quick-start-openai.md
+++ b/docs/0-START-HERE/quick-start-openai.md
@@ -85,7 +85,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure Your OpenAI Provider (1 min)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI**
 4. Give it a name (e.g., "My OpenAI Key")
@@ -160,7 +160,7 @@ Then access at `http://localhost:8503`
 
 ### "API key not working"
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Test Connection** on your OpenAI credential
 3. If it fails, verify your key at https://platform.openai.com
 4. Delete the credential and create a new one with the correct key
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index e600aaae..37df1594 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -126,7 +126,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure AI Provider (2 min)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select your provider (e.g., OpenAI, Anthropic, Google)
 4. Give it a name, paste your API key
@@ -193,7 +193,7 @@ docker exec open-notebook-local-ollama-1 ollama pull mistral
 ```
 
 Configure Ollama in the Settings UI:
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **Ollama**
 3. Enter base URL: `http://ollama:11434`
 4. Click **Save**, then **Test Connection**
@@ -292,7 +292,7 @@ Then access at `http://localhost:8503`
 
 ### Credential Issues
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Test Connection** on the credential
 3. If it fails, verify key at provider's website
 4. Check you have credits in your account
diff --git a/docs/1-INSTALLATION/single-container.md b/docs/1-INSTALLATION/single-container.md
index 33699ebd..d8b24bc4 100644
--- a/docs/1-INSTALLATION/single-container.md
+++ b/docs/1-INSTALLATION/single-container.md
@@ -47,7 +47,7 @@ docker compose up -d
 Access: `http://localhost:8502`
 
 Then configure your AI provider:
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select your provider → Paste API key
 3. Click **Save**, then **Test Connection**
 4. Click **Discover Models** → **Register Models**
@@ -59,14 +59,14 @@ Then configure your AI provider:
 2. Search "Open Notebook"
 3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
 4. Click "Deploy"
-5. Open the app → Go to **Settings → API Keys** to configure your AI provider
+5. Open the app → Go to **Settings → Models** to configure your AI provider
 
 **Railway:**
 1. Create new project
 2. Add `lfnovo/open_notebook:v1-latest-single`
 3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
 4. Deploy
-5. Open the app → Go to **Settings → API Keys** to configure your AI provider
+5. Open the app → Go to **Settings → Models** to configure your AI provider
 
 **Render:**
 1. Create new Web Service
@@ -104,7 +104,7 @@ Open Notebook ships an EasyPanel template at [`examples/easypanel/`](https://git
 - **One-click (recommended):** once the template is published to the official [EasyPanel template gallery](https://github.com/easypanel-io/templates), create a new service from "Open Notebook", set an app password (or leave it blank to auto-generate one), and deploy.
 - **Manual:** copy `examples/easypanel/` into `templates/open-notebook` in a checkout of [`easypanel-io/templates`](https://github.com/easypanel-io/templates), run the templates playground (`npm run dev`), and create the template from the generated JSON in your EasyPanel instance.
 
-After deployment, open the EasyPanel domain and configure your AI provider in **Settings → API Keys**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
+After deployment, open the EasyPanel domain and configure your AI provider in **Settings → Models**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
 
 ---
 
@@ -120,7 +120,7 @@ After deployment, open the EasyPanel domain and configure your AI provider in **
 | `SURREAL_DATABASE` | DB name | `open_notebook` |
 | `API_URL` | External URL (for remote access) | `https://myapp.example.com` |
 
-AI provider API keys are configured via the **Settings → API Keys** UI after deployment.
+AI provider API keys are configured via the **Settings → Models** UI after deployment.
 
 ---
 
@@ -140,7 +140,7 @@ AI provider API keys are configured via the **Settings → API Keys** UI after d
 
 Same as Docker Compose setup - just access via `http://localhost:8502` (local) or your platform's URL (cloud).
 
-1. Go to **Settings → API Keys** to add your AI provider credential
+1. Go to **Settings → Models** to add your AI provider credential
 2. **Test Connection** and **Discover Models**
 
 See [Docker Compose](docker-compose.md) for full post-install guide.
diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index 7fd0d050..1d14d1d6 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -71,11 +71,11 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 ## Accessing Credential Configuration
 
 1. Click **Settings** in the navigation bar
-2. Select **API Keys** tab
+2. Select **Models** tab
 3. You'll see existing credentials and an **Add Credential** button
 
 ```
-Navigation: Settings → API Keys
+Navigation: Settings → Models
 ```
 
 ---
@@ -118,7 +118,7 @@ Navigation: Settings → API Keys
 
 ### Step 1: Add Credential
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select your provider
 4. Give it a descriptive name (e.g., "My OpenAI Key", "Work Anthropic")
@@ -257,7 +257,7 @@ Google Cloud's enterprise AI platform:
 
 If you have existing API keys in environment variables (from a previous version):
 
-1. Open **Settings → API Keys**
+1. Open **Settings → Models**
 2. A banner appears: "Environment variables detected"
 3. Click **Migrate to Database**
 4. Keys are copied to the database (encrypted)
@@ -292,7 +292,7 @@ If you're upgrading from an older version that used the ProviderConfig system:
 
 - The migration happens automatically on first startup
 - Your existing configurations are converted to credentials
-- Check **Settings → API Keys** to verify the migration succeeded
+- Check **Settings → Models** to verify the migration succeeded
 - If you see issues, check the API logs for migration messages
 
 ---
@@ -356,7 +356,7 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 
 ### Provider Shows "Not Configured"
 
-1. Check if a credential exists for this provider (Settings → API Keys)
+1. Check if a credential exists for this provider (Settings → Models)
 2. Test the credential connection
 3. Verify key format matches provider requirements
 4. Re-discover and register models if needed
diff --git a/docs/3-USER-GUIDE/index.md b/docs/3-USER-GUIDE/index.md
index 75bb1b73..dc225c24 100644
--- a/docs/3-USER-GUIDE/index.md
+++ b/docs/3-USER-GUIDE/index.md
@@ -136,7 +136,7 @@ Task: "I'm exploring a concept without knowing exact words"
 → Use: Search / Vector Search (semantic similarity)
 
 Task: "I need to add or change my AI provider API keys"
-→ Use: Settings / API Keys (configure providers without editing files)
+→ Use: Settings / Models (configure providers without editing files)
 ```
 
 ---
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index b1b094cb..f1c94840 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -245,7 +245,7 @@ Any use: Free (electricity only)
 
 1. **You've chosen a provider** (from this comparison guide)
 2. **Follow the setup guide**: [AI Providers Configuration](../5-CONFIGURATION/ai-providers.md)
-3. **Add your credential** in Settings → API Keys
+3. **Add your credential** in Settings → Models
 4. **Test your connection** and discover models
 5. **Start using Open Notebook!**
 
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 927fae90..fa8f0e12 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -197,7 +197,7 @@ ESPERANTO_SSL_VERIFY=false
 
 ### Use Different Providers for Different Tasks
 
-Configure multiple AI providers via **Settings → API Keys**. Each provider gets its own credential:
+Configure multiple AI providers via **Settings → Models**. Each provider gets its own credential:
 
 1. Add a credential for your main language model provider (e.g., OpenAI, Anthropic)
 2. Add a credential for embeddings (e.g., Voyage AI, or use the same provider)
@@ -208,7 +208,7 @@ Configure multiple AI providers via **Settings → API Keys**. Each provider get
 
 When using OpenAI-Compatible providers, you can configure per-service URLs in a single credential:
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Configure separate URLs for LLM, Embedding, TTS, and STT
 4. Click **Save**, then **Test Connection**
@@ -302,7 +302,7 @@ See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-pr
 OPEN_NOTEBOOK_ENCRYPTION_KEY    # Required for storing credentials
 ```
 
-AI provider API keys are configured via **Settings → API Keys** (not environment variables).
+AI provider API keys are configured via **Settings → Models** (not environment variables).
 
 ### Database
 ```env
@@ -336,7 +336,7 @@ ESPERANTO_LLM_TIMEOUT
 TTS_BATCH_SIZE
 ```
 
-> **Note:** `ELEVENLABS_API_KEY` is deprecated. Configure ElevenLabs via **Settings → API Keys**.
+> **Note:** `ELEVENLABS_API_KEY` is deprecated. Configure ElevenLabs via **Settings → Models**.
 
 ### Debugging
 ```env
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 0a5606d5..08357bab 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -11,7 +11,7 @@ Complete setup instructions for each AI provider via the **Settings UI**.
 Open Notebook uses a **credential-based system** for managing AI providers:
 
 1. **Get your API key** from the provider's website
-2. **Open Settings** → **API Keys** → **Add Credential**
+2. **Open Settings** → **Models** → **Add Credential**
 3. **Test the connection** to verify it works
 4. **Discover & Register Models** to make them available
 5. **Start using** the provider in your notebooks
@@ -33,7 +33,7 @@ Open Notebook uses a **credential-based system** for managing AI providers:
 4. Add $5+ credits to account
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI**
 4. Give it a name (e.g., "My OpenAI Key")
@@ -78,7 +78,7 @@ Heavy use: $50-100+/month
 4. Create new API key (starts with "sk-ant-")
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Anthropic**
 4. Give it a name, paste your API key
@@ -119,7 +119,7 @@ Opus: $10-50+/month
 
 Use this provider for services that implement the Anthropic Messages API at a custom URL.
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Add an **Anthropic Compatible** credential
 3. Enter the provider's API key and base URL (the API root, with or without a trailing `/v1`)
 4. Save and test the connection
@@ -139,7 +139,7 @@ Only language models are supported for Anthropic-compatible credentials.
 3. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Google Gemini**
 4. Give it a name, paste your API key
@@ -179,7 +179,7 @@ Only language models are supported for Anthropic-compatible credentials.
 3. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Groq**
 4. Give it a name, paste your API key
@@ -223,7 +223,7 @@ Only language models are supported for Anthropic-compatible credentials.
 4. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenRouter**
 4. Give it a name, paste your API key
@@ -283,7 +283,7 @@ Heavy use: Depends on models chosen
 4. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **DashScope (Qwen)**
 4. Give it a name, paste your API key
@@ -317,7 +317,7 @@ Heavy use: Depends on models chosen
 4. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **MiniMax**
 4. Give it a name, paste your API key
@@ -352,7 +352,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Cohere**
 4. Give it a name, paste your API key
@@ -383,7 +383,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Novita**
 4. Give it a name, paste your API key
@@ -409,7 +409,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **PayPerQ**
 4. Give it a name, paste your API key
@@ -438,7 +438,7 @@ Heavy use: Depends on models chosen
 3. Download a model: `ollama pull mistral`
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Ollama**
 4. Give it a name (e.g., "Local Ollama")
@@ -456,7 +456,7 @@ See [Ollama Setup Guide](ollama.md) for detailed network configuration.
 Ollama models default to a **8,192-token** context window. This default is intentionally
 conservative so models run reliably on consumer GPUs (≈8GB VRAM) without running out of memory.
 If your hardware can handle more, set an optional **Context Window (num_ctx)** value on the
-Ollama credential (Settings → API Keys → edit the Ollama credential). It applies to all models
+Ollama credential (Settings → Models → edit the Ollama credential). It applies to all models
 that use that credential. Leave it empty to keep the default.
 
 - Raise it (e.g. `32768`) when ingesting large documents or using long chat histories.
@@ -523,7 +523,7 @@ CPU-only:
 3. Load models in the oMLX admin UI
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **oMLX**
 4. Base URL defaults to `http://localhost:11435/v1` (use `http://host.docker.internal:11435/v1` if Open Notebook is in Docker)
@@ -546,7 +546,7 @@ See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
 5. Start server (default port: 1234)
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI-Compatible**
 4. Give it a name (e.g., "LM Studio")
@@ -571,7 +571,7 @@ See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
 
 For Text Generation UI, vLLM, or other OpenAI-compatible endpoints:
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI-Compatible**
 4. Enter the base URL for your endpoint (e.g., `http://localhost:8000/v1`)
@@ -593,7 +593,7 @@ See [OpenAI-Compatible Setup](openai-compatible.md) for detailed instructions.
 1. Create Azure OpenAI service in Azure portal
 2. Deploy GPT-4/3.5-turbo model
 3. Get your endpoint and key
-4. Go to **Settings** → **API Keys**
+4. Go to **Settings** → **Models**
 5. Click **Add Credential**
 6. Select provider: **Azure OpenAI**
 7. Fill in: API Key, Endpoint, API Version
@@ -650,7 +650,7 @@ Use OpenAI
 1. **Choose your provider** from above
 2. **Get API key** (if cloud) or install locally (if Ollama)
 3. **Set `OPEN_NOTEBOOK_ENCRYPTION_KEY`** in your docker-compose.yml (required for storing credentials)
-4. **Open Settings** → **API Keys** → **Add Credential**
+4. **Open Settings** → **Models** → **Add Credential**
 5. **Test Connection** to verify it works
 6. **Discover & Register Models** to make them available
 7. **Verify it works** with a test chat
@@ -665,7 +665,7 @@ Done!
 
 > **Deprecated**: Configuring AI provider API keys via environment variables is deprecated. Use the Settings UI instead. Environment variables may still work as a fallback but are no longer the recommended approach.
 
-If you are migrating from an older version that used environment variables, go to **Settings** → **API Keys** and click the **Migrate to Database** button to import your existing keys into the credential system.
+If you are migrating from an older version that used environment variables, go to **Settings** → **Models** and click the **Migrate to Database** button to import your existing keys into the credential system.
 
 ---
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 98b3485b..4242ee53 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -193,7 +193,7 @@ SURREAL_PASSWORD=password
 SURREAL_NAMESPACE=open_notebook
 SURREAL_DATABASE=open_notebook
 ```
-Then configure AI providers via **Settings → API Keys** in the browser.
+Then configure AI providers via **Settings → Models** in the browser.
 
 ### Production Deployment
 ```
@@ -259,7 +259,7 @@ env | grep -E "^[A-Z_]+=" | sort
 - **Quote values:** Use quotes for values with spaces: `API_URL="http://my server:5055"`
 - **Restart required:** Changes take effect after restarting services
 - **Secrets:** Don't commit encryption keys or passwords to git
-- **AI Providers:** Configure via **Settings → API Keys** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
+- **AI Providers:** Configure via **Settings → Models** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
 - **Migration:** Use Settings UI to migrate existing env vars to the credential system. See [API Configuration](../3-USER-GUIDE/api-configuration.md#migrating-from-environment-variables)
 
 ---
@@ -269,7 +269,7 @@ env | grep -E "^[A-Z_]+=" | sort
 - [ ] Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in docker-compose.yml
 - [ ] Set database credentials (`SURREAL_*`)
 - [ ] Start services
-- [ ] Open browser → Go to **Settings → API Keys**
+- [ ] Open browser → Go to **Settings → Models**
 - [ ] **Add Credential** for your AI provider
 - [ ] **Test Connection** to verify
 - [ ] **Discover & Register Models**
@@ -283,35 +283,35 @@ Done!
 
 ## Legacy: AI Provider Environment Variables (Deprecated)
 
-> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Settings → API Keys** instead.
+> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Settings → Models** instead.
 
 Why the UI is the source of truth: credentials in the database are encrypted at rest (via `OPEN_NOTEBOOK_ENCRYPTION_KEY`), can be added or rotated at runtime without restarts, and support multiple credentials per provider — none of which a single env var can express.
 
 **Headless, CI/CD and Docker deployments:** a declarative provisioning contract over the credentials API (a file describing providers and credentials, with `${VAR}`-style references resolved from the environment) is being designed in [Discussion #765](https://github.com/lfnovo/open-notebook/discussions/765). Until it ships, the env fallback is the only unattended path — use it knowing it is deprecated.
 
-If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Settings → API Keys** to import them into the credential system, then remove them from your configuration.
+If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Settings → Models** to import them into the credential system, then remove them from your configuration.
 
 | Variable | Provider | Replacement |
 |----------|----------|-------------|
-| `OPENAI_API_KEY` | OpenAI | Settings → API Keys → Add OpenAI Credential |
-| `ANTHROPIC_API_KEY` | Anthropic | Settings → API Keys → Add Anthropic Credential |
-| `GOOGLE_API_KEY` | Google Gemini | Settings → API Keys → Add Google Credential |
+| `OPENAI_API_KEY` | OpenAI | Settings → Models → Add OpenAI Credential |
+| `ANTHROPIC_API_KEY` | Anthropic | Settings → Models → Add Anthropic Credential |
+| `GOOGLE_API_KEY` | Google Gemini | Settings → Models → Add Google Credential |
 | `GEMINI_API_BASE_URL` | Google Gemini | Configure in Google Gemini credential |
-| `VERTEX_PROJECT` | Vertex AI | Settings → API Keys → Add Vertex AI Credential |
+| `VERTEX_PROJECT` | Vertex AI | Settings → Models → Add Vertex AI Credential |
 | `VERTEX_LOCATION` | Vertex AI | Configure in Vertex AI credential |
 | `GOOGLE_APPLICATION_CREDENTIALS` | Vertex AI | Configure in Vertex AI credential |
-| `GROQ_API_KEY` | Groq | Settings → API Keys → Add Groq Credential |
-| `MISTRAL_API_KEY` | Mistral | Settings → API Keys → Add Mistral Credential |
-| `DEEPSEEK_API_KEY` | DeepSeek | Settings → API Keys → Add DeepSeek Credential |
-| `XAI_API_KEY` | xAI | Settings → API Keys → Add xAI Credential |
-| `OLLAMA_API_BASE` | Ollama | Settings → API Keys → Add Ollama Credential |
-| `OMLX_API_BASE` | oMLX | Settings → API Keys → Add oMLX Credential |
+| `GROQ_API_KEY` | Groq | Settings → Models → Add Groq Credential |
+| `MISTRAL_API_KEY` | Mistral | Settings → Models → Add Mistral Credential |
+| `DEEPSEEK_API_KEY` | DeepSeek | Settings → Models → Add DeepSeek Credential |
+| `XAI_API_KEY` | xAI | Settings → Models → Add xAI Credential |
+| `OLLAMA_API_BASE` | Ollama | Settings → Models → Add Ollama Credential |
+| `OMLX_API_BASE` | oMLX | Settings → Models → Add oMLX Credential |
 | `OMLX_API_KEY` | oMLX | Optional; only if oMLX was started with `--api-key` |
-| `OPENROUTER_API_KEY` | OpenRouter | Settings → API Keys → Add OpenRouter Credential |
+| `OPENROUTER_API_KEY` | OpenRouter | Settings → Models → Add OpenRouter Credential |
 | `OPENROUTER_BASE_URL` | OpenRouter | Configure in OpenRouter credential |
-| `VOYAGE_API_KEY` | Voyage AI | Settings → API Keys → Add Voyage AI Credential |
-| `ELEVENLABS_API_KEY` | ElevenLabs | Settings → API Keys → Add ElevenLabs Credential |
-| `OPENAI_COMPATIBLE_BASE_URL` | OpenAI-Compatible | Settings → API Keys → Add OpenAI-Compatible Credential |
+| `VOYAGE_API_KEY` | Voyage AI | Settings → Models → Add Voyage AI Credential |
+| `ELEVENLABS_API_KEY` | ElevenLabs | Settings → Models → Add ElevenLabs Credential |
+| `OPENAI_COMPATIBLE_BASE_URL` | OpenAI-Compatible | Settings → Models → Add OpenAI-Compatible Credential |
 | `OPENAI_COMPATIBLE_API_KEY` | OpenAI-Compatible | Configure in OpenAI-Compatible credential |
 | `OPENAI_COMPATIBLE_BASE_URL_LLM` | OpenAI-Compatible | Configure per-service URL in credential |
 | `OPENAI_COMPATIBLE_API_KEY_LLM` | OpenAI-Compatible | Configure per-service key in credential |
@@ -321,12 +321,12 @@ If you have these variables configured from a previous installation, click the *
 | `OPENAI_COMPATIBLE_API_KEY_STT` | OpenAI-Compatible | Configure per-service key in credential |
 | `OPENAI_COMPATIBLE_BASE_URL_TTS` | OpenAI-Compatible | Configure per-service URL in credential |
 | `OPENAI_COMPATIBLE_API_KEY_TTS` | OpenAI-Compatible | Configure per-service key in credential |
-| `DASHSCOPE_API_KEY` | DashScope (Qwen) | Settings → API Keys → Add DashScope Credential |
-| `MINIMAX_API_KEY` | MiniMax | Settings → API Keys → Add MiniMax Credential |
-| `NOVITA_API_KEY` | Novita | Settings → API Keys → Add Novita Credential |
-| `PPQ_API_KEY` | PayPerQ (PPQ) | Settings → API Keys → Add PayPerQ Credential |
-| `COHERE_API_KEY` | Cohere | Settings → API Keys → Add Cohere Credential |
-| `AZURE_OPENAI_API_KEY` | Azure OpenAI | Settings → API Keys → Add Azure OpenAI Credential |
+| `DASHSCOPE_API_KEY` | DashScope (Qwen) | Settings → Models → Add DashScope Credential |
+| `MINIMAX_API_KEY` | MiniMax | Settings → Models → Add MiniMax Credential |
+| `NOVITA_API_KEY` | Novita | Settings → Models → Add Novita Credential |
+| `PPQ_API_KEY` | PayPerQ (PPQ) | Settings → Models → Add PayPerQ Credential |
+| `COHERE_API_KEY` | Cohere | Settings → Models → Add Cohere Credential |
+| `AZURE_OPENAI_API_KEY` | Azure OpenAI | Settings → Models → Add Azure OpenAI Credential |
 | `AZURE_OPENAI_ENDPOINT` | Azure OpenAI | Configure in Azure OpenAI credential |
 | `AZURE_OPENAI_API_VERSION` | Azure OpenAI | Configure in Azure OpenAI credential |
 | `AZURE_OPENAI_API_KEY_LLM` | Azure OpenAI | Configure per-service in credential |
diff --git a/docs/5-CONFIGURATION/index.md b/docs/5-CONFIGURATION/index.md
index ffcc961b..7442e582 100644
--- a/docs/5-CONFIGURATION/index.md
+++ b/docs/5-CONFIGURATION/index.md
@@ -93,7 +93,7 @@ We need access to LLMs in order for the app to work. AI provider credentials are
 
 1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment (required for storing credentials)
 2. Start services
-3. Go to **Settings → API Keys → Add Credential**
+3. Go to **Settings → Models → Add Credential**
 4. Select your provider, paste your API key
 5. **Test Connection** → **Discover Models** → **Register Models**
 
@@ -102,9 +102,9 @@ We need access to LLMs in order for the app to work. AI provider credentials are
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 ```
 
-> **Ollama users**: Add an Ollama credential in Settings → API Keys with the correct base URL. See [Ollama Setup](ollama.md) for network configuration help.
+> **Ollama users**: Add an Ollama credential in Settings → Models with the correct base URL. See [Ollama Setup](ollama.md) for network configuration help.
 
-> **LM Studio / OpenAI-Compatible**: Add an OpenAI-Compatible credential in Settings → API Keys. See [OpenAI-Compatible Guide](openai-compatible.md).
+> **LM Studio / OpenAI-Compatible**: Add an OpenAI-Compatible credential in Settings → Models. See [OpenAI-Compatible Guide](openai-compatible.md).
 
 
 ### API URL (If Behind Reverse Proxy)
@@ -126,7 +126,7 @@ Auto-detection works for most setups.
 # In docker.env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 # Everything else uses defaults
-# Then configure AI provider in Settings → API Keys
+# Then configure AI provider in Settings → Models
 ```
 
 ### Scenario 2: Docker on Remote Server
@@ -148,14 +148,14 @@ API_URL=https://your-domain.com
 ```env
 # In .env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Ollama credential in Settings → API Keys
+# Then add Ollama credential in Settings → Models
 ```
 
 ### Scenario 5: Using Azure OpenAI
 ```env
 # In docker.env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Azure OpenAI credential in Settings → API Keys
+# Then add Azure OpenAI credential in Settings → Models
 ```
 
 ---
@@ -241,7 +241,7 @@ The recommended way to configure AI providers:
 
 ```
 1. Open Open Notebook in your browser
-2. Go to Settings → API Keys
+2. Go to Settings → Models
 3. Click "Add Credential"
 4. Select provider, enter API key
 5. Click Save, then Test Connection
@@ -294,7 +294,7 @@ After configuration, verify it works:
 
 | Mistake | Problem | Fix |
 |---------|---------|-----|
-| No credential configured | Models not available | Add credential in Settings → API Keys |
+| No credential configured | Models not available | Add credential in Settings → Models |
 | Missing encryption key | Can't save credentials | Set OPEN_NOTEBOOK_ENCRYPTION_KEY |
 | Wrong database URL | Can't start API | Check SURREAL_URL format |
 | Expose port 5055 | "Can't connect to server" | Expose 5055 in docker-compose |
@@ -326,7 +326,7 @@ Once configured:
 **Minimal configuration to run:**
 1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment
 2. Start services
-3. Add AI provider credential in Settings → API Keys
+3. Add AI provider credential in Settings → Models
 4. Done!
 
 Everything else is optional optimization.
diff --git a/docs/5-CONFIGURATION/local-stt.md b/docs/5-CONFIGURATION/local-stt.md
index 4b5bac3b..fffd7b52 100644
--- a/docs/5-CONFIGURATION/local-stt.md
+++ b/docs/5-CONFIGURATION/local-stt.md
@@ -74,7 +74,7 @@ You should see the transcribed text in the response.
 ### Step 4: Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL for STT: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
 4. Click **Save**, then **Test Connection**
@@ -174,7 +174,7 @@ This is recommended if you have enough RAM/VRAM, as loading the model can take a
 
 ## Docker Networking
 
-When configuring your OpenAI-Compatible credential in **Settings → API Keys**, use the appropriate STT base URL for your setup:
+When configuring your OpenAI-Compatible credential in **Settings → Models**, use the appropriate STT base URL for your setup:
 
 ### Open Notebook in Docker (macOS/Windows)
 
@@ -334,7 +334,7 @@ docker stats speaches
 
 ## Using Both TTS and STT
 
-Speaches supports both TTS and STT in one server. In **Settings → API Keys**, add a single **OpenAI-Compatible** credential and configure both the TTS and STT base URLs to point to the same Speaches server (e.g., `http://localhost:8969/v1`).
+Speaches supports both TTS and STT in one server. In **Settings → Models**, add a single **OpenAI-Compatible** credential and configure both the TTS and STT base URLs to point to the same Speaches server (e.g., `http://localhost:8969/v1`).
 
 See **[Local TTS Setup](local-tts.md)** for TTS configuration.
 
@@ -354,7 +354,7 @@ Any OpenAI-compatible STT server works:
 The key requirements:
 
 1. Server implements `/v1/audio/transcriptions` endpoint
-2. Add an OpenAI-Compatible credential in **Settings → API Keys** with the STT base URL
+2. Add an OpenAI-Compatible credential in **Settings → Models** with the STT base URL
 3. Add model with provider `openai_compatible`
 
 ---
diff --git a/docs/5-CONFIGURATION/local-tts.md b/docs/5-CONFIGURATION/local-tts.md
index 27784ec1..573a6d7f 100644
--- a/docs/5-CONFIGURATION/local-tts.md
+++ b/docs/5-CONFIGURATION/local-tts.md
@@ -75,7 +75,7 @@ Play `test.mp3` to verify.
 ### Step 4: Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL for TTS: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
 4. Click **Save**, then **Test Connection**
@@ -175,7 +175,7 @@ volumes:
 
 ## Docker Networking
 
-When configuring your OpenAI-Compatible credential in **Settings → API Keys**, use the appropriate TTS base URL for your setup:
+When configuring your OpenAI-Compatible credential in **Settings → Models**, use the appropriate TTS base URL for your setup:
 
 ### Open Notebook in Docker (macOS/Windows)
 
@@ -331,7 +331,7 @@ docker stats speaches
 Any OpenAI-compatible TTS server works. The key is:
 
 1. Server implements `/v1/audio/speech` endpoint
-2. Add an OpenAI-Compatible credential in **Settings → API Keys** with the TTS base URL
+2. Add an OpenAI-Compatible credential in **Settings → Models** with the TTS base URL
 3. Add model with provider `openai_compatible`
 
 ---
diff --git a/docs/5-CONFIGURATION/ollama.md b/docs/5-CONFIGURATION/ollama.md
index 881dddb1..09f41a0c 100644
--- a/docs/5-CONFIGURATION/ollama.md
+++ b/docs/5-CONFIGURATION/ollama.md
@@ -39,7 +39,7 @@ ollama pull mxbai-embed-large  # Best embedding model for Ollama
 ### 3. Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **Ollama**
 3. Enter the base URL (see [Network Configuration](#network-configuration-guide) below for correct URL)
 4. Click **Save**, then **Test Connection**
@@ -53,17 +53,17 @@ export OLLAMA_API_BASE=http://localhost:11434
 export OLLAMA_API_BASE=http://host.docker.internal:11434
 ```
 
-> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Settings → API Keys** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
+> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Settings → Models** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
 
 ## Network Configuration Guide
 
-When adding an Ollama credential in **Settings → API Keys**, you need to enter the correct base URL. The correct URL depends on your deployment scenario:
+When adding an Ollama credential in **Settings → Models**, you need to enter the correct base URL. The correct URL depends on your deployment scenario:
 
 ### Scenario 1: Local Installation (Same Machine)
 
 When both Open Notebook and Ollama run directly on your machine:
 
-**Base URL to enter in Settings → API Keys:** `http://localhost:11434`
+**Base URL to enter in Settings → Models:** `http://localhost:11434`
 
 Alternative: `http://127.0.0.1:11434` (use if you have DNS resolution issues with localhost)
 
@@ -71,7 +71,7 @@ Alternative: `http://127.0.0.1:11434` (use if you have DNS resolution issues wit
 
 When Open Notebook runs in Docker but Ollama runs on your host machine:
 
-**Base URL to enter in Settings → API Keys:** `http://host.docker.internal:11434`
+**Base URL to enter in Settings → Models:** `http://host.docker.internal:11434`
 
 **⚠️ CRITICAL: Ollama must accept external connections:**
 ```bash
@@ -113,7 +113,7 @@ httpcore.ConnectError: [Errno -2] Name or service not known
 
 When both Open Notebook and Ollama run in the same Docker Compose stack:
 
-**Base URL to enter in Settings → API Keys:** `http://ollama:11434`
+**Base URL to enter in Settings → Models:** `http://ollama:11434`
 
 **Docker Compose Example:**
 
@@ -157,7 +157,7 @@ volumes:
 
 When Ollama runs on a different machine in your network:
 
-**Base URL to enter in Settings → API Keys:** `http://192.168.1.100:11434` (replace with your Ollama server's IP)
+**Base URL to enter in Settings → Models:** `http://192.168.1.100:11434` (replace with your Ollama server's IP)
 
 **Security Note:** Only use this in trusted networks. Ollama doesn't have built-in authentication.
 
@@ -170,7 +170,7 @@ If you've configured Ollama to use a different port:
 OLLAMA_HOST=0.0.0.0:8080 ollama serve
 ```
 
-**Base URL to enter in Settings → API Keys:** `http://localhost:8080`
+**Base URL to enter in Settings → Models:** `http://localhost:8080`
 
 ## Model Recommendations
 
@@ -294,7 +294,7 @@ curl http://localhost:11434/api/tags
 ```
 
 **Verify credential is configured:**
-Check **Settings → API Keys** for an Ollama credential with the correct base URL.
+Check **Settings → Models** for an Ollama credential with the correct base URL.
 
 **⚠️ IMPORTANT: Enable external connections (most common fix):**
 ```bash
@@ -373,7 +373,7 @@ netstat -tulpn | grep 11434
 ```bash
 OLLAMA_HOST=0.0.0.0:8080 ollama serve
 ```
-Then update the base URL in **Settings → API Keys** to `http://localhost:8080`
+Then update the base URL in **Settings → Models** to `http://localhost:8080`
 
 **6. "Failed to send message" in Chat**
 
@@ -436,7 +436,7 @@ services:
     # ... rest of your config
 ```
 
-Then in **Settings → API Keys**, use base URL: `http://host.docker.internal:11434`
+Then in **Settings → Models**, use base URL: `http://host.docker.internal:11434`
 
 This maps `host.docker.internal` to your host machine's IP. macOS/Windows Docker Desktop does this automatically, but Linux requires explicit configuration.
 
@@ -445,7 +445,7 @@ This maps `host.docker.internal` to your host machine's IP. macOS/Windows Docker
 # Use host networking if host.docker.internal doesn't work
 docker run --network host lfnovo/open_notebook:v1-latest  # for quick testing only
 ```
-Then in **Settings → API Keys**, use base URL: `http://localhost:11434`
+Then in **Settings → Models**, use base URL: `http://localhost:11434`
 
 **3. Custom bridge network:**
 ```yaml
@@ -464,7 +464,7 @@ services:
       - ollama_network
 ```
 
-Then in **Settings → API Keys**, use base URL: `http://ollama:11434`
+Then in **Settings → Models**, use base URL: `http://ollama:11434`
 
 **4. Firewall issues:**
 ```bash
@@ -542,7 +542,7 @@ export OLLAMA_MAX_QUEUE=512            # Request queue size
 export OLLAMA_NUM_PARALLEL=4           # Parallel request handling
 export OLLAMA_FLASH_ATTENTION=1        # Enable flash attention (if supported)
 
-# Open Notebook configuration (configure via Settings → API Keys instead)
+# Open Notebook configuration (configure via Settings → Models instead)
 # OLLAMA_API_BASE=http://localhost:11434  # Deprecated fallback — works today, no guarantee
 ```
 
diff --git a/docs/5-CONFIGURATION/omlx.md b/docs/5-CONFIGURATION/omlx.md
index 6903c2ef..a48df6bf 100644
--- a/docs/5-CONFIGURATION/omlx.md
+++ b/docs/5-CONFIGURATION/omlx.md
@@ -2,7 +2,7 @@
 
 [oMLX](https://omlx.ai/) is a macOS-native inference server for Apple Silicon. It runs [MLX](https://opensource.apple.com/projects/mlx/) models locally and exposes an **OpenAI-compatible API** at `/v1`, so Open Notebook can use it for language and embedding models without sending data to the cloud.
 
-Open Notebook treats **oMLX** as a first-class provider in Settings → API Keys. Identity comes from Esperanto’s built-in `omlx` [OpenAI-compatible profile](https://github.com/lfnovo/esperanto/issues/228) (`AIFactory.create_language("omlx", ...)` / `create_embedding("omlx", ...)`). There is no remapping to the generic `openai-compatible` provider and no `OPENAI_COMPATIBLE_*` env mirroring.
+Open Notebook treats **oMLX** as a first-class provider in Settings → Models. Identity comes from Esperanto’s built-in `omlx` [OpenAI-compatible profile](https://github.com/lfnovo/esperanto/issues/228) (`AIFactory.create_language("omlx", ...)` / `create_embedding("omlx", ...)`). There is no remapping to the generic `openai-compatible` provider and no `OPENAI_COMPATIBLE_*` env mirroring.
 
 ## Why Choose oMLX?
 
@@ -61,7 +61,7 @@ http://localhost:11435/v1
 
 ## Configure Open Notebook
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → select **oMLX**
 3. Set **Base URL** to `http://localhost:11435/v1` (prefilled by default)
 4. Optionally set an **API key** if you started oMLX with `--api-key`
diff --git a/docs/5-CONFIGURATION/openai-compatible.md b/docs/5-CONFIGURATION/openai-compatible.md
index 2a40eee1..6287f040 100644
--- a/docs/5-CONFIGURATION/openai-compatible.md
+++ b/docs/5-CONFIGURATION/openai-compatible.md
@@ -43,7 +43,7 @@ Open Notebook can connect to any server using this format.
 
 ### Step 2: Configure in Settings UI (Recommended)
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL: `http://host.docker.internal:1234/v1` (Docker) or `http://localhost:1234/v1` (local)
 4. API key: `lm-studio` (placeholder, LM Studio doesn't require one)
@@ -71,7 +71,7 @@ export OPENAI_COMPATIBLE_API_KEY=not-needed
 
 The recommended way to configure OpenAI-compatible providers is through the Settings UI:
 
-1. Go to **Settings** → **API Keys**
+1. Go to **Settings** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter your base URL and API key (if needed)
 4. Optionally configure per-service URLs for LLM, Embedding, TTS, and STT
@@ -113,7 +113,7 @@ OPENAI_COMPATIBLE_API_KEY_STT=optional-api-key
 
 ## Docker Networking
 
-When Open Notebook runs in Docker and your compatible server runs on the host, use the appropriate base URL when adding your credential in **Settings → API Keys**:
+When Open Notebook runs in Docker and your compatible server runs on the host, use the appropriate base URL when adding your credential in **Settings → Models**:
 
 ### macOS / Windows
 
@@ -140,7 +140,7 @@ services:
       - "1234:1234"
 ```
 
-**Base URL in Settings → API Keys:** `http://lm-studio:1234/v1`
+**Base URL in Settings → Models:** `http://lm-studio:1234/v1`
 
 ---
 
@@ -154,7 +154,7 @@ python server.py --api --listen
 
 ### Configure Open Notebook
 
-In **Settings → API Keys**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:5000/v1`
+In **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:5000/v1`
 
 ### Docker Compose Example
 
@@ -177,7 +177,7 @@ services:
       - text-gen
 ```
 
-Then in **Settings → API Keys**, add an **OpenAI-Compatible** credential with base URL: `http://text-gen:5000/v1`
+Then in **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://text-gen:5000/v1`
 
 ---
 
@@ -193,7 +193,7 @@ python -m vllm.entrypoints.openai.api_server \
 
 ### Configure Open Notebook
 
-In **Settings → API Keys**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:8000/v1`
+In **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:8000/v1`
 
 ### Docker Compose with GPU
 
@@ -225,7 +225,7 @@ services:
       - vllm
 ```
 
-Then in **Settings → API Keys**, add an **OpenAI-Compatible** credential with base URL: `http://vllm:8000/v1`
+Then in **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://vllm:8000/v1`
 
 ---
 
@@ -321,7 +321,7 @@ Problem: 401 or authentication failed
 
 Solutions:
 1. Check if server requires API key
-2. Set the API key in your credential (Settings → API Keys)
+2. Set the API key in your credential (Settings → Models)
 3. Some servers need any non-empty key (use a placeholder like "not-needed")
 ```
 
@@ -341,7 +341,7 @@ Solutions:
 
 ## Multiple Compatible Endpoints
 
-You can use different compatible servers for different purposes. When adding an **OpenAI-Compatible** credential in **Settings → API Keys**, you can configure per-service URLs:
+You can use different compatible servers for different purposes. When adding an **OpenAI-Compatible** credential in **Settings → Models**, you can configure per-service URLs:
 
 - **LLM URL**: e.g., `http://localhost:1234/v1` (LM Studio)
 - **Embedding URL**: e.g., `http://localhost:8080/v1` (different server)
diff --git a/docs/6-TROUBLESHOOTING/ai-chat-issues.md b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
index 24ba567a..91ae6e4b 100644
--- a/docs/6-TROUBLESHOOTING/ai-chat-issues.md
+++ b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
@@ -71,7 +71,7 @@ ollama list
 
 ### Solution 1: Add Credential via Settings UI
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. Click "Add Credential"
 3. Select your provider (e.g., OpenAI, Anthropic, Google)
 4. Enter your API key
@@ -82,7 +82,7 @@ ollama list
 
 ### Solution 2: Check Key is Valid
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. Click "Test Connection" on your credential
 3. If it shows "Invalid API key":
    - Get a fresh key from the provider's website
@@ -91,7 +91,7 @@ ollama list
 
 ### Solution 3: Switch Provider
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. Add a credential for a different provider
 3. Test Connection → Discover Models → Register Models
 4. Go to Settings → Models to select the new provider's models
@@ -109,7 +109,7 @@ ollama list
 
 ### Step 1: Test Your Credential
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. Click "Test Connection" on your credential
 3. If it fails, proceed to Step 2
 ```
@@ -126,7 +126,7 @@ Generate new key and copy exactly (no extra spaces)
 
 ### Step 3: Update Credential
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. Delete the old credential
 3. Click "Add Credential" → select provider
 4. Paste the new key
diff --git a/docs/6-TROUBLESHOOTING/connection-issues.md b/docs/6-TROUBLESHOOTING/connection-issues.md
index 1d10bb8a..28e93745 100644
--- a/docs/6-TROUBLESHOOTING/connection-issues.md
+++ b/docs/6-TROUBLESHOOTING/connection-issues.md
@@ -429,7 +429,7 @@ ESPERANTO_SSL_VERIFY=false
 ### Solution 3: Use HTTP Instead
 If services are on a trusted local network, HTTP is acceptable:
 ```
-Change the base URL in your credential (Settings → API Keys) from https:// to http://
+Change the base URL in your credential (Settings → Models) from https:// to http://
 Example: http://localhost:1234/v1
 ```
 
diff --git a/docs/6-TROUBLESHOOTING/quick-fixes.md b/docs/6-TROUBLESHOOTING/quick-fixes.md
index fe5bc550..76f889c6 100644
--- a/docs/6-TROUBLESHOOTING/quick-fixes.md
+++ b/docs/6-TROUBLESHOOTING/quick-fixes.md
@@ -44,7 +44,7 @@ docker compose restart
 **Solution (1 minute):**
 
 ```
-1. Go to Settings → API Keys
+1. Go to Settings → Models
 2. If no credential exists, click "Add Credential" and add one
 3. If a credential exists, click "Test Connection"
 4. If test fails, delete and re-create with correct key
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index 9e43a586..230654fd 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -66,7 +66,7 @@ LOG_LEVEL=DEBUG
 
 After starting the API and frontend, configure your AI provider via the Settings UI:
 
-1. Open **http://localhost:3000** → **Settings** → **API Keys**
+1. Open **http://localhost:3000** → **Settings** → **Models**
 2. Click **Add Credential** → Select your provider
 3. Enter your API key (get from provider dashboard)
 4. Click **Save**, then **Test Connection**
@@ -436,7 +436,7 @@ ollama pull mistral
 ```
 
 Then configure via the Settings UI:
-1. Go to **Settings** → **API Keys** → **Add Credential** → **Ollama**
+1. Go to **Settings** → **Models** → **Add Credential** → **Ollama**
 2. Enter base URL: `http://localhost:11434`
 3. Click **Save**, then **Test Connection**
 4. Click **Discover Models** → **Register Models**
diff --git a/frontend/next.config.ts b/frontend/next.config.ts
index f19b0f4a..defc80b2 100644
--- a/frontend/next.config.ts
+++ b/frontend/next.config.ts
@@ -40,6 +40,18 @@ const nextConfig: NextConfig = {
       },
     ]
   },
+
+  // Redirect the legacy credentials route to the canonical "Models" route so
+  // existing bookmarks and links keep working.
+  async redirects() {
+    return [
+      {
+        source: '/settings/api-keys',
+        destination: '/settings/models',
+        permanent: true,
+      },
+    ]
+  },
 };
 
 export default nextConfig;
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx b/frontend/src/app/(dashboard)/settings/models/page.test.tsx
similarity index 100%
rename from frontend/src/app/(dashboard)/settings/api-keys/page.test.tsx
rename to frontend/src/app/(dashboard)/settings/models/page.test.tsx
diff --git a/frontend/src/app/(dashboard)/settings/api-keys/page.tsx b/frontend/src/app/(dashboard)/settings/models/page.tsx
similarity index 100%
rename from frontend/src/app/(dashboard)/settings/api-keys/page.tsx
rename to frontend/src/app/(dashboard)/settings/models/page.tsx
diff --git a/frontend/src/components/common/CommandPalette.tsx b/frontend/src/components/common/CommandPalette.tsx
index a4005c92..f0af35fc 100644
--- a/frontend/src/components/common/CommandPalette.tsx
+++ b/frontend/src/components/common/CommandPalette.tsx
@@ -37,7 +37,7 @@ const getNavigationItems = (t: TFunction) => [
   { name: t('navigation.notebooks'), href: '/notebooks', icon: Book, keywords: ['notes', 'research', 'projects'] },
   { name: t('navigation.askAndSearch'), href: '/search', icon: Search, keywords: ['find', 'query'] },
   { name: t('navigation.podcasts'), href: '/podcasts', icon: Mic, keywords: ['audio', 'episodes', 'generate'] },
-  { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot, keywords: ['ai', 'llm', 'providers', 'openai', 'anthropic'] },
+  { name: t('navigation.models'), href: '/settings/models', icon: Bot, keywords: ['ai', 'llm', 'providers', 'openai', 'anthropic'] },
   { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle, keywords: ['prompts', 'templates', 'actions'] },
   { name: t('navigation.settings'), href: '/settings', icon: Settings, keywords: ['preferences', 'config', 'options'] },
   { name: t('navigation.advanced'), href: '/advanced', icon: Wrench, keywords: ['debug', 'system', 'tools'] },
diff --git a/frontend/src/components/layout/AppSidebar.test.tsx b/frontend/src/components/layout/AppSidebar.test.tsx
index bd676534..621b463d 100644
--- a/frontend/src/components/layout/AppSidebar.test.tsx
+++ b/frontend/src/components/layout/AppSidebar.test.tsx
@@ -1,6 +1,7 @@
 /* eslint-disable @typescript-eslint/no-explicit-any */
 import { render, screen, fireEvent } from '@testing-library/react'
-import { describe, it, expect, vi } from 'vitest'
+import { describe, it, expect, vi, afterEach } from 'vitest'
+import { usePathname } from 'next/navigation'
 import { AppSidebar } from './AppSidebar'
 import { useSidebarStore } from '@/lib/stores/sidebar-store'
 
@@ -13,6 +14,23 @@ vi.mock('@/components/ui/tooltip', () => ({
 }))
 
 describe('AppSidebar', () => {
+  afterEach(() => {
+    vi.mocked(usePathname).mockReturnValue('')
+  })
+
+  it('highlights only Models (not Settings) on the Models page', () => {
+    vi.mocked(usePathname).mockReturnValue('/settings/models')
+
+    const { container } = render(<AppSidebar />)
+
+    const modelsButton = container.querySelector('a[href="/settings/models"] button')
+    const settingsButton = container.querySelector('a[href="/settings"] button')
+
+    expect(modelsButton?.className).toContain('font-semibold')
+    expect(settingsButton?.className).toContain('font-medium')
+    expect(settingsButton?.className).not.toContain('font-semibold')
+  })
+
   it('renders correctly when expanded', () => {
     render(<AppSidebar />)
 
diff --git a/frontend/src/components/layout/AppSidebar.tsx b/frontend/src/components/layout/AppSidebar.tsx
index 7ad5dd7e..8094595c 100644
--- a/frontend/src/components/layout/AppSidebar.tsx
+++ b/frontend/src/components/layout/AppSidebar.tsx
@@ -65,7 +65,7 @@ const getNavigation = (t: TFunction) => [
   {
     title: t('navigation.manage'),
     items: [
-      { name: t('navigation.models'), href: '/settings/api-keys', icon: Bot, iconClass: undefined },
+      { name: t('navigation.models'), href: '/settings/models', icon: Bot, iconClass: undefined },
       { name: t('navigation.transformations'), href: '/transformations', icon: Shuffle, iconClass: undefined },
       { name: t('navigation.settings'), href: '/settings', icon: Settings, iconClass: undefined },
       { name: t('navigation.advanced'), href: '/advanced', icon: Wrench, iconClass: undefined },
@@ -94,6 +94,15 @@ export function AppSidebar() {
   const { isCollapsed, toggleCollapse } = useSidebarStore()
   const { openSourceDialog, openNotebookDialog, openPodcastDialog } = useCreateDialogs()
 
+  // The active item is the longest href that prefixes the current path.
+  // Longest-wins keeps `/settings` from also highlighting on `/settings/models`
+  // (the Models page is a URL child of the Settings page but a distinct item).
+  const activeHref = navigation
+    .map((section) => section.items)
+    .flat()
+    .filter((item) => pathname === item.href || pathname?.startsWith(`${item.href}/`))
+    .sort((a, b) => b.href.length - a.href.length)[0]?.href
+
   const [createMenuOpen, setCreateMenuOpen] = useState(false)
   const [isMac, setIsMac] = useState(true) // Default to Mac for SSR
 
@@ -257,7 +266,7 @@ export function AppSidebar() {
                 )}
 
                 {section.items.map((item) => {
-                  const isActive = pathname?.startsWith(item.href) || false
+                  const isActive = item.href === activeHref
                   const button = (
                     <Button
                       variant="ghost"
diff --git a/frontend/src/components/layout/SetupBanner.tsx b/frontend/src/components/layout/SetupBanner.tsx
index 54d2765b..c9712402 100644
--- a/frontend/src/components/layout/SetupBanner.tsx
+++ b/frontend/src/components/layout/SetupBanner.tsx
@@ -72,7 +72,7 @@ export function SetupBanner() {
             asChild
             className="shrink-0 border-warn text-warn hover:bg-warn-tint"
           >
-            <Link href="/settings/api-keys">
+            <Link href="/settings/models">
               {t('setupBanner.goToSettings')}
               <ArrowRight className="ml-2 h-4 w-4" />
             </Link>
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index a6af786b..a276074e 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -927,8 +927,8 @@ export const bnIN = {
     addCustomModel: "\"{{name}}\" যোগ করুন",
   },
   apiKeys: {
-    title: "আপনার নিজের API কী দিয়ে আপনার AI কনফিগার করুন",
-    description: "Open Notebook এ AI প্রোভাইডার সক্ষম করতে ডেটাবেসে নিরাপদভাবে API কী সংরক্ষণ করুন।",
+    title: "মডেলগুলি",
+    description: "আপনার AI প্রোভাইডারগুলিকে সংযুক্ত করুন এবং তাদের শংসাপত্র নিরাপদে সংরক্ষণ করুন।",
     encryptionRequired: "এনক্রিপশন কী কনফিগার করা হয়নি",
     encryptionRequiredDescription: "ডেটাবেসে API কী সংরক্ষণ করতে OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable যেকোন গোপন স্ট্রিংয়ে সেট করুন।",
     configured: "কনফিগার করা",
@@ -942,7 +942,7 @@ export const bnIN = {
     migrationSuccess: "{{count}}টি API কী সফলভাবে মাইগ্রেট হয়েছে",
     migrationErrors: "{{count}}টি কী মাইগ্রেট করতে ব্যর্থ",
     migrationNothingToMigrate: "সব কী ইতিমধ্যে ডেটাবেসে আছে",
-    learnMore: "API কী কনফিগার করা শিখুন →",
+    learnMore: "AI প্রোভাইডার সংযুক্ত করা শিখুন →",
     testConnection: "সংযোগ পরীক্ষা",
     testSuccess: "সংযোগ সফল",
     testFailed: "সংযোগ পরীক্ষা ব্যর্থ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 34a385b7..e1be4903 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -926,8 +926,8 @@ export const caES = {
     addCustomModel: "Afegeix «{{name}}»",
   },
   apiKeys: {
-    title: "Configura la teva IA amb les teves pròpies claus de l'API",
-    description: "Emmagatzema les claus de l'API de manera segura a la base de dades per habilitar els proveïdors d'IA a Open Notebook.",
+    title: "Models",
+    description: "Connecta els teus proveïdors d'IA i emmagatzema les seves credencials de manera segura.",
     encryptionRequired: "Clau de xifratge no configurada",
     encryptionRequiredDescription: "Estableix la variable d'entorn OPEN_NOTEBOOK_ENCRYPTION_KEY a qualsevol cadena secreta per habilitar l'emmagatzematge de claus de l'API a la base de dades.",
     configured: "Configurat",
@@ -941,7 +941,7 @@ export const caES = {
     migrationSuccess: "S'han migrat correctament {{count}} clau(es) de l'API",
     migrationErrors: "{{count}} clau(es) no s'han pogut migrar",
     migrationNothingToMigrate: "Totes les claus ja estan a la base de dades",
-    learnMore: "Aprèn a configurar les claus de l'API →",
+    learnMore: "Aprèn a connectar proveïdors d'IA →",
     testConnection: "Prova la connexió",
     testSuccess: "Connexió correcta",
     testFailed: "Ha fallat la prova de connexió",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 38eed8f0..65494cc1 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -929,8 +929,8 @@ export const deDE = {
     addCustomModel: "\"{{name}}\" hinzufügen",
   },
   apiKeys: {
-    title: "KI mit eigenen API-Schlüsseln konfigurieren",
-    description: "Speichere API-Schlüssel sicher in der Datenbank, um KI-Anbieter in Open Notebook zu aktivieren.",
+    title: "Modelle",
+    description: "Verbinde deine KI-Anbieter und speichere ihre Zugangsdaten sicher.",
     encryptionRequired: "Verschlüsselungsschlüssel nicht konfiguriert",
     encryptionRequiredDescription: "Setze die Umgebungsvariable OPEN_NOTEBOOK_ENCRYPTION_KEY auf eine beliebige geheime Zeichenkette, um API-Schlüssel in der Datenbank speichern zu können.",
     configured: "Konfiguriert",
@@ -944,7 +944,7 @@ export const deDE = {
     migrationSuccess: "{{count}} API-Schlüssel erfolgreich migriert",
     migrationErrors: "{{count}} Schlüssel konnten nicht migriert werden",
     migrationNothingToMigrate: "Alle Schlüssel sind bereits in der Datenbank",
-    learnMore: "Erfahre, wie API-Schlüssel konfiguriert werden →",
+    learnMore: "Erfahre, wie du KI-Anbieter verbindest →",
     testConnection: "Verbindung testen",
     testSuccess: "Verbindung erfolgreich",
     testFailed: "Verbindungstest fehlgeschlagen",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index d367424a..1cfd09ba 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -925,8 +925,8 @@ export const enUS = {
     addCustomModel: "Add \"{{name}}\"",
   },
   apiKeys: {
-    title: "Configure your AI with your own API keys",
-    description: "Store API keys securely in the database to enable AI providers in Open Notebook.",
+    title: "Models",
+    description: "Connect your AI providers and securely store their credentials.",
     encryptionRequired: "Encryption key not configured",
     encryptionRequiredDescription: "Set the OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable to any secret string to enable storing API keys in the database.",
     configured: "Configured",
@@ -940,7 +940,7 @@ export const enUS = {
     migrationSuccess: "{{count}} API key(s) migrated successfully",
     migrationErrors: "{{count}} key(s) failed to migrate",
     migrationNothingToMigrate: "All keys are already in the database",
-    learnMore: "Learn how to configure API keys →",
+    learnMore: "Learn how to connect AI providers →",
     testConnection: "Test Connection",
     testSuccess: "Connection successful",
     testFailed: "Connection test failed",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index ab0c2ab6..0bee4dd6 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -927,8 +927,8 @@ export const esES = {
     addCustomModel: "Agregar \"{{name}}\"",
   },
   apiKeys: {
-    title: "Configura tu IA con tus propias claves API",
-    description: "Almacena claves API de forma segura en la base de datos para habilitar proveedores de IA en Open Notebook.",
+    title: "Modelos",
+    description: "Conecta tus proveedores de IA y guarda sus credenciales de forma segura.",
     encryptionRequired: "Clave de encriptación no configurada",
     encryptionRequiredDescription: "Establece la variable de entorno OPEN_NOTEBOOK_ENCRYPTION_KEY con cualquier cadena secreta para habilitar el almacenamiento de claves API en la base de datos.",
     configured: "Configurado",
@@ -942,7 +942,7 @@ export const esES = {
     migrationSuccess: "{{count}} clave(s) API migradas exitosamente",
     migrationErrors: "{{count}} clave(s) fallaron al migrar",
     migrationNothingToMigrate: "Todas las claves ya están en la base de datos",
-    learnMore: "Aprende cómo configurar claves API →",
+    learnMore: "Aprende a conectar proveedores de IA →",
     testConnection: "Probar conexión",
     testSuccess: "Conexión exitosa",
     testFailed: "La prueba de conexión falló",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 0da5473a..a40878f7 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -926,8 +926,8 @@ export const frFR = {
     addCustomModel: "Ajouter \"{{name}}\"",
   },
   apiKeys: {
-    title: "Configurez votre IA avec vos propres clés API",
-    description: "Stockez les clés API de manière sécurisée dans la base de données pour activer les fournisseurs d'IA dans Open Notebook.",
+    title: "Modèles",
+    description: "Connectez vos fournisseurs d'IA et stockez leurs identifiants en toute sécurité.",
     encryptionRequired: "Clé de chiffrement non configurée",
     encryptionRequiredDescription: "Définissez la variable d'environnement OPEN_NOTEBOOK_ENCRYPTION_KEY avec une chaîne secrète pour activer le stockage des clés API dans la base de données.",
     configured: "Configuré",
@@ -941,7 +941,7 @@ export const frFR = {
     migrationSuccess: "{{count}} clé(s) API migrée(s) avec succès",
     migrationErrors: "{{count}} clé(s) n'ont pas pu être migrée(s)",
     migrationNothingToMigrate: "Toutes les clés sont déjà dans la base de données",
-    learnMore: "Apprenez à configurer les clés API →",
+    learnMore: "Apprenez à connecter des fournisseurs d'IA →",
     testConnection: "Tester la connexion",
     testSuccess: "Connexion réussie",
     testFailed: "Échec du test de connexion",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index d77b60de..b8ce99ff 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -926,8 +926,8 @@ export const itIT = {
     addCustomModel: "Aggiungi \"{{name}}\"",
   },
   apiKeys: {
-    title: "Configura la tua IA con le tue chiavi API",
-    description: "Salva le chiavi API in modo sicuro nel database per abilitare i provider IA in Open Notebook.",
+    title: "Modelli",
+    description: "Connetti i tuoi provider IA e archivia in modo sicuro le loro credenziali.",
     encryptionRequired: "Chiave di crittografia non configurata",
     encryptionRequiredDescription: "Imposta la variabile d'ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY su una stringa segreta qualsiasi per abilitare il salvataggio delle chiavi API nel database.",
     configured: "Configurato",
@@ -941,7 +941,7 @@ export const itIT = {
     migrationSuccess: "{{count}} chiave/i API migrata/e con successo",
     migrationErrors: "{{count}} chiave/i non migrata/e",
     migrationNothingToMigrate: "Tutte le chiavi sono già nel database",
-    learnMore: "Scopri come configurare le chiavi API →",
+    learnMore: "Scopri come connettere i provider IA →",
     testConnection: "Testa connessione",
     testSuccess: "Connessione riuscita",
     testFailed: "Test di connessione fallito",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 75ff9d55..bf5a046a 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -926,8 +926,8 @@ export const jaJP = {
     addCustomModel: "\"{{name}}\" を追加",
   },
   apiKeys: {
-    title: "独自のAPIキーでAIを設定",
-    description: "APIキーをデータベースに安全に保存し、AIプロバイダーをOpen Notebookで利用可能にします。",
+    title: "モデル",
+    description: "AIプロバイダーを接続し、認証情報を安全に保存します。",
     encryptionRequired: "暗号化キーが設定されていません",
     encryptionRequiredDescription: "OPEN_NOTEBOOK_ENCRYPTION_KEY 環境変数に任意の秘密文字列を設定して、データベースへのAPIキーの保存を有効にしてください。",
     configured: "設定済み",
@@ -941,7 +941,7 @@ export const jaJP = {
     migrationSuccess: "{{count}}個のAPIキーを移行しました",
     migrationErrors: "{{count}}個のキーの移行に失敗しました",
     migrationNothingToMigrate: "すべてのキーはすでにデータベースにあります",
-    learnMore: "APIキーの設定方法を確認 →",
+    learnMore: "AIプロバイダーの接続方法を確認 →",
     testConnection: "接続テスト",
     testSuccess: "接続成功",
     testFailed: "接続テストに失敗",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 8a7656ac..67f38590 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -926,8 +926,8 @@ export const plPL = {
     addCustomModel: "Dodaj „{{name}}”",
   },
   apiKeys: {
-    title: "Skonfiguruj swoje AI za pomocą własnych kluczy API",
-    description: "Przechowuj klucze API bezpiecznie w bazie danych, aby włączyć dostawców AI w Open Notebook.",
+    title: "Modele",
+    description: "Połącz swoich dostawców AI i bezpiecznie przechowuj ich poświadczenia.",
     encryptionRequired: "Klucz szyfrowania nie został skonfigurowany",
     encryptionRequiredDescription: "Ustaw zmienną środowiskową OPEN_NOTEBOOK_ENCRYPTION_KEY na dowolny tajny ciąg, aby umożliwić przechowywanie kluczy API w bazie danych.",
     configured: "Skonfigurowano",
@@ -941,7 +941,7 @@ export const plPL = {
     migrationSuccess: "Pomyślnie przeniesiono kluczy API: {{count}}",
     migrationErrors: "Nie udało się przenieść kluczy: {{count}}",
     migrationNothingToMigrate: "Wszystkie klucze są już w bazie danych",
-    learnMore: "Dowiedz się, jak skonfigurować klucze API →",
+    learnMore: "Dowiedz się, jak połączyć dostawców AI →",
     testConnection: "Przetestuj połączenie",
     testSuccess: "Połączenie udane",
     testFailed: "Test połączenia nie powiódł się",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 72c8cb5e..59a20906 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -926,8 +926,8 @@ export const ptBR = {
     addCustomModel: "Adicionar \"{{name}}\"",
   },
   apiKeys: {
-    title: "Configure sua IA com suas próprias chaves de API",
-    description: "Armazene chaves de API com segurança no banco de dados para habilitar provedores de IA no Open Notebook.",
+    title: "Modelos",
+    description: "Conecte seus provedores de IA e armazene suas credenciais com segurança.",
     encryptionRequired: "Chave de criptografia não configurada",
     encryptionRequiredDescription: "Configure a variável de ambiente OPEN_NOTEBOOK_ENCRYPTION_KEY com qualquer string secreta para armazenar chaves de API no banco de dados.",
     configured: "Configurado",
@@ -941,7 +941,7 @@ export const ptBR = {
     migrationSuccess: "{{count}} chave(s) de API migrada(s) com sucesso",
     migrationErrors: "{{count}} chave(s) falhou ao migrar",
     migrationNothingToMigrate: "Todas as chaves já estão no banco de dados",
-    learnMore: "Saiba como configurar chaves de API →",
+    learnMore: "Saiba como conectar provedores de IA →",
     testConnection: "Testar Conexão",
     testSuccess: "Conexão bem-sucedida",
     testFailed: "Falha no teste de conexão",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 0f200c29..baafc8b4 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -926,8 +926,8 @@ export const ruRU = {
     addCustomModel: "Добавить \"{{name}}\"",
   },
   apiKeys: {
-    title: "Настройте ИИ с помощью собственных API-ключей",
-    description: "Храните API-ключи в базе данных для безопасного подключения провайдеров ИИ в Open Notebook.",
+    title: "Модели",
+    description: "Подключите своих ИИ-провайдеров и безопасно храните их учётные данные.",
     encryptionRequired: "Ключ шифрования не настроен",
     encryptionRequiredDescription: "Установите переменную окружения OPEN_NOTEBOOK_ENCRYPTION_KEY в любую секретную строку для хранения API-ключей в базе данных.",
     configured: "Настроено",
@@ -941,7 +941,7 @@ export const ruRU = {
     migrationSuccess: "{{count}} API-ключ(ей) успешно перенесено",
     migrationErrors: "{{count}} ключ(ей) не удалось перенести",
     migrationNothingToMigrate: "Все ключи уже находятся в базе данных",
-    learnMore: "Узнайте, как настроить API-ключи →",
+    learnMore: "Узнайте, как подключить ИИ-провайдеров →",
     testConnection: "Проверить подключение",
     testSuccess: "Подключение успешно",
     testFailed: "Проверка подключения не удалась",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index e462f322..cea1dd4a 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -926,8 +926,8 @@ export const trTR = {
     addCustomModel: "\"{{name}}\" Ekle",
   },
   apiKeys: {
-    title: "Yapay zekanızı kendi API anahtarlarınızla yapılandırın",
-    description: "Open Notebook'ta yapay zeka sağlayıcılarını etkinleştirmek için API anahtarlarını güvenli şekilde veritabanında saklayın.",
+    title: "Modeller",
+    description: "Yapay zeka sağlayıcılarınızı bağlayın ve kimlik bilgilerini güvenle saklayın.",
     encryptionRequired: "Şifreleme anahtarı yapılandırılmadı",
     encryptionRequiredDescription: "Veritabanında API anahtarlarının saklanmasını etkinleştirmek için OPEN_NOTEBOOK_ENCRYPTION_KEY ortam değişkenini herhangi bir gizli dize olarak ayarlayın.",
     configured: "Yapılandırıldı",
@@ -941,7 +941,7 @@ export const trTR = {
     migrationSuccess: "{{count}} API anahtarı başarıyla taşındı",
     migrationErrors: "{{count}} anahtar taşınamadı",
     migrationNothingToMigrate: "Tüm anahtarlar zaten veritabanında",
-    learnMore: "API anahtarlarını nasıl yapılandıracağınızı öğrenin →",
+    learnMore: "Yapay zeka sağlayıcılarını nasıl bağlayacağınızı öğrenin →",
     testConnection: "Bağlantıyı Test Et",
     testSuccess: "Bağlantı başarılı",
     testFailed: "Bağlantı testi başarısız",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index 0173f086..bd54c414 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -926,8 +926,8 @@ export const zhCN = {
     addCustomModel: "添加 \"{{name}}\"",
   },
   apiKeys: {
-    title: "使用您自己的 API 密钥配置 AI",
-    description: "将 API 密钥安全地存储在数据库中，以在 Open Notebook 中启用 AI 服务商。",
+    title: "模型",
+    description: "连接您的 AI 服务商，并安全地存储其凭据。",
     encryptionRequired: "未配置加密密钥",
     encryptionRequiredDescription: "请将 OPEN_NOTEBOOK_ENCRYPTION_KEY 环境变量设置为任意密钥字符串，以启用将 API 密钥存储到数据库。",
     configured: "已配置",
@@ -941,7 +941,7 @@ export const zhCN = {
     migrationSuccess: "{{count}} 个 API 密钥迁移成功",
     migrationErrors: "{{count}} 个密钥迁移失败",
     migrationNothingToMigrate: "所有密钥已在数据库中",
-    learnMore: "了解如何配置 API 密钥 →",
+    learnMore: "了解如何连接 AI 服务商 →",
     testConnection: "测试连接",
     testSuccess: "连接成功",
     testFailed: "连接测试失败",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index bd772d23..96b97e22 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -926,8 +926,8 @@ export const zhTW = {
     addCustomModel: "新增 \"{{name}}\"",
   },
   apiKeys: {
-    title: "使用您自己的 API 金鑰設定 AI",
-    description: "將 API 金鑰安全地儲存在資料庫中，以在 Open Notebook 中啟用 AI 服務商。",
+    title: "模型",
+    description: "連接您的 AI 服務商，並安全地儲存其憑證。",
     encryptionRequired: "未設定加密金鑰",
     encryptionRequiredDescription: "請將 OPEN_NOTEBOOK_ENCRYPTION_KEY 環境變數設定為任意密鑰字串，以啟用將 API 金鑰儲存至資料庫。",
     configured: "已設定",
@@ -941,7 +941,7 @@ export const zhTW = {
     migrationSuccess: "{{count}} 個 API 金鑰遷移成功",
     migrationErrors: "{{count}} 個金鑰遷移失敗",
     migrationNothingToMigrate: "所有金鑰已在資料庫中",
-    learnMore: "瞭解如何設定 API 金鑰 →",
+    learnMore: "瞭解如何連接 AI 服務商 →",
     testConnection: "測試連線",
     testSuccess: "連線成功",
     testFailed: "連線測試失敗",
diff --git a/frontend/src/test/setup.ts b/frontend/src/test/setup.ts
index 7af5fe76..f441780c 100644
--- a/frontend/src/test/setup.ts
+++ b/frontend/src/test/setup.ts
@@ -8,7 +8,7 @@ vi.mock('next/navigation', () => ({
     replace: vi.fn(),
     prefetch: vi.fn(),
   }),
-  usePathname: () => '',
+  usePathname: vi.fn(() => ''),
   useSearchParams: () => new URLSearchParams(),
 }))
 

From cf8f3b83e15879a2e9007b241495de7c408e3157 Mon Sep 17 00:00:00 2001
From: dalexsys <53828692+dalexsys@users.noreply.github.com>
Date: Sat, 5 Sep 2026 19:39:08 +0300
Subject: [PATCH 291/345] fix: honor ESPERANTO_SSL_* for connection tests and
 discovery (#1214)

* fix: honor ESPERANTO_SSL_* for connection tests and discovery

Test Connection and Discover Models used raw httpx without the
documented Esperanto SSL env vars, so corporate/self-signed HTTPS
endpoints failed with a misleading ConnectError while chat worked.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: reject missing ESPERANTO_SSL_CA_BUNDLE instead of falling through

Match Esperanto: a configured but missing CA path raises ValueError so
Test Connection cannot silently disable TLS via ESPERANTO_SSL_VERIFY.

Co-authored-by: Cursor <cursoragent@cursor.com>

* test(credentials): let FakeAsyncClient accept httpx constructor kwargs

discover_with_config now builds httpx.AsyncClient(verify=...) so the
ESPERANTO_SSL_* settings are honored. The test doubles rejected any
constructor argument, so the mocked requests were never captured and
six discovery tests failed after merging main. Accept **kwargs like the
real client does.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PEHJVwHQbundHuCFVHAHZS

---------

Co-authored-by: dalexsys <dalexsys@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 api/credentials_service.py                  | 15 +++----
 docs/6-TROUBLESHOOTING/connection-issues.md | 11 +++++-
 open_notebook/ai/connection_tester.py       |  9 +++--
 open_notebook/utils/ssl_config.py           | 44 +++++++++++++++++++++
 tests/test_credentials_api.py               | 24 +++++++++++
 tests/test_ssl_config.py                    | 43 ++++++++++++++++++++
 6 files changed, 134 insertions(+), 12 deletions(-)
 create mode 100644 open_notebook/utils/ssl_config.py
 create mode 100644 tests/test_ssl_config.py

diff --git a/api/credentials_service.py b/api/credentials_service.py
index 53153cb1..0684ce20 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -25,6 +25,7 @@ from open_notebook.ai.model_discovery import (
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.domain.credential import Credential
 from open_notebook.utils.encryption import get_secret_from_env
+from open_notebook.utils.ssl_config import httpx_verify_setting
 from open_notebook.utils.url_validation import (
     prepare_pinned_http_target,
 )
@@ -452,7 +453,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
                 f"{ollama_url.rstrip('/')}/api/tags", "ollama"
             )
             headers = dict(target.headers)
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     target.url,
                     headers=headers,
@@ -486,7 +487,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             headers = dict(target.headers)
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     target.url,
                     headers=headers,
@@ -518,7 +519,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             headers = dict(target.headers)
             headers["x-api-key"] = api_key
             headers["anthropic-version"] = "2023-06-01"
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     target.url,
                     headers=headers,
@@ -545,7 +546,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             headers = dict(target.headers)
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     target.url,
                     headers=headers,
@@ -575,7 +576,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
             target = await prepare_pinned_http_target(url, "azure")
             headers = dict(target.headers)
             headers["api-key"] = api_key
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     target.url,
                     headers=headers,
@@ -607,7 +608,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     if provider == "google":
         try:
             headers = {"X-Goog-Api-Key": api_key} if api_key else {}
-            async with httpx.AsyncClient() as client:
+            async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
                 response = await client.get(
                     "https://generativelanguage.googleapis.com/v1/models",
                     headers=headers,
@@ -671,7 +672,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
         else:
             request_url = discovery_url
             extensions = {}
-        async with httpx.AsyncClient() as client:
+        async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
             response = await client.get(
                 request_url,
                 headers=headers,
diff --git a/docs/6-TROUBLESHOOTING/connection-issues.md b/docs/6-TROUBLESHOOTING/connection-issues.md
index 28e93745..802fcf23 100644
--- a/docs/6-TROUBLESHOOTING/connection-issues.md
+++ b/docs/6-TROUBLESHOOTING/connection-issues.md
@@ -402,7 +402,7 @@ Connection error when using HTTPS endpoints
 Works with HTTP but fails with HTTPS
 ```
 
-**Cause:** Self-signed certificates not trusted by Python's SSL verification
+**Cause:** Self-signed or privately issued certificates not trusted by Python's SSL verification inside the container. Chat via Esperanto may honor `ESPERANTO_SSL_*`, but **Test Connection** and **Discover Models** used raw httpx and historically ignored those settings (fixed so they share the same env vars).
 
 **Solutions:**
 
@@ -419,6 +419,8 @@ environment:
   - ESPERANTO_SSL_CA_BUNDLE=/certs/ca-bundle.pem
 ```
 
+This applies to chat **and** to credential Test Connection / model discovery.
+
 ### Solution 2: Disable SSL Verification (Development Only)
 ```bash
 # WARNING: Only use in trusted development environments
@@ -426,6 +428,8 @@ environment:
 ESPERANTO_SSL_VERIFY=false
 ```
 
+Same scope: Esperanto providers, Test Connection, and Discover Models.
+
 ### Solution 3: Use HTTP Instead
 If services are on a trusted local network, HTTP is acceptable:
 ```
@@ -435,6 +439,11 @@ Example: http://localhost:1234/v1
 
 > **Security Note:** Disabling SSL verification exposes you to man-in-the-middle attacks. Always prefer custom CA bundle or HTTP on trusted networks.
 
+> **Note:** SSL failures on Test Connection are often reported as a generic
+> "Cannot connect to server" message (httpx wraps `CERTIFICATE_VERIFY_FAILED`
+> as `ConnectError`). If chat or `curl -k` works but Test Connection fails,
+> check `ESPERANTO_SSL_CA_BUNDLE` / `ESPERANTO_SSL_VERIFY` first.
+
 ---
 
 ## Still Having Issues?
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index 85504a5e..ce0919d1 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -23,6 +23,7 @@ from esperanto.common_types import ChatCompletion
 from loguru import logger
 
 from open_notebook.ai.provider_registry import PROVIDERS
+from open_notebook.utils.ssl_config import httpx_verify_setting
 from open_notebook.utils.url_validation import prepare_pinned_http_target
 
 
@@ -115,7 +116,7 @@ async def _test_azure_connection(
         target = await prepare_pinned_http_target(models_url, "azure")
         headers = dict(target.headers)
         headers["api-key"] = test_api_key
-        async with httpx.AsyncClient(timeout=10.0) as client:
+        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
             response = await client.get(
                 target.url,
                 headers=headers,
@@ -158,7 +159,7 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
         target = await prepare_pinned_http_target(
             f"{base_url.rstrip('/')}/api/tags", "ollama"
         )
-        async with httpx.AsyncClient(timeout=10.0) as client:
+        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
             # Try /api/tags endpoint (standard Ollama)
             response = await client.get(
                 target.url,
@@ -209,7 +210,7 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
         if api_key:
             headers["Authorization"] = f"Bearer {api_key}"
 
-        async with httpx.AsyncClient(timeout=10.0) as client:
+        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
             # Try /models endpoint (standard OpenAI-compatible)
             response = await client.get(
                 target.url,
@@ -262,7 +263,7 @@ async def _test_anthropic_compatible_connection(
         if api_key:
             headers["x-api-key"] = api_key
 
-        async with httpx.AsyncClient(timeout=10.0) as client:
+        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
             response = await client.get(
                 target.url,
                 headers=headers,
diff --git a/open_notebook/utils/ssl_config.py b/open_notebook/utils/ssl_config.py
new file mode 100644
index 00000000..d539e6ac
--- /dev/null
+++ b/open_notebook/utils/ssl_config.py
@@ -0,0 +1,44 @@
+"""SSL settings shared by Esperanto providers and raw httpx clients.
+
+Connection tests and model discovery use httpx directly. Those paths must
+honor the same ESPERANTO_SSL_* environment variables documented for Esperanto,
+otherwise corporate / self-signed HTTPS endpoints pass chat but fail
+"Test Connection" / Discover Models with a misleading ConnectError.
+"""
+
+from __future__ import annotations
+
+import os
+from typing import Union
+
+# Keep names aligned with esperanto.utils.ssl
+SSL_VERIFY_ENV_VAR = "ESPERANTO_SSL_VERIFY"
+SSL_CA_BUNDLE_ENV_VAR = "ESPERANTO_SSL_CA_BUNDLE"
+
+
+def httpx_verify_setting() -> Union[bool, str]:
+    """Return a value suitable for ``httpx.AsyncClient(verify=...)``.
+
+    Priority (highest first), matching Esperanto's SSLMixin:
+
+    1. ``ESPERANTO_SSL_CA_BUNDLE`` — path to a CA bundle file
+    2. ``ESPERANTO_SSL_VERIFY=false|0|no`` — disable verification
+    3. Default — ``True`` (system trust store)
+
+    Raises:
+        ValueError: If ``ESPERANTO_SSL_CA_BUNDLE`` is set but the file is
+            missing. Esperanto rejects invalid bundles instead of falling
+            through to ``ESPERANTO_SSL_VERIFY``; we do the same so Test
+            Connection cannot silently disable TLS when a CA path is wrong.
+    """
+    ca_bundle = os.getenv(SSL_CA_BUNDLE_ENV_VAR)
+    if ca_bundle:
+        if not os.path.isfile(ca_bundle):
+            raise ValueError(f"CA bundle file not found: {ca_bundle}")
+        return ca_bundle
+
+    verify_env = os.getenv(SSL_VERIFY_ENV_VAR, "").lower()
+    if verify_env in ("false", "0", "no"):
+        return False
+
+    return True
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 4a3a654c..a4d208e5 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -110,6 +110,10 @@ class TestCredentialModelDiscovery:
         requests = []
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
@@ -169,6 +173,10 @@ class TestCredentialModelDiscovery:
         requests = []
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
@@ -210,6 +218,10 @@ class TestCredentialModelDiscovery:
         requests = []
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
@@ -256,6 +268,10 @@ class TestCredentialModelDiscovery:
         captured = {}
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
@@ -318,6 +334,10 @@ class TestOmlxDiscovery:
         pinned_calls = []
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
@@ -356,6 +376,10 @@ class TestOmlxDiscovery:
         captured = {}
 
         class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+                pass
+
             async def __aenter__(self):
                 return self
 
diff --git a/tests/test_ssl_config.py b/tests/test_ssl_config.py
new file mode 100644
index 00000000..e1e8f418
--- /dev/null
+++ b/tests/test_ssl_config.py
@@ -0,0 +1,43 @@
+"""Tests for ESPERANTO_SSL_* → httpx verify mapping."""
+
+from pathlib import Path
+
+import pytest
+
+from open_notebook.utils.ssl_config import httpx_verify_setting
+
+
+@pytest.fixture(autouse=True)
+def _clear_ssl_env(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.delenv("ESPERANTO_SSL_VERIFY", raising=False)
+    monkeypatch.delenv("ESPERANTO_SSL_CA_BUNDLE", raising=False)
+
+
+def test_default_verify_enabled() -> None:
+    assert httpx_verify_setting() is True
+
+
+@pytest.mark.parametrize("value", ["false", "0", "no", "FALSE", "No"])
+def test_verify_disabled_via_env(value: str, monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setenv("ESPERANTO_SSL_VERIFY", value)
+    assert httpx_verify_setting() is False
+
+
+def test_ca_bundle_takes_priority_over_verify_false(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    ca = tmp_path / "ca.pem"
+    ca.write_text("dummy-ca\n", encoding="utf-8")
+    monkeypatch.setenv("ESPERANTO_SSL_CA_BUNDLE", str(ca))
+    monkeypatch.setenv("ESPERANTO_SSL_VERIFY", "false")
+    assert httpx_verify_setting() == str(ca)
+
+
+def test_missing_ca_bundle_raises_instead_of_falling_through(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    """Misconfigured CA must not silently honor ESPERANTO_SSL_VERIFY=false."""
+    monkeypatch.setenv("ESPERANTO_SSL_CA_BUNDLE", "/no/such/ca.pem")
+    monkeypatch.setenv("ESPERANTO_SSL_VERIFY", "false")
+    with pytest.raises(ValueError, match="CA bundle file not found"):
+        httpx_verify_setting()

From 60ea47dd9ee0bed37dc13d0bfed75ed7114fac3e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 13:44:00 -0300
Subject: [PATCH 292/345] docs: standardize Models navigation path (#1330)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* docs: standardize Models navigation path to "Manage → Models"

The Models page (/settings/models) is rendered under the sidebar's
"Manage" section as a sibling of Settings, not as a child of it
(frontend/src/components/layout/AppSidebar.tsx). The docs mixed
"Settings → Models" (~150 occurrences) with the correct "Manage → Models"
(3). Standardize every doc, the backend error-message hints and the
speaches compose example on "Manage → Models". CHANGELOG is historical
and left untouched. No routes or behaviour changed.

Follow-up to the P2 note on #1313.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012heLWVTmopC5FkipUgnvsN

* docs: fix remaining multi-step "Settings → Models" instructions

Addresses cubic P2s on #1330: two sections spelled the old path out as
separate steps ("Click Settings… Select Models tab"), plus a few
shorthand "in Settings" mentions that refer to the Models page.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012heLWVTmopC5FkipUgnvsN

* docs: fix step numbering in quick-start-cloud after merging nav steps

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012heLWVTmopC5FkipUgnvsN

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 docs/0-START-HERE/quick-start-cloud.md        | 11 ++--
 .../quick-start-external-ollama.md            |  4 +-
 docs/0-START-HERE/quick-start-openai.md       |  6 +--
 docs/1-INSTALLATION/docker-compose.md         |  8 +--
 docs/1-INSTALLATION/index.md                  |  2 +-
 docs/1-INSTALLATION/single-container.md       | 12 ++---
 docs/1-INSTALLATION/windows-native.md         |  2 +-
 docs/3-USER-GUIDE/api-configuration.md        | 14 +++---
 docs/3-USER-GUIDE/index.md                    |  2 +-
 docs/4-AI-PROVIDERS/index.md                  |  2 +-
 docs/5-CONFIGURATION/advanced.md              |  8 +--
 docs/5-CONFIGURATION/ai-providers.md          | 44 ++++++++--------
 docs/5-CONFIGURATION/environment-reference.md | 50 +++++++++----------
 docs/5-CONFIGURATION/index.md                 | 22 ++++----
 docs/5-CONFIGURATION/local-stt.md             | 10 ++--
 docs/5-CONFIGURATION/local-tts.md             |  8 +--
 docs/5-CONFIGURATION/ollama.md                | 38 +++++++-------
 docs/5-CONFIGURATION/omlx.md                  |  4 +-
 docs/5-CONFIGURATION/openai-compatible.md     | 26 +++++-----
 docs/6-TROUBLESHOOTING/ai-chat-issues.md      | 30 +++++------
 docs/6-TROUBLESHOOTING/connection-issues.md   |  2 +-
 docs/6-TROUBLESHOOTING/index.md               |  2 +-
 docs/6-TROUBLESHOOTING/quick-fixes.md         |  8 +--
 docs/7-DEVELOPMENT/development-setup.md       |  4 +-
 examples/docker-compose-speaches.yml          |  2 +-
 open_notebook/ai/models.py                    |  4 +-
 open_notebook/ai/provision.py                 |  4 +-
 27 files changed, 164 insertions(+), 165 deletions(-)

diff --git a/docs/0-START-HERE/quick-start-cloud.md b/docs/0-START-HERE/quick-start-cloud.md
index da8a8b8f..98badac1 100644
--- a/docs/0-START-HERE/quick-start-cloud.md
+++ b/docs/0-START-HERE/quick-start-cloud.md
@@ -87,7 +87,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure Your AI Provider (1 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select your provider (e.g., Anthropic, Google, Groq, OpenRouter)
 4. Give it a name, paste your API key
@@ -103,9 +103,8 @@ Your provider's models are now available!
 
 ## Step 5: Configure Your Model (1 min)
 
-1. Go to **Settings** (gear icon)
-2. Navigate to **Models**
-3. Select your provider's model:
+1. In the sidebar, open **Manage** → **Models**
+2. Select your provider's model:
 
 | Provider | Recommended Model | Notes |
 |----------|-------------------|-------|
@@ -115,7 +114,7 @@ Your provider's models are now available!
 | **Groq** | `llama-3.3-70b-versatile` | Ultra-fast |
 | **Mistral** | `mistral-large-latest` | Strong European option |
 
-4. Click **Save**
+3. Click **Save**
 
 ---
 
@@ -167,7 +166,7 @@ Your provider's models are now available!
 
 ### "Model not found" Error
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Test Connection** on your credential
 3. If valid, click **Discover Models** → **Register Models**
 4. Check you have credits/access for the model
diff --git a/docs/0-START-HERE/quick-start-external-ollama.md b/docs/0-START-HERE/quick-start-external-ollama.md
index 4b613682..188f3da2 100644
--- a/docs/0-START-HERE/quick-start-external-ollama.md
+++ b/docs/0-START-HERE/quick-start-external-ollama.md
@@ -109,7 +109,7 @@ Wait 10-15 seconds for services to start.
 
 ## Step 5: Configure Ollama Provider (1 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Ollama**
 4. Give it a name (e.g., "Local Ollama")
@@ -124,7 +124,7 @@ Wait 10-15 seconds for services to start.
 
 ## Step 6: Configure Models (1 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Set:
    - **Language Model**: `ollama/mistral` (or whichever model you downloaded)
    - **Embedding Model**: `ollama/nomic-embed-text`
diff --git a/docs/0-START-HERE/quick-start-openai.md b/docs/0-START-HERE/quick-start-openai.md
index e66db767..2717c65e 100644
--- a/docs/0-START-HERE/quick-start-openai.md
+++ b/docs/0-START-HERE/quick-start-openai.md
@@ -85,7 +85,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure Your OpenAI Provider (1 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI**
 4. Give it a name (e.g., "My OpenAI Key")
@@ -140,7 +140,7 @@ Your OpenAI models are now available!
 
 ## Using Different Models
 
-In your notebook, go to **Settings** → **Models** to choose:
+In your notebook, go to **Manage** → **Models** to choose:
 - `gpt-4o` - Best quality (recommended)
 - `gpt-4o-mini` - Fast and cheap (good for testing)
 
@@ -160,7 +160,7 @@ Then access at `http://localhost:8503`
 
 ### "API key not working"
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Test Connection** on your OpenAI credential
 3. If it fails, verify your key at https://platform.openai.com
 4. Delete the credential and create a new one with the correct key
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index 37df1594..ca9bde3e 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -126,7 +126,7 @@ You should see the Open Notebook interface!
 
 ## Step 4: Configure AI Provider (2 min)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select your provider (e.g., OpenAI, Anthropic, Google)
 4. Give it a name, paste your API key
@@ -193,7 +193,7 @@ docker exec open-notebook-local-ollama-1 ollama pull mistral
 ```
 
 Configure Ollama in the Settings UI:
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **Ollama**
 3. Enter base URL: `http://ollama:11434`
 4. Click **Save**, then **Test Connection**
@@ -292,7 +292,7 @@ Then access at `http://localhost:8503`
 
 ### Credential Issues
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Test Connection** on the credential
 3. If it fails, verify key at provider's website
 4. Check you have credits in your account
@@ -353,7 +353,7 @@ Each example includes detailed comments and usage instructions.
 ## Next Steps
 
 1. **Add Content**: Sources, notebooks, documents
-2. **Configure Models**: Settings → Models (choose your preferences)
+2. **Configure Models**: Manage → Models (choose your preferences)
 3. **Explore Features**: Chat, search, transformations
 4. **Read Guide**: [User Guide](../3-USER-GUIDE/index.md)
 
diff --git a/docs/1-INSTALLATION/index.md b/docs/1-INSTALLATION/index.md
index fa8de1ee..4be3d66d 100644
--- a/docs/1-INSTALLATION/index.md
+++ b/docs/1-INSTALLATION/index.md
@@ -124,7 +124,7 @@ Before installing, you'll need:
 
 Once you're up and running:
 
-1. **Configure Models** - Choose your AI provider in Settings
+1. **Configure Models** - Choose your AI provider in Manage → Models
 2. **Create First Notebook** - Start organizing research
 3. **Add Sources** - PDFs, web links, documents
 4. **Explore Features** - Chat, search, transformations
diff --git a/docs/1-INSTALLATION/single-container.md b/docs/1-INSTALLATION/single-container.md
index d8b24bc4..d93bdc40 100644
--- a/docs/1-INSTALLATION/single-container.md
+++ b/docs/1-INSTALLATION/single-container.md
@@ -47,7 +47,7 @@ docker compose up -d
 Access: `http://localhost:8502`
 
 Then configure your AI provider:
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select your provider → Paste API key
 3. Click **Save**, then **Test Connection**
 4. Click **Discover Models** → **Register Models**
@@ -59,14 +59,14 @@ Then configure your AI provider:
 2. Search "Open Notebook"
 3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
 4. Click "Deploy"
-5. Open the app → Go to **Settings → Models** to configure your AI provider
+5. Open the app → Go to **Manage → Models** to configure your AI provider
 
 **Railway:**
 1. Create new project
 2. Add `lfnovo/open_notebook:v1-latest-single`
 3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
 4. Deploy
-5. Open the app → Go to **Settings → Models** to configure your AI provider
+5. Open the app → Go to **Manage → Models** to configure your AI provider
 
 **Render:**
 1. Create new Web Service
@@ -104,7 +104,7 @@ Open Notebook ships an EasyPanel template at [`examples/easypanel/`](https://git
 - **One-click (recommended):** once the template is published to the official [EasyPanel template gallery](https://github.com/easypanel-io/templates), create a new service from "Open Notebook", set an app password (or leave it blank to auto-generate one), and deploy.
 - **Manual:** copy `examples/easypanel/` into `templates/open-notebook` in a checkout of [`easypanel-io/templates`](https://github.com/easypanel-io/templates), run the templates playground (`npm run dev`), and create the template from the generated JSON in your EasyPanel instance.
 
-After deployment, open the EasyPanel domain and configure your AI provider in **Settings → Models**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
+After deployment, open the EasyPanel domain and configure your AI provider in **Manage → Models**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
 
 ---
 
@@ -120,7 +120,7 @@ After deployment, open the EasyPanel domain and configure your AI provider in **
 | `SURREAL_DATABASE` | DB name | `open_notebook` |
 | `API_URL` | External URL (for remote access) | `https://myapp.example.com` |
 
-AI provider API keys are configured via the **Settings → Models** UI after deployment.
+AI provider API keys are configured via the **Manage → Models** UI after deployment.
 
 ---
 
@@ -140,7 +140,7 @@ AI provider API keys are configured via the **Settings → Models** UI after dep
 
 Same as Docker Compose setup - just access via `http://localhost:8502` (local) or your platform's URL (cloud).
 
-1. Go to **Settings → Models** to add your AI provider credential
+1. Go to **Manage → Models** to add your AI provider credential
 2. **Test Connection** and **Discover Models**
 
 See [Docker Compose](docker-compose.md) for full post-install guide.
diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
index 9cc8a63e..f5e4997f 100644
--- a/docs/1-INSTALLATION/windows-native.md
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -228,7 +228,7 @@ GOOGLE_API_KEY=your-key-here
 
 ## Available AI Models
 
-Once running, add models in Settings. Common model names:
+Once running, add models in Manage → Models. Common model names:
 
 | Provider  | Models                                                       |
 | --------- | ------------------------------------------------------------ |
diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index 1d14d1d6..a3fdc1bc 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -70,12 +70,12 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 
 ## Accessing Credential Configuration
 
-1. Click **Settings** in the navigation bar
-2. Select **Models** tab
+1. In the sidebar, find the **Manage** section
+2. Click **Models**
 3. You'll see existing credentials and an **Add Credential** button
 
 ```
-Navigation: Settings → Models
+Navigation: Manage → Models
 ```
 
 ---
@@ -118,7 +118,7 @@ Navigation: Settings → Models
 
 ### Step 1: Add Credential
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select your provider
 4. Give it a descriptive name (e.g., "My OpenAI Key", "Work Anthropic")
@@ -257,7 +257,7 @@ Google Cloud's enterprise AI platform:
 
 If you have existing API keys in environment variables (from a previous version):
 
-1. Open **Settings → Models**
+1. Open **Manage → Models**
 2. A banner appears: "Environment variables detected"
 3. Click **Migrate to Database**
 4. Keys are copied to the database (encrypted)
@@ -292,7 +292,7 @@ If you're upgrading from an older version that used the ProviderConfig system:
 
 - The migration happens automatically on first startup
 - Your existing configurations are converted to credentials
-- Check **Settings → Models** to verify the migration succeeded
+- Check **Manage → Models** to verify the migration succeeded
 - If you see issues, check the API logs for migration messages
 
 ---
@@ -356,7 +356,7 @@ API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-S
 
 ### Provider Shows "Not Configured"
 
-1. Check if a credential exists for this provider (Settings → Models)
+1. Check if a credential exists for this provider (Manage → Models)
 2. Test the credential connection
 3. Verify key format matches provider requirements
 4. Re-discover and register models if needed
diff --git a/docs/3-USER-GUIDE/index.md b/docs/3-USER-GUIDE/index.md
index dc225c24..9d7c911c 100644
--- a/docs/3-USER-GUIDE/index.md
+++ b/docs/3-USER-GUIDE/index.md
@@ -136,7 +136,7 @@ Task: "I'm exploring a concept without knowing exact words"
 → Use: Search / Vector Search (semantic similarity)
 
 Task: "I need to add or change my AI provider API keys"
-→ Use: Settings / Models (configure providers without editing files)
+→ Use: Manage → Models (configure providers without editing files)
 ```
 
 ---
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index f1c94840..732163ac 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -245,7 +245,7 @@ Any use: Free (electricity only)
 
 1. **You've chosen a provider** (from this comparison guide)
 2. **Follow the setup guide**: [AI Providers Configuration](../5-CONFIGURATION/ai-providers.md)
-3. **Add your credential** in Settings → Models
+3. **Add your credential** in Manage → Models
 4. **Test your connection** and discover models
 5. **Start using Open Notebook!**
 
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index fa8f0e12..2436d016 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -197,7 +197,7 @@ ESPERANTO_SSL_VERIFY=false
 
 ### Use Different Providers for Different Tasks
 
-Configure multiple AI providers via **Settings → Models**. Each provider gets its own credential:
+Configure multiple AI providers via **Manage → Models**. Each provider gets its own credential:
 
 1. Add a credential for your main language model provider (e.g., OpenAI, Anthropic)
 2. Add a credential for embeddings (e.g., Voyage AI, or use the same provider)
@@ -208,7 +208,7 @@ Configure multiple AI providers via **Settings → Models**. Each provider gets
 
 When using OpenAI-Compatible providers, you can configure per-service URLs in a single credential:
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Configure separate URLs for LLM, Embedding, TTS, and STT
 4. Click **Save**, then **Test Connection**
@@ -302,7 +302,7 @@ See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-pr
 OPEN_NOTEBOOK_ENCRYPTION_KEY    # Required for storing credentials
 ```
 
-AI provider API keys are configured via **Settings → Models** (not environment variables).
+AI provider API keys are configured via **Manage → Models** (not environment variables).
 
 ### Database
 ```env
@@ -336,7 +336,7 @@ ESPERANTO_LLM_TIMEOUT
 TTS_BATCH_SIZE
 ```
 
-> **Note:** `ELEVENLABS_API_KEY` is deprecated. Configure ElevenLabs via **Settings → Models**.
+> **Note:** `ELEVENLABS_API_KEY` is deprecated. Configure ElevenLabs via **Manage → Models**.
 
 ### Debugging
 ```env
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 08357bab..0cc76c08 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -11,7 +11,7 @@ Complete setup instructions for each AI provider via the **Settings UI**.
 Open Notebook uses a **credential-based system** for managing AI providers:
 
 1. **Get your API key** from the provider's website
-2. **Open Settings** → **Models** → **Add Credential**
+2. Open **Manage** → **Models** → **Add Credential**
 3. **Test the connection** to verify it works
 4. **Discover & Register Models** to make them available
 5. **Start using** the provider in your notebooks
@@ -33,7 +33,7 @@ Open Notebook uses a **credential-based system** for managing AI providers:
 4. Add $5+ credits to account
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI**
 4. Give it a name (e.g., "My OpenAI Key")
@@ -61,7 +61,7 @@ Heavy use: $50-100+/month
 ```
 
 **Troubleshooting:**
-- "Invalid API key" → Check key starts with "sk-proj-" and test the connection in Settings
+- "Invalid API key" → Check key starts with "sk-proj-" and test the connection in Manage → Models
 - "Rate limit exceeded" → Wait or upgrade account
 - "Model not available" → Try gpt-4o-mini instead, or re-discover models
 
@@ -78,7 +78,7 @@ Heavy use: $50-100+/month
 4. Create new API key (starts with "sk-ant-")
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Anthropic**
 4. Give it a name, paste your API key
@@ -109,7 +109,7 @@ Opus: $10-50+/month
 - Fast processing
 
 **Troubleshooting:**
-- "Invalid API key" → Check it starts with "sk-ant-" and test in Settings
+- "Invalid API key" → Check it starts with "sk-ant-" and test in Manage → Models
 - "Overloaded" → Anthropic is busy, retry later
 - "Model unavailable" → Re-discover models from the credential
 
@@ -119,7 +119,7 @@ Opus: $10-50+/month
 
 Use this provider for services that implement the Anthropic Messages API at a custom URL.
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Add an **Anthropic Compatible** credential
 3. Enter the provider's API key and base URL (the API root, with or without a trailing `/v1`)
 4. Save and test the connection
@@ -139,7 +139,7 @@ Only language models are supported for Anthropic-compatible credentials.
 3. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Google Gemini**
 4. Give it a name, paste your API key
@@ -179,7 +179,7 @@ Only language models are supported for Anthropic-compatible credentials.
 3. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Groq**
 4. Give it a name, paste your API key
@@ -223,7 +223,7 @@ Only language models are supported for Anthropic-compatible credentials.
 4. Create new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenRouter**
 4. Give it a name, paste your API key
@@ -283,7 +283,7 @@ Heavy use: Depends on models chosen
 4. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **DashScope (Qwen)**
 4. Give it a name, paste your API key
@@ -317,7 +317,7 @@ Heavy use: Depends on models chosen
 4. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **MiniMax**
 4. Give it a name, paste your API key
@@ -352,7 +352,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Cohere**
 4. Give it a name, paste your API key
@@ -383,7 +383,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Novita**
 4. Give it a name, paste your API key
@@ -409,7 +409,7 @@ Heavy use: Depends on models chosen
 3. Create a new API key
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **PayPerQ**
 4. Give it a name, paste your API key
@@ -438,7 +438,7 @@ Heavy use: Depends on models chosen
 3. Download a model: `ollama pull mistral`
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **Ollama**
 4. Give it a name (e.g., "Local Ollama")
@@ -456,7 +456,7 @@ See [Ollama Setup Guide](ollama.md) for detailed network configuration.
 Ollama models default to a **8,192-token** context window. This default is intentionally
 conservative so models run reliably on consumer GPUs (≈8GB VRAM) without running out of memory.
 If your hardware can handle more, set an optional **Context Window (num_ctx)** value on the
-Ollama credential (Settings → Models → edit the Ollama credential). It applies to all models
+Ollama credential (Manage → Models → edit the Ollama credential). It applies to all models
 that use that credential. Leave it empty to keep the default.
 
 - Raise it (e.g. `32768`) when ingesting large documents or using long chat histories.
@@ -523,7 +523,7 @@ CPU-only:
 3. Load models in the oMLX admin UI
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **oMLX**
 4. Base URL defaults to `http://localhost:11435/v1` (use `http://host.docker.internal:11435/v1` if Open Notebook is in Docker)
@@ -546,7 +546,7 @@ See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
 5. Start server (default port: 1234)
 
 **Configure in Open Notebook:**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI-Compatible**
 4. Give it a name (e.g., "LM Studio")
@@ -571,7 +571,7 @@ See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
 
 For Text Generation UI, vLLM, or other OpenAI-compatible endpoints:
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential**
 3. Select provider: **OpenAI-Compatible**
 4. Enter the base URL for your endpoint (e.g., `http://localhost:8000/v1`)
@@ -593,7 +593,7 @@ See [OpenAI-Compatible Setup](openai-compatible.md) for detailed instructions.
 1. Create Azure OpenAI service in Azure portal
 2. Deploy GPT-4/3.5-turbo model
 3. Get your endpoint and key
-4. Go to **Settings** → **Models**
+4. Go to **Manage** → **Models**
 5. Click **Add Credential**
 6. Select provider: **Azure OpenAI**
 7. Fill in: API Key, Endpoint, API Version
@@ -650,7 +650,7 @@ Use OpenAI
 1. **Choose your provider** from above
 2. **Get API key** (if cloud) or install locally (if Ollama)
 3. **Set `OPEN_NOTEBOOK_ENCRYPTION_KEY`** in your docker-compose.yml (required for storing credentials)
-4. **Open Settings** → **Models** → **Add Credential**
+4. Open **Manage** → **Models** → **Add Credential**
 5. **Test Connection** to verify it works
 6. **Discover & Register Models** to make them available
 7. **Verify it works** with a test chat
@@ -665,7 +665,7 @@ Done!
 
 > **Deprecated**: Configuring AI provider API keys via environment variables is deprecated. Use the Settings UI instead. Environment variables may still work as a fallback but are no longer the recommended approach.
 
-If you are migrating from an older version that used environment variables, go to **Settings** → **Models** and click the **Migrate to Database** button to import your existing keys into the credential system.
+If you are migrating from an older version that used environment variables, go to **Manage** → **Models** and click the **Migrate to Database** button to import your existing keys into the credential system.
 
 ---
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 4242ee53..e09fdb3c 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -193,7 +193,7 @@ SURREAL_PASSWORD=password
 SURREAL_NAMESPACE=open_notebook
 SURREAL_DATABASE=open_notebook
 ```
-Then configure AI providers via **Settings → Models** in the browser.
+Then configure AI providers via **Manage → Models** in the browser.
 
 ### Production Deployment
 ```
@@ -259,7 +259,7 @@ env | grep -E "^[A-Z_]+=" | sort
 - **Quote values:** Use quotes for values with spaces: `API_URL="http://my server:5055"`
 - **Restart required:** Changes take effect after restarting services
 - **Secrets:** Don't commit encryption keys or passwords to git
-- **AI Providers:** Configure via **Settings → Models** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
+- **AI Providers:** Configure via **Manage → Models** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
 - **Migration:** Use Settings UI to migrate existing env vars to the credential system. See [API Configuration](../3-USER-GUIDE/api-configuration.md#migrating-from-environment-variables)
 
 ---
@@ -269,7 +269,7 @@ env | grep -E "^[A-Z_]+=" | sort
 - [ ] Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in docker-compose.yml
 - [ ] Set database credentials (`SURREAL_*`)
 - [ ] Start services
-- [ ] Open browser → Go to **Settings → Models**
+- [ ] Open browser → Go to **Manage → Models**
 - [ ] **Add Credential** for your AI provider
 - [ ] **Test Connection** to verify
 - [ ] **Discover & Register Models**
@@ -283,35 +283,35 @@ Done!
 
 ## Legacy: AI Provider Environment Variables (Deprecated)
 
-> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Settings → Models** instead.
+> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Manage → Models** instead.
 
 Why the UI is the source of truth: credentials in the database are encrypted at rest (via `OPEN_NOTEBOOK_ENCRYPTION_KEY`), can be added or rotated at runtime without restarts, and support multiple credentials per provider — none of which a single env var can express.
 
 **Headless, CI/CD and Docker deployments:** a declarative provisioning contract over the credentials API (a file describing providers and credentials, with `${VAR}`-style references resolved from the environment) is being designed in [Discussion #765](https://github.com/lfnovo/open-notebook/discussions/765). Until it ships, the env fallback is the only unattended path — use it knowing it is deprecated.
 
-If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Settings → Models** to import them into the credential system, then remove them from your configuration.
+If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Manage → Models** to import them into the credential system, then remove them from your configuration.
 
 | Variable | Provider | Replacement |
 |----------|----------|-------------|
-| `OPENAI_API_KEY` | OpenAI | Settings → Models → Add OpenAI Credential |
-| `ANTHROPIC_API_KEY` | Anthropic | Settings → Models → Add Anthropic Credential |
-| `GOOGLE_API_KEY` | Google Gemini | Settings → Models → Add Google Credential |
+| `OPENAI_API_KEY` | OpenAI | Manage → Models → Add OpenAI Credential |
+| `ANTHROPIC_API_KEY` | Anthropic | Manage → Models → Add Anthropic Credential |
+| `GOOGLE_API_KEY` | Google Gemini | Manage → Models → Add Google Credential |
 | `GEMINI_API_BASE_URL` | Google Gemini | Configure in Google Gemini credential |
-| `VERTEX_PROJECT` | Vertex AI | Settings → Models → Add Vertex AI Credential |
+| `VERTEX_PROJECT` | Vertex AI | Manage → Models → Add Vertex AI Credential |
 | `VERTEX_LOCATION` | Vertex AI | Configure in Vertex AI credential |
 | `GOOGLE_APPLICATION_CREDENTIALS` | Vertex AI | Configure in Vertex AI credential |
-| `GROQ_API_KEY` | Groq | Settings → Models → Add Groq Credential |
-| `MISTRAL_API_KEY` | Mistral | Settings → Models → Add Mistral Credential |
-| `DEEPSEEK_API_KEY` | DeepSeek | Settings → Models → Add DeepSeek Credential |
-| `XAI_API_KEY` | xAI | Settings → Models → Add xAI Credential |
-| `OLLAMA_API_BASE` | Ollama | Settings → Models → Add Ollama Credential |
-| `OMLX_API_BASE` | oMLX | Settings → Models → Add oMLX Credential |
+| `GROQ_API_KEY` | Groq | Manage → Models → Add Groq Credential |
+| `MISTRAL_API_KEY` | Mistral | Manage → Models → Add Mistral Credential |
+| `DEEPSEEK_API_KEY` | DeepSeek | Manage → Models → Add DeepSeek Credential |
+| `XAI_API_KEY` | xAI | Manage → Models → Add xAI Credential |
+| `OLLAMA_API_BASE` | Ollama | Manage → Models → Add Ollama Credential |
+| `OMLX_API_BASE` | oMLX | Manage → Models → Add oMLX Credential |
 | `OMLX_API_KEY` | oMLX | Optional; only if oMLX was started with `--api-key` |
-| `OPENROUTER_API_KEY` | OpenRouter | Settings → Models → Add OpenRouter Credential |
+| `OPENROUTER_API_KEY` | OpenRouter | Manage → Models → Add OpenRouter Credential |
 | `OPENROUTER_BASE_URL` | OpenRouter | Configure in OpenRouter credential |
-| `VOYAGE_API_KEY` | Voyage AI | Settings → Models → Add Voyage AI Credential |
-| `ELEVENLABS_API_KEY` | ElevenLabs | Settings → Models → Add ElevenLabs Credential |
-| `OPENAI_COMPATIBLE_BASE_URL` | OpenAI-Compatible | Settings → Models → Add OpenAI-Compatible Credential |
+| `VOYAGE_API_KEY` | Voyage AI | Manage → Models → Add Voyage AI Credential |
+| `ELEVENLABS_API_KEY` | ElevenLabs | Manage → Models → Add ElevenLabs Credential |
+| `OPENAI_COMPATIBLE_BASE_URL` | OpenAI-Compatible | Manage → Models → Add OpenAI-Compatible Credential |
 | `OPENAI_COMPATIBLE_API_KEY` | OpenAI-Compatible | Configure in OpenAI-Compatible credential |
 | `OPENAI_COMPATIBLE_BASE_URL_LLM` | OpenAI-Compatible | Configure per-service URL in credential |
 | `OPENAI_COMPATIBLE_API_KEY_LLM` | OpenAI-Compatible | Configure per-service key in credential |
@@ -321,12 +321,12 @@ If you have these variables configured from a previous installation, click the *
 | `OPENAI_COMPATIBLE_API_KEY_STT` | OpenAI-Compatible | Configure per-service key in credential |
 | `OPENAI_COMPATIBLE_BASE_URL_TTS` | OpenAI-Compatible | Configure per-service URL in credential |
 | `OPENAI_COMPATIBLE_API_KEY_TTS` | OpenAI-Compatible | Configure per-service key in credential |
-| `DASHSCOPE_API_KEY` | DashScope (Qwen) | Settings → Models → Add DashScope Credential |
-| `MINIMAX_API_KEY` | MiniMax | Settings → Models → Add MiniMax Credential |
-| `NOVITA_API_KEY` | Novita | Settings → Models → Add Novita Credential |
-| `PPQ_API_KEY` | PayPerQ (PPQ) | Settings → Models → Add PayPerQ Credential |
-| `COHERE_API_KEY` | Cohere | Settings → Models → Add Cohere Credential |
-| `AZURE_OPENAI_API_KEY` | Azure OpenAI | Settings → Models → Add Azure OpenAI Credential |
+| `DASHSCOPE_API_KEY` | DashScope (Qwen) | Manage → Models → Add DashScope Credential |
+| `MINIMAX_API_KEY` | MiniMax | Manage → Models → Add MiniMax Credential |
+| `NOVITA_API_KEY` | Novita | Manage → Models → Add Novita Credential |
+| `PPQ_API_KEY` | PayPerQ (PPQ) | Manage → Models → Add PayPerQ Credential |
+| `COHERE_API_KEY` | Cohere | Manage → Models → Add Cohere Credential |
+| `AZURE_OPENAI_API_KEY` | Azure OpenAI | Manage → Models → Add Azure OpenAI Credential |
 | `AZURE_OPENAI_ENDPOINT` | Azure OpenAI | Configure in Azure OpenAI credential |
 | `AZURE_OPENAI_API_VERSION` | Azure OpenAI | Configure in Azure OpenAI credential |
 | `AZURE_OPENAI_API_KEY_LLM` | Azure OpenAI | Configure per-service in credential |
diff --git a/docs/5-CONFIGURATION/index.md b/docs/5-CONFIGURATION/index.md
index 7442e582..9764dc61 100644
--- a/docs/5-CONFIGURATION/index.md
+++ b/docs/5-CONFIGURATION/index.md
@@ -23,7 +23,7 @@ Three things:
 - **Google Gemini** (multi-modal, long context)
 - **Groq** (ultra-fast inference)
 
-Setup: Get API key → Add credential in Settings UI → Done
+Setup: Get API key → Add credential in Manage → Models → Done
 
 → Go to **[AI Providers Guide](ai-providers.md)**
 
@@ -93,7 +93,7 @@ We need access to LLMs in order for the app to work. AI provider credentials are
 
 1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment (required for storing credentials)
 2. Start services
-3. Go to **Settings → Models → Add Credential**
+3. Go to **Manage → Models → Add Credential**
 4. Select your provider, paste your API key
 5. **Test Connection** → **Discover Models** → **Register Models**
 
@@ -102,9 +102,9 @@ We need access to LLMs in order for the app to work. AI provider credentials are
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 ```
 
-> **Ollama users**: Add an Ollama credential in Settings → Models with the correct base URL. See [Ollama Setup](ollama.md) for network configuration help.
+> **Ollama users**: Add an Ollama credential in Manage → Models with the correct base URL. See [Ollama Setup](ollama.md) for network configuration help.
 
-> **LM Studio / OpenAI-Compatible**: Add an OpenAI-Compatible credential in Settings → Models. See [OpenAI-Compatible Guide](openai-compatible.md).
+> **LM Studio / OpenAI-Compatible**: Add an OpenAI-Compatible credential in Manage → Models. See [OpenAI-Compatible Guide](openai-compatible.md).
 
 
 ### API URL (If Behind Reverse Proxy)
@@ -126,7 +126,7 @@ Auto-detection works for most setups.
 # In docker.env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 # Everything else uses defaults
-# Then configure AI provider in Settings → Models
+# Then configure AI provider in Manage → Models
 ```
 
 ### Scenario 2: Docker on Remote Server
@@ -148,14 +148,14 @@ API_URL=https://your-domain.com
 ```env
 # In .env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Ollama credential in Settings → Models
+# Then add Ollama credential in Manage → Models
 ```
 
 ### Scenario 5: Using Azure OpenAI
 ```env
 # In docker.env:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Azure OpenAI credential in Settings → Models
+# Then add Azure OpenAI credential in Manage → Models
 ```
 
 ---
@@ -241,7 +241,7 @@ The recommended way to configure AI providers:
 
 ```
 1. Open Open Notebook in your browser
-2. Go to Settings → Models
+2. Go to Manage → Models
 3. Click "Add Credential"
 4. Select provider, enter API key
 5. Click Save, then Test Connection
@@ -282,7 +282,7 @@ After configuration, verify it works:
 
 ```
 1. Open your notebook
-2. Go to Settings → Models
+2. Go to Manage → Models
 3. You should see your configured provider
 4. Try a simple Chat question
 5. If it responds, configuration is correct!
@@ -294,7 +294,7 @@ After configuration, verify it works:
 
 | Mistake | Problem | Fix |
 |---------|---------|-----|
-| No credential configured | Models not available | Add credential in Settings → Models |
+| No credential configured | Models not available | Add credential in Manage → Models |
 | Missing encryption key | Can't save credentials | Set OPEN_NOTEBOOK_ENCRYPTION_KEY |
 | Wrong database URL | Can't start API | Check SURREAL_URL format |
 | Expose port 5055 | "Can't connect to server" | Expose 5055 in docker-compose |
@@ -326,7 +326,7 @@ Once configured:
 **Minimal configuration to run:**
 1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment
 2. Start services
-3. Add AI provider credential in Settings → Models
+3. Add AI provider credential in Manage → Models
 4. Done!
 
 Everything else is optional optimization.
diff --git a/docs/5-CONFIGURATION/local-stt.md b/docs/5-CONFIGURATION/local-stt.md
index fffd7b52..e9233b47 100644
--- a/docs/5-CONFIGURATION/local-stt.md
+++ b/docs/5-CONFIGURATION/local-stt.md
@@ -74,7 +74,7 @@ You should see the transcribed text in the response.
 ### Step 4: Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL for STT: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
 4. Click **Save**, then **Test Connection**
@@ -93,7 +93,7 @@ export OPENAI_COMPATIBLE_BASE_URL_STT=http://localhost:8969/v1
 
 ### Step 5: Add Model in Open Notebook
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Model** in Speech-to-Text section
 3. Configure:
    - **Provider**: `openai_compatible`
@@ -174,7 +174,7 @@ This is recommended if you have enough RAM/VRAM, as loading the model can take a
 
 ## Docker Networking
 
-When configuring your OpenAI-Compatible credential in **Settings → Models**, use the appropriate STT base URL for your setup:
+When configuring your OpenAI-Compatible credential in **Manage → Models**, use the appropriate STT base URL for your setup:
 
 ### Open Notebook in Docker (macOS/Windows)
 
@@ -334,7 +334,7 @@ docker stats speaches
 
 ## Using Both TTS and STT
 
-Speaches supports both TTS and STT in one server. In **Settings → Models**, add a single **OpenAI-Compatible** credential and configure both the TTS and STT base URLs to point to the same Speaches server (e.g., `http://localhost:8969/v1`).
+Speaches supports both TTS and STT in one server. In **Manage → Models**, add a single **OpenAI-Compatible** credential and configure both the TTS and STT base URLs to point to the same Speaches server (e.g., `http://localhost:8969/v1`).
 
 See **[Local TTS Setup](local-tts.md)** for TTS configuration.
 
@@ -354,7 +354,7 @@ Any OpenAI-compatible STT server works:
 The key requirements:
 
 1. Server implements `/v1/audio/transcriptions` endpoint
-2. Add an OpenAI-Compatible credential in **Settings → Models** with the STT base URL
+2. Add an OpenAI-Compatible credential in **Manage → Models** with the STT base URL
 3. Add model with provider `openai_compatible`
 
 ---
diff --git a/docs/5-CONFIGURATION/local-tts.md b/docs/5-CONFIGURATION/local-tts.md
index 573a6d7f..bc0dd569 100644
--- a/docs/5-CONFIGURATION/local-tts.md
+++ b/docs/5-CONFIGURATION/local-tts.md
@@ -75,7 +75,7 @@ Play `test.mp3` to verify.
 ### Step 4: Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL for TTS: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
 4. Click **Save**, then **Test Connection**
@@ -94,7 +94,7 @@ export OPENAI_COMPATIBLE_BASE_URL_TTS=http://localhost:8969/v1
 
 ### Step 5: Add Model in Open Notebook
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Model** in Text-to-Speech section
 3. Configure:
    - **Provider**: `openai_compatible`
@@ -175,7 +175,7 @@ volumes:
 
 ## Docker Networking
 
-When configuring your OpenAI-Compatible credential in **Settings → Models**, use the appropriate TTS base URL for your setup:
+When configuring your OpenAI-Compatible credential in **Manage → Models**, use the appropriate TTS base URL for your setup:
 
 ### Open Notebook in Docker (macOS/Windows)
 
@@ -331,7 +331,7 @@ docker stats speaches
 Any OpenAI-compatible TTS server works. The key is:
 
 1. Server implements `/v1/audio/speech` endpoint
-2. Add an OpenAI-Compatible credential in **Settings → Models** with the TTS base URL
+2. Add an OpenAI-Compatible credential in **Manage → Models** with the TTS base URL
 3. Add model with provider `openai_compatible`
 
 ---
diff --git a/docs/5-CONFIGURATION/ollama.md b/docs/5-CONFIGURATION/ollama.md
index 09f41a0c..43272713 100644
--- a/docs/5-CONFIGURATION/ollama.md
+++ b/docs/5-CONFIGURATION/ollama.md
@@ -39,7 +39,7 @@ ollama pull mxbai-embed-large  # Best embedding model for Ollama
 ### 3. Configure Open Notebook
 
 **Via Settings UI (Recommended):**
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **Ollama**
 3. Enter the base URL (see [Network Configuration](#network-configuration-guide) below for correct URL)
 4. Click **Save**, then **Test Connection**
@@ -53,17 +53,17 @@ export OLLAMA_API_BASE=http://localhost:11434
 export OLLAMA_API_BASE=http://host.docker.internal:11434
 ```
 
-> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Settings → Models** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
+> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Manage → Models** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
 
 ## Network Configuration Guide
 
-When adding an Ollama credential in **Settings → Models**, you need to enter the correct base URL. The correct URL depends on your deployment scenario:
+When adding an Ollama credential in **Manage → Models**, you need to enter the correct base URL. The correct URL depends on your deployment scenario:
 
 ### Scenario 1: Local Installation (Same Machine)
 
 When both Open Notebook and Ollama run directly on your machine:
 
-**Base URL to enter in Settings → Models:** `http://localhost:11434`
+**Base URL to enter in Manage → Models:** `http://localhost:11434`
 
 Alternative: `http://127.0.0.1:11434` (use if you have DNS resolution issues with localhost)
 
@@ -71,7 +71,7 @@ Alternative: `http://127.0.0.1:11434` (use if you have DNS resolution issues wit
 
 When Open Notebook runs in Docker but Ollama runs on your host machine:
 
-**Base URL to enter in Settings → Models:** `http://host.docker.internal:11434`
+**Base URL to enter in Manage → Models:** `http://host.docker.internal:11434`
 
 **⚠️ CRITICAL: Ollama must accept external connections:**
 ```bash
@@ -113,7 +113,7 @@ httpcore.ConnectError: [Errno -2] Name or service not known
 
 When both Open Notebook and Ollama run in the same Docker Compose stack:
 
-**Base URL to enter in Settings → Models:** `http://ollama:11434`
+**Base URL to enter in Manage → Models:** `http://ollama:11434`
 
 **Docker Compose Example:**
 
@@ -157,7 +157,7 @@ volumes:
 
 When Ollama runs on a different machine in your network:
 
-**Base URL to enter in Settings → Models:** `http://192.168.1.100:11434` (replace with your Ollama server's IP)
+**Base URL to enter in Manage → Models:** `http://192.168.1.100:11434` (replace with your Ollama server's IP)
 
 **Security Note:** Only use this in trusted networks. Ollama doesn't have built-in authentication.
 
@@ -170,7 +170,7 @@ If you've configured Ollama to use a different port:
 OLLAMA_HOST=0.0.0.0:8080 ollama serve
 ```
 
-**Base URL to enter in Settings → Models:** `http://localhost:8080`
+**Base URL to enter in Manage → Models:** `http://localhost:8080`
 
 ## Model Recommendations
 
@@ -276,7 +276,7 @@ qwen3:32b                   030ee887880f    20 GB     9 days ago
 
 **Step 3: Configure in Open Notebook**
 
-1. Go to **Settings → Models**
+1. Go to **Manage → Models**
 2. Click **Add Model**
 3. Enter the **exact name** from `ollama list`
 4. Select provider: `ollama`
@@ -294,7 +294,7 @@ curl http://localhost:11434/api/tags
 ```
 
 **Verify credential is configured:**
-Check **Settings → Models** for an Ollama credential with the correct base URL.
+Check **Manage → Models** for an Ollama credential with the correct base URL.
 
 **⚠️ IMPORTANT: Enable external connections (most common fix):**
 ```bash
@@ -373,7 +373,7 @@ netstat -tulpn | grep 11434
 ```bash
 OLLAMA_HOST=0.0.0.0:8080 ollama serve
 ```
-Then update the base URL in **Settings → Models** to `http://localhost:8080`
+Then update the base URL in **Manage → Models** to `http://localhost:8080`
 
 **6. "Failed to send message" in Chat**
 
@@ -385,7 +385,7 @@ Error executing chat: Model is not a LanguageModel: None
 **Causes (in order of likelihood):**
 
 1. **Model name mismatch**: The model name in Open Notebook doesn't exactly match `ollama list`
-2. **No default model configured**: You haven't set a default chat model in Settings → Models
+2. **No default model configured**: You haven't set a default chat model in Manage → Models
 3. **Model was deleted**: You removed the model from Ollama but didn't update Open Notebook's defaults
 4. **Model record deleted**: The model was removed from Open Notebook but is still set as default
 
@@ -397,11 +397,11 @@ Error executing chat: Model is not a LanguageModel: None
 ollama list
 
 # Compare with what's configured in Open Notebook
-# Go to Settings → Models and verify the names match EXACTLY
+# Go to Manage → Models and verify the names match EXACTLY
 ```
 
 **Check 2: Verify default models are set**
-1. Go to **Settings → Models**
+1. Go to **Manage → Models**
 2. Scroll to **Default Models** section
 3. Ensure **Default Chat Model** has a value selected
 4. If empty, select an available language model
@@ -409,7 +409,7 @@ ollama list
 **Check 3: Refresh after changes**
 If you've added/removed models in Ollama:
 1. Refresh the Open Notebook page
-2. Go to Settings → Models
+2. Go to Manage → Models
 3. Re-add any missing models with exact names from `ollama list`
 4. Re-select default models if needed
 
@@ -436,7 +436,7 @@ services:
     # ... rest of your config
 ```
 
-Then in **Settings → Models**, use base URL: `http://host.docker.internal:11434`
+Then in **Manage → Models**, use base URL: `http://host.docker.internal:11434`
 
 This maps `host.docker.internal` to your host machine's IP. macOS/Windows Docker Desktop does this automatically, but Linux requires explicit configuration.
 
@@ -445,7 +445,7 @@ This maps `host.docker.internal` to your host machine's IP. macOS/Windows Docker
 # Use host networking if host.docker.internal doesn't work
 docker run --network host lfnovo/open_notebook:v1-latest  # for quick testing only
 ```
-Then in **Settings → Models**, use base URL: `http://localhost:11434`
+Then in **Manage → Models**, use base URL: `http://localhost:11434`
 
 **3. Custom bridge network:**
 ```yaml
@@ -464,7 +464,7 @@ services:
       - ollama_network
 ```
 
-Then in **Settings → Models**, use base URL: `http://ollama:11434`
+Then in **Manage → Models**, use base URL: `http://ollama:11434`
 
 **4. Firewall issues:**
 ```bash
@@ -542,7 +542,7 @@ export OLLAMA_MAX_QUEUE=512            # Request queue size
 export OLLAMA_NUM_PARALLEL=4           # Parallel request handling
 export OLLAMA_FLASH_ATTENTION=1        # Enable flash attention (if supported)
 
-# Open Notebook configuration (configure via Settings → Models instead)
+# Open Notebook configuration (configure via Manage → Models instead)
 # OLLAMA_API_BASE=http://localhost:11434  # Deprecated fallback — works today, no guarantee
 ```
 
diff --git a/docs/5-CONFIGURATION/omlx.md b/docs/5-CONFIGURATION/omlx.md
index a48df6bf..a64cc54c 100644
--- a/docs/5-CONFIGURATION/omlx.md
+++ b/docs/5-CONFIGURATION/omlx.md
@@ -2,7 +2,7 @@
 
 [oMLX](https://omlx.ai/) is a macOS-native inference server for Apple Silicon. It runs [MLX](https://opensource.apple.com/projects/mlx/) models locally and exposes an **OpenAI-compatible API** at `/v1`, so Open Notebook can use it for language and embedding models without sending data to the cloud.
 
-Open Notebook treats **oMLX** as a first-class provider in Settings → Models. Identity comes from Esperanto’s built-in `omlx` [OpenAI-compatible profile](https://github.com/lfnovo/esperanto/issues/228) (`AIFactory.create_language("omlx", ...)` / `create_embedding("omlx", ...)`). There is no remapping to the generic `openai-compatible` provider and no `OPENAI_COMPATIBLE_*` env mirroring.
+Open Notebook treats **oMLX** as a first-class provider in Manage → Models. Identity comes from Esperanto’s built-in `omlx` [OpenAI-compatible profile](https://github.com/lfnovo/esperanto/issues/228) (`AIFactory.create_language("omlx", ...)` / `create_embedding("omlx", ...)`). There is no remapping to the generic `openai-compatible` provider and no `OPENAI_COMPATIBLE_*` env mirroring.
 
 ## Why Choose oMLX?
 
@@ -61,7 +61,7 @@ http://localhost:11435/v1
 
 ## Configure Open Notebook
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → select **oMLX**
 3. Set **Base URL** to `http://localhost:11435/v1` (prefilled by default)
 4. Optionally set an **API key** if you started oMLX with `--api-key`
diff --git a/docs/5-CONFIGURATION/openai-compatible.md b/docs/5-CONFIGURATION/openai-compatible.md
index 6287f040..14d14d72 100644
--- a/docs/5-CONFIGURATION/openai-compatible.md
+++ b/docs/5-CONFIGURATION/openai-compatible.md
@@ -41,9 +41,9 @@ Open Notebook can connect to any server using this format.
 3. Download a model (e.g., Llama 3)
 4. Start the local server (default: port 1234)
 
-### Step 2: Configure in Settings UI (Recommended)
+### Step 2: Configure in Manage → Models (Recommended)
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter base URL: `http://host.docker.internal:1234/v1` (Docker) or `http://localhost:1234/v1` (local)
 4. API key: `lm-studio` (placeholder, LM Studio doesn't require one)
@@ -57,7 +57,7 @@ export OPENAI_COMPATIBLE_API_KEY=not-needed
 
 ### Step 3: Add Model in Open Notebook
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Model**
 3. Configure:
    - **Provider**: `openai_compatible`
@@ -71,7 +71,7 @@ export OPENAI_COMPATIBLE_API_KEY=not-needed
 
 The recommended way to configure OpenAI-compatible providers is through the Settings UI:
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Credential** → Select **OpenAI-Compatible**
 3. Enter your base URL and API key (if needed)
 4. Optionally configure per-service URLs for LLM, Embedding, TTS, and STT
@@ -113,7 +113,7 @@ OPENAI_COMPATIBLE_API_KEY_STT=optional-api-key
 
 ## Docker Networking
 
-When Open Notebook runs in Docker and your compatible server runs on the host, use the appropriate base URL when adding your credential in **Settings → Models**:
+When Open Notebook runs in Docker and your compatible server runs on the host, use the appropriate base URL when adding your credential in **Manage → Models**:
 
 ### macOS / Windows
 
@@ -140,7 +140,7 @@ services:
       - "1234:1234"
 ```
 
-**Base URL in Settings → Models:** `http://lm-studio:1234/v1`
+**Base URL in Manage → Models:** `http://lm-studio:1234/v1`
 
 ---
 
@@ -154,7 +154,7 @@ python server.py --api --listen
 
 ### Configure Open Notebook
 
-In **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:5000/v1`
+In **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:5000/v1`
 
 ### Docker Compose Example
 
@@ -177,7 +177,7 @@ services:
       - text-gen
 ```
 
-Then in **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://text-gen:5000/v1`
+Then in **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://text-gen:5000/v1`
 
 ---
 
@@ -193,7 +193,7 @@ python -m vllm.entrypoints.openai.api_server \
 
 ### Configure Open Notebook
 
-In **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:8000/v1`
+In **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:8000/v1`
 
 ### Docker Compose with GPU
 
@@ -225,7 +225,7 @@ services:
       - vllm
 ```
 
-Then in **Settings → Models**, add an **OpenAI-Compatible** credential with base URL: `http://vllm:8000/v1`
+Then in **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://vllm:8000/v1`
 
 ---
 
@@ -233,7 +233,7 @@ Then in **Settings → Models**, add an **OpenAI-Compatible** credential with ba
 
 ### Via Settings UI
 
-1. Go to **Settings** → **Models**
+1. Go to **Manage** → **Models**
 2. Click **Add Model** in appropriate section
 3. Select **Provider**: `openai_compatible`
 4. Enter **Model Name**: exactly as the server expects
@@ -321,7 +321,7 @@ Problem: 401 or authentication failed
 
 Solutions:
 1. Check if server requires API key
-2. Set the API key in your credential (Settings → Models)
+2. Set the API key in your credential (Manage → Models)
 3. Some servers need any non-empty key (use a placeholder like "not-needed")
 ```
 
@@ -341,7 +341,7 @@ Solutions:
 
 ## Multiple Compatible Endpoints
 
-You can use different compatible servers for different purposes. When adding an **OpenAI-Compatible** credential in **Settings → Models**, you can configure per-service URLs:
+You can use different compatible servers for different purposes. When adding an **OpenAI-Compatible** credential in **Manage → Models**, you can configure per-service URLs:
 
 - **LLM URL**: e.g., `http://localhost:1234/v1` (LM Studio)
 - **Embedding URL**: e.g., `http://localhost:8080/v1` (different server)
diff --git a/docs/6-TROUBLESHOOTING/ai-chat-issues.md b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
index 91ae6e4b..c2a0edc4 100644
--- a/docs/6-TROUBLESHOOTING/ai-chat-issues.md
+++ b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
@@ -19,7 +19,7 @@ Error executing chat: Model is not a LanguageModel: None
 
 ### Solution 1: Check Default Model Configuration
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Scroll to "Default Models" section
 3. Verify "Default Chat Model" has a model selected
 4. If empty, select an available language model
@@ -42,7 +42,7 @@ ollama list
 ### Solution 3: Re-add Missing Models
 ```
 1. Note the exact model names from your provider
-2. Go to Settings → Models
+2. Go to Manage → Models
 3. Delete any misconfigured models
 4. Add models with exact names
 5. Set new defaults
@@ -63,7 +63,7 @@ ollama list
 
 ## "Models not available" or "Models not showing"
 
-**Symptom:** Settings → Models shows empty, or "No models configured"
+**Symptom:** Manage → Models shows empty, or "No models configured"
 
 **Cause:** No credential configured, or credential has invalid API key
 
@@ -71,18 +71,18 @@ ollama list
 
 ### Solution 1: Add Credential via Settings UI
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Click "Add Credential"
 3. Select your provider (e.g., OpenAI, Anthropic, Google)
 4. Enter your API key
 5. Click Save, then Test Connection
 6. Click Discover Models → Register Models
-7. Go to Settings → Models to verify
+7. Go to Manage → Models to verify
 ```
 
 ### Solution 2: Check Key is Valid
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Click "Test Connection" on your credential
 3. If it shows "Invalid API key":
    - Get a fresh key from the provider's website
@@ -91,10 +91,10 @@ ollama list
 
 ### Solution 3: Switch Provider
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Add a credential for a different provider
 3. Test Connection → Discover Models → Register Models
-4. Go to Settings → Models to select the new provider's models
+4. Go to Manage → Models to select the new provider's models
 ```
 
 ---
@@ -109,7 +109,7 @@ ollama list
 
 ### Step 1: Test Your Credential
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Click "Test Connection" on your credential
 3. If it fails, proceed to Step 2
 ```
@@ -126,7 +126,7 @@ Generate new key and copy exactly (no extra spaces)
 
 ### Step 3: Update Credential
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Delete the old credential
 3. Click "Add Credential" → select provider
 4. Paste the new key
@@ -136,7 +136,7 @@ Generate new key and copy exactly (no extra spaces)
 
 ### Step 4: Verify in UI
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. Verify models are available
 3. Try a test chat
 ```
@@ -178,7 +178,7 @@ Anthropic:
   Current: claude-3-5-haiku → Switch to: claude-3-5-sonnet
 
 To change:
-1. Settings → Models
+1. Manage → Models
 2. Select model
 3. Try chat again
 ```
@@ -206,7 +206,7 @@ Fast: OpenAI gpt-4o-mini
 Medium: Anthropic claude-3-5-haiku
 Slow: Anthropic claude-3-5-sonnet
 
-Switch in: Settings → Models
+Switch in: Manage → Models
 ```
 
 ### Solution 2: Reduce Context
@@ -307,7 +307,7 @@ Google: Google Cloud Console
 Current: GPT-4o (128K tokens) → Switch to: Claude (200K tokens)
 Current: Claude Haiku (200K) → Switch to: Gemini (1M tokens)
 
-To change: Settings → Models
+To change: Manage → Models
 ```
 
 ### Solution 2: Reduce Context
@@ -350,7 +350,7 @@ Groq: Check website
 
 ### Use Different Model/Provider
 ```
-1. Settings → Models
+1. Manage → Models
 2. Try different provider
 3. If OpenAI down, use Anthropic
 ```
diff --git a/docs/6-TROUBLESHOOTING/connection-issues.md b/docs/6-TROUBLESHOOTING/connection-issues.md
index 802fcf23..4bb4187b 100644
--- a/docs/6-TROUBLESHOOTING/connection-issues.md
+++ b/docs/6-TROUBLESHOOTING/connection-issues.md
@@ -433,7 +433,7 @@ Same scope: Esperanto providers, Test Connection, and Discover Models.
 ### Solution 3: Use HTTP Instead
 If services are on a trusted local network, HTTP is acceptable:
 ```
-Change the base URL in your credential (Settings → Models) from https:// to http://
+Change the base URL in your credential (Manage → Models) from https:// to http://
 Example: http://localhost:1234/v1
 ```
 
diff --git a/docs/6-TROUBLESHOOTING/index.md b/docs/6-TROUBLESHOOTING/index.md
index 539668ba..99da3e4f 100644
--- a/docs/6-TROUBLESHOOTING/index.md
+++ b/docs/6-TROUBLESHOOTING/index.md
@@ -220,7 +220,7 @@ SURREAL_COMMANDS_MAX_TASKS=2
 **High costs?**
 ```bash
 # Switch to cheaper model
-# In Settings → Models → Choose gpt-4o-mini (OpenAI)
+# In Manage → Models → Choose gpt-4o-mini (OpenAI)
 # Or use Ollama (free)
 ```
 
diff --git a/docs/6-TROUBLESHOOTING/quick-fixes.md b/docs/6-TROUBLESHOOTING/quick-fixes.md
index 76f889c6..4d5ad583 100644
--- a/docs/6-TROUBLESHOOTING/quick-fixes.md
+++ b/docs/6-TROUBLESHOOTING/quick-fixes.md
@@ -37,19 +37,19 @@ docker compose restart
 
 ## #2: "Invalid API key" or "Models not showing"
 
-**Symptom:** Settings → Models shows "No models available"
+**Symptom:** Manage → Models shows "No models available"
 
 **Cause:** No credential configured, or credential has invalid API key
 
 **Solution (1 minute):**
 
 ```
-1. Go to Settings → Models
+1. Go to Manage → Models
 2. If no credential exists, click "Add Credential" and add one
 3. If a credential exists, click "Test Connection"
 4. If test fails, delete and re-create with correct key
 5. After test passes, click "Discover Models" → "Register Models"
-6. Go to Settings → Models to verify models appear
+6. Go to Manage → Models to verify models appear
 ```
 
 **If still broken:**
@@ -122,7 +122,7 @@ docker compose restart
 
 ```bash
 # Step 1: Check which model you're using
-# Settings → Models
+# Manage → Models
 # Note the model name
 
 # Step 2: Try a cheaper/faster model
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index 230654fd..baeabd8e 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -66,7 +66,7 @@ LOG_LEVEL=DEBUG
 
 After starting the API and frontend, configure your AI provider via the Settings UI:
 
-1. Open **http://localhost:3000** → **Settings** → **Models**
+1. Open **http://localhost:3000** → **Manage** → **Models**
 2. Click **Add Credential** → Select your provider
 3. Enter your API key (get from provider dashboard)
 4. Click **Save**, then **Test Connection**
@@ -436,7 +436,7 @@ ollama pull mistral
 ```
 
 Then configure via the Settings UI:
-1. Go to **Settings** → **Models** → **Add Credential** → **Ollama**
+1. Go to **Manage** → **Models** → **Add Credential** → **Ollama**
 2. Enter base URL: `http://localhost:11434`
 3. Click **Save**, then **Test Connection**
 4. Click **Discover Models** → **Register Models**
diff --git a/examples/docker-compose-speaches.yml b/examples/docker-compose-speaches.yml
index 24a06ef8..949b6579 100644
--- a/examples/docker-compose-speaches.yml
+++ b/examples/docker-compose-speaches.yml
@@ -97,7 +97,7 @@ volumes:
 #    - Base URL for STT: (same as TTS)
 # 4. Click Save → Test Connection
 #
-# 5. Go to Settings → Models
+# 5. Go to Manage → Models
 # 6. Add TTS Model:
 #    - Provider: openai_compatible
 #    - Model Name: speaches-ai/Kokoro-82M-v1.0-ONNX
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index f1ded71e..7b5157ba 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -358,7 +358,7 @@ class ModelManager:
         if not model_id:
             logger.warning(
                 f"No default model configured for type '{model_type}'. "
-                f"Please go to Settings → Models and set a default model."
+                f"Please go to Manage → Models and set a default model."
             )
             return None
 
@@ -368,7 +368,7 @@ class ModelManager:
             logger.error(
                 f"Failed to load default model for type '{model_type}': {e}. "
                 f"The configured model_id '{model_id}' may have been deleted or misconfigured. "
-                f"Please go to Settings → Models and reconfigure the default model."
+                f"Please go to Manage → Models and reconfigure the default model."
             )
             return None
 
diff --git a/open_notebook/ai/provision.py b/open_notebook/ai/provision.py
index f3dc4f61..22eb56bb 100644
--- a/open_notebook/ai/provision.py
+++ b/open_notebook/ai/provision.py
@@ -40,11 +40,11 @@ async def provision_langchain_model(
             f"Model provisioning failed: No model found. "
             f"Selection reason: {selection_reason}. "
             f"model_id={model_id}, default_type={default_type}. "
-            f"Please check Settings → Models and ensure a default model is configured for '{default_type}'."
+            f"Please check Manage → Models and ensure a default model is configured for '{default_type}'."
         )
         raise ConfigurationError(
             f"No model configured for {selection_reason}. "
-            f"Please go to Settings → Models and configure a default model for '{default_type}'."
+            f"Please go to Manage → Models and configure a default model for '{default_type}'."
         )
 
     if not isinstance(model, LanguageModel):

From 7d674bd53a74791edc1f89cb49707382e13cf091 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 5 Sep 2026 16:09:04 -0300
Subject: [PATCH 293/345] feat(search): scope Search and Ask to selected
 notebooks (#1331)

* feat(search): scope Search and Ask to selected notebooks

Search and Ask always ran against the whole knowledge base; `notebook_id`
was accepted by POST /api/search and silently ignored because the request
model never declared it. Both endpoints now take an optional notebook
scope and the Search/Ask page gets a shared notebook selector.

- Migration 24: fn::text_search / fn::vector_search gain an optional
  trailing `$notebook_ids: option<array<record<notebook>>>` parameter.
  NONE/empty keeps the unfiltered path; otherwise sources are limited via
  the `reference` edge and notes via the `artifact` edge (chunks and
  insights follow their parent source). The 4-/5-arg call shapes still
  work, so existing callers are unaffected; `24_down` restores the
  previous definitions.
- API: SearchRequest / AskRequest accept `notebook_ids` (list) and
  `notebook_id` (single, the shape clients already send); ids are
  validated (400 for non-notebook ids, 404 for unknown notebooks) before
  reaching the query so a typo never masquerades as "no matches".
- Domain: text_search / vector_search take `notebook_ids`; the highlight
  overflow fallback preserves the scope.
- Ask graph: scope travels in the thread state and reaches every fan-out
  vector search.
- Frontend: NotebookScopeSelector (collapsible checkbox list, "All
  notebooks" by default, Clear action) shared by the Ask and Search tabs;
  strings in all 14 locales.
- Docs: user guide section on scoping; API reference note.

Closes #574
Closes #87

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U53d3BNjGghLsf6tufRTKX

* fix(search): harden notebook scope validation after review

- Raise typed InvalidInputError / NotFoundError instead of bare
  HTTPException, per the API error convention.
- Check notebook existence with a single query for the whole scope; a
  database failure now surfaces as 500 instead of a misleading 404.
- Bound notebook_ids to 50 entries; keep empty ids so they are rejected
  (400) rather than silently widening the scope to everything.
- Replace the pluralized "N notebooks selected" string with a neutral
  "N selected" form: the locale parity test forbids per-language extra
  keys, so _few/_many forms for ru/pl were not an option.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U53d3BNjGghLsf6tufRTKX

* refactor(search): move scope resolution to the domain, add ADR-008

- resolve_notebook_scope() now lives in open_notebook/domain/notebook.py
  next to text_search / vector_search; the router only calls it.
- Reject malformed ids such as "notebook:" (empty key) and anything
  RecordID.parse cannot handle with InvalidInputError instead of letting
  them surface as 500.
- ADR-008 records the notebook-scope semantics, the compatibility choice
  (notebook_id + notebook_ids, optional trailing SurrealQL parameter) and
  how it relates to the #1315 retrieval contract.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U53d3BNjGghLsf6tufRTKX

* test(search): cover migration 24, validate Ask scope before model lookups

- Ask endpoints resolve the notebook scope first, so a malformed or
  unknown scope returns 400/404 before any model or embedding lookup.
- Registration and content tests for 24.surrealql / 24_down.surrealql,
  following the existing migration test pattern.
- ADR-008 context trimmed to the template's sentence budget.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U53d3BNjGghLsf6tufRTKX

* fix(search): surface a typed error when scope resolution hits the database

resolve_notebook_scope() now logs the raw driver error and raises
DatabaseOperationError with a fixed message, matching text_search /
vector_search, so connection details never reach the 500 response body.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01U53d3BNjGghLsf6tufRTKX

* fix(search): compare notebook scope ids as strings

The driver returns `id` as RecordID objects, which are unhashable and
never equal to the request strings, so every real scoped request raised
TypeError before reaching the search. Normalize to str before comparing
and add a regression test that mocks RecordID rows.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014kRBoPiBD1NKeKHCo6EyrE

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 api/models.py                                 |  32 +-
 api/routers/search.py                         |  36 +-
 docs/3-USER-GUIDE/search.md                   |  16 +
 docs/7-DEVELOPMENT/api-reference.md           |   3 +-
 .../ADR-008-notebook-scoped-search.md         |  34 ++
 docs/7-DEVELOPMENT/decisions/README.md        |   1 +
 frontend/src/app/(dashboard)/search/page.tsx  |  27 +-
 .../search/NotebookScopeSelector.test.tsx     |  59 +++
 .../search/NotebookScopeSelector.tsx          |  85 +++++
 frontend/src/lib/hooks/use-ask.test.tsx       |  35 ++
 frontend/src/lib/hooks/use-ask.ts             |  12 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   6 +
 frontend/src/lib/locales/ca-ES/index.ts       |   6 +
 frontend/src/lib/locales/de-DE/index.ts       |   6 +
 frontend/src/lib/locales/en-US/index.ts       |   6 +
 frontend/src/lib/locales/es-ES/index.ts       |   6 +
 frontend/src/lib/locales/fr-FR/index.ts       |   6 +
 frontend/src/lib/locales/it-IT/index.ts       |   6 +
 frontend/src/lib/locales/ja-JP/index.ts       |   6 +
 frontend/src/lib/locales/pl-PL/index.ts       |   6 +
 frontend/src/lib/locales/pt-BR/index.ts       |   6 +
 frontend/src/lib/locales/ru-RU/index.ts       |   6 +
 frontend/src/lib/locales/tr-TR/index.ts       |   6 +
 frontend/src/lib/locales/zh-CN/index.ts       |   6 +
 frontend/src/lib/locales/zh-TW/index.ts       |   6 +
 frontend/src/lib/types/search.ts              |   4 +
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/24.surrealql          | 162 +++++++++
 .../database/migrations/24_down.surrealql     | 139 ++++++++
 open_notebook/domain/notebook.py              |  89 ++++-
 open_notebook/graphs/ask.py                   |  13 +-
 tests/test_ask_graph.py                       |  76 ++++
 tests/test_search_api.py                      | 336 +++++++++++++++++-
 33 files changed, 1224 insertions(+), 25 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-008-notebook-scoped-search.md
 create mode 100644 frontend/src/components/search/NotebookScopeSelector.test.tsx
 create mode 100644 frontend/src/components/search/NotebookScopeSelector.tsx
 create mode 100644 open_notebook/database/migrations/24.surrealql
 create mode 100644 open_notebook/database/migrations/24_down.surrealql

diff --git a/api/models.py b/api/models.py
index 3fe2ce76..4c716be1 100644
--- a/api/models.py
+++ b/api/models.py
@@ -36,7 +36,35 @@ class RecentlyViewedResponse(BaseModel):
 
 
 # Search models
-class SearchRequest(BaseModel):
+class NotebookScopeMixin(BaseModel):
+    """Optional notebook scope shared by Search and Ask requests (#574, #87).
+
+    Both `notebook_id` (single, the shape #574 proposed and existing clients
+    already send) and `notebook_ids` (several) are accepted; `scope_notebook_ids`
+    merges them. An empty scope means the whole knowledge base.
+    """
+
+    notebook_id: Optional[str] = Field(
+        None, description="Restrict results to a single notebook"
+    )
+    notebook_ids: Optional[List[str]] = Field(
+        None,
+        max_length=50,
+        description="Restrict results to these notebooks (omit or empty for all)",
+    )
+
+    @property
+    def scope_notebook_ids(self) -> List[str]:
+        # Keep empty strings so validation rejects them instead of silently
+        # widening the scope to the whole knowledge base.
+        merged: List[str] = []
+        for nb_id in [self.notebook_id, *(self.notebook_ids or [])]:
+            if nb_id is not None and nb_id not in merged:
+                merged.append(nb_id)
+        return merged
+
+
+class SearchRequest(NotebookScopeMixin):
     query: str = Field(..., description="Search query")
     type: Literal["text", "vector"] = Field("text", description="Search type")
     limit: int = Field(100, description="Maximum number of results", ge=1, le=1000)
@@ -53,7 +81,7 @@ class SearchResponse(BaseModel):
     search_type: str = Field(..., description="Type of search performed")
 
 
-class AskRequest(BaseModel):
+class AskRequest(NotebookScopeMixin):
     question: str = Field(..., description="Question to ask the knowledge base")
     strategy_model: str = Field(..., description="Model ID for query strategy")
     answer_model: str = Field(..., description="Model ID for individual answers")
diff --git a/api/routers/search.py b/api/routers/search.py
index 135f58a2..76d0b91f 100644
--- a/api/routers/search.py
+++ b/api/routers/search.py
@@ -1,5 +1,5 @@
 import json
-from typing import AsyncGenerator
+from typing import AsyncGenerator, List
 
 from fastapi import APIRouter, HTTPException
 from fastapi.responses import StreamingResponse
@@ -7,7 +7,11 @@ from loguru import logger
 
 from api.models import AskRequest, AskResponse, SearchRequest, SearchResponse
 from open_notebook.ai.models import Model, model_manager
-from open_notebook.domain.notebook import text_search, vector_search
+from open_notebook.domain.notebook import (
+    resolve_notebook_scope,
+    text_search,
+    vector_search,
+)
 from open_notebook.exceptions import (
     DatabaseOperationError,
     InvalidInputError,
@@ -22,6 +26,8 @@ router = APIRouter()
 async def search_knowledge_base(search_request: SearchRequest):
     """Search the knowledge base using text or vector search."""
     try:
+        notebook_ids = await resolve_notebook_scope(search_request.scope_notebook_ids)
+
         if search_request.type == "vector":
             # Check if embedding model is available for vector search
             if not await model_manager.get_embedding_model():
@@ -36,6 +42,7 @@ async def search_knowledge_base(search_request: SearchRequest):
                 source=search_request.search_sources,
                 note=search_request.search_notes,
                 minimum_score=search_request.minimum_score,
+                notebook_ids=notebook_ids,
             )
         else:
             # Text search
@@ -44,6 +51,7 @@ async def search_knowledge_base(search_request: SearchRequest):
                 results=search_request.limit,
                 source=search_request.search_sources,
                 note=search_request.search_notes,
+                notebook_ids=notebook_ids,
             )
 
         return SearchResponse(
@@ -67,7 +75,11 @@ async def search_knowledge_base(search_request: SearchRequest):
 
 
 async def stream_ask_response(
-    question: str, strategy_model: Model, answer_model: Model, final_answer_model: Model
+    question: str,
+    strategy_model: Model,
+    answer_model: Model,
+    final_answer_model: Model,
+    notebook_ids: List[str],
 ) -> AsyncGenerator[str, None]:
     """Stream the ask response as Server-Sent Events."""
     try:
@@ -76,7 +88,7 @@ async def stream_ask_response(
         # LangGraph accepts a partial state dict at runtime, but its typed
         # overloads require the full state type (langgraph typing limitation).
         async for chunk in ask_graph.astream(  # type: ignore[call-overload]
-            input=dict(question=question),
+            input=dict(question=question, notebook_ids=notebook_ids),
             config=dict(
                 configurable=dict(
                     strategy_model=strategy_model.id,
@@ -124,6 +136,10 @@ async def stream_ask_response(
 async def ask_knowledge_base(ask_request: AskRequest):
     """Ask the knowledge base a question using AI models."""
     try:
+        # Cheapest check first: a malformed or unknown scope fails before any
+        # model lookup or embedding check can mask it.
+        notebook_ids = await resolve_notebook_scope(ask_request.scope_notebook_ids)
+
         # Validate models exist
         strategy_model = await Model.get(ask_request.strategy_model)
         answer_model = await Model.get(ask_request.answer_model)
@@ -155,7 +171,11 @@ async def ask_knowledge_base(ask_request: AskRequest):
         # For streaming response
         return StreamingResponse(
             stream_ask_response(
-                ask_request.question, strategy_model, answer_model, final_answer_model
+                ask_request.question,
+                strategy_model,
+                answer_model,
+                final_answer_model,
+                notebook_ids,
             ),
             media_type="text/event-stream",
             headers={
@@ -178,6 +198,10 @@ async def ask_knowledge_base(ask_request: AskRequest):
 async def ask_knowledge_base_simple(ask_request: AskRequest):
     """Ask the knowledge base a question and return a simple response (non-streaming)."""
     try:
+        # Cheapest check first: a malformed or unknown scope fails before any
+        # model lookup or embedding check can mask it.
+        notebook_ids = await resolve_notebook_scope(ask_request.scope_notebook_ids)
+
         # Validate models exist
         strategy_model = await Model.get(ask_request.strategy_model)
         answer_model = await Model.get(ask_request.answer_model)
@@ -211,7 +235,7 @@ async def ask_knowledge_base_simple(ask_request: AskRequest):
         # LangGraph accepts a partial state dict at runtime, but its typed
         # overloads require the full state type (langgraph typing limitation).
         async for chunk in ask_graph.astream(  # type: ignore[call-overload]
-            input=dict(question=ask_request.question),
+            input=dict(question=ask_request.question, notebook_ids=notebook_ids),
             config=dict(
                 configurable=dict(
                     strategy_model=strategy_model.id,
diff --git a/docs/3-USER-GUIDE/search.md b/docs/3-USER-GUIDE/search.md
index 9e8da457..22e66454 100644
--- a/docs/3-USER-GUIDE/search.md
+++ b/docs/3-USER-GUIDE/search.md
@@ -180,6 +180,21 @@ Results show:
   - Different sources mixed together
 ```
 
+### Scoping to Notebooks
+
+By default Search and Ask look at your **whole knowledge base** — every source and note in every notebook. To narrow the scope, open the **Notebooks** selector above the search options and check one or more notebooks:
+
+```
+1. Open the Notebooks selector (it reads "All notebooks" until you pick one)
+2. Check the notebook(s) you want to search
+3. Run your Search or Ask as usual
+4. Click "Clear" to go back to the whole knowledge base
+```
+
+The scope is shared by the Search and Ask tabs, so a question asked right after a scoped search uses the same notebooks. Only sources and notes linked to the selected notebooks are considered; a source that lives in several notebooks matches when any of them is selected.
+
+For API clients, pass `notebook_ids` (a list) or `notebook_id` (a single id) to `POST /api/search` and `POST /api/search/ask`. Omitting both keeps the global behavior. An id that does not name an existing notebook returns `404`.
+
 ---
 
 ## The Ask Feature (Automated Search)
@@ -295,6 +310,7 @@ Result: Comprehensive answer, not just search results
 | Problem | Cause | Solution |
 |---------|-------|----------|
 | 1000+ results | Search too broad | Be more specific |
+| | All notebooks | Scope the search to one or a few notebooks |
 | | All sources | Filter by source |
 | | Keyword matches rare words | Use vector search instead |
 
diff --git a/docs/7-DEVELOPMENT/api-reference.md b/docs/7-DEVELOPMENT/api-reference.md
index 8628cdfe..0c059562 100644
--- a/docs/7-DEVELOPMENT/api-reference.md
+++ b/docs/7-DEVELOPMENT/api-reference.md
@@ -64,7 +64,8 @@ Instead of memorizing endpoints, use the interactive API docs:
 
 **Search** - Find content by text or semantic similarity
 - `POST /search` - Full-text or vector search
-- `POST /ask` - Ask a question (search + synthesize)
+- `POST /search/ask` - Ask a question (search + synthesize)
+- Both accept an optional `notebook_ids` list (or a single `notebook_id`) to scope results to specific notebooks; omit for the whole knowledge base
 
 **Transformations** - Custom prompts for extracting insights
 - `GET/POST /transformations` - Create custom extraction rules
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-008-notebook-scoped-search.md b/docs/7-DEVELOPMENT/decisions/ADR-008-notebook-scoped-search.md
new file mode 100644
index 00000000..52836ac7
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-008-notebook-scoped-search.md
@@ -0,0 +1,34 @@
+# ADR-008: Notebook scope is an optional filter on the existing search functions
+
+- **Status**: Accepted
+- **Date**: 2026-09
+- **Related**: #574 and #87 (the two requests this resolves), [#1315](https://github.com/lfnovo/open-notebook/discussions/1315) (Evidence-Centered Research — the larger retrieval contract), [ADR-006](ADR-006-migration-granularity.md) (migration granularity)
+
+## Context
+
+Search and Ask always ran against the whole knowledge base, and `notebook_id` was accepted by `POST /api/search` but silently ignored because the request model never declared it. Two long-standing requests (#574, API; #87, UI) asked for the same thing: limit Search and Ask to one or more notebooks. Discussion #1315 places scoped retrieval inside a broader design — a retrieval contract shared by Search, Ask and chat, an evidence bundle, validated citations. That design is deliberated until October 2026 and will land in stages, so the question was whether to wait for it or ship the filter now.
+
+## Decision
+
+**Ship notebook scope as an optional, backward-compatible filter on the existing SurrealQL search functions, exposed on both endpoints and the Search/Ask page. Treat it as the first, smallest block of #1315, not a competing design.**
+
+Semantics:
+
+- The scope is a **set of notebook ids**. Empty or absent means the whole knowledge base — the historical behavior, unchanged.
+- A source matches when it is linked to **any** selected notebook (`reference` edge); a note when linked via the `artifact` edge. Source chunks and insights follow their parent source. Membership is resolved once per call, not per row.
+- The scope lives **in the database functions** (`fn::text_search`, `fn::vector_search`) as a trailing `option<array<record<notebook>>>` parameter, so text search, vector search and every Ask fan-out apply the same rule. The previous call shapes still work.
+- The API accepts both `notebook_ids` (list, at most 50) and `notebook_id` (single — the shape #574 proposed and clients already send); they are merged. Ids are validated in the domain layer before the query: malformed → 400, unknown → 404, so a typo never looks like "no matches".
+- Search and Ask on the page share one selector and one scope state.
+
+## Alternatives considered
+
+- **Wait for the #1315 retrieval contract** — rejected: the need is confirmed and years old, and the filter is orthogonal to how evidence is bundled or cited. The contract will consume the same `notebook_ids` parameter.
+- **Filter in Python after the query** — rejected: the SurrealQL functions apply `LIMIT` before returning, so post-filtering would starve scoped results and waste the FTS/vector work.
+- **Single `notebook_id` only** — rejected: #87 asked for multi-select, and a list subsumes the single case. The single field stays as a convenience for existing clients.
+- **Per-notebook embedding tables** (proposed on #87) — rejected: an index-layout change for a filter; out of scope, and #1315 may revisit indexing on its own terms.
+
+## Consequences
+
+- Adding "notebook plus specific sources" or other scope dimensions later means extending the parameter list of the same functions (new migration), not a new engine.
+- Any new caller of the search functions can ignore the scope and keep global behavior; callers that need scope pass the same list. Chat context (#1315 "Auto" option) can reuse `resolve_notebook_scope` and the functions as-is.
+- The migration follows ADR-006: one migration (24), with a `_down` restoring the previous definitions.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index a9d315c8..a8b42628 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -49,5 +49,6 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-005](ADR-005-release-confidence-process.md) | Releases pass a risk-based confidence process, gated on the real image | Accepted |
 | [ADR-006](ADR-006-migration-granularity.md) | Migration granularity follows merge granularity, not release granularity | Accepted |
 | [ADR-007](ADR-007-optin-runtimes.md) | Heavy extraction runtimes (Docling, Crawl4AI local) are opt-in, installed at startup | Accepted |
+| [ADR-008](ADR-008-notebook-scoped-search.md) | Notebook scope is an optional filter on the existing search functions | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 595016ab..91aa5bbe 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -23,6 +23,7 @@ import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { StreamingResponse } from '@/components/search/StreamingResponse'
 import { AdvancedModelsDialog } from '@/components/search/AdvancedModelsDialog'
 import { SaveToNotebooksDialog } from '@/components/search/SaveToNotebooksDialog'
+import { NotebookScopeSelector } from '@/components/search/NotebookScopeSelector'
 
 export default function SearchPage() {
   const { t } = useTranslation()
@@ -43,6 +44,9 @@ export default function SearchPage() {
   const [searchSources, setSearchSources] = useState(true)
   const [searchNotes, setSearchNotes] = useState(true)
 
+  // Notebook scope shared by Ask and Search; empty = whole knowledge base (#574, #87)
+  const [scopeNotebookIds, setScopeNotebookIds] = useState<string[]>([])
+
   // Ask state
   const [askQuestion, setAskQuestion] = useState(urlMode === 'ask' ? urlQuery : '')
 
@@ -91,9 +95,10 @@ export default function SearchPage() {
       limit: 100,
       search_sources: searchSources,
       search_notes: searchNotes,
-      minimum_score: 0.2
+      minimum_score: 0.2,
+      ...(scopeNotebookIds.length > 0 ? { notebook_ids: scopeNotebookIds } : {})
     })
-  }, [searchQuery, searchType, searchSources, searchNotes, searchMutation])
+  }, [searchQuery, searchType, searchSources, searchNotes, scopeNotebookIds, searchMutation])
 
   const handleKeyPress = (e: React.KeyboardEvent) => {
     if (e.key === 'Enter') {
@@ -110,8 +115,8 @@ export default function SearchPage() {
       finalAnswer: modelDefaults.default_chat_model
     }
 
-    ask.sendAsk(askQuestion, models)
-  }, [askQuestion, modelDefaults, customModels, ask])
+    ask.sendAsk(askQuestion, models, { notebookIds: scopeNotebookIds })
+  }, [askQuestion, modelDefaults, customModels, scopeNotebookIds, ask])
 
   // Auto-trigger search/ask when arriving with URL params
   useEffect(() => {
@@ -208,6 +213,13 @@ export default function SearchPage() {
                   <p className="text-xs text-muted-foreground">{t('searchPage.pressToSubmit')}</p>
                 </div>
 
+                {/* Notebook scope */}
+                <NotebookScopeSelector
+                  selectedIds={scopeNotebookIds}
+                  onChange={setScopeNotebookIds}
+                  disabled={ask.isStreaming}
+                />
+
                 {/* Models Display */}
                 {!hasEmbeddingModel ? (
                   <div className="flex items-center gap-2 p-3 text-sm text-warn bg-warn-tint rounded-md">
@@ -359,6 +371,13 @@ export default function SearchPage() {
 
                 {/* Search Options */}
                 <div className="space-y-4">
+                  {/* Notebook scope */}
+                  <NotebookScopeSelector
+                    selectedIds={scopeNotebookIds}
+                    onChange={setScopeNotebookIds}
+                    disabled={searchMutation.isPending}
+                  />
+
                   {/* Search Type */}
                   <div className="space-y-2" role="group" aria-labelledby="search-type-label">
                     <span id="search-type-label" className="text-sm font-medium leading-none">{t('searchPage.searchType')}</span>
diff --git a/frontend/src/components/search/NotebookScopeSelector.test.tsx b/frontend/src/components/search/NotebookScopeSelector.test.tsx
new file mode 100644
index 00000000..a27e333b
--- /dev/null
+++ b/frontend/src/components/search/NotebookScopeSelector.test.tsx
@@ -0,0 +1,59 @@
+import { render, screen, fireEvent } from '@testing-library/react'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { NotebookScopeSelector } from './NotebookScopeSelector'
+import { useNotebooks } from '@/lib/hooks/use-notebooks'
+
+// useTranslation is mocked globally in setup.ts (t returns the key string)
+
+vi.mock('@/lib/hooks/use-notebooks', () => ({
+  useNotebooks: vi.fn(),
+}))
+
+const mockUseNotebooks = vi.mocked(useNotebooks)
+
+const notebooks = [
+  { id: 'notebook:a', name: 'Alpha', description: '' },
+  { id: 'notebook:b', name: 'Beta', description: 'second' },
+]
+
+describe('NotebookScopeSelector', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mockUseNotebooks.mockReturnValue({ data: notebooks, isLoading: false } as ReturnType<typeof useNotebooks>)
+  })
+
+  it('reads as "all notebooks" when nothing is selected and hides the clear action', () => {
+    render(<NotebookScopeSelector selectedIds={[]} onChange={vi.fn()} />)
+    expect(screen.getByText('searchPage.scopeAllNotebooks')).toBeInTheDocument()
+    expect(screen.queryByText('searchPage.scopeClear')).not.toBeInTheDocument()
+  })
+
+  it('adds a notebook to the scope when its checkbox is toggled', () => {
+    const onChange = vi.fn()
+    render(<NotebookScopeSelector selectedIds={['notebook:a']} onChange={onChange} />)
+
+    fireEvent.click(screen.getByRole('button', { name: /searchPage.scopeNotebooks/ }))
+    fireEvent.click(screen.getByRole('checkbox', { name: /Beta/ }))
+
+    expect(onChange).toHaveBeenCalledWith(['notebook:a', 'notebook:b'])
+  })
+
+  it('removes an already selected notebook when toggled again', () => {
+    const onChange = vi.fn()
+    render(<NotebookScopeSelector selectedIds={['notebook:a', 'notebook:b']} onChange={onChange} />)
+
+    fireEvent.click(screen.getByRole('button', { name: /searchPage.scopeNotebooks/ }))
+    fireEvent.click(screen.getByRole('checkbox', { name: /Alpha/ }))
+
+    expect(onChange).toHaveBeenCalledWith(['notebook:b'])
+  })
+
+  it('clears the whole scope from the clear action', () => {
+    const onChange = vi.fn()
+    render(<NotebookScopeSelector selectedIds={['notebook:a']} onChange={onChange} />)
+
+    fireEvent.click(screen.getByText('searchPage.scopeClear'))
+
+    expect(onChange).toHaveBeenCalledWith([])
+  })
+})
diff --git a/frontend/src/components/search/NotebookScopeSelector.tsx b/frontend/src/components/search/NotebookScopeSelector.tsx
new file mode 100644
index 00000000..2bd92905
--- /dev/null
+++ b/frontend/src/components/search/NotebookScopeSelector.tsx
@@ -0,0 +1,85 @@
+'use client'
+
+import { useState } from 'react'
+import { ChevronDown, Notebook as NotebookIcon } from 'lucide-react'
+import { useTranslation } from '@/lib/hooks/use-translation'
+import { useNotebooks } from '@/lib/hooks/use-notebooks'
+import { Button } from '@/components/ui/button'
+import { Badge } from '@/components/ui/badge'
+import { CheckboxList } from '@/components/ui/checkbox-list'
+import { Collapsible, CollapsibleContent, CollapsibleTrigger } from '@/components/ui/collapsible'
+
+interface NotebookScopeSelectorProps {
+  selectedIds: string[]
+  onChange: (ids: string[]) => void
+  disabled?: boolean
+}
+
+/**
+ * Optional notebook scope shared by the Search and Ask tabs (#574, #87).
+ * Nothing selected means the whole knowledge base — the historical behavior.
+ */
+export function NotebookScopeSelector({ selectedIds, onChange, disabled = false }: NotebookScopeSelectorProps) {
+  const { t } = useTranslation()
+  const [open, setOpen] = useState(false)
+  const { data: notebooks, isLoading } = useNotebooks(false) // false = not archived
+
+  const items = (notebooks ?? []).map((nb) => ({
+    id: nb.id,
+    title: nb.name,
+    description: nb.description || undefined
+  }))
+
+  const handleToggle = (id: string) => {
+    if (disabled) return
+    onChange(selectedIds.includes(id) ? selectedIds.filter((x) => x !== id) : [...selectedIds, id])
+  }
+
+  const summary =
+    selectedIds.length === 0
+      ? t('searchPage.scopeAllNotebooks')
+      : t('searchPage.scopeNotebooksSelected', { count: selectedIds.length })
+
+  return (
+    <Collapsible open={open} onOpenChange={setOpen} className="space-y-2" data-testid="notebook-scope">
+      <div className="flex items-center justify-between gap-2">
+        <CollapsibleTrigger asChild>
+          <button
+            type="button"
+            className="flex items-center gap-2 text-sm font-medium leading-none hover:text-foreground"
+            aria-expanded={open}
+            disabled={disabled}
+          >
+            <NotebookIcon className="h-4 w-4" />
+            {t('searchPage.scopeNotebooks')}
+            <Badge variant={selectedIds.length === 0 ? 'outline' : 'secondary'} className="font-normal">
+              {summary}
+            </Badge>
+            <ChevronDown className={`h-4 w-4 transition-transform ${open ? 'rotate-180' : ''}`} />
+          </button>
+        </CollapsibleTrigger>
+        {selectedIds.length > 0 && (
+          <Button
+            variant="ghost"
+            size="sm"
+            className="h-auto py-1 px-2"
+            onClick={() => onChange([])}
+            disabled={disabled}
+          >
+            {t('searchPage.scopeClear')}
+          </Button>
+        )}
+      </div>
+      <CollapsibleContent className="space-y-2">
+        <CheckboxList
+          items={items}
+          selectedIds={selectedIds}
+          onToggle={handleToggle}
+          loading={isLoading}
+          emptyMessage={t('searchPage.scopeNoNotebooks')}
+        />
+        <p className="text-xs text-muted-foreground">{t('searchPage.scopeHint')}</p>
+      </CollapsibleContent>
+    </Collapsible>
+  )
+}
diff --git a/frontend/src/lib/hooks/use-ask.test.tsx b/frontend/src/lib/hooks/use-ask.test.tsx
index f2ec7f7d..e94944f3 100644
--- a/frontend/src/lib/hooks/use-ask.test.tsx
+++ b/frontend/src/lib/hooks/use-ask.test.tsx
@@ -82,3 +82,38 @@ describe('useAsk under React StrictMode', () => {
     expect(result.current.error).toBe('The AI provider is temporarily unavailable.')
   })
 })
+
+describe('useAsk notebook scope (#574, #87)', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('sends notebook_ids when a scope is given', async () => {
+    vi.mocked(searchApi.askKnowledgeBase).mockResolvedValue(
+      sseStream([{ type: 'complete', final_answer: 'a' }]) as any
+    )
+    const { result } = renderHook(() => useAsk())
+
+    await act(async () => {
+      await result.current.sendAsk('why?', MODELS, { notebookIds: ['notebook:a'] })
+    })
+
+    expect(vi.mocked(searchApi.askKnowledgeBase).mock.calls[0][0]).toMatchObject({
+      question: 'why?',
+      notebook_ids: ['notebook:a'],
+    })
+  })
+
+  it('omits notebook_ids for a global ask', async () => {
+    vi.mocked(searchApi.askKnowledgeBase).mockResolvedValue(
+      sseStream([{ type: 'complete', final_answer: 'a' }]) as any
+    )
+    const { result } = renderHook(() => useAsk())
+
+    await act(async () => {
+      await result.current.sendAsk('why?', MODELS, { notebookIds: [] })
+    })
+
+    expect(vi.mocked(searchApi.askKnowledgeBase).mock.calls[0][0]).not.toHaveProperty('notebook_ids')
+  })
+})
diff --git a/frontend/src/lib/hooks/use-ask.ts b/frontend/src/lib/hooks/use-ask.ts
index 36d574b7..0b4d7b65 100644
--- a/frontend/src/lib/hooks/use-ask.ts
+++ b/frontend/src/lib/hooks/use-ask.ts
@@ -14,6 +14,11 @@ interface AskModels {
   finalAnswer: string
 }
 
+interface AskOptions {
+  /** Notebook ids to scope the search to; empty = whole knowledge base. */
+  notebookIds?: string[]
+}
+
 interface StrategyData {
   reasoning: string
   searches: Array<{ term: string; instructions: string }>
@@ -100,7 +105,7 @@ export function useAsk() {
     }
   }, [clearStreamTimeout])
 
-  const sendAsk = useCallback(async (question: string, models: AskModels) => {
+  const sendAsk = useCallback(async (question: string, models: AskModels, options: AskOptions = {}) => {
     // Validate inputs
     if (!question.trim()) {
       toast.error(t('apiErrors.pleaseEnterQuestion'))
@@ -136,7 +141,10 @@ export function useAsk() {
         question,
         strategy_model: models.strategy,
         answer_model: models.answer,
-        final_answer_model: models.finalAnswer
+        final_answer_model: models.finalAnswer,
+        ...(options.notebookIds && options.notebookIds.length > 0
+          ? { notebook_ids: options.notebookIds }
+          : {})
       }, signal)
 
       if (!response) {
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index a276074e..10ddb5d4 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -494,6 +494,12 @@ export const bnIN = {
     searchIn: "যেখানে অনুসন্ধান করবেন",
     searchSources: "উৎস অনুসন্ধান",
     searchNotes: "নোট অনুসন্ধান",
+    scopeNotebooks: "নোটবুক",
+    scopeAllNotebooks: "সব নোটবুক",
+    scopeNotebooksSelected: "{{count}} টি নির্বাচিত",
+    scopeClear: "মুছুন",
+    scopeHint: "সম্পূর্ণ জ্ঞানভান্ডারে অনুসন্ধান করতে কোনোটি নির্বাচন করবেন না।",
+    scopeNoNotebooks: "এখনও কোনো নোটবুক নেই।",
     resultsFound: "{{count}}টি ফলাফল পাওয়া গেছে",
     matches: "মিল ({{count}})",
     noResultsFor: "\"{{query}}\" এর জন্য কোনো ফলাফল পাওয়া যায়নি",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index e1be4903..a3c5c02c 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -494,6 +494,12 @@ export const caES = {
     searchIn: "Cerca a",
     searchSources: "Cerca a les fonts",
     searchNotes: "Cerca a les notes",
+    scopeNotebooks: "Quaderns",
+    scopeAllNotebooks: "Tots els quaderns",
+    scopeNotebooksSelected: "{{count}} seleccionat(s)",
+    scopeClear: "Neteja",
+    scopeHint: "Deixa-ho tot desmarcat per cercar a tota la base de coneixement.",
+    scopeNoNotebooks: "Encara no hi ha quaderns.",
     resultsFound: "S'han trobat {{count}} resultats",
     matches: "Coincidències ({{count}})",
     noResultsFor: "No s'han trobat resultats per a «{{query}}»",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 65494cc1..820da99e 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -497,6 +497,12 @@ export const deDE = {
     searchIn: "Suchen in",
     searchSources: "Quellen durchsuchen",
     searchNotes: "Notizen durchsuchen",
+    scopeNotebooks: "Notizbücher",
+    scopeAllNotebooks: "Alle Notizbücher",
+    scopeNotebooksSelected: "{{count}} ausgewählt",
+    scopeClear: "Zurücksetzen",
+    scopeHint: "Nichts auswählen, um die gesamte Wissensdatenbank zu durchsuchen.",
+    scopeNoNotebooks: "Noch keine Notizbücher.",
     resultsFound: "{{count}} Ergebnisse gefunden",
     matches: "Treffer ({{count}})",
     noResultsFor: "Keine Ergebnisse für „{{query}}“ gefunden",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 1cfd09ba..52d57384 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -492,6 +492,12 @@ export const enUS = {
     searchIn: "Search In",
     searchSources: "Search Sources",
     searchNotes: "Search Notes",
+    scopeNotebooks: "Notebooks",
+    scopeAllNotebooks: "All notebooks",
+    scopeNotebooksSelected: "{{count}} selected",
+    scopeClear: "Clear",
+    scopeHint: "Leave all unchecked to search your whole knowledge base.",
+    scopeNoNotebooks: "No notebooks yet.",
     resultsFound: "{{count}} results found",
     matches: "Matches ({{count}})",
     noResultsFor: "No results found for “{{query}}”",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 0bee4dd6..e515f16a 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -494,6 +494,12 @@ export const esES = {
     searchIn: "Buscar en",
     searchSources: "Buscar fuentes",
     searchNotes: "Buscar notas",
+    scopeNotebooks: "Cuadernos",
+    scopeAllNotebooks: "Todos los cuadernos",
+    scopeNotebooksSelected: "{{count}} seleccionado(s)",
+    scopeClear: "Limpiar",
+    scopeHint: "Deja todo sin marcar para buscar en toda la base de conocimiento.",
+    scopeNoNotebooks: "Aún no hay cuadernos.",
     resultsFound: "{{count}} resultados encontrados",
     matches: "Coincidencias ({{count}})",
     noResultsFor: "No se encontraron resultados para \"{{query}}\"",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index a40878f7..53930b64 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -494,6 +494,12 @@ export const frFR = {
     searchIn: "Rechercher dans",
     searchSources: "Rechercher dans les Sources",
     searchNotes: "Rechercher dans les Notes",
+    scopeNotebooks: "Carnets",
+    scopeAllNotebooks: "Tous les carnets",
+    scopeNotebooksSelected: "{{count}} sélectionné(s)",
+    scopeClear: "Effacer",
+    scopeHint: "Ne cochez rien pour rechercher dans toute la base de connaissances.",
+    scopeNoNotebooks: "Aucun carnet pour le moment.",
     resultsFound: "{{count}} résultats trouvés",
     matches: "Correspondances ({{count}})",
     noResultsFor: "Aucun résultat trouvé pour “{{query}}”",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index b8ce99ff..38b9744c 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -494,6 +494,12 @@ export const itIT = {
     searchIn: "Cerca In",
     searchSources: "Cerca nelle fonti",
     searchNotes: "Cerca nelle note",
+    scopeNotebooks: "Quaderni",
+    scopeAllNotebooks: "Tutti i quaderni",
+    scopeNotebooksSelected: "{{count}} selezionato/i",
+    scopeClear: "Cancella",
+    scopeHint: "Lascia tutto deselezionato per cercare in tutta la base di conoscenza.",
+    scopeNoNotebooks: "Nessun quaderno ancora.",
     resultsFound: "{{count}} risultati trovati",
     matches: "Corrispondenze ({{count}})",
     noResultsFor: "Nessun risultato trovato per \"{{query}}\"",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index bf5a046a..04db0c60 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -494,6 +494,12 @@ export const jaJP = {
     searchIn: "検索対象",
     searchSources: "ソースを検索",
     searchNotes: "ノートを検索",
+    scopeNotebooks: "ノートブック",
+    scopeAllNotebooks: "すべてのノートブック",
+    scopeNotebooksSelected: "{{count}} 件選択中",
+    scopeClear: "クリア",
+    scopeHint: "何も選択しなければナレッジベース全体を検索します。",
+    scopeNoNotebooks: "ノートブックはまだありません。",
     resultsFound: "{{count}}件の結果",
     matches: "一致（{{count}}件）",
     noResultsFor: "「{{query}}」に一致する結果がありません",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 67f38590..9cf10984 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -494,6 +494,12 @@ export const plPL = {
     searchIn: "Szukaj w",
     searchSources: "Przeszukaj źródła",
     searchNotes: "Przeszukaj notatki",
+    scopeNotebooks: "Notatniki",
+    scopeAllNotebooks: "Wszystkie notatniki",
+    scopeNotebooksSelected: "Wybrano: {{count}}",
+    scopeClear: "Wyczyść",
+    scopeHint: "Nie zaznaczaj nic, aby przeszukać całą bazę wiedzy.",
+    scopeNoNotebooks: "Brak notatników.",
     resultsFound: "Znaleziono wyników: {{count}}",
     matches: "Dopasowania ({{count}})",
     noResultsFor: "Brak wyników dla „{{query}}”",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 59a20906..7149bbd0 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -494,6 +494,12 @@ export const ptBR = {
     searchIn: "Buscar Em",
     searchSources: "Buscar Fontes",
     searchNotes: "Buscar Notas",
+    scopeNotebooks: "Cadernos",
+    scopeAllNotebooks: "Todos os cadernos",
+    scopeNotebooksSelected: "{{count}} selecionado(s)",
+    scopeClear: "Limpar",
+    scopeHint: "Deixe tudo desmarcado para buscar em toda a base de conhecimento.",
+    scopeNoNotebooks: "Nenhum caderno ainda.",
     resultsFound: "{{count}} resultados encontrados",
     matches: "Correspondências ({{count}})",
     noResultsFor: "Nenhum resultado encontrado para \"{{query}}\"",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index baafc8b4..c1094267 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -494,6 +494,12 @@ export const ruRU = {
     searchIn: "Искать в",
     searchSources: "Искать в источниках",
     searchNotes: "Искать в заметках",
+    scopeNotebooks: "Блокноты",
+    scopeAllNotebooks: "Все блокноты",
+    scopeNotebooksSelected: "Выбрано: {{count}}",
+    scopeClear: "Сбросить",
+    scopeHint: "Ничего не отмечайте, чтобы искать по всей базе знаний.",
+    scopeNoNotebooks: "Блокнотов пока нет.",
     resultsFound: "Найдено результатов: {{count}}",
     matches: "Совпадения ({{count}})",
     noResultsFor: "Нет результатов для «{{query}}»",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index cea1dd4a..ee081e28 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -494,6 +494,12 @@ export const trTR = {
     searchIn: "Şurada Ara",
     searchSources: "Kaynaklarda Ara",
     searchNotes: "Notlarda Ara",
+    scopeNotebooks: "Not Defterleri",
+    scopeAllNotebooks: "Tüm not defterleri",
+    scopeNotebooksSelected: "{{count}} seçili",
+    scopeClear: "Temizle",
+    scopeHint: "Tüm bilgi tabanında aramak için hiçbirini işaretlemeyin.",
+    scopeNoNotebooks: "Henüz not defteri yok.",
     resultsFound: "{{count}} sonuç bulundu",
     matches: "Eşleşmeler ({{count}})",
     noResultsFor: "“{{query}}” için sonuç bulunamadı",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index bd54c414..f4936463 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -494,6 +494,12 @@ export const zhCN = {
     searchIn: "搜索范围",
     searchSources: "搜索来源",
     searchNotes: "搜索笔记",
+    scopeNotebooks: "笔记本",
+    scopeAllNotebooks: "所有笔记本",
+    scopeNotebooksSelected: "已选择 {{count}} 个",
+    scopeClear: "清除",
+    scopeHint: "不勾选任何项则搜索整个知识库。",
+    scopeNoNotebooks: "还没有笔记本。",
     resultsFound: "{{count}} 个结果",
     matches: "匹配项 ({{count}})",
     noResultsFor: "未找到 “{{query}}” 的结果",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 96b97e22..a5b27102 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -494,6 +494,12 @@ export const zhTW = {
     searchIn: "搜尋範圍",
     searchSources: "搜尋來源",
     searchNotes: "搜尋筆記",
+    scopeNotebooks: "筆記本",
+    scopeAllNotebooks: "所有筆記本",
+    scopeNotebooksSelected: "已選擇 {{count}} 個",
+    scopeClear: "清除",
+    scopeHint: "不勾選任何項目則搜尋整個知識庫。",
+    scopeNoNotebooks: "還沒有筆記本。",
     resultsFound: "{{count}} 個結果",
     matches: "匹配項 ({{count}})",
     noResultsFor: "未找到 “{{query}}” 的結果",
diff --git a/frontend/src/lib/types/search.ts b/frontend/src/lib/types/search.ts
index c9ae20a3..70bdb562 100644
--- a/frontend/src/lib/types/search.ts
+++ b/frontend/src/lib/types/search.ts
@@ -6,6 +6,8 @@ export interface SearchRequest {
   search_sources: boolean
   search_notes: boolean
   minimum_score: number
+  /** Restrict results to these notebooks; omit or empty for the whole knowledge base (#574, #87). */
+  notebook_ids?: string[]
 }
 
 export interface SearchResult {
@@ -35,6 +37,8 @@ export interface AskRequest {
   strategy_model: string
   answer_model: string
   final_answer_model: string
+  /** Restrict every search of the strategy to these notebooks; omit or empty for all (#574, #87). */
+  notebook_ids?: string[]
 }
 
 export interface AskResponse {
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index a8564956..5f20fbb6 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -145,6 +145,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/23.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/24.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -216,6 +219,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/23_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/24_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/24.surrealql b/open_notebook/database/migrations/24.surrealql
new file mode 100644
index 00000000..9acf0a59
--- /dev/null
+++ b/open_notebook/database/migrations/24.surrealql
@@ -0,0 +1,162 @@
+-- Migration 24: notebook-scoped search (#574, #87)
+-- fn::text_search and fn::vector_search gain an optional trailing
+-- $notebook_ids parameter. When it is NONE or empty the functions behave
+-- exactly as before (global search). When it holds notebook record ids, the
+-- result set is limited to sources linked to those notebooks through the
+-- `reference` edge and notes linked through the `artifact` edge. Source
+-- chunks (source_embedding) and insights (source_insight) follow their parent
+-- source. The scoped id lists are resolved once per call, not per row.
+
+REMOVE FUNCTION IF EXISTS fn::text_search;
+
+DEFINE FUNCTION IF NOT EXISTS fn::text_search($query_text: string, $match_count: int, $sources: bool, $show_notes: bool, $notebook_ids: option<array<record<notebook>>>) {
+
+    let $scoped = $notebook_ids != NONE AND array::len($notebook_ids) > 0;
+    let $scoped_sources = IF $scoped { (SELECT VALUE in FROM reference WHERE out IN $notebook_ids) } ELSE { [] };
+    let $scoped_notes = IF $scoped { (SELECT VALUE in FROM artifact WHERE out IN $notebook_ids) } ELSE { [] };
+
+    let $source_title_search =
+        IF $sources {(
+            SELECT id, title,
+            search::highlight('`', '`', 1) as content,
+            id as parent_id,
+            math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_embedding_search =
+         IF $sources {(
+            SELECT source.id as id, source.title as title, search::highlight('`', '`', 1) as content, source.id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source_embedding
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_full_search =
+         IF $sources {(
+            SELECT id, title, search::highlight('`', '`', 1) as content, id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE full_text @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_insight_search =
+         IF $sources {(
+             SELECT id, insight_type + " - " + (source.title OR '') as title, search::highlight('`', '`', 1) as content, id as parent_id,  math::max(search::score(1)) AS relevance
+            FROM source_insight
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $note_title_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+     let $note_content_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE content @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_chunk_results = array::union($source_embedding_search, $source_full_search);
+
+    let $source_asset_results = array::union($source_title_search, $source_insight_search);
+
+    let $source_results = array::union($source_chunk_results, $source_asset_results );
+    let $note_results = array::union($note_title_search, $note_content_search );
+    let $final_results = array::union($source_results, $note_results );
+
+        RETURN (select id, parent_id, title, math::max(relevance) as relevance
+        from $final_results where id is not None
+        group by id, parent_id, title ORDER BY relevance DESC LIMIT $match_count);
+
+};
+
+
+REMOVE FUNCTION IF EXISTS fn::vector_search;
+
+DEFINE FUNCTION IF NOT EXISTS fn::vector_search($query: array<float>, $match_count: int, $sources: bool, $show_notes: bool, $min_similarity: float, $notebook_ids: option<array<record<notebook>>>) {
+
+    let $scoped = $notebook_ids != NONE AND array::len($notebook_ids) > 0;
+    let $scoped_sources = IF $scoped { (SELECT VALUE in FROM reference WHERE out IN $notebook_ids) } ELSE { [] };
+    let $scoped_notes = IF $scoped { (SELECT VALUE in FROM artifact WHERE out IN $notebook_ids) } ELSE { [] };
+
+    let $source_embedding_search =
+        IF $sources {(
+            SELECT
+                source.id as id,
+                source.title as title,
+                content,
+                source.id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM source_embedding
+            WHERE embedding != none and array::len(embedding)=array::len($query) AND
+                 vector::similarity::cosine(embedding, $query) >= $min_similarity
+              AND (!$scoped OR source IN $scoped_sources)
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+    let $source_insight_search =
+        IF $sources {(
+            SELECT
+                id,
+                insight_type + ' - ' + (source.title OR '') as title,
+                content,
+                source.id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM source_insight
+             WHERE embedding != none and array::len(embedding)=array::len($query) AND
+            vector::similarity::cosine(embedding, $query) >= $min_similarity
+              AND (!$scoped OR source IN $scoped_sources)
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+
+    let $note_content_search =
+        IF $show_notes {(
+            SELECT
+                id,
+                title,
+                content,
+                id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM note
+            WHERE embedding != none and array::len(embedding)=array::len($query) AND
+            vector::similarity::cosine(embedding, $query) >= $min_similarity
+              AND (!$scoped OR id IN $scoped_notes)
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+
+    let $all_results = array::union(
+        array::union($source_embedding_search, $source_insight_search),
+        $note_content_search
+    );
+
+
+    RETURN (select id, parent_id, title, math::max(similarity) as similarity,
+    array::flatten(content) as matches
+    from $all_results where id is not None
+    group by id, parent_id, title ORDER BY similarity DESC LIMIT $match_count);
+
+};
diff --git a/open_notebook/database/migrations/24_down.surrealql b/open_notebook/database/migrations/24_down.surrealql
new file mode 100644
index 00000000..c4f18139
--- /dev/null
+++ b/open_notebook/database/migrations/24_down.surrealql
@@ -0,0 +1,139 @@
+-- Migration 24 rollback: restore the unscoped fn::text_search (migration 4) and fn::vector_search (migration 9) signatures (#574, #87)
+
+REMOVE FUNCTION IF EXISTS fn::text_search;
+
+
+DEFINE FUNCTION IF NOT EXISTS fn::text_search($query_text: string, $match_count: int, $sources:bool, $show_notes:bool) {
+  
+    let $source_title_search = 
+        IF $sources {(
+            SELECT id, title, 
+            search::highlight('`', '`', 1) as content,
+            id as parent_id,
+            math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE title @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+    
+    let $source_embedding_search = 
+         IF $sources {(
+            SELECT source.id as id, source.title as title, search::highlight('`', '`', 1) as content, source.id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source_embedding
+            WHERE content @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_full_search = 
+         IF $sources {(
+            SELECT id, title, search::highlight('`', '`', 1) as content, id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE full_text @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+    
+    let $source_insight_search = 
+         IF $sources {(
+             SELECT id, insight_type + " - " + (source.title OR '') as title, search::highlight('`', '`', 1) as content, id as parent_id,  math::max(search::score(1)) AS relevance
+            FROM source_insight
+            WHERE content @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $note_title_search = 
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE title @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+
+     let $note_content_search = 
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE content @1@ $query_text
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_chunk_results = array::union($source_embedding_search, $source_full_search);
+    
+    let $source_asset_results = array::union($source_title_search, $source_insight_search);
+
+    let $source_results = array::union($source_chunk_results, $source_asset_results );
+    let $note_results = array::union($note_title_search, $note_content_search );
+    let $final_results = array::union($source_results, $note_results );
+
+        RETURN (select id, parent_id, title, math::max(relevance) as relevance
+        from $final_results where id is not None
+        group by id, parent_id, title ORDER BY relevance DESC LIMIT $match_count);
+
+};
+
+
+
+REMOVE FUNCTION IF EXISTS fn::vector_search;
+
+DEFINE FUNCTION IF NOT EXISTS fn::vector_search($query: array<float>, $match_count: int, $sources: bool, $show_notes: bool, $min_similarity: float) {
+    let $source_embedding_search = 
+        IF $sources {(
+            SELECT 
+                source.id as id,
+                source.title as title,
+                content,
+                source.id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM source_embedding 
+            WHERE embedding != none and array::len(embedding)=array::len($query) AND
+                 vector::similarity::cosine(embedding, $query) >= $min_similarity
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+    let $source_insight_search = 
+        IF $sources {(
+            SELECT 
+                id,
+                insight_type + ' - ' + (source.title OR '') as title,
+                content,
+                source.id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM source_insight
+             WHERE embedding != none and array::len(embedding)=array::len($query) AND
+            vector::similarity::cosine(embedding, $query) >= $min_similarity
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+
+    let $note_content_search = 
+        IF $show_notes {(
+            SELECT 
+                id,
+                title,
+                content,
+                id as parent_id,
+                vector::similarity::cosine(embedding, $query) as similarity
+            FROM note
+            WHERE embedding != none and array::len(embedding)=array::len($query) AND
+            vector::similarity::cosine(embedding, $query) >= $min_similarity
+            ORDER BY similarity DESC
+            LIMIT $match_count
+        )}
+        ELSE { [] };
+
+
+    let $all_results = array::union(
+        array::union($source_embedding_search, $source_insight_search),
+        $note_content_search
+    );
+
+
+    RETURN (select id, parent_id, title, math::max(similarity) as similarity,
+    array::flatten(content) as matches
+    from $all_results where id is not None
+    group by id, parent_id, title ORDER BY similarity DESC LIMIT $match_count);
+
+};
\ No newline at end of file
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 2ddf6a63..72be7ee1 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -10,7 +10,11 @@ from surrealdb import RecordID
 
 from open_notebook.database.repository import ensure_record_id, repo_query
 from open_notebook.domain.base import ObjectModel
-from open_notebook.exceptions import DatabaseOperationError, InvalidInputError
+from open_notebook.exceptions import (
+    DatabaseOperationError,
+    InvalidInputError,
+    NotFoundError,
+)
 
 
 class Notebook(ObjectModel):
@@ -764,8 +768,71 @@ class ChatSession(ObjectModel):
         return await self.relate("refers_to", source_id)
 
 
+async def resolve_notebook_scope(notebook_ids: List[str]) -> List[str]:
+    """Validate a notebook scope before it reaches text_search / vector_search.
+
+    Every id must be a well-formed `notebook:<key>` id naming an existing
+    notebook: a typo would otherwise silently return an empty result set that
+    is indistinguishable from "no matches". Existence is checked with one query
+    for the whole list. Returns the ids unchanged (empty list = whole knowledge
+    base). Raises InvalidInputError for malformed ids, NotFoundError for
+    unknown notebooks.
+    """
+    if not notebook_ids:
+        return []
+
+    # Only notebook ids are accepted: a source or note id would fail the typed
+    # record<notebook> parameter inside SurrealDB instead of returning cleanly,
+    # and "notebook:" with an empty key would blow up in RecordID.parse.
+    record_ids: List[RecordID] = []
+    invalid: List[str] = []
+    for nb_id in notebook_ids:
+        if not nb_id.startswith("notebook:") or not nb_id[len("notebook:") :]:
+            invalid.append(nb_id)
+            continue
+        try:
+            record_ids.append(ensure_record_id(nb_id))
+        except Exception:
+            invalid.append(nb_id)
+    if invalid:
+        raise InvalidInputError(f"Invalid notebook id(s): {', '.join(invalid)}")
+
+    try:
+        rows = await repo_query(
+            "SELECT id FROM notebook WHERE id IN $ids", {"ids": record_ids}
+        )
+    except Exception as e:
+        # Same contract as text_search / vector_search: log the raw driver
+        # error here, surface a typed error to the API layer.
+        logger.error(f"Error resolving notebook scope: {str(e)}")
+        logger.exception(e)
+        raise DatabaseOperationError("Failed to resolve notebook scope")
+    # The driver returns ids as RecordID objects (unhashable, and never equal
+    # to the request strings), so normalize to strings before comparing.
+    found = {str(row["id"]) for row in rows}
+    missing = [nb_id for nb_id in notebook_ids if nb_id not in found]
+    if missing:
+        raise NotFoundError(f"Notebook(s) not found: {', '.join(missing)}")
+    return notebook_ids
+
+
+def _scope_record_ids(notebook_ids: Optional[List[str]]) -> Optional[List[RecordID]]:
+    """Normalize a notebook scope for fn::text_search / fn::vector_search.
+
+    Returns None for an empty scope (global search) so the SurrealQL functions
+    take their unfiltered path, otherwise the ids as RecordIDs.
+    """
+    if not notebook_ids:
+        return None
+    return [ensure_record_id(nb_id) for nb_id in notebook_ids]
+
+
 async def text_search(
-    keyword: str, results: int, source: bool = True, note: bool = True
+    keyword: str,
+    results: int,
+    source: bool = True,
+    note: bool = True,
+    notebook_ids: Optional[List[str]] = None,
 ):
     if not keyword:
         raise InvalidInputError("Search keyword cannot be empty")
@@ -773,9 +840,15 @@ async def text_search(
         search_results = await repo_query(
             """
             select *
-            from fn::text_search($keyword, $results, $source, $note)
+            from fn::text_search($keyword, $results, $source, $note, $notebook_ids)
             """,
-            {"keyword": keyword, "results": results, "source": source, "note": note},
+            {
+                "keyword": keyword,
+                "results": results,
+                "source": source,
+                "note": note,
+                "notebook_ids": _scope_record_ids(notebook_ids),
+            },
         )
         return search_results
     except RuntimeError as e:
@@ -788,7 +861,9 @@ async def text_search(
                 f"Highlight position overflow, falling back to vector search: {str(e)}"
             )
             try:
-                return await vector_search(keyword, results, source, note)
+                return await vector_search(
+                    keyword, results, source, note, notebook_ids=notebook_ids
+                )
             except Exception as ve:
                 # Both search paths failed (e.g. no embedding model configured).
                 # Surface the failure instead of returning [] — an empty list would
@@ -812,6 +887,7 @@ async def vector_search(
     source: bool = True,
     note: bool = True,
     minimum_score=0.2,
+    notebook_ids: Optional[List[str]] = None,
 ):
     if not keyword:
         raise InvalidInputError("Search keyword cannot be empty")
@@ -822,7 +898,7 @@ async def vector_search(
         embed = await generate_embedding(keyword)
         search_results = await repo_query(
             """
-            SELECT * FROM fn::vector_search($embed, $results, $source, $note, $minimum_score);
+            SELECT * FROM fn::vector_search($embed, $results, $source, $note, $minimum_score, $notebook_ids);
             """,
             {
                 "embed": embed,
@@ -830,6 +906,7 @@ async def vector_search(
                 "source": source,
                 "note": note,
                 "minimum_score": minimum_score,
+                "notebook_ids": _scope_record_ids(notebook_ids),
             },
         )
         # SurrealDB fn::vector_search declares ORDER BY similarity DESC, but the
diff --git a/open_notebook/graphs/ask.py b/open_notebook/graphs/ask.py
index 5035e7b0..9cb956a7 100644
--- a/open_notebook/graphs/ask.py
+++ b/open_notebook/graphs/ask.py
@@ -30,6 +30,7 @@ class SubGraphState(TypedDict):
     results: dict
     answer: str
     ids: list  # Added for provide_answer function
+    notebook_ids: list  # Notebook scope forwarded from ThreadState (#574, #87)
 
 
 class Search(BaseModel):
@@ -52,6 +53,9 @@ class ThreadState(TypedDict):
     strategy: Strategy
     answers: Annotated[list, operator.add]
     final_answer: str
+    # Optional notebook scope: when non-empty, every search the strategy fans
+    # out runs only against sources/notes linked to these notebooks (#574, #87).
+    notebook_ids: list
 
 
 async def call_model_with_messages(state: ThreadState, config: RunnableConfig) -> dict:
@@ -109,6 +113,7 @@ async def trigger_queries(state: ThreadState, config: RunnableConfig):
                 "question": state["question"],
                 "instructions": s.instructions,
                 "term": s.term,
+                "notebook_ids": state.get("notebook_ids") or [],
                 # "type": s.type,
             },
         )
@@ -122,7 +127,13 @@ async def provide_answer(state: SubGraphState, config: RunnableConfig) -> dict:
         # if state["type"] == "text":
         #     results = text_search(state["term"], 10, True, True)
         # else:
-        results = await vector_search(state["term"], 10, True, True)
+        results = await vector_search(
+            state["term"],
+            10,
+            True,
+            True,
+            notebook_ids=state.get("notebook_ids") or None,
+        )
         if len(results) == 0:
             return {"answers": []}
         payload["results"] = results
diff --git a/tests/test_ask_graph.py b/tests/test_ask_graph.py
index a2a330a9..16383934 100644
--- a/tests/test_ask_graph.py
+++ b/tests/test_ask_graph.py
@@ -21,6 +21,7 @@ from open_notebook.graphs.ask import (
     ThreadState,
     call_model_with_messages,
     provide_answer,
+    trigger_queries,
     write_final_answer,
 )
 
@@ -163,3 +164,78 @@ class TestEmptyStrategyHandling:
     def test_search_model_accepts_blank_term(self):
         """The filter, not the schema, is responsible for blank terms."""
         assert Search(term="", instructions="x").term == ""
+
+
+class TestNotebookScope:
+    """The notebook scope travels from the thread state into every search (#574, #87)."""
+
+    @pytest.mark.asyncio
+    async def test_trigger_queries_forwards_scope_to_each_search(self):
+        state = cast(
+            ThreadState,
+            {
+                "question": "q",
+                "notebook_ids": ["notebook:a"],
+                "strategy": Strategy(
+                    reasoning="r",
+                    searches=[
+                        Search(term="one", instructions="x"),
+                        Search(term="two", instructions="y"),
+                    ],
+                ),
+            },
+        )
+        sends = await trigger_queries(state, EMPTY_CONFIG)
+        assert [s.arg["notebook_ids"] for s in sends] == [
+            ["notebook:a"],
+            ["notebook:a"],
+        ]
+
+    @pytest.mark.asyncio
+    async def test_trigger_queries_defaults_to_global_scope(self):
+        state = cast(
+            ThreadState,
+            {
+                "question": "q",
+                "strategy": Strategy(
+                    reasoning="r", searches=[Search(term="one", instructions="x")]
+                ),
+            },
+        )
+        sends = await trigger_queries(state, EMPTY_CONFIG)
+        assert sends[0].arg["notebook_ids"] == []
+
+    @pytest.mark.asyncio
+    async def test_provide_answer_scopes_vector_search(self):
+        state = {
+            "question": "q",
+            "term": "rag",
+            "instructions": "extract",
+            "notebook_ids": ["notebook:a"],
+        }
+        with (
+            patch(
+                "open_notebook.graphs.ask.vector_search",
+                new=AsyncMock(return_value=[{"id": "source:1", "content": "x"}]),
+            ) as search,
+            patch(
+                "open_notebook.graphs.ask.provision_langchain_model",
+                new=AsyncMock(return_value=_model_returning("partial")),
+            ),
+        ):
+            await provide_answer(state, EMPTY_CONFIG)  # type: ignore[arg-type]
+        assert search.await_args is not None
+        assert search.await_args.kwargs["notebook_ids"] == ["notebook:a"]
+
+    @pytest.mark.asyncio
+    async def test_provide_answer_without_scope_searches_globally(self):
+        state = {"question": "q", "term": "rag", "instructions": "extract"}
+        with (
+            patch(
+                "open_notebook.graphs.ask.vector_search",
+                new=AsyncMock(return_value=[]),
+            ) as search,
+        ):
+            await provide_answer(state, EMPTY_CONFIG)  # type: ignore[arg-type]
+        assert search.await_args is not None
+        assert search.await_args.kwargs["notebook_ids"] is None
diff --git a/tests/test_search_api.py b/tests/test_search_api.py
index 76834579..7e0be360 100644
--- a/tests/test_search_api.py
+++ b/tests/test_search_api.py
@@ -1,8 +1,11 @@
+from pathlib import Path
 from unittest.mock import AsyncMock, patch
 
 import pytest
 from fastapi.testclient import TestClient
 
+MIGRATIONS_DIR = Path("open_notebook/database/migrations")
+
 
 @pytest.fixture
 def client():
@@ -53,7 +56,10 @@ class TestTextSearchHighlightOverflowFallback:
         )
         with (
             patch.object(
-                notebook_module, "repo_query", new_callable=AsyncMock, side_effect=overflow
+                notebook_module,
+                "repo_query",
+                new_callable=AsyncMock,
+                side_effect=overflow,
             ),
             patch.object(
                 notebook_module,
@@ -65,7 +71,7 @@ class TestTextSearchHighlightOverflowFallback:
             result = await notebook_module.text_search("hello", 10)
 
         assert result == [{"id": "source:1"}]
-        mock_vector.assert_awaited_once_with("hello", 10, True, True)
+        mock_vector.assert_awaited_once_with("hello", 10, True, True, notebook_ids=None)
 
     @pytest.mark.asyncio
     async def test_position_overflow_raises_when_vector_also_fails(self):
@@ -75,7 +81,10 @@ class TestTextSearchHighlightOverflowFallback:
         overflow = RuntimeError("position overflow: 1 - len: 0")
         with (
             patch.object(
-                notebook_module, "repo_query", new_callable=AsyncMock, side_effect=overflow
+                notebook_module,
+                "repo_query",
+                new_callable=AsyncMock,
+                side_effect=overflow,
             ),
             patch.object(
                 notebook_module,
@@ -184,3 +193,324 @@ class TestVectorSearchOrdering:
             "source:b",
             "source:c",
         ]
+
+
+def _found(*ids):
+    return [{"id": nb_id} for nb_id in ids]
+
+
+class TestNotebookScopedSearchApi:
+    """POST /api/search accepts a notebook scope and forwards it (#574, #87)."""
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_notebook_ids_are_forwarded_to_text_search(
+        self, mock_text_search, mock_query, client
+    ):
+        mock_query.return_value = _found("notebook:a", "notebook:b")
+        mock_text_search.return_value = []
+        response = client.post(
+            "/api/search",
+            json={
+                "query": "x",
+                "type": "text",
+                "notebook_ids": ["notebook:a", "notebook:b"],
+            },
+        )
+        assert response.status_code == 200
+        assert mock_text_search.await_args is not None
+        assert mock_text_search.await_args.kwargs["notebook_ids"] == [
+            "notebook:a",
+            "notebook:b",
+        ]
+        # Existence is checked with a single query for the whole scope.
+        mock_query.assert_awaited_once()
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch(
+        "api.routers.search.model_manager.get_embedding_model", new_callable=AsyncMock
+    )
+    @patch("api.routers.search.vector_search", new_callable=AsyncMock)
+    def test_single_notebook_id_is_forwarded_to_vector_search(
+        self, mock_vector_search, mock_embedding, mock_query, client
+    ):
+        """`notebook_id` (the #574 shape, already sent by clients) is honored too."""
+        mock_query.return_value = _found("notebook:a")
+        mock_embedding.return_value = object()
+        mock_vector_search.return_value = []
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "vector", "notebook_id": "notebook:a"},
+        )
+        assert response.status_code == 200
+        assert mock_vector_search.await_args is not None
+        assert mock_vector_search.await_args.kwargs["notebook_ids"] == ["notebook:a"]
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_no_scope_means_global_search(self, mock_text_search, mock_query, client):
+        mock_text_search.return_value = []
+        response = client.post("/api/search", json={"query": "x", "type": "text"})
+        assert response.status_code == 200
+        assert mock_text_search.await_args is not None
+        assert mock_text_search.await_args.kwargs["notebook_ids"] == []
+        mock_query.assert_not_awaited()
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_unknown_notebook_returns_404(self, mock_text_search, mock_query, client):
+        mock_query.return_value = _found("notebook:a")
+        response = client.post(
+            "/api/search",
+            json={
+                "query": "x",
+                "type": "text",
+                "notebook_ids": ["notebook:a", "notebook:zzz"],
+            },
+        )
+        assert response.status_code == 404
+        assert "notebook:zzz" in response.json()["detail"]
+        mock_text_search.assert_not_awaited()
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_database_failure_during_scope_check_is_not_a_404(
+        self, mock_text_search, mock_query, client
+    ):
+        mock_query.side_effect = RuntimeError("connection refused ws://db:8000")
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "text", "notebook_ids": ["notebook:a"]},
+        )
+        assert response.status_code == 500
+        # The raw driver error stays in the server log, not in the response.
+        assert "ws://db:8000" not in response.text
+        mock_text_search.assert_not_awaited()
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_non_notebook_id_returns_400(self, mock_text_search, mock_query, client):
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "type": "text", "notebook_ids": ["source:abc"]},
+        )
+        assert response.status_code == 400
+        mock_query.assert_not_awaited()
+        mock_text_search.assert_not_awaited()
+
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    @patch("api.routers.search.text_search", new_callable=AsyncMock)
+    def test_empty_notebook_id_is_rejected_not_widened(
+        self, mock_text_search, mock_query, client
+    ):
+        response = client.post(
+            "/api/search", json={"query": "x", "type": "text", "notebook_id": ""}
+        )
+        assert response.status_code == 400
+        mock_text_search.assert_not_awaited()
+
+    def test_scope_is_bounded(self, client):
+        response = client.post(
+            "/api/search",
+            json={"query": "x", "notebook_ids": [f"notebook:{i}" for i in range(51)]},
+        )
+        assert response.status_code == 422
+
+    def test_scope_merges_and_dedupes_single_and_list(self):
+        from api.models import SearchRequest
+
+        request = SearchRequest(
+            query="x",
+            notebook_id="notebook:a",
+            notebook_ids=["notebook:b", "notebook:a"],
+        )
+        assert request.scope_notebook_ids == ["notebook:a", "notebook:b"]
+        assert SearchRequest(query="x").scope_notebook_ids == []
+
+
+class TestAskScopeValidationOrder:
+    """/search/ask validates the scope before touching models (#574, #87)."""
+
+    @patch("api.routers.search.Model.get", new_callable=AsyncMock)
+    @patch("open_notebook.domain.notebook.repo_query", new_callable=AsyncMock)
+    def test_unknown_scope_fails_before_model_lookup(
+        self, mock_query, mock_model_get, client
+    ):
+        mock_query.return_value = []
+        response = client.post(
+            "/api/search/ask",
+            json={
+                "question": "q",
+                "strategy_model": "model:s",
+                "answer_model": "model:a",
+                "final_answer_model": "model:f",
+                "notebook_ids": ["notebook:zzz"],
+            },
+        )
+        assert response.status_code == 404
+        mock_model_get.assert_not_awaited()
+
+
+class TestMigration24:
+    """Migration 24 adds the optional notebook scope to both search functions
+    and is registered in AsyncMigrationManager (migrations are hard-coded,
+    not auto-discovered)."""
+
+    def test_migration_files_exist(self):
+        assert (MIGRATIONS_DIR / "24.surrealql").is_file()
+        assert (MIGRATIONS_DIR / "24_down.surrealql").is_file()
+
+    def test_manager_registers_migration_24(self):
+        from open_notebook.database.async_migrate import AsyncMigrationManager
+
+        manager = AsyncMigrationManager()
+        assert len(manager.up_migrations) >= 24
+        assert len(manager.up_migrations) == len(manager.down_migrations)
+        assert "$notebook_ids" in manager.up_migrations[23].sql
+        assert "$notebook_ids" not in manager.down_migrations[23].sql
+
+    def test_up_adds_optional_scope_to_both_functions(self):
+        sql = (MIGRATIONS_DIR / "24.surrealql").read_text()
+        scope_param = "$notebook_ids: option<array<record<notebook>>>"
+
+        assert sql.count("REMOVE FUNCTION IF EXISTS fn::text_search") == 1
+        assert sql.count("REMOVE FUNCTION IF EXISTS fn::vector_search") == 1
+        assert sql.count(scope_param) == 2
+        # Trailing + optional: the previous 4-/5-argument calls keep working.
+        assert f"$show_notes: bool, {scope_param})" in sql
+        assert f"$min_similarity: float, {scope_param})" in sql
+        # Sources follow the `reference` edge, notes the `artifact` edge.
+        assert "FROM reference WHERE out IN $notebook_ids" in sql
+        assert "FROM artifact WHERE out IN $notebook_ids" in sql
+        # Empty or absent scope must keep the unfiltered path.
+        assert "$notebook_ids != NONE AND array::len($notebook_ids) > 0" in sql
+
+    def test_down_restores_unscoped_signatures(self):
+        sql = (MIGRATIONS_DIR / "24_down.surrealql").read_text()
+
+        assert "$notebook_ids" not in sql
+        assert "$match_count: int, $sources:bool, $show_notes:bool)" in sql
+        assert "$show_notes: bool, $min_similarity: float)" in sql
+
+
+class TestResolveNotebookScope:
+    """resolve_notebook_scope() validates ids before any search runs (#574, #87)."""
+
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize("bad_id", ["", "notebook:", "source:abc", "abc"])
+    async def test_malformed_ids_raise_invalid_input(self, bad_id):
+        from open_notebook.domain import notebook as notebook_module
+        from open_notebook.exceptions import InvalidInputError
+
+        with patch.object(
+            notebook_module, "repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            with pytest.raises(InvalidInputError):
+                await notebook_module.resolve_notebook_scope([bad_id])
+        mock_query.assert_not_awaited()
+
+    @pytest.mark.asyncio
+    async def test_empty_scope_skips_the_database(self):
+        from open_notebook.domain import notebook as notebook_module
+
+        with patch.object(
+            notebook_module, "repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            assert await notebook_module.resolve_notebook_scope([]) == []
+        mock_query.assert_not_awaited()
+
+    @pytest.mark.asyncio
+    async def test_missing_notebooks_raise_not_found_listing_them(self):
+        from open_notebook.domain import notebook as notebook_module
+        from open_notebook.exceptions import NotFoundError
+
+        with patch.object(
+            notebook_module,
+            "repo_query",
+            new_callable=AsyncMock,
+            return_value=[{"id": "notebook:a"}],
+        ):
+            with pytest.raises(NotFoundError, match="notebook:zzz"):
+                await notebook_module.resolve_notebook_scope(
+                    ["notebook:a", "notebook:zzz"]
+                )
+
+    @pytest.mark.asyncio
+    async def test_record_id_rows_from_driver_match_request_strings(self):
+        """The real driver returns RecordID objects, not strings (regression)."""
+        from surrealdb import RecordID
+
+        from open_notebook.domain import notebook as notebook_module
+
+        with patch.object(
+            notebook_module,
+            "repo_query",
+            new_callable=AsyncMock,
+            return_value=[{"id": RecordID("notebook", "a")}],
+        ):
+            assert await notebook_module.resolve_notebook_scope(["notebook:a"]) == [
+                "notebook:a"
+            ]
+
+
+class TestNotebookScopedSearchDomain:
+    """text_search / vector_search bind the scope as record ids (#574, #87)."""
+
+    @pytest.mark.asyncio
+    async def test_text_search_binds_notebook_record_ids(self):
+        from surrealdb import RecordID
+
+        from open_notebook.domain import notebook as notebook_module
+
+        with patch.object(
+            notebook_module, "repo_query", new_callable=AsyncMock, return_value=[]
+        ) as mock_query:
+            await notebook_module.text_search(
+                "hello", 10, notebook_ids=["notebook:a", "notebook:b"]
+            )
+
+        assert mock_query.await_args is not None
+
+        query, params = mock_query.await_args.args
+        assert "$notebook_ids" in query
+        assert params["notebook_ids"] == [
+            RecordID("notebook", "a"),
+            RecordID("notebook", "b"),
+        ]
+
+    @pytest.mark.asyncio
+    async def test_empty_scope_binds_none_for_global_search(self):
+        from open_notebook.domain import notebook as notebook_module
+
+        with patch.object(
+            notebook_module, "repo_query", new_callable=AsyncMock, return_value=[]
+        ) as mock_query:
+            await notebook_module.text_search("hello", 10, notebook_ids=[])
+            await notebook_module.text_search("hello", 10)
+
+        for call in mock_query.await_args_list:
+            assert call.args[1]["notebook_ids"] is None
+
+    @pytest.mark.asyncio
+    async def test_vector_search_binds_notebook_record_ids(self):
+        from surrealdb import RecordID
+
+        from open_notebook.domain import notebook as notebook_module
+
+        with (
+            patch(
+                "open_notebook.utils.embedding.generate_embedding",
+                new_callable=AsyncMock,
+                return_value=[0.1],
+            ),
+            patch.object(
+                notebook_module, "repo_query", new_callable=AsyncMock, return_value=[]
+            ) as mock_query,
+        ):
+            await notebook_module.vector_search("q", 3, notebook_ids=["notebook:a"])
+
+        assert mock_query.await_args is not None
+
+        query, params = mock_query.await_args.args
+        assert "$notebook_ids" in query
+        assert params["notebook_ids"] == [RecordID("notebook", "a")]

From fce66d44358d5096d6b55ce6cafbd22b3c81ef0e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 5 Sep 2026 16:52:41 -0300
Subject: [PATCH 294/345] chore(deps): bump sharp (#1319)

Bumps the npm-security group with 1 update in the /frontend directory: [sharp](https://github.com/lovell/sharp).


Updates `sharp` from 0.34.5 to 0.35.4
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](https://github.com/lovell/sharp/compare/v0.34.5...v0.35.4)

---
updated-dependencies:
- dependency-name: sharp
  dependency-version: 0.35.4
  dependency-type: indirect
  dependency-group: npm-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 frontend/package-lock.json | 461 ++++++++++++++++++++++---------------
 frontend/package.json      |   2 +-
 2 files changed, 276 insertions(+), 187 deletions(-)

diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 69bb7e53..e805d145 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -38,7 +38,7 @@
         "i18next-browser-languagedetector": "^8.2.0",
         "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
-        "next": "^16.2.11",
+        "next": "^16.3.4",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
         "react-hook-form": "^7.60.0",
@@ -588,9 +588,9 @@
       }
     },
     "node_modules/@emnapi/runtime": {
-      "version": "1.8.1",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz",
-      "integrity": "sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==",
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
+      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
@@ -1304,9 +1304,9 @@
       }
     },
     "node_modules/@img/colour": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.0.0.tgz",
-      "integrity": "sha512-A5P/LfWGFSl6nsckYtjw9da+19jB8hkJ6ACTGcDfEJ0aE+l2n2El7dsVM7UVHZQ9s2lmYMWlrS21YLy2IR1LUw==",
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
+      "integrity": "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==",
       "license": "MIT",
       "optional": true,
       "engines": {
@@ -1314,9 +1314,9 @@
       }
     },
     "node_modules/@img/sharp-darwin-arm64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.34.5.tgz",
-      "integrity": "sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.4.tgz",
+      "integrity": "sha512-Uhfl4V4lhP2nbUVF9+hyH1+luj86f1gUFeo8ALYxFoULoU+G87D43BfeMP8XHsk9boxAnCY/bf2EHwhA7MuGsA==",
       "cpu": [
         "arm64"
       ],
@@ -1326,19 +1326,19 @@
         "darwin"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-arm64": "1.2.4"
+        "@img/sharp-libvips-darwin-arm64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-darwin-x64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.34.5.tgz",
-      "integrity": "sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.4.tgz",
+      "integrity": "sha512-hWniXY3bG5qKpkKrAwPe4y+VTPmf086YQAnkxWh7uA1YrlRouWGa0M0Mxj3ZjnXFkv7/TD1bTy9lGUK26vRvWw==",
       "cpu": [
         "x64"
       ],
@@ -1348,19 +1348,38 @@
         "darwin"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-x64": "1.2.4"
+        "@img/sharp-libvips-darwin-x64": "1.3.3"
+      }
+    },
+    "node_modules/@img/sharp-freebsd-wasm32": {
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.4.tgz",
+      "integrity": "sha512-lIsKw/BU+kjB4eZjxrYrZmwOJYi3Ajrv66iAlBmUPyKc3HpnloevB1g3wxGD9P/5BbQ1brBGl65VRRrCvQDEqA==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.4"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
       }
     },
     "node_modules/@img/sharp-libvips-darwin-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.2.4.tgz",
-      "integrity": "sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.3.tgz",
+      "integrity": "sha512-suTBPTDGrI9WodccaDdwZItTSaBYASlBk1NSfElSHrUfzu3szG6lvIF58+WiFvnfzuK8ZBFS5zE00PxqxnRiPg==",
       "cpu": [
         "arm64"
       ],
@@ -1374,9 +1393,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-darwin-x64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.2.4.tgz",
-      "integrity": "sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.3.tgz",
+      "integrity": "sha512-FVJZ5mITMobmXIz/hPDTw0EintTW5H3WfrxwLqEqjiIihlu+hVRyGrFQ60xl0Lxn7Bt3zdpevPaQi0HEzqz9fw==",
       "cpu": [
         "x64"
       ],
@@ -1390,12 +1409,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.2.4.tgz",
-      "integrity": "sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.3.tgz",
+      "integrity": "sha512-3rbU4vqXXc3hY/OiXdl52xZvT0F1yEngWfvqudtPJg/KkyiaQw2DRsFrNzpmLvfavbwOq3qXn36GP8obHRULQA==",
       "cpu": [
         "arm"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1406,12 +1428,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.2.4.tgz",
-      "integrity": "sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.3.tgz",
+      "integrity": "sha512-0DaL0A6Xu6sQSQFwe4iVCrKWU2cCTItnRsYsCdxAMm9NF6twAA9BKnoqy4hqz4+azQ0JHuA26qiUKsf1XJ/v5A==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1422,12 +1447,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-ppc64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.2.4.tgz",
-      "integrity": "sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.3.tgz",
+      "integrity": "sha512-cdn1OvUBwsXhbC0zSzJnNzf5MZ/mTrobawDvNXBTxe8VtqKAm0sRuEY2Evzovb/w9JMk4TvRxqt1mekSuJz64w==",
       "cpu": [
         "ppc64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1438,12 +1466,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-riscv64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.2.4.tgz",
-      "integrity": "sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.3.tgz",
+      "integrity": "sha512-HjPVx7yKz+0lqdhDlTw1tt90wamBoxhiXpvl1XZpJLiHH4RCJ5yDTqH+VlYPv2fwFs89JFw4c1IexYOcQUi4IQ==",
       "cpu": [
         "riscv64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1454,12 +1485,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-s390x": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.2.4.tgz",
-      "integrity": "sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.3.tgz",
+      "integrity": "sha512-neWLh+3yCNThxnfy3c4BbVBeGgt9aftno+XbT56iK28RgeDs3UOFWviLWlUu0bArYVYJaFDK+RRohbicUNCm8Q==",
       "cpu": [
         "s390x"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1470,12 +1504,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-x64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.2.4.tgz",
-      "integrity": "sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.3.tgz",
+      "integrity": "sha512-4vKmvAst9nrowcqquKFAyZJUDolUaIp8uRiN0mWFguJ1IplC9/pitXtlnnlU4aa/eJw3J7i67V+pwUL+wZGdsA==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1486,12 +1523,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.2.4.tgz",
-      "integrity": "sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.3.tgz",
+      "integrity": "sha512-Y9kQaLMuNoB0bPYOOdcZMaseNrFpPodIWWMrx+CZyydf2xn68j9WYc6sWWRrDwNkzCQjKYfc68L7jKjGlHMibw==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1502,12 +1542,15 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-x64": {
-      "version": "1.2.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.2.4.tgz",
-      "integrity": "sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.3.tgz",
+      "integrity": "sha512-fj8Mv0HHfD1Rr+4I68+3agJynxDWtBFgicTbSOb9Bke6pIwzGcJ+RX/yHjmiEGFMCavY/dxvem7MyNaJF+wDiw==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1518,204 +1561,244 @@
       }
     },
     "node_modules/@img/sharp-linux-arm": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.34.5.tgz",
-      "integrity": "sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.4.tgz",
+      "integrity": "sha512-7OAS8gI0EReKGVN2HssHlM6umJgxF5VI3xN0p9FA91p/YO+ou5hiNghLdZ5BEHztwaaK5+bLKRf8x/o2L2nk9A==",
       "cpu": [
         "arm"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm": "1.2.4"
+        "@img/sharp-libvips-linux-arm": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linux-arm64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.34.5.tgz",
-      "integrity": "sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.4.tgz",
+      "integrity": "sha512-De4jpEnAU8Hd5oT0j1G3uL4ZvTuipVMn7YC6vPaJhy6/7EwEae0SVAoBrUMYQbkLGDm85taVWwuPc1a44LTzCQ==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm64": "1.2.4"
+        "@img/sharp-libvips-linux-arm64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linux-ppc64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.34.5.tgz",
-      "integrity": "sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.4.tgz",
+      "integrity": "sha512-2oYZJeIl4kCcMGk4ouZVjnkCtFrpQFlNEtJ6GbxzhHQchwH0NH/qEb9ykmOl29dqwMq+JhFdZn+1ak2FKhI9fQ==",
       "cpu": [
         "ppc64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-ppc64": "1.2.4"
+        "@img/sharp-libvips-linux-ppc64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linux-riscv64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.34.5.tgz",
-      "integrity": "sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.4.tgz",
+      "integrity": "sha512-cPbNChoRURAWdebDIHSenxRpgEdy7JkPydSnUxRm9VvKD7m0/xVaR/8Fzlu81pk5nHEvHH87UZUA7cTtwnbJSA==",
       "cpu": [
         "riscv64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-riscv64": "1.2.4"
+        "@img/sharp-libvips-linux-riscv64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linux-s390x": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.34.5.tgz",
-      "integrity": "sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.4.tgz",
+      "integrity": "sha512-RY0JFY8Fd6RonCBtHz+DvadaPkXDSI1AUn6yWL9TipqkZ1vY8w8evqdgyDFnkm4/K1ve1TvZiaePP5oSd4+WVQ==",
       "cpu": [
         "s390x"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-s390x": "1.2.4"
+        "@img/sharp-libvips-linux-s390x": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linux-x64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.34.5.tgz",
-      "integrity": "sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.4.tgz",
+      "integrity": "sha512-9qvvEAuk8k89TfWUoX2htWjbAMX8p+NxCppjpcg5k6xMsjhBQPTsoIh36h9Qde4WRuGpJeYnOjdosDn/cnv+OA==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-x64": "1.2.4"
+        "@img/sharp-libvips-linux-x64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linuxmusl-arm64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.34.5.tgz",
-      "integrity": "sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.4.tgz",
+      "integrity": "sha512-KB5jxpfWQTr0nc3xdHtWChdbifHrBGsd2SM62Eyxrl8afikm+f5qGBU75SJIZBT/S1MC8XyacdlXBMSWq6OURA==",
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4"
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-linuxmusl-x64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.34.5.tgz",
-      "integrity": "sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.4.tgz",
+      "integrity": "sha512-f+eZJZIQNEEd26RPSW+76chwOf1XtA2Y/O+5ocVyLliHkeih3e+jhLVBdNTd2rS3IbNXK8+ug93Vf5ZXtF5Lxg==",
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-x64": "1.2.4"
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.3"
       }
     },
     "node_modules/@img/sharp-wasm32": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.34.5.tgz",
-      "integrity": "sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==",
-      "cpu": [
-        "wasm32"
-      ],
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.4.tgz",
+      "integrity": "sha512-zQnl4Kwp7Q6NHsENtU2T/00Zi+w3AQNwz3+UaTyVBy2FpXrzXzGjndpK61onhZjRtRpQXxCTeqw19bVyXOh7jA==",
       "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
       "optional": true,
       "dependencies": {
-        "@emnapi/runtime": "^1.7.0"
+        "@emnapi/runtime": "^1.11.3"
       },
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-webcontainers-wasm32": {
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.4.tgz",
+      "integrity": "sha512-ESfNkywmCfPNyaZjxooddJQiQ+l/nTpGEOGthxiLnIHXC/CmcBixnfwUleX9mCz9ovrUUvKMap/pm8RYbzfwaA==",
+      "cpu": [
+        "wasm32"
+      ],
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.4"
+      },
+      "engines": {
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       }
     },
     "node_modules/@img/sharp-win32-arm64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.34.5.tgz",
-      "integrity": "sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.4.tgz",
+      "integrity": "sha512-iNdlBX9gLVvqe2I3uIJSIKTq6wckP/DYxZtcqxm09x5Gi24DnFBmPAWZmr60ZyYMG0xlzo6goG3670ar+RXvRw==",
       "cpu": [
         "arm64"
       ],
@@ -1725,16 +1808,16 @@
         "win32"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       }
     },
     "node_modules/@img/sharp-win32-ia32": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.34.5.tgz",
-      "integrity": "sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.4.tgz",
+      "integrity": "sha512-kqRsbaa5CS6KHlpxnN7WhE6vAAugXyZButpRdvDWetlv6Qv4N9WTcrWzF7tXfB9T7MsoadqdI8hmwLq6UlLvtw==",
       "cpu": [
         "ia32"
       ],
@@ -1744,16 +1827,16 @@
         "win32"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": "^20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       }
     },
     "node_modules/@img/sharp-win32-x64": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.34.5.tgz",
-      "integrity": "sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==",
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.4.tgz",
+      "integrity": "sha512-XtmnYhBcrORsJ4XJngyzr/EWP0hRZLAZRFaApdKuviyqF78+ylxh2y06ZmtULAMOnObJ3ucpN0AcwSWnMowTRg==",
       "cpu": [
         "x64"
       ],
@@ -1763,7 +1846,7 @@
         "win32"
       ],
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
@@ -1842,9 +1925,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.11.tgz",
-      "integrity": "sha512-0do5A3BJ2gxWr0ZCMcD6BhW+e595jyxdTl3rXTS6lOtD8ektMiW6CO+EPwt1Eca1DBnm90r/7GdiKWBKxH++DA==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.3.4.tgz",
+      "integrity": "sha512-cjWZnUUa6jZq2kFaNe/ZyJdZonOZ/QoN0Zka2nz/FLOrfx14pQuM9c5RaSVkWMqgdt4ksgPAMWPyHSs/CyV48Q==",
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
@@ -1857,9 +1940,9 @@
       }
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.11.tgz",
-      "integrity": "sha512-wryL4pjKmDwGv2ox6+GZDFxvmtSRLqApBR8kL1j4+vhB7Z5vJC/zAnXpiR9Xkfzl0AS8WLMnsuGV/UKI67/rrw==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.3.4.tgz",
+      "integrity": "sha512-iBr3I5LZNk5/bgl5//iTgD2tcym14MX0Xo7fD//u9dYAEgGzza1y9oywluPtf74YnOswVdH1908aK9xVz7zQTw==",
       "cpu": [
         "arm64"
       ],
@@ -1873,9 +1956,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.11.tgz",
-      "integrity": "sha512-aZl2j4f/fLyjQvOhv0Oe9UaMAQHolYpKhctsoYzplSumKJKPUmgjcf6545aBtysLTcu994TREd0+pSgNE4ohmg==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.3.4.tgz",
+      "integrity": "sha512-2dpiSyl2Jw/NrBPaU2MAKGSa+2MR82pJIn4Sm5Rjr+gxAeuh0z158Su3Z2O8zn7UNNq+ej4bToed6RcRN/Lydg==",
       "cpu": [
         "x64"
       ],
@@ -1889,9 +1972,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.11.tgz",
-      "integrity": "sha512-5jEriyEnH/LWFy27L2ZG0XaLlyEJIjhsImEsiS9P563PKEVp2BVups/xfOucIrsvVntp11oNcZwjHvaDPYVB5g==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.3.4.tgz",
+      "integrity": "sha512-+t+U8HZT+fApePCS5h89CSH3datz29MkzyfCn+6fpsZBG/oiEOhINcb9rtkv6sdpToLGFn2e6146NzaKCXkqrA==",
       "cpu": [
         "arm64"
       ],
@@ -1908,9 +1991,9 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.11.tgz",
-      "integrity": "sha512-eIjcpx2fnnFSSkZDbTxy74KnokUXDjfoLClpWelfgHLf621aTqswhwXQ7GkD5K5rplrS6LZ/Bj+mVuvzluBOEg==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.3.4.tgz",
+      "integrity": "sha512-mx03GNs1ocQA5JQ4FxDMmIsNkdrZh8cuezKCrId28e5/gIPU/l7Kcy2+vmCCzdjnnmXJy+iOAu+7K0QppO6Urg==",
       "cpu": [
         "arm64"
       ],
@@ -1927,9 +2010,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.11.tgz",
-      "integrity": "sha512-8WgzpaWMs46qJT9kiV47cje86L0x/Mu9t8/Gwj+pnbgW3rETVfCnaScPjlYUwNScpOozdcIMHWmAvuZJUonR2w==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.3.4.tgz",
+      "integrity": "sha512-YIhGY6fSMfha52bnVxnzc9zaVBzJg+cqQTOD8tXIBSx4fuv0pVMxQTE0PaS59YhnMOiYiG09IMwxJAf/CFm/Dw==",
       "cpu": [
         "x64"
       ],
@@ -1946,9 +2029,9 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.11.tgz",
-      "integrity": "sha512-I3UgPds7G4ZYnTb/H+5GBGuUT2DhAk6j0mL6A4s63RjFs74wB2hOWP0vaxsK+3NJraExt3eYEPQ/UtT0x/64Nw==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.3.4.tgz",
+      "integrity": "sha512-+eaaX6axpDb0yF1GCpiERe6njplvdC+nks/fKfcHu3XPGRrald8P3/X7yv7QLdjA51knnxwl9pxdIJsg+w1L+Q==",
       "cpu": [
         "x64"
       ],
@@ -1965,9 +2048,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.11.tgz",
-      "integrity": "sha512-n89CjtcThnjrwgJMAiI5xbqwLY51zvwC9tSlArmVndAJLYVl9T9UAdlkXTmZvE++idoXe8KdglQlhNRdUp1c6g==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.3.4.tgz",
+      "integrity": "sha512-0jcXW7Xs/uzICrmgV3MhDYDeRy++1CqnpDIerlPIqYO4bhzB4WNbX/aRnQclustsAyTkFKB0z6rbcjmNg5tR8A==",
       "cpu": [
         "arm64"
       ],
@@ -1981,9 +2064,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.11.tgz",
-      "integrity": "sha512-md8CLNggS1Dx9pUgApzps5uAf+N8GN9xywzmNx9vHAWo94HtBwCCqkSnhIrdfQe83Dhz8Lfo/20Nb1Zxal092w==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.3.4.tgz",
+      "integrity": "sha512-vvBzwu1pYQCp92maZCFCIw/XgOTMR5tur9GjakwIo2cmwRTMKajRZZDS9+e4KsUZWKu1E007WUeAFXRRjZeuzw==",
       "cpu": [
         "x64"
       ],
@@ -3688,9 +3771,10 @@
       "integrity": "sha512-e7Mew686owMaPJVNNLs55PUvgz371nKgwsc4vxE49zsODpJEnxgxRo2y/OKrqueavXgZNMDVj3DdHFlaSAeU8g=="
     },
     "node_modules/@swc/helpers": {
-      "version": "0.5.15",
-      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.15.tgz",
-      "integrity": "sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==",
+      "version": "0.5.23",
+      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.23.tgz",
+      "integrity": "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==",
+      "license": "Apache-2.0",
       "dependencies": {
         "tslib": "^2.8.0"
       }
@@ -9938,16 +10022,16 @@
       "dev": true
     },
     "node_modules/next": {
-      "version": "16.2.11",
-      "resolved": "https://registry.npmjs.org/next/-/next-16.2.11.tgz",
-      "integrity": "sha512-B339zaqbyK8cmxhoAvLrcwoabwCP1wz21zSzfqxqXAemTu2BXnH7tQnfcglKv1vnMUIDBc+Hth7XODQriTZiRQ==",
+      "version": "16.3.4",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.3.4.tgz",
+      "integrity": "sha512-/Ztf6CeRH+ejEXUrYtqI4gkS66eFIHuSwqi60RgcpWKodxFZx2/dqVCMKBwILfAHXQ+F1b1vAudgj3mnxqtoIA==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "16.2.11",
-        "@swc/helpers": "0.5.15",
+        "@next/env": "16.3.4",
+        "@swc/helpers": "0.5.23",
         "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
-        "postcss": "8.4.31",
+        "postcss": "8.5.23",
         "styled-jsx": "5.1.6"
       },
       "bin": {
@@ -9957,15 +10041,15 @@
         "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "16.2.11",
-        "@next/swc-darwin-x64": "16.2.11",
-        "@next/swc-linux-arm64-gnu": "16.2.11",
-        "@next/swc-linux-arm64-musl": "16.2.11",
-        "@next/swc-linux-x64-gnu": "16.2.11",
-        "@next/swc-linux-x64-musl": "16.2.11",
-        "@next/swc-win32-arm64-msvc": "16.2.11",
-        "@next/swc-win32-x64-msvc": "16.2.11",
-        "sharp": "^0.34.5"
+        "@next/swc-darwin-arm64": "16.3.4",
+        "@next/swc-darwin-x64": "16.3.4",
+        "@next/swc-linux-arm64-gnu": "16.3.4",
+        "@next/swc-linux-arm64-musl": "16.3.4",
+        "@next/swc-linux-x64-gnu": "16.3.4",
+        "@next/swc-linux-x64-musl": "16.3.4",
+        "@next/swc-win32-arm64-msvc": "16.3.4",
+        "@next/swc-win32-x64-msvc": "16.3.4",
+        "sharp": "^0.35.4"
       },
       "peerDependencies": {
         "@opentelemetry/api": "^1.1.0",
@@ -11277,9 +11361,9 @@
       "license": "MIT"
     },
     "node_modules/semver": {
-      "version": "7.7.3",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
-      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
       "devOptional": true,
       "license": "ISC",
       "bin": {
@@ -11336,48 +11420,53 @@
       }
     },
     "node_modules/sharp": {
-      "version": "0.34.5",
-      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.34.5.tgz",
-      "integrity": "sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==",
-      "hasInstallScript": true,
+      "version": "0.35.4",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.4.tgz",
+      "integrity": "sha512-n++8XWcj+jCOr2IOl7h8LbKnGBDY4aPbmprMONBNFdn0ImXqpGVv5zliDs0V9HbmbCQLpbuo2ej9rAoOQTvMDA==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
-        "@img/colour": "^1.0.0",
+        "@img/colour": "^1.1.0",
         "detect-libc": "^2.1.2",
-        "semver": "^7.7.3"
+        "semver": "^7.8.5"
       },
       "engines": {
-        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+        "node": ">=20.9.0"
       },
       "funding": {
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-darwin-arm64": "0.34.5",
-        "@img/sharp-darwin-x64": "0.34.5",
-        "@img/sharp-libvips-darwin-arm64": "1.2.4",
-        "@img/sharp-libvips-darwin-x64": "1.2.4",
-        "@img/sharp-libvips-linux-arm": "1.2.4",
-        "@img/sharp-libvips-linux-arm64": "1.2.4",
-        "@img/sharp-libvips-linux-ppc64": "1.2.4",
-        "@img/sharp-libvips-linux-riscv64": "1.2.4",
-        "@img/sharp-libvips-linux-s390x": "1.2.4",
-        "@img/sharp-libvips-linux-x64": "1.2.4",
-        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4",
-        "@img/sharp-libvips-linuxmusl-x64": "1.2.4",
-        "@img/sharp-linux-arm": "0.34.5",
-        "@img/sharp-linux-arm64": "0.34.5",
-        "@img/sharp-linux-ppc64": "0.34.5",
-        "@img/sharp-linux-riscv64": "0.34.5",
-        "@img/sharp-linux-s390x": "0.34.5",
-        "@img/sharp-linux-x64": "0.34.5",
-        "@img/sharp-linuxmusl-arm64": "0.34.5",
-        "@img/sharp-linuxmusl-x64": "0.34.5",
-        "@img/sharp-wasm32": "0.34.5",
-        "@img/sharp-win32-arm64": "0.34.5",
-        "@img/sharp-win32-ia32": "0.34.5",
-        "@img/sharp-win32-x64": "0.34.5"
+        "@img/sharp-darwin-arm64": "0.35.4",
+        "@img/sharp-darwin-x64": "0.35.4",
+        "@img/sharp-freebsd-wasm32": "0.35.4",
+        "@img/sharp-libvips-darwin-arm64": "1.3.3",
+        "@img/sharp-libvips-darwin-x64": "1.3.3",
+        "@img/sharp-libvips-linux-arm": "1.3.3",
+        "@img/sharp-libvips-linux-arm64": "1.3.3",
+        "@img/sharp-libvips-linux-ppc64": "1.3.3",
+        "@img/sharp-libvips-linux-riscv64": "1.3.3",
+        "@img/sharp-libvips-linux-s390x": "1.3.3",
+        "@img/sharp-libvips-linux-x64": "1.3.3",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.3",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.3",
+        "@img/sharp-linux-arm": "0.35.4",
+        "@img/sharp-linux-arm64": "0.35.4",
+        "@img/sharp-linux-ppc64": "0.35.4",
+        "@img/sharp-linux-riscv64": "0.35.4",
+        "@img/sharp-linux-s390x": "0.35.4",
+        "@img/sharp-linux-x64": "0.35.4",
+        "@img/sharp-linuxmusl-arm64": "0.35.4",
+        "@img/sharp-linuxmusl-x64": "0.35.4",
+        "@img/sharp-webcontainers-wasm32": "0.35.4",
+        "@img/sharp-win32-arm64": "0.35.4",
+        "@img/sharp-win32-ia32": "0.35.4",
+        "@img/sharp-win32-x64": "0.35.4"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        }
       }
     },
     "node_modules/shebang-command": {
diff --git a/frontend/package.json b/frontend/package.json
index fac38da9..dda35624 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -43,7 +43,7 @@
     "i18next-browser-languagedetector": "^8.2.0",
     "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
-    "next": "^16.2.11",
+    "next": "^16.3.4",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-hook-form": "^7.60.0",

From 2d2df8a3cbb098776e56ca5ee77b9832f848228e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 5 Sep 2026 16:56:47 -0300
Subject: [PATCH 295/345] chore(deps): bump the all-actions group with 7
 updates (#1321)

Bumps the all-actions group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.3.0` |
| [actions/cache](https://github.com/actions/cache) | `5.1.0` | `6.1.0` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `15192bc058cc28a13dbf6cde61f19e18988b7af6` | `0e4a8c6effa4802afeda77dc8d303f8176d7dfad` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.1.0` | `10.0.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.5.0` | `7.0.0` |


Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4.4.0...3d3c42e5aac5ba805825da76410c181273ba90b1)

Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e)

Updates `actions/cache` from 5.1.0 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/caa296126883cff596d87d8935842f9db880ef25...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)

Updates `dorny/paths-filter` from 15192bc058cc28a13dbf6cde61f19e18988b7af6 to 0e4a8c6effa4802afeda77dc8d303f8176d7dfad
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](https://github.com/dorny/paths-filter/compare/15192bc058cc28a13dbf6cde61f19e18988b7af6...0e4a8c6effa4802afeda77dc8d303f8176d7dfad)

Updates `astral-sh/setup-uv` from 8.1.0 to 10.0.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/08807647e7069bb48b6ef5acd8ec9567f424441b...20cfd1bf945f4377ade1205e4dbc17946fc9a30d)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)

Updates `actions/setup-node` from 6.5.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/249970729cb0ef3589644e2896645e5dc5ba9c38...820762786026740c76f36085b0efc47a31fe5020)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: dorny/paths-filter
  dependency-version: 0e4a8c6effa4802afeda77dc8d303f8176d7dfad
  dependency-type: direct:production
  dependency-group: all-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .github/workflows/build-and-release.yml | 14 ++++++-------
 .github/workflows/build-dev.yml         | 18 ++++++++--------
 .github/workflows/docs-links.yml        |  2 +-
 .github/workflows/test.yml              | 28 ++++++++++++-------------
 4 files changed, 31 insertions(+), 31 deletions(-)

diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 9c294c96..574a0375 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -27,7 +27,7 @@ jobs:
       has_dockerhub_secrets: ${{ steps.check.outputs.has_dockerhub_secrets }}
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Extract version from pyproject.toml
         id: version
@@ -55,7 +55,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Free up disk space
         run: |
@@ -67,7 +67,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -84,7 +84,7 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-regular-${{ github.sha }}
@@ -147,7 +147,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Free up disk space
         run: |
@@ -159,7 +159,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -176,7 +176,7 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/.buildx-cache-single
           key: ${{ runner.os }}-buildx-single-${{ github.sha }}
diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index e3a57a71..176257e9 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -39,7 +39,7 @@ jobs:
       is_push_to_main: ${{ steps.check.outputs.is_push_to_main }}
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Extract version from pyproject.toml
         id: version
@@ -85,10 +85,10 @@ jobs:
       image: ${{ steps.filter.outputs.image }}
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Detect image-affecting changes
-        uses: dorny/paths-filter@15192bc058cc28a13dbf6cde61f19e18988b7af6 # v3
+        uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad # v3
         id: filter
         with:
           filters: |
@@ -111,7 +111,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Skip notice
         if: needs.extract-version.outputs.is_push_to_main != 'true' && needs.changes.outputs.image != 'true'
@@ -129,7 +129,7 @@ jobs:
 
       - name: Set up Docker Buildx
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       - name: Login to GitHub Container Registry
         if: needs.extract-version.outputs.is_push_to_main == 'true'
@@ -148,7 +148,7 @@ jobs:
 
       - name: Cache Docker layers
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/.buildx-cache-dev
           key: ${{ runner.os }}-buildx-dev-${{ github.sha }}
@@ -201,7 +201,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Free up disk space
         run: |
@@ -213,7 +213,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
+        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -230,7 +230,7 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Cache Docker layers
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: /tmp/.buildx-cache-dev-single
           key: ${{ runner.os }}-buildx-dev-single-${{ github.sha }}
diff --git a/.github/workflows/docs-links.yml b/.github/workflows/docs-links.yml
index d7cffa73..9c95d733 100644
--- a/.github/workflows/docs-links.yml
+++ b/.github/workflows/docs-links.yml
@@ -14,6 +14,6 @@ jobs:
   check-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Check relative markdown links
         run: python3 scripts/check_md_links.py
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 31645c97..d440c2b2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,10 +19,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
 
@@ -36,7 +36,7 @@ jobs:
         run: uv run pytest tests/ -v --cov=open_notebook --cov=api --cov-report=term-missing --cov-report=xml
 
       - name: Upload coverage artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: backend-coverage
           path: coverage.xml
@@ -46,10 +46,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
 
@@ -67,10 +67,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
 
@@ -91,10 +91,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: npm
@@ -107,7 +107,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Upload coverage artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: frontend-coverage
           path: frontend/coverage/
@@ -120,10 +120,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: npm
@@ -143,10 +143,10 @@ jobs:
         working-directory: frontend
     steps:
       - name: Checkout
-        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Node.js
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 22
           cache: npm

From fb6d475a699a7d4a1191cb0701392bd75098b0ae Mon Sep 17 00:00:00 2001
From: Nathan <370788475@qq.com>
Date: Fri, 11 Sep 2026 08:00:44 +0800
Subject: [PATCH 296/345] fix(search): resolve insight text hits to parent
 sources (#1339)

---
 open_notebook/database/async_migrate.py       |   6 +
 .../database/migrations/25.surrealql          |  79 +++++++++++
 .../database/migrations/25_down.surrealql     |  79 +++++++++++
 tests/test_text_search_parent.py              | 127 ++++++++++++++++++
 4 files changed, 291 insertions(+)
 create mode 100644 open_notebook/database/migrations/25.surrealql
 create mode 100644 open_notebook/database/migrations/25_down.surrealql
 create mode 100644 tests/test_text_search_parent.py

diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index 5f20fbb6..f852c40b 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -148,6 +148,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/24.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/25.surrealql"
+            ),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
@@ -222,6 +225,9 @@ class AsyncMigrationManager:
             AsyncMigration.from_file(
                 "open_notebook/database/migrations/24_down.surrealql"
             ),
+            AsyncMigration.from_file(
+                "open_notebook/database/migrations/25_down.surrealql"
+            ),
         ]
         self.runner = AsyncMigrationRunner(
             up_migrations=self.up_migrations,
diff --git a/open_notebook/database/migrations/25.surrealql b/open_notebook/database/migrations/25.surrealql
new file mode 100644
index 00000000..f2eb6c38
--- /dev/null
+++ b/open_notebook/database/migrations/25.surrealql
@@ -0,0 +1,79 @@
+-- Migration 25: resolve text-search insight hits to their parent source (#1312).
+REMOVE FUNCTION IF EXISTS fn::text_search;
+
+DEFINE FUNCTION IF NOT EXISTS fn::text_search($query_text: string, $match_count: int, $sources: bool, $show_notes: bool, $notebook_ids: option<array<record<notebook>>>) {
+
+    let $scoped = $notebook_ids != NONE AND array::len($notebook_ids) > 0;
+    let $scoped_sources = IF $scoped { (SELECT VALUE in FROM reference WHERE out IN $notebook_ids) } ELSE { [] };
+    let $scoped_notes = IF $scoped { (SELECT VALUE in FROM artifact WHERE out IN $notebook_ids) } ELSE { [] };
+
+    let $source_title_search =
+        IF $sources {(
+            SELECT id, title,
+            search::highlight('`', '`', 1) as content,
+            id as parent_id,
+            math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_embedding_search =
+         IF $sources {(
+            SELECT source.id as id, source.title as title, search::highlight('`', '`', 1) as content, source.id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source_embedding
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_full_search =
+         IF $sources {(
+            SELECT id, title, search::highlight('`', '`', 1) as content, id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE full_text @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_insight_search =
+         IF $sources {(
+             SELECT id, insight_type + " - " + (source.title OR '') as title, search::highlight('`', '`', 1) as content, source.id as parent_id,  math::max(search::score(1)) AS relevance
+            FROM source_insight
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $note_title_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+     let $note_content_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE content @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_chunk_results = array::union($source_embedding_search, $source_full_search);
+
+    let $source_asset_results = array::union($source_title_search, $source_insight_search);
+
+    let $source_results = array::union($source_chunk_results, $source_asset_results );
+    let $note_results = array::union($note_title_search, $note_content_search );
+    let $final_results = array::union($source_results, $note_results );
+
+        RETURN (select id, parent_id, title, math::max(relevance) as relevance
+        from $final_results where id is not None
+        group by id, parent_id, title ORDER BY relevance DESC LIMIT $match_count);
+
+};
diff --git a/open_notebook/database/migrations/25_down.surrealql b/open_notebook/database/migrations/25_down.surrealql
new file mode 100644
index 00000000..b861cff3
--- /dev/null
+++ b/open_notebook/database/migrations/25_down.surrealql
@@ -0,0 +1,79 @@
+-- Restore the migration 24 text-search projection; keep notebook scoping.
+REMOVE FUNCTION IF EXISTS fn::text_search;
+
+DEFINE FUNCTION IF NOT EXISTS fn::text_search($query_text: string, $match_count: int, $sources: bool, $show_notes: bool, $notebook_ids: option<array<record<notebook>>>) {
+
+    let $scoped = $notebook_ids != NONE AND array::len($notebook_ids) > 0;
+    let $scoped_sources = IF $scoped { (SELECT VALUE in FROM reference WHERE out IN $notebook_ids) } ELSE { [] };
+    let $scoped_notes = IF $scoped { (SELECT VALUE in FROM artifact WHERE out IN $notebook_ids) } ELSE { [] };
+
+    let $source_title_search =
+        IF $sources {(
+            SELECT id, title,
+            search::highlight('`', '`', 1) as content,
+            id as parent_id,
+            math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_embedding_search =
+         IF $sources {(
+            SELECT source.id as id, source.title as title, search::highlight('`', '`', 1) as content, source.id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source_embedding
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_full_search =
+         IF $sources {(
+            SELECT id, title, search::highlight('`', '`', 1) as content, id as parent_id, math::max(search::score(1)) AS relevance
+            FROM source
+            WHERE full_text @1@ $query_text
+              AND (!$scoped OR id IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_insight_search =
+         IF $sources {(
+             SELECT id, insight_type + " - " + (source.title OR '') as title, search::highlight('`', '`', 1) as content, id as parent_id,  math::max(search::score(1)) AS relevance
+            FROM source_insight
+            WHERE content @1@ $query_text
+              AND (!$scoped OR source IN $scoped_sources)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $note_title_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE title @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+     let $note_content_search =
+         IF $show_notes {(
+             SELECT id, title, search::highlight('`', '`', 1) as content,  id as parent_id, math::max(search::score(1)) AS relevance
+            FROM note
+            WHERE content @1@ $query_text
+              AND (!$scoped OR id IN $scoped_notes)
+            GROUP BY id)}
+        ELSE { [] };
+
+    let $source_chunk_results = array::union($source_embedding_search, $source_full_search);
+
+    let $source_asset_results = array::union($source_title_search, $source_insight_search);
+
+    let $source_results = array::union($source_chunk_results, $source_asset_results );
+    let $note_results = array::union($note_title_search, $note_content_search );
+    let $final_results = array::union($source_results, $note_results );
+
+        RETURN (select id, parent_id, title, math::max(relevance) as relevance
+        from $final_results where id is not None
+        group by id, parent_id, title ORDER BY relevance DESC LIMIT $match_count);
+
+};
diff --git a/tests/test_text_search_parent.py b/tests/test_text_search_parent.py
new file mode 100644
index 00000000..ac42ce5d
--- /dev/null
+++ b/tests/test_text_search_parent.py
@@ -0,0 +1,127 @@
+from pathlib import Path
+
+import pytest
+from surrealdb import AsyncSurreal, RecordID
+
+MIGRATIONS = Path("open_notebook/database/migrations")
+
+
+def records(value: object) -> list[dict[str, object]]:
+    assert isinstance(value, list)
+    assert all(isinstance(row, dict) for row in value)
+    return value
+
+
+def functions(value: object) -> dict[str, object]:
+    assert isinstance(value, dict)
+    result = value["functions"]
+    assert isinstance(result, dict)
+    return result
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("scope", [None, [], [RecordID("notebook", "chosen")]])
+async def test_text_insights_keep_their_id_and_resolve_the_parent_source(
+    scope: list[RecordID] | None,
+) -> None:
+    """Text and vector insight hits must share the same source identity (#1312)."""
+    from open_notebook.database.async_migrate import AsyncMigrationManager
+
+    async with AsyncSurreal("mem://") as db:
+        await db.use("search_regression", "insight_parent")
+        # Only the search schema/functions are needed. Unrelated podcast
+        # migrations depend on tables owned by podcast-creator.
+        await db.query((MIGRATIONS / "1.surrealql").read_text())
+        for migration in AsyncMigrationManager().up_migrations[23:]:
+            await db.query(migration.sql)
+        await db.query(
+            """
+            CREATE notebook:chosen SET name = 'Chosen';
+            CREATE notebook:other SET name = 'Other';
+            CREATE source:parent SET title = 'quasar source', full_text = 'quasar text';
+            CREATE source_insight:insight SET source = source:parent,
+                insight_type = 'summary', content = 'quasar evidence', embedding = [1.0, 0.0];
+            CREATE note:control SET title = 'quasar note', content = 'quasar note', embedding = [1.0, 0.0];
+            RELATE source:parent->reference->notebook:chosen;
+            RELATE note:control->artifact->notebook:chosen;
+            """
+        )
+        rows = records(
+            await db.query(
+                "RETURN fn::text_search('quasar', 10, true, true, $scope);",
+                {"scope": None if scope is None else [item for item in scope]},
+            )
+        )
+        by_id = {str(row["id"]): row for row in rows}
+        assert str(by_id["source_insight:insight"]["parent_id"]) == "source:parent"
+        assert str(by_id["source:parent"]["parent_id"]) == "source:parent"
+        assert str(by_id["note:control"]["parent_id"]) == "note:control"
+        vector = records(
+            await db.query(
+                "RETURN fn::vector_search([1.0, 0.0], 10, true, false, 0.5, $scope);",
+                {"scope": None if scope is None else [item for item in scope]},
+            )
+        )
+        assert str(vector[0]["parent_id"]) == "source:parent"
+        assert str(vector[0]["id"]) == "source_insight:insight"
+        assert (
+            await db.query(
+                "RETURN fn::text_search('quasar', 10, true, true, [notebook:other]);"
+            )
+            == []
+        )
+        notes = records(
+            await db.query(
+                "RETURN fn::text_search('quasar', 10, false, true, $scope);",
+                {"scope": None if scope is None else [item for item in scope]},
+            )
+        )
+        assert [str(row["id"]) for row in notes] == ["note:control"]
+        sources = records(
+            await db.query(
+                "RETURN fn::text_search('quasar', 10, true, false, $scope);",
+                {"scope": None if scope is None else [item for item in scope]},
+            )
+        )
+        assert {str(row["id"]) for row in sources} == {
+            "source:parent",
+            "source_insight:insight",
+        }
+
+
+@pytest.mark.asyncio
+async def test_migration_25_up_down_up_preserves_vector_search() -> None:
+    from open_notebook.database.async_migrate import AsyncMigrationManager
+
+    manager = AsyncMigrationManager()
+    assert len(manager.up_migrations) == len(manager.down_migrations)
+    async with AsyncSurreal("mem://") as db:
+        await db.use("search_regression", "migration_cycle")
+        await db.query((MIGRATIONS / "1.surrealql").read_text())
+        await db.query(manager.up_migrations[23].sql)
+        await db.query(
+            "CREATE source:parent SET title = 'Article';"
+            "CREATE source_insight:insight SET source = source:parent,"
+            "insight_type = 'summary', content = 'quasar', embedding = [1.0, 0.0];"
+        )
+        before = functions(await db.query("INFO FOR DB;"))
+        for migration, expected in [
+            (manager.up_migrations[24], "source:parent"),
+            (manager.down_migrations[24], "source_insight:insight"),
+            (manager.up_migrations[24], "source:parent"),
+        ]:
+            await db.query(migration.sql)
+            rows = records(
+                await db.query(
+                    "RETURN fn::text_search('quasar', 1, true, false, NONE);"
+                )
+            )
+            assert len(rows) == 1
+            assert str(rows[0]["parent_id"]) == expected
+            assert str(rows[0]["id"]) == "source_insight:insight"
+            after = functions(await db.query("INFO FOR DB;"))
+            assert after["vector_search"] == before["vector_search"]
+        assert (
+            await db.query("RETURN fn::text_search('absent', 10, true, true, NONE);")
+            == []
+        )

From 35b1cd561424e8aeeffbb9c7aa70923a2b2ab8a1 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Thu, 10 Sep 2026 21:04:19 -0300
Subject: [PATCH 297/345] =?UTF-8?q?docs:=20point=20examples=20and=20.env.e?=
 =?UTF-8?q?xample=20at=20Manage=20=E2=86=92=20Models=20(#1333)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Follow-up to #1313 and #1330: the Settings → API Keys nav path survived in
.env.example and examples/**, the first files a self-hoster reads.


Claude-Session: https://claude.ai/code/session_01NnMHW3qrSc8Nhi7xTPfZuv

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .env.example                           | 6 +++---
 examples/README.md                     | 2 +-
 examples/docker-compose-full-local.yml | 4 ++--
 examples/docker-compose-ollama.yml     | 2 +-
 examples/docker-compose-speaches.yml   | 4 ++--
 examples/easypanel/README.md           | 2 +-
 6 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.env.example b/.env.example
index 68b6f77d..ddcd9ecf 100644
--- a/.env.example
+++ b/.env.example
@@ -25,7 +25,7 @@ SURREAL_DATABASE=open_notebook
 # =============================================================================
 # DEPRECATED: AI Provider API Keys (environment-variable fallback)
 # =============================================================================
-# Configure AI providers via the UI: Settings → API Keys. Credentials are
+# Configure AI providers via the UI: Manage → Models. Credentials are
 # stored encrypted, can be rotated without restarts, and support multiple
 # credentials per provider.
 #
@@ -54,10 +54,10 @@ SURREAL_DATABASE=open_notebook
 # External API URL (for webhooks, callbacks, etc.)
 # API_URL=http://localhost:5055
 
-# Ollama endpoint — DEPRECATED fallback, configure via Settings → API Keys instead
+# Ollama endpoint — DEPRECATED fallback, configure via Manage → Models instead
 # OLLAMA_API_BASE=http://localhost:11434
 
-# oMLX (Apple Silicon) — DEPRECATED fallback, configure via Settings → API Keys instead
+# oMLX (Apple Silicon) — DEPRECATED fallback, configure via Manage → Models instead
 # Port 11435 avoids clashing with SurrealDB on 8000
 # OMLX_API_BASE=http://localhost:11435/v1
 # OMLX_API_KEY=  # optional; only if oMLX was started with --api-key
diff --git a/examples/README.md b/examples/README.md
index 085fdf11..a18ad516 100644
--- a/examples/README.md
+++ b/examples/README.md
@@ -67,7 +67,7 @@ templates playground.
 1. Copy to your project folder as `docker-compose.yml`
 2. Run: `docker compose up -d`
 3. Pull a model: `docker exec open_notebook-ollama-1 ollama pull mistral`
-4. Configure in UI: Settings → API Keys → Add Ollama (URL: `http://ollama:11434`)
+4. Configure in UI: Manage → Models → Add Ollama (URL: `http://ollama:11434`)
 
 **Recommended models:**
 - **LLM**: `mistral`, `llama3.1`, `qwen2.5`
diff --git a/examples/docker-compose-full-local.yml b/examples/docker-compose-full-local.yml
index b20ef479..e4b3e6d8 100644
--- a/examples/docker-compose-full-local.yml
+++ b/examples/docker-compose-full-local.yml
@@ -124,13 +124,13 @@ volumes:
 # ==========================================
 #
 # 1. Configure Ollama:
-#    - Go to Settings → API Keys
+#    - Go to Manage → Models
 #    - Add Credential → Select "Ollama"
 #    - Base URL: http://ollama:11434
 #    - Save → Test Connection → Discover Models → Register Models
 #
 # 2. Configure Speaches (TTS/STT):
-#    - Go to Settings → API Keys
+#    - Go to Manage → Models
 #    - Add Credential → Select "OpenAI-Compatible"
 #    - Name: "Local Speaches"
 #    - Base URL for TTS: http://host.docker.internal:8969/v1  (macOS/Windows)
diff --git a/examples/docker-compose-ollama.yml b/examples/docker-compose-ollama.yml
index 7788c64d..324bcd98 100644
--- a/examples/docker-compose-ollama.yml
+++ b/examples/docker-compose-ollama.yml
@@ -8,7 +8,7 @@
 #   2. Change OPEN_NOTEBOOK_ENCRYPTION_KEY below
 #   3. Run: docker compose up -d
 #   4. Pull a model: docker exec open_notebook-ollama-1 ollama pull mistral
-#   5. Configure Ollama in UI: Settings → API Keys → Add Ollama (URL: http://ollama:11434)
+#   5. Configure Ollama in UI: Manage → Models → Add Ollama (URL: http://ollama:11434)
 
 services:
   surrealdb:
diff --git a/examples/docker-compose-speaches.yml b/examples/docker-compose-speaches.yml
index 949b6579..f25be54c 100644
--- a/examples/docker-compose-speaches.yml
+++ b/examples/docker-compose-speaches.yml
@@ -15,7 +15,7 @@
 #   2. Change OPEN_NOTEBOOK_ENCRYPTION_KEY below
 #   3. Run: docker compose up -d
 #   4. Download models (see instructions below)
-#   5. Configure in UI: Settings → API Keys → Add OpenAI-Compatible
+#   5. Configure in UI: Manage → Models → Add OpenAI-Compatible
 #
 # Full documentation:
 # - TTS setup: https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/local-tts.md
@@ -88,7 +88,7 @@ volumes:
 # CONFIGURATION IN OPEN NOTEBOOK
 # ==========================================
 #
-# 1. Go to Settings → API Keys
+# 1. Go to Manage → Models
 # 2. Click "Add Credential" → Select "OpenAI-Compatible"
 # 3. Configure:
 #    - Name: "Local Speaches"
diff --git a/examples/easypanel/README.md b/examples/easypanel/README.md
index 9023dfa0..97ffb92b 100644
--- a/examples/easypanel/README.md
+++ b/examples/easypanel/README.md
@@ -23,4 +23,4 @@ the template generates one and stores it in the app service environment as
 `OPEN_NOTEBOOK_PASSWORD`.
 
 After deployment, open the EasyPanel domain and configure AI providers from
-Open Notebook's Settings > API Keys page.
+Open Notebook's Manage > Models page.

From 61c2e74eba7f08072e25fd06165804faf0a3244b Mon Sep 17 00:00:00 2001
From: Paco Cartones <253313177+pacocartones@users.noreply.github.com>
Date: Fri, 11 Sep 2026 02:09:01 +0200
Subject: [PATCH 298/345] fix: surface background retry warnings (#1342)

---
 commands/embedding_commands.py            |  2 +-
 commands/source_commands.py               |  2 +-
 tests/test_background_retry_visibility.py | 56 +++++++++++++++++++++++
 3 files changed, 58 insertions(+), 2 deletions(-)
 create mode 100644 tests/test_background_retry_visibility.py

diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index 72d1f816..f761a1a0 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -34,7 +34,7 @@ EMBED_RETRY_CONFIG = {
         ConfigurationError,
         ContextLengthExceededError,
     ],  # Don't retry validation/config errors
-    "retry_log_level": "debug",
+    "retry_log_level": "warning",
 }
 
 
diff --git a/commands/source_commands.py b/commands/source_commands.py
index 5d94a48d..794e125b 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -177,7 +177,7 @@ class RunTransformationOutput(CommandOutput):
         "wait_min": 1,
         "wait_max": 60,
         "stop_on": [ValueError, ConfigurationError, ContextLengthExceededError],  # Don't retry validation/config errors
-        "retry_log_level": "debug",
+        "retry_log_level": "warning",
     },
 )
 async def run_transformation_command(
diff --git a/tests/test_background_retry_visibility.py b/tests/test_background_retry_visibility.py
new file mode 100644
index 00000000..8c2d1a43
--- /dev/null
+++ b/tests/test_background_retry_visibility.py
@@ -0,0 +1,56 @@
+"""Background LLM and embedding retries must be visible in normal worker logs."""
+
+import pytest
+from loguru import logger
+from surreal_commands.core.registry import registry
+from surreal_commands.core.retry import build_async_retry_instance
+
+import commands  # noqa: F401 -- import registers the @command decorators
+
+VISIBLE_RETRY_COMMANDS = [
+    "open_notebook.run_transformation",
+    "open_notebook.embed_note",
+    "open_notebook.embed_insight",
+    "open_notebook.embed_source",
+    "open_notebook.create_insight",
+]
+
+
+def _retry_config(command_id: str):
+    item = registry.get_command_by_id(command_id)
+    assert item is not None, f"{command_id} is not registered"
+    assert item.retry_config is not None, f"{command_id} has no retry config"
+    return item.retry_config
+
+
+@pytest.mark.parametrize("command_id", VISIBLE_RETRY_COMMANDS)
+def test_background_retry_is_logged_at_warning(command_id):
+    assert _retry_config(command_id).retry_log_level.value == "warning"
+
+
+@pytest.mark.asyncio
+async def test_retry_warning_includes_attempt_error_and_delay():
+    config = _retry_config("open_notebook.run_transformation").model_copy(
+        update={
+            "max_attempts": 2,
+            "wait_strategy": "fixed",
+            "wait_time": 0,
+            "wait_min": 0,
+            "wait_max": 0,
+        }
+    )
+    messages: list[str] = []
+    sink_id = logger.add(lambda message: messages.append(str(message)), level="WARNING")
+
+    try:
+        with pytest.raises(ConnectionError):
+            async for attempt in build_async_retry_instance(config):
+                with attempt:
+                    raise ConnectionError("provider temporarily unavailable")
+    finally:
+        logger.remove(sink_id)
+
+    assert len(messages) == 1
+    assert "[Retry] Attempt 1 failed with ConnectionError" in messages[0]
+    assert "provider temporarily unavailable" in messages[0]
+    assert "waiting 0.0s before retry 2" in messages[0]

From 407362c6c0325f145277ade90780f4eabc37d0fc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 11 Sep 2026 00:11:51 +0000
Subject: [PATCH 299/345] chore(deps): bump dorny/paths-filter from 3.0.4 to
 4.0.3 in the all-actions group (#1336)

---
 .github/workflows/build-dev.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index 176257e9..80f4d247 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -88,7 +88,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Detect image-affecting changes
-        uses: dorny/paths-filter@0e4a8c6effa4802afeda77dc8d303f8176d7dfad # v3
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: filter
         with:
           filters: |

From a96f114dace003600d924d518b64f089509d0ba5 Mon Sep 17 00:00:00 2001
From: Matt Van Horn <mvanhorn@users.noreply.github.com>
Date: Thu, 10 Sep 2026 17:14:59 -0700
Subject: [PATCH 300/345] fix: open the note editor from Write Note (#1286)

---
 .../notebooks/components/NotesColumn.test.tsx | 108 ++++++++++++++++++
 .../notebooks/components/NotesColumn.tsx      |  29 +++--
 2 files changed, 121 insertions(+), 16 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/notebooks/components/NotesColumn.test.tsx

diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.test.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.test.tsx
new file mode 100644
index 00000000..d43ee511
--- /dev/null
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.test.tsx
@@ -0,0 +1,108 @@
+import { fireEvent, render, screen } from '@testing-library/react'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { NoteResponse } from '@/lib/types/api'
+import { NotesColumn } from './NotesColumn'
+
+interface MockNoteEditorDialogProps {
+  open: boolean
+  onOpenChange: (open: boolean) => void
+  notebookId: string
+  note?: NoteResponse
+}
+
+vi.mock('./NoteEditorDialog', () => ({
+  NoteEditorDialog: ({
+    open,
+    onOpenChange,
+    notebookId,
+    note,
+  }: MockNoteEditorDialogProps) => (
+    <div
+      data-testid="note-editor-dialog"
+      data-open={String(open)}
+      data-notebook-id={notebookId}
+      data-note-id={note?.id ?? ''}
+    >
+      <button onClick={() => onOpenChange(false)}>close editor</button>
+    </div>
+  ),
+}))
+
+vi.mock('@/lib/hooks/use-notes', () => ({
+  useDeleteNote: () => ({ isPending: false, mutateAsync: vi.fn() }),
+}))
+
+vi.mock('@/lib/stores/notebook-columns-store', () => ({
+  useNotebookColumnsStore: () => ({
+    notesCollapsed: false,
+    toggleNotes: vi.fn(),
+  }),
+}))
+
+const notebookId = 'notebook:123'
+const existingNote: NoteResponse = {
+  id: 'note:456',
+  title: 'Existing note',
+  content: 'Existing note content',
+  note_type: 'human',
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-01T00:00:00Z',
+}
+
+function renderNotes(notes: NoteResponse[]) {
+  render(
+    <NotesColumn
+      notes={notes}
+      isLoading={false}
+      notebookId={notebookId}
+    />
+  )
+  return screen.getByTestId('note-editor-dialog')
+}
+
+describe('NotesColumn', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('opens, closes, and reopens the editor in create mode with loaded notes', () => {
+    const editor = renderNotes([existingNote])
+
+    fireEvent.click(screen.getByText('common.writeNote'))
+
+    expect(editor).toHaveAttribute('data-open', 'true')
+    expect(editor).toHaveAttribute('data-notebook-id', notebookId)
+    expect(editor).toHaveAttribute('data-note-id', '')
+
+    fireEvent.click(screen.getByText('close editor'))
+    expect(editor).toHaveAttribute('data-open', 'false')
+
+    fireEvent.click(screen.getByText('common.writeNote'))
+    expect(editor).toHaveAttribute('data-open', 'true')
+    expect(editor).toHaveAttribute('data-note-id', '')
+  })
+
+  it('opens the editor in create mode when the notes list is empty', () => {
+    const editor = renderNotes([])
+
+    fireEvent.click(screen.getByText('common.writeNote'))
+
+    expect(editor).toHaveAttribute('data-open', 'true')
+    expect(editor).toHaveAttribute('data-notebook-id', notebookId)
+    expect(editor).toHaveAttribute('data-note-id', '')
+  })
+
+  it('clears the selected note before opening the editor in create mode', () => {
+    const editor = renderNotes([existingNote])
+
+    fireEvent.click(screen.getByText(existingNote.title!))
+    expect(editor).toHaveAttribute('data-open', 'true')
+    expect(editor).toHaveAttribute('data-note-id', existingNote.id)
+
+    fireEvent.click(screen.getByText('close editor'))
+    fireEvent.click(screen.getByText('common.writeNote'))
+
+    expect(editor).toHaveAttribute('data-open', 'true')
+    expect(editor).toHaveAttribute('data-note-id', '')
+  })
+})
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
index 5cb3c705..28f0b756 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotesColumn.tsx
@@ -44,8 +44,8 @@ export function NotesColumn({
   onBulkContextModeChange
 }: NotesColumnProps) {
   const { t, language } = useTranslation()
-  const [showAddDialog, setShowAddDialog] = useState(false)
-  const [editingNote, setEditingNote] = useState<NoteResponse | null>(null)
+  const [editorOpen, setEditorOpen] = useState(false)
+  const [editingNote, setEditingNote] = useState<NoteResponse | undefined>()
   const [deleteDialogOpen, setDeleteDialogOpen] = useState(false)
   const [noteToDelete, setNoteToDelete] = useState<string | null>(null)
 
@@ -64,6 +64,11 @@ export function NotesColumn({
     setDeleteDialogOpen(true)
   }
 
+  const handleOpenEditor = (note?: NoteResponse) => {
+    setEditingNote(note)
+    setEditorOpen(true)
+  }
+
   const handleDeleteConfirm = async () => {
     if (!noteToDelete) return
 
@@ -110,13 +115,7 @@ export function NotesColumn({
                     </DropdownMenuContent>
                   </DropdownMenu>
                 )}
-                <Button
-                  size="sm"
-                  onClick={() => {
-                    setEditingNote(null)
-                    setShowAddDialog(true)
-                  }}
-                >
+                <Button size="sm" onClick={() => handleOpenEditor()}>
                   <Plus className="h-4 w-4 mr-2" />
                   {t('common.writeNote')}
                 </Button>
@@ -142,7 +141,7 @@ export function NotesColumn({
                   <div
                     key={note.id}
                     className="p-3 border rounded-md bg-card shadow-none card-hover group relative cursor-pointer"
-                    onClick={() => setEditingNote(note)}
+                    onClick={() => handleOpenEditor(note)}
                   >
                     <div className="flex items-start justify-between mb-2">
                       <div className="flex items-center gap-2">
@@ -221,17 +220,15 @@ export function NotesColumn({
       </CollapsibleColumn>
 
       <NoteEditorDialog
-        open={showAddDialog || Boolean(editingNote)}
+        open={editorOpen}
         onOpenChange={(open) => {
+          setEditorOpen(open)
           if (!open) {
-            setShowAddDialog(false)
-            setEditingNote(null)
-          } else {
-            setShowAddDialog(true)
+            setEditingNote(undefined)
           }
         }}
         notebookId={notebookId}
-        note={editingNote ?? undefined}
+        note={editingNote}
       />
 
       <ConfirmDialog

From 83edd893567c81edc0057d576a2ea1c35a887329 Mon Sep 17 00:00:00 2001
From: Aditya Raj Singh <github@adityaraj.com>
Date: Fri, 11 Sep 2026 06:30:06 +0530
Subject: [PATCH 301/345] fix(auth): accept UTF-8 passwords (#1344)

---
 CHANGELOG.md       |  1 +
 api/auth.py        |  2 +-
 tests/test_auth.py | 88 ++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 90 insertions(+), 1 deletion(-)
 create mode 100644 tests/test_auth.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 30cc28ae..c5dae30e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 
 ### Fixed
+- API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
 - **Ask answers are no longer silently truncated.** The three Ask stages (search strategy, per-search answers, final synthesis) were capped at 2000 output tokens, well below the 8192 that chat and transformations use. Token-dense languages such as Japanese hit the cap mid-sentence, and reasoning models spent the whole budget thinking and returned blank search terms, so Ask answered "no documents found" from a corpus that had the answer. All three stages now share an 8192 budget; a strategy with no usable search terms fails with an explicit error instead of running empty searches, and thinking-only partial answers are dropped before synthesis (#1221)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
 - **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
diff --git a/api/auth.py b/api/auth.py
index 6e62b0ca..f7326a62 100644
--- a/api/auth.py
+++ b/api/auth.py
@@ -69,7 +69,7 @@ class PasswordAuthMiddleware(BaseHTTPMiddleware):
 
         # Check password (constant-time to avoid a timing side-channel)
         if not secrets.compare_digest(
-            credentials.encode("utf-8"), self.password.encode("utf-8")
+            credentials.encode("latin-1"), self.password.encode("utf-8")
         ):
             return JSONResponse(
                 status_code=401,
diff --git a/tests/test_auth.py b/tests/test_auth.py
new file mode 100644
index 00000000..ef818c5f
--- /dev/null
+++ b/tests/test_auth.py
@@ -0,0 +1,88 @@
+"""Tests for API password authentication middleware."""
+
+import pytest
+from fastapi import Request
+from starlette.responses import Response
+from starlette.types import Receive, Scope, Send
+
+from api.auth import PasswordAuthMiddleware
+
+
+async def _unused_app(_: Scope, __: Receive, ___: Send) -> None:
+    raise AssertionError("dispatch should use the supplied call_next")
+
+
+async def _allow_request(_: Request) -> Response:
+    return Response(status_code=200)
+
+
+async def _request(
+    monkeypatch: pytest.MonkeyPatch,
+    *,
+    password: str | None,
+    credentials: bytes | None = None,
+) -> int:
+    if password is None:
+        monkeypatch.delenv("OPEN_NOTEBOOK_PASSWORD", raising=False)
+    else:
+        monkeypatch.setenv("OPEN_NOTEBOOK_PASSWORD", password)
+
+    headers = []
+    if credentials is not None:
+        headers.append((b"authorization", b"Bearer " + credentials))
+
+    scope: Scope = {
+        "type": "http",
+        "method": "GET",
+        "path": "/protected",
+        "headers": headers,
+    }
+    middleware = PasswordAuthMiddleware(_unused_app)
+    response = await middleware.dispatch(Request(scope), _allow_request)
+    return response.status_code
+
+
+class TestPasswordAuthMiddleware:
+    @pytest.mark.asyncio
+    async def test_accepts_ascii_password(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        status = await _request(monkeypatch, password="secret", credentials=b"secret")
+
+        assert status == 200
+
+    @pytest.mark.asyncio
+    async def test_rejects_wrong_password(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        status = await _request(monkeypatch, password="secret", credentials=b"wrong")
+
+        assert status == 401
+
+
+class TestNoPasswordConfigured:
+    @pytest.mark.asyncio
+    async def test_allows_request(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        status = await _request(monkeypatch, password=None)
+
+        assert status == 200
+
+
+class TestNonAsciiPassword:
+    @pytest.mark.asyncio
+    async def test_accepts_utf8_password(self, monkeypatch: pytest.MonkeyPatch) -> None:
+        password = "pässwörd-中文"
+
+        status = await _request(
+            monkeypatch, password=password, credentials=password.encode("utf-8")
+        )
+
+        assert status == 200
+
+    @pytest.mark.asyncio
+    async def test_invalid_utf8_returns_unauthorized(
+        self, monkeypatch: pytest.MonkeyPatch
+    ) -> None:
+        status = await _request(monkeypatch, password="secret", credentials=b"\xff")
+
+        assert status == 401

From ae7b96d3766506039965d6c696e3d708c06b6024 Mon Sep 17 00:00:00 2001
From: Aditya Raj Singh <github@adityaraj.com>
Date: Fri, 11 Sep 2026 06:54:00 +0530
Subject: [PATCH 302/345] fix(search): open matched records and deduplicate
 sources (#1345)

---
 .../src/app/(dashboard)/search/page.test.tsx  | 89 +++++++++++++++++++
 frontend/src/app/(dashboard)/search/page.tsx  |  8 +-
 .../sources/AddExistingSourceDialog.test.tsx  | 73 +++++++++++++++
 .../sources/AddExistingSourceDialog.tsx       |  9 +-
 4 files changed, 169 insertions(+), 10 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/search/page.test.tsx
 create mode 100644 frontend/src/components/sources/AddExistingSourceDialog.test.tsx

diff --git a/frontend/src/app/(dashboard)/search/page.test.tsx b/frontend/src/app/(dashboard)/search/page.test.tsx
new file mode 100644
index 00000000..e46686bc
--- /dev/null
+++ b/frontend/src/app/(dashboard)/search/page.test.tsx
@@ -0,0 +1,89 @@
+import { fireEvent, render, screen } from '@testing-library/react'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import SearchPage from './page'
+import { useSearch } from '@/lib/hooks/use-search'
+import { useModalManager } from '@/lib/hooks/use-modal-manager'
+
+vi.mock('next/navigation', () => ({
+  useRouter: () => ({ push: vi.fn() }),
+  usePathname: () => '/search',
+  useSearchParams: () => new URLSearchParams('mode=search'),
+}))
+
+vi.mock('@/components/layout/AppShell', () => ({
+  AppShell: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
+}))
+
+vi.mock('@/components/search/NotebookScopeSelector', () => ({
+  NotebookScopeSelector: () => null,
+}))
+
+vi.mock('@/components/search/StreamingResponse', () => ({
+  StreamingResponse: () => null,
+}))
+
+vi.mock('@/components/search/AdvancedModelsDialog', () => ({
+  AdvancedModelsDialog: () => null,
+}))
+
+vi.mock('@/components/search/SaveToNotebooksDialog', () => ({
+  SaveToNotebooksDialog: () => null,
+}))
+
+vi.mock('@/lib/hooks/use-search', () => ({
+  useSearch: vi.fn(),
+}))
+
+vi.mock('@/lib/hooks/use-ask', () => ({
+  useAsk: () => ({
+    sendAsk: vi.fn(),
+    isStreaming: false,
+    strategy: null,
+    answers: [],
+    finalAnswer: '',
+  }),
+}))
+
+vi.mock('@/lib/hooks/use-models', () => ({
+  useModelDefaults: () => ({ data: null, isLoading: false }),
+  useModels: () => ({ data: [], isLoading: false }),
+}))
+
+vi.mock('@/lib/hooks/use-modal-manager', () => ({
+  useModalManager: vi.fn(),
+}))
+
+const mockUseSearch = vi.mocked(useSearch)
+const mockUseModalManager = vi.mocked(useModalManager)
+const openModal = vi.fn()
+
+describe('SearchPage', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mockUseSearch.mockReturnValue({
+      data: {
+        results: [{
+          id: 'source_insight:matched-insight',
+          parent_id: 'source:parent-source',
+          title: 'Matched insight',
+          final_score: 0.9,
+          created: '2026-01-01T00:00:00Z',
+          updated: '2026-01-01T00:00:00Z',
+        }],
+        total_count: 1,
+        search_type: 'text',
+      },
+      isPending: false,
+      mutate: vi.fn(),
+    } as unknown as ReturnType<typeof useSearch>)
+    mockUseModalManager.mockReturnValue({ openModal } as unknown as ReturnType<typeof useModalManager>)
+  })
+
+  it('opens the record that matched instead of its parent source', () => {
+    render(<SearchPage />)
+
+    fireEvent.click(screen.getByRole('button', { name: 'Matched insight' }))
+
+    expect(openModal).toHaveBeenCalledWith('insight', 'matched-insight')
+  })
+})
diff --git a/frontend/src/app/(dashboard)/search/page.tsx b/frontend/src/app/(dashboard)/search/page.tsx
index 91aa5bbe..e2a4c57f 100644
--- a/frontend/src/app/(dashboard)/search/page.tsx
+++ b/frontend/src/app/(dashboard)/search/page.tsx
@@ -466,13 +466,7 @@ export default function SearchPage() {
                     ) : (
                       <div className="space-y-2">
                         {searchMutation.data.results.map((result, index) => {
-                          // Parse type from parent_id (format: "source:id" or "note:id" or "source_insight:id")
-                          // Handle null parent_id gracefully (orphaned records)
-                          if (!result.parent_id) {
-                            console.warn('Search result with null parent_id:', result)
-                            return null
-                          }
-                          const [type, id] = result.parent_id.split(':')
+                          const [type, id] = result.id.split(':')
                           const modalType = type === 'source_insight' ? 'insight' : type as 'source' | 'note' | 'insight'
 
                           return (
diff --git a/frontend/src/components/sources/AddExistingSourceDialog.test.tsx b/frontend/src/components/sources/AddExistingSourceDialog.test.tsx
new file mode 100644
index 00000000..2c3ed61d
--- /dev/null
+++ b/frontend/src/components/sources/AddExistingSourceDialog.test.tsx
@@ -0,0 +1,73 @@
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { AddExistingSourceDialog } from './AddExistingSourceDialog'
+import { searchApi } from '@/lib/api/search'
+import { sourcesApi } from '@/lib/api/sources'
+
+vi.mock('use-debounce', () => ({
+  useDebounce: (value: string) => [value],
+}))
+
+vi.mock('@/lib/api/search', () => ({
+  searchApi: { search: vi.fn() },
+}))
+
+vi.mock('@/lib/api/sources', () => ({
+  sourcesApi: { list: vi.fn() },
+}))
+
+const mutateAsync = vi.fn()
+vi.mock('@/lib/hooks/use-sources', () => ({
+  useSources: () => ({ data: [] }),
+  useAddSourcesToNotebook: () => ({ mutateAsync, isPending: false }),
+}))
+
+const mockSearch = vi.mocked(searchApi.search)
+const mockList = vi.mocked(sourcesApi.list)
+
+describe('AddExistingSourceDialog', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mockList.mockResolvedValue([])
+    mockSearch.mockResolvedValue({
+      results: [
+        {
+          id: 'source:shared',
+          parent_id: 'source:shared',
+          title: 'Direct source match',
+          final_score: 0.9,
+          created: '2026-01-01T00:00:00Z',
+          updated: '2026-01-01T00:00:00Z',
+        },
+        {
+          id: 'source_insight:child',
+          parent_id: 'source:shared',
+          title: 'Insight from same source',
+          final_score: 0.8,
+          created: '2026-01-01T00:00:00Z',
+          updated: '2026-01-01T00:00:00Z',
+        },
+      ],
+      total_count: 2,
+      search_type: 'text',
+    })
+  })
+
+  it('shows a source only once when several search hits have the same parent', async () => {
+    render(
+      <AddExistingSourceDialog
+        open={true}
+        onOpenChange={vi.fn()}
+        notebookId="notebook:1"
+      />
+    )
+
+    fireEvent.change(screen.getByPlaceholderText('sources.searchPlaceholder'), {
+      target: { value: 'shared' },
+    })
+
+    await waitFor(() => expect(mockSearch).toHaveBeenCalled())
+    expect(screen.getByText('Direct source match')).toBeInTheDocument()
+    expect(screen.queryByText('Insight from same source')).not.toBeInTheDocument()
+  })
+})
diff --git a/frontend/src/components/sources/AddExistingSourceDialog.tsx b/frontend/src/components/sources/AddExistingSourceDialog.tsx
index ff2d35d0..918ce770 100644
--- a/frontend/src/components/sources/AddExistingSourceDialog.tsx
+++ b/frontend/src/components/sources/AddExistingSourceDialog.tsx
@@ -91,9 +91,12 @@ export function AddExistingSourceDialog({
         minimum_score: 0.01,
       })
 
-      // Since we set search_sources=true and search_notes=false,
-      // the API only returns sources, no need to filter
-      const sources = response.results.map(r => ({
+      const sourceIds = new Set<string>()
+      const sources = response.results.filter(r => {
+        if (sourceIds.has(r.parent_id)) return false
+        sourceIds.add(r.parent_id)
+        return true
+      }).map(r => ({
         id: r.parent_id,
         title: r.title || 'Untitled',
         topics: [],

From 3127f14ea9dbb519f0e4ddc64a0742ca644ba6ef Mon Sep 17 00:00:00 2001
From: Nathan <370788475@qq.com>
Date: Sun, 13 Sep 2026 02:25:35 +0800
Subject: [PATCH 303/345] fix(podcasts): resolve Anthropic-compatible model
 configs (#1350)

* fix(podcasts): resolve Anthropic-compatible model configs

* refactor(ai): share compatible model resolution with podcasts

* fix(ai): reject null Anthropic-compatible configuration

---------

Co-authored-by: Bryan Nathan <bryan@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 open_notebook/ai/models.py                 |  71 ++++----
 open_notebook/podcasts/models.py           |   7 +-
 tests/test_podcast_anthropic_compatible.py | 193 +++++++++++++++++++++
 3 files changed, 232 insertions(+), 39 deletions(-)
 create mode 100644 tests/test_podcast_anthropic_compatible.py

diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 7b5157ba..881619bc 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -52,6 +52,32 @@ async def _revalidate_config_urls(config: dict, provider: str) -> None:
                 raise ConfigurationError(str(e)) from e
 
 
+async def resolve_anthropic_compatible_config(
+    config: dict, **overrides
+) -> tuple[str, dict]:
+    """Resolve the shared chat/podcast provider contract without official fallback."""
+    if not config:
+        config = {
+            "api_key": os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY", ""),
+            "base_url": os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL", ""),
+        }
+    # Resolve the environment before kwargs: max_tokens/temperature alone must
+    # not suppress fallback for an unlinked model.
+    config = {**config, **overrides}
+    if (
+        not str(config.get("api_key") or "").strip()
+        or not str(config.get("base_url") or "").strip()
+    ):
+        raise ConfigurationError(
+            "Anthropic-compatible models require a base URL and API key"
+        )
+    await _revalidate_config_urls(config, "anthropic_compatible")
+    config["base_url"] = normalize_anthropic_compatible_base_url(
+        str(config["base_url"])
+    )
+    return "anthropic", config
+
+
 class Model(ObjectModel):
     table_name: ClassVar[str] = "model"
     nullable_fields: ClassVar[set[str]] = {"credential"}
@@ -198,7 +224,8 @@ class ModelManager:
             credential = await model.get_credential_obj()
             if credential:
                 config = credential.to_esperanto_config()
-                await _revalidate_config_urls(config, model.provider)
+                if model.provider != "anthropic_compatible":
+                    await _revalidate_config_urls(config, model.provider)
                 logger.debug(
                     f"Using credential '{credential.name}' for model {model.name}"
                 )
@@ -217,44 +244,14 @@ class ModelManager:
 
             await provision_provider_keys(model.provider)
 
-        # anthropic_compatible: esperanto has no such provider name; it maps to
-        # the anthropic provider with a custom base_url. Pull config from env when
-        # no credential is linked. This runs BEFORE kwargs are merged so that a
-        # kwarg like temperature does not make `config` truthy and suppress the
-        # env-var fallback for an unlinked model.
-        if model.provider == "anthropic_compatible" and not config:
-            api_key = os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY")
-            base_url = os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL")
-            if api_key:
-                config["api_key"] = api_key
-            if base_url:
-                config["base_url"] = base_url
-                # A base_url from a provisioned DB credential needs the same
-                # request-time re-validation the credential-linked path gets.
-                await _revalidate_config_urls(config, model.provider)
-
-        # Merge any additional kwargs (e.g. temperature)
-        config.update(kwargs)
-
-        # Require base_url + api_key and normalize the URL for anthropic_compatible.
-        if model.provider == "anthropic_compatible" and (
-            not str(config.get("api_key", "")).strip()
-            or not str(config.get("base_url", "")).strip()
-        ):
-            raise ConfigurationError(
-                "Anthropic-compatible models require a base URL and API key"
-            )
         if model.provider == "anthropic_compatible":
-            config["base_url"] = normalize_anthropic_compatible_base_url(
-                str(config["base_url"])
+            provider, config = await resolve_anthropic_compatible_config(
+                config, **kwargs
             )
-
-        # Normalize provider name: DB stores underscores but Esperanto expects hyphens
-        provider = (
-            "anthropic"
-            if model.provider == "anthropic_compatible"
-            else model.provider.replace("_", "-")
-        )
+        else:
+            config.update(kwargs)
+            # DB stores underscores but Esperanto expects hyphens.
+            provider = model.provider.replace("_", "-")
 
         # Create model based on type (Esperanto will cache the instance)
         if model.type == "language":
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index ac628ee1..e1c1e796 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -16,7 +16,7 @@ async def _resolve_model_config(
     Used by resolve_outline_config, resolve_transcript_config, resolve_tts_config,
     and per-speaker TTS overrides. Optionally passes through a max_tokens override.
     """
-    from open_notebook.ai.models import Model
+    from open_notebook.ai.models import Model, resolve_anthropic_compatible_config
 
     model = await Model.get(model_id)
     config: dict = {}
@@ -28,9 +28,12 @@ async def _resolve_model_config(
         from open_notebook.ai.key_provider import provision_provider_keys
 
         await provision_provider_keys(model.provider)
+    provider = model.provider
+    if provider == "anthropic_compatible":
+        provider, config = await resolve_anthropic_compatible_config(config)
     if max_tokens is not None:
         config = {**config, "max_tokens": max_tokens}
-    return (model.provider, model.name, config)
+    return (provider, model.name, config)
 
 
 class EpisodeProfile(ObjectModel):
diff --git a/tests/test_podcast_anthropic_compatible.py b/tests/test_podcast_anthropic_compatible.py
new file mode 100644
index 00000000..d9caeaf8
--- /dev/null
+++ b/tests/test_podcast_anthropic_compatible.py
@@ -0,0 +1,193 @@
+"""Podcast model resolution must retain Anthropic-compatible endpoints (#1347)."""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from esperanto import AIFactory
+from pydantic import SecretStr
+
+from open_notebook.ai.models import Model
+from open_notebook.domain.credential import Credential
+from open_notebook.exceptions import ConfigurationError
+from open_notebook.podcasts.models import EpisodeProfile, _resolve_model_config
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    "resolver", ["resolve_outline_config", "resolve_transcript_config"]
+)
+@pytest.mark.parametrize("linked", [True, False], ids=["credential", "environment"])
+async def test_compatible_podcast_model_reaches_its_endpoint(
+    monkeypatch, resolver, linked
+):
+    base_url = "https://podcast.example.invalid/anthropic"
+    api_key = "test-podcast-compatible-key"
+    credential = Credential(
+        name="Compatible podcast endpoint",
+        provider="anthropic_compatible",
+        api_key=SecretStr(api_key),
+        base_url=base_url,
+    )
+    model = Model(
+        id="model:podcast",
+        name="compatible-podcast-model",
+        provider="anthropic_compatible",
+        type="language",
+        credential="credential:podcast" if linked else None,
+    )
+    profile = EpisodeProfile(
+        name="Compatible podcast",
+        default_briefing="Discuss the source",
+        outline_llm="model:podcast",
+        transcript_llm="model:podcast",
+        max_tokens=2048,
+    )
+    monkeypatch.setenv(
+        "ANTHROPIC_COMPATIBLE_API_KEY", "other-env-key" if linked else api_key
+    )
+    monkeypatch.setenv(
+        "ANTHROPIC_COMPATIBLE_BASE_URL",
+        "https://other.example.invalid" if linked else base_url,
+    )
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Model, "get_credential_obj", AsyncMock(return_value=credential)),
+        patch("open_notebook.ai.key_provider.provision_provider_keys", AsyncMock()),
+        patch("open_notebook.ai.models.validate_url", AsyncMock()),
+    ):
+        provider, name, config = await getattr(profile, resolver)()
+
+    # Exercise the real factory boundary used by podcast-creator. Construction
+    # performs no model request; the endpoint must not become api.anthropic.com.
+    language_model = AIFactory.create_language(provider, name, config=config)
+    assert provider == "anthropic"
+    assert language_model.base_url == base_url + "/v1"
+    assert config == {
+        "api_key": api_key,
+        "base_url": base_url + "/v1",
+        "max_tokens": 2048,
+    }
+    assert model.provider == "anthropic_compatible"
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("missing", ["api_key", "base_url"])
+async def test_incomplete_compatible_config_cannot_fall_back_to_anthropic(
+    monkeypatch, missing
+):
+    values = {
+        "api_key": "test-compatible-key",
+        "base_url": "https://podcast.example.invalid",
+    }
+    values.pop(missing)
+    credential = Credential(
+        name="Incomplete", provider="anthropic_compatible", **values
+    )
+    model = Model(
+        id="model:incomplete",
+        name="compatible-model",
+        provider="anthropic_compatible",
+        type="language",
+        credential="credential:incomplete",
+    )
+    monkeypatch.setenv("ANTHROPIC_API_KEY", "unrelated-official-key")
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Model, "get_credential_obj", AsyncMock(return_value=credential)),
+        patch("open_notebook.ai.key_provider.provision_provider_keys", AsyncMock()),
+        patch("open_notebook.ai.models.validate_url", AsyncMock()),
+        pytest.raises(ConfigurationError, match="require a base URL and API key"),
+    ):
+        await _resolve_model_config("model:incomplete")
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("provider", ["openai", "openai_compatible", "anthropic"])
+async def test_other_podcast_providers_keep_existing_config(provider):
+    credential = Credential(
+        name="Existing",
+        provider=provider,
+        api_key=SecretStr("test-existing-key"),
+        base_url="https://existing.example.invalid/v1",
+    )
+    model = Model(
+        id="model:existing",
+        name="existing-model",
+        provider=provider,
+        type="language",
+        credential="credential:existing",
+    )
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch.object(Model, "get_credential_obj", AsyncMock(return_value=credential)),
+    ):
+        assert await _resolve_model_config("model:existing") == (
+            provider,
+            "existing-model",
+            credential.to_esperanto_config(),
+        )
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("path", ["chat", "podcast"])
+@pytest.mark.parametrize("invalid", ["missing_key", "missing_url", "rejected_url"])
+async def test_both_paths_reject_invalid_compatible_environment(
+    monkeypatch, path, invalid
+):
+    from open_notebook.ai.models import ModelManager
+
+    monkeypatch.setenv(
+        "ANTHROPIC_COMPATIBLE_API_KEY", "" if invalid == "missing_key" else "test-key"
+    )
+    monkeypatch.setenv(
+        "ANTHROPIC_COMPATIBLE_BASE_URL",
+        "" if invalid == "missing_url" else "https://rejected.example.invalid",
+    )
+    monkeypatch.setenv("ANTHROPIC_API_KEY", "unrelated-official-key")
+    model = Model(
+        id="model:environment",
+        name="compatible-model",
+        provider="anthropic_compatible",
+        type="language",
+    )
+    validator = AsyncMock(
+        side_effect=ValueError("URL rejected") if invalid == "rejected_url" else None
+    )
+    with (
+        patch.object(Model, "get", AsyncMock(return_value=model)),
+        patch("open_notebook.ai.key_provider.provision_provider_keys", AsyncMock()),
+        patch("open_notebook.ai.models.validate_url", validator),
+        patch("open_notebook.ai.models.AIFactory.create_language") as factory,
+    ):
+        with pytest.raises(ConfigurationError):
+            if path == "chat":
+                await ModelManager().get_model("model:environment", max_tokens=2048)
+            else:
+                await _resolve_model_config("model:environment", max_tokens=2048)
+    factory.assert_not_called()
+    if invalid == "rejected_url":
+        validator.assert_awaited()
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("field", ["api_key", "base_url"])
+@pytest.mark.parametrize("via_override", [False, True], ids=["config", "override"])
+async def test_compatible_config_rejects_explicit_none(field, via_override):
+    from open_notebook.ai.models import resolve_anthropic_compatible_config
+
+    config: dict[str, str | None] = {
+        "api_key": "test-compatible-key",
+        "base_url": "https://podcast.example.invalid",
+    }
+    overrides: dict[str, str | None] = {}
+    if via_override:
+        overrides[field] = None
+    else:
+        config[field] = None
+
+    with (
+        patch("open_notebook.ai.models.validate_url", AsyncMock()) as validator,
+        pytest.raises(ConfigurationError, match="require a base URL and API key"),
+    ):
+        await resolve_anthropic_compatible_config(config, **overrides)
+    validator.assert_not_awaited()

From 3959eb0a86e1a614e20ce40aa9aa35ecbd8d2792 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 30 Sep 2026 22:31:39 -0300
Subject: [PATCH 304/345] chore: add the oss-maintainer profile under
 .maintainer/ (#1351)

* chore: add the oss-maintainer profile under .maintainer/

Scaffold `.maintainer/` (schema v1) so the oss-maintainer plugin can run
triage, release, review, process-discussions and smoke-e2e against this
repository: profile.toml, PROFILE.md, gotchas.md, triage.md,
release/runbook.md, release/test-matrix.md and smoke/journey.md.

The release runbook, test matrix, gates and the discussions rules move
here from the project-local `.claude/skills/{release,process-discussions}`
and the Codex mirror `.agents/skills/release`, which are removed so each
policy has one home. Commands stay referenced from AGENTS.md and the
Makefile; the human release process stays in .github/RELEASE_PROCESS.md.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

* chore(maintainer): address cubic review on the profile scaffold

- runbook: `uv sync --group dev` (dev is a dependency group, not an extra)
- smoke journey: the insight endpoint returns 202, not 200
- README/profile: state that commands are invoked in their CI form
  (`ruff check .` without `--fix`), not re-implemented
- test-matrix: name the table's rows as Bucket A / C so the runbook's
  "Bucket A" resolves
- drop the `.maintainer/ export-ignore` rule: the project ships Docker
  images, not tarballs, and RELEASE_PROCESS.md points at the runbook

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

* chore(maintainer): finish the cubic follow-ups on the test matrix

- Backend suite row: `uv sync --group dev`, consistent with the runbook
- Bucket C is "the owner runs it by hand"; the Who / paid scope column,
  not the bucket, says which rows need real credentials

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 .agents/skills/release/SKILL.md             | 116 ----------
 .agents/skills/release/comms-templates.md   |  60 ------
 .agents/skills/release/gates.md             |  44 ----
 .agents/skills/release/runbook.md           |  73 -------
 .agents/skills/release/test-matrix.md       |  66 ------
 .claude/skills/process-discussions/SKILL.md | 226 --------------------
 .claude/skills/release/SKILL.md             | 116 ----------
 .claude/skills/release/comms-templates.md   |  62 ------
 .claude/skills/release/gates.md             |  44 ----
 .claude/skills/release/runbook.md           | 112 ----------
 .claude/skills/release/test-matrix.md       |  66 ------
 .github/RELEASE_PROCESS.md                  |   2 +-
 .gitignore                                  |   4 +
 .maintainer/PROFILE.md                      |  37 ++++
 .maintainer/README.md                       |  26 +++
 .maintainer/gotchas.md                      |  26 +++
 .maintainer/profile.toml                    | 116 ++++++++++
 .maintainer/release/runbook.md              | 160 ++++++++++++++
 .maintainer/release/test-matrix.md          |  58 +++++
 .maintainer/smoke/journey.md                | 148 +++++++++++++
 .maintainer/triage.md                       |  78 +++++++
 AGENTS.md                                   |   1 +
 22 files changed, 655 insertions(+), 986 deletions(-)
 delete mode 100644 .agents/skills/release/SKILL.md
 delete mode 100644 .agents/skills/release/comms-templates.md
 delete mode 100644 .agents/skills/release/gates.md
 delete mode 100644 .agents/skills/release/runbook.md
 delete mode 100644 .agents/skills/release/test-matrix.md
 delete mode 100644 .claude/skills/process-discussions/SKILL.md
 delete mode 100644 .claude/skills/release/SKILL.md
 delete mode 100644 .claude/skills/release/comms-templates.md
 delete mode 100644 .claude/skills/release/gates.md
 delete mode 100644 .claude/skills/release/runbook.md
 delete mode 100644 .claude/skills/release/test-matrix.md
 create mode 100644 .maintainer/PROFILE.md
 create mode 100644 .maintainer/README.md
 create mode 100644 .maintainer/gotchas.md
 create mode 100644 .maintainer/profile.toml
 create mode 100644 .maintainer/release/runbook.md
 create mode 100644 .maintainer/release/test-matrix.md
 create mode 100644 .maintainer/smoke/journey.md
 create mode 100644 .maintainer/triage.md

diff --git a/.agents/skills/release/SKILL.md b/.agents/skills/release/SKILL.md
deleted file mode 100644
index 58da7432..00000000
--- a/.agents/skills/release/SKILL.md
+++ /dev/null
@@ -1,116 +0,0 @@
----
-name: release
-description: Orchestrate an Open Notebook release — changelog audit, risk-based A/B/C test matrix, Docker image gate (fresh + upgrade), fix loop via PRs, cut, publication with credits, retro. Use when preparing, testing, cutting or publishing a release.
----
-
-# Open Notebook Release Orchestrator
-
-You are conducting a release of Open Notebook, reproducing the process
-established in v1.11.0. The **source of truth for the process** is
-`.github/RELEASE_PROCESS.md` — read it first. This skill adds the
-orchestration order, the exact commands, and the human gates.
-
-**Ground rules for the whole run:**
-
-- The release happens in a **single session**. Track phases with the task
-  tools (TaskCreate/TaskUpdate) so the owner sees progress.
-- Every repo change goes through a **PR** (branch → PR → CI + cubic → merge).
-  Never push to main. Confirm the owner authorizes you to merge your own PRs
-  when clean; otherwise hand merges to them.
-- Interact in the owner's language; write code, commits and docs in English.
-- Read `${CLAUDE_SKILL_DIR}/gates.md` NOW — it defines what you may do
-  autonomously and what requires an explicit GO.
-
-## Phase 0 — Scope and changelog audit
-
-1. `git fetch --tags` · find the last release tag and `gh release list`.
-2. List everything merged since: `git log <last-tag>..origin/main --oneline`.
-3. Audit the CHANGELOG `[Unreleased]` section against that list. Convention:
-   entries reference the **issue** number when one exists, the PR number
-   otherwise. Close every gap via PR.
-4. Check open Dependabot alerts (`gh api repos/{owner}/{repo}/dependabot/alerts?state=open`)
-   — a security-themed release with open highs is incoherent. Triage them
-   into the fix loop or document acceptance.
-
-## Phase 1 — Risk-based test matrix
-
-Read `${CLAUDE_SKILL_DIR}/test-matrix.md` and instantiate it against the
-actual release diff. Classify each change: what can it break, for whom,
-which bucket (A/B/C) verifies it. **Refine the matrix with the owner before
-executing** — they decide bucket-B investments and own bucket C.
-
-## Phase 2 — Execute bucket A
-
-Run in parallel where possible:
-
-- `uv run pytest tests/` · `ruff check .` · `uv run python -m mypy .` (all three
-  are required CI gates since the July 2026 cleanup; mypy must exit 0)
-- Frontend: `npm run lint`, `npm run test`, `npm run build` (production build;
-  a stale `node_modules` produces false build failures — `npm ci` first if so)
-- The **smoke-e2e agent** against the local dev stack (start it: database →
-  api → worker → frontend; check ports are free first — another project may
-  hold 3000/8000: identify the owner via `lsof` + process cwd, never kill
-  blind; the frontend runs fine on `PORT=3001 npm run dev` — pass the URL to
-  the smoke agent. Also note the dev `.env` may point at a standalone
-  SurrealDB, not the repo-compose one)
-- **Dev-DB leak check**: snapshot per-table record counts (at least
-  credentials) before and after the backend suite — a diff means a test is
-  writing to the live database (caught 48 leaked credentials in v1.12.0)
-- The **targeted probes** from the matrix (legitimate-use regression checks
-  for security changes)
-
-## Phase 3 — Image gate + bucket C kickoff
-
-- `make docker-build-local`, then `make release-test TAG=<ver> OLD_TAG=<prev>`
-  (pull the genuine previous tag first — see gotchas in RELEASE_PROCESS.md).
-- Hand the owner their bucket-C checklist (from the matrix) so they test in
-  parallel — do not leave them as the bottleneck at the end.
-
-## Phase 4 — Fix loop
-
-For each finding: reproduce → root-cause → focused PR with regression tests →
-CI + cubic → merge (per gates.md). Apply the re-test policy from
-RELEASE_PROCESS.md after each merge. Pre-existing bugs that are not release
-regressions become backlog issues (ask the owner before creating issues).
-Verify UI fixes in the real browser (Playwright) before opening the PR.
-
-## Phase 5 — Cut
-
-1. Cut PR off updated main: bump `pyproject.toml`, date the changelog section.
-2. After merge: `make tag`.
-3. Rebuild the image from final main and **re-run the image gate** against it.
-4. Push version images via CI:
-   `gh workflow run build-and-release.yml --ref main -f push_latest=false`
-   and watch the run. (Local `make docker-push` needs `docker login`.)
-5. Verify the pushed manifests (see `${CLAUDE_SKILL_DIR}/runbook.md`).
-
-## Phase 6 — Pushed-image verification (human gate)
-
-Offer the owner a browsable RC stack on this machine:
-`make release-stack TAG=<ver> [DUMP=<dump>]` — with a copy of their dev data
-for realism (export command in the runbook). Support them through it; findings
-go back to Phase 4. **Do not proceed without their GO.**
-
-## Phase 7 — Publish (human gate)
-
-1. Draft release notes per `${CLAUDE_SKILL_DIR}/comms-templates.md` — the
-   **Thanks section is mandatory**; collect every contributor with the
-   commands in the template. Show the owner for review.
-2. With their explicit GO: `gh release create v<ver> --title ... --notes-file ... --latest`.
-   Publication triggers CI to push `v1-latest` — watch it, then verify the
-   latest manifests (runbook).
-3. Mark shipped issues with the `released` label (ask before mass-labeling).
-4. Deliver the Discord post text (the owner posts it).
-
-## Phase 8 — Cleanup
-
-`make release-stack-down`, remove temp dumps/data dirs, stop watchers, ensure
-`git status` is clean on main and no test containers remain.
-
-## Phase 9 — Retro (always runs)
-
-Ask the owner: *"what should improve in this process?"* — and apply the
-accepted improvements **now**: edit `.github/RELEASE_PROCESS.md`,
-`scripts/release-test/*`, and this skill's files while context is fresh.
-New gotchas discovered during the run go into RELEASE_PROCESS.md's Known
-Gotchas via the same PR flow.
diff --git a/.agents/skills/release/comms-templates.md b/.agents/skills/release/comms-templates.md
deleted file mode 100644
index 15607313..00000000
--- a/.agents/skills/release/comms-templates.md
+++ /dev/null
@@ -1,60 +0,0 @@
-# Communication Templates
-
-Reference implementation: the v1.11.0 release
-(https://github.com/lfnovo/open-notebook/releases/tag/v1.11.0).
-
-## GitHub release notes structure
-
-```
-**We recommend all users upgrade.** <one-line verdict: what this release is,
-and that it was validated by the release test process>
-
-## 🔒 Security hardening        (if applicable — lead with it)
-## ✨ New features               (user language, issue refs)
-## ⚡ Performance
-## 🐛 Notable fixes
-## ⚠️ Behavior changes for self-hosters
-    <anything that can require a config tweak on upgrade — numbered,
-     each with the escape hatch (env var, override file, doc link)>
-## 🙏 Thanks                     (MANDATORY — see below)
-Full details in the [CHANGELOG](.../CHANGELOG.md).
-```
-
-Tone: honest and specific. Say what protections do AND what stays supported
-(e.g. "private IPs/localhost remain fully supported for self-hosted Ollama").
-
-## 🙏 Thanks — collecting contributors (never skip, never miss anyone)
-
-1. Commit authors in the release range:
-   `git log <last-tag>..<tag> --pretty='%an <%ae>' | sort | uniq -c | sort -rn`
-2. Map every non-obvious name to a GitHub handle via their PR:
-   `gh pr view <n> --json author --jq .author.login`
-   (PR list: `gh pr list --state merged --limit 100 --json number,author,mergedAt,title`
-   filtered to merges after the previous tag — beware PRs merged before the
-   previous tag was cut appearing in date filters.)
-3. One bullet per contributor: **@handle** — what they shipped, with refs.
-4. Close with a collective thank-you to issue reporters.
-5. Bots (dependabot) are excluded.
-
-## Discord announcement skeleton
-
-```
-📢 Open Notebook v<X.Y.Z> is out — <hook: why upgrade>!
-
-<2-3 lines: the headline theme (e.g. security pass) + feature highlights
-as a one-line · separated list>
-
-⚡ <performance line, if any>
-
-🧪 <one line on how it was tested — users trust releases more when they
-    know fresh-install + upgrade were tested on the real images>
-
-⚠️ Self-hosters: check "Behavior changes" in the release notes.
-
-📝 https://github.com/lfnovo/open-notebook/releases/tag/v<X.Y.Z>
-🐳 docker pull lfnovo/open_notebook:v1-latest
-```
-
-Consider crediting contributors on Discord too — communities love it.
-
-The owner posts to Discord; deliver final text, don't post.
diff --git a/.agents/skills/release/gates.md b/.agents/skills/release/gates.md
deleted file mode 100644
index d28da6e4..00000000
--- a/.agents/skills/release/gates.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# Gates — what needs a human, what doesn't
-
-The contract that made v1.11.0 safe. When in doubt, ask — a blocked action is
-feedback, not an obstacle to route around.
-
-## You may do autonomously (once the release run is underway)
-
-- Run any test, build, probe or analysis; start/stop local dev services
-- Create branches, commits, and open PRs
-- Spawn subagents (smoke-e2e, investigation, fixes)
-- Build/pull Docker images locally; run the release-test harness and RC stack
-- Dispatch the *Build and Release* CI workflow with `push_latest=false`
-  (version tags only — this is the agreed pre-verification push)
-
-## Requires explicit, in-session authorization from the owner
-
-| Action | Why |
-|---|---|
-| Merging PRs you authored | two-party review; ask once per session ("merge when clean?") and honor the answer |
-| Publishing the GitHub release | public, triggers `v1-latest` — the point of no return |
-| Anything that pushes `v1-latest` | users receive it immediately |
-| Creating GitHub issues | external artifacts the owner may not want |
-| Mass-labeling issues (`released`) | bulk modification of shared state |
-| Touching the owner's dev data | only ever work on **copies** (export/import); never mount or mutate originals |
-
-## Never
-
-- Push directly to main
-- Publish a prerelease/release to work around a blocked step
-- Mark a phase complete with failing checks ("GO with known issues is worse
-  than a NO-GO that catches problems before users do")
-
-## Re-test policy after each fix merge
-
-- Cheap suite (pytest + lint + frontend tests/build): **always**
-- smoke-e2e / image gate: only if the fix touches what they cover
-- Owner's manual verification: only if the fix touches what they verified
-- The final image gate (Phase 5.3) always runs on the exact release artifact
-
-## GO/NO-GO
-
-A release is GO when: bucket A fully green · image gate green (fresh +
-upgrade) · bucket C signed off by the owner · no open release-regression
-findings · Dependabot highs resolved or explicitly accepted.
diff --git a/.agents/skills/release/runbook.md b/.agents/skills/release/runbook.md
deleted file mode 100644
index 0a90b2a5..00000000
--- a/.agents/skills/release/runbook.md
+++ /dev/null
@@ -1,73 +0,0 @@
-# Runbook — exact commands for the cut-and-publish phases
-
-Gotchas live in `.github/RELEASE_PROCESS.md` → Known Gotchas. This file is
-the command reference.
-
-## Version images via CI (Phase 5)
-
-```bash
-gh workflow run build-and-release.yml --ref main -f push_latest=false
-gh run list --workflow=build-and-release.yml --limit 1     # grab the id
-gh run watch <run-id> --exit-status                        # background it
-```
-
-## Verify pushed manifests
-
-```bash
-for ref in lfnovo/open_notebook:<ver> lfnovo/open_notebook:<ver>-single ghcr.io/lfnovo/open-notebook:<ver>; do
-  docker manifest inspect "$ref" | python3 -c "import json,sys; d=json.load(sys.stdin); print(sorted(set(m['platform']['architecture'] for m in d.get('manifests',[]) if m['platform']['architecture']!='unknown')))"
-done
-# expect ['amd64', 'arm64'] for each; repeat with v1-latest after publication
-```
-
-## RC stack with a copy of the owner's dev data (Phase 6)
-
-```bash
-# 1. Find which SurrealDB instance dev actually uses — read SURREAL_URL in .env
-#    (multiple instances may run locally; the repo-compose one on :8000 may NOT
-#    be it), and note SURREAL_DATABASE.
-# 2. Consistent export from the RUNNING instance (originals untouched):
-docker exec <that-container> /surreal export --conn http://localhost:8000 \
-  --user root --pass root --ns open_notebook --db <that-db> /dev/stdout > /tmp/dev-dump.surql
-# 3. Boot (rc-stack.sh docker-pulls the pushed tag by default, so a local
-#    build can't shadow the registry artifact):
-make release-stack TAG=<ver> DUMP=/tmp/dev-dump.surql
-#    To exercise the opt-in heavy runtimes (Docling + Crawl4AI) on the pushed
-#    image with this data, append the flag (first boot installs them, ~minutes):
-#    bash scripts/release-test/rc-stack.sh up <ver> /tmp/dev-dump.surql --with-runtimes
-# 4. Sanity: credentials decrypt (uses the dev encryption key from .env):
-curl -s http://localhost:15055/api/credentials | python3 -c "import json,sys; c=json.load(sys.stdin); print(len(c), 'creds,', sum(1 for x in c if x.get('decryption_error')), 'decrypt errors')"
-# 5. Opt-in gating is only meaningful on this fresh image (a dev venv may have
-#    the runtimes installed out-of-band): GET /api/capabilities should report
-#    both false until --with-runtimes installs them.
-```
-
-Remind the owner: in-container credentials pointing at host services need
-`http://host.docker.internal:<port>` (Ollama, LM Studio).
-
-## Publish (Phase 7 — after explicit GO)
-
-```bash
-gh release create v<ver> --title "v<ver> — <theme>" --notes-file <notes.md> --latest
-# publication (non-prerelease) triggers the workflow that pushes v1-latest
-gh run list --workflow=build-and-release.yml --limit 1 && gh run watch <id> --exit-status
-```
-
-## Label shipped issues (after owner OK)
-
-```bash
-# only actual closed ISSUES (changelog refs mix issues and PR numbers):
-for n in <numbers>; do
-  STATE=$(gh api "repos/lfnovo/open-notebook/issues/$n" --jq 'if .pull_request then "pr" else .state end')
-  [ "$STATE" = "closed" ] && gh issue edit "$n" --add-label released
-done
-```
-
-## Cleanup (Phase 8)
-
-```bash
-make release-stack-down
-rm -f /tmp/dev-dump.surql; rm -rf /tmp/onrel-*
-docker ps --format '{{.Names}}' | grep onrel   # must be empty
-git status --short                              # must be clean on main
-```
diff --git a/.agents/skills/release/test-matrix.md b/.agents/skills/release/test-matrix.md
deleted file mode 100644
index f81b3902..00000000
--- a/.agents/skills/release/test-matrix.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# Test Matrix Template — change → risk → bucket
-
-Instantiate against the real release diff. The unit of planning is the
-**risk**, not the feature: for each change ask *what can this break, and for
-whom?* Security hardening gets the inverse question too: *does the protection
-break legitimate use?* (v1.11.0 examples: SSRF guard vs. self-hosted Ollama on
-localhost; body-size cap vs. big uploads; Host validation vs. reverse proxies).
-
-## Bucket A — automated now (run all of it)
-
-Checklist design rule (v1.12.0 retro): before putting an error-path item on
-the bucket-C checklist ("X unconfigured should show an error"), verify in the
-provisioning code that it IS an error — transformation and tools defaults
-deliberately fall back to the chat default (`open_notebook/ai/models.py`).
-
-| Check | Command / tool |
-|---|---|
-| Backend suite | `uv run pytest tests/` |
-| Lint & types | `ruff check .` · `uv run python -m mypy .` (both are required CI gates; mypy runs at 0 errors — `uv sync --extra dev` first if mypy is missing locally) |
-| Frontend | `npm run lint` · `npm run test` · `npm run build` (run `npm ci` first if deps changed) |
-| Full happy path | smoke-e2e agent on the local dev stack (API + Playwright UI) |
-| Dependency audit | Dependabot alerts + `npm audit` |
-| Targeted probes | see below — pick per matrix |
-
-### Probe library (extend per release)
-
-Regression-of-legitimate-use probes proven in v1.11.0 — adapt endpoints/values:
-
-- Upload just under / just over the body cap → accepted / 413
-- Source ingestion of a `localhost` URL → ACCEPTED (self-hosted is legitimate);
-  link-local/metadata URL → rejected with a clear 4xx
-- Frontend `/config` with clean vs. malformed `Host` → sane URL / fallback, never 5xx
-- SSE endpoints stream progressively (first byte ≪ total time via `curl -N -w`)
-- CORS preflight with and without `CORS_ORIGINS` set
-- Every enum/allowlisted query param exercised with **each** valid value +
-  one invalid (v1.11.0: `sort_by=title` 500'd while all siblings passed —
-  test the whole surface, not one sample)
-- Oversized array inputs and unknown-provider payloads → clean 422, not 500
-- Anything an LLM or UI writes through: verify the full path in a real
-  browser, not just the API (mirror-bug lesson: frontend dropped the field
-  AND the API ignored null — only end-to-end caught it)
-
-## Bucket B — automatable with investment (decide with the owner)
-
-Standing candidates; the image gate graduated from here to `make release-test`:
-
-- New end-to-end scenarios for this release's features
-- CI-ification of any probe that proved valuable twice
-- Anything the owner keeps having to verify by hand
-
-Decision rule: build it if it compounds for future releases and costs < the
-manual verification it replaces; otherwise verify manually this once and note
-it here for next time.
-
-## Bucket C — the release owner (start EARLY, in parallel)
-
-- Provider connection tests with **real credentials** (prioritize providers
-  whose code changed); one discover-models; one chat per main provider
-- One podcast with real TTS on a dense notebook
-- Visual/UX tour (~10 min) of every UI change in the release, plus dark mode
-  sampling
-- Phase 6: the pushed image via `make release-stack`
-
-Deliver this as a concrete checklist with expected outcomes, tailored to what
-the release actually touched and to the credentials the owner actually has
-(`GET /api/credentials` tells you).
diff --git a/.claude/skills/process-discussions/SKILL.md b/.claude/skills/process-discussions/SKILL.md
deleted file mode 100644
index 412a27c4..00000000
--- a/.claude/skills/process-discussions/SKILL.md
+++ /dev/null
@@ -1,226 +0,0 @@
----
-name: process-discussions
-description: Facilitate Open Notebook's GitHub Discussions queue — qualify Ideas, decompose them into distinct needs, verify claims in code, propose outcomes (exploring / graduated / parked / combined), draft replies, and graduate small gaps into ready Issues. Use when processing, triaging, or responding to Discussions, or when the user says "process discussions" / "vamos fazer as discussions".
----
-
-# Discussion Facilitation — Open Notebook
-
-You are facilitating the community Discussion queue, implementing the
-**qualification and exploration stages** of the Open Contribution system
-([Discussion #1266](https://github.com/lfnovo/open-notebook/discussions/1266)
-is the public essay; [#1212](https://github.com/lfnovo/open-notebook/discussions/1212)
-is Bet #1). The maintainer (Luis) is the **decision owner**: every outcome
-and reply is approved by him before posting. You prepare; he decides.
-
-This process was calibrated by hand on 2026-08-16 across 10 Ideas
-(#1210–#1265) and re-run on 2026-09-02 (6 follow-ups + 3 new ideas), which
-added the `incubating` status and the pull rule, and again on 2026-09-05
-(4 follow-ups), which added the one-decision-at-a-time format and the
-close-when-graduated-work-lands rule. The patterns below are ratified
-practice, not theory.
-
-**Ground rules:**
-
-- Interact with the owner in his language; everything posted to GitHub is
-  **English**.
-- **Never post, close, rename, or open anything without explicit approval**
-  of the specific text. Present ficha + outcome + draft; wait for "aprovado".
-- **Never cite internal maintainer drafts** (`.tmp-context/`, private plans).
-  Public anchors only: `VISION.md`, `docs/7-DEVELOPMENT/decisions/` (ADRs/PDRs),
-  open issues/PRs. Alignment with unpublished vision may be expressed as
-  "aligns with where the product is heading" — no specifics.
-- Status is stated **textually** in replies ("Status: **exploring**").
-  No status labels on Discussions yet — that's a future bet.
-- No bulk-migration of historical Issues. Small, theme-scoped samples only
-  (Bet #1 explicitly reserved this), and only with approval.
-
-## Phase 0 — Queue map (once per session)
-
-Build the full picture before touching any single item. Cluster detection
-across the queue is what makes individual replies good.
-
-```bash
-gh api graphql -f query='
-{ repository(owner: "lfnovo", name: "open-notebook") {
-    discussions(first: 50, categoryId: "DIC_kwDONDsQ184CjkD_", orderBy: {field: CREATED_AT, direction: ASC}) {
-      nodes { number title createdAt closed author { login } comments { totalCount } } } } }' \
-  --jq '.data.repository.discussions.nodes[] | select(.closed == false) | "\(.number) | \(.createdAt[:10]) | \(.author.login) | comments:\(.comments.totalCount) | \(.title)"'
-```
-
-(Category `Ideas` = `DIC_kwDONDsQ184CjkD_`; `Feedback Requests` = `DIC_kwDONDsQ184DBrfp`.
-Repo id: `R_kgDONDsQ1w`. These are GitHub GraphQL node ids for lfnovo/open-notebook;
-they change if a category is recreated or the skill is used on a fork. Regenerate:
-
-```bash
-gh api graphql -f query='{ repository(owner: "lfnovo", name: "open-notebook") {
-  id discussionCategories(first: 20) { nodes { id name } } } }'
-```
-)
-
-Split into cohorts: post-Bet-#1 form entries (`[Idea]:` prefix) vs. pre-form
-legacy. Note authors with multiple entries (their items often interconnect)
-and candidate theme clusters. Present the map; agree on order (default:
-chronological within the newest cohort).
-
-**Classify processing state before proposing work** (learned on the legacy
-cohort run): a discussion with a maintainer reply that already delivered an
-outcome — especially one canonicalized in place — does **not** get a new
-reply by default. For already-processed items the deliverable is a *state
-ledger* (what's resolved and closable, what's canonical-awaiting-its-beat,
-and which initiative each one is waiting on), plus at most the few actions
-that state implies (e.g. closing a resolved thread with the outcome
-recorded). Re-replying to handled threads is noise, not facilitation.
-
-## Phase 1 — Ficha de contexto (per discussion)
-
-1. **Fetch everything**: body + all comments (including reply threads).
-   GraphQL, not `gh` CLI (discussions support is partial):
-   `repository.discussion(number: N) { title body author { login } comments(...) }`.
-
-2. **Decompose into distinct needs.** The single highest-value step.
-   Titles undersell: "Thumbnails" was 3 needs; "manual annotations" was 4.
-   Number them. Each need may get a different outcome and a different home.
-
-3. **Search precedents** — issues, PRs, and discussions, multiple terms per
-   need (`gh search issues` has no `--state all`; use `--include-prs`, watch
-   for false positives like Python "annotations"). Check the queue map for
-   sibling discussions.
-
-4. **Verify claims in code before replying.** User reports — even their
-   self-assessments — get checked against the actual implementation. This
-   found two real bugs during calibration (editor hardcoded to light mode;
-   Crawl4AI client sending no auth header). For upstream libraries use the
-   local checkouts from `CLAUDE.local.md` (esperanto, content-core,
-   podcast-creator, surreal-commands). State in the reply what was
-   *verified*, distinctly from what is opinion.
-
-5. **Check vision/decision alignment** against public records. PDR-001
-   (single-user first) and its kin are citable and load-bearing.
-
-## Phase 2 — Outcome proposal
-
-Vocabulary (from the essay's qualification stage, as exercised):
-
-| Outcome | When | Reply must include |
-|---|---|---|
-| **exploring** | Real, aligned problem; open solution space | Sharpening questions that actually shape the design |
-| **incubating** | Direction decided, *timing* open (waits on vision fit, capacity, or a champion) | The settled spec, what it waits on, "this Discussion stays the home" |
-| **accepted → graduated** | Someone will build it now: a builder (maintainer or champion) + closed spec | Issue(s) opened immediately — see graduation rules |
-| **parked until champion** | Valid but needs a community owner (e.g. packaging channels) | Explicit return condition + how to volunteer |
-| **combine** | Duplicate/facet of an existing theme | Link to the canonical home |
-| **answer** | Already exists / documented | The answer, plus where docs fell short |
-| **bug** | Reproducible defect | Graduate straight to a bug Issue |
-
-**Graduation is pull, not push** (ratified 2026-09-02). An Issue is born
-when someone is going to build it — never because the idea became clear.
-`ready` is a promise of execution; filling it with well-discussed items and
-no builder recreates the stale-backlog problem. A discussed-but-unscheduled
-idea is **incubating** and the Discussion remains its home. Exceptions that
-still graduate immediately: verified **bugs**, and small items the
-maintainer will do next.
-
-**Close on `answer`.** When the outcome is `answer` and the need has a
-better home (an existing Issue, upstream, or "not planned"), post the reply
-and close the Discussion as resolved (`closeDiscussion(reason: RESOLVED)`);
-an open thread with a final answer clutters the queue. Anyone can reopen
-with a new argument.
-
-**Close when graduated work lands** (ratified 2026-09-05). A thread whose
-needs have all either shipped or been routed elsewhere is done the moment
-the last fix is merged to `main` — do not wait for a versioned release.
-Post a closing reply that names the merged PR(s), says the change ships
-with the next release, and points testers at the `v1-dev` Docker image
-(rebuilt on every push to `main`), then close as resolved. Precedents:
-#1236 (editor bugs), #1243 (Crawl4AI token). Detecting this state is part
-of Phase 0: for every graduated Issue linked from an open thread, check
-whether it closed since the last run.
-
-**Graduation rules** (for `accepted → graduated` and `bug`):
-- Issue gets: Context (with Discussion origin link), Expected outcome,
-  Out of scope, Acceptance criteria, References. Label `ready` (+ `bug` when
-  applicable).
-- **Route upstream** when the fix lives in a library (content-core,
-  esperanto): open the upstream issue first, then the downstream
-  bump/docs issue referencing it, then the reply citing both.
-- A dependent downstream issue states "Depends on" explicitly.
-
-**Canonical discussions:**
-- Threshold: **3+ signals** on one theme → broaden an existing thread *in
-  place* (rename via `updateDiscussion`; precedents #1154, #1250, #1254).
-  At 2 signals, keep as a linked pair — no ceremony.
-- Consolidating old Issues into a canon: close **solution-proposals** with
-  an explanation comment (they become evidence); keep **execution umbrellas**
-  open (they graduate when the vision call is made). Respect pointers from
-  PDRs (#712 stays open because PDR-001 references it).
-- Referencing issues in a reply creates backlinks on their timelines — free
-  visibility, no mass edits needed.
-
-## Phase 3 — Draft reply
-
-Structure that worked, in order:
-
-1. Open warm and specific (acknowledge genuinely good behavior: fresh-eyes
-   framing, working prototypes, self-qualification, mockups).
-2. **Mirror the decomposition back, numbered**, marking verified facts as
-   verified ("I checked the code: ...").
-3. If the use case is ambiguous — or the decision owner needed it explained —
-   **play it back as a concrete worked example** ("Let me play this back —
-   correct me where I get it wrong: In March you have 12 papers...").
-4. Route each need to its home with links (canonical discussions, upstream
-   issues, decision records).
-5. Questions tailored to what actually shapes the design — not generic.
-6. Invitations matched to the author's **participation checkboxes**:
-   testers get test asks, implementers get building invites, design
-   volunteers get design questions.
-7. Close with `Status: **<outcome>**` plus a one-line summary of the routing.
-8. When the answer is **no**, say it in the first paragraph with the reasons
-   (e.g. "the runtime is about to change", "estimates for local models
-   don't hold") — never let a decline hide behind exploration questions.
-   Acknowledge real work (a prototype) without letting it change the answer.
-
-Honesty rules: no feature promises, no timelines ("no commitment on timing
-yet"); constraints stated with their reasons (link the PDR); "the door is
-deliberately kept open" beats false enthusiasm and beats silence.
-
-Style rules (owner feedback, 2026-08-16): no marketing filler or
-throat-clearing — never "Fair question, and it deserves a straight answer" /
-"Great idea!". Open by *answering*. Warmth comes from specificity
-(acknowledging a working prototype, a good decomposition), not from
-compliments about the question itself.
-
-## Phase 4 — Approval gate, then post
-
-**One decision at a time** (owner preference, 2026-09-05). After the
-Phase 0 ledger, present decisions sequentially — never a batch. Each one
-uses this fixed format, in the owner's language:
-
-1. **ID + title**
-2. **Resumo** — what the thread is, how it was decomposed, current status
-3. **Último movimento** — who did what, when; what changed since the last run
-   (a graduated Issue closing, an upstream release, a user answering)
-4. **Sugestão ou dúvida** — the proposed outcome, the full draft reply,
-   and every side action the package includes (Issues to open, renames,
-   closures); or the concrete question when the call is the owner's. When
-   offering options, label them (a)/(b)/(c) and say which one you recommend
-
-On approval, execute the whole package in the order below (side actions
-first, reply last), report the URLs, then present the next decision.
-Number them ("Decisão 2 de 4") so the owner knows the size of the session.
-After approval:
-
-- Write bodies to scratchpad files; post via GraphQL (`addDiscussionComment`,
-  `updateDiscussion` for renames) with `-F body=@file` — avoids shell
-  escaping.
-- `gh issue create --label ready --body-file ...`; `gh issue close N
-  --comment "$(cat file)"`.
-- Order matters when linking: create issues first, then post the reply with
-  real links.
-
-## Session close
-
-- Update the project memory (`open-contribution-workflow` memory file) with
-  new patterns, posture decisions, and queue state.
-- Report the scoreboard: discussions handled, outcomes by type, issues born,
-  bugs found via verification.
-- Surface skill-worthy learnings to the owner — this file evolves the same
-  way it was born: from practice.
diff --git a/.claude/skills/release/SKILL.md b/.claude/skills/release/SKILL.md
deleted file mode 100644
index 58da7432..00000000
--- a/.claude/skills/release/SKILL.md
+++ /dev/null
@@ -1,116 +0,0 @@
----
-name: release
-description: Orchestrate an Open Notebook release — changelog audit, risk-based A/B/C test matrix, Docker image gate (fresh + upgrade), fix loop via PRs, cut, publication with credits, retro. Use when preparing, testing, cutting or publishing a release.
----
-
-# Open Notebook Release Orchestrator
-
-You are conducting a release of Open Notebook, reproducing the process
-established in v1.11.0. The **source of truth for the process** is
-`.github/RELEASE_PROCESS.md` — read it first. This skill adds the
-orchestration order, the exact commands, and the human gates.
-
-**Ground rules for the whole run:**
-
-- The release happens in a **single session**. Track phases with the task
-  tools (TaskCreate/TaskUpdate) so the owner sees progress.
-- Every repo change goes through a **PR** (branch → PR → CI + cubic → merge).
-  Never push to main. Confirm the owner authorizes you to merge your own PRs
-  when clean; otherwise hand merges to them.
-- Interact in the owner's language; write code, commits and docs in English.
-- Read `${CLAUDE_SKILL_DIR}/gates.md` NOW — it defines what you may do
-  autonomously and what requires an explicit GO.
-
-## Phase 0 — Scope and changelog audit
-
-1. `git fetch --tags` · find the last release tag and `gh release list`.
-2. List everything merged since: `git log <last-tag>..origin/main --oneline`.
-3. Audit the CHANGELOG `[Unreleased]` section against that list. Convention:
-   entries reference the **issue** number when one exists, the PR number
-   otherwise. Close every gap via PR.
-4. Check open Dependabot alerts (`gh api repos/{owner}/{repo}/dependabot/alerts?state=open`)
-   — a security-themed release with open highs is incoherent. Triage them
-   into the fix loop or document acceptance.
-
-## Phase 1 — Risk-based test matrix
-
-Read `${CLAUDE_SKILL_DIR}/test-matrix.md` and instantiate it against the
-actual release diff. Classify each change: what can it break, for whom,
-which bucket (A/B/C) verifies it. **Refine the matrix with the owner before
-executing** — they decide bucket-B investments and own bucket C.
-
-## Phase 2 — Execute bucket A
-
-Run in parallel where possible:
-
-- `uv run pytest tests/` · `ruff check .` · `uv run python -m mypy .` (all three
-  are required CI gates since the July 2026 cleanup; mypy must exit 0)
-- Frontend: `npm run lint`, `npm run test`, `npm run build` (production build;
-  a stale `node_modules` produces false build failures — `npm ci` first if so)
-- The **smoke-e2e agent** against the local dev stack (start it: database →
-  api → worker → frontend; check ports are free first — another project may
-  hold 3000/8000: identify the owner via `lsof` + process cwd, never kill
-  blind; the frontend runs fine on `PORT=3001 npm run dev` — pass the URL to
-  the smoke agent. Also note the dev `.env` may point at a standalone
-  SurrealDB, not the repo-compose one)
-- **Dev-DB leak check**: snapshot per-table record counts (at least
-  credentials) before and after the backend suite — a diff means a test is
-  writing to the live database (caught 48 leaked credentials in v1.12.0)
-- The **targeted probes** from the matrix (legitimate-use regression checks
-  for security changes)
-
-## Phase 3 — Image gate + bucket C kickoff
-
-- `make docker-build-local`, then `make release-test TAG=<ver> OLD_TAG=<prev>`
-  (pull the genuine previous tag first — see gotchas in RELEASE_PROCESS.md).
-- Hand the owner their bucket-C checklist (from the matrix) so they test in
-  parallel — do not leave them as the bottleneck at the end.
-
-## Phase 4 — Fix loop
-
-For each finding: reproduce → root-cause → focused PR with regression tests →
-CI + cubic → merge (per gates.md). Apply the re-test policy from
-RELEASE_PROCESS.md after each merge. Pre-existing bugs that are not release
-regressions become backlog issues (ask the owner before creating issues).
-Verify UI fixes in the real browser (Playwright) before opening the PR.
-
-## Phase 5 — Cut
-
-1. Cut PR off updated main: bump `pyproject.toml`, date the changelog section.
-2. After merge: `make tag`.
-3. Rebuild the image from final main and **re-run the image gate** against it.
-4. Push version images via CI:
-   `gh workflow run build-and-release.yml --ref main -f push_latest=false`
-   and watch the run. (Local `make docker-push` needs `docker login`.)
-5. Verify the pushed manifests (see `${CLAUDE_SKILL_DIR}/runbook.md`).
-
-## Phase 6 — Pushed-image verification (human gate)
-
-Offer the owner a browsable RC stack on this machine:
-`make release-stack TAG=<ver> [DUMP=<dump>]` — with a copy of their dev data
-for realism (export command in the runbook). Support them through it; findings
-go back to Phase 4. **Do not proceed without their GO.**
-
-## Phase 7 — Publish (human gate)
-
-1. Draft release notes per `${CLAUDE_SKILL_DIR}/comms-templates.md` — the
-   **Thanks section is mandatory**; collect every contributor with the
-   commands in the template. Show the owner for review.
-2. With their explicit GO: `gh release create v<ver> --title ... --notes-file ... --latest`.
-   Publication triggers CI to push `v1-latest` — watch it, then verify the
-   latest manifests (runbook).
-3. Mark shipped issues with the `released` label (ask before mass-labeling).
-4. Deliver the Discord post text (the owner posts it).
-
-## Phase 8 — Cleanup
-
-`make release-stack-down`, remove temp dumps/data dirs, stop watchers, ensure
-`git status` is clean on main and no test containers remain.
-
-## Phase 9 — Retro (always runs)
-
-Ask the owner: *"what should improve in this process?"* — and apply the
-accepted improvements **now**: edit `.github/RELEASE_PROCESS.md`,
-`scripts/release-test/*`, and this skill's files while context is fresh.
-New gotchas discovered during the run go into RELEASE_PROCESS.md's Known
-Gotchas via the same PR flow.
diff --git a/.claude/skills/release/comms-templates.md b/.claude/skills/release/comms-templates.md
deleted file mode 100644
index c474df8a..00000000
--- a/.claude/skills/release/comms-templates.md
+++ /dev/null
@@ -1,62 +0,0 @@
-# Communication Templates
-
-Reference implementation: the v1.11.0 release
-(https://github.com/lfnovo/open-notebook/releases/tag/v1.11.0).
-
-## GitHub release notes structure
-
-```
-**We recommend all users upgrade.** <one-line verdict: what this release is,
-and that it was validated by the release test process>
-
-## 🔒 Security hardening        (if applicable — lead with it)
-## ✨ New features               (user language, issue refs)
-## ⚡ Performance
-## 🐛 Notable fixes
-## ⚠️ Behavior changes for self-hosters
-    <anything that can require a config tweak on upgrade — numbered,
-     each with the escape hatch (env var, override file, doc link)>
-## 🙏 Thanks                     (MANDATORY — see below)
-Full details in the [CHANGELOG](.../CHANGELOG.md).
-```
-
-Tone: honest and specific. Say what protections do AND what stays supported
-(e.g. "private IPs/localhost remain fully supported for self-hosted Ollama").
-
-## 🙏 Thanks — collecting contributors (never skip, never miss anyone)
-
-1. Commit authors in the release range:
-   `git log <last-tag>..<tag> --pretty='%an <%ae>' | sort | uniq -c | sort -rn`
-2. Map every non-obvious name to a GitHub handle via their PR:
-   `gh pr view <n> --json author --jq .author.login`
-   (PR list: `gh pr list --state merged --limit 1000 --search "merged:>=<prev-tag-date>" --json number,author,mergedAt,title`
-   — filter by merge date server-side; a small `--limit` caps the list *before*
-   any date filtering and silently drops contributors. Then exclude PRs merged
-   before the previous tag — beware PRs merged before the
-   previous tag was cut appearing in date filters.)
-3. One bullet per contributor: **@handle** — what they shipped, with refs.
-4. Close with a collective thank-you to issue reporters.
-5. Bots (dependabot) are excluded.
-
-## Discord announcement skeleton
-
-```
-📢 Open Notebook v<X.Y.Z> is out — <hook: why upgrade>!
-
-<2-3 lines: the headline theme (e.g. security pass) + feature highlights
-as a one-line · separated list>
-
-⚡ <performance line, if any>
-
-🧪 <one line on how it was tested — users trust releases more when they
-    know fresh-install + upgrade were tested on the real images>
-
-⚠️ Self-hosters: check "Behavior changes" in the release notes.
-
-📝 https://github.com/lfnovo/open-notebook/releases/tag/v<X.Y.Z>
-🐳 docker pull lfnovo/open_notebook:v1-latest
-```
-
-Consider crediting contributors on Discord too — communities love it.
-
-The owner posts to Discord; deliver final text, don't post.
diff --git a/.claude/skills/release/gates.md b/.claude/skills/release/gates.md
deleted file mode 100644
index d28da6e4..00000000
--- a/.claude/skills/release/gates.md
+++ /dev/null
@@ -1,44 +0,0 @@
-# Gates — what needs a human, what doesn't
-
-The contract that made v1.11.0 safe. When in doubt, ask — a blocked action is
-feedback, not an obstacle to route around.
-
-## You may do autonomously (once the release run is underway)
-
-- Run any test, build, probe or analysis; start/stop local dev services
-- Create branches, commits, and open PRs
-- Spawn subagents (smoke-e2e, investigation, fixes)
-- Build/pull Docker images locally; run the release-test harness and RC stack
-- Dispatch the *Build and Release* CI workflow with `push_latest=false`
-  (version tags only — this is the agreed pre-verification push)
-
-## Requires explicit, in-session authorization from the owner
-
-| Action | Why |
-|---|---|
-| Merging PRs you authored | two-party review; ask once per session ("merge when clean?") and honor the answer |
-| Publishing the GitHub release | public, triggers `v1-latest` — the point of no return |
-| Anything that pushes `v1-latest` | users receive it immediately |
-| Creating GitHub issues | external artifacts the owner may not want |
-| Mass-labeling issues (`released`) | bulk modification of shared state |
-| Touching the owner's dev data | only ever work on **copies** (export/import); never mount or mutate originals |
-
-## Never
-
-- Push directly to main
-- Publish a prerelease/release to work around a blocked step
-- Mark a phase complete with failing checks ("GO with known issues is worse
-  than a NO-GO that catches problems before users do")
-
-## Re-test policy after each fix merge
-
-- Cheap suite (pytest + lint + frontend tests/build): **always**
-- smoke-e2e / image gate: only if the fix touches what they cover
-- Owner's manual verification: only if the fix touches what they verified
-- The final image gate (Phase 5.3) always runs on the exact release artifact
-
-## GO/NO-GO
-
-A release is GO when: bucket A fully green · image gate green (fresh +
-upgrade) · bucket C signed off by the owner · no open release-regression
-findings · Dependabot highs resolved or explicitly accepted.
diff --git a/.claude/skills/release/runbook.md b/.claude/skills/release/runbook.md
deleted file mode 100644
index cbc2a0e0..00000000
--- a/.claude/skills/release/runbook.md
+++ /dev/null
@@ -1,112 +0,0 @@
-# Runbook — exact commands for the cut-and-publish phases
-
-Gotchas live in `.github/RELEASE_PROCESS.md` → Known Gotchas. This file is
-the command reference.
-
-## Version images via CI (Phase 5)
-
-```bash
-gh workflow run build-and-release.yml --ref main -f push_latest=false
-gh run list --workflow=build-and-release.yml --limit 1     # grab the id
-gh run watch <run-id> --exit-status                        # background it
-```
-
-## Verify pushed manifests
-
-```bash
-for ref in lfnovo/open_notebook:<ver> lfnovo/open_notebook:<ver>-single ghcr.io/lfnovo/open-notebook:<ver> ghcr.io/lfnovo/open-notebook:<ver>-single; do
-  docker manifest inspect "$ref" | python3 -c "import json,sys; d=json.load(sys.stdin); print(sorted(set(m['platform']['architecture'] for m in d.get('manifests',[]) if m['platform']['architecture']!='unknown')))"
-done
-# expect ['amd64', 'arm64'] for all four (`make docker-push` publishes both
-# registries × {plain, -single}); repeat with v1-latest and v1-latest-single
-# on both registries after publication
-```
-
-## RC stack with a copy of the owner's dev data (Phase 6)
-
-```bash
-# 1. Find which SurrealDB instance dev actually uses — read SURREAL_URL in .env
-#    (multiple instances may run locally; the repo-compose one on :8000 may NOT
-#    be it), and note SURREAL_DATABASE.
-# 2. Consistent export from the RUNNING instance (originals untouched):
-docker exec <that-container> /surreal export --conn http://localhost:8000 \
-  --user root --pass root --ns open_notebook --db <that-db> /dev/stdout > /tmp/dev-dump.surql
-# 3. Boot (rc-stack.sh docker-pulls the pushed tag by default, so a local
-#    build can't shadow the registry artifact):
-make release-stack TAG=<ver> DUMP=/tmp/dev-dump.surql
-#    To exercise the opt-in heavy runtimes (Docling + Crawl4AI) on the pushed
-#    image with this data, append the flag (first boot installs them, ~minutes):
-#    bash scripts/release-test/rc-stack.sh up <ver> /tmp/dev-dump.surql --with-runtimes
-# 4. Sanity: credentials decrypt (uses the dev encryption key from .env):
-curl -s http://localhost:15055/api/credentials | python3 -c "import json,sys; c=json.load(sys.stdin); print(len(c), 'creds,', sum(1 for x in c if x.get('decryption_error')), 'decrypt errors')"
-# 5. Opt-in gating is only meaningful on this fresh image (a dev venv may have
-#    the runtimes installed out-of-band): GET /api/capabilities should report
-#    both false until --with-runtimes installs them.
-```
-
-Remind the owner: in-container credentials pointing at host services need
-`http://host.docker.internal:<port>` (Ollama, LM Studio).
-
-## Publish (Phase 7 — after explicit GO)
-
-```bash
-gh release create v<ver> --title "v<ver> — <theme>" --notes-file <notes.md> --latest
-# publication (non-prerelease) triggers the workflow that pushes v1-latest
-gh run list --workflow=build-and-release.yml --limit 1 && gh run watch <id> --exit-status
-```
-
-## Re-cut after a post-tag fix (Phase 4 ↔ 5 loop)
-
-When a blocker is found *after* the tag exists but *before* publication (no
-GitHub release, no `v1-latest` yet), the fix goes through the normal PR flow,
-then the release is re-cut. `pyproject.toml` stays at the same version — the tag
-moves to the new commit. Exact sequence:
-
-```bash
-# 1. Fix merged to main; sync and confirm the version is unchanged
-git checkout main && git pull && grep '^version' pyproject.toml   # still <ver>
-
-# 2. Cheap suite (re-test policy) before re-tagging
-uv run pytest tests/ -q && ruff check .        # + frontend if it was touched
-
-# 3. Move the tag: delete local + remote, recreate on the new HEAD
-git tag -d v<ver>
-git push origin :refs/tags/v<ver>
-make tag                                       # recreates v<ver> on HEAD
-git rev-parse v<ver> && git rev-parse HEAD      # must match
-
-# 4. Rebuild the image and RE-RUN THE IMAGE GATE on the re-cut artifact
-docker rmi lfnovo/open_notebook:<ver> lfnovo/open_notebook:local 2>/dev/null
-make docker-build-local
-make release-test TAG=<ver> OLD_TAG=<prev>     # fresh + upgrade + probes
-
-# 5. Re-push the version images from the fixed commit (overwrites the stale ones)
-gh workflow run build-and-release.yml --ref main -f push_latest=false
-#    then watch the run and re-verify the <ver> manifests (section above)
-
-# 6. Re-boot the RC stack on the fresh pushed image for the owner's re-GO
-make release-stack TAG=<ver> DUMP=<dump>
-```
-
-Only after the owner re-GOes does publication proceed. The published-release CI
-run promotes whatever the version tag/images currently are to `v1-latest`, so a
-skipped rebuild here means users get the un-fixed artifact.
-
-## Label shipped issues (after owner OK)
-
-```bash
-# only actual closed ISSUES (changelog refs mix issues and PR numbers):
-for n in <numbers>; do
-  STATE=$(gh api "repos/lfnovo/open-notebook/issues/$n" --jq 'if .pull_request then "pr" else .state end')
-  [ "$STATE" = "closed" ] && gh issue edit "$n" --add-label released
-done
-```
-
-## Cleanup (Phase 8)
-
-```bash
-make release-stack-down
-rm -f /tmp/dev-dump.surql; rm -rf /tmp/onrel-*
-docker ps --format '{{.Names}}' | grep onrel   # must be empty
-git status --short                              # must be clean on main
-```
diff --git a/.claude/skills/release/test-matrix.md b/.claude/skills/release/test-matrix.md
deleted file mode 100644
index f81b3902..00000000
--- a/.claude/skills/release/test-matrix.md
+++ /dev/null
@@ -1,66 +0,0 @@
-# Test Matrix Template — change → risk → bucket
-
-Instantiate against the real release diff. The unit of planning is the
-**risk**, not the feature: for each change ask *what can this break, and for
-whom?* Security hardening gets the inverse question too: *does the protection
-break legitimate use?* (v1.11.0 examples: SSRF guard vs. self-hosted Ollama on
-localhost; body-size cap vs. big uploads; Host validation vs. reverse proxies).
-
-## Bucket A — automated now (run all of it)
-
-Checklist design rule (v1.12.0 retro): before putting an error-path item on
-the bucket-C checklist ("X unconfigured should show an error"), verify in the
-provisioning code that it IS an error — transformation and tools defaults
-deliberately fall back to the chat default (`open_notebook/ai/models.py`).
-
-| Check | Command / tool |
-|---|---|
-| Backend suite | `uv run pytest tests/` |
-| Lint & types | `ruff check .` · `uv run python -m mypy .` (both are required CI gates; mypy runs at 0 errors — `uv sync --extra dev` first if mypy is missing locally) |
-| Frontend | `npm run lint` · `npm run test` · `npm run build` (run `npm ci` first if deps changed) |
-| Full happy path | smoke-e2e agent on the local dev stack (API + Playwright UI) |
-| Dependency audit | Dependabot alerts + `npm audit` |
-| Targeted probes | see below — pick per matrix |
-
-### Probe library (extend per release)
-
-Regression-of-legitimate-use probes proven in v1.11.0 — adapt endpoints/values:
-
-- Upload just under / just over the body cap → accepted / 413
-- Source ingestion of a `localhost` URL → ACCEPTED (self-hosted is legitimate);
-  link-local/metadata URL → rejected with a clear 4xx
-- Frontend `/config` with clean vs. malformed `Host` → sane URL / fallback, never 5xx
-- SSE endpoints stream progressively (first byte ≪ total time via `curl -N -w`)
-- CORS preflight with and without `CORS_ORIGINS` set
-- Every enum/allowlisted query param exercised with **each** valid value +
-  one invalid (v1.11.0: `sort_by=title` 500'd while all siblings passed —
-  test the whole surface, not one sample)
-- Oversized array inputs and unknown-provider payloads → clean 422, not 500
-- Anything an LLM or UI writes through: verify the full path in a real
-  browser, not just the API (mirror-bug lesson: frontend dropped the field
-  AND the API ignored null — only end-to-end caught it)
-
-## Bucket B — automatable with investment (decide with the owner)
-
-Standing candidates; the image gate graduated from here to `make release-test`:
-
-- New end-to-end scenarios for this release's features
-- CI-ification of any probe that proved valuable twice
-- Anything the owner keeps having to verify by hand
-
-Decision rule: build it if it compounds for future releases and costs < the
-manual verification it replaces; otherwise verify manually this once and note
-it here for next time.
-
-## Bucket C — the release owner (start EARLY, in parallel)
-
-- Provider connection tests with **real credentials** (prioritize providers
-  whose code changed); one discover-models; one chat per main provider
-- One podcast with real TTS on a dense notebook
-- Visual/UX tour (~10 min) of every UI change in the release, plus dark mode
-  sampling
-- Phase 6: the pushed image via `make release-stack`
-
-Deliver this as a concrete checklist with expected outcomes, tailored to what
-the release actually touched and to the credentials the owner actually has
-(`GET /api/credentials` tells you).
diff --git a/.github/RELEASE_PROCESS.md b/.github/RELEASE_PROCESS.md
index fa59f6de..3aa5f99f 100644
--- a/.github/RELEASE_PROCESS.md
+++ b/.github/RELEASE_PROCESS.md
@@ -161,7 +161,7 @@ accepted improvements immediately — update this document, the scripts under
   `v1-latest`) and a blocker is found in bucket C, the tag must move to the new
   commit AND the version images must be rebuilt — a stale tag or stale registry
   image will otherwise be what publication promotes to `v1-latest`. The exact
-  sequence is in `runbook.md` → "Re-cut after a post-tag fix" (v1.14.0 lesson).
+  sequence is in `.maintainer/release/runbook.md` → "Re-cut after a post-tag fix" (v1.14.0 lesson).
 - **RC stack on non-default ports needs `API_URL`** or the browser talks to
   `host:5055` — on a dev machine that is the development API (data crossover).
   `rc-stack.sh` sets it; remember this for any custom setup.
diff --git a/.gitignore b/.gitignore
index ea9aa2e4..d97839cd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -154,3 +154,7 @@ docker-compose.override.yml
 # Local QA/debug artifacts
 screenshot-*.png
 history.txt
+
+# oss-maintainer local state
+.maintainer/profile.local.toml
+.maintainer/state/
diff --git a/.maintainer/PROFILE.md b/.maintainer/PROFILE.md
new file mode 100644
index 00000000..16cc367e
--- /dev/null
+++ b/.maintainer/PROFILE.md
@@ -0,0 +1,37 @@
+# Maintainer profile — scope and tone
+
+## What we own
+
+- This repository: the FastAPI backend (`api/`, `open_notebook/`), the surreal-commands
+  worker (`commands/`), the prompt templates (`prompts/`), the Next.js frontend (`frontend/`),
+  the SurrealDB schema and migrations, the Docker images (regular and `-single`) and the
+  `docker-compose` files, the documentation under `docs/`.
+- The product decisions recorded in `VISION.md` and `docs/7-DEVELOPMENT/decisions/`.
+
+## What we do not own
+
+- Upstream libraries with their own repositories: `content-core` (extraction),
+  `esperanto` (provider abstraction), `podcast-creator`, `surreal-commands`,
+  `surreal-basics`. A defect that lives there gets the `upstream` label plus the library's
+  label (`content-core`, `esperanto`, `podcast-creator`); the fix is an upstream issue first,
+  then a bump here.
+- SurrealDB itself, the AI providers' services and their pricing or availability.
+- Community packaging channels (Unraid, Helm charts, Podman recipes, desktop wrappers): valid
+  ideas that wait for a champion.
+- The third-party "Installation Assistant" GPT linked from the issue forms.
+
+## Tone in public text
+
+- Answer first; no filler, no marketing, no "great question". Warmth comes from specificity
+  (acknowledging a working prototype, a good decomposition), never from compliments.
+- Say what was verified in the code, separately from opinion ("I checked the code: …").
+- No promises of features or timelines ("no commitment on timing yet"); constraints come with
+  their reasons and a link to the decision record.
+- A "no" is said in the first paragraph, with the reasons; it never hides behind questions.
+- Everything posted publicly is in English.
+
+## Never cite in public
+
+- `.tmp-context/`, `CLAUDE.local.md`, private maintainer drafts and internal plans.
+- Unpublished vision specifics: "aligns with where the product is heading" is the most that
+  can be said. Public anchors are `VISION.md`, the decision records, open issues and PRs.
diff --git a/.maintainer/README.md b/.maintainer/README.md
new file mode 100644
index 00000000..995fcdc0
--- /dev/null
+++ b/.maintainer/README.md
@@ -0,0 +1,26 @@
+# .maintainer
+
+Maintainer profile read by the [oss-maintainer](https://github.com/lfnovo/oss-maintainer)
+plugin for Claude Code and Codex. It holds what the maintenance workflows of this repository
+need and cannot derive. It is not a list of people; see
+[docs/7-DEVELOPMENT/maintainer-guide.md](../docs/7-DEVELOPMENT/maintainer-guide.md).
+
+Each fact has one home: executable commands are documented in the `Makefile` or `AGENTS.md`
+and `profile.toml` invokes them by their canonical form (the same invocations CI runs — a gate
+never mutates the tree, so the validator runs `ruff check .` without `--fix`) rather than
+re-implementing them; `profile.toml` holds the fields the plugin reads; `release/runbook.md`
+holds the release sequence and policy; `.github/RELEASE_PROCESS.md` holds the human release
+process and its known gotchas; `gotchas.md` holds the lessons outside the release. Other files
+link to those instead of repeating them.
+
+| File | Purpose |
+|---|---|
+| `profile.toml` | the fields the plugin reads (schema v1) |
+| `PROFILE.md` | scope, tone, what must never be cited in public |
+| `gotchas.md` | fragile areas and known issues, fed by retros |
+| `triage.md` | triage rules specific to this repository |
+| `release/runbook.md` | the release sequence and policy |
+| `release/test-matrix.md` | the recurring risks, seed of each release's coverage table |
+| `smoke/journey.md` | the product journey the smoke test executes |
+| `profile.local.toml` | gitignored local preferences (upstream checkouts, URLs) |
+| `state/` | gitignored run records and reports |
diff --git a/.maintainer/gotchas.md b/.maintainer/gotchas.md
new file mode 100644
index 00000000..24e2d279
--- /dev/null
+++ b/.maintainer/gotchas.md
@@ -0,0 +1,26 @@
+# Gotchas
+
+Fragile areas and lessons learned. Retros append here; a gotcha that holds up three times
+graduates to the process document or to a test.
+
+Release-specific gotchas (version bump hygiene, re-cut after a post-tag fix, RC stack ports,
+local tags shadowing pushed images, opt-in runtime gating) have their home in
+[`.github/RELEASE_PROCESS.md` → Known Gotchas](../.github/RELEASE_PROCESS.md#known-gotchas);
+do not duplicate them here.
+
+- **The backend suite runs against the live dev database** when a developer `.env` is loaded.
+  Snapshot per-table counts (at least `credential`) before and after; a diff means a test
+  leaks writes (48 leaked credentials caught in v1.12.0).
+- **Search and Ask are global by design**: `POST /api/search` and `/api/search/ask/simple`
+  have no `notebook_id`; Pydantic silently drops unknown fields, so a scoped-looking call
+  is an unscoped one. Scoping to selected notebooks landed in #1331 — check the request
+  models before assuming either behavior.
+- **Provider aliases are mapped in more than one place.** `anthropic_compatible` is mapped to
+  Esperanto's `anthropic` in `open_notebook/ai/models.py`; any resolver that bypasses
+  `ModelManager.get_model()` (podcasts did, #1347) must use the shared helper or it breaks.
+- **Async jobs need the worker.** Podcasts, embeddings and source processing queue forever
+  without `make worker-start`; a "hangs" report with no worker log is usually this.
+- **Containerized app + host services**: credentials pointing at Ollama or LM Studio on the
+  host need `http://host.docker.internal:<port>`, not `localhost`.
+- **Dev-machine ports may belong to other projects**: check who owns 3000/5055/8000 before
+  starting or killing anything; the frontend runs fine on `PORT=3001 npm run dev`.
diff --git a/.maintainer/profile.toml b/.maintainer/profile.toml
new file mode 100644
index 00000000..f5e28882
--- /dev/null
+++ b/.maintainer/profile.toml
@@ -0,0 +1,116 @@
+# .maintainer/profile.toml — profile for the oss-maintainer plugin (schema v1)
+# Every path is relative to the repository root. Values marked TODO block the capability
+# that needs them; values starting with "CONFIRM:" are detected proposals awaiting confirmation.
+schema_version = 1
+
+[project]
+name = "Open Notebook"
+repo = "lfnovo/open-notebook"
+artifact = "app-docker"
+commands_doc = "AGENTS.md"                  # canonical commands: AGENTS.md → Commands, Makefile
+
+# Backend validator: the three required CI gates (AGENTS.md → Commands). `ruff check .` without
+# `--fix`, as .github/workflows/test.yml runs it: a gate never mutates the tree.
+[commands.validator]
+run = "uv run pytest tests/ && ruff check . && uv run python -m mypy ."
+cwd = "."
+timeout = "20m"
+
+# Frontend gate (lint, unit tests, production build), as AGENTS.md documents it.
+[commands.frontend]
+run = "npm run lint && npm run test && npm run build"
+cwd = "frontend"
+timeout = "20m"
+
+[contributing]
+conventions = "docs/7-DEVELOPMENT/contributing.md"   # root CONTRIBUTING.md only points here
+
+[release]
+process_doc = ".github/RELEASE_PROCESS.md"  # the human process: model, confidence process, cut, gotchas
+change_delivery = "pr"                      # every repo change goes through a PR; never push to main
+versioning = "semver"
+changelog = "CHANGELOG.md"
+version_files = ["pyproject.toml"]
+lock_command = "uv lock"           # uv.lock records the package's own version (line 2053)
+# First action that can start public distribution: the CI workflow pushes the <version> and
+# <version>-single tags to both registries (public, but v1-latest untouched). Publication of
+# the GitHub release is what promotes v1-latest — see latest_promotion.
+distribution_trigger = "gh workflow run build-and-release.yml --ref main -f push_latest=false"
+publish_workflow = ".github/workflows/build-and-release.yml"
+latest_promotion = "publishing a non-prerelease GitHub release (gh release create v<ver> --latest) re-runs build-and-release.yml, which adds the v1-latest and v1-latest-single tags on both registries; manual equivalent: the same workflow with push_latest=true"
+notes_source = "CHANGELOG.md"
+consumer_surfaces = [
+  "REST API under /api (the UI is one client; integrations are others)",
+  "environment variables and config keys (docs/5-CONFIGURATION/environment-reference.md)",
+  "docker-compose files, image variants (regular, -single) and the v1-latest / v1-dev tags",
+  "SurrealDB schema and migrations (upgrades run them on boot)",
+  "transformation, prompt-template and command extension points",
+]
+
+[release.gates]
+# What each gate means: .maintainer/release/runbook.md
+mandatory = ["validator", "frontend", "image-gate", "owner-checks", "notes-approved", "security-alerts"]
+optional = []
+alerts_policy = "open Dependabot highs are resolved or explicitly accepted by the owner before GO"
+merge_own_prs = "ask-once-per-session"      # ask once per session ("merge when clean?") and honor the answer
+
+[artifacts.docker]
+registries = ["lfnovo/open_notebook", "ghcr.io/lfnovo/open-notebook"]
+variants = ["", "-single"]                  # runtime target and --target single, same Dockerfile
+platforms = ["amd64", "arm64"]
+dev_tag = "v1-dev"                          # rebuilt from main on every push (build-dev.yml)
+gate = "make docker-build-local && make release-test TAG=<ver> OLD_TAG=<prev>"
+identity = "manifest-digest"
+
+[labels]                                    # canonical -> real
+needs_triage = "needs-triage"               # referenced by the maintainer guide and the issue forms; recreate if missing
+needs_design = "needs-design"
+needs_vision = "needs-vision"
+awaiting_demand = "awaiting-demand"         # not part of the curated set; recognised only, never assigned
+ready = "ready"
+released = "released"
+bug = "bug"
+
+[triage]
+preset = "maturity-ladder"
+assignable = ["close", "needs-design", "ready", "needs-info"]
+extra_states = { needs-info = "Waiting on the reporter to confirm or provide more information" }
+rules = ".maintainer/triage.md"
+batch_approval = "one-at-a-time"
+
+[review]
+docs = [
+  "AGENTS.md",
+  "VISION.md",
+  "docs/7-DEVELOPMENT/architecture.md",
+  "docs/7-DEVELOPMENT/design-principles.md",
+  "docs/7-DEVELOPMENT/code-standards.md",
+  "docs/7-DEVELOPMENT/decisions/README.md",
+]
+reviewers = ["cubic"]                       # findings are hypotheses to verify, never verdicts
+
+[discussions]
+batch_approval = "one-at-a-time"
+categories = { ideas = "DIC_kwDONDsQ184CjkD_", feedback-requests = "DIC_kwDONDsQ184DBrfp", q-a = "DIC_kwDONDsQ184CjkD-", general = "DIC_kwDONDsQ184CjkD9", announcements = "DIC_kwDONDsQ184CjkD8" }
+regenerate = "gh api graphql -f query='{ repository(owner: \"lfnovo\", name: \"open-notebook\") { discussionCategories(first: 20) { nodes { id name } } } }'"
+public_anchors = ["VISION.md", "docs/7-DEVELOPMENT/decisions/README.md", "docs/7-DEVELOPMENT/contributing.md"]
+never_cite = [".tmp-context/", "CLAUDE.local.md", "private maintainer drafts", "unpublished vision specifics"]
+graduation = "pull"                         # an Issue is born when someone will build it (ratified 2026-09-02)
+close_on = ["answer", "graduated-work-landed"]
+
+[smoke]
+api_url = "http://localhost:5055"
+frontend_url = "http://localhost:3000"
+journey = ".maintainer/smoke/journey.md"
+mandatory_surfaces = ["api", "ui"]
+report_path = ".maintainer/state/smoke-report.md"
+poll_interval = "5s"
+step_timeout = "5m"
+
+[comms]
+owner_language = "pt-BR"
+public_language = "en"
+agent_attribution = "none"
+
+[channels]
+announce = ["discord"]                      # texts are delivered to the owner, never posted by a skill
diff --git a/.maintainer/release/runbook.md b/.maintainer/release/runbook.md
new file mode 100644
index 00000000..62fc4774
--- /dev/null
+++ b/.maintainer/release/runbook.md
@@ -0,0 +1,160 @@
+# Release runbook
+
+The sequence and the policy of a release of this repository, in one place. The plugin's
+`release` skill supplies the steps and the gates; `profile.toml` holds the executable
+references (`[commands.validator]`, `[commands.frontend]`, `[artifacts.docker].gate`,
+`[release].distribution_trigger`); this file holds what those fields cannot express: order,
+environment, manual steps, exact command sequences and the reasons behind them. The human
+process and its known gotchas live in [`.github/RELEASE_PROCESS.md`](../../.github/RELEASE_PROCESS.md)
+(designed in [ADR-005](../../docs/7-DEVELOPMENT/decisions/ADR-005-release-confidence-process.md));
+this file does not repeat them.
+
+## Policy
+
+- A release happens in a **single session**, phase by phase, with the owner seeing progress.
+- Every repository change goes through a **PR** (branch → PR → CI + cubic → merge). Never push
+  to `main`. Merging own PRs: ask once per session and honor the answer (`merge_own_prs`).
+- Autonomous: tests, builds, probes, local services, branches, commits, PRs, local image
+  builds, the image gate, the RC stack, and dispatching *Build and Release* with
+  `push_latest=false` (version tags only — the agreed pre-verification push).
+- Explicit in-session GO required: publishing the GitHub release (the point of no return —
+  it promotes `v1-latest`), anything else that moves `v1-latest`, creating issues, mass
+  labeling (`released`), touching the owner's dev data (copies only, never originals).
+- Never: publish a prerelease or release to route around a blocked step; mark a phase
+  complete with failing checks ("GO with known issues is worse than a NO-GO").
+- **Re-test policy after each fix merge**: the cheap suite (validator + frontend) always;
+  smoke-e2e and the image gate only if the fix touches what they cover; the owner's manual
+  checks only if the fix touches what they verified; the final image gate always runs on the
+  exact release artifact.
+- **GO** when: validator and frontend green · image gate green (fresh + upgrade) · owner's
+  checks signed off · release notes approved · no open release-regression findings ·
+  Dependabot highs resolved or explicitly accepted.
+
+## Validate
+
+- Canonical validator and mandatory checks: `[commands.validator]`, `[commands.frontend]`,
+  `[release.gates].mandatory`. Run `uv sync --group dev` first if mypy is missing locally;
+  `npm ci` in `frontend/` if dependencies changed (a stale `node_modules` fakes build failures).
+- Bucket A also runs the **smoke-e2e** skill against the local dev stack (database → api →
+  worker → frontend; see `[smoke]`) and the **dev-DB leak check** (per-table counts before
+  and after the backend suite).
+- Artifact gate: `[artifacts.docker].gate`, built from the candidate commit.
+  `docker-build-local` tags with the current `pyproject.toml` version, so `docker pull` the
+  genuine previous tag before the upgrade scenario.
+- Environment or credentials the checks need (names only, never values):
+  - `.env` with `OPEN_NOTEBOOK_ENCRYPTION_KEY` and a `SURREAL_URL` (check which local
+    SurrealDB it points at), at least one provider credential with chat + embedding defaults
+  - Docker with buildx; `docker login` on both registries only for the local push fallback
+  - `gh` authenticated with `workflow` scope (dispatching *Build and Release*)
+
+## Owner's manual checks
+
+Delivered as a concrete checklist tailored to what the release touched and to the
+credentials the owner has (`GET /api/credentials` tells you). Standing items:
+
+- Provider connection tests with **real credentials** (prioritize providers whose code
+  changed); one discover-models; one chat per main provider.
+- One podcast with real TTS on a dense notebook.
+- Visual/UX tour (~10 min) of every UI change, plus dark-mode sampling.
+- The pushed image on the RC stack (see *Verify from the registry*).
+
+Verify error-path items against the provisioning code before listing them: transformation
+and tools defaults deliberately fall back to the chat default (`open_notebook/ai/models.py`).
+
+## Cut
+
+- The cut is the **last** step, on its own branch, committed immediately: bump
+  `pyproject.toml`, run `[release].lock_command`, date `[Unreleased]` as `[<ver>] - <date>`,
+  open the cut PR. Never carry an uncommitted bump across branches.
+- After merge: `make tag` (creates and pushes `v<ver>` from `pyproject.toml`).
+
+## Publish, only after the GO
+
+- Trigger: `[release].distribution_trigger` — pushes `<ver>` and `<ver>-single` to Docker
+  Hub and GHCR (both arches). Watch it:
+
+```bash
+gh run list --workflow=build-and-release.yml --limit 1     # grab the id
+gh run watch <run-id> --exit-status
+```
+
+- Then verify from the registry (next section) and, on the owner's re-GO, promote:
+
+```bash
+gh release create v<ver> --title "v<ver> — <theme>" --notes-file <notes.md> --latest
+# publication (non-prerelease) re-runs the workflow, which pushes v1-latest and v1-latest-single
+gh run list --workflow=build-and-release.yml --limit 1 && gh run watch <id> --exit-status
+```
+
+- Release notes follow `.github/RELEASE_PROCESS.md` → Communication (verdict, sections,
+  behavior changes for self-hosters, **Thanks** by handle — never skipped). Announcement text
+  for Discord is delivered to the owner after `v1-latest` is live.
+
+## Verify from the registry
+
+```bash
+for ref in lfnovo/open_notebook:<ver> lfnovo/open_notebook:<ver>-single ghcr.io/lfnovo/open-notebook:<ver> ghcr.io/lfnovo/open-notebook:<ver>-single; do
+  docker manifest inspect "$ref" | python3 -c "import json,sys; d=json.load(sys.stdin); print(sorted(set(m['platform']['architecture'] for m in d.get('manifests',[]) if m['platform']['architecture']!='unknown')))"
+done
+# expect ['amd64', 'arm64'] for all four; repeat with v1-latest and v1-latest-single after publication
+```
+
+RC stack on the pushed image, optionally with a copy of the owner's dev data (copies only):
+
+```bash
+# 1. Find which SurrealDB instance dev uses: SURREAL_URL and SURREAL_DATABASE in .env
+# 2. Consistent export from the RUNNING instance (originals untouched)
+docker exec <that-container> /surreal export --conn http://localhost:8000 \
+  --user root --pass root --ns open_notebook --db <that-db> /dev/stdout > /tmp/dev-dump.surql
+# 3. Boot (rc-stack.sh docker-pulls the tag, so a local build cannot shadow the registry artifact)
+make release-stack TAG=<ver> DUMP=/tmp/dev-dump.surql
+#    opt-in heavy runtimes on the pushed image (first boot installs them, minutes):
+#    bash scripts/release-test/rc-stack.sh up <ver> /tmp/dev-dump.surql --with-runtimes
+# 4. Credentials decrypt with the dev key from .env
+curl -s http://localhost:15055/api/credentials | python3 -c "import json,sys; c=json.load(sys.stdin); print(len(c), 'creds,', sum(1 for x in c if x.get('decryption_error')), 'decrypt errors')"
+# 5. GET /api/capabilities reports docling/crawl4ai false until --with-runtimes installs them
+```
+
+## Re-cut after a post-tag fix
+
+A blocker found after the tag exists but before publication: the fix goes through the normal
+PR flow, the version stays, the tag moves, **and the images are rebuilt and re-gated** — a
+stale tag or registry image is what publication would promote.
+
+```bash
+git checkout main && git pull && grep '^version' pyproject.toml   # still <ver>
+uv run pytest tests/ -q && ruff check .                            # + frontend if touched
+git tag -d v<ver> && git push origin :refs/tags/v<ver> && make tag
+git rev-parse v<ver> && git rev-parse HEAD                          # must match
+docker rmi lfnovo/open_notebook:<ver> lfnovo/open_notebook:local 2>/dev/null
+make docker-build-local && make release-test TAG=<ver> OLD_TAG=<prev>
+gh workflow run build-and-release.yml --ref main -f push_latest=false   # overwrites the stale images
+# re-verify the manifests, re-boot the RC stack, wait for the owner's re-GO
+```
+
+## After publication
+
+Label shipped issues `released` (after the owner's OK; only actual closed issues — changelog
+references mix issue and PR numbers):
+
+```bash
+for n in <numbers>; do
+  STATE=$(gh api "repos/lfnovo/open-notebook/issues/$n" --jq 'if .pull_request then "pr" else .state end')
+  [ "$STATE" = "closed" ] && gh issue edit "$n" --add-label released
+done
+```
+
+## Cleanup
+
+```bash
+make release-stack-down
+rm -f /tmp/dev-dump.surql; rm -rf /tmp/onrel-*
+docker ps --format '{{.Names}}' | grep onrel   # must be empty
+git status --short                              # must be clean on main
+```
+
+## Retro
+
+Close every release by asking what should improve. Apply the accepted improvements
+immediately: this file, `.github/RELEASE_PROCESS.md`, `scripts/release-test/`, `gotchas.md`
+and the decision log, while the context is fresh.
diff --git a/.maintainer/release/test-matrix.md b/.maintainer/release/test-matrix.md
new file mode 100644
index 00000000..e0f57b45
--- /dev/null
+++ b/.maintainer/release/test-matrix.md
@@ -0,0 +1,58 @@
+# Coverage table
+
+The risks this repository's releases keep checking, as a starting point for each release's
+coverage table. The `release` skill instantiates it against the actual diff, keeps the
+canonical validator and mandatory checks, and adds the risk-selected probes. The unit of
+planning is the **risk**, not the feature: for each change ask *what can this break, and for
+whom?* Use commands and selectors the repository supports; no secret values belong here.
+
+The rows are the release's **Bucket A** (`agent` in *Who*: automated, run now) and
+**Bucket C** (`owner` in *Who*: the release owner runs it by hand; the *Who / paid scope*
+column says which of those need real credentials or paid calls); **Bucket B** (automatable
+with investment) follows the table.
+
+| Check | Change / risk | Real probe | Observable success | Prerequisites | Who / paid scope | Stage | Mandatory |
+|---|---|---|---|---|---|---|---|
+| Backend suite | any backend change | `[commands.validator]` | pytest, ruff and mypy exit 0 | `uv sync --group dev`, `.env` | agent / free | pre-GO | yes |
+| Frontend | any frontend change | `[commands.frontend]` | lint, tests and production build pass | `npm ci` in `frontend/` | agent / free | pre-GO | yes |
+| Dev-DB leak | new or changed tests | per-table counts before and after the suite | no diff (at least `credential`) | live dev DB reachable | agent / free | pre-GO | yes |
+| Smoke journey | any change to sources, chat, ask, transformations, podcasts, search | `smoke-e2e` skill on the dev stack, `[smoke].journey` | GO with every mandatory surface run | stack up, default chat + embedding models | agent / small paid (one chat, one embed, one podcast) | pre-GO | yes |
+| Image gate | Dockerfile, deps, migrations, startup, nginx | `[artifacts.docker].gate` | fresh install and upgrade scenarios pass | Docker, previous tag pulled | agent / free | pre-GO | yes |
+| Dependency audit | any dependency bump | Dependabot alerts + `npm audit` | no open highs, or explicit acceptance | — | agent / free | pre-GO | yes |
+| Provider matrix | provider or Esperanto changes | connection test + discover-models + one chat per main provider | responses from every configured provider | real credentials | owner / paid | pre-GO | yes |
+| Real podcast | podcast, TTS or prompt changes | one episode on a dense notebook | audio plays, transcript in the selected language | TTS credential | owner / paid | pre-GO | yes |
+| UX tour | any UI change | ~10 min walk of every changed screen, light and dark | nothing broken or off-theme | dev stack | owner / free | pre-GO | yes |
+| Pushed image | every release | `make release-stack TAG=<ver> [DUMP=…]` on the registry artifact | core flows work; credentials decrypt; opt-in runtimes gated | images pushed, dev-data copy | owner / free | post-trigger, pre-promotion | yes |
+| Manifests | every release | `docker manifest inspect` per registry × variant | `['amd64','arm64']` for all four, then for `v1-latest*` | images pushed | agent / free | post-trigger | yes |
+
+## Probe library (extend per release)
+
+Regression-of-legitimate-use probes proven in v1.11.0 — adapt endpoints and values:
+
+- Upload just under / just over the body cap → accepted / 413.
+- Source ingestion of a `localhost` URL → accepted (self-hosted is legitimate);
+  link-local or metadata URL → rejected with a clear 4xx.
+- Frontend `/config` with clean vs. malformed `Host` → sane URL or fallback, never 5xx.
+- SSE endpoints stream progressively (first byte ≪ total time via `curl -N -w`).
+- CORS preflight with and without `CORS_ORIGINS` set.
+- Every enum or allowlisted query param exercised with **each** valid value plus one
+  invalid (`sort_by=title` 500'd while its siblings passed — test the whole surface).
+- Oversized array inputs and unknown-provider payloads → clean 422, not 500.
+- Anything an LLM or the UI writes through: verify the full path in a real browser, not just
+  the API (the frontend dropped a field AND the API ignored null — only end-to-end caught it).
+
+## Bucket B — automatable with investment
+
+Decide per item with the owner: build it if it compounds for future releases and costs less
+than the manual verification it replaces; otherwise verify manually this once and note it
+here. The image gate graduated from here to `make release-test`. Standing candidates: new
+end-to-end scenarios for the release's features; CI-ification of any probe that proved
+valuable twice; anything the owner keeps verifying by hand.
+
+## The project's inverse questions, checked on every release
+
+- Does a protection break legitimate use? (SSRF guard vs. self-hosted Ollama on localhost;
+  body-size cap vs. big uploads; Host validation vs. reverse proxies.)
+- Does the abstraction hold parity across the provider matrix? (A feature that works only on
+  one provider is a PDR-002 question, not a release note.)
+- Does an upgrade on an existing volume survive? (Migrations, encrypted credentials, data.)
diff --git a/.maintainer/smoke/journey.md b/.maintainer/smoke/journey.md
new file mode 100644
index 00000000..8ca6912b
--- /dev/null
+++ b/.maintainer/smoke/journey.md
@@ -0,0 +1,148 @@
+# Smoke journey
+
+The product journey the `smoke-e2e` skill executes against a running instance: notebook →
+sources → chat → ask → transformation → note → podcast → search → cleanup, then the UI.
+
+## Conventions
+- Base URL for API calls: `<api_url>/api`; JSON unless a step says multipart.
+- Ids look like `notebook:xxxx`, `source:xxxx`, `chat_session:xxxx`.
+- Source creation is **multipart/form-data**; booleans are the strings `"true"`/`"false"`;
+  `notebooks` is a JSON-array string. `embed=true` is required for embeddings to be created.
+- Async work (processing, embeddings, insights, podcasts) needs the worker running
+  (`make worker-start`); without it every poll times out.
+
+## Health
+- GET `<api_url>/docs` → 200
+- GET `<frontend_url>` → 200
+- GET `<api_url>/api/credentials` → at least one credential
+- GET `<api_url>/api/models/defaults` → `default_chat_model` and a default embedding model set
+save: default_chat_model
+
+## Phase 1: API
+
+### Step: create notebook
+request: POST /api/notebooks {"name": "Smoke Test Notebook", "description": "Automated smoke test — safe to delete"}
+expect: 200; body.id present
+save: notebook_id
+
+### Step: add URL source
+request: POST /api/sources (multipart) type=link, notebooks=["<notebook_id>"], url=https://en.wikipedia.org/wiki/Turing_test, async_processing=true, embed=true
+expect: 200; body.id present
+save: url_source_id
+
+### Step: add text source
+request: POST /api/sources (multipart) type=text, notebooks=["<notebook_id>"], title="AI Overview - Smoke Test", content="Artificial intelligence (AI) is the simulation of human intelligence processes by computer systems. These processes include learning, reasoning, and self-correction. AI applications include expert systems, natural language processing, speech recognition, and machine vision.", async_processing=true, embed=true
+expect: 200; body.id present
+save: text_source_id
+
+### Step: add PDF source
+request: POST /api/sources (multipart) type=upload, notebooks=["<notebook_id>"], file=@tests/fixtures/smoke-test.pdf, async_processing=true, embed=true
+expect: 200; body.id present — not-run when the fixture is absent (two sources are sufficient)
+save: pdf_source_id
+
+### Step: wait for processing
+request: GET /api/sources/<url_source_id>/status and GET /api/sources/<text_source_id>/status
+expect: status == completed for each (failed → FAIL with the error)
+timeout: 5m
+
+### Step: verify content and embeddings
+request: GET /api/sources/<text_source_id>
+expect: full_text non-empty; embedded == true; embedded_chunks > 0 (if embedded is false: POST /api/embed {"item_id": "<text_source_id>", "item_type": "source", "async_processing": false}, wait 15s, re-check)
+
+### Step: chat session
+request: POST /api/chat/sessions {"notebook_id": "<notebook_id>"}
+expect: 200; body.id present
+save: session_id
+
+### Step: chat context
+request: POST /api/chat/context {"notebook_id": "<notebook_id>", "context_config": {}}
+expect: 200; body.context has sources and notes arrays
+save: context
+
+### Step: chat message
+request: POST /api/chat/execute {"session_id": "<session_id>", "message": "What are the main topics covered in the sources?", "context": <context>}
+expect: 200; body.messages contains a message of type ai referencing the sources' content
+timeout: 3m
+
+### Step: ask
+request: POST /api/search/ask/simple {"question": "What is the Turing test and how does it relate to AI?", "strategy_model": "<default_chat_model>", "answer_model": "<default_chat_model>", "final_answer_model": "<default_chat_model>"}
+expect: 200; body.answer non-empty; body.question echoes the question (scoping to notebooks landed in #1331 — check the request model before adding a notebook field)
+timeout: 3m
+
+### Step: list transformations
+request: GET /api/transformations
+expect: 200; a transformation such as "Dense Summary" present
+save: transformation_id
+
+### Step: run transformation
+request: POST /api/sources/<text_source_id>/insights {"transformation_id": "<transformation_id>"}
+expect: 202 (the insight is generated by the worker); then GET /api/sources/<text_source_id>/insights returns at least one insight
+save: insight_id
+timeout: 3m
+
+### Step: save insight as note
+request: POST /api/insights/<insight_id>/save-as-note {"notebook_id": "<notebook_id>"}
+expect: 200; note with non-empty content
+save: note_id
+
+### Step: podcast profiles
+request: GET /api/episode-profiles and GET /api/speaker-profiles
+expect: 200; at least one of each — not-run for the podcast steps when none is configured
+save: episode_profile_name, speaker_profile_name
+
+### Step: generate podcast
+request: POST /api/podcasts/generate {"notebook_id": "<notebook_id>", "episode_profile": "<episode_profile_name>", "speaker_profile": "<speaker_profile_name>", "episode_name": "Smoke Test Episode"}
+expect: 200; body.job_id present (profiles are referenced by NAME, not id)
+save: job_id
+
+### Step: wait for podcast
+request: GET /api/podcasts/jobs/<job_id>
+expect: status == completed; result.episode_id present (the top-level episode_id may be empty)
+save: episode_id
+timeout: 10m
+
+### Step: podcast audio
+request: GET /api/podcasts/episodes/<episode_id>/audio
+expect: 200
+
+### Step: semantic search
+request: POST /api/search {"query": "artificial intelligence", "type": "vector"}
+expect: 200; body.results non-empty; at least one result from this notebook's sources (the field is `type`, not `search_type`)
+
+### Step: delete preview
+request: GET /api/notebooks/<notebook_id>/delete-preview
+expect: 200
+
+### Step: delete notebook
+request: DELETE /api/notebooks/<notebook_id>?delete_exclusive_sources=true
+expect: 200; GET /api/notebooks/<notebook_id> → 404; GET /api/sources/<text_source_id> → 404
+
+### Step: delete episode
+request: DELETE /api/podcasts/episodes/<episode_id>
+expect: 200 (skip when no episode was created)
+
+## Phase 2: UI
+Create a fresh notebook "UI Smoke Test" with one text source via the API first (same
+payloads as above), wait for processing, then:
+- `<frontend_url>/notebooks` lists "UI Smoke Test"
+- `<frontend_url>/notebooks/<ui_notebook_id>` shows the source in the sources panel; console has no errors
+- the source detail (open it from the list) shows the extracted content
+- the chat panel sends a message and renders an AI reply
+- `<frontend_url>/search` returns results for "Turing test"
+- `<frontend_url>/podcasts` lists the smoke episode when one was generated
+- after deleting the UI notebook via the API, `<frontend_url>/notebooks` no longer lists it
+- SSR pages may take up to 30s on a cold dev server
+
+## Cleanup
+- DELETE `/api/notebooks/<ui_notebook_id>?delete_exclusive_sources=true` → 200
+- every notebook, source, note and episode created by the journey is gone (`GET` → 404)
+- nothing named "Smoke Test" remains in `/api/notebooks` or `/api/podcasts/episodes`
+
+## Quirks
+- Processing can take minutes after heavy operations; the dev server slows down.
+- The frontend may run on an alternate port (`PORT=3001 npm run dev`) when 3000 belongs to
+  another project — pass the real `frontend_url`.
+- A dev venv may have `docling`/`crawl4ai` installed out-of-band, so `GET /api/capabilities`
+  does not reflect the lean image; judge opt-in gating on the RC stack, not here.
+- Unknown JSON fields are silently ignored by Pydantic: a wrong field name turns a vector
+  search into a text search without an error.
diff --git a/.maintainer/triage.md b/.maintainer/triage.md
new file mode 100644
index 00000000..315061b4
--- /dev/null
+++ b/.maintainer/triage.md
@@ -0,0 +1,78 @@
+# Triage rules
+
+Repository-specific rules layered over the plugin's maturity-ladder preset. They refine the
+preset; they never contradict it silently. The human version, with reply templates, is
+[docs/7-DEVELOPMENT/maintainer-guide.md → Issue Management](../docs/7-DEVELOPMENT/maintainer-guide.md#issue-management).
+
+## What reaches Issues
+
+Ideas, feature requests and design proposals start in **Discussions** (category Ideas) and
+graduate into Issues only when someone will build them (`pull`, see `[discussions]` in the
+profile). Issues are for **reproducible bugs**, **installation reports** and **approved work**
+a maintainer created from a Discussion. An idea opened as an Issue is not triaged into a
+state: it is converted to a Discussion with the guide's template reply (GitHub UI; `gh` cannot
+convert) — or closed with the same text when conversion is not possible.
+
+## The queue
+
+The bug and installation forms are meant to apply `needs-triage`; the label must exist
+(recreate it if missing). An issue needs triage when it carries `needs-triage` **or no state
+label at all**. Skip issues labeled `tracked-in-umbrella` (they are triaged inside their
+umbrella) and `umbrella` issues themselves (graduated as a whole when the vision call is made;
+#712 stays open because PDR-001 references it).
+
+## States (one per issue)
+
+| Label | Meaning | Assigned by triage |
+|---|---|---|
+| `needs-triage` | new report not yet classified | no (intake) |
+| `needs-info` | waiting on the reporter to confirm or provide more information | yes |
+| `needs-design` | wanted, but the *how* is not resolved | yes |
+| `needs-vision` | unsure if/how it fits — strategic call for the maintainers, judged against VISION.md | no (recognised; the maintainer sets it) |
+| `ready` | approved and sufficiently specified — the dev loop can pick it up | yes |
+| closed | not a bug, duplicate, superseded, already fixed, upstream-only, or feature request rerouted | yes, with the reason and an open door |
+
+`ready` is a promise of execution: an issue lands there when its problem, pointers and
+acceptance criteria are complete **and** someone will build it next. A well-specified bug
+with an open PR that fixes it is `ready` (the PR closes it).
+
+## Labels that are not states (never touched by triage)
+
+- **Type** (one): `bug`, `enhancement`, `documentation`, `installation` (intake, applied by
+  the form). Feature requests carry `enhancement` only when they legitimately live in Issues.
+- **Area** (one, always): `area: chat`, `area: search`, `area: sources`, `area: notebooks`,
+  `area: podcast`, `area: providers`, `area: embeddings`, `area: ui`, `area: database`,
+  `area: offline`, `area: deploy` (installation reports route here), `area: i18n`.
+  The guide asks triage to add the area; the plugin's triage only proposes it — the
+  maintainer applies it.
+- **Ecosystem / bundling** (any number): `upstream`, `content-core`, `esperanto`,
+  `podcast-creator`, `bundled`, `umbrella`, `tracked-in-umbrella`, `good first issue`,
+  `help wanted`, `released`.
+
+The label set is curated — **never invent a label**; raise it instead.
+
+## Close criteria particular to this project
+
+- **Feature request in an Issue** → Discussion (see above). Not a rejection; say so.
+- **Root cause upstream** (`content-core`, `esperanto`, `podcast-creator`): keep the issue
+  open with `upstream` + the library label only when a downstream bump or docs change is
+  needed here; otherwise close pointing at the upstream issue (open it first).
+- **Not reproducible with the supplied steps** and no answer after `needs-info`: close with
+  an open door ("reopen with the logs and we will look again").
+- **Already fixed on `main`**: close naming the PR; point testers at the `v1-dev` image
+  (rebuilt on every push to `main`) and say it ships with the next release.
+- **Duplicate**: close with the canonical link; a duplicate report that adds a new
+  environment or a new symptom is a comment on the canonical issue, not a separate one.
+
+## Vision-fit heuristics
+
+- Fit is judged against `VISION.md` (the *IS / IS NOT* list and the principles) and the
+  decision records in `docs/7-DEVELOPMENT/decisions/` — never against taste. The
+  load-bearing ones: PDR-001 (single-user first, multi-user compatible), PDR-002
+  (provider-agnostic core; provider-exclusive capabilities need a PDR), ADR-007 (opt-in
+  heavy runtimes), ADR-008 (notebook-scoped search).
+- Current posture (VISION.md → Current Posture): get the basics solid across the provider
+  matrix before new product surfaces. A request for a new surface that fits the identity is
+  `needs-vision`, not `needs-design`.
+- A request that keeps coming back against a principle is a signal to revisit the principle
+  through a decision record — not to make a quiet exception.
diff --git a/AGENTS.md b/AGENTS.md
index b288fc68..4aaabed3 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -30,6 +30,7 @@ Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
 - **Never commit secrets.** Credentials are encrypted at rest and require `OPEN_NOTEBOOK_ENCRYPTION_KEY` to be set.
 - CORS is wide-open and auth is a simple password middleware — **dev defaults, not production hardening**. Don't build features that assume otherwise.
 - Product direction questions (does this feature fit?) → [VISION.md](VISION.md). Past decisions ("why is it like this?") → [docs/7-DEVELOPMENT/decisions/](docs/7-DEVELOPMENT/decisions/). Structural decisions made while coding should produce a new decision record there.
+- Maintainer profile lives in `.maintainer/`; do not run release, triage or discussions workflows without it.
 
 ## Where to look
 

From 4e390a792da964aa7041899bc23cdede58b5a19e Mon Sep 17 00:00:00 2001
From: Aditya Raj Singh <github@adityaraj.com>
Date: Thu, 1 Oct 2026 07:21:09 +0530
Subject: [PATCH 305/345] fix: show insights after long-running generation
 (#1346)

* fix: keep insight polling active until completion

* fix: harden insight polling lifecycle

* fix: handle terminal insight edge cases

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../sources/SourceDetailContent.test.tsx      | 156 +++++++++++++++++-
 .../sources/SourceDetailContent.tsx           |  47 +++++-
 frontend/src/lib/api/insights.test.ts         |  91 ++++++++++
 frontend/src/lib/api/insights.ts              |  65 +++++---
 4 files changed, 324 insertions(+), 35 deletions(-)
 create mode 100644 frontend/src/lib/api/insights.test.ts

diff --git a/frontend/src/components/sources/SourceDetailContent.test.tsx b/frontend/src/components/sources/SourceDetailContent.test.tsx
index b80f3b78..85e6df9c 100644
--- a/frontend/src/components/sources/SourceDetailContent.test.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.test.tsx
@@ -1,10 +1,13 @@
-import { render, screen, waitFor } from '@testing-library/react'
+import { act, fireEvent, render, screen, waitFor } from '@testing-library/react'
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
 import { describe, it, expect, vi, beforeEach } from 'vitest'
 import { SourceDetailContent } from './SourceDetailContent'
 import { sourcesApi } from '@/lib/api/sources'
+import { insightsApi } from '@/lib/api/insights'
+import { transformationsApi } from '@/lib/api/transformations'
 import { QUERY_KEYS } from '@/lib/api/query-client'
 import { SourceDetailResponse } from '@/lib/types/api'
+import { toast } from 'sonner'
 
 // useTranslation is mocked globally in setup.ts (t returns the key string)
 
@@ -17,6 +20,8 @@ vi.mock('@/lib/api/sources', () => ({
 vi.mock('@/lib/api/insights', () => ({
   insightsApi: {
     listForSource: vi.fn().mockResolvedValue([]),
+    create: vi.fn(),
+    waitForCommand: vi.fn(),
   },
 }))
 
@@ -40,7 +45,41 @@ vi.mock('@/components/sources/NotebookAssociations', () => ({
   NotebookAssociations: () => null,
 }))
 
+vi.mock('@/components/ui/select', () => ({
+  Select: ({ children, onValueChange, ...props }: React.PropsWithChildren<{
+    onValueChange: (value: string) => void
+  }>) => (
+    <select {...props} aria-label="transformation" onChange={event => onValueChange(event.target.value)}>
+      {children}
+    </select>
+  ),
+  SelectTrigger: ({ children }: React.PropsWithChildren) => <>{children}</>,
+  SelectValue: () => null,
+  SelectContent: ({ children }: React.PropsWithChildren) => <>{children}</>,
+  SelectItem: ({ children, value }: React.PropsWithChildren<{ value: string }>) => (
+    <option value={value}>{children}</option>
+  ),
+}))
+
+vi.mock('@/components/ui/tabs', () => ({
+  Tabs: ({ children }: React.PropsWithChildren) => <div>{children}</div>,
+  TabsList: ({ children }: React.PropsWithChildren) => <div>{children}</div>,
+  TabsTrigger: ({ children }: React.PropsWithChildren) => <button>{children}</button>,
+  TabsContent: ({ children }: React.PropsWithChildren) => <div>{children}</div>,
+}))
+
+vi.mock('sonner', () => ({
+  toast: {
+    success: vi.fn(),
+    error: vi.fn(),
+  },
+}))
+
 const mockSourcesGet = vi.mocked(sourcesApi.get)
+const mockListInsights = vi.mocked(insightsApi.listForSource)
+const mockCreateInsight = vi.mocked(insightsApi.create)
+const mockWaitForCommand = vi.mocked(insightsApi.waitForCommand)
+const mockListTransformations = vi.mocked(transformationsApi.list)
 
 const notFoundError = Object.assign(new Error('Request failed with status code 404'), {
   isAxiosError: true,
@@ -52,18 +91,50 @@ const networkError = Object.assign(new Error('Network Error'), {
   response: undefined,
 })
 
-function renderContent(onClose?: () => void) {
+function renderContent(onClose?: () => void, sourceId = 'source:missing') {
   const queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } })
   return render(
     <QueryClientProvider client={queryClient}>
-      <SourceDetailContent sourceId="source:missing" onClose={onClose} />
+      <SourceDetailContent sourceId={sourceId} onClose={onClose} />
     </QueryClientProvider>
   )
 }
 
+const loadedSource: SourceDetailResponse = {
+  id: 'source:loaded',
+  title: 'Loaded source',
+  asset: null,
+  embedded: false,
+  embedded_chunks: 0,
+  insights_count: 0,
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-01T00:00:00Z',
+  full_text: 'Source content',
+}
+
+async function startInsightGeneration() {
+  await screen.findByText('Loaded source')
+  fireEvent.change(screen.getByRole('combobox', { name: 'transformation' }), {
+    target: { value: 'transformation:summary' },
+  })
+  fireEvent.click(screen.getByRole('button', { name: 'common.create' }))
+}
+
 describe('SourceDetailContent', () => {
   beforeEach(() => {
     vi.clearAllMocks()
+    mockListInsights.mockResolvedValue([])
+    mockListTransformations.mockResolvedValue([{
+      id: 'transformation:summary',
+      title: 'Summary',
+      name: 'summary',
+      description: '',
+      prompt: 'Summarize',
+      apply_default: false,
+      model_id: null,
+      created: '2026-01-01T00:00:00Z',
+      updated: '2026-01-01T00:00:00Z',
+    }])
   })
 
   it('shows the shared not-found state when the source returns 404', async () => {
@@ -142,4 +213,83 @@ describe('SourceDetailContent', () => {
     screen.getByText('common.close').click()
     expect(onClose).toHaveBeenCalled()
   })
+
+  it('does not start polling when creation finishes after unmount', async () => {
+    mockSourcesGet.mockResolvedValue(loadedSource)
+    let resolveCreate!: (value: Awaited<ReturnType<typeof insightsApi.create>>) => void
+    mockCreateInsight.mockReturnValue(new Promise(resolve => {
+      resolveCreate = resolve
+    }))
+
+    const view = renderContent(undefined, loadedSource.id)
+    await startInsightGeneration()
+    await waitFor(() => expect(mockCreateInsight).toHaveBeenCalled())
+
+    view.unmount()
+    await act(async () => {
+      resolveCreate({
+        status: 'pending',
+        message: 'started',
+        source_id: loadedSource.id,
+        transformation_id: 'transformation:summary',
+        command_id: 'job-1',
+      })
+    })
+
+    expect(mockWaitForCommand).not.toHaveBeenCalled()
+  })
+
+  it('shows the backend error when insight generation fails', async () => {
+    mockSourcesGet.mockResolvedValue(loadedSource)
+    mockCreateInsight.mockResolvedValue({
+      status: 'pending',
+      message: 'started',
+      source_id: loadedSource.id,
+      transformation_id: 'transformation:summary',
+      command_id: 'job-1',
+    })
+    mockWaitForCommand.mockResolvedValue({
+      job_id: 'job-1',
+      status: 'failed',
+      error_message: 'Model ran out of memory',
+    })
+
+    renderContent(undefined, loadedSource.id)
+    await startInsightGeneration()
+
+    await waitFor(() => {
+      expect(toast.error).toHaveBeenCalledWith('Model ran out of memory')
+    })
+  })
+
+  it('does not apply terminal effects when unmounted during the final refresh', async () => {
+    mockSourcesGet.mockResolvedValue(loadedSource)
+    let resolveRefresh!: (value: Awaited<ReturnType<typeof insightsApi.listForSource>>) => void
+    mockListInsights
+      .mockResolvedValueOnce([])
+      .mockReturnValueOnce(new Promise(resolve => {
+        resolveRefresh = resolve
+      }))
+    mockCreateInsight.mockResolvedValue({
+      status: 'pending',
+      message: 'started',
+      source_id: loadedSource.id,
+      transformation_id: 'transformation:summary',
+      command_id: 'job-1',
+    })
+    mockWaitForCommand.mockResolvedValue({
+      job_id: 'job-1',
+      status: 'failed',
+      error_message: 'Stale failure',
+    })
+
+    const view = renderContent(undefined, loadedSource.id)
+    await startInsightGeneration()
+    await waitFor(() => expect(mockListInsights).toHaveBeenCalledTimes(2))
+
+    view.unmount()
+    await act(async () => resolveRefresh([]))
+
+    expect(toast.error).not.toHaveBeenCalledWith('Stale failure')
+  })
 })
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index 5a498399..964f37b1 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -1,6 +1,6 @@
 'use client'
 
-import { useState, useEffect, useCallback, useMemo } from 'react'
+import { useState, useEffect, useCallback, useMemo, useRef } from 'react'
 import { useQueryClient } from '@tanstack/react-query'
 import { MarkdownRenderer } from '@/components/ui/markdown-renderer'
 import { sourcesApi } from '@/lib/api/sources'
@@ -114,6 +114,7 @@ function SourceDetailContentInner({
   const [selectedInsight, setSelectedInsight] = useState<SourceInsightResponse | null>(null)
   const [insightToDelete, setInsightToDelete] = useState<string | null>(null)
   const [deletingInsight, setDeletingInsight] = useState(false)
+  const insightPollingRef = useRef<AbortController | null>(null)
 
   // A 404 means the source was deleted (e.g. a dangling chat/ask reference) —
   // handled by the shared "content no longer exists" state. The global query
@@ -157,17 +158,25 @@ function SourceDetailContentInner({
     }
   }, [fetchInsights, fetchTransformations, sourceId])
 
+  useEffect(() => () => insightPollingRef.current?.abort(), [])
+
   const createInsight = async () => {
     if (!selectedTransformation) {
       toast.error(t('sources.selectTransformation'))
       return
     }
 
+    insightPollingRef.current?.abort()
+    const controller = new AbortController()
+    insightPollingRef.current = controller
+
     try {
       setCreatingInsight(true)
       const response = await insightsApi.create(sourceId, {
         transformation_id: selectedTransformation
       })
+      if (controller.signal.aborted) return
+
       // Show toast for async operation
       toast.success(t('sources.insightGenerationStarted'))
       setSelectedTransformation('')
@@ -176,30 +185,50 @@ function SourceDetailContentInner({
       if (response.command_id) {
         // Poll in background (don't block UI)
         insightsApi.waitForCommand(response.command_id, {
-          maxAttempts: 120, // Up to 4 minutes (120 * 2s)
-          intervalMs: 2000
-        }).then(success => {
-          if (success) {
-            void fetchInsights()
-            // Invalidate sources queries so notebook page refreshes with updated insights_count
-            queryClient.invalidateQueries({ queryKey: ['sources'] })
+          intervalMs: 2000,
+          signal: controller.signal,
+        }).then(async status => {
+          if (controller.signal.aborted) return
+
+          await fetchInsights()
+          if (controller.signal.aborted) return
+          // Invalidate sources queries so notebook page refreshes with updated insights_count
+          queryClient.invalidateQueries({ queryKey: ['sources'] })
+          if (status?.status !== 'completed') {
+            toast.error(status?.error_message || t('common.error'))
           }
         }).catch(err => {
+          if (controller.signal.aborted) return
           console.error('Error waiting for insight command:', err)
+          toast.error(t('common.error'))
+        }).finally(() => {
+          if (insightPollingRef.current === controller) {
+            insightPollingRef.current = null
+          }
         })
       } else {
         // Fallback: refresh after delay if no command_id
         setTimeout(() => {
+          if (controller.signal.aborted) return
           void fetchInsights()
           // Also invalidate sources queries
           queryClient.invalidateQueries({ queryKey: ['sources'] })
+          if (insightPollingRef.current === controller) {
+            insightPollingRef.current = null
+          }
         }, 5000)
       }
     } catch (err) {
+      if (controller.signal.aborted) return
       console.error('Failed to create insight:', err)
       toast.error(t('common.error'))
+      if (insightPollingRef.current === controller) {
+        insightPollingRef.current = null
+      }
     } finally {
-      setCreatingInsight(false)
+      if (!controller.signal.aborted) {
+        setCreatingInsight(false)
+      }
     }
   }
 
diff --git a/frontend/src/lib/api/insights.test.ts b/frontend/src/lib/api/insights.test.ts
new file mode 100644
index 00000000..0ef0ed2e
--- /dev/null
+++ b/frontend/src/lib/api/insights.test.ts
@@ -0,0 +1,91 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import apiClient from './client'
+import { insightsApi } from './insights'
+
+vi.mock('./client', () => ({
+  default: {
+    get: vi.fn(),
+  },
+}))
+
+const mockGet = vi.mocked(apiClient.get)
+
+describe('insightsApi.waitForCommand', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
+  it('keeps polling while a command remains pending', async () => {
+    mockGet.mockImplementation(async () => ({
+      data: {
+        job_id: 'job-1',
+        status: mockGet.mock.calls.length > 120 ? 'completed' : 'running',
+      },
+    }))
+
+    await expect(
+      insightsApi.waitForCommand('job-1', { intervalMs: 0 })
+    ).resolves.toMatchObject({ status: 'completed' })
+    expect(mockGet).toHaveBeenCalledTimes(121)
+  })
+
+  it('stops polling when aborted', async () => {
+    const controller = new AbortController()
+    mockGet.mockResolvedValue({ data: { job_id: 'job-1', status: 'running' } })
+
+    const polling = insightsApi.waitForCommand('job-1', {
+      intervalMs: 60_000,
+      signal: controller.signal,
+    })
+    await vi.waitFor(() => expect(mockGet).toHaveBeenCalledTimes(1))
+
+    controller.abort()
+
+    await expect(polling).resolves.toBeNull()
+    expect(mockGet).toHaveBeenCalledTimes(1)
+  })
+
+  it('stops polling when the job is unknown', async () => {
+    mockGet.mockResolvedValue({ data: { job_id: 'job-1', status: 'unknown' } })
+
+    await expect(
+      insightsApi.waitForCommand('job-1', { intervalMs: 0 })
+    ).resolves.toMatchObject({ status: 'unknown' })
+    expect(mockGet).toHaveBeenCalledTimes(1)
+  })
+
+  it('stops polling when the job reports an error', async () => {
+    const controller = new AbortController()
+    mockGet.mockResolvedValue({ data: { job_id: 'job-1', status: 'error' } })
+    const abort = setTimeout(() => controller.abort(), 20)
+
+    const status = await insightsApi.waitForCommand('job-1', {
+      intervalMs: 1,
+      signal: controller.signal,
+    })
+    clearTimeout(abort)
+
+    expect(status).toMatchObject({ status: 'error' })
+    expect(mockGet).toHaveBeenCalledTimes(1)
+  })
+
+  it('stops after three consecutive status errors', async () => {
+    const statusError = Object.assign(new Error('status unavailable'), {
+      config: { headers: { Authorization: 'Bearer secret' } },
+    })
+    const errorLog = vi.spyOn(console, 'error').mockImplementation(() => undefined)
+    mockGet.mockRejectedValue(statusError)
+
+    await expect(
+      insightsApi.waitForCommand('job-1', { intervalMs: 0 })
+    ).resolves.toBeNull()
+    expect(mockGet).toHaveBeenCalledTimes(3)
+    expect(errorLog).toHaveBeenNthCalledWith(1, 'Error checking command status')
+    expect(errorLog).toHaveBeenNthCalledWith(2, 'Error checking command status')
+    expect(errorLog).toHaveBeenNthCalledWith(3, 'Error checking command status')
+  })
+})
diff --git a/frontend/src/lib/api/insights.ts b/frontend/src/lib/api/insights.ts
index a2fbcde7..1bfdbc14 100644
--- a/frontend/src/lib/api/insights.ts
+++ b/frontend/src/lib/api/insights.ts
@@ -52,44 +52,63 @@ export const insightsApi = {
     await apiClient.delete(`/insights/${insightId}`)
   },
 
-  getCommandStatus: async (commandId: string) => {
+  getCommandStatus: async (commandId: string, signal?: AbortSignal) => {
     const response = await apiClient.get<CommandJobStatusResponse>(
-      `/commands/jobs/${commandId}`
+      `/commands/jobs/${commandId}`,
+      { signal }
     )
     return response.data
   },
 
   /**
-   * Poll command status until completed or failed.
-   * Returns true if completed successfully, false if failed.
+   * Poll command status until it reaches a terminal state.
+   * Returns the terminal status, or null if polling is aborted or repeatedly errors.
    */
   waitForCommand: async (
     commandId: string,
-    options?: { maxAttempts?: number; intervalMs?: number }
-  ): Promise<boolean> => {
-    const maxAttempts = options?.maxAttempts ?? 60 // Default 60 attempts
+    options?: { intervalMs?: number; signal?: AbortSignal }
+  ): Promise<CommandJobStatusResponse | null> => {
     const intervalMs = options?.intervalMs ?? 2000 // Default 2 seconds
+    const signal = options?.signal
+    let consecutiveErrors = 0
 
-    for (let i = 0; i < maxAttempts; i++) {
+    while (!signal?.aborted) {
+      let status: CommandJobStatusResponse | undefined
       try {
-        const status = await insightsApi.getCommandStatus(commandId)
-        if (status.status === 'completed') {
-          return true
-        }
+        status = await insightsApi.getCommandStatus(commandId, signal)
+        consecutiveErrors = 0
+      } catch {
+        if (signal?.aborted) return null
+        console.error('Error checking command status')
+        consecutiveErrors += 1
+        if (consecutiveErrors >= 3) return null
+      }
+
+      if (status && ['completed', 'failed', 'canceled', 'error', 'unknown'].includes(status.status)) {
         if (status.status === 'failed' || status.status === 'canceled') {
           console.error('Command failed:', status.error_message)
-          return false
         }
-        // Still running, wait and retry
-        await new Promise(resolve => setTimeout(resolve, intervalMs))
-      } catch (error) {
-        console.error('Error checking command status:', error)
-        // Continue polling on error
-        await new Promise(resolve => setTimeout(resolve, intervalMs))
+        return status
       }
+
+      await new Promise<void>(resolve => {
+        if (signal?.aborted) {
+          resolve()
+          return
+        }
+
+        const onAbort = () => {
+          clearTimeout(timeout)
+          resolve()
+        }
+        const timeout = setTimeout(() => {
+          signal?.removeEventListener('abort', onAbort)
+          resolve()
+        }, intervalMs)
+        signal?.addEventListener('abort', onAbort, { once: true })
+      })
     }
-    // Timeout
-    console.warn('Command polling timed out')
-    return false
+
+    return null
   }
-}
\ No newline at end of file
+}

From e5e6313059f95507e0bc4d9e4bbb2234a68a2bfa Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Wed, 30 Sep 2026 23:05:16 -0300
Subject: [PATCH 306/345] fix(transformations): reject truncated and empty
 model output (#1385)

* fix(transformations): reject truncated and empty model output

* fix(transformations): log incomplete generation as permanent failure

* fix(transformations): include transformation ID in failure logs
---
 commands/source_commands.py            |  39 +++--
 open_notebook/exceptions.py            |   6 +
 open_notebook/graphs/transformation.py |  33 ++++-
 tests/test_transformation_output.py    | 188 +++++++++++++++++++++++++
 tests/test_transformations_api.py      |  25 ++++
 5 files changed, 278 insertions(+), 13 deletions(-)
 create mode 100644 tests/test_transformation_output.py

diff --git a/commands/source_commands.py b/commands/source_commands.py
index 794e125b..42148ae5 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -8,7 +8,11 @@ from surreal_commands import CommandInput, CommandOutput, command
 from open_notebook.database.repository import ensure_record_id
 from open_notebook.domain.notebook import Source
 from open_notebook.domain.transformation import Transformation
-from open_notebook.exceptions import ConfigurationError, ContextLengthExceededError
+from open_notebook.exceptions import (
+    ConfigurationError,
+    ContextLengthExceededError,
+    IncompleteGenerationError,
+)
 
 try:
     from open_notebook.graphs.source import source_graph
@@ -43,7 +47,12 @@ class SourceProcessingOutput(CommandOutput):
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 120,  # Allow queue to drain
-        "stop_on": [ValueError, ConfigurationError, ContextLengthExceededError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+            ContextLengthExceededError,
+            IncompleteGenerationError,
+        ],  # Don't retry validation/config errors or incomplete generations
         "retry_log_level": "debug",  # Avoid log noise during transaction conflicts
     },
 )
@@ -117,9 +126,7 @@ async def process_source_command(
         logger.info(
             f"Successfully processed source: {processed_source.id} in {processing_time:.2f}s"
         )
-        logger.info(
-            f"Created {insights_created} insights, embedding {embed_status}"
-        )
+        logger.info(f"Created {insights_created} insights, embedding {embed_status}")
 
         return SourceProcessingOutput(
             success=True,
@@ -129,6 +136,11 @@ async def process_source_command(
             processing_time=processing_time,
         )
 
+    except IncompleteGenerationError as e:
+        logger.error(
+            f"Generation failed (permanent) for source {input_data.source_id}: {e}"
+        )
+        raise  # Preserve failed job status; stop_on prevents automatic retries.
     except ValueError as e:
         # Validation errors are permanent failures. Re-raise so surreal-commands
         # marks the job as `failed` (stop_on=[ValueError] already prevents
@@ -140,9 +152,7 @@ async def process_source_command(
         raise
     except Exception as e:
         # Transient failure - will be retried (surreal-commands logs final failure)
-        logger.debug(
-            f"Transient error processing source {input_data.source_id}: {e}"
-        )
+        logger.debug(f"Transient error processing source {input_data.source_id}: {e}")
         raise
 
 
@@ -176,7 +186,12 @@ class RunTransformationOutput(CommandOutput):
         "wait_strategy": "exponential_jitter",
         "wait_min": 1,
         "wait_max": 60,
-        "stop_on": [ValueError, ConfigurationError, ContextLengthExceededError],  # Don't retry validation/config errors
+        "stop_on": [
+            ValueError,
+            ConfigurationError,
+            ContextLengthExceededError,
+            IncompleteGenerationError,
+        ],  # Don't retry validation/config errors or incomplete generations
         "retry_log_level": "warning",
     },
 )
@@ -240,6 +255,12 @@ async def run_transformation_command(
             processing_time=processing_time,
         )
 
+    except IncompleteGenerationError as e:
+        logger.error(
+            f"Generation failed (permanent) for transformation "
+            f"{input_data.transformation_id} on source {input_data.source_id}: {e}"
+        )
+        raise  # Preserve failed job status; stop_on prevents automatic retries.
     except ValueError as e:
         # Validation errors are permanent failures - don't retry
         processing_time = time.time() - start_time
diff --git a/open_notebook/exceptions.py b/open_notebook/exceptions.py
index e4aeb7af..0936809c 100644
--- a/open_notebook/exceptions.py
+++ b/open_notebook/exceptions.py
@@ -46,6 +46,12 @@ class ExternalServiceError(OpenNotebookError):
     pass
 
 
+class IncompleteGenerationError(ExternalServiceError):
+    """The model returned truncated or empty output; do not retry automatically."""
+
+    pass
+
+
 class ContextLengthExceededError(ExternalServiceError):
     """Content exceeds the model's context window. Retrying sends the same
     oversized payload, so background commands must not retry this."""
diff --git a/open_notebook/graphs/transformation.py b/open_notebook/graphs/transformation.py
index 1eff8c6c..d5811eaf 100644
--- a/open_notebook/graphs/transformation.py
+++ b/open_notebook/graphs/transformation.py
@@ -7,7 +7,7 @@ from typing_extensions import TypedDict
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.domain.notebook import Source
 from open_notebook.domain.transformation import DefaultPrompts, Transformation
-from open_notebook.exceptions import OpenNotebookError
+from open_notebook.exceptions import IncompleteGenerationError, OpenNotebookError
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
@@ -35,15 +35,22 @@ async def run_transformation(state: dict, config: RunnableConfig) -> dict:
         # plain render variable into a fixed, developer-authored template instead.
         # See docs/7-DEVELOPMENT/security.md (GHSA-f35w-wx37-26q7).
         instructions = transformation.prompt
-        default_prompts: DefaultPrompts = DefaultPrompts(transformation_instructions=None)
+        default_prompts: DefaultPrompts = DefaultPrompts(
+            transformation_instructions=None
+        )
         if default_prompts.transformation_instructions:
-            instructions = f"{default_prompts.transformation_instructions}\n\n{instructions}"
+            instructions = (
+                f"{default_prompts.transformation_instructions}\n\n{instructions}"
+            )
 
         system_prompt = Prompter(prompt_template="transformation/execute").render(
             data={**state, "instructions": instructions}
         )
         content_str = str(content) if content else ""
-        payload = [SystemMessage(content=system_prompt), HumanMessage(content=content_str)]
+        payload = [
+            SystemMessage(content=system_prompt),
+            HumanMessage(content=content_str),
+        ]
         chain = await provision_langchain_model(
             str(payload),
             config.get("configurable", {}).get("model_id"),
@@ -53,10 +60,28 @@ async def run_transformation(state: dict, config: RunnableConfig) -> dict:
 
         response = await chain.ainvoke(payload)
 
+        # Provider adapters use different keys for the termination reason.
+        # Check before saving: a nonempty answer can still be incomplete.
+        metadata = response.response_metadata
+        for key in ("finish_reason", "stop_reason", "done_reason"):
+            reason = metadata.get(key)
+            if isinstance(reason, str) and reason.lower() in ("length", "max_tokens"):
+                raise IncompleteGenerationError(
+                    "The model reached its generation limit before completing the "
+                    "transformation. Try a shorter transformation or a different model."
+                )
+
         # Clean thinking content from the response
         response_content = extract_text_content(response.content)
         cleaned_content = clean_thinking_content(response_content)
 
+        if not cleaned_content.strip():
+            raise IncompleteGenerationError(
+                "The model returned no usable text for the transformation after "
+                "removing thinking content. Try a shorter transformation or a "
+                "different model."
+            )
+
         if source:
             await source.add_insight(transformation.title, cleaned_content)
 
diff --git a/tests/test_transformation_output.py b/tests/test_transformation_output.py
new file mode 100644
index 00000000..c7e624fd
--- /dev/null
+++ b/tests/test_transformation_output.py
@@ -0,0 +1,188 @@
+"""Incomplete transformations must not become successful insights (#1273)."""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from langchain_core.messages import AIMessage
+from surreal_commands.core.registry import registry
+from surreal_commands.core.retry import build_async_retry_instance
+
+import commands  # noqa: F401 -- register worker retry policies
+from open_notebook.domain.notebook import Source
+from open_notebook.exceptions import ExternalServiceError, IncompleteGenerationError
+from open_notebook.graphs.transformation import run_transformation
+
+
+@pytest.fixture
+def transformation_call():
+    source = Source(id="source:test", full_text="Source content")
+    transformation = SimpleNamespace(title="Summary", prompt="Summarize this")
+    chain = AsyncMock()
+    with (
+        patch(
+            "open_notebook.graphs.transformation.DefaultPrompts",
+            return_value=SimpleNamespace(transformation_instructions=None),
+        ),
+        patch(
+            "open_notebook.graphs.transformation.provision_langchain_model",
+            new=AsyncMock(return_value=chain),
+        ),
+        patch.object(Source, "add_insight", new_callable=AsyncMock) as save,
+    ):
+
+        async def invoke(content, metadata, with_source=True):
+            chain.ainvoke.return_value = AIMessage(
+                content=content, response_metadata=metadata
+            )
+            state: dict = {"transformation": transformation}
+            if with_source:
+                state["source"] = source
+            else:
+                state["input_text"] = "Source content"
+            return await run_transformation(state, {"configurable": {}})
+
+        yield invoke, save
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("with_source", [True, False])
+@pytest.mark.parametrize(
+    "metadata",
+    [
+        {"finish_reason": "length"},
+        {"stop_reason": "max_tokens"},
+        {"finish_reason": "MAX_TOKENS"},
+        {"done_reason": "length"},
+    ],
+)
+async def test_truncated_output_is_rejected(transformation_call, metadata, with_source):
+    invoke, save = transformation_call
+    with pytest.raises(IncompleteGenerationError, match="generation limit"):
+        await invoke("Answer cut mid-wor", metadata, with_source)
+    save.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("with_source", [True, False])
+@pytest.mark.parametrize(
+    "content",
+    [
+        "",
+        "   ",
+        "<think>Only reasoning</think>",
+        "<think>Unfinished reasoning",
+    ],
+)
+async def test_empty_output_is_rejected(transformation_call, content, with_source):
+    invoke, save = transformation_call
+    with pytest.raises(IncompleteGenerationError, match="no usable text"):
+        await invoke(content, {}, with_source)
+    save.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    "metadata",
+    [
+        {},
+        {"finish_reason": "stop"},
+        {"stop_reason": "end_turn"},
+        {"done_reason": "stop"},
+        {"finish_reason": None},
+    ],
+)
+async def test_complete_output_is_saved(transformation_call, metadata):
+    invoke, save = transformation_call
+    result = await invoke("<think>Reasoning</think>Complete answer.", metadata)
+    assert result == {"output": "Complete answer."}
+    save.assert_awaited_once_with("Summary", "Complete answer.")
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    "command_id",
+    [
+        "open_notebook.process_source",
+        "open_notebook.run_transformation",
+    ],
+)
+@pytest.mark.parametrize(
+    "error, expected_attempts",
+    [
+        (IncompleteGenerationError("Incomplete output"), 1),
+        (ExternalServiceError("Provider unavailable"), 3),
+    ],
+)
+async def test_worker_retry_policy(command_id, error, expected_attempts):
+    command = registry.get_command_by_id(command_id)
+    config = command.retry_config.model_copy(
+        update={
+            "max_attempts": 3,
+            "wait_strategy": "fixed",
+            "wait_time": 0,
+            "wait_min": 0,
+            "wait_max": 0,
+        }
+    )
+    attempts = 0
+    with pytest.raises(type(error)):
+        async for attempt in build_async_retry_instance(config):
+            with attempt:
+                attempts += 1
+                raise error
+    assert attempts == expected_attempts
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("during_import", [True, False])
+async def test_commands_log_incomplete_generation_as_permanent(during_import):
+    from commands.source_commands import (
+        RunTransformationInput,
+        SourceProcessingInput,
+        process_source_command,
+        run_transformation_command,
+    )
+
+    error = IncompleteGenerationError("Model reached generation limit")
+    source = Source(id="source:test", full_text="Source content")
+    if during_import:
+        invoke = process_source_command
+        data = SourceProcessingInput(
+            source_id="source:test",
+            content_state={},
+            notebook_ids=[],
+            transformations=[],
+            embed=False,
+        )
+        graph_path = "commands.source_commands.source_graph.ainvoke"
+    else:
+        invoke = run_transformation_command
+        data = RunTransformationInput(
+            source_id="source:test",
+            transformation_id="transformation:test",
+        )
+        graph_path = "commands.source_commands.transform_graph.ainvoke"
+
+    with (
+        patch(
+            "commands.source_commands.Source.get", new=AsyncMock(return_value=source)
+        ),
+        patch.object(Source, "save", new_callable=AsyncMock),
+        patch(
+            "commands.source_commands.Transformation.get",
+            new=AsyncMock(
+                return_value=SimpleNamespace(model_id=None),
+            ),
+        ),
+        patch(graph_path, new=AsyncMock(side_effect=error)),
+        patch("commands.source_commands.logger") as logger,
+    ):
+        with pytest.raises(IncompleteGenerationError) as caught:
+            await invoke(data)
+        assert caught.value is error
+        assert "permanent" in logger.error.call_args.args[0]
+        assert "source:test" in logger.error.call_args.args[0]
+        if not during_import:
+            assert "transformation:test" in logger.error.call_args.args[0]
+        logger.debug.assert_not_called()
diff --git a/tests/test_transformations_api.py b/tests/test_transformations_api.py
index cec9c8f1..e86fff59 100644
--- a/tests/test_transformations_api.py
+++ b/tests/test_transformations_api.py
@@ -240,3 +240,28 @@ def test_execute_request_model_overrides_stored_model():
         mock_ainvoke.call_args.kwargs["config"]["configurable"]["model_id"]
         == "model:override"
     )
+
+
+def test_incomplete_generation_returns_actionable_502():
+    from open_notebook.exceptions import IncompleteGenerationError
+
+    message = (
+        "The model reached its generation limit before completing the "
+        "transformation. Try a shorter transformation or a different model."
+    )
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new=AsyncMock(return_value=_transformation()),
+        ),
+        patch(
+            "api.routers.transformations.transformation_graph.ainvoke",
+            new=AsyncMock(side_effect=IncompleteGenerationError(message)),
+        ),
+    ):
+        response = _client().post(
+            "/api/transformations/execute",
+            json={"transformation_id": "transformation:123", "input_text": "Input"},
+        )
+    assert response.status_code == 502
+    assert response.json()["detail"] == message

From 6ba5cfe3f5aed97a4d4487ad4aab15f3aea48d0c Mon Sep 17 00:00:00 2001
From: Ercan Er <ercan.er@medeniyet.edu.tr>
Date: Sat, 3 Oct 2026 03:30:20 +0300
Subject: [PATCH 307/345] docs: add Docker-to-native migration and production
 frontend build to Windows guide (#1374)

* docs: add Docker-to-native migration and production frontend build to Windows guide

- Migrating from a Docker install: reuse the bind-mounted RocksDB with a
  version-matched native surreal, back up, disable restart policy, rewrite
  host.docker.internal credentials, requeue jobs left 'running'. Documents the
  absolute /app/data/uploads path limitation for pre-migration uploads.
- Optional production frontend: build once, copy static/public into the
  standalone output (as the Dockerfile does), serve with node server.js.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: use compose service commands in Docker migration steps

Container names depend on the checkout folder name, so docker exec/update/stop
with hard-coded names fails for other clones. Use docker compose exec and
docker compose down (bind-mounted data is kept) instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 docs/1-INSTALLATION/windows-native.md | 92 +++++++++++++++++++++++++++
 1 file changed, 92 insertions(+)

diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
index f5e4997f..fc2ef789 100644
--- a/docs/1-INSTALLATION/windows-native.md
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -116,6 +116,30 @@ start "Frontend" cmd /k "cd /d %ROOT%\frontend && npm run dev"
 
 Then open http://127.0.0.1:3000.
 
+## Optional: production frontend build
+
+`npm run dev` is the development server: it compiles pages on demand and runs
+with development overhead, unlike what the Docker image runs. For day-to-day use you can build once and serve the
+standalone output, which is exactly what the container does (`node server.js`):
+
+```batch
+cd frontend
+npm run build
+
+REM The standalone output does not include static assets — copy them in
+REM (the Dockerfile does the same with COPY). Without this the UI loads unstyled.
+xcopy .next\static .next\standalone\.next\static /E /I /Y
+xcopy public .next\standalone\public /E /I /Y
+
+cd .next\standalone
+set PORT=8502
+set HOSTNAME=127.0.0.1
+node server.js
+```
+
+Then open http://127.0.0.1:8502. Re-run the build and both `xcopy` lines after
+every upgrade.
+
 ## Critical Windows Fixes
 
 ### Issue 1: Wrong Python Version
@@ -250,6 +274,73 @@ cd frontend && npm install && cd ..
 
 Then restart all services. Your `.env` and data are preserved.
 
+## Migrating from a Docker Install
+
+If you already run Open Notebook with the stock `docker-compose.yml`, you can
+move to a native install **without re-importing anything**: the compose file
+bind-mounts `./surreal_data` and `./notebook_data`, so the database and uploads
+already live on your Windows disk.
+
+Run the `docker compose` commands below from the folder that contains your
+`docker-compose.yml`, so they work whatever your container names are.
+
+1. **Match the SurrealDB version.** A native `surreal` of the same version can
+   open the existing RocksDB files directly. Check the container's version:
+
+   ```batch
+   docker compose exec surrealdb /surreal version
+   ```
+
+   and download the matching Windows binary from the
+   [SurrealDB releases](https://github.com/surrealdb/surrealdb/releases).
+
+2. **Back up first** while the containers are still running:
+
+   ```batch
+   surreal export --endpoint http://127.0.0.1:8000 --username root --password <your-password> ^
+     --namespace open_notebook --database open_notebook backup.surql
+   ```
+
+3. **Remove the containers.** Stopping is not enough: the stock compose file
+   uses `restart: always`, so Docker Desktop would start them again on its next
+   launch and they would fight the native services over ports 8000 and 5055.
+   `down` removes the containers but keeps the bind-mounted `surreal_data` and
+   `notebook_data` folders (do **not** add `-v`); `docker compose up -d` brings
+   the Docker setup back if you need to roll back:
+
+   ```batch
+   docker compose down
+   ```
+
+4. **Start SurrealDB on the existing data** (path from the compose file's
+   `rocksdb:/mydata/mydatabase.db`):
+
+   ```batch
+   surreal start --user root --pass <your-password> --bind 127.0.0.1:8000 rocksdb:surreal_data\mydatabase.db
+   ```
+
+5. **Fix what only made sense inside the container**, before starting the API
+   and worker. Run these in `surreal sql` (namespace/database `open_notebook`):
+
+   ```sql
+   -- Credentials that reached host services (Ollama, local embedding servers)
+   -- through host.docker.internal now run on the same machine:
+   UPDATE credential SET base_url = string::replace(base_url, 'host.docker.internal', '127.0.0.1')
+     WHERE base_url CONTAINS 'host.docker.internal';
+
+   -- A job that was running when the container stopped stays 'running' forever;
+   -- put it back in the queue (the worker picks up 'new' jobs on startup):
+   UPDATE command SET status = 'new' WHERE status = 'running';
+   ```
+
+6. **Start the API, worker and frontend** as described above.
+
+**Known limitation:** sources uploaded inside Docker store absolute container
+paths such as `/app/data/uploads/<file>.pdf`, which do not resolve on Windows.
+Their extracted text, notes and embeddings are unaffected — search and chat keep
+working — but features that re-read the original file (re-processing, download)
+will not find it for those older sources. New uploads are fine.
+
 ## Services & Ports
 
 | Service   | Port | URL                        |
@@ -282,4 +373,5 @@ Found another Windows-specific issue? Please share your solution!
 ---
 
 *Tested on Windows 11 ARM64 with Open Notebook v1.6.0*
+*Docker migration and production frontend build tested on Windows 11 x64 with Open Notebook v1.14.0 and SurrealDB 2.6.5*
 *Created: January 2026*

From 2866a9df22d24307b86dd1b75956a0c6f5e3e548 Mon Sep 17 00:00:00 2001
From: Som Samantray <92726151+SomSamantray@users.noreply.github.com>
Date: Sat, 3 Oct 2026 06:05:38 +0530
Subject: [PATCH 308/345] feat(credentials): versioned PBKDF2 key derivation
 (#1360)

* feat(credentials): versioned PBKDF2 key derivation with re-encryption pass

Derive Fernet keys with PBKDF2-HMAC-SHA256 (600k iterations, fixed app
salt) instead of bare SHA-256. New ciphertext carries a pbkdf2v1: marker;
legacy values keep decrypting and marked values fail closed. Adds an
idempotent POST /credentials/migrate-encryption pass over raw rows.

Refs #1317

* docs(credentials): PBKDF2 format, migration pass, and ADR-009

Document the versioned encryption format, the one-shot
POST /credentials/migrate-encryption pass, high-entropy key guidance,
and the forward-breaking downgrade warning.

Refs #1317

* fix(credentials): truthful migration summary and pinned fail-closed tests

Report singleton entries as migrated only after the rewrite succeeds;
add tests pinning placeholder, wrong-key, non-string, and write-failure
branches of the re-encryption pass.

* fix(credentials): address review feedback on PBKDF2 migration

Verify marked input decrypts before treating it as already-encrypted so
marker-like plaintext can never be stored undecryptable; sanitize generic
decrypt errors server-side; report malformed singleton entries instead of
skipping silently; fix mounted route paths in docs and ADR date format;
pin the new branches with tests.

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                                  |   1 +
 api/credentials_service.py                    | 293 ++++++++++-
 api/routers/credentials.py                    |  64 ++-
 docs/7-DEVELOPMENT/content-processing.md      |   5 +-
 docs/7-DEVELOPMENT/credentials.md             |   5 +-
 .../ADR-009-pbkdf2-credential-encryption.md   |  25 +
 docs/7-DEVELOPMENT/security.md                |   3 +-
 open_notebook/utils/encryption.py             | 135 +++++-
 tests/test_encryption.py                      | 458 ++++++++++++++++++
 9 files changed, 932 insertions(+), 57 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-009-pbkdf2-credential-encryption.md
 create mode 100644 tests/test_encryption.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c5dae30e..16d6decc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Search page explains what each mode covers: text search matches source titles and full text, insights, and note titles and content, while vector search matches embedded source chunks, insights and note content only. Documented in `docs/3-FEATURES/search.md` and shown as a mode-aware hint under the search box, translated across all 14 locales (#1295, #1267)
 - README star-history chart points at a working renderer; the previous endpoint had been returning a "GitHub restricted access to star data" placeholder (#1262)
+- **Credential encryption now uses PBKDF2-HMAC-SHA256 (600k iterations) with versioned `pbkdf2v1:` ciphertext.** New keys are written in the new format; legacy values keep decrypting, and a one-shot `POST /api/credentials/migrate-encryption` pass upgrades stored keys (idempotent, fail-closed per record). Downgrade warning: versions predating this change cannot read the new format — back up the database before migrating (#1317)
 
 ## [1.14.0] - 2026-07-20
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 0684ce20..82908fa1 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -8,7 +8,7 @@ All functions raise ValueError for business errors (router converts to HTTPExcep
 """
 
 import os
-from typing import Dict, List
+from typing import Any, Dict, List, Literal
 
 import httpx
 from loguru import logger
@@ -24,7 +24,12 @@ from open_notebook.ai.model_discovery import (
 )
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.domain.credential import Credential
-from open_notebook.utils.encryption import get_secret_from_env
+from open_notebook.utils.encryption import (
+    PBKDF2_MARKER,
+    decrypt_value,
+    encrypt_value,
+    get_secret_from_env,
+)
 from open_notebook.utils.ssl_config import httpx_verify_setting
 from open_notebook.utils.url_validation import (
     prepare_pinned_http_target,
@@ -65,7 +70,9 @@ def require_encryption_key() -> None:
         )
 
 
-def credential_to_response(cred: Credential, model_count: int = 0) -> CredentialResponse:
+def credential_to_response(
+    cred: Credential, model_count: int = 0
+) -> CredentialResponse:
     """Convert a Credential domain object to API response."""
     return CredentialResponse(
         id=cred.id or "",
@@ -339,17 +346,27 @@ async def test_credential(credential_id: str) -> dict:
             )
             lc_model = model.to_langchain()
             await lc_model.ainvoke("Hi")
-            return {"provider": provider, "success": True, "message": "Connection successful"}
+            return {
+                "provider": provider,
+                "success": True,
+                "message": "Connection successful",
+            }
 
         elif test_type == "embedding":
             embedding_model = AIFactory.create_embedding(
                 model_name=test_model, provider=provider, config=config
             )
             await embedding_model.aembed(["test"])
-            return {"provider": provider, "success": True, "message": "Connection successful"}
+            return {
+                "provider": provider,
+                "success": True,
+                "message": "Connection successful",
+            }
 
         elif test_type == "text_to_speech":
-            AIFactory.create_text_to_speech(model_name=test_model, provider=provider, config=config)
+            AIFactory.create_text_to_speech(
+                model_name=test_model, provider=provider, config=config
+            )
             return {
                 "provider": provider,
                 "success": True,
@@ -364,7 +381,9 @@ async def test_credential(credential_id: str) -> dict:
 
     except Exception as e:
         if provider == "vertex" and _is_vertex_credentials_file_error(e):
-            logger.debug(f"Vertex credentials file error for credential {credential_id}: {e}")
+            logger.debug(
+                f"Vertex credentials file error for credential {credential_id}: {e}"
+            )
             return {
                 "provider": provider,
                 "success": False,
@@ -397,33 +416,47 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     # Static model lists for providers without a listing API
     STATIC_MODELS: Dict[str, List[str]] = {
         "voyage": [
-            "voyage-3", "voyage-3-lite", "voyage-code-3",
-            "voyage-finance-2", "voyage-law-2", "voyage-multilingual-2",
+            "voyage-3",
+            "voyage-3-lite",
+            "voyage-code-3",
+            "voyage-finance-2",
+            "voyage-law-2",
+            "voyage-multilingual-2",
         ],
         "elevenlabs": [
-            "eleven_multilingual_v2", "eleven_turbo_v2_5",
-            "eleven_turbo_v2", "eleven_monolingual_v1",
+            "eleven_multilingual_v2",
+            "eleven_turbo_v2_5",
+            "eleven_turbo_v2",
+            "eleven_monolingual_v1",
             "scribe_v1",  # speech-to-text
         ],
         "deepgram": [
             # TTS (Aura) voices
-            "aura-2-thalia-en", "aura-2-andromeda-en", "aura-2-helena-en",
-            "aura-2-apollo-en", "aura-2-arcas-en", "aura-2-asteria-en",
-            "aura-2-athena-en", "aura-2-hera-en", "aura-2-hermes-en",
+            "aura-2-thalia-en",
+            "aura-2-andromeda-en",
+            "aura-2-helena-en",
+            "aura-2-apollo-en",
+            "aura-2-arcas-en",
+            "aura-2-asteria-en",
+            "aura-2-athena-en",
+            "aura-2-hera-en",
+            "aura-2-hermes-en",
             "aura-2-atlas-en",
             # STT (Nova / Whisper) transcription models
-            "nova-3", "nova-2", "whisper-large", "whisper-medium",
-            "whisper-small", "whisper-base", "whisper-tiny",
+            "nova-3",
+            "nova-2",
+            "whisper-large",
+            "whisper-medium",
+            "whisper-small",
+            "whisper-base",
+            "whisper-tiny",
         ],
     }
 
     if provider in STATIC_MODELS:
         if not api_key and provider != "ollama":
             return []
-        return [
-            {"name": m, "provider": provider}
-            for m in STATIC_MODELS[provider]
-        ]
+        return [{"name": m, "provider": provider} for m in STATIC_MODELS[provider]]
 
     if provider == "anthropic":
         if not api_key:
@@ -540,9 +573,7 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     if provider == "omlx":
         omlx_url = base_url or "http://localhost:11435/v1"
         try:
-            target = await prepare_pinned_http_target(
-                models_endpoint(omlx_url), "omlx"
-            )
+            target = await prepare_pinned_http_target(models_endpoint(omlx_url), "omlx")
             headers = dict(target.headers)
             if api_key:
                 headers["Authorization"] = f"Bearer {api_key}"
@@ -889,7 +920,9 @@ async def migrate_from_env() -> dict:
                 not_configured.append(provider)
                 continue
 
-            logger.info(f"[{provider}] Env vars detected, checking for existing credentials")
+            logger.info(
+                f"[{provider}] Env vars detected, checking for existing credentials"
+            )
 
             existing = await Credential.get_by_provider(provider)
             if existing:
@@ -949,3 +982,215 @@ async def migrate_from_env() -> dict:
         "not_configured": not_configured,
         "errors": errors,
     }
+
+
+# Placeholder the domain layer substitutes when a stored key cannot be
+# decrypted (open_notebook/domain/credential.py). Must never be re-encrypted:
+# it is a marker of a previous failure, not a secret.
+_UNDECRYPTABLE_PLACEHOLDER = "UNDECRYPTABLE"
+
+# Closed set of per-record outcomes for the encryption-scheme pass.
+ReencryptStatus = Literal["migrated", "skipped", "error"]
+
+
+def _reencrypt_stored_value(stored: object) -> tuple[ReencryptStatus, str]:
+    """
+    Decide the fate of one stored api_key value.
+
+    Returns (status, payload) where status is one of migrated, skipped, or
+    error. Payload is the new marked value for migrated rows, otherwise a
+    short reason code. Reasons carry record context only, never key material.
+
+    Args:
+        stored: The raw api_key value read from the database.
+
+    Returns:
+        Tuple of status and payload.
+    """
+    if stored is None or stored == "":
+        return ("skipped", "empty")
+    if not isinstance(stored, str):
+        return ("error", "unexpected-type")
+    if stored == _UNDECRYPTABLE_PLACEHOLDER:
+        return ("error", "decrypt-placeholder")
+    if stored.startswith(PBKDF2_MARKER):
+        try:
+            decrypt_value(stored)
+        except ValueError:
+            return ("error", "undecryptable-marked")
+        return ("skipped", "already-migrated")
+    try:
+        secret = decrypt_value(stored)
+    except ValueError:
+        return ("error", "undecryptable-legacy")
+    return ("migrated", encrypt_value(secret))
+
+
+def _record_settled_outcome(
+    status: ReencryptStatus,
+    payload: str,
+    label: str,
+    skipped: List[str],
+    errors: List[str],
+) -> None:
+    """
+    Record a skipped/error outcome plus its log line.
+
+    Only called for settled (non-migrated) outcomes; migrated rows take
+    their own write path. Reasons carry record context only, never key
+    material.
+
+    Args:
+        status: Settled outcome (skipped or error).
+        payload: Skip reason or error reason.
+        label: Record label for logs and summaries.
+        skipped: Summary list to append skip entries to.
+        errors: Summary list to append error entries to.
+    """
+    if status == "skipped":
+        skipped.append(f"{label}: {payload}")
+    else:
+        logger.warning(f"[{label}] Left untouched: {payload}")
+        errors.append(f"{label}: {payload}")
+
+
+def _migrate_provider_config_entries(
+    creds: Dict[str, Any],
+    skipped: List[str],
+    errors: List[str],
+) -> List[str]:
+    """
+    Re-encrypt nested provider_configs entries in memory.
+
+    Mutates entries with successfully decrypted values; undecryptable
+    entries are left untouched and reported. Never writes to the database:
+    the caller persists the map and owns the migrated labels, so a failed
+    rewrite is never reported as migrated.
+
+    Args:
+        creds: The raw credentials map from the singleton record.
+        skipped: Summary list to append skip entries to.
+        errors: Summary list to append error entries to.
+
+    Returns:
+        Labels re-encrypted in memory, pending persistence.
+    """
+    pending: List[str] = []
+    for provider, entries in creds.items():
+        if not isinstance(entries, list):
+            errors.append(f"provider_configs/{provider}: unexpected-group-type")
+            continue
+        for index, entry in enumerate(entries):
+            if not isinstance(entry, dict):
+                errors.append(
+                    f"provider_configs/{provider}/{index}: unexpected-entry-type"
+                )
+                continue
+            label = f"provider_configs/{provider}/{entry.get('name', index)}"
+            try:
+                status, payload = _reencrypt_stored_value(entry.get("api_key"))
+            except Exception as e:
+                logger.error(f"[{label}] Re-encryption FAILED: {type(e).__name__}")
+                errors.append(f"{label}: unexpected-failure")
+                continue
+            if status == "migrated":
+                entry["api_key"] = payload
+                pending.append(label)
+            else:
+                _record_settled_outcome(status, payload, label, skipped, errors)
+    return pending
+
+
+async def migrate_encryption_scheme() -> dict:
+    """
+    Re-encrypt stored API keys into the versioned PBKDF2 format.
+
+    One-shot, idempotent, and fail-closed per record. Reads raw database
+    rows (never domain-decrypted objects, which can carry UNDECRYPTABLE
+    placeholders) and writes a row back only when its value decrypted
+    successfully. Undecryptable rows are left untouched and reported.
+
+    Run as a single-admin operation: there is no locking, so concurrent
+    credential edits during the pass can be overwritten. Re-running over a
+    migrated corpus changes nothing.
+
+    Returns dict with message, migrated, skipped, errors.
+    """
+    from open_notebook.database.repository import (
+        ensure_record_id,
+        repo_query,
+        repo_update,
+        repo_upsert,
+    )
+    from open_notebook.domain.provider_config import ProviderConfig
+
+    logger.info("=== Starting encryption-scheme migration ===")
+
+    require_encryption_key()
+    logger.info("Encryption key verified")
+
+    migrated: List[str] = []
+    skipped: List[str] = []
+    errors: List[str] = []
+
+    rows = await repo_query("SELECT id, api_key FROM credential")
+    for row in rows:
+        record_id = str(row.get("id", ""))
+        try:
+            status, payload = _reencrypt_stored_value(row.get("api_key"))
+        except Exception as e:
+            logger.error(f"[{record_id}] Re-encryption FAILED: {type(e).__name__}")
+            errors.append(f"{record_id}: unexpected-failure")
+            continue
+        if status == "migrated":
+            try:
+                await repo_update("credential", record_id, {"api_key": payload})
+            except Exception as e:
+                logger.error(f"[{record_id}] Write FAILED: {type(e).__name__}")
+                errors.append(f"{record_id}: write-failed")
+                continue
+            logger.info(f"[{record_id}] Re-encrypted to versioned format")
+            migrated.append(record_id)
+        else:
+            _record_settled_outcome(status, payload, record_id, skipped, errors)
+
+    singleton_rows = await repo_query(
+        "SELECT * FROM ONLY $record_id",
+        {"record_id": ensure_record_id(ProviderConfig.record_id)},
+    )
+    if singleton_rows:
+        data = singleton_rows[0] if isinstance(singleton_rows, list) else singleton_rows
+        creds = data.get("credentials") if isinstance(data, dict) else None
+        if isinstance(creds, dict):
+            pending = _migrate_provider_config_entries(creds, skipped, errors)
+            if pending:
+                try:
+                    await repo_upsert(
+                        "open_notebook",
+                        ProviderConfig.record_id,
+                        {"credentials": creds},
+                    )
+                except Exception as e:
+                    logger.error(f"Singleton rewrite FAILED: {type(e).__name__}")
+                    errors.extend(f"{label}: write-failed" for label in pending)
+                    pending = []
+                migrated.extend(pending)
+
+    logger.info(
+        "=== Encryption-scheme migration complete === "
+        f"migrated={len(migrated)} skipped={len(skipped)} errors={len(errors)}"
+    )
+    if migrated:
+        logger.info(f"  Migrated: {', '.join(migrated)}")
+    if errors:
+        logger.error(f"  Errors: {'; '.join(errors)}")
+
+    return {
+        "message": (
+            f"Encryption migration complete. Migrated {len(migrated)} "
+            f"record(s) with {len(errors)} error(s)."
+        ),
+        "migrated": migrated,
+        "skipped": skipped,
+        "errors": errors,
+    }
diff --git a/api/routers/credentials.py b/api/routers/credentials.py
index d4b6bc72..149e2268 100644
--- a/api/routers/credentials.py
+++ b/api/routers/credentials.py
@@ -36,6 +36,9 @@ from api.credentials_service import (
 from api.credentials_service import (
     get_env_status as svc_get_env_status,
 )
+from api.credentials_service import (
+    migrate_encryption_scheme as svc_migrate_encryption_scheme,
+)
 from api.credentials_service import (
     migrate_from_env as svc_migrate_from_env,
 )
@@ -104,7 +107,9 @@ async def get_env_status():
         raise
     except Exception as e:
         logger.error(f"Error checking env status: {e}")
-        raise HTTPException(status_code=500, detail="Failed to check environment status")
+        raise HTTPException(
+            status_code=500, detail="Failed to check environment status"
+        )
 
 
 # =============================================================================
@@ -155,7 +160,9 @@ async def list_credentials_by_provider(provider: str):
         raise
     except Exception as e:
         logger.error(f"Error listing credentials for {provider}: {e}")
-        raise HTTPException(status_code=500, detail="Failed to list credentials for provider")
+        raise HTTPException(
+            status_code=500, detail="Failed to list credentials for provider"
+        )
 
 
 @router.post("", response_model=CredentialResponse, status_code=201)
@@ -168,8 +175,12 @@ async def create_credential(request: CreateCredentialRequest):
 
     # Validate all URL fields
     for url_field in [
-        request.base_url, request.endpoint, request.endpoint_llm,
-        request.endpoint_embedding, request.endpoint_stt, request.endpoint_tts,
+        request.base_url,
+        request.endpoint,
+        request.endpoint_llm,
+        request.endpoint_embedding,
+        request.endpoint_stt,
+        request.endpoint_tts,
     ]:
         if url_field:
             try:
@@ -233,8 +244,12 @@ async def update_credential(credential_id: str, request: UpdateCredentialRequest
 
     # Validate all URL fields being updated
     for url_field in [
-        request.base_url, request.endpoint, request.endpoint_llm,
-        request.endpoint_embedding, request.endpoint_stt, request.endpoint_tts,
+        request.base_url,
+        request.endpoint,
+        request.endpoint_llm,
+        request.endpoint_embedding,
+        request.endpoint_stt,
+        request.endpoint_tts,
     ]:
         if url_field:
             try:
@@ -480,8 +495,37 @@ async def migrate_from_provider_config():
     except OpenNotebookError:
         raise
     except Exception as e:
-        logger.error(f"ProviderConfig migration FAILED: {type(e).__name__}: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail="Migration from provider config failed")
+        logger.error(
+            f"ProviderConfig migration FAILED: {type(e).__name__}: {e}", exc_info=True
+        )
+        raise HTTPException(
+            status_code=500, detail="Migration from provider config failed"
+        )
+
+
+@router.post("/migrate-encryption")
+async def migrate_encryption():
+    """Re-encrypt stored API keys into the versioned PBKDF2 format.
+
+    Inherits the global password auth with no exemption: when
+    OPEN_NOTEBOOK_PASSWORD is unset, auth is disabled instance-wide and
+    this endpoint is reachable by anyone with network access, exactly like
+    the other migration endpoints. Set a password before running the pass
+    on a shared network.
+    """
+    try:
+        return await svc_migrate_encryption_scheme()
+    except ValueError as e:
+        raise _handle_value_error(e)
+    except HTTPException:
+        raise
+    except OpenNotebookError:
+        raise
+    except Exception as e:
+        logger.error(
+            f"Encryption migration FAILED: {type(e).__name__}: {e}", exc_info=True
+        )
+        raise HTTPException(status_code=500, detail="Encryption migration failed")
 
 
 @router.post("/migrate-from-env")
@@ -497,4 +541,6 @@ async def migrate_from_env():
         raise
     except Exception as e:
         logger.error(f"Env migration FAILED: {type(e).__name__}: {e}", exc_info=True)
-        raise HTTPException(status_code=500, detail="Migration from environment variables failed")
+        raise HTTPException(
+            status_code=500, detail="Migration from environment variables failed"
+        )
diff --git a/docs/7-DEVELOPMENT/content-processing.md b/docs/7-DEVELOPMENT/content-processing.md
index 169b1bf1..cbc33031 100644
--- a/docs/7-DEVELOPMENT/content-processing.md
+++ b/docs/7-DEVELOPMENT/content-processing.md
@@ -47,8 +47,9 @@ The single implementation behind both context consumers:
 Field-level encryption for sensitive values (API keys) stored in the database, using Fernet (AES-128-CBC + HMAC-SHA256).
 
 - Key source: `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` (Docker secrets) → `OPEN_NOTEBOOK_ENCRYPTION_KEY`. **No default** — credential storage is unavailable until the key is set.
-- Any string works as key: it's derived to a Fernet key via SHA-256, lazily on first use.
-- Decryption falls back gracefully: an `InvalidToken` (legacy unencrypted data) returns the original value, so pre-encryption databases keep working.
+- Any string works as key: it's derived to a Fernet key via PBKDF2-HMAC-SHA256 (600k iterations, fixed app salt), lazily on first use; the derived instance is cached per process.
+- New values carry a `pbkdf2v1:` marker. Decryption branches on it: marked values decrypt under PBKDF2 only (any failure raises — never returned as a key); unmarked values try the legacy SHA-256 derivation, then fall back to plaintext for pre-encryption data.
+- One-shot upgrade: `POST /api/credentials/migrate-encryption` rewrites stored keys into the marked format (idempotent, fail-closed per record). Lazy re-encrypt-on-save alone is not enough since keys are set once.
 - Key rotation is **not implemented** — changing the key orphans previously encrypted values.
 
 ## Text utilities (`utils/text_utils.py`)
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
index 1be74e81..49b7b2e1 100644
--- a/docs/7-DEVELOPMENT/credentials.md
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -23,7 +23,7 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 - One record per credential (e.g. "My OpenAI Key", "Work Anthropic") — multiple credentials per provider are supported.
 - Fields: `name`, `provider`, `modalities`, `api_key` (Pydantic `SecretStr`, masked in logs), plus provider-specific config (`base_url`, `endpoint`, `api_version`, mode-specific endpoints, `project`, `location`, `credentials_path`).
-- `api_key` is encrypted with `encrypt_value()` before save and decrypted on read (`get()` / `get_all()` are overridden). Encryption requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` (see [content-processing.md](content-processing.md#encryption) for the encryption utility itself).
+- `api_key` is encrypted with `encrypt_value()` before save and decrypted on read (`get()` / `get_all()` are overridden). New values use the versioned PBKDF2 format (`pbkdf2v1:` marker); legacy values keep decrypting. Encryption requires `OPEN_NOTEBOOK_ENCRYPTION_KEY` (see [content-processing.md](content-processing.md#encryption) for the encryption utility itself).
 - `to_esperanto_config()` builds the config dict passed to Esperanto's `AIFactory.create_*`.
 - `provider_config.py` still exists only to migrate legacy `ProviderConfig` records.
 
@@ -34,7 +34,7 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 ## The API surface (`api/routers/credentials.py`)
 
-CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and two migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`). Swagger at `/docs` documents the shapes.
+CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and three migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`, `/migrate-encryption`). Swagger at `/docs` documents the shapes.
 
 **Supported providers (17)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). One manual copy remains, enforced by `tests/test_credential_provider_validation.py`: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime):
 
@@ -63,3 +63,4 @@ Both migration endpoints are idempotent summaries (`migrated` / `skipped` / `err
 
 - **From env vars**: creates Credential records for providers whose env vars are set.
 - **From legacy ProviderConfig**: converts old singleton records into individual Credentials.
+- **Encryption-scheme (`/migrate-encryption`)**: rewrites stored `api_key` values (Credential rows plus nested `provider_configs` entries) into the versioned PBKDF2 format. Reads raw rows, writes back only on successful decrypt, runs as a single-admin operation, and is safe to re-run.
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-009-pbkdf2-credential-encryption.md b/docs/7-DEVELOPMENT/decisions/ADR-009-pbkdf2-credential-encryption.md
new file mode 100644
index 00000000..d2d36d66
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-009-pbkdf2-credential-encryption.md
@@ -0,0 +1,25 @@
+# ADR-009: PBKDF2 credential key derivation with versioned ciphertext
+
+- **Status**: Accepted
+- **Date**: 2026-09
+- **Related**: #1317 (supersedes stale #1020), [security.md](../security.md), [content-processing.md](../content-processing.md)
+
+## Context
+
+Stored provider API keys were encrypted under a Fernet key derived with a single unsalted SHA-256 round — fast to compute, which makes offline brute force of a weak `OPEN_NOTEBOOK_ENCRYPTION_KEY` passphrase cheap. The module had no tests and no upgrade path.
+
+## Decision
+
+**Derive with PBKDF2-HMAC-SHA256 (600k iterations, fixed application salt) and mark new ciphertext with a `pbkdf2v1:` prefix, keeping a legacy decrypt path for unmarked values.** The salt is shared by all deployments by design: the threat model assumes a high-entropy key, so the salt provides domain separation and brute-force slowdown, not per-install uniqueness. A per-install random salt would complicate the done-marker and the downgrade story for no modeled gain. Lazy re-encrypt-on-save was rejected as the migration mechanism because API keys are set once and would never upgrade — a one-shot `POST /api/credentials/migrate-encryption` pass (idempotent, fail-closed per record) does the upgrade instead.
+
+## Alternatives considered
+
+- **argon2/scrypt** — stronger memory-hardness, but a new dependency for unsettled gain; PBKDF2 is stdlib and matches the agreed hardening level.
+- **Re-encryption as a `commands/` worker job** — wrong shape: worker jobs are async background work, while the pass is an admin one-shot with a request/response summary. A migration endpoint mirroring the existing credentials migrations fits.
+- **Opportunistic re-encrypt on read** — deferred: it turns every read into a potential write and was not asked for; the explicit pass plus always-new-format writes converge the corpus.
+
+## Consequences
+
+- New values are forward-breaking: pre-migration code cannot use marked values — depending on token bytes it either raises a decryption error or mis-presents the ciphertext as a plaintext key (verified against the pre-change decrypt path) — so rollback after partial migration requires a database backup (CHANGELOG warning).
+- PBKDF2 cost (~50ms+ per fresh derivation) is cached per process; the iteration count is a module constant so a future guidance change needs a new marker version.
+- Changing `OPEN_NOTEBOOK_ENCRYPTION_KEY` still orphans stored values — key rotation remains unimplemented.
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
index af4befc5..151c0ef1 100644
--- a/docs/7-DEVELOPMENT/security.md
+++ b/docs/7-DEVELOPMENT/security.md
@@ -160,9 +160,10 @@ The default CORS configuration allows all origins (`allow_origins=["*"]`). `allo
 
 `OPEN_NOTEBOOK_ENCRYPTION_KEY` is used to encrypt API keys stored in SurrealDB. In production:
 
-- Set a strong, unique key (do not use the default)
+- Set a strong, unique, high-entropy key (do not use the default, a short word, or a reused password). The key is stretched with PBKDF2-HMAC-SHA256 (600k iterations), which slows brute force but cannot save a guessable passphrase — entropy is the actual security.
 - Use Docker secrets via `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` when possible
 - Never log or expose this value
+- After upgrading, run the one-shot `POST /api/credentials/migrate-encryption` pass to rewrite pre-existing keys into the versioned format. Back up the database first: the new format is forward-breaking — versions predating the migration cannot read it (see CHANGELOG).
 
 ### Environment variables
 
diff --git a/open_notebook/utils/encryption.py b/open_notebook/utils/encryption.py
index 87cadd9d..090de503 100644
--- a/open_notebook/utils/encryption.py
+++ b/open_notebook/utils/encryption.py
@@ -5,8 +5,10 @@ This module provides encryption/decryption for API keys stored in the database.
 Fernet uses AES-128-CBC with HMAC-SHA256 for authenticated encryption.
 
 OPEN_NOTEBOOK_ENCRYPTION_KEY accepts **any string**. A Fernet key is derived
-from it via SHA-256, so users can set a simple passphrase like
-``OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret`` and it will work.
+from it via PBKDF2-HMAC-SHA256, so users can set a simple passphrase like
+``OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret`` and it will work. Values written
+by versions predating the PBKDF2 derivation (bare SHA-256, unmarked) still
+decrypt through the legacy path.
 
 Usage:
     # Encrypt before storing
@@ -101,20 +103,67 @@ def _get_encryption_key() -> str:
     return _ENCRYPTION_KEY
 
 
-def _ensure_fernet_key(key: str) -> str:
-    """
-    Derive a valid Fernet key from an arbitrary string via SHA-256.
+# Version marker prefixed to every value written by the PBKDF2 derivation.
+# Unmarked values are legacy (bare SHA-256 derivation) or plaintext.
+PBKDF2_MARKER: str = "pbkdf2v1:"
 
-    Any string is accepted as input. The key is derived by hashing it with
-    SHA-256 and encoding the result as URL-safe base64.
+# PBKDF2 cost parameter (OWASP guidance for HMAC-SHA256). Kept as a module
+# constant so tests can monkeypatch it low; production must keep 600k.
+PBKDF2_ITERATIONS: int = 600_000
+
+# Fixed application salt (domain separation). Shared by all deployments by
+# design: the threat model assumes a high-entropy OPEN_NOTEBOOK_ENCRYPTION_KEY
+# (see docs/7-DEVELOPMENT/security.md), so the salt slows brute force without
+# acting as a per-install secret. Recorded in ADR-009.
+PBKDF2_SALT: bytes = b"open-notebook-credential-v1"
+
+
+def derive_fernet_key(passphrase: str) -> str:
     """
-    derived = hashlib.sha256(key.encode()).digest()
+    Derive a valid Fernet key from an arbitrary passphrase via PBKDF2.
+
+    Uses PBKDF2-HMAC-SHA256 with the fixed application salt. Deliberately
+    expensive so offline brute force of a weak passphrase is costly.
+
+    Args:
+        passphrase: The configured encryption key string.
+
+    Returns:
+        URL-safe base64-encoded 32-byte derived key.
+    """
+    derived = hashlib.pbkdf2_hmac(
+        "sha256", passphrase.encode(), PBKDF2_SALT, PBKDF2_ITERATIONS
+    )
     return base64.urlsafe_b64encode(derived).decode()
 
 
+def _derive_legacy_fernet_key(passphrase: str) -> str:
+    """
+    Derive the pre-#1317 Fernet key (bare unsalted SHA-256).
+
+    Kept so values written before the PBKDF2 migration still decrypt.
+    Must never be used for new writes.
+
+    Args:
+        passphrase: The configured encryption key string.
+
+    Returns:
+        URL-safe base64-encoded derived key.
+    """
+    derived = hashlib.sha256(passphrase.encode()).digest()
+    return base64.urlsafe_b64encode(derived).decode()
+
+
+# Cached Fernet instances, one per derivation scheme, initialized lazily on
+# first use alongside _ENCRYPTION_KEY. Caching matters because PBKDF2 at the
+# production iteration count is deliberately expensive (~50ms+).
+_FERNET: Optional[Fernet] = None
+_FERNET_LEGACY: Optional[Fernet] = None
+
+
 def get_fernet() -> Fernet:
     """
-    Get Fernet instance with the configured encryption key.
+    Get Fernet instance with the configured encryption key (PBKDF2 scheme).
 
     Returns:
         Fernet instance.
@@ -122,24 +171,59 @@ def get_fernet() -> Fernet:
     Raises:
         ValueError: If encryption key is not configured.
     """
-    return Fernet(_ensure_fernet_key(_get_encryption_key()).encode())
+    global _FERNET
+    if _FERNET is None:
+        _FERNET = Fernet(derive_fernet_key(_get_encryption_key()).encode())
+    return _FERNET
+
+
+def _get_legacy_fernet() -> Fernet:
+    """
+    Get Fernet instance under the pre-#1317 derivation (decrypt-only).
+
+    Returns:
+        Fernet instance.
+
+    Raises:
+        ValueError: If encryption key is not configured.
+    """
+    global _FERNET_LEGACY
+    if _FERNET_LEGACY is None:
+        _FERNET_LEGACY = Fernet(
+            _derive_legacy_fernet_key(_get_encryption_key()).encode()
+        )
+    return _FERNET_LEGACY
 
 
 def encrypt_value(value: str) -> str:
     """
-    Encrypt a string value using Fernet symmetric encryption.
+    Encrypt a string value using Fernet symmetric encryption (PBKDF2 scheme).
+
+    The stored form carries the version marker. Input that is already valid
+    marked ciphertext is returned unchanged so a decrypt/save round trip can
+    never double-wrap; anything else (including marker-like plaintext) is
+    encrypted normally, so no input can be stored in a form that will never
+    decrypt.
 
     Args:
         value: The plain text string to encrypt.
 
     Returns:
-        Base64-encoded encrypted string.
+        Version-marked encrypted string.
 
     Raises:
         ValueError: If encryption is not configured.
     """
+    if value.startswith(PBKDF2_MARKER):
+        try:
+            decrypt_value(value)
+        except ValueError:
+            pass
+        else:
+            logger.debug("encrypt_value received valid marked input; leaving as-is")
+            return value
     fernet = get_fernet()
-    return fernet.encrypt(value.encode()).decode()
+    return PBKDF2_MARKER + fernet.encrypt(value.encode()).decode()
 
 
 def looks_like_fernet_token(s: str) -> bool:
@@ -168,7 +252,9 @@ def decrypt_value(value: str) -> str:
     """
     Decrypt a Fernet-encrypted string value.
 
-    Handles graceful fallback for legacy unencrypted data.
+    Version-marked values decrypt under PBKDF2 only; any failure raises and
+    the input is never returned as if it were a usable key. Unmarked values
+    take the legacy path (old derivation, then plaintext fallback).
 
     Args:
         value: The encrypted string (or plain text for legacy data).
@@ -177,13 +263,24 @@ def decrypt_value(value: str) -> str:
         Decrypted plain text string, or original value if not encrypted.
 
     Raises:
-        ValueError: If encryption is not configured or if decryption fails
-            for what appears to be encrypted data (wrong key).
+        ValueError: If encryption is not configured, if a marked value
+            fails to decrypt, or if unmarked data looks encrypted but the
+            key is incorrect.
     """
-    fernet = get_fernet()
+    if value.startswith(PBKDF2_MARKER):
+        try:
+            return get_fernet().decrypt(value[len(PBKDF2_MARKER) :].encode()).decode()
+        except InvalidToken as e:
+            raise ValueError(
+                "Decryption failed: versioned value could not be decrypted. "
+                "Check OPEN_NOTEBOOK_ENCRYPTION_KEY configuration."
+            ) from e
+        except Exception as e:
+            logger.error(f"Decryption failed: {e}")
+            raise ValueError("Decryption failed: unable to decrypt value.") from e
 
     try:
-        return fernet.decrypt(value.encode()).decode()
+        return _get_legacy_fernet().decrypt(value.encode()).decode()
     except InvalidToken:
         if looks_like_fernet_token(value):
             # Looks like encrypted data but failed to decrypt - likely wrong key
@@ -195,4 +292,4 @@ def decrypt_value(value: str) -> str:
         return value
     except Exception as e:
         logger.error(f"Decryption failed: {e}")
-        raise ValueError(f"Decryption failed: {str(e)}")
+        raise ValueError("Decryption failed: unable to decrypt value.")
diff --git a/tests/test_encryption.py b/tests/test_encryption.py
new file mode 100644
index 00000000..6ab2d1b5
--- /dev/null
+++ b/tests/test_encryption.py
@@ -0,0 +1,458 @@
+"""
+Encryption contract for credential API keys (issue #1317).
+
+Locks the versioned PBKDF2 derivation: new values carry a marker and
+decrypt only under PBKDF2, legacy Fernet values and plaintext keep
+reading, and a marked value under the wrong key raises instead of
+leaking ciphertext shaped like a key.
+"""
+
+import base64
+import hashlib
+
+import pytest
+from cryptography.fernet import Fernet
+from pydantic import SecretStr
+
+from open_notebook.utils import encryption as enc
+from open_notebook.utils.encryption import decrypt_value, encrypt_value
+
+
+@pytest.fixture()
+def enc_key(monkeypatch):
+    """Isolate the module from ambient env and cached keys per test."""
+    monkeypatch.setenv("OPEN_NOTEBOOK_ENCRYPTION_KEY", "test-passphrase")
+    monkeypatch.delenv("OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE", raising=False)
+    monkeypatch.setattr(enc, "_ENCRYPTION_KEY", None)
+    monkeypatch.setattr(enc, "_FERNET", None)
+    monkeypatch.setattr(enc, "_FERNET_LEGACY", None)
+    return "test-passphrase"
+
+
+@pytest.fixture()
+def fast_kdf(monkeypatch, enc_key):
+    """Lower the iteration count so the suite stays fast.
+
+    One test asserts the production constant separately.
+    """
+    monkeypatch.setattr(enc, "PBKDF2_ITERATIONS", 1_000)
+    return enc_key
+
+
+def _legacy_token(secret: str, passphrase: str = "test-passphrase") -> str:
+    """Ciphertext as written before #1317 (bare SHA-256 derivation)."""
+    derived = hashlib.sha256(passphrase.encode()).digest()
+    fernet = Fernet(base64.urlsafe_b64encode(derived))
+    return fernet.encrypt(secret.encode()).decode()
+
+
+def test_production_iteration_count():
+    """The shipped cost parameter matches the agreed hardening level."""
+    assert enc.PBKDF2_ITERATIONS == 600_000
+
+
+def test_kdf_is_pbkdf2_not_sha256(enc_key):
+    """The derived key equals PBKDF2-HMAC-SHA256 output, not bare SHA-256."""
+    expected = base64.urlsafe_b64encode(
+        hashlib.pbkdf2_hmac("sha256", enc_key.encode(), enc.PBKDF2_SALT, 600_000)
+    ).decode()
+    assert enc.derive_fernet_key(enc_key) == expected
+    assert (
+        enc.derive_fernet_key(enc_key)
+        != base64.urlsafe_b64encode(hashlib.sha256(enc_key.encode()).digest()).decode()
+    )
+
+
+def test_round_trip_new_format(fast_kdf):
+    """Encrypt then decrypt returns the original secret, marked at rest."""
+    stored = encrypt_value("sk-live-secret")
+    assert stored.startswith(enc.PBKDF2_MARKER)
+    assert decrypt_value(stored) == "sk-live-secret"
+
+
+def test_legacy_fernet_fallback(fast_kdf):
+    """Ciphertext written by the old derivation still decrypts."""
+    assert decrypt_value(_legacy_token("sk-legacy")) == "sk-legacy"
+
+
+def test_legacy_plaintext_passthrough(fast_kdf):
+    """Unencrypted legacy values pass through decryption unchanged."""
+    assert decrypt_value("sk-plain-legacy") == "sk-plain-legacy"
+
+
+def test_marked_value_wrong_key_raises(fast_kdf, monkeypatch):
+    """A marked value under the wrong key raises, never returns ciphertext."""
+    stored = encrypt_value("sk-live-secret")
+    monkeypatch.setenv("OPEN_NOTEBOOK_ENCRYPTION_KEY", "wrong-passphrase")
+    monkeypatch.setattr(enc, "_ENCRYPTION_KEY", None)
+    monkeypatch.setattr(enc, "_FERNET", None)
+    monkeypatch.setattr(enc, "_FERNET_LEGACY", None)
+    with pytest.raises(ValueError):
+        decrypt_value(stored)
+
+
+def test_corrupt_marked_value_raises(fast_kdf):
+    """Truncated or non-base64 marked payloads raise instead of passing through."""
+    with pytest.raises(ValueError):
+        decrypt_value(enc.PBKDF2_MARKER + "not-valid-base64!!!")
+    with pytest.raises(ValueError):
+        decrypt_value(enc.PBKDF2_MARKER + "aGk=")
+
+
+def test_marker_like_plaintext_is_encrypted(fast_kdf):
+    """Marker-like plaintext encrypts normally and round-trips losslessly."""
+    plaintext = enc.PBKDF2_MARKER + "looks-like-a-key"
+    stored = encrypt_value(plaintext)
+    assert stored.startswith(enc.PBKDF2_MARKER)
+    assert decrypt_value(stored) == plaintext
+
+
+def test_corrupt_marked_input_is_not_passed_through(fast_kdf):
+    """Corrupt marked input encrypts to a decryptable value, never passthrough."""
+    corrupt = enc.PBKDF2_MARKER + "aGk="
+    stored = encrypt_value(corrupt)
+    assert decrypt_value(stored) == corrupt
+
+
+def test_double_encrypt_guard(fast_kdf):
+    """Encrypting an already-marked value does not double-wrap it."""
+    stored = encrypt_value("sk-live-secret")
+    assert encrypt_value(stored) == stored
+
+
+def test_secretstr_shaped_value_round_trip(fast_kdf):
+    """Values shaped like domain SecretStr payloads survive the round trip."""
+    secret = SecretStr("sk-domain-shape").get_secret_value()
+    assert decrypt_value(encrypt_value(secret)) == "sk-domain-shape"
+
+
+class _FakeDB:
+    """In-memory stand-in for the repository layer (no SurrealDB needed)."""
+
+    def __init__(self, credentials, singleton):
+        self.credentials = [dict(r) for r in credentials]
+        self.singleton = dict(singleton) if singleton is not None else None
+        self.updates = []
+        self.upserts = []
+
+    async def query(self, query_str, vars=None):
+        if "FROM credential" in query_str:
+            return [dict(r) for r in self.credentials]
+        if "ONLY $record_id" in query_str:
+            return [dict(self.singleton)] if self.singleton is not None else []
+        raise AssertionError(f"unexpected query: {query_str}")
+
+    async def update(self, table, record_id, data):
+        self.updates.append((table, str(record_id), dict(data)))
+        for row in self.credentials:
+            if str(row.get("id")) == str(record_id):
+                row.update(data)
+        return []
+
+    async def upsert(self, table, record_id, data):
+        self.upserts.append((table, str(record_id), dict(data)))
+        if self.singleton is not None:
+            self.singleton.update(data)
+        return []
+
+
+@pytest.fixture()
+def patch_repo(monkeypatch):
+    """Patch the repository boundary; each test supplies its own fake."""
+    import open_notebook.database.repository as repo
+
+    def install(fake):
+        monkeypatch.setattr(repo, "repo_query", fake.query)
+        monkeypatch.setattr(repo, "repo_update", fake.update)
+        monkeypatch.setattr(repo, "repo_upsert", fake.upsert)
+        return fake
+
+    return install
+
+
+def _singleton(entries):
+    """A raw provider_configs row holding nested credential entries."""
+    return {"id": "open_notebook:provider_configs", "credentials": entries}
+
+
+@pytest.mark.asyncio
+async def test_pass_migrates_legacy_rows(patch_repo, fast_kdf):
+    """Legacy rows are rewritten marked; verified rows are skipped."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    legacy = _legacy_token("sk-legacy")
+    marked = encrypt_value("sk-new")
+    fake = patch_repo(
+        _FakeDB(
+            [
+                {"id": "credential:one", "api_key": legacy},
+                {"id": "credential:two", "api_key": marked},
+                {"id": "credential:three", "api_key": None},
+                {"id": "credential:four", "api_key": ""},
+            ],
+            _singleton({}),
+        )
+    )
+
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == ["credential:one"]
+    assert sorted(result["skipped"]) == [
+        "credential:four: empty",
+        "credential:three: empty",
+        "credential:two: already-migrated",
+    ]
+    assert result["errors"] == []
+    rewritten = next(r for r in fake.credentials if r["id"] == "credential:one")
+    assert rewritten["api_key"].startswith(enc.PBKDF2_MARKER)
+    assert decrypt_value(rewritten["api_key"]) == "sk-legacy"
+
+
+@pytest.mark.asyncio
+async def test_pass_is_fail_closed_per_record(patch_repo, fast_kdf):
+    """Corrupt rows are reported and left byte-identical; the pass continues."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    corrupt = enc.PBKDF2_MARKER + "aGk="
+    before = {"id": "credential:bad", "api_key": corrupt}
+    fake = patch_repo(
+        _FakeDB(
+            [
+                dict(before),
+                {"id": "credential:good", "api_key": _legacy_token("sk-ok")},
+            ],
+            _singleton({}),
+        )
+    )
+
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == ["credential:good"]
+    assert len(result["errors"]) == 1
+    assert result["errors"][0].startswith("credential:bad:")
+    assert "sk-" not in result["errors"][0]
+    untouched = next(r for r in fake.credentials if r["id"] == "credential:bad")
+    assert untouched["api_key"] == corrupt
+    assert [u[1] for u in fake.updates] == ["credential:good"]
+
+
+@pytest.mark.asyncio
+async def test_pass_is_idempotent(patch_repo, fast_kdf):
+    """A second run over a migrated corpus changes nothing and errors nothing."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    patch_repo(
+        _FakeDB(
+            [{"id": "credential:one", "api_key": _legacy_token("sk-legacy")}],
+            _singleton({}),
+        )
+    )
+    first = await migrate_encryption_scheme()
+    assert first["migrated"] == ["credential:one"]
+
+    second = await migrate_encryption_scheme()
+    assert second["migrated"] == []
+    assert second["errors"] == []
+    assert second["skipped"] == ["credential:one: already-migrated"]
+
+
+@pytest.mark.asyncio
+async def test_pass_migrates_singleton_entries(patch_repo, fast_kdf):
+    """Nested provider_configs entries migrate in one rewrite; bad ones stay."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    fake = patch_repo(
+        _FakeDB(
+            [],
+            _singleton(
+                {
+                    "openai": [
+                        {"name": "Default", "api_key": _legacy_token("sk-nested")},
+                        {"name": "Broken", "api_key": enc.PBKDF2_MARKER + "aGk="},
+                    ]
+                }
+            ),
+        )
+    )
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == ["provider_configs/openai/Default"]
+    assert len(result["errors"]) == 1
+    assert result["errors"][0].startswith("provider_configs/openai/Broken:")
+    assert len(fake.upserts) == 1
+    entries = fake.upserts[0][2]["credentials"]["openai"]
+    assert decrypt_value(entries[0]["api_key"]) == "sk-nested"
+    assert entries[1]["api_key"] == enc.PBKDF2_MARKER + "aGk="
+
+
+@pytest.mark.asyncio
+async def test_pass_requires_encryption_key(patch_repo, monkeypatch):
+    """Without a configured key the pass fails closed before touching rows."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    monkeypatch.delenv("OPEN_NOTEBOOK_ENCRYPTION_KEY", raising=False)
+    monkeypatch.delenv("OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE", raising=False)
+    monkeypatch.setattr(enc, "_ENCRYPTION_KEY", None)
+    monkeypatch.setattr(enc, "_FERNET", None)
+    monkeypatch.setattr(enc, "_FERNET_LEGACY", None)
+    fake = patch_repo(_FakeDB([{"id": "credential:one", "api_key": "x"}], None))
+
+    with pytest.raises(ValueError):
+        await migrate_encryption_scheme()
+    assert fake.updates == [] and fake.upserts == []
+
+
+@pytest.fixture()
+def client():
+    """Test client mirroring tests/test_credentials_api.py."""
+    from fastapi.testclient import TestClient
+
+    from api.main import app
+
+    return TestClient(app)
+
+
+@pytest.mark.asyncio
+async def test_pass_reports_placeholder_rows(patch_repo, fast_kdf):
+    """UNDECRYPTABLE markers are reported, never re-encrypted into keys."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    fake = patch_repo(
+        _FakeDB(
+            [{"id": "credential:one", "api_key": "UNDECRYPTABLE"}],
+            _singleton({"openai": [{"name": "Default", "api_key": "UNDECRYPTABLE"}]}),
+        )
+    )
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == []
+    assert result["errors"] == [
+        "credential:one: decrypt-placeholder",
+        "provider_configs/openai/Default: decrypt-placeholder",
+    ]
+    assert fake.credentials[0]["api_key"] == "UNDECRYPTABLE"
+    assert fake.updates == [] and fake.upserts == []
+
+
+@pytest.mark.asyncio
+async def test_pass_reports_wrong_key_legacy_row(patch_repo, fast_kdf):
+    """A legacy row encrypted under another key fails closed; others migrate."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    foreign = _legacy_token("sk-foreign", passphrase="another-passphrase")
+    fake = patch_repo(
+        _FakeDB(
+            [
+                {"id": "credential:bad", "api_key": foreign},
+                {"id": "credential:good", "api_key": _legacy_token("sk-ok")},
+            ],
+            _singleton({}),
+        )
+    )
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == ["credential:good"]
+    assert result["errors"] == ["credential:bad: undecryptable-legacy"]
+    untouched = next(r for r in fake.credentials if r["id"] == "credential:bad")
+    assert untouched["api_key"] == foreign
+
+
+def test_reencrypt_rejects_non_string_values():
+    """Non-string stored values are errors, never migrated."""
+    from api.credentials_service import _reencrypt_stored_value
+
+    assert _reencrypt_stored_value(12345) == ("error", "unexpected-type")
+    assert _reencrypt_stored_value(["sk-list"]) == ("error", "unexpected-type")
+
+
+@pytest.mark.asyncio
+async def test_pass_reports_malformed_singleton_entries(patch_repo, fast_kdf):
+    """Non-list groups and non-dict entries are errors, never silent skips."""
+    from api.credentials_service import migrate_encryption_scheme
+
+    fake = patch_repo(
+        _FakeDB(
+            [],
+            _singleton(
+                {
+                    "openai": "corrupt-group",
+                    "anthropic": [
+                        None,
+                        {
+                            "name": "Ok",
+                            "api_key": _legacy_token("sk-ok"),
+                        },
+                    ],
+                }
+            ),
+        )
+    )
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == ["provider_configs/anthropic/Ok"]
+    assert result["errors"] == [
+        "provider_configs/openai: unexpected-group-type",
+        "provider_configs/anthropic/0: unexpected-entry-type",
+    ]
+    assert len(fake.upserts) == 1
+
+
+@pytest.mark.asyncio
+async def test_pass_reports_write_failures(patch_repo, fast_kdf, monkeypatch):
+    """Failed writes are errors, the pass continues, counts stay truthful."""
+    import open_notebook.database.repository as repo
+    from api.credentials_service import migrate_encryption_scheme
+
+    patch_repo(
+        _FakeDB(
+            [{"id": "credential:one", "api_key": _legacy_token("sk-legacy")}],
+            _singleton(
+                {"openai": [{"name": "Default", "api_key": _legacy_token("sk-n")}]}
+            ),
+        )
+    )
+
+    async def boom_update(table, record_id, data):
+        raise RuntimeError("db down")
+
+    async def boom_upsert(table, record_id, data):
+        raise RuntimeError("db down")
+
+    monkeypatch.setattr(repo, "repo_update", boom_update)
+    monkeypatch.setattr(repo, "repo_upsert", boom_upsert)
+
+    result = await migrate_encryption_scheme()
+
+    assert result["migrated"] == []
+    assert result["errors"] == [
+        "credential:one: write-failed",
+        "provider_configs/openai/Default: write-failed",
+    ]
+
+
+def test_migrate_endpoint_returns_summary(client):
+    """POST /api/credentials/migrate-encryption surfaces the service summary."""
+    from unittest.mock import AsyncMock, patch
+
+    summary = {"message": "done", "migrated": ["a"], "skipped": [], "errors": []}
+    with patch(
+        "api.routers.credentials.svc_migrate_encryption_scheme",
+        AsyncMock(return_value=summary),
+    ):
+        response = client.post("/api/credentials/migrate-encryption")
+
+    assert response.status_code == 200
+    assert response.json() == summary
+
+
+def test_migrate_endpoint_missing_key_is_bad_request(client):
+    """A missing encryption key surfaces as 400, not 500."""
+    from unittest.mock import AsyncMock, patch
+
+    with patch(
+        "api.routers.credentials.svc_migrate_encryption_scheme",
+        AsyncMock(side_effect=ValueError("Encryption key not configured.")),
+    ):
+        response = client.post("/api/credentials/migrate-encryption")
+
+    assert response.status_code == 400

From 5d618418029efe118f1807a42a1e1af147468d5d Mon Sep 17 00:00:00 2001
From: Jeongho Eom <gblue1223@gmail.com>
Date: Sat, 3 Oct 2026 09:45:34 +0900
Subject: [PATCH 309/345] fix(database): batch large inserts using one
 connection (#1293)

* fix(api): populate actual embedded_chunks count in list sources endpoint

- Query count of source_embedding records in get_sources SQL query
- Return actual embedded_chunks instead of hardcoded 0 in SourceListResponse

* fix(database): implement batch insertion in repo_insert to handle large vector payloads

- Add chunked batching (default batch_size=50) to repo_insert in repository.py
- Prevent WebSocket ConnectionResetError when inserting thousands of embeddings
- Ensure stable persistence for large documents with high chunk counts

* feat(docker): configure encryption key from env and mount local code volumes

- Support OPEN_NOTEBOOK_ENCRYPTION_KEY variable interpolation in docker-compose.yml
- Add local source code volume mounts for api, commands, and open_notebook packages

* Apply suggestion from @cubic-dev-ai[bot]

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>

* fix(database): reuse one connection for batched inserts

---------

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 CHANGELOG.md                         |  3 +
 open_notebook/database/repository.py | 65 ++++++++++++--------
 tests/test_repository_insert.py      | 90 ++++++++++++++++++++++++++++
 3 files changed, 134 insertions(+), 24 deletions(-)
 create mode 100644 tests/test_repository_insert.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 16d6decc..86999bfc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
+
 ### Added
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
 - **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
diff --git a/open_notebook/database/repository.py b/open_notebook/database/repository.py
index 7eb960b6..93294755 100644
--- a/open_notebook/database/repository.py
+++ b/open_notebook/database/repository.py
@@ -217,28 +217,45 @@ async def repo_delete(record_id: Union[str, RecordID]):
 
 
 async def repo_insert(
-    table: str, data: List[Dict[str, Any]], ignore_duplicates: bool = False
+    table: str,
+    data: List[Dict[str, Any]],
+    ignore_duplicates: bool = False,
+    batch_size: int = 50,
 ) -> List[Dict[str, Any]]:
-    """Create a new record in the specified table"""
-    try:
-        async with db_connection() as connection:
-            result = parse_record_ids(await connection.insert(table, data))
-            # SurrealDB may return a string error message instead of the expected records
-            if isinstance(result, str):
-                raise RuntimeError(result)
-            return result
-    except RuntimeError as e:
-        if ignore_duplicates and "already contains" in str(e):
-            return []
-        # Log transaction conflicts at debug level (they are expected during concurrent operations)
-        error_str = str(e).lower()
-        if "transaction" in error_str or "conflict" in error_str:
-            logger.debug(str(e))
-        else:
-            logger.error(str(e))
-        raise
-    except Exception as e:
-        if ignore_duplicates and "already contains" in str(e):
-            return []
-        logger.exception(e)
-        raise RuntimeError("Failed to create record")
+    """Insert records in bounded batches using a single database connection."""
+    if not data:
+        return []
+    if isinstance(data, dict):
+        data = [data]
+
+    results = []
+    if batch_size <= 0:
+        raise ValueError("batch_size must be greater than zero")
+    async with db_connection() as connection:
+        for i in range(0, len(data), batch_size):
+            chunk = data[i : i + batch_size]
+            try:
+                result = parse_record_ids(await connection.insert(table, chunk))
+                # SurrealDB may return a string error message instead of the expected records
+                if isinstance(result, str):
+                    raise RuntimeError(result)
+                if isinstance(result, list):
+                    results.extend(result)
+                elif result is not None:
+                    results.append(result)
+            except RuntimeError as e:
+                if ignore_duplicates and "already contains" in str(e):
+                    continue
+                # Log transaction conflicts at debug level (they are expected during concurrent operations)
+                error_str = str(e).lower()
+                if "transaction" in error_str or "conflict" in error_str:
+                    logger.debug(str(e))
+                else:
+                    logger.error(str(e))
+                raise
+            except Exception as e:
+                if ignore_duplicates and "already contains" in str(e):
+                    continue
+                logger.exception(e)
+                raise RuntimeError("Failed to create record")
+    return results
diff --git a/tests/test_repository_insert.py b/tests/test_repository_insert.py
new file mode 100644
index 00000000..3d6476f1
--- /dev/null
+++ b/tests/test_repository_insert.py
@@ -0,0 +1,90 @@
+from unittest.mock import AsyncMock, MagicMock, call
+
+import pytest
+from surrealdb import RecordID
+
+from open_notebook.database import repository
+
+
+@pytest.fixture
+def connection(monkeypatch):
+    db = AsyncMock()
+    context = MagicMock()
+    context.__aenter__ = AsyncMock(return_value=db)
+    context.__aexit__ = AsyncMock(return_value=False)
+    factory = MagicMock(return_value=context)
+    monkeypatch.setattr(repository, "db_connection", factory)
+    return db, context, factory
+
+
+@pytest.mark.asyncio
+async def test_insert_batches_share_one_connection(connection):
+    db, context, factory = connection
+    records = [{"id": RecordID("source_embedding", str(i))} for i in range(120)]
+    db.insert.side_effect = lambda table, batch: batch
+
+    result = await repository.repo_insert("source_embedding", records)
+
+    assert db.insert.await_args_list == [
+        call("source_embedding", records[:50]),
+        call("source_embedding", records[50:100]),
+        call("source_embedding", records[100:]),
+    ]
+    assert result == [{"id": str(record["id"])} for record in records]
+    factory.assert_called_once_with()
+    context.__aenter__.assert_awaited_once()
+    context.__aexit__.assert_awaited_once()
+
+
+@pytest.mark.asyncio
+async def test_empty_insert_does_not_open_connection(connection):
+    db, _, factory = connection
+    assert await repository.repo_insert("source_embedding", []) == []
+    factory.assert_not_called()
+    db.insert.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("batch_size", [0, -1])
+async def test_invalid_batch_size_does_not_open_connection(connection, batch_size):
+    _, _, factory = connection
+    with pytest.raises(ValueError, match="batch_size must be greater than zero"):
+        await repository.repo_insert(
+            "source_embedding", [{"content": "chunk"}], batch_size=batch_size
+        )
+    factory.assert_not_called()
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("error", [RuntimeError("insert failed"), "insert failed"])
+async def test_failed_batch_stops_and_closes_connection(connection, error):
+    db, context, factory = connection
+    records = [{"content": str(i)} for i in range(3)]
+    db.insert.side_effect = [records[:1], error, records[2:]]
+
+    with pytest.raises(RuntimeError, match="insert failed"):
+        await repository.repo_insert("source_embedding", records, batch_size=1)
+
+    assert db.insert.await_count == 2
+    factory.assert_called_once_with()
+    context.__aexit__.assert_awaited_once()
+
+
+@pytest.mark.asyncio
+async def test_ignored_duplicate_batch_continues_on_same_connection(connection):
+    db, context, factory = connection
+    records = [{"content": str(i)} for i in range(3)]
+    db.insert.side_effect = [
+        records[:1],
+        RuntimeError("already contains record"),
+        records[2:],
+    ]
+
+    result = await repository.repo_insert(
+        "source_embedding", records, ignore_duplicates=True, batch_size=1
+    )
+
+    assert result == [records[0], records[2]]
+    assert db.insert.await_count == 3
+    factory.assert_called_once_with()
+    context.__aexit__.assert_awaited_once()

From 36408a6e02b135eefc4485c5847467dba162941e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 00:55:24 +0000
Subject: [PATCH 310/345] chore(deps): bump the all-actions group across 1
 directory with 3 updates (#1382)

Bumps the all-actions group with 3 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc)

Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .github/workflows/build-and-release.yml | 8 ++++----
 .github/workflows/build-dev.yml         | 8 ++++----
 .github/workflows/test.yml              | 6 +++---
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 574a0375..c882cbb5 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -67,7 +67,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -126,7 +126,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push regular image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           file: ./Dockerfile
@@ -159,7 +159,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -218,7 +218,7 @@ jobs:
           echo "Generated tags: ${TAGS}"
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/build-dev.yml b/.github/workflows/build-dev.yml
index 80f4d247..2ceeed0b 100644
--- a/.github/workflows/build-dev.yml
+++ b/.github/workflows/build-dev.yml
@@ -129,7 +129,7 @@ jobs:
 
       - name: Set up Docker Buildx
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         if: needs.extract-version.outputs.is_push_to_main == 'true'
@@ -177,7 +177,7 @@ jobs:
 
       - name: Build and push regular image
         if: needs.extract-version.outputs.is_push_to_main == 'true' || needs.changes.outputs.image == 'true'
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           file: ./Dockerfile
@@ -213,7 +213,7 @@ jobs:
           df -h
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -247,7 +247,7 @@ jobs:
           echo "tags=${TAGS}" >> $GITHUB_OUTPUT
 
       - name: Build and push single-container image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           file: ./Dockerfile
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d440c2b2..2789eb1e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
           enable-cache: true
 
@@ -49,7 +49,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
           enable-cache: true
 
@@ -70,7 +70,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
           enable-cache: true
 

From d521eb70dbce5b8f6f362bcd933658dbcefd259b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 01:01:44 +0000
Subject: [PATCH 311/345] chore(deps): bump soupsieve (#1361)

Bumps the python-security group with 1 update in the / directory: [soupsieve](https://github.com/facelessuser/soupsieve).


Updates `soupsieve` from 2.8.4 to 2.9
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](https://github.com/facelessuser/soupsieve/compare/2.8.4...2.9)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: '2.9'
  dependency-type: indirect
  dependency-group: python-security
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 uv.lock | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/uv.lock b/uv.lock
index a82e9175..3be58019 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2362,7 +2362,7 @@ name = "pexpect"
 version = "4.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "ptyprocess", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
+    { name = "ptyprocess" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/42/92/cc564bf6381ff43ce1f4d06852fc19a2f11d180f23dc32d9588bee2f149d/pexpect-4.9.0.tar.gz", hash = "sha256:ee7d41123f3c9911050ea2c2dac107568dc43b2d3b0c7557a33212c398ead30f", size = 166450, upload-time = "2023-11-25T09:07:26.339Z" }
 wheels = [
@@ -3201,8 +3201,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
-    { name = "jeepney", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" },
+    { name = "cryptography" },
+    { name = "jeepney" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [
@@ -3247,11 +3247,11 @@ wheels = [
 
 [[package]]
 name = "soupsieve"
-version = "2.8.4"
+version = "2.9"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/47/2c/0a5f6f8ee0d5589e48c7640213ed5175d52cf540a06725b628cc1a45d6ce/soupsieve-2.8.4.tar.gz", hash = "sha256:e121fd02e975c695e4e9e8774a5ee35d74714b59307868dcc5319ad2d9e3328e", size = 121110, upload-time = "2026-05-24T13:55:57.154Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/80/f1/93422647dd7e461f23d254e6b2bfa687a85b53aeb4903fcdbb74474d4584/soupsieve-2.9.tar.gz", hash = "sha256:acee8417325c5653e1377dc31eccad59eb82cbc65942afe6174c53b3aaad63fc", size = 122122, upload-time = "2026-07-19T01:35:18.425Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/5e/f5/0c41cb68dcae6b7de4fac4188a3a9589e21fb31df21ea3a2e888db95e6c9/soupsieve-2.8.4-py3-none-any.whl", hash = "sha256:e7e6b0769c8f51ed59acab6e994b00621096cfb1c640a7509295987388fbaf65", size = 37304, upload-time = "2026-05-24T13:55:55.406Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/d6/3185ab5ad1280319b31986898f3206dd7227cd75e293d4dba2a5e6bf27a0/soupsieve-2.9-py3-none-any.whl", hash = "sha256:a2b2c76d67df2382d245409fd71e321a571717e58463efa32ace87dcadac2c12", size = 37387, upload-time = "2026-07-19T01:35:17.106Z" },
 ]
 
 [[package]]

From 30b8be9566028b0e8660f644a4fc5dc74b60a1f8 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:07:22 -0300
Subject: [PATCH 312/345] chore(deps): security update for frontend and Python
 dependencies (#1404)

Frontend: next 16.3.8 (critical next/og ImageResponse RCE advisory; the
app does not use next/og), axios 1.20.0, and the postcss (8.5.23) and
brace-expansion (1.1.21) npm overrides.

Python (uv.lock): anyio 4.14.2, pyjwt 2.15.1, tornado 6.5.10,
urllib3 2.8.0, virtualenv 21.14.5 (filelock 4.0.9 follows).

Dependabot now ignores odd-numbered (non-LTS) Node majors for the
image base. vitest stays at 4.1.9: the bump trips an npm 10 tree bug
and only clears moderate test-runner findings.


Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml     |   4 +
 CHANGELOG.md               |   3 +
 frontend/package-lock.json | 164 ++++++++++++-------------------------
 frontend/package.json      |   8 +-
 uv.lock                    |  68 +++++++++------
 5 files changed, 104 insertions(+), 143 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 06d55c19..b24dddef 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -51,6 +51,10 @@ updates:
       interval: "weekly"
     cooldown:
       default-days: 7
+    ignore:
+      # Stay on Node LTS lines: odd majors are short-lived Current releases.
+      - dependency-name: "node"
+        versions: ["23.x", "25.x", "27.x", "29.x"]
     groups:
       all-docker:
         patterns:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 86999bfc..51826c12 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Security
+- Dependency security update: `next` 16.3.8 (critical RCE advisory in `next/og` `ImageResponse`; the app does not use `next/og`), `axios` 1.20.0, and the npm overrides for `postcss` (8.5.23) and `brace-expansion` (1.1.21); Python `anyio` 4.14.2, `pyjwt` 2.15.1, `tornado` 6.5.10, `urllib3` 2.8.0 and `virtualenv` 21.14.5. Remaining `npm audit` findings are moderate and limited to the test runner (`vitest`/`@vitest/mocker`, `fflate`). Dependabot now skips odd-numbered (non-LTS) Node majors for the image base
+
 ### Fixed
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
 
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index e805d145..a63a103d 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -29,7 +29,7 @@
         "@tanstack/react-query": "^5.83.0",
         "@types/react-syntax-highlighter": "^15.5.13",
         "@uiw/react-md-editor": "^4.0.8",
-        "axios": "^1.18.1",
+        "axios": "^1.20.0",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
@@ -38,7 +38,7 @@
         "i18next-browser-languagedetector": "^8.2.0",
         "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
-        "next": "^16.3.4",
+        "next": "^16.3.8",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
         "react-hook-form": "^7.60.0",
@@ -1415,9 +1415,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1434,9 +1431,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1453,9 +1447,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1472,9 +1463,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1491,9 +1479,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1510,9 +1495,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1529,9 +1511,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1548,9 +1527,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "LGPL-3.0-or-later",
       "optional": true,
       "os": [
@@ -1567,9 +1543,6 @@
       "cpu": [
         "arm"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1592,9 +1565,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1617,9 +1587,6 @@
       "cpu": [
         "ppc64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1642,9 +1609,6 @@
       "cpu": [
         "riscv64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1667,9 +1631,6 @@
       "cpu": [
         "s390x"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1692,9 +1653,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1717,9 +1675,6 @@
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1742,9 +1697,6 @@
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "Apache-2.0",
       "optional": true,
       "os": [
@@ -1925,9 +1877,9 @@
       }
     },
     "node_modules/@next/env": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.3.4.tgz",
-      "integrity": "sha512-cjWZnUUa6jZq2kFaNe/ZyJdZonOZ/QoN0Zka2nz/FLOrfx14pQuM9c5RaSVkWMqgdt4ksgPAMWPyHSs/CyV48Q==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/env/-/env-16.3.8.tgz",
+      "integrity": "sha512-Al9zqHVV7TJv0eFuOU4U7Lvv74PTih4Ch63sk2xCIpSTkE3udFnaOcnzP2lQVymiL7yS9Cj2iClUXlR3EQ5sEw==",
       "license": "MIT"
     },
     "node_modules/@next/eslint-plugin-next": {
@@ -1940,9 +1892,9 @@
       }
     },
     "node_modules/@next/swc-darwin-arm64": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.3.4.tgz",
-      "integrity": "sha512-iBr3I5LZNk5/bgl5//iTgD2tcym14MX0Xo7fD//u9dYAEgGzza1y9oywluPtf74YnOswVdH1908aK9xVz7zQTw==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.3.8.tgz",
+      "integrity": "sha512-2JPRMh2nmQG5CiL7cXGL9AGwnPWJQ//cTtAUCT+w511QHk79SYz3LGv/pc5X643B/WEO0rvu3Yww0hqwt3kgeA==",
       "cpu": [
         "arm64"
       ],
@@ -1956,9 +1908,9 @@
       }
     },
     "node_modules/@next/swc-darwin-x64": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.3.4.tgz",
-      "integrity": "sha512-2dpiSyl2Jw/NrBPaU2MAKGSa+2MR82pJIn4Sm5Rjr+gxAeuh0z158Su3Z2O8zn7UNNq+ej4bToed6RcRN/Lydg==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.3.8.tgz",
+      "integrity": "sha512-GZtCCOBKJ4leVIT/Th0llWKhD1ca92lzbQiS5R5ON9QkoiFnilFsebDae1JU2a3HWoKMEmEZWGs1AGLavVM72Q==",
       "cpu": [
         "x64"
       ],
@@ -1972,15 +1924,12 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.3.4.tgz",
-      "integrity": "sha512-+t+U8HZT+fApePCS5h89CSH3datz29MkzyfCn+6fpsZBG/oiEOhINcb9rtkv6sdpToLGFn2e6146NzaKCXkqrA==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.3.8.tgz",
+      "integrity": "sha512-O659ygeQYqneJ1fBKMpFxIFqYkYswu8IAS1OCKK/4f3ZgJJm1dRz4fVJZRi/kLLWjnBKnebOePA4WNv+sV1pVA==",
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1991,15 +1940,12 @@
       }
     },
     "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.3.4.tgz",
-      "integrity": "sha512-mx03GNs1ocQA5JQ4FxDMmIsNkdrZh8cuezKCrId28e5/gIPU/l7Kcy2+vmCCzdjnnmXJy+iOAu+7K0QppO6Urg==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.3.8.tgz",
+      "integrity": "sha512-dSjKSyWpzxoO1d3DIZZcP4XJcNaKeLmxQMFOiYl5vuBRMmweIqnAhty8tAmRsvTss779cK1FtYnDMj40e4TQlg==",
       "cpu": [
         "arm64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2010,15 +1956,12 @@
       }
     },
     "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.3.4.tgz",
-      "integrity": "sha512-YIhGY6fSMfha52bnVxnzc9zaVBzJg+cqQTOD8tXIBSx4fuv0pVMxQTE0PaS59YhnMOiYiG09IMwxJAf/CFm/Dw==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.3.8.tgz",
+      "integrity": "sha512-lbqOuz3RPRcv+o9msNsJw5x4+Y1ZwPTs6vmL6DCf7i0fZfvng/F59wyeDwqHIvV0mK//RBy/jJkZ+nCKsSMXjQ==",
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2029,15 +1972,12 @@
       }
     },
     "node_modules/@next/swc-linux-x64-musl": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.3.4.tgz",
-      "integrity": "sha512-+eaaX6axpDb0yF1GCpiERe6njplvdC+nks/fKfcHu3XPGRrald8P3/X7yv7QLdjA51knnxwl9pxdIJsg+w1L+Q==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.3.8.tgz",
+      "integrity": "sha512-+316WswI8ScVgZeUd+1KGaXkHhaYQzCjvH/05TZSpJ8zBizb1a4G7DtO7F12jcBIqMOtsz9ji1t48fmKtzqsGA==",
       "cpu": [
         "x64"
       ],
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -2048,9 +1988,9 @@
       }
     },
     "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.3.4.tgz",
-      "integrity": "sha512-0jcXW7Xs/uzICrmgV3MhDYDeRy++1CqnpDIerlPIqYO4bhzB4WNbX/aRnQclustsAyTkFKB0z6rbcjmNg5tR8A==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.3.8.tgz",
+      "integrity": "sha512-ji0gd4kMYUxO+1fJBIbiBVRCjzG/lloiyCccnlebvb1ZJ5qXCPZqYg4Jl1DrrixnWNMKylzgpmMWx0yNDYXlzw==",
       "cpu": [
         "arm64"
       ],
@@ -2064,9 +2004,9 @@
       }
     },
     "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.3.4.tgz",
-      "integrity": "sha512-vvBzwu1pYQCp92maZCFCIw/XgOTMR5tur9GjakwIo2cmwRTMKajRZZDS9+e4KsUZWKu1E007WUeAFXRRjZeuzw==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.3.8.tgz",
+      "integrity": "sha512-WcTlaKt/TWkh5kUjdJcUmB1XgZ+1c6fz4Y9fDHL73YNSdGaUWjceeWrrlwF0nv19iABYWC4iAq1oX1w4Bn0vfg==",
       "cpu": [
         "x64"
       ],
@@ -5536,13 +5476,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.18.1",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz",
-      "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==",
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
+      "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
-        "form-data": "^4.0.5",
+        "form-data": "^4.0.6",
         "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
@@ -5623,9 +5563,9 @@
       "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww=="
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.16",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.16.tgz",
-      "integrity": "sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -10022,12 +9962,12 @@
       "dev": true
     },
     "node_modules/next": {
-      "version": "16.3.4",
-      "resolved": "https://registry.npmjs.org/next/-/next-16.3.4.tgz",
-      "integrity": "sha512-/Ztf6CeRH+ejEXUrYtqI4gkS66eFIHuSwqi60RgcpWKodxFZx2/dqVCMKBwILfAHXQ+F1b1vAudgj3mnxqtoIA==",
+      "version": "16.3.8",
+      "resolved": "https://registry.npmjs.org/next/-/next-16.3.8.tgz",
+      "integrity": "sha512-U7QEZaTini6wKrb8A8hqLLqYQyCetegKjCpJOyxk642vWoMoU1x5PyZCJFvgYgiptA8xc5j/9xYlZFO7w9Sjmw==",
       "license": "MIT",
       "dependencies": {
-        "@next/env": "16.3.4",
+        "@next/env": "16.3.8",
         "@swc/helpers": "0.5.23",
         "baseline-browser-mapping": "^2.9.19",
         "caniuse-lite": "^1.0.30001579",
@@ -10041,14 +9981,14 @@
         "node": ">=20.9.0"
       },
       "optionalDependencies": {
-        "@next/swc-darwin-arm64": "16.3.4",
-        "@next/swc-darwin-x64": "16.3.4",
-        "@next/swc-linux-arm64-gnu": "16.3.4",
-        "@next/swc-linux-arm64-musl": "16.3.4",
-        "@next/swc-linux-x64-gnu": "16.3.4",
-        "@next/swc-linux-x64-musl": "16.3.4",
-        "@next/swc-win32-arm64-msvc": "16.3.4",
-        "@next/swc-win32-x64-msvc": "16.3.4",
+        "@next/swc-darwin-arm64": "16.3.8",
+        "@next/swc-darwin-x64": "16.3.8",
+        "@next/swc-linux-arm64-gnu": "16.3.8",
+        "@next/swc-linux-arm64-musl": "16.3.8",
+        "@next/swc-linux-x64-gnu": "16.3.8",
+        "@next/swc-linux-x64-musl": "16.3.8",
+        "@next/swc-win32-arm64-msvc": "16.3.8",
+        "@next/swc-win32-x64-msvc": "16.3.8",
         "sharp": "^0.35.4"
       },
       "peerDependencies": {
@@ -10402,9 +10342,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.10",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz",
-      "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==",
+      "version": "8.5.23",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.23.tgz",
+      "integrity": "sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==",
       "funding": [
         {
           "type": "opencollective",
@@ -10421,7 +10361,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.11",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
diff --git a/frontend/package.json b/frontend/package.json
index dda35624..d8366881 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -34,7 +34,7 @@
     "@tanstack/react-query": "^5.83.0",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@uiw/react-md-editor": "^4.0.8",
-    "axios": "^1.18.1",
+    "axios": "^1.20.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
@@ -43,7 +43,7 @@
     "i18next-browser-languagedetector": "^8.2.0",
     "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
-    "next": "^16.3.4",
+    "next": "^16.3.8",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
     "react-hook-form": "^7.60.0",
@@ -81,9 +81,9 @@
   },
   "overrides": {
     "ws": "8.21.0",
-    "brace-expansion": "1.1.16",
+    "brace-expansion": "1.1.21",
     "ajv": "6.15.0",
     "@eslint/plugin-kit": "0.7.2",
-    "postcss": "8.5.10"
+    "postcss": "8.5.23"
   }
 }
diff --git a/uv.lock b/uv.lock
index 3be58019..7c7da512 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 5
 requires-python = ">=3.11, <3.13"
 resolution-markers = [
     "python_full_version >= '3.12' and sys_platform == 'win32'",
@@ -163,15 +163,15 @@ wheels = [
 
 [[package]]
 name = "anyio"
-version = "4.12.1"
+version = "4.14.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "idna" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/96/f0/5eb65b2bb0d09ac6776f2eb54adee6abe8228ea05b20a5ad0e4945de8aac/anyio-4.12.1.tar.gz", hash = "sha256:41cfcc3a4c85d3f05c932da7c26d0201ac36f72abd4435ba90d0464a3ffed703", size = 228685, upload-time = "2026-01-06T11:45:21.246Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/61/cc/a381afa6efea9f496eff839d4a6a1aed3bfafc7b3ab4b0d1b243a12573dd/anyio-4.14.2.tar.gz", hash = "sha256:cfa139f3ed1a23ee8f88a145ddb5ac7605b8bbfd8592baacd7ce3d8bb4313c7f", size = 260176, upload-time = "2026-07-12T20:29:07.082Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/38/0e/27be9fdef66e72d64c0cdc3cc2823101b80585f8119b5c112c2e8f5f7dab/anyio-4.12.1-py3-none-any.whl", hash = "sha256:d405828884fc140aa80a3c667b8beed277f1dfedec42ba031bd6ac3db606ab6c", size = 113592, upload-time = "2026-01-06T11:45:19.497Z" },
+    { url = "https://files.pythonhosted.org/packages/da/35/f2287558c17e29fafc8ef3daf819bb9834061cfa43bff8014f7df7f63bdc/anyio-4.14.2-py3-none-any.whl", hash = "sha256:9f505dda5ac9f0c8309b5e8bd445a8c2bf7246f3ce950121e45ea15bc41d1494", size = 125813, upload-time = "2026-07-12T20:29:05.763Z" },
 ]
 
 [[package]]
@@ -786,11 +786,11 @@ wheels = [
 
 [[package]]
 name = "filelock"
-version = "3.20.3"
+version = "4.0.9"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/1d/65/ce7f1b70157833bf3cb851b556a37d4547ceafc158aa9b34b36782f23696/filelock-3.20.3.tar.gz", hash = "sha256:18c57ee915c7ec61cff0ecf7f0f869936c7c30191bb0cf406f1341778d0834e1", size = 19485, upload-time = "2026-01-09T17:55:05.421Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/70/51/2bc9e529f154fad99b6cd0073e609291eb32fd23581b32362d33d164d316/filelock-4.0.9.tar.gz", hash = "sha256:635e7d67fa92654eed444e75e9ca18426d34e77ad9c469bf4373f75a932f7b22", size = 251200, upload-time = "2026-10-01T23:09:14.029Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/b5/36/7fb70f04bf00bc646cd5bb45aa9eddb15e19437a28b8fb2b4a5249fac770/filelock-3.20.3-py3-none-any.whl", hash = "sha256:4b0dda527ee31078689fc205ec4f1c1bf7d56cf88b6dc9426c4f230e46c2dce1", size = 16701, upload-time = "2026-01-09T17:55:04.334Z" },
+    { url = "https://files.pythonhosted.org/packages/01/4f/83454fafd628e1e7e1726d74e44fb2332be5969d04c6182ca1fecb6c580e/filelock-4.0.9-py3-none-any.whl", hash = "sha256:9287fd61b99a806e5202be29a83034c0808a1b9830e820537c2f5773981f7eeb", size = 110368, upload-time = "2026-10-01T23:09:12.391Z" },
 ]
 
 [[package]]
@@ -2738,11 +2738,11 @@ wheels = [
 
 [[package]]
 name = "pyjwt"
-version = "2.13.0"
+version = "2.15.1"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/3b/81/58d0ac84e1ef3a3843791d6954d94c0b33d526c75eeb1efbce9d0a4c4077/pyjwt-2.13.0.tar.gz", hash = "sha256:41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423", size = 107515, upload-time = "2026-05-21T19:54:36.618Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/43/ea/5194e52748b0da83d71e082d75496eaec6e58f419f5e184786ded517e6a9/pyjwt-2.15.1.tar.gz", hash = "sha256:4f259e80cdfb6b3fc18a7de51fd1ef9ec79652f25019bae68975ca2468a34df8", size = 121252, upload-time = "2026-09-28T18:40:42.598Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a3/5e/ecf12fdb62546d64385c158514e9b2b671f7832108ef2ecd2020ce0af2d1/pyjwt-2.13.0-py3-none-any.whl", hash = "sha256:66adcc2aff09b3f1bbd95fc1e1577df8ac8723c978552fd43304c8a290ac5728", size = 31274, upload-time = "2026-05-21T19:54:35.362Z" },
+    { url = "https://files.pythonhosted.org/packages/50/ca/44de4e75f8aadc457f0634be3b542815078ded46dca30efb960edeecad6e/pyjwt-2.15.1-py3-none-any.whl", hash = "sha256:42d59d631f7768a1028a64c7ff581a9bf7519804daf91fc5b6c56e30eec5e193", size = 33860, upload-time = "2026-09-28T18:40:41.429Z" },
 ]
 
 [package.optional-dependencies]
@@ -2843,6 +2843,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/ec/57/56b9bcc3c9c6a792fcbaf139543cee77261f3651ca9da0c93f5c1221264b/python_dateutil-2.9.0.post0-py2.py3-none-any.whl", hash = "sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427", size = 229892, upload-time = "2024-03-01T18:36:18.57Z" },
 ]
 
+[[package]]
+name = "python-discovery"
+version = "1.6.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "filelock" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/0c/57/250bd238b966cece44328235eb85290045d059265fdaf7527a3a958123db/python_discovery-1.6.1.tar.gz", hash = "sha256:cf87d3627dfb4412437fdd5b13eae402607722998d21567993aedbc59b23c15e", size = 84338, upload-time = "2026-09-18T01:31:53.971Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/16/7d/e9ffbadfbf89c93848412d04594135c4ae8c1d37d9e053b9c3ed718fabc4/python_discovery-1.6.1-py3-none-any.whl", hash = "sha256:d43fcdef879fe795352bd13ccf8d185ba5a9f86f36cfcd00529f596e737442b3", size = 38664, upload-time = "2026-09-18T01:31:52.448Z" },
+]
+
 [[package]]
 name = "python-docx"
 version = "1.2.0"
@@ -3436,19 +3448,19 @@ wheels = [
 
 [[package]]
 name = "tornado"
-version = "6.5.8"
+version = "6.5.10"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/10/d3/343e5bb989d6515b1646cf3d40135d73f3d5e45339bded401b56cdac24dd/tornado-6.5.8.tar.gz", hash = "sha256:9452e1b208a8bd771e2cb1f2ff564985b9b214bdebbe622793e1799e0a6bd23f", size = 520493, upload-time = "2026-08-07T02:12:42.971Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/06/61/53d562a57b28c08eda40b258c0f975e360541943ad7c7bef897a40caafda/tornado-6.5.10.tar.gz", hash = "sha256:a6b1ccd08c04b4a06fb5aeb381be99de5ad1e5375c1785e31d78c880feb57687", size = 537910, upload-time = "2026-09-15T13:47:48.73Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f2/d5/007086fd8df5489338e204f65adce33fd4f21a4999dbb2b9cff2f897b5f4/tornado-6.5.8-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:cc6aa787d7cfab7c3d35189dc7a56fbd2399a569624c730c6b55b3d6531d0403", size = 449487, upload-time = "2026-08-07T02:12:28.682Z" },
-    { url = "https://files.pythonhosted.org/packages/70/c8/5a24a99495903f594f6a199dd7beead1cbc0a13e2cb9102727bcaaf2a997/tornado-6.5.8-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:9715b5eb79735b2bcd454ce216a9275b7c0470e64ea1bf5742f78b2f72b26eeb", size = 447649, upload-time = "2026-08-07T02:12:30.306Z" },
-    { url = "https://files.pythonhosted.org/packages/6e/de/f2e733f386b85962d1b1dc82cd63d169b5b4580062b35397eac9244a41fe/tornado-6.5.8-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:547d63f450d570c14fe0e8db2cfb14c9bbd1c2503b4a6612586267955aa47b58", size = 450707, upload-time = "2026-08-07T02:12:31.95Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/94/20efeee9a01c141e9ac47c397f81679dfda24b32768fc4fff24e76d36c2c/tornado-6.5.8-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:7e2360a0ffbe145eca8af0b19cb7203d79b1a98dd4cccdd6b368f6f49c2e3808", size = 451677, upload-time = "2026-08-07T02:12:33.512Z" },
-    { url = "https://files.pythonhosted.org/packages/42/ec/a96ccb8ccf0de2b7bc2c5fa1608a4803735018242e90c4882365a9fd418f/tornado-6.5.8-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:5d242290bdf7ab3151bc1065fdd75c0dcc21cbc7b49f22a4c56329c2d6566d22", size = 451510, upload-time = "2026-08-07T02:12:35.346Z" },
-    { url = "https://files.pythonhosted.org/packages/29/b5/93185859245ad3f00e62175f29607346788b696369347f0146e0421286bb/tornado-6.5.8-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:7b94ff0e128fe0542f3bd331fb44d06260fc4ac16881545159f34ef08aad4195", size = 450917, upload-time = "2026-08-07T02:12:36.963Z" },
-    { url = "https://files.pythonhosted.org/packages/97/cf/fe33cf062834487d34d1559746a4a12521033c22645b6d74d4bca702e018/tornado-6.5.8-cp39-abi3-win32.whl", hash = "sha256:67832909c4779c64942380cb5f044a5c6163d00831472d80e25e115de9917836", size = 451952, upload-time = "2026-08-07T02:12:38.512Z" },
-    { url = "https://files.pythonhosted.org/packages/cb/e1/468ad54333e92ccb62627e62cb88e5fc14a2171daa67ed47b1b8542d5b86/tornado-6.5.8-cp39-abi3-win_amd64.whl", hash = "sha256:11881db6b7c168494be2c2d12e65931451bdf7ee718535418ae1d8855dd5a0ee", size = 452391, upload-time = "2026-08-07T02:12:39.971Z" },
-    { url = "https://files.pythonhosted.org/packages/ad/3e/cd5e4f06e34cde33b8ef66cf36aa2b5ad46354cc1af7d2136bbe365fee1d/tornado-6.5.8-cp39-abi3-win_arm64.whl", hash = "sha256:68a7468c7e289f8514d7d664101753903217eff1bb6822c6b5994a0b5f5bcb26", size = 451411, upload-time = "2026-08-07T02:12:41.469Z" },
+    { url = "https://files.pythonhosted.org/packages/cd/5b/ff5fc58fa2427c30dea74c90053f4fc5eda1e7f3833ed3ecc7147fe2b311/tornado-6.5.10-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:9261783640e23258694a9ff0795df430a5a7b0a651d3dd53dd0969ad6be16da7", size = 465883, upload-time = "2026-09-15T13:47:35.463Z" },
+    { url = "https://files.pythonhosted.org/packages/ad/f5/cd7be26c34a3315532f3aef5f092465da8f59c334dd439d3c14aaef16461/tornado-6.5.10-cp39-abi3-macosx_10_9_x86_64.whl", hash = "sha256:83e6cf438b106c6b3852d70960967bb1b70c87438050dca0981e4b9aa751a4c1", size = 464046, upload-time = "2026-09-15T13:47:37.178Z" },
+    { url = "https://files.pythonhosted.org/packages/60/33/df6d7d04854a58619f8349a51e3edb138324130a7562b0bb21f115bb940f/tornado-6.5.10-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:bdf942448169e5336451d0494d7e3d81cfa726d5aa312affdc4682dd62a62f6d", size = 467096, upload-time = "2026-09-15T13:47:38.559Z" },
+    { url = "https://files.pythonhosted.org/packages/29/17/cc35dff68272d685cffd8600ffafbd8067e7d05e7348d9f80caddffbbd5f/tornado-6.5.10-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:69acca6501eed74582b76dbbceee2a91613f54728e3e418346000d7103101676", size = 468067, upload-time = "2026-09-15T13:47:40.085Z" },
+    { url = "https://files.pythonhosted.org/packages/c3/01/6e5349b4e1a53a4b4972a6716785e1fe7407f312063c3972690af8ff301b/tornado-6.5.10-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:66aaa3f57d30c6e6becee83ff28055d5930ac724214bde99393eefda83d5e015", size = 467901, upload-time = "2026-09-15T13:47:41.576Z" },
+    { url = "https://files.pythonhosted.org/packages/28/5e/b4facf94370dba006819c8d304376f8b9fbec6b935b5e51bf45823a9790b/tornado-6.5.10-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:4bd192b959f9128fb99b8898148070ba4574c9589b78bce42d1851131fe85828", size = 467308, upload-time = "2026-09-15T13:47:43.145Z" },
+    { url = "https://files.pythonhosted.org/packages/56/ae/047938e828cafc8eca4c908fafb6588fee944e3af39a0af9d7b602499ae5/tornado-6.5.10-cp39-abi3-win32.whl", hash = "sha256:302eb1e0e3e159314eb591920529fdea80acca92df5510a2cec5bbd4f099ec72", size = 468387, upload-time = "2026-09-15T13:47:44.556Z" },
+    { url = "https://files.pythonhosted.org/packages/d8/d4/5901517f05affd752490f6a654ba31b7474664e8dd80bd045a00c220bd88/tornado-6.5.10-cp39-abi3-win_amd64.whl", hash = "sha256:37ae8f150cecfdbf747fc4e12f5e9a97ecd8cf1d4cdb3f119e2de84b11196918", size = 468828, upload-time = "2026-09-15T13:47:45.961Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/1a/fd497f3a7f7b74bb04f4b94536b5c9f80742b5d50501fd27977652ddec16/tornado-6.5.10-cp39-abi3-win_arm64.whl", hash = "sha256:ce045d3c298fddd30e89a2777f97039d1b641eb9518ac7b26a4721903539c694", size = 467847, upload-time = "2026-09-15T13:47:47.283Z" },
 ]
 
 [[package]]
@@ -3553,11 +3565,11 @@ wheels = [
 
 [[package]]
 name = "urllib3"
-version = "2.7.0"
+version = "2.8.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e3/05/b17359e1cefb4f909b5e40b1b90a496d987258916dbbf88e842c729f510e/urllib3-2.8.0.tar.gz", hash = "sha256:63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63", size = 458972, upload-time = "2026-09-15T19:29:36.253Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
+    { url = "https://files.pythonhosted.org/packages/92/9d/c4e665119135114480843e7ab388fa94d8480650450e6f8e26b70d323a4c/urllib3-2.8.0-py3-none-any.whl", hash = "sha256:0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3", size = 135717, upload-time = "2026-09-15T19:29:34.577Z" },
 ]
 
 [[package]]
@@ -3613,16 +3625,18 @@ wheels = [
 
 [[package]]
 name = "virtualenv"
-version = "20.36.1"
+version = "21.14.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "distlib" },
     { name = "filelock" },
+    { name = "packaging" },
     { name = "platformdirs" },
+    { name = "python-discovery" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/aa/a3/4d310fa5f00863544e1d0f4de93bddec248499ccf97d4791bc3122c9d4f3/virtualenv-20.36.1.tar.gz", hash = "sha256:8befb5c81842c641f8ee658481e42641c68b5eab3521d8e092d18320902466ba", size = 6032239, upload-time = "2026-01-09T18:21:01.296Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/c4/f9/f323b3b6058cff3853b31cf6a49c0425ed797bf9611572ec10d065e08bac/virtualenv-21.14.5.tar.gz", hash = "sha256:c4cb6c13e46b57225a999c7e22a09b163393878facc7ac4c059a57f46faa1647", size = 5467127, upload-time = "2026-10-02T17:42:25.613Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/6a/2a/dc2228b2888f51192c7dc766106cd475f1b768c10caaf9727659726f7391/virtualenv-20.36.1-py3-none-any.whl", hash = "sha256:575a8d6b124ef88f6f51d56d656132389f961062a9177016a50e4f507bbcc19f", size = 6008258, upload-time = "2026-01-09T18:20:59.425Z" },
+    { url = "https://files.pythonhosted.org/packages/df/93/084f10ebbecdedf7902ed68fbecc903f0e9c5742155bfffb05eccbc071da/virtualenv-21.14.5-py3-none-any.whl", hash = "sha256:b0651e0174982bba17cc6f0aaa2ef496730cb85a3f35eb5d1119d1c904f7d1da", size = 5487482, upload-time = "2026-10-02T17:42:23.38Z" },
 ]
 
 [[package]]

From cc5af65473ebd104d56a3772979cb0a36167aa98 Mon Sep 17 00:00:00 2001
From: Cory Potter <75514747+bitsandbots@users.noreply.github.com>
Date: Fri, 2 Oct 2026 20:19:46 -0500
Subject: [PATCH 313/345] fix(frontend): silence noisy KaTeX warning on Unicode
 symbols in math spans (#1208)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(frontend): silence noisy KaTeX warning on Unicode symbols

AI-generated content often contains Unicode punctuation (en/em dashes,
smart quotes) inside single-dollar math spans, e.g. a price range like
"$5 – $10". Models legitimately emit inline math as $...$ per this
project's own prompts ("MATH FORMATTING" sections), so remark-math
correctly reads it as math - but KaTeX's default strict mode then logs
a console warning for every character outside its symbol table.

The warning is harmless (KaTeX still renders a best-effort glyph) but
noisy: 66+ occurrences in a few days of normal use on one deployment.

Fix: pass KaTeX's own `strict` option as a function that ignores only
the `unknownSymbol` error code, leaving every other strict check (e.g.
deprecated commands) at its default. All three markdown-rendering call
sites (chat/insight/source rendering, the note editor live preview,
and the transformation playground) now share one KATEX_OPTIONS
constant instead of duplicating the same override three times.

Verified: 140/140 frontend tests pass (including the existing test
that asserts single-dollar inline math still renders via KaTeX),
tsc --noEmit clean, eslint clean (0 errors), production build clean.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* address review: lock down unknownSymbol suppression with tests

Per cubic's review on this PR:
- Add a regression test asserting the em/en-dash-in-price-range
  pattern that motivated this fix produces no [unknownSymbol] warning,
  and a second test asserting a different strict violation
  ([commentAtEnd]) is still warned on - proving the ignore is scoped
  to exactly one error code, not silently widened.
- Reword the KATEX_OPTIONS comment: suppressing unknownSymbol isn't
  purely cosmetic. KaTeX's own parser falls back unrecognized
  codepoints to mode: 'text' rather than proper math-mode metrics, so
  an ignored symbol can render with approximated spacing rather than a
  real glyph. Acceptable for stray punctuation, not a blanket license
  to route arbitrary Unicode through math mode.

Verified: 142/142 frontend tests pass (up from 140 - the two new
tests), tsc --noEmit clean, eslint clean (0 errors).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .../components/TransformationPlayground.tsx   |  3 +-
 .../components/ui/markdown-editor.test.tsx    | 31 +++++++++++++++++++
 .../src/components/ui/markdown-editor.tsx     |  3 +-
 .../src/components/ui/markdown-renderer.tsx   |  3 +-
 frontend/src/lib/utils/katex-options.ts       | 17 ++++++++++
 5 files changed, 54 insertions(+), 3 deletions(-)
 create mode 100644 frontend/src/lib/utils/katex-options.ts

diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
index 006e257a..6dbd7b10 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationPlayground.tsx
@@ -16,6 +16,7 @@ import ReactMarkdown from 'react-markdown'
 import remarkGfm from 'remark-gfm'
 import remarkMath from 'remark-math'
 import rehypeKatex from 'rehype-katex'
+import { KATEX_OPTIONS } from '@/lib/utils/katex-options'
 
 interface TransformationPlaygroundProps {
   transformations: Transformation[] | undefined
@@ -128,7 +129,7 @@ export function TransformationPlayground({ transformations, selectedTransformati
                     <div className="prose prose-sm max-w-none dark:prose-invert">
                       <ReactMarkdown
                         remarkPlugins={[remarkGfm, remarkMath]}
-                        rehypePlugins={[rehypeKatex]}
+                        rehypePlugins={[[rehypeKatex, KATEX_OPTIONS]]}
                         components={{
                           table: ({ children }) => (
                             <div className="my-4 overflow-x-auto">
diff --git a/frontend/src/components/ui/markdown-editor.test.tsx b/frontend/src/components/ui/markdown-editor.test.tsx
index c846172b..b2775b2d 100644
--- a/frontend/src/components/ui/markdown-editor.test.tsx
+++ b/frontend/src/components/ui/markdown-editor.test.tsx
@@ -168,6 +168,37 @@ describe('MarkdownEditor preview sanitization', () => {
     expect(container.querySelector('.katex-mathml math')).not.toBeNull()
   })
 
+  describe('KATEX_OPTIONS unknownSymbol suppression', () => {
+    // KaTeX's default strict mode warns on every Unicode character outside
+    // its symbol table. AI-generated content routinely has one inside a
+    // legitimate single-dollar math span (this project's prompts steer
+    // models to emit inline math as $...$) - e.g. an en-dash in a price
+    // range. That specific warning is intentionally suppressed; every other
+    // strict warning is not, so a future edit that widens the ignore list
+    // (or removes it) shows up here instead of silently regressing.
+    afterEach(() => {
+      vi.restoreAllMocks()
+    })
+
+    it('does not warn on the em/en-dash-in-price-range pattern that motivated this fix', () => {
+      const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+      renderPreview('Price range: $5 – $10')
+      const unknownSymbolWarnings = warn.mock.calls.filter(([msg]) =>
+        typeof msg === 'string' && msg.includes('[unknownSymbol]')
+      )
+      expect(unknownSymbolWarnings).toHaveLength(0)
+    })
+
+    it('still warns on a different strict violation (comment with no terminating newline)', () => {
+      const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+      renderPreview('Still checked: $x^2 %comment$')
+      const commentWarnings = warn.mock.calls.filter(([msg]) =>
+        typeof msg === 'string' && msg.includes('[commentAtEnd]')
+      )
+      expect(commentWarnings.length).toBeGreaterThan(0)
+    })
+  })
+
   it('still syntax-highlights fenced code blocks', () => {
     const { container } = renderPreview('```python\ndef hello():\n    return 42\n```')
     expect(container.querySelectorAll('span[class*="token"]').length).toBeGreaterThan(0)
diff --git a/frontend/src/components/ui/markdown-editor.tsx b/frontend/src/components/ui/markdown-editor.tsx
index aa583641..7a317bed 100644
--- a/frontend/src/components/ui/markdown-editor.tsx
+++ b/frontend/src/components/ui/markdown-editor.tsx
@@ -8,6 +8,7 @@ import rehypeSanitize, { defaultSchema } from 'rehype-sanitize'
 import type { PluggableList } from 'unified'
 
 import { useTheme } from '@/lib/stores/theme-store'
+import { KATEX_OPTIONS } from '@/lib/utils/katex-options'
 
 const MDEditor = dynamic(
   () => import('@uiw/react-md-editor').then((mod) => mod.default),
@@ -48,7 +49,7 @@ const SANITIZE_SCHEMA = {
 
 export const PREVIEW_OPTIONS = {
   remarkPlugins: [remarkMath] as PluggableList,
-  rehypePlugins: [[rehypeSanitize, SANITIZE_SCHEMA], rehypeKatex] as PluggableList,
+  rehypePlugins: [[rehypeSanitize, SANITIZE_SCHEMA], [rehypeKatex, KATEX_OPTIONS]] as PluggableList,
 }
 
 export interface MarkdownEditorProps {
diff --git a/frontend/src/components/ui/markdown-renderer.tsx b/frontend/src/components/ui/markdown-renderer.tsx
index 64de8de1..a200b50d 100644
--- a/frontend/src/components/ui/markdown-renderer.tsx
+++ b/frontend/src/components/ui/markdown-renderer.tsx
@@ -6,6 +6,7 @@ import remarkMath from 'remark-math'
 import rehypeKatex from 'rehype-katex'
 
 import { useThemeStore } from '@/lib/stores/theme-store'
+import { KATEX_OPTIONS } from '@/lib/utils/katex-options'
 import { oneDark as darkTheme } from 'react-syntax-highlighter/dist/esm/styles/prism'
 import { oneLight as lightTheme } from 'react-syntax-highlighter/dist/esm/styles/prism'
 // PrismLight with an explicit language set instead of the full Prism build:
@@ -63,7 +64,7 @@ export function MarkdownRenderer({ children, components = {}}: { children: React
     <div className="prose prose-sm prose-neutral dark:prose-invert max-w-none break-words prose-headings:font-semibold prose-a:text-primary prose-a:break-all prose-code:before:content-none prose-code:after:content-none prose-pre:p-0 prose-pre:bg-transparent prose-p:mb-4 prose-p:leading-7 prose-li:mb-2">
         <ReactMarkdown
           remarkPlugins={[remarkGfm, remarkMath]}
-          rehypePlugins={[rehypeKatex]}
+          rehypePlugins={[[rehypeKatex, KATEX_OPTIONS]]}
           components={{...{
             p: ({ children }) => <p className="mb-4">{children}</p>,
             h1: ({ children }) => <h1 className="mb-4 mt-6">{children}</h1>,
diff --git a/frontend/src/lib/utils/katex-options.ts b/frontend/src/lib/utils/katex-options.ts
new file mode 100644
index 00000000..d72e7675
--- /dev/null
+++ b/frontend/src/lib/utils/katex-options.ts
@@ -0,0 +1,17 @@
+import type { KatexOptions } from 'katex'
+
+// AI-generated content often contains Unicode punctuation (en/em dashes,
+// smart quotes) inside single-dollar math spans that models emit for
+// legitimate inline math (see prompts/*/system.jinja "MATH FORMATTING"
+// sections). KaTeX's default strict mode logs a console warning for each
+// character outside its symbol table. It still renders - falling back to
+// text-mode handling for that character (see katex's Parser: unknown
+// codepoints get `mode: 'text'` instead of proper math-mode metrics) - so
+// this is not universally cosmetic: an unrecognized symbol can come out
+// with approximated spacing/metrics rather than a "real" glyph. Acceptable
+// for stray punctuation like a dash; don't extend this ignore to justify
+// dumping arbitrary Unicode into math mode. Every other strict check (e.g.
+// deprecated commands) is untouched.
+export const KATEX_OPTIONS: KatexOptions = {
+  strict: (errorCode) => (errorCode === 'unknownSymbol' ? 'ignore' : 'warn'),
+}

From cb2024ae1baea2050bc3e2c7d33750d3a4e481f9 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:22:27 -0300
Subject: [PATCH 314/345] chore(maintainer): record that ADR numbers are
 assigned at merge (#1413)

Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .maintainer/gotchas.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.maintainer/gotchas.md b/.maintainer/gotchas.md
index 24e2d279..46912f11 100644
--- a/.maintainer/gotchas.md
+++ b/.maintainer/gotchas.md
@@ -24,3 +24,8 @@ do not duplicate them here.
   host need `http://host.docker.internal:<port>`, not `localhost`.
 - **Dev-machine ports may belong to other projects**: check who owns 3000/5055/8000 before
   starting or killing anything; the frontend runs fine on `PORT=3001 npm run dev`.
+- **ADR numbers are assigned by the maintainer at merge, not by contributors.** In
+  September 2026 four open PRs (#1360, #1332, #1367, #1376) each created `ADR-009-*.md`.
+  Ask contributors to name the file `ADR-0XX-<slug>.md`; at merge, take the next free
+  number from `docs/7-DEVELOPMENT/decisions/README.md` and add the index row there (#1360
+  landed without its row).

From d5a3fc770869ed930d737176f06387dbd0d5a89a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:29:54 -0300
Subject: [PATCH 315/345] chore(deps): pin security floors for transitive
 Python dependencies (#1414)

Record uv constraint-dependencies at the versions #1404 moved to (anyio,
pyjwt, urllib3, tornado, virtualenv, soupsieve) so a future resolution
cannot fall back to versions with known advisories. Carries over the
floors proposed in #1389. No package versions change.


Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 pyproject.toml | 11 +++++++++++
 uv.lock        |  8 ++++++++
 2 files changed, 19 insertions(+)

diff --git a/pyproject.toml b/pyproject.toml
index 13d6d649..4ab27f08 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -90,6 +90,17 @@ ignore = [
 ]
 
 [tool.uv]
+# Security floors for transitive runtime, notebook and development dependencies,
+# so a future resolution cannot select versions with known advisories again
+# (raised in #1404; originally proposed in #1389).
+constraint-dependencies = [
+    "anyio>=4.14.2",
+    "pyjwt>=2.15.1",
+    "urllib3>=2.8.0",
+    "tornado>=6.5.10",
+    "virtualenv>=21.14.5",
+    "soupsieve>=2.9",
+]
 # Pillow < 12.2.0 has open security advisories (PSD OOB write, FITS
 # decompression bomb, PDF trailer DoS). The only thing holding it back is
 # moviepy's `pillow<12` cap, pulled in via podcast-creator 0.12.0 — and
diff --git a/uv.lock b/uv.lock
index 7c7da512..6d5e6e04 100644
--- a/uv.lock
+++ b/uv.lock
@@ -11,6 +11,14 @@ resolution-markers = [
 ]
 
 [manifest]
+constraints = [
+    { name = "anyio", specifier = ">=4.14.2" },
+    { name = "pyjwt", specifier = ">=2.15.1" },
+    { name = "soupsieve", specifier = ">=2.9" },
+    { name = "tornado", specifier = ">=6.5.10" },
+    { name = "urllib3", specifier = ">=2.8.0" },
+    { name = "virtualenv", specifier = ">=21.14.5" },
+]
 overrides = [{ name = "pillow", specifier = ">=12.2.0" }]
 
 [[package]]

From f88b1e50fe8f87db692fb1baa5733e17b856da4b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 01:36:37 +0000
Subject: [PATCH 316/345] chore(deps): bump astral-sh/setup-uv (#1407)

Bumps the all-actions group with 1 update: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
---
 .github/workflows/test.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 2789eb1e..a56494a6 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -22,7 +22,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
 
@@ -49,7 +49,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
 
@@ -70,7 +70,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+        uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
 

From 553fdea5546f7eefc220aa136a19584c58a52293 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:37:07 -0300
Subject: [PATCH 317/345] chore(deps): group only minor/patch npm updates;
 ignore base-image majors (#1415)

- npm: the all-npm group now carries minor and patch updates only, so a
  breaking major arrives as its own PR instead of failing the whole group
  (#1371, #1410).
- docker: ignore major updates of node and surrealdb/surrealdb. Node moves
  between LTS lines deliberately; a SurrealDB major changes the -single
  image's on-disk format and is tracked in #378 (#1406).


Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index b24dddef..63e7e44d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -37,9 +37,14 @@ updates:
     cooldown:
       default-days: 7
     groups:
+      # Minor and patch updates travel together; majors arrive as their own PRs
+      # so one breaking package can't block the rest (#1371, #1410 failed whole).
       all-npm:
         patterns:
           - "*"
+        update-types:
+          - "minor"
+          - "patch"
       npm-security:
         applies-to: security-updates
         patterns:
@@ -52,9 +57,14 @@ updates:
     cooldown:
       default-days: 7
     ignore:
-      # Stay on Node LTS lines: odd majors are short-lived Current releases.
+      # Base-image majors are deliberate migrations, not routine bumps:
+      # Node moves between LTS lines on purpose (#1381, #1406), and a SurrealDB
+      # major changes the on-disk format of the -single image's database — v3
+      # is tracked in #378 and needs the upgrade gate (make release-test).
       - dependency-name: "node"
-        versions: ["23.x", "25.x", "27.x", "29.x"]
+        update-types: ["version-update:semver-major"]
+      - dependency-name: "surrealdb/surrealdb"
+        update-types: ["version-update:semver-major"]
     groups:
       all-docker:
         patterns:

From 1b4443bf8120a22b8bfb50f7e20e183b7eebba2e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:39:19 -0300
Subject: [PATCH 318/345] docs: design-system ADR, contributor styling rule,
 refreshed README brand (#1223)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* docs: design-system decision record, contributor styling rule, refreshed brand assets

- ADR-008: visual identity as a token contract in globals.css, reviewed
  through /dev/design (laws, dark-mode resolution constraint, hex
  rationale, alternatives)
- frontend/AGENTS.md: hard rule — styling via semantic tokens only, no
  raw palette classes or hand-written dark: twins
- README: new Quiet Green hero mark and a current workspace screenshot
  replacing the pre-redesign UI; drop a dead image reference

* docs: renumber design-token record to ADR-009 and index it

ADR-008 was taken by the notebook-scoped-search record (#1331) after this
branch was opened. Renames the file, updates the frontend/AGENTS.md link
and adds the missing index row.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NnMHW3qrSc8Nhi7xTPfZuv

* docs: renumber the design-token ADR to 011 and index ADR-009

ADR-009 was taken by the PBKDF2 credential record (#1360), which also
never got its row in decisions/README.md; ADR-010 is reserved for the
source-chat checkpointer bridge (#1332). Update the frontend/AGENTS.md
link accordingly.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScFn54FhBq3cvVbcbQJjBZ

---------

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
---
 README.md                                     |   1 -
 .../decisions/ADR-011-design-token-system.md  |  33 +++++++++
 docs/7-DEVELOPMENT/decisions/README.md        |   2 +
 docs/assets/asset_list.png                    | Bin 241289 -> 113487 bytes
 docs/assets/hero.svg                          |  63 ++----------------
 frontend/AGENTS.md                            |   1 +
 6 files changed, 41 insertions(+), 59 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md

diff --git a/README.md b/README.md
index b4aabe37..d0f5eafe 100644
--- a/README.md
+++ b/README.md
@@ -383,7 +383,6 @@ Open Notebook is MIT licensed. See the [LICENSE](LICENSE) file for details.
 [license-url]: https://github.com/lfnovo/open-notebook/blob/master/LICENSE.txt
 [linkedin-shield]: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge&logo=linkedin&colorB=555
 [linkedin-url]: https://linkedin.com/in/lfnovo
-[product-screenshot]: images/screenshot.png
 [Next.js]: https://img.shields.io/badge/Next.js-000000?style=for-the-badge&logo=next.js&logoColor=white
 [Next-url]: https://nextjs.org/
 [React]: https://img.shields.io/badge/React-61DAFB?style=for-the-badge&logo=react&logoColor=black
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md b/docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md
new file mode 100644
index 00000000..458a85d2
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md
@@ -0,0 +1,33 @@
+# ADR-011: Visual identity is a token contract in globals.css, reviewed through /dev/design
+
+- **Status**: Accepted
+- **Date**: 2026-07
+- **Related**: Discussion #1202 (community co-design), #1218 (foundation), #1220 (screen reskin), [frontend rules](../../7-DEVELOPMENT/frontend.md)
+
+## Context
+
+The 2026 redesign ("Quiet Green", co-designed with the community in Discussion #1202) replaced the stock shadcn theme with a product-specific visual identity. Before it, colors were scattered across components as raw Tailwind palette classes (`text-red-600`, `bg-amber-50`), each with hand-written `dark:` twins — visually inconsistent, semantically meaningless, and expensive to change. The redesign also pre-designed Stage-2 UX (citations, per-source context states, content-type identity) that needs colors with *meaning*, not decoration.
+
+## Decision
+
+**All visual identity lives as a layered custom-property token system in `frontend/src/app/globals.css`. Components consume semantic tokens only — raw palette classes are banned. `/dev/design` is the living reference.**
+
+- **Layers**: raw palette (fern, sage, gold, teal, plum, mauve, slate, violet, clay) → semantic slots (surfaces, ink ramp, hairlines, action, danger, warn) → product vocabularies: content-type hues (`--type-*`), evidence/citation classes (`--cite-*`), context states (`--ctx-*`). The product vocabularies are canonized now even where nothing consumes them yet, so Stage-2 features and community PRs share one contract.
+- **The laws** (enforced in review): fern acts · teal speaks (the AI/system voice) · red destroys, and only destroys · warn is clay, never an action hue · color never washes a reading surface · hairlines separate, popovers own the only real shadow · geometry is squared (4–6px) · mono is for data, not prose.
+- **Dark mode** overrides only the raw layers on `.dark`; every alias re-resolves via `var()`. This works **only** because the `dark` class sits on the document root (`theme-store` behavior). CSS custom properties resolve where they are *declared*, so a nested `.dark` wrapper inherits already-resolved light values — never theme a subtree.
+- **Values are hex**, kept 1:1 with the validated design spec (a pixel-diff re-application test against the design mockups reached 0.000% visible difference). Converting to oklch would reintroduce drift for zero benefit.
+- **`/dev/design`** (dev-only route, 404 in production) renders every token and primitive in both themes. It is the acceptance reference for visual PRs and the regression detector: screen-level PRs must leave it byte-identical.
+
+## Alternatives considered
+
+- **Keep per-component palette classes** — rejected: the status quo that produced the inconsistency; every rebrand becomes a 38-file sweep (we did exactly one and never want another).
+- **A theming library / CSS-in-JS tokens** — rejected: Tailwind v4 `@theme` already bridges custom properties to utilities; adding a runtime dependency contradicts the lean posture.
+- **Full design-system tooling (Storybook, Figma library, published npm package)** — rejected as over-engineering for a single-app project; `/dev/design` gives the same review value at near-zero maintenance cost.
+- **oklch values (shadcn convention)** — rejected: fidelity to the pixel-diff-validated spec wins over convention; the file documents this so nobody "fixes" it later.
+
+## Consequences
+
+- Contributors must use token utilities (`text-destructive`, `bg-warn-tint`, `text-type-video`…) — see the styling rule in [frontend/AGENTS.md](../../../frontend/AGENTS.md). A PR reintroducing `text-red-600` is a review reject.
+- `slate` and `violet` are exposed to Tailwind as `slate-hue`/`violet-hue` to avoid colliding with Tailwind's built-in palettes.
+- Rebrands and theme tweaks are token edits, verified in `/dev/design`, instead of app-wide sweeps.
+- Stage-2 features consume `--cite-*`/`--ctx-*` without new color decisions; the vocabulary already exists.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index a8b42628..8c10134c 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -50,5 +50,7 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-006](ADR-006-migration-granularity.md) | Migration granularity follows merge granularity, not release granularity | Accepted |
 | [ADR-007](ADR-007-optin-runtimes.md) | Heavy extraction runtimes (Docling, Crawl4AI local) are opt-in, installed at startup | Accepted |
 | [ADR-008](ADR-008-notebook-scoped-search.md) | Notebook scope is an optional filter on the existing search functions | Accepted |
+| [ADR-009](ADR-009-pbkdf2-credential-encryption.md) | PBKDF2 credential key derivation with versioned ciphertext | Accepted |
+| [ADR-011](ADR-011-design-token-system.md) | Visual identity is a token contract in globals.css, reviewed through /dev/design | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/docs/assets/asset_list.png b/docs/assets/asset_list.png
index 87327a8022ecbfc8a9544ac8c607f501f084f5db..f9d142281ac7f101bc530147d77de2806031762c 100644
GIT binary patch
literal 113487
zcmdqJ1yCGa7cELcAPE{gcyJ34+#z^y_u%gC8Z>xtcXxseHn;|NcY@2{I>76E`ToD&
zt-7yX-Ktx4U%jS^>KdAv?sLxGXRWo@o=|yNabyHM1Q-|?WQi{#iZC#6*)TA$U*Eh0
zUZE7q>W6`O2O}XOsO*-0v;wD&sf`c6p3@={FAMidR7mu5@5z4;228A1n3&4VEiKQk
zu1?R7)Pgw9S4~x|vkNSI<+Uth>0D%)Ki-YNK;sk@V`rwPae)s2j(0w}NPo{@{C)^`
zy!iKA2=&G5e^1}=y(0Mc^uy&lyZ>A~{{N$k?cx7ERkjls*8(o?ep3?{QoM+ekfN%p
ztfJyUi?D&zdAx640`W_fzZX)gczEDtBo6)hB_*k<pG{upZAQ1fvoonmYxv1Z!e@Kg
z42yKRq4@XiZb)F@_HQWPzM8)NMn`AfJ{A^M_Z$C)o1!OJG3hk^=)VJA{DB*>ASo=Y
zRIjS;+1PAroYJ5{#k^Zj3R@vFQdOY~&+ZjmPz1g}tN8^Ap9iwV(Yy^ba6cwSL7GCV
z(ahL;$>fsT<A}BDbYF>z7MICl(^Xu+{b0FMxWAoees`?x5?wi?AYxcrx7{y${hio+
zV^ez`4(vbA(k>?^)(pc~{k&o(Jh4Mt!3Z)69b7fTx*}^RCh+#!x}DO33xYcmS3sNS
zl;J_LUJdn4_EY15)j6htvPXRXUYxVSDctg$52KYOuyAr&o?U&q<Rn7L;gY_Xzu=1V
zfuCRhe3~oX?2DviYV!2u)s>_7A(P$d9$k_w4K3}bglLDbMEX<<OH0LuWH<MQjeroj
znKCuQYyuPlUeI&L#6({3qPiCIKlgf?HlCoiET<qF8>{&1S7^aiZ{kOV1^kL!S^_)y
zX8X%u$WQ2!-1F!<eS-VJ?H3GB`qcY+Qf|1f3-E!vdxSV4EW|=g2o5={@|^M#OU_pL
zw2X|6$w)~<P>8dVlbwF={i2EM*KTvzI+#ggF_lI^jn2OKU0z-ujEpax!mBDF5wp=_
zg3IG_;``W_5L~6uZ3mr?nVoe;L_`chBDA#nYIt2vQ#NPi;Bgk_A3H%70<xSdy<Ohk
z-kzMCoU2@_aqNe`r+!-VBl|?1Y;xZ@#6!i=AWL}h?a_0tLMttC_cA4XnvRv#>huQ_
zGX5;FfQ?b8R99M5V_;8k<Wd%|du2t%OrH2Idxci@_E<(bqjuZVSsrRdRFLTL+buEG
ziqgSrZu|42+Fiy+=*!DXC;aIKTo#XFx1Xomx1qJD#QX}X3aicTk;Qw&n!X`PHW7GS
zf&a!lbqGS%CXuhlVaxW5s_S@8B;PxiB2x+!B~7k&S4iugci*K%yp4QFVPRkLM0fGl
zel5-=5kCIz#s1JPV;h~C?YpFR(Q;oJ?Jq|CgXj>bLushr^SK=KO3gVqUJMUQx3&sI
zrhR&xGS$Tk7km5m?NaT{rviK~E-rn2G^wPjx2Vw{`CU_!a{asTlNwx4c=ev}?QS1l
zN8$2Zbp}w;swkJ1sCeH`n{WP3v0dSfRZ`sA!gwzWj>RQF$HqyL?~DDE{!Z%rWF@4I
zJlDX02*QiQsBwHh8!%X6H+v*nS!vV97HQU##sP^UVhNf}@=#c>@$PTy@LT7uAL$b6
zjwa$^^E`=#LcN|SZZ4sXu4^QkQ^3k3UGWo;w6pu}`}spFI{GW@wM1Q6S%zb#c^uJy
zGv}KegskoJ6KR?}aCN-??U1``A!eHFuWjBKg^42?`H|FMun<OE>Ln2xnrP9Z)vpv5
z98|((=cl8I3?BB-@89K#&U)t{C#@k_0uOk&xL=#?ylzHiYE5NxvNxtn9FM3cn0_iK
zOt{+Wwt3vug@rN0ky;rj2G+z*Uhb!RP-}sXWo2d2aB#M+ayv+wm`arTUHYSrxO}YE
zI$pHa*3?833$Pg3wZFv>n}CUuA;{!ws&|_>s!0-&lw@XLcskft;;781Z)hmcDU!=7
zI`0;jRlM=Pt95}adTmesTHL7@>h7{#Y0LVN?6iOGEFlq^C+-57Z`-&m2|z$Nmz5n|
z<<D{-65H>a-gmsXK%|TyUT9L{*@+Hx+R9=xnoqV_d6+nyKbsn6#K9(7ExY+}EsFd4
zZ}JiPa!Z7f79TGSF)%OyLIf=2&czk{@Fo@vu6hxYm>5jMaaF847S`O|MGA$!1h)z>
zEqh=C0ahqN$@zWi(!}n|dmc#<k>A6(apdGZDk^2kX(?@Pciimkpxc+fw|8BS#&@0q
z`bS4?LDp+a6<XptRX3T$d#&bEVn_WTYt2kv=hedi4r2;Y%JYo?Ib5mO)YMs!3?e92
zv;|aQCZ_B4sHCX401`^$W;bZ~T&6n0?{#^03C*smlA?fzzvt#&oK|S{V55@?-<2JO
ztoeRo+qMc!PHtq{Dx5TMJzSg^9*)0LI$O&p`-(!y@AKIAOveNV4}Z~&jCAR?GL%GL
zZmAH0Mt}fj&;irZQZCkt&oRU2t^45!&N8!Ux0q<eyjb=0px3F1J?8hhgz*$m3lb3%
z<>GU#tkfC#DM9vk=kn3qe2uEpAZbkp-zI+h5{1y3KKQ|J{`C77P}+tFY|dq6p{k15
zj^zOfJy|!tXz)@-OiWB_>R@7VNlDoE?-mxtJe;h`ii(@azd-ndcIRla;wC0<6J{2W
zjGvbGTOUwb>@T8nHlF2lYiqfp8-9)6-~Ye|^-iUyr;|2>eM*0`#Un*ZadkBz7#oYe
zOz|s!AJd_%0m!Yte%YUlC@9P8;hZ0O)jmJl5xUHR2d{&I;AToov|C*c`$k$|?{89B
z?U63TYkq<V_$>CGV8u(c8foo&`l(Js@SwLtQc$tSi1G32gt9rQFJIyb?Owft$MPw|
z7af`^j?wN%vA%mfFfy`5PZdNd-P`JQmzvnKI*R=dfaz#AdHzP`^!0wFv#!3rFM?<k
z%CzT1!^0CIn;{}1k}NQ`1c!mq`b2E^{t91z9)h~);aiBXmP<-YdcWcjqZquwh(o{4
zLw?^1Nd$ulwAi+$OD?S5?xIAo;1uTxdRwmQ>F5w+pvM)HadT59Yn^p=eAbnVR+{P@
z95mProWSUdCSZ5^;5|JxvlB_dKzVJgAf*k%UQw*my7*fnJz4K2GXSiE?L54{(mNCR
zIG{RJtTF^3kFNko+nCN@SALtLGy;UGs_J!99Lv(<X0N3Ou<cY^sHh-c9ZVk|96UMS
z6LU>9RDUwv#mB_#0`)7%%MYxkcO}+Jc^(h$$MxSxNk|e2*k4~~JPc=rIUuudaoU}}
zhh4icl$+FU*SAzuME4DCyd5*iIB_dv1oqhuf&GoVA|BV{JUaI^@8iYREO-;zsL|Vx
zAMq#4>MX;IYfIK{*K^Qi8O+@ActEmpIP)x$aMWi3z&3lO3bAs2q-ZVfejX-yLLkJt
z%C3cd@R+aomA2n4aJ-a$d-m}9^c#*G@4@P2OTcy^Ig4*FLe>nD&0@}glCs-2*haX;
zUNkeei*DCh&gMw{Hw`V=VaKyjE{)R#It}a-0H6YrWOI}I?LD0QDU&{wdi4{%7Aql_
zMXYxBJ!6LM?(g3g78cX&RRvW=j_1=&t`IP#T*^x0&&RkTSxoFYn;Ecv_q}w}S*f8D
zWOg6eTcD=NgxqyauFn%!_ziKfO41RQ>Fstw2n$l%9v<9C9I<=T1<|4zi%LZibcPbt
z``L8{z>d<?)Wn#vCNFWAII`brITz)5O{CfCG9_*s#x7F%wUva9Y$~@YFF4pE0G^$J
z!A3YF8nRf>T_mUb@}>XfmGj{=(=N(gLa4+@CSQwuhyB52(Dkt<i!Uwc1m2hcz!X8-
zOh1*1q?14SutE$k5($}ESW5D==45M4WwsJ(*&;~uav8pY@9(B?1lnO{N>w5vEyvg9
zR@+FPUzt<++znpcKw6=Xu!aVPG{=PkW-aU$R@Pi=KkDl0te0-&zjXTW?eR1@-C4Nw
zNMQ7pmip}OE3s}iUun&jKRrj%LS=qo3jTug{>8^9;B~iYs+X<SU_&S+h1e2|Jl{sl
z@1fh`LdQ$mmC{1)^Yr2<mYSAYI*UD&11;J$^9CYtd3Q;{%PS<O)<559QkA)KYrDD;
zlejajoeMcGkeXX<y@^eXEma${IL&?n7r`YscKTQikf!T!3V1-{k8M_me@Ym>{wKFR
zg;zYc*msvgP|Wr3_WEfN+wI+@aDML%oSwA4-s+1odezgnNGs6(Sx6}M&hV8sR|XOK
z4<dB(oP23wGNP3zx1QBEV@)rKo$fGO$rIwYosh3uuBrwCaTV;}QcNwf!ACL-56PWf
zgnAzmwCy$bE~{7|`&_@{SYM7Q-bFoj%`kX^!9wAjH|+$lQMjvAd+~Sb0(`J(5A#|k
z9R8^VYL$ut8k&M6huhe9<2F7-mzF6OowD3qQqp)EuN&N-NDZ6aZLLeQl}nod7}3ei
z&2{n+upM=JQp$$<LswgytrwcZpAaWfHYR&7_LgIHct91pwKhX#bCs95odieLyTd7i
z%C8vL-=U#tH0r6gzv!-QTZvN~>$B*-Pe@~jc->Ej>R4E);0&h;hQeNzDlJ*9`|)$w
ztcHe#mFUL{whpSJqbW?h-4d5g=cOYjk4S8CEV{;&mcKjIPY)y79o6OcJYgQmn6><s
z+vMaS9hAmVsrl0(ATEw&`z1R1W}ToagYH0!en^o@*$$@NxVes*Iwu4^OW?;i8#65p
zP3Nj~Pi$PAF)WG(m&UaZDN$HQVwL((i+E^P6e=;e>T45|k=-+ZtHbRN-}UxW4W~5B
z_ioeMmM15xb4#^*-EnUlOJR@6NyzZHKA~4JQXw~aWgHXnJIUj|5N~m*fY=>EmYcn+
z3`1N{P;`|NCN1oamVA@_tyjf0HFwq0Kjg_lh%R<V@)`9%fBx_sJMK^;CA4P8zMlQe
z2*hOmK>Cd#HX-5G=7G!IV7(~fu8Y}P;Q)b3nR3p6Ls$MjE^dm|TVv{Y=5#)9<!_#H
zs$4inuY*65^6?q&*UVT|P~UGw5%YxoLCJoK<0M%zF)tcwZ_iXnE*wu*y+5lJ?McpL
zwD==&rm|a0Gwz_q#ihp|9p)|MYR`DMK({5?EG1}5<bMlpJ4pA2hSAQI=6xOV=T<pT
z-*-OVZSslPU4*-ugD92jcR>To8{hAQIFt>3hy|$nn~I2th~#8W85!g!$9aPz-v4L;
zL*5V31iVgQ>!n1xMEZf@VM$q81+^+wqn`Nb>Bf0C1d(|V?JEWv8ZHiwq|vjm_}%U8
zpb+uNmrC#onG`wS%t@h^{b3Oixp92%ce%P&+#yJa;qq!#I$oI63=|X^GBOz@uST?7
zzK4ewMZJK%AKobI6f8RF7K64E#l^&sP`m_J8+Jl9oMvSR5818siA#i=0#Z_FL={MK
z^nvYgp_BTx`Am&Q|7fdZ`qjuGj+3)<80Kt!jp5Qdr{n#=Vtv}0rvp)4c}b4X-6XDt
zhAbl6)6<I;53dowEWW0)+^)9~4c2Skd#Cmwc}Yn{UAeI_0lzAErQP1}9i1i*!-aFU
zUYvlohG?Q?qo*{+@q_74%$KNd@}CKjI7q=x8%B|MV$&;i?mXA~Umk9b)tej$D;VK~
zF_}&&zqIo$fyzxUzMp@5za(bM6@v5z>0q&fQOj-f_63M!exGHR&+9gjKAqS8Xdp)T
zk4oa_D`#b;ywE@FWHZ?U(c?ZgXcL!^IGYSo0x%2{mS9MfOj<)0pCzsK8X>FO^j&Sg
zj7;Q$juRI!Eu-V|&jT?SQ$=zXtHWo|yP-LoWd!86WkBY80&5&m*rnY^(qPBL$Adj0
z9sL#?<f4I$pwu4}t~Q$9>UIVVB@ymtwNlSgBlA22X=k<Ho-EX}QBk?>R<@31wGR&r
z*EKX`aCz5&!CnheT75hBCy7QBKBsOxz6NE7j8aDr*|oy0Gd#Z8ofG1GX@}1HN`~Xl
zT81A7ez|jJXZYN_u$m%zt8+r4Hb&`v9y`Y}c|2d6>a7&)87|qeFHFxMu#J?JcIfKh
zyR5Yf9Y#{I)Y{s>=*`d9mBC9V>T9z7BC91=Dyfo|uoR9;$?&lChl?-6_Y;e%swTE=
zQ)CT0%Iz8%<%bvHBQ-qnK5`W2I|WeF(P7DPygzxHnVE^gxN>_EYi4d9-{^vechEb9
z92_?odT?MtwsOm&&{OTRr3%v0(mFgjrc-0caPe@lUH7Xhnyu3{Nvj6PU?_bGllS?r
zt=DtqIxYu2B%oP<#sh+fZe1NKWUZCm_5{i06K(#Bd9|y9nIX+!|1RSp?CP~2-v^2b
zTdr%idoAtUz!$$oVJo!ifzj>^x}eGwXkDt=p5s<cs`~1CdMW|X0CS1Oh6hcwJQr&g
z7bchE`C&U375k9rbUn`r2y&#))3SY$>CM8cZ|rZ3V?=kPI)B91O(zVQ>a==EJF+qx
zRl(YU-agjF`*zZ@8rkEs+iVr!TQAj#H2+B{@_5`FIk3D3oL+VfyDf7RZN)gqp954_
zSM(Yq7fek|*ew@(a%GPXX3AEY9{lF$XlWN`W~^84>76!yRFW#`{dBmx*Q}QoizX7o
znb{j8twKKoKn$^f`)q|}e`%?TYNaM|mo+*Y7Y!FRb@FJAw6ujzn^y*5vS-<C<l>Hr
zQ+2c5*?H|Q!@?3r{^#EdwKyy$ql~xpDp&?Od~_eFsfUNc-LKNoSQR8B;DopG$I_|3
z72bM#G#IG57<`TFH0;ec=H>V(aq9FiHXam2+)#<s;;k_=sM_Lvqn?zMX^At*)nF2S
zZRLAVd@>IH-RZL-hH>JTC&JF2NG6W-1bc|rDR8pl$w+LoRb}+pj8%td(wH(0@Hun2
z5j%|6pb}Y~<<qk~SINP-dqStMHuLTSs%V=E-G*3nWaq1c!8M{5VGMxtrh7|BBsin$
z>-e<ge0$nc&`s0jciefY#gy;XVSjk74GK^^FqXopj=ll_vU;1-3kY^HAO;K!4vxoG
z&wPGwqu0*>k6)%FHo97xr&@n7h!sBHkp^FA<8s?_Lv%`XJgf=wy1K5wpa0t3(@5zn
zOajo}!FD|?yjWcq7Zhy-PWyAD7XAJx+|KrY6xCDhp~NbUIybo1S?l>OXx)-4WNC5M
zFw0p;trU3R4p06Mcb9iVp<Ay(*4lC*QA;4m$!hCG*In&C!sbq-Wle2uE5BF8D?&oT
zT3<+%AnZehZhLIh84=(8m`bH=#$s<@Z>#TE$&PfWgrcHik?gU6?^&zo%?oX%bUw?2
z0W{&Av5dQe`tYhOfeXY|U6w57sALXV$lS0Y?YHtm7mqI=y3NJ6iUYy9$2;AN*3Ihl
zs~?IAFgz|upMR8m^HGpRmFbga!R1=W-u*DeG_|$XR2TxkfAhY0rm!|Wk-^!l;ZSo^
z&%E=+a22Unbm(KH2fON}0nF2<Z!ZMFCv#O_(*bx4Bkj2hXex^vHQV-Q>G)cytS+3L
z-j`z|TCNZQH{}*kQ+<6wWP))VB?@@=^>eb9P3kAF`46c_NsK;qFaX}?cimAx^9yLG
zV~aq#O+(A6_B%%eMZMkLG#+DEUxK*|u)jX)eR(oCNqa%0Cyn?cIk`u7<=5zFqW2e;
zaDQ|JaWkib>#M7>asS78+Tn}_P6mcd(jq|EaXFd(RtfV7h(Q>6v`OYk^Ahvvn1qyG
zC;_)kethTZ==JKOI8qV6!wYRpFUVbIjSZoTA0R_fFJ?!LkAG@roo|fc)3Px#a(g~u
zTXkx7I_a1-D6|Zur5%)zcy7umtP~~W<J0CA0@aj0tZ!h@Ng-+z9!n*0<?(Q}LeG1X
zHb6q3A*-ud^9zrJ)Hy%qSd1EPdVd!bdGnvvx4DZci|F+E5;4SW4!OIDrk6Qte%MXs
z<p7YsB2<9p{q*g(PTDcu_jWMQl$QbiZYxW!C-nBoJ+DTmw2EXhfMNKu5AO_cq2`wM
zyg5Oe<A9SDZkbG0S)t9>5FvxKtZYuhg-JMA_^52J&bhhg(-;iCW>*?!BQLL)OF7!*
zOq#IXk3~pSgnCQ3G{So0&ske4i?meal;^JrJbLloP0UQ);o057DVqVv9cw-|7<6S$
z$LDh{tsyEQ+^UFY@h7?6YMpTi-Na?`dkR8Et5&Ozduo9tK8DCCEz<_-k4fzdRR%Ny
zsq|4-+sOUplE<ctB$LtP^S!gFPz+9Fm3#-5)MYR@u!r0w+2vSMDYFYoe_mUo7yw1`
zK-S-5Hi9oYYf1lIWvN-Ak1_F_Y5&{U4kV`ULuC8@in4+{A<QPy0Y%jvs98Wsp(Q;)
zWQmFZKcb={ZLN+i(lVUxpE5M7bn2bv#|7sq*PQI_A2tvBSC5iXQ$3Du_d7b)0fCN5
zAkbCddy_^*XTUunU!QyO)Dvt7K5Ma>(U&IMNN}~Miw{>5mu^T*obezz$&+&epzu>C
z>CeS$Z`+nJl&W3{RLq>({My*q#yq0u+SaWm)`GjA7#tpMcFFK2z!ApxI!WJOX>m6B
zvk=#lS{!$M`0&fLc{na4fxO}H+_|+-Tlh0_@Z$YkISCET*;!t+b~ilIO{m+$HF55|
zzxCu(3%83^i{o4ynYe6zK|#IwivI@x>$p|V>%D{de6;QgkM#KXukIt9PX<A7a60(d
zN+Fuwuf;?}3P8p>CLS3nQVVVFDY&9U5xHi=3wWB=&33`Nbpr}N(qcc7j4j|f$&a;|
z7e{pZAOnS<_V3@m@h|0+Y8IG|RYE<DxXY3@Z{;p<H8oQ)Nt9k68}Y5WXSUnj;c|5N
zoLn+fQYH$SDV(qv<Jz=F9335<FSo|t9KRqn>bji(bV<aw$UqH6yV}k?hJ<Z;W?_d5
z3WYTb>3!x@kyM{Y0qwsdrM-66W@cu-r7|!p9^?PnI}74pQf5Q##RlR`)F<)%iSX!t
ze}I~7yEF+&jupp)$nSGT^&r)6rc1L|@lRk+NWIlv>iYT*K*d)n<4~VwV%(J@`!m*W
z5D4MhoqX7APo!~iadq^IP>vaN+fEJ+#Ke=Kuv0TVD91}g++M@eJ?d(5yB*)i;sYXx
z_`vBGxx)STSJoiN@)F3J4z%64SU<A&#%^pi0DW_llCrPG1yUs3!%`IW{dv*R3{Bx@
zmhUJ-cZo_&*6*!^-&-0#l9JAQd1kMS!>XdU{p%5e)9K1nE4Y1@YbF8B<d|KXnY4SY
zD%FtLqgiZf7Cez)F$(}QBu>XK%F^j#X9CWj_T!R{3x!DyA{^+$Pg~|N1lr=JX6X#8
zb+;I;j4;>7ln<A-%J-Hty@jyGpm0*h1gSTN0!M(RgQ=1(;M*i#^&*aPOb<ex!)LW6
zc8xz*wMp>-Ek*&UXj@k0nvCM5TIFiCYZ$B>Y6iUmzix-%w}DuSi-oDD@$pkqVRp;e
zz~eWl(T%PUk}BvBjsORTD<}=Qwn^%|9y_>bP8>usGeA9xexA85DuKYLq}TXU6v7`s
zh}S^C<w5GpwT*|3U5`q@J4mNd>w-~LV!^&n{p_z|hIJbn9zGT1U!gVoGeyD1=A=(%
z>7N?qtwN>kN=lgL<*kN}j!*bb6f{Ux)wxVnrPUE4c(#GVn7ULbGt_i}<9ak5*Y(}o
zvtelH7t{7^fs*Hm=j&@SLWGmG7Htg;_rW@@iY1q~$cSszHlhpk_lREsh+MY7R${WN
zzNln4RP{-K@hl+ZFx~znyhyCwD_76Vs@9>U)L9r*B{s!QX;>)A-*n?;mV~O6c<6M{
zn`QGUUA*$k!pAk*oMNcW6>rhT3QKO+;jktH?XLwq3uJ;)^%+-P)~k_-7-OVs%kSjm
zA}lb^`SI~af_%13-*@PFs%5y4-j9boWB0%zCatXVgM_7}t;RciuCGCGcXu4NE5>O{
zA57(lXXfTC7fKB^xr-FCQrRLsZVoD|iqc|Z?@!OBcw9Nh))bYM-L8K#$dFJ{f{YJk
z!J$KggFtE}=5JhDT&x*5p9aWRS)}!9WAM!n<=L8T%lYd#H?vJ3hT?0H@OTfVb{Uaw
z0)20*1rwd=q0q;%%oa>Ev|o0@kt{{g)vhe7&EB@FPzo@OJSo5c&qi0c00}h~4}=g5
zlp&It$c8Oa<l7u?_d)^2zt9zeY9lEr$!fjIKtdAZ;JWydH7qhxg<dJH!R923-&?<^
zBs<&gtn01h>`=SjHZk*uPsNrERj7x2_E4AyOf4Zg(Xu|fxTK{921|=<rav{;+ufc%
zv4q`Z_nv{Xc!TLGQ|(2Vs{@T_e4f}6FDLhpY-}<>aSrWW^KwE`Qon9^K9aFjrGt$`
z7|H5rmb&egY{H`IHiUw@se}d{!PvUlAH3WJ_F^*MC*3~Mrr&fpH%3*>b+Ab}@1UoJ
zX&)`uP+DuhK>)H7z&t&U$Xjn8t|4<nfR@i)D4S7jaRnbn?&bYhk~bg%e+eP$Yvl?W
z9ZqAjKL5QxXKG+-WaQ)eB8)dKVK|xp*M1NSP+l0M`N?1HySw)@&dZB`O8o(qU;`pm
zbpQGqvROYfT_ZXrqoU%D>{3`z@be~FzN^)1-~Vk~VNsDOIR#afR(pysDeG`oQ0>A_
zxdti!@(ci5{`vw))1`|913VZQY*&_fZwEzHt2DdVuQi_F%EoEqi-A&*RfnKJoGXMs
z`};qIKEGH3?nX}_S=maJln73UwNBQecIF01zbM2<y4gtrQ26s}dAA(J{xJUt^as2v
zd<FM?cp9FS54oG@5pHj_gujY`cmq_}|7-<Oz}y#v7oie!`E2&!f}-H1WGW8ENnoj)
z^aQR?W?DV2EC7~tdg?YN&<q02rfW<Q5I*~=^>)G40>|A_JT?a7;S>84JE!{j`8ne5
z7*LH-J^QvFva$Y@0TgMS9er`Iudj#_OI1`3HK$W}Ou2mzu`nsD7Qil@UEAPm=AO2C
zR0C^k_s7M%$TX0E+i9|ZP7bvxu(^PD-F}LQaQ++^J;pa3(YamTr_eeS5fs#)>|ui5
z!~$e&P{1gZ+9IczpCvAifX{O$(C<%8DjTW2(7&%ed$lwpl$clYNTp=IPZy@4xTC%7
z+(v;W8laaSPLz~q*rw}Q+1x^5+HY?I2a1aW1A73`8BmK0X2QcG!x2$-$PvYY;eq&)
zrpTta+dM2PD$?q+#)E@{+t`TNKtroxX71}_%YW7)iM&_rd54ZpNyR9Rac9%`BQ^DY
z;sHaZR1BF+Ln9?iqdE-b?VtUM_a)eSUH9~&p%@zQs?qqJT}S)j4g6nghA)45qS~96
zQN$lQ=mUz1|6C3ne*aUCM!d9;5Hl53+Bb)6WYM&;y0-aP3R=%R70myd8&b;4zXJXS
z*zM2wk~{5kQrjW)8l;Pqb;j>s2>!<*LJ=1qpQ~nIz-vJq|BW5RnsiZKQE{>WIe=c{
zm2KWcINH1ankq0I9L~|v(E(otP_zHXR}l-Ebd{U_NpY9pn5XjQzn>ef$5{J3R82vL
zWux$KQ5q&E<ezEz^EiP-|G5(8oyQx_KQ95t=RK13e@=j3|4$chBEdlGezvH!q23Qe
z7Y+{6jtJX-{QZPmeBj^T`3VTD=mi>){C&*_3HbbXe$Drk!^Cpb*y#Vf{d)iZEq}AI
zIsYS012;u%@&64=Ob_likL!u!%`$Of|3?H|m~UwM$%`Ir9*gyMtPT4Aj!+ny5ponP
zYUM|+mNCSA_&0dod3&CsYn8C5RiAvp-v{>e^9qNxtIu16iTGViZraESt}^(1@3x8<
zlbI>V$tS?1q`AqGi7_z}EFSkq6iW6*V>+4Kj%a_Yx$-Hmu<gLm%ctoJ9;DC4+*e1V
zwb3@iS;qynQW=Z&23woL-K5FwL4kp8NwU^gS5AX0rwbQqkX7HVhc8-r)@3Gttw^7Z
z(bYTbuY396v(L4?uD;&|U}0moc^oems<3dE73BxqX?^+f#p!riR#&%y7uNS_Gbt@?
z=waY3=OU}=-zTMw>sVaBeRtFkqueF{O}n0WU@<1Bm$ob{GEL`qZE_tO&CPv|Mhoy4
zI^pxW-;b-x%#@v?ycX?qc0b&>+;mn~4{T~OZ<(c_ddYgG<x14-?q-s2s;)Kjv%#`s
zjf0Nvp|8SIhuBMTYI0;mnj2(Wpwo)CbQoF21IHlPnNvR^lg7n8U9LZn2xvGu?at3D
zEvT3h^5_#)avTy860`z7=e+d!fsMBT;$zfv@0qJ_Y7+20Z;ph@#Jo#9_tt?5%PrX1
zH!D5X!d!o~NlD9?qIXxeiip>P2%AWd#limSM_gP6kLBbAPL+VyC9Z(Ud!GKi<oTAH
ztZ^Yp3CZaa>)AGKL{T_6T2$n4PN(0~UG7trtBnsQ88|YteS^8a?L@KY=zqt%<K|5{
z{OiRPKiw_V=R&S_2WvA+;hf+C<6{7^qY?|8c>r^7z1kMd{QbqFr>4d%m+P6Pv@}6g
zRZ-GS8*D$23E@!>giCrl^NKDmF2d!WClk^dApA9!dQ%OqbHl^sh)I<f9$1)|M~j}f
zt-JkEgqqRs7X^5DOou?;=H~m;bWAjN<1tgSiO!S}gbeibt)37xP%vC%jpv#IaTa3+
z4`_e3z*|p#V8{Alz620H9=y(5eJ*tP4x3#-=^*XyE;7LAFyA)qeK-oM``jT*xOjOq
z8xx#wJ~@qqe6<MLS&me!&{R1vTdhNLE-EY(74NShE6gvnSqAfP(YT*>=l~S#@(OXj
z?LrU5Ro}tE!K{W#RvTDmM~emC;U<wZ@%Hxi|1PdU!45fv7q>|YZW}urO?oHF2Z`}N
zicJmgCKq~hqi~mQy0#Ay&K=^YA^;4P6U~Nng~On&)t*VQbTe>PD}%SBU?sSs>TEgm
zMJkKe@#ny0Uaq0diaV#v<-4W(+4RnjhgNrq;y-p7b$l<M!0z1+0DibPvoT@zp51&M
zovGlkadJ{pP_jBb@og~D62Q}#fq}vJxCiZSca+qePQ8;&N7RLdY`YBV5)@Wi__kk{
z*(<e5HAM@060T6+EH=8(v@oz)z8}qOhtA-0yl%N))Jz4YxdBvTS8XfrRqlvW87lQ%
z?jD48kenu)3R+)%?8l5B7aw%0adha9!joRXEGH+YYz6Eg1D%Qg=20R+eo?q};@$gM
zVHp_}HSzFAv$g8X2cD{k2<dA>J-sj17n(<*d=rzC@+uWwE>sj0Q$x8f^sD&?vuup~
zkJ;Jsc&(rmnyP#sZz-LIc3*j*qzQ0!MMb6kgw#Z_+Uz=ikCf#1a3O)(U<Vc&uAstC
zM)Jgx9L39XjN{A0@iH85jBzd17>Wy36CSA<8PznKJMFfxR-4B)%hal{hcna`yu4w{
z51xEQfB?ME?5leZesOesaMnx%8x|J!Z-yLv!Nv*mYUlTUI9F3sUjLYp05&%E@9piD
z#%2y@r-7lN@X$yWrpitMaEU}@dOE?un_d3hgmzn%8Cvjd02ME(qL!ADtZbq!0-O6v
zj{e5apJz&ijK7J4Wa#SZS;bNC?KUQ_mRyNa(^4)ES7elwG6;hl5S}*fOf3wJJL98#
zXOS8Vz8ER9DixNOAI&$qX~H}Sv9QDeDd?OZ4|ngP`7Vv|?}$_51KVL|wvwwP2R!ng
zil}Icn%l*703cgaufM~=NlHiv4GrBUreJ2)R7p@06_N;@8l=41<|_=W@$2cyC#?lG
z?1*qFYHI5BjJqjJH*bJa6`YsEiCsi@;ZLqs`m}l^^7HFv^114Oy&eY(9A{?A6e1M8
z7<d7-QF=f3S*wARlvz?qID;mxt`4(+<<~D7Xwc<PTHR7oTH3C^d02TF0{(1~Yb`IV
z6n$qNJxA=k=yZO*NjMp+JJ!!yTCDKvXNu)}Ki%HD1WWp<)R8pynsTkQ8$9;Lsw`i5
zR*t#xnTe<M$7go&DHi6J0YdXOVer&1?$#eu=H_;%a1fZohK1C`=~!4;K72}6>stF>
zlJm{R%`Lw!qAoZ0<wIC#q?D{gfzAyv|CQS=1r3S9T$k5*j{;>M+iIf&9)$JN_{A0C
zdc8?%Qc}DAg$=F#;6}!-xDJPFiI5rGLNwq?q5%CEOv!6wcow7n`0?`k&OpAcXzY(W
z7X~JN!xf%@53l}YC7+(`gM}n*fR>AX%Y`IY)5~IBM%|`)j&j|6c_}Gjaq+`~T14jt
zi;3SCIL|nvwhj)CfUQU_qba|za1ezO5cP94w)*9Cz0R(Rz6Lmid7@@23Mm*_1jFBp
z1>fT^uI2ysM}IYjx(fat$m&q7qN>X6y@M`F1$YpE=yo~cCMTnpX)P_LCgySHCudE6
z8Ps?iSY7?bo{5Rp_DC-+EzR|Om_n1tL%Y$5kCb%sbNknyhC&9Lc~r6~DH;+IzgXe0
zu#9yAJ^*QhE4oxhhAwl$X@7cjWaZ-IkqW4g0&{CRsvRo##cF2q=aG9*a4=-WH)6y9
zumL)n1~0+WI@d;r{+kJ;Y!rU|8p6UtJ3gF0nN2g@IGebGdw$DVN=+?u%-&d;W9}o^
znI;Em(B_Lth~vvq@|DWd6hF~*xxOwgDd1?C`+|4gk#WJ0)hg|bWODibgc!Hxdie!>
zHUV|=7g@=lKP$DsI0ZzgP0`FhYsy)&ZEx^7Ab=x5OhO^2BrhPW#=&ZNj;i;1e<nyV
zl&}T0pvctBLK(7Jzg5A58YV6I^{drjkHTxzEX_tEYkmC}+k^q|mzrQJ!X-5YLH(V&
zvwpdZEPl(kO6q2M*&HU**|aL0H$&t8cduU^FM4v)(1?nOE#^jP3}L5Be`Ai{SL!Dc
zaM#~iHjXFUJKP^m;|tp9iWeTU$yi=q(`|GjV`Qufj(Mv4WoY(dUMD{7)vH%>S*_}T
zmN68(4K<wjfzglL?(sNUK*u2}BC@x2Nn<!uTAIjLmH#`Qqw=I~zAkW@goa|FF4X&r
z*(>LplZBwa1FiQyCNR)U>|H7Yp7w;o&JAJrr=YU26H}kjtt)X1r8r1aE5UT`MR@ed
z1&Xa|Y+QSjm+fbxy&sVm<h>NKBN|mYqLD8V5d@K@>$5ytwe6e^*AunH>JObaC$1hF
z##|lE0KMd0>U0Se$IS}&TyN#waAr3n=gN}L)hk%v%py9UYo2aN2?<ptB~zcK_-SPw
zY<UrVeSJ;MW`BRL1*L3iaz@6i+%WV9#m&#K0|Nu`zOxGpTySuA6j6$~3R@--#4Pco
z_^E0>KHmUM<V^pM!zBp}{u-*3-Da@4`CokE_W`<!M-UX@_dPU>(ATX#AwiqW@erQU
znIHb)%)`0bIp1mP*8@j*G~^u?)(VTc#MUDFjEXWJY`eVfAkTXn%MYvw+H#czhF^%U
z${dL<_Hj>BUKGD7D8LVF3tW@o`2I@G+`G3aIc&JOCoq>+G7C$|<*VY;C%Av2Je$|Y
zyhA})38IyUpKjLO<#$mxaOW*PWlqS`QGjzJ5CX@HMMX)Qnh;lebr4z)IDAf+&4#ZF
zz&chY3UlL5vXGcu(p-~fu}cN1dTt6lr~QQ=jO*FqyYv-Ddq@|S9cbVGLvcQHLMO$<
zdPUr8>CVXqs#Lhb>M|6*(Ku>Jd)-Yu_KLf<9;9j?Yn^(~4A@x=m>QXyY`=Uj^X@-d
zfKidLak{6=?(mdWs5#9-6BlM-v6_NXY#fLD9Kv^`D`eEfq?m#uVO?!HUVd&8wv-os
zvC<i=ivwS>{taD2=p-HiCUrS~OY}{QmTSP>9Xsdy6M9;!eh^*%;Y>LnSjJVSs+v=l
zj7(O?ro}c>pHqcPdRk=~T`}&x4I#2)E8Yk_{^Z_M3<;OJyR!ONql=1Y0#D@_E(~>0
zQ_9=FJmHk;E+aa08(sg^H#H7&TBeiv0J_-CXWPv6QLQ4t6jOOkPw9+1KLOgW5sbsW
z#LxR!G+_4<MV5sCHq|-T^?6|2Z(!Wt-~ZbP&zZ;HJBRU;zioXHqBn^gTm}D{>*2`7
z&gm6|tQUJo_C$7U^k^mjIDM6@fSjB|hZmio8@D4o%|KaAAyPI%ZfJO5bmVPhWNtJP
z-ugc?4vZ&l`y<m&q-Pnr1W6SI4Kc;Anuuj6FMME1wE!jd--}+Ixbjn8LoaxsY>c#8
zUXtj49}Wh_H*d{7JWN+)Aes*odwnb(FqZERj#ThmXK_33U*HJrsGZ&YemJ;VLicnB
zKieIS3hyK}dOXS+Oxk*0zZ>D>=l^!Y#KpDURe--uaC0_=0}zUc59z#)OjJ}wZthOf
zN1feNDPdpa#yI6W75=%IC*$_k7zMv}k<WUkVKZsQMn>GOR(XKOFmwt>m%HVY04*=+
z!Dd3*HUTFkdu7kX#r*v3F%PQSgR(&Y^Dcu<H~@fJ_*%g%%*-ikfjgOrnVk>GDG67j
z7s6cqS67JHcBMT!cXxL@Hv}ewBO@zuVl;}$z?SI=i2?9NO4vILj66nkB|+P-D{GC7
zO#j@|GZCN>`P=U-CyZt+f^3(%#y?kyUi9UOBjv_D`}@D#3F)CC7x6_z@j)8#fP6E&
zcDYI!yxb1=J-fJTmjJeiF}1!Xx4U2vsIb_q_qt(nQZa+O&V-hloctp_eZW8SetQEQ
zW#@!>!b6Lhus?e%lQw@L>Ev8TfWHJ7jc94;0C>ODx43y0hXW*8HTfR`J_kZpR^a4h
zv!&S){Kdub4p~N>b{Bg<EuEc~CuS}ltKA)?8vB}mu4381YGbskr}jL2M~6v)iOmd{
zG(B7()TE?BwLC7H1TwlRD!rd|t8PiP+dRrV*w`L|uWZ*I$LMJ}Yz5?%f85;P(y+73
zR+Jw2`S5Ypf66t)+TIR9Imye-mG0(s^tifga`e&3Oiew=erk<RNbusn^YA&v))#@o
z`U7ehKq-xFY?}3_WMx|u*tDGL*Z>GCMg|WT0#sM%Nth(W#T@~f2;@kHN+QPewcmeS
zkEN&wYjKI`+7W;cXv&mf>c{4$fwd-EnWesLkn0Jb$Nmv11%<KJ+I_}uzr>dKz`&P>
zd$_O74s>K>!m6r;T1hCBePUo|05?iWOU};D{)kJUKb8}gdIHvgi>k|K`8P`H^G$|n
z9_)$ACs&=j2Uk3Gdhqbg;E294fgd0_4-Y_C^@8YV16J<+Xi>;z$oSL@?tJ_1F5^?3
zJ^<2yg=sc5p_|gz><Rf9cY#kM@hceFDvS|kWMFE@vlCoWwFWIR5S6uI@McP7wb_FX
zvhnfddAB428B{K_HG6@J9aIz%0k7U<GIZWsyFjwPbakF!=^%+<O@P238>@7EBEarC
zOYUM}$zesz;j!0C$Ds@M5+>Gd0Ta%*CxH^h&TM7PePc)uM^%YR_H<wUS*q(CLLDzY
z!02zF1;aOsB6vC-et`ge2~I-lLv=gn6ps1%<TxKSrrKl>JzMUb{F{BIWRW8e;+erW
z=b8M*fRAmyldK5L?>6<TLX%B}s%Q?Q54ngYozpqzhd%abnpjauNK~fB?X7zmb`;>&
zFYwBb39xo@I@+=JtoV3%I<~m98(y~5Qh;cx0Ha`30#v(*1?)9z><VLJH#ZDT6F;tf
za=j)8{JtDEE1s7<C8jsBHYboQp4L=meRAY==>2gpeTy1>8lZwm6`eVn%ABm!Iw~s<
z7gl)AR%uA*^Z_X$1a-ftprBJ0+B-DIQW#ZqWU|(Y!N71*=LVol^`A}*6`UEoui=B<
z<9Ur3tTr~zm6>XcHQQKyg;w%~(5$;{ZSL%xa5>(;f^%;I(CPidYi4PEFQLtoR`Eg^
zTqy-1Gqc;B<A<HG6d|pMjDeNca+$o|Opc3gjx2GLPpoynf&L1a6wa`hIQJ~p^Wd~Z
zRUsjN_A3AtU0ylydqG9;$45a#$k59LsW5u8d(0QS?)NpiSvGYGro%d2eH?Ygp4Y?~
zOwQ?1AWCcX#W!hljE)zl`7(Tt2b^$lK|D7^l#dNqvA=)Ell6~HE*BK!hcRgAlXx>x
z-=*>yl2+`LHw|gB+cI0;ztUXSxJX=LD;J*_o5MG46xP(z7*6HSoGiEtS6yPSPJD+`
z6na6K7$2`Fug+;;<||oMT3kG?R$TYb%Go@8g7roFvuym<zUVa+fByv2-j#JH6Bm;x
zE5~@)<~LiBI!R-!>?AEBf~g(Y?g%+6o3nLvbny0S8#g{ZGYnQFw?FRF<}N@&c}vH9
z0%&UphzNk(mJ8#*`Bsh*0wDLx2<b4?z4Ml44>s<VZDM{lw&T-@DMK-o!ti4Xh6upt
zjHx3Z@-0&q=q&+SavIt)ZIqopIs<|cWWGm7LnD;(L{CkCiYLU{IAAnz!Saf=KRtaJ
zJ#Erz4MdTVIQ5;94Y`|)v?MS#oPOzs&--LKSHp0%i8Y7CTG*Q}jOv8XO{navy87N-
zXOVqg@StQE=4D;}g`>^LOG#pj8D<kY$-O-@g&${UTU4tefJgvXD#Q3%u(7bV+chWw
zFRt?M!>35Ga-|k*XERH4#r~o(pDg}|RJ^%trvL=Yv@|^2gIeJz0{$OQQGfE%<?r5p
z1M4KO%O~j+|GC#$ORmHdA^^+WN6LC4h&;kCE~cIe1K3l1F2?F<o#JbhEUT%~lFUkW
zr7-M~)bSPzEUbG&Hp_$0X+XPPO{qmfU{4RJup(3tvbnhlf8QJvv+V(P1tK5UH|Bqw
zKQ>N_!<kcrC+Fx$KVNL`sbm4v4B8NJk%_yU^yN8E3Lq2XeAMBy9!v(L{PS}M=#9LY
zS#d4XNXHXjnVMSO&spn5b5l#Dp*qTp+$jzFn9!+`mSC|fz>iy^rIg1l6Aq7ogR!;p
z_495PQrr;!)AdS-Q_ACT(-6{bTfhg8wU+1k`3Ye+Sml!3;X~Cj&4Pg=vnPidW^gof
z4Req*iR;INXH;d$(aUH3Hu@!CE1_<;yE*+@?=rL(6R?0`80=XjEieD2JNPOUf6ndf
z+|sffZVeqFj0$MYX+l&QXx}$7Ho9$yN-!qWnZZ&~!9pN(Gd%)~gbHt$=ou*c8rDgV
zE-A>L+HWv09`J&!7C>@JwarZ_CCwgJJg&q{y~U-fIRY=1_>4D;fild#Z6_idAj{lx
zAi*KThZ>ofv^skNc}KiV1YiH)HxrmGml3{~bPZb(3^Xb!Av}>tE#JncVljSv8qt@0
z4v%j<!Fmk;6Fo3cv6p3?6H}FNu=01!tae6EyudA6Yq2dg8xnhl2ziM0ZI?Anm#NX6
zV<O3hdenoLd54<o=?{{<&ychCx&ihN%a`F|t@(bAHCO4f3L`#APDaYGC5;sn9xhc3
zEWOBH*{o3w8mCjY-CjFee>-Q-et{&S74GAeCV=I=y~N}2pw75JC7#Wq;jkRycG}Le
zCYsreW6bENRpFHsp<1OWF)z51k&;>iTUSMaOd1%D36JpI>@D9_>$JNswcAE}%sM+d
zH~>bil0fzWmLj#E_GbVizaiqKp<YktOiN3Vm+s*AW~brWZk_92G%2JQ9RjsQUeMu$
zr4;kf((W`((dmT0_j&r}lfFd98J%`^zh`Kn*qvV(v-_Gj6{p*pBQWxtqS6%5&vt)#
zpt-cn`sq{hNHjG88Wx&yS=o5kc#XM5@f5K?i1zW0n)wq8o6p8kY)XoR=~ErF$=w|+
znk#_&NMbUU{KfbCzEYp!TW5LFjyL}0<v;@&x|Z$0c7?dAD!Z1fZwzxASHYvG<ky=l
z=)cor08Gz@nGH*}M2pfG<P%JSiJxIhA~t9ku=_r!o+F&o&DkWp!x<YGF1OU@w}+l?
z226yW08*jNax)b@y|t}cRxBDK;)S?ex@y&unCV2k{WzR2-tcGLBzX0o9*(tzD31?L
zJZ`_Ip`v982?>BcM$jaaBAdeLG4_-P>`L!2aBStr!k+KSol3G?>vaJqu%@PDETk<I
zVj;gq%g%1|>l~StG-FRTgS9#0TN;P8)BTY#92^&SB;#t5ENDM4MO8*pl2$+<dJ<cw
z3S^yXyV9hqDH+y<hv01%zA)Pm6&|@(?T!<~Qx{cd473ArjbvX#ep>hY01Dxt;Qh@$
z&^G1Zh&rq4Ox><t?@|T^f6VA>uw9C^?noHle;ipt-Q2`5qq{noNExy8xH$rQ9IL{K
z!cmCAxqL}AB)rfZQnSvjXXjuk81~;#^*38BpBQA*0ut!ST+7n;oJX1u>$64gAPcP+
z$P0}M-RtAkO^9j}P8Ml%lk(5L`J!8s*Nn$oa=8){+>;IdARRy<yA0AF+8?TRgv7{Y
zc|Tn3>p;_l5x;Kg=Jz;1|7w5pC$KsgDPw=gS9&%L?JtNogjW%HzquAJFn;#|?IeSS
z?^shls_%`gq-0HMDmR&#lf##V!0%r)DuTvSa;AN?GV<w8F{v?eBM^GIIL$?Mbcke>
zA|N*5lYQvlySjuBzUJrW53-QMy#{+aN-BGKFQ7R(I_~qPJPynj>ETaj7aOd7+X~;2
z+eQBR#8%)GfF0cM2oQ@5owk%uF6t;FhwXxLp@&}r>@BRJH!+oUXF$QgT^L*U{lS=B
z9>vaFZb5-D{dvWQ{rz<D^lJQ^9$VSaKX8qq_}_=CB3Umg9=|KnlM{Rq7$wbhB1r9H
zqp{gU>PxasV2t`f-AVFmrc(f6&5=_8jX7|CK>a%A9nM;#vm5}w6k}uMvf8bHD!_Bc
zwyu)9dlULlxSAo2J)u<jaaUwY&yaeuF0pmBWLaAGGY-vJni4Ry1JkdraQ^ZQwpU*R
zU_XCXRzya*)ejAo$Rzfvsj0!6ZctTFHF!nB&d&dlbh6aO8lJY2`HA$;Y``SEdhr_C
z@}I_eDBG)ROss$Y@CQM_{qJnEH$Bq_s-k~=0sr&bFU<dzW_}FQSG2U;l<e%4+1c5W
zSXkEdGH7UMI#tutb$iLl)A6jv#sz?3`PblJ^)_Iw0`eQ{r^qgWl8)^4qjD=Hr7hB0
zJ9~SeOg=X;VITm=M@ni{eJ%jG1wzoo*qDxnW)cP+9bNg06eb~|k`ZbBh-GLP>GHo!
z|5oY^^ZM!ODG~yTf`S4z1_mM$5&|M}LwyA!?cguY+*|;@f)f%G0sL?d7;N)yio{Tm
zY4)>q;>Ce>Vp>{i%(t9C858((_-ld<w3y4xl$c*W!y_ZcJVHWU%Y3U!Ho4g!i0_%w
z3-{N@fAH^Y?@V?CN$VRK)uoqzG$v-X)7K~YFV{!>21lSU!4z*Z&CF&(7P`JJABLZs
zm&e9BeQ|z4vyu(%>ReS-R*okPH67Dw^VwPi$w(D$0yadzp?)}1yU92_I_mShS_U-q
zr3QWf{zX&szFS=G5eob9AbG0el9rmf(dE&l{=g#9`S2gFDzJ1;UD4D#&@eEhAn@=W
zN8;Mr)?8c~xVWR<)NkL0#xu$@URS;Y8mtc<CLWXkN(PiElmy{|f`D=aLKwo4I51tQ
zXe0gxn6Td3*M;wa7$}U2M8H*^`gc{{QoZ@Ou4jvdhLfZxpg1mHUrM`_k&q$^0mvr!
z8wCZ$J|7Fq;p>+u*l9(d(%Csn6+2?m()#W4FjirX9{+R@{y9z=->G-xl;>l11@=;r
z%WrnrrD1wM%yth9d{$FSv%V$;mX9VIo6CB#x-4(bZ3VViP`q0>0#A5jqnish;FB1w
z`ihD5oBpE(%ilMIIc>lI-m$1?>kwys=eiQ)PH%62Hm2*PG&MQhsQ<bEH5Kom&F5(o
z9lcaVnUpNAtDDU7J#O_Cr~291TL4>FHI!Olfyn6S!Uq>@aB<BwG&KJ7IehhcS@jjz
zTXb|XGkS4!eSwh!)^GN@{Gbw2`wHWKXPN_;X-o@NbE}(^)})sH2Ot{)MOjLjBbo%g
zhsEjI^XsSIhlh}iG^v<C4SEd2Ej(ymNMP_p`0>eP6CVV(66n`oK*3uDYE{Rh!^6K5
zEG^Avt87O`H@C#I#<IK}FV27eHac8TH@C3(?@Xh<llb!8<W<;YB%qiuG5th;*xBAz
z!0b{k)cu5b%L6devXT-O|9ANKy?;mPbMM;&u=J^*AF!6p_u;!M_BxfB^YKp)-yR5%
z|GfnIUg2N!0?g-u|9A7m|B}<<|KP=$oMdJs3WB|e&NEm4ez^&Z-yq4l-&WJZ6b{jt
z<PlqS_YdOlTmYs=Ktu#e+VB5eSbmCcIM=hC@?sJUF%ApCu|JBl;~Jv&%@3wLgP5a=
zi}!$jt5@(rKs!`Q+Kk0Q*H2kO$N!9A_WRC;&YY?eU9jEf780vIg-zs-6pOVtKfqvU
zAu`=um3C!uaW(Ko1A&1e|HJ<%<nErx;cIazzBVSf5dV00atc7l&d!{z{zzq&3L#>^
zy?egdOJ|!k7D<4|4C7mxo_-V&ak;!q01xvyo1C27*m#?qqTsz?cN8KFE$p=>%&B(5
z&%EMzKQeCq!R;;lgJRp+&uZH3F$r6U(WV9UBMPLz(gs>4s@57c)sv;9q<}<wviws)
z$iKD@NF1hP+PT%jf;y{<%?!rGq@<*_YaU<0PS(e%1xI^8a{?3VG-Uec%1D|kP;Cbq
zSRu>aoX+Q*goG7<)Z_ua$k#u@n=P^j?9~_N=VtyuFFeqcU8dD=4SWlM`AJYvP|?^|
zfVyDfU;y1uVHt?9^39i*bwE?K@ir|pa}5%V-)CbJ6LKml`Flnxs<AgHE?;5fC93CM
z`awz~2t^BC5yYcZ6IxM^_cYTi(Y{_H66d0t%=6q84v~{iV`}%|J1msJ$Hm)YNtgLi
z@A9asft#W){JN*_|03=!!>ZiEcVAE`1q`}X8U&<Ex;q5{>F%0zi^!5jy1To(1e|mu
zISI*0cgGp7rT@Lpb-tc`?fGdf<(l};`MzU3<9Y7;cmGiGj!aEuhDhEI6u-IZA&L`@
zu$Y|4Cue84g?W@6{L|xXtp&gtjV_Ck>FG-u{?{9;>&aa9Y9Bu~d(_E$oReT;qV0}m
zRYhk{G(3p|%2j^vc~s6imy<+xM`>s0pSgogpoOtLRcC@AErf@)xuK@5orH*x{|G{(
zP?n$nc6JVROBm(%#kl?N7qj)AorfL%{f784wyd1xLbKETDbW;=)37;NvAHTPhA;3d
zMJicNy#c5mJ+7vP`JyQsOyZHI5V%pc>A(j*B@GQ)1_oI7+HMFuYU^i-+#0y8N0mnB
zh3oV?kwHsCSwGknI-bY08cO&rB}ybi%E(AHg~ud`qtpPQFFG<(9uEs2JRjNFs+6>}
zLW&Xy)Aoph#+^D(5L#u*d4r_UxcHIWb-g_^B=yhNTa5a(<KA#`ata9O3JGQCE|Pj(
zLtMPq9G2RZK#3m_@ivBz&Z<$!Vye{X@Yf`u!mv<@JydBFA_1c8lhUlL?${|7_T0F-
zbLuUAhgFIe*DO(J*DOal8YU*JW+VL{)bT>&W5$#@R)n1X!9k(-QV980)oEWtLk%81
z;$;N?Gi{03?t<nlp+t))A;%YGGw6Xs%QnUy7J^~ew{e<O2ZV<6_1*zsg$JbwipSjb
zIoaifXMw&^#J6POLtq+zgn^4k#6(A@S(2z}Cut@mBm~Azpb-oPR(gv66cjM?($dmO
z)ryFSq%0V&{3=vcS`Hz?Q(&sK8_Q<4!ob9pqX4Z)({M&uqw~$h=*GZIaAoCK3Qw)!
zpH*ZjoZ<r770Z(s#5QJbZJd$*Qh^{aeAu*)a2~dZf)cp3X_k<X(AU>T%ID0(zyQXu
zN8fXbVq<YZV;c}}fYQ|G@aVmT#Vl|^B-n=f9;hfOm1>M{-dq-erxUFGT6Md*_yJlU
zR=^nxTqM}HspV7ooNw4LJdc02$R)Wb)*4uAt7~boa&yQ09g7IO&zV>{z_|0wnP#Bl
z(>#le{ASW8Aun(9bD%d*K1H|A+fqnB!>`q5s+5EziA(X<Thp@%5ea$O<aaX4!kIR(
z*(`C)jAgKqa&b+Q@O%CW+35z{3`I=kUq--ZQf|7Kkx+#PBq*91Q@i6$yg2e{9QuoQ
z<iNRug@wb;T)^#)ZTg9Xx0>7TV7i*%7_7WCHEe<CHh=ajg!VLPidU}^pC?ZS#$xQe
z6$L9+SL=?7>U#Kx@6lS`-a_*7VIi`kMilh)GJwb=D_bp@0nQ-#n=XYppy?g-&)Xe2
z#&>RRZlDVY;1go&sc~`il$00LuAONw|1+~b|2#cSqpdB1jFA2<;PWFrC=!D3BM%0I
z3r55}nnymt(u$%ZPfzGD#PEUt@HGR2HU&)YNn4W5Gim0aY$8#x5J)z543WV9tl#Zv
z3hj0IY?Th4%ZDL4#^~*TZU6+-Xy1onR6ph5I4^KiXAyE>E&u5RKrz%wmlLU!{ddDT
zpucT|cK!WJ)ffL40b2^mhzP#AzdD-K^U@aFH|`4}XpID?|9Sg5Ry_9>^!1F*p$LM^
z)7|fpcia#V=)hS9p}nkp<p*5koQe5m^=9&5=VG7^xu#3nggL@P1kbYt{<`xaH{?ec
z9;67qk2`>z8X+c((dsqq!jibrC*dv~9l=xNo;<=vmE-q2_B{meD44^0dx8tvsy9N2
z7t20fWq!NpU^}Z9LqbR&YdOB}YS(?_qln;rL3U`V#|wT79+1BHN(WM%-?3cyKRD>T
z|3~*Ba0@Io*#-Ybsr`QazfL;;^T)pJj{-k;cXcUC)Bw3|<1G3O-P&U=0NWry$jHpk
z??TOUbWwo0*=K2I$$QQIvOj<MsH?kcGbSdgvt3}|c%gEb$vJ^7QE$`)?cqy`)of!p
zA0NHHpU?2GB=tH0FRljj{xy;&7K8_<Ktd#=Zu_IV`&hbA?fvd(jbT-8D1N>t_;sJp
zKRy@SRBY^MC11LLCYTYe;$dHiJ!1Xzl8)}ms?&Z8zuv~#PFB?1Ut6<!w;*pj%#u1d
z+Qn>%t8O^I_KEm$8XA6~<?uFdZf>lNkdR+f+HjUj*?v90=~9{~9QiuT_hFyZ%O)-~
z`>(w8=P6$9*GsTqD=8eL97`FO?mP-7ZH`FJ>Bi@*;L=QYbk&VctXI~*2K|G%*z9|o
zPmvdqoZ1&H!l0dXs}k!Lco7b3tu8;X>`Vjl7WiVZ;T%#{AE~;$CKWFyHIqP^-(t`h
z#u*7B3aX-s$$G0lR2MYI3Pgxdnvk!q8ddSJv5$^o`oW(scz6-BI+TZmpg)X3tIJ0~
zO#>1qpc6zvMk-QMs;H<fwzi=I2Ab`p*x0?T_2u2;fW|@DP;g38jfgY#0J9@fZs*xj
zeJ@M;C$+1g!E;)5E{5V5fP6IE-#_QFgs;U&M^%`Up+DE2>+Zz95DkC32S1Jj8YULj
zDo{EladUt}-|A^flbx8Iof)}@mQL@1{zIeeoC0z>o^`OQMk<X0#m%YJ8w`vSe8j`E
z%Vy8XAE_|j^PL6r`;3*#dp@IypJUl%_~KlrW)q1E>S-`2>L)o2R-V+{tSwwMjHioD
z12=3+&m(tN@H{b}WUgEnCxeNF+{QUcN@U9Az<7+GgU8BI?1DAXgyEetW9eS0Eg$es
z9F*#&w7I@l6VD}IyjPr60(`dnlbJf8O9Rb3K1&&9W_cNXGXAS~9(x~+z<AI>1o<>4
z4Ad?SPt;V)a!uO#!YJt8M_-@AJDkVs!O1C#I*udzZ!h3m6oW<5=ulv32J?aGvmQo9
zPNs9OcGDul8dpkOWU7<W!u(?G8ut$$**ZgAwh0r7J?u&@HlNO?&@SmU1=eoOj`evj
zUCqcgB)|!4%B?O&R^DGq6xe?B7(9TtsLRPn-loK4-KX#k4`&@ug5eOr^8n@ypuL%`
zPshWUm=~Qbvm`KMBO>%<<Wn2+i}Obg+fYcKlJfIGP9`!hSqBDXXTEtnCB42x!cBNC
z*KF(veH{SwITPcPHj|aK*O9p*624gyBgEXMb`ad#y;~HX&sacN$+tXdS;t##*`2Bc
z<Uc`}lR>g2ZdE^OWJ3!Kr&2{?oh*4hdG&y&PvOZ-k;De5`hr4)MOa?H7C}DC&}Qu9
zQ)+YCK)jED1o&f;!}Z?qzZ&hT{}Sq?4MuHi8iW1nwyABdB^4qfI%OOsNmFlG(!)T{
zlh4ti)Z9oCwzW06HTMC2cYYT(tb4QI;SJ_FIiZG1(D{jMlgNhXGt2LGJ}eiU(P=&}
zNzyIM&4FM!_4y-d&P_en-9E9M6Z8HN-rKWLi9X)i-FbzFK#7sN^K}IA80HZUpe^Q;
zR@-wU;(FeyvS8p(p7-VHZkf(4l=?Mfq=&}$K%>HaWhGCZXIArMyT*Gw3=F^y-HlC*
zOFlMTZXQ-~1ECE!H)y?TS6Gm*5n3%K&lBgxm34l<^Fb7#;fj{tWFhRljG@ck8#zFg
zqV4_u>ARK-*??{}3)`Dyl5dp{6Zic@s9(H@GDEmB)~tresj8yS#Z^ANn#pq6>h}2h
z_BGJ#GJnlIz6=()wHXbkaT@n~aO}va(<;Qo0ZUKA0K!Z~Y2_e4<?8ZE$J<{{$Ajaz
zvCbhc@hvt-CWlxRY`q?1pa)?tdL7HE3R_uPq9FHKLx=btqF}h#UsAu$Sc-T%+d|Ck
zo#_11>MNADEPS3^0C(2{_l>60$~qrUNba6B@7b=v1%oXPj-d-}M@I5jKp3>+2YpSi
zsBhmuQ*wN4{J!lt@?y3h*6BDo%TQo$e&x>dl$0;2%@qfuw|#MKH|}W-Bs9Cti;Sk<
z_2^E{Kr<*H15L}IIER{=;ri#f$f5l(Uy}$gb8S;%C0z<73y#oCUp%H4MR!~3e5@(N
z*iEd!c5!%dEp7JrCVO*pI>9kcr^P#okz7gMeY2<FG^y6qr-?EOR&uER!`{&Y+NNb#
zFCh_EX5VTE(GF6lVPx#sE8cW(okAh2)%rDu_f=Qe;5E`?D;Lm{=za#I3706Iau{ZH
zxI}ov-iKxil21fvAI`}r2Zep5fY0J=<cE8FlwdkDz-M@Yb42!aR5YK0ouQ>?e&&^V
zSX}A6o{ZU**q3Znlm4?7K<234&UH#|Gs7YI5NpcL*TU}*cYKc$+HC2Rs<QxbEy&F+
zEY$3t+=V40^&1+jxH@L9X*3$N^lP1i(HEmFU;cG(72Zv-_Kz~DNDQ&(y@{t<w-5aj
zc^<ECuJw-NMe~61uI9bg(hzA`B}`Sa#SDS4IOHoR)fhiC2k|6w*#8q6nr9<j6Hi9<
zT9_!7@8!KqIx>oHgp{NtV0RF5d%h&{8+Y;tv%gx)@lUt<(@p!5uCA*=l#VlA^t(;8
zU#4r$M~dNC{oGzM!Lwc-E{63TT^GGo@U2Ibv?qt7Sk$&@Opu&RxA7k*%z!$%H4t!;
z#Hl}zx=<he&r`yYrk+Ovu0ENcjelJ{2c4o5LvF91nM8Gaql~GSXeKoww6jaj@o#kA
zMllex<Uc*eqG8OyF{=6o3}PYii|G;1AE7bZLwQc?ba@E~iDsY`+HwqDiw7@j<C;Tu
zKFi-)%WZ$@7E5vW^!F*w#l>*vu*oVYJp1L(D~2zYOOWs^E-7uQXZ{E5+)zmWm3AjV
zqq*Nj9X$mkY!q6-r!9>UhL&fUt)9Y7knDs}1?T%RG~LF?6X~dK0mN(&o3|!&V<*KS
z+$|C&MyAMO5+}Al?axEU<;mt7XX~ug+bUu$PF)cBlbA@1%bdsjM)RHdb}cn}C8ZiX
z&t~0jPr_mEY>ice8830mdWF|c_LlcMRrz_K)2)WXt5Pdea>URZR&eCucDd`TXYLG&
zR@o~zfq_}ZB|ANCrIU+!pySereWQhh2hP>KJku8sCpHQStFCfCh+JzAwm1fvs5)ja
zc4MO(V0*{`&VW3^X5;om!f_hEi_PTsNIwA)wIK!K8Xu9~Zr2L$n$u8PxE>cT+4y!@
znjH_itZkE>O=1-bi;T3)VK8dOo+0a0vb$$hY^grI<@KGVY3Tk$_+y~l@`S7twpb)i
zcsUGRT|{TodZ@*j+B)7WPj)|~I<Xl$TlH~CMX$5Zd~WSAo1{V8*Vo{EXLoUD9ON5^
znJlQmddkOcD&lD|R^4K05QWt=TbFM3p)PU#+E<}k<tQ9opKiRZVdGNYbVyfTPENZ4
z!ms7;D=$~KH@&g5qkI>O{afQf;B;O}QU<F}NlyO$)5ChSn7JjN{OwyXu1<E=%?Y*9
zsKZ36fyBy~Ui0&(!J~E5)P90dWn+0-RMd6%RGG{0xBW7L=`!jTQ&ZFN-nJOylrd!b
zr-`SxfeLfg7COzO9W5x~aCa~sdN|EP1qluP7EnV}3wR;GQCYY%2^<CNBU234umZfM
z0qZ$7GERHk07AY-d(2@Vk3J*i`dRKb7;PK#(s_s9_22-FN7>lYC;Ha%yFl<iJv7qo
zI5^n2!)XP@6!Aat8MRwxK%u77s6>34iD*{N(kjfK=0%%8$WzaB>oCJnet7)Ub#HaP
z@jdH$psGp{kLfzaI+;HqF@mtTyiS<&43kc4M$0=dV*cv;FYGciowxJz@6KIP8Im}c
zcePF-PMUQVcYC*iJ3)1bQeVH;*8|Zj>Gk3AiYWx=w_d+{D;mkj*!0*&fDvO?3!cI#
zq{t@1yIoU+7k8+oBX3nYTIFG?)A;Hc9+U0{((a<PjpDcO3;W0YXjHJ5wYj)s-;|m7
z>%Gv=g5~7R%uj2?X>Pf3PsyfQ{m4l^poj&i^u1&vhn^Ld=sNbcqX9*zZL_zux!7W^
zSdq<G#hu8xIuLL3yfb{y85kQ>d8GO+IaR#H!UA4G#@(+day=161TnW157&p0a7o})
zDvv=Pzhb;%|Bz=Dz#nAa)(F{+mKUaSA;8AQ!HvQHt&a^M6>0m7G<NCl?NpM2g*(cb
z9P2E!I11a*YPsBz`ihpqU5wAtaPifK8^aRj<(jm2LwRC<eSvi21fw4o@Cair*DV9C
z4<sZUz5t+0mz9(y94VvTA2Q;3!@)M<v-0c5&7;}Nkpd*`)$C3i9&v$s7t1Jd41x<4
zY`T8>w*sNxp7b%%2pHFgejzm9YCS%8+qnO#?(cu6(sb!<<WmSKG(WK#%e8L#F|<I+
z?bcAek%1>x?eZ~Y+OOcZf_80wF5AR}xWUI<FL;RVC`inGaF?}Ecl->Sa?$;`Sjl=@
zF3V(Gek>t2I7xTj*-M_auV*Ni!o~eO0|-u0_H{-|HN86XH420JWOIZXm0kgFPqf)c
zH^sv3b4V>*&z2}HLh<hF2x*xKh6qm$s2<{mY~vqS7HS19FIY(IFQl~serIAr!iDFN
zF;|`W#h6l>F>F?r(sE}+Q9=EBA|bfjqs87nZ$);2gpFlv3<$R~TlPTHUR)52bT$Qm
z52MTlud$&m?+G2Y<1sQmw-v(ehWGYa*zJcQ-Kgp5`WQ<NAod&4r&wDGdHMS+*xk)L
z%}(R-me3bD%TI<#5V#3|+y-71cX^o%m_e}vPF4mABy2yg<aouyfh>GanTN_0h2MVb
zCS)cU?sRq&^Fn5G+T(jPH`+WQJ+|avLYwF6bb;kh+b2&pCf0MU#k|am#wHaLkAP}(
zMthBwdIRW;<Wl*4u1jxE9`>OUO)MciV*!In^1!F>oUXn%2heXi(CpUFIeK$(JAtSA
z6MU-F1cUr;S<ZqG*6cJq%;f8GY&uh_(<bNf{)+EzXFD%Ddv!Wq#X8)%61YnTiSMI0
zUEmX?J@wHB^{uCRO{XUi6IqgB4TKd!wpCDGlJa@W3w#DmnRVN|l|ZE*O4(}N3bh>_
zEt5IGCO0wob7e{GP4f`PL5FH9VPa!TQh8GJ@%HxxDgL&7vvsZR?=nn#KA2C8=t^^9
zNJtj*OdPhN`A;F%HZyknC5|UVCfOMxD0?0@seHGqRHqJ?ziLdT*_@;A26;?2OwM&#
zSvdvvH~r})Op6)$XC_V0-7Y-Bx2MA~N1)aFa_U^Rt!{mGHpct0acP`(Fe_=!p?3{6
z4x7=;Bv&7uyg!@?E5Bi}8u#Q;&tN*PwLdmjPGTg<ahPHv;|NPM&b92a7VNUwZFpGs
zk*jSxqe2PNr=MRss1slE?5R&0`8kuy4<VQpA0{Zo$#EWM`+cjt?cc!X_~`@}m_1b4
z2o{ZkkbGM(uj|w`v$8rl7-gN!t8ht*v+i6^v5J-6{G9EWS8IhrA_@+pSJPjsY6j)t
zujzKf@Gs<o_Q7DU+uIvYqKSo5z_#}4J;`liFC5scm$Cnm-{$}P{lQQR9WoVfS=uiQ
zT^VTk+Wd00z;evU<yZlfvs$%ilAX<%zH)RgKiMOxXehjix0-Yz7n&<0;Tj-L*l2A<
zxZ7xdwKG0<a(H;n2{kE&kF*~Gv3GTKFiJ>X14TB~cx%{M@;OYm^j%Bb@?LTo6Kt}%
zbQdYlLzYsoQ3>GLk_&^`L+;viGX-X{56OekIUEMCf$+=t_01&l=D^70WESY{0!a%H
zyVC5K-7iW%S`_Oo&dqI{lCW)D+Fv=&v5Y%oV`@xQkT3@J$4zA{E$A7_2qIBR*AZ@0
z$Sc}JAon~!dQTMeaVNw0;P|Q8SWjx(NIjJ)*)_aMH)YmDHevIgL_0s}oi%Bh(fHL`
z^H14)ycAnJT<qN3oEi4w;nZc;`JbF@6Gc@RpUTbr%>Wsk`??~zjS8G*aysE_L~8l@
zsBe^w(onU;Pcd+L5imZ^`Wu=fNrd7<?#61OOc^JtDt3P6_yhYn#Ip&~?M`Ibk7g+G
zSwgf_r!GL4Y!*|VNq2vy;uSTg%Wx|>AYTB3i<mS8CB?55EHg_1x2s<_0hU<Ma5k2S
zHiunYZ2$zbr;JfqY&s`XNMm7S;7bw4NF=}g2p%J6c&5h5E|16ZV{OWsDxAtQcQEKj
zC6o3cny7N{x*ocPU4vsJcZ;hWFYOg9X1#VZ;oDW3_)?UL@@C3z_rjGVby{;P=w7mA
za_JJ~P|$MEOb#0Us6K?yy{7JW3rdZT&#$gl-SWvx1}2`UD49#n{U3%`1f&!9+YEFk
zjzdI1B)PXcSL?a5C69Imw3>jC98SRg`8gY{R6)o<n)~cxT>??2)8Age#}%IIL-kxD
zQQ7Eo^=Fs1r=h}Uk9@7^ax$~QU{?~hR;BJJBVQ^Cz1^aFKX_{4iF%ZCj6vsi+#5x5
z1P)9Mi>*Wx{ex3Uw~`X8Of7uq?2sUZWJY0rh|grXn)YMS^%GKBdP>K;OA=N-@<gir
z+SNER7|Hg;)SB8oqsXs1o>k4lNgSh9olDOaLM(iopN8GoTbmORDgxs}1K+f*#JJ_h
z8>nWH1)kZxUHna})#LS+YZM}6%O8I05$`hz)Y9t=no?827f;&unv};bw$Z@y_fN3n
zR%DE6Wr-%2rj}QWSilrp<)=?K6H<oXzrX&t;NEQK-C}gvh-MhbX+sfjVwRpsXO0K8
zJJ)7)M~{k)u6)bp25sqn^Oh(1TUg^4s>s6%hcT8N7=1Bxf8ijHh>~S;IhiEJ)HX^t
zqV0M;VNxVdnWvLJ+v{aZ+r`q5H~K&5q0;}9<XC<%`Zzn)+ut)gS(!X`YFQ$F#mqj+
ztVahGXx+F(Jeu!}pQyekz659v&@(>}Kr;L>fyTlzX7$_tdx7G8yKe0)9~K>*4drDb
zq@<aS62@xeA6ETr4C4W{RxbT6kQ&qs%I0L}R8~1|eu|w!*-tBI)i+CrHswuU#`FU>
zaUcG4ajd-;QBhRhu!`&eeKxrW@OLSPakni}5qfNLSxNfn0Nn4rf(+1H0lBVtQlfIq
z3iYtY1c%{1JY6m&F;UG(nYOn84AH0e9PSc<-^|H-&3%1-4QN-7XUR&?A?Q*{!i#=c
zbdYy5&E_jVFfkTAyt4rmcb;;bDm?2Ad6+}c_fK;!Z90tZ8<!ah!;HX3SM<}SwzfK5
zR#ZrbpOv*r5^Z0prc8T*qq?S|a&-c23s$t9MLkT*VmOYg`S!8<rdWau;EZ~e$;w&S
zz*>iE{Xz{5Js9LL#HU~W-Y>!7xW&mwz<pH@XtGZ#E32m~wtamB6*0&k&Z5xL(JB5j
zQYfb4>?1e21LU`~mU=#l1^y3$f4iBzGx^<pGIf#e0?R>5Mn^`*@O+^YTV!OPpsYEz
zpkml`F*;f`5lO4k;FRhrVWwFh$rit;(P>(nx^3K)NhyTIRWI!)L(<rG`!d$=3V5x|
z%+V%ixhC>3%G$2{f;CJx!RA>br1xGBaW6p5<aFkCVA%d`Rqi=(ECE5fmASD5B8rEI
zw88Auj~hn^N7uTpaeYo7@_Q+BS~04*o_S4i=_|h`)_|Abc&FnDS>$onscOVv<bvhI
zlT*R(hrPq4eod_BIEK7diMX@PDsNrxSTq?VU}0@Ci;;9QAF9Z$&yPQ<n_YU!r$dRW
zRerQG%;l{C?67Gc1@V;N%5+Zm{&C81yFw|$rl>rogQ@;>L)zI_BSN*M@|?94+}r_Y
zs#b1pRF)c68zOky;3Of)OUd&lciRKjSe?dg+WW*5?-6mE%%L{%?jx|>LG2!52EiH7
zLl`jRW=s<m-(2%ARR#E&JH-_0+bb!3y|>LMfA=)EWMttB%e)I>8Wm(uf%kpwXJ?mc
z1bf>1w#Zjh+!+`A5wIyxG5atgM&_t}yqCJaNZmjgsdyHU4IB<7S{#Nhq7YOz;~x)z
z(Ly{Fe}Jf1jluBD&mR4JmiHbTFvfcAQt`XpJ}KayCr}ORHXCR`X#{4!!dj1)fJhyn
zIxB|##zsdS?46!I#@t;fAwSOAOb_$QeB9Zhkg?<IkG?tO_#?R+(t4ZrH6DLl%0XF~
zWuGxTZisQGD`7uF&LX``>n1%iC$qSVw0;Y|_0IETCt+L$aAs-88&&E%i(UysD<B$S
zoKW!4OwWuxw}Aok;ri;TYywxJfYzn{PL%PdPr?`U_9LV4nJARjNz}bA%yy!BQ6PcN
z>~!GKD>XHgD(i&G3%H$qDhZd>MZA(%hK_XH7OJacO;}y8vzIN@w|eY5o&HG42{r-p
z5nS5H*emzq_a7up5p^wF6*J=FU6<?9HQv`ep6i$sbu^LBbnS+9MzQc-jjIfFpyGf*
zldw1tVD0*40XL7e7N@$ZVtUKdU6dlbqG_dkW`j*%APBdaY0VR>qN+}FKe^!Ey`l~y
z>Mc6m*xVEph}vNMn6ros7|)1)9o@srv>fvC()@1gujTwcq1D<Q_%49t39S}y%MDEH
zm}qR8?2BL90yZaa@5n+xkJPp15y9T@i<}D}C<h)(ytrq1X;@dU4v(J{19!S29C@Gd
z1tQ0TKAUGYO<&q_^p(6HOiM=_k5CS3pl}{ZZ(8VAHP+6RrDSghos8z@a<5@e=ogoi
z9h6{T^7NFNS`889q}q@6i?Y|81lI1I(Xzc{;|S6x%fcdAn8-wQQp{*rxVL?jzSn%?
z*~erC{CG-gjLAvfY-}Z3zaCsmd|qE)8^cjm-xE{Upfyh%)mEq8e>TL|GNlXX>Fe{z
zlyt8%De~GET#h@Z6+1hJH>TL$^mV3c-&C0rdbv9#aTp?MPp^`w!nffgv|W?ib>_n+
zhSpN*$)$^pGU~K5C>^m-Q(Xa_9AhP=(L{E1TEUD05<dG_2OX91L?tC=HVxLQ#k(}Z
zN8v}o<@IJ-<BhqEUx*k<O`gC7oFufM@f7TLTSUe^Of=7MZX5ecHWy4bPE}CyN}?lg
z++(+~UI@0?*FZw1NrJ1hvm?JSdaOtx*2O-)w$gOgb=e-Q(&m(}BB$%^^{I329ln5`
zzrztjQSS`IoUS!o{7G`H$!3|H5aYFfm-YSoCotlTHia}U$OlR_=gy#!q_((THu|LP
z;aKnm4GrXEXO}KE_gltR0>{2rw&M}cy2(IUW~ol7e8VN#oCGq)4xi~lCGb!I6LHvg
zJeTluU|q?w?yf!8;Na0jMSr|3U<Mirnrm|y<UnN&<}Pd@WwwH%M$v|$Wz^Hv=)=j$
z<}zn{Gm|}vX^i{Y^{#RfT1DDPu{#KB_v{sxAKKE(?Ldn^sdf)IaESN0E(76ki*a$+
z%f6foZ90fvFYk0N=xB`XDd=-mC=F8fPmN|c00IF)0s+w2oLavzH-4`g4X-rVRvUD1
zbO<LFFq|LU1Udq?8uKV9hq;kN*2p=-n>U$~U%Trl{-JV!_sKQ3r)QLcv!vH7EFmE=
zdb(BI%IYS!q-lLHRdee5M>VxCzbL>1rr2Oc#%a2~YC4<($BR39z=M{?<0czp>vU{I
zH2o%?H>EVpX1Y1b8y|SOHii<v>wc|JC@Tfx9|-$WUyW8YKg0^$FL^IWZ($W8NnP1S
zL!G@e;6P@OUGBEq*A1*h^HukfK&=*=`(qU?Yj=0+IDBn`O!8V~0s6ilZ)B|2c1l`U
z`KTlbn$q-?)~Yt&@MnV|@A^i019C}I-LR<+-;-Jl%*S3pJO+op;pI*8e$&5*jMAp7
zVV?zgAjt`)n$~g*wI8{M?yEmF+3G^7tt~+B@Y_GrtDj$$G%6!Rrp5@7G#hSj=-5&_
z5eO>vSWj()TF%A832_pRtfx%*i0X7kY<J#o1d@Ha0sWMk%37D@g<S_Q0}#7~g4V}v
z*tX+iIpms6hv8i@U?kPU-sm$5|4|Yy&}^cw_kEqDdu@FK=Hfy+oylta8UlB+>u1D<
zg0U3)JASH{bXK5qQe6$fa2A~-1-(QGYYkCqssV)yV;s()r4(~EGsU#hVwU?CJfC+b
zD&!)Oy@2gb24w^?AqIs)(xsp$D%7F04&2q~Q?~OtcykPtv~D{Gj9c+<ogeLXk@DH|
zxUL$VZdpLwM~Y1GkngZxYj8i{O~}K}a*3)1dvvn|zf!r3$6IM!TvC`?Dy=J$7u;&9
z8Ti^IWgqPl(O1`Hq~HXU?-H>|4gY!<4WsT_WO{9+R`wj2vt@cEiDqIQyYG6Nrsf;$
zEZnLqE85P_kWL#n&MIp{MeJlhj|bMtZB3+2xV8Vo@MLD9{@YEzM=F_~sg{D8_!XEc
zgU$jL9v&;(h;FN^4R=yY`WydGA;_o2Zj_kL7{IyZ=5>&9ES@`0Q&eJYv$cNLdR7-Z
z0Y+@Li(Y01AG6-Md_q+Ww@Cq`t(eridk?>&g7?}@7Kh7*dFNz2vEYaS&4kpniCoSS
z=o3|~3YcZvyFsmhf^yu1(Ww4?I5^n+g2{;#jDHKLl22=pMDhC#aES{8sJ;DeUCQ#C
zHmYP~A=;H`57*r<yH%#L(ci9Sc4x9Ip<XEAqee28U&(1`KF3-N^i<l6=i1Y1WW6z;
z8@dHW@QJngXfs;LMW!38^B(uf!67S8Ea)C9MX41e&JwAge^uESLmC2@EzGmpUj_zZ
z(#k5W3nCMR#^b;#zgEOC_M9aY&{)`J-6@fYff=&;JsyKrza3E+2{3w)TZz7SkxAg|
zqx?ttj#^Qn)YxrPcFQb+=RFu7Uiwb!ECTY1MxZUddi{JeE;oWU`{C`2>#_aEw{Oc&
z=jnn>5~Gqjiy}0<v5QBLP=qD{uWx>p^<J9-DxXY0hAa_4NKm308|D5Mhpmli<GI-l
zd!vtF)0N!%8R?80{PXI`{UW7|I(gZf87XzDsT6?^A}VnvqWe<t0%|hteZ9HpAuQ*Q
zyi)#hJMYp(9!h{cs4@Ps9p<Ka{>mCJWZg$G^J{I#=b>9rXmyKr(=@vt_a3jVZ14E1
z@^D%$lxcYE7H+XEQtxZm>Tsv(wsSM5PZ%l&%SR`Uek5)4kh_!&6f=a=_>6CIPq_TJ
zD?{O7>qy`W<kp-}kBH1N^qNJrg6-2imVR;-n!);v$KnM2qIq`<jf3ryVPUtv>!zB7
zm)<k+`HL3^D0}scZ?0xbb;@v<2Znolda|?5$h`UGzjD=e#8t9B^1IM(;vxmJ5_Qa!
zqlt0j(TZIwwB60U5`G#6+DY$ae4Vvm=yo`1gUe-CRv89^H7RS{Lf-xgF;s=P+4DfO
zh|uJaR;oo!p25RbMP|zEKH4~|j^PmP@~Zlu!XP@+b?X5p8nY%nY%kSF_2em+>X^uc
z?D~3J(StC{yag0bgTUljYdfMO@gtVX7B#tGIqCH9!7UEO=$Jf;wdqdF;dk2oI^&Bq
z8<zw=>pC)S>!P*f<|{+{n6h!Q_2IFd0n6V;pVOw$Rh87<vOtLY7iZ1vV-78kv>~U=
zTwIX8uF-B*&_1H68W|r?xY{MCGtMG+lj_Ypl?Gk_I1A~01sh51_!{5ctKhhUkwYIf
zXJ_v4Ww`CtLy2nvSzq4AkBATUU!3_qq*=Onxc8bij*ROnZ^Uot*k`AL7Dp^_7P4G%
zf#m})7X-%h7Ag%wO-XKZg2%K$=b0kTJY_U28ff-t%t}gkgp@fM$5?Iz4Zl=kpJmBl
z8>}S==e+1K|MB!<`yu8tai0su(i@twoLimQy5bw^a}Ksj<Pai*zrBFy&qjyZG%@3Q
zkyAs@Q;K?I`eTp3H2wFv0MMHvV1p!FW0LyZt}|%st-N1LH(Obwj{_q!_UaN&lU2Pt
zaSJ~Qa5)r_2tKjSp*%o0<G(;~L8>ps={*q6N4yHnjyXCZXrxkc28R!_*NO&>Leg)B
z2m1$&`*PCD%U5YvH`b2$&`|FlQH4@@dRGK55cnQl#x&I*^<UT?{}5=X>jkp7{^2*E
z{expF?dMa;{ptcSDyeq<?&MVqE5av{<!*4qPn}?HgPc-P5;h+JiyAb9_`9Vf5*^M1
zOkV++wAzQ8Kx&5iG?+u?-~adu^f_a}0RMn(G(yis@dglTmpKg8#fvgu+Wn7u`Oz0)
zj8($6fc6Jr@zeGB`DKG{l2XzRsVALY#UlFp8Q|Pq#)^fdqNX-BF|kC(%*e>k!N^a|
zEAjrln05<~&ov)VqXFq7@DaWE_HD9_?<Qfnnjq?MtA<`qZf!1#93A6ib&Y$F(!|6B
z870uf$f!`QBvYrQF?wQ3y!+_*3F!JNe^bH1#sPh>I2aYif0`x)R6M^L`lR^y)qS$~
z#KhQyNCHB_yPeDak@7Nyt<0mI9vV6j!3ME+a&hq)ChDKts2UGej}FN;HLCY;<#%xy
zx;z^wZ*FeR8%_p-1<B!_kf4y<4t}3QV-I6vW6(#TqM#aOo55SdLq8|L2v6e*kPr<D
z`s#gk5+H7x#woAU;(U439p2a3Nlwb|F5KVy=ik-7C=4WVAAXiFP*baa_~5#+=MS6^
z3sIRx?^UWQtJA|=_TLrE_w@;jic)ZJ>>ZoxVyzIG%%kv9Q&J1~?Cro$D^f#oylzf<
zIk~xWl*oD6ZMrdl#ujLIfVS3cm?jqu*A3xmz?<msi4u?pAj1l@uTxWL4$pv8AK=9k
z<NR7vL6ZdA&DHB5m-c@8Aqygcw=XKWat}7kL0!54%|nDmJ-l;Ez2S#ISoQ#u3-nLA
zx+#Gk$iczkk}NqXA_5-=Cn_ol3yX-l?By_jbDS`WJ0}Z^UZ9eiG8l|ga&V;H;$soX
z5PY7kn^WGJV4j*BU-sGB2b}Vm#X^tYE<~O8szs9j1h;u@lfED>%*e3OSJILVQ4tf9
zm6eq%vCvbrGf@84=<bBIk_a@P=s-wkU~aSpMzQUSpZ?Xw`D@RY`SCqP07_S`CD*eX
z%DIf<Vk48Ydup!S>}){56D9$uuJszriU19b<c*+X&c;`-XcJOWv_E{1G#9h6DP_|Y
zeGMX6p74GExh7Wq)!AUsLMZl8w%EAe1eiX*0Bb9>%lmF;E<ciFZvG1(Nh2a++kf`F
zI_aL8YD*0@j?5JVGCzg;ToSvJd(Mpi?*~UC0RYA^tG}40rp5;W&@m_s2*cxIBK4nu
z10R76dDidr#`;~~A5dzL2~<AG79AZ;)0Q4D0{q_mU%q^~yhNIv{y;}ZSDuB}CI&uM
zMso71QZZ|HK-FpUUI8>S8w-o%#6+NZ0L)C4s@&&d3?RM@P!T|9wVi3aZ_Gw?n>27w
z*Ff+h)C`vL?+4cj>vj@=+_OB4LH;c}JOXe`pud%n-hB04k>han>-hFmsazsg`L3?w
zucZxOAGs^7ZAgf&j&Ac2G@+tS)q}oeFCoCeIo+x$s<02;Dc%A4YjATkL;Mv9zgtT9
zo6s>ZP}0$D?H%$1eW-*4Junsa%}_TeGLh{MkB(LVpcMX|zqV={pEnZ1(p3CJL0dss
z2RyHC;nL^(;MRA^&(AB^SaRs|xu6I%Hp+R3xjbK{yU~cxK&T7O>m}c;V(zcOARfTu
zY66~foRk}e2@ndZV<5E3LxBk#w}Br9sJ?13tk~EJt2*iFY1tjhJ@zk`C+YEkG8ibE
zic8*HP~*QK6lbcP8><Whj{~ql^EeHB?|kifd$Ve^W-;+LyCT2r^XJcUd_}&#>0qW>
z74?h#1`*+)e`J|9Oc8O(Hb5KTL~opdPhfOlU+n|1!YRIFq*60j1dkZ-THURSwb2W-
z`C98#qXsFNfje0Je=nvQzn~)sQa(XLYX^>m&#3=85+2Me-82#s8|%%XFqD*ifVW7K
z<*Z^q{2wW;E*kaCpEczFWVmcszkr$ktEiNel&Gj~gquiUoB(H7QPDqw+>5Db&ZVAV
zCSX`lQdW+MjKt|6ptx}ZT4lhj_!hMSydvFQitPVlSP_;Ml}mlI$|Eu$BHG$0qsTWE
zoBg!(^b&|4RaNuz^VwPp|GS|3Xb0`hp`jr)Wo5BOL?8aE*fE!w)`~xAyEig@ICjAA
zGa6uzEQmkig2V7f5Pf6WH;0T;XzN?v?(&~caEa`5E&d-px8P>XGrOG@mkN01=*iHZ
zPYwaq|HXr_DyF^Tg+D)raOe43Jp144vyK}PLCLeai1ab{na!=gb}EDiluN#bi^0^_
zy6@->ecj!!uCFkRKLeX>As9LU)7W3<Q(KbnL(KD$rO{AgD4T_vfi8Hb(Y$b$wWZzN
z@dir;(9O`|ES)IU@RvS1K9;l4IN4lqg3Z1+4%sAomS2zo9&nXe1Xk1GCil}TQ!)i+
zX6AKj$mYa*8I|Lm1gt+F2*Qoc0~`MpYdb|g?T6xmj~_p-wV6}8TLy-U`CMygR~N-!
z`^+7s4}?6c#v);%>HeTIFno=eAG9q03f_H&$w=%V@cGf69=qe8yWJinyxx@(W!^te
z2{B1Hwq_hbKrWy2_XRJM{49-N4(+D%+%SNL{~DDyGs|u>mC+xT;&CD2vv=}IJWr=;
zV_<k-z~G5)GX$XEvE`~f!ubQkiRle>Zh*mz#|h4C)wKz-O%uN#L>gLc&5cF?RU@dc
z{(UXQU1UAPWLBy$SE1tbx%+-vLgaG^ey@7*M{+7E9?$8Kh>?+s6{;49_hjRHnOfU@
z9X=WY;CUe8a*dCh3al^`pJA_twHi*Hku<rfd}wiRvG%`Wx4;JhwbrBGj8%`;L$^1X
zu|QMt3kC@wyVST3x^rOB+UqpKf$T~-GcqEg-r-UiwEqKwV|)Ai_vb5W3N<HZ9C0Zq
zmree7q<nRk!!fxelQ>F%1(L(|Qh_pTg<AeS&>GGsL}5{f@Ohu;0UG;^BcA)&rnm<3
zDG8_ZNqL4p8J{;m`m*ca#1EzL$m0vBsjF}FO<Fe74y3R;o)yFM<cWb$rOo5q+uQpN
z(AmL08%DYyVE(Hf5XCLc%>nDVvD&QyD`U?di%RL6!%hz(VJd%aHU;!Y7cMsT8?DL%
z_{uf5^It2R;^p0muZXCq(d>j&X{l|BPP35=pgR~E7!Yz#D=}T=mz0#`<!$fosu+pZ
z8r^-OtaT2B;}8?SAS8@UNa#JQsVNzD2CV@mdU|>mx~&xnTWbaeFE75@`HlsCe*O;V
zh6=&4`#$^>M6aYR@PXwrGaRhJGI4JnKY2>V0x>d#;%+c~#Kyxr5V8344X29=+aWJZ
zRD2DsnamxWn+^woJJB)G!otEc;WINcqod4cXBY)qs?kwX*x0xuO&~g<#dfxSs8+~p
zA=@=PJSQR(u`Zd1f|3$!nw)HGo@ev4tgJHP;)#7C!Xnt%*dWs{mV?Q_Tti(*=nk;M
z2a`CnD6`YM7D|`1P+S%o8+02SykJ*yC!_Q8A%C9$X*F7Qu6f~4(w;3CXhz;WA#fGI
z9It=@OBV@mt&7)ot^SJ1hI(0^Y?4&3a9$Wmeq2orWlI{j<KC^uu!$VW+UjaP?^_z0
zmv74#eLFy{xFTl<`!Wc+B_J1WFfe=p^UN81^eMbfV8KjbapIAS`W_9OZamIr)KpYz
zv(5k1$4`e@Cjr?3G$dh(>=`~5)?B{SvDfv}1biY+>)CkZp1vWIzaQceS}QVib6kQz
z$Z{mzn;hjDk11s)JQ#Nf3kRpg?(lIA8c12Ck7a^SRPc2+ly#N59p_4frE>W!S8gZa
zNnq~kHhQi_WRQcDWtx2umx#{W7#)q>P0$}#CM_pZWog!=-$_VkHB~xTSgi`8AYPHH
zs;VNRZ`QdkH?ypFe~XI~D7SS9*YT1F!FOD~fd@QUR}QJPz8(UH2^5SSTSMzVOEZGt
z8Wyl)GAd6%M$Kwh;6b-m5?}*N)sf33w))9P0_(At%`%}pb9#c7dC_UTrz|e`ElLIa
zTY|Acg%2pAAib%aY<zq?CnpDZ5Q5Ov6cr;<QU;sM1AG$M80R*BxNN-7oS0AryFIdZ
z+LE5Gm{`s}rns&Z;7yA^Gce48IAIU~;{)!C7rrET2&m6@YJlhAQGM1kJB%=}fbV5=
z43sGw{CY`G-+!+pFJIdA+l~jqw{qmFLXLh#*!=m(Zwx>MEY8bD;&qijIGdA$A&7?h
zceQ`12>#9ratd2#1lK`li12sW6-=iCiIkH6!My-9Nxd-oe|cDLq$wW}dlA*FxBPvd
zn@j0>F=MNwR1gXD=k-}Mr@8|XL4cN=oR6IyBnSi}B4hwRaY=eQaQ8re|CHbwy=}YF
zhYtX=^&R2naI>iowPAI&YhVDKk`jl2Km!@!Gw!WK?)^|h!;G}_`+xWEd{EpNsVXZc
zhK=DP=nF2szxu%<43JhSYC_uDfO73yo^{`S;=>(vCu5rZ@9wAA3pQU#DJe>7=sgnN
zkL5CnMdho~G0xcMngs>D02u*z;S8HTY`1Oy-lXZ@V(3BqqCPNPW@QS)39$_@FIY!8
zqgvBW7;^Rt6&K}VQc?mMi4c6SuE;{qAipof+wZ8h1Eev4LKi3nfj_t7f69(gwLjQp
zf&2#wN}yL~Zcgj|_hUuy`Q`x2{A&$5pceTHTt^Uo`u`^@;5Q#YQ1*e|-(JAq!a-Oe
zx!@7F|7>jbKZytfs4^(uLo5js;wOygR5Uf+LDV#``VEu`7g2$4?)SI!->ZF}>Vl9s
zRfkNyWY+a^E3~W2=n5Yn+jFz$tAAh^_)%7z^X@61g9v7j6#mAe93VSw=2`=vSA&r9
z#OuJP{5Jvn3m$T5%swa61t6Y;$92=y$cT;H46LJUx`}@X;|K_AFP8|3qivGkIhAHu
zw*c#Ae~)BUfKbOPusZ#=n029Lxdp7P?%as0$aD@*32<|ZfnbPB7_flU+Q481hD{(z
z=*N$4GCp^Usl8iz^*4WS&!zL<aCCqbv{biMY8-9RGQE2#qO0IC@z1LOq<}h`MMJvR
z0&VTxlO?ukq+n^#ZF4rhLqPNss!lA?;*5%knH-;lkF?53N`3$tN`D`Nw(yshcJ&P{
z{XKnFQ?*WqI?*m{mOn3m^Di1Ty6put@aY25B@!SU0J){T_wHCO$ez9dwoQ=VnN!?R
zpQ{9Ny)5tvj>I!$SKB+Xz+N6j9h!mui9uFU65vLDdJI1W(=<#>46Ql~`2b)MWaeZA
zQ5a6%r{X#~rND4si?PK#&qD|W;u#Hf^|GJ2PRFl<f#u~D@E`8X^kb6DDh7szu9c=F
zO%r&X+(C}lVeRdDz|{+=eUk--@&UT77qFJ|gK<+`k%zZGOOmwgo|yjx9t#oS&UbtQ
zd(*A_AVhp%Mh3`TW8O!DJ;2b`w0{UZe}=;gB4h&KF4#QZT+q<fjr+SneM7B8mavn|
z&+rp6zZBb@H8~+AB>WLQS2V>K{SvsWRZgDaKf}f$>5NU|avSQ(UN6K6W@Bf^B;(fj
z@S!JG1>_8avur3ab9|glgyRMi6iO|d#*+b#xYP<Md4hhAv9Pe1v|CeCqF5bPBLInl
z3^*>Cn8N$c_jpf6=kgpkoIwj&y=;N5QnIg48r%A}%^4*6o&dE?cKS;uDk^F7{@9YH
ziOHhjMDCfM9=&ZKpns*$)&Y#*sztdRK6@eHT|r^_B?WcxYW8$4y5wYQlAWB@@%D=~
zxM5XtL#(%^%@$k9`O{j<{YMW#)WeSug4F0_+2FoE4~!t~BMpB5BLKU7VRft3L1awI
zV6*}-J0{IFNk#ootOG=Pr&EhE-6qKHSmZ8P{9@A57Ms-T!1q$ssnRF(syk1i^~w5h
zKEONsC<A;sIIn*D_ANR#Hgoyif?KV{Oh_M?ab2HpOOf<}G?qi(c0FqbjHgeBL6ltO
zLrEE_-5HPko=>B)yE}yQjZXV_x6t!Ffh|~-7Kl05Y4sF|lx}NHE`V>EwYeVl!B$do
zO|<%WX_f#n8l09dmpWDeVc6PQj*zPDrO%I(uM>x7B@)1_QkipXejSfL1x&{Jj<~{T
zG9a^O;yDqK%S{(pzyEtlzv}Vz7yb;0AY)gRr&N85iup;`*8n$<MLiVs_3J2fGe5pR
z&bAy8+Vk9BA(daiaQy)&)}(1<<w6TUX%eqv_yb)XOc0HfqYFRsd4G9<qAC0(DZG4b
zeZ6KHQ$vHmovCN|>C^CR%*W)@4$gh|394$f;CL2R`*WJP)0_v7Nr%_z$`f$2z%m#0
zB1$|gv4`keB|1P#fN)4d=rCY~NJ~lrIA5v$!&-lF)sn)#qO-C3NRm#kAnC~NEMvnz
zmy(YC37rcpk=!kIn3$N8<KwgoQ>P_OpOTwXOXa!q&bDFzUDE-CC(nduWGvT#IVh?K
z=wQjnICfWpFp%frqymeT*5@Fn#0=r#Lq04l!^fgDUO<YsE|*tcZnrUX3xaNJ7aIYx
z$D(h78(?K2-xa`wzXiZ0wm0o^1>qu*h#=aR=-IPs_elfb3<itD9*h^(a=&?ODgeAp
z1aJaSKCNN^S&VSP(AlmBwLCtb$4>wzoz?)E?BzI`FM#hk%N?k6yuJCG-d2D5_3H%~
zpinZB{<+3z$p~vZfOg3aS(y!;1K<oXcUYs>{Z(j_ToOCuMm8vvTblX92)QQ~K=9rv
z90uIBFo5(1hQJeo<HeTq%=j#&tS{W$4M1wQ^WpaDth}P)BM2V{OT4Wz98Q4E1`=}J
zI)Hir3oELXeMadM-FsEDN|$}Un_t^x`1qdZd!4Tzasd-bNC-e*3xh@0!J!WzOaV#7
zEE@T=g#7jEG(Ha@C8PlCW861So`$2NVPHMS0l`UwJw5eyhlHJST0ycS^Tn~%(I;?L
zJo9)!4go<|_@vJ}{#>M>7y!$><nw?G4)raxdZiT=d4S%~db-{65DW!mG4%syIxx=R
zf-rB;=LhG{13chhcf0-Z9<ZF3+WA53C;_j{Z0)Xx2V{SsX&2C(jk*qmz=5qqt1YI5
z{0qRxJMD~|ZH}rKLKUu$x`(Ih#WgiG393>#tUsZWS2|37VbF5n=3;v@7AKy@W*!n3
zcm7?Bp2id?B=9+%KLf5D=;(kd)pL93cGNI$2j)_*Jr_GWn+V`AKsY^=*kbl`ryKO5
z%noVlX<39cFA`X(z3z5+ZEj9Nlbow<ry7O4i2go<bi)4{uW9<&fxv3x*VYeurHClo
z*<$7#qPqS0Jgf_Vg~1o<=^2QQiKN|V{~wF>8gc5+%pK^AgVy*nTK<k-zlCHBl$26%
zWECnxC2`HGCVxMKoc~28$tkkzK?UEKZ#oqcf)6U<U0bfytsijp`;O_AAt5YMwvz<B
zoLkaUVjQWGhy$r>pTB%DHa4ZFr9G-^5+Xopc|x&5<I^bA)lFZUYn(>}tQM7BN55pc
z-5@gDs%Aji`0vX%ZRsH<F47~g)&^mF_p>WXAquvG8xz#s34I+U2=5g&^UsgR#>YXY
zTgeMv*FVf8DWjmG{ARzZ^xrqQqxs!{Xrfs$+uCeL@O>#NE*?rGkfU=euEuc|npmC8
zYO5qJjyz|%-|BBtL;o{X1{`fIwtO`6xqX(8BJ{ILwr8|H%sTH(to+KMZ`L7~2rV-=
z=xDV_&~n)tv%C)Di}ru#eG{TSbkD+G^@gPh*k9ilO>sI~8Jk<1sx0bn9xxlfGrgLU
zl$AB`Mn#gX4g<UPI@5fmb)H*_d&tX)0<E;#7iH$Jz8t@_ewvsCXbR$jv5Z>AmK)PW
z=YqMP%wV(+{#%y3>vT!%5PZ`gAq9d?OUi=jP`tzCSOR~GN3-W;;eETlF=v)mBIrK_
z{$NPu^XZ_^fEads&jGZcCKnq%PrLA%&`A&-2U3^^iQ2pB*8?1>;ZB?FK$nBzyg$?C
z-HDszu4eV>H@H@-&ZgHnjn6CD#~C6$Uo_m_uU>k(KeaIyFkWRUFC#C#2QwYXQ%Fl#
zG@9D;x<y7ezEg$6;eaS&KqsN6H&QUZu|AOMyfPc`I8;)Xn>WzptCRpf`oF~js-p4l
zVmQWnCAS11U{TKZ!55kx?qrdqrKN#M!oPm!5B;5;NJqoVOZ}UheAp?m-z}qtPCVk$
z`|Hx`Yl~NBc2_od+`>p$g{6bWD?^f#lXG&A%F4>p?g4RsV<@46J~|>ov8b@`x@Ui2
z=1H{i&O%Mi`~LNl(eIhgO=s4GoaRoe)4fiXYH!;_07OGb2=O=%MAu(^@9y_UKIJU!
zZMZHAfok6)Ox5k3ER<SXo-t{817w4S#>~HkemfZg2$lH!BIUzE)4APrxsX+3hl5=?
zK%<03jo(}9KSD-QNPL%-;Wf_fhzF)Y<pE%|ACBh^e=HH60tDz-bleUnqDju$`G&J6
zGZXgr9e|FP3=WX%gDJfN;~F4pkbp0<`kLzm;`Hm+O2QGh<5@H4?1NvUtgO1TSauE)
z-9g)ZM>s6)ZB46nl=p35GPh$Y$q(oT7Q;f`ur4m6rpaP{cUSLt+r`zW<@^P$Gv*+;
zvBZ)BIOCh3O$k-&;})32Y@gHuQ@*#}25yqu<|c92lJVL&07nmo&)!W=d;7~R{C7qa
zonFdgji*WA+nvoe-v+66M>Y%a=>jMSB~~leoJ!Y^0ykZ*r+g~U9Jp1)<un;JD__5R
z{fPnnX?Q%JDPoCa-VmS5{=zVBtJCqc&yt;$l~p7yo9(*UT>9N?4UtSTzcJY@3TDw%
zI&;Yos2I`fY>-Nx41QW(@SJF{+y~$3;ZOIY==*zPc(^>hB*`uhM61@5U1f~(^YTyp
zL{{79)*FcaUvwKGF(md^0}T_Swc2=z>JSLJ6Bs`T8;*V((L2F0hNiUX!ME6n%%0R)
z!45k*q5poBf|P>oh%cibJa_<y6~~%K9tCeGSkE-4?hb)Q2)AWwSeWx7f6FGD6L{Fs
z>(-v|Gz<<5e0*zLo1NWtLf}}CUE82>zL)HqrN%H$3TxVg!@VyywX?qHM}84ASH`x>
zFH&b}eFqWtzP}^yZ^V`5R{Z=N8{5D{tw{26o|`q5zm*;or)b?hqgY^QN5X1RUtiw^
z78}}^dU&a7o*kcZ*aARK>8RU9UyNm*T#~h3`eKzt-7y~HIQR_T@)YFeWICOn9w%|R
zi9h39{2H!+iix&7$P8F+Z{B<q6|F{bIYo1-ww!A$FOPVgp^`VuVPm9F(GT>&RB{O&
zR7~Kw0}V?7Y*6<qldv@_*BFN=9QrBe-7$0UxTU7*0Q#7|gLL0P<cbbY8!5AAc}>mQ
zUJHuz?gG@#|0@Pj9f%#pNyA)|W4m$8ixcZJ?>09sFx-iM4)Wg(f5@MlT<O{9(9_Ud
zln~`vd}+Gooz4Dz@(RpjdU#9gmIZo8pKm1>5v5b4Z@wrlTF<!z1d0`FSAF`D&}K(l
zf*opRVK6{Yp@ld5dyCc~;}0WcrRAV<UJs!?vEMqGv6_8BfOC2kx?MQAZSnK%*n05l
zzf1ok)ZaXUoF2&`v~tEp)_55<$U!@ZSZ1A%eaZB(SvYSqGBWZZ$_WXFRYXWgNQ;+9
zqxAmCFXN)vLE4FQ`kO2XjQ!~h28{jfZCitnQJf@=-xczHTAklCu!7}Lie!&;{|h>i
z90{P|rKXZ$udbQOrh$wIPtSJ&OvZ0+hP1D{y1Vyb4dVOc5|}A(&96ZCC5@ThHAwU*
z(`X6d0i`|YgI7X&KOx>;zn!16Am#UbXR{;e{Faq<e2{2LSpu{y6WOf2_HMelt8(MG
zc!N~Uy1~dz`y(vhfB7e3gWERaV1NVGReo6+r}+`OuCA_%3f7h6q2H9plmkCv;_<;u
z(cfOc@&bae=`}#xsH>{JE!F6Rt?(hysF!}s!(Kn^oU^J2m<spR|A(-*j;gYazD4mv
zK#?#&1q4(?0R;r4OF%%uO^38}cee!y2#9oUklJ*2N_Tg6cQ<F@cfQ}bcic0^eg9%m
zd+#@%XRSHsnzPaK`b@*%$Pg6CdU}DIPt3wO1+N<p7+Yl(&d{q>s^3VUJvms9SqBd$
z&Q~TCnhWFTCpJ<hb3na`F8Bs|cB<`^Cp|OH=1=^||C7>tVM{3K3N-0=X;sC{Z__@b
zyhrIGpsX^cXUN8)|AwA|qGol~h*(nQjTJnzal-iWsfs~Q^8sB30{D3dyS~f>5BG@e
zs?Bt*KK7eIgu~1*h7I~(7)1v2QuXS|eFduX1nD+LOvCX}|FxHluVU_h(ZE1QKiirS
z2Fmt)v8ks6Ss{^`m9;rdA$44(W}-VFp;GQ(Wz`CfJl#x;_H(QH=|$h{7Q{%yIaua1
z?@3_F%F1$hEQ~QqkCq-p1HlNM9xg^*WlLu#_(LMk<83q7jXVkp?$+3|NY7-F=f9fx
zCcOESe__f9%Q%&o`A3D*zIJn4&k993ul@3D&DfiFqoo#9uhly`MhXq3pN!oE2fiZO
zr0sj)L71KTx~0;g&3&GBq|mqrDq}J*BARZWMlUBnvl(fGm9UALIyP2)4_pIM^DrWK
zj5WOFNa>Y}Wa8!r7R<0PJiuD3=f$8OK|dP@3o!cZ)~qJ0n?D_SuTc^N@)?bn%_QtR
zC!!-UOzqZDmuP1Fc3ulnwvK1R35bYbsMzTkCd|#9MTwfdWMNh-j{{_1e;xH=-?D0;
zv)eKy6Ak_a*B%;Oj=)d~2%tM0>~Bp8-cNfZAS|2wyLvo<|IwGoNM-+9J>A{M_z%cP
zNJer5bLZQZrpqindkRsS6{Z(cKs5qEblfPn0;Rsj#uar1B?Xhwtng$uj_U&h1GMMg
zdmzPitjPXkeJvF_2jb<6%<8Iff*MX)aFU!M2Peh8+Y7%H6R<Ot6y7mVFy$V;3?mAo
z^o<A)Z#MhKd-U74Ox#SH)j?m@KZ^NY(WsuGikzJ7lLOULH-erlc7mu8UI#P7gK_kO
zb#B0zw~MkV!04!!W%*A84<h$a%RA1RoXO#^fV6bL#n3CrSr5<E2Y*-@v@!sj`H+lk
z3^_i0Np%Pq4#7cDX{F=&sdm1Btg-P*k8NC@Lf}4b7`I_~knC8EurCCA9u00uH~5iJ
zNnt^=_w$ToOD;vbWxlM`&VaBqYFT{dOsl4$fy9oyEuw?bkOcr!IHo>-LVryq>D5($
zNTm=K2YkRYz40|j|2QfgaxLn9F$$G||JfV6Z#_F6psR!X!YJ++&cWU54)mw{_x;@q
zaBWscMU!%N7S1jnWWL39Lv~fFk;4cwmLE*){t529&Kt$T3OT>+<tx1`Nmid&H%o1!
z0r9swSL3=vT_d_M;6rSlQ3E-rkgwcVC@$_Ekp8{vot=xz6}J~w{O1t1nfdOTBm=|v
z@<2XHV8hw*z^MO60J-D`$R!7A>O=kN`yYng^+}J0XyLrgO>IRR3kGpeT~WyU*bXt>
z_+%U<&JF7fal*a%sI}Q$jiFy|US8NZ3)Cz_1S_4$prh!i8uv(cM|CL0SB0gaWxl0%
zhgpBMYD9T{UMKH9gxErvVY@zRsI3ofQEyhNc@7FyM*6kiSJs-og*-|nR=;|m2YNog
zfB(k9BQsxW&Igjt%PU)rq@76xY)FZFGlh>DgAr<mX7Nc$xws*xM}t;h`Ei+@v6#^v
zRR=%+xCHoKe~<B(L{n!roR_&Jq&2&EUAH~*;CRz~A)`E3hyEoqGxf=CP&>Qj&USTm
zwSYiPf96E18GRYksKZSwzVoTLXI94|p0Cf2S$5{z<I%Lcrsrht-@JJU`RB1U4KE{`
z|LF@uf<+`a-78uy&<>X`d`epI$X%erBjONwFJo1k^$6$SDS^CvAt~npjJHW#%dwrf
z(riw1e6=T{a9u)!f2z7wVTaoG;|OlDLM~?1XUG+xdHGUrF2$PQ`KEheb^&zBaYrE4
z=uMU$Dbn#-<J@N}H}m!OR?D%P1EK`Xd0Rrq7Q1S|QseFmWg%B@5>^w~i6XZj76|%5
z2d&?8bbQ>SA>l*;$K%H$M}a?nyf7Z8uYmlHM`u_#BYE~DHO35iwi95tcAn7o-NJ*Y
zC#h_XXE11Ll$2t;+%W`-IRFSAK7MQgskH6wnT`j`f6RIwaF)6Qq^qGB4$1P6m8Gma
z&SE0de|EVo!1R=S+6U1toV^6u7(!@Tb&K-t7SE3Nl=6b~oE`U9m)CYY3zXi!e?c3o
z*~21^<kmg6%l_OB26g6`j+WTgox(I)8z25YOR=9|oW0s>`@0e=J-u4C&RKoBRd+^;
zq8nWny$WOHp)vKT!`|xoZkTiu9k*VVxu&qbzJ89M9OX=d?{K!Isb+)RN`G36<-EE8
zd)xc*VoTHGAH{G_%ch_@hgQ34PMU{0g@zVKPe#LLlnT~iz;`t`ol{RpF8J<3N7P5t
z@}=HnXYe|IB&O}b4MrO(r8cTLda8oD3^uKexw`ZcUa`r^*-k@`3zA!)HRiJ0)N32|
z35@Pcyx&>bVYsfzbHCm4Lj=bl>jOq3D`w_=h#w;3E^%#-bennhzNv#ArPkrF5{#?;
z>;;0D(`dLzXC~439=%Ge-?2l<<pzDzqXeubkI&2RA=n>1QWY0BU5^YSkm^OLTYa2p
zhyK)dc~lyp<aYr=H}18n7ad%YqzZ_RmaH!;v01WPJ#6wLcOLW;y+?oZ-W{b9BSJx@
z-SiJRc041kSfw%t8@xvSfp^S0w^@z!M7unrqfLnJ&~K6O$JXa)-#A!h?~IA15TwCf
z9@$+P@SYkcX0nsG;6A}i8_7CankiM`uzfEo%Ih@CW~@q!X#4XO%WA#%^U+Klra9Sr
z>G&K>=O26}mzVLO%>PZ@TjKuXAsGM3SV>uZjuPXehM;k(<YavqZ(VI85bVsih3%Um
z`{JOvqeJ}NyM&m}$q&HN8BCW>Eoa|}i6yE6WBOiD;&o@~M$C?`_y>i)1ZG)@pY)7q
zgka;B)#gp`XI%ErI7_t|d45Dli15)3X_LHkJr$83VZWrMfc6_-;GZHuRMxsBQw@W~
ztjLdtu>8la3GiLdJd?j`{JS>(NkN^$XZj}k$uli<Z6bt+8nx8<u34c0=Kep$qH|d1
zY9S2Cyk=lnCqeul*LRsv&F|NK@jTGvCdUFj!`MTZZ6a(UUK}mmhWMkC!GYU7xctwW
z2obDaRM93`ZV4D*F}Vpp8j&z`>&E4e3z73ov@78QU<Bir$;;8Ux@&LsCvGa{KL)?p
za)dkY*v-{nr~eon<7I!Q_YMj9@Yhw`^#znsn}z<res%Zvr|3nHZgxm9Wyv#{**O%E
zxW*pbdBu2Xz4lP+Ql>Rg-`cv{6vqh?l|VoHTm|??_6V<SvXsAc(WlMV6mejRmnqGZ
zmBdEDvPgMCKnN@A&OEB(@728gA0R|});>9&r_ljlLc9|QQa1-gAX+gn@Rz^8&ebHw
z#3m60LQ_Ql&Th!9Lq_;C2}wyIgD;<*>hn|%2HoBXJCMu{_k0(3{cr1b4IjA2P21+i
zM$|ye7F1C~elP;HI>ZTht^wlC4F`J7T@LG&oqAg1aNduzsI6Cq`?4*gCDI|PP*+k@
zQN^f!_4x7NrQV@!66|8NGT|0<0=J-=w|g#_>AsK9XXbT2=P!?pRPDa&c-)%2N-eW2
z@^^_jr7)AcHMs#`8-rD273L)$V{p%S*jl0Jqe%mvaTv0Sw~bs!L)mi9ixP*GE|%$H
z%yD130s1`-YlDubq}ulxjq)-w+P$>BLz^X|wW->EV_3d;u`JPWPYos#+xJ#@ccB&n
zl02_YFRbOhIlwGHAH{wqI!u>P`@2sKKAJ>3<dnRh{qfwWfb(Ch<VgRt=kzk^6f7u>
z3ZbP@<GpC`LrPUKI1Ns2_>$ZrleGD;8PJ@Ilfb~ps5Rg{ZrJ~FdCc}_YN}F$?^;D^
z9Y|nY*krH#Dak?+XO<3l-T#X$e!~WHzSum+j?cj3izB)C$H1Hm;0)8TaKhE=`#)pj
zh*@p!vuo&i_>KX+9ugLm@7zE}gJf~u2kDK@dt{niK8<s0bGs_+LC|=D5`&o8BD6fp
z*nYl6Oj=RM0rrVkwvf0f1CmW{t-(cmOPyE7!?SxNAvMBcP;xPW>!jVs3l?L=U~WEc
zm8gRa?qtnzC$W5A=G2fb#}6M4`;ANWF!Uv{aF>Bmv1PUOJGv1J(Mp{yb#unh(~&+{
z1@yyuwo?^>z$Ko8?jKYOrFQ3mkZac<#x3MWc0RsS<3mzNHd+ehh1GoPk>P+T<O8yx
zOquk%*`)8x+`i{thy#>Zq8Kt)^CVF^sa?+Mj=7wOc*yw7^h|j<FCv0Lw<XbfmB~;X
z$?kg8oIg3)3HJuA3Zt5!La{&+*_A7wds7jmbbYDGq`Wp})wTMsj#m|W2H$n5_4F6~
zIW&)Jk1n;_TlNWKN-`PDs;mCZGWQhtgpq<CIfryedxd&urom5Va$)d*Q|d#gIO*fZ
z8aP$F4;g8OeH=?Q0D6};2RI%Wk6y|AloWseio}wV{2&atV>VA>aN#1##JR_&rjk(J
z=snwAvgCN@aym<G4Qv}*rGuuCazF|CKVNSL{DM3e>y2?Yp8gc=;W)>8`=b#OC43Eu
z0+{$QJF~?*cOkqvShr&J)!G^{CI-et<;73hGTRIAQ`dsZ=l|8CL(dM7gUjA<!Vd`f
ztsk$vXw0Eo_{7FY<E7dQD-Vao?o|=vdOuP@|F&wumJF53WYuy9{B^~f%MiZ{x;;L_
zsF09`yNQX3T@7%pY##ZMa)RUWo=)2XprEPcKI9k?YBTgCiQ(Yk5wRO^wH4ORP0>R3
z6$`?6{IrfY%M)~GVn}vj(mYj#A%$0@4oQCC+a6<VVj^b<sq#?6pkv}Zr}}s(@5PV3
zd<}R8&!dZJ43BU14VLZXK)-?5a=uMTM&iRqP0gUlUyM$(MIr5(!Z_qc#>T~t8=paM
z#;|Fb*UF(6VVii*`X!ocX@u?iM42=4w-31}>$L=uyZ|jtyzpz<l<Q>CuyR#xNM{f~
zpr&rZ`6MAJBcpL{uy0cUOpVDp8R>AL^ZIUgZPC+maU{zSFmy1u{Pp<4^yya%ENo_9
za$aVKUNe~WDzKNt#ofbQk!KiP#)Pt9Z~ItJU9vRNGE)xGHeN9`=7@j1w}K$w7%!gy
zC0b5KgY17;08ln#r3avyQYm(VS;GCLp$g5yJI};Mn2oA<>1d~Zsz;V!21?jDxJdjA
zK{7aFU!cinsN!G0UhaBOa@qRoljToN)jWf(JbtdyY|27_Q)xM7Ti6d7oc#^t0%hZ+
zBBG*_G}-z)EW}YNL-5ct=b1X3v^#szhHgkoNKjooCFXF#F}}0Bxwn^u=EhG+d^mQJ
z*>Ie9DJ5DNOFhX+xUm%XwS4Tm<P49?>Dv|l=PN*FWXKFr9fxu0bCu2lj5-^yh;O>G
zsMjM5YDEgLx4qBneg%yRON7;hZD2B1FYYat68Y6VHnf;Xh$$~~t^nWYph0;=dWr(A
zX2CMUYj%);9IkW_LgobM=YwQbY!7UGh=-)#n{C%louj)$4K3j$kr~Y#HRx)K4ehc9
z=MNm*MQ(;<4gBrJ@%)`M_MJPoZ$m*12?OHcY`)kk$`jr14lkQ&b$)>wz_q>oTFxaP
zc-eNnH#S*QbDtn;p*-mx?d=GYpM9ypjD!OfDkL@(;91lCnA`q1vQQ?F+39eyO~H-q
z%%V~j%|9@($ZE>U-%~=U#%7bH3vgYXHq|PUs`_DzrC*ukva+dJE7~S<EyKe(_DsT%
z10>L`@gyl8&;T9Y{xtpF(<SG`>B|PtM&gUW23#Qx-b=}OPZF-GmgYZb1Pkj^M>|VG
z`ajLlULOVdo4kxnsW7*yogch^1xp5PcoOZVoDT{6sOx6u&{2N2IcO2(goNB-P~V}b
z(zGwd-d-qEHJy0pj$*#Sqg<K&^RL1{DM9VRY&7`k3pz{t+qZ|qF+jYx!K3Q^L(f>d
z*t}+$F%h)jPeIQl1MZ?vFB%l{-&Y`LgLcH#ADJd|*cj;=DSzcK7+~nQxNG*^J0y$g
zMTO_AmNvu$?eGxahrDD~;}0{F9~%O{sNfVMmFU3&9UcYKJF{H7A%#+T6=kxRXjHr;
zsU^h3eayY7OoX<Ro7W2{=+=4HK2Xe{q47~uoTE|Qf-OzG57gM8#9SY9986QVb3B-)
zAK>8^ZRdPgq;WL;SRhCCIyS~J3Qu1@8DuG!Ee$<ureTQK>I-NlLxO_~w0j0hZUggi
zbVL|UO?eF@Y>n;h!M~<u{uH@hsDH4#dg65FvS(KOZoUv27@5{$7M;4idgOgONyk9r
z{Ugzi=&^aAD}q5T2y-RU4HoNTj|m}bqTFCkDsg(SE~XNX<V$DpP_dy}p-GgFVgIBW
zwR^6rMpKj82KEnMUohHxVgALM)_{|}{6m3OECeLi*h`4nI5-G_qzA?k4zjLX6@AF?
z29md_sHTuF81c}k@N*UG$KNu%j=6N5%t|pfNkpOSR`$o{0n9Y1;#2nkZo4g9NYFh^
zQC3!7-ecMi{PF=J-G0yY{P{>tO;61X_Xg|$s#>AzV;q%EAPw?1EX;@+{1wez>Tu#T
zT%jornt_qRbzj5?m-BvP^225XEW-Eb6v=MiJ|10~8$I$4kd_)$W$BlrqccTE|B8x#
zT6nkK^N#M~%+ZYywQ>iQ>0Xd#l~}FYtsNtX-GBRlCWM{Ekc3c0!8%t|z`Lth+N1mg
zPx9uS2M=<b=7wR9(YHv|9Q>f<{>{C(q$JyKJ7LdZX1gEmTj10b54xWY79gGz5e*4?
zhq!L--N43M;{7-X3QurMpZJ!8)68}#+Br{!<`kmXm*VTQ=4i8_JPW#Vs!J;;Ip`W-
zW#|brBV9+_>F*D=VyHBy@VJdd#%t3H6%Gk!fnuSK+vm?N_KCotivomUM-D2D^3_UN
zG9#ljz(-_cQ}0_updJ!X#wR3@^H?~6Gp1sA_*X3am|Ta%FHjK;7uuer^pPkQtW(j_
z_T?KccuowruZ|=o`E?}q8*@q*<e02AHwDy7YQ4VY_tm*(uH|k=bZ$)T^^6Y{dPCS-
zJ`n|U%6Z_R5U^(`PrSIoP&wL6=nY~)oz_s%B^=tSE{YSVsFTa=a})DU1>Aiy5)=1#
zo5tSVsjqO|5F}@2W`;_wmFG(~+pq}M{+e>WgEJ5}Ai)fOrJrZ^2SN%a57bu-W5}>B
zlfGc0pz>JcX%#uBlob$&sQ(<fg>Lfm|8tc&8OAv^pc$*Hr72&QgZ}JScL$4D<gZ^e
z&z=F{As5fZ!0-;%5@Uf^&z?Qw<wf$i*cw2h0CjS*h?iHZsVwLyMZ6`AX0i%*vJN6%
z5)OTWE<NwKuJHD$<kiEA@TYq)v-rAbbGZFsoIAdTi;QQF`N8IF2ituUCh|tMbL~OH
zKlnv<M;w_XgdFD>Ftq^IlvTX(5KuB7a(HC*b&9L<U2LtzWk|N|me6}qz&f@^dZ48u
z6Y(SgJ9Xa+%_G)_O1M|iCh<Qzz!b$M36$KIjSF^9C#v0X)Ce-&HzZ$B>O9~*O}mSB
z7y-=e@evjbBD{RB&MrKa*(Q1WmbP{sG30$aaNwX36J5&pKOt*HIX+Mpus5Ss@xI{Z
z9$T7QDKsGifybOUYjf<+r*8uiJbPZ;KU|2#gcFU1CUal#J}bpW?pUB2f!|AzaSR6k
z0=^p}C5g}uJ&G%LynKDtX>bvdI$eXYkI*kz;Esg@-larlMyzDN$}`ziIdx8|F{-sN
z3CM7{hK-lrYxPwyH-?B|(^LS8LO2d@k&fh7*e|&FpGc#jd4bE*r1i?m5`+$X_rjj%
zcf7Qu_Ry6uyJjk+_hW|K0}vKCHosEMWM!u)#n<^f1_TF8v9-}A)#{98cb{KLB*8g2
zvO2}rpGMv~jga_y*|ea!JaDv;oc{U|{{hb*`15=knkuWf`0LnNM^ZOMP#`4z_uv<=
zVusWou*{u-bpuQ+yZXDqB{8--FK_o#)k7OJ>UZy$^HX|5&OncNx*iqc?|<b)QcNy*
z00I8C(cF%b9raSe!V$DvyT>22d?APj!h0YH7iQfE@7<9;V$l{r=Z2l?Z*v1Ld42`-
zK3qj>rI1SK?dgeuiRtF%4x>Bw2nm}STXzreWhCXGL-q6%-P}Ji0z-cBke*{v2!kxw
zb#b(S(Te*QSI?Zzmd=2x93ECQlB>oG`xPz{>j{2U07tSH7t8z#3X1ymON11Pg4H5m
zZvQs0@Y1IwSMQp=F^_J(Bh}J7*xMV*19WkTW0{|?Z-1wRE*46%=BEYrGWb5iT7RF!
z?B(d&>iz=Nt?Tpi^MXQxh6X9p*KXfK#?%`}c#-~k><2Ji;4jd@Zuw~dPMVq7f_4ho
z9oyiE_g7f^iC5|7LTgvR6w93SFq1?x6Al_h6$=|Yt4m{5ul>$Ysi|W{{!zbwKQ=`Z
zc@4o!r|ADMbu$GL5ZcXwMhG-|+4SeS@xpK3fS~_FZ!#@4H4*V`IbXq#6;2U&<=8j6
zs&Gy%kMSPVRbb+giV_KX);MkLAsIDY>I)5|1)oqpLvp(&*d6(6>gHHl*pWx66;~Xb
zN@#s*O-lo}T@^>X>`ZB0x^4H^Z7|tl<bCv#YIgi<Lzy2?6Q%oPbQg=-_{fkD+r>rd
zzZcJiy@XCx;-@%0OZDNDI@<j!m=B6al>}i9aL^AHZCTI&G&OBwUc<$8-5Z{R%j52T
z3~=)4j1*gS1zZa|H*nDfiNBUsd~p!l;}*-7cMd|BrkCk4nG0(>VX6>X_fbv8Vt@8C
zJJYjVXVKI@<}3SWFtJXrRvb9U`kd(m5=W-z=uF3Uj&28l_-%9Z?fI4QqLR7!S#UqY
z@NmyJ7z$L~<voCa$OCe&*a{hFG%0ojws&@5;6bs%U<TTwGJXbg287S@9P;f@O;6_B
z3ahDih_tWtu=^$7^@$Ny7S#%emFc;aT^h%?B`Ig=6c@Vg>e-g@qK0{BIH!(RZM?m5
zeo0-sa~JFw5$QC}?-2;c{~gVAV0aQ^z0$uAwf1DqV3B+1;Kf%$IG^=Ct6uMEnV7uO
z+ss$`xeJ1PP>XuB2%nsgD}|^kUN>B3urW8AU@vsHFWXTpH0RWQu&X*vMNOT|kZm6D
z^v7`if&}ERy{G)?AIy@W|Auro<9C|V-f=p_r84lUgS$EdgE_dUoSoMBxkAQ<71hNX
z8V;`KRBUf#W&aNMe8RRk*gQ44FKJJ8GZv$&?Zw4INMv$w;HYr90%~Ol&AWZ?-o<HM
zNXAf#c@180{I_q$UmZH4E3I7SV34l7XmFsV1#U~QGB7Iqj?#m*92&SANe7^*f?gCt
zSd}LnKziiNIvKM>Mdjpd;RRZeygUN*&4cazBd7h@E91hdCF<G=9tdtP$F1%BujT29
z?j@n2AK+n&;Du+5l*eWnBzJ;>7~oN4k3Lamy|HAe3$Y^Lh2M%Fdofm~s4@|RR0GjJ
z?epi-@lJ<7&w<+Ay;DaHvtYAyiX}Q@%XPik4rB9>Ys%%iMMF(pH=e;mq7}*QTF3kF
zyUPeMOO`%(qMO<+ThH{D>x#8^OG)MBn2<#?CHdT&TlbArEt^I*j-Lr5d0gMk(MPH1
z5kXvMhf0~qP-<D(Xx5)InIcD;zbogVCFFd?NW_5)l<h`2v?X9kM)RDSMPCEx);8WB
zIXO~eCHdT3Tq@&b`MHKwJonwWY%O#+7hfehm&)NBoCktN546cSb5>`;|KM>5`Uk#P
z(ekYSeQ(5AU!mc(n%|W}RxnT7HQ)LYMu{i%Y;#9PJOQuaDV`s){5}VY-kO}(+P8gN
zKJ!CpM2M*F-s+f2=6IR&+BA!6yNn1oSj>a~&=!bacN5IuW#r^={J#JG4g*K(bL8f8
z;fN%^jptIT@wDo4kEBC?hBn$b9k0rF)EoR6T?*`N4J~i1P)DbU-_<?(RZL*E%4wG-
zDJP)FXLAUN<;u!q_u8Yx)ECn^@u6cM+Cv}^qGIpnkc|+=sy_y$$Z(#482aj{WtQ>E
zJjjhCd#AU?Q^8vL?@}CCJ>2|d#H@b9J}&`<x=)LSenG~^^HdJJenJ1(jeAVy?Rj=_
zegP@4rPgbWHn2H%dk=WiJq=+?zT0*oZGV}uR1Tybct_Upq9r^kQ$Ra4937o71!EWl
zE4Zku%e55M5<h_Gyhu#cgt?+lb9*ynW_Nw6;HG?1OZ^~>)zK?2FYpzG;KF87yK?-M
z@$wxDBO~#PTvVyb$X)r2v1ug19ESbTMY3fm5-ILxbWqdK0R}W+E~6+foLX!5`wg?<
z{q@n3;G;)*gS%oY8d@lFvReuRzggDYsD5Ron=;w-N;FI9{A|$w4-2rTjjwRLfZmh>
zTPe8|u>!I6g-3yG{>y!Rhq~&<3I~HtmOiA!Qv07LL@!sO9B@L~T)#<ON^~j0jZm<|
z3gBhIN!2}Q$2qOJ+TTcpA0-O+2ioS1&1L8&mE<b|*;)gV#H?vs!69x@@In$siYH1c
zHH(J6eLEaT3pj}2J94Wn#FmyhOfTt^hXorth<Rt68-9%~Z2=)6aV9WUUTSOf{fF22
z;#u-3;Ms_~gIo!}2?%EEDrtFZR3sP}x(G!V*awGTCn@^4MN@EHEBcFR7moF;YiWvv
z(__KGkv=4^V@iDdY(J?ZlFJcF5BMk#I}<3H>5HuCmd{&XqW$=22q3qqy5`v#sWTY%
z4K#>D9`!<0{feI9Sdn!{dx0u=4IPkkuMCuOMs4&Yb2_#N8C&)&h_&M`E5O78ul;mj
zM1;JSFZgL~9Zw==5)%?8itGW^w|7oOQPC@~8P3eBWSei*c;HN$${Y^F7}d>04OE?%
zQ|&4gnma;b(RksFYjV~rqea#rDITV27AaikqI&Tnb@)jF88x*U`C6X#Nc5F62QX8w
zE=ue=@|K7Ei@&oDlSx|xdxv4L0Rp0b@qNH_Tx$F5LIivCn&!kGP4lhmHJAq@WyT$W
zL_093q{w26bHh8P!s;J#0s;=>ett^Ix)SSFX6D|bB%xdNfu3>r4><fokVt=jD5Na(
zE-FsZ8=IQjkxbSN>t9J&HbOb{U(^_DXm0Nwm0i&hi-<{$tCPXYReahJrAn(%;oC1S
zDf#*F^>JDng4){J`V8e<1xdaN@E^n8#(w<!aRS1l8`(Cp4_BIuF-tr(7-74?`GStl
zKOmqd6)T13ug2rl{4f7=NbYER<!)WS#}%hV6MrF*_*;Yo5`Wg$g;v)ukE-?c*93wD
z2{I*oB|9e@?baKrA~KtrduQAyldD5vOuCphV>|7wM2F845))A=DNI3+czA^52R<d^
zsH^i4rY(=UrBc%C#aB2hQ2Yp{=j0UT=T}~=l-HeIuoN4e^b_=g0x&S}=jqvkp3K#Q
ze**b|UHb9<!98S^85ZVmWOnw}h|RiEg_g<DUVM^nBTTM1K7G!qBqH_e${`=2tD1a#
zioxL@j4#@79m<w&Wqb`y+2tI-=)1#{|LJJs{sUPCAtBiTeA)Edyi{hGSf65+Av%^j
zR77goIH<*w<pX1P_j_x~YS}aiV29_z+rTyaXW-4sgUNTP!R-_29;8a&+^qiA)-l5=
zz6~l@&{Dob#(ZR0fZk(vO6%&PTVjX@|ISn?UPMzUFR}WbnY!`goQ}b(p`EIL+7n#D
z{&F}~rm-k0BzT~UIhH$jlv9e#J<v<C`bsmab_?B=6>cmzTyNpx<}WU~x_|Wc_3V?7
z*F-~0`Q;z`2MU&<rJtQI9bU=`2$!bRXJPSu7L~dDi*u>6__%FDU(Y$-G{uSe6Wdo<
zpLl~*X-S#$!`~B1!+^D>QEk-(uI?p2gmx-OWmt6A*(1tjXP=ZCdUG1N%#4JPLUALb
z2hz+`uVZCjZVvoAK(%?VOG198Qe@6HO;R8oye81mTp0lTe(LMP&tJpqdL5W0?a;@G
z7T2h0nlDr2`nuK8{<2VLr^XxwhR$pAQ4;~?0BonirzjdodFc6x#_iMPxtz=th(+fV
z5+YRj&0h=z+5^n5q5r_@@b%xHn%1haeDM~B-}C!iin@H;aD1xz_ibH%{m=hnu8Zs6
z69?aYxcTp^|NZ6E;Zjtslh<$Laz69_L>tmb%U%&ywOMc3>6rPVp;wal*`bEaSL4_8
zf8D}sLR5;VOtlk#j#Mtk`wcPt@WXAIpZ~Q@C}LS_OkpXj-%beo>(tl76FqllcgYpG
zSXoUEzi*W#i8PB?|1iWS8kH9kN_^~H>2hYXQZNQiTF_gmyC4)5!vUxW4ZZ*Oc7k`=
zC!0^EWz|_#u`-bPq0+>DBU+`>>H2VvHS3O}o15VK$XAfc^*^y>25AOZL}!BFX}~ON
z*!iX{Jf(>`d7)jcy`$qE;hD2>ds_=F71c-hzn4dhL+WYP<WkoO0<(~6h4Rj`8-0of
zt$xxnKa<iPvC@mbecQO!DrmZK0GTI%5}uvx1qKAf5mi$>9vh{*iseB}LJ}U{KSdk*
zb91kEX$NE~ULx3Fe{G&+`WAo~q$%j%$v2x`t7TfR%*zGO%N%ZY^#A}$>4M0~VcZx?
z9RcId_Q>Mbb3MAP^2xC|E^9fTK8ed`j$vctF=QAICQEZt2%!JhA*Os5sdz)l^NNM%
zRmQ6POend3KnowAJJNMBedJ(o&+y&f(VN3L(GEbnaTX^yxwtgeO46an1mOS(EW{BA
z62>BAL2!RiD(et2V{T4=#t1+2`|wx8L&;mw+#aZu)6-LKNBq9DWDeW?SMYEEnE0DL
zAVAue+;(LwcjeT+2NWC7b(laFlCU4$Zg*!ax{3;>M3%*Bkx~>#zWfWNnB-)0a3_N9
z?f<;*l#)>a8RZwxXuYG_JK6(&`fIq1o}URX^4+O^{1~E<!0WZ6v2oLGX^FAOb!Q%t
zto-hs`OtPgvhu2~wvO{zIGgpd9jP%bXX!CuGvG6xK;*=G+)!6XufTQb72#`cOifJ<
z*)UEpFGOHQaQ7~x1XVa5@Iiar_L|<!O?Y`}Ni2ec2ecScQq`lQv!_Qb^EywN4Nxy5
zW5q4w;xwVhcQ{z?FP3)vpSSHHg2y)4B0epk$&AQDk~(gl)(SWflMwU_f{leIzNtI*
z@=%;;jXUmrv7fO|=-P|@JdtW>(lT1=>doyRwX_~SqP}(aZgfDvbBgBzOPESx*%%~d
z-`w3&dnIBwztEa?4@O6Q_wof5c5ev%pVc)<s^ZT6{s+s9lht*pplnZ_s7h2rlELRO
z?ATQQ>WAcFGCt<wE?0yb@f8Du&c8P?S`0Djv=kM}p>W81E+H+Rz7;diNVB~gbKPP2
z;1IohS3ov7xlfB6R4Tp9Y)5bTtL69g9UL6QY<%6_O8{mSauCwcxUB@Ua(~41^iY73
zZ((BNUcc`1{rm4aC<4ZQ7xzSuMcktcZK?>2it5RVT}$*yoo|l<pCJ3iO-~J<rjCw*
z?r!A*t?`r~Z>kSNdD^<5-~OK`_%-;0B50Qu+_aM_-0S*`m5^lo{E<_FvW9(HYR7~C
zwbff2Ai1pR!0w2Wa<9`r0AvvL`M4|hNr1LM+LXeW>p^|XNY4%~XJv6%a{RX^ZOE`N
zqML{MN6mZwl9K9ExA?28VaPznZhureJRJ~}&7KAQo(0NhNxkqKfh$0Gb1`!obXDKK
zf6r7yOCW)UO**M<&t*Y?L3pO#$HH<4M56!OwgU}?nWBZ``}C{QA@|mn<LPHIBhTc3
zy38b!wB&$>^&v+)5T?U)C8Q+h>Wcf%60_>mX3r$)wkpRYCv=rq?*u&S=x&8%;GQIL
zHoMKk&}?byEBX@|`BBEsUYDs<dScMOny7F}5&w#gRyQ`DS{yW6%3%ghOhm*B^hWV@
zP#}%u8(L4#hMi&glJOK-!W@upyYguHNzAwSH-76;$rk@}n_h{nt^JVL%*A^a>cX*a
ztwE#oH-xg{+nX(QMtI2M6GVtQ1Dg|`P`Z8lW=9DLPPcDQpHgb~y<TZ<ZT%GxK<i5Q
z&`e5NT1K`ntobH6d0eUzdm%2~jT<RxDQGd_sM-T&Sy^1(B1qNyA`bC}86u}KsFYGv
z){}V3(3D5jvN>gGi?LevO$={Z!UN=LMOj00<p0|bF6d=R%z91qq+rDIf8VfZG6^ZT
zYy`ao|7XvUJF=C$@=5K{qeo#uK}`_e_+`9nw*v0)*PR5=Q0p!Lq3P3^WyW_AAq);;
z<&90$U^B^pwwV-To0s-ty#xd8;oI&Wrhenmbw;P^+GNY%j1R6CQ_|=1fINkfA6SZB
zzk6={V3lJ(DCwRwhRr&U-BdSo;;+CxN6=uzfAfxV*_}NCw``I2og-1RiO&>^nQqkb
zVq$o0Hf!~y=lmC+#HABEbX^MUPwU0Q1@jq#)W_V{0J!<_5cXV&^0%TbfOyr_zM1C2
zL*o<P&~Tvd;Zzh73WgK$$9%EzojF5xl+wWZP<E{8hKaCWseOe@OU0W%9w7&g^H^u2
zQeWnd+e)8_Ma^+Xy>gK;j$3vah^P`*yGySmofE0y#&9PwN!RIFai@fQ1dDcBpp094
z50~Y7_dup+s~=UWy@YQHDd3wfFld|;`a#IRz{1H12OaI7%Wz9oRevc_%t<WfJX?|X
z?}^!BHh#NV9<_|Al|7hd)YzQ7a$~+t11+Zc5W|U>byyaBA`*QJNmz_W8)y1RMle}+
zUx5+IkvVT+;Kx|wQ=58p;WLN+_xXT$hC#QHQ<jASP2yUqcaPe4V`q{?ja8Ciu<;82
z=T>5MvjJHk`W39#)^E5UTX{hxW|1U@O!!gLnWgyPA6z`Vp)zfc{QQKK&Oh(>%nlp3
zK$@mpY4iCC$_Vgku$Fwu%A}6OBO3&K{-9?eM#T|dP_WKuI7d`kx?I|Wr7e>9<QQYL
z_~5%sctk%uV}y?F)zpPIAiwO9`jj}b+>EIAVAbt;UGQ`|s<+M_R{61Z)p#Sf#Ha`k
zn~mYmw64daGk<E5z^%Wx+C*h|pt~=Yzhl5OIog4xAKG2O1}yRlSH|--)zznd&8^&R
zkD#NcZ=fsHy|^W6$pne8(9uCqamCIN3iWWKw>MiQ;_fbuU}{9+TI|{-p9*QNhYU3v
zyiUik`OgOSg6_~^ZxP(I_;R@~t)5R>8c~ZvHhY}5Myc`fY|se}3pq3`#ASxPi<-(n
z4@n<=8KWkSex@k%wsgI@PwD&$(x9(fzppzig(mfn5lY7Y%yOyO=b5<LOa33ycRc8#
zhO^yZeSyqhm~KQjHjQ(~MJd01`@LDWO+}=MAJIp=Y6Pa6k*vBj#xpP(xwO<9b_3=F
z<muI_0N>j`OC4=_m)QQ{;j?F)+S7UkqYGcvvJ<=46^nItj+sRl`#|Ze+o5KE(k`r)
zDR)vp3m#EkXOb|TX}o?qXIeHM^uuLwz-qlZNIr8yM^}5KH-B}clvB3CdEoq4o8#^*
z``RgL@jg=z$JxoQgtWA_5qjL%e^`KFV{<e3@1O=o4wjcwNJk3wB`WEZRF|Xab%nQB
z^&wZmO;9jSxaj-$Yu(!9MQ<+Ij2I4ZLr?^!DEsmJMQuyVNqyT$Z-ZuvkAR0C28PE=
zG}##Ah<R|(Q2?M5!WI^zsGdFr?l&$WnJ<dlAzz?W?v>;~^J98?S8xmso=+6L+b$(9
z&uKG_Q_7}|1vc6s>mZ$Htm^G88k8!_56oxl0Ff<J_u*_NwbuqdlVz$-6j}RWt2sDC
zaX3e7xCMzWNIPZeoE3o0E=@;c>*?Z(_?U|WnAG@_pZ!A>8gpI@DFWUh(ME32EUeRW
z(Y7K$G1YG}`1H}E3cd3ma<maDrRE+bZLb7e`1rK6cDDj_SMCq2_a~qmH$ohovdVEs
z6g&G1u5EziUWtGBP#d-rLY*AOX(-}UEsy;WW%@osu3_-4ns~_5;X>ngxgdL)o44R$
z(9oD>F&fraSI;pxI_;;8g0nKU^QSNkbH~(${iI>6hKZTkczKoq{baAidg0F*mN@Dq
zl<s5oYmciR-&kn7&tetR&@uq{g7$)+uV+)oh3(55*w?VPZ=mGGN8XAjw}JEXY`MWm
zmHSyxm$*Y#_FF5f_f3fwHu5sBN_&G03xRs1a@QNKby<iOpzJ6E+?M!N)<JAsl7)r0
z>rXQ7_5G>1i$TeZJki{oTvp>T#E@LmJh$uCGGNy-Y^M7%;23s{yN!93+wnXn_Val4
zQ4cBc(AuE$%U3VTBDvMteKoo!xDrTWr*08+T$d~P^KkNV-$A)A4(ew{kCA~3`s@<q
zth>-#G6moo21{|g-ueTW1Uj#?I@_~B5uyQ>c$4_->{|#xnZb-=Z@nu)a3_&?*+8W<
z5C1wYOjzq0#t7bRjnV<{TuHvzzqdp#+d<!~haXa$n76r6Vxqg+XmQd-t>UWmk$&L~
zXbECxPE%57dMD&klR<=nZgZ>oAr)?H803&D<(r+`EPK>g9>}laWO9|Ky=YyGDPJ($
z_?GD@;IW$|Td3C`Z@92uxN$CheGaczaHA*nIR*#RJiRW?<v`yq#|h(f!T2IkcXv<n
zbJc-iegNWN6;d^wU>Ln&UxeSz(%pK>xwGsuA|!MSI+#pJ0XLhsE%Rc%qV!3B2#0uK
zj^QiTKJZ&<x|)5-&W1LpVjZlenwm4zzLN5p3L}jlJ3ozsu^WBZ)6GRaLrKFSWL|*%
z9LS36>)j)L80U=wzg=C3Clv8-)~C6SjmONukmzS3>{#kwgQ*+H;(}EkAFH}^T6YnD
zy{U;hu&by9C#J~DX6(EASM+~)T@M%KbL=4|etk3+cg?<Bk>gH1UQ&^lj^^`N41HmJ
z15}|&-w(yN$<pkO=cSxpQlXPSJMD9m2smSf9!}oAG&B3OthXJ%HIOj@t3Y|20L86a
z{!$CEn(@!Xk@n}Of_i#I0NEoV*!GutatFiewf4es>A6&)t~w|#ZRj%`;O3stL#2Xz
zroeh7cp`lnhAcn;xdmi}J&Vb(!wO3hg*mA9fXC*z=CnK51k0b(>7=2F$#8u3OlRy@
zdyf+km6`1g`<&pDy#rGO)A`Y4X-AHytrID?C>rXXJy{*fM<CLlD)AHIJ>YsTBs4#H
zt^(qHC|;k5N1NLo#CW>f6p(V{8IL3qwiOs1Ef1KM{Vu{1E45l_GxIGhBx7=5Lzl3p
z@(g|D^2C}ad8f>1&H<a)F6nHiH!WGjFJ|&)W+BgReJuLSyC!M^?@m$NwPjaZ!nqe>
z6<6IPGG+OukSAtg;rDyKc6)>lvMu-R(8R{il>5<hBF>b?Pocs?p})UlW3z`(#vb%@
zGsvNMoh%bo+G6G~^N8Rs@C0sA>>M0VpS+5+^+k7kxOx?Xo4uHwY2k(b{ODkEGJ3i<
zZ9K&(+;b<#SUisFTVqp#dIE}tR`aHt@X*7)+hSlQxbGK~z;4PSDw?bLtV8M|Qcla*
zSd5(1sQ6vfa3BIY>abo04HtzY1SM@a^H_!D1!sd0f|!*?_tamV4js<=aBo+%Jbzo_
zhi{BG_LILA6%{LxwikQ|+o5kfU*>hj6FCds2JMl=V$He2_QuWUqD=e4!8!X*N1V&E
zOFMbL_fkU|o3LkZF0uXPf@3&-k6*JM=5;-{7+zCOW`a>Bd>f){%LUcr6k}s;KId}`
z@8I+g#RapGpnwdNPzHyz<vay2)dxx8XC#k!=&LBk?;CQmwFHE-_cl|0>+e%Li$*hA
z_YYe~+@8J@85JQVldUsWUnd%zo9ldZyVrHH6C|B1270<5V_a7clX;x6dLHqe%YhNj
z(P7s{_na%f4v*7r?Z^o?>D5Hjaka{)c;-aKrWcQzIUkU&P1xCsN4`31?pqm^y|)=&
zTabjx`gsNQWS30+#N!QgLLV<wxl3(bj#mYn*r|Uh<yp0@I}0z0cmMh0dy$}6GTeF)
zn9Bw*YVd3{=O$9HDC7y%bLuS-nZTf&+}t7k^Bw^^RLv+#-TB~NG!zk2w<L|;`q!yE
z*&sR2Tk4HPs6SeG%;v?sL|vK&f*cU_g|lS4Zm-q_F6~U5IK@~0{F&9%voKb&^IA+U
z(Rn2JHYKrwlR!=myucAjWQV`J+}GzhuCs)*c0D<aj08oq^YeF=Zp~F=V_TF()d;N6
z9dEUqHJj4J;^;M1D~uYt7UT|u269A{IJEh$jjZxo{TLg063}Brd2WB`n#8r5srvr?
zj{~KZ!C0RPRoZ=7jH8RyoBQ2Cf3JB8j6Ut$il9f?GS?IRg%10AB|`Y10v*e-7EbbA
zn>(tg%z284hGAGP^XgETJnZZV?3Ixp=mOy5B@^?~c)4iPFjZEO)t|P}(ZGsII>oX`
zi#yFX(uyel2~_LLPhIFhR=#pvuTGYJx-AwsSYkW?qDOGFE6_N4+)S}JavEwLfD*%|
z7%tEkl*DlEn#eMdjbMokc%vt{Gf!V(KeIoWO<}*b)Kl6JU5?eRR>Wm6`?6rRnNZB7
z3kIN$+0D0iJ3F(OQ-iZdKnB{KZP@`ndr}%Xc3oUF<_7&w>FA<|>(OLVzEppKSdjZf
zOR27$g>QwGyh-P#$R|n~K<x>pu)XQpMa3l6JT0k(Z<0z*>u`4s1>XpDae8w<_re>1
z0p+or;yca+o#u`+!|tm_e;%o?zK)(VGnlr6&gJ?$b1X;BeXEz~&fL5gRRI3G7%EDt
zs#X-)ZS8xwyFn<k)IOgdmS1#qsaaoh_vvxEV=oR(EYT@C4-i%(aq(Pvv%~r-1SZ?<
z!ZDbJ`UXy{cd1=3KxNpld&F|qC9d%9QaB-3TN*)M10%il^|_qFZ{M;#e||C|B)FNG
z(95!;ni>Nski*D4pF8zFZ^b)4lxU0ztMQ)a(i~bZ^{$7NHq4lYkP|PjfVHqx%xm-8
zO8liL%Z7rw@T9afaNjZ2S6^Q2{7D<DMzrw)2Z`@erjFos+Rc>p4#*73UuYSU{B}+=
zs`i%*pT=MkJ+G8Lo5H!&rF=3FQC4>9Z%qby45#fH?Y<P)kF>}~zp8mT@W{yXOPN!p
zOZokE`<n^<{h4Z}BCL8}D(=`WRvqm>ASK<gl=W}$W7k~8z2E6^=8kaAY9}4(`Ihu-
zq1y`Gxt(yPaD5aZHjm>vSS*c&w2cOCsjI*L_p2vtY?o_54MG;uzzhtPCaPZZQc%q7
z8PXq{j3tORxQ55aOs@8R!&7u{tkeYjyC68RIIO8_#zgH4KWYKlNXpO)S_)^-&P8x|
zty-y?ke!|Na1jWMmRb9q^R%P{xKc-N-y7(aNLpW{F5KCrDYx40J<8gAOJh3U3pl0p
zD&_6Z$O=fKNz2xxNK}4m{e#L38qOTcJ6Hwrswyq5t!X5M>vOa7QZ`wJ9kDB{8-dC%
z>3Gyve4SVA!a!{0HY%N9VQD$EGMST;3w(JiC&`xrhF7o3W}9xcBS<sGifULc@gB(9
zZHpvfB9v%9e|H#ecW|z0@Ik_?5hzq*W~0|`d&X(}#kLt!(VhN<8<W|f{xrI$BCNDi
z*D@d@cCt3=_Por&$~td)<~Advx0>nWM|7YmQ(TSDwUA(WQ<)qRt%`Fno*npjORSU1
z^KmTfBQUL|i!{(fE%kM?TdclvG`MaoW}sMtagbZ`VJ9+z1Gr-3nZR!()BKBRpWUrL
z0~hIq_-9|JitT_8aCDPVaIA<Vtuqs!GPfrBsE4X_+7rSyywCTQiS4q`Ovwb9CM(L+
z66ypOXUDCOO2>=O6}znZqY{e86MU25?3|LWlg321UathV+4s;iM@n}Ntv8Fy2u4w=
z@wTHL81@?x+&$NA^vhJcL)8BHP5Zl5F)<(Nq#~QO`LR;`<$=PbzFbF`@DT0q$rSI<
z?HGkrBIUx2zP1Qk6nal4zAn?{Qd|IJQ!yS%Tg1>=ov6uK#i@V?nheMCB;o<<bnTL*
zcSw4|tQauM^~1k~55!heFL&J1i^c$5`V#A<&UjDmJ^h9s$VX3J^v0W0fJAI}cUNj<
zRxL&L#<PN~)4F6LrX<8*h2h1ZClhK#lzTju?ku?s5=VB$!gw5SwLPSzWOj(Zv0>zE
z!NzP|<hbF#UU)-SMkY|VBQ)<~a?3j;LsaBlZ+^k*aIte!0&#EZ$#{e9a2f{qaRh$G
zBd)S{v{~x4IjErM?MYmU9^-^D2&p&xD#ynx{a|fG&TOJsULw~^qe|H?cNeNx03GE`
zRLS;G5uB{+of(AESLRlc?WDtYl{?^DA?3pNIV!yk&E#QfTG|^D>&eco0F!&Dck_wX
zPkk?*$&kK^IY^`}1@lqRp-wWQHWoVml$~|vCD*{lM%|}U=)iC>Txw+?9Pv)QHqcX(
zrhE7g`bjjq?G`{yyF=Or8p;F1zazugpJ@z^U|?AOLvYO99?GG<5dBs2Sv$eq+hAiF
z#c7z6miE4Bes67T4bIy00i)j&Zoht4qoxGxlHU}zufao-V|}6uqWp}g;i3LQYTb^I
z+_(?D@eC9yET$v525a+2mPzm4i7<W<pkiPMzViQN6uAHw1>Zk*cJK(f_Tu{WckJvK
z`uaqP+uz(UWJmDnP;YS8*w2t5^kli>)QpQ=xvnjD+c5DKIkgrWVGiy^DC-LNDrhz!
z)<+5lawu=u-RQozQnI(2oHVs}%zhyeH&ZWOY<Y0r_k7{~^8H*&B#*QHL^erZvEf3n
zmyGP{?I1Ar!?Z!@efa{wa8lev1d9dcMhsopNZ1Y*J}K_ZcvhARH;JNr_R8Q=sdYeN
zx`l=1D3bd=htaG2<)fa?7nE!NVF8Z2V^NBt#&r4TEa{4P<m=T=rElss;_jjMg}!z*
zkVO9U{kS7^HY>ao0csjY1fQHuK~bok;Cf<HB|(Sny^f|fLXB@;D!ly0uvi`MMJP*9
z_EOTZGn#K%Yil>Xz0g&G<~t#S8_d$c_em-z@VSJZZqC_0xm5dkQ(N1eshe~|nC9l5
zzvlFpmJ;wH!$Lxk;EBF{4?z+Q%DO53qm!h;6fkkNllMKnxsFDJL20X!Js)(uGMTOd
zcE?)wuu`Ov?w!a^V_~#UqM>Z0q;4<G2=Vbji?F%gdKHaJK_LueJofhN*x1cDRrFbT
zFE@r0X6i)c4R=VB5-2iudnR~4xwZrHc}!mWCswkq()U7H_L8f}w*sTQ0^^~Wj0`!0
z{9bR8&Psf4s>#88#|v=9%~USu(b_~iw?`Rv=jzG>;FKMZspg1lP4s37v+!M{vH;lX
zrj3|mPF{RFKNN+~<cq<pguE3h%il34RFuD*BvK6(h!nd$!=Rgp^2p7&J+_q7uWEo5
zv3CdTnAXp!+4bHY8B?tkJk-$mt)Y=n_J$+_6;pNk-Gb$!^i8oy@I6D-<VxS|0oDHK
zi=civrTbseV;q`VTVv=0mzNdavZ7rjE%#n3f4`yUpvHt&sRQo2R)N+F8O~+5K_z2s
zoDL(NTt_TYq(j-7_-95{&}>Z8NChPZKRx^5<vZUdkx8~N{tdKj(?Oln(uwWykzW$A
z@QC|slVyR-sA;1HNjslfGjhAHqo-6J-$8$^1Yz|dM|^|KNF7)~Xqy9nIGvxmu`a+!
zbRq&-qk64I|5qYh8$NK)0P3R34VLqi5V*52Feow6&IxvXA-p?d^oHyteSD&v<?OWq
zFxA?=XEKy$lGXCPNm>Wy<=?5P`E9!i`$Z29_meY>1|9KDq&K%0RQ&!uy|=;|6hy$>
z+sA3U{?f9(w{Uy|44X+vNi}tJwwHQBzIynEM??${ntkyD{~ft>RbKV(Jn&+G<a3o`
zo3Gn9!qaC{sFjk{GS`9UHtg$We%ZMYWI9?jti6c(Lq{QuV=I|1Sp!KLg-i<#zC^LV
zw>zjMjTH;yUuqw>+8ZksrX|R?{Hb^ZpY1P^-X|(1#?n59b{Npf$-%?pe&tZRMp*^r
zL4IdvV^LpD?(WIK+9;HpU{V3i4)`QORm<W!-YS*pLO)@fdi&O`uvg}*;rS$kxo;H<
zj8x;?o3klSs3+Mh_njc(PVgn59#P<$>&RXR=q`vm;bJKk+1W#yfVpv;dWJx~ABoEH
zFlA9v3_b}*Xk}J3V$9jGuxFXYcsw{L2*Lb=h}&uUTXq={ct6_iE#unS;yb`NFUh4{
z>BpavhmNuxd_pzVUtX?~SCJ>)o*1~VMIZuZh8KH=j|FjB>7Q59I52Z?xJ%)~9i^%c
zu#u6GvI2#<mhOU<jt<T95POTqwBrTN1K<H}W7qYI354mCN%5$Dl;rYsQ&SW4(c#3)
zw{P=4SgA7obV+>B;ryLNMZ363NSGdIHB&0vbvYhchYiF^vj_}XJ(@#GZbPFP6Z3H(
z_A5MA_uJ7NHMA2*-uPcyEP%<+Wrc7d?BQp&9?%W-J&-t)1OEb4pDz5M^#D<E$RqT<
zy*=QfKB-B^exhJzcDr(uYI~d4ro#aK`0xyDUToI~Tj6UNcWjIYi_iZ`Rp7r{KfV0s
z-{TtF|DEyw|B(kI6q)a=hwqIvhfT$0UVN^37CJ%4&8-Q7n;)NwEMaWQjB3Y~zcMbV
zgS*+G@60W!1B+J(EsEQfl7Twx^9BFEpASt!nU8PkYeNTcOB8XxTf(2QveGj%`yA22
z!o^}TR43;B-Am5^#Srw3<LEL`G3EX1$pyFy^GT-;BN`erUoS{9HwTEoW1Ez;=9KQ%
zEy<(~Wi1zpWKsLdou<~tQ_s58<AJk_e}xhN02jg2)P_KSrpV#&kX;&AVsd)nUZWT^
zCN?YGpOc>eO#=fm@AG8{jZb(@OsfZKk&V(WCdoN>GutcI)t)u~d)BI4xt&hagbT%%
z4VZP?l)5u*S;6*@#%XHmXwlOVhSh_E6IXtomxcB8Fclb0tn}8#W@`$lPUS-;pU(B`
z=74yynodBLFUzxMwky8nfR}#M{gC4{7Jr?BkdWZ?6dlNi=GNw4!M`ksM#VFO!S%L1
z`b=0#svE?VB~}LFyqBV<;OGjoCIcwBKA$<zeke0&Yj%@qI`a_U;I;du_A@gvWqG+<
z4b;_eiAHS6zulh)Vg!i$jHnS-lv>Dqe9a;B01z@jGSp`ZG=Xu=dbtNV_tX=%jxn{a
zyWqQtWV7CnGktwaT1!WROYgO*O-<8taeBovi2Qv80`U_4mG!zCIv_kvSI*5A%uN)J
zE`KW~W}Q{29S~x>!3$szB`fPd=j+Otm`~}CsHu-2u@uHVWpo?%(@9B*bG%1bP__%>
zHOT?>*BJOs7U*D90MgNMNJstlue*-u)%ZoT!OV;ZVfS6@^}&L){DubCG1tWp0A2SH
z)3{?goL2U0jI<n$X`8v&g1X7Vg7Ffc?Cy;@hSG25-pxh=!oGCFp-fv_U<_4pZP$66
z=Ffkzv^92qY>eT7wFbONK->Al)8`K1E&ci4(6K^8R--tp9|g}D7?OiC+5vea=W%gZ
zY@~MZbn$$p)bn(oa$tKbA)K9cKL5$X&7D6K&nliiC0bnZA?5*Nz~5Re$u#G6`u-Q^
zCHW%8F!_QhZ#t?!)*VJ%bB*A?XYGPdMb4x$`!0fHfMwg^WW3-rE&^#$nq{)50lsab
z@+K0d$SC$lQ!6DtoN%>;NsUx-A?bDBZck@DtqDXcKsY7(YD?Y{nBtd`!ZwYLpPj9)
z{#|tVjdo<eJF=u?7z7cSilz1o{rT|Rq$H<sn2)~YI2Gf&o<IhZI7F=G^WB2E`hOxv
zM{A$73z8FXK>ub{-)jyoC*nxQv=8O_XW^8+Ye|B4+mH+~Y8}ACq(D8kGFW7%R*9w<
zIsCfo-OQ>G7{1EXEc(;+@)Hs!u%w6g^wbE8&n?`0q4LW6)@=@#?NxuxB+z|ir6&YQ
z-K`Rnrfh18#EpGW%R6cL6>LXz#M@e0kSvy;1t>UyH;Zz_YYXS`x0!TA`axbV_^C8G
zqwK*5N`H8ehnijcs2MjroEVVoyrQt=rs4lZ-CKrLxpr^AC<{?3l@bt8kuK>50SQ66
z1OyZWq`OO{6eJ|2yGy#6ARtP|q`SMj_h7AOJ^TG1d+%d^dOy7L%UZ{Qz~r9yeO=cW
z<2-+7xc~bC^T|>KNMs`j3`!a&>vm}eIHQ$bDu<Q%4+y#)JYLE7m;N02x*EP^#ZD9U
zhxIWe3on)Z{s^OKT_c?;_4;B=`DWh;?ft65sqJ}su9iUiv^*x=`y<oH^~uu1EhsKW
zN{t$rE_V7!y0|8gH(KAzR>dLQcbVoT03>Y;gT!Xduv62qB576Gi0jv*>)Z|-zGlrD
zb*}RrR=d<Bb7c4DzCaYv0#R25?lhXph)t&EAp5)cQlF*erD=GG)x_J52{T;1Ja*fR
z8~YZS7u&x-KZW@0e@0fY><gJsR3*S}1$lJNFyr3wc?w?RQiJn>Q=Iq`qyBbCsFeEI
zNU_MQ!C@;YbYbi1=yEC_q^7R^LRq;4w76#(D0s88v(ip}ho?Aj<0NB#s)|f{J56P0
ztfUkD*e5mhofKEA#z9(!n!kZe7KPNll4URi5jEG||2T5x{KJLajYl~;G)E)l#{BiL
zhc(;IT+Ut?G3H^<zr4u6Hlr~KzC)Pt1%`O6_|LNbI>*Ds<zVmj|LT{X_mqvrVD=Hc
z^zMlG4R&F5(dX}!rL0#VnlwS+5ZL|aN81TK0(>PVV)S!s6IBBefz?`d&PouqS!olh
zYr>MHhb)yoUEE+^9=wZ>k4r$Nure|`ivXCtVwLcz7w2TdME=<?rG$j_KYe5=1gv8U
z3Pw6tfx8FezRKZ;d<h<hU907Jn!Lq^rF*MTB#`0aMn*-6Axtz#n_up&Zn>^EcaGJW
zNuR7M@tku~JWlq@E6*(rL*OAm{|+irKY#z8$9PY|CwCOXIfT{)gkN&qkNuDHN4|ZQ
zdP7!*6b?N`Bi+v?&*2b^g`7{xeZ>8weRqEpO<FaGoGn&6JTw&ihk*eB85=YnSYbh*
zzxWsSv5RIM-`GDG{zA;5T*A&VWW?(%_x3N9YUk$bt;|eXm5-RIxs02Fdr35upMV(N
zg^H1~1J8;I%3>#P(=srNyhLBAopek5Fbg&d7(?E}#idUZ%ziHJ7Z>p@!k{%cHl#Hs
zJzdc^ww$%Ij1X^2t+V>K_j{xB;wYFE4T2VuaMA3#_wz8_ZdHqkvTA*d3<KGKW3`i>
z!O8VCN;*^I55aSSR*fq!6~x^$D<m(Ey-t6?5q3GOCekkC-@WPYPHN1d!h<z{3=R)J
zcGyTxwy?3XXD~CktMr7Cv00OJy*4@7!$AI6l}%}+0P*)#6`Jtby{Kt5aWZO+)=`u2
zzx(o^_B!0<Ixw!r#M(dEUzSDxwJa<FHQ(~qQI?B_^GSB8CiHDw4%b8^)`lC$ZM)rj
zJ`vfXoGq-Mo`r*SU(jhqw&egI#{i{+qp^fHGF0xRl&sw1>!oeDI=QB@A9Rh3A^?yg
zaCx$y8-TfQw2tgbecjkLnqj1O3Y$+2sLB%)gZqpK30jXW3~PnYt8DMYYwK5>d#sFt
zYbmlyVQ&TEA5B*@upLM<6CZYA+`Mlt9vpqrl^F_(>dC6}4{>#Ni-H_qxMChN;y?K1
zl9l))F_-kcvEu0Ixo^eMU(wjNv9Zqfys2n9yP=oHn8uq$v}Qn{Y1tQ{g@;)RBI$np
z4=^xo9uaSl0JSW1x=f7UAEEyhQEG3uA076z#(lQKl9^-2@i=`5^UN+H8y=CPBd@9f
z0wgkZ?w$4<;g$a4y345-cgvS{`ay-Im9kF9KzC9vK;rFw7k0iG#N+fZm5ekG2gZ4Z
z=1tHtfLgIc@npBS<SAoLr>;LtcAG~ZUI}~uKIPOS$OPRN#*p6-UNc|ek%cJT&XHEv
z?IMnlkbB3+Xke;&$9HC3RD`i0t5xg{tYrg;^&Aq5jeFoJ+DIjrAaUz+X&R5qPlT7(
z^GI1Uun9cVa<gH>wLfc%&gKvgvQ)1%$LNPBnvqDpZi+ms!HGuTf2Ti(Aw0q3$FUTB
zFoM+l;fOCr4Za-xLEXvU5Z2}1d6owK?Gj}BGH&Y#4TuBe;<>topZwbksCxy$tfU8#
zk&$fqX1`tj)V=i#(6k5b2PV;w;Z}WJ^&wew^&6h>oUHx_e8w~uoB;2lr1XXl7px~G
zrW+6LY*psk^$cJwjoM6y^xxju@$=hRLwWG-p#6nr`DU%<aaCCA6MZh^S6wHpc|yL!
z2e2jsn0dWF#ip=~!@;=buwJ2+@V)fvV2<>(f;!fB7CZjDrLa-7kyoeUSgaQ=d@2{b
z(ps)?{(x^z)(H(sPR<Whg{9YtnP+5FOroVdx?K6yt5+&w`fK;q=wdm{W&+1gyJD+j
z<KkoxcUy{>{gNiR&(jx}HHNdjZFo#*4QVsdv1@j&Xf2v0tbBaF_D2xR+iL7o*nG@|
zm@&J9C-UV>;Y<BQS0*anh`YMbkny+aYKBAh3mNGY#5k`jwTZ%;<D+f1))HIWlFMS#
zm$|uLzg{~eB_qX^W(o1GjQX)9WH{12dFY8Qr))Bih|s$TR}>*4A&CqQ{(ZcwsFLLH
zP*XO6ftjCQOze4BSoqLA5Td}!h>4PbMB=Ha*rl^JwX`g)5I+rn#K4eQlzsh!aWa%*
z$|@XZQ`b>w+7eE(#I&SZx#?I9fdSrF8}_E%i-=@^Av|K?_4zk=sz0J#dXoULcuiMS
zuY23c%F60un-9!_S-8rk>o9NyQ5?R}Jw{Eqax2ZW0OkYo+*(!Uu<g@?-iVOmaMO3{
zt;YQhhuVKsw#xHnuxLDF;d2nHj^<6J^pL@H_^NU{e#lDH@qP7^Cr#dU4qCTHpRy<@
z99$2z9#HI5JX`8|@%r^zH6wEw_vM0G4VFqOh~VkgF#|!@!z|puo|Kyk5kO*yognh_
zr49*~0HLX)b^(FqSqYD5-^1!fhEwn2+-$l<-Qt2<U-pn=?P16EPD-FVJs14>^YP04
z!G*Zr&o^bHSnAwmKqKybFIX-Cai3^KQzM#f43URKvPTD>9iVr_mtIL(5E2?1RV5|t
zF2A=6#7J+A;Mi_OT!XktH1Gslg#G2-T$RF4=`!0~)s5*u(-BgMYL`nl^yF^7qRtHB
zO)AnLvj2BcSbz2=XXzZ>(WvV7jWD4_hn5T)j>)$@+xsDiXunI9Ew0?y(y(GYM2LrM
z+JL&L)kQ~vBS|(w>SE*(GczGBi3DyKA1Ko0j&;)B(eP3M{xGiB57Y?F5oxAHx%63Z
zDuFN=F)!~%L_nDIbyT6|7V4qVQ664)(}l67?q@;wf=xH{O&MaURIx}n-;je6@=80d
z%)<M)1SSPNvl&76*_!Q|yeQiS3umh?&6Xs)%HmEX0_S6kWaXG&S8=}i{r*OFt-4L5
z`FLUEu{!?iGbnNDP$j}_?9VUJ+*~qL3(JE)WOvs}`zm(DKyr=ppKHEV(Hf?vkSBMy
z`2ol%n{`13`u^l{qP6!^(bugXpLN@;H(GJ;hO6rC0ZgvFDRoYxir3hfqmkmV)BN@=
zo%whACfNgTDh5;U6BBduaZPs-qoN9-ySm_=Uz<(4djA%ClY8wv{<AZ<u$|S}td1-z
zwe%<i$Y>t&JMM*LDMMawrTr|nQb6tg!M5|M`}qoGP6YEC?s87{jfqm!UC;Px#8{ag
zxl)#UerNXkKXOM{9q)&0j6_FI+PhAgo7DjvC9Rfgh_3G?bmgq@=(V!`u#y!rsRz(}
zm^M>WW&l3K$i#?%PlkelUqnnyT}mpXZsWQ5b9GJ4orFrMD<kQ}#Ygb|ok@H9N_@VF
zk&~69AbA&`G!y`d?WF1ye0-WanjdzydW2^0?FMatf{%!huuFE3lQr{qzdZbvTQ;zM
z*st*>=Hv*twQ?UgqMm!08NE$U&2&6k$`ZH78lvx__fGIgG(#mxC*H+4diOrDC6M;F
z<*x&_bo5=%Poh5+`+C1i?c3O?ib=cww0M8RPB=<u%iq5k@<(0IuUlGTqfAjNTSJm!
z;zMxmKEMl!h{#V@4HcRK?U$_NkreJ=!DMI0tk+$Z!or$r0h?POTL8Xz2MK+cn2zq!
z;=1PHP6frDm#;+8HS}{JP$UJ%)QOe8-*`ZtuyxX*d4XoOq5<_jE6NsON)X^aF`>_E
z%|wazL2CN=#7y%2(S*8^U+p+=iG|(bglLdj0n7}Xj+TZO6W=VR2f`K${ovQo^6!{B
z-)QudkUKxSzAW$SMlo8J7gLPUo8%8dALqIQ?4Zvjc@}-iPD*Y9TG0>+clvhvn{Y!C
ztd>ylf>KbJO+s8ur`l?<HmD#hHMKO{X;WK^vZ>k0405Wpt6a6f%&=5_t-umIHOPCQ
zB?M!rf24&Ypp0T;McT^D#zihi4}E1c?T3e6ZJVb*lTcSJ7-h9NX(Fa;O*6+xiu+-6
zc+L2cOjqo#+#`WBRK|=zD<*Aj%cY8VZAL4W9w>rHmR7MGNRN)Cw;<JE;@CBHpVQtH
z*;J_TM~a3sTU{x9@Td|aBIto2OdR+A6ce(uk^Ux{=9L6@tQ!XvRp7x5v%Bk8#}O^w
zQn13&=XCBkXsJtw7xx|2?z?+zHsFFXmUko?zFeMV@+ZRM)@`RV<axj#AHIItuUL}+
zlH!bwVm@E@Jdm0t=@dp8#mSP6zycUK^7Y8800gf(m8N7CcF^HTeVqs$h_nqu9~-?k
zbdW+V1#6P(r3^5}D75)=e2-96$?K`q8{KiRhV~MiT(q6)((0SR6nDzWXpEGnEpvog
zb3TVl2eB>N^*d2$Dv(qI8sSDGb5^$8!CHjpIAU1t>+^9TvBribZ13cStgH$lJiJiN
zj!~mZTuq{_wbvE&6JK8Z+2h-BU8kg`Z&TMARc&Uf%s{+!HtCM>c4vl&vOEp$!fE1D
zwUJV#Q~$^UgxjL1FD74!#dy99hCS_w8d7A$@9Rrhj2O-`Lll(1UQ_BMKYr50^TqRG
z^bR2*GiR#mUxzFAKm$|7sk){>cyW#66*2J&ERuy|3jD8N$c%X?C>on)x@xuZ<trV-
z-1CtW=Tg7h{!49G=gjd@;rRDjE5&d<hR&hSx%n+Ft`X%--FUE&?!eO0wDZiq`f!b_
zIJ0}X;`D%ghNFL?aQJ&+=)ne`WDm7cc)Xz7M1B6Bl$LN;XMU70yt_nsxv8&Aj~IRU
zvWF+)NNC3sjaIP4#l_dhJ(NL2Q2TBcx=cPDe8_$i*?4Zh6EzUw)LE^PRZo4J&0yB4
z)gMjVfcaHONGKddCB4OcZXiYVxYe2mQopD&#u9Cmqe;>C_OWJOzM%E#LZ5`{d6yg|
zgR^@&RMUZMM=H}(Ca3HvSCaP90O=`B+;VT>dPPtEUjHZOB$mlKKk)4pH%1g^N=Uhx
z9>m|IEcX`U`$$aHQtLn>^8*K@3N;5!&D2LHCkY7K0O#xgQl4_zvC_pmb`TRtY+|Ng
zXgK+;`^Q#DI9@f;18+g-K!eJghmzs^^Z@dJGPGLio?~ej8c?hkPKyF<WSkK?KUD#v
zw2XA6otqm~ijj048Qa}t6BYUZ+WFOFb(OCSVn~^Nn?vIV^D=wKLas|6K)c%&i&&dq
zZye>Bm=FZFQ4&&bZmXfPveIP0B8}NPjnlL40^}Au1=}XNz0hthI@tA=9_)&*2BD27
z)G13V?=8k^c43dxHA_#UDLUSeb)P?8xB$ErUwKO017c$LxeCoc&2m**iOR_@^jso^
z&*6wP-uXIND8A;5f1(PsgfgrBDbg_m9b-C<fNn?@8F@rn=`p<*k<<aIKAApXbEZ(Z
zf^t^AM0hoA&ll0LxB9Bk8COg>j<0NaxR#A{tJ-#cLC6CW2q#kuX4T69%PYMJGa(c$
zvb(aD>5lWQrJ4bxYd7{c<HE!3X7&JF@vL6u;*reBPhs*s4r3a^>L*@`IQsgOC)z&+
z1N@~EKcvhtn!S`+aje;!6G+3+ho=*8U`4*3D}y<wzuIC1BbQ@>{rrk*MMWX~Rjojq
z5Rahsw`AYobuBHk3l1N*Hu;r-($r^O*N%$Wjo)*btvsJlQV_2Av3pdAx@Vv6z*1{-
z6}<!+>InfpI>DvApx&Mydm>hO00v$AKu17|tC=%!IB5bkC^UfPN$DrbY=klnhceJ*
zVq&83Sj2n-W0QwOUcO`(yjTr}2oq}@i~CE1!~*Wlrl$O)ed#T*W-h(?q6CtM5I_b>
zNlCtp<M%n=NXpCOvHNu$T4ve7<=VXIwXXfY;DE%T9JajNw@8MyGMJ`43C8G}iMq)`
zyFAvz&*f>}!@c;ca0d!{bRx;e2?+XMV5KlW4O80E_@1Ei%*|qgA6j}Nb^2JN_g2It
z#9A11SRn<lH8t=qX%1*A%@$IXib8bb`P~W~4yg`IF<#u-KKGTyB;kD~A~G}drx@mN
zeHmZ%4t=0(|J|dMnIS{_@(*uTkk&;$y`2qRMIUVH-AP&|x7FWA*QL%c%#VZ2!2tW#
zEjBJLBDP-dy4hi*{^JxqZN#>LM^Dpkhvr15k$l017p+ZaJc89Zwavjn^2OO{l>H6}
zkf{R5jV6CbOuuGVrsibYfGM~?VLL;HPmz5QRJ&MatD{z<FFk@=<l-QyU<Pp$A_^BE
z&?=PrYcjw0bgZhWdh6075s}$nm?<7cqX>7IWV;@hj|XyQ6r#?AAQ-qZWOgoX?{s`u
z5FOS5Vgf@9?shkyn3R<D+0gXbZ(EU{BB1Uh=S?L)HJ-{~E{Ook<@=Gcx(;-mOX@Cu
zXZy|P7DIsVkbS__+YnzYy0reod7R+ydsf5Yv*4#;xwkSh0bs%@@(!pZPtPUjh&x&=
zQ0s~&YmU(8rnbu5CNQkHq}SYz6OcSc^YBX25EU!^BKr0bsS(W#d8cOx-h~v(g(TkX
zp`lm(^L*nP50M3ijSJ!HBV`*SX?=;08q+(z7we6Rrvu7>s56Ey^xB7PYD!un@&x&B
zJgXY&KX7l|(pk1F2W-qH!!6!?ZF%`SWOv^t7H~NXyeoUk!a@sLOR7&IB2F2HyI1Ed
zqqnUj8Lw5veVkJp8j{Ygq096+d<8e5(qMjKV)uD-j#UbeTib^ZU19Mw9wZE&)3(`p
z<DFXRDKp4(1G*YUq358nTDQYxl)+jl+8A@oR150dqs##20)B2PD4c6dUKkH@w!`4-
zrPP4D8ph2dWOu&cCO2*ecpr%G991Hv=!#aQvVY5_=rEP~Ixp8a-8fi{ij8fx>^;6=
zS}p`pXgj35Pk(uECIprdSS)s{zS4~HxOmWhhIet^9-k}hTYYpnbhT@52G3*msSe0;
za^%@u{8YihvXgM(I~jSwB3y`u_zSI1O^LqE1JN{4T$o(%?GX<xEZ;c#&3}6VPJN{&
zBsFe}N~&xS+a;G!36N(I1jERq=KS0wuI3#|8=?(LYDmw9pj6OL_8RQSW>~*}*Ag>a
zQFg848LqJKqmpUW2!onPFse8sPU}%nZWakmC)>V#dtz}5_4D<!*`qIg)N+;U<F#6v
zn)ER1up5G`(b?l&1F#}J;C4KksP%;r1Ar1qS6C&*#D=@NJa&-knw$lE?q^6(UpX54
zSnjtBDn&+poSP1tqb24q<d$<t_(rqCrDfy!ch@Sbza>pCDKrvuF}Y&~sFoY;9su(V
z#*&;yYfoJUY)=NXWtH;s7$pKN$4gy=+*<H)aof7OCTsLtAelJJJAicEs2{wt?4x5&
z{&3h_BN<+wuz5JWI_U1^j77d7BCS>9s4lB*K4&=yW>D7HkG|5w&vbMyY5NS!Mt%TB
z*DJ53r^kJ=PV`Yy5)l7EUt9roCn`#~u#)I{RJBCbxEP4!_BQld-pi{M{8@GIwzkMB
zgYr#xS3<m5z8<Dj7gN)HV5d;B2<YJOyDd#*&q7b{e-EDdvE}Uqsft=|_dHE*IR0ix
zlm~9Q2}0AgSgRVO46Bzu;LtRXkc<5SyF@zc{LEwoxvt^q=FP0Io9(fj(^J!-Y>P}i
zNM&*)B2uO~#3Yor^qBrFHR#Bo_&RdQ!#u>q;8oQr^6}fO(xofvTZ)v<Q=BE?dJbXm
zk#cT(`v|+!kCBIbFK+$$+Wt}o%WlHdAl>f!rTIc=#zwo`^kmoDF`+ULs^Z5`)6zzf
zj^!z*ZM^ewIhQmxUYSnGz$O=19zzz&6`1c4b|T(9e^(M1$a%>_TI1=&4<N0Y<()qE
z$cFR4IBwA782Fi1*%?iy+hJUwx?mojg^fCp2|68ox}esd^zat*UX!lk)i`6rz_>;D
z6b*9`nMC8~cod^$+J%a8^YPaz^oN<5LLSRI9H^ci2(o@oR#q;q_2HD!o)l^VX7xgk
zNm;3Dz!DiK(0ox44;f|MNqT@^O&5IzSvVnKVfTg1*;Vd=e$`?ENL3@A==*%Gb4NS#
zIa$opbI2xe)z&vq04gZ#`j29TXU}w0fVC;65|F^X-Ydpct8s}<D^VM*Uc5Nzv6U&e
z86U>*fXDeUEA$uZw3_R@@RhpKnVKI%+#<}|I1D$Ea|X?ASBA8eq-UG9`z&fF6YTiX
z6BF-{it6e()~xhqc@AoBa;$PH@^6Etq0Y?(0u@{i#=JW_WtLoQmPx*c$}namU@o2=
ze}{F`!67J+baZ)jaHQ5y$nA7(Jckc%z=q$yKkTaCeP9fQrH(A=Z;sXSKoYjESlmyJ
z%^wxC3Z%qW9X1oZ4Q=VrJd{^uH9oqtLIn3#02x;;a$oAj3k9wa-q<+al4)kb$UDrO
zhM`mk8DmWHRoiQo=yp=W4}C_0Lqb}GG^M0&yIF>hEC&Q0cRj^D8{H9oa#8)z&Q^^f
z?sVBE_|#vGq<qcVj;P+l6v2>Y{{;+`S#7N(H$I8UshDJjvD$b$XtCfA8<qU}`BNlX
z=F8@DoCuHljMCNe{k0w^=mUbgc+6$%=vRkJjarJH?y+Iu*RM>}A83387mmBOztL>B
zl-aCmoCtmL__jllU1W`Z;<+|nY%)5)I8nD->At%Wi`G_V{<@iby<c7-FwpPqtV@~K
z1TlVY%@cjf<`=UP2OGo9Fp-c}v$)~w6GXD!>cT-yZ8-4>KY)~kDO$*L=Ii&NiYzt)
zR|iHI0B+y9bw)k@Tug!u-~iay&_AH~2L?v5>`r<rP)JlL)(exK_UA<IuWpLOU75fc
zbgJaFv;wB>?{k{J?kl;qsEq=C77*npoLsJb+FQ5jZ>7X^cwYtS%Z%FW7SApP_x2hk
zCS4B6<m($cp=(@Zb#5HJ)K@K`v^ZdH*x3=iy*WPsc|2g#NOq=qo0Q?~TuSva_F%b>
z8aH$&@Miyvy`!MV@nc#_r{$gg;o@{G8&VO<_0iI+oF~W$_r<Z9Zr?g?3zcwSXGcQZ
zG06~z6`#$-VjT72<G88;Krtq-H4bOJ;34@fTKGE!y?h8)v}W>ntkMQh2+#Dv2>fbr
zMEA7woIbK+7BPF;F?tA1tW~#aw;Mu`V7c;1v85osLuiqqyTMgw@&n8icqpEqpqY-=
zMAtTb5R3~^x>zq!A}@uh_hCudw?`_;FfkBJtLa}|KZQXUa&%EA?rTYjr|0;7%;9w*
zw~6j@bWO?O)<%i0EBaX-mfl`xi<+jiKPkma5fOf-jmcH>p|=m|BM+-_z|I5b@HA3M
zoDn}Lv5Kxq6n5l397#SDtdpq=z!Y(rZIloiAzAB77`1DTfU=~pq?7|%2|`CFT*vke
ztY(9J2|-A<4E=SIVHj#L>xdi;?)MDBxGB=%?M*ZPiE^tjKMv1@Bu;tPMr_lB@Hm-A
z3R#3KER(X4pT7hwju&uIQ8BU5ekotaSCf}_T=UX|4wObTF_1eR5D#OK3q&cBD1~}#
z{`ER10^1Dj9BWtB&S`aBso{jyDlylqJPqdbfP5ihPYm*@B0i6kpD4H9PY2eBqs!>*
zJPA+d{bbZ3ulcsf+gd#-YSPqfY^%GGZ%%Ubq$g@G!5MtBLaNUHHp&?%vNmIBTB+V;
zLhsj}N4{Etp;Ea;LOdkU78R8&P1Is&N@jUM`cvU-hCyev!%QlPiyj3*L1+OqX@zJR
zjux{b3^bg1EjTmMFCQqRCc<j+^yw6?hs)6D2>2~+hy6JADqIe)H3mq2w{~05hLqOo
z1HO&Y7Df$ry*BXJrQe@{n4Ovo;xXLsu(K}vn}XDK*y_bH2K)I-xh@(HR3|tly@Q7A
zE}E7QEl<?7DO~b3S)3d015+Q}GL_1W*CSfw#&JVKmL+#Uq`W!i!i`KrJU61|lb6Vc
zGZzd)F2D~6Cvgr=vtiP$WsGooIvSw1oE{x18nVLL3*u1BjMMWj^+RA3gki|92)86G
z8<jJWe)1IE6mWcr-oC7~3NoX}{ITF~-)Jj;L5rlv7vBy~r4Fm3{>weD@8hS~)UGnA
z6w^WR{ID0gCunO8s|9?;gu{Kh>_fZw1VNVu?FIQtTf0&ao$mDZ`P*o&w!d7V-j!u}
z%9SIU6X@qRZSJCgM!(jR*GDf`V8XQ_Zx(i&lxHI%ICv=EtW9w>cPgL0O!=5EKn&4D
zHqJ-NV?Q#;9DK3@a4Blp1U<R_q}LChuz&q@OXDD5u$sDS%xO^RX{<2&JnXJw1qP6o
z$V&iZDAif4%EhPJmF|2L6rmTAoEGC99$C^XH%>}{Z|l;!&VR1nTLgj@FmxZ<I1J<7
zz01Tv$7}u7eoZaAb+9XeGj-_8BfNV(E7+t0VwE>IzH>fd$x6PQmA4l5cd2m}-K09f
zD1elbbCuXy%P99Gye0XW#+$dc3uL9GDQIcG=(0K&|K)ySeLTXL{&ltTNMT0QgvV{+
zIvUL$Mlu)PI__1?08W4pLbz`9$q6-VdVjK%3{?xpC4ECy1`7=J^v;+22q&bovoCoj
zR8mUVqQ3YQv07*-2n({&`(O5#uy_72J3e;$GHKp3Sg6N$Atp7yKM<3An~e<@jK)jd
zp&A_?1&$eHk|*VkVx<d^`<RubUX*Rk87u)6$~BsR%|<(N^4wVg4hzA?++oZc?sx2%
z2lF&s_q<5<0bz^XBXMV+j#}=%)?iipH*UT%3mL5nH*~P>smsa^l(~<)kHwhFlUqES
zjE^js81q=F$j!yvZ`7NeQL4kjfpgBc!2X~(?ofi^QnR=hq$w|O#X->(Rn-UN#R!6Q
z+?D`_{gVofv82{xbYU34#qgQ5eiWrn?|3aa&TqyTz>?y#(@C@3lSkoAj6qOvj}VuQ
zEr(5iW(kIGtl?7XFM9gZF8fW&!E-N}gkshPw5g#;pdi2`jn87*ujcHmpPt~oiIHlm
z2=7B7yPf;DWyU(S-`#)Y%<Ho7<luss^6y)1IK<kXSZ*=U42mK6QO}HuQoY`_VCRjN
zEsS*nPnOF4S^|}9oM;l(;srN_FBz|ONO_njg{A^a&+u+UT59^rdy_!eBS~(iykq+n
zL}b6U^#{^y6mEAzA8+e-CK8EMbii02g?&{qX1N?V1RXpi$x78BX8DQcaie|Y$FLpS
z*zCfro@Q)14!t4yvWMy`se9}C_4QX$qNcf!OSXQoagP2r={D)>wcf0_(Msuj3M%%J
z967{YwaAZf@$Yk4QLVF_kN~px{^jQ9WIvE2FzJ-C0RPavC!YybHGlZIMMMZ8`Zg{;
zejJP4S*HLx__&|5V5zXS>({qeN`ov=m@4f1eL!l4{|{t?Nxibqj~|J*RU!0~52@dc
zq{Wr4+k-G=mRTy9*rx_<194EEm<*P2xLq?_8FSuByhstZ-XQ+r_{R^DH4$#J7YFOr
z6K?2nJZ@j_U895Ku=eEUHldoscR{60uPXNDA+p6>>#ZS)V7van%T5kjfXeKfksPk~
z+4TIZgs$Ucm09GbFIRlL1%z-_IUJT5ba0oyOeT|tT-8sX_+7g2iYzXZN>@3L-S%d}
zYuwj4Kywb5MvIY(2(2?{>0qsMALgW3Bwz=`;1Kb@*-5n$^|i`p=dpdmRjo{cz6i;N
zMHx9TZ-n4CVgGWI(QG7EDoUE%WP^D|&_HpPW^O#laD616#|pWGd_<7JU7wkhy_lK3
zS?{8uP9)JhIf$Q?P3&$NPRBzj28HyY`(-{1;H2oKu;rseLNo@%{zAsl(=Y^wo;y6%
z<85Mm#H8IRrQ_tRpeqt3Svb3nNuAJ<F?-zX<2R>5PerG?_Uj-V1d^hFph5bir9)!e
zs5&G5I{65wrmEk?O^(~8F{yOQ!mJPzCeF?7l`xt|YBAf#Y^j)Vfe#9kY{<824Czip
zw7kjbxsWOp@26uVvYU~Xb~(261HZuU0yovt*JDx0eWuQ3a+(6&Uil2?%f*q=<yNPA
z^3$}$hY6P_1-d5fzkf4$m~JZ0&nsvv8<ZksKM0nhOkJk^%kxU!46~T5%UJq|=pGr_
zG0~lgb;8i{!F<4FuPpL&(Az%({3;aG)Cr++xG?*Tja}PqIBa@Rt|&LbG+DaJ)!*Nr
z%fLvJoye@1r&&Jd(cjzqv!d*-Hz`QJ)2ZyrOvk6^=iR2yvUGJKCmn0k?iqh+k?vX@
zv=|xYcvbAo(^yGe;{D}C92!PMuacOUw@ggA(%aJmGrA$p6X%0flA9hGM{f>wt#0rM
zdz(%))XOO-%O52jx2;%4^jXa##L%P{Tn@#+k6s6SgOEqI=$@(n_5!Xq3M4YpYn~iF
zj+(TtPAk&AZagHHO7ha^G$WRmz9@h)lFl$=n|?n?IC<=m1}zpX$2iR}X7sM_ub#wX
zddhJc1fAb<Mu!G>yZ#3=)XuoqH0VxedzIm7!#K_Fn#=sFO{4rVFfcBkS2bA59n1+$
z;-WlDd^Ck}=M5RN&i)49XT)6XVGabDLX?4A9P7vU&hLW9kV^o$S`+0CEpvZnAuY`1
ztjP#gdpd|OYzxwM;de%E^<{K1=@g19Dd{bTpdAFP9qFW{y!6G{jN>r57_th58Jrmj
za<s-s>(6EZD!NtYk4y#8G*C!Gb{Qt|kX$TZ$b$~2qp5f>17Z^KK86+rvgzIChFREm
z<y@oK(#w+@KPPDg=XiD*kyA+-R`<Wo2H_GAOfOy<RjfX|k?5zu%l6Z*8-$^9ag~X=
zsdJ0unK>yO_Ipo3k(_;xN#P?RGEpaa2iN_i=Jf@=dZy1#(B1QyKlx+0@x}W39t%&E
zDdQb6J#Z#{S83WT?Q37<p7k`CbL^AS&C`V=cJGB7(+FOexQcv=G9tZ^os&2v|Kipy
znU2<Dic17N1H;)pJP?qlrK|R(1}ZdfVw_SpWDuaZ5;6e=CP9IAao+t9b4Z7OINasu
zZWnx<X@CDR6#<EhX)&i6&xFCIeOeC!6%~Bvr}6<rOM|)>55wLgIa#O1QwZS?AU4Ov
zK$)a|^avWYDi`~`DA%P_CWTcdx8XgWdDr3ad_y-+y^>8od<HnQ`a@XC_-i~u-C0pQ
z9`72k!7pg>AhGpyAjF5u0W%zQcwZ<V5OLXcsLe#%kGh6k(lb|hqPbd@Nv^(r{l=9h
zz20L6b3=^&zS|Y}=vn>Ws_r+}<JTnvFs1~;3)C}YXRZEbsNKZ=`d`ZQb)3JMb5FVd
z3DoI^TMJZE+|`Lx7FB~q+&2=Pt6ldOFmSqHk7Vs10@)?h*%P&T0`N=Z_y1<OS#t03
zDJv^K!xa&EjEQm<28JUb7ucIlM!RVM3_wi%3#iVI82|aV@1yMAfaLt>7#%Xkrv*yO
ziW1S`M{Q~T{dQ3@>oz7l&Om1r-2H?1mpEAF*-P?TE{&f*N5Wuj^4JwQ&}+IemI|`x
zva{XDDQI=bSJuUw>w!=E0m(K&B`_o4wD@D|X7&%eHiH4x1=Hg(v^L*r?BvM!O2pb=
z#wjcd`}-!K`;911937U1DT(KeJ=vEpowt^<fO-%c`vBdg8fHgfVR%_{|IeA~_Ery@
zaU<wphKOASkH$TY=28j}=|0Xtq=B0M?!9}-*3s)W@|J_L>maSYIEV}S{KL}sAaC?a
z?iv0)%oS)pU4z=7Z?Z4j2Q&sH6Vora<Y6BGqIdQYM%1vw-f;!dqu{*#M49k7jA!l>
zFPTkN23@~7kyBaeRDDRAep9dgcM@1|?AHWgM2vdcn=jx?qYFgJ+|uyocsB`=#-GDG
z7?Jr20uGf5jW?8&@&gZkb?|{fU03IJ(C1XI#}Bt`TI};M_xIo10bd08CAvBQrmJwd
zysQ5h2=w%-7S5Zqqm_Cw;CusFDma>B*gd}`38Qa>(}FtPC|L!=Fj`hd8c5;#CR;d1
zCFZkbpgE-3w6wRbvD%&JnKfUNX4iCdoP$vg;PU|(qNyHD&STFDhGDn;nKYBVm8H8(
zcxLi~J5$qe#zjeF2XJ3Y`|u?uglFipIX@Npe9=fIsLL<Y9wpF^EWs`~LoVBJSxj(n
zaz+bTh@<61^Lb>+Xyt(6JmMr9RGAQ5v^iR>0zJ5EcP!xmIweCcRHLa}5@z)mRKrOY
z^*IrY!4VO3$Hoxln>UJca<HMAd)EC;33z58H8o7ALTrV7`!*xA`rTk@G(*!^YNQfF
zZRj3wk1=d;?c;}rjux4<f!g!!SREY7pol0p>W_7cj*qvRs~Cm3A^z){vtx)tS?&jy
zCvY2Ao=|aaK%F$(g6&XJo{|AQz}p!9Fb8?2W7^cjtuqaH_odK07^p>;Wtl`p#9M7`
zeaVYaRZtdYX8iB?MM)VC?}3K2n(u88Yq1-hNuG+AnR*vmS;6dDv*ry|^)EtZfgrN6
zKk+KU{qejuj~;GeWZdv^I=r9=hx&k&{89yE8X77}r8mMcZeb`;_+l?-<fMoN!NW7e
z`NPV1M&8<{Y<*154ts4dG`)jJJkOvbjedZm#H4;e?ouECnqLBaP5)!GAt#_+N5p2F
zSs8UprtQz46W1+$xQV5dR17V@5-&^PK>RGT@T2xFAinQ|7*=NoLJXbIU}Sgy*C6u;
zvMYQGxw7@iQJs1pbx}b?w0ZC<*9KBq#qDB7C9A-|a9(~zt>~=Zq~Lm8vB)P;5ekZw
zV?)Q~V=87YW<~)4cK&1)X+!7t#@Qfmw_My1bq;S`j$zqVTKYZ>NJA*qHp#c5)My^l
zC1)k6ZcDW$AQFFc&(5!g%!kc}m8JlMA9ZCH_SMl>nmba&$l}gF9rJO4!e3B52Ea)9
zm`U&v1%;BdlIN!nan(40d6aiLwa<&@;Yh!A@D2;8ClI%{CaNZJ3N3^QBjWuPjl$&{
z3i81jPrPT04wh{WBk|;b^ah0#lMZWSFO~*8U{t)k3#)_Av$N04z-BC2%#o=UsU}kC
z1D4D;Q;39h?0_}LKA_HJ8rY8@kw<$`7<-qJZ{H@Bh95)4a%IQqRlXp4AS~RlOcb?d
zJ2UwF<alB+Aus@d;Dv<>%{j*1^$YtXo5HB4MVEs<K0bXO30TBP|DYg4lnZCm%(uS;
zn*X#Tzq{A%AE+0*(*wx77%8?y`h3!j`YVYrItqYbbhAHzPQ=Pg)Ms}bDgQ!YyEl9_
zPxE|>=k?hE88<OuWOs(zAW9u`LrH|Wmirt2-{f%#`1gp@lRq_FUYok~sXK<XYCFL)
zBO`;Jnx2H1;O)CiIl0nOc31%%3!(?IWQ4$wvyAJwP;v`Y>#;lzx0*XVPY#naKWXdk
z23|G9H5K5v&U&a#ZGTBR<*EA(a0b<wD>1-&*7*~`7}XX5qsg(l-7S!cD0ePAg8p{<
zVVQSbr~3DpEh(Dnq|2W)1cnJKEAPL2K69Cpc_mr#;h6fB1JT$fbTvTypKi7}kmeRM
zz<9Ly7wmLda~}Y|HwtZvMFIWUvsvmfM@le<kCs~~HH^UY*YyN>-WK_Wf&$gY<pf5X
zXqP_}LE!|5%#(X~xoKI$HR`x67O3yFYHT~e=Y03=w+P0#V|oYzyQ?Be%0D|I4)NNm
z^YI#gb^*Ty)3X1vH)F2L;(uJ}7-XK>+jgtTsIhHK&rc(o^wv6y7dW)EeV>_?B<nl1
zWRjns&xyY<KTpnY{rKS&o13)#RD4N$m3`bq=LUfE*0Oqp9)YS#xg>eE9v=^HVQwz0
z#`2e)qz6O-6_jrtqXv$R)u8#S<*8Q&Q$c|@l&r3F5+4^EyYj}O?FJF(Uf?h!(sDxl
zk6VXJsIfNjd|Sz(Rntfh^1FoGT3@}r+d0exFte!wue!eC1OxE#D3C1qS3rTOu0CvA
zV+E`ski21{Ji||6ri-_zIhKZoBP%PLNp|)RxmnzMG`e^2&lgu;KYxdJo|}~1ZYkc>
zty5^bk<lf*!K`gIR@Bz7kCKMJ#+3kwI=|0niwr{AQi^MS<5dF@KOg_xobYIGZH1(Q
zRLoDemy4bM?+&vRxU~QkR<Ha<6Y?#WVv=r`JLS&J;Z1nF+GEiiC~B4R3;h)YU2Xrx
z)$+*v2~2FPf+I@cz-_6)C+~TJih8nNw7?e`GFj~)2<vH{WBnrvMl%ERnd1?EEN=cu
zN4w>*k0MwH{QwrhA}JpodL?sTXa#KWr#KJr@8TOFyAKxfT;O&v9nY==1~4oax_UE1
z$F$?zE(eN>o$DrpoHh3Az+=%=Ww<=N)H`85II=3wQu@`OnPfe;lm)df4jD4&+MPRq
zUJ%gYws6iWRzP>}Z2!YPjYMuY%o^It2c`$bTc#9*L*KZott&-az$JbMls^L6wE)~=
zbz7~qUgsno)1&jz{R~;h^mMIP6SAhK_Q-BO<_gz-pHPWIJbGq3*VxDDG|*y=gZ+9e
zv96<LSP76_|F~qXfbz@9!vK^Y_DHp|rx<x=e*v3a?ap2_P{W}j+mCU8AjqHQ78)AP
zQpUs{lqnKb-DLpvE=2V({jXUDuN3B@ePflkP*LQYL98+}i%TOcua@&C!u4oLg5~4K
zI<ixCP!bFB4>!>MKE-i|b5Lum)WoKsm$!uN#?U}T*&~6a?;U`Jqn&!wbqcLv!>-fW
zmn}^_EqdzccF&)Cfvm}6<ARlqzB($DLK8;x0S^pmy05L>DzkmKg7E*0hZn}$U0N1#
z!z~_hxNWvD_MI{52L(GrvQo>YE92LI065NcCSG%6NA|z>U%5|`2MR5()rVt}pnsLh
zKEplpYQ>&vbIM{U+c(ojxJ%>0Aa_sbwN~BI-0&`;qGE`iI8Mst;OXJ2k+H^N18QgH
zNLPYOx2fCd-uv!)AMG?f(zP>i52w$isk9luAq|3m2}no?A3SKy3AkWO*Lw&mJzGau
z<hN^G><m%<Y9c9csIi>|2sg5v*{-Zh2ll(h+L}or*E0rczEe1YBBKl|rX_)N2W-?O
z6PEqy;n0BETDRC}?(Xt;yicJWiUCA!*PzszhnI*+on_J{z9ak1hS{ypG}$)e*<w^<
zyJ_^vW#1YOI&z{C0AG{<u4yFE=dXUMc?zD%Sbk65cYP(BeoRUGCnmIRkB^T-RarT)
zV9M;h9#K*e9c`JPvt3@$0|zJt(qXdRi-mF|Koj)C>`k%NuI$Mk6AjJYF3wo(=1t1$
zSL$d?kc)zdF$nmr7JPfh2S?jBoXp+*{emtRt<rJ;5DEPjwM@SCML@st8A8?b#7?d<
zE~DG)(>=eW$oy9lv@dwf;1rqqe&{qV$g@$%a2G<4ARJ8LgNV%Sv%UG9QcdMo%12!^
zWP5pEHAJS-+^}~CMK2}x0Bi7jyKgT6yVOt6fXiak?7e(Wez^WIUy?xwG4i6Akg3n7
z+d~uY+fxyd5+1`&Enc8+K=DzZ(c3wdxX~e@bD7)Dz*&Z{o)<UQ*6t$HI?7l^@J3J9
zc1fIc6%18=)6ddDY)n&7L+15l?d6-d=29H$`zHVP0>0eXq@-hKW1GhE);BkI-d~Y9
znT)<@GacDWD69?-!|Sg=7g)NS`u&^6+0pTg@7){6=kEfDFJtGjl9Tz7`t{!aYH|sJ
zYKV_A2tk2NL<`Ezn-i5Jn2WvP^@_|2AP~(01t(-WE`ABVLt5anK5sVp<65m@b6wm-
zI|eNc;?AkP<yY_mUnt?%T1_}Q^?hSMFam3oySAXW=Sv3BmH{f6`=y{lIeC`ZA#j-e
ziAMcR0m`KUuu^LJiiylcmxE`Enr)UyIME&eZB3`hlHl^pdor0Qn&#->y!stwGxyMF
zG?FEG;<_7!#qiHBr1>}~iBdh0vA6Uj9`IZ1LU;uc5fKCe?@jk*3?jIEa<a0et~I6S
zRWG;UxOtTsFE_cf($mvcRqY|1*9SVs(U;j`1?z@B@)$Yy9(_Z{j(Y{ZjB|&29%^WO
z0%>KwL|9r$v>+l-Lq>&Y*+UWEPYXcpRiJhP`U{vnUIY4hS5dKV$m9^XDefl^*zIRt
zp1d9}H6!&<Ssy7$>>5vL8K0S%g$E~(p+lkqTh{_z=|a}hj>r)b+pKU63Gi7;ZA)8%
zNW~L&!)#O2({QHa{U8{)KD*?DCpIy;&~(K2@1PcVt29W*M;&u`&w`ho{i{LZ@C}?b
zleceGzZuWZ&B3B_wNhM@0Ce=RPH(q-&<SS^=L^ZB?4%^|ON?w9dJsbwc|(;CI&UI#
z-wXp86_6@iJ9pV7NYW-zIhCU*wjt&$G3#xb-i=K3CoCZ4b=6(?`U3OAL&&*4sotHN
zTR3suo2;;>Eg&gK$+O!(F}ux8!&_r>X@!^=Uv^mpvDc6^CquhTJilGJiF}Y^voB6U
z(W3KKLC^XcC@JbnOr4#7K^HvhvdbmB?iF*ikly(((!C8EQr4+M95jjH+oX>k{3cTF
zvhFy^gX*T#c=-qO@GDL2T6aiR6nUXA4R~0w`9MF3$xbDuzTst11!FA@hStS_*)+A$
z=O#BKqa|Kkf*5nChu%+1vNuhM&$-(xrIyqU&qmQeaF0a{hb|+?>LLX;ZC%(s<h>z(
z=L|J0M9<ege8dMD3<UI6L}M0P^@5<6-s5>8Cr3Kk=JG<TcHvWHAI&KZ4a1bhlN`O%
zfxSetBsA}%-Z|akZ-uTYrt;796b*IF&9#Mv>%x#iq8yBuoHMjgkjSN>Jpc=*i5hbp
zk4sXWJEM<H=N!V}-JHzo>Z*~ENv~;p5G>jY?Zf`It`)DCJ3GrRPOvmL$32ikJ%UfS
z`hcVi%eVNvs_Fu$s<S5b-y}NBugFYz#6uLGqHkV)sdr`NGL#%-LhhU{19;kIP!(=Y
zxLFSOIss-LOcsbEdnNV{LY|;Xv;Dd;8H!hN_ZL{M@6}OZla5);Mrc9B1<aE7!(+6M
zKe36Ex-o(z4zi*I-4e>m*ny9<SP($EX*T&$?-&gYkAgE(XE5#3BQUAwV_ju2mBnbK
z$M`QZkhK|9h?>5PJ=u)xSyuX0=-ID=_P2-WZ{Ly`vzuFn<fk3d1IpXFOTQnHI)+7t
zrcnf27g>XhO}}4sx$75WHEk{F-$4|e|Eu|k4HY8aZdu7y(;NEeF8^|9%lZlb3AzXR
znZ5wU@CPi>lU;eyd`mZe0Yde|&P__HU##K2*8@MIp1e|zjyzcb%WaEXh02qu#9(&-
z@b50j7AR%d>+1H-(H585m8dc;K6u7$d-VL>JLH)Y+x-p3VP>r=0usW4%!iY?>U|)P
zV;#Hp%VC{oY5hDtP>tQjc!!dvsVUXIAYN<vO>>sgVtl0w<gNiYm#7<|wm#xBvFXZb
zK2~S3sS2iNT<WeG=Y1+_YPA<H3Uv_i`etZnEdOJ0af%wL7e)c*p-(Dt)t39fb85bw
zWuY^0GiAQ5v-2A?22M8niH?tBak-B4zUjiLmXh*G&f@w>1z{o{0g1p9Cc%%>vB-|f
zpl7D0XW%2LbHNM_^Z+60-zgX|9?x+;+|E8at$M7Y(ul(Z@i9|M7$|i)S2iD>sqbtS
zFZ3i_;#jfUeS9Tght%!&6MLDKjQYEGG9P0;>GShfuQK1YeAUHX`Mn)9uTWE#%V3nX
zgUwe@F4~QXeRK=-+5qw~A5Hg8^*X9WmjjzzTr@W@XEC8CcviZVg@!Vz@`W5P+%;xs
zLyJ$V!nPDS>d7+3=i7t%QlCD`{OM(E%d6YGn3}Rx4Ov*rH|i6l0e;`v{sQR7lCm%2
zo|=2HI!N-v(*#{SRPar_HPH+rgR{O}T5c{fnP_A8_SKiRGO_~II$<~c`*n8bUr+k~
zOnmtN;XnKz`j6dp>a7kZ8l#E{-EZA~n;kU<6;}=a0vA;MQgU6tyShM!|Mx4A^)o9%
z8j`qa#)pazr!v3g18iWv%N6Q?(?jxbhRGVE(xRe!N-t=1hf16>K+VGxH)6Lj77vpR
z1XXq>O&_oTcHqf@;N{-bFR1@sZbU9CY9Lg~g@4fWiO%N3OvY*tgX4e~qgn3W_H{Y5
zwTrvTVHKILMIY^Wu+|(9<Di=Vswo0Qu}{Mn8_{)i5FY|aRB34GSXI^l=*wk3HeB(R
zQU*}7`y2f-atMNde^Gc6D=Ky?15Mk_+qcuXJsqNNq>(A>zDewgVdSDdtTwd#{pU}w
zXWX58_p-AzJhQGNA!)LIGT1zLE!T9S1T5h#foA_w*E64l6IqrR59i`Le7cT(n}eqL
z4fRnYHo%CSThGGa8uIK$fF}MN^l&pXGojQ0PCLl+VVj`epMgoU+Zi`v^ggqA_lo5j
zDd@h}H#oT3Q(GJ#Zw^Vwf0PVsC+Y}+z0h5sZWzP_>J9hZUoqKnoO%}@E^1eXUkN!L
z%`Gb(0*RDD)DspNV$0DQr#2=?IRCNr8BXu!uMn|x4n)0|+p~+1t6^YZcXGHoe>}2!
zaoz&yJ<#ecEiX?IyN4Ufq*Zq{brnN%l4udn)8v>evLm$60{MUs4hg@*MbTSP^ysK4
zJUqOLxJp>V1gWWg;}13mm1Je}XEcSEasG2@w+3@UgvEJYpgS~S-R6G(NrubMn^fpy
z)#0|)HnnWLih_c9f3~`^@?KISH9X^no!|HNO=dvs<+Qst>@YMm^d3nwI2RVSOPDXu
zGmo+NUC{35_nv&Y_zHykd6`m+y^r{fy?gUFA?+f}JeJ$a=dq8Ko;WnAa<veYyu1<9
zUn9TS9=8S{ktN!-RYl>OlO9b!f7&*Eegt}o)d7oroTKO8eCxFHC?w<xXML*TDxa-K
z@jAVRT;sq5?oc4M4v29Suda00acIiP$})wo4ZHlmMS<W?-u`>00nbCWZLk98_*6hk
zgU~ts-kz;*C3f-`u*TV$L=0pmg+zs?B_%B^A6r-;z&Onq&DZnX)%9nOUWU<Q0J_lg
z@$vHh>g_dcJi%9f%*15y)*w1A90JXy<lwEpE{L~-4Z>)oDfM8;s!toVffISS0*o{a
z-#P90GeTk?oEVvCb`58-$h^{2=XYDFGhKFt02nZQMqf$NSy>a);3EUeCY&5;tejTQ
z<2lEEj<G}YT1(CTKqxW?qV>R6U`sTHaN14ZQ-&q;pS%zfOW(!J->Uz4;8B$9uA#fs
ziKjgwZU&2D5iTA%zr&&9-jcetwUo1S)%OZ+3o=fLHx-Re1O#~9&qb?Gl9HzR?AHnJ
zC1<8NMP5#@r6ndlef+ox5?t1l;MN8=uCK4eS@AD%`!lwfsOTTKcyI3$6UkRK$o6&p
zOn!V46&Gr=yhK}2K7nWRbd28QJF6G;FR$yq-Ig<<eef+f48j2oQ3J`xZy&KqN=kwb
z1~iLoC|eSV4(zoBe?Od=x+>ORZtt$|VO``XWWHNi^9KFPcO8mHj~Zkh9UZl+-Cg!*
z2IKfRE3CVgrvOnyTc#{4YYqidnS~aYbLwi2TEXUo%hu$vw@G#u)f3nG@FwafnK?Ox
zniSHn<|gB)9=~=)C&0%yo2-MBthcKR9B@QaP^7c?OUVw4<K&Mfb2B^7Fb~+0gv#-^
z41+_JAlpC}WlB!?A6^$+UHRthCsS`MZnt4KHehfpWqtg30RU4Ef!R0SK0frn+j6q9
zAiMl^t-b$rynq6Mp9rVv7}b*}$_4SIWn~6ZQW}Ls#2h7H;P{B}cw=vW&~L&8z-cp*
zp{GJjAOyOO0Ui)PYM^z;hlRD5NkfooI;6B<+`jF^Mo&veJecLSgRHEmI0_3xib}}R
z(bK~*_?^2w{S?kaMn(!sN)SxHkZ>bHx$|z1DgBVOHf7nZ<Lah(hM&_et!%$3&?NiA
z^9$=3NsD5>aMF!U&O+!Z!*dqJ;?^sN!_nGT;~iR%aGA-X1i7Oc><+v(2ah3*39`Z8
z7h7C@qwQM&gE)9Gv5CgAhcL&h?OHoJM$6nRG@Pr_eNMcrD6rhKy&>fXC|ClnM@=6+
zB}hg%o^o<Z$;laV55|1|9u?CbSKie9`wg$dbDRO>AHBmh0a&kkKb>9Im|YuIf{MFs
zBzV&t?TiRoD$Px-ib|ogvwHVY?!3BpF9iJS08xXNJI>$nA0e>gY)Q-C<l7K0^jBJ<
zcA4=hKRg|a9rHxDe;WRTjb2(qD*F=~Av7o#7xAm-yvWhe)s>U>3a~wb6B2Y@y?VmL
zq?#McSCe_iaI0qqi#}1T)o94W@S;=o8QQ<GWgkOsYH2|nQKFx>H`=r(2FhPIuXG00
zblaZEtX)%6W7KJ1tvls5Xvu(Ov-XEHJZ%P|@<>fYpQqNmekLioGzh9WzL!Q>^I-MY
zXMdSG_nAchc;nxP^~@}Li?gu#$DvA+?d%}4?BB2~_!FlNPp@Nl9+RqA4!*kjli~Ft
zyGn-Ppa1=DBo<0eggyPgy#V;yUu2N3{?F@<Ba}z~yq-;+*9nVXOPpb4V*@ZQ)ZTE9
zTwPIX>)XA(tbY$^l?CAR)GsR~rK_qM@#zz&tf5VD9VYy6^rU5GmJk+>x_WOP=zKo>
zhiYdls-*>luWJ%SlmfcCkKxm@yh^A>d8X2MAAXdyhKAp#Pxl}k?6$K+-)Z#!`rUv2
z{0gT<@wn$Kp~p{p^;0KNuBOR<zi$421b6-KJI3MaXZJ=X-Z?P>@%4Y+1d4JL9VYk2
zgo`9j^!xrIB7yG-A#lqmD?g#4`gL|a`w0ZriHmDM!o+_*un$7A{Wl(jncTm>v^ne&
z?0&K2^nit>(B**aHufzLHnDKAnGOH^)7x7Ud)(LC3pcuxf~2;#w!M8BOn+q{%so1L
zq~fi905PP;|MNPtqI1H;KFGy#UYl_FEMVnnjU~keQ76M92eE;EL#3x503qOG*EX21
zO~=e!ZZ{eaB}$P2HirLqZX;DGDY}Aptw<hdbN=Xq!ukLXRT|=de+uy9KL{!4-*{kJ
zvQ0_jMd}Pcxhz%}Tl*1TqeD(>TN?%z76df``W+I3vfwBK9&HGQ)$d4%iPV&ruh)TX
zvN>j8U|?;iFs~#G@85%(M>1q}d5Z+}Q1}-00ksL{6LC}wj51E%K&k+B$Hm4x9hBiK
zE5>BZ0(rUZu+8D)&6QhdGE@CBT8B^<fK=}u;)JOM!*5U08jS$ew4lwx^;&kfU#{WA
zbd9gkNx2;vgqS@h>l!1ObTU+wURwjzG`x-Q=B-;DQRT>f{rb?14N&ecudePdO{mMs
zMMk(Cuk7b(9s=2_zd)^A94mZkDtLQV9Cm^@e!GFybr*%Z-)>-;(ik?-kp1V%_si?Y
zH#BJb{fti(Uj8-V<_lh}M0A;MC78$D=&0u_PI1K(I6ArUGK%wXDrr`@;SsbT;k*dV
z7VrwR{{9Ujqv!q$vhW^Vpo3<H8bc;f)%{r17dv$ef(l~XdzH|Aeb|$-vLJbpgq%>P
zNetKJfRvMylbEBGgNJhd%$uIw5FB3B_T<WHYUIsWx*KDa31ML`aV;hs`}9tbxAerT
z1)XLtV8r>~lTAV^zh`6jvjXS<hw0uAe6TV*YxsK9^61AS<+{uIyUxb%-q&OEX*BeR
zo0+Wwd%e#7JP;&HFdyRK;~?YDWELYUWU=Z?|EdQ4K6duR3^KC#j@X#*F)^`19>Zhp
zUZmp4u`y-kmtpR`DepS241bnhRM2e?B;)I_lz0>#8cxci`#CuHj>^p9WmoA_p2|w~
z;bAZ&MMM~o3>3Wi&(%%T$cF5$ztGSk_Z88)#@|%vS;Dag4)Ob|qo9P_fa%QosKZce
zD?d9!tacoa$s-Hd13_9LuSjP}X=!|GiH*;Geqb4y(sEZE{T(dzJ~>J2yt{jgwECd$
z|Kjc~!?NzSwQmeiK|rLWL{z$@OGH6Hnu}CYx<R@@MNmmWy1To(LqWQ`yE}zvp!ZsP
z@8j9~Io=QN^L}`*PwQAW64y2VbB;O2dHzn?EG72Mp0Z1&$e&lg6fAQnB!(<m?`@P4
zIUbTsxK7<{s6x_Cw8Zw{8PP{JBUs(u*{>658O%{lj*k~Fb4w6t0AA(kF)|^c1>RV(
zbyQ|19nYea_gAuq4`ni6N@OJuj@m-eX575Jyo*m@&_S;VIVO$=OFdaeEkMkWjCw{%
zPd}Wd#q;lvCajg%&5cCe4V}~bHoB1SI|L%_1!j0`%I!l!Jex>gfa!NOLuz6$GX|JK
zy}iX5b8Mj`<K|Xc&`k!hcBvg(lu>`UPiM4a*BKD3aFmZukmnW`3)q&H^lzZJB&Q%F
zyHBb{!9ok1!%<RwUYjyY*^!u>m^TlP&_u2|QPTbWl{ZF4M#)aJ|Ln8x4U^#birtz4
zJrq2inlUmx-C0IAJREgz<m5gqk%lGB%#tki)O_Ywcu@qJm*?KTRfWy^QeU5czDF1f
z1>!D~{R*)Gb(#nIDu;n_=Q{>=f78M2{;%Kl4oEp2j;18R`g*Xg6b0^U>!H#&1<6jf
z)(Z>Cf%TAF^bOCfD>gbx_4k)AuV^-h;@Yc!3nz<5KqzHmRuY%?JKBH0bEJPx`W@-o
z7v?BL8eP{NZC{`Bdk{IvRn~v}2%&Z=01noiA08gQd-raW>4=iF^tZ4ua!SfJS`iVE
zppcN$jVe`aXnc{A4+2BySrm({NR|?Jf^gZ+2-E<=8Cp}F0pa2C>FFJE9!E#_;HXcA
z+7($|K^{q3LT=_XJU!imR0Ro1=Z{uPk=#XEZs$P)j#@4ySMIENS0_*}!(Uf8Q11f%
z<dax35!{vY3&RADdeJY95_0czbGJ^=M+w>T`@6eOj=CASxphNVADpv)`SJjoSASlq
z)if6jG;{~Sm#2lc%T}Pz1)7dd5?4VA@D_G}KrJJqQu;RdMbm~38d4Gz&RF;%RBTaa
zX!DDUi}Ulln?7(3jExaP=3!jSJ<7jVU64gwxzW(hHgsA~h|2#uHYG(26Xp5yOr@&x
zskj94Hj*`>`&^Y~OS#>w&P%nX3pdaSxO>LO-2l1e&%~C+(x)T6szC3Oh(Q7I!5>ty
z0noYF9`$D6DLEt6DLP%2iGgLZWZ2O-7kE-&9|vYl%(ws0!~XI^JKM8ASVOLMIS0U(
z58;T7{$#P^A%k4C&Z_UV8-8|GHaU&FTeRyi5C7BR(WtGv`Ks{BgD)tU8<W{4M&S?=
z7|m+m9QYHPY9uzLW<rCVh2>4Y{xgZjrWW-o2d%SD(7sqV9%;;*Vf*s+E23OOZ!k8K
z0N$*T!c}J1i8Wu65$68R-9<(rzo?_BbBKUq3sskX{hIULH;^<953{s@xe5H}oJJj2
zJ$*(Bp*5=<^YFg8In&?8M<W6UI+C;?AkCIvV554X?#ZgxD2$gYi0c3)Y+k<qS6Nz>
z)-Hf=&-7~%9c4riq;Uvhi{x_18*A<8&~SP4b}9vkI#>-Vbo9TLmwyq+noX8LE7uy8
z6N>BPOAQ*lf`mhXcGCw|YZPGlmKwCd$oJAo<nHf}V9{&0)E|q7ek1Hi^ff4O?GX|A
z8X4*8aGD|+wLEI}#iSt_=+xVoH?`4Vf~VX5=I!Q?aqWXa_`CDmNw{tJoKNT)NQ^bx
zM|=R?Ydo1ZnoK_mav@BTX9LM3i_AXMvU)v@Q5A;<C;LV@2EB`{7VqwJIn-C3Vh)Qg
zbSPI^^q0$&z-MT2;$6ndXVL@>Cp&b8B6sp2W86)0!~VYI0)u#y3WmPQp&`!Vr<{+i
z>Knlx2JX7g9v*qnsV<X~8a+^r;4X>ga5Yy_;=WKSEG(p2jccc-qnq0hpUw#B%z9n@
zCD~xHi$POQOhf{nQ7n@O>$PBY_9JA`=$yC~X+PG{T^v}hc0vvU(&jSz(fhooz31Ai
zfA+GYHnJ(CBNpfLGoA5r2_K?S4olN=$If%e9AO%(E?nJW>Ky0wD8m3>%|^%gsm<D$
ztnrJLLOpZDpu@OFdtZa?JN=jQlu}V|3boyVkk$8dHZ6tMsd4D&$j*Z&@}>66z7_d4
zaGSPA)o^lhenJJ_OF)3E{>)C05e(r&nM`)xDTd5~?YrjPaQ&D!$>(~&m<b;;K-HzI
zw+LyiQ3IT29pXUVNbA)tpp<^u()iSIL(PI#Mz+_(kN9vpVRNYa5ePrRYu?_<N{Yk_
zmdlr~41pjO7<?sv-54*I-h~7y18zn}vlDMfq#1#^Z+xxhYOyK|CFNemHGKV^62WS-
zG?{bg_Suh8JX}F~%WMF$%tq6+DzsXptd~blLD~%JLK*~Yu_5}4*UfElbg*TUe^pu?
z8}?H8WM$F?GbrOuT~L!v(^dt-?0t1n-J(i+c&DFH-9hpmNBF^Qo#$o~m6wt$NVIbR
zq~la4&=DO^=CJ7LJ9Oxv0}eIHV1?o#jFRAR=PR{!JNb3{5as7*3=$#^8=Q-e6BC<R
zE9}}Sf-gS-thqbRS$XA`*-&Yc*rM<1Kz8g7n0DDL-c_6Lc6_V5_LO&WZ>_sM%|OfH
z9wFhD<l)=y42L4aBIDu6^q&6ypTAo3i?XERn!z#(2dYlXRIIr6)cb0vvEZH+|HR!8
z@?h+t>$#jH1&Iz0?=p@QRLWt5;IcS?Yhpt0!J=j`UFC?$W4j`)fF`yP8IUzo^^)x-
z+AXQ5XO45P6wjGBRbbxMm&V&b;<~q1=2h5JTl*YUMIlRtKce#;3Qabf#!Mm1PN9;T
zrZ3Xn-|;|ShiutWyPv3r6OqHcj{9pJlXqP&YEwGL7CXY2`rIvz3;~<=8J)DjF^E4V
zU^S_*skKM5dGBXoN!l3<CQCNQ5~}`UdC$f{x_TCNX}Yq!;=wYO<6`&nx<uvS@pC>*
zQr^1Ynk~DafN;Y5_v;o&nv91lv%?Co9W8r-`vJW)a8=VO=Xp2>J@msQbu#!E;7-DG
zXlGYx*qf|VQ(Xny^%3oIU*32s6ZUA~>R7UMTb<hpK;-Dk9y&W$<!K35yR2JZOeY|@
zc36``tkk@5Q^nyk*7jr~?Rn3p+lQiI`AV;41eN5)VX{)G3l46X)~$)fN4(BZ?2?wW
z14Vjow?SC_{Jq<B<gK1Cg~O%oUa(BIN0o5$^18J%zpi$1+54VPc3>b-fzo92_UC@j
z?ZOIvfd>5&pxXhWJSjLE<66+;XG2jg=_@=>E|=T`{dZqcYhy$pQA(SP=he#@j^t!(
zZX07o<NG`nD1M|9*>7a6PkqNB1z-|SeD+LMu2DG{kCmNWlT%Aia=1*Z;9Kq;TUJj7
zC`-<YxOh0KoVwc^8;{_*7%<`4Z62HoiH@EqGupiMJvk{QiNkC|#Xsw94)L*>Mi@O^
z+QY0FN(j&ch29DwY@b8@xOlidgz|ww_AFzrTT3hbL~Aopd)o3?_f`9kXDQo)cbl=<
zKQK@`#`E2m;2Je%qmGY~st(8~F4;yVX|b`j&vmw(OE=a&hWlaIBwb!E{v12kQ30BN
z<n^aPcw+oB{usInw--$*xL`a9qLn7y-o8H0Tvx@Ka|QubVN#xQb%?V_^vx?Rwd<Ub
zM}s`^J4hlgU&uv|>vo1WcYFtk1mueb1niu&k5c%Mq+KJ$#^!mqmAi}2C>6#Ut=JFN
zdI<@MVzcqkpddEqh01F;FiMQO#b1YFXW=;$5$^5;ts?vpQZZu?f-Ei~p_*@{bF8eP
zW8kv1#bj6s5op?<;cNoZ3p(LYP9I*dl0X_fNi=lz>^WbKJ30yzW1JlijR(9f0|YfR
zG@v>HTZ|bBbpO|R4qm?wUtR5wPvPh1_wYa|F}<LidMkBkx3gzI`Ha_~zO4=HaS3Pp
zF6U?S_3mwY<GuwP6=m<XQLoi_&v^S`4uo;U{Nr_bmSj<&%L0N$`1|hwh;xdur&xlP
zntB--Ed&K-^mhpdTx+}FWDVq|BqxN}NsOCkteSJ+3NwaVIztqXTD8UcuVFMC;?gLt
z&Av<%apTOw!o7T*j1tpPk#URg&)mlr%=u^gDrGiW18c|T=8<*J01rq-8+VC4wX(L}
z7<YXY_DWZmf<7W7h7=2n;QswQn{^=%M{5x-<?d{gRe%~FqXm1oyUVgZaophd6l^ur
zNMj2ep@Gy*Ypz|DvS{dMU!c%7y;f4XH^@E$u}Zyq8?1|9NV<VZ0HloCh&bWHY`AJb
zRZwBKOtZcYRxXt)hXjPc=!Kl7h7h8ySwh)%ZOrnlak<}!J@6@4(!JKiCB4^nM{v1r
z@r{YEO!#sviFa+@3)4og7u}O($V*oLW3&vJW7D5`+Rf|G19HWB^r*qvu~?R&E6uVK
z4%+2`o-jT$g*Pmt9Qn!>4#z}{n|ZU8iwg@3%H^^08F;H4#>GZ+Ry%=2Rf#!@UYhRY
zU|q4dm(|z}UPnjYJKbMxQvVq!GE1KHSh;AquQpr6O8i%%$n4NgUV?C?<6>`PT0cB6
zuwR-&xLlf;U-tOv(&eb!03NuY8eB&kv!tygs2gV~#g~Wje%ozurX>~U_7S!k;))3f
zID@OJ;$W@7*0{Ms!dL`=o?t1FmysdnF_i%qcA+ANnNmx%TzwBbI8OS0pGq4e%g~gI
zHcCxSv!i({=#@A_YVL-+f{(<9h$qs9$M&Kw0qogrKYrxul?FDAjN}XZWe09{P3-PC
zj24Nd?AYQvDLVbIOm6&1IF{Ss|EB>|NA`d4r?sZ169bwJN>iw#eqmlt=p@8szlAU=
zMEm={aJEKt_vAPL=_2Jz;#}D+fQrLcJRB3_2l1hfc4FJ+DE{~Ga3L?8QBT-+w-vV4
zBt#__YWzjtfZ$PIcO*uqU0PcDIZtI@9dmwuJ^=gxW|`-8<MXFt(_Vw=k6dmj2U@Lw
z?u9K8hsYnt#TU$#=5-q#+4x>TeB47>$<+c$DoHY5H$gfHPO&RUfygmRNL#8wM=w4w
zaUz`yH8HfNa)Pl$roc_6rG5@;p5~2OK{Ab*lH|tch(_PXGIe+gmGYH}v;n41#^Rof
zaIr{VmmQFf1*s@V4gK$g+~dqO(-m4+W?4+#hIj_;>dzN)SVw~C4!&z&h?*L2@a23R
zO}l(}Z(^v#Uq#w-h1qze#yE}hwJJ6vj_lV(3Q9^ROa8yl$}rDR(oZnbPkdq5oMqJB
zjQ<FYP56h`Z^FKbbmR)9!JA_3E7vX*7ut27au2b=8A75RXe;|KSIcF8^k@{3{lZ)b
zK1B8@>3&OAGvD4nedX)7FaPWNi$;PmFNG&3mmBi?_b)C1|Fzejj`|bg*E-Uu7f41m
z&;H$Mh#`FezUK0E{r=_8M|%6N`p>_L{nM?iHMe;oF=3UX^N$B6a1!U8(=F7v7?{99
zm+yJeT-T;F0&zv+=B=;)9CGRGQ?V+ua3=@N^_nb5+M$`o4BxolFZj)kzbAx3KL&HT
z-sX!FF2h74sBl7KxZNIY^@h|52+^yTRc8V%lv&>clk_a~B4(uvLO%g;`?sf9JDG@j
z%@=O_J)Q7vQIL^)SwWE<`xR<>h043OhaurggfV>1aC6o{id6wO!&}m8szM<_=F<9{
z1|wsjf09v`kQ4!@u;$Mlm_R@f)=o4S7@Q8z1@Z`hR07is+coamXOfZJEfJqv0c+WO
z_HpW4E+G52q9Mz9ZOA!y#w&!+)ddE84U~W0MVMB|-@ANUG^EC+q&SB9+(-guE1+Gd
zZeP7Tn(|o`9TyW5LL-i#=h1bkSX^@xl_Z_yFgkg8AP<ku4Xjd^SxE``evpm^ofz6E
z_<}7XU_M995qFE6qK+)i-@p5erE<^ddq_k`aP)n```zhDEWE62{ZeJBrIsPP!SG0L
z@-g$l&}(YB03T?ShnPpdXmPM`yZfXw?8xUk;o1nAPwSr+t>&#G2>3K$6f`b3eeY5j
zzs5$50^?01>C_kG#=j7CgwLF|=;^2mpKzGyD^8BjLh>E`&<@<t6IvvDGYnVQ0F2Xt
zCxgG#?8DO*+<}cdZ`>D@!2$O)W|Ng8N~v+ciGT6_0#lUDv9u^itB+Byh3*tImX;T6
z$RJ5fjdyjTsvNR9dSsx{sS3j;ZZn8}hKD>$UhK2%(yFTus+)kdRbeWMnAmRq2+|f$
zUYrM5(l(^DPL2mg^+0PC2%QTVe5j?oyre>(m^S*V-cb5aO8oHH7zn5j$yPBNPbb(#
z`wtoZ``XSkqve758y;du-N$c$ya{{R-?eq~BQ(sZ2H#Q&`4P89SJXv!)ydgC@x{NN
z1BP+24}wtX;V=Q)E-k}+W4gq#^8+l4j;PUYu@DATJ-y=Md`OKCEh&+5Lt%&B8Wg!E
z<N5!Lo`r6cg6iEKg5lvx=XdYfV;IG<vu_NUmlT^Qb=6G^e3pbcpSAuZ_v6P_y}?oR
z%AAKw6Jav}K^g3z0DuHf-QEQf2|}QzbvNx64K8F=;M0dDWn`!t5+S)zf)Js%<#0QC
zrw2WvJlJ>zao6417XzJ*txxdfOW@fqF@~W+pgLrPV%^z#qo&po=TC2@>rnI5VTOT>
zY(w9y<t%V*%@~2mL+wzJmJWpg5PEv~%(4HY9KM&bQ|&Qj3ir@x{)^^i7JO<sdOA8|
zZN(b!m`t4Q^#JOTl+QXO@LQ~p^X|d#J!&m?K~BAju8QcI01#d9IqXEX##GeAv%_Sy
zBC6u$&*aR^UtM*-;g0vW0hB74P6M;b=z28fAu&09&BF<S%FqNSxQ{~%89sE+WXRJ&
z$mT3hZ>JlD_(JO%+_I#sxs1w~`!Y7`&z@uVaTKKKt#535UiFoVaSQk^OUPmRn2s*r
zw7myP9_E64Ad<i>ZD(b(FD|R72w9>_3D$nn``Kj{OnUnEYG;Qhkyb)}!O*dSK-#3j
zLaUl;-ZW`p;nU#)d^NKwqdsYdB6Oq+#{Wr#&fs>^v)7Gn+UE$kOcym5=wW(!a#~i~
z9gocRM}QKomuI!LXcW{);!V=G^Dd^$1qF|Pq~7zq*X*0V<nvv>Za#xO@@aX>Ypx_B
zay<r3&%56PhHhQF??hi2{T0CrHz)%Zd`{N<1b$K1V1{ssD=nasBh>2^{_uq70s^Jf
z>>b);c;zJ}4?u?)^UPJFgoB=*mz>R~CZPL~s{W|FT;NFIOk{i!q<jM=Raq$%(YJFD
zC1trt@%N#Sqm;k<ZmVN3_J*Sls&WTL6{7C_EMP*pBOTX<46rup`iDYG(eSfnYU|XF
z%`{~qqTosrTJnk|r8%NxEuL<+$xCs6^$ob4z-94wh)*z20=0zZ%uFRb4eW0z6B82y
z${vM!c(||X8|Aqd_JBww&mFE{4Z_}w^!Ko^<RxK|^Enh`j+RDAaCE4a8tNLVtPl{x
zfadcj4@di&l;y~^HQ<3`E{)2HiwD;GbFom00QQghZr^7<^A+OusrB{QzQz}C!Yn@s
zRTR@RsGWBjhz8=%;h*W<k#)#HknuQ!@Y@68+>6b!G7{tspCZzM4KvD-qw6B7yrH96
zNRN{)BqXS;{02ab{x5<33rt2B*=!5F+IKmu8&1oMkH0EWVlaO8^pH75h87_!JFhNS
z^(RDu&D{9qurM#tKP}<(uvSb?=&ss~)IN`4#yAlf_drc1`oxb)PTpiX&YdsS(C{cn
zy@mwDK+w#WYN&r?ZN;fKD2r654AK&DwHN38ZG$;#RRk;!_k#Y>6~H(JVn!fkg~w*h
zhl3>|VyjnL(aTS2iud<cos^ie8(=G#L+GPAY4P#!H2ri#Mo`{gp#57Wea#mx+)Bz}
zdOA9m(Kl~VQ~jtp*eNy}dY^xbsoV7#svQ~fJig|PW+gva+=ZMxWJW;+4T+ffQjZ=c
z?CkCUa3%D0vTt5@;;jTg-R^V`#xSEL*Mm@cH;@!s*|aBFzi*esJ$zUXaVK$fZt<j^
zy1{gjO?<A?CHfu|sHkXd>52DlI4XbV7GmVBg3!G2e0S`ow0|wZASe8wfMpa3@B3U<
z>nlln1vAS+4h|lEoh?`ms>EwV`F_u;Dl&{xD{8h98NjQ!kTrTq^0|e9QDwb)-;A1D
za<#8-8s=P3&MhoZ$lWC*%znTqC9FwZR_d^h*AVTkhQc%I01hSaBtX!VblafWSTmlG
zpdg>inRhuqPR_5elE=)<<&o@2XD+aucYA#D|B8!an5><^Vldot#MD6g%t43|990u#
z7ojI7U^>Ml<<puZ$6KI~iZ0jF)ioC?v_E2HWULt?gcSON<0-M6<fJ6^Dw~Lti%P|y
zARPSmnC*?<EkL(L6#X(29&QB|hknd$Tas5?lJ8#K+axD4YP;bV-P}Y8p;xLk_9dyQ
zl?#X!|M2h*NwblBT0XuSNDv1ig=p3MpX(6PnXCK)!R7c!G?@q&lkKR=VP8l|X=JZP
zIF4wf-}P+H9(J^3ae@-((}{W70cx5bhb#T<gM%>~QoR(wR8}z==|g;Ryj^UMMybws
zfzV0@xm%(BhSkDa6JU??6$}jwHn^>(!0~yo#+#U$`o#Q<3VP`dw~5$~dgfPQG^dai
z*Hi6mWMU!_UIy=<oIoEX;8*rHMNr3XYIUAJx}}c&8Dpcwye(U#cL7xJfc?k8!fJY_
zV#T`luU-J-5$a!gFY@();02f;ofRQIF&UiwfC_IOALo+5cd77oRX-=tPE1<t2(L6*
zJhvt)k%)d0K8*o0!4;K>+rZiE?eEr1he{%fQc9gpsobMj5e`Ez&uresMTHG%HY8_+
ziji^@yk1;yxX3i(@>lZAhThHwkHhd-0Oi1-zsDZ3A%U<0hftM+mF}NHDmENTRNPyK
z=9VMl>vPBCGnI103ov+r=LI*6<&T8JGcETo&e~H>W}E#vTi}15*Nl^v5+@LAXuQD9
zT!Gp!umzVkvD*2~Bky2F7}4|dt1Q(h>dh@$N{&tW33~qg@hdR!8xB_5oMjyi^5NA$
ze(<o2HIw@~5-7odV2_2J-DR}Hxh>=ueNFV9)yea3x`*Nru^9MxVrQ#?=Da%lm3;pe
zh(KcLj{2^?-%M}B^t_z9!d_(I1IIElGP0sIP!mvYWa)Fve(ph+VIHT-xSL3{<=R)^
zNa^q-=p{rhc0X_X%Kn<Ur$^kHyk0(2T3pTwVAv+3h2H}2)ErJ-V$dhEKC=}6;P@+d
zK}yeRz0GN-^`%E@0$uY8QaUDVcCblTIUka7kz3c7Vu9uC@6&#UMRUwRBkw$bf>g^W
zqo82eoe8$6%a?2LirxHQMJ-%sF#p_Y{``ll01Er_Kj8ND|GD(y|DLGh|LS*^uKKHD
z1KN7Zf0nR;;wBxRi_1MQ@bTaH#N<P^KX3n~GWz-c!+)u?zV34V*Dy%<0Hm8<5+J4O
z{-1SEml_?c{V!eAfAjBBIWMove_#Kve2$mDg3JFCl@P40<bSJ#ye59^*>tqEA*7}M
zJk+tCWRU!+2Hz)DHZeQ932xB|-U0WSnEW+02{`>O-;vmK4ZusSkkiu(zIgE!24Kkl
zNv#H-opjaQoc3%h&U?OFRS8Vdm!c*JBz*sOE&tCtC-}Mlygq#X|K%5dy=(@+t6%N)
z>pNh0WQP@T`Fel^^)&&~(d<hh52m2&A*o2U7s4(sE+FOj`<_V?z^?TExl)nC?>Yft
zv0$Ddj;9uOq_P^YXN84<G&H|5z}wp!VsFKwj{AN-f)e=&-$QEZH{fA-tud9-S)j+b
zwZDsxg$4f8Vu91*@d{gwKR+7D<qEV-KCs%oyMPqv-j{M#dx<|;lEtH+ccbvm`_WX>
zl9MM%R50u=wr>o@(dS5uimpHmtBu3%07+b&Mg)7NM$7;V=g+>72?(#Otk5avzpu&7
z&3!lZK+)2&pg_+TG7Y17ZOsQFk)gF=GE%7h&(FoX{JDuqX(E{6($aFVF()TQFh$dJ
zk(QL)fQ~0*RJyy{%TrTRH#ax`e%YRx`hyCU(-Rj31)Rg8_nCe*_0&g3cSJJnA4EAS
zW~&Kbc6#7db5#q5F9r`EB>-)2v8z-trGpoUHf?yITg`b>kq52Fbsn41LLEnFV?dPZ
zNa3u?J!YL1@$gd1Ll;3BKI;|nNf!ZQB6boE7f;vc4}vZSH(ry~&VErE$3P@R!E`<D
z`Hl($TgjMbV%X3?o$ilKN+PGAu-QCs0J5e7&BKRI`#WX0ZTNXPFpXie8PiU$QNJK7
zWGLQpZ=p?pOhXgy>~J`7%^^HESh5$$J8ETyQII!WXdov^4ztYVVMnACckJY5%Ey5P
zQh)xeDXEX|uTA*{1ca|}JN>e>_0!09TkX%Nusp1W`H=MSJS`~6DwwoJ=BBe5TKr<T
zU8nQi%LsUO+|$xT{5Dh#`%lhu=K@LSl=2~l!+vFM8$La_W%&5{mE;%3wgl*8P?>Lm
z#|?6KvjuJ#7#Zy!v1g)4Z266m{r98DIq%--#YH}+xzhKwQVBw(V5g=BoCSc0<)R_e
z83#u^?zZx^tS`}ccz9h_R^r|uSHh(o1m+DOSrVV>bkEF#KxVet_w4Mr?fn%2P|CKA
zQ2zO2w<zn#X^>n4VHhdBcu`kH1XI)7hYsHbKKnwOx3zcIM=eW<UYQ-%^T7W$O`Ion
zOQ3@;1QEOGa!=W8c@gcBK?HjiAs6RlslDEhsVlpSorZ(eqn`3c>NN+j<YWtUC0Vb@
zJ07gL3mu>v#J`p|QeZS2>M~s~_wfqJjOAYZ6+MxmXG=3#t>u@Ry0jh<vb?x8%`i(L
zu3DoZcHvUhW_GXXp(0}p8&jG9Ju$1D-KN@j2wk+)yf4N<gOIoV#l+&cV~ot<zfSW@
zuZwHo;WN^u#pwjfp%liaYJhtKI}ea*P5VN>nv7VR_Lk32z4+bVXUNP)#Y*>-jcpyi
zv`yiRWq}GAmGs$B&!>--XZcBJLVjVddht7BvR|2irZ<^_*Wt`+@>~EGm84YXy%pvk
zr{kx|5+u~)Zx;=^$BsLq90Mf+)q^}enUjc&(G0YrBExg%0Z;wR-s&?2@PV5Gi=~Dt
zuf11y%H{bj*Khk4K9O`a8zmK|FODaJ4^A|j<Zh9@!M!HWdqbp*^nBySgD;oUPQ;Ku
z^<C@>0&W;#V({wM50@>^dzp^fZg83RtizfB37O$={IH*#I9rPOIW^6U`~;u{wX`1D
zaC2~kL`^ke>y%wgA#{awQzX}$8XJ|0j3wLe%`ndlWK}Q-pg_`|VQR+i0to67Vgj9U
zGRVLVd6AZucFPq_CoxH^uyW7&YHjD?bU93xwxh#2Vl)PfQDF0w)}b1|>0$}8Zc7p`
z2JdfoWN|$`1L7yTmG)LKUp8NHy>|Io;26<*rAWolzhPBZQ}dl3qa^<<a}8uXpD{^g
z@8mkK3W?rG?u@jZs?`w1`{d4*u!UoO<MfQ-J9je(2YDTBB6y7ml>`2a>qNl*&4h+W
zN5X7ZyH8XykU5@f*ZtH6MFYz}An5eu#AGtBrM^c+JqM2$_wHS0R@PGMQwE9GN}-N5
zj-3&`qo=%0<Tyf=cH033<$*Y=9+px7=Zp^O<&VK6B_UZ~HV_g*$x2l&>Cget;}jA5
zc&xO5d?!MF@&mrjgIVZ#r(=`ONG^K>D5xf{+`N^y-&<})R{@+TZpZ@O5;ho32J_(F
zM|ZJn0Qb3tzRLG@$-^g-C-mR5v29j**uWrS92;=JODij56&Ft^C_unda25_9Ou5yD
z-EnIXiyotN;k3;{rEEblq~5?@-K+a6Eh&XZ?_f_5Z84g2`Cu)Kr{dLb2X?ryV_;y2
zh)B%$_a-<hLOvGI$3R{hq-3`{5S5{522lxOjNls@@7--LUaxqV5Wg{21@A_6wko&C
zt5<ys(UcZzL)7V>1LrgD!f)u;#?l%#cyCZ$xrL6dT<*liCL}9Rl?k7}=YKaDdoKU#
zf-o`Bpk0nv3GI;P-g`dMtH8$e^!J~x<{gC%o5y-%I6;qZT!|YFx%eIG@6BSOBE^Qi
zX&+R-FNKDRd~eR%^&{b(8Rr39W0vW7`RRCT2)$}oy1dsu5&I~c1-E^x$@<DXgq~1I
zZ*3pvx~z+W*2nWM$db5VSjgTDY@ien2Cf!IDQ2s*WxSM?o!yG#y*qQ)a)H6Pzx+`X
z0j!|}?N4eeeQCdY$kDP@$~ML_*Uyl}%5Byword{o27CH|&;H9NqJ+n4#r$yNcaj)h
za6f-|jld~;Z*sfoaQUn<qnQ$xAQvnPB!&Mv;Y#Hfl(*IqWr{44>%K>d)bAy&sY!Qj
zOHoup0wFK2M<d|m<ei;;MV6qx{v%CN`re)uoVutaM`$oBx3siO67!b9!pF~vj|T~5
zTw_6MDis^O#0$0Pv{3M88GcPne3`fN@#9s)#E&2Oe+t5+46f+z=cnq=iX!pi(nB{v
zD<qzP7o1ww=X`bQ^qs0oZbiXrljb~3filuIrKuIu<OWW|v;G-hC0Xzl6&6;zDmq@7
zIn;Mc+by)veRb2m?p+Q8wQI5H8~oY}gtqo;9cSsce;B8ZSfWhvD&%cO19Cbv-WH!d
zQ;1$d+0$o%N+>G9@hWW|9#Qco=(L8wbo=!BbNNnxS35-X(bOWqm~oMi>H@!iw>+Gf
z1^m#=-I-)-LmoEkJ14x0qH^~=A1}d(T3Vp<yk1knld?KO`qQaOB5R^riuJEaN*3DH
z`li)ur-zBl5O@nVsvR}RIb>#GVrR*iJ+CiN4mmK^00UA}8^=;wx}gthHc;=(w)2aC
z%Au8hpF}#c;%$>>lI1YjZtKkUN;^;;Xj(;qN(RHztyb*2cLBtUgX=#t`Tk$M0Nkvk
ztl=arWdnnbEA;@l9Vja9I%gjRGS$6~`Std;v<vqZBQCBt0G|?iH+2{OxTB1;6`s@;
zo@d-cJ~ds3WGDp4NO$BQDBKb+({6jk$KSs?KVW7UO|fKSNL^Yw4$*H9c~}aW6OCuF
zDV<M!@AEatp@?#Xmq(h-Som6?gY0$f7Kx6?*X{kMd<<v5kry_x?`+vOrAq)1M=z$e
z?PrnkbfY6E<Yg;^f`iW|T0)}8Am_FzoPIz7?`#?3>gyIv9NSc-5SlW~yUN#*KM$lQ
z$+`gR{J72WFs9IKR7Oh57ToHAHM#Q;o(I&D1nC6Zoa}mj{yjZ$^IHuB%X|;umKL=L
zQHGF&i*v>_k9rH;%NH*f?HN2-vM`r=UlVFyKmg0j2R4Ko1oPu^?ob?FvD)sj)*zck
zwoJ}f{K3t`B^gt61dwVY+Feh@yF~b;`?IPQ0Mme-E>yi)4Iv}Y8SN~Jo$fHdFSu*T
zq8>#=o|PIEvOj3OK_$oSx;--Wq3V#7yDqqEv#Pk8Z}4q%V{^Azq5-y}=k1{YfH?sH
z1)XH9WN7l5;9D4(iSI+!R|U#`YekhL)Sh|Rdiac?adC0UIVnW<j@-}dSBGDBi$U~D
zQqtoJ8&lz4pzs68W)Jg7+feft!z+yz|5;OW^IH&a4Y5pG=bZ67JE*s7)o(4|N6Mud
zjOBa;_(Y<2|H1jY`n5bwD!Td}m(vroGsdFu^zrgSJ-;ef32|<VU-VnO_~4v8^*|p&
z!waTUAN-ZJ4In%z^^dFfh|mf87Pql&S6F(*uv31SNY^k}M>{_|Qmu4)#LTQDD_do@
znGNKrW&N7+aKoBs;~+0l%o?9zE(Q3e?PX?H($%Yc09uuJBLXt(5CAsOaNQlYMMS<J
zxZ!$Bhj^Q8qw+^Ws4d6B*Dr0M+)}QN))c!T2KtIQBC|rn!(2(#4z26_;K#E|;fF@I
z$#AvVuP<cQEBCfL@s6mMy1Hc}ElGp3K)z~D&=+$4sslnPfh$c<Kb|2>3E2zwEV4q+
zr$2uC)>V7XyKL*ca25oh4r+rmvTLV(J^cs!XnQV)FJ66#<4ZZKJOj(@Ku$}UB1XRu
znb?aLFThhrAHkv1I=@?2q8wr~|LYDmQH;8DY;rOo2?;F?g{W(MWk^qNZ%|N>ofI^H
zp`)pB4a4xb+O5Sh-!fU^zO2P-?p9j{mGbDIAbLtl9;YQFTwEPV69R%!oBNRC6cQ9f
zFjNx~oa|s|IMR)+2c}Sv)s2=I>1dfi#AJ!X_yEd&7C;4<?dyM}E`?G`@mlO!6tS|Y
zpd9{gSNsgOZ&>92G3kE)-1F<#_O?zA*1lQBHAwDjXnz)*HT0afU%qWYu%&T*!ZEa5
z%_^3Mnk$Gqh9$)(MDd$?jd@Fyqo0G-I>g9IMGeWfEdrVkShS`?g_c8ISNcL+c7AEC
zd#pzcFs96D0%i?zBseyo=H}%wv#_yu4MP6;OI@LXQl@NZEt^$2^YhoEqPed1+`}W%
zd;F>LEjDZxl?kUasWN&PuC8P~n-04OTN$n2p*2!m4TZ-yoIHIbV()XF?yU|s1{tx-
zPFBAzf8lLJMEB;2WqlwQr1QL8OeFqv{+KHFCYo35<Wc-_@3PcKHL$phR<Fhyq6c01
z?eO@q(|EDgMJ55ZwRPb$*IQ}@E~B6wf>SGJva;gsh8$`Qm2+%8kU`+V!6BuCjDhp}
zRGRv0Zy`qGjY2_!mL_!^mFrO%L@$yHx(68*|7dILQKC`{W73HX#7U7vv+TuA>2$0H
ztk0&i6W_@R3~KVlqByP95D1rny<6l0pFe$Sy!KhLBZ3!h+uP%(etkcNStw+V*DElW
zRiCexUu=P%r$pF~cxGeTKu@_d`-6m&)72)Yv2o>>FEFc+73gDt`<Z9H8qG$#(Azkl
zQ9{+r#M-6h^5{=@K)kkqB+dLvWy%iQYM;SVU)acAH29{x`aIKr)GVE%2I1=@RhSY-
z;X@UAdMowaZWyOEJA0a)bHG~>QB;he_|-1)@L_yoQ<JuK;_wYz8Mzm6A}UVx{j0XA
z>1%6|wY4x%8zkWv3Bph@(ofxA9(JErAt0lMF=*q>Jh5T++_)RN1w-Z>;iZvUtyTV_
z4w^qkR|`zIGlS&^PI<2RS^!)vH*B|t!x@~J$(hrEqfG#mX#E+)aqx8hDxR*jq4~w*
zB}^!^_I}@}q3}hA{dIv+ZG5cEJVK#;i9E*d{3mr9Sa1_>G?Zb!HPnB7T|#=TDSG>b
zD-l;20Eo+=4wbGhwmc-`QI7C$KnZe{X&~y@rydY5TiOh>_y+jzC4Hmr-u(z0nY(r8
zOoOR$;#kd)wP7|^Zl+<{Q*3QH(OhiQd)A!g2-_hQ*9io>snd$F94sIK?=zX=A~J7g
ztnWh)ELeJnqa^|fX?Jz(?;E^!cL@kc?h<xjY}I8|BD)i^B670l%YAr=*VdIvtaMpI
zCU3cU|LNe>l74j1Pfurq_^ibs=^Mr!A8`S7|JG3xR6xdD?pT783kbyVVxY@(k3+OE
zrteAWUMeUaA#-hwgmwnI+Cq(<?xd`jwN(+$9DGCA!UJ*NU4J$j9P@qS!m4eYMDo6A
z!;VGI#-?c#Qi$u6p70Hx^8iT_B@Rmqm0}Ah;P|=FdKguN01+K{E;qz?6_iL4)<wW`
zQp<_%xh^4LeE>@5d;Nqoaz9+%Z${{R`Erx-4QFrNL~#6fV7-AAA*jG6$MzY!HGP;x
zT6#Ja&5wd*lr$}4FpV}yQa*m%+}tE}kHe|^Y?-&*T3lSbr%zf-J^qW{d1P9kgi5(Z
z!5qbI3q$3uuv}nJjmZx_MhH+}UD{>=2_$T$^Qta_1gH_K{&m+JF##GmP+>Q$#J+tT
z^#}6$#G25rV7)r%u=Wy9`_X7=sv7d)tF2F87#c!E>KPoBaKc1I5u@)JA<oRFd-l)H
zoK~*OaC8>Cgw1jeNFzFa{1BHAOEDlaLW9zqz#uKzhp4}&duM+?MQswGai)3<S#R>5
zzd)SNExT^0@{|04k_~Fs@Z{|AAfpny!{Vb`>J91z99~IZ^B0(m*bDlPD1A<dV}(I4
zl-8KNXu80NclT~^K!7MVNK(MBlJCTY>~((EVSlL-AXl2sW{~3w>Qpebgcq}NY`Ywi
zedRF~v#@9#wS5K_DpvZ3G|c8_H(LveH@RQc=!DZVGOCNoCPe!L#eGnFKBf2OO_+@G
zemBQd;;1`>S7tN(274Venc56pEktRG63(#2Z~kVIZLCGHhY1S=8K%j$e6jFZ3Vn@A
zctH9T3#+aymYSJ{;wf`${a9ehgZ`&x2il;HXb_g#)g<(=)IihwKFoJiEA=8{(1hNo
zAB<XvPa1=@6qFn#b6u2BYJomuu)BL>xJveW^8pkdZ(SJwG^qcJ5b7ocluIzaAmOn;
zNF24-AkzR5AGck0J#XqW+kr$?M+`qgj;O0%%^2vzFNDMdf6I%Z^@_+Yb|Vh4vabO)
z$!4bSxax*4H4V+)>Nq_Mi{)-{706$}kVwoiV%>2z4|N40oAFfFkKpof_~oq$#!7Ny
zYuDH27dj-;_tbC$EDZPFrp(J3d5Qe^+5bfQTodp!hJ(q1EQ`%hJlSbU;b@K4LL#K@
zcr%HX5C)hxHPEQX_514$x_gS`m~&k_$=psdCktg&RGvcmOxODfHhH7m;m_cG`^_tD
zSZv<50Z4scVs?Ev{Q`}^pK`F=UzBMi^-J6*=Go!vd?(%}Dp2oLMpOpA3=?#Y*i?zB
z4`<bwJBYdgIRNqEafk$z_9!A*UH`BkLDz5CE$Atq_$AdOW%xfT{ZK1uf)EETt&t;=
z3Jg;yY{r)2G&Lh@q(*AtJj+xn2xI4}iG6#fKbSu-8mCG-!Xgt80DLq;LPO~E7Oqz+
z8YluNhh8;L4J3(tHE-)nr+;md2ZmC;<tRo@rAterPETJE*ZJb-*WJ(dmPX+9YiS*M
zWF)@FJ%<hmti{lXZ{NOv94&e0KO3ad#-!+>dLmW&<dE2Bgo{h>A|8UlBlhZx;@koT
zD`kJJ7*&2jK^p;40447u0VPpS+eP2}+{2IbdLC345!6i8tZ}iX$p$^X$H<ea__;f&
zveD|b6+7`CYqn846hPtl`t=VKRGl)X{osTuRUg7u@g{AZ?sRg|-&)BbE}A#JJ?Z4-
z<N`xN6wjZe?oFf}{dRl!sDWnH?dl)e^gB7zR5<u9Y;~+_X(l#l*!2Xt^AhKDupUq~
zz7%Xax|@f3-b~9GaZ~Yl7vkZAkFn-IVexU)>InwNKTSHbay$07eKXJhPm5T3T|d0=
zv<aI7>6{&gKG#EY)Zgc*KX4W4+=%+C4MgIPbhMP45)D&tA`r`88N4cu{$L6&PJp3J
zdf)J?5aTp3xy)Thml(1pi&$ZI!${A_7*7)*O5TZlX1NU&ji$T6=RHRDOvF4`h`~=)
zCXunQ*1Nao{itQUIf$1=hH1Vt1{kF|7?uRJ&|*W9V}FC|mY8ZQs$?BTBV-h3&4lE7
z1uB56-aY7Qk>(pQqu<Rx`pK~PLW50#KFa>ejZKCAByN`#70boua6-N(Lw*8}M%Rct
zqT-8<Cwc7Nl9CG|hX;SVlk+1V3k%UXrVeNnpR`=q^bYZJFz$274~~4qfA{5!=a%W7
zD%OAK<lZ;@cGts_odapq<?nSyC(rwNilfDVU!=D@y<?V&Cf@4NLhrTTC)Wtx*FY}Q
zd%jO$X-tAdIQEeh@7$B^^=!7_k%3q+7-d6K5|jm!5^G_kaTyuEO$6gl9LnKolXDt|
z^hs!x{qh@foYGfO;fK7JYghSpQNh+#VSW6;{GqFri^41YP)|=Vp#v-k?eV;!%*GvP
zZC$x8h$S9$CqSMlwy3N8-k;wAsm|v2!Z>imZxeP^2vjKOCP!{_QjKiwqtOw(3tWLj
zSP(HTeXE0$0PN6^QCgDEs$Ol_u*g^k0U$m7-D>6f#Sjq<c<-<`Z+c{87~D>m`+MS&
z;6RrW6H6Ip&sJ8D{0(BI8yGQAz(eDCd8oPw%%(&okldHDw>g>s73A)~IQSEVg#<~t
zEj)GAO0}&)3)CJ-v^xk-07%PZcewEf$$pbRew<2hc176K^gf$od#gKZo<(~z1ZzMB
z+e0p{emIlSnI&V&j>xGJVUpsn>a4_O=HjrtvX86t+4f((fKk7gaxu|YAb|Rp#H_4A
zh0pom<9{nL3xtaZ&;YF7@qyhB1>VqDO)A^2ytP)O=j1R=elP_0#~VEDYGL&i3Q3`r
zm6ecmzOy0GU#6uDvbw&88k^q-@y9GEd#ePvBoHCDkVT}3NM&;EZbdxufa<HMiPCtu
z*mfiHCx~%y^tx{Ilw>C*QN0d>NDv6bY%?J#(A-a!BpGEjF^&n0%y*hcfv6aeT`{T`
zb?>&1{`j#3vNWL4EypPoEWoy(B2FlqkJ8FW^^VKlN-EDnltZ*br4fgmf;<l!c6p+{
zk}wWOLp8PY!Z0*q!eK;QjyjSF2{N(c0jWXc_?MYm|CL5cXEKt~sqR_Yf}m=IPULKk
z_TH<@>n|=Y`9XQ;I+%~~-u!O@urt2Phu(ONfVeURknaq73sBf@U&WYMx(9cmWQt}m
zfyYIE|1O4kKB@p&NE9iFkc9ml(*dG62nq2zI#g<+*<`bqLWjQmNDZ9p%NR6ciR`7d
z;Jbtm^+vI}%%z%xBSelPTeZUpf<)ccBNSQq+~dK=`_mh$0&Tg%q99~=vP6Js&*$*T
z>)SVJNmB-%6o}vIko3VVoAoFJ+0~hQhK@Xc`@;Vqx;mGF8tW$eISc3O#Ut*;v&P0o
zK+%Z$*2Trg|BAq)F?pW>Z#@_#hn5LsTQUYx{R0AkT+$@x9X!C-hC$M!E)c~Muje3y
z@;fm#DK+(*Ml}n?O>(r>Rz8*~_sGc1)TI(X&JCOHVn*espYy#r)HWH^s;jl9>CTVQ
z&`|BLk=@;O<Ym0ws<I%fCnQ=eqGa84xIQgRR_k&hf**~PhIQ-#lAJQ6ajo;byT18C
zDy;Q6$teV#gy$Brwzah-e2aJCHF_lA49VS~t;Nm!G;<p=5|tu@iy*<9AtEfS2t+UY
z86m7T`c`|Tqcs^~VtVOAfak<c=|G5iRA9(Sf5XJMHCv^vWpX^#-CKHe-H?7=z;s83
zVx!|Yr6{6!t+lh$Y%tk9qYcR~<S*0)>4>k6fLL07iOSB@6vG-nO!Ogm8W<SrD(bJk
z#^rN!bHV?f+<|pod<|~qx)L$9fpPL^i*O=<;*UO*$7JtjNdIc_kDsk@IfuPhbxGJ%
zi`{V{5foZ#rB14%GWiBtj-Dt3rbCkGQ2r!#X&<NiY%o40Su+9W1+>r>8I?p<tqoUd
z<<S3)=JQDf;ZtQK5Vt4DY5F`$kL(QnDkF`(bS37s=RbXF8xx0)4!h~_`YQet?YA*-
zQosm?iiRdQB4RW{Snr>AT<X(ZY%PNKtwPICCzWSrMkXfW$cn%T4_ysd9JI8vul~E<
z@M~P_+~L#uV7e53o7!%5up<Kf{wI(6BU+vae$<5&(2s5Tts?N0+(T2BYC=BAp>H5l
zxd(=9<AZLiOX^^t7&6yJZ8nsvwM~!r6I1jcL#)8OGiQzXh)C|tS=B#1efkDI((^Yo
zhq8bY3jt+;<lk2B)NPE^yKor{iZH!X4A2c@YH9<N(#1!)hwk(q@jj>%kBXi8tQTtt
z=M}lPa78#=%yDrkL7wyNV-WNfN=$nBW%$n~+$dptb}fl+9pU=3@}#Nnyn7x5H-1^^
zqp%NTZNdb?4i4dRI?WUx*9WC~k)Yh4i46NbQGNO?GJsoS?557&%`=^V`&S!8FrZ(G
zZ$9Ve%fQ=zSvaI-ztbS8C53+Xm$b)0_V__yAjhWc=yIcIrJ<HLGz?Ek89YW)+~Bh#
zCMH%oR{}@LxOyece$v_58ThK1f*#Y-p04yq+&&XRbVCeMhek@t`qOtyKMekUZb-3L
zX;`N0PWIeQ=}8>AUcQ0Zd{R;jr+sm3Zf)I!q=4%BGK(#QMa*Xkf-Or;GP^It(=)Z0
zbpe8^@nkycCB44fq|KmWk+#3jYtH9zmf6zA!Rie6DQIBqOs0IF{OotGUj1or<Ex|0
zpLYo9xx1WhZJlAy(6hbKV?x#!Qf)CYSCKt|by3*gCC$OYvOHV>^d>Wyx3`9?%NKz~
zidvS9Y6@C5Z&R9@nn*|pnWgRd1s=ggX>Rd?nuBrEb#45Himc+~4LH<4@#>i2;9d`!
z&Q>~{sMvU8(qC*iJ`&fjWRz8$W4&2kGEi0W5nB*hXR|8c+s{)<#od=eH&H+CoVx7%
zw6xqPTO1?OjGj>M;N=KmJgT(b4PkubsqkG?r{dr~Kr#H{$SAOZ(tP>y30x#5hM6&7
z5C#H_I1KE6_TU<m(U)@abf;@_0L>pfQSACtS#(TYgNKJk_wWu{>*~&Dk}@QHG49`I
zOMA+?rlVr)1e0XYz(w=Ac9+RIqCV<~stNq|?eX`Ygnfq?H@D>30W>3(0Uqg*lGDhl
zuaCG~r!6!e$_Edosb(1T3VA<tEd#jPYr3An!Of8*EgQ*>Fc$nz{L?V@GBJV34-*MA
zt(My<;h3Z-0Gtcu1{KaaI0^jyvDTY26tTSVu<=8l&$mZ#WUnK<48ixtOGbuZ=se6+
z9_`Gza*c-D=ICt7{{rGXN;Ze^u?S3zwfi8GBfj5eoi{KvbgVFs^sk}>DK>29HfLm1
zlm~{jCQe-Q7+0@6zUW<id^0`8Baf1U0~<wL>aWtF!hHJ$?sxO#LPJ`pC`Rtw{8acH
z3nhsxLCEFBaXomw*4K<Pv$BR!h5e#f+1TPf@rRj$Pr%&D$^)I`<!}qIQCB&(g1?Z1
z<DKZF={XF1J!vGPxq0lQYy2O1ob4YvI4~?B9_ldK*>68wn@*Sl#w`IM;WPUa<H3z<
z*v)?NYNnI7h}n&$N7=J_dU}C5HHXLmi@k!C)vqtp0;wSvlF|Ekjvzf@-tvgbvW|&X
zJ#u=n86D*p%{iJSRuR96`8#Nn?`ATe%23-oKc!INzw%HdR+;mV)WEMF;yyfoKqdDB
z|E3+`+|{_a96~mlBY$;a;m;PR>{M7^8<mUC#SmUAL+CSeOI?-r-(gOyUhM?8C0=qa
zwucYXlPidlhzg5!B}!bJ9fSJ1ckwl<(N~EG2oP@1Ce-ex1>Qv$!fNE?;p+LA<nAuV
zpBR|_WB$0sH|jRJBV^PHCla|stids~O18JZ;xkTu@$s3gw&Y8?Czv4-&06j{xdFik
z|A=OgSY@LhamFWTWvf;+N!B9vK)gxfX{u?a7ZDIZaR(KBZ$HR=dK!x%+nsjz`0Szb
zB5g=v5n2FYn0UwZJ34xL7|y{^PyU*3YHBFByEu%eWJ^q=8WZQvKHd`94ZFzFD;*1%
z^gMIo<&EA6y6@L=V5}L>J(z}9K?EQ9_KN&<WMW8Ex&O@g$vWmWGXN^tZuAK;gaFuA
zt2bCRrbz!T0j{!ss7H0QT2{Deha^Uz$5V8BL}v!ZKkH69e5b|>)lmYKmlnToOi)l*
zI7K2N7+{tfIoxq_Gmujq7B=j271cu*oa6BQnUEE|UfqA{q@q8nR5V8V)K0b3Y;qdf
z9)fNo&JMPnogt*W2QexPiV8rh=$p*Za6_5EafKoW@iig?jU3CkCeM7k;*j|5p|G;D
z*hBwxn>j=UM6db{4Ny_}|I`j9A5$fV2+R5=S~jC{fcH;y)jolU<tw<V+(lJHN3lkW
z2Z6jrru|PJGMDRk&7_z^xY+tc(eJoN_Zt67j*tkcFSd~Z)?#7L^4bk=De2?{R)B2g
zyQQr>uwAXK5u2EpP*Ottug$^g=y!$nVaF#hMv?McTpWBrPA+fVfU!PG%;RFXI^eqd
z@*!hRd55I0@sk&nose_QZM)I);hOO2!Fru<oc>Vl;#^umV1T{>6KqO?5A(vp3@VDV
zY}Y3`=PjrUmijYjE9mDRK+>{>wYBN^3QO@L#!l`+vqG`*a+P%Ech6%2e4F~4jz!-6
zI3RIc`f?k6pM-dgKw85@H334e*YbtwIUI1(-<s*2x@Lsrx2=yB$Nz)6K#IMRwYT>;
zIWjjS^@-<bS}uMf4n0EPq5n;H`#@o7-{)68>|Di0ePma8m$KlSXwnF(H%g<XdAB{2
zXE7t~1I0!HclHn*dOFc;>2^lRpB)|Ph=%Yqq_ni36cowg_OVfg`T07nkW3d}V0kS5
z6-F&;Y7$qT<05=7veVLNj+&5>r0+TzU3s3?y6qLuzY!mw{1QEzzuSUs8HHNbS9&co
zMsRcxL1ntz(~B;|g#Fp$1KQuMA1M$m^7B8-uT~fovvM~Xz)nV~-AYvSX6*^-->*tt
zfMUSCtABoeVIk10`9&5YqL2BXf3;O?$csfGN8IGB?fo+TspsQRi~4zsw06xD;lE4Z
zy&>ci%i)MV+}np|@UMyIy`kWPsl_?%ZpLcy{o2`O0-^}Qd-s@wQ2!;_eO~snRTLl9
zJvn({&x=u(_on+t2)g|GQrpn5PVWAn?*HYlHZSmCO150XXth?3(zEUq<?B~-6^5F-
zE#_|n{@U39qYNl29YezoIWem#t0VFGe+z`ApS_H)T(Q&<C9|3e;#t3WX_5T%I$9!|
zI_k<VXj?D-<K2Y+vzDghy;~<fpgxrz+{tJB9v~adhe>apfgh)VKrnfu?CiY!ga_1%
z4FG-0rHh5+Fm0|({Qhh>0Lr=oG!4cEFcAJV1tKAJJ-7Frn%cIrI*5*m$vLL5Hgqg4
z<us7l?a#P*FjpglF2+}b@{4k1x}n9wo?znn-(L#pZR;U>-U6O3%E^g_MvmcNb`qV_
zG4oSe9%YIkE*_rn(D0|uCz*)%q(Q<jUvAr#KlBgP#By{TZK;zgD6r%t_JzC%x2h<2
z_u~X%sYK>96^b0iP8K$LdN{n{HdPVfRaK=bE*@D@q6aENpnh0!atEd!9S@|~z$wGb
z#?;Y1-!{k0H;GbSUY=foPeKwA9!~MSEh>`O*d!AINFP0lFSNE27x%7OwU=Q?7)gkW
zyHeCVZ&9j}9im5~L>|&hX#e|Uf9YP@4oEIVS6=OZgJ++ar9iD3br5KM?94LNEI=`r
z^9dj{R4<$Up3>RF!tC~OqnC)E5g?+_BY+)%hlhwm5kF1N;o|(!2)a_L`ecL+&l2bb
z6MA}C8Z|{s{K64Uu3o19>IEQ}G`}`BH@A+r7wPN#Qz}mN%6C}4>&sH6BxCw2xjY<#
zbN!ul*|`h)viP$#9Ztb(GGFB$(3N_-?;vv@hqO|$ersxOUTm9(Eqo*~&lL!CQNd{L
z{Ejy&kX+SUZ^mnBszyc`I`$djOsy`z`8*Q%ioCCWycSfH=n?D&bBMOz(+zKFK(1qD
zVPV|&qqDg=oc|mDDIN*Q?7aNoWX=_2Tz(BT{iQZM`fzr$f!8$taKpi0@i%EtP-s7S
zwohdn%WoJQ;5(OyBV<k{B0_@8txfaQODgt<hv;pe+r!iJ+uOGaTPJJc49j0o>E%7)
zK)bnRX+>A6X90I&Hh#x@=QIIo&+K=8)zxJ~sdeQ_HRk<i$#=iL=5LY7?UeL|6yv>p
zldepIN20!-S$`GxNb)bCLx0G!=+KuonXDSptJlFKeZST6`i<^^f%xlWPnKRpjojap
z5fk(3s6|Wu)ulPq*DyZLM#DTZG6MNB{K}`+l>tFfCOYzNS?UcvAMpStAp0mmOKT?I
z(!!I(`N8*}R#sMf`}_Br1Zn;5^Tr{k8)$34LOXGAX#FPmb98idI^nJ81H-}X*!$Fp
zZ&Mm#a}zvX$`lG;D&szc$A`L^#Ly#p5#0jW^1bwP!(NIx4^>nm4NRh+_zl>s4Fxw)
z&$ruJy|eqBy@FGT03}v^<<nL_RL`N+_l5URbwWRSxmiJtw%o3Gc1tw%&tEOwPJFQ`
zZXvodgb<KN%NZ|~;Je~W%Ax{Thd#V$kEZ~jHXe>Q$TK=5eG1ZE+7thPD^v;dH93i-
zDT=?#&OnhTn=D!5vj6nAQ-@rD^(u$EdzEI$a^+5mP7Re}ciJJyl%%4#jo#{aWf@WO
zO?rsqDxBLQn3$O@tj#fQ*-N&;P;Z%l0G3YWs(p_LXHeH99UDC_bN-Yj_B=&01;tm9
zpWZW735*Yvpq0qN%AAO9)NeI7Kr<x5{WGL(zEy&1{4MIn6FOa-S?b%k=5EYP8uPSN
zAqG<6?6<ZK&5q_oZtm;r8m?>(KB=7?Y%B0BDzfgrKg@t?)7keJC??dQuYy2Lmr<P%
z|2Z-=bZu5P2cW!6OnDFeUrDJ0NlD0d<NDVoO&jI@<W!w9l>^;3V%9<56WqKC9<Aq^
zHJn7NS*s6r_b?R3CjZfNKQG#W*tXFUx1kUHbSIsg2`y5P-Tjg-Sigr~QwEjiW%=v9
zYw7P9-y*ec{OHEkYW7|lN$QP{!S8D8R4O`5l~vz22jW(;3cb?V>hz-)FIDTEzA#W?
zalc?F#hYHgsns?>vWtH<2ajG#29N&M7ic#oqtY&75z~QwvN7>7w>bx3|71^MV{hQ#
z{ja*-Ix4F64I4!eP!KRE$ybz?mhP6WL6i<@7#gHO1f)e8q`N`7yJP51VQ3hooAapn
z`_B5-Ir|Tn3m9gzXYc2^@9Vze=YlL`S=TBiHZ}t!YZV|iOp>FMJm6bc{A94XIawK*
zzLAk1Ha|xrBO%!SqPghfrDbJ6G6sBkD&3!$vs-LD!L`?k>56#$!k$RSo>QbvTblB_
z%Mpe=B3CXKf=_rTB$NN&`{Bt+J13`1vXGEq8o!jiz~dYUtnc9Z%Kxx|>T!@e@p%p+
zXXBZQ&Y^Nl-}rcDBAg}g8TC<p19TqSVy^oJ>>U;SX6hOmrE=Wdyl7|(PL7T*XJi^&
zlAI6=2F0IqHL5t$-^9`V*@NBk03*~9Bq@Zc@9p#vq%wikX#bP*1EEY?d;4mKZAMfQ
z&|+l9jAqL@*x0-&9LkcT&(fT)cAjlZe^Z(d=CEM)G~eJFBLZiQbL$$MSIL&$S}ewC
z0A~N^zn)N2d-8|p=9Q0(M#N%tYRji(eN?2u4QMwq$|`p|SWE1bL*@!RKZI^=)Uz`S
z(?#LeeixNn!F>e;oJuZfFZCqVb3%i^^uhDmSOSkvp`>_)nj>qVo(G<JdFd-t-gLfb
z0Vdyx5$|e<fV&tldbq80%6L`C0LUOG+Ybr{LZs6dpa$64ktHT}&EgZ2^jB+P0{;JB
zA?H;SBa3g2wnwjEO%sLczc6`k=4-KL<Jqy^HrZS-34%S29ej8*^$u!)R+Z>gZhH03
z|2UccTza<JP*U0~UKOh^ey_;cIqgv!+OVfOurfnT2PyL8rX;KTKiH9JN*&ZV?E?}<
zRfW4q8wSNa#z%*7cHk*Dj-d`FKe!6Eiu-<nSltBAdNy$G*&Jb^=AG^8as~F3O^h1C
z*%9{x0)Pj+ZAn%3M*C!ya17KPj7Z}?rlM2=CX-&aJ7j<VSclmP-@mW4tip1ROURiR
zi$@p)nwOQA>%!<=4~c{XN0?#-6PyukOyyF}?n;q2lyu@zE}@0l*#yV?<38wNC@2V!
zre(J<#uU$vn^+|xw{qA;bEqY{DC}EwK@<5rG7<`s`qH9gew!U+3{`l}V8~88t?<)}
z;^|pf#79N7fZ(2w*W#m1=3tMc3m^+yU)g<12w}cRdi~Pl(eX&vtW1q#Pci+K+cwjM
z;WEgqFPg7*-<E%fcU|kII!bkiKKhE!_H+p(50<c3?M^+1#W0=QVDkfYHOM;aMymH8
zOytpQa=9)Zr^hCrJAiIVyzV~OWHZ9qSX^HX@L`k>1tzHj18^1Y4oBcHZ*kz9e-lcc
zQT`*pXYu~0R*?Gmc05OzbogUKL!uckSR@|@yq^u#T3!yv^mzNqXy?WG{bVh1>h6h&
zH#^So>9Td5`g^+*g={Lms@;@yhT=7%=}3YBV!g{7L#!(D4<1M-zsecmWo2&0Ir@o@
zf+89q28>RO&CEh=NRY_cQx%0a(K4qF5x`g0t9KMMH(=EQTQd#wPhl?|QTS6yef{r3
z|5?m`=Z=bvivtV_I_3=z1}9DdouAJ6_z)8-<JtOm29A66AbbmiTW<wZOr~JqkfS<n
zj)mU&fOEJl&_Uvhk<52LASCF(aw=tvTheN--q6ZQ&~56WIvI=pMzkewRKA-#G0^sh
z;5Wvdk2lpF3sm2f7<3(jZQxT9uzPdgp4eV30;{tR`jMc`rLLS4C$>MEwQf^rqRY?>
zOwe;1IS%Nb2V=RdM%ryu-M$XfJ+dyTo}(*gLyGDi8~fM?H#RoT%6I|fUc*0r9m>k~
ze*uLPga=kjw#}K9Vf<dZ#?fx|r*QAS8&$GL9%PLa&F>tzZm2ouU++lw1-hl{eyadQ
zWr+SBpSrG9-aW;}=$q^HbF74Ec+;C=8Y0geW!YD>1Hb|X)x{`+D|&wfoq=KZBW!=R
z?cUbKhlIFBGVQIM9YCZYB`1I_+#4Tm(bmyn5?C%A{SuKq*#C{)^Dt+5(Vf>fcjgN%
z5=7iy;!^|#sEEC6g|j_DJ?64HC6%i9dflqmmREz=+2a~ijbP*KeZOC}&gi*N>swgp
zAkcPq-j#4^kr}X3fgt9{9fQ%-^uoChxQ)w`&TMRKd~5p9G4${z7Y!j!5&o^oTB-u5
zdILv7#yzhWGG)3@F$owhc5#mGNcKfDytynrFK(JV-kIL*4qpNOoV}`5R*MZEeo04A
z-Pz`ZroseycUl()qia)q(XiY$QVU23$U*-4p`i?c!^V)~NzxTqYP^t|FbSAIH2Ck^
zAExSAd}iF%ifVU$v`hK$9t}(C-A}oBf9M~e^`I^S#<wa>32ZK_Uqs-5;ds?lL3~2W
z6(18bSzwxuKR~3id@@Q^eC>J#>{T|5e;Uc5oCXrNgpvrD4Ae4=8Zk0+ve`M>ny4)}
zReNo%jb!GlG{q^Ee;dJafld_sN@}<muTspe>`L~$tb|@=0Y8t!?b*7dm>Am>iR{o_
zPUyn<Q6vIDS=W~a&LKq65H9^w0>R6}KHw1_O0uw>XWNC3?s}0a<1zEyvMV^w4mdt|
zXzklshN<5a%>Vo$ZsLDzNjsmyBgmvKjZ-=Lqzi{tb=<!?2t#Nb!j1q!zZA4R@Gp5x
z7+fRB<NMk#d&~hen*P4gN%~8f3NecDiHTOt>y%F3If+kzp?~=<|JVl|E5+X6U~Lx)
zW$g3RNXzm7iA=yFaHi5!j$A8MajM!hKeOp_4(w{vb_65py|g(cL!=B-g)d+B2U&iB
ztvB5aW%M=#VMtj2>92$;va-AA)!)9F*JZZ)5AuSTcpKcnZ;xlmU61z=^Z6GiY>g^9
zi(_N&k95qzqqqC6YA`B)Qd3I{q+8~zr<&9XOG|ThQ(G_NUAx~Z7a@&c&C5x45{(KC
z9c<#|Sgd!x5I33n+9Akp@iv(OfSgZMw4N>9_IJRf_32ZGov9?UJl{g~O5Hqq%iDGZ
zY3cd@(fkRx{LlS-DgFQR%f0Af+0?igv1S3-->{Q&`TqCwz5b=8rf=S$sW1$Ck1n%C
zq5rShK4WHP9-Ew0kPXg%v%<BZyZL3adGlvnZ`*Kv9)u16eXMbjcXGbk+jH?HG5WXt
z^-2WWL~br>Odo7;P*zIneI7cQ0<68gz!o432VSBtdLyJW`N+cBa##7$XaXpFp7gx`
z-rKPE7k9|x<{2+OEW0v$o$lo`NK8A={OXlHQXVt5zYLCmpqixQN3ab4ImQDe?5sbF
z=>xnC$?d^LnRN2o+sl&oBm@~dPBw6{ZP}n@*_uV=Z{H&1-~-a1{~mu3jobgb9o{}r
z;E|F<_@I%%lKuTaaen)4q~39KEUx1{-g5JkJO3_xil(YXb9iE+-T9$&6f%Qfk6I&_
z`x>&U?!Ol;D0H9!&~IMrXB!i*<Bpz=2TR6Hinsf;A)RK4^{;^hr+;0)*GZcmo$|W;
zuJTuvk9&e70&XR5UrI^Kr;6l4dY7$%%i1f4{g_1Fs>zaE^GT?D0!y(;O=abAq6R^h
z>{U|qje5hkTS(1oD_b80TLg#@ix#W-JzFRQbc85@&s-1z!>Jv7gtcNcB^9<Nchkk_
z$!QsytmCuXhQ{{yj47YoI|U?o3MDd>pZAx49R`QUVLf>8R8eX94thG_ci~Nm*~-H8
z{_{|6My<-P+DZKGVrnt@&d;ejI{{$3!y3~E^aqNKf6Q%>Xh2Yd7EM3kEDlX}IsfOT
z{7J;a$f#C~f|b2OcPS(ggR8Ywn-&`TRnSCtaje`PoaQDP>XY(7{7_&4!}&8Qq$29O
z{CsUi+=(NoBY|%oFc5Xzo-sY#NChYdB=*afYUououM;9J0c^1+XHzU~xy-K);UIxE
z`f|Um@yZ`KVyG@=FMRryo^zR8k?=A3Q@Q1=S!=b@+L{ri<!?a8P)hOW9~OXwr1}k5
zNZYp!4hGygT~#!a4EywnkTE9AhC~_<&$|0PYX_D}IcQ23vP0KepQl})ySit~TP7xw
zRzWW&LGSET44vlYR%uG?fWdLD^mR2gFV`4&0czY8Li+4+02uTT+<dQpBUdGia<Q}E
zuG>NGnQ8pK(qy51VBly`%eAnuKq8DtePr$LtqQROpM{apsSUA!;o*H)ue4-yDn#jy
zB)BA=Z@Ch*9BpiXU-{cwi_HDUcrMfBQb_)7N)yhWJw3F<lf{)~WtqU;HCe0HEd)9A
z=9*VjxHDX|js}rp3lR8T*2w!HByaQM8C%>(MB^N|y8Y+Zv)5Oy!+q;89nD7DL}cuv
zgg*_0P!#23_;N4qY56cUA2)ZBH>W^52}y13Tt^UozfQ@<=`WT31Stuilk1JDtD^^V
zMm4qd)6=`^_dvr61Ln@UeLf$_-mkB=cTkovxt{EFGL{fmnhcAbu|E419zQT$e~T3&
z<$cD$;R3z69pXA&P>qq_^LS&IR~Rx<9WE$Nw&=mxwOHKpa~bYPjccAyB#vokcXkNK
z>m7{+T6OsRk>=)OAI#h1Gc(2GIKXuA_u)mCrjHUjnhgWn-~3pQ4*p^L@>ogv(D1OH
zRg%aiTH*Kam0NSUq$+w_;|KN5+j|9Zi$ui4!!o6B``0o12L`}YchT7H-vgib*fNXa
z?0iD!@W2hu9MW)sO$$v>_QD{zdR6RP)+sA)Hd$HG*tqajN3Grk?-8(^yzaA_xGekS
z^XF#!eMaOGU`gQMn6Sbb8d9F)fL8!BsDxNTHoTsJ0Yf;s%!>X>6CsD=>V_1Uo{csp
zT(<o0Z^03z=jYEIlb)V_2XNnhS4>P-%7~t=iNXOlYqv%rg|L&slXQ33z%t6{&nGhD
zz~eD)|I62}8#_CLplU1G*syl9xzj9}VcS%Z<3vD!gSHd_(g2Q2Z^&J^J(S!&*X7VS
ze;5PM5kTe+$QJDEexENmauo4g1OASFnyDoy!W%KdbU`l2KcrMqcQOgZ$1n6gmTP9C
zx`feMy>C!lAaz8~!GVr~K2W?JiOWP2Xjq<Z1UR7}Sn!18vJpZ@)<|^7{~%Sr!3L{^
z+R-%U2x3kvHdQY%io{pW>Ws-cW&>8)vWGdUre$|bULUmG`C$BSw~7VODxeg&yE-&E
zUlhqw8Pg^3=_ExZ7D~x^Hu-_aTXsC_Y#FJZE%9AhBU8oK*DpW;OXwB$$uIeBo{@=3
zdnCH|f0JWlVA0IcefRF^=?`SDu-9-8b0vh4QFQ#IpzV&J0*vR*btAAkF0Ux9tf<iI
zQ&AqRv|Mb^8$G6e1`7@e&iTgl@Eea^qvxVFYQuYDCaq(C#n@~fKarRCfX3vueXNxY
z`?ikx3H0h_=H`o7wVv0lhNPs4SP7N8Gi8F$+4A4WacXJJFTN?57#?=Cx7V%8<l%(Q
z2PnMOyz<-z!_7?kNk*NTJ-908^XF_lR1>Xp^+RjrJ!zDEi6o>nD^m?8NV~AI^;F33
z*#>J|!EwR`--{PimJ8qQ`i?!5o9@|_lxbXdnRzbyxwzb1SgmEOMuNN6a;~0#<64x_
ze|u;3wQso6@K~;Q<8>{T20;37lfM8gBBG79TGdyRanWh1J9@V+lvFV4%a^y=jtq{*
zMuTUm!YJf$EuyS}Z<935i2ZS5U+k{2_D>T6*dDcxZP6198YZTuEU1$u-D`|*Ax({(
zmSmt2jkc`gu$n)kIn4$A<AyE_cMke|ElkyXrX1SCK}JS)b|OfuQDrgMc;AtO1LQKz
zSF8)g43YwGll`5JHA`MFmlZ|-v0-9mVUcla@!o2-)Eu~;f#DH|<0;hW@|pM6cLMD}
z(^AMlZ==iA+Tx8x3ReJ8&4)9h1~rf~5f~7XkI)KpSJ<#BH=Jz(%#~`#l}a%RJ;BGg
z(Zh>DbUHPTDil#JV|44hN$(9aJ$G*WwL^7q30wZ|tmCAK>Wla5K~-&_4jr!Vafr%?
z0NJm&alMS^S?aj)z+}O!*s`xJUNY>)a1$etuh!nIcxI+UMs2hHyw4`RGmKQqxI;lS
zNhQ^b3AnvZ16i_*BZAdoUo22&<3(IA|MrA{-CmmQEb!nOJII^mYPK5r#B%sGiCUh}
zz*5yGdS&HF5L6y$UZxwQVci*709^te)wa4f0_ZrT>G!;P5B9|(O@>U*F1guq>a<*O
zz=}KcEPwA{Q0rpj1u%zy3ewiKs%+>jTcfFg(Ch_^+3A<3qgkCDUB!##Q4EWfb~w9j
zlTW$^6Zz$0V@|sAJg4-SA~RlRDjSxS!&q|*rrMN9ToYqstBqkgB~0W37+LNq6=U59
z`kUjTbtx;?Y-~#o%Xwj?d#Vp*G5{9Y+bOPZ159o9<)#`CUl`S#eta6v>#8u_9t5mC
zMy>iGP%?Klxe|(B9s*hU3=a?HI*f$V=oBpb=-8x&^aOPW#fwu11i&(?GlUFkYHD+E
zJnxQ<eX>1jzEH5KAAVZQzWubLIJ?h7r(<;GirMo`7q+GRH@>!OZ)Bgn28^&+Uf1*3
za8cR^`ZpAc!U7wXz)9x!k(UB&hCs;fJ9XU4#|!nQD{*$7DG|m=`maSmRxk{zWrBxF
z?&88HpwkQ$dDQ%M@eL0zuRMuh{MD6?l!A^Ys3IH#S^gV{e^q<3q~xCLQcgnpq|Rd?
z**;6I4_xL{k_^eJ!Q`rI3*c>FzW_BiASFot5*IaI;vH65SsAWhAiO(M5gej@Q=OO;
z{%e~_5O=12$h*Cx^QK&v!%};6o?&CbN5ctueqPHIq|O^3cBhsngG~X{KKAu_8cI{b
zM|BRH&2U>VhLlg{zu`Is3b5;7eWbq2n#Iw^;r)$AqQ(OkHm5@^<!<NwXNEE!_6{~#
zhCEZHPqO%&iAGWyol32ke38X*{H<%g0dP$5;S&5^jJ9@@P2IpcYC4<zrBm%2xf9^o
zHT)gGU_ed<oRdlrsYLd;I&viW>LNXWr5_kpMbKdCgMQrLyj`Tpi1WbZOJwBtjV|Xy
zMwZ}#&w4%tOjixYVMRO1buUs=nNF_j;<Og3ZhlTFwOzVx6Ode-Dm7hKe&wlkLg<;P
z6H(G0Qq6+48GdFwsBHq;a3I7mrtbR4BFr(tmL)eaGNCU}@UuO3sk`J;FeK}T(T7Y?
zj^gE&t!3zTJA@9@{G_Cz5V~dS>IXtmlF6#)?SGv^h<NQ+?_QO7UjM*5rt~E^+2c1^
zD7ep1Wj-43k>+_?{VpFCe{sQ{@pUzF3~-9XWnvQIW8IG6Q=m#Xt5?M|TLzBMOgg^F
zb=Glm7@r#w8Hg2_QP+3bPm!N74BhvP=)8u+4K@RmX1>-Cvm?NXC2+p}3kbue=dAjk
z2ZoGoG)1p|{VK|ygMq#u!!k2HeYDPa61bOOh~?}9=0jv(Nq#}0S;;1vjg1W}3rlEd
zX!z^Q$W!ozRFjk>wRyGWN0g`}X605VX9e7X_av~>=dnE=vqE?7(YZY(8_sptFeF{{
z!vexn)vb1#NFhAB;mJ|+nHRd9JE&k74My5!ZvunfVH}rvSM6)%fd#W`1votpe~j-;
z;K0@;I7Pmbsid9cFcss6h87uBGO)I~3iwu^7{U}@XE-U-MR`or_p~N^X3A|Gi~?lg
z>vc8WD%9lXRm?M4@jjTsYlT#Q9fso03isIF^x=fQmCZmg3bZAIlvpp(m_N_l&;#E`
zdQ6y5EZ24D!;2KSIj6Qxriftc&1D<OG4iLV{0SO`GPrGx7zOQdV>ZySoH}-X16wT#
z>5eL_mf>Y!GJUFO9jsWhK^SYH+S#A9Rk7eJhi87MGmC@C`jKkZ>=4{G$dC26KlIPh
zuaRS~0_mpibG@aqqQJ{qa&lqdNzSg4p?Rnda$ccOQ@v-nYj|c6@(7s*rh>%65P!)5
z;;Id;rpc02oC*csvB=C!U+I;#5#+~N-8Q+6_BH@xzXpqA2r2sxJpXfC837rujrwqP
ziJ$Ze?p|zM{3<-^`@!H~aTiqy0b&FH>0V3af6i@reujV@ziA~+e0_HD7$f_7zRYv*
zGFe4gISz-Ck7Z3XgP1OdcPlcNkLYS>VA<M`^=WdlOb>pijZl=hj`JaD7p<29?e8Va
z<Tr{4R+<AN1+{1ZzsX)f-+&38g4)US!4TR}L$=42A(ZhZyQ2@xqRJ{NQdO>e4~!Vk
z4bQfkCf(T#)3#vy_HXKMmWC18a=Dv(5=^KfdSdU(&q;GMvMWKVpSP$aZL1=7%!g5u
zgX;~Fi|*l@NG5VrLE1=OFmhb1eRArVA6>S-3ykiRiZF1(Rx$5d?0o@NEMH<*fBX>3
z_6Jim+&d)^=3fDASDU|<Iq>19$9F54>1w-cpf>)ZXV~I6ot+XEm>F3K^z1n#I3j)6
z$By<Kd4-vjy-$V*%kIeij8Gn27zLAEHa0LE6$_iHK0U)Ea59;knV;W<F7X?Z&dj!F
zym#W99C6b29>ITNumTt@#|Rl-yRH5+jzYn7qs??y`|jpR^!Q{27W9T>g(QLWPDyNX
z)}0{XZ4L`=&tJV?gs)<8D7aXI&z5pVrRx>NN5e1ql9EEP6Zr#Ck?)`=Qf_WofBCcR
z3%%27a;_6U$jSqjd}|eEwTq2U#MT$;j!9C;cN1P6{~jIbTx@bWSB5qwEzG?erP)6<
zzA_reR9)S7%N1*F?C<X8yIwR!xM*kYp*WNqUKABmhp0p=R_YrV$gLk|4)QC}fvNcg
zHpxPxokA5O>GSk7t9k5~5aEI;Jr1`IkBE*}O<zC1@!O%}*_wC7284MTsu;w))6~Ft
zN9Rmnua?%gD(E7+Sv$dD(l>5b;5p;ZFH230Zk8+$!dJpSlF4CbD|s#Uj^7Nm?jV{B
zWz?(8eoe+7mCpjM3=l-|UeC{h<QclEs;Vae9VcXb7(dMkiHRjsgDazJX&LOxD`KuI
zZ8v|A7nr>zA|g^Ic^=i1Gkt{~rrF?8W*B4?DGU@ri6HzXcznn0S-I<>(O?{RNY^O8
z)AGKrj9Q)J-qK`=Ktm7cMbow58ympZqhoNQ(h9K$s?CfputNaT-pzpwn1Z7t_R&It
z)N{rd4HIF9x!w!<Sf>@A{7CtzUS`!hiJU*i9{qj{kOV00E2RYMJ=vV~Q}@>f;x(IW
z5^T}Wcij=!qBnaBlG#~F4%@FRmLe|K=um*G`<b25Wy!`QNKp?aX8XvHaWK__a#8s9
z%+r3Wuy1sCwyq2OHPZ8r{sNQ#uz-;Bz+nuz1=+*qt@-rrnWF@5&AoD~M*Rh!Oy4sw
z-T(kAtKA+B?%aco$>02f@o7d-k#Fp{^j5LaBBvPgY<<%dsLM+-)&f@k(+3{7_dWrR
z)Ij{Nfo<MA`Q%!o-K^rQ{uD>RjaVN{l1HFLg%R>>fMS?Ys|HZ?I9%F+PkLJrKMDMj
zG|)-bKgqqmA@bRyhMwpCSgDQ}d)N`li)#mO=Ib2OZ29>Yy7he2ZYm~#AK#C!OkE)}
zC8i1SD1c&0I@JU#?z@TXd4Fc>oV+kUO)J0Ne+gZQCdJk2F|=hW=2?_=zM51kJIHG!
zob&9f^vsq|=%D#t@^sN-fQCvr(}>ez0Yo0y@VoObq6xUWIHd0<@z+A<$}RUf**1NI
z9kS$;V#DL4!m-4~4@2?PX%@ZGk&W>R%@P|^qmq)^ksvalU48SWQq~#7irPCeuJfv+
zAmQSHO&ZMSPCrBTs_>8Ye*9>Oe3Gj8);d7!ozdsjgEK!rKcY7R)*FP0C!wAZUui((
z6R;Ttj1m*mhKqSlnuLdI@OO=Itt+P82boP*rS1naBL2^#q-pP^w7r}`=3Rb0tQwfh
z@;;Immk!o5pxU4jc;1%ke&Ny^yy&R`u}2P{(-cTZ$Vp4gSQ6FINgjS%>WO)tu(h>M
z<D~m)_Dp1hKNUZaLk3aV*r=V_6eC6vwca<rm;;{|15)Qh1%ut523f<{DF?;4t(X;p
z4)nwpU>O09B?GbSQNxBC-?dG&#M0y@>)iSE!oZ@mgZFG~qbE|FgyIiMe|AxVQIE>&
zM`VwjK~o&f5Rb=Cg6*$jQ7fEdTbgeYk+zAJUd=9Bx{K?|rB<|%qmuombTl1bj+3zC
za~Lomk_Fa1W*H{6Es^yHzC*6c7G=PSTl_{_lQElO1dHab)97CWE=RUSK?Lxn=jOHI
z0`>IuFOM>8Kvi{mk&IQV2?g;tXjmI<kf(sGur*goit=;e9|Q`?@&mJp7RU?0fIHO9
z%cv>KVnKr60q$ylkN+RwR4BlLp`d==j7?Sh>Dtm4X-bOlw^R|VNUC2$vHiP7;h-k_
z`}%s$Kn^!^ml^djU0kO#ccQ1A5WRRb5(=dx2p#;_2a?dN6CUK#X56RWUfUp`{D0t=
zlweSdtZKnjs`jDlQa9}M(XSy^D$?1JKz|t>jsGC$=u$if*cv4kVxho=*(ba4?oGAQ
zB|({q&`9hTUT^xPrb;-Wpyj+I!Hyww^C$`py}QEo`*c!d<rBF<as_;S)+>7b<taBG
z-&Y1s<{>8so4wgOe^B14gcoVnl^U!sxKTBU)^UJZH}fk9xT5U4?(TulPOINk>vF_s
z{P6st%*v|YpCRH)I^!+??Y}3%049p?#)}5_MZ1HOs+*<o^77z-ClcG6n_%@hNlRYa
z++OY)bjpr5f031)gi&u~Xhx<u%PYX}PGkFd?2<@2jH2T+K*{f%5)K(h36%atKZNXt
zSxRGyHE+)RxqH9T>d2W4*WYIV^#B^$yw3S-FJ%zE;z$c5_6ar2L(o02Fl6BH-ND7-
z-r(qXgX78@uO`IMGnDA7#;un0rOrDZy}iiZiZVfflAva(H=slRvVVXuB$3ORijv*(
z@H11a(_^A@+wIW#!%AjVq$^XNN~<!{zR;eCPBujeal4TALtOP^n|!%V3B`>kE*_^_
z+$wO>$d>N+%HJ4UyFLo!$I|}!{CeLXEp9iG2yPW7J5&%dpvqt#fW`t?qVhSP2j?;a
zaoN+&r`X5GSy@z(HewPIET}PBpT<vevkMC?0ZBJLK1==P)H53xIcw%TvMg*Ja{_Z|
zaZ)x!Ak)Lo9r{_l8&j#4>gp0hSN;zoJ2vFq>t2~jVMdx;aNBJ_mc~IDFPW{Y+wKFZ
z)hM;N^nky2BAu3*x;j97>JswfdGL*l+&o%j?}DTNYg_x^;K1J~LKvoz%Aqwtv4EdS
z2lb1wgMy2WrE7rTK>(=;v-dykhCmC&#X1GV9wY<<IRD%J8UfJT4pj&WkbD(ppEU9L
zwthB}BQ88WK!B$T)HTIgO-B@mhJZ%2%j>O><Olqt>^i=S_w&{e+uuxsVEe}3Mf_7@
z;>k4U(Z+^4VnRaMWNtx50dKmyg7<$N7O;8r-;0xNL^P*1gBG8HWt?2V{$Wg?oDA&L
z?kGOI&F`|#xCt=%B8#a?2CgfNu7I1Csou;92ymY>Y`Ub0=>w0v^gR6jfgADpgQsJ#
zp`V5KNrK!JfX$#2g8!836pU_6K@MK6<DQVOMYc-gwe3j~3P3JgU0siN$LEKKy)D<r
z;tpbpwX+j53~2337LNEft&uN*VnHI{X>J}<)TV^BSdJA#ahU!on$K+epP82sJHgYZ
zyK8G{S;&c2f*){ql=7+4tM%diXF-p`l~yEhs>;i&K@3(Sia#xDte`QPf7`oCeO2wG
z&v}+JwPoUESuzAnfGa=!3qdAfL)GMTvs{|)2a988;GsI6^Of;+dCIPD0!Y0PUzOYS
z?;pi}iG6_|l*<cd%9%m<u}w9{FQ_;|9l1V|JyI%vNDz}^;qADe+AB(ftNec>GVP%4
zpb1UoGyL(1<u?PfrgjLKnBHQc^585e23IeboOfSUZ1p^3HumH4CF_=cSCPBJ_J_mW
zanWftMAH05j;S{XxnQksR+uI57+ld&AmMd7ex;|qK%Re{+Aem46x2vf5pFV#$p7F{
zPre4*0%4FKLegY$N<KZ!VA68x@e+d9X`=kn&F=?ZWjOsLl!X77yhC(RE-^AH(S2n?
zYn*XzUURC2DW!(N7+c9h&s;lQCOuk<s3MI^lzl!01Iv8EP~h?Zuq&cWJo_Y_9P73$
z%P?|5L);bKBz_#r>9ja2QF2FBKrU>!ff~io&TkAi$h4uM=4ZL_FZUHUx$XncCVtrJ
zDlWMd6Hf#=UkPGB!wGKd46zT6%cZ5HMO|(^9geiY-BJPu_hoBxn~$ClOy*0fVc_C3
zoHb~~gdVwX<-XA<gR00o$_M@kj4FvKwy-E5=)X$Rs&Mau+C_15WqEQ=52xyW#ojW%
ziWf9BHmNbV;2>bq+8r(gQ{s3Bv&jr*U;NmQOH?bDzI}Z$*Q+}_Voc^^CEt#(>Xn{j
zX00z_-YwJs4&Yf)TTm`;p0VSc%nyuHe9zgo591E{qA$DURao`rasco#q%oY*$O#e;
z!_p8^x<e=~uC)6pC+&lSZx~^McE=*KFiggnl$~^gi%L17i_!h&>jnVgN-}J0Z;}d}
z>ww(#X%-@&jVHZ;L&h6yot#1f1AAaFrlWll#SU!`eRDlSW4(^fr@i(*``ByGYXp4%
z;pF4r6l0CwLr$Z^*<Uh%;5pNl@$s`D;VbhAdzB<MPD_$z#-TV*KtjrVz|GBVAq9jQ
zV(;y}nydhQhRuix1W7t<ze%nzoBpPx$^Q&Ls42PO%h!(pwgGOFI&(?)Xe}Sz!$^YL
zK23(HwNp@8Y&5IanmpqNUO2A-C~ADdn3qs|=^o&06A?T!JN<nVtu#-`hv^}HVcP=x
z+C*Z?tdkGn+R+$^lF~4{8Llkf=7D3k@>u@Qdoq}I@D~MqTJtX24!OWjRgpvKkUtdz
zkZdk+$n>^B+&nP3m&q)q9y>Tbeop{EjPCdQ^?c!#(Qowim9IFf%2Jy?H|d~^&o9|l
zvj$2%w62c;yN1iB4sk4#aau}x(RbISzz6_HMt>h(W})(ZC_Z}xbUUMU7sldQA9QI~
z(2mV;8Dr?fUr&7{o98K0t8?SG0YfWq0!FPX#On0*mCMP_LR{PO%NvK`T(<RM%{rUa
z4bO-sA{`TxPO$s|lP*K3QS{euBI6(Uv~6wo!Pp-p-Wk7Zvt6D;jL%WM;m5>0P~KMT
z6@@A1ioFx*(zmear?I`8PZXVL!T1L<h<>a7w#1SS&s_nyN72zN@^ATKz-_r_b5p&A
zQ?>85@?kK^%E?7hf@$c^98E!Y4gjvuEiGj`e(u@&UbY`X7UPq$aaBS%3f>XiLATo+
zVGryVP<z1mmk*HhT~jOZWJj<)GBMM)CO0=AtSW{TBm8xSy<=i@QaF%yluJE#Y47ZS
z=~P#X)=dEC7Z(>7dt`;MpqL_18f7Rp+bsPoMYU^kvT;-g@JFf-I?x*&ZVmg++!&0<
zgE^`D#1Btz89>qC(;_=q*k7Cz@0g#DN&+2P4hagy;~<9`V1I#FQ2ubhiCOLpqQD?@
znI!%U0iT1@64fSN9`oBcIk_J5*>8OD?oCWB5mi&G%Gm24kOeHpBtG{Ezz?o`aVqtB
zYo}!Sk&<{Z$H(t3Keyh+NH9#(zljZ7KgZ4bLG?6|+jaS*4FA^8S2e+>p+S*G7S{d2
zA2@+u?|@z9QD6YW=GnzG=BZm_Xyq}W?|mQkN=<#1cpzg44D=(%J&O$y`DPXt?V&1)
zX?Cu3sqqxypUu8I5!%=|J_!3f1{j*Q+^jXS6&}1>)#A%{s8A=3>O++Jrh90WSqxCq
ztAjHgch$iz|9;UQGp6YBx=Sb1axeDlw^o9CQv-kdY4NA%>>mJX3R22J>)zYj(Mauq
zwLQA_yNhKOr-~?iSGC#RQ?|ux3HX?Y(+8j=!}SH^AZ~UBEr;Epp%{nlF{7m`nj%$N
z!uA$7$YeG%ocE*8NH0+QmGm_+o`okdX;!y3jtvhpj+%tR)E%z%U*8l{g&6#K2$1L=
zCl&@1^Xr54nl0N?Wuk@{q%u~yuP5nvXaPe2b13u}emYD=g&O1VU}tfC67D%7#S6y=
zx*kpr;8uC!PI75K(|=|UE$)Md5^}t*Al<4`D256$sApvsjsu9YG8{-}UTPh8O&`R_
z%E{)ym7Uh|X-8Fc&d)ev*;k0!kFKtWv}<j5`-&S6jtT`$TVto$8qY40LjcvA^A)qT
zz5S`n53VDG9~iiTTA?vfz~2#Z0sw*k)82}fRFo$1y4Hpd-$0+38yTq|^6Lf1a<etf
zmN;LewsjpH9=Q>p4ka|_u)C}dfyk>to$A=^uKZo4e6U^x1W4`VrMTkI2%3Qc7X`69
z@Lwnqxmxq@#u8$dxwG@~$&*p#e63o0%e9@yl9qQDYT8YJ;dng`mS8Dlptm=g7KfHL
zU~q8n0g@1EP$+g60RfVm7~P3Rkc*Seuc7+i6R(}!T^IZ9{zxqkk47PympsOIlYtr7
zt0End%zs$GSO%304Q`;AelId)o0^Jpc6x>x&yQz(WMpF0)x8Dt3YwVAq-K}+`WZx!
zi3v7!di1hz1ew*)TpTPFpN0Md)R|E}tu%S~nQc<9d{#yV<CP^G2h&JtrWHc1q@+iA
zHTu@omg#^@!fC6I21?NvIow|4(+g=LX`%sydP$I^MB9-PHUpNi8JbRWi>YeME5Aa+
zK#sq6iU8OG{mFPelwabTdq9gJJHfHRKhz&!nSVdT!x%3fviI4A98tz-R7Qy9!Qj^j
zvR5Ri>_?#fXa{fstwFZ0w7&idl{<G<Z6-0^7HL|DwAyt<uy&J&-P#U$mi!qjlY-c0
zC*V-T?neO1h53m$y_ywBM|aqoas(N4Gc)S`Vc$*>t8u;u#)W6bD}Zkr&uPVK)Nf5K
ziJq677*S?6E?5Oc=i%lKCi>NJ?IXE;F-FY3A5=K&INwNGeViO+QFc>hWbolbd*GsH
zDjXe$oSet)axXE(<%rMqXltTY6|-{i>>%c3j~AC9d8pO_h=z%8j!tSVH71ERwu3sp
zdQL!VZB{r?O9$dP&W*NSjC;TRb8&tuEp2XLZ%ih5heae?p`hh8?Bj3&b5Zfl&aI}2
zVbDvjbcMX{g(2v#(}E2ys~-WCHT{j|%Dbx2Vymlyf`Xx;7);O0j>Y2Cgapivhstpl
z!wLth`<G`21gL2I8xs}j0RcVxi)u2N%97}=X4KE0M?4lVEXy@D1r+A;{~iad^<VXL
z&2HBrsB~)W9a>sD)(1(Je|<PX2*x*Avt+&yMLVgpKRXAK7eEhzfBz`u=5c;DnLi0V
z+?)r-Ulu1xKKJiS<*PBYx!<-dNCFucHF7Uqc}<izdh<cHV}rti@TO0U+I&w0bqVKn
zjs4m0nIr9zE-sk6^5u8}R*?xeXN>30lvIr-89p#>-fc!SUTp<EL&>RE@<NPR8RsG>
zSXi8eZWbUqIy%KR1~>AF7mAo*c(t>rb@2cT>v(TLq^IMjo{wZ`Qu{<U<6u%<weEF)
zQXnxfl;j>vI#>Y`TOh0ZE8ha<nToxFOS<dxvCJO0nZ!F>*wS|+;Xt%-c}2vE_|&x$
zLdwQR#Q|N(+D+ACdQOoxwXOIT#E2RYfISdZBvp*U`O*1TZ4Rqrm&aP3H-2Lu&l!Ps
zBPR&l8aj23+weX$$Yb*4W|}>Yu?#6MTTO{RSiJ8i+<wYF0pQL@|FR&ZxWB-{#p9R{
z_aBR`*&lL!r>nsgN3~dXy4I3_*jlkx7)H!tad5Lvih{jAnq~-+OQ6GPxla5{Td&^@
z!fhV}%8oyOjQ8Nh@aU+4jxt|rdb)~5nR6?jqc@B|Huh8wcx-`{PrcH@W7{$1J1u`w
zlC+bi<Fgo;F$NVzwBh^rrId+0m28}xw~IQ`5(?domngR#bvj{PDoJBYQ9RdXo$CpC
z<LrN-!1nS9wY=5Bp(o%{9qzY#W{*!A`zy`Wx>tebviv8Y*?0>z7p0Z>z<}7uR=pbr
zYXT#;2CWuLQ~5-mnAk6eivd?IF7-R#zAZ)<D|0wp9BUc&RY4oHi`L;%urZH57)ECp
zP|yOS7OGB(TPz02O$d(_UGf=FjZIihZSCzz|M~=S!a@9I7|FTX6%|D|4Hwr7uG8G_
z?IR-}i$7EU&|d))M_6)`n6rO+FQA$`J5S_l)lI~Ea)4kO(5RCL+RQ8sV0|&0uwOYq
z1^ge2;rh*M6v=jd77cl=*O?=L8$=dX<)G0bzqU>gd9pWdxo|12lI5|OZ(IeWwbYc<
zO?$2R*z6U0ZEpZBmhD(rvCSa}xCQRp>i?)X0x38)Wnn)4p)7&bsY}!OP(Zc<;oUOx
zbYN-<3;^iKc^&tTiq@yoU1KPliZ&Junt`yb)^Rg7E<8626|gR%=%Zg*KDIvX4gg!S
z?3v3)pl7bE#4iM`m>l?2uQiWgIV=%eB#EH7EKNAvny!%73VSBng-y=g($N7_n84Us
zMX6~Q=)VCG2{#5TiQmhjl~p2rE*Ev0fU|~&pq(&in}PN%=B4&2_Q}BQxzi}9tM~h>
z(I(RIDkvz>RVX_;Mh67Y9uyI=o2K*7ceP6`vRLW#C{yW|a)EH3u}zVu9Rr#`23Nef
zmsPC8>@Hz%Z_#w8tqH^kEqMu8pkll<Q5_E8&Y5doa=>i`o*7Yn2ekXTI)geTr^kuS
z2gYG^^siqiw>sX9l5bOZsap2`5>bFGg_gARwqHOaN*>;OH6bk>$jM$YG|BlMNkB>D
znIJv=d}n9lRD~o|M^;urPvE5nX8wZQY_w^F?PXfdPZ`M6G$#as&FgX5eG(TSdhqKJ
z<RDD&I&1w7iVG%cD@aR>B?RchsPwy*?wnJmx->Woiw&F6VDc$^N}YZF;~sy#8~hw_
zA|dqFH6$*7;vkU}*$IggfPm!rl9vLZd+Ye+ca6pIl{R#eF<KR8f%bc$(zwLLO$O^p
zvrZpDFl;^FwtO64s(hl8TOAHLx6O4cd}%2gfP%o*os3)mp1+S+dSL54Y@}0&-d%Jg
zH%+=LKqQ{S$2jQkXAVUXU>A9oJc0#u+i`K3@n%jUKIHWe^aOAh)wSi!E|?7uSwfa_
zG($s=?Ti!*dPRT3=yj!kwwGqfmftja2Ew-FZzM1zH<1r~{O59$%_)(qp+C^*pOkfl
z>j5~V7?Gm%sJz@_z<kW<$hyiwpAN6{zrVkLI%p6{hX4NE(@#npikmfU=m*b!bDjSl
zimCqqS-?pxZe>#HnOx!_FO+UjVZ8kbw;iy~b~9b{Q~GiUFZ?Ao08(SxFeM!i4@oX0
ztx^7(xZjn&D=UR44Myj#f4e~E$iKqi`oO0Z{u(ke6Nvfzp<Od?%K!a+E)qcIT|ThG
z3|Tp4zH?U}d+4FNz@|zsZSyU|H-%@|{)J#zc6R!6Kmtbg_M+_*BL=)#G}L+5^H+c*
zPY2wFVe2ZusW-KvA}T*0D3rAC+_`qxo|q_MmxbLi1Dv!Ed}Je7fBqaVvz!Micr=|h
z*6hI?G~H8m0N-ho%v8<|3c`dx9|R8^N97LTL+qHo(Q&x71G%7w?d7TGp^s~_Km!^U
zkx+|2Rmk(T+be^lYM2nD)b^VMUT8iE{rT&cje~<6c;0{$6|lw00P5>rxUEDGP%Ey{
zF}@fY9W7I=1|@_gtIdy776XZ>8G&6i*54G---qJJtED04nGff$-v9cM>F8K_eeD6f
zra_b&vUiCIdmy)%J`4Y8Af`4z&_J4qNyPS~RT8h0-t{H-(Uvm{(GHIOzh9;M>f3ur
zoBhh^uN$-ngg;hS0gsgsPnCH^qI6S22|1OS8+?|JFnr6o*+t|`zdxfQzqR2&l8AUj
zLgaT3q%COFIbNyh$kp0!DyysWs5s)<4T-+QKiL?z><El<6Y%`G<edri?Nj}G@<=I>
zUZN59K3hPa{B;D&)APn|eGr)MvLT)^@N1oGO3NwvfPo7LHeq0I66(CYixdZP>%=n0
z?4RpAd$BrQ@Xqey1aY$u?>mv@eEV*CdJGal6_WeT?Axv{t);?08govO^aHL}Fo6B2
zk2JVWf{@E7nc5cR_awzR@675Ioig`uZqEtA*`brBZ1MKLC}}Z@Qduh1!V<f6C^2z<
zZ0wX%f|F=S`Jug*mKHxhNWz`KCg%9W@bX9*S2JHZ5sYTRor~=cY-D~PLhLHC%}N%v
z&mP02GL^}~veOMxUV;(QY~}9Z$w^;tuRa|T`}U6?B3i*D+;c-iitma9I)plvENNM}
z!eyye04?zEF9Od*t=!8*PUTuX6BDtfFZt1k`MSlfE@}n_xwhGs=qMqYjLuxlt=APK
zYUx6y;OTIe&P082yNyDqeNjRm`&oT<=F=Wl1s;fO%tJ6h>7;wWF0Z91>DxR0p5(J&
z9`|{{2zB(|OYF6^TIiLYVIo8oflpK?oFsq+x_uCGxaDspt86kxld_SA<araIBcEZ+
zo`CsDWa}eO+8#!sNavl7AJ)}7vMhhkThZObK0sP2^1rznyUFo!N+u=+cR7xwsd7`h
z;ox-Wd@aB0F>a8|S!rTzN@xymJO1C7At@HzppwMneAd+w@F3}5`6Z3T6-l%9q3mk=
zW?-;K>h)&=(}&iIl4Dv@u4z32w-nuG>Vm^ZB$S32z$!z(^er93mAV%Qb@#kJqy8^t
zcx@m-n}Bwvd!Q#IOyOY+hZeGfFsYJLG3Pkf%I&*)nf-8RR#KKtp%Qp4EsY=0{y0D)
zf>g0tm<8RCByWWa1oEt`tca&6cY3|fP!4}9J0AsECUqpceYpUoVS<k+J8SpAK$JA4
zZH;D|CGCnXE<qj*^-6b7kKAin8V79bEfKo#oP~VUo_~){4&6PjS0r~*&-Y0w{F<9n
zN)5V(KH9bpfBUxc>GVT@n6h<8;JKtJub1$xt^jF#ns-6m7icbQxHK(yS<8i<`rDEK
z5<E&;wU~H@2mPN9<Mgs>Pm(@L8Yt*r#oZON6G_do%eq~?g~n5_2HQA+E(YAKj4^GI
zzFY4}xKW*yq#j0b^w2n@W~x5qFGoz-9ZnT<S}wF0QGg!FabxTP#I$zoS(mzM|DG|4
z2YGJKTD{GO)g5jfbSMbk5IuR)_xp~4ukHUUwsRncWG$)vn4sPQpFiBX7vK5|i$N!A
zpfJfwXGn~+VJ6zcF<&tX)2Wi{WglMGldVeUzQLv&E0ic+o+%u%F<8q&sI%a2>Uv|`
zQxcN>4gwTMsE(l7Dgl%BC%GgZHh%u}NUSouTE}fq5MK1J1fx^^b;qBIP4o2hLy#B+
zKR<ugPG=}-L`1}BsevR8PM9*i3IVQlIdpzxVj{~pjFEJvirelOdG~96{z28EY~H(3
zxhs$8tuFGItjw&N8e3D42eUQyYXhKud4e(U`@UuC*Et@d;cvesh4<Wk{z8VXU3ED_
zBH#}L{Svrkua#&ZgoK3Uws7*{;bE}3$eQK^{rq{4oSeM!WV)<z{t7{*eh<r?+oXGg
zfT?xrYP#C=BBdoA-IK)#6lVz>h*<6m^vc2JmUQjL2Rg^I$@4A`zOf!%G&f)5h4j7u
zUgy0!j-i8ubiY|jOc-+F|6tRqnDudcZ(e7Pk|;Sp2L3(YLqcYgRo@`BDOK8B)5HD2
z`4p|X6C6UWkJ4)cI%1SDOgjJS|CFzhWY&?dUbglDhV5`^NeMIakXjjtX~i|hWe~Jp
zS_1w=G&<HmhFiwX4h0D0Iwt;gwS8NsC9q=QBZIZJY65q!7mp>yJ4#eOSj<-jO{l+{
z+?dO~N^0;g(rUsZPZolMik+3!<=0m@vbS~jlE?i3so$uNi&(L?xME_hgE_%gj5KIr
z*I^<D@UyXxwrN<o5NRe<w^ZYK9{yUVtgkZ_<_?I7>ERyl+r7X`T3NO^^~{$HBtfPu
zHFtM^cBYQBxr;8ShkGJLn~TlP82%a^i%8ehv=Q7{-aZmV*XEYmNjXE<h)X9c(3@Q~
zxSVxA5_R02JH2$?&<G(Ux;k9>rYDLnckLpgtZe(b8xx-Qxtqp?ktf_g-KW9UveeCe
zJB;ubDuZGeAb^i1{+~1PlYu~r74!(u9&C`4kXV?S=6XEzCt6+xDH~~EFi~p$dsnKB
zWrgSOYD`+bt;!Si2U1${w<Xr4W*AS%lVcP5tQP9;UyKY5HN&dB&3GGJoj~J>mo5&(
z#gX|ImKGb_wcY$GX=w%<)4+@2-#gP4gKhN61Y1<J?bk}zD*V2joLrn!+BI3}m<4DA
zSExdq`N$d$kB`r7mUn)wU}QBvyyr_7g8N`YF%j!iexIsk*G!&-lvZ^ukGZKS9?>u1
zDJ3#!5u<PK0Z?P#-ro=w!$!G+$HeZzMC{7{Jp`DEy1F_uJdh~Eh?c*`?qoT4bUjik
zC?O#T$b+QhRVVBn9mmGu3$+e0?zH$pzze(`cVYHN1d)nLL};MWv*F<z;`VR=+gQ#P
z0Wu;l*Hmc??7gvZSw3{`a#2pt0XKhj->Jp{(@nox6A0s)fl}bbc~Ytsan`q`AWS4W
zqQ(lO6bSr6yk)pVdw5$Va&0h?{eAb(z4<!n%n_h5$l_Dn(={+~{n6e7<VjaYC+8sv
zm6)d=v*d^=vom(4Y9@i-!|<>+ca&dfsC-pXVrVi~;Z44WmuDL=Zc~p<FkP6O)Cs9`
zr~Wx>YKMlkGn(QJi&*;Neu2}s`rRs9KCR;X+y#_efVlv)@5!NiOR4F-SPU=wO*xA+
z8}`;U7Q3gqg>FcTN4*uiyuJ0_ys2$$yaW0gy$x5tM$1^+kAP{CV{$ry?4=xqAP`@E
zL=q2U&RgBwJnLf;T&%IHdQ+&5E6a=sAxh0k5^xt8aB-cyaM%nBL3RV=a@O}7QyoDu
zllD#;rEV;~M0pAQu>yumUJC%ixpbPm4kZN<2#CVM%uGF}NS&SOiW>P{_3a6(rvmz|
zi{=wRiwt4~rUA}g$n3gSb^m@qn}qD!qsbZ61EV}BuhC&iwgO-)vHbkuOaB03P+QA~
zEy>Bkf-m?INk}{efq(9oig<cnsn>hIu^K7m$C3snlC<h09b9!&(}28UOjMGcJ^+Lo
z7(|HRMdD3=b-y^ankwm8Tok0EqhkPOw`!mb0(EmFG?-k_ajE$ZYF*A}x||pQYjX$<
zyFAgRAxLVvSC*&uF5Qn(qfD~61%MBc!8w%$nZm2#NlAK8=$mpQVMI+0m}+!DL3Ff{
zsb0~VHuF#KVd{zYc1VQTZ*tGsqabnQJ317PfRGFx*f*X@&e{9x<~r&pXe;sVEUF_Z
z<^`Un4IMs?QpO^gS{xd(UZ@8$#)^!)R3I+tzlYJes3<7zAc6##hXJY55%^%7wkO0L
z7<{qK{QNbmt<QF9f&f$pc(DSW*S6BqW?&E(`@O7$nW^%d3lr`9e{TYHQN6Bh-n8F@
zqaZ;@ek)zNP{A7mS!n2zV&Rcd#K-k7UyNm9t|gRwlaf5ZV+Dm4QL&(pbF#92FE8&O
z91NGHv|H;x+~0ri6z1%@idy&9{;t0m1=ujU5_!FWN<v;fG+h$Qa&hlKq`}10Z5YFC
zht3={lz$FLv@JH*R17FP=SuWcuFeI}(9l3J=Zv8o$oN9JMpNFQyrQB;6MI+%IMY77
zcekZQp)-V-&32VJ>V?RtSGwW{C5vcpuk>@Fe_qS;k+UQud3VtH*Vp!ONVx2GrtSxb
zfhgk6m0vF&m%e_H73ni!%cV)C06Ze_0>prOyC!3mF>LSZ;)I=*E|$L{!%OsCuoueM
zzf4fYc?hIARTIdv@CiR409pv-@gT1Va4;Yyz`N4W5Wcs!wYxi?6E5f~ENx?oij4h%
z;Gg0qFTpn9efbMq?UFO`Vd5bQo7)x3%U0=hFbnaB$0XM(PnIdjQgQT32zpxtDGr$M
zeDqO9alGeen>rTXQKbKB<8>Rxz1!&zl2>M-6eTGsHZONhUK*QzP63?;T56WZ@O`cY
ztdTEUJ_7lN0sm_@X(^X<?e35jFF8`nZU!dLsK`|-?$5BUKDx&wgy;Td^U1%Cz#(n;
z9yVwYmaXq13-E@D4sc-_GAr2!V#!I5akeg<<0=LTB)fSqW+VOOB_nxlWyFSGcF3o-
ztZZ&>yx!jj&8(u5;%QciY&dZ{z7}JEnYxn2Cne2erQS8OS}%pD--M=>XY+rrL5`nv
za-L9}(~xs|>hkuvl_a6;u!tdYYh<)dJt;qKf<1EwUNjfv6Kw;*?L|Ayh_qysI66^w
zu2YnWvoRrIjAVVdl31)DTzk9S{4}Naz{ZyI6VD;nYiZQ)O*yp}9cWM|4Dq+R{T<EO
zh5b&WFZFghZx|tZDt?>}kpZGoYPmTwG=T&3U-WN(Oz7DRk-U0p3t!3>huYnz9Rg#A
z-H{W|jTUde?}bb>PxS`t=&8TovWQJpFhk=%?=P=33`Ql|<GhG8cpj6CHsgmkmIXUc
zKH@L<E5|&2@bC3G3%wj4MOUi5ojDQF(0^~re&X^~2@BmO=iSBeT-r?#o%DiwMWVj?
zn*(KcL#(RX+rvviV$(@U$u3nomnn{78MRK?eLqEDo<`;P_9`Hax7;9Ov-_}1W3k6p
zbwcaqNu&uMw?<}|K$Oe^;_XpdZl6A(Bc=0uq5627%IUF>9iQp!8q&q<=zi?KeIum6
qqZ@E)H#ZWbMj_xoXuoSY6eNS2KEb9tFD8DUwUoHLSdobC$NvWzHwZBR

literal 241289
zcmd42bzD^6`UVP;iiia$Er>KIT|){;cehB#&>aE-Dy6g_-QCTAfP#Q9#4yA#gmm{1
z!@%8s&pE$yK3BbeUp}9K&Focst+n6xd7t-L@6=S}h;LBbz{0{JmVfbF0}BhE919D_
znGhfNhCN*5GZxm3I$LRJHF;@iIyG0Ym92v%7S@Y*iOB?7np0%qP{{hDM-o!Fd2eR(
z8nHB_NFW00*X3WUN!`S~-^wi*Vj=k)H{s61d}cvb8QDA4W|Fv+DC~##VJ=l>(#ytX
zcRu@ULK<gHHeUtVTW4NvxxqnR+eBEOI`6z2H50-b4b%Ur1{RQYS7OHzxc2rnF0%yj
znrqW1dL8E~aR~?b6>@eCdpM!PmOKA=_v%VFes!Ox8B3y*kZF&*d7Us*qQ|=8#b-RM
z4d%NOLw$FZ_c`9!zRZ(&BUd138{VPh(#4y*T;SFvjl2WL#!~(1{8b+7!;g=G3~6a^
z);<)#xycW3rQS?D+WMT4(J9@8V~+D!?#*6;7|()8dR~X^lNWqKpC7Y8w=AdkXhM|K
zDXhO;`A}UUM#mo4+OIK$Ca|Nf%ZO47)rxEIT;#DU5#CI-#0CoorN%Rg-KqUC=pLKC
z{G;wEiv3WKCQu{2PU1>m<-WJP8?OG=p8krpZ}?!1AcIzmQ_f^M-vHIV5pf)h&{p&l
zG-+e?Nrc>>YXcp(nt`ER%A8S5D=%l#8-<fDa^Kd$@=Zoi#L<sk6sMWusug1d`UNzY
zM_1hRd+OMas3dsLqM!HB^79vmGWt%V_0MfPNBsj+8+kK6Q9nsf3lsh9<`$Z7ozk^W
zoMAan(uR$5ibZn!{VDT2-ymINhp4?B&(6af(wCANu4JKMGlF8F980O3W_qcH1~^YW
zf~;v`8?(nw?&dT?zj2p*>^%p$T6_NZcK1EDO&@{8`lXSQH7!<xC|0US^IaE|(oN8D
zsO0R;`w}?)64W+0IA+(_gE^dWE56)24WYYz>*bfbU-0_qsNYK7(!+y?`l}H(gc@hv
z)C$4L!l%OSl^_zt8w!b>XI;Z<?8JGB72Zko6n{4KI$?<O?T0y1{U7l2h#pEO-M;4<
zF8U~l`TqOhpV^OJ5Xxt156c$aW)11j!l-c^vAN$BCNd5`&+;3l<Gle17VBnC!5uT>
z(<9*z{q&Rw723V<&G~NI&7rWv`Eq9#BRtyhw1wI|?NfeHtd7^c>R61SIk~**Pne(d
zQ<J`VFT<GgwTQ3in%4D_8{@C-q&>2oa`4r-)H8?mcu5B((z2*W#MTIT$sso(_z*nf
z@Cr$RTxc#hhhW5F4g7#xmeeB3<xADGk(9?ux1P{yh6ug2?K1i@({s~e)}mTZScld=
z;<&TNOtXru+OW#6I(qV!1Fa{aNKE%af=iDelhN&%(1EVyMb!MQ#i4np`EVE7eQs~!
zHpW>Z+DP)B0`rP{9;coc#1}jlxRNnhiq3Sncf8+_zHxkGCq=m+Y@YH|GJ$F1Ui#aG
zulIlYzGSHm_6|P%aH=CKE34RJ^5nTJU9C!i)=JS2#!r%;R3GET-RVoeFBkWrA@0^k
z;TI<_z<sZ3Xr>aW6o=@+j1zItkF@dP{Ti0amQyvNQ}s2=HG?$*uT0em?;GEUta%fs
z$dXM}XjIsi!0>&&uX(^_3I08CAU$C-nKHSs-|#y@U*Q1wV`Y2?yLirP&0)<wt$CIu
z7AiHt!l%z=)a#3Pv^YH&>QjA#g_XKTk8B+bZj^uUd;^!J)YMX|(}~hDs?e+OHgI_z
zle0N8b;NtlfBx*8`h3;L?ojXW^pGEFpW<aPOOSu2P@&+Te=T1&AEA($_^>~tzqnr{
z!7zcgI7>T9OG?XC3sr2S<|CBJKj$Lm71()UakyLBRU%uGUBaeKQsh}0Q(9c=Q~C~u
zDoWS%D^}6<(pFXH(gEwzj%V2k+7t4==NqySwPxnli{h1KSroNU($pT4)68i$t(9|=
zQZ!|gvJchCg)=zj@N0^wx9YWO`YFjtGf7w{sz8PUj6*mz1@yfdosxG5KmibDh_Ww-
zFT=UQxdX-s<BN&Fe}zLHYKgCn-*~e+T&Y{D8xjtYt@;?PUZdVT;$bm43D+}gn`i=K
zTLojTErgWdVV*p`mn7dH59!NdLBi(TLv171*?6dH^=hfDjIHK=IQ|&>Q94Mg$E<g1
z;80~#>uq8Cs;{2CvCUGZ;h@IAe%$VOdU`Sy41u0k5RX6kVim7kIH+qVVp#1Mx?PkW
zW87vOW-K1xbJNPn+@z*=vURGmUflAkuM_@gU?HX3H0DW6ag0X{1JN=00l5wrmFuYM
zPr+?33TG?9UXiOU(fOS9E|+3gpPwb${cfPO^C-*j3g*;S5LX_rd#!xU0nT2|rrWa%
z!3TRN=DoFjt-Yu{_Cx=z{N=<Y?OnbV$3@6!Yd68-;%aSoVP<*HN{#)LMZ0HvX#f=c
z@uKUZ|03g*@+=aAxHgY9_c|S$1jhp>ESN)*?k#m4&zgEw;9kxAoK)4L&PU6SRHZqj
zbi+Ku)Vq_y$HO2bUPN<bmvmipQg=rl%D;<>EQ`Lly?jUeKHqIeGKlcGU6eu;T>&2%
zIpssYr=I>FS96Rb!xtTX9xU##!%f@#_m>%26-Sdkn<(h_>-&n*+@mEmCBF*0_qF(E
z6jRkb*1J7TJ2S``a#3BAXW)e0uUtRH72Ors6{zH06{bJ&rf$U<#a(F3b28s+Q`wg<
zRyzAYk>Jbh!Og*1{){@4CNof@h)#(#1F8nq%NSweCR>igPZDBB)H^6`F^Q#Ix8xjh
z7|eMTt<m^Z;vn?ZQ-n~fDB42h)zJR(!9dtRtL}sH$+n;R6}mfIY$I&VY$Ce06$Tx4
z&V2UAmwdyiZ}`&f>nB#qsZCZP6;>dZfQ@r|${zyv9laZ$*;yE77|gb`Wz)6=6+x2+
z$yZOnt}|L^4Civ4v7oea{@tmI^4Ge~`NM5hd3yt7J4tNf`WIT~V@vR_<sgJZ<2E7&
z$vG2f9WfA-N`IC!larl}Es_@b@EhK@T~7|ANAuT~JXZmi##bj2#X+{4H0dD3i9d@X
zXRGm!&a7UxL3Q)bZj;$rO0>}lpH_)BnNHxP{@x)HGmB0uJt|SSWk&Lf*4uzuA9+l4
zm^>ZIN<c&s2zo5at9H-8tsP#`(4bQ9WC$|iDy9Wdc{QE9?fnSHj}OO0AN6$Q&KE7M
z9hxo%LEL`q>aDu0?1$fLVPZ`!QpOupJAA)VowSq`3{Qc#$G0<yAgB<jfjpS)VU|J7
z<w8<busu`5YQ1VkABbo6(T2AV|N55N>gW)`Y7P`BOzYad8ZsBANDkr5*nH`c-n`_#
z4zr9HV5)ptS!YxanVxYRL%I*H7-+^isvdf@Zk9t(5XS%_^fb6>M$m6;apjxgmZ2_~
zV0NeVp3ACJkkQo_<5}cKKid<NIcU51z8O;bM|X&vYpeoIsaVB1a_^)E8xcGfN)w7y
z?aB~+@bebrl;JRztJ_DlPgOC)R<xA5no5XogKrw`KXSN0o<n|*>+mY!s`h7MXX(A5
z=F4#q8HoSF;KKJ{FsZR0OaiG5oDiZBy*v##N53P%qfHct`@am_IHx*3n|eM(K9f9J
z8E%SbKMU{^{3IsC^7F0GSUJ{>ht4nQvB0;mC1S8&PZMFej3@<x9EX1hbn*sYedPh2
z)=gb=&Z2$2mxy(0ieskw5X<+i7~`$iW;gD7;Z`Lky8l3RjRl|+iW%mJg?RJaQnatq
z29J*B#xbfS1zP2u;+PJs!L{p$(->a~0LJQA>d9LvD`T+&*MwNu5w=*kz!f&|p#VMr
z+KmgxA^`s01wPNSuKnjOK6w_-f39(ye-)I}l$MtV{%TsdT3R}}*?`@1sy&|oO-<Np
z>ACAED+ybG9XZWkfnQp3dOQA81xwUh7`Sw_bT_B-c64xZ6ZQtt|5HL3xc>Du7d_oS
zMcnN{^m@u_bkbl~OFDker<_me#ct5i(TTdgvJ%z+9PhuX1OI{OZQR|Rg}J!Ayu3KQ
zcsRkX)?CkogoL=Ba&vKWa{whc+<cte&AmCC+!+4V$bZ^-Zs}&>YU}K73wEOW)vozV
zu!lQ{p8i)y|M&B+jx4=x|J#$3+rJ+RctEaScetK$KIQtqwt=dmzrGb#v-P%g(0^|0
z2uu&qhnS$?Q_+9Q|90oUJ^oKkz5mvH#>Xf0zg7R|*8jVzwwtA^G}sa7(_QSpOY`r_
z|9kV_6-BvzJ^KGl#lPnHpKpPQ7P}$J^?!>dcEcmzC<Y5l0!#k6q?R}K7Lp)EO9tMv
z&-3n~tA-jky_tl}GYb_nteea$eDfuxJE`|tDk_+*#CbMTNhjFlpS>o0OJ9`59QXXT
zjKt&ar~9Ri;RtsDkdLnvv?HT%eJ5?V(h0g;?6#?;p`)YIKAuzKFm=No>Dy}H-t(FD
z8X?_ltUvxDW&2=Mon~SG*8+reAJ(qnlHY}d3yI_2mcYXP<1bdd*Yi?%p*2E(y!%hJ
zyT(9~oQbEa5q};DFailYqT5DAW@`NZA4PJ2A}@|8RxbWJmfJ;U*dauuH~UxqUgU*4
zP~@FS_h;Ha&dNWtLCP-SoE;)LMfLY0?>Hr#AC1_j97_LXUT#Zdh2Rl#YCUC6`+E_(
z5unIpUt+hwzpsK;6;@~14SY+tzZZGj0u*^(X+A{q=QRRmBlrdxU6Wd8mcy;T7kN%j
z*YshH@5kArzib&oI<-z<N3cFf82o#Y|G#aTJe`&6E30YC4o?RLJ^YlPDV8qIj<OyS
zPLlt5bsv{Vv{TTrxRAb3P<TIpDsDZf?J0G-AyT72#JRMZVp+khSiXAe8>UAW6Zfh(
z`mo%br}pTm>sIXgUlvGW;aYREPeULEf8fW=E5OXkGI%WLET`x8Y{Fn#1K(dXo*!@O
zD=3`ZT~za0F8|1}sq2n(m~vgnWaVi3P(M_r!cc1}Cf~qiBHutv9Pbd&?T^UU&7k(Q
z$w)jDX1}=kDfG|p)pe#Ux~_0yO2_dMzV_-?C*;kEz4Vufm?O`wPBIrMZfIX$eOVbh
z8gpU^&y!~;)va_Y9xQI9|1cm}nzK>B+gh10AL7f<jFq!o_TnHo?3j2EkNm*cxzpj|
zq^}{sn*5cGbaMWv7S#a#pEit|As*~Qi|4lRgyEwB0q4TJCaSH3CL(6%_@tx_(+x;f
zAVxO%n)n0-zk}LOENMw(`3Xq*{^zV6)`Dr)947_8$IF|I8lw;vr+L&7y6y3tg(QTG
zpLhBowS!;Gr$xcnoBc1=f=`;xd&4+5Og5TgSkPEzyddlKg*M5CWR5ROg+p<xGR)XT
zZ#l&@sfA@=hn2DE!xAcP8{b96(}JCuRAXtNELbu5x#VBo>-YD*4-6a@f7qC)G@Qx#
zQHhH^9;%^PZ1SEBXjO_-q=VN(GYQlStlTQT^N<0!p%23E<Q$AAVB=PM%gXV@t9h9J
z#6WLOuy4AtzcGXO&>@#{%V*Jm{LOdP0o$ru*Z8E(IzuwIAt$qkKI?Wpcia+w-&YdH
zcZTD4DcbZ|d|ni4f;ME1)jrVMN`Hiq7q#|RR>r}V^<&vNEjX86r4CYlbg1o6t!aZ>
ziBNyGrWRf@w3BV89v7KNz5EP5oM4*buV9jf;`<~eo9i^jG)F>zU>vI+C({o`L*kyw
z;C%k^S!m4aM~eBJKTr4SBZM1tr$D#S3CRvZ%9z;s_-qtsSD+J0{dGO3i%Y4!W?aS%
zmJXpERZ#IOQTHfaV-HK_%9&6SvHPj*SC?o+FagbcM=a&ZyW{n-iK~xDzg>u9*PH$9
z<<mcIp|;l)MTy~Zp#qvEu@dRR9uA8=O7_Ea;xJjV0C$*i-HT;^E_r0a@r$2#jr90I
zeJd9!4x6bd<!*j@X#1Lar(|o7xWn>bG?KPOGlO~~Mi6mq_f$Z9fVjB|9$>;t|1HoX
zR7_w!!x~Ma<u8z0li_Yzae_ISL#!8O+8(Y#V<)%WprrnebL|kweviG__uJJH9B9|o
z^w4eK0gtSa9ak)*WJW1G))kvc^`qcM$x!@;0nS#fw_8mviw=A9tx|}VgZ`j5m(H`U
z1LfK40!ViY=BB+7IohzCM$;fnJ!Zd`wqcMT@g`{*=MM%+V&s}#)=*zxHSD=Bck`NN
z#T_?o+7j|{Rr9bGHl-)+V~QFAmY|Rus*wr1FRxJ|?TvFU2Dxf2ZLL^}cOqy>x%Nzr
z%^r<M_debHb{~B(_Bic0Z7PK;&T-U>G|<M9kM+=Zx9zZk+IMZi5Ra@&pviebO5|dX
z!SQHqWFh{{Nb=f*X;3J&=j5GBKIeH;Hk(pQ#E<6H4134vx_x65{w=B(X4wu=WnsUW
zpn5Gjn<luQMx4D?o)#tcxSTiUIj!Dl+X38o=na(pf)v8lE_dU;uE0md<Q>CrCq~X4
zn@J*Rd<GT`?$UAPUZH#^TPffvP8)3|R+A4~sP@@oy`s4<4wr3@4JTj@%5EpKlUwNe
zKF<#_G7Jh{PTDO;?@8IVDuW<`2^(^W-a|sxh(PqVz5PT*ZM8-3)am{rhlmK`VOis5
zWyeU2_~j`p$jXz(G&tRBwlDBvpTMx$HJ=YWE7~q%vH6Er?%EC9Xjr~bJ$g6j3mLnf
zTB>%Lbi^%Bq{l>(9W|NGG&;wRGhxEUxUyZW>UMj2l%Z2ql;lK&>QA?u!8sdGdVVsd
zYAtl)O@#0C>InWEHrj0A?Bkxv+Kx6B&Wm<>z1qXcsL{Te|6x-sjfi)t*`DLuvEBC{
z{Ps<z?Sp6E@ED9(^N%Ygq+1)pOy4pJ*Rq<}z=}r1Y;IHafKF~!4{&v`pV|dop-EBD
zpjoT)#ey7hXYq?YX=cY*4P0Qc`k-SeHwRPs4l_f8xOsR27(Dij*F8o@sS4N@HmzR0
z(i<z_v|H?N@z``6`aI>N6q;UU0`UzraJgcBkuyu$KRBMRNPb0QPmQMpFLz^bZOsXm
zGN`jz5HEd%Y2CG&rt#Zyil%HWQfG<mDII=>YuUQpaQM*{&vFHN)#uUJkFx6P`}nbR
z-aCn1|8AMxIhDWeV*3zFOTv+V?gU%k$$Uy(S&RjGyOGPC&zMMI5msR=(h*e=M(3FD
z!~tll0&TjL36_UGy6|@2cBmDSiLZ!nc3VBgdQo*HMdE&VGdj82d4b*#;#*%2o*N4B
zWpx5=+b?uw8mqKN@0@SgMN{yxJCUw1{BCC$$sP!~<^c<746iipxLcWvx7&_(66dtZ
z6bn$OHz^A{JUH-g&75|Haq8ZYDV`j^Ea1=4TW;NLuZ<O_vA;U)o#SXhvcnJf%ngPO
zvpWeG*pEMCTz=qF#*To6`h^#0e{Eh06d5}(GSscHUv-Usn>5-SPXSVdtY26TaO|Gs
zC)M~hYE&BD(|L;&)*oWfmFSEveTitHx$eU`nT4I2)^bwMc^puZ_TlpizKP2rALJv^
z6Xx&EU!DQ5Lbhhmd3%h&y|2*%(Zc+km@|@`D@O1<05!$*v$fsGZ=3H9@mD)D;{J!$
zpDph(sT`U5p|)&k1CAu04s-<Vbw+shJhTokP|gtTYw_CM>4>OAw0eR4F3+sDe@1fg
zVV;fC^5C)gqC|%)npY^2<JPN&`MboGGA^2to`{aETBsP2GMrX|SnXn1nq;z~b%!Fg
zf+SY-;Dyc2kR%Sn>8+{Stsgwl1`_d$;Z;Mw^?dT}1WlC~y~4+)?WZr_AMXS>*o=IO
zB>xn%O?%bEeV^H8G_N?_`=z+oO_B&vTHm!tl-x@h!@lQL?&}(xu;SWG)FpbiIYB$(
z%}O%LUz#oHXE#Hv=tdNN1YEDxv!3KD?mc*!zJ<W7cYO52!(a?hI<RJx8H70sG9pPi
z9@>SOsiQYaZ3{APFXY#)-ZrtOh<rI+$Auj9d<)w9g414YiqLVE46f?HY>)04hlz2y
zNXAKqIz7wBA__52EtUv_w;qiumIY$YvzJ3j&I4>9UUSqte!IA1fcukcJsb)$oNHh1
za3Me}QU8Xv?J8eScWGt#?M!Jr;<bm*H0CDS<x7!eJT(tV_dj3>+|e}+u%s68+{+v|
zgl0$3toZ57ICm326F7t$f)V#rMHi-5ho07tkHc!#v*kFv;0`C}BXI)a57LegN(*$o
zM_hdw9b2RGw`RsiD_iLOJ&VOFk-NihJ>n?%t6-Ru`lHQ?qu{8wpJe=}j(!j&`Sc>;
zuaGr&@t9oOPe)yug3Q--uOM&Bbu#r`u5+#(anDFEJZ#86ksJyiWI_tgxf-+PDG4~c
zL6XiI#Ky{kiDY@fabO%Ha0K>vZ-J3qPKD;eayxpb(K<8W$<Mwm0E0Ep5;cZ%ktIW|
zGklVwDNp2W5O%om6RwWW8}uo((>txZG^vFonuRJJBQy6Hd`)ax@GU>_+Qv~kOQ`y7
zRm*M9xIssjQkH>9t3R3b<63DuP}1UhPsG_Yd>p4oJ{^Vc5O{gEYP{%KfH~<<O%`4?
zk@*Z>GwVN<1U<{yluy%O@SkhPY^|h$SzQN~K@l@EMw;L>k=-_)m*SCR9Ild8n@S)v
z&ZhZ`w>}&4E?w6H9FowBG{(Go^}Z|2g#4~c&K-eOQNB7y>tj&7EGvR|solesK{uSN
zO!L+B6LK#ce^K6al0P^NA6%GD{g{gJK<zv3N^}n;xCvE<vsIW$HVHT(CxMyUSNFvl
zkto&HjS{wj1o^xlOcaHrhsjsw&13D=32sAGb+dBd`s4)2$&qAOS+WU7%5DhJGDlx|
zL*wIQ^W4i#F2i<v#X+=7gC*o3wS0GMZUb^^s<=s+d4v+O=rvqPKe>-9mq1^Xn%sm(
zo&y!Jj#ms=s`+_wp&u7;=Kh{?OW%TR$uRcbVcF`ePlcqQZ*(fg7<BEv=<wJYtDVi9
z$AnWwc2gy_+m8{?VM!1h<L>2TwFM@A0obB-I3%K9j-RJEh+kdQia+5S&h&Q;LjR2H
z%T5rqV;0;0swov5R$<(FUidw6!{&5vq5YA*BtD-Yt;^Siz}GK3s;h!v-eqR*6%Y-M
z0o|_VEdE_OY$Lrv7mKX4OKRX4+MtVP^p>Ngm6uRnwF7K|Eiihkw$a$Nj}ZmaRF!ei
z9n&&sblRR{`{|Df?>~c%>zY#D!5SUAl%w`YU~$e7rW8G`kUCMjvsz_0&N>mlY>*jP
zYS?J(*q^|~;7f1hg*+BZxev?LU_IXUd&yjt^-RY1Xl-G89PzyK7U{8n^Kz1*@p&cs
z!Yf}=c>im>bTD3iq40WMJmC0IPE>K#s6M7ej4J>HL#Tm$%1P)Fay2CWhh3nLi<-9Q
z%H+Pt@T2E3y5Go=|8UN0E+EpdZ1POOQOtFTxplpO(s8!!tUyBA-8tK^5xG?}aJe$A
zSulm(jdj`8^iM-blYkr;WTTun2M@P70Yekv_rkmJZNO|Gnp(_kBv1ZcV{F<?Xck`d
ztSX2PW_jifvl_a9gC1Wr5mO7p#4tyi$+EVT9qrS2B%)P?yHn1K(E{gM6Vpl4)-^RX
z$k5(^Ex^J=fBH!O6YJ-N4CuCo@0R71g;<U6l~37s2uoAea%h6Q45!hIQnHljRKC=x
zB4a*+GYP(nYdCSDh44mZy`7grwK6!44O_FHY_2<<QJ3$eH|lSg6ZFo8QpVFC&PK4K
zw--3KN4YA<zhdj0%yuTtREIjYE$ASQzTXRk@KJj<2qzmmJe)AKJmVzxS>f=~Lq%8&
zYRBZK&rEPTb&SVRz+xe>3ZE%H6^X@&pr}6>VVU=ovNXVn56ZrD37?2<q}?~%)p*Qk
zU^`xt2)aDAxZ{HvU%Lb>$eFwBHo~jU1QK(sI<r~4?@bE26Lh|gvxVO6I9&G#JT)&s
zT&-s#F(?E$8{b&D4G33|dbfhk&j3SFi_Yblb?U&FwnuyefF!1gD79Ez!fR$9++lPi
zenYHi|FX2Q;QZ(XkCp%8CEanfNtx1I(AhG1ni$4D^NHQ%MYADs8IR*MZ-+6TlKAO7
zhVz4)l8v|mWxlQNc9TUXZTNe^x#3%Y$vVE;D6I^K>x81c<_4X|Ok4yKPG*!}HIaHm
zYkd`Bw$z%aFrE=4b2Bz5IKiOR<)|MDKgr+H;Oxk1!=MaN#}lRmrp7nQgQnkHUsSe;
z^gmx`;y3$Zo9)vbj^Vmr<h@xgfb`f;%q)DyIO_*aP__0r9@m{(8_A`IYf6NM{D$KR
z6XYaF+J`d5q2QNG-|sjn4Uo#T*G0XDv)HvMb*Npxe8^)J1(wsK)ZU$i8105-8rf}x
zpi0d=@_TjYB!k~lg4;U9t3+RYzny8~cZE4|EAEJBB2d$9Cg4}C6Tj5EQ?_!A6g+*f
zJaEz7U{~6@mJ=ye+%QpTx~uVqJP!#E9h&YfQfH9fWPO_*^-zvBpf2dcN!#I&7fE|e
zEn9_J>Sm;IE9}Y$8c`}epj${X)h*X7i*mT?r+L<LaBC2cYE)&*!Y4AY+CRBoS_VW6
z&*T}7L)6!|kjyS>2=IAfzr9RCcf&u4)wTIDI<%n0Xg?SEO?0q>XH^?^aFe;&+~V`o
zVZCukoF>+XoDv^Bf80@EwAh3SLTkh+R<AK78=jLUHzlZD)kY`l#<mpK%}doN#@Ee8
zH&@Y55l_!}AC|t`gv|F)n0)$Vh9tXSGz*Nvjt<MBEzY<g;p#srct(1OY8=>}4<$MN
zIIwp{daRFgECwL=J86D<odonDG-HLTB!jvod09q*XLIzUf_(1H-#A-r%%1v{ioeNz
zxYL~*dzndj&un#1p7h}CJsT$pv1=LjC%zY+r&+vn{)fuNC{6WM!;*Aa4pHkNBY}dh
z@L{d|{?XUpC55)Cq_^wFREXQ1j!o28voLm|w@8WUez{Y*Ew&lY{sfK*c{FO<xH96q
zxJ@WN@qs`CumoR^y?sR7F%gws7yG?aPOUPs2+~)C?=`qNOxs0I`$c{aWYx^C>6-W?
zZgMy`2O<3r2T2={Ys4&ARf{p{NWrZ1tq;<->H(^1+P)G(14;4Ngb#)j`+Xz%0tjao
zLW#*uyt8Tb&dX|t+@mqwTY&W^wv->i=ha!Uhy|^T(b|4i&6fh+8xE3Cd=YiZ^wAvq
zt${3NY577Gk#m|m{i)d|#J<eF^IwRNf~i3#5VBcd2x?XIdX>U$mEst#B+v%v%0PU6
zMgjCVdNnIf#G)Vw+BSf9BSx%igE#=T@tN<-Mh7Z~u{F3s03-&3#-8@#-G<peS~Lx1
zw-`RwSq*V3pJjvU&#H<W!uLJ~Dn$relZ)Q3I7!&?(;NEQmvq>NTPnUKq}cH)i#GDn
zBFd0`vtED$EHAmo{E{~DB7bz0K7Yck^YKK$qjJTJa*xh89-K0x1_CK=?S9}*-)E2Q
zMkJcMBRUo-<>g{&wlj7z*2d=84Oj5@CyiiD;$~m41a`-6?ApPK$8L#DKipE>jiwav
z3=;Ju%&+_O%pyFqoa!9lGe|gmrz~|RuP}4D*}LaYt%p7jpPU^A9ef<5(^jzwM^{~4
z61)j2uY!&kcQhb94X?fid^j;(_f;@pJ@8j-f$9x}2~67ul1z-VwQK=2z%#HYsn4wu
zVhjPTzuH&xH;BNq<>YK111@3jf{aHLW+E+bDhnys1?C*CJJ?R`NoF5o<dUH(9!h_p
z*H|^OOdu_sq#yjwk%`2V{5neo(g*_}C?8PRZ%_At>yy>tu_})dakZIwA^9ec)ST6L
zLCkYO;$wwE;^%9*A@c3yVcfEB$m_}RWLUbi6VmB*)RW#Bf-!~Q+%m()3e_O@LB5Go
z8S5X+Hkm#vpRU4txV3LEB~I0@J{QH^WP<+;IuJOalDAu!E}iLK6mr_LOe7{Zy`#~G
zJ{Ay=?M~u{naS?_*bPv9Q)XU?mMjTf_l>P@D_C`M5<winf;b-N(t({Mkv8c|+l``G
zWy@@>S_aON7OYJKbK6<*2M(tR_YG5%UmY7RA@o~&xfs<fEy(J{`95TL&H7yCn-IMx
zGzr2Glkskqy0n@7cuf>JtyH|q0#Yx_S(glL3&CaWJlR|B4!yoGcC62m9EdsA9gE)_
zkqOFLRM*gKyci*F$oxz-#r8PGWX4Y>1MGrkwY!9hb48_;Cm4({!g)C~Kd#;mlpbry
z#lcT4$k`OQXt6;wD0fD^yo@$cjf?;@!8a&q9}9oKV=q+j2ZlfYPSa*ZS8pTxpyzu7
z9SDw=iO(|W)eTeBVr*~A{u955CycEQT#_RxiL4JF$~0Ey=Q+qL<nBL>WW}IQylkQ1
z!$omkR~%C7<{6BnfqlN3hV5vcEpt;9fa=ps2Ga!C>}u<sOm-T1IEtOZ&uDH|IPx;f
zJ4MB0<z01K8rZIfkf<{Txj~-rIldejD0H6#*{z3E8p2%=b4I-^=p9F2M(xmF7C1!E
z{ZgcEu(5P{MK39m1;%2S=B%`~!N1>e<q_)bK%;0L3qm=o9_*3}KhNJ+4_yZwOqoTm
z%H?{{pcbdE2k1TLh^m`?yK7Zq9=lN!^UBLeBd4k?cTb$?BIeaV@3R5ZA&*`k=hM7$
zF#&tHf2l2>rId%zT)HRgnhI$X=4dRWoW5%Tq!6-vWJ0={wb`hc%!%qI5kHl_-jUQ5
z%W+-{AFC(BeJ<Q0*+W3g+JaaJL_3}#pMzs}|9~Go$kY@bCjy930A`b!Sl^c~AUtSU
z<jq0fbUTm+X)H{IM^vDaZbv{38-r>nY$uxremh5P*J`(_pSFYrz(b)Cw1G_lfHM&*
z?ZYOZGNXu<vWx|_puO_H>onXW#iKev&UaJr#B0!Hed#J-x?IGM@|+UWFs^O!%io$E
z#G~-6X_4L`e74MGY$eZO_@<qJRs-dZjjLPffq!(u@-bxnS+W<(fZq}t(jwon=C3$g
zo#o{JrE^eqH2y-{h?Nf*XT>`zy<s1*(|PHF!U}De%z7>K$vJf4YOQZ?uju7%Mi{q(
z@%{V9PHF<I(HgV~S-sMGkg5|rBC^vRm4#x<gkF=-UR)WW39W`HD@yXMH5&stnX}0u
z(ZicpLU*o;IagaJO#Ec`VyH#nw?v<EmnR&|eq+`4xP{(n1p|cZcH^8=B8}qWi<=bg
zkpruZY0&k;;857I$|fF=I_qeEIZi(IThcJglknnTfD84F+;lQg*JQoN;H|&6t_5@3
z*@_`2$JoYO{x1>*>bbI<Z-*!9xx{P$n$5*R$MeuJ8sJo8sDUu2^JRXZIOYi3>0-2_
zwOVg%Ye?jZ+MvT4iW87F4>Y?q##c;ykYwmoU)gavU7&hZ&^6W+;c1jXQen(j@h#f)
zBj_Mtz;~H%z_b<a+VR;60OSoz{N?4dwW{Hs#;a{^4vTyO2K}>s2GcGOBZ}OI4GSTP
z?2DNK`saLCgdBw=@)Zz)^115``*0B@+e8gd<Wx;Y&{S;quya>LQjIE!;(9}*shkBX
z^V^TU--DCdqzMqtm*0|H=FAj5J!<!R3^}Yfbm42g>q)Szz^`JgXhm1c-KvJI-PbrM
zlJpYS4O5SCzB{2PR^3bBc{VhO@Q8L=HY+-N-?pI@#CczR2VIiHke&XFWI>%Ss=i6$
z*a-DiwHda_&r=^klj>eDzzn6vV72tjl7ajIK|nUaka(Kgd(W8jrSDtBilvwVMVYSg
z9N(Io8bBQWWT@!$g6KvZZVzXN?s}3@O$3}EcL^rdPwM#W;Vt5*P{)hY$<DA6;Rpc6
zGYJ}v4Ia$;?UDrOY61ITmp}TM>j_f&;+Q;7Z`wMOV-xU^L&SDsEOi-TMT+woeyA!p
zC?*mabcNI4V&U&fBfFKr_51ty#VS}nUaa&s5grLlHiu5qT?mK?FPh?k=<IC<>G>r9
zPYfzeAX@;A_aw<i9XT>X#n4fdR4sHk@;03s{(?JAi$?qj(Sd4f0EZL?he;0sshn+_
zfb*kzVAyl91Lpv(rZezGDn6Rcp8-O#aV$i`7-ZbpR6&V<ImiueA3PwtvRfxlw?3BZ
zaFicx$a}BQ;hshE*ui)0nPKhbY{M)b_UMq%*v7^7&y)!5tLE$^PuQJ?g)T+MK~9hZ
z5TKRq;7I$MNwVcp`$gqb&kgXK9C!_A-R>G!4*gg`5LKGy(R)<QhdgPVX+A7#rzC7C
z!66c!W!-GfN@sFyKHn(a0%&vMd@c%M_ae|?)Fqa?D|Q&woCuxGUUF#5gY=+FpGR?f
zvU<w?M<cyT#YqMY4(oo;sRE8hP``2?NnBf@6dvQ>OOF&cc8<<gGtn70I}a#|O;i&J
zmP<-2>YiDMxd*+{L1U<Z)PrZ&^<K0K=~1u8()W*n>N1?Ip3zFH_Z)JCAp;`J6vMKs
zxo>wnt^y*qtEA<~kBVtl{Z5df+oOtCD<phOOufesga%CSDZI;{*J$<Jb{NT#=`4QU
zru$9kv#Uao7f5VV(`Vgmr|nQBD4nH<-?BeBdp*?)HMK*su|fxBDg3+@s>5SFbkq@j
ziBYWwmh60%*bPbBLvHFnGG}BB&Dd_4bF8wj<anU>0+Ia(y@e&In(rgN&jhyN@27`|
z1!mM>TXzRF{i02(`|rq6nFn1q=c`}DiYI~V^?ZF>?EQSE#p%jAvl<ajBAWf{S<frS
za%3XkI+iFiwiq)qFfhFQWM=5QJ6RnHBnfS<vI?hPHB1$p=Sx99?S1l#>!4Fkh!JYD
zF_B5?8L(*V{x&Vw6Fre);-eVY_^LUK7?$obR$ri7^eWE~LVmd@Yd2Icnk?2w@_lQR
zHtfB<bm`T~(*dv0D5iX}qoEg`jw!@FF{m+zZeK;$DeDr&M@_d2Q`NZMxGah_jH!zA
zz?jQq7ioh&L&j-HUHrG}b(Mo~LvlD(R@1#QKvx%sosX{;bxIidV&(uB$9RL2*&2ec
z3%|E8GBPY1eLvBkAqSo4`|Kv|WegGX(SGwdEDQ7Xo?**5E<x^&Q4kuD-#KB2u5hy2
zSkA`xC0#BVQ#@P0Z&bv&TDs4XP@#aciED{mAuJxXTer$9JhMnF5sbjE7#M$hXLlM1
zju%I%1`i_gX@q^l$c>o*+QiQ$j(#CmF4i5pe6|3q%V45h>FgSEST@`8NK)u(2Xd0}
z*4F<I=(L|T%d^^Vr+FfuGxkT$Z3qaD%oi1fd`%5;u=H2;@WB|?+i5>+JwU4&*h5M*
z)g>e=Js=G`cy|LoKWv;)v)Oy(-|QWL3J!^LngQL;n6X1kC9Ak@H;;T%jeG|3ZSKEN
zaefptjcoO5?2BibDsP;%8Y@sfj4oF2$jw<>R1w);YI(T5N@03s*`H5l45VA`2n<Qx
z6WBYnNfYs^$VBGKk@zirj4+nSl0W+StixU@!n`~D?80dyCLhCA<h=Azu8GP%*^!T~
zioXU}iWZt13^OiB^UOfuM+piq5OzR{b2G*x(b#(d@6Mvk*BKwalp?y=YXU(2FBgDj
zT<*^oGD`=}SX0Y-PF2Mog5#eky9RyVJPZE9)w%`d{BY#5HhKKWzwA~(<$E`^OAy`-
zC&+Oo3gDC?eAm~!?=!aodC(@9Y0&XRO97tDVvr4Jd52QW|M~L`hCz|-I?e3{gp(Uc
zpoHJr$hocUw>*u+OG1DMKi+wMlmp`p#;1*{`svGbA6}YWkZ!LmJo|WJaw|Ne0tD#9
zN#QNWp4zTm8_ijCk{TK{9y@Khcs^^2u1|eSKp;>z9zF$Gt9PYIZ;PnIJ&f!7y1=6m
zg3H=#L_}m4TXF%qu-eBmI0MXu?J*Fy)uC~2sDb>D^gx+GeSh?$YFMfO*lGdCD5BET
z7z*Il-P$0Gy&}o$Fd}lTQn%qr!bmdA&mKJeWgInyIqkTd<G?e^YExB~mejE2GPb^R
z_TR-C^>Pvx4{ZF^>v#Dar@c!fxa?z}AB$*?5B4XPB5?`_1JbOILaSlM<Ky}+9-0{p
zZ2ClQKBzA(kFfdH0H86Hy_<igrf1=8+mPLMV%+M<GRP`s8K*JzSPFpG?<fVE*Jx;k
zCrSk80H)@2_PRxHOnn--ed?CjY1ZxLODxf=3!?1ZUrWqel@(U<lL}^BQ8$qkqrK^|
zKB`a4^1B0+sJ>=br{dAP=H}{ZZ0DECABk6*ho?nblDw8Bb-GjB>KxsVHi~Ou*&Nv;
zVlSoIe54k9O@SlN<(bwK)yo-Po#%jnz(_UO2h~YHd)iqaiZu3J&+n9*z4M#OEZBhI
zHm^}(;lzG%$8}Dv%o5$6`{R)cYN`uz<Vv|aUD~XxZoeia7f?6RfZ#G&A-FU?OIH_k
zy+9fa6{;F>qDAPLE#4(C=O2%BA0zI3{Krlhvrr#fJa`<=4#YVa7$91<z4oM9j2UGb
z+Ll&MuAlf*zujcVjgUg(-Az29fdT1yUXB{4e&6SPmc}2CODbO<z`-3D)TPWV^oAiY
zG<dc&LE5uLN=jav4~kr{@q{i`W=BLr{Vc=}fdF@`ugp;;i{o~-d&~W<GAXGAG!J|+
zwz;yz4w&=k@iR61!RlffV0Qm6>mN84+M?ca321c6<i5NfvP`r9;r?XKD$4PF#_Ko@
z!?-xz?*&!c{;tT&vbw&synGg%KJJ{FnCN)CIgw8wO{$eWU8zOjv5^<HK_}F_W<6Eh
z+Fx8$15?(IiK=^Hscu1y`;$HE1sLFg7Td`AV}GXzVWPqF*H3+qxs{@)N_EQjS>h6|
z=QK%%+0RbtR5A=fp(mlXY_T00kN6xWzf4WAG)zc2lfjJX)c1Fn%hPJ8?sSIL6jk5)
zoi_TFtkrra@nKe`*kl8)?5a9c*b=_Oj%aep1)u6LurZ2VtI@@h3;w(^n0A^a_2Cvv
zQF0E7id`B>ny=O1^Q-Z##Ca)wm>$7znYe%8eu)yDO`cA7gD=+_#0lxHX%;*$bx|U-
z<J)IcIq#=N%Q)p$#qObdw>*yP9!$n(qhQI8O)qX<%J!Qc&0ktHqO(!bekz$cUQ{CG
z{3uZS9xnbh^gN)beo&^0Ow_5^TMlg@bO_xIt5m-f!X@tqe<%Ab^7v<4WWC1?>CxKG
z_#$<|mQ7DtUflY=yz+fnS{&8G&agP<>YIO=FTdb^C!=x{9p4&OaVv$Eei})AR;AjY
zh*QjiKM(m|Gw}jYX_9u<8ved*{<BH#N&uZ<s(~Aoz@K~m1%0$11KP>=^HUsuFT$q{
z^rT!a6hryf;RLhZ1zu>Gy)Cl87fEFWdMbcZ^+x}`A^#1+BuK9VvQm0)&&a<QQ6>d?
z(zK6Rl>N_R{<a#xLI6t6JEE=Sg27u`4rx5r?aM1GNq)Jc&E>ANHz|L!TK^t&Nii^A
z3PmX&8G0wjb?08@$_43_K!_h61fhUvgtU2Rx_<Mb0U+VDmt0Bt+|G}7FD?OX2Af^{
z^6XFoizz}=6=W@b@w8P7F<r+p00cl3cM_O48x-m-$o@83yC$GdL0z-J!1jQ{K`(gD
zw+0|5Fqhh{$*Pkj7mIZK@;biEeqtzpdM^ZzXuBOvQxAkr;c&Li1}Vz<KS_{&O`RGM
zFauwk<A8*TH2`$#kGByBoeCpMaZKIQA-^(E8p$<2fV2g|mrZlPkR+m)*jx>l#UAkg
zuD1A>JJHe%hS~WVU3b&lD6iUX7<5cFZZW8}Qa0WVdk8Pqj3^)4?WJ9v&XYHt48e=M
zIAF>Il7j;_U0>e;p~7u|O=+a|Tr=yX@q6`SIfrROuqQV2)j$%)e0_Z#4)GJ%94k!D
zFCYuN{>swwR|@TTJv>3m1`6`3<##lY0kRDT2V0A=;>QEF=yF3axR*94%42Pqziz81
z`V;53F`G02aIkIbHlndUUPX8oaQS2gvMd>5=QeGF86YUU+;DfO5;8aBiKyQj@IUB#
zoW^J0K<xp`22#ZY4Zg<)t&1^~=~GgG+F@cFAmnQbl+)g{o4WR$?VO4?G`j^Ipr<Ti
zjkn)2+(IEV-j`HcFr7lLE>AG<l5tPZ?fT>hIB`QhURSK*qOkjROYWS?X|?#t%v1X*
zS3|Fz@+|;&*DeoSRmD&v5VnQsHpCRL6Z8V@U*23gb=<Y)+r6n;(nnDb=MYY<+dofo
zPS(e)WtUDTqGTe;5Vg=-htWq&8Qx_cJ2QPI{`-80Ds$<tBP>8p^g+X1por#Pb|9uD
zu=#D+OaHTt(ub&nfl4&~5f5~0mvXh^;=rC#>;m&Zkz7fm^0j&QY>n+$`+hJX-ZOxs
z6qq}ug^U83#e?8GcxozQXWoj6iuJ(CO#|wzli{2z%&ublM9;Hcs-2|u#ZUrOu`{FZ
zQrHoNnSp(HWGmBvd}AA`iX9H59j1>@^|l*xU1)$vq8Nff*&sY7(*41=2fz3A?L(yR
zFA-jGcEe!zMfSfg8a>U82ErpbF~S^6)MRejcI&Q5;MqNuHA{#uDXwi!BWZw91dVSN
zhtX*yG4**!xoJm!pnDmB-t6L;RQDmws98T%+864>!GB1J{bODpr%EiumNQL%(&;=a
z5(v45YxiAeeKtVgN()UQ{=)@3B3)W8@3my94u|9X7dLjHX1dwj!edjP<>+B<yCt2c
z^FYp{E)WxQJmz;a*=^#tO+7(r-b^|0sBTS%wyvCKNbnnK${IQ>3W}~YxgVA&<hFun
zoC^d4$&d!{_X*eOIY3squ6rF-$g7$ebeWIA>;`#&NT<(yfH0*Mbg`#4ms080|6^v!
z5BF$yZbG2V{?YO5aLWzCyu7?76VlAH!={~<0cps?`%yj%VY=I~;+M{#yA){0fx}Tn
z=m~`3;tl<!?Z`_?k<Btq%w4}-BywZCbkmQU%K3{}J3;t{v?ST_ceU6EJw~|8`UMa>
zsZ;V;m8H8XWDeWixC_XGjw`HRP>U<?ZoI3u9eXlo__&Ua_BZSLFS8p=!6^X^6V%D_
zy~*sMf@mnmm>eCowMPhSl)7LhOp{YG+)1tx8R*$Yc6DsN3*acN#_Ljyr9pOg^jwtj
z%G_YL!7LBxri9P{EBF$KsJT}TQk%T@!4=leF=}R#V+m67#bI5M89yhEe2+KI5)>68
z>t23S$eflx)Z*qI4Y0WU`p)$9b(jV_pB-#C)55@@Q}8-)G}^XsDEmtYeC)vua%1<3
z-M;KyR)uGIhb;2y5|7%xtAMy+IJtShp8tWCI1xE#%%oDG3N@e<7@V{%<O~er{u3YY
zj|qJD_}BA}7f=irs$LC&jUhxKH7~zqR_tR`Pk4h0?A@Vzp`zB-)(C!t!$UubfeqWs
zC(1W6;1ehLiplGarORE1muS3~7rEH^<03ENWkLl3zt9!It(WW+sYmGDfrja1D}L}S
zZ(WoayZ%9|sv<zfb>A5a<x=3uoA1`QK0a9#Xxr<$VrOCLYw<u#<<kpy<$D9Pl5x$e
z;$6wxWxA7o>K4zRSKbRKJJ9;Fax#}}n9M06%SChOXWm;s$UnFp$yIPRA3P){Bbl&w
z_vX{|WZmbDaeJhvQGao_u-m}l3zw3jPdwIV90E==-vOZ(<#Z&zhfXYZ^tUXgbv{$#
z*&A4I$U){ER)a0Wc~*lrMo~6Gd=3Pb#~a^|L)I5|?S>~#u>f)*obpvuI*A=1M9YVq
zt-Rg)MlWU`bhv`K|4i9br`+J)Gv(DWz=#3L3O0rU0@DyPiGd`Ji%ZLF?4(4ewS|bx
z8UTrp2=ohhpaIcfq-Is1&#Z2x$s)c!=YyLDh><434agn6q*sVA>WNf7dw<q^x+=9e
z$G@R2x)03P@>L@9WOqvf$8r7h#WcDbT=&@ORrgw!lkEKsGU@o@DCP|7CgJT@fu3J&
z2h$qA920)OrEEW5LPx50<f`DJrKN7n@=YC@fu0@`@!Ai@<LL0-kIT_H>@Di?DW|;e
zxG5(v@9M4IUs!KH(K7$dm-g}S7}~eEQ0BJQ6o7~o@s7(aEiKXRFDP0UqIgtL5atjp
z+13U}|EJQ6Ja3ZkF!Y>aCv+Dk9vznH14rvIC*tSYhK)|kbD>{eU%M5SsMnhx+`{K1
z+v-_PWElO|^9)i%2}P@2CB#->|3tfctBg}K%T}MJw5{V7G>*Jx;al_6hubh3A$Xq2
zIJKg=AN<}ytu?eZH&%>&h2C$wJ|ddpIM`1kD0;Wq8KxdF4M<ma3T++USPtl%LIDs#
z44C3TkjVV&0L<&J6wG=!^rZw}V8wH9lHMIl60hCB^2Z!|!Rzg<#jC3D?QVroR>Mbl
zqsg;mPl3co_xaKKas~>#F@}X%=y4$AGH%^ji^<Q$tcr6@zhk0V9i?(y4Z)6_kr>-e
z9jXnw5(|`A1w5AfoL3{DB7_l;_Qa&m`#IFvPxOFy=0i^eqSg0D6)RgUZ@Eam#Rn8W
znNtZYV;86R3uyLr>-1dw5FIs{MR8`e>@TuU1?y1hsi`Z(d@tMvl6Jb@vySxUyK4iY
zOB6_XNNBaLC_nO2IOr1U^m^l}Su#tNkoW-8#}q$9Hy01U1pM>;C;U!7>Ii7OXNXTB
ziZ=5*IgR~BfAQ*B2YByqa<0iA3v{T|`iZ@$nX!xGHwlj3o#{TB!z8_uW-6E>h8&b%
znM{er1}z_cn_Y~0$P;i*&8OGPnp!a*lCc8lgG2puTQd%>j>e!4GfnTru$-rDnOb0y
z@$@?4XG@C#;P8d+xklwQ{xke5x1on-v7+3t^q{XfcTDkb3XWt1c%}dfeuh9_G|EvK
zJNjf6&HS=?kBfq9zKaOTjfa=v=aeFzIh5|@92`E2>SqJLK^10@lN&iF5j|;J#KECZ
zlp@|!ILpg=qX3XyTU)iNwT*K$w!rnt*!?m!@GaskDt5OKnbjss*(pH#xOh@{e0h+}
zV?+XY<u|5P_pd$&p7#ZoU5^$}2h1+QGPwfKy2xj9z{=Cid#Sw=ysp-A_xZi|vWDB{
zLt`FYG##bcj1?q`tnx@N%HR%=on#~?F859o?xts(h5V?gb-UQuAkDU=<ZpUQgZG!v
zqp0ATd_^aZ)ucppkzE_DaP?cAO*>bORazU*Z|3@pH=Y*hN^HUr+VKo?=T8BUOiB@9
zzS)eY3BxMie-Og7M`Xz9+tQ=>LPg~U-<lkhYpa!_10Yh$B}31{IDQtgK|aKo;xMs&
zxm~*UKtogW{Y(<YT%v+J;<^U;w`m>ov6Z28FaVN16H~a??-FOZu)1$`o|24gt{Y4U
zg`eDiXCgc2VI<t^d)#ou{I1?eeN4-1gnwi#r-Qs6wDO0n?mym0`_b*%RjFZ%>?gQn
zZ%{L@YPTu#wOeU!S{AE;SWJ!77u{`fh^DRLpG3b$xc@kN`0(MgLOE5~7Z|`BMP^X#
zLmv0ujzZk7eks(>{6bwz9V@p9@R}1YiH*+*$m$?#wj*-`t*Y=p@E!l)0agRLmDfX?
z$dnd^Fs=CaF}fDgYJUL=zgC5={hA>jIn3UC5>{u&(<3FXYHA_Xw$KwXysv53_!>W_
z{b=-1G5xaGv(yFkJAd_$carGCdx=l}WUy2pLKZSM?sCtFkk@XvwdeWTOmlpGe*U-#
z?hw^qw!qt5i68S_GnOth7E}V|i%*(v%bD^2Jq&$)?=2xGF7e?fA-=IEf;;n~b}RbM
zu)mB87@QV3`0aeit@;9i9}`E5m9xo2a(_AL1hgTc1r6)RT5n0$UnNVdW<mx3#rOWg
ztoyeoOID>sJ@2*;Uiy7XZ}2+3FZLVJ`rrBz%6E&7fKa`wxX1$F71IYl@j!LTPHS`c
z^;r-j`x}#ytor);{6Ux34BP!>)FZXid^RV*&b{Yy^+Fl_f*$~y8OaYMMaL`non~wl
zlh~1VzP3y@=$2cowF$2>H{s=tfP|mik63rbg}lBpkxh3B@U)QzZ+!kZH^3<p06mnw
z2f*&PosKIP^hC!_HIRfs;*$gpXZUXT0FkK&)rnnuuq$B8mTANnk0&A!tC^}CM|y?I
zX-<HAso_^}^2@#gB%wI)Pmfe`<$Hh@^#>D?vEST22Y698k9~tRznmc8n3vncyv2~&
zh)&^oH;LO;b?;^C_|d3}_g*KH!~Rc3Mgzx@oNvE^>m-}095PnBObV~%K>@k*x%7$!
z09#B1RXQzJ1NysHni7wgf#l#bjME>;RA9PcxWTYg=MQ}Q55`l_nOALQfSTqtpmX(s
zXGsPC;3WE&#{}(vt@Q*XA9{9n{->mE!-2O%$_g178NY??LdA8bODo$gla2X@Jtwmv
zmH=uzgkC{qW2h`}@IPy91e7cY(Da@!C!6Z0@s|Ti2UNb;6P+UOV4p*>$&<M&8^A65
zeFOU+l69QhwE(9?5CC^?U_aCJk!YpdCAczshr-4h<h!N5f$7<t_TPoXmT8wJ!Ru_}
zHE8d#{hMt0@4oqUr8a(T-xfLRuS3x!<m(@XM3DWUayMEk?l`NT+L~i19A5%k^ak1i
z`HtGf7!g)?3cEF}ZnUO!W+T9)8v@2$NmZxRWgm!1o`NicrYy+~fS3RX;;g3f<TDXm
z9T!#z$BC|U6bLTtJ{h&zAZXt8N+9U{F5XCuCDG<YW#e|!;w==A_HUKF)WwL6TfFSR
z_)Y?ctt>u$O7s6>4glt)v@~nr{8<EW1mP9)mu!64NUr!%Z&o2PR`BQiuuJdxhxBxd
z!q20<1Z2G892|qd3AftfXB}0p!1GUkl%shW&lI#iwh!cLGduyAx=^TBK&Tr)+x`;N
z)d5bA&{2wb<lYm1r;f{(|A)P|49jxsx`w4&Qt9q40YMs+lrE*aQ@T5pZcrMeyE`SM
z1*E&XyWWL+-_Luz$FukS^ZWJr%R?_N*16U^=bCGbF~{mkdt448-kYy#t1$Gc6C7lB
z1iM;t>Wx;@6_@eI=+Ns`EYJyh$w%w?;1XqSlB%!x-Q93f)9I~ABfHT+RRsUdI6xgX
z85(90sLv1wZ?|&;_{C2^m0$Fs^83)C$<x-CalK5uR`5=5B1HieFrjcx&+m&QV!Az9
z>&+g{w%JqMN(eo#gdS+UCi3|U88jOPx<he|&72n<XE$mNTim7}ZdD)JC>mY@@WV`!
z5O5J(zkx2s>z=^<=;7h@dBiV+Fr4F-CjbPrY?=T`55nMBP$q96s@Ecr7qhoEl?*D%
z?i)8AG{m&N1PVsXgpMt0V*fWMy?&Ny9&<|!U!`nsk>imTkirW~Q5j4=g59J@vyt<l
z_RM@>N!W%k#btx`;WE$lmqY&IEC}fRQu=$U$CHFHk=b#_iGD#o-PoUb=94l9wVt7i
z2^;TIZmJ(q=o8UBQcPXWo8$x!Ky_A0IJfB2uNlciqu(9s(3(|RER(|HIKUbt2Cc_`
zYazMiRI1N&KHhSWJWZv>v2qVkriNX!qDy5P#nu$R=QGSzp}*dt5I>}r_QRs!)h(VP
zTy*1;@12dw+HEcjF{_RrGFOrE|5M11OZu!ir#jft)*Q?<Vix3)Du(TkzHNRn9+}tX
z`}t%cf>@xBsmeF=KVAS_1zOI_(=8ctVY8iq&8G7W`+6XmrJ`~oJ3t`t`4qD`>~OWP
z0%03!WnoFfxZ^^7CEw`)eM`9lMBu~y?aeyubKXhUi@D)kF~FWo-q*nc$fUwrR7wAG
zYn1qU{VW0!Nm4cIoidEzxZ1<4wUqE_mOzz7eKDc)QVV*_6YOY!3c-OvPxGsAa@q0s
zhkK9CJ<vfGefYuVdL8QCB`}vES>VywZ8>1FNGd^w(`IS<JIPP>;U){SGgWysQIzU5
zceYVD5rFAHFM1cjD#k%T$=IVTp?s57CHBr!=jxQzuD7eErHsT=MCD!++<Z*3mY$S`
zfd{#o8+&QX04PF3%-0siE_+8j_2QfsaQE?lOt5(Tc!B-F&Mw+I@_9TV$Bszt{`SH-
zIL_20v3s4hhwC6iC*6T+{$^<a=mxf-2+jN_dEUO@kfx73>qM<=7Lo6dw@)qk5rQe;
z1mR!(U7!1?&BI*~h%t<=-sg>K`V_{M7!OPvr<pZ8EO@#piQW`v@*2!H-&(bdYCw>}
z=#94(n+u-XKUJMKuiLne3gy*vC~nV?0`JGFcf(7D8vVa-HN9dI*KJny-8I=6-*!Bx
z&%J#%1^U5^OPeoBtRq#2v)+HLkRJ2RZ1eqvx9x0LZma)Y0F^Pf!c?&aRZ>*jxS~kA
zHMNzfS|g3Wd4K%j{%jQcK5*P`^V=tx({_}5Lild8(K<#R*n7{1hs)L*!9Y*q^3UBb
zTrQ?n?-ofkdq8blh1v!~+p%^t_o-9k<M)Y!TIYhr4KRko%ea`BRjv<nhs?h{lLG(W
zto#R#m2-n$nfWBdhYo9P8gW`66cMns9U@v1Xu^SK-RjYgkrJO8sY0$V$NzAp_^9M|
z)a4Ayd+GX}T<N3@Jcx)RS#A2)8M!;kHS-rX_-`D2kzg4(7z<ws(pk<}9O5;`crYVy
z&@DL5I>e`@9&FO~W_0&p%DnF8GAeNLP969ivqo3^(b5=j@vV;<(O%;;#i>wcCX5An
z34#D#xOsb~RGaFJ>MB7~#_Dk+@;z3Hr`8sfSk#-BCt=MWg=7^Uk9!b_)8$Zu(rLUg
zUJ*QAZ_+7#BzOTsZa^9YN($7MPJXDyw+k?|w6valgnqx&Kr?l!)ncJ^SRvxKtq>;|
z`PdGzW;(sNCu|qaVf=MTCaisZL65JNU5Nes!o&R`V+kS_?N&za4`o$JRxq9BuF={m
z0dY@|<hlJ--|%n62Sg1eQ3=`7)$nx#B#ZGcLhaZSaV0_%$BeZat9}qO+8;j_pk8fh
zD1SaNnW-u-Ma_Xj+7Ssm1LZP1OrX+Ct@ZA%HXngKW4u9{=MUkBQCnK^5rEa#0G$$6
zg;Kl0ImM{MVu_~t;wQl#oT9A7%pK9Uvv=S$(=zk~XQq8$oS%0R*z*;u6mBN}T|A3s
zn?n0Ky)A>G+VcEjv^w9Mfu`Z$9A8y_7#ik!ykFv-RKmluC-!^kTcu~htq_|1<)2;I
zK?}?}kVfCAXA_Au44tcwaw;cC66R>3(A~_YD_IHAZXYtMr8@n?3DjqX5^Zuxct3N_
zuI7Aa;vD6NnTExvUjJDK|Jz)S>*F5ogOEE8e!ll*L(!B{BK6Y~@Wrq;eB90U+jePe
z;wY)E!f#ZrLG7f`kSv{$y16=Hfznizo1j{xw!K*0403khMqzvT+b<g#hi^Sb#!kt_
zJeSgVQSqjc)cJW^-J4y{H9C!&M>50kv0p9GSBHOA5Z-Tn<j=UiNzeTy@aX=r>s1a8
z;%7YbiI|MM%u|I`7db3%wHk~1$AWiiFs!cxt9=p8mQ;pAIzHpAt{3{0zPOTGwN+7x
z=hEEx#o4EppX{5N`@0iA21$W?f2lM<2R9|lReQ_yD!ukCi|irKZ<4a~L&WcSwpu+3
z3%^P<XW{YB{pGV7hD7{03#0g(!e1aGFu!%_!qXSsEd3-O0fLoJiDkrA;sUn_dsnmh
z(@UniAD2h8R??^(b8v54btjbNurv@|Df6@@PATA{O>uKr6tbF!#M+_awswmgc2!C)
zM~FSObRYfUDAp;h&ne`eC<INpRZK-!)*Ov7DTt~L$@vC{KcHNd_)IB*FUhxX#a&n*
z7)z1UjxfoaTY8H}>3=$biCg$6P%uea1b^mz!+~g3t0}d(MQq+^Caug9tw!k#$=k^{
zSQ5Ctl+&K%G@U~-@ddA9qAjnx!?MP7L*am68=p(xQg+O@`v%C8RINPLKb0y{4+^-H
zzWWgy+uKh{nR7K2lggk<N6ukIA1C+r1vkxkL^yNPmg!+pk?)cS3tyAat3;J?x3iOj
zaq`c<@M#UBUDIhC1^{HV@5hafWchFcu!A~7t#dzzU5V4IaGqCHiNE%-V)F>6;t$Qr
zesc$4r+l(`SRV5mM*QiY=7(1^;YXq}YS%#I7kGSRI4(%kd^kSND1^;eND?|kKDo}Q
z=+Tu-+%lNS+mV38zl(##fYi$AG;3-6=4=G&o{VzZxU6`~DNG`h6*1PTs4SIwbT@Xb
zkzpOrlBwTj^N8n{V^(RU8qil0rueyrneaY87i~Cf>Cr&jxmWvoEEL}EM_gsfbVQ*Z
zwwm!uNvLmlnEu4scej+HwN>Zq|JJrVodKA9rWm8E`$?FLXZvy(6*|8w%;woL)9m;h
zbzu(Aa7=1!xRPNZ-{237HR55PLmyjNH3g*mD38TGP?&6e<#j2LO0moCchMe+EQXyS
zk!^?%V*-)`yB@hoILz_L!c16w4w8anHCYq$R#(X;{T^Q*jcPtV($?J)%`7hLn-c2t
zIA-l_13K4ddV~=QJq#bu3J;6X_LSN~0c8fKy?RojMTCbh$Q*`{{%+<&<wi1IbLW@%
zG4B?Dy2<yx_Y;GAE1S`;-kwb|ANvd0^qFy3Oh#tIX!_Xl+s!<o5F~T7$+3<58^TSv
z&now(&$iRGI%~6r?UV{Kz!~tCda-kJIEh`rey-gf<r|^aOXi0On6l(sbJ_EZSk2|h
zmD1LRIb%>j61CecAMS8OfBUuqhmHE3J{=93@AIs2nammJm%3l-!NGZb#E|xx*45Lc
zrPfSYuGF<c;Hr76HrrOkSIKC7+EaJejM&BH`r**`fphEQ7!C!ZNx)^r$PM1CP<}E~
z{o38gMt9?x%7NX{+g8$Z1BIKKbn4HLFK2=zl^-7NAdXP~f!G$T#twE@YQ}he$&oO+
zF<45kE2iA^1rUrgT)hRynl4kS^+Gm4AOg3D(+U!Npxsap&j8>`mp?VYg?S)~BNN?u
z6We^~H)nXpAxAHm-sY=-Vd)~d;O^<j!BeQKwQVt8R}{EYyMSjZ#FGth+$n(F9^hk6
zM9vn^4l!{I(xlCZZO6Tmv%ccYickzY5D98o!t0s6dc}hH3c57ihs`zRm*=E2($CwH
zZWow0<2t;CKUF;=*Q2eZXmbG%=ag2EN70jmB?}0qG_Mo&etM74Uj!T$YLN;2?yWnl
zkx^00zlN}0m6<d6kTAE#D-uFOVHMVf>}W%g!L4eU;I0pYZCKmlS2nYIRx{qEG8fNf
z=I5F>&POC%o}KSK@!vAKwL#ooRlVn_0W{5((#NcK9y)lhK1_ae9@Uw~gA;;)=7^8L
zWgp57`o)HaFS_k(p8|{r%2}%jIYbMwHZu%AR!w!I;uW1cc+h%h-6-D>O_YB}b#QrH
zbk?tX$?TZsnUUx9s-#Vdxp^6H9`#t?33}3yg~WAyCFh|al|(WrXE7MkW(W7I9d6Z~
z#4JG*5w-j6q4>*o>sPK?MTa*j0vA(b{3PkmLU+Vk=he2$&bai>cd9cM8$G!i;<<XB
zHx)v@!6P>44o!M+I)At&4%$(;Ee&4OE;`l0`=^l5gI97L4shwmfGVl0loQ!)^Vz)W
zp5$62SXSK2lm7q(b9vw)8dXRi5Q29YXC;0}hgYS>{aZQw&4I~d*GU-H!m=L};5-w}
z&*r0vwPab%BMnf7X6jF$JA&5y8SO{clID}2UoT3%=2!6@Cbmj^-24J{QQ+@7kV>cd
zE_qijGhnwfyYWV1M(I`VwzVsb1}}D@ACYnG)bkSFvJ^8M;^jFHCOed5TsbUm&DGhG
zCzRwx02yAp;v?nsh7a7q>ae;B(A2w>7w$EE!cG(30G!DQr<wR~!7;=UQS9@VTZ^rw
z_$*h1#AtFXLI;wnFJb|`x}Hi`dYDF`S|%)8Bb!t~+3<Y<1@Gv?w&jAyB_FY~+>qyf
zWnJcdTy`F*##=wMLUfI{w-XNNmb9nWr`T6o=tATTzl`&@Zkm^TD=ntVxaOCZMBI-=
z{SfJ$vv%_+h)yOHPaB?d1lRjg@OZ%}VcjXTWdJ!tMk?};{V`&-aRJ2ewKaprwqCVI
zL?e1M#|h;GXzl*<l2gy~iQ4^kxU@4NbeHD@&NbV3jHaW9D(4RXfOn6~t2-YT*{WTP
zcYgDs5U#&|^ZAi!Y3Ag-(;^Y*+xWBxP?_0F<n3REaEA@t&)0TkwllG8Zmw1ln69SU
z02bay<hs>2@||ww5_<;cA30788InG}IL%17&Xi<4f%EKJ{>$;=a%!IQz_6BO29sA2
z{84}bsndd*eJdM&>jZ<~dnS@Ios=4=O0HKFXmB1V*N~+q%VbVmAjR=}XL}=ki`Jbl
zj)*_f9F!xji0UYj%d(R}!=(ko%iHQd?T~p&LqpFnO6lIfaGpUs>rN_^vEmjojh7K<
z%Ff7)9F?q};{&S#ICnH*h^(Vba|#?}UU%2Gp1(;(`}!nUcP|65A2x@VyD%e8+X*yP
z5m~zEcvNz3Kl5uds>h0zF=__QI6CuCTUM4)A6IM1-y+wjPahU&YpRc$hDd%Q$Z6)R
zZgORU-VXgdli=#RmHg%0ZIZL&kuxu-2h^<=Kvnuf1?p|W<)!L4E89Q$mZcjZc3E%_
z*eJ4pGFw2{t}8STnW$5Z)@R(2*rIx0LsUuX{?+U%%<4`#0<js9KF8FX*#iGKQ7bxd
zJo7?*<}_Nph?P}uUj$_h;8|fD{g?dmHW{j=<nEf%DK}xnclG9zgtZ@AiY9wi@agn~
zudaySGN@SSyU6!^1kX3DHmM^&JMQ{p5Vb}#>99fOC#Kp+dHlu9_z9(EZkfKKjd5?}
z<Eeg*iAEw|<8F^%opI$D_P<m|kH5UEoq$dHC*h0SDol-8xT?rj_-yi^hQjI4`yS0X
z#SM<bqSq_Q3?rqB<^1aru*bh+RwUE1gd91<?HuUw60&$WmsGiOMPC!aI1TX>wi1tj
zFwGwK6UuLW^_u%1NeZ86c+u>)zYrx)kI%AS;q&AhT+c~W#QglYvEpa9pXpao>-tf^
z{ZTpYCG8!~zml~8T7LghJe=Q|?|RWoc2e;0<X|#8b9KMgjgt@COd-d%=pRwqCuoF2
zfyBrr!_=eFJfh%(AJdkz`YSR<g|H?>Zj*mFOZ)-ZeefvJ*z3|4kaG8u3^xzHs*}sS
z>&ai8uw~y64$EVEj`1&0ykI&kk_AV4<<MJ{GjQN@yw?3%WZ3!2%|;`6eM7aiQra;;
zvV@y#R%TzGWeCzIU`JJq0R12G^`CRH;0glxu1_|fudlDaC%`&u)wk~zTklL63*^k)
z0g_WWk(IVHK!nHA{P(9If<^TVQ@&H5$molYI)a<&fiC}4TmPjEOSgawfW@w=CuvK+
zY--|tMEo9S>9np*4^KuxP5o7?{Stf!kfA;B=pg;;q*kkw7=6t4rZA~f6$I+S#L~<|
zWo2IyVH=C~%K{#vi~pi=v&5uft3%U)M!CMxit`CLT1DVL4gUvZ;6FhdM=zJTBz#3W
zsz{>YH~g<7f*<Gi@#Ph(K5XLF|F?Ao%SMw0Bx!6N<^Qxz{ym85CrO}XvCGhZkp!|K
zqG`~O6BPa%g#|EYbzrAB{yTZI>3<7}{}Vp{|6u-2=J@~R%qW=ehV+~^dEK91I$Nb$
z{yPUHr{@D89s1)6O3lb6VTl~cat&U(0<1=3`F{_%6*|F>*>xusw*USS3|SCwD-*QF
z{{Q+G2x@>}>WWJU`}e^`IzRcNmdbFG|NC!Rp+mcbNTGh8th9wdU_T-hFr*LrZ|Mh&
zMM>7D4i-BQxxVM1#Z5fQnBVnGoV-_#0-gQeLpo0d()RtA?6!{gT=OQt#WB>GHa$Hv
zz2ms&vOLq3ONpNGIqZMJ{~x5P3?=O_*F^Sm!@@~^T1e11h?IK&WrPzlBnRyQnL}!(
zF;)%RfpVyUnem21|LuuTed@yN(Y~z=B(d)w_oSU^Gq+rk5lhQ8WUqAV!~fp=-yTW-
zm-z**e>rCwK;DOtVryn5#JdVCbl}4}(L&qNJ_e)ydtxGyvxK3`*%ZD!nBVWCCN8ak
zC&2kHV~o{ES8!zt#bN!0$7QvnHJGXO-g2#1o>Jgryy(BZF2GZj4m&S46{*?nvIc1K
z_&5599LD7@CRE4thV;q)%WqQ>@R8iEmm4?D&CbT+`1;Re=U)ti+#ob~j1IsD>UdrE
zyBv(iWXcFEYPqZ%n*YkS9k*}!N9WDI(zu|*i@ew+;WU2gshtUWB#y*arV1ISiT{ls
zo{%CrFpZ*me^WHY4&3Q}Soy>J-?jK(e@j<*!jYH1f3>Ot7EUYLKT^WtbN-1L`TO4l
z&#}dSf<F<Ly73hIqe5_mScjcQv)VNl0o7K`nmK!4QvUs?BZDF1Ff{UHY@o3V6fJES
z{&np+<Vg<nnZ`x2!g2pg&?5q`Te&)vPyg$o{_k>=1PW@v*@u_6e&nMS5Lon8b#x2|
z-5?b}0p342SPiyuu2Pj#o0C5yL7<C_HHiQA%>vXQ@$vCSxVYN~d=t@gp-ajsGJJKa
zyD7I04h6X3f9f@o1<1L|RmOpfzusw@RzZgbZA=XsFOQdv0Y~o;VX!zYrnaCEfy&~E
z0bU%5j*i~LSNlAVgY<V;bVAz`4-5{TLYxDl!D6Cdf`3G=R7;cC1RfIEwe)AleFNS3
z^dFVJpaa@cswSbCkN)44h>6dReXEh+X6A0e+$X<4#B&+7N~4tZwKcWQKon^dI;_8P
znOUJX<o=U)BJij+AJ6ka<%AXrEMQso)O@kChxs(K=~VDG!zBpSU95kCaNN<S;OQxX
zSL3i>DQ(dX0$KUThTZ&;Y}?M)2T||;N~3a>&??1R=3m*^HN7)3a&jm0qhCqPm74$N
z=p6m?HA-R6F82y-jZ6Pp;MjNR6^E0^TN=qTv_C4AQC>W?muyGCGsHqhzWp<OW&z#@
zVUp;1ZaKck?e~=xGW=88LJd?0lX2@qo`06tEERlZvZ^rw>(fgqxR05)cgq1p@*4U=
zA^{2{#g4KDbn_zjH|Hy5)SMxIHUz;z>=8bNOUZe5hePCptYiL49f7&hRmQ=;mJH*q
zx0_?;IK}3lmnpIrGR~zHh(LnqCBj~~xVU(R284#%Ln7I-7{&Z~j1bE7$Gff6{NoUN
z)QRR-3jwzdO###Ve}+SbXfrI+^>O{%pRr=RPp>$bgvMU6S<fpc8(WV6-k;S}@9}=<
zqFVe_0{e7fj_@g7%FK(<)7Q1#^Bk9u55YgJ2g$=zR9O!Y{T0(RrGkcYr3g&1wefmI
zrPNGZ79&fsD0%~i7=NcGEUI+3+=GmUgziS0*6>=E*+1p0xB<k$bcjadH~c@N%Y^T`
z^?Ywb`dn2KVB?_c;X|{l!)lqsf97cgacd#pE$<-bnCWSL{tju34`6=CCYd(>&`&@a
zdED|88J%%}0E?d}{)!&NSSj&WoMC7SUdqi&t!mb3_oyfC|A`XdXMMT%KYrFE=+G;F
zPp{~8=GfS7mu~<6%mr8`rORK=*awrxFO6>hnrx;vzBm74%`Fb?<GcW-p=%jYo+qfP
zs_L~x()+)%X5<xQL(q;E-eJc*&q9X<@t;W?g{d>9{vSu~5E8WEzhZ?HkA#g9X6E%s
z#h-!ud?ZPCGciQj8n|zGsUi36PretNgRV2~35!ShJJxj}kDIi|AhmQSu<A2_=(-od
z{ckUD9}EPg4ZbS2OXbWMW75ChxJW_61u^<h+8lX^ua*A#x6dzvH~BykFTZ2>Pi_9!
zd-4A!%4JZ8ba4EaliV}NA5YbDeDHtE=Oh}SD5`@^`}ayiFkQ`OTuq8Wy@u@f8Xjvg
zpl3K%UUQ58HQ0a3rDg>{DFumg#!=0~ZT0UTTVVzz+ZBE#+`oSWLlTTmSecsoe>YJ6
zXG#R`o=UdGM85xbcK-9<Pj7al93*RxhIk(Pn!%sp(rJ<i2(<pX?0ZhHMM6uPzrywN
z<zHzf^x5Spo}zL$U*pF33$f3Cr3Et3Pb8i_v!(%l*oO{Ft-5{BOL35Dfa7cBt3I~M
z!Xuq2hk6*cUjq$Quij)=PH*2Pa^$NXysvnQt!F-XByIOiuu2N!q;|vMkjwOczllo8
z;D98VWh4ehDyWCJmES%2opO5q@ay^p<p%ff?n(ult=S(irPKl(joWIK5N?~N1_qW*
zIIoSN(ehqEX53!89eB#Xb>S&*&Q+Q#IoOu{^~e;l;CuZGWMrPozdQ{H4pClS&c4(n
zrTSY#>p1%K^wE^8!T2JX3i=3&Ho5wnJrwY{;8yV9SNN*GiRz41<6qtWrxzN5C7pc|
z;!jdYg7&2*KwyXsDScOx-Jrt!VuJ6leT@~mE{*yf-@7!J%RLkHmcJ`!LEfk4A(1%C
zr`N7pP>?$*4lzWb5&FP!n@tJ$6F$vM7uu3%D$Y61E(3Uj6m<V{R8-0aPw;u%K>cZE
z7}1Ypxn<t#g$8_7SX|D{=bbC9Z^*qAu0wnZS)XKDFu6v*)g>a5-5e!y)c)gi|C3H`
zXUX>g>f=OdMJmJYpW~xasP_RB=7!2Z&6MOIrri84UizPy8MlBq*yLz@khD9StCY&@
zV*5LG<WzhxP_~L5?Kd_yte(@wI;g&=)l!K55PeGx6j-gQbMe!E(yE{Yw7qs>Wf6r`
zg)|vr-T?v=h2Ef@3^<z3K242h*r#EcJDv^Xzh1FCNgpylBp9Ip-v0jn!k_wcW{a+B
z3O(@&3Hp6~eN4TP8oPeTz%ZWE?ZV=46!`BFJ5M8qBRtIo3_Nt$&!p)WWvra?<S@Ps
zlhx@u0y!o=z&B}XrrP{o7-)8@c^q~usyl#O&UAWuTBX*C4{YSiDyM(2DWxi~%%5Kt
zr_QdXYCgCoy|&GKpUA>ml>wYipL=ZlX#{I~>2uif)l}fIsZDlkBqM9TM!lAi{W`Yn
z3CuW4dw;Id+h4d~ii!wHd|h3G-3dJ0o;+i#k5_xtjf}px%I!`R8ut)<3grV@;@`j!
z+rQbFn-zp2k59T#=1#abpKA59Nx?qzCBPj31BK?HQk&%f>>1!^wx~j%X8((p(_u%c
zamg16i0_D|%{*-}fu7d1^|59A*Vve45FyXY+SjK~bIIJccrs&4DmQFcY783l&v`iY
zpprR_25!;E=yv*(AB_)r+p=krSu~(2#W6%FKCRJk!y#Z`DN#_rK=u}Ym+4J{OZoY8
z9yAOzg&#y;9tp0Od=yD~@MjX-*mN%szO#jch5dzv@`P4bD<|qR`^%<JjeLp|$`0*G
zp=fE;cuT1U?Y;p&i}?>Fe9t4=UByYlG22durpi~>Hq*Q=woFSj>J8ewAAYsmD-zAt
zN0-6-fBgi(Ma*U0p-*as|8g%!P+)Yi%W=$~*>e4-@_F|LyI-cobOn#|=8J(yjTZNM
zrP2p)9i80BX9$sk8kBNd{85mX@4OD9ch+w1W@LK#d}`y~#E8e+xAf<}-yU}nV_P&V
zqgKR=I&l%Tn=2;0zr$W%5Eazf7)YwHoShUB7(*4%ATjKZkLeC0Ms=Mpii8&Th9)CJ
z(_D42^Z5AVD&?4Im}rXibxQb;17ACuLvst6G|9E?0^QwDrQ~e=HD1$f{(L_#Sl0=4
zFKwmnNaa9T;L*}T0nCuhv^dO^P+d25<(#kAbvLg0+%5?07Ck=X2>J-~;OZu8G&&AW
zESzmyOYMxCW~-L+msrYc3a<G92M?_*VuDb!7yJ>xzvD7nHVxZwYa~I_@HsKR-pnnS
zNsZY|SN_*tHg%h+Za~cFX**$zeX_}Hashw@$41)pVW2o2JY%Kfi6!6$UE8v$yts1e
z?KB40pp%^gXQKQ$Mlc4%ooBWAW%klz8E8qWaM)F~yFPh)+QC+%OZ-!9)zkpLqw5m%
z7m8h!iO2PHotL)E&|O((i>7+Zt_o`)1z?TlXS9Y4)_G4q!)dZx>m>zU(NWATQw+D4
zkFu?3+P%O7pEL-SI3B23-}#5%N_azyll+E%MNj@KQ{#+Fo3ple?>QMUFL^W{0gRwC
zAI_vw_9@izzHN>2(C+wl|1$`f?(BFndMz7%Y<sMv($Zd>*Y34Le8+Lm4wS)d3TDD2
zKPErvv_5@r+gCyRu+7As3nTR?EeAez3*~lPzqF#2`et*+C|ucK9R(q0g;#}m*aac6
z1KWFyQJUG7KaM0}Yxap!1if#+)Vq2`v1e_vDxYxQlCdAuj<%%B#?}cf0f);IU{;kl
z$#*%I^>fcnN!Rg5)1KpPNQHb9Xseef{#d;Z%vNK7coT?vKL8_V_Y>e}EBW{Ul`R&L
zDxc5Up^pZUp;3>h(0Jj89v^1m13GdLc{$w9wl;XGBx1gQ=i8$3rA$<suC;#DQKlvr
z3+MFkPYn=;q(H;*Vbau!1YLn%JT5y@xEyBLv2@A`Eq5nUe=kzHg~3`!0MbbprtDA9
z;g{PQc4<0qsC0O3XixxO$Kcrybj8$emj@_UI4_YY(Yot&nqID`g$Ilr+-Nr>^&%s~
z2SDemmHW0$^h$33$^jP63#tj(tkHapoAcW~Py)$cV}X(UE~`uS`>&2{#zVIka;G6j
zl0cTq!R&8hlK@me-4?{`MjD9~iPuMWr<xS%HQ$ITv4B1^H{&bM*VPK+VM<hiIl12@
zn!8%XANZXPzJ(I;skDxqp9hf_DitWbrIPuE)om9{oS4ezCKZ4fNAYQc!RR~H@A4Ed
z1A>st=y|HrYxpTs_8ZaS9-83@+mnJ633PZ3L)b2ASxfdef@|IHqg20MtGITFwobj<
zL#I*7i(J4;P@wz)k;I~_AV|pV_0WV1{0E%HD~tw7!LAT(yV~tGu;8*+-d$2A<!sV}
z6OM07Usvk}TB&kePUDS2!Tk*2whcE~p;S1hcF{127^=ePtni`a0izw$>56IsUgzFs
zoP<B|+zp@isbNn(#S+(J+_n}wc2WXrDoECeHf#6s4e3clL`cxAr(O427~Hq4r4Lu`
z?}r=acaiL`Wl%Whw0k@*`C(m)-0GP)-qQKkSufjJpl?l<wqnsLNT+f1yEW-NYwLG=
z^K&J!_h&FVdFU~jX2aRZ^``mSNCxpb&{aoKO7XLCCm$8Hc-{vB@}_Y8)5d_QuwXp1
zHvi16Phafv_RGv>T~0wr3KIB$D*J7=34x&~ph9X04#ng67>1aoxjS|Fa4YkH05fli
z>pV9tydXpG%Y%$3wZqPMd=Ig8X8qn-27j+Yks2$v?TT?o$YL>x6Q7I{c8TqBt24&)
zzON)VVQ^brWH?o%AmK3;s(S6&9srGQFx~TpK0nmJA<?!3jGqW~st1d$i)$u=R}?tV
zbFEi8!I4tV_ouRX_*64sZ;qYzJotub)z`eY)GiX10eM?QkA4&I`WLY~i|WJGDk_S$
zgUG3fMLg)0o$Jhl@OwA*ebAw%P5k<1w-g3}S$7&NN$~Zt;4E65yh^^pdvHq!saQC{
zD1HlBGQ&pQ2d^cck0p*Nzuc)IFi0Sxux{EO1%;v*3yAN9wOL*{BXv-p{r(Uo)fmjM
zN1;#{>4Xqv=OU_Q&3N(wHA)`OWupX3x4+K1eXsY>3v)X6T^Ld_#%5y-&#3~naM+z1
zMSYF&dWa<1VKw%LoS4QyK003;X_ci3h+()(+(bFw0hgJ0o0~a>w0SKTX#+pkK6P0{
z^}`u0GR2P}SOXZY$g#w-Dld~J7P!;O--~u2ZKJtDC-@32fg%E^eLCMOul7W!qIQyd
z7XFx;D*AxL&Pf)v=Jj|_kI!Wlz1*oC1>UztVM?8sIgJ_(_7Wvp6J8DKY&J_I?5D>-
zc@bY_I<{5kA`NI~P4+j30DP=T<h|Ydbn;8e@BKkgWF#7<k?ll*GM;a_q`!xQat92U
zBMf*ppOhZaC6q+2N<~{dLNBDn+|@-bWA(uCAxE6EWr;G8ei4@MZV?f0?JWYa_4^3S
z?n?KaS=09r!{~f%(S2`je`9}`o5uBX+gVjAc$4DMvLG-;rNHpDH!H_I&ZcJ7)4)zD
zO7>h!PZ$Z^nM-iQI`lH~xpImj{tSX{>bqAjud^F_g9zUy$JTq02aaJZdZ4RS7=&yH
zxQfiwSQf6XkVL2g3oG8=`<}5sSYLCpRT%UsD7trtZYvajRF;T_b}}VH<vWXPI`VzM
zEEIIvWPE+l4!4_x;0Mp;8{&FU;e3pdFQ4^2sVYb!K$dSpE1ZbW=<|~2vkX5H<KYKG
zVU}gBc6BQ0M3W0rgP1twLY1$UVfed)tBmc?@BD4)6u%es&2l>(@K%PqeFna?Uk!K5
z<yzc-*fdj;@et3(-x_~;IXGx`xWJ6Z=X1+{Xy`91{F?HNRl5Z;d36UDWieBGP92i3
z52)4$@Pv7m-O;EJd~eI6$i)!OP!ioCN_22i1+{(MxTN9p6?04Ilmy@vkuy|BJb^d%
zps2)|K+}=TNQPj7Z{OD=7O*#j?k+G(=hSjGo&UBUb6P_PIbdOHxoO)E33_J7aJDni
z*;%%<ySMzqyW%yKT)RKR9h2~35W+;F;5`rk*LhMev;NL}OMmJi(t8D33P9y0M$8!h
zE2lqsQSeS{`jEXNwc7I5|5~e^=5E1_eUNp;EAuXjoCiq=W;f9w0O8m94o4(NuF3n(
zBI+OujoMVbA9xr_N#knunA$A#+>`3XD6u8wPqWcuV*)+c+H6Jxd4AoL_rle&!U3NX
z)r@eCSf9BfX`r)CDd#Kv7zn-s{>^KHT)9blEKI;yfO;WF)Xd}df-t#mTjU;tNbxY(
z)0g=sMwZ{O#b8)q@k1@K>ZJ_wPPqAIn-6pT$!dXVmUb(|4qf%&9Sz}|ix`5}N6p{{
z26Z-ry4iv8L@w(VTA-$VSFQ1oeT=O56-`dP#^Tp`=SCg)(6&qdM&zFj$O^h(16#r)
zw^wCi)ze|B&*K@4cVk=Gh}sLtub$&@b$n#QN~fVc$N`Tg95jN<M?=_T2@keE>n4|*
zn-1Wjc3?zPi-`)31d3xAbS&x|J88olQwx^|D%`yayF*ld^qJp$^G_T_JHzM3pM&uz
zyDcX~M8Lt&5p_9~it4YuG1^UOl7Y5O)72?M#PRp{K7s6x=i;KpRPH75$28JX$c%VK
zbVB4_7Ve_^?cn!&MoCZTk_T;%^ElkyTB~~nOwKeVsC!t61f~>Rd`pH^hh6>zAY_>s
zj}`FpWZyM9UU_Ro_%k41QF~JV*RIG}0-pLcTxF|9z1_#f!|p_H-=oMf#OI;wvo#($
z?}F3L9y04=Y2-U_?%oHulY><1gF{tznm9%xOdu?|sgTvk|3j}SaBBa^%6sqij(Z>%
zzp!qE?TdF0gFG9Lj#9*LJSux93uMK=pNEeh6D>fUIt4S#<VY^8klpXRakz1Pl(KA+
zsuDQj?fu4ir;vw<39+Q?b3u|=^h^ZqfPSxLarjOD(SV?49dq5A>fToq=IIf2#xB{}
zpLiFuf}X{$M*>%&Kvs%2cpVhPgEShX@}A^4_yrlWU|>|q@=o6_y%rglZHjj{9EWvI
ze-bzoO&pC(&>UnmX*byC)Ai5P{{&Y&_45XGo|XasU8(^LEXyO$u2ZL(s_krW6;;Uz
zFyWMg(Rex8pqVF^;fpYQ2HGrU-tSPB4OytSdN!M1uwZDAhbm?W2T*>fFu>#7srVq^
zcJYluHdSNx7ygQRH1{VX1cbg%=7ZP4TkgDwjm7EB!0S0#A_#bh+0L%k!^;ke5rI?<
zY#p*}#GL8<`F%I3o8(AbPS#k{E>Jw)<(Y0Jq`GWypOX=iCq~NG+Zi?|+>AQ=4W&J1
zFdp3akLnDk@)gt#n4RG#_L?4+%E3pGjxf!%0)MXe$T!<#xx44qdr{1o*H~!x5Z^$X
zKE<NPWeOhlyS`7u4rhr<J7#Lw;AEMjn|YID&TBcd8%;G>42O6rtU={Nf_`-|d;bn%
zv8n#K0tDhuVbchGs3@R`L_#(Kb-yY#sWn$CvvXkkBj?FzTV&8W=!`1dba;Q-++|JH
za(cz&xHY0hZB#tz-oX`y%{9~IguA%RVa`9Q!6g#5jHbJ?)E+hrT5ggXSg&!1&51o<
z%Z7Oy+Uu#}PjC@&&Uah4SD9Ly;S(AxwLKWIRior?6g~(Jaq%Y{voKL${csoNjtG7z
zKiNPT^%q$*h0n}*hv2o+h2S8ST>QIQg(?;T3sL0=h9C66e(<<I&*zykWcM=!hn9)2
z89vi3j{C0aypm~taHwotZ*hu1O1IX_Sndz50lh(%Mp7$AP})nQSz_DXJd1a)(^+?a
zzP6fE>x=D6s`(-Wd>h{+wM=DC&?@8wO2ZH#gKuSrqMz}_FgV{)?#?ttJPHGcpCNR?
zm5l_V3-|dnMQG;3eQ{)5hI~~eW1>6ClP@ifpiB4gAR~$ezkKvQTtTPc0hwuzmd!mb
zYpT}6M6KhPXsdCGmg}8m`K?#ATj%4qtZv^QH%-23LsF?uO(@BQ)R55v!s$!SnH9Yi
z%>`H5)F)B#`?&(MaukA5=(ybWlAWwu<)<}oB#|y%1s;A+UtV8^+d{)a4-9=Pe`~Oz
zdP8y&)*HDl!-P1Hmn}-{1A51jerkhjb1-*wPB$1gjK)>Jz|+Iy^4JF><oX-(ZlU6g
z5P#W#SY)_zsa!R$wPLQ@@wV-7l>?oA#v5DN5-~})kVPcFX<|_&l-;=8E`UL}$uCh3
z9jvDU1Hg}bsrtx|tHOEc85%@U`o`aE@5{oy)~#>}bqua{D|*rAjedBz`$H~jwoKUG
zjj7*+$vPDAUImHMHd70E;9%=Ewbk9!geN$hYe9A+YWuQ!)P(1=5S-=Xd*<ib@7-_9
zM)^ohu<NFU54y_Qo_u4cdi0ntW}cxwLu!X+IfhvH!t9xyiZmlO$82#YpIyD6E~gjo
zor1NwVCFnKcPUoYWIk!7m@OJ|WPPXbT{@qA{g6Edd2V;6fc+qf=7kHkYRR~l%8NP0
zDLGQ7d545RF^k+;&K-~LTb@<Nl%ZZmOI~b1yXLYV7VdU+Ol;IO9uDPI9;up7EfX2d
z-xu4hOLiam9QAO<uEaCm1OR8agWb~FBtsl*5)?fD>JG!+$oBDwK2)@-Ti~vjY<T-}
z^m@u}Aq{vlM4^*wvBHLe8*(P3t<ISI&J(nWtn5j}8NNuooUOGUJL<;_MTh?B+6%yi
ze6k9^52-B69Am~?9O;T5YAlihtx5_p885a^FqE%K<G^_%(PnIEiHVfdWn#)!JnZG0
z!7kLT?~!jhe}b&QmYM;4U=%#ntF__A-z?i^?GbS9y--AkrKVBTofCYGqtV(Kgo+CV
zA1b=+Qn5ExE^_-=Ro|-7bVYuyW#c^Scr5|hPGz$<C9i1M7kxuQm_Ai;F%|qA++dV7
zif=W0QSEv-&gv>7D&|A-3*m%9I+b@?+P~vefh~p9o5gOjbT_>K@}Asosz{^0gI88}
z79~tEbe~r7JH}cNx9eGOp!#sACX>)S%U1L40rIIEf(Mn|d`H%-<Z5?V*h8iHB=$IY
zL8$v_7{5{>v_fk!IjINLIe*esNn*s|{bdUgdU38)f=V3n{kX5AAY9T9v-tyq7MvqF
zlf@RlZp*tlrSeakOs7eJdQxt~zR3ICjdeOyx+G8I{i2KJ6ZY%|xFpXSmK&_?o5NRJ
z%ys$gY(;)YcHW@sRzX9WX#wfOyk-`c1SC2gWO$q|U5SB|H=@a}OpRbY4t?ecdbz+p
z`dUQrJQm`M3<3P-Y(+PNYDluhR2!pPeb`6T))3zBsJkkCsMbCdH%l$^^#W}B!nn4}
zW+vE(2J!)Irs&Q@YCahqX@ViFmVV-u+dR8AVZGcb6H{5?y*TG&L7C5VpN|AtiV2(h
zL@(FTNu$+}viW|hz|d;;(o!1suO_1&`n)!F`eR@K_9lk!NOv=!D>0Hc>6>he7&F8`
zATW@sH8mJXPmrd8np<o5ayz9~qVeHUvqUXD(Lw(O0ujudisQarx0f@`O!<p6PHLzb
zpIfF5O44j7XnpIUZ}sn=XZOYACVp_RQnrf%SuhGSc)&S)`m#MTrRN*P0FHpJs2~w+
z??IYK*z+TkDF<m$hZ81SVq#7Fdj^s@4CsuYJ)94<!Igu278#X4P6<~Z@bOb_!)H<>
z)Q#qt^BfLeZ{VQVtf3hCozm?Y4~Tg!6$ktOt`RsI>2;}Pmw-5z^Obrw419R=xjd{O
z^}W7JC;h;?FQ;#^oC??9&*m?>#WepWp2QZ=s;7G~QL3#ivg4n)5APSs`z6r<3H6yc
za7(d|f3W9}HbAFIL5F#^@EJ{-2U%&!;aP;#mKxemIESS<G*8^+uNLqa6ly<Qox1}B
zXFhMayHEJY4J1awuM?@wtPOEi#qwF*I#y#8obBIc(tksYjX%Nx?LmIsZe#K152C$B
z@K~|%^7W=;M!=<4pX!a?1)K1zMyaQ}L@Y^Mq0X3(<k~IF=B$0RZ_aSXp_V^<!nv6#
zUHoD+eSztUr6FtM!vy1d`)VAne0|_^i>?B^J-H5x`ETh#O^Mws!_MI;(r2Yi?%E2u
zGOOsme00q&SIa@?mzzlXI9**^H9I-yW3plnndhh*ZqXd(oE&Wn`kq<3(0q=2iN{^8
z=M%>pNmS;)_ox^M!hJ|ac|&U`rQ#K`L?wK36Kd0~aIojYo&y6d)^23=m#w8L0Bb3D
zCnDy8CVqcW=YN*OOC<xlY)2OT`GvJ9CmCJu{W3<|9<=-D5gz}YVc6)@2r?VHQBz?_
z<awwv5nM;d0po=c?7^2>^2FsWCe@PH=epei0z!%K^f*=MJAH`1NpabC2&)ibwbiaR
zhto>Aq!07nOw{6i+Gjr%b~m}((s6_i0I_y}ekGq~`p#ozn%S8_u&MTqy7gnTif(Rr
zpsRLxLZi}8`jhqL5jnw0K5C+nTOQ%(nv>JP2X=#nO+b`vND-ygGVH>q{I-)s*-1~7
zd<`ACl3*TYH~+w9aizY<HI5~7*q!NExs*}ok{q?`?Iuz0-p6zi4kJqiy+FZMPY;;N
zVKhJIxw>Q5)0CfCx|gin%5=jXj&t39)JFTuK4S@W_{4jOJDM+1vw9s~8UCbjnD9~(
z$i)eO5N2EEaNKj|SYc*km2Hk#=K*N<3OO47Dz`9Udw-dz<KX-32*g7R+qy%3s$T_7
zm4q3O=}k`9m&c<XjirWP)gkn=s}<aH^(jxNQk?MFJqTMj-fVhisar-lrS#2xrwP3|
zvVylB=;4D6rCQG6tGc%(E?qW+5Hg{@bbDb;zi1uwEc7C{&w3r)hhwBS3oySys@sqk
zjTQp(FMa2{o%iP()jOeIu+6$R$1(0!y)X$zQ%CK#aBAo2z?klHJUSBdgedgy{>0OP
zC_?rI7ZVoBUvs9xp^$z-Al3su0@@Gi<TXhx883MUQt{e?tad+oN<``Eo+Aw#x~mE3
zqoZQtp<?+6fjM9m*jCtvc!mfzrvZ!A``gx-0_AfmK7#f=LwI5A<#k4}h==UJpb^*8
zwZ45iUrsb?qEup*j~_0;4`{%`W7XUX3)os4KN1%~AQ+N35?-^<{}@W_u2IUr+tr$j
zSY<<)d+x*QLIAbNwRk7noW-Yqt_%buar+6Ox)7M(jtB$N8M=tfRot6MKO&s4SD8&n
zdPyPebme|y^So2zfE{?{D(GH&6l%XSepnJrbD;cW9OuvI%a6xx2>i7u=~WmeYfiT|
z*-$XuI;0g2W~#qpF>4L@(^mFu4yDZEK%s~H*kPAVy&Lq`sxWl-xG5lB*hKhn#z}nx
z&FUFN10SCgtSu|5Ery{pD901a@ZlrCWS67VpmRUl!2SLh=0l{=;?8}Fu-h<i#JTmA
zki`<WZc#TL68gaDK#%d%QOAC9vpH1F1P%H7g0HhTr>VTSI8lO-?s#5Q_XOHO;6dr-
zoCfu1Yi_FR&#v%yciTzqi|hh)bs3#S$cPAlW>JHL4}sn;7tFp58Y&zX8>+eaks|A_
z<XyL^TgR1RTmlu_9_n=)Y5nsy$<#TGsPztp`kPPw-EVweOcFU3L2jrVv15xN&L;9S
zVR5Rk$--L_l_;N@ViMgP0ff?pShFIN@580=+d7w}6KO_W)-}vs@eA%F+Jkf0(vU0{
zvMD@2l(_Y~-<VN&Q_(Bg=$myyuVhSW?(tX^pqEajO_e(zEwvM^7Tn@|ISNoQn=CQ3
zYI?j{<+=uq>Y;i7A3r_0*&VY$_l$mGj6yM|Jm%zE$S1v@r&L@T=OQhB8#!XwfjCk#
zHTKwK-DIygl!$&UrW5MVu!zsY-*Op;`EF!^`8B0`tL)WWpRK_myBx;5Xa1sg#HZzi
zyDWQ+_%AKA%ZM+ba+ON&H@=TNxF1!=#4PV{#HK^XJPU<zCJG4RgN~Ub;j+@;N;|M#
zn6>yo@P&trjUm0{?)o(8s5_WPhYw|b)|(%uPZS_p2QAZwY^h_*)2N*tUzjgOr#rvC
zD(#d=fzcj5v~6)*c}>%Yen<cdi$e=IN|oYdDs3N>kh7ys)awGWnOgnK^{$Z8Bu8+n
zJYdV#f#Ma(i1k-HM5)ZQh8KVaXV0v|Wu(~9NPsit=>dWk+m59UsR?Ti22n!1M1%VW
z9+CSw)TILp^flAwonSz2qQ^#(vGf~o#~o)B=>X!QI0+sCfB@!jhWT%{es?;&wrtOP
zM(+0__QxZ4c$oN6(HRgnnvBP!79{ZMoh2TXbX#k1pYOb*A-f}LzL<g5zY;y!EKn}Q
zx29O*qt&|eTwV5FR93W2{*M;`z4Pl2A~rqYDWS(Nx<?uuh+j3xHV$7PbSvQS9lQDV
zjj(8SAQgeG*qY$sVZohC7aQIM^x|$9wcsT-r>i5O)>4<#jfSF~<3z(yM?xr?XlS7f
zaO6W%RU@^BJnm(|$M6**_Wg?ArRbmD#PM85#gFkz;%79Rm!Drcyt1n_Znd7fDkJ>t
zMxppz$-=|t{wtqb&2AY;fBEO-)d<5n`dlgnYgJ*yuytG?aanZIZI1zNR6h+auw>wf
zReJSdx*USw$rxKhsNC~lj&YDsg$D2#A<56M?k+dck_u6m<s|py-$HB6o*N^(z!$7L
z#a_!Tk$0h=V3A-$tuUfm;w0PSqHz(}*s&o0-v8n7+hB~1Y=IPYPWREX9l>w>8bT~T
z!jrcEG3vloz!&YUoEC{YB!)QoBZM9|wlYj-<U1M0-D<vI4z@Gr5sByX<$+W|GKYJo
z=LcHMq4cDeCK{WtGme&<1ZBkU{AFgiSbF1ypwCP8cFx*Wo9Bq!A>q#_Yb^0syIVlh
zBnyfX0OKq~^jM_nyq7kxQ=g-~8Pc0}-EUVWu3RXZ>VpMbWy>xp-Yv_;Wa(q%v1A*M
zRU$BQ)2Cw8vFL7YgF+p*d9Si`g(wLQeLhoU-sLxubj$d8{E(8Ks~^%+>N61?{rQFS
z1ZWPI8F6sAGkXMCo-cm=&HC}KAOcf_xPF~7N+O0uprAD=g^wENwOGJo_)#Fs)GYK^
z&3J+JH_=g9)fcphZ+mnJ-K2K-;A+%`yd<~zpbij765%6B<JiMDCqiJ4<`R#yd+WXr
zdA7i%36^T{!Bkq!=YVo08QDINZlBo6^0_s><BHlidR~>u=p2^id_%E(`t+)fh4<#t
zbfwo@x;Zo|3}KhBtEJvje+k&5@GAB|%X>$*WrsmHLkB3wv|H*9-?q*bK*~(G1*B};
zrJsppnhY?czHv&WC6X7<UbCr|Z<k)$LZfiB0-2Zfm$R%@RSeDM;HR6<7n7!W^f(SI
z?Hw`|WzuuECe)^Fh3SGmcO{d+>{XAKjOBP#b7Kf4WiNQ@2<#aguoN^(x@+FTn3Kly
z4d*4D7OfTnmQ!YHT~(MOV5`FvSIv_fa$tA~<PU{0g5MLH&|XvH;LuQ@VM0g3J?|Tz
zZ#H(X{=!CM{;B7hZnMSX;m(C>PA*>|X97M^Hin*g<glGL>ro`w**{Rb4y|wWaBMS^
zuDc&k>p7_T00&7|cu?l+xmi)r;u3W1Dmb5*2QEJ&{;Ch&YhAnIrKAB(xyxuuV$)xn
z!yNt!Dlt%oKV$odhP4jX=M$jv7n|LMKgbZJP(zw?ha$ypkpkOC;uOZR9tuvTkK^Td
zWK|HbSnztx;Mz<~Bixrq^`90e4TRo@Mm;Ns)D7t2@GV>d?a*|x{P|7=wa|SMkzLR~
z0|ADNGYnaWojLb2j^2{BH7yu5*kG)*>EyHh_AlkirdG>XVr|ds9PSdSgiTE%B!IWE
z?2`f~6d^EI3v(LnE5R+Oc(2+B{D=|e7}{nt^?v*`D`qI>LTjwv(_JkYucAGyy4S)w
zpzskDefAl0;6Y?X#Cke?VH8Cw52B{*RPONvF$z5_rR&$D>9SMH$kcaQk%*bgFB|XG
z=ublFpug9SiALw9u(7<nicUr1;IEKbac%h?m_0W7vhrmVuibc020ND6)=7F0N7N?|
zF;j>iz3GPGzR>5wy1rfgmUIP~A}FY79@G^?9<7V2g+q?&){E-r!qaR@UJX%Lm?uBY
zEX8hN^}97`2}F9<9Cl1MxTk;84qTd0vN-PHoTFV0#L<j4vxbJ%p^GI3Ho2Vcc6#6n
z5oqDyMdH}rUD=kbfNP;&X}LQGGb$H^4mA{!0`IvOb<pJb?9pEVgD)QkIWgeJM^tc}
zZf1=4l38m`nndt9Y-nj+Utmy1SS~U-Ad`V|LNDf-F!_sy;Ut!&1ypGg?`5wZ*2`ia
zMr%H@lL_4@2p%duvUYevVmIdTTc1F((%oSqJ91KObPQgxZpEehVzTqk!3Kk9GZBVv
z6P>(q8=q(xPwY8*$RW7#BAccWqlKOF^YvT#JF4Ah>rrtsFKH5sjvmIsdsemPV%)7F
zmW-v*;jIaft<?=~PiM?m2c3aIP}<HX8wvK#i=j7)IEMVO4{`+hp{Pn|QUuKYcY<2f
zYc9eHdPR*$p|ClUacm9#HI`{Cmf-k4(;RG$n~|WqH`VM`E8!nX$dXB-0iU|R{5Ir6
z*8_A$GCCgoa`F<2ZfEw@8>))irRFj~C`|ezySYCCBNHu?X6Zzh(E+n}I7S1afnu;t
z(naH?+NxpVhj|Nn4J3M<^rgt`*Yr>Apjje-N@_~7_i@VtV&S~Z@(PJ9vxpvQVRk~k
zo0yP^7PGjA^t>k;$9)A{NH2c^td{aqH)!>Xc(S4>)3>@rM_N2?lkMt^#F@fE;;PLB
zXi)I^Es)=g40?Y84X>K#x}+|4J#DP|-S+J0m>%FVPRmcITk?_g6leyJ`?CUu$c9&5
z4@-XB@A8SYFr8D&A5Q^K<l}^mF(xvMkd@{H&w;aYu{Uigj6>QQ!g0~AZ`vJNJF&$%
zaYs}aq*eN{`m;oKxG~YVaoA@7Rv#Z#2+qS>2O+39VkGQyVU#!aXTC+!C~VnrdLf>U
zRB({qr3xutQsr_=MOfsz{l1-x=@4d)MyG~ckGe5P${V}$?)nqQ*Bd4MSArVvaBx^g
z$Q^N8yj5;44+}%WhLVJ^LV_Zp@kn0)3qbQP&}ShA;Ku1F4fZBxtS;Ct6oo)!r$Tc@
zrx>|D6-fFA;MF^TG6JkY3`R2}26VJDMG>m4WL{NL%DwcX{n=jTJB{hQ3<s@!2X4xq
zp9`Jl0f-d^+9d+RT+YGIn<XMb-!cg20BZ3C4NHwJqJd!1DGGl|U-W0JQOn0mO!Sxe
zq{7-xi<BpmhQ`BW`>o7Eked%u-(LSrM7iFiq_+2SyEdO0Vo|;UZYVXnk#qe`t%KW0
zKhv!vx4)*yHcjFXH&`Uh?G9$&za=xfj6^beq|3EV`nC1&MJ5r!jaNWF{FyLu7%uxq
zz?2hwmmkOm?ru4__)!e#m{3PY2nlmQ(BMpgD<UpRLlYSR9|OhW*jeWt0)h0>Jx||C
zKwqZ}6FS`)hsVAwso5`ZS*6Kz>|F}hFU>>7n#5yb)cLy6?tz{sU+!&Ut|wWQHziui
zYQ5#^J|mg43lbId(mLaESj3~^eZlP&pmX#&I^bs3#*Q?$*oLPA_i=_j5O`nA?^dqc
z5RYnvK`pR}g*|sBm8fh^u=zjKy=7FDUDpN*n+~N@x<ML28U*PErMp48yGx`?6zNnD
zP?T<vZb7=cyJMe)KF|BT-#Fj<yuZ$mGsYea1ljvu>t6R-b6)ehuE`dRg5|N80h1Ai
zNhoq4TNZ{gdVTI{AuyjC3zPIBuEG1XgH7~{+3puuGILy=RQL!7@>FCPT9PPe>gF5(
z;BmMFhiYwVK-DA-z5sxb9BJC$ELlJ6RPpp!>mX*fg&9#TNNWL7m<;buZ}q{D_$fE@
zkhHTUF#qVMH%>Qcg*dTI49S>>$5w%MXvE8{V3d7)RHka>2y?{2NKK|o#dYJ+Md+!E
zQOFMuct!I<s3an#tL$>451Ug$_2D}{yet;xkwo<P)cnSI>=WKmE7~mlxiLGuD0B$)
z8Rk~6x5jYw4Z1xZbmu_Tm{}IO-r*wiiUsxfj|nHAwpiy9CMzt`YB7Hp<%Q`54gBaC
z{g@ct*?qM7_{4ATL88wU@J{34k9}fwf<!|SsL>A4+E0hsp*8L$z(3_Nl?3mPn%D3_
zVhjCG=ZCu6*^0h=e$SD|Z9k_QjXogH>mg5xi!F$M;43y+gzRU3a6~&NiKO#TUmdK~
zp)^FQxv)^tm}l=qw=upoR_n8N19k3QMS92*LB#~rbzF2JUFD)LvnfmX!vHtO<qhdW
z0=yMd-jc;cJB<Wu9%hE_Ls6295B#o@7AM<DZ!MDy{BMP(rVsXnOJ_l&XB%@2_ylQ`
z6cNpC4j3sK0yh1lG-gg9iuL;zKAB>PGl$#=|5QyHJ#=Rq*?UE9h^<}bxx5&I(tR|{
zA>JH=moG^d`wnqZ_5)41{lSB#<=tI3e!7m4RLf;IzKLZH9x{=;3Pn_hrNgP+Mc)iz
z-zh>gL-qswKHc{In*Q~L2J&q$d&{XH*j9tD8wW9~JRrQh5D!@Pys1&InpTUMjHix}
z@ranUrG~(JJ)t}EJsl&U3lh!h^mr=(7(rW{37<H%EDB}{4EvOT6Cj}2&DkrY#s#eJ
zrFs-d-Z(|DA=J#rAR4WMv#*cY(*OJ!XvF&#aK37Dm?z8~*$~SV<?qV5@^*#yl|s0J
zoQ5;!;I6P{5<}ga*7V7bcttyxg^5OeMc&F#uwtePdB?~!qc`N$H7iFdOUEB-I*4TS
zw$Nhg4K|IUBb@X9(6(hSXhx${ZlS=BFoHcrkoyt<J2OvVcO3)EYtUHlHnvWGmCR!c
zn|WOme1FV>7d9$vR5SoNApGgT=DgFQMzq6^fdEq@^>^X=KIw>uX+_(g`rhVos8^e}
zmkEn3h>uCvJx@p?%8f+~fqZOBK{4%<(lV&<vlVK&iDJnO5<+4)qE=mNb66mg{6Y4{
z`-`Y6YoPoE`tzqjl}3G8fN@C=vka?0?^kEg7HO3VlPu^d29cd386S+keUl0kjfTZ#
zjB;Pyp$K$9rg#CPciaY>h|IG%rS{h~Bf`e4qb&1Z@uS5|Hg;XiKcs#Jtjli+mh^xB
z6)XmXRu;GLSxd0=lI9_48lB?@k->!D1ExTQUtoDjQO+K!Qj{Lv?h2_sYiz~nIBl%(
z2V(`VY<S*`@UPNEawHWvTgj`Q@n9>vPx)skM3=>8svqtk-2c1%5k&o?u29osGo|`X
z0RdtX$l261G<0FKNBhqu8YcwYKB#Ki<e21{j^u-!T}^G1I<r*J{<%Iduy#=j$yO>#
zqY9D9M&G)o*%_((Pp84`L|%aXE>V+qbVks<N@t7ixU==#-aUa9%d`GOA<>52OUHQk
z&y@}<fOYDE6El0oXWq%`U#a-}4ZsZx6#e#y0MJ|B67n9A{N|UbU<Gh4?bRhnH+eyO
zQn_7%<m3s+$8Y9bWC-yYIrLmI9)l4E(Ka6nw&-g+8-t;rovu#)J#<|P%-xRAz1cbx
z{X6)K2T#N<sM~#iUu+e!D3Otcz?~cA>%O^ypOcIz8KT!cP@>pm8kvOQ>bQk69woqp
zrQpC^@W^l|b4oh`Z@o9R`tI+yo}tA2+z|?(DB0(f@k<X;&qDs(B~JLPIO!DTcP?eF
zdV6wd^7?vdQIrW(aO`Bs5}KinuJ*)jVt}e+r5PbL9-~KlzfvNQ9Ry<|ly9a6IRyOl
z*v?Y^THs3pftK8?%_gv9D8LaTDh>x7>v!ew{y~T7L6$yR>CQL1Oj9k}P|*4&P~+oC
z^N~cD_UJtN!kKl)N)y6(`j8UZKs9!B`<SI?j@_ud#HdC8x?IW;?a#vSp*HmY$(PYt
z^_XDFAZ9X~x%&BEH-ZMU0zPM~TKS7H0-w)?q39eMgB;~ObqqVg0KP;FLWcfs<c>bw
zdM0W8lipj<9(}NWX?(K0Y7gGQ_E7fylaGxb*rnaly!luYe=ovze+bFo@;UdnWv<Sh
z3t!Sn@4r@4MC|?N7zPeG7|I+Z{(h>-V6R2df*~n~hG;GPw0GF$k#yd^yIwa!)Mp=l
zPfRm8?6vpc;S70xb<JSR@EP&cY4xPeS>#`{CQU(!6@j%ZCI;zn{&UU9nE}38KlF+5
zTP<+sD^>Zh=1U2$<?e@Cr4+Dyxyuz5P0VZFiRfAh!k*uc5{>9G1d8<Mc?ePrz^HyE
z)q{G!9`7l<9Vp;-Ij-3JCQASLKTCM9^lqU#Zyn)?3@koq6X;j{T%`Iv$$y@~|MRP8
z9Et}a0d`McQiv1Tv&LT~F@KNX&j<a#z6OakgSdt`J5}lZ6B%Wu*iG3Xdt!X!_x#iM
zT$KO(lD2{OAtXrXs2h?-ew_rgpTq>%)Bfy(Z~yW0z&Jx*>6Xu-fllrAQSJ;(4{|bp
zy$Z}gQ=#lK`7`YQ_?5x|VibkOi;H??+MPh86yOhyo<>AG!5~B1V0(ZTXyB1T^PeyG
z_wHGQEloBTs4jyMDg=+}6V0F3<K20XwZBM;FFt+8MVV&fpFoSo%{<}PsVp^t{$Hk=
zMi#P2Od#6Iv^6V4XlUwy{=nKQg7#U{L6Azznr8X5@kcqEzaP5)G$w33*vt+D<#JhX
z8o3V6q)W__&Xg>2%;~3fWIDG-b$_p$e=VT@{Y~5i@&z}mCZT$K?CHc4=IZlK*5lvH
z{Xc!&{m&`PQQ%E=9rm$>5N50#-u>g<0>>daEd7AWl7M{%$A6iQI8j`bp=wMC2f?WS
z_MVSn!CKi)UibX-9N(WO|L5!fC+|oTyW|+pzXNcguTHB>lQqt7b*mko0q#C4a2Kw|
zWznWlJuPSd4`ck-z(sd(BHRW;fqNBTZdAMM%}Ds&90mZ=m;~T?(}Q>^9t7LnY)u~`
zd{K8`|LeOo-*161ZLMlb-``3`6ZgbZBbi+unE}2z^W-<HU>{)e<aDq=$<6MP1p2lk
z%^2bTmxl-J(t40#bKPptsHgtI*kE%gy8)02WJU^=_8klG9;+weJx=Kcz$K+xf&A%2
zC*D789>1T)YB`FjD744wB}t$SV(-CXn@@%i`a>XhPe8$;vz~Mo?sY`^uj2$KrfmlT
zjeV*5XIa8ngnc#tlVPd80w4<U*k1zmy?@Q`|M`t52@UvjfJ3tu8BvOd6xy`W>eYL2
zw0>p&YsdcI58S{15c3*7r@uOmTFQ;j@5Up<!egZiON|b|)>tWK|GW)>-v&<5-+wM}
zBkuw1IzX2q^&312##obC>pPddJX*a?Syue-^Y`q2{s4zIK7~c6D*zU5<>nG?F=O{}
zSyUWg*LU}_VLWsfd3s-=`Nvng(EWXF{`ioH^EqJTFaoS30eI$pieId!bhtRcBI2>B
zzQ<fjpr_+n$K8Ng@z3K6tX87%baCUb7$Es-*b>g^dGrGG|FK&$n-*ut1I-su(b0f^
zoDC1K5uV*!qyH~g7bi+W3xXnq51@b9Cil)T=H_s28eo%3vFg_|NYCx0n*<_;@m`U)
z+Wi$o{im@85CmF2Wt}+VH0`1QNn2$xS>}PJbOO!mPM*?#o*?ksb_EEBxo*V9NuB#X
zz6#dfZ_4{WO+*A7d=7WEGYPMVTi}1$52Y!(;4O8LIhED_#JvB$%KrEFDCr;>K)FRd
zzWJve{(h7H|Kc4JkZOe033}l{$1IUAWq>NLVK-OL2)*03d9zyj#q;-U1oFyL$RyAt
zJh8%-0r9FI9bU<_2FadV{qB?qR5!6$1DXOv|J|T5cK-yay;2zIpNWjXgAf)1D1y#?
z&a*I2Hd$3QubNB!szow4ycz6>Ifcf*WPd-33ser{dLQ+Abt8zuA(GR<GC*qf0QDjy
z0V0XOEG}be&zVS@n=AXF&S3}heqpu4LY~^+6^Cu470{2D>OGZ2h$2_k)P#c*W~@?z
z@nO@gwnT>lDtJ=eo^08N#76^F1_H1CtZ!*~_zxCMk08OPAWrV52?UV$r!R{!?ID5d
zf35}G8_YN0&P7OEv{+9O<1c)4xV>`CEpL9XO6q=4z^NIfg>iokG^P-CVI8<99S@^u
zm4n(A0$e>fMJ)}h8=#Or(U2p0-zyjE7t*fY$%mGI=J2@^%ra+(RsBd_jU1~%BNJ%g
zl)o&mO=`i5!!-;I#{7GQx5I!rFotn*;W2uE2HG7dn+-kSl0$g<_D?_$c5Eit;-Y|f
z*b2)1YU-MIda+lQh7rUs3GrF=YN<ezBu>Fxb+lNjzaHm#c*E)rnu?}7ehbv$=7lu8
zb8zv0Uhv^C%Pa8VCMBa{ZDJ*c7P<G4Nt`8ea~BLPLex0B@w6lTFbwj@>sB;)GBnWe
zAj^nST3+kH?>`s4fM=(KS$@z#8YO~@9l-{FFFpasq=nBW>ork0$_?OpeFdEYmZM3-
z>$*$hMT00oZYkK1q}~!dgL<MFQAiL!OLxC(dWbg9HX9ya8lvaGE5h*MW1^y<lK(EJ
zgUfvW6gKK9p*#DXGWOFzrk9^SjjuE;Hdflr5*IF@lkiFdQ+XPTLH>-Vj@i!scbA1g
z!bdZr2d=dQl>dA79Xn&m-`?x{a^-U+W2N7+vU%9N>3#fVc>bW;lM56d8$mTvUKr~0
z`MlJlB4(Y{$9=s&jo_oO)M>RecWW!nf<%B)jlSqoFB7f+PbcK~ar@iijz9JB8yds5
zT}pXukl-T0wNWFuv0$lh&HF=5VnUl8zTp0ur8s1Y=h$LLMkKQFO9K>RJ=ROq_rs6|
zwW&6j28Tr|qskv^VS#W+T_&+YOz!jPlst8d!)Ks4#sauhZ-H3O(*~nMc70$_?(XJt
z^>n-tF}L=)niR#%dmdXVP=`ta5eh9atDp*YgaYIVYdhU7L#1s4{s&CF94^XtCX|s3
zo`iocB><lN7ezg!gN)gPIVX_P*h8c2js-j=QPmW3f2|3SXBghJ@IGG_i)-nq*aDg~
zRt%w0ih;AKIW>F+Wl?~erRu&$VciSTn(9uVb)HY!NMUJu?!M%w$SWR(K2o6YNQ9QE
z=?&CB-U5FP>&E{<tnAJF+GQ^ZbdbI!6SgtJV=?>z9AiEHJ+^iK0(Ca_HN%}2LetLN
zRLiHrRgSyF7EvAR+ntT~aipjZ9ZW8ygAx_xf_ezB(5+@J9Gzn=dhhGw&!qD~gY{H}
z-D&sx8hy`5zFfZc_bt_G2bI$>4}HIjMI`TtZD-JQW8|yZ<L<PlnWIH2YWU2W8&lz-
zRzK(1cR`mCE$gvQETFo{b^WD5zu~I%tEN9_dc6wz2qd85F@0Lh&Z<8dF?7b@2Vy%M
zHwKMT!I4_mM||!BTuCD!EMkR2dibOhk5Tmn0GyfWl`>q$8ho$aoNvCEbmn=VlL0lD
z<Iiz$?$-7MbSE*YtpYtNkC}nbm$Fy$KwOrun2toNQ984x8RCL^QioW8{0{VxVl}I1
zX7=XN{%)Ntc;g_>_@by>@Nz}X>FUHvW4iGoyBP=oS1;G=2n)c87q5~liE@OY+2SiW
zr4RV3v!=pWUWGQ3M`Y7}SDW;kzdon&HOVG3^<MA$Q-IAl1>m}#No|o$ciO-16{kR$
zD2a;CY+8D}U8Zzg)Ome1oqpkeFQx5+8b6=e;i&94@Z&Rj+6^iL`OkvG0YM-0qxSdr
z&5scVxf*FcLH)7P!@a#Pguh#lP5Edrsh5~GKAQ7w<!_9=4{ufTWqY%pv3dGv%x)i7
z*-W>dBab@_d^p$p@ziF*@Qw{giMFP~_US$R0mZJ=77)~)`f64?#J|#c(X?NRS{+A$
z4Dt^QHfldzc7_O=>~S%{dcPgc`xOn!A~A)!*j$L7^S~q3Idac$zS>bOfxa-;(#6^Q
z_Rj({`m>-ZVg2C|(Fu!QC%Jb=5$&fMgXi?V<n#;(1c<<mNt{Gn<yji1etX~VE#H2g
zV6{0APLd<C9$r1G86*M4OmgBcD6c-fDA8<TD6;5(Z~La}#~T6!ThU9<cg&Ya*r$3j
zd{=tQ24P#-O)-^S1yo<k5Q7vYTcVeRFBaec5xi)#6ZluMfJpdD_{XY&msZo2={B>q
z{Um@sPd?e?-$cwr#&xZXx!7uG<FT5I1(pZ?ZZC{X;u@<O1~#mCt?RaR6p|*Huup1+
zI~sEj5FPOt6#!I;&c5-o0MxsF5~75m6B(aLoumK)t{QnyzWlo$=HNuU4_qE#p{Rp;
z0OfsMmxF!cw()|L-=$0U(TXGC6U(g8&pH~*r-K?MZO7)uaYAJ4zN<ZWb=Jac293;3
zP_p+>SWmXBles$g%#)2_J$@HUHv5Ltl;)x(zXnH#=eOTWGJVhZPIF|9qF#XVbqb*V
zKQam3jW|E8nl@snb=geNCx_11c=}9%&VuzuJmM;I*=;{n>pdJj*VBovnhqlBZ;sfT
zF41$YpajF76Mn7DaN^1!Xx@NcygIsAj@>?g6}9=6C3p}tF+@S<0%<@J5d0Nquj&yA
zxP9=BM}9jy9n``I-kj608Rm9iki9eIvBrSzI8a&DZfRH9rC-LBXdTzQng+cxD4XuC
z?)9|8Hg)Oyb;YWzG{_L2sp#;x!^8x8^@(4&mKRq|{wP-UaRRpa>_$JbW9)Dm_nBW5
zHEaI8uRDNswP+f!z!@F;-FCi_T0UU`Aj?vC+cBz5K<_dFxUobce)UhRj;fiakT#>B
zsQkV4!JV68Ej4zt+Ua-(qc&20A=YEoUG1+EUoi4d_08-L=e||Z28F}6r27`^VJxyt
zp#P6D!X-{ArliGS#!HD)V@8#n5UEFVkJ)*AK%375kf&6jMIN5drG4y(Bjtw^ihVT=
z`oHUji!J(ZjWSNwdnTIpr4HMafyNPs)d8JtXlyQy$qmpuY)Pv(4>n$9i%Gy&RFivT
zg?Z79s)X*F(5;IBD!5)JE~~EeF-?7G&v{CzZK2|=74ClN13&yMLn&YTCZV<!U5Bzq
z;VlP8;E=a!EUlAgx%dFQAm}WcD1bPcYr1uLya@{P47mjCtTj}+VBggn%zpjuJ7}yH
z``!f3(|bAE>Iggy-6<?-v>>}$ivw*_7~Z~5;IdGRWrA$7JrwOKuA1}uNiv-y;oSc@
zUgZJ0$q95xX596tXyO$um7V?%A$3QE{f2XW&wIXYBS{zmA+OU~->S-hH!Ty?f6g_e
zDn_|tw(k7NdW^7E_j~T*o$0E<W%oy9%RdX7%p#kc5lnioPPfP2Si}kS?OS-*28u*k
zgF}p4G8*VUi(9f1{498iRSvDx$WwsQrd0CBV6-DDWw&7-*pTB^2GRwz8~6Q`LIjqd
zz<RN^Z}u)v^34!xw*|4P{uRdqSd8})zkRhqG+!dh0Ky~vKY1rC4#>FQQ+#-RjaE@S
zn-7ThQAbr^HSp{BmW9E+Coy+|k3#)b9$;dWRitzN>~by5UjF61{3vXp=9BC+r+EQ)
z6qX02<C7@?znkjfZuxh6uZPM5T9v)D+aSNPCzRr;@_WkzY%PI?^=E1MJz0+DI-8`*
z_W~S1QO2OLOVbZZ)<D=6*{#u!+$Zu9fk*)&fzRN>5S}NBZcs3kp6^WNE+&c%4$dE9
z?G~%#hJkncx<S2Hg+VU7#6OxwjyqIsci`rLk*@dM`lXq=CXVX9Bk7~A)<)lXY2cl!
z7luFr7s_cq;4MdS`-7uD%{xp@OcDOWIP`AaQ=xtvqr(g6Xro$C=1|YBeidsdMdC8<
zR9zL_KrcTZ{8A*0J<vPkSr9rMP2{v1c^<p3AB=b^^r;=%mMtDGRC%d$IQ9$lGq#OF
zyl4s>E!NOjco%Tv#r~<8>mv~HL(1^4Nx@-|$QXV!eCR9HkaQsvkb!o%Q@hwX&g7Ip
zr!e#S&C+DPiTm%u!85G#Wh{$T`l8;R#6K`F$Q7gw;Q>ddV9|T-z+3%5em5)IKF%Ko
z)pQ$g!4EU3cMcmnK?*c5QmY{9k(LJhkN(2*M^R|Voe-2K-PJe=KPw7=sK>+ZKwDfy
z@dK}s@u>Ii5xaw-!PGY^p-7MnO;Jk)b`Iz~Mn>cEI50e2nlQv|R~Bs>!e&0)Qv)|e
zeoWEQrV!8GkJljNAu0+A%FhQj*Nfr%Z8qmsu&5X2{jK^^9xR4y^>y$g21$eI0<qUd
z9hUG)8^K8aFT^|G$gYDLjuwJ3i1&$ChD1H?1LM>KJte_m#b}O3>Y(SVP`0?nX<gby
zJ+}Sjw&m;nrl$>WE_Khx)H|Zw<v><GCbx#fO*qQM=E2!K;c#;?xb_sLqyDQ|@2BBK
z;JgKaBkmE)S-##orm3bLz{zr?95Bc!Ck+up>LIBn_}3#qhw?kPdocUEMnnc#FN<WJ
zVEnq8)fG#;b+Nxa{8Le^lzWwwD)ei_C<DWYEd6P|`w0xnWs;}epA#G<0>=D|x`j2V
z6WJL~JfMmL_RCGf>Pq*#u91_|ibLzF;hFQ<jv@o;`O&=?b^-YZM?DdpQpU<$y;d03
zs@v*2iwthcVDrHYD|8Ozmmwr5z_hJy_EWCUjqmxa#gU`e<2x0~O3LwoI^Cwd6{_;-
zQvC-CS5dYAu}L)PZ1pmxsBwLP02M)QF+-?%#4a}%M%Q}$<8(XYY4$;v=v~M(p6<Ct
zrms3^P{jB^;3OIahudYN*E~%4NDW>M!iVul8+9C9k6??9u)JR5l-S&Zkg1;J-pjex
zgYfM}VE=q6fnx;H*xpfq`Y0s65K=3MBJSC;dwVXcd)XMyXJiKw=~2Z_)U%?e))tYH
z4Txla7a#7662qV<0pRVaeAGh?3H^DBqka@({2VU@!#G$G2Y4li{J&#+A4+!XQOgG`
zCvQR5&SxMb%&(}e^Q3|8@T5SGtUDq`L}@px^2Cu%sh^h@1;zNPL*(YDSM>uQ_)N_C
zsLj3QrNQ2=0I_J_sPb)I2e@S`4QEV|h%#=SH@fI#^pGqFDcBbyZ63n!JIG;;y}2!V
zbc!I(eoaPMeBbFScFPd`0(7v?ciB`m7f9Nvaa!d>H9ZfSuCzT)<qbJX<FOr4R?6;x
z4@sS>QM1T>t`bMztOt7inyBwWF_L!Jd4ViBw>b4d12r}=fgqq6;-ju3D}{ha;2q5r
z^5%E9U2P4W7H#AeLD>{$t5PU^Ca=Cor7aDP6sPMsl&_BMQzn>wRvf{>#cN{(lwa|=
z2=jQ4IMFi!`onWmZu7v!arN5ndSGyZ7BpF&SS8Q@l|GpxljFjS@mDe(Xo%_1kz+X8
z&Tsst+0?hg`~1y>wa{Xvx7sOuSqVO$r+%JAdWd(1AlILi|Kb^pkxzYc>W1g!S2KCl
zanKt6mD6IC8F;+u<WaHvz~FQeyBa^g&dPL8H|<IK=yG=M{Qkf*fI<XTkQ6hm!K8Ct
zo`_+p&UO0}N;(qp55`swqspr{Z2VkTPwh@#u+}j>JZg0w6e{jcerqXsZ2^o__U>JC
z6pkzjl>u3b6gYQuLhQbPoBiJ3_>(A>{x?gGbhAwHtP(wtD~x`6DL0ZQlUuQ%@$L*#
zdZOL}2#c?T9>eodiHRLa1N9G;PN>u+=o{7z`lvE?Jr4MQiJbhzZpI@$I%9nKgKgb%
zXVa(gOV~vAM|>Pv->M+XBNmyThueR~rqRq-?*ogMP#IC*UF}gp6bFSk5je_7hk*?X
zK(f;1<7Rrnz=oVS3WDETku7uFc>ouWIS4LbPd%N6b~%U(0SK8LC4cb;EH#Rg8ITh6
zWH=28!|`Dd*44W27i7Qhcz;8D@Q@csR6*=JedGTukenGV*j)!4D`Us=wBq3plL5KJ
zJ7h#`F7#f^>sl?2lcm8We*ld+1=ui11MKT~e<XttP+T|S<$dbR<j3=Oc^Pay97=}o
z*6ebPD7|We?JG~HSb8Mv1xnKYg8go=CV)Z%(0xFcVs!*hh2?zZIyYNjc@oN~nk5R$
zjeG*a;Lg;^UY;a{bpG!OC0FMC@6#N3fGqlj*)n=;oIsZZjKs;k+0#ll87nnh!sryy
z;M^_p8Gmatv*tlII`K(@N{l#B%*0WyRP2%RSEP|WI1It8*AZ!Qg^KCX#=f()-`_j9
zC!mz60UISX3Gh6<V4P7itdEGAz!U-u#gQw4cataad~<am&2WtlwCqV@d~dR>5Xeyk
z<dk%LPjUOeUQc9F|3Y~$-F<GDgh(OJcAAHn)iRSMXVIRs3uG7x08g@({_r_$9@zUl
z8EogT*kdAm4OH-jmZg!DYY5A@#^-h6rDB>H_t6?5X@<{{ObsaVo<c241kXR1)PGfw
z2%V0j3|<A`ZpTFsbWmVlJ{$Tdw!7SjZQ45cjA#Rt{72-jglZXqb;tPr^c%<^8DS&v
zy21R`I1wp0&2NUzbJ5hs?fMp^I;gF0DN6`TvEU`?ZxosJ>ovt`$K2TLoMPM0&S!JQ
zbzgHsWKP0)Mw>R&p90=H&MVT|*|7bF@uu$t>nTFlzE#sv^UL@C(Uw+l2HKiz;7aXp
zgXmwP6&{<NPZRC^RV@jmz^V4Rj1=a*E5=}9><`YlmM=8q#?v$T=nch|eYCfZ+jWGO
z?x5~jf^0samh%>7#Kd;9mjr!S?%j8QT3k@aDR<PS@?!Xtn3$07RV_t6u|5Gh;NbS5
zAt_OnH11dGO|#-Npr3b@tZY+guGRWjvBoNBwrK8lvpZ8p1&`~(vA6DYv?7y>DcKl2
zjYVTDiClP)fF$)@-y_NNUh2AC{E$%3@ZiwwB=D{~jR;+Cq1<Lt)nF`a5*#Q5blvA5
zJcXwWUXTf<nLu7$k&DA<PIvWK&1roA#X#OgfWxh)$<YC4(+Mn};zA8XDRm<Shu)8y
zPo=(WcenBpLF2xPP<VTuPIT#)Co}eH&rz?6^x4V&9m&S@g!~8(CHt9QfUK{QjL{gQ
z)doo*-EL>DiARnmVqc)paw{ZOY0wt@yHve|4=d05x~n{Zj5<Ww2F=_EDVJRN&Ree1
zX0raNgq09KZVxa5cwNqRmvnvL;(7R^aSQe^th)tP94-pJ>r0^4K@~MPm0}MLBGA!_
zD41prpqSX$*hbeaOqgAsSuFc2n=RHN^<J3onfPf4=PNcg2)3h$?yI@R1y+@R6McST
zPRM~;yXmU-cG#1ieOfVF*D1mA0!Mr=qeNb6t?c$wvCC_IOw}+IbB@1ClwgILRE7Da
z3{sCYMoM$|h7F_Kd|giM%KJ{$l!3;AGcAXKk9E0NRdj0gHEdJJN7i%-5o!TD_k{Jr
zqP^iy1OvW0hQo+qw;%(%UEk#|K|~kQl{Z7;7*?!r9y%80?w|mm>%%?u=0i354*YMl
z?l(poLR-FE)KycQJv}%V8Fz4bo;^LXVOq;{DK<{6eRUWcA?vXh4)MEIqQbyGeZuOI
za-{n>S<Tc&Eq?X=w9yEE{ED?+K)kW_t9bf3oM)B=)f5d|)|tPg`l~T5q13$sLta{c
z-yP$~X3(~iyIrv-)jDRkofFmrfnptU#7@HN&>XVLs{JjZy9{g6fuB}3i5;cP{;AIk
zW@@8jFfu=Y&nzH4bpM|^ji?P)YF5RKg)g4pb_0Q@-M;e6yjZ3lxcH_rB-I{9HO)5U
z`L~LB^TzQtgAptJ%tt>nvB>8Oa=I$1smkj5xBNXryM`pGF2BXt`{UJ6zmtyTry4`$
zHA-BwC3u!&)zx=KC3hY%%1opBLY&{<QPXs$kP152gZoQ2kw!#ab!D&a`7dbJ9NZ&`
z(pk*FFBGrIGPREJ*T&u6H?gR)zp?XI&I<qyQ)N~ZSgwCi7Dk_Zd>&?*2~0UmB7SAQ
z#9?<I7fv2vbULax@t8PA^UCX-FTNe~8iEcsI#(hbkrB-Wj&^c_kspQ!h$wM+xT{E0
zG-5JnsUqpg=1?ntdclZ;zv-q((wz;A6a55U9%urLn^!TQBb3)Ka6;(s@={>C3`|()
z`1{vS81|qyBGYU~OH0ksXm_uUXVB~s2q7_<SbRm40b8F4+NNO%2~a<(7_Ys}aMc?b
zlDSO@vD^L_dDUvoOISIgvUTn+z0$5lzoUlu@~SQ1AmbP8eze_piL<*BSzjRy4^_e3
zjwB9ibkTIU)9N=@mjn3mb)#=`Q;2B{i!LnRnpkdpMnpP+jt!1!swkUY<SH^0s*u0w
z^VII$#n&n^GujEL`hg`hsBc~WQBQL`E#jM(6g*-ON3GAvw=TKfZx3eO{oUx9RX2zn
zU*8{&Vki_*q<}+3x!<#Xs1bDiKSeDHyZbc3&Vc;v?^P#FfrTR-X?1}mO<_h=L^U&O
zNsM|X@ji|)Xa+WVkKkRl?2XPt_<@II?lcYqd1MGp2FSCpu?QjdK{gjEE6(YcP-Vw>
zSUHJCfzA3)#Y^O}*Xf<|9FrxhHhvMc)++%>kSH{aWCuZ#%1;*Xri-lc=4PbJkYDG;
z9PP8^!=9yUK0}EzDKFqDBlkw@=5>k2BC;eCjx{76-mHa4FeSXCSs_zM5gI%UYQ78q
z&cbl#r@<C>JzBi@j&FeDz`RHw<}<kYi#VcGgTMgdP18yyN~YM#AZA!7D|h<a>*0&&
zZT9I)+ZOr<=zA{J@_(oQnDfXR%Xq&f0DmI|rI?}{nXV$d4K<f#$9!j8@x}b!eizh6
z<F-W<D@M&FzJ1LYVM(JyqUQy8jJcG-S(@QuWJbY}+flwATo>4VN8y~p<FoIJ7u6|g
z6cio9rKcl5-DsGIrMSc-_#2~fznJ;@f<^_dxzr^4dqxdOt<P10bdQevXFT!e2i6+h
zld;P)Ki2Zgr-?s3%X3AD-ywQ3I?QMB82!Oqg2n?hb}^q{)GioX9ejmDl|~WGXppso
zuYlnwMqlo>Yd-mHQ|>n7jvi2t-_mDTQd*4^ow7sTiTJ;!gYBmr`?UF17z-^bu@PPp
zfso)JC$NQp*6v@G)`)F*JE4Lfr*>ceq9)#NnQ^?xHoO$Z&P+aKvYvgTO(#|BHFaes
zYa;NS@>aB}QWj7o@hx0OYrbOC(--dim#F0k`tWyAXbjHELh#l_^sNa(F;ryP;R`hf
zAHrrN{Ee8av%?bYj;Tx0PHTFfZgH327Ij@u&s2pqp|`=b(na4rH~ma(u&4MLOihRZ
zeg-~tX6QJL@cnd4N=Oj9tt_`gQDFO;vZ#JIT+=l64NYK()Iys58Ja#E;z=Bkef4}b
zBkw(0C6}vnv&PGt;ep+r3{WB@Jj1BlWzzaLT1PwYeQl3~@6o@}GUnmq)L>)_madqx
z^&xRS=lq#xv%a$_C<Vr-T-S>Tftb>JvOaw`Qph=s+qO!r(C4KgPp2c%t&1q5Mw<iP
zK?gq>!FIM)JKPo|io?z!QL78MQV_HjUW+&Iw3bbBFbg_0sXZja?&^dQ|MBQi8yR>*
zOhVWNgd<Bvi`mA^m-`VrTSoD^g9K)VyrP-HGmAFlIk)~2*XPTheMw*OdQ!xBLozUN
zv8B7<8?UVEo>;$70(Bk}#R{23NvG8wmUGfF91+*8Z=g4{tl#Bo9`0jx>APEvCWopO
zfbb>K%BiCW1HHP=dv5RNN2_S@r`uIsApTxG>^yzrCP$~}BR5W-BIxM^Ai77U*JrcZ
z<Nm5OPJC8FSureYS0^u@qVoD`fA+n48HvxraPJ*5<38V@`cak7S#V&#xXi6f1bUN;
zBKKyy=GR-Axl-lQl$^$Z`B;obw-~9f*GHZolx6JgBE8ZD|8QeL9X$Yk2^H2iDd(@m
z`1euUZU!O!w9%*Tt97VfH4S&!zH=Rsr)w9F&fn`_v8Ltl7T6L_LRXKf?H|-d`5*+R
zSn=k&Q2m^Wh<dda;<|NZw9)5J;}j;<-cw3N?(V)N%6t@ITFSKPW?3^y`ux|qii95U
zxW}AxlwLs({?T`KHQ6R}v7>L-NR0J91?$~}>dIHT(7ig%JbjLSl;K_!wV)Z)qUF|k
z#U-niEX|)kyQ>18{|uC-sE7L)ZYE7pfC6M>nND{%2t-0&3Bamp%7b;r_3a(IM>l8|
zYqr+snefz}jEJ|qFife35_+9ki#nSSE296{tY?OeS`t0M>(shC2;piuOBGZFCL69F
zwH(Ib&?|ykco2X#)qr^_6Tl1;$%Odj%JkD$hq5zQ21QPLH)tET9`35y{Va@&n*pY<
ziirY{mp<3K7+;Or2tZ{FXLF_|_~z!gtRr>trLVHO{T+d}0_TJ8h?}ZEIjHu@*KU3p
zKKi$vZ;ARIJMAp)5dIfyjK%}vPUn1t^V}t;%P8P$plmiX)%=G817f4_Ptj;PYwJyd
zRpA;PWZ$o=k@XL>11tjj$&Jpb{hzsW^JuQtJ$M>&t1$O9|HELQocMVB{=yiyHKyiv
zi1t@cOl9Mhtsy5jtI<xX#Bsh?>=g1f-=kPEeYR;{EBd{eKkxZETSv928mU{eb~61d
z7=9#r-l3IR?}dqY7Gw?-x$WWOOcsIBo4Gmkr&3iiAS`x=le5Mv32VJFzo^R`+;7U{
zL=38Ref9nw6om8%=>q4LSW?AvUzQUKc<YG(O^e22;D#1pJ&C}}PC5*IGkP)0VG;7x
zeZR^&gn<$8dt5y+vu1!nDfMiv(E427t4WPn_UFybFeZoqGen&#Y$zpR^FH%2Iirk)
zho8d%sWis8Kr3!_bXCrKW<S&A>7sz}gl1c8Uf`wWb8~3T=X(`(SN2pLPJeH@BtHDF
zSr%mg`;eHH!|wz8&l$9Y9+(|#DV_0>YW#ytgYY#%8>9!3sVfvS-jQ;s7Qz@Vh<MjN
zTeML2;ar&T@yr9Xx$D_+qZbFX?CQG5ThxMhJ~E~tE{CgUqygs}g`hG3bo2afwds;D
zub^Gj4@?(Z%>dEU|ITxY@WG5Y>a4R8-8kd^^!aBm6dy+aTUT{Jb+)OTuQ#&=PVsq$
zB2j1;K5OsX%>5gEJo9`mM*!o<MJ7`?9e@`7C3RJSL5*9InKRb`U*B<Bp?}kX1b4w<
zy!c*RV6ZWNx;?%cBLH#OcOoS^gd8=TXyf|TbhAi|6r%c*S0#wDBLjD2E#L)LdIM-L
zS3-|zfC3D72n%fy0^)!d4a*P-%e7#o^Ph!E;fM*s7Dru+4BEd#b5TL+q3Wc8q;ZY%
z{Fk2n;pL1a^v}wtjeM!P^kDB-N-TUFIV>5PdP4CVjHLa!1WIv4K6gc~oH~?N#%F-z
zM032(7QddkZ+OJe?451UWVH2e0XNKXaZIDI`*67_HE($G>#T)abA)n}pY6*?VG3Z;
z`LgVF{?=-oA}W60J_+Ho*>{{~FHFK}wQIT!{L>Qwr|>-s;19Hf7=EpbzlP-_3bNG{
zz2)Zi?|)9tS5B_HOx;=rqLo@?o9Rl0Ha}90vRtK6Q4QAG_eOu^DX&vuoLOm>-VCb!
z>v)#-foGRH%U@8^mG_~5<27+uD_MaN{UZH=M!8g%@sxKW2PL-bp7>)5Dw!Q^&2<$3
z=~AI?mAKrigEJo=&J}rN0;|4|4HN2HX``i3M7^RS+C_WImB6Z}J?owc+^@VCb$CYK
zqsE4;_KI+HL<60_wd&@#sSdOCES>$kEy;9CIGJo<)W&AuS2IhKREgKDX8g0DEb0q9
zB8I`bdGGuHeSI#_>*~M*-iQ<Qme#Hq?P9JYteQT&YIj<Y#VtMaKBN$Ze31hoI6(Ds
zKW7Sgt0%to-9A3;B==9fyE*x(((;&p1#~gx+Rfx!o>{4`as<`0ib3DBrq!;La}9#C
zmX|KKR}Y*{HaMCj9Jwk?Iv?_R9K_8#xvk%O{~q)EUVWQgIrIeL&<f~V1MH4(Krt;m
zGHIn}I+E8-woX)%4DhH&`u<Q-9&^xSo_^(eUmORyw(9jew=*ad=y3PybbER6&FU>`
zYf#~<50+z*Xot2@G|axeuI~6v{E1+Mu(%v8Rg9T@`rbbI@FIvSRHp+Y@^3Ey_@&2z
z)?-Yl^#uBUo+apyc;*O^$h?_L%#MK9Qc_`tHIO5hBxvY+zEm&0c>w^@(!%t1k4Mb{
zz}(_B9mffvpq?Cr!8{`5ct|E#(h-`#`r`5^ln@SKOZ*zJY2vVHBdgC$U^CDgx57Fl
z3Kf-55>y9MIXc_lvuS-z?KOdTQUbQfCz%5JRN+hkcm4M~(a(MOVlyrbF2%@+yx35o
z-)YM`QJ@bT*ib^mVFstc^^Ew?&i2h+@3WcxD$^eekz(>b+u<Ix0X4(Ksqfnx?k-8y
zA_j}^2s+F38?*uFM+qofL-jNj{a+gA8n5>Rtj70H7?rcK!j!z9AAi_!!ux*8qO(Th
zQYEm~pH?`(tW3}ZXdXkDHnG-?Z_Dz4?zy1!tv<0$6eu$eaQcE-kEJuQ&m~h^x8YuM
z?oP;8EgT5m%1+V&NK<L|4AQ$B)=JDRK-i_TMn0WYO8Rl^{RW?9Ozl%#604r%)!8n6
zV+OhH?9F{J7uYTzU=)u%JZA9S`n${CP5mI(-gsG=FmFAxUY#3vMbxj7%TbHTqCLy$
zGn9KT-h73$Uq=8A_jqwU=Us7v=pQm5%TK<R-IlxX8Bgb~Cs}TB_o2u1TE9-7`@ZnK
zvvzgNN3CO6&)d^+S|D>OwN+L;-x`ww^5Pw*+<^?Cx;dMA;NBUQY5EXp84(dN1o&Fq
zlLTDG!VzXn0V>)_$a60V1c2qy1o>O_#yhWjVDP2Z>Cxn8U<A<%{L4lkwV<lzMXbYR
z4F*$vSq`c#0j<@$XD%8~f2CbfY||irdkOkosj8P~<_r3NPt(n0w|QBjIaw0>=&8E>
zx4POhqs4IYhZ}9S2o-=^Grqc6DB!UZ+b0W-sqdv<z2JnoTHDTcuO+vBeYQv_0oTOU
zdh~~s+d?%|5hD#?)?8tuh&)3M2_c}7jzu8G50XiC{ec*`(w!&=sv~(?6;cYvn&-3!
ztc3jE%D^@*(T0|P#_%gohPnZx^l@t72LNGz9#nfB3qKHwiihdJp(&Hb6AgF^GI(AZ
zW5<*=gANj4Tk+5IQB5SCNdUIua>F^H{lu-TEvZA*hizNQj%vqpGgfa9ZjYZe(9VhU
zxqlaky`1Y5qQQI#0fqVa#kO!O){s#CK)VLw;jlEQvj;Y)d`N3o+I&R4Fy^!z5>3Z-
z6}xAB06|Q7J+PCc`^Y~f<aw0$>oC$!1g#r%8>UHSdU-TSN@G9{m?KQ*+o?`qid5l5
zU-_QR7hEdsadc)2+tUisY2N~bveau4!4)W(fk}7Hy&r5_4(agvk=50Vk9ej1e0CF;
zct1@kFnLS0xVSf@>GV4pHU_1dH&zwE{;psE5QMh(2NZ~&+I?UQuH}I3tIGs8XSlXW
zo!VUT-twEy%{~h;_A9635<ItZ#)yn_q6^goZObwJU*{h)?7Vw~QLmGnApO0R^P@`J
zyMk(esCx%72JJR=>=RClFprPJjGZy0Tw$SrUQ`6}0MrxC$#$OT0Uqj4k1|kGla*_n
zXd5;Oiz{$Y38~@C`9{m;MeR8&t&XbX%{#=4)oo1y?|^^XI;r^rM&ha6FR!y5Gu@W!
zlg-@<zL_ErElJud-VKE~YU!>DLvNhZWn8r_^h4=Vop+;5&<sO~SQ@-epKy)0ZqI>b
zKl)uLt@fQgvi-TOz0McoP%BV4CI2;1M;^w(3O@o<`eSF(xs{M$&L8UQyu97pMiW=7
z74|zXcm&JPyiI_kRjy{*`z)Ruiuu|)X!XKvuVu$xwjZi39qvwJFByXnCWcC<_X}?t
z{)Pyz{(8+;v-~=qWJ(9q+-!GB;mW664lhWd!9DGC^rKp6-K?*PhihBh;eY^nYMh+(
zL*Jc=!8N}I!xo>t@b@SRd!Dp{Ziq$*VZle9HyY2EgZzbO9&tl1^g*3PliuvsBnmB7
zWKMIz41ROoKfr6x^exyRH+e{#Uu4lY=ka<l30@VMD7T*hcl+YSMPKGCJVEgXB)rNN
zS8sV%!A8$GBmxLbI?1P}w`AK5ID>tFtn+TAD}Ht-NM)(v-24-L`@`-;`oEbYR9f70
zNR`%j*2;peTS})z+FMM)2=Z6J@ttV##Q80#wGVDQHas8{aEtO%zy(AbMm24J5j%Ua
zTq*kM-zY0e)IFbhC+JEb{fX5cc0C2pjvQzqp$GTv{0q5Xwdm*5#Hc!>>ocWIo6u*a
zRLIMmz`g4wmA(3^w<MsHvzng?o5Nlv+}CJk-7S(hOeA|j%sp!6l`Jg%?dYX0(y`c9
z(4>OJ;~Ud@1PAKj{NCe^?Uvgtz?JNcqZD8DhhD4e@xST@3SpV8(Saz&kRhTc8?>&)
zGuFC{<X%OM_W}nC$$YMtQAAwoVq#*WxrXuYWJ06wE0Se^4+s3nhw{3Y`Az)OYFYxT
z5b9Y=0PpLW1&3}D;2FMaG^UgG0M>A}3OT1A=TiHV2@H0YnLu!lq}t&1ojp61RkxY~
zc%zP8lx_EkD}ma}Sg}cUFX7M9*~A1+Gt_0$gRNp57ao~sp2z)GR|_ukLX20Bf)S#4
z%bJ8=?!aX?y{dFxS4?jh(FW7@xpbN9N#h>f=eqKD=_*;Ge)mo~pc!%Prn|JXurukx
zrZIv(ET|kmB_o_jd1~+H35Y?-w=m1ASi?1jlEi|fLmi-YBS<*Sb5P^3DAv&N{d*b9
zX!(#nCL$w<D)%I)bUXTwKzT;N^09}e=t455|6TZ2<8;@KbD1eHXIS(11)R790e8D}
z+wm6`Bd+dvEzIe6w@B|FInK1l5*|jr%G7H{CuG;GbNkHkVsVX(%Y5g2IHe*pH9c6^
z7++;LN20&qHeVKR*X|E-RvASUYwly%F{<^ClHanT8_Z@Q+&#5SkDUCu*!3ed&ZD}8
z2g425&Yvb`EX1fO*TvhyPEUv^jZGw0bkLv?pb5a-%u0PL8&)lz8OS$q;0-;d>)gvc
zE33i~z5&VqOA~2eL=hYAm<?J;z`CLhjsv?2r{vG7`Co<03OMz#<GEQyr2xOW2s11g
zczSwmuz=!NuKrR*Uj<$i-95<7_8c()7IyFlh)FoQOZ3u55aw?MZKBWsah+W<HCx=^
zmrRII6jCsEYV~-V*`Io^GGwb-fikche!;KWum$2u>(|<69U!*|MC|g<`baEis$bt+
zu4jHaA^9BapqJi1ClICjt4^IE3^boGNouJk61}~HM}5`43kClR^y^k$W}5wCLjSV5
z?3~wTrE7T0OxZw>{Z%oR@oSZ(92i~JM^F7`s@)sUraaPJMa1xKGC_jG_I}xM`HTI$
z@b1rG*0!L}gpqr;(|3b&TFo*ljgB`6`E_;idv-Cbo2s>S2ze?r2sC+W{J5JhHW3*S
z;KA#es_fR?;C>BMpl{E%Z*G^&edgFt*jwQ6mygAn`C7MciDoko1A7*4;K5|$3jhva
z&)ybNgt)0^xda3mF1AWY;vG!advb}?Kdb(XmVzbj1n59E@1Vm{<X^&{SD3T#MqzKw
zHh72EGq@eyAYqVot><{3XS8oR`ysc&%>*H!ZGK>0u$xV<SRXVfH-^DbaqzbNRf59!
zO7UYybee;=W`k%=Fl3Q$pr)q%HBPvm?I}<7EHGk@4?R<lL0ESI_Ubzd3(S**PR63|
zUgpc1k&(0I9*`V<!)1CQx)^wxW)F5#&?hIENWED7M?oEcZi|6tM~!6Rc!x7;8(*JA
zxps3TSBeewkUN~&*ILD9-Yw6PxHJyqIRTBR&1ezF<H&_m&{@eM^gxCG?qg|TQ?^Gi
zH&*Fe!1FDK<hbqDN;0tODK&-$U}8eVM3IqUDKS$}ni+C!CKL2Em@VlrdGQ~sM`V0|
zoXDYsRVYbX+gR0<%`VEDcgZs2|GZ|w_G%=P3&K7i7C}xpF-c$};C&X=Z(dB<h8fmv
zV~HF~@$H8|RpF2L7X9`JEM2$Y^Gcu<8WDKq^)PojUrr;<opW|#RxsYee6bZ_2H%r9
zPQ-X)XmG+q>6~)@&-EC}i3$?fcy>)eQ7Fh3Bk_8>rzn_o;+N^7^JD>$m*&})uAj7K
zgBPC8$Wz;?=d*xIg$tW_5w?fC1kMUR4s2ao73<L=#nufrNGQrz`$ug0f==VQcmBl%
zbSsUinSwaxpN>`;l~15@(7Q~hDE|^FJK?q0kp0m8MxBoo7m`I}xGU%r6&7r4nIceu
z#}tM{rD)h%`#=Fyb|g-q`#d{DI+-b1fmu^erb>#`Lj6HGX5bG2Ttq_hIn)F67B}Sl
zrW>b{y_g2(EMCo87nI|Un3K()AAxa6`Kd%p5G+dBf@};DxnTQ`NW3@4Rtp~}`|zBw
zZVuX%R`|U_1d+9Mge@><Ud6&Q@D(U!wm8xoaRb7b$-_6Jc`_zxNK$<mC0|IhGclde
zdKr`vHTm${Yi|!bZNn@OpH^N6^S<Xb@592U2Yl3}A!&0Z%sM(n4IqK(w*^5^n~4|}
zT&U_=pO(!Og%u%o=<ZxYVzSM|<<bx5qei0sIW(nAVQSg|$k|FjCj#o)%RFfg{SNXE
z_UsdN?o~lf5L(G7!jd@g2$pLIEgmlY?Uk?W;@2fr|9q{(+y>j7?Ov}goQwS>MY1Qd
zh)r?ix{|nmtuhMuR$N$jqxja*mM+sa!9c)3b9#tFXa|;1Z#;GQt$A5#lgHsmfk?fQ
zXYPU?(J)ctrFll{HRoJ<TtKb;d?T5AY(3V+2jIjdcvV#lLdrOTQI&!Cbw`VlKg;+b
za>TkAFK_oVzURn&*_xuy1_HsfKcci>U_$A&@qnRt_Cy%qhQ=7M)lUVOkdZ<livq?B
zt-ILj=$PeoO!uZityhM^z_`HTjhFMIifh`|nN;#5z!L8dniclFO2BMl)#;pXf(E3~
zD}IP*>gPCH%pR(9C%<#qnRtz(ovoVl{Pm>~LaXhy)A|7ETnK+DSg$Ynsvrqw*#RhI
z+Sv4!wn*m+4CsAxuv5vnJFbCduPYx8_ke<aZZkG|FF#M-m~%ns{01DeV?7WNMUPS7
z6?X<<%41g7F=3t*((a>F*KEH+?xA6D6=YF(|75AU?f^Rg2_=aNpd6^952`7LiHsAr
zAZ$eKi-PWZB;LgVSoH=j-N}y$!l5JE4g!+z_?%M?y|rqNbmoALWBp?K2Fa*8OSdce
zF@`6f3w3@w+1J!=%TlUd``69EpEHX^yd{+Vl~~%ynN8AgDJkGX{%za9M{dqV+P?z)
z(=YE>a}YiV`-aVp&xi1Q{fOCz=fO#F!!FkUz8A<xF4BM2_y05_+@XYL7bH0F`yBnX
zy#HrVoNSjsV9-z-FeO~*f&qMg^IQR?>%^=3T_Es4bm8{EA<ii(1E*ZcrXX};110Ds
zt_R)*WFG-HWV{9LP0fP2i0zciT+(9=yJJ>vzZ(soipoh#ZH`V*4v~(hDlSyYd~eM#
zAd~epbsZ)D*=y{4k46xSs7SY>BOsJ?sboEAfqU2r-B4}v6AHy>C83o`h{6`MSkseU
zdScRn4mxa^B~yxf>7_TFiUWZQtokO8fWl+Ui(LB<yIP=*5vot;sfU*z^JrYKcSDlU
z!R;sOT{HPnTbwh^Cty+g`Lf=7q{+@68twR*1PvFl6tzT>qEG7C0FrZHP)~^==e~2L
zE}-MY%+~nbBA$^22ElYUWe9$0sAPv)4(Cj|;IL>1j6AqL`A*2^)O<ON*T2_he)irf
zTMR+QQ!Nf#ntq{up_a7Kh{a{Cugn^>9wUL+%+-7P_<%)TUPISsYdU!jpY`0M{FDo?
zaKwVix?==YAI<BLWUQK1(LOyTHQ4+A?T!W-Vqcv6Y)snDBMQH65x^9qjV3y#ZCVFJ
zFs{@F0s9z1bkK_1tjxDQjoONfif+T5W}QWEzom`_TlyXZ0WNG}<hB##83}x4PP0QT
zbD#%Sf><`SgchMB7VM{=*HBs>)V?G}9I59HL(h3o?mxU$C=gSF73_Q%=%k13`5_7r
z%x~hkBF60wl~kQ7&0ggA5c9xl;o8|cxK?z^7Z^uK8$s2l)nout=%uteaXUW0NAZd=
zVcJNCwdDPBm!Jfgo#gn0Qn6&_+vqmJjycH++#X`06Z4I}-l%5BbVjU|EoiwOhXDsX
zAX71;<Vz3-LV{5bm{v!C6J!Vp06G2vaXC@59RmI_KqKh#dpy=o7sJPPtQk<#6E!Fm
zp+G&usBcO+=MRLccRb$s@YWl~!G-I65*jvI#;34DI-Nk2Et@d{rj1W9Il~}VQh~wd
zR~71FXkR2&!~EFOR>5defta#MPO}?c7yKmQwV+Ej{raS2{;7(kq3pIDt$;iuZAXWV
zAxd@qY!<SC{y8rG7x>t^7JY<Sgq{HAbB+SSitrZB*w@13B7UtkEOGM?u!&r@(h}(7
zsETF4v{G382-13;_4bR>V-hhxH_n`Y9rnL(c)21Bc+3;&ivg$~kG1ebv0nF^C6;z(
z*P`3!^A)Xrkd?>JEU?DDabE(;j`DL4Wx?THsSI`_&?eDNaWP!(h?Ovra-P&l%1agV
zE8*o?7zTMZ(08;R#Q=;{t$M*K!-d-QcZjhV8Su*4h%E=WyTZ~-e%2_1{gGkc+&e)>
zyMtvpQ4aeUhu?iq4F8t}!{OnxNHl}6!Q$N9XG`XqbFoBRVavnRbV9-g{z9*d+4O4r
zRJi8C%K4=^(eoj#c$8#9CD6~fq)e9kbG{^3=075nt$~dqj{=a@b>b5P@8R|54MoAG
zwdwq>YazAerJ{jVkhMC$Td!KTSBxPWf#VY3Pk8B|U(Mufu3RgFE@GuqqX?nM{wDT#
zv2Gp|J#mz9q3xTpkX6!>0H6V;e{A^eYl{|ipwioGfaEk02ps0nC4rrg`wQA39(z(W
z?5EW7I8J;U+eq_3mh@hn=GnoXmDT8miK00o8qmZ;!k>%zm#=u9?R*6Owr~c)z=lW#
z6t;3grpdn$pw}B@fmSUjvM{=@fHfAkSY$TF%DAZJ7my|tgOts2M^O_MG&oG}z&L=2
z3F!eEv|MCqj?WxeJkLGF9v+mAe*Agx)DPq3rx#|iXf`0_NoP{d!t@?9B(*J%*;TC<
zUziNln~7JaOZEOySwwW(mu9MU9{~Q(CJ=%O@yM+4y;jfKfIJ``rKc`zIPtqh^Bl{h
z5B`kTW5bNp#_}!rSxVhVlfQ`Tk?Df+cLLTMJDhwNGK8+j9+yY7J)Iuv(PTpJ=i5pR
zn#|D`i^?97^2ZG?kV}#>PmmLc5t0ge1gszSvK2Dy{G=nULn05h+bFW%X%hrQ(w;Gg
z8Bn#RH|gn3YC2#abp2Tn&7|-?z@20Etq<Do3vGS`p)AnV1dcAWw+-2#3uQYw^WX=*
z<9>Nl#y-q|HNV59P}E;1n8u)aT3|`HTEb~tyJ+XZ&Lo$talK+Pi%tsjsmbJyk^<#x
z3ihya;_O5cJQ`|A)g{&Zn~i6tHCw<Y-x`2!xt{_nTee{w3A|6QLdXzD;zQd_$I6Yw
z)4Zh5>dpKAAHLo?psKCw7pB=X(%nc(iIhle5CnrR=|)9Tl<rWZTR}olLK;bFB&Adk
zrI7}K4M^8FIOq7j=XvhE-=8XM*IsL`Imh_bxL=Ma>7qhiGOT*NQ)$0b8b_v*svvDX
zp0Cwp6Cf0P;>376{^F%tL*HDpc8AI(tImF=p=tE;$7^)E_IWz*#P}Y@ai}22bX|X1
zy_-#0^>FF$UF-dHBgY5|1{d<RkNC{nGPa*4C8*r-0Y`j6ZaNl?si(tTJU+i(>KNuG
zEzN$Bi^=7|x5Ak`5E>i2w?p?BNt<~<iZ8$&^7hujXkL@uXXGK{92d5t*H5j;Z9%Kv
z{fo*N#bs`*-?l126=1z`nR$`Rpx*sLBxBo>vLGR&l%jk-9FL53#V%!Dg2h+o-pC!C
z>=7J)KDeE^6!2mF<Y>=bwz14X2mNE@T(lv^ItAh``b-sj{{JqYzt$2G553-Yg|wda
z3TM5g*NU5in}d*$;+K_as<~!`#wN%i$F1hOCx`{5g!>|%A`80CG-0KT#4iwSYk6;R
zt)x0GxNcm!`<~<7+R~hf*f4Ik<i^&wqN@pMSN6r}7umU?L;KxLgCGdz=py~D{FF47
zY`XD;egYtt19Qc&2<P_puRaivxR8bgju{&@Jj6Zc_`UZmy}dBr;vv6q+K%(a<h4{I
zvi_BppA61Bj3EIo-!5{G#l}cld_*|JGkSe_;xzCB?1=l)DU^b`9eeF%`m`g4ZloA|
z4&ya<n1h`oXFQ$eB400}J>KWIm7?zGav14}S{E@SUG9OGv9xwK(@rRZ<j8H}PGgV~
znt5!@N68(%D97X*zaoqXqonBr#VnQ_Lk5jcPfLE>#1#zFRe0m!V%1oe{BjXh9APeV
z(SQo$pI+!9s(5@A`BS2I9N8w4UY+yL>*|OXjPs+wF&cGy1Afg@Am8UQmjM|DukZ0b
zD-wOiHt=rderdt65SR4hE9vadUG;W?>PUnS8jJ(I`UCGb%sjW;6r<NWsr`U6^Jb>l
z|CNq!@yaM)Wp6lkZ;S85M7>qh1B@G!gaaXlUwiUCzIyy!TS?P40hOa)iq69K_oe;U
zV-J?A;Uu+y`u>u+B#MPx&hEuDeru3)jp$zuKng<61NE!*4z?hUai;#@v-BOYgFoN#
z|M(zx)@j#yB(!=H<%+MslUP^8McGOnK+YAVp*h<>vzj??2WJZ+5o@}^e^7a09AD#d
z67iFn8036+tjb??#lOnbe?HwY#9ytAP2Sw>`aM$h#jn*EayXQK?s15}&k{Q~11gs7
zd{O>si~n_50jL|zxjopI)j!rZd2EN4;XP9&zj({4@KfMFKOHc5YkDTCY^A;LvY1vx
zf@o^E@!RM=F@p>L{1^ZFEOb`*gPc3dwAMWG85w5^t2FujZ-vD&$EBeK#vh0s#~OXY
zz|NXWcg>TqWVLPvy^bOK|8`A(ea@e&4Jf^Jeu4hWQ%xCkFhp*&#<^j%)cn=m509^H
z2U=u-8lccgj*;ijlS5uc-&9BR*(xtw{J($YU{Ul8KI+4rBki>x6?(u5MpF{acKCF6
zA{=o*O45n3a^uf;BOS#%{=pa6N1^36?^q%5|5zRHyachli;d83xL;y9{+y?geULrV
zYAH`a@G|tDtzFKJD<*HAcmC{<QtdMG;~w(pk+tuiEB@~XgQ5)})etb-RcD*lYVuW(
zNpWm4o~a0miz>Q++S}8EqAq8EZ|895!Gp+2%_11PS+F<d7cH~#4spT$QrNXuUsgv>
zS75C3%8!b(AvlLACF)nPd)cmgnqH5jyUtqc`SEFs<$m#Y+$=dpKSJ>nZH#!=58odG
z|M%Mk{R)!hV*&x4U28Dj&TH?c>lo_1$9q%T)e@Kkp`lx|2d>^GdE6Ro6>%*UOc?iN
zeUG&#ppnG-^;rid?Pvq!9avO|=#fU&5m9iP?SbCfZMI{I*I``ZBg@?zY6>0X82_(3
z0qb>|k(KmkPYCF$%PWtswhG>2!U^t$od^-{+L@C@5wM3&ftj8F9hUPLhYA^vf#giL
zdse=HG<9Y|3ztpr(#mAR`I^(qF?&Y)@-2_+pGW)O%l5D3#u7n_aGpm-F-W!|UOoX!
zh(6*|IJS?j6Cq+PNJvGu2X;<_vKVd+Z@%HFWhpZp;%djKHz;+r_Mn+pGGi`I|36=(
zSsbfS#m47y)o;31EK)iy{t%=~7;fhl%uT8#dJsI@_+%p>urn}09P4NM^P<z!BWB7=
zceT4)P&m)||9bI}i~&=AO>!QA=>;S*`~EJAij^;>z+gNCd%q5-x!sQ-{_^@>z1KOP
zE4EWuDCc|zenVOv_UqxdEN$kzipqq8seT)s&xwNn0?Z6jZy?a&t;|6V^+W|*=pa8v
zXsyTgTOidVRO2s3LXFta=h|7)bXq{hb*GnEIUZg)#%o?DxpbmX)tEq|T?vGIB9GR^
z;R;(4OD}aQI76~d4;GmrbI~P{MLsa|(S<p&YKMu}i%*+$z|a&luB=XXczCzQbB8x%
zuzuswec;Qu1P5vE>@^iJ?l!%szCuE)_wTxm#rp!{M|B0NU2KT)Qax3@4hmzom_@A>
z2m#6Cs1J4W6OQvKOxHYnC8-KMC6A9b*pt5=z(mm@fQXF0IahB3RJqa;gu7mF@JQC3
zWe+RP@aEr3AYf2sdZx`!2awYxE$t%xGLb=!rhSVVUc;)uGM}xv5*?WJ8|kJ-#gf+{
zaTpIeh(ytQF2nU61UqwJ%c;YEJON{@wxywmZ1a(4iM9-pyPDGjC$$a$q1rJ2=HMzM
z4Ddo`^2)gfg93CpZ@~;_SvV#b!F-lTciASQ%mc{pg6q$dhB_TXzu2?}KU--I2vTBH
zqoNac=t+|~d7r`6SFibGef&ULtd;+;{QLIiPNk6jcj^vDxihNXsW4(j7!HF|>v%ME
zE9Pok=zlK1W=xFNMkq90{gT5iYm~_;%(Kk-%>@H;h}-yDMhV<lyu;qicQT7>mae$!
z0b^AJXy$tH-OLl+sAbqXzDvofTYeyda0P7;0I-mR<?vef4BZD|#p5d&x<`A=d7e9m
zA7^CV(L?W?4=KlsRfm8gcdKq;=I)>Z85yqQ)>AbrhyT692j9T}pw9Z{0k}KA__(|n
zQvnam<?p(~P<ye@?A>!a-WR?COz0NPzC29!{jv7Fu@Kcx-8MA*&M&5%Jzp@aZ25!h
zV)4rH!PIcoL&M>nRlQ*tP68-itoGWd8_(X?2dQ=ax>XOyUZ00R|C(&{x#~rmS>iBJ
zx3vpMO@4;&VRxRT+YIOrR;F8m3LGY+@R`Uq3d;PiF`JqaWGh8#gG#I?L&nE*d-;2r
z<%cp@6t8vFVu$`~gW8Zr*AS@R&fV`rzw2{B=Fw7VEAF@G!ypp@BZ(5Aj;tR&rMB1O
zbX~Z$vh=ylYCd^Pr_yY#!sQlhTkjK&YfTz(3P8cRve4Hw6o@^Q*Af&a@tz}1+%f8I
z-6QAHg_G5iTy2OP4I0L!Q|P|HKp@4@j>G)V0Y@r@R|xa4rOA5=qGj&iK&~|4o5vU>
zLg^W=_wr#^Qb|*KYY(jYcwX72a*mkC4?QA<6cOmbNA5uMYJ(+e7@o30W|Vr6R_+~3
zg46v?@&XKO{Cvo%qSJaQV$B<3*CW4Eod>?vd?;HtWoQ_HGmgPp&DSos;(;Q%NHQ(n
z0a4Pd6!|g_D4ciDT-=B`>bQ#LCS(JHUx^&MAWTB*Y0e}?70=}m|DOEDlijPk0!yP;
zrYAii)@xVdd#QOguW=n=^wGg$n_aJ;4sh@~u=sV-r4NQ6BYcMf!zVi$E-DYyFRpfP
zks<i`MD*W2R}9*RZ1!Of5DFEeMMJSq{{c+B%IWw;6!pkybaVy$;Nn)12uf6>h|3(e
zi4x)snD_I+NEM5mt@|9EjqP6k@j11rJPq*x*>+8xOad{pul}o6F-{#YhXEzwQ}Sf9
z`ol@n@fLwG=Iw*}xt_$Z#gGTh1}&B9mG`ggx(Cd3^}qTMQ2^+q7Ia6N&<H0*N+byo
zsVAN6&#HMxIo)xRQI4Q#e<*snFy-L8DS;hk5Ye`zev@yIumDwag?bhnFDQ2J4`#Of
z!VYp%<}_~&<^@f_af>55r%pjaM-_l$o0Vflh9r&OU_$Nf0m}xW`F_ZGKQLl5qQozj
zG@`e`W=t<Jmp(^fi)SOyA4?tGu086@EXr;2dH>%<o-`{<54M_JNPL}52nI2*kgeWx
zSD&nFyQ_%t(HOC|+;o1UszYJoTS}PhqQ5X)Y^+RqNjD8^pMX(p3TQoEllmMf@BOE3
zC+Q9!Z#o4dE*Oa^Eaku(Hu%Y0jq>VadmR|F=DB%0AEo)w6k<Md4tI$Vvi`~4z*3g_
zv+ERy7Ql=G20xmIq!-PA3E2-J6Rf!A`CFv^8n0d`_I>|c922R{R-ym`EHwA!V$C-N
zeWhmDju#NREJjG4yYFj|U7^4%&<GZi7H8gx<LK5dy6dK&V*WLD0>7q)jO@Ekvd($Q
z2?dxu#?u{=8GGO^mQOY1S<@zf`!nii0VgEKM?dnZv!e|?zTn<`^(+iLv&B+9O#Y47
z+?M+uhrjW7mf2m4gATTvG<*(!&r9}Y$VPAD$mx^JqvIn9TAw>N`v(-jsMP|SK05yW
zV(4#ad5qMdUQ}tF6&!kd+i-vKnHXt=!e%K@f5Q!4dM_V%3|Br7|0ROI{&hNwU_GCd
zW~4wTo`QyP2wu|R0a@l;{e!)l9#A6I$RNi>?Z3+n=WViva2>{B%}44$p2INs_U;we
zoQVw^;~Xlb2Sb`hDGOa^a2&sZh^|<QtLbzai;))0?;HY$qC^A*)+{&7aGdvYgWnx0
zHP6@<J8p3Sj40wE_yrfN(`MmN(h>+Yx!)1-Ldi#&KwVlVPdzF_&uKDQuzCkAq`3|T
zy78(e<bCwv=XowtVKJYZQRVt%eOCc5&=xOv45ZE+ra>tq;#1zUc2d71s$U&-mPIhj
zM!Cuj6&id(u)FQ8GlmF*=tW_%`Z;W`Ts*P;F^ku)6$63BFU1_Wd`Oc;C19kuxJ-2U
zGV{>`^uh}-d%TIAZm+CjFXC>8w%Vhn<sZE|?(IR$Jx8d@+o`)RuvzJCFZA8m+`Dil
z0M5OZ0bc+$XUd*zOtwvIj8!L7s={b-k@VV3Z-rvwxo)R+G)9TPUIq8rYGw+VFG~Ma
zMYzj)GZr%xQDT$^hb0Hrrce_2`uc{pwitE#(jp(|TY-+{B^FtU2Q8H=>9ivR6cI7Y
zAQJ^mqY7s<X>MN#qA^E+^6WO14R+*Oqsdd1X9w^{OF~!B2UQVYGAIu&yDbRiheDgh
z=1d!ILV`0FmsOh33?J3BT$T`wG>}o!j{x6$wf%K`PPA552ts*=O;mbIF+gV#p3+dg
zN5#F~Rs8j{d)*dysP!Ao&p`3BG=F*%-bycGJz=liTUD(vj*^{+TFN=26pK;VLc(=z
zq(rvKUcsO3`rlu+l?k0Y!dWoH1wDKNQkk6XawZ#Ig)MAv^WC1rdlMOS-42N;Jc7oj
zJ(528kh?EX?e}7#w9jEe(c%Rg+p#KUeHubebXB+&5+09Y+0a9AL7HK~%GbK>jgt4L
zlu1~HGlP?JpZ*gH=)~?;3l1iw^8}qN{wXK`!_<w+EF|&9W#>*xX+U7CWm0v9IkN>N
z!IDQ7InP`tY8_GxN=N*Cj1k9%)eh|pS$VZ?t5tWKKoqMmc~QUYoPM|ZoIcvfGx7DP
zyt+fr^ft?e|K~K057(bBJYshEG!y$M2zJAm*OoXXNdI$cJAQFtprgzTS6Y=tVye!K
zk8$;$Nyn~5d-$dg;}J@p$Do{JVney?XRx@$evo=p)5+r~LWaZbNxCZq@h(3J#GD|r
z5YI741p8T|Ua?XC0VBkFAxGq4-bdAk6WD^S%@3e^*q6jva~!V$_jrmT6XFtPAAUqn
zvLFn1`i?hGR<8$!ZKaX65hLaqe!pYq)EQ$;`4f;rE{)IIV(YGrR#I$fHV=Y??rksD
zz%?700Gzi(&>lZ>Cx*^=^sK>TOS3=D+WQx(BVYu-UNKN}dM(hl2?|)6MQ(_*v;XD%
z>$~vo<A9%NBlPvYkJm=~l=#M~H>QJ^!C!5=!MfHGuDDiAV-~gBl<&W~q$hQ8vFSzT
z@orG7!svfOppH-wBBmCnzI-0zqZ+j9j=P>TI;z)tQ?eC*t}j)u<u$&_g-RFnBwMHz
za!V1+71mikV=;HbLQKBC?Nc$Eimk^kuVbWY1sx`ag$4lhX_xi}5y<DzgO;OVgvSAz
zO_?V+1evJufjeACku14sjFupQB}`Tlvn%+l<otIwrkd0Qe@SW|?{D%9UH5fqQnPix
zb*|N$yPpxz%3hDBm30*7_|K+(6$|d-K#$Ehu9-C?i8_Z2$^bjbGGoVd6BlD<0g9Y1
zRcR7~jgiclD~T!w8tvAGFcRQ1HdBPDA0rC`lrK~Ut;#ln{*XHLs<1iQxe{a#ODo4j
z=4G`Y>wme0Q8-^~3aM8`+t4HR>fA|}Zf6Qb(G9)1MJwAtvqX>oWSnHCFN+{}iF9c+
z88QnuFS@S)bc#=9{9DGIUV^tYEi8r^X%?(^2!i$>4=};vrt9+nu{?7n^SM~WpzgNk
z2d*i^hwN=(i3inopDiXs7I}Og%ApaJ+~}n?XLo)jR~xv9K_LYCcTvF)W6`P-)hHaf
zeI8?Y%IzJ5yXIMg%;~1;QjeDM-c>BFfY2dg2Sj-^;n?<yPx~MzI$rOWksCA{A$8zx
z$X;X^TkT$I?hdSQ^<O-n554V5=c~-E{##BGC(BPAp8{caukn;uulS>JfI&+jc6Uq;
z8_xiSG_?>h1*dv%^U?1NzxC2B;*N{ly0j^NTDrcM<qy`jgXg0E6Q)7=%Qb6N;S%NC
z-)BRke!_^~JundMD#XI9pnekyxf&j_J3r^wm%pN|`q(Q*+(mGqULRNC8x6qJt+p)8
zX>_wUb_DW6A=4OC8Qf4(nseeI89}-jiWDNW9(g=@a3%|fiRCBBkCopzEjvhlv-v5I
zVzgu6A1Z&gMD?7VnK4;*`gVUyg!X9~iWdQ6F}+ype-;fp7GMPff!{tQ3%+}_EP}!f
z$EIM^9q7rDyAV0|9x)Z@Bm@oG^k7ga%@bW{%8=&ws7iHygNKBjZ!M$Cm5oX-L&%)1
zx^o+ST?HbqoW4g=%~^0sqwp!XZ|H8HNHUO1^FiF2-TNRe=9RWKWO7$*_ENjt6e$gE
z0z&Ml*K&oC6a%-K<=G<`+R#m7#y;^WtaJ|@>sy`O%(ZU~!s+WHKg6*P+-;CRUW=R3
z&ws+@zS|Lf7G6Djj6_Gf9+LgjL3VTr>obb&Gqbzkqm9YP!>R_~-jVp?=Z-@~x@))d
zl#g7o1kv2ZdtY8L1WYG{=$2Xc#y#i9#Lf83N81*%Bx)U))DgIE`~@^#V;Pmaq$O0!
z<PKn4qsA|L_JAo}8P(M++$I47<1xm^c`>)sijHjpx5h>~+5eHL{8du{_|nW9Anxd_
zYj~r<Nf{C%0o}wlkH@DL$kA)qC3@b2h4<4nZDG9DRb$d0t=hMQX!<RCeK5O&fQcLo
z+py9<ti8AJNZds9LJ!bk1K(4#AeoQhTPs69j4+uycJW;P!r6B7XHQ}#9~Ok0si}w<
zx*#3q0+)VNa2bRbJ4-45VEr4D%8GA>vckgx8igFI^85%Dw&l&9#3{|du?tD-TBMI<
ze2;^-a0q8fD99Ite3UxhV(Uw@=R{^>IEF)-pT><8v`-!gwFyf7L-yZ;pR>axZ;`BI
zNPO<GOM>7l;v<ZAj*O~!-3hPGaf|H+I*&9`lMC3afq}D^%w(w+4By_8#J@TeO-bPC
zSNG_ihj1RNTTNMzEb3$F-ADX>j2oua3j1%FefI+zkTV{5j>OUxF9=#yT6&m!C)Ng%
z1qB!T0?R_E?AgaTk@sI<uP!kUNF!pg2e8}?S1?NO^#)uK0a%<LK`9ae?SuPQlf79y
z<_VlBq5fuPwusMzS%|N+u|%T8Oz-C{9A+J8jWVaD9{;M@lrG#3zDI)ZJ|kxkI`>um
z&Wtxp@{MSwhVO$|CL}NOb#N9u3=aCR=Bpi<6q5cWiaLL~lo%I^wBw{^lF>|}02w!p
z^T*c9kZJfqwiT~-So-FLVCUsMqIY5lLkLl7-%MrA^l!$RK?}S){S!*+>tz0lbNU}{
zjE2p{E(9i<=sOZKNTgh1Wqof@?a)vg{%IbdI6m%+X2J+a6+CM(MDNLf+BH5TZ_Qoc
zYW%CeVG7dw2o}6ctq8Vn(){T=i=PCQU1=ERP-U9u>>sOHc=;eGcWzSDEue|td?gi`
zxDc?yVvEtrY77_f3dBocc=+1g4nh4Dr6AP5LtJmsuA1t_xJ56IHUVO+JNwT`6@jKN
zU!Cvc4IV4aR5oEpJh-5F;o0-pydQ?xk~Cx&Z{5K24=Y&yYAaNIu)XNYgkXrKV)L@B
z2fQZ!`jHG-DK59R6SJUxX(<u=w#1EbLi5uUVateBj1h<wRQq}VX0pKS2DH;c0~gqp
z%39H9%HX;54iMx`JIIomE4&!2b)~)|<vrajPgg?d)r3NO>_>V?7G44ZpREeSmc4a<
zT4LN)Tz9SSI*U3q2F(vBC3$1y4l4#^NOCyJ7iaUB^~OjS$ZFqDS6=qm8cDFK7n2pQ
zy+3=O*~Nn8n4?&4PQxFWs~nwPC^y(4UZVsq3DueOg;GuQlPt!BOOWt$8EJ0uff6Ur
zRsgp0$<wve&g6gg$v;#;Cf-vQ`S_R(b$PVbU2w>7bMOW~uNTLczA$c3FCXilJPpBK
zamY-JFj~1h^!hoRN)|%21S<FnuN7nO>A-*siRd67KS+@=zu5<35B1|IV+Q6QlRi_8
zktPtWhs${<O~v{Bg96wlv@E(_bHs2fB41klYCvO6c!wdN+vzeK{p%lqW#fX}zI?C(
z(#7xyB)x7_{Dwr4qK}qH8^u}XOkqqnx8(NyJH-S9+nEVq2Kd~t#l$JzFCYGkEp*ZU
zU1K=4U<aQ6Ij8w^HJ81lvAe*$EmVmdu^DTx$K%(S0Z?hcdXqxrNfZ^(h%e){70Mdj
zR>i84AR{V2yFh-j%6ZlkA6+LRUS{@3re4XU6?R5qo8rB9+bmBU?n{`-`MK?^=unL-
zl=<7n0<7-Rh@o}GL{TCQpp$&4Z0WKJ9x-w&X2t|=;S4aZac_#YO7y+Dn!I(Hl4Bro
z=GU{&^&YMcu(!KNT{5XxZ{cl{3qT%w!>~eCvO%>Wg;DP|FG!JZNt=abn>MHN<7I;7
zZ3da6rO*`2bW_;>N&vw7ctGVuxL`5RSwGMtLh%S>9Bht3)cC4bIXpTxxbv{XG2KIc
ze$c(-ejsW#{~ZD}CFgS2sXb^+8a%I$_iVqV5w<`%UKlVzSq!%0V;bxE86Lp=x$2V6
zq<@O8KkLHmB544!Wj|HCe)SU|xU2-M8;#zhmqBCjR;{D?6T(CjWr6o#pGNrg7|EIo
z;{g$>e7U%}fPh&UTZJ*`W$zCSzm|#6<Rd^d>V7TkKCD6Ea%4U-_^f;ttQTEbd??N3
zyk=g~^&KgDG->XbF4AtcA_^mN6l76f@yA47X{Kb_^qxpOJN4?HJg=6W^mKOrqR9y{
z5EZi<XD`n-Saxd!6B2+Uq{Edb*yy2Iuym<925h#9R5=~Xk%D6)L^-`8<ut0JxdCra
zQO{M*7iYX_9B;#U>Z7oH^Yg8Zrs%Gh((GY4iexs9RO7ag)_6w=qx<0&(%qHtH#UJU
zN34>3o)V3b`#ZB!xCEEc+z%(vfLgyvs<5R!@|dh~4!S1G_F{|d`-pJKY(0BKjO0v}
zhip=x_piNL!_Eq-Vm)K16bfUyyv|M=JhfsPohPnG(6n4saf^|9t)xpMu`)K{*fG}R
zqwE^<Fe|nBgG&j)vsuJLTe1N|&0sk@cC_fv5R~i8{c%vN`pG>R+y1nfCq<zAYq}Xm
z$s66S_2Yh?G~#*u)^LNiG&O&^|C6jyNR+c(76NUHDr-Rh)#Koc?HI%zJ;JQ=nUc=$
zIT0p>SS?}ik~aYnEvx)lYHsRecOGY(4>3u1)6ucK?w0v0Arj55m-*LCW5{U!%}q^D
zTqM2b`6wCbqZTa#QKL*eRD-hXA;lD6JbiBeBpiDvsFTTsZ94s#&}ERkS+qmQpko|v
zcDgwJdIbt!h%0SZscF~8t{nq1yUP4eHFIvvl&d{C+BBM3F~G4*A?UBrX~!6yssEtK
zpBeRn<XcgaMs|n#_pb4|7GX73Q|$EW7=7Bn*y$utM|gg0A9ja(cYkADe0FWBF<Y`r
z3~E25U;wmz@wf)IVdUc=;owOpj}IF)4?CKA6Dc$#?X@eetL^1tBqW5E4IVi6FTI)*
zB(jC;zsL1grY~tD?QR8IKeC?oINE(^Q{}OpR4t@1#%lgOaGTijmMLX0E5Fv;!jTUp
z#vcScPOG*&o3ip1j{WFF?VRjh#`SVO#hN6sxO$HY2XFe#{(<Y%iIxxjjl%k+S?m3d
z$R-`g0`(D~LEr~L!=~{xsFDFw@@5i$0Ynb-!sa8t+><R<dKi4=R=E{xs>E2fit7Jt
z(!_{cucUN{XoO<cUrc-tLf;!m<Vyz3RaGkQQfljEbZNbbCckKx`;qhBFmWI!cdlPS
zVn7ezlg_{BJcJq+i;;j1{=u_GU1p!(7ey`IEv6$aL*kfls9|`(j?xpE4b1QgNC7P`
z#Li-D(*zM^=m;TA>lf!wMr{`X=ML`Mrphs3x4)ji9ZQLvsVBhhwBV$`9Uq1kQ9(F@
zISyySCoeO`Cdg9G=%I31rH>>v3XS@I`DPaW3lRTZbhoPaNH^I0SwQbFT>u=SF^Thb
zr}__AEB{_#&Ey!cOq!A{8Qbgo;!krNx=2f99d(sJuU^e-ph+lMSc>n!DBJX<Weqt>
z5J1Y#VjhbmbX%f9B%P+$<cCEW;HG0owS<oZI?%E!iRu=PH~J)R(=V;fY|=9kOry;c
z*8C5t`=_}5ONx1W8se>iq>)}(8Gazf;`w_iADS&Y`v;$2bB3hQpEEW^U@>_O#ebK1
zP|VQ=q+jYVd&j82TkxXomECnrI`$`XVD!*w2@K&jGUWw6LIcL%d1ssQXKp}QPynXr
zcfff#pMe}-uj`eiz&QqS>5K3k0L#1Riv+zyUal_91D;%vCh58j;wj?;8c5P_UWL4@
zWMD6G*9P9e^KP?bdzAhza8M4hxb?#}gMJvs1>~Qn9Yb99ty)BR{_fgU?%xmJd}ro!
zSxzB9UWRFMdO$Pqeq`qh(+tH8sP(6pmg<`yuif@81WsqJ@9@~7!C}Jl5wT_g3@zD~
z;gc4Q_Bq<c-Xd#v^LGu|o_v4ra@>`1F}0v%NO-5o5F7%R17?P;&nu|FUM$wa=_<E2
z=-A|Y60w$tNes(LtNnShI(R&Dq@AL^c0rawTBqWy_raD1_kG#y41jz#4_dFJ$oir0
zbaOQfLritVNk5g-1oYL{LHuP5eCMr8#&tvHI(#ERR~MrCm*I}2xOGG@=Yats5Ar7B
ze*n-PEluJR<;)NM9=#tGi<#T=x#wO?r}TBPmy+ha7jM7h?Hx1fbu%i1HSht%@?}U_
zaQ$6$jGJ9>h?oc9>J6RP@zWCWUY~<4$_^O=L<5#$Eve@~<bVwoq}WsOAK9ZZKOxML
zh-&#tcJ=Ws%4?pYJ9|@SF<!?CyVFjO*|*+r44N=^;zd(3h(|FqG%Nf=as3C@f<Uhq
zM6$qK&ztl#fX-??*=W45uCRYH8$CwpA{N1T#ECchJQmH}e+7^-GXAsdi?{Ywhx4^k
zv72n><>96d1H7R!Jto)p;&N*6$3z3#G9auhrGNYU{D^nO?^K+l%f8o*^%sOMhiEJU
z!#OS{w<MDu(g2!e8}u@b?)Nd5ZHYBQvA8jybjSts-es7ZM&>Dd8ja-expm<F_#M;)
zJi&ZQQLG5L%IUEoB0*#dL5nwN9dE$+iC(|M-#i4KdmFNHsv*0g(P~5IL~wy#iHam~
z#^@9C3gVW!lQQHB3xR1dw-r$`8|pW;B=a(?`ZAusZL{fWU|X8f?`(xGeBXOz@cZF0
zQsZ|EF6}U2;F98jI_W?^YeJ^&`%NQ%3v@}23hPgAm7*B_BBp`Wd2pEoF?TNP-)6dU
zpCW|kSW{kp8wNPLHo#&Le&WR{QXB+TQeL?=<`(U*@!IFEq@XhhqA;v@>ga~=y8q&<
zH_i8wP8ty_gy{ns6zD;{qkyWHAA!8wv`VfdWrGXOd+XOyYg6@L^qktsmDj7=IV+#D
zug-VdzrCn-`f^+1#i~IqQ=w3`Y_1s*wkEK=loF7RmlATa--mP#dp#h$b#sOe;4J14
z+-UicJuY~2Cl>D28CNX^uVTAmjKI~qdL2pi>my?a3k?XwelyA(6X>c}J{*fWE&09$
z1pmgt9tg{&u7KZAr^bmDKVUS`kKKWbpK_8H9q;*X-OZ+kmMJb07^NLddGsl{WC$EH
zQ<GNw5fO7yHzp%Ia622wk`8ak1b>tvVLrY2%*RA(_>p0XZc09eO)Oi(KzC}ar96@~
z<b@U&`5!^h|89O*FVKP)pI&t|Wtk?t4~|c$&zBoS*a+y&g(3fvn5>>jylQRYL-eJI
zbF8*a`<-rLNbkAvVh5bQ6{vmi@M~VVKP2?l1<*-gY*pANrCqpNUCtneoP#?uAN=fH
z8{5E8u(2NCj>F`QdKl8cOzV?E4X1w#>r-=QlXtq8PR(SovY}*PAqi*0$8b2$7ys<y
zshbA0h=296Y^hR-R<3}Dwbg6O3`<4L6tRad19x_djjtNqh&qI~S{p25Rs#`$_$&)x
z_+&`BD!r0)l^QGq2M^FwGT$JgJv3xF<*I61D3K1}+A7TxL0Dr|OoRbAPNi8M+cq5P
z8)m<LK%^vRIx0yn>Yd^<GG{{+y@(a}-kU^m*t@emcC6+D#O6L8&`Z0M@;rSRA8Tjj
z@LUE^;ZEdA!W*xh`9E0zJX$e>r|i2}0cf%&^)*Je!vz}#{>6y|rQTt3jQE$j#Cf&z
z<e2b0x@S2mo%t6+;Er#5m{!@-X1Km`HHWTOx(S$?e9?PfoZ?}u0qOuBkuA|N9$6;+
za8#Qtbc)k@NMP&mM#~sPbY>nO_r#U+G~}lrt+sr9pkJ{*luzzV*JBxQg~AhfPa=-5
z@Y-{kGUq+D4C*A<U!F=AHlQYml9&-6hp7x;0N@PSUdW4LPYS{zViOFvpIa{bxIfXn
zis;NPi3bKZo?1g~S36(}2iph2z7==csZC>CUh{ksGQMT-xZyeg$?nflQ@exc7>hSH
z6jM0V^pT}Ze7d(z-M`#f!AFOJ?7wAAh?`iil_Gm|dv{%lqdqeQ*QxVoW@bR<Hy;9b
zN6cRN6%3BDh$RSa;Vvx?bt0o$gCQ&kj%a@_EUYhe&0}aY3F@*?EivfgA@3uqSc7{r
zWMxB?dfvS=JcVfnb>=^a-<?569<Mn|L2z{@%S-^(m1j^vMIcUn>8>53TLYH~3(hF(
zmdn8db#juZPl8QLI$={cMAr881w~|o$pgjxb@?;NQ4SC$3Ptx79_>@kS|$E4pQ~f~
zZ*Li-8Y8r<L%0&OQ%VHDeqnAo43of?Zyyt7!65mY5f5Q5ht|Wfs(H7x4L*u;TzsMg
zIIx03hJdKHp2t8c%0DHX9RVTII|x6gZ(RZfPMHw>B>wGGG4pm!a7)!PtDX8okf}8x
zRKgc;#Q4*Ua9EFM<QlW4X@g3Js2zj1H3)m8)<DB{-m|pFNDU`lNQls3h`V`A!4Y>A
z0E|_gS^6egW2aZ}g;OYbJyR1MmD65df39R6o<!TnI9z6nN0JSb2oe+7gs8q@*Mlng
zt==${q|1J7T0dVz`>lE^C-EB`NS%RzhFe?Hv%#QIfi^(g7P3@ty=DJD9_XJ|k@OJ;
zSpGEu{FhY6MLfWIu#ibHC-+{^rXAVbh!E2engo785{sxXku|2Xy2|KV;#$Z&V)^+N
zlw7A#%(CfsYn;$SW@z649U|p*nMLt76hYdcHmi*qmL-50838*m^TD7w3MCWEcAZ!>
z7s@K9WYUZ57{Rs2VD+&I@QbuWrB++gVrb~KACxuzw1GE3xSqH7r1>kxIO$m<0G$iQ
z4#^j6MvV$liims&1=0GR`&jAg_9CXmM()kzZ{I^hMDN*;Tu8!8TIAF7{WMcK?SrvF
zLgBN{8gssP0gOn=M-9S~n=@%=Z%cKUov$6YoPwF40DK19k~d$7aE1*Ayq5P;q)9a9
zZ~oHscnwXE)b)yxagCGkKzHm<B1wMOG9EazenR>BYpPO1i9@+iC+p1~L2;f1e_(i~
z0_3&H`-7^cVt8f_!FS5@mn_<8xm?L@-Fo@Kh0>!M1c%?t)N)N>k1aG3(qCxe6x=Tv
zC^ZBmUXyuNT_?Pz75m~pYLFB>mSAR+Qqm_>Q~_CU3XMNRnUeWPGV9-)X(z*;!Rh_x
z2U1UMSf&@hl?pDh`ur_J2R5Aq>%H9hJr@gG6>#*wZOz4pBD5QvX4l06|K^L}O}$~j
zU%s!(MX%=MxAm3wo-XGyOP)hMKEqF@d~D;BTg=%%M5-75UY{`3$=3{NC1Et<J7o6#
z-XXlQwm7%Am@D>h^hPaBF^*~)A**<+lyTi7;lc9_^Ow?&JteCjX;gRP642MUh-BfZ
z=EX}a#7#bi%B$<{Foq-8)w%hdA~j=FmyGjHB)#7<?{TEM0&E^RgEugj4b~Itybt2C
zeu=m$)#SpM7}RF#1N2F5$T$@{4Ajhp_bmajZ!1Nenj%@R*AYqYI8;`S7I55`iawCM
zaA+1jsInmWVlR8b)New_@u#)BWy<s6)fPrq*9`UhS?B3r3w>#WKWu`i_0pV0NM;J7
zUT{k5O_!PZy=uOCU3M{hAb|(7cpiuYtV70`YMpW`mF>ZDh8~23w!nCuTbRku)&;JF
z&BWz@J*j3(3@28lFI6CA)f%7dN#HNTYCz>^fCPT0M$lB0M)s8NicQ39%KNB}tL`Y$
z_M7R`cFA8KUJs|pwu-56KZBZ{C*M%Rv&^Tx80HMf+`4r4cgOtXJ+5+v|6##P717eM
zxStl45ES-j^>VQvm?c8huT}oTHsSaQ8bPG_J>qw6G-P(GZtpOg13lopG`a=~rZjQ%
znOLag?a9+Ss+!OQ!@(0mn|fgZhiVcO=nE(@QWFL4@SMtBS0o}Cs9sHrCG-2hEK$(e
zgnT9mo|cH>)_CpYw?xj|i(9r8q_wrs*M>Cc9X5gmaBJXccZ8Fk#1oJ*RCK?2R&$Ep
zzSCXNO3oVVl!lTT#D12j@#rag!%1$2eS`TqITvWop?2q`D36{(3IoMu+d09f)Pjwp
zAj#Xiw|iI4ICwf>3*F>0>YJR!IzDC3JAmZTKfFq4US#YH;Fv-1ydj{t+;tM*)2|9z
z#1vr{zokGSeIYcFzhA}$8Q1xqcBacUyS>&w%I6n!N(8R{3`QqSQsp9lqTQL!=}X-e
zSq_L{>H!3bXPj{@MFJmZ(N3J8d?+5g0m7P6Jq5D??g`CC1x)m?o)C~8s=rPsJ-{PU
zw<i9VG!H=>U{GQ6t~<Wzt)jncx9U2HXO`4!VC8Z^_V*f6swmQm8@@aqtGYC&Q8wmc
z>i(HQ)ULGeX3l)aW6If&&lHjjlT{3a`yHYS|M#Gk=R|w=P@hfhg-8h25`h8QSeAkp
z@h64Q%@$rr@3qZB)q89k==<*ea!lKY{F(<$d(Uh3FY)C60zIw-t55<ffX55!SKXDI
zwAqxSa-iRpquNN7th(9?kXjJO;8~o`37alA$ijlRX(aFua*h;T?sL3Y`<g4b7qkWk
z-;CAQB5qua!)D>zX%ex>L+{>Jy9qJwDPLdfuI3z?5cU;0&{N{8(s5Kn8u|s=EJC3=
zMVUa*P`VO&anm~8x*^S=Zj>R-C%v|PDbqA~S3b@rIQK3Lki3>*lCys{l}E`p$!(%e
zf=}ku;?c_BOq`ihCOB<U?ZCLDNRvBVYY5R0sk}6p11;({Moqr22pzsT=?ilEq*2Z(
zJSF2S2qb0tr9ORvW|;`&s%xt~_azvS)00&MP}xc$U!B-p=bsPK2!s^Kwn5=krrAB-
z)w5$3Qd_Gwcbf*95YFB7+ata=w~kX<)1|t!ND~6L1F#l%Yp?hE{BVUWM+C$~tZf-D
zlpHAks`?MAVZ?yU20}38K_(cFLGSE8H$g)!sY*IpXxeo8s4=N5nUvyD-^)t%4DT<U
z?qQ`OPqv-AT)Ie|@{ABKvaJ8pld6n`nvU47xG@yE0R-@uo4-XpvqoFj5AD9@s9Yu%
zHghn|LUMWvZS<!ODxZr_&6!jX@fUBmbR(jfuHAQNoe71-rHZ$r`Oc_ztF+p`isP#f
z3!x?$LA3!{uYH&*wx<1@s>r@We*Z0G$vDeG;6l!RDYd(-3E88<pTMN%2{ti&8jC$9
zcI}Jfq#xLhSM&V(>A-Swaa}C{BV?)FCr$%w*smzQW%3$qzR@P4_boh^{;hAfhCEkd
zboT-AR-^<67eU>Z`-^u@z7*Yv5lM_b0imT47wAfVi+q)iX`g{$_V3R*oPXvR4cMz7
zY%Dvx^QWByJkBMEMrS27v;VRs+(AP&0328`T>`XX!hTiZZM&D5{md%QVNBGUZzZNB
zppmoWz$w<quKOw^+TVe!KZXHb1v72RrEetTPFr95E^Cf3MFQkujxK_=3(itaU*9*9
ztdAgkV_A}q9<O568Dj=!jn|}o4aPIoFbNp?%`g;qjWaVwKF&~j1Oo9=$-n%pwE$7$
z?{S^4Kg{(<iQjaAqSL9>9&v7fYYE)Cz#baE^*ZY_ZsBnmv+fx}7JGoWVyh)@$*hHO
z095O|(i;i9loI?zE-av>3PLgwWi4jBK9&yIj(FWhz<N(G?)UkWmUC}haOX)^kagy5
zMw2XAiHpIlg^;QdIZb;6nud=fMCn(uXjaB+-<@mK4u4f-)p=w(a;M@DE~$-lXnOAQ
zT~~b`#&Br&qx_9`Bebdt1Fkwegae$KUHsFFYjUrS{V)qR7W+d!4_t8wvV9<(!LIBt
zqpMx%a;?U4-H!OiPdL!{x6Is4!M+zoescgoiFYqMpA3ETrALy$-%X-8%BG^-xas@S
z&H<^cE?>5`T#vMmqZ*91{8=$a$J+xu-amMCUMu1O$icO<oa;j=?a=GWENVx}<9GKR
zg!T{897yJ>LfLoYMOAZ`n}zjyRFrbnL6RI+_|)pCa!>VanEM7$5n0UU{(MO#IDnCy
zQxP}$L<=FOE}Pj*k&<2Mktt)~Z@zy@)n=Z6&ghJoovsIzSMF>34qld}ka{>bLu@*6
zv+paS&$77=SFjd@a_604PI8{~LjJZ0);vNFV&KLid_1=1*s<k^JrSlizPTKA8`r;9
zO_!Ez+Gnk$lV(F%RQjEnOh)bJlD=n8;v@SxGw(e5ei^LFV18BILl=Ks-#p)wsMT`6
z<ZdNNcjAF$bkQnIchU#cE2*ds)Y6@Tgz)@1-jyoY<GI7!FHNJ~>4SL|J<s|CsD@sc
z{sMVTuPSc+t$t7>MuU~%JANQqFduA1gj|^5zrgkGgRUVAi@CvrIgU0-V6Ahu((ZFw
zB4_E-)=xY}?=F;3r<1z}*n>y&abMV$IV2>AR-YVOJUs;m@$GFvWuL^?k303{Kj&*H
zmuC{Fhsr$-NM_V`ZoS4x75~)7Yh}p!4$HF>1a-)MAK)j}??lovvXx1;9or>T%Kz%_
zKy;aPV6uo88Y4lhwm?qiwpqVZh2MJ6e0OvV+xgq3G+G;;tqG29CqRIld<0-3`1RRn
z1K^gxRf$k_a>*jI7NRU6WDQm>i)_2>*?1Ocf+9|XzGl>3YVBjOB5!4t<ePpz+j6-s
zx1Cmvn}4+0u>>-H<etT|Oa7vAJv!Pj^d2YX8&u*pB~?P;#k>lsX`um?prtiYdN%{5
z5b@LHjBv|?s|A)#MCGCpj#UZDjPAwtFkzroxS=ew+Huv6u@-~0ymP|w<HXK%L~XWk
z8BwRX??#}tY<l-dk>SnpaH$7Wc3!Zn4S`oH#WnL4v6%nYlOvKF{V&FsYb$!ldR{=$
zR(I`5UNVdPv0TKpS094f@ZR%CckBAN3Hr#A>iqbRMi`}w2a!gx<CC2gLiD;a?y<qt
zm{=?Bta~{u8Z-Nw=&Zq@D^u$xCn%jKHELSyeeo%j0Mzwt*&#HAW;M>UZ(j<Tlkrji
zmVgSxl7PKoeThCCof}gf6^A!-)npFjEVmqfMgH*0Qi<<4*2Gf7^xj>c==)}G7qkhc
zkoF|sVv{tD5hGGMv<_+jsKoe7!BW+_zEw8~t|iJSpN@#-dOX!sIOStQCPZ~}%-9#k
zVWb-9MOll3Vu*kWp0y5E^B+ONZb@jZ0Hb>B4)~-x!t90dq9e@PWNfYR=wK>ius(H;
zM-jVYIL>(V@gK(xDHWoI{3Xr~4U6_25ZSAzj=lGS!Sz2%n{Bc~D81xGwq(zTrXg?c
z=|BV2K{d7hz|#cNJZStHbAY2d1wl&W<#eHMa*bHF;n?rn$HB%Da6K2hhr<@16Vb<N
z*SSqsOd=~Qn|tCfOlTv`L)vw&abv;{%%pIy*5_F-#<lHTJHp8TL9se_!T#?w>9_&x
z1S>cr7Zz=$$GkLs&rY6fIpsUn;z`t6&O0<Q5i(uS4X^M_@1N+=*W}tiM~S^dzXbhD
z3RSO)CKy&46DHmQDu5pijNOr-TWZ5N02Il9sl@(=h?24XX6~&QafNGYn_?f8+HbNW
z$(94v(M$P*=2HcpYW*s1o;RjOEX|-hZ!b&{n{q@m%l7Ly-x|eO-8&1@2;>U<kZgO6
zxH0wyNjj;N3QN^Y$^{sIsOx>Sx3M@6_Tw$_Qx=nrb6uDlf66sQCqgOnIl-pm)}Anc
zf9Q5*F1+5BVHu(@2?vo>hst7v>U%TUP>&4$Kdm10@GPR_c9Zol26Dv#$HjNOVkA$~
z1c6oTSWyGG#O#>U2DGdnQT2_Ga_O5C7Q+}S2~)RR^Y@(}JymCt+9q_?mKA+S@X3|r
zHbcWTY7GJR)V$wZ|H29cFEro8j2oNzTD68=-dK_eIhaX5dmp<<VDP8@dfxDc*60*g
zL&q>_6oS*F-u*aIR^2X>B_~=y{c#N+44O;VxXwoyLG+kl!P#vBtN?K%a`O1Xb1!Uh
z#(%gmd(v!s&%|avKahZFLT^b`Ta3~egZi;AT)8jm>Sk%Mq3oh?B<!+C+@)o%orKN$
z@0T%14zjU$m=$z;I%CHyNsP1OpLn0=Rx#lGM$ITBP@Lc_p7?7J*3(K~LS$3u-qcU`
z(zkZ7o_uXoid0$oSNq0-g_pps5$=k;r1+3V>fxxUG-mLU{4-`*bWYC6ZmMmkcO8#E
z5-OQsxk>^y9^QF3QhcJ(CpC`H^zArir29317ZSv$N$?Fs$Dd|-g0TNwTL0Ktd~Y_=
znvw5(cH_7)Oljh#kjF6z^=CS=Y!6@ltPatUS#vJiJl{5^R6pdiX9NnUzhzNI0#MyG
z;hQsQuQm03$qGF!vsvQNQcUb1DgJq~o5ohh%LH{1k`3kkY*?~%4JnIO_6h%WU(n(>
zXW84Ypa=gh(9VxrRV~*;)MI0;_YF?A=2+eM*F6lj#enTLi{k;`5DZKoUZ3#d{y1>A
zr*<%Ac80AQT{QsXK+;<Sj_hHW2*mTl1UHQJsZDRn8{lhN@zM?7+jXl3tqfx(5Rr!d
zEtYXx=%sZ7xlDODufnsOhE#UQ-~A=MNXe(`BJmnfHm6$?@PJ%f7eQ_k->G=H{O+gX
z_ta?OrKns`*A~(opxWpX_$=7wuiL4a#}I#iulU;5-5W9y6XS1`+}&yDNt5K`GONm8
zvcm33f&sp+lh|p=prI&$5zd-X&(wHmr`Z=wDr_KF1EpT+JgcNRZKQENWV0QsKl9ub
z*ub`jgksm-o2#wM=3jT>@6{le!p4$LV7~IG+v<PhR*?3BMzxDl+FwWwx&QN{3cvI~
z!ZK#1?}=1-^FR**aNfM>M1P4h0NL4FcIDjWdzb@Igmj|*Kfgzrm4rf)p%&TV53uy1
znft*cVwKI(n2?{O-fdD%@NDjH%{>b^#Ouf5RxHphDggD-N7i(xEwZP-5nhMoohX?h
z4}6ZDz;kX%7sBY!o}^3kJf^y?y+42gF8~NK-pr4i&+w6Qm#OpFDW(lx2pSm)bmrOt
zS;N43@~@Nkq(Qad92Ex7nKz9(0T!KldPG!$Q%RBMK8n@D@8gW(DA;G_PP#Uo08@V1
zdF}2V{{_}3EPnqD|B_;4MaW^PexsI<fWkCKJlA#g8)G8dbxp^|w0R|~BaVkwgu(dk
zJ1dEhK}p+itei7<=`&{JCHg-fwEwbswo{GUyYH`R?oN#j^Ts6o?9qzJ{d7Zp+F78d
zEIzr<nL25c67#ssbrsSGZA?`=HWh&D#^8&ix^>UK^G};22F!)S8$TmRk^LRQBSb4(
z;ONx97kID|`0#JP`_?}FBsCscefKb$bx(@0DUkH1gmZn)vmHcC1o)wu6dVppHS8R(
z#1<b9`pg*I-l#r%$f8np@ZF96Z`b#JxSW3NNbS{AsEVGrB9>3wC*%GxUpI1+rdz!O
z!AkgIpks-~vhn|*Go%<TY%w4{OkT?(E!8vvd4&u&-b`V{gJSY)o@Q+bd)N09<Nd=T
ztx7)o=8$Wsr>5#|Y;pp5wqUUSG1sEbA7g=jBF96Th7lbHt}KZ)43(@`uP$rwOSE6S
z`sWV**|QKqSR9K;8tHo?|D!Vic%p`#6bz>!>Ix7X=&E<+)`l`oF1Uy_Qr@@~TFFgf
z2b<rmb-A7*Bk-dBUq|5IpUv`~oOB>$&^OfT->zl^MgWw4`QVeH4NfvIQ2{|3#UDw@
zU%6I)wqusL^L(qWvZUDmzSKV$Gvw)T2LQF42MB-2=O3Tm@2!pH0(B?I0>6P`1EGTZ
z1)Cdg))@>!IUR}4e?G<z!$t55$DHB6ZnSw=GZatIh&&sHkY9eaL%5scHh|tIjRm)d
z>wX_9HrA`O|Iw4(whd-$+kw-!Ow#Vt8Xu~SX{7<1*{{l-soeBCT1x{`zl!ea<HC_c
zLI>r^Ix&Ww*}kc@505Wl?bWMz83IF6I?wvxU%1czewTl48fgHy)AC?xVUMogZ-a&r
z!YkfLYcAES2<GherAcaCu^SZ13Ee)BfS=RUdV5O)@?N$M^mTDj-zsN{eAD`lj6YDN
zG3MHn(4lwNl8QPwR#FyTH*MO5GNeIwqk-!%tJ+h<%ISQkl9OQf_afo9WK)VD?T<1d
z{!g22JvnNd@8lclG_7>aWZUG@Y!N!*XY*l7OR;$y&K)n0lfx?wv)_BZo1L72VOjDa
z`}v|$@7dL3S43VzKfX+;E>KUr<C=)~HzL*iL3tVsnmN<HeS5E`8^`Ot9?d=d^H5+J
zlGY)5)2|uo6y3e;gOa~E3{ry-)WzNT`A^CB!5UDY`KE{0=a3LgS9e!HUcEc~z1evm
zHFGZ1D3A*XEbu!+UjYbOsR5Au%|@t@X~#+jvz66`vlNt5A6|X@OC3_fG-xmTW`h3e
z<E**QP~K;;onLyoMTaKPftkPna3$-3^q@u5@qughC`<^~0T1aAa3MNS5FXUX9+%d&
z&6c%xEbX5WKwyV9CJv#fn5EChr?K~8jAgGRj3qBHs90D5=F!OZQ&JJHZU1=vc;y4V
z1y>0FGkMa<82GSsveY~XBA2gLyp%nocX;mXEYJvgHduNpiJUjZY`k}W8BCU(EqQ*;
z9Z-jEQwLDAuOEh<Ock-2A1QnH-%Q-n0@_z-m(?5cf8&QU{7$=Fmw=Kj8~7afuJN~9
zne*($Y@XsakW&}nkzYiK8ROamQBfpf-P1eL4iZ)2(WMa31AOuLOD0lSZqxU6w0a}+
z^l(+M!Em_|Ak}=hzFZ(=^P$UB8*xM%fVW{R;yh5jaY5^iYIZY3WE!5^W#=CL?0ons
zf#)5}8llei<FC2;B#%7p0VZqO^c4(ZI2W|QKBsf8W~vSdfA@eeG0O;&kL!8wzNaz8
ztnqC@CIct4xzS|Sf_zk;zhB>*DsH;5psuM~f}IuymBZkbjGF;mr+dF9K8!5g%m{*e
z@uT-1)B?v*_p}p2gs#gaoS&@Nx2Refj$Qr7;{OL8W4$eBcozJ-MkM_|wk0<V(sTv8
z<V%KPS6t?9P(o1R@Y~yCa*V%MM@;+DujxTg6A*lqtqrA{HcaiKh@(#Z1dik(5XPwt
z{zwh}LNp8&f`NV!b|Q2sX(9FSN{NbRW7X{qO?*Iaef(?xV9_#X$?lFw<l@S6!B8IP
zJ;)-SsKc0RJ|4cbMb7=*v5guNpp0O3f7J$v0_Ig25iv=Br`Z5MiVnP@I`Bkmc@4_3
z@T5Mx13OzDFp8fU*6DT%%Z2HV{bt~wHTE`|R1gt65T(S8I7t<~cMD?%hyT{Y$$ISS
zt{0cX=)``xnh59>GxV+grSCAQZe?s81(RWiE3<?X3!d+DC&P#j564IfBU);kB@foB
zr-qc7eeAR4kPV<)EpTi)N$S@zd}&GUK=MWrnuHr=F;T(wmSBqyp-5o9>+!kr0k!UQ
zrpUsto}W|3rcgub0x@J8(hSVLyEpe+DB1HzD+$yeFFn8=;VPEpz5^8gr;#-PziWw3
z&&_3tn&1^@d4u!<)lUY>4W=gEo(z+!6Xbp`v(J)E2kM$d!WJ3S5Yp4w@!TZp$$T!9
zV1q3E2qc%=#d$f`o&gl+9swsIVd0}Pm-Rr;hb-dC0InFIqlWcn52WE{yojo-W|~|W
z8@>`64j~D5<?nq3tU{;MO#X^(KZAux#}Z~I<ZN3tK8BvU&(iO3ITr%8+>AO`DpBw-
zHg~GM_8eg83tsU#6s45)^*&s?@^)&DK7_r$1)9-^3&B&fPz=zy#)Swe`HR+{&MdpG
zjS|H@+ppTcPk5-jpeFv%?+fpttUGED1Q4B#*GT{ObZ0~#_i`d>Z9wdCjHh~Qc)JN+
z8Q3wVZS%fW&i@Cgx;1TFI}-BIIi)rv)LPmVdl9OmhiCd_KhMGXv9}pelpQEPr)u+?
z@7Zuaik3b7xC*<R=n4o1reN?n+bKvfem->HRY(PN_y`v4rR+&K-cH~tEjM`|s7_Yh
z`$|>32hQ?HDTz>kypQ6sE6R$jy1$(6k2jq)e+TkO)8RbD)H3yCGv1=juRqO0><E{T
zW)4&pVwPhNOi&909Cqo(gw%R7f(z^Wc<GNe%hnh5zBK{Mt~8~u7RT{|C|N!zR46%B
z{A|G!l(Ms%eXe`KS2<(FI=;HL)<C@6jw~38%QkuvWsl)Jn}z&}CzkXpAS-FH@l8>y
zcgH&cQ0(52LX%mBgtMl?q$1MRB6av}6qBi+;o2&UCpZNTfA4HAUgp&5-hj80$s^gr
z(S!Zjjt;S3Akg3*IoTd~SO1FQlDD)cqZ_wDm0uv%v*XSP+D~qeOs$F>za}?Efr{2z
z%Mnm-r3MH#K-GS68*FM61DL#Hr!ej6dxDip`AJFXFeo-@wp({1W|2)%GEv3CKJ@^J
zzrP2UEqUs*>Z@B~GTY=lYm+JkSHI~vTo75-*Hh^~H4Gu=$9@O%df5|zY0aD|K(Dg+
z(DM$cRfJc}m{PQ2+1l-^mJbdNuZkWwk>pG6ubA*c*KmV2M}duXlHTP~vy@ytb?YEr
zLjGTeX{!YKxU17f%QeIvn~y2}Y#8TPYK;FWE1It=PXmR+P=`%*v~V8xxLqIxT_&ZZ
z3&rkzf49pre#e_(=W%ZyG{^Q@FzdX47h+C3#N5vZ+o-Z0M+^r#iEwyZ@hwA$Ogzqe
z&z%*kGNxf`aX8{QJ}reFOP||xDt(R~yMfLJe_}iA_6NZ1wf2*xJE}l%TL8dOKD=_x
zW3XvSIaR0^>I>5gpwwB+St}lW8zNr^p``P7B56(3=X1OJoR6l=-~l&Ga_>97qt%rM
zheDjKoJ@MQ%my&DI;i93gX+75yOiP%Mt6cEKQ<%uh9PWlm%og;^YrlJ4nb1x9qeFE
zjB40Y%elhR#rYSU`_~kxS<_+@<7EAOv+pMHzwn^tf7G2UXm%D!kDiq*E%`*gR*W>A
z8+wBKT`^e<Kk=Gg02!wF|8ez|VO6bL+r&Z^Qj3&sM5IN!TM#4+x<x=*M3C-ol}-^X
zQfY}r2vQO%AYFn=cf&W>y3aZ9_sfgTrsjNNjC<UXQjqAW#^3|8&yE7=V$EYiG?54Q
zGhXA!;t1=dA_zh7IAmf=;$R0(=x-oI+yN4X<!Y8?d#vj#o(!482ItJQ>*x$$5vRl-
z{EAaOejEH(f2~R1M!GV6eZ0T%%=6?Z1n@W=4;7a7e;mP3Sj@5*yL6It_dm)b2{;x0
zt;YW;3lRZmU~p9527S>P72rwRBYJ@Yu;`7OEn5_ycS1T=kTQYqz`SuCfgIn=cS9ba
zNaU3Y^<J90aXI}W31@<1BzcEJ<@XYpd>IqcT)hTF$w!p29BNOm$>lhjTC_#mKG~z{
zE!KXncrPFE+rY|lvgG|Xj8DEVMKVaylr(y7UyP2`z%f`4mY838B`VGcf9`E$t|c#0
z@GdVhJ6Na6(RlNoC3R=WnepsmF{R`$e0fKz%Tm5adfUs3qG3VD+mMWNzTw3AbG$n3
z>@<!13C5vC3AsyKPeUeassUIgFTJH+yz@Ep9>Y^RR^KC!`%o#7liq(S-+(ge)oNps
zOvqatPf2-#qv9&dAZ5I>I@$YJ0jNEltDburvzf$<nq4qq=A;{V=(awibSGYRAE3rL
zSs$^qCvPXCUT(%8Fkgo%fw^mxE6?@^7PksWm6|5-V^63(t@wW_{_O!UNc@MeR>VBS
z$bJMGk^W~N0qbELaps3hrs(aeN4ogDsAOAQk{Cd1bv%3GpBloGs6=_DXe_&Xhk+;N
zZqZo!IFUZVIISH+>@bI4;skPH<(+=2Ao+!#_lX*zn{T09ob(oqvutlMpclgevG`(X
z!~2*!-$m_KW0td=-G#GeH(i42RWmA@c7QTK4qEvomsfoelsvLxGjE9Nd!IDKGh#Ea
zf!*5_qS>;oF5<A{utfkgL#ibYPLO&li>^smtkia@Q$z)rNXoSnDA!_1Nk4Yh;IBxo
zr8h4CDPSpA(5jPs<BIqjVaGAlSh2$htKYStbBx+IqAl)sCG|XIlak=Vi9f^=W0mAw
zV}r{?WFcJkgya&Z^Nsk2hNn(zFJxZRK0+!INZfpu8i?T=zbE^)gyKAmGw~m8QX2gG
z@amK>_`<7)a;7GNyy6=eAKMZ9Qu&{bOCIfofX&yG=`ddVt>8<x?}+33EQm=1W)zPb
zz+E_Y7RLcvo2!kdm9N3#<%UAPKmD2>BmuvZuVx`fl4(Bz(f{NgcCT)*?tpTiN0K7e
z2n@v5rHvD28s6iEm{grAUoj4@2l5m<zA?BXml20pPJZsMy)7I&a?Ziff8e7%&kCNq
zwIvH%Kg6`fjIUk!USXH)A{|Zt2p_Q18S8z}lL~(p`7BY4>2YpKpAo0`(4g$@P)OPR
z3cgFZ@kVvJB@Fjh#>5KAM`~P?`{PXZe!a{FS?c1VuBj!GIJk9E%k!5V#Uxx_!lXi@
z52u1CoH9O$d^zv!fX23L3B_Q?BIf~`W6s^~@qMa<rSC3yV{x;dm4@rICvlPy=ZNUg
zxyh(lJO+F-`yHdw2RuxYG@n0$4}@4D4LN?bbnXlOT`LJ}eXk41;FJf<H!?ib{JQl!
zCUL@<eFzM4f*3FR?m>OZmW)1CY(foi$p10b3dY9L;+|p%@*-RjtKR*2s3j`uEvEQC
zxK*$!7P4pnbV)=-?>yEmh;CwWodVi6Oh-Jk&&qoQm7@A|sP8Ql7VEqxP(t7=e(&(R
z`Ar=t?&y-~<)>hh{vK5Z(6A97_?OrV5p&rEt9%FVkl%f|QeHRWGe$0fug=|%hz)La
zU<DvPXTO3X;0<&$G;T{5nAV_usxqke6v9LImL<2GmEX`+FTJfbuIg-aP@&{fjHOeh
zxTGZuCMo)I%oyzc9AlY;*nAjzDc}L2Ne=?_;J!>fX6V@stu;I($OVyQ3aXy^9j<3e
zEu)*y?<?UY6Uy-y;~Np9)=cX?d(5-%90Jc5H+vF(^yc<pj+_secDP&dakuX)nw$&%
zre9`}Pb0o1c)P?zYNPU6(`=Q)s4{q#Tm#QO*vJop!4d{J#3vf8xZYOtW%J=f2N;$-
zeQHy5sjiQp;d5>wz?x+cYCzU;d-i96@MP>k+3TshI9cbl_F(B{_X@GMUsO`=m0cL^
ztcd5(H2M6!4E&bwT$(zXlFaqvTon#L-Q=|&tIis8AAC#7u6C*O!HMHd!hpOWGh7kf
zR_WkU+}z8pLCgqr7wT;P1vo3pdj0nuPcg84q`@pDy-sge_#){~L*$W+u_E)JcZc^&
z=^$<J9+drB;JK;|$JT8qX4pfTxTOhv9Hyv=*T;c|{RTQjS*#<;7pR}FfS9HbIL<5_
zb|$EyG)d-NehDmsX4OED_qGmp*0M;FLJ3d=)K!J%S%x=24pZak_~vHjb8@^p`91_X
zWm-L^8c4{#ak*$Ae=)6*Lp>!2C|uVf{I9=zwhiUnSzpwBo14$j+_FXxpCZ8$qXrA8
zt)=b(@TT2N!C!{*>(E<WQ;0i?kpG!6yZKg1Fr%X7(Oj|3mx7AGbv{x`)=Iy#p>cRU
z8p(GH?$6tezCI1SQvx%E)r<I%1rP&u<^{Yifpf4w6E$tmBw>b@O?LzdM5_s5wF$|}
z`P_hR=6F=1&Hjc};nOn*)39sJZc-2CkhOz$BU?Y-!d8~p99t@hfqt;xZTu!Ug9Mhi
zW?;`5g9Cm<jed^Rp)b~L=Tc0(k#!k!_@j?TVK<Nuy#eMy&v6SBg&9<9r9USdWy0j&
z+<eJkDx;dnR`#o_>FV8^R2-;jxcIZIf38jC<eGo*+AZ$40I;GiIz5pWw#p1`tjX?=
z-6BKxO9dIO4%H%U4KViZZAVM4mxdFMeZ}Iwp50F@%yRlZbWo=}XhJl7Anfd|GaZqj
zrEqwcwxVTsQ-{cDg)UFtlpnBTW?RW;7HBInJnf5mKv%;N)|j0@S9bOVQ$=Lx<0Fup
zkZZ~~Hyb+L;ALBR$t(~mlIoFH0#kI4JlYlPq2@`y$t#78nQnCPyHjZ}53lL6PKL=#
zLX#@utY)(|b_q`dioe9TQ^}F%#vC3e?Sq7EAC-;Ry;fU^C4V6)0u!Uh;?+y&@-LTZ
zZ$2^OnfTzIUH!3)q|)GrBLh{ZKLFlup~O#2UKczln!E|PoS<%59YIMjh|RgI7x1$v
zQ}W&)&j*ZcTNT@xgf5}*3gYO*3LzTxZG4>s3Hwqg)1<x}Zya>iEkhMt`A^^PObjzT
zbzQJGI<&*CxtJ3#e}kNB$*pnc_~&wQ1IeQ$7?eGvXLJ5dAFy+$7^hAF4D7O(KE5C`
z{6KT)uo^|uvVZ!zN=n2jZuPC#YfUooIB>WYa)>p%>NL@O&lSodRadd@d+CMM7jsS@
z%MS+yx*hdFr=->yy0FEMN<AULt!7k;4o74#&%c`SoPlY|Kb4<6MF2nm;H>f>1o!Tk
z!dlEB{#em;87eU{L<@%_<w+BMzu)O}7WWFeNs+VX&pZLGfK`23P1^l<IP(^93u289
za&2VwsCB~v7V3dEUj3%|5OwF1u?sta(r`N12I*W%s^OLm<$nM>bm<uezO6e>C$SU7
zTl+d8=-UG*uH31SNXI4sKuu3J8)^OHjRy<UqoL%tF5QRmd!xp3Gqz4K3y$2@he2K|
z-Nz%Qv>v!Y&p&>#n2dY2qcxbXnLXhES{<wv35cqDIGTLR!yUPIs|Mpj7A)xm31f%k
z)`nAGp>{GTwXUlZxu;PO=(WipkYPE~-r&6C!%`}XJY8dZ8ln*VPW$Yspo;O(_X(0N
zYh9dD@O3FvM+dQ*RCezY`}E=sp(Q2vKunrAy3;t<N!QYnr1LL)F1v=5e7q6Ot!0T*
zLT1Z@@RrTF^?HDAmR?}wOa670_3@H-+fwqJ6qn*Baaq-p|5PngTv*b#dCdk;HXpd|
z{H|VPm0TTaW+;+Gi(Jhx&_XD+fIpMI2LdzkKR8nw#tQWTwv)&uvMrTKUFYonT^caK
zEg}JK*_HK}90nO*HJ6AyeLJ?lnl@P^;t9rzMD^*EG@BAKSQraPf4O&iz0MG(Zvb?P
zv1tMgk>{~SaHZvA!%b>%^f_+GYbctom*)K}lPKoJ`t{im2M0Ygfm4b8nose=ztq`&
zxyV2j=s?b92Ts<N@((Bv-Hd_mRPn}hn^^x<)3doaD=dSxyjjZoIM`3|_RJ)tFU?zZ
zVP8}FbLV@!ME*QHN2JDQ#~x%dG`adUpfMy!&ha&Dmag3MtV$alc|(Sxm#KCBE>W%k
zIOr3H#uU^()5w(H(4J>U3@cQ^;ORUg$SXg=<-HIi?}8t^kzmJ6p3Rh+hH{oeb2wE)
z`Fp!39rtdc45Y7tW{8)4tj1iBaPt5J=8qXixb@$Kzx%5D{xuiZAf7BL_<1Aqr7K(%
zg}ZD*f7Uru9jb4az{@Idg26;|@3-hQNnj~C;0d}gkH}B9&6f1tzke`L^5=RBW<D!&
ze1i^SKQ~?oE#SNPU#&|s6=rtbc=I9Pmmjud$uxiTGNSm19i8SaOojxu`;^tz@P_e&
zmWG040=EDnKl1=xy^L97y*J<87EY2W0cLbWQj8yyP^t}0-1UFDahQwB2exC8;~zAT
z6$gB3`tKxNnqvwUdY-=f;^4P??~iMHZs@PmV3LqNCd_}x_7~`3(nB!)luKL+BR<Wi
zBhb7B_EBP#!W(QI$KrZ6`Tv~6Oh%;sVdC-xr@ND`A#**S%KWvi&6J^d`EbQ-{w>|k
zEPtQjg9+vxp!K+VnY{|C{VUb|XRflwOXiQp4P-<HW=Z=fH|OB8QF&Sg^Lr=98OLh;
zdAD`fF(S`e{<z8f=_00%^!hGc&;R-yj*+dseqattvp3)_@EdkBuQm9u{8syy%K;Ay
ze10)7<B<W)EvZSC|4l;q7v!(|fbf1}1kp<g&Hq|J{-1{T|NmfZ1r@%xLKjIF@#n4n
z|DXT+dj4!)6zLfmgY>Bt!M_jW-&W+`A0I4-b!xeKc`E-^?VdIb9;ea^!`f#nEAcDJ
zG`}d>o{{5m+A7K;5>PL2@RWWz#w+hDKHd9#%I!Y6)X<|_*DkTJJ35{^y6d;P)SUrf
z!9|c2T^x%!g0Q!TVCaORJsYsR{s%G}ZScWmSKT<5DdRWcK;46+MWFglfW`<kLLaX%
z0K^lv!NWX3isuTQ$7odoCU)j*loHdeahCew*S4#&7=G1ik^U?>$V*s}{v}8z(HDt-
zKlt|_GZg4$&lMSL6Vi*8PO^nWO@h=@3r_T3?|UzXMXmp2Y9<OeJvoen_{=uDQ|fOe
zrhH4{gIVO5N=zuM%SK3qYO7}Hd2(m_&pl49*}0!(Nwg4WpJXH9$HLjP8+jxx^6TL3
zKfl1gKQjlp7lj7@pkLo~>FI4`M<vysUOExZ|Is3VH6``SOHtG$2St-s?25$PC%rnm
zS8_tCe(9Yi<^>VyYFjV>PJ#N*6mS#MgN1CBjVR0GOXq5F9}@p$=#w%V$DU^h@H)3b
zUmccmsCu`t<o6K;rqbWvNtPu171F5Q^I7eqW#uz<CjcngFvqrC_?)@(%fBpJ(3-bW
zP0vcR1#_$uEUQchK;Q}0okjsn&(yvHzw>+7nJgbPHY%(2y765LdBieHzoxEy8u0}l
z0w-7!-pZ9%8mV$(G_H9N0>cj#aIz?X>tjIIl;?d_6t<>iBb=<!RzLzRfA~vB%%paU
z%j+1BKP?~$azZFe;kZd)7h*0|9z;L|;GwGxl9|^q)hLJl>B*0w5)lG*OI+d;d3teg
zregs8(g1F2@=o(p7X~$*?tFj?3>PE8$w3hiZ0nvQ&Yde+M3AD@L32cS_w#DQA%jNh
zMvZa**RPPE$PRE+sDP#t+#ItNi+qx-PbPuv&M<V%;QhUrrDs5FxCzEwNDnWTuZJLv
zwFL&^S!B%pF9k*9DxNUWr+bqHFzWnc2;5K=*$jRA8i)>^)us19E%ES`wUmCNFZSxM
zjKr@suGSKc1q2h8(#H=o3c1>X1kCshI!0^tcZ(~swnzAX0a@&s4@@6vE*n)Nn+9+#
z`R8o;@}hs)fef5zmI1Qy>XK6*tu1yneEdK+Z(436(45klTp|l2-zwqRjo~4w$cne%
z0bYOn=z%y~3SE^~1s*WxB;oUQc+y@(`2yLI#qWk_=sDSFs(z~^?dPw!f3fR3W`_Q=
zBAFx6FsI*d`nH2U2ACkCfMkX7EXc#shT-*&cDQ_T3@7ZKe-|(64N?*swv--FP+!>o
z*&pQ7&q1Q>-4YsO1E?9d{Wad>p!Iz?`y`^zLJJv<8y%ypz^jD=_~2LI$@Hl(5?Y1M
zjOtLj^-+#E4ZMh0qX+v!Hmo4f1KxyQV`*7IRJ%akHciw8%V+;b^4FJ|rm*=aDK6g%
z2XExw=wtS7y%l+}2X|k(PdpBzV3CSDjuA=xq=#;er4~%0Tj;j66b|Yj%9V?v?9oSS
zCHo%O5(i)&1MNt)C1+)#zWrEuPM|#ptZT2F&T(pF9i>XHf?e*-wq=+HQe}v{MYik2
zQ7`DH_K$0>8I_s^@J9lW$}>o(b<|`~?l`W@kMaIwstNllOuiT<Eg7susuTj9k%3XQ
zZj&!vW~JHr*Hpj?+$@Kfb|>NM;lbh$(B?9()zNB!RN2ah`5IaR4TsK)ZeaEz?fj<D
znD^lzZ@r2kSPw(ba)^4UI?kJb0W2q!k=%MVtecAFFW@E`&7GKSKkblQ|BQKMlR?;C
z6rk}~90ngNnXRAe%&YxRZvmY@>_D_5ODeq^f6)lKHJ7NZ`E;j|t|FtF$O(^G!ltD#
zM&BG*@cnir^~#W#k$k10IK9daI|k6BnBCjg+g?%Q4|(!G!nFl3cfb_ZU;T>Jq8kMN
z$-fS(XsZTvU)5!%l|;QSx#aK>M9OUKFWh_$=A7IwI%Uz=hfeLW%TFN}{3=EG(f2%O
zl~A|WK$&i>Mt)7Xs3?xORlP>aT|>exD~{Lb3P4vLbTiuJHvJ}n-+z(Asd;u#$<tyY
zvtux5c8SKWuc70T2{ULn-6;5jchqbS|GNxxkii64eW5FWgcwrPshmaFDmP7OLUslO
zlNnO2Hf$m09eUEfvCqrH{Bh|vu<n)3t~r8l4iBl0s%Mcw#j9%x&$|m59IW+NvAd_B
zY*b4HSKQKkd4@snVh8ITN^U)^s}t_4C#qD74bk+LsRFb35jAFQI9y}J#vcT4R+JzK
z`<UB;7slXKy{Ggg(?(~AZ@bpIF2qKUBd<f_a~<@v7U$dzs9%Dsyak5&`2+n*`_#4j
zeUHj4l&FUcy30+kLtOBCcij0^7=8SpYYs%<k-qacCy%S=#J49M=}N_xeDD5iKx0E@
z|8AjbLDht3l<)DjZhua@pf`9SV}0ZR+Umuov?ev+slS-?m0(kMd=bP6mxPDs+Ef64
zZIM+`I|^B(zgbkDCDfa2iA;*dz_Cl>{31~f0*d5j95Yx9gd{BH%RL8{lm2MhbZMV7
zIt4TYgS&zB=e<wkey!txe==V*Ng#n4aR!8Db{$GoA(gehCD+^6`uABj1@1q%PcMSt
zWis96nKyW?qeS_}Ezy&TtauiT8@g)V^7-x90O{*BNCAq|`pd6H`oDRnvKAr|h*MqW
z-zoxE%#k&NAr3x?x3SyaKQFlM8iGj+U60r$A2W206WC3^AjZ3F_~%~zdzFFTdyW7R
zj~kK_Xe#XnYmMPvOp;%kK59GT(Tu>AR*p~EX96sglzv0w@~Wcc7OO;NoBQqH%sGy2
zC7}8g%>BTVn;PJY+XI2(JD_$ieVZG`Qs;k2wb_xePhVDA?K~Y=PF%$c^Vljwb0!jl
zO|$cd3Jqo$%DX@TWl6%&!V<bw?QDK;&zdOs+u`bvfYMwQxHfFioq#XA#EbMNc`6RB
zXL487L{ol$4s|N0D(SOCYn#2G?><0IFdtKh$A}{5YDz<3;V77?S@vRF*F@wdRAjw;
zSG>^|$6V;w6u26>*7;(8(=b>5aoCK_;n&yx>xb_gi3mMJIgP60^}^8xn9afvL;OSU
zT9SV3@%Ju(ZWF}kyM!GL)30s1O<Fj~{ltul0h&VOb1KAbRA4oW-!52F<{Js+*(Ok7
zQt&EHeH4ji;P(N=e3=24;#9@gT&}a@9>qZ7ACJi=SKa=~pINdvK34UAU%)Q%jAAgu
zeD_m)0+8b_myyFDm$%zux5B$i?9o!nI7_nuc5^h$b0oG%cnr*5Qny_h{OVR2PuMvO
zEL`56rps6^<lQfI`3y6VtVaH$Iq*iV>n|pkp-T%Mi|^nBfww`_U}G6WS*3N$?^i+*
zAwsX|KR@B{GbHx~X2o>8;|>0E@o#rDsE=6MfIr7`3A~?!QwZP|r7WnfAc$q&E7O65
zggNr!JV_EGb)2w_!x###N}FTce2s-le%x6s%H{ocjtx6tKu7&ZPDp1a38FMpK-QuF
zoJE&#tLa6PM?#KVD-A1#)%CDSNj~7y@(M_!T+M-^>-chRl|iU@Xk7Rebpp}ZW9(yx
z6@4x9b}35kf_7NZS-~fZkVRiMLrb-f`LUq;+`|9&^iniH<kXD4x7K{4SH`mZee;RU
zEAYilFdnVDH*`;A%KxQVei$(}7NOynqIOQ57iR8)etJ*lsCaG6GN-t?k+=F30%a_#
zgr7)0J}(Aws<?Iw*?3#v>ilZXa!I#j#6nGP(ewkQXiwUz_Y(fO(oXc|RcDurw0Ah^
z6EoW}dR#B<GoAQzHB-qJk5nbWd{qe0*QX6f4~U=^PcvJ`Fjuf4-N6_uGU!OIx8h->
zX>TY@|1~sP5g_UY*H+RV6;M~mF6aW(nc&}P!}`kW`<B!3w%g>zYiqTwFGM}J_zk&u
z%-`lzu}MdM$oYJ-qP>{1rALB+74We=@_Mi=MmK#5?{u8OESF+9`xm*(|13Fk5;Q&u
za+j`-P4)}7D4aQz;V3%MF^%aT=NkfluvY%-1rWd}Q;FvwU;5ZV?QgYB%H;3m^7WPW
zo)5n`ZhH(TrW<Qhxm%<(7-(MZ3kHr^{BaE-feqq2jtnNE%?2Q3u^sfI`@n6e|8Ztr
zZ*neT*iP$8na;{sjglcPW@b#AP!@&Xp1Gi%)8T^2rxD&*A8LtCbEBy!s!m{rykJIM
zu^^xlhoJH5u#R+*5;o>@t-vjE4QKVIA_&(uv*1su&GPkW!WiN(lJz+~_UykXvfLy@
zk#Y=!Mq$+re7}9ji>!JHxp#80(}SNVnB#?<^{Q69h=#|SOc2p?;M}iDhdl?a$13S=
z^KW0IZLTVK87JxC>akkBeg_rFg7L_XS>K_b(i;OFQg4T@WVg-j5&x)s2mo)ra|MUf
z@5Fl}AcTM$2URyZRKL_U?DM?}r3e@OGr;q>7z^Ej4<{O`bdUPUTa54Uf=t`qSg~Ay
zo+jLX(V<+~f%oz?csppJugrfAgnpDiga^;Uuv}n8$wOOvgBa6n4-~QMQEP&c^b!{j
z3u5>RRwDELMDN@FZ8;LX1Xj9GdJuhiL2%V1*JFJqawByn4+-w?hBE}+*^T}n%v6N-
zBac}j^xO<1?7;XC#9P~?Va?#z^^mys+S*4rfbj&H5HhN9m|;_NA#Cj6Hq98RbZD1*
z`oZ}_|F0;%2BvDgQ~^uRQcCn>8SsB($LN^nu>*&9mPa+SZbp%FHoMRjm*J>5QTN8l
zI3`U3Is1Y0kCNBMA9k9(af4_!cZVwCN~mD=njV7Gz&V8m2T$3uE&AD1KhRd((f2_M
z^i*<x6yYwBa$&F#`jW(Xt+jnTgan9*?hQ%ivCqo^milw9;|WMvhy$lE)gPc@b&Cv?
zfC>B*-3|5qwAp8_tSVA*nQ)a-=zJJVFGQTWK$<GvbB9G9k5v+_cRk5`*~r`cRq$JM
z30Ck4uDgwU*9b#td<__QNlas4UXTZOXhelPfZ$e_8dj`Kp<-<aL0N<2{ZST4x-uw_
z0Q*jIYXF=ZDLuA5+soiK6k4ESg80g#gD~`B)$^abkcK_zFH2&7S={K)I|@LCVw}yd
zrWo$7sF2v7=X+RvdN?^*$m0=Kaoy5IwnA|x2_ukZvFi|@KIc*KpGFpyi$Wh`?~+v4
zH2L7{UKq1>Zq(L6<Qz{F8S4HXDq+M;?m3HL%7r!{d%}BDBg{GuItpzld-Of{BZL-d
zzW^_&r;(5zLvhXWD~{kq^+3QPIEPWbH(Qj3Iat)?+i%zc0>LSx{kVQsYjTpzw0#1o
z3M7|-#2Eq>GU~O|K*0L&+V*4gHvzgFF+LE&KZ9|yB0gpJd%+RGyPwd$>(&5JCR>et
zdpi^_z<MW0rq`;$LaWkVpJDQD<?p?KGTs|t3{?<}M;6&dW4Ue4pC<X3v?ud0zqJ#1
zfFg36-T={D9R0Bh^m`awBylrQUq@!exCLK4hIh2|1I8`r^SpkfMhbGSe%rsD^fCH-
zvKVP_%}U+Du%%EK`d>|W^HvTgC(MJlS10NfwQd4C5ms(`@A5&dV}lVb*n`Xo@my?X
zMUn!&oO@j(l!%^XcHNEd@QR1&4o@&Xc(Oiq7dCnVR2s9U_J@=@gv{1*NfnxYJFhCT
z7`U)xrznKmiHmu3g5@{bVn*%fldj%s_x{njt+j~VO~>zM<`|CVEvcuJxV7*+=AUhR
zhK1Zgpi9F^f7~{|7hK@=qOUGFZ9iCvv4C%CXR2xPh-F{g@?~h=xeLd)&yWmR5~Mz2
zit*@krWdz!IQ_lVNOKn%!YFC^N9=)<2G{T+rUFTLJ*G;=pWKt~l<OL|sr``F1k9*l
zTf8D0t|lSUG0Em3uWN}VmVQu@b`v%WbIEx?%8z{iOl5&#-09vdvCHC|B!?ZfX{^sj
zjN^JBPzDTI9PZE~rrR2PWXQ(wm@!--^{#a}mG3zHigO1xIIXzMq_Ble!p?|{V%hsn
z%!NgaZwEMex7M!>;5$a!dN(2z?lHlo#W&Oj5kBlIIK}T@X=BSQ9@ZxJRM#CJymJb`
zFD69ZJYshD`kF1wqVxSzt1e-Ym+cfiW5Od@HhL}uf$-aqp9$ocnU#N<Uv!i_244n%
zPLKBcj-I!XPaKADu~okXlk<f0l+A}0zxMulT;WqlS${&gou2e6B@$Vlan`-SQ1sfg
zCOxlZ9ZBb7R`+H+>t!#e<-N4k#o=**0Uz@>&55jRpL7YlmwU5^i3itTsy*xUr1>cd
z2VTH{yaeWX)m(Nx^l%XC*A1()L%~ce>7oWrmDWLR^0@HS)9Eg0EMB>$w&cpp(7cxk
zbeL{Y<N?C|E^?Sn&6|7INo=;nZ~fiu$(WdibvUHVRW*F|1e@o3#F*OTff9VH6qUwg
zH~P0gd4ymxL;K+FGP3_Y#{c<8o(#&I;ET1neU;A=Hh;gZL`&xO#R$Lt7uxbrM0?6?
z=<z37vwXT3DAKrNP<Smi_=f4<8=9NspKm!9_Vf%LJ7SHO@_K|<N1L<~*(`HeTpoTz
zI1>5F@I`p3+6_yD0<K)>)TY6IYEH1X`AgDbUqwoK?-3vF6Vji)oA4SU{rgKNP-Bky
zIWtC*w0!uG{wey&XJZm1F%s=Vh-Jt14}O8_M`^7*L>LNuBabn|FKGE^aZkaYxT?~?
z!yQ<~d9z)lu>9$tS1tRA#s83aMd82bA^i7X$}_-^=dMDT@i$6BCFhENueoegpI3q=
ze?O4guI^PhY1wlAecUKzCa4@AFrJ^jS0VPl4|56m%DIUsgy9UA{13A74k?So7SZ|7
z&y>|;&2c1Xp>bK({I~WF_l7TI#wxD4AEk^|`ts*yUQ1-o*?pdDFXtxy-|zMZ^Zfh0
zvypX>Px7<h@{;cnq8wNtGGWCZ{}&ki2ebSSO!&VaO##lit@QBz@_Xp=%Pre)yfLb|
z3|R{_mvvr*3mL}!-|r$%5^zWyk+i}(;+y!hl~M8Z=t5*>{R@ruXyvEBG@e^fNBmyk
zh-6%3&wO>``oDkF|NJ<7tlWDw80MITq-!oprMG0My$PoEc&G?y{ttvI`;(>AUPiE0
zhWWrAzdyI@vL5pC2<j7t%oI{G;O&1PUX(V;Fc56P=CJqW^eJ$N%AFYPI2C1^=`O&n
zdX}FGc+{R`5E$@<fh)m{QwZOpmJZs%IuDswPoY;k#PZx}><ag$-<L5gT7Soky5AfE
zeNMPiGw|}TYos1fUe=Sl-G#$N<5~FcHaM&Me=_mA2=<p&C~9Vf-Z)ICxIKku6j1Wt
z->V-b3h&|DEA1!J`@#7?)FE#mhfQ@N2RuVQz@)51hAZaIx;_<iOmI-i>G7)HEpSMJ
zd{M?C{r90~;BRuCe9c*Fg(Rf}S3j@^%LPJyP2uKqvdp0+r8tfkhq&1S)}M_`(%~zF
zLAX3%C+3IGv_rSk3T5SS(eFxctzuSdI#8ggF?#p)J20l@o~`cOc}l#M*fq>1PxFP(
z#xonA9@Twm!bvPM@i%1qKW71XK%bJ?H$KJpkAfW;6YAZj(z&Iz$GsEi@iH6#ZXiW@
zrke%PSAil0pk}FN%gRs*AJ9HxNZCBbUv5n2_i4%;E5ZOQ2Z&1ACr2wzgJ6{-_^rq=
z4!q5-aq6%oPXnG91q=vP=;sOezVy3P%bJ0Nc5B40q~;Tz2`Tp-fCZI7K=uzP?-3(a
zLa$wthf1vzCY>fh3QY%6P_y3k?_#|+=-f|*kE7ds&dyls&Yvso?~+4`Ax`dntjm4V
zOY*?q)5f+{{P~8y(77Po@T-4UCsQ=a1HAg`58mW$Mgpxt3mENm%4?lmB>-8w(GN&w
zLJJ(Q7Gd)cD8<wdV(GpgGk|cY@dgZt9~$=R7LE&}R0ZW}svvDC%!|z&C%}&Pxrxd&
zgBiV93e%K_HQo<iKnqy|aaiqT-9;PxPK%9)QJo5X^Z&cC!kv+KY1QsZ->f?4w1>YF
zT*SqOkcg!z(9CFR;b60CQ6der`g6*iZF}<=3<Rz-{d-^zK@B1Sk1rI=(Jrl%6dTpB
zjO_g{CQsaJ(3|yh+N|?w?`yEGAYzA*xu&{o->nHR98NIW+?o!PT6TP<)wcz52<3yV
zFD|!A&6ok(5;=2CMVnO)0Byr+3>p)2yGWL^^m8nQL9)lcPoeY<ybgtZegrUhI`-iT
z#unO#Er@^P)2AmK#Gn|E?*ui1?r)>oR?OrSf4OgOz9GvlpC|W7rv6B6#Y?pS_LTYD
zrH*|$%;O&xsJdpLC=aCgUB7vQ5*!w!jO#sbj|iDMHwLYPBrohtlo1%CEd4RO+H05h
z?+}2^ZtJ`CP4y?`_TPsB_rZsE$yO9CHfRCPltjM<$qFX{pjuwkY4FB@$jhLLaJmws
znna;PS|kJfzu;dtFYy$Q$kFEKrv%os;9Iq1-ul8XyOSmEHW21X`L*#B!;9uKL{f1&
zmTD2}0f{`il%wz=s48rU7r{(VTwdz^AV}|WfU~UTQixYv1~Z?o8j57~)QK}GY?PsZ
z-KY)z;e8k^1iFF-m3{P^TR9l5pT&1UU_&G*O4<%zG#c(24@x`JWo)}SUhk#AbV3Gy
zf16dNbxEgH<cqiy_K^4gUMwv5Sgz@0(@$iC`WrUMxkr2l8h<-Pk}TiVOxBoiE!=f9
zFg&mmp!?E8-F6_xwOzETT>eAhx#lE?r$okM^-G&K`r5CSNo&8<xmUU3cl>eG=XzS+
zzen3%7)Hw1vvCl}4_x|Y@W^=#uEq-VC7<<T>irqr<k{WP-ycFa;DsG#zwQaq-^V~y
z+HuvyJsTA;Qx!3P#oqMlN@9EsqAZ9alNf<?8-Bahu^PKbJZvAZcx_Hu9xS5$aIsVK
z%;yxinIm2H<Fy*z^B@9>*=#U7=X;w5%mYC(^vR@cA8mLFP;_pbG)<@a=zxyfaB18e
z-LNRxfn8rt02?ubWJ=jAE=z$*+{v?b7?taN4rl^8A`DH}b<TK8SN%?~NNBkAO8vE}
zbW5_zt$P`M_XjaXW|1Li05UEZ|KMklD=$IW?0pT0hx3o`aJ((W_Bh%4!tne1rotl$
zX|<GT=yA-IH~k7YlN*75_#FJdk%AJMSz~9TfeBo)eEZZZ`FQdvP7V6YTJAqOZ$I3e
z*N~7VO6}DI%Bl*ONj(dZ$Fbd*Q+*efcGXtx&b)N60gSfL>*Az>3VsN|Utiuma4|iY
ziQ-$*I7cCJ6%5R=%?}!PCq4}LZvE^}O`VJ^8*^|v1sM@hGhN0hoIF?ESCZ>QXxFm}
zyLiXkb)bP*c4N8(UVQ~qGWWk;0!<w^U}T*Q!~h{E4+}CaF)!sq_SDVKMb+M0{U}@P
z#SftW>S({vhS3db8#@?x#Tc<(b8m=kIPnxSl~~q)75@xIb7~-t$b<fBAV)4pYm5uW
z+NWN)7>68_1JT^dLwfM=QP|x!%v|gZlv7i+8rb*z?+8@(uJY7^tKu%hIVR`beXo<Y
zJWN{<XP90xM%Ps3kzuZ$PDH9nQ>}URl0NH@N4&)~y`+0Sw&r&FPukdJ{%PFwA6UWU
zPxg=NI_z1h@0}<9TF)J4E7(t=!rqLcPiyoDvsoBP`Fjt&P{HW#19bm95zcvX6yXt^
zSMTrn_^DzCQKkJhb8g%un%oLf1xSzV-Vz*I!v-wR$|0|gXMUI5s;SB5B)V)DLk=B?
zBkb^~+9Hth6hd=SIVW{HfsPk)Hc}ztmAYfp{*=cssXaU0lJP}()wK82^;1xc<oKOD
zX7hn=HVB>aNC|~z@&k;3Zmu>|YCiDoJ5(tc6=fv?p!tqDCsoRe$T0Fq9nR6pmp+FM
z{!VKAF-=pGl@46&kQ3ecl+W}=Y2ZhN_E<)Ut8igNnSFqMTBkrOSDxh++)sGfxRjCC
zm`|`QJx9u4KQO3TIi$P5%8XB?Tvq9O^B1v4F{B!XU@U7;hyi#~H%di=iuZ=u8p{&q
z#T-yAkOT`S^O+{PBBfwTck$S4S@tKR`kq|SIs8p&fD{rL$j7wSdu2|^mAxQ0>;?T&
zcAAh~8AhIrA-?^ytGcG)nd_rYVM}FHs3(|rs8Dyzh(sB$+A!hMrG4MUX^X^wEHu-E
z?T=YMzrKF5gclURWpw87xjkXsmFvjeI&9AP85+i6&l$r*swL{AAh4~(iTvd}+ooZX
z{VYjmg}5v`@Ezc=U+I+4Qds5|H5iy!NZxoR3dl(dI7+*Uq(FV8e*B-h`A<cyI4ew2
zk)iT6NQxq*_ZO|=UW)5crLh^;BG<iBk2?=sZ7#a%Jb$sCg4q~y$-&}ecmkWgvs&DC
zkGEgbI$V0zlWKK+QBgrpV1<D3rPqXV`6WfEt}=}0to;vsUlyfG<m8L>M7)_R)t4w-
zl>b^n+W)o$G1r(KXJgLwd{wjr7a#dtMmIU26k{RpK8erx=R4A@Tu(G+-PajCQ9R~d
zo6o83fBj_j<$f-Adyl%}InOc=5jwhd@dGI{qdchs^@Ld!E@4E&LS3<y`kP%-zqOr-
zv?Qon0>XnaxO>KYSOz2?7Lw3nR<mCT_HTs)H6M6CDQs%s-v*dd^!T(<#Y>z83|=eL
z&tW8G-<`8r2#H~4ymkIND|)9_eTcB6>RcdP;BC?mp1)XcRP%rv(P1BnIM{x9D*G%b
z0pnab33m=Pf0$)!xa|dQCc@%pFg&wzcfgK$gk%7el$DaMFAaBA3}%#D;EJCYS*Qyd
z{?<3xyw6W|8&C0`G=SKJT=1Sc=j_Vj@$RDNUFI7IBcbD+^dblTMq+yLyY7pwaPs}C
zlEW76eW-vIkqbmL>s3)wOFW9UnPFZ2+0V*d_xKZUs)1hA+T-gkUfW%Kg+3b@fr06-
z4PO%3y_4i<<#}b=D4i+!IPmbKoelRO#H@{Gj@pYTg=$FIseU`D8ykzGI$VCrX?6n-
z6Fr{5WyD`V$&<F3aw9VS)7OyrUh#8J9FIY-_yG|W`ZgbM|99+tlz5j{YzYPrM2R{N
z#H(@_BK`T0l71AM`LFz}n7H{7xtQE!vM4s$^D*Am*KuCF#tD+s@cVDE#&m_1-~EE%
z(0*pAym0TOLYZ#$gCB~FS8htZz#BZ@Xv$oRF1FEpXO^=hp(yC+xynw4&pyBOkb8HE
zM0=G2({?;1JAR*si1(O>B;~*-rO9u<IEG|bT=1A#Hl@b_?U^U|f$`u6i{SC&;?fs3
zw^KqeCf}<{R(+3KJpR}ySVh*PbhATUF>2?Xv$+h(90^L;>?qrw?Q%lG&%FC|cT=UX
zqW5BLOs?~~`-jjPQ8p9l8OmY|_)u$e&KpMGlT$cORYaj=e>$&F_WR!+!(I5{F?vxH
zFC~HDPY>;n{#vBC=kdIz$6;kf@>##65>qu&F^V!}d6sUNTD>oxrCK-eUX@_J>XT4o
z9G-{a$ry5B&n((wKdw_{jXVL|y(NoRIns_pkBv<;%jjwwh%W7iE>~Uf^@T%|S<LiH
zBUhDLiGdKSx?I;P5YqH%Pu{g=l(KbAhu~vI+v|y<>2*L6%!c6(nCx(m4qr*qMZmEi
z*-$peK~r`fo1rO|c}z8hpQMRG2QW9b&sf|_YR_hH`9vNr4Qn?Wc(Tk|bk!IE(LnFJ
zs5CxftP25hkl+0LdB<1Dm$WU)uA<9w&t_4QaZrPVe+yNuI;kCT{UmZobmsz8vB@bo
zkQkgKedXR9?zM}WWzu8QSOi+D5cIlq5XI=2I`yWLmYMfFcdYN8c@*+KQ?P1=Xj#>L
zqJ24i)39?}iX>|!0lGfi3+`pmNM6hIJw8B?QlSGevCiFW8>xPeZc2OE{=ZGU;zdMV
z-IMd=4NvjT-!l{RZ)(_lS|n_ND?2<DbL@}tIl_ds_QYDYB<L+F#;Q$98kJ<$O|kFZ
zCQQ`U9+@aZ$2#KE)>bZ3QJKjkpWU@H%FSpNfbk|J(}sepF89bOIig|48%ak%f6p9=
zpvC3exX#2;X?pGIJ*obD2}NgZ1XtKoJpFLAeBvQ-&9a?v)wN&WuP_rfzHhQX3{ncZ
zuSH!HiI))~DWpt%hcRbKc`aug&uCtASIy<#CAjkI$dUe>5CwADK<<jyr7ByxCWrUD
zMS)%hb;*Bia$u%ws=Z&%P%To{L!RkO=ra-SRDA=HtWuh>7FNax0}{}Y3fb8+o;8UP
zhnbM&dktmta(?+G^Y_O3el2nTQUq@ZH0oqO-&=fq;8g+|sX0+h*N>UK0LA}0+Q;wC
zD4EJ3bmFrY^PjJOhPpltOX^XTj@c6Qme&J)^XO*Sn20c)-Bp}bLn^iu^|0ez#j2YE
zCGwtf@)YD|(QL%KL;PmhMk!?g*JYG5;pHZ`p`-oH??M9@l{0%WmbMvIyNXZp#WcN!
z=y}g!`z=J9^{K?tSzWm0`m;Oriv{7pb0z%70*a^G+i$UX3Xzg3OkacXQA|`^2wg1f
zx%4adgrePo#D+}&PYq9trJ0)RU~!r1M}2=c9ixRH7KLcx!X;w)%+svlScMr0j>g^k
zrt=|>bx4~!nK&9>HZ?QR+AVpp*zB7&_7WT+F!N*AKP)?SZ}on5$mtQ8{ho3(yEqak
z#X99$MxfYH?W0h2Y8@-OH;(;0g_|6sK0S0+n4I9%P(`_=);+T1<~wPx9uPg>FQUp`
z5msg#$gB3i3LWJ@N==dC&3+$inHR=$z47eR#c+RqEJU}tRqhL9-4fD%q&!B5LuH^Z
z*Ydm5uF;OFLk+)_y6^f7#nMKSMmUR@oc~lT(_JmhAc==prC3<wCEOid9>-u*gu;wV
zW)MB0{%JF8>i#)LTQpn9;4bilC>#zo()Bu5L*?K38D2PYM&FHcGP{oV+9{d>Gb6Wy
zD8_SBE*gh_Mh=KImR*6*Na?6}3#Wd=c&}G6-3K5HhOodriaS?Ue5M|>ql}oE*!xB*
zCd>L}>Z&QPJTCSH@hE#!;q;9TwQv&i8BC@-I8^J4gFa3?ECQTNr91A7qE|PL=D@dL
zYc|f1{++P>@Tb72TNd=w@zd=cxeASCEDyEu$_eV^8c%)oe6hJNV6Ec0S7TsT8(fjg
z&S&N`O`#pLkW0a+(r|u)bEWuQ-7WV|JMKR8mlq>grdY9fO^Un=spUVS;+m>89<T=^
za~;d6|Ib1|U>U}aT3j|ORmtYckTT<W{HW$W$D-KPQ@QZQ(&MMgqHGP<Wvb3qcM)vs
z^+z~LmsS`g6<w(7SG}Xhog~0?1Ivh*x!Tp<5qCDEbV|TW>St-ZB~x^TPh_+?bDQpj
z!A0?h5kI4rW4E=2DCGDts#K$PNuQ;oS7Ig0iLXbg#6?8<%?$4xWrv?k)m01Vqe*yj
zlG(V~VAf-D4*>>Q-3`^m@8$J$X@m>;K3HD6HtF3mFQLX9=wD{fj}?lty+x~yXvV}U
zz3QL62MC*LpE>f(l!to-qTYTj4Iu%C`y>}l8`bMo9kCBgrPf_<u;Cf6BuhNbBSXY1
zF9ky}6S?YLMUTszr;$ELdW~u&7OHd=(9#zG-T6vTBj)mm6&c;p_7FDF(pUtz+pr&>
zf^GFx$1#sGUi7eJKUA8wK<_Ht_YG}0xKGXe2nUPI&{9FR&!378Top(PWD40NwIP8B
z&jlZv13oM~gjlGVIocnSlo8vFnXSnnjz%aA%6`6MKH~$5NzDUo7~9m<-ro4y*rC7(
z6YzQTCp$KV_TjSZYy7`~R+hpdcMuYfVOItO=fHg2U~CX~x!Q1fZrMN`FWn*WU@lxw
zOLR6+6dy@m5ANB&CmS0Te4IF(4bNc`a;r|=z@q|gl=1vRQL$@7<Km)`DYX5jD34<7
z`Ro0CoR-{F@-N*SzR_dx_XI{z1ad<cHpury(cR&k2)$f1FrAw2#qk^`{yzA^7s$v=
z1)jdP-`ywdyuEK6O=1RtRwldbTs}9$Ri>iTwHAiCC6zCRUVY)!4}T>hwgP2jxSEL1
zrqAOCJmpD*p9LJdk@ipFrOEb~*;D07G^aJ+zBDKTnlTe>wi-JQwt=AcM9lqu*UHzg
zz-kK!s?0^!ArVtExQ<uft#cfXR+7B1tdhL*E-U@YD>5BKk8dk41{fB*Dd_IQVQ=zW
zH8#@u;^;|~9^Oq_lI@c2i#xdAtGH!cDtXm{4^X`5W-I}6nnsnY-bF<;7R=s$!}Ba1
z6Y)_&^$X!|=1ZRig&<}GWVP1!;{xzoa7dAu`Q|t}Jju&r-ji1BOI2hjr62px2?}}n
z3)p2w2XNQ-!q)e0NcP$pc2nYFm2ph?j+Z}gj6`=updkzRwc4`>-E5JpWQDiip0^v2
z7MXNO+lZm9(tH1iQ0BVHkA;uwq@`cTfp0@2s5pr7op$<gBlFGCNkS+XiG5xXII);q
z^3Ih4XP=krkJ)`G)jN924Q*B@u*U`kcT}?CF5fZ}WaoG=Bpms@tvspyVF<M~^^foT
zwgVzR>vuO)xl$&Jjb-p}UeYbLmmJ#2-MA5a8i(U$kF8RAc=X!g&aInOBLiE8Bp%;U
z{{M_i@mXuY#AU<J-@g^G<4qb?G<6hoZ3AaX2dYmBHYNbbCcq<*f|$33=R2G6ON=or
z%Cf+|4X%+eZ${j^`@Xjg#ZpadQ2P+CO2&WT_D!R{+(ux&qp*a7__N{U6WDBIY{xXy
zAT0nJmn&`8>ozpNWbDTHhg~!LayfGFQj2iqcVV$J6eYo84$_9GV$GKs=$B@Nz3IE`
zZp$MYGp7FSf$n?6GDq<cL+Mn4Vcr5`5*wiAjI9txENg*HoHU~)A6W*r9)(#qpeW?J
z*TX3=Pb>gv3jD&2uT)zq)ImbhjMl-tgB$MS?_21YfXbW6iwh+QJ`cPfa{EjdOjGDm
z;@J7$HwHDEfU$R~o^}pzFf}}d*&XGB(WiQOd$kR|BE=Nsn95TWJJ}tf;|XDabZR&?
zW?sF;@z1>U7q*{$ABODQp{~i}XQyb(Ln&f@0?5YxOuT8h<OaxHug(&?@8r*A!r(qk
z^(}CQ(tznf4miRbeEkhG<b9lJDc@<c8~()Qc0-QBdED*19|m=x<9`KqJKoq~5%bFZ
zp=(usjI{(`SUhY}B=-deZA5wHvHZl(LUL`A?|#mR(9m?3Kv4hgo5seod3d;^;g`1c
z!G7RH2V39a#*fOdi+0$s?|!83SlA`DtfvW0>U5_FSosW<oMuH*Sn>|yKc6aW!Kb<6
zbG-fFu~~`Xt`D`mR&o0Up-0OiOC)=frzi8r8@GzZ_U=|l+k}0!kzX{qPjBk6$~vm`
zeBE0$sp~$y+th4~%JBVZyL4F=XUD0h-mLcOTWB#%PG_mBvBs1_X;%25_76~R&0J`S
z7<!Ha+Sd0_bo+jETHjMQ3M~9)LL%N>d@pcH!e~Ax4&in7?6d6_P4a}4&z+@%sSkTc
zsrH?v%HLt*8s5uo`)%rAMWRj(w*{^JAc`?*c4|Q1UM{6%Y}V6GbZU!H5&P{h0tZRz
zU?Xc~_+5otRL?yHTj{;?iyz6A8_$NhWZM%f_wbFAP*&4rTP5U7qIw;H3B6e|S18ol
zF<*0`*zZX%PP{)t5eDq=Jm<uWyH#*K%v4WeiE%3a1xKW8u&mjq`2M3pqdUPE5SDY7
zr_=r@+JrqG3x7gWdjIZuyWM#+he50@$g+5U@t5Zgt4Tuk;zT}QLkeH_F&56oy9Zxf
z2DipqX^N$Oj#S9}-0Za$bS;RpnKEhceg@kT-TmC8@P}vCq~;xg*~n98QP0jmoURlx
zohTS)&-rJ5sLX8N8g){!+5Ww%q^DDEBln2MMZJ(eO~i?57a|WE%mY;JCu0$W5gm&*
z`H31aGWSUqzLeG2dxnF#T2#JT$FtKsojdq7UV><KSKQQ^hH`VwjobV-QLiCM<`fMc
z!8`)bgn01Q8Y2Qnm4B8bepvVX>yv)QJprw1ujB2ho{!_h0_~tCin<-}!P>5s+#f$*
zF@o+Cf4stWz<e7M2L^_D>1^=GF36%?=02_Z_7JZW=Y)gxj?)JRT6($7ljW)>A)OM~
zC#wPYGu+iJJ?8JEv&@Q`WP;?2IX?D)bWz~mI{m>pUQh>+HU-Cx*YJea<oeA%?{JVK
zrj|1{CDv%Tr7t&Kq<jkl*5dEO#s`W@H`<r|Wx*6Sb=^A>l=Wx>CH+?KLWQu{=C3lI
zTczzX8eyUG(=WjLtg!!K1f!&0NS_J~P~>e$_AVQ(eYMv**!?;Y^@&#6n+n{A1@)xQ
z!DZSqg2;Bp$O|x+4gt&jS|2?+q5Eu&;XBC!K=@#9Z1wGwrmQNh4AscIAWcBbaKzr-
zzVxOgUJqAyIrQELM3yQE_8~8rgf22)T_32V2q=|h@+7CEGTNRX>&z)Ef!XFGp4Mnz
zO~fLGZgD8@gp0cS?Y45SDJ&A{QUiahfCxtO4Q53Qg~@7~z;FJ!24A`pz$~cK-?dd@
zFF1r?R)plEc|m4GkUuG73E?H{SY>aOtLwO<)WJ+ovKU#d##iYq18|76vuE9(mf1^2
zT{2OB-gsIOGg=;mF(4#eRikpS$oS;<@dXc<0+A46^7o@mG1HF0o{4n+G?AT4kspK5
zkIT5xSAjeSYzmpXpFLNav`i-DPJI&pyS0-`BVW|}nu4e^kS_W^`z#iTgfP4Q{;Cg-
zjzLIvNFn81Wet@JmK|`aOGpuS4~=K$udzFv?-{*P0L)X*Pl(+12A@WL*S^6vXwme#
z%Gm@jPbMMsG`llDh$@EQS7zzi>{FhKeB-x<rcjX=F;#n!?b4k>J-G+@WID%|M0=*^
zd77|B+Ud;mry{_La-MV4fg$Cz7<sx~N^oX;VfTAz$ICZ7BmsC2x*8HM^vC(d?gpdr
z$TQV3exYnWPawFjt*t8;BdpOll*G((a>lM(^kdtE5$kre3D}r}WH%$#k!W|i?$_WN
z!mWOE#`MmvbJD+VQy@8q9YsKWrOc@s<EGeN>h*MCDMNB@(pL~;nsLR-GYob2m2AN7
zUYsNaZklZe-}$O#tr<=G?vyh7+gjnLx1PB6<$69`8GG#I3wUKdQOa<~lb0_btF7<k
z_z*^DM@OXZM<+C6>1tBUy|uUrw2E!N+#?-^6T|MxMe;LwJDrSYD;@SlM2+p&S9sUk
zZj%1)O<4~)daYIv#<y^yP3|Vp4tH-9=k(e%V^@uBTk_-Pp*hl>-V~YB4}r_!Bzfv?
z`$`xbQvv%{-6{IrV{02$NYc&EnIAT;>r$pJgfZ?sq*Y(t?0xwzyR~lPO2`4wsxCB<
zl**1m`AhM|=}YBX$QC&qc$pn*Sro!r{Eoe6wC?n1Qxl~893VqYINofKJ97!O>HT()
zH~p%6+~s9NqNt07aDpZeBddRNOR{Q9OA524c+}%$&YQ6zHZL`j%wmr3k9&REs&uOR
zF)A^Iz2Jrx67t%iqZ}rnRNwf)g{JYrq~kZbxw2DRVT`;5w&u+vWVWqXzaW?`Q3{Ip
z!OAWsX=aVbd-JVs2kY&uY<N^t;_6A<Ax2Nu79-rSo^k6Nc&o9T5EgHPn;C8`gSO)t
z2Wz(EO}TcxCn4UakcX%fLoIhWNh~Ut&U+!)TTI$a6n)`ydUoq+MVQAh3J#D(5)|Ke
z&BuI;(990;3fCIcmFEsFWos312KxVD805(6mCipFS5Cjv6!`KT>T>nFVp)15*U1k7
zgI}7I43b3E6o&6VF*adc4i%ap3i?K-#1xM7k2tqHyz%4uyUICQ7V=jH6<8l4MHyaw
z1Qxbx0|_!mcBU26paO;~5{-uHmQlg|OEPKsKI)oTr<|a=dJ<3E?9||0Ge>m?0ouTO
zle1s;GcB$(y3;+}ms~A&i0%+ScQx&jwm%jbf<;*l=dn{mYOv6)Rnl?|g*0LMikg}r
z_Mpv$FiYm~^vak2%<fi^koXnO)AcS=tID*op+Wa+A_*3z@g%ZLo$n*lw+GYtddia=
zm_>K_rJLBm5jXXk2eWpC+U=$#FQ9DIYxCEd2O<TfP$^0LZ-d@ufWcL#f@n(KD_nPl
zc)B<$0i8gCCTmj&V*$}zffh`1Q_T0@r!Y*`xTdGpgt3ciz#urKEX~-v_&KA^rBq+=
z8Ao^bCmdPaH0j=(s>Ny83MD+eCT%wM@~&SHq{^TQuBx{Iapq(6;KQpRHX@RDzvfNQ
z%x4Dm-V0-QQ|Gw5%Z!*|Q`w~tesl)QUgv^zk25|*-SFO(-j=YEen!8eroe=YOHPm2
zEd>K%($!Wla~r1}k~t#vXV3ih=;Y!+Qrz8?bgqlf5eZ~kvQy7BYh;0F_a=;!$!sq7
z@wd<sd@D9q>DJ=VNMrhC=GY!}A)5!|AeAM+_wB9Mt&4l~B~B_MwQf<@?I@i#0TIXl
zkQ&(GCG*`7brn<{VK*{L>*Z<;{0I<UxLBc6q*Ty|>XLoA#=lK_)#j2H@pA3&(b0zW
zq*X~1*c=rCV0!q7BR&Y*w1Pqo8({^4ACgVwvkh|aGTWD>$MOb@NOGa~6(E!0sS+?e
zdf+&^!;0^8IeZGM`)mNH`nZsJ=GNJy2=QQT8c%RoQ-+?a_}jrQ<0X&YjC~w{&~Ed~
zD;XIAO%7$Av+cPz9oEBg6?zT2Q$KITN#8@BA=}pGjx$vQvkPD726VQ$1Nqm#m#JV>
zX8Yay%t3Zw1lb~jc*@t~`HqO?`mjaroXuQNQ~@;ImMt7FUi<pShLwI3Y>|0!7+tvB
zG)}g5M+d>ef)yU;Z!M_cq3rt6JM7|Wy_awZ&dr?@pHZ<a7jP?X>V3we$IO<$XR-<&
z$95Q_YVy?>$!dTNSQL$?Y)tsmAuoe*`$sjFkKdIB#O{36@1Utz-=k))|0O@6I#!Vh
zT*AjDl^5oNASGtqOX0j~V8Ltcce2gdbcdMIEx8Uf1GiYn3=O`yjo){n+&S^=aLX$A
zLpUEnqQm@N-k|?pWXw>Ofm}W*KQ2|09TKr$kL|91?aZ85<O{j&KXMt8@XRbg3Vu77
z01lh=MROV~T$^e@edy&-CzF6>TppPO7g5S{qA5?!3<6OXFz?`*`3}Cd_NonCRcaMS
z2T9uOu4K;*9fVv+Y4GuSUm=UBdd}4kAS%*m@F-O#WyNUR^M{yV9)rWTcZ%X40WRJx
zAGdhbyqT?}8OIjAVf972muLO|k#*KlRjzB-r&)A&qlAD+cbAALD3T&6AkrY+NQ0EL
zq@tkG-O`;ZDGdVBAzk0adC&Wv`1U`Jv4?vrYdz0>Uoq!zvd=9-<VG;~5b5idrA-X|
zhPQ1pjH<UL%AN*tfaGM3;%m7?NIJ8AGQUM3+O3&J@2|(V6pos}5=qHN{K6m9mRj83
zp4lENqZtr-L;`eKmi;CfmmwvCJ}t09F?k&nwBWwoxX=j~qea;VH=7xT0~L{i?6E0}
z;W8eD62d<40zE(-fU!J7^JRof^_R-8M*_rq(U;Ct#*<bV0#6`P_kq2TdH#Sm0gceq
zVk1_VH)La)R0gJSn_i<^&hTuTP@++-vD7D|9%_5ir4;x0kH~?QQCGx>MCcmee`IQV
zC|j?N;s!Xuw?W#R8!bVA6)pLwiZOax=1@V{iDI7Kk?#mYKNB;*L#9yKNNhA!fw8!e
z?+7zS#-2Eq2z>%00T~^Puk`w;AQ6=#VnT@JkE^{Cdgk@^y`9dVEIfovlYpOkOZu$Z
z4+FPz?^otuaXFQ0iRT^M#8?%ZI8j2KdHfc!8P!W3uQDU0`B%j;6A}^mkpYSR*Tio{
z4syQwp25vuZQil_`f)6tZ>cVP?@0uKK)EcSMUjYnX(0U>7im+mTH?m-nxpO6tFP>9
zlt&7?3+-h7El0C<%dSC4mK<Ef1DW62!buax*Z2$ASzv^9MOzzu@Vc%tdn!;0hK((Q
zoRvBRh|4riZ5K;a+vG~y>2}@~zHp@W=_y(<+y$)s57%N!5a>oDD5dVZ(Y}kib&Oa&
z#bA)PX%+^v-5kxsI}dL09D_2PMfIw}>Klp8IpmV=_qLdutNLs{zCS&^bU%T^a*#vg
zQ#mbz*xz?Ae#!6C7e+-fxC*38IV=P=42W+(uf!qW2;;_g{Eh84+?2UES+P~ago#g^
z15iz#vWnb>kMK@}EytCF7F)Q9G#$^ABOZGp$YlVqV$RfEx4?(7VibQWH0Y{O>?ek(
zM=NkLedf0tfNXc*KMpxcq-3YRlMI(Awo)QL*EsAtogZUGx1gg5D;aHo?7xiQmth{L
zZ(0bWXp(L`@?h#K11SToksamJv?nD;Z(cU`(d-h;DM9v1kzy0FF*brb1Gh%+Du$R_
zX1|5-5H}D9+GFD*rax0vRo;uYXDKjh7L%=Ueai^?bf!0*jj)*R1!4bIedIH&)<5Y<
zg=LB=YY!%G--)XdlXjS;36;>~OT~p0fmgbe&`7Y3_E>ZDIb>>`%h69~Z2v)OQTX|K
zBxu;Etykg_wYWpeG0g($@OZnKQrvm1ukW>&wauePfp14epZ>y%?mQCqQaBREb*9ui
z-;=-PbHapg>G2++fQGiVe51C<x4X<mA#hl!j~8ZNXlV(s><vc>;9Wey@=xE5OqBAb
z)>1YKOCgyT1v$s5Np`VGJGGX1C|h&p#HCC=o>4lFNt@fF4FBK$?uk78kT~Lok4G~q
zbk8~{EjY8rwTyU>Z4Wnae`8{{WMvU45qE1+iD7e6(9~+`0j;_ReO<WfplMIfV0k4g
zAq7g|+h78Q&cV~7owDPn=V|)0*%vWl6At0ee%*GOp1iq5%xmyJ58pqfbYLw9W$ODv
zeV$IdO}7^Wi~Jscb$sj@So{8NOxR3Hj4sa`&XVa;y$!CxE^w(1L~f3sJnraphegbB
zwiFwF5blqew7Rp3Mn6i7y1LS#7);%>paT?yZL}8)kH)UU)}WZV;ff`l^l4RP*sh)_
zx=8e(7=uQUjQ@GQe}Z%jgYHVL2sqe<I`#9q3tx~&9AHeXsivQbTJ?`PX-+Y1E=Gsk
z*Z1?ez_2$A+jMX2gUMZO{+~)keHHM`y%Ajf5fNP10PUKI<#(tj+NhsL-HBoy%rxX&
z#t^phUTG{4dFMEK{RD0JYK)B(Rq<v=)$w8MC-c&c7?!y9jT;eNE5b_f!zu1$R8v@u
z4;{vN0fQ~7?6GQ()|V%-VDjfixues5EJtW9BeGJj?SSuUS*?Xz^A2_IX{B|us-Fa!
z6-G7U9gi_{o%_o{pJZvlk=D&3aLXnW@_Rc3j0AvxS+j}IHt8YeGP1vIK1B?d)NrWt
z8gn<Qs*go888H|6lj1qyS9(loOi2D<6R8+SsZ5Q;UD-m6qQAyGTCjNYP1l{hQocm5
z;>!-dv97y8Q<;3aSd^^Ej(*}T4GfoQsxbqC9-e1)m8N4+1iDnrU!LMvso9v;KX`{B
zvHvicC;c`%|9u8GDTq7#qNCLGUQh{lmXvz~_3vU9uJj~5{aRy7<NnsZz}<h-_WJKc
z`JJ(~?MOM&WzHh>>)jrqR57a)1Y!q&&$)Lygq6_|ma)3x7oj=x>r3~vsvKkybJ(+M
zS(&~wY~KhUKJQOeq+B&}sVr_2m6<|*Q63_o8^i!aXYw)e8%kc*76vzl1d<De$`2Eo
zxPs5fc??5v-8pRh!)h%C4LnIe@`ZgU!8-$NU7R0d)gjkXzjB<}L-_ZJmwHvU{gWnt
zmMA05`z9!G(5fq&shJv4lZRmKK(2ka5kXN*;AaY5ahq9GN_Ca{4JqVh9-niOFakdh
zSRM(ENM8Evb?Zc*WGDQwnRV+WC~!z|8J0E(fV;`c5a$>x*o-jWN+wkCF_^JImE$?O
z6fwvhf_-0tc&V8WYfRcC!^rTp&qc+@bG>i*V{w9X$aIegE}mL$&ty(C$Z(%knD;w5
zN6zgW6C{H%mxq#YimK#BFuo#Jj9cNCzzBhA*?{(dvV;I4cE&*jZA-hKGhw(N1Hup4
zK#FttapN1i70O+<ON5@inRKn!t%#1LyOFBrp|9uqLrVyyNAHV1NPluuvFWXPGZnE#
zb3k`zSs?#>jVTZg&b=Bk7e&x@ZtL{6M{Qo1IF1OBGMEqOGjb<EP1w(!$Q{1^DU!-&
z@W&?tc10bs8>$}47jpJ7(iJPCaPd$v^#9X5a;;g}dE<vo(Q<SexVlPsOi8^8`xByl
z6CI*75r;G?&(=1AItPn5VLJnd&wGDz7j+`oNr2`y`&(o#z^pBF{{8S&m7TP?Pp*Zz
z8~3nnAsEX4q6S+48KUNm`}>-xxv~z-`d+0A)xi5qZAN}ssGD+G$XCZON@i}umf@)Z
zVWx_o#aBZ&!`c%+Q!+*)f%2W~KX}5AhvtOPgzq$`vn8KX+Wo5BoJi1ct@Svdj;^B9
z{PM(~QJ-C}Jhb}J%ZXC5MPVf_KEDHK=|w4b9)**v2=b@Nd<(UM7;tX<+6$?=-amIi
z<Fq_T=3qvWSNsm`#r7b$+bZp5jmPwkgzON>b8%RvV5m;4o;&&bW7pOLq1<ub2=s%B
zS$tl{#eR`IB74`pa>yZJvs+O&IeTcG-?|9IozSArll-ZCnC_S4(1z~MgV0h0V_G>u
zZ<}sY1<VnND>+VLQTd8u9X}BkvQ&$}SfL7yR`}0ym14y5#=`<}!~G8;4;5HkK39hK
zZkcGK@~aX>e=}l?=YFPjI2=j!LxIr&(6bXiKuWo*bEIf->E!Vaw;4f_zbKm;)@<}(
z%v6z)nF&eBt<I!UO@X>9N)ujfW+9Z~@W8qE_uhJJZ1I|fKExO$d{$dNzcOt22OM@P
zeGrh-Tk=k0yCpn^x(kyf^pkCccYQ@z>3?Xn6cnIFAtchiO=)_$RVUczb?yhO#+zHJ
zS$|NkPK^kuwRr(d@toBgb#$D8gZm{Ugf~qNZSXgTL6$A%nUYQ4a*wYDsE$^9@2pHx
z4LL3M5wlu+)v`fQk3y}L#MsPqOQ*^H^l1Ao5ax3h+V7WEv~O=XvfO!!(nry(1j1j1
zUo`$NdD(oi{B5#tUyf)S4uAh>7{-|mQlQ~4n#j#ouf^4LSh;j~)J9Qlt%eNY3mbpd
zhepLsc{1x$rx!>I>=L&vCn35)2miY;1-N0q_r%2?kQLI0rgcxsOW`u;z+K~&lK0<5
zsymwDTvG4+Rp0sMED#ozw;hBTjX+*0$o~;Fc^dzXq;xY5D~gMF-KB%3P|lC~O&Yrs
zCP{kj&HmH_^fP?hLAf&S4UY|f9b%ArjoXGnF@=wZL*oUj2s1kj|F_19KR<MaFf;m9
z$O278LB<HX!tzIO(5ti0))S5!m8(uJX6<WL<S&0!;&pP@^j?t}?&w9uh%g~IY*A#M
zhSy588Kg>jenNbQVGOewA^*bHqQuE7Pkk+1wlLlwNjoCM2u6XXvb&)I8vlE`+shzr
zGksKXu#Zz`)?udLc)}R3cQnI=hH-psk}}s{+w5tlC-=X<`T8WFc-_R=H{`Ube$^hy
z_S3V$VNr;`JudjAG=PE$5~Q+D&X&4K<n&*|5=JmaTEmw$$mLqJPL8vsnm$Y*Fq956
zGG5wqYms;4vlK@Xg!D~8QJiwp_91^qpW0z9PHCpZD9dLV@hlX)0`}=)CUt9W*6^su
zsA=^RIYM)Jkl+$_Y;8@8KZrXIZj+ej!-#Zt-HKvtYwo1JYBDCYeOPP<a0gbarI(V^
zPxfz3{HQ0|pyrMv%%9YDa?%Mlk`5rcc;9v1wlhpFViaZ+imF|-3X-oactFfcG>vd!
zr=ZNxE5w@sl_tWLzA;E`&U+AODXGJHzUzKZMRew1bI&AN8>L1S`v-EP-@u&4*+f~c
zV|3F29rc*?i|P9X_6=O#Ix9K<(g2b9C;c{{Am1-uAg7Pot^b(wKWc2qc&K*zLs{F<
zm^>=KZg9F5krH)y`kn}hAF-u5g+<OIWk@-kxBal#PiTlhzcdhI5o?pik(`T>ZjsLc
zS5?&4he@G3@iv>)(?Oyt8CXzTP^gNtD3>^iGx4fbe|2Efk@1BB{_ttBpGOnD)m*Q~
z`+Dgm%b9VSaZ~n1P9|=p7u#fZrn}c?mZz0;^~nr;6q}14J2!P?o>d#|Rbn)QevrV3
z@(~&i<sB|!qZ)hDm-o`d2m{1k>({6{vgfh=yUghyJ}AQHXaFQufoTk$<3*?rFW-PD
zbK#E&TK;(Vc~<><L~gNAV$LhRXOKOEQpCTFCp4?|$bCF?VyN8GG>q&~#Y@3c5D|=P
z{xpg*9O_&VD$fEDa6K(T#%*WtPXYce8KVx5e}-X{?i$xW`lf%DuGbG{u_Ds$MchsI
z*QiCAN8=7aeVZ7ux*u)EtYWUd5?LL-qe4iH#_3vptFj{n_l*y;+`G98Bej+<()AkB
zQ9+R1LRRZ}WZ=f|C2E^RNye1BzAb`APXp|qx6gd+X!QC+-nkHQxkCcm9+vRy@BZ-f
zHsQ!3jpFR~5||;&%UA~`|B2Yw3H~zDf}=~c`Q+c;8F0(-G4Yso{55iC4Gq;19RxTX
ze!P^o2Lw@eGfAaGjzP*bYU!E)LV7DM#O-X-Xq9mYg5@BslA1-CkXIi+1Rr~HEka2q
z2<MImdb#iaXiWSO{(fcaHxRTtpy&AS&jSgK@M!Se*Ac((jdTg@$n6<B_hTIfwzO^t
z6x)w!yD9s|?)L-teEtJSf0V&r{5?X!@XY5Hk>6k)bZsH2H4FE#QXi@i?V$QY07sYL
zAsEF^9&sKkUY+lf)HdV<wPITS$7OKsn{rc_gB$jmm(-IkP5^B46lx)B1^WWikB|yT
zD6jyEJUOss<nAAtH2yCO0OHEOgLBCAwj8viqy>jC%6|-oiac;=K%lpoX9{EsJ_a29
z>QJ`)lR6hVkF(9CSD-uX2E05*9r@NjNLCeF{OT~hUj-T8VeK-K>E`#3oM!#0Z@^&m
z5HiwvboU~pu5%VTuZd%qu$5BI^bw1~Cg)NBDZnRWRE+PiAf{VmdWgy+Q%Bhf!m}3(
zZDD*5LjoSM&07vs+07=NY|VblOyqvX(Rn|~$BbbYX5e`S4X33-?coV?e8}#fVsf32
z0W)Rh{YVJ@6kz#aeKsE*sU7WF9WAKapt{v&s6$iE3ydt?5Fr~BiDzy!G^03HIsk)G
zNf*OQxMS!K3LD#0my?JKQQIkzp3HAZ+ZCjxg>Wl6vq$h6-zft382GBW&c4A00*$NS
zFSxURfO`Mq8!)JJ?fPCxR+3}AvOb)J8p3SQ#BdNcV<~?%ziNs8yk@NFKV@~ewh6&z
z^A&`$*3jEOyEa{$vTX<}ZrHg0T6}RGetYQAIB*6)907>Zu5p1a=D^qsUzp!BnAuI&
z<#H!(_^tV?A@Y6)sPQz^2hC{{2>$}wypkA+{EFtYhSR6OH6xmRGV3}}nz=a0AnTw3
zxx;EsQhr9p^DT-$VO+4Q?RI|bfR&fV{)l<yJ@+6WZrT0-)6^m53b-r7!FV)(S_wRd
zz7}~T5iBsFphUy+uFiT;l!(9sf*XpQ_*fpK#$VvGV#U+PVFC5<V{Z~F{p0jsN{sVh
zgZLpjF@L@@-^%yU?l&#RiMu19j@|81DuGcvhnWzG#{V5QJ3Xx%Y?+bS;PwzH7Xu@o
zk1}Tm0hv49_k+NVv3syCn@HnFo|jz#mpHMP7!+10u?Lg)(?p1vn#Aa5;3q63{Kxq5
zKP;L!XpE{&bw-034A<BaOGp`h@>PotqBN#SA;bgpH>CU@*Lh73Bz+n$mC*>m>YN1~
z$S};DJ}OEijpggUO^FhP+woDH5GXrd4rL*4PSwZ{Fi4&z?L?t5q0hKqqavl&o2%O?
zuOn(+0(q-mV<1&9;+o$Q*|*d^TNzCqY4jIa_zvLS=8vW`;sGuK0V;v<HO}jaea%l~
zeBoV)KiUV0(=g~cWUfs*V8m9YVaJsId$2A%SEG~*w<n=M9|XZGfkENmg)Y&|a-^vD
z-(hu>A5!LhI*z#cGS}03Kqxp!gfG`8I=kB(h4P?pKT$??e~Ot8gdSl_5KZ*i(_2TE
zSdJcaliW2IpZNu;B~K?iC`K{1=b^G&<gGN8eW=yFZ)SZx6d#n%Q~@$VHW03NytKMA
zrb<lfp1wJUoz^hCz$qoODexRB5eC5b5weq^Q=ljKhsG4;+j^5fYG0Gx&E1<#OLn9A
zq6N?DlzNP$k?O!4ROXi>3ck6x#M@`7AnoBg$!ILTk~)1sxsSqEqHg7<FV7zRYR-lw
za`E)QPlu|S9?)-X2h#7MH@ZI!t>s?D_n4K^5MowU_7U%i#TPhZ)l7yf0BX70=;OLe
zZ`pia@C1!%2tKXn=dhmU@BdT8JV%3aP5UV8`dj05LVe{M$Q`7`z%}gM(d?YDo7q_g
z+&hY#dpiuj%ZeKH%!_(`SqDwpJvOQC2X9(l((m-IPXG++qJVs>hvK&0xo(Dp`{tr!
z2R4;m<H=|l=pL(p$v*e4qfB^4`83kbC9YkMDPY?o^MM05$4X)GSDljYWsbi&s=1;S
zMmyZdg>BC*XuG;?sH{35BgzaHs6Caeb&}?9$Zkb@8($O)`Tr7YG~dB{a@Yfiq-R<w
z!gh`FnWL8u63@HTlMeF3fI4tQHM>-BkI5r)o#%d{_27&L=Sdkn$vt9eQr^qDFzCAp
z5mN*x2d+@7b#KpHw92^4-rEWOP$l&G>Fi|V*Y&p4?cQCO{XU<DQSgm+@R4bYTF9n1
z)b3Y|ebHREfcM_F0|mpAN)jQC_Rka;eUfb1Z09=_Q3qy!TE*D@<@n4;)N>ux7AJ?0
zRqfbEt`y99!N<=%_!BVQ6;*IbPFTQt$;SnJocCHiEud7)EKw|O=!13iM|wB()vKSM
ze+;s!CLeFWYW0wB*88X-UexD2CkJ>q1_QeTFX;GZdVwjvw*jBm;a^zxNq&9&agzV1
ztgeRZ>X7jvU*D=vBBShrg_|$mW&-=8HC@09{yx9FkpB1$ZiC7FM}?3WGdSZ}6eEeZ
z{Tr@PPnW%=Tb|S%aU#1kgFq&-Qsehdp4}0#h{ThCzpLIv=Nm!fhYY?F-!p<8ugOP^
zX!b2Nch-yHjBfrrUP5wM**8fm<<*uEeAq-{Yz2PBQPu~kuLduV7lS4H$4VN`Y@010
z(4us#)gX<3rPl&#ud>{1wRMY;FLoKm1bRQ9fjP-H>m5B5h{W2C8Rf;J6*<=37<b5c
z_U$qx{%P5=cnUub$HoDeLvDDYo`=B8J^7=+JLRHNwu5f(!D%Fwp-4{I`|KT5RT^l*
z;(S~;#x3t0T^!Ned=tbOXFj=C**UCL`-*B~^H|94mmca}{!g&Rk?hU9f)F1#Y&ZU}
zUYT9u5nLS^3kDC>CV6Ok9zIaY{>Y3#fhNryFK~iMY!XllLy)1PfWxRjgTL4zWUH?x
zt|MmKMWzLj9AvjKH9Afx%%8{5(pc6wHSW8s7hkJG?$_K29Sw2vWO6pBeRT_RU5Z=b
z+!}4Ry@Yg!Qte~eX0xZz@0A|aSf}*IlgL)|>s+VVmm27>n&7YKytQZxHU4`rX4owz
zV;T}v4&g4s0?unI{=uj==QtDtB{eJK|NryM5O4Z|*uU>iRC<x5zA2ZHX+*4d7e0UO
z_##=UPfNb(rt*K3elphu6uj1tq03cx$FTJ@OA>G0R)?$&c!gYraDDaLT04dbqrO;Q
zeC^kq1yq%1KC>R{w}+KN4y7}`K@<~PWzH<4JH;KbS{*pc<8$8KsV2Xst5^l*^4%ll
z)Z%jaRTlV+fvh5TKFjOG@z6;}mz3+cP)BQ=<QXm4+B%rX^yZ2?c>b;zh2%l>?!vvM
z9Ahq6Obh37`?l_<6`)GBWRL;YJG+{XZ#`tTFJ+dfG0?&P_n?^0ucMV}8GjV~86GdX
zr;vGN3HZ3a+*CzjyBX4L+#OcrBJ{01Fw&VYp&lti6y`?=%+fkshVz8(3!s3yj8(@O
z`q~n_qXO&~6JRVl<B4n=H0O_$NZY6mmxTAN<x<>y3Hwbdus3Jvd@MHVz1dw<CAp=3
zd=ggWUdG4p)cq#w+zUjaDgw742Z4s}ul@S*y>$guG@WoYFx?yd$W7nCxYh8QK|Hxa
z(DHly#mL7TuoCa$iOvyhg5T}=*bT`OrW-e|kQ-$4b?-FJ`=Rs=D@9T=`4#7+c0}QA
z_<DhK;`=OklTQY}VDOvHCK?{&2>h&e&=Bf;dFuei7q`q~x?Wq-?Lne)ztnMfM5ePw
zuI=>cxdo*?iOebFCFk5pRtVUUft#Bo1uRrGp)6gtL5y&ym}yieJ|3jgf{WC_$W6t#
zcdX-$bnz`CFCU$5i+j%At9at0l=Ch#W*SYZ3!FpcC~sv)O9_*Bl;tm>plcIm9A!6b
zMA^``FStd&>N=RwU~QYMJJo~M<CQ_ksb%eOfp(;}{Q4aO!gCS)S-Yru*e*}srs-8$
zD~{g?hQzu-^Rfzbr@v6y8afCc^b3D&_hs%eCTOM|OIc_usY#Q|?2c<-nXqqv-mwG5
zQ_s!WNmi>T5fe9_=ES%U?NqYyfJ(cT=qXz<=jXK2qg_V)meghjraaTmfzq+L=u(h$
z#bHQijxQFnt7Uj?{BnwW-h79-P`3Jj7Y&(i^q0E5y#meUXs0~+p%xVIC&-*78#nS(
zn6$_8>ekzqe^q=vwrQ6z{@$00|LGQQmF;+O35Xogpj1niB)}xR>6hPvzG6ji2Mf-C
zY*^&nn<ze2`EG*FVq2*yB?6o2|Ll2MI8mV3B-7@1vv_TI42Y;wPs(3qN5B&Q?fo1W
zDGRQ24mdlq^{6q%s#j;*zI%l!fKlYi@496h1+IlaR|IE!DABYBhc}p?I+*&Wu>zU2
zTEsy^i@be*RKjUPpUq`MM<UlR8HZ4yY2*$6N9EWS(e8N(iNOgm^=cywP#gR*#`8Q_
zWBFr_SF+q#`1%QMOH$cWBg4*7NYPlH5HO*TZ9Sor__~8z->@jlt_5AE!LOfO5**#T
z^h#X@uV$hP4>3QPA0ie4AOs{;gSMLk*Qw7z!f9qZswQJ_Zmoy<FYR{ai@}~7GB}0H
zMjhLQnA*<jqd!sA*vwS4#}wxTT)kh^G8-v2bu^cJ3f$wR{FMdyhk=f2llA;4L#N=z
z&%Q}u>Knde;d)quA$l3f^f7SIiRa5B+pEjWkJhly*5NlMIg4FqlNy3tFwV$%61J#E
zV5inmsaK**8Onol{hd=){_q9ESyJ6V<3_DALrj#<Zo8^U5?{IJ(ZgZpYNr(;92ETf
zM!66ovMYbz#YFp-ej_W(f(|;U(n%QH5qz(upC0RmxOg9JNv?ukXknk8u2p)bHRP(8
z@qONL_}51t5|43cB|UPKKR%)-);&&e`UF};9+D|?t0pon_GoD@9?|JxIKz@H(>nZb
ztrh08Z2&F)hJR|RkPUMq+TG%-d&jr)Az^~Y(m$8!MRZ@9XhcejXdWy^N_`%Pst-dU
zhoURYn1S++r&R5mtGndcJ65mDpzS6|d=DQ~c`+}qk>z{kAJE&EVyG-$A?h~<qGugK
z0ohS+pmj0ZTaFha8%rUw&@)4THLzD>s4<ju`9Sx)l&WB3P|&I|;T@Y7xyK~Q#)9IZ
z)FJri7`h~y>^tQF0(Rf*+uaEAH?Qx$S;@Nh+l^q1{9EQmW60|}n<Ua7bxZ3_=>je&
zt$^f&DtfhEgc<Ng@-4ymM(l<DOfefe#a-X^8%V(6XlS=HYYspUo6g<!5Hw{-IMek@
z$k2cGp|Fs|<r~W#+GD#vGY#)vD9f&P6=sWcjnM8&W6hJE%RwfME}GhLbO~`Ge~f1J
zoYy9t*4mfRMvBCVq?~nEXF^<^x!(T{48HDiF#Lh0yvKj6?|x)N!9{H6_lzmbOeCMO
zX^OVpfmFYpPN2_3CvGrPI+JWh%3QIHZ!Ze#lQndFw8<Ynsjc6EqAQ>ymGo2RbxfE+
zdytGbb$gi%)gTFTPa4r%6u{EpYfY&fdi_O~E+$4scc#PLr`hh-l9Rx+TUs9n<jAv`
z5Ab5$a=-;u3H$b2fJ;)WqpkQ5T2qF9g3ZwTgY|C|Qds#fVIg#*gdwfhQw)<k_^#z`
z*Ud@I_0O}N1IXFUAF$P6YOYsFe!@ExlXg26g=`2-u?Y{wm_uJCD-llVUUkA8OysBW
zE%?X?0wa&Et&*Uch>SP(^KiVXZ_fz*5wfL)Bj(1rrM!mM&%D?;i-0|uh<6t~IIU!=
zFO^e_8<2uaYEG(CHNo4Ma_j8#^Z9I$V|ft^e8Rz;NA_pBXeFT8G`DIE@#QidZ}jGz
zWw-IqAbdgTiD*u48V3S)G|wz#*Y_SUM2ONRkGc^CoUtL80X4y7BV_qK`N8kPAAwkJ
z^|2|Q6ApgUHxA<B5ih`1v!bJ2Y{p`ZZ;WBvnA7_MQ{V6!j^sV?q9@FW5pq|*hb=>y
zX2+{;IT<Fjf=O6%Lf=1OKpW}&VnjZ#+^AWC2r<r|j&HPvy^g|J@boC1=R52|l)!3N
z^)6A)3W?wgBZB5(rj$IeW@JY(Ep@E&4X3Ido)^hf`$=j5wD|d%B2V<e&u<kaknUKT
zWhR6<X3*5q*An;JMvXD%2W%9~dQ%jcyJT4q5g@pK0HZF_Y}`UDSkKLtV9LUHg?t|6
zyF`keiZMfDK!mCK+Sq4}5JAP#E?QoNWOd*De&K7p0}(f4{|U9?4%f;R>0HR*K>DwC
z35o+kG`fI>e^?&kTA8uV>VTTkmB=_yorsrW)rX*p*;<=K9UYz1{M2~)-(7nw9di9(
z>oo36E0`5}MpvAZiQWaxwyG#IjzQyD>}cfTK4>}8W8O^Ax5Eu?AeTqutta3c>juB}
z8wU<FGp?AjPt`Z|8lkrD-(LLMrWmdH&Z8?Pd%=ShZ2F1cnS7JQUAa&9dfiRhZ3Qak
zg%IJ!%Tt;~^UecvRZU{EgrvB!E<1C`mDGdJ;}lOwxP$kWE9TdKiPbY76pS)o^CAV@
znz|tBidNp8G?5dwrm;@0hK<laq(OzTC+@0u(q!`p4757#0%baRbqiE7#Q^n|e$N%=
zszrFnG{eipvmcU0EADeH=zh1N@^|>|*8Ms+-}c6qgCF(o{GMbx+V#&k4_l1w{VqU0
zeEW2(&e<B-WbtgS*06%3$w`(HSH8|Ij1ZwQkCNO%$l*8KDf@Z}Rz5AAwxu(abDRV%
z=sZ2m%IypS`rS<&NRg&DCW6*Ud=ZW0c=H{YoLD^6c))xyuQNin+`&Qk2NQu8y>Vy9
z-X7q5#({F4UhuBuOU@?Qsr*t9r|xqjT$3lE<<<qAmN_Tt)p3mN+5JMwv{4}g?*q+f
zRZlBjwN9hG76Mj8B2D##UIAI!x>%v1Pqz!V;pfL>Q6u(Y(C*)qLs=2ZUs?T?9&=MM
zJf8NckzlhL!y&3|+VJ~{Vuc2H2E)(382X$j(&HKxAT`S=$L3x>V1OPnp&|sMQIm1e
zMoq@gF9iB&6fXj;JR_%upxPNPr_{^WXEge>uOBlcBJs2antg{aXz8?BB7f{e{NY&M
zS9g<XS$kRYz&AW~Xw8lo1Z&D6zhkqZ0Zo=a5ge6O>he?29;2t9$wxtiD1n#wU-Rp0
z6;Nm!qDik72wmqsTKD7kn<N6;1v4`Dm%49v!Q|s<e!_el>=BPnMAMhNjbPfjVP-^O
zRnKOTRA19}N{ee=Pq6W;DpRmO<Rs7<=&rh=)}j?a#p*zsLE&o6PLCQV$bLXOo?P)u
zct_m$fx8;|Yl=ccB5f22WLHvy72I#<Mo99pJP%TTws88bU{-Ipi<2K)?N|?$S=gma
zUUN4M4M&kZAt5^%?WoT!cQBdvL%wwRS*~gd^S0@b8)!G8s&!fncCU3(H|$JNubvZn
ziun=Gg9`ym<?Y;dlTDSl_K!KD=66UlC)tcR1V~VtS{QVieG9@NG?!@_g{%m`!|>o>
zJPu13m?*Q5e9&*2p?gDT8;sp)N3$M8g(<G4(Fv{WBqhwSH0!=1pwmUteL6}N5DYx_
zz+puByCgh+ZFwiT;wL-|2$IMOl*^r+3CN^dx<T+e-hdWG3nP6$lYWY#d1C{n0WBML
z!|&Z=FtA+}v;v&{M<j5C$vK<lT9S8D{_2!i<GL=Qegm=ILMM^x{is)WglhuOXWuS-
z!VUP7N{~-sbbw^(sg8i49m6T2K5lurx0AK>tG(_I($1<9UA0H&cpaD6SJwOon7T9g
zEh<|vH)lX>>b<*?6hhI)+SE^sLeH5^kMgQL`l?nZjM1eTHkY~)XeZ-Im%}1~Dn;Ki
zWCFGA-<fq886Bef6nLVXG!YYU21kk(f42HAe>$f7mZ@6g^eM!9g<0$A#RsW9RVYSF
zQW{wDdLy>7I5qdY9eTHO$7z;_Y03iGLs6Rcgp#$3^0?)xMr0-jIBRQ@trdwtInr(&
z68Lx1Dpb{sk8i{<D>|CjK7704S<M4Hqe%A9+q$J~1A!1=K-oznWKFt`7XKRK7~Ii8
z^9ZE6SAUrG)`ae_<ezhoCslM{A}Y6LB=L4ATS3gHXnZ|$KIgvRj<zV{$$R718jttJ
zuzKp`blt3lD<t6*4sX$cMN0a+KGECba5VO(3X){YC2(lI*jpMzD+TyV>HRFN77h9Q
zX6Sq!^ZOL=XRy6=G2Phw#MhvF**9P}kNz5ZK`d-5;gbC;V)jpM7)thtO3RO0cN&@*
z91woqqGyBuv<)Q)Wuw+gjQ=#GnoO#h;}X!bb0Tl8#syz-SLRf?E97YveCZT)7JRt#
zj+`s`&I~4ad6;ZuW1V69@ObLirOOEGRAh6lF9=^YO0r9;(J^K@B#4%S)*E5)VluMd
zO7O1T#yR(4rA}O*Kek%yNQnXxnq0qQbF~adiyWGKu@2AAB0~ljI}%29KTXuVg5M8x
zFYt8H(o&K$^g=k(K>=F)d0ZrMx$^D%or%@(p~75gL*+3}?aG=z{$cc9ABC+~FV)Bi
zXu!HgZq8!MnAPCvOaAF*PA_A!V?fw7uPH*I8XZTfk5ZkXac`dHJCEXgBL?v+&V3zf
z$Nk@tBQW@O*7%;728B>_uVF93Zrpw2XJ;Rv=i88j*h;NZAEDh7>@&GwnR+#s=?G0h
zyCd3xF9=-Z`9TCuQSfSNs`&-CZfW_8T=+=_4F;&RJ%f`_4NvcqK=jLE$jr?7&~e6#
z1?$;HO?@->UnE^2mdnkrzYW!GPX;PWU)8HAnN{HL@~IY0fMqwH56t#NNAe>66@Cc;
z5g)!CWS{tpFv9#g-WX<#9b&Z6oudbVM%ZYZ$$$UYMEasRDN*SZXH5giEz~TK2(5){
zLZvu4RoXX0Ff6S|vdvzGQ0zyDys_k?|LP7&k&TC1<dC)x)KddA>-l9rV=~lpzE10v
z+3iFic5tJNs@%R+c32|uA1wF#9XpIl&DmmbyUd>+%`}`5(=^p*en_jU-Cy>$v<V(9
zd}b;gBA5L262Mu#TEsS+zwMDCym)E~&@d|ZB??aF9R?^F@)3!5uJlY!s8~dHq%jES
zxfot-FFqqlL>gGKp;M>ddL#bo#hn($od+_Zzx<CZ+oT0H^`1S?j&!!Mx9v(QX(l#a
zA7z-(o6qRO2_UpXI~s)df%HgC=Pp7it$QSSC~3dZKQ|J{R4gr|)d=A;l(9f@$EquJ
zdjHgUb1Dg@_*Ts4zrAI5sTnN9yv6+3<_ZZ`B!PTUv>!!&o1;^4lbwM-3X6m_^gty|
zMCkI}Jzy9#(V#?qS(s5dOCgYL1{!vWZ<Bt2JGqod<#IL`7gf9*1@d_c=<d@lj<zfB
zzn45n<}sFY7%cO>^0_2wyeEB89s&_5_3{ZY6Y4q9rbQx`O`ab9`^T`j*eLcd-e(@l
zb67{YXs0b={4~A25^`=ol#w!V_HhfEK#@6H@48;bDfO$t8O^5qk9;;Ma)?+y*1<nH
zb#>x7b@x@M6>g&4lU1)JLjHq~&hmsXh8*qNw#3Titg*}X#@0rI>mA{NlM5G%!*t=y
zl<5@7UE1?i-@^$m{41-UUD3o?=|V5mGZ|tCu{|JLH^UPs`k#HglT1?yL`>0b<=v1O
ztp^hrqftoLcml?W>c%Jj^lH#4c+Yic<R}wit8F~&NT<n2Jr>V^dYZe{m23=kK$O_S
z%AXf=2KCxc%fcsTZZ}=qPmq;|N`UE>ZwG`a5{Gpcm#U18v5O{obfzj8`Wg+sgMH&J
zliJwzJt>MT(qhqERt*i%NSVbQ?5lojN}9iv{u9gn>z!(0vn_Vtrt@K7)vZJ`ZDHhq
ztL$lngNj)g0b^Q6M+->?*QYDn_u&7N-0{_UT`0b29+9~MD)hI!9Gq-7IvvtzjBrhd
zA?kd5&WwIB$*@pkD}<T0G}7_wHb~3QYV>LR`!>xC2?^2AkY#25^~(&ipM`gUfcMk2
z>X5~)H5vbiE|W6jrV`Af%&g*&1(B@H=_6Zj(i3E&H^?f6h`;K`49K-hQ0V9h^CblT
z6qNV3`OSmnRe{`8jvMk!Z3P(vS;SK`BG)H<UEKFjK=?f5E?r%~I^yrJRxo;<ck+63
z^1{}s@K{9|0ky4-PO*lx$hu4t>NMs1$K_37q@+s#7r`bBs@}R=IZuL|Nku^zgk<Z}
zKN!7nz~HO@?BaZ1(8rj;j8H)|i+(cnnA{)Q++9>z00oMa#N`e*O<(@WeVgLQZr1ZN
zXWUMee5?xFtNiX?B)M@|XQ+<u&2!h$@;#5C<~Pr88Ha5&PRKV|-ajgH$PJOi1cnd>
zSWl%A`)G{>-y%(Loj-&%nP3lxluIXuwAC`wRN0{1>*TRBgsHsWyCoAA)VtsRa=Gu1
z5}m8~fKKzC*X{y~PtD7aG{Wj;z<G{pl7%?djf)Ckw_#3Afe21jxJG$nn4q^_7%Zej
z4}-z=%)m#PV?Ho|fj6Ucvnc{XjVDO&mA;YKbBf!|6AKzzW-fC2#{LnqM%3{mXGqQK
z;_w7#BHz?zbhvI6fv-}vlONdeS__`FtUEHmeH5mhMlpCu`92FV3+YdtAp$EU)7~8t
z@K`-8e_$c1D^M@c7kkscotJSFW<KpxiI6GsVf!)DX=A)|720C*{t+61EAS1MFyo*t
zBD!lu&nNKg!}bE--a_a-rrO<Z_MnjDD-Gau8!a*w^Ypfc5Qr3E)7vv@%}Or$AxAYQ
zV75v~Pf+~VLx$!b6OB}VFrQ)op;MoZ+I{JU#F@Im=29SciSj%+z>k2?&j3S|5E}pf
zhkjX{z3+q>?mmMhVaIh)p)s95BB%UB+VD29(zWNvF%U)Km9frvu`vt}8yjFL9ZPY3
zvs9picaQh@C3o#COpt!`v&3GmzTMpX<$L@bS7$<&EkHq)h*=?Lsq<2PdV?F`byBR;
z%3*U?hU~Sv%2e_*T|**P%%WE-3f-Y`ezL}p3at>U5q`2GeY$!>yp`IS@IBUg&DWAQ
z;oL5SjbZGV4~mxFr<#>eak4L#D7jWcA@hz{{|#%<n&#ujouwN;YKF*M1`gzUEEFt|
zD75coIutO+#z%QMWC+{C_eRF~E<JkUWW&-++}o{|H3sRnNgD#W);z7#cXt8ZUH0aj
zy5^9erT<;2#-{_bRNfNBA{aT6dBJlf^J&`(gWV&e=aR$D_Rkj4Uk4;GhF}yDac;9v
zlJ-?6fAb8D0q;hHUbQ{)T@l@b+h&c5bC4jmbaKFOH+J52V%p9`#$o{?Jl&;?&2aZq
zpa0*Pz;lC8Ys<O01fSoQ$(UjADYNWrBxZ`HIV4F4U`f%ew4U(VJEs;XOE5t5pOZz3
z#5}fTyyX&%`$rRmU$}`eb1AZ2lq@{8BQYf?XJtDh4FYi&x6txGMd{m*)lxoU4nw<x
zvNLq3l%=i~%N+EJ)unZ*UXaUZs3|yC)}Kn9*VK&6V|B_7h<>8G2N2YdPEd1hO(C8{
zhqjMQX*ospGV6uHY5^y5luPlek(nRIg_9}0lFvxG2nb07@=}4%<fQGsfBO5z(1qM*
zTdk~h#|AvEC}hh_u9OS)Cz5K`{j(&`qShy;D>i#p{SF7JlZz<M>6ygj-cJjBFD3i$
zM;2KdA!8Yy6w1hmfL!lLOt&xuioar$MF%=1Sxk;D+pW)!K2ZN)W->uWk=mbW@Z6P(
z6Nemu2gG9h)W+L*`d6^=JeVXAD`!S-7iJbvKtpCkT144<sG2Ge%k0*J!!GNGl=o$a
znCSoega36rU+0JpRojO~qPPF_L-wJsQ;x5N5WWTOqx+ZGttdT=c_9>WZ7QSy(x&th
zbc8+fPY|g=lJj3qMBodwIi@ntqX9z6yD4e#Qv_P0fgo2YKJ?BL2+g|);&|PITmBrt
z<-1jgp)h}xria9Lec#BdH+Q^w7pk)T@r&U%gW^7w#ZQ>12NZj^m<SSzep9HtAW#u^
z!oRhj-24W;qa%$G;+&RkjAjKIwZ?vfzN!0fN>{g;VhY80iTCj3_m916v%ZE@&u)Ad
z&WpQGou2A4(=KR4ZQ!rvxHWb1#pc&2H{JzQn;M}{@RiF;-MRkj=s=txjwQ1BnTh}6
zkkUZ{B*me#Xr;^QTREvTKKXxrPK0Oy`2G;iYae$IfR3ZV_jlw{40sxm92y;B9N0B>
zL$<IZzMKsDi9&fFfS8|bXX-6gcYmnmegQHKb*6X22M1IaHxP*W#pi@QNf$flirH_=
zZM_~TLO(G4o3gQ^1>3g|W&i`+D@&WmZ;D2oMPc06L0c0p7s1H!)R1!=B(L#t%*)yU
zO5W=x_VUJaOZ^M7yr1JGreuy^WPQ$e5xy4vo1oZ~bB`rYiTKxh_m3-?F_L*seo>D1
zHSuQ%&?Eh*9{D0}=8{(-9z}rx)jKZA5%EE%xAfod?j3A@kYJR`D?z!~rCj{|Yh`xH
z9%ws$#xTj_*}3N%pB)ygHThpOH_}SHgT1M2x|FvH2vk!hA%sTq7e4l(dot!<L2|9*
zcb!SzR%qZhZyoCi!ddw_S@Bi$`zP7g!J`SNx@+rJO+Wr}Xyxa@;`lQFecLtRbLpSe
zRhSAzpal5All9ME0;SQs%=MAtdC09N_HNt7x{(ZHxjjhciQVU2HO*rS4%%_u?G8u(
zzw!eBk%qn(f{Lv1kDwc3L_d@5nRo2<MissbZCrulQrE|aX(HJ`zWxH`MmF?k*%{Kl
zw&f}iMs|9>-~JLd_1FB}jf$(ys&{V|$B};n9JF6Eob+?oy_}p>Ueiww^*$HD@rIw?
z?^20-9&O!FNq_Yco;KAJe(*OZ@LSkIR<qaE)jK;OM{jFRt^Bq#P%tq4HhVS$BJ&1N
zlM8My;t8lj$#;_@&zi&YFfG0n<VuGdDGszwR<n($cdeHO4P#bw_~LR8+!jS#M)P&Q
z&iQXX1WB2^m8$IK52A<tq%Y`Y`9Gpx_&|LMh*2j4ocFi0jM7CM;sRD&7TUU>fX|tf
z^ia=!YUI?JZl8RG%VzQ~NPlhgtvgWmF$=4?c|vmTY2<<8gMH|QrTf8J0uaXUn8pZN
zxfr;@+FP^AR`L~@={mOWGvrtdyItDc2=_B!GH&r}eBzQ|i#+-J=a<uh`a}dl6J;!y
z-gOMu1+YZ}BK!ynk=d(3pOnvMG4KV9sYTp|jqg<wI9gXe$_1%lzq+sIM=)?d?q>H1
zZH4W0aM3OAsR37+v5{ZEr{AfF<Iv<dwVj_VP+YkXqoGpA9OEj~@XB52yi%S&m4dt-
z+kx3!7-?(xeCj@LIA8mk;N`t=9)JOPq2KEt3h)@B9&ccIeqATsET20<T7*tQk>WEL
zf7SmgN-gfgsGw#5bZ<pIuo;i)lUZtka1YUNWHOk`_wEZ*4@aH2KL5cg{ZfD5;lEFf
z3&ioyYNKGx8qzsr4D6du?=76@{_FSb$RlCRXD45Cq`#<V*8^)HPOoBZ9jO(ja2f}I
z1^)t2<5=Qv?*po?^VxqE8@IlZlGQ~OdkfVCv80;kV?t>&RJ3K3>i}X%I8Ur~{2fjW
zBvsC-`TioZrqz8=G3HN=q+g%84Q{&xE0X{RW?6fycDkF|cx+PA1Debuf*?ECX6c4S
zyTH~nd-s<E1>jALGF-io41GT+y%_<W+Xub!7Y~(^f+O$kFW(*ktxEMJ7=%V({GR7U
zc9aAFL@mFUzgcmK)R(|=9KG)8A^!~&FQ745i=QueBh>T~lqvO<&95<e2e0#3$HP9s
zP!w_uhu2mzi*B*+U!ANl(05FqrmrBQDnnN0lO*o+6R-JdstE0(OHGkGBEDcl&Z!X6
zghatd5Q!vMyEai)1&z4>7u_<9M>NhkH4oI`@O|QYbupCp!Bu}gdJziiGLnqNRoY{!
zAcJo{1=PZ}Egc`g(D(&}Jb7fCjm)O<!qXMM$$#Eek9=oH%{Glhxk&wU4^$BV%dsIY
zv}E5kF8=eYDjKrYMQx-X!Nfru>VHj`ct4|)^3pk2Ur9p64=x9|?Prkg@;+D}FZu9i
z%GL}ulD_o^Jflt(@S!vN78yMcr55DShElUGpc!c&v`>Yw0Y3}g#U-=v2P^n}oADjI
z`O$<(zlj8?Z=lB4>YDvomYXTt<%KuiJhLVyI4B8|3opFw@sfxLV??vQ%zDn}beHX!
z4@Tp+p5(>w-k~gn5#?tib^l0u$#CD?W7LNEs-AOk;0fNp99UiauhIfRgE;2OE+dl&
zeJF#5iq?Ta^zZi=8nP8ymVR)qcq9&k*ABA#og|}|H`yPda;OgwP!6e)v8(&l`R%D|
zXs$_-+zeI2{^Nd5q_PfD%Gjzs2dz<VgLCv-pRTlEwZx)!lB18=Z9Ol7(r!6j>#P%7
z7ggVhiASB4bv{*YNdltQ{_s(d$vE!)kqg3he9A6l%zg~=&+fCvTemvi<pHZ~mwers
z-0lAML|GDP1*eX2)S|M$)Takeqq@2>rKN@azh87R_|DzzgL{Y>{RMSYMu9;?YB&`?
zYtbF&mq%FPu>E-t-o$1rBwL^%8NZHje<<p-Y(z~PFUyNRxDSgs>Tn}=)8=mk+xr-J
zYa~*IW6=n#+d4N$m(s;unWK*kYR4TT);}12Q#+<y7Ioc{&>H`CWN`BUY^bFUCf{#L
zzx>W;rs7l{s(BYKXUDKBka4iDbaG%y7%Kz}qr{RVZ#Ta_n-~vl^yiIVfK|@NRlhd&
zJ+>zDq9$xyd=l13HhE2t@YGwKM7OK)4~~}L<+rwO5#cpyo7)cx>{VvRJDCq*aKk&F
z_qE$<L|yjqV4%N%HcvenCoX!ielYbw=)DD~T)m=V@~BZzDfS@zB?<mY+@2Swc()F!
z_+8kCMDdK4)@NrY3C$@y_nmuQr_30Yb7>bwUZ?LSG564hC6lnID9r9(kmALKRi3dI
zDaZ!Bpf8*AjNImO<Y{6IP4m!u{87d7MEr5VWM^%-HC&;L@i&kbZ%3XSOBQGk-kIcy
zzjN=?HVU!=(j_2&NSjxW(tf|!tG-R{)w20HDd>v8-$;<#NR^kPtAg!+uj}hu+X5}C
zD@5DAEtDu_^dqFozg+5iv>{8Nw(J*Pb2}0jP8*k1?7z}_0Q>)%e|KVck&TozXR_Fj
zPeGPTcaKGpQ{TK*HVB(6G}WArhJw(27k1fu)^>qkp5F{pR0?KSrF#Xk+%1CNI|fxZ
z*g{*-u~iiuUwnSj9UYA2^uyN!bg6ye_CLcY?$A>)elPB<v;C2C&$MCP5v0Z%??X<K
zZ!klI;DbllZ|^yrN9z?EH4d`^^`b*+^}Ug*e@JbL6c(8uUfaMa5l}F`WTI%%KvZRf
zaOb|JOn(Z0(&%Y!t?!i-O>Uo#S$A9zStoa`qi&?j@O#C@#Q`@cm*aYgn6eXkLlyiX
zgLUGg19C@>O2YYz;%dGIrXF;6rFt^TWX4IOtSa``L|9Lx^y1jmnoW^btj2uI(LLa^
z`fEHRX0monXP<Zcji4GI1OIPC6llP-gK~PIl3@AJYfHvCdd6Yg61WE9=6b0}EOe<h
zuW9)(f)9~pOT9;l8C@sI&o=tUK07fSM{e`r2B=5DYR8a_JF@L(*u?7hQZpQMy_*VI
zo;PMpRv*kh)`rPV0EIt@>|@@_(7m@3?-^vFq#I-hy@dtpt*tXzGkuVzzf|QHwiwu$
zd-j~28ZY*FC?BA53V5wV+!;+s+~1>cYF!ZIuxm=(S#XD{b=;q>Wo47d89*f_g5IYB
zLIIe+{fv<_v)bfOiP8LIifJg&4r5*;)idp~QD!{eDaY<cX;;Zn-sWWqyj-LnI=MWW
zy(;O1VM_f?kD#&hPVp@7phTA@E+FgYP=@yS>Vx-lU6)*MlyRT*y4hirU_u&jD~Q2J
zs?lxowi6;uj-HtC-EKIFe5rNx#I<wYflkun)dxwJ_jivp#1<*h!aawUWJ+*TDcD_M
z8s63kUhhIeA|#8qQ0&LJda8|-n6gQkui%*)`9Rem^u=n8N>U0xdCYH6Yh9s6+`p7U
zMH|6xyTio?V8`(9l${tj@gGzp26zdDZD}zH>=a)4IU-CfF0!`#$3))Wk-7aN?~%M@
z;P26Tt$nfG$Q8DzBd`6m+v4Ty0@41h%MJotJ1@t6^Qg>|N&84d%$$b<wxkf)?0@WO
z%O7r8<G8t05K9)0@H$OEeXBTTfaQaq|M+9+wU&?O0inAw`M$^IUpzHm?}97_$~jQP
zDc3N%IJ~+$U3)MB)mit8Cz{tr=Y2QEo_4Onfrzh;<rNVPby7oWut7bZV$ws2Rqf&p
zuqp=ItTmFt6MW|9^+a~Oe?QrM=7hI<n;x0H^nMce1En8+KLi`kGy?~y`arOeSro<K
zYb8R^lb~}zfa>&ydPF|Rn2Eilc<ug9iJW3ji#UpjJ|b5e>C(Q@>xAQHK7B{DcG1ph
zk|aG*3mu{R;RgD!s01^*C+;DABr!|r?p+bai=afIV}AUNCie>vT74NWk-mvbn;@TU
zcAHP_ANN`dDhhBNmd#r3(@X5>K^@RDGnn;`mvj5CgP|SNS_LpW4^K#)?4>s7uf8L%
zi|bFk*Ggc@sooBG5(#@W<pNt3JFn2x&LEe3rFLhbl2}{id1SOjGK2z^I-uCdb|dk6
zsyN9KezRoR2M!9}Vt{+-RE^WFn5^&5FPfZ-g!RqyHTWfEJ_^rh#a#m5+8(VAzx}}b
z{iBlr4^?{IM0Wxw+aM<P7Vv2tA5eO|y2KTJ(BN3#l`byqI#Ox#R7Gb)SdCK89)G@q
zfijFnn45)A+U}JDG?b>&jN)A^NO~dQFzI<Dw7U57b5(Z>>i1ktnu5N&KS2}aD#CR1
z^K)h#Qvs^>6+}bir@B8Qe=^Rd9OL&*ny0j>Ndq$O!tL+L)G%Ex%+e@uG_x-}v~N6c
zZF?pu$_ihlF)Fe`C)pkP#=OGT{cU~d+q-!(q^$MprF4Sk7E#qd_NoUpJ$3!6E@+ct
zZA9o7Cn`Wio;DU<V~RI}9d{||dl_&!*U9$#6w^8famP2H_~DSc(X@`VJvcLL0u<~@
z;!pqC!8Ix((XVH5p+t*160DBp+#^Y@MKc)MmIGUlObxn0-r=S=-$);bpV^nZFg(Ys
zCTSIj{q`@*2F)E%#+2SrQ)!?->j!MkEv#)k6>RT>x8gLImTZtKWSut-hnS+RJ}<+<
z#X@@oKc383;dB>?SM+rs>ZvWy6s?R9M+ph)N%-ovbS4ca5Zkh1j<T9cWTf-yg}bVS
zD6ZSN)z7?aNZc#r@y&N=3ymeMiA{_|_rV}kTff^Gisa`=jaB4t1_knJO{ZrF;nE+Z
z1Hu8+WofgX+`l!VG(KDuGC>(TRWC7r6Tip><&eBPchru1>ve3~$LD=M!(3XM8}a@F
zm@AY{fTX=1>JDxQIO*Q~!O|?wP>x~f+mPxQ;I&@bIE~7~$S5kdmlFx3*+vFB5$5-R
zyuijF_7axq59B3axQrd;AF&;?T}Nj*%%XT&`W)*=Y?E@}I_5VBIlt`~+GC$_9c);G
z(1Ef1uajagax^r5*GQz*F(}18fx6@a0ASi;gSw7P$d@$bNR1&-N<?i43U`s{n3|{=
z27Yr~#l_zy^0$57mPk8)S(z<|8SYyr+1t*S=k7uopo@MuQZ(yFOH{d5c)RM@J1AQc
zn%yPq*tlOWUy4o*g0R=ZUHb0BO!zLV1ru8zA)naUe*>%t*GjZ(P9nMbx{-Gl>e@^L
zCe_f79}VtdQX6&=9x!8IUCaCV<;Ac`ysNoXw4G}PRK@eV*C9lU;J<nRD*5m<v2$8J
z9!8!tUQ^b^=$eDgv#?ePKRam3SKV1qfA@S*8f3WqKx6+6JTDLx^uzJWZTaWI7vD5#
zg{73=aPldn2*>Q<l9^lcaHmm9gw^ey9jp(ojMoq>ZMS$FRIG2++S^79QvZUwM3h!3
zFheweeC6tgnlwvi6p8|JYT6h^C*f`6b~YHzd{N76#9q;gXlw*$_rRbiNXN3fmZoUu
zBdnAZ2oVnup$<#}=>?3*ob?wm8+XcaMt6j!X7^tbmh22l7d;6;bI`S%uTdN?K;C{l
zhjatap6H*0I)pBQk$4Vd#Fy-*JiT!0m$Xn}Z@V(>#2Zv@+;@iY?WKIUbOmSy-!D}}
zsTeNl_=QNsHNl<Lk-P>%ik~nu4-;agq2qk+_H!M3Cu{3RZk1k%3Cq>3(cd08K`R|^
zW{Vd{e0OAoU+4KjWo=(-@N96JJlum)=#>GIwzGEraX8r-fLt_=7quI`bSG=I1Go(8
zL&tu8dLVAFSnrOrs<uXYgCa2Z;N1$!z!^HuvO^S}`aN_7djkyI)xqw<Dw|&e@ed&_
z#Bm~l?Yw}xC9f2WU1R`pe=MhMf<6j=cV((l)rKn{)vv6Tz2*aH53z#y%N7tPN-+B{
zt}D=N2PD4zlY84U-l1#~f}Ag)@io#M`O3G1;!l*P7?GG0d6kB%^7*Ihtj+xMMIJ7%
z(?8EY6*ncnq4pQrC}{5g>Yv7e$#TfUEi?S6P+!zEe(!fLzw?&?D-&9tO~%Jq<;Lnm
zFcX@3rQmX1?A~NVN|mD&j9v0+`G0)9bzIeH*Dp+WcQ>->?%FhhN{5uBA}ZY-3W&6z
zqDZThfP&K9ASEEENC=YB-S5JQ`+lBt&imJVW=4s<fBU-D`sV%3^n^Fwt2L43Oax~K
zjDcHoxU?D?JW`}AHF)ZQyv-h6&;fOz3;Vp^)D`?&qgW1$%rOg~5l(9P$ilnjHsuH{
zIY%(l^S!7KJWQS+j`o<{S^Ht$_fj^B@S`btN}Es{yT&Kz&0_Rqa8*^kp2VhRp>DY3
zbz%5PVRvHrG21&_-f6O9{-rxigih=3L<q@43EvIt=K-v})oZU944|-n9#IO<+r~B>
z0Rx~)W%4>Fik-ef`m<lL3{|TVer7xflu86^Rx+s+=lZN1i<v%thKqVULpLcWNTP)p
z<VYU8c7W<wPv_dL)7w2M-M^oq&OVlSUbW1;K%Df<3^^0MjiNz3m;YSI22G=O=BUc6
z_e1vA;REnt+C&kk4y9oZ)cdMmP7~o=5}vq0J@4&*!wy0q?^w2(%RN@`b)7=c3t6*B
zKmNqgY7$hFDL6Nw+r^JIi^Y+3z~WAN4NEAW70npG|03Fy8+%0Dzhm=}u_a`UEnFJ*
zvIl4x3xjQtc<}r|<U_1c2B>b(q0$@+DGaww|6X~%(M^NX+Nz>hTmW>7y%V#`{G+`M
zQ(|p0c6HCE#035?P4{2QW^qI_uMy(Yk>9mRKinQ@MA+O=_Mdi}vy&Km9Q0>yNGJ8(
z`z`Hfd)hf!l{LSqM)9n4?bZB;`>Dd8?%?$Y>9V!OGs+@&u0UR?trP3Q38DX)D_aw@
zl26ZVRgRx$ua?q0&1KDZT>8ITzloFd+Ng_EoDm{14N{bQJN4q-#Atgx6CMhU14|RZ
zWDe--Y&jnnee{MK;?cW}7-q$W(HWGdGha<KIxwop4OHfMkRn&oGpEVY@e!m*;W>OQ
z(Hk}{)XcHO*i;C7HDxL^8*qLztl(U~MdW9cf$gNFi_<C_1pdOj5trtmnMp{cS9Dh;
z3pN3)qIJJDmABEBQ;H|(c(sxt?xS6&cmJk+>L6{#c-IS2`)K)DNirh#mS#EX6P;3{
zA_-n|2&U@Y7UlBnSnpBSYD0gZuqCPFs;CKOQtr?<<+h9&N8o_F#ChhvRb1NS1>sZb
zN&bBZ?o-tGu36<blEw5`=u*U?JhbkMgRB|EDLrsc-}-@{jAl}3_>iJW`=!6@3C`>?
zTtLx1>&0$U8dDIA$-?e;DSmuIOeby|V)#slVo5`lI%3lf8{WprL^CN}<Mrsrj9UlD
zsjF*U!^9W5)MOez++OQ-B&3wa69EYGcbkpG7h)QrQ0@)Dz*_dXOio{rtGCuNC-DM2
zVfR3B{^(~rzC;-$a;7op#^iP>S)Xi(DU{%<79guj$M7BG+-X_YjQ|LxA=eqh%xHC8
z^HjbS_g0!)`V#h=P{{5XK0000B;}{&)G~~x`SQ5bY}YRSIkci<QDagt%Slr68mE`M
zb+VUx=4f$)Q!6Fw&aJmh@dO5=w7oEz(Kx)HHOD}{V6tj6+1Gz)fg@-_@^+YBCq$=g
zTIUUy5`wyAW21GA_g(qxH#(W`Sg}HUf8(6_){@`<dAil><zpnr1i4Wu%F)ZU6w_hM
zdM^n!Ec?|u;5xqmxN(AT+CbaVr1japJNZzX;GQ~4Oo&e;<_KnH2$BHbaYefo?I>!C
zhC&W#afbbh;1OKB0;_r~&Ivy4p0umQ$S@!2wc`yjAFhjsl9^pSmPL}!Iz3B_FH6xv
zviY`Y(=*>SEjXJ(8$}meUmoBE_}D#9un83Adq$cRq%{459gHJ<sq7j=m^zNSd(->O
zOq*F7t?N8zrErEpgu~AH9`#;EB(@hs;`wfYrs+dHj&En{;~ytzY8mAtZ_PUqE%NVe
zS|cg0`hHE0#BJowGQMv!0|g=Tf!bLcVQ6%R9xS>tvw#cx=T2QH<DVmUZ*iLLcR%Jz
z^Vg@R(k%r%!9KRD?cwjf)x@fAk6A>B#FV0qk%kx;9Yi!#ER&ze{ah+gBB0ucE@;`k
zh@S!1Rp0}JcRlO(@XX~W5YGCj8qbq{>lElrQH>|a0UMKeW<@1K{a1voXy2M`>_-bz
zpTLV(DXOrR3S2VhY&RBrI7TFfYC)4O+B*+R*LK)h!!Zr>glysP3S*}t`H@p9S!-!F
z6R|K4z~Mn{L(kI?dg16Zx3gVwdmp(1E}XhM7;RM>B?CyI`12#L>68;Nre|RjHkv>I
zIHNN0t_V;^-CkLN*gsH|8wXy>z9FuifMCRAW$OAjzGdaFp-AkqWR0Uh=NIgzw*<to
z5H~)Qc}Bs&Q<{)g3EcJkpsGh&<uL?r>Sl&CjN6q9Hd^$22{NHHDYYU;s9?LIDzN>B
zQz6+Sc_tt5@d7G-u<66~K*wPI2<jA5dlk=Yh*7U6{o!6_=)(Y18w_HR*I>)jj=Faz
zN20DPizS9AJ~SGEGF2N4qgir7K<?dmnoW5L0e1Jk6OmkIL90M_2Hz=*HZk{St>B;f
zty`iveeRmA{6IPi1>u7frI2=~h_b)~LrC5P;Z(WCF-SNm9Z_s5Tsci8mzNxIJmga>
z>wKFn+N$vx@%R)%^_>9+E2a?C&qEks{5)5v+x;;9k}FpE=0hg=NdBm+){pTiX8y?n
zxZ~{<nv1?A;B;#MHdVJuXhs$87w<ph$~^dWZ(}}imhOGafSk)hQ0*)_7h(rc@lTd4
zY<afrc&ZO6I~PCqd)XN7*<yD{sPg1N|026B^hWfK(Gi$UM)L-ql$2@{jg@X6V##*C
zkWBVyrmuUoR;$sJ!Mk6Z`Q{S~4oT>P$@tI}+VDI{vl^du^(U*mPH>G;#C*wkB=2_$
z;k;qKzv4w4!q>R+E4{z$tT&d%>1z1QMpRZq)4kI`#t#O!Fp{er?|Ci8lT6$;f2u`N
z{;&*Li-&V1Qci%8nQmg#$BW?P5x|kQ{i-Hj6RE8R=m*jN;meTYDlA^hhI4iA*nab0
zG3NLSl(WW1J>i0n?3@zX)qYrFyK@`J{2Vf85m<=a&IIOx^N5$Suy_=DB=rvHo;ZD@
zF-c`o2y6;GoDWu_##U0zEdLEw5O=kmUks=~C|sz;e=e4ON-LK_3}y2%3)^zgQhp>g
zZ>2vgEvcV)dEB-DHbFNGb|E*a6hIvMs>f$<A-3Se)fSWGN0@xR9Z!L3MCO=}rFRWG
zx^jC*D*q`ZaB=<oNa|Fv+hiecE%l6!iZn6dGymq!@;xG~BAI>%@6Lf_PJBIfhg-{B
zh}i@t`5wP?&k*lYd`o8Yd!BALr%_TLQ>k{2lujkGna1S5HE&#SBv+jS0dxHJ<wbw*
zk0l$;yQy-1B6bSiN69kbNJk`+jas?&I^Mi=xGb?Czh(!{*JH)j7Eq+_uvUKmUg`4q
zLG}A^Oa>Trsf=sAS8bVETkQLyK77@>D5zCjY+t(M{%N^v%%MzV<;BCIj;w1yWAdwU
z?ATiUgb`;0J>Cehn5Cp**cgmnRRl6X{hU`yZRX=ooyoWlm9BEhgh!#Yu#v99am(}b
z>hF810fvQ!?a?E!MB_fNm*6_OKbKzT4&ncW?hYC?Xx0xLlfaj{rNW9OXi<gOR{eN;
z*w|}r;=uw`Jerj}7P7I$t1jxJ3Q?H;Nm%83=Yh{qDh2-kpi=)~R7o(h_|(uW5xUvB
zr6#2%&q0#(x<eWQ8~i?KIB*Iie{S8p+BmI>Q|h+5$z<3YW;dN7AHZ0nl7dP`!LC$a
z9(o<c12%Ys$D~Ra@h?8avrp$Xq}*X$Ve5@kJ){I(f+Sqm?k=pw4(QUTgvA}*MBVL!
z{`$r99djqvZ8x9etY*}kO#&b>N*6@&l$_oe`?)ITCA+|X)`~qhG50AgVwa8U8iQoN
z_=cJQiYjHOKaTC2kU6i=Ni0A4PiUu|5Ns<+O?&L!se!I4cme2GeU~D`dYJKHyk5XF
z=&sGPaF+dWDvmP+NNTgx4(5c5iFI~NF{LVi#1g$aZJBtC_L<bDF>~Z*n2jA+)+Q=5
zBJN^_m4%1WP`C7?5wv)**xIzmI1~o#JD)%RbZCT4Htgf}hz(JxDtao#rYb$wJbYrZ
zacpWfii1~LPYiK{BZiv!fTY*Atnp-b@Y9H)>vB<;8xGo#*<abm<$BtNR6N~ztXyRe
zTDy}t2syH=d8jbI1s^}REq2op*sptL(yOwS8;;ikcE8>#9|_0Y9(^uew50ytpt*-g
zX$!G&pakSwv1<eb=&{mbI2GzBzU;aD_JE~+W@ZTr6IF-B;+T?uUO*}v*}%7Ne}tOv
z-$P*v5b&>ZImPU=%6Ea56T;0q0-t|$8UIJB_aE|~C7osCzB{h>(&yAO-e6@v!jg>;
zt&_3)$qG75jd_g#2G6RtLCmrdn0sdYVdEjJ`>>A9tv`LvEOD2HD;DdGT>3K7Z@B!H
zPp=yQUwu6*7i>?+Pxw2V=a#%!n1d{=VIt|Y+0XVkOeN1UXB%Y^cdap+LY6>n<$4WI
zXZ2+QP{<Y+PTX9stl0wy^Eqe?IXj7$A#_<-k|R=}=GIqb{fVAL2M*%*g|^ot(+Plt
zG6G{chel`W$lfIlOfi?q<aAC&VTwiXBaIX+0*1k>EJ_EvD`ST;FBC%>Z1P+)?*G^v
zBGO|TbYXGx1a3~sC24Ko#foyJQUyv5E~p>duayYJLR(x|!OJe=*6=!-s*hBHXW^R<
zoC^UPJrg3rQ4msqZj(5#D}&{J>_TR&X1Aa~bW-ebO*pcQjio}f8P8{t;S<9<lvXs1
zj;K&gfJdG=;XIiJA;m_V9H?6+D1CP!U_M1EjD9Gt`ZBVHI9UQR0}UW|hy`7P>xgvV
z_qzdbZ4AY=2)d&@%=TX05@lieDpq`6rPQp8#=`+A2<r{U@ybTjML?}@+H9P_EisuN
zqtG;kLyS*z7a)XI+_xkpw35yiJ>*GGZzp-SVK7m_kEt!08K=(tp8c=O;a{D_pTmJ9
zm?Tu$YqGAo5X_5nB$dyp<J-1$`PkoyVqA{Oc7-YU(gH)<d7s$r&x7ZuzphNRq=qjN
zj$8&-nJq$tdiP+{Zg)t7IVq=B@pRw$rnGW_KIi4??-9??u-=O@#*)LIn_CR@O?ZL%
z&^M`!&Xx;RbouzLU!<}X-VUM69Ifc<a+Aht7ujQ#C?Y+$p7TD4Eu8-b|L(83dUkaJ
zAIG&-IYzqkb(PERBllY%JR&|lFaW|Mj7Rx;BME3*wlBgnxd#JWQ<NdSbzG0kA0ztZ
zncKa$7KfDdJV-9WdaV4nFj?KDDJi~WeJijcA_IMF9`^W?UjrNSH9`ZZV?l7#OLt-r
z5W<sT--<)#rUFyI<@juTL%4JnkM?s@?oL#_gJ`Aa=<KS<jj(e5<Ra*Wdd1K9*l!XX
zjBnO^$@|G|1)c^0!oW%rM)t|~X&MJdp8|?Ub-=#DW-limQv3L-^VC@@m)*2F@rsb#
zB)e*~red)0Z=Dz?g@C;Y<DkI<mPRy;825<^<O7UWw8dnS5221&ykWawlz2ZUUKY2_
zkiugWxzDZ<Z=do8tiCV8e_|73j}``9Aw}biWBx7eadS8>ug+-yi9?1fOg>GuxllvH
z0~MQdYVRWJWzw<R32`5$HJrHPZm+Y}5gsQ3-se%#v^30>rbD)KS^EiJcAL?=uH#(F
zsV+zvxdGEl8apS+<WuoG5_p}mHz({t(AAVd1ntUQ#$Fp5R*h><r}0P$fVRuVd04~)
zsW<7qbkfunJ{@&_+tO?pk}T6Qfd{S$hctD~QPkWnFprX~kv5&qou92M9<fu!g>bz*
zpT@*QHgA5XFz&#?t9wQK7l$2I_7G`WJ%-sSqx_B1djGukrC;kXqnIWfr5@KAub`9o
zcv(p7xmv@$2~WKd#k-IgFS=*MDMQ{FteaExDQdbnFSf;>McvQf0Is*t`G*Vxqm9D+
zZRTtKAf@vDTKQ&gel{y>Yj#v;ZTep63dYTh8shq(!!1rbTJ}gEf7TyNdc^R}j7q+J
zUu7QA1Vuvhwp5ew=MrDKDFa3C68s{CEMB({H%Fpar#s^4PvpyTRz3&$M-aP*Rpl;!
z4yySU-hz85q81nt%JnkGMLkHe{%G0C>HNjH^B4ZyNED0;8zr6g^u_B>G21^vYwDFH
zQO7~+Yk?FLLH@(o&ew1Z+R*y}%i<%%pWKPUX4a)W-TO|Mqw!p62v?h;1*0!qRV(`L
z0npd6KOusS{&;eYrD7e_+68g+jjZTxg7$IizwS}%|EtOTZ@D%L0c#=%(i7CtX($72
zOkE>MnYM%|#)bK^_}LDIUuiGs9};tYQhP)t?4=Lgzb~V<4`}rmN@A&)=w*$N`u4h)
zG-Bp5IXKF;J?UZ=eqX!1W-)arnnOJC0sGQg{K{EkC2EkLohi~>XLjYx@}9gUb;&nB
zGx9HCi;S?j?yM3jgbDLm^9l2zU?wHThMwQ3OO!KDGcRKgZR=>})C@F)04ThxvMuQ$
zFw$=xVNniNx5&h`b-lUvGW!JQMtLRb(b05-DMJZuVlXxTQF@(d!=<A)UU*VJmHMP-
zNS&i`_UYw(5sIM`4M9<hu??^CjJfX;rU}hx+<k`J!ARDL5OjkOWQOa>+y?3rLgUMt
zJh*>NP4`VNq>UZj)Ucxr46(6#=Vaft?RpF0S9+<eD*nc<(+PQ_%>4kSx{28Wu%`SK
z&!Og@H48bej#AMEbghlccD71Xq2amq1pQ}YMzeX^&#sRT;j~3A{+U2K{qQ8q@4tsC
zj@#+ezEFa$^xoN5wMo0_rA6(YDA$YNgN-mAlM=bjnO}3%h=*uAMny;Ra~#@F(ql0T
z43jw?N+(2kguvPteaMJSK$8d9iH4Zr>b(Fr$X$NyE4DyRY)uHNv};;xhNiy;ZiGsS
zk(amFf6l}0Z<P)NkBYoH16>dH-ybz=B@~7t7<h9`Y<73Yf&;rJiR2)1%<EtyVNwEr
zdly1FS|_@iJ|e@ERVAMphV_&7qux~7>IKE)^Zy|}tV5#sQBw1{#{S&TsqQU|4n;{g
zO=4Gce{cJga%wYdP-MV|;4y(9Tte9tsNL1m5#$TJM7)S_^v51E?T<pnbJlNncNK*`
zO=X!<Mn0A{-=!WGxnHc7z|?n75-!RGocqxBTJ?6JC_>Zt!JrNY&U-Rfb2ilEYlRPR
z@LZ|b79tp%#lyNVT{BghPNVFNHN)pFLoZW%cNiImYhV3R0kO0IeDfJ%_~zE<>DYT|
z)?eTMO8Hbq&BYaXwDa&=&2GSP#Chq>Seo@Bs8lOtRly4QA;Bk!yv99^e|Ae%$g1%S
zf8jYKX2vi7sHOfTMAz4=QNqhm8RLZ0d(idmf|9<=LNb1w$Vk!BL*xC0F5N3!WI@@r
z-@JqD4`D6F$|6mT7V?q9oppmI@;MWmn*YET3lM^J;J!>6`Fcp1On`41`%)Y}dq&M=
zTP1T5#0su}(WHYLC<nyTSG(V8h>DXhQiF)`W<ZUQg<~rkUD)wJybY>X82-k;)Iu6g
z;OXvIAvo|;$n(QwT&J_pQWLI2(m~1cn2V!;J}6W<*6W#;K^Di=KkgX__uFP2F}fJW
z{__OI5_LVVZX?*&yB*)9_HKGZR&2>5P*dHxhI^#1Yj^__)BjTW_>vv4WPu5-Qg9*J
zMtH-&7@iz37eF3dzDiWEkWaxSoeX6?-*&^Elma7QtVZE`#?HdxGVj-%U*Z6cXNq?w
zx*>*=2-F*I&Afd3X+`YyL5^UZTdUW6djWoNL&(uE0Lhpxa7H<sTm@k2%Lj2z0dV1|
zcYu1Z`f&H_H%GW(nT&E&xpS^wQSD~mE`%6on$9whwF&75+sS;_@p3GB@;c%f7p5n&
z6W9yi`EDksWZr%~#I!)RFu(^|&RMVZiR#Btp*Nm)S=7o7(pV6g!)WZv2AQ(y^m69*
z0~wEnJG{yqdZ|1rRn@NR7`;7ur;--<-{<MyE|?~IfPAJ2&9duCjP$d08#sDZFZbV3
zZbPY4AYmjSbATVo36KqjphRwiOCLNIy!Ces_YV!juw6-Yu4Jn4qyIIJv0y+{6ES8x
zjMJ$IMIFC}1=gnt*O}z1N}1$*tp)VqqmYYJ6_p<CJc3a4SDf2wR>;8gUYlrFj{u;o
zXejqIUeal#O?Ri!e^+pU3AQ#V?jNGb&9wzG9`gj;6))&!$5+uK|LCNGraD#m#U36x
zDsRWU1@TvpU-WZ{pgUK99OR>CL2iyUhA0|;hNL;|AN2uGI{}C;NFu+iGY6u<4!4xi
z0)wX>q<znXuQp#tqj&_NTBD=)?twzCcNYM*W^>(3PO)y+tYej!UbR0`<f40}uj)6R
zN~oA0c)WK{#!B0=+Wo=UI7lRFI(1mmJ6&(g&qiMY2!NPY6ziQZI%Q(+5@;WZ)KkGG
zQYMOo`*;*4UPBm|4;gfx3B{K_0wEwh7E#ce?h{@Uff)a#Y*0mabzqCWr8){z!j0tp
zUy`^#Cmvc%D2FEz!aci;v1(U|5Q8VZjK%cP%Rp3!mDGJ_7m^Q1NHH15#uZA6iE(Q}
z(8bP~xW*I8h4u!lKa3NWa(nvj&jMBUs0lt3*SQI1(Q>BYvzcvNVo`9kw`x~}Pm=)F
zmz-~v>rLjrRkG$TV2od`rri}m(N9$R!yx6$K(!Ss*CqCQ=@i!q?M?us`We8eX`B1t
zheD!8J|t4r5z%O^P1e6@IQ1sq$7PpfBMv@Zm3)n*I-(3k1l=@3X$i36rcumQr`6=^
zWKMR}S*(UOK*Lm~bfX^ZM^z9{`m3u|v7qSElV8#Hp`=(?sgUs~JyPwvNoHUOROXXd
zg;egNTpl%Xv0HL_06htIm2FpkYYZtBc82EoScFp1EKpT3ge0J$F?r_G7<?*CJd&k^
zJ}ztvD}}vSL0{6tF6^+bI4B%&Gqf+id6irF7qR%gZv-%r@!FL%F=Em23vC3R9op`m
zRA(AA11)e!i`PN?e}7Y&WJh`60oR@3Bn!lu9st#LQiKbVIqtr=HNQ9K%}<MWO{;y@
zm7?RU%W9uAeTfjkmTHnhw^03inN_}ormOl!D^-iNaS-eS1u<0og;^5{0F8xm#X^Mq
zjS`FN5`0<g69&C0+;6X?Z)}f@y=*PA(hftz97k?|{7|Gl;fI3$n`?cRO^F#$b(LeI
zl~ZeYG=2eB<_B9hK_x}_k}ppVWlxqTMwnYuI}rlSh5)4x>MT>gnxe7$7n`ovI@(wg
z%%ZHNG6(G>HR6HFhO_5&N}=2A>nlO`J?={{-{Sow4sDf@HmHoA%OgX&C+3W$rtjDm
zv}ytmMKn|m^FjQHzv6qB#-2nxO!XN_g$9R4rb3VrR9YQ;aG6pNDYP(vBo{BH?x%vx
zV{n!y1YQA{Z6ODMb3LX6eWC@GvDCN!k<$N-|KOl`lj3;KqQ&BZnUcM<QmU?9!HTUp
z3YmgPy8ezKkR5APQ#S^*9zEc3)uBKRT~^wr_M=po$06eACL#{^Vzb3u={O2Q-yr#i
zy-ven8AD0w8!NrR#TjT8%z6ve9;7VJT&ru7SeObagG0HpbWb-A!D~%ajhZ;D@km;K
z@P)#sRnHs7-+>2l6V8ABDcnzqdrd2S46iT;elC$+vbw`^`)>72#)3SH-B-N>>C(Nm
zH)mrMu-IE3k}JBsUpU@B*Uw^xjyhiYAYE(^uMXo%FE2R|V_B$`mO}*7$dsBF0PQil
z2a$0?z?{10gSv;|)s1K?<On(<siKL+;R*Dwl?~ZJ{4oP}_yj>#{{PK5!y<$;?sH1?
z3Gw=)5C<ft#U}RzY3t!fNfFe6sp2)=dwK?(rWIx_bl>^<;L{GJG!ll{09mXv4t77$
z`FkdMHsV-vyPI50A=Au?!OB+2rC-U13!P1Q&~JjS%+@Tj?IC$G_1*hr6>`@f{du!&
zh{AwN+kOrf@>0+SIu{c&ZBI`#OFHvSb%NSd!;f}v>y%+%ljAN{pKd(E*EossA*}<L
zheRF>z?Wo*XNFce>7$papNUe>_E`}}u4|Gy854maopn$`(H{jr#udCh?ZP`_0w>Z|
za*9r^P#!yc<nH<vzAa--4RmBI@IyE)-P8)q+(kDBGFoxpG4j+Lgx*3QBx{eOA7hSm
z3}3j!5x4gFm1tubBsVyJfb2M}3Aspjg!MTu6TNgM3p|OlA6VI%m!--&t9vtktfz;?
z<N0wnoSy~sKN>7F(w_Z_y?T-8$fTWF1l*nIy(jS*(@Ol4B=t~;OJP)ItrRmKt>!1x
zR^5qqiTlsY^j{WJ3{*i99OGH2jv)7Q65_LF#$AK(_$<&OxC938EM`*=KP?PXYSNiu
z_=@w3_{xp!0)C2>EX|E4msrK#>do`~1%Hs#kcL*u=SO>HVAMZ{vp64&pGDxHEP{2b
z2rPAl02~=?{bWkftdh|X4}{9B8W|U*Ve}{>-y*2d%S3>PHfPEzFN;Y>8of~Wm@r+H
zCX%3*j3Ve+r}DLjpo!<6vqWw!fuP>N8K-dqUnWF(vMyNcD&&<Kz|qVZlQnx+bLbSg
z1Q`zkMvcMp{tXQIz~ZZwe!p^<w<6^NZ&sc$h%;ib&dDrCXtliSA9Lq7oCo8p9k#oc
zlz=xxTbkqBXO9)%4j5qMuPk5`a%jQ>O|ivR;WCw!|HxktZGLJg&`Z~-kcHa^Ginxq
zjp@bvOT)Jia|$SL$uT<Uix2-Ou2$6JP7q111l8n&ArRe0i_THev70Dy&nzmCHh+ch
z+4sThR;dN7#oXdA3lr)J|ANcwc&KxJ;WHL%CT9ap@IgDMW(7t68F6F;+1%G~4|VY6
z-CHV03gRu$%V9@J_#JGxxc5&MLkg|J!qUh<diFg=k*Tt{P`ghR31j}i`AS@}rr`xA
z8Yeco?muS?%vfO?F(_wzVMGPSZ=avBK-K~sZ>G4oK6q~s1IT;3qb9uENp2=k-Eg^o
z*xFgjaS-XXJ%3dT$I|SATh$M&G=SG77o#z=sO7;UcXL%`DSDAlK~n43YRvsX0%jGV
z$s8tZul#&6cyrK<OHO(;pQJ-6g}7~-t5!we6Uvi=atO|{%%wm1`W$*@{7zhQ^CQv=
z!Qer`o%o1=D!89tUF{7cVgW#!*F?+;SE>;`1?vspi-n$~TFa^OBQF!n<mo6Zy^--;
z%mV*K|ER};I@+?}!!L_yYRgYp?2sx7TyUFi`_!pE)K5u21{_KF&X-$6t*kxM35sXa
zh=_{YQ#?dMrI1Ni2*I~WHU%hsm2zqyISgRG^Ko?9MU@szG@mVPJR{TM;0?{Yasl&(
z3B@D98w%nh<^m9H9hfhH(CJ_toVX{99wsRDL<Gl5oY5rE#X&|p$E$xWH#TJfkqY`z
zA^LrE5iADcvYT_7TgGTH4=ZOe@`7PJ@4BAng?#S+<0kkzVp%hKm1CNO^Wd3vf}#{T
z&IM_i8&83hWRuxTpv+)Yc^vA7KHv|-ydhM~y;TW@rWT^KJL4KGXq#(T^h<JEe2bcx
zgY3<TC@~y&_2QXPRK>GCnLxW&kk<RBT_!&~8Y^ASXC4b9Z->$|6jxl>ZSCvM<d*|$
zgqAG+!LeB|fTFl2CJT~b3dA0oipc_=?u{SXeX|czh087tvZ_5KYhSGn#m@3DL{COH
z=M<2box81wI1)-gZAU{SA+OqVYHG#Fn3kqa`z^sDw6G^b*Hma_-6N!sa;`i6!o%R%
zah=aPQ;<eZZEOn0OFhVFw)`l$@9-f(bs*Y(a7WwNE4>#4OKsid00OS;nYlT0WnQR^
zcG&*%zs4teKiRCKG~9wZ;l$>eL@=Dm53{t;xKJ(9LTYUBYn{ybR8%^dbh!KqV9ZFX
z#osssbJ7Ud9mhAU07(53z-RvP3V2qu37Hipva~8>QP|{d78L^zuu}yrWorAXtdPQ+
zPKhYSlVAa#I)_7@x{2wxWW>(~h+C#W4H(Hpe{^aU{&5}*F<1Lprrbt&-7TdDh7M~m
z;x6ULL*XK61^K3%OLYD{Xjv!~m+JqJ@RZ!PmRP682wu#HRI2W~Vy>^%Kbxdg#|u3E
zUy}t`OzihK`az9ATx`Rde<U=(c!+I5OQlO(jRpU3W#}m3xSVV~b}L-^lJ=8N_s(%)
z6AzHHs`GVD2#{GMVqf?OO~+XzN_DVai97Vz3-d{#b6mWJAbgm`DK@XnU|@NyzhfH^
zgT{~ze@&?xCpRkJs8w_GaN$w+l4l**+v0>P3yq3g+kQfzkJJs4Me@}iprJp-qfF9K
z{oZ3X+?}SGi7O{!GiuFg3R7K3`MeU5)cG|Dy`L6foG(Ul&NhavycM|li7frqBg)@p
z>>F&D!>n`Fl;bgP^{~&GA>%Rc_N835VfMbB{l5k)5;+_`%bFC#YhyA(1LmHgK?z^1
zRK0&DQUWwsh1i|yL<;YI6`=?_ibY^F`p8zozAW@(2<A0Ih#h{GgJY=Hg>BCXHw%}4
z`^~(jKICC~VbarM9imZi73D&7cmb%wl{|yFxvBMxLXNV5=r7cIDzIv8I`|Se+~l|;
zxJk#<>eMC+V1wJN0tVb@v6U}+9AQ-_MXlr}|3|xu;Wz!p7#dymkN2eaZaJ?wg{*$_
zVjzTaT{FxWmAP(rDjE+kZff}D=@%AXFDEtVWWm;Y0SIvsEIHh&7v(XL2$phpYC0cX
z64p$rZ?>^;B*_vCy?5Xh2k25DVvBLa5Gd4zT}lCq`#A>gMbHb3DE`XVlnZp!gy7<9
z5>AnzBhQ#CzS^R<OI#*H4mPrT@7U}vi_2YN)94Eyc!n=jPF6n&RJXpN($xluG6~go
zScMbn_8{3(SRJG#;x&V-pqp?=ss4^SSry#p{<G~eETOkL8m^?hPkD5gul)X^jJF%%
zqSr6yK-J2h=|3%$V3BCgw4tCN#ZYELYqqs;y*5d}j@|=4;L9X5wEwIRf4^t&50*ue
zXNn<AddBG-E~7JNb?4#E6ib)?I&@e#*jxd$!z2z?Md8rNNT*1ZmYWyyJ={tSSIWBg
z-TO*&RDPJ8pL-F6y}c9pR(CDun=!oI9It|eMOb#MomxQO>=w^Fg6_pmfFeZjk6e(Q
z0&4Y?rL#{`T6O0#WPLKWC{jgy?)_$8{s{%WNvOF6dLM0Cv5bkhG)XckTQ!{t%w7Rt
zN8?4tb**LM1QB|68|n`V!MKjM-wv#0Qc_kJnnS#0m~bx0#CRZ{ivicP%o^1gC1kUm
zEcX#?AcY`$OGZ=V{T2Q^7vSga5j~(^#Fyp#w(j5dhoMSSJw7IunaF8EBaZGZM4ET)
zfMSRFvFpmLHIC95hc5c<=4yzItqvE?hxaAD$`_)3(;Jn?lp0Xequ?DJ@>{+pO>g$O
z`dN`R4r*#H7o<2A_1?+0sD6K!1W3L(q94UK8pDnS%s&>ZRG(#y$p#+a#Ap?ifc&Cw
zCk{xX91B}ZLm<%*K3_QED^TlGC7vvLgJtK7W%Um<7Y?s4;U4iG#Iv2Sks2Lt{i58G
zf`zJ^2Hk6Qnl5prXZQdVMhceX>|MxTQS`BQ4q`DD*us&Tsw~N+Tn_~44*ESyFi)>9
zm^D#JvI_GZ99_{o{|CtZFDvq2kW2<i=oXEb2uQ!C9U^>~MpQQ9_f&_ld1z_SSuUnU
zU_Lm}TYX3C{5&FBNMf83-LTR3?Yhr@x-3oZ^jLVh3e3lB3vs_k3fMVs3glgEnO<43
za76!6kZN|D-?+d+>N;**L?dsy>9~|yooZ*C%KI_tDyRr4BIcrq7&|OZvbcUv{utP%
z?@X%9)=KTMCs>S0DAtYK`Vu3N%qvyj9Q`?0Lr}sRP~eCJ+n4M0)OvAD^3Uf##}Xbu
z!)G2&!hmMdRMX<j+K+(ZHc323>?9O8qFy=1|DLy<#3m$)#UP1I61Kbf;DnS@`{<>L
z!t~DG$)Sgc5Z^C->zD~$Q&CU1L`YfVp1T7;L8cP(!#XO!+iY{mP29J!>>k$MLB;b|
z?V7f@(|n6Y2fWK~AMsVfDa%$zw<V1D0wLeO6VGP>+Ovi&mDhxFgRppKT`}}_i*c#d
zRl^s-c*kU%F~eR4=J%kGn2^z*K&J|8uI9aHFr;EE$!;bO*g%l~5B>1v>K<bfUlW`I
zF?S_;vUEcHgV=QZEY%ic0{r#mo!+Yd=Nm~y8u~_3?gZ*qoqXk0uE%Mj-V*dE+8rxe
z(0q!X5io}><uT8%Mo7^J=!wX4pq@<uiTx3c6HUsF#rf)9TO_9M_Xr{^L*>PV%BkR4
zZ$Yb*R`4+A(w<s_mRN>@Gx3YB*W&b>ss`5?IeK<52>jA*1WDO%KceT1x46wJ5WI_!
z)ZaF_Grbq3)Z%=`t*h9K0t+8gJP9%d#R}df<BiyJNEr9iq`|i~Md`?54cD87b+N*@
zan|1oAh1d?zUitx(@upAUW=-%Fs`2BJlMmC+80|HQr(tEZpRY{FTBzM#jb|5l$hsc
z^YDjIO%&B`6mlE_^(+ymk*)#9=^S%`e#pgeGo>dEEqWs7cM=as52Gc;G=Bqml>)%T
zwlq|Ov?U3E9~VG~t<=scu8B)2uS=)Tvsgerl@VwPk1SAjlZ@KJCB*LQ%GsO!zg}@j
zi}1%FVmu0y9|zo0J7c3hb{F|BVetX181xRtvfKu*-4WNG@LhDYlX1rjKF;|jSRf?V
z*Vi4L6bLXTqS#_AE(sr%LN4o83>hch=EN;lI}Hj6p{#4L236gl;on*qD1GscT8@pK
zr8Tnt)m|;Qb)PP2;+!E};1r(Gybn$<vd&;k%TM2}>QBBXy3aXo%`>;Dqs_5}ch)mj
zdoGcg6dAmUckrU2M)r9EGAVA~MFQ}wvxGWJI9u?^!Pz$yb`vsCK}M+n?wQqaLLfwh
zeT6ywJGdQR_BVe|#}^VCdAky_mer%262Z0U$&bW^&0P+YColL^VMY#LXo6)ditAm@
z@k1Kn@HaP6WrCq3a(8FRfIX&T0=MK1=sTZ1O5w7ouP>=%oU#$wQX;|026M0b%yhE~
zUW!JvmTSB<PPS=R#ec4;|FITdj7#J=p--@qFGwmDm50TY-GC?RYcl-4mQKDC{^A@?
zDb?J^EtaBDb{iAx-z!TCEviA(E&qw>MArMRNf&2U92vN19ZKCemc{WY&ZGTNm=$x-
zD`rsf+@h@>Iiusf0O5)On?vJl4THJvc4+Nc%L5Mz>37NbVPw2>L1iySq_2xKDiAYB
zAxUu+j{}z4hQO(7v@mc(7l`Fcc0J;B>vF#&U1Q6H26(IXE<_0n--Z3r>{b>@b+$J=
z`J0fsK>Nj~DBXyDrWA}%^Fle9Ln|dZ*EhYC@e`@Tq{Vl~*;Oyfky$$;w(zD}bqG*-
zVA~$UqbkU9y<9qc#!}F<<Nt^Y`Zpqig^xXy0d+bd%9eg&OE-UI42BmeeIz}z#SDsq
zU-?}aBNfel;R=n3u1D}-Pfo$sXr$|^@|A#7fQ^hqDI1d%RaX;$H+5>-?-vGP4pq=_
zRT20xT0c8jt6h(i8UI@2#k*gyt+*H=6#W|*h1)Sg)Vf&wR&~!PTHQwAy7d&V{GKlD
zvGEKLsfFDv=DNgMG(Ezs>uA3S^Fu?WJ5U@bFdWv+z`65^q}f*DQfSK}M1FjHeRIJK
z1(WP(0{j^CC7w)}=I9s(oQ%@jr~BrN>KFn-c&J>pWQi+0h|Wq`9Z;Sg(4l4mb?Jmk
zp_v$le(XUJQA*8z`tRoce|%C&CP~MuJ*a<G2j+qOe1<p%e5WGkXOLB32*~3J;~1up
zLMR>(JMQUOu*Z|CzBPE->&d9|9sY~Q2t-i!b{$s40D@Gbtk`cT1x+e?pcXRDN|W|n
zBpF&tG1i<Q_@x+21fIIrZ5_0}Qi$CP!YjTQauGO!4D|Gq&sDKvZPbIYx9hSFG;(gu
z2|`9(xK<*I0vEHo{;!k6?X;qriKuLp?kr$CyVS83>!$mrpdZp1+8_iZ(wjEI4xwe~
zd5-8Lm)dcq+>_q;h^0T?u!Hw;B~fN6y*X6$Hi<s$Ak@0Q&6`j@UgehCc?VUUOV?_5
zeJYbYaAo_~yKU=|L0~&Bf;Ae5l9<sA)c`tVn>C?(aDTy@Gi%I9Hx9f?`Z^>V;%Ew@
z0@gp1^S_S0(K-5mKXXl_s5Dr}X8n9!)=u>E<NKOnaN)zlbFKOcpBzvzJ<LKWH*`O-
zCp3fVhws?KD0+ebwsn>_!(mqv?%NM!afRDj4YMtMG<XxNm7>lqg}Vjqa(zQ6((ZG*
zK(^@dn~9B$`r_NQu8g^iz>J(fRr_iG9Gv&V3lE8QH&C^v;r1$oK>k8-jBac~e@|jc
zZ)?5&CHALiIsC}epoMG1tzAO*z8OZG-TGE>TWpL<YnTH*83_cJ<VV3NcGAZyg^!#9
z(#|P<94SCl%xub<gPtkh4eyB~W4*i;ezb9D61Jf!s}ZtN+++TVxLpT<_^p11Ye*|_
zc^t|8xDk)(a|dV9i_&nm_QeYZa*S~DFdX~rK>8@EboR#FcffI!CSSTbH$3F>mpbOs
z-h3bZwK;NDWmQUWsAZO@$o%^X7n59AIZodlB`~$+ZZdN(C`KCJtK;7utsjv~C=-eF
zyZZiuUH<cgKO@EA-LIK8jiRkgEK68;>%)0b=5=-=LqX_j2#9^mV+wX*VT2_b&qh4<
zF2NQjOJ_KjQamO{0`$?<yeXXX3x44#boqpqx0p^L@IaDl=W2#r+NjNU2hgGE!#(`V
z5vNGqXKlhJ7mGlSRV~ZFJ=nR_ypm}pP2#Sp%bn+%rmJga$gMRXlF8c#uT#P?YaZ0l
zs}*u~$TcwBFTUiQfm&Y@?iA?b@z`#S6z8vnJLri=^J&53-2dZK`d^|gR>m-Rv$1;0
zLU)^mQ1O^*wJda*zk+(hMORXqw@=TRb7LCzan#csVpWeSC=5+@or^A-ZMHmXC05J_
z!<AbeUPoj$YIpJe>i0LmT-^?kDJj9+*$2-(tOk5J{e|Q_z(aci(0cF2<25ASf4zT!
zaiKc5lLF=amj18OlK;AvEZ9-}xoNNfRq7fs0D!~<1^@$?`i#LP<NjlCJ_*!B`S85w
zr*Iq49h%&eNOgkWnxu!6WL6oW7$)+Uedqsr<Avj)a?FoP(}x%8EG_(C3!VGiRUOJe
z4*+J4W<qpIpmaH`vM*NiiG6sHR=6C$`X6&8tVWajoOTOeT$S<{p1qxP-n4@Mwa@?8
zi>#oALLmr7w*4iV&xf^27fuJf(yS+Fn0OdoPd{hEU%XF-!Lgu>kk*^O{p}Z-SS7e6
z{{HP*5TuC#N%CT0<Wi1m|NH`B)9Ot;es^34lsd>Sv;cqpY#2bGAVA$aOdb7OfdY?j
zldLL>e%}7b%2?^t41vAl-+vU4&^5&>Vn`4B&%-gzdqFw#+6Rr7?u7?#&nq&=vswOo
z)Sr<y)oaMHp3eR(gsT*>3=Dh;k#_Yzzx1>yhU<BAkf!QCh}s3GeS?*y1M>#!N^Y=?
zY12yMd0W{ud-N;wzkfAJoRj@2`UdQ!<D?gb?$IRCuwM9|oiH~m|MN9)y#If`Xlt<7
zTubBm*-EQk-kpD5ttL9uhZbcW?S*16?(sl;9i+lg8%MqRgJfR3P8+yrRqNA`qn&t>
zq4w{u-=K_)#cxplqH*e^qjz_z&TlqXFYlipRH=zB3{q!);m8CjzAxc?brVD3faM8*
zDesQ<Z*<pNcc|_CL77M}0wYk?Brm=`JKKN0c6g{DJci+dLxevYKCms+?@t=QHkA~I
zPgYOT#-i=>_d6g!+9Z!1d2b@ZRq*pZ=TpKt6m}9$E&JV>sCOd~*ddR?luB^_{xvh%
zKp6V(H#)!z1NUYTh#Lyw6L;i<vm}Xvb8@(lxeQl6sv~Xi3!IxX`xCuA5m>0g0vLqx
z&EN1-q;;1=pP(`2vHkP@BVAcS1Blk-zm<_N*hQuagK9B*GDI;FoCpoN91l_-^Q`=l
zDX`pUMd9I?xaHc|9HarBRXmKnb;T?)jswjfRc@_|&cOW|0t_<(67~_G-{ZEL)&fu5
z#77|oyUClp<U0&?nisMM|AUQn*SHADNBfjFji(r0<|&^qUpQ%geM;jMyLx?|?mmtx
zUQ0t>k+m|Co_bpP=xDcb4)d@yhT(dhemHJ0t@_1N66X34Wlg+l;XrNRP>uh-HVfK2
zM})s?BTU-3v@{t-G{QN;)ZTfTNm6(mB$nC+f4zWVuF)t2XQek9jX^G~uQ?gZfDdH@
zsnHKyefcr=lOZtg6@X%IjZ4pDs-m83%CQK!PNNv*s(Vp_Fr8TZSD89eXjl_e&^R;~
z;RH0!>&27=_=&LCy$?s*p}1J&9Bi$vY38o}4fRBmhT1d-mNv_4B9hRsL=Ze#2VrbD
z&mfK}nnJ}zijBisUW@ndpY7tK*`CB!uhDTIaV3JI`$g+YD#^)8L&$jpk5!%N1~Eg6
z#tGmNrY3e7ubE#h2F$Z%t^o;ZHN$Dk9JUdCU9-w~HIub~_VdNzr>UqywLOf-=$r6U
zX$!dQ>@n>UZY(VPraaBRf3_x^rn1n0Pq4xnRX7e2XmQ;8P2}1+Q^!hy%)!80pbq2v
z_i)}2M!VPqR3ZuVAVh~PDsq7bK$Hs|3J;h(JGvB4JuUdnDl{*eBo-@d3qd4M07awQ
z9+`SeA+pdrJ;Q(xx165nt>D*?V*Cb3j1vF-wN;DJnQg!cM<JX5CI!0@uFM^Si#F`)
z3a3#m$Z_n>E;&T+NP}>)Z}kC{N5|_Lka~6({MuoKrtfU=dWOI?zHtT?+fRKX8#C-9
zFq~w8Dq&tk#uNHtD%J)@fz~v9E_U0|*=`i(ql?r?3c0VWYaN|#G(=#CEP^c35>URC
zUc`;PzuA|g4rNks+2sJ7^%gcxCC)1cNy}4>7anni=d@@iurIbslY#5xT8i#VLm2R5
zXUD%nJvUk~+#C8p1R6mDxxwo9N}p<hkslCjRLZy-HVm2XBOve`h5u&+*c5K7QlWh}
znbckGLE*j(dGohsyW%z*wGb{vn{crK^d8la_<njO9MLh^yxnekQA7%$>xj`^I~l(%
z4lgi&wRkd0&(*OMzA235O;4|ws1Gm!ht1Vhh(@B72VM6okVzCmN>97d&f(_BQ_-7_
zfq-&;aGg;;vikk&T=C)tg;84non2!b4wTVhSZ0!^(Gl2zIV*f#>iOnR-0?sUAI9k;
zh|`XMm<$FR-3I}{V`M<*qs$E*U;=-N=y(jBLhKHvWhpyl!$sYZ0hC!7HlA!f0(n>{
z1dzQ4id{6Q^46dazwCa|cet^i%nM}%YZHkyfVji1_y_;y1v|B30|^YvaAd>|K!N5#
z?M%r_2K*qLx>MuGhU%ylT9twbW+PqhrY4j^JYS?TF2}z|ECwc;j4kRu%>-PCLwfj1
zLybGE|9$+jOv_@x51&KCe5SVx@<vGivts?31%7SywGPMuNe+LH%6kTIYIn@4V8ekj
zNb~#L^>q<WYQcXT+r?5J@2Wn~<%77w>mU=;qU145q&)Qfco!@T^r*$({<3Uqu0la;
z95sM-dVm!enGW~8s60rkaGhy!0`V1*Kgk@9${*i0&vbV5y)VU>9|GF(?jT;tdjHOc
z2VY|+HNjT~lA1jtQPCd0o$XA}=y-Vhlh6?Kr5NKtec@vQbWtN1tc_sw83iSTm*@wu
zeYI5c(n{zTfe5VVB6sHf#}^lYZt9FQfxsR2VI=^any6e&M}N(@*wkjkZ4&j1rf#tV
zWcKHUW`cgNv~+$Tvoppf-6K7~M8vuYY1Vtix!iF`87f*hCE}YLXRZx8!<>w_fQjc+
zTzkEIe))L4(p}U=$PxhC8t>KTaKXOmf!r<LBOAxhXm+$E4<MK@AA$uwAFd$rwlf|3
z2@wUSDwc6^v>8Y49almGgU?TWMEVIYvFizfy-H$@zJm^D-WUQ_B?4oa6*E$H9@7k8
zWOvwo|GMeP2r<XHl>BBX1Xk#yKx<WN&qW{XPmSH(Pzrll&EiBi#zWu&vI7%1U5o)e
zhEqE3ryLi*`A1!$mZn7Lr&W>A%69ot0*Lw?4Q1-LIMxU=X9@2nngy*v9e7fgj)P1g
zPBV<)NzlQu(OWY@rdA_aZsM0XnsdsFaxNWL^)&>W#!*(bhTpiDqGEi*d}xdFip%6R
z|HTv5B&&|1j(H*s5y6y0yC<C)cdFhjs`it8*ofCj{G(3&=Xwpr#>f%^A3cJbfa`H`
zDehQg%SB8XNBa!@5kne92f87o+aQFu^&|Q(@<|FIO*`*kEyw+r`;|dF2WcyyYgyZ!
z2#r7)MO^M1aBz0o2;r-z-A#kx_%rP{ptPQcUKQ(py$kP|3vtFY1nqIysj{ZZcsU91
zo0RaazOjkG_y!nQBE|f6w?|L{#0#R0DW$Z+<goPY4yRy_GzsP=^w+=JCZJ>ciGpW1
zClWSJo5}l`{zy495hm5dE%AgxgEvG0HMs;md$6vT=TK(M_;#!f<x;;5Lg5|=$ikxy
zavCo8R^1EK@I=d~efK0m;V3$_!S@UT9OZbu0m*N^_q*<bfV?OG+7QuT274bT&j(^l
ziKr+!iUpY()FBAXV9Z^7Y+3y5qf_*X6SVZ%W0+c7Q0v;lsCNuK)h{O6=&#twHF@DS
zS4UFIeaXqyn(u$v+j9c`BHARWrZUraKPj#Xg|XvR3D^5AYmW_^2MUsKzW3jC`dq3u
z{}V(R?i7RsL{gE6Ob}M<&RxU*(wwayj)7|kdWzfil}7LFFMIh2RC<?2z~^|Y2BfDg
zLs&vvEIH^Np}wL|;Q&t>Dq*c`tzMd_7Nu|BacRS54s4o=fJ}6r6DmhkFA9RdM2O<h
zyOvPJ&^-t^zQoazzrQT3vJbkFLAXKJ$!n~dr|0(I{sy23UyK~+u}CiV6orRo)e$d<
zFfwg$&lWPN?}jBXNXKld&<Otw2+YN6?@cZEdm2B$36pd=k#n^+Y*JCIt14?h<ut2U
zJb8nETs5#5kdW}2?FZg}4fZTJ7^rCAXVHgU-#Wp?ca$B~1J*I_uP%gZj7;NMM9V|D
z*uy!CtRUC#tle<(mJnE!>Hpq%cJxSY`!r?lh$e&agS+X|(YNLr>sz9nDd`(mqH;MF
zCHo*gfuI$+aZv=#P)dHapVs&cl4@KmE@Wx;6kR=@s^6;0yjRUKDz6JWtx;bdgzLDI
z6hFFWG(0~vUvH|vx&NRB@cF|X0fV0?$9&h{(>OpagDuaqsgTB22jDSp)f2{&Y{-m(
zy8dST)&YRoX@v!jLu`42FMB8F0m}bnf#?6SChiS?-6ZJ}$}(?y0HP_I!JA76iFCC>
zrbU2<Xsthta)<?Z6=4GWnvlUY$4x8)-Mwd+Sfsivx0`)obdeyyM<hVpTilHZ0#?N(
zr@Gydr_~}2)KK$a-<l}FH!T(GbR%e2!j=QRN+F<96BOgnKoyZoue$-Q(ceS_#_NfY
z?P3l+6r<3vc98@~CT{EzmCiN!33J5JY{v&<>?PG;ppxs`<=F!ZP=VYfxIIxNJOIwS
za-egP)vG5_SM_;v-uOcsQ=_MJEcL-XQe1Pm{WuBDSMVf@hP0U8?x0#?rl?feH27|&
zTalVd-=9@>AaxeNzn=eRmH9{->O;kpV{@fRyWrf;4z0z?t0KH1WHBIqwf|Mle{VZ*
zZmFP5wq~g)bD(*mZ6MF*9_u_aIfdcp<hLZK9DmMbF1y6*x_+mW675J}p30W#5Y+~;
z+Sf-vES|`C@nl?hvp=b$Z43VnIsBz>Trw-=m;%B4<geldkc_H=v5d0u^~0N2YT?j*
zz<^VNu@Zc^#heP2E>S$blc4Q+sFL<_bBM*={=86p=N8qrhu9VulH`Xq=eH_dNM7kr
zLjA@`Lkr_ohoP2`7z(j$j`SfU`&_j;kB}-v6TAK`)Or*<_F5B#m`W3!mhIiXD%ncF
z>cdHGeg=Lz`6}>QXz&@QdhDX-+XHFUYz7L04^D>(=}IZR05CGnFBb@IOI0Z#74vc(
zK6QRNj^0uaegLxI#H|yB8{a`XKFzb{Dzb00FN1smL)4bfFQBPXm}kg6BpKYCeFTiL
za$wY#+PSsM>d<3I)E@mQ)Q!lGt~eIol)jA5qAFTNHgIFUvi*h~H%=1H!8s;D(s0V<
zY8B*EUd0x+d0_X49Gu8V@Ya`a;YgbQN5RS-8W0)WEQ=k2v8z30;+i?MPxs^6$A52-
zKkpzbeHbLrlSG|UU*Yxusgtp;Nxtr7ND_$8rP&C?Zt&&R@s@f%o(j0DP-jE!(M59W
zYfO*E>Ch<T?KQqEjOFi@g1o~ZDQ>}Ymdk|{o%We(3Os*~d`zx0fc{L^QT-WA(6nA4
z^m3BJhXs$6#v;xzJSEJ2$Cs`Il&fvs>;mch39XneL|J>@JxHsA%%3au9zYgdTa&vx
z?%H1v+V;hp0}}k&iWHM$wSv+v-2qB9y$FSr>G@vQ1aXck%!QhA=V~Kg-cFSdVMoS(
zRHc1@LurCmc*(+UjRPSJ;Fz@Kn2U$@qMK6YeT)&*)Aeu!IbwP!K^ArQGgM@E<A|y^
z<J|YYFy>Cgd}aE+<`wE!Z1y3By=N*!@%7QpunwbRX1J}u+Lsu+=>Delhg2M?ktIWv
zYSazG(Vvu<$Zokw$jLB29mpnzmH2*x$4zOww+CT6M&@JxWC1*&IR4gzVuxmRlegS&
z>b)rUpOioVe712GkFlr<_dg^lg?#xgL>$Sd`ww36M=ceJlG3I-5Blvi%FHZrC95!a
zj0<4McB4?)`~7tkoGyrW?sx2Vvs#qMenIpYy@S#_^!hf?AALnP-;Y9|b3}gpc@BwV
z72%zSWi~2=4*V1ix~?zeTS<jce+eXGseHvHc0r6-;!<>WC57e<Xkru>xJcYRh)fr`
zLD%;?-bHM~mJ2SMy4TR1DXTjWYKE<4e$^6vnfVj0G(AvUor1nW5FD%WRagKe0k#T}
zc7525q{ftiG1R=A{_wa=L;$H2-xYrm&-<3@31(f=Z@LPz60pBnTzQN>fn?3YJUNnT
z1aXM5(!<-JEExr{$TM{<jZ2~J=zgrOd|7BJcx?8r@=J0Ui};t{-|9b!^+*bhT-;d_
zJpo@$9;T-`$@XqR!u5NrR@g!<giLbx$zJT|wM}6@JSw0H3Mrx?MOPB0E;>x>O<Zqb
z$VRba!f0eQ4)+L^5xRtCz`uw+hK+cy+Cp@(e#<T-o1m$YsJdh$J}ch!@1^`_?M9Lu
zFryu1%-p>)_zNxNe;k0wMdfLTlSvW#z{`aPBaH0!LWC8zRjc3D0rw4%z-XMT@*|j$
zwpyy@2|GA3kH0|7c*K@4gDvq!mYMjLFT_B_dIZ4D@sOf*%2oecfq~)&1~lBnq!fRU
z4CCQO0=Up$ja}?$nOK_*BG}^NgOhEwC#Pxnz<hP$nay2CF&cqx6+__SZP{Z>7Wxiq
z;(qY^F4TIhXyLxZe!un_HrwB{lfX=@*$!k_)~TgH1U^0YPy2X)Bk8$}BAYe2=61!H
zc9cMDVW+kRI#$G#GK9b5mf94Tk<FE%bO_;v1}^~1=rmd9w+tmL&T;qvRvT;5OlGTS
zTyu^KWCV!~*Q*0-g>@QUgs_?_c8(zU43K^*HKLYZV4Zjta|`0zjJ3-xBiGdcxIgqq
z|048}fL0`>REfrtMd<bPw+UEJ)Q0VU$`Qlh{azl6=UY8d;!}(y(yET^e2qL(_g5@w
z;slcLX6le@pxxGGZBC2|#A}U8n4TL&lqZ8+cIyL{mPC3cWIhZpe7I8i0hSN;{YOUT
z+_3yzK&vlB6GXj@v7|%x#={K%Kv3`@ti<V(XP?OMzh3p9xAi_N29i+JWzu4_@f`W{
z!Hqs%?Ig&B{C$VmlLI?L{0^0${eYp6ToWrP(;5)4#QLphSlC`<DW$rJ;Pf{Q+8NTw
zvsl;Bnz;ESzg4>i3LjIrtXYQHo25|wnFq_I6ieAcP^uPLH7!;zPaA<$+rQ)IcNfX+
z=O!g5TCf-PEPj8nDIa&sD-a43WB1_=0f&h^0edT?#(qV)FLB{X7Q#Rd#d)C1aB=W?
zKQ(BPql(4Xoond=5`j_y!(j&&UrQbzSY-;b@}jor9%iv>PMX*Ii+5z;^G%YVZvA?y
zoo}i0`hCkG@&-8m^kB@Nqf&avUE-21O5+Ib)xKCpP3s2FrKjlzZMHEVAGyjO265d)
z%<+e@JjWP|-K&B?5m_~l^jny+{e(HRuGidxWN&1yVeNS`vS_qJCC@0BnPYK6;i(}x
z)z^!$qAdpbwp#Z{#7%*<c}R32kSJ^FLL=DtZlmUxcZ_oH!k*z5A6?-K8xXxRJfSOF
z--how&>xXRBe@RFm8UAu6=s2=BY*S%(e>3~Rc+hbfFK)?ln?>w?vQR#I+c<xK|w;g
zTS_IQTS8DN38gy(1O%0kE<x$;%{Msbp18l~yMOucAZ*rJbIm!%JKiwL32-;fUA)LX
z@wr0rHHPi4gH5{dHjVIlehcrNLJ3qpr~hD_GR;hAElyInFL>>^ght;2wlDsv6Rj9~
zSrPWkrSbuINq2bvQSN>w_dnic?Z=Hc3V1pBf{0Y98`z@HpHX#t;_BR@HIZGP@KhKy
z=-Q0?_|}>$Sawt#3G~K@IYvy@R<T&#+-S}3{fBoJQPyeLXpHNtpU(ZLNdr3uM?4hM
zfYVge*f9L_pK=`<J>!I5^a5XFjRccCPN<WVRu8dk^gH65(wbWqlzGldXBgwqMn#o)
zV|<)*Ifh{E(lIBy=k78gql;fQ<ac-PF6g+fCVJN5iSJ#FcOJB$<-6pm3e(&kPj%Q|
zR0(;ouG|VMS+b8>IVf#fcU}lS5?d-!b-WQp&VQ;QaP-^wdYMW7jCe0!;y<hYRLa{L
zm0NqSeTy)5-QL4R2%+%N<)Z*LHiBq~jxigJjV?bRkL7s)of7L%PJDn1J)M%m*@0A(
ze*fZnqi@|w9GSDE!*ub>Y444xI)3X1@c~2{XiCypEU1jx=<o%CFc4n&Lk_YVN*L<T
zWi@bUYnrg^O@WR?Zt2E?1*?Pe{k03zXiLeHK)|3K9T!T+_67>*SVGHAUaCtHMnysm
zHC7Qx@ZI2qE9F-8tny4W$^a@VDs9oE{*|DE8N{^N9twM63`4c{_OOY`l0fz2)MT6%
z&Lwp}i^Z$=j9H9>-uYm?<uVzO(OCS9EL)9w^VJtCRMYWl$@G^OoYjvXA;TH7dqTq(
zi;G$R^H=}ZCH(P4NL(}W?1Zt5^T8O@M1~J^PVQQDL?$r2MlnZ`M)-lAE<%ylv>63L
z?n9)sZEpN|^&TqH2{>M?f87lDO*BDR6Ls!c>r-dyr_rs?C@R(k{`yb^9%^+`IMs=M
ziar&1@Vb#-9X(TU{Qb3FiKZR_78R*)b@r%mXsg%S(9k6Jofmr+U0>IGHz1npd`|>_
zyq~wm8p27E0|h+Mh~T=Xs{vNKC0aE%!Dn*R{F|(S*@(g?v@CqJCVxK~4Ky>A8RQwJ
z-IH@}%nau;lSvQCWv(}e{m-8v<=Z@#?`Qn^C_{KrSzc31`Y34VP1hfBpPcwT1#I(k
z&(o#WYQ|zUtdJKdr-SoXhq3%N3H1aSuu8lkSc4`jCVqrZiH3<FfSq%KIW;~&2<@%m
z<{kOyzb^OUW;{dC@X&`y0pMwtFMG-Z+*!>(7EfTZ5=!Jlgu<3$JPYk)<MZqk|1D=G
zUMXvHwSb;vFQn_lUrUVc5~?<r+|!C|-+!K2&P`MnQXqu4$y~ZyPM~1Yl(W}8-15ig
zW)h*Yl$cd*!th!d|6a>xyjqChyNh*t@z-1?3?~Whe0xj#p9L%(ay5XRL5~AQ04gLn
zglZ-f_b$HK&Vi<3I`0|0gqJA=m-hFPC&)y<S3{8LQf2?=^S}75omZuwVN}a%MTK7T
zXJtXT_=a={LG#Y#0V;9-zaRd^{}ji9M<o91(d1tj7cc#cDS##oF;&D%YQAfg9SoJV
zG?tt&s<`{+X^XSM%fCN38@)9ufQ_s*s%ZGH%Ynbr1I>K{DUU_e9<@bD{GY#4P8?O-
zf0J@3?>|=!uWH~XT{a;`+yDJpFzB;>7n;YL8I1Ply$uX!zA%@rbzXYVE>y&MM-dIc
z$82b4?}GV7q36y6%_mnh-+VnkJD^^hsEGo*$=(wFtSBX;=po<lE8;*oU-MyL%ud9K
z-EFt|`1frKEL5MFZIdS!`_R7_er&BJ|HsA=?uGuJYuvm&Q!(&UBlt4zL*(gEC8YI5
zk5Nl_$pL)<oMy<p#7o42<xL^2`&*Gd|MC9#^A`4NtrL5{zZdA5_;QBi=gRZ?m+TbW
z9D;J?D<Jv5pf1%R14BWkg9(uJ7W<l2<s3Nc#eVaWmiAx!?fS>Z|L2Mw>1G^-ms6}W
zu?l`v-T&*M%3N*U!5pAfRca;+1kT}wDA?xL5Vw!j_jxn9?1x{Oh~fPOWrotV?}gtF
z=?GFvcP^+Xpgev!-RK(+HYO&w2IrM%v<NkNLls;_EBXI^;{U9rKktGt8mQU|Aj{y6
zVesrXEt~j<>sIgA8o4>@GC1`49sz{Rer+zys!Bbd%Ux}@k1H>DcS+QpTG{c(@$@;8
zj75wCU4S)kSq=7~!LutXhkxJo|JvySuPK^Bmj&L^w(!)1KsfpAXWz-h9M6N#*Vw@O
zEJMOOQSx+?UO!9VVVvv4SL~2dur`-W;52vv;>J5L(P4B){S7$k!_AqNd*JTNrkTS4
zJg=<P5+jg@%Ur^2{H5jFn^;_E-qFK_b{27UdNJkfyW#ejkf__L+_g65ES022mzDi;
z*Fy*ZC;a_6QzGnJon^#3?aMtcuHTFVTb$dF9-R-(P(*J5D2)cw92!~cfuM8?rYG*d
zu3q01ltd)I(|)Js&~S6;ca%Q4q!0S{Le0Cs$7`GmHYMHH>nSru_bebI1dB@4CHzN~
zx8jd5_FO=lljnw?Kx+j~4@NyH{A3rQ!~N9#^X}8W){9t=zz6uI7O4dsu$RtYD5|4#
zAenLril=-at|qHuvx>E+c)*H(bMMViJkV8ZBxl}!%G5Xj#>%ILER8FpUk7uWdR6?>
zbAcfC^&;)1^D~t<sqN&rE8aTj+Ft|AU$&>F-ILW6pbZ~#_AR&TT{-^9EDW-+EO@X+
zB&tD_8Pv>TJB;$y=;XGfb=@y87aVE=uuBs%8<wNE6I0Ct6PKxrNMj<&xYb}SCc5ry
z{On8nR(G&+FI!rsF_AsugwOdihp*8FQ`Seu&fpVji%&0^sX?BYFq7IX;aP`_9dXqE
zXx}iAWg2o~yE#L<3kXfMZo&9qKtS#7$ji){VgG(BVu-3elWe-}bBepd{hDNVr?2Xk
z(iZb|CPcwNY$uQLZE{+nHfv6vrazJSGqEsH(?2#n7Y3A9%ptkJ6e4S33CV=_Imi0|
znVV$dmjaUnbzqS*AQnM$sRW?1)hjoyQkFz+6B%$TGBbNbP59u}mkfyOybjMUJ~-f`
zYT5^Iusa`8=5CNfa5S2>$P#ASkCp{$<tcDIZoS<Xf;HdayYQUC|0|%2+=~E(wgNr9
zyb;jE4}~nmmi{!?q&zlh7!~6}y1qOQEmdpbA!dUrF%NiA<w377)<(DZVGD@@QV{!z
z25k@IDnve6KxDg5XDCnz`E}VnRnV~A1rfSpB?PNOF4JWUbo8?9s*2sVtSy*}y#Sk^
z&yf+Ybjp4L*@vL>iY-Pp2NbfBU@sVp@g6_lxY84f1}|_+)fdrxj<I271ED!_{!9H?
zDF)cxm{y-a?H2MFY(|y~viyjw(0`ZXG%{9<HvwnMDZ^RB-(YJa`jA|Mr^w)-YQbgW
zC9B_jC+>p-IY(+OH@LO00UNK#u1_+&r13yH_9dIP(u<=(>C{`3;ZkMp8^%d~Zp&X{
zVTelaNn=-PR42$@qEyCn>I?HWwye@_7a)b|2&nQ;en^}uadrfaPZ>)asP{kh6s~Hm
zA8yV2tX0O_KKc~X;$z<*rEw0V;N4#ZSz1MU?-{78{Wn{}?m^p;%4fv~7Q{(i0ty^j
zj#QQQldxIb|7@|Y3fp!LAnE#NeC*590G%zQlJlCQo4geHOsg+D2G5XieV*nGPERec
zek=I$$|(<)yxiaLgyW`DfBW9(>#alMnhie|zWt~pa<Pb#g*N}R1{q6e2+0pD)3}!|
z?-oGQ+`9)x%8EDIWWDystb><B*Iz_loX#Wzsr&l>E`p>@S=FCX)V;92hVfwzFZhRr
z8i~dy%9)6;LzQtAfl55hs5oBhQ&FuycmHr7behj#>m7~2rWKbDilYT;X_4HumWl<6
zsAeMBUTA$b-EL*JOnzFD=HZ8~LY;vc{Q$<%Fw+v$?+I0xJPM&nhFJm5z(POU5g;eB
zz=a`znHttr&=jT$0Dzj3kH6Rn^JKZ2Si#5Fxjt&g;{aA=hI&W{L*%Rx$(AA0zSQq@
z?Q)&a#(Z5VJph~QEXh)XHK`LjjvGrhKeyr-M?(n45s|brP)3JQ`(>N>jd8bHtd2LH
z$sYqNk8?3dYCc%n6U_IubYX|f$2Z-D7o~zkk$r4`cLNOF>=b!lTF;TaY!enT{Rqvh
ztOUU-m~E0`KJZJp^TJ1Y8=THmilm!+l9Z_tgHRJ&z7Ntu@PFq`qr^^~$%`p_XYlcb
zp*w6x@vn`2-hcSKeZF3&n)n12lfZpu!~`GxH*-8Dfb}`RD$pk;nD1(`U~Pj9tP{J~
z;6@nA3s`q7>WQ2uJ-1^qFu<gjTm-LMEAncXb*v*y?Su4^q<>k((~jaNnZp6l#s(6!
z`$hOb7k@N)6_!3pZ)%p`k6F!{fX18l6AJM-)tHkOT-j>Q)H7ZI+NkkP8eHg0UP*YD
zxA0Y7U2EC1Zp6$sd^lWG!$RZ~O?Tvcmd51x9DGaeuZYW<UFHI0GaF|4sdlx`E~BTv
z{b0jGKo#__;wwJj9R0N&-SsLR5**~!9d2ggn={yre^-X$oM;4e=Lge9zk!UaOeX5S
zuA)J(I^8sF)zm}*>Z>Q+k^1|PHdVF{)Cct-Vu}tlJa7Pw!$`#S6g-yf)_r@A6~_7^
zIMYJCf`&u!?7E4@9<L}LkClJ_aWLULpqTw|jIdn_VNA;)gk>MfV_%)r!r{ErohFo}
zcUL;Vfe3x*!DZ1RETAgTx0+PoAH^&I4Ej3!8LCWj!*l#Zva;%C4&Rs1yECD!!+V)(
z6qrb`3F3fnKk%6@c>ag2O7pXAVRn6Ae)I&Buv|M;1SWxtS*SB+D7^aqhj%9!)fGnJ
zxD7T!-Xq4rVG#ut1*hF?Vs9qT{Is81*6vr&jFw_8P<hG?qJ<J9OVeJO^;ggWKNdq`
zoS(>m&@fGo>?ty1kHGB<OYg4NoYhD^tjIw4?FPd_qgfy@yfBQ7-plDGEn<v!Vq%22
z38Od(Zfx;Yoc=xg-<y@~4H4c$ETl1*2k1rq&=oTs;O!qd`_ofv0nB08ZxM>UsP7b)
zf=4Ml^EvxG7x$uXNW1&y(w`m2pXHE0x=xw6*#~E|IDZTQ-7>5IZjM`jm*^hX(Rp4{
zVR8AcV%bLkQM8ADG^1;+>r_8%=36EaL-;^Xr2H^f<;oNjp7}J?nYWX1lUP7bNy3gn
z32Jl-oTuzs(4CEi4&o7#wgsW`XH1UY^7D=a&n(}U!1QDrPo{ldP4JT++Q=~nT`p<Q
z+04~QjHUP1hUJI+lEeXftuPks_<_P--E{QRpi~EkC0PH6U^x|C&5<30dS9UoA=3ka
z^&EXt2)i@Ibq=TX7?m^RH?!@K5Gq4q7{5i6@Q+<Y?yW}q7a8KOlak3CytH<7Y`qC|
zuN{Vcj5#fuOoX{%bH0`W(Y5ifM>|U$9a>*Tw#>ZU+<Zw!S)ZM_T1u62g`SN%E)h!k
zp{-=Xy<abW1CGp?p3`%uK-Y_F8j;%mLE<=i=Ysag!k%t$ELBT@@WGTziv1=0U)3iX
zVYPFXP2N|l$JrLO^mbUyi}yI)&Wm`jwI;qBe*I^A(uj2}kbi<yCfl0GaHSa+)EP*u
zJXI0@B%6b6E4;ad#4q@te+$YEgD^1sgbv-S6O+rB$C<jK6QA->dyZ;%d2q6rbUJPG
zb~JkEZP-N6NW!V5TmoZHsi@;A2t53E`h>)p!Vtmlxdplp=cJr}av10@e0cjL>&Sr$
z@iS6H2>(V|le~d!QREk<>X1i+ISG0NcB5s+=H$)C*|sD0v|8BBsi;{nHeliknt6b;
zo;&lDxe_b!vPR}is;l}armk@;W9aw2Oc7_&M(Yol*AvZ58@W##keacRb6xkI>0J?a
zNX;QbtuhQZUb-uv`*%|&cMA<eo+t(1=Qxb1?_9*(h?aKLY4zH1Cl;9^BC%NUKL?n!
z+|>YTcSO`kvBAcWKoFY+Q~B1)#uJ_^f*RatwDcM!iUc}srHu`$dR*c@hXD@;knxu$
zNq=THzG?ri3Kc(NAxB6I*vjx}A2x7k<&{12o^EU~-wV*6J~V9dGb*}1VI6;Bv^D<>
z`2rs`nUERv)T{+%L=b2;IQGt5M=e;xSHP9cd8`SnT$0ve?5{DxSVsM`0b$*xmV~1?
zEbSm$Ds&?G83&#abJP)9Lx~y#uER%&Vdik}0CYy2c#ZJV_uvB|TekFtX&1Mon1G@=
zGrJww`aB2c5i4vbTVIOBICWNaq><mqbVkHFL%jPZtq4n|frX`9M7rBGy+Z8?B<NLh
zl3-gDnT`gGhw>t-n$gl%&fbvism1T>{e94f*P#D&VQ4M5Czvx?z<TfD%KI6T4V_q<
zlQcQ*1Sie|AGalBNXZnUNM(7Y>v6c?F70uq1#ja>I*Y}!-(3UOu<uHHKC~NOiC=V$
zR=nNFL{Iv-as6i4Ux&anI*rB#7;!c1^m~xr@mKRd-NNJqS`((|jn7=(_q|;L=jwE(
zMS$|chSmWk?`^b=R(bD%%mzfsgD=!Cp|4?Tae#<W@W1`+$3g{zHN^|KRFm55?8`e{
zb@C;EErBrLOy>ek0zDXc(u@Y#edVs$b@%xcJ<|uGP0NlRcS$3<l;Z}@S%>os_o><J
zx{6UUKj!1*+&A9<vfrxPC{AzcGSv@C`BjG2eDe~c=D~XDCr?ue?LsZEo@u{+(PxJf
zP;iw)S<t(*<Wsf+R!jKNP5hW-nf)W*G2BY4p8p&$k*;xGB26-BDfx0MP-vQxWeInf
z*%2dT=R&&C6H704({A+3t%xscvR9&Dj_9PZ#MttLf*2m(#68;K4)#(P>yEyWAx!iW
zh(49XCFg6uZs=HY4gv}%n%}6aL2G5`zFqEUMGn8ec@Dl+*UiDa*s7y<3UmK#$}hI+
z9NIvmg78MGk0nCu)qZ6IK7Pma9+%D~$_mg*Nu*Jlb{I7GPK_&SC^>p=V0Bh3o)7lQ
z8F@aL?A?j5CM5Fxw1s)Ky0*%dm28m0*S74oLg(h=o7MGgABFDM{rN=O8PEW5&xdp8
zE1W?helq$_U%~B0B30nmnPVFY>K;4~%gdhgovI9lEATpW$on<=oNAdVCy(I^DSUq`
zF*uy&N{RCjisox|<G*A<x;7K=nGxZ4bT?nAJ7~z0Z$~O`FUQcaQx_^_*?J70YyqsO
z5R^KYlPoy3CkA{1Fw}A-T3@Tm$(A_PEjvarT^Nh@P6t$bv3^T^Y0LuJO8V$FPls%v
ze4`w#Eo>ic4urfxgOc*o$9YckcfNgeFo_roNZAFtV3G$3fDgMLv9pc{e2#&7PmFO3
z&`Z7dUlJ@N@=P(P4y!w<w)9h|$qAtIh-m>PCtZXD+K3hMby@WkVYL@{vJ!o(2ZGdU
z<J)=`Q7|!Ui+rD`qZ{OWcCa#%1X<awGWG0t$3LtwRPTU!a9e2BcNrs3HuTIIz-w5Z
zr)4TN-I`d2ntg1;xRxO4pkO8xC#kIg7ewTqf1L_)+GvDZ9M4xD*Ehu$llbj!TygUX
zETqQiIa72jU2y2>Emh$+rh9ZwJ{ZI$NA;5+qy8rcZg1$p*!5S##5v;!hPLUW&z6z5
za?IGXR@K`{@#udOws3xRAPdj*PF&u5B)8~HDB&Yl>Bvlorb_QS9BXqVnbUJ>An5P4
zpXL)}gXZmOn$!`On#Ax(FNDQYHb+%H{55jM4!;LYrAWE2>FCL8rbm*&EbjMn8ox(8
z+1mcWne#B+ecZ{KLilOrzOK&GB4(wm_(GwBH+m0pqU^NKXPI(L`bBmYl-kY~y`DHW
zP~Z__<k5*bC5$7dJSWD_gXtTnzFS;idb(&+9DPbwQOTO}`_>sv#B}DA$bH6~?a9VI
zew<bwv!_Dl1R<d)Kc?+lZVuh@`xG`z71Oll*%Ows1-eC=&&T*HyOo`oLbCfi2zO~j
ze7)Bm8=k3=pvu#TQOentD?JSDqY5yfEiAqQo?<MdywF!;B{g1;A&6-k>Xh)P7P*nA
zoNiF<ChJYBXy(+=_MAM(qKzu<Bk{MrXp~uyOcwx2utMt<=h@x}ZY0S{3PE(Y0d?z~
zUTcWi`6L198FsX2>x%w$F>%p%u5ABCmjE9o#@V<@|8|Z3!Nk*GxwEEilNy3_<CgoV
zkpcW85ij1;G+b5}PT$h2nJLZ`FN#03tFwJ!a1ef(%e%Z3ALsYZwnJj<yA0VgArl5s
z|F&QItolAWSK=9t<5vRq?r>+Wemv*E+4C$a%Uf>kiFel{4-mz4uJQL2v1KPT6wo#c
zMJFaPS$AT)K4ltu>G*v8V^Pt}XqbbLBb!{OpQ=D9|I)bfF3D18`K4h}|4rc&F2=X1
zNgvb7l!Nu<&Lw8{J<h&m$=%X*r0^+nyi@RGwmaNK_2OLF3~8?HEBd?;{n2t_(z7?W
zD_&ZU@KbyQwIN}8tHo1y$FP8u;n@T_FCPMN_g{1AGE(*v!Y>RqDJQG9gnXe%=3}py
z!}9aQ&LzGPiQ$6F%MI=dH<%iL{~`!I45!NPZ5_oQmC@F@9=*hOy0QhZ-<YEsA);2O
zT8eyGNxvjEjrd0rcgGst6<~q^hK<h?SDU|qMCor#%`bg?nEba7i`s8p7QjV48R|lf
zAQa0sHp@xjX!p01o_R$~h$dWM85PufE-rE<3PX>J#`j#T&Sfs;oST&4dS&|Zm)lDP
zXgEmP%4y&G<%6XC)^jA^Oc^nYu4Ef}ypQ?X+EN{SY>uy4L8P{brgX#7D%|M(pfBoq
z%wmf;MHGT7at`=SiNr;6ri|Tvb*r_%hz3KOBDVA0@6*@UetC!yIPY3rtTpDrVb>A!
zqWF64XXnJgo3}y@`~80VGZIW<NhgQuKSMaa>Gns{;HbYpcJw}})!ne5rhkK!L%YSa
zAa@0>*MlCVg?|EZ0XISia|afA4$xnt%*}x9nq#-AWBljHp*0xgy#C*?H!356KB9SV
zz+FDQ!E;w?>B;HkoH}uD<l1rI$LH^8+D)5_d_OniN8JlCx|FY|a!)+!ZW&&n_{3$}
zJE%qEK}yMs_+~z&nR)G((c@l}p-8Pe%RSDro|R(1I>h9JeZ*X4db`6y7319awL}3m
z*-XdYxccyUeTPz1mqYOYCc*62l4m=@J!4nr?vCCy(h0BRTDvmg6Ptig&=9CDSbdYO
z6pmXeB@$H2`?GpNkeKk0CQzh^;}0;`biR|b(sRcRD<D<G`Ht7GeA3mC)T%H^NayWk
zQBG93*C;-{%PTA+LVhnu3$+Ks=Uxi|G2>(@RF`6bz>ST-KLI@YiRprJJj}J(?pGGJ
zUveCHH?B1EkRZSnJKm(mc||3?pym8w<<X(_kFPfO$Nw06{58jNWZpc}%n=&p#2+#v
z?Xh@`EIv;k|JmeA!G9jB@iSOQ?z_jnzh2&>qx7l?(?Bnu%(7=57z$-{o39O}GcD|B
zHF$*v%YD^k#0~LVp1d-^C`dqy$H3Qj8nTVusMW}lpfY_Im{AZeIc+w*;z<>WTCIBh
z;|rU4vloLg0Tv?lzeTt?IM*c>wp6`{##<Ib0(hLn3$!oCGb@Cz1O$9fjhA*|bOdr!
ztM!-c5mvubk4p27k;*5FBi~AlqLxJ$5L8L;?V5?Op9a&@S9(5Hfe8qU3JNa=48Tc3
z<+F{V`_WC!?!KpM+O>`3y?~4?)T;3A{ZmO|qZ8akk$oL>%G$1jrXVsToCMcCzJR6N
zLi}LA4I7OsW>pq=WMMct_`+Y_e+<#X`uc+i_f0R?Grg98lyjpaq02qD$hT)=`JbW{
z;om8B9S+e$tl&$&|ABbx$3ps>%<X4zDEb_)wC2_pexPzQ1`$y_N*S;pzSTTNPMfZT
zKeIC<OzVmg*PzT+k8&3|z+XZ}&mqr{hoikD8BR0=-gFjxccZuxq<0xM=cC0SgC}+M
zu1M^aGR2o(E=&CuJ5(QOO&X4wIZYa$_Gi>7U|=uMqOS@7u&gW|?1XEE)zl04QURq1
z8rbX?Utqyn^PN7q5^67*d|Ss|SqwgK?Dh#wf9=okuHnMOWZ_h-veo4uE3(pXr4O!9
zx2;hpWAR5$%n33W)e68kK#?_i>+Eoz3&cP-297yDSrji4(R_cz5YK*yl&0~{17J~;
zE$yrJP-Wj}?q99V#Uw;C4dp!k|Gcv)ST1Z`{02uBaVH<fHU@}z34QY8^dsW7IL<jK
zty?nvgny@>nee6gI?TAXvtKI@nq+09P5trIMwY+8pdd3U1I;I1n#NjBu4r9x*VVzA
zYV-CwJEtk_Bv-%C$E$;{{WuCO$P~+zHsc9Ckz+><h;DDYS~pvJH{LFiv$>ycqotfP
zPD$+5tSfgD$5AD`QB8<3yf{D<c{DI)(w=?zI+}k94Ndjr<>~C2x<slxmYhH!P<sda
z($2qBJH32(xankG6T?I6&s&`jcE*F&S)2<f8Dln^Gm=CqAgaxph=*jxSU|#5a^>+~
zK?uW_IL6b(W>$Zsc%}OWs;p<;&JuTd`7E{DR&0t|y6|o9{ZrY}rl}0@`|OwOP#>zY
z_2IA0&;IQ<R8TZj5D-vQY0+gLK^4dbww(yy^E1ImleJi`8&eVenGG~OS3dr3v)qZD
zSG+kO={CRr$f|(oXhvblz3(Mu?SGo^i!&v#@U}E3S<dj$(9}PNJ8y_|x^>1DmJco&
z@0FO5>3C+&!N8p<=Qh#o(~xG*e&k~9^xYeGA8nA+`IuIr^rBsrYNeDv4Vo&l<7suD
zw?}lP`ItWuNeWJq8oN^;?A~M++I*+r9phC@RFTdi-?)LI=Vz%lJ?{OSECiAs^)Dn=
z{G2aGyf{mqHhVB;FQ^&kA?Lm>cJlbQ49c%N)MAtLXT3d_{jYl1YN2U9M+p+1u5~qd
zun&@<#7y6P{rmME<e(nWd~i74<$ScQtx52$P*eW_5*UzAA^N;aKV54t$;6&}%&ad)
z)Kv*o<lMCow4AS=l?d$_TVya$u?K-T|DGrZ(W1+5$VNkJk}B|~P`A{+d=1H6So<nG
zAPBYRO5T%2CFiVt172eY!=ULRkVnHBz6!{~wha|6x$G9V6lN6lR~BLt8_mDwi5CT+
zIgH1{+nMF-{<-PxhG_J^ol%x<s*%Y~u}HrUs7Erj%WmcyZhqwQ-==*L_|a0A&7*h8
z?@AALoq5YywJ(KIXf{zi$-(3?LOC>B%aItT@KQYt{|oP+w4OmPR<6FmhOR5C0B7ZE
z?nXUAg&N1TA6Yp9AlzS2O<-drjq^KN6#76ks^)*@8a(t`mGk6=#IRr@i)M%;We)~N
zoy$Y!F6V_$cYtt|3w7t+p*+PxrG)MB#}1dsgWpp4mLH&c-hFLJZ4-T!m@a{>!BjBc
zWO*9si_0}jr#u_wO2@{5R@&3~nLDZv72^dOmn>>^|K3>PeGh~oc22AQkmSD>*$e61
z9PzuEQf3+V6XrY+X_pL$LR`h}Qxlr&27F{<Bp|_}kwoJlRf+6lk|b!XD}Zpa!D)YI
zITwQ<F~&Uq^9E3!bLQTV5LKka(Br;BDICXnH9h5(p~u1G8<(G-MX;`C(B2XiL1C0F
zzOVhpYfovni@IR+k-3P02*WFAxkYh~3&nt%UG&-XF1x|;N@)`-7>Jc)wrI=-bu+a4
zDS$;lGCQe;ztsy9{x_iyyIu7o5~3ZOUjNrlmJrZs82;8;?WFi`jE5zVfS{RU?3Jsm
zhDH>68jA2r(SoVPSG3p=>F&7OV{@kLnBtA<0IlbNjUOH9<@L$l7+OwtLS#N9PxQRH
zThJd_jzUqU5x^+@^vbV}?}T$K&5K0mib`<|ywu9_09xk|F=pD_HH$5KvM8!)57{;u
z!Ai_O1?|OfB#;}$_TM4|35btD`wTNIH7u6LYytW0Kl`L2%h9o;vpXMbhdsbrVNw0N
zqzoVmFG2tIgtj(QpDO7u-~-lh5Y3kyhQW?Bxr&b%u`=#qsnR3Zax+DWSkTZd_DZS4
z@Z;6Tsq5+xcknu0<WiwoTXSl+u+yAI7+!I^tl3!k&AHA(h1ekRRqOU2D8pD5U1~WV
zTXT_%fs@zK?6TXX#lr+2r`|8Tn7?rv_~mHkPLW`se83^;v8L+6<{%GxOYyjVTM1LP
zc`1c|NfUtbHwv+6i5=*3vdykT%Yz%v&%&%(EIN0;HTtqA9k)HQ7<bAM3UZ9vMHPy;
z#{DNuuNm762=`H)#0@J@8L+vToD>03;~JsI(_qVv!Wv@WTQ4Qa7t}ny#(U*n-yhBE
zbLr>5@&0;;2g9Z1#FcZEDPD=JDIX9#H!9$YlWqIbz+p(+VlG31vu^1k_LeB%I~o!3
zmByj9are;%jUeeUm?X)U5dbLZ7!U|p3jxRV>?@Ayuw_~GhK(9el3-{H8S>K_2P=a7
zC217*c9iVatP0}z6m*I&xCy&fu`8@vV&$Agi4uB#HuOvuM2Pk=iV6>TH^$s}&NWaQ
zeobD1JWN+)LLI6iOFE5GV_!G!q|n!@CwjFB%<7UadS50cw4~AB6}q%%1v;~D#pAuJ
z4>r&l6}J~^2v{tH*T9A7iVPvRZyY;5l6i-Vi>kiC`RWZfUlMMq^_vZ$_D?FePyX4m
zph6@tM<WOrVUw=36dD}1kZUrb#eNvDNZ?L)o%mVTmdQ?@>t%;K&oEp=iE-85;<eDt
zL~FHJ;{C=H4Z2mwTrK~j+KK<{bmzvS$>WIcK@uiG=z$4@`}2AS_k@Va0URMqQbypx
z{9WH^GG5FbFKMpK(eY!RV>dw$E(_kNCRa!~IcLemE9Sw5{@`;m*Vdy<rFqT5K^WJU
z?U|?n7>1v#QCjs*soDR6kd&41^IxT{bR|8C%pp5TMwX3`FjWk!@z_KZgD+7x+m*Si
z@&W=l%zg|2u~u_qYO<Yft|!5kXy=vvWa>h6IbD(H_9LsDhiMtqCa!d)Ot366@laVr
z3FW3FWE3Mdh`fWU?s~8>tUbORx(6JK+oAT4s1tx6XN^`e9X~sftaDMF|Ldjt^9vMG
zOqd`boI8SOama|_0lmJA`{=4U2WaTOP)5cu5?^+7MITXUl!U`0<}Q&1MT&&C;Dr~u
zwc1k7hsWcCAUzPdtf+}+iOlG*glOAuIk%NBC>|#R12R-%ZaJVg?A?NyvLX`ZQ1_4e
zuzynt*u;!khE5r`a;!miinB_*7Nvs~<r$0zhqtnI8jl~5U#J*=l<2+Z1B5eFS!Wm1
zwOGI6PA7Or8NYZr6j)-?v>u1wdJeQM&9xugPl^(JzU3?H{;2(avzhq!b+FR#-R^dQ
zwj;T^SB4RsxZ<7GVXisfE06<v7VI$4RF;Q+9|-Y-)R&0KciQ>D#pIM*!z1VWmOpV}
z{U!)1aMLv@uU&T$GQc8V{fAodtDkCvtNfI;0!*l&mapRRLmu(LJhhARaO%7AF-Xea
zfLrS7F$+5hi$)B@7|3d%V<t2YJ;PdcGP=ku-JSB@xC=Q9AsaA!Z|BTxcmZ#n7Fg}%
zJ?FFP8CuF301)K024p|4j-eHsz$D+;zX88%hLvLpb7UF@wnp25-{H+f?9ovVQ;U1p
zECvoCEPPgqV}~Uxg6eNR`c_%(QOB*(X~++X>j$CxD||N$nQ=%tV%VH~gSvskf0$}a
zx3X_LPCbPz-(H$(lX&J$Z}0)dYc_OS0Q^jBi<URxf^EReJFq|L%AIpoRBmWcW-wmd
z(E5k8_RlgR&_Z*JT3ER{R9lr!w0YYUbjNh3ePGuOFtu1blj`+HBkPPoF~f*6^>kqw
za7TL$6a}SB5E%@CqJ7Lr9|YJmGyy<9C0Cfir#*$;N?%b=d;66Nz!M!9V}+Uy6*P5>
zeJT855Td+Tl}6xo0I?sTQ>YyAeo2}Bjg^Q@(4N{Roa_up{Q}r~_W0+M^YQY{hEPO;
zn9H)wVoOi9Oz^My=z{mAbsP<6`v!bWEca+UZeqC>8`eZNo^C7aaJbAL|LA@Nq#qnI
zL<WU`O*3}*V2<3in~#Vg$i}wFW?6cpQB3o92pziYqnD?T4}cdUc-!)5bN1519pE>X
z`+^NGDRP*pAa22Twj7ApKsRYp7CCt;WktiYJ~*$flp#ve0LIWy8l5CYF;-3dj!4*_
z)>Z`6qjcR%z5|jw!oWk|R<HHd6b0w|s#KR;fZ)|26!~=v81d$0t`#;QiPfp05JHkN
zc0q|)mXi%asBf_(5?KW3Ya=B_727qXG>v%i^x!|4FEr&5+^docsh}Dlq~W}MEuOJD
z5nO|MuydXkQIaz(Il`b;$F=MZt8NM9g=<p+p4z%_xHAd{%8Qn`juGELzMrY&Hy;V)
ztETDv2&OxEE_Ccf8ChKPO|5-oR>5+yd1T9qYD6ebs{YJsaiHO&=ML$E$rNl-j!#RL
zOy5gQO#07(LzFLdcra|>FbIyY7e@Xc_kTqaZH58gXFDwJ=f9_-|K63PiD?7KC+P3g
zcLZ(eK3w?pF>eI$<=nta(|O=7smGsq6$~0H>cTWZnZU5j!S`A%BNc{ocffor8^|2x
zIj<5BbhN7~U|{nN!;EK}e6cmn0WSv%>~hB==iUqr5E~RaFL7~f`aZXQPnPgx-#?k;
z{CLH;<M@?&*2tm;Xl_UMG&rtHcnKIV*IU-mUXX{+j#p57yQGeB*+bz5M-Y$=W5C8n
z((({g1$kU7V(=Gm1+A}*XX)`sYczm`&^s>gEP#jlWLI^{aazqb(}1dC;9HsCi$F|N
z*<O&+gbi#K2;W`yAFuj2|B%X}8aTGksn78YVi)2#Kt62|+Q+FrW|dXSN017N>M;Ee
zWQ*Z%5G|pv%6RQx@my$E72;)?1_1GvTXy(xraxEPb~6BMEpRT}^?@^@h`up;u+??<
z7uY46Gq#Yr=_jGq$-UBgqh<Bs&L@uXOr*>#SSY%GP+(~zbwG{F2L)<<W`^JKFXo3h
zXuBYhEMIK)0mf|N0yu86f;IH5;ph36OO}Ar_!S%sq~U+WTP)KPGya@7aW+wqLF$4H
zQcY*s^A$23ez4$`0H^9$N6!9a-n-^p$ty%h(6Dl|`>#vvV)oo-`IIgGMl<*F?2n%G
zqX>i65+g|M&P?Hy#LkI=dTAQUz!rylsha<)-Tzf4!m*jv3@poEP*I6jj6V!C^}2!)
zEFtsh8TqLrBP9GW{&;VJ=?lZxxW&~m{_>CjQW&Yn@YwoalpxS%MPvj$MtHoE4xk|W
zeB6mCV;4IyiRe~Cx<l6UhwSQJ+5R~l^7!5heuH$n$h;l(5pOOfn#oJJ9ZW$^3-UoY
zX$##iqj*LZ0tra?=c9oQu$OWMae!`bdRM#3K`b)Ngx;*M9Ie<9B^GT`>!Rs~QDAge
zUZWS>4thNUv=ChGj!5vR?&L~gL)Q)|zEqzi;xpP^4WWiyt}e@8GC|gB*^$O_uP}y%
zl%~B)B!uTWHkC7OHSvBqc-Ofm<qE4O>pKi_H&JH8acdBXu{r>)yq-w1cxECv4-?p4
zXCci-Z(jAPz82JqQqmYRW6X9tGCt89^<*XpzhZX{`u$T5Y3_v_Vf_zw<aL~EvM{bq
zC_+w<y;gfR$go>sH@0NdY4>6*3Awo+me6!Cg~J_BUws%<6)8fkQIx!u<51mY>WcmV
z3O~mS?zeEIK<U5V<bO_yY;-yiRC?*paf{ubEnUWZ-Gm=}Xd4lKU_i!YC^zwWb#ldp
z-tvK0+u0TLSb}D{$J0o9un6r)UGxP$ZdZv9Q$(pR^wb6Bx2>B^>f)r?JWe;jh_d|h
zVkm3yB5)opn;HzkfphJ4G0Ix>4Ux&KR3cACQwQw_5M~0Mfz{|to>wy^fyly?R`rZz
zh1_=1mr;1FHpz8bEtXECi#nNEb_Uot%2%!+f@l3$3K!m8DY_T)+3r01ca7sL8oRlu
zCOC48-P9)kAoz>%48i8FaUzky?EFIG@`%-NQOO9yew|6u=u#$dS`E!vX#^2aHvQU}
zaCTZarQ?oQKt&z%=({NcbPLl4l%%_5l>t?sgr<FLjRrog4EUP;cA<6#KbQqSo-PT_
zv)MI#cK?kAAiGwKS2z*f1shp1hRiM?>HWO<`e}jRiX`Jq#Kk5mcl+R9RQG=r5f@DF
zNFs0>3EMq|a;Hf6)8pr@pSK0Ym{hI}psfvvm~LNlqrRH~3>{|KA7sWX4t<a0jjN*q
zZK<kj0>20OCJLSQwJD+aof=fy*uVXdD1)^#8-(!?C?=E~W54LS*xK3Q@c!uFWfbO}
z1oBGEo?s-MRX0&(Z-#Ve(EGM&x0bH;d1}>(1`6TPn-5y%gG~p@ZX}DkzC}j|Q~WBK
z{T>5y`bx|&@PEb7#|$!QGa8(z$%-IBosjCAy+#J+>Q~BD6!2zh#eI(>Zb!apJF68q
z=_BGeKG@*qB_VLXWZ?;nJI|lKek-CKdXtyLbL-#p@w%E}g_05rl?@$DpHrTCGMuQ~
z@ZZ3BDOIiP?{U)BGwqFEG_#LbA21~hoarx%35;`uL1fEX<4;{Qu8ZvkBh3CU{P~|b
z@SjyO&7-R<hSg;V6PSxG@x^pRB~{x|3vaS(7i!3$QQUeTusiO6Y4wnUtPJ&hAF)~w
z@!o`=u21g@UtUC=sBeCb_rNI)zX)aK0al5dcs|{2>?l(Y;6cC^12Qd9gX@%4=0YB9
zD~-U!%^{*BFL7GMItz`WK$x}BAB}T`%t|2-bCqdq+Laxd!Z=LdpuXZJB9;y34bUTo
zG)Fpg`~7&Igg_!hB(7r_Gdd+0SR5=)G*{sn>b5*Vjl>4dQqU7?t5W9bm6<AF(f1}0
z_Ow-z1O<C53zt?4g13wsLG3L)yilwn(a)}tdZ><TdjLY**Pb0cm_9dsoJL~t{1R80
zX`%MJ*Cgubo~I4mD!x;RGx(iMN4?|JI>;$+$LUaS!UIb%<zTE9Fw}cIQ9bCQoTNn4
ze$mdiFIQ&&&y9f^_0TVj5%oc)#ZN(VjMcFU`H<56DcOJ{U<`>guM2K9HA3jsew}1b
z=IvofTIH0<q>Xtx;C(f$#nNY|FVJr6OQ7$sf+U(A4)uJjt4u>5r|lO!u1J-Sr>QW#
zs|q2g(=E-U{Nh=LXzoqo=001Qo)$4chEWUZd-@jND>1z7)7iAG<bE+mU+m9NM&AS7
zRRJ7tUv#$!s1H6G9oCzaTVi4Au5-S>1P0xC=r`R2KbHvy`hwF?h|~m<X20e12*-n?
zh7|^${YCcYXRKfA+_@V`JC)NT*tFTAtdyo39m4mpLUt82WP!gLbYYK-S`IavMNP{S
zTfTc~jvp({+Jq=6a(OYO>^UL>f!(X<gNJ^I$40^#**tvSQw83-RFIAvuXkf~Qcs2#
zjS>9iBo0RrA9T9ebVO#BS!HB~8@$~`1fZ8r;y_N3afJqrvVgBfg;B@Bw6W7TI%CFP
zwVG)Q8d$H8K!+p%*}vH=&ZfBLx<n8Up<td=e=t>-cvFGk*3hI<b7;VQuIiaDxPJi<
z|8@ReAd0?dhzH`f!z!7JRB1rR>njQ48-fRDX_~D19NkO^jZMgQ_}TUncXJR@M!;oR
zBT2lx<$R{#hK$*ywdcIBIbU-qzRyS-5t@Ah!9B0pR*V}YIIq=M(162oL1!SqK$zp^
zDJ8^({@$^4tL<L0C1>t;23DwH=2n)x;ZnA*-oxg}yI{=XOM<`U<Ubxt06fx6ab>?t
zbuS(<Mn==#dRkpMUhPDGp(%e(&aZ<eLT~B@c~1}>7Rq(BN`Z`TIa-B?7u9s(*h@M|
zdC<=~J&P(A@I7YM(T2_pg6WUs`>BEyO7B;t!gN#gh7LPWF>=9`o-Hzz+W#~n*o*q7
zpK3O2rJf`<K%rGE5{9;qqa+4sw@j!V&kbmH@$D;r4xFb0ka-LG;kjgLlCg$w8v;)j
z6n-_<{Im)_Z@G@SMY;){<J&RL-kAw9E({5~W)e+lX~DO;r8n4XCF3aJ1WrnjI+%hU
zA*2hCf~Dq_j^(NmFU5(-So-O5uX?+&CvN(#KUO>;tUHpZ3_zuu!D=V$<NeDpr~mEh
zmo2J#)@qv$=PllWVC%b$`+uF(fuE#l=rZ#M^PhimY^=op^BEI}V96y}8_7MRFVAQh
z|F{vNm^4G$$#pL@Dgz9g-j|ytAd*$-9qTS-ogn-u*mahFzG^KdBzj<j$qbognZ0>4
zrhQmJcR4hS+XVyaD64Npep*nkbBqWkKL)ZVPPr{WjtuC(Lt`dPNRf$w6pZO)ES%!`
zU=7@JB*axNzKFFZd0<Pl2NkBFp+K?T`w81U)3C!U;iUxkIPmYG+{WsccPy1T=xp0=
ztae>V+#R!jJR9ZisDD&@aKWcv&uhjXR@e^-SO*&PRa?3f<Z@#skJ)k~;FVdMUWrfF
zBM1`^k4yj_`M*2;AIB)cC4@A~7?6#w^O(}$R8W5kcbGU#lRTWc<rE!EzPgY8Q4I8f
zuXH%F)etVX=)Q%nF!+c5+Hb5Yz2!kM7>TjllI8ZQdh4~Gv;@KNgZXQ?EoQS0<Sfxa
zS{&JHpjK4Sa3~6sKL$d3`&+Q$@QeNJltG7VgW+-^l!uaO&p;Sot+5S1&*)e~5@-9R
z;gXrBNkE;^`+yJiTX<OPCI>fUOE8lE@&YIlbIht^CpB#d^dJE=$4NeWT&bBERrhAX
zz-p?@|0<!CX!x!MRLKTk-g{%xgq#zT0-IGA@JiF<P)QSfKGQG%k|^8;4IzMcaN(CS
zmyFO~1|KLF2ov?%>LAl6A7;&|yZUB4N<jzl!U$Y3+@2>&Y4H#C-&VVrG^8)x_RjzR
zAx;;w9)hbj5XLcZxl{$tuRM6}?|XAORvj8x@)cs~+Fc*XFcMrxOKylx#wjxt22-NC
z)yNLCH6J3&(e*}lfyZ)5<%HdAV7NhPZDHjiQ!pQHdhwB_Ge6S*{|^)j&>)nc)?p9>
z)1?jxUi25)3$5}m9ngAugy{RWT(E3DhZgjj82q7s`(IVSpKD|BqSo!n;9D#EU!V0i
z%obRn46-Qoq^1vl0EYkHwf2|ng{Fs4V^KC<%<6~P|Jrc>`McDUV2qK;<^R~|e?Hv5
z>OtvvdZ2Ewxc5}H{of7zpWpY_cQUzv2`6rZ{89VAu8j^i5b}YOK>SGZ@c62c*funJ
zgRpQfG;f2h;au|&g3Oa4?m1+YWgo(MF_`=Um`>XVtzuQILz?U!4C;X0f8V$qQPi+D
z8K9<T1E><XnM+^&Yo;ZbYw-fMhEDvo{iN}0XkbM@{ob@V0vq~VFbc&?VJ^R+SM}&7
zr_r%hh|31-zA{h1b+2jh8ahFXs_@bbbzFJNV|J!R%&)L=vBz`e{R?0e>PhJ*XMF31
z*e0=C5awaEKlGfWObs<&dvCu{F(o`?RHAuG2q|Ms`Dz(Y{U8d9Mjo8)W!a35J%Mz{
z45)o@PdqEdvc53*kb!8;CdL)r)f5nl{4;QOMo(aDKUw+yPQA48_<ne={Jj<!1!4t*
zC7AL{aAnT{f!QFGCRawdW+XO0#pb#IX7r9qyv|W#COu4WveDPz_dz}bnC`Fwt}|xq
z>|va30t1%KRPG`?Aoo7qyg@qlvT5l;J9Y1)y+p0kyaPFr2NI+fvwY&}Bihvhc?oyC
zE?$G(0tK<cf8M;nn5!4IL~l%6TImqY(Hj8)lp)ma`_##ekGSu?ri4VxuRZ&Ke=M(k
zlph2%fyI8Jdf4xP<W$cac~o8ryxW6Yv3@6K2h4+@Afe04dOY69kUr((tdYGxTyl0F
znDA~KUw9qFkVi`<T)KC9{I)u@9P}k_i1{PySz=(zSlaSXnToKjwd&Pr{Q$o&p7s{g
zqtP-#XdNaol;M$Z;YxKphba+)jHldR^4!NSdH45M^(BP{8CI9pJi=l*EMO}qb0Psq
z0{fksW%zenxHW~}S_{Sokd}4763A$&V(wf`Qp9;9#@^3KIrL`UKWh@B4KaLg9$MK1
z$7AaUrW{bne8Hqvc?Dg32s<9)j9sVbnmyVDRYmbEiQ7A?na`rr#S4Uot*%8a#r05k
z3fNDGwQ!O?+`+#g9uALC5sv?tk^pH0gEu5O*BS1{3Y(#5al%s^cyU5-bc+9Bae(^y
z)(n`b7O18*9^5B?pfDbK&a?y4vp0TcPvbcabO2Z42Hj(7D7Hx%feS^$)*Y#roTJLS
zkayk*#*)}?A@H-TS3VSN+OIB9<T36+iTVB<P$f9fE~m?XM(!l?Slr+rLLRo&83e+v
zKgd5Iehb!)*<!!BgSMBr8(7|4<e}Da3ol+gfD}mh?MV~DrxM=8sk<?%NbN740LkZx
z5bE>^t>z|aYIyC_qRaH%N>z`ve{IeNb7jFxekX3~p-{Z^X9ko&KVY~2g460XL_7>a
zgxsY-=}e&d3_>G5YX0hql$7y;d(<x&nXF3>;{;-#fWEK`uNDFd)K#u2Y8cPgEU|Z>
zW5|_Tc0=Z;AhDF6kBM+j#}<GWn$R}ncIdU56U;h2zZE!IX4Y1=Y#cI7c!Pt^1%<bs
zSDUMS6GuAip8<xPB$@{Hj64t;7Ne=9)BsskMn~J9g0-P!IMs}S<+DH6F(FC61??}o
z^YUff>)|{CfJSj7mnefqH+Ox~<o(+ql3S(5rOuhBtCwk+FSuR4oS39fawRC6pyf9c
z6d#^_)IE((UB(hTb_gP)S@P+W4m7liRj7xg-)QB(0&nTB;0tM~ox-kr<AMS$p0<q(
z8w5@Qw@EB1rxzWEkgF_Dv?vY<n|Xro!Q??9#03K#3I*K!V*So1MNX*sdtlVfXs7aE
zvk%mg7Zs|T>)J7&>*}cfuqs7z3UWw!O<($DXad{Kj_>iT{^v;F*{4WS77c~|TW80(
zA@929A7Z@#pO|d-DROz3={XUqdH3K`kAg`ZvmyP|5SfWj3qS2UEvS*L?wo<#!l?YC
z?MS9|dDW9K-P}8zzqtFIi|<!0jz)10o88vpXQvhh(~%{-iajAakGT)c)M|w+g*!nO
zV9L(1M1aka9_@34{iz|qS-0kiwo)t|2{_1)cc>;wxz5#A47i2O<=uO;q<N31WFDZc
zyFg_w)O%0FXE8$QY;pm=#6t#PW?<UO0asMFhlBAL4$2S#!zbW4lcwW#ax)~O@duCH
zAm(nL4`woUpOgE(hC<+1n0Bb>=!5faY-o_@*v(elu};t8y9Hc;wFQFRwj6}Lz26S@
zMxJ6U`m_$ck&o70ltdSDAF+l-Muw53J^Gjtd_#-AeEzwu2x;Pn0e5`&Pbj7_M&0My
zuO{J69se38mJz{J=9qYSjlIZ!=7Z{m=)DB}LaQ`@&T_t)@g4yEkt_8W$~RePR)39I
zXITk3+8&CWzVdZ18`<(rl<;<Y3rMC_cU&mUuJp4-0o-jLnBm>+X8w9)l$~5{ERX`D
z8}4ak0NAW;BW2M?R2(UmGr#Ei3@moP)SY5Sp6;k0aBz(~QXC>rHg??YAKvhO;B;wk
z%-Y#-JJ}CdRO!<)Y@h0g9@IhfWqVK95{}_*I9`l91NH#eCN%tZ3gZtQ$%6zazm;Hq
zlPR7H&cUA-FGqQ^Jv&Iyt&KA8G#);h8ji}+?XW5WbeOUFU@IO>nL53M0BK69gu8*o
z&OSxO8=HTzS^7d`HP?W$W&6=Pa8k{xD>|KEXPIyH#wY4eNg;>9l#?IXJB|~HvrEd~
z9MoZI8s`kD#P*(D*gem0l#uJ;wi=OTjwmPkn3dicZrJ-O!Efj`Cl0=^VJr7x{v_(u
zXaM$~1IH8MsCndlX$LjlB!M4ZNe8<+ypj!Nb^ckzR|4j=21lP=%Rx~4d-BB9Gbx$h
zx`eXp{eOmj+dKTyQ*Dh$KPlc7>2J9<Zi<)cS0q|GK(d=br_ZOCQT;uK#|PA=Z)cr0
z7N^l97QDDLbBLc)iE+hHs5<y!|E}e;2+5C=XgMSO!Hab!cfQF5wYRn(CaWpl(RU&C
ziV`{Oi_?_2Kt}A<zfMzTbU(=S+@hK&x3bk?JMGoMJQ*cXAV;DK^&huj$_Sw6ao1}E
zhW>22>L+b+2h=VOdKG=}nyVeY!gO{xW#N-@<Xx$~$GU_g8S?E=^LWyI+G$MkTg8&?
zs=qrSPKvk0uP^gebhjhF!0fA+^ud^!1Z0~AZevu<!>B2Qx(_A}KdHkx^?qqa8{w;7
z^sHJ#dEGYc;j?^GZfnNnZv$-eVN3Xgp9_=-8Cdf_Q<6#@{e={7+-2@Gs<hG6k*()C
zdBqU0@)}aN%bT5OXzkJc+MBIUU=tucuO%2xMMq^rX9v+vypfRo>21g`O)5$Qn8+il
zD=iFzbPcgo2*!D@t68K>C59l;nl!+r006<SQw=BjhqJ`1_sJ)9veBWEy3Ve~*Im<!
zZ|LyGbw#J>+u<a;J5Oiy&1bM+t`mc|gS1pDj9zMQN`AfJ_a(PUcwlW@Y(S>Y?XiB@
zplW%5NIX0Ai%TiR{VUn7D<2ZeMyb`N`f;uY#w~q&bJq@+=Q$vPT~hu0J5K@-DX@-v
zrG9u{ebD?P^bq+Ci)kNfEU71)rqnNFG~@WJl#W*`)b%4YQ#P7111BiQdZAsL4Ipni
zM0E(!-?#mwO9AfY)mwU>cGl-tih`}GEMIt=XMrTV#?5gWx#53aQTvp78{T1yMeQeV
zFtNoEds8swAZPEi3$d7au|h3N&7uq^ZnNx%rQ2p$7|DtR>C&&zJG32N)<`~+#$M$0
zzHaxd{E8Bz!<mc2RkSQX7|J&-`EVY24Z=Z{Jk4-mS6hs3E&v90c;N$k&}x5je*{@$
zMoe_qggNh5nl7HvJt4Dstq_}@u&b~7!Iax+<JNNYek@NnB+GpdIol7}P-7tjYhz_(
z|HhrQA0k=ryF7z#!zgvJM#64X!%z1YyKji}I5H#58WX+B!`_U8;P>1~y8+YyJgO<%
zuNJZ-yh(A~Y<I-k(uSn&;+?h1MZ?j;eRho}TZ&4;>mK@mn~ZQHHM3g!r-8yO{i8vX
z?bb+wtv57|d+|`Rb4Lb4o!w*R!#p<$ac*v#6$d1lm0#4SOiV)`eH3i*rufm~{N(h|
zo#6us6IwO@?R?NHR!&V`j8%r|AAWsZRSUCqY@N-_nS*4>ZF^y`(JtAEFi=pr|7)tD
zj^!&9Q%oC?9=c$@Q2kA_$<G(4hE+w;*LY<Q^%Lrf1M-bn(K}jUxUN^0o;9uA)xGo9
zR(DA(tbqmn48-@A9kK!9^jR=At}nRWBEEh6yP!c5G!^j*dZttZ!ym`qUf!dV;lX3{
z{{8KZ-m;_)u?0xo=d3@gh^+sjCLY(gV>elwP#ipM$~Y#FNf0YL^?t2~-jLZtszdB2
z#J6`SA@*kPx7VqUm0SG+70iqxkH|tsuf%>x=}zc0E>q)uQ25-Y4LRnOtoNo*@y7Pt
z;);%7asK()tg~bTId#0SR@-`QOROU^`&+%wQCt<yWBO(x;)jkM`}^bl2TJ}Y547{x
zV}nteCPd7KmQIh9i<WVwi3uNvY#=J#{^}dmlP;J-^xhPw!QTfztSP@Z+`8Ihy}znX
z#S!2v!h3qFv!$Z1NZihM#`M)2<r|q>Ycu4(<CvZ1^6)Yv)@R7?>fFdw<?PyDpR`>|
zlk|PMI!}#R&TZD(j)$bRq#B50OuO_rr9DUy69-`=DeMMLOK-wB@flY3*Q9y`JA>L~
zQ85S9+#y8q&WEk&Vr&Nd9=ca+a~;Z}qowcccA{-D4fKRP_ABkuM32JC?B=Nl<Xj-P
z<MSYR$=OcB)@4cULF+_`g*kxt()HAKsy;v0aW-dIaKOjq-aDOJA5<xd5bs}9xQ5Zo
z1j*qcV^^CG-}m#g7SF>(IL@gor~SuLV=J<h5g+qK;;pO9jVlWAED??Zo-iS%@zfKx
zbUQMH?oNJ)+8H?-6hxlr$QriN{A_@dMJq44ZPy)wDu=k(SwEX$8rTYtMmM@r%?Y6!
zqzc13!r<xSw7pdSj6%rxM~7=vdn?`81B_t1d6TxM&lj&ZdpZ8DoR)%R<~AdGhwlKT
z4m<YoX<JRpp*W+Vf3@+%RRerQ6MaIOu+@>6Qo)I_xhYeO$X(oo8ftgzXz%OOBz8vh
zkLSHw1lccJQY@ufANGnO0}cAqYp9CkVtt>A;Zzoh>zOH|$iMx6oV|5aR_zw{OG!$1
zmq<#9bT>#zBi-H7-60_z(ygGBbT`sScXxNgx!HTa?|%0g-#5+}=P!rCaII%OYu#(!
zb6(f)QZ^@I!20q~TWu!~vS-?;GG`zNtC?dxkgk$$^msRKA&}zi4stVz%#@vP=H%1f
zd*Uwho34a>liSsQPh+X6MikZiSaNnnB-Y7!fAC&(!w^YWLfv!GHMfP*>ox)f<(Teb
z#k=PYLX)F@eE9H~2owx)TX33CTsj^<3Jo7_ZM9Cb1o+$=H^G!CsVdX(JLh!$$VMed
zh1<IZDwqxa9v6r{+nH6*W(Musgao*|8ScS0`)nf6A$6J=p0tPpRSVDKZU2nVx-k-s
z+vT!`eqVu1%546AnLZ_n01{K(c*y-`r9qc;&y;RyO?7$Z4>Dp<+f-d<>t6qysj{r8
zI(lX`YA2~I1}VTE>0C4RCzblXCv8PNf&&p;2^HX5{Nf2h08VQoUEVN*btG*9r<qjg
zbo#Z7tJ)>N8f)x=fmCWjh&C0sdfWc>+3?;Z|66ee@Hz^PPvN_JyH~sOHiPN15o{ac
zu2?Ih6Yx+xxb{g|jqqApHfs9H`^CRK^~Nmy@G5BZLP!L1yLeup;EUTsn=0f()qIfB
z-n<oD0xSH+G6Fl}jXK()-g^Q4=+npZvBfBjQibf;Tu{WSF4PW<ko<IvgX;%=?%!vq
zS7BZ)8a=LHr+ILFP!lj|pN2Ybnd!|faf!d_O7hh~eYFX4Y8apowJ+E32QjU*`fj;(
zfsfFoPT(Y>v!S|)Z(a%P&s>(>%r6~1*>(cz<R5n8YW6I;BT`fs%nU)L5C!sdH19^_
zBk;Ed&mrIY+?ouN;_RVcq?6#!A^^$VM@CT;;^<4^e{_~`AZuAxlI+S~GxMzU!EMgo
z8_+c{kKs<jCvO;Gm{_+3p|zNO)!wIjh1<aVk)e47JctyPff~$ouaA45aZ11Y1)w^4
z310tUIF9p@h<;>zuluy<bp;5ak$R(>Yd>TJ1$~LcWqg6@w(@iOOI2sbmxn$w!f3(+
z%@RPTPSQZ-D#QRcV9x*w%GC~Bn;bNwpU&2W*icb$Fh-ayqd>XS@p|}`<(s!-`oDcO
z=73rCm&u|OEb5cq3j;-9E!)r{b0sgqv(wR|(!(%W$p<@ZD|fAmRl!SKdQ};dl&0f$
zB-Vx)pJlg!qa(T6PrU$P*#jABJkj5dfUvn^OMH04%!Ab?2!vzec5!}zGq>=<b<uAu
z_i1V59@B7@P)(>QQY<?d%2B7_O&ZBx6w1*quaN$v9_Ta9CKz_L9-c&UT>sd1?H?D>
zB|Q7fZ@8g`owvNJiABHN)frns!({W;Ko_9X%f<D`Gd|(>14pRiK!UsC<1?D&GxYq@
zb*pv93ujx{Vrq|P0GyZ7A?5)4{pMF&V}W_aEcwf`6-8eTyXe*CYM=Qt*I8INpS!SA
zGq`fy<x@zTSL$36093wVPkpM~bf^Ty5({xiKhXZOe-dhw=Le{#PfPp~eEC4zE7jCw
zSnqw|(W?xMLyz^Y2V)cAxwEfM>Q*Z}eUIf^Jy)<9Qe}*y0KQaf<#VC3-1^70x}Bi^
z)j8=AZJBr|=GJc)R)&4RVA)>nMmR#etVqs}Ha!CXhvZ$TH!B5T+Z?`%0$W+6{{ix|
zRK)L$W0{^Fuw_&%pU`)TYI1DdkEL2Anz>WR7IrJgu^--2?5ze}Y`q|jgR<AHaBo*v
zKB5fsyz;E+xP_^FoT~63_LS(r$R@v=>A5nnQ#zQH!{sg@ss(VncB_gF5%QE7lszQ%
za9~NeI-M8rxQs}kenk&%PMqR*ooQu-n}eCP2Az-K@j1DvqsMU%Mo4r!+l+I8%!r`q
z>iC`+g32?u2Y?z)n&WkjrfwOjS0+gTjWJ|GP;SwkJcuQ4m;3q~YZ`Rr!5U#t8|9*;
zj^7UTCj&5I$W(bRy_$!T_(}_%&Puu-LeI>THwRLbD!%S9aC)7NM+w{k$s5&F((gUn
zB^hsRaT2H@UGtbifmzJIUgDr73-D^ZcT)4ofCnHq&;@R41{qi9Ecm-JKU_N+Tr%Hv
ze9QgC^|E^ipvYkYtfjEQrp$Xz3GeIR9=O-%0Ap>u(S^lc<I{mi7D4(B&5QytOr-h2
zmk@8Q`vf+ry-*TUq|%Fh$<B=%<)oEJSY=OjTdTFTaIO6Ce`Hzvu#@ZNFtxZ=Bsei-
zI#!@yf5sf=rknb|)tthExvWs<5Oyk=>wyr9e#>>kw`jK$H)EQ}=`&W~Me!BjcUT&X
z5yWEckJcT0ImpWVTH#*r12(z60E0bML@Qo6iHHB6c6gWlyTSSoS}E3d7<~lH4yfE=
z*0mO`t}=+>aROUi<N8~cmu??n3*|iA?$pWcK<g%&2AizN@AI45!;dZA#0}VemQ0&Y
z!~(r-l(vhl#*I~wV&T-)1uQ<(xsL!)^%>3nPu`VlU92HGTkNACvoXe@W8AVqpEjgP
zOY|31C<aekK~4m}Wt*t4P*WckG2)GzPm@nC&wTAu*NZb>lg_qXQ4UWVUzwAJ(np(*
z@h9GOtdHhng#Ly>TZ8%8!*07cFr3hggE;ST)Od!{!t|;7G6fsnoP50Vt_zHi$@(N~
zDYdFB@_(;Z1o9Aj@>20Ss{Q<wSXmS8N_*X^O_|a5x+{`!s-*7}WX$pEuO`wYXrs7J
z`;IIC+=pE=v>*+MvcIt7{<Qt73#km*bkCp1g}{o8dEpl@Mo3r<?MnRPZu`?L%4=`i
z7BIRauHg=U!;hAe9)>NWd;=1<QyVCbP-xhfXlky98=lr4tCuZLeEP6r=b*vn+TMRf
zu^xhf*q1O;VAzw^ci`)5#i(LDxLc3>S`ze567uf^?1Vtn+-{*gE<BYVUmKq~m|@N&
z45MeroEn{m^Pw*G3*4+@+KU9cu+iil5AAyMbw%#oJ_ftEUR~~A%uacwGkNI9?}2<+
zd9r3`{=?r|rfoZM9>k9}4UWe(wvUsgHxyA|kU<euRs9cIAY=<X&{ll~+FELKJpi@g
zOR2h?wJZ%sYlYW7$u*v<eiIuqxP1c$elXhNaV7Wu82LTy^?RTgs(beq-hT<G039EA
zHhNyb_(_7+?nbMFoIV>&^)>nW(aUA<DerS>2!qtxW%%PpO8JO9OF@s{L@mo0>@))*
zp{PI(iBOb?uODd<A6EekM&S44^pNGx$p<fsA+K{$rGTh7^j8fa@TJT|bL(9|`pGGT
zEuj3)Mj@W9Bs&jNgvOyS%V~|)yzY0AFOw0<c!~d~e?akS?R^sW!<ykG?J9P1pvFy^
zBtC~t2|NV=QAvH(n1<<sFA*m5?H=HE`MC+l0^+-3UKU*b0$<?=^;)F-1Gj;C@Hnhr
zxa`QM1AXw9U6hl33Hbh)<*}((%)VccuJHKPO>sZ`0;7E#?nsuIM#gM)--;pt^-D~M
zZ1ODy@0xTD+l+znz^vi1=e}B$Y$m_<&|4FVREQEz7d#Fusw2B)ySS{Pb}Kbq1XX@e
zHTN_ZWhUWQA`^^XsdTQ{UuTH7yZK%~$3E}|=4I|@_#dr(Cu+%Wra>uI{`PuOOQG2u
z2!tX0T$2!B)miEV;?S`0mR!)hms*~DgRY;#vzF8mSG}N5RF0cC9oFY^B%Rfm?+hYL
z888@9_7B$FKAWOo)gQi{I&dm@pCre?xNm&WBT^YPv$4+}oB6acU18Zoqj+NTBJ-&m
zV{jbR687p7fYT*yF+_O`xqMjUnD6(PWj{#*MI_O7nYMlORVUXzC8^dlaR&Uane>-P
z&8U4>pR(Gsr$>QMygV<N=jv_PZwO;F17hIUVaBS$sB~<0Y!hhFF7w{`BbMZTG8Fy`
zguhfP|6X=@Nw}H%ve-M-g}SV(N&gRV6uGa<Zw8HwM$HsM_4b@x(3iy^gi2(m`RoXQ
za^8DQ^BGIcC^($a=rPChJx$0P2A^>Tq2HNfd1fDs1;ClCMplM3xI7_^C*Gm>+->T}
z)nxMfQ7biOc<cUx`)d^UuOVVI0v=U6Xs{Q_5u2ikRt^iY&cT1;wA1sMvA)!Y_IIjP
z-yO-OM8Zq#N5zF{2^ztwoF^0X{mpOUseeg`g|gqG4%NFctlQev6l;EF&amQa3InGU
ztO(iWg`PIEV70i&bbo9;P?@sib;ak5P^E05S@~r2+h4EhHGmX~LmidN8=+)P&+emK
zVjMJ`EArS&b$J(dZD2u>Qc5~0Ahe;KK-&PW*lH}K4gT>Ba6aVqg0?sx&cXOM%t}0R
z$R}Q7Uj+Vn>E)0g-!S{bFnc~vKzrX)Bp6+B*fop*d>{ti8R$;-NAN09`+Kk53T9bq
zVM+p=QoP`-VNWyVPqIaK%U5uYk1^cN=OoNy<2y%gEH@7tw@TC|^OP4y0$&2ce`1rT
zEQmqI+kwRLRfuo^^4qtUfv_*$Fo&hv^`n4=Vi`yb;bDPivzYqXFWnHqYv{vX0VCZ!
zTUHrlVBQyx%9*@wnb=QzXJ0#Y+)47Y4KN?yAd10DL>M5aw{iJ9nD359Q!Vo}qfW!U
zg>ymSwH$3aLmPj(I}-5xA&12wYWIK^3$yZi2=}(tJAdZXA_K;@Y6?5edsPdYR#Exq
z3MTdA@|`E@@O9I&eQ<dbvbGu&OArJ@&armT7A)2<*sfIbw>)_(H?KvWu7Cvc`}8kK
z5e@u2xnTDYHdpnfc3$Y=TIcp+3R-n;yJxY<qe!pKA0|m^5hL(H;b%QuRgl9c8aSxS
zR|8k7nGbj+2!{)I(R=v9$!31lSqeQo!5>P#-YbO9ViUQd0L5KbYOVgMwMl-{f+Cc)
z-F}wfjg0pd)ve#<iMKEQ?q(&R<<JW<##6xCy(|`@(LLq|1_ucPl`^lp=tC9$MQ`y$
z=g)y;to8fBDirZswZY8f&`T?l(_5+jx&lK2u^td7vR~7VXbT>nWp2!#K<0*nYF7sm
zb7ctH)?uIS%q_esIz1{EZZQ~Z%7$sWWrhH(zSl|r^+xi8Nto%|+jj<?b_m@syP$sJ
z(|n&VrB>=@_>4_Y=hw8bVA>{2nK6|uh4=X(wX-Tn3dyyGeF`_R%y+)rFeG8Bh5rRW
z#k=6BlGtptPF@Dqd)b5c%%!^%p92~guCH^V&LaJzzH)s9rimJvs*q?fNi-iQ6x;?N
zfMlEUNiV9uy-N=C8mu27xg%ffSi1&Sj!~h?G=dEtmB4rVMiAk%>f_Yrf8(b`|H6XI
z-x-J^#IRrhvdo0E|NZoNi$HW??$jg@BhezpgDGC+mnOvY&6yM+big1FqE!d^DmV6z
z!vY){_@kZsD5Dqx`*6taO5P=H*61doroCT=47G`5l7hY$8;hHPp@sJ8G8}$9v_kl_
z&wi>5mxIxkGi?3!C-xqI3ln}>+hH#c=2y7-L1A0RyTyE+N$l}>M9g34)P9Q2xF)7c
z*?B<JXn+}Xf%`?;+X-Foy00|s{14|!sy2<STL$Io!h$g?wxF+Zt(o+Dt5|NHkW!+#
ztNq84D0-`qtaiK-+JK(PA(+Fs2J1sMH^cs+FKuj>uDdKiNXid``vVMJs~?e|4#2dq
z49ylfW#)$Qg=>czp>wsurw9_hV4#QU^s=L~+3#s8w*}oZnwTuKGJ1jr7oVUW4y||`
zfaSz6HUK)1>-j6YBa1BS0nVQwDg$0}w))~pt3eIMufzXE=I7;Akp2{Bc|XXZZQ2Z5
zn5pmxZ0qp>c5hT$yrHYlY5JtQ5DsPcsxd-iU^vO>+qkno<Och7M<0EEmPfaH$*=-F
z9Ffmegh~F+OLV&qMdYQ=&k}w$!^@+1L2UPF$Q34-<3sOtSyiBd^`A}hhgiY{>tZ^M
zitIfZjnj$^!VxpMtlbT)A013>GGBE4UD+Nm5)8q8$FRZCAN74~-|~(oDeZH4)BN=y
z44S3?6?~_y?>owQsg2&40P3(tvtgWd_Zl1RE@Z6No~_8lx4`m)wYl_hR$QnvY*laW
z4@x|4=pBq0OS7T=;1+FL(<`hIv}BPFP#d8F2>u@Mb1MWu^}HnJhlIqH8_(*LwEzsa
zCmxd+E!u)@gJ>Bb4XTMUP6vn-QOiTGS3fh!R8<5D=K}d-4kwt{u)O7xP^h-kGxL_m
zCxf!|x!X}ZSwn6#HFQ8OF|r>N9$5skMek@rrbCHQCYgC(D!aYOAKE1h`xhYIOvXU4
zHHa1qk<*7Wy0+Uhzb~P<_aP*V#B$2}O`5$n3Nd#)8X*H4!qvN<wlwwwRgoTuTXy@?
z<*a@%Q|LdxF>32oIcle#70L@~tLfby)DTkPU<?7AUv6Nez!Lf6`5QLgUsjyxde+sH
zuf2vcTRQtHj%CqD#jm3TE&tNw9DhO(?W|<0|Fv?IV&G^4cgK2>n(jr(17sYV@8m^E
zWs;f80~YwDD(?*k+q`E2CSI&>k$!HY!;Bp;3kl*>9R+H>sTgjjk3GN;QgJEPjjj5L
zQ#}mbXzG~9?*+bJ)LF@>;GKUZCGXJZQf{}+jDQz(Le7{Q8fGhcxZ*;a2nUcpv#nmc
zKQgn8hlOEp9&ppj%l6RV=ye)(=-a+Uo6g@39NG%lKU9=jhX^>`TCowBg#OziX~gqT
zW3%8KxH$%<MsPig_RDVT-!keP1zb9#Ge_Dg7dEb|EPc4uYquriUZ?N(loN3|a7}+4
z%;(iq`Ry(5G<)TBy#hw7NxCSt@f>bIa&aj6g)GLfJ<w&tb)!#(n1T5+`3k_bxTm$#
zCrUxwBsb{Z+HPDZCt@GQK8280tKZ1XnbaBmR+O0iwe!QB<uOTTcezNXsX(QBoX@D2
zSz@(Qii+v>bV9BF2QP>1Bjw$Ub#|^$fOtg)%?AuPc^kX?%Q+!>V0b57pKc2XG0MDS
zzpXOt8IA&R+gt!v$mlkf-@lv;D7Gqar)3*ylu8994n$jFZ$^nMCp`~hdm=^|W*mk;
zR2Z2*`{xk7P3<q;Kv#-!gBkXhb)TPOn}5)cYB14V*P~aTVRtJtx^j!!pK;_qUUUYP
zUU4H|w7&UedBxJ`HziXyU56;j7U(UcJ+PV$e1|?F2LNc=DdMP=dVLNB6cj}3jgy+p
z0_#en{McO3l|)HnQdO1oGK>B}Osr7}E2+zBGO+4;vvC;J^3-fzW!m?Zs_!KUZ)eOa
zDOTDzUN^cP2~w~9-URySwI4N$i4H<662!b8+D3nwJ3cpG^LP`17pY<v>3hlD4FCq$
z_CJK(wTOhsDcYv6Zj{{GJ%MZnMRk93Kd2z0T9QH6`yI^FT3xkimzz`UI#fGiVEG>%
ztu$ro0dpU%pY&JWvvU`PwwL$W+R;`^4=XdzB1QfH(w8fFHKFkn;0==g@XIYj3`dn1
zD3Tm%YtU7_Cfxs$nTd-3i)zJaE!usCo9MMl>al-n?wgzvV%(&!tp<uIH=H$<9n<^k
zlkKx%++G<0m>1Ozg$R4jRs2+dCy(|L$2+Sh0>9(1d67yT$1MCKOiq6#BSkm*%+NmQ
zYi39%sh3ezb^zZM&Eb~}X=;BntivzNA_6LSFj(xet<q?dkziADZiWE4$ES|nu85cz
zV#k5-nbE_4F6GnCpUQ+bqiPiEej7Mjg%b5)JDI|)1<KiekB=d9lmisQos3uhsV9;6
zJ9bn7&39k*nnKi-geLHn`ON5XG+A4*l@t)BP)dybd2Cc0`+2ascj@&n`3z`ZY~&1Q
zdb?XdtA^?A*qB4?iFUdlC*k(1Q)R%<W9Bq3zb+HhTLV#4;VSla{cs7SlXSIm3w3QD
zp?}Z4TbIw|1?!OC9d_oIS3b8mvF;1~uVnC8U7`;!M1u~%#qW+n44C={BjC9kBLnpe
z%=<GTV?=QZWLKX*6V>VqkF)>_Yen=P)pzw!8EUCJ3@a$Wo2{$;yuH*y+TiWb{RY9A
z>f^KKkwy$cSQ&nd((sfT-plR|*^g^p_$Cg`rCqyx`5TeeV<0=Zf<0&wHLAvui!4L*
z=pY@pt^XD&I6f|Xqs7yv!jRR1wtbhYF1UEC=kJb5B^@Z1wQk!YBh-1=+F&V(sXh&@
z74nPZ%0Y;hyO9=KhWPRP_n6ZQoNTG*<@LgHrtDb=SZ4U`-T$~o0$Kb3x)-<mU9h|p
z@Tp8s9k(BU)3Q{7k`HT*z#q$0?4K?9rx;LB8L0SzitG}9MgPxM<$wNyF0BXp5*Q`Z
znz?1(g1++ra^Tiq(DSc5b~N@G!LVUIA@o1z@jqh3z+k}`3NcTd5FWC~(sj%@lV?v$
zDn=-_Y)^j2|Ivv0myGg1vd8u?aFBL{64n2P75vWu{_z(wpmp33{=`?w&G?Vn@E^bM
zmy+^XEW9ErXvi3dss2OtAMJ5+DmxHE1QdDVS*s^&)LCg<jxe*N>CX26<?xKLQEc(H
zMT2^ED-Grmd0=p@1ggv?lO_<Md9c{@6*N_30eL=qx;*pI@)#iQcR<0ST%<r=>ebT*
zmKjAL1b=RVvupnW$_^SKf0%eM%T9Wz|A#8!KQuIWd8lTe@*vZ_k2U}Em61V#c+Tvt
zOeVtZF_3dD=$3o?tQs1LA{Nl>P_I9K-+oQ*dPSW;s}uzs?f6EMpjcD@3kR)Xx6HHH
zkWOXS4Mc9h02NaKS%2UZ<W)Ja2@-MjEY99N%P#GJVR;*@)kf9j0M_|+-Hy`?^sE37
ziS8N5vry;Qqv_-hC`kV~&A)W8XeQ6>BNLh`kOT9#!Xl9PnaMl0(gCN<uj^UPxla)K
z>K!sMcLck&JH<ALWxxV+pkN^R#N8z^5ci2BsM=ott;FVXNW}eVo6LIgzDb=?P`$-^
z?oy!!Jq>ZbXSaACe0uPzg9UU3I1uYiF8lQoA%Q_76}(0n#lXt<9>}}0flzboS%57X
zrU=A$7P=F=_Ww95aO!9~@K$$gT(fqZQJ!*I9_)WE<ayRpz-`9sINJ1&yWjOYOorQQ
z9Kcr_+=v6|(mP|oA3_5LQ0HS$GdxJwG(V}M<hATvT#{A~Rp)=G+ZV=DyqHx?qj-b$
zMj?&h{xep{>LHe`y-Q@s)BU0elSfj+ItGTp+st8O7ZC1ny3l0BdS<fOD&(}kw^tlL
z0A_PaJ(VU8y@=<YpVoWP!Tb0n2>uEJ5NKif3|^M6m{_9#=a~iOWxzNXX%4=jf-`vX
zK>jRWkgJH&cq;G~6k?x&cFy8^fXW#V-M)53&3m5|0~C&8z@@^GZVRFb0L~`>2rYl`
z!UEAqNAW&&(HU^1Djlrp0q2?pDgBYpy?ym5gRcRx|KkW_cPRgI)5+<^dnd*c($Bb0
zGTWvA9zUKZWr(d>1p58F8Q8p=tVG`CpDlzl>0Jdibc+<wRieCsU`O)i3|HAW)9aF}
z$?Z%$Js^kFlSIIqNcjpoq@+(4q``gYxjyMYeM>75rDa9NZR_;Yy$jIT=#Rp|VoxvP
zf9SQmzTQcKqnQu_C2VXBi2X;SuloQbzW!5R{BPw3=Qp$9#S6q!&wYA9aPcO;Cj3A{
zgAx{mhxg-@)tf~@C1@T}@^aR32pe;Z-2L5j?wp0ZrM0sqa`@@dTQdJ=QYrL}xld{k
zcf7A)j;SrN@DECAN^!Dd?Rh=ISzhniBVo)M?lCpO^qnL6)AXq6xYL!=@JGE$QtzQZ
zx&Jv5Bsm$3!8<=7-WdU_#ZKigY^9%mrlLV6w^Mk(xAGY<ZM-8V0yK@LZ{S8+-`bL3
z=G+c<mNjn@!AAz@fiC^fX8nzGZdI8Y!xxwCbh^z%H@CN=AY<12e7m#=Sb0HKg!so=
zJ9I!@$cV)Gh({T?mcs2s;008=CHM00-<l5P0A1vtazhDa8(#nm7^!o-Qr7W9A?D8(
zcvSD`4ze#PV(JYJ-(@oy;OM*l!sTc}z;*gQ0S>YbeS`@{`V#1MzZ4hKgEhhE^zyO*
zol+d5yG76MKtXcX;1M$a*}AFGmZ{C8sELb<%g$iMny}+Y%(nfO#0Q#AtM-e*WPz+E
zx5p*X#m?AQJ~*iOl{Jvgb-q_x{0(RVEz%VBIjm;`FOQZaT#govMY?tAlw$${0$3+O
zfWk-o(2_wF(pHdxF(av<xe*0srAxFR>ypiS)&&L{=<KiorLF`<8~_or5V7gX3wu=Q
z6tW;dxOV2<!t=Oh(^8SHqdSf|`Wvv6xsO#~|LgmQBuC3dSmv7rF)u@(KZ!Omb-bMp
zm?Bb-kyWNZLf`wf7HQS6ElfGpFtT0$cy2GWbd_;sNeZ{yI1pgt_)46*8Yxe1UG!$m
zA~6v9scxi{T5J1SmIAk$D}GS?+?<QFFXPYrAG@tO%E+ZvInzUoo7-IE91}6<Z%X(_
zS0uWw1lzUaag6-%ZesaqqDrY|*_4`$=dW~09-r!4d}yQwoMz=vKYDz8TV%C=AWMrW
zdN>B(F;x48<kK<1s3mC*7DDKe2ie8<ZP_UFvbD740~y_)F8LCrVFYLHsVh|!L;9<#
z)`vcq#|6K_L^7{5GkT^6XL%P-4Zj9w#yICg6{*-~D1TwtIZm|UbIjWm2pV81n2NC;
zpd{-KN_LSq5`BI~p6}d1U$o_k8zvedsK??tGWC>2;P}tide#o9l&EXaHn!Z^&><59
zVqf0KRzX8Un*&8}<8DhGok(&v(6E(N+%teJrLr4Q7QgTtAq~_Gfkq-=cW%#inoOPj
zrdfmHb<&0A^pf&L1VQM<(dK5suCO`3-7<s|$s&ZiSq4~!zO&*Xf<0$e1Tu5D(O_yi
zkXK58E>afwlXeZN`dS?^77N5Nm&U)6!eH0QQ!9MtdAM*scho>8U6t%$yE^1X6Qh~#
zRzL*_U;Wrfwr<fF06BeiKDhk~qA}ZGqr|^60PztBozUI^?<1m&A{gorxk3FzXZp2v
zfO?5XH`yA}20du8OXc37Gyan4tjv*3V17_A(UrdN>l|dp6SUJ!WVrbk6(O_z`w!5#
zQv?~><2R7dxAeJ45i%gyXZe8^CO0_rujS`jm`p@5CoGcUCs8C*n()`HldnU4Wh1w_
zF5@lXxKD4gC-^<4Qi4mI$We6!7b~uL+}jqBHHR>@eRjnapm^ZAg#8MI3ylxg2g5Jf
zsi0`Ba|CBUEv9VlJH4Wo;JD3GE<5G?WiQ%Y*HgkQpA=Z+Zlkkli}v0ybVWJP#kLZ|
zbDG=b_6YrhgX*=wM4BcDF#Lf8cfTT3Xp8xd_B84=4<SoCDcyWWU*h!SENl3?$4vcz
z#Z7F74V!HyCe_t1ckVvKmC-+zRdCvy@fP`&7#p&flA4U1e|`~LmAh|=|KPv18<vch
zWhLQY=niuAJTu<?`<4<Mpjuv8Y14sJ8h|aL&-wrlEd(aD>iGN-S&by@Rz(`xM4%%#
zp$sbz*}F4l>T2w*?_UTVzoVchQkF`35u-3e1E>ic#5q2J(15B2+2nqqxB;nN=a8US
z@Rjal2<U}nLKFfU8Z3*W!Pq4`{;=NE|C=HW55Rev81`gZfbQO7Ke_MavAVWM9mTaW
zuxW0OQogZ5myUUPb2j`=1fiYqSvW9I3lZSQ$V?{q0i>GCHuV}6aRPxc{n`8PUqpcr
zL1jx{%hzucXd(NqPk``h!yGa?ungu(5tmt~#k<M7=p_;-9=|6Za5|*{6^sdY61|#S
z)e>M5WW2X9-e*paC;s;nh6Xh%3ZakLHBBsgOgVD!kd&H`^-0x-9TtY;cnnhQ)HMJ2
zTD)1A4oMS5-68K&E`CFrdffqt7_!hoxSMHMp*o5(kPp8V%D}ony#CNML-K1a7LyRy
ze=eerkESfMBK@0*PL8+Lt1ye3JyJFI>u@u1B;DI3bF~c1^()t-pj=i4HX2d3l0^2x
z;2_U$3&R<|4q~ARarcifS3*sW>~lUgisxG+kg~(q&G>*e)V$+_m|OfO8e&N=I`d)K
z{#BImPkwMexHdYwgRb@k8KYG}7;32M{hzvjyaP)xeW98F9cWS>Ho@J)^2uoWmU^)$
zP{NEHUKptj8q$qGuay}ws;RLNUI(>)yBm&(5c>tZE{qhwd!)1z7Vmt<qRkmv2{~~m
zBAjcrH}m&|g@=X_5o~gIQn@C@qg(!<7wvie!QP+RkMY>s^<45Sp;V<9h3n&WEDtyA
zlSCvxi!+|~C%+n4m@P73o*-Xu@g0RGA%~a$bg`?lk#Yj6CX+ZVH>{$*?0aU`impQK
zhH7?AW`Y<i)mY4b-@Ir?@U3HZ>%B4eI<uw1$lf5QlMU!PP->F8I#<Cf3Z(rC(8@Q$
zAYjngHns%_ynXXhPz-N^S~gV_<aaBR-+_v)lN`HcBTWupg(n1+R5c?Mq|2;)30e9B
zTvc^V+G&(D9DJVFUkc<ie=aV#mUi@`8v-jwwE4^FHuV+#I$*S5FDT3c9ax9!Zux=T
zX^*lEfBFZ9`IMi0qr$z)gT#^x{T{_-{O*LNhn!=ig<3n?$T>!h;SI`(F5@W)8(|Ao
z*hd~3_}p#{NXR9-5))_FJ4xT}QIf9Z!`>~Ze;#D@h~_E%<C6DH*2}D0j)U7N#7tZM
z4ck!eR8(NXs>Dy85zNOiav$!T3~bLL!TRMd!l*i26*-HMD2~K|jkK|l;r6zD$!yoQ
z<vyf5ql1M}%I{o`IY(R|P@OiHNE)H${pN3m6T-O`KggpbtZkMILOPM0;cXr|Zm}Fw
zAU#&HXd>oB<v$b=3?q=h5huFSyx`hJx$Ow*z^@z0>*kM-?x09-6ysGb8-0mXG*(iC
z`i6g9s-cv#!XA=Jw2Sq2?4I2(o`WVHqi<e&@dKT6t5_x)O*P#8rqmUu_2m5I0ChII
zK>E^lee<U^S`RA{=NzE{qP4M&*B<caH(lv;$M?aL=M}$+e42AImBakEN^A73J$C#s
zWoI|Lt-=sluGmS-(Swi~>RZ*z^;&oins+6y+~!lJ-xo|sv}G4L<RNBJWnNblie|Ag
zZcphK4_oT<*qRV{G7%13<gKQJHs7dwc(?DaQH7LPC@0H^6aGSmR#^Nc`t@<;C^89}
z>SSc|b0favW&N1n6VdgN_2nlTB1tJe=$%67p#qQD7HNno`kjs?WNJ2JjP<$Xn&Fv!
zw~$e@RaIQ}Ni&i+MfYDar{vXYi;vYQEi4@cxia#1c=&c;1m32^oh|j=Kotd%&yUtu
zGJ>2L>>WiQb0(9@SSEgBaU@deI$vvx<CC~IVMK@o5Ay_vjRZ?Cg7u$z>0h<L2t3*7
z>Fz{J8Fd>&K7@p#(R-mB1MMiH(M#Zc$rC0Ze}xebDbD429eNtdOg9s`6?q5vQYyhv
zfdc+H!cSzPin-#*kt!YYA@-fARv^gOX0h?xDdhmb%InqIxzzY1r~uWq3P~Wa2)32n
z0Ht4%Cy2Fp4|c@`yl(-a)ckwS+wmr@FQ40IW;B8dgr{j;%|TXQfTJRjiq*=6-tRw?
zTC(ZAQGdN>B`HR#t$9?>NexPy+5$(y!8S>MO~^4p4MAJ0&LIfc<GU6^OO;9TK;rx;
z;P7)5$_tFa>#^DX$qW1F$*kWFgA&H6p*>X~OQ=LlN~(L&44e(PZN)Z#L6RmxQ^jhg
z_mcU%#&$_3p`+FJUcAP(5@(UDcMT?5*majmCK;f?9_J6cV1iA|c&MF8nuIhZ=JKr|
zLUhTog-yDDF2BH5BjFzPUDDRb9!7L?hLZW3yq$!Ja(+XAn!p5cK;DU}n(uM<q6;2z
zcb#ibiPXN1QDHl0u?X2_H}zwq#p1*cF(D$6+49lh`4&E$&Vl@R)(B61JGs95(`t9N
zK3mrzVU&<S=$;kVksxV#dmTZ@sh>mj+Ymg~*J6(bKM0ZU#)2N}On;*3*pH`RFQF(0
zmA)U4%b}0v8mal}zZK>Qq0lFSpv}%>{}>>6x>CW!r3)=gUiY?O_Ga<KwQ6QvCZCwv
z(D(xS(nN5<(|qtr+;PKFFRS)OhFUP*51CwSx>b+OV*hR`$fnG`&_V9NohGUw@hpGN
zb0I=IRbr27v+O>U@=8cK78!4&@{YFp>ku5%z97>alLZNsu|L*Rb+Ul_j|F<u9+z`y
zLhaj17Q;X6sGBxJ$kxsJ#8+sWsjTGDEV!c@-b5ky!wGtJBgS;pFLgb8V=7KPPZ;V>
z%DSx_Uh}zeM#wQUsAGCXD5Mg;7!J3w6LM4cT9+agR9M9wYUQAmT$Xi+a@5RQE#C`%
zfkzwsfWQO+*Y_o`NUPfA{Ek-Q_8_m)o&Vu}X1R5$qfAdW+~E$7(7|fk;W*X#fW*7|
z6Ib^z^6tiaLSB-zyIUrXgr__l0eR*;ub!2t$qJ4T#-tfCxG3A}JD7m!<#!o<c5A&?
zh{I8MIG+^D9g82jBhw9&J|O+4;s#q(vLTG)t1Be*92%+EPP!AOM%3pVjo;q=^hdBI
zu|T?NdkypveVkb$&*6mB3XiI8v@Z$S(?A%m6f>eA=m>PO+{2yRASkzZ^L?x|`4N60
z0I0tYrwTQ_0l;rUN$_r$9y^NK=MgH6R4=Trqs-%q5u2T69M)fsf`vs@xgE`4K}3A?
zjA5Bqm`I4L9B@t=Iw;6x01owOkp7j#D6p8#RAwQ9$yD6taAs-u{5K^DLl=`fFdAJK
z9pQ@iHwKSTqvBX52=x5^5*`#~icXl+asy%M{ok=O-G|_{u9n-Nf%5@}-V7(D3V&8>
zkgg9<O#ijq_+7n%2xtRBSu<d>1E_7DiH~&-8=Ryg<d+JaeQvneAJNGnlip}rum*SJ
zX1!06zj>IFc#ws(4F-)5Mc|2(y7KSj!6(1bBkN6$N%Dk~0{>P7rnI-@Aueg(U!r?l
z?z6kS_q?~~dnC+5dIl1jOi?h9MUZ^~&QZk--ka;DmbmY#KXUr^A0VTld#7O+<M|~|
zG<oBSXDlvHH0PCTGrO!CX)PUOxf)lC2<h|EIo-+$tD*&?AWFU;sd1U5@Lvfy*1&0d
z8IjNxebA?l;yLPug)!|LlwK2q<J1w5uuYrlR-;vCIZVAt`?f`=_R(`>0ZYEcJ6rIQ
z!p<nanO$`}K=7s|Cl0q1eu`~6;Bi@j3-<_msQ)h(Kn!V{25oMWddys{B!savPH*w!
z!}z<2Q%=R=phK9ACyA7YZ%ol#D#9Fc()*ov&5ab=N(7_^U96oSV;4VJMQ}N3o`sL_
zp(z_bjz(kO9>ch{(m(JdAuBJE-Ez^ye8qOmUXtf7gM-*InqHG8De-yC3C4L17k+DC
zWyJLfIqWkrP4-vzQfpjdTG~08KDa?4+u>L))d>-A6ju0FGpN#-3sWw6bwdHVo^B*<
zwC-=3HxMTIv~z^mleNRM2jXuvE$C0Pm3y?P*~X*LyG<`xIHYZl=|<;1Z?jW)wSHa2
zAv71CL{L3GYAm5z2u=z({4i2iLRqC<g745ypeybz&g!^6Xvh&@Nz$|;$jrII6&xZ<
zaM{Y~F5<!1XNr1AsMflix5dBn8@7i1Gv9PvTMAk`f(!b}cUHSQ;-p&4m&zHQOIJ^O
zy(Hp?Y=u>*8>>eFlKWIyUS|eJ*T(CAZ&-ZMLgQe*c-8_+u1O|3WwWwl*Dim_b|#mS
zX3SEHkH8}}FY1=UcD^vljv(4(7HCKUIGZJQ{Wfs1zY7xHU2GzZB;iZNVbtnHJUvaT
zb;XV(6&SKGFmB@OKgbaiKzHEsyfx<leG4*>ahQpXuoT3Mp{`@fOTuDMtJn#o^a<F=
z_e*&~eMw9`h@nG)fn6FEMwG5(dO`V3{%9h{uD<^3z=TVOe}*bB@XD10SXWXyxQ>0w
z*kOVL1fK3m^#L0NQ#I$8GCf_)J^>fwC!zLjUtfq#1rcl^1SKGi@DG7%#EZa~)r!0@
z(*4iYzx56S_$gxg%AeI{vt{}Lh&yn@5DYH`LxlnbdF_^cS;+)PQBhxbmZ3rV+xdI}
z6CnH09Gku}yQ4)u>{ByfM%tYRM89#>rw_ow@1<sqE{BkP7onew=5G&bZqOYRtE>lI
zD^}t)KFw+?bK_)Y?Abac&VYivwE6%M$Z`rS#LEIPFD|1m1?t@v-mengBt@zz!r|kL
zu*DC^H45JCFDxhQIXi#*K0&{1srs<54YwhiwMEwY+lm&-%rUcOoSVk&0RJa+S20ou
z3%Adbl-K#h6D|o%DbA5r_g8PTlSJ%_)C%pRBDrS4IDJUtH=ivX8}WYKk`&L**;#qv
z;h^Oph)4b)VnuW~GPb+>-nts1>+7r|KWoK%Kor<J70%Bo2DQp8n5TMUYnt1-ve!nx
zG77tTP`GlYtycTzL=zrz!xk|n@Qf7qocdS8UAXgt4-p0;EM7@y4bf++GYl(+l+pPl
zoL?9Dy7i6u#>7j1JQpSKvZdy<l(&h`A={d4v|hPl3-CgtS!`33mQB4N|BlwZ<8kQ@
zspKm9Y270xDUMDeF|a0DV7QiU4dGOJ+_bBSF^QzCJ41{kQBMFnB*Wh{stL*vxm|$#
z!^Ij$)TeYl`ProLM#SYED8CbOHH&#eM-kj+!}?dNBL+^VElS;`dqmz+s2+iN<4%Z;
zx$hR1Dn9JL8MN3a-i=tWYEi3L46!oAfjrm=)i8`5{i{p#{La$B^c5x|)jU0@G31;)
z!5cFV+~jgUFWXUHGGA=Oe})L^G<$wqecIc&b)GI`;zU2kr6Y0J9ly`?7s{IUxx1{&
z4pcr}!+DeXwJ$5}`ev(3x-M$sRzVQY5%&IKN?b|X3%CI>Z-36V&q0xPehlUa<bU1t
zCt6_0$Tl?00>zBfUqPY1(R=XeMG%F$@wX5wVPVsAeIiQ6Dt5Jau=+<D3fQjMp_i(7
z!{VVZ7>{K61x9~hx0%=DWjoLua=JdwCVJE_+TnFJ8M@c;8bI9ms|zLw0}o<^HG@R_
zsi98q#(!vrG#v-iFf{_5a`Dv_2vmnBeP3t47EE_~aiMgB4Sb^<?ziV*h#G-fh-m!^
zJ~lR~s~^+XNdc8d;mGxY^VgdQa`BVn<8=j@*>HP9H}yLO&LywIp&KkBSEuIUzDk8s
zh|(O>d}h^d-L2Y3c=|Y&Z*@6~LD-w$+!AhEN_wM0w-=#rtDa6Rj$|4YdDw2YGMuX`
z6FTc%GD4j5orfG=c-6mBaBnD6Os?7ys@M-DEJblKSo2r?5_1MCXeF9AE_XUS@Vlz|
z+-SG}vl03QTO(A7+dEHf`3BS8i;=G)tX_3deAxA{$?>DiU$6!x)2M|l%Rj8><+DkD
zx7P`yolECxOn6I3;K}tW*2Ji_IbWSML{amqab&OEOo6Mgc=u??QDURZ&ykih4{cK~
z{+vh-{tAZtTdZ4i?xGdEo5bO-@DAA@M$tj9_W4F{a|MlwD%j5P<`9OxU2g?@OT#qN
zRp5V=CRdK~etHOVj&GxoiE}2p=M7|McMUG#h0TqA>&EOHNawFl=VD=MoDB6oQ1rIe
zw@x3@dRIr-{cdNXve!+XQ%$lu9&*<M9-xBUQ@W826;iBz?zgqB#Bz!zZ#<08#aa(g
zKleO+qKyLox!yBF;*oq&=VU8qV+d58n&qNlI7bto9GX*t&2M?*r?`}Au%zmxxgiw?
z`ygRm>>qh58g?x(A{jrjNf5Rmsq~+A!7u`lH*0Pv)B^TDx!M@$|ASaoZX&wlwA1c@
za$+~EkJVP_{_$VGR;S`+LnZ-it3Fl_9TVR=-ZR;gaFafec~X-d3bpO-3i*B88+y^U
zayV*?L$$8YXGokQzvqU|IZAz(TIKN6Nb4L=r)&CJA>NgcWa^Sa8LSC-bs!{YoFEGc
zYlUv?dfE<h3G(3g$<ur%g`+*URuQ4Wr`h${$q9PFI_YS~%;AkUymJ=~_>meUd(uzV
zCCQmpb79z>qH6@#7#L_Bp^E0*mcKjDUd4BZKUoS%TQ+fX>WlHbq;^m9ERm6L*vZ?c
z%|>dcn)prHE9FnjCE$xmZ8nMZM`50{{wM8a+ogO||5B}F*$Ra8-S;}lAQxe?Jnb}2
zZVzcWJ*$u!UtIbkuUgqx8<Rc3Cwa@AZJrWbnc^d|8<g{w>$I&zPHw$dNYYMx(U1;O
z5nEp*nalJx9=jcfEckW2ZTg@^T83s-k4UqNKa~$G`8jyp3E~x(ve%a7WSU7UF;%Xw
zn^9Y1SVy699f>Bcw_ORLVh3^S1Cq67f-mmIvPZxXx`TeJo)Whu*+JueZ+00Qb_Iz+
z|1=4&VT4q#{Y$ANPK5=ez$EvMnweh0E&Z~#$}`mnq*ipxuH$#%RgPc${!zIL!sEfe
zlFyLYKw`%F{qyez7+N%ZtEMf;SEECJ`x5GyH|?F}Yc~&%Z(0(}Bv^FHp<r(-bWAWJ
zz{to*caARnC?uE3FVagL7&u@C2O`C}s;bVl6oP_D!FGDB`SM%fXt2TUZgDA>){4F1
zhrENMl{BOl`$ZTUG5U@3+)<|`x&TPkJVU2X6j5uLG1zMoHfZEKKN))`AjItaex+h)
zsm1Ts!6~4I+XoIJs4ncPh0Jf7Dj(x;66bvpLq4DK%BS9f7~$nbEECz(RIP2-gEZ#l
z|BVUr=kY0R2b+G<$q(Z`NbR^>r+MppuHu)yo;fD-gG~g*PTiM?31c-C(S19<M6lg~
zUAIn?)e2C!h9dndd+LLvjh#LnTx#!1F;W6(Wfl*Gs!ZL`FxUt;{y@uaBzK{C@ACY-
zOU*@pv$rlw#frIAXQz5{A2~H)$n?TBi3|o!n8Hg-&;uvZspP=6c{!)M{Km5k4!K>A
zxUnFpsBfqnTYH2*16$jsQmv!wF3;g*E3>cN$7K55R(0s%F#N$KI@=J+sSefrb~6Yr
zBY33zE&7or@%;nn;K-GINdK+NJDfHy_VaSX&z-|)uUaNwbmIUs(F^@TX;Vt>;iUve
zqKaZGc54)4PE<GtUZUkKR(uKA!A!>F+{NmQb%GvmPj?Q&AT)P63F#k^u^PWbhb7^E
z06}_hDWnLIFlSh&4pf`VyUQUVamMG#%D?wIkmPz~BY@63)H1T5K+*8`DkSJh;rqoK
z;OSL<$H2YZ9u|LLo6rEi7z}#fN;JVJ5B^{Z-n$sG!&#$%RQ1sZ`2Et7%m}v(r-$pp
zSQX0+#AY1z@j<sDse^W7gE^wdY#^D%IeUM$iv9thC&ocSKs(--vy~oF)3MWyew9PG
z1_A`rd}1PQlQXx@zN;)njeGT!!vREZ#p1GyGI}q%n^AbxNtFAA0JXup$`DA5e(nm4
zlp;44YiutRlnsBC36D|?&`*dfMb!)XhPfe?OI3?(seT~sRyhR|^5WxBpZ=#b8f5w+
zH4>+lMnq9!Y0L1NYN{&k2OpP0XDaA;437>j+*!9UGdm}^A%wP%u8BG=u5>|1yF-g5
zdMK*x?QacwKgwSs9;?CnKBd2=OU{UdN>R@piseAAW=tcRjZC$dx%X&<dMbpzEQV|;
zS(82RaV~7LoG*f;PVnA2kkm|m(}?4)^769UthM~frA$9}sdStAORR%rcE?oOv}Ah*
zSy~MQ2_~9rjMY|M)#G-0pUa7c6X|YQXJognec_RYeJN7=2AKRwzvXIU#~OD!o!eqm
zq)H+koY@<=!A|4)_KT9xV$nVdf%>vp@Mj2w5+})d2UiJKSQS#HqatkKk~~+rDfAW|
zP5#Bk?zvpK`%uTOwiHrfpefQKj(A5nze&HfeKTAXiX5A5DJK0U9}T&OQCh=RZw6%B
zyMvvzT}tX(&mYAEn*83EXc@n0oKlb-+>}@B6yKxpjO7GGS&5!07!yv9wfFOXDtJwA
zm$R8p6pP6EtH7D1oxCkqA8v^!5O1uBRR;HD=x2W~>1sBwOtp@k>PnYg=E4j#)Sn-X
z96n5ZX4_9%H~99di{ykuT(n0S=)s-i-zySGubWt04z-^BSjHgKNgA0pTn_5;Ni}Tf
zgY?qh_w9f0>wmQj(V(2sef9M~Ks^9M+5v65?!-I5b1DEFBU&l}#ODe3;>*fy5G<|`
z4ChK=G@OwRj5$A_o4YMOKA@37%FfTG#)b3c$qY2!t!lRoCDijG=9i?03fa;enb@d&
ze0=(nSttQDq1R|xkTixi;Je#NpSc{tp#7;Dk&}v)?|Ty}0u>H*e4PaBa@|S$tPP1Y
z^LZ1~DuN~j*c>K{>*QD@O3#t2L9gw-mU(siz7;>ta=WQh?-Ez16}0#I(VTAyAq(D}
ztr)f1lpKp^z)_<Ni|k9Sl&((azIYX%5ykD(FnXRY$7@5K?|C>Fe!SVm)&aFEM1Igc
z%flDL+DFzzcXKA~WP0lySBV&>M29pwMe32_fI#LWbY?L0>+%=$7LlC_;stuugBe!H
zRJjD2gpV+#ZkPQ8i^PP4hR)1lehI1@UhMm%zEydFYKqkIv4lhtXJs9@WXrLfBQpgR
zrU`6eYT3=aKIY}~lB@+JJiFNh#5}4HB6DI7N4A&J3NJUDv{AnO3Y=?i3Xlll^XEnQ
zJnM1B=d{JbLnk6=!XD_U`o{O;3#!q{IiWv0hn@m03+p-U7kXL&#g(xc$XIBuHZtb>
zB9iR9PH?=eX`I>Y7_VD$GtxN782nf)T&;alTZU5}Id=qu{_vE69RjjgTQ{V~tssTD
zYmFd#xqgVs-L-x!lsQ)+Bq1(HE35j(?!tTLca-+cgda~BYDUt)J95W>o@b-tuKc7`
zgO9#G1d5kH`n2-m3i}OQKtlhvCQ8FQn@V~QWb-L@Mj1A;?ZsUF!$E&%{<OF4vV4>@
z{W0O!9^1pg#aReBBf(@Gg#3$(ZA(amD*2oQ@SNATw-zROX4|~n^`6(q2*$mwkLDj}
z07ohMlt0Jr`p>Vw8c$}_$K;Fo_W99fEgGy4|DMl<mcy*}H5`fzP!=q7a@hK-IkX&2
z1N!89_y8d2fxD?8m(MspwZYMJ%9{4LJ*R!<0}&A)sHyHQfZ1d?h^B3;k3C1P*Rk!X
zwLXa}{3ym(pMjb$bv`765IMqt%1JGhD(XkRIz~9>dK--SyP|n&aHiVg<%%U*0Dq4E
zF&mS5T}En;f%OE(?8S;F1bhPwD%|9c5VVry8X3V7HDOnL8eeNFeDS$x9WFbqM?n?&
z7Disp&Q6!jiTmpAtePPE_Agl*TqExV?s2Y2^~)mM$VwuixLz&S`Fj|?9~pX&^8SVQ
z<YDBGy>kbTjLfS8ks~C{;~q7v4DQdUbz}2QQEV-drHGNnCAipky;Wc4mHNSC!^@NO
z9*@JpP+htwKLZR?+7;X8$iLJlBC#V<)HN0tdj+%fJB#qhfuKFUF3hm+F5g@kJLBLa
z3uyoO^83#s0hW(W0jQlZ$C5PW&cqKwEewEX6DTh#HoSv2x@WEJl8zmto!D?fcP@B4
zo)sFn<(I+HHd#d@v7J`7?)4JMjIj7VlK$bx1>BnWY-e>3Mk*-MV<)HKW`~jooaegh
zt1qqb85#Br(?+e;Ta)dcI#?O9NFw;M@o^O3q}}=QaH2ZsFL?!y=0facdO0w(4df4D
zF1*TET5-A_66|3Lk@Bb7J$6)b+sm?Q-ppM+D<!VhsMY?b^83eTSP<S*4@&8)TO4U=
zUkDj`#q;F9{HvgsT-qCqJNQt0^2>#{_~n0>0RO!T|N1{x-$AawLqmrWZe{o5zVZB~
z$1TxE60bbxEXzd+Lm?*^frM^Kt%msDe(_%$)qgI&21I_J(x{<G(aF&gVA?Z-sOcmq
zt^e=m``?pi$?(O)HMoBh3;F+X1W?0-YQS{XqE#M-M2P>b82PKN`G0+=K*5OTy%wI&
zXCvSL``hBLpBUgkvM_d*+>z&k%kY2tc>gG%(AE&Z742T4z|Z=>UD3aP+b>xRTt1dP
z?_RV2{u`%gYg?Ni&~4y`n7mT@_W}K;g&~ee8$(3@{xu*PQhENgDn|L*|6UoMyB>>}
zcFxWeK0Z&b!$J`MzKE?M)V^1!iy{>NIPp-r=b<=V#h-ud362nI>+55qqiq|v$RPfG
znB@-4);qW(a`e9sAP6st4K9T!wuZUd-<LS_3Wk?=e&;~*=>OMI>*`{2bD^8u*07H>
z;QzDAUE9GNFSh;r*x=S%TwMGGu!yH;XP<jF9AtqH{AfuY#95){CZ<Jwh9Ti~6$AjF
zDi4d%2kn<ft_K;($`Nm$ua2orzKrO9Pc#e$gIZ3MNvCn$XNc-bSf){c_4V^-6V#&g
zy+U5(aeWHy)P(}-ynK+X5d?9(mFc4h1R2jlxe(5)i>W1rL<WrnA$^cB{T$~oTkrJs
z`_<+kVLc$lq?GFqXEc5P0Z5@CX7s=OLv?UJel6db2h{c=`?c3>KpY8x;vkD=8+^4U
z2jitnzV26thN?Ika6sdp2hdyMs*WcW=_?%)BR!;3HFLE_H`);vW{Fpvjcbv+CsKDT
z(Y}rYgs~Ble}5n}DEkoK;$kE!so2mAelIzIiKN2Cy*Z;loYzhXd%pe1OhCZ{c|_Rg
za{P!M)&c{D{-R5sXUNa*0t_ldb~eB}(-ms#b9>JPq)rKMG!vgx?Xv+0<a^o2iSH^Z
z6H!E5!f!OIbHKPn0mS9JVM<uDL+g#B<^bEr&!7iP8dY4P_B@B&7)Xf&t*SQn7qpS~
zFu|y#fYSIb4}{juzGLq{%F)IZGsr)V;=pJ~EHFTTJkbiJ;*bvh@9GP-BM2C-itT|J
z=i8&02r*b5wz&~n&z}^C<H)cu7T>xqEjLkOv>*U_dKeTG)Ha|}n~*(AumHHc0LZR}
zt-9{O#orl7dAm!*D4EJe3*4lM$S+Aurh3i;T3cJuL|{UaU!kC&jDJ^o56UzV8G^)!
zAOry1WNate_qqfU)2{9yapx<{g{7|JsHwv+sV+_t@POKHs`mZ&$@5E=fe6otr;UqC
zO2P&Dh(I8)$rVOw92Q_<acgE}|M$ZZ`Vq?2hm3@Ok=nI%`N97x0uLuA(ZkA|PZ#8=
z^XBC}+@U51M@;Vkb6-ACKax{ZQ&&1N3kxEk=EA`A!23AvO<EK1IG3D$6m$a~@j5x|
z{nT}^-5PIsf_QGu12tg^5DuGg<Ic*dPXP@{ig?8JpOP>j;V8CG=lA-Uu(!tRcKV9m
zim*~m45!`cIdAWoIpO+U0ZhTZ0kQF?%YBW?YQQ+m-UOG>rZ0mpq#osLLd=#>Khu9p
zEeN=Zf2w`Z9LUve@m4MYwP+kQ6QS`edOP+Eh8^r2XqJDcyFCHJ>Yaw8f{H6iF5ptf
z^SarPtSBh!76a4m57tCH&Jlpo{^Js;oVrT-fnQLm$(^*A<rzi^^tD#bkB<*`Y@XM4
z;J#$r=ugUYKi`%D%FB1fhQn<juIZav>0-Qq4<wj=af3%E>I-$NA_#jD0YX~xW1Gnm
zt~VML<0XA18Uo+#K0Mu@MH9Gy8+PJh=9hV;2A>DYzBSS?V#X10P|$4xC^yGD+hJFb
zwA8zl`w&jP8RQYXGzdZzRj*zF_Fo{H@o*;G)>P{>*auke!toHYTV(<KJviXZbZ$Nr
zm>vupZI5J%Jj{$ocepc-9s&zkk#@u7{zB~g3%B!a7N>|2iOcW}*ETBvbThi~TuEUI
zZ)p*bP3KMkF5ui|-D~fh|A)7?4$5-<!bV8}L3wGA4g~?}kZuX3q@_!c6p-!)NhK5|
zRk~9;6%Y^vq+38h8tFWXy?;BtZ}yq<-<e@%&oCS0eV#kky4DrG?}HBNOzSoGO|K(w
zcgF}ENZzAE`|DKy<bZ;yiu^eyCWf8GzkX$Xf@EQn+UR(RHd@&*i}BC@?S&jtep*UO
z%H7i!`BwuOzPzQ!v!k%Q+9wNW3|2<;Gk<)-d%^HHRayej6COgG^5b7TzaY-(c|y<8
zcg}N7|91j3&1qmO)!cO~3!HQ28xT1JT0trMhqf7(tPek6vgC#KgVGM7Tl?HKd~Rtj
zYjNfSG&1b065{Fc#&hoQ<RsStc)z(ncO888hDNM--GD@^(U}2$#9NcN4}mVOA=gFi
zoBVYerEq1kraXCVQk6^xyy@SyivWvZXc!!KbnqraVDnlJ@4x1p$rD)pE!FrOEEL}2
zaB|#ge){`pDR9VbsW(LyJR!0nXLA%s`AQWq!g*<1w!!LY?Cxv7E7vLH0Q1fUC1(la
zL&?uW>YSDsi*UH{N|0@AY-H>^;6AHyS-)||;FP=4enx4r3nK2&$rA(z41I0YHH;#I
z2FR|?Qi*uvG|7N)s^_2<ug^DTiVDo5^^A)OM@!WGu1T~da9(Y{Nm>f?vK;OAQlt-!
z{4B@Hg1JO#GPc3b;?Um2{@1j=+A@6*$&RYH`&7DwH<dj`=Ccc+U#-9-_dOgcD}&fh
z*7mw??O;mWAz+2i-EC(@HAlvNS2;y6D&#t)0vulKq1kUT8@Yjor8<)USx^1&v&D|d
ztdA;GqR36#e!uIU@!iaVP-7Js9v{{HCTm#^ULxze47eJ)xaKChr6081=cV0ubNpx_
zF1n`>2Xfy?A<;l^Z*5F%>NlK;D^sC0l@#o+X)(INHSud|G3XGs&mP%Z*^idYdDXwD
zbvcW#eYPU$d%BImYcm?_vNqZql5?78Al)dGb={1y9f6pajI1HzLi}9~&@>|aP~_sp
zw-@cYg@gZB?n&b!yU}``A0hVb+zaEscYZ`d=ON4mt%Le=F>f=KPi>^g?}IXD-#|(m
z%REZ_L81VOLIQIp;c9geIPuj#6s2CDtl@qzFDYGIPC*?F@h@%pKXmieRO*5G{}zNI
zy;pZ#@^G9s#w*G78@+;eetvyV_z@%q>R0timuWbPXu^ST?b;(rOvI)qcl%Ve<F43N
z@DHLRrr2biO>BjyZi;AE=qTdOYLty^w5uNIevK)S-(rQ4WvIq{z}vUv#XI&rER#$5
z$=IX(UBE0@IX&|IF06W8W)Eg7%Zv9JJe41mTl8s8Q-YhqSAmw7`S-0yie!kG)z$Mi
zPIgypZF+y6gBRc^Hv=jJcopB0x|&*eOYseJ8&doi4m7Y2P$9zx$B2UQfETo2m&0TA
z-Lhyxy0jylQJJc|-<XM<R4~tD)~_n$8o307AQ!^e-`HMPR8+M7s&7iThFd!}eGBMa
z6#K9vkw7x@gXmb6$$GfJDu+q;Bb)Y$oq&&**28S2uYKRl_RjKk%7INrq;`e1yS9D)
zTk8Gq<N}Ti@W;kp^I;i76z2M36LuCiVr;GoL`||-^d|Fh4yLi6xn4`X0H!dLsU}!B
z4V6Hi+q-(w_Grou(?@u@GnDisV;5U!46Fm87HlH_Z-qIH0v1g!w`P{q(KU%i^mqwG
zBW8Zl=2Ts_<~I-=bXDLRYG8KYGG#jZXG@HgWn!_6x4jHAuqd2@kg-m6oOxshdxNjo
zs3)Hzte4=&BBT^vv86o9z21gGN+IkP3)x8TdZ+52Pz`|a;8z}n80%7~*%){LX&PL?
zv<)PhQh7t4)mT?ow<752Vl`Y~ta<HhysdxjT{`Nd1(TPvgsut`q=gqVgC|k-Lmx5k
zV|913=0PL{7g8$LHrW+hZ9BX&tht<7O5+DKG15a|(xkz%<!~*MVtU%3-lL&hhd}#l
z(MMz949~%IoOU+SC^o}JGv4nnw*{?F_AAioU%j||SAp@Iu2)h;`1xHwYf|G%hPQm1
z0|5<5k}c%IWaEfzX@1*u1vBK)2&Q5kk?ufvLtdLu+IFPU-BAod*TZFJh}`r>zrsUb
zKD)G<XLY0RRenA>W1-Sxk46MDj)5`^+@*iI%JMRay^Hd5W0NNLSkeAhf%p?`+Lh>q
zyR{?3pVx=O3%|;QMF)peuIvNG*xPEiG8d#f>4Ss<I3@aWp~8ETc`BuJW#O?O7ygyd
zFwFR%KSqOFF)g&dkxP*$cn!UyA&r|q@CT%t`#C?5gcwlg4>m!*p@G8%xrq03>1C|j
zfMootSe!8(Zhz8q8;RWy?(veHQ#B%&Ji94D9<xq_TG;J|zLKiMGdB;9r%cJQSb1$$
z7)yoVD6!z`rw8$qB0P5ar`PkEx9BUp@ItJ9c@(JkCEj^ks=fYxtu^?!)n&|I7MJN~
zm}oi3ePpols%}0);z8ATPI!B$fnykk{rNZeTd&iezHBhD*WE(lRB&r2pI+((UqwS8
z{k`EZ77kTD_IDENF*cRCN7TC-r#$}K^}9wfv5B>N%yz?I+Wkr0pyV<f-=J6{GOiD}
z{hDsrtS9Z|SNqenICl5;N{_uVsBm;<sdQ#2D{kX^U-lZ_Ync}R9F3{?C8ycEsV1>c
z{_JvLYCGx?8rDyX!ZF`+6Y8y>8b_hp{V9f@e|9k2VrmYxH6yj5N|piUIAw$G@<2S$
z;)Z;8R6w%E3tA9IeE`mq<LN~y+M*rE_}raO%@ZE**Uw}MyE{7h1b$|Y><8+1d_XnS
zNd-J&B$8jK$xLG+`O=%)pL+yFmk};3mdG~abU6pvml4L(7Gt2@W5et!d;B$Te;d^}
z9g+1V2g!GTEmwZKKucPi7PFm#D%?_cj?CVz-87%g&2@cTBX}8Vp^B@FydJw+%<QN;
z+S1a9ysN3G{C1N(brkJ4gU+5?AxoVa2s~R(A1ZnlsAO}xp`D^4%pPANw|$BnyYf%B
zPaTa!C|MORNo_|s5cg-3{7D97CptXBb?<B`=<ooJAq@c}9{b?ggm0KBfuCyO(ld<-
zDXAysVMn?X(|i)sol2Y@b`RewsJ9=zbduLSn?%ME;4ZQRQxq(x42DpeNE`-X-+U3@
z^JJ(O+fr{B<fXtY-$`;Mi5Umss3%?7j4)X+wfBXpNi94wW8pLNv$H_Nqju@RjLJ}r
zJ-ME`Cxeg6t@!PyKlq*tC|@#17dyxN9nSYgZk2m<Y9I}hMzFo^F4Fg14YjI+i~&Az
zGgX7@j~QF<hW+v6NTo_vdGOikSxIns;Urc0QiDfl4Y!$#zI`G7xMU+bgK_AqXg2GS
zb7gnJ<qp-#&keqy5)2LWF!89`iUhC7vG^Xr+9n}Y-h;!@B2tnc^ZKs@{`C;!#ia>F
zk9o_6aJX6}?sjt1^oe`<TxtD1Fdz`TbR(DC6-#{<tpPJ;XTrWIY3I&zxl9;C!EmUF
zTHojNwDL*17FLr=NEmvgZ|W|}9E}%o-v3@U8K=65i;GpiHZtyb<N7ZJZWrkaLnbj}
zZOGd#{)PH{6H2_Gx*BL&)F1;v<A+U&Fo=_(z*P*EMJdloytH<nTjn4Si)N82YB&Q=
zNR6Av_m~);LS7D^Cuh&>=@nZ-YtIQX!Cma}MsFcnLnO&LaoT7;u&OTFQA(#|N;m;;
z<qY3jjxT32gSPJFYhAR;zX?@?3#g}+xu(wZ8~73lwCs2!_!{jj+=fVV-=~u6=UKGI
z^^j+J6C8O7JjcsiyxrQZ*N?XnFFnlT{6A_5h;2;PNL`%FT&RQQ7SGXbVsMrIJASJC
zf=+Y8*;;uE^LDk}gTYmq&s9+T2i4=arEYmy$`_8Pf)TkTxV-0eFQ0Enf3Bamev40h
zyK&k*>Eqw%4k8mReG=>bS}uVmxue0KXYUVD|8LVIRg%@D#ibgI8*y=DbVVYqgEaER
zsrC}t0n(r3W+R9`5i!S)L=@WLkyFz?`Ux>$pa!-0ylI}lM^}yr_bMGAn~Q*~i#RFb
zgn7<L%+fLuI`38^hmA?GOZ1`Ag9<AZ(rCVf1c+KCG&I;g?uvhr)RU1R73y>zVmM?D
zlMPLl_7|f9d6^(L3sMn;_AC3c-qqOL-wiL}1zSmzRKth!?TYGU#*_0<6(&WZ>{qCP
zBjoX1DD_>#<^yIQQNm-80?y5ob>*ag+=d_qM}ruoH^S~*<R(-P;SGF$4Qhf9&?X8O
zbL`BD(wN~(t^)ZpUKBjq)EYoIIRLauNb-D=#bqtDUtzv37(XUtpgR(p?e#t9#V*8T
zrkY~xvC<{0LJzSF`EOU1xoLm3(xVyhZW(Ad`2=3|hF78h#>h_9soRKa6RJqXiEtQx
zgM8h?nzh`GoAtNHE3G?1a{BXv;T?@~UduIMM8@dVq}umwbm1c=&%5l=<6c>^*{kwS
zLr#ROJGCmW%is8w_yd|tlwEZ!R5io&3-`Mv)`=IU|Lft?&?LDDrFSP!Vk5f_az%@9
z`$MO-9*i}*6Szn&ER(XFM?-IpepB(yZlH6_7GFW#Lw7p5I<=lfutto(d7oIaY~lc~
zp!eSE3<$-oSLVj6B@R#M=O?V5BMN%vae5fuRf9La8Cx>$y*2Ca!M5vmT=k3or`XG@
zy8GyTAt1^ggkPkNVzDKiir(!3n2lza8>y^Kc!TX&?X<R?b$z?wi_(}Azj{KB)4M{l
zy^o%H8AhEVcJfp*TEFLOvGeWVL`NEjj)f#H&GCWz!}QPJWGOQ#XjsB+$x?c`2#w8w
zPWMOiSIv_`|6a{BXwz|iyz~AI<{l%%zgCybSpF;=w&VPYXv+4ZOI(!L2cOIdc5|I2
z+XVYHpl#uJ%eA4jqi2fYtH=f$Rf>wfpjAn|_lg0WQCjsq-P}qfg}lDJEOdTcoP7_{
zJPP#fG(#9VRLXSYpw&`=%eo+?>=E%JT}}29rV5LC;#bnkhyz+6;o;Q|kIR5?cz)p<
z`4b3Fi-%x4^Ypje7STI&m_i-TD~ahfubgvC2jA*Hn!>WxbL<rbT(cx5?mIrp-)N`!
zYqWyfUaZ}b9qr!T?NUM(I$F_x_9`@Xz!4i6_H1$MwG<Zjp6A5WVTqVnFmr*Q{ltrs
znwqK(kGz_%P%cdw8tAc-lGo3P?_@<1gQ?07>G|o)QifUe$9uU=<r|Srmn8rMX!iVp
zS<zfRvoL9tL<MTyj&{d+(GU}Nitx6$tUo(_8e#&DMrzh;SBA4PNBWBgV^m4Z+fA)U
z?k8QohFK{B%ZaLMFqGu&u^TBo;qDRKuOfOZRa!0C=;i(dtgVtu&Jf@+7}e%{69_25
zt-Ew#pVbmGWC<>@Spv5e&A$u4Fd?*Oi&3KV^QDc&_NpBn9a`RA-e;H&K~YP)e1E-K
zNg5s$4g`%}BtVHBk6bmVyAQ(cq{V9*WBBgGNUh5DVj;tZ5Jf`{>cwL5if)(>>#15>
z=e{*8bv+t-w>;$s6lsyS?JgU{$?6y`?0>4DH<;SYj*%V5jg7&ab9<{FyV8-&W3#h`
zSVEGu=Li%7U)lZdRSe@Bc_KF{qjb)Q`GN6>l>M}uDqw+Kqkae1Be9N&<9If7g`z8I
z%x3?2u@!jm4_0Kn`rqpWT;6|FNu2-2@^20*Q$w-#;qGo-GGc(HwYTRp4C!?L`m^xp
zklJ|g&3~Zwp&J?+dYqqTa&fr1y=H70Y9QVc9XROEU33V#LPzq)r~c!GZ70GI;>UX7
ztMGsB-%TlTeu`yV(wNd>YSWYbLVj|Rl6O4FEdCUG_y2jY1DJrS?+CRg%?Q{ZQA&3S
zDIFMyGuEmiZ{GB#UQFy@BKY@2K?H4~N!OD}{%<WFeArQWB!wGZG^2Ec0}wi*^JV^a
z2)YoN0`H%nCX5uBv}C)n#S>$bdj3RiCPus4G2vf(SrQ+fk=(6^|6oj*{!j6~5%C=p
zlbBLdGr1wI$_o>>27{pQ@*M|>qhZZ@2OeCX7CWw!vsds{UeRsPtNQzy!=lE#Tw_6R
z^yn{__#e}iPu3{+G9w+RRh}03mRRv{Y*8+0KaCoxH{1F1=eCToW*Y(zVm2Dmn_fk}
z=V)w-JZTp!WB>aXVETW%oI>#kIx79WaA8!BUy@b5y}fPT77&qgNA7<g7=iLa_K#6W
zq{+IzxiI_5<-g&7s5A>+rn{gA`0R?q<x6YC4}axolmhd=d(+<!FrxyCs#}Kp`qGk9
zQY7=)mj3z((pbp#zFSmWjjtqEG54f{#Le(?44aVmHl`Q>lG4%zihd?gga_dUZFAOF
zS7*~I5{{w}U}k>fQ_M#%SVSw;m=0+I4O%n%29Yz0K&|`$kkY8<7tbN<fe&QP8<UF-
z<0S__fakmyS)^UsI(`2`Dk99`^3a&K3&;5f(hs|X_Dm)c{>th-ZyQiCf9Y3^#4cU*
z>AL&JPH_lFnig}zC7ZebI?bnGvm;ZWTMs@&m?zrl>FH&RA7B(eak*-sSsic%A2EsJ
zmr5|+pqZs0xkc;r$LsoQEJTA8{J_#gxR}MBf<m%R^3P3v`MYkQxLu$%MO3`Pi>8!x
z=L~ihwYtY#_{Wnpx$X~VaHt?@_e|W~kf8lK-tSiyKOn*u(LOoRCeDbHHU7Q!5DjR%
zzD&ESv!i7X#2EkHeEky5<8|`W8vPE8qF!kLTVxCuPN)E>Ea%w@7mxLD%wykdH&4$&
zFf7Rh->A#bE@rhXR$x?&+N6UyNEY~w4Ib~U<{C7_+*VGl|DGWw>#?&Ct|Ow0K`I5g
z4!7;6PrrlL!gU8HTInHJ5rH7ADs0!ueMt1E;rJE8nH3u#Z;8v92B@y`S2=nCZqwC#
z50qThS8QnyHzwVI7&#7^rUeM+R;yJQGpK)%QzbIV1$nP}y10aaqTwYpPW7%3EI}Sl
zRIM{v^y-1b1ErwD53?{qrf-|q+Gh%MoF0{#<?4t`<^%LI0K9jp^$Fj1Kf_hjU{b}M
zAByUEI3~o_-40$03Q)Obf?J2mSlOZ_B!wqxe0M^xN(?wTA5_Lx{Cs|X{>vSeL^uxS
zDOG~hX8~W|egvy(neWC;K4;%Wn%!tHZ-WB?PaZhCi^Ux+4=UH;OBx5?yflOAyOtVi
z^7%P|q;P}x$?!9>)b}76;1QzYevETRyF^^%1l%hbf;e}!w=c`aypw<`#D3SIC((K&
zrI6;-Qc0?>nuUbW{-koZ^@290G|A=OCvji-*X(ZyE%HKmS%JK}Oj|^Ptp0x|0v1Z*
z=B=}oOyyoT1NJ!ENt%+&Je{F@{*GtLU#?DVYO78K-Fom^+|YZk@<~8j$hB-TZXY9a
z>-(B0>_#%Sl$jj*AMH|dd%<F31y%yY!Sxj^*k%9PnD`h2aE)1>sr3@*<0qG-`6wz(
zZf-1HO5)Ae+;*2=tl%?^Wz_ekijarCPinmv`w&fr>$v=;3Wuqvfq{XQ5{U7$F6$2H
zC?xd;vXu=Tot)I3PlMjB|8RTWy_fsJ-r5uFFa4XqsW5H#y8mS0Lk8r%!)=7M40FIi
zP~ktYZHa~04aNX`@3m3;F(lO&P~$2or-^b8wM1`ELr_EXQfdmoclRLGmw(7}?-vpI
zeY<|h-j)JIQaUo~m2XfOk3Q{Boba^Dv%nSe>@c_Du>=j%QcuO5nTtWlrb0^9#egb2
zDd@zWFmewBx$Sh7;P~q8aduppOVKw0X8gG@ru)@6*T@5CZLIXz8=!8+Ci%Ws(kM1a
z(eWxge2-*%b~tat=N7-XQ~bUBTamu!CDc`!rB1fPH%m5xL!dU~bZIJlL-^2Xkk@TG
zP0ZKM1^Or@LHPF-lem(=5~#yFCY`;JQ~`2_v!EDN9n4a+oUV6&93oIr4&gW)X})T*
z|5_o8$XF4CDZ82We_ghcG)nkkiqGGW7(`e6jAvOt>3dPMb8$57<FJz`z4BpFKg=<U
zE-zLj_6_k~CIgkf>UbK@AB03qcI5h33}&)!xt}+ne(-_8mv|;lh@|=}(01IG@;`rY
zshG<AP^?$;GVdWI6&uL=#KVXnBfjz2nFAmA&2R7-<kFv)e9m)ViiQzujuv()n7iEi
zSQ(|&u%xwggV(Cl04L#ae5K$SrE+6qV*wBK2f|eq1F1KBwhBs0(Ys*pv2!RkcNTk;
z|Lp>FYGcj)FZA^Fhn&I8{2d^$gMc$LnYQEP;fP%&WD<uw70nJfSJGkV3BD=;CSd92
z$jj(C0mdT;mNAUHDh{QB*P*h0z4pK!n>6$>m}&}0PT@@;*Q^9=d!iz5YP_MP+Ngq*
z*Q%nH`Ze}KdlY#=WLh7~T14(V42YRTFL4m|$VV=}%PsWsP$Q_zEiQ6!$l!K*+(#Vs
zr0@}Mu0n!UJiV+-#CQfZmEg0m2JXafFzzr@PI{Tg6~D7(LMr5vZ1Q*v<=AH6Ln#*u
zBn`ga@=q@W_b{E({%)gYtLggSTCtOTodct0XZz{;j7#*cLxOFH7)Pnt0G(W1J>xU3
zUOBi|_h$Z-yLN+z#;pu^oDog;85PZ88j%fVFy$CBB!fd7dcpgrZ<(*GOYfc-jYU&n
z`{T-s3zLX4*sk3F`<f5?jrOc9pfTzTfq_$3)UWepC8q;{ftorK?XcyB0EsK7&3M8s
z8h?!N5o(yroAln~YV9}YVY<51cOeBpEXDPlavfO+gH&NDbT%c>jFsYy-jdT6xgLXF
z5FM)8%%ojdNKUL0t+C*iwTs|wuWk1xC3@C|(gm@zU-E~ozrmu`;0-!$xeGR_MdOm5
zhYMfd#t=0Y$2(4qrZ(cz%R{vvZ;U)I;<iO&J60x>(&+v>#6Z#ZGNs-nGU0;s1o~_Z
zcenA@dgtxk-35)`nF$?eT_rcp!J4Y8T#BDHy&gQeZb_j=+fKb@)3428SYuSa5~`|@
ze3ugpNeExvz73Jt0Bt-?dt^!T$F<OaJ5PL&3t-BvHk95=AJ5HKkJmVcuUS)5p%)d|
z*-Xkmt{ve>O>da*u=OO@wm!HU`bko#))?7&>j9vz;Q&Mzq*7Xs(4LY+szMBDCJx#b
zhyUCas#_UYKe5|T(9Qrk4F#sH1+$dEuUQ=)1?|43Qnvl|nzY1`&Qe5}9m<ay#FVS}
zF$v0FwcigM|IrWCNev@`i4+6)UhPTb2-I8n%>rk)Y@Obn6bt9L$`q4w(2)gPUI8?(
zk*3vZ9|}~f@Bg4f7AckhuwF8SO0t0_4Mnqc{;2Z}Z~pkBbHz9?z%6$X77_XGATGW<
z?Ez9U&bsRukYjW+=$${!1N;v<<&Ukbk5IcTf^f<R3(i9=+8~#;on<wRX)_%B-SVvx
zO(7a6e{6Bf%5Ucayq|&=8s?sKzYGiw&F1P!M-Ac#$Y9W|D)1s?1v-1YsCNltaG@vc
zOfH3&3|QpUY)r*y6-dR1c~@cs3Ol=^u2}!y`&)qzCsQ3VMDEu>QR0ajRL@^s447nT
z0o5<gpX;lu?|1mL^TQ~vV8)rn=v6;W6$tgJQVltYslN(HA7(!xDZ75Hw0jYaFZv<f
zcQwe1N|<B$gf4+z9h&%#oIIdg>Rg|4_&2pzVU<PSS;fA0iH&S@aC0aFFp_ZPb&vn)
zUQO;Gcl)Yy;+ZBDp1r<nTu?yLCi#7uY)kQNXH*-*k+iMsK<(x8ZoZD<CcAP~LHERi
zyZyIEl8q^~KTK0|CFp;O;9MC-b6A9SS`h~9?_r9ayCtDLG*xNMFIj)siRez4wEPX1
z+J_i+(|fkb;3cv+w7nwrY-KKkjFVOQ!5f|z37_tdad0JCeb14A5uFChFlgb8JcjqI
zIYNZpdD>9BVmFalhPlnV3i5)o?=&b{>$-_ITl!Dp+{41b;pvu5@0;40rpeuciN|fH
z$5G*>*K|+d87~Eh%$E&gv_C&FznyqM)MR*iI+`#@^P1mLV>zJea)L!0b^VvjV_nZ{
z*wvT^cAL}Qk4NT_9?)iR1|49DawOAyfFQ{7cn4c>`T8~9d20Lx%a%ONx4UuepLP63
zS@~Iv<iFN&kT?as5f9&|54p4*t*#SN?QGHVrjabB$QE0~fAnI~jQ+2WMV~9(+Rm{5
z^fR>epty+#7uma4PE^?WmwM$6<(#RPSN%#iyKK%k4i45?cLCRp<S~@1XX9Zuct2&d
z4u5zQD9to@^23l#j#ul0oH1`NBx@7YqwMxU@$o(HG&aAjQZ*SOuHq=P7SIOQ6O55F
zG3C)py?(l`jb?Q1QF|ORc;n1Hxo_V#PTb}2X?v#3Jb!EjC?ib09vOw6<uKIebrER_
zFc7OK6ggd^d{yZKep5L+n51!B^hrGUUgYRkSV?VXInyJkeuQp@F@udB)1{TiQ~SM>
z$UE_;!!IRP*PqhRRg#mE8Zk@ia{O4HtK21Un>JpMIKOI*qWt<AIS)MwjuHSM>fw1Y
zKmwB6rx?Q@{%t>&CUP*ib3=d_rC(9}d?I{9i015{uDJ9K(z!qHIf3<LOhI@;>JRzj
zrEFB%sj{{~+?V|H&-y~~8H8M-vwa-`xZNWD=tN9Vkmpan>`W06v@@E9>7l5M1Gy_E
z?w0ZbL+yQy>%l-!%KuaiAmc;%moJt{=L{g{rGT&!S}Ze}RhsLYPC^4$0v(zOP{QqA
z+)oF-h{B6Wc=$sYj#p_IzQT<D3GkShD-eVYl!DLRfrsqtvnX>4!uW1E;RcI7gUs(C
z58XkH(9WE7232|-T<fxz^Z2u!?&4kWe$M~Y=P|IfRbg)Rz5V*jhi!6xrQ%Pb9j=ja
z1%dsnRc-6ew2>a5)bB{4^J=%MrXKuEEVRD^_cO6#zSM%hIM+Ntu3Vd@%*qmQlSl=z
z12^NtPBf{o8%Linc4)(Rk9-`XDj=!Vlwa?vKnkwpMl`fUPhZZj|4NdI#$_-8&aQvu
zhDH*gGYL$plBGdqR9EttH7cq&iokt}xtNH7)Ue8iEQ*w~^|9`2DKLn-+j5|na7f<Q
z2UH0x+DgPr<}&mnPD#)6J16A_K939-J0xiYvE;NrEPr74{@2TU>8C33oAwq*b|vv6
zixwXeL7&0!+C*+wA>2OF{WB6#Mc<DK(v;o!UndkR)>NJ<XO<Hv+DfQ<Ug;-idEu+@
z_~tM5=p6AYbh~Z~g8jR;(ypl(AMvI<d3W&ijg&9KBA?u|ewU9M{&*e7n|O9A=_vfq
z6~KjDKeAgQ&*`4bRkek8xYNxpaH@=?2xdE?7pG1MaJIg`2OW<35Xf`-(!|oP;E;+#
zh_Z^goXaFgff3<P+D4q7u0s)?_o?oW?kFt%lS~>ALwGc92snP=q7x_cKG;CoW7W)2
zk+_+9FB;i;00{m2C5N(PSX-wim4f3?1}KMFxKG#D@K}Dc@bV#~#k$O>wQP@E$$H#2
zn7BemE(BZ@bLA)uaDCK!BjA*%5Fp}x%=1RXGkUDLXY;F6W>B$VljuyoJl~@#eVae3
z`Y~)_&P(bDKFvtJmNHo;Ff#HsW>Q5w9}K;~FzQVn>v|eUaRp}9kLO#Z6Q1c7qxF$4
z2$Aww#&T)Wpb<vuu8&vFuijf7DzIxhG{N-#{gu>Q9cU~ywW0SDPkZ_{#LYPZk<q3J
zFyn@5omuj2(@VfBstdvCvUWFh&~h*3aQS`A_fcDeT`I;rNRcAre!Q^seIIsl{olJ-
zzPV*&<N&ouKcY9+%3BP;^7+Her~!YtUB$Xi!UnM9=Krbz-X%4My1fedi2GhbVy0tw
zC-AWBF#Ys%#7O<4pP|Qpc>z4U;}G<Os%hmxUqi)^f#pIr>UeEz(c-D1?X72?vYF*q
zsNX7$j^+vn65xik@onG7eK(;T{?L)CBRV30{My%Qm3S$1Wn1~(ra0-hcO{X9NsK;p
zc14Vc>d5W#-95E?8rWa*u~e)dS17FNl;FH~otLfI$@HN4<J_ir(H{thG>Si@?(JCV
z-JxY|?Vd%Y4_L&|CyT;vKPw5rn?87=y{;p4L3>;>Z2v5=!JVLH^LkLA{0q8Z1tV(#
z_R}fHvtwsxQD#m1_hR<;_8$9dNn9w}`}V>iBht?aza-!_1M*ItVS~uR2zRm#Rv9R6
za9X;4$*@XasJaEU$M{~N`Rn_&&z=lD_vv<OpNHt?94~^oqiM2Y{*8&YzG(-tiO-^v
zBrU5bSKfR>tD$er3lv6xZ_7{Vk(C60+KT<iC0HW8zPgN@C*Hw&xSe<?sBsMe$>ht_
z0yM2R@*8X)4NJ8y1F5Incty4jZals}Z#;)XOa?i`@o$R8VH2129FJGemmth+lS}ZQ
zZY&ia;*|musj>K2NjW36J8oD9R<JKho-uopDcEd=bd<!t8ZrG~KG8|iL~!RKp2?H>
z-38T{ovzqm6;FSQZ}{UIntQ%`jQz{U(gM{{<*s3RZnQuAen}HK;%&cEc;xWf@(wvY
zO@yGs-3$V0jUB||(gneR!Ob@n;Y=Ks@(&{LrK6rBZr&HKm`Cx%U8CDEKj}(;^Jd<g
znJ;Kz!RJvAeOF3Iw>4t%$NKvb>GGP5X_iOS@^@tyn5fiBd!z|!&YsDK9shp)-28``
zCxr`1NT}M!@3Bl;R#faC1GnwZWm(FXEZktcm--zpbDDj`U55zY{;}8}Nrxn9VTeON
zv~;hJH&wb!7v0sL12;s!>oT|}#F~^NWYik*CDwoHw$zKQ3L*vWEVcb!8Qeaz+AR^6
zwUxnC!Ql`imKc9?eb4y4Ejg_9qzW4~F{MP-yY=w~S2jbpNQs}Ol$V$9Jo`2g_N%a=
zuW9ivok#H>!z7@*1J0N5EYtSy_W(rdSR@>5Q}RRAuk{&qWPdt5wpAlqq9tnz?)iL0
zJe|ktH@}Xo9@mEXwY;r5HZ%%9Vn2!hbUZYQ&=>91H8UA+13n6`1|_v$xP{$R_<do~
z28;?_3cjQWVn=e>BD}r)d(U=mvFwduqhv&i-cjc9k3zO|x@&mw{3G^0;^tHOysj%)
zq|81-S!6dvO#@Ne#e$t!G`}eBDoWjnAFPg&zF+&aVP3k)NuN~c79aibt0jSDt#?-L
zN7c7gSJCUoU)r~zO*ieoUhb}(#7JXFmcWi66s8{|xa=6v2*iCTg37QJ5j#qeI2m{^
zo&GvPg2W&EA#(N!HS_xCd-XSGEvFn>B11)-d)P{TBk4=EoUf{`2Z+21|3z}^O`pQ4
zYet1XhxqN$_p|5SvkF_<a-Gk8JA3a->$)%cP6bG}4I|E+v`*B`K8wZg%NFNbRlHrz
zP?l5Vb8JRMZV#>v=D`g`y|7yH5xDpLl>TeA-%BUgo@?YHubg@@QX}K&`!g}5i%v)E
ze=gWa8_|EkW`7rPP?3y%G=OJ*U;evi@K1FA-+R@?FLm76);`B3Hrx=^f2WUXAM(7W
z;(Re15w?nk`0*8R<+iY`SGu3<P&inhv22pi$zHD~^C)yNeJ`0l{@lOC?!!aX%hnf>
zk4bY8`1Y-5!HsepO-$(^7%$LCDi-}~79dWDw}t&QT|}!=tRDr1ceQmlg=*n*{*vtX
z$F_GPwzZ4P=U-xLbglHUY)Pq|O^7YiQQTm1rhE5;f(!GxGt&YdUk*+2sH`@<Zh*$Q
zO1p*9y-(NC6k>VCqV`^{E0ph~MPWU`w^lfRlKjelFHzwx+Fi=JqV@TuIR2KC7(;>@
zjI*Ifg5-Fj>)n=14k@asIzc(-udmVBD&UzLu^-n-eEDE(SrWfyqwR-h^4o8g+mhVL
zWxmlktQjL<>%mqTkoFx?njsSA$;EkFvg}XF4pe2?JGy*77e1sKE1krM4LhN9@2c1G
z=$`*5ZT2&||FdHM@q9oXDX9(eOUKJ?BF@UF@<Hx}wkRrq$|W)Igx2O6D*poPFCXG9
z<bo}4!?A-j?iB$dHj!r^9vvahJM;qWgc}dVBUYlUZ}I;8CRU?eM~(F`<s?|xG`Kc2
zKd~68V~Y+GR)FBEF{yNXPr6eFNwrV(y9i;DT8;1Zghs4e7Ad+-3C16T_ahzOG+eoE
zNdL&=o3@oVbqI2h;*ATE{;J=}@BN+MS$pUfV=H4*_fDudJ$h<~(QvDt1b@4g+s%Ag
zfG~Ds?uU0nh)uBgB>mHkNpuho((P@|1R_{G=GzN*M+_%&WFqc4*q8Nl&<807SfGN0
z_sdhauwZkZ=j}lU>Shd4QSavD%m3LUtd}w$ZI?E)>VLjBc}pcB3N<wJP<7>YYP?us
z;ug2Af^B}^q?;ZMrS+#THy;wIX^+KBqGS4-ssAut6q7`FH%U>4@7-~{*<;s{N=)s9
zNzcb&wCJnF$2#i~B(XEULId_IxQ$ckmHv8|Z+r1<n~WM18wf*!uLM_mY{iO;UV$@X
zGIIoTnhp&g?VcY}(O^lAOTmR#`!pWeXj^O2QiLD}h0%ljXv@X-Zl|VhUataror^y#
z`ipO1xk-j$`d2@g?R-H1h`ENsYYzW6j{(vA(#_K8-C^=02FU2w$g2iYgbtYOr}frW
znhmRIYFsyw(<UTG0Z0$J!B@~G&%-^KDuS^LaPsbU2k%}Uk43KuR5w@5dy~Um*2kqf
zV$w7X2w?u6X*G0+ZAn`-evfzl_0GbVT;a>Kb@`hLmQ9$z6ITkwO``!LHD+}tYG@L8
z72-E89ngNw+vuA=QPt}%O(!Q(&p7?p)I^;1R`Z3zpJnS`OYxH#%KH6dglMfc)#~ED
zP3f^H>+Ki8am>G&FQy~}aCeXE*sSs|?wbwWFR*`6Z1m~T_3Zf9mYTZn<iE-XJO8R<
zc3Tv~7ign5(Kmb-byn%J>xDh6JEZW6`UgYbNVw0&g9=lQCF#yA_nX>vSHhExOSHd-
ze?+Ya>TCC484LSXaJRogQ`(+%Gj=B2ifA?&5g11No42#jkI%rvIz0PDph>s*of#B-
z#R>ZTt*UIwTzWK79)B1@3`UR?TORM$fNSKl#hTfb6+9DCWSbh@njP1!mp2KnQH-hu
zD+~Ij#$};>sj~G|n`=FKa=7KMUTK96CSLCap_gS7^ggDT^XQzaI~W_?dJf4lawA1k
z>2ZvGsxee4;Blq2yV=CQ45sgSsoSB2Rd+h#1)S~)dhCAaqV!*7*Q<U2s-AaQimPf%
zy|&By>vc9gqt-Tp1N*4c==_<XW~+~`-&^?jD=-<G?(a1Z1FAx_fMKW4!*ku$e@>78
zP-G$av8ta|yvIIhJ6F5rtTJNoB}t*%6Y<E~4MY7kVOhK4@H$y{)JbAx%nVH{2E-h&
zVh&Kh$)oj^@a5xM?s65GL@@KDnC4}<gcM_m-fIlJtvgCnqKIAjVM#(fs&viV==QvJ
zjDTsK=2g_z1Bnx+qt${$hH-(g8Tb7>%L@Wk6W4bi8^^2n_G86sw__f;ebBP8DbZ@y
zmB#$Uhk}^`JO<r>1Iap<ubp4Mgh!!}Tb}GsSp_#ah=MYM&iDMKR_;T8t#bmf!w<NI
zYEk_>OJnn!f1xXD=R_=>j3bnxWWc#seZ!M`X~PDi&JlnO*FeMJ&L>GoBdg@|Zt3Cn
z-d<+>Z8epTc4;|$tiGdG<RO^Q;P?0eb0WFpli^`HXG@O1Qzt$0(c%0f8=9lGJlCMS
zEh@2{EUa`@XR!yJ?+-|`^qA59THBcZn0S~cV#AocEdLsZ!@H=*^*63Oeey%o;yNv1
zZ9Xzcq^*n9JE=P56U35#Gw+ZF-MaT)(sGZruSMIKhgCb3pQ<g#=)O_GRwXIDFp-VC
z8^|P4>t%w(ZRq`8pB5DrDIli_Rz9Z9*RQ)#s9(n!<S@5ApKZe<_m~UQsOU?aQ++9o
zfag96K<;5tSNm=||BBD!;o$K5$Oh9niQd(x5@aMLwj)Ksf@!?g#LNcu2xtU@K<*_6
zs8@!`=c{k`{GV5ix4(`w6`xx85@?zPc*yGs)+m#kfaa^r|Ni}(k>pk98HxLdImwOv
z?7f+J0`e18eAgq&j2Vovf9A-gG2#p7i-adX+3ATdOPxPjSdbGks5GUs&k>9bROGNT
zBAgjbbD}#pq{as^?`|{OT|!HxFT~5t<iF^+uFhdKd$!EXwBmPwY0E9mxyVQ-uf1QD
zf?j9G*F1#_vXxTCbA+#Ue%{&}c^dJ99pnBBI&{n7g0$t~LZM`y@u-0;#lo(+8UPDq
zK%FM6-{d3Zt_WG?VU7!(S-tbJmbPuNNTwmG&_qa(ac61Cbe?TNIM3jdNPY>FJ~=?7
z1Fs64KJk)L(|RmKRCY2rhHJUTyQ+8n@7E5uD;ApQWLc#gX#o%IKg$7`cFPCtr5oD7
z5^sr>HbWkk-zALWKPs1Q*&mSn?1(0mV@Km2I)hPf61QhqE@VExiNY>k`SF?M(tYb=
zLMajk$E~|ULTb<*#gDYC40>47-7$OkP8thTbsf<nHkM3gR^(JzzGszD*KS0|-_g}n
zVop&ZBX~gM##m8h{9(3J2?8n&ddat667W-JpBzxXW|Jk&LdA&Ap}@f$0hJ)~qKI)G
zB3x)I8Xpg(U&iR-{EQaIwx2iga9|VI`~s5`zT4)tT*{X<22%J^fH2zMFA<Iw3pAKR
zWdNLQ`GwYY@2T+HbBrXr4zA5nYub3X2h?VS1L26UyZ#UafoR20Og?PjLYQ?YCc$VE
z@12B}7KznV?d`Me4iB&>1D7uaY4od4_nr2Ynnmjgz|2p|&d$yzxie3gCNhff&LcT@
zewcVSt4B7bpQdq{6O;3ujyA^z11@hW7?bjCJmi&3M|2@3R@y68ov&w)xudW~5^t-$
zL<mAQAhkwxC?HN-6mMqLKXm(B_wtye?3KvH-JtJ?Af=(FtmVnU1S)m-4Su^;f%~<W
zv(0zOT|rm`PxgKdCFh)}#~%<SQ9_DL2-u!}ZenySIe59ZnOAsjH(8w_*_nAid(mE^
z0j}KAex7UOcP^@&lj3DL{YQ^k@7*L`c-Xob1R@@X#`g?)`9Ny$(H!iD*cJg+<GP$R
zgYoG3%Z8`JzT|=O-;*8$$}r|`(Xz}Ff|`EUi4+Fum%QS5tWr!2ZmeO(v;jzqWu#I_
zv@hQ99KF85lk?TokpugMnSdPAh1f+sJ4~+=VM_2-X{6ZjEpYksgs%awr=~&h@e(B^
zWr8ePJ?S&~*Br=u%l$9v>+7oxN#4#qm$W9QA}D->PLA`l_blo1`mYrqz1f4^j?bhO
zYe<*(!HP{xQ20~d<KK*S=;rYsb)=Lq{loAs#f_nqZ$BT&bjcR@yEzVl^<xeYe4qXJ
zgar<erqz$9fL?HZmhgw%@!1qmF)#Y2b^NSVpE-C*-{!<DwNzQz*g$;29+;YvGgJ_d
zCC(&ABT~UaN0&#xiIzZ&E+G+5n1E=qKVK5;ZuFcPJs^J7?VGwZT{xCBHq+Bs=h>U=
zRPnZwVVF-#j)o5b+}T7IUTuY#A^r-k1|J(s{0T%Trb-PWR50$9BnpH0|Grufen|CR
zKi#Z`&e5zoaJRo7EG5)ZO=o&=$V|U-Cs+xO?pt~N5pz0{6#H55GsEkFcRl+N19gf@
zp92Kgja#=`J$v3wmMuC}x^DUq;X8I%wIm0cgSYJZTZ55?glk%|5hP74Y_E*a9e#Z$
zbC`mQ#v_KyXwI)`S>Z&fL+xnb&{Zl__yGfg5)JXX!RO3FG$O>Blj&d$tE+0co^j3D
zT{kAmc4t`0_XM8f`sS9tSjdb)<Td**Go1EE>nC(hMGX`mS2^|5CR{kFu_j~CCYx?g
z$2@cU`u9g<Ky+Y<Bc{uiozF-**yCTxqA)-&HCgX|fAS8{CGTT+Ubm}ynvNY#vWdKY
zH7m)bZ>O-@MY1PUA)%}Gp(Yyh#QJvCXZzf-w2oIz;!8B_1X$9%$V^vZ%M}Oa;0|fZ
zRXVS|VArT~Ssw~O|Gn2ZX9c3(@w}V>*hdAQFx?gt&VP-Tz8^=|(d2dhMVP>Cp-n;P
zG!29D3eQYVE11tRgG<i%adz!57>dq3P7`uff=RlJ?f7mInomd1N`{nFrFCM-?60gf
zqlq8|JR>S|-<>bnzhHk3Ov9Kz9|rr{wpRV`GNZG1>f!fhzkxvkP)mYfid=H3p;G{)
z%42Ux%bCnr69XKI)nHmyK1l|EHM<q$-w3*NTl|94zV?*DYPK0UPdXg`7sw^@^lEml
zy6>-zy`LYnQG<BqShBesf)NW>nM%+A?rqd<J~97gFqNp62fE#HXI<|6l)<cqTr%5%
zb+X*q0SrAZi{1jAYkSpHt7sDnH0_TmB5&-0NEm1uDA^!HWvU?BNPqajP4a89fEp2#
ziul(gXhmEHe}Zf??~-&39E#OyzNPQ*--Sugj#}j>@mG?k(gPf>o~Kiu<*`=zJNJ9D
z{8C@q$QhTs?R33NM_WxMtQ7irY}0FBW}M}&uwPuK63#i^_m-g)@lapvOEWZdy1(}$
zB6Zlw|1hcct9Bc2hCPUZa+$S4%nh}7_zhy)DrP2QE>f}*+4S@DF_eZ)O+Suh>f>Db
z`O)OF!rrv!X6{s-YyS7#!5pO&!Q%?KOUf~rWQNAiR9b6^w6|Mog|Jj~x8RiFK7Ru#
zOUvFYpG``DBW?wmH&oB>@h2Bx&vtps`gH}L6m`3|{IgR3+?7vVv6_DXA%L!b81qvA
zlQxH8MFMrsEZ=9l+ov@So`jvXv?}_-N+^w(;<H$;=5nB>AT&M%^_V*7tDS{I9{u2Z
z@+k~Yu>FhD5QGmoNbLW7YyTu7^vbWg%|@c`D^3Q$W0BcL@;`0#_N?6Usvv%SPTy*7
zzt>i%1H^7=tZ(prO0zRxD+oq;bX!%8g{dmMtS_F@=B<k1#W`vP!X?FOFbmc|UIOMl
z+KQQqC-0fCVwXUEs1=rrl;IP1E2?tqBn;CD$cGty`t(;{{$BD`1JbTqMn(oOvmV@4
zEU(Q#ue>HhI{=L11PF-=XY9{WH4Ua2Qx;8ni2XhE$<4<?Ft{+$=}Qs%m>eOvuBiu>
z+KsS};#?Yb%YcUwj~NKG|KinZHWb(7OHO|dpz#s0kXx}M$o2rw7?OhM3oS=8UqZ`a
zE_6|29O=Yy9VF(olG_r2SLBaIW2$@(rd$O>zMA5{r3X61XyIfPSxbI~dW#zfz27Ha
z3N-F~vd>Il{Hg)O9-b5LNAg?`^kjIS3`p<Xy)cdpxO4Y%!qBlSpAHg#=8e4JV#DHM
zv83c5tAfdk#wS2Ae<uu_vp1S{JOuvUkWo4GoM<x_xK&?n+Z`DfNQ?zI(tHXnX#~}X
zU{;@`swUbE_V%g7Ganw?_CsOUje@c7#NPf#8F#7;b*<3x3gTQgCNqgR^<_ByynE3;
zkA~s3EmB0XSIc<(%FQmY$=7Ts?%0iUWS26A?v`Su7(S;0)yL!llp4nwymZI8##KiH
z4y;(D|MN@y0V4ee%`K+#Xd_4-{;q;eLf&~hMtCQTIMHPXbNQ+SHz5|BQCcu(uX-MW
z-n_eF|Ah~25j1`z_pe~;HDEQ(c&y$@ii&P-{|O0?3A;TPFM$zql;^ahq&e17^#qcc
z=tj?$-#b4F*H-Dm!pbeQc&XK2ej%ItamK(ZAxit|jF(gM^FTj0OmGY!oZ}`$fxV8u
zh!TJ29%iJ@PatX_XzP=v^fM&gMFxf5Yku;gMbTeKgK^3yz2@4FXxN3|?i{89-b@|x
z#3g}7uAQ+erA+=mP_SAufTEWPa!-~COI<m+FztH~mLb0{aDm=-7t)N!^(W~p@ZQM*
zVW9Fe<7+;{+Gp~Qo5@*72(RDA#msYPc-o{6Mr5`Uaa!ey<VAMnrr=_2;$3Dtp_#y@
zFE|!u-Jwk;w9k9SKWsK+I&k8wO?IwZ<FS|bSXi2c^i4Mv=A8A&^?rq1|M3B{h&87+
zTvJ<+SP$@LrDc3-Z2<DmliM9%-CjhpoumJ7{rywXHu#&Gp{#Eq&NAE0fT2L#_QByR
z^q&<zt&HOg(~~Z#$j#p9fizXQr?Pye?ay>D7`1OVziekBnSA;(?r5{|CStR(!O`IE
z|M`Oddf$_>XtPx94DW?IFUb!#i{eWh_Se{lMGNXr9ra^ud-6hgTY+!3S~_FXypFFo
z4yB-~_r=-4PAJ*5ih<Wj;gUd06_z=pT&xPq-IqG%Qg?B?QMGT65<JeGKxH-k$u}Ow
zccf4vY&lwzQ5{v|byQaM{qT`4TRr{K8AzKOm9Rfve9H*@b-dS9X)bd=#<ZluPy7Jn
z8&&&(_fv)43)W$4JlFWNJ>NJ%hBFUy$VcWAS}>$uXn}Xrmhw`+)XxzZH@6gSYO^%!
z6XD0x!;5?2Y=2=ibs3L*ztm6osV-396-&KJ(&kqM*W7zNK*8UW$0V4p9=KWzP7mEa
z{HNdeBDv{f`O#Zbv_V^C&YjneeHHr?Zc!>n)@*zCq?Yy%s*pvDjX)!{1ZLMsp*g)t
z`hAC`5VaC#F5gKy@$TU2p|tuN_%z7>@wKHu<8yjAw@<GmpB~Sq?-9eAtCsz;`Zi+N
z1KR{=W)~PCsxlEFHR+{kYlMDRCbHT>ar5Drbh|^oCm#NS!&owRr(c%3Qmas(I2iqT
zllO^X%vo;~O#7bPk6OXcriD<wA6B;^#^s&S)1P~lQ7&|3s~B;(c0N=PYX%kx#(4Fn
zVvk!VQ16)T3rwOWjV=DvJK-X2XX@7FO71B&8ec2yfk$eYcK-fmBKlz_L{vd)mhHGS
zOHlnsWM`Ad4cz_{?_}-^zxK=@bf>DyI7CwO?24sr*pgnmR_*85hU>tPd}hHuSRnh^
zO+v^2FypJ7^RG$O<j&}e^SNm*w!F2IvqH~0+4D30o;>8Gnz@ByFRF+Wv>d&#6Ym}t
zhW~nMH2#<bcRlwD_Qx&)oX_o>&TefJdezkVtB{rF!xY~v#Z)udPPfPBV>i!}fw0vS
z&@p(3e7?<b@a9XOQuQUrFb4B8UOqB0sihM*F9;JN`8<!6vSh@c>`BLoLzp7jc@AV<
z6SCXKsEfSb{=$~~Zsn7~dnRmaGrr;`ltCfaHJZ+k^U*%-yF}&uo~$u!qeS7a&MRZl
zZ#Ca3ogc`Ipi;PHCe?$=@RYk-+>~(M^JJg$<;+NvQG0ix?u8rS?}Hg*O~S_(G(J!%
zS9qVeP_hcKa?}ctbbktOi?`VKexV-|?La)nw|zP)<7fB6M9a5?_y4~3|GfO6G;PMH
z6M-~13BD9NhX+)ju8Wr#VIFgGkDq!&1*aMNB#wX79O#sv_IhDi6gaAa2(Lprj8f0t
zSd)A|X&mD^MXaNgRA^ZKO-wJ^<$FkG)#_YWlJ?d7I|&GWWOvcyWz!f|%!iSV54_N0
z0wrvuG3Gm~$n1jPcF7G4>=@bRxGGn&`kaU*M_KIb`%=OjFhECX?Ytjk0qZ#zYBQPF
zc*o|yf8NQut7A916|TAbfgm4m?J1mY*A%cKu{<RwV?nI?g^hn6-INKOaRjH^K*-nH
zC7Ok@-3|G6k+;z__zwsZt4WNE5$vh#oc4zf8~q3|a=W`n0x6*zs3?v1ro5l7)Jy-z
z4!hiT{^Dp5eU*z!+DFJQv04ASC_woPCi%Z~W^?OP$E$3~vEEGPX;@c!9@sg9z|;0K
zhYm)ZUCt#lpm?cz3ajZPEYq(HjFXvKXP^aG74P1=WCcwT(;p#h?i#mB3+DWGT#vbU
zz1AJaSd3Xqa_152RrCt#k-29xLDiUbF5bC;Y@0-LMddJGuLBCf6k0<TstP;4OW4#m
zFk4~C3jCdHRP{d4!EB=5><j)7xR;|Z4)%#%6o?+qqGIjXpxArXiE0ZrpQ%CHz}u&f
zZ;^5TRnZSk>{GgzPbr~HvVvL;|HOE*dZd!eDD!&2<X7h2YfW6{t?iFs@l_DD3r=OF
z-K04JNt<*_aBBb=dz#lyuB2|d89Ap(P$YMq`8^t+u&@1<)+A(7P<jm>3_ZCG!hYgB
z*Ud(%F7{Q)J%s?YZ4G}Ebm{)!>T6FafAYaztz!Kd@fK~F__p0XOYw6wIluq-dKc6T
z{Oa$sEm8}($ToN%M&5SQtC8tVu^Ki$sB0zr5I8qH%!zN;6}b)S&|GjudSiq4sMYo2
zoeZ`HsMLvq8lQ5awfKT|uX2E%Cx;8~#0Z)WE0B3vLBi-Gg!cmzIWY9mzedUdgAibw
zYhwq5uF{NHi0JL|0K(t0rwp~{GokTrR&R?%gyhBVKHEDgRN38v#Zc_g9^oPGmffx;
zmCgDp6@sG)uEY<4gh3#|k77^H@w>!W%G-cVkNS@8eidd9+|GE`vB2q<r?vn`$R+pl
z>%wqXz0+F;3zEnf#x$>ouV$1#=I1)UA@@Oa0s1Ts@sd)LW@krBY4}KWU^|lskwy=R
zO`@yG*iG9b`xSB`1gSm~@<JjTB|oin%-B5-ob`|63n4SJErG%7*2Pgn&nq{$ZrzV(
z%IMgXc9=0I`l;={n9%4E8U1a(uHaGavv4#!7qji!m5{g*f|}orv|E1X{!ONX&eVGQ
zkT_XkSeE^MPXQ9b^(sd23Q3w<<^Oz1vup%m;TBIyoJSQCzX~Sqi@i27onQs3bJojS
z-fL`wW_y30I0r2Lz{Rujx6@A7uI_He(JB8_dxT1TvZiz5LF3XQs*IYjwC?uc`&{94
zUCkz}+1j^5y3Y0!Rr&!P8`EbA3dQqRjQBjD$@0FkRH;-^cna|o<0!KM+5%|YRW>q*
zdY>a*(V~6!$1K`(h!2IobR*X{>DM^QG=02T87)b>10hpSnl7FcAoUMROmso1w@^J;
z){-cr$+=4Dv-AE9^3@o&c060|aROp)+9<Shm$I$OGbr%GxNhl`37yTd6u&(qrG9E1
zRE>OIT{nlJrATTGc<heg`BXH?Lf~75(<24DqZT?Qndb|FDo1UN&#!*G7|87QNEX|8
zC0iYLJ~0;(SL|fEdd?s}Ssqb1GFzqJzsH)n7%)L)B>LY+PIU~Hc*zYL$yl8prI=_m
zWLvO3q0{F<>vQ>xay2OUlT)7vNy(Zll{<qGmD$#!WY^FaWG)$!`LHUo^)IosQhu7D
zVmPk%RFgPF(<!dTPi_V7bk6YBP_lQDFx4!Qyf|UzdQQ%tjG|8-(;<QqS%Ww@j@Od@
z2dDYZ%c5TaT1d;!-G8ls|7)|(PBX-ETPR@#VN>rv_}?#>Wf1=;r$je->p!nyWPFvU
z8Q@+f|MIWmrWnn#W|j!s_2pkh<p140{Pq1qI`PE-cCJa~|Bt_!VKxCN0o$PTDdT?^
zssH?bKXw##wnMtMv;X|;|Nf={mdgLne`NC%T?w=|yb$CGcmT_WCV`1e1K^BWa6_sA
zW$*cm{mV#YE1>9eKGb@kh5xGfPL@uYC_V?&K^zR#|6K(k<72*QhI;WkDCYx3`$n)}
z{-XuKpz2WcY8nE*U2J1;;Jej=!ED~eI0P401Jyy*Z*W9%>;-VSfwD3GB$3Tqcc@TT
z%Ny_^&Vgu<jpV&D$jbr>ImO(u&&fK!Gk|lLY1C`sb|>ubMj)Wlc_>$H$>{AO{{;*^
z%zH$R7Str7G%PYWzmDrP6|d)<D>7*oRNoMG3oHIreZhtgeI#3}#n3;`9}$Km+H;Aq
z01Ax9l;1ahDIzLv5;aH>^PTQOMQ-kVL9YQLzV9Fw9|C<@HUwzCJ3l)xWQl1?fZd-9
z75h=Q31yosZc&S(Bsth8yz@Dn!{8r#FC4?K*{hJH=*ev<5n7I8I00<S@)8vGQ~m0v
zEn1o}XLjT34gscZUyu6Tr=ovWPk(Yl&xRoCT2V%3Zs;f;f|eylRp&!~*~UG?*+<(X
z8d#D<+`Xm3-p9}42`PuxBVXPtMc`NCVm@2`rV1G+x4Md+0X&vxGgby5-c;?Rs;cHj
zgEk~g(~bw2mN9D;*+laAHv64hfe#w9PT2>%B6|oz&ogK^#uF8*Rf>FW9g$a6s8fDV
zWcw2VGw6V>uHq?{COE5K+>(yR?The%H7zY>I{X*@3Xc(wZtD`gfCDNIhM{>-In}bw
z!;yM`INhB1s0H<w5-|GicOA}LoM*$xI^&YeN;B)ZR@%XE0Tx6=gvfRS<o5L$kP^Ib
zE5FF%g&ykTgd+t*ukA}uuZl~LwsX?L?5iYfblm?BUEdu~b>IJw$T{Y*6WOF}iZYIw
zghX~Wp<!0`UXfj7L`G#~uQ;-IMwG0~V<mg<(eLHHuj{_<$M^UB{#PEH`T4xxulIA(
zTHI^L-Y2NQv9A{T`e+B9tS>>xf;y1t`%7aF+q@#V)M)|eqdhf)KY|U~JNIe%h`p5n
z;oG^kEhmqMuX2sx$V8_GlJ)Sr4HdZ^PMP4m4fF4|JqekqV(`M{q-#A+6p=Q#-TKLS
zb-Zafa;f8Bn?bVG9dH?K7|pj<I}`?Q+`J+2*3(G0I~?BrcV(Q8ZE)TwJif52Jc&Y!
zJ?c~9gfw}@H%CXCJ-IMGv?>`18Qrq^Tn?}HVUWi4;{ua=`FfKlQqrFj+>%UZR>!11
z4>vqnm4eT9)WfTlHs<d|Y4jpKM9pO}xngm(E1y`NB9@i43otc*1fA!-edsPvgG8&$
zpzW*onY&`w>CTHQR59p%NO51dbQO%+Qiq2{c?K5`^z~~F<hSRuQuo>?Prd<gsSTuC
zf6N{9$HL7E5EF*p?w06mQK$wB;7j37mx<7#WHp@!BOw&*)YQUCQPL+Eh&oT>KG)bC
za`5LAS+Oe8J%JaN3*1`)yuku8X7p64uyvJ})s|zu+sPQlj`{XxmB(xcO^(t_HetKz
zoI5L3-|4cpR?oB^x5s?9e_d?zb3}MR%>G0bMj_=1gTfb6KkVE7xCmYzo}XFFH2%fv
z=kWq3j|772vW2a>I6^)2(23S>D#>Ez_UBC0A^T6;HOhfYFT{-NfLP$Z4tPH`y$);N
zog6F*6c@pe9#t+l#2)IBCtz|Cx%uodL!&Y`MXr{c2IwWUKiQ2b%4*p3<`&lGsJFr)
z;X|gHm;Au-r3>Gmv&zeDm!@UwD9*gvHmEoeYSHh6QRU|C1VPz4O>GKVXi@2PB-qhw
z``WQQ^5^o8=XeA}moeXqt8@<ljLx_X{mw#JUrKI9r4WgHT0X4+&w(V&h03`UUC0BA
zJ1B~nxbE==?EE?RwmI8_r!mfgf>gxGPH$}W9zk@75tkM4)`}4E*KC}ZS7jS;tPoC7
zHpqc^3j&Wc<v8Aq-mD%L5{fg8x{Xx~=9USIzkg&EzNVqgIfb`RI#TO=7sjfh2HSD%
zT0dxK+Y(qX*n*EV0dfor&tG$hE+PK%cJR5T(8~<S?`ou&M#R{|a>l#spZ`EVC<yo9
z^3z|u8+JQTH7`+$8GcS6WF9J0sSXzWpj)D973P_##}QY3@^+UG?>Q|E-GY=1qd`q$
zFlj2YdI#Ua`a3?qb?aQ+e6MBnA*Hel_o`!E*6k!?+5JD=602{1+~4mMsQVIlX7nj6
zEL2<)&P&l2>Ll+BP3n;9A0Ql5W<@^Sz`l+SD#;UdvaiN@;O+7j1YO#JHJf#3htxpv
z@4eX}m8!neB~duzQ|g%b#&<tDFONpT>*)LIxPeiO+$?JikfoQ}NvHyP7aHTOb-BpI
zu_8kR>4h93T3(J8Q!e2RY?CKs<m9-nQ!+7|I>czzdJ^nMlOR97uZ3KvT=%`Vwos1v
ziBwk+Mg8G+k{X&D`@G%uytH@qDU`r1j>Ur%v%ZaDf|w)M^{Izqw^H?QG+fXe`z*kN
zkXie_IiHns63m*GZ6u+9R(vC7&&sTdQMACtwc7IyWI4}#WpA&zqQ9MpmRYGN8^@YM
zPp^9amq8;bbE|`Z<sFniHeg`yvT>DjKAtqfd94`W?4h>!W5z@Ag6j~TwxOG?&boh2
z0d*6Bh_2qQsu|<D0|Iyj!I(=wp7x5J)|w{pfq-6iUb9OsxQL+L8{Mj;YPbun?OHD=
zIWzbKYW4crU1xwQ&shE7h(4J-Lq9#45ucMoXX2@``_Pqu5nm4FJNd>j%C{ZjH>H%f
z#JX8OBwTs;%K58?TC3KN%&!VUa~i(3XX5x!@38WW(`0fVVQc%*;kW*L(e6iPzVch~
ze7&=25va16j@Je&%;6?mG<VZ#WtcGXz8O7`e`%RKDGn=f*2&4CJ!9N6IE+6eUI;EC
z@ehnQDY$5R)vb$innq5Hql|!gcjtbcOKXJ3n77g>Bdiwp0;3-M7_HoFL<&i%ePe*z
zw=8^{@%oeBwF~ckh=sGkAD|?<)@Dx?D1{C3AYYabRh7uVIqsn|VHBIj8=!{Gh;G;M
zmn8o!tTC&v$A!k0*h{J3{I}N+QVRGw*1;33A8*=oW)e<A^xD9r&yI^Eu8rtqDATyz
zOt|LgzW{j30qn~+1WAJS)+WtnPfvIQ#B^jHJ%V#1@!(jAwtn#a-3_Pl^bG?7KXLEf
zm$2*Ey$*IEijBBMJ5K4%{w)sX2wkh;rdiT)?X{|9)ohoYrOF(D4;xv`8Uuyrr@(5<
zq`%GpDr^3IsT`BK+Jm(w@>#KdM7I4X<|B(<jhDpI{zJ9eXY;STYeyX|F)pj<{<4Qq
z0lS~+edk>I#9YU3mvXYH=g=0)^Xtl3=1(@99x$Ml5mWI2p?2BnoNQ64TB($Ivyw)^
z^k-%_ju(1Aeg>V`jhJ5jRY#-O&9+v2t0*V=%EJ=9xbEcZ^3oMQ9#1-WrPhT3c=d9Q
zzWe5%{z8*Gp^b-JDVI{c%JoewsJ_0hL8Pst33tP}D(Pdm3ZGU!>OWk7wPdhygXzGl
zBF%s5?6O$9o2{#Ez{c`o;qGHIH?jT_OX90A&)5o8UrxR%Fv`-MS|?LcQ(ROpA<E^W
zz)|z(gm57}n5lQV*gxF9`Y>J1L-=^fK5yTgG(PJ$J2x+6VzNv#6-xlh^LrAH#)3XH
z?P7{jda6f^*3sU&HW<cdE8`_x?5+aW0YW3L{N@F#nxuMdo&?*G^4n3B#%~4<F1u~a
z^j4?`?j7Ft?M3X`z*k>J354s(U8V8PhJKFf7}3WAa^o5%UQQppcj99`zM&OWjrlDI
z{esPJiVP9`_n}Jy*Ru~+4<q7Q6FON5v`m^!eQ?yRy=X8~M(c56&yb3YN;oZikPg46
z90%m*W53@|*+_1<p#&i`_O{P8Ne(&du2=|Gh*ORRTv2A3`4uD?#Uutn{_BAMw}FFc
zmq-LZq?3JwZf(|;SXD+u*Xc!3?0Kzj|JRjcvp;VUS<v&GabDEs!J9>=7g0_KynAI2
zD7r_PGZzncClWv66DXbn$Is~sY~PkI!L|DO<ebMHtHLJn_ppz;|I!xcJ2#&tjU~?k
z2Bxzuo#I^pJwCGT#NF5j|LQlnfd1YA7%*Q%pO?dt$aPvo_lm4G=1E2qBHId$sxq0p
z_ssH>zwnh-o+Ulc5sG4LBgq5VepsP-SLpM!U5HbPi<0ydoVFkrDJi+%9=?PdLqREz
z@}J3{_}V6XFf`K;%y|Gw6uM<N?&XM|tY09;Duz3C-22d0>hMaT)j6)CkoH9w+dg&i
zx7_6CB?tRbR+}<=Vgs3&5f*879bXx{#3zdr;q9CDyK>H3i<p)dHL2x?x6dg-Eeu}e
zR~{d{4$C)+CCnN*DwzigNH=X6A0*4WMkba@xj!3}TgxglH_ha(0MxKR)hD6cEL^t8
zdt>I-S4=5)DhpQ5=WBwHQ3(VgsQFai>Bl=cT6nE{@F@O%RH&~HSjE}C_@{YIHMej0
zL2laNjQ6(KSq<)UEXKIQM8wp4_N~`cVB?z2s)mGNqT?|rw&h#9^*$(^%962(vMmt`
zL@(_w19woimR1}5m;|Ad)-1G3=A8;Z%7Lqb3y%cBkj8ipnh6hnCE4GQNo0}r<THJ|
zkk>jV+FE5+1zTEWu#j5X1A|YGGDh!UnZG*^^R%v}i`DKpzGRhmPi%>JY*2S%G5JU!
zV37l5fW*3e%QqnB`|vn(g0qo&_Q9e^k0g6tA*##bd7a3e8h3#|*5A)v?m!&HnLfdz
z&M2%ARpi-CjaTW87brZKj(Ys0Zpz5~SC{@qx1W;<au!>0K88>gElDNx5U0^}bi}n_
z3asC{PRCdCJ;ytmMV!CB`Q+YuVy=R#k)?Lw*g#LCWcvI|^;O{O`)@MmQ~8PP1O@gD
z%xQhsA$q^HI(>KPRiJfS)o`dV6cUs~SW|Z#?M-hVRIFtDc|u@}l_IcvyEYQ$a_z&?
z&(ar9ewGn8I&)uNUlFw#Qg7ef=yclNOix8TxsAS#oi!;iydK0r78Drx+a)S*!&~F?
zvrFyEnWV;{q!q+H**V%KeR5d-CnP;a)$;Bh&sokyrmwQdh#iL?qlTx)?vIq`ZxlTD
zdLYJiKK#Prn-d0})f~H4j_&O^Q%kdyO7%zB%CH^s^H;tZIOqR<!xcmJEz>&HOJ_so
zrOxMP^ctQccN!0;S#4_`wVsVjQ1^G?sjkA00UY?!N_3YScxgbZ#Z!i@c`Delcb}9%
z7G!P;>(A!|DFe3>uHeji!jzTgE~qA?6TO!AHC`Y!+^vZuR7Um9{#4l8VJ|Zs4Pm%o
zWydGhx^BYpr`r3(I<{RMyRs}c2{*`rL}pes1Ga_;dHe?(uzvrY8YG@=9|ZK$j`Cmx
zzSe9u5+}~0k<acZr618v189Pp{-V$N55$4bg)_-woW`S_!_CagsZ6~qF2Ycn$ifXN
z=vlNImNDcL5GL{X>DoKCbAd&@DS~0d%o|E5#;KlaOp>STJ}A9HX=BT&CpoC`A+4K&
zn8;J+`j4kQmc7i;xeBJf^uY<NLFDHXTnUvYe0<~ri+~tI#%iOnut2;cz$Y%FOiwJk
zWc0aAIEn0{fI+z-+7){jDW}y{fBEhQ2h0;zg<uKpE|zAeN%^yx^WFG5*Z_PhXsmr=
z^)m4>H+klw5+a-wH!m@RFqcHnLiMfqjUAYZ)dOQnw`^=okaCZ>2?Q-DLK(Ws6&L{7
zG<!R><g(~%OE67{mkjFahq%rH5818WzcX1EB2BL!uQ3z3VVm^=%lWyGL0Krg3KpZ#
zdh?SbH#W>w=AS6FJ8#ANv&?aqgGxv{M7pw@ZtlO2Lg%c$bjerw`DsxlQCrOW=vt+8
zT0-NJ_$ad}!-M4a<fi%l>*4g<sAy0O=*AKjB{*<-KC_^m083h#(=8r~Mwwf9xOjmK
zT$Aif{zXtg-%$f<PC>ZWnbw8I)8!>>zdI;WpS5dc=?D@eDJ6tGCfk~!Cw2l)B$E|o
z`1#pK?q7-#?%D>7pW+isLMo>CWUpJV`f&5A`cv{8)s(7`HPJA{26e{EU-~ZNEwSc-
zLq~nmJK<vzzwQkj1O>k@&Cwn9{sJSFK)-Y3s0Gps;#yY1jh6BXBM<Gv#A>@8{Tu@(
zkX<Lu_9RruQ6792e9%ML?|-eRpzrAc&1dMy4HGx)I}*9!!a6d|wWcWwDhd`v+a_7h
zCGITNJQ6N5E-(1HCGoo*{)GITN?`GwNHFd7J43h?K2IHIjyorJ{lx^6hrhOhKRz<U
zuIo|T1Yk`w`;(qz00Z??GQAIf#i<e!P485B8yoO~HiXsEr%kSkl1ueIO@PbU8QZ=u
zPub2=lh{!P?s3Udn3O#*>wHsh%h0ud66b1XeiuIv2bDxzy0rL^lRA&r|JH9G{EXJs
zidzXqcY%^UMwi@iuDlTQ%X6*-gjGyc^}qMlSEY7-itVgQv&2}0o8z{9LrXFzBUjHW
z7W-OoGpycojVI-jZP@rKHu2lq(01_(chM=#WE9KvY3IhXmeH!BBEe9C*dXs_k1{jc
zj$oRCTSZK*hp~z30mplBIH{%9J}+&~J>C=bHOF10JS@w=<r?rMFf`j&#-NY5WZleG
z<asGfNOsXH?M1h4POe@Er#P&c$t7E<lYkr8!39&Q^Uqwerh;=~47(E#v%}gQV#|i#
z-z{b=n)zqECxhsYh)j=lrlwh}j^y<o(p@&sWXGfTP!UXj&cKWSA!)EL4u5iiA+j*U
zA%$F*R0(Xz&zLrbT7xOk%`9a>X%~>&atI`qD+eR6BULv?L%?s)nWxykHX-e)mzeln
za9XYK>tQ-eh|*<<rbLKhMRC0XIlCHIlVy@3dU4S&Z~G&~&+RKGv?qu=onI8hXG5gD
zy}n62fEGKBjIu!3MyGfm(Cec&RTD~(a%@}ksXoRr#|<Z8OHPB3i$7`(L4&HiifIbD
zS|4Bahr>qlSaW|Zlr;v|j^tF*LLeMLy+Y36nKxDI1`MR7P5lP$Ah}N~7gRqe@_2N7
z;X*$@j(Ex#>~MBPG?HoiXlQr9M{x}-uaaShFR0A$f?)vbY`cEBJLY0kpZ$sKwE*%J
z0R28vUGy%ZHgb^nKkTqA`NK~Q3NXVstRbRstsx36g6xp&QX~^KYkgPfL0HZD%wM>R
z1M?t&;c{16Iq|hFM_$Lm1bjc5SQC^tn{2&bF%dBeVIQ7GWpl*ov%KZP6zO(&+*GqQ
z`ZOg@%dcb7krFe4AMSBgq;$x@!*ljlisVlpq32|s_9Er!jBOrDa59>`P8f#hx*z;0
zcH|kvs!}M4Z@!P%d+Trd$+SVjU(FglC+Zz0a$jk6beXlfRn~A0f)Tc!e%8ZO58+yt
zP#8{myKq%sbUhq%`6V)<j+($Y8u7Mtp?TLC;xB6tExFpre+duVmGXFUI1)9X<e{9r
zXQq*2kvbwe)U*3363MI76dXlO=ixfOGylVYm(c6&w5{|3uCj%-+#i8^WeTmnBSQ1M
zO*RsVl1C2a$7tsfMzRV8=KAAok#zDUsxuCw20w?${agjxG1845Bq=dUMRE#_9LQ$b
zFjcvU_mcLz=$%P)*+so85>%}@Qi;2_O35AdO<(x$GD>Ephlemr`)#GSPa85_r=*o2
z38l72b`bOt6DT|<nU^ZTzWwvlTGMT5T5*XL<&EExQeMpY4+iXDLRlXixsMGj^zm?C
zt)XEO`TbVl&rUUkQJbpu2Za|aT?L!Ew4<bbA2&-p72+>xDq1a6k~$DhqR~05I8Iz$
zEUkI=7->Jj3;tLTA9~zZNxt@SXYeQ<vB8RP_C9i*o*tc(Y<usI!>~653Ze{{_1Qb<
zc!fkLmcDt%2x|V|z(^xFhJspfDS2hEOnA(8J2Ta14~0sZ5*LLn_wFg~d|s#c?6PXN
zK2PeR3;hkR97!ugxFyv64LCV4N%g5xr)tX`Qe%BXR~d@g+-jNWQO27S*AK}pdJ~uS
zNj(tz>+xWz;HfHI#Ts~kmaF%djreaiULjRa@<k3h9tR%NS09;2FanKt6W-0&k?#A7
zE!xF*myawKo77z*rzKGWT43v=p>M8Ovw<%sDZY-g7(<c!IkYE+dxgazkmW}~w#fFi
z_><xJuEkN&!O5fJCi|}tu`}D%ZA%&Q2|wKTJl<VITMeg)TiVR?47Sni#6bPwJqh=%
zgf8<`QQJ3rohB7_`R$YriCnku6*>loqXvyl>KmV(Et|l9`Dso}B=0MFCV-8u;6e>2
z_w5MZb2`f1fwyom&K#Rn!7h{@!u%w~<UMw(B-fl4E_%>@obF0Y&G*`?xhYrMmADFt
zr(%aA;@9g#M?~?t70E8D#A%I=HH5AL2>7c0d&pZHF?1_IOwyBY<a6CYsa<|2ZQ*W3
zq*kh*KZ>X`Z8d<Or_nMj6phgR?IR(Wh=c55*zDS0jczvb4Pz^E5E<xl+u`ITU0bnO
z;W-pqY7!9>M(Xf_F81XRvM92Cm3X`YqNlAs{WRFOnj#sk9e!=YWe;4&ER)|m^4(<U
zh)`3wi1)K|(tQgBaF;u#MC+f$J46sy<UO*qUo)##L?uf*cR;v`-rMc#l9$PA)3c@u
zns7pznKs>BkusNyc*63)7gYiIZv!MYnkN#g)jaD2*unwClgY3#TWBi@an9XJFIRrR
zSNr>`n}e)>6y2U{&r5c{geR*%OGg;vIEO>%M^IdH2y)h|RwWFYUYL(BLh)06vG?dR
z;Z1|bL6?^sb?v;Y$jdZTJt5<i0Lfs1y=qBC&r+$t<oPcv?}xm3GY8)<eilku3;yZ0
z7tl+hOo#ZnOe<1bK!-=l;hDC$YJW@p*D2n|OPXfr8-#<u=-_5*)!0~aRtRl+o#H|A
zT*qt8gKD+6sHg<o+5_@wa-<M13PppIJ0lo)HLL=kbpTSLZU_YpaVY_{v=gV@v3~Vz
zP0HGY8n>LoH~`$dxujk7PMa^8x_S_<>^n{0($nLn@N|e1<{x^~Rez$g7>iFkvnw*i
z#==GT3fZ;7dojUTyyxnORh|a}9jc_!oq#_hLFp79n&22cWcJ!B#;A%cE7qGxs!&YV
z>oRp^w@Tp--c(A^2%k`^J|lzJ^g!_bodpnC7tG|Yjz`h-3ZX39M}V7F7b|AZbfMX)
z+CL+H|Eq#`8O6Y}J5t-Rbw8Re1SD0ypz3kgb9y(1IA?Pw+XXV$hLtz`mF+dl>W%L9
zeu(nuQfjm3oDxmk<vlWP981@@oU~bCJ7U+8iussdiZw<O-Q_s?m2Mki6j0yN`h-{r
zVJd4zIc}m(J|!E@B-ODLNl9k|xQ_OM1woI7V8c^VAN7)YHbFpo7l6v%{%Bb5DoDhj
zd8L(V)Vq-&vKY_zl@;h{2lSpwaNSOPX=H9wpU)hNZ1u-4aL0Q0*xW29JKQe{ZFU71
zyZojq`;4q1xgLJQ0!=Y`H2iAv-2I5%JE~JMZXqwMC<`d;E`eIt-1)|X7l(Amrwqk{
zBCGm6Q*(+H>6qj?<gfkD_7lcY7z@xzQFpdMqGcEX#nfjT(B+IuWaa^VFPG=nB^qBG
zR{wUMuQ=DphV-9P$!G;W%e598>piL9RIg33Co@VE$?`ah0u7vBiY?kWebXz>Ay2wn
zgb)=%hfJkelY>llL?D&UKa)pV+*Q78DZ_$8r{tiIXEvX$@!kl@f14gUH7GadxZKa~
z0{c-$Q~zjvQPKe`v+sKq{dV0iQh()?7z|{*My^9O6ovn%P+b_x$nP9g10K`=MCJYh
zkux$*Nqz5{wMJqIs*kevk34AKg}FavL^n8k_Q~R)pZ-#n5?T3xx!sW@mWq!Qooj2g
zd}gv+?-!tzC~RrD!-Fn~IOOhnbi@Dg`{-zKV*>50Pxjt3ZQ(9^jiS4Rffvr5*<%SR
z%GE1=H$|BSsNX%o5^YZsc|SkjmkBg<fMe*LmHva+sq{WROHp8E)AZ)S>bT&<x1Cyf
zFBJYW0PO=Qi_jo{&Ihi*6qESkm!#fG{U6bl3!bqSioe0&@YPKJ^E`1B6(a*iO%DYz
zG4h1FD;H-WG_Si!uHG?JkI0V#KfE=xBeAWLl#^sM3F=l<M&D1~L-Eq=Iw??j8`J`1
zXGU&Dj#oB9#rwwJHtX0kPhx+#jbO!N%PC9E3|G`5thdLF6j*$Fe3m2FjB<61Ycqoe
z!xUVJEUiHCvSr`xP4P%#v%UrCnYFtrUBB@$vLyYB{m+uu&H=*mRU`ZQZSg+~Xwp??
zDjM||CdE+2b}U7~s0o9{RqtZ+ma=yR0g+cr)eK2lS@>gfTz?TJvHX7itxi5T@}R;e
z;AjWCKc%I>wnMRS!_--@ev@(ad`K4fl5C<LtuuiR+vEafHyR($Zm^(6FIGGM;N46U
ziAPsK@a$Pk<CAyt!8;q(ZdhqcG2uvhk$VL_)psVPh^PdXii@ySO#Bx?vzxzP-p7y1
zdRXDW*Q}j#^F148GLzIVwAG_Onl)YA?v4aKp=-QsDkR>w-yQYfIaA$0f9yXeN;zdF
zJBgF&>eICP7(RxUAgb2OuSSF}CBDZpFWgLp5-)>sskMTL7euaw#G;d9XV!^PNzJ<c
zH~0_6R)~6MT3pq@ELrUVLs{{!2&X#l!Y_Kv;?EK=1OaS_m{{Ov&#8ShTX3oBiXm(m
z{qv2=owl=zm|BQ?<oe6{{UqNx9$wV?Azlju7YEiT{V%muoH<@Y%KC|)J)WMj?EX-N
zy@}a$c|;do>8U1Ce>^YZAC1)!Wj&#!6=KSwFLBL`Sj3}iV<#Ru*3*NM=bzDEeO3)I
zNhJr8I|Byx9l_+hgurKAV(v+>oL#oa1;A5Seic}VhdlnH8$!t0kP-X_e1E}s7}5nM
zAd1gc;hV4TD@0@%xdBI?h^dTE;v}>dxk<?%OF?&!phhG1+R>Nyj9uA*sh)dGOjo#F
z%?LV#k<30oyT;L{po9;V5jG+8%YYUo-sAf8z4W`#nbWgbFY{!O!WxOJeU-EA?Kr*4
z@RdcTYYx86TE1ynKqCvQT~teE@gihFImjj~J(KXW*b{8)x@NzN@VsuJ!`&){HiyjF
z3w+tG3W4{**YUDeKPP}8iT<Ns>-8h#>8O}@8IlsYMSip9wWmtkIA0#NpllWL<eZ-V
zZ1wfty=ZO20*jT=pG>$cx4n5MLoK=zG(bnUf)AMOCA*d-x6z%TW5zl0AvUZ?-Zd6I
zh628aOL+X&-h1l7PsnyPfOC={_ZVvp*D_qJ^*ZFJ7d<MG|0(KS?ZLxk-Jm`MeL=T)
z42Tzg7F+Ul62}OzEnk^?lOa}XWw^C6W>A%z!zT9=*yJzv;n$;7C^2*hmTb?*7jhqr
zVjS7Fpw#OHhCWHi;&Z>JM+(F-K3aTlW}falK^n6*LR5F?N;YNevp*Z(!nU|v5&wqw
z9{0E*7g7CZvxPpfyyG33F02X0!S5u$hgUgrszv1suNQujnBUCu{+axyhz@{^n(tB6
zr6MrIJnYpBEQxbMR!`uhpx*PV`*LUma6BP$Y#ba4dHEchK7ZCya61b?W$+t`cY9{n
zqy1IOfU3v+0Mjkd8&mmN!}N2XO(Bjqak&L?QI+3!!vcUtws52JC0oZ*>){}(weGXJ
zA>`=2Xl_YtH)7R5X~(mK{fp0U9x>ZBUEcAAZ%o_-D0aeCVRd1^Hu?&q&kGd`s--FU
zPvIjQp9uP*YMqx+m&ij|wjwmP*iw^(UU+J}#BLyaR-&Va#ZMaOgiCz@hCdklVEXN7
zz1#nmR6M_16#Lod%${q0)w<?O;#4c-qtfc04d>6cf7RP;{S1810Xq3|k7qOU<Nln8
zNQyW^9&#aPW+$Bsea-+9Z+kep9IK&ab`3<o78Gn<<&9dh7#Oj~Gel30?R^?-eWa3l
zbl{%5h~c}m<yHO7U98Cq86T2>4McJzoWrxc<u2vdWbCaTVfE_)=bEo5bFD=wWxjSx
zWMfZiU7D9i5J5>;0qyb8X61uI_RquJPyQ0(f&K0;A>LQde+lt0XX?xKjVqtr?kRCw
zDqw9PBtx^XZL*O)bwzw-4Y?xcZ9*5A7>XJ;AJD!}Y2_gQ;I{y)LtX`jz@f=M>S7F3
zC|ztYg)r4Am(23^)yGJaj=eRp0#eV}%?f6&=}S<*CRW-xaoy!m@0p2MM{smQQW^vE
ze7C*>#jIcbbHotxWc+TLBblFXCHd&+9SlFlYePG=lr;Mfq)m$JO^OV(eG<8I{{V0H
zy_7nJ#Si)+uD2XFg1h9cw*JWPGngcZJ$&)0=W7S_Qa&4f8K^;P!-PB4&`VF)P{#QV
z?gxwc2my>y%|Y<V?Mf<<7VqwwBJceT?c<T%5J|!{hRF5Dae87t7}~?3@<PJT-KMEo
zejS_6l3WXGI;&%&bp1kTK}X!(mjYt87#%&%552g-Ufa?uNc^y%McJ;}owzkvQXi&G
z*pF7YjyK6&x=cClrf!usVRV!-eLlr&N59Utc~!64m3+@Dt6?=qfDFS`O*O2~=F^>A
zxup;gNs0PtSRuk}_0*!Vb)la*RQStG*q2`Y@<LI}r9-$QHjaE>)!R0f(sjK}7Ti2e
z^|1>xxb0&}a6aaw+sUJ=9Wf_c9O+#5=j3ulixQfffNitjcW#M{1?e1+XqNQjUmZ;p
zEgKJU4fz^gwVC{^^`<iY?w_F5U2JC0z9G5U^}{^l!36W`#apjj|L}!%h?}eEgWixd
z=`5{5!K>xJrFN&sl@MV(6vwdiBlf$3hLPAalF{b4meT>~5`ej=l)&CFPE8C)!b(h@
z-{Kn}P?Q-1K@l1<ac{aDcTSPR?79AZX<Akpat@mpN+a(!lYiIR#jf5i_I(_xtb@wj
zr@BUPeop<3EY7bT??$Kn+@7D-+02dSEi@)2BbUEy-GJb}8|nmN958V9@@Ke*l%zkI
zRUXeN*-0n&*XG6EM@%0hiSvjI3rx8R1zPYzLmo&h_j^o-c~{2M5brEbiz7d%#CI2(
z;|4+y<Ls^r*)F~n`C(Pvy2s+LT?V&z%Ei9r({J0puJU_ZH?XNQIIa@9XRWv4uAm<G
zWnZeD`Hn`In~@T7BCOu9%Vv|h2!kTU{Hs<lj!#GI$BhwUI*FIJ?1oXQ`w6qmfEQZI
z|6Yoq;;KulmbvsTf#jKY+VrXB$=O<8&R}ObKJPbGGp8T%-5+=SI*OR1ma5*>@E(2^
zd%iQRx7%`_mf$4tPxq5iyCyaS?N`5!o$VywV(Q<YqY3LIREv{vJh+{A$qm3O`X8kh
z_LU5jYC6d@f4}!p@Mg{SfPrvn34{cQpKZ?NS1}c(3`xQV?{oI^hhnU2>?eaJKA|d<
z_$sYZP5;($qPFp|p;lmwB08BDx&MXbWEP^|_zPl*sJ{r%$e9_vS9DsouZ_YS1@K&N
zuJpT0w<`3KMyu+fe4ojFjW(PABY8igk9RGRSQ27fy|&uDsj#WY&GFCY%j57@$Z$X3
z2tB*<-O`GZ^tR>8zg{$o2ie?QdSyslFs7ZOG&1A32O}@sS+z{tUKX$NuhX&LVGPa~
z+gQ~xQ@`EI6(h=ByUxkXhaiSn07+V(4oy4f30@voGID?jQnxcA^__GKv_JF{y^v($
zXL`FI@Y8wZxoJmun44Lp19%&4E2-|7Lo3hArb3!KhW8!njH$-hZq&{_tVFpz=k@z%
z%=sU(a$Y=#np0oaeyOv&zMn@LI9NTdQ|=qtjiC15tSnQeeQRK*LPpE1;h%fT>S`q!
z@P9tizaMzz@u?DQaI7cn;{PFY{p+6d!-8@YB`K03`(NMlf4=bl`p527+{<(;iz{<2
z|IwEHBUJrcZFc$-c#YYHh!pysf9`6(bFBXo_zBeR$w3&O*aC!l2;I#}QXVKU$^ztl
zmg{lgCZqT>CD2P6cmII^={}&f^GiVXsOfdQJ$UNq{vXO-UwrcvP|*tYBwzhUnCokT
z2YGNh5R9&yC@hr)j`xg?_`<YP4=y~@;%;?<_+Bf6eKv$MR~FcTGIb$BEVHsZDjZZu
znosAtW1fPr@B_%YbL+vy$MXnIE{{M9Df_yu>z|w8@6SX-1*FH>v+ceAyfl_x{9iq(
zg_(C!`F$WNMgw{_bs@T33lb4^q)+xNK6FOe;O6T3WTTI_s0Ler0oR83Nx9=ypFdB%
zA`8R+(aCwvPI~_h-uMmOz(REYBdE4r7|0*8ctKx<D89<!5L^$1KK(#g^v$$uf*m1i
zg%Num*(?X&d~>6kS<HW4*NQzJ<kM<G&9N?sO<!5Ugwqd2y#2w<-f6EmZm~Il9r-<o
z@K$hh+_%r?+)1r1A-9BUSd#}Atqr*cbUX;&-Q~?^7x7)>)$diW$ysS*94Lxu1(k6$
z&yKQaf82O?Su49JcI>03b$_iFVU#<z_T%lO^1Et)DEGsMJ>&Y|xB6AP(QEnu?+2eK
zz2RLfl94gkob41?W)w6{JJ{@zp4Ch90R~gYzIH$EHOMNK-)M)puT;)ygRrL$1Rw&I
zC!k-^Vbb#o4D8c@M8>-yh8rMCx-d`-NzxskRwwFAHtu&P-+=mJwPO&E>M-SD&yeeI
z%>S^C_MGrO%y(k!g2jo0mhQn#kRR;{J@`IJ^e-R)q|DKL2F~D>VRBj?zPjBd(vt&P
zW9>J0p}zOE@NA6npEcE}g|cV!Bhbb7c>!dP5ex6wjmDuOjE^xABHmAhqwWXu*3^cY
z!Z*lq5uNZp8Ki<HEHWA|)9p@zG&w(R+6yBW6beEd+*4!A@YRLeiwPAp)r9ZEAri=4
zf^qiH{BtdL9S-fe+0#?elMlSn|J>wkH(5A7lpny`y5Sq;N~{DQs?LotTJ1aN{SP*$
zo=qcgDh_;=PJX(-VfnM#X)zOlf}ZU6G{lL0JcU~{W-ic%mq#w{Idt{GH}!?{!2Q!E
z$Lm7sczohr?&erOFQ7W_!hRZ8q7nRYWCmCcjRjD^>4FqW3l1l5xp||()%obM?eMcF
z#t(j@w1EiU259BWIxqk#i4Zrd3ofKcIfF3{gdz)vEJ$e*bhxkRV!zk<NWbRQ7l!9G
zt#s}S!0$wI6T{}nM@z0g+E-{|a^d<Dt;qLzaAbbW`DO9IqQL($u(Su*0P?;sFAF;y
zj~F0(J=p-`U{=G(mz<u5ahUX<X{elTyQ2jRine_4^UK_#3j<#IV;IM#%K<!pulzCi
zpecQasz9vbs-NRfj#ZM{?$gwv0#jEe*8SUlJg15d&mFD&zK>LFRGe_PGicvX)W4p9
z^4rbrN;HXXrvM>~Hgsw}h<)ATFNyq19^Lx%Vg)ZA^kHd9A3syB3#%;@wH@YO9UPD?
zh?e2ySX1Y<p-TEM*8(h?h<yrOQ^0B2X1ovPv$ngAhI4L4t(do?NRpuj=!GET+-YD7
zSiSGY@27*kJK$cCX?nAeUae=M``%>mr+4Xo5QCO1S3d(;DEIoy?8cM<FZnUNQ-1g3
z-5X=IOivK}<RHOjU#9?ZVs>Y~zyLAoxAa>586uICa@!HEg4dAZ!9JJf%`F7&3OUv!
z=;eH(!b1Q#`3KiPx69{u3;No&R0}26FSSN73k;$mqv6sST2?sJ-7U5H+8ciH3%cyI
zzAi_`@2JFU>$gTwlmtiDxg_A^bwbMen48|;Hv#Oa4_2X5QGP#rlq4H1JrocRbi7h~
z!Z-^_EO*=5^|Dyh&Dj3EANeJ46?q+sYJ3LJPBo<l?&qxsa-dh}3lq>;AEGm20J>Kj
z^a`N`Qvv*Rw85?yWg*Rh5KhM*{|wyuqHyMC$fOS>4i|>f^*kjLv?`b0!v+YAQtG&f
zA&*WxhMHf4rD^=DRgoQ~!|nP_-OlZYT}uD8#i5Mw*UWxq-hTYay2p<1Lu!5~odEwz
zDE1ZM0J7mjZ$=Y3&as<VpgN63$=4E>auml*(E^PBT0mjUuEKH^ufGc_{q+~gV)p3v
z)m4*~Q8Q({89!ep=4FUt*mds!*7?3Po@kQ0ZvH*aL(o{SY%`ijnEiYy<>3rAT~CLk
z`;_Rux}yyhM{>&re~C;J@BJHjOsZ&Jv$tk<!IQ>2NHO8%qVB2Cl+*CRI>k+qT83Wu
zzB(Z}6XoM@5dRH+PN^6tdOCvNNyPQnR)Jx_$KrkCrbgAZgYcJ_i=lp*#gJR{VXszC
znzwAjHtQ(wbt*0zt^9*m81B=9d5YU{Ok-68K;fJ`DJ?^2uY>S5QNv2?KFQz<Sd5GF
zE-udkrmt&O?h(iPQwtjXAXDHyjrp}9Dz2L(U`{i<25lO*^Q71F#M=9!T%w`ua$z^U
zZ@>d5j}+YHtols@DsO&N^TYm+kHUlp<~Bn`_Nl(ob>`Dtd-C;Me+d=Uf})FSK`JWM
z9u3<ZdyNN_tLmV6rZa}n^g*5U2;NSu<fu(ZTHrgz`vu$jMSel)6W5v=SN&j#F8Ew8
zVcNiyP;DjF5%6}BlI9ropt^pT%EA<u;M2{!1Z4LTy=s_Fs9VTwl(;ymDf*~y=(WeK
zYUxHIIy-^MaVlFJ=@>yZC{|&KQ3m4qJ@lbow)yJF3ta`5EQt6+>Z!JywzG@XKFxh9
zoWAh%Xb<VW6kF1YI~6)amG?kHx)m|3S8ByqxJ%wG<XMjk0b`PlU*<D4$=vq|pS!GN
z^ge>AdGbkRWjvOara()G>ATgM(5@{8uQCAt3QSekNdB``E3w2;*4v!GW}E{NRDfvd
zWQ$mL|F%p(jT^))Gi&~Gg=g=|;ickGGHsz06e7bae>rM!PY1Q$6lHtz@8lcSJ0tNs
z`c76{X~!6^F@qY^ulM8BmtKvOo;7T{nN*7Q@Q8TKL4Ch~LZweTBXrK@D<O0B<|7+{
zA7yka9MzmpM~!PgvRkWli*L4uAO8Dwy-Tg9x+BTDo@DArI2Z(27+KEU<_o?f^$<!D
zwg#OnD^vF<Xc4VaY(&XY9_6PZ@eUA*a*t1%BRUX>-3Ur-YeZ5Bn1T~J<^ClYO=J-S
z^vxETpkP3;6Ib7pncfz~OsD(&0kPq=#`8}gbR$P4UJ#deLw1iSsFluSsZTj*XZWkR
zeWH>^jr;Azw{3ldoGox0W?Ar5b9pZ~qEq^dl$tjgsgU684jDsJaapqLP>pIgUZ%9m
zLOpKhAFY_9M|)=XD<WKOH(ot8#oXJI)Hobmy=V(Ej$-axEa%8bNwuL<NCWJsl>9rJ
z*kKB}3AP(VVU0LYHEd8pyQ|BUYDOrQaE6df9j3az+T)3Vj^~j?{*D|?oR<$+zq$Hl
z%t7zbhjHL<JKZN6gYGkQ1j3#=?`l}%G!afA>!GA%WGm%vT@rS`>{vdWk6Z0-rl*_;
zqkv9r(GldVC%h&;7IfRt;^Qs6Naeh?LO1|rljR$xQ)FDDU7%@=8fksy0znj%ZJix6
zmIUk9VV>dLx9(0(ry-fQ%=53hl?`>Ym5ofcDhYz=IU4VugX<!?-JFk<Sx=DNtU5p!
z<gEFUCpu}*0!B)UJmx7J#Xh@j(k@bqFddDlK<iVDL$g%S4x8Qi?#B>epiQQ$RDTQH
z+Q|x-+y5+{E{QTNp|6`euwTWp^!aWjiRR}`v!jrWk3IKfTu;8qlfPJG>bl(Vl0BGF
z><@UevVwj?f4!$9^iV1L?DfSoIo!fe$2G@4=O-CRuqLv!Bj4ILZH1gA4BV-FIv2OZ
zckfDtmBv&6Q`@>3jjEjf8VxBAk}3+1KVG%5O*8?9yq^bYEkYjNF@uA`kSgA5*VPwD
zgM@<m;|vr|2@sd=R{Cn!$#!o#yWDN)o6NOa`Rf$q7eWad^mk5|d0F2=6+vBZ$4-%}
z@~?B$l&D8<0(YN->ujEW*3FVGrHYl6RrrvxfNouqg!IB?We<#~g8TmLXYm0|X{Wt4
zvnc(UC*Rh|d(@|OC}z#${(wv`bDB9w-*{(n(8NH2_FHKYo&GBLqwdEI-3E+a$2H#X
z6H7`ZxZ{dPZ-Qj+mZ5ATUOk3ap&tgQA3CTDlK0GfCN^5zQ|SFqVB<x^!24)tMTD)N
zfS~i?&z(5J0#=GJ<ltwEwhP2(n_u3m^R9^`ey!XcBzHFMZIz1;XXB%#=Gy+;!7q-R
zpoN^^9H1W0h+eZJ<cT>sCVWKvg0F;p$+VcLvjfmb{61LUV?DvbLBm>czwghxcg*TK
zY3q1au-x?0^7lMk3={N5Is1UxWnp{JWKj8CYcEIh8QeCwM)E6~hzHZ3L9SkKx!{A$
z9)^o^SY}?8bZ)`bWPutj?Z8<p$p+G)m9eT%H@<R3Ew&wQh)po6gZT1gNl~B^(bSWD
zcd@auhcV^PTr~^~pS^sVR_$kwU2kKKw=MI5`)1*N)WE~e7lJ`FQ#lQxxWygg-X0%k
zME<0?;>0Wt+W*!gPI^}Lc;0(6ndAP3y8$gUM#PF-v#N{lh~s1bIX0?-Sz(nwt0F0)
z=>ms2&U4T;BW*CPMKmK#xfcZ_puWO?<$rOYco5iWQ>ZF_G*mQcemRO<rYj_X5|^1@
z3AT?I{Q!scGx29Yvi^fvBr53f9|(Udo8On%@Ed@mj*+70vdR99c0#i~@KiZT1{vSO
zaZo@ntu+Mvd=6IE7>b9p9oidyhIx7#`=+fnBA!??MJ+&=TKfHp@f-}Kt?tSSK@F3X
zP*Cut>#9e~NamcPy@cyeGsQoS33$TzXYMTRw7{@qgC1n|SQ1(;Py5`g4N>+P`2MY3
z9nj10<>o~+TduapEj0CD;RFlwK!Vg+I&wii>%RxBAtmfUei9`!az(3)8NX&H&^ql!
zRN%4ebBlrf_2~%}QOvz&g<!=9No!I01}s;i{_q##u&>}$@ASYe7ph|N%hr${r7_dF
zdcu;Rc(5~KZ;5>DyX8J`jY}y(5`vf1A5^uo({I;-x;U{P!MASMhEL9ZPAmxeyma6!
zrXyN2+b|Of!)6E%mxKkvF2Wr5qP*iPK{K{WCQZ@t{WMiyf>0@NY_<(6>=&USHauG|
z%y$gHBR-LJ_~k^QTWl~&Opf0<y+*y$*8L?xw87_a8%cbwdUMJMC9-B#v)K7)3xZV+
z#Q(&(>g{Z#Nxu2;`cW$$&FWWm-g^JD19(MxzMO=k&OfPQ=|Nj}jKw7&XpJevk5dn9
z;5;`PKIK(rToa$)&VMc*Ny!nrZr;inD^T?8XVq>bL0I9&^5Hre@gmvb1R=AhY0taY
zw6F7)L&jCqyG<G8i*eLKq^%6SS-)JNLb|fcbQ0KWVWR#yx~;I`CdkOYEP6J7*Vg$@
zre_{j{-9=e{B@Mt6;gqd1k2Mjt@fo%?_*=+ZhD|+VRf&r>Kn84Xs+AmrK;@TVEF2V
zy5y22T*@Ke;|q$}d{6zn^obK=WJzFRghPw(Pxn1_&&7PP*?XTK#GhT03N!5pG4d@R
zl3p6U!t!{4m#85beEobPn=sY9JEkG0whX(@yv|c#T*Jmsl7{ltJ{wE9JRF3?RYm)#
zlvU>HU?HKf?cjIIk|H}c0qym9uQI5L6G6J>C}q|4AYTy4SlDP%Bl)+H>idl}*zGn{
zcXZKKwhXd-8x5r9pg*8CCt@-4$9Yv;6ia$czRGAviQl;sdu<({##S^Y;7T#EVAyCP
zOZE-%Co>^4r}i=tm1}j!4?OPoo+h2WZ84#*-M|_V;yuP(xvW>@OFjAZ?iJ%|!Xp}i
zHi%1O8x21oq3<OwgtVj(n#)#W@71gu(PiILPA?JTv~}~sAGKtQR2X>}8$X2$>7CnJ
z9vO7E{xsJjo@X9iZIsHmx5^x=2_0V7$W5V=+g;y$EG2pH&sx)q*|p^nvz7NtZeQJD
zg0zIS{^c;ucbUY!GZku9Y^Y(^&0nPXg2dANj%?JXt`jaX-_UwAKdGn@r)sNF6`w!H
z@%J4)1RB`x1A=n!_CP8>uZrdPMS`u8npH{6A0-(o2eD9)!~ECC*NVW(pCLMXWHx}Z
zYL$>?5hS)<8NDtXM#`MIw`LE45ExOb_E*|GtUDdym%AdLav_e_UDl^Kr6hRMZ%U#1
z{_Gg+rFB6&Us33KTo#Cp&He3!)AQk`q4jAZN1xj{co9_v$j=uvMhnc8LGApVCO%Tu
zwoNX=C#rC?%+r6(Y318s8F1^=CPJ>+<u39O4tv8UjsiixQQ4g*LaV&Yb21I)x+V2m
zUITfF!V**kbfBnw*eP{pWBS_BvK+!ZawJIT%U?LJ44z{IPD+DPmfG<Lqw_&X*5c)4
z`be(^F3Gla-k?>NE`$r0q{qus6u^HBV5#e+Uk+t3Z(k0*1l`srBf^fIc+c4e3B=vu
zvK4B9lLgGP`FDsc(lawbha4PhO3BxXs}~c*XX}0b6!pw2{_q~HTq$Qxo+BuYC=Sp&
z|A1l7yjL+pS-b30gUdT^$2iMa-7irt%J%b+SLi-^<r|fC=)*xx=Eq^ZOTz5T10@bL
z=YPh+3DuGHIp&<hVj0Ah6!ZFS3*~WsQ^YJm>R#4h&NmmuTXR<fY%fkFV+G!|+cHOj
zejmed;p&3+3u*t|G5F*jKIfE-4X3ar?D=2vLs%kFzHTL&#in&v68Nep%sn)DhdM!l
znK<FT<i`FvlH7><{1WmoIh5dVU1srL3<q;#-jxKq9*|4nZOG1>d5#Zv*58B#C{yWQ
zRu@83Vd5B&hyRd^h<~@XJ81T18vHv3!<YldMbvetp`uy}%qpX`^yy9r6ABypxHk!}
zZBN!1+e9W1R%S1dyQ*L8H%yU!0$hR$mY^nyLadWBUc+kenoHClv%e~oJe4g~vkzUA
zcBQ6lK0C_vGhlnFkCXxZJv8ju#!0|#6F``5_=$>4++Ltd=CExpPns!b9*qr>biFBe
zc-x=S^tH3e3zkOLI{_;B4}XlKDsD<Rd)k$_@lqU~nf3iBWjpryHla%ji^Unabq2A5
zup2zBhy>FesaECt){{*%=SE*O8qu|$ALVYKxnyYN1^7uXNB9}lYn1>3wP7Sd`6rhb
zk)UdKxK{6H|7>mNm9QDo%kQ*;uwA&M>jUZ}EantUiy7+(`)fbMrNm4i>u>U@wwxxd
zWogt${P_L-{dU{zO-gPGyAM$LlxA(@Ms$7Z3cfMpUpgTL-+F+$cpLQ*50-rz5NIJ>
zyf}ij_=yrrmF-rBAI}7bXz%%Y3F7e)`4Ekw3k)moR+ZCdu*3${W59iv<Mg--UB_~<
z%yvZ4oTVXy%>4RWw3p%($0-zNt{Wt9b;{!ubDmbC)(o-u<h(4t964{zr<GDjFchE=
z9scUA+cztW)4gifVmMlvHuF@xeSx9-D<Eg;%_9iN3DS&W8p|^@CB!`qL2Qmd1&*77
z4oA^Z^P%Ol;;Bq#Luz(?RE5Q0fxxHScQtITf53Iqn-#)-R%gO<GeQTYN}Zuy>uKiK
z{MJ%FZ35C0q;`ydgy!FPcctNz^L+1(wl_lpbB%X#L%Fxe^TbgmdEibKMkmh_R7LC&
z$v+Q#B$lzfl`!&NZ6U$<_cZu3^!W=r;z${I&ILbU81_vdN34*#qzJto-D0I?!vq5=
z#jn$|X9ON31y!-v+hZ0GxHHeRC@32L&%!v0l38mitlc27S^8D&A#?{Kd^nV*YKEN4
z6aV_96<XZA_id>nr=_elTX(hR>{3Tu$(nAE1TLdeXnFP24{e##r^#qS$~c*)L?Hs_
z_U*Ug+7K+NZIx^dB8j$)d+)}&Kg5YP9CyLmP=@u6CMz>EFjQ=GcLb12miW7u@r)0l
zsUKW!c>OgV<P`VW_XMYIG_;t*DU2h&LegREjIIdj`95;3pxo)AYeC;CfJP86=+kzr
z`vJfw_$f6PJ@-z?r$ukH4Y;b{IYN$-!qa44k@@^^ex1>+fG~3o6+k=sVM2$9`2Mn2
znKc;Px1g3-7_|3o?vdkaUehbLNyK;F(dMTXhx8@`^DtH}TKtoc<*SZU_}2-Jg<+E)
z(;efCq<3!oq#kj;zhybQ@X6THO{0(+f*ZR1IcB>=t)t)u%@-n6L8>~-+MMNn|Lu;t
zGn82B%@I3k-j4m{_#+rn;(o+kAlwdo`}s*>!+DoAY=dz3gVzihV-#6L9x^wRcEimn
zv-ky$T9UyR3|3aFVXBh{eM|fMb5Fk;-|Q=k&G?HCl3C(FQT6niE*2%>B{}gf`v|VL
z{+s;gynUdz6xgNn@?U&Wvm0K#fJs09-A23(xpQYHqhS+1!VNTXxNky^e`#p$VcJIZ
zg{T+e)%_k~yT|+1eV;d9tUQLE4X@F9&hIJ$+CMs;lRL?bywkWVHQLFt|1=9RC|>kH
z>8<$dn;!2z;6};;SkLMAK{G>{li!6g*pkW(JHaeBoUNRYU+201#0gvP?f55vem$hr
zbZ#||cz_!)N18#6Zi@!Hs(C^&OE&D4(e0rz?Wuc3JtoW^JPZvrj%0Ys5>(@zX8OL<
z<Azq^n}k(f;8ib97V6-)pKA)D^S|8mDf8I9W;Wu5m*2q};L74mBR5W?5>pFgEZ)5p
z(zyAGBgL=S;$3%@_RVKfDi13iD%@kY{~@vdn@g*gQpHgYf?l(1Xr2s9lIt1{E~3#n
zn{b_MF(_Nv4!=8OcIM6(25no}>nO@5f{eOANsW(s4g*21bX=I?%>*xr%TtmG8*rVq
zFWS%Frofr>P@oLN)>2aE6gj^rz|XyKw6F5}qL1yCi`_Fu2pv^#R0w9{5-$j{9QQh9
z5RcKO#Q#hx|INW+Q`mifZa9eisB&Rm-;bi-Iz@0=@C?^we%AlR_PU%>i!O(8x_=Lg
z|AR#PuABzsUk;Q-QZCNNn{+SG4?m<amu`6DcWD86n!^cDljs7m)r-@=L*c^fQNTHW
zhxPv;G!g7L6@u^=T#@HkaCXIu+gsE~425$~B?T?`Q!P{F#Si~^euq00YjjGhDW6fI
zasOIOpl=uZ^s<^WkHFuf*~<A-!t=blj_N<i$3GA7Hwy?q+2uO@#joBLxqt1y|NSxj
z_rI|PrxBzD>DDd(>*M_MLkIiQjG6HzvGO<nEQkN=*YN+pNR%#8(A3IsS>KrMboUxf
z!rwFeEOr=?|5x6T-;f&cmP6z6Hq3wRZqYJ%>@uvk^A;&ZL;n3)P{QAY;Y+3{<8h>U
zA8+fPrpOI)6qwW%l-rGE!d*3ckbKB#QN+7S$6wt&bV`H{jfmOM|NVgVQZhJr^i}Gu
zPmMnQIbLPLAVgpO`;ogT>NjsnzssB1_uTMw)=$L9;mM)^xhL1^h`o~oXxCXsoi1zA
zzHXpSJDqrqK41C8KzH-eDM{!)pYaHc^PL3+59WI-v|+vKhj6lm%YTkzFX_bzHT<fW
z@YV#OUC4_Zy*4Q&Y`RC$R~zBKUlI<o*&Pox)f`55=lF2db{n3u^<byO@82J~V;D|~
zv@6-q*F=tsL~f_KgvCMizPQKQz|?6${eaQck02#~ea(>#crSh3{naehhLUikD1aqe
z5X$Q}T;*~{RjW;WMd<XVvAEFs>p%DN=mk7f_fe18bJK}A+Y8D;J}2o<CReu3J?4b#
z*zYjO_junzS8(s1SlLqBS2RCdLMujiu09dJy^i6LLtpiJZx?Mjs3p6d?9b7hjAlYP
zz-iWW<yUW$8Ifb^kc<&@r9j#`n+3tC0D@+$Uh%JG7~U}fUN?Eg-a7MLG5g+l8^hlQ
z#%KO@O+3b5J8F3PB_+A%(xFg6+ig6cf9^slvDPWA3OEMTRoBqll?1kL9&HL_1E!w?
zKMV?3hco#{NH@`b$#z2<ghls{2l9OyXMqe$J}+qMd&&U=?wj-oaxV_Rqun@Ly6XGq
z7)iyIeOkM%^|4p!0&H~^)*5i$(*l{a4)oY-Xy?{`0D}JAX$TCzAqM-h$5uj0ZKK5T
zXwOj__*W2SIxJ=<JwBXE^_jT`NIzQ_{8@$t#c1L(X@e*9&iCD9_R2H%+Sb+=P)|#<
z5*1AIxU^*ioO?fr2!doYReL^yVmmiV+SvXR1&?V^2?VU910$9TF^Sd}$omGf-vjNv
za7yZ+n-ic#uqd2<3pt!3YU|!#WXA5azj1+1>0064j1C<sJ$;DO$hkXv<2Bmrtai04
zGU(^3)w}L^6Yoowr$b%0&<GG(T5xgdLM^#EU~C$23|r@>Vt|BG9SAbg=#kp3?nBlN
zF^T;8<lwd}fwye}gH4dY!IuvZl>OzJ;B;3JK^rBfat^P4$w#sa;yI9ynxvUG3&iDV
z=+1pc?7cVvpEmL5G@5axsmZ+T!xyvJzg?}Gj1&?(4dVhq{;kyQ`5$yQ9xpEW(Cop<
zM)}~J1(V~IgcWJL6#MhL6Wg1i|14E3%19Xp3o9n6t#1KSs|Vopy$lJf8u!SF+5cK;
zP4L%7zelmt>@X4$SIe~c3*2*b`2&=EA&|Tu2)+qC_S<!J+WIZT=X>FOcdB%uVmN~8
z&B$grWV-loKrN{WFtbLG!pIfd>Tw%1$z}EX#C#~*bfCp^$Gvu?Ac>TV+!apF6$m$0
zQ~Qb9nriZ|snRCIxsP)$NR&SmyY@nABPjw#q-<E<AErOiea(K8jKI$tf*Ja#?tD;(
zfUsyA5T{k03JE?L#MR_Lo#VX(4+U05Igk&Op*$jH97ohN3kx{|v(-yxy5Aa*GD#|x
zRMv<Zb`F191VAnysFwUKr~KH*Ly+YSIAT&Pfn_Jgaas!$5?T|rUXVyOM}6%WGzbfz
zQ+-}aB)EJu9VOidH3v7ijcVMl<{Lib!aF+6G@{`d{~@<#{)#5A_HadFd&nZ{VT+sr
zUv>}w;n>zy$gFQ;-gZso_QH`qgbb?x$KG2;Rk^P1-^4@-rMpv7Qo2E;B&9n<BqT*T
z1wlf(L`v!IZjeTh?wW*j=Oo^X?OyI@KVz-;|9*YP_>bX-=^9Iz^Pbmz-Pd`X$N4)H
z=9;d<cjJrIUcb%(!9W%GJW8O)aiRfkmDn<Sas;fT3V`7Tj0@&D(SKpM-!|{OkPJkR
zwz3({_(*QZE4AV85ZQkUrVZ4yo+nn6Wj4PmeZDCZ{iqN$(qmR6`N6?=VnXL>7>J{-
zKFPq}bsmaqyM3K0P22<BNlm(uTmV<q0PJ+S3%q2b0ABJ`1tO&Y<f06%5-Cy7^CinA
zAdFz-1CC1wf-SUD$!YsjOcX}%{aG$hT@ImsaI*w<sXQPhqwchb&>CK^yd?T5V(&O$
zQv+riq|Ppg3ibFh0e3tL&nGwI8chFdGy+ylp7*WSW&lBo<{h-VxUy-w$x~NZgGH6_
zc5VdJY&F^S;bDKwOF?0fZPX7Sha;!?rmjd7mtxraz{J#X>UZbUm+$G~>5g|L+|~!s
zF@GAzjLU?-tbD(|0avT&?bf&?Bn`}5{1DhmG*3|h#B_pIQ5K9Zu4zFo02<!GnGO^a
zYL<XBmpiNg{)GwPWKC`#gIzBN^pfOiU-4Y(+BVV!hkzc?-7&1M6ddY$9@zG~?E$L9
z7&@#M97WZ0`j8_GJxYTa_<3w*UosLzc!M>wnPiI|<U>4z`9tXop9+wW6@(AFX?ouX
z+7}i3C(ct*IaQP#BXK+Lk`|_+;Uv}8R)PP=B0oG}n#nl1s*Qm`9e7>F`}1DQ`>A~8
zV?U8lDYKc=+0wa_^6-eAI#APfD&wD5+4Z3jco7)egy0XX5<(^_tpa~}B92wP(Ji<F
z`s|Qr)il$>jLZJ`1OuF$-^tbl;P$uscPoGBPZm@<>(O-k;O3T#2-7G=f3ew(-qk!P
z0(%Y^c+se)7|o)0_9Y;Lt1IK4%L9vuny}k(1PkbmOiR$^OK88cen2jyrTb%Lh-IPb
z@)00@>LiYgmj&-@G$q~ieYrq7>1FnmI(YB(o?A9uBA_BFCsR7|uFd2}-O3PxY4!E#
zM^!f##o^xipVO8XSs+0mdpG*#Qm0OL!f($9+*+INWx1JR4yV!5QdMC=#~+idc+}6K
z27o3d+-WJ-9{_qJi7%ekYE^EA=vWL(ou-FJo`Kt|`p|CmhO&ii7WOUGHTKWJO67SA
zYffw31=m;tG=cjwyRnDx%r2Yo)|R1T!f!VqI4n9KxcpdjeZP*LA}X`y`f}V;xR{pf
z_B#<mAUc`aMDZ<|BKvfME7u(ZpNOF8(5O>bFU13x)Y_mezKA;75pAk0M&>{Qt(1~*
z!Y}|-ef5pX{R?1JM@7)O5_btEI=(X_NgKfK`A1=rw+myx3Mn>d)EQh8Wwz1UzF_B~
zKt+nC?DjW7JfW<8lg+<Sdj;eSC*@@w>T}@oi3}XeO|p_qfuLY-rgiodY=QPbOn*n<
z_W)saFvAW7NEnuMq&<rj;_Zuu!ihUsJq%V0C@gmY9BqT7KFYH{dfymAJ^Gt?gORMw
zd!n?@oT)c-t!V)KP^muSQXjHm>@IW*5Qfij6-qRGLKriEO~pb}TU&@rplT@lQ7aRO
zEovLTC{a8=o!P6PQxpb%h6YgRr#7!--P(D@vnHF3djfs(<&{z*=M<C|*ELNIjHz3T
z0wAD{t7_|}U`=6L<NarAA}ySNw1=vJOo;P{AJ((&%t|v%Z&OU<bOGJ94w+&#XsBWE
z0?w9ici6^{1MmTOF>=q(2;g;CXAQ3h^6ySi|N0YTf^eS0#dWG&fwgRus;v}3*);05
zGo3n3CngadKE_~!9`gHHR-=SsRK>!ApQhE~cz=-ch_tMjL})ExYK_wdi(O<9cv2US
z+Ws{eo!BoT^7dB=vVS<B<8i)}p(y(Dc4OFeTM+2g0*-5;_{f2^>!lPGXlgsK(wpxD
zhB86{!tSTtg6eLCX)W$C*Vm{Q<etYWECt8=?Z!57{VNZvcPdcr3R)iHV$UA(A>!B9
z^6cLQ2~BKC*D6;K$|KVYl6E;kiLWwo8B;KsAG)Uig?kHyr5aC<kcdD=`DQYDrm2(v
z02<g>Jv|r>qFP|DT28<g)y?8{z6nI^It`5sd|q*|+aJKlx3{4kA1SJ09uex=O{~84
z#$_`Q+R0l7K5>T;Zw9z)^lGUf7~B@l@kcJ#t$OgAtn#D7>6kYq{OE$K{oSbmy2_z@
zN@@Pk)bQzL#}4;55ARv~S=~(l>)0k2@yO6}6-yk>R<bQsJ%~$%Ewh3WXxV1ru=h`u
z@-+bt!tnz`-yQE1`s}r7%md8hMd*5GnC@ZVn|`J+0yY-b_l=}Q|2C6~Q6lJ^=9$MY
zj5l@KTKTR$?m<W5NqM|R<e#Z6eGgVweTYbQ_745*yCOmYQaFTHbRLqyx5kX&M{U^X
zHio@Sy#SmbcEQpD?&Dm_T##-|cEuE-9vTXsFKuqo@Z!E(V^(R1H~1q(E+Y6#e9LO!
z$f4meoaA8>XEU>rUjU|>f^<nCC1k+5fUW_niya%NO!w-ao(I~mQ;H{&-%A`8!Z@NI
z5KYNbqLm-eNkGl|%D}iSVeuu<pXXA}1~xr$(Yh<`4MyCa{Tr$-383nD@$$eefLz7b
zgJF1E@_-+V6^9?S9)q!B;ZuIz*<*?yz6i)1k6O?)o+v~3Vo~N{y9G|7nTllZ_5lBB
zE`PXPa~sP%iKc$%^fQf)5~xJz-k~jj@Bm#|Y>#@CZ=C`+U8sFw>QDRDT+i_D%Fx0a
z6RSUGI}<E;WaH37xPh|bq*v2O+?eMr3rrAk_MK;#+%;rIe{~3hFnxxJ2V)^9<Yh6a
zF1zQKl4NTM+Tk*dLiDFNV(cczCwC`o@IZXc?E*}wcUaKniFr-(^O-I|1%P2+6*{j;
z<vS?&<h&mSo{jO_?FWM*GuE*ocq<DaXuRgRpI-|t#Os;9og?&lLT>ofulM&J9y5@@
zf5d`OC9G5>H}w{%=V$e6PylZCc^^2%`@G{<Gc2pGtpYcQ4BR3b0c*~2715rZQuLDz
zD0z8%we=KrDNg7x5-Fw(Kkz>^eWr&U%+~-bgL<Z%8S}!2hpDfnlm(ibcIQqj)nC(U
zV!H762SabSlkdBzspEX0Pllk4A*g1a6}^SPXUgmuNsH$q42yrp#lyqGjh$!l@oRpI
zi<$d1NcCwZ&DST9QT{EW3);JDyJb_`k07c|M?y*Nd$rk3>n!<P=C7ETMjX}<#jn9<
zSGSL5Uqw*dGYtb|glzFfWB8?#60M3~jwA8aRIoCy98t^B{LS5s7}P%AM585O3>aG+
zNKHbN(16*wLo(-t&t^@_(jv4#m7!Ch_GA!HM%fn{cV?P-Su+dV0N0*<_dPhATA9&p
zj7{*vIFYY(O&B|s$!{s%3qL@6;E{$40Owhq-3%|sCxauG<Y!o-4}l63aX1md^~aB0
z^AWO7F>y|@S%W>V+Y?;|zsExNe(V!$%wVBzJ@$8@{sz0`w#dil#JYKTex!@Zw(;oM
zkmaB*QIkABWN|G+x4LNa^Q+K<#@iuD?$EyE6k$V7KQH9UxjwaARqgkuHqlg)A7ntE
zdlXNVoXZ#)o$7dZG`IW#nLr0}8Ti5&y{`@e(IP&PrN#oU!|N}B=1<bz@ZvSi=MSb5
z`R?2~lMfyc*T!@q&Yp|C4)qyC&H_);=EJ*Q=~BD&l?Lm%z>lqaOK}JNTuMpNlb)9i
z*8Wq3-`E`8f29XP?5XZ7&G28O37fC%P9SS`kz7FRG*<$Ta18=Z&*$}gD58K{2mOQs
z@6ed}cB5_J@~O0R?qXd8N*UT3w5xfk@bjS6P9>J8!H*PS-GD>G9Qh1cU<c;FNh9%1
z#G;_)K!J}o*7oB=L%w?WiG;`64)qdhITL>})8Ja(0DOs@!13}eN1S~V<n(NMc`QhY
z2XgzEDF7H?XxoE0bmW?=Sw}L3vmg#X%C76n6W&`^5M=qi19M{zW_EP5Rjk>?-B0p)
zukVZJ4knD4wJ1%9MKvR*w3`r6h!bxCu=a_fH2%??C@2_IXfLK&`!dmi^pNq%X@%v_
z7Hq=-FVA4gh{{gNJUBA6k8XBQx?7m9KCkPU|DgEyp~xc8=cL}Kxo!bEbyGT0dbs1-
zpwtKfJiONhbX{R2*?!yeYscJ>t9RlRR*5)|>>R<Js|Q)KgZjaBu{BLfrFa}NI$8oq
zU*2IabFs|&kL2XrMnp}{qxC^9)&NSlXQUB;AMnD!(<w&!J3=?juYJ&#P$T-O51#6#
z_}_rf`*70qVVKx>>ezwPm!^u3X%l?upDv1YDu-(tKHA!pi~}#k2PPc1-lIWh&Z5jT
zK9Hr8tkOFP+ZoHxPPsD3-!-))j91|s5V2ntWF3EadN}Tx^_*x7Z@^AJgg^mi*M8?Q
z-T>YJb=n{KY*u9EW}=4R&?=+PmppDSY;&Vaup4Sb1m3;mwRKM=pCS|x?uWG4ShNo_
z`ME^_YrkA^yg8tVn^fswN1+DceJq0FLbc`Cuv%}bXtS5C!SJ=<^p}1%(4+1t2Ai0@
z_*jE0+L1m3*u<vVmA`6P45f*`ng@^5Sktb$q&?)A2a}p{mBH#fxkU#9Q>k7+^I`>h
z2s=!`u*qXh5I%tFMnS9{O?vGw7J!`tt;YmdxWwzubE!94JZ4zPL*Cm^5x4lVwdIl5
zpt8s%<_X-0Qo_Sl{`Ko8RCZn(;lp>Pe;;}yOps?o7lu1djWwyY&Q6(kp_fKf1<vD*
z*TL@YWz&`G2PwaAcqg17dF5BDGsU}SE~m%v9PZj7X|d+QFh_;$y<9fWxlj=gqOJiJ
z$D6AFl4&x%Vc^2Ls55FgRa~ql_qA`_x!++D^yw4No2jk31w&v)H+}R)jmr96@s9S%
z;_iJLQ}$=bj5tXiWabi=2WB>(_~4{zb*rpdTU{bCLeM)heTJ7nnpoa3igL9q(J~oo
zfijq+U=w_I^;&O~avb4m(_Oc?hWNy+5Sq88B%;+CfC-t?V7Kz#bY}{=Wvv<{3ibul
zp@dQd2&i509@@<{)31lp(sg!MVq~M|xqY+J#cI#y-Jwi2hsFWX{Em;pZCV>N8hqJs
zxXfYfiwLOhle^2?#~WOSpgP$g?jk#CpMU01uatV@=KQATO(?IWknD-BTwef5rG$0h
zzpfZib}0w2TW%M%Zoio_B5dD|nEICXPW4T0O>JqJDNm%>R(@yxm;5L;O|^I<Xe2yS
zTyu78z3Ln1WUD`dF8*Uwn4yrKS{c$2zj*jP9>R>^?H?9Ifv~W{%XA^|!~b}_Z`Mv=
zj$p0isf>&S40DqH$wk>X%9|MjjDkZw$6~WVrC-9c_?{Q5x1(X>(wo8b`K6x{g<Q)@
zms>X645Qe#*5w5^0BTgT)aTvR1^M}~twir^4*v||M_s6xk-100@ZGU(cz4=y?N5m$
zE7pQNsU?S)kG4|J{Gfny9M7zfQ$tY0)8OByik6!hqdD+NoW1XHyNfX1>6~J6bjpCD
zj+6QgXnfBs?14SbRD38~iGopccMT$^n7hqqgDt}Z_9t3A?JD`d<n)L<6ftFR<=9nV
z<#dy!%n!HO3(8KJ=iQlX_uA+0?fw3Rs-o~)XB{Fh+*6!vo2U0wFa|YJPDnM~Pd(<r
z*>Tndp=3x5ZVdtH5H{xmkd#jzwMcqR$SdFh);H~fSG@r!$7w;$&%65p(|VSGIg+H+
zcr+&x8$WLM*^}=)GL&O?tdubpI{H7BFuQUTF)dSqo0-%dKT=!hp;}j?g6+x0r++^f
zG3{>kOGS0hYNq$ZJKf$jpB;w^0U5$KgT`miw9--?XA~ati&s7<B@KQ)Lk>CW;Rlq}
zgal)dkH*O{rX3Gar2`jTb+ybv_0L7;4S~C%|EW)8B&@r)tqE&%=eO!-fIikfX^34C
z{5_=>BSqQd4cjR%jj!A-WbV~I8y`zCuQc^GUp)XS{a@XP8}MOTDRfx=Tw^f=a%3?v
zQ-brE)VTm&hV_)dM>|eJZ<nH0bDQMhMSe@g89E5N&G4t@Tk~}~n9J@}z5j<FX^-i%
z*s0&@^Hn3I-l*#Z*D0rlu+nP6?@7UkD&$FTidl0TZ}Vnp{<HO(!`Yb?uK&pJ=Mp}>
zNQMlh5B|r05`&W<b<Xs0PoeuI&c8L^XkoiI+jsc8%S-tNGiZw!vHa}#$3#PgczF4r
z-~buayA_3`UM2h21&DZsB9;J^Z8d@~op;5)ba6Ky`*WVb**}IEW6Ay!%oq9hv+wSz
zEn<K#<0}1o*`G^DyNC#{gnBRkv;Mv*BaTpG`Ju~Sb*3$3yP4TO_9*kYo>SsqDGvu&
z=c|L1{2l_`xP7?xQcNpNq=tA+N_0TNlA%NEvG}9L)3PDF6aQ3?-AbI>7#eG?56v@e
z{OjHAVD6u~V-Wyq<;VQTYuOJGfJzz#l7D4DpOuc5mR6SjdgP~3;+bd8294Nl)8%9U
z?G9TdZxd9eWSftecB#%<L0(EuIc+O+P#-m7W<=j<;CTP-p@+{)x#A*0;RaKUW#lg*
z4<bs^^07a+(UsnA8lYm-GEt!m`{DEk&!v~SnEU93Vlzfd=IGf)$zJm^ddO#kK(+^e
zN(ogFc=;A+cw0+e^r876(eF<+`yAowx+byW#XCa|4h{z(ZTAAHj1l0G!4|tF2jtn8
zAT3T67*%PLXAis)%?1o2m#3bV&BkTu)75wCdf`&3a8Rd;I-BA$rP^RbPiWpJ3J^Pe
zK>fIvFUy02No*d*lUx9MEcPiGug5!HX0DB6I9(zGEjr{U{9)&&op!y_%7Q#~b>K&}
zTEh&(<d7)EfNox9PndhqvCc2;T<)!pGK_Ybp#`%z)bHc`yCbC8<gZPbzAL`eIXBH|
zsC_h9&=qtqK2ve2qk2Om!>Ku-yM9YzWl@$xF4fOD<UtMz<3-u#qkS%^T#lA=?xnKV
zfs)rp%>=BnamSih*56e~gEQQs+cL#DB3r{dn+ck4#yG;;v!x`|OO+2remd3AI?wI?
zYBnDT87|L~dEbMDLX5$jsdsl!o2`U)|L5Wo!pkp0!=tDI6e8PyueKT~NWnsa?x=9R
z0uluDMwphCHZoof1lmknr+BdIAWi+`Eo>g0{7E4AUJZrvu!k$2cI!>4-<q#{n^`*r
zb*38fY|YD1mTNkhM@0{#+;@>9rvpq9oo}D$6_P(CfBe<VQ7?`H{eIuDKD9YpKwr|p
zGJ(JXL)PupI%dMeV-^7n&CF+6$P?=wrzqe1a#ok}3d9Vly>H_u@r5TADnzv|J;|xh
z%y2hUxSsvUKWW=8^gX<4U{Ad6psPLmF?n)0D`CAGIpRBPYcFsCwN=@|j(o9hx<Gd_
z_qmaZQ#n>3QO$NJy-l6p;gMLZ2DQ?lB7Lf`yJM`ftgvR)p6K08Y2HcvpPMp*0l^-{
zC+DpUu7<{4Bh&YZIAzg7#1jrzMNV0im)#NKpqZ1D;aPG(qO@3}L$@-(;&4`pv+`?c
z-BkQpsWNAMH|z~5s^7R7Vn$DlovWvMkWkvq{+=?gY}b!_#NQ<vzfwzX@%M7GV$snL
zN_VeaQ{U#YUsaWmFi(buw0yiJZTcdh(L~G7dCB@VJYU%MqL~zfGmdM{vO`87HuRJ3
zDySNC%|z!5CvliGaTomY<JEGZ2`@f{rgNV68C}?T2R(T~pwX07?1d7Gv;K765{oW%
z4>@+s^1`uvSeisKw69QGN$-hG`Ou!fZJXJTaX9T;_mYsZ%~xR`uW2dncDmHcMVUWm
z`(ZwK)X?GcdyB{aUPX)du=&8uT_~BLBEZtqfEp_nXpTLgi3yreOyurUpfC|Sn>{)N
zojExWXqy3iMp@e>#>F);6riTCp01G9D9~a(w~c=@(-e;(dZpZS@v1OGDb?UJ&l~DS
zw?<lUlyJ;l?`z*cgFif-SUQAaAy-N1F9kJd39AOrlWa+>mG!<hx0cIpn-Y6Sxy6@g
z*!;ReZIHs9xcTS``QtbfMOBEfYx9v-$pbA?CM6+EngMxf)Jr#yS2a&qyuP1D+@8ZI
zE5FuQ&cdgMZ%lVR+ku9AKXu5dPp?{K>!Xp<n_ClGtT%Bkxyqow-D{G}aLpyO_=*5+
zu@XmP|1jn*Ip(%l_M*nxeiEh`5vou0C{Quiok1O;f|0~2In}KO{&P9^Q}i5pGA;TR
zeU*t#g4G}U`J5K|0+sB@F^;_!6ZVlG_M`}z1F#;lcAr^#`W&l$pFH@0WElHy)l`jv
zGz0pO2cKp`vbZ;fN5!p7B#v!!wcka(iu?g)hoz4LJZng2(SyiKsbZPzyiGybk&lkP
z!>(QeJ%zzxKf_pM0*SElN-!_d-mo~vkkoVPZQbwA(1?GoYtM13J0s~(t;3#Z<87j5
zbo&XlI(`qGT`zC5&R8$uTWpK-avl2=EWSMqgN1Lgj=sDzM(pZiwYrR<$b^~p{`*Vc
zGCC_mA-(;)x8A?L9u3UCG3K<@jcAysRYjfOS*+B9KJd8mEZLqo=_we8VBpnI59T^_
z1WQLKJjR*UM7Gn0eLXW6=TV{OVZZk*?7HfeZJG+D+PKq)<@5ytV;#|FI<X&PU}Is!
zq39}|)9}4W%;~I?py2R+IkU&+MM@QT4C5$ltW&Ie_46>!t6F34p|Y8DMv-~}!hM*_
zWtI^Xf2&o9dQhW|_RP$#K{{=1VN_?iwpSB)9go8}$BvL>HIh{Oh;fQ7Ld3Qe6?Ko+
ztpDtcf7bim3rcnDpwQ45V29}jQFkku@di=AJSq#CUZb4p$)q9$QSKOwoSbrL5kVho
zS$utci6?8L`jdE-zJ4<eI8{;k$?1LLafBWm0H%EICLUJ+7?%?OaCgdMp960g$g={J
z`15jsfx!J289Gh*!&$R<7e|JXibw6Clrwq4mfHT$r!X0)n11HHIM2IslYk<6V12dG
zQM>edoU9hlaa&Ux=9@-A-#lm-T@8K8pQ5>k5~Ho__xvhQ;*8I~^B45JmFE*?C-pRI
z!pmkON0Zr2)1Dv7M5pQ{Dt=Gc9KR!v+auh(e^@Gq$AGVFyWKk}G%8w*>MIh`_PpWa
z=7rR|JcqA?>*-9$;lkp#tApu}n#4j+ug?)R)gqV=R}~{~LfQu~gLB$4i+(J~)vzVu
z_*tn01bj=DnDAfJAd+YB+K-VWMW&OIRre5Ew8?DW^tx|PoHkiHd)nfJ7lX`I4e8yx
z<(u|0brQIEQTRwe<I@w7^N=~_XFX+SPq#^_+3t6j>BHweP(cdQp>Z)qpLiN{R-&Sh
za$-oD?m_+X=FHgdqCT5n_q|!+r_yJ>`5$1jZ{Rsia^Iu%QfGCQJGO_aW=U-@tIFdc
z*<p<-=!+RYK;rg7#6?Sq;(i8Ut)j1a(&p7FBB7I6<o6*531N5y&om>VQ#GNMUzxI{
z8XK~&uSWDzN%Zypn~bZf1T>1*)}d$P_dic!R63EJZKRMlBEZPqzjJ)jLHd@wWo(OK
zyElknh1b<^fQ}mVCXf{7K0_t#-ECOUCRW5SIGb3kAaV50vaz}u9bc;!cZ^%FRCgs4
zX(MzDb#uGEDrM5vF8s-BS^tJZb^nVdyg@JRG%;hj8HkCq*7RD-)ZcRu#PTS8j0V8e
zR}`2PP(EDw`K|jixmQix{CezO6HE~g;W0GX9Q2!4!3;ojar2GN=4h^I?_CF|kn%?k
zc6z1j?o4%R46~*pn5?wG#qMSS5j`N0k1Nl}MFs5SX1y1O_eECiC7PS=C3xn>NmA<O
zE2mkjo^fbg?uKJtY!XN(Qcd^`i5Sv}O+SCAN#zw(u#3M_L0q!g;VfLJKcISh7N<+4
z<SC@fD3<aC&xQqoI6hR>$`_8PoLY;CY5IUT9xe_QbI=(^+lHK=8-vcC-4J44&tm4#
z@+LH&lEgP!P~%f%oEtS+uF6NFjVEksrqupDf{)4QZ?PE8KHe`*z*$C43wbNTB%xvP
z1+IoUFFlU<+@py`!r>J*0o5sd<%bs8(@>jIRF(;$xWm?;c~CYMs_`5A*DQ<$K0i*+
z5I6Orct(bES0xj4yr1^)!k#LP8LFq(Nh*iI^(hAxs9K>R??v+D^nF3g>(4cOqLC2h
z;k?%U-T_{NkS0Dr#sDwQlntC3WssJ!4sDq4o5n~6t9@}yX<#U65ZkP!Z0k^Zt^G(#
zE~mx)2>#)4fmuqigEk_*V1+Ek3VP%VrnljrQ0z+W*dNj^4qjUI7DPT|<44*ybMW7k
zz0r~ib1yGBO{n3~!h1{%{hDK{hg@*=vs3IFWx~xl(zhI6Kj?)k@nTDt8vmY|`Z6S6
zf@-p#AdXqQj=q#F;(iE8O^bxlURQ7k%FP>Y&*M-Xp^EUgMbQ2MV`3ix84>l6Pub)R
z8K~%i)RsLzFr9o?N*+nrZDuy}U6P!4BgLN<ymM6$gpdl-?)1lV{Z*L!MT+>{5A#)1
zprodjn69ue#YI!TXT5OqUWe3!C1?-K0+L&tQsFVGKGkQ$iwDB1fIJYc#O@esz~D2C
zGo%^%6=eAVRE6YS$L**GFya}T9ka>H&uGkE@Um!+R`y>mJe?c#M~Qh@%cUPVZbpOT
z_bwxuSRO9-4S%3A`B`=TOiI^iC6@oBx1OMSxQF43Dbk_?RH2hd)|I?|?@PayRm@@X
zlPL_V53q8*SYgXICGx4xTlDVt0%O~4Cpshb*Pqm$AmutML|BKR_$_qOnXbe6x}>{T
z%rzHaQ{x@KyhgJV&+vQoh5Yt%0u$<W|La!s@yn)a+(N$-BMhm61_n*-W((9Jzun=*
zPP;b{UZoJ{x;ivJJjwMuj=XIwr$Agw$ci2O%gkZo2bTs;4=d#!ix*U=D%IWJFr8~d
z7q5%m`$2jkxh2(`A1>7wrAQEFmAR_VDl>pUJ%bU_BG-{Z&gk(yS4+&Rj}v{1xByAD
zXZsUMTbpq}9c!EHjhySZu*JDufgW7N#Z>HxOCO}Jxc99N90FpW<AS5|>>&(+A-UwK
znbGnBqgW3~$H{+PPT+iUTnKyet19!UUs;|CivClI7vF_`K1(c7@A9oUF$!AgV-i@;
zKfI=rrinv(?+)jr#jJ%&9b>KXsFwll^k!A7i;KXC{qtg;^?Y=E=vJm#9Z&3`iGG?`
zu=-7+-&OP)GT%G>&q+M=|6pazjc)<TK4WCVFE0RLg6_!^wKNuF6cldMdxqu@w*s(e
zp7nzD@w{=hPqP~siJzZ<fVmvBOhO`%W^_?g?Yh4xe#TNfh?#?Ki<z07B{^34JmO+y
zJbFS&B&QTzjSmBB-PT(Wl7cxs6Ak58UbvsDJobKN)?ji+q)pw1%$(xXGR`V(ig@VV
zsfH$%P%oMAH)y|E@seArcEEWY<&<0Wj$)+Y&D)v^-|z5x1mbp$3LMm(a4cAq=hA+D
zt-5U=PZ~FMx`ZjqGh@0l<w(v(L6!J6XVDJEwbF+S&7ybC!VIHX#GL&mRKU|&Y+rNj
zn$e9%fCg8fBplY`^WuDeB$c-h4^JqhbhrDZW4-^o*+iORA05F(Q@ZUyf;{~w?&ho)
z@UA7OGazeD`RUY1qw`mClNWra_h)a83q7^7EJ)!YO3y;yqt<dO`gErGkmQg=rm+jW
zdz8#_&LL(h=l>aW3PQt1ZsG(P^HW1q^0c%tSxXpP8)YkSo7TM0_6jG_z~CZU?Vf%9
zV<k<7517^Ms<hUkw5r-r<rtL!43l>)3Zw7Lf`sp9#tIuROueXK8s^N40#Vcvq;Z6n
zWNNI>Oda`ZBxT2HEi*jMq!X^vG_ZG3(WDh_6qxU{2xjI1*FUDjKcWP9k%5AMygXa)
zZ0n>jDm7hgOMf?mo0djd$;V*g#|}dU498b_&t0VA*bIx}P&H3*Xu2iqV7v7Sy5FS3
z<G@^>-o#6-$rFjQE!0{w%2zF;r}66S<S+fx(Yzk0-tM+WQ7s3f<}NLenVi5~tT)36
z^HVUJ+^&lTDo-8W7A;YR>XN!2#UH<{Wn(N7*>>7%M3fk(e27U(gOShXaTa4x$k>qi
zf*1p#6k?aRAV)v?Sh<EAL7EhjArdl7q$$ppA3=HmPg#;u!Kw$9><|r~P2^}2!^5PB
zds@Igh5d59cLj4<@)ucdb;(Uhr=L+r;gg!<&xVp=@?`Z6#+{G4K1<XzJby1+%@*#{
zTk06la{VogI6-Uc=48(d+JxL%1(kojRFD!8xG%W;IiF^<)I_{SS4XQgweVe`dEXAs
zp|R9ZiAxNML8G?PG20cDa-9b;lVKyK>6+D;Q?o>_FJwag^sOvZdJ@NfU*AekZB^5U
z@>3fxOyc?T(1jbtZ1+jyCBH+v!BH!fnk$C~<3#acNCAyxR%{?cd^&~2`ROUZmaFfE
ztHjHHGMYnPxl-Njvuw53eyk-ix=A^yMIO_W>)zi<ume^Fj#lc}5<x>><d(7<<g?N2
zse^Nl1R@G+Tf#68{EVon1qsCbFX8Gx#r40`!(87M&_Z7U^PTZvcD4`f1Gczmz|$QM
zvg^9o`j8;L&l&=Xn{=4Ka7QdSe#?M>qX*Os7>hg>u+yC^w&Or08JQpemH4T}ecq0p
zoi92L*Hj|nGkC+ZdHGsQzsus}@qN-FO-wa>i`5h@M?~a}i7VpQ{!opUW!T#w<jv5k
zg5%_Ss5~2a&c->}BFeUD_lUfXrgK5F3W43cR$-1`AJ$TQZ8J~~8O^yLFI2khyb@%e
z`w~OU^XX%<Q&IwG?>(m_ll8O|2kGbcwa^xE1rN`zRz0^rjejSablvRKQbc|#<S1Xl
zgos%)(Q1FOi<v9Pp(ir6n}=NH$2s$ubn&yrhkGnu8A0708Y&K2NR!bM_4o2Rd)`6r
z&F{PWcx0Dy8d<2&8D8}wh1Opm+qrsV(JYp6V<2xw$}OxD7RNR#no3S03KtKzOv#L2
zwkwQ<Dr~Hjb!z&wq3&kt#5S5ht}!dz<%vcuX&ZT}Ptp<=2N^;Lk&`g^CJniHo&?>;
zqE2Pv)q1El!cToqrUynkPQR{h@g6dveccqqj*rx6`JE5Sk`O;}qcu*Pe+sGJjxP2-
z5m9s}sga&V%228bl*`cw7(>A2)(SsqMoL=z6?;_Y@bqG?Zf}3Ce3&<n&@c13Z+&{2
zD!~iO4fxDKIWh`9EsKC%vJ6$;ZtM=r_=y<lmgeNohihF}|8TthOs$-!X2B0Uzx`kM
z<u@ma>F?Bad}PckSQ2JKEdWtuO~)|q)vN8zoSC^^9nga|k9#KQ%v<(Qf_ND|Z7{ps
zX*x;C?~qe5*5!{gViy?0^&+A!&R6Ux&!b_EW8PsxuU1Wy%BIx1l~Y}R?@Ksp{M9Cc
z#rIt!oczTLrcxWX-nCE_O>XgFcjJV6K}}!d(0v`AB2HXJ&B7So?U^|;d5#(2`NTU{
zM5xE249FYC4tlj%z>uN%YyPJPH`U^uo<Fk(`5=wDPfG001|<|CHpPk0$K|SXS-h`^
zJCu<*vww-cKzsPb&epJ%DyS>hrN-aShlB%>GrRd~+Z^VU{itOttg-^tLpR2EUr?;h
zi<oLPrt5Q~_-2u8z?>7SpsCiVa=di(#Qi=&x8>`_Tsw6eJr0|6{9D|#*0k>%*eHHi
zk$r8UL&QbFm{)c0(v|UE-j^x#`$XA09<+(q$nuSQk{f}O_p#F$a#o?Uy*^d2ZH_%x
zNfBFrc*JyoX{c4MQY_o-=_u1mUfQ{|(#)AQE)_SL0S{|}$O2Uzn;J?wf)g!+#G^ut
znAA@J`3{eC@D$*QDJX|(SlcYTY*9>s(EEIU*?j%!>!EGJDL01hji}zddL5`N%M2Y;
z1%{@k<j=CRVxuYhr=zQpd{FUFJ$x#X8%&&#Wm~d#+9b|LA$7qLVzvyQEb(x)3t?71
zOeJ|aQE&%XUVPRkD>K}-afFpNzSv?btwMI+R)-*JY5@o=#1TTZY{5gtlk#Z8vgN}Z
z4su=RJ*Q%oDL)f1EKhv>D{b_5gHhDx70$3-T7;(v>ZCCz(k+F0zm=O0$^mcY@k09L
zUAaE;=r)7(PD3p^S+V{vf#9!Ui(x)rV(vV7FcX&v7(t!Fs&#Ldo|T*d2l?eHJ_;cP
zD965t7Qce~3<z-+MdK7&+|PkO^9}%G+brCwCABh;qzM|-JMkcZXLa<&-Z$cBR$qKE
zi7rJ0YnY-hy(pB=%2ImYA;&NInR|?cF#ST057^wgkx(nantfN`A(c`@NTNrmfgwHU
z->2D3`A8y7C}C!a<|dK9i2k_Hb+UNZvwt4j1oz%fuVE}fzTsQ^9rdlRs6X1x#^&KJ
zuCg&5QyTqKu=fmkhc}pz>AT;n7bVRP;0@?khX`r%>pWw5s6zL#TbLM`h<?UuB^>W-
zv#O}-r8m~Q$FF=Ojb?R}76#R};0;xI$*j`+w@_ekQx23e@0CK{=DA6I&Y|;<<;+3L
zN>tK|;$R-`Ih=zpdo3ODF>v1pH5)coORM~qa$r8{2ZJ4G*(OCA<hiOS9R+TYN|>ES
zb0`|0w&x)OvFq!bGqLe36H;$bJjvDu<hDJM=`4I3is+jPn`q4NZ6fp3Q5V##FYx{L
zzH-m#8+%TK{7USl7KZf4d*8o8YywJ77c5(h86G&8;}e}|#W0~*ckLD4n=6vs)K?St
zuEE-;5G0`ukFBBBRwvqTWFjgUeX&kKhQoSPjr3aYy)uqiy@$=6=)T)dfgvb&dr_Q2
z7qC^gs#z`hxQ}lh!xb0Cq-RQ)gZE?J=wS)VFl^~HQALNSnGs%CIb4A1ccD^zR6F{6
zs}khN&8s~9Kl7osVF;RG0qrFD??bs|;K?)xKcia_<?GSwCmpA6^v}<@VWM)VSUud1
z3^CAup6>PbZN(L^z&l)4d|qbHltX}5QBgVY&R6|83L5f^Q|0-@94I3{zjZ}7gwv9W
zB>gpfqpP_1>MCwNRK$i~2K}$)8kNv8a4y_P<Vnl%s5wd0TjVsRej)Y^p4u7>==-aR
zd!x(BJb>uFIG9fn+6aP6;xCuufXecPg^ShCQ3P|?s0U9X%zkB3RF>2-yO=#2B~=_r
zt;76<>*LOZ$jch9{sWcDTLSyir!S#^Nx2#_kurTDk2Hm;)4tpy+)7PVbi*N{r9SJV
zV6<mIF!-88gB1Dj%h20rP$IF&#m7sJI}w;s>UHUDouW3$^kjXr@$OR>dEGSP8u?$I
z@;y8)TMVHbcm6dyhbMIEU_U2q`6U3;Y%lEotb%b^+FS94;0{`?y)PsD#tXM^pJ)mE
zc!;O9GKpvY(PBYYzyHK<Gr3`hYdbQ!PMXtolE#jx>aG<v%42lFk?XYGYz$O8Vzqfu
zsgKpA^WDxHBl#Z{iDf}6{&S1B!3eUGV)S3V_`fdZ?+rnf!FOm#xhGyJoN&Q^B}BE=
zlh8JwBm?eYXhW`20VTE>XRaN06Qs4=sZ6A(3=_4BZZbUolQ4y6%Nqrc9)W?q+%F)x
zSHw0LsbanGjncJiZ-`Q<j{x5s1%;B*8+xe}Uij+9=JNu~76RWAoX;#167!pq>2|3Y
z?j5=$<AOkGU>q%QkhTA=*S;KyZ5mG56qF5#mp_|b8Y-&U+gQod+JAzvcA-R>@&@Yt
zzTltXoAy{aIX0ix@|el)dd#EZX$_rHt$~a?V3Le#r;y+LA1b=)(3Txz&DD1gJNv;f
z-eMvg!V@Ly4Psb}qwHE#OCg=uYFpvz;QZg~tiLa1i|itgddpAjmXGgwdlG!Cat>b#
zDWm@nQv2U-y)u-pcMWyd0z~P5{!qV<o{S#=z?1P+E}!y$>lc5ydjI&<WXSId81k(a
zmH%0{{LO2zU@EayiC}Fe^q9Y27JuGy)P2xmis}-u!~I{!;Q#$s;GY5ZIg_|x#J?9?
z{=8Y=6>%^Iw^E8uiu9k(_TRimP;e36J-iY!m&N|yE<gAZ{_myyznAiVugBj`kN*#=
z(w9Vj5y;C?U}|N4@>#Ts6)-7AjAReee#5e7pp9_5Th?ylQC$BpPAi!P=G~&WxAYHp
z>!X)x?@sP7vOvqwK5i+*AFIagByW4ZQ5u*dlS=MI<%|Q@)Z@DWEcvaw@M4g6Pb&vU
zfrDduIt+5{^`@J~Fo1nC7Es{2t%@7p<p(;nUv@dW52dy876|h^MfiAk-<td?W&QhG
zht?E<!uzVU>!<knbq{^2n@3lF2M%zX#R1=84;Tr>UYLAny#z|ucpyjAR!oA)`-{c*
zj8Pn>_u{Wc_mxYG;1l`mzc%c*q2(G2d_hE^6})Sx*3&Kd{Mixy>jmWjgxqBjURbzU
z*X!z_Ym0aW(5e8SSXuc|=?1X*PH_81Z}T#VV@1V9!>$gtQ{o9lE{@jY!C)p`*2g5B
ziPYNr5Qt2^#^co{SlPlTM;RBk%>O}#VMG8pUky!eZ8Lzsn;3AvxeCv;TWVu^+qhTf
zJX7V#2JmTdfFLU~Rkmt2nxnZ2#^-)GfU&|jfB^0R4cjz{jm{_<X;#<6p6r#5k2naK
zQk9n6wC<;{mGnT%-XF<=$tQM*neFEX(A7w3@>npG*$0AJnL&7pGvoWJXP-zJqv@OJ
zLAy8(_;RBG8#YPgj!zk1=8~gX+;qG(u~&Ch!?~E314g~Tk(!81lFDMHDw$NsWeE2y
zn<5nHs5@COT&+k?$_Njx^$Y-^GF=X$vV@NjHJYzalN|X#$g>#Id?B6fJnSKJL4dIF
z4VZ1zwDQB~KL;0;&5jqBh=>t1=VGre&}0AtGt7##K8?)k7%-awiwiHt8{KukHJH<B
z^NIP09metL431jv+wRa@kYTen*YR-=WQIE>uiBM+!Z3zwkI?F*gJnRHOQuq4{AxeZ
zEfl|lcjCM=wA5u9qr3Wa2@pDgk9k+M;x$LRBj|{`yum&tIS1hp-K(yE26lM4Wh(<X
zcm3ofU@D-7x##8_iczjK#Ht0ttmWt3wjNuI7hF`13mZ1wdexVrw+a}CaexmL&W8r$
zw8`HGrj7oa{&=?L(Lz{|Ho+EIF_7x+?mAKpU(-L&w*PwJOY$79ZMciviUBy@qjGXy
zn{R<JoER{8m(O<j?Ahd=M>;PMTVAv}Gv5{9s5ODI;LCdnlzy-lG|fx9yBYX_2jBtO
zWpLGP0u#bBLOKM<GF!v`SJW4&$`of%$hBCI4Z$>E)Gc)Q=70d82P8bBF~CyWD3)%V
z36vgbk=rY@i{lX`_0k~~AO^C5RO`s+iJZA#JJc~T@*hBGih#ddU3i{328D#zCThOX
zy(fX=+bWog8wT0o?cEbzceVkclhF|-7q(Y=s9=0|Xx|4r&E>%41KB+ggZVglo!Q}R
z&N<2cv0ja`_B)kyM{+!y=Bzjxyihpz>57dt;TxkH(4CD0?Xn+s1t5@-N$Fm9AKO_h
z*kGjRJscZ8Rew}@H5q%~2sW;ZqgFDfDsr`tsO}+T5`(2>l~JT$F9U{?`-MCGajs>w
ztRPNRQI+>^u8x${jUL2+#QI)<`Uq>8ZHm*ls3~gd=WgQo_C^T?e=#mXD&pb4gm$J_
zJr`$S;FcR-pkI$J^}NlX5zuB%UY`O`Qh8WgHXwWFg)-XW@&}2V&_R5_ID8n>kXH=A
z-EHWI=Jpo#lo_>3=)Z3+G?~y(e`*PaG^Zx+q*8lmXX4%+`|XRFCmAoU5TJc$=rwsv
zd31qLW=q^R*^0^Us=kw8*Nj2@Y){}OMgM*?jA#j?_j$3SjO%gyQw<ND4F|a;vgy(?
z7hpLIK;TQd-`)}{+1bvF61b)40lhb-rA6$hNIBi_@OWe}NBK%hcvZhwyXnmg50lTE
zHz~IDJ3P>do5Je(7%&H!*dVxDBbnk^_3i3%OQh0|;dKEqz?s|lAAs3q9y9hPKyF9&
zZ&>gmv1;{saS3Ld;{Yy95N0)!RoQUZ%Z}qR8H@pEyr=Ixw_5H1?{^F)L=)he$N8ul
z0>6KcWwu+zrEWTYkF)xVKn}NNK3BiK3K+t53i%xJ#>C#?vGelCLHb8NTdAqVpys&~
zGl!51*Cn~$<*xhrA((XpVKK?<rk#mDqS!hDnJtOjEp<y3Fff*0$XeuOx8@1kxi<wS
zPISD5-fRNj_aJf=uvfoI0T?5!Z!X%EmX#_9;y-_8$kGUZzpZtAo|QI3u?^q91c2U=
zLqnKHReH5$2up&v=q?0?hfYNYVN;u3BVHx*fXzI+O(FE2p2eg@1pj{imuplr#8W=(
z7?wMM6abIWaB*e!ngmr8lLaz0xUJ}bv-uH5@8``it6#+H?1L#cM$LeaB$MK@jABM$
z8QkKQ1K`pQE8QvtXU`A9z;jUCGEC*^+K*(K)>d>ZRu&CR(KegXWed`N8s8+TmIG${
zayL`azds9zA@GL5>Cv=S4m7xy7DbBOxHO^gY_rmS&wcwPE)W5p)z}V|B-P{MF!7+S
zo{vels=$$4nVb@jNo_JwGb<Dd!am5kT<r*=IZU4swDLfX`0&8|LGx#vV~tfXT~@<@
zAF)uN&2{9~6GgWce9$)cForg6f2?8uaQ#j!29xRu(VKQw5Gs)ZR7^)oFw&Bh#dZyz
z0zEapekb=7FKNbdUr1{caGs^yTpjkYZ5nKTWuofkoAP5z09dQqR}%UROf0MDgm^4k
zLp7ykhXtINr@APp=*Xi>maiv@^g9KR_LlDTOhB^ioB>{55X2%ofrV$`KidRs67v(a
zmjbWA{d-L*Zefxc6ol;LbnN4(P~dT9wKI)T|1$ld71_aZ7lpG7z)1to$qGRG_i6Dj
ziWI%wYdj;iB4NO9@q%`Sb#5ZAVnI7n8p23+zr5SMn$k+2JmV<{+a5eUbx}g7_Jey&
zV1wjz`p0ehm+AKR*TVZzED(JMIMLEOlhOR+?1;Er4>PvhM8Uiu*CT{w>Kgj`eUd#1
z3DWH8omB)x#O-j_vwG(}&fPFQ&J*~eAUkaL!IVa(hR5axfdK)v1koVyzONlaw4lfW
zKjFpA)`Yj!?1k1i&V+gpjVWNlb&?H_ScbvN!++V|8_5pGn*SEec5OuZO}g3Ags?>)
z-9)oxP6fQ9Wcu;B`h{}y@Sd_5g5AAVK&@_gG{ZF`R?SpYkWMJ!5ekMdh*Ch)hey*}
zvDOsh>TJQAe4?k&u{gZx$Jhji`!vQlTpD{>_WnL{JR#L7m>qCW4hpiHgO&RBq`!VW
zKbziPwz-HJKw3b$ET^*R^+1Cm)#ET%N92nduR^tjM<_y84NRaWyj5fuJnl)P)KY|M
z74)|-PNk}>4|G3it-1n8&m(XERK<A(`};L+hlbL!GsIl{AfByBs{moN55ZXq3^F&{
zJmqT*e{r~v2T)ugTl4NX`v#hmlK1rPiBm16uo%Dj@x{JAsdTd?Z1{zeuo<MGM90VM
zgBiDR?8iL-S%=4wMz}TsMJ>o=4N5t^)n@Uv^|%&eJlHNDBtGNiTSaF^X0XGoH)`>@
zArG`$@ceX9XxMC^kH)XJGl}*gFmQ(Ax=y-e6&yOPj5g$mmECgdMi?z)NbTeU5|Em*
z+;?lc7{Us;4=PjK`3=|HzIATTpM|-AY&+O$3%sU0Vg*SmUiW0F>687V=jw-{PlDO^
z{nZr#Ftp#fZ=$pn0RbO1h`?B>gr&5rtE3q!j53Rgu*)>4%W?0YRv~S~QwU~in)v%m
zVyh))99z)5%UYII@o4~Fz&?QD4T~W2d*@-NL%geRbP|!E2IA{!SmsJi1Le7b;Ngw)
z@Qx=}GiM}|1uDlXRUc{By-l>|g%*z?K&FwOgc^-tURAyRsrN|Hqw5Q{^aDiZ?-Lk$
zLcS=IEz>5GC7Mrm+uF+<R(q`!_zF--?MX?s@5a{<*1-6h^HPY<FyDr)v+K*S_6cUl
zWMpLg%f%M>XG;jxLVS$3fZLFiKZYJ7JwJ|h0>;}-&UKvZ0>s=GTf{rZ!i7bP+zr<@
zw-TV6G>k{3n#~u03S)+#r$yybQ(a-&rKEc2yZ0xBp`q-CMa(`Xc>apidtbjFOz7+$
z;IY#2SfBqWD3^akA+v~oN7lh_GoSc}g~o+k0m3AeHi~&U@Cw8_Q!aNv8w2|8^=OVt
zne$%p+UQ9L+q<7>t$gs_!!Phsk1R)BWH5yQ1WRy3_VzZhYRL<n3boy)y?vB+#1b%8
zyTMk<dVAxph<MIppBo4_29DV4QRd!!&by+m9w4H@^zwEiJ9Q<Dx0B>dCdkn!^ZYUq
zK(y}_+1TQef}=((AkWQ0uviV78Y~ceBd`cbf^j-1#KcUrLf-<q0;0g#1R>!Oq{tRi
z@A9B4HO8Rv@|@12s?$Q>IM;^*#K;dY*uC4E|0e#)-I7AOfO-w}hVLQ3Umb4EYa^B3
z2LL9zAbQ_-pv;lhzcn8q1t|`S`3V#GY>p>R{RV<^U*o}!&fS}RSG#pb(uC!I1OG%2
z8s0JXI0jo;tN@gkHB{}F7!)ExMau?9SjX;DWoB6-O(Cz*cI!F8Ky@X#VN}ZiEl`{W
zG6tIdtIYbN*)8H@=BQ?twcPgx=k-u02|Y<M<z<j@@fl}?&-bA-E8n$<`48(8UT;Ia
zF^}HB7SGPmjYoVO%Q$IoAfG>=B?9Wk#ppfM^lk8Oo)<vs)9~mIv!5q^)j%OwwnlSw
z*=y`61B{mu??N36k|los>)kjU`;+&b0H*)a&&2uHe$BlW)<V>fqTv!_NheY6(Wx_V
z;Kb@+_fa(iZuUps;0e8{xIq+l!LIS1Ctf`y>H{dcUa6P#v!kMei89-}QRuZ#MiXGc
zbDB!xgbR-keJ4`_*(nNe)(kF-2E8vNB31zjhY(2;P~JwVzkRwp`DuAj8kH3@Hr+kJ
z3}N+=t42FVU@;J`;uRoyU6{q+A#|D481~vm8VA8KGtp-bu%b25BEIIyY-ZzAAS!TZ
zg`GzOe{LQ=NBc_oAifO9L|F+SFu(*>KjG8r$KID_+SvPnVq$7)qw3yF8OLP+kfhf9
z4!t}h<8$9{c{+nwaOU6ImhXz#zvbyDMEOsDr4>biukW`!P4~^e!t=&sw(Y>bB7R7~
zZsNT^To<o^l(ck`7Mxw+imjjfXMm~c0THYjV3qvX1g$~Mr9H$owWc}LR_&IZd-Uf^
zUXO|{zK?}B64hu*cpyM71HwI&Ho)YS+w|3sEl67lQ}-AC=yRHqv(YAD43P@}q%>Mv
z8R&(J!&UC=nBbkIqG|#eecIb|=bn3Sikd!6?J44D!`p<;2Al^OA^-@+<KyW|0P^Ne
zJ7VksWRtJ6`r64p3&3uNvrb;#d$392d%WSP8Fw+^aLAmj)|^?PC*x%`fb|<n_rDdp
zmdEsP>F#=dXC3J1tR7eDEMk*rnH|4=n$m*js3n$iyBQ&<$VOZq5RFBpWypK!VSwd-
z#MgX&Sy~-P*$>L61E%Bej4sYp+|xdIQXXxd?uJdXG&YEnE-zTp$QaZ;Hb}-vKdQ5&
ziQ3-Xaj(~3W!@D&T2(D{xY(y1fKC&NgjyiFEWa4;8JWOGd@9ny#=08YNV+Gx_zGvg
zK(%q|o00e5?`C%cE&(m|dy1SldsIWIU?#)K#vfA&9zF$!c_^%yf=zNIUrpi;;JX=1
zTMxoJGy!Uyk$_c?odfp{Uf_CZF}Rzd+B3@k5PLrasI^{8CdU6D*81v-r`gO2Y<4x3
zbmB5>{9K0fO*xRY4lYjZs2aTNNo{#kJ@?9lwZ*~sE||d;`}HZgNt{cWgzOF1GO{eC
z#a(6mL~n}epNgJ`v=O4-Uaj=GBLkcCx$CW`I7(??)_C((zS=U02^wvL918oI1e3m&
zV#xnV`wa%4L{=(p=Wp#W|5*THOh6|8|NTz{QWlT(Bqd;8$$Cgy|LdMsB?98N>Xe^@
zz~3*Mh#1Jt4b1k=3ugP808IAW>41RI^@U{G#)M?1+`Jf|BcB?$?^Jg1IJIx4g2EF#
zVQ7B-{K;D|(D5WjZ-SM>(L^6Clm+muE|Sp4{b8^Em)rr5t&9K|XH6B>Q%nja3}A%z
zt_^G8vJ~)=YXKCFGGMD*IX`HQ8c5*71l^AcSxUY)ib>`FZl?W_-haRFtq@-XB`-GN
zFSjP#?1A@we#7_Rs<jOo-P92f5M~{OMZf9+`9Zk(<-b(M410v4W)=(5d)fbBh+#~I
z!@Upo^C*zBBnzS^=|HRpp!bCLf``p2K*n}%QkwsmRn2;?eQ^#|DoWZlPkpTH>t@xH
zbmk>YWhl8ecsr?mkJS&b>-~Uq*nRvHkP_GHf$LHZJcZ<eM3M3Or^#^hE!@Z8V27r&
zvo)Yg9NtM?b9LbfrGS5^wO%rinF#zgiJZWB7XhLwyWeAI#DJu)+L$|$?~X9d>3Zm{
z3Je(=lL!1qUdtWMnX=JYpvr2Nft`}kdfy-nr-@6(i)^!~SOB2Zt9gJBhyah0Bv-$m
z+f(KGmmTe(dVUO^aq-|tAP@92g?blqVYhxKvmK&&J`?h|F&Pl-lK~!{r+KVr%1n(n
zmn7h{#oYsxzNH!<2*-0KEC5Au;HIRP1?+5@{UA0w10-pw0ytVvBu)HizNTT*^{H+=
zX9{`44vo@kBA645IJ~>v5644k{{Fj!FNRQJe!!-bkLy1KNxyQySp*2)N-6HUu6Uo~
z)igzMR&HQ>n((f?CkxFpQ{!y`Xh1w=W$GXN=C?7i;(MP-1{98FKuyYe4qgBR21fgb
z#$}<gyR()o5L(nG4b(t*1}#9gC}(zf5DB@I<i<ycf=T>%knbvEIZ;%IaPboxAOBIf
z@M!{wj_I2s?QJ+2hv3yz#{jKWEMO)4mk{hOe>T|+kohPs04Z+;px4yDOGvBJR`Bit
zxs^T;gJRtE!3%f~JiIjLc+uOd7hp<>8T@*O@%w<;#G0@U6uZ`={Uw@}-TFNZBstOA
zovP!*Vfn@m)*4VH><p*3;}8>2$vq1tWCf5jb`P(c3-gP!h4LR&bGFOSNpM;LDLG-e
zJTJR3ximqwy3S$R*_&kBWHt#P1nzl8-Gy6Ya^T!=j)%4Hel{noT52Md$iDQZoL=Cq
zi(VY7{;S@n&z{Kvs>e&ftP|*pR}<%w1vHe5&}qhcnji0GZI@@HcULb!n=yhDW$3YL
zuO9EGe}GapU^5srBs?H~(jAiv<R%@am`Gq@?*UY#=j4!HzMk7TXOcTbyR$dV{Vava
zZZ{hrV@@Fvgj(gnGQ{vA!XvsU_R``|Dvv9?X)1%y^$^K;-<=xfD2uzUCp)WQl97Zg
zb$o0_%HGF`0-;;9T(9~gikmJ|W7rIDrnNpNjGO^mYE-QwnQ!XWL~%CM;w$}mej+D`
z@Cqs&(z+9Wo@#kY$~3*~F_BFbX^b^10>?i!q)uE$kT>S~VHwGB9?X#Gkc`?hT6r_5
ze68W!G%izaGHPurdo@73&euYA1^5QcK%qI%{rOdDWy)L-b(Zsc>@qay0MMYc06EY6
ze7)P=P*0&}b1Z+XcTq(h-HF32Eu-~v4t#_)qEN64+pO6Z(#7yr&%H|`<#(8j@imhK
zKXsIPMI6ksg!j0gFX_0YYMu=^E3QVl+V5Z#pgi(JfP<s_Ci_%eO&xq27Grer$vAtm
zl-zfXR_+4o_5T(k{_N>C5I_o9@At*L3vGx8$;*64AWx6H2e9o@#zkKpE|UKO!{N_R
z4nT|@e;?3;wCs8*{LTS#Mc`<M7l_W9#%}h$?8K{!Jg>nSXH#S&t(*`+d`9UEDg}^*
zdNH^fOLwzkLqqI$8t`Nnf)(1AuV6}JO~x+#7^G(=lmY)=<_BT%+T|jx7TBG#h{uxo
zMT%KHk6~l@|7q_`yrJ&fKaR#Sgt3$@Axn&X%aUc%LYC}|BD+EuB)g2ImAEq@Awp7i
zl_h&3OImE%cPfl6`}Vu$e(vY~-OqFC{QiNT({a9sWBX3u&*!?{*ZcE+Mb3QR9j-*P
z@n)79ojMhfx_!OYnTgEz+;QLCD`E%5-chvF|KJr9OELX0-o<wBuxP;hT#)BL710z|
zRwKZq<t#K>^d2vSb46==jKr`Tpy9l7r}Qon69j=iBWkTxUwy}cRR9+~DI(~^<L?sV
z54WZ{0XF|;UpGaWU)M2OQux@|nRjYLe99a?dTqAXelyG`JbOZ~JQT~Im{;S{#hH;7
z%6l9HD2Wf4^3hc4(O20Bb3H@DKhQ4=CceL_WhQsOj|&Ka2~BhsxfsRBCbhZm3>jgC
zfYTmsCp-G%ZM{bH{RU%yQAY0~lBSX|f*FFOv#UV~oxvsyflMqW$00{e!k@@kjk{XF
z(&G*F(uWteZ_gyIvlUu?AAFPGDI3WK(vjDB{)R59B?z+4A;t=|!cLk```92OjTVWl
zx>wY7#%}eGE-KPlXOZyQl^Pil`+-A(zpt)9-e9m@2hOCt;?j!70=y{(22MS^q?a7_
zy(61b;Y=Y7Ciw;gUG`c~7wunI6r6nj$4O$vj6^TwB{q#292^k{ZjH~&0$y(Mm0ly3
zdGdOXvcnq5kry5m17a;#g5mI0)n3LI_uwH7;EtC(RCUZI@F7g-qUoh|;gm4!_gAD(
zWHX75mV8u`B|ZXmRD>jYz3|)-w^Usr4)!;UULLMaF&x5>8v}llEi0<Z3I4<?Zc+|_
zz;z0I^YvSY_<r*TVvJaXEs7(U*gb}Kt31;qIyTmmRs4-`oP)&ywP&x>wB%i#Y&qbw
z@1=2Szz>n}4xT%d0uzFAklU<%E?Lob^K~O0&ZXD10Ak273Bum2qa(@ew0NB;Sm_F}
zm`@JAt&tJ;`1w{w?jsiuqS*N098E7`%%ql+KY!wQ6In;Y1JNSaks%>VS;!@ADZ4|V
zQ0AGW?DO0+{3YBl<3mwQ$pH{4F3|;>!&KA*yzeu0hxaxtvmAFK$D3lfCiN_%f(JDv
zQkI~A<2?-;2H$B3F6w_Unf`w2;X)yvj6gxN+h1UPou6GjXuVKr5oTBV+65PblPR{~
z3=v2APpCB}Vc$9PJrwg6S|%gGhKt_Hd(b2qldps!7#GrS9%la8QQ^bIFK`nT1pG2i
zOxXk7hf8?p(#xNp2)(9=81<`xZJxe(pd(78j(a%m4oHt^gAm^KdQx1XWL2jQREY8?
zlJAx=6BMd(V#ZHj-X4_l7z*mRnZ5d{d!+7UrhU`2T<yv+r8H?N5_b?*N3&LDO|g5N
z@`s`xU$2e}f@q7j3j8E&A<=f!b4NxL#@xVl+A7QnImBpqyxV-F#b@moe0X|i79huj
z*O7E*9P_y}e|Kk+$;O0Kwq|8zoZ7JTvzBI@a+jZZGRw4rz>Uc6{^R+-!dOr=S+;qh
zKc^mfw7|?s6rw@p%@C08hz(eswH*?iV9Z510d#A3hwf1b9G(#*O=e*mYayMDh@<(W
z;@H9p;HTTPlR9Uigw@@(kCBh+aMagmydSGvn29aJr6awn9GVl(U`PQo_DVJ}iz7p?
zCI8f3IHb~QAehnI-&}TJupjR=3L3D~K_QS5j3YHDqaQ7#7IV3T9nT25eEC+RaiRp&
zlXC7cQd59Ud2u8s;VN;US<V7L%BEkh_9W8pM2lv^Z}#X_4LJ6zWL6z{%3~gWB&`WC
ze~JQK1clj%nDvI+aX%EK+{HcXFWk%X|M_iEV4nZA!q8tWG3Ez9PBuix;|x!Zhod6@
zUkfKr5I(36AIvYQSka&UXkE4v{)wp;&F4L(%WVG15n*~GP+%(%i^3Gn%|%q##CbQM
z6_1d*V?VpY#0Z>>y7yEYMO~oRSsa&xxqxLE?!*InK@;3?FT!l~*g0#(Cp#qL=Z*aw
zmGW8Lw3jB}rHDJEM7&#K3FbTGskvKhOaWF(4|rN2vh-#2A)(k+AIeIHhSHcylSxr#
zEhCEW9f1tOk26z-o;1e&C?$}mczg~kzVMrMza3GD%#e0Rm|oL2ARG9GxO*D_lJ9!O
z2plk~iC*5x^IL?Hlgs?1adwCR9Es?{(iyraN%dkmYM1z{C+IYVCB~qm=RsU+Y`UP4
zd`rcDslfsfF96}0cbBV5*%s&cJ$y(ZBE0@AB!g4|qvk)++W*|cW9w;5UYJ?!6V{iN
zrsI97xqSy}TPRtAGhqW1xpM5#pAC#3NakUeB-(!KOTr_Vge}WrgSO@ZddocHW`}Er
z%M#F#sc23Yh45+6CM_8ttQ(Z$=tfIie|=lPa(0$1{|0G5sg~n?Bl!TNy_`RaO6(@b
z?f!Gg`Q`O4nAGajFN*!<Vf_1RoJk~S=MXy7Kcnw|b-k_$*&%y=MRLDc<^TOPnf@e)
z)rL5R?C+oP>x&T{QqsWqyDz`~^xrQ^>=Y?PZK{-v{D0+vfB&%m_(<q=u&OP@u<88T
zJ^%ODV3Ll4wvaSTf%yAp{O02SZ{mO4;J@!6T>Sq{{O8^Huj~Kge<J425ra3^xSNw!
zBsMl@3RqN#5ZTsB91IjtR#vWa6FB`2=)En#A@YBlMC_P$^#7Kgq>x+HaI6#b1pm=U
zHkSS<ot=q_c!_XbN=BeX$qzq-<@#w@FOHVvH+?{tS}yeun9DzPe<KzApGQn#<j@Qw
znjipYBU3-Z6fG0te7&~Ut&#5hBIs*BIxQeK?y8Yoic7z4zU#xj(34Cz=i9*VWz^rP
z$is|-&A#q-n8L50-Pj5mF>Ij$)SeQMOOs5B%=CgX=7Mq^fU+!muIuWy`S`bKRUyi#
zjpqBjoSb7wi;%|$CHr5kgm^g(o4PPcpdst!K+0P!cRM(4tehC?LYnVqIY2iku>rf;
zA7FWUR0+krHdMlG!G8%S?Ih7Xc6Vp171W!~rO8b5f*~)MeN6`jZb6(f!LpnrE2*FX
z4fz0kB1zZaJBd5C5FUU*q``tw0qVjycww|4QCC3oo~03#aU0Ol={*E)c#@|_|7$&n
zO7kF2lk}$R{jcXK&FCX(4@fVw1DmS+>i7H0s_vxIyrd*BRuLl;ARGw*q{hder{^sQ
zd<x_3k846FJ_OdNY)lw?tuHWLA|bsWEry;1)^Qd{Q~_aCH`-EF`z@#x*gtZ4RPuos
zWk6}b@D}%@(^<lCmXS2=C7?|=l@$zdbdlR1)h^iFIqA1Y@=tX=?-KAOsu-0L`HMj;
zT5j(@-?vpvEcMtsq3j!S0z$fufYpkvESi+5yV7SF=fa2$oPJRdPumzBd_LdOf6!y!
z1egnbIQAVrC}AlKZbn1V6pAmo7T(Z1Jk@!4n`QU`2stg1HQPt#`hBG)N3OYmnjtZ{
zKo$?B_OY3}uS({{E1Qz+^~EiU8)jR<_0|lz?R;Mow4jOY3BK@U08+}kqPVx{onZj)
zw8tuJV4$5KVV`)h3|CiqcZLxg#iKqH<eMvRRUK5W<LNQX#`@APA6ryE%Q)*l`v`1g
zw~t1~=!^&P;uS&GLQ%6j{d)DsXbTnEH!+ZO)vS=60Ce(4K0$55!Z%K&##!G{Ay%fQ
znB#UFa#y|@kj`!!?B|d<wYfUyN;J%N>%RsXL=QUGt)PB;nzBAb_y|}{=1$#Q9R_vL
z0WzGykEVx2B0nG7%#nY$jJ_%^0(h%fIH6!oxj5LVx#MmuDI@cR<_-ixAC;{7d0#hG
zg{1R1Y=-mhz3z99vweF}+OZ>xPGOBv#h^}QzQ0tT^6lRV8E)BsCS)8yT73xIRsu?N
zdrn?OR3D#ez*Y0Qg>eYGJbrF6vLvma9?_teBqx24_b<Z}a<gPT&CkJsU>LQZM@@rR
zz2$!3##+bX(;okyUbGvAz!ceSu@75v5#b40$J5^9k-h?sx2T?;teZUff~X0wq_IiN
z!z(X9!ULdVT^?@#TjA;p-rHF-sf+Djs8t+4uaiJkpo%?|UJ3k$w4bxR#=M^zH_z99
z%N*FpPPNLw?lDkyHgcirgG%-K7#&G0<rgb$q@QFb@IozTn7$`$N;_d%z2g8NE;FVQ
z9ze(E20A99FFt=Z_WX@uC$PKB)@DR5DG7_DU2OqU8ttex%dDs{4HVZzF_>QOvHRM;
zcZL4cmi}E2(2|{7AaS{ER#nBus?fZM4RxJ-X4c?frR^rZo>5!L0~t6u=zBDWIrj;%
zqx8dC*2$YqDG~`|Th&;%@M)6G%r1{)Gy95`<Oy29L#R(Xx?U8yewz1d!56XLc>V=q
z8xZ*}TjaNi`y~E=$*awFbw&~BBuK=VqE(8Lx6|YPn-pn4Mv(CsQgI$AD?+1*vOa*T
zxPq7g8=>jl2uq;?kP`ucZF<1$-sg|lOFXF844~(!n1cu>exT*s_a&zQmw?db@K3DS
z&uX^ZGg9wMUWq7xw2Lnt+l<<&D*n10G(F3})^Myg=JVE(jb9snd<05h*)_9E29~5$
zi^ylPf>NJ6^I!klktVfvdM=xwoAfiEN!WfC#}#Rkea<b%Fykq$`|^1`D_=d(>PUf|
zk?-}j0FmJTSl-pld8o1+)H4&}n~$FlUL*(`S{`6i)#bp6U<(V;cHPe=HRa=|vlv+q
zbT4PbsM(1r!!%Nyq~wa&@9mq^2DzKETiC{4Pz4?bbLa(aip>fx=4F59F~$3_Ek`M%
zaKj+j39a79e)Y1i*t(ACirU5mON#3)e-i(N|JIFq^7;E-j97d8lbP##TSm2qk%1I}
zpo?(IJ(GkZE6)>u*s`7~sG36Ehp6Iunq^QL?bz+3V^L(=;fzn8y~8*!M^#0?!W-qn
zbKGY}KywFhzC#esY5DQ6vI_H`iTb3b{4F@P86X00wtsdoOqWTiVcAI5oE!9tC(q*N
z_p50EeN+u{MUT1SD`gzDUyO~b4+KDtjoW?DYaV%Cn6tT#sk=7u-qx79<<5Gwq}jLu
z&FC9^#Qf*Q@g~YZDs3qt=7j_>HEjzvF8yW?Z9|SYD4p}}DX<>K(%O`v?rYF|4_Q)8
zH^v91CCT%6p$~pyARGj1AaiBO(K6j)W&#UPc-~a-qwO4<A<LK_+P#jri6-5Ppzsw@
zh1!w3`;DYh=Q{&_6b)yayt=(>>MGNNLMh1Wa&4VM8Cg+UfRm9k$NHEQTpWau1)<!d
zyx&&hiB)SCRpp023m@dQ87}k8U}Dc`Pd`a*_56H1;(bF9+AOG6*gjVSwFx-ZH7yds
z8!MKk=dm1qnyS&g{OblNHXo8<RdtgWg^}<v?I_UjKVjuCbriN+B(I_v%P_s-E>JFD
zRGo#zaMO%~C_6q8PYA5#v<DhTGDXlt-4C*O#gWjLu04`13s2Ah!28(!IQwx(9~NtK
z*sNmw-to4f!c>yDSs2t?`f;?FMk4OhL4tMnP~9to^!mmn@)jg~)}-0d66-Om@9LK8
zwJK_9b3#Pk;k^NVE4MX4lIyf4I9cZ2SrY3M;iWxC8M)#G52};oSnuO`9k8=q&`T6;
zq!&FP#H>XFG57)zoHM^Jk1;Yrg|=^fr%nNSIVdB0I#5}YcJyd2TdMz*^QDU#9wYTM
z*(HN4tQ3GSIu>R&W2N<e<%n?W^I9|u3S~2xBpNg|?x13M`~)wZBgBtB(|IFt;O8h9
zKzc0OqZG2=4-Q|bAFT?!Zt5EDL@bDYG66TDLSne3R>VKqMsqtH&H*QNj8oFGN)^;~
zr>0^4C3R{QE~Ozjpf2%tIqWl9O=G@xEqAF*Ln>Ls*eP1FQ0rnydCYBkvMlm37c7!^
zH}(cSm+cq}#$f1;ucZBo4cNA5?<wLvETS7s)pFLzHeco1&DxWR3Y*1>nV%=xe;|lt
z6m@@n<yu;#jj>2xEuELe@<l{OCaH$6!TE!_ci1zDT&3z?)p6w!6V=sBOrt{TLQ|V*
zlT(qqb%`M9@D)@mpU;!vOj@iJWXshphEc%*?{eZ$mFSQUhSIu5GPQBetxY0)bRV*e
ziRNnH6#s8JQ4H--GIJ#@O4<npZK^W0I%;Id@Z5=nKiIf~IoK{$_<fdNFItYAqsj&Y
z>0WF6c-d+7!gGamo&}<;`cwndAa`CM4d6-IY7s5A+$)mSz9Z0$EoAQVJY+w2dX28l
zs6ok7{GG#I{aPE7alINVmcdU4w<ZVbi%+zifjCvj{hh77Sl^+CHqX~(t+DnnW$mL$
zND#l^GSCm$PK$8;gcW7=h8LH+b8}?L6mpGGC3Rk1;rLqBFSuy=BG;aeE_2fQ;u=Kx
zB6MzA`_R;-s&GN%X7Os&gZU7>7FC;-NoPIOak5~33-h(2`W;3J_35_n!T{Nw3jnKJ
zG0b3U+~;l7P4hTQBk`rz=H_ig3IkTqEW`V@7D40nZgeS3C?R@Jyyuu#7Wlbkw^ApH
z6d*tqjudPP_|1Z}A6e_MO`<L7tF90h6Bx-$R(jv~#vrJvxoURUl_S1@$AJ}b4w9s{
zJXKH37oy9&1RE{(hs-cF9K^@vv2t^Z-{P>@cv-r%Q&m4ne-6vYA@j9Nv|f=<<qWUY
zRvGW7n{+&)k&%&Sp;v&&vunmYZX^3nC`}<s4YY2N7umk0@>U*xemAWeI+%==Z;L=<
z*FRGmMb?d~<)0haC@Jr2a+ImuuFKha|6WIE3W2SY*|!2!%%y}4e-{dg*pYzgR>{3f
zgi`?Ks5lk&C<Vktjs$~51w=1AGV<;|fQI+aE1&84QpMA1gz%)F{SK#izDP655Ff=p
zhUMr7Tem`Y1s~%qfR#MDIX>dLB7zsX%ykyO=|Vj#E4I^nm*l#0a|5Bfb@xOvGgiLr
zLcikiWj}A#OIWp$H@8g+!TETUyometm0mkSNNN(yzX-@HZsqvm7TpwOy_zPv4;cl+
zY%e4V1aKKp(c&_+in)K)6_GP*Q6YE-Zu(Hz@su4!Q05zE-0;k{uL>XD0B%f6nP&k9
z-}J)h+vxh*5N4htn)>=L&IZ#P=X~XWF_X)*sRnt3E>?xj4Hhtodf}<p3A^!&4TKfb
z0EhP7hq9MABI{w;u7`0FM$RJbhhI9ER2<wKLOgGLQypx5tR>Dc;|y|u=LGxC*j=m6
z116eoGnqLI*SBeMx3-s4<Zdk;8{ex2jrr<5+tsOpH#gJR>@7;&t8QN+!yoh8cy#BW
zxC`rH6l$Dx7uu_+EdXuBH1x9)jzTtBsfRWHz|Gh`ZBz*VE$OK+e;`BDmfa-rnFx~e
zw*p6<#q%~-MHMv+rLTSybqX@5R9S8-;Vc>V9(Sj4j3bo>N`MbJU-VPjQv~J5zD2(%
zje5z6)MlM61=|&S4+fVJxqb-d&AyFug?)GC?<DTW8Aepl*n~iO@^XqF1Se#f7pN_w
zLuTjr%_u4E!Wq)|lMW7<7IE3B0p|yUtFnjVGMsow*e3BPTE&Nb{k6f-oQ%k^<2D5v
z=@9{66@WZJfF>YutUAPcpnpmhDG(12*KNV~o4<LuqG)Obna_2p1CQ^pW*11}-b;hZ
zSuyPUX@s|+;naa`m6GVt_sVs~Xs!MDJb`@QrmNI&d4N|<lBdGH9!)S9$lr;AZtQts
zX{wSm<Krbr4Z4;yKYtRaq^4hotn8_N_PoAxS?b5s7vRem4IH+ZQw1i>j~KPm%>oZz
z7NJV};+f7Ie)z3BF|DFe4^Ds=HtKY3vQkO(8zELw;yN69&_t`K*)<M6Gqjg=Dl8H;
z)eV2G4#R8Nx)3-Fl~1wz1RX)V6j3QWmY14`^nL_%Z)n8t08Q<b{!oI^?!WZ-pE=xE
zQB2{$Q$4PPr|FjKu=PiMp`O8$)uS93xs^>g<-LR-spMtp@b?@>;R1l?bEYnIu`A!I
z3Be1EVLFmG%I<7Ab*?l?n75GzVi$dhdY${~ti_oen+NzbZqHMVke|O*{lxH=jeZo*
z-VM`+=@~HQnm8{-RX}=&t5tWynfLbvOWKm;-@e-+NYWpXpc*sBoG83Dcb+8!AuSCD
zvK(1Ye(kum56|1{DJU%B)RveZ&p=6XIy^nhdLGIWnRv!$(=%&=`D%&!6i7i-+EcIm
z&rZyJMzlG;V-07cFV9O|(0R_sqZ**nyruQLsDxz7A^p>0K)5%0eE;x`U#W0{{V#Eb
zR|E-J@g0voYZ}RDYxOG{7CiY8VWMZkU1l7%#rI|}WQ}UHg4&FUL&gE;PbnJSnqVJQ
zb3K9Wc2I31fa)9|q`d@<S+K42Exi(YoGTM%wM|OQH2I#Jsz;6-X_p~N){?msP*=XH
zn=9pu*JZKf(n+b&>;&u43>~+r#i%mXELXfL>{EpP(sK(z8Jf-7b3On~cjhbGp2s|c
z7YpKv)V<QPCp9cP#~QC$lAVw=F%O7v|B;{iWay>2Fi&$K=5Tu^N`6P*4r6<G+=Ew0
zEwM<5+bpH%BRPHKOUr7t<a5J5Mz+?0d!5}eQ)?@8-6=cmRg{9xLENr66CHMcoKE2i
zF6v}k-tg`hqPNb<3>O-|r!+4&oA^U%Iw}2SMH6k+#fp{PnXO*2?W7vtjGPdi$3*TM
ztNfv46g0g5`EJ{a_w4<<C$9R2C={h>Z+eH^d2-Cu)JOUyahE81@+@UdP3nzX;@XG?
zfql8_+PVZsXE(JiOC&kHXXa7a*Zpfl)e8^gib^h;6>S!K?4dGp+R2Ag#R3;!gtvCJ
z(7VU<UKVt+v%5U(u6}taPUWNhTe;?vC&Fz3={<KjLg{Hv(MpLK39!HU)vv~jqsI@r
z5AScv%xqX(_lXw5=^{{=v;!l}k?~;%;F65|zu&o=kKopGn+EqTPX%jr{Jh4ctkFuq
peBS1J^dTVPas-A9FM<dmKXsw{b-H89M>2Rjd-~j|d<~nh{{fsaLreew

diff --git a/docs/assets/hero.svg b/docs/assets/hero.svg
index 87013478..e804f283 100644
--- a/docs/assets/hero.svg
+++ b/docs/assets/hero.svg
@@ -1,60 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <svg width="240" height="240" viewBox="0 0 240 240" fill="none" xmlns="http://www.w3.org/2000/svg">
-  <!-- Gradient Definitions -->
-  <defs>
-    <linearGradient id="nodeGradient" x1="0%" y1="0%" x2="100%" y2="100%">
-      <stop offset="0%" style="stop-color:#bd34fe;stop-opacity:1" />
-      <stop offset="100%" style="stop-color:#41d1ff;stop-opacity:1" />
-    </linearGradient>
-    <linearGradient id="lineGradient" x1="0%" y1="0%" x2="100%" y2="100%">
-      <stop offset="0%" style="stop-color:#bd34fe;stop-opacity:0.3" />
-      <stop offset="100%" style="stop-color:#41d1ff;stop-opacity:0.3" />
-    </linearGradient>
-  </defs>
-
-  <!-- Connection Lines -->
-  <g class="connections">
-    <path d="M120 80L80 120" stroke="url(#lineGradient)" stroke-width="2"/>
-    <path d="M120 80L160 120" stroke="url(#lineGradient)" stroke-width="2"/>
-    <path d="M80 120L120 160" stroke="url(#lineGradient)" stroke-width="2"/>
-    <path d="M160 120L120 160" stroke="url(#lineGradient)" stroke-width="2"/>
-    <path d="M80 120L160 120" stroke="url(#lineGradient)" stroke-width="2"/>
-  </g>
-
-  <!-- Nodes -->
-  <g class="nodes">
-    <!-- Central Node -->
-    <circle cx="120" cy="80" r="20" fill="url(#nodeGradient)"/>
-    <circle cx="120" cy="80" r="24" stroke="url(#nodeGradient)" stroke-width="1" fill="none"/>
-    
-    <!-- Left Node -->
-    <circle cx="80" cy="120" r="16" fill="url(#nodeGradient)"/>
-    <circle cx="80" cy="120" r="20" stroke="url(#nodeGradient)" stroke-width="1" fill="none"/>
-    
-    <!-- Right Node -->
-    <circle cx="160" cy="120" r="16" fill="url(#nodeGradient)"/>
-    <circle cx="160" cy="120" r="20" stroke="url(#nodeGradient)" stroke-width="1" fill="none"/>
-    
-    <!-- Bottom Node -->
-    <circle cx="120" cy="160" r="18" fill="url(#nodeGradient)"/>
-    <circle cx="120" cy="160" r="22" stroke="url(#nodeGradient)" stroke-width="1" fill="none"/>
-  </g>
-
-  <!-- Pulse Animation -->
-  <style>
-    @keyframes pulse {
-      0% { transform: scale(1); opacity: 0.8; }
-      50% { transform: scale(1.1); opacity: 1; }
-      100% { transform: scale(1); opacity: 0.8; }
-    }
-    .nodes circle {
-      animation: pulse 3s infinite ease-in-out;
-    }
-    .nodes circle:nth-child(2n) {
-      animation-delay: 1s;
-    }
-    .nodes circle:nth-child(3n) {
-      animation-delay: 2s;
-    }
-  </style>
-</svg>
\ No newline at end of file
+  <!-- Open Notebook — tri-hue pebble mark ("Quiet Green"): fern acts, gold notes, teal speaks -->
+  <rect x="24"  y="90" width="56" height="70" rx="16" fill="#2E6B4F"/>
+  <rect x="92"  y="90" width="56" height="70" rx="16" fill="#A97B12"/>
+  <rect x="160" y="90" width="56" height="70" rx="16" fill="#0E7268"/>
+</svg>
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
index 483af19d..dd6e5a11 100644
--- a/frontend/AGENTS.md
+++ b/frontend/AGENTS.md
@@ -12,6 +12,7 @@ Normative rules for working on the Next.js frontend. Architecture and flow walkt
 ## Hard rules
 
 - **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all locales** under `src/lib/locales/` (currently 14; en-US is the reference). Missing keys fall back to en-US silently — keep locales in sync. Each non-en-US locale ends with `satisfies TranslationShape` (type derived from en-US), so a missing/extra key fails `tsc`; the parity test (`src/lib/locales/index.test.ts`) checks the same at runtime.
+- **Styling goes through design tokens** ([ADR-011](../docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md)): use semantic utilities (`text-destructive`, `bg-warn-tint`, `text-teal`, `text-type-video`, …) defined in `src/app/globals.css` — never raw Tailwind palette classes (`text-red-600`, `bg-amber-50`) and never hand-written `dark:` color twins (tokens re-resolve per theme). The laws: fern acts, teal is the AI voice, red only destroys, warn is clay, color never washes a reading surface. `/dev/design` (dev-only route) renders every token and primitive in both themes — it's the visual reference, and screen-level PRs must not change it.
 - All requests go through `apiClient` (`src/lib/api/client.ts`); never create a second axios instance. Auth token is auto-added from localStorage key `auth-storage`.
 - Data fetching uses TanStack Query hooks in `src/lib/hooks/` with `QUERY_KEYS`; mutations invalidate caches and show toasts (sonner). Follow the existing hook shape.
 - FormData requests: nested objects/arrays must be `JSON.stringify`-ed before appending; the interceptor strips Content-Type so the browser sets the multipart boundary — don't re-add it.

From 5bba1f3d5b63a31b9ce7cd4804cfaa3f1a7a8e12 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 22:52:59 -0300
Subject: [PATCH 319/345] fix(notebooks): route get_notebooks order_by through
 _validate_order_by (#1422)

* fix(notebooks): route get_notebooks order_by through _validate_order_by

The notebooks list endpoint had its own ORDER BY parser. It now normalizes
through ObjectModel._validate_order_by() and keeps the endpoint allowlist
(single clause on name/created/updated) as an extra check, returning 400
with the allowed fields on any invalid input.

Closes #1416

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(notebooks): raise InvalidInputError for invalid order_by

Goes through the registered typed-exception handler (same 400 + detail
shape, plus CORS headers) instead of a bare HTTPException.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                      |  1 +
 api/routers/notebooks.py          | 42 ++++++++++------------
 tests/test_order_by_validation.py | 59 +++++++++++++++++++++++++++++++
 3 files changed, 79 insertions(+), 23 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 51826c12..b35b68eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
+- `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
 
 ### Added
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index dea13eae..23465e0c 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -65,30 +65,26 @@ async def get_notebooks(
 ):
     """Get all notebooks with optional filtering and ordering."""
     try:
-        # Validate order_by against allowlist to prevent SurrealQL injection
+        # Normalize through the central validator (SurrealQL injection guard),
+        # then apply this endpoint's stricter allowlist: a single clause on one
+        # of the sortable notebook fields.
         allowed_fields = {"name", "created", "updated"}
-        allowed_directions = {"asc", "desc"}
-
-        parts = order_by.strip().lower().split()
-        if len(parts) == 1:
-            if parts[0] not in allowed_fields:
-                raise HTTPException(
-                    status_code=400,
-                    detail=f"Invalid order_by field: '{order_by}'. Allowed fields: {', '.join(sorted(allowed_fields))}",
-                )
-            validated_order_by = parts[0]
-        elif len(parts) == 2:
-            if parts[0] not in allowed_fields or parts[1] not in allowed_directions:
-                raise HTTPException(
-                    status_code=400,
-                    detail=f"Invalid order_by: '{order_by}'. Allowed fields: {', '.join(sorted(allowed_fields))}. Allowed directions: asc, desc",
-                )
-            validated_order_by = f"{parts[0]} {parts[1]}"
-        else:
-            raise HTTPException(
-                status_code=400,
-                detail=f"Invalid order_by format: '{order_by}'. Expected 'field' or 'field direction'",
-            )
+        allowed_message = (
+            f"Allowed fields: {', '.join(sorted(allowed_fields))}. "
+            "Allowed directions: asc, desc"
+        )
+        invalid = InvalidInputError(
+            f"Invalid order_by: '{order_by}'. {allowed_message}"
+        )
+        try:
+            validated_order_by = Notebook._validate_order_by(order_by)
+        except InvalidInputError:
+            raise invalid from None
+        if (
+            "," in validated_order_by
+            or validated_order_by.split()[0] not in allowed_fields
+        ):
+            raise invalid
 
         # Build the query with counts
         query = f"""
diff --git a/tests/test_order_by_validation.py b/tests/test_order_by_validation.py
index 2581d2fa..e0e280aa 100644
--- a/tests/test_order_by_validation.py
+++ b/tests/test_order_by_validation.py
@@ -5,6 +5,8 @@ own query instead of delegating to the base get_all() and previously
 interpolated order_by into the SurrealQL unvalidated.
 """
 
+from unittest.mock import AsyncMock, patch
+
 import pytest
 
 from open_notebook.domain.base import ObjectModel
@@ -48,3 +50,60 @@ class TestCredentialGetAllRejectsInjection:
         # (the pre-fix behavior) would execute the injected statement.
         with pytest.raises(InvalidInputError):
             await Credential.get_all(order_by="provider; DROP TABLE credential")
+
+
+class TestGetNotebooksOrderBy:
+    """get_notebooks() routes order_by through _validate_order_by() and keeps
+    its stricter field allowlist on top (#1416)."""
+
+    @pytest.fixture
+    def client(self):
+        from fastapi.testclient import TestClient
+
+        from api.main import app
+
+        return TestClient(app)
+
+    @pytest.mark.parametrize(
+        "order_by,expected",
+        [
+            ("updated desc", "updated desc"),
+            ("name asc", "name asc"),
+            ("created", "created"),
+            ("  Name   DESC ", "name desc"),
+        ],
+    )
+    def test_valid_values_reach_the_query_normalized(self, client, order_by, expected):
+        with patch(
+            "api.routers.notebooks.repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            mock_query.return_value = []
+            response = client.get("/api/notebooks", params={"order_by": order_by})
+
+        assert response.status_code == 200
+        query = mock_query.call_args.args[0]
+        assert f"ORDER BY {expected}\n" in query
+
+    @pytest.mark.parametrize(
+        "order_by",
+        [
+            "updated; DROP TABLE notebook",
+            "name) FETCH (SELECT * FROM credential",
+            "updated LIMIT 1",
+            "name desc extra",
+            "archived desc",
+            "id",
+            "name asc, updated desc",
+            "updated sideways",
+            "",
+        ],
+    )
+    def test_injection_and_unknown_fields_return_400(self, client, order_by):
+        with patch(
+            "api.routers.notebooks.repo_query", new_callable=AsyncMock
+        ) as mock_query:
+            response = client.get("/api/notebooks", params={"order_by": order_by})
+
+        assert response.status_code == 400
+        assert "Allowed fields: created, name, updated" in response.json()["detail"]
+        mock_query.assert_not_called()

From 2aa58722f266f889828f5d00e8dde0ffcbe7ede9 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 23:10:59 -0300
Subject: [PATCH 320/345] fix(source-chat): stream only the new answer; restore
 context badge on load (#1423)

* fix(source-chat): stream only the new answer; restore context badge on load

The SSE generator emitted an ai_message for every AI message in the
checkpointed history, and the hook concatenated them into one bubble. Only
the last message is emitted now. The session-load effect also sets the
context indicators returned by GET session, so the badge survives refresh.

Closes #1393

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(source-chat): clear context badge when the session goes away

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* style: drop unrelated formatting changes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  1 +
 api/routers/source_chat.py                    | 21 ++++---
 .../src/lib/hooks/use-source-chat.test.tsx    | 63 +++++++++++++++++++
 frontend/src/lib/hooks/use-source-chat.ts     |  2 +
 tests/test_chat_routers_characterization.py   | 52 +++++++++++++++
 5 files changed, 129 insertions(+), 10 deletions(-)
 create mode 100644 frontend/src/lib/hooks/use-source-chat.test.tsx

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b35b68eb..2ea50d16 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
 - `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
+- **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
 
 ### Added
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index aceae595..58aebeca 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -372,16 +372,17 @@ async def stream_source_chat_response(
             )
         )
 
-        # Stream the complete AI response
-        if "messages" in result:
-            for msg in result["messages"]:
-                if hasattr(msg, "type") and msg.type == "ai":
-                    ai_event = {
-                        "type": "ai_message",
-                        "content": msg.content if hasattr(msg, "content") else str(msg),
-                        "timestamp": None,
-                    }
-                    yield f"data: {json.dumps(ai_event)}\n\n"
+        # Stream this turn's AI response. result["messages"] is the full
+        # checkpointed history, so only the last message is new.
+        if result.get("messages"):
+            msg = result["messages"][-1]
+            if getattr(msg, "type", None) == "ai":
+                ai_event = {
+                    "type": "ai_message",
+                    "content": msg.content if hasattr(msg, "content") else str(msg),
+                    "timestamp": None,
+                }
+                yield f"data: {json.dumps(ai_event)}\n\n"
 
         # Stream context indicators
         if "context_indicators" in result:
diff --git a/frontend/src/lib/hooks/use-source-chat.test.tsx b/frontend/src/lib/hooks/use-source-chat.test.tsx
new file mode 100644
index 00000000..10c4c055
--- /dev/null
+++ b/frontend/src/lib/hooks/use-source-chat.test.tsx
@@ -0,0 +1,63 @@
+import { ReactNode } from 'react'
+import { renderHook, waitFor } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+import { useSourceChat } from './use-source-chat'
+import { sourceChatApi } from '@/lib/api/source-chat'
+
+vi.mock('@/lib/api/source-chat', () => ({
+  sourceChatApi: {
+    listSessions: vi.fn(),
+    getSession: vi.fn(),
+  },
+}))
+
+vi.mock('@/lib/hooks/use-translation', () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}))
+
+vi.mock('sonner', () => ({
+  toast: { error: vi.fn(), success: vi.fn() },
+}))
+
+function wrapper({ children }: { children: ReactNode }) {
+  const queryClient = new QueryClient({
+    defaultOptions: { queries: { retry: false } },
+  })
+  return <QueryClientProvider client={queryClient}>{children}</QueryClientProvider>
+}
+
+describe('useSourceChat', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  // The context badge used to come only from the SSE event, so it disappeared
+  // after a refresh even though GET session returns it (#1393).
+  it('restores context indicators from the loaded session', async () => {
+    const indicators = { sources: ['source:xyz'], insights: [], notes: [] }
+    vi.mocked(sourceChatApi.listSessions).mockResolvedValue([
+      {
+        id: 'chat_session:abc',
+        title: 'Session',
+        source_id: 'source:xyz',
+        created: '2026-01-01T00:00:00',
+        updated: '2026-01-01T00:00:00',
+      },
+    ])
+    vi.mocked(sourceChatApi.getSession).mockResolvedValue({
+      id: 'chat_session:abc',
+      title: 'Session',
+      source_id: 'source:xyz',
+      created: '2026-01-01T00:00:00',
+      updated: '2026-01-01T00:00:00',
+      messages: [{ id: 'm1', type: 'human', content: 'hello' }],
+      context_indicators: indicators,
+    })
+
+    const { result } = renderHook(() => useSourceChat('source:xyz'), { wrapper })
+
+    await waitFor(() => expect(result.current.contextIndicators).toEqual(indicators))
+    expect(result.current.messages).toHaveLength(1)
+  })
+})
diff --git a/frontend/src/lib/hooks/use-source-chat.ts b/frontend/src/lib/hooks/use-source-chat.ts
index e9e3d6b3..b895851e 100644
--- a/frontend/src/lib/hooks/use-source-chat.ts
+++ b/frontend/src/lib/hooks/use-source-chat.ts
@@ -42,6 +42,8 @@ export function useSourceChat(sourceId: string) {
     if (currentSession?.messages) {
       setMessages(currentSession.messages)
     }
+    // Also clears the badge when the session goes away (deleted / switched).
+    setContextIndicators(currentSession?.context_indicators ?? null)
   }, [currentSession])
 
   // Auto-select most recent session when sessions are loaded
diff --git a/tests/test_chat_routers_characterization.py b/tests/test_chat_routers_characterization.py
index 8d52b957..b321b317 100644
--- a/tests/test_chat_routers_characterization.py
+++ b/tests/test_chat_routers_characterization.py
@@ -330,3 +330,55 @@ async def test_get_source_chat_session_happy_path_shapes(
         "insights": [],
         "notes": [],
     }
+
+
+# --- source_chat.py: streaming ------------------------------------------------
+
+
+async def _collect_events(gen):
+    import json
+
+    events = []
+    async for chunk in gen:
+        assert chunk.startswith("data: ")
+        events.append(json.loads(chunk[len("data: ") :]))
+    return events
+
+
+@pytest.mark.asyncio
+@patch("api.routers.source_chat.source_chat_graph")
+async def test_stream_emits_only_the_new_ai_message(mock_graph):
+    """The graph result carries the whole checkpointed history; the stream must
+    send only this turn's answer, not every previous AI message (#1393)."""
+    from api.routers.source_chat import stream_source_chat_response
+
+    mock_graph.get_state.return_value = _graph_state(
+        {
+            "messages": [
+                _Msg("m1", "human", "first question"),
+                _Msg("m2", "ai", "first answer"),
+            ]
+        }
+    )
+    mock_graph.invoke.return_value = {
+        "messages": [
+            _Msg("m1", "human", "first question"),
+            _Msg("m2", "ai", "first answer"),
+            _Msg("m3", "human", "second question"),
+            _Msg("m4", "ai", "second answer"),
+        ],
+        "context_indicators": {"sources": ["source:xyz"], "insights": [], "notes": []},
+    }
+
+    events = await _collect_events(
+        stream_source_chat_response("chat_session:abc", "source:xyz", "second question")
+    )
+
+    ai_events = [e for e in events if e["type"] == "ai_message"]
+    assert [e["content"] for e in ai_events] == ["second answer"]
+    assert [e["type"] for e in events] == [
+        "user_message",
+        "ai_message",
+        "context_indicators",
+        "complete",
+    ]

From 93e0890f08886214a3a75e5eab4fa110943dad21 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 23:15:14 -0300
Subject: [PATCH 321/345] fix(embeddings): remove partial source embeddings
 when the insert fails (#1424)

* fix(embeddings): remove partial source embeddings when the insert fails

repo_insert writes in batches since #1293, so a failure on a later batch
left the earlier rows in source_embedding and the source looked embedded.
embed_source now deletes the source's rows before re-raising; the original
exception is kept so retry/stop_on behaviour is unchanged.

Closes #1390

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* test(embeddings): scope the fake DELETE and keep another source's rows

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): move entry to avoid merge conflicts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                               |   1 +
 commands/embedding_commands.py             |  19 +++-
 tests/test_embed_source_partial_cleanup.py | 121 +++++++++++++++++++++
 3 files changed, 140 insertions(+), 1 deletion(-)
 create mode 100644 tests/test_embed_source_partial_cleanup.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2ea50d16..d2db9323 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
 - **Ask answers are no longer silently truncated.** The three Ask stages (search strategy, per-search answers, final synthesis) were capped at 2000 output tokens, well below the 8192 that chat and transformations use. Token-dense languages such as Japanese hit the cap mid-sentence, and reasoning models spent the whole budget thinking and returned blank search terms, so Ask answered "no documents found" from a corpus that had the answer. All three stages now share an 8192 budget; a strategy with no usable search terms fails with an explicit error instead of running empty searches, and thinking-only partial answers are dropped before synthesis (#1221)
+- A source embedding job that fails part-way through the batched insert now removes the embeddings it already wrote, so the source is no longer shown as embedded while search only sees part of it (#1390)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
 - **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
 - **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index f761a1a0..14fae108 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -384,7 +384,24 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
         ]
 
         logger.debug(f"Inserting {len(records)} source_embedding records")
-        await repo_insert("source_embedding", records)
+        try:
+            await repo_insert("source_embedding", records)
+        except Exception:
+            # repo_insert writes in batches, so a failure on a later batch
+            # leaves the earlier ones behind. A partial set would mark the
+            # source as embedded while search sees only part of it: remove
+            # them before re-raising (the original error drives retry/stop).
+            try:
+                await repo_query(
+                    "DELETE source_embedding WHERE source = $source_id",
+                    {"source_id": ensure_record_id(input_data.source_id)},
+                )
+            except Exception as cleanup_error:
+                logger.error(
+                    f"Failed to clean up partial embeddings for source "
+                    f"{input_data.source_id}: {cleanup_error}"
+                )
+            raise
 
         return {"chunks_created": total_chunks}, f": {total_chunks} chunks"
 
diff --git a/tests/test_embed_source_partial_cleanup.py b/tests/test_embed_source_partial_cleanup.py
new file mode 100644
index 00000000..4eb87e0d
--- /dev/null
+++ b/tests/test_embed_source_partial_cleanup.py
@@ -0,0 +1,121 @@
+"""embed_source must not leave a partial set of embeddings behind when a
+batched insert fails part-way (#1390).
+
+repo_insert writes in batches of 50 (#1293), so it is no longer atomic. The
+database is faked in memory here: DELETE clears the source's rows and the
+insert stores its first batch before failing on the second.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+
+from commands.embedding_commands import EmbedSourceInput, embed_source_command
+
+SOURCE_ID = "source:abc"
+OTHER_SOURCE_ID = "source:other"
+
+
+class _FakeSource:
+    full_text = "some text " * 200
+    asset = None
+
+
+class _FakeEmbeddingTable:
+    def __init__(self, fail_on_batch: int):
+        self.rows: list = [
+            {"source": SOURCE_ID, "order": 0, "stale": True},
+            {"source": OTHER_SOURCE_ID, "order": 0},
+        ]
+        self.fail_on_batch = fail_on_batch
+
+    async def repo_query(self, query, params=None):
+        # Only honour the scoped form; an unscoped DELETE would fail here.
+        assert query == "DELETE source_embedding WHERE source = $source_id"
+        target = str(params["source_id"])
+        self.rows = [r for r in self.rows if str(r["source"]) != target]
+        return []
+
+    def rows_for(self, source_id):
+        return [r for r in self.rows if r["source"] == source_id]
+
+    async def repo_insert(self, table, records):
+        assert table == "source_embedding"
+        for batch_no, start in enumerate(range(0, len(records), 50)):
+            if batch_no == self.fail_on_batch:
+                raise ConnectionError("websocket closed")
+            self.rows.extend(
+                {**r, "source": str(r["source"])} for r in records[start : start + 50]
+            )
+
+
+def _patches(table: _FakeEmbeddingTable, n_chunks: int):
+    return (
+        patch(
+            "commands.embedding_commands.Source.get",
+            new=AsyncMock(return_value=_FakeSource()),
+        ),
+        patch(
+            "commands.embedding_commands.chunk_text",
+            return_value=[f"chunk {i}" for i in range(n_chunks)],
+        ),
+        patch(
+            "commands.embedding_commands.generate_embeddings",
+            new=AsyncMock(return_value=[[0.1, 0.2]] * n_chunks),
+        ),
+        patch("commands.embedding_commands.repo_query", new=table.repo_query),
+        patch("commands.embedding_commands.repo_insert", new=table.repo_insert),
+    )
+
+
+@pytest.mark.asyncio
+async def test_failure_on_later_batch_leaves_no_embeddings():
+    table = _FakeEmbeddingTable(fail_on_batch=1)
+    p1, p2, p3, p4, p5 = _patches(table, n_chunks=120)
+
+    with p1, p2, p3, p4, p5:
+        with pytest.raises(ConnectionError, match="websocket closed"):
+            await embed_source_command(EmbedSourceInput(source_id=SOURCE_ID))
+
+    assert table.rows_for(SOURCE_ID) == []
+    assert len(table.rows_for(OTHER_SOURCE_ID)) == 1
+
+
+@pytest.mark.asyncio
+async def test_original_error_is_reraised_when_cleanup_also_fails():
+    table = _FakeEmbeddingTable(fail_on_batch=1)
+    calls = {"n": 0}
+    original_query = table.repo_query
+
+    async def flaky_query(query, params=None):
+        calls["n"] += 1
+        if calls["n"] == 2:  # the cleanup DELETE
+            raise RuntimeError("cleanup failed")
+        return await original_query(query, params)
+
+    p1, p2, p3, _p4, p5 = _patches(table, n_chunks=120)
+    with (
+        p1,
+        p2,
+        p3,
+        p5,
+        patch("commands.embedding_commands.repo_query", new=flaky_query),
+    ):
+        with pytest.raises(ConnectionError, match="websocket closed"):
+            await embed_source_command(EmbedSourceInput(source_id=SOURCE_ID))
+
+
+@pytest.mark.asyncio
+async def test_successful_insert_keeps_all_embeddings():
+    table = _FakeEmbeddingTable(fail_on_batch=-1)
+    p1, p2, p3, p4, p5 = _patches(table, n_chunks=120)
+
+    with p1, p2, p3, p4, p5:
+        result = await embed_source_command(EmbedSourceInput(source_id=SOURCE_ID))
+
+    assert result.success is True
+    assert result.chunks_created == 120
+    rows = table.rows_for(SOURCE_ID)
+    assert len(rows) == 120
+    assert not any(r.get("stale") for r in rows)
+    assert len(table.rows_for(OTHER_SOURCE_ID)) == 1

From 86454dbcc3cf1a0944e376cb6b03f9998a3b49b2 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 23:18:32 -0300
Subject: [PATCH 322/345] fix(chat,ask): treat an empty model reply as an error
 (#1427)

* fix(chat,ask): treat an empty model reply as an error

The notebook chat, source chat and Ask final-answer nodes now raise
IncompleteGenerationError when the reply is empty after removing thinking
content, so no blank message is checkpointed or streamed. Transformations
already did this.

LangGraph checkpoints the input before running the nodes, so a failed turn
left the question in history and a retry duplicated it. The chat and source
chat routers now give the user message an explicit id and remove it from the
checkpoint when the invoke fails. The source chat and Ask streams pass a
typed error's own message through instead of re-classifying it.

Closes #1392

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(chat): roll back a failed turn inside the worker thread

- invoke_chat_turn (open_notebook/utils/graph_utils.py) runs the graph
  invoke and, on failure, the checkpoint rollback together in the worker
  thread, so the rollback also happens when the request task is cancelled.
  The helper moves out of the router module next to the other checkpoint
  helpers, and logs cleanup failures with a traceback.
- extract_text_content(None) returns "" so a None reply is caught by the
  empty-reply guard instead of becoming the literal "None".
- Test for the notebook chat failed-turn/retry path through /chat/execute.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): move entry to avoid merge conflicts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* test: satisfy mypy on the Ask final-answer test state

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                        |   1 +
 api/routers/chat.py                 |  34 +++--
 api/routers/search.py               |   7 +-
 api/routers/source_chat.py          |  35 +++--
 open_notebook/graphs/ask.py         |  16 +-
 open_notebook/graphs/chat.py        |   9 +-
 open_notebook/graphs/source_chat.py |   9 +-
 open_notebook/utils/graph_utils.py  |  42 ++++++
 open_notebook/utils/text_utils.py   |   2 +
 tests/test_empty_model_reply.py     | 225 ++++++++++++++++++++++++++++
 10 files changed, 346 insertions(+), 34 deletions(-)
 create mode 100644 tests/test_empty_model_reply.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d2db9323..54aaee4e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -35,6 +35,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Theme, Language and Sign Out actions in the expanded sidebar footer are left-aligned again (the Theme button was missing the icon padding the others get) (#1288)
 - **YouTube transcript language preference is honored again.** `ContentSettings.youtube_preferred_languages` (exposed via `GET`/`PUT /api/settings`) was silently ignored since the content-core 2.x migration — source processing always used a hardcoded list, so videos with transcripts only in an unlisted language failed to import. The setting now reaches content-core's `youtube_languages`, and both the built-in default and the setting default gained Simplified and Traditional Chinese (`zh-CN`, `zh-TW`). Supersedes #1287
 - **Vector search results are always returned in descending similarity order.** `fn::vector_search` orders inside the function, but the outer `SELECT *` wrapper did not reliably preserve that order for multi-result queries, so `POST /api/search` could return a weaker match first. Results are now re-sorted by similarity in the domain layer (#1306, #1301)
+- **An empty model reply is now an error, not an answer.** Notebook chat and source chat stored a blank AI message that was replayed as context on later turns, and streaming Ask finished with an empty final answer and no error. All three now surface "The model returned an empty response" (transformations already did). A failed chat turn also no longer leaves the question in the conversation history, so retrying does not duplicate it, and streamed errors keep their specific message instead of a generic "AI service error" (#1392)
 - **Anthropic connection test no longer reports retired Haiku ids as HTTP 403.** The status-code check matched "403" inside the date suffix of `claude-3-haiku-20240307`, turning a plain "model not found" into a permissions error. Status codes are now matched as standalone numbers for 401/403/429, and the registry's test model moved to a current Haiku id (#1303, #1282)
 - **Context-length errors are no longer retried in background jobs.** A source whose content exceeds the model's context window used to be retried up to 15 times (about 25 minutes) before failing, because the error was classified like a transient provider outage. A dedicated `ContextLengthExceededError` now stops the retry loop immediately (#1275)
 
diff --git a/api/routers/chat.py b/api/routers/chat.py
index 5cdd732a..210d8566 100644
--- a/api/routers/chat.py
+++ b/api/routers/chat.py
@@ -1,6 +1,7 @@
 import asyncio
 import traceback
 from typing import Any, Dict, List, Optional
+from uuid import uuid4
 
 from fastapi import APIRouter, HTTPException, Query
 from langchain_core.runnables import RunnableConfig
@@ -22,7 +23,10 @@ from open_notebook.exceptions import (
 from open_notebook.graphs.chat import graph as chat_graph
 from open_notebook.utils import token_count
 from open_notebook.utils.context_builder import build_notebook_context
-from open_notebook.utils.graph_utils import get_session_message_count
+from open_notebook.utils.graph_utils import (
+    get_session_message_count,
+    invoke_chat_turn,
+)
 
 router = APIRouter()
 
@@ -341,27 +345,27 @@ async def execute_chat(request: ExecuteChatRequest):
         # Add user message to state
         from langchain_core.messages import HumanMessage
 
-        user_message = HumanMessage(content=request.message)
+        # Explicit id so a failed turn can remove it from the checkpoint.
+        user_message = HumanMessage(content=request.message, id=str(uuid4()))
         state_values["messages"].append(user_message)
 
         # Execute chat graph in a thread so the synchronous LangGraph invoke
         # (SqliteSaver checkpoints are sync) doesn't block the event loop and
         # freeze the rest of the API while the LLM responds. Mirrors the
         # get_state() calls above.
-        # The lambda pins down which `invoke` overload is used; asyncio.to_thread
-        # can't resolve overloaded callables on its own. The ignore is a langgraph
-        # typing limitation: it accepts a partial state dict at runtime, but the
-        # signature requires the full state type.
+        # invoke_chat_turn also drops the question from the checkpoint when the
+        # turn fails, so a retry doesn't add it twice.
         result = await asyncio.to_thread(
-            lambda: chat_graph.invoke(
-                input=state_values,  # type: ignore[arg-type]
-                config=RunnableConfig(
-                    configurable={
-                        "thread_id": full_session_id,
-                        "model_id": model_override,
-                    }
-                ),
-            )
+            invoke_chat_turn,
+            chat_graph,
+            state_values,
+            RunnableConfig(
+                configurable={
+                    "thread_id": full_session_id,
+                    "model_id": model_override,
+                }
+            ),
+            user_message,
         )
 
         # Update session timestamp
diff --git a/api/routers/search.py b/api/routers/search.py
index 76d0b91f..3127887d 100644
--- a/api/routers/search.py
+++ b/api/routers/search.py
@@ -126,7 +126,12 @@ async def stream_ask_response(
     except Exception as e:
         from open_notebook.utils.error_classifier import classify_error
 
-        _, user_message = classify_error(e)
+        # Typed errors already carry a user-facing message; only raw provider
+        # exceptions need classifying.
+        if isinstance(e, OpenNotebookError):
+            user_message = str(e)
+        else:
+            _, user_message = classify_error(e)
         logger.error(f"Error in ask streaming: {str(e)}")
         error_data = {"type": "error", "message": user_message}
         yield f"data: {json.dumps(error_data)}\n\n"
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index 58aebeca..4e50d3aa 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -1,6 +1,7 @@
 import asyncio
 import json
 from typing import AsyncGenerator, List, Optional
+from uuid import uuid4
 
 from fastapi import APIRouter, HTTPException, Path
 from fastapi.responses import StreamingResponse
@@ -23,7 +24,10 @@ from open_notebook.exceptions import (
     OpenNotebookError,
 )
 from open_notebook.graphs.source_chat import source_chat_graph as source_chat_graph
-from open_notebook.utils.graph_utils import get_session_message_count
+from open_notebook.utils.graph_utils import (
+    get_session_message_count,
+    invoke_chat_turn,
+)
 
 router = APIRouter()
 
@@ -348,7 +352,8 @@ async def stream_source_chat_response(
         state_values["model_override"] = model_override
 
         # Add user message to state
-        user_message = HumanMessage(content=message)
+        # Explicit id so a failed turn can remove it from the checkpoint.
+        user_message = HumanMessage(content=message, id=str(uuid4()))
         state_values["messages"].append(user_message)
 
         # Send user message event
@@ -359,17 +364,16 @@ async def stream_source_chat_response(
         # event loop. While blocked, even the already-yielded SSE events can't
         # flush and every other request stalls until the LLM finishes. Mirrors the
         # get_state() calls above.
-        # The lambda pins down which `invoke` overload is used; asyncio.to_thread
-        # can't resolve overloaded callables on its own. The ignore is a langgraph
-        # typing limitation: it accepts a partial state dict at runtime, but the
-        # signature requires the full state type.
+        # invoke_chat_turn also drops the question from the checkpoint when the
+        # turn fails, so a retry doesn't add it twice.
         result = await asyncio.to_thread(
-            lambda: source_chat_graph.invoke(
-                input=state_values,  # type: ignore[arg-type]
-                config=RunnableConfig(
-                    configurable={"thread_id": session_id, "model_id": model_override}
-                ),
-            )
+            invoke_chat_turn,
+            source_chat_graph,
+            state_values,
+            RunnableConfig(
+                configurable={"thread_id": session_id, "model_id": model_override}
+            ),
+            user_message,
         )
 
         # Stream this turn's AI response. result["messages"] is the full
@@ -399,7 +403,12 @@ async def stream_source_chat_response(
     except Exception as e:
         from open_notebook.utils.error_classifier import classify_error
 
-        _, error_message = classify_error(e)
+        # Typed errors already carry a user-facing message; only raw provider
+        # exceptions need classifying.
+        if isinstance(e, OpenNotebookError):
+            error_message = str(e)
+        else:
+            _, error_message = classify_error(e)
         logger.error(f"Error in source chat streaming: {str(e)}")
         error_event = {"type": "error", "message": error_message}
         yield f"data: {json.dumps(error_event)}\n\n"
diff --git a/open_notebook/graphs/ask.py b/open_notebook/graphs/ask.py
index 9cb956a7..b2bf6d44 100644
--- a/open_notebook/graphs/ask.py
+++ b/open_notebook/graphs/ask.py
@@ -11,7 +11,11 @@ from typing_extensions import TypedDict
 
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.domain.notebook import vector_search
-from open_notebook.exceptions import ExternalServiceError, OpenNotebookError
+from open_notebook.exceptions import (
+    ExternalServiceError,
+    IncompleteGenerationError,
+    OpenNotebookError,
+)
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
@@ -170,8 +174,14 @@ async def write_final_answer(state: ThreadState, config: RunnableConfig) -> dict
             max_tokens=ASK_MAX_TOKENS,
         )
         ai_message = await model.ainvoke(system_prompt)
-        final_content = extract_text_content(ai_message.content)
-        return {"final_answer": clean_thinking_content(final_content)}
+        final_content = clean_thinking_content(extract_text_content(ai_message.content))
+        if not final_content.strip():
+            raise IncompleteGenerationError(
+                "The final answer model returned an empty response. Try again, or "
+                "pick a different final answer model in the Ask page's advanced "
+                "model options."
+            )
+        return {"final_answer": final_content}
     except OpenNotebookError:
         raise
     except Exception as e:
diff --git a/open_notebook/graphs/chat.py b/open_notebook/graphs/chat.py
index 62867c4f..db2e3259 100644
--- a/open_notebook/graphs/chat.py
+++ b/open_notebook/graphs/chat.py
@@ -13,7 +13,7 @@ from typing_extensions import TypedDict
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.config import LANGGRAPH_CHECKPOINT_FILE
 from open_notebook.domain.notebook import Notebook
-from open_notebook.exceptions import OpenNotebookError
+from open_notebook.exceptions import IncompleteGenerationError, OpenNotebookError
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
@@ -75,6 +75,13 @@ def call_model_with_messages(state: ThreadState, config: RunnableConfig) -> dict
         # Clean thinking content from AI response (e.g., <think>...</think> tags)
         content = extract_text_content(ai_message.content)
         cleaned_content = clean_thinking_content(content)
+        if not cleaned_content.strip():
+            # Raising inside the node keeps LangGraph from checkpointing a
+            # blank AI message that would be replayed as context later.
+            raise IncompleteGenerationError(
+                "The model returned an empty response. Try again, or pick a "
+                "different model if this keeps happening."
+            )
         cleaned_message = ai_message.model_copy(update={"content": cleaned_content})
 
         return {"messages": cleaned_message}
diff --git a/open_notebook/graphs/source_chat.py b/open_notebook/graphs/source_chat.py
index 43d67963..64fcb3c0 100644
--- a/open_notebook/graphs/source_chat.py
+++ b/open_notebook/graphs/source_chat.py
@@ -13,7 +13,7 @@ from typing_extensions import TypedDict
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.config import LANGGRAPH_CHECKPOINT_FILE
 from open_notebook.domain.notebook import Source, SourceInsight
-from open_notebook.exceptions import OpenNotebookError
+from open_notebook.exceptions import IncompleteGenerationError, OpenNotebookError
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.context_builder import (
     build_source_context,
@@ -194,6 +194,13 @@ def _call_model_with_source_context_inner(
     # Clean thinking content from AI response (e.g., <think>...</think> tags)
     content = extract_text_content(ai_message.content)
     cleaned_content = clean_thinking_content(content)
+    if not cleaned_content.strip():
+        # Raising inside the node keeps LangGraph from checkpointing a blank
+        # AI message that would be replayed as context later.
+        raise IncompleteGenerationError(
+            "The model returned an empty response. Try again, or pick a "
+            "different model if this keeps happening."
+        )
     cleaned_message = ai_message.model_copy(update={"content": cleaned_content})
 
     # Update state with context information
diff --git a/open_notebook/utils/graph_utils.py b/open_notebook/utils/graph_utils.py
index 8f44c4fd..afb004ae 100644
--- a/open_notebook/utils/graph_utils.py
+++ b/open_notebook/utils/graph_utils.py
@@ -1,5 +1,7 @@
 import asyncio
+from typing import Any
 
+from langchain_core.messages import BaseMessage, RemoveMessage
 from langchain_core.runnables import RunnableConfig
 from loguru import logger
 
@@ -21,3 +23,43 @@ async def get_session_message_count(graph, session_id: str) -> int:
     except Exception as e:
         logger.warning(f"Could not fetch message count for session {session_id}: {e}")
     return 0
+
+
+def discard_unanswered_message(graph, thread_id: str, message: BaseMessage) -> None:
+    """Remove a user message whose turn failed from the thread's checkpoint.
+
+    LangGraph checkpoints the graph input before running the nodes, so when the
+    model call fails the question stays in history with no answer, and a retry
+    adds it a second time. Synchronous (SqliteSaver). Best-effort: never raises,
+    so it can't mask the original error.
+    """
+    if not message.id:
+        return
+    try:
+        config = RunnableConfig(configurable={"thread_id": thread_id})
+        state = graph.get_state(config)
+        messages = (state.values or {}).get("messages", []) if state else []
+        if any(getattr(m, "id", None) == message.id for m in messages):
+            graph.update_state(config, {"messages": [RemoveMessage(id=message.id)]})
+    except Exception:
+        logger.exception(f"Could not discard unanswered message in {thread_id}")
+
+
+def invoke_chat_turn(
+    graph, state: dict, config: RunnableConfig, user_message: BaseMessage
+) -> Any:
+    """Run one chat turn; if it fails, drop the unanswered question.
+
+    Synchronous on purpose: call it via asyncio.to_thread so the invoke and the
+    rollback run together in the worker thread, even if the request task is
+    cancelled while waiting (client disconnect).
+    """
+    try:
+        # LangGraph accepts a partial state dict at runtime, but its typed
+        # signature requires the full state type.
+        return graph.invoke(input=state, config=config)
+    except Exception:
+        thread_id = config.get("configurable", {}).get("thread_id")
+        if thread_id:
+            discard_unanswered_message(graph, thread_id, user_message)
+        raise
diff --git a/open_notebook/utils/text_utils.py b/open_notebook/utils/text_utils.py
index 4fd71c6d..edfc52c6 100644
--- a/open_notebook/utils/text_utils.py
+++ b/open_notebook/utils/text_utils.py
@@ -138,6 +138,8 @@ def extract_text_content(content) -> str:
     Returns:
         The extracted text content as a string.
     """
+    if content is None:
+        return ""
     if isinstance(content, str):
         return content
     if isinstance(content, list):
diff --git a/tests/test_empty_model_reply.py b/tests/test_empty_model_reply.py
new file mode 100644
index 00000000..276ed918
--- /dev/null
+++ b/tests/test_empty_model_reply.py
@@ -0,0 +1,225 @@
+"""An empty model reply is an error, not an answer (#1392).
+
+Covers the graph nodes (notebook chat, source chat, Ask final answer) and the
+router side of a failed turn: the user's question is removed from the thread
+checkpoint so a retry doesn't duplicate it.
+"""
+
+import json
+import sqlite3
+from typing import Annotated, cast
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from langchain_core.messages import AIMessage, HumanMessage
+from langchain_core.runnables import RunnableConfig
+from langgraph.checkpoint.sqlite import SqliteSaver
+from langgraph.graph import END, START, StateGraph
+from langgraph.graph.message import add_messages
+from typing_extensions import TypedDict
+
+from open_notebook.exceptions import IncompleteGenerationError
+
+EMPTY_REPLIES = ["", "   \n\t", "<think>only reasoning</think>", None]
+
+
+def _sync_model_returning(content: str) -> MagicMock:
+    model = MagicMock()
+    # AIMessage won't accept content=None; some providers still return it.
+    reply = MagicMock(content=None) if content is None else AIMessage(content=content)
+    model.invoke = MagicMock(return_value=reply)
+    return model
+
+
+# --- graph nodes -------------------------------------------------------------
+
+
+@pytest.mark.parametrize("reply", EMPTY_REPLIES)
+def test_notebook_chat_node_rejects_empty_reply(reply):
+    from open_notebook.graphs.chat import call_model_with_messages
+
+    state = {"messages": [HumanMessage(content="hi")], "notebook": None}
+    with patch(
+        "open_notebook.graphs.chat.provision_langchain_model",
+        new=AsyncMock(return_value=_sync_model_returning(reply)),
+    ):
+        with pytest.raises(IncompleteGenerationError, match="empty response"):
+            call_model_with_messages(state, {"configurable": {}})  # type: ignore[arg-type]
+
+
+def test_notebook_chat_node_keeps_nonempty_reply():
+    from open_notebook.graphs.chat import call_model_with_messages
+
+    state = {"messages": [HumanMessage(content="hi")], "notebook": None}
+    with patch(
+        "open_notebook.graphs.chat.provision_langchain_model",
+        new=AsyncMock(return_value=_sync_model_returning("<think>x</think>hello")),
+    ):
+        result = call_model_with_messages(state, {"configurable": {}})  # type: ignore[arg-type]
+    assert result["messages"].content == "hello"
+
+
+@pytest.mark.parametrize("reply", EMPTY_REPLIES)
+def test_source_chat_node_rejects_empty_reply(reply):
+    from open_notebook.graphs.source_chat import call_model_with_source_context
+
+    state = {"source_id": "source:1", "messages": [HumanMessage(content="hi")]}
+    with (
+        patch(
+            "open_notebook.graphs.source_chat.build_source_context",
+            new=AsyncMock(return_value={"sources": [], "insights": []}),
+        ),
+        patch(
+            "open_notebook.graphs.source_chat.provision_langchain_model",
+            new=AsyncMock(return_value=_sync_model_returning(reply)),
+        ),
+    ):
+        with pytest.raises(IncompleteGenerationError, match="empty response"):
+            call_model_with_source_context(state, {"configurable": {}})  # type: ignore[arg-type]
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize("reply", EMPTY_REPLIES)
+async def test_ask_final_answer_rejects_empty_reply(reply):
+    from open_notebook.graphs.ask import ThreadState, write_final_answer
+
+    model = MagicMock()
+    model.ainvoke = AsyncMock(return_value=MagicMock(content=reply))
+    with patch(
+        "open_notebook.graphs.ask.provision_langchain_model",
+        new=AsyncMock(return_value=model),
+    ):
+        with pytest.raises(IncompleteGenerationError, match="empty response"):
+            await write_final_answer(
+                cast(ThreadState, {"question": "q", "answers": ["a"]}),
+                cast(RunnableConfig, {"configurable": {}}),
+            )
+
+
+# --- failed turn: no persisted blank answer, no duplicated question ----------
+
+
+class _State(TypedDict, total=False):
+    messages: Annotated[list, add_messages]
+    source_id: str
+    model_override: str
+    context_indicators: dict
+    context: str
+    notebook: object
+
+
+def _toy_graph(replies: list):
+    """A checkpointed graph whose node raises like the real one on an empty
+    reply, then answers on the next call."""
+
+    def node(state):
+        reply = replies.pop(0)
+        if not reply.strip():
+            raise IncompleteGenerationError("The model returned an empty response.")
+        return {"messages": AIMessage(content=reply)}
+
+    builder = StateGraph(_State)
+    builder.add_node("agent", node)
+    builder.add_edge(START, "agent")
+    builder.add_edge("agent", END)
+    saver = SqliteSaver(sqlite3.connect(":memory:", check_same_thread=False))
+    return builder.compile(checkpointer=saver)
+
+
+async def _events(gen):
+    return [json.loads(chunk[len("data: ") :]) async for chunk in gen]
+
+
+def _history(graph, thread_id):
+    state = graph.get_state(RunnableConfig(configurable={"thread_id": thread_id}))
+    return [(m.type, m.content) for m in state.values.get("messages", [])]
+
+
+@pytest.mark.asyncio
+async def test_source_chat_failed_turn_is_rolled_back_and_retry_is_clean():
+    from api.routers.source_chat import stream_source_chat_response
+
+    graph = _toy_graph(["", "the answer"])
+    with patch("api.routers.source_chat.source_chat_graph", graph):
+        failed = await _events(
+            stream_source_chat_response("chat_session:s", "source:1", "question")
+        )
+        assert failed[-1] == {
+            "type": "error",
+            "message": "The model returned an empty response.",
+        }
+        assert not any(e["type"] == "ai_message" for e in failed)
+        assert _history(graph, "chat_session:s") == []
+
+        retried = await _events(
+            stream_source_chat_response("chat_session:s", "source:1", "question")
+        )
+
+    assert [e["content"] for e in retried if e["type"] == "ai_message"] == [
+        "the answer"
+    ]
+    assert _history(graph, "chat_session:s") == [
+        ("human", "question"),
+        ("ai", "the answer"),
+    ]
+
+
+def test_notebook_chat_failed_turn_is_rolled_back_and_retry_is_clean():
+    from fastapi.testclient import TestClient
+
+    from api.main import app
+
+    client = TestClient(app)
+    graph = _toy_graph(["", "the answer"])
+    session = MagicMock(model_override=None, save=AsyncMock())
+    with (
+        patch("api.routers.chat.chat_graph", graph),
+        patch(
+            "api.routers.chat.get_session_or_404",
+            new=AsyncMock(return_value=("chat_session:n", session)),
+        ),
+        patch("api.routers.chat.repo_query", new=AsyncMock(return_value=[])),
+    ):
+        payload = {"session_id": "chat_session:n", "message": "question", "context": {}}
+        failed = client.post("/api/chat/execute", json=payload)
+        assert failed.status_code >= 400
+        assert "empty response" in failed.json()["detail"]
+        assert _history(graph, "chat_session:n") == []
+
+        retried = client.post("/api/chat/execute", json=payload)
+
+    assert retried.status_code == 200
+    assert _history(graph, "chat_session:n") == [
+        ("human", "question"),
+        ("ai", "the answer"),
+    ]
+
+
+def test_discard_unanswered_message_keeps_earlier_turns():
+    from open_notebook.utils.graph_utils import discard_unanswered_message
+
+    graph = _toy_graph(["first answer", ""])
+    config = RunnableConfig(configurable={"thread_id": "t"})
+    graph.invoke({"messages": [HumanMessage(content="q1", id="h1")]}, config)
+
+    pending = HumanMessage(content="q2", id="h2")
+    with pytest.raises(IncompleteGenerationError):
+        graph.invoke({"messages": [pending]}, config)
+    assert _history(graph, "t")[-1] == ("human", "q2")
+
+    discard_unanswered_message(graph, "t", pending)
+
+    assert _history(graph, "t") == [("human", "q1"), ("ai", "first answer")]
+
+
+def test_discard_unanswered_message_ignores_unknown_ids():
+    from open_notebook.utils.graph_utils import discard_unanswered_message
+
+    graph = _toy_graph(["first answer"])
+    config = RunnableConfig(configurable={"thread_id": "t"})
+    graph.invoke({"messages": [HumanMessage(content="q1", id="h1")]}, config)
+
+    # Never reached the checkpoint (e.g. get_state failed before invoke).
+    discard_unanswered_message(graph, "t", HumanMessage(content="x", id="nope"))
+
+    assert _history(graph, "t") == [("human", "q1"), ("ai", "first answer")]

From 6b4c1f99b50b7f2e1d32b407911c82902decbdcb Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 23:19:46 -0300
Subject: [PATCH 323/345] fix(notebooks,transformations): persist a cleared
 description (#1426)

* fix(notebooks,transformations): persist a cleared description

NotebookHeader and TransformationEditorDialog sent `description || undefined`,
so an empty description was dropped from the update. They now send it as-is
(a cleared transformation title falls back to the name, as on create). The
update endpoints use model_fields_set: an explicit "" or null clears the
field, an absent one leaves it untouched.

Closes #1396

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(transformations): leave title handling unchanged; test notebook clear

The form schema already requires a title, so the empty-title fallback was
unreachable; the title is sent as before. Adds a NotebookHeader test that
clearing the description sends `description: ""`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* test(transformations): clearing the description sends an empty string

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): move entry to avoid merge conflicts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  1 +
 api/routers/notebooks.py                      |  6 +-
 api/routers/transformations.py                |  6 +-
 .../components/NotebookHeader.test.tsx        | 50 +++++++++++
 .../notebooks/components/NotebookHeader.tsx   |  2 +-
 .../TransformationEditorDialog.test.tsx       | 75 ++++++++++++++++
 .../components/TransformationEditorDialog.tsx |  3 +-
 tests/test_clear_description.py               | 87 +++++++++++++++++++
 8 files changed, 224 insertions(+), 6 deletions(-)
 create mode 100644 frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.test.tsx
 create mode 100644 frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.test.tsx
 create mode 100644 tests/test_clear_description.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 54aaee4e..c179f4b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -32,6 +32,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
 - **Bullet and numbered list markers are visible again in the note editor preview.** Tailwind v4's preflight reset removed list markers that the preview library relies on the browser default for; two low-specificity rules restore them without affecting nested-list numbering or task lists (#1300, #1299)
 - Long voice-model names no longer overflow the speaker-profile card in Podcasts → Episode Profiles; the badge truncates with a tooltip (#1259, #1196)
+- Clearing a notebook or transformation description now persists after a refresh: the UI dropped the empty value from the update, and the API now treats an explicit empty or null `description` as a clear while an absent field still leaves it untouched. (#1396)
 - Theme, Language and Sign Out actions in the expanded sidebar footer are left-aligned again (the Theme button was missing the icon padding the others get) (#1288)
 - **YouTube transcript language preference is honored again.** `ContentSettings.youtube_preferred_languages` (exposed via `GET`/`PUT /api/settings`) was silently ignored since the content-core 2.x migration — source processing always used a hardcoded list, so videos with transcripts only in an unlisted language failed to import. The setting now reaches content-core's `youtube_languages`, and both the built-in default and the setting default gained Simplified and Traditional Chinese (`zh-CN`, `zh-TW`). Supersedes #1287
 - **Vector search results are always returned in descending similarity order.** `fn::vector_search` orders inside the function, but the outer `SELECT *` wrapper did not reliably preserve that order for multi-result queries, so `POST /api/search` could return a weaker match first. Results are now re-sorted by similarity in the domain layer (#1306, #1301)
diff --git a/api/routers/notebooks.py b/api/routers/notebooks.py
index 23465e0c..99a5a444 100644
--- a/api/routers/notebooks.py
+++ b/api/routers/notebooks.py
@@ -284,8 +284,10 @@ async def update_notebook(notebook_id: str, notebook_update: NotebookUpdate):
         # Update only provided fields
         if notebook_update.name is not None:
             notebook.name = notebook_update.name
-        if notebook_update.description is not None:
-            notebook.description = notebook_update.description
+        # An explicit "" (or null) clears the description; only an absent
+        # field leaves it untouched.
+        if "description" in notebook_update.model_fields_set:
+            notebook.description = notebook_update.description or ""
         if notebook_update.archived is not None:
             notebook.archived = notebook_update.archived
 
diff --git a/api/routers/transformations.py b/api/routers/transformations.py
index 17970055..b2c5ca52 100644
--- a/api/routers/transformations.py
+++ b/api/routers/transformations.py
@@ -221,8 +221,10 @@ async def update_transformation(
             transformation.name = transformation_update.name
         if transformation_update.title is not None:
             transformation.title = transformation_update.title
-        if transformation_update.description is not None:
-            transformation.description = transformation_update.description
+        # An explicit "" (or null) clears the description; only an absent
+        # field leaves it untouched.
+        if "description" in transformation_update.model_fields_set:
+            transformation.description = transformation_update.description or ""
         if transformation_update.prompt is not None:
             transformation.prompt = transformation_update.prompt
         if transformation_update.apply_default is not None:
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.test.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.test.tsx
new file mode 100644
index 00000000..ca337c39
--- /dev/null
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.test.tsx
@@ -0,0 +1,50 @@
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { NotebookResponse } from '@/lib/types/api'
+import { NotebookHeader } from './NotebookHeader'
+
+const mutateAsync = vi.fn()
+
+vi.mock('@/lib/hooks/use-notebooks', () => ({
+  useUpdateNotebook: () => ({ mutateAsync, mutate: vi.fn() }),
+}))
+
+vi.mock('./NotebookDeleteDialog', () => ({
+  NotebookDeleteDialog: () => null,
+}))
+
+const notebook: NotebookResponse = {
+  id: 'notebook:n1',
+  name: 'My notebook',
+  description: 'old description',
+  archived: false,
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-02T00:00:00Z',
+  source_count: 0,
+  note_count: 0,
+}
+
+describe('NotebookHeader', () => {
+  beforeEach(() => {
+    mutateAsync.mockReset()
+    mutateAsync.mockResolvedValue(undefined)
+  })
+
+  // An empty description used to be sent as `undefined`, i.e. dropped from the
+  // update, so the old text came back after a refresh (#1396).
+  it('sends an empty description when the description is cleared', async () => {
+    render(<NotebookHeader notebook={notebook} />)
+
+    fireEvent.click(screen.getByText('old description'))
+    const textarea = screen.getByDisplayValue('old description')
+    fireEvent.change(textarea, { target: { value: '' } })
+    fireEvent.blur(textarea)
+
+    await waitFor(() =>
+      expect(mutateAsync).toHaveBeenCalledWith({
+        id: 'notebook:n1',
+        data: { description: '' },
+      })
+    )
+  })
+})
diff --git a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
index 78752720..1861c978 100644
--- a/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
+++ b/frontend/src/app/(dashboard)/notebooks/components/NotebookHeader.tsx
@@ -37,7 +37,7 @@ export function NotebookHeader({ notebook }: NotebookHeaderProps) {
     
     await updateNotebook.mutateAsync({
       id: notebook.id,
-      data: { description: description || undefined }
+      data: { description }
     })
   }
 
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.test.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.test.tsx
new file mode 100644
index 00000000..9feefcc8
--- /dev/null
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.test.tsx
@@ -0,0 +1,75 @@
+import { ReactNode } from 'react'
+import { fireEvent, render, screen, waitFor } from '@testing-library/react'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { Transformation } from '@/lib/types/transformations'
+import { TransformationEditorDialog } from './TransformationEditorDialog'
+
+// Radix Select measures its trigger via ResizeObserver, which jsdom lacks.
+class ResizeObserverStub {
+  observe() {}
+  unobserve() {}
+  disconnect() {}
+}
+vi.stubGlobal('ResizeObserver', ResizeObserverStub)
+
+const updateMutateAsync = vi.fn()
+
+const transformation: Transformation = {
+  id: 'transformation:t1',
+  name: 'summary',
+  title: 'Summary',
+  description: 'old description',
+  prompt: 'Summarize',
+  apply_default: false,
+  model_id: null,
+  created: '2026-01-01T00:00:00Z',
+  updated: '2026-01-02T00:00:00Z',
+}
+
+vi.mock('@/lib/hooks/use-transformations', () => ({
+  useTransformation: () => ({ data: transformation, isLoading: false }),
+  useCreateTransformation: () => ({ mutateAsync: vi.fn(), isPending: false }),
+  useUpdateTransformation: () => ({ mutateAsync: updateMutateAsync, isPending: false }),
+  TRANSFORMATION_QUERY_KEYS: { transformation: (id: string) => ['transformations', id] },
+}))
+
+vi.mock('@/lib/hooks/use-models', () => ({
+  useModels: () => ({ data: [], isLoading: false }),
+}))
+
+vi.mock('@/components/ui/markdown-editor', () => ({
+  MarkdownEditor: ({ value, onChange }: { value: string; onChange: (v: string) => void }) => (
+    <textarea aria-label="prompt" value={value} onChange={(e) => onChange(e.target.value)} />
+  ),
+}))
+
+function wrapper({ children }: { children: ReactNode }) {
+  return <QueryClientProvider client={new QueryClient()}>{children}</QueryClientProvider>
+}
+
+describe('TransformationEditorDialog', () => {
+  beforeEach(() => {
+    updateMutateAsync.mockReset()
+    updateMutateAsync.mockResolvedValue(transformation)
+  })
+
+  // A cleared description used to be sent as `undefined`, i.e. dropped from
+  // the update, so the old text came back after a refresh (#1396).
+  it('sends an empty description when the description is cleared', async () => {
+    render(
+      <TransformationEditorDialog open onOpenChange={vi.fn()} transformation={transformation} />,
+      { wrapper }
+    )
+
+    const description = await screen.findByDisplayValue('old description')
+    fireEvent.change(description, { target: { value: '' } })
+    fireEvent.submit(description.closest('form')!)
+
+    await waitFor(() => expect(updateMutateAsync).toHaveBeenCalled())
+    expect(updateMutateAsync.mock.calls[0][0]).toMatchObject({
+      id: 'transformation:t1',
+      data: { description: '', title: 'Summary', name: 'summary' },
+    })
+  })
+})
diff --git a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
index 19da43fb..17e45d8a 100644
--- a/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
+++ b/frontend/src/app/(dashboard)/transformations/components/TransformationEditorDialog.tsx
@@ -117,7 +117,8 @@ export function TransformationEditorDialog({ open, onOpenChange, transformation
         data: {
           name: data.name,
           title: data.title || undefined,
-          description: data.description || undefined,
+          // Send a cleared description as-is so the clear persists.
+          description: data.description ?? '',
           prompt: data.prompt,
           apply_default: Boolean(data.apply_default),
           model_id: data.model_id || null,
diff --git a/tests/test_clear_description.py b/tests/test_clear_description.py
new file mode 100644
index 00000000..53bed652
--- /dev/null
+++ b/tests/test_clear_description.py
@@ -0,0 +1,87 @@
+"""Clearing a notebook or transformation description must persist (#1396).
+
+An explicit "" clears the field; a request without `description` leaves it
+untouched.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+from open_notebook.domain.notebook import Notebook
+from open_notebook.domain.transformation import Transformation
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+def _notebook():
+    return Notebook(id="notebook:n1", name="My notebook", description="old text")
+
+
+def _transformation():
+    return Transformation(
+        id="transformation:t1",
+        name="summary",
+        title="Summary",
+        description="old text",
+        prompt="Summarize",
+        apply_default=False,
+    )
+
+
+@pytest.mark.parametrize(
+    "payload,expected",
+    [
+        ({"description": ""}, ""),
+        ({"description": None}, ""),
+        ({"description": "new text"}, "new text"),
+        ({"name": "Renamed"}, "old text"),
+    ],
+)
+def test_update_notebook_description(client, payload, expected):
+    notebook = _notebook()
+    with (
+        patch(
+            "api.routers.notebooks.Notebook.get", new=AsyncMock(return_value=notebook)
+        ),
+        patch.object(Notebook, "save", new=AsyncMock()) as mock_save,
+        patch("api.routers.notebooks.repo_query", new=AsyncMock(return_value=[])),
+    ):
+        response = client.put("/api/notebooks/notebook:n1", json=payload)
+
+    assert response.status_code == 200
+    mock_save.assert_awaited_once()
+    assert notebook.description == expected
+    assert notebook.model_dump()["description"] == expected
+
+
+@pytest.mark.parametrize(
+    "payload,expected",
+    [
+        ({"description": ""}, ""),
+        ({"description": None}, ""),
+        ({"description": "new text"}, "new text"),
+        ({"prompt": "Summarize briefly"}, "old text"),
+    ],
+)
+def test_update_transformation_description(client, payload, expected):
+    transformation = _transformation()
+    with (
+        patch(
+            "api.routers.transformations.Transformation.get",
+            new=AsyncMock(return_value=transformation),
+        ),
+        patch.object(Transformation, "save", new=AsyncMock()) as mock_save,
+    ):
+        response = client.put("/api/transformations/transformation:t1", json=payload)
+
+    assert response.status_code == 200
+    mock_save.assert_awaited_once()
+    assert transformation.description == expected
+    assert response.json()["description"] == expected

From 5f021c5405f825a7201f92e6d5fb92f546c3b503 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Fri, 2 Oct 2026 23:20:23 -0300
Subject: [PATCH 324/345] fix(transformations): refuse to run on sources with
 no text (#1425)

* fix(transformations): refuse to run on sources with no text

create_source_insight now returns 400 when the source's full_text is empty
or whitespace, so no job is queued, and run_transformation raises
InvalidInputError before calling the model as defence in depth. The source
detail view shows the server's reason instead of a generic error toast.

Closes #1394

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(transformations): raise InvalidInputError for empty sources

Uses the registered typed-exception handler instead of a bare HTTPException.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(transformations): address review on empty-source guard

- Worker: InvalidInputError is a permanent failure for run_transformation
  (stop_on + re-raise), so an empty source is not retried five times.
- Graph message is neutral ("There is no text content to transform"); it
  also guards the direct /transformations/execute path.
- UI: the empty-source error is mapped to a translated apiErrors key in all
  locales, and a network error without a server detail keeps the localized
  generic message.
- Tests assert the exact queued command and the worker's permanent failure.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(transformations): skip whitespace-only text in source processing

- transform_content (source graph) skips whitespace-only text like empty
  text, so process_source never hits the transformation graph's guard.
- The graph's message maps to the same translated key, and the polled
  command failure toast goes through getApiErrorMessage.
- Rename the worker test to what it checks (permanent-failure handling).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): move entry to avoid merge conflicts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* test(frontend): cover the empty-source error mapping

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   1 +
 api/routers/sources.py                        |   5 +
 commands/source_commands.py                   |   5 +-
 .../sources/SourceDetailContent.tsx           |   9 +-
 frontend/src/lib/locales/bn-IN/index.ts       |   1 +
 frontend/src/lib/locales/ca-ES/index.ts       |   1 +
 frontend/src/lib/locales/de-DE/index.ts       |   1 +
 frontend/src/lib/locales/en-US/index.ts       |   1 +
 frontend/src/lib/locales/es-ES/index.ts       |   1 +
 frontend/src/lib/locales/fr-FR/index.ts       |   1 +
 frontend/src/lib/locales/it-IT/index.ts       |   1 +
 frontend/src/lib/locales/ja-JP/index.ts       |   1 +
 frontend/src/lib/locales/pl-PL/index.ts       |   1 +
 frontend/src/lib/locales/pt-BR/index.ts       |   1 +
 frontend/src/lib/locales/ru-RU/index.ts       |   1 +
 frontend/src/lib/locales/tr-TR/index.ts       |   1 +
 frontend/src/lib/locales/zh-CN/index.ts       |   1 +
 frontend/src/lib/locales/zh-TW/index.ts       |   1 +
 frontend/src/lib/utils/error-handler.test.ts  |  24 ++++
 frontend/src/lib/utils/error-handler.ts       |   2 +
 open_notebook/graphs/source.py                |   4 +-
 open_notebook/graphs/transformation.py        |  11 +-
 tests/test_create_insight_empty_source.py     | 114 ++++++++++++++++++
 tests/test_graphs.py                          |  29 +++++
 24 files changed, 212 insertions(+), 6 deletions(-)
 create mode 100644 frontend/src/lib/utils/error-handler.test.ts
 create mode 100644 tests/test_create_insight_empty_source.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c179f4b2..3f914a79 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -29,6 +29,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - A source embedding job that fails part-way through the batched insert now removes the embeddings it already wrote, so the source is no longer shown as embedded while search only sees part of it (#1390)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
 - **Source Chat streaming no longer drops or corrupts tokens.** The SSE reader decoded each network chunk in isolation, so a `data:` line split across two chunks was silently discarded and a multibyte character straddling a chunk boundary rendered as `�`. The reader now keeps a carry-over buffer and streaming decoder, matching the pattern Ask already used (#1289)
+- **Transformations no longer run on sources with no text.** A source whose extraction produced nothing (e.g. a link that failed to fetch) used to send the model an empty input and save whatever it invented as an insight. Generating an insight on such a source now returns "Source has no text content" and nothing is queued; the transformation graph rejects empty content too (#1394)
 - **Markdown editor follows the app theme.** The note editor's preview/edit surface was hardcoded to light mode, making it unreadable in dark mode; it now tracks the effective theme, gated on store hydration so there is no light flash before the persisted theme loads (#1294, #1268)
 - **Bullet and numbered list markers are visible again in the note editor preview.** Tailwind v4's preflight reset removed list markers that the preview library relies on the browser default for; two low-specificity rules restore them without affecting nested-list numbering or task lists (#1300, #1299)
 - Long voice-model names no longer overflow the speaker-profile card in Podcasts → Episode Profiles; the badge truncates with a tooltip (#1259, #1196)
diff --git a/api/routers/sources.py b/api/routers/sources.py
index a7abb149..57515a17 100644
--- a/api/routers/sources.py
+++ b/api/routers/sources.py
@@ -1120,6 +1120,11 @@ async def create_source_insight(source_id: str, request: CreateSourceInsightRequ
         if not source:
             raise HTTPException(status_code=404, detail="Source not found")
 
+        # Don't queue a transformation the model can only answer by inventing
+        # content (e.g. a link that failed to fetch).
+        if not source.full_text or not source.full_text.strip():
+            raise InvalidInputError("Source has no text content")
+
         # Validate transformation exists
         transformation = await Transformation.get(request.transformation_id)
         if not transformation:
diff --git a/commands/source_commands.py b/commands/source_commands.py
index 42148ae5..8f59929e 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -12,6 +12,7 @@ from open_notebook.exceptions import (
     ConfigurationError,
     ContextLengthExceededError,
     IncompleteGenerationError,
+    InvalidInputError,
 )
 
 try:
@@ -191,6 +192,7 @@ class RunTransformationOutput(CommandOutput):
             ConfigurationError,
             ContextLengthExceededError,
             IncompleteGenerationError,
+            InvalidInputError,
         ],  # Don't retry validation/config errors or incomplete generations
         "retry_log_level": "warning",
     },
@@ -255,7 +257,8 @@ async def run_transformation_command(
             processing_time=processing_time,
         )
 
-    except IncompleteGenerationError as e:
+    except (IncompleteGenerationError, InvalidInputError) as e:
+        # e.g. the source has no text to transform
         logger.error(
             f"Generation failed (permanent) for transformation "
             f"{input_data.transformation_id} on source {input_data.source_id}: {e}"
diff --git a/frontend/src/components/sources/SourceDetailContent.tsx b/frontend/src/components/sources/SourceDetailContent.tsx
index 964f37b1..1d44da1e 100644
--- a/frontend/src/components/sources/SourceDetailContent.tsx
+++ b/frontend/src/components/sources/SourceDetailContent.tsx
@@ -13,7 +13,7 @@ import { SourceDetailResponse } from '@/lib/types/api'
 import { Transformation } from '@/lib/types/transformations'
 import { LoadingSpinner } from '@/components/common/LoadingSpinner'
 import { ContentUnavailable } from '@/components/common/ContentUnavailable'
-import { isNotFoundError } from '@/lib/utils/error-handler'
+import { getApiErrorMessage, isNotFoundError } from '@/lib/utils/error-handler'
 import { InlineEdit } from '@/components/common/InlineEdit'
 import { Button } from '@/components/ui/button'
 import { Badge } from '@/components/ui/badge'
@@ -195,7 +195,7 @@ function SourceDetailContentInner({
           // Invalidate sources queries so notebook page refreshes with updated insights_count
           queryClient.invalidateQueries({ queryKey: ['sources'] })
           if (status?.status !== 'completed') {
-            toast.error(status?.error_message || t('common.error'))
+            toast.error(getApiErrorMessage(status?.error_message ?? '', (key) => t(key), 'common.error'))
           }
         }).catch(err => {
           if (controller.signal.aborted) return
@@ -221,7 +221,10 @@ function SourceDetailContentInner({
     } catch (err) {
       if (controller.signal.aborted) return
       console.error('Failed to create insight:', err)
-      toast.error(t('common.error'))
+      // Show the server's reason when there is one; a network error has no
+      // detail and keeps the localized generic message.
+      const detail = (err as { response?: { data?: { detail?: string } } })?.response?.data?.detail
+      toast.error(getApiErrorMessage(detail ?? '', (key) => t(key), 'common.error'))
       if (insightPollingRef.current === controller) {
         insightPollingRef.current = null
       }
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 10ddb5d4..4d71787f 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -173,6 +173,7 @@ export const bnIN = {
     answerModelNotFound: "Answer মডেল খুঁজে পাওয়া যায়নি",
     finalAnswerModelNotFound: "Final answer মডেল খুঁজে পাওয়া যায়নি",
     noAnswerGenerated: "কোনো উত্তর তৈরি করা যায়নি",
+    sourceHasNoText: "এই উৎসে রূপান্তর করার মতো কোনো লেখা নেই",
     genericError: "একটি অপ্রত্যাশিত ত্রুটি ঘটেছে",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index a3c5c02c..0defc9d2 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -173,6 +173,7 @@ export const caES = {
     answerModelNotFound: "No s'ha trobat el model de resposta",
     finalAnswerModelNotFound: "No s'ha trobat el model de resposta final",
     noAnswerGenerated: "No s'ha pogut generar cap resposta",
+    sourceHasNoText: "Aquesta font no té contingut de text per transformar",
     genericError: "S'ha produït un error inesperat",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 820da99e..7b757a9c 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -176,6 +176,7 @@ export const deDE = {
     answerModelNotFound: "Antwortmodell nicht gefunden",
     finalAnswerModelNotFound: "Modell für die finale Antwort nicht gefunden",
     noAnswerGenerated: "Es konnte keine Antwort erzeugt werden",
+    sourceHasNoText: "Diese Quelle enthält keinen Text, der transformiert werden kann",
     genericError: "Es ist ein unerwarteter Fehler aufgetreten",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 52d57384..4c7a1b6a 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -171,6 +171,7 @@ export const enUS = {
     answerModelNotFound: "Answer model not found",
     finalAnswerModelNotFound: "Final answer model not found",
     noAnswerGenerated: "No answer could be generated",
+    sourceHasNoText: "This source has no text content to transform",
     genericError: "An unexpected error occurred",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index e515f16a..b87770e7 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -173,6 +173,7 @@ export const esES = {
     answerModelNotFound: "Modelo de respuesta no encontrado",
     finalAnswerModelNotFound: "Modelo de respuesta final no encontrado",
     noAnswerGenerated: "No se pudo generar una respuesta",
+    sourceHasNoText: "Esta fuente no tiene contenido de texto para transformar",
     genericError: "Ocurrió un error inesperado",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 53930b64..baec20c8 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -173,6 +173,7 @@ export const frFR = {
     answerModelNotFound: "Modèle de réponse introuvable",
     finalAnswerModelNotFound: "Modèle de réponse finale introuvable",
     noAnswerGenerated: "Aucune réponse n'a pu être générée",
+    sourceHasNoText: "Cette source n'a aucun contenu textuel à transformer",
     genericError: "Une erreur inattendue est survenue",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 38b9744c..ed7cdfd0 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -173,6 +173,7 @@ export const itIT = {
     answerModelNotFound: "Modello risposta non trovato",
     finalAnswerModelNotFound: "Modello risposta finale non trovato",
     noAnswerGenerated: "Nessuna risposta generata",
+    sourceHasNoText: "Questa fonte non ha contenuto testuale da trasformare",
     genericError: "Si è verificato un errore imprevisto",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 04db0c60..66cb3142 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -173,6 +173,7 @@ export const jaJP = {
     answerModelNotFound: "回答モデルが見つかりません",
     finalAnswerModelNotFound: "最終回答モデルが見つかりません",
     noAnswerGenerated: "回答を生成できませんでした",
+    sourceHasNoText: "このソースには変換するテキストがありません",
     genericError: "予期しないエラーが発生しました",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 9cf10984..4c4ae208 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -173,6 +173,7 @@ export const plPL = {
     answerModelNotFound: "Nie znaleziono modelu odpowiedzi",
     finalAnswerModelNotFound: "Nie znaleziono modelu ostatecznej odpowiedzi",
     noAnswerGenerated: "Nie udało się wygenerować odpowiedzi",
+    sourceHasNoText: "To źródło nie zawiera tekstu do przekształcenia",
     genericError: "Wystąpił nieoczekiwany błąd",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 7149bbd0..7f31c0f3 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -173,6 +173,7 @@ export const ptBR = {
     answerModelNotFound: "Modelo de resposta não encontrado",
     finalAnswerModelNotFound: "Modelo de resposta final não encontrado",
     noAnswerGenerated: "Nenhuma resposta pôde ser gerada",
+    sourceHasNoText: "Esta fonte não tem conteúdo de texto para transformar",
     genericError: "Ocorreu um erro inesperado",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index c1094267..696ba682 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -173,6 +173,7 @@ export const ruRU = {
     answerModelNotFound: "Модель ответов не найдена",
     finalAnswerModelNotFound: "Модель итогового ответа не найдена",
     noAnswerGenerated: "Не удалось сгенерировать ответ",
+    sourceHasNoText: "В этом источнике нет текста для преобразования",
     genericError: "Произошла непредвиденная ошибка",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index ee081e28..c4953257 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -173,6 +173,7 @@ export const trTR = {
     answerModelNotFound: "Yanıt modeli bulunamadı",
     finalAnswerModelNotFound: "Son yanıt modeli bulunamadı",
     noAnswerGenerated: "Yanıt oluşturulamadı",
+    sourceHasNoText: "Bu kaynakta dönüştürülecek metin içeriği yok",
     genericError: "Beklenmeyen bir hata oluştu",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index f4936463..db4fc925 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -173,6 +173,7 @@ export const zhCN = {
     answerModelNotFound: "未找到回答模型",
     finalAnswerModelNotFound: "未找到最终回答模型",
     noAnswerGenerated: "未能生成回答",
+    sourceHasNoText: "此来源没有可转换的文本内容",
     genericError: "发生了意外错误",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index a5b27102..4800ca2a 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -173,6 +173,7 @@ export const zhTW = {
     answerModelNotFound: "未找到回答模型",
     finalAnswerModelNotFound: "未找到最終回答模型",
     noAnswerGenerated: "未能生成回答",
+    sourceHasNoText: "此來源沒有可轉換的文字內容",
     genericError: "發生了意外錯誤",
   },
   connectionErrors: {
diff --git a/frontend/src/lib/utils/error-handler.test.ts b/frontend/src/lib/utils/error-handler.test.ts
new file mode 100644
index 00000000..1e672e50
--- /dev/null
+++ b/frontend/src/lib/utils/error-handler.test.ts
@@ -0,0 +1,24 @@
+import { describe, expect, it } from 'vitest'
+import { getApiErrorMessage } from './error-handler'
+
+const t = (key: string) => `t:${key}`
+
+describe('getApiErrorMessage', () => {
+  // Insight generation on a source with no text (#1394): the API's 400 detail
+  // and the worker's failure message both map to one translated string.
+  it.each(['Source has no text content', 'There is no text content to transform'])(
+    'maps %j to the translated empty-source message',
+    (detail) => {
+      expect(getApiErrorMessage(detail, t, 'common.error')).toBe('t:apiErrors.sourceHasNoText')
+    }
+  )
+
+  it('falls back to the given key when there is no server detail', () => {
+    // SourceDetailContent passes '' for a network error with no response.
+    expect(getApiErrorMessage('', t, 'common.error')).toBe('t:common.error')
+  })
+
+  it('returns an unmapped server detail as is', () => {
+    expect(getApiErrorMessage('Something specific', t, 'common.error')).toBe('Something specific')
+  })
+})
diff --git a/frontend/src/lib/utils/error-handler.ts b/frontend/src/lib/utils/error-handler.ts
index fed06f0b..df316654 100644
--- a/frontend/src/lib/utils/error-handler.ts
+++ b/frontend/src/lib/utils/error-handler.ts
@@ -35,6 +35,8 @@ export const ERROR_MAP: Record<string, string> = {
   "Answer model": "apiErrors.answerModelNotFound",
   "Final answer model": "apiErrors.finalAnswerModelNotFound",
   "No answer generated": "apiErrors.noAnswerGenerated",
+  "Source has no text content": "apiErrors.sourceHasNoText",
+  "There is no text content to transform": "apiErrors.sourceHasNoText",
 };
 
 /**
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index bee10b3b..e98a2077 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -257,7 +257,9 @@ def trigger_transformations(state: SourceState, config: RunnableConfig) -> List[
 async def transform_content(state: TransformationState) -> Optional[dict]:
     source = state["source"]
     content = source.full_text
-    if not content:
+    # Whitespace-only text would hit the transformation graph's empty-content
+    # guard; skip it here like empty text.
+    if not content or not content.strip():
         return None
     transformation: Transformation = state["transformation"]
 
diff --git a/open_notebook/graphs/transformation.py b/open_notebook/graphs/transformation.py
index d5811eaf..89e7ee26 100644
--- a/open_notebook/graphs/transformation.py
+++ b/open_notebook/graphs/transformation.py
@@ -7,7 +7,11 @@ from typing_extensions import TypedDict
 from open_notebook.ai.provision import provision_langchain_model
 from open_notebook.domain.notebook import Source
 from open_notebook.domain.transformation import DefaultPrompts, Transformation
-from open_notebook.exceptions import IncompleteGenerationError, OpenNotebookError
+from open_notebook.exceptions import (
+    IncompleteGenerationError,
+    InvalidInputError,
+    OpenNotebookError,
+)
 from open_notebook.utils import clean_thinking_content
 from open_notebook.utils.error_classifier import classify_error
 from open_notebook.utils.text_utils import extract_text_content
@@ -30,6 +34,11 @@ async def run_transformation(state: dict, config: RunnableConfig) -> dict:
     try:
         if not content:
             content = source.full_text
+        if not content or not str(content).strip():
+            # A source whose extraction produced no text would hand the model
+            # an empty input, and whatever it invents would be saved as an
+            # insight.
+            raise InvalidInputError("There is no text content to transform")
         # transformation.prompt is user-controlled free text. Never compile it as
         # Jinja template *source* (Prompter(template_text=...)) - pass it as a
         # plain render variable into a fixed, developer-authored template instead.
diff --git a/tests/test_create_insight_empty_source.py b/tests/test_create_insight_empty_source.py
new file mode 100644
index 00000000..3f52d14f
--- /dev/null
+++ b/tests/test_create_insight_empty_source.py
@@ -0,0 +1,114 @@
+"""POST /sources/{id}/insights refuses sources with no text, so the
+transformation job is never queued (#1394)."""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+from fastapi.testclient import TestClient
+
+
+@pytest.fixture
+def client():
+    from api.main import app
+
+    return TestClient(app)
+
+
+@pytest.mark.parametrize("full_text", [None, "", "  \n "])
+def test_source_without_text_returns_400_and_queues_nothing(client, full_text):
+    with (
+        patch(
+            "api.routers.sources.Source.get",
+            new=AsyncMock(return_value=SimpleNamespace(full_text=full_text)),
+        ),
+        patch("api.routers.sources.Transformation.get", new=AsyncMock()),
+        patch("api.routers.sources.submit_command", new=MagicMock()) as mock_submit,
+    ):
+        response = client.post(
+            "/api/sources/source:abc/insights",
+            json={"transformation_id": "transformation:t1"},
+        )
+
+    assert response.status_code == 400
+    assert response.json()["detail"] == "Source has no text content"
+    mock_submit.assert_not_called()
+
+
+def test_source_with_text_is_queued(client):
+    with (
+        patch(
+            "api.routers.sources.Source.get",
+            new=AsyncMock(return_value=SimpleNamespace(full_text="some text")),
+        ),
+        patch("api.routers.sources.Transformation.get", new=AsyncMock()),
+        patch(
+            "api.routers.sources.submit_command",
+            new=MagicMock(return_value="command:1"),
+        ) as mock_submit,
+    ):
+        response = client.post(
+            "/api/sources/source:abc/insights",
+            json={"transformation_id": "transformation:t1"},
+        )
+
+    assert response.status_code == 202
+    mock_submit.assert_called_once_with(
+        "open_notebook",
+        "run_transformation",
+        {"source_id": "source:abc", "transformation_id": "transformation:t1"},
+    )
+
+
+@pytest.mark.asyncio
+async def test_worker_treats_invalid_input_as_permanent():
+    """An InvalidInputError from the graph (e.g. its empty-content guard) ends
+    the job as failed: re-raised, and in stop_on so it is not retried. The
+    guard itself is covered in tests/test_graphs.py."""
+    from commands.source_commands import (
+        RunTransformationInput,
+        run_transformation_command,
+    )
+    from open_notebook.exceptions import InvalidInputError
+
+    with (
+        patch(
+            "commands.source_commands.Source.get",
+            new=AsyncMock(return_value=SimpleNamespace(full_text="")),
+        ),
+        patch(
+            "commands.source_commands.Transformation.get",
+            new=AsyncMock(return_value=SimpleNamespace(model_id=None)),
+        ),
+        patch(
+            "commands.source_commands.transform_graph.ainvoke",
+            new=AsyncMock(
+                side_effect=InvalidInputError("There is no text content to transform")
+            ),
+        ),
+    ):
+        with pytest.raises(InvalidInputError):
+            await run_transformation_command(
+                RunTransformationInput(
+                    source_id="source:abc", transformation_id="transformation:t1"
+                )
+            )
+
+
+@pytest.mark.asyncio
+async def test_source_processing_skips_transformations_on_whitespace_text():
+    """process_source applies default transformations through the source graph;
+    whitespace-only text is skipped there instead of failing the job."""
+    from open_notebook.graphs.source import transform_content
+
+    source = SimpleNamespace(full_text="  \n ", add_insight=AsyncMock())
+    with patch(
+        "open_notebook.graphs.source.transform_graph.ainvoke", new=AsyncMock()
+    ) as mock_invoke:
+        result = await transform_content(
+            {"source": source, "transformation": SimpleNamespace(name="t")}  # type: ignore[typeddict-item]
+        )
+
+    assert result is None
+    mock_invoke.assert_not_called()
+    source.add_insight.assert_not_called()
diff --git a/tests/test_graphs.py b/tests/test_graphs.py
index 5199b522..ca75922c 100644
--- a/tests/test_graphs.py
+++ b/tests/test_graphs.py
@@ -148,6 +148,35 @@ class TestTransformationGraph:
         with pytest.raises(AssertionError, match="No content to transform"):
             await run_transformation(state, config)
 
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize("full_text", ["", "   \n\t ", None])
+    async def test_run_transformation_rejects_source_without_text(self, full_text):
+        """A source with no extracted text must not reach the model, and no
+        insight is saved (#1394)."""
+        from open_notebook.domain.transformation import Transformation
+        from open_notebook.exceptions import InvalidInputError
+
+        mock_source = MagicMock(spec=Source)
+        mock_source.full_text = full_text
+        mock_source.add_insight = AsyncMock()
+
+        state = {
+            "input_text": None,
+            "transformation": MagicMock(spec=Transformation),
+            "source": mock_source,
+        }
+        config: RunnableConfig = {"configurable": {"model_id": None}}
+
+        with patch(
+            "open_notebook.graphs.transformation.provision_langchain_model",
+            new_callable=AsyncMock,
+        ) as mock_provision:
+            with pytest.raises(InvalidInputError, match="no text content"):
+                await run_transformation(state, config)
+
+        mock_provision.assert_not_called()
+        mock_source.add_insight.assert_not_called()
+
     def test_transformation_graph_compilation(self):
         """Test that transformation graph compiles correctly."""
         assert transformation_graph is not None

From e2a76dd6cab881c75ff61c8983bb80b065cf400a Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 07:12:25 -0300
Subject: [PATCH 325/345] style: ruff format the Python codebase and gate it in
 CI (#1429)

* style: apply ruff format to the Python codebase

Formatting only, no behaviour change: `uv run ruff format .` with the repo's
existing ruff 0.14.13 config. One `# type: ignore[arg-type]` in
open_notebook/graphs/ask.py moves onto the argument line the formatter split
out, so mypy keeps applying it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* ci: fail the Backend Lint job on unformatted Python

Adds `ruff format --check .` after `ruff check .`, matching the existing
ruff-format pre-commit hook, and updates the docs that said formatting was
not gated yet.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/workflows/test.yml                    |   3 +
 .pre-commit-config.yaml                       |   5 +-
 AGENTS.md                                     |   2 +-
 CHANGELOG.md                                  |   1 +
 api/routers/auth.py                           |   2 +-
 api/routers/commands.py                       |  16 +-
 api/routers/episode_profiles.py               |  20 +-
 api/routers/insights.py                       |   4 +-
 api/routers/models.py                         |  27 +-
 api/routers/podcasts.py                       |  20 +-
 api/routers/settings.py                       |   8 +-
 api/routers/source_chat.py                    |  42 +-
 api/routers/speaker_profiles.py               |  20 +-
 commands/podcast_commands.py                  |  28 +-
 docs/7-DEVELOPMENT/development-setup.md       |   2 +-
 open_notebook/AGENTS.md                       |   2 +-
 open_notebook/ai/connection_tester.py         |  74 ++-
 open_notebook/ai/model_discovery.py           |  12 +-
 open_notebook/ai/models.py                    |   4 +-
 open_notebook/ai/provider_registry.py         | 430 +++++++++---------
 open_notebook/config.py                       |   4 +-
 open_notebook/database/async_migrate.py       |  60 +--
 open_notebook/domain/base.py                  |   7 +-
 open_notebook/domain/notebook.py              |   8 +-
 open_notebook/domain/provider_config.py       |   4 +-
 open_notebook/graphs/ask.py                   |   4 +-
 open_notebook/podcasts/models.py              |   8 +-
 open_notebook/utils/context_builder.py        |  23 +-
 open_notebook/utils/embedding.py              |   4 +-
 open_notebook/utils/error_classifier.py       |  34 +-
 open_notebook/utils/graph_utils.py            |   6 +-
 open_notebook/utils/url_validation.py         |  16 +-
 open_notebook/utils/version_utils.py          |   5 +-
 tests/test_add_insight_failure_propagation.py |   8 +-
 tests/test_anthropic_compatible_provider.py   |  17 +-
 tests/test_capabilities_api.py                |   8 +-
 tests/test_chat_routers_characterization.py   |   4 +-
 tests/test_chunking.py                        |  22 +-
 tests/test_connection_test_classification.py  |  11 +-
 tests/test_cors_credentials.py                |  13 +-
 tests/test_credentials_api.py                 |  50 +-
 tests/test_crud_404.py                        |  29 +-
 tests/test_embedding.py                       |  13 +-
 tests/test_error_message_sanitization.py      |   4 +-
 tests/test_max_body_size_middleware.py        |   8 +-
 tests/test_model_discovery.py                 |  22 +-
 tests/test_models_api.py                      |  77 +++-
 tests/test_note_save_embed_resilience.py      |  26 +-
 tests/test_notes_api.py                       |   4 +-
 tests/test_podcast_audio_containment.py       |   4 +-
 tests/test_podcast_audio_paths.py             |   4 +-
 .../test_podcast_episode_model_resolution.py  |   4 +-
 tests/test_podcast_job_status_batching.py     |   4 +-
 tests/test_podcast_legacy_field_removal.py    |   4 +-
 tests/test_podcast_path.py                    |   4 +-
 tests/test_podcast_speaker_profile.py         |  11 +-
 tests/test_runtime_capabilities.py            |  19 +-
 tests/test_source_create_array_limits.py      |   8 +-
 tests/test_sources_api.py                     |  33 +-
 tests/test_transformations_api.py             |   8 +-
 tests/test_typed_exceptions_reach_handlers.py | 104 ++++-
 tests/test_upload_toctou_race.py              |   8 +-
 tests/test_upload_type_mitigations.py         |  24 +-
 tests/test_url_validation.py                  |   4 +-
 tests/test_vertex_credentials_file_oracle.py  |  24 +-
 65 files changed, 856 insertions(+), 632 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a56494a6..2c295acc 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -62,6 +62,9 @@ jobs:
       - name: Run ruff
         run: uv run ruff check .
 
+      - name: Check formatting
+        run: uv run ruff format --check .
+
   backend-typecheck:
     name: Backend Typecheck
     runs-on: ubuntu-latest
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index e58aae32..925349db 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -28,9 +28,8 @@ repos:
       # --fix; the local auto-fix saves iteration with no drift risk.
       - id: ruff
         args: [--fix]
-      # `ruff format --check` — fails if files don't match ruff's formatter.
-      # Run `ruff format .` to fix. Not yet gated in CI but uses the exact
-      # same tool config, so there is no drift.
+      # `ruff format` — reformats files to match ruff's formatter. CI runs
+      # `ruff format --check .` with the same tool config, so there is no drift.
       - id: ruff-format
 
   # ── Mypy: Python type check (mirrors CI backend-typecheck job) ────
diff --git a/AGENTS.md b/AGENTS.md
index 4aaabed3..5070a3bc 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -20,7 +20,7 @@ Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
 ## Commands
 
 - Tests: `uv run pytest tests/`
-- Python lint/typecheck: `ruff check . --fix` · `uv run python -m mypy .`
+- Python lint/format/typecheck: `ruff check . --fix` · `ruff format .` · `uv run python -m mypy .`
 - Frontend (inside `frontend/`): `npm run lint` · `npm run test` · `npm run build`
 - Docker release: `make docker-release` (see `.github/RELEASE_PROCESS.md`)
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3f914a79..c7940612 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
+- Python code is now formatted with `ruff format` across the repository, and CI fails when it isn't (`ruff format --check .` in the Backend Lint job). Formatting-only change (59 files); run `uv run ruff format .` before pushing
 
 ### Fixed
 - API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
diff --git a/api/routers/auth.py b/api/routers/auth.py
index 363323a1..02206be0 100644
--- a/api/routers/auth.py
+++ b/api/routers/auth.py
@@ -24,4 +24,4 @@ async def get_auth_status():
         "message": "Authentication is required"
         if auth_enabled
         else "Authentication is disabled",
-    }
\ No newline at end of file
+    }
diff --git a/api/routers/commands.py b/api/routers/commands.py
index fabd6fb8..b3ef3ccf 100644
--- a/api/routers/commands.py
+++ b/api/routers/commands.py
@@ -73,9 +73,7 @@ async def execute_command(request: CommandExecutionRequest):
         raise
     except Exception as e:
         logger.error(f"Error submitting command: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to submit command"
-        )
+        raise HTTPException(status_code=500, detail="Failed to submit command")
 
 
 @router.get("/commands/jobs/{job_id}", response_model=CommandJobStatusResponse)
@@ -91,9 +89,7 @@ async def get_command_job_status(job_id: str):
         raise
     except Exception as e:
         logger.error(f"Error fetching job status: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch job status"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch job status")
 
 
 @router.get("/commands/jobs", response_model=List[Dict[str, Any]])
@@ -115,9 +111,7 @@ async def list_command_jobs(
         raise
     except Exception as e:
         logger.error(f"Error listing command jobs: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to list command jobs"
-        )
+        raise HTTPException(status_code=500, detail="Failed to list command jobs")
 
 
 @router.delete("/commands/jobs/{job_id}")
@@ -133,9 +127,7 @@ async def cancel_command_job(job_id: str):
         raise
     except Exception as e:
         logger.error(f"Error cancelling command job: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to cancel command job"
-        )
+        raise HTTPException(status_code=500, detail="Failed to cancel command job")
 
 
 @router.get("/commands/registry/debug")
diff --git a/api/routers/episode_profiles.py b/api/routers/episode_profiles.py
index 99974cac..a43d44d4 100644
--- a/api/routers/episode_profiles.py
+++ b/api/routers/episode_profiles.py
@@ -90,9 +90,7 @@ async def list_episode_profiles():
         raise
     except Exception as e:
         logger.error(f"Failed to fetch episode profiles: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch episode profiles"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch episode profiles")
 
 
 @router.get("/episode-profiles/{profile_name}", response_model=EpisodeProfileResponse)
@@ -116,9 +114,7 @@ async def get_episode_profile(profile_name: str):
         raise
     except Exception as e:
         logger.error(f"Failed to fetch episode profile '{profile_name}': {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch episode profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch episode profile")
 
 
 class EpisodeProfileCreate(BaseModel):
@@ -170,9 +166,7 @@ async def create_episode_profile(profile_data: EpisodeProfileCreate):
         raise
     except Exception as e:
         logger.error(f"Failed to create episode profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to create episode profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to create episode profile")
 
 
 @router.put("/episode-profiles/{profile_id}", response_model=EpisodeProfileResponse)
@@ -206,9 +200,7 @@ async def update_episode_profile(profile_id: str, profile_data: EpisodeProfileCr
         raise
     except Exception as e:
         logger.error(f"Failed to update episode profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to update episode profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to update episode profile")
 
 
 @router.delete("/episode-profiles/{profile_id}")
@@ -232,9 +224,7 @@ async def delete_episode_profile(profile_id: str):
         raise
     except Exception as e:
         logger.error(f"Failed to delete episode profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to delete episode profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to delete episode profile")
 
 
 @router.post(
diff --git a/api/routers/insights.py b/api/routers/insights.py
index 9a4db7ba..6e95736b 100644
--- a/api/routers/insights.py
+++ b/api/routers/insights.py
@@ -89,6 +89,4 @@ async def save_insight_as_note(insight_id: str, request: SaveAsNoteRequest):
         raise
     except Exception as e:
         logger.error(f"Error saving insight {insight_id} as note: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Error saving insight as note"
-        )
+        raise HTTPException(status_code=500, detail="Error saving insight as note")
diff --git a/api/routers/models.py b/api/routers/models.py
index 85aed8ce..4829dd5a 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -448,12 +448,11 @@ async def get_provider_availability():
             or _check_openai_compatible_support("STT")
             or _check_openai_compatible_support("TTS")
         )
-        provider_status["anthropic_compatible"] = (
-            await _check_provider_has_credential("anthropic_compatible")
-            or (
-                bool((os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL") or "").strip())
-                and bool((os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY") or "").strip())
-            )
+        provider_status["anthropic_compatible"] = await _check_provider_has_credential(
+            "anthropic_compatible"
+        ) or (
+            bool((os.environ.get("ANTHROPIC_COMPATIBLE_BASE_URL") or "").strip())
+            and bool((os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY") or "").strip())
         )
 
         available_providers = [k for k, v in provider_status.items() if v]
@@ -531,9 +530,7 @@ async def get_provider_availability():
 # =============================================================================
 
 
-@router.get(
-    "/models/discover/{provider}", response_model=List[DiscoveredModelResponse]
-)
+@router.get("/models/discover/{provider}", response_model=List[DiscoveredModelResponse])
 async def discover_models(provider: str):
     """
     Discover available models from a provider without registering them.
@@ -562,7 +559,8 @@ async def discover_models(provider: str):
     except Exception as e:
         logger.error(f"Error discovering models for {provider}: {str(e)}")
         raise HTTPException(
-            status_code=500, detail="Error discovering models. Check server logs for details."
+            status_code=500,
+            detail="Error discovering models. Check server logs for details.",
         )
 
 
@@ -594,7 +592,10 @@ async def sync_models(provider: str):
         raise
     except Exception as e:
         logger.error(f"Error syncing models for {provider}: {str(e)}")
-        raise HTTPException(status_code=500, detail="Error syncing models. Check server logs for details.")
+        raise HTTPException(
+            status_code=500,
+            detail="Error syncing models. Check server logs for details.",
+        )
 
 
 @router.post("/models/sync", response_model=AllProvidersSyncResponse)
@@ -699,9 +700,7 @@ async def get_models_by_provider(provider: str):
         raise
     except Exception as e:
         logger.error(f"Error fetching models for {provider}: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail=f"Error fetching models: {str(e)}"
-        )
+        raise HTTPException(status_code=500, detail=f"Error fetching models: {str(e)}")
 
 
 def _get_preferred_model(
diff --git a/api/routers/podcasts.py b/api/routers/podcasts.py
index e055412b..e2252e76 100644
--- a/api/routers/podcasts.py
+++ b/api/routers/podcasts.py
@@ -151,9 +151,7 @@ async def generate_podcast(request: PodcastGenerationRequest):
         raise
     except Exception as e:
         logger.error(f"Error generating podcast: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to generate podcast"
-        )
+        raise HTTPException(status_code=500, detail="Failed to generate podcast")
 
 
 @router.get("/podcasts/jobs/{job_id}")
@@ -169,9 +167,7 @@ async def get_podcast_job_status(job_id: str):
         raise
     except Exception as e:
         logger.error(f"Error fetching podcast job status: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch job status"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch job status")
 
 
 @router.get("/podcasts/episodes", response_model=List[PodcastEpisodeResponse])
@@ -254,9 +250,7 @@ async def list_podcast_episodes():
         raise
     except Exception as e:
         logger.error(f"Error listing podcast episodes: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to list podcast episodes"
-        )
+        raise HTTPException(status_code=500, detail="Failed to list podcast episodes")
 
 
 @router.get("/podcasts/episodes/{episode_id}", response_model=PodcastEpisodeResponse)
@@ -400,9 +394,7 @@ async def retry_podcast_episode(episode_id: str):
         raise
     except Exception as e:
         logger.error(f"Error retrying podcast episode: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to retry episode"
-        )
+        raise HTTPException(status_code=500, detail="Failed to retry episode")
 
 
 @router.delete("/podcasts/episodes/{episode_id}")
@@ -427,6 +419,4 @@ async def delete_podcast_episode(episode_id: str):
         raise
     except Exception as e:
         logger.error(f"Error deleting podcast episode: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Failed to delete episode"
-        )
+        raise HTTPException(status_code=500, detail="Failed to delete episode")
diff --git a/api/routers/settings.py b/api/routers/settings.py
index 0a543dee..ed64a6cf 100644
--- a/api/routers/settings.py
+++ b/api/routers/settings.py
@@ -33,9 +33,7 @@ async def get_settings():
         raise
     except Exception as e:
         logger.error(f"Error fetching settings: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Error fetching settings"
-        )
+        raise HTTPException(status_code=500, detail="Error fetching settings")
 
 
 @router.put("/settings", response_model=SettingsResponse)
@@ -104,6 +102,4 @@ async def update_settings(settings_update: SettingsUpdate):
         raise
     except Exception as e:
         logger.error(f"Error updating settings: {str(e)}")
-        raise HTTPException(
-            status_code=500, detail="Error updating settings"
-        )
+        raise HTTPException(status_code=500, detail="Error updating settings")
diff --git a/api/routers/source_chat.py b/api/routers/source_chat.py
index 4e50d3aa..d7633f4a 100644
--- a/api/routers/source_chat.py
+++ b/api/routers/source_chat.py
@@ -40,12 +40,14 @@ class CreateSourceChatSessionRequest(BaseModel):
         None, description="Optional model override for this session"
     )
 
+
 class UpdateSourceChatSessionRequest(BaseModel):
     title: Optional[str] = Field(None, description="New session title")
     model_override: Optional[str] = Field(
         None, description="Model override for this session"
     )
 
+
 class ContextIndicator(BaseModel):
     sources: List[str] = Field(
         default_factory=list, description="Source IDs used in context"
@@ -57,6 +59,7 @@ class ContextIndicator(BaseModel):
         default_factory=list, description="Note IDs used in context"
     )
 
+
 class SourceChatSessionResponse(BaseModel):
     id: str = Field(..., description="Session ID")
     title: str = Field(..., description="Session title")
@@ -70,6 +73,7 @@ class SourceChatSessionResponse(BaseModel):
         None, description="Number of messages in session"
     )
 
+
 class SourceChatSessionWithMessagesResponse(SourceChatSessionResponse):
     messages: List[ChatMessage] = Field(
         default_factory=list, description="Session messages"
@@ -78,12 +82,14 @@ class SourceChatSessionWithMessagesResponse(SourceChatSessionResponse):
         None, description="Context indicators from last response"
     )
 
+
 class SendMessageRequest(BaseModel):
     message: str = Field(..., description="User message content")
     model_override: Optional[str] = Field(
         None, description="Optional model override for this message"
     )
 
+
 @router.post(
     "/sources/{source_id}/chat/sessions", response_model=SourceChatSessionResponse
 )
@@ -199,9 +205,12 @@ async def get_source_chat_session(
     """Get a specific source chat session with its messages."""
     try:
         # Verify source + session exist and are related (404s otherwise)
-        _full_source_id, _source, full_session_id, session = (
-            await get_verified_source_session(source_id, session_id)
-        )
+        (
+            _full_source_id,
+            _source,
+            full_session_id,
+            session,
+        ) = await get_verified_source_session(source_id, session_id)
 
         # Get session state from LangGraph to retrieve messages
         # Use sync get_state() in a thread since SqliteSaver doesn't support async
@@ -264,9 +273,12 @@ async def update_source_chat_session(
     """Update source chat session title and/or model override."""
     try:
         # Verify source + session exist and are related (404s otherwise)
-        _full_source_id, _source, full_session_id, session = (
-            await get_verified_source_session(source_id, session_id)
-        )
+        (
+            _full_source_id,
+            _source,
+            full_session_id,
+            session,
+        ) = await get_verified_source_session(source_id, session_id)
 
         # Update session fields
         if request.title is not None:
@@ -311,9 +323,12 @@ async def delete_source_chat_session(
     """Delete a source chat session."""
     try:
         # Verify source + session exist and are related (404s otherwise)
-        _full_source_id, _source, full_session_id, session = (
-            await get_verified_source_session(source_id, session_id)
-        )
+        (
+            _full_source_id,
+            _source,
+            full_session_id,
+            session,
+        ) = await get_verified_source_session(source_id, session_id)
 
         await session.delete()
 
@@ -423,9 +438,12 @@ async def send_message_to_source_chat(
     """Send a message to source chat session with SSE streaming response."""
     try:
         # Verify source + session exist and are related (404s otherwise)
-        full_source_id, _source, full_session_id, session = (
-            await get_verified_source_session(source_id, session_id)
-        )
+        (
+            full_source_id,
+            _source,
+            full_session_id,
+            session,
+        ) = await get_verified_source_session(source_id, session_id)
 
         if not request.message:
             raise HTTPException(status_code=400, detail="Message content is required")
diff --git a/api/routers/speaker_profiles.py b/api/routers/speaker_profiles.py
index afa252e8..6810e4d1 100644
--- a/api/routers/speaker_profiles.py
+++ b/api/routers/speaker_profiles.py
@@ -40,9 +40,7 @@ async def list_speaker_profiles():
         raise
     except Exception as e:
         logger.error(f"Failed to fetch speaker profiles: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch speaker profiles"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch speaker profiles")
 
 
 @router.get("/speaker-profiles/{profile_name}", response_model=SpeakerProfileResponse)
@@ -64,9 +62,7 @@ async def get_speaker_profile(profile_name: str):
         raise
     except Exception as e:
         logger.error(f"Failed to fetch speaker profile '{profile_name}': {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to fetch speaker profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to fetch speaker profile")
 
 
 class SpeakerProfileCreate(BaseModel):
@@ -98,9 +94,7 @@ async def create_speaker_profile(profile_data: SpeakerProfileCreate):
         raise
     except Exception as e:
         logger.error(f"Failed to create speaker profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to create speaker profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to create speaker profile")
 
 
 @router.put("/speaker-profiles/{profile_id}", response_model=SpeakerProfileResponse)
@@ -126,9 +120,7 @@ async def update_speaker_profile(profile_id: str, profile_data: SpeakerProfileCr
         raise
     except Exception as e:
         logger.error(f"Failed to update speaker profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to update speaker profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to update speaker profile")
 
 
 @router.delete("/speaker-profiles/{profile_id}")
@@ -152,9 +144,7 @@ async def delete_speaker_profile(profile_id: str):
         raise
     except Exception as e:
         logger.error(f"Failed to delete speaker profile: {e}")
-        raise HTTPException(
-            status_code=500, detail="Failed to delete speaker profile"
-        )
+        raise HTTPException(status_code=500, detail="Failed to delete speaker profile")
 
 
 @router.post(
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 95dd3b93..290dfe1a 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -24,7 +24,9 @@ except ImportError as e:
     raise ValueError("podcast_creator library not available")
 
 
-def build_episode_output_dir(podcasts_folder: str = PODCASTS_FOLDER) -> tuple[str, Path]:
+def build_episode_output_dir(
+    podcasts_folder: str = PODCASTS_FOLDER,
+) -> tuple[str, Path]:
     """Build a filesystem-safe output directory path for a podcast episode.
 
     Uses a UUID as the directory name so the path is safe regardless of
@@ -126,15 +128,21 @@ async def generate_podcast_command(
             )
 
         # 3. Resolve model configs with credentials
-        outline_provider, outline_model_name, outline_config = (
-            await episode_profile.resolve_outline_config()
-        )
-        transcript_provider, transcript_model_name, transcript_config = (
-            await episode_profile.resolve_transcript_config()
-        )
-        tts_provider, tts_model_name, tts_config = (
-            await speaker_profile.resolve_tts_config()
-        )
+        (
+            outline_provider,
+            outline_model_name,
+            outline_config,
+        ) = await episode_profile.resolve_outline_config()
+        (
+            transcript_provider,
+            transcript_model_name,
+            transcript_config,
+        ) = await episode_profile.resolve_transcript_config()
+        (
+            tts_provider,
+            tts_model_name,
+            tts_config,
+        ) = await speaker_profile.resolve_tts_config()
 
         logger.info(
             f"Resolved models - outline: {outline_provider}/{outline_model_name}, "
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index baeabd8e..c609ca91 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -263,7 +263,7 @@ would. The config at `.pre-commit-config.yaml` wires up:
 | Tool | What it checks | CI equivalent |
 |------|----------------|---------------|
 | **ruff** (lint) | Python lint rules (`E`, `F`, `I`) | `ruff check .` |
-| **ruff** (format) | Python formatting (line-length 88) | Not yet gated |
+| **ruff** (format) | Python formatting (line-length 88) | `ruff format --check .` |
 | **mypy** | Python type correctness | `python -m mypy .` |
 | **pre-commit-hooks** | Large files, merge conflicts, YAML/TOML syntax, trailing whitespace, EOF newlines | — |
 
diff --git a/open_notebook/AGENTS.md b/open_notebook/AGENTS.md
index 564f623b..9ca5359f 100644
--- a/open_notebook/AGENTS.md
+++ b/open_notebook/AGENTS.md
@@ -7,7 +7,7 @@ Normative rules for working on the Python backend. Architecture and design ratio
 - Run API: `uv run uvicorn api.main:app --port 5055` (Swagger at http://localhost:5055/docs)
 - Background jobs need the worker: `make worker-start` (`surreal-commands-worker --import-modules commands`)
 - Tests: `uv run pytest tests/`
-- Lint/typecheck: `ruff check . --fix` and `uv run python -m mypy .`
+- Lint/format/typecheck: `ruff check . --fix`, `ruff format .` and `uv run python -m mypy .`
 
 ## API layer (`api/`)
 
diff --git a/open_notebook/ai/connection_tester.py b/open_notebook/ai/connection_tester.py
index ce0919d1..4ea04ef8 100644
--- a/open_notebook/ai/connection_tester.py
+++ b/open_notebook/ai/connection_tester.py
@@ -5,6 +5,7 @@ This module provides functionality to test if a provider's API key is valid
 by making minimal API calls to each provider, and to test individual model
 configurations end-to-end.
 """
+
 import io
 import json
 import os
@@ -98,7 +99,9 @@ async def _test_azure_connection(
     """
     test_endpoint = endpoint or os.environ.get("AZURE_OPENAI_ENDPOINT")
     test_api_key = api_key or os.environ.get("AZURE_OPENAI_API_KEY")
-    test_api_version = api_version or os.environ.get("AZURE_OPENAI_API_VERSION", "2024-10-21")
+    test_api_version = api_version or os.environ.get(
+        "AZURE_OPENAI_API_VERSION", "2024-10-21"
+    )
 
     if not test_endpoint:
         return False, "No Azure endpoint configured"
@@ -110,13 +113,13 @@ async def _test_azure_connection(
 
     try:
         # Pin DNS at request time (closes rebinding TOCTOU left by validate_url alone).
-        models_url = (
-            f"{test_endpoint}/openai/models?api-version={test_api_version}"
-        )
+        models_url = f"{test_endpoint}/openai/models?api-version={test_api_version}"
         target = await prepare_pinned_http_target(models_url, "azure")
         headers = dict(target.headers)
         headers["api-key"] = test_api_key
-        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
+        async with httpx.AsyncClient(
+            timeout=10.0, verify=httpx_verify_setting()
+        ) as client:
             response = await client.get(
                 target.url,
                 headers=headers,
@@ -159,7 +162,9 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
         target = await prepare_pinned_http_target(
             f"{base_url.rstrip('/')}/api/tags", "ollama"
         )
-        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
+        async with httpx.AsyncClient(
+            timeout=10.0, verify=httpx_verify_setting()
+        ) as client:
             # Try /api/tags endpoint (standard Ollama)
             response = await client.get(
                 target.url,
@@ -177,7 +182,10 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
                     model_list = ", ".join(model_names)
                     if model_count > 3:
                         model_list += f" (+{model_count - 3} more)"
-                    return True, f"Connected. {model_count} models available: {model_list}"
+                    return (
+                        True,
+                        f"Connected. {model_count} models available: {model_list}",
+                    )
                 else:
                     return True, "Connected successfully (no models listed)"
             elif response.status_code == 401:
@@ -197,20 +205,22 @@ async def _test_ollama_connection(base_url: str) -> Tuple[bool, str]:
         return False, f"Connection error: {str(e)[:100]}"
 
 
-async def _test_openai_compatible_connection(base_url: str, api_key: Optional[str] = None) -> Tuple[bool, str]:
+async def _test_openai_compatible_connection(
+    base_url: str, api_key: Optional[str] = None
+) -> Tuple[bool, str]:
     """Test OpenAI-compatible server connectivity."""
     try:
         # Pin DNS at request time (closes rebinding TOCTOU left by validate_url alone).
         trimmed = base_url.rstrip("/")
-        models_url = (
-            trimmed if trimmed.endswith("/models") else f"{trimmed}/models"
-        )
+        models_url = trimmed if trimmed.endswith("/models") else f"{trimmed}/models"
         target = await prepare_pinned_http_target(models_url, "openai_compatible")
         headers = dict(target.headers)
         if api_key:
             headers["Authorization"] = f"Bearer {api_key}"
 
-        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
+        async with httpx.AsyncClient(
+            timeout=10.0, verify=httpx_verify_setting()
+        ) as client:
             # Try /models endpoint (standard OpenAI-compatible)
             response = await client.get(
                 target.url,
@@ -228,7 +238,10 @@ async def _test_openai_compatible_connection(base_url: str, api_key: Optional[st
                     model_list = ", ".join(model_names)
                     if model_count > 3:
                         model_list += f" (+{model_count - 3} more)"
-                    return True, f"Connected. {model_count} models available: {model_list}"
+                    return (
+                        True,
+                        f"Connected. {model_count} models available: {model_list}",
+                    )
                 else:
                     return True, "Connected successfully (no models listed)"
             elif response.status_code == 401:
@@ -263,7 +276,9 @@ async def _test_anthropic_compatible_connection(
         if api_key:
             headers["x-api-key"] = api_key
 
-        async with httpx.AsyncClient(timeout=10.0, verify=httpx_verify_setting()) as client:
+        async with httpx.AsyncClient(
+            timeout=10.0, verify=httpx_verify_setting()
+        ) as client:
             response = await client.get(
                 target.url,
                 headers=headers,
@@ -278,7 +293,10 @@ async def _test_anthropic_compatible_connection(
                     model_list = ", ".join(model_names)
                     if model_count > 3:
                         model_list += f" (+{model_count - 3} more)"
-                    return True, f"Connected. {model_count} models available: {model_list}"
+                    return (
+                        True,
+                        f"Connected. {model_count} models available: {model_list}",
+                    )
                 return True, "Connected successfully (no models listed)"
             if response.status_code == 401:
                 return False, "Invalid API key"
@@ -300,6 +318,7 @@ async def _test_anthropic_compatible_connection(
     except Exception as e:
         return False, f"Connection error: {str(e)[:100]}"
 
+
 # Default voices for TTS testing per provider
 # ElevenLabs, Mistral and OpenRouter excluded: voices looked up dynamically via
 # available_voices. OpenRouter's voices are model-specific (its default model,
@@ -507,7 +526,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
 
         if model.type == "language":
             if not isinstance(esp_model, LanguageModel):
-                return False, f"Model type mismatch: expected a language model, got {type(esp_model).__name__}"
+                return (
+                    False,
+                    f"Model type mismatch: expected a language model, got {type(esp_model).__name__}",
+                )
             response = await esp_model.achat_complete(
                 messages=[{"role": "user", "content": "Hi!"}]
             )
@@ -519,7 +541,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
 
         elif model.type == "embedding":
             if not isinstance(esp_model, EmbeddingModel):
-                return False, f"Model type mismatch: expected an embedding model, got {type(esp_model).__name__}"
+                return (
+                    False,
+                    f"Model type mismatch: expected an embedding model, got {type(esp_model).__name__}",
+                )
             result = await esp_model.aembed(["This is a test."])
             if result and len(result) > 0:
                 dims = len(result[0])
@@ -528,7 +553,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
 
         elif model.type == "text_to_speech":
             if not isinstance(esp_model, TextToSpeechModel):
-                return False, f"Model type mismatch: expected a text-to-speech model, got {type(esp_model).__name__}"
+                return (
+                    False,
+                    f"Model type mismatch: expected a text-to-speech model, got {type(esp_model).__name__}",
+                )
             # For ElevenLabs, look up first available voice (API uses voice_id, not name)
             voice = DEFAULT_TEST_VOICES.get(model.provider)
             if not voice and hasattr(esp_model, "available_voices"):
@@ -551,7 +579,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
 
         elif model.type == "speech_to_text":
             if not isinstance(esp_model, SpeechToTextModel):
-                return False, f"Model type mismatch: expected a speech-to-text model, got {type(esp_model).__name__}"
+                return (
+                    False,
+                    f"Model type mismatch: expected a speech-to-text model, got {type(esp_model).__name__}",
+                )
             audio_file = _get_test_audio()
             transcription = await esp_model.atranscribe(
                 audio_file=audio_file, language="en"
@@ -562,7 +593,10 @@ async def test_individual_model(model) -> Tuple[bool, str]:
                 else str(transcription).strip()
             )
             if not text:
-                return True, "Connection successful (test clip produced no transcription)"
+                return (
+                    True,
+                    "Connection successful (test clip produced no transcription)",
+                )
             return True, f"Transcription: {text[:100]}"
 
         else:
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 63123640..a2596f45 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -717,7 +717,9 @@ async def discover_openai_compatible_models() -> List[DiscoveredModel]:
                         )
                     )
     except httpx.HTTPStatusError as e:
-        logger.warning(f"Failed to discover openai_compatible models: HTTP {e.response.status_code}")
+        logger.warning(
+            f"Failed to discover openai_compatible models: HTTP {e.response.status_code}"
+        )
     except Exception as e:
         logger.warning(f"Failed to discover openai_compatible models: {e}")
 
@@ -736,7 +738,9 @@ async def discover_anthropic_compatible_models() -> List[DiscoveredModel]:
             api_key = config.get("api_key")
             base_url = config.get("base_url", "")
     except Exception as e:
-        logger.warning(f"Failed to read anthropic_compatible config from Credential: {e}")
+        logger.warning(
+            f"Failed to read anthropic_compatible config from Credential: {e}"
+        )
 
     if not api_key:
         api_key = os.environ.get("ANTHROPIC_COMPATIBLE_API_KEY")
@@ -961,7 +965,9 @@ async def sync_provider_models(
             )
             await new_model.save()
             new_count += 1
-            logger.info(f"Registered new model: {model.provider}/{model.name} ({model.model_type})")
+            logger.info(
+                f"Registered new model: {model.provider}/{model.name} ({model.model_type})"
+            )
         except Exception as e:
             logger.warning(f"Failed to register model {model.name}: {e}")
 
diff --git a/open_notebook/ai/models.py b/open_notebook/ai/models.py
index 881619bc..f1912482 100644
--- a/open_notebook/ai/models.py
+++ b/open_notebook/ai/models.py
@@ -156,7 +156,9 @@ class Model(ObjectModel):
         try:
             return await Credential.get(self.credential)
         except Exception:
-            logger.warning(f"Could not load credential {self.credential} for model {self.id}")
+            logger.warning(
+                f"Could not load credential {self.credential} for model {self.id}"
+            )
             return None
 
 
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index bcf57f51..5979c76b 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -70,222 +70,222 @@ _ALL_MODALITIES = ("language", "embedding", "speech_to_text", "text_to_speech")
 
 
 _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
-        ProviderSpec(
-            name="openai",
-            display_name="OpenAI",
-            modalities=_ALL_MODALITIES,
-            required_env=("OPENAI_API_KEY",),
-            test_model="gpt-3.5-turbo",
-            docs_url="https://platform.openai.com/api-keys",
-            openai_compat_discovery_url="https://api.openai.com/v1/models",
+    ProviderSpec(
+        name="openai",
+        display_name="OpenAI",
+        modalities=_ALL_MODALITIES,
+        required_env=("OPENAI_API_KEY",),
+        test_model="gpt-3.5-turbo",
+        docs_url="https://platform.openai.com/api-keys",
+        openai_compat_discovery_url="https://api.openai.com/v1/models",
+    ),
+    ProviderSpec(
+        name="anthropic",
+        display_name="Anthropic",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("ANTHROPIC_API_KEY",),
+        test_model="claude-haiku-4-5-20251001",
+        docs_url="https://console.anthropic.com/settings/keys",
+    ),
+    ProviderSpec(
+        name="google",
+        display_name="Google AI",
+        modalities=_ALL_MODALITIES,
+        required_any_env=("GOOGLE_API_KEY", "GEMINI_API_KEY"),
+        test_model="gemini-flash-latest",
+        docs_url="https://aistudio.google.com/app/apikey",
+    ),
+    ProviderSpec(
+        name="groq",
+        display_name="Groq",
+        modalities=("language", "speech_to_text"),
+        required_env=("GROQ_API_KEY",),
+        test_model="llama-3.1-8b-instant",
+        docs_url="https://console.groq.com/keys",
+        openai_compat_discovery_url="https://api.groq.com/openai/v1/models",
+    ),
+    ProviderSpec(
+        name="mistral",
+        display_name="Mistral AI",
+        modalities=("language", "embedding", "speech_to_text", "text_to_speech"),
+        required_env=("MISTRAL_API_KEY",),
+        test_model="mistral-small-latest",
+        docs_url="https://console.mistral.ai/api-keys/",
+        openai_compat_discovery_url="https://api.mistral.ai/v1/models",
+    ),
+    ProviderSpec(
+        name="deepseek",
+        display_name="DeepSeek",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("DEEPSEEK_API_KEY",),
+        test_model="deepseek-chat",
+        docs_url="https://platform.deepseek.com/api_keys",
+        openai_compat_discovery_url="https://api.deepseek.com/models",
+    ),
+    ProviderSpec(
+        name="xai",
+        display_name="xAI (Grok)",
+        modalities=("language", "text_to_speech"),
+        required_env=("XAI_API_KEY",),
+        test_model="grok-beta",
+        docs_url="https://console.x.ai/",
+        openai_compat_discovery_url="https://api.x.ai/v1/models",
+    ),
+    ProviderSpec(
+        name="openrouter",
+        display_name="OpenRouter",
+        modalities=_ALL_MODALITIES,
+        required_env=("OPENROUTER_API_KEY",),
+        test_model="openai/gpt-3.5-turbo",
+        docs_url="https://openrouter.ai/keys",
+        openai_compat_discovery_url="https://openrouter.ai/api/v1/models",
+    ),
+    ProviderSpec(
+        name="dashscope",
+        display_name="DashScope (Qwen)",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("DASHSCOPE_API_KEY",),
+        test_model="qwen-plus",
+        docs_url="https://help.aliyun.com/zh/model-studio/getting-started/",
+        openai_compat_discovery_url="https://dashscope.aliyuncs.com/compatible-mode/v1/models",
+    ),
+    ProviderSpec(
+        name="minimax",
+        display_name="MiniMax",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("MINIMAX_API_KEY",),
+        test_model="MiniMax-M2.5",
+        docs_url="https://platform.minimaxi.com/document/Guides",
+        openai_compat_discovery_url="https://api.minimax.io/v1/models",
+    ),
+    ProviderSpec(
+        name="novita",
+        display_name="Novita",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("NOVITA_API_KEY",),
+        test_model="moonshotai/kimi-k2.5",
+        docs_url="https://novita.ai/settings/key-management",
+        openai_compat_discovery_url="https://api.novita.ai/openai/models",
+    ),
+    ProviderSpec(
+        name="ppq",
+        display_name="PayPerQ",
+        modalities=_ALL_MODALITIES,
+        required_env=("PPQ_API_KEY",),
+        test_model="auto",
+        docs_url="https://ppq.ai",
+        # PPQ's bare /models returns only chat/language models; ?type=all is
+        # required to also list embedding, STT and TTS models (PPQ is a
+        # multi-modality gateway). Without it, the non-language modalities
+        # this provider advertises never surface in discovery.
+        openai_compat_discovery_url="https://api.ppq.ai/v1/models?type=all",
+    ),
+    ProviderSpec(
+        name="cohere",
+        display_name="Cohere",
+        # Native v2 API (/v2/chat, /v2/embed) — NOT OpenAI-compatible, so no
+        # openai_compat_discovery_url; discovery is bespoke (esperanto's
+        # AIFactory.get_provider_models). Reranking is out of scope (#1087).
+        modalities=("language", "embedding"),
+        required_env=("COHERE_API_KEY",),
+        test_model="command-a-03-2025",
+        docs_url="https://dashboard.cohere.com/api-keys",
+    ),
+    ProviderSpec(
+        name="voyage",
+        display_name="Voyage AI",
+        modalities=("embedding",),
+        required_env=("VOYAGE_API_KEY",),
+        test_model="voyage-3-lite",
+        test_model_type="embedding",
+        docs_url="https://dash.voyageai.com/api-keys",
+    ),
+    ProviderSpec(
+        name="elevenlabs",
+        display_name="ElevenLabs",
+        modalities=("text_to_speech", "speech_to_text"),
+        required_env=("ELEVENLABS_API_KEY",),
+        test_model="eleven_multilingual_v2",
+        test_model_type="text_to_speech",
+        docs_url="https://elevenlabs.io/app/settings/api-keys",
+    ),
+    ProviderSpec(
+        name="deepgram",
+        display_name="Deepgram",
+        modalities=("text_to_speech", "speech_to_text"),
+        required_env=("DEEPGRAM_API_KEY",),
+        test_model="aura-2-thalia-en",
+        test_model_type="text_to_speech",
+        docs_url="https://console.deepgram.com/",
+    ),
+    ProviderSpec(
+        name="ollama",
+        display_name="Ollama",
+        modalities=("language", "embedding"),
+        required_env=("OLLAMA_API_BASE",),
+        test_model=None,  # Dynamic - uses first available model
+    ),
+    ProviderSpec(
+        name="omlx",
+        display_name="oMLX",
+        modalities=("language", "embedding"),
+        required_env=("OMLX_API_BASE",),
+        optional_env=("OMLX_API_KEY",),
+        test_model=None,  # Dynamic - uses first available model via /v1/models
+        docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/omlx.md",
+        # No openai_compat_discovery_url: base URL is user-supplied (default
+        # http://localhost:11435/v1) and API key is optional — discovery is
+        # handled like openai_compatible, not the fixed-URL OPENAI_COMPAT table.
+    ),
+    ProviderSpec(
+        name="azure",
+        display_name="Azure OpenAI",
+        modalities=_ALL_MODALITIES,
+        required_env=(
+            "AZURE_OPENAI_API_KEY",
+            "AZURE_OPENAI_ENDPOINT",
+            "AZURE_OPENAI_API_VERSION",
         ),
-        ProviderSpec(
-            name="anthropic",
-            display_name="Anthropic",
-            modalities=_LANGUAGE_ONLY,
-            required_env=("ANTHROPIC_API_KEY",),
-            test_model="claude-haiku-4-5-20251001",
-            docs_url="https://console.anthropic.com/settings/keys",
+        optional_env=(
+            "AZURE_OPENAI_ENDPOINT_LLM",
+            "AZURE_OPENAI_ENDPOINT_EMBEDDING",
+            "AZURE_OPENAI_ENDPOINT_STT",
+            "AZURE_OPENAI_ENDPOINT_TTS",
         ),
-        ProviderSpec(
-            name="google",
-            display_name="Google AI",
-            modalities=_ALL_MODALITIES,
-            required_any_env=("GOOGLE_API_KEY", "GEMINI_API_KEY"),
-            test_model="gemini-flash-latest",
-            docs_url="https://aistudio.google.com/app/apikey",
-        ),
-        ProviderSpec(
-            name="groq",
-            display_name="Groq",
-            modalities=("language", "speech_to_text"),
-            required_env=("GROQ_API_KEY",),
-            test_model="llama-3.1-8b-instant",
-            docs_url="https://console.groq.com/keys",
-            openai_compat_discovery_url="https://api.groq.com/openai/v1/models",
-        ),
-        ProviderSpec(
-            name="mistral",
-            display_name="Mistral AI",
-            modalities=("language", "embedding", "speech_to_text", "text_to_speech"),
-            required_env=("MISTRAL_API_KEY",),
-            test_model="mistral-small-latest",
-            docs_url="https://console.mistral.ai/api-keys/",
-            openai_compat_discovery_url="https://api.mistral.ai/v1/models",
-        ),
-        ProviderSpec(
-            name="deepseek",
-            display_name="DeepSeek",
-            modalities=_LANGUAGE_ONLY,
-            required_env=("DEEPSEEK_API_KEY",),
-            test_model="deepseek-chat",
-            docs_url="https://platform.deepseek.com/api_keys",
-            openai_compat_discovery_url="https://api.deepseek.com/models",
-        ),
-        ProviderSpec(
-            name="xai",
-            display_name="xAI (Grok)",
-            modalities=("language", "text_to_speech"),
-            required_env=("XAI_API_KEY",),
-            test_model="grok-beta",
-            docs_url="https://console.x.ai/",
-            openai_compat_discovery_url="https://api.x.ai/v1/models",
-        ),
-        ProviderSpec(
-            name="openrouter",
-            display_name="OpenRouter",
-            modalities=_ALL_MODALITIES,
-            required_env=("OPENROUTER_API_KEY",),
-            test_model="openai/gpt-3.5-turbo",
-            docs_url="https://openrouter.ai/keys",
-            openai_compat_discovery_url="https://openrouter.ai/api/v1/models",
-        ),
-        ProviderSpec(
-            name="dashscope",
-            display_name="DashScope (Qwen)",
-            modalities=_LANGUAGE_ONLY,
-            required_env=("DASHSCOPE_API_KEY",),
-            test_model="qwen-plus",
-            docs_url="https://help.aliyun.com/zh/model-studio/getting-started/",
-            openai_compat_discovery_url="https://dashscope.aliyuncs.com/compatible-mode/v1/models",
-        ),
-        ProviderSpec(
-            name="minimax",
-            display_name="MiniMax",
-            modalities=_LANGUAGE_ONLY,
-            required_env=("MINIMAX_API_KEY",),
-            test_model="MiniMax-M2.5",
-            docs_url="https://platform.minimaxi.com/document/Guides",
-            openai_compat_discovery_url="https://api.minimax.io/v1/models",
-        ),
-        ProviderSpec(
-            name="novita",
-            display_name="Novita",
-            modalities=_LANGUAGE_ONLY,
-            required_env=("NOVITA_API_KEY",),
-            test_model="moonshotai/kimi-k2.5",
-            docs_url="https://novita.ai/settings/key-management",
-            openai_compat_discovery_url="https://api.novita.ai/openai/models",
-        ),
-        ProviderSpec(
-            name="ppq",
-            display_name="PayPerQ",
-            modalities=_ALL_MODALITIES,
-            required_env=("PPQ_API_KEY",),
-            test_model="auto",
-            docs_url="https://ppq.ai",
-            # PPQ's bare /models returns only chat/language models; ?type=all is
-            # required to also list embedding, STT and TTS models (PPQ is a
-            # multi-modality gateway). Without it, the non-language modalities
-            # this provider advertises never surface in discovery.
-            openai_compat_discovery_url="https://api.ppq.ai/v1/models?type=all",
-        ),
-        ProviderSpec(
-            name="cohere",
-            display_name="Cohere",
-            # Native v2 API (/v2/chat, /v2/embed) — NOT OpenAI-compatible, so no
-            # openai_compat_discovery_url; discovery is bespoke (esperanto's
-            # AIFactory.get_provider_models). Reranking is out of scope (#1087).
-            modalities=("language", "embedding"),
-            required_env=("COHERE_API_KEY",),
-            test_model="command-a-03-2025",
-            docs_url="https://dashboard.cohere.com/api-keys",
-        ),
-        ProviderSpec(
-            name="voyage",
-            display_name="Voyage AI",
-            modalities=("embedding",),
-            required_env=("VOYAGE_API_KEY",),
-            test_model="voyage-3-lite",
-            test_model_type="embedding",
-            docs_url="https://dash.voyageai.com/api-keys",
-        ),
-        ProviderSpec(
-            name="elevenlabs",
-            display_name="ElevenLabs",
-            modalities=("text_to_speech", "speech_to_text"),
-            required_env=("ELEVENLABS_API_KEY",),
-            test_model="eleven_multilingual_v2",
-            test_model_type="text_to_speech",
-            docs_url="https://elevenlabs.io/app/settings/api-keys",
-        ),
-        ProviderSpec(
-            name="deepgram",
-            display_name="Deepgram",
-            modalities=("text_to_speech", "speech_to_text"),
-            required_env=("DEEPGRAM_API_KEY",),
-            test_model="aura-2-thalia-en",
-            test_model_type="text_to_speech",
-            docs_url="https://console.deepgram.com/",
-        ),
-        ProviderSpec(
-            name="ollama",
-            display_name="Ollama",
-            modalities=("language", "embedding"),
-            required_env=("OLLAMA_API_BASE",),
-            test_model=None,  # Dynamic - uses first available model
-        ),
-        ProviderSpec(
-            name="omlx",
-            display_name="oMLX",
-            modalities=("language", "embedding"),
-            required_env=("OMLX_API_BASE",),
-            optional_env=("OMLX_API_KEY",),
-            test_model=None,  # Dynamic - uses first available model via /v1/models
-            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/omlx.md",
-            # No openai_compat_discovery_url: base URL is user-supplied (default
-            # http://localhost:11435/v1) and API key is optional — discovery is
-            # handled like openai_compatible, not the fixed-URL OPENAI_COMPAT table.
-        ),
-        ProviderSpec(
-            name="azure",
-            display_name="Azure OpenAI",
-            modalities=_ALL_MODALITIES,
-            required_env=(
-                "AZURE_OPENAI_API_KEY",
-                "AZURE_OPENAI_ENDPOINT",
-                "AZURE_OPENAI_API_VERSION",
-            ),
-            optional_env=(
-                "AZURE_OPENAI_ENDPOINT_LLM",
-                "AZURE_OPENAI_ENDPOINT_EMBEDDING",
-                "AZURE_OPENAI_ENDPOINT_STT",
-                "AZURE_OPENAI_ENDPOINT_TTS",
-            ),
-            test_model="gpt-35-turbo",  # Azure OpenAI deployment name
-            docs_url="https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI",
-        ),
-        ProviderSpec(
-            name="vertex",
-            display_name="Google Vertex AI",
-            modalities=("language", "embedding", "text_to_speech"),
-            required_env=("VERTEX_PROJECT", "VERTEX_LOCATION"),
-            optional_env=("GOOGLE_APPLICATION_CREDENTIALS",),
-            test_model="gemini-flash-latest",  # Uses Google Vertex AI
-            docs_url="https://cloud.google.com/vertex-ai/docs/start/cloud-environment",
-        ),
-        ProviderSpec(
-            name="openai_compatible",
-            display_name="OpenAI Compatible",
-            modalities=_ALL_MODALITIES,
-            required_any_env=("OPENAI_COMPATIBLE_BASE_URL", "OPENAI_COMPATIBLE_API_KEY"),
-            test_model=None,  # Dynamic - uses first available model
-            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md",
-        ),
-        ProviderSpec(
-            name="anthropic_compatible",
-            display_name="Anthropic Compatible",
-            modalities=_LANGUAGE_ONLY,
-            required_env=(
-                "ANTHROPIC_COMPATIBLE_BASE_URL",
-                "ANTHROPIC_COMPATIBLE_API_KEY",
-            ),
-            test_model=None,  # Dynamic - uses the endpoint's model list
-            docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/ai-providers.md",
-            # No openai_compat_discovery_url: anthropic-compatible discovery uses
-            # Anthropic's GET /v1/models with x-api-key + anthropic-version headers
-            # (bespoke), not the OpenAI-compatible GET /models discovery table.
+        test_model="gpt-35-turbo",  # Azure OpenAI deployment name
+        docs_url="https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI",
+    ),
+    ProviderSpec(
+        name="vertex",
+        display_name="Google Vertex AI",
+        modalities=("language", "embedding", "text_to_speech"),
+        required_env=("VERTEX_PROJECT", "VERTEX_LOCATION"),
+        optional_env=("GOOGLE_APPLICATION_CREDENTIALS",),
+        test_model="gemini-flash-latest",  # Uses Google Vertex AI
+        docs_url="https://cloud.google.com/vertex-ai/docs/start/cloud-environment",
+    ),
+    ProviderSpec(
+        name="openai_compatible",
+        display_name="OpenAI Compatible",
+        modalities=_ALL_MODALITIES,
+        required_any_env=("OPENAI_COMPATIBLE_BASE_URL", "OPENAI_COMPATIBLE_API_KEY"),
+        test_model=None,  # Dynamic - uses first available model
+        docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/openai-compatible.md",
+    ),
+    ProviderSpec(
+        name="anthropic_compatible",
+        display_name="Anthropic Compatible",
+        modalities=_LANGUAGE_ONLY,
+        required_env=(
+            "ANTHROPIC_COMPATIBLE_BASE_URL",
+            "ANTHROPIC_COMPATIBLE_API_KEY",
         ),
+        test_model=None,  # Dynamic - uses the endpoint's model list
+        docs_url="https://github.com/lfnovo/open-notebook/blob/main/docs/5-CONFIGURATION/ai-providers.md",
+        # No openai_compat_discovery_url: anthropic-compatible discovery uses
+        # Anthropic's GET /v1/models with x-api-key + anthropic-version headers
+        # (bespoke), not the OpenAI-compatible GET /models discovery table.
+    ),
 )
 
 
@@ -298,9 +298,7 @@ def _build_registry(specs: Tuple[ProviderSpec, ...]) -> Dict[str, ProviderSpec]:
     registry: Dict[str, ProviderSpec] = {}
     for spec in specs:
         if spec.name in registry:
-            raise ValueError(
-                f"Duplicate provider name in registry: {spec.name!r}"
-            )
+            raise ValueError(f"Duplicate provider name in registry: {spec.name!r}")
         registry[spec.name] = spec
     return registry
 
diff --git a/open_notebook/config.py b/open_notebook/config.py
index b78c53ad..541647e6 100644
--- a/open_notebook/config.py
+++ b/open_notebook/config.py
@@ -22,5 +22,7 @@ os.makedirs(PODCASTS_FOLDER, exist_ok=True)
 # Reads TIKTOKEN_CACHE_DIR from the environment so Docker can redirect the cache
 # to a path outside /data/ (which is typically volume-mounted and would hide the
 # pre-baked encoding baked into the image at build time).
-TIKTOKEN_CACHE_DIR = os.environ.get("TIKTOKEN_CACHE_DIR", "").strip() or f"{DATA_FOLDER}/tiktoken-cache"
+TIKTOKEN_CACHE_DIR = (
+    os.environ.get("TIKTOKEN_CACHE_DIR", "").strip() or f"{DATA_FOLDER}/tiktoken-cache"
+)
 os.makedirs(TIKTOKEN_CACHE_DIR, exist_ok=True)
diff --git a/open_notebook/database/async_migrate.py b/open_notebook/database/async_migrate.py
index f852c40b..e8c8e60d 100644
--- a/open_notebook/database/async_migrate.py
+++ b/open_notebook/database/async_migrate.py
@@ -106,51 +106,21 @@ class AsyncMigrationManager:
             AsyncMigration.from_file("open_notebook/database/migrations/8.surrealql"),
             AsyncMigration.from_file("open_notebook/database/migrations/9.surrealql"),
             AsyncMigration.from_file("open_notebook/database/migrations/10.surrealql"),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/11.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/12.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/13.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/14.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/15.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/16.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/17.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/18.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/19.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/20.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/21.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/22.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/23.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/24.surrealql"
-            ),
-            AsyncMigration.from_file(
-                "open_notebook/database/migrations/25.surrealql"
-            ),
+            AsyncMigration.from_file("open_notebook/database/migrations/11.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/12.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/13.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/14.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/15.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/16.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/17.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/18.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/19.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/20.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/21.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/22.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/23.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/24.surrealql"),
+            AsyncMigration.from_file("open_notebook/database/migrations/25.surrealql"),
         ]
         self.down_migrations = [
             AsyncMigration.from_file(
diff --git a/open_notebook/domain/base.py b/open_notebook/domain/base.py
index d2a74c0d..a94cfa03 100644
--- a/open_notebook/domain/base.py
+++ b/open_notebook/domain/base.py
@@ -57,9 +57,10 @@ class ObjectModel(BaseModel):
                     raise InvalidInputError(f"Invalid order_by field: '{parts[0]}'")
                 validated_clauses.append(parts[0].lower())
             elif len(parts) == 2:
-                if not allowed_field_pattern.match(
-                    parts[0].lower()
-                ) or parts[1].lower() not in allowed_directions:
+                if (
+                    not allowed_field_pattern.match(parts[0].lower())
+                    or parts[1].lower() not in allowed_directions
+                ):
                     raise InvalidInputError(
                         f"Invalid order_by clause: '{clause.strip()}'"
                     )
diff --git a/open_notebook/domain/notebook.py b/open_notebook/domain/notebook.py
index 72be7ee1..dd426bf5 100644
--- a/open_notebook/domain/notebook.py
+++ b/open_notebook/domain/notebook.py
@@ -485,7 +485,9 @@ class Source(ObjectModel):
         # Callers looping over many sources can batch-fetch insights up front
         # via SourceInsight.get_for_sources() and pass them in here, instead
         # of paying a separate query per source.
-        insight_objects = insights if insights is not None else await self.get_insights()
+        insight_objects = (
+            insights if insights is not None else await self.get_insights()
+        )
         insights = [insight.model_dump() for insight in insight_objects]
         if context_size == "long":
             return dict(
@@ -630,7 +632,9 @@ class Source(ObjectModel):
             return str(command_id)
 
         except Exception as e:
-            logger.exception(f"Error submitting create_insight for source {self.id}: {e}")
+            logger.exception(
+                f"Error submitting create_insight for source {self.id}: {e}"
+            )
             raise DatabaseOperationError(e)
 
     def _prepare_save_data(self) -> dict:
diff --git a/open_notebook/domain/provider_config.py b/open_notebook/domain/provider_config.py
index aa0cb30b..f008bd42 100644
--- a/open_notebook/domain/provider_config.py
+++ b/open_notebook/domain/provider_config.py
@@ -301,9 +301,7 @@ class ProviderConfig(RecordModel):
 
         return None
 
-    def get_config(
-        self, provider: str, config_id: str
-    ) -> Optional[ProviderCredential]:
+    def get_config(self, provider: str, config_id: str) -> Optional[ProviderCredential]:
         """
         Get a specific configuration by ID.
 
diff --git a/open_notebook/graphs/ask.py b/open_notebook/graphs/ask.py
index b2bf6d44..c5027769 100644
--- a/open_notebook/graphs/ask.py
+++ b/open_notebook/graphs/ask.py
@@ -143,7 +143,9 @@ async def provide_answer(state: SubGraphState, config: RunnableConfig) -> dict:
         payload["results"] = results
         ids = [r["id"] for r in results]
         payload["ids"] = ids
-        system_prompt = Prompter(prompt_template="ask/query_process").render(data=payload)  # type: ignore[arg-type]
+        system_prompt = Prompter(prompt_template="ask/query_process").render(
+            data=payload  # type: ignore[arg-type]
+        )
         model = await provision_langchain_model(
             system_prompt,
             config.get("configurable", {}).get("answer_model"),
diff --git a/open_notebook/podcasts/models.py b/open_notebook/podcasts/models.py
index e1c1e796..f58627f1 100644
--- a/open_notebook/podcasts/models.py
+++ b/open_notebook/podcasts/models.py
@@ -145,9 +145,7 @@ class SpeakerProfile(ObjectModel):
     description: Optional[str] = Field(None, description="Profile description")
 
     # Model registry reference
-    voice_model: Optional[str] = Field(
-        None, description="Model record ID for TTS"
-    )
+    voice_model: Optional[str] = Field(None, description="Model record ID for TTS")
 
     speakers: List[Dict[str, Any]] = Field(
         ..., description="Array of speaker configurations"
@@ -197,9 +195,7 @@ class SpeakerProfile(ObjectModel):
         return None
 
     @classmethod
-    async def resolve(
-        cls, ref: Union[str, RecordID]
-    ) -> Optional["SpeakerProfile"]:
+    async def resolve(cls, ref: Union[str, RecordID]) -> Optional["SpeakerProfile"]:
         """Resolve a speaker profile by record ID or by unique name.
 
         The API contract accepts speaker profiles by NAME (see
diff --git a/open_notebook/utils/context_builder.py b/open_notebook/utils/context_builder.py
index 0c008e39..dcffd4ae 100644
--- a/open_notebook/utils/context_builder.py
+++ b/open_notebook/utils/context_builder.py
@@ -62,9 +62,7 @@ def format_source_context(context_data: Dict[str, Any]) -> str:
         context_parts.append("## SOURCE INSIGHTS")
         for insight in context_data["insights"]:
             if isinstance(insight, dict):
-                context_parts.append(
-                    f"**Insight ID:** {insight.get('id', 'Unknown')}"
-                )
+                context_parts.append(f"**Insight ID:** {insight.get('id', 'Unknown')}")
                 context_parts.append(
                     f"**Type:** {insight.get('insight_type', 'Unknown')}"
                 )
@@ -228,9 +226,9 @@ def _truncate_source_to_token_budget(
             source_tokens = encoding.encode(full_text, disallowed_special=())
 
         def token_prefix(prefix_token_count: int) -> str:
-            return encoding.decode_bytes(
-                source_tokens[:prefix_token_count]
-            ).decode("utf-8", errors="ignore")
+            return encoding.decode_bytes(source_tokens[:prefix_token_count]).decode(
+                "utf-8", errors="ignore"
+            )
 
         best = find_fitting_prefix(
             min(len(source_tokens), max_tokens),
@@ -459,11 +457,14 @@ async def build_source_context(
             else:
                 for insight_content in insight_items:
                     candidate_insights = [*insights, insight_content]
-                    if _rendered_source_context_tokens(
-                        source_context,
-                        candidate_insights,
-                        encoding,
-                    ) > max_tokens:
+                    if (
+                        _rendered_source_context_tokens(
+                            source_context,
+                            candidate_insights,
+                            encoding,
+                        )
+                        > max_tokens
+                    ):
                         continue
                     insights.append(insight_content)
 
diff --git a/open_notebook/utils/embedding.py b/open_notebook/utils/embedding.py
index 9bf18dcb..870c6e44 100644
--- a/open_notebook/utils/embedding.py
+++ b/open_notebook/utils/embedding.py
@@ -197,7 +197,9 @@ async def generate_embeddings(
                         f"{len(batch)} texts): {e}"
                     ) from e
 
-    logger.debug(f"Generated {len(all_embeddings)} embeddings in {total_batches} batch(es)")
+    logger.debug(
+        f"Generated {len(all_embeddings)} embeddings in {total_batches} batch(es)"
+    )
     return all_embeddings
 
 
diff --git a/open_notebook/utils/error_classifier.py b/open_notebook/utils/error_classifier.py
index 9520796d..10f38c15 100644
--- a/open_notebook/utils/error_classifier.py
+++ b/open_notebook/utils/error_classifier.py
@@ -45,13 +45,26 @@ _CLASSIFICATION_RULES: list[tuple[list[str], type[OpenNotebookError], str | None
     ),
     # Network errors
     (
-        ["connecterror", "timeoutexception", "connection refused", "connection error", "timed out", "timeout"],
+        [
+            "connecterror",
+            "timeoutexception",
+            "connection refused",
+            "connection error",
+            "timed out",
+            "timeout",
+        ],
         NetworkError,
         "Could not connect to the AI provider. Please check your network connection and provider URL.",
     ),
     # Context length errors
     (
-        ["context length", "token limit", "maximum context", "context_length_exceeded", "max_tokens"],
+        [
+            "context length",
+            "token limit",
+            "maximum context",
+            "context_length_exceeded",
+            "max_tokens",
+        ],
         ContextLengthExceededError,
         "Content too large for the selected model. Try using a smaller selection or a model with a larger context window.",
     ),
@@ -63,7 +76,14 @@ _CLASSIFICATION_RULES: list[tuple[list[str], type[OpenNotebookError], str | None
     ),
     # Provider availability errors
     (
-        ["500", "502", "503", "service unavailable", "overloaded", "internal server error"],
+        [
+            "500",
+            "502",
+            "503",
+            "service unavailable",
+            "overloaded",
+            "internal server error",
+        ],
         ExternalServiceError,
         "The AI provider is temporarily unavailable. Please try again in a few minutes.",
     ),
@@ -87,13 +107,13 @@ def classify_error(exception: BaseException) -> tuple[type[OpenNotebookError], s
     for keywords, exc_class, message in _CLASSIFICATION_RULES:
         for keyword in keywords:
             if keyword in combined:
-                user_message = message if message is not None else _truncate(str(exception))
+                user_message = (
+                    message if message is not None else _truncate(str(exception))
+                )
                 return exc_class, user_message
 
     # Unclassified error - log for future improvement
-    logger.warning(
-        f"Unclassified LLM error ({type(exception).__name__}): {exception}"
-    )
+    logger.warning(f"Unclassified LLM error ({type(exception).__name__}): {exception}")
     return ExternalServiceError, f"AI service error: {_truncate(str(exception))}"
 
 
diff --git a/open_notebook/utils/graph_utils.py b/open_notebook/utils/graph_utils.py
index afb004ae..a6502be2 100644
--- a/open_notebook/utils/graph_utils.py
+++ b/open_notebook/utils/graph_utils.py
@@ -14,11 +14,7 @@ async def get_session_message_count(graph, session_id: str) -> int:
             graph.get_state,
             config=RunnableConfig(configurable={"thread_id": session_id}),
         )
-        if (
-            thread_state
-            and thread_state.values
-            and "messages" in thread_state.values
-        ):
+        if thread_state and thread_state.values and "messages" in thread_state.values:
             return len(thread_state.values["messages"])
     except Exception as e:
         logger.warning(f"Could not fetch message count for session {session_id}: {e}")
diff --git a/open_notebook/utils/url_validation.py b/open_notebook/utils/url_validation.py
index 2355f6ce..0f633eb9 100644
--- a/open_notebook/utils/url_validation.py
+++ b/open_notebook/utils/url_validation.py
@@ -86,7 +86,11 @@ async def validate_url(url: str, provider: str) -> None:
 
         except ValueError as ve:
             # Re-raise our own ValueErrors
-            if "Link-local" in str(ve) or "Invalid URL" in str(ve) or "metadata" in str(ve):
+            if (
+                "Link-local" in str(ve)
+                or "Invalid URL" in str(ve)
+                or "metadata" in str(ve)
+            ):
                 raise
             # Not an IP address, it's a hostname - need to resolve and check
             try:
@@ -201,7 +205,10 @@ async def _resolve_safe_ips(hostname: str) -> list[str]:
             _reject_dangerous_ip(parsed_ip, hostname, resolved=True)
             safe.append(ip_addr)
         except ValueError as inner_ve:
-            if "link-local" in str(inner_ve).lower() or "metadata" in str(inner_ve).lower():
+            if (
+                "link-local" in str(inner_ve).lower()
+                or "metadata" in str(inner_ve).lower()
+            ):
                 raise
             # Skip non-IP addresses (e.g., IPv6 zones)
             continue
@@ -236,9 +243,8 @@ def _reject_dangerous_ip(
     # Block AWS's IMDSv6 metadata address - a Unique Local Address, not
     # link-local, so it needs its own explicit check. Compare without scope
     # ID so scoped forms (fd00:ec2::254%eth0) cannot bypass the sentinel.
-    is_aws_imds_v6 = (
-        isinstance(ip, ipaddress.IPv6Address)
-        and int(ip) == int(_AWS_IMDS_V6_ADDRESS)
+    is_aws_imds_v6 = isinstance(ip, ipaddress.IPv6Address) and int(ip) == int(
+        _AWS_IMDS_V6_ADDRESS
     )
     if is_aws_imds_v6:
         if resolved:
diff --git a/open_notebook/utils/version_utils.py b/open_notebook/utils/version_utils.py
index 5591f37d..25a2527a 100644
--- a/open_notebook/utils/version_utils.py
+++ b/open_notebook/utils/version_utils.py
@@ -33,7 +33,9 @@ async def get_version_from_github_async(repo_url: str, branch: str = "main") ->
     owner, repo = path_parts[0], path_parts[1]
 
     # Construct raw content URL for pyproject.toml
-    raw_url = f"https://raw.githubusercontent.com/{owner}/{repo}/{branch}/pyproject.toml"
+    raw_url = (
+        f"https://raw.githubusercontent.com/{owner}/{repo}/{branch}/pyproject.toml"
+    )
 
     # Fetch the file with timeout using httpx
     async with httpx.AsyncClient(timeout=10.0) as client:
@@ -56,6 +58,7 @@ async def get_version_from_github_async(repo_url: str, branch: str = "main") ->
 
     return version_str
 
+
 def get_version_from_github(repo_url: str, branch: str = "main") -> str:
     """
     Fetch and parse the version from pyproject.toml in a public GitHub repository.
diff --git a/tests/test_add_insight_failure_propagation.py b/tests/test_add_insight_failure_propagation.py
index 1e957504..8c23237f 100644
--- a/tests/test_add_insight_failure_propagation.py
+++ b/tests/test_add_insight_failure_propagation.py
@@ -86,9 +86,7 @@ class TestTransformationGraphPropagatesFailure:
                 "open_notebook.graphs.transformation.DefaultPrompts",
                 return_value=MagicMock(transformation_instructions=None),
             ),
-            patch(
-                "open_notebook.graphs.transformation.Prompter"
-            ) as mock_prompter_cls,
+            patch("open_notebook.graphs.transformation.Prompter") as mock_prompter_cls,
             patch(
                 "open_notebook.graphs.transformation.provision_langchain_model",
                 new=AsyncMock(return_value=fake_chain),
@@ -130,9 +128,7 @@ class TestTransformationGraphPropagatesFailure:
                 "open_notebook.graphs.transformation.DefaultPrompts",
                 return_value=MagicMock(transformation_instructions=None),
             ),
-            patch(
-                "open_notebook.graphs.transformation.Prompter"
-            ) as mock_prompter_cls,
+            patch("open_notebook.graphs.transformation.Prompter") as mock_prompter_cls,
             patch(
                 "open_notebook.graphs.transformation.provision_langchain_model",
                 new=AsyncMock(return_value=fake_chain),
diff --git a/tests/test_anthropic_compatible_provider.py b/tests/test_anthropic_compatible_provider.py
index b4678537..8efa8b56 100644
--- a/tests/test_anthropic_compatible_provider.py
+++ b/tests/test_anthropic_compatible_provider.py
@@ -49,9 +49,7 @@ async def test_update_rejects_clearing_compatible_base_url():
         patch("api.routers.credentials.require_encryption_key"),
         pytest.raises(HTTPException) as exc_info,
     ):
-        await update_credential(
-            "credential:test", UpdateCredentialRequest(base_url="")
-        )
+        await update_credential("credential:test", UpdateCredentialRequest(base_url=""))
 
     assert exc_info.value.status_code == 400
     assert "require a base URL" in exc_info.value.detail
@@ -159,7 +157,10 @@ async def test_model_manager_maps_normalized_url_to_anthropic_factory(
 
     assert result is factory_model
     assert validate_url_mock.await_count >= 1
-    assert validate_url_mock.await_args_list[0].args == (base_url, "anthropic_compatible")
+    assert validate_url_mock.await_args_list[0].args == (
+        base_url,
+        "anthropic_compatible",
+    )
     create_language.assert_called_once_with(
         model_name="compatible-model",
         provider="anthropic",
@@ -168,7 +169,9 @@ async def test_model_manager_maps_normalized_url_to_anthropic_factory(
 
 
 @pytest.mark.asyncio
-async def test_model_manager_uses_default_database_credential_when_unlinked(monkeypatch):
+async def test_model_manager_uses_default_database_credential_when_unlinked(
+    monkeypatch,
+):
     from open_notebook.ai.models import Model, ModelManager
 
     credential = Credential(
@@ -189,7 +192,9 @@ async def test_model_manager_uses_default_database_credential_when_unlinked(monk
 
     with (
         patch.object(Model, "get", AsyncMock(return_value=model)),
-        patch.object(Credential, "get_by_provider", AsyncMock(return_value=[credential])),
+        patch.object(
+            Credential, "get_by_provider", AsyncMock(return_value=[credential])
+        ),
         patch(
             "open_notebook.ai.models.AIFactory.create_language",
             return_value=factory_model,
diff --git a/tests/test_capabilities_api.py b/tests/test_capabilities_api.py
index 38900e58..6b47068d 100644
--- a/tests/test_capabilities_api.py
+++ b/tests/test_capabilities_api.py
@@ -19,9 +19,7 @@ def client():
 
 
 def _patch_probes(monkeypatch, *, docling, crawl4ai_local, crawl4ai_remote):
-    monkeypatch.setattr(
-        "api.routers.capabilities.docling_available", lambda: docling
-    )
+    monkeypatch.setattr("api.routers.capabilities.docling_available", lambda: docling)
     monkeypatch.setattr(
         "api.routers.capabilities.crawl4ai_remote_configured",
         lambda: crawl4ai_remote,
@@ -78,9 +76,7 @@ class TestCrawl4aiLocalReadiness:
     def test_not_ready_when_package_missing(self, monkeypatch):
         import open_notebook.utils.runtime_capabilities as cap
 
-        monkeypatch.setattr(
-            cap.importlib.util, "find_spec", lambda name, *a, **k: None
-        )
+        monkeypatch.setattr(cap.importlib.util, "find_spec", lambda name, *a, **k: None)
         assert cap.crawl4ai_local_ready() is False
 
     def test_not_ready_when_browser_missing(self, monkeypatch, tmp_path):
diff --git a/tests/test_chat_routers_characterization.py b/tests/test_chat_routers_characterization.py
index b321b317..4ef7360b 100644
--- a/tests/test_chat_routers_characterization.py
+++ b/tests/test_chat_routers_characterization.py
@@ -185,9 +185,7 @@ async def test_get_chat_session_no_state_yields_empty_messages(
 @patch("api.routers._chat_shared.Source.get", new_callable=AsyncMock)
 async def test_create_source_chat_session_missing_source_returns_404(mock_get, client):
     mock_get.side_effect = _nf
-    resp = client.post(
-        "/api/sources/gone/chat/sessions", json={"source_id": "gone"}
-    )
+    resp = client.post("/api/sources/gone/chat/sessions", json={"source_id": "gone"})
     assert resp.status_code == 404
     assert resp.json()["detail"] == "Source not found"
     mock_get.assert_awaited_once_with("source:gone")
diff --git a/tests/test_chunking.py b/tests/test_chunking.py
index 4044e8a4..759eb911 100644
--- a/tests/test_chunking.py
+++ b/tests/test_chunking.py
@@ -42,6 +42,7 @@ def _assert_chunks_within_token_limit(chunks: list[str]) -> None:
     for chunk in chunks:
         assert token_count(chunk) <= CHUNK_SIZE
 
+
 # ============================================================================
 # TEST SUITE 1: Content Type Detection from Extension
 # ============================================================================
@@ -55,14 +56,21 @@ class TestDetectContentTypeFromExtension:
         assert detect_content_type_from_extension("file.html") == ContentType.HTML
         assert detect_content_type_from_extension("file.htm") == ContentType.HTML
         assert detect_content_type_from_extension("file.xhtml") == ContentType.HTML
-        assert detect_content_type_from_extension("/path/to/file.HTML") == ContentType.HTML
+        assert (
+            detect_content_type_from_extension("/path/to/file.HTML") == ContentType.HTML
+        )
 
     def test_markdown_extensions(self):
         """Test Markdown file extensions."""
         assert detect_content_type_from_extension("file.md") == ContentType.MARKDOWN
-        assert detect_content_type_from_extension("file.markdown") == ContentType.MARKDOWN
+        assert (
+            detect_content_type_from_extension("file.markdown") == ContentType.MARKDOWN
+        )
         assert detect_content_type_from_extension("file.mdown") == ContentType.MARKDOWN
-        assert detect_content_type_from_extension("/path/to/README.MD") == ContentType.MARKDOWN
+        assert (
+            detect_content_type_from_extension("/path/to/README.MD")
+            == ContentType.MARKDOWN
+        )
 
     def test_plain_text_extensions(self):
         """Test plain text file extensions."""
@@ -264,14 +272,18 @@ class TestChunkText:
 
     def test_cjk_text_is_chunked_by_tokens(self):
         """Test that long CJK text is chunked using token measurement."""
-        text = _build_text_exceeding_tokens("這是一段中文內容，用來驗證分塊邏輯。", CHUNK_SIZE)
+        text = _build_text_exceeding_tokens(
+            "這是一段中文內容，用來驗證分塊邏輯。", CHUNK_SIZE
+        )
         chunks = chunk_text(text, content_type=ContentType.PLAIN)
         assert len(chunks) > 1
         _assert_chunks_within_token_limit(chunks)
 
     def test_mixed_language_text_is_chunked_by_tokens(self):
         """Test that mixed-language text is chunked using token measurement."""
-        fragment = "This paragraph mixes English and 中文內容 to verify token-based chunking. "
+        fragment = (
+            "This paragraph mixes English and 中文內容 to verify token-based chunking. "
+        )
         text = _build_text_exceeding_tokens(fragment, CHUNK_SIZE)
         chunks = chunk_text(text, content_type=ContentType.PLAIN)
         assert len(chunks) > 1
diff --git a/tests/test_connection_test_classification.py b/tests/test_connection_test_classification.py
index 6ca2f9d4..7b53ab74 100644
--- a/tests/test_connection_test_classification.py
+++ b/tests/test_connection_test_classification.py
@@ -32,7 +32,9 @@ GOOGLE_DEPRECATED = "400 Model gemini-1.5-pro has been deprecated."
 GOOGLE_BAD_KEY_401 = "401 API key not valid. Please pass a valid API key."
 GOOGLE_PERM_403 = "403 Permission denied on resource project."
 GOOGLE_QUOTA_429 = "429 Resource has been exhausted (e.g. check quota)."
-DNS_FAILURE = "Connection error: [Errno -2] Name or service not known (getaddrinfo failed)"
+DNS_FAILURE = (
+    "Connection error: [Errno -2] Name or service not known (getaddrinfo failed)"
+)
 TIMEOUT = "Request timed out after 10s"
 
 
@@ -55,7 +57,12 @@ class TestConnectionFailureReason:
 
     @pytest.mark.parametrize(
         "msg",
-        [GOOGLE_RETIRED_MODEL_404, GOOGLE_DEPRECATED, GOOGLE_QUOTA_429, ANTHROPIC_RETIRED_HAIKU_404],
+        [
+            GOOGLE_RETIRED_MODEL_404,
+            GOOGLE_DEPRECATED,
+            GOOGLE_QUOTA_429,
+            ANTHROPIC_RETIRED_HAIKU_404,
+        ],
     )
     def test_provider_reached_returns_none(self, msg):
         # A model/quota problem came back FROM the provider — not a failure.
diff --git a/tests/test_cors_credentials.py b/tests/test_cors_credentials.py
index bc11f80b..8bad8454 100644
--- a/tests/test_cors_credentials.py
+++ b/tests/test_cors_credentials.py
@@ -29,24 +29,23 @@ class TestRealAppDefaultsToNoCredentialsWithWildcard:
         assert api_main.CORS_ALLOW_CREDENTIALS is False
 
     def test_cors_middleware_registered_with_credentials_disabled(self):
-        matches = [
-            m for m in api_main.app.user_middleware if m.cls is CORSMiddleware
-        ]
+        matches = [m for m in api_main.app.user_middleware if m.cls is CORSMiddleware]
         assert len(matches) == 1
         assert matches[0].kwargs["allow_credentials"] is False
 
     def test_real_response_does_not_claim_allow_credentials(self):
         client = TestClient(api_main.app)
-        response = client.get(
-            "/health", headers={"Origin": "https://evil.example.com"}
-        )
+        response = client.get("/health", headers={"Origin": "https://evil.example.com"})
         assert response.status_code == 200
         assert "access-control-allow-credentials" not in {
             k.lower() for k in response.headers.keys()
         }
         # Still reflects the origin (wildcard-equivalent), just without
         # granting credentialed access.
-        assert response.headers.get("access-control-allow-origin") in ("*", "https://evil.example.com")
+        assert response.headers.get("access-control-allow-origin") in (
+            "*",
+            "https://evil.example.com",
+        )
 
 
 class TestExplicitWildcardAlsoDisablesCredentials:
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index a4d208e5..2f2000c6 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -35,9 +35,7 @@ class TestCredentialCascadeDelete:
         mock_model2.name = "gpt-3.5-turbo"
 
         mock_cred = AsyncMock()
-        mock_cred.get_linked_models = AsyncMock(
-            return_value=[mock_model1, mock_model2]
-        )
+        mock_cred.get_linked_models = AsyncMock(return_value=[mock_model1, mock_model2])
         mock_cred.delete = AsyncMock()
         mock_get.return_value = mock_cred
 
@@ -87,9 +85,7 @@ class TestCredentialCascadeDelete:
         # First call returns cred to delete, second returns target
         mock_get.side_effect = [mock_cred, mock_target_cred]
 
-        response = client.delete(
-            "/api/credentials/cred:123?migrate_to=cred:456"
-        )
+        response = client.delete("/api/credentials/cred:123?migrate_to=cred:456")
 
         assert response.status_code == 200
         data = response.json()
@@ -497,9 +493,13 @@ class TestAudioProviderWiring:
         from open_notebook.ai.model_discovery import classify_model_type
 
         # Mistral Voxtral: TTS model must not be mis-detected as STT
-        assert classify_model_type("voxtral-mini-tts-2603", "mistral") == "text_to_speech"
+        assert (
+            classify_model_type("voxtral-mini-tts-2603", "mistral") == "text_to_speech"
+        )
         assert classify_model_type("voxtral-mini-latest", "mistral") == "speech_to_text"
-        assert classify_model_type("voxtral-small-latest", "mistral") == "speech_to_text"
+        assert (
+            classify_model_type("voxtral-small-latest", "mistral") == "speech_to_text"
+        )
         # Existing Mistral classification still holds
         assert classify_model_type("mistral-large-latest", "mistral") == "language"
         assert classify_model_type("mistral-embed", "mistral") == "embedding"
@@ -541,11 +541,17 @@ class TestAudioMatrixWiring:
         from open_notebook.ai.model_discovery import classify_model_type
 
         # Gemini TTS preview is classifiable; plain Gemini STT name stays language
-        assert classify_model_type("gemini-3.1-flash-tts-preview", "google") == "text_to_speech"
+        assert (
+            classify_model_type("gemini-3.1-flash-tts-preview", "google")
+            == "text_to_speech"
+        )
         assert classify_model_type("gemini-2.5-flash", "google") == "language"
         # ElevenLabs Scribe STT must not be caught by the TTS "eleven" pattern
         assert classify_model_type("scribe_v1", "elevenlabs") == "speech_to_text"
-        assert classify_model_type("eleven_multilingual_v2", "elevenlabs") == "text_to_speech"
+        assert (
+            classify_model_type("eleven_multilingual_v2", "elevenlabs")
+            == "text_to_speech"
+        )
 
     def test_google_and_vertex_use_floating_alias(self):
         # Regression test for #970: the connection test used a hard-coded
@@ -587,12 +593,26 @@ class TestCredentialUpdateClearsFields:
         from api.models import CredentialResponse
 
         fake_response = CredentialResponse(
-            id="credential:1", name="n", provider="ollama", modalities=["language"],
-            has_api_key=False, created="2026-01-01", updated="2026-01-01", model_count=0,
+            id="credential:1",
+            name="n",
+            provider="ollama",
+            modalities=["language"],
+            has_api_key=False,
+            created="2026-01-01",
+            updated="2026-01-01",
+            model_count=0,
         )
-        with patch("api.routers.credentials.require_encryption_key"), \
-             patch("api.routers.credentials.Credential.get", new=AsyncMock(return_value=cred)), \
-             patch("api.routers.credentials.credential_to_response", return_value=fake_response):
+        with (
+            patch("api.routers.credentials.require_encryption_key"),
+            patch(
+                "api.routers.credentials.Credential.get",
+                new=AsyncMock(return_value=cred),
+            ),
+            patch(
+                "api.routers.credentials.credential_to_response",
+                return_value=fake_response,
+            ),
+        ):
             return client.put("/api/credentials/credential:1", json=body)
 
     def test_explicit_null_clears_base_url(self, client):
diff --git a/tests/test_crud_404.py b/tests/test_crud_404.py
index 43a7767a..4d30cf0b 100644
--- a/tests/test_crud_404.py
+++ b/tests/test_crud_404.py
@@ -39,7 +39,10 @@ async def test_delete_notebook_missing_returns_404(mock_get, client):
 @patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
 async def test_update_notebook_missing_returns_404(mock_get, client):
     mock_get.side_effect = _nf
-    assert client.put("/api/notebooks/notebook:gone", json={"name": "x"}).status_code == 404
+    assert (
+        client.put("/api/notebooks/notebook:gone", json={"name": "x"}).status_code
+        == 404
+    )
 
 
 @pytest.mark.asyncio
@@ -53,14 +56,19 @@ async def test_delete_preview_missing_returns_404(mock_get, client):
 @patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
 async def test_add_source_missing_notebook_returns_404(mock_get, client):
     mock_get.side_effect = _nf
-    assert client.post("/api/notebooks/notebook:gone/sources/source:1").status_code == 404
+    assert (
+        client.post("/api/notebooks/notebook:gone/sources/source:1").status_code == 404
+    )
 
 
 @pytest.mark.asyncio
 @patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
 async def test_remove_source_missing_notebook_returns_404(mock_get, client):
     mock_get.side_effect = _nf
-    assert client.delete("/api/notebooks/notebook:gone/sources/source:1").status_code == 404
+    assert (
+        client.delete("/api/notebooks/notebook:gone/sources/source:1").status_code
+        == 404
+    )
 
 
 # --- notes ------------------------------------------------------------------
@@ -105,7 +113,10 @@ async def test_delete_model_missing_returns_404(mock_get, client):
 @patch("api.routers.credentials.Credential.get", new_callable=AsyncMock)
 async def test_update_credential_missing_returns_404(mock_get, client):
     mock_get.side_effect = _nf
-    assert client.put("/api/credentials/credential:gone", json={"name": "x"}).status_code == 404
+    assert (
+        client.put("/api/credentials/credential:gone", json={"name": "x"}).status_code
+        == 404
+    )
 
 
 @pytest.mark.asyncio
@@ -120,12 +131,18 @@ async def test_delete_credential_missing_returns_404(mock_get, client):
 
 @pytest.mark.asyncio
 @patch("api.routers.embedding.Source.get", new_callable=AsyncMock)
-@patch("api.routers.embedding.model_manager.get_embedding_model", new_callable=AsyncMock)
+@patch(
+    "api.routers.embedding.model_manager.get_embedding_model", new_callable=AsyncMock
+)
 async def test_embed_missing_source_returns_404(mock_embed_model, mock_get, client):
     mock_embed_model.return_value = MagicMock()  # an embedding model is configured
     mock_get.side_effect = _nf
     resp = client.post(
         "/api/embed",
-        json={"item_id": "source:gone", "item_type": "source", "async_processing": False},
+        json={
+            "item_id": "source:gone",
+            "item_type": "source",
+            "async_processing": False,
+        },
     )
     assert resp.status_code == 404
diff --git a/tests/test_embedding.py b/tests/test_embedding.py
index 54611adb..dedaa304 100644
--- a/tests/test_embedding.py
+++ b/tests/test_embedding.py
@@ -22,6 +22,7 @@ def _build_text_exceeding_tokens(fragment: str, threshold_tokens: int) -> str:
         text += fragment
     return text
 
+
 # ============================================================================
 # TEST SUITE 1: Mean Pooling
 # ============================================================================
@@ -65,6 +66,7 @@ class TestMeanPoolEmbeddings:
         # Result should be same direction, just normalized
         # Original is already normalized if we normalize it
         import numpy as np
+
         orig_norm = np.linalg.norm(embedding)
         expected = [v / orig_norm for v in embedding]
         for i in range(4):
@@ -86,6 +88,7 @@ class TestMeanPoolEmbeddings:
         result = await mean_pool_embeddings(embeddings)
         # Check result is unit length
         import numpy as np
+
         norm = np.linalg.norm(result)
         assert abs(norm - 1.0) < 0.001
 
@@ -93,6 +96,7 @@ class TestMeanPoolEmbeddings:
     async def test_high_dimensional(self):
         """Test mean pooling with high-dimensional embeddings."""
         import numpy as np
+
         # Create random embeddings of dimension 768 (typical embedding size)
         np.random.seed(42)
         embeddings = [
@@ -237,7 +241,6 @@ class TestGenerateEmbedding:
             )
             assert len(result) == 3
 
-
     @pytest.mark.asyncio
     async def test_batching(self):
         """Test that large input is split into batches of EMBEDDING_BATCH_SIZE."""
@@ -266,8 +269,12 @@ class TestGenerateEmbedding:
             assert len(result) == num_texts
             # 120 texts / 50 batch size = 3 batches (50, 50, 20)
             assert mock_model.aembed.call_count == 3
-            assert len(mock_model.aembed.call_args_list[0][0][0]) == EMBEDDING_BATCH_SIZE
-            assert len(mock_model.aembed.call_args_list[1][0][0]) == EMBEDDING_BATCH_SIZE
+            assert (
+                len(mock_model.aembed.call_args_list[0][0][0]) == EMBEDDING_BATCH_SIZE
+            )
+            assert (
+                len(mock_model.aembed.call_args_list[1][0][0]) == EMBEDDING_BATCH_SIZE
+            )
             assert len(mock_model.aembed.call_args_list[2][0][0]) == 20
 
     @pytest.mark.asyncio
diff --git a/tests/test_error_message_sanitization.py b/tests/test_error_message_sanitization.py
index d3882cc6..4e8f1016 100644
--- a/tests/test_error_message_sanitization.py
+++ b/tests/test_error_message_sanitization.py
@@ -97,9 +97,7 @@ class TestInvalidInputErrorsStillReturnTheirOwnSafeMessage:
         with patch(
             "api.routers.sources.Source.get", new=AsyncMock(return_value=mock_source)
         ):
-            response = client.put(
-                "/api/sources/source:abc123", json={"title": "x"}
-            )
+            response = client.put("/api/sources/source:abc123", json={"title": "x"})
 
         assert response.status_code == 400
         assert response.json()["detail"] == "Title cannot be empty"
diff --git a/tests/test_max_body_size_middleware.py b/tests/test_max_body_size_middleware.py
index ad789c06..2bc74667 100644
--- a/tests/test_max_body_size_middleware.py
+++ b/tests/test_max_body_size_middleware.py
@@ -33,9 +33,7 @@ async def _echo_body_app(scope, receive, send):
 
 
 def make_scope(headers=None, method="POST", path="/upload"):
-    raw_headers = [
-        (k.lower().encode(), v.encode()) for k, v in (headers or {}).items()
-    ]
+    raw_headers = [(k.lower().encode(), v.encode()) for k, v in (headers or {}).items()]
     return {
         "type": "http",
         "method": method,
@@ -129,7 +127,9 @@ class TestMiddlewareAsgiLevel:
         send = CollectingSend()
         await middleware(scope, FakeReceiveStream([b"x" * 1000]), send)
 
-        assert not app_called, "inner app must not run when Content-Length exceeds the limit"
+        assert not app_called, (
+            "inner app must not run when Content-Length exceeds the limit"
+        )
         assert send.status == 413
 
     @pytest.mark.asyncio
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index 5a35862c..eb4d303e 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -38,9 +38,7 @@ def make_fake_client(handler):
 
 
 def json_response(url, payload, status_code=200):
-    return httpx.Response(
-        status_code, json=payload, request=httpx.Request("GET", url)
-    )
+    return httpx.Response(status_code, json=payload, request=httpx.Request("GET", url))
 
 
 class TestOpenAICompatTable:
@@ -151,9 +149,15 @@ class TestGenericOpenAICompatDiscovery:
                 {
                     "data": [
                         # capabilities flag wins over name-based classification
-                        {"id": "magistral-medium", "capabilities": {"completion_chat": True}},
+                        {
+                            "id": "magistral-medium",
+                            "capabilities": {"completion_chat": True},
+                        },
                         # no chat capability -> falls back to name patterns
-                        {"id": "mistral-embed", "capabilities": {"completion_chat": False}},
+                        {
+                            "id": "mistral-embed",
+                            "capabilities": {"completion_chat": False},
+                        },
                     ]
                 },
             )
@@ -260,9 +264,7 @@ class TestAnthropicDiscovery:
         models = await discover_anthropic_models()
 
         assert len(requests) == 2
-        assert all(
-            r["url"] == "https://api.anthropic.com/v1/models" for r in requests
-        )
+        assert all(r["url"] == "https://api.anthropic.com/v1/models" for r in requests)
         assert requests[0]["headers"] == {
             "x-api-key": "sk-ant-test",
             "anthropic-version": "2023-06-01",
@@ -354,7 +356,9 @@ class TestNewEsperantoProviders:
     def test_ppq_classification_by_substring(self):
         from open_notebook.ai.model_discovery import classify_model_type
 
-        assert classify_model_type("openai/text-embedding-3-small", "ppq") == "embedding"
+        assert (
+            classify_model_type("openai/text-embedding-3-small", "ppq") == "embedding"
+        )
         assert classify_model_type("nova-3", "ppq") == "speech_to_text"
         assert classify_model_type("deepgram_aura_2", "ppq") == "text_to_speech"
         assert classify_model_type("auto", "ppq") == "language"
diff --git a/tests/test_models_api.py b/tests/test_models_api.py
index 8a8f534d..957ce0bc 100644
--- a/tests/test_models_api.py
+++ b/tests/test_models_api.py
@@ -463,7 +463,9 @@ class TestUpdateDefaultModels:
 
     def test_absent_field_keeps_current_value(self, client):
         defaults = self._mock_defaults()
-        response = self._put(client, defaults, {"default_tools_model": "model:new-tools"})
+        response = self._put(
+            client, defaults, {"default_tools_model": "model:new-tools"}
+        )
 
         assert response.status_code == 200
         assert defaults.default_tools_model == "model:new-tools"
@@ -512,19 +514,42 @@ class TestAutoAssignDefaults:
 
     def _models(self):
         return [
-            {"id": "model:lang", "provider": "openai", "name": "gpt-4o", "type": "language"},
-            {"id": "model:embed", "provider": "openai", "name": "text-embedding-3", "type": "embedding"},
-            {"id": "model:tts", "provider": "openai", "name": "tts-1", "type": "text_to_speech"},
-            {"id": "model:stt", "provider": "openai", "name": "whisper-1", "type": "speech_to_text"},
+            {
+                "id": "model:lang",
+                "provider": "openai",
+                "name": "gpt-4o",
+                "type": "language",
+            },
+            {
+                "id": "model:embed",
+                "provider": "openai",
+                "name": "text-embedding-3",
+                "type": "embedding",
+            },
+            {
+                "id": "model:tts",
+                "provider": "openai",
+                "name": "tts-1",
+                "type": "text_to_speech",
+            },
+            {
+                "id": "model:stt",
+                "provider": "openai",
+                "name": "whisper-1",
+                "type": "speech_to_text",
+            },
         ]
 
     def _post(self, client, defaults):
-        with patch(
-            "api.routers.models.DefaultModels.get_instance",
-            new=AsyncMock(return_value=defaults),
-        ), patch(
-            "open_notebook.database.repository.repo_query",
-            new=AsyncMock(return_value=self._models()),
+        with (
+            patch(
+                "api.routers.models.DefaultModels.get_instance",
+                new=AsyncMock(return_value=defaults),
+            ),
+            patch(
+                "open_notebook.database.repository.repo_query",
+                new=AsyncMock(return_value=self._models()),
+            ),
         ):
             return client.post("/api/models/auto-assign")
 
@@ -583,18 +608,19 @@ class TestGetDefaultModelFallback:
         return defaults
 
     @pytest.mark.asyncio
-    @pytest.mark.parametrize(
-        "model_type", ["transformation", "tools", "large_context"]
-    )
+    @pytest.mark.parametrize("model_type", ["transformation", "tools", "large_context"])
     async def test_text_optional_slots_fall_back_to_chat(self, model_type):
         from open_notebook.ai.models import model_manager
 
         defaults = self._defaults()
-        with patch.object(
-            model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
-        ), patch.object(
-            model_manager, "get_model", new=AsyncMock(return_value="chat-model-obj")
-        ) as mock_get_model:
+        with (
+            patch.object(
+                model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
+            ),
+            patch.object(
+                model_manager, "get_model", new=AsyncMock(return_value="chat-model-obj")
+            ) as mock_get_model,
+        ):
             result = await model_manager.get_default_model(model_type)
 
         assert result == "chat-model-obj"
@@ -607,11 +633,14 @@ class TestGetDefaultModelFallback:
         from open_notebook.ai.models import model_manager
 
         defaults = self._defaults()
-        with patch.object(
-            model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
-        ), patch.object(
-            model_manager, "get_model", new=AsyncMock(return_value="obj")
-        ) as mock_get_model:
+        with (
+            patch.object(
+                model_manager, "get_defaults", new=AsyncMock(return_value=defaults)
+            ),
+            patch.object(
+                model_manager, "get_model", new=AsyncMock(return_value="obj")
+            ) as mock_get_model,
+        ):
             tts = await model_manager.get_default_model("text_to_speech")
             stt = await model_manager.get_default_model("speech_to_text")
 
diff --git a/tests/test_note_save_embed_resilience.py b/tests/test_note_save_embed_resilience.py
index d69ec579..73155be3 100644
--- a/tests/test_note_save_embed_resilience.py
+++ b/tests/test_note_save_embed_resilience.py
@@ -91,9 +91,7 @@ class TestNoteSaveEmbedResilience:
         note = Note(title="Test", content=None)
         with (
             patch("open_notebook.domain.base.ObjectModel.save", new=AsyncMock()),
-            patch(
-                "open_notebook.domain.notebook.submit_command"
-            ) as mock_submit,
+            patch("open_notebook.domain.notebook.submit_command") as mock_submit,
         ):
             object.__setattr__(note, "id", "note:abc123")
             command_id = await note.save()
@@ -119,7 +117,11 @@ class TestEmbeddingEndpointNoteBranch:
         ):
             response = client.post(
                 "/api/embed",
-                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+                json={
+                    "item_id": "note:abc123",
+                    "item_type": "note",
+                    "async_processing": False,
+                },
             )
 
         assert response.status_code == 500
@@ -131,9 +133,7 @@ class TestEmbeddingEndpointNoteBranch:
 
         with (
             patch("api.routers.embedding.Note.get", new=AsyncMock(return_value=note)),
-            patch.object(
-                Note, "save", new=AsyncMock(return_value="command:abc123")
-            ),
+            patch.object(Note, "save", new=AsyncMock(return_value="command:abc123")),
             patch(
                 "open_notebook.ai.models.model_manager.get_embedding_model",
                 new=AsyncMock(return_value=object()),
@@ -141,7 +141,11 @@ class TestEmbeddingEndpointNoteBranch:
         ):
             response = client.post(
                 "/api/embed",
-                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+                json={
+                    "item_id": "note:abc123",
+                    "item_type": "note",
+                    "async_processing": False,
+                },
             )
 
         assert response.status_code == 200
@@ -165,7 +169,11 @@ class TestEmbeddingEndpointNoteBranch:
         ):
             response = client.post(
                 "/api/embed",
-                json={"item_id": "note:abc123", "item_type": "note", "async_processing": False},
+                json={
+                    "item_id": "note:abc123",
+                    "item_type": "note",
+                    "async_processing": False,
+                },
             )
 
         assert response.status_code == 200
diff --git a/tests/test_notes_api.py b/tests/test_notes_api.py
index eb11721e..719693aa 100644
--- a/tests/test_notes_api.py
+++ b/tests/test_notes_api.py
@@ -91,9 +91,7 @@ class TestNoteUpdate:
         assert data["command_id"] == "command:embed789"
 
     @patch("api.routers.notes.Note")
-    def test_update_note_command_id_none_when_no_embedding(
-        self, mock_note_cls, client
-    ):
+    def test_update_note_command_id_none_when_no_embedding(self, mock_note_cls, client):
         """Test that command_id is None on update when no embedding is triggered."""
         mock_note = AsyncMock()
         mock_note.id = "note:abc123"
diff --git a/tests/test_podcast_audio_containment.py b/tests/test_podcast_audio_containment.py
index 50fbf8ea..44943131 100644
--- a/tests/test_podcast_audio_containment.py
+++ b/tests/test_podcast_audio_containment.py
@@ -132,9 +132,7 @@ class TestResolveContainedAudioPath:
 
     def test_real_podcasts_folder_resolves(self):
         """Sanity check against the real (non-monkeypatched) config constant."""
-        assert (
-            resolve_contained_audio_path("episodes/abc/out.mp3") is not None
-        )
+        assert resolve_contained_audio_path("episodes/abc/out.mp3") is not None
         assert resolve_contained_audio_path("../elsewhere.mp3") is None
 
 
diff --git a/tests/test_podcast_audio_paths.py b/tests/test_podcast_audio_paths.py
index 67246182..f0b25a7f 100644
--- a/tests/test_podcast_audio_paths.py
+++ b/tests/test_podcast_audio_paths.py
@@ -44,9 +44,7 @@ class TestToRelativeAudioPath:
 
         assert to_relative_audio_path(uri) == "episodes/uuid-3/a.mp3"
 
-    def test_cwd_relative_path_under_root_becomes_relative(
-        self, tmp_path, monkeypatch
-    ):
+    def test_cwd_relative_path_under_root_becomes_relative(self, tmp_path, monkeypatch):
         """podcast-creator receives a CWD-relative output_dir when
         DATA_FOLDER is './data'; the helper must normalize either form."""
         root = tmp_path / "data" / "podcasts"
diff --git a/tests/test_podcast_episode_model_resolution.py b/tests/test_podcast_episode_model_resolution.py
index 8e4f63dd..649cb54f 100644
--- a/tests/test_podcast_episode_model_resolution.py
+++ b/tests/test_podcast_episode_model_resolution.py
@@ -84,9 +84,7 @@ def unresolvable_episode(suffix="gone"):
 class TestGetDisplayInfoForIdsUnit:
     @pytest.mark.asyncio
     async def test_empty_input_returns_empty_without_querying(self):
-        with patch(
-            "open_notebook.ai.models.repo_query", new=AsyncMock()
-        ) as mock_query:
+        with patch("open_notebook.ai.models.repo_query", new=AsyncMock()) as mock_query:
             result = await Model.get_display_info_for_ids([])
         assert result == {}
         mock_query.assert_not_called()
diff --git a/tests/test_podcast_job_status_batching.py b/tests/test_podcast_job_status_batching.py
index a3738c20..356e3832 100644
--- a/tests/test_podcast_job_status_batching.py
+++ b/tests/test_podcast_job_status_batching.py
@@ -208,9 +208,7 @@ class TestListPodcastEpisodesUsesBatchedLookup:
     @pytest.mark.asyncio
     async def test_error_message_propagates_from_batch_result(self):
         episode = make_episode(command="command:err", suffix="err")
-        batch_result = {
-            "command:err": {"status": "failed", "error_message": "kaboom"}
-        }
+        batch_result = {"command:err": {"status": "failed", "error_message": "kaboom"}}
 
         with (
             patch(
diff --git a/tests/test_podcast_legacy_field_removal.py b/tests/test_podcast_legacy_field_removal.py
index 78af8ffe..8b9e5a3c 100644
--- a/tests/test_podcast_legacy_field_removal.py
+++ b/tests/test_podcast_legacy_field_removal.py
@@ -37,7 +37,9 @@ class TestMigration22Registration:
         manager = AsyncMigrationManager()
         assert len(manager.up_migrations) >= 22
         assert len(manager.up_migrations) == len(manager.down_migrations)
-        assert "REMOVE FIELD IF EXISTS outline_provider" in manager.up_migrations[21].sql
+        assert (
+            "REMOVE FIELD IF EXISTS outline_provider" in manager.up_migrations[21].sql
+        )
 
 
 class TestMigration22Content:
diff --git a/tests/test_podcast_path.py b/tests/test_podcast_path.py
index 2ac265b5..4cf81bca 100644
--- a/tests/test_podcast_path.py
+++ b/tests/test_podcast_path.py
@@ -35,9 +35,7 @@ class TestBuildEpisodeOutputDir:
         from open_notebook.config import PODCASTS_FOLDER
 
         dir_name, output_dir = build_episode_output_dir()
-        assert str(output_dir) == str(
-            Path(PODCASTS_FOLDER) / "episodes" / dir_name
-        )
+        assert str(output_dir) == str(Path(PODCASTS_FOLDER) / "episodes" / dir_name)
 
     def test_no_collision_between_calls(self):
         dir1, _ = build_episode_output_dir("/data/podcasts")
diff --git a/tests/test_podcast_speaker_profile.py b/tests/test_podcast_speaker_profile.py
index 4f60ec44..efe834d7 100644
--- a/tests/test_podcast_speaker_profile.py
+++ b/tests/test_podcast_speaker_profile.py
@@ -108,9 +108,7 @@ class TestSpeakerProfileResolution:
             ),
             patch.object(SpeakerProfile, "resolve", new=speaker_resolve),
         ):
-            with pytest.raises(
-                ValueError, match="has no speaker profile configured"
-            ):
+            with pytest.raises(ValueError, match="has no speaker profile configured"):
                 await generate_podcast_command(make_input(speaker_profile=None))
 
         speaker_resolve.assert_not_awaited()
@@ -357,9 +355,7 @@ class TestOrphanedProfileDoesNotPoisonConfig:
                 "commands.podcast_commands._resolve_model_config",
                 new=AsyncMock(return_value=resolved),
             ),
-            patch(
-                "commands.podcast_commands.repo_query", new=fake_repo_query
-            ),
+            patch("commands.podcast_commands.repo_query", new=fake_repo_query),
             patch("commands.podcast_commands.configure", new=fake_configure),
             patch(
                 "commands.podcast_commands.create_podcast",
@@ -399,6 +395,5 @@ class TestOrphanedProfileDoesNotPoisonConfig:
         assert "Orphaned Profile" not in episode_config
         # Record ID rewritten to the speaker profile NAME for podcast-creator
         assert (
-            episode_config["Test Episode Profile"]["speaker_config"]
-            == "Tech Experts"
+            episode_config["Test Episode Profile"]["speaker_config"] == "Tech Experts"
         )
diff --git a/tests/test_runtime_capabilities.py b/tests/test_runtime_capabilities.py
index 5645c5e6..a57b2701 100644
--- a/tests/test_runtime_capabilities.py
+++ b/tests/test_runtime_capabilities.py
@@ -30,9 +30,7 @@ class TestEngineRuntimeMissing:
             "open_notebook.utils.runtime_capabilities.crawl4ai_available",
             return_value=False,
         ):
-            assert (
-                engine_runtime_missing("crawl4ai") == "OPEN_NOTEBOOK_ENABLE_CRAWL4AI"
-            )
+            assert engine_runtime_missing("crawl4ai") == "OPEN_NOTEBOOK_ENABLE_CRAWL4AI"
 
     def test_crawl4ai_is_usable_when_available(self):
         with patch(
@@ -68,11 +66,14 @@ class TestEngineRuntimeMissing:
 
     def test_remote_crawl4ai_counts_as_available(self):
         """CRAWL4AI_API_URL offloads rendering — no local install needed."""
-        with patch(
-            "open_notebook.utils.runtime_capabilities.crawl4ai_local_ready",
-            return_value=False,
-        ), patch(
-            "open_notebook.utils.runtime_capabilities.crawl4ai_remote_configured",
-            return_value=True,
+        with (
+            patch(
+                "open_notebook.utils.runtime_capabilities.crawl4ai_local_ready",
+                return_value=False,
+            ),
+            patch(
+                "open_notebook.utils.runtime_capabilities.crawl4ai_remote_configured",
+                return_value=True,
+            ),
         ):
             assert engine_runtime_missing("crawl4ai") is None
diff --git a/tests/test_source_create_array_limits.py b/tests/test_source_create_array_limits.py
index d48c6fbe..78caf5a4 100644
--- a/tests/test_source_create_array_limits.py
+++ b/tests/test_source_create_array_limits.py
@@ -20,7 +20,9 @@ def make_ids(n, prefix):
 
 class TestNotebooksMaxLength:
     def test_accepts_up_to_50_notebooks(self):
-        request = SourceCreate(type="text", content="hi", notebooks=make_ids(50, "notebook"))
+        request = SourceCreate(
+            type="text", content="hi", notebooks=make_ids(50, "notebook")
+        )
         assert request.notebooks is not None
         assert len(request.notebooks) == 50
 
@@ -50,7 +52,9 @@ class TestTransformationsMaxLength:
     def test_rejects_51_transformations(self):
         with pytest.raises(ValidationError):
             SourceCreate(
-                type="text", content="hi", transformations=make_ids(51, "transformation")
+                type="text",
+                content="hi",
+                transformations=make_ids(51, "transformation"),
             )
 
     def test_default_is_empty_list(self):
diff --git a/tests/test_sources_api.py b/tests/test_sources_api.py
index 1bd251de..e9149af4 100644
--- a/tests/test_sources_api.py
+++ b/tests/test_sources_api.py
@@ -27,7 +27,9 @@ class TestAsyncSourceAssetPersistence:
     """
 
     @pytest.mark.asyncio
-    @patch("api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock)
+    @patch(
+        "api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock
+    )
     @patch("api.routers.sources.Source.add_to_notebook", new_callable=AsyncMock)
     @patch("api.routers.sources.Notebook.get", new_callable=AsyncMock)
     async def test_async_link_source_persists_url_asset(
@@ -64,7 +66,9 @@ class TestAsyncSourceAssetPersistence:
         assert source.asset.file_path is None
 
     @pytest.mark.asyncio
-    @patch("api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock)
+    @patch(
+        "api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock
+    )
     @patch("api.routers.sources.Source.add_to_notebook", new_callable=AsyncMock)
     @patch("api.routers.sources.Notebook.get", new_callable=AsyncMock)
     @patch("api.routers.sources.save_uploaded_file", new_callable=AsyncMock)
@@ -73,7 +77,9 @@ class TestAsyncSourceAssetPersistence:
     ):
         """POST /sources with type=upload and async_processing=true persists Asset(file_path=...)."""
         mock_nb_get.return_value = MagicMock()
-        mock_upload.return_value = os.path.join(os.path.abspath(UPLOADS_FOLDER), "video.mp4")
+        mock_upload.return_value = os.path.join(
+            os.path.abspath(UPLOADS_FOLDER), "video.mp4"
+        )
         mock_submit.return_value = "command:123"
 
         saved_sources = []
@@ -99,11 +105,15 @@ class TestAsyncSourceAssetPersistence:
 
         source = saved_sources[0]
         assert source.asset is not None
-        assert source.asset.file_path == os.path.join(os.path.abspath(UPLOADS_FOLDER), "video.mp4")
+        assert source.asset.file_path == os.path.join(
+            os.path.abspath(UPLOADS_FOLDER), "video.mp4"
+        )
         assert source.asset.url is None
 
     @pytest.mark.asyncio
-    @patch("api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock)
+    @patch(
+        "api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock
+    )
     @patch("api.routers.sources.Source.add_to_notebook", new_callable=AsyncMock)
     @patch("api.routers.sources.Notebook.get", new_callable=AsyncMock)
     async def test_async_text_source_has_no_asset(
@@ -143,7 +153,9 @@ class TestRetrySourceProcessing:
     edge's in/out columns, not a non-existent `source` column (#861)."""
 
     @pytest.mark.asyncio
-    @patch("api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock)
+    @patch(
+        "api.routers.sources.CommandService.submit_command_job", new_callable=AsyncMock
+    )
     @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
     @patch("api.routers.sources.Source.get", new_callable=AsyncMock)
     async def test_retry_finds_notebooks_and_requeues(
@@ -243,7 +255,14 @@ class TestTitleSortUsesAlias:
     @patch("api.routers.sources.repo_query", new_callable=AsyncMock)
     async def test_all_sort_fields_return_200(self, mock_query, client):
         mock_query.return_value = []
-        for field in ["type", "title", "created", "updated", "insights_count", "embedded"]:
+        for field in [
+            "type",
+            "title",
+            "created",
+            "updated",
+            "insights_count",
+            "embedded",
+        ]:
             response = client.get(f"/api/sources?sort_by={field}")
             assert response.status_code == 200, f"sort_by={field}"
 
diff --git a/tests/test_transformations_api.py b/tests/test_transformations_api.py
index e86fff59..c0395180 100644
--- a/tests/test_transformations_api.py
+++ b/tests/test_transformations_api.py
@@ -50,9 +50,7 @@ def test_create_transformation_with_model_id_persists_and_reads_back():
         transformation.updated = datetime(2026, 1, 1, 12, 0, 0)
 
     with (
-        patch.object(
-            Transformation, "save", autospec=True, side_effect=capture_save
-        ),
+        patch.object(Transformation, "save", autospec=True, side_effect=capture_save),
         patch(
             "api.routers.transformations.Model.get",
             new_callable=AsyncMock,
@@ -164,9 +162,7 @@ def test_update_transformation_model_id_is_used_by_subsequent_execution():
             new_callable=AsyncMock,
             return_value=transformation,
         ),
-        patch.object(
-            Transformation, "save", autospec=True, side_effect=save_update
-        ),
+        patch.object(Transformation, "save", autospec=True, side_effect=save_update),
         patch(
             "api.routers.transformations.Model.get",
             new_callable=AsyncMock,
diff --git a/tests/test_typed_exceptions_reach_handlers.py b/tests/test_typed_exceptions_reach_handlers.py
index ac425f1b..2ea6d5da 100644
--- a/tests/test_typed_exceptions_reach_handlers.py
+++ b/tests/test_typed_exceptions_reach_handlers.py
@@ -40,23 +40,101 @@ def _boom(*_args, **_kwargs):
 
 # (router, patch target, method, url, json body) — one per fixed router.
 CASES = [
-    ("chat", "api.routers.chat.Notebook.get", "GET", "/api/chat/sessions?notebook_id=notebook:1", None),
-    ("source_chat", "api.routers._chat_shared.Source.get", "GET", "/api/sources/xyz/chat/sessions", None),
+    (
+        "chat",
+        "api.routers.chat.Notebook.get",
+        "GET",
+        "/api/chat/sessions?notebook_id=notebook:1",
+        None,
+    ),
+    (
+        "source_chat",
+        "api.routers._chat_shared.Source.get",
+        "GET",
+        "/api/sources/xyz/chat/sessions",
+        None,
+    ),
     ("sources", "api.routers.sources.repo_query", "GET", "/api/sources", None),
     ("notebooks", "api.routers.notebooks.repo_query", "GET", "/api/notebooks", None),
     ("notes", "api.routers.notes.Note.get_all", "GET", "/api/notes", None),
     ("models", "api.routers.models.Model.get_all", "GET", "/api/models", None),
-    ("commands", "api.routers.commands.CommandService.get_command_status", "GET", "/api/commands/jobs/command:abc", None),
-    ("credentials", "api.routers.credentials.Credential.get_all", "GET", "/api/credentials", None),
-    ("embedding", "api.routers.embedding.model_manager.get_embedding_model", "POST", "/api/embed", {"item_id": "source:1", "item_type": "source"}),
-    ("embedding_rebuild", "api.routers.embedding_rebuild.repo_query", "POST", "/api/embeddings/rebuild", {"mode": "existing"}),
-    ("episode_profiles", "api.routers.episode_profiles.EpisodeProfile.get_all", "GET", "/api/episode-profiles", None),
-    ("insights", "api.routers.insights.SourceInsight.get", "GET", "/api/insights/source_insight:1", None),
-    ("podcasts", "api.routers.podcasts.PodcastService.list_episodes", "GET", "/api/podcasts/episodes", None),
-    ("search", "api.routers.search.text_search", "POST", "/api/search", {"query": "hello", "type": "text"}),
-    ("settings", "api.routers.settings.ContentSettings.get_instance", "GET", "/api/settings", None),
-    ("speaker_profiles", "api.routers.speaker_profiles.SpeakerProfile.get_all", "GET", "/api/speaker-profiles", None),
-    ("transformations", "api.routers.transformations.Transformation.get_all", "GET", "/api/transformations", None),
+    (
+        "commands",
+        "api.routers.commands.CommandService.get_command_status",
+        "GET",
+        "/api/commands/jobs/command:abc",
+        None,
+    ),
+    (
+        "credentials",
+        "api.routers.credentials.Credential.get_all",
+        "GET",
+        "/api/credentials",
+        None,
+    ),
+    (
+        "embedding",
+        "api.routers.embedding.model_manager.get_embedding_model",
+        "POST",
+        "/api/embed",
+        {"item_id": "source:1", "item_type": "source"},
+    ),
+    (
+        "embedding_rebuild",
+        "api.routers.embedding_rebuild.repo_query",
+        "POST",
+        "/api/embeddings/rebuild",
+        {"mode": "existing"},
+    ),
+    (
+        "episode_profiles",
+        "api.routers.episode_profiles.EpisodeProfile.get_all",
+        "GET",
+        "/api/episode-profiles",
+        None,
+    ),
+    (
+        "insights",
+        "api.routers.insights.SourceInsight.get",
+        "GET",
+        "/api/insights/source_insight:1",
+        None,
+    ),
+    (
+        "podcasts",
+        "api.routers.podcasts.PodcastService.list_episodes",
+        "GET",
+        "/api/podcasts/episodes",
+        None,
+    ),
+    (
+        "search",
+        "api.routers.search.text_search",
+        "POST",
+        "/api/search",
+        {"query": "hello", "type": "text"},
+    ),
+    (
+        "settings",
+        "api.routers.settings.ContentSettings.get_instance",
+        "GET",
+        "/api/settings",
+        None,
+    ),
+    (
+        "speaker_profiles",
+        "api.routers.speaker_profiles.SpeakerProfile.get_all",
+        "GET",
+        "/api/speaker-profiles",
+        None,
+    ),
+    (
+        "transformations",
+        "api.routers.transformations.Transformation.get_all",
+        "GET",
+        "/api/transformations",
+        None,
+    ),
 ]
 
 
diff --git a/tests/test_upload_toctou_race.py b/tests/test_upload_toctou_race.py
index 7f26674e..4235932f 100644
--- a/tests/test_upload_toctou_race.py
+++ b/tests/test_upload_toctou_race.py
@@ -35,9 +35,7 @@ def old_racy_pattern(upload_folder, original_filename, content, delay=0.02):
     suffix = Path(original_filename).suffix
     counter = 0
     while True:
-        candidate = (
-            original_filename if counter == 0 else f"{stem} ({counter}){suffix}"
-        )
+        candidate = original_filename if counter == 0 else f"{stem} ({counter}){suffix}"
         full_path = file_path / candidate
         if not full_path.exists():
             break
@@ -58,9 +56,7 @@ def new_fixed_pattern(upload_folder, original_filename, content):
 def run_concurrent_uploads(write_fn, upload_folder, n=8):
     with ThreadPoolExecutor(max_workers=n) as pool:
         futures = [
-            pool.submit(
-                write_fn, upload_folder, "report.pdf", f"content-{i}".encode()
-            )
+            pool.submit(write_fn, upload_folder, "report.pdf", f"content-{i}".encode())
             for i in range(n)
         ]
         return [f.result() for f in futures]
diff --git a/tests/test_upload_type_mitigations.py b/tests/test_upload_type_mitigations.py
index b92b072a..be460087 100644
--- a/tests/test_upload_type_mitigations.py
+++ b/tests/test_upload_type_mitigations.py
@@ -32,7 +32,9 @@ from open_notebook.domain.notebook import Asset, Source
 
 
 def make_source(file_path, **overrides):
-    defaults = dict(id="source:test123", title="Test Source", asset=Asset(file_path=file_path))
+    defaults = dict(
+        id="source:test123", title="Test Source", asset=Asset(file_path=file_path)
+    )
     defaults.update(overrides)
     return Source(**defaults)
 
@@ -45,7 +47,9 @@ def client():
 
 
 class TestDownloadsAlwaysServedAsOctetStream:
-    def test_html_file_download_is_octet_stream_not_text_html(self, client, tmp_path, monkeypatch):
+    def test_html_file_download_is_octet_stream_not_text_html(
+        self, client, tmp_path, monkeypatch
+    ):
         """Even if an attacker got an .html file stored, downloading it
         must never come back as text/html (which a browser would render)."""
         real_root = tmp_path / "uploads"
@@ -56,13 +60,17 @@ class TestDownloadsAlwaysServedAsOctetStream:
         malicious_html.write_text("<script>alert(document.cookie)</script>")
 
         source = make_source(file_path=str(malicious_html))
-        with patch("api.routers.sources.Source.get", new=AsyncMock(return_value=source)):
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=source)
+        ):
             response = client.get("/api/sources/source:test123/download")
 
         assert response.status_code == 200
         assert response.headers["content-type"] == "application/octet-stream"
 
-    def test_svg_file_download_is_octet_stream_not_svg_xml(self, client, tmp_path, monkeypatch):
+    def test_svg_file_download_is_octet_stream_not_svg_xml(
+        self, client, tmp_path, monkeypatch
+    ):
         real_root = tmp_path / "uploads"
         real_root.mkdir()
         monkeypatch.setattr("api.routers.sources.UPLOADS_FOLDER", str(real_root))
@@ -73,7 +81,9 @@ class TestDownloadsAlwaysServedAsOctetStream:
         )
 
         source = make_source(file_path=str(malicious_svg))
-        with patch("api.routers.sources.Source.get", new=AsyncMock(return_value=source)):
+        with patch(
+            "api.routers.sources.Source.get", new=AsyncMock(return_value=source)
+        ):
             response = client.get("/api/sources/source:test123/download")
 
         assert response.status_code == 200
@@ -87,7 +97,9 @@ class TestContentCoreRejectsUnrecognizedContent:
         from content_core.content.identification.file_detector import FileDetector
 
         garbage = tmp_path / "garbage.bin"
-        garbage.write_bytes(bytes(range(256)) * 4)  # not any recognized signature/text pattern
+        garbage.write_bytes(
+            bytes(range(256)) * 4
+        )  # not any recognized signature/text pattern
 
         detector = FileDetector()
         with pytest.raises(UnsupportedTypeException):
diff --git a/tests/test_url_validation.py b/tests/test_url_validation.py
index 86c8a185..cad035db 100644
--- a/tests/test_url_validation.py
+++ b/tests/test_url_validation.py
@@ -116,9 +116,7 @@ class TestUrlValidation:
 
     async def test_azure_specific_urls(self):
         """Azure OpenAI endpoints should be validated."""
-        await validate_url(
-            "https://my-resource.openai.azure.com", "azure"
-        )
+        await validate_url("https://my-resource.openai.azure.com", "azure")
         # Localhost is allowed for self-hosted
         await validate_url("http://localhost:8000", "azure")
         # Should not raise
diff --git a/tests/test_vertex_credentials_file_oracle.py b/tests/test_vertex_credentials_file_oracle.py
index 3d11801b..23cb0109 100644
--- a/tests/test_vertex_credentials_file_oracle.py
+++ b/tests/test_vertex_credentials_file_oracle.py
@@ -60,7 +60,9 @@ class TestIsVertexCredentialsFileError:
         assert _is_vertex_credentials_file_error(exc) is True
 
     def test_does_not_misclassify_unrelated_errors(self):
-        assert _is_vertex_credentials_file_error(ValueError("some other error")) is False
+        assert (
+            _is_vertex_credentials_file_error(ValueError("some other error")) is False
+        )
         assert _is_vertex_credentials_file_error(RuntimeError("rate limited")) is False
 
     def test_does_not_misclassify_network_errors(self):
@@ -71,10 +73,19 @@ class TestIsVertexCredentialsFileError:
         # through to the normal connection-error handling instead.
         from google.auth.exceptions import TransportError
 
-        assert _is_vertex_credentials_file_error(ConnectionError("connection refused")) is False
-        assert _is_vertex_credentials_file_error(ConnectionRefusedError("refused")) is False
+        assert (
+            _is_vertex_credentials_file_error(ConnectionError("connection refused"))
+            is False
+        )
+        assert (
+            _is_vertex_credentials_file_error(ConnectionRefusedError("refused"))
+            is False
+        )
         assert _is_vertex_credentials_file_error(TimeoutError("timed out")) is False
-        assert _is_vertex_credentials_file_error(TransportError("failed to connect")) is False
+        assert (
+            _is_vertex_credentials_file_error(TransportError("failed to connect"))
+            is False
+        )
 
 
 class TestTestCredentialClosesOracle:
@@ -93,7 +104,10 @@ class TestTestCredentialClosesOracle:
 
         cred = MagicMock(spec=Credential)
         cred.provider = "vertex"
-        cred.to_esperanto_config.return_value = {"project": "p", "location": "us-central1"}
+        cred.to_esperanto_config.return_value = {
+            "project": "p",
+            "location": "us-central1",
+        }
 
         from api.credentials_service import test_credential
 

From 59e103ddc77f036c480cdb00ae720fae17080868 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 22:23:12 -0300
Subject: [PATCH 326/345] chore(deps): bump esperanto 2.28, content-core 2.2,
 podcast-creator 0.13 (#1440)

- Raise the floors and refresh uv.lock. moviepy, imageio and proglog drop
  out with podcast-creator 0.13; odfpy comes in with content-core 2.2.
- Remove the pillow>=12.2.0 override: it only existed for moviepy's cap,
  and content-core now floors pillow>=12.3.0.
- Re-enable content-core's Loguru logging, which it disables for library
  consumers since 2.1, so extraction logs reach the API and worker output.
- Pin the Docling fallback: a stored Docling selection without its runtime
  reaches content-core as "auto" (content-core now raises on an explicit,
  unavailable engine).

Closes #1408


Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                           |   1 +
 open_notebook/graphs/source.py         |   5 ++
 pyproject.toml                         |  13 +---
 tests/test_content_core_integration.py |  78 +++++++++++++++++++
 uv.lock                                | 100 +++++++------------------
 5 files changed, 114 insertions(+), 83 deletions(-)
 create mode 100644 tests/test_content_core_integration.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c7940612..d9971504 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Security
+- Bumped esperanto to 2.28.0, content-core to 2.2.0 and podcast-creator to 0.13.0. podcast-creator no longer depends on moviepy, so the `pillow>=12.2.0` override is gone (content-core now floors `pillow>=12.3.0` itself); content-core's extraction logs, which it disables for library consumers since 2.1, are re-enabled in the API and worker (#1408)
 - Dependency security update: `next` 16.3.8 (critical RCE advisory in `next/og` `ImageResponse`; the app does not use `next/og`), `axios` 1.20.0, and the npm overrides for `postcss` (8.5.23) and `brace-expansion` (1.1.21); Python `anyio` 4.14.2, `pyjwt` 2.15.1, `tornado` 6.5.10, `urllib3` 2.8.0 and `virtualenv` 21.14.5. Remaining `npm audit` findings are moderate and limited to the test runner (`vitest`/`@vitest/mocker`, `fflate`). Dependabot now skips odd-numbered (non-LTS) Node majors for the image base
 
 ### Fixed
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index e98a2077..cfdd7aff 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -17,6 +17,11 @@ from open_notebook.domain.transformation import Transformation
 from open_notebook.graphs.transformation import graph as transform_graph
 from open_notebook.utils.runtime_capabilities import engine_runtime_missing
 
+# content-core >= 2.1 disables its own Loguru logging for library consumers.
+# Both the API and the worker import this module before extracting anything,
+# so re-enable it here to keep extraction logs in their output.
+logger.enable("content_core")
+
 # Default preferred languages for YouTube transcript selection, used when
 # ContentSettings.youtube_preferred_languages is unset. content-core's own
 # default is only ["en", "es", "pt"]; we keep the broader list Open Notebook has
diff --git a/pyproject.toml b/pyproject.toml
index 4ab27f08..a16dbc86 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -37,11 +37,11 @@ dependencies = [
     "tomli>=2.0.2",
     "python-dotenv>=1.2.2",
     "httpx[socks]>=0.27.0",
-    "content-core>=2.0.7,<3",
+    "content-core>=2.2.0,<3",
     "ai-prompter>=0.4,<1",
-    "esperanto>=2.25.1,<3",
+    "esperanto>=2.28.0,<3",
     "surrealdb>=1.0.4",
-    "podcast-creator>=0.12.0,<1",
+    "podcast-creator>=0.13.0,<1",
     "surreal-commands>=1.3.1,<2",
     "numpy>=2.4.1",
     "pycountry>=26.2.16",
@@ -101,10 +101,3 @@ constraint-dependencies = [
     "virtualenv>=21.14.5",
     "soupsieve>=2.9",
 ]
-# Pillow < 12.2.0 has open security advisories (PSD OOB write, FITS
-# decompression bomb, PDF trailer DoS). The only thing holding it back is
-# moviepy's `pillow<12` cap, pulled in via podcast-creator 0.12.0 — and
-# moviepy only touches PIL in its video modules, which the audio-only podcast
-# pipeline never imports. Drop this override once podcast-creator ships a
-# release without moviepy (already removed on its main branch).
-override-dependencies = ["pillow>=12.2.0"]
diff --git a/tests/test_content_core_integration.py b/tests/test_content_core_integration.py
new file mode 100644
index 00000000..4c0bb45a
--- /dev/null
+++ b/tests/test_content_core_integration.py
@@ -0,0 +1,78 @@
+"""Open Notebook's integration with content-core >= 2.1 (#1408).
+
+- content-core disables its own Loguru logging for library consumers; we
+  re-enable it so extraction logs reach the API and worker output.
+- An explicit document_engine="docling" raises ConfigurationError in
+  content-core when the runtime is missing; _usable_engine() must downgrade a
+  stored Docling selection to "auto" before it reaches content-core.
+"""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from loguru import logger
+
+
+def test_content_core_logs_are_enabled():
+    import open_notebook.graphs.source  # noqa: F401  (enables content_core logs)
+
+    messages: list[str] = []
+    sink_id = logger.add(lambda m: messages.append(m.record["message"]), level="INFO")
+    try:
+        # Log as if from inside content-core: Loguru filters on the caller's
+        # module name.
+        exec(
+            "logger.info('from content-core')",
+            {"logger": logger, "__name__": "content_core.extraction"},
+        )
+    finally:
+        logger.remove(sink_id)
+
+    assert "from content-core" in messages
+
+
+@pytest.mark.asyncio
+async def test_docling_selection_falls_back_to_auto_when_runtime_missing():
+    from open_notebook.graphs import source as source_graph
+
+    settings = SimpleNamespace(
+        youtube_preferred_languages=None,
+        default_content_processing_engine_url=None,
+        default_content_processing_engine_doc="docling",
+        docling_ocr=None,
+        docling_formulas=None,
+        docling_vision=None,
+    )
+    extracted = SimpleNamespace(title="Doc", content="some text")
+
+    with (
+        patch.object(
+            source_graph.ContentSettings,
+            "get_instance",
+            new=AsyncMock(return_value=settings),
+        ),
+        patch.object(
+            source_graph,
+            "engine_runtime_missing",
+            side_effect=lambda e: "OPEN_NOTEBOOK_ENABLE_DOCLING"
+            if e == "docling"
+            else None,
+        ),
+        patch.object(
+            source_graph.ModelManager,
+            "get_defaults",
+            new=AsyncMock(
+                return_value=SimpleNamespace(default_speech_to_text_model=None)
+            ),
+        ),
+        patch.object(
+            source_graph, "extract_content", new=AsyncMock(return_value=extracted)
+        ) as mock_extract,
+    ):
+        await source_graph.content_process(
+            {"content_state": {"file_path": "/tmp/doc.pdf"}}  # type: ignore[typeddict-item]
+        )
+
+    config = mock_extract.call_args.kwargs["config"]
+    assert config.document_engine == "auto"
diff --git a/uv.lock b/uv.lock
index 6d5e6e04..a0ad3e0d 100644
--- a/uv.lock
+++ b/uv.lock
@@ -19,7 +19,6 @@ constraints = [
     { name = "urllib3", specifier = ">=2.8.0" },
     { name = "virtualenv", specifier = ">=21.14.5" },
 ]
-overrides = [{ name = "pillow", specifier = ">=12.2.0" }]
 
 [[package]]
 name = "ai-prompter"
@@ -191,15 +190,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/81/29/5ecc3a15d5a33e31b26c11426c45c501e439cb865d0bff96315d86443b78/appnope-0.1.4-py2.py3-none-any.whl", hash = "sha256:502575ee11cd7a28c0205f379b525beefebab9d161b7c964670864014ed7213c", size = 4321, upload-time = "2024-02-06T09:43:09.663Z" },
 ]
 
-[[package]]
-name = "asciidoc"
-version = "10.2.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/1d/e7/315a82f2d256e9270977aa3c15e8fe281fd7c40b8e2a0b97e0cb61ca8fa0/asciidoc-10.2.1.tar.gz", hash = "sha256:d9f13c285981b3c7eb660d02ca0a2779981e88d48105de81bb40445e60dddb83", size = 230179, upload-time = "2024-07-17T03:12:52.681Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/75/1f/87941eaa96e86aa22086064f67e4187e2710fb76c147312979ea29278dac/asciidoc-10.2.1-py2.py3-none-any.whl", hash = "sha256:3f277a636b617c9ce7e0b87bcaea51f144500e9a5c8a6488421ee24594850d40", size = 272433, upload-time = "2024-07-17T03:12:49.012Z" },
-]
-
 [[package]]
 name = "asttokens"
 version = "3.0.1"
@@ -414,14 +404,11 @@ wheels = [
 
 [[package]]
 name = "click"
-version = "8.3.1"
+version = "8.5.0"
 source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "colorama", marker = "sys_platform == 'win32'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/3d/fa/656b739db8587d7b5dfa22e22ed02566950fbfbcdc20311993483657a5c0/click-8.3.1.tar.gz", hash = "sha256:12ff4785d337a1bb490bb7e9c2b1ee5da3112e94a8622f26a6c77f5d2fc6842a", size = 295065, upload-time = "2025-11-15T20:45:42.706Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/c7/0e/7fa0ef50764b67090eca4114772a2abf8b6148198475e54c660b97caeee6/click-8.5.0.tar.gz", hash = "sha256:ba0d2089de75ea0310e2dde03160e6ca10009947fb95a182f9b54021bb272e34", size = 382235, upload-time = "2026-08-26T13:33:14.56Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/98/78/01c019cdb5d6498122777c1a43056ebb3ebfeef2076d9d026bfe15583b2b/click-8.3.1-py3-none-any.whl", hash = "sha256:981153a64e25f12d547d3426c367a4857371575ee7ad18df2a6183ab0545b2a6", size = 108274, upload-time = "2025-11-15T20:45:41.139Z" },
+    { url = "https://files.pythonhosted.org/packages/58/50/6c0d534c5f134586a8e1ba4e330569e32f057e33372ae556463212fb4cd3/click-8.5.0-py3-none-any.whl", hash = "sha256:255bc9599cf7748b4b1a446ccc735421bd08a2ae529a8b88597d3de5664ee360", size = 125251, upload-time = "2026-08-26T13:33:12.928Z" },
 ]
 
 [[package]]
@@ -444,12 +431,11 @@ wheels = [
 
 [[package]]
 name = "content-core"
-version = "2.0.7"
+version = "2.2.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "ai-prompter" },
     { name = "aiohttp" },
-    { name = "asciidoc" },
     { name = "bs4" },
     { name = "click" },
     { name = "esperanto" },
@@ -460,6 +446,7 @@ dependencies = [
     { name = "langdetect" },
     { name = "loguru" },
     { name = "markdownify" },
+    { name = "odfpy" },
     { name = "openpyxl" },
     { name = "pandas" },
     { name = "pdfplumber" },
@@ -470,13 +457,14 @@ dependencies = [
     { name = "python-pptx" },
     { name = "pytubefix" },
     { name = "readability-lxml" },
+    { name = "requests" },
     { name = "tenacity" },
     { name = "validators" },
     { name = "youtube-transcript-api" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/59/d4/85fcbe4cfefe0dc5c5bba7b9225b3c6bcebb73a432ab6cdf2bc22c08689a/content_core-2.0.7.tar.gz", hash = "sha256:926d7e5029acf3ec3502dc3cd2856fee355106314ba5b6d8819cde25764975d5", size = 19183270, upload-time = "2026-09-02T14:08:52.142Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/66/42/ce40e8bb98300fe25585d8bb0c2a13228e25031673e0d61cb7adcc7642f1/content_core-2.2.0.tar.gz", hash = "sha256:fbc0303dff75d328abfe794681c374c37cbf708d6b2682b4f13a56e0ded65199", size = 19302996, upload-time = "2026-10-03T19:56:34.209Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ec/f8/c265051ded9b2f0e5caeb0e05c5faa6a0f8a2817ab38d67c99de77252be7/content_core-2.0.7-py3-none-any.whl", hash = "sha256:bb05890e7142ddb16774e9a1b795256a0492c212b92f6e704a50b8196c818def", size = 59976, upload-time = "2026-09-02T14:08:50.308Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/df/06365b4e1352ee2f6dd392a13e2b41d380d8734b45aec60362d5f2f45e33/content_core-2.2.0-py3-none-any.whl", hash = "sha256:564aece59c2f4d60f34827bf1c4a49a4c2f71e5a49853a042253efabd1cd44ea", size = 71467, upload-time = "2026-10-03T19:56:32.443Z" },
 ]
 
 [[package]]
@@ -685,15 +673,15 @@ wheels = [
 
 [[package]]
 name = "esperanto"
-version = "2.26.0"
+version = "2.28.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "httpx" },
     { name = "pydantic" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/3c/00/9f5197dfe620cc6e70bf31dc768a1d6cc5308d9f5b84cc66d0a7b35c448b/esperanto-2.26.0.tar.gz", hash = "sha256:21d33542b9c4805f41f7dd3c14bccc186b7b39dadd2489556719794b985facb3", size = 768871, upload-time = "2026-07-30T01:35:21.463Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/8c/bf/89f89700131292acc85f3af2440c6edab97dea810943c16a9ffdbbc504ca/esperanto-2.28.0.tar.gz", hash = "sha256:af85313ba114aaa585f09c31e916537510f32fc4221f965769e38c9af59ac0f7", size = 832215, upload-time = "2026-10-03T21:04:29.727Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ed/2e/81c692d47fc5fbba46a3e3f2addd1e46e0b64ed7aabff469fbaf7e86f63a/esperanto-2.26.0-py3-none-any.whl", hash = "sha256:1337ab83c78a836f671ed10fcd649bb8286991ee4ee55c9ef2c40d436539e8bc", size = 262587, upload-time = "2026-07-30T01:35:19.816Z" },
+    { url = "https://files.pythonhosted.org/packages/6a/e0/ffb4d35377f768f351dd0f5e75a0220727037a16232d279b6541e61b7883/esperanto-2.28.0-py3-none-any.whl", hash = "sha256:08f024b1f7e9557d1977365c8d370536c07d5bce56c154b9ed5c0c44c75778a1", size = 271100, upload-time = "2026-10-03T21:04:28.173Z" },
 ]
 
 [[package]]
@@ -1048,19 +1036,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d2/23/408243171aa9aaba178d3e2559159c24c1171a641aa83b67bdd3394ead8e/idna-3.15-py3-none-any.whl", hash = "sha256:048adeaf8c2d788c40fee287673ccaa74c24ffd8dcf09ffa555a2fbb59f10ac8", size = 72340, upload-time = "2026-05-12T22:45:55.733Z" },
 ]
 
-[[package]]
-name = "imageio"
-version = "2.37.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "numpy" },
-    { name = "pillow" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a3/6f/606be632e37bf8d05b253e8626c2291d74c691ddc7bcdf7d6aaf33b32f6a/imageio-2.37.2.tar.gz", hash = "sha256:0212ef2727ac9caa5ca4b2c75ae89454312f440a756fcfc8ef1993e718f50f8a", size = 389600, upload-time = "2025-11-04T14:29:39.898Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fb/fe/301e0936b79bcab4cacc7548bf2853fc28dced0a578bab1f7ef53c9aa75b/imageio-2.37.2-py3-none-any.whl", hash = "sha256:ad9adfb20335d718c03de457358ed69f141021a333c40a53e57273d8a5bd0b9b", size = 317646, upload-time = "2025-11-04T14:29:37.948Z" },
-]
-
 [[package]]
 name = "imageio-ffmpeg"
 version = "0.6.0"
@@ -1873,24 +1848,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a4/8e/469e5a4a2f5855992e425f3cb33804cc07bf18d48f2db061aec61ce50270/more_itertools-10.8.0-py3-none-any.whl", hash = "sha256:52d4362373dcf7c52546bc4af9a86ee7c4579df9a8dc268be0a2f949d376cc9b", size = 69667, upload-time = "2025-09-02T15:23:09.635Z" },
 ]
 
-[[package]]
-name = "moviepy"
-version = "2.2.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "decorator" },
-    { name = "imageio" },
-    { name = "imageio-ffmpeg" },
-    { name = "numpy" },
-    { name = "pillow" },
-    { name = "proglog" },
-    { name = "python-dotenv" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/de/61/15f9476e270f64c78a834e7459ca045d669f869cec24eed26807b8cd479d/moviepy-2.2.1.tar.gz", hash = "sha256:c80cb56815ece94e5e3e2d361aa40070eeb30a09d23a24c4e684d03e16deacb1", size = 58431438, upload-time = "2025-05-21T19:31:52.601Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/73/7d3b2010baa0b5eb1e4dfa9e4385e89b6716be76f2fa21a6c0fe34b68e5a/moviepy-2.2.1-py3-none-any.whl", hash = "sha256:6b56803fec2ac54b557404126ac1160e65448e03798fa282bd23e8fab3795060", size = 129871, upload-time = "2025-05-21T19:31:50.11Z" },
-]
-
 [[package]]
 name = "multidict"
 version = "6.7.0"
@@ -2043,6 +2000,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/5b/c7/b801bf98514b6ae6475e941ac05c58e6411dd863ea92916bfd6d510b08c1/numpy-2.4.1-pp311-pypy311_pp73-win_amd64.whl", hash = "sha256:4f1b68ff47680c2925f8063402a693ede215f0257f02596b1318ecdfb1d79e33", size = 12492579, upload-time = "2026-01-10T06:44:57.094Z" },
 ]
 
+[[package]]
+name = "odfpy"
+version = "1.4.1"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "defusedxml" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/97/73/8ade73f6749177003f7ce3304f524774adda96e6aaab30ea79fd8fda7934/odfpy-1.4.1.tar.gz", hash = "sha256:db766a6e59c5103212f3cc92ec8dd50a0f3a02790233ed0b52148b70d3c438ec", size = 717045, upload-time = "2020-01-18T16:55:48.852Z" }
+
 [[package]]
 name = "ollama"
 version = "0.6.1"
@@ -2110,8 +2076,8 @@ notebooks = [
 requires-dist = [
     { name = "ai-prompter", specifier = ">=0.4,<1" },
     { name = "babel", specifier = ">=2.18.0" },
-    { name = "content-core", specifier = ">=2.0.7,<3" },
-    { name = "esperanto", specifier = ">=2.25.1,<3" },
+    { name = "content-core", specifier = ">=2.2.0,<3" },
+    { name = "esperanto", specifier = ">=2.28.0,<3" },
     { name = "fastapi", specifier = ">=0.104.0" },
     { name = "httpx", extras = ["socks"], specifier = ">=0.27.0" },
     { name = "langchain", specifier = ">=1.3.9,<2" },
@@ -2127,7 +2093,7 @@ requires-dist = [
     { name = "langgraph-checkpoint-sqlite", specifier = ">=3.1.1,<4" },
     { name = "loguru", specifier = ">=0.7.2" },
     { name = "numpy", specifier = ">=2.4.1" },
-    { name = "podcast-creator", specifier = ">=0.12.0,<1" },
+    { name = "podcast-creator", specifier = ">=0.13.0,<1" },
     { name = "pycountry", specifier = ">=26.2.16" },
     { name = "pydantic", specifier = ">=2.9.2" },
     { name = "python-dotenv", specifier = ">=1.2.2" },
@@ -2437,16 +2403,16 @@ wheels = [
 
 [[package]]
 name = "podcast-creator"
-version = "0.12.0"
+version = "0.13.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "ai-prompter" },
     { name = "click" },
     { name = "content-core" },
     { name = "esperanto" },
+    { name = "imageio-ffmpeg" },
     { name = "langgraph" },
     { name = "loguru" },
-    { name = "moviepy" },
     { name = "nest-asyncio" },
     { name = "pycountry" },
     { name = "pydub" },
@@ -2455,9 +2421,9 @@ dependencies = [
     { name = "tenacity" },
     { name = "tiktoken" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/95/e3/d7112e86ec4194c14f6024dd0a0d1509b5ef70c76bf41c8359db22c6a9d9/podcast_creator-0.12.0.tar.gz", hash = "sha256:16efbafb3103fecf7f37f434e8dcaf2e5e2929c505b9be833faa25287bc8d9ad", size = 486668, upload-time = "2026-03-03T13:43:18.993Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/3c/23/e3e5ba947a672cd39dab0b0a726dfd8ce76638bf71d1ffbfc356cb3b9733/podcast_creator-0.13.0.tar.gz", hash = "sha256:d9bab87506d9b42605c6b18f0ab3035ccd1fde744d1736e3cdb3cf5d283296bb", size = 497734, upload-time = "2026-10-04T01:02:24.06Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/2f/6c/f9ed9d1e313183506d5774e4490a36ca6c0f231899055d658e283b26aaed/podcast_creator-0.12.0-py3-none-any.whl", hash = "sha256:605080b5841710733b7bcb6ff2fcb05b6a77f2aabd3c7bec617b58b03250fb47", size = 79295, upload-time = "2026-03-03T13:43:17.797Z" },
+    { url = "https://files.pythonhosted.org/packages/21/92/7cfa0b0c7992ea91ee1398d2ebe84a566159219f773402bef600055915c6/podcast_creator-0.13.0-py3-none-any.whl", hash = "sha256:e67d30fa8f4049fa3b4653b009cab6f69a3d5ed5ec551decae0901ab1be5b665", size = 82119, upload-time = "2026-10-04T01:02:22.522Z" },
 ]
 
 [[package]]
@@ -2476,18 +2442,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/5d/19/fd3ef348460c80af7bb4669ea7926651d1f95c23ff2df18b9d24bab4f3fa/pre_commit-4.5.1-py2.py3-none-any.whl", hash = "sha256:3b3afd891e97337708c1674210f8eba659b52a38ea5f822ff142d10786221f77", size = 226437, upload-time = "2025-12-16T21:14:32.409Z" },
 ]
 
-[[package]]
-name = "proglog"
-version = "0.1.12"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "tqdm" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/c2/af/c108866c452eda1132f3d6b3cb6be2ae8430c97e9309f38ca9dbd430af37/proglog-0.1.12.tar.gz", hash = "sha256:361ee074721c277b89b75c061336cb8c5f287c92b043efa562ccf7866cda931c", size = 8794, upload-time = "2025-05-09T14:36:18.316Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c1/1b/f7ea6cde25621cd9236541c66ff018f4268012a534ec31032bcb187dc5e7/proglog-0.1.12-py3-none-any.whl", hash = "sha256:ccaafce51e80a81c65dc907a460c07ccb8ec1f78dc660cfd8f9ec3a22f01b84c", size = 6337, upload-time = "2025-05-09T14:36:16.798Z" },
-]
-
 [[package]]
 name = "prompt-toolkit"
 version = "3.0.52"

From a917bbfcab99e9ec6feb9087e02e059734829854 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 22:33:56 -0300
Subject: [PATCH 327/345] fix(ai): default ESPERANTO_LLM_TIMEOUT to 180 seconds
 (#1441)

esperanto 2.28 enforces the timeout in to_langchain() on every provider,
with a 60 s default; before, most providers used their SDK default and
ChatOllama waited forever. open_notebook/config.py, imported by the API and
the worker before any model is created, now sets 180 s when the variable is
unset or blank. An explicit value wins. Docs updated.

Closes #1434


Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  1 +
 docs/5-CONFIGURATION/advanced.md              | 12 +++--
 docs/5-CONFIGURATION/environment-reference.md |  2 +-
 docs/5-CONFIGURATION/reverse-proxy.md         |  2 +-
 docs/6-TROUBLESHOOTING/faq.md                 |  2 +-
 open_notebook/config.py                       | 19 +++++++
 tests/test_llm_timeout_default.py             | 49 +++++++++++++++++++
 7 files changed, 79 insertions(+), 8 deletions(-)
 create mode 100644 tests/test_llm_timeout_default.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9971504..5ee84bb3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Dependency security update: `next` 16.3.8 (critical RCE advisory in `next/og` `ImageResponse`; the app does not use `next/og`), `axios` 1.20.0, and the npm overrides for `postcss` (8.5.23) and `brace-expansion` (1.1.21); Python `anyio` 4.14.2, `pyjwt` 2.15.1, `tornado` 6.5.10, `urllib3` 2.8.0 and `virtualenv` 21.14.5. Remaining `npm audit` findings are moderate and limited to the test runner (`vitest`/`@vitest/mocker`, `fflate`). Dependabot now skips odd-numbered (non-LTS) Node majors for the image base
 
 ### Fixed
+- **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
 - `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
 - **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 2436d016..5af780b4 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -43,16 +43,18 @@ For high-concurrency deployments, use `exponential_jitter` to prevent thundering
 # Client timeout (default: 300 seconds)
 API_CLIENT_TIMEOUT=300
 
-# LLM timeout (default: 60 seconds)
-ESPERANTO_LLM_TIMEOUT=60
+# LLM timeout (default: 180 seconds)
+ESPERANTO_LLM_TIMEOUT=180
 ```
 
+`ESPERANTO_LLM_TIMEOUT` limits each model call (chat, Ask, transformations, podcast outline and transcript) and applies to every provider, including Ollama. Open Notebook sets it to 180 seconds when you don't; set it yourself to change it. Speech-to-text and text-to-speech have their own, longer timeouts.
+
 **Guideline:** Set `API_CLIENT_TIMEOUT` > `ESPERANTO_LLM_TIMEOUT` + buffer
 
 ```
-Example:
-  ESPERANTO_LLM_TIMEOUT=120
-  API_CLIENT_TIMEOUT=180  # 120 + 60 second buffer
+Example (slow local models):
+  ESPERANTO_LLM_TIMEOUT=420
+  API_CLIENT_TIMEOUT=600  # 420 + 180 second buffer
 ```
 
 ---
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index e09fdb3c..773ca68e 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -59,7 +59,7 @@ Comprehensive list of all environment variables available in Open Notebook.
 
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
-| `ESPERANTO_LLM_TIMEOUT` | No | 60 | LLM inference timeout in seconds |
+| `ESPERANTO_LLM_TIMEOUT` | No | 180 | LLM inference timeout in seconds, applied to every provider including Ollama. Open Notebook sets 180 when unset (esperanto's own default is 60). Keep it below `API_CLIENT_TIMEOUT` |
 | `ESPERANTO_SSL_VERIFY` | No | true | Verify SSL certificates (false = development only) |
 | `ESPERANTO_SSL_CA_BUNDLE` | No | None | Path to custom CA certificate bundle |
 
diff --git a/docs/5-CONFIGURATION/reverse-proxy.md b/docs/5-CONFIGURATION/reverse-proxy.md
index 852819ac..622f1ec7 100644
--- a/docs/5-CONFIGURATION/reverse-proxy.md
+++ b/docs/5-CONFIGURATION/reverse-proxy.md
@@ -590,7 +590,7 @@ If you still experience timeouts after configuring your proxy, you can also adju
 ```bash
 # In .env file:
 API_CLIENT_TIMEOUT=600      # API client timeout (default: 300s)
-ESPERANTO_LLM_TIMEOUT=180   # LLM inference timeout (default: 60s)
+ESPERANTO_LLM_TIMEOUT=420   # LLM inference timeout (default: 180s)
 ```
 
 See [Advanced Configuration](advanced.md) for more timeout options.
diff --git a/docs/6-TROUBLESHOOTING/faq.md b/docs/6-TROUBLESHOOTING/faq.md
index f11ff231..f4b9cc81 100644
--- a/docs/6-TROUBLESHOOTING/faq.md
+++ b/docs/6-TROUBLESHOOTING/faq.md
@@ -209,7 +209,7 @@ tar -xzf backup-20240101.tar.gz
 ```bash
 # In .env:
 API_CLIENT_TIMEOUT=600  # 10 minutes for slow setups
-ESPERANTO_LLM_TIMEOUT=180  # 3 minutes for model inference
+ESPERANTO_LLM_TIMEOUT=420  # 7 minutes for model inference (default: 180)
 ```
 
 ### Recommended timeouts by setup:
diff --git a/open_notebook/config.py b/open_notebook/config.py
index 541647e6..72018839 100644
--- a/open_notebook/config.py
+++ b/open_notebook/config.py
@@ -1,4 +1,5 @@
 import os
+from typing import MutableMapping
 
 # ROOT DATA FOLDER
 DATA_FOLDER = "./data"
@@ -26,3 +27,21 @@ TIKTOKEN_CACHE_DIR = (
     os.environ.get("TIKTOKEN_CACHE_DIR", "").strip() or f"{DATA_FOLDER}/tiktoken-cache"
 )
 os.makedirs(TIKTOKEN_CACHE_DIR, exist_ok=True)
+
+# LLM TIMEOUT
+# Since esperanto 2.28, to_langchain() enforces ESPERANTO_LLM_TIMEOUT on every
+# provider (default 60 s; before, most providers used their SDK default and
+# Ollama waited forever). 60 s cuts off long answers and slow local models, so
+# Open Notebook defaults it to 180 s. It stays below the default
+# API_CLIENT_TIMEOUT (300 s). An explicit value always wins. Both the API and
+# the worker import this module before any model is created.
+DEFAULT_LLM_TIMEOUT_SECONDS = 180
+
+
+def ensure_llm_timeout_default(environ: MutableMapping[str, str] = os.environ) -> None:
+    """Set ESPERANTO_LLM_TIMEOUT to Open Notebook's default when unset or blank."""
+    if not environ.get("ESPERANTO_LLM_TIMEOUT", "").strip():
+        environ["ESPERANTO_LLM_TIMEOUT"] = str(DEFAULT_LLM_TIMEOUT_SECONDS)
+
+
+ensure_llm_timeout_default()
diff --git a/tests/test_llm_timeout_default.py b/tests/test_llm_timeout_default.py
new file mode 100644
index 00000000..058db8be
--- /dev/null
+++ b/tests/test_llm_timeout_default.py
@@ -0,0 +1,49 @@
+"""Open Notebook defaults ESPERANTO_LLM_TIMEOUT to 180 s (#1434).
+
+esperanto 2.28 enforces the timeout in to_langchain() on every provider, with
+a 60 s default that cuts off long answers and slow local models.
+"""
+
+import pytest
+from esperanto import AIFactory
+
+from open_notebook.config import DEFAULT_LLM_TIMEOUT_SECONDS, ensure_llm_timeout_default
+
+
+def test_default_applies_when_unset():
+    env: dict[str, str] = {}
+    ensure_llm_timeout_default(env)
+    assert env["ESPERANTO_LLM_TIMEOUT"] == "180"
+    assert DEFAULT_LLM_TIMEOUT_SECONDS == 180
+
+
+@pytest.mark.parametrize("value", ["", "   "])
+def test_default_applies_when_blank(value):
+    env = {"ESPERANTO_LLM_TIMEOUT": value}
+    ensure_llm_timeout_default(env)
+    assert env["ESPERANTO_LLM_TIMEOUT"] == "180"
+
+
+def test_explicit_value_wins():
+    env = {"ESPERANTO_LLM_TIMEOUT": "90"}
+    ensure_llm_timeout_default(env)
+    assert env["ESPERANTO_LLM_TIMEOUT"] == "90"
+
+
+@pytest.mark.parametrize(
+    "env_value,expected",
+    [(None, 180.0), ("90", 90.0)],
+)
+def test_langchain_model_carries_the_timeout(monkeypatch, env_value, expected):
+    monkeypatch.delenv("ESPERANTO_LLM_TIMEOUT", raising=False)
+    if env_value is not None:
+        monkeypatch.setenv("ESPERANTO_LLM_TIMEOUT", env_value)
+    import os
+
+    ensure_llm_timeout_default(os.environ)
+
+    model = AIFactory.create_language(
+        "anthropic", "claude-sonnet-5", config={"api_key": "test"}
+    ).to_langchain()
+
+    assert float(model.default_request_timeout) == expected

From 5d6f51e2bf547bd4b47b838c94b0e2a0eb5470b3 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 22:46:40 -0300
Subject: [PATCH 328/345] fix(sources): map content-core's typed extraction
 errors (#1442)

* fix(sources): map content-core's typed extraction errors

content-core 2.2 raises typed errors (NetworkError, NotFoundError,
InvalidInputError, FileOperationError, UnsupportedTypeException,
NoTranscriptFound, ExternalServiceError, ConfigurationError) instead of
returning empty or sentinel content. They are not ValueError, so
process_source treated them as transient and retried up to 15 times, and our
tailored messages no longer triggered.

content_process now catches content_core.ContentCoreError around
extract_content() and re-raises a ValueError (permanent) with a short,
actionable message per type, chained to the original. All types are
permanent: content-core already retries transient failures internally. The
dead "Error" / "Failed to extract content:" sentinel check is removed; the
empty-content guard stays for genuinely empty sources.

Closes #1433

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(sources): keep content-core's raw error text out of user messages

The mapped messages are now fixed per type; content-core's own text (which
can carry proxy credentials, local paths or config details) is logged by the
worker and kept as the exception's cause. YouTube URLs are matched by
hostname instead of substring.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(sources): only treat a YouTube transcript failure as a YouTube block

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                      |   1 +
 open_notebook/graphs/source.py    | 118 +++++++++++++++++------
 tests/test_content_core_errors.py | 150 ++++++++++++++++++++++++++++++
 3 files changed, 242 insertions(+), 27 deletions(-)
 create mode 100644 tests/test_content_core_errors.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5ee84bb3..cebdc10a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
+- **Failed sources fail once, with a clear reason.** content-core 2.2 raises typed errors instead of returning empty content (unreachable host, page not found, malformed URL, corrupted file, unsupported type, YouTube without a transcript or blocked, misconfigured engine or speech-to-text model). Source processing now turns each into a short, actionable message, kept with the original cause in the worker log, and fails the job on the first attempt instead of retrying it up to 15 times. A blocked YouTube request points to the new `CCORE_YOUTUBE_PROXY` / `CCORE_YOUTUBE_COOKIES_FILE` settings (#1433)
 - **Ask answers are no longer silently truncated.** The three Ask stages (search strategy, per-search answers, final synthesis) were capped at 2000 output tokens, well below the 8192 that chat and transformations use. Token-dense languages such as Japanese hit the cap mid-sentence, and reasoning models spent the whole budget thinking and returned blank search terms, so Ask answered "no documents found" from a corpus that had the answer. All three stages now share an 8192 budget; a strategy with no usable search terms fails with an explicit error instead of running empty searches, and thinking-only partial answers are dropped before synthesis (#1221)
 - A source embedding job that fails part-way through the batched insert now removes the embeddings it already wrote, so the source is no longer shown as embedded while search only sees part of it (#1390)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
diff --git a/open_notebook/graphs/source.py b/open_notebook/graphs/source.py
index cfdd7aff..99469c63 100644
--- a/open_notebook/graphs/source.py
+++ b/open_notebook/graphs/source.py
@@ -1,7 +1,9 @@
 import operator
 import os
 from typing import Any, Dict, List, Optional
+from urllib.parse import urlparse
 
+import content_core as cc
 from content_core import ContentCoreConfig, extract_content
 from content_core.common import ExtractionOutput
 from langchain_core.runnables import RunnableConfig
@@ -80,6 +82,81 @@ def _usable_engine(engine: str, kind: str) -> str:
     return "auto"
 
 
+def _is_youtube_url(url: str) -> bool:
+    """Whether ``url`` points at YouTube (by hostname, not substring)."""
+    host = (urlparse(url).hostname or "").lower()
+    return host in ("youtube.com", "youtu.be") or host.endswith(".youtube.com")
+
+
+_YOUTUBE_NO_TRANSCRIPT_MESSAGE = (
+    "Could not extract content from this YouTube video. "
+    "No transcript or subtitles are available. "
+    "Try configuring a Speech-to-Text model in Settings "
+    "to transcribe the audio instead."
+)
+
+
+def _extraction_error(error: "cc.ContentCoreError", url: str) -> ValueError:
+    """Turn a content-core extraction error into a user-facing permanent failure.
+
+    content-core >= 2.2 raises typed errors instead of returning empty content.
+    They are all treated as permanent (ValueError is in process_source's
+    stop_on): content-core already retries transient failures internally,
+    including NetworkError, and our worker's 15 attempts exist for SurrealDB
+    transaction conflicts, not for re-fetching an unreachable page. A failed
+    source can still be retried from the UI.
+
+    The message is fixed per type: content-core's own text can carry proxy
+    credentials, local paths or configuration details, so it only goes to the
+    worker log (logged by the caller, and kept as the exception's cause).
+    """
+
+    if isinstance(error, cc.NoTranscriptFound):
+        return ValueError(_YOUTUBE_NO_TRANSCRIPT_MESSAGE)
+    # content-core reports a failure of both YouTube transcript paths (e.g.
+    # IpBlocked) as "YouTube transcript extraction failed ..."; other
+    # ExternalServiceErrors on a YouTube URL (speech-to-text provider, fetch
+    # engine) get the generic message below.
+    if (
+        isinstance(error, cc.ExternalServiceError)
+        and url
+        and _is_youtube_url(url)
+        and "youtube transcript" in str(error).lower()
+    ):
+        return ValueError(
+            "YouTube blocked or failed the transcript request. If this keeps "
+            "happening, set CCORE_YOUTUBE_PROXY (a residential proxy) or "
+            "CCORE_YOUTUBE_COOKIES_FILE for the worker."
+        )
+    if isinstance(error, cc.NotFoundError):
+        return ValueError(
+            "The page was not found (it may have been removed or moved). Check the URL."
+        )
+    if isinstance(error, cc.NetworkError):
+        return ValueError(
+            "Could not reach this address (connection, timeout or DNS error). "
+            "Check the URL and try again."
+        )
+    if isinstance(error, cc.InvalidInputError):
+        return ValueError("This URL or input is not valid.")
+    if isinstance(error, cc.UnsupportedTypeException):
+        return ValueError("This file type is not supported.")
+    if isinstance(error, cc.FileOperationError):
+        return ValueError(
+            "The file could not be read. It may be corrupted or in an "
+            "unsupported format."
+        )
+    if isinstance(error, cc.ConfigurationError):
+        return ValueError(
+            "Content extraction is not configured correctly. Check the content "
+            "processing engine and speech-to-text settings; the worker log has "
+            "the details."
+        )
+    if isinstance(error, cc.ExternalServiceError):
+        return ValueError("The content extraction service failed.")
+    return ValueError("Could not extract content from this source.")
+
+
 async def content_process(state: SourceState) -> dict:
     content_state: Dict[str, Any] = state["content_state"]
 
@@ -153,36 +230,23 @@ async def content_process(state: SourceState) -> dict:
         f"docling_vision={config_kwargs.get('docling_vision', 'auto')})"
     )
 
-    processed = await extract_content(
-        url=content_state.get("url"),
-        file_path=content_state.get("file_path"),
-        content=content_state.get("content"),
-        config=config,
-    )
-
-    # content-core signals a soft extraction failure (e.g. an unreachable or
-    # invalid URL, via the bs4 fallback) by returning title="Error" and content
-    # prefixed with "Failed to extract content:" instead of raising. Detect that
-    # sentinel and raise so the job is marked failed and the source becomes
-    # retryable, rather than being saved as a "completed" source whose body is
-    # the error string.
-    if processed.title == "Error" and (processed.content or "").startswith(
-        "Failed to extract content:"
-    ):
-        raise ValueError(
-            "Could not extract content from this source. "
-            "The URL or file may be unreachable, invalid, or in an unsupported format."
+    url = content_state.get("url") or ""
+    try:
+        processed = await extract_content(
+            url=content_state.get("url"),
+            file_path=content_state.get("file_path"),
+            content=content_state.get("content"),
+            config=config,
         )
+    except cc.ContentCoreError as e:
+        logger.warning(f"content-core extraction failed ({type(e).__name__}): {e}")
+        raise _extraction_error(e, url) from e
 
+    # Since content-core 2.2, empty content means the source was genuinely
+    # empty; extraction failures raise (handled above).
     if not processed.content or not processed.content.strip():
-        url = content_state.get("url") or ""
-        if url and ("youtube.com" in url or "youtu.be" in url):
-            raise ValueError(
-                "Could not extract content from this YouTube video. "
-                "No transcript or subtitles are available. "
-                "Try configuring a Speech-to-Text model in Settings "
-                "to transcribe the audio instead."
-            )
+        if url and _is_youtube_url(url):
+            raise ValueError(_YOUTUBE_NO_TRANSCRIPT_MESSAGE)
         raise ValueError(
             "Could not extract any text content from this source. "
             "The content may be empty, inaccessible, or in an unsupported format."
diff --git a/tests/test_content_core_errors.py b/tests/test_content_core_errors.py
new file mode 100644
index 00000000..4c1c37f9
--- /dev/null
+++ b/tests/test_content_core_errors.py
@@ -0,0 +1,150 @@
+"""content-core >= 2.2 raises typed extraction errors (#1433).
+
+content_process turns each into a user-facing ValueError, which is in
+process_source's stop_on, so the job fails once instead of retrying 15 times.
+"""
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, patch
+
+import content_core as cc
+import pytest
+
+from open_notebook.graphs import source as source_graph
+
+YOUTUBE = "https://www.youtube.com/watch?v=abc123"
+PAGE = "https://example.com/article"
+
+
+async def _run(state, extract):
+    settings = SimpleNamespace(
+        youtube_preferred_languages=None,
+        default_content_processing_engine_url=None,
+        default_content_processing_engine_doc=None,
+        docling_ocr=None,
+        docling_formulas=None,
+        docling_vision=None,
+    )
+    with (
+        patch.object(
+            source_graph.ContentSettings,
+            "get_instance",
+            new=AsyncMock(return_value=settings),
+        ),
+        patch.object(
+            source_graph.ModelManager,
+            "get_defaults",
+            new=AsyncMock(
+                return_value=SimpleNamespace(default_speech_to_text_model=None)
+            ),
+        ),
+        patch.object(source_graph, "extract_content", new=extract),
+    ):
+        return await source_graph.content_process({"content_state": state})  # type: ignore[typeddict-item]
+
+
+@pytest.mark.asyncio
+@pytest.mark.parametrize(
+    "state,error,expected",
+    [
+        ({"url": YOUTUBE}, cc.NoTranscriptFound("none"), "Speech-to-Text model"),
+        (
+            {"url": YOUTUBE},
+            cc.ExternalServiceError(
+                "YouTube transcript extraction failed for video abc123: IpBlocked()"
+            ),
+            "CCORE_YOUTUBE_PROXY",
+        ),
+        (
+            {"url": YOUTUBE},
+            cc.ExternalServiceError("STT provider failed after retries"),
+            "service failed",
+        ),
+        ({"url": PAGE}, cc.NotFoundError("HTTP 404"), "page was not found"),
+        ({"url": PAGE}, cc.NetworkError("DNS failure"), "Could not reach"),
+        ({"url": "nota url"}, cc.InvalidInputError("malformed"), "not valid"),
+        (
+            {"file_path": "/tmp/x.bin"},
+            cc.UnsupportedTypeException("application/x-foo"),
+            "not supported",
+        ),
+        (
+            {"file_path": "/tmp/x.pdf"},
+            cc.FileOperationError("corrupted PDF"),
+            "could not be read",
+        ),
+        (
+            {"url": PAGE},
+            cc.ConfigurationError("crawl4ai not installed"),
+            "not configured correctly",
+        ),
+        ({"url": PAGE}, cc.ExternalServiceError("firecrawl 500"), "service failed"),
+        ({"url": PAGE}, cc.ContentCoreError("odd"), "Could not extract content"),
+    ],
+)
+async def test_typed_errors_become_permanent_user_facing_failures(
+    state, error, expected
+):
+    with pytest.raises(ValueError, match=expected) as excinfo:
+        await _run(state, AsyncMock(side_effect=error))
+
+    # The original error stays attached for the worker log.
+    assert excinfo.value.__cause__ is error
+
+
+@pytest.mark.asyncio
+async def test_raw_detail_stays_out_of_the_user_message():
+    """content-core's text can carry proxy credentials or local paths; it goes
+    to the log and the exception chain, not the client-visible message."""
+    secret = "proxy http://user:hunter2@10.0.0.5:3128 failed for /app/data/x.pdf"
+    with pytest.raises(ValueError) as excinfo:
+        await _run({"url": PAGE}, AsyncMock(side_effect=cc.NetworkError(secret)))
+
+    message = str(excinfo.value)
+    assert "hunter2" not in message
+    assert "/app/data" not in message
+    assert str(excinfo.value.__cause__) == secret
+
+
+@pytest.mark.parametrize(
+    "url,expected",
+    [
+        ("https://www.youtube.com/watch?v=abc", True),
+        ("https://youtube.com/shorts/abc", True),
+        ("https://m.youtube.com/watch?v=abc", True),
+        ("https://youtu.be/abc", True),
+        ("https://notyoutube.com/watch?v=abc", False),
+        ("https://example.com/youtube.com/abc", False),
+        ("", False),
+    ],
+)
+def test_is_youtube_url_matches_hostnames(url, expected):
+    assert source_graph._is_youtube_url(url) is expected
+
+
+@pytest.mark.asyncio
+async def test_blocked_non_youtube_url_gets_generic_service_message():
+    with pytest.raises(ValueError, match="service failed") as excinfo:
+        await _run(
+            {"url": "https://notyoutube.com/watch?v=abc"},
+            AsyncMock(side_effect=cc.ExternalServiceError("blocked")),
+        )
+    assert "CCORE_YOUTUBE_PROXY" not in str(excinfo.value)
+
+
+@pytest.mark.asyncio
+async def test_genuinely_empty_youtube_content_keeps_the_stt_hint():
+    empty = SimpleNamespace(title="Video", content="")
+    with pytest.raises(ValueError, match="Speech-to-Text model"):
+        await _run({"url": YOUTUBE}, AsyncMock(return_value=empty))
+
+
+def test_value_error_is_permanent_for_process_source():
+    """The mapping relies on ValueError being in process_source's stop_on."""
+    from surreal_commands import registry
+
+    import commands.source_commands  # noqa: F401  (registers the command)
+
+    command = registry.get_command("open_notebook", "process_source")
+    assert command is not None
+    assert ValueError in command.retry_config.stop_on

From 4aadf88710e3792181cec45639d0eeb3eba52d26 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 22:46:45 -0300
Subject: [PATCH 329/345] feat(sources): OpenDocument uploads and content-core
 2.2 settings docs (#1445)

* feat(sources): OpenDocument uploads and content-core 2.2 settings docs

- Upload accepts .odt, .ods, .odp (content-core 2.2 office route) and .htm;
  the multi-file hint lists the OpenDocument formats in every locale.
- Docs: OpenDocument in the supported file types; CCORE_YOUTUBE_PROXY,
  CCORE_YOUTUBE_COOKIES_FILE and CCORE_AUDIO_SEGMENT_MINUTES in the
  environment reference (set on the worker; Compose example for cookies);
  a YouTube "blocked" note pointing at them.

Closes #1439

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(sources): close the cookies code block; list HTML/HTM in the upload hint

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                   |  1 +
 docs/3-USER-GUIDE/adding-sources.md            |  3 +++
 docs/5-CONFIGURATION/environment-reference.md  | 18 +++++++++++++++++-
 .../sources/steps/SourceTypeStep.tsx           |  2 +-
 frontend/src/lib/locales/bn-IN/index.ts        |  2 +-
 frontend/src/lib/locales/ca-ES/index.ts        |  2 +-
 frontend/src/lib/locales/de-DE/index.ts        |  2 +-
 frontend/src/lib/locales/en-US/index.ts        |  2 +-
 frontend/src/lib/locales/es-ES/index.ts        |  2 +-
 frontend/src/lib/locales/fr-FR/index.ts        |  2 +-
 frontend/src/lib/locales/it-IT/index.ts        |  2 +-
 frontend/src/lib/locales/ja-JP/index.ts        |  2 +-
 frontend/src/lib/locales/pl-PL/index.ts        |  2 +-
 frontend/src/lib/locales/pt-BR/index.ts        |  2 +-
 frontend/src/lib/locales/ru-RU/index.ts        |  2 +-
 frontend/src/lib/locales/tr-TR/index.ts        |  2 +-
 frontend/src/lib/locales/zh-CN/index.ts        |  2 +-
 frontend/src/lib/locales/zh-TW/index.ts        |  2 +-
 18 files changed, 36 insertions(+), 16 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cebdc10a..c0d67322 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
 
 ### Added
+- **OpenDocument uploads and YouTube unblocking options.** `.odt`, `.ods` and `.odp` files (and `.htm`) can be uploaded as sources (content-core 2.2). New content-core settings are documented: `CCORE_YOUTUBE_PROXY` and `CCORE_YOUTUBE_COOKIES_FILE` get YouTube transcripts through when YouTube blocks the server's IP, and `CCORE_AUDIO_SEGMENT_MINUTES` controls how long audio is split for transcription (#1439)
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
 - **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
 
diff --git a/docs/3-USER-GUIDE/adding-sources.md b/docs/3-USER-GUIDE/adding-sources.md
index 69d138ea..f8c9c0b0 100644
--- a/docs/3-USER-GUIDE/adding-sources.md
+++ b/docs/3-USER-GUIDE/adding-sources.md
@@ -48,6 +48,7 @@ Sources are the raw materials of your research. This guide covers how to add dif
 - **PowerPoint** (.pptx) — Slides converted to text
 - **Excel** (.xlsx, .xls) — Spreadsheet data
 - **EPUB** (.epub) — eBook files
+- **OpenDocument** (.odt, .ods, .odp) — LibreOffice / OpenOffice text documents, spreadsheets (one table per sheet) and presentations (one block per slide)
 - **Markdown** (.md, .txt) — Plain text formats
 - **HTML** (.html, .htm) — Web page files
 - **Images** (.png, .jpg, .jpeg, .tiff, .bmp) — Text read via OCR (**requires Docling enabled** — see below)
@@ -211,6 +212,8 @@ Method 2: Playlist
 - Transcription (if captions aren't available)
 - Basic metadata (title, channel, length)
 
+**"YouTube blocked or failed the transcript request":** YouTube blocks transcript requests from many server and cloud IPs. Give the worker a residential proxy (`CCORE_YOUTUBE_PROXY`) or a browser cookies file (`CCORE_YOUTUBE_COOKIES_FILE`) — see [Content Extraction variables](../5-CONFIGURATION/environment-reference.md#content-extraction). Datacenter proxies are usually blocked too.
+
 **Processing:**
 - 10-minute video: ~2-3 minutes
 - 1-hour video: ~10-15 minutes
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 773ca68e..6168ecdc 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -113,6 +113,9 @@ CORS_ORIGINS=https://notebook.example.com
 | `JINA_API_KEY` | No | None | Jina AI API key for web extraction |
 | `CRAWL4AI_API_URL` | No | None | Base URL of a remote Crawl4AI server. Set this to use Crawl4AI without a local install |
 | `CRAWL4AI_API_TOKEN` | No | None | Bearer token sent as `Authorization: Bearer …` to the remote Crawl4AI server. Required by Crawl4AI Docker ≥ 0.9.0, which rejects unauthenticated external connections by default. Ignored when unset |
+| `CCORE_YOUTUBE_PROXY` | No | None | Proxy URL for YouTube transcript and title requests (e.g. `http://user:pass@proxy:port`). Use a **residential** proxy; datacenter IPs are blocked by YouTube. Unset: direct connection |
+| `CCORE_YOUTUBE_COOKIES_FILE` | No | None | Path (inside the container) to a Netscape-format `cookies.txt` exported from a browser signed in to YouTube. Unblocks IP-flagged networks. A missing or unreadable file fails YouTube sources with a configuration error |
+| `CCORE_AUDIO_SEGMENT_MINUTES` | No | `10` | Length of the segments long audio/video is split into before transcription. `0` sends the file whole (for self-hosted speech-to-text without an upload size limit) |
 
 ### Optional heavy runtimes (installed on first startup)
 
@@ -128,7 +131,20 @@ These are **off by default** to keep the image lean. Setting one to `true` makes
 - Jina: https://jina.ai/
 - Crawl4AI: https://github.com/unclecode/crawl4ai
 
-The `CCORE_FIRECRAWL_*` variables are passed straight through to the content-core library (its settings are prefixed with `CCORE_`); Open Notebook itself doesn't read them. See [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md) for how these engines are selected in the UI.
+The `CCORE_*` variables are passed straight through to the content-core library (its settings are prefixed with `CCORE_`); Open Notebook itself doesn't read them. Set them on the **worker**, which runs extraction (in the single-container image, the container).
+
+YouTube cookies with Docker Compose:
+
+```yaml
+services:
+  open_notebook:
+    environment:
+      - CCORE_YOUTUBE_COOKIES_FILE=/app/data/youtube-cookies.txt
+    volumes:
+      - ./notebook_data:/app/data   # put youtube-cookies.txt in ./notebook_data
+```
+
+See [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md) for how these engines are selected in the UI.
 
 ---
 
diff --git a/frontend/src/components/sources/steps/SourceTypeStep.tsx b/frontend/src/components/sources/steps/SourceTypeStep.tsx
index ed77ed35..53719681 100644
--- a/frontend/src/components/sources/steps/SourceTypeStep.tsx
+++ b/frontend/src/components/sources/steps/SourceTypeStep.tsx
@@ -250,7 +250,7 @@ export function SourceTypeStep({ control, register, setValue, errors, urlValidat
                         type="file"
                         multiple
                         {...register('file')}
-                        accept=".pdf,.doc,.docx,.pptx,.ppt,.xlsx,.xls,.txt,.md,.epub,.mp4,.avi,.mov,.wmv,.mp3,.wav,.m4a,.aac,.jpg,.jpeg,.png,.tiff,.zip,.tar,.gz,.html"
+                        accept=".pdf,.doc,.docx,.pptx,.ppt,.xlsx,.xls,.odt,.ods,.odp,.txt,.md,.epub,.mp4,.avi,.mov,.wmv,.mp3,.wav,.m4a,.aac,.jpg,.jpeg,.png,.tiff,.zip,.tar,.gz,.html,.htm"
                       />
                       <p className="text-xs text-muted-foreground mt-1">
                         {t('sources.selectMultipleFilesHint')}
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 4d71787f..51fcc970 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -381,7 +381,7 @@ export const bnIN = {
     invalidUrlsDetected: "অবৈধ URL সনাক্ত করা হয়েছে:",
     lineLabel: "লাইন {{line}}",
     fixInvalidUrls: "অবৈধ URL ঠিক করুন বা সরান",
-    selectMultipleFilesHint: "ব্যাচ ইমপোর্টের জন্য একাধিক ফাইল নির্বাচন করুন। সমর্থিত: ডকুমেন্ট (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), মিডিয়া (MP4, MP3, WAV, M4A), ছবি (JPG, PNG), আর্কাইভ (ZIP)",
+    selectMultipleFilesHint: "ব্যাচ ইমপোর্টের জন্য একাধিক ফাইল নির্বাচন করুন। সমর্থিত: ডকুমেন্ট (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), মিডিয়া (MP4, MP3, WAV, M4A), ছবি (JPG, PNG), আর্কাইভ (ZIP)",
     selectedFiles: "নির্বাচিত ফাইল:",
     textPlaceholder: "এখানে আপনার কন্টেন্ট পেস্ট বা টাইপ করুন...",
     htmlDetected: "HTML কন্টেন্ট সনাক্ত করা হয়েছে। প্রক্রিয়াকরণের পর এটি Markdown এ রূপান্তরিত হবে।",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 0defc9d2..4585eaf4 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -381,7 +381,7 @@ export const caES = {
     invalidUrlsDetected: "S'han detectat URL no vàlides:",
     lineLabel: "Línia {{line}}",
     fixInvalidUrls: "Corregeix o elimina les URL no vàlides per continuar",
-    selectMultipleFilesHint: "Selecciona múltiples fitxers per a la importació per lots. Compatibles: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimèdia (MP4, MP3, WAV, M4A), Imatges (JPG, PNG), Arxius (ZIP)",
+    selectMultipleFilesHint: "Selecciona múltiples fitxers per a la importació per lots. Compatibles: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Multimèdia (MP4, MP3, WAV, M4A), Imatges (JPG, PNG), Arxius (ZIP)",
     selectedFiles: "Fitxers seleccionats:",
     textPlaceholder: "Enganxa o escriu el contingut aquí...",
     htmlDetected: "S'ha detectat contingut HTML. Es convertirà a Markdown després del processament.",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 7b757a9c..1036bf5d 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -384,7 +384,7 @@ export const deDE = {
     invalidUrlsDetected: "Ungültige URLs gefunden:",
     lineLabel: "Zeile {{line}}",
     fixInvalidUrls: "Bitte korrigiere oder entferne ungültige URLs, um fortzufahren",
-    selectMultipleFilesHint: "Wähle mehrere Dateien für den Sammelimport aus. Unterstützt werden: Dokumente (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medien (MP4, MP3, WAV, M4A), Bilder (JPG, PNG), Archive (ZIP)",
+    selectMultipleFilesHint: "Wähle mehrere Dateien für den Sammelimport aus. Unterstützt werden: Dokumente (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Medien (MP4, MP3, WAV, M4A), Bilder (JPG, PNG), Archive (ZIP)",
     selectedFiles: "Ausgewählte Dateien:",
     textPlaceholder: "Füge deinen Inhalt hier ein oder schreibe ihn direkt hinein...",
     htmlDetected: "HTML-Inhalt erkannt. Er wird nach der Verarbeitung in Markdown umgewandelt.",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 4c7a1b6a..f5eb1ee0 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -379,7 +379,7 @@ export const enUS = {
     invalidUrlsDetected: "Invalid URLs detected:",
     lineLabel: "Line {{line}}",
     fixInvalidUrls: "Please fix or remove invalid URLs to continue",
-    selectMultipleFilesHint: "Select multiple files to batch import. Supported: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
+    selectMultipleFilesHint: "Select multiple files to batch import. Supported: Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Media (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
     selectedFiles: "Selected files:",
     textPlaceholder: "Paste or type your content here...",
     htmlDetected: "HTML content detected. It will be converted to Markdown after processing.",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index b87770e7..3387bf15 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -381,7 +381,7 @@ export const esES = {
     invalidUrlsDetected: "URLs inválidas detectadas:",
     lineLabel: "Línea {{line}}",
     fixInvalidUrls: "Por favor, corrige o elimina las URLs inválidas para continuar",
-    selectMultipleFilesHint: "Selecciona múltiples archivos para importar por lotes. Soportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Multimedia (MP4, MP3, WAV, M4A), Imágenes (JPG, PNG), Archivos comprimidos (ZIP)",
+    selectMultipleFilesHint: "Selecciona múltiples archivos para importar por lotes. Soportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Multimedia (MP4, MP3, WAV, M4A), Imágenes (JPG, PNG), Archivos comprimidos (ZIP)",
     selectedFiles: "Archivos seleccionados:",
     textPlaceholder: "Pega o escribe tu contenido aquí...",
     htmlDetected: "Contenido HTML detectado. Se convertirá a Markdown después del procesamiento.",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index baec20c8..49efb4ed 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -381,7 +381,7 @@ export const frFR = {
     invalidUrlsDetected: "URL invalides détectées :",
     lineLabel: "Ligne {{line}}",
     fixInvalidUrls: "Veuillez corriger ou supprimer les URL invalides pour continuer",
-    selectMultipleFilesHint: "Sélectionnez plusieurs fichiers pour une importation groupée. Supportés : Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Média (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
+    selectMultipleFilesHint: "Sélectionnez plusieurs fichiers pour une importation groupée. Supportés : Documents (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Média (MP4, MP3, WAV, M4A), Images (JPG, PNG), Archives (ZIP)",
     selectedFiles: "Fichiers sélectionnés :",
     textPlaceholder: "Collez ou tapez votre contenu ici...",
     htmlDetected: "Contenu HTML détecté. Il sera converti en Markdown après traitement.",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index ed7cdfd0..a00b47f2 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -381,7 +381,7 @@ export const itIT = {
     invalidUrlsDetected: "URL non validi rilevati:",
     lineLabel: "Riga {{line}}",
     fixInvalidUrls: "Correggi o rimuovi gli URL non validi per continuare",
-    selectMultipleFilesHint: "Seleziona più file per importazione batch. Supportati: Documenti (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Immagini (JPG, PNG), Archivi (ZIP)",
+    selectMultipleFilesHint: "Seleziona più file per importazione batch. Supportati: Documenti (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Media (MP4, MP3, WAV, M4A), Immagini (JPG, PNG), Archivi (ZIP)",
     selectedFiles: "File selezionati:",
     textPlaceholder: "Incolla o digita il contenuto qui...",
     htmlDetected: "Rilevato contenuto HTML. Verrà convertito in Markdown dopo l'elaborazione.",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 66cb3142..01b9c4e6 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -381,7 +381,7 @@ export const jaJP = {
     invalidUrlsDetected: "無効なURLが検出されました:",
     lineLabel: "{{line}}行目",
     fixInvalidUrls: "無効なURLを修正または削除してください",
-    selectMultipleFilesHint: "複数ファイルを選択して一括インポート。対応形式：ドキュメント（PDF、DOC、DOCX、PPT、XLS、EPUB、TXT、MD）、メディア（MP4、MP3、WAV、M4A）、画像（JPG、PNG）、アーカイブ（ZIP）",
+    selectMultipleFilesHint: "複数ファイルを選択して一括インポート。対応形式：ドキュメント（PDF、DOC、DOCX、PPT、XLS、EPUB、ODT、ODS、ODP、HTML、HTM、TXT、MD）、メディア（MP4、MP3、WAV、M4A）、画像（JPG、PNG）、アーカイブ（ZIP）",
     selectedFiles: "選択されたファイル:",
     textPlaceholder: "コンテンツを貼り付けまたは入力...",
     htmlDetected: "HTMLコンテンツが検出されました。処理後にMarkdownに変換されます。",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 4c4ae208..f9e4e334 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -381,7 +381,7 @@ export const plPL = {
     invalidUrlsDetected: "Wykryto nieprawidłowe adresy URL:",
     lineLabel: "Wiersz {{line}}",
     fixInvalidUrls: "Popraw lub usuń nieprawidłowe adresy URL, aby kontynuować",
-    selectMultipleFilesHint: "Wybierz wiele plików, aby zaimportować je wsadowo. Obsługiwane: Dokumenty (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Media (MP4, MP3, WAV, M4A), Obrazy (JPG, PNG), Archiwa (ZIP)",
+    selectMultipleFilesHint: "Wybierz wiele plików, aby zaimportować je wsadowo. Obsługiwane: Dokumenty (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Media (MP4, MP3, WAV, M4A), Obrazy (JPG, PNG), Archiwa (ZIP)",
     selectedFiles: "Wybrane pliki:",
     textPlaceholder: "Wklej lub wpisz tutaj swoją treść...",
     htmlDetected: "Wykryto treść HTML. Po przetworzeniu zostanie przekonwertowana na Markdown.",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 7f31c0f3..403d4484 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -381,7 +381,7 @@ export const ptBR = {
     invalidUrlsDetected: "URLs inválidas detectadas:",
     lineLabel: "Linha {{line}}",
     fixInvalidUrls: "Por favor, corrija ou remova as URLs inválidas para continuar",
-    selectMultipleFilesHint: "Selecione múltiplos arquivos para importação em lote. Suportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Mídia (MP4, MP3, WAV, M4A), Imagens (JPG, PNG), Arquivos (ZIP)",
+    selectMultipleFilesHint: "Selecione múltiplos arquivos para importação em lote. Suportados: Documentos (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Mídia (MP4, MP3, WAV, M4A), Imagens (JPG, PNG), Arquivos (ZIP)",
     selectedFiles: "Arquivos selecionados:",
     textPlaceholder: "Cole ou digite seu conteúdo aqui...",
     htmlDetected: "Conteúdo HTML detectado. Será convertido para Markdown após o processamento.",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 696ba682..d567327c 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -381,7 +381,7 @@ export const ruRU = {
     invalidUrlsDetected: "Обнаружены недопустимые URL:",
     lineLabel: "Строка {{line}}",
     fixInvalidUrls: "Исправьте или удалите недопустимые URL для продолжения",
-    selectMultipleFilesHint: "Выберите несколько файлов для пакетного импорта. Поддерживаются: Документы (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Медиа (MP4, MP3, WAV, M4A), Изображения (JPG, PNG), Архивы (ZIP)",
+    selectMultipleFilesHint: "Выберите несколько файлов для пакетного импорта. Поддерживаются: Документы (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Медиа (MP4, MP3, WAV, M4A), Изображения (JPG, PNG), Архивы (ZIP)",
     selectedFiles: "Выбранные файлы:",
     textPlaceholder: "Вставьте или введите содержимое здесь...",
     htmlDetected: "Обнаружено HTML-содержимое. После обработки оно будет преобразовано в Markdown.",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index c4953257..517a1da9 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -381,7 +381,7 @@ export const trTR = {
     invalidUrlsDetected: "Geçersiz URL'ler tespit edildi:",
     lineLabel: "Satır {{line}}",
     fixInvalidUrls: "Devam etmek için geçersiz URL'leri düzeltin veya kaldırın",
-    selectMultipleFilesHint: "Toplu içe aktarma için birden fazla dosya seçin. Desteklenenler: Belgeler (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD), Medya (MP4, MP3, WAV, M4A), Görseller (JPG, PNG), Arşivler (ZIP)",
+    selectMultipleFilesHint: "Toplu içe aktarma için birden fazla dosya seçin. Desteklenenler: Belgeler (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD), Medya (MP4, MP3, WAV, M4A), Görseller (JPG, PNG), Arşivler (ZIP)",
     selectedFiles: "Seçilen dosyalar:",
     textPlaceholder: "İçeriğinizi buraya yapıştırın veya yazın...",
     htmlDetected: "HTML içeriği tespit edildi. İşlendikten sonra Markdown'a dönüştürülecek.",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index db4fc925..abed9803 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -381,7 +381,7 @@ export const zhCN = {
     invalidUrlsDetected: "检测到无效的 URL：",
     lineLabel: "第 {{line}} 行",
     fixInvalidUrls: "请修正或移除无效的 URL 以继续",
-    selectMultipleFilesHint: "选择多个文件进行批量导入。支持：文档 (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD)，媒体 (MP4, MP3, WAV, M4A)，图片 (JPG, PNG)，归档 (ZIP)",
+    selectMultipleFilesHint: "选择多个文件进行批量导入。支持：文档 (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD)，媒体 (MP4, MP3, WAV, M4A)，图片 (JPG, PNG)，归档 (ZIP)",
     selectedFiles: "已选择文件：",
     textPlaceholder: "在此处粘贴或输入您的内容...",
     htmlDetected: "检测到 HTML 内容。处理后将转换为 Markdown。",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 4800ca2a..7a169ee7 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -381,7 +381,7 @@ export const zhTW = {
     invalidUrlsDetected: "檢測到無效的 URL：",
     lineLabel: "第 {{line}} 行",
     fixInvalidUrls: "請修正或移除無效的 URL 以繼續",
-    selectMultipleFilesHint: "選擇多個檔案進行批次導入。支援：文件 (PDF, DOC, DOCX, PPT, XLS, EPUB, TXT, MD)，媒體 (MP4, MP3, WAV, M4A)，圖片 (JPG, PNG)，歸檔 (ZIP)",
+    selectMultipleFilesHint: "選擇多個檔案進行批次導入。支援：文件 (PDF, DOC, DOCX, PPT, XLS, EPUB, ODT, ODS, ODP, HTML, HTM, TXT, MD)，媒體 (MP4, MP3, WAV, M4A)，圖片 (JPG, PNG)，歸檔 (ZIP)",
     selectedFiles: "已選擇檔案：",
     textPlaceholder: "在此處貼上或輸入您的內容...",
     htmlDetected: "偵測到 HTML 內容。處理後將轉換為 Markdown。",

From ed6b40e423ca29c7feda3a2facdc8b81b0b1799e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 23:13:25 -0300
Subject: [PATCH 330/345] feat(providers): add SiliconFlow and Z.ai (#1443)

* feat(providers): add SiliconFlow and Z.ai

Both are esperanto OpenAI-compatible profiles (SiliconFlow since 2.27,
Z.ai since 2.28). Registered like Novita: provider registry (connection
test model, discovery URL), key provider, SupportedProvider, env map,
discovery functions, docs and README.

Credential-based discovery now honors a credential's base URL override for
every OpenAI-compatible registry provider, not only OpenAI, so mainland
China SiliconFlow accounts (api.siliconflow.cn) can list their models. The
override is DNS-pinned like the other user-supplied URLs.

Closes #1409
Closes #1437

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(providers): wire SILICONFLOW_BASE_URL / ZAI_BASE_URL; scope discovery override

- The registry declares the *_BASE_URL overrides (optional_env) and exposes
  ProviderSpec.base_url_env; env migration copies it into the credential's
  base_url and env-based discovery lists models there.
- Credential discovery honors a base URL only for OpenAI and providers that
  declare an override, so other providers keep their registry URL (e.g.
  ppq's ?type=all filter).
- Docs: env vars described as wired, Z.ai model wording and the manual
  model id tip, credentials dev doc provider count and list.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* test: satisfy mypy on the migrated credential's api_key

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(providers): validate and pin env base URLs; classify SiliconFlow models

- Env migration runs the same validate_url() check as the API before saving
  a credential with a base URL.
- Env-based discovery pins a *_BASE_URL override through
  prepare_pinned_http_target, like other user-supplied URLs.
- SiliconFlow's /models mixes in embedding and audio models; classify them
  instead of labelling every model as language.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(providers): ignore blank *_BASE_URL values; ADR-012 for endpoint overrides

- A whitespace-only override env var means no override (migration and env
  discovery), so discovery keeps the registry URL.
- Tests for a configured Z.ai override in migration, credential and env
  discovery.
- ADR-012 records the registry-declared endpoint override contract.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): drop duplicated entry from rebase

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(providers): expose the override to provisioning; strip credential base URLs

- _provision_simple_provider also sets the registry-declared *_BASE_URL
  (ADR-012), which esperanto's profiles and env discovery read.
- Credential discovery ignores a blank base URL.
- Env discovery uses the shared SSL settings (httpx_verify_setting).
- Tests for provisioning and for migration rejecting an invalid override.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs: Z.ai credential Base URL; list the remaining manual provider copies

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   1 +
 README.md                                     |   2 +
 api/credentials_service.py                    |  21 +-
 api/models.py                                 |   2 +
 api/routers/models.py                         |   2 +
 docs/4-AI-PROVIDERS/index.md                  |  16 +
 docs/5-CONFIGURATION/ai-providers.md          |  58 ++++
 docs/5-CONFIGURATION/environment-reference.md |   4 +
 docs/7-DEVELOPMENT/credentials.md             |   8 +-
 .../ADR-012-provider-endpoint-overrides.md    |  29 ++
 docs/7-DEVELOPMENT/decisions/README.md        |   1 +
 open_notebook/ai/key_provider.py              |  13 +
 open_notebook/ai/model_discovery.py           |  47 ++-
 open_notebook/ai/provider_registry.py         |  31 ++
 tests/test_credential_provider_validation.py  |   4 +
 tests/test_credentials_api.py                 | 307 ++++++++++++++++++
 tests/test_model_discovery.py                 |   8 +
 17 files changed, 540 insertions(+), 14 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-012-provider-endpoint-overrides.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c0d67322..162af909 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - **OpenDocument uploads and YouTube unblocking options.** `.odt`, `.ods` and `.odp` files (and `.htm`) can be uploaded as sources (content-core 2.2). New content-core settings are documented: `CCORE_YOUTUBE_PROXY` and `CCORE_YOUTUBE_COOKIES_FILE` get YouTube transcripts through when YouTube blocks the server's IP, and `CCORE_AUDIO_SEGMENT_MINUTES` controls how long audio is split for transcription (#1439)
+- **SiliconFlow and Z.ai providers.** Both are available in Manage → Models with credential setup, connection test and model discovery (language models). SiliconFlow serves hosted DeepSeek, Qwen, GLM and Kimi models; mainland China accounts set the credential's Base URL to `https://api.siliconflow.cn/v1`. Z.ai serves the GLM family. Model discovery honors their Base URL override (from the credential or `SILICONFLOW_BASE_URL` / `ZAI_BASE_URL`), as it already did for OpenAI (#1409, #1437)
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
 - **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
 
diff --git a/README.md b/README.md
index d0f5eafe..ba8ecb74 100644
--- a/README.md
+++ b/README.md
@@ -243,6 +243,8 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
 | MiniMax      | ✅          | ❌               | ❌             | ❌             |
 | Novita       | ✅          | ❌               | ❌             | ❌             |
+| SiliconFlow  | ✅          | ❌               | ❌             | ❌             |
+| Z.ai         | ✅          | ❌               | ❌             | ❌             |
 | PayPerQ (PPQ) | ✅          | ✅               | ✅             | ✅             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
 
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 82908fa1..55aaaf57 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -187,16 +187,22 @@ def create_credential_from_env(provider: str) -> Credential:
             api_key=SecretStr(api_key) if api_key else None,
         )
     else:
-        # Simple API key providers
+        # Simple API key providers (plus an optional *_BASE_URL endpoint
+        # override for providers that declare one, e.g. regional endpoints)
         config = PROVIDER_ENV_CONFIG.get(provider, {})
         required = config.get("required", [])
         env_var = required[0] if required else None
         api_key = os.environ.get(env_var) if env_var else None
+        spec = PROVIDERS.get(provider)
+        base_url_env = spec.base_url_env if spec else None
         return Credential(
             name=name,
             provider=provider,
             modalities=modalities,
             api_key=SecretStr(api_key) if api_key else None,
+            base_url=(os.environ.get(base_url_env, "").strip() or None)
+            if base_url_env
+            else None,
         )
 
 
@@ -684,8 +690,14 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
     # Standard OpenAI-style API discovery
     discovery_url = url_map.get(provider)
     user_supplied_url = False
-    if provider == "openai" and base_url:
-        discovery_url = models_endpoint(base_url)
+    # A credential's base URL override is also where its models are listed:
+    # OpenAI (gateways) and providers that declare a *_BASE_URL override, e.g.
+    # SiliconFlow's mainland-China api.siliconflow.cn. Other providers keep
+    # their registry URL, which may carry provider-specific query params.
+    spec = PROVIDERS.get(provider)
+    honors_base_url = provider == "openai" or bool(spec and spec.base_url_env)
+    if base_url and base_url.strip() and discovery_url and honors_base_url:
+        discovery_url = models_endpoint(base_url.strip())
         user_supplied_url = True
     if not discovery_url or not api_key:
         return []
@@ -934,6 +946,9 @@ async def migrate_from_env() -> dict:
 
             logger.info(f"[{provider}] Creating credential from env vars")
             cred = create_credential_from_env(provider)
+            # Same URL checks as credentials created through the API.
+            if cred.base_url:
+                await validate_url(cred.base_url, provider)
             await cred.save()
             logger.info(f"[{provider}] Credential saved successfully (id={cred.id})")
 
diff --git a/api/models.py b/api/models.py
index 4c716be1..f78c281d 100644
--- a/api/models.py
+++ b/api/models.py
@@ -600,6 +600,8 @@ SupportedProvider = Literal[
     "dashscope",
     "minimax",
     "novita",
+    "siliconflow",
+    "zai",
     "ppq",
     "cohere",
     "voyage",
diff --git a/api/routers/models.py b/api/routers/models.py
index 4829dd5a..ef123234 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -409,6 +409,8 @@ async def get_provider_availability():
             "dashscope": "DASHSCOPE_API_KEY",
             "minimax": "MINIMAX_API_KEY",
             "novita": "NOVITA_API_KEY",
+            "siliconflow": "SILICONFLOW_API_KEY",
+            "zai": "ZAI_API_KEY",
             "ppq": "PPQ_API_KEY",
             "cohere": "COHERE_API_KEY",
         }
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index 732163ac..f81a7933 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -87,6 +87,20 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 - Best for: Open-weight LLMs behind one OpenAI-compatible key
 - Advantage: Broad open-model catalog
 
+**SiliconFlow**
+- Cost: Pay-per-model (competitive)
+- Speed: Fast
+- Quality: Varies by model
+- Best for: Hosted DeepSeek / Qwen / GLM / Kimi, including mainland China accounts
+- Advantage: Global and mainland China endpoints
+
+**Z.ai**
+- Cost: Pay-per-token
+- Speed: Fast
+- Quality: Good (GLM family)
+- Best for: GLM models from their maker
+- Advantage: Current GLM releases first
+
 **PayPerQ (PPQ)**
 - Cost: Pay-as-you-go across providers
 - Speed: Varies by routed model
@@ -152,6 +166,8 @@ Open Notebook supports 17+ AI providers. This guide helps you **choose the right
 | **MiniMax** | Fast | $$ | Good | Low | 5 min | 204K |
 | **Cohere** | Fast | $$ | Good | Low | 5 min | 128K |
 | **Novita** | Fast | $ | Varies | Low | 5 min | Varies |
+| **SiliconFlow** | Fast | $ | Varies | Low | 5 min | Varies |
+| **Z.ai** | Fast | $$ | Good | Low | 5 min | Varies |
 | **PayPerQ (PPQ)** | Varies | Varies | Varies | Low | 5 min | Varies |
 | **Ollama** | Slow-Medium | Free | Good | Max | 10 min | Varies |
 | **oMLX** | Fast (MLX) | Free | Good | Max | 10 min | Varies |
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 0cc76c08..eb8ff507 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -399,6 +399,64 @@ Heavy use: Depends on models chosen
 
 ---
 
+### SiliconFlow
+
+**Cost:** Pay-per-model (competitive; some small models are free)
+
+**Get Your API Key:**
+1. Go to https://cloud.siliconflow.com/account/ak (mainland China accounts: https://cloud.siliconflow.cn/account/ak)
+2. Create an account (if needed)
+3. Create a new API key
+
+**Configure in Open Notebook:**
+1. Go to **Manage** → **Models**
+2. Click **Add Credential**
+3. Select provider: **SiliconFlow**
+4. Give it a name, paste your API key
+5. **Mainland China account?** Set **Base URL** to `https://api.siliconflow.cn/v1` (the default is the global `https://api.siliconflow.com/v1`)
+6. Click **Save**, then **Test Connection**
+7. Click **Discover Models** → **Register Models**
+
+**Notes:**
+- Hosted DeepSeek, Qwen, GLM and Kimi models behind one OpenAI-compatible key.
+- Language models only for now. Embedding, speech-to-text and text-to-speech through SiliconFlow need support in Esperanto first.
+- Env-based setup: `SILICONFLOW_API_KEY`, plus `SILICONFLOW_BASE_URL` for a mainland China account (migrated into the credential's Base URL).
+
+**Troubleshooting:**
+- "Invalid API key" → Check that the key matches the endpoint: keys from `siliconflow.cn` don't work against the global `.com` endpoint, and vice versa
+- "Model not available" → Re-discover models from the credential
+
+---
+
+### Z.ai
+
+**Cost:** Pay-per-token
+
+**Get Your API Key:**
+1. Go to https://z.ai/manage-apikey/apikey-list
+2. Create an account (if needed)
+3. Create a new API key
+
+**Configure in Open Notebook:**
+1. Go to **Manage** → **Models**
+2. Click **Add Credential**
+3. Select provider: **Z.ai**
+4. Give it a name, paste your API key
+5. Click **Save**, then **Test Connection**
+6. Click **Discover Models** → **Register Models**
+
+**Notes:**
+- Z.ai's GLM models (for example `glm-5.2`, also used for the connection test, and `glm-4.5-flash`) are available through an OpenAI-compatible API (`https://api.z.ai/api/paas/v4`). Register the models you want after **Discover Models**.
+- Language models only.
+- Env-based setup: `ZAI_API_KEY`, plus `ZAI_BASE_URL` to point at a different Z.ai endpoint (migrated into the credential's Base URL).
+
+**Troubleshooting:**
+- "Invalid API key" → Check the key in the Z.ai console
+- A model is missing from Discover Models → Type its id (e.g. `glm-4.5-flash`) in the search box and use **Add**
+- "Model not available" → Re-discover models from the credential
+
+---
+
 ### PayPerQ (PPQ)
 
 **Cost:** Pay-as-you-go across the providers it routes to
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 6168ecdc..1120bcc7 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -340,6 +340,10 @@ If you have these variables configured from a previous installation, click the *
 | `DASHSCOPE_API_KEY` | DashScope (Qwen) | Manage → Models → Add DashScope Credential |
 | `MINIMAX_API_KEY` | MiniMax | Manage → Models → Add MiniMax Credential |
 | `NOVITA_API_KEY` | Novita | Manage → Models → Add Novita Credential |
+| `SILICONFLOW_API_KEY` | SiliconFlow | Manage → Models → Add SiliconFlow Credential |
+| `SILICONFLOW_BASE_URL` | SiliconFlow | Endpoint override for env-based setup (`https://api.siliconflow.cn/v1` for mainland China accounts); copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
+| `ZAI_API_KEY` | Z.ai | Manage → Models → Add Z.ai Credential |
+| `ZAI_BASE_URL` | Z.ai | Endpoint override for env-based setup; copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
 | `PPQ_API_KEY` | PayPerQ (PPQ) | Manage → Models → Add PayPerQ Credential |
 | `COHERE_API_KEY` | Cohere | Manage → Models → Add Cohere Credential |
 | `AZURE_OPENAI_API_KEY` | Azure OpenAI | Manage → Models → Add Azure OpenAI Credential |
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
index 49b7b2e1..077f3379 100644
--- a/docs/7-DEVELOPMENT/credentials.md
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -36,11 +36,11 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and three migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`, `/migrate-encryption`). Swagger at `/docs` documents the shapes.
 
-**Supported providers (17)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). One manual copy remains, enforced by `tests/test_credential_provider_validation.py`: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime):
+**Supported providers (24)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). Manual copies remain: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime; enforced by `tests/test_credential_provider_validation.py`), plus a simple provider's entry in `PROVIDER_CONFIG` (`open_notebook/ai/key_provider.py`) and in the `env_var_map` of `get_provider_availability()` (`api/routers/models.py`). Add all three when adding a provider:
 
-- Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, voyage, elevenlabs, deepgram, dashscope, minimax
-- URL-based: ollama
-- Multi-field: azure, vertex, openai_compatible
+- Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, dashscope, minimax, novita, siliconflow, zai, ppq, cohere, voyage, elevenlabs, deepgram (siliconflow and zai also accept an optional `*_BASE_URL` endpoint override)
+- URL-based: ollama, omlx
+- Multi-field: azure, vertex, openai_compatible, anthropic_compatible
 
 **Security properties**:
 
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-012-provider-endpoint-overrides.md b/docs/7-DEVELOPMENT/decisions/ADR-012-provider-endpoint-overrides.md
new file mode 100644
index 00000000..75c393f3
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-012-provider-endpoint-overrides.md
@@ -0,0 +1,29 @@
+# ADR-012: Provider endpoint overrides are declared in the registry
+
+- **Status**: Accepted
+- **Date**: 2026-10
+- **Related**: #1409 (SiliconFlow), #1437 (Z.ai), #1438 (MiniMax), PR #1443
+
+## Context
+
+Some providers serve the same API from regional endpoints whose keys aren't interchangeable. SiliconFlow's mainland-China accounts only work against `api.siliconflow.cn`, and MiniMax keys are region-specific too. esperanto's profiles already read a `*_BASE_URL` override at runtime, and the credential form has a Base URL field, but discovery only honored a base URL for OpenAI, and env migration only copied the API key. Applying any stored base URL to every registry provider's discovery was considered and rejected: it silently changed behavior for providers whose registry URL carries provider-specific query params (ppq's `?type=all`).
+
+## Decision
+
+**A provider supports an endpoint override only if its `ProviderSpec` declares one: a `*_BASE_URL` entry in `optional_env`, exposed as `ProviderSpec.base_url_env`.** For those providers (and OpenAI, as before):
+
+- Env migration copies the override into the credential's `base_url`, after the same `validate_url()` check the API applies.
+- Credential-based discovery lists models at `<base_url>/models`. Env-based discovery does the same with the env value. Both go through `prepare_pinned_http_target` (validation and DNS pinning), like every user-supplied URL.
+- Every other provider keeps its registry discovery URL, even if a credential has a base URL.
+
+## Alternatives considered
+
+- **Honor a base URL for every registry provider**: rejected because it changes existing providers' discovery and drops their URL quirks.
+- **Credential form only, no env var**: rejected. Env-based setups and the env-to-credential migration would keep hitting the global endpoint, and esperanto reads the env var at runtime anyway.
+- **A separate per-provider override table**: rejected. The registry is the single source of truth for provider metadata (see its module docstring), and `optional_env` already models "read during migration, not required".
+
+## Consequences
+
+- Adding a regional endpoint to a provider is a one-line registry change (`optional_env=("X_BASE_URL",)`). Discovery, migration and the docs contract follow.
+- Overrides are always validated and DNS-pinned before Open Notebook fetches from them.
+- A provider without a declared override ignores a credential's Base URL for discovery. Runtime calls still pass it to esperanto, so declare the override whenever the provider supports one.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index 8c10134c..4f37541d 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -52,5 +52,6 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-008](ADR-008-notebook-scoped-search.md) | Notebook scope is an optional filter on the existing search functions | Accepted |
 | [ADR-009](ADR-009-pbkdf2-credential-encryption.md) | PBKDF2 credential key derivation with versioned ciphertext | Accepted |
 | [ADR-011](ADR-011-design-token-system.md) | Visual identity is a token contract in globals.css, reviewed through /dev/design | Accepted |
+| [ADR-012](ADR-012-provider-endpoint-overrides.md) | Provider endpoint overrides are declared in the registry | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/open_notebook/ai/key_provider.py b/open_notebook/ai/key_provider.py
index 384ebccc..da716daf 100644
--- a/open_notebook/ai/key_provider.py
+++ b/open_notebook/ai/key_provider.py
@@ -17,6 +17,7 @@ from typing import Optional
 
 from loguru import logger
 
+from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.domain.credential import Credential
 
 # =============================================================================
@@ -79,6 +80,12 @@ PROVIDER_CONFIG = {
     "novita": {
         "env_var": "NOVITA_API_KEY",
     },
+    "siliconflow": {
+        "env_var": "SILICONFLOW_API_KEY",
+    },
+    "zai": {
+        "env_var": "ZAI_API_KEY",
+    },
     "ppq": {
         "env_var": "PPQ_API_KEY",
     },
@@ -153,6 +160,12 @@ async def _provision_simple_provider(provider: str) -> bool:
         provider_upper = provider_lower.upper()
         os.environ[f"{provider_upper}_API_BASE"] = cred.base_url
         logger.debug(f"Set {provider_upper}_API_BASE from Credential")
+        # Providers with a registry-declared endpoint override (ADR-012) read
+        # it under that name (esperanto's profiles and env discovery).
+        spec = PROVIDERS.get(provider_lower)
+        if spec and spec.base_url_env:
+            os.environ[spec.base_url_env] = cred.base_url
+            logger.debug(f"Set {spec.base_url_env} from Credential")
 
     return True
 
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index a2596f45..0bf7f737 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -8,7 +8,7 @@ AI providers and automatically register them in the database.
 import asyncio
 import os
 from dataclasses import dataclass
-from typing import Awaitable, Callable, Dict, List, Optional, Tuple
+from typing import Any, Awaitable, Callable, Dict, List, Optional, Tuple
 
 import httpx
 from loguru import logger
@@ -18,6 +18,7 @@ from open_notebook.ai.models import Model
 from open_notebook.ai.provider_registry import PROVIDERS
 from open_notebook.database.repository import repo_query
 from open_notebook.domain.credential import Credential
+from open_notebook.utils.ssl_config import httpx_verify_setting
 from open_notebook.utils.url_validation import prepare_pinned_http_target
 
 
@@ -161,6 +162,14 @@ DASHSCOPE_MODEL_TYPES = {
     "language": ["qwen"],
 }
 
+# SiliconFlow's /models catalog mixes chat models with embedding, rerank and
+# audio models; keep those out of the language slot.
+SILICONFLOW_MODEL_TYPES = {
+    "embedding": ["bge-", "bce-embedding", "embedding"],
+    "speech_to_text": ["sensevoice", "telespeech"],
+    "text_to_speech": ["cosyvoice", "fish-speech", "moss-tts"],
+}
+
 MINIMAX_MODEL_TYPES = {
     "language": ["minimax", "abab"],
 }
@@ -205,6 +214,7 @@ def classify_model_type(model_name: str, provider: str) -> str:
         "elevenlabs": ELEVENLABS_MODEL_TYPES,
         "deepgram": DEEPGRAM_MODEL_TYPES,
         "dashscope": DASHSCOPE_MODEL_TYPES,
+        "siliconflow": SILICONFLOW_MODEL_TYPES,
         "minimax": MINIMAX_MODEL_TYPES,
         "ppq": PPQ_MODEL_TYPES,
     }
@@ -248,6 +258,9 @@ class ProviderDiscoverySpec:
     # and no description.
     classify: Optional[Callable[[dict], str]] = None
     description: Optional[Callable[[dict], Optional[str]]] = None
+    # Env var with an endpoint override (regional base URL); when set, models
+    # are listed at <base_url>/models instead of `url`.
+    base_url_env: Optional[str] = None
 
 
 # Per-provider quirk hooks that can't live in the (pure data) registry.
@@ -269,6 +282,7 @@ OPENAI_COMPAT_PROVIDERS: Dict[str, ProviderDiscoverySpec] = {
         env_var=spec.required_env[0],
         classify=_COMPAT_CLASSIFY.get(name),
         description=_COMPAT_DESCRIPTION.get(name),
+        base_url_env=spec.base_url_env,
     )
     for name, spec in PROVIDERS.items()
     if spec.openai_compat_discovery_url
@@ -282,14 +296,29 @@ async def discover_openai_compatible_provider(provider: str) -> List[DiscoveredM
     if not api_key:
         return []
 
+    url = spec.url
+    headers = {"Authorization": f"Bearer {api_key}"}
+    extensions: Dict[str, Any] = {}
+    base_url = (
+        os.environ.get(spec.base_url_env, "").strip() if spec.base_url_env else ""
+    )
+
     models = []
     try:
-        async with httpx.AsyncClient() as client:
-            response = await client.get(
-                spec.url,
-                headers={"Authorization": f"Bearer {api_key}"},
-                timeout=30.0,
-            )
+        if base_url:
+            # Endpoint override from the environment: validate and pin it like
+            # any other user-supplied URL (DNS-rebinding safe).
+            trimmed = base_url.rstrip("/")
+            override = trimmed if trimmed.endswith("/models") else f"{trimmed}/models"
+            target = await prepare_pinned_http_target(override, provider)
+            url = target.url
+            headers.update(target.headers)
+            extensions = target.extensions
+        async with httpx.AsyncClient(verify=httpx_verify_setting()) as client:
+            get_kwargs: Dict[str, Any] = {"headers": headers, "timeout": 30.0}
+            if extensions:
+                get_kwargs["extensions"] = extensions
+            response = await client.get(url, **get_kwargs)
             response.raise_for_status()
             data = response.json()
 
@@ -338,6 +367,8 @@ discover_xai_models = _make_openai_compat_discoverer("xai")
 discover_dashscope_models = _make_openai_compat_discoverer("dashscope")
 discover_minimax_models = _make_openai_compat_discoverer("minimax")
 discover_novita_models = _make_openai_compat_discoverer("novita")
+discover_siliconflow_models = _make_openai_compat_discoverer("siliconflow")
+discover_zai_models = _make_openai_compat_discoverer("zai")
 discover_ppq_models = _make_openai_compat_discoverer("ppq")
 
 
@@ -878,6 +909,8 @@ PROVIDER_DISCOVERY_FUNCTIONS = {
     "dashscope": discover_dashscope_models,
     "minimax": discover_minimax_models,
     "novita": discover_novita_models,
+    "siliconflow": discover_siliconflow_models,
+    "zai": discover_zai_models,
     "ppq": discover_ppq_models,
     "cohere": discover_cohere_models,
     "azure": None,  # Azure requires credential-based discovery (different auth)
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 5979c76b..87ea82d7 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -53,6 +53,15 @@ class ProviderSpec:
     # the discovery URL. Drives OPENAI_COMPAT_PROVIDERS in model_discovery.
     openai_compat_discovery_url: Optional[str] = None
 
+    @property
+    def base_url_env(self) -> Optional[str]:
+        """Optional env var overriding the provider's endpoint (`*_BASE_URL`).
+
+        Declared through `optional_env`; providers that have one accept a
+        user-supplied base URL for discovery (e.g. regional endpoints).
+        """
+        return next((v for v in self.optional_env if v.endswith("_BASE_URL")), None)
+
     def env_config(self) -> Dict[str, List[str]]:
         """Env var config in the legacy PROVIDER_ENV_CONFIG dict shape."""
         config: Dict[str, List[str]] = {}
@@ -167,6 +176,28 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
         docs_url="https://novita.ai/settings/key-management",
         openai_compat_discovery_url="https://api.novita.ai/openai/models",
     ),
+    ProviderSpec(
+        name="siliconflow",
+        display_name="SiliconFlow",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("SILICONFLOW_API_KEY",),
+        optional_env=("SILICONFLOW_BASE_URL",),
+        # esperanto's default for the profile; mainland China accounts set
+        # the credential's base URL to https://api.siliconflow.cn/v1.
+        test_model="deepseek-ai/DeepSeek-V3.1-Terminus",
+        docs_url="https://cloud.siliconflow.com/account/ak",
+        openai_compat_discovery_url="https://api.siliconflow.com/v1/models",
+    ),
+    ProviderSpec(
+        name="zai",
+        display_name="Z.ai",
+        modalities=_LANGUAGE_ONLY,
+        required_env=("ZAI_API_KEY",),
+        optional_env=("ZAI_BASE_URL",),
+        test_model="glm-5.2",
+        docs_url="https://z.ai/manage-apikey/apikey-list",
+        openai_compat_discovery_url="https://api.z.ai/api/paas/v4/models",
+    ),
     ProviderSpec(
         name="ppq",
         display_name="PayPerQ",
diff --git a/tests/test_credential_provider_validation.py b/tests/test_credential_provider_validation.py
index e0c0d185..3970a8eb 100644
--- a/tests/test_credential_provider_validation.py
+++ b/tests/test_credential_provider_validation.py
@@ -32,6 +32,8 @@ KNOWN_GOOD_PROVIDERS = [
     "dashscope",
     "minimax",
     "novita",
+    "siliconflow",
+    "zai",
     "ppq",
     "cohere",
     "voyage",
@@ -114,6 +116,8 @@ class TestProviderRegistryIsTheSourceOfTruth:
             "dashscope": "https://dashscope.aliyuncs.com/compatible-mode/v1/models",
             "minimax": "https://api.minimax.io/v1/models",
             "novita": "https://api.novita.ai/openai/models",
+            "siliconflow": "https://api.siliconflow.com/v1/models",
+            "zai": "https://api.z.ai/api/paas/v4/models",
             "ppq": "https://api.ppq.ai/v1/models?type=all",
         }
         assert {
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 2f2000c6..47021ff4 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -1,10 +1,12 @@
 """Tests for the credentials API endpoint."""
 
+import os
 from unittest.mock import AsyncMock, patch
 
 import httpx
 import pytest
 from fastapi.testclient import TestClient
+from pydantic import SecretStr
 
 from api import credentials_service
 
@@ -161,6 +163,71 @@ class TestCredentialModelDiscovery:
             }
         ]
 
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize(
+        "provider,base_url,expected_url",
+        [
+            # Regional override: mainland-China SiliconFlow accounts (#1409)
+            (
+                "siliconflow",
+                "https://api.siliconflow.cn/v1",
+                "https://api.siliconflow.cn/v1/models",
+            ),
+            ("siliconflow", None, "https://api.siliconflow.com/v1/models"),
+            ("zai", None, "https://api.z.ai/api/paas/v4/models"),
+            (
+                "zai",
+                "https://open.bigmodel.cn/api/paas/v4",
+                "https://open.bigmodel.cn/api/paas/v4/models",
+            ),
+        ],
+    )
+    async def test_registry_provider_discovery_honors_base_url(
+        self, monkeypatch, provider, base_url, expected_url
+    ):
+        """Profile providers list models at the credential's base URL when it
+        overrides the default endpoint (pinned like other user URLs)."""
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        requested = []
+        pinned = []
+
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                requested.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "model-a"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            pinned.append(url)
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        config = {"api_key": "sk-test"}
+        if base_url:
+            config["base_url"] = base_url
+        models = await credentials_service.discover_with_config(provider, config)
+
+        assert [m["name"] for m in models] == ["model-a"]
+        assert requested == [expected_url]
+        assert pinned == ([expected_url] if base_url else [])
+
     @pytest.mark.asyncio
     async def test_model_discovery_base_url_can_include_models_path(self, monkeypatch):
         """Model discovery should not append /models twice."""
@@ -639,3 +706,243 @@ class TestCredentialUpdateClearsFields:
         response = self._put(client, cred, {"credentials_path": None})
         assert response.status_code == 200
         assert cred.credentials_path is None
+
+
+class TestRegionalBaseUrl:
+    """Providers that declare a *_BASE_URL override (SiliconFlow, Z.ai) honor it
+    in env migration and env-based discovery; other providers ignore a stored
+    base URL for discovery (#1409, #1437)."""
+
+    def test_env_migration_reads_base_url(self, monkeypatch):
+        monkeypatch.setenv("SILICONFLOW_API_KEY", "sf-key")
+        monkeypatch.setenv("SILICONFLOW_BASE_URL", "https://api.siliconflow.cn/v1")
+
+        cred = credentials_service.create_credential_from_env("siliconflow")
+
+        assert cred.base_url == "https://api.siliconflow.cn/v1"
+        assert cred.api_key is not None
+        assert cred.api_key.get_secret_value() == "sf-key"
+
+    def test_siliconflow_non_chat_models_are_not_language(self):
+        from open_notebook.ai.model_discovery import classify_model_type
+
+        assert classify_model_type("BAAI/bge-m3", "siliconflow") == "embedding"
+        assert (
+            classify_model_type("FunAudioLLM/SenseVoiceSmall", "siliconflow")
+            == "speech_to_text"
+        )
+        assert (
+            classify_model_type("FunAudioLLM/CosyVoice2-0.5B", "siliconflow")
+            == "text_to_speech"
+        )
+        assert classify_model_type("Qwen/Qwen3-8B", "siliconflow") == "language"
+
+    @pytest.mark.parametrize("value", [None, "", "   "])
+    def test_env_migration_without_base_url(self, monkeypatch, value):
+        monkeypatch.setenv("ZAI_API_KEY", "zai-key")
+        if value is None:
+            monkeypatch.delenv("ZAI_BASE_URL", raising=False)
+        else:
+            monkeypatch.setenv("ZAI_BASE_URL", value)
+
+        assert credentials_service.create_credential_from_env("zai").base_url is None
+
+    def test_env_migration_reads_zai_base_url(self, monkeypatch):
+        monkeypatch.setenv("ZAI_API_KEY", "zai-key")
+        monkeypatch.setenv("ZAI_BASE_URL", " https://open.bigmodel.cn/api/paas/v4 ")
+
+        cred = credentials_service.create_credential_from_env("zai")
+
+        assert cred.base_url == "https://open.bigmodel.cn/api/paas/v4"
+
+    @pytest.mark.asyncio
+    async def test_env_discovery_uses_base_url(self, monkeypatch):
+        from open_notebook.ai import model_discovery
+
+        requested = []
+
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, **kwargs):
+                requested.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "Qwen/Qwen3-8B"}]},
+                    request=httpx.Request("GET", url),
+                )
+
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        pinned = []
+
+        async def fake_prepare_pinned(url, provider):
+            pinned.append(url)
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setenv("SILICONFLOW_API_KEY", "sf-key")
+        monkeypatch.setenv("SILICONFLOW_BASE_URL", "https://api.siliconflow.cn/v1/")
+        monkeypatch.setattr(model_discovery.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            model_discovery, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        models = await model_discovery.discover_openai_compatible_provider(
+            "siliconflow"
+        )
+
+        assert requested == ["https://api.siliconflow.cn/v1/models"]
+        assert pinned == ["https://api.siliconflow.cn/v1/models"]
+        assert [m.name for m in models] == ["Qwen/Qwen3-8B"]
+
+    @pytest.mark.asyncio
+    @pytest.mark.parametrize(
+        "env_value,expected",
+        [
+            (
+                "https://open.bigmodel.cn/api/paas/v4",
+                "https://open.bigmodel.cn/api/paas/v4/models",
+            ),
+            ("   ", "https://api.z.ai/api/paas/v4/models"),
+        ],
+    )
+    async def test_zai_env_discovery_override(self, monkeypatch, env_value, expected):
+        from open_notebook.ai import model_discovery
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        requested = []
+
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, **kwargs):
+                requested.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "glm-5.2"}]},
+                    request=httpx.Request("GET", url),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setenv("ZAI_API_KEY", "zai-key")
+        monkeypatch.setenv("ZAI_BASE_URL", env_value)
+        monkeypatch.setattr(model_discovery.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            model_discovery, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        await model_discovery.discover_openai_compatible_provider("zai")
+
+        assert requested == [expected]
+
+    @pytest.mark.asyncio
+    async def test_providers_without_override_keep_registry_url(self, monkeypatch):
+        requested = []
+
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                requested.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "m"}]},
+                    request=httpx.Request("GET", url),
+                )
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+
+        await credentials_service.discover_with_config(
+            "ppq", {"api_key": "k", "base_url": "https://elsewhere.example/v1"}
+        )
+
+        # ppq's registry URL carries a provider-specific query string.
+        assert requested == ["https://api.ppq.ai/v1/models?type=all"]
+
+
+class TestEndpointOverrideProvisioningAndMigration:
+    """ADR-012: provisioning exposes the registry override name, and env
+    migration validates the override before saving."""
+
+    @pytest.mark.asyncio
+    async def test_provisioning_sets_registry_base_url_env(self, monkeypatch):
+        from types import SimpleNamespace
+
+        from open_notebook.ai import key_provider
+
+        # setenv registers an undo, so the values the code writes are removed
+        # after the test.
+        for var in (
+            "SILICONFLOW_BASE_URL",
+            "SILICONFLOW_API_KEY",
+            "SILICONFLOW_API_BASE",
+        ):
+            monkeypatch.setenv(var, "")
+        cred = SimpleNamespace(
+            api_key=SecretStr("sf-key"), base_url="https://api.siliconflow.cn/v1"
+        )
+        monkeypatch.setattr(
+            key_provider, "_get_default_credential", AsyncMock(return_value=cred)
+        )
+
+        assert await key_provider._provision_simple_provider("siliconflow") is True
+        assert os.environ["SILICONFLOW_BASE_URL"] == "https://api.siliconflow.cn/v1"
+        assert os.environ["SILICONFLOW_API_KEY"] == "sf-key"
+
+    @pytest.mark.asyncio
+    async def test_migration_rejects_invalid_base_url(self, monkeypatch):
+        from open_notebook.exceptions import InvalidInputError
+
+        monkeypatch.setattr(
+            credentials_service,
+            "check_env_configured",
+            lambda provider: provider == "siliconflow",
+        )
+        monkeypatch.setattr(credentials_service, "require_encryption_key", lambda: None)
+        monkeypatch.setenv("SILICONFLOW_API_KEY", "sf-key")
+        monkeypatch.setenv("SILICONFLOW_BASE_URL", "http://169.254.169.254/latest")
+
+        async def fake_validate(url, provider):
+            raise InvalidInputError("link-local address not allowed")
+
+        saved = []
+        monkeypatch.setattr(credentials_service, "validate_url", fake_validate)
+        monkeypatch.setattr(
+            credentials_service.Credential,
+            "get_by_provider",
+            AsyncMock(return_value=[]),
+        )
+
+        async def fake_save(self):
+            saved.append(self)
+
+        monkeypatch.setattr(credentials_service.Credential, "save", fake_save)
+
+        result = await credentials_service.migrate_from_env()
+
+        assert saved == []
+        assert "siliconflow" not in result["migrated"]
+        assert any(e.startswith("siliconflow:") for e in result["errors"])
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index eb4d303e..692a38c0 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -25,6 +25,10 @@ def make_fake_client(handler):
     """Build a fake httpx.AsyncClient class whose .get() delegates to handler."""
 
     class FakeAsyncClient:
+        def __init__(self, *args, **kwargs):
+            # Accept httpx.AsyncClient kwargs (e.g. verify=...)
+            pass
+
         async def __aenter__(self):
             return self
 
@@ -55,6 +59,8 @@ class TestOpenAICompatTable:
             "dashscope",
             "minimax",
             "novita",
+            "siliconflow",
+            "zai",
             "ppq",
         }
 
@@ -78,6 +84,8 @@ class TestOpenAICompatTable:
             "dashscope",
             "minimax",
             "novita",
+            "siliconflow",
+            "zai",
             "ppq",
             "cohere",
             "azure",

From 02870a71425aa1207037b0b5ba48c6c4272757dc Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 23:19:28 -0300
Subject: [PATCH 331/345] feat(providers): MiniMax text-to-speech and
 MiniMax-M3 (#1444)

* feat(providers): MiniMax text-to-speech and MiniMax-M3

esperanto 2.27 added native MiniMax TTS (/v1/t2a_v2) and moved MiniMax to
MiniMax-M3. MiniMax credentials now include text_to_speech, the connection
test and model preferences use MiniMax-M3, and model discovery seeds the TTS
models (speech-2.8-hd / -turbo) on top of the live /models listing, which
doesn't include them. The seed mechanism is shared with OpenRouter
(PROVIDER_AUDIO_SEEDS) for both env- and credential-based discovery, and
only applies when live discovery returned models. speech-* models classify
as text_to_speech. Docs cover voices and the region-specific Base URL.

Closes #1438

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* refactor(discovery): share the audio seed between env and credential discovery

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* feat(providers): declare MINIMAX_BASE_URL as MiniMax's endpoint override

Region-specific MiniMax keys (mainland China: api.minimax.cn) now list models
at the credential's Base URL or MINIMAX_BASE_URL (ADR-012).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  1 +
 README.md                                     |  2 +-
 api/credentials_service.py                    | 18 ++--
 api/routers/models.py                         |  2 +-
 docs/5-CONFIGURATION/ai-providers.md          | 20 +++--
 docs/5-CONFIGURATION/environment-reference.md |  1 +
 open_notebook/ai/model_discovery.py           | 75 +++++++++++-----
 open_notebook/ai/provider_registry.py         |  7 +-
 tests/test_credentials_api.py                 | 85 +++++++++++++++++++
 tests/test_model_discovery.py                 | 47 ++++++++++
 10 files changed, 218 insertions(+), 40 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 162af909..f4d99686 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - **OpenDocument uploads and YouTube unblocking options.** `.odt`, `.ods` and `.odp` files (and `.htm`) can be uploaded as sources (content-core 2.2). New content-core settings are documented: `CCORE_YOUTUBE_PROXY` and `CCORE_YOUTUBE_COOKIES_FILE` get YouTube transcripts through when YouTube blocks the server's IP, and `CCORE_AUDIO_SEGMENT_MINUTES` controls how long audio is split for transcription (#1439)
 - **SiliconFlow and Z.ai providers.** Both are available in Manage → Models with credential setup, connection test and model discovery (language models). SiliconFlow serves hosted DeepSeek, Qwen, GLM and Kimi models; mainland China accounts set the credential's Base URL to `https://api.siliconflow.cn/v1`. Z.ai serves the GLM family. Model discovery honors their Base URL override (from the credential or `SILICONFLOW_BASE_URL` / `ZAI_BASE_URL`), as it already did for OpenAI (#1409, #1437)
+- **MiniMax text-to-speech.** MiniMax credentials now offer text-to-speech, and Discover Models lists `speech-2.8-hd` and `speech-2.8-turbo`, so MiniMax voices can be used in podcast speaker profiles. The connection test and model suggestions move to `MiniMax-M3` (1M-token context) (#1438)
 - **New "Quiet Green" design foundation** — the first of three PRs applying the visual identity co-designed with the community in Discussion #1202. The design token system lands in `globals.css` (core palette, neutral reading surfaces, ink ramp, hairline borders, content-type hues, evidence/citation classes, context-state colors, a squared 4–6px radius scale and a near-flat shadow scale where popovers own the only real shadow); fonts move from Inter to Bricolage Grotesque (display) + Instrument Sans (UI) + Spline Sans Mono (data) via `next/font`; the shadcn primitives are restyled to the foundation's rules (fern green primary actions, red reserved exclusively for destructive/error, clay for warnings, teal as the AI/system voice, underline tabs, quiet neutral badges, teal focus ring); and hard-coded palette colors across 38 components were swept into the semantic tokens, which re-resolve automatically per theme. A dev-only living styleguide at `/dev/design` (404 in production) renders every token and primitive in both themes and serves as the review reference for the follow-up screen-by-screen PRs. Purely visual — no behavior, navigation or i18n changes
 - **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
 
diff --git a/README.md b/README.md
index ba8ecb74..fafc49bf 100644
--- a/README.md
+++ b/README.md
@@ -241,7 +241,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | xAI          | ✅          | ❌               | ❌             | ✅             |
 | OpenRouter   | ✅          | ✅               | ✅             | ✅             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
-| MiniMax      | ✅          | ❌               | ❌             | ❌             |
+| MiniMax      | ✅          | ❌               | ❌             | ✅             |
 | Novita       | ✅          | ❌               | ❌             | ❌             |
 | SiliconFlow  | ✅          | ❌               | ❌             | ❌             |
 | Z.ai         | ✅          | ❌               | ❌             | ❌             |
diff --git a/api/credentials_service.py b/api/credentials_service.py
index 55aaaf57..250bfe03 100644
--- a/api/credentials_service.py
+++ b/api/credentials_service.py
@@ -18,7 +18,7 @@ from api.models import CredentialResponse, validate_url_key_provider_required_fi
 from open_notebook.ai.connection_tester import normalize_anthropic_compatible_base_url
 from open_notebook.ai.model_discovery import (
     ANTHROPIC_FALLBACK_MODELS,
-    OPENROUTER_AUDIO_MODELS,
+    audio_seed,
     classify_model_type,
     fetch_anthropic_model_ids,
 )
@@ -734,15 +734,15 @@ async def discover_with_config(provider: str, config: dict) -> List[dict]:
                 for m in data.get("data", [])
                 if m.get("id")
             ]
-            # OpenRouter's /models listing does not reliably surface its TTS/STT
-            # catalog, so seed the audio model ids esperanto ships as defaults.
-            if provider == "openrouter":
+            # Some /models listings (OpenRouter, MiniMax) don't surface their
+            # TTS/STT catalog, so seed the audio model ids esperanto supports
+            # (only on top of a successful listing).
+            if discovered:
                 seen = {m["name"] for m in discovered}
-                for names in OPENROUTER_AUDIO_MODELS.values():
-                    for name in names:
-                        if name not in seen:
-                            discovered.append({"name": name, "provider": provider})
-                            seen.add(name)
+                for name, _model_type in audio_seed(provider):
+                    if name not in seen:
+                        discovered.append({"name": name, "provider": provider})
+                        seen.add(name)
             return discovered
     except Exception as e:
         logger.warning(f"Failed to discover {provider} models: {e}")
diff --git a/api/routers/models.py b/api/routers/models.py
index ef123234..782a2dd0 100644
--- a/api/routers/models.py
+++ b/api/routers/models.py
@@ -112,7 +112,7 @@ MODEL_PREFERENCES = {
     "mistral": ["mistral-large", "mixtral"],
     "groq": ["llama-3.3", "llama-3.1", "mixtral"],
     "dashscope": ["qwen-max", "qwen-plus", "qwen-turbo"],
-    "minimax": ["MiniMax-M2.5", "MiniMax-M2.5-highspeed"],
+    "minimax": ["MiniMax-M3", "MiniMax-M2.5", "MiniMax-M2.5-highspeed"],
 }
 
 
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index eb8ff507..58adf077 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -325,20 +325,28 @@ Heavy use: Depends on models chosen
 6. Click **Discover Models** → **Register Models**
 
 **Available Models:**
-- `MiniMax-M2.5` — Most capable, 204K context
-- `MiniMax-M2.5-highspeed` — Faster variant, 204K context
+- Language: `MiniMax-M3` (1M-token context), `MiniMax-M2.5` and `MiniMax-M2.5-highspeed` (204K)
+- Text-to-speech: `speech-2.8-hd` (quality) and `speech-2.8-turbo` (faster). Discover Models lists both
 
 **Recommended:**
-- For quality: `MiniMax-M2.5` (best overall)
-- For speed: `MiniMax-M2.5-highspeed` (faster responses)
+- Chat and transformations: `MiniMax-M3`
+- Podcasts: `speech-2.8-hd` as the speaker profile's voice model
+
+**Text-to-speech voices:**
+In a speaker profile, set the **Voice ID** to a MiniMax voice id, for example `English_Graceful_Lady`. System voices, and voices you cloned or generated in your MiniMax account, all work. The ids are listed in the MiniMax platform's voice library.
+
+**Region:**
+MiniMax API keys are region-specific. Mainland China keys need the credential's **Base URL** set to `https://api.minimax.cn/v1`. The default is the international `https://api.minimax.io/v1`, and the same Base URL is used for chat and text-to-speech. Env-based setups use `MINIMAX_BASE_URL` (migrated into the credential's Base URL).
 
 **Advantages:**
-- Very long context (204K tokens)
+- Very long context (1M tokens on M3)
+- Chat and podcast voices from one key
 - Competitive pricing
 
 **Troubleshooting:**
-- "Invalid API key" → Check the key in the MiniMax platform
+- "Invalid API key" → Check the key in the MiniMax platform, and that its region matches the Base URL
 - "Model not available" → Re-discover models from the credential
+- Podcast fails with a voice error → Check the speaker's Voice ID against your account's voices
 
 ---
 
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 1120bcc7..a8bfcd0e 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -339,6 +339,7 @@ If you have these variables configured from a previous installation, click the *
 | `OPENAI_COMPATIBLE_API_KEY_TTS` | OpenAI-Compatible | Configure per-service key in credential |
 | `DASHSCOPE_API_KEY` | DashScope (Qwen) | Manage → Models → Add DashScope Credential |
 | `MINIMAX_API_KEY` | MiniMax | Manage → Models → Add MiniMax Credential |
+| `MINIMAX_BASE_URL` | MiniMax | Endpoint override (`https://api.minimax.cn/v1` for mainland China keys); copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
 | `NOVITA_API_KEY` | Novita | Manage → Models → Add Novita Credential |
 | `SILICONFLOW_API_KEY` | SiliconFlow | Manage → Models → Add SiliconFlow Credential |
 | `SILICONFLOW_BASE_URL` | SiliconFlow | Endpoint override for env-based setup (`https://api.siliconflow.cn/v1` for mainland China accounts); copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
diff --git a/open_notebook/ai/model_discovery.py b/open_notebook/ai/model_discovery.py
index 0bf7f737..462d4b12 100644
--- a/open_notebook/ai/model_discovery.py
+++ b/open_notebook/ai/model_discovery.py
@@ -171,6 +171,7 @@ SILICONFLOW_MODEL_TYPES = {
 }
 
 MINIMAX_MODEL_TYPES = {
+    "text_to_speech": ["speech-"],
     "language": ["minimax", "abab"],
 }
 
@@ -193,6 +194,18 @@ OPENROUTER_AUDIO_MODELS: Dict[str, List[str]] = {
     "speech_to_text": ["openai/whisper-1", "openai/whisper-large-v3"],
 }
 
+# MiniMax TTS (esperanto 2.27, native /v1/t2a_v2) is not listed by its /models
+# endpoint either; seed the speech models esperanto supports, newest first.
+MINIMAX_AUDIO_MODELS: Dict[str, List[str]] = {
+    "text_to_speech": ["speech-2.8-hd", "speech-2.8-turbo"],
+}
+
+# Providers whose live /models listing needs a static audio seed on top.
+PROVIDER_AUDIO_SEEDS: Dict[str, Dict[str, List[str]]] = {
+    "openrouter": OPENROUTER_AUDIO_MODELS,
+    "minimax": MINIMAX_AUDIO_MODELS,
+}
+
 
 def classify_model_type(model_name: str, provider: str) -> str:
     """
@@ -365,7 +378,6 @@ discover_mistral_models = _make_openai_compat_discoverer("mistral")
 discover_deepseek_models = _make_openai_compat_discoverer("deepseek")
 discover_xai_models = _make_openai_compat_discoverer("xai")
 discover_dashscope_models = _make_openai_compat_discoverer("dashscope")
-discover_minimax_models = _make_openai_compat_discoverer("minimax")
 discover_novita_models = _make_openai_compat_discoverer("novita")
 discover_siliconflow_models = _make_openai_compat_discoverer("siliconflow")
 discover_zai_models = _make_openai_compat_discoverer("zai")
@@ -517,6 +529,41 @@ async def discover_ollama_models() -> List[DiscoveredModel]:
     return models
 
 
+def audio_seed(provider: str) -> List[Tuple[str, str]]:
+    """The provider's static audio models as (name, model_type) pairs.
+
+    Shared by env-based and credential-based discovery so both seed the same
+    models.
+    """
+    return [
+        (name, model_type)
+        for model_type, names in PROVIDER_AUDIO_SEEDS.get(provider, {}).items()
+        for name in names
+    ]
+
+
+def _with_audio_seed(
+    provider: str, models: List[DiscoveredModel]
+) -> List[DiscoveredModel]:
+    """Append the provider's static audio seed to a live discovery result.
+
+    Only seeds when live discovery actually returned something. An empty result
+    means the /models call failed (invalid key, HTTP error, network) — seeding
+    on top of a failed discovery would make it look successful and
+    auto-register unusable audio models during sync.
+    """
+    if not models:
+        return models
+
+    seen = {(m.name, m.model_type) for m in models}
+    for name, model_type in audio_seed(provider):
+        if (name, model_type) not in seen:
+            models.append(
+                DiscoveredModel(name=name, provider=provider, model_type=model_type)
+            )
+    return models
+
+
 async def discover_openrouter_models() -> List[DiscoveredModel]:
     """Discover OpenRouter models (language/embedding + a static audio seed).
 
@@ -524,30 +571,16 @@ async def discover_openrouter_models() -> List[DiscoveredModel]:
     embedding) models but does not reliably surface its TTS/STT catalog, so we
     combine live API discovery with a small static seed of the audio model ids
     esperanto ships as defaults (see OPENROUTER_AUDIO_MODELS). Returns [] when
-    live discovery yields nothing (missing key, HTTP/network error), so the
-    audio seed is never registered on top of a failed discovery.
+    live discovery yields nothing (missing key, HTTP/network error).
     """
     models = await discover_openai_compatible_provider("openrouter")
+    return _with_audio_seed("openrouter", models)
 
-    # Only seed the static audio models when live discovery actually returned
-    # something. An empty result means the /models call failed (invalid key,
-    # HTTP error, network) — seeding on top of a failed discovery would make it
-    # look successful and auto-register unusable audio models during sync.
-    if not models:
-        return models
 
-    seen = {(m.name, m.model_type) for m in models}
-    for model_type, names in OPENROUTER_AUDIO_MODELS.items():
-        for name in names:
-            if (name, model_type) not in seen:
-                models.append(
-                    DiscoveredModel(
-                        name=name,
-                        provider="openrouter",
-                        model_type=model_type,
-                    )
-                )
-    return models
+async def discover_minimax_models() -> List[DiscoveredModel]:
+    """Discover MiniMax language models plus its TTS models (static seed)."""
+    models = await discover_openai_compatible_provider("minimax")
+    return _with_audio_seed("minimax", models)
 
 
 async def discover_voyage_models() -> List[DiscoveredModel]:
diff --git a/open_notebook/ai/provider_registry.py b/open_notebook/ai/provider_registry.py
index 87ea82d7..ac295a5e 100644
--- a/open_notebook/ai/provider_registry.py
+++ b/open_notebook/ai/provider_registry.py
@@ -161,9 +161,12 @@ _PROVIDER_SPECS: Tuple[ProviderSpec, ...] = (
     ProviderSpec(
         name="minimax",
         display_name="MiniMax",
-        modalities=_LANGUAGE_ONLY,
+        modalities=("language", "text_to_speech"),
         required_env=("MINIMAX_API_KEY",),
-        test_model="MiniMax-M2.5",
+        # Keys are region-specific; mainland China uses https://api.minimax.cn/v1
+        # (esperanto reads MINIMAX_BASE_URL for both chat and TTS).
+        optional_env=("MINIMAX_BASE_URL",),
+        test_model="MiniMax-M3",
         docs_url="https://platform.minimaxi.com/document/Guides",
         openai_compat_discovery_url="https://api.minimax.io/v1/models",
     ),
diff --git a/tests/test_credentials_api.py b/tests/test_credentials_api.py
index 47021ff4..f58c9dad 100644
--- a/tests/test_credentials_api.py
+++ b/tests/test_credentials_api.py
@@ -946,3 +946,88 @@ class TestEndpointOverrideProvisioningAndMigration:
         assert saved == []
         assert "siliconflow" not in result["migrated"]
         assert any(e.startswith("siliconflow:") for e in result["errors"])
+
+
+class TestMiniMaxCredentialDiscovery:
+    """Credential-based MiniMax discovery seeds its TTS models (#1438)."""
+
+    @pytest.mark.asyncio
+    async def test_seeds_tts_models(self, monkeypatch):
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "MiniMax-M3"}]},
+                    request=httpx.Request("GET", url, headers=headers or {}),
+                )
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+
+        models = await credentials_service.discover_with_config(
+            "minimax", {"api_key": "mm-test"}
+        )
+
+        # Pinned independently of the seed constant.
+        assert [m["name"] for m in models] == [
+            "MiniMax-M3",
+            "speech-2.8-hd",
+            "speech-2.8-turbo",
+        ]
+
+
+class TestMiniMaxRegionalBaseUrl:
+    """MiniMax declares MINIMAX_BASE_URL (ADR-012): mainland-China keys list
+    their models at the regional endpoint (#1438)."""
+
+    def test_registry_declares_override(self):
+        from open_notebook.ai.provider_registry import PROVIDERS
+
+        assert PROVIDERS["minimax"].base_url_env == "MINIMAX_BASE_URL"
+
+    @pytest.mark.asyncio
+    async def test_credential_discovery_honors_base_url(self, monkeypatch):
+        from open_notebook.utils.url_validation import PinnedHttpTarget
+
+        requested = []
+
+        class FakeAsyncClient:
+            def __init__(self, *args, **kwargs):
+                pass
+
+            async def __aenter__(self):
+                return self
+
+            async def __aexit__(self, exc_type, exc, tb):
+                return None
+
+            async def get(self, url, headers=None, timeout=None, extensions=None):
+                requested.append(url)
+                return httpx.Response(
+                    200,
+                    json={"data": [{"id": "MiniMax-M3"}]},
+                    request=httpx.Request("GET", url),
+                )
+
+        async def fake_prepare_pinned(url, provider):
+            return PinnedHttpTarget(url=url)
+
+        monkeypatch.setattr(credentials_service.httpx, "AsyncClient", FakeAsyncClient)
+        monkeypatch.setattr(
+            credentials_service, "prepare_pinned_http_target", fake_prepare_pinned
+        )
+
+        models = await credentials_service.discover_with_config(
+            "minimax", {"api_key": "k", "base_url": "https://api.minimax.cn/v1"}
+        )
+
+        assert requested == ["https://api.minimax.cn/v1/models"]
+        assert "speech-2.8-hd" in [m["name"] for m in models]
diff --git a/tests/test_model_discovery.py b/tests/test_model_discovery.py
index 692a38c0..f7f75f1e 100644
--- a/tests/test_model_discovery.py
+++ b/tests/test_model_discovery.py
@@ -12,10 +12,12 @@ import pytest
 from open_notebook.ai import model_discovery
 from open_notebook.ai.model_discovery import (
     ANTHROPIC_FALLBACK_MODELS,
+    MINIMAX_AUDIO_MODELS,
     OPENAI_COMPAT_PROVIDERS,
     OPENROUTER_AUDIO_MODELS,
     PROVIDER_DISCOVERY_FUNCTIONS,
     discover_anthropic_models,
+    discover_minimax_models,
     discover_openai_compatible_provider,
     discover_openrouter_models,
 )
@@ -234,6 +236,51 @@ class TestOpenRouterDiscovery:
         assert all(m.provider == "openrouter" for m in models)
 
 
+class TestMiniMaxDiscovery:
+    """MiniMax TTS (esperanto 2.27) is seeded on top of live discovery (#1438)."""
+
+    @pytest.mark.asyncio
+    async def test_missing_key_returns_empty(self, monkeypatch):
+        monkeypatch.delenv("MINIMAX_API_KEY", raising=False)
+        assert await discover_minimax_models() == []
+
+    @pytest.mark.asyncio
+    async def test_seeds_tts_models_alongside_language_models(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(url, {"data": [{"id": "MiniMax-M3"}]})
+
+        monkeypatch.setenv("MINIMAX_API_KEY", "mm-test")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        models = await discover_minimax_models()
+        by_type = {(m.name, m.model_type) for m in models}
+
+        assert ("MiniMax-M3", "language") in by_type
+        for name in MINIMAX_AUDIO_MODELS["text_to_speech"]:
+            assert (name, "text_to_speech") in by_type
+        assert all(m.provider == "minimax" for m in models)
+
+    @pytest.mark.asyncio
+    async def test_failed_discovery_seeds_nothing(self, monkeypatch):
+        def handler(url, headers, params, timeout):
+            return json_response(url, {"error": "unauthorized"}, status_code=401)
+
+        monkeypatch.setenv("MINIMAX_API_KEY", "bad")
+        monkeypatch.setattr(
+            model_discovery.httpx, "AsyncClient", make_fake_client(handler)
+        )
+
+        assert await discover_minimax_models() == []
+
+    def test_speech_models_classify_as_tts(self):
+        from open_notebook.ai.model_discovery import classify_model_type
+
+        assert classify_model_type("speech-2.8-hd", "minimax") == "text_to_speech"
+        assert classify_model_type("MiniMax-M3", "minimax") == "language"
+
+
 class TestAnthropicDiscovery:
     @pytest.mark.asyncio
     async def test_missing_key_returns_empty(self, monkeypatch):

From 2c620647ea863d48efb550a09c825f4a297ff45f Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sat, 3 Oct 2026 23:19:53 -0300
Subject: [PATCH 332/345] feat(podcasts): adopt podcast-creator 0.13.1 (#1446)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* feat(podcasts): adopt podcast-creator 0.13.1

podcast-creator 0.13 requests schema-validated JSON for outlines and
transcripts, raises the default output budget to 8192 tokens for both, and
adds a ~400 ms pause between turns; 0.13.1 falls back to plain JSON when an
endpoint rejects json_schema (lfnovo/podcast-creator#51).

- Floor raised to podcast-creator>=0.13.1.
- The episode profile's Max output tokens help no longer claims 3000/5000
  defaults (all 14 locales); docs cover the 8192 default, when to lower it,
  the turn pause and the JSON fallback.
- Tests render our shadowed prompts/podcast templates with the variables
  0.13 passes, and check they are ours (not the bundled ones).

Closes #1435

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(i18n): translate the full max tokens guidance in every locale

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(i18n): use Gesprächsrunde for 'turn' in the German max tokens help

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                               |  1 +
 docs/2-CORE-CONCEPTS/podcasts-explained.md |  1 +
 docs/3-USER-GUIDE/creating-podcasts.md     | 10 +++-
 frontend/src/lib/locales/bn-IN/index.ts    |  2 +-
 frontend/src/lib/locales/ca-ES/index.ts    |  2 +-
 frontend/src/lib/locales/de-DE/index.ts    |  2 +-
 frontend/src/lib/locales/en-US/index.ts    |  2 +-
 frontend/src/lib/locales/es-ES/index.ts    |  2 +-
 frontend/src/lib/locales/fr-FR/index.ts    |  2 +-
 frontend/src/lib/locales/it-IT/index.ts    |  2 +-
 frontend/src/lib/locales/ja-JP/index.ts    |  2 +-
 frontend/src/lib/locales/pl-PL/index.ts    |  2 +-
 frontend/src/lib/locales/pt-BR/index.ts    |  2 +-
 frontend/src/lib/locales/ru-RU/index.ts    |  2 +-
 frontend/src/lib/locales/tr-TR/index.ts    |  2 +-
 frontend/src/lib/locales/zh-CN/index.ts    |  2 +-
 frontend/src/lib/locales/zh-TW/index.ts    |  2 +-
 pyproject.toml                             |  2 +-
 tests/test_podcast_templates.py            | 63 ++++++++++++++++++++++
 uv.lock                                    |  8 +--
 20 files changed, 93 insertions(+), 20 deletions(-)
 create mode 100644 tests/test_podcast_templates.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f4d99686..3b55b962 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Screen-by-screen reskin in the "Quiet Green" language** (the second redesign PR): the app shell gets the recomposed tri-hue pebble wordmark (fern/gold/teal — no red left), a fern spine on the active nav item and destination-hued nav icons; the notebook workspace gets display-type titles, panel headers with identity ticks (sources sage / notes gold / chat teal), one-line source-card metadata with the overflow menu at top-right, and de-washed chat bubbles (the AI speaks in teal accents, never washed backgrounds); the notebooks home separates compact recently-viewed rows from active-notebook cards; the sources table gets the library treatment (content-type pebbles, quiet embedded pills, hover that raises the surface); dialogs and the source viewer are flattened (no card-in-card boxes, uniform breathing room, no ⋮/close collision); and Models/Settings/Podcasts/Transformations/Ask-Search get the badge diet, quiet audio-player containers, mono for data and teal AI accents. Still purely visual — no behavior, columns, navigation or i18n changes
 
 ### Changed
+- **Podcasts on podcast-creator 0.13.** Outlines and transcripts are requested as schema-validated JSON, with an automatic fallback to plain JSON for endpoints that don't support JSON schema (0.13.1). The default output budget is now 8192 tokens for the outline and the transcript (was 3000 / 5000); set an episode profile's Max output tokens lower for models with a smaller limit. Episodes now have a ~400 ms pause between speaker turns, and audio combining no longer cuts the end of a turn (#1435)
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 - Python code is now formatted with `ruff format` across the repository, and CI fails when it isn't (`ruff format --check .` in the Backend Lint job). Formatting-only change (59 files); run `uv run ruff format .` before pushing
diff --git a/docs/2-CORE-CONCEPTS/podcasts-explained.md b/docs/2-CORE-CONCEPTS/podcasts-explained.md
index d023d286..fe427579 100644
--- a/docs/2-CORE-CONCEPTS/podcasts-explained.md
+++ b/docs/2-CORE-CONCEPTS/podcasts-explained.md
@@ -184,6 +184,7 @@ When podcast generation fails (e.g., wrong model configured, API key expired, pr
 | Invalid API key | Check Settings -> Credentials for the TTS and language model providers |
 | Model not found | Verify the model exists in the model registry and has valid credentials configured |
 | Rate limit exceeded | Wait a few minutes and retry |
+| Output limit / `max_tokens` too large | Set the episode profile's Max output tokens below the model's limit (the default is 8192) |
 | Provider unavailable | Check provider status page; retry later |
 
 ---
diff --git a/docs/3-USER-GUIDE/creating-podcasts.md b/docs/3-USER-GUIDE/creating-podcasts.md
index dbb312a4..dab0c294 100644
--- a/docs/3-USER-GUIDE/creating-podcasts.md
+++ b/docs/3-USER-GUIDE/creating-podcasts.md
@@ -133,6 +133,10 @@ How to set:
 4. System uses your profile for outline generation
 ```
 
+**Max output tokens:** leave it blank to use the default of 8192 tokens for the outline and for each transcript generation step. Set it lower if your outline or transcript model has a smaller output limit (some older or local models stop at 4096); the provider rejects requests above its limit.
+
+**Pacing:** generated episodes have a short pause (about 400 ms) between speaker turns, so the dialogue sounds less rushed.
+
 ### Step 5: Create or Select Speakers
 
 Speakers are the "voice" of your podcast.
@@ -481,9 +485,13 @@ Rule: 3-5 sources per podcast
 2. Try again (might be temporary issue)
 3. Use local TTS (doesn't need internet)
 4. Reduce source count (less to process)
-5. Contact support if persistent
+5. "max_tokens" or output-limit error: set the episode profile's
+   Max output tokens below your model's limit (e.g. 4096)
+6. Contact support if persistent
 ```
 
+Outlines and transcripts are requested as schema-validated JSON. Models or endpoints that don't support JSON schema output (some OpenAI-compatible servers) automatically fall back to plain JSON mode; the worker log notes the fallback.
+
 ---
 
 ## Advanced: Multiple Podcasts from Same Research
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index 51fcc970..fd24fe3b 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -678,7 +678,7 @@ export const bnIN = {
     segments: "সেগমেন্ট",
     maxTokens: "সর্বাধিক আউটপুট টোকেন",
     maxTokensPlaceholder: "ডিফল্টের জন্য ফাঁকা রাখুন",
-    maxTokensHelp: "ঐচ্ছিক। প্রতিটি জেনারেশন ধাপ — আউটলাইন এবং সম্পূর্ণ ট্রান্সক্রিপ্ট — কত টোকেন তৈরি করতে পারে তার সীমা নির্ধারণ করে; এটি প্রতি-সংলাপ বা প্রতি-কথোপকথন সীমা নয়। বিল্ট-ইন ডিফল্ট ব্যবহার করতে ফাঁকা রাখুন (আউটলাইনের জন্য 3000, ট্রান্সক্রিপ্টের জন্য 5000)। দীর্ঘ পর্বের জন্য এটি বাড়ান; খুব কম মান ট্রান্সক্রিপ্টকে অসম্পূর্ণ রেখে দিতে পারে।",
+    maxTokensHelp: "ঐচ্ছিক। প্রতিটি জেনারেশন ধাপ — আউটলাইন ও পূর্ণ ট্রান্সক্রিপ্ট — কতগুলো টোকেন তৈরি করতে পারবে তার সীমা; এটি প্রতি সংলাপ বা পুরো কথোপকথনের সীমা নয়। ডিফল্ট (দুটির জন্যই 8192) ব্যবহার করতে ফাঁকা রাখুন। যে মডেলের আউটপুট সীমা 8192-এর কম, তার জন্য মান কমান; খুব কম মান ট্রান্সক্রিপ্ট কেটে দিতে পারে।",
     defaultBriefingTitle: "ডিফল্ট ব্রিফিং",
     created: "{{time}} এ তৈরি",
     details: "বিবরণ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index 4585eaf4..ef477c80 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -678,7 +678,7 @@ export const caES = {
     segments: "Segments",
     maxTokens: "Tokens màxims de sortida",
     maxTokensPlaceholder: "Deixa-ho en blanc per als valors per defecte",
-    maxTokensHelp: "Opcional. Limita quants tokens pot generar cada pas de generació — l'esquema i la transcripció completa —, no és un límit per torn ni per conversa. Deixa-ho en blanc per fer servir els valors per defecte integrats (3000 per a l'esquema, 5000 per a la transcripció). Augmenta'l per a episodis més llargs; un valor massa baix pot deixar la transcripció incompleta.",
+    maxTokensHelp: "Opcional. Limita quants tokens pot produir cada pas de generació — l'esquema i la transcripció completa —, no és un límit per torn ni per conversa. Deixa-ho en blanc per utilitzar el valor predeterminat (8192 per a tots dos). Redueix-lo per a models amb un límit de sortida inferior a 8192; un valor massa baix pot tallar la transcripció.",
     defaultBriefingTitle: "Presentació per defecte",
     created: "Creat el {{time}}",
     details: "Detalls",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 1036bf5d..10308415 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -681,7 +681,7 @@ export const deDE = {
     segments: "Segmente",
     maxTokens: "Maximale Ausgabe-Tokens",
     maxTokensPlaceholder: "Für Standardwerte leer lassen",
-    maxTokensHelp: "Optional. Begrenzt, wie viele Tokens jeder Generierungsschritt erzeugen kann — die Gliederung und das vollständige Transkript —, kein Limit pro Gesprächsrunde oder Unterhaltung. Leer lassen, um die eingebauten Standardwerte zu verwenden (3000 für die Gliederung, 5000 für das Transkript). Für längere Episoden erhöhen; ein zu niedriger Wert kann das Transkript abschneiden.",
+    maxTokensHelp: "Optional. Begrenzt, wie viele Tokens jeder Generierungsschritt erzeugen darf — die Gliederung und das vollständige Transkript —, kein Limit pro Gesprächsrunde oder Unterhaltung. Leer lassen, um den Standardwert zu verwenden (8192 für beide). Für Modelle mit einem Ausgabelimit unter 8192 niedriger einstellen; ein zu niedriger Wert kann das Transkript abschneiden.",
     defaultBriefingTitle: "Standard-Briefing",
     created: "Erstellt am {{time}}",
     details: "Details",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index f5eb1ee0..1e65517c 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -676,7 +676,7 @@ export const enUS = {
     segments: "Segments",
     maxTokens: "Max output tokens",
     maxTokensPlaceholder: "Leave blank for defaults",
-    maxTokensHelp: "Optional. Caps how many tokens each generation step can produce — the outline and the full transcript — not a per-turn or conversation limit. Leave blank to use the built-in defaults (3000 for the outline, 5000 for the transcript). Raise it for longer episodes; a value that is too low can cut the transcript short.",
+    maxTokensHelp: "Optional. Caps how many tokens each generation step can produce — the outline and the full transcript — not a per-turn or conversation limit. Leave blank to use the built-in default (8192 for both). Lower it for models whose output limit is below 8192; a value that is too low can cut the transcript short.",
     defaultBriefingTitle: "Default briefing",
     created: "Created at {{time}}",
     details: "Details",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index 3387bf15..a6598fc7 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -678,7 +678,7 @@ export const esES = {
     segments: "Segmentos",
     maxTokens: "Tokens máximos de salida",
     maxTokensPlaceholder: "Déjalo en blanco para usar los valores predeterminados",
-    maxTokensHelp: "Opcional. Limita cuántos tokens puede generar cada paso de generación — el esquema y la transcripción completa —, no es un límite por turno ni por conversación. Déjalo en blanco para usar los valores predeterminados integrados (3000 para el esquema, 5000 para la transcripción). Auméntalo para episodios más largos; un valor demasiado bajo puede cortar la transcripción.",
+    maxTokensHelp: "Opcional. Limita cuántos tokens puede producir cada paso de generación — el esquema y la transcripción completa —, no es un límite por turno ni por conversación. Déjalo en blanco para usar el valor predeterminado (8192 para ambos). Redúcelo para modelos cuyo límite de salida sea inferior a 8192; un valor demasiado bajo puede cortar la transcripción.",
     defaultBriefingTitle: "Briefing predeterminado",
     created: "Creado el {{time}}",
     details: "Detalles",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index 49efb4ed..dffd536c 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -678,7 +678,7 @@ export const frFR = {
     segments: "Segments",
     maxTokens: "Jetons de sortie maximum",
     maxTokensPlaceholder: "Laisser vide pour les valeurs par défaut",
-    maxTokensHelp: "Facultatif. Limite le nombre de jetons que chaque étape de génération peut produire — le plan et la transcription complète —, ce n'est pas une limite par tour de parole ni par conversation. Laisser vide pour utiliser les valeurs par défaut intégrées (3000 pour le plan, 5000 pour la transcription). Augmentez-la pour des épisodes plus longs ; une valeur trop basse peut tronquer la transcription.",
+    maxTokensHelp: "Facultatif. Limite le nombre de tokens que chaque étape de génération peut produire — le plan et la transcription complète —, et non par réplique ou par conversation. Laissez vide pour utiliser la valeur par défaut (8192 pour les deux). Diminuez-la pour les modèles dont la limite de sortie est inférieure à 8192 ; une valeur trop basse peut tronquer la transcription.",
     defaultBriefingTitle: "Briefing par défaut",
     created: "Créé à {{time}}",
     details: "Détails",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index a00b47f2..5d44f6c3 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -678,7 +678,7 @@ export const itIT = {
     segments: "Segmenti",
     maxTokens: "Token massimi di output",
     maxTokensPlaceholder: "Lascia vuoto per i valori predefiniti",
-    maxTokensHelp: "Facoltativo. Limita quanti token può produrre ogni fase di generazione — la scaletta e la trascrizione completa —, non è un limite per singolo turno o per conversazione. Lascia vuoto per usare i valori predefiniti integrati (3000 per la scaletta, 5000 per la trascrizione). Aumentalo per episodi più lunghi; un valore troppo basso può troncare la trascrizione.",
+    maxTokensHelp: "Facoltativo. Limita quanti token può produrre ogni fase di generazione — la scaletta e la trascrizione completa —, non è un limite per battuta o per conversazione. Lascia vuoto per usare il valore predefinito (8192 per entrambi). Riducilo per i modelli con un limite di output inferiore a 8192; un valore troppo basso può troncare la trascrizione.",
     defaultBriefingTitle: "Briefing predefinito",
     created: "Creato il {{time}}",
     details: "Dettagli",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index 01b9c4e6..ddec4bdb 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -678,7 +678,7 @@ export const jaJP = {
     segments: "セグメント",
     maxTokens: "最大出力トークン数",
     maxTokensPlaceholder: "デフォルト値を使う場合は空欄のまま",
-    maxTokensHelp: "任意。各生成ステップ（アウトラインと台本全文）が生成できるトークン数の上限を設定します。発言ごとや会話全体の制限ではありません。空欄にすると組み込みのデフォルト値（アウトラインは3000、台本は5000）が使われます。長いエピソードには値を上げてください。低すぎると台本が途中で切れることがあります。",
+    maxTokensHelp: "任意。各生成ステップ（アウトラインと完全なトランスクリプト）が生成できるトークン数の上限です。発言ごとや会話全体の上限ではありません。空欄にすると既定値（どちらも8192）を使用します。出力上限が8192未満のモデルでは値を下げてください。値が低すぎるとトランスクリプトが途中で切れることがあります。",
     defaultBriefingTitle: "デフォルトブリーフィング",
     created: "{{time}}に作成",
     details: "詳細",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index f9e4e334..96d7a601 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -678,7 +678,7 @@ export const plPL = {
     segments: "Segmenty",
     maxTokens: "Maksymalna liczba tokenów wyjściowych",
     maxTokensPlaceholder: "Pozostaw puste, aby użyć wartości domyślnych",
-    maxTokensHelp: "Opcjonalne. Ogranicza liczbę tokenów, które może wygenerować każdy krok generowania — konspekt i pełny transkrypt —, a nie jest to limit na pojedynczą wypowiedź ani na całą rozmowę. Pozostaw puste, aby użyć wbudowanych wartości domyślnych (3000 dla konspektu, 5000 dla transkryptu). Zwiększ dla dłuższych odcinków; zbyt niska wartość może uciąć transkrypt.",
+    maxTokensHelp: "Opcjonalne. Określa, ile tokenów może wygenerować każdy etap — konspekt i pełna transkrypcja — a nie pojedyncza wypowiedź czy rozmowa. Pozostaw puste, aby użyć wartości domyślnej (8192 dla obu). Zmniejsz ją dla modeli, których limit wyjścia jest niższy niż 8192; zbyt niska wartość może uciąć transkrypcję.",
     defaultBriefingTitle: "Domyślny briefing",
     created: "Utworzono {{time}}",
     details: "Szczegóły",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index 403d4484..a862ddcd 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -678,7 +678,7 @@ export const ptBR = {
     segments: "Segmentos",
     maxTokens: "Máximo de tokens de saída",
     maxTokensPlaceholder: "Deixe em branco para usar os padrões",
-    maxTokensHelp: "Opcional. Limita quantos tokens cada etapa de geração pode produzir — o roteiro e a transcrição completa —, não é um limite por fala nem por conversa. Deixe em branco para usar os padrões integrados (3000 para o roteiro, 5000 para a transcrição). Aumente para episódios mais longos; um valor baixo demais pode cortar a transcrição.",
+    maxTokensHelp: "Opcional. Limita quantos tokens cada etapa de geração pode produzir — o roteiro e a transcrição completa —, não é um limite por fala nem por conversa. Deixe em branco para usar o padrão integrado (8192 para ambos). Reduza o valor para modelos cujo limite de saída seja menor que 8192; um valor baixo demais pode cortar a transcrição.",
     defaultBriefingTitle: "Briefing padrão",
     created: "Criado em {{time}}",
     details: "Detalhes",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index d567327c..724c7381 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -678,7 +678,7 @@ export const ruRU = {
     segments: "Сегменты",
     maxTokens: "Максимум выходных токенов",
     maxTokensPlaceholder: "Оставьте пустым для значений по умолчанию",
-    maxTokensHelp: "Необязательно. Ограничивает, сколько токенов может создать каждый шаг генерации — план и полный сценарий, — это не ограничение на отдельную реплику или на весь разговор. Оставьте пустым, чтобы использовать встроенные значения по умолчанию (3000 для плана, 5000 для сценария). Увеличьте для более длинных выпусков; слишком низкое значение может оборвать сценарий.",
+    maxTokensHelp: "Необязательно. Ограничивает число токенов, которое может создать каждый этап генерации — план и полная расшифровка, — а не одна реплика или весь разговор. Оставьте пустым, чтобы использовать значение по умолчанию (8192 для обоих). Уменьшите его для моделей с лимитом вывода ниже 8192; слишком малое значение может обрезать расшифровку.",
     defaultBriefingTitle: "Брифинг по умолчанию",
     created: "Создано {{time}}",
     details: "Детали",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 517a1da9..48f3166d 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -678,7 +678,7 @@ export const trTR = {
     segments: "Segmentler",
     maxTokens: "Maksimum çıktı token sayısı",
     maxTokensPlaceholder: "Varsayılanlar için boş bırakın",
-    maxTokensHelp: "İsteğe bağlı. Her üretim adımının — taslak ve tam transkript — üretebileceği token sayısını sınırlar; her konuşma sırası veya sohbet başına bir sınır değildir. Yerleşik varsayılanları kullanmak için boş bırakın (taslak için 3000, transkript için 5000). Daha uzun bölümler için artırın; çok düşük bir değer transkripti yarıda kesebilir.",
+    maxTokensHelp: "İsteğe bağlı. Her üretim adımının — taslak ve tam transkript — üretebileceği token sayısını sınırlar; konuşma sırası veya sohbet başına bir sınır değildir. Varsayılanı kullanmak için boş bırakın (ikisi için de 8192). Çıktı sınırı 8192'nin altında olan modeller için düşürün; çok düşük bir değer transkripti kesebilir.",
     defaultBriefingTitle: "Varsayılan brifing",
     created: "{{time}} tarihinde oluşturuldu",
     details: "Ayrıntılar",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index abed9803..b23567c9 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -678,7 +678,7 @@ export const zhCN = {
     segments: "分段数量",
     maxTokens: "最大输出令牌数",
     maxTokensPlaceholder: "留空以使用默认值",
-    maxTokensHelp: "可选。限制每个生成步骤（大纲和完整文稿）可生成的令牌数，而不是每轮对话或整段对话的限制。留空则使用内置默认值（大纲为3000，文稿为5000）。制作较长的节目时可调高；数值过低可能会导致文稿被截断。",
+    maxTokensHelp: "可选。限制每个生成步骤（大纲和完整文稿）可生成的 token 数，而非每轮或整段对话的上限。留空则使用默认值（两者均为 8192）。对于输出上限低于 8192 的模型，请调低该值；数值过低可能会导致文稿被截断。",
     defaultBriefingTitle: "默认简报",
     created: "创建于 {{time}}",
     details: "详情",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 7a169ee7..2b94c0d2 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -678,7 +678,7 @@ export const zhTW = {
     segments: "分段數量",
     maxTokens: "最大輸出權杖數",
     maxTokensPlaceholder: "留空以使用預設值",
-    maxTokensHelp: "選填。限制每個生成步驟（大綱與完整逐字稿）可生成的權杖數，而非每輪對話或整段對話的限制。留空則使用內建預設值（大綱為3000，逐字稿為5000）。製作較長的節目時可調高；數值過低可能會使逐字稿被截斷。",
+    maxTokensHelp: "選填。限制每個生成步驟（大綱與完整逐字稿）可產生的 token 數，而非每輪或整段對話的上限。留空即使用預設值（兩者皆為 8192）。若模型的輸出上限低於 8192，請調低此值；數值過低可能導致逐字稿被截斷。",
     defaultBriefingTitle: "預設簡報",
     created: "建立於 {{time}}",
     details: "詳情",
diff --git a/pyproject.toml b/pyproject.toml
index a16dbc86..07303b11 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -41,7 +41,7 @@ dependencies = [
     "ai-prompter>=0.4,<1",
     "esperanto>=2.28.0,<3",
     "surrealdb>=1.0.4",
-    "podcast-creator>=0.13.0,<1",
+    "podcast-creator>=0.13.1,<1",
     "surreal-commands>=1.3.1,<2",
     "numpy>=2.4.1",
     "pycountry>=26.2.16",
diff --git a/tests/test_podcast_templates.py b/tests/test_podcast_templates.py
new file mode 100644
index 00000000..25e0fd6b
--- /dev/null
+++ b/tests/test_podcast_templates.py
@@ -0,0 +1,63 @@
+"""Our prompts/podcast templates shadow podcast-creator's bundled ones; they
+must keep rendering with the variables podcast-creator 0.13 passes (#1435)."""
+
+from types import SimpleNamespace
+
+import pytest
+
+SPEAKERS = [
+    SimpleNamespace(name="Ana", backstory="host", personality="curious"),
+    SimpleNamespace(name="Bruno", backstory="expert", personality="calm"),
+]
+
+
+@pytest.fixture(autouse=True)
+def _repo_root(monkeypatch):
+    # podcast-creator resolves templates from ./prompts first.
+    from pathlib import Path
+
+    monkeypatch.chdir(Path(__file__).resolve().parent.parent)
+
+
+def test_outline_template_renders():
+    from podcast_creator.core import get_outline_prompter
+
+    text = get_outline_prompter().render(
+        {
+            "briefing": "Explain RAG",
+            "num_segments": 3,
+            "context": "RAG combines retrieval and generation.",
+            "speakers": SPEAKERS,
+            "language": None,
+        }
+    )
+    assert "Explain RAG" in text
+    assert "segments" in text
+    # Ours, not the bundled template: only ours has the <think> output guidance.
+    assert "<think>" in text
+
+
+@pytest.mark.parametrize("speakers", [SPEAKERS, SPEAKERS[:1]])
+def test_transcript_template_renders(speakers):
+    from podcast_creator.core import get_transcript_prompter
+
+    segment = SimpleNamespace(name="Intro", description="What RAG is", size="short")
+    text = get_transcript_prompter().render(
+        {
+            "briefing": "Explain RAG",
+            "outline": SimpleNamespace(segments=[segment]),
+            "context": "RAG combines retrieval and generation.",
+            "segment": segment,
+            "is_final": True,
+            "turns": 3,
+            "speakers": speakers,
+            "speaker_names": [s.name for s in speakers],
+            "transcript": [],
+            "language": None,
+        }
+    )
+    assert "Intro" in text
+    for s in speakers:
+        assert s.name in text
+    # Ours, not the bundled template: only ours handles solo episodes.
+    assert ("SOLO podcast" in text) == (len(speakers) == 1)
diff --git a/uv.lock b/uv.lock
index a0ad3e0d..f1a218c3 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2093,7 +2093,7 @@ requires-dist = [
     { name = "langgraph-checkpoint-sqlite", specifier = ">=3.1.1,<4" },
     { name = "loguru", specifier = ">=0.7.2" },
     { name = "numpy", specifier = ">=2.4.1" },
-    { name = "podcast-creator", specifier = ">=0.13.0,<1" },
+    { name = "podcast-creator", specifier = ">=0.13.1,<1" },
     { name = "pycountry", specifier = ">=26.2.16" },
     { name = "pydantic", specifier = ">=2.9.2" },
     { name = "python-dotenv", specifier = ">=1.2.2" },
@@ -2403,7 +2403,7 @@ wheels = [
 
 [[package]]
 name = "podcast-creator"
-version = "0.13.0"
+version = "0.13.1"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "ai-prompter" },
@@ -2421,9 +2421,9 @@ dependencies = [
     { name = "tenacity" },
     { name = "tiktoken" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/3c/23/e3e5ba947a672cd39dab0b0a726dfd8ce76638bf71d1ffbfc356cb3b9733/podcast_creator-0.13.0.tar.gz", hash = "sha256:d9bab87506d9b42605c6b18f0ab3035ccd1fde744d1736e3cdb3cf5d283296bb", size = 497734, upload-time = "2026-10-04T01:02:24.06Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/28/48/de36682853448f19cae28f7f08d9373cb8e52f25e45091a98ea66f08a682/podcast_creator-0.13.1.tar.gz", hash = "sha256:466efa8a3e29e38d74e906183a89a263adcd85ce3bb03b04c695cde30993b43c", size = 501038, upload-time = "2026-10-04T02:03:31.959Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/21/92/7cfa0b0c7992ea91ee1398d2ebe84a566159219f773402bef600055915c6/podcast_creator-0.13.0-py3-none-any.whl", hash = "sha256:e67d30fa8f4049fa3b4653b009cab6f69a3d5ed5ec551decae0901ab1be5b665", size = 82119, upload-time = "2026-10-04T01:02:22.522Z" },
+    { url = "https://files.pythonhosted.org/packages/77/54/300b27534a32a6479ffa5d414df30ed825fbc86d83b935f25a24b1fb79ad/podcast_creator-0.13.1-py3-none-any.whl", hash = "sha256:481e76da6088c3316815a0ccba64029004fc2d4445daf8217a700c5d40239d1b", size = 83488, upload-time = "2026-10-04T02:03:30.873Z" },
 ]
 
 [[package]]

From 6f565136d0732be9c26e7a003a460d611b56b7e5 Mon Sep 17 00:00:00 2001
From: Yehuda <it.is.yehuda@gmail.com>
Date: Sun, 4 Oct 2026 10:56:36 +0300
Subject: [PATCH 333/345] fix(podcasts): restore the language instruction and
 stop the prompts handing the model a copyable skeleton (#1334)

* fix(podcasts): restore the language instruction and stop the prompts handing the model a copyable skeleton (#1238)

Two independent defects in prompts/podcast/*.jinja, plus the failure hints that
made both of them hard to diagnose. Split out of #1239 at review request; the
voice pre-flight from that PR stays there.

Language
--------
These templates shadow podcast-creator's bundled ones - the library resolves
Path.cwd()/prompts/podcast/<name>.jinja before its own package resources, and
this app configures only profiles - and the app's copies never referenced
`{{ language }}`. The value is plumbed correctly end to end, so an episode
profile set to he-IL produced an English outline and English segment titles:
EpisodeProfile.language looked supported and did nothing.

The bundled block is restored in both templates, and a regression test fails
when a variable the bundled template uses is missing from the app's copy - the
drift that lost it in the first place.

Copyable skeleton
-----------------
Both templates showed a fill-in JSON skeleton (`"speaker": "[Actual Speaker
Name]"`, a bare `...`) inside a ```json fence while also instructing the model
not to use fences. Models returned the skeleton verbatim, which failed
podcast-creator's speaker-name validation and aborted the episode - discarding
the outline and every segment already generated.

The example now carries the episode's real speaker names (serialized with
tojson, so a name containing a quote can't break it) and written-out sample
values, so a verbatim copy is valid output. Placeholders and truncation are
banned explicitly, the contradictory fence and the second copyable example are
gone, and the example is labelled a two-entry excerpt that restates the
required turns/num_segments count so it can't read as a finished answer.

No sample is rendered at all when a language is set: any hard-coded sample is
English, and a copied English line in a Hebrew episode goes straight to TTS.
The structure is stated in prose there, and format_instructions still carries
the schema.

Hints
-----
explain_generation_failure() maps a failure to the hint that fits it. The GPT-5
extended-thinking note was the only one, keyed on `Invalid json output` /
`Expecting value`, so `Invalid speaker name` got nothing and a truncated Gemini
response was advised to switch to gpt-4o. Placeholder speaker names, unusable
voices and truncated output now each get their own explanation.

* fix(podcasts): make the failure hints reachable and scope the not-found one (#1238)

Review follow-ups on this PR.

- The hint mapper never ran for the failures it was written for. `except
  ValueError: raise` sits ahead of the handler that attaches hints, and both
  LangChain's OutputParserException and json.JSONDecodeError are ValueError
  subclasses - so a placeholder speaker name, `Invalid json output` and a
  truncated response all left untouched. That includes the pre-existing GPT-5
  extended-thinking note, which has been dead for exactly the case it
  describes. The ValueError branch now attaches the hint and re-raises a
  ValueError, keeping the command layer's permanent-failure contract intact.
- `Requested entity was not found` no longer claims the voice is at fault.
  Google returns it for any missing resource, including a model id on the
  outline or transcript call, so the hint now names both candidates and says
  which is likelier when audio had already started. The voice-specific hint
  stays keyed on `Voice name ... is not supported`, which does name the voice.
- A solo speaker profile renders a one-entry example; the prose called it a
  two-entry excerpt and told the model to return more than "the two shown".
  Both now follow speakers|length.
- The template drift check counted Jinja's `not` as a variable, so
  `{% if not language %}` would fail the check the moment one template negated
  a test the other didn't.

* chore(podcasts): rebase on main, ruff format, update the truncation hint

- Rebased onto main (CHANGELOG conflict).
- tests/test_podcast_prompt_templates.py formatted with ruff (CI now gates
  ruff format, #1429).
- The truncated-JSON hint quoted podcast-creator's old 5000-token transcript
  cap; since 0.13 (#1446) outline and transcript request up to 8192, so the
  hint now says to set max_tokens to the model's limit when it stops earlier.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(podcasts): keep the JSON contract in English; English keeps the sample

- The language instruction now says the JSON keys (and outline size values,
  transcript speaker names) stay exactly as written, so a non-English run
  can't translate them and fail validation.
- English locales resolve to "English"; they keep the (English) sample.
- The drift check uses jinja2.meta, so variables used only as `for`
  iterables count too.
- Docs: solo transcript excerpts are one-entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(podcasts): the excerpt's entries are reusable, the excerpt is not a full answer

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Yehuda Korotkin <yehuda.korotkin@ness-tech.co.il>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                           |   3 +
 commands/podcast_commands.py           |  77 +++++-
 docs/7-DEVELOPMENT/podcasts.md         |  10 +
 prompts/podcast/outline.jinja          |  43 ++-
 prompts/podcast/transcript.jinja       |  37 ++-
 tests/test_podcast_error_hints.py      | 123 +++++++++
 tests/test_podcast_prompt_templates.py | 356 +++++++++++++++++++++++++
 7 files changed, 601 insertions(+), 48 deletions(-)
 create mode 100644 tests/test_podcast_error_hints.py
 create mode 100644 tests/test_podcast_prompt_templates.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3b55b962..368e1850 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - **Podcasts on podcast-creator 0.13.** Outlines and transcripts are requested as schema-validated JSON, with an automatic fallback to plain JSON for endpoints that don't support JSON schema (0.13.1). The default output budget is now 8192 tokens for the outline and the transcript (was 3000 / 5000); set an episode profile's Max output tokens lower for models with a smaller limit. Episodes now have a ~400 ms pause between speaker turns, and audio combining no longer cuts the end of a turn (#1435)
+- Podcast generation failures now carry a hint that matches the failure: a placeholder/renamed speaker name, a `voice_id` its TTS model doesn't support, and a response that was truncated rather than swallowed by `<think>` tags each get their own explanation. The GPT-5 extended-thinking note used to be the only hint, so the two most common real failures got either nothing or advice about the wrong provider (#1238)
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 - Python code is now formatted with `ruff format` across the repository, and CI fails when it isn't (`ruff format --check .` in the Backend Lint job). Formatting-only change (59 files); run `uv run ruff format .` before pushing
@@ -33,6 +34,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
 - **Failed sources fail once, with a clear reason.** content-core 2.2 raises typed errors instead of returning empty content (unreachable host, page not found, malformed URL, corrupted file, unsupported type, YouTube without a transcript or blocked, misconfigured engine or speech-to-text model). Source processing now turns each into a short, actionable message, kept with the original cause in the worker log, and fails the job on the first attempt instead of retrying it up to 15 times. A blocked YouTube request points to the new `CCORE_YOUTUBE_PROXY` / `CCORE_YOUTUBE_COOKIES_FILE` settings (#1433)
+- **Podcast episode profiles honor their `language` again.** The app's `prompts/podcast/{outline,transcript}.jinja` shadow podcast-creator's bundled templates (the library resolves `Path.cwd()/prompts/podcast/` before its own resources) and had lost the `{{ language }}` block, so a profile set to `he-IL` produced an English outline and English segment titles — the field looked supported and did nothing. A regression test now fails when a variable the bundled template uses is missing from the app's copy (#1238)
+- **A copied prompt placeholder no longer aborts a podcast mid-generation.** Both podcast templates showed the model a fill-in JSON skeleton (`"speaker": "[Actual Speaker Name]"`, a bare `...`) inside a ```json fence while also instructing it not to use fences; models returned the skeleton verbatim, which failed podcast-creator's speaker-name validation and discarded the outline and every segment already generated. The examples now carry the episode's real speaker names and written-out sample values, so a verbatim copy is valid output; placeholders and truncation are banned explicitly; and for a run with a `language` set no sample is shown at all, since the only sample that can be hard-coded is English (#1238)
 - **Ask answers are no longer silently truncated.** The three Ask stages (search strategy, per-search answers, final synthesis) were capped at 2000 output tokens, well below the 8192 that chat and transformations use. Token-dense languages such as Japanese hit the cap mid-sentence, and reasoning models spent the whole budget thinking and returned blank search terms, so Ask answered "no documents found" from a corpus that had the answer. All three stages now share an 8192 budget; a strategy with no usable search terms fails with an explicit error instead of running empty searches, and thinking-only partial answers are dropped before synthesis (#1221)
 - A source embedding job that fails part-way through the batched insert now removes the embeddings it already wrote, so the source is no longer shown as embedded while search only sees part of it (#1390)
 - **Remote Crawl4AI servers that require a bearer token work again.** Crawl4AI Docker ≥ 0.9.0 rejects unauthenticated external connections by default, so pointing `CRAWL4AI_API_URL` at a current instance failed URL processing. content-core is bumped to 2.0.7, which sends `CRAWL4AI_API_TOKEN` as `Authorization: Bearer`; the variable is documented in the environment reference, `.env.example` and `docker-compose.yml`. No behavior change when the token is unset (#1269, lfnovo/content-core#80)
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 290dfe1a..11836d3c 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -43,6 +43,59 @@ def build_episode_output_dir(
     return episode_dir_name, output_dir
 
 
+def explain_generation_failure(error_msg: str) -> Optional[str]:
+    """Map a podcast-generation failure to an actionable hint, or None.
+
+    Ordered most specific first. The GPT-5 extended-thinking hint used to be
+    the only one, so the two most common real failures got either nothing
+    (`Invalid speaker name`) or advice about the wrong provider - a truncated
+    Gemini response was told to switch to gpt-4o (#1238).
+    """
+    if "Invalid speaker name" in error_msg:
+        return (
+            "The transcript model returned a speaker name that is not in the "
+            "speaker profile - usually a placeholder copied from the prompt "
+            'such as "..." rather than an invented person. Speaker names must '
+            "match the profile exactly. Retrying the episode often succeeds, "
+            "since each attempt is a fresh sample."
+        )
+
+    if "Voice name" in error_msg and "not supported" in error_msg:
+        return (
+            "The speaker profile's voice_id is not valid for its TTS model. "
+            "Check the voices in Settings -> Speaker Profiles against the ones "
+            "your voice model provides (the profiles seeded on install use "
+            "OpenAI voice names)."
+        )
+
+    if "Requested entity was not found" in error_msg:
+        return (
+            "Google returns this for any resource it cannot find, without "
+            "naming which one. Two candidates, likeliest first: a speaker "
+            "profile voice_id that its TTS model doesn't provide (the profiles "
+            "seeded on install use OpenAI voice names, which Gemini voice "
+            "models reject with exactly this message), or a model id in the "
+            "episode profile that doesn't exist for its provider. If the "
+            "transcript finished and the failure came during audio, it is the "
+            "voice."
+        )
+
+    if "Invalid json output" in error_msg or "Expecting value" in error_msg:
+        return (
+            "The model's response could not be parsed as JSON. Two common "
+            "causes: (1) the response was truncated - podcast-creator requests "
+            "up to 8192 output tokens per outline or transcript step unless the "
+            "episode profile sets max_tokens; if the model stops earlier (a "
+            "lower output limit, or a token-expensive language), set max_tokens "
+            "to its limit or use fewer and shorter segments; (2) a model using "
+            "extended thinking (e.g. "
+            "GPT-5) put all of its output inside <think> tags, leaving nothing "
+            "to parse - try gpt-4o, gpt-4o-mini or gpt-4-turbo instead."
+        )
+
+    return None
+
+
 class PodcastGenerationInput(CommandInput):
     episode_profile: str
     # Speaker profile record ID or name (the API boundary resolves the
@@ -365,19 +418,27 @@ async def generate_podcast_command(
             processing_time=processing_time,
         )
 
-    except ValueError:
-        raise
+    except ValueError as e:
+        # ValueError is the command layer's "permanent failure, do not retry"
+        # signal (retry config uses stop_on=[ValueError]), so the type has to
+        # survive - but LangChain's OutputParserException and
+        # json.JSONDecodeError are ValueError subclasses too. Every parser
+        # failure therefore left through here, past the hint mapper below:
+        # the placeholder speaker name and the truncated-JSON cases reached
+        # the user with no guidance at all (#1238).
+        hint = explain_generation_failure(str(e))
+        if not hint:
+            raise
+        logger.error(f"Podcast generation failed: {e}")
+        raise ValueError(f"{e}\n\nNOTE: {hint}") from e
 
     except Exception as e:
         logger.error(f"Podcast generation failed: {e}")
         logger.exception(e)
 
         error_msg = str(e)
-        if "Invalid json output" in error_msg or "Expecting value" in error_msg:
-            error_msg += (
-                "\n\nNOTE: This error commonly occurs with GPT-5 models that use extended thinking. "
-                "The model may be putting all output inside <think> tags, leaving nothing to parse. "
-                "Try using gpt-4o, gpt-4o-mini, or gpt-4-turbo instead in your episode profile."
-            )
+        hint = explain_generation_failure(error_msg)
+        if hint:
+            error_msg += f"\n\nNOTE: {hint}"
 
         raise RuntimeError(error_msg) from e
diff --git a/docs/7-DEVELOPMENT/podcasts.md b/docs/7-DEVELOPMENT/podcasts.md
index 67da079e..885fdacb 100644
--- a/docs/7-DEVELOPMENT/podcasts.md
+++ b/docs/7-DEVELOPMENT/podcasts.md
@@ -18,6 +18,16 @@ The legacy string fields (`tts_provider`, `outline_provider`, …) that predated
 
 `PodcastEpisode` stores `episode_profile` and `speaker_profile` as **dicts (snapshots)**, not references. Editing a profile never retroactively changes past episodes — that's intentional. Corollary: deleting a profile does not cascade to episodes.
 
+## Prompt templates shadow podcast-creator's
+
+`prompts/podcast/{outline,transcript}.jinja` are **not** just this app's copies of the library's prompts — they replace them. podcast-creator resolves templates as inline config → `prompts_dir` config → `Path.cwd()/prompts/podcast/<name>.jinja` → its own package resources, and this app configures only profiles, so the working directory wins and the bundled prompts are never read.
+
+Consequences to keep in mind when touching these files:
+
+- Library prompt improvements are invisible here. The `{{ language }}` block was lost exactly this way, which made `EpisodeProfile.language` silently do nothing (#1238). `tests/test_podcast_prompt_templates.py` fails when a variable the bundled template uses is missing from the app's copy.
+- The variables available are whatever `podcast_creator.nodes` passes: the transcript template gets `speaker_names`, the outline template does **not**.
+- Never show the model a fill-in skeleton it can return verbatim. Placeholders (`...`, `[like this]`, `<like this>`) are banned explicitly — a copied `"speaker": "..."` used to abort the whole episode on podcast-creator's speaker-name validation, discarding the segments already generated. The two examples differ: the **transcript** one carries the episode's real speaker names (serialized with `tojson`, so a name containing a quote can't break the example) plus fully written sample dialogue, while the **outline** one has fixed sample segment values — `speaker_names` isn't passed to that template and it has no dialogue. Both are labelled as excerpts (two entries; one for a solo transcript) and restate the required `turns` / `num_segments` count, so each entry's shape is valid to reuse while the excerpt itself can't pass as a complete answer (an outline needs at least three segments). **A sample can only be hard-coded English, so none is rendered when the episode profile sets a non-English `language`** — the structure is stated in prose there, and the schema still reaches the model through `format_instructions`.
+
 ## Job lifecycle and the retry policy
 
 Generation runs as a `generate_podcast_command` job on the surreal-commands worker:
diff --git a/prompts/podcast/outline.jinja b/prompts/podcast/outline.jinja
index 0ae13a7f..9c377174 100644
--- a/prompts/podcast/outline.jinja
+++ b/prompts/podcast/outline.jinja
@@ -25,7 +25,11 @@ The podcast will feature the following speakers:
   Personality: {{ speaker.personality }}
 {% endfor %}
 </speakers>
+{% if language %}
 
+IMPORTANT LANGUAGE INSTRUCTION: You MUST generate ALL content in {{ language }}. This includes segment names, descriptions, and all text in your response. Do not use English unless the content itself contains English terms. The entire output must be written in {{ language }}, except the JSON contract below: keep the keys ("segments", "name", "description", "size") and the "size" values ("short", "medium", "long") exactly as written, in English.
+
+{% endif %}
 Please create an outline based on this briefing. Your outline should consist of {{ num_segments }} main segments for the podcast episode, along with a description of each segment. Follow these guidelines:
 
 1. Read the briefing carefully and identify the main topics and themes.
@@ -37,30 +41,19 @@ Please create an outline based on this briefing. Your outline should consist of
 7. This is a whole podcast so no need to reintroduce speakers or topics on each segment. Segments are just markers for us to know to change the topics, nothing else.
 8. Include an introduction segment at the beginning and a conclusion or wrap-up segment at the end.
 
-Format your outline using the following structure:
+Return exactly one JSON object with a single root key "segments" whose value is a list of exactly {{ num_segments }} entries. Each entry has exactly three keys: "name" and "description" (strings) and "size".
+{% if not language or language|lower == 'english' %}
+The line below is a two-entry EXCERPT showing that structure with sample values - keep the structure, write your own segments from the briefing, and return all {{ num_segments }} of them rather than the two shown:
 
-```json
-{
-    "segments": [
-        {
-            "name": "[Segment Name]",
-            "description": "[Description of the segment content]",
-            "size": "short"
-        },
-        {
-            "name": "[Segment Name]",
-            "description": "[Description of the segment content]",
-            "size": "medium"
-        },
-        {
-            "name": "[Segment Name]",
-            "description": "[Description of the segment content]",
-            "size": "long"
-        },
-    ...
-    ]
-}
-```
+{"segments": [{"name": "Setting the scene", "description": "Introduce the subject and the questions this episode sets out to answer.", "size": "short"}, {"name": "Working through the detail", "description": "Take the main points from the briefing in turn, with the specifics that matter most.", "size": "medium"}]}
+{% endif %}
+
+   - "size" must be exactly one of "short", "medium" or "long".
+{%- if not language or language|lower == 'english' %}
+   - The sample values above show the structure only - write segments drawn from the briefing instead of reusing them.
+{%- endif %}
+   - Never emit placeholder or elided content: no "..." or "…", no "[like this]", no "<like this>", no "TODO", no empty strings, no trailing commas.
+   - Write out all {{ num_segments }} segments in full; never shorten or truncate the list.
 
 Formatting instructions:
 {{ format_instructions}}
@@ -76,8 +69,6 @@ IMPORTANT OUTPUT FORMAT:
 - If you use extended thinking with <think> tags, put ALL your reasoning inside <think></think> tags
 - Put the final JSON output OUTSIDE and AFTER any <think> tags
 - Do NOT wrap the JSON in ```json code blocks - return the raw JSON object only
-- Example correct format:
-  <think>Let me analyze the briefing...</think>
-  {"segments": [...]}
+- Correct format: any reasoning inside <think></think> tags, then the JSON object described above, and nothing else
 
 Please provide your outline now, following the format and guidelines provided above.
diff --git a/prompts/podcast/transcript.jinja b/prompts/podcast/transcript.jinja
index 974b3073..20b20cd6 100644
--- a/prompts/podcast/transcript.jinja
+++ b/prompts/podcast/transcript.jinja
@@ -27,7 +27,11 @@ The podcast features the following speakers:
   Personality: {{ speaker.personality }}
 {% endfor %}
 </speakers>
+{% if language %}
 
+IMPORTANT LANGUAGE INSTRUCTION: You MUST generate ALL dialogue and content in {{ language }}. Every speaker's dialogue must be written entirely in {{ language }}. Do not use English unless quoting specific English terms. The entire transcript must be in {{ language }}, except the JSON contract below: keep the keys ("transcript", "speaker", "dialogue") in English and copy each speaker name exactly as listed.
+
+{% endif %}
 Next, examine the outline produced by our director:
 <outline>
 {{ outline }}
@@ -74,17 +78,24 @@ Follow these format requirements strictly:
 {% endif %}
 
 
-```json
-{
-    "transcript": [
-        {
-            "speaker": "[Actual Speaker Name]",
-            "dialogue": "[Speaker's dialogue based on their personality and expertise]"
-        },
-    ...
-    ]
-}
-```
+Return exactly one JSON object with a single root key "transcript" whose value is a list of at least {{ turns }} entries. Each entry has exactly two keys, "speaker" and "dialogue", both strings.
+{% if not language or language|lower == 'english' %}
+The line below is a {% if speakers|length == 1 %}one-entry{% else %}two-entry{% endif %} EXCERPT showing that structure with sample dialogue - keep the structure, write your own words for this segment, and return at least {{ turns }} entries rather than the {% if speakers|length == 1 %}one{% else %}two{% endif %} shown:
+
+{% if speakers|length == 1 %}
+{"transcript": [{"speaker": {{ speaker_names[0]|tojson }}, "dialogue": "Let's pick up where we left off, because this is where the material really starts to come together."}]}
+{% else %}
+{"transcript": [{"speaker": {{ speaker_names[0]|tojson }}, "dialogue": "Let's pick up where we left off, because this is where the material really starts to come together."}, {"speaker": {{ (speaker_names[1] if speaker_names|length > 1 else speaker_names[0])|tojson }}, "dialogue": "Agreed, and the detail I keep coming back to is the one that changes how you read everything before it."}]}
+{% endif %}
+{% endif %}
+
+   - Every "speaker" value must be copied character-for-character from this list: {{ speaker_names|join(', ') }}
+   - Every "dialogue" value must be the finished words the speaker says out loud; it is sent straight to a text-to-speech engine.
+{%- if not language or language|lower == 'english' %}
+   - The sample dialogue above shows the structure only - write dialogue for this segment instead of reusing it.
+{%- endif %}
+   - Never emit placeholder or elided content: no "..." or "…", no "[like this]", no "<like this>", no "TODO", no empty strings, no trailing commas.
+   - Never shorten or truncate the list. Write out every entry in full.
 
 Formatting instructions:
 {{ format_instructions}}
@@ -119,9 +130,7 @@ IMPORTANT OUTPUT FORMAT:
 - If you use extended thinking with <think> tags, put ALL your reasoning inside <think></think> tags
 - Put the final JSON output OUTSIDE and AFTER any <think> tags
 - Do NOT wrap the JSON in ```json code blocks - return the raw JSON object only
-- Example correct format:
-  <think>Let me plan the dialogue...</think>
-  {"transcript": [...]}
+- Correct format: any reasoning inside <think></think> tags, then the JSON object described above, and nothing else
 
 When you're ready, provide the transcript.
 {% if speakers|length == 1 %}
diff --git a/tests/test_podcast_error_hints.py b/tests/test_podcast_error_hints.py
new file mode 100644
index 00000000..bf398f20
--- /dev/null
+++ b/tests/test_podcast_error_hints.py
@@ -0,0 +1,123 @@
+"""Hints attached to podcast generation failures (#1238).
+
+The GPT-5 extended-thinking hint used to be the only one, keyed on
+`Invalid json output` / `Expecting value`. The two most common real failures
+therefore got either nothing (`Invalid speaker name`) or advice about the wrong
+provider - a truncated Gemini response was told to switch to gpt-4o.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+from langchain_core.exceptions import OutputParserException
+
+from commands.podcast_commands import (
+    PodcastGenerationInput,
+    explain_generation_failure,
+    generate_podcast_command,
+)
+
+
+class TestExplainGenerationFailure:
+    def test_placeholder_speaker_name_is_explained(self):
+        hint = explain_generation_failure(
+            "Failed to parse ValidatedTranscript from completion "
+            '{"transcript": [{"speaker": "...", "dialogue": "..."}]}. Got: '
+            "1 validation error for ValidatedTranscript transcript.0.speaker "
+            "Value error, Invalid speaker name '...'. Must be one of: "
+            "Marcus Thompson, Elena Vasquez"
+        )
+        assert hint is not None
+        assert "speaker" in hint
+        assert "gpt-4o" not in hint
+
+    def test_generic_not_found_names_both_candidates(self):
+        """Google returns this for any missing resource, so the hint must not
+        send someone to the voice settings when the real fault is a model id
+        on the outline or transcript call."""
+        hint = explain_generation_failure(
+            "Google API error: Requested entity was not found."
+        )
+        assert hint is not None
+        assert "voice_id" in hint
+        assert "model id" in hint
+
+    def test_unsupported_voice_name_points_at_the_speaker_profile(self):
+        """This message names the voice, so the hint can be specific."""
+        hint = explain_generation_failure(
+            "Google API error: Voice name echo is not supported. Allowed voice "
+            "names are: achernar, achird, algenib"
+        )
+        assert hint is not None
+        assert "voice_id" in hint
+        assert "Speaker Profiles" in hint
+
+    @pytest.mark.parametrize(
+        "message",
+        [
+            "Invalid json output: {'transcript': [{'speaker'",
+            "Expecting value: line 1 column 1 (char 0)",
+        ],
+    )
+    def test_unparseable_output_mentions_truncation_and_thinking(self, message):
+        hint = explain_generation_failure(message)
+        assert hint is not None
+        assert "max_tokens" in hint
+        assert "<think>" in hint
+
+    def test_unrecognised_failure_gets_no_hint(self):
+        assert explain_generation_failure("Connection reset by peer") is None
+
+
+class TestHintsReachTheUser:
+    """The mapper is only useful if the failure it describes passes through it.
+
+    `except ValueError: raise` guards the command layer's permanent-failure
+    contract, and LangChain's OutputParserException plus json.JSONDecodeError
+    are both ValueError subclasses - so every parser failure, which is exactly
+    what these hints are for, used to skip the mapper entirely.
+    """
+
+    @staticmethod
+    def make_input():
+        return PodcastGenerationInput(
+            episode_profile="Test Episode Profile",
+            episode_name="Test Episode",
+            content="Some content",
+        )
+
+    @pytest.mark.asyncio
+    async def test_parser_failure_keeps_its_type_and_gains_the_hint(self):
+        parse_error = OutputParserException(
+            "Failed to parse ValidatedTranscript from completion "
+            '{"transcript": [{"speaker": "...", "dialogue": "..."}]}. Got: '
+            "Value error, Invalid speaker name '...'."
+        )
+        assert isinstance(parse_error, ValueError)
+
+        with patch(
+            "commands.podcast_commands.EpisodeProfile.get_by_name",
+            AsyncMock(side_effect=parse_error),
+        ):
+            with pytest.raises(ValueError) as exc_info:
+                await generate_podcast_command(self.make_input())
+
+        message = str(exc_info.value)
+        assert "Invalid speaker name" in message
+        assert "NOTE:" in message
+        assert "Speaker names must match the profile exactly" in message
+        # Still a ValueError, so the command layer keeps treating it as
+        # permanent rather than retrying a failure that will repeat.
+        assert not isinstance(exc_info.value, RuntimeError)
+
+    @pytest.mark.asyncio
+    async def test_unrecognised_value_error_is_re_raised_untouched(self):
+        with patch(
+            "commands.podcast_commands.EpisodeProfile.get_by_name",
+            AsyncMock(side_effect=ValueError("Episode profile 'x' not found")),
+        ):
+            with pytest.raises(ValueError) as exc_info:
+                await generate_podcast_command(self.make_input())
+
+        assert str(exc_info.value) == "Episode profile 'x' not found"
+        assert "NOTE:" not in str(exc_info.value)
diff --git a/tests/test_podcast_prompt_templates.py b/tests/test_podcast_prompt_templates.py
new file mode 100644
index 00000000..6e9191a4
--- /dev/null
+++ b/tests/test_podcast_prompt_templates.py
@@ -0,0 +1,356 @@
+"""Regression tests for the app's podcast prompt templates (#1238).
+
+Two defects, neither visible without rendering the templates:
+
+1. The templates showed the model a fill-in JSON skeleton
+   (`"speaker": "[Actual Speaker Name]"` plus a bare `...`) inside a ```json
+   fence, while also instructing it NOT to use fences. Gemini returned the
+   skeleton verbatim - `{"transcript": [{"speaker": "...", "dialogue": "..."}]}`
+   - which failed podcast-creator's speaker-name validation and aborted the
+   episode mid-run, discarding the segments already generated.
+
+2. These templates shadow podcast-creator's bundled ones (the library resolves
+   `Path.cwd()/prompts/podcast/<name>.jinja` before its own package resources)
+   and never referenced `{{ language }}`, so `episode_profile.language` looked
+   supported and did nothing: Hebrew sources produced an English outline.
+
+Variable names follow podcast_creator.nodes, which renders these templates.
+Note the outline template receives `speakers` but NOT `speaker_names`.
+"""
+
+import json
+from pathlib import Path
+
+import pytest
+from jinja2 import Environment, FileSystemLoader
+
+PROMPTS_DIR = Path(__file__).parent.parent / "prompts" / "podcast"
+
+SPEAKERS = [
+    {
+        "name": "Marcus Thompson",
+        "backstory": "Former consultant",
+        "personality": "Strategic",
+    },
+    {
+        "name": "Elena Vasquez",
+        "backstory": "Serial entrepreneur",
+        "personality": "Pragmatic",
+    },
+]
+
+# Strings that must never reach the model: each one is copyable as content.
+# Angle-bracket descriptions count too - a model that copies
+# "<the complete words this speaker says out loud>" into a dialogue value sends
+# that straight to the TTS engine, and the templates' own rules ban placeholders.
+COPYABLE_SKELETONS = (
+    "[Actual Speaker Name]",
+    "[Speaker's dialogue based on their personality and expertise]",
+    "[Segment Name]",
+    "[Description of the segment content]",
+    '{"transcript": [...]}',
+    '{"segments": [...]}',
+    "<the complete words this speaker says out loud, written out in full>",
+    "<the real title of this segment>",
+    "<the real title of the next segment>",
+    "<what is discussed in this segment, including the key points and questions to cover>",
+    "<what is discussed in that segment, including the key points and questions to cover>",
+)
+
+
+def render(template_name: str, **data) -> str:
+    env = Environment(loader=FileSystemLoader(str(PROMPTS_DIR)))
+    return env.get_template(f"{template_name}.jinja").render(**data)
+
+
+def render_transcript(speakers=None, speaker_names=None, **overrides) -> str:
+    speakers = SPEAKERS if speakers is None else speakers
+    data = {
+        "briefing": "A briefing",
+        "context": "Some content",
+        "speakers": speakers,
+        "speaker_names": [s["name"] for s in speakers]
+        if speaker_names is None
+        else speaker_names,
+        "outline": "An outline",
+        "segment": "A segment",
+        "turns": 6,
+        "is_final": False,
+        "transcript": [],
+        "format_instructions": "Return JSON",
+    }
+    data.update(overrides)
+    return render("transcript", **data)
+
+
+def render_outline(**overrides) -> str:
+    data = {
+        "briefing": "A briefing",
+        "context": "Some content",
+        "speakers": SPEAKERS,
+        "num_segments": 6,
+        "format_instructions": "Return JSON",
+    }
+    data.update(overrides)
+    return render("outline", **data)
+
+
+def example_object(rendered: str, root_key: str) -> dict:
+    """Parse the JSON example the prompt shows the model.
+
+    The example is the contract the model imitates, so it has to be valid JSON
+    in its own right - a speaker name carrying a quote or a backslash would
+    otherwise hand the model a broken example to copy.
+    """
+    prefix = '{"' + root_key + '":'
+    for line in rendered.splitlines():
+        if line.startswith(prefix):
+            return json.loads(line)
+    raise AssertionError(f"no {root_key} example found in the rendered prompt")
+
+
+class TestExampleIsValidAndComplete:
+    """Whatever the model copies from the example must be usable output.
+
+    The example only renders when no language is set (see
+    TestNoEnglishSampleInANonEnglishRun), which is what these render.
+    """
+
+    def test_transcript_example_parses_and_names_the_speakers(self):
+        example = example_object(render_transcript(), "transcript")
+        assert [entry["speaker"] for entry in example["transcript"]] == [
+            "Marcus Thompson",
+            "Elena Vasquez",
+        ]
+
+    def test_transcript_example_survives_json_special_characters(self):
+        r"""A name like Dr. "Alex" Chen\ must be escaped, not interpolated raw."""
+        speakers = [
+            {"name": 'Dr. "Alex" Chen\\', "backstory": "b", "personality": "p"},
+            {"name": "Jamie\tRodriguez", "backstory": "b", "personality": "p"},
+        ]
+        example = example_object(render_transcript(speakers=speakers), "transcript")
+        assert [entry["speaker"] for entry in example["transcript"]] == [
+            'Dr. "Alex" Chen\\',
+            "Jamie\tRodriguez",
+        ]
+
+    def test_transcript_example_dialogue_is_speakable(self):
+        """Dialogue goes straight to TTS, so the example must not contain a
+        description of what to write - a copied one would be read aloud. Any
+        sentence shape is fine; a placeholder marker or an empty value is not."""
+        example = example_object(render_transcript(), "transcript")
+        for entry in example["transcript"]:
+            dialogue = entry["dialogue"]
+            assert dialogue.strip()
+            for marker in ("<", ">", "[", "]", "...", "\u2026", "TODO"):
+                assert marker not in dialogue
+
+    def test_outline_example_parses_with_valid_sizes(self):
+        example = example_object(render_outline(), "segments")
+        assert example["segments"]
+        for segment in example["segments"]:
+            assert segment["size"] in {"short", "medium", "long"}
+            assert "<" not in segment["name"]
+            assert "<" not in segment["description"]
+
+
+class TestExampleCannotPassAsACompleteAnswer:
+    """The examples are copy-safe by design, which makes them attractive to copy
+    wholesale - so they must not read as a finished response. Each is labelled
+    an excerpt and restates the count the response actually needs."""
+
+    def test_transcript_example_points_at_the_turn_minimum(self):
+        rendered = render_transcript(turns=6)
+        assert "two-entry EXCERPT" in rendered
+        assert "return at least 6 entries rather than the two shown" in rendered
+
+    def test_solo_excerpt_is_not_called_a_two_entry_one(self):
+        """A solo profile renders one entry; calling it a two-entry excerpt
+        contradicts the example directly above it."""
+        rendered = render_transcript(speakers=[SPEAKERS[0]], turns=3)
+        assert "one-entry EXCERPT" in rendered
+        assert "two-entry" not in rendered
+        assert "rather than the one shown" in rendered
+
+    def test_outline_example_points_at_the_segment_count(self):
+        rendered = render_outline(num_segments=6)
+        assert "two-entry EXCERPT" in rendered
+        assert "return all 6 of them rather than the two shown" in rendered
+
+
+class TestNoEnglishSampleInANonEnglishRun:
+    """The sample values can only be hard-coded English, and a model that
+    copies one into a Hebrew episode produces English TTS. For a run with a
+    language set, the structure is described in prose instead - the schema
+    still reaches the model through format_instructions."""
+
+    @pytest.mark.parametrize(
+        "renderer", [render_transcript, render_outline], ids=["transcript", "outline"]
+    )
+    def test_no_json_sample_when_a_language_is_set(self, renderer):
+        rendered = renderer(language="Hebrew")
+        assert "EXCERPT" not in rendered
+        assert "Let's pick up where we left off" not in rendered
+        assert "Setting the scene" not in rendered
+        # No JSON object literal is shown at all.
+        assert not [line for line in rendered.splitlines() if line.startswith('{"')]
+
+    def test_transcript_still_states_the_structure_in_prose(self):
+        rendered = render_transcript(turns=6, language="Hebrew")
+        assert 'root key "transcript"' in rendered
+        assert "at least 6 entries" in rendered
+        assert '"speaker" and "dialogue"' in rendered
+        assert "{{ speaker_names|join" not in rendered
+        assert "Marcus Thompson, Elena Vasquez" in rendered
+
+    def test_outline_still_states_the_structure_in_prose(self):
+        rendered = render_outline(num_segments=6, language="Hebrew")
+        assert 'root key "segments"' in rendered
+        assert "exactly 6 entries" in rendered
+        assert '"size" must be exactly one of "short", "medium" or "long"' in rendered
+
+    @pytest.mark.parametrize(
+        "renderer", [render_transcript, render_outline], ids=["transcript", "outline"]
+    )
+    def test_english_language_keeps_the_sample(self, renderer):
+        """English locales resolve to "English"; the sample is English, so it
+        stays for them."""
+        assert "EXCERPT" in renderer(language="English")
+
+    @pytest.mark.parametrize(
+        "renderer", [render_transcript, render_outline], ids=["transcript", "outline"]
+    )
+    def test_language_instruction_keeps_the_json_contract_in_english(self, renderer):
+        rendered = renderer(language="Hebrew")
+        assert "except the JSON contract below" in rendered
+
+
+class TestNoCopyableSkeletons:
+    """Whatever the model copies from the prompt must be valid output."""
+
+    @pytest.mark.parametrize("skeleton", COPYABLE_SKELETONS)
+    def test_transcript_has_no_placeholder_skeleton(self, skeleton):
+        assert skeleton not in render_transcript()
+
+    @pytest.mark.parametrize("skeleton", COPYABLE_SKELETONS)
+    def test_outline_has_no_placeholder_skeleton(self, skeleton):
+        assert skeleton not in render_outline()
+
+    def test_transcript_example_uses_real_speaker_names(self):
+        rendered = render_transcript()
+        assert '{"transcript": [{"speaker": "Marcus Thompson"' in rendered
+        assert '"speaker": "Elena Vasquez"' in rendered
+
+    def test_solo_transcript_example_uses_the_only_speaker(self):
+        rendered = render_transcript(speakers=[SPEAKERS[0]])
+        assert '{"transcript": [{"speaker": "Marcus Thompson"' in rendered
+        assert "Elena Vasquez" not in rendered
+
+    def test_second_speaker_is_guarded_against_a_short_name_list(self):
+        """An out-of-range speaker_names[1] would render as an empty string
+        under Jinja's default undefined, putting an invalid example in the
+        prompt - exactly the failure this template is meant to prevent."""
+        rendered = render_transcript(
+            speakers=SPEAKERS, speaker_names=["Marcus Thompson"]
+        )
+        assert '"speaker": ""' not in rendered
+        assert rendered.count('"speaker": "Marcus Thompson"') == 2
+
+    def test_transcript_bans_placeholder_content(self):
+        rendered = render_transcript()
+        assert "Never emit placeholder or elided content" in rendered
+        assert "Never shorten or truncate the list" in rendered
+
+    def test_outline_bans_placeholder_content(self):
+        rendered = render_outline()
+        assert "Never emit placeholder or elided content" in rendered
+        assert "never shorten or truncate the list" in rendered
+
+    @pytest.mark.parametrize(
+        "renderer", [render_transcript, render_outline], ids=["transcript", "outline"]
+    )
+    def test_no_code_fence_contradicts_the_no_fence_instruction(self, renderer):
+        """The only ``` left may be inside the "no code blocks" rule itself:
+        an example wrapped in a fence contradicts that rule and pushes the
+        model toward pattern matching over instruction following."""
+        rendered = renderer()
+        no_fence_rule = "Do NOT wrap the JSON in ```json code blocks"
+        assert no_fence_rule in rendered
+        assert "```" not in rendered.replace(no_fence_rule, "")
+
+
+class TestLanguageInstruction:
+    """episode_profile.language must actually reach the model (#1238)."""
+
+    def test_transcript_includes_the_language_instruction(self):
+        rendered = render_transcript(language="Hebrew")
+        assert "IMPORTANT LANGUAGE INSTRUCTION" in rendered
+        assert rendered.count("Hebrew") >= 3
+
+    def test_outline_includes_the_language_instruction(self):
+        rendered = render_outline(language="Hebrew")
+        assert "IMPORTANT LANGUAGE INSTRUCTION" in rendered
+        assert "segment names, descriptions" in rendered
+
+    @pytest.mark.parametrize(
+        "renderer", [render_transcript, render_outline], ids=["transcript", "outline"]
+    )
+    def test_no_language_instruction_without_a_language(self, renderer):
+        assert "IMPORTANT LANGUAGE INSTRUCTION" not in renderer()
+        assert "IMPORTANT LANGUAGE INSTRUCTION" not in renderer(language=None)
+
+
+class TestNoDriftFromBundledTemplates:
+    """The app's copies shadow podcast-creator's, so library prompt work is
+    invisible here. The language block was lost exactly this way. Fail when a
+    variable the bundled template uses is missing from the app's copy."""
+
+    # Operators and literals a condition can open with: `{% if not language %}`
+    # names no variable called "not".
+    JINJA_KEYWORDS = frozenset(
+        {"not", "and", "or", "is", "in", "if", "else", "true", "false", "none"}
+    )
+
+    @classmethod
+    def _variables(cls, path: Path) -> set:
+        # Jinja's own parser finds every variable the template reads, including
+        # `for` iterables and filter arguments; loop locals and `set` targets
+        # are declared, so they are excluded.
+        from jinja2 import Environment, meta
+
+        ast = Environment().parse(path.read_text())
+        return set(meta.find_undeclared_variables(ast)) - cls.JINJA_KEYWORDS
+
+    def test_jinja_keywords_are_not_treated_as_variables(self):
+        """`{% if not language %}` names no variable called "not" - counting it
+        would fail the drift check the moment one template negates a test the
+        other doesn't."""
+        assert "not" not in self._variables(PROMPTS_DIR / "transcript.jinja")
+
+    @pytest.mark.parametrize("template", ["transcript", "outline"])
+    def test_app_template_uses_every_bundled_variable(self, template):
+        import podcast_creator
+
+        bundled = (
+            Path(podcast_creator.__file__).parent
+            / "resources"
+            / "prompts"
+            / "podcast"
+            / f"{template}.jinja"
+        )
+        missing = self._variables(bundled) - self._variables(
+            PROMPTS_DIR / f"{template}.jinja"
+        )
+        assert not missing, (
+            f"prompts/podcast/{template}.jinja shadows podcast-creator's copy "
+            f"but ignores {sorted(missing)}. Either use them or delete the "
+            "app template so the library's is used."
+        )
+
+
+def test_drift_check_sees_for_iterables(tmp_path):
+    """A variable used only as a `for` iterable still counts (cubic, #1334)."""
+    template = tmp_path / "t.jinja"
+    template.write_text("{% for item in new_input %}{{ item }}{% endfor %}")
+    assert TestNoDriftFromBundledTemplates._variables(template) == {"new_input"}

From 31468194638c2752b32b3627d93e9065d5bf5af7 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 05:18:24 -0300
Subject: [PATCH 334/345] docs(changelog): one section per change type under
 Unreleased (#1447)

Merges the duplicated Fixed and Changed sections (left by parallel PRs
inserting at different anchors) into Added / Changed / Fixed / Security.
All 38 entries kept; the bump entry now names podcast-creator 0.13.1.


Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md | 24 ++++++++++--------------
 1 file changed, 10 insertions(+), 14 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 368e1850..da957da6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,16 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Security
-- Bumped esperanto to 2.28.0, content-core to 2.2.0 and podcast-creator to 0.13.0. podcast-creator no longer depends on moviepy, so the `pillow>=12.2.0` override is gone (content-core now floors `pillow>=12.3.0` itself); content-core's extraction logs, which it disables for library consumers since 2.1, are re-enabled in the API and worker (#1408)
-- Dependency security update: `next` 16.3.8 (critical RCE advisory in `next/og` `ImageResponse`; the app does not use `next/og`), `axios` 1.20.0, and the npm overrides for `postcss` (8.5.23) and `brace-expansion` (1.1.21); Python `anyio` 4.14.2, `pyjwt` 2.15.1, `tornado` 6.5.10, `urllib3` 2.8.0 and `virtualenv` 21.14.5. Remaining `npm audit` findings are moderate and limited to the test runner (`vitest`/`@vitest/mocker`, `fflate`). Dependabot now skips odd-numbered (non-LTS) Node majors for the image base
-
-### Fixed
-- **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
-- Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
-- `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
-- **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
-
 ### Added
 - **OpenDocument uploads and YouTube unblocking options.** `.odt`, `.ods` and `.odp` files (and `.htm`) can be uploaded as sources (content-core 2.2). New content-core settings are documented: `CCORE_YOUTUBE_PROXY` and `CCORE_YOUTUBE_COOKIES_FILE` get YouTube transcripts through when YouTube blocks the server's IP, and `CCORE_AUDIO_SEGMENT_MINUTES` controls how long audio is split for transcription (#1439)
 - **SiliconFlow and Z.ai providers.** Both are available in Manage → Models with credential setup, connection test and model discovery (language models). SiliconFlow serves hosted DeepSeek, Qwen, GLM and Kimi models; mainland China accounts set the credential's Base URL to `https://api.siliconflow.cn/v1`. Z.ai serves the GLM family. Model discovery honors their Base URL override (from the credential or `SILICONFLOW_BASE_URL` / `ZAI_BASE_URL`), as it already did for OpenAI (#1409, #1437)
@@ -30,8 +20,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Community contribution intake now separates exploration from execution: feature requests, product/design/architecture ideas and contribution proposals start in GitHub Discussions, while Issues are reserved for reproducible bugs and maintainer-approved work items. The Issue chooser routes contributors accordingly, a structured Ideas Discussion form starts from user goals and outcomes, and the contributor/maintainer docs plus PR template now describe the Discussion → Issue → PR graduation path (#1204).
 - Release image gate gained a `probe` scenario (`make release-test` runs it as part of `all`): container-level checks that a Python test suite can't cover because they depend on the shipped image's process supervision — `OPEN_NOTEBOOK_WORKER_MAX_TASKS` reaching the in-image worker (the supervisord `sh -c` expansion), and the worker surviving startup with `HTTP_PROXY` set while a user's `NO_PROXY` value is preserved (the internal SurrealDB websocket not being tunneled). Both were manual probes during the v1.14.0 release; they now run automatically. Release-process docs gained the post-tag re-cut sequence and a note on never leaving the version bump uncommitted (v1.14.0 retro)
 - Python code is now formatted with `ruff format` across the repository, and CI fails when it isn't (`ruff format --check .` in the Backend Lint job). Formatting-only change (59 files); run `uv run ruff format .` before pushing
+- Search page explains what each mode covers: text search matches source titles and full text, insights, and note titles and content, while vector search matches embedded source chunks, insights and note content only. Documented in `docs/3-FEATURES/search.md` and shown as a mode-aware hint under the search box, translated across all 14 locales (#1295, #1267)
+- README star-history chart points at a working renderer; the previous endpoint had been returning a "GitHub restricted access to star data" placeholder (#1262)
+- **Credential encryption now uses PBKDF2-HMAC-SHA256 (600k iterations) with versioned `pbkdf2v1:` ciphertext.** New keys are written in the new format; legacy values keep decrypting, and a one-shot `POST /api/credentials/migrate-encryption` pass upgrades stored keys (idempotent, fail-closed per record). Downgrade warning: versions predating this change cannot read the new format — back up the database before migrating (#1317)
 
 ### Fixed
+- **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
+- Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
+- `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
+- **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
 - API password authentication now accepts UTF-8 non-ASCII passwords; clients sending non-ASCII passwords as Latin-1 bytes must switch to UTF-8 (#1290)
 - **Failed sources fail once, with a clear reason.** content-core 2.2 raises typed errors instead of returning empty content (unreachable host, page not found, malformed URL, corrupted file, unsupported type, YouTube without a transcript or blocked, misconfigured engine or speech-to-text model). Source processing now turns each into a short, actionable message, kept with the original cause in the worker log, and fails the job on the first attempt instead of retrying it up to 15 times. A blocked YouTube request points to the new `CCORE_YOUTUBE_PROXY` / `CCORE_YOUTUBE_COOKIES_FILE` settings (#1433)
 - **Podcast episode profiles honor their `language` again.** The app's `prompts/podcast/{outline,transcript}.jinja` shadow podcast-creator's bundled templates (the library resolves `Path.cwd()/prompts/podcast/` before its own resources) and had lost the `{{ language }}` block, so a profile set to `he-IL` produced an English outline and English segment titles — the field looked supported and did nothing. A regression test now fails when a variable the bundled template uses is missing from the app's copy (#1238)
@@ -52,10 +49,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Anthropic connection test no longer reports retired Haiku ids as HTTP 403.** The status-code check matched "403" inside the date suffix of `claude-3-haiku-20240307`, turning a plain "model not found" into a permissions error. Status codes are now matched as standalone numbers for 401/403/429, and the registry's test model moved to a current Haiku id (#1303, #1282)
 - **Context-length errors are no longer retried in background jobs.** A source whose content exceeds the model's context window used to be retried up to 15 times (about 25 minutes) before failing, because the error was classified like a transient provider outage. A dedicated `ContextLengthExceededError` now stops the retry loop immediately (#1275)
 
-### Changed
-- Search page explains what each mode covers: text search matches source titles and full text, insights, and note titles and content, while vector search matches embedded source chunks, insights and note content only. Documented in `docs/3-FEATURES/search.md` and shown as a mode-aware hint under the search box, translated across all 14 locales (#1295, #1267)
-- README star-history chart points at a working renderer; the previous endpoint had been returning a "GitHub restricted access to star data" placeholder (#1262)
-- **Credential encryption now uses PBKDF2-HMAC-SHA256 (600k iterations) with versioned `pbkdf2v1:` ciphertext.** New keys are written in the new format; legacy values keep decrypting, and a one-shot `POST /api/credentials/migrate-encryption` pass upgrades stored keys (idempotent, fail-closed per record). Downgrade warning: versions predating this change cannot read the new format — back up the database before migrating (#1317)
+### Security
+- Bumped esperanto to 2.28.0, content-core to 2.2.0 and podcast-creator to 0.13.1. podcast-creator no longer depends on moviepy, so the `pillow>=12.2.0` override is gone (content-core now floors `pillow>=12.3.0` itself); content-core's extraction logs, which it disables for library consumers since 2.1, are re-enabled in the API and worker (#1408)
+- Dependency security update: `next` 16.3.8 (critical RCE advisory in `next/og` `ImageResponse`; the app does not use `next/og`), `axios` 1.20.0, and the npm overrides for `postcss` (8.5.23) and `brace-expansion` (1.1.21); Python `anyio` 4.14.2, `pyjwt` 2.15.1, `tornado` 6.5.10, `urllib3` 2.8.0 and `virtualenv` 21.14.5. Remaining `npm audit` findings are moderate and limited to the test runner (`vitest`/`@vitest/mocker`, `fflate`). Dependabot now skips odd-numbered (non-LTS) Node majors for the image base
 
 ## [1.14.0] - 2026-07-20
 

From be03e57d5ca21ef0716e80af8d2104ec7545bd59 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 Oct 2026 05:33:00 -0300
Subject: [PATCH 335/345] chore(deps): bump the all-npm group in /frontend with
 38 updates (#1417)

* chore(deps): bump the all-npm group in /frontend with 38 updates

Bumps the all-npm group in /frontend with 38 updates:

| Package | From | To |
| --- | --- | --- |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.1.1` | `5.9.1` |
| [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.12` | `1.2.20` |
| [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.14` | `1.1.23` |
| [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.2` | `1.3.11` |
| [@radix-ui/react-collapsible](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/collapsible) | `1.1.12` | `1.1.20` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.23` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.15` | `2.1.24` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.7` | `2.1.15` |
| [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.15` | `1.1.23` |
| [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.7` | `1.1.16` |
| [@radix-ui/react-radio-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radio-group) | `1.3.8` | `1.4.7` |
| [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.9` | `1.2.18` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.2.5` | `2.3.7` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.7` | `1.1.15` |
| [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.3` | `1.3.3` |
| [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.12` | `1.1.21` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.7` | `1.2.16` |
| [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) | `0.5.16` | `0.5.20` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.83.0` | `5.103.3` |
| [@uiw/react-md-editor](https://github.com/uiwjs/react-md-editor) | `4.0.8` | `4.1.2` |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [i18next-browser-languagedetector](https://github.com/i18next/i18next-browser-languageDetector) | `8.2.0` | `8.2.1` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.9` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.3.0` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.1.8` | `19.3.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.3.0` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.1.6` | `19.3.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.60.0` | `7.89.0` |
| [sonner](https://github.com/emilkowalski/sonner) | `2.0.6` | `2.0.8` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.3.1` | `3.7.0` |
| [use-debounce](https://github.com/xnimorz/use-debounce) | `10.0.6` | `10.1.1` |
| [zod](https://github.com/colinhacks/zod) | `4.0.5` | `4.6.5` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.6` | `5.0.15` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.1` | `3.3.7` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.11` | `4.3.3` |
| [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.1` | `16.3.3` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.11` | `4.3.3` |
| [tw-animate-css](https://github.com/Wombosvideo/tw-animate-css) | `1.3.5` | `1.4.0` |


Updates `@hookform/resolvers` from 5.1.1 to 5.9.1
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](https://github.com/react-hook-form/resolvers/compare/v5.1.1...v5.9.1)

Updates `@radix-ui/react-accordion` from 1.2.12 to 1.2.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion)

Updates `@radix-ui/react-alert-dialog` from 1.1.14 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog)

Updates `@radix-ui/react-checkbox` from 1.3.2 to 1.3.11
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox)

Updates `@radix-ui/react-collapsible` from 1.1.12 to 1.1.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/collapsible/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/collapsible)

Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog)

Updates `@radix-ui/react-dropdown-menu` from 2.1.15 to 2.1.24
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu)

Updates `@radix-ui/react-label` from 2.1.7 to 2.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label)

Updates `@radix-ui/react-popover` from 1.1.15 to 1.1.23
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover)

Updates `@radix-ui/react-progress` from 1.1.7 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress)

Updates `@radix-ui/react-radio-group` from 1.3.8 to 1.4.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radio-group/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radio-group)

Updates `@radix-ui/react-scroll-area` from 1.2.9 to 1.2.18
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area)

Updates `@radix-ui/react-select` from 2.2.5 to 2.3.7
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select)

Updates `@radix-ui/react-separator` from 1.1.7 to 1.1.15
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator)

Updates `@radix-ui/react-slot` from 1.2.3 to 1.3.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot)

Updates `@radix-ui/react-tabs` from 1.1.12 to 1.1.21
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs)

Updates `@radix-ui/react-tooltip` from 1.2.7 to 1.2.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@tailwindcss/typography` from 0.5.16 to 0.5.20
- [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss-typography/compare/v0.5.16...v0.5.20)

Updates `@tanstack/react-query` from 5.83.0 to 5.103.3
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.3/packages/react-query)

Updates `@uiw/react-md-editor` from 4.0.8 to 4.1.2
- [Release notes](https://github.com/uiwjs/react-md-editor/releases)
- [Commits](https://github.com/uiwjs/react-md-editor/compare/v4.0.8...v4.1.2)

Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](https://github.com/date-fns/date-fns/compare/v4.1.0...v4.4.0)

Updates `i18next-browser-languagedetector` from 8.2.0 to 8.2.1
- [Changelog](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-browser-languageDetector/compare/v8.2.0...v8.2.1)

Updates `katex` from 0.16.47 to 0.18.9
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](https://github.com/KaTeX/KaTeX/compare/v0.16.47...v0.18.9)

Updates `react` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.1.8 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.1.6 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `react-hook-form` from 7.60.0 to 7.89.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](https://github.com/react-hook-form/react-hook-form/compare/v7.60.0...v7.89.0)

Updates `sonner` from 2.0.6 to 2.0.8
- [Release notes](https://github.com/emilkowalski/sonner/releases)
- [Commits](https://github.com/emilkowalski/sonner/compare/v2.0.6...v2.0.8)

Updates `tailwind-merge` from 3.3.1 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `use-debounce` from 10.0.6 to 10.1.1
- [Release notes](https://github.com/xnimorz/use-debounce/releases)
- [Changelog](https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xnimorz/use-debounce/commits)

Updates `zod` from 4.0.5 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v4.0.5...v4.6.5)

Updates `zustand` from 5.0.6 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](https://github.com/pmndrs/zustand/compare/v5.0.6...v5.0.15)

Updates `@eslint/eslintrc` from 3.3.1 to 3.3.7
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslintrc/compare/v3.3.1...eslintrc-v3.3.7)

Updates `@tailwindcss/postcss` from 4.1.11 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

Updates `@testing-library/react` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/testing-library/react-testing-library/releases)
- [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/react-testing-library/compare/v16.3.1...v16.3.3)

Updates `@types/react` from 19.1.8 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.1.6 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `tailwindcss` from 4.1.11 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `tw-animate-css` from 1.3.5 to 1.4.0
- [Release notes](https://github.com/Wombosvideo/tw-animate-css/releases)
- [Commits](https://github.com/Wombosvideo/tw-animate-css/compare/v1.3.5...v1.4.0)

---
updated-dependencies:
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-accordion"
  dependency-version: 1.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-alert-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-checkbox"
  dependency-version: 1.3.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-collapsible"
  dependency-version: 1.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-dialog"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-dropdown-menu"
  dependency-version: 2.1.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-label"
  dependency-version: 2.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-popover"
  dependency-version: 1.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-progress"
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-radio-group"
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-scroll-area"
  dependency-version: 1.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-select"
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-separator"
  dependency-version: 1.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-slot"
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-tabs"
  dependency-version: 1.1.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.2.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@tailwindcss/typography"
  dependency-version: 0.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.103.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@uiw/react-md-editor"
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: i18next-browser-languagedetector
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: katex
  dependency-version: 0.18.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: react-hook-form
  dependency-version: 7.89.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: sonner
  dependency-version: 2.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: use-debounce
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@eslint/eslintrc"
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@testing-library/react"
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: tw-animate-css
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): keep katex on 0.16 to match rehype-katex

The group bumped the direct katex dependency (which only provides
katex.min.css) to 0.18.9 while rehype-katex keeps rendering with its own
katex 0.16.47, so the stylesheet and the generated markup would come from
different versions. Keep katex on ^0.16.47 (deduped with rehype-katex) and
tell dependabot to skip katex >= 0.17 until rehype-katex moves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Luis Novo <lfnovo@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/dependabot.yml     |    6 +
 frontend/package-lock.json | 1934 ++++++++++++++++--------------------
 frontend/package.json      |   60 +-
 3 files changed, 910 insertions(+), 1090 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 63e7e44d..254201f1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -49,6 +49,12 @@ updates:
         applies-to: security-updates
         patterns:
           - "*"
+    ignore:
+      # The direct katex dependency only provides katex.min.css; rendering is
+      # done by rehype-katex with its own katex (^0.16). The stylesheet must
+      # match the renderer's version, so katex moves when rehype-katex does.
+      - dependency-name: "katex"
+        versions: [">=0.17.0"]
 
   - package-ecosystem: "docker"
     directory: "/"
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index a63a103d..794961dd 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -8,40 +8,40 @@
       "name": "frontend",
       "version": "0.1.0",
       "dependencies": {
-        "@hookform/resolvers": "^5.1.1",
-        "@radix-ui/react-accordion": "^1.2.12",
-        "@radix-ui/react-alert-dialog": "^1.1.14",
-        "@radix-ui/react-checkbox": "^1.3.2",
+        "@hookform/resolvers": "^5.9.1",
+        "@radix-ui/react-accordion": "^1.2.20",
+        "@radix-ui/react-alert-dialog": "^1.1.23",
+        "@radix-ui/react-checkbox": "^1.3.11",
         "@radix-ui/react-collapsible": "^1.1.11",
         "@radix-ui/react-dialog": "^1.1.15",
-        "@radix-ui/react-dropdown-menu": "^2.1.15",
-        "@radix-ui/react-label": "^2.1.7",
-        "@radix-ui/react-popover": "^1.1.15",
-        "@radix-ui/react-progress": "^1.1.7",
-        "@radix-ui/react-radio-group": "^1.3.8",
-        "@radix-ui/react-scroll-area": "^1.2.9",
-        "@radix-ui/react-select": "^2.2.5",
-        "@radix-ui/react-separator": "^1.1.7",
-        "@radix-ui/react-slot": "^1.2.3",
-        "@radix-ui/react-tabs": "^1.1.12",
-        "@radix-ui/react-tooltip": "^1.2.7",
-        "@tailwindcss/typography": "^0.5.16",
-        "@tanstack/react-query": "^5.83.0",
+        "@radix-ui/react-dropdown-menu": "^2.1.24",
+        "@radix-ui/react-label": "^2.1.15",
+        "@radix-ui/react-popover": "^1.1.23",
+        "@radix-ui/react-progress": "^1.1.16",
+        "@radix-ui/react-radio-group": "^1.4.7",
+        "@radix-ui/react-scroll-area": "^1.2.18",
+        "@radix-ui/react-select": "^2.3.7",
+        "@radix-ui/react-separator": "^1.1.15",
+        "@radix-ui/react-slot": "^1.3.3",
+        "@radix-ui/react-tabs": "^1.1.21",
+        "@radix-ui/react-tooltip": "^1.2.16",
+        "@tailwindcss/typography": "^0.5.20",
+        "@tanstack/react-query": "^5.103.3",
         "@types/react-syntax-highlighter": "^15.5.13",
-        "@uiw/react-md-editor": "^4.0.8",
+        "@uiw/react-md-editor": "^4.1.2",
         "axios": "^1.20.0",
         "class-variance-authority": "^0.7.1",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
-        "date-fns": "^4.1.0",
+        "date-fns": "^4.4.0",
         "i18next": "^25.7.3",
-        "i18next-browser-languagedetector": "^8.2.0",
+        "i18next-browser-languagedetector": "^8.2.1",
         "katex": "^0.16.47",
         "lucide-react": "^0.525.0",
         "next": "^16.3.8",
-        "react": "^19.2.3",
-        "react-dom": "^19.2.3",
-        "react-hook-form": "^7.60.0",
+        "react": "^19.3.0",
+        "react-dom": "^19.3.0",
+        "react-hook-form": "^7.89.0",
         "react-i18next": "^16.5.0",
         "react-markdown": "^10.1.0",
         "react-syntax-highlighter": "^16.1.1",
@@ -49,17 +49,17 @@
         "rehype-sanitize": "^6.0.0",
         "remark-gfm": "^4.0.1",
         "remark-math": "^6.0.0",
-        "sonner": "^2.0.6",
-        "tailwind-merge": "^3.3.1",
-        "use-debounce": "^10.0.6",
-        "zod": "^4.0.5",
-        "zustand": "^5.0.6"
+        "sonner": "^2.0.8",
+        "tailwind-merge": "^3.7.0",
+        "use-debounce": "^10.1.1",
+        "zod": "^4.6.5",
+        "zustand": "^5.0.15"
       },
       "devDependencies": {
         "@eslint/eslintrc": "^3",
         "@tailwindcss/postcss": "^4",
         "@testing-library/jest-dom": "^6.6.3",
-        "@testing-library/react": "^16.2.0",
+        "@testing-library/react": "^16.3.3",
         "@types/node": "^20",
         "@types/react": "^19",
         "@types/react-dom": "^19",
@@ -70,7 +70,7 @@
         "eslint-config-next": "15.4.2",
         "jsdom": "^26.0.0",
         "tailwindcss": "^4",
-        "tw-animate-css": "^1.3.5",
+        "tw-animate-css": "^1.4.0",
         "typescript": "^5",
         "vitest": "^4.1.8"
       }
@@ -94,19 +94,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@ampproject/remapping": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-      "dev": true,
-      "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      },
-      "engines": {
-        "node": ">=6.0.0"
-      }
-    },
     "node_modules/@asamuzakjp/css-color": {
       "version": "3.2.0",
       "resolved": "https://registry.npmmirror.com/@asamuzakjp/css-color/-/css-color-3.2.0.tgz",
@@ -1124,19 +1111,20 @@
       }
     },
     "node_modules/@eslint/eslintrc": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.1.tgz",
-      "integrity": "sha512-gtF186CXhIl1p4pJNGZw8Yc6RlshoePRvE0X91oPGb3vZ8pM3qOS9W9NGPat9LziaBV7XrJWGylNQXkGcnM3IQ==",
+      "version": "3.3.7",
+      "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.3.7.tgz",
+      "integrity": "sha512-F42g89Qd5oAWtp0k0nnSrjziAKza7w8SVT4mStc18LZMaRb4J1HQAHLCalEtDCxrTuksx7NU9qsmeLwpOfPqWw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "ajv": "^6.12.4",
+        "ajv": "^6.14.0",
         "debug": "^4.3.2",
         "espree": "^10.0.1",
         "globals": "^14.0.0",
         "ignore": "^5.2.0",
         "import-fresh": "^3.2.1",
-        "js-yaml": "^4.1.0",
-        "minimatch": "^3.1.2",
+        "js-yaml": "^4.3.2",
+        "minimatch": "^3.1.5",
         "strip-json-comments": "^3.1.1"
       },
       "engines": {
@@ -1229,14 +1217,113 @@
       "integrity": "sha512-aGTxbpbg8/b5JfU1HXSrbH3wXZuLPJcNEcZQFMxLs3oSzgtVu6nFPkbbGGUvBcUjKV2YyB9Wxxabo+HEH9tcRQ=="
     },
     "node_modules/@hookform/resolvers": {
-      "version": "5.1.1",
-      "resolved": "https://registry.npmjs.org/@hookform/resolvers/-/resolvers-5.1.1.tgz",
-      "integrity": "sha512-J/NVING3LMAEvexJkyTLjruSm7aOFx7QX21pzkiJfMoNG0wl5aFEjLTl7ay7IQb9EWY6AkrBy7tHL2Alijpdcg==",
+      "version": "5.9.1",
+      "resolved": "https://registry.npmjs.org/@hookform/resolvers/-/resolvers-5.9.1.tgz",
+      "integrity": "sha512-7b7vsbraJxKgjVSA1Nur9tLwj539WGJUBLA7QNvXnFoT2pM5Z7G+6rlukk4B2/QrTZy6huRtH6wKeESPKuIr6w==",
+      "license": "MIT",
       "dependencies": {
         "@standard-schema/utils": "^0.3.0"
       },
       "peerDependencies": {
-        "react-hook-form": "^7.55.0"
+        "@sinclair/typebox": ">=0.25.24",
+        "@standard-schema/spec": "^1.0.0",
+        "@typeschema/main": ">=0.13.7",
+        "@vinejs/vine": "^2.0.0 || ^3.0.0 || ^4.0.0",
+        "ajv": "^8.12.0",
+        "ajv-errors": "^3.0.0",
+        "ajv-formats": "^2.1.1",
+        "arktype": "^2.0.0",
+        "ata-validator": "^1.2.0",
+        "class-transformer": ">=0.4.0",
+        "class-validator": ">=0.12.0",
+        "computed-types": "^1.0.0",
+        "effect": "^3.10.3",
+        "fluentvalidation-ts": "^3.0.0",
+        "fp-ts": "^2.7.0",
+        "io-ts": "^2.0.0",
+        "joi": "^17.0.0 || ^18.0.0",
+        "nope-validator": ">=0.12.0",
+        "react-hook-form": "^7.55.0",
+        "superstruct": ">=0.12.0",
+        "typanion": "^3.3.2",
+        "valibot": ">=0.31.0 || ^1.0.0-beta.4 || ^1.0.0-rc",
+        "vest": ">=6.0.0",
+        "yup": "^1.0.0",
+        "zod": "^3.25.0 || ^4.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@sinclair/typebox": {
+          "optional": true
+        },
+        "@standard-schema/spec": {
+          "optional": true
+        },
+        "@typeschema/main": {
+          "optional": true
+        },
+        "@vinejs/vine": {
+          "optional": true
+        },
+        "ajv": {
+          "optional": true
+        },
+        "ajv-errors": {
+          "optional": true
+        },
+        "ajv-formats": {
+          "optional": true
+        },
+        "arktype": {
+          "optional": true
+        },
+        "ata-validator": {
+          "optional": true
+        },
+        "class-transformer": {
+          "optional": true
+        },
+        "class-validator": {
+          "optional": true
+        },
+        "computed-types": {
+          "optional": true
+        },
+        "effect": {
+          "optional": true
+        },
+        "fluentvalidation-ts": {
+          "optional": true
+        },
+        "fp-ts": {
+          "optional": true
+        },
+        "io-ts": {
+          "optional": true
+        },
+        "joi": {
+          "optional": true
+        },
+        "nope-validator": {
+          "optional": true
+        },
+        "superstruct": {
+          "optional": true
+        },
+        "typanion": {
+          "optional": true
+        },
+        "valibot": {
+          "optional": true
+        },
+        "vest": {
+          "optional": true
+        },
+        "yup": {
+          "optional": true
+        },
+        "zod": {
+          "optional": true
+        }
       }
     },
     "node_modules/@humanfs/core": {
@@ -1804,18 +1891,6 @@
         "url": "https://opencollective.com/libvips"
       }
     },
-    "node_modules/@isaacs/fs-minipass": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
-      "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==",
-      "dev": true,
-      "dependencies": {
-        "minipass": "^7.0.4"
-      },
-      "engines": {
-        "node": ">=18.0.0"
-      }
-    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.12",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.12.tgz",
@@ -2071,29 +2146,32 @@
       "license": "MIT"
     },
     "node_modules/@radix-ui/number": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/number/-/number-1.1.1.tgz",
-      "integrity": "sha512-MkKCwxlXTgz6CFoJx3pCwn07GKp36+aZyu/u2Ln2VrA5DcdyCZkASEDBTd8x5whTQQL5CiYf4prXKLcgQdv29g=="
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@radix-ui/number/-/number-1.1.3.tgz",
+      "integrity": "sha512-Road2bidD0uu/1BGDOWNdPI06g0lIRy6IF9GZcIrDK2KGItfor8IQwQa+yM2ERgHM1MmHxaxpTzk0/Jp42lNfA==",
+      "license": "MIT"
     },
     "node_modules/@radix-ui/primitive": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.2.tgz",
-      "integrity": "sha512-XnbHrrprsNqZKQhStrSwgRUQzoCI1glLzdw79xiZPoofhGICeZRSQ3dIxAKH1gb3OHfNf4d6f+vAv3kil2eggA=="
+      "version": "1.1.7",
+      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.7.tgz",
+      "integrity": "sha512-rqWnm76nYT8HoNNqEjpgJ7Pw/DrBj5iBTrmEPo6HTX5+VJyBNOqTdv4g89G63HuR5g0AaENoAcH7Is5fF2kZ8Q==",
+      "license": "MIT"
     },
     "node_modules/@radix-ui/react-accordion": {
-      "version": "1.2.12",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-accordion/-/react-accordion-1.2.12.tgz",
-      "integrity": "sha512-T4nygeh9YE9dLRPhAHSeOZi7HBXo+0kYIPJXayZfvWOWA0+n3dESrZbjfDPUABkUNym6Hd+f2IR113To8D2GPA==",
+      "version": "1.2.20",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-accordion/-/react-accordion-1.2.20.tgz",
+      "integrity": "sha512-jDhG9FvAEnlhnjrsINbNXcUa4G+L1KqSkJSunkbKEzFRcAb52jvM0PjPxPRvhe1HNc5F5yc0yzzWeeqlH4yBIg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-collapsible": "1.1.12",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-collapsible": "1.1.20",
+        "@radix-ui/react-collection": "1.1.15",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-controllable-state": "1.2.6"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2110,57 +2188,17 @@
         }
       }
     },
-    "node_modules/@radix-ui/react-accordion/node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg=="
-    },
     "node_modules/@radix-ui/react-alert-dialog": {
-      "version": "1.1.14",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-alert-dialog/-/react-alert-dialog-1.1.14.tgz",
-      "integrity": "sha512-IOZfZ3nPvN6lXpJTBCunFQPRSvK8MDgSc1FB85xnIpUKOw9en0dJj8JmCAxV7BiZdtYlUpmrQjoTFkVYtdoWzQ==",
+      "version": "1.1.23",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-alert-dialog/-/react-alert-dialog-1.1.23.tgz",
+      "integrity": "sha512-VAYOiQRqj3GPpYJE0I9J+X8Ip05cyVlNdKOFeiGS2Ou1HHGfpl0BxOyZm6nmVDyU+W+NF3/XLzmjHmVGydhwgA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dialog": "1.1.14",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-alert-dialog/node_modules/@radix-ui/react-dialog": {
-      "version": "1.1.14",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dialog/-/react-dialog-1.1.14.tgz",
-      "integrity": "sha512-+CpweKjqpzTmwRwcYECQcNYbI8V9VSQt0SNFKeEBLgfucbsLssU6Ppq7wUdNXEGb573bMjFhVjKVll8rmV6zMw==",
-      "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dismissable-layer": "1.1.10",
-        "@radix-ui/react-focus-guards": "1.1.2",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-dialog": "1.1.23",
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2178,11 +2216,12 @@
       }
     },
     "node_modules/@radix-ui/react-arrow": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-arrow/-/react-arrow-1.1.7.tgz",
-      "integrity": "sha512-F+M1tLhO+mlQaOWspE8Wstg+z6PwxwRd8oQ8IXceWz92kfAmalTRf0EjrouQeo7QssEPfCn05B4Ihs1K9WQ/7w==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-arrow/-/react-arrow-1.1.15.tgz",
+      "integrity": "sha512-v4zggRcjadnI+ClKDuijlQEW4tw3NoaeHc/PwpKnLoLLKNUG4InLegkstooLcRIUWCs+8L22dGURCVuFfOKfnA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2200,18 +2239,18 @@
       }
     },
     "node_modules/@radix-ui/react-checkbox": {
-      "version": "1.3.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-checkbox/-/react-checkbox-1.3.2.tgz",
-      "integrity": "sha512-yd+dI56KZqawxKZrJ31eENUwqc1QSqg4OZ15rybGjF2ZNwMO+wCyHzAVLRp9qoYJf7kYy0YpZ2b0JCzJ42HZpA==",
+      "version": "1.3.11",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-checkbox/-/react-checkbox-1.3.11.tgz",
+      "integrity": "sha512-Gnptr9pDDQxD3hgq2dtPbtrp/c2qH1mBwIzw3X/ivrMb2e1t0jMTi606fVEqFPaQR1ggXIVQWKj3P2WW9v7zGQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-use-previous": "1.1.1",
-        "@radix-ui/react-use-size": "1.1.1"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-size": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2229,46 +2268,19 @@
       }
     },
     "node_modules/@radix-ui/react-collapsible": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-collapsible/-/react-collapsible-1.1.12.tgz",
-      "integrity": "sha512-Uu+mSh4agx2ib1uIGPP4/CKNULyajb3p92LsVXmH2EHVMTfZWpll88XJ0j4W0z3f8NK1eYl1+Mf/szHPmcHzyA==",
+      "version": "1.1.20",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-collapsible/-/react-collapsible-1.1.20.tgz",
+      "integrity": "sha512-mcGesGplBnzN2sbvJETzpCNfSMyPnb29q1GRLU+Ib7bJrpIG2ywmRoh2V5VbA2uNvKikKUlVbAPks7JDjz4A8Q==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-collapsible/node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg=="
-    },
-    "node_modules/@radix-ui/react-collapsible/node_modules/@radix-ui/react-presence": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.5.tgz",
-      "integrity": "sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==",
-      "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2286,14 +2298,15 @@
       }
     },
     "node_modules/@radix-ui/react-collection": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-collection/-/react-collection-1.1.7.tgz",
-      "integrity": "sha512-Fh9rGN0MoI4ZFUNyfFVNU4y9LUz93u9/0K+yLgA2bwRojxM8JU1DyvvMBabnZPBgMWREAJvU2jjVzq+LrFUglw==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-collection/-/react-collection-1.1.15.tgz",
+      "integrity": "sha512-9W+B9NPF0NaaPh/1NJd3+KqsnlLqU9H7T2rvww+fp+T/evVXdNAyYcnfRQZFOjkR1ajQp3yORlqnI8soawLvNA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3"
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-slot": "1.3.3"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2311,9 +2324,10 @@
       }
     },
     "node_modules/@radix-ui/react-compose-refs": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-compose-refs/-/react-compose-refs-1.1.2.tgz",
-      "integrity": "sha512-z4eqJvfiNnFMHIIvXP3CY57y2WJs5g2v3X0zm9mEJkrkNv4rDxu+sg9Jh8EkXyeqBkB7SOcboo9dMVqhyrACIg==",
+      "version": "1.1.5",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-compose-refs/-/react-compose-refs-1.1.5.tgz",
+      "integrity": "sha512-+48PbAAbq3didjJxa+OaWY2ZwgAKsNiRGyeHKszblZMQ+kcpd9pAaT11cMkGEie0vsOi3QdeTE6d5Fe3Gn61kA==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -2325,9 +2339,10 @@
       }
     },
     "node_modules/@radix-ui/react-context": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-context/-/react-context-1.1.2.tgz",
-      "integrity": "sha512-jCi/QKUM2r1Ju5a3J64TH2A5SpKAgh0LpknyqdQ4m6DCV0xJ2HG1xARRwNGPQfi1SLdLWZ1OJz6F4OMBBNiGJA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-context/-/react-context-1.2.2.tgz",
+      "integrity": "sha512-RHCUGwKHDr0hDGg4X7ma4JG4/+12qxw8rkh5QKdDldlCvtja6nUx1Ef/8HVrJze81lEsgLQlqjzjGNHantgnQA==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -2339,92 +2354,26 @@
       }
     },
     "node_modules/@radix-ui/react-dialog": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dialog/-/react-dialog-1.1.15.tgz",
-      "integrity": "sha512-TCglVRtzlffRNxRMEyR36DGBLJpeusFcgMVD9PZEzAKnUs1lKCgX5u9BmC2Yg+LL9MgZDugFFs1Vl+Jp4t/PGw==",
+      "version": "1.1.23",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-dialog/-/react-dialog-1.1.23.tgz",
+      "integrity": "sha512-Ksw4WeROkO4rC9k/onilX/Ao2Cr1ku1unMNH+XSCcP4jSXYu7HDsg9n4ojMjVb22XpYjAQ9qfrFlVbru1vXDUA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dismissable-layer": "1.1.11",
-        "@radix-ui/react-focus-guards": "1.1.3",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-dismissable-layer": "1.1.19",
+        "@radix-ui/react-focus-guards": "1.1.6",
+        "@radix-ui/react-focus-scope": "1.1.16",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-portal": "1.1.17",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-slot": "1.3.3",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-layout-effect": "1.1.4",
         "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-dialog/node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg=="
-    },
-    "node_modules/@radix-ui/react-dialog/node_modules/@radix-ui/react-dismissable-layer": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.1.11.tgz",
-      "integrity": "sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==",
-      "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-escape-keydown": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-dialog/node_modules/@radix-ui/react-focus-guards": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.1.3.tgz",
-      "integrity": "sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-dialog/node_modules/@radix-ui/react-presence": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.5.tgz",
-      "integrity": "sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==",
-      "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "react-remove-scroll": "^2.7.2"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2442,9 +2391,10 @@
       }
     },
     "node_modules/@radix-ui/react-direction": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-direction/-/react-direction-1.1.1.tgz",
-      "integrity": "sha512-1UEWRX6jnOA2y4H5WczZ44gOOjTEmlqv1uNW4GAJEO5+bauCBhv8snY65Iw5/VOS/ghKN9gr2KjnLKxrsvoMVw==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-direction/-/react-direction-1.1.4.tgz",
+      "integrity": "sha512-5pzg4FGQNpExhnhT2zlrP1wZFaYCd1K0nYWoFAdcYoYK868IEigqMX3B3f8yIoRlAhAeDWciLI6ZdCKHF9P4Vg==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -2456,15 +2406,16 @@
       }
     },
     "node_modules/@radix-ui/react-dismissable-layer": {
-      "version": "1.1.10",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.1.10.tgz",
-      "integrity": "sha512-IM1zzRV4W3HtVgftdQiiOmA0AdJlCtMLe00FXaHwgt3rAnNsIyDqshvkIW3hj/iu5hu8ERP7KIYki6NkqDxAwQ==",
+      "version": "1.1.19",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.1.19.tgz",
+      "integrity": "sha512-8g4pfOL9HoKKLWGiypT+dphVqjFfmcXO5GBnhsG6zI+lxAx/8feQpr+1LSN8Re3hiZ+XkLNS4O9ztK11/LzQ6w==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-escape-keydown": "1.1.1"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
+        "@radix-ui/react-use-effect-event": "0.0.5"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2482,17 +2433,18 @@
       }
     },
     "node_modules/@radix-ui/react-dropdown-menu": {
-      "version": "2.1.15",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dropdown-menu/-/react-dropdown-menu-2.1.15.tgz",
-      "integrity": "sha512-mIBnOjgwo9AH3FyKaSWoSu/dYj6VdhJ7frEPiGTeXCdUFHjl9h3mFh2wwhEtINOmYXWhdpf1rY2minFsmaNgVQ==",
+      "version": "2.1.24",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-dropdown-menu/-/react-dropdown-menu-2.1.24.tgz",
+      "integrity": "sha512-geq8l2rJkxvkXsT9RMgtUE3P8pITFpTsvYpbySi1IH4fZEABD/Gp85myayFgxk0ktljGMJnCbeFkyTusvSvv7g==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-menu": "2.1.15",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-menu": "2.1.24",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-controllable-state": "1.2.6"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2510,9 +2462,10 @@
       }
     },
     "node_modules/@radix-ui/react-focus-guards": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.1.2.tgz",
-      "integrity": "sha512-fyjAACV62oPV925xFCrH8DR5xWhg9KYtJT4s3u54jxp+L/hbpTY2kIeEFFbFe+a/HCE94zGQMZLIpVTPVZDhaA==",
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.1.6.tgz",
+      "integrity": "sha512-RNOJjfZMTyBM6xYmV3IVGXkPjIhcBAuv48POevAXwrGJhkWZ9p1rFoIS1JFooPuT193AZmRsCPhpoVJxx6OPoQ==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -2524,13 +2477,14 @@
       }
     },
     "node_modules/@radix-ui/react-focus-scope": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-scope/-/react-focus-scope-1.1.7.tgz",
-      "integrity": "sha512-t2ODlkXBQyn7jkl6TNaw/MtVEVvIGelJDCG41Okq/KwUsJBwQ4XVZsHAVUkK4mBv3ewiAS3PGuUWuY2BoK4ZUw==",
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-scope/-/react-focus-scope-1.1.16.tgz",
+      "integrity": "sha512-wmRZ2WWLvmt6KHy2rNPOdPUjwq5xOHY02+m+udwJTn0aNIox/rkskAvJTyTLGhPK6KgrUjlJUJpgmx/+wFiFIQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1"
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-callback-ref": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2548,11 +2502,12 @@
       }
     },
     "node_modules/@radix-ui/react-id": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-id/-/react-id-1.1.1.tgz",
-      "integrity": "sha512-kGkGegYIdQsOb4XjsfM97rXsiHaBwco+hFI66oO4s9LU+PLAC5oJ7khdOVFxkhsmlbpUqDAvXw11CluXP+jkHg==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-id/-/react-id-1.1.4.tgz",
+      "integrity": "sha512-TMQp2llA+RYn7JcjnrMnz7wN4pcVttPZnRZo52PLQsoLVKzNlVwUeHmfePgTgRluXFvlD3GD5g5MOVVTJCO0qA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2565,11 +2520,12 @@
       }
     },
     "node_modules/@radix-ui/react-label": {
-      "version": "2.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-label/-/react-label-2.1.7.tgz",
-      "integrity": "sha512-YT1GqPSL8kJn20djelMX7/cTRp/Y9w5IZHvfxQTVHrOqa2yMl7i/UfMqKRU5V7mEyKTrUVgJXhNQPVCG8PBLoQ==",
+      "version": "2.1.15",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-label/-/react-label-2.1.15.tgz",
+      "integrity": "sha512-o/rdYEwZTTo5tjknnPeyQFU45kUC4i/XyeDPP+HGyi6XqpOP6Zf5Ya5vh/Yfe9Id5JiuWnnAx2XqIeD3UYZt0g==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2587,28 +2543,29 @@
       }
     },
     "node_modules/@radix-ui/react-menu": {
-      "version": "2.1.15",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-menu/-/react-menu-2.1.15.tgz",
-      "integrity": "sha512-tVlmA3Vb9n8SZSd+YSbuFR66l87Wiy4du+YE+0hzKQEANA+7cWKH1WgqcEX4pXqxUFQKrWQGHdvEfw00TjFiew==",
+      "version": "2.1.24",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-menu/-/react-menu-2.1.24.tgz",
+      "integrity": "sha512-uW7RVuU6Lp/ZtfeY4b3kL32zccgEWvPv1+cf17ubYzHa9cL8AHokmk36cG/XEiH/smbQvumnieXX9j/e9RqJWA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-dismissable-layer": "1.1.10",
-        "@radix-ui/react-focus-guards": "1.1.2",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.7",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-roving-focus": "1.1.10",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-collection": "1.1.15",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-dismissable-layer": "1.1.19",
+        "@radix-ui/react-focus-guards": "1.1.6",
+        "@radix-ui/react-focus-scope": "1.1.16",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-popper": "1.3.7",
+        "@radix-ui/react-portal": "1.1.17",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-roving-focus": "1.1.19",
+        "@radix-ui/react-slot": "1.3.3",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
         "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
+        "react-remove-scroll": "^2.7.2"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2626,124 +2583,26 @@
       }
     },
     "node_modules/@radix-ui/react-popover": {
-      "version": "1.1.15",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-popover/-/react-popover-1.1.15.tgz",
-      "integrity": "sha512-kr0X2+6Yy/vJzLYJUPCZEc8SfQcf+1COFoAqauJm74umQhta9M7lNJHP7QQS3vkvcGLQUbWpMzwrXYwrYztHKA==",
+      "version": "1.1.23",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-popover/-/react-popover-1.1.23.tgz",
+      "integrity": "sha512-mw58MrBlyHWFisTOYignD0vf/3gdcgAR+9of1s9G/38CbFiUwH1nCDkc0AUM9IrXFgN5Ue8n45j9WCgyM1sbiQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dismissable-layer": "1.1.11",
-        "@radix-ui/react-focus-guards": "1.1.3",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.8",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-dismissable-layer": "1.1.19",
+        "@radix-ui/react-focus-guards": "1.1.6",
+        "@radix-ui/react-focus-scope": "1.1.16",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-popper": "1.3.7",
+        "@radix-ui/react-portal": "1.1.17",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-slot": "1.3.3",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
         "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-popover/node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg=="
-    },
-    "node_modules/@radix-ui/react-popover/node_modules/@radix-ui/react-dismissable-layer": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-dismissable-layer/-/react-dismissable-layer-1.1.11.tgz",
-      "integrity": "sha512-Nqcp+t5cTB8BinFkZgXiMJniQH0PsUt2k51FUhbdfeKvc4ACcG2uQniY/8+h1Yv6Kza4Q7lD7PQV0z0oicE0Mg==",
-      "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-escape-keydown": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-popover/node_modules/@radix-ui/react-focus-guards": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-focus-guards/-/react-focus-guards-1.1.3.tgz",
-      "integrity": "sha512-0rFg/Rj2Q62NCm62jZw0QX7a3sz6QCQU0LpZdNrJX8byRGaGVTqbrW9jAoIAHyMQqsNpeZ81YgSizOt5WXq0Pw==",
-      "peerDependencies": {
-        "@types/react": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-popover/node_modules/@radix-ui/react-popper": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.2.8.tgz",
-      "integrity": "sha512-0NJQ4LFFUuWkE7Oxf0htBKS6zLkkjBH+hM1uk7Ng705ReR8m/uelduy1DBo0PyBXPKVnBA6YBlU94MBGXrSBCw==",
-      "dependencies": {
-        "@floating-ui/react-dom": "^2.0.0",
-        "@radix-ui/react-arrow": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-layout-effect": "1.1.1",
-        "@radix-ui/react-use-rect": "1.1.1",
-        "@radix-ui/react-use-size": "1.1.1",
-        "@radix-ui/rect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-popover/node_modules/@radix-ui/react-presence": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.5.tgz",
-      "integrity": "sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==",
-      "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "react-remove-scroll": "^2.7.2"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2761,20 +2620,21 @@
       }
     },
     "node_modules/@radix-ui/react-popper": {
-      "version": "1.2.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.2.7.tgz",
-      "integrity": "sha512-IUFAccz1JyKcf/RjB552PlWwxjeCJB8/4KxT7EhBHOJM+mN7LdW+B3kacJXILm32xawcMMjb2i0cIZpo+f9kiQ==",
+      "version": "1.3.7",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-popper/-/react-popper-1.3.7.tgz",
+      "integrity": "sha512-UsJrrd7w4wuKKTdvd/DNERVlwSlUcyXzjhyDwBk+3aPOsCjOY6ZSbxuw8E6lZTjjfP8Cpd0J8VVkrYUWyGYXyg==",
+      "license": "MIT",
       "dependencies": {
         "@floating-ui/react-dom": "^2.0.0",
-        "@radix-ui/react-arrow": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-layout-effect": "1.1.1",
-        "@radix-ui/react-use-rect": "1.1.1",
-        "@radix-ui/react-use-size": "1.1.1",
-        "@radix-ui/rect": "1.1.1"
+        "@radix-ui/react-arrow": "1.1.15",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
+        "@radix-ui/react-use-layout-effect": "1.1.4",
+        "@radix-ui/react-use-rect": "1.1.4",
+        "@radix-ui/react-use-size": "1.1.4",
+        "@radix-ui/rect": "1.1.3"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2792,12 +2652,13 @@
       }
     },
     "node_modules/@radix-ui/react-portal": {
-      "version": "1.1.9",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-portal/-/react-portal-1.1.9.tgz",
-      "integrity": "sha512-bpIxvq03if6UNwXZ+HTK71JLh4APvnXntDc6XOX8UVq4XQOVl7lwok0AvIl+b8zgCw3fSaVTZMpAPPagXbKmHQ==",
+      "version": "1.1.17",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-portal/-/react-portal-1.1.17.tgz",
+      "integrity": "sha512-vKQLcWypUnwZVvfV7UkGahH2g6ySe8M8R+zYBwPrv5byZ9QAW6cQVvNKo7GgmD+p8aYb6D9JBuvy8/WhOno2wQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2815,12 +2676,12 @@
       }
     },
     "node_modules/@radix-ui/react-presence": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.4.tgz",
-      "integrity": "sha512-ueDqRbdc4/bkaQT3GIpLQssRlFgWaL/U2z/S31qRwwLWoxHLgry3SIfCwhxeQNbirEUXFa+lq3RL3oBYXtcmIA==",
+      "version": "1.1.10",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.10.tgz",
+      "integrity": "sha512-3wyzCQ6+ubRA+D4uv9m95JYLXxmOHp05qjrkjeA7uKHHtjpPggQzc6DAb0URl7j67oR0K2foO4ip27TiX037Bw==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2838,11 +2699,12 @@
       }
     },
     "node_modules/@radix-ui/react-primitive": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-primitive/-/react-primitive-2.1.3.tgz",
-      "integrity": "sha512-m9gTwRkhy2lvCPe6QJp4d3G1TYEUHn/FzJUtq9MjH46an1wJU+GdoGC5VLof8RX8Ft/DlpshApkhswDLZzHIcQ==",
+      "version": "2.1.10",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-primitive/-/react-primitive-2.1.10.tgz",
+      "integrity": "sha512-MucOnzh6hR5mid6VpkbglRAMYMjKLqRnGBbjXkzjK52fuQDd1qbkx78a5P40mkcnVXJdEVxm26E9OPAiUq7nBg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-slot": "1.2.3"
+        "@radix-ui/react-slot": "1.3.3"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2860,12 +2722,13 @@
       }
     },
     "node_modules/@radix-ui/react-progress": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-progress/-/react-progress-1.1.7.tgz",
-      "integrity": "sha512-vPdg/tF6YC/ynuBIJlk1mm7Le0VgW6ub6J2UWnTQ7/D23KXcPI1qy+0vBkgKgd38RCMJavBXpB83HPNFMTb0Fg==",
+      "version": "1.1.16",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-progress/-/react-progress-1.1.16.tgz",
+      "integrity": "sha512-5XnomAsoZZCY+KNTxbIghpGqPruZvKFNlvcAljVAOdDRDsH4/OZQxhtwo5wdtoDM5R6MhJBb2sPnDuRFep3lzg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-primitive": "2.1.3"
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2883,78 +2746,20 @@
       }
     },
     "node_modules/@radix-ui/react-radio-group": {
-      "version": "1.3.8",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-radio-group/-/react-radio-group-1.3.8.tgz",
-      "integrity": "sha512-VBKYIYImA5zsxACdisNQ3BjCBfmbGH3kQlnFVqlWU4tXwjy7cGX8ta80BcrO+WJXIn5iBylEH3K6ZTlee//lgQ==",
+      "version": "1.4.7",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-radio-group/-/react-radio-group-1.4.7.tgz",
+      "integrity": "sha512-cgYFEkntCxppHZgtSZ+7vh0wbZQ+IC7PPMw8DSnRG27B6kDd32/Zw0OJt7dGDigCoprMuWHjg2PvUn3PYvPFoQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-presence": "1.1.5",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-roving-focus": "1.1.11",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-use-previous": "1.1.1",
-        "@radix-ui/react-use-size": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-radio-group/node_modules/@radix-ui/primitive": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/primitive/-/primitive-1.1.3.tgz",
-      "integrity": "sha512-JTF99U/6XIjCBo0wqkU5sK10glYe27MRRsfwoiq5zzOEZLHU3A3KCMa5X/azekYRCJ0HlwI0crAXS/5dEHTzDg=="
-    },
-    "node_modules/@radix-ui/react-radio-group/node_modules/@radix-ui/react-presence": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-presence/-/react-presence-1.1.5.tgz",
-      "integrity": "sha512-/jfEwNDdQVBCNvjkGit4h6pMOzq8bHkopq458dPt2lMjx+eBQUohZNG9A7DtO/O5ukSbxuaNGXMjHicgwy6rQQ==",
-      "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
-      },
-      "peerDependencies": {
-        "@types/react": "*",
-        "@types/react-dom": "*",
-        "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc",
-        "react-dom": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
-      },
-      "peerDependenciesMeta": {
-        "@types/react": {
-          "optional": true
-        },
-        "@types/react-dom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@radix-ui/react-radio-group/node_modules/@radix-ui/react-roving-focus": {
-      "version": "1.1.11",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.1.11.tgz",
-      "integrity": "sha512-7A6S9jSgm/S+7MdtNDSb+IU859vQqJ/QAtcYQcfFC6W8RS4IxIZDldLR0xqCFZ6DCyrQLjLPsxtTNch5jVA4lA==",
-      "dependencies": {
-        "@radix-ui/primitive": "1.1.3",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-roving-focus": "1.1.19",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-size": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -2972,19 +2777,22 @@
       }
     },
     "node_modules/@radix-ui/react-roving-focus": {
-      "version": "1.1.10",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.1.10.tgz",
-      "integrity": "sha512-dT9aOXUen9JSsxnMPv/0VqySQf5eDQ6LCk5Sw28kamz8wSOW2bJdlX2Bg5VUIIcV+6XlHpWTIuTPCf/UNIyq8Q==",
+      "version": "1.1.19",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-roving-focus/-/react-roving-focus-1.1.19.tgz",
+      "integrity": "sha512-V9jI6hDjT7l3jsCQD9bLNvDLM3tH/gdbOTp7Tefp3hbbgCGQoK7tUvrWiRlcoBHIZ809ElXwNQwVo0B98LuTXQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-collection": "1.1.15",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-is-hydrated": "0.1.3",
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3002,19 +2810,20 @@
       }
     },
     "node_modules/@radix-ui/react-scroll-area": {
-      "version": "1.2.9",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-scroll-area/-/react-scroll-area-1.2.9.tgz",
-      "integrity": "sha512-YSjEfBXnhUELsO2VzjdtYYD4CfQjvao+lhhrX5XsHD7/cyUNzljF1FHEbgTPN7LH2MClfwRMIsYlqTYpKTTe2A==",
+      "version": "1.2.18",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-scroll-area/-/react-scroll-area-1.2.18.tgz",
+      "integrity": "sha512-Zn5Cd171wxsO3Dfg8HaW6RifTb9CYTKQJHs/G4+LN1GfmJpaQMZQyQxMprVPHpaz7QY4l9BxK2JwQuzHsXC8nA==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/number": "1.1.1",
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/number": "1.1.3",
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3032,31 +2841,33 @@
       }
     },
     "node_modules/@radix-ui/react-select": {
-      "version": "2.2.5",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-select/-/react-select-2.2.5.tgz",
-      "integrity": "sha512-HnMTdXEVuuyzx63ME0ut4+sEMYW6oouHWNGUZc7ddvUWIcfCva/AMoqEW/3wnEllriMWBa0RHspCYnfCWJQYmA==",
+      "version": "2.3.7",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-select/-/react-select-2.3.7.tgz",
+      "integrity": "sha512-WFGImkmbzcfxeIwq/+4HvRN0pizBwbwQUED4I13ezQsDdfl38ZntN6TmR8XaSzPBqoCToe8rF75j6NPNDSzhbg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/number": "1.1.1",
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-collection": "1.1.7",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-dismissable-layer": "1.1.10",
-        "@radix-ui/react-focus-guards": "1.1.2",
-        "@radix-ui/react-focus-scope": "1.1.7",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.7",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-callback-ref": "1.1.1",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1",
-        "@radix-ui/react-use-previous": "1.1.1",
-        "@radix-ui/react-visually-hidden": "1.2.3",
+        "@radix-ui/number": "1.1.3",
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-collection": "1.1.15",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-dismissable-layer": "1.1.19",
+        "@radix-ui/react-focus-guards": "1.1.6",
+        "@radix-ui/react-focus-scope": "1.1.16",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-popper": "1.3.7",
+        "@radix-ui/react-portal": "1.1.17",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-slot": "1.3.3",
+        "@radix-ui/react-use-callback-ref": "1.1.4",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-layout-effect": "1.1.4",
+        "@radix-ui/react-use-previous": "1.1.4",
+        "@radix-ui/react-visually-hidden": "1.2.11",
         "aria-hidden": "^1.2.4",
-        "react-remove-scroll": "^2.6.3"
+        "react-remove-scroll": "^2.7.2"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3074,11 +2885,12 @@
       }
     },
     "node_modules/@radix-ui/react-separator": {
-      "version": "1.1.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-separator/-/react-separator-1.1.7.tgz",
-      "integrity": "sha512-0HEb8R9E8A+jZjvmFCy/J4xhbXy3TV+9XSnGJ3KvTtjlIUy/YQ/p6UYZvi7YbeoeXdyU9+Y3scizK6hkY37baA==",
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-separator/-/react-separator-1.1.15.tgz",
+      "integrity": "sha512-jOLO4lssEzWpoDu7G+Ze4VjwMRUBt291pnZD0gmalREZipnTX3wadQo7Fy48GCTfe14/YRN6rw/rOJqrE85Wxw==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3096,11 +2908,12 @@
       }
     },
     "node_modules/@radix-ui/react-slot": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.2.3.tgz",
-      "integrity": "sha512-aeNmHnBxbi2St0au6VBVC7JXFlhLlOnvIIlePNniyUNAClzmtAUEY8/pBiK3iHjufOlwA+c20/8jngo7xcrg8A==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-slot/-/react-slot-1.3.3.tgz",
+      "integrity": "sha512-qx7oqnYbxnK9kYI9m317qmFmEgo6ywqWvbTogdj7cL9p3/yx4M48p7Rnw5z3H890cL/ow/EeWJsuTykeZVXP5Q==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-compose-refs": "1.1.2"
+        "@radix-ui/react-compose-refs": "1.1.5"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3113,18 +2926,19 @@
       }
     },
     "node_modules/@radix-ui/react-tabs": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-tabs/-/react-tabs-1.1.12.tgz",
-      "integrity": "sha512-GTVAlRVrQrSw3cEARM0nAx73ixrWDPNZAruETn3oHCNP6SbZ/hNxdxp+u7VkIEv3/sFoLq1PfcHrl7Pnp0CDpw==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-tabs/-/react-tabs-1.1.21.tgz",
+      "integrity": "sha512-UKxJlZid7FVtsk/WTxj4i4uSEgj2Au+KBbS7SQyTlzMhhn+86Cz3tISZdTa87bfEfcuvZezf2ZsxD4xuEKtkog==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-direction": "1.1.1",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-roving-focus": "1.1.10",
-        "@radix-ui/react-use-controllable-state": "1.2.2"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-direction": "1.1.4",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-roving-focus": "1.1.19",
+        "@radix-ui/react-use-controllable-state": "1.2.6"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3142,22 +2956,24 @@
       }
     },
     "node_modules/@radix-ui/react-tooltip": {
-      "version": "1.2.7",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-tooltip/-/react-tooltip-1.2.7.tgz",
-      "integrity": "sha512-Ap+fNYwKTYJ9pzqW+Xe2HtMRbQ/EeWkj2qykZ6SuEV4iS/o1bZI5ssJbk4D2r8XuDuOBVz/tIx2JObtuqU+5Zw==",
+      "version": "1.2.16",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-tooltip/-/react-tooltip-1.2.16.tgz",
+      "integrity": "sha512-6EamKFRRnlpdadndbZ6LMwycfwkwPte1B42hs6QA0gYhjaOKqW4PZ4pjaW9UrlDX5eVt/OjncE7BFTPL5nmZhg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/primitive": "1.1.2",
-        "@radix-ui/react-compose-refs": "1.1.2",
-        "@radix-ui/react-context": "1.1.2",
-        "@radix-ui/react-dismissable-layer": "1.1.10",
-        "@radix-ui/react-id": "1.1.1",
-        "@radix-ui/react-popper": "1.2.7",
-        "@radix-ui/react-portal": "1.1.9",
-        "@radix-ui/react-presence": "1.1.4",
-        "@radix-ui/react-primitive": "2.1.3",
-        "@radix-ui/react-slot": "1.2.3",
-        "@radix-ui/react-use-controllable-state": "1.2.2",
-        "@radix-ui/react-visually-hidden": "1.2.3"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-compose-refs": "1.1.5",
+        "@radix-ui/react-context": "1.2.2",
+        "@radix-ui/react-dismissable-layer": "1.1.19",
+        "@radix-ui/react-id": "1.1.4",
+        "@radix-ui/react-popper": "1.3.7",
+        "@radix-ui/react-portal": "1.1.17",
+        "@radix-ui/react-presence": "1.1.10",
+        "@radix-ui/react-primitive": "2.1.10",
+        "@radix-ui/react-slot": "1.3.3",
+        "@radix-ui/react-use-controllable-state": "1.2.6",
+        "@radix-ui/react-use-layout-effect": "1.1.4",
+        "@radix-ui/react-visually-hidden": "1.2.11"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3175,9 +2991,10 @@
       }
     },
     "node_modules/@radix-ui/react-use-callback-ref": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-callback-ref/-/react-use-callback-ref-1.1.1.tgz",
-      "integrity": "sha512-FkBMwD+qbGQeMu1cOHnuGB6x4yzPjho8ap5WtbEJ26umhgqVXbhekKUQO+hZEL1vU92a3wHwdp0HAcqAUF5iDg==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-callback-ref/-/react-use-callback-ref-1.1.4.tgz",
+      "integrity": "sha512-R6OUY2e2fA6Yn6s+VSx5KBV6Nx8LQEhu+cz7LCej18rQ1HLyg9PSC9jP/ZNx0o6FAIK9c0F1kHylzSxKsdlkrQ==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -3189,12 +3006,14 @@
       }
     },
     "node_modules/@radix-ui/react-use-controllable-state": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-controllable-state/-/react-use-controllable-state-1.2.2.tgz",
-      "integrity": "sha512-BjasUjixPFdS+NKkypcyyN5Pmg83Olst0+c6vGov0diwTEo6mgdqVR6hxcEgFuh4QrAs7Rc+9KuGJ9TVCj0Zzg==",
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-controllable-state/-/react-use-controllable-state-1.2.6.tgz",
+      "integrity": "sha512-uEQJGT97ZA/TgP/Hydw47lHu+/vQj6z/0jA+WeTbK1o9Rx45GImjpD0tc3W5ad3D6XTSR6e1yEO0FvGq6WQfVQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-effect-event": "0.0.2",
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/primitive": "1.1.7",
+        "@radix-ui/react-use-effect-event": "0.0.5",
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3207,11 +3026,12 @@
       }
     },
     "node_modules/@radix-ui/react-use-effect-event": {
-      "version": "0.0.2",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-effect-event/-/react-use-effect-event-0.0.2.tgz",
-      "integrity": "sha512-Qp8WbZOBe+blgpuUT+lw2xheLP8q0oatc9UpmiemEICxGvFLYmHm9QowVZGHtJlGbS6A6yJ3iViad/2cVjnOiA==",
+      "version": "0.0.5",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-effect-event/-/react-use-effect-event-0.0.5.tgz",
+      "integrity": "sha512-7cshFL8HGS/7HEiHH+9kL9HBwp2sa9yX18Knwek6KYWmXwM7pegMgta2AXMQKI+rq3JnfSj9x8wYqFMTdG1Jgg==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3223,13 +3043,11 @@
         }
       }
     },
-    "node_modules/@radix-ui/react-use-escape-keydown": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-escape-keydown/-/react-use-escape-keydown-1.1.1.tgz",
-      "integrity": "sha512-Il0+boE7w/XebUHyBjroE+DbByORGR9KKmITzbR7MyQ4akpORYP/ZmbhAr0DG7RmmBqoOnZdy2QlvajJ2QA59g==",
-      "dependencies": {
-        "@radix-ui/react-use-callback-ref": "1.1.1"
-      },
+    "node_modules/@radix-ui/react-use-is-hydrated": {
+      "version": "0.1.3",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-is-hydrated/-/react-use-is-hydrated-0.1.3.tgz",
+      "integrity": "sha512-umO/aJ+82CpOnhDZUTbILCQf7kU/g0iv+oGs/Q8jw7IkhWBzaEP4sA268PhFAJTFetbwp3ICc6ktpI4TqtxcIw==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -3241,9 +3059,10 @@
       }
     },
     "node_modules/@radix-ui/react-use-layout-effect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-layout-effect/-/react-use-layout-effect-1.1.1.tgz",
-      "integrity": "sha512-RbJRS4UWQFkzHTTwVymMTUv8EqYhOp8dOOviLj2ugtTiXRaRQS7GLGxZTLL1jWhMeoSCf5zmcZkqTl9IiYfXcQ==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-layout-effect/-/react-use-layout-effect-1.1.4.tgz",
+      "integrity": "sha512-K20DkRkUwDnxEYMBPcg3Y6voLkEy5p5QQmszZgLngKKiC7dzBR/aEuK3w1qlx2JWDUNH6FluahYdgR3BP+QbYw==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -3255,9 +3074,10 @@
       }
     },
     "node_modules/@radix-ui/react-use-previous": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-previous/-/react-use-previous-1.1.1.tgz",
-      "integrity": "sha512-2dHfToCj/pzca2Ck724OZ5L0EVrr3eHRNsG/b3xQJLA2hZpVCS99bLAX+hm1IHXDEnzU6by5z/5MIY794/a8NQ==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-previous/-/react-use-previous-1.1.4.tgz",
+      "integrity": "sha512-XoSLhbRbqxFtgJoi2fNHA3C6pDlY34x508vUpUGoFZfvePfHXHbE1lC4FYFMnJWgiCRroSTw6fOsXQoVS9RwZg==",
+      "license": "MIT",
       "peerDependencies": {
         "@types/react": "*",
         "react": "^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc"
@@ -3269,11 +3089,12 @@
       }
     },
     "node_modules/@radix-ui/react-use-rect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-rect/-/react-use-rect-1.1.1.tgz",
-      "integrity": "sha512-QTYuDesS0VtuHNNvMh+CjlKJ4LJickCMUAqjlE3+j8w+RlRpwyX3apEQKGFzbZGdo7XNG1tXa+bQqIE7HIXT2w==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-rect/-/react-use-rect-1.1.4.tgz",
+      "integrity": "sha512-cSOCh6JlkmfjLyNcLiu2nB4v+nm+dkZ+Q5KHWk/soo4U7ZLiEQFKHK9/YmtBHjfCEaU43IBKQOc4/uJmCaiCTQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/rect": "1.1.1"
+        "@radix-ui/rect": "1.1.3"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3286,11 +3107,12 @@
       }
     },
     "node_modules/@radix-ui/react-use-size": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-size/-/react-use-size-1.1.1.tgz",
-      "integrity": "sha512-ewrXRDTAqAXlkl6t/fkXWNAhFX9I+CkKlw6zjEwk86RSPKwZr3xpBRso655aqYafwtnbpHLj6toFzmd6xdVptQ==",
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-use-size/-/react-use-size-1.1.4.tgz",
+      "integrity": "sha512-D3anSY15EJoxrihpsXI6SMrmmonnQtR2ni7arO+Lfdg3O95b9hNXxONk8jA5C8ANdF/h5HMAxejgs8PWJ6rlhw==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-use-layout-effect": "1.1.1"
+        "@radix-ui/react-use-layout-effect": "1.1.4"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3303,11 +3125,12 @@
       }
     },
     "node_modules/@radix-ui/react-visually-hidden": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@radix-ui/react-visually-hidden/-/react-visually-hidden-1.2.3.tgz",
-      "integrity": "sha512-pzJq12tEaaIhqjbzpCuv/OypJY/BPavOofm+dbab+MHLajy277+1lLm6JFcGgF5eskJ6mquGirhXY2GD/8u8Ug==",
+      "version": "1.2.11",
+      "resolved": "https://registry.npmjs.org/@radix-ui/react-visually-hidden/-/react-visually-hidden-1.2.11.tgz",
+      "integrity": "sha512-NFS86RYYZb4/exihaESBGOpMJFz8MGLAfu3mOBSGByVnVPC9JPASfYubxd/8KbkQK0sYAv8lVQDEQukDX/qXvQ==",
+      "license": "MIT",
       "dependencies": {
-        "@radix-ui/react-primitive": "2.1.3"
+        "@radix-ui/react-primitive": "2.1.10"
       },
       "peerDependencies": {
         "@types/react": "*",
@@ -3325,9 +3148,10 @@
       }
     },
     "node_modules/@radix-ui/rect": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/@radix-ui/rect/-/rect-1.1.1.tgz",
-      "integrity": "sha512-HPwpGIzkl28mWyZqG52jiqDJ12waP11Pa1lGoiyUkIEuMLBP0oeK/C89esbXrxsky5we7dfd8U58nm0SgAWpVw=="
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@radix-ui/rect/-/rect-1.1.3.tgz",
+      "integrity": "sha512-JtyZR+mqgBibTo8xea3B6ZRmzZiM/YeVBtUkas6zMuXjAlfIFIW2FgqeM9eLyvEaYX66vr6DJMK+4U6LV0KhNw==",
+      "license": "MIT"
     },
     "node_modules/@rolldown/pluginutils": {
       "version": "1.0.0-beta.27",
@@ -3702,7 +3526,7 @@
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
       "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT"
     },
     "node_modules/@standard-schema/utils": {
@@ -3720,196 +3544,202 @@
       }
     },
     "node_modules/@tailwindcss/node": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.1.11.tgz",
-      "integrity": "sha512-yzhzuGRmv5QyU9qLNg4GTlYI6STedBWRE7NjxP45CsFYYq9taI0zJXZBMqIC/c8fViNLhmrbpSFS57EoxUmD6Q==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.3.3.tgz",
+      "integrity": "sha512-/T8IKEsf9VTU6tLjgC7+sv2mOPtQxzE2jMw7u4Tt40Tx+QSZxpzh95/H6cMKoja9XuW7iMdLJYBB0o9G1CaAgg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@ampproject/remapping": "^2.3.0",
-        "enhanced-resolve": "^5.18.1",
-        "jiti": "^2.4.2",
-        "lightningcss": "1.30.1",
-        "magic-string": "^0.30.17",
+        "@jridgewell/remapping": "^2.3.5",
+        "enhanced-resolve": "^5.24.1",
+        "jiti": "^2.7.0",
+        "lightningcss": "1.32.0",
+        "magic-string": "^0.30.21",
         "source-map-js": "^1.2.1",
-        "tailwindcss": "4.1.11"
+        "tailwindcss": "4.3.3"
       }
     },
     "node_modules/@tailwindcss/oxide": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.1.11.tgz",
-      "integrity": "sha512-Q69XzrtAhuyfHo+5/HMgr1lAiPP/G40OMFAnws7xcFEYqcypZmdW8eGXaOUIeOl1dzPJBPENXgbjsOyhg2nkrg==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.3.3.tgz",
+      "integrity": "sha512-krXjAikiaFSPaK/FkAQT5UTx3VormQaiZ5hBFlJZ9UFQGB/rwg1MZIhHAG9smMQRTdyJxP6Qt5MwMtdyU5FWrA==",
       "dev": true,
-      "hasInstallScript": true,
-      "dependencies": {
-        "detect-libc": "^2.0.4",
-        "tar": "^7.4.3"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       },
       "optionalDependencies": {
-        "@tailwindcss/oxide-android-arm64": "4.1.11",
-        "@tailwindcss/oxide-darwin-arm64": "4.1.11",
-        "@tailwindcss/oxide-darwin-x64": "4.1.11",
-        "@tailwindcss/oxide-freebsd-x64": "4.1.11",
-        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.1.11",
-        "@tailwindcss/oxide-linux-arm64-gnu": "4.1.11",
-        "@tailwindcss/oxide-linux-arm64-musl": "4.1.11",
-        "@tailwindcss/oxide-linux-x64-gnu": "4.1.11",
-        "@tailwindcss/oxide-linux-x64-musl": "4.1.11",
-        "@tailwindcss/oxide-wasm32-wasi": "4.1.11",
-        "@tailwindcss/oxide-win32-arm64-msvc": "4.1.11",
-        "@tailwindcss/oxide-win32-x64-msvc": "4.1.11"
+        "@tailwindcss/oxide-android-arm64": "4.3.3",
+        "@tailwindcss/oxide-darwin-arm64": "4.3.3",
+        "@tailwindcss/oxide-darwin-x64": "4.3.3",
+        "@tailwindcss/oxide-freebsd-x64": "4.3.3",
+        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.3",
+        "@tailwindcss/oxide-linux-arm64-gnu": "4.3.3",
+        "@tailwindcss/oxide-linux-arm64-musl": "4.3.3",
+        "@tailwindcss/oxide-linux-x64-gnu": "4.3.3",
+        "@tailwindcss/oxide-linux-x64-musl": "4.3.3",
+        "@tailwindcss/oxide-wasm32-wasi": "4.3.3",
+        "@tailwindcss/oxide-win32-arm64-msvc": "4.3.3",
+        "@tailwindcss/oxide-win32-x64-msvc": "4.3.3"
       }
     },
     "node_modules/@tailwindcss/oxide-android-arm64": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.1.11.tgz",
-      "integrity": "sha512-3IfFuATVRUMZZprEIx9OGDjG3Ou3jG4xQzNTvjDoKmU9JdmoCohQJ83MYd0GPnQIu89YoJqvMM0G3uqLRFtetg==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.3.tgz",
+      "integrity": "sha512-Y85A2gmPSkl5Ve5qR86GL4HT509cFqQh1aes9p3sSkyTPwt0Pppf3GkwGe4JPACcRYjgJIEhQgM6dBClnr0NYw==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "android"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-darwin-arm64": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.1.11.tgz",
-      "integrity": "sha512-ESgStEOEsyg8J5YcMb1xl8WFOXfeBmrhAwGsFxxB2CxY9evy63+AtpbDLAyRkJnxLy2WsD1qF13E97uQyP1lfQ==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.3.3.tgz",
+      "integrity": "sha512-BiaWatpBcERQFDlOjRDpIVXuFK5PJez5SA4JMg6VYZdBYU+qKfV/vqjcIs+IYmtitf1xYQZTwXvU/8y4lfZUGw==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "darwin"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-darwin-x64": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.1.11.tgz",
-      "integrity": "sha512-EgnK8kRchgmgzG6jE10UQNaH9Mwi2n+yw1jWmof9Vyg2lpKNX2ioe7CJdf9M5f8V9uaQxInenZkOxnTVL3fhAw==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.3.tgz",
+      "integrity": "sha512-fAeUqfV5ndhxRwai8cXGzdLvul9utWOmeTkv69unv4ZXixjn61Z+p9lCWdwOwA3TYboG3BwdVuN/RDjhBRl0mw==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "darwin"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-freebsd-x64": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.1.11.tgz",
-      "integrity": "sha512-xdqKtbpHs7pQhIKmqVpxStnY1skuNh4CtbcyOHeX1YBE0hArj2romsFGb6yUmzkq/6M24nkxDqU8GYrKrz+UcA==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.3.tgz",
+      "integrity": "sha512-iyf5bV6+wnAlflVeEy7R25dupxTNECZN5QMI0qNT6eT+EgaGdZcKhGkr5SdoaWiLJ3spLqIY9VCeSGrwmtg4kw==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "freebsd"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm-gnueabihf": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.1.11.tgz",
-      "integrity": "sha512-ryHQK2eyDYYMwB5wZL46uoxz2zzDZsFBwfjssgB7pzytAeCCa6glsiJGjhTEddq/4OsIjsLNMAiMlHNYnkEEeg==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.3.tgz",
+      "integrity": "sha512-aAYUprJAJQWWbRrPvtjdroZ56Md+JM8pMiopS6xGEwDfLhqj+2ver2p4nU4Mb3CRqcMmNBjo8KkUgcxhkzVQGQ==",
       "cpu": [
         "arm"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm64-gnu": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.1.11.tgz",
-      "integrity": "sha512-mYwqheq4BXF83j/w75ewkPJmPZIqqP1nhoghS9D57CLjsh3Nfq0m4ftTotRYtGnZd3eCztgbSPJ9QhfC91gDZQ==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.3.tgz",
+      "integrity": "sha512-nDxldcEENOxZRzC2uu9jrutZdAAQtb+8WWDCSnWL1zvBk1+FN+x6MtDViPB5AJMfttVCUhehGWus3XBPgatM/w==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-linux-arm64-musl": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.1.11.tgz",
-      "integrity": "sha512-m/NVRFNGlEHJrNVk3O6I9ggVuNjXHIPoD6bqay/pubtYC9QIdAMpS+cswZQPBLvVvEF6GtSNONbDkZrjWZXYNQ==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.3.tgz",
+      "integrity": "sha512-Md44bD6veX/PC5iyF8cDVnw4HBIANZepRZZ7a8DQOvkfo5WUBwcp6iAuCUz23u+4SUkhJlD3eL7hNdW8ezd/kA==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-linux-x64-gnu": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.1.11.tgz",
-      "integrity": "sha512-YW6sblI7xukSD2TdbbaeQVDysIm/UPJtObHJHKxDEcW2exAtY47j52f8jZXkqE1krdnkhCMGqP3dbniu1Te2Fg==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.3.tgz",
+      "integrity": "sha512-tx7us1muwOKAKWao2v/GaafFeQboE6aj88vC6ziN2NCGcRm8gWUhwjzg+YdVB1e4boAtdtma4L43onunI6NS4w==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-linux-x64-musl": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.1.11.tgz",
-      "integrity": "sha512-e3C/RRhGunWYNC3aSF7exsQkdXzQ/M+aYuZHKnw4U7KQwTJotnWsGOIVih0s2qQzmEzOFIJ3+xt7iq67K/p56Q==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.3.tgz",
+      "integrity": "sha512-SJxX60smvHgasZoBy11dX6YRjXJFovwWBoedhbQPOBzgFWBHGB+TVPWB9BxzR7TTxU8FQZAI2AyiNCMzFm8Img==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "linux"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.1.11.tgz",
-      "integrity": "sha512-Xo1+/GU0JEN/C/dvcammKHzeM6NqKovG+6921MR6oadee5XPBaKOumrJCXvopJ/Qb5TH7LX/UAywbqrP4lax0g==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.3.tgz",
+      "integrity": "sha512-jx1+rPhY/5Ympkktd656HBWEBLxP7dH06losBLjjf5vgCODXvi9KhtftWcMIwTFIDqBr7cRnQkdLnAG+IOlGvQ==",
       "bundleDependencies": [
         "@napi-rs/wasm-runtime",
         "@emnapi/core",
@@ -3922,32 +3752,33 @@
         "wasm32"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "dependencies": {
-        "@emnapi/core": "^1.4.3",
-        "@emnapi/runtime": "^1.4.3",
-        "@emnapi/wasi-threads": "^1.0.2",
-        "@napi-rs/wasm-runtime": "^0.2.11",
-        "@tybys/wasm-util": "^0.9.0",
-        "tslib": "^2.8.0"
+        "@emnapi/core": "^1.11.1",
+        "@emnapi/runtime": "^1.11.1",
+        "@emnapi/wasi-threads": "^1.2.2",
+        "@napi-rs/wasm-runtime": "^1.1.4",
+        "@tybys/wasm-util": "^0.10.2",
+        "tslib": "^2.8.1"
       },
       "engines": {
         "node": ">=14.0.0"
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/core": {
-      "version": "1.4.3",
+      "version": "1.11.1",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
       "optional": true,
       "dependencies": {
-        "@emnapi/wasi-threads": "1.0.2",
+        "@emnapi/wasi-threads": "1.2.2",
         "tslib": "^2.4.0"
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/runtime": {
-      "version": "1.4.3",
+      "version": "1.11.1",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
@@ -3957,7 +3788,7 @@
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/wasi-threads": {
-      "version": "1.0.2",
+      "version": "1.2.2",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
@@ -3967,19 +3798,25 @@
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@napi-rs/wasm-runtime": {
-      "version": "0.2.11",
+      "version": "1.1.4",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
       "optional": true,
       "dependencies": {
-        "@emnapi/core": "^1.4.3",
-        "@emnapi/runtime": "^1.4.3",
-        "@tybys/wasm-util": "^0.9.0"
+        "@tybys/wasm-util": "^0.10.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/Brooooooklyn"
+      },
+      "peerDependencies": {
+        "@emnapi/core": "^1.7.1",
+        "@emnapi/runtime": "^1.7.1"
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@tybys/wasm-util": {
-      "version": "0.9.0",
+      "version": "0.10.2",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
@@ -3989,86 +3826,89 @@
       }
     },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/tslib": {
-      "version": "2.8.0",
+      "version": "2.8.1",
       "dev": true,
       "inBundle": true,
       "license": "0BSD",
       "optional": true
     },
     "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.1.11.tgz",
-      "integrity": "sha512-UgKYx5PwEKrac3GPNPf6HVMNhUIGuUh4wlDFR2jYYdkX6pL/rn73zTq/4pzUm8fOjAn5L8zDeHp9iXmUGOXZ+w==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.3.tgz",
+      "integrity": "sha512-3rc292Ca2ceK6Ulcc/bAVnTs/3nDtoPhyEKlgPv+yQJQi/JS/AMJlqzxvlDacL1nekbrcf6bTqp/jV4qgnPxNQ==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "win32"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/oxide-win32-x64-msvc": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.1.11.tgz",
-      "integrity": "sha512-YfHoggn1j0LK7wR82TOucWc5LDCguHnoS879idHekmmiR7g9HUtMw9MI0NHatS28u/Xlkfi9w5RJWgz2Dl+5Qg==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.3.tgz",
+      "integrity": "sha512-yJ0pwIVc/nYeGoV02WtsN8KYyLQv7kyI2wDnkezyJlGGjkd4QLwDGAwl47YpPJeuI0M0ObaXGSPjvWDPeTPggw==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MIT",
       "optional": true,
       "os": [
         "win32"
       ],
       "engines": {
-        "node": ">= 10"
+        "node": ">= 20"
       }
     },
     "node_modules/@tailwindcss/postcss": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/postcss/-/postcss-4.1.11.tgz",
-      "integrity": "sha512-q/EAIIpF6WpLhKEuQSEVMZNMIY8KhWoAemZ9eylNAih9jxMGAYPPWBn3I9QL/2jZ+e7OEz/tZkX5HwbBR4HohA==",
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/postcss/-/postcss-4.3.3.tgz",
+      "integrity": "sha512-JTSZZGQi1AyKirbLN3azmjVzef92tcX7h+iSqPdaeStyFpGpDlKvvpxeOE8njhbUanbRwr3z8DyzhICWnMtQeg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@alloc/quick-lru": "^5.2.0",
-        "@tailwindcss/node": "4.1.11",
-        "@tailwindcss/oxide": "4.1.11",
-        "postcss": "^8.4.41",
-        "tailwindcss": "4.1.11"
+        "@tailwindcss/node": "4.3.3",
+        "@tailwindcss/oxide": "4.3.3",
+        "postcss": "^8.5.16",
+        "tailwindcss": "4.3.3"
       }
     },
     "node_modules/@tailwindcss/typography": {
-      "version": "0.5.16",
-      "resolved": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.16.tgz",
-      "integrity": "sha512-0wDLwCVF5V3x3b1SGXPCDcdsbDHMBe+lkFzBRaHeLvNi+nrrnZ1lA18u+OTWO8iSWU2GxUOCvlXtDuqftc1oiA==",
+      "version": "0.5.20",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.20.tgz",
+      "integrity": "sha512-hwbzQuNUfcPvbegQFatVPl/MY/tcM9KLl963hQ5laJKPh81TEZ1+dNG9PirGvcaDBkp+BCshExAyKVPW91dozw==",
+      "license": "MIT",
       "dependencies": {
-        "lodash.castarray": "^4.4.0",
-        "lodash.isplainobject": "^4.0.6",
-        "lodash.merge": "^4.6.2",
         "postcss-selector-parser": "6.0.10"
       },
       "peerDependencies": {
-        "tailwindcss": ">=3.0.0 || insiders || >=4.0.0-alpha.20 || >=4.0.0-beta.1"
+        "tailwindcss": ">=3.0.0 || >=4.0.0 || insiders"
       }
     },
     "node_modules/@tanstack/query-core": {
-      "version": "5.83.0",
-      "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.83.0.tgz",
-      "integrity": "sha512-0M8dA+amXUkyz5cVUm/B+zSk3xkQAcuXuz5/Q/LveT4ots2rBpPTZOzd7yJa2Utsf8D2Upl5KyjhHRY+9lB/XA==",
+      "version": "5.103.3",
+      "resolved": "https://registry.npmjs.org/@tanstack/query-core/-/query-core-5.103.3.tgz",
+      "integrity": "sha512-w6gJ5Alt+s55Wuok6/aURtR3AufW3PuNjnM0b3RC1xUz3MVA0EC9j7U3texGftvtOTYWiPVvQzCZjv3Cvzwc/g==",
+      "license": "MIT",
       "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/tannerlinsley"
       }
     },
     "node_modules/@tanstack/react-query": {
-      "version": "5.83.0",
-      "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.83.0.tgz",
-      "integrity": "sha512-/XGYhZ3foc5H0VM2jLSD/NyBRIOK4q9kfeml4+0x2DlL6xVuAcVEW+hTlTapAmejObg0i3eNqhkr2dT+eciwoQ==",
+      "version": "5.103.3",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-query/-/react-query-5.103.3.tgz",
+      "integrity": "sha512-QJMF0QUwJaFm6rrYAq1mlYyMsdiqd9w6gAsFSy+F+8g6/8pQrRy9u3a2yQGpSAmMO4DAZmRHwFZ8UulLaJkBmg==",
+      "license": "MIT",
       "dependencies": {
-        "@tanstack/query-core": "5.83.0"
+        "@tanstack/query-core": "5.103.3"
       },
       "funding": {
         "type": "github",
@@ -4138,9 +3978,9 @@
       "license": "MIT"
     },
     "node_modules/@testing-library/react": {
-      "version": "16.3.1",
-      "resolved": "https://registry.npmmirror.com/@testing-library/react/-/react-16.3.1.tgz",
-      "integrity": "sha512-gr4KtAWqIOQoucWYD/f6ki+j5chXfcPc74Col/6poTyqTmn7zRmodWahWRCp8tYd+GMqBonw6hstNzqjbs6gjw==",
+      "version": "16.3.3",
+      "resolved": "https://registry.npmjs.org/@testing-library/react/-/react-16.3.3.tgz",
+      "integrity": "sha512-Uo193NgQbPMz6lrrhtRQQFcMC6Re/ELLFbbuVL30WDlZxlpZf9/lMHTAVxPRLw1q1iu9OJmR1c2BLiENRstdBg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4321,20 +4161,22 @@
       "integrity": "sha512-AUZTa7hQ2KY5L7AmtSiqxlhWxb4ina0yd8hNbl4TWuqnv/pFP0nDMb3YrfSBf4hJVGLh2YEIBfKaBW/9UEl6IQ=="
     },
     "node_modules/@types/react": {
-      "version": "19.1.8",
-      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.1.8.tgz",
-      "integrity": "sha512-AwAfQ2Wa5bCx9WP8nZL2uMZWod7J7/JSplxbTmBQ5ms6QpqNYm672H0Vu9ZVKVngQ+ii4R/byguVEUZQyeg44g==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz",
+      "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==",
+      "license": "MIT",
       "dependencies": {
-        "csstype": "^3.0.2"
+        "csstype": "^3.2.2"
       }
     },
     "node_modules/@types/react-dom": {
-      "version": "19.1.6",
-      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.1.6.tgz",
-      "integrity": "sha512-4hOiT/dwO8Ko0gV1m/TJZYk3y0KBnY9vzDh7W+DH17b2HFSOGgdj33dhihPeuy3l0q23+4e+hoXHV6hCC4dCXw==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q==",
       "devOptional": true,
+      "license": "MIT",
       "peerDependencies": {
-        "@types/react": "^19.0.0"
+        "@types/react": "^19.3.0"
       }
     },
     "node_modules/@types/react-syntax-highlighter": {
@@ -4617,25 +4459,27 @@
       }
     },
     "node_modules/@uiw/copy-to-clipboard": {
-      "version": "1.0.17",
-      "resolved": "https://registry.npmjs.org/@uiw/copy-to-clipboard/-/copy-to-clipboard-1.0.17.tgz",
-      "integrity": "sha512-O2GUHV90Iw2VrSLVLK0OmNIMdZ5fgEg4NhvtwINsX+eZ/Wf6DWD0TdsK9xwV7dNRnK/UI2mQtl0a2/kRgm1m1A==",
+      "version": "1.0.21",
+      "resolved": "https://registry.npmjs.org/@uiw/copy-to-clipboard/-/copy-to-clipboard-1.0.21.tgz",
+      "integrity": "sha512-apdzZJyJC/IEj21N22ry1H022pgpSA+FwNKxmvOGQ9rUMdyRbHf1nZq2UwqnfGOuTr7iOKLzNgWsCJtAwyAZpw==",
+      "license": "MIT",
       "funding": {
         "url": "https://jaywcjlove.github.io/#/sponsor"
       }
     },
     "node_modules/@uiw/react-markdown-preview": {
-      "version": "5.1.5",
-      "resolved": "https://registry.npmjs.org/@uiw/react-markdown-preview/-/react-markdown-preview-5.1.5.tgz",
-      "integrity": "sha512-DNOqx1a6gJR7Btt57zpGEKTfHRlb7rWbtctMRO2f82wWcuoJsxPBrM+JWebDdOD0LfD8oe2CQvW2ICQJKHQhZg==",
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/@uiw/react-markdown-preview/-/react-markdown-preview-5.2.1.tgz",
+      "integrity": "sha512-JjvcHveT6glhlJYJx1XGBZij6wkw+VwREV6Z6m/GpsjPPdLjF1x8nlPBSB/ATyUF4lD7C8ttMkCqVH9N9XMgEA==",
+      "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.17.2",
         "@uiw/copy-to-clipboard": "~1.0.12",
-        "react-markdown": "~9.0.1",
-        "rehype-attr": "~3.0.1",
+        "react-markdown": "~10.1.0",
+        "rehype-attr": "~4.0.0",
         "rehype-autolink-headings": "~7.1.0",
         "rehype-ignore": "^2.0.0",
-        "rehype-prism-plus": "2.0.0",
+        "rehype-prism-plus": "~2.0.0",
         "rehype-raw": "^7.0.0",
         "rehype-rewrite": "~4.0.0",
         "rehype-slug": "~6.0.0",
@@ -4651,51 +4495,14 @@
         "react-dom": ">=16.8.0"
       }
     },
-    "node_modules/@uiw/react-markdown-preview/node_modules/react-markdown": {
-      "version": "9.0.3",
-      "resolved": "https://registry.npmjs.org/react-markdown/-/react-markdown-9.0.3.tgz",
-      "integrity": "sha512-Yk7Z94dbgYTOrdk41Z74GoKA7rThnsbbqBTRYuxoe08qvfQ9tJVhmAKw6BJS/ZORG7kTy/s1QvYzSuaoBA1qfw==",
-      "dependencies": {
-        "@types/hast": "^3.0.0",
-        "devlop": "^1.0.0",
-        "hast-util-to-jsx-runtime": "^2.0.0",
-        "html-url-attributes": "^3.0.0",
-        "mdast-util-to-hast": "^13.0.0",
-        "remark-parse": "^11.0.0",
-        "remark-rehype": "^11.0.0",
-        "unified": "^11.0.0",
-        "unist-util-visit": "^5.0.0",
-        "vfile": "^6.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/unified"
-      },
-      "peerDependencies": {
-        "@types/react": ">=18",
-        "react": ">=18"
-      }
-    },
-    "node_modules/@uiw/react-markdown-preview/node_modules/rehype-prism-plus": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/rehype-prism-plus/-/rehype-prism-plus-2.0.0.tgz",
-      "integrity": "sha512-FeM/9V2N7EvDZVdR2dqhAzlw5YI49m9Tgn7ZrYJeYHIahM6gcXpH0K1y2gNnKanZCydOMluJvX2cB9z3lhY8XQ==",
-      "dependencies": {
-        "hast-util-to-string": "^3.0.0",
-        "parse-numeric-range": "^1.3.0",
-        "refractor": "^4.8.0",
-        "rehype-parse": "^9.0.0",
-        "unist-util-filter": "^5.0.0",
-        "unist-util-visit": "^5.0.0"
-      }
-    },
     "node_modules/@uiw/react-md-editor": {
-      "version": "4.0.8",
-      "resolved": "https://registry.npmjs.org/@uiw/react-md-editor/-/react-md-editor-4.0.8.tgz",
-      "integrity": "sha512-S3mOzZeGmJNhzdXJxRTCwsFMDp8nBWeQUf59cK3L6QHzDUHnRoHpcmWpfVRyKGKSg8zaI2+meU5cYWf8kYn3mQ==",
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/@uiw/react-md-editor/-/react-md-editor-4.1.2.tgz",
+      "integrity": "sha512-EA19S+GS1KDi9MvKoCjJ16luGBE2yZLaBp+6tkNJvIYQ+J6zxdkTAHWl0i+Te02HwQrVMIjVG74M54uyW8K7wQ==",
+      "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.14.6",
-        "@uiw/react-markdown-preview": "^5.0.6",
+        "@uiw/react-markdown-preview": "^5.2.0",
         "rehype": "~13.0.0",
         "rehype-prism-plus": "~2.0.0"
       },
@@ -5184,7 +4991,7 @@
       "version": "6.15.0",
       "resolved": "https://registry.npmjs.org/ajv/-/ajv-6.15.0.tgz",
       "integrity": "sha512-fgFx7Hfoq60ytK2c7DhnF8jIvzYgOMxfugjLOSMHjLIPgenqa7S7oaagATUq99mV6IYvN2tRmC0wnTYX6iPbMw==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "dependencies": {
         "fast-deep-equal": "^3.1.1",
@@ -5552,6 +5359,7 @@
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/bcp-47-match/-/bcp-47-match-2.0.3.tgz",
       "integrity": "sha512-JtTezzbAibu8G0R9op9zb3vcWZd9JF6M0xOYGPn0fNCd7wOpRB1mU2mH9T8gaBGbAAyIIVgB2G7xG0GP98zMAQ==",
+      "license": "MIT",
       "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/wooorm"
@@ -5560,7 +5368,8 @@
     "node_modules/boolbase": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz",
-      "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww=="
+      "integrity": "sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==",
+      "license": "ISC"
     },
     "node_modules/brace-expansion": {
       "version": "1.1.21",
@@ -5765,15 +5574,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/chownr": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
-      "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==",
-      "dev": true,
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "node_modules/class-variance-authority": {
       "version": "0.7.1",
       "resolved": "https://registry.npmjs.org/class-variance-authority/-/class-variance-authority-0.7.1.tgz",
@@ -5889,9 +5689,9 @@
       }
     },
     "node_modules/css-selector-parser": {
-      "version": "3.1.3",
-      "resolved": "https://registry.npmjs.org/css-selector-parser/-/css-selector-parser-3.1.3.tgz",
-      "integrity": "sha512-gJMigczVZqYAk0hPVzx/M4Hm1D9QOtqkdQk9005TNzDIUGzo5cnHEDiKUT7jGPximL/oYb+LIitcHFQ4aKupxg==",
+      "version": "3.3.0",
+      "resolved": "https://registry.npmjs.org/css-selector-parser/-/css-selector-parser-3.3.0.tgz",
+      "integrity": "sha512-Y2asgMGFqJKF4fq4xHDSlFYIkeVfRsm69lQC1q9kbEsH5XtnINTMrweLkjYMeaUgiXBy/uvKeO/a1JHTNnmB2g==",
       "funding": [
         {
           "type": "github",
@@ -5901,7 +5701,8 @@
           "type": "patreon",
           "url": "https://patreon.com/mdevils"
         }
-      ]
+      ],
+      "license": "MIT"
     },
     "node_modules/css.escape": {
       "version": "1.5.1",
@@ -5936,9 +5737,10 @@
       }
     },
     "node_modules/csstype": {
-      "version": "3.1.3",
-      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.1.3.tgz",
-      "integrity": "sha512-M1uQkMl8rQK/szD0LNhtqxIPLpimGm8sOBwU7lLnCpSbTyY3yeU1Vc7l4KT5zT4s/yOxHH5O7tIuuLOCnLADRw=="
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "license": "MIT"
     },
     "node_modules/damerau-levenshtein": {
       "version": "1.0.8",
@@ -6012,9 +5814,10 @@
       }
     },
     "node_modules/date-fns": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/date-fns/-/date-fns-4.1.0.tgz",
-      "integrity": "sha512-Ukq0owbQXxa/U3EGtsdVBkR1w7KOQ5gIBqdH2hkvknzZPYvBxb/aa6E8L7tmjFtkwZBu3UXBbjIgPo/Ez4xaNg==",
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/date-fns/-/date-fns-4.4.0.tgz",
+      "integrity": "sha512-+1UMbeh68lH1SegH83CGWwpb6OHHbpSgr3+s5Eww5M4CAgswBpoWS0AjTOfEJ33HiYKz1hdj/KTFprzXHmq/6w==",
+      "license": "MIT",
       "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/kossnocorp"
@@ -6143,6 +5946,7 @@
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/direction/-/direction-2.0.1.tgz",
       "integrity": "sha512-9S6m9Sukh1cZNknO1CWAr2QAWsbKLafQiyM5gZ7VgXHeuaoUwffKN4q6NC4A/Mf9iiPlOXQEKW/Mv/mh9/3YFA==",
+      "license": "MIT",
       "bin": {
         "direction": "cli.js"
       },
@@ -6198,13 +6002,14 @@
       "dev": true
     },
     "node_modules/enhanced-resolve": {
-      "version": "5.18.2",
-      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.18.2.tgz",
-      "integrity": "sha512-6Jw4sE1maoRJo3q8MsSIn2onJFbLTOjY9hlx4DZXmOKvLRd1Ok2kXmAGXaafL2+ijsJZ1ClYbl/pmqr9+k4iUQ==",
+      "version": "5.25.1",
+      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.25.1.tgz",
+      "integrity": "sha512-nGXts5znJzmWPu+mIE9izCOzdg63oJca2mDzGWWTth7sr4aCToKcoyFVBQwN75Ij5Pf6p510EwkTqViTRzDV+w==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "graceful-fs": "^4.2.4",
-        "tapable": "^2.2.0"
+        "tapable": "^2.3.3"
       },
       "engines": {
         "node": ">=10.13.0"
@@ -6899,7 +6704,7 @@
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
       "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-      "dev": true
+      "devOptional": true
     },
     "node_modules/fast-glob": {
       "version": "3.3.1",
@@ -6933,7 +6738,7 @@
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
       "integrity": "sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==",
-      "dev": true
+      "devOptional": true
     },
     "node_modules/fast-levenshtein": {
       "version": "2.0.6",
@@ -7226,7 +7031,8 @@
     "node_modules/github-slugger": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/github-slugger/-/github-slugger-2.0.0.tgz",
-      "integrity": "sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw=="
+      "integrity": "sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==",
+      "license": "ISC"
     },
     "node_modules/glob-parent": {
       "version": "6.0.2",
@@ -7283,7 +7089,8 @@
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
       "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
-      "dev": true
+      "dev": true,
+      "license": "ISC"
     },
     "node_modules/graphemer": {
       "version": "1.4.0",
@@ -7447,6 +7254,7 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/hast-util-has-property/-/hast-util-has-property-3.0.0.tgz",
       "integrity": "sha512-MNilsvEKLFpV604hwfhVStK0usFY/QmM5zX16bo7EjnAEGofr5YyI37kzopBlZJkHD4t887i+q/C8/tr5Q94cA==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0"
       },
@@ -7459,6 +7267,7 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/hast-util-heading-rank/-/hast-util-heading-rank-3.0.0.tgz",
       "integrity": "sha512-EJKb8oMUXVHcWZTDepnr+WNbfnXKFNf9duMesmr4S8SXTJBJ9M4Yok08pu9vxdJwdlGRhVumk9mEhkEvKGifwA==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0"
       },
@@ -7495,6 +7304,7 @@
       "version": "9.1.0",
       "resolved": "https://registry.npmjs.org/hast-util-raw/-/hast-util-raw-9.1.0.tgz",
       "integrity": "sha512-Y8/SBAHkZGoNkpzqqfCldijcuUKh7/su31kEBp67cFY09Wy0mTRgtsLYsiIxMJxlu0f6AA5SUTbDR8K0rxnbUw==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "@types/unist": "^3.0.0",
@@ -7534,6 +7344,7 @@
       "version": "6.0.4",
       "resolved": "https://registry.npmjs.org/hast-util-select/-/hast-util-select-6.0.4.tgz",
       "integrity": "sha512-RqGS1ZgI0MwxLaKLDxjprynNzINEkRHY2i8ln4DDjgv9ZhcYVIHN9rlpiYsqtFwrgpYU361SyWDQcGNIBVu3lw==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "@types/unist": "^3.0.0",
@@ -7605,14 +7416,15 @@
       }
     },
     "node_modules/hast-util-to-parse5": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/hast-util-to-parse5/-/hast-util-to-parse5-8.0.0.tgz",
-      "integrity": "sha512-3KKrV5ZVI8if87DVSi1vDeByYrkGzg4mEfeu4alwgmmIeARiBLKCZS2uw5Gb6nU9x9Yufyj3iudm6i7nl52PFw==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/hast-util-to-parse5/-/hast-util-to-parse5-8.0.1.tgz",
+      "integrity": "sha512-MlWT6Pjt4CG9lFCjiz4BH7l9wmrMkfkJYCxFwKQic8+RTZgWPuWxwAfjJElsXkex7DJjfSJsQIt931ilUgmwdA==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "comma-separated-tokens": "^2.0.0",
         "devlop": "^1.0.0",
-        "property-information": "^6.0.0",
+        "property-information": "^7.0.0",
         "space-separated-tokens": "^2.0.0",
         "web-namespaces": "^2.0.0",
         "zwitch": "^2.0.0"
@@ -7622,15 +7434,6 @@
         "url": "https://opencollective.com/unified"
       }
     },
-    "node_modules/hast-util-to-parse5/node_modules/property-information": {
-      "version": "6.5.0",
-      "resolved": "https://registry.npmjs.org/property-information/-/property-information-6.5.0.tgz",
-      "integrity": "sha512-PgTgs/BlvHxOu8QuEN7wi5A0OmXaBcHpmCSTehcs6Uuu9IkDIEo13Hy7n898RHfrQ49vKCoGeWZSaAK01nwVig==",
-      "funding": {
-        "type": "github",
-        "url": "https://github.com/sponsors/wooorm"
-      }
-    },
     "node_modules/hast-util-to-string": {
       "version": "3.0.1",
       "resolved": "https://registry.npmjs.org/hast-util-to-string/-/hast-util-to-string-3.0.1.tgz",
@@ -7809,9 +7612,9 @@
       }
     },
     "node_modules/i18next-browser-languagedetector": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmmirror.com/i18next-browser-languagedetector/-/i18next-browser-languagedetector-8.2.0.tgz",
-      "integrity": "sha512-P+3zEKLnOF0qmiesW383vsLdtQVyKtCNA9cjSoKCppTKPQVfKd2W8hbVo5ZhNJKDqeM7BOcvNoKJOjpHh4Js9g==",
+      "version": "8.2.1",
+      "resolved": "https://registry.npmjs.org/i18next-browser-languagedetector/-/i18next-browser-languagedetector-8.2.1.tgz",
+      "integrity": "sha512-bZg8+4bdmaOiApD7N7BPT9W8MLZG+nPTOFlLiJiT8uzKXFjhxw4v2ierCXOwB5sFDMtuA5G4kgYZ0AznZxQ/cw==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.23.2"
@@ -8395,10 +8198,11 @@
       }
     },
     "node_modules/jiti": {
-      "version": "2.4.2",
-      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.4.2.tgz",
-      "integrity": "sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==",
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz",
+      "integrity": "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==",
       "dev": true,
+      "license": "MIT",
       "bin": {
         "jiti": "lib/jiti-cli.mjs"
       }
@@ -8495,7 +8299,7 @@
       "version": "0.4.1",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
       "integrity": "sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==",
-      "dev": true
+      "devOptional": true
     },
     "node_modules/json-stable-stringify-without-jsonify": {
       "version": "1.0.1",
@@ -8587,10 +8391,11 @@
       }
     },
     "node_modules/lightningcss": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.30.1.tgz",
-      "integrity": "sha512-xi6IyHML+c9+Q3W0S4fCQJOym42pyurFiJUHEcEyHS0CeKzia4yZDEsLlqOFykxOdHpNy0NmvVO31vcSqAxJCg==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
+      "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
       "dev": true,
+      "license": "MPL-2.0",
       "dependencies": {
         "detect-libc": "^2.0.3"
       },
@@ -8602,26 +8407,49 @@
         "url": "https://opencollective.com/parcel"
       },
       "optionalDependencies": {
-        "lightningcss-darwin-arm64": "1.30.1",
-        "lightningcss-darwin-x64": "1.30.1",
-        "lightningcss-freebsd-x64": "1.30.1",
-        "lightningcss-linux-arm-gnueabihf": "1.30.1",
-        "lightningcss-linux-arm64-gnu": "1.30.1",
-        "lightningcss-linux-arm64-musl": "1.30.1",
-        "lightningcss-linux-x64-gnu": "1.30.1",
-        "lightningcss-linux-x64-musl": "1.30.1",
-        "lightningcss-win32-arm64-msvc": "1.30.1",
-        "lightningcss-win32-x64-msvc": "1.30.1"
+        "lightningcss-android-arm64": "1.32.0",
+        "lightningcss-darwin-arm64": "1.32.0",
+        "lightningcss-darwin-x64": "1.32.0",
+        "lightningcss-freebsd-x64": "1.32.0",
+        "lightningcss-linux-arm-gnueabihf": "1.32.0",
+        "lightningcss-linux-arm64-gnu": "1.32.0",
+        "lightningcss-linux-arm64-musl": "1.32.0",
+        "lightningcss-linux-x64-gnu": "1.32.0",
+        "lightningcss-linux-x64-musl": "1.32.0",
+        "lightningcss-win32-arm64-msvc": "1.32.0",
+        "lightningcss-win32-x64-msvc": "1.32.0"
       }
     },
-    "node_modules/lightningcss-darwin-arm64": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.30.1.tgz",
-      "integrity": "sha512-c8JK7hyE65X1MHMN+Viq9n11RRC7hgin3HhYKhrMyaXflk5GVplZ60IxyoVtzILeKr+xAJwg6zK6sjTBJ0FKYQ==",
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
+      "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "darwin"
@@ -8635,13 +8463,14 @@
       }
     },
     "node_modules/lightningcss-darwin-x64": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.30.1.tgz",
-      "integrity": "sha512-k1EvjakfumAQoTfcXUcHQZhSpLlkAuEkdMBsI/ivWw9hL+7FtilQc0Cy3hrx0AAQrVtQAbMI7YjCgYgvn37PzA==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "darwin"
@@ -8655,13 +8484,14 @@
       }
     },
     "node_modules/lightningcss-freebsd-x64": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.30.1.tgz",
-      "integrity": "sha512-kmW6UGCGg2PcyUE59K5r0kWfKPAVy4SltVeut+umLCFoJ53RdCUWxcRDzO1eTaxf/7Q2H7LTquFHPL5R+Gjyig==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "freebsd"
@@ -8675,13 +8505,14 @@
       }
     },
     "node_modules/lightningcss-linux-arm-gnueabihf": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.30.1.tgz",
-      "integrity": "sha512-MjxUShl1v8pit+6D/zSPq9S9dQ2NPFSQwGvxBCYaBYLPlCWuPh9/t1MRS8iUaR8i+a6w7aps+B4N0S1TYP/R+Q==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
       "cpu": [
         "arm"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
@@ -8695,13 +8526,14 @@
       }
     },
     "node_modules/lightningcss-linux-arm64-gnu": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.30.1.tgz",
-      "integrity": "sha512-gB72maP8rmrKsnKYy8XUuXi/4OctJiuQjcuqWNlJQ6jZiWqtPvqFziskH3hnajfvKB27ynbVCucKSm2rkQp4Bw==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
@@ -8715,13 +8547,14 @@
       }
     },
     "node_modules/lightningcss-linux-arm64-musl": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.30.1.tgz",
-      "integrity": "sha512-jmUQVx4331m6LIX+0wUhBbmMX7TCfjF5FoOH6SD1CttzuYlGNVpA7QnrmLxrsub43ClTINfGSYyHe2HWeLl5CQ==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
@@ -8735,13 +8568,14 @@
       }
     },
     "node_modules/lightningcss-linux-x64-gnu": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.30.1.tgz",
-      "integrity": "sha512-piWx3z4wN8J8z3+O5kO74+yr6ze/dKmPnI7vLqfSqI8bccaTGY5xiSGVIJBDd5K5BHlvVLpUB3S2YCfelyJ1bw==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
@@ -8755,13 +8589,14 @@
       }
     },
     "node_modules/lightningcss-linux-x64-musl": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.30.1.tgz",
-      "integrity": "sha512-rRomAK7eIkL+tHY0YPxbc5Dra2gXlI63HL+v1Pdi1a3sC+tJTcFrHX+E86sulgAXeI7rSzDYhPSeHHjqFhqfeQ==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "linux"
@@ -8775,13 +8610,14 @@
       }
     },
     "node_modules/lightningcss-win32-arm64-msvc": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.30.1.tgz",
-      "integrity": "sha512-mSL4rqPi4iXq5YVqzSsJgMVFENoa4nGTT/GjO2c0Yl9OuQfPsIfncvLrEW6RbbB24WtZ3xP/2CCmI3tNkNV4oA==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
       "cpu": [
         "arm64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "win32"
@@ -8795,13 +8631,14 @@
       }
     },
     "node_modules/lightningcss-win32-x64-msvc": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.30.1.tgz",
-      "integrity": "sha512-PVqXh48wh4T53F/1CCu8PIPCxLzWyCnn/9T5W1Jpmdy5h9Cwd+0YQS6/LwhHXSafuc61/xg9Lv5OrCby6a++jg==",
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
       "cpu": [
         "x64"
       ],
       "dev": true,
+      "license": "MPL-2.0",
       "optional": true,
       "os": [
         "win32"
@@ -8829,20 +8666,11 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/lodash.castarray": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/lodash.castarray/-/lodash.castarray-4.4.0.tgz",
-      "integrity": "sha512-aVx8ztPv7/2ULbArGJ2Y42bG1mEQ5mGjpdvrbJcJFU3TbYybe+QlLS4pst9zV52ymy2in1KpFPiZnAOATxD4+Q=="
-    },
-    "node_modules/lodash.isplainobject": {
-      "version": "4.0.6",
-      "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
-      "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA=="
-    },
     "node_modules/lodash.merge": {
       "version": "4.6.2",
       "resolved": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz",
-      "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ=="
+      "integrity": "sha512-0KpjqXRVvrYyCsX1swR/XTK0va6VQkQM6MNo7PqW77ByjAhoARA8EfrP1N4+KlKj8YS0ZUCtRT/YUuhyYDujIQ==",
+      "dev": true
     },
     "node_modules/longest-streak": {
       "version": "3.1.0",
@@ -9885,28 +9713,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/minipass": {
-      "version": "7.1.2",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
-      "integrity": "sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==",
-      "dev": true,
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      }
-    },
-    "node_modules/minizlib": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
-      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "minipass": "^7.1.2"
-      },
-      "engines": {
-        "node": ">= 18"
-      }
-    },
     "node_modules/mrmime": {
       "version": "2.0.1",
       "resolved": "https://registry.npmmirror.com/mrmime/-/mrmime-2.0.1.tgz",
@@ -10028,6 +9834,7 @@
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/nth-check/-/nth-check-2.1.1.tgz",
       "integrity": "sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==",
+      "license": "BSD-2-Clause",
       "dependencies": {
         "boolbase": "^1.0.0"
       },
@@ -10470,7 +10277,7 @@
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
       "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
-      "dev": true,
+      "devOptional": true,
       "engines": {
         "node": ">=6"
       }
@@ -10496,30 +10303,31 @@
       ]
     },
     "node_modules/react": {
-      "version": "19.2.3",
-      "resolved": "https://registry.npmjs.org/react/-/react-19.2.3.tgz",
-      "integrity": "sha512-Ku/hhYbVjOQnXDZFv2+RibmLFGwFdeeKHFcOTlrt7xplBnya5OGn/hIRDsqDiSUcfORsDC7MPxwork8jBwsIWA==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.3.0.tgz",
+      "integrity": "sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==",
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
       }
     },
     "node_modules/react-dom": {
-      "version": "19.2.3",
-      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.3.tgz",
-      "integrity": "sha512-yELu4WmLPw5Mr/lmeEpox5rw3RETacE++JgHqQzd2dg+YbJuat3jH4ingc+WPZhxaoFzdv9y33G+F7Nl5O0GBg==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==",
       "license": "MIT",
       "dependencies": {
-        "scheduler": "^0.27.0"
+        "scheduler": "^0.28.0"
       },
       "peerDependencies": {
-        "react": "^19.2.3"
+        "react": "^19.3.0"
       }
     },
     "node_modules/react-hook-form": {
-      "version": "7.60.0",
-      "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.60.0.tgz",
-      "integrity": "sha512-SBrYOvMbDB7cV8ZfNpaiLcgjH/a1c7aK0lK+aNigpf4xWLO8q+o4tcvVurv3c4EOyzn/3dCsYt4GKD42VvJ/+A==",
+      "version": "7.89.0",
+      "resolved": "https://registry.npmjs.org/react-hook-form/-/react-hook-form-7.89.0.tgz",
+      "integrity": "sha512-vKcoCfy8RKZDrhSdqsRFp0uEOdS1AhLjOL6hR7Wmfzg1akNxEhaPf5WORx8SgEQPVXakdDyDkqQp+KNxVnnPHg==",
+      "license": "MIT",
       "engines": {
         "node": ">=18.0.0"
       },
@@ -10528,7 +10336,13 @@
         "url": "https://opencollective.com/react-hook-form"
       },
       "peerDependencies": {
+        "@types/react": "*",
         "react": "^16.8.0 || ^17 || ^18 || ^19"
+      },
+      "peerDependenciesMeta": {
+        "@types/react": {
+          "optional": true
+        }
       }
     },
     "node_modules/react-i18next": {
@@ -10601,9 +10415,10 @@
       }
     },
     "node_modules/react-remove-scroll": {
-      "version": "2.7.1",
-      "resolved": "https://registry.npmjs.org/react-remove-scroll/-/react-remove-scroll-2.7.1.tgz",
-      "integrity": "sha512-HpMh8+oahmIdOuS5aFKKY6Pyog+FNaZV/XyJOq7b4YFwsFHe5yYfdbIalI4k3vU2nSDql7YskmUseHsRrJqIPA==",
+      "version": "2.7.2",
+      "resolved": "https://registry.npmjs.org/react-remove-scroll/-/react-remove-scroll-2.7.2.tgz",
+      "integrity": "sha512-Iqb9NjCCTt6Hf+vOdNIZGdTiH1QSqr27H/Ek9sv/a97gfueI/5h1s3yRi1nngzMUaOOToin5dI1dXKdXiF+u0Q==",
+      "license": "MIT",
       "dependencies": {
         "react-remove-scroll-bar": "^2.3.7",
         "react-style-singleton": "^2.2.3",
@@ -10839,9 +10654,10 @@
       }
     },
     "node_modules/rehype-attr": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/rehype-attr/-/rehype-attr-3.0.3.tgz",
-      "integrity": "sha512-Up50Xfra8tyxnkJdCzLBIBtxOcB2M1xdeKe1324U06RAvSjYm7ULSeoM+b/nYPQPVd7jsXJ9+39IG1WAJPXONw==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/rehype-attr/-/rehype-attr-4.0.2.tgz",
+      "integrity": "sha512-v4+gw7pvUVLbG/dUpLgBE6r3TWTBYJ7z+sfAH3zapmM5CKzk5+CopFQgr4gMR6OBSKl/qpI6HR7gv1Cbig0uow==",
+      "license": "MIT",
       "dependencies": {
         "unified": "~11.0.0",
         "unist-util-visit": "~5.0.0"
@@ -10857,6 +10673,7 @@
       "version": "7.1.0",
       "resolved": "https://registry.npmjs.org/rehype-autolink-headings/-/rehype-autolink-headings-7.1.0.tgz",
       "integrity": "sha512-rItO/pSdvnvsP4QRB1pmPiNHUskikqtPojZKJPPPAVx9Hj8i8TwMBhofrrAYRhYOOBZH9tgmG5lPqDLuIWPWmw==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "@ungap/structured-clone": "^1.0.0",
@@ -10871,9 +10688,10 @@
       }
     },
     "node_modules/rehype-ignore": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/rehype-ignore/-/rehype-ignore-2.0.2.tgz",
-      "integrity": "sha512-BpAT/3lU9DMJ2siYVD/dSR0A/zQgD6Fb+fxkJd4j+wDVy6TYbYpK+FZqu8eM9EuNKGvi4BJR7XTZ/+zF02Dq8w==",
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/rehype-ignore/-/rehype-ignore-2.0.3.tgz",
+      "integrity": "sha512-IzhP6/u/6sm49sdktuYSmeIuObWB+5yC/5eqVws8BhuGA9kY25/byz6uCy/Ravj6lXUShEd2ofHM5MyAIj86Sg==",
+      "license": "MIT",
       "dependencies": {
         "hast-util-select": "^6.0.0",
         "unified": "^11.0.0",
@@ -10936,6 +10754,7 @@
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/rehype-raw/-/rehype-raw-7.0.0.tgz",
       "integrity": "sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "hast-util-raw": "^9.0.0",
@@ -10947,9 +10766,10 @@
       }
     },
     "node_modules/rehype-rewrite": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/rehype-rewrite/-/rehype-rewrite-4.0.2.tgz",
-      "integrity": "sha512-rjLJ3z6fIV11phwCqHp/KRo8xuUCO8o9bFJCNw5o6O2wlLk6g8r323aRswdGBQwfXPFYeSuZdAjp4tzo6RGqEg==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/rehype-rewrite/-/rehype-rewrite-4.0.4.tgz",
+      "integrity": "sha512-L/FO96EOzSA6bzOam4DVu61/PB3AGKcSPXpa53yMIozoxH4qg1+bVZDF8zh1EsuxtSauAhzt5cCnvoplAaSLrw==",
+      "license": "MIT",
       "dependencies": {
         "hast-util-select": "^6.0.0",
         "unified": "^11.0.3",
@@ -10980,6 +10800,7 @@
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/rehype-slug/-/rehype-slug-6.0.0.tgz",
       "integrity": "sha512-lWyvf/jwu+oS5+hL5eClVd3hNdmwM1kAC0BUvEGD19pajQMIzcNUd/k9GsfQ+FfECvX+JE+e9/btsKH0EjJT6A==",
+      "license": "MIT",
       "dependencies": {
         "@types/hast": "^3.0.0",
         "github-slugger": "^2.0.0",
@@ -11028,6 +10849,7 @@
       "version": "1.3.1",
       "resolved": "https://registry.npmjs.org/remark-github-blockquote-alert/-/remark-github-blockquote-alert-1.3.1.tgz",
       "integrity": "sha512-OPNnimcKeozWN1w8KVQEuHOxgN3L4rah8geMOLhA5vN9wITqU4FWD+G26tkEsCGHiOVDbISx+Se5rGZ+D1p0Jg==",
+      "license": "MIT",
       "dependencies": {
         "unist-util-visit": "^5.0.0"
       },
@@ -11295,9 +11117,9 @@
       }
     },
     "node_modules/scheduler": {
-      "version": "0.27.0",
-      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz",
-      "integrity": "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz",
+      "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==",
       "license": "MIT"
     },
     "node_modules/semver": {
@@ -11525,12 +11347,19 @@
       }
     },
     "node_modules/sonner": {
-      "version": "2.0.6",
-      "resolved": "https://registry.npmjs.org/sonner/-/sonner-2.0.6.tgz",
-      "integrity": "sha512-yHFhk8T/DK3YxjFQXIrcHT1rGEeTLliVzWbO0xN8GberVun2RiBnxAjXAYpZrqwEVHBG9asI/Li8TAAhN9m59Q==",
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/sonner/-/sonner-2.0.8.tgz",
+      "integrity": "sha512-UM/ByIoFra8yzV75n1o0Puu0bw5U/9UNnDacrJNspekBewIfsQ3D6ez1nvlWpt7aTsO6rujQtifBpycwIivqlg==",
+      "license": "MIT",
       "peerDependencies": {
+        "@types/react": "^18.0.0 || ^19.0.0",
         "react": "^18.0.0 || ^19.0.0 || ^19.0.0-rc",
         "react-dom": "^18.0.0 || ^19.0.0 || ^19.0.0-rc"
+      },
+      "peerDependenciesMeta": {
+        "@types/react": {
+          "optional": true
+        }
       }
     },
     "node_modules/source-map-js": {
@@ -11807,43 +11636,33 @@
       "license": "MIT"
     },
     "node_modules/tailwind-merge": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-3.3.1.tgz",
-      "integrity": "sha512-gBXpgUm/3rp1lMZZrM/w7D8GKqshif0zAymAhbCyIt8KMe+0v9DQ7cdYLR4FHH/cKpdTXb+A/tKKU3eolfsI+g==",
+      "version": "3.7.0",
+      "resolved": "https://registry.npmjs.org/tailwind-merge/-/tailwind-merge-3.7.0.tgz",
+      "integrity": "sha512-XPPUyAc+cvspz3lHTcR/QgPfW2A0lv/xQNIjX3HGhLR+Nq2lHaLq5MtTesHn8GUr3W3DguT2KT5x3NVgRtYwmA==",
+      "license": "MIT",
       "funding": {
         "type": "github",
         "url": "https://github.com/sponsors/dcastil"
       }
     },
     "node_modules/tailwindcss": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.1.11.tgz",
-      "integrity": "sha512-2E9TBm6MDD/xKYe+dvJZAmg3yxIEDNRc0jwlNyDg/4Fil2QcSLjFKGVff0lAf1jjeaArlG/M75Ey/EYr/OJtBA=="
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.3.3.tgz",
+      "integrity": "sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ==",
+      "license": "MIT"
     },
     "node_modules/tapable": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.2.2.tgz",
-      "integrity": "sha512-Re10+NauLTMCudc7T5WLFLAwDhQ0JWdrMK+9B2M8zR5hRExKmsRDCBA7/aV/pNJFltmBFO5BAMlQFi/vq3nKOg==",
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.3.3.tgz",
+      "integrity": "sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=6"
-      }
-    },
-    "node_modules/tar": {
-      "version": "7.5.22",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz",
-      "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/fs-minipass": "^4.0.0",
-        "chownr": "^3.0.0",
-        "minipass": "^7.1.2",
-        "minizlib": "^3.1.0",
-        "yallist": "^5.0.0"
       },
-      "engines": {
-        "node": ">=18"
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
       }
     },
     "node_modules/tinybench": {
@@ -12037,10 +11856,11 @@
       "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w=="
     },
     "node_modules/tw-animate-css": {
-      "version": "1.3.5",
-      "resolved": "https://registry.npmjs.org/tw-animate-css/-/tw-animate-css-1.3.5.tgz",
-      "integrity": "sha512-t3u+0YNoloIhj1mMXs779P6MO9q3p3mvGn4k1n3nJPqJw/glZcuijG2qTSN4z4mgNRfW5ZC3aXJFLwDtiipZXA==",
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/tw-animate-css/-/tw-animate-css-1.4.0.tgz",
+      "integrity": "sha512-7bziOlRqH0hJx80h/3mbicLW7o8qLsH5+RaLR2t+OHM3D0JlWGODQKQ4cxbK7WlvmUxpcj6Kgu6EKqjrGFe3QQ==",
       "dev": true,
+      "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/Wombosvideo"
       }
@@ -12356,7 +12176,7 @@
       "version": "4.4.1",
       "resolved": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
       "integrity": "sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==",
-      "dev": true,
+      "devOptional": true,
       "dependencies": {
         "punycode": "^2.1.0"
       }
@@ -12382,9 +12202,10 @@
       }
     },
     "node_modules/use-debounce": {
-      "version": "10.0.6",
-      "resolved": "https://registry.npmjs.org/use-debounce/-/use-debounce-10.0.6.tgz",
-      "integrity": "sha512-C5OtPyhAZgVoteO9heXMTdW7v/IbFI+8bSVKYCJrSmiWWCLsbUxiBSp4t9v0hNBTGY97bT72ydDIDyGSFWfwXg==",
+      "version": "10.1.1",
+      "resolved": "https://registry.npmjs.org/use-debounce/-/use-debounce-10.1.1.tgz",
+      "integrity": "sha512-kvds8BHR2k28cFsxW8k3nc/tRga2rs1RHYCqmmGqb90MEeE++oALwzh2COiuBLO1/QXiOuShXoSN2ZpWnMmvuQ==",
+      "license": "MIT",
       "engines": {
         "node": ">= 16.0.0"
       },
@@ -12918,15 +12739,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/yallist": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz",
-      "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==",
-      "dev": true,
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "node_modules/yocto-queue": {
       "version": "0.1.0",
       "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
@@ -12940,17 +12752,19 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.0.5.tgz",
-      "integrity": "sha512-/5UuuRPStvHXu7RS+gmvRf4NXrNxpSllGwDnCBcJZtQsKrviYXm54yDGV2KYNLT5kq0lHGcl7lqWJLgSaG+tgA==",
+      "version": "4.6.5",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.5.tgz",
+      "integrity": "sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==",
+      "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
       }
     },
     "node_modules/zustand": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/zustand/-/zustand-5.0.6.tgz",
-      "integrity": "sha512-ihAqNeUVhe0MAD+X8M5UzqyZ9k3FFZLBTtqo6JLPwV53cbRB/mJwBI0PxcIgqhBBHlEs8G45OTDTMq3gNcLq3A==",
+      "version": "5.0.15",
+      "resolved": "https://registry.npmjs.org/zustand/-/zustand-5.0.15.tgz",
+      "integrity": "sha512-MpSEjRiBkA9crSYeOUH32rJC7SVqAbm0Fqcqge/bUi2PPoLcBWKOsG+C8mevmpr8TwXHBVkChbbJiyvkE+i/3A==",
+      "license": "MIT",
       "engines": {
         "node": ">=12.20.0"
       },
diff --git a/frontend/package.json b/frontend/package.json
index d8366881..08283c52 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -13,40 +13,40 @@
     "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
-    "@hookform/resolvers": "^5.1.1",
-    "@radix-ui/react-accordion": "^1.2.12",
-    "@radix-ui/react-alert-dialog": "^1.1.14",
-    "@radix-ui/react-checkbox": "^1.3.2",
+    "@hookform/resolvers": "^5.9.1",
+    "@radix-ui/react-accordion": "^1.2.20",
+    "@radix-ui/react-alert-dialog": "^1.1.23",
+    "@radix-ui/react-checkbox": "^1.3.11",
     "@radix-ui/react-collapsible": "^1.1.11",
     "@radix-ui/react-dialog": "^1.1.15",
-    "@radix-ui/react-dropdown-menu": "^2.1.15",
-    "@radix-ui/react-label": "^2.1.7",
-    "@radix-ui/react-popover": "^1.1.15",
-    "@radix-ui/react-progress": "^1.1.7",
-    "@radix-ui/react-radio-group": "^1.3.8",
-    "@radix-ui/react-scroll-area": "^1.2.9",
-    "@radix-ui/react-select": "^2.2.5",
-    "@radix-ui/react-separator": "^1.1.7",
-    "@radix-ui/react-slot": "^1.2.3",
-    "@radix-ui/react-tabs": "^1.1.12",
-    "@radix-ui/react-tooltip": "^1.2.7",
-    "@tailwindcss/typography": "^0.5.16",
-    "@tanstack/react-query": "^5.83.0",
+    "@radix-ui/react-dropdown-menu": "^2.1.24",
+    "@radix-ui/react-label": "^2.1.15",
+    "@radix-ui/react-popover": "^1.1.23",
+    "@radix-ui/react-progress": "^1.1.16",
+    "@radix-ui/react-radio-group": "^1.4.7",
+    "@radix-ui/react-scroll-area": "^1.2.18",
+    "@radix-ui/react-select": "^2.3.7",
+    "@radix-ui/react-separator": "^1.1.15",
+    "@radix-ui/react-slot": "^1.3.3",
+    "@radix-ui/react-tabs": "^1.1.21",
+    "@radix-ui/react-tooltip": "^1.2.16",
+    "@tailwindcss/typography": "^0.5.20",
+    "@tanstack/react-query": "^5.103.3",
     "@types/react-syntax-highlighter": "^15.5.13",
-    "@uiw/react-md-editor": "^4.0.8",
+    "@uiw/react-md-editor": "^4.1.2",
     "axios": "^1.20.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "date-fns": "^4.1.0",
+    "date-fns": "^4.4.0",
     "i18next": "^25.7.3",
-    "i18next-browser-languagedetector": "^8.2.0",
+    "i18next-browser-languagedetector": "^8.2.1",
     "katex": "^0.16.47",
     "lucide-react": "^0.525.0",
     "next": "^16.3.8",
-    "react": "^19.2.3",
-    "react-dom": "^19.2.3",
-    "react-hook-form": "^7.60.0",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
+    "react-hook-form": "^7.89.0",
     "react-i18next": "^16.5.0",
     "react-markdown": "^10.1.0",
     "react-syntax-highlighter": "^16.1.1",
@@ -54,17 +54,17 @@
     "rehype-sanitize": "^6.0.0",
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
-    "sonner": "^2.0.6",
-    "tailwind-merge": "^3.3.1",
-    "use-debounce": "^10.0.6",
-    "zod": "^4.0.5",
-    "zustand": "^5.0.6"
+    "sonner": "^2.0.8",
+    "tailwind-merge": "^3.7.0",
+    "use-debounce": "^10.1.1",
+    "zod": "^4.6.5",
+    "zustand": "^5.0.15"
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3",
     "@tailwindcss/postcss": "^4",
     "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/react": "^16.2.0",
+    "@testing-library/react": "^16.3.3",
     "@types/node": "^20",
     "@types/react": "^19",
     "@types/react-dom": "^19",
@@ -75,7 +75,7 @@
     "eslint-config-next": "15.4.2",
     "jsdom": "^26.0.0",
     "tailwindcss": "^4",
-    "tw-animate-css": "^1.3.5",
+    "tw-animate-css": "^1.4.0",
     "typescript": "^5",
     "vitest": "^4.1.8"
   },

From 90c6fed3836c00bbe0bb7a684af0644394fc3bd1 Mon Sep 17 00:00:00 2001
From: GF-2025 <guofei6666@163.com>
Date: Sun, 4 Oct 2026 16:59:34 +0800
Subject: [PATCH 336/345] fix(worker): a source deleted before processing must
 fail permanently, not starve the queue (#1364)

* fix(worker): fail permanently when the source was deleted before processing

Source.get() raises NotFoundError instead of returning None, so the
'if not source: raise ValueError' guard in process_source_command was
unreachable. NotFoundError is not in the command's stop_on list, so the job
was retried as transient (max_attempts=15, exponential_jitter, wait_max=120)
and every job behind it starved until the worker process was restarted.

Catch NotFoundError around that call and re-raise as ValueError, which is
already this command's permanent-failure channel.

Fixes #1363

* chore(worker): rebase on main, cover deleted transformations, changelog

- Rebased onto main (import conflict with #1425).
- A transformation deleted before the job runs hits the same NotFoundError
  path in process_source_command; it now fails permanently too (test added).
- ruff format on the new test (CI gates formatting since #1429).
- CHANGELOG entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(domain): only a missing record is NotFoundError in ObjectModel.get

ObjectModel.get wrapped every exception from repo_query, including the
RuntimeError it re-raises for retriable SurrealDB transaction conflicts, as
NotFoundError. With process_source now treating NotFoundError as permanent,
a transient conflict would have failed the job for good. get() now lets
NotFoundError / InvalidInputError through and raises DatabaseOperationError
(chained) for anything else.

The permanent-failure messages are static; the underlying error stays as the
exception's cause for the worker log.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(worker): run_transformation fails permanently on a deleted source too

NotFoundError (now only raised for a genuinely missing record) joins
run_transformation's stop_on and permanent-failure arm.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(changelog): rebase entry onto the consolidated Unreleased section

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(worker): a source deleted mid-processing also fails permanently

save_source re-reads the source after extraction; a deletion in that window
raised NotFoundError from inside the graph, which process_source retried as
transient. NotFoundError (now only a genuinely missing record) joins its
stop_on and gets a permanent-failure arm.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(adr): ADR-013 for the ObjectModel.get error contract

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* fix(embeddings): a record deleted before embedding is a permanent failure

Completes the review on #1364: embed_* commands treat NotFoundError (now only
a genuinely missing record) like their other permanent failures instead of
retrying it; a DatabaseOperationError still retries.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

* docs(embeddings): NotFoundError is a permanent failure too

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBYpxzSS62Y3TZkgB9NUZy

---------

Co-authored-by: Luis Novo <lfnovo@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |   1 +
 commands/embedding_commands.py                |  31 ++-
 commands/source_commands.py                   |  38 +++-
 .../ADR-013-objectmodel-get-error-contract.md |  30 +++
 docs/7-DEVELOPMENT/decisions/README.md        |   1 +
 open_notebook/domain/base.py                  |   7 +-
 .../test_source_deleted_before_processing.py  | 204 ++++++++++++++++++
 7 files changed, 296 insertions(+), 16 deletions(-)
 create mode 100644 docs/7-DEVELOPMENT/decisions/ADR-013-objectmodel-get-error-contract.md
 create mode 100644 tests/test_source_deleted_before_processing.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index da957da6..3c895b43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Credential encryption now uses PBKDF2-HMAC-SHA256 (600k iterations) with versioned `pbkdf2v1:` ciphertext.** New keys are written in the new format; legacy values keep decrypting, and a one-shot `POST /api/credentials/migrate-encryption` pass upgrades stored keys (idempotent, fail-closed per record). Downgrade warning: versions predating this change cannot read the new format — back up the database before migrating (#1317)
 
 ### Fixed
+- **The worker no longer stalls when a source is deleted before it is processed.** `Source.get()` raises `NotFoundError` for a missing record, so the job was retried as a transient failure (up to 15 attempts with backoff) and every job behind it waited; a missing source or transformation now fails the job immediately. Relatedly, loading a record no longer reports a database failure (e.g. a SurrealDB transaction conflict) as "not found": it raises a database error, so it stays retryable in jobs and returns 500 instead of 404 in the API (#1363)
 - **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
 - `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
diff --git a/commands/embedding_commands.py b/commands/embedding_commands.py
index 14fae108..98e99920 100644
--- a/commands/embedding_commands.py
+++ b/commands/embedding_commands.py
@@ -16,13 +16,17 @@ from surreal_commands import CommandInput, CommandOutput, command, submit_comman
 from open_notebook.ai.models import model_manager
 from open_notebook.database.repository import ensure_record_id, repo_insert, repo_query
 from open_notebook.domain.notebook import Note, Source, SourceInsight
-from open_notebook.exceptions import ConfigurationError, ContextLengthExceededError
+from open_notebook.exceptions import (
+    ConfigurationError,
+    ContextLengthExceededError,
+    NotFoundError,
+)
 from open_notebook.utils.chunking import ContentType, chunk_text, detect_content_type
 from open_notebook.utils.embedding import generate_embedding, generate_embeddings
 
 # NOTE: `stop_on` below can never trigger in practice — each command catches
-# ValueError internally and returns success=False instead of raising, so the
-# retry layer never sees it. Kept as-is on purpose; to be revisited in a
+# ValueError (and NotFoundError) internally and returns success=False instead
+# of raising, so the retry layer never sees it. Kept as-is on purpose; to be revisited in a
 # dedicated error-handling PR.
 EMBED_RETRY_CONFIG = {
     "max_attempts": 5,
@@ -66,7 +70,8 @@ async def _embed_record(
     Returns:
         (extra_output_fields, processing_time, error_message)
         extra_output_fields is None and error_message is set on permanent
-        (ValueError) failure. Transient failures re-raise so the retry layer
+        (ValueError, or NotFoundError for a record deleted before the job ran)
+        failure. Transient failures re-raise so the retry layer
         can handle them.
     """
     start_time = time.time()
@@ -82,8 +87,10 @@ async def _embed_record(
         )
         return extra_fields, processing_time, None
 
-    except ValueError as e:
-        # Permanent failure - don't retry
+    except (ValueError, NotFoundError) as e:
+        # Permanent failure - don't retry. NotFoundError means the record was
+        # deleted before the job ran (ObjectModel.get raises it only for a
+        # missing record; DB failures are DatabaseOperationError and retry).
         processing_time = time.time() - start_time
         cmd_id = get_command_id(input_data)
         logger.error(f"Failed to embed {kind} {record_id} (command: {cmd_id}): {e}")
@@ -233,7 +240,8 @@ async def embed_note_command(input_data: EmbedNoteInput) -> EmbedNoteOutput:
     Retry Strategy:
     - Retries up to 5 times for transient failures (network, timeout, etc.)
     - Uses exponential-jitter backoff (1-60s)
-    - Does NOT retry permanent failures (ValueError for validation errors)
+    - Does NOT retry permanent failures (ValueError for validation errors,
+      NotFoundError for a record deleted before the job ran)
     """
 
     async def embed() -> Tuple[Dict[str, Any], str]:
@@ -275,7 +283,8 @@ async def embed_insight_command(input_data: EmbedInsightInput) -> EmbedInsightOu
     Retry Strategy:
     - Retries up to 5 times for transient failures (network, timeout, etc.)
     - Uses exponential-jitter backoff (1-60s)
-    - Does NOT retry permanent failures (ValueError for validation errors)
+    - Does NOT retry permanent failures (ValueError for validation errors,
+      NotFoundError for a record deleted before the job ran)
     """
 
     async def embed() -> Tuple[Dict[str, Any], str]:
@@ -320,7 +329,8 @@ async def embed_source_command(input_data: EmbedSourceInput) -> EmbedSourceOutpu
     Retry Strategy:
     - Retries up to 5 times for transient failures (network, timeout, etc.)
     - Uses exponential-jitter backoff (1-60s)
-    - Does NOT retry permanent failures (ValueError for validation errors)
+    - Does NOT retry permanent failures (ValueError for validation errors,
+      NotFoundError for a record deleted before the job ran)
     """
 
     async def embed() -> Tuple[Dict[str, Any], str]:
@@ -440,7 +450,8 @@ async def create_insight_command(
     Retry Strategy:
     - Retries up to 5 times for transient failures (network, timeout, etc.)
     - Uses exponential-jitter backoff (1-60s)
-    - Does NOT retry permanent failures (ValueError for validation errors)
+    - Does NOT retry permanent failures (ValueError for validation errors,
+      NotFoundError for a record deleted before the job ran)
     """
     start_time = time.time()
 
diff --git a/commands/source_commands.py b/commands/source_commands.py
index 8f59929e..c3e999f4 100644
--- a/commands/source_commands.py
+++ b/commands/source_commands.py
@@ -13,6 +13,7 @@ from open_notebook.exceptions import (
     ContextLengthExceededError,
     IncompleteGenerationError,
     InvalidInputError,
+    NotFoundError,
 )
 
 try:
@@ -53,7 +54,10 @@ class SourceProcessingOutput(CommandOutput):
             ConfigurationError,
             ContextLengthExceededError,
             IncompleteGenerationError,
-        ],  # Don't retry validation/config errors or incomplete generations
+            NotFoundError,
+        ],  # Don't retry validation/config errors, incomplete generations, or a
+        # record deleted mid-processing (NotFoundError means "missing", never a
+        # DB failure: ObjectModel.get raises DatabaseOperationError for those)
         "retry_log_level": "debug",  # Avoid log noise during transaction conflicts
     },
 )
@@ -75,7 +79,11 @@ async def process_source_command(
         transformations = []
         for trans_id in input_data.transformations:
             logger.info(f"Loading transformation: {trans_id}")
-            transformation = await Transformation.get(trans_id)
+            try:
+                transformation = await Transformation.get(trans_id)
+            except NotFoundError as e:
+                # Same as a deleted source below: permanent, not transient.
+                raise ValueError(f"Transformation '{trans_id}' no longer exists") from e
             if not transformation:
                 raise ValueError(f"Transformation '{trans_id}' not found")
             transformations.append(transformation)
@@ -83,7 +91,18 @@ async def process_source_command(
         logger.info(f"Loaded {len(transformations)} transformations")
 
         # 2. Get existing source record to update its command field
-        source = await Source.get(input_data.source_id)
+        try:
+            source = await Source.get(input_data.source_id)
+        except NotFoundError as e:
+            # The source was removed after this job was queued (e.g. a sync tool
+            # deleted it, or the record was cleaned up). The job can never
+            # succeed: raise a permanent error (ValueError is in `stop_on`) so
+            # surreal-commands marks it failed instead of spending 15 retries
+            # with exponential backoff, which starves every job behind it.
+            raise ValueError(
+                f"Source '{input_data.source_id}' no longer exists "
+                "(deleted before processing?)"
+            ) from e
         if not source:
             raise ValueError(f"Source '{input_data.source_id}' not found")
 
@@ -142,6 +161,13 @@ async def process_source_command(
             f"Generation failed (permanent) for source {input_data.source_id}: {e}"
         )
         raise  # Preserve failed job status; stop_on prevents automatic retries.
+    except NotFoundError as e:
+        # E.g. the source was deleted while extraction ran (save_source re-reads
+        # it). Permanent: stop_on prevents retries that would starve the queue.
+        logger.error(
+            f"Source processing failed (permanent), record no longer exists: {e}"
+        )
+        raise
     except ValueError as e:
         # Validation errors are permanent failures. Re-raise so surreal-commands
         # marks the job as `failed` (stop_on=[ValueError] already prevents
@@ -193,7 +219,9 @@ class RunTransformationOutput(CommandOutput):
             ContextLengthExceededError,
             IncompleteGenerationError,
             InvalidInputError,
-        ],  # Don't retry validation/config errors or incomplete generations
+            NotFoundError,
+        ],  # Don't retry validation/config errors, incomplete generations, or
+        # a source/transformation deleted before the job ran
         "retry_log_level": "warning",
     },
 )
@@ -257,7 +285,7 @@ async def run_transformation_command(
             processing_time=processing_time,
         )
 
-    except (IncompleteGenerationError, InvalidInputError) as e:
+    except (IncompleteGenerationError, InvalidInputError, NotFoundError) as e:
         # e.g. the source has no text to transform
         logger.error(
             f"Generation failed (permanent) for transformation "
diff --git a/docs/7-DEVELOPMENT/decisions/ADR-013-objectmodel-get-error-contract.md b/docs/7-DEVELOPMENT/decisions/ADR-013-objectmodel-get-error-contract.md
new file mode 100644
index 00000000..27a4569e
--- /dev/null
+++ b/docs/7-DEVELOPMENT/decisions/ADR-013-objectmodel-get-error-contract.md
@@ -0,0 +1,30 @@
+# ADR-013: ObjectModel.get raises NotFoundError only for a missing record
+
+- **Status**: Accepted
+- **Date**: 2026-10
+- **Related**: #1363, PR #1364
+
+## Context
+
+`ObjectModel.get()` is the shared fetch boundary for every domain model. It wrapped **every** exception from `repo_query` as `NotFoundError("Object with id ... not found - {e}")`, including connection errors and the `RuntimeError` that `repo_query` re-raises for retriable SurrealDB v2 transaction conflicts. Callers treat `NotFoundError` as permanent: routers map it to 404, and since #1363 the background commands treat it as a non-retryable job failure. Under the old wrapping, a transient database hiccup would have been reported as "not found" and never retried.
+
+## Decision
+
+**`ObjectModel.get()` raises `NotFoundError` only when the record does not exist.** `InvalidInputError` (empty id, unknown table) passes through unchanged. Any other failure is raised as `DatabaseOperationError`, chained to the original exception.
+
+Consequences for callers:
+
+- **Commands:** `NotFoundError` means "the record was deleted" and is permanent. `process_source` and `run_transformation` have it in `stop_on`. `DatabaseOperationError` stays retryable.
+- **API:** a missing record is still 404. A database failure during a fetch becomes a 500 (`OpenNotebookError` handler) instead of a misleading 404.
+
+## Alternatives considered
+
+- **Keep the wrapping and catch `NotFoundError` per command**: rejected, because it makes every transient conflict permanent, exactly the failure the worker's retries exist for.
+- **Match the error message to tell the two apart**: rejected as fragile string coupling.
+- **Return `None` for a missing record**: rejected. It's a larger API change, and the `if not x` guards would have to come back everywhere.
+
+## Consequences
+
+- A command can safely treat `NotFoundError` as permanent (deleted before or during processing) without starving the queue on DB conflicts.
+- API clients see 500, not 404, for database outages on single-record fetches. That's correct, but it's visible if a client relied on the old 404.
+- New fetch helpers should follow the same split: "missing" vs "failed".
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index 4f37541d..789c0084 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -53,5 +53,6 @@ What this makes easier, what it makes harder, what to watch. (bullets)
 | [ADR-009](ADR-009-pbkdf2-credential-encryption.md) | PBKDF2 credential key derivation with versioned ciphertext | Accepted |
 | [ADR-011](ADR-011-design-token-system.md) | Visual identity is a token contract in globals.css, reviewed through /dev/design | Accepted |
 | [ADR-012](ADR-012-provider-endpoint-overrides.md) | Provider endpoint overrides are declared in the registry | Accepted |
+| [ADR-013](ADR-013-objectmodel-get-error-contract.md) | ObjectModel.get raises NotFoundError only for a missing record | Accepted |
 | [PDR-001](PDR-001-single-user-first.md) | Single-user first; don't preclude multi-user | Accepted |
 | [PDR-002](PDR-002-provider-agnostic-core.md) | Provider-agnostic core by default | Accepted |
diff --git a/open_notebook/domain/base.py b/open_notebook/domain/base.py
index a94cfa03..ad6e2e58 100644
--- a/open_notebook/domain/base.py
+++ b/open_notebook/domain/base.py
@@ -125,10 +125,15 @@ class ObjectModel(BaseModel):
                 return target_class(**result[0])
             else:
                 raise NotFoundError(f"{table_name} with id {id} not found")
+        except (NotFoundError, InvalidInputError):
+            raise
         except Exception as e:
+            # A database failure (connection, SurrealDB transaction conflict...)
+            # is not "not found": callers treat NotFoundError as permanent (404,
+            # no retry), so surface it as DatabaseOperationError instead.
             logger.error(f"Error fetching object with id {id}: {str(e)}")
             logger.exception(e)
-            raise NotFoundError(f"Object with id {id} not found - {str(e)}")
+            raise DatabaseOperationError(f"Failed to fetch object with id {id}") from e
 
     @classmethod
     def _get_class_by_table_name(cls, table_name: str) -> Optional[Type["ObjectModel"]]:
diff --git a/tests/test_source_deleted_before_processing.py b/tests/test_source_deleted_before_processing.py
new file mode 100644
index 00000000..dd689544
--- /dev/null
+++ b/tests/test_source_deleted_before_processing.py
@@ -0,0 +1,204 @@
+"""A source deleted before its process_source job runs must fail permanently.
+
+Regression for the worker-starvation bug: `Source.get()` raises `NotFoundError`
+instead of returning `None`, so the `if not source: raise ValueError(...)` guard in
+`process_source_command` never fired. `NotFoundError` is not in the command's
+`stop_on` list, so the job was retried as a transient failure (up to 15 attempts
+with exponential backoff, waits up to 120s) and every job behind it starved —
+the worker stopped consuming jobs until the process was restarted.
+"""
+
+from unittest.mock import AsyncMock, patch
+
+import pytest
+
+import commands  # noqa: F401 -- import registers the @command decorators
+from open_notebook.exceptions import NotFoundError
+
+
+@pytest.mark.asyncio
+async def test_missing_source_raises_permanent_error():
+    """NotFoundError from Source.get must surface as ValueError (terminal)."""
+    from commands.source_commands import SourceProcessingInput, process_source_command
+
+    input_data = SourceProcessingInput(
+        source_id="source:does-not-exist",
+        content_state={"file_path": "/tmp/whatever.md"},
+        notebook_ids=["notebook:whatever"],
+        transformations=[],
+        embed=True,
+    )
+
+    with patch(
+        "commands.source_commands.Source.get",
+        new=AsyncMock(
+            side_effect=NotFoundError("source with id source:does-not-exist not found")
+        ),
+    ):
+        with pytest.raises(ValueError) as excinfo:
+            await process_source_command(input_data)
+
+    assert "no longer exists" in str(excinfo.value)
+    # The retry policy keys off the exception type: ValueError is in `stop_on`,
+    # NotFoundError is not — that difference is the whole fix.
+    assert not isinstance(excinfo.value, NotFoundError)
+
+
+@pytest.mark.asyncio
+async def test_missing_transformation_raises_permanent_error():
+    """A transformation deleted before the job runs is just as permanent."""
+    from commands.source_commands import SourceProcessingInput, process_source_command
+
+    input_data = SourceProcessingInput(
+        source_id="source:abc",
+        content_state={"file_path": "/tmp/whatever.md"},
+        notebook_ids=["notebook:whatever"],
+        transformations=["transformation:gone"],
+        embed=True,
+    )
+
+    with patch(
+        "commands.source_commands.Transformation.get",
+        new=AsyncMock(side_effect=NotFoundError("transformation not found")),
+    ):
+        with pytest.raises(ValueError, match="no longer exists"):
+            await process_source_command(input_data)
+
+
+@pytest.mark.asyncio
+async def test_object_get_reports_db_failures_as_database_errors():
+    """ObjectModel.get used to wrap every exception (e.g. a retriable SurrealDB
+    transaction conflict) as NotFoundError, so the fix above would have made
+    transient failures permanent. Only a missing record is NotFoundError."""
+    from open_notebook.domain.notebook import Source
+    from open_notebook.exceptions import DatabaseOperationError
+
+    with patch(
+        "open_notebook.domain.base.repo_query",
+        new=AsyncMock(side_effect=RuntimeError("Transaction conflict: retry")),
+    ):
+        with pytest.raises(DatabaseOperationError):
+            await Source.get("source:abc")
+
+    with patch("open_notebook.domain.base.repo_query", new=AsyncMock(return_value=[])):
+        with pytest.raises(NotFoundError):
+            await Source.get("source:abc")
+
+
+@pytest.mark.asyncio
+async def test_transient_db_failure_stays_retryable():
+    """A database failure while loading the source is re-raised as is (not
+    ValueError), so the worker's retry policy still applies."""
+    from commands.source_commands import SourceProcessingInput, process_source_command
+    from open_notebook.exceptions import DatabaseOperationError
+
+    input_data = SourceProcessingInput(
+        source_id="source:abc",
+        content_state={"file_path": "/tmp/whatever.md"},
+        notebook_ids=["notebook:whatever"],
+        transformations=[],
+        embed=True,
+    )
+
+    with patch(
+        "commands.source_commands.Source.get",
+        new=AsyncMock(side_effect=DatabaseOperationError("Failed to fetch")),
+    ):
+        with pytest.raises(DatabaseOperationError):
+            await process_source_command(input_data)
+
+
+@pytest.mark.asyncio
+async def test_run_transformation_fails_permanently_when_source_is_gone():
+    """run_transformation had the same deletion-before-processing gap."""
+    from surreal_commands import registry
+
+    from commands.source_commands import (
+        RunTransformationInput,
+        run_transformation_command,
+    )
+
+    with patch(
+        "commands.source_commands.Source.get",
+        new=AsyncMock(side_effect=NotFoundError("source not found")),
+    ):
+        with pytest.raises(NotFoundError):
+            await run_transformation_command(
+                RunTransformationInput(
+                    source_id="source:gone", transformation_id="transformation:t1"
+                )
+            )
+
+    command = registry.get_command("open_notebook", "run_transformation")
+    assert command is not None
+    assert NotFoundError in command.retry_config.stop_on
+
+
+@pytest.mark.asyncio
+async def test_source_deleted_during_processing_fails_permanently():
+    """save_source re-reads the source after extraction; a deletion in that
+    window raises NotFoundError from inside the graph, which must not be
+    retried either."""
+    from types import SimpleNamespace
+
+    from surreal_commands import registry
+
+    from commands.source_commands import SourceProcessingInput, process_source_command
+
+    source = SimpleNamespace(id="source:abc", command=None, save=AsyncMock())
+    with (
+        patch(
+            "commands.source_commands.Source.get", new=AsyncMock(return_value=source)
+        ),
+        patch(
+            "commands.source_commands.source_graph.ainvoke",
+            new=AsyncMock(
+                side_effect=NotFoundError("source with id source:abc not found")
+            ),
+        ),
+    ):
+        with pytest.raises(NotFoundError):
+            await process_source_command(
+                SourceProcessingInput(
+                    source_id="source:abc",
+                    content_state={"file_path": "/tmp/x.md"},
+                    notebook_ids=[],
+                    transformations=[],
+                    embed=False,
+                )
+            )
+
+    command = registry.get_command("open_notebook", "process_source")
+    assert command is not None
+    assert NotFoundError in command.retry_config.stop_on
+
+
+@pytest.mark.asyncio
+async def test_embedding_a_deleted_source_fails_permanently():
+    """embed_source had the same gap (lfnovo's review on #1364): a record
+    deleted before the job ran is a permanent failure, not a retry."""
+    from commands.embedding_commands import EmbedSourceInput, embed_source_command
+
+    with patch(
+        "commands.embedding_commands.Source.get",
+        new=AsyncMock(
+            side_effect=NotFoundError("source with id source:gone not found")
+        ),
+    ):
+        result = await embed_source_command(EmbedSourceInput(source_id="source:gone"))
+
+    assert result.success is False
+    assert "not found" in (result.error_message or "")
+
+
+@pytest.mark.asyncio
+async def test_embedding_db_failure_stays_retryable():
+    from commands.embedding_commands import EmbedSourceInput, embed_source_command
+    from open_notebook.exceptions import DatabaseOperationError
+
+    with patch(
+        "commands.embedding_commands.Source.get",
+        new=AsyncMock(side_effect=DatabaseOperationError("Failed to fetch")),
+    ):
+        with pytest.raises(DatabaseOperationError):
+            await embed_source_command(EmbedSourceInput(source_id="source:abc"))

From 60e3c2161e9dd32cc6327991b7d4be68f83e6e06 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 09:44:51 -0300
Subject: [PATCH 337/345] fix(podcasts): unconfigured speaker profiles no
 longer break generation (#1454)

generate_podcast_command hands every speaker profile to podcast-creator,
whose SpeakerProfile requires tts_provider/tts_model. Profiles without a
voice model (the seeded business_panel / solo_expert ship that way) were
kept without those fields, so SpeakerConfig validation failed for every
podcast, even when generating with a complete profile.

Speaker profiles without a voice model are now removed from the config with
a warning, like unresolvable episode profiles. The selected profile is never
removed: it is validated earlier and still fails with a clear error. The
test validates the resulting config with podcast-creator's SpeakerConfig.

Closes #1450

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                          |   1 +
 commands/podcast_commands.py          |  12 +++
 frontend/AGENTS.md                    |  10 +++
 tests/test_podcast_speaker_profile.py | 116 ++++++++++++++++++++++++++
 4 files changed, 139 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3c895b43..64e3209b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Credential encryption now uses PBKDF2-HMAC-SHA256 (600k iterations) with versioned `pbkdf2v1:` ciphertext.** New keys are written in the new format; legacy values keep decrypting, and a one-shot `POST /api/credentials/migrate-encryption` pass upgrades stored keys (idempotent, fail-closed per record). Downgrade warning: versions predating this change cannot read the new format — back up the database before migrating (#1317)
 
 ### Fixed
+- **Podcasts generate on a fresh install again.** Generation hands every speaker profile to podcast-creator, which requires a voice model on each; the seeded profiles ship without one, so any unconfigured profile failed every podcast with `validation errors for SpeakerConfig`, even when generating with a complete profile. Speaker profiles without a voice model are now left out of the config (with a warning), like unresolvable episode profiles already were; the selected profile still fails early with a clear error if it has no voice model (#1450)
 - **The worker no longer stalls when a source is deleted before it is processed.** `Source.get()` raises `NotFoundError` for a missing record, so the job was retried as a transient failure (up to 15 attempts with backoff) and every job behind it waited; a missing source or transformation now fails the job immediately. Relatedly, loading a record no longer reports a database failure (e.g. a SurrealDB transaction conflict) as "not found": it raises a database error, so it stays retryable in jobs and returns 500 instead of 404 in the API (#1363)
 - **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 11836d3c..5700401b 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -279,6 +279,18 @@ async def generate_podcast_command(
         # Remove profiles that fail resolution to prevent validation errors.
         for sp_name in list(speaker_profiles_dict.keys()):
             sp_dict = speaker_profiles_dict[sp_name]
+            if not sp_dict.get("voice_model") and sp_name != speaker_profile.name:
+                # podcast-creator requires tts_provider/tts_model on every
+                # profile in the config, so one unconfigured profile (the
+                # seeded ones ship without a voice model) would fail every
+                # generation (#1450). The selected profile never gets here
+                # without a voice model: it was validated above.
+                logger.warning(
+                    f"Speaker profile '{sp_name}' has no voice model, removing "
+                    "from config to prevent validation errors"
+                )
+                del speaker_profiles_dict[sp_name]
+                continue
             if sp_dict.get("voice_model"):
                 try:
                     prov, model, conf = await _resolve_model_config(
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
index dd6e5a11..74fd1cfd 100644
--- a/frontend/AGENTS.md
+++ b/frontend/AGENTS.md
@@ -33,3 +33,13 @@ Normative rules for working on the Next.js frontend. Architecture and flow walkt
 ## Deep dives
 
 [frontend architecture](../docs/7-DEVELOPMENT/frontend.md) · [credentials system](../docs/7-DEVELOPMENT/credentials.md) · [change playbooks](../docs/7-DEVELOPMENT/change-playbooks.md) (i18n / frontend-only changes) · [code standards](../docs/7-DEVELOPMENT/code-standards.md)
+
+<!-- BEGIN:nextjs-agent-rules -->
+
+# This is NOT the Next.js you know
+
+This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
+
+This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
+
+<!-- END:nextjs-agent-rules -->
diff --git a/tests/test_podcast_speaker_profile.py b/tests/test_podcast_speaker_profile.py
index efe834d7..10cb9a08 100644
--- a/tests/test_podcast_speaker_profile.py
+++ b/tests/test_podcast_speaker_profile.py
@@ -397,3 +397,119 @@ class TestOrphanedProfileDoesNotPoisonConfig:
         assert (
             episode_config["Test Episode Profile"]["speaker_config"] == "Tech Experts"
         )
+
+
+class TestUnconfiguredSpeakerProfileDoesNotPoisonConfig:
+    """A speaker profile without a voice model (the seeded ones ship that way)
+    must not fail podcast-creator's validation of the whole speakers config
+    when generating with a different, complete profile (#1450)."""
+
+    @pytest.mark.asyncio
+    async def test_unconfigured_profile_dropped_selected_kept(self, tmp_path):
+        episode_profile = EpisodeProfile(
+            id="episode_profile:ep1",
+            name="Test Episode Profile",
+            speaker_config="speaker_profile:sp1",
+            outline_llm="model:llm",
+            transcript_llm="model:llm",
+            default_briefing="brief",
+            num_segments=3,
+        )
+        speaker = {
+            "name": "Alex",
+            "voice_id": "v1",
+            "backstory": "b",
+            "personality": "p",
+        }
+        speaker_profile = SpeakerProfile(
+            id="speaker_profile:sp1",
+            name="Tech Experts",
+            voice_model="model:tts",
+            speakers=[speaker],
+        )
+        episode_rows = [
+            {
+                "id": "episode_profile:ep1",
+                "name": "Test Episode Profile",
+                "speaker_config": "speaker_profile:sp1",
+                "default_briefing": "brief",
+                "num_segments": 3,
+            },
+        ]
+        speaker_rows = [
+            {
+                "id": "speaker_profile:sp1",
+                "name": "Tech Experts",
+                "voice_model": "model:tts",
+                "speakers": [dict(speaker)],
+            },
+            {
+                # Seeded profile nobody configured yet
+                "id": "speaker_profile:sp2",
+                "name": "business_panel",
+                "voice_model": None,
+                "speakers": [dict(speaker)],
+            },
+        ]
+
+        async def fake_repo_query(query, *args, **kwargs):
+            if "episode_profile" in query:
+                return episode_rows
+            return speaker_rows
+
+        configure_calls = {}
+
+        def fake_configure(key, value):
+            configure_calls[key] = value
+
+        resolved: tuple = ("openai", "model-name", {})
+
+        with (
+            patch.object(
+                EpisodeProfile,
+                "get_by_name",
+                new=AsyncMock(return_value=episode_profile),
+            ),
+            patch.object(
+                SpeakerProfile, "resolve", new=AsyncMock(return_value=speaker_profile)
+            ),
+            patch(
+                "open_notebook.podcasts.models._resolve_model_config",
+                new=AsyncMock(return_value=resolved),
+            ),
+            patch(
+                "commands.podcast_commands._resolve_model_config",
+                new=AsyncMock(return_value=resolved),
+            ),
+            patch("commands.podcast_commands.repo_query", new=fake_repo_query),
+            patch("commands.podcast_commands.configure", new=fake_configure),
+            patch(
+                "commands.podcast_commands.create_podcast",
+                new=AsyncMock(
+                    return_value={
+                        "final_output_file_path": str(
+                            tmp_path / "episodes" / "ep-dir" / "out.mp3"
+                        ),
+                        "transcript": {},
+                        "outline": {},
+                    }
+                ),
+            ),
+            patch("open_notebook.podcasts.audio_paths.PODCASTS_FOLDER", str(tmp_path)),
+            patch(
+                "commands.podcast_commands.build_episode_output_dir",
+                new=lambda *args: ("ep-dir", tmp_path / "ep-dir"),
+            ),
+            patch("open_notebook.podcasts.models.PodcastEpisode.save", new=AsyncMock()),
+        ):
+            result = await generate_podcast_command(make_input())
+
+        assert result.success is True
+        speakers_config = configure_calls["speakers_config"]["profiles"]
+        assert "business_panel" not in speakers_config
+        assert speakers_config["Tech Experts"]["tts_provider"] == "openai"
+
+        # The whole config passes podcast-creator's own validation.
+        from podcast_creator.speakers import SpeakerConfig
+
+        SpeakerConfig(profiles=speakers_config)

From 315d5255af2a5132aada41c94d5c3c5dc8e837aa Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 18:31:01 -0300
Subject: [PATCH 338/345] chore(release): v1.15.0 (#1455)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md   | 2 ++
 pyproject.toml | 2 +-
 uv.lock        | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 64e3209b..2ca4f606 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.15.0] - 2026-10-04
+
 ### Added
 - **OpenDocument uploads and YouTube unblocking options.** `.odt`, `.ods` and `.odp` files (and `.htm`) can be uploaded as sources (content-core 2.2). New content-core settings are documented: `CCORE_YOUTUBE_PROXY` and `CCORE_YOUTUBE_COOKIES_FILE` get YouTube transcripts through when YouTube blocks the server's IP, and `CCORE_AUDIO_SEGMENT_MINUTES` controls how long audio is split for transcription (#1439)
 - **SiliconFlow and Z.ai providers.** Both are available in Manage → Models with credential setup, connection test and model discovery (language models). SiliconFlow serves hosted DeepSeek, Qwen, GLM and Kimi models; mainland China accounts set the credential's Base URL to `https://api.siliconflow.cn/v1`. Z.ai serves the GLM family. Model discovery honors their Base URL override (from the credential or `SILICONFLOW_BASE_URL` / `ZAI_BASE_URL`), as it already did for OpenAI (#1409, #1437)
diff --git a/pyproject.toml b/pyproject.toml
index 07303b11..9e152b39 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "open-notebook"
-version = "1.14.0"
+version = "1.15.0"
 description = "An open source implementation of a research assistant, inspired by Google Notebook LM"
 authors = [
     {name = "Luis Novo", email = "lfnovo@gmail.com"}
diff --git a/uv.lock b/uv.lock
index f1a218c3..c276bc6c 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2024,7 +2024,7 @@ wheels = [
 
 [[package]]
 name = "open-notebook"
-version = "1.14.0"
+version = "1.15.0"
 source = { editable = "." }
 dependencies = [
     { name = "ai-prompter" },

From a66c6ae41279e696936fab438347bdc91955356e Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 22:35:44 -0300
Subject: [PATCH 339/345] docs: drop settings that do nothing; fix Docker env
 guidance (#1456)

* docs: drop settings that do nothing; fix Docker env guidance

API_CLIENT_TIMEOUT was never read: timeout advice now covers
ESPERANTO_LLM_TIMEOUT (keep below 600) and the web UI's 10-minute
limit (NEXT_PUBLIC_API_TIMEOUT_MS, build time only). The remaining
SURREAL_COMMANDS_MAX_TASKS advice uses OPEN_NOTEBOOK_WORKER_MAX_TASKS.

The shipped docker-compose.yml loads no env file into the container and
`docker compose restart` keeps the old environment, so Docker steps now
point to the open_notebook environment: block and `docker compose up -d`.
Also fixes the security page's key-derivation note (PBKDF2 since v1.15).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review (worker env from source, restart vs up -d, secrets, Ask idle timeout)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                                  |  5 +-
 docs/1-INSTALLATION/docker-compose.md         |  4 +-
 docs/5-CONFIGURATION/advanced.md              | 44 ++++++-----
 docs/5-CONFIGURATION/environment-reference.md |  7 +-
 docs/5-CONFIGURATION/index.md                 | 55 ++++++--------
 docs/5-CONFIGURATION/reverse-proxy.md         | 11 +--
 docs/5-CONFIGURATION/security.md              |  8 +-
 docs/6-TROUBLESHOOTING/ai-chat-issues.md      | 12 +--
 docs/6-TROUBLESHOOTING/connection-issues.md   | 75 ++++++++++---------
 docs/6-TROUBLESHOOTING/faq.md                 | 20 ++---
 docs/6-TROUBLESHOOTING/index.md               |  5 +-
 docs/6-TROUBLESHOOTING/quick-fixes.md         | 14 ++--
 open_notebook/config.py                       |  4 +-
 13 files changed, 130 insertions(+), 134 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2ca4f606..e26a7590 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+- **Docs no longer recommend settings that do nothing.** `API_CLIENT_TIMEOUT` was never read by Open Notebook; the timeout guidance now covers what actually applies: `ESPERANTO_LLM_TIMEOUT` per model call (keep it below 600) and the web UI's 10-minute request limit (`NEXT_PUBLIC_API_TIMEOUT_MS`, build time only). Remaining `SURREAL_COMMANDS_MAX_TASKS` advice now uses `OPEN_NOTEBOOK_WORKER_MAX_TASKS`. Docker instructions no longer say to edit `.env` and `docker compose restart`: the shipped compose file doesn't load `.env` into the container and `restart` doesn't reload environment changes, so they now point to the `open_notebook` service's `environment:` block and `docker compose up -d`
+
 ## [1.15.0] - 2026-10-04
 
 ### Added
@@ -29,7 +32,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - **Podcasts generate on a fresh install again.** Generation hands every speaker profile to podcast-creator, which requires a voice model on each; the seeded profiles ship without one, so any unconfigured profile failed every podcast with `validation errors for SpeakerConfig`, even when generating with a complete profile. Speaker profiles without a voice model are now left out of the config (with a warning), like unresolvable episode profiles already were; the selected profile still fails early with a clear error if it has no voice model (#1450)
 - **The worker no longer stalls when a source is deleted before it is processed.** `Source.get()` raises `NotFoundError` for a missing record, so the job was retried as a transient failure (up to 15 attempts with backoff) and every job behind it waited; a missing source or transformation now fails the job immediately. Relatedly, loading a record no longer reports a database failure (e.g. a SurrealDB transaction conflict) as "not found": it raises a database error, so it stays retryable in jobs and returns 500 instead of 404 in the API (#1363)
-- **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` (and `API_CLIENT_TIMEOUT` above it) explicitly (#1434)
+- **Model calls default to a 180-second timeout.** esperanto 2.28 now enforces `ESPERANTO_LLM_TIMEOUT` on every provider (60 s by default); before, most providers used their SDK default and Ollama waited indefinitely. Open Notebook now sets 180 s when the variable is unset, so long answers and slower models aren't cut off at 60 s. **Ollama and other slow local setups** that relied on unlimited waits should set `ESPERANTO_LLM_TIMEOUT` explicitly, below 600 s (the web UI's request timeout) (#1434)
 - Batch large embedding inserts into groups of 50 records and reuse one database connection across batches to reduce oversized WebSocket payloads and repeated sign-ins.
 - `GET /api/notebooks` now normalizes `order_by` through the shared `_validate_order_by()` guard, keeping its stricter `name`/`created`/`updated` allowlist on top, so the two ORDER BY validators can no longer drift (#1416)
 - **Source chat no longer repeats earlier answers in the streamed reply.** The stream sent every AI message in the checkpointed history, so the second and later answers arrived concatenated with all previous ones; it now sends only the new answer. The context badge ("1 Sources") is also restored from the saved session after a page refresh (#1393)
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index ca9bde3e..cdc1d737 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -186,9 +186,9 @@ volumes:
   ollama_models:
 ```
 
-Then restart and pull a model:
+Then start it and pull a model:
 ```bash
-docker compose restart
+docker compose up -d
 docker exec open-notebook-local-ollama-1 ollama pull mistral
 ```
 
diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 5af780b4..95e13df9 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -9,18 +9,18 @@ Performance tuning, debugging, and advanced features.
 ### Concurrency Control
 
 ```env
-# Max concurrent database operations (default: 5)
-# Increase: Faster processing, more conflicts
-# Decrease: Slower, fewer conflicts
-SURREAL_COMMANDS_MAX_TASKS=5
+# Max background tasks the worker runs at once (default: 5)
+# Increase: faster bulk processing, more load on your models and database
+# Decrease: slower, gentler on local models and rate limits
+OPEN_NOTEBOOK_WORKER_MAX_TASKS=5
 ```
 
 **Guidelines:**
-- CPU: 2 cores → 2-3 tasks
-- CPU: 4 cores → 5 tasks (default)
-- CPU: 8+ cores → 10-20 tasks
+- Local LLM on a single GPU → 1 (sequential)
+- Cloud providers with rate limits → 2-3
+- Cloud providers, plenty of quota → 5 (default) or more
 
-Higher concurrency = more throughput but more database conflicts (retries handle this).
+It is read when the worker starts, so restart the worker (or recreate the container) after changing it. Higher concurrency = more throughput but more database conflicts (retries handle this).
 
 ### Retry Strategy
 
@@ -40,21 +40,19 @@ For high-concurrency deployments, use `exponential_jitter` to prevent thundering
 ### Timeout Tuning
 
 ```env
-# Client timeout (default: 300 seconds)
-API_CLIENT_TIMEOUT=300
-
-# LLM timeout (default: 180 seconds)
+# Timeout for each model call (default: 180 seconds)
 ESPERANTO_LLM_TIMEOUT=180
 ```
 
 `ESPERANTO_LLM_TIMEOUT` limits each model call (chat, Ask, transformations, podcast outline and transcript) and applies to every provider, including Ollama. Open Notebook sets it to 180 seconds when you don't; set it yourself to change it. Speech-to-text and text-to-speech have their own, longer timeouts.
 
-**Guideline:** Set `API_CLIENT_TIMEOUT` > `ESPERANTO_LLM_TIMEOUT` + buffer
+The web UI waits up to 10 minutes for a response (`NEXT_PUBLIC_API_TIMEOUT_MS`, default `600000`; `0` disables it). For requests that wait for a complete answer, such as notebook chat, that is a total budget. Ask streams its answer and only gives up after 10 minutes without new output. The value is compiled into the frontend at build time, so in the published Docker images it is fixed at 10 minutes, and changing it means building the frontend yourself.
+
+**Guideline:** keep `ESPERANTO_LLM_TIMEOUT` below 600 seconds, so a slow model fails with a clear error before the UI gives up.
 
 ```
 Example (slow local models):
   ESPERANTO_LLM_TIMEOUT=420
-  API_CLIENT_TIMEOUT=600  # 420 + 180 second buffer
 ```
 
 ---
@@ -317,7 +315,7 @@ SURREAL_DATABASE
 
 ### Performance
 ```env
-SURREAL_COMMANDS_MAX_TASKS
+OPEN_NOTEBOOK_WORKER_MAX_TASKS
 SURREAL_COMMANDS_RETRY_ENABLED
 SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS
 SURREAL_COMMANDS_RETRY_WAIT_STRATEGY
@@ -329,8 +327,8 @@ SURREAL_COMMANDS_RETRY_WAIT_MAX
 ```env
 API_URL
 INTERNAL_API_URL
-API_CLIENT_TIMEOUT
 ESPERANTO_LLM_TIMEOUT
+NEXT_PUBLIC_API_TIMEOUT_MS  # build time only
 ```
 
 ### Audio/TTS
@@ -382,7 +380,7 @@ python -c "import os; print(os.getenv('SURREAL_URL'))"
 
 ```env
 # Reduce concurrency
-SURREAL_COMMANDS_MAX_TASKS=2
+OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
 
 # Reduce TTS batch size
 TTS_BATCH_SIZE=1
@@ -391,18 +389,18 @@ TTS_BATCH_SIZE=1
 ### High CPU Usage
 
 ```env
-# Check worker count
-SURREAL_COMMANDS_MAX_TASKS
+# Check worker concurrency
+OPEN_NOTEBOOK_WORKER_MAX_TASKS
 
 # Reduce if maxed out:
-SURREAL_COMMANDS_MAX_TASKS=5
+OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
 ```
 
 ### Slow Responses
 
 ```env
-# Check timeout settings
-API_CLIENT_TIMEOUT=300
+# Give slow models more time per call (keep below 600)
+ESPERANTO_LLM_TIMEOUT=420
 
 # Check retry config
 SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=3
@@ -412,7 +410,7 @@ SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=3
 
 ```env
 # Reduce concurrency
-SURREAL_COMMANDS_MAX_TASKS=3
+OPEN_NOTEBOOK_WORKER_MAX_TASKS=3
 
 # Use jitter strategy
 SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index a8bfcd0e..3febc6fb 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -10,7 +10,6 @@ Comprehensive list of all environment variables available in Open Notebook.
 |----------|-----------|---------|-------------|
 | `API_URL` | No | Auto-detected | URL where frontend reaches API (e.g., http://localhost:5055) |
 | `INTERNAL_API_URL` | No | http://localhost:5055 | Internal API URL for Next.js server-side proxying |
-| `API_CLIENT_TIMEOUT` | No | 300 | Client timeout in seconds (how long to wait for API response) |
 | `OPEN_NOTEBOOK_PASSWORD` | No | None | Password to protect Open Notebook instance |
 | `OPEN_NOTEBOOK_ENCRYPTION_KEY` | **Yes** | None | Secret string to encrypt credentials stored in database (any string works). **Required** for the credential system. Supports Docker secrets via `_FILE` suffix. |
 | `FRONTEND_BIND_HOST` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies. (Replaces `HOSTNAME`, which container runtimes such as Podman override with the container/pod hostname, causing Next.js to bind to the wrong address) |
@@ -59,7 +58,8 @@ Comprehensive list of all environment variables available in Open Notebook.
 
 | Variable | Required? | Default | Description |
 |----------|-----------|---------|-------------|
-| `ESPERANTO_LLM_TIMEOUT` | No | 180 | LLM inference timeout in seconds, applied to every provider including Ollama. Open Notebook sets 180 when unset (esperanto's own default is 60). Keep it below `API_CLIENT_TIMEOUT` |
+| `ESPERANTO_LLM_TIMEOUT` | No | 180 | LLM inference timeout in seconds, applied to every provider including Ollama. Open Notebook sets 180 when unset (esperanto's own default is 60). Keep it below 600, the web UI's request timeout |
+| `NEXT_PUBLIC_API_TIMEOUT_MS` | No | 600000 | How long the web UI waits for an API response, in milliseconds (`0` disables it). **Build time only**: it is compiled into the frontend, so the published Docker images always use 10 minutes; set it when building the frontend yourself |
 | `ESPERANTO_SSL_VERIFY` | No | true | Verify SSL certificates (false = development only) |
 | `ESPERANTO_SSL_CA_BUNDLE` | No | None | Path to custom CA certificate bundle |
 
@@ -237,9 +237,8 @@ NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
 ### High-Performance Deployment
 ```
 OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-SURREAL_COMMANDS_MAX_TASKS=10
+OPEN_NOTEBOOK_WORKER_MAX_TASKS=10
 TTS_BATCH_SIZE=5
-API_CLIENT_TIMEOUT=600
 ```
 
 ### Debugging
diff --git a/docs/5-CONFIGURATION/index.md b/docs/5-CONFIGURATION/index.md
index 9764dc61..a2fc0a00 100644
--- a/docs/5-CONFIGURATION/index.md
+++ b/docs/5-CONFIGURATION/index.md
@@ -45,31 +45,25 @@ Setup: Get API key → Add credential in Manage → Models → Done
 
 Use the right file depending on your setup.
 
-### `.env` (Local Development)
+### Docker: the `environment:` block
 
-You will only use .env if you are running Open Notebook locally.
+With Docker Compose, settings go in the `open_notebook` service's `environment:` block in `docker-compose.yml`. Apply changes with `docker compose up -d`; `docker compose restart` keeps the old environment.
+
+The shipped `docker-compose.yml` does not load any env file into the container. A `.env` file next to it is only used to fill `${...}` placeholders in the compose file (`SURREAL_USER`, `SURREAL_PASSWORD`). To keep settings in a file instead, add `env_file: .env` (or any file name) to the `open_notebook` service.
+
+### `.env` (Running from source)
 
 ```
 Located in: project root
-Use for: Development on your machine
+Use for: running Open Notebook from source
 Format: KEY=value, one per line
 ```
 
-### `docker.env` (Docker Deployment)
-
-You will use this file to hold your environment variables if you are using docker-compose and prefer not to put the variables directly in the compose file. 
-```
-Located in: project root (or ./docker)
-Use for: Docker deployments
-Format: Same as .env
-Loaded by: docker-compose.yml
-```
-
 ---
 
 ## Most Important Settings
 
-All of the settings provided below are to be placed inside your environment file (.env or docker.env depending on your setup).
+All of the settings below go in the `open_notebook` service's `environment:` block (Docker) or in `.env` (from source).
 
 
 ###  Surreal Database
@@ -123,7 +117,7 @@ Auto-detection works for most setups.
 
 ### Scenario 1: Docker on Localhost (Default)
 ```env
-# In docker.env:
+# docker-compose.yml → open_notebook → environment:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 # Everything else uses defaults
 # Then configure AI provider in Manage → Models
@@ -131,14 +125,14 @@ OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 
 ### Scenario 2: Docker on Remote Server
 ```env
-# In docker.env:
+# docker-compose.yml → open_notebook → environment:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 API_URL=http://your-server-ip:5055
 ```
 
 ### Scenario 3: Behind Reverse Proxy (Nginx/Cloudflare)
 ```env
-# In docker.env:
+# docker-compose.yml → open_notebook → environment:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 API_URL=https://your-domain.com
 # The reverse proxy handles HTTPS
@@ -146,14 +140,14 @@ API_URL=https://your-domain.com
 
 ### Scenario 4: Using Ollama Locally
 ```env
-# In .env:
+# docker-compose.yml → open_notebook → environment:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 # Then add Ollama credential in Manage → Models
 ```
 
 ### Scenario 5: Using Azure OpenAI
 ```env
-# In docker.env:
+# docker-compose.yml → open_notebook → environment:
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 # Then add Azure OpenAI credential in Manage → Models
 ```
@@ -252,28 +246,25 @@ No file editing, no restarts. Credentials stored securely (encrypted) in databas
 
 → **[Full Guide: API Configuration](../3-USER-GUIDE/api-configuration.md)**
 
-### Method 2: Edit `.env` File (Infrastructure Settings)
+### Method 2: Environment Variables (Infrastructure Settings)
 
-For database, network, and encryption key settings:
+For database, network, encryption key and tuning settings.
 
-```bash
-1. Open .env in your editor
-2. Set OPEN_NOTEBOOK_ENCRYPTION_KEY and database vars
-3. Save
-4. Restart services
-```
+**Docker:** add them under the `open_notebook` service's `environment:` block, then run `docker compose up -d` (`docker compose restart` does not pick up environment changes):
 
-### Method 3: Set Docker Environment (Deployment)
-
-```bash
+```yaml
 # In docker-compose.yml:
 services:
-  api:
+  open_notebook:
     environment:
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
       - API_URL=https://your-domain.com
 ```
 
+The shipped `docker-compose.yml` does not load a `.env` file into the container. Docker Compose only reads `.env` to fill `${...}` placeholders in the compose file (that's how `SURREAL_USER` / `SURREAL_PASSWORD` work), so a variable that exists only in `.env` never reaches Open Notebook. If you prefer keeping settings in a file, add `env_file: .env` to the `open_notebook` service yourself.
+
+**From source:** put them in `.env` and restart the API and worker. The exception is `OPEN_NOTEBOOK_WORKER_MAX_TASKS`: the worker's launch command reads it from your shell before `.env` is loaded, so `export` it before `make worker-start`.
+
 ---
 
 ## Verification
@@ -299,7 +290,7 @@ After configuration, verify it works:
 | Wrong database URL | Can't start API | Check SURREAL_URL format |
 | Expose port 5055 | "Can't connect to server" | Expose 5055 in docker-compose |
 | Typo in env var | Settings ignored | Check spelling (case-sensitive!) |
-| Don't restart | Old config still used | Restart services after env changes |
+| Using `docker compose restart` | Old config still used | Run `docker compose up -d` after env changes (from source: restart the API and worker) |
 
 ---
 
diff --git a/docs/5-CONFIGURATION/reverse-proxy.md b/docs/5-CONFIGURATION/reverse-proxy.md
index 622f1ec7..d369fae8 100644
--- a/docs/5-CONFIGURATION/reverse-proxy.md
+++ b/docs/5-CONFIGURATION/reverse-proxy.md
@@ -587,12 +587,13 @@ serversTransport:
 
 If you still experience timeouts after configuring your proxy, you can also adjust the application timeouts:
 
-```bash
-# In .env file:
-API_CLIENT_TIMEOUT=600      # API client timeout (default: 300s)
-ESPERANTO_LLM_TIMEOUT=420   # LLM inference timeout (default: 180s)
+```yaml
+# docker-compose.yml → open_notebook → environment:
+- ESPERANTO_LLM_TIMEOUT=420   # per model call (default: 180s); keep below 600
 ```
 
+The web UI itself waits up to 10 minutes per request, so set your proxy timeouts to at least 600 seconds.
+
 See [Advanced Configuration](advanced.md) for more timeout options.
 
 ---
@@ -866,7 +867,7 @@ curl -H "Authorization: Bearer your-password-here" \
 4. **Enable security headers** (HSTS, X-Frame-Options, X-Content-Type-Options, X-XSS-Protection)
 5. **Set up certificate renewal** for Let's Encrypt (usually automatic with certbot)
 6. **Keep ports 5055 and 8502 accessible** from your reverse proxy container (use Docker networks)
-7. **Use environment files** (`.env` or `docker.env`) to manage configuration securely
+7. **Keep secrets out of version control**: if your `docker-compose.yml` is tracked in git, put secrets in an untracked `docker-compose.override.yml` (see `docker-compose.override.yml.example`) or an uncommitted `env_file:`
 8. **Test your configuration** before going live:
    - Check browser console for config messages
    - Test API: `curl https://your-domain.com/api/config`
diff --git a/docs/5-CONFIGURATION/security.md b/docs/5-CONFIGURATION/security.md
index 5f4ee67f..abd15134 100644
--- a/docs/5-CONFIGURATION/security.md
+++ b/docs/5-CONFIGURATION/security.md
@@ -20,11 +20,11 @@ Open Notebook encrypts API keys stored in the database using Fernet symmetric en
 Set the encryption key to any secret string:
 
 ```bash
-# .env or docker.env
+# docker-compose.yml → open_notebook → environment: (or .env when running from source)
 OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-passphrase
 ```
 
-Any string works — it will be securely derived via SHA-256 internally. Use a strong passphrase for production deployments.
+Any string works: it is stretched into the encryption key with PBKDF2-HMAC-SHA256 (600k iterations). That slows brute force but can't save a guessable passphrase, so use a long, random one for production deployments.
 
 ### Default Credentials
 
@@ -93,10 +93,10 @@ services:
     # ... rest of config
 ```
 
-Or using environment file:
+Or using an environment file (add `env_file: .env` to the `open_notebook` service; the shipped compose file doesn't load one):
 
 ```bash
-# docker.env
+# .env
 OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-encryption-key
 OPEN_NOTEBOOK_PASSWORD=your_secure_password
 ```
diff --git a/docs/6-TROUBLESHOOTING/ai-chat-issues.md b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
index c2a0edc4..9dcafeb5 100644
--- a/docs/6-TROUBLESHOOTING/ai-chat-issues.md
+++ b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
@@ -219,11 +219,11 @@ Switch in: Manage → Models
 
 ### Solution 3: Increase Timeout
 ```bash
-# In .env:
-API_CLIENT_TIMEOUT=600  # 10 minutes
+# docker-compose.yml → open_notebook → environment:
+#   - ESPERANTO_LLM_TIMEOUT=420  # per model call (default: 180); keep below 600
 
-# Restart:
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Solution 4: Check System Load
@@ -232,8 +232,8 @@ docker compose restart
 docker stats
 
 # If CPU >80% or memory >90%:
-# Reduce: SURREAL_COMMANDS_MAX_TASKS=2
-# Restart: docker compose restart
+# Reduce: OPEN_NOTEBOOK_WORKER_MAX_TASKS=2 (under open_notebook → environment:)
+# Apply: docker compose up -d
 ```
 
 ---
diff --git a/docs/6-TROUBLESHOOTING/connection-issues.md b/docs/6-TROUBLESHOOTING/connection-issues.md
index 4bb4187b..e094ba78 100644
--- a/docs/6-TROUBLESHOOTING/connection-issues.md
+++ b/docs/6-TROUBLESHOOTING/connection-issues.md
@@ -56,17 +56,17 @@ docker compose up -d
 
 ### Solution 3: API_URL Mismatch
 ```bash
-# In .env, check API_URL:
-cat .env | grep API_URL
+# Check the API_URL the container actually sees:
+docker compose exec open_notebook printenv API_URL
 
-# Should match your frontend URL:
+# It should be the API address as your browser reaches it:
 # Frontend: http://localhost:8502
 # API_URL: http://localhost:5055
 
-# If wrong, fix it:
-# API_URL=http://localhost:5055
-# Then restart:
-docker compose restart frontend
+# If wrong, fix it in docker-compose.yml → open_notebook → environment:
+#   - API_URL=http://localhost:5055
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Solution 4: Firewall Blocking
@@ -156,12 +156,12 @@ docker compose logs api | grep "slow\|timeout"
 
 ### Reduce Load
 ```bash
-# In .env:
-SURREAL_COMMANDS_MAX_TASKS=2
-API_CLIENT_TIMEOUT=600
+# docker-compose.yml → open_notebook → environment:
+#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
+#   - ESPERANTO_LLM_TIMEOUT=420
 
-# Restart
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Check Network
@@ -213,11 +213,11 @@ location /api {
 
 ### Set API_URL for HTTPS
 ```bash
-# In .env:
-API_URL=https://yourdomain.com
+# docker-compose.yml → open_notebook → environment:
+#   - API_URL=https://yourdomain.com
 
-# Restart
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ---
@@ -235,22 +235,22 @@ docker compose restart
 
 ### Enable Retry Logic
 ```bash
-# In .env:
-SURREAL_COMMANDS_RETRY_ENABLED=true
-SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=5
-SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
+# docker-compose.yml → open_notebook → environment:
+#   - SURREAL_COMMANDS_RETRY_ENABLED=true
+#   - SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=5
+#   - SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
 
-# Restart
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Reduce Concurrency
 ```bash
-# In .env:
-SURREAL_COMMANDS_MAX_TASKS=2
+# docker-compose.yml → open_notebook → environment:
+#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
 
-# Restart
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Check Network Stability
@@ -282,11 +282,11 @@ hostname -I
 
 ### Step 2: Update API_URL
 ```bash
-# In .env:
-API_URL=http://192.168.1.100:5055
+# docker-compose.yml → open_notebook → environment:
+#   - API_URL=http://192.168.1.100:5055
 
-# Restart
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ### Step 3: Access from Other Machine
@@ -344,12 +344,12 @@ CORS policy: Response to preflight request doesn't pass access control check
 # - Requesting from: http://localhost:8502
 # - Trying to reach: http://localhost:5055
 
-# Make sure API_URL matches:
-API_URL=http://localhost:5055
+# Make sure API_URL (docker-compose.yml → open_notebook → environment:) matches:
+#   - API_URL=http://localhost:5055
 
 # And protocol matches (http/https)
-# Restart
-docker compose restart frontend
+# Apply (restart does not reload environment):
+docker compose up -d
 ```
 
 ---
@@ -408,7 +408,7 @@ Works with HTTP but fails with HTTPS
 
 ### Solution 1: Use Custom CA Bundle (Recommended)
 ```bash
-# In .env:
+# From source, in .env:
 ESPERANTO_SSL_CA_BUNDLE=/path/to/your/ca-bundle.pem
 
 # For Docker, mount the certificate:
@@ -424,8 +424,9 @@ This applies to chat **and** to credential Test Connection / model discovery.
 ### Solution 2: Disable SSL Verification (Development Only)
 ```bash
 # WARNING: Only use in trusted development environments
-# In .env:
-ESPERANTO_SSL_VERIFY=false
+# Docker: docker-compose.yml → open_notebook → environment:
+#   - ESPERANTO_SSL_VERIFY=false
+# From source: ESPERANTO_SSL_VERIFY=false in .env
 ```
 
 Same scope: Esperanto providers, Test Connection, and Discover Models.
diff --git a/docs/6-TROUBLESHOOTING/faq.md b/docs/6-TROUBLESHOOTING/faq.md
index f4b9cc81..7c77d220 100644
--- a/docs/6-TROUBLESHOOTING/faq.md
+++ b/docs/6-TROUBLESHOOTING/faq.md
@@ -206,20 +206,22 @@ tar -xzf backup-20240101.tar.gz
 - First request (model loading)
 
 **Solutions**:
-```bash
-# In .env:
-API_CLIENT_TIMEOUT=600  # 10 minutes for slow setups
-ESPERANTO_LLM_TIMEOUT=420  # 7 minutes for model inference (default: 180)
+```yaml
+# docker-compose.yml → open_notebook → environment:
+- ESPERANTO_LLM_TIMEOUT=420  # 7 minutes per model call (default: 180)
 ```
 
+Then apply it with `docker compose up -d` (`restart` does not reload environment variables).
+
 ### Recommended timeouts by setup:
 
-| Setup | API_CLIENT_TIMEOUT |
+| Setup | ESPERANTO_LLM_TIMEOUT |
 |-------|-------------------|
-| Cloud APIs (OpenAI, Anthropic) | 300 (default) |
-| Local Ollama with GPU | 600 |
-| Local Ollama with CPU | 1200 |
-| Remote LM Studio | 900 |
+| Cloud APIs (OpenAI, Anthropic) | 180 (default) |
+| Local Ollama with GPU | 300 |
+| Local Ollama with CPU, LM Studio | 420-540 |
+
+Stay below 600: the web UI gives up on a request after 10 minutes, and that limit is fixed in the published images.
 
 ---
 
diff --git a/docs/6-TROUBLESHOOTING/index.md b/docs/6-TROUBLESHOOTING/index.md
index 99da3e4f..80c2c849 100644
--- a/docs/6-TROUBLESHOOTING/index.md
+++ b/docs/6-TROUBLESHOOTING/index.md
@@ -213,8 +213,9 @@ curl http://localhost:5055/health
 # Check resource usage
 docker stats
 
-# Reduce concurrency in .env
-SURREAL_COMMANDS_MAX_TASKS=2
+# Reduce concurrency: docker-compose.yml → open_notebook → environment:
+#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
+docker compose up -d
 ```
 
 **High costs?**
diff --git a/docs/6-TROUBLESHOOTING/quick-fixes.md b/docs/6-TROUBLESHOOTING/quick-fixes.md
index 4d5ad583..9bfa32f0 100644
--- a/docs/6-TROUBLESHOOTING/quick-fixes.md
+++ b/docs/6-TROUBLESHOOTING/quick-fixes.md
@@ -30,7 +30,7 @@ docker compose restart
 ```
 
 **If still broken:**
-- Check `API_URL` in .env (should match your frontend URL)
+- Check `API_URL` in the `open_notebook` service's `environment:` (`docker compose exec open_notebook printenv API_URL`); it should be the API address as your browser reaches it
 - See [Connection Issues](connection-issues.md)
 
 ---
@@ -79,8 +79,8 @@ lsof -i :8502
 # Change: - "8502:8502"
 # To:     - "8503:8502"
 
-# Then restart
-docker compose restart
+# Then recreate the container (restart keeps the old ports)
+docker compose up -d
 # Access at: http://localhost:8503
 ```
 
@@ -273,11 +273,11 @@ df -h
 **Solution (1 minute):**
 
 ```bash
-# In .env, reduce concurrency:
-SURREAL_COMMANDS_MAX_TASKS=2
+# docker-compose.yml → open_notebook → environment:
+#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
 
-# Then restart:
-docker compose restart
+# Apply (restart does not reload environment):
+docker compose up -d
 
 # This makes it slower but more stable
 ```
diff --git a/open_notebook/config.py b/open_notebook/config.py
index 72018839..a277c48d 100644
--- a/open_notebook/config.py
+++ b/open_notebook/config.py
@@ -32,8 +32,8 @@ os.makedirs(TIKTOKEN_CACHE_DIR, exist_ok=True)
 # Since esperanto 2.28, to_langchain() enforces ESPERANTO_LLM_TIMEOUT on every
 # provider (default 60 s; before, most providers used their SDK default and
 # Ollama waited forever). 60 s cuts off long answers and slow local models, so
-# Open Notebook defaults it to 180 s. It stays below the default
-# API_CLIENT_TIMEOUT (300 s). An explicit value always wins. Both the API and
+# Open Notebook defaults it to 180 s, well below the web UI's 600 s request
+# timeout (NEXT_PUBLIC_API_TIMEOUT_MS). An explicit value always wins. Both the API and
 # the worker import this module before any model is created.
 DEFAULT_LLM_TIMEOUT_SECONDS = 180
 

From 37217b01de724de586b847820f0df99a7db64cd5 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 22:51:31 -0300
Subject: [PATCH 340/345] fix: error hints, Italian in the language menu and
 dev fallbacks (docs review) (#1457)

* fix: error hints, Italian menu entry and dev fallbacks found by the docs review

- error_classifier: read timeouts get their own message naming
  ESPERANTO_LLM_TIMEOUT; connect failures keep "Could not connect".
  Auth hint points to Manage -> Models; provision's "Please go to
  Manage" message is recognized again.
- Podcast voice hint and the empty-episodes text point to real screens.
- LanguageToggle renders the registered languages list, so it-IT shows
  up (and future locales can't be missed); it-IT date locale added.
  The per-language common.* labels it used are removed.
- make start-all uses the shipped compose file.
- Legacy SURREAL_ADDRESS/SURREAL_PORT fallback builds ws://host:port/rpc.
- .env.example uses the real OPEN_NOTEBOOK_CHUNK_* names.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: address review (IPv6 legacy address, connection-timed-out wording, stronger tests)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* test: assert exception class for OS connection timeouts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .env.example                                  |  6 +-
 CHANGELOG.md                                  |  6 ++
 Makefile                                      |  2 +-
 commands/podcast_commands.py                  |  2 +-
 .../src/components/common/LanguageToggle.tsx  | 96 ++++---------------
 frontend/src/lib/locales/bn-IN/index.ts       | 15 +--
 frontend/src/lib/locales/ca-ES/index.ts       | 15 +--
 frontend/src/lib/locales/de-DE/index.ts       | 15 +--
 frontend/src/lib/locales/en-US/index.ts       | 15 +--
 frontend/src/lib/locales/es-ES/index.ts       | 15 +--
 frontend/src/lib/locales/fr-FR/index.ts       | 15 +--
 frontend/src/lib/locales/it-IT/index.ts       | 15 +--
 frontend/src/lib/locales/ja-JP/index.ts       | 15 +--
 frontend/src/lib/locales/pl-PL/index.ts       | 15 +--
 frontend/src/lib/locales/pt-BR/index.ts       | 15 +--
 frontend/src/lib/locales/ru-RU/index.ts       | 15 +--
 frontend/src/lib/locales/tr-TR/index.ts       | 15 +--
 frontend/src/lib/locales/zh-CN/index.ts       | 15 +--
 frontend/src/lib/locales/zh-TW/index.ts       | 15 +--
 frontend/src/lib/utils/date-locale.test.ts    | 22 +++++
 frontend/src/lib/utils/date-locale.ts         |  3 +-
 open_notebook/database/repository.py          |  8 +-
 open_notebook/utils/error_classifier.py       | 18 ++--
 tests/test_database_url.py                    | 44 +++++++++
 tests/test_error_classifier.py                | 60 ++++++++++++
 tests/test_podcast_error_hints.py             |  2 +-
 26 files changed, 189 insertions(+), 290 deletions(-)
 create mode 100644 frontend/src/lib/utils/date-locale.test.ts
 create mode 100644 tests/test_database_url.py
 create mode 100644 tests/test_error_classifier.py

diff --git a/.env.example b/.env.example
index ddcd9ecf..c9381423 100644
--- a/.env.example
+++ b/.env.example
@@ -62,9 +62,9 @@ SURREAL_DATABASE=open_notebook
 # OMLX_API_BASE=http://localhost:11435/v1
 # OMLX_API_KEY=  # optional; only if oMLX was started with --api-key
 
-# Content processing
-# CHUNK_SIZE=1500
-# CHUNK_OVERLAP=150
+# Content processing: embedding chunk size, in tokens
+# OPEN_NOTEBOOK_CHUNK_SIZE=400
+# OPEN_NOTEBOOK_CHUNK_OVERLAP=60  # default: 15% of the chunk size
 
 # Remote Crawl4AI server for the crawl4ai URL engine (no local install needed).
 # Crawl4AI Docker >= 0.9.0 requires a bearer token for external connections.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e26a7590..1ac2bba3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 - **Docs no longer recommend settings that do nothing.** `API_CLIENT_TIMEOUT` was never read by Open Notebook; the timeout guidance now covers what actually applies: `ESPERANTO_LLM_TIMEOUT` per model call (keep it below 600) and the web UI's 10-minute request limit (`NEXT_PUBLIC_API_TIMEOUT_MS`, build time only). Remaining `SURREAL_COMMANDS_MAX_TASKS` advice now uses `OPEN_NOTEBOOK_WORKER_MAX_TASKS`. Docker instructions no longer say to edit `.env` and `docker compose restart`: the shipped compose file doesn't load `.env` into the container and `restart` doesn't reload environment changes, so they now point to the `open_notebook` service's `environment:` block and `docker compose up -d`
+- **Timeouts no longer read as connection failures.** A model that doesn't answer within `ESPERANTO_LLM_TIMEOUT` used to report "Could not connect to the AI provider"; it now says the provider took too long and how to raise the limit. Connection failures (including connect timeouts) keep the old message
+- Error hints point to screens that exist: an authentication failure sends you to Manage → Models (not "Settings → Credentials"), and an unsupported podcast voice to Podcasts → Profiles. The empty Podcasts page points to the Generate Podcast button instead of chat screens that can't start a podcast
+- **Italian is selectable in the language menu**, and dates are formatted in Italian. The menu now lists every registered language, so a new translation can't be left out again
+- `make start-all` starts SurrealDB again (it pointed to a compose file removed long ago)
+- The legacy `SURREAL_ADDRESS` / `SURREAL_PORT` fallback builds a valid database URL (`ws://host:port/rpc`, was `ws://host/rpc:port`); an address that already includes the port is kept as is
+- `.env.example` names the chunking variables Open Notebook actually reads (`OPEN_NOTEBOOK_CHUNK_SIZE` / `OPEN_NOTEBOOK_CHUNK_OVERLAP`)
 
 ## [1.15.0] - 2026-10-04
 
diff --git a/Makefile b/Makefile
index 6f1bafe1..17a1f39c 100644
--- a/Makefile
+++ b/Makefile
@@ -176,7 +176,7 @@ worker-restart: worker-stop
 start-all:
 	@echo "🚀 Starting Open Notebook (Database + API + Worker + Frontend)..."
 	@echo "📊 Starting SurrealDB..."
-	@docker compose -f docker-compose.dev.yml up -d surrealdb
+	@docker compose up -d surrealdb
 	@sleep 3
 	@echo "🔧 Starting API backend..."
 	@uv run run_api.py &
diff --git a/commands/podcast_commands.py b/commands/podcast_commands.py
index 5700401b..aa4f24f7 100644
--- a/commands/podcast_commands.py
+++ b/commands/podcast_commands.py
@@ -63,7 +63,7 @@ def explain_generation_failure(error_msg: str) -> Optional[str]:
     if "Voice name" in error_msg and "not supported" in error_msg:
         return (
             "The speaker profile's voice_id is not valid for its TTS model. "
-            "Check the voices in Settings -> Speaker Profiles against the ones "
+            "Check the speaker profile voices in Podcasts -> Profiles against the ones "
             "your voice model provides (the profiles seeded on install use "
             "OpenAI voice names)."
         )
diff --git a/frontend/src/components/common/LanguageToggle.tsx b/frontend/src/components/common/LanguageToggle.tsx
index 4ca6fc82..1afa2687 100644
--- a/frontend/src/components/common/LanguageToggle.tsx
+++ b/frontend/src/components/common/LanguageToggle.tsx
@@ -9,6 +9,15 @@ import {
 } from '@/components/ui/dropdown-menu'
 import { Languages } from 'lucide-react'
 import { useTranslation } from '@/lib/hooks/use-translation'
+import { languages, type LanguageCode } from '@/lib/locales'
+
+// Every language registered in lib/locales is listed, so a new locale can't be
+// left out of the menu. Browser-detected codes ("pt", "zh-Hant") match by prefix.
+function isActive(code: LanguageCode, current: string): boolean {
+  if (code === 'zh-CN') return current === 'zh-CN' || current === 'zh' || current.startsWith('zh-Hans')
+  if (code === 'zh-TW') return current === 'zh-TW' || current.startsWith('zh-Hant')
+  return current === code || current.startsWith(code.split('-')[0])
+}
 
 interface LanguageToggleProps {
   iconOnly?: boolean
@@ -34,84 +43,15 @@ export function LanguageToggle({ iconOnly = false }: LanguageToggleProps) {
         </Button>
       </DropdownMenuTrigger>
       <DropdownMenuContent align="end">
-        <DropdownMenuItem
-          onClick={() => setLanguage('en-US')}
-          className={currentLang === 'en-US' || currentLang.startsWith('en') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.english')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('ca-ES')}
-          className={currentLang === 'ca-ES' || currentLang.startsWith('ca') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.catalan')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem 
-          onClick={() => setLanguage('zh-CN')}
-          className={currentLang === 'zh-CN' || currentLang.startsWith('zh-Hans') || currentLang === 'zh' ? 'bg-accent' : ''}
-        >
-          <span>{t('common.chinese')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('zh-TW')}
-          className={currentLang === 'zh-TW' || currentLang.startsWith('zh-Hant') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.traditionalChinese')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('pt-BR')}
-          className={currentLang === 'pt-BR' || currentLang.startsWith('pt') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.portuguese')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('ja-JP')}
-          className={currentLang === 'ja-JP' || currentLang.startsWith('ja') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.japanese')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('fr-FR')}
-          className={currentLang === 'fr-FR' || currentLang.startsWith('fr') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.french')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('ru-RU')}
-          className={currentLang === 'ru-RU' || currentLang.startsWith('ru') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.russian')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('bn-IN')}
-          className={currentLang === 'bn-IN' || currentLang.startsWith('bn') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.bengali')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('es-ES')}
-          className={currentLang === 'es-ES' || currentLang.startsWith('es') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.spanish')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('de-DE')}
-          className={currentLang === 'de-DE' || currentLang.startsWith('de') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.german')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('pl-PL')}
-          className={currentLang === 'pl-PL' || currentLang.startsWith('pl') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.polish')}</span>
-        </DropdownMenuItem>
-        <DropdownMenuItem
-          onClick={() => setLanguage('tr-TR')}
-          className={currentLang === 'tr-TR' || currentLang.startsWith('tr') ? 'bg-accent' : ''}
-        >
-          <span>{t('common.turkish')}</span>
-        </DropdownMenuItem>
+        {languages.map(({ code, label }) => (
+          <DropdownMenuItem
+            key={code}
+            onClick={() => setLanguage(code)}
+            className={isActive(code, currentLang) ? 'bg-accent' : ''}
+          >
+            <span>{label}</span>
+          </DropdownMenuItem>
+        ))}
       </DropdownMenuContent>
     </DropdownMenu>
   )
diff --git a/frontend/src/lib/locales/bn-IN/index.ts b/frontend/src/lib/locales/bn-IN/index.ts
index fd24fe3b..3b6c0d33 100644
--- a/frontend/src/lib/locales/bn-IN/index.ts
+++ b/frontend/src/lib/locales/bn-IN/index.ts
@@ -22,17 +22,6 @@ export const bnIN = {
     newNotebook: "নতুন নোটবুক",
     newPodcast: "নতুন পডকাস্ট",
     language: "ভাষা",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "উৎস",
     notebook: "নোটবুক",
     podcast: "পডকাস্ট",
@@ -132,8 +121,6 @@ export const bnIN = {
     errorDetails: "ত্রুটির বিবরণ",
     editTransformation: "ট্রান্সফরমেশন সম্পাদনা",
     retry: "আবার চেষ্টা করুন",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "সম্পন্ন",
     saveSuccess: "সফলভাবে সংরক্ষিত",
     contextModes: {
@@ -586,7 +573,7 @@ export const bnIN = {
     loadErrorTitle: "এপিসোড লোড করতে ব্যর্থ",
     loadErrorDesc: "আমরা সর্বশেষ পডকাস্ট এপিসোড আনতে পারিনি। শীঘ্রই আবার চেষ্টা করুন।",
     loadingEpisodes: "এপিসোড লোড হচ্ছে...",
-    noEpisodesYet: "এখনও কোন পডকাস্ট এপিসোড নেই। নোটবুক বা সোর্স চ্যাট ইন্টারফেস থেকে আপনার প্রথমটি তৈরি করুন।",
+    noEpisodesYet: "এখনও কোন পডকাস্ট এপিসোড নেই। আপনার প্রথমটি তৈরি করতে \"পডকাস্ট তৈরি করুন\" ক্লিক করুন।",
     statusRunningTitle: "বর্তমানে প্রক্রিয়াকরণ",
     statusRunningDesc: "এপিসোড যা সক্রিয়ভাবে সম্পদ তৈরি করছে।",
     statusPendingTitle: "কিউ / অপেক্ষমাণ",
diff --git a/frontend/src/lib/locales/ca-ES/index.ts b/frontend/src/lib/locales/ca-ES/index.ts
index ef477c80..a780ffe4 100644
--- a/frontend/src/lib/locales/ca-ES/index.ts
+++ b/frontend/src/lib/locales/ca-ES/index.ts
@@ -22,17 +22,6 @@ export const caES = {
     newNotebook: "Quadern nou",
     newPodcast: "Podcast nou",
     language: "Idioma",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Font",
     notebook: "Quadern",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const caES = {
     errorDetails: "Detalls de l'error",
     editTransformation: "Edita la transformació",
     retry: "Torna-ho a provar",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "completat",
     saveSuccess: "S'ha desat correctament",
     contextModes: {
@@ -586,7 +573,7 @@ export const caES = {
     loadErrorTitle: "Ha fallat la càrrega dels episodis",
     loadErrorDesc: "No s'han pogut obtenir els darrers episodis de podcast. Torna-ho a provar en breu.",
     loadingEpisodes: "S'estan carregant els episodis…",
-    noEpisodesYet: "Encara no hi ha episodis de podcast. Genera el primer des de les interfícies de xat del quadern o la font.",
+    noEpisodesYet: "Encara no hi ha episodis de podcast. Fes clic a Genera un podcast per crear el primer.",
     statusRunningTitle: "S'està processant",
     statusRunningDesc: "Episodis que estan generant recursos activament.",
     statusPendingTitle: "En cua / Pendent",
diff --git a/frontend/src/lib/locales/de-DE/index.ts b/frontend/src/lib/locales/de-DE/index.ts
index 10308415..a994861e 100644
--- a/frontend/src/lib/locales/de-DE/index.ts
+++ b/frontend/src/lib/locales/de-DE/index.ts
@@ -25,17 +25,6 @@ export const deDE = {
     newNotebook: "Neues Notebook",
     newPodcast: "Neuer Podcast",
     language: "Sprache",
-    english: "Englisch",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    spanish: "Español",
-    catalan: "Català",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Quelle",
     notebook: "Notebook",
     podcast: "Podcast",
@@ -135,8 +124,6 @@ export const deDE = {
     errorDetails: "Fehlerdetails",
     editTransformation: "Transformation bearbeiten",
     retry: "Erneut versuchen",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "abgeschlossen",
     saveSuccess: "Erfolgreich gespeichert",
     contextModes: {
@@ -589,7 +576,7 @@ export const deDE = {
     loadErrorTitle: "Episoden konnten nicht geladen werden",
     loadErrorDesc: "Die neuesten Podcast-Episoden konnten nicht abgerufen werden. Versuche es gleich erneut.",
     loadingEpisodes: "Episoden werden geladen…",
-    noEpisodesYet: "Noch keine Podcast-Episoden. Erzeuge deine erste Episode über die Chat-Oberflächen eines Notebooks oder einer Quelle.",
+    noEpisodesYet: "Noch keine Podcast-Episoden. Klicke auf Podcast erzeugen, um deine erste Episode zu erstellen.",
     statusRunningTitle: "Aktuell in Verarbeitung",
     statusRunningDesc: "Episoden, deren Inhalte gerade erzeugt werden.",
     statusPendingTitle: "In Warteschlange / ausstehend",
diff --git a/frontend/src/lib/locales/en-US/index.ts b/frontend/src/lib/locales/en-US/index.ts
index 1e65517c..b29535aa 100644
--- a/frontend/src/lib/locales/en-US/index.ts
+++ b/frontend/src/lib/locales/en-US/index.ts
@@ -20,17 +20,6 @@ export const enUS = {
     newNotebook: "New Notebook",
     newPodcast: "New Podcast",
     language: "Language",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Source",
     notebook: "Notebook",
     podcast: "Podcast",
@@ -130,8 +119,6 @@ export const enUS = {
     errorDetails: "Error Details",
     editTransformation: "Edit Transformation",
     retry: "Try Again",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "completed",
     saveSuccess: "Saved successfully",
     contextModes: {
@@ -584,7 +571,7 @@ export const enUS = {
     loadErrorTitle: "Failed to load episodes",
     loadErrorDesc: "We could not fetch the latest podcast episodes. Try again shortly.",
     loadingEpisodes: "Loading episodes…",
-    noEpisodesYet: "No podcast episodes yet. Generate your first one from the notebook or source chat interfaces.",
+    noEpisodesYet: "No podcast episodes yet. Click Generate Podcast to create your first one.",
     statusRunningTitle: "Currently Processing",
     statusRunningDesc: "Episodes that are actively generating assets.",
     statusPendingTitle: "Queued / Pending",
diff --git a/frontend/src/lib/locales/es-ES/index.ts b/frontend/src/lib/locales/es-ES/index.ts
index a6598fc7..ba4957c9 100644
--- a/frontend/src/lib/locales/es-ES/index.ts
+++ b/frontend/src/lib/locales/es-ES/index.ts
@@ -22,17 +22,6 @@ export const esES = {
     newNotebook: "Nuevo cuaderno",
     newPodcast: "Nuevo podcast",
     language: "Idioma",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Fuente",
     notebook: "Cuaderno",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const esES = {
     errorDetails: "Detalles del error",
     editTransformation: "Editar transformación",
     retry: "Reintentar",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "completado",
     saveSuccess: "Guardado exitosamente",
     contextModes: {
@@ -586,7 +573,7 @@ export const esES = {
     loadErrorTitle: "Error al cargar episodios",
     loadErrorDesc: "No pudimos obtener los episodios más recientes. Intenta de nuevo en un momento.",
     loadingEpisodes: "Cargando episodios…",
-    noEpisodesYet: "Aún no hay episodios de podcast. Genera tu primero desde las interfaces de chat de cuadernos o fuentes.",
+    noEpisodesYet: "Aún no hay episodios de podcast. Haz clic en Generar podcast para crear el primero.",
     statusRunningTitle: "Procesando actualmente",
     statusRunningDesc: "Episodios que están generando activos activamente.",
     statusPendingTitle: "En cola / Pendientes",
diff --git a/frontend/src/lib/locales/fr-FR/index.ts b/frontend/src/lib/locales/fr-FR/index.ts
index dffd536c..d21ffe46 100644
--- a/frontend/src/lib/locales/fr-FR/index.ts
+++ b/frontend/src/lib/locales/fr-FR/index.ts
@@ -22,17 +22,6 @@ export const frFR = {
     newNotebook: "Nouveau Carnet",
     newPodcast: "Nouveau Podcast",
     language: "Langue",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Source",
     notebook: "Carnet",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const frFR = {
     errorDetails: "Détails de l'erreur",
     editTransformation: "Modifier la transformation",
     retry: "Réessayer",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "terminé",
     saveSuccess: "Enregistré avec succès",
     contextModes: {
@@ -586,7 +573,7 @@ export const frFR = {
     loadErrorTitle: "Échec du chargement des épisodes",
     loadErrorDesc: "Nous n'avons pas pu récupérer les derniers épisodes. Réessayez dans un instant.",
     loadingEpisodes: "Chargement des épisodes…",
-    noEpisodesYet: "Aucun épisode de podcast pour le moment. Générez votre premier depuis le carnet ou les interfaces de chat.",
+    noEpisodesYet: "Aucun épisode de podcast pour le moment. Cliquez sur Générer un podcast pour créer le premier.",
     statusRunningTitle: "En cours de traitement",
     statusRunningDesc: "Épisodes dont les ressources sont activement en cours de génération.",
     statusPendingTitle: "En file d'attente / En attente",
diff --git a/frontend/src/lib/locales/it-IT/index.ts b/frontend/src/lib/locales/it-IT/index.ts
index 5d44f6c3..fc989516 100644
--- a/frontend/src/lib/locales/it-IT/index.ts
+++ b/frontend/src/lib/locales/it-IT/index.ts
@@ -22,17 +22,6 @@ export const itIT = {
     newNotebook: "Nuovo quaderno",
     newPodcast: "Nuovo podcast",
     language: "Lingua",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Fonte",
     notebook: "Quaderno",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const itIT = {
     errorDetails: "Dettagli errore",
     editTransformation: "Modifica trasformazione",
     retry: "Riprova",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "completato",
     saveSuccess: "Salvato con successo",
     contextModes: {
@@ -586,7 +573,7 @@ export const itIT = {
     loadErrorTitle: "Impossibile caricare gli episodi",
     loadErrorDesc: "Non siamo riusciti a recuperare gli ultimi episodi podcast. Riprova tra poco.",
     loadingEpisodes: "Caricamento episodi…",
-    noEpisodesYet: "Ancora nessun episodio podcast. Genera il tuo primo dalle interfacce chat di quaderni o fonti.",
+    noEpisodesYet: "Ancora nessun episodio podcast. Fai clic su Genera Podcast per creare il primo.",
     statusRunningTitle: "In elaborazione",
     statusRunningDesc: "Episodi che stanno attivamente generando risorse.",
     statusPendingTitle: "In coda / In attesa",
diff --git a/frontend/src/lib/locales/ja-JP/index.ts b/frontend/src/lib/locales/ja-JP/index.ts
index ddec4bdb..aec17df8 100644
--- a/frontend/src/lib/locales/ja-JP/index.ts
+++ b/frontend/src/lib/locales/ja-JP/index.ts
@@ -22,17 +22,6 @@ export const jaJP = {
     newNotebook: "新規ノートブック",
     newPodcast: "新規ポッドキャスト",
     language: "言語",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "ソース",
     notebook: "ノートブック",
     podcast: "ポッドキャスト",
@@ -132,8 +121,6 @@ export const jaJP = {
     errorDetails: "エラー詳細",
     editTransformation: "変換を編集",
     retry: "再試行",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "完了",
     saveSuccess: "保存しました",
     contextModes: {
@@ -586,7 +573,7 @@ export const jaJP = {
     loadErrorTitle: "エピソードの読み込みに失敗しました",
     loadErrorDesc: "最新のポッドキャストエピソードを取得できませんでした。しばらくしてから再試行してください。",
     loadingEpisodes: "エピソードを読み込み中...",
-    noEpisodesYet: "ポッドキャストエピソードがまだありません。ノートブックまたはソースのチャットインターフェースから最初のエピソードを生成してください。",
+    noEpisodesYet: "ポッドキャストエピソードがまだありません。「ポッドキャストを生成」をクリックして最初のエピソードを作成してください。",
     statusRunningTitle: "処理中",
     statusRunningDesc: "現在アセットを生成中のエピソード。",
     statusPendingTitle: "キュー待ち / 保留中",
diff --git a/frontend/src/lib/locales/pl-PL/index.ts b/frontend/src/lib/locales/pl-PL/index.ts
index 96d7a601..cf9c7f38 100644
--- a/frontend/src/lib/locales/pl-PL/index.ts
+++ b/frontend/src/lib/locales/pl-PL/index.ts
@@ -22,17 +22,6 @@ export const plPL = {
     newNotebook: "Nowy notatnik",
     newPodcast: "Nowy podcast",
     language: "Język",
-    english: "Angielski",
-    chinese: "Chiński (uproszczony)",
-    japanese: "Japoński",
-    french: "Francuski",
-    russian: "Rosyjski",
-    bengali: "Bengalski",
-    spanish: "Hiszpański",
-    catalan: "Kataloński",
-    german: "Niemiecki",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Źródło",
     notebook: "Notatnik",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const plPL = {
     errorDetails: "Szczegóły błędu",
     editTransformation: "Edytuj transformację",
     retry: "Spróbuj ponownie",
-    traditionalChinese: "Chiński (tradycyjny)",
-    portuguese: "Portugalski",
     completed: "zakończono",
     saveSuccess: "Zapisano pomyślnie",
     contextModes: {
@@ -586,7 +573,7 @@ export const plPL = {
     loadErrorTitle: "Nie udało się załadować odcinków",
     loadErrorDesc: "Nie mogliśmy pobrać najnowszych odcinków podcastu. Spróbuj ponownie za chwilę.",
     loadingEpisodes: "Ładowanie odcinków…",
-    noEpisodesYet: "Brak odcinków podcastu. Wygeneruj pierwszy z poziomu notatnika lub interfejsu czatu źródła.",
+    noEpisodesYet: "Brak odcinków podcastu. Kliknij Wygeneruj podcast, aby utworzyć pierwszy.",
     statusRunningTitle: "Obecnie przetwarzane",
     statusRunningDesc: "Odcinki, dla których aktywnie generowane są materiały.",
     statusPendingTitle: "W kolejce / Oczekujące",
diff --git a/frontend/src/lib/locales/pt-BR/index.ts b/frontend/src/lib/locales/pt-BR/index.ts
index a862ddcd..3d0e649e 100644
--- a/frontend/src/lib/locales/pt-BR/index.ts
+++ b/frontend/src/lib/locales/pt-BR/index.ts
@@ -22,17 +22,6 @@ export const ptBR = {
     newNotebook: "Novo Caderno",
     newPodcast: "Novo Podcast",
     language: "Idioma",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Fonte",
     notebook: "Caderno",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const ptBR = {
     errorDetails: "Detalhes do Erro",
     editTransformation: "Editar Transformação",
     retry: "Tentar Novamente",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "concluído",
     saveSuccess: "Salvo com sucesso",
     contextModes: {
@@ -586,7 +573,7 @@ export const ptBR = {
     loadErrorTitle: "Falha ao carregar episódios",
     loadErrorDesc: "Não foi possível buscar os episódios de podcast mais recentes. Tente novamente em breve.",
     loadingEpisodes: "Carregando episódios…",
-    noEpisodesYet: "Nenhum episódio de podcast ainda. Gere seu primeiro a partir das interfaces de chat de caderno ou fonte.",
+    noEpisodesYet: "Nenhum episódio de podcast ainda. Clique em Gerar Podcast para criar o primeiro.",
     statusRunningTitle: "Processando Atualmente",
     statusRunningDesc: "Episódios que estão gerando ativos ativamente.",
     statusPendingTitle: "Na Fila / Pendentes",
diff --git a/frontend/src/lib/locales/ru-RU/index.ts b/frontend/src/lib/locales/ru-RU/index.ts
index 724c7381..4d3b6537 100644
--- a/frontend/src/lib/locales/ru-RU/index.ts
+++ b/frontend/src/lib/locales/ru-RU/index.ts
@@ -22,17 +22,6 @@ export const ruRU = {
     newNotebook: "Новый блокнот",
     newPodcast: "Новый подкаст",
     language: "Язык",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Источник",
     notebook: "Блокнот",
     podcast: "Подкаст",
@@ -132,8 +121,6 @@ export const ruRU = {
     errorDetails: "Детали ошибки",
     editTransformation: "Редактировать трансформацию",
     retry: "Повторить",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "завершено",
     saveSuccess: "Успешно сохранено",
     contextModes: {
@@ -586,7 +573,7 @@ export const ruRU = {
     loadErrorTitle: "Не удалось загрузить эпизоды",
     loadErrorDesc: "Не удалось получить последние эпизоды подкастов. Попробуйте позже.",
     loadingEpisodes: "Загрузка эпизодов…",
-    noEpisodesYet: "Пока нет эпизодов подкастов. Сгенерируйте первый из интерфейса чата блокнота или источника.",
+    noEpisodesYet: "Пока нет эпизодов подкастов. Нажмите «Сгенерировать подкаст», чтобы создать первый.",
     statusRunningTitle: "В процессе",
     statusRunningDesc: "Эпизоды, для которых активно генерируются материалы.",
     statusPendingTitle: "В очереди / Ожидание",
diff --git a/frontend/src/lib/locales/tr-TR/index.ts b/frontend/src/lib/locales/tr-TR/index.ts
index 48f3166d..166f3900 100644
--- a/frontend/src/lib/locales/tr-TR/index.ts
+++ b/frontend/src/lib/locales/tr-TR/index.ts
@@ -22,17 +22,6 @@ export const trTR = {
     newNotebook: "Yeni Defter",
     newPodcast: "Yeni Podcast",
     language: "Dil",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "Kaynak",
     notebook: "Defter",
     podcast: "Podcast",
@@ -132,8 +121,6 @@ export const trTR = {
     errorDetails: "Hata Ayrıntıları",
     editTransformation: "Dönüşümü Düzenle",
     retry: "Tekrar Dene",
-    traditionalChinese: "繁體中文",
-    portuguese: "Português",
     completed: "tamamlandı",
     saveSuccess: "Başarıyla kaydedildi",
     contextModes: {
@@ -586,7 +573,7 @@ export const trTR = {
     loadErrorTitle: "Bölümler yüklenemedi",
     loadErrorDesc: "En son podcast bölümleri alınamadı. Kısa süre sonra tekrar deneyin.",
     loadingEpisodes: "Bölümler yükleniyor…",
-    noEpisodesYet: "Henüz podcast bölümü yok. Defter veya kaynak sohbet arayüzlerinden ilk bölümünüzü oluşturun.",
+    noEpisodesYet: "Henüz podcast bölümü yok. İlk bölümünüzü oluşturmak için Podcast Oluştur'a tıklayın.",
     statusRunningTitle: "Şu An İşleniyor",
     statusRunningDesc: "Aktif olarak içerik oluşturan bölümler.",
     statusPendingTitle: "Kuyrukta / Beklemede",
diff --git a/frontend/src/lib/locales/zh-CN/index.ts b/frontend/src/lib/locales/zh-CN/index.ts
index b23567c9..b791bc6e 100644
--- a/frontend/src/lib/locales/zh-CN/index.ts
+++ b/frontend/src/lib/locales/zh-CN/index.ts
@@ -22,17 +22,6 @@ export const zhCN = {
     newNotebook: "新建笔记本",
     newPodcast: "新建播客",
     language: "语言",
-    english: "English",
-    chinese: "简体中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "来源",
     notebook: "笔记本",
     podcast: "播客",
@@ -132,8 +121,6 @@ export const zhCN = {
     errorDetails: "错误详情",
     editTransformation: "编辑转换规则",
     retry: "重试",
-    traditionalChinese: "繁体中文",
-    portuguese: "葡萄牙语",
     completed: "已完成",
     saveSuccess: "保存成功",
     contextModes: {
@@ -586,7 +573,7 @@ export const zhCN = {
     loadErrorTitle: "加载单集失败",
     loadErrorDesc: "无法获取最新的播客单集。请稍后重试。",
     loadingEpisodes: "正在加载单集...",
-    noEpisodesYet: "暂无播客单集。从笔记本或来源聊天界面开始生成您的第一个单集。",
+    noEpisodesYet: "暂无播客单集。点击“生成播客”创建您的第一个单集。",
     statusRunningTitle: "正在处理中",
     statusRunningDesc: "正在活跃生成资产的单集。",
     statusPendingTitle: "排队中 / 待处理",
diff --git a/frontend/src/lib/locales/zh-TW/index.ts b/frontend/src/lib/locales/zh-TW/index.ts
index 2b94c0d2..249a3f41 100644
--- a/frontend/src/lib/locales/zh-TW/index.ts
+++ b/frontend/src/lib/locales/zh-TW/index.ts
@@ -22,17 +22,6 @@ export const zhTW = {
     newNotebook: "新增筆記本",
     newPodcast: "新增播客",
     language: "語言",
-    english: "English",
-    chinese: "簡體中文",
-    japanese: "日本語",
-    french: "Français",
-    russian: "Русский",
-    bengali: "বাংলা",
-    catalan: "Català",
-    spanish: "Español",
-    german: "Deutsch",
-    polish: "Polski",
-    turkish: "Türkçe",
     source: "來源",
     notebook: "筆記本",
     podcast: "播客",
@@ -132,8 +121,6 @@ export const zhTW = {
     errorDetails: "錯誤詳情",
     editTransformation: "編輯轉換規則",
     retry: "重試",
-    traditionalChinese: "繁體中文",
-    portuguese: "葡萄牙語",
     completed: "已完成",
     saveSuccess: "儲存成功",
     contextModes: {
@@ -586,7 +573,7 @@ export const zhTW = {
     loadErrorTitle: "載入單集失敗",
     loadErrorDesc: "無法獲取最新的播客單集。請稍後重試。",
     loadingEpisodes: "正在載入單集...",
-    noEpisodesYet: "暫無播客單集。從筆記本或來源聊天介面開始生成您的第一個單集。",
+    noEpisodesYet: "暫無播客單集。點擊「生成播客」建立您的第一個單集。",
     statusRunningTitle: "正在處理中",
     statusRunningDesc: "正在活躍生成資產的單集。",
     statusPendingTitle: "排隊中 / 待處理",
diff --git a/frontend/src/lib/utils/date-locale.test.ts b/frontend/src/lib/utils/date-locale.test.ts
new file mode 100644
index 00000000..3cab1270
--- /dev/null
+++ b/frontend/src/lib/utils/date-locale.test.ts
@@ -0,0 +1,22 @@
+import { describe, expect, it } from 'vitest'
+import { enUS, it as itLocale } from 'date-fns/locale'
+
+import { languages } from '@/lib/locales'
+import { getDateLocale } from './date-locale'
+
+describe('getDateLocale', () => {
+  it('formats Italian dates in Italian', () => {
+    expect(getDateLocale('it-IT')).toBe(itLocale)
+  })
+
+  it('has a date locale for every registered language', () => {
+    for (const { code } of languages) {
+      if (code === 'en-US') continue
+      expect(getDateLocale(code), code).not.toBe(enUS)
+    }
+  })
+
+  it('falls back to English for unknown codes', () => {
+    expect(getDateLocale('xx-XX')).toBe(enUS)
+  })
+})
diff --git a/frontend/src/lib/utils/date-locale.ts b/frontend/src/lib/utils/date-locale.ts
index 79921705..4d6907fb 100644
--- a/frontend/src/lib/utils/date-locale.ts
+++ b/frontend/src/lib/utils/date-locale.ts
@@ -1,4 +1,4 @@
-import { zhCN, enUS, zhTW, ptBR, ja, fr, ru, bn, ca, es, de, pl, tr, Locale } from 'date-fns/locale'
+import { zhCN, enUS, zhTW, ptBR, ja, it, fr, ru, bn, ca, es, de, pl, tr, Locale } from 'date-fns/locale'
 
 /**
  * Mapping of language codes to date-fns locales.
@@ -10,6 +10,7 @@ const LOCALE_MAP: Record<string, Locale> = {
   'en-US': enUS,
   'pt-BR': ptBR,
   'ja-JP': ja,
+  'it-IT': it,
   'fr-FR': fr,
   'ru-RU': ru,
   'bn-IN': bn,
diff --git a/open_notebook/database/repository.py b/open_notebook/database/repository.py
index 93294755..2aea90f9 100644
--- a/open_notebook/database/repository.py
+++ b/open_notebook/database/repository.py
@@ -43,10 +43,12 @@ def get_database_url() -> str:
     if surreal_url:
         return surreal_url
 
-    # Fallback to old format - WebSocket URL format
+    # Fallback to the legacy variables. SURREAL_ADDRESS may already carry the
+    # port ("host:8000", "[::1]:8000"); SURREAL_PORT only applies when it doesn't.
     address = os.getenv("SURREAL_ADDRESS", "localhost")
-    port = os.getenv("SURREAL_PORT", "8000")
-    return f"ws://{address}/rpc:{port}"
+    if ":" not in address.rsplit("]", 1)[-1]:
+        address = f"{address}:{os.getenv('SURREAL_PORT', '8000')}"
+    return f"ws://{address}/rpc"
 
 
 def get_database_password() -> str:
diff --git a/open_notebook/utils/error_classifier.py b/open_notebook/utils/error_classifier.py
index 10f38c15..26183079 100644
--- a/open_notebook/utils/error_classifier.py
+++ b/open_notebook/utils/error_classifier.py
@@ -23,7 +23,7 @@ _CLASSIFICATION_RULES: list[tuple[list[str], type[OpenNotebookError], str | None
     (
         ["authentication", "unauthorized", "invalid api key", "invalid_api_key", "401"],
         AuthenticationError,
-        "Authentication failed. Please check your API key in Settings -> Credentials.",
+        "Authentication failed. Please check your API key in Manage -> Models.",
     ),
     # Rate limit errors
     (
@@ -39,23 +39,29 @@ _CLASSIFICATION_RULES: list[tuple[list[str], type[OpenNotebookError], str | None
     ),
     # Configuration errors from provision.py (pass through)
     (
-        ["no model configured", "please go to settings"],
+        ["no model configured", "please go to settings", "please go to manage"],
         ConfigurationError,
         None,
     ),
-    # Network errors
+    # Network errors (connect timeouts included: the provider was never reached)
     (
         [
             "connecterror",
-            "timeoutexception",
+            "connecttimeout",
+            "connection timed out",
             "connection refused",
             "connection error",
-            "timed out",
-            "timeout",
         ],
         NetworkError,
         "Could not connect to the AI provider. Please check your network connection and provider URL.",
     ),
+    # Read timeouts: the provider was reached but didn't answer within
+    # ESPERANTO_LLM_TIMEOUT (180 s unless set)
+    (
+        ["timeoutexception", "timed out", "timeout"],
+        NetworkError,
+        "The AI provider took too long to respond. Try again, use a faster model, or raise ESPERANTO_LLM_TIMEOUT (180 seconds by default).",
+    ),
     # Context length errors
     (
         [
diff --git a/tests/test_database_url.py b/tests/test_database_url.py
new file mode 100644
index 00000000..33cf64ab
--- /dev/null
+++ b/tests/test_database_url.py
@@ -0,0 +1,44 @@
+"""get_database_url() fallback to the legacy SURREAL_ADDRESS / SURREAL_PORT variables."""
+
+import pytest
+
+from open_notebook.database.repository import get_database_url
+
+
+@pytest.fixture(autouse=True)
+def _clean_env(monkeypatch):
+    for name in ("SURREAL_URL", "SURREAL_ADDRESS", "SURREAL_PORT"):
+        monkeypatch.delenv(name, raising=False)
+
+
+def test_surreal_url_wins(monkeypatch):
+    monkeypatch.setenv("SURREAL_URL", "ws://db:8000/rpc")
+    monkeypatch.setenv("SURREAL_ADDRESS", "other")
+    assert get_database_url() == "ws://db:8000/rpc"
+
+
+def test_defaults():
+    assert get_database_url() == "ws://localhost:8000/rpc"
+
+
+def test_address_and_port(monkeypatch):
+    monkeypatch.setenv("SURREAL_ADDRESS", "db.internal")
+    monkeypatch.setenv("SURREAL_PORT", "8018")
+    assert get_database_url() == "ws://db.internal:8018/rpc"
+
+
+def test_bracketed_ipv6_without_port_gets_surreal_port(monkeypatch):
+    monkeypatch.setenv("SURREAL_ADDRESS", "[::1]")
+    monkeypatch.setenv("SURREAL_PORT", "8018")
+    assert get_database_url() == "ws://[::1]:8018/rpc"
+
+
+def test_bracketed_ipv6_with_port(monkeypatch):
+    monkeypatch.setenv("SURREAL_ADDRESS", "[::1]:8000")
+    assert get_database_url() == "ws://[::1]:8000/rpc"
+
+
+def test_address_with_port_ignores_surreal_port(monkeypatch):
+    monkeypatch.setenv("SURREAL_ADDRESS", "10.1.2.3:8000")
+    monkeypatch.setenv("SURREAL_PORT", "9999")
+    assert get_database_url() == "ws://10.1.2.3:8000/rpc"
diff --git a/tests/test_error_classifier.py b/tests/test_error_classifier.py
new file mode 100644
index 00000000..8a1e9044
--- /dev/null
+++ b/tests/test_error_classifier.py
@@ -0,0 +1,60 @@
+"""classify_error() tells a slow provider apart from an unreachable one."""
+
+import httpx
+
+from open_notebook.exceptions import (
+    AuthenticationError,
+    ConfigurationError,
+    NetworkError,
+)
+from open_notebook.utils.error_classifier import classify_error
+
+
+def test_read_timeout_says_the_provider_was_slow():
+    exc_class, message = classify_error(
+        httpx.ReadTimeout("The read operation timed out")
+    )
+    assert exc_class is NetworkError
+    assert "took too long" in message
+    assert "ESPERANTO_LLM_TIMEOUT" in message
+
+
+def test_openai_style_timeout_says_the_provider_was_slow():
+    class APITimeoutError(Exception):
+        pass
+
+    _, message = classify_error(APITimeoutError("Request timed out."))
+    assert "took too long" in message
+
+
+def test_connect_timeout_is_a_connection_problem():
+    exc_class, message = classify_error(httpx.ConnectTimeout("timed out"))
+    assert exc_class is NetworkError
+    assert "Could not connect" in message
+
+
+def test_connection_refused_is_a_connection_problem():
+    exc_class, message = classify_error(
+        httpx.ConnectError("[Errno 111] Connection refused")
+    )
+    assert exc_class is NetworkError
+    assert "Could not connect" in message
+
+
+def test_os_connection_timed_out_is_a_connection_problem():
+    exc_class, message = classify_error(OSError("[Errno 110] Connection timed out"))
+    assert exc_class is NetworkError
+    assert "Could not connect" in message
+
+
+def test_auth_error_points_to_the_models_page():
+    exc_class, message = classify_error(Exception("401 invalid api key"))
+    assert exc_class is AuthenticationError
+    assert "Manage -> Models" in message
+
+
+def test_missing_default_model_passes_through():
+    raw = "No model configured for default for type=chat. Please go to Manage → Models and configure a default model for 'chat'."
+    exc_class, message = classify_error(ValueError(raw))
+    assert exc_class is ConfigurationError
+    assert message == raw
diff --git a/tests/test_podcast_error_hints.py b/tests/test_podcast_error_hints.py
index bf398f20..838e5084 100644
--- a/tests/test_podcast_error_hints.py
+++ b/tests/test_podcast_error_hints.py
@@ -50,7 +50,7 @@ class TestExplainGenerationFailure:
         )
         assert hint is not None
         assert "voice_id" in hint
-        assert "Speaker Profiles" in hint
+        assert "Podcasts -> Profiles" in hint
 
     @pytest.mark.parametrize(
         "message",

From 23b51faf9fe6906788ce2a15bd11b0dd19f2a372 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 23:06:36 -0300
Subject: [PATCH 341/345] docs: development docs match the codebase;
 add-a-provider playbook (#1458)

* docs: development docs match the codebase; add-a-provider playbook

- architecture.md: rewritten as a ~110-line map verified against the code
  (processes, layout, data model from the migrations, graphs, model calls,
  background jobs); links the accurate topic pages
- testing.md, api-reference.md, code-standards.md: rewritten from the real
  suite, the /api prefix and Bearer auth, and the actual error-handling
  pattern (no longer contradicts AGENTS.md)
- change-playbooks.md: new "Add an AI provider" playbook (registry + the four
  hand-maintained copies + tests + docs, checked against #1443/#1444); fixes
  async nodes, command registration, polling paths, locale steps
  (LanguageToggle, satisfies TranslationShape), colocated frontend tests
- development-setup.md is the single setup page (deps, .env with localhost
  SURREAL_URL, DB -> API -> worker -> frontend, real log lines, /health);
  quick-start.md and README.dev.md point to it
- contributing.md: Conventional Commits, CHANGELOG rule, pre-PR checks that
  match CI; PR template gains ruff format and frontend checks
- AGENTS files agree with the docs (provider edits, routers vs services,
  async nodes, checkpoint path, ADR-013, stop_on); api/AGENTS.md is a plain
  link instead of a Claude-only @ import
- ADR index explains ADR-010 (reserved for #1332) and number-at-merge;
  GitHub-compatible encryption anchor; small credentials/security fixes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review (CI commands, async source creation, paths, ADR-010, language toggle)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 .github/pull_request_template.md         |  18 +-
 AGENTS.md                                |  11 +-
 CONTRIBUTING.md                          |   2 +-
 README.dev.md                            |  35 +-
 api/AGENTS.md                            |   4 +-
 api/CLAUDE.md                            |   2 +-
 docs/7-DEVELOPMENT/api-reference.md      | 278 ++-----
 docs/7-DEVELOPMENT/architecture.md       | 989 +++--------------------
 docs/7-DEVELOPMENT/change-playbooks.md   | 289 +++----
 docs/7-DEVELOPMENT/code-standards.md     | 433 ++--------
 docs/7-DEVELOPMENT/content-processing.md |   4 +-
 docs/7-DEVELOPMENT/contributing.md       |  96 +--
 docs/7-DEVELOPMENT/credentials.md        |   6 +-
 docs/7-DEVELOPMENT/decisions/README.md   |   2 +-
 docs/7-DEVELOPMENT/development-setup.md  | 498 ++----------
 docs/7-DEVELOPMENT/frontend.md           |   2 +-
 docs/7-DEVELOPMENT/index.md              | 148 +---
 docs/7-DEVELOPMENT/quick-start.md        | 129 +--
 docs/7-DEVELOPMENT/security.md           |   4 +-
 docs/7-DEVELOPMENT/testing.md            | 442 ++--------
 frontend/AGENTS.md                       |   2 +-
 open_notebook/AGENTS.md                  |  26 +-
 22 files changed, 653 insertions(+), 2767 deletions(-)

diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
index 8a44306e..412d5505 100644
--- a/.github/pull_request_template.md
+++ b/.github/pull_request_template.md
@@ -30,7 +30,7 @@ Fixes #<!-- issue number, or "N/A (small fix)" -->
 - [ ] Tested locally with Docker
 - [ ] Tested locally with development setup
 - [ ] Added new unit tests
-- [ ] Existing tests pass (`uv run pytest`)
+- [ ] Existing tests pass (`uv run pytest tests/`, and `npm run test` in `frontend/` if the frontend changed)
 - [ ] Manual testing performed (describe below)
 
 **Test Details:**
@@ -45,7 +45,7 @@ Fixes #<!-- issue number, or "N/A (small fix)" -->
 - [ ] Privacy First
 - [ ] Simplicity Over Features
 - [ ] API-First Architecture
-- [ ] Multi-Provider Flexibility
+- [ ] Provider-Agnostic Core
 - [ ] Extensibility Through Standards
 - [ ] Async-First for Performance
 
@@ -68,24 +68,26 @@ Fixes #<!-- issue number, or "N/A (small fix)" -->
 ### Testing
 - [ ] I have added tests that prove my fix is effective or that my feature works
 - [ ] New and existing unit tests pass locally with my changes
-- [ ] I ran linting: `make ruff` or `ruff check . --fix`
-- [ ] I ran type checking: `make lint` or `uv run python -m mypy .`
+- [ ] I ran linting: `uv run ruff check .`
+- [ ] I ran formatting: `uv run ruff format .` (CI fails if `ruff format --check .` finds changes)
+- [ ] I ran type checking: `uv run python -m mypy .`
+- [ ] Frontend changes: `npm run lint`, `npm run test` and `npm run build` pass (run inside `frontend/`)
 
 ### Documentation
 - [ ] I have updated the relevant documentation in `/docs` (if applicable)
 - [ ] I have added/updated docstrings for new/modified functions
-- [ ] I have updated the API documentation (if API changes were made)
+- [ ] I have added a CHANGELOG entry under `[Unreleased]` in the section for its type (if user-visible)
 - [ ] I have added comments to complex logic
 
 ### Database Changes
-- [ ] I have created migration scripts for any database schema changes (in `/migrations`)
+- [ ] I have created migration scripts for any database schema changes (in `open_notebook/database/migrations/`, registered in `async_migrate.py`)
 - [ ] Migration includes both up and down scripts
 - [ ] Migration has been tested locally
 
 ### Breaking Changes
 - [ ] This PR includes breaking changes
 - [ ] I have documented the migration path for users
-- [ ] I have updated MIGRATION.md (if applicable)
+- [ ] The CHANGELOG entry explains what users must do
 
 ## Screenshots (if applicable)
 
@@ -103,7 +105,7 @@ Before submitting, please verify:
 - [ ] I have read [VISION.md](https://github.com/lfnovo/open-notebook/blob/main/VISION.md)
 - [ ] This PR addresses an approved Issue assigned to me, **or** it's a small obvious fix (typo, docs, tiny bug) that doesn't need one — ideas and features begin in Discussions; reproducible bugs begin in Issues
 - [ ] I have not included unrelated changes in this PR
-- [ ] My PR title follows conventional commits format (e.g., "feat: add user authentication")
+- [ ] My PR title follows the Conventional Commits format (e.g., "fix(podcasts): …", "feat: …")
 
 ---
 
diff --git a/AGENTS.md b/AGENTS.md
index 5070a3bc..fd6edc71 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -15,13 +15,14 @@ Start in this order — each tier depends on the one below:
 3. `make worker-start` — surreal-commands worker. **Required**: podcasts, embeddings and source processing are async jobs that silently queue forever without it
 4. `make frontend` — UI (depends on the API for all data)
 
-Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
+Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`). First-time setup (`uv sync`, `npm install`, a `.env` with `SURREAL_URL=ws://localhost:8000/rpc`): [development-setup.md](docs/7-DEVELOPMENT/development-setup.md).
 
 ## Commands
 
 - Tests: `uv run pytest tests/`
-- Python lint/format/typecheck: `ruff check . --fix` · `ruff format .` · `uv run python -m mypy .`
+- Python lint/format/typecheck: `uv run ruff check . --fix` · `uv run ruff format .` · `uv run python -m mypy .`
 - Frontend (inside `frontend/`): `npm run lint` · `npm run test` · `npm run build`
+- CI runs `uv run ruff check .`, `uv run ruff format --check .`, mypy, pytest and, in `frontend/`, `npm run lint`, `npm run test:coverage` and `npm run build`; all must pass
 - Docker release: `make docker-release` (see `.github/RELEASE_PROCESS.md`)
 
 ## Hard rules
@@ -30,14 +31,16 @@ Or all at once: `make start-all` (status: `make status`, stop: `make stop-all`).
 - **Never commit secrets.** Credentials are encrypted at rest and require `OPEN_NOTEBOOK_ENCRYPTION_KEY` to be set.
 - CORS is wide-open and auth is a simple password middleware — **dev defaults, not production hardening**. Don't build features that assume otherwise.
 - Product direction questions (does this feature fit?) → [VISION.md](VISION.md). Past decisions ("why is it like this?") → [docs/7-DEVELOPMENT/decisions/](docs/7-DEVELOPMENT/decisions/). Structural decisions made while coding should produce a new decision record there.
+- **Conventional Commits** for commits and PR titles (`fix(podcasts): …`, `feat(providers): …`, `docs: …`).
+- **Every user-visible change adds a CHANGELOG entry** under `## [Unreleased]`, in the one section for its type (`### Added` / `### Changed` / `### Deprecated` / `### Removed` / `### Fixed` / `### Security`); never create a duplicate section. Details: [contributing.md](docs/7-DEVELOPMENT/contributing.md#changelog).
 - Maintainer profile lives in `.maintainer/`; do not run release, triage or discussions workflows without it.
 
 ## Where to look
 
 | Need | Location |
 |---|---|
-| Architecture (3 tiers, workflows, data model) | [docs/7-DEVELOPMENT/architecture.md](docs/7-DEVELOPMENT/architecture.md) |
-| Step-by-step recipes (add endpoint, migration, i18n…) | [docs/7-DEVELOPMENT/change-playbooks.md](docs/7-DEVELOPMENT/change-playbooks.md) |
+| Architecture (processes, layout, data model, workflows) | [docs/7-DEVELOPMENT/architecture.md](docs/7-DEVELOPMENT/architecture.md) |
+| Step-by-step recipes (add endpoint, provider, migration, command, i18n…) | [docs/7-DEVELOPMENT/change-playbooks.md](docs/7-DEVELOPMENT/change-playbooks.md) |
 | Dev environment setup | [docs/7-DEVELOPMENT/development-setup.md](docs/7-DEVELOPMENT/development-setup.md) |
 | Code standards & testing | [docs/7-DEVELOPMENT/code-standards.md](docs/7-DEVELOPMENT/code-standards.md) · [testing.md](docs/7-DEVELOPMENT/testing.md) |
 | Product identity & current posture | [VISION.md](VISION.md) |
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 61563f0d..fbfc4507 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -15,7 +15,7 @@ All contribution guidelines have been consolidated into the new development docu
 - **Want to understand what we're building?** → [Vision & Principles](VISION.md)
 - **Want to understand our engineering practices?** → [Design Principles](docs/7-DEVELOPMENT/design-principles.md)
 - **Are you a maintainer?** → [Maintainer Guide](docs/7-DEVELOPMENT/maintainer-guide.md)
-- **New developer?** → [Quick Start](docs/7-DEVELOPMENT/quick-start.md)
+- **Setting up locally?** → [Development Setup](docs/7-DEVELOPMENT/development-setup.md)
 
 ---
 
diff --git a/README.dev.md b/README.dev.md
index 32f3a7e6..e6ff71e7 100644
--- a/README.dev.md
+++ b/README.dev.md
@@ -1,31 +1,10 @@
 # Developer Guide
 
-**📍 This file has moved!**
+Developer documentation lives in [docs/7-DEVELOPMENT/](docs/7-DEVELOPMENT/index.md).
 
-Developer documentation now lives in the development docs structure.
-
-👉 **[Read the Development Setup Guide](docs/7-DEVELOPMENT/development-setup.md)**
-
----
-
-## Quick Links
-
-- **Setting up your environment?** → [Development Setup](docs/7-DEVELOPMENT/development-setup.md) (includes the make-workflow matrix)
-- **New developer?** → [Quick Start](docs/7-DEVELOPMENT/quick-start.md)
-- **Want to contribute?** → [Contributing Guide](docs/7-DEVELOPMENT/contributing.md)
-- **Making a common change?** → [Change Playbooks](docs/7-DEVELOPMENT/change-playbooks.md)
-- **Publishing Docker images?** → [Release Process](.github/RELEASE_PROCESS.md)
-- **Coding-agent rules?** → [AGENTS.md](AGENTS.md)
-
----
-
-## TL;DR
-
-```bash
-git clone https://github.com/lfnovo/open-notebook.git && cd open-notebook
-cp .env.example .env
-uv sync
-make start-all    # SurrealDB + API + worker + frontend
-```
-
-For everything else, see **[docs/7-DEVELOPMENT/](docs/7-DEVELOPMENT/index.md)**.
+- **Run it from source** → [Development Setup](docs/7-DEVELOPMENT/development-setup.md)
+- **Contribute** → [Contributing Guide](docs/7-DEVELOPMENT/contributing.md) (workflow, commit and CHANGELOG conventions, checks CI runs)
+- **Make a common change** → [Change Playbooks](docs/7-DEVELOPMENT/change-playbooks.md)
+- **Understand the code** → [Architecture](docs/7-DEVELOPMENT/architecture.md)
+- **Coding-agent rules** → [AGENTS.md](AGENTS.md)
+- **Publish Docker images** → [Release Process](.github/RELEASE_PROCESS.md)
diff --git a/api/AGENTS.md b/api/AGENTS.md
index a758413c..c124e163 100644
--- a/api/AGENTS.md
+++ b/api/AGENTS.md
@@ -1 +1,3 @@
-@../open_notebook/AGENTS.md
+# API Rules (api/)
+
+The rules for `api/` are part of the backend rules in [../open_notebook/AGENTS.md](../open_notebook/AGENTS.md) (which also cover `commands/` and `prompts/`). Read that file before changing code here. Project-wide rules are in the root [AGENTS.md](../AGENTS.md).
diff --git a/api/CLAUDE.md b/api/CLAUDE.md
index 43c994c2..a758413c 100644
--- a/api/CLAUDE.md
+++ b/api/CLAUDE.md
@@ -1 +1 @@
-@AGENTS.md
+@../open_notebook/AGENTS.md
diff --git a/docs/7-DEVELOPMENT/api-reference.md b/docs/7-DEVELOPMENT/api-reference.md
index 0c059562..e98b9658 100644
--- a/docs/7-DEVELOPMENT/api-reference.md
+++ b/docs/7-DEVELOPMENT/api-reference.md
@@ -1,224 +1,108 @@
 # API Reference
 
-Complete REST API for Open Notebook. All endpoints are served from the API backend (default: `http://localhost:5055`).
+Everything the UI does goes through the REST API, so anything you can do in the app you can also script.
 
-**Base URL**: `http://localhost:5055` (development) or environment-specific production URL
+**The live OpenAPI schema is the reference.** The running API serves it, generated from the code, so it is always current:
 
-**Interactive Docs**: Use FastAPI's built-in Swagger UI at `http://localhost:5055/docs` for live testing and exploration. This is the primary reference for all endpoints, request/response schemas, and real-time testing.
+- Swagger UI: `http://localhost:5055/docs` (try requests in the browser)
+- ReDoc: `http://localhost:5055/redoc`
+- Raw schema: `http://localhost:5055/openapi.json` (for client generators)
 
----
+This page covers what the schema doesn't tell you: the prefix, auth, async jobs, streaming and errors. It deliberately doesn't list every endpoint.
 
-## Quick Start
+## Base URL and prefix
 
-### 1. Authentication
+All application endpoints are under **`/api`** (every router is mounted with `prefix="/api"` in `api/main.py`). The API listens on port 5055.
 
-Simple password-based (development only):
+- Direct: `http://localhost:5055/api/notebooks`
+- Through the frontend: the Next.js server proxies `/api/*` to the API, so `http://localhost:3000/api/notebooks` (or port 8502 in the Docker image) works too.
 
-```bash
-curl http://localhost:5055/api/notebooks \
-  -H "Authorization: Bearer your_password"
-```
-
-**⚠️ Production**: Replace with OAuth/JWT. See [Security Configuration](../5-CONFIGURATION/security.md) for details.
-
-### 2. Base API Flow
-
-Most operations follow this pattern:
-1. Create a **Notebook** (container for research)
-2. Add **Sources** (PDFs, URLs, text)
-3. Query via **Chat** or **Search**
-4. View results and **Notes**
-
-### 3. Testing Endpoints
-
-Instead of memorizing endpoints, use the interactive API docs:
-- Navigate to `http://localhost:5055/docs`
-- Try requests directly in the browser
-- See request/response schemas in real-time
-- Test with your own data
-
----
-
-## API Endpoints Overview
-
-### Main Resource Types
-
-**Notebooks** - Research projects containing sources and notes
-- `GET/POST /notebooks` - List and create
-- `GET/PUT/DELETE /notebooks/{id}` - Read, update, delete
-
-**Sources** - Content items (PDFs, URLs, text)
-- `GET/POST /sources` - List and add content
-- `GET /sources/{id}` - Fetch source details
-- `POST /sources/{id}/retry` - Retry failed processing
-- `GET /sources/{id}/download` - Download original file
-
-**Notes** - User-created or AI-generated research notes
-- `GET/POST /notes` - List and create
-- `GET/PUT/DELETE /notes/{id}` - Read, update, delete
-
-**Chat** - Conversational AI interface
-- `GET/POST /chat/sessions` - Manage chat sessions
-- `POST /chat/execute` - Send message and get response
-- `POST /chat/context` - Prepare context for chat
-
-**Search** - Find content by text or semantic similarity
-- `POST /search` - Full-text or vector search
-- `POST /search/ask` - Ask a question (search + synthesize)
-- Both accept an optional `notebook_ids` list (or a single `notebook_id`) to scope results to specific notebooks; omit for the whole knowledge base
-
-**Transformations** - Custom prompts for extracting insights
-- `GET/POST /transformations` - Create custom extraction rules
-- `POST /sources/{id}/insights` - Apply transformation to source
-
-**Models** - Configure AI providers
-- `GET /models` - Available models
-- `GET /models/defaults` - Current defaults
-- `POST /models/config` - Set defaults
-
-**Credentials** - Manage AI provider credentials
-- `GET/POST /credentials` - List and create credentials
-- `GET/PUT/DELETE /credentials/{id}` - CRUD operations
-- `POST /credentials/{id}/test` - Test connection
-- `POST /credentials/{id}/discover` - Discover models from provider
-- `POST /credentials/{id}/register-models` - Register discovered models
-- `GET /credentials/status` - Provider status overview
-- `GET /credentials/env-status` - Environment variable status
-- `POST /credentials/migrate-from-env` - Migrate env vars to credentials
-
-**Health & Status**
-- `GET /health` - Health check
-- `GET /commands/{id}` - Track async operations
-
----
+Outside `/api`: `GET /health` returns `{"status": "healthy"}`, and `GET /` returns a short status message.
 
 ## Authentication
 
-### Current (Development)
+If `OPEN_NOTEBOOK_PASSWORD` (or `OPEN_NOTEBOOK_PASSWORD_FILE`) is set, every request needs:
 
-All requests require password header:
-
-```bash
-curl -H "Authorization: Bearer your_password" http://localhost:5055/api/notebooks
+```
+Authorization: Bearer <password>
 ```
 
-Password configured via `OPEN_NOTEBOOK_PASSWORD` environment variable.
-
-> **📖 See [Security Configuration](../5-CONFIGURATION/security.md)** for complete authentication setup, API examples, and production hardening.
-
-### Production
-
-**⚠️ Not secure.** Replace with:
-- OAuth 2.0 (recommended)
-- JWT tokens
-- API keys
-
-See [Security Configuration](../5-CONFIGURATION/security.md) for production setup.
-
----
-
-## Common Patterns
-
-### Pagination
-
 ```bash
-# List sources with limit/offset
-curl 'http://localhost:5055/sources?limit=20&offset=10'
+curl http://localhost:5055/api/notebooks -H "Authorization: Bearer $OPEN_NOTEBOOK_PASSWORD"
 ```
 
-### Filtering & Sorting
+- If no password is set, auth is disabled and all requests pass.
+- These paths never need auth: `/`, `/health`, `/docs`, `/redoc`, `/openapi.json`, `/api/auth/status`, `/api/config`. `OPTIONS` (CORS preflight) requests also pass.
+- A missing, malformed or wrong header returns `401`.
+- Non-ASCII passwords are supported; send them UTF-8 encoded.
+
+This is a single shared password (`api/auth.py`), not user accounts. See [security.md](security.md).
+
+## Resource map
+
+Use `/docs` for request and response shapes. This map shows where things are:
+
+| Area | Paths |
+|---|---|
+| Notebooks | `/api/notebooks`, `/api/notebooks/{id}/sources/{source_id}` (link/unlink), `/api/recently-viewed` |
+| Sources | `/api/sources` (multipart create with optional file upload), `/api/sources/json`, `/api/sources/{id}/status`, `/api/sources/{id}/retry`, `/api/sources/{id}/insights`, `/api/sources/{id}/download` |
+| Notes, insights | `/api/notes`, `/api/insights/{id}`, `/api/insights/{id}/save-as-note` |
+| Chat | `/api/chat/sessions`, `/api/chat/execute`, `/api/chat/context`; source chat under `/api/sources/{id}/chat/sessions` |
+| Search and Ask | `/api/search`, `/api/search/ask` (streaming), `/api/search/ask/simple` |
+| Transformations | `/api/transformations`, `/api/transformations/execute`, `/api/transformations/default-prompt` |
+| Models and providers | `/api/models`, `/api/models/defaults`, `/api/models/sync`, `/api/models/auto-assign`, `/api/providers` |
+| Credentials | `/api/credentials`, `/api/credentials/{id}/test`, `/api/credentials/{id}/discover`, `/api/credentials/{id}/register-models`, `/api/credentials/migrate-*` |
+| Podcasts | `/api/podcasts/generate`, `/api/podcasts/episodes`, `/api/episode-profiles`, `/api/speaker-profiles` |
+| Background jobs | `/api/commands/jobs`, `/api/commands/jobs/{job_id}` |
+| Embeddings | `/api/embed`, `/api/embeddings/rebuild` |
+| Settings and config | `/api/settings`, `/api/config`, `/api/capabilities`, `/api/languages`, `/api/auth/status` |
+
+## Async operations
+
+Source processing, embedding and podcast generation run on the background worker (see [architecture.md](architecture.md#background-jobs)). The endpoint that starts them returns right away with a record and/or a job id:
+
+- Creating a source with `async_processing=true` (the UI does this) saves it, submits a `process_source` job and returns at once; poll `GET /api/sources/{id}/status` until it is `completed` or `failed`. Without it (the default), the request waits until processing finishes.
+- `POST /api/podcasts/generate` returns a job id; poll `GET /api/podcasts/jobs/{job_id}` or list `GET /api/podcasts/episodes`.
+- Any job: `GET /api/commands/jobs/{job_id}`.
+
+If the worker isn't running, jobs stay queued.
+
+## Streaming
+
+`POST /api/search/ask` and the source-chat message endpoint return Server-Sent Events (`text/event-stream`). Each event is a `data: {json}` line with a `type` field. For Ask, the types are `strategy`, `answer`, `final_answer`, `complete` and `error`.
 
 ```bash
-# Filter by notebook, sort by date
-curl 'http://localhost:5055/sources?notebook_id=notebook:abc&sort_by=created&sort_order=asc'
-```
-
-### Async Operations
-
-Some operations (source processing, podcast generation) return immediately with a command ID:
-
-```bash
-# Submit async operation
-curl -X POST http://localhost:5055/sources -F async_processing=true
-# Response: {"id": "source:src001", "command_id": "command:cmd123"}
-
-# Poll status
-curl http://localhost:5055/commands/command:cmd123
-```
-
-### Streaming Responses
-
-The `/ask` endpoint streams responses as Server-Sent Events:
-
-```bash
-curl -N 'http://localhost:5055/ask' \
+curl -N http://localhost:5055/api/search/ask \
+  -H "Authorization: Bearer $OPEN_NOTEBOOK_PASSWORD" \
   -H "Content-Type: application/json" \
-  -d '{"question": "What is AI?"}'
-
-# Outputs: data: {"type":"strategy",...}
-#          data: {"type":"answer",...}
-#          data: {"type":"final_answer",...}
+  -d '{"question": "What are the main findings?", "strategy_model": "model:...", "answer_model": "model:...", "final_answer_model": "model:..."}'
 ```
 
-### Multipart File Upload
+Check `/docs` for the exact request fields.
+
+## Errors
+
+Errors return JSON with a `detail` message. Domain errors map to status codes in `api/main.py`:
+
+| Status | Meaning (exception) |
+|---|---|
+| 400 | Invalid input (`InvalidInputError`) |
+| 401 | Missing or wrong password, or a provider rejected the API key (`AuthenticationError`) |
+| 404 | Record not found (`NotFoundError`) |
+| 413 | Request body over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100) |
+| 415 | Unsupported file type (`UnsupportedTypeException`) |
+| 422 | Request validation failed, or a model or provider isn't configured (`ConfigurationError`) |
+| 429 | Provider rate limit (`RateLimitError`) |
+| 502 | Provider unreachable or failed (`NetworkError`, `ExternalServiceError`) |
+| 500 | Anything else, including database failures (`DatabaseOperationError`; see [ADR-013](decisions/ADR-013-objectmodel-get-error-contract.md)) |
+
+## Credential encryption migration
+
+After upgrading to 1.15 or later, existing stored API keys can be rewritten into the new encryption format with one call (there is no UI button):
 
 ```bash
-curl -X POST http://localhost:5055/sources \
-  -F "type=upload" \
-  -F "notebook_id=notebook:abc" \
-  -F "file=@document.pdf"
+curl -X POST http://localhost:5055/api/credentials/migrate-encryption \
+  -H "Authorization: Bearer $OPEN_NOTEBOOK_PASSWORD"
 ```
 
----
-
-## Error Handling
-
-All errors return JSON with status code:
-
-```json
-{"detail": "Notebook not found"}
-```
-
-### Common Status Codes
-
-| Code | Meaning | Example |
-|------|---------|---------|
-| 200 | Success | Operation completed |
-| 400 | Bad Request | Invalid input |
-| 404 | Not Found | Resource doesn't exist |
-| 409 | Conflict | Resource already exists |
-| 500 | Server Error | Database/processing error |
-
----
-
-## Tips for Developers
-
-1. **Start with interactive docs** (`http://localhost:5055/docs`) - this is the definitive reference
-2. **Enable logging** for debugging (check API logs: `docker logs`)
-3. **Streaming endpoints** require special handling (Server-Sent Events, not standard JSON)
-4. **Async operations** return immediately; always poll status before assuming completion
-5. **Vector search** requires embedding model configured (check `/models`)
-6. **Model overrides** are per-request; set in body, not config
-7. **CORS enabled** in development; configure for production
-
----
-
-## Learning Path
-
-1. **Authentication**: Add `X-Password` header to all requests
-2. **Create a notebook**: `POST /notebooks` with name and description
-3. **Add a source**: `POST /sources` with file, URL, or text
-4. **Query your content**: `POST /chat/execute` to ask questions
-5. **Explore advanced features**: Search, transformations, streaming
-
----
-
-## Production Considerations
-
-- Replace password auth with OAuth/JWT (see [Security](../5-CONFIGURATION/security.md))
-- Add rate limiting via reverse proxy (Nginx, CloudFlare, Kong)
-- Enable CORS restrictions (currently allows all origins)
-- Use HTTPS via reverse proxy (see [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md))
-- Set up API versioning strategy (currently implicit)
-
-See [Security Configuration](../5-CONFIGURATION/security.md) and [Reverse Proxy Setup](../5-CONFIGURATION/reverse-proxy.md) for complete production setup.
+It is idempotent and only rewrites a key it can decrypt. **Back up the database first:** versions before 1.15 can't read the new format. Details: [credentials.md](credentials.md#migration-paths) and [ADR-009](decisions/ADR-009-pbkdf2-credential-encryption.md).
diff --git a/docs/7-DEVELOPMENT/architecture.md b/docs/7-DEVELOPMENT/architecture.md
index 0cec295f..a67541f7 100644
--- a/docs/7-DEVELOPMENT/architecture.md
+++ b/docs/7-DEVELOPMENT/architecture.md
@@ -1,891 +1,110 @@
-# Open Notebook Architecture
+# Architecture
 
-## High-Level Overview
+A map of the codebase: the processes, where each concern lives, and how data flows. It stays short on purpose. Each subsystem has its own page with the details:
 
-Open Notebook follows a three-tier architecture with clear separation of concerns:
+- [credentials.md](credentials.md): provider credentials, encryption, the provider registry, model provisioning
+- [content-processing.md](content-processing.md): chunking, embedding, context building
+- [podcasts.md](podcasts.md): episode and speaker profiles, podcast jobs
+- [prompts.md](prompts.md): prompt templates and `Prompter`
+- [frontend.md](frontend.md): Next.js layers and data flows
+- [decisions/](decisions/README.md): why things are the way they are
+
+## Processes
 
 ```
-┌─────────────────────────────────────────────────────────┐
-│  Your Browser                                           │
-│  Access: http://your-server-ip:8502                     │
-└────────────────┬────────────────────────────────────────┘
-                 │
-                 ▼
-         ┌───────────────┐
-         │   Port 8502   │  ← Next.js Frontend (what you see)
-         │   Frontend    │    Also proxies API requests internally!
-         └───────┬───────┘
-                 │ proxies /api/* requests ↓
-                 ▼
-         ┌───────────────┐
-         │   Port 5055   │  ← FastAPI Backend (handles requests)
-         │     API       │
-         └───────┬───────┘
-                 │
-                 ▼
-         ┌───────────────┐
-         │   SurrealDB   │  ← Database (internal, auto-configured)
-         │   (Port 8000) │
-         └───────────────┘
+Browser
+   │
+   ▼
+Next.js frontend ── :3000 in dev (`npm run dev`), :8502 in the Docker image
+   │  proxies /api/* to INTERNAL_API_URL (default http://localhost:5055)
+   ▼
+FastAPI API ─────── :5055 (`api/main.py`)          Background worker
+   │                                                (`surreal-commands-worker --import-modules commands`)
+   │  submits jobs ───────────────► job queue in SurrealDB ◄──────── picks up jobs
+   ▼                                                      │
+SurrealDB ───────── :8000 ◄───────────────────────────────┘
 ```
 
-**Key Points:**
-- **v1.1+**: Next.js automatically proxies `/api/*` requests to the backend, simplifying reverse proxy setup
-- Your browser loads the frontend from port 8502
-- The frontend needs to know where to find the API - when accessing remotely, set: `API_URL=http://your-server-ip:5055`
-- **Behind reverse proxy?** You only need to proxy to port 8502 now! See [Reverse Proxy Configuration](../5-CONFIGURATION/reverse-proxy.md)
-
----
-
-## Detailed Architecture
-
-Open Notebook is built on a **three-tier, async-first architecture** designed for scalability, modularity, and multi-provider AI flexibility. The system separates concerns across frontend, API, and database layers, with LangGraph powering intelligent workflows and Esperanto enabling seamless integration with 17 AI providers.
-
-**Core Philosophy**:
-- Privacy-first: Users control their data and AI provider choice
-- Async/await throughout: Non-blocking operations for responsive UX
-- Domain-Driven Design: Clear separation between domain models, repositories, and orchestrators
-- Multi-provider flexibility: Swap AI providers without changing application code
-- Self-hosted capable: All components deployable in isolated environments
-
----
-
-## Three-Tier Architecture
-
-### Layer 1: Frontend (React/Next.js @ port 3000)
-
-**Purpose**: Responsive, interactive user interface for research, notes, chat, and podcast management.
-
-**Technology Stack**:
-- **Framework**: Next.js 15 with React 19
-- **Language**: TypeScript with strict type checking
-- **State Management**: Zustand (lightweight store) + TanStack Query (server state)
-- **Styling**: Tailwind CSS + Shadcn/ui component library
-- **Build Tool**: Webpack (bundled via Next.js)
-
-**Key Responsibilities**:
-- Render notebooks, sources, notes, chat sessions, and podcasts
-- Handle user interactions (create, read, update, delete operations)
-- Manage complex UI state (modals, file uploads, real-time search)
-- Stream responses from API (chat, podcast generation)
-- Display embeddings, vector search results, and insights
-
-**Communication Pattern**:
-- All data fetched via REST API (async requests to port 5055)
-- Configured base URL: `http://localhost:5055` (dev) or environment-specific (prod)
-- TanStack Query handles caching, refetching, and data synchronization
-- Zustand stores global state (user, notebooks, selected context)
-- CORS enabled on API side for cross-origin requests
-
-**Component Architecture**:
-- `/src/app/`: Next.js App Router (pages, layouts)
-- `/src/components/`: Reusable React components (buttons, forms, cards)
-- `/src/hooks/`: Custom hooks (useNotebook, useChat, useSearch)
-- `/src/lib/`: Utility functions, API clients, validators
-- `/src/styles/`: Global CSS, Tailwind config
-
----
-
-### Layer 2: API (FastAPI @ port 5055)
-
-**Purpose**: RESTful backend exposing operations on notebooks, sources, notes, chat sessions, and AI models.
-
-**Technology Stack**:
-- **Framework**: FastAPI 0.104+ (async Python web framework)
-- **Language**: Python 3.11+
-- **Validation**: Pydantic v2 (request/response schemas)
-- **Logging**: Loguru (structured JSON logging)
-- **Testing**: Pytest (unit and integration tests)
-
-**Architecture**:
-```
-FastAPI App (main.py)
-  ├── Routers (HTTP endpoints)
-  │   ├── routers/notebooks.py (CRUD operations)
-  │   ├── routers/sources.py (content ingestion, upload)
-  │   ├── routers/notes.py (note management)
-  │   ├── routers/chat.py (conversation sessions)
-  │   ├── routers/search.py (full-text + vector search)
-  │   ├── routers/transformations.py (custom transformations)
-  │   ├── routers/models.py (AI model configuration)
-  │   └── routers/*.py (11 additional routers)
-  │
-  ├── Services (business logic)
-  │   ├── *_service.py (orchestration, graph invocation)
-  │   ├── command_service.py (async job submission)
-  │   └── middleware (auth, logging)
-  │
-  ├── Models (Pydantic schemas)
-  │   └── models.py (validation, serialization)
-  │
-  └── Lifespan (startup/shutdown)
-      └── AsyncMigrationManager (database schema migrations)
-```
-
-**Key Responsibilities**:
-1. **HTTP Interface**: Accept REST requests, validate, return JSON responses
-2. **Business Logic**: Orchestrate domain models, repository operations, and workflows
-3. **Async Job Queue**: Submit long-running tasks (podcast generation, source processing)
-4. **Database Migrations**: Run schema updates on startup
-5. **Error Handling**: Catch exceptions, return appropriate HTTP status codes
-6. **Logging**: Track operations for debugging and monitoring
-
-**Startup Flow**:
-1. Load `.env` environment variables
-2. Initialize FastAPI app with CORS + auth middleware
-3. Run AsyncMigrationManager (creates/updates database schema)
-4. Register all routers (20+ endpoints)
-5. Server ready on port 5055
-
-**Request-Response Cycle**:
-```
-HTTP Request → Router → Service → Domain/Repository → SurrealDB
-                                       ↓
-                                  LangGraph (optional)
-                                       ↓
-Response ← Pydantic serialization ← Service ← Result
-```
-
----
-
-### Layer 3: Database (SurrealDB @ port 8000)
-
-**Purpose**: Graph database with built-in vector embeddings, semantic search, and relationship management.
-
-**Technology Stack**:
-- **Database**: SurrealDB (multi-model, ACID transactions)
-- **Query Language**: SurrealQL (SQL-like syntax with graph operations)
-- **Async Driver**: Async Rust client for Python
-- **Migrations**: `.surrealql` files in `open_notebook/database/migrations/`, registered in `AsyncMigrationManager` (auto-run on API startup)
-
-**Core Tables**:
-
-| Table | Purpose | Key Fields |
-|-------|---------|-----------|
-| `notebook` | Research project container | id, name, description, archived, created, updated |
-| `source` | Content item (PDF, URL, text) | id, title, full_text, topics, asset, created, updated |
-| `source_embedding` | Vector embeddings for semantic search | id, source, embedding, chunk_text, chunk_index |
-| `note` | User-created research notes | id, title, content, note_type (human/ai), created, updated |
-| `chat_session` | Conversation session | id, notebook_id, title, messages (JSON), created, updated |
-| `transformation` | Custom transformation rules | id, name, description, prompt, created, updated |
-| `source_insight` | Transformation output | id, source_id, insight_type, content, created, updated |
-| `reference` | Relationship: source → notebook | out (source), in (notebook) |
-| `artifact` | Relationship: note → notebook | out (note), in (notebook) |
-
-**Relationship Graph**:
-```
-Notebook
-  ↓ (referenced_by)
-Source
-  ├→ SourceEmbedding (1:many for chunked text)
-  ├→ SourceInsight (1:many for transformation outputs)
-  └→ Note (via artifact relationship)
-    ├→ Embedding (semantic search)
-    └→ Topics (tags)
-
-ChatSession
-  ├→ Notebook
-  └→ Messages (stored as JSON array)
-```
-
-**Vector Search Capability**:
-- Embeddings stored natively in SurrealDB
-- Full-text search on `source.full_text` and `note.content`
-- Cosine similarity search on embedding vectors
-- Semantic search integrates with search endpoint
-
-**Connection Management**:
-- Async connection pooling (configurable size)
-- Transaction support for multi-record operations
-- Schema auto-validation via migrations
-- Query timeout protection (prevent infinite queries)
-
----
-
-## Tech Stack Rationale
-
-### Why Python + FastAPI?
-
-**Python**:
-- Rich AI/ML ecosystem (LangChain, LangGraph, transformers, scikit-learn)
-- Rapid prototyping and deployment
-- Extensive async support (asyncio, async/await)
-- Strong type hints (Pydantic, mypy)
-
-**FastAPI**:
-- Modern, async-first framework
-- Automatic OpenAPI documentation (Swagger UI @ /docs)
-- Built-in request validation (Pydantic)
-- Excellent performance (benchmarked near C/Rust speeds)
-- Easy middleware/dependency injection
-
-### Why Next.js + React + TypeScript?
-
-**Next.js**:
-- Full-stack React framework with SSR/SSG
-- File-based routing (intuitive project structure)
-- Built-in API routes (optional backend co-location)
-- Optimized image/code splitting
-- Easy deployment (Vercel, Docker, self-hosted)
-
-**React 19**:
-- Component-based UI (reusable, testable)
-- Excellent tooling and community
-- Client-side state management (Zustand)
-- Server-side state sync (TanStack Query)
-
-**TypeScript**:
-- Type safety catches errors at compile time
-- Better IDE autocomplete and refactoring
-- Documentation via types (self-documenting code)
-- Easier onboarding for new contributors
-
-### Why SurrealDB?
-
-**SurrealDB**:
-- Native graph database (relationships are first-class)
-- Built-in vector embeddings (no separate vector DB)
-- ACID transactions (data consistency)
-- Multi-model (relational + document + graph)
-- Full-text search + semantic search in one query
-- Self-hosted (unlike managed Pinecone/Weaviate)
-- Flexible SurrealQL (SQL-like syntax)
-
-**Alternative Considered**: PostgreSQL + pgvector (more mature but separate extensions)
-
-### Why Esperanto for AI Providers?
-
-**Esperanto Library**:
-- Unified interface to 17 providers (OpenAI, Anthropic, Google, Groq, Ollama, Mistral, DeepSeek, xAI, OpenRouter, Azure, Vertex, and more)
-- Multi-provider embeddings (OpenAI, Google, Ollama, Mistral, Voyage)
-- TTS/STT integration (OpenAI, Groq, ElevenLabs, Google)
-- Smart provider selection (fallback logic, cost optimization)
-- Per-request model override support
-- Local Ollama support (completely self-hosted option)
-
-**Alternative Considered**: LangChain's provider abstraction (more verbose, less flexible)
-
----
-
-## LangGraph Workflows
-
-LangGraph is a state machine library that orchestrates multi-step AI workflows. Open Notebook uses five core workflows:
-
-### 1. **Source Processing Workflow** (`open_notebook/graphs/source.py`)
-
-**Purpose**: Ingest content (PDF, URL, text) and prepare for search/insights.
-
-**Flow**:
-```
-Input (file/URL/text)
-  ↓
-Extract Content (content-core library)
-  ↓
-Clean & tokenize text
-  ↓
-Generate Embeddings (Esperanto)
-  ↓
-Create SourceEmbedding records (chunked + indexed)
-  ↓
-Extract Topics (LLM summarization)
-  ↓
-Save to SurrealDB
-  ↓
-Output (Source record with embeddings)
-```
-
-**State Dict**:
-```python
-{
-  "content_state": {"file_path" | "url" | "content": str},
-  "source_id": str,
-  "full_text": str,
-  "embeddings": List[Dict],
-  "topics": List[str],
-  "notebook_ids": List[str],
-}
-```
-
-**Invoked By**: Sources API (`POST /sources`)
-
----
-
-### 2. **Chat Workflow** (`open_notebook/graphs/chat.py`)
-
-**Purpose**: Conduct multi-turn conversations with AI model, referencing notebook context.
-
-**Flow**:
-```
-User Message
-  ↓
-Build Context (selected sources/notes)
-  ↓
-Add Message to Session
-  ↓
-Create Chat Prompt (system + history + context)
-  ↓
-Call LLM (via Esperanto)
-  ↓
-Stream Response
-  ↓
-Save AI Message to ChatSession
-  ↓
-Output (complete message)
-```
-
-**State Dict**:
-```python
-{
-  "session_id": str,
-  "messages": List[BaseMessage],
-  "context": Dict[str, Any],  # sources, notes, snippets
-  "response": str,
-  "model_override": Optional[str],
-}
-```
-
-**Key Features**:
-- Message history persisted in SurrealDB (SqliteSaver checkpoint)
-- Context building via `build_context_for_chat()` utility
-- Token counting to prevent overflow
-- Per-message model override support
-
-**Invoked By**: Chat API (`POST /chat/execute`)
-
----
-
-### 3. **Ask Workflow** (`open_notebook/graphs/ask.py`)
-
-**Purpose**: Answer user questions by searching sources and synthesizing responses.
-
-**Flow**:
-```
-User Question
-  ↓
-Plan Search Strategy (LLM generates searches)
-  ↓
-Execute Searches (vector + text search)
-  ↓
-Score & Rank Results
-  ↓
-Provide Answers (LLM synthesizes from results)
-  ↓
-Stream Responses
-  ↓
-Output (final answer)
-```
-
-**State Dict**:
-```python
-{
-  "question": str,
-  "strategy": SearchStrategy,
-  "answers": List[str],
-  "final_answer": str,
-  "sources_used": List[Source],
-}
-```
-
-**Streaming**: Uses `astream()` to emit updates in real-time (strategy → answers → final answer)
-
-**Invoked By**: Search API (`POST /ask` with streaming)
-
----
-
-### 4. **Transformation Workflow** (`open_notebook/graphs/transformation.py`)
-
-**Purpose**: Apply custom transformations to sources (extract summaries, key points, etc).
-
-**Flow**:
-```
-Source + Transformation Rule
-  ↓
-Generate Prompt (Jinja2 template)
-  ↓
-Call LLM
-  ↓
-Parse Output
-  ↓
-Create SourceInsight record
-  ↓
-Output (insight with type + content)
-```
-
-**Example Transformations**:
-- Summary (5-sentence overview)
-- Key Points (bulleted list)
-- Quotes (notable excerpts)
-- Q&A (generated questions and answers)
-
-**Invoked By**: Sources API (`POST /sources/{id}/insights`)
-
----
-
-### 5. **Prompt Workflow** (`open_notebook/graphs/prompt.py`)
-
-**Purpose**: Generic LLM task execution (e.g., auto-generate note titles, analyze content).
-
-**Flow**:
-```
-Input Text + Prompt
-  ↓
-Call LLM (simple request-response)
-  ↓
-Output (completion)
-```
-
-**Used For**: Note title generation, content analysis, etc.
-
----
-
-## AI Provider Integration Pattern
-
-### ModelManager: Centralized Factory
-
-Located in `open_notebook/ai/models.py`, ModelManager handles:
-
-1. **Provider Detection**: Check environment variables for available providers
-2. **Model Selection**: Choose best model based on context size and task
-3. **Fallback Logic**: If primary provider unavailable, try backup
-4. **Cost Optimization**: Prefer cheaper models for simple tasks
-5. **Token Calculation**: Estimate cost before LLM call
-
-**Usage**:
-```python
-from open_notebook.ai.provision import provision_langchain_model
-
-# Get best LLM for context size
-model = await provision_langchain_model(
-    task="chat",  # or "search", "extraction"
-    model_override="anthropic/claude-opus-4",  # optional
-    context_size=8000,  # estimated tokens
-)
-
-# Invoke model
-response = await model.ainvoke({"input": prompt})
-```
-
-### Multi-Provider Support
-
-**LLM Providers**:
-- OpenAI (gpt-4, gpt-4-turbo, gpt-3.5-turbo)
-- Anthropic (claude-opus, claude-sonnet, claude-haiku)
-- Google (gemini-3.5-flash, gemini-2.5-pro)
-- Groq (mixtral, llama-2)
-- Ollama (local models)
-- Mistral (mistral-large, mistral-medium)
-- DeepSeek (deepseek-chat)
-- xAI (grok)
-
-**Embedding Providers**:
-- OpenAI (text-embedding-3-large, text-embedding-3-small)
-- Google (embedding-001)
-- Ollama (local embeddings)
-- Mistral (mistral-embed)
-- Voyage (voyage-large-2)
-
-**TTS Providers**:
-- OpenAI (tts-1, tts-1-hd)
-- Groq (no TTS, fallback to OpenAI)
-- ElevenLabs (multilingual voices)
-- Google TTS (text-to-speech)
-
-### Per-Request Override
-
-Every LangGraph invocation accepts a `config` parameter to override models:
-
-```python
-result = await graph.ainvoke(
-    input={...},
-    config={
-        "configurable": {
-            "model_override": "anthropic/claude-opus-4"  # Use Claude instead
-        }
-    }
-)
-```
-
----
-
-## Design Patterns
-
-### 1. **Domain-Driven Design (DDD)**
-
-**Domain Objects** (`open_notebook/domain/`):
-- `Notebook`: Research container with relationships to sources/notes
-- `Source`: Content item (PDF, URL, text) with embeddings
-- `Note`: User-created or AI-generated research note
-- `ChatSession`: Conversation history for a notebook
-- `Transformation`: Custom rule for extracting insights
-
-**Repository Pattern**:
-- Database access layer (`open_notebook/database/repository.py`)
-- `repo_query()`: Execute SurrealQL queries
-- `repo_create()`: Insert records
-- `repo_upsert()`: Merge records
-- `repo_delete()`: Remove records
-
-**Entity Methods**:
-```python
-# Domain methods (business logic)
-notebook = await Notebook.get(id)
-await notebook.save()
-notes = await notebook.get_notes()
-sources = await notebook.get_sources()
-```
-
-### 2. **Async-First Architecture**
-
-**All I/O is async**:
-- Database queries: `await repo_query(...)`
-- LLM calls: `await model.ainvoke(...)`
-- File I/O: `await upload_file.read()`
-- Graph invocations: `await graph.ainvoke(...)`
-
-**Benefits**:
-- Non-blocking request handling (FastAPI serves multiple concurrent requests)
-- Better resource utilization (I/O waiting doesn't block CPU)
-- Natural fit for Python async/await syntax
-
-**Example**:
-```python
-@router.post("/sources")
-async def create_source(source_data: SourceCreate):
-    # All operations are non-blocking
-    source = Source(title=source_data.title)
-    await source.save()  # async database operation
-    await graph.ainvoke({...})  # async LangGraph invocation
-    return SourceResponse(...)
-```
-
-### 3. **Service Pattern**
-
-Services orchestrate domain objects, repositories, and workflows:
-
-```python
-# illustrative example (see api/podcast_service.py for a real service)
-class NotebookService:
-    async def get_notebook_with_stats(notebook_id: str):
-        notebook = await Notebook.get(notebook_id)
-        sources = await notebook.get_sources()
-        notes = await notebook.get_notes()
-        return {
-            "notebook": notebook,
-            "source_count": len(sources),
-            "note_count": len(notes),
-        }
-```
-
-**Responsibilities**:
-- Validate inputs (Pydantic)
-- Orchestrate database operations
-- Invoke workflows (LangGraph graphs)
-- Handle errors and return appropriate status codes
-- Log operations
-
-### 4. **Streaming Pattern**
-
-For long-running operations (ask workflow, podcast generation), stream results as Server-Sent Events:
-
-```python
-@router.post("/ask", response_class=StreamingResponse)
-async def ask(request: AskRequest):
-    async def stream_response():
-        async for chunk in ask_graph.astream(input={...}):
-            yield f"data: {json.dumps(chunk)}\n\n"
-    return StreamingResponse(stream_response(), media_type="text/event-stream")
-```
-
-### 5. **Job Queue Pattern**
-
-For async background tasks (source processing), use Surreal-Commands job queue:
-
-```python
-# Submit job
-command_id = await CommandService.submit_command_job(
-    app="open_notebook",
-    command="process_source",
-    input={...}
-)
-
-# Poll status
-status = await source.get_status()
-```
-
----
-
-## Service Communication Patterns
-
-### Frontend → API
-
-1. **REST requests** (HTTP GET/POST/PUT/DELETE)
-2. **JSON request/response bodies**
-3. **Standard HTTP status codes** (200, 400, 404, 500)
-4. **Optional streaming** (Server-Sent Events for long operations)
-
-**Example**:
-```typescript
-// Frontend
-const response = await fetch("http://localhost:5055/sources", {
-  method: "POST",
-  body: formData,  // multipart/form-data for file upload
-});
-const source = await response.json();
-```
-
-### API → SurrealDB
-
-1. **SurrealQL queries** (similar to SQL)
-2. **Async driver** with connection pooling
-3. **Type-safe record IDs** (record_id syntax)
-4. **Transaction support** for multi-step operations
-
-**Example**:
-```python
-# API
-result = await repo_query(
-    "SELECT * FROM source WHERE notebook = $notebook_id",
-    {"notebook_id": ensure_record_id(notebook_id)}
-)
-```
-
-### API → AI Providers (via Esperanto)
-
-1. **Esperanto unified interface**
-2. **Per-request provider override**
-3. **Automatic fallback on failure**
-4. **Token counting and cost estimation**
-
-**Example**:
-```python
-# API
-model = await provision_langchain_model(task="chat")
-response = await model.ainvoke({"input": prompt})
-```
-
-### API → Job Queue (Surreal-Commands)
-
-1. **Async job submission**
-2. **Fire-and-forget pattern**
-3. **Status polling via `/commands/{id}` endpoint**
-4. **Job completion callbacks (optional)**
-
-**Example**:
-```python
-# Submit async source processing
-command_id = await CommandService.submit_command_job(...)
-
-# Client polls status
-response = await fetch(f"http://localhost:5055/commands/{command_id}")
-status = await response.json()  # returns { status: "running|queued|completed|failed" }
-```
-
----
-
-## Database Schema Overview
-
-### Core Schema Structure
-
-**Tables** (20+):
-- Notebooks (with soft-delete via `archived` flag)
-- Sources (content + metadata)
-- SourceEmbeddings (vector chunks)
-- Notes (user-created + AI-generated)
-- ChatSessions (conversation history)
-- Transformations (custom rules)
-- SourceInsights (transformation outputs)
-- Relationships (notebook→source, notebook→note)
-
-**Migrations**:
-- Automatic on API startup
-- Located in `open_notebook/database/migrations/`
-- Numbered sequentially (`1.surrealql`, `2.surrealql`, …) and registered explicitly in `AsyncMigrationManager` (no auto-discovery)
-- Tracked in `_sbl_migrations` table
-- Rollback via `N_down.surrealql` files (manual)
-
-### Relationship Model
-
-**Graph Relationships**:
-```
-Notebook
-  ← reference ← Source (many:many)
-  ← artifact ← Note (many:many)
-
-Source
-  → source_embedding (one:many)
-  → source_insight (one:many)
-  → embedding (via source_embedding)
-
-ChatSession
-  → messages (JSON array in database)
-  → notebook_id (reference to Notebook)
-
-Transformation
-  → source_insight (one:many)
-```
-
-**Query Example** (get all sources in a notebook with counts):
-```sql
-SELECT id, title,
-  count(<-reference.in) as note_count,
-  count(<-embedding.in) as embedded_chunks
-FROM source
-WHERE notebook = $notebook_id
-ORDER BY updated DESC
-```
-
----
-
-## Key Architectural Decisions
-
-### 1. **Async Throughout**
-
-All I/O operations are non-blocking to maximize concurrency and responsiveness.
-
-**Trade-off**: Slightly more complex code (async/await syntax) vs. high throughput.
-
-### 2. **Multi-Provider from Day 1**
-
-Built-in support for 17 AI providers prevents vendor lock-in.
-
-**Trade-off**: Added complexity in ModelManager vs. flexibility and cost optimization.
-
-### 3. **Graph-First Workflows**
-
-LangGraph state machines for complex multi-step operations (ask, chat, transformations).
-
-**Trade-off**: Steeper learning curve vs. maintainable, debuggable workflows.
-
-### 4. **Self-Hosted Database**
-
-SurrealDB for graph + vector search in one system (no external dependencies).
-
-**Trade-off**: Operational responsibility vs. simplified architecture and cost savings.
-
-### 5. **Job Queue for Long-Running Tasks**
-
-Async job submission (source processing, podcast generation) prevents request timeouts.
-
-**Trade-off**: Eventual consistency vs. responsive user experience.
-
----
-
-## Important Quirks & Gotchas
-
-### API Startup
-
-- **Migrations run automatically** on every startup; check logs for errors
-- **SurrealDB must be running** before starting API (connection test in lifespan)
-- **Auth middleware is basic** (password-only); upgrade to OAuth/JWT for production
-
-### Database Operations
-
-- **Record IDs use SurrealDB syntax** (table:id format, e.g., "notebook:abc123")
-- **ensure_record_id()** helper prevents malformed IDs
-- **Soft deletes** via `archived` field (data not removed, just marked inactive)
-- **Timestamps in ISO 8601 format** (created, updated fields)
-
-### LangGraph Workflows
-
-- **State persistence** via SqliteSaver in `/data/sqlite-db/`
-- **No built-in timeout**; long workflows may block requests (use streaming for UX)
-- **Model fallback** automatic if primary provider unavailable
-- **Checkpoint IDs** must be unique per session (avoid collisions)
-
-### AI Provider Integration
-
-- **Esperanto library** handles all provider APIs (no direct API calls)
-- **Per-request override** via RunnableConfig (temporary, not persistent)
-- **Cost estimation** via token counting (not 100% accurate, use for guidance)
-- **Fallback logic** tries cheaper models if primary fails
-
-### File Uploads
-
-- **Stored in `/data/uploads/`** directory (not database)
-- **Unique filename generation** prevents overwrites (counter suffix)
-- **Content-core library** extracts text from 50+ file types
-- **Large files** may block API briefly (sync content extraction)
-
----
-
-## Performance Considerations
-
-### Optimization Strategies
-
-1. **Connection Pooling**: SurrealDB async driver with configurable pool size
-2. **Query Caching**: TanStack Query on frontend (client-side caching)
-3. **Embedding Reuse**: Vector search uses pre-computed embeddings
-4. **Chunking**: Sources split into chunks for better search relevance
-5. **Async Operations**: Non-blocking I/O for high concurrency
-6. **Lazy Loading**: Frontend requests only needed data (pagination)
-
-### Bottlenecks
-
-1. **LLM Calls**: Latency depends on provider (typically 1-30 seconds)
-2. **Embedding Generation**: Time proportional to content size and provider
-3. **Vector Search**: Similarity computation over all embeddings
-4. **Content Extraction**: Sync operation in source processing
-
-### Monitoring
-
-- **API Logs**: Check loguru output for errors and slow operations
-- **Database Queries**: SurrealDB metrics available via admin UI
-- **Token Usage**: Estimated via `estimate_tokens()` utility
-- **Job Status**: Poll `/commands/{id}` for async operations
-
----
-
-## Extension Points
-
-### Adding a New Workflow
-
-1. Create `open_notebook/graphs/workflow_name.py`
-2. Define StateDict and node functions
-3. Build graph with `.add_node()` / `.add_edge()`
-4. Create service in `api/workflow_service.py`
-5. Register router in `api/main.py`
-6. Add tests in `tests/test_workflow.py`
-
-### Adding a New Data Model
-
-1. Create model in `open_notebook/domain/model_name.py`
-2. Inherit from BaseModel (domain object)
-3. Implement `save()`, `get()`, `delete()` methods (CRUD)
-4. Add repository functions if complex queries needed
-5. Create database migration in `open_notebook/database/migrations/` (and register it in `AsyncMigrationManager`)
-6. Add API routes and models in `api/`
-
-### Adding a New AI Provider
-
-1. Configure Esperanto for new provider (see .env.example)
-2. ModelManager automatically detects via environment variables
-3. Override via per-request config (no code changes needed)
-4. Test fallback logic if provider unavailable
-
----
-
-## Deployment Considerations
-
-### Development
-
-- All services on localhost (3000, 5055, 8000)
-- Auto-reload on file changes (Next.js, FastAPI)
-- Hot-reload database migrations
-- Open API docs at http://localhost:5055/docs
-
-### Production
-
-- **Frontend**: Deploy to Vercel, Netlify, or Docker
-- **API**: Docker container (see Dockerfile)
-- **Database**: SurrealDB container or managed service
-- **Environment**: Secure .env file with API keys
-- **SSL/TLS**: Reverse proxy (Nginx, CloudFlare)
-- **Rate Limiting**: Add at proxy layer
-- **Auth**: Replace PasswordAuthMiddleware with OAuth/JWT
-- **Monitoring**: Log aggregation (CloudWatch, DataDog, etc)
-
----
-
-## Summary
-
-Open Notebook's architecture provides a solid foundation for privacy-focused, AI-powered research. The separation of concerns (frontend/API/database), async-first design, and multi-provider flexibility enable rapid development and easy deployment. LangGraph workflows orchestrate complex AI tasks, while Esperanto abstracts provider details. The result is a scalable, maintainable system that puts users in control of their data and AI provider choice.
+- **Frontend** (`frontend/`): Next.js 16 App Router, React 19, TypeScript, TanStack Query, Zustand, Tailwind 4, i18next. It talks only to the API.
+- **API** (`api/`): FastAPI. On startup it waits for SurrealDB and runs pending migrations. It serves CRUD, chat and Ask synchronously (chat and Ask call LangGraph directly) and hands long-running work to the worker.
+- **Worker** (`commands/`): [surreal-commands](https://github.com/lfnovo/surreal-commands) reads jobs from SurrealDB and runs the functions registered with `@command`. Without it, source processing, embeddings and podcasts never run ([ADR-004](decisions/ADR-004-background-workers.md)).
+- **SurrealDB** (v2): documents, graph edges, full-text (BM25) and vector search in one database ([ADR-001](decisions/ADR-001-surrealdb.md)).
+- **Chat history** is not in SurrealDB: LangGraph's `SqliteSaver` keeps it in `./data/sqlite-db/checkpoints.sqlite` (`LANGGRAPH_CHECKPOINT_FILE` in `open_notebook/config.py`, a constant). Uploads go to `./data/uploads/` and podcast audio to `./data/podcasts/`.
+
+The Docker image runs the API, worker and frontend under supervisord (`supervisord.conf`); the `-single` image also runs SurrealDB.
+
+## Backend layout
+
+| Path | What lives there |
+|---|---|
+| `api/main.py` | App setup: middleware (password auth, body-size limit, CORS), exception handlers, router registration (`prefix="/api"`), startup migrations |
+| `api/routers/` | One module per resource (22 of them, plus the `_chat_shared.py` helper). Most call domain models and `repo_*` functions directly |
+| `api/*_service.py` | Shared or orchestration logic: `command_service.py` (job submission), `credentials_service.py` (credential lifecycle, discovery), `podcast_service.py` |
+| `api/models.py` | Pydantic request and response schemas |
+| `open_notebook/domain/` | Domain models on `ObjectModel` / `RecordModel` (`base.py`): `Notebook`, `Source`, `Note`, `SourceInsight`, `ChatSession`, `Transformation`, `Credential`, settings singletons |
+| `open_notebook/ai/` | `provider_registry.py` (provider metadata), `models.py` (`Model`, `DefaultModels`, `ModelManager`), `provision.py`, `key_provider.py`, `model_discovery.py`, `connection_tester.py` |
+| `open_notebook/graphs/` | LangGraph workflows (below) |
+| `open_notebook/podcasts/` | `EpisodeProfile`, `SpeakerProfile`, `PodcastEpisode` |
+| `open_notebook/database/` | `repository.py` (`repo_query`, `repo_create`, …; one connection per call, no pool) and migrations |
+| `open_notebook/utils/` | Chunking, embedding, context building, encryption, error classification, URL validation |
+| `commands/` | Background commands: `process_source`, `run_transformation`, `embed_note`, `embed_insight`, `embed_source`, `create_insight`, `rebuild_embeddings`, `generate_podcast` |
+| `prompts/` | Jinja templates for ask, chat, source chat, transformations and podcasts |
+
+## Data model
+
+Defined by the migrations in `open_notebook/database/migrations/` (read them for exact fields).
+
+| Table | Holds |
+|---|---|
+| `notebook` | Name, description, `archived` flag (a filter, not a soft delete; deleting removes the record) |
+| `source` | `title`, `full_text`, `asset` (file path or URL), `topics`, `command` (the processing job) |
+| `source_embedding` | One chunk of a source: `source`, `order`, `content`, `embedding` |
+| `source_insight` | Transformation output for a source: `source`, `insight_type`, `content`, `embedding` |
+| `note` | Title, content, `note_type`, `embedding` |
+| `chat_session` | Session metadata only; messages live in the SQLite checkpoint, keyed by session id |
+| `transformation` | Prompt-based transformations: `name`, `title`, `prompt`, `apply_default`, optional `model_id` |
+| `model` | A configured model: `provider`, `name`, `type`, optional `credential` link |
+| `credential` | Provider credentials, API key encrypted ([credentials.md](credentials.md)) |
+| `episode_profile`, `speaker_profile`, `episode` | Podcast configuration and generated episodes ([podcasts.md](podcasts.md)) |
+| `open_notebook:*` records | Singletons: `default_models`, `default_prompts`, `content_settings` (plus legacy `provider_configs`, kept only for migration) |
+
+Relationships are graph edges, not foreign keys:
+
+- `reference`: source → notebook (a source can be in several notebooks)
+- `artifact`: note → notebook
+- `refers_to`: chat session → notebook or source
+
+Search is two SurrealDB functions, `fn::text_search` (BM25 over titles, full text, chunks, insights and notes) and `fn::vector_search` (over the stored embeddings).
+
+## Workflows (`open_notebook/graphs/`)
+
+| Graph | Invoked by | Shape |
+|---|---|---|
+| `source.py` | `process_source` command | `content_process` (content-core extraction) → `save_source` → `transform_content` (one branch per requested transformation). Embedding is a separate `embed_source` job |
+| `transformation.py` | `run_transformation` command, `POST /api/transformations/execute` | One node: apply a transformation prompt to a source |
+| `chat.py` | `api/routers/chat.py` | One node, checkpointed in SQLite (notebook chat) |
+| `source_chat.py` | `api/routers/source_chat.py` | One node, checkpointed in SQLite, streamed as SSE |
+| `ask.py` | `POST /api/search/ask` | Search strategy → one answer per search (parallel) → final answer, streamed as SSE |
+| `prompt.py` | `api/routers/notes.py` | One node: generate a note title |
+
+Nodes are `async def`, except in the two checkpointed chat graphs, which use sync nodes with a new event loop because `SqliteSaver` is synchronous.
+
+## How a model call happens
+
+1. A graph node calls `provision_langchain_model(content, model_id, default_type, **kwargs)` (`open_notebook/ai/provision.py`).
+2. Content over 105,000 tokens switches to the `large_context` default model. Otherwise an explicit `model_id` wins, then the default for `default_type` (`chat`, `transformation`, `tools`, …) from `DefaultModels`. No model → `ConfigurationError`, which the API returns as 422.
+3. `ModelManager.get_model()` loads the `Model` record. If it links a credential, the credential's config goes straight to Esperanto's `AIFactory`; otherwise `provision_provider_keys()` fills environment variables from stored credentials ([credentials.md](credentials.md#provisioning-two-paths)).
+4. The Esperanto model is converted with `.to_langchain()`. All provider calls go through [Esperanto](https://github.com/lfnovo/esperanto); nothing calls a provider SDK directly. Calls time out after `ESPERANTO_LLM_TIMEOUT` (Open Notebook sets 180 s when it's unset).
+5. On failure, the node passes the exception through `classify_error()` (`open_notebook/utils/error_classifier.py`). It matches the error text (auth, rate limit, model not found, network/timeout, context length, …) and raises the matching `open_notebook.exceptions` type with a user-readable message. The API's exception handlers turn that into a status code, and the frontend shows the message.
+
+## Background jobs
+
+1. A router submits a job: `CommandService.submit_command_job("open_notebook", "<command>", args)`. The job is stored in SurrealDB and its id returned at once.
+2. The worker runs the `@command` function. Its `retry` config decides what is retried; exceptions in `stop_on` fail the job immediately.
+3. Clients poll `GET /api/commands/jobs/{job_id}`, or a resource-specific status endpoint such as `GET /api/sources/{source_id}/status`.
+
+Example: `POST /api/sources` with `async_processing=true` (what the UI sends) saves the source, submits `process_source`, and returns. Without that flag, the API runs the same command inline (`execute_command_sync`) and responds when it finishes. The worker extracts the content, runs transformations, and submits `embed_source` if embedding was requested.
+
+## Request path in the API
+
+`CORSMiddleware` → `MaxBodySizeMiddleware` (rejects bodies over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` with 413) → `PasswordAuthMiddleware` (Bearer password, if one is set) → router. Typed exceptions from anywhere below map to status codes in `api/main.py`; see [api-reference.md](api-reference.md#errors).
diff --git a/docs/7-DEVELOPMENT/change-playbooks.md b/docs/7-DEVELOPMENT/change-playbooks.md
index 65065958..6b224673 100644
--- a/docs/7-DEVELOPMENT/change-playbooks.md
+++ b/docs/7-DEVELOPMENT/change-playbooks.md
@@ -1,58 +1,76 @@
 # Change Playbooks
 
-Step-by-step guides for common types of changes in the Open Notebook codebase. Each playbook lists the files to touch **in order**, what to do at each step, and what to test.
+Step-by-step guides for common changes. Each playbook lists the files to touch in order and what to test. The rules behind them are in the AGENTS files ([root](../../AGENTS.md), [backend](../../open_notebook/AGENTS.md), [frontend](../../frontend/AGENTS.md)).
 
-> **For AI agents:** Read the relevant playbook BEFORE implementing. Follow the sequence — skipping steps causes incomplete changes that break other layers.
+> **For AI agents:** read the matching playbook before implementing. If a change spans several types (a new field and a new endpoint), combine them. When in doubt, find the most recent similar change with `git log` and copy its shape.
 
----
-
-## How to Use This Document
-
-1. Identify what type of change your issue requires
-2. Follow the playbook step by step
-3. If a change spans multiple types (e.g., new field + new endpoint), combine the relevant playbooks
-4. When in doubt, read existing examples in the codebase — look at the most recent similar change via `git log`
+Every playbook ends the same way: tests, a CHANGELOG entry under `[Unreleased]`, and the checks CI runs (see [contributing.md](contributing.md#before-you-open-a-pr)).
 
 ---
 
 ## Playbook: Add a Field to an Existing Model
 
-**Example:** "Add `language` field to Source"
+**Example:** "Add `language` to episode profiles"
 
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `open_notebook/domain/<model>.py` | Add field with type hint and default value. Follow existing patterns in the class. |
-| 2 | `open_notebook/database/migrations/N.surrealql` | Create migration. Use next number in sequence. `DEFINE FIELD` for new fields, `UPDATE` for backfilling existing records. Register it in `AsyncMigrationManager` (`async_migrate.py`) — migrations are not auto-discovered. |
-| 3 | `api/models.py` | Add field to `*Create`, `*Update` (Optional), and `*Response` schemas. |
-| 4 | `frontend/src/lib/types/api.ts` | Add field to the corresponding TypeScript interface (`*Response`, `Create*Request`, `Update*Request`). |
-| 5 | Frontend component (if user-facing) | Display or edit the field in the relevant component. |
-| 6 | `frontend/src/lib/locales/*/` | Add i18n strings if the field has a user-visible label. All 7 locales. |
-| 7 | Tests | Add/update tests covering the new field — at minimum, API test for create/read. |
-
-**Verify:** Restart API (migration auto-runs), check logs for migration success, test via `/docs`.
+| 1 | `open_notebook/domain/<model>.py` (or `open_notebook/podcasts/models.py`, `open_notebook/ai/models.py`) | Add the field with a type hint and default. |
+| 2 | `open_notebook/database/migrations/N.surrealql` + `N_down.surrealql` | Only for `SCHEMAFULL` tables: `DEFINE FIELD`, plus an `UPDATE` to backfill if needed. Follow the [Database Migration](#playbook-database-migration) playbook. |
+| 3 | `api/models.py` | Add the field to the request (`*Create`, `*Update` as `Optional`) and `*Response` schemas. |
+| 4 | `api/routers/<resource>.py` | Pass the field through where the router builds the domain object or the response. |
+| 5 | `frontend/src/lib/types/*.ts` | Add it to the matching TypeScript interface (`api.ts`, `podcasts.ts`, `models.ts`, …). |
+| 6 | Frontend component | Display or edit it. Every new label goes through `t()` and into **every** locale (see [i18n](#playbook-i18n--translation-update)). |
+| 7 | `tests/` | At least an API test for create and read. |
 
 ---
 
 ## Playbook: New API Endpoint
 
-**Example:** "Add endpoint to export notebook as PDF"
+**Example:** "Add an endpoint to export a notebook"
 
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `api/models.py` | Define request/response Pydantic schemas. Naming: `<Feature>Request`, `<Feature>Response`. |
-| 2 | `api/routers/<resource>.py` | Add endpoint to existing router, OR create new router file if it's a new resource. Follow the pattern: validate → call service → return response. |
-| 3 | `api/<resource>_service.py` | Business logic goes here, not in the router. Create new service file if needed. |
-| 4 | `api/main.py` | If new router file: register with `app.include_router()`. |
-| 5 | `frontend/src/lib/types/api.ts` | Add TypeScript types matching the Pydantic schemas. |
-| 6 | `frontend/src/lib/api/<resource>.ts` | Add method to the API module. Follow existing pattern (axios call, return `response.data`). |
-| 7 | `frontend/src/lib/hooks/use-<resource>.ts` | Add React Query hook. `useQuery` for GET, `useMutation` for POST/PUT/DELETE. Include cache invalidation and toast. |
-| 8 | Frontend component/page | Wire up the hook in the UI. |
-| 9 | Tests | API test (status codes, validation, error cases). |
+| 1 | `api/models.py` | Request/response Pydantic schemas (`<Feature>Request`, `<Feature>Response`). |
+| 2 | `api/routers/<resource>.py` | Add the endpoint to the existing router, or create a router for a new resource. Most routers call domain models (`open_notebook/domain/`) and `repo_*` functions directly. Put logic in an `api/*_service.py` module only when several routers share it or it orchestrates jobs (as `command_service.py`, `credentials_service.py` and `podcast_service.py` do). |
+| 3 | `api/main.py` | New router only: `app.include_router(<module>.router, prefix="/api", tags=[...])`. |
+| 4 | `frontend/src/lib/types/` and `frontend/src/lib/api/<resource>.ts` | Types and a method on the API module (calls `apiClient`, returns `response.data`). |
+| 5 | `frontend/src/lib/hooks/use-<resource>.ts` | TanStack Query hook: `useQuery` for reads, `useMutation` with cache invalidation and a toast for writes. |
+| 6 | Frontend component/page | Wire up the hook. |
+| 7 | `tests/` | Status codes, validation and error cases with `TestClient` (see [testing.md](testing.md)). |
 
-**Naming conventions:**
-- Routers: `@router.get("/resources/{id}")` (plural, lowercase, kebab for multi-word)
-- Services: functions are `async`, named descriptively (`process_source`, `generate_podcast`)
-- Hooks: `useResources()` for list, `useResource(id)` for single, `useCreateResource()` for mutation
+**Errors:** raise typed exceptions from `open_notebook.exceptions` and let the global handlers in `api/main.py` map them to status codes. A router's catch-all `except Exception` must come after `except OpenNotebookError: raise` (and `except HTTPException: raise`) so typed errors still reach those handlers. See [code-standards.md](code-standards.md#errors-in-the-api).
+
+**Naming:** paths are plural and lowercase, kebab-case for several words (`/episode-profiles`, `/sources/{source_id}/status`). Hooks are `useResources()`, `useResource(id)`, `useCreateResource()`.
+
+---
+
+## Playbook: Add an AI Provider
+
+**Example:** SiliconFlow and Z.ai (PR #1443), MiniMax text-to-speech (PR #1444)
+
+Open Notebook never calls provider SDKs directly; every model is created through [Esperanto](https://github.com/lfnovo/esperanto). So step 0 is: **Esperanto must already support the provider**, under the same provider name. If support arrived in a newer Esperanto release, bump `esperanto` in `pyproject.toml` and run `uv lock`.
+
+The provider registry is the source of truth. Most backend tables and the frontend read from it, but a few copies are still maintained by hand. This is the full list for a provider with a single API key (the common case):
+
+| Step | File | What to do |
+|------|------|------------|
+| 1 | `open_notebook/ai/provider_registry.py` | Add a `ProviderSpec` to `_PROVIDER_SPECS`. Its position is the display order in the UI. Set `name` (Esperanto's provider name), `display_name`, `modalities`, `required_env=("X_API_KEY",)`, `test_model` (the cheapest model, used by the connection test), `docs_url` (where users get a key), and `openai_compat_discovery_url` if the provider has an OpenAI-style `GET /models`. If the provider has regional endpoints, also declare `optional_env=("X_BASE_URL",)` ([ADR-012](decisions/ADR-012-provider-endpoint-overrides.md)): env migration and model discovery then honor the override. |
+| 2 | `api/models.py` | Add the name to the `SupportedProvider` Literal. (Python typing can't build it from the registry at runtime.) |
+| 3 | `open_notebook/ai/key_provider.py` | Add `"<name>": {"env_var": "X_API_KEY"}` to `PROVIDER_CONFIG`. Without it, models that fall back to environment keys (no linked credential) can't be provisioned. |
+| 4 | `api/routers/models.py` | Add `"<name>": "X_API_KEY"` to `env_var_map` in `get_provider_availability()`. Without it, `GET /api/models/providers` reports an env-only setup as unavailable. |
+| 5 | `open_notebook/ai/model_discovery.py` | For an OpenAI-compatible listing: `discover_<name>_models = _make_openai_compat_discoverer("<name>")` and an entry in `PROVIDER_DISCOVERY_FUNCTIONS`. A provider with no env-based discovery maps to `None` (as `azure` and `vertex` do). If the `/models` listing mixes in embedding or audio models, add a `<NAME>_MODEL_TYPES` table and register it in `classify_model_type()` (SiliconFlow). If the listing leaves out audio models, seed them in `PROVIDER_AUDIO_SEEDS` (MiniMax TTS). |
+| 6 | `api/routers/models.py` (optional) | Add the provider to `PROVIDER_PRIORITY` and `MODEL_PREFERENCES` if **Auto-assign Defaults** should pick its models. |
+| 7 | `tests/test_credential_provider_validation.py`, `tests/test_model_discovery.py` | Add the name to `KNOWN_GOOD_PROVIDERS`, to the expected discovery-URL dict and to the expected `PROVIDER_DISCOVERY_FUNCTIONS` set. These tests fail until steps 1, 2 and 5 agree. For a `*_BASE_URL` override, add migration and discovery cases to `tests/test_credentials_api.py`. |
+| 8 | Docs | A section in `docs/5-CONFIGURATION/ai-providers.md`, the env vars in `docs/5-CONFIGURATION/environment-reference.md`, the provider tables in `docs/4-AI-PROVIDERS/index.md`, the provider list in `README.md`, and an `### Added` CHANGELOG entry. |
+
+You don't need to touch:
+
+- `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG` / `PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS`. They are derived from the registry.
+- The frontend. It loads providers from `GET /api/providers` at runtime (`useProviders()`), and the credential form shows the API key and Base URL fields for any simple provider.
+
+Providers that need several config fields (like `azure`, `vertex`, `openai_compatible`) also need a `_provision_<name>()` function in `key_provider.py`, a bespoke check in `get_provider_availability()`, credential-based discovery in `api/credentials_service.py`, and form fields in `frontend/src/components/settings/CredentialFormDialog.tsx`. Read how the closest existing provider does it before starting.
+
+**Verify:** `uv run pytest tests/test_credential_provider_validation.py tests/test_model_discovery.py tests/test_credentials_api.py`. Then, in the app: **Manage → Models**, add a configuration for the provider, run **Test Connection**, then **Sync Models**.
 
 ---
 
@@ -60,150 +78,105 @@ Step-by-step guides for common types of changes in the Open Notebook codebase. E
 
 **Example:** "Add a summarization workflow"
 
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `prompts/<workflow_name>/*.jinja` | Create Jinja2 prompt templates. Use `Prompter` from ai-prompter. |
-| 2 | `open_notebook/graphs/<workflow_name>.py` | Define `StateDict` (TypedDict), node functions, build graph with `StateGraph`. Use `provision_langchain_model()` for model selection. Wrap LLM calls with `classify_error()`. |
-| 3 | `api/<resource>_service.py` | Invoke graph: `await graph.ainvoke(state, config)`. |
-| 4 | `api/routers/<resource>.py` | Expose endpoint to trigger the workflow. |
-| 5 | `commands/<workflow>_commands.py` | If the workflow should run async: create command with `CommandInput`/`CommandOutput`. Register in command service. |
-| 6 | Frontend integration | API module → hook → component. |
-| 7 | Tests | Test graph nodes individually with mocked LLM responses. |
+| 1 | `prompts/<workflow>/*.jinja` | Prompt templates, rendered with `Prompter` (see [prompts.md](prompts.md)). |
+| 2 | `open_notebook/graphs/<workflow>.py` | A `TypedDict` state, node functions and a `StateGraph`. Get models with `provision_langchain_model()`, wrap LLM calls with `classify_error()`, and strip thinking output with `clean_thinking_content()`. |
+| 3 | Caller | Short, interactive work: call `await graph.ainvoke(state, config=...)` from a router (as `search.py` does for Ask). Long-running work: invoke it from a background command (as `process_source` does for the source graph). |
+| 4 | Frontend | API module → hook → component. |
+| 5 | `tests/` | Test nodes with a mocked model (`patch` `provision_langchain_model`). |
 
-**Key patterns:**
-- Nodes are sync functions (LangGraph requirement) but can call async code via ThreadPoolExecutor
-- Use `classify_error()` to convert raw exceptions to typed `OpenNotebookError` subclasses
-- Use `provision_langchain_model()` for model selection — never hardcode a provider
-- State is a TypedDict, NOT a Pydantic model
-
----
-
-## Playbook: Bug Fix (Single Layer)
-
-**Example:** "order_by parameter not working on sources endpoint"
-
-| Step | What to Do |
-|------|------------|
-| 1 | **Identify the layer.** Read the issue and determine: frontend, API router, service, domain model, database, or graph. |
-| 2 | **Read the relevant AGENTS.md** (root, `open_notebook/`, or `frontend/`) and the matching page in `docs/7-DEVELOPMENT/`. They document the rules and gotchas. |
-| 3 | **Reproduce.** Use the API docs (`/docs`), browser, or a test to confirm the bug. |
-| 4 | **Fix.** Make the minimal change needed. Don't refactor surrounding code. |
-| 5 | **Add a test** that reproduces the bug and verifies the fix. |
-| 6 | **Run existing tests** to verify no regression: `uv run pytest tests/` |
-
----
-
-## Playbook: Bug Fix (Cross-Layer)
-
-**Example:** "Creating a source via URL doesn't show in notebook"
-
-| Step | What to Do |
-|------|------------|
-| 1 | **Trace the data flow.** Start from where the user sees the problem (frontend) and trace backward: component → hook → API call → router → service → domain → database. |
-| 2 | **Identify where the chain breaks.** Use API docs to test the backend independently of the frontend. Use SurrealDB queries to check if data was persisted. |
-| 3 | **Fix at the right layer.** Don't patch the symptom in the frontend if the bug is in the service. |
-| 4 | **Verify the full chain** after fixing. |
-| 5 | **Add tests** at the layer where the bug was. |
-
----
-
-## Playbook: Database Migration
-
-**Example:** "Add index on source.notebook_id for query performance"
-
-| Step | File(s) | What to Do |
-|------|---------|------------|
-| 1 | `open_notebook/database/migrations/N.surrealql` (+ `N_down.surrealql`) | Write SurrealQL. Use next number in sequence. Check existing migrations for patterns. |
-| 2 | `open_notebook/database/async_migrate.py` | Register the new files in `AsyncMigrationManager.__init__` — migrations are hard-coded, not auto-discovered. |
-| 3 | Domain model (if schema change) | Update field definitions to match. |
-| 4 | API schemas (if new/changed fields) | Update Pydantic models. |
-| 5 | **Verify:** Restart API and check logs | Migrations auto-run on startup. Look for errors in Loguru output. |
-
-**Important:**
-- Migrations are numbered and run in order
-- They're tracked in the `_sbl_migrations` table — won't re-run
-- One migration per PR that needs one, numbered in merge order; never consolidate after a migration lands on main (dev images apply it immediately) — see [ADR-006](decisions/ADR-006-migration-granularity.md)
-- For destructive changes (DROP FIELD), consider data preservation
-- Test with existing data, not just empty database
-
----
-
-## Playbook: Frontend-Only Change
-
-**Example:** "Improve notebook list loading state"
-
-| Step | File(s) | What to Do |
-|------|---------|------------|
-| 1 | Identify component | Components are in `frontend/src/app/` (pages) or `frontend/src/components/` (shared). |
-| 2 | Make changes | Follow existing patterns: functional components, hooks for state, Tailwind for styling. |
-| 3 | i18n strings | If adding user-visible text, add to ALL locale files under `frontend/src/lib/locales/`. |
-| 4 | Test in browser | Check responsive layout, dark mode (if applicable), loading states, empty states, error states. |
-
-**Key patterns:**
-- `'use client'` directive at top of components using hooks
-- State: `useState` for local, Zustand for global, TanStack Query for server
-- Styling: Tailwind utility classes, Shadcn/ui components from `components/ui/`
-- Types: Define in `lib/types/api.ts`, import everywhere
+**Nodes are `async def`** (`ask.py`, `source.py`, `transformation.py`, `prompt.py`). Only the two checkpointed chat graphs (`chat.py`, `source_chat.py`) use sync nodes with an `asyncio.new_event_loop()` workaround, because their `SqliteSaver` checkpointer is synchronous. Don't copy that pattern into a graph without a checkpointer.
 
 ---
 
 ## Playbook: New Background Command
 
-**Example:** "Add command to rebuild all embeddings for a notebook"
+**Example:** "Rebuild all embeddings"
 
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `commands/<name>_commands.py` | Define `CommandInput` and `CommandOutput` Pydantic classes. Write the command function. |
-| 2 | Register command | Add to the command service so it can be submitted via `CommandService.submit_command_job()`. |
-| 3 | API endpoint | Add endpoint that submits the command and returns the command ID. |
-| 4 | Frontend (polling) | Use `/commands/{command_id}` endpoint to poll for status. Show progress to user. |
+| 1 | `commands/<area>_commands.py` | Define `CommandInput` / `CommandOutput` subclasses and an `async` function decorated with `@command("<name>", app="open_notebook", retry={...})`. |
+| 2 | `commands/__init__.py` | Import the command. The worker starts with `--import-modules commands`, so a command that isn't imported there is never registered. |
+| 3 | API | Submit it: `await CommandService.submit_command_job("open_notebook", "<name>", input.model_dump())`. This returns a job id immediately. |
+| 4 | Frontend | Poll `GET /api/commands/jobs/{job_id}` for status. Sources also have `GET /api/sources/{source_id}/status`. |
+| 5 | `tests/` | Call the command function directly with mocked dependencies. |
 
-**Pattern:**
-- Commands are fire-and-forget: submit returns immediately with a command ID
-- Retry config: `max_attempts`, `stop_on` exceptions (ValueError = no retry)
-- Exponential backoff with jitter for transient failures
+**Retry:** `retry` takes `max_attempts`, `wait_strategy` (`exponential_jitter`), `wait_min`, `wait_max` and `stop_on`, a list of exception types that fail the job immediately. Retries happen for any exception not in `stop_on`. Existing commands put `ValueError`, `ConfigurationError`, `NotFoundError` and similar permanent errors in `stop_on`. Make the command safe to run twice. Restart the worker after changing a command.
+
+---
+
+## Playbook: Database Migration
+
+| Step | File(s) | What to do |
+|------|---------|------------|
+| 1 | `open_notebook/database/migrations/N.surrealql` + `N_down.surrealql` | SurrealQL for the change and its rollback. `N` is the next number. Copy patterns from recent migrations. |
+| 2 | `open_notebook/database/async_migrate.py` | Add both files to the lists in `AsyncMigrationManager.__init__`. Migrations are listed by hand, not discovered. |
+| 3 | Domain model and `api/models.py` | Match the new fields. |
+| 4 | Verify | Restart the API. Migrations run on startup; the log shows `Running migration N` and `Migrations completed successfully. Database is now at version N`. |
+
+- Applied versions are recorded in the `_sbl_migrations` table and never re-run.
+- One migration per PR that needs one, numbered in merge order. Never consolidate migrations after one lands on `main`: dev images apply it immediately ([ADR-006](decisions/ADR-006-migration-granularity.md)).
+- Test against a database with existing data, not only an empty one.
+
+---
+
+## Playbook: Bug Fix
+
+| Step | What to do |
+|------|------------|
+| 1 | **Find the layer.** Trace from where the user sees the problem: component → hook → API module → router → domain/graph/command → database. Use `/docs` (Swagger) to call the backend without the frontend. |
+| 2 | **Read the rules** for that layer: the matching AGENTS file and page in `docs/7-DEVELOPMENT/`. |
+| 3 | **Reproduce it with a test** that fails. |
+| 4 | **Fix it at the layer where it breaks**, with the smallest change. Don't patch a backend bug in the frontend, and don't refactor surrounding code. |
+| 5 | **Run the whole suite**: `uv run pytest tests/` (and the frontend checks if you touched it). |
+
+---
+
+## Playbook: Frontend-Only Change
+
+| Step | What to do |
+|------|------------|
+| 1 | Pages are in `frontend/src/app/`, feature components in `frontend/src/components/<feature>/`, primitives in `frontend/src/components/ui/`. |
+| 2 | Follow existing patterns: TanStack Query for server state, Zustand stores (`src/lib/stores/`) for client state, design tokens for styling ([ADR-011](decisions/ADR-011-design-token-system.md); no raw Tailwind palette classes). |
+| 3 | New user-visible text goes into every locale (next playbook). |
+| 4 | Check loading, empty and error states, both themes, and a narrow viewport. Add a colocated `*.test.tsx` for logic worth testing. |
 
 ---
 
 ## Playbook: i18n / Translation Update
 
-**Example:** "Add translations for new settings page"
-
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `frontend/src/lib/locales/en-US/index.ts` | Add English strings first. Group by feature. |
-| 2 | All other locale files | Add the same keys to: `pt-BR`, `zh-CN`, `zh-TW`, `ja-JP`, `ru-RU`, `bn-IN`. Use English as placeholder if translation unavailable. |
-| 3 | Component | Use `const { t } = useTranslation()` and access via `t('section.key')`. |
+| 1 | `frontend/src/lib/locales/en-US/index.ts` | Add the English strings. en-US is the reference shape. |
+| 2 | Every other directory under `frontend/src/lib/locales/` | Add the same keys. Use the English text as a placeholder if you can't translate it. |
+| 3 | Component | `const { t } = useTranslation()`, then `t('section.key')`. |
 
-**7 locales total.** Don't forget any.
+You can't forget a locale silently: each non-en-US locale ends with `satisfies TranslationShape`, so a missing or extra key fails `npm run build` (type check), and `src/lib/locales/index.test.ts` checks parity at runtime.
 
-### Adding a whole new language
+### Adding a new language
 
-| Step | File(s) | What to Do |
+| Step | File(s) | What to do |
 |------|---------|------------|
-| 1 | `frontend/src/lib/locales/<code>/index.ts` | Copy the structure from `en-US/index.ts` and translate all strings. |
-| 2 | `frontend/src/lib/locales/index.ts` | Register the locale: import it, add to `resources`, add to the `languages` array (`{ code, label }`). |
+| 1 | `frontend/src/lib/locales/<code>/index.ts` | Copy `en-US/index.ts`, translate it, export it, and end the object with `} satisfies TranslationShape;`. |
+| 2 | `frontend/src/lib/locales/index.ts` | Import it, add it to `resources` and to the `languages` array. The language toggle (`components/common/LanguageToggle.tsx`) renders `languages`, so the new language appears there with no further edit. |
 | 3 | `frontend/src/lib/utils/date-locale.ts` | Import the matching `date-fns/locale` and add it to `LOCALE_MAP`. |
-| 4 | **Test** | Switch languages via the UI language toggle; missing keys fall back to en-US. |
+| 4 | Test | Switch to the language in the toggle; dates and labels should change. |
 
 ---
 
-## Quick Reference: File Locations by Layer
+## Quick Reference: Where Things Live
 
-| Layer | Location | Schema/Types | Tests |
-|-------|----------|-------------|-------|
-| Domain models | `open_notebook/domain/` | Pydantic fields | `tests/` |
-| Database | `open_notebook/database/repository.py` | SurrealQL | `tests/` |
-| Migrations | `open_notebook/database/migrations/*.surrealql` | SurrealQL | Auto-run on startup |
-| AI/LLM | `open_notebook/ai/` | Esperanto types | `tests/` |
-| Graphs | `open_notebook/graphs/` | TypedDict state | `tests/` |
-| Prompts | `prompts/**/*.jinja` | Jinja2 context | — |
-| Commands | `commands/` | CommandInput/Output | `tests/` |
-| API routers | `api/routers/` | `api/models.py` | `tests/` |
-| API services | `api/*_service.py` | — | `tests/` |
-| Frontend types | `frontend/src/lib/types/` | TypeScript interfaces | — |
-| Frontend API | `frontend/src/lib/api/` | — | — |
-| Frontend hooks | `frontend/src/lib/hooks/` | — | `frontend/src/test/` |
-| Frontend components | `frontend/src/components/` | Props interfaces | `frontend/src/test/` |
-| Frontend pages | `frontend/src/app/` | — | — |
-| i18n | `frontend/src/lib/locales/` | — | — |
+| Layer | Location | Tests |
+|-------|----------|-------|
+| Domain models | `open_notebook/domain/`, `open_notebook/ai/models.py`, `open_notebook/podcasts/models.py` | `tests/` |
+| Database access | `open_notebook/database/repository.py` (`repo_query`, `repo_create`, …) | `tests/` |
+| Migrations | `open_notebook/database/migrations/` + `async_migrate.py` | run on API startup |
+| AI provisioning and providers | `open_notebook/ai/` | `tests/` |
+| Graphs | `open_notebook/graphs/` | `tests/` |
+| Prompts | `prompts/**/*.jinja` | `tests/` (podcast templates) |
+| Background commands | `commands/` | `tests/` |
+| API routers and schemas | `api/routers/`, `api/models.py` | `tests/` |
+| Frontend types / API / hooks | `frontend/src/lib/types/`, `lib/api/`, `lib/hooks/` | colocated `*.test.ts` |
+| Frontend components / pages | `frontend/src/components/`, `frontend/src/app/` | colocated `*.test.tsx` |
+| i18n | `frontend/src/lib/locales/` | `locales/index.test.ts` |
diff --git a/docs/7-DEVELOPMENT/code-standards.md b/docs/7-DEVELOPMENT/code-standards.md
index a0108003..21868bc4 100644
--- a/docs/7-DEVELOPMENT/code-standards.md
+++ b/docs/7-DEVELOPMENT/code-standards.md
@@ -1,375 +1,106 @@
 # Code Standards
 
-This document outlines coding standards and best practices for Open Notebook contributions. All code should follow these guidelines to ensure consistency, readability, and maintainability.
+How code in this repo is written. The hard rules for each area are in the AGENTS files ([backend](../../open_notebook/AGENTS.md), [frontend](../../frontend/AGENTS.md)); this page explains the conventions behind them and must not contradict them. Security rules (query parameters, templates, file paths) are in [security.md](security.md) and are mandatory.
 
-## Python Standards
+## Python
 
-### Code Formatting
+### Tooling
 
-We follow **PEP 8** with some specific guidelines:
+| Tool | Config | Run |
+|---|---|---|
+| ruff (lint) | `pyproject.toml`: rules `E`, `F`, `I` (import order) | `uv run ruff check .` (`--fix` to apply fixes) |
+| ruff (format) | line length 88 | `uv run ruff format .` (CI runs `--check`) |
+| mypy | `mypy.ini`, with a burn-down list of modules still exempt | `uv run python -m mypy .` |
 
-- Use **Ruff** for linting and formatting
-- Maximum line length: **88 characters**
-- Use **double quotes** for strings
-- Use **trailing commas** in multi-line structures
+CI fails on any of the three. Don't add modules to the mypy exemption list; remove them when you fix one.
 
-### Type Hints
+### Style
 
-Always use type hints for function parameters and return values:
+- Type hints on function signatures. Pydantic v2 for data: `BaseModel`, `Field`, `field_validator` (not the v1 `@validator`).
+- Log with `loguru` (`from loguru import logger`). Never log secrets or API key values.
+- Docstrings explain intent and non-obvious behavior; skip them where the name says it all. When code works around a bug or an issue, reference the issue number.
+- Keep changes scoped: don't reformat or refactor code you aren't otherwise changing.
+
+### Async
+
+Everything that touches the database, a model or the network is `async` and awaited:
+
+- Database: `repo_query`, `repo_create`, `repo_update`, `repo_relate`, … in `open_notebook/database/repository.py`, or domain methods (`await Notebook.get(id)`, `await source.save()`).
+- Outgoing HTTP: `httpx.AsyncClient`. User-supplied URLs go through `validate_url()` first.
+- Models: `provision_langchain_model()` for graph nodes, `model_manager` for embedding and speech models.
+
+Don't call blocking I/O from async code; wrap unavoidable sync calls in `asyncio.to_thread`. The only sanctioned sync-to-async bridge is the one in the checkpointed chat graphs (see [change-playbooks.md](change-playbooks.md#playbook-new-langgraph-workflow)).
+
+### Database access
+
+- Pass values as bind parameters (`$id`), never by f-string interpolation ([security.md](security.md#database-queries-surrealql-injection)). Convert IDs with `ensure_record_id()`.
+- Record IDs are `table:id` strings (`source:abc123`). `ObjectModel.get()` picks the subclass from the table prefix.
+- Relationships are graph edges, not foreign-key columns: `reference` (source → notebook), `artifact` (note → notebook), `refers_to` (chat session → notebook or source). Query them as `SELECT in AS source FROM reference WHERE out = $id`.
+- There is no connection pool. Each `repo_*` call opens and closes a connection (`db_connection()`).
+
+### Errors in the domain and graphs
+
+Raise typed exceptions from `open_notebook/exceptions.py`, never bare `Exception` or `ValueError` for conditions the API or a job should understand:
+
+| Situation | Raise |
+|---|---|
+| Record doesn't exist | `NotFoundError` |
+| Bad user input | `InvalidInputError` |
+| Model or provider not configured | `ConfigurationError` |
+| Database failure | `DatabaseOperationError` |
+| Provider failure | whatever `classify_error()` returns (see below) |
+
+`ObjectModel.get()` raises `NotFoundError` **only** when the record is missing, and `DatabaseOperationError` for any other database failure, such as a transaction conflict ([ADR-013](decisions/ADR-013-objectmodel-get-error-contract.md)). The API maps those to 404 and 500, and background jobs treat `NotFoundError` as permanent and the database error as retryable.
+
+Graph nodes wrap model calls so provider errors become typed, user-readable exceptions:
 
 ```python
-from typing import List, Optional, Dict, Any
-from pydantic import BaseModel
-
-async def process_content(
-    content: str,
-    options: Optional[Dict[str, Any]] = None
-) -> ProcessedContent:
-    """Process content with optional configuration."""
-    # Implementation
-```
-
-### Async/Await Patterns
-
-Use async/await consistently throughout the codebase:
-
-```python
-# Good
-async def fetch_data(url: str) -> Dict[str, Any]:
-    async with aiohttp.ClientSession() as session:
-        async with session.get(url) as response:
-            return await response.json()
-
-# Bad - mixing sync and async
-def fetch_data(url: str) -> Dict[str, Any]:
-    loop = asyncio.get_event_loop()
-    return loop.run_until_complete(async_fetch(url))
-```
-
-### Error Handling
-
-Use structured error handling with custom exceptions:
-
-```python
-from open_notebook.exceptions import DatabaseOperationError, InvalidInputError
-
-async def create_notebook(name: str, description: str) -> Notebook:
-    """Create a new notebook with validation."""
-    if not name.strip():
-        raise InvalidInputError("Notebook name cannot be empty")
-
-    try:
-        notebook = Notebook(name=name, description=description)
-        await notebook.save()
-        return notebook
-    except Exception as e:
-        raise DatabaseOperationError(f"Failed to create notebook: {str(e)}")
-```
-
-### Documentation (Google-style Docstrings)
-
-Use Google-style docstrings for all functions, classes, and modules:
-
-```python
-async def vector_search(
-    query: str,
-    limit: int = 10,
-    minimum_score: float = 0.2
-) -> List[SearchResult]:
-    """Perform vector search across embedded content.
-
-    Args:
-        query: Search query string
-        limit: Maximum number of results to return
-        minimum_score: Minimum similarity score for results
-
-    Returns:
-        List of search results sorted by relevance score
-
-    Raises:
-        InvalidInputError: If query is empty or limit is invalid
-        DatabaseOperationError: If search operation fails
-    """
-    # Implementation
-```
-
-#### Module Docstrings
-```python
-"""
-Notebook domain model and operations.
-
-This module contains the core Notebook class and related operations for
-managing research notebooks within the Open Notebook system.
-"""
-```
-
-#### Class Docstrings
-```python
-class Notebook(BaseModel):
-    """A research notebook containing sources, notes, and chat sessions.
-
-    Notebooks are the primary organizational unit in Open Notebook, allowing
-    users to group related research materials and maintain separate contexts
-    for different projects.
-
-    Attributes:
-        name: The notebook's display name
-        description: Optional description of the notebook's purpose
-        archived: Whether the notebook is archived (default: False)
-        created: Timestamp of creation
-        updated: Timestamp of last update
-    """
-```
-
-#### Function Docstrings
-```python
-async def create_notebook(
-    name: str,
-    description: str = "",
-    user_id: Optional[str] = None
-) -> Notebook:
-    """Create a new notebook with validation.
-
-    Args:
-        name: The notebook name (required, non-empty)
-        description: Optional notebook description
-        user_id: Optional user ID for multi-user deployments
-
-    Returns:
-        The created notebook instance
-
-    Raises:
-        InvalidInputError: If name is empty or invalid
-        DatabaseOperationError: If creation fails
-
-    Example:
-        ```python
-        notebook = await create_notebook(
-            name="AI Research",
-            description="Research on AI applications"
-        )
-        ```
-    """
-```
-
-## FastAPI Standards
-
-### Router Organization
-
-Organize endpoints by domain:
-
-```python
-# api/routers/notebooks.py
-from fastapi import APIRouter, HTTPException, Query
-from typing import List, Optional
-
-router = APIRouter()
-
-@router.get("/notebooks", response_model=List[NotebookResponse])
-async def get_notebooks(
-    archived: Optional[bool] = Query(None, description="Filter by archived status"),
-    order_by: str = Query("updated desc", description="Order by field and direction"),
-):
-    """Get all notebooks with optional filtering and ordering."""
-    # Implementation
-```
-
-### Request/Response Models
-
-Use Pydantic models for validation:
-
-```python
-from pydantic import BaseModel, Field
-from typing import Optional
-
-class NotebookCreate(BaseModel):
-    name: str = Field(..., description="Name of the notebook", min_length=1)
-    description: str = Field(default="", description="Description of the notebook")
-
-class NotebookResponse(BaseModel):
-    id: str
-    name: str
-    description: str
-    archived: bool
-    created: str
-    updated: str
-```
-
-### Error Handling
-
-Use consistent error responses:
-
-```python
-from fastapi import HTTPException
-from loguru import logger
-
 try:
-    result = await some_operation()
-    return result
-except InvalidInputError as e:
-    raise HTTPException(status_code=400, detail=str(e))
-except DatabaseOperationError as e:
-    logger.error(f"Database error: {str(e)}")
-    raise HTTPException(status_code=500, detail="Internal server error")
+    ...
+except Exception as e:
+    exc_class, message = classify_error(e)
+    raise exc_class(message) from e
 ```
 
-### API Documentation
+### Errors in the API
 
-Use FastAPI's automatic documentation features:
+Global handlers in `api/main.py` map the exception types to status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `UnsupportedTypeException`→415, `ConfigurationError`→422, `RateLimitError`→429, `NetworkError`/`ExternalServiceError`→502, any other `OpenNotebookError`→500). So in a router:
+
+- **Let typed exceptions propagate.** Don't catch a domain error just to re-raise it as `HTTPException`.
+- Raise `HTTPException` only for HTTP-level conditions the router itself checks (a malformed form field, an unsupported query parameter).
+- Most routers end with a catch-all that turns unexpected errors into a sanitized 500. It must come **after** the arms that re-raise typed and HTTP errors, or it swallows them:
 
 ```python
-@router.post(
-    "/notebooks",
-    response_model=NotebookResponse,
-    summary="Create a new notebook",
-    description="Create a new notebook with the specified name and description.",
-    responses={
-        201: {"description": "Notebook created successfully"},
-        400: {"description": "Invalid input data"},
-        500: {"description": "Internal server error"}
-    }
-)
-async def create_notebook(notebook: NotebookCreate):
-    """Create a new notebook."""
-    # Implementation
+try:
+    ...
+except HTTPException:
+    raise
+except OpenNotebookError:
+    raise                      # reaches the global handler with its real status
+except Exception as e:
+    logger.exception(f"Error updating notebook: {e}")
+    raise HTTPException(status_code=500, detail="Error updating notebook")
 ```
 
-## Database Standards
+`tests/test_typed_exceptions_reach_handlers.py` and `tests/test_error_message_sanitization.py` enforce both halves. Older routers still have `except NotFoundError: raise HTTPException(404, ...)` arms; they're equivalent, and new code doesn't need them.
 
-### SurrealDB Patterns
+### Background commands
 
-Use the repository pattern consistently:
+A command signals a permanent failure by raising an exception listed in its `retry["stop_on"]`; anything else is retried. See the [command playbook](change-playbooks.md#playbook-new-background-command).
 
-```python
-from open_notebook.database.repository import repo_create, repo_query, repo_update
+## TypeScript / frontend
 
-# Create records
-async def create_notebook(data: Dict[str, Any]) -> Dict[str, Any]:
-    """Create a new notebook record."""
-    return await repo_create("notebook", data)
+- `npm run lint` (ESLint over `src/`) and `npm run build` (which type-checks) must pass; CI runs both plus `npm run test`.
+- The rules that matter most, all in [frontend/AGENTS.md](../../frontend/AGENTS.md): every UI string through `t()` in every locale; colors through design tokens, never raw Tailwind palette classes; every request through `apiClient`; server state through TanStack Query hooks in `src/lib/hooks/`.
+- Show errors with `getApiErrorMessage()` and a toast. It shows the backend's `detail` when there is no i18n mapping, so backend errors must carry messages that are safe to show: `classify_error()` produces those for provider errors, and routers return a generic message for unexpected ones. Don't put internal details (queries, stack traces, file paths) into exception messages.
 
-# Query with parameters
-async def find_notebooks_by_user(user_id: str) -> List[Dict[str, Any]]:
-    """Find notebooks for a specific user."""
-    return await repo_query(
-        "SELECT * FROM notebook WHERE user_id = $user_id",
-        {"user_id": user_id}
-    )
+## Review checklist
 
-# Update records
-async def update_notebook(notebook_id: str, data: Dict[str, Any]) -> Dict[str, Any]:
-    """Update a notebook record."""
-    return await repo_update("notebook", notebook_id, data)
-```
-
-### Schema Management
-
-Use migrations for schema changes:
-
-```surrealql
--- migrations/8.surrealql
-DEFINE TABLE IF NOT EXISTS new_feature SCHEMAFULL;
-DEFINE FIELD IF NOT EXISTS name ON TABLE new_feature TYPE string;
-DEFINE FIELD IF NOT EXISTS description ON TABLE new_feature TYPE option<string>;
-DEFINE FIELD IF NOT EXISTS created ON TABLE new_feature TYPE datetime DEFAULT time::now();
-DEFINE FIELD IF NOT EXISTS updated ON TABLE new_feature TYPE datetime DEFAULT time::now();
-```
-
-## TypeScript Standards
-
-### Basic Guidelines
-
-Follow TypeScript best practices:
-
-- Use strict mode enabled in `tsconfig.json`
-- Use proper type annotations for all variables and functions
-- Avoid using `any` type unless absolutely necessary
-- Use `interface` for object shapes, `type` for unions and other advanced types
-
-### Component Structure
-
-- Use functional components with hooks
-- Keep components focused and single-responsibility
-- Extract reusable logic into custom hooks
-- Use proper TypeScript types for props
-
-### Error Handling
-
-- Handle errors explicitly
-- Provide meaningful error messages
-- Log errors appropriately
-- Don't suppress errors silently
-
-## Code Quality Tools
-
-We use these tools to maintain code quality:
-
-- **Ruff**: Linting and code formatting
-  - Run with: `uv run ruff check . --fix`
-  - Format with: `uv run ruff format .`
-
-- **MyPy**: Static type checking
-  - Run with: `uv run python -m mypy .`
-
-- **Pytest**: Testing framework
-  - Run with: `uv run pytest`
-
-## Common Patterns
-
-### Async Database Operations
-
-```python
-async def get_notebook_with_sources(notebook_id: str) -> Notebook:
-    """Retrieve notebook with all related sources."""
-    notebook_data = await repo_query(
-        "SELECT * FROM notebook WHERE id = $id",
-        {"id": notebook_id}
-    )
-    if not notebook_data:
-        raise InvalidInputError(f"Notebook {notebook_id} not found")
-
-    sources_data = await repo_query(
-        "SELECT * FROM source WHERE notebook_id = $notebook_id",
-        {"notebook_id": notebook_id}
-    )
-
-    return Notebook(
-        **notebook_data[0],
-        sources=[Source(**s) for s in sources_data]
-    )
-```
-
-### Model Validation
-
-```python
-from pydantic import BaseModel, validator
-
-class NotebookInput(BaseModel):
-    name: str
-    description: str = ""
-
-    @validator('name')
-    def name_not_empty(cls, v):
-        if not v.strip():
-            raise ValueError('Name cannot be empty')
-        return v.strip()
-```
-
-## Code Review Checklist
-
-Before submitting code for review, ensure:
-
-- [ ] Code follows PEP 8 / TypeScript best practices
-- [ ] Type hints are present for all functions
-- [ ] Docstrings are complete and accurate
-- [ ] Error handling is appropriate
-- [ ] Tests are included and passing
-- [ ] No debug code (console.logs, print statements) left behind
-- [ ] Commit messages are clear and follow conventions
-- [ ] Documentation is updated if needed
-
----
-
-**See also:**
-- [Testing Guide](testing.md) - How to write tests
-- [Contributing Guide](contributing.md) - Overall contribution workflow
+- [ ] CI checks pass locally ([contributing.md](contributing.md#before-you-open-a-pr))
+- [ ] Tests cover the change, including the failure path
+- [ ] Typed exceptions, not `HTTPException`, for domain errors
+- [ ] No f-string interpolation of user input into SurrealQL; user URLs go through `validate_url()`
+- [ ] No API key values in responses or logs
+- [ ] New UI strings in every locale; no raw palette classes
+- [ ] Migration registered in `AsyncMigrationManager`, with a down file
+- [ ] CHANGELOG entry under `[Unreleased]`; docs updated
diff --git a/docs/7-DEVELOPMENT/content-processing.md b/docs/7-DEVELOPMENT/content-processing.md
index cbc33031..7d9355e5 100644
--- a/docs/7-DEVELOPMENT/content-processing.md
+++ b/docs/7-DEVELOPMENT/content-processing.md
@@ -42,9 +42,9 @@ The single implementation behind both context consumers:
 - Every call re-fetches — there is no cache layer.
 - Token counting uses `o200k_base` via tiktoken and is an estimate (±5-10% vs. the actual model); `token_count()` falls back to a coarse estimate if tiktoken is unavailable.
 
-## Encryption (`utils/encryption.py`) {#encryption}
+## Encryption
 
-Field-level encryption for sensitive values (API keys) stored in the database, using Fernet (AES-128-CBC + HMAC-SHA256).
+`utils/encryption.py` provides field-level encryption for sensitive values (API keys) stored in the database, using Fernet (AES-128-CBC + HMAC-SHA256).
 
 - Key source: `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` (Docker secrets) → `OPEN_NOTEBOOK_ENCRYPTION_KEY`. **No default** — credential storage is unavailable until the key is set.
 - Any string works as key: it's derived to a Fernet key via PBKDF2-HMAC-SHA256 (600k iterations, fixed app salt), lazily on first use; the derived instance is cached per process.
diff --git a/docs/7-DEVELOPMENT/contributing.md b/docs/7-DEVELOPMENT/contributing.md
index 628b8ee2..922dd9de 100644
--- a/docs/7-DEVELOPMENT/contributing.md
+++ b/docs/7-DEVELOPMENT/contributing.md
@@ -111,70 +111,56 @@ A large share of contributions — including our own — are written with coding
 
 Disclosure of AI assistance is appreciated but optional — responsibility for the result is what matters, and it's yours either way.
 
-## Git Commit Messages
-
-- Use the present tense ("Add feature" not "Added feature")
-- Use the imperative mood ("Move cursor to..." not "Moves cursor to...")
-- Limit the first line to 72 characters or less
-- Reference issues and pull requests liberally after the first line
-
 ## Development Workflow
 
-### Branch Strategy
+Set up your environment with [development-setup.md](development-setup.md). Then:
 
-We use a **feature branch workflow**:
+1. **Branch from an up-to-date `main`**, named after the change type: `feat/...`, `fix/...`, `docs/...`, `refactor/...`.
+2. **Make the change** following [code-standards.md](code-standards.md) and, for common change types, the matching [playbook](change-playbooks.md).
+3. **Add tests** ([testing.md](testing.md)) and update the docs your change affects.
+4. **Add a CHANGELOG entry** (see below).
+5. **Run the CI checks locally** (see below), then push to your fork and open a PR against `main`.
 
-1. **Main Branch**: `main` - production-ready code
-2. **Feature Branches**: `feature/description` - new features
-3. **Bug Fixes**: `fix/description` - bug fixes
-4. **Documentation**: `docs/description` - documentation updates
+To update your branch: `git fetch upstream && git rebase upstream/main`.
 
-### Making Changes
+### Commit messages and PR titles
 
-1. **Create a feature branch**:
-```bash
-git checkout -b feature/amazing-new-feature
+We use [Conventional Commits](https://www.conventionalcommits.org/), with a scope when one fits:
+
+```text
+fix(podcasts): skip unconfigured speaker profiles (#1454)
+feat(providers): add SiliconFlow and Z.ai (#1443)
+docs: fix the encryption anchor in credentials.md
 ```
 
-2. **Make your changes** following our coding standards
+Common types: `feat`, `fix`, `docs`, `refactor`, `test`, `chore`, `build`, `ci`, `perf`. Keep the first line under about 72 characters and describe the user-visible effect. PRs are squash-merged, so the PR title becomes the commit on `main`: give it the same format.
+
+### CHANGELOG
+
+Every PR with a user-visible change adds an entry to `CHANGELOG.md` under `## [Unreleased]`. The file follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/):
+
+- Put the entry in the section for its type: `### Added`, `### Changed`, `### Deprecated`, `### Removed`, `### Fixed` or `### Security`. There is **one section per type** under Unreleased. If the section already exists, add to it; don't create a second `### Fixed`.
+- Write it for users and operators: what changed and what they need to do, not which functions moved. End with the issue or PR number, e.g. `(#1438)`.
+- Purely internal changes (refactors, tests, CI) usually need no entry.
+
+### Before you open a PR
+
+CI (`.github/workflows/test.yml`) runs these checks on every PR. Run them locally first:
 
-3. **Test your changes**:
 ```bash
-# Run tests
-uv run pytest
-
-# Run linting
+# Backend (repo root)
 uv run ruff check .
+uv run ruff format --check .     # CI fails on unformatted code; fix with: uv run ruff format .
+uv run python -m mypy .
+uv run pytest tests/
 
-# Run formatting
-uv run ruff format .
+# Frontend (inside frontend/), if you touched it
+npm run lint
+npm run test            # CI runs npm run test:coverage (same tests, plus a coverage report)
+npm run build
 ```
 
-4. **Commit your changes**:
-```bash
-git add .
-git commit -m "feat: add amazing new feature"
-```
-
-5. **Push and create PR**:
-```bash
-git push origin feature/amazing-new-feature
-# Then create a Pull Request on GitHub
-```
-
-### Keeping Your Fork Updated
-
-```bash
-# Fetch upstream changes
-git fetch upstream
-
-# Switch to main and merge
-git checkout main
-git merge upstream/main
-
-# Push to your fork
-git push origin main
-```
+`make ruff` runs `ruff check . --fix` (it does **not** format) and `make lint` runs mypy. A separate workflow checks that relative Markdown links resolve (`python3 scripts/check_md_links.py`); run it if you edited docs.
 
 ## Pull Request Process
 
@@ -193,15 +179,9 @@ When you create a pull request:
 - Address review comments with clarity and respect
 - Ask questions if feedback is unclear
 
-## Current Priority Areas
+## Where the Project Is Heading
 
-We're actively looking for contributions in these areas:
-
-1. **Frontend Enhancement** - Help improve the Next.js/React UI with real-time updates and better UX
-2. **Testing** - Expand test coverage across all components
-3. **Performance** - Async processing improvements and caching
-4. **Documentation** - API examples and user guides
-5. **Integrations** - New content sources and AI providers
+Current priorities and what is out of scope live in [VISION.md](../../VISION.md) (see "Current Posture"). Issues labeled `good first issue` or `help wanted` are ready to pick up.
 
 ## Getting Help
 
diff --git a/docs/7-DEVELOPMENT/credentials.md b/docs/7-DEVELOPMENT/credentials.md
index 077f3379..cc76e355 100644
--- a/docs/7-DEVELOPMENT/credentials.md
+++ b/docs/7-DEVELOPMENT/credentials.md
@@ -7,7 +7,7 @@ How Open Notebook stores, encrypts and provisions AI provider credentials — fr
 Users can configure provider credentials through the UI instead of environment variables. Keys are stored as individual `Credential` records in SurrealDB, encrypted with Fernet, and resolved at model-provisioning time with a database-first, environment-variable-fallback strategy.
 
 ```
-Settings UI ──► /credentials API ──► Credential record (encrypted, SurrealDB)
+Manage → Models ──► /api/credentials ──► Credential record (encrypted, SurrealDB)
                                           │
                 Model record ──credential─┘        (preferred: direct link)
                      │
@@ -36,7 +36,7 @@ Settings UI ──► /credentials API ──► Credential record (encrypted, S
 
 CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check), `/discover` (list available models), `/register-models` (create Model records from discovery), and three migration endpoints (`/migrate-from-env`, `/migrate-from-provider-config`, `/migrate-encryption`). Swagger at `/docs` documents the shapes.
 
-**Supported providers (24)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). Manual copies remain: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime; enforced by `tests/test_credential_provider_validation.py`), plus a simple provider's entry in `PROVIDER_CONFIG` (`open_notebook/ai/key_provider.py`) and in the `env_var_map` of `get_provider_availability()` (`api/routers/models.py`). Add all three when adding a provider:
+**Supported providers (24)** are defined once in the provider registry (`open_notebook/ai/provider_registry.py` `PROVIDERS`) — env vars, modalities, test models, discovery URLs and docs links all live there, and `connection_tester.TEST_MODELS`, `credentials_service.PROVIDER_ENV_CONFIG`/`PROVIDER_MODALITIES` and `model_discovery.OPENAI_COMPAT_PROVIDERS` are derived from it. `GET /api/providers` exposes the registry to clients — the frontend fetches it at runtime (`useProviders()` in `frontend/src/lib/hooks/use-providers.ts`) and renders providers in response order (the registry declaration order). Some copies are still hand-maintained (the `SupportedProvider` Literal in `api/models.py`, `PROVIDER_CONFIG` in `open_notebook/ai/key_provider.py`, the `env_var_map` in `api/routers/models.py`, and the discovery functions in `open_notebook/ai/model_discovery.py`). Tests catch a missing Literal entry or discovery entry; nothing catches a missing `PROVIDER_CONFIG` or `env_var_map` entry. The full list of edits is in the [Add an AI provider](change-playbooks.md#playbook-add-an-ai-provider) playbook. Providers by setup shape:
 
 - Simple API key: openai, anthropic, google, groq, mistral, deepseek, xai, openrouter, dashscope, minimax, novita, siliconflow, zai, ppq, cohere, voyage, elevenlabs, deepgram (siliconflow and zai also accept an optional `*_BASE_URL` endpoint override)
 - URL-based: ollama, omlx
@@ -59,7 +59,7 @@ CRUD plus lifecycle operations: `POST /credentials/{id}/test` (connection check)
 
 ## Migration paths
 
-Both migration endpoints are idempotent summaries (`migrated` / `skipped` / `errors`):
+The three migration endpoints are idempotent and return summaries (`migrated` / `skipped` / `errors`):
 
 - **From env vars**: creates Credential records for providers whose env vars are set.
 - **From legacy ProviderConfig**: converts old singleton records into individual Credentials.
diff --git a/docs/7-DEVELOPMENT/decisions/README.md b/docs/7-DEVELOPMENT/decisions/README.md
index 789c0084..417317d7 100644
--- a/docs/7-DEVELOPMENT/decisions/README.md
+++ b/docs/7-DEVELOPMENT/decisions/README.md
@@ -14,7 +14,7 @@ The **current rules** distilled from these records live in [VISION.md](../../../
 1. **Records are immutable.** Reversing a decision means writing a *new* record and marking the old one `Superseded by ADR-NNN` in its Status line — never editing history.
 2. **Write it in the same PR.** A design that resolves an open structural question ships with its record. Half a page, written while the context is loaded — not a documentation session later.
 3. **Keep it to half a page.** Four sections: Context, Decision, Alternatives considered, Consequences. If it needs more, link an issue or doc for the depth.
-4. **Number sequentially** within each prefix (ADR-005 comes after ADR-004, independent of PDRs).
+4. **Number sequentially** within each prefix (ADR-005 comes after ADR-004, independent of PDRs). The maintainer assigns the number at merge: in a PR, name the file `ADR-0XX-<slug>.md`, and the next free number and the index row below are added when it lands. This avoids several open PRs claiming the same number. ADR-010 is currently unassigned: it was once set aside for the unmerged PR #1332, so the index jumps from 009 to 011.
 
 ## Template
 
diff --git a/docs/7-DEVELOPMENT/development-setup.md b/docs/7-DEVELOPMENT/development-setup.md
index c609ca91..47ae2fc8 100644
--- a/docs/7-DEVELOPMENT/development-setup.md
+++ b/docs/7-DEVELOPMENT/development-setup.md
@@ -1,480 +1,130 @@
-# Local Development Setup
+# Development Setup
 
-This guide walks you through setting up Open Notebook for local development. Follow these steps to get the full stack running on your machine.
+This is the one page for running Open Notebook from a source checkout. Other pages (README.dev.md, the contributing guide, the quick start) link here instead of repeating it.
+
+The stack has four processes. Start them in this order, because each one depends on the one before it:
+
+| # | Process | Port | Command |
+|---|---|---|---|
+| 1 | SurrealDB | 8000 | `make database` |
+| 2 | API (FastAPI) | 5055 | `make api` |
+| 3 | Background worker | — | `make worker-start` |
+| 4 | Frontend (Next.js) | 3000 | `make frontend` |
+
+The worker is not optional. Source processing, embeddings and podcasts are background jobs; without a worker they stay queued forever and nothing reports an error.
 
 ## Prerequisites
 
-Before you start, ensure you have the following installed:
+- **Python 3.11 or 3.12** (`pyproject.toml` requires `>=3.11,<3.13`; `.python-version` pins 3.12, which uv picks up)
+- **[uv](https://docs.astral.sh/uv/)** for Python dependencies
+- **Node.js 20.9 or newer** (Next.js 16 requires it; CI and the Docker image use Node 22)
+- **Docker** with the Compose plugin, for SurrealDB
+- **ffmpeg** if you work on podcasts or audio/video sources (the Docker image installs it)
 
-- **Python 3.11+** - Check with: `python --version`
-- **uv** (recommended) or **pip** - Install from: https://github.com/astral-sh/uv
-- **SurrealDB** - Via Docker or binary (see below)
-- **Docker** (optional) - For containerized database
-- **Node.js 18+** (optional) - For frontend development
-- **Git** - For version control
-
-## Step 1: Clone and Initial Setup
+## 1. Clone and install
 
 ```bash
-# Clone the repository
-git clone https://github.com/lfnovo/open-notebook.git
+git clone https://github.com/<your-user>/open-notebook.git   # your fork
 cd open-notebook
-
-# Add upstream remote for keeping your fork updated
 git remote add upstream https://github.com/lfnovo/open-notebook.git
+
+uv sync                          # Python deps, including the dev group (pytest, ruff, mypy)
+cd frontend && npm install && cd ..
 ```
 
-## Step 2: Install Python Dependencies
+## 2. Create `.env`
 
 ```bash
-# Using uv (recommended)
-uv sync
-
-# Or using pip
-pip install -e .
-```
-
-## Step 3: Environment Variables
-
-Create a `.env` file in the project root with your configuration:
-
-```bash
-# Copy from example
 cp .env.example .env
 ```
 
-Edit `.env` with your settings:
+Then edit two values in `.env`:
 
 ```bash
-# Database
+# .env.example points at the Docker Compose hostname "surrealdb", which does not
+# resolve from your host. The API and worker run on the host, so use localhost:
 SURREAL_URL=ws://localhost:8000/rpc
-SURREAL_USER=root
-SURREAL_PASSWORD=password
-SURREAL_NAMESPACE=open_notebook
-SURREAL_DATABASE=development
 
-# Credential encryption (required for storing API keys)
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-dev-secret-key
-
-# Application
-OPEN_NOTEBOOK_PASSWORD=  # Optional password protection
-DEBUG=true
-LOG_LEVEL=DEBUG
+# Required to store provider credentials. Any string works; there is no default.
+OPEN_NOTEBOOK_ENCRYPTION_KEY=some-local-dev-secret
 ```
 
-### AI Provider Configuration
+Leave `SURREAL_USER` / `SURREAL_PASSWORD` as they are (`root` / `root`). `make database` starts SurrealDB through `docker-compose.yml`, which reads the same `.env`, so the database and the API always use the same credentials.
 
-After starting the API and frontend, configure your AI provider via the Settings UI:
+`OPEN_NOTEBOOK_PASSWORD` is unset by default, which disables the API password. Set it if you want to test the login flow.
 
-1. Open **http://localhost:3000** → **Manage** → **Models**
-2. Click **Add Credential** → Select your provider
-3. Enter your API key (get from provider dashboard)
-4. Click **Save**, then **Test Connection**
-5. Click **Discover Models** → **Register Models**
+The API loads `.env` itself (`load_dotenv()` in `api/main.py`); `make api` and `make worker-start` also pass `--env-file .env`.
 
-Popular providers:
-- **OpenAI** - https://platform.openai.com/api-keys
-- **Anthropic (Claude)** - https://console.anthropic.com/
-- **Google** - https://ai.google.dev/
-- **Groq** - https://console.groq.com/
+## 3. Start the stack
 
-For local development, you can also use:
-- **Ollama** - Run locally without API keys (see "Local Ollama" below)
-
-> **Note:** API key environment variables (e.g., `OPENAI_API_KEY`) are deprecated. Use the Settings UI to manage credentials instead.
-
-## Step 4: Start SurrealDB
-
-### Option A: Using Docker (Recommended)
+All at once, in one terminal:
 
 ```bash
-# Start SurrealDB in memory (publish the port on localhost only — the
-# database uses default credentials, so never publish it on 0.0.0.0)
-docker run -d --name surrealdb -p 127.0.0.1:8000:8000 \
-  surrealdb/surrealdb:v2 start \
-  --user root --pass password \
-  memory
-
-# Or with persistent storage
-docker run -d --name surrealdb -p 127.0.0.1:8000:8000 \
-  -v surrealdb_data:/data \
-  surrealdb/surrealdb:v2 start \
-  --user root --pass password \
-  file:/data/surreal.db
+make start-all    # SurrealDB, API, worker, then the frontend in the foreground
+make status       # which of the four are running
+make stop-all     # stops all four (also runs `docker compose down`)
 ```
 
-### Option B: Using Make
+Or one terminal per process, which makes logs easier to read:
 
 ```bash
-make database
+make database       # terminal 1: SurrealDB in Docker (data in ./surreal_data)
+make api            # terminal 2: API on 127.0.0.1:5055, auto-reload on
+make worker-start   # terminal 3: surreal-commands worker
+make frontend       # terminal 4: Next.js dev server on :3000
 ```
 
-### Option C: Using Docker Compose
+`make api` runs `run_api.py`, which reads `API_HOST` (default `127.0.0.1`), `API_PORT` (default `5055`) and `API_RELOAD` (default `true`). There is no `python -m api.main` entry point.
+
+The frontend proxies `/api/*` to `INTERNAL_API_URL` (default `http://localhost:5055`, see `frontend/next.config.ts`), so it needs no `.env` of its own.
+
+## 4. Check that it works
 
 ```bash
-docker compose up -d surrealdb
+curl http://localhost:5055/health        # {"status":"healthy"}
+open http://localhost:5055/docs          # Swagger UI for every endpoint
+open http://localhost:3000               # the app
 ```
 
-### Verify SurrealDB is Running
+Database migrations run automatically when the API starts. The API log shows one of:
 
-```bash
-# Should show server information
-curl http://localhost:8000/
+```
+Current database version: N
+Database is already at the latest version. No migrations needed.
 ```
 
-## Step 5: Run Database Migrations
+or, on a fresh or outdated database:
 
-Database migrations run automatically when you start the API. The first startup will apply any pending migrations.
-
-To verify migrations manually:
-
-```bash
-# API will run migrations on startup
-uv run python -m api.main
+```
+Database migrations are pending. Running migrations...
+Running migration N
+Migrations completed successfully. Database is now at version N
 ```
 
-Check the logs - you should see messages like:
-```
-Running migration 001_initial_schema
-Running migration 002_add_vectors
-...
-Migrations completed successfully
-```
+To use AI features, add a provider credential and models in the app under **Manage → Models**. See [AI Providers](../4-AI-PROVIDERS/index.md) for per-provider instructions.
 
-## Step 6: Start the API Server
+## Before you open a PR
 
-In a new terminal window:
+Run what CI runs. The list lives in [contributing.md](contributing.md#before-you-open-a-pr) so it is maintained in one place.
 
-```bash
-# Terminal 2: Start API (port 5055)
-uv run --env-file .env uvicorn api.main:app --host 0.0.0.0 --port 5055
+Optional: `uv run pre-commit install` installs git hooks (`.pre-commit-config.yaml`) that run ruff, ruff format and mypy on each commit.
 
-# Or using the shortcut
-make api
-```
+## Docker-based workflows
 
-You should see:
-```
-INFO:     Application startup complete
-INFO:     Uvicorn running on http://0.0.0.0:5055
-```
+| Command | What it does | Use it for |
+|---|---|---|
+| `make dev` | Builds the image from your checkout with `examples/docker-compose-dev.yml` (reads `docker.env`) | Checking that a change works in the container |
+| `make full` | Same, with `examples/docker-compose-full-local.yml` | Fully local stack in Docker |
+| `make docker-build-local` | Builds the production image for your platform, no push | PRs that touch the `Dockerfile` |
 
-### Verify API is Running
-
-```bash
-# Check health endpoint
-curl http://localhost:5055/health
-
-# View API documentation
-open http://localhost:5055/docs
-```
-
-## Step 7: Start the Frontend (Optional)
-
-If you want to work on the frontend, start Next.js in another terminal:
-
-```bash
-# Terminal 3: Start Next.js frontend (port 3000)
-cd frontend
-npm install  # First time only
-npm run dev
-```
-
-You should see:
-```
-> next dev
-  ▲ Next.js 16.x
-  - Local:        http://localhost:3000
-```
-
-### Access the Frontend
-
-Open your browser to: http://localhost:3000
-
-## Verification Checklist
-
-After setup, verify everything is working:
-
-- [ ] **SurrealDB**: `curl http://localhost:8000/` returns content
-- [ ] **API**: `curl http://localhost:5055/health` returns `{"status": "ok"}`
-- [ ] **API Docs**: `open http://localhost:5055/docs` works
-- [ ] **Database**: API logs show migrations completing
-- [ ] **Frontend** (optional): `http://localhost:3000` loads
-
-## Development Workflows: When to Use What?
-
-| Workflow | Use Case | Speed | Production Parity |
-|----------|----------|-------|-------------------|
-| **Local Services** (`make start-all`) | Day-to-day development, fastest iteration | ⚡⚡⚡ Fast | Medium |
-| **Docker Compose** (`make dev`) | Testing containerized setup | ⚡⚡ Medium | High |
-| **Local Docker Build** (`make docker-build-local`) | Testing Dockerfile changes | ⚡ Slow | Very High |
-| **Multi-platform Build** (`make docker-push`) | Publishing releases (see [Release Process](../../.github/RELEASE_PROCESS.md)) | 🐌 Very Slow | Exact |
-
-Local services give hot reload, direct log access and easy debugging; Docker Compose (`examples/docker-compose-dev.yml` via `make dev`, `examples/docker-compose-full-local.yml` via `make full`) is closer to production. Use `make docker-build-local` before touching anything Docker-related in a PR.
-
-## Starting Services Together
-
-### Quick Start All Services
-
-```bash
-make start-all    # SurrealDB + API + worker + frontend
-make status       # see what's running
-make stop-all     # stop everything
-```
-
-### Individual Terminals (Recommended for Development)
-
-**Terminal 1 - Database:**
-```bash
-make database
-```
-
-**Terminal 2 - API:**
-```bash
-make api
-```
-
-**Terminal 3 - Background worker** (required for podcasts, embeddings, source processing):
-```bash
-make worker-start
-```
-
-**Terminal 4 - Frontend:**
-```bash
-cd frontend && npm run dev
-```
-
-### Performance Tips
-
-1. Use `make start-all` instead of Docker for daily work
-2. Keep SurrealDB running between sessions (`make database`)
-3. Use `make docker-build-local` only when testing Dockerfile changes
-4. Skip multi-platform builds until ready to publish
-5. Clean caches when things get weird: `make clean-cache`, `docker system prune -a`
-
-## Development Tools Setup
-
-### Pre-commit Hooks (Optional but Recommended)
-
-Pre-commit hooks run configured checks automatically before each commit,
-mirroring the CI gates so local commits fail for the same reasons PRs
-would. The config at `.pre-commit-config.yaml` wires up:
-
-| Tool | What it checks | CI equivalent |
-|------|----------------|---------------|
-| **ruff** (lint) | Python lint rules (`E`, `F`, `I`) | `ruff check .` |
-| **ruff** (format) | Python formatting (line-length 88) | `ruff format --check .` |
-| **mypy** | Python type correctness | `python -m mypy .` |
-| **pre-commit-hooks** | Large files, merge conflicts, YAML/TOML syntax, trailing whitespace, EOF newlines | — |
-
-Pre-commit is already included in the project's dev dependencies. Install
-the hooks and they'll run on every `git commit`:
-
-```bash
-uv run pre-commit install
-```
-
-**Running manually:**
-
-```bash
-# Check all files (useful after changing hook config)
-uv run pre-commit run --all-files
-
-# Run a specific hook only
-uv run pre-commit run ruff --all-files
-```
-
-**Skipping hooks temporarily:**
-
-```bash
-# Skip all hooks for a single commit
-git commit --no-verify
-
-# Skip a specific hook (e.g. slow mypy run)
-SKIP=mypy git commit
-```
-
-**Updating hook versions:**
-
-```bash
-uv run pre-commit autoupdate
-```
-
-Keep the `rev:` pins in `.pre-commit-config.yaml` in sync with the
-versions listed in `pyproject.toml` under `[dependency-groups] dev`.
-
-### Code Quality Commands
-
-```bash
-# Lint Python code (auto-fix)
-make ruff
-# or: ruff check . --fix
-
-# Type check Python code
-make lint
-# or: uv run python -m mypy .
-
-# Run tests
-uv run pytest
-
-# Run tests with coverage
-uv run pytest --cov=open_notebook
-```
-
-## Common Development Tasks
-
-### Running Tests
-
-```bash
-# Run all tests
-uv run pytest
-
-# Run specific test file
-uv run pytest tests/test_notebooks.py
-
-# Run with coverage report
-uv run pytest --cov=open_notebook --cov-report=html
-```
-
-### Creating a Feature Branch
-
-```bash
-# Create and switch to new branch
-git checkout -b feature/my-feature
-
-# Make changes, then commit
-git add .
-git commit -m "feat: add my feature"
-
-# Push to your fork
-git push origin feature/my-feature
-```
-
-### Updating from Upstream
-
-```bash
-# Fetch latest changes
-git fetch upstream
-
-# Rebase your branch
-git rebase upstream/main
-
-# Push updated branch
-git push origin feature/my-feature -f
-```
+Publishing images is a maintainer task: see [.github/RELEASE_PROCESS.md](../../.github/RELEASE_PROCESS.md).
 
 ## Troubleshooting
 
-### "Connection refused" on SurrealDB
+**Sources stay "Queued", embeddings or podcasts never finish.** The worker isn't running. Start it with `make worker-start` and check its log.
 
-**Problem**: API can't connect to SurrealDB
+**The API can't connect to SurrealDB.** Check that `SURREAL_URL` in `.env` uses `localhost`, not `surrealdb`, and that the container is up (`docker compose ps surrealdb`). The API retries the connection on startup, so it may log a few failures while SurrealDB starts.
 
-**Solutions**:
-1. Check if SurrealDB is running: `docker ps | grep surrealdb`
-2. Verify URL in `.env`: Should be `ws://localhost:8000/rpc`
-3. Restart SurrealDB: `docker stop surrealdb && docker rm surrealdb`
-4. Then restart with: `docker run -d --name surrealdb -p 127.0.0.1:8000:8000 surrealdb/surrealdb:v2 start --user root --pass password memory`
+**A port is already in use.** Another project may own 3000, 5055 or 8000. Run the frontend on another port with `PORT=3001 npm run dev` (inside `frontend/`), or the API with `API_PORT=5056 make api` (then set `INTERNAL_API_URL=http://localhost:5056` for the frontend).
 
-### "Address already in use"
-
-**Problem**: Port 5055 or 3000 is already in use
-
-**Solutions**:
-```bash
-# Find process using port
-lsof -i :5055  # Check port 5055
-
-# Kill process (macOS/Linux)
-kill -9 <PID>
-
-# Or use different port
-uvicorn api.main:app --port 5056
-```
-
-### Module not found errors
-
-**Problem**: Import errors when running API
-
-**Solutions**:
-```bash
-# Reinstall dependencies
-uv sync
-
-# Or with pip
-pip install -e .
-```
-
-### Database migration failures
-
-**Problem**: API fails to start with migration errors
-
-**Solutions**:
-1. Check SurrealDB is running: `curl http://localhost:8000/`
-2. Check credentials in `.env` match your SurrealDB setup
-3. Check logs for specific migration error: `make api 2>&1 | grep -i migration`
-4. Verify database exists: Check SurrealDB console at http://localhost:8000/
-
-### Migrations not applying
-
-**Problem**: Database schema seems outdated
-
-**Solutions**:
-1. Restart API - migrations run on startup: `make api`
-2. Check logs show "Migrations completed successfully"
-3. Verify `/migrations/` folder exists and has files
-4. Check SurrealDB is writable and not in read-only mode
-
-## Optional: Local Ollama Setup
-
-For testing with local AI models:
-
-```bash
-# Install Ollama from https://ollama.ai
-
-# Pull a model (e.g., Mistral 7B)
-ollama pull mistral
-```
-
-Then configure via the Settings UI:
-1. Go to **Manage** → **Models** → **Add Credential** → **Ollama**
-2. Enter base URL: `http://localhost:11434`
-3. Click **Save**, then **Test Connection**
-4. Click **Discover Models** → **Register Models**
-
-## Optional: Docker Development Environment
-
-Run entire stack in Docker:
-
-```bash
-# Start all services
-docker compose --profile multi up
-
-# Logs
-docker compose logs -f
-
-# Stop services
-docker compose down
-```
-
-## Next Steps
-
-After setup is complete:
-
-1. **Read the Contributing Guide** - [contributing.md](contributing.md)
-2. **Explore the Architecture** - Check the documentation
-3. **Find an Issue** - Look for "good first issue" on GitHub
-4. **Set Up Pre-commit** - Install git hooks for code quality
-5. **Join Discord** - https://discord.gg/37XJPXfz2w
-
-## Getting Help
-
-If you get stuck:
-
-- **Discord**: [Join our server](https://discord.gg/37XJPXfz2w) for real-time help
-- **GitHub Issues**: Check existing issues for similar problems
-- **GitHub Discussions**: Ask questions in discussions
-- **Documentation**: See [code-standards.md](code-standards.md) and [testing.md](testing.md)
-
----
-
-**Ready to contribute?** Go to [contributing.md](contributing.md) for the contribution workflow.
+**Import errors after pulling.** Run `uv sync` and `npm install` again; dependencies change often.
diff --git a/docs/7-DEVELOPMENT/frontend.md b/docs/7-DEVELOPMENT/frontend.md
index b05aa799..117182f1 100644
--- a/docs/7-DEVELOPMENT/frontend.md
+++ b/docs/7-DEVELOPMENT/frontend.md
@@ -42,4 +42,4 @@ The token is validated by an actual API call (`/notebooks`), not JWT decoding, w
 
 ## Error handling
 
-`getApiErrorMessage()` (`lib/utils/error-handler.ts`) tries an i18n mapping first, then falls back to the backend's descriptive message — which the backend error-classification system already makes user-friendly (see [architecture.md](architecture.md)). Mutations surface errors as toasts; an app-level ErrorBoundary catches render errors.
+`getApiErrorMessage()` (`lib/utils/error-handler.ts`) tries an i18n mapping first, then falls back to the backend's descriptive message — which the backend error-classification system already makes user-friendly (see [architecture.md](architecture.md#how-a-model-call-happens)). Mutations surface errors as toasts; an app-level ErrorBoundary catches render errors.
diff --git a/docs/7-DEVELOPMENT/index.md b/docs/7-DEVELOPMENT/index.md
index 45759f18..c5a517ee 100644
--- a/docs/7-DEVELOPMENT/index.md
+++ b/docs/7-DEVELOPMENT/index.md
@@ -1,127 +1,43 @@
 # Development
 
-Welcome to the Open Notebook development documentation! Whether you're contributing code, understanding our architecture, or maintaining the project, you'll find guidance here.
+Documentation for people (and coding agents) working on the Open Notebook codebase.
 
-## 🎯 Pick Your Path
+## Start here
 
-### 👨‍💻 I Want to Contribute Code
+1. **[Development Setup](development-setup.md)**: install, configure and run the stack from source.
+2. **[Contributing](contributing.md)**: the Discussions → Issues → PRs workflow, commit and CHANGELOG conventions, and the checks CI runs.
+3. **[Change Playbooks](change-playbooks.md)**: step-by-step recipes for common changes (new field, endpoint, provider, migration, command, language).
 
-Start with **[Contributing Guide](contributing.md)** for the workflow, then check:
-- **[Quick Start](quick-start.md)** - Clone, install, verify in 5 minutes
-- **[Development Setup](development-setup.md)** - Complete local environment guide
-- **[Code Standards](code-standards.md)** - How to write code that fits our style
-- **[Testing](testing.md)** - How to write and run tests
+The normative rules for coding agents (and humans in a hurry) are in the `AGENTS.md` files: [root](../../AGENTS.md), [backend](../../open_notebook/AGENTS.md) (also covers `api/`, `commands/`, `prompts/`) and [frontend](../../frontend/AGENTS.md).
 
-**First time?** Check out our [Contributing Guide](contributing.md) for the Discussions → Issues → PRs workflow.
+## Reference
 
-### 🔒 I Want to Understand Security Practices
+| Page | What it covers |
+|---|---|
+| [Architecture](architecture.md) | Processes, code layout, data model, workflows, model calls, background jobs |
+| [Credentials](credentials.md) | Provider credentials, encryption, provider registry, provisioning |
+| [Content Processing](content-processing.md) | Chunking, embedding, context building, encryption utility |
+| [Podcasts](podcasts.md) | Episode and speaker profiles, model resolution, job lifecycle |
+| [Prompts](prompts.md) | Prompt templates and `Prompter` |
+| [Frontend](frontend.md) | Next.js layers and data flows |
+| [API Reference](api-reference.md) | `/api` prefix, auth, async jobs, streaming, errors; the live schema is at `/docs` |
+| [Code Standards](code-standards.md) | Tooling, async, database access, error handling |
+| [Testing](testing.md) | Test layout, commands and patterns |
+| [Security](security.md) | Query, template and file-handling safety; secrets; review checklist |
+| [Design Principles](design-principles.md) | Engineering practices and anti-patterns |
+| [Decision Records](decisions/README.md) | ADRs and PDRs: why things are the way they are |
+| [VISION.md](../../VISION.md) | Product identity, current posture and priorities |
+| [Maintainer Guide](maintainer-guide.md) | Triage, reviews, labels |
 
-**[Security Guidelines](security.md)** covers:
-- Database query safety (preventing SurrealQL injection)
-- Template rendering safety (preventing SSTI)
-- File handling safety (preventing path traversal and LFI)
-- Secrets management and CORS configuration
-- Code review security checklist
+## Getting help
 
----
+- **GitHub Discussions**: questions, ideas, product direction, design and architecture
+- **GitHub Issues**: reproducible bugs and approved work items
+- **Discord**: [join the server](https://discord.gg/37XJPXfz2w) for real-time help
 
-### 🏗️ I Want to Understand the Architecture
+## Libraries we maintain
 
-**[Architecture Overview](architecture.md)** covers:
-- 3-tier system design
-- Tech stack and rationale
-- Key components and workflows
-- Design patterns we use
-
-For deeper dives into specific subsystems:
-- **[Credentials](credentials.md)** - Provider credential storage, encryption, provisioning
-- **[Content Processing](content-processing.md)** - Chunking, embedding, context building, encryption
-- **[Podcasts](podcasts.md)** - Profile system, model registry, job lifecycle
-- **[Prompts](prompts.md)** - Prompt engineering patterns
-- **[Frontend](frontend.md)** - Next.js layers and data flows
-
-Normative rules for coding agents (and humans in a hurry) live in the `AGENTS.md` files at the
-repo root, `open_notebook/`, and `frontend/`.
-
-### 🧭 Why Is It Like This?
-
-- **[VISION.md](../../VISION.md)** - Product identity and current posture
-- **[Decision Records](decisions/README.md)** - ADRs and PDRs: the durable "why" behind structural choices
-
----
-
-### 👨‍🔧 I'm a Maintainer
-
-**[Maintainer Guide](maintainer-guide.md)** covers:
-- Issue triage and management
-- Pull request review process
-- Communication templates
-- Best practices
-
----
-
-## 📚 Quick Links
-
-| Document | For | Purpose |
-|---|---|---|
-| [Quick Start](quick-start.md) | New developers | Clone, install, and verify setup (5 min) |
-| [Development Setup](development-setup.md) | Local development | Complete environment setup guide |
-| [Contributing](contributing.md) | Community & code contributors | Workflow: Discussion → Issue → PR |
-| [Code Standards](code-standards.md) | Writing code | Style guides for Python, FastAPI, DB |
-| [Testing](testing.md) | Testing code | How to write and run tests |
-| [Architecture](architecture.md) | Understanding system | System design, tech stack, workflows |
-| [Credentials](credentials.md) | Understanding system | Provider credential subsystem |
-| [Content Processing](content-processing.md) | Understanding system | Chunking, embedding, context building |
-| [Podcasts](podcasts.md) | Understanding system | Podcast profiles and job lifecycle |
-| [Prompts](prompts.md) | Understanding system | Prompt engineering patterns |
-| [Frontend](frontend.md) | Understanding system | Next.js architecture and data flows |
-| [Design Principles](design-principles.md) | All developers | Engineering practices and anti-patterns |
-| [VISION.md](../../VISION.md) | All developers | Product identity and current posture |
-| [Decision Records](decisions/README.md) | All developers | ADRs/PDRs — why things are the way they are |
-| [Change Playbooks](change-playbooks.md) | Contributors & agents | Step-by-step recipes for common changes |
-| [API Reference](api-reference.md) | Building integrations | Complete REST API documentation |
-| [Security](security.md) | All developers | Security practices and vulnerability prevention |
-| [Maintainer Guide](maintainer-guide.md) | Maintainers | Managing issues, PRs, labels |
-
----
-
-## 🚀 Current Development Priorities
-
-We're actively looking for help with:
-
-1. **Frontend Enhancement** - Improve Next.js/React UI with real-time updates
-2. **Performance** - Async processing and caching optimizations
-3. **Testing** - Expand test coverage across components
-4. **Documentation** - API examples and developer guides
-5. **Integrations** - New content sources and AI providers
-
-See GitHub Issues labeled `good first issue` or `help wanted`.
-
----
-
-## 💬 Getting Help
-
-- **Discord**: [Join our server](https://discord.gg/37XJPXfz2w) for real-time discussions
-- **GitHub Discussions**: For questions, ideas, features, product direction, design, and architecture
-- **GitHub Issues**: For reproducible bugs and approved work items
-
-Don't be shy! We're here to help new contributors succeed.
-
----
-
-## 📖 Additional Resources
-
-### External Documentation
-- [FastAPI Docs](https://fastapi.tiangolo.com/)
-- [SurrealDB Docs](https://surrealdb.com/docs)
-- [LangChain Docs](https://python.langchain.com/)
-- [Next.js Docs](https://nextjs.org/docs)
-
-### Our Libraries
-- [Esperanto](https://github.com/lfnovo/esperanto) - Multi-provider AI abstraction
-- [Content Core](https://github.com/lfnovo/content-core) - Content processing
-- [Podcast Creator](https://github.com/lfnovo/podcast-creator) - Podcast generation
-
----
-
-Ready to get started? Head over to **[Quick Start](quick-start.md)**! 🎉
+- [Esperanto](https://github.com/lfnovo/esperanto): one interface over the AI providers
+- [Content Core](https://github.com/lfnovo/content-core): content extraction
+- [Podcast Creator](https://github.com/lfnovo/podcast-creator): podcast generation
+- [surreal-commands](https://github.com/lfnovo/surreal-commands): the background job queue
diff --git a/docs/7-DEVELOPMENT/quick-start.md b/docs/7-DEVELOPMENT/quick-start.md
index 5bc14093..027f4b3b 100644
--- a/docs/7-DEVELOPMENT/quick-start.md
+++ b/docs/7-DEVELOPMENT/quick-start.md
@@ -1,128 +1,13 @@
-# Quick Start - Development
+# Quick Start (Development)
 
-Get Open Notebook running locally in 5 minutes.
+This page has been merged into **[Development Setup](development-setup.md)**, which is the single, maintained guide for running Open Notebook from source.
 
-## Prerequisites
-
-- **Python 3.11+**
-- **Git**
-- **uv** (package manager) - install with `curl -LsSf https://astral.sh/uv/install.sh | sh`
-- **Docker** (optional, for SurrealDB)
-
-## 1. Clone the Repository (2 min)
+The short version:
 
 ```bash
-# Fork the repository on GitHub first, then clone your fork
-git clone https://github.com/YOUR_USERNAME/open-notebook.git
-cd open-notebook
-
-# Add upstream remote for updates
-git remote add upstream https://github.com/lfnovo/open-notebook.git
+uv sync && (cd frontend && npm install)
+cp .env.example .env   # then set SURREAL_URL=ws://localhost:8000/rpc and OPEN_NOTEBOOK_ENCRYPTION_KEY
+make start-all         # SurrealDB, API, worker, frontend
 ```
 
-## 2. Install Dependencies (2 min)
-
-```bash
-# Install Python dependencies
-uv sync
-
-# Verify uv is working
-uv --version
-```
-
-## 3. Start Services (1 min)
-
-In separate terminal windows:
-
-```bash
-# Terminal 1: Start SurrealDB (database)
-make database
-# or: docker run -d --name surrealdb -p 127.0.0.1:8000:8000 surrealdb/surrealdb:v2 start --user root --pass password memory
-
-# Terminal 2: Start API (backend on port 5055)
-make api
-# or: uv run --env-file .env uvicorn api.main:app --host 0.0.0.0 --port 5055
-
-# Terminal 3: Start Frontend (UI on port 3000)
-cd frontend && npm run dev
-```
-
-## 4. Verify Everything Works (instant)
-
-- **API Health**: http://localhost:5055/health → should return `{"status": "ok"}`
-- **API Docs**: http://localhost:5055/docs → interactive API documentation
-- **Frontend**: http://localhost:3000 → Open Notebook UI
-
-**All three show up?** ✅ You're ready to develop!
-
----
-
-## Next Steps
-
-- **First Issue?** Pick a [good first issue](https://github.com/lfnovo/open-notebook/issues?q=label%3A%22good+first+issue%22)
-- **Understand the code?** Read [Architecture Overview](architecture.md)
-- **Make changes?** Follow [Contributing Guide](contributing.md)
-- **Setup details?** See [Development Setup](development-setup.md)
-
----
-
-## Troubleshooting
-
-### "Port 5055 already in use"
-```bash
-# Find what's using the port
-lsof -i :5055
-
-# Use a different port
-uv run uvicorn api.main:app --port 5056
-```
-
-### "Can't connect to SurrealDB"
-```bash
-# Check if SurrealDB is running
-docker ps | grep surrealdb
-
-# Restart it
-make database
-```
-
-### "Python version is too old"
-```bash
-# Check your Python version
-python --version  # Should be 3.11+
-
-# Use Python 3.11 specifically
-uv sync --python 3.11
-```
-
-### "npm: command not found"
-```bash
-# Install Node.js from https://nodejs.org/
-# Then install frontend dependencies
-cd frontend && npm install
-```
-
----
-
-## Common Development Commands
-
-```bash
-# Run tests
-uv run pytest
-
-# Format code
-make ruff
-
-# Type checking
-make lint
-
-# Run the full stack
-make start-all
-
-# View API documentation
-open http://localhost:5055/docs
-```
-
----
-
-Need more help? See [Development Setup](development-setup.md) for details or join our [Discord](https://discord.gg/37XJPXfz2w).
+See [Development Setup](development-setup.md) for what each step does and how to troubleshoot it.
diff --git a/docs/7-DEVELOPMENT/security.md b/docs/7-DEVELOPMENT/security.md
index 151c0ef1..c39228a6 100644
--- a/docs/7-DEVELOPMENT/security.md
+++ b/docs/7-DEVELOPMENT/security.md
@@ -145,7 +145,7 @@ Never pass user-provided file paths directly to file reading or content extracti
 Open Notebook currently uses simple password-based middleware (`PasswordAuthMiddleware`). This is suitable for single-user self-hosted deployments but should be hardened for production:
 
 - Set `OPEN_NOTEBOOK_PASSWORD` explicitly - there is no hardcoded default password; if it's unset, auth is fully disabled (all requests pass through unchecked)
-- Change the default encryption key (`OPEN_NOTEBOOK_ENCRYPTION_KEY`)
+- Set a strong encryption key (`OPEN_NOTEBOOK_ENCRYPTION_KEY`). There is no default: credential storage is unavailable until it is set
 - Consider deploying behind a reverse proxy with proper authentication (OAuth, OIDC)
 
 ### CORS
@@ -160,7 +160,7 @@ The default CORS configuration allows all origins (`allow_origins=["*"]`). `allo
 
 `OPEN_NOTEBOOK_ENCRYPTION_KEY` is used to encrypt API keys stored in SurrealDB. In production:
 
-- Set a strong, unique, high-entropy key (do not use the default, a short word, or a reused password). The key is stretched with PBKDF2-HMAC-SHA256 (600k iterations), which slows brute force but cannot save a guessable passphrase — entropy is the actual security.
+- Set a strong, unique, high-entropy key (not a short word, a reused password, or the `change-me-to-a-secret-string` placeholder from the example compose file). The key is stretched with PBKDF2-HMAC-SHA256 (600k iterations), which slows brute force but cannot save a guessable passphrase — entropy is the actual security.
 - Use Docker secrets via `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` when possible
 - Never log or expose this value
 - After upgrading, run the one-shot `POST /api/credentials/migrate-encryption` pass to rewrite pre-existing keys into the versioned format. Back up the database first: the new format is forward-breaking — versions predating the migration cannot read it (see CHANGELOG).
diff --git a/docs/7-DEVELOPMENT/testing.md b/docs/7-DEVELOPMENT/testing.md
index ce12fa1c..ce0f5a4a 100644
--- a/docs/7-DEVELOPMENT/testing.md
+++ b/docs/7-DEVELOPMENT/testing.md
@@ -1,423 +1,85 @@
-# Testing Guide
+# Testing
 
-This document provides guidelines for writing tests in Open Notebook. Testing is critical to maintaining code quality and preventing regressions.
+How the test suites are laid out, how to run them, and the patterns to copy when you add a test.
 
-## Testing Philosophy
+## Running the tests
 
-### What to Test
+```bash
+# Backend (repo root)
+uv run pytest tests/                                   # what CI runs (plus coverage flags)
+uv run pytest tests/test_sources_api.py                # one file
+uv run pytest tests/test_sources_api.py -k retry       # tests matching a name
+uv run pytest tests/ --cov=open_notebook --cov=api     # with coverage
 
-Focus on testing the things that matter most:
+# Frontend (inside frontend/)
+npm run test              # vitest run, once
+npm run test:watch        # watch mode
+npm run test:coverage     # what CI runs
+```
 
-- **Business Logic** - Core domain models and their operations
-- **API Contracts** - HTTP endpoint behavior and error handling
-- **Critical Workflows** - End-to-end flows that users depend on
-- **Data Persistence** - Database operations and data integrity
-- **Error Conditions** - How the system handles failures gracefully
+The backend suite needs **no running SurrealDB, worker or AI provider**. CI runs it with nothing but `uv sync`. SurrealDB access, models and HTTP requests are mocked; a few tests use in-memory substitutes instead (for example an in-memory `SqliteSaver` in `tests/test_empty_model_reply.py`).
 
-### What NOT to Test
+## Backend layout (`tests/`)
 
-Don't waste time testing framework code:
+`tests/` is flat: one `test_<topic>.py` per feature or regression (about 70 files), for example `test_sources_api.py`, `test_credentials_api.py`, `test_ask_graph.py`, `test_crud_404.py`. There are no `unit/` or `integration/` subfolders. Name a new file after what it covers, or add to the existing file for that area.
 
-- Framework functionality (FastAPI, React, etc.)
-- Third-party library implementation
-- Simple getters/setters without logic
-- View/presentation layer rendering (unless it contains logic)
+`tests/conftest.py` has no shared fixtures. It only:
 
-## Test Structure
+- sets `OPEN_NOTEBOOK_PASSWORD=""` before anything is imported, so the auth middleware is disabled in tests;
+- loads the repo's `.env` if it exists;
+- puts the repo root on `sys.path`.
 
-We use **pytest** with async support for all Python tests:
+pytest-asyncio runs in its default (strict) mode, so async tests need `@pytest.mark.asyncio`.
+
+## Backend patterns
+
+**API tests** use FastAPI's `TestClient` with a per-file fixture, and patch the domain call the router makes:
 
 ```python
+from unittest.mock import AsyncMock, patch
+
 import pytest
-from httpx import AsyncClient
-from open_notebook.domain.notebook import Notebook
+from fastapi.testclient import TestClient
 
-@pytest.mark.asyncio
-async def test_create_notebook():
-    """Test notebook creation."""
-    notebook = Notebook(name="Test Notebook", description="Test description")
-    await notebook.save()
+from open_notebook.exceptions import NotFoundError
 
-    assert notebook.id is not None
-    assert notebook.name == "Test Notebook"
-    assert notebook.created is not None
-
-@pytest.mark.asyncio
-async def test_api_create_notebook():
-    """Test notebook creation via API."""
-    async with AsyncClient(app=app, base_url="http://test") as client:
-        response = await client.post(
-            "/api/notebooks",
-            json={"name": "Test Notebook", "description": "Test description"}
-        )
-        assert response.status_code == 200
-        data = response.json()
-        assert data["name"] == "Test Notebook"
-```
-
-## Test Categories
-
-### 1. Unit Tests
-
-Test individual functions and methods in isolation:
-
-```python
-@pytest.mark.asyncio
-async def test_notebook_validation():
-    """Test that notebook name validation works."""
-    with pytest.raises(InvalidInputError):
-        Notebook(name="", description="test")
-
-@pytest.mark.asyncio
-async def test_notebook_archive():
-    """Test notebook archiving."""
-    notebook = Notebook(name="Test", description="")
-    notebook.archive()
-    assert notebook.archived is True
-```
-
-**Location**: `tests/unit/`
-
-### 2. Integration Tests
-
-Test component interactions and database operations:
-
-```python
-@pytest.mark.asyncio
-async def test_create_notebook_with_sources():
-    """Test creating a notebook and adding sources."""
-    notebook = await create_notebook(name="Research", description="")
-    source = await add_source(notebook_id=notebook.id, url="https://example.com")
-
-    retrieved = await get_notebook_with_sources(notebook.id)
-    assert len(retrieved.sources) == 1
-    assert retrieved.sources[0].id == source.id
-```
-
-**Location**: `tests/integration/`
-
-### 3. API Tests
-
-Test HTTP endpoints and error responses:
-
-```python
-@pytest.mark.asyncio
-async def test_get_notebooks_endpoint():
-    """Test GET /notebooks endpoint."""
-    async with AsyncClient(app=app, base_url="http://test") as client:
-        response = await client.get("/api/notebooks")
-        assert response.status_code == 200
-        data = response.json()
-        assert isinstance(data, list)
-
-@pytest.mark.asyncio
-async def test_create_notebook_validation():
-    """Test that invalid input is rejected."""
-    async with AsyncClient(app=app, base_url="http://test") as client:
-        response = await client.post(
-            "/api/notebooks",
-            json={"name": "", "description": ""}
-        )
-        assert response.status_code == 400
-```
-
-**Location**: `tests/api/`
-
-### 4. Database Tests
-
-Test data persistence and query correctness:
-
-```python
-@pytest.mark.asyncio
-async def test_save_and_retrieve_notebook():
-    """Test saving and retrieving a notebook from database."""
-    notebook = Notebook(name="Test", description="desc")
-    await notebook.save()
-
-    retrieved = await Notebook.get(notebook.id)
-    assert retrieved.name == "Test"
-    assert retrieved.description == "desc"
-
-@pytest.mark.asyncio
-async def test_query_by_criteria():
-    """Test querying notebooks by criteria."""
-    await create_notebook("Active", "")
-    await create_notebook("Archived", "")
-
-    active = await repo_query(
-        "SELECT * FROM notebook WHERE archived = false"
-    )
-    assert len(active) >= 1
-```
-
-**Location**: `tests/database/`
-
-## Running Tests
-
-### Run All Tests
-
-```bash
-uv run pytest
-```
-
-### Run Specific Test File
-
-```bash
-uv run pytest tests/test_notebooks.py
-```
-
-### Run Specific Test Function
-
-```bash
-uv run pytest tests/test_notebooks.py::test_create_notebook
-```
-
-### Run with Coverage Report
-
-```bash
-uv run pytest --cov=open_notebook
-```
-
-### Run Only Unit Tests
-
-```bash
-uv run pytest tests/unit/
-```
-
-### Run Only Integration Tests
-
-```bash
-uv run pytest tests/integration/
-```
-
-### Run Tests in Verbose Mode
-
-```bash
-uv run pytest -v
-```
-
-### Run Tests with Output
-
-```bash
-uv run pytest -s
-```
-
-## Test Fixtures
-
-Use pytest fixtures for common setup and teardown:
-
-```python
-import pytest
 
 @pytest.fixture
-async def test_notebook():
-    """Create a test notebook."""
-    notebook = Notebook(name="Test Notebook", description="Test description")
-    await notebook.save()
-    yield notebook
-    await notebook.delete()
+def client():
+    from api.main import app
 
-@pytest.fixture
-async def api_client():
-    """Create an API test client."""
-    async with AsyncClient(app=app, base_url="http://test") as client:
-        yield client
+    return TestClient(app)
 
-@pytest.fixture
-async def test_notebook_with_sources(test_notebook):
-    """Create a test notebook with sample sources."""
-    source1 = Source(notebook_id=test_notebook.id, url="https://example.com")
-    source2 = Source(notebook_id=test_notebook.id, url="https://example.org")
-    await source1.save()
-    await source2.save()
 
-    test_notebook.sources = [source1, source2]
-    yield test_notebook
-
-    # Cleanup
-    await source1.delete()
-    await source2.delete()
+@patch("api.routers.notebooks.Notebook.get", new_callable=AsyncMock)
+def test_delete_notebook_missing_returns_404(mock_get, client):
+    mock_get.side_effect = NotFoundError("not found")
+    assert client.delete("/api/notebooks/notebook:gone").status_code == 404
 ```
 
-## Best Practices
+(Adapted from `tests/test_crud_404.py`.) Paths include the `/api` prefix. To assert on a 500 instead of having the exception raised into the test, create the client with `TestClient(app, raise_server_exceptions=False)` (see `tests/test_typed_exceptions_reach_handlers.py`).
 
-### 1. Write Descriptive Test Names
+**Patch where the name is used**, not where it's defined: `api.routers.notebooks.Notebook.get`, `open_notebook.graphs.ask.provision_langchain_model`, and so on. Async functions need `new_callable=AsyncMock` (or an `AsyncMock` as the replacement).
 
-```python
-# Good - clearly describes what is being tested
-async def test_create_notebook_with_valid_name_succeeds():
-    ...
+**Graph tests** patch `provision_langchain_model` in the graph module and return a fake model, then call the node function or `await graph.ainvoke(...)` (see `tests/test_ask_graph.py`, `tests/test_graphs.py`).
 
-# Bad - vague about what's being tested
-async def test_notebook():
-    ...
-```
+**Command tests** call the command function directly with its `CommandInput` and patched dependencies (see `tests/test_source_deleted_before_processing.py`, `tests/test_embed_source_partial_cleanup.py`).
 
-### 2. Use Docstrings
+**Things that leak between tests:**
 
-```python
-@pytest.mark.asyncio
-async def test_vector_search_returns_sorted_results():
-    """Test that vector search results are sorted by relevance score."""
-    # Implementation
-```
+- `RecordModel` subclasses (`DefaultModels`, `ContentSettings`, …) are singletons. Call `clear_instance()` in setup/teardown when a test touches one (see `tests/test_domain.py`).
+- `provision_provider_keys()` writes to `os.environ`. Use pytest's `monkeypatch.setenv` / `delenv` so environment changes are undone.
 
-### 3. Test Edge Cases
+**Migrations** can be tested as text, without a database, by reading the `.surrealql` file (see `tests/test_insight_timestamps.py`).
 
-```python
-@pytest.mark.asyncio
-async def test_search_with_empty_query():
-    """Test that empty query raises error."""
-    with pytest.raises(InvalidInputError):
-        await vector_search("")
+## Frontend layout
 
-@pytest.mark.asyncio
-async def test_search_with_very_long_query():
-    """Test that very long query is handled."""
-    long_query = "x" * 10000
-    results = await vector_search(long_query)
-    assert isinstance(results, list)
+Tests are colocated with the code as `*.test.ts` / `*.test.tsx` (for example `src/lib/locales/index.test.ts`, `src/components/common/ConfirmDialog.test.tsx`). `frontend/src/test/` holds only the shared setup (`setup.ts`: jest-dom matchers and mocks for `next/navigation`, `matchMedia` and `@/lib/hooks/use-translation`, whose `t()` returns the key itself, so assert on keys rather than English text).
 
-@pytest.mark.asyncio
-async def test_search_with_special_characters():
-    """Test that special characters are handled."""
-    results = await vector_search("@#$%^&*()")
-    assert isinstance(results, list)
-```
+Vitest runs in `jsdom` with globals enabled and the `@/` alias (`frontend/vitest.config.ts`). Use Testing Library to render components; mock API modules rather than the network.
 
-### 4. Use Assertions Effectively
+## What to test
 
-```python
-# Good - specific assertions
-assert notebook.name == "Test"
-assert len(notebook.sources) == 3
-assert notebook.created is not None
-
-# Less good - too broad
-assert notebook is not None
-assert notebook  # ambiguous what's being tested
-```
-
-### 5. Test Both Success and Failure Cases
-
-```python
-@pytest.mark.asyncio
-async def test_create_notebook_success():
-    """Test successful notebook creation."""
-    notebook = await create_notebook(name="Research", description="AI")
-    assert notebook.id is not None
-    assert notebook.name == "Research"
-
-@pytest.mark.asyncio
-async def test_create_notebook_empty_name_fails():
-    """Test that empty name raises error."""
-    with pytest.raises(InvalidInputError):
-        await create_notebook(name="", description="")
-
-@pytest.mark.asyncio
-async def test_create_notebook_duplicate_fails():
-    """Test that duplicate names are handled."""
-    await create_notebook(name="Research", description="")
-    with pytest.raises(DuplicateError):
-        await create_notebook(name="Research", description="")
-```
-
-### 6. Keep Tests Independent
-
-```python
-# Good - test is self-contained
-@pytest.mark.asyncio
-async def test_archive_notebook():
-    notebook = Notebook(name="Test", description="")
-    await notebook.save()
-    await notebook.archive()
-    assert notebook.archived is True
-
-# Bad - depends on another test's state
-@pytest.mark.asyncio
-async def test_archive_existing_notebook():
-    # Assumes test_create_notebook ran first
-    await notebook.archive()  # notebook undefined
-```
-
-### 7. Use Fixtures for Reusable Setup
-
-```python
-# Instead of repeating setup:
-@pytest.fixture
-async def client_with_auth(api_client, mock_auth):
-    """Client with authentication set up."""
-    api_client.headers.update({"Authorization": f"Bearer {mock_auth.token}"})
-    yield api_client
-
-@pytest.mark.asyncio
-async def test_protected_endpoint(client_with_auth):
-    """Test protected endpoint."""
-    response = await client_with_auth.get("/api/protected")
-    assert response.status_code == 200
-```
-
-## Coverage Goals
-
-- Aim for 70%+ overall coverage
-- 90%+ coverage for critical business logic
-- Don't obsess over 100% - focus on meaningful tests
-- Use `--cov` flag to check coverage: `uv run pytest --cov=open_notebook`
-
-## Async Test Patterns
-
-### Testing Async Functions
-
-```python
-@pytest.mark.asyncio
-async def test_async_operation():
-    """Test async function."""
-    result = await some_async_function()
-    assert result is not None
-```
-
-### Testing Concurrent Operations
-
-```python
-@pytest.mark.asyncio
-async def test_concurrent_notebook_creation():
-    """Test creating multiple notebooks concurrently."""
-    tasks = [
-        create_notebook(f"Notebook {i}", "")
-        for i in range(10)
-    ]
-    notebooks = await asyncio.gather(*tasks)
-    assert len(notebooks) == 10
-    assert all(n.id for n in notebooks)
-```
-
-## Common Testing Errors
-
-### Error: "event loop is closed"
-
-Solution: Use the async fixture properly:
-```python
-@pytest.fixture
-async def notebook():  # Use async fixture
-    notebook = Notebook(name="Test", description="")
-    await notebook.save()
-    yield notebook
-    await notebook.delete()
-```
-
-### Error: "object is not awaitable"
-
-Solution: Make sure you're using await:
-```python
-# Wrong
-result = create_notebook("Test", "")
-
-# Right
-result = await create_notebook("Test", "")
-```
-
----
-
-**See also:**
-- [Code Standards](code-standards.md) - Code formatting and style
-- [Contributing Guide](contributing.md) - Overall contribution workflow
+- A bug fix comes with a test that fails without the fix. Name it after the behavior (`test_delete_notebook_missing_returns_404`) and reference the issue in the docstring.
+- API changes: status codes, validation errors and the error mapping, not only the happy path.
+- Don't test third-party libraries (Esperanto, content-core, LangGraph) or make real provider calls.
diff --git a/frontend/AGENTS.md b/frontend/AGENTS.md
index 74fd1cfd..665e3bc3 100644
--- a/frontend/AGENTS.md
+++ b/frontend/AGENTS.md
@@ -11,7 +11,7 @@ Normative rules for working on the Next.js frontend. Architecture and flow walkt
 
 ## Hard rules
 
-- **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all locales** under `src/lib/locales/` (currently 14; en-US is the reference). Missing keys fall back to en-US silently — keep locales in sync. Each non-en-US locale ends with `satisfies TranslationShape` (type derived from en-US), so a missing/extra key fails `tsc`; the parity test (`src/lib/locales/index.test.ts`) checks the same at runtime.
+- **i18n is mandatory**: every UI string goes through `t('section.key')` and the key must exist in **all locales** under `src/lib/locales/` (currently 14; en-US is the reference). Missing keys fall back to en-US silently — keep locales in sync. Each non-en-US locale ends with `satisfies TranslationShape` (type derived from en-US), so a missing/extra key fails `tsc`; the parity test (`src/lib/locales/index.test.ts`) checks the same at runtime. Adding a whole language also touches `src/lib/utils/date-locale.ts`; `src/components/common/LanguageToggle.tsx` renders the `languages` list, so it needs no edit (see the [i18n playbook](../docs/7-DEVELOPMENT/change-playbooks.md#adding-a-new-language)).
 - **Styling goes through design tokens** ([ADR-011](../docs/7-DEVELOPMENT/decisions/ADR-011-design-token-system.md)): use semantic utilities (`text-destructive`, `bg-warn-tint`, `text-teal`, `text-type-video`, …) defined in `src/app/globals.css` — never raw Tailwind palette classes (`text-red-600`, `bg-amber-50`) and never hand-written `dark:` color twins (tokens re-resolve per theme). The laws: fern acts, teal is the AI voice, red only destroys, warn is clay, color never washes a reading surface. `/dev/design` (dev-only route) renders every token and primitive in both themes — it's the visual reference, and screen-level PRs must not change it.
 - All requests go through `apiClient` (`src/lib/api/client.ts`); never create a second axios instance. Auth token is auto-added from localStorage key `auth-storage`.
 - Data fetching uses TanStack Query hooks in `src/lib/hooks/` with `QUERY_KEYS`; mutations invalidate caches and show toasts (sonner). Follow the existing hook shape.
diff --git a/open_notebook/AGENTS.md b/open_notebook/AGENTS.md
index 9ca5359f..ba0ca988 100644
--- a/open_notebook/AGENTS.md
+++ b/open_notebook/AGENTS.md
@@ -4,18 +4,18 @@ Normative rules for working on the Python backend. Architecture and design ratio
 
 ## Commands
 
-- Run API: `uv run uvicorn api.main:app --port 5055` (Swagger at http://localhost:5055/docs)
+- Run API: `make api` (runs `run_api.py`: uvicorn with reload on 127.0.0.1:5055; Swagger at http://localhost:5055/docs)
 - Background jobs need the worker: `make worker-start` (`surreal-commands-worker --import-modules commands`)
 - Tests: `uv run pytest tests/`
-- Lint/format/typecheck: `ruff check . --fix`, `ruff format .` and `uv run python -m mypy .`
+- Lint/format/typecheck: `uv run ruff check . --fix`, `uv run ruff format .` and `uv run python -m mypy .` (CI runs `ruff format --check`)
 
 ## API layer (`api/`)
 
-- Structure is routes → services → models. Routers stay thin; business logic goes in `*_service.py`.
-- Provider metadata (env vars, modalities, test models, discovery URLs, docs links) lives in the registry: `open_notebook/ai/provider_registry.py` `PROVIDERS`. `TEST_MODELS`, `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES` and `OPENAI_COMPAT_PROVIDERS` are derived from it, and `GET /api/providers` exposes it. Adding a provider = add it to the registry, plus **one** manual copy: the `SupportedProvider` Literal in `api/models.py` (typing can't be derived at runtime) — enforced by `tests/test_credential_provider_validation.py`. The frontend consumes `GET /api/providers` at runtime (`useProviders()`), so it needs no edit; the registry declaration order is the display order.
+- Routers (`api/routers/`) call domain models and `repo_*` functions directly. Logic goes in an `api/*_service.py` module only when it's shared or orchestrates jobs (`command_service`, `credentials_service`, `podcast_service`). New routers are registered in `api/main.py` with `prefix="/api"`.
+- Provider metadata (env vars, modalities, test models, discovery URLs, docs links) lives in the registry: `open_notebook/ai/provider_registry.py` `PROVIDERS`. `TEST_MODELS`, `PROVIDER_ENV_CONFIG`, `PROVIDER_MODALITIES` and `OPENAI_COMPAT_PROVIDERS` are derived from it, and `GET /api/providers` exposes it. Adding a provider takes the registry entry **plus four hand-maintained copies**: the `SupportedProvider` Literal (`api/models.py`), `PROVIDER_CONFIG` (`open_notebook/ai/key_provider.py`), `env_var_map` in `get_provider_availability()` (`api/routers/models.py`) and `PROVIDER_DISCOVERY_FUNCTIONS` (`open_notebook/ai/model_discovery.py`). Tests catch a missing Literal or discovery entry, not the other two. Follow the [Add an AI provider](../docs/7-DEVELOPMENT/change-playbooks.md#playbook-add-an-ai-provider) playbook. The frontend consumes `GET /api/providers` at runtime (`useProviders()`), so a simple API-key provider needs no frontend edit; the registry declaration order is the display order.
 - NEVER return API key values from any endpoint — metadata only.
 - Every user-supplied URL field must go through `validate_url()` (`open_notebook/utils/url_validation.py`, async) for SSRF protection. Private IPs/localhost are intentionally allowed (self-hosted Ollama, LM Studio).
-- Errors: raise typed exceptions from `open_notebook.exceptions` — global handlers map them to HTTP status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `RateLimitError`→429, `ConfigurationError`→422, `NetworkError`/`ExternalServiceError`→502, `OpenNotebookError`→500). Don't raise bare `HTTPException` for domain errors.
+- Errors: raise typed exceptions from `open_notebook.exceptions` — global handlers map them to HTTP status codes (`NotFoundError`→404, `InvalidInputError`→400, `AuthenticationError`→401, `UnsupportedTypeException`→415, `RateLimitError`→429, `ConfigurationError`→422, `NetworkError`/`ExternalServiceError`→502, other `OpenNotebookError`→500). Don't raise bare `HTTPException` for domain errors. A router's catch-all `except Exception` (sanitized 500) must come after `except OpenNotebookError: raise` so typed errors reach the handlers (`tests/test_typed_exceptions_reach_handlers.py`).
 - Requests over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100) are rejected by `MaxBodySizeMiddleware` before auth/routing.
 - CORS is open by default (`CORS_ORIGINS`); `allow_credentials` flips to `True` only when origins are explicit. No rate limiting built in.
 
@@ -28,7 +28,7 @@ Normative rules for working on the Python backend. Architecture and design ratio
 
 ## Graphs (`open_notebook/graphs/`)
 
-- Sync nodes that need async calls use the `asyncio.new_event_loop()` / ThreadPool workaround (see `chat.py`) — fragile, follow the existing pattern exactly.
+- Nodes are `async def` (`ask.py`, `source.py`, `transformation.py`, `prompt.py`). Only the SqliteSaver-checkpointed graphs (`chat.py`, `source_chat.py`) use sync nodes with the `asyncio.new_event_loop()` / ThreadPool workaround, because the checkpointer is sync — fragile; don't copy it into new graphs.
 - Every node wraps LLM calls with `classify_error()`:
   ```python
   except Exception as e:
@@ -36,12 +36,12 @@ Normative rules for working on the Python backend. Architecture and design ratio
       raise exc_class(message) from e
   ```
 - Strip extended-thinking output with `clean_thinking_content()` before using model responses.
-- Chat checkpoints (SqliteSaver) live at the path in `LANGGRAPH_CHECKPOINT_FILE`.
+- Chat checkpoints (SqliteSaver) live at `./data/sqlite-db/checkpoints.sqlite` — `LANGGRAPH_CHECKPOINT_FILE` in `open_notebook/config.py` is a constant, not an env var.
 
 ## Domain (`open_notebook/domain/`)
 
 - `Source.save()` does **NOT** auto-embed — call `source.vectorize()` explicitly (fire-and-forget, returns a command id). `Note.save()` DOES auto-submit `embed_note`.
-- `ObjectModel.get()` is polymorphic via ID prefix — the subclass must be imported first or resolution fails.
+- `ObjectModel.get()` is polymorphic via ID prefix — the subclass must be imported first or resolution fails. It raises `NotFoundError` **only** for a missing record and `DatabaseOperationError` for any other DB failure ([ADR-013](../docs/7-DEVELOPMENT/decisions/ADR-013-objectmodel-get-error-contract.md)) — so jobs can treat not-found as permanent and DB errors as retryable.
 - `RecordModel` subclasses are singletons — call `clear_instance()` in tests.
 - Relationship strings passed to `relate()` must match the schema (`reference`, `artifact`, `refers_to`).
 
@@ -50,13 +50,14 @@ Normative rules for working on the Python backend. Architecture and design ratio
 - New migration = new file `open_notebook/database/migrations/N.surrealql` (+ `N_down.surrealql`) **and** an edit to `AsyncMigrationManager` — migrations are hard-coded, not auto-discovered. They run automatically on API startup.
 - No connection pooling — each `repo_*` call opens/closes a connection.
 - Transaction-conflict `RuntimeError`s are retriable and logged at DEBUG (don't "fix" the missing stack trace).
-- Read the `snl-development:surrealdb-queries` skill notes / SurrealDB docs before writing SurrealQL.
+- Bind values as `$params`, never f-string user input into SurrealQL ([security.md](../docs/7-DEVELOPMENT/security.md#database-queries-surrealql-injection)); see the [SurrealQL docs](https://surrealdb.com/docs/surrealql) for syntax.
 
 ## Background commands (`commands/`)
 
-- Retry config uses a blocklist: `stop_on: [ValueError]` — raise `ValueError` for permanent failures (no retry, job marked `failed`); any other exception auto-retries.
+- Commands are `@command("<name>", app="open_notebook", retry={...})` functions and must be imported from `commands/__init__.py` (the worker loads `--import-modules commands`).
+- Retry config uses a blocklist: exceptions in `stop_on` (`ValueError`, `ConfigurationError`, `NotFoundError`, … — check the command's list) fail the job permanently (no retry, job marked `failed`); any other exception auto-retries. Note the embed commands catch `ValueError` internally and return `success=False` (see the comment in `commands/embedding_commands.py`).
 - Submission is fire-and-forget via `submit_command()`; commands must be idempotent-ish under retry.
-- Podcast generation uses `max_attempts: 1` on purpose (prevents duplicate episodes); retry is the explicit `POST /podcasts/episodes/{id}/retry` endpoint.
+- Podcast generation uses `max_attempts: 1` on purpose (prevents duplicate episodes); retry is the explicit `POST /api/podcasts/episodes/{id}/retry` endpoint.
 
 ## Prompts (`prompts/`)
 
@@ -73,9 +74,8 @@ Normative rules for working on the Python backend. Architecture and design ratio
 | `OPEN_NOTEBOOK_ENCRYPTION_KEY` (or `_FILE`) | Required for credential storage; any string, no default |
 | `OPEN_NOTEBOOK_CHUNK_SIZE` / `_CHUNK_OVERLAP` | Token-based (default 400 / 15%); restart required |
 | `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | Upload cap (default 100) |
-| `LANGGRAPH_CHECKPOINT_FILE` | Chat history SQLite path |
 | `CORS_ORIGINS` | Restrict before production |
 
 ## Deep dives
 
-[architecture](../docs/7-DEVELOPMENT/architecture.md) · [credentials](../docs/7-DEVELOPMENT/credentials.md) · [content processing](../docs/7-DEVELOPMENT/content-processing.md) · [podcasts](../docs/7-DEVELOPMENT/podcasts.md) · [prompts](../docs/7-DEVELOPMENT/prompts.md) · [change playbooks](../docs/7-DEVELOPMENT/change-playbooks.md) · [testing](../docs/7-DEVELOPMENT/testing.md)
+[architecture](../docs/7-DEVELOPMENT/architecture.md) · [code standards](../docs/7-DEVELOPMENT/code-standards.md) · [credentials](../docs/7-DEVELOPMENT/credentials.md) · [content processing](../docs/7-DEVELOPMENT/content-processing.md) · [podcasts](../docs/7-DEVELOPMENT/podcasts.md) · [prompts](../docs/7-DEVELOPMENT/prompts.md) · [change playbooks](../docs/7-DEVELOPMENT/change-playbooks.md) · [testing](../docs/7-DEVELOPMENT/testing.md)

From f7e70671fa9660fd6e36e81061f0253af426f967 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 23:07:08 -0300
Subject: [PATCH 342/345] docs: one canonical install path, first-run flow that
 ends in a working chat (#1459)

* docs: one canonical install path, first-run flow that ends in a working chat

- Install guides download the shipped docker-compose.yml instead of pasting
  divergent copies; variants (Ollama in Docker, Ollama on the host, LM Studio)
  are shown as docker-compose.override.yml diffs.
- New canonical "Connect a provider" section in 4-AI-PROVIDERS with the real UI
  labels (Add Configuration, Test, Models/Discover Models, Add, Auto-assign
  Defaults) and a final test chat; every install path links to it.
- Docker settings go in the open_notebook environment block and are applied
  with `docker compose up -d`; .env only fills ${...} placeholders.
- Fix single-container /mydata volume and root:root requirement, external
  Ollama on Linux (extra_hosts + OLLAMA_HOST=0.0.0.0), from-source SURREAL_URL,
  prerequisites (Python 3.11-3.12, Node 20.9+, ffmpeg), wrong service names,
  down -v, backups and updates.
- Provider table regenerated from provider_registry.py (24 providers, with
  modalities); retired models and prices removed.
- Merge the OpenAI quick start into the cloud one (pointer left behind).
- README: license badge, provider matrix, languages, roadmap -> VISION.md.
- docs/index.md reduced to one navigation table, version stamp removed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review (network exposure, key generation, Ollama reachability, migration)

- Warn before the first `docker compose up -d` that 8502/5055 are published on
  all interfaces with no password; offer 127.0.0.1 binding or
  OPEN_NOTEBOOK_PASSWORD. Narrow the local quick start's privacy claim.
- No literal encryption keys: placeholders plus generate commands
  (openssl, PowerShell, `uv run python -c secrets`).
- Host Ollama: Docker Desktop usually works as is, with an OLLAMA_HOST
  fallback for macOS/Windows; stronger exposure caveat for 0.0.0.0.
- Single container: copy /mydata out of the container before removing it.
- Vertex AI form fields; local providers need no key; Add Source menu wording.
- from-source: SURREAL_URL=127.0.0.1, INTERNAL_API_URL when the API port
  changes, mention `make start-all` (fixed on main).
- Windows: quote rocksdb paths. README: Italian, key optional for local.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: launchctl setenv is not persistent; restart Ollama after setting OLLAMA_HOST

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 README.md                                     | 161 ++----
 docs/0-START-HERE/index.md                    |  83 ++-
 docs/0-START-HERE/quick-start-cloud.md        | 226 ++------
 .../quick-start-external-ollama.md            | 251 +++------
 docs/0-START-HERE/quick-start-local.md        | 315 +++--------
 docs/0-START-HERE/quick-start-openai.md       | 198 +------
 docs/1-INSTALLATION/docker-compose.md         | 495 +++++++-----------
 docs/1-INSTALLATION/from-source.md            | 198 +++----
 docs/1-INSTALLATION/index.md                  | 178 ++-----
 docs/1-INSTALLATION/single-container.md       | 148 ++----
 docs/1-INSTALLATION/windows-native.md         | 161 ++----
 docs/4-AI-PROVIDERS/index.md                  | 330 ++++--------
 docs/index.md                                 | 313 +----------
 13 files changed, 809 insertions(+), 2248 deletions(-)

diff --git a/README.md b/README.md
index fafc49bf..81db8ab7 100644
--- a/README.md
+++ b/README.md
@@ -60,12 +60,12 @@ In a world dominated by Artificial Intelligence, having the ability to think 
 
 **Open Notebook empowers you to:**
 - 🔒 **Control your data** - Keep your research private and secure
-- 🤖 **Choose your AI models** - Support for 18+ providers including OpenAI, Anthropic, Ollama, LM Studio, and more
+- 🤖 **Choose your AI models** - 20+ providers including OpenAI, Anthropic, Google, Mistral, Ollama and any OpenAI-compatible server (LM Studio, vLLM)
 - 📚 **Organize multi-modal content** - PDFs, videos, audio, web pages, and more
 - 🎙️ **Generate professional podcasts** - Advanced multi-speaker podcast generation
 - 🔍 **Search intelligently** - Full-text and vector search across all your content
 - 💬 **Chat with context** - AI conversations powered by your research
-- 🌐 **Multi-language UI** - English, Portuguese, Chinese (Simplified & Traditional), Japanese, Russian, and Bengali support
+- 🌐 **Multi-language UI** - English, Bengali, Catalan, Chinese (Simplified & Traditional), French, German, Italian, Japanese, Polish, Portuguese, Russian, Spanish and Turkish
 
 Learn more about our project at [https://www.open-notebook.ai](https://www.open-notebook.ai)
 
@@ -76,12 +76,12 @@ Learn more about our project at [https://www.open-notebook.ai](https://www.open-
 | Feature | Open Notebook | Google Notebook LM | Advantage |
 |---------|---------------|--------------------|-----------|
 | **Privacy & Control** | Self-hosted, your data | Google cloud only | Complete data sovereignty |
-| **AI Provider Choice** | 18+ providers (OpenAI, Anthropic, Ollama, LM Studio, etc.) | Google models only | Flexibility and cost optimization |
+| **AI Provider Choice** | 20+ providers, cloud or local (OpenAI, Anthropic, Google, Ollama, LM Studio, etc.) | Google models only | Flexibility and cost optimization |
 | **Podcast Speakers** | 1-4 speakers with custom profiles | 2 speakers only | Extreme flexibility |
 | **Content Transformations** | Custom and built-in | Limited options | Unlimited processing power |
 | **API Access** | Full REST API | No API | Complete automation |
 | **Deployment** | Docker, cloud, or local | Google hosted only | Deploy anywhere |
-| **Citations** | Basic references (will improve) | Comprehensive with sources | Research integrity |
+| **Citations** | Answers cite the sources, notes and insights they used | Comprehensive with sources | Research integrity |
 | **Customization** | Open source, fully customizable | Closed system | Unlimited extensibility |
 | **Cost** | Pay only for AI usage | Free tier + Monthly subscription | Transparent and controllable |
 
@@ -96,108 +96,59 @@ Learn more about our project at [https://www.open-notebook.ai](https://www.open-
 
 [![Python][Python]][Python-url] [![Next.js][Next.js]][Next-url] [![React][React]][React-url] [![SurrealDB][SurrealDB]][SurrealDB-url] [![LangChain][LangChain]][LangChain-url]
 
-## 🚀 Quick Start (2 Minutes)
+## 🚀 Quick Start
 
 ### Prerequisites
-- [Docker Desktop](https://www.docker.com/products/docker-desktop/) installed
-- That's it! (API keys configured later in the UI)
+- [Docker Desktop](https://www.docker.com/products/docker-desktop/) (macOS, Windows) or Docker Engine with the Compose plugin (Linux)
+- An API key from an AI provider, or a local model server such as Ollama. You add it in the UI, not in config files.
 
-### Step 1: Get docker-compose.yml
-
-**Option A:** Download directly
+### Step 1: Download docker-compose.yml
 ```bash
+mkdir open-notebook && cd open-notebook
 curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
 ```
 
-**Option B:** Create the file manually
-Copy this into a new file called `docker-compose.yml`:
+This is the official [docker-compose.yml](docker-compose.yml) from this repository. It runs two services: `surrealdb` (the database) and `open_notebook` (UI, API and background worker).
 
-```yaml
-services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    # Credentials default to root:root for a zero-config local setup. Before
-    # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
-    # in a .env file (see .env.example) — they are applied here and to the
-    # open_notebook service below, so the two always stay in sync.
-    # List (exec) form so each interpolated value stays a single argument —
-    # a password containing spaces would otherwise be split into several.
-    command: ["start", "--log", "info", "--user", "${SURREAL_USER:-root}", "--pass", "${SURREAL_PASSWORD:-root}", "rocksdb:/mydata/mydatabase.db"]
-    user: root  # Required for bind mounts on Linux
-    ports:
-      # Bound to localhost only: the open_notebook service reaches this over
-      # the internal compose network regardless, so the host port is purely
-      # for local debugging (e.g. Surrealist, `surreal sql`). Exposing this
-      # on 0.0.0.0 would let anyone who can reach the host connect with the
-      # default root:root credentials.
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-    environment:
-      - SURREAL_EXPERIMENTAL_GRAPHQL=true
-    restart: always
-    pull_policy: always
-
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    ports:
-      - "8502:8502"  # Web UI
-      - "5055:5055"  # REST API
-    environment:
-      # REQUIRED: Change this to your own secret string
-      # This encrypts your API keys in the database
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-
-      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to root:root
-      # for local use; override them in a .env file before exposing the instance
-      # (the same values configure the surrealdb service above).
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=${SURREAL_USER:-root}
-      - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
-    pull_policy: always
-```
-
-### Step 2: Set Your Encryption Key
+### Step 2: Set your encryption key
 Edit `docker-compose.yml` and change this line:
 ```yaml
 - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
 ```
-to any secret value (e.g., `my-super-secret-key-123`)
+to a long random secret you generate yourself (for example with `openssl rand -hex 32`; [other options](docs/1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). It encrypts the API keys you store; keep it.
 
-### Step 3: Start Services
+> **Shared network or server?** The UI (`8502`) and API (`5055`) are published on all network interfaces and there is no password by default. If other devices can reach this machine, change those two port lines to `"127.0.0.1:8502:8502"` and `"127.0.0.1:5055:5055"`, or add `- OPEN_NOTEBOOK_PASSWORD=your-password` to the `environment:` block, before starting.
+
+### Step 3: Start services
 ```bash
 docker compose up -d
 ```
 
-Wait 15-20 seconds, then open: **http://localhost:8502**
+Wait about 30 seconds, then open: **http://localhost:8502**
 
-### Step 4: Configure AI Provider
-1. Go to **Models** and choose your provider (OpenAI, Anthropic, Google, etc.)
-2. Click **+ Add Configuration**
-3. Paste your API key and other info as needed and click **Add Configuration**
-4. Click **Test** to test connection
-5. Click **Sync Models** and check models to include
-6. Under **Default Model Assignments**, click **Auto-Assign Defaults** or manually specify which models to use for what 
+### Step 4: Connect an AI provider
+1. In the sidebar, open **Models** (under Manage).
+2. Find your provider (OpenAI, Anthropic, Google, etc.) and click **Add Configuration**.
+3. Enter a name and your API key (local providers such as Ollama need a **Base URL** instead), then click **Add Configuration**.
+4. Click **Test** on the new configuration to check the connection.
+5. Click **Models**, choose a **Model Type**, tick the models to add and click **Add**. Add at least one **Language** model and one **Embedding** model.
+6. Under **Default Model Assignments**, click **Auto-assign Defaults** (or pick the models yourself).
 
-Done! You're ready to create your first notebook.
+Done! Create a notebook, add a source and start chatting. Full walkthrough: [Connect a provider](docs/4-AI-PROVIDERS/index.md#connect-a-provider).
 
 > **Need an API key?** Get one from:
-> [OpenAI](https://platform.openai.com/api-keys) · [Anthropic](https://console.anthropic.com/) · [Google](https://aistudio.google.com/) · [Groq](https://console.groq.com/) (free tier)
+> [OpenAI](https://platform.openai.com/api-keys) · [Anthropic](https://console.anthropic.com/settings/keys) · [Google](https://aistudio.google.com/app/apikey) · [Groq](https://console.groq.com/keys)
+>
+> Anthropic and Groq have no embedding models; pair them with a provider that does (see the [matrix](#provider-support-matrix)).
 
-> **Want free local AI?** See [examples/docker-compose-ollama.yml](examples/) for Ollama setup
+> **Want free local AI?** See the [Local Quick Start](docs/0-START-HERE/quick-start-local.md) (Ollama in Docker).
 
 ---
 
 ### 📚 More Installation Options
 
-- **[With Ollama (Free Local AI)](examples/docker-compose-ollama.yml)** - Run models locally without API costs
+- **[Local AI with Ollama](docs/0-START-HERE/quick-start-local.md)** - Run models locally without API costs
+- **[Docker Compose guide](docs/1-INSTALLATION/docker-compose.md)** - Settings, backups, updates, remote access
 - **[From Source (Developers)](docs/1-INSTALLATION/from-source.md)** - For development and contributions
 - **[Complete Installation Guide](docs/1-INSTALLATION/index.md)** - All deployment scenarios
 
@@ -219,25 +170,16 @@ Done! You're ready to create your first notebook.
 
 ## Provider Support Matrix
 
-Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we support this providers out of the box!
+Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we support these providers out of the box. The columns show the model types each provider offers; what you can use depends on your account.
 
 | Provider     | LLM Support | Embedding Support | Speech-to-Text | Text-to-Speech |
 |--------------|-------------|------------------|----------------|----------------|
 | OpenAI       | ✅          | ✅               | ✅             | ✅             |
 | Anthropic    | ✅          | ❌               | ❌             | ❌             |
-| Groq         | ✅          | ❌               | ✅             | ❌             |
 | Google (GenAI) | ✅          | ✅               | ✅             | ✅             |
-| Vertex AI    | ✅          | ✅               | ❌             | ✅             |
-| Ollama       | ✅          | ✅               | ❌             | ❌             |
-| oMLX         | ✅          | ✅               | ❌             | ❌             |
-| Perplexity   | ✅          | ❌               | ❌             | ❌             |
-| ElevenLabs   | ❌          | ❌               | ✅             | ✅             |
-| Deepgram     | ❌          | ❌               | ✅             | ✅             |
-| Azure OpenAI | ✅          | ✅               | ✅             | ✅             |
+| Groq         | ✅          | ❌               | ✅             | ❌             |
 | Mistral      | ✅          | ✅               | ✅             | ✅             |
 | DeepSeek     | ✅          | ❌               | ❌             | ❌             |
-| Cohere       | ✅          | ✅               | ❌             | ❌             |
-| Voyage       | ❌          | ✅               | ❌             | ❌             |
 | xAI          | ✅          | ❌               | ❌             | ✅             |
 | OpenRouter   | ✅          | ✅               | ✅             | ✅             |
 | DashScope (Qwen) | ✅          | ❌               | ❌             | ❌             |
@@ -246,17 +188,26 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 | SiliconFlow  | ✅          | ❌               | ❌             | ❌             |
 | Z.ai         | ✅          | ❌               | ❌             | ❌             |
 | PayPerQ (PPQ) | ✅          | ✅               | ✅             | ✅             |
+| Cohere       | ✅          | ✅               | ❌             | ❌             |
+| Voyage       | ❌          | ✅               | ❌             | ❌             |
+| ElevenLabs   | ❌          | ❌               | ✅             | ✅             |
+| Deepgram     | ❌          | ❌               | ✅             | ✅             |
+| Ollama       | ✅          | ✅               | ❌             | ❌             |
+| oMLX         | ✅          | ✅               | ❌             | ❌             |
+| Azure OpenAI | ✅          | ✅               | ✅             | ✅             |
+| Vertex AI    | ✅          | ✅               | ❌             | ✅             |
 | OpenAI Compatible* | ✅          | ✅               | ✅             | ✅             |
+| Anthropic Compatible | ✅          | ❌               | ❌             | ❌             |
 
 *Supports LM Studio and any OpenAI-compatible endpoint. Prefer the native **oMLX** provider for [oMLX](https://omlx.ai/) (Apple Silicon); see [docs/5-CONFIGURATION/omlx.md](docs/5-CONFIGURATION/omlx.md).
 
 ## ✨ Key Features
 
 ### Core Capabilities
-- **🔒 Privacy-First**: Your data stays under your control - no cloud dependencies
+- **🔒 Privacy-First**: Self-hosted; with local models nothing leaves your machine
 - **🎯 Multi-Notebook Organization**: Manage multiple research projects seamlessly
 - **📚 Universal Content Support**: PDFs, videos, audio, web pages, Office docs, and more
-- **🤖 Multi-Model AI Support**: 18+ providers including OpenAI, Anthropic, Ollama, Google, LM Studio, and more
+- **🤖 Multi-Model AI Support**: 20+ providers including OpenAI, Anthropic, Ollama, Google, LM Studio, and more
 - **🎙️ Professional Podcast Generation**: Advanced multi-speaker podcasts with Episode Profiles
 - **🔍 Intelligent Search**: Full-text and vector search across all your content
 - **💬 Context-Aware Chat**: AI conversations powered by your research materials
@@ -279,7 +230,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 
 ### Getting Started
 - **[📖 Introduction](docs/0-START-HERE/index.md)** - Learn what Open Notebook offers
-- **[⚡ Quick Start with OpenAI](docs/0-START-HERE/quick-start-openai.md)** - Get up and running in 5 minutes
+- **[⚡ Quick Start with a Cloud Provider](docs/0-START-HERE/quick-start-cloud.md)** - OpenAI, Anthropic, Google and more in 5 minutes
 - **[🔧 Installation](docs/1-INSTALLATION/index.md)** - Comprehensive setup guide
 - **[🎯 Run It Fully Local](docs/0-START-HERE/quick-start-local.md)** - Ollama/LM Studio, completely private
 
@@ -294,7 +245,7 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 ### Advanced Topics
 - **[🎙️ Podcast Generation](docs/2-CORE-CONCEPTS/podcasts-explained.md)** - Create professional podcasts
 - **[🔧 Content Transformations](docs/3-USER-GUIDE/transformations.md)** - Customize content processing
-- **[🤖 AI Models](docs/4-AI-PROVIDERS/index.md)** - AI model configuration
+- **[🤖 AI Providers](docs/4-AI-PROVIDERS/index.md)** - Connect providers and set default models
 - **[🔌 MCP Integration](docs/5-CONFIGURATION/mcp-integration.md)** - Connect with Claude Desktop, VS Code and other MCP clients
 - **[🔧 REST API Reference](docs/7-DEVELOPMENT/api-reference.md)** - Complete API documentation
 - **[🔐 Security](docs/5-CONFIGURATION/security.md)** - Password protection and privacy
@@ -304,24 +255,11 @@ Thanks to the [Esperanto](https://github.com/lfnovo/esperanto) library, we suppo
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
 
-## 🗺️ Roadmap
+## 🗺️ Where We're Going
 
-### Upcoming Features
-- **Live Front-End Updates**: Real-time UI updates for smoother experience
-- **Async Processing**: Faster UI through asynchronous content processing
-- **Cross-Notebook Sources**: Reuse research materials across projects
-- **Bookmark Integration**: Connect with your favorite bookmarking apps
+Right now the focus is on making the core experience (sources, chat, search, notes, podcasts) solid across every provider and deployment, before adding new product surfaces. The bigger directions under consideration, such as multi-user support, new output formats and agents operating Open Notebook through MCP, are described in the **Horizon** section of [VISION.md](VISION.md#horizon). They are directions, not dated promises.
 
-### Recently Completed ✅
-- **Next.js Frontend**: Modern React-based frontend with improved performance
-- **Comprehensive REST API**: Full programmatic access to all functionality
-- **Multi-Model Support**: 18+ AI providers including OpenAI, Anthropic, Ollama, LM Studio
-- **Advanced Podcast Generator**: Professional multi-speaker podcasts with Episode Profiles
-- **Content Transformations**: Powerful customizable actions for content processing
-- **Enhanced Citations**: Improved layout and finer control for source citations
-- **Multiple Chat Sessions**: Manage different conversations within notebooks
-
-Explore [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/ideas) for proposed features and product ideas, and [open Issues](https://github.com/lfnovo/open-notebook/issues) for known bugs and approved work.
+Explore [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/ideas) for proposed features and product ideas, and [open Issues](https://github.com/lfnovo/open-notebook/issues) for known bugs and approved work. Recent changes are in the [CHANGELOG](CHANGELOG.md).
 
 <p align="right">(<a href="#readme-top">back to top</a>)</p>
 
@@ -349,7 +287,6 @@ We welcome contributions! We're especially looking for help with:
 - **Documentation**: Improve guides and tutorials
 
 **Current Tech Stack**: Python, FastAPI, Next.js, React, SurrealDB
-**Future Roadmap**: Real-time updates, enhanced async processing
 
 See our [Contributing Guide](CONTRIBUTING.md) for detailed information on how to get started, including our guidelines for [AI-assisted contributions](docs/7-DEVELOPMENT/contributing.md#ai-assisted-and-agent-generated-prs). To understand what we're building (and what we'll say no to), read [VISION.md](VISION.md).
 
@@ -382,7 +319,7 @@ Open Notebook is MIT licensed. See the [LICENSE](LICENSE) file for details.
 [issues-shield]: https://img.shields.io/github/issues/lfnovo/open-notebook.svg?style=for-the-badge
 [issues-url]: https://github.com/lfnovo/open-notebook/issues
 [license-shield]: https://img.shields.io/github/license/lfnovo/open-notebook.svg?style=for-the-badge
-[license-url]: https://github.com/lfnovo/open-notebook/blob/master/LICENSE.txt
+[license-url]: https://github.com/lfnovo/open-notebook/blob/main/LICENSE
 [linkedin-shield]: https://img.shields.io/badge/-LinkedIn-black.svg?style=for-the-badge&logo=linkedin&colorB=555
 [linkedin-url]: https://linkedin.com/in/lfnovo
 [Next.js]: https://img.shields.io/badge/Next.js-000000?style=for-the-badge&logo=next.js&logoColor=white
diff --git a/docs/0-START-HERE/index.md b/docs/0-START-HERE/index.md
index e422e2f6..91dd4fb2 100644
--- a/docs/0-START-HERE/index.md
+++ b/docs/0-START-HERE/index.md
@@ -1,65 +1,52 @@
 # Open Notebook - Start Here
 
-**Open Notebook** is a privacy-focused AI research assistant. Upload documents, chat with AI, generate notes, and create podcasts—all with complete control over your data.
+**Open Notebook** is a self-hosted, privacy-focused AI research assistant. Add documents, web pages, audio and video, chat with an AI about them with citations, take notes, and turn your research into podcasts, using the AI providers you choose.
 
-## Choose Your Path
+## Choose your path
 
-### 🚀 I want to use OpenAI (Fastest)
-**5 minutes to running.** GPT, simple setup, powerful results.
+Each quick start installs Open Notebook with Docker Compose and ends with a working chat.
 
-→ [OpenAI Quick Start](quick-start-openai.md)
+### I have an API key for a cloud AI provider
+OpenAI, Anthropic, Google, Mistral, Groq, OpenRouter and more.
+
+→ [Cloud Providers Quick Start](quick-start-cloud.md) (about 5 minutes)
+
+### I want to run everything locally
+Ollama in Docker next to Open Notebook. No API keys; nothing leaves your machine.
+
+→ [Local Quick Start](quick-start-local.md) (about 10 minutes, plus model downloads)
+
+**Already have Ollama installed on your computer?** → [External Ollama Quick Start](quick-start-external-ollama.md)
+
+### Something else
+Running from source, Windows without Docker, or a hosting platform → [Installation Guide](../1-INSTALLATION/index.md)
 
 ---
 
-### ☁️ I want to use other cloud AI (Anthropic, Google, OpenRouter, etc.)
-**5 minutes to running.** Choose from 17+ AI providers.
+## What you can do
 
-→ [Cloud Providers Quick Start](quick-start-cloud.md)
+- **Add content**: PDFs, Office and OpenDocument files, web pages, YouTube, audio, video, plain text
+- **Chat**: ask questions about the sources in a notebook, with citations, and choose what each source shares with the AI
+- **Ask and search**: full-text and semantic search across everything
+- **Transform**: run summaries and extraction prompts on sources to produce insights
+- **Take notes**: write your own or save AI answers as notes
+- **Create podcasts**: 1 to 4 speakers with configurable profiles
 
----
+## Open Notebook and Google Notebook LM
 
-### 🏠 I want to run locally (Ollama or LMStudio, completely private)
-**5 minutes to running.** Keep everything private, on your machine. No costs.
-
-→ [Local Quick Start](quick-start-local.md)
-
-**Already have Ollama installed?** → [External Ollama Guide](quick-start-external-ollama.md)
-
----
-
-## What Can You Do?
-
-- 📄 **Upload Content**: PDFs, web links, audio, video, text
-- 🤖 **Chat with AI**: Ask questions about your documents with citations
-- 📝 **Generate Notes**: AI creates summaries and insights
-- 🎙️ **Create Podcasts**: Turn research into professional audio content
-- 🔍 **Search**: Full-text and semantic search across all content
-- ⚙️ **Transform**: Extract insights, analyze themes, create summaries
-
-## Why Open Notebook?
-
-| Feature | Open Notebook | Notebook LM |
-|---------|---|---|
-| **Privacy** | Self-hosted, your control | Cloud, Google's servers |
-| **AI Choice** | 17+ providers | Google's models only |
-| **Podcast Speakers** | 1-4 customizable | 2 only |
-| **Cost** | Completely free | Free (but your data) |
-| **Offline** | Yes  | No |
+| | Open Notebook | Google Notebook LM |
+|---|---|---|
+| **Where it runs** | Your machine or server | Google's cloud |
+| **AI models** | 20+ providers, cloud or local | Google's models |
+| **Podcast speakers** | 1–4, configurable profiles | Google's formats |
+| **Cost** | Free software; you pay your AI provider (nothing with local models) | Free tier and subscriptions |
+| **Offline** | Yes, with local models | No |
 
 ## Prerequisites
 
-- **Docker**: All paths use Docker (free)
-- **AI Provider**: Either a cloud API key OR use free local models (Ollama)
+- **Docker** for the quick starts. [From source](../1-INSTALLATION/from-source.md) and [Windows native](../1-INSTALLATION/windows-native.md) installs don't need Docker for the app itself.
+- **An AI provider**: a cloud API key, or a local model server such as Ollama.
 
 ---
 
-## Next Steps
-
-1. Pick your path above ⬆️
-2. Follow the 5-minute quick start
-3. Create your first notebook
-4. Start uploading documents!
-
----
-
-**Need Help?** Join our [Discord community](https://discord.gg/37XJPXfz2w) or see [Full Documentation](../index.md).
+**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w) or see the [full documentation](../index.md).
diff --git a/docs/0-START-HERE/quick-start-cloud.md b/docs/0-START-HERE/quick-start-cloud.md
index 98badac1..8f83ad69 100644
--- a/docs/0-START-HERE/quick-start-cloud.md
+++ b/docs/0-START-HERE/quick-start-cloud.md
@@ -1,213 +1,87 @@
 # Quick Start - Cloud AI Providers (5 minutes)
 
-Get Open Notebook running with **Anthropic, Google, Groq, or other cloud providers**. Same simplicity as OpenAI, with more choices.
+Run Open Notebook with a cloud AI provider such as **OpenAI, Anthropic, Google, Mistral, Groq or OpenRouter**. You need Docker and an API key.
 
 ## Prerequisites
 
-1. **Docker Desktop** installed
-   - [Download here](https://www.docker.com/products/docker-desktop/)
-   - Already have it? Skip to step 2
+1. **Docker with Compose v2**: [Docker Desktop](https://www.docker.com/products/docker-desktop/) on macOS and Windows; Docker Engine with the Compose plugin on Linux.
+2. **An API key** from your provider, for example:
+   - [OpenAI](https://platform.openai.com/api-keys)
+   - [Anthropic](https://console.anthropic.com/settings/keys)
+   - [Google AI Studio](https://aistudio.google.com/app/apikey)
+   - [Mistral](https://console.mistral.ai/api-keys/)
+   - [Groq](https://console.groq.com/keys)
+   - [OpenRouter](https://openrouter.ai/keys)
 
-2. **API Key** from your chosen provider:
-   - **OpenRouter** (100+ models, one key): https://openrouter.ai/keys
-   - **Anthropic (Claude)**: https://console.anthropic.com/
-   - **Google (Gemini)**: https://aistudio.google.com/
-   - **Groq** (fast, free tier): https://console.groq.com/
-   - **Mistral**: https://console.mistral.ai/
-   - **DeepSeek**: https://platform.deepseek.com/
-   - **xAI (Grok)**: https://console.x.ai/
+   Other providers are listed in [AI Providers](../4-AI-PROVIDERS/index.md#supported-providers).
 
-## Step 1: Create Configuration (1 min)
+> **Pick a provider that does embeddings, or add a second one.** Open Notebook needs a language model for chat **and** an embedding model for search. OpenAI, Google AI, Mistral AI and OpenRouter offer both. Anthropic, DeepSeek and Groq offer no embedding models, so pair them with one that does (for example OpenAI, Google AI, Mistral AI or Voyage AI).
 
-Create a new folder `open-notebook` and add this file:
-
-**docker-compose.yml**:
-```yaml
-services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
-    ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-    # Removed the healthcheck because the v2 image is too minimal to run wget/curl
-    restart: always
-
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    ports:
-      - "8502:8502"  # Web UI
-      - "5055:5055"  # API
-    environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=password
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
+## Step 1: Download and configure (1 min)
 
+```bash
+mkdir open-notebook
+cd open-notebook
+curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
 ```
 
-**Edit the file:**
-- Replace `change-me-to-a-secret-string` with your own secret (any string works)
+(On Windows PowerShell, use `curl.exe`.)
 
----
+Open `docker-compose.yml` and replace `change-me-to-a-secret-string` in the `OPEN_NOTEBOOK_ENCRYPTION_KEY` line with a long random secret you generate yourself, for example with `openssl rand -hex 32` (Windows: see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value. Keep it: if it changes, saved API keys can't be decrypted.
 
-## Step 2: Start Services (1 min)
+> **Shared network or server?** The shipped file publishes the UI (`8502`) and API (`5055`) on all network interfaces, and there is no password by default. If other devices can reach this machine, do one of these before starting: change the two `open_notebook` port lines to `"127.0.0.1:8502:8502"` and `"127.0.0.1:5055:5055"`, or add `- OPEN_NOTEBOOK_PASSWORD=your-password` to its `environment:` block.
 
-Open terminal in your `open-notebook` folder:
+## Step 2: Start (1 min)
 
 ```bash
 docker compose up -d
 ```
 
-Wait 15-20 seconds for services to start.
+Wait about 30 seconds, then open **http://localhost:8502**.
 
----
+## Step 3: Connect your provider and chat (3 min)
 
-## Step 3: Access Open Notebook (instant)
+Follow **[Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider)** with these values:
 
-Open your browser:
-```
-http://localhost:8502
-```
+| Field | Value |
+|---|---|
+| Provider | The one you have a key for (for example **OpenAI**) |
+| API Key | Your key |
+| Base URL | Leave empty |
+| Models to add | At least one **Language** model and one **Embedding** model (from this provider or a second one) |
+| Defaults | Click **Auto-assign Defaults** |
 
-You should see the Open Notebook interface!
+The last step of that page creates a notebook, adds a text source and sends a chat message. When you get an answer, you're set up.
 
----
+## Verification checklist
 
-## Step 4: Configure Your AI Provider (1 min)
+- [ ] `docker compose ps` shows `surrealdb` and `open_notebook` running
+- [ ] http://localhost:8502 opens
+- [ ] **Test** on your provider configuration shows a green check
+- [ ] **Default Model Assignments** has a Chat Model and an Embedding Model
+- [ ] A chat message gets an answer
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select your provider (e.g., Anthropic, Google, Groq, OpenRouter)
-4. Give it a name, paste your API key
-5. Click **Save**
-6. Click **Test Connection** — should show success
-7. Click **Discover Models** → **Register Models**
+## Optional: podcasts and audio
 
-Your provider's models are now available!
-
-> **Multiple providers**: You can add credentials for as many providers as you want. Just repeat this step for each provider.
-
----
-
-## Step 5: Configure Your Model (1 min)
-
-1. In the sidebar, open **Manage** → **Models**
-2. Select your provider's model:
-
-| Provider | Recommended Model | Notes |
-|----------|-------------------|-------|
-| **OpenRouter** | `anthropic/claude-3.5-sonnet` | Access 100+ models |
-| **Anthropic** | `claude-3-5-sonnet-latest` | Best reasoning |
-| **Google** | `gemini-3.5-flash` | Large context, fast |
-| **Groq** | `llama-3.3-70b-versatile` | Ultra-fast |
-| **Mistral** | `mistral-large-latest` | Strong European option |
-
-3. Click **Save**
-
----
-
-## Step 6: Create Your First Notebook (1 min)
-
-1. Click **New Notebook**
-2. Name: "My Research"
-3. Click **Create**
-
----
-
-## Step 7: Add Content & Chat (2 min)
-
-1. Click **Add Source**
-2. Choose **Web Link**
-3. Paste any article URL
-4. Wait for processing
-5. Go to **Chat** and ask questions!
-
----
-
-## Verification Checklist
-
-- [ ] Docker is running
-- [ ] You can access `http://localhost:8502`
-- [ ] Provider credential is configured and tested
-- [ ] Models are registered
-- [ ] You created a notebook
-- [ ] Chat works
-
-**All checked?** You're ready to research!
-
----
-
-## Provider Comparison
-
-| Provider | Speed | Quality | Context | Cost |
-|----------|-------|---------|---------|------|
-| **OpenRouter** | Varies | Varies | Varies | Varies (100+ models) |
-| **Anthropic** | Medium | Excellent | 200K | $$$ |
-| **Google** | Fast | Very Good | 1M+ | $$ |
-| **Groq** | Ultra-fast | Good | 128K | $ (free tier) |
-| **Mistral** | Fast | Good | 128K | $$ |
-| **DeepSeek** | Medium | Very Good | 64K | $ |
-
----
+- **Podcasts** need a **Text-to-Speech Model**. Add a TTS model (OpenAI, Google AI, Mistral AI, xAI, MiniMax, ElevenLabs and others offer them) and pick it under **Default Model Assignments**. Auto-assign doesn't set it.
+- **Audio and video sources** need a **Speech-to-Text Model** (OpenAI, Google AI, Groq, Mistral AI, ElevenLabs, Deepgram and others).
 
 ## Troubleshooting
 
-### "Model not found" Error
+**Test shows a red cross.** Check the key on the provider's website and that the account has credit. Edit the configuration to fix the key.
 
-1. Go to **Manage** → **Models**
-2. Click **Test Connection** on your credential
-3. If valid, click **Discover Models** → **Register Models**
-4. Check you have credits/access for the model
+**A model you want isn't in the list.** Type its exact name in the search box of the **Discover Models** dialog and add it as a custom model.
 
-### "Cannot connect to server"
+**Chat fails with "No model configured…".** A default model is empty; see [Set default models](../4-AI-PROVIDERS/index.md#4-set-default-models).
 
-```bash
-docker ps  # Check all services running
-docker compose logs  # View logs
-docker compose restart  # Restart everything
-```
+**Port 8502 is in use.** In `docker-compose.yml` change `"8502:8502"` to `"8503:8502"`, run `docker compose up -d` and open http://localhost:8503.
 
-### Provider-Specific Issues
+**Anything else.** `docker compose logs -f open_notebook` shows the UI, API and worker logs. See [Quick Fixes](../6-TROUBLESHOOTING/quick-fixes.md).
 
-**Anthropic**: Ensure key starts with `sk-ant-`
-**Google**: Use AI Studio key, not Cloud Console
-**Groq**: Free tier has rate limits; upgrade if needed
+## Next steps
 
----
+- [Docker Compose guide](../1-INSTALLATION/docker-compose.md): changing settings, backups, updates, access from other machines
+- [User Guide](../3-USER-GUIDE/index.md): sources, chat, notes, podcasts
+- Before exposing Open Notebook to a network, set a password: [Security](../5-CONFIGURATION/security.md)
 
-## Cost Estimates
-
-Approximate costs per 1K tokens:
-
-| Provider | Input | Output |
-|----------|-------|--------|
-| Anthropic (Sonnet) | $0.003 | $0.015 |
-| Google (Flash) | $0.0001 | $0.0004 |
-| Groq (Llama 70B) | Free tier available | - |
-| Mistral (Large) | $0.002 | $0.006 |
-
-Check provider websites for current pricing.
-
----
-
-## Next Steps
-
-1. **Add Your Content**: PDFs, web links, documents
-2. **Explore Features**: Podcasts, transformations, search
-3. **Full Documentation**: [See all features](../3-USER-GUIDE/index.md)
-
----
-
-**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w)!
+**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w).
diff --git a/docs/0-START-HERE/quick-start-external-ollama.md b/docs/0-START-HERE/quick-start-external-ollama.md
index 188f3da2..73da3dd7 100644
--- a/docs/0-START-HERE/quick-start-external-ollama.md
+++ b/docs/0-START-HERE/quick-start-external-ollama.md
@@ -1,214 +1,131 @@
 # Quick Start - External Ollama
 
-Run Open Notebook with a **separately installed Ollama** (not via Docker). This avoids Docker running the Ollama service while you use your own local Ollama installation.
+Run Open Notebook in Docker and connect it to an **Ollama you installed directly on your computer** (not in Docker). Useful when you already use Ollama, or want its native GPU support without Docker GPU passthrough.
+
+If you don't have Ollama yet and want everything in Docker, use the [Local Quick Start](quick-start-local.md).
 
 ## Prerequisites
 
-1. **Docker Desktop** installed (for SurrealDB and Open Notebook)
-   - [Download here](https://www.docker.com/products/docker-desktop/)
+1. **Docker with Compose v2**: [Docker Desktop](https://www.docker.com/products/docker-desktop/) on macOS and Windows; Docker Engine with the Compose plugin on Linux.
+2. **Ollama** installed from [ollama.com](https://ollama.com/download). Check with `ollama --version`.
 
-2. **Ollama** installed separately
-   - [Download here](https://ollama.ai/)
-   - Verify: run `ollama --version`
+## Step 1: Download models (2-5 min)
 
-3. **Models downloaded** in Ollama:
-   ```bash
-   ollama pull mistral
-   ollama pull nomic-embed-text
-   ```
-
----
-
-## Step 1: Start Ollama (1 min)
-
-Start the Ollama server:
+Open Notebook needs a chat model and an embedding model:
 
 ```bash
-# Default: runs on http://localhost:11434
-ollama serve
+ollama pull qwen3
+ollama pull nomic-embed-text
 ```
 
-Keep this terminal open. Ollama will run in the background.
+On a smaller machine, use `llama3.2` or `gemma3:1b` instead of `qwen3`.
+
+## Step 2: Let containers reach Ollama
+
+Open Notebook runs in a container, where `localhost` means the container itself. It reaches your computer's Ollama through the name `host.docker.internal`.
+
+**macOS and Windows (Docker Desktop):** Docker Desktop forwards `host.docker.internal` to your computer, so Ollama's default setup usually works as is; try it first. If the connection test in Step 5 fails, make Ollama listen on all interfaces: on macOS run `launchctl setenv OLLAMA_HOST "0.0.0.0:11434"`, then quit and reopen the Ollama app (this setting is lost when you log out or reboot, so run it again after each login, or follow Ollama's FAQ for a permanent setup); on Windows add a user environment variable `OLLAMA_HOST` = `0.0.0.0:11434`, then quit and restart Ollama. See Ollama's [documentation](https://github.com/ollama/ollama/tree/main/docs) (FAQ, "How do I configure Ollama server?").
+
+**Linux:** Ollama listens only on `127.0.0.1` by default, which containers can't reach. Make it listen on all interfaces. If Ollama runs as the systemd service (the default for the Linux installer):
 
-**Optional: Start Ollama on a custom port or network interface:**
 ```bash
-OLLAMA_HOST=0.0.0.0:11434 ollama serve
+sudo systemctl edit ollama
 ```
 
----
+Add these lines, save, and restart:
 
-## Step 2: Create Configuration (1 min)
+```ini
+[Service]
+Environment="OLLAMA_HOST=0.0.0.0:11434"
+```
 
-Create a new folder `open-notebook-external-ollama` and add these files:
+```bash
+sudo systemctl restart ollama
+```
+
+If you run Ollama by hand, start it with `OLLAMA_HOST=0.0.0.0:11434 ollama serve`.
+
+**On any platform,** `OLLAMA_HOST=0.0.0.0` exposes Ollama's API, which has no authentication, on every network interface. Allow port 11434 only from this computer and its Docker networks (for example with your firewall), never from untrusted networks.
+
+## Step 3: Download and configure Open Notebook (1 min)
+
+```bash
+mkdir open-notebook
+cd open-notebook
+curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
+```
+
+(On Windows PowerShell, use `curl.exe`.)
+
+Open `docker-compose.yml` and replace `change-me-to-a-secret-string` in the `OPEN_NOTEBOOK_ENCRYPTION_KEY` line with a long random secret you generate yourself, for example with `openssl rand -hex 32` (Windows: see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
+
+> **Shared network or server?** The shipped file publishes the UI (`8502`) and API (`5055`) on all network interfaces, and there is no password by default. If other devices can reach this machine, do one of these before starting: change the two `open_notebook` port lines to `"127.0.0.1:8502:8502"` and `"127.0.0.1:5055:5055"`, or add `- OPEN_NOTEBOOK_PASSWORD=your-password` to its `environment:` block.
+
+Then create `docker-compose.override.yml` in the same folder. On Linux this is what makes `host.docker.internal` resolve; on Docker Desktop it's harmless:
 
-**docker-compose.yml**:
 ```yaml
 services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
-    user: root
-    ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-
   open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    ports:
-      - "8502:8502"  # Web UI (React frontend)
-      - "5055:5055"  # API (required!)
-    environment:
-      # Encryption key for credential storage (required)
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-
-      # Database (required)
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=password
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
-
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
 ```
 
-**Note:** No Ollama service in Docker — we use the host's Ollama.
-
----
-
-## Step 3: Connect Open Notebook to Host Ollama (1 min)
-
-When Open Notebook runs inside Docker, it cannot reach `localhost:11434` on your host directly. Use the special hostname:
-
-| Host OS | Ollama URL in Open Notebook |
-|---------|----------------------------|
-| Linux | `http://host.containers.internal:11434` |
-| macOS | `http://host.docker.internal:11434` |
-| Windows | `http://host.docker.internal:11434` |
-
----
-
-## Step 4: Start Open Notebook (1 min)
-
-Open terminal in your `open-notebook-external-ollama` folder:
+## Step 4: Start (1 min)
 
 ```bash
 docker compose up -d
 ```
 
-Wait 10-15 seconds for services to start.
+## Step 5: Connect Ollama and chat (3 min)
 
----
+Open **http://localhost:8502** and follow **[Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider)** with these values:
 
-## Step 5: Configure Ollama Provider (1 min)
+| Field | Value |
+|---|---|
+| Provider | **Ollama** |
+| API Key | Leave empty |
+| Base URL | `http://host.docker.internal:11434` |
+| Models to add | Your chat model as **Language** (listed as `qwen3:latest`), then `nomic-embed-text:latest` as **Embedding** |
+| Defaults | Click **Auto-assign Defaults** |
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Ollama**
-4. Give it a name (e.g., "Local Ollama")
-5. Enter the base URL:
-   - **Windows/macOS:** `http://host.docker.internal:11434`
-   - **Linux:** `http://host.containers.internal:11434`
-6. Click **Save**
-7. Click **Test Connection** — should show success
-8. Click **Discover Models** → **Register Models**
+The last step of that page creates a notebook, adds a text source and sends a chat message.
 
----
+## Verification checklist
 
-## Step 6: Configure Models (1 min)
-
-1. Go to **Manage** → **Models**
-2. Set:
-   - **Language Model**: `ollama/mistral` (or whichever model you downloaded)
-   - **Embedding Model**: `ollama/nomic-embed-text`
-3. Click **Save**
-
----
-
-## Step 7: Access Open Notebook (instant)
-
-Open your browser:
-```
-http://localhost:8502
-```
-
----
-
-## Verification Checklist
-
-- [ ] Ollama is running (`ollama serve` in terminal)
-- [ ] Docker is running
-- [ ] You can access `http://localhost:8502`
-- [ ] Ollama credential is configured with host URL and tested
-- [ ] Models are registered
-- [ ] Chat works
-
----
+- [ ] `ollama list` shows a chat model and `nomic-embed-text`
+- [ ] `docker compose ps` shows `surrealdb` and `open_notebook` running
+- [ ] **Test** on the Ollama configuration shows a green check
+- [ ] **Default Model Assignments** has a Chat Model and an Embedding Model
+- [ ] A chat message gets an answer
 
 ## Troubleshooting
 
-### "Connection failed" when testing Ollama credential
-
-1. Verify Ollama is running:
-   ```bash
-   curl http://localhost:11434/api/version
-   ```
-
-2. Check firewall allows local connections on port 11434
-
-3. For Windows/macOS, ensure `host.docker.internal` is reachable from inside the container:
-   ```bash
-   docker exec <open_notebook_container> curl http://host.docker.internal:11434/api/version
-   ```
-
-### Ollama not starting
+**Test shows a red cross.** Check from inside the container:
 
 ```bash
-# Check Ollama logs
-ollama list
-
-# Pull a model again
-ollama pull mistral
+docker compose exec open_notebook curl -s http://host.docker.internal:11434/api/version
 ```
 
-### "Address already in use" for SurrealDB
+- *Could not resolve host*: the `extra_hosts` override is missing, or you didn't run `docker compose up -d` after adding it.
+- *Connection refused*: Ollama is still listening on `127.0.0.1` only. Redo Step 2 (on macOS and Windows, apply the `OLLAMA_HOST` fallback). On Linux, check with `ss -ltn | grep 11434`; it should show `*:11434` or `0.0.0.0:11434`.
+- No answer at all: a firewall is blocking port 11434 between Docker and the host.
 
-```bash
-docker compose down
-docker compose up -d
-```
+**Responses are slow or time out.** See the timeouts section of the [Ollama guide](../5-CONFIGURATION/ollama.md).
 
----
+**Adding more models later.** Run `ollama pull <model>`, then click **Models** on the Ollama configuration again (it opens the **Discover Models** dialog) and add it.
 
-## Why External Ollama?
+## Ollama in Docker or on the host?
 
-| Approach | Ollama in Docker | Ollama External |
-|----------|-----------------|-----------------|
-| **Resource isolation** | Separated | Shares with host |
-| **GPU access** | Requires Docker GPU setup | Native GPU access |
-| **Model management** | Via `docker exec` | Via terminal directly |
-| **Memory usage** | Isolated from host | Shared with host apps |
+| | Ollama in Docker ([Local Quick Start](quick-start-local.md)) | Ollama on the host (this guide) |
+|---|---|---|
+| GPU | Needs Docker GPU setup | Uses the GPU natively (including Apple Silicon) |
+| Managing models | `docker compose exec ollama ollama ...` | `ollama ...` |
+| Networking | Works out of the box | Needs `extra_hosts`; Linux (and sometimes Docker Desktop) needs `OLLAMA_HOST` |
 
-**External Ollama** is recommended if you:
-- Already have Ollama installed and configured
-- Want GPU access without Docker GPU passthrough complexity
-- Prefer managing models via command line directly
+## Next steps
 
----
+- [Ollama guide](../5-CONFIGURATION/ollama.md): model choices, networking, timeouts
+- [Docker Compose guide](../1-INSTALLATION/docker-compose.md): settings, backups, updates
+- [User Guide](../3-USER-GUIDE/index.md)
 
-## Going Further
-
-- **Add more models**: Run `ollama pull <model>`, then re-discover from Open Notebook
-- **Check Ollama status**: `ollama list` shows downloaded models
-- **Customize Ollama**: Edit `~/.ollama/config.yaml` for advanced settings
-
----
-
-**Need Help?** Join our [Discord community](https://discord.gg/37XJPXfz2w)
+**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w).
diff --git a/docs/0-START-HERE/quick-start-local.md b/docs/0-START-HERE/quick-start-local.md
index c3e483d2..468e8dd2 100644
--- a/docs/0-START-HERE/quick-start-local.md
+++ b/docs/0-START-HERE/quick-start-local.md
@@ -1,308 +1,121 @@
-# Quick Start - Local & Private (5 minutes)
+# Quick Start - Local & Private (10 minutes)
 
-Get Open Notebook running with **100% local AI** using Ollama. No cloud API keys needed, completely private.
+Run Open Notebook and **Ollama** together in Docker. No cloud API keys: your content is processed by models on your machine, not sent to an AI provider. To keep the app itself private, make sure other devices can't reach it (see the note in Step 1).
 
-**Already have Ollama installed?** See [External Ollama Guide](quick-start-external-ollama.md) instead.
+**Already have Ollama installed on this computer?** Use the [External Ollama guide](quick-start-external-ollama.md) instead.
 
 ## Prerequisites
 
-1. **Docker Desktop** installed
-   - [Download here](https://www.docker.com/products/docker-desktop/)
-   - Already have it? Skip to step 2
+- **Docker with Compose v2**: [Docker Desktop](https://www.docker.com/products/docker-desktop/) on macOS and Windows; Docker Engine with the Compose plugin on Linux.
+- **8 GB of RAM or more.** Local models run on your CPU unless you set up GPU access, and small models are noticeably slower than cloud ones.
+- A few GB of disk for the models.
 
-2. **Local LLM** - Choose one:
-   - **Ollama** (recommended): [Download here](https://ollama.ai/)
-   - **LM Studio** (GUI alternative): [Download here](https://lmstudio.ai)
+## Step 1: Download and configure (1 min)
 
-## Step 1: Choose Your Setup (1 min)
+```bash
+mkdir open-notebook
+cd open-notebook
+curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
+```
 
-### Local Machine (Same Computer)
-Everything runs on your machine. Recommended for testing/learning.
+(On Windows PowerShell, use `curl.exe`.)
 
-### Remote Server (Raspberry Pi, NAS, Cloud VM)
-Run on a different computer, access from another. Needs network configuration.
+Open `docker-compose.yml` and replace `change-me-to-a-secret-string` in the `OPEN_NOTEBOOK_ENCRYPTION_KEY` line with a long random secret you generate yourself, for example with `openssl rand -hex 32` (Windows: see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
 
----
+> **Shared network or server?** The shipped file publishes the UI (`8502`) and API (`5055`) on all network interfaces, and there is no password by default. If other devices can reach this machine, do one of these before starting: change the two `open_notebook` port lines to `"127.0.0.1:8502:8502"` and `"127.0.0.1:5055:5055"`, or add `- OPEN_NOTEBOOK_PASSWORD=your-password` to its `environment:` block.
 
-## Step 2: Create Configuration (1 min)
+## Step 2: Add the Ollama service (1 min)
 
-Create a new folder `open-notebook-local` and add this file:
+Create a file named `docker-compose.override.yml` in the same folder. Docker Compose merges it with `docker-compose.yml` automatically:
 
-**docker-compose.yml**:
 ```yaml
 services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
-    user: root
-    ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    ports:
-      - "8502:8502"  # Web UI (React frontend)
-      - "5055:5055"  # API (required!)
-    environment:
-      # Encryption key for credential storage (required)
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-
-      # Database (required)
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=password
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-
-      # Ollama (required when running Ollama via Docker, as in this compose file)
-      - OLLAMA_API_BASE=http://ollama:11434
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
-
   ollama:
     image: ollama/ollama:latest
-    ports:
-      - "11434:11434"
     volumes:
       - ./ollama_models:/root/.ollama
     restart: always
-    # Optional: set GPU support if available
-    #deploy:
-    #  resources:
-    #    reservations:
-    #      devices:
-    #        - driver: nvidia
-    #          count: 1
-    #          capabilities: [gpu]
-
 ```
 
-**Edit the file:**
-- Replace `change-me-to-a-secret-string` with your own secret (any string works)
+For NVIDIA GPU access, see [GPU acceleration](../5-CONFIGURATION/ollama.md#gpu-acceleration) in the Ollama guide.
 
----
-
-## Step 3: Start Services (1 min)
-
-Open terminal in your `open-notebook-local` folder:
+## Step 3: Start (1 min)
 
 ```bash
 docker compose up -d
 ```
 
-Wait 10-15 seconds for all services to start.
+## Step 4: Download models (2-5 min)
 
----
-
-## Step 4: Download a Model (2-3 min)
-
-Ollama needs at least one language model. Pick one:
+Open Notebook needs a **chat model** and an **embedding model**. Nothing downloads them automatically:
 
 ```bash
-# Fastest & smallest (recommended for testing)
-docker exec open-notebook-local-ollama-1 ollama pull mistral
-
-# OR: Better quality but slower
-docker exec open-notebook-local-ollama-1 ollama pull neural-chat
-
-# OR: Even better quality, more VRAM needed
-docker exec open-notebook-local-ollama-1 ollama pull llama2
+docker compose exec ollama ollama pull qwen3
+docker compose exec ollama ollama pull nomic-embed-text
 ```
 
-This downloads the model (will take 1-5 minutes depending on your internet).
+`qwen3` is a capable general model of about 5 GB. On a smaller machine, try `llama3.2` (about 2 GB) or `gemma3:1b` instead. Browse more at [ollama.com/library](https://ollama.com/library).
 
----
+Check what's installed with `docker compose exec ollama ollama list`.
 
-## Step 5: Access Open Notebook (instant)
+## Step 5: Connect Ollama and chat (3 min)
 
-Open your browser:
-```
-http://localhost:8502
-```
+Open **http://localhost:8502** and follow **[Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider)** with these values:
 
-You should see the Open Notebook interface.
+| Field | Value |
+|---|---|
+| Provider | **Ollama** |
+| API Key | Leave empty |
+| Base URL | `http://ollama:11434` |
+| Models to add | Your chat model as **Language** (Ollama lists it as `qwen3:latest`), then `nomic-embed-text:latest` as **Embedding** |
+| Defaults | Click **Auto-assign Defaults** |
 
----
+The last step of that page creates a notebook, adds a text source and sends a chat message. The first answer can take a while as Ollama loads the model.
 
-## Step 6: Configure Ollama Provider (1 min)
+## Verification checklist
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Ollama**
-4. Give it a name (e.g., "Local Ollama")
-5. Enter the base URL: `http://ollama:11434`
-6. Click **Save**
-7. Click **Test Connection** — should show success
-8. Click **Discover Models** → **Register Models**
-
----
-
-## Step 7: Configure Local Model (1 min)
-
-1. Go to **Manage** → **Models**
-2. Set:
-   - **Language Model**: `ollama/mistral` (or whichever model you downloaded)
-   - **Embedding Model**: `ollama/nomic-embed-text` (auto-downloads if missing)
-3. Click **Save**
-
----
-
-## Step 8: Create Your First Notebook (1 min)
-
-1. Click **New Notebook**
-2. Name: "My Private Research"
-3. Click **Create**
-
----
-
-## Step 9: Add Local Content (1 min)
-
-1. Click **Add Source**
-2. Choose **Text**
-3. Paste some text or a local document
-4. Click **Add**
-
----
-
-## Step 10: Chat With Your Content (1 min)
-
-1. Go to **Chat**
-2. Type: "What did you learn from this?"
-3. Click **Send**
-4. Watch as the local Ollama model responds!
-
----
-
-## Verification Checklist
-
-- [ ] Docker is running
-- [ ] You can access `http://localhost:8502`
-- [ ] Ollama credential is configured and tested
-- [ ] Models are registered
-- [ ] You created a notebook
-- [ ] Chat works with local model
-
-**All checked?** You have a completely **private, offline** research assistant!
-
----
-
-## Advantages of Local Setup
-
-- **No API costs** - Free forever
-- **No internet required** - True offline capability
-- **Privacy first** - Your data never leaves your machine
-- **No subscriptions** - No monthly bills
-
-**Trade-off:** Slower than cloud models (depends on your CPU/GPU)
-
----
+- [ ] `docker compose ps` shows `surrealdb`, `open_notebook` and `ollama` running
+- [ ] `docker compose exec ollama ollama list` shows a chat model and `nomic-embed-text`
+- [ ] **Test** on the Ollama configuration shows a green check
+- [ ] **Default Model Assignments** has a Chat Model and an Embedding Model
+- [ ] A chat message gets an answer
 
 ## Troubleshooting
 
-### "ollama: command not found"
+**Test shows a red cross.** The base URL must be `http://ollama:11434` (the service name), not `localhost`: inside the Open Notebook container, `localhost` is the container itself. Also check that you pulled at least one model; the test uses one.
 
-Docker image name might be different:
-```bash
-docker ps  # Find the Ollama container name
-docker exec <container_name> ollama pull mistral
-```
+**Responses are very slow or time out.** Small models on CPU are slow. Try a smaller model, enable GPU access, or set `OPEN_NOTEBOOK_WORKER_MAX_TASKS=1` so background jobs don't compete with chat. Timeouts are covered in the [Ollama guide](../5-CONFIGURATION/ollama.md).
 
-### Model Download Stuck
+**Adding more models later.** Run `docker compose exec ollama ollama pull <model>`, then click **Models** on the Ollama configuration again (it opens the **Discover Models** dialog) and add it.
 
-Check internet connection and restart:
-```bash
-docker compose restart ollama
-```
+**Anything else.** `docker compose logs -f open_notebook` and `docker compose logs -f ollama`. See [Quick Fixes](../6-TROUBLESHOOTING/quick-fixes.md).
 
-Then retry the model pull command.
+## Podcasts and audio, locally
 
-### "Address already in use" Error
+Ollama provides chat and embedding models only. For podcasts (text-to-speech) and audio/video transcription (speech-to-text) without the cloud, run a local speech server and add it as **OpenAI Compatible**: see [Local TTS](../5-CONFIGURATION/local-tts.md) and [Local STT](../5-CONFIGURATION/local-stt.md). You can also mix: local chat with a cloud TTS provider.
 
-```bash
-docker compose down
-docker compose up -d
-```
+## LM Studio instead of Ollama
 
-### Low Performance
+LM Studio runs on your computer, outside Docker:
 
-Check if GPU is available:
-```bash
-# Show available GPUs
-docker exec open-notebook-local-ollama-1 ollama ps
+1. In LM Studio, download a chat model and an embedding model and start the local server (default port 1234).
+2. Skip Steps 2 and 4 above. On Linux, add this to `docker-compose.override.yml` so the container can reach your computer:
 
-# Enable GPU in docker-compose.yml
-```
+   ```yaml
+   services:
+     open_notebook:
+       extra_hosts:
+         - "host.docker.internal:host-gateway"
+   ```
 
-Then restart: `docker compose restart ollama`
+3. [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) using **OpenAI Compatible**, with Base URL `http://host.docker.internal:1234/v1`.
 
-### Adding More Models
+More in [OpenAI-Compatible Providers](../5-CONFIGURATION/openai-compatible.md).
 
-```bash
-# List available models
-docker exec open-notebook-local-ollama-1 ollama list
+## Next steps
 
-# Pull additional model
-docker exec open-notebook-local-ollama-1 ollama pull neural-chat
-```
+- [Ollama guide](../5-CONFIGURATION/ollama.md): model choices, GPU, networking, timeouts
+- [Docker Compose guide](../1-INSTALLATION/docker-compose.md): settings, backups, updates
+- [User Guide](../3-USER-GUIDE/index.md)
 
----
-
-## Next Steps
-
-**Now that it's running:**
-
-1. **Add Your Own Content**: PDFs, documents, articles (see 3-USER-GUIDE)
-2. **Explore Features**: Podcasts, transformations, search
-3. **Full Documentation**: [See all features](../3-USER-GUIDE/index.md)
-4. **Scale Up**: Deploy to a server with better hardware for faster responses
-5. **Benchmark Models**: Try different models to find the speed/quality tradeoff you prefer
-
-## Alternative: Using LM Studio Instead of Ollama
-
-**Prefer a GUI?** LM Studio is easier for non-technical users:
-
-1. Download LM Studio: https://lmstudio.ai
-2. Open the app, download a model from the library
-3. Go to "Local Server" tab, start server (port 1234)
-4. In Open Notebook, go to **Manage** → **Models**
-5. Click **Add Credential** → Select **OpenAI-Compatible**
-6. Enter base URL: `http://host.docker.internal:1234/v1`
-7. Enter API key: `lm-studio` (placeholder)
-8. Click **Save**, then **Test Connection**
-9. Configure in Manage → Models → Select your LM Studio model
-
-**Note**: LM Studio runs outside Docker, use `host.docker.internal` to connect.
-
----
-
-## Going Further
-
-- **Switch models**: Change in Manage → Models anytime
-- **Add more models**:
-  - Ollama: Run `ollama pull <model>`, then re-discover models from the credential
-  - LM Studio: Download from the app library
-- **Deploy to server**: Same docker-compose.yml works anywhere
-- **Use cloud hybrid**: Keep some local models, add cloud provider credentials for complex tasks
-
----
-
-## Common Model Choices
-
-| Model | Speed | Quality | VRAM | Best For |
-|-------|-------|---------|------|----------|
-| **mistral** | Fast | Good | 4GB | Testing, general use |
-| **neural-chat** | Medium | Better | 6GB | Balanced, recommended |
-| **llama2** | Slow | Best | 8GB+ | Complex reasoning |
-| **phi** | Very Fast | Fair | 2GB | Minimal hardware |
-
----
-
-**Need Help?** Join our [Discord community](https://discord.gg/37XJPXfz2w) - many users run local setups!
+**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w).
diff --git a/docs/0-START-HERE/quick-start-openai.md b/docs/0-START-HERE/quick-start-openai.md
index 2717c65e..c63885c2 100644
--- a/docs/0-START-HERE/quick-start-openai.md
+++ b/docs/0-START-HERE/quick-start-openai.md
@@ -1,197 +1,5 @@
-# Quick Start - OpenAI (5 minutes)
+# Quick Start - OpenAI
 
-Get Open Notebook running with OpenAI's GPT models. Fast, powerful, and simple.
+This guide was merged into the **[Cloud Providers Quick Start](quick-start-cloud.md)**, which covers OpenAI and every other cloud provider with the same steps.
 
-## Prerequisites
-
-1. **Docker Desktop** installed
-   - [Download here](https://www.docker.com/products/docker-desktop/)
-   - Already have it? Skip to step 2
-
-2. **OpenAI API Key** (required)
-   - Go to https://platform.openai.com/api-keys
-   - Create account → Create new secret key
-   - Add at least $5 in credits to your account
-   - Copy the key (starts with `sk-`)
-
-## Step 1: Create Configuration (1 min)
-
-Create a new folder `open-notebook` and add this file:
-
-**docker-compose.yml**:
-```yaml
-services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    command: start --user root --pass password rocksdb:/mydata/mydatabase.db
-    ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    ports:
-      - "8502:8502"  # Web UI
-      - "5055:5055"  # API
-    environment:
-      # Encryption key for credential storage (required)
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-
-      # Database (required)
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=root
-      - SURREAL_PASSWORD=password
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
-
-```
-
-**Edit the file:**
-- Replace `change-me-to-a-secret-string` with your own secret (any string works)
-
----
-
-## Step 2: Start Services (1 min)
-
-Open terminal in your `open-notebook` folder:
-
-```bash
-docker compose up -d
-```
-
-Wait 15-20 seconds for services to start.
-
----
-
-## Step 3: Access Open Notebook (instant)
-
-Open your browser:
-```
-http://localhost:8502
-```
-
-You should see the Open Notebook interface!
-
----
-
-## Step 4: Configure Your OpenAI Provider (1 min)
-
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **OpenAI**
-4. Give it a name (e.g., "My OpenAI Key")
-5. Paste your OpenAI API key
-6. Click **Save**
-7. Click **Test Connection** — should show success
-8. Click **Discover Models** → **Register Models**
-
-Your OpenAI models are now available!
-
----
-
-## Step 5: Create Your First Notebook (1 min)
-
-1. Click **New Notebook**
-2. Name: "My Research"
-3. Click **Create**
-
----
-
-## Step 6: Add a Source (1 min)
-
-1. Click **Add Source**
-2. Choose **Web Link**
-3. Paste: `https://en.wikipedia.org/wiki/Artificial_intelligence`
-4. Click **Add**
-5. Wait for processing (30-60 seconds)
-
----
-
-## Step 7: Chat With Your Content (1 min)
-
-1. Go to **Chat**
-2. Type: "What is artificial intelligence?"
-3. Click **Send**
-4. Watch as GPT responds with information from your source!
-
----
-
-## Verification Checklist
-
-- [ ] Docker is running
-- [ ] You can access `http://localhost:8502`
-- [ ] OpenAI credential is configured and tested
-- [ ] You created a notebook
-- [ ] You added a source
-- [ ] Chat works
-
-**All checked?** You have a fully working AI research assistant!
-
----
-
-## Using Different Models
-
-In your notebook, go to **Manage** → **Models** to choose:
-- `gpt-4o` - Best quality (recommended)
-- `gpt-4o-mini` - Fast and cheap (good for testing)
-
----
-
-## Troubleshooting
-
-### "Port 8502 already in use"
-
-Change the port in docker-compose.yml:
-```yaml
-ports:
-  - "8503:8502"  # Use 8503 instead
-```
-
-Then access at `http://localhost:8503`
-
-### "API key not working"
-
-1. Go to **Manage** → **Models**
-2. Click **Test Connection** on your OpenAI credential
-3. If it fails, verify your key at https://platform.openai.com
-4. Delete the credential and create a new one with the correct key
-
-### "Cannot connect to server"
-
-```bash
-docker ps  # Check all services running
-docker compose logs  # View logs
-docker compose restart  # Restart everything
-```
-
----
-
-## Next Steps
-
-1. **Add Your Own Content**: PDFs, web links, documents
-2. **Explore Features**: Podcasts, transformations, search
-3. **Full Documentation**: [See all features](../3-USER-GUIDE/index.md)
-
----
-
-## Cost Estimate
-
-OpenAI pricing (approximate):
-- **Conversation**: $0.01-0.10 per 1K tokens
-- **Embeddings**: $0.02 per 1M tokens
-- **Typical usage**: $1-5/month for light use, $20-50/month for heavy use
-
-Check https://openai.com/pricing for current rates.
-
----
-
-**Need help?** Join our [Discord community](https://discord.gg/37XJPXfz2w)!
+For OpenAI, pick **OpenAI** when you connect a provider and add one **Language** model and one **Embedding** model (for example `text-embedding-3-small`). OpenAI also offers text-to-speech and speech-to-text models for podcasts and audio sources.
diff --git a/docs/1-INSTALLATION/docker-compose.md b/docs/1-INSTALLATION/docker-compose.md
index cdc1d737..d0e7bd8b 100644
--- a/docs/1-INSTALLATION/docker-compose.md
+++ b/docs/1-INSTALLATION/docker-compose.md
@@ -1,374 +1,269 @@
 # Docker Compose Installation (Recommended)
 
-Multi-container setup with separate services. **Best for most users.**
+This is the standard way to run Open Notebook. It uses the [`docker-compose.yml`](../../docker-compose.yml) in the root of the repository, which starts two services:
 
-> **Alternative Registry:** All images are available on both Docker Hub (`lfnovo/open_notebook`) and GitHub Container Registry (`ghcr.io/lfnovo/open-notebook`). Use GHCR if Docker Hub is blocked or you prefer GitHub-native workflows.
+| Service | What it runs | Ports | Data folder |
+|---|---|---|---|
+| `surrealdb` | The database | `8000` (bound to `127.0.0.1` only) | `./surreal_data` |
+| `open_notebook` | Web UI, REST API and the background worker | `8502` (UI), `5055` (API) | `./notebook_data` |
+
+The background worker runs inside the `open_notebook` container, so source processing, embeddings and podcasts work without extra services.
+
+> **Alternative registry:** images are published to Docker Hub (`lfnovo/open_notebook`) and GitHub Container Registry (`ghcr.io/lfnovo/open-notebook`). Swap the `image:` line if Docker Hub is blocked for you.
 
 ## Prerequisites
 
-- **Docker Desktop** installed ([Download](https://www.docker.com/products/docker-desktop/))
-- **5-10 minutes** of your time
-- **API key** for at least one AI provider (OpenAI recommended for beginners)
-
-## Step 1: Get docker-compose.yml (1 min)
-
-**Option A: Download from repository**
-```bash
-curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
-```
-
-**Option B: Use the official file from the repo**
-
-The official `docker-compose.yml` is in the root of our repository: [View on GitHub](https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml)
-
-Copy that file to your project folder.
-
-**Option C: Create manually**
-
-Create a file called `docker-compose.yml` with this content:
-
-```yaml
-services:
-  surrealdb:
-    image: surrealdb/surrealdb:v2
-    # Credentials default to root:root for a zero-config local setup. Before
-    # exposing this instance to a network, set SURREAL_USER / SURREAL_PASSWORD
-    # in a .env file (see .env.example) — they are applied here and to the
-    # open_notebook service below, so the two always stay in sync.
-    # List (exec) form so each interpolated value stays a single argument —
-    # a password containing spaces would otherwise be split into several.
-    command: ["start", "--log", "info", "--user", "${SURREAL_USER:-root}", "--pass", "${SURREAL_PASSWORD:-root}", "rocksdb:/mydata/mydatabase.db"]
-    user: root  # Required for bind mounts on Linux
-    ports:
-      # Bound to localhost only: the open_notebook service reaches this over
-      # the internal compose network regardless, so the host port is purely
-      # for local debugging (e.g. Surrealist, `surreal sql`). Exposing this
-      # on 0.0.0.0 would let anyone who can reach the host connect with the
-      # default root:root credentials.
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-    environment:
-      - SURREAL_EXPERIMENTAL_GRAPHQL=true
-    restart: always
-    pull_policy: always
-
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    ports:
-      - "8502:8502"  # Web UI
-      - "5055:5055"  # REST API
-    environment:
-      # REQUIRED: Change this to your own secret string
-      # This encrypts your API keys in the database
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-
-      # Database connection. SURREAL_USER / SURREAL_PASSWORD default to root:root
-      # for local use; override them in a .env file before exposing the instance
-      # (the same values configure the surrealdb service above).
-      - SURREAL_URL=ws://surrealdb:8000/rpc
-      - SURREAL_USER=${SURREAL_USER:-root}
-      - SURREAL_PASSWORD=${SURREAL_PASSWORD:-root}
-      - SURREAL_NAMESPACE=open_notebook
-      - SURREAL_DATABASE=open_notebook
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - surrealdb
-    restart: always
-    pull_policy: always
-```
-
-**Edit the file:**
-- Replace `change-me-to-a-secret-string` with your own secret (any string works, e.g., `my-super-secret-key-123`)
-- (Optional) To use database credentials other than the default `root:root`, create a `.env` file next to `docker-compose.yml` with `SURREAL_USER=...` and `SURREAL_PASSWORD=...` — both services pick them up automatically ([.env.example](https://github.com/lfnovo/open-notebook/blob/main/.env.example) shows the full format)
+- **Docker with Compose v2.** On macOS and Windows install [Docker Desktop](https://www.docker.com/products/docker-desktop/). On Linux install Docker Engine and the Compose plugin. Check with `docker compose version`.
+- **4 GB of free RAM** or more.
+- **An AI provider**: an API key from a cloud provider, or a local model server such as Ollama. You add it in the UI after installing.
 
 ---
 
-## Step 2: Start Services (2 min)
+## Step 1: Download the compose file
 
-Open terminal in the `open-notebook` folder:
+Create a folder for Open Notebook and download the compose file into it:
+
+```bash
+mkdir open-notebook
+cd open-notebook
+curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/docker-compose.yml
+```
+
+On Windows PowerShell, type `curl.exe` instead of `curl`. You can also open the [file on GitHub](https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml) and save it as `docker-compose.yml`.
+
+## Step 2: Set your encryption key
+
+Open `docker-compose.yml` and find this line in the `open_notebook` service:
+
+```yaml
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
+```
+
+Replace `change-me-to-a-secret-string` with a long random secret that you generate yourself. Don't copy an example value from any guide. Either of these prints a suitable value:
+
+```bash
+openssl rand -hex 32                                   # macOS, Linux
+```
+
+```powershell
+[guid]::NewGuid().ToString("N") + [guid]::NewGuid().ToString("N")   # Windows PowerShell
+```
+
+Open Notebook uses this key to encrypt the provider API keys it stores.
+
+> **Keep this key.** If it changes later, the keys you saved can no longer be decrypted and you have to enter them again.
+
+## Step 3: Decide who can reach it
+
+The shipped file publishes ports `8502` (UI) and `5055` (API) on **all network interfaces**, and authentication is off until you set a password. If other people or devices can reach this machine (shared network, server, VPS), do one of these **before starting**:
+
+- **Keep it on this machine only:** in `docker-compose.yml`, change the two port lines of the `open_notebook` service to `"127.0.0.1:8502:8502"` and `"127.0.0.1:5055:5055"`.
+- **Require a password:** add `- OPEN_NOTEBOOK_PASSWORD=your-password` to the `environment:` block of the `open_notebook` service.
+
+See [Access from another machine](#access-from-another-machine) if you do want to use it from other devices.
+
+## Step 4: Start Open Notebook
 
 ```bash
 docker compose up -d
 ```
 
-Wait 15-20 seconds for all services to start:
-```
-✅ surrealdb running on :8000
-✅ open_notebook running on :8502 (UI) and :5055 (API)
-```
+Check that both services are running:
 
-Check status:
 ```bash
 docker compose ps
 ```
 
----
+The API runs database migrations when it starts. After 20–30 seconds it should answer:
 
-## Step 3: Verify Installation (1 min)
-
-**API Health:**
 ```bash
 curl http://localhost:5055/health
-# Should return: {"status": "healthy"}
+# {"status":"healthy"}
 ```
 
-**Frontend Access:**
-Open browser to:
-```
-http://localhost:8502
-```
+## Step 5: Open the UI and connect a provider
 
-You should see the Open Notebook interface!
+Open **http://localhost:8502**.
+
+Then follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider): add a configuration, test it, add models and set the default models. It ends with a test chat. Chat won't work until the default models are set.
 
 ---
 
-## Step 4: Configure AI Provider (2 min)
+## Changing settings
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select your provider (e.g., OpenAI, Anthropic, Google)
-4. Give it a name, paste your API key
-5. Click **Save**
-6. Click **Test Connection** — should show success
-7. Click **Discover Models** → **Register Models**
+Every Open Notebook setting is an environment variable on the **`open_notebook`** service. Add it to that service's `environment:` block and apply it with:
 
-Your models are now available!
-
-> **Need an API key?** Get one from your chosen provider:
-> - **OpenAI**: https://platform.openai.com/api-keys
-> - **Anthropic**: https://console.anthropic.com/
-> - **Google**: https://aistudio.google.com/
-> - **Groq**: https://console.groq.com/
-
----
-
-## Step 5: First Notebook (2 min)
-
-1. Click **New Notebook**
-2. Name: "My Research"
-3. Description: "Getting started"
-4. Click **Create**
-
-Done! You now have a fully working Open Notebook instance.
-
----
-
-## Configuration
-
-### Adding Ollama (Free Local Models)
-
-Instead of manually editing, use our ready-made example:
-
-```bash
-# Download the Ollama example
-curl -o docker-compose.yml https://raw.githubusercontent.com/lfnovo/open-notebook/main/examples/docker-compose-ollama.yml
-
-# Or copy from repo
-cp examples/docker-compose-ollama.yml docker-compose.yml
-```
-
-See [examples/docker-compose-ollama.yml](../../examples/docker-compose-ollama.yml) for the complete setup.
-
-**Manual setup:** Add this to your existing `docker-compose.yml`:
-
-```yaml
-  ollama:
-    image: ollama/ollama:latest
-    ports:
-      - "11434:11434"
-    volumes:
-      - ollama_models:/root/.ollama
-    restart: always
-
-volumes:
-  ollama_models:
-```
-
-Then start it and pull a model:
 ```bash
 docker compose up -d
-docker exec open-notebook-local-ollama-1 ollama pull mistral
 ```
 
-Configure Ollama in the Settings UI:
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **Ollama**
-3. Enter base URL: `http://ollama:11434`
-4. Click **Save**, then **Test Connection**
-5. Click **Discover Models** → **Register Models**
+`up -d` recreates the container when its configuration changed. `docker compose restart` does **not** apply new settings.
+
+For example, to require a password:
+
+```yaml
+  open_notebook:
+    environment:
+      # ...existing lines...
+      - OPEN_NOTEBOOK_PASSWORD=choose-a-password
+```
+
+A few things to know:
+
+- **`.env` is not loaded into the container.** The shipped compose file has no `env_file:`. A `.env` file next to `docker-compose.yml` only fills the `${...}` placeholders in the file (the shipped file uses it for `SURREAL_USER` and `SURREAL_PASSWORD`). Anything else you put in `.env` is ignored.
+- **Database credentials** default to `root:root`, and the database port is only reachable from the same machine. To use other credentials, put `SURREAL_USER=...` and `SURREAL_PASSWORD=...` in a `.env` file before the first start; both services read them. See [`.env.example`](../../.env.example).
+- **Optional extraction engines** (Docling, Crawl4AI) are commented out in the compose file. When enabled they are installed on the next start, which then takes several minutes. See the [Environment Reference](../5-CONFIGURATION/environment-reference.md).
+- **Keep your changes in an override file (optional).** Docker Compose automatically merges a `docker-compose.override.yml` in the same folder. Putting your additions there leaves `docker-compose.yml` untouched, so you can download a newer one later. The variants below use this file.
+
+The full list of settings is in the [Environment Reference](../5-CONFIGURATION/environment-reference.md).
 
 ---
 
-## Environment Variables Reference
+## Variants
 
-| Variable | Purpose | Example |
-|----------|---------|---------|
-| `OPEN_NOTEBOOK_ENCRYPTION_KEY` | Encryption key for credentials | `my-secret-key` |
-| `SURREAL_URL` | Database connection | `ws://surrealdb:8000/rpc` |
-| `SURREAL_USER` | Database user | `root` |
-| `SURREAL_PASSWORD` | Database password | `root` |
-| `SURREAL_NAMESPACE` | Database namespace | `open_notebook` |
-| `SURREAL_DATABASE` | Database name | `open_notebook` |
-| `API_URL` | API external URL | `http://localhost:5055` |
-| `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | Override embedding batch size for stricter/local providers (recommended: `8` for CPU-only local setups) | `50` |
+### Ollama in Docker (local models)
 
-See [Environment Reference](../5-CONFIGURATION/environment-reference.md) for complete list.
+Create `docker-compose.override.yml` next to `docker-compose.yml`:
+
+```yaml
+services:
+  ollama:
+    image: ollama/ollama:latest
+    volumes:
+      - ./ollama_models:/root/.ollama
+    restart: always
+```
+
+Start it and download a chat model and an embedding model:
+
+```bash
+docker compose up -d
+docker compose exec ollama ollama pull qwen3
+docker compose exec ollama ollama pull nomic-embed-text
+```
+
+When you [connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider), pick **Ollama** and set **Base URL** to `http://ollama:11434`. GPU setup, model choices and timeouts are in the [Ollama guide](../5-CONFIGURATION/ollama.md).
+
+### Ollama installed on the host
+
+Open Notebook runs in a container, so `localhost` there is the container, not your computer. Use `host.docker.internal` instead.
+
+1. Create `docker-compose.override.yml` so that name resolves on every platform (Docker Desktop already provides it; Docker Engine on Linux needs this line):
+
+   ```yaml
+   services:
+     open_notebook:
+       extra_hosts:
+         - "host.docker.internal:host-gateway"
+   ```
+
+2. Make Ollama reachable from containers:
+
+   - **macOS and Windows (Docker Desktop):** Docker Desktop forwards `host.docker.internal` to the host, so Ollama's default setup usually works as is. If the connection test fails, make Ollama listen on all interfaces: on macOS run `launchctl setenv OLLAMA_HOST "0.0.0.0:11434"`, then quit and reopen the Ollama app (this setting is lost when you log out or reboot, so run it again after each login, or follow Ollama's FAQ for a permanent setup); on Windows add a user environment variable `OLLAMA_HOST` = `0.0.0.0:11434`, then quit and restart Ollama. See Ollama's [documentation](https://github.com/ollama/ollama/tree/main/docs) (FAQ, "How do I configure Ollama server?").
+   - **Linux:** Ollama listens on `127.0.0.1` by default, which containers can't reach. For the systemd service, run `sudo systemctl edit ollama`, add these lines, save, then run `sudo systemctl restart ollama`:
+
+     ```ini
+     [Service]
+     Environment="OLLAMA_HOST=0.0.0.0:11434"
+     ```
+
+     If you start Ollama by hand, use `OLLAMA_HOST=0.0.0.0:11434 ollama serve`.
+
+   `OLLAMA_HOST=0.0.0.0` exposes Ollama's API, which has no authentication, on every network interface. Allow port 11434 only from this host and its Docker networks (for example with your firewall), never from untrusted networks.
+
+3. Run `docker compose up -d`.
+4. When you [connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider), pick **Ollama** and set **Base URL** to `http://host.docker.internal:11434`.
+
+### Single container
+
+An all-in-one image also exists but is deprecated. See [Single Container](single-container.md).
 
 ---
 
-## Common Tasks
+## Access from another machine
+
+By default the browser loads the UI from port `8502` and then calls the API directly on port `5055` of the same host name. So for access from another machine, either:
+
+- make **both** ports `8502` and `5055` reachable, or
+- set `API_URL` to the address you open the UI with (for example `- API_URL=http://192.168.1.50:8502`). The browser then sends API calls through the UI server, and only port `8502` needs to be reachable.
+
+Authentication is off unless you set `OPEN_NOTEBOOK_PASSWORD`, so set it whenever the ports are reachable from other machines (see [Step 3](#step-3-decide-who-can-reach-it)). For HTTPS and domains, see [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md) and [Security](../5-CONFIGURATION/security.md).
+
+---
+
+## Common tasks
+
+### View logs
+
+```bash
+docker compose logs -f open_notebook   # UI, API and worker
+docker compose logs -f surrealdb       # database
+```
+
+### Stop and start
+
+```bash
+docker compose down    # stops and removes the containers; data folders stay
+docker compose up -d
+```
+
+### Back up
+
+Your data lives in the `surreal_data/` and `notebook_data/` folders. Stop the services and copy both:
 
-### Stop Services
 ```bash
 docker compose down
+tar czf open-notebook-backup.tgz surreal_data notebook_data
+docker compose up -d
 ```
 
-### View Logs
-```bash
-# All services
-docker compose logs -f
+On Linux the folders are owned by root (the database runs as root for the bind mount), so you may need `sudo tar ...`.
 
-# Specific service
-docker compose logs -f api
-```
+### Update
 
-### Restart Services
-```bash
-docker compose restart
-```
+Back up first, then:
 
-### Update to Latest Version
 ```bash
-docker compose down
 docker compose pull
 docker compose up -d
 ```
 
-### Remove All Data
+Since v1.15.0, API keys saved (or migrated) by Open Notebook use an encryption format that older versions can't read. If you need to roll back after updating, restore the backup you made before the update.
+
+### Delete everything
+
+`docker compose down -v` does **not** delete your data: the shipped compose file uses bind-mounted folders, not named volumes. To wipe the installation, stop it and delete the folders:
+
 ```bash
-docker compose down -v
+docker compose down
+rm -rf surreal_data notebook_data   # permanent; use sudo on Linux
 ```
 
 ---
 
 ## Troubleshooting
 
-### "Cannot connect to API" Error
+**The UI loads but can't reach the API.** The API may still be starting; check `docker compose logs -f open_notebook`. If you open the UI from another machine, see [Access from another machine](#access-from-another-machine).
 
-1. Check if Docker is running:
-```bash
-docker ps
-```
+**Port already in use.** Change the host side of the mapping, for example `"8503:8502"`, run `docker compose up -d` and open `http://localhost:8503`.
 
-2. Check if services are running:
-```bash
-docker compose ps
-```
+**`Permission denied` or `Failed to create RocksDB directory` in the database logs (Linux).** The `surrealdb` service needs `user: root` to write to the bind-mounted folder. The shipped file has it; add it if your compose file is older, then run `docker compose up -d`.
 
-3. Check API logs:
-```bash
-docker compose logs api
-```
+**Sources stay queued.** The worker runs inside `open_notebook`; look for errors in `docker compose logs open_notebook`.
 
-4. Wait longer - services can take 20-30 seconds to start on first run
+**Chat fails right after installing.** The default models aren't set. See step 4 of [Connect a provider](../4-AI-PROVIDERS/index.md#4-set-default-models).
+
+More: [Quick Fixes](../6-TROUBLESHOOTING/quick-fixes.md) · [Connection Issues](../6-TROUBLESHOOTING/connection-issues.md).
 
 ---
 
-### Port Already in Use
+## Other examples
 
-If you get "Port 8502 already in use", change the port:
+The [`examples/`](../../examples/) folder has complete compose files for other setups, including Ollama, a fully local stack and a speech server. They are maintained separately from this guide; compare them with the root `docker-compose.yml` before using one.
 
-```yaml
-ports:
-  - "8503:8502"  # Use 8503 instead
-  - "5055:5055"  # Keep API port same
-```
+## Next steps
 
-Then access at `http://localhost:8503`
+- [User Guide](../3-USER-GUIDE/index.md)
+- [Security](../5-CONFIGURATION/security.md) and [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md) before exposing it to a network
 
----
-
-### Credential Issues
-
-1. Go to **Manage** → **Models**
-2. Click **Test Connection** on the credential
-3. If it fails, verify key at provider's website
-4. Check you have credits in your account
-5. Delete and re-create the credential if needed
-
----
-
-### Database Connection Issues
-
-Check SurrealDB is running:
-```bash
-docker compose logs surrealdb
-```
-
-Reset database:
-```bash
-docker compose down -v
-docker compose up -d
-```
-
-### Database Permission Denied (Linux)
-
-If you see `Permission denied` or `Failed to create RocksDB directory` in SurrealDB logs:
-
-```bash
-docker compose logs surrealdb | grep -i permission
-```
-
-This happens because SurrealDB runs as a non-root user but Docker creates bind mount directories as root. Add `user: root` to the surrealdb service:
-
-```yaml
-surrealdb:
-  image: surrealdb/surrealdb:v2
-  user: root  # Fix for Linux bind mount permissions
-  # ... rest of config
-```
-
-Then restart:
-```bash
-docker compose down -v
-docker compose up -d
-```
-
----
-
-## Alternative Setups
-
-Looking for different configurations? Check out our [examples/](../../examples/) folder:
-
-- **[Ollama Setup](../../examples/docker-compose-ollama.yml)** - Run local AI models (free, private)
-- **[Single Container](../../examples/docker-compose-single.yml)** - All-in-one container (deprecated, will be removed in v2)
-- **[Development](../../examples/docker-compose-dev.yml)** - For contributors and developers
-
-Each example includes detailed comments and usage instructions.
-
----
-
-## Next Steps
-
-1. **Add Content**: Sources, notebooks, documents
-2. **Configure Models**: Manage → Models (choose your preferences)
-3. **Explore Features**: Chat, search, transformations
-4. **Read Guide**: [User Guide](../3-USER-GUIDE/index.md)
-
----
-
-## Production Deployment
-
-For production use, see:
-- [Security Hardening](../5-CONFIGURATION/security.md)
-- [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md)
-
----
-
-## Getting Help
-
-- **Discord**: [Community support](https://discord.gg/37XJPXfz2w)
-- **Issues**: [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
-- **Docs**: [Full documentation](../index.md)
+**Need help?** [Discord](https://discord.gg/37XJPXfz2w) · [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
diff --git a/docs/1-INSTALLATION/from-source.md b/docs/1-INSTALLATION/from-source.md
index 3d003cd1..d0c57ccf 100644
--- a/docs/1-INSTALLATION/from-source.md
+++ b/docs/1-INSTALLATION/from-source.md
@@ -1,195 +1,159 @@
 # From Source Installation
 
-Clone the repository and run locally. **For developers and contributors.**
+Clone the repository and run each part yourself. **For developers and contributors.** To just use Open Notebook, [Docker Compose](docker-compose.md) is simpler.
+
+A source install runs four processes, each in its own terminal:
+
+| Process | Command | Port |
+|---|---|---|
+| SurrealDB (in Docker) | `make database` | 8000 |
+| API | `make api` | 5055 |
+| Background worker | `make worker` | none |
+| Frontend (Next.js dev server) | `npm run dev` in `frontend/` | 3000 |
 
 ## Prerequisites
 
-- **Python 3.11+** - [Download](https://www.python.org/)
-- **Node.js 18+** - [Download](https://nodejs.org/)
-- **Git** - [Download](https://git-scm.com/)
-- **Docker** (for SurrealDB) - [Download](https://docker.com/)
-- **uv** (Python package manager) - `curl -LsSf https://astral.sh/uv/install.sh | sh`
-- API key from OpenAI or similar (or use Ollama for free)
+- **Python 3.11 or 3.12.** 3.13 and later are not supported yet (`pyproject.toml` requires `>=3.11,<3.13`). uv can install a matching Python for you.
+- **uv**: `curl -LsSf https://astral.sh/uv/install.sh | sh` ([other install methods](https://docs.astral.sh/uv/getting-started/installation/))
+- **Node.js 20.9 or later** (22 LTS recommended; CI uses 22). Next.js 16 refuses older versions.
+- **Git**
+- **Docker**, to run SurrealDB
+- **ffmpeg**, for audio and video sources and podcasts (`brew install ffmpeg`, `sudo apt install ffmpeg`, or `winget install Gyan.FFmpeg`)
 
-## Quick Setup (10 minutes)
-
-### 1. Clone Repository
+## 1. Clone the repository
 
 ```bash
 git clone https://github.com/lfnovo/open-notebook.git
 cd open-notebook
+```
 
-# If you forked it:
+If you plan to contribute, clone your fork instead and add `upstream`:
+
+```bash
 git clone https://github.com/YOUR_USERNAME/open-notebook.git
 cd open-notebook
 git remote add upstream https://github.com/lfnovo/open-notebook.git
 ```
 
-### 2. Install Python Dependencies
+## 2. Install Python dependencies
 
 ```bash
 uv sync
-uv pip install python-magic
 ```
 
-#### 2.1 Alternative: Conda Setup (Optional)
-
-If you prefer using **Conda** to manage your environments, follow these steps instead of the standard `uv sync`:
+<details>
+<summary>Using Conda instead</summary>
 
 ```bash
-# Create and activate the environment
-conda create -n open-notebook python=3.11 -y
+conda create -n open-notebook python=3.12 -y
 conda activate open-notebook
-
-# Install uv inside conda to maintain compatibility with the Makefile
 conda install -c conda-forge uv nodejs -y
-
-# Sync dependencies
 uv sync
 ```
 
-> **Note**: Installing `uv` inside your Conda environment ensures that commands like `make start-all` and `make api` continue to work seamlessly.
+Installing `uv` inside the Conda environment keeps the `make` targets working.
+</details>
 
-### 3. Start SurrealDB
-
-```bash
-# Terminal 1
-make database
-# or: docker compose up surrealdb
-```
-
-### 4. Set Environment Variables
+## 3. Create your `.env`
 
 ```bash
 cp .env.example .env
-# Edit .env and set:
-# OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
 ```
 
-After starting the app, configure AI providers via the **Manage → Models** UI in the browser.
+Generate an encryption key (works on every platform once `uv sync` has run):
 
-### 5. Start API
+```bash
+uv run python -c "import secrets; print(secrets.token_hex(32))"
+```
+
+Edit `.env` and change two lines, pasting the generated value as the key (never an example value):
+
+```env
+OPEN_NOTEBOOK_ENCRYPTION_KEY=<the value you generated>
+SURREAL_URL=ws://127.0.0.1:8000/rpc
+```
+
+The example file points `SURREAL_URL` at `surrealdb`, a host name that only exists inside Docker Compose. A process running on your machine reaches the database at `127.0.0.1` (the database port is bound to IPv4 `127.0.0.1`; `localhost` can resolve to IPv6 `::1` first). Keep the key: if it changes, saved API keys can't be decrypted.
+
+## 4. Start SurrealDB
+
+```bash
+make database
+```
+
+This runs `docker compose up -d surrealdb` with the repository's `docker-compose.yml`. Docker Compose reads `SURREAL_USER` and `SURREAL_PASSWORD` from your `.env`, so the database and the API use the same credentials.
+
+## 5. Start the API
 
 ```bash
 # Terminal 2
 make api
-# or: uv run --env-file .env uvicorn api.main:app --host 0.0.0.0 --port 5055
 ```
 
-### 6. Start Worker
+The API listens on `http://localhost:5055` and runs database migrations on startup. Interactive API docs: http://localhost:5055/docs.
 
-Source and note processing (content extraction, embedding, insights) is dispatched
-as background jobs that a **separate worker** process consumes. Without it, every
-source stays stuck at `Source processing status: CommandStatus.NEW` forever.
+## 6. Start the worker
 
 ```bash
 # Terminal 3
 make worker
-# or: uv run --env-file .env surreal-commands-worker --import-modules commands
 ```
 
-> `make start-all` starts Database + API + Worker + Frontend together; the steps
-> above run them individually so you can see each process's logs.
+Source processing, embeddings, insights and podcasts run as background jobs that this worker picks up. Without it, new sources stay queued forever.
 
-### 7. Start Frontend
+## 7. Start the frontend
 
 ```bash
 # Terminal 4
-cd frontend && npm install && npm run dev
+cd frontend
+npm install
+npm run dev
 ```
 
-### 8. Access
+Open **http://localhost:3000**.
 
-- **Frontend**: http://localhost:3000
-- **API Docs**: http://localhost:5055/docs
-- **Database**: http://localhost:8000
+> Once everything works, `make start-all` starts the database, API, worker and frontend from one terminal (stop them with `make stop-all`). Separate terminals make each process's logs easier to read.
 
-### 9. Configure AI Provider
+## 8. Connect a provider
 
-1. Open http://localhost:3000
-2. Go to **Manage** → **Models**
-3. Click **Add Credential** → Select your provider → Paste API key
-4. Click **Save**, then **Test Connection**
-5. Click **Discover Models** → **Register Models**
+Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider). It ends with a test chat. Chat won't work until the default models are set.
+
+If you use Ollama on the same machine, its base URL is `http://127.0.0.1:11434`; there is no container in between.
 
 ---
 
-## Development Workflow
-
-### Code Quality
+## Development commands
 
 ```bash
-# Format and lint Python
-make ruff
-# or: ruff check . --fix
-
-# Type checking
-make lint
-# or: uv run python -m mypy .
+uv run pytest tests/          # tests
+make ruff                     # ruff check . --fix
+uv run ruff format .          # format
+make lint                     # mypy
+make clean-cache              # remove __pycache__, .mypy_cache, etc.
 ```
 
-### Run Tests
-
-```bash
-uv run pytest tests/
-```
-
-### Common Commands
-
-```bash
-# Start everything
-make start-all
-
-# View API docs
-open http://localhost:5055/docs
-
-# Check database migrations
-# (Auto-run on API startup)
-
-# Clean up
-make clean
-```
+The development workflow is described in the [Development Setup](../7-DEVELOPMENT/development-setup.md) guide.
 
 ---
 
 ## Troubleshooting
 
-### Python version too old
+**Wrong Python version.** `uv sync --python 3.12` installs and uses a supported version.
 
-```bash
-python --version  # Check version
-uv sync --python 3.11  # Use specific version
-```
+**`npm run dev` fails with an engine or syntax error.** Your Node.js is older than 20.9. Check with `node --version`.
 
-### npm: command not found
+**API can't connect to the database.** Check that `SURREAL_URL` in `.env` uses `127.0.0.1`, and that the database is running: `docker compose ps` and `docker compose logs surrealdb`.
 
-Install Node.js from https://nodejs.org/
+**Sources stay queued.** The worker isn't running, or it crashed; check its terminal.
 
-### Database connection errors
-
-```bash
-docker ps  # Check SurrealDB running
-docker logs surrealdb  # View logs
-```
-
-### Port 5055 already in use
-
-```bash
-# Use different port
-uv run uvicorn api.main:app --port 5056
-```
+**Port 5055 already in use.** Something else is on that port. Set `API_PORT` in `.env` to move the API. The frontend then needs both `API_URL=http://localhost:<port>` (used by the browser) and `INTERNAL_API_URL=http://localhost:<port>` (used by the Next.js server to proxy `/api` requests) in its environment, for example in `frontend/.env.local`.
 
 ---
 
-## Next Steps
+## Next steps
 
-1. Read [Development Guide](../7-DEVELOPMENT/quick-start.md)
-2. See [Architecture Overview](../7-DEVELOPMENT/architecture.md)
-3. Check [Contributing Guide](../7-DEVELOPMENT/contributing.md)
+- [Development quick start](../7-DEVELOPMENT/quick-start.md)
+- [Architecture](../7-DEVELOPMENT/architecture.md)
+- [Contributing](../7-DEVELOPMENT/contributing.md)
 
----
-
-## Getting Help
-
-- **Discord**: [Community](https://discord.gg/37XJPXfz2w)
-- **Issues**: [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
+**Need help?** [Discord](https://discord.gg/37XJPXfz2w) · [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
diff --git a/docs/1-INSTALLATION/index.md b/docs/1-INSTALLATION/index.md
index 4be3d66d..7c344998 100644
--- a/docs/1-INSTALLATION/index.md
+++ b/docs/1-INSTALLATION/index.md
@@ -1,159 +1,51 @@
 # Installation Guide
 
-Choose your installation route based on your setup and use case.
+Pick the route that fits your setup. All of them end the same way: open the UI and [connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider).
 
-## Quick Decision: Which Route?
+| Route | For | You need |
+|---|---|---|
+| **[Docker Compose](docker-compose.md)** (recommended) | Almost everyone: laptops, home servers, VPS | Docker with Compose v2 |
+| [From Source](from-source.md) | Developers and contributors | Python 3.11–3.12, uv, Node.js 20.9+, Docker (for the database), ffmpeg |
+| [Windows Native](windows-native.md) | Windows machines that can't run Docker or WSL (for example ARM64) | Python 3.11–3.12 via uv, Node.js 20.9+, SurrealDB 2.x, ffmpeg |
+| [Single Container](single-container.md) (deprecated) | Hosting platforms that run one container per app; removed in v2 | Docker or a container host with persistent storage |
 
-### 🚀 I want the easiest setup (Recommended for most)
-**→ [Docker Compose](docker-compose.md)** - Multi-container setup, production-ready
-- ✅ All features working
-- ✅ Clear separation of services
-- ✅ Easy to scale
-- ✅ Works on Mac, Windows, Linux
-- ⏱️ 5 minutes to running
+Want a guided first run with a specific provider? The [quick starts](../0-START-HERE/index.md) wrap the Docker Compose route with provider-specific steps (cloud API key, Ollama in Docker, Ollama on the host).
 
 ---
 
-### 🏠 I want everything in one container (Deprecated)
-**→ [Single Container](single-container.md)** - Deprecated, will be removed in v2
-- ⚠️ **Deprecated** — please use Docker Compose instead
-- Still supported until v2 release
+## System requirements
+
+- **RAM:** 4 GB free at minimum, 8 GB or more recommended. Local models need much more (see [Ollama](../5-CONFIGURATION/ollama.md)).
+- **Disk:** room for the Docker images, your documents and any local models.
+- **GPU:** optional. It only matters for local models.
+- **Network:** needed to pull images and to reach cloud AI providers. With local models, Open Notebook works offline once installed.
+
+## AI providers
+
+You need at least one provider for chat, and an embedding model for search. You configure them in the UI after installing, not in config files.
+
+- **Cloud providers** (OpenAI, Anthropic, Google, Mistral, OpenRouter and many more): pay per use; your content is sent to the provider.
+- **Local providers** (Ollama, oMLX, LM Studio, or another OpenAI-compatible server running on your own hardware): free to run; content stays on your hardware; speed depends on your hardware. An OpenAI-compatible endpoint hosted elsewhere is a cloud provider for privacy purposes.
+
+The full list, with which providers cover chat, embeddings and speech, is in [AI Providers](../4-AI-PROVIDERS/index.md).
 
 ---
 
-### 👨‍💻 I want to develop/contribute (Developers only)
-**→ [From Source](from-source.md)** - Clone repo, set up locally
-- ✅ Full control over code
-- ✅ Easy to debug
-- ✅ Can modify and test
-- ⚠️ Requires Python 3.11+, Node.js
-- ⏱️ 10 minutes to running
+## After installing
 
----
+1. [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) and set the default models. Chat doesn't work until you do.
+2. Create a notebook and add sources: [User Guide](../3-USER-GUIDE/index.md).
 
-### 🪟 I'm on Windows and can't use Docker/WSL
-**→ [Windows Native](windows-native.md)** - Run natively, no Docker or WSL
-- ✅ Works on Windows ARM64
-- ✅ For systems without Hyper-V/Docker Desktop
-- ⚠️ Requires Python 3.12+, Node.js, SurrealDB, uv
-- ⏱️ 15 minutes to running
+## Before exposing it to a network
 
----
+The defaults are for a single user on a trusted machine: authentication is off and CORS is open.
 
+- Set `OPEN_NOTEBOOK_PASSWORD`: [Security](../5-CONFIGURATION/security.md)
+- Put it behind HTTPS: [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md)
+- Make sure the browser can reach the API: [Access from another machine](docker-compose.md#access-from-another-machine)
 
-## System Requirements
+## Need help?
 
-### Minimum
-- **RAM**: 4GB
-- **Storage**: 2GB for app + space for documents
-- **CPU**: Any modern processor
-- **Network**: Internet (optional for offline setup)
-
-### Recommended
-- **RAM**: 8GB+
-- **Storage**: 10GB+ for documents and models
-- **CPU**: Multi-core processor
-- **GPU**: Optional (speeds up local AI models)
-
----
-
-## AI Provider Options
-
-### Cloud-Based (Pay-as-you-go)
-- **OpenAI** - GPT-4, GPT-4o, fast and capable
-- **Anthropic (Claude)** - Claude 3.5 Sonnet, excellent reasoning
-- **Google Gemini** - Multimodal, cost-effective
-- **Groq** - Ultra-fast inference
-- **Others**: Mistral, DeepSeek, xAI, OpenRouter
-
-**Cost**: Usually $0.01-$0.10 per 1K tokens
-**Speed**: Fast (sub-second)
-**Privacy**: Your data sent to cloud
-
-### Local (Free, Private)
-- **Ollama** - Run open-source models locally
-- **LM Studio** - Desktop app for local models
-- **Hugging Face models** - Download and run
-
-**Cost**: $0 (just electricity)
-**Speed**: Depends on your hardware (slow to medium)
-**Privacy**: 100% offline
-
----
-
-## Choose a Route
-
-**Already know which way to go?** Pick your installation path:
-
-- [Docker Compose](docker-compose.md) - **Most users**
-- [Single Container](single-container.md) - **Deprecated**
-- [From Source](from-source.md) - **Developers**
-
-> **Privacy-first?** Any installation method works with Ollama for 100% local AI. See [Local Quick Start](../0-START-HERE/quick-start-local.md).
-
----
-
-## Pre-Installation Checklist
-
-Before installing, you'll need:
-
-- [ ] **Docker** (for Docker routes) or **Node.js 18+** (for source)
-- [ ] **AI Provider API key** (OpenAI, Anthropic, etc.) OR willingness to use free local models
-- [ ] **At least 4GB RAM** available
-- [ ] **Stable internet** (or offline setup with Ollama)
-
----
-
-## Detailed Installation Instructions
-
-### For Docker Users
-1. Install [Docker Desktop](https://docker.com/products/docker-desktop)
-2. Follow [Docker Compose](docker-compose.md) installation
-3. Follow the step-by-step guide
-4. Access at `http://localhost:8502`
-
-### For Source Installation (Developers)
-1. Have Python 3.11+, Node.js 18+, Git installed
-2. Follow [From Source](from-source.md)
-3. Run `make start-all`
-4. Access at `http://localhost:8502` (frontend) or `http://localhost:5055` (API)
-
----
-
-## After Installation
-
-Once you're up and running:
-
-1. **Configure Models** - Choose your AI provider in Manage → Models
-2. **Create First Notebook** - Start organizing research
-3. **Add Sources** - PDFs, web links, documents
-4. **Explore Features** - Chat, search, transformations
-5. **Read Full Guide** - [User Guide](../3-USER-GUIDE/index.md)
-
----
-
-## Troubleshooting During Installation
-
-**Having issues?** Check the troubleshooting section in your chosen installation guide, or see [Quick Fixes](../6-TROUBLESHOOTING/quick-fixes.md).
-
----
-
-## Need Help?
-
-- **Discord**: [Join community](https://discord.gg/37XJPXfz2w)
-- **GitHub Issues**: [Report problems](https://github.com/lfnovo/open-notebook/issues)
-- **Docs**: See [Full Documentation](../index.md)
-
----
-
-## Production Deployment
-
-Installing for production use? See additional resources:
-
-- [Security Hardening](../5-CONFIGURATION/security.md)
-- [Reverse Proxy Setup](../5-CONFIGURATION/reverse-proxy.md)
-- [Performance Tuning](../5-CONFIGURATION/advanced.md)
-
----
-
-**Ready to install?** Pick a route above! ⬆️
+- [Quick Fixes](../6-TROUBLESHOOTING/quick-fixes.md)
+- [Discord](https://discord.gg/37XJPXfz2w)
+- [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
diff --git a/docs/1-INSTALLATION/single-container.md b/docs/1-INSTALLATION/single-container.md
index d93bdc40..38baf879 100644
--- a/docs/1-INSTALLATION/single-container.md
+++ b/docs/1-INSTALLATION/single-container.md
@@ -1,22 +1,28 @@
 # Single Container Installation (Deprecated)
 
-> **Deprecation Notice:** The single-container image (`v1-latest-single`) is **deprecated** and will be removed in v2. Please migrate to [Docker Compose](docker-compose.md), which is the recommended installation method for all users. The single-container image will continue to receive updates until v2 is released, but no new features or documentation will target it.
+> **Deprecated:** the single-container image (`v1-latest-single`) will be removed in v2. It still receives updates until then, but new features and documentation target [Docker Compose](docker-compose.md). Use Docker Compose for new installs.
 
-All-in-one container setup. **Simpler than Docker Compose, but less flexible.**
+The single image bundles SurrealDB, the API, the background worker and the web UI in one container. It is mostly useful on hosting platforms that run exactly one container per app.
 
-**Best for:** PikaPods, Railway, shared hosting, minimal setups
+> **Images:** `lfnovo/open_notebook:v1-latest-single` on Docker Hub, `ghcr.io/lfnovo/open-notebook:v1-latest-single` on GitHub Container Registry.
 
-> **Alternative Registry:** Images available on both Docker Hub (`lfnovo/open_notebook:v1-latest-single`) and GitHub Container Registry (`ghcr.io/lfnovo/open-notebook:v1-latest-single`).
+## What the container needs
 
-## Prerequisites
+Whatever runs it (Docker on your machine or a hosting platform) must provide:
 
-- Docker installed (for local testing)
-- API key from OpenAI, Anthropic, or another provider
-- 5 minutes
+| Need | Value |
+|---|---|
+| **Port** | `8502` (web UI). Port `5055` (API) too, unless you set `API_URL` (below). |
+| **Persistent storage** | Two paths: `/app/data` (uploads, app data) **and** `/mydata` (the database). Without `/mydata` on persistent storage the database is lost every time the container is recreated, including on every image update. |
+| **`OPEN_NOTEBOOK_ENCRYPTION_KEY`** | Required. A long random secret; keep it, or saved API keys can't be decrypted. |
+| **`SURREAL_URL`** | `ws://localhost:8000/rpc` (the database runs inside the same container). |
+| **`SURREAL_USER`, `SURREAL_PASSWORD`** | Both `root` (see below). |
+| **`OPEN_NOTEBOOK_PASSWORD`** | Required on anything reachable from a network. Authentication is off when it's unset. |
+| **`API_URL`** | Set it to the public URL of the app (for example `https://notebook.example.com`) when only one port is reachable. The browser then sends API calls through the UI server instead of to port 5055. |
 
-## Quick Setup
+The embedded database always starts with user `root` and password `root`, so set `SURREAL_USER=root` and `SURREAL_PASSWORD=root`. Any other value breaks the connection. Don't publish port `8000`; nothing outside the container needs it.
 
-### For Local Testing (Docker)
+## Run it locally with Docker
 
 ```yaml
 # docker-compose.yml
@@ -25,7 +31,7 @@ services:
     image: lfnovo/open_notebook:v1-latest-single
     pull_policy: always
     ports:
-      - "8502:8502"  # Web UI (React frontend)
+      - "8502:8502"  # Web UI
       - "5055:5055"  # API
     environment:
       - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
@@ -35,112 +41,52 @@ services:
       - SURREAL_NAMESPACE=open_notebook
       - SURREAL_DATABASE=open_notebook
     volumes:
-      - ./data:/app/data
+      - ./notebook_data:/app/data   # app data
+      - ./surreal_data:/mydata      # database
     restart: always
 ```
 
-Run:
+Replace the encryption key with a long random secret you generate yourself (see [Set your encryption key](docker-compose.md#step-2-set-your-encryption-key)). If other devices can reach this machine, also add `- OPEN_NOTEBOOK_PASSWORD=...` or bind the ports to `127.0.0.1`. Then:
+
 ```bash
 docker compose up -d
 ```
 
-Access: `http://localhost:8502`
+Open **http://localhost:8502** and follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider). Chat works once the default models are set.
 
-Then configure your AI provider:
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select your provider → Paste API key
-3. Click **Save**, then **Test Connection**
-4. Click **Discover Models** → **Register Models**
+Settings go in the `environment:` block and are applied with `docker compose up -d` (not `restart`). Logs: `docker compose logs -f open_notebook`.
 
-### For Cloud Platforms
+## Hosting platforms
 
-**PikaPods:**
-1. Click "New App"
-2. Search "Open Notebook"
-3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
-4. Click "Deploy"
-5. Open the app → Go to **Manage → Models** to configure your AI provider
+Use the table above to fill in your platform's form: the image, port `8502`, persistent storage for **both** `/app/data` and `/mydata`, and the environment variables. Platforms that can't give you persistent storage at both paths will lose data on redeploy; use a platform or VPS that runs Docker Compose instead.
 
-**Railway:**
-1. Create new project
-2. Add `lfnovo/open_notebook:v1-latest-single`
-3. Set environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
-4. Deploy
-5. Open the app → Go to **Manage → Models** to configure your AI provider
+After deploying, open the app's URL and follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider).
 
-**Render:**
-1. Create new Web Service
-2. Use Docker image: `lfnovo/open_notebook:v1-latest-single`
-3. Set environment variables in dashboard (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
-4. Configure persistent disk for `/app/data` and `/mydata`
+### EasyPanel
 
-**DigitalOcean App Platform:**
-1. Create new app from Docker Hub
-2. Use image: `lfnovo/open_notebook:v1-latest-single`
-3. Set port to 8502
-4. Add environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
-5. Configure persistent storage
+Open Notebook ships an EasyPanel template in [`examples/easypanel/`](https://github.com/lfnovo/open-notebook/tree/main/examples/easypanel). Unlike the single image, the template provisions **two services** (the Open Notebook app and a separate SurrealDB) and generates the database password, encryption key and, optionally, the app password for you.
 
-**Heroku:**
-```bash
-# Using heroku.yml
-heroku container:push web
-heroku container:release web
-heroku config:set OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-```
-
-**Coolify:**
-1. Add new service → Docker Image
-2. Image: `lfnovo/open_notebook:v1-latest-single`
-3. Port: 8502
-4. Add environment variables (at minimum: `OPEN_NOTEBOOK_ENCRYPTION_KEY`)
-5. Enable persistent volumes
-6. Coolify handles HTTPS automatically
-
-**EasyPanel:**
-
-Open Notebook ships an EasyPanel template at [`examples/easypanel/`](https://github.com/lfnovo/open-notebook/tree/main/examples/easypanel). Unlike the single-image options above, the template provisions **two services** — the Open Notebook app and a dedicated SurrealDB instance — and generates the database password, encryption key, and (optionally) the app password for you.
-
-- **One-click (recommended):** once the template is published to the official [EasyPanel template gallery](https://github.com/easypanel-io/templates), create a new service from "Open Notebook", set an app password (or leave it blank to auto-generate one), and deploy.
+- **One-click:** once the template is published to the official [EasyPanel template gallery](https://github.com/easypanel-io/templates), create a new service from "Open Notebook", set an app password (or leave it blank to auto-generate one), and deploy.
 - **Manual:** copy `examples/easypanel/` into `templates/open-notebook` in a checkout of [`easypanel-io/templates`](https://github.com/easypanel-io/templates), run the templates playground (`npm run dev`), and create the template from the generated JSON in your EasyPanel instance.
 
-After deployment, open the EasyPanel domain and configure your AI provider in **Manage → Models**. See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
+See [`examples/easypanel/README.md`](https://github.com/lfnovo/open-notebook/blob/main/examples/easypanel/README.md) for details.
+
+## Moving to Docker Compose
+
+1. **Get the data out of the old container.** If `/mydata` was mounted to a host folder, that folder holds the database. Older versions of this guide only mounted `/app/data`, so on those setups the database lives **inside the container**: copy it out before you remove the container. From the folder with the old `docker-compose.yml`:
+
+   ```bash
+   docker compose stop
+   docker compose cp open_notebook:/mydata ./surreal_data
+   docker compose cp open_notebook:/app/data ./notebook_data   # skip if /app/data was already a host folder
+   ```
+
+   On a hosting platform, use its volume or file export instead. Don't run `docker compose down` until the copy is done: removing the container deletes an unmounted database.
+2. Set up [Docker Compose](docker-compose.md) in a new folder with the **same** `OPEN_NOTEBOOK_ENCRYPTION_KEY`.
+3. Before the first start, move the copied `surreal_data/` (it must contain `mydatabase.db`) and `notebook_data/` into the new folder.
+
+The single image's database uses `root:root`, which matches the compose default. The database path inside both setups is `/mydata/mydatabase.db`.
 
 ---
 
-## Environment Variables
-
-| Variable | Purpose | Example |
-|----------|---------|---------|
-| `OPEN_NOTEBOOK_ENCRYPTION_KEY` | Encryption key for credentials (required) | `my-secret-key` |
-| `SURREAL_URL` | Database | `ws://localhost:8000/rpc` |
-| `SURREAL_USER` | DB user | `root` |
-| `SURREAL_PASSWORD` | DB password | `root` |
-| `SURREAL_NAMESPACE` | DB namespace | `open_notebook` |
-| `SURREAL_DATABASE` | DB name | `open_notebook` |
-| `API_URL` | External URL (for remote access) | `https://myapp.example.com` |
-
-AI provider API keys are configured via the **Manage → Models** UI after deployment.
-
----
-
-## Limitations vs Docker Compose
-
-| Feature | Single Container | Docker Compose |
-|---------|------------------|-----------------|
-| Setup time | 2 minutes | 5 minutes |
-| Complexity | Minimal | Moderate |
-| Services | All bundled | Separated |
-| Scalability | Limited | Excellent |
-| Memory usage | ~800MB | ~1.2GB |
-
----
-
-## Next Steps
-
-Same as Docker Compose setup - just access via `http://localhost:8502` (local) or your platform's URL (cloud).
-
-1. Go to **Manage → Models** to add your AI provider credential
-2. **Test Connection** and **Discover Models**
-
-See [Docker Compose](docker-compose.md) for full post-install guide.
+**Need help?** [Discord](https://discord.gg/37XJPXfz2w) · [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
diff --git a/docs/1-INSTALLATION/windows-native.md b/docs/1-INSTALLATION/windows-native.md
index fc2ef789..394541b0 100644
--- a/docs/1-INSTALLATION/windows-native.md
+++ b/docs/1-INSTALLATION/windows-native.md
@@ -1,65 +1,58 @@
-# Open Notebook Windows Installation Guide (Native, No Docker)
+# Windows Native Installation (No Docker)
 
-This guide documents how to install and run [Open Notebook](https://github.com/lfnovo/open-notebook) on Windows **natively without Docker or WSL**.
+This guide runs [Open Notebook](https://github.com/lfnovo/open-notebook) on Windows **natively, without Docker or WSL**. It is community-maintained; the officially supported route is [Docker Compose](docker-compose.md).
 
 ## Who Is This For?
 
-- **Windows ARM64 users** - Docker Desktop and WSL2 have limitations on ARM64
-- **Users without Hyper-V** - Some Windows editions don't support Docker
-- **Users who prefer native installs** - Simpler architecture, easier debugging
-
-## What This Guide Covers
-
-- Native Windows installation steps
-- Critical configuration fixes for Windows
-- Troubleshooting common issues
-- Upgrade and maintenance scripts
+- **Windows ARM64 users**: Docker Desktop and WSL2 have limitations on ARM64
+- **Users without Hyper-V**: some Windows editions can't run Docker Desktop
+- **Users who prefer native installs**: fewer layers, easier debugging
 
 ## Prerequisites
 
-| Software     | Installation                     | Required |
-| ------------ | -------------------------------- | -------- |
-| Git          | `winget install Git.Git`         | Yes      |
-| Python 3.12+ | Via uv (installed automatically) | Yes      |
-| Node.js 18+  | `winget install OpenJS.NodeJS`   | Yes      |
-| uv           | `pip install uv`                 | Yes      |
-| SurrealDB    | `scoop install surrealdb`        | Yes      |
+| Software | Installation | Notes |
+| --- | --- | --- |
+| Git | `winget install Git.Git` | |
+| uv | `winget install astral-sh.uv` | Also installs a matching Python for you |
+| Python 3.11 or 3.12 | Installed by `uv sync` | 3.13+ is not supported yet |
+| Node.js 20.9+ | `winget install OpenJS.NodeJS.LTS` | Next.js 16 requires 20.9 or later |
+| SurrealDB 2.x | [SurrealDB releases](https://github.com/surrealdb/surrealdb/releases) or `scoop install surrealdb` | Use a 2.x release: the Docker setup pins `surrealdb:v2` |
+| ffmpeg | `winget install Gyan.FFmpeg` | Needed for audio/video sources and podcasts |
 
 ## Quick Start
 
-1. **Clone and setup:**
+1. **Clone and install:**
 
-   ```bash
-   cd %USERPROFILE%\Projects  # or your preferred location
+   ```batch
+   cd %USERPROFILE%\Projects
    git clone https://github.com/lfnovo/open-notebook.git
    cd open-notebook
    uv sync
    cd frontend && npm install && cd ..
    ```
 
-2. **Configure `.env`:**
+2. **Create `.env`:** generate an encryption key with
 
-   - Copy `.env.example` to `.env`
+   ```batch
+   uv run python -c "import secrets; print(secrets.token_hex(32))"
+   ```
 
-   - Add your API keys
+   then copy `.env.example` to `.env` and change these two lines, pasting the generated value as the key (never an example value). Keep it: if it changes, saved API keys can't be decrypted.
 
-   - **CRITICAL:** Change `SURREAL_URL` from `localhost` to `127.0.0.1`:
+   ```env
+   OPEN_NOTEBOOK_ENCRYPTION_KEY=<the value you generated>
+   SURREAL_URL="ws://127.0.0.1:8000/rpc"
+   ```
 
-     ```env
-     SURREAL_URL="ws://127.0.0.1:8000/rpc"
-     ```
+   Use `127.0.0.1`, not `localhost` and not `surrealdb` (see [Issue 2](#issue-2-database-health-check-timeout)). You add AI provider keys in the UI later, not in `.env`.
 
 3. **Start the four services**, each in its own terminal, from the `open-notebook` folder.
 
-   > Open Notebook does not ship a launcher script — start the services manually as below (or wrap them in your own `.bat`, see [Optional: one-click launcher](#optional-one-click-launcher)).
+   > Open Notebook does not ship a launcher script. Start the services manually as below, or wrap them in your own `.bat` (see [Optional: one-click launcher](#optional-one-click-launcher)).
 
    ```batch
-   REM Optional: point Open Notebook at a separate data folder (see Issue 4 below).
-   REM Set this in each terminal before running, or skip to use ./data.
-   set DATA_FOLDER=%USERPROFILE%\Projects\open-notebook-data
-
-   REM Terminal 1 — SurrealDB
-   surreal start --user root --pass root --bind 127.0.0.1:8000 rocksdb:%DATA_FOLDER%\surrealdb
+   REM Terminal 1 — SurrealDB (database files go in the folder you name here)
+   surreal start --user root --pass root --bind 127.0.0.1:8000 "rocksdb:%USERPROFILE%\Projects\open-notebook-data\surrealdb"
 
    REM Terminal 2 — API
    uv run --env-file .env run_api.py
@@ -72,43 +65,31 @@ This guide documents how to install and run [Open Notebook](https://github.com/l
    cd frontend && npm run dev
    ```
 
-4. **Open the app:** http://127.0.0.1:3000
+4. **Open the app** at http://127.0.0.1:3000.
 
-## Directory Structure (Recommended)
+5. **Connect a provider:** follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider). It ends with a test chat; chat won't work until the default models are set. A local Ollama is at `http://127.0.0.1:11434`.
 
-```
-YourProjectsFolder\
-├── open-notebook\           # Source code (git clone)
-│   ├── .venv\               # Python virtual environment (created by uv)
-│   ├── frontend\            # Next.js frontend
-│   ├── commands\            # Worker command modules
-│   └── .env                 # Your configuration
-├── open-notebook-data\      # Data storage (SEPARATE from code!)
-│   ├── surrealdb\           # Database files
-│   ├── uploads\             # Uploaded documents
-│   └── sqlite-db\           # LangGraph checkpoints
-└── start-open-notebook.bat  # Optional launcher you create yourself (see below)
-```
+## Where your data lives
 
-**Why separate data folder?** Prevents accidental data loss when updating/reinstalling code.
+- **Database:** the folder you pass to `surreal start` (above: `%USERPROFILE%\Projects\open-notebook-data\surrealdb`). Keeping it outside the code folder protects it when you reinstall.
+- **Uploads and chat checkpoints:** always in the `data\` folder inside `open-notebook\`. The path is fixed in `open_notebook/config.py` and can't be changed with an environment variable. Back it up together with the database.
 
 ## Optional: one-click launcher
 
 Open Notebook does not ship a launcher, but you can save the following as
 `start-open-notebook.bat` (anywhere you like) to start all four services with a
-double-click. Adjust `ROOT` and `DATA_ROOT` to match your setup.
+double-click. Adjust `ROOT` and `DB_DIR` to match your setup.
 
 ```batch
 @echo off
 REM --- adjust these two paths ---
 set ROOT=%USERPROFILE%\Projects\open-notebook
-set DATA_ROOT=%USERPROFILE%\Projects\open-notebook-data
+set DB_DIR=%USERPROFILE%\Projects\open-notebook-data\surrealdb
 
-set DATA_FOLDER=%DATA_ROOT%
 set PYTHONPATH=%ROOT%
 cd /d %ROOT%
 
-start "SurrealDB" surreal start --user root --pass root --bind 127.0.0.1:8000 rocksdb:%DATA_ROOT%\surrealdb
+start "SurrealDB" surreal start --user root --pass root --bind 127.0.0.1:8000 "rocksdb:%DB_DIR%"
 start "API" cmd /k "uv run --env-file .env run_api.py"
 start "Worker" cmd /k "uv run --env-file .env python -m surreal_commands.cli.worker --import-modules commands"
 start "Frontend" cmd /k "cd /d %ROOT%\frontend && npm run dev"
@@ -203,64 +184,6 @@ set PYTHONPATH=%ROOT%
 uv run --env-file .env python -m surreal_commands.cli.worker --import-modules commands
 ```
 
-### Issue 4: DATA_FOLDER Path Parsing Error
-
-**Symptom:**
-
-```
-warning: Failed to parse environment file .env at position X
-```
-
-**Cause:** `uv` can't parse Windows paths with backslashes in `.env`.
-
-**Solution:** Keep `DATA_FOLDER` **commented out** in `.env`. Set it via batch file:
-
-```batch
-set DATA_FOLDER=C:\path\to\open-notebook-data
-```
-
-## Configuration Files
-
-### Modifying `open_notebook/config.py`
-
-The default `config.py` uses a hardcoded data path. Modify it to read from environment:
-
-```python
-import os
-
-# ROOT DATA FOLDER - can be overridden via DATA_FOLDER environment variable
-DATA_FOLDER = os.environ.get("DATA_FOLDER", "./data")
-
-# Rest of file uses DATA_FOLDER...
-```
-
-### Required `.env` Settings
-
-```env
-# Database - MUST use 127.0.0.1!
-SURREAL_URL="ws://127.0.0.1:8000/rpc"
-SURREAL_USER="root"
-SURREAL_PASSWORD="root"
-SURREAL_NAMESPACE="open_notebook"
-SURREAL_DATABASE="open_notebook"
-
-# API Keys (uncomment and fill in)
-OPENAI_API_KEY=your-key-here
-ANTHROPIC_API_KEY=your-key-here
-GOOGLE_API_KEY=your-key-here
-```
-
-## Available AI Models
-
-Once running, add models in Manage → Models. Common model names:
-
-| Provider  | Models                                                       |
-| --------- | ------------------------------------------------------------ |
-| OpenAI    | `gpt-4o`, `gpt-4o-mini`, `gpt-4-turbo`, `text-embedding-3-small` |
-| Anthropic | `claude-sonnet-4-20250514`, `claude-3-5-sonnet-20241022`, `claude-3-5-haiku-20241022` |
-| Google    | `gemini-3.5-flash`, `gemini-2.5-flash`, `gemini-2.5-pro`     |
-| DeepSeek  | `deepseek-chat`, `deepseek-reasoner`                         |
-
 ## Upgrading
 
 When a new version is released:
@@ -316,7 +239,7 @@ Run the `docker compose` commands below from the folder that contains your
    `rocksdb:/mydata/mydatabase.db`):
 
    ```batch
-   surreal start --user root --pass <your-password> --bind 127.0.0.1:8000 rocksdb:surreal_data\mydatabase.db
+   surreal start --user root --pass <your-password> --bind 127.0.0.1:8000 "rocksdb:surreal_data\mydatabase.db"
    ```
 
 5. **Fix what only made sense inside the container**, before starting the API
@@ -358,13 +281,13 @@ will not find it for those older sources. New uploads are fine.
 
 ### Frontend can't connect to API
 
-- Verify API is running: http://127.0.0.1:5055/docs
-- Check `.env` has `API_URL=http://localhost:5055`
+- Verify the API is running: http://127.0.0.1:5055/docs
+- Open the UI at `http://127.0.0.1:3000`. The frontend derives the API address from the address you use (`http://127.0.0.1:5055`), and the API only listens on `127.0.0.1` by default.
 
 ### Worker not processing commands
 
-- Check Worker window for errors
-- Verify PYTHONPATH is set in startup script
+- Check the Worker window for errors
+- Verify `PYTHONPATH` is set to the `open-notebook` folder in that terminal
 
 ## Contributing
 
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index f81a7933..a617dbbe 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -1,274 +1,140 @@
-# AI Providers - Comparison & Selection Guide
+# AI Providers
 
-Open Notebook supports 17+ AI providers. This guide helps you **choose the right provider** for your needs.
+Open Notebook talks to AI models through providers. You connect a provider once in **Manage → Models**, pick which of its models to use, and choose a default model for each job (chat, embeddings, podcasts, transcription).
 
-> 💡 **Just want to set up a provider?** Skip to the [Configuration Guide](../5-CONFIGURATION/ai-providers.md) for detailed setup instructions.
+This page has three parts:
+
+1. [Connect a provider](#connect-a-provider): the steps every install guide links to
+2. [Supported providers](#supported-providers): what each provider can do
+3. [Choosing providers](#choosing-providers): which combination fits your setup
+
+Per-provider details (where to get a key, base URLs, regional endpoints) are in the [AI Providers Configuration Guide](../5-CONFIGURATION/ai-providers.md).
 
 ---
 
-## Quick Decision: Which Provider?
+## Connect a provider
 
-### Cloud Providers (Easiest)
+Do this after Open Notebook is running and you can open the UI. It ends with a working chat.
 
-**OpenAI (Recommended)**
-- Cost: ~$0.03-0.15 per 1K tokens
-- Speed: Very fast
-- Quality: Excellent
-- Best for: Most users (best quality/price balance)
+> **Before you start:** `OPEN_NOTEBOOK_ENCRYPTION_KEY` must be set (every install guide sets it). If it isn't, the Models page shows "Encryption key not configured" and won't store keys.
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#openai)
+### 1. Add a configuration
 
-**Anthropic (Claude)**
-- Cost: ~$0.80-3.00 per 1M tokens
-- Speed: Fast
-- Quality: Excellent
-- Best for: Long context (200K tokens), reasoning, latest AI
-- Advantage: Superior long-context handling
+1. In the left sidebar, under **Manage**, click **Models**.
+2. Find your provider in the list and click **Add Configuration**.
+3. Fill in the form:
+   - **Configuration Name**: any label, for example `Personal`.
+   - **API Key**: the key from your provider. Local providers such as Ollama and oMLX don't need one (the field is marked optional).
+   - **Base URL**: leave empty for cloud providers. Local and self-hosted providers need it (for example `http://ollama:11434` for the Ollama container).
+   - **Google Vertex AI** uses a different form: **GCP Project ID** and **Region** (required) and an optional **Service Account JSON Path** instead of an API key. Without the JSON path, the server's default Google Cloud credentials are used.
+4. Click **Add Configuration**.
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#anthropic-claude)
+### 2. Test the connection
 
-**Google Gemini**
-- Cost: ~$0.075-0.30 per 1K tokens
-- Speed: Very fast
-- Quality: Good to excellent
-- Best for: Multimodal (images, audio, video)
-- Advantage: Longest context (up to 2M tokens)
+On the new configuration, click **Test** (tooltip: *Test Connection*). A green check means Open Notebook reached the provider with your key. A red cross means the key, the base URL or the network is wrong; see [Troubleshooting](#troubleshooting).
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#google-gemini)
+### 3. Add models
 
-**Groq (Ultra-Fast)**
-- Cost: ~$0.05 per 1M tokens (cheapest)
-- Speed: Ultra-fast (fastest available)
-- Quality: Good
-- Best for: Budget-conscious, transformations, speed-critical tasks
-- Disadvantage: Limited model selection
+1. On the same configuration, click **Models** (tooltip: *Sync Models*). The **Discover Models** dialog lists the models the provider offers.
+2. Set **Model Type** first: `Language`, `Embedding`, `TTS` or `STT`. The list isn't filtered by type, so pick the type, then tick only models of that type.
+3. Tick the models you want (or type a name in the search box to add one that isn't listed) and click **Add (N)**.
+4. Open the dialog again for each other type you need. At minimum add one **Language** model and one **Embedding** model.
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#groq)
+### 4. Set default models
 
-**OpenRouter (100+ Models)**
-- Cost: Pay-per-model (varies widely)
-- Speed: Varies by model
-- Quality: Varies by model
-- Best for: Model comparison, testing, unified billing
-- Advantage: One API key for 100+ models from different providers, plus
-  text-to-speech and speech-to-text models
+Scroll down to **Default Model Assignments** on the same page.
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#openrouter)
+- While a required default is missing, a notice lists it with an **Auto-assign Defaults** button. Click it to fill **Chat Model** and **Embedding Model** from the models you added.
+- Or pick each default from its dropdown. Changes save immediately.
 
-**DashScope (Qwen)**
-- Cost: ~$0.01-0.06 per 1K tokens
-- Speed: Fast
-- Quality: Good
-- Best for: Users in Asia, Alibaba Cloud ecosystem
-- Advantage: Competitive pricing, strong multilingual support
+| Default | Required | Used for |
+|---|---|---|
+| **Chat Model** | Yes | Notebook and source chat |
+| **Embedding Model** | Yes | Vector search and Ask |
+| **Text-to-Speech Model** | No | Podcasts |
+| **Speech-to-Text Model** | No | Transcribing audio and video sources |
+| **Transformation Model** | No (uses the chat model) | Transformations and insights |
+| **Tools Model** | No (uses the chat model) | Ask (search planning) |
+| **Large Context Model** | No (uses the chat model) | Any prompt over ~105K tokens is sent here automatically |
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#dashscope-qwen)
+**Auto-assign Defaults** only fills Chat Model and Embedding Model. Set Text-to-Speech and Speech-to-Text by hand if you want podcasts or audio/video transcription.
 
-**MiniMax**
-- Cost: Varies by model
-- Speed: Fast
-- Quality: Good
-- Best for: Long context tasks (204K tokens)
-- Advantage: Very long context window
+### 5. Check that chat works
 
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#minimax)
+1. In the sidebar, click **Notebooks** → **New Notebook**, enter a name and click **Create New Notebook**.
+2. In the notebook, click the **Add Source** button and pick **Add Source** from its menu (the other entry, **Add Existing Sources**, reuses sources you already have). Choose **Enter Text**, paste a paragraph, give it a title, then click **Next** through the remaining steps and **Done**.
+3. Wait for the source to finish processing, then type a question in the chat panel and send it with **Ctrl+Enter** (**⌘+Enter** on macOS).
 
-**Cohere**
-- Cost: Usage-based
-- Speed: Fast
-- Quality: Good (Command family)
-- Best for: Enterprise RAG, multilingual embeddings
-- Advantage: Language **and** embedding models from one key (`embed-v4.0`); reranking is not yet wired in
+If you get an answer, you're done. Add more providers the same way at any time; each one gets its own configurations and models.
 
-**Novita**
-- Cost: Pay-per-model (competitive)
-- Speed: Fast
-- Quality: Varies by model
-- Best for: Open-weight LLMs behind one OpenAI-compatible key
-- Advantage: Broad open-model catalog
+### Troubleshooting
 
-**SiliconFlow**
-- Cost: Pay-per-model (competitive)
-- Speed: Fast
-- Quality: Varies by model
-- Best for: Hosted DeepSeek / Qwen / GLM / Kimi, including mainland China accounts
-- Advantage: Global and mainland China endpoints
-
-**Z.ai**
-- Cost: Pay-per-token
-- Speed: Fast
-- Quality: Good (GLM family)
-- Best for: GLM models from their maker
-- Advantage: Current GLM releases first
-
-**PayPerQ (PPQ)**
-- Cost: Pay-as-you-go across providers
-- Speed: Varies by routed model
-- Quality: Varies by routed model
-- Best for: One key spanning language, embedding, speech-to-text and text-to-speech
-- Advantage: Multi-modality OpenAI-compatible gateway (`https://api.ppq.ai/v1`)
-
-### Local / Self-Hosted (Free)
-
-**Ollama (Recommended for Local)**
-- Cost: Free (electricity only)
-- Speed: Depends on hardware (slow on CPU, fast on GPU)
-- Quality: Good (open-source models)
-- Setup: 10 minutes
-- Best for: Privacy-first, offline use
-- Privacy: 100% local, nothing leaves your machine
-
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#ollama-recommended-for-local)
-
-**oMLX (Apple Silicon)**
-- Cost: Free (electricity only)
-- Speed: Fast on M-series GPUs (MLX)
-- Quality: Good (bring-your-own MLX models)
-- Setup: 10 minutes
-- Best for: macOS Apple Silicon, private local inference
-- Privacy: 100% local; default URL `http://localhost:11435/v1` (avoids SurrealDB on 8000)
-
-→ [Setup Guide](../5-CONFIGURATION/omlx.md)
-
-**LM Studio (Alternative)**
-- Cost: Free (electricity only)
-- Speed: Depends on hardware
-- Quality: Good (same models as Ollama)
-- Setup: 15 minutes (GUI interface)
-- Best for: Non-technical users who prefer GUI over CLI
-- Privacy: 100% local
-
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#lm-studio-local-alternative)
-
-### Enterprise
-
-**Azure OpenAI**
-- Cost: Same as OpenAI (usage-based)
-- Speed: Very fast
-- Quality: Excellent (same models as OpenAI)
-- Setup: 10 minutes (more complex)
-- Best for: Enterprise, compliance (HIPAA, SOC2), VPC integration
-
-→ [Setup Guide](../5-CONFIGURATION/ai-providers.md#azure-openai)
+- **Test fails on a cloud provider**: check the key on the provider's website and that the account has credit. Edit the configuration to replace the key.
+- **Test fails on a local provider**: the base URL must be reachable *from the Open Notebook container*, not from your browser. `localhost` inside the container is the container itself. See [Ollama](../5-CONFIGURATION/ollama.md).
+- **Chat says "No model configured…"**: a default is empty. Go back to step 4.
+- **Source stays queued forever**: the background worker isn't running. In Docker it runs inside the `open_notebook` container (check `docker compose logs open_notebook`); from source you start it yourself.
+- **"Decryption Error" on a configuration**: `OPEN_NOTEBOOK_ENCRYPTION_KEY` changed since the key was saved. Delete the configuration and add it again.
+- More: [AI & Chat Issues](../6-TROUBLESHOOTING/ai-chat-issues.md).
 
 ---
 
-## Comparison Table
+## Supported providers
 
-| Provider | Speed | Cost | Quality | Privacy | Setup | Context |
-|----------|-------|------|---------|---------|-------|---------|
-| **OpenAI** | Very Fast | $$ | Excellent | Low | 5 min | 128K |
-| **Anthropic** | Fast | $$ | Excellent | Low | 5 min | 200K |
-| **Google** | Very Fast | $$ | Good-Excellent | Low | 5 min | 2M |
-| **Groq** | Ultra Fast | $ | Good | Low | 5 min | 32K |
-| **OpenRouter** | Varies | Varies | Varies | Low | 5 min | Varies |
-| **DashScope** | Fast | $ | Good | Low | 5 min | Varies |
-| **MiniMax** | Fast | $$ | Good | Low | 5 min | 204K |
-| **Cohere** | Fast | $$ | Good | Low | 5 min | 128K |
-| **Novita** | Fast | $ | Varies | Low | 5 min | Varies |
-| **SiliconFlow** | Fast | $ | Varies | Low | 5 min | Varies |
-| **Z.ai** | Fast | $$ | Good | Low | 5 min | Varies |
-| **PayPerQ (PPQ)** | Varies | Varies | Varies | Low | 5 min | Varies |
-| **Ollama** | Slow-Medium | Free | Good | Max | 10 min | Varies |
-| **oMLX** | Fast (MLX) | Free | Good | Max | 10 min | Varies |
-| **LM Studio** | Slow-Medium | Free | Good | Max | 15 min | Varies |
-| **Azure** | Very Fast | $$ | Excellent | High | 10 min | 128K |
+Open Notebook supports 24 providers. The table lists the model types each provider offers when you add a configuration. What you can actually add depends on the models in your provider account.
+
+| Provider | Language | Embedding | Speech-to-Text | Text-to-Speech | Setup |
+|---|:-:|:-:|:-:|:-:|---|
+| OpenAI | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#openai) |
+| Anthropic | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#anthropic-claude) |
+| Google AI (Gemini) | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#google-gemini) |
+| Groq | ✅ | | ✅ | | [guide](../5-CONFIGURATION/ai-providers.md#groq) |
+| Mistral AI | ✅ | ✅ | ✅ | ✅ | |
+| DeepSeek | ✅ | | | | |
+| xAI (Grok) | ✅ | | | ✅ | |
+| OpenRouter | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#openrouter) |
+| DashScope (Qwen) | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#dashscope-qwen) |
+| MiniMax | ✅ | | | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#minimax) |
+| Novita | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#novita) |
+| SiliconFlow | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#siliconflow) |
+| Z.ai | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#zai) |
+| PayPerQ (PPQ) | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#payperq-ppq) |
+| Cohere | ✅ | ✅ | | | [guide](../5-CONFIGURATION/ai-providers.md#cohere) |
+| Voyage AI | | ✅ | | | |
+| ElevenLabs | | | ✅ | ✅ | |
+| Deepgram | | | ✅ | ✅ | |
+| Ollama (local) | ✅ | ✅ | | | [guide](../5-CONFIGURATION/ollama.md) |
+| oMLX (local, Apple Silicon) | ✅ | ✅ | | | [guide](../5-CONFIGURATION/omlx.md) |
+| Azure OpenAI | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/ai-providers.md#azure-openai) |
+| Google Vertex AI | ✅ | ✅ | | ✅ | |
+| OpenAI Compatible | ✅ | ✅ | ✅ | ✅ | [guide](../5-CONFIGURATION/openai-compatible.md) |
+| Anthropic Compatible | ✅ | | | | [guide](../5-CONFIGURATION/ai-providers.md#anthropic-compatible) |
+
+**OpenAI Compatible** covers any server that speaks the OpenAI API: LM Studio, vLLM, LocalAI, and self-hosted speech servers ([local TTS](../5-CONFIGURATION/local-tts.md), [local STT](../5-CONFIGURATION/local-stt.md)). LM Studio has no provider of its own; add it as OpenAI Compatible.
 
 ---
 
-## Choosing Your Provider
+## Choosing providers
 
-### I want the easiest setup
-→ **OpenAI** — Most popular, best community support
+Open Notebook needs at least a **language** model (for chat) and an **embedding** model (for search and Ask). Podcasts also need **text-to-speech**.
 
-### I have unlimited budget
-→ **OpenAI** — Best quality
+**One provider for everything.** OpenAI, Google AI, Mistral AI, OpenRouter, PayPerQ and Azure OpenAI offer all four model types under one key. This is the simplest setup.
 
-### I want to save money
-→ **Groq** — Cheapest cloud ($0.05 per 1M tokens)
+**Language-only providers need a partner.** Anthropic, DeepSeek, DashScope, Novita, SiliconFlow, Z.ai and Anthropic Compatible offer only language models. Add a second provider for embeddings (and for text-to-speech if you want podcasts), for example OpenAI, Google AI, Mistral AI, Voyage AI or a local Ollama.
 
-### I want privacy/offline
-→ **Ollama** — Free, local, private
+**Fully local.** Ollama and oMLX provide language and embedding models on your own hardware. For podcasts and transcription without the cloud, add a local speech server through OpenAI Compatible ([local TTS](../5-CONFIGURATION/local-tts.md), [local STT](../5-CONFIGURATION/local-stt.md)). Local models are slower on CPU; a GPU or Apple Silicon helps.
 
-### I have an Apple Silicon Mac
-→ **oMLX** — Free, local MLX inference ([setup](../5-CONFIGURATION/omlx.md))
+**Mixing is normal.** Each default model can come from a different provider, for example a cloud chat model with local embeddings.
 
-### I want a GUI (not CLI)
-→ **LM Studio** — Desktop app
+**Changing the embedding model later** means rebuilding existing embeddings. The UI asks before switching and links to the rebuild on the **Advanced** page.
 
-### I'm in an enterprise
-→ **Azure OpenAI** — Compliance, support
-
-### I need long context (200K+ tokens)
-→ **Anthropic** — Best long-context model
-
-### I need multimodal (images, audio, video)
-→ **Google Gemini** — Best multimodal support
-
-### I want access to many models with one API key
-→ **OpenRouter** — 100+ models, unified billing
+Prices, context windows and model line-ups change often, so this guide doesn't list them. Check each provider's own pricing and model pages.
 
 ---
 
-## Ready to Set Up Your Provider?
+## Next steps
 
-Now that you've chosen a provider, follow the detailed setup instructions:
+- [AI Providers Configuration Guide](../5-CONFIGURATION/ai-providers.md): per-provider keys, base URLs and regional endpoints
+- [Ollama](../5-CONFIGURATION/ollama.md): local models, networking and timeouts
+- [User Guide](../3-USER-GUIDE/index.md): adding sources, chat, podcasts
 
-→ **[AI Providers Configuration Guide](../5-CONFIGURATION/ai-providers.md)**
-
-This guide includes:
-- Step-by-step setup instructions for each provider via the Settings UI
-- How to add credentials, test connections, and discover models
-- Model selection and recommendations
-- Provider-specific troubleshooting
-- Hardware requirements (for local providers)
-- Cost optimization tips
-
----
-
-## Cost Estimator
-
-### OpenAI
-```
-Light use (10 chats/day): $1-5/month
-Medium use (50 chats/day): $10-30/month
-Heavy use (all-day use): $50-100+/month
-```
-
-### Anthropic
-```
-Light use: $1-3/month
-Medium use: $5-20/month
-Heavy use: $20-50+/month
-```
-
-### Groq
-```
-Light use: $0-1/month
-Medium use: $2-5/month
-Heavy use: $5-20/month
-```
-
-### Ollama
-```
-Any use: Free (electricity only)
-8GB GPU running 24/7: ~$10/month electricity
-```
-
----
-
-## Next Steps
-
-1. **You've chosen a provider** (from this comparison guide)
-2. **Follow the setup guide**: [AI Providers Configuration](../5-CONFIGURATION/ai-providers.md)
-3. **Add your credential** in Manage → Models
-4. **Test your connection** and discover models
-5. **Start using Open Notebook!**
-
----
-
-## Need Help?
-
-- **Setup issues?** See [AI Providers Configuration](../5-CONFIGURATION/ai-providers.md) for detailed troubleshooting per provider
-- **General problems?** Check [Troubleshooting Guide](../6-TROUBLESHOOTING/index.md)
-- **Questions?** Join [Discord community](https://discord.gg/37XJPXfz2w)
+**Need help?** Join the [Discord community](https://discord.gg/37XJPXfz2w).
diff --git a/docs/index.md b/docs/index.md
index cd871f57..12b5dfcb 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -1,289 +1,28 @@
 # Open Notebook Documentation
 
-Welcome to Open Notebook - a privacy-focused AI research assistant. This documentation is organized for different needs.
-
----
-
-## 🎯 Choose Your Path
-
-### I'm brand new
-→ Start here: **[0-START-HERE](0-START-HERE/index.md)**
-- Learn what Open Notebook is
-- Pick your setup path (OpenAI, cloud, local/Ollama)
-- 5-minute quick start
-
-### I need to install/deploy
-→ Go here: **[1-INSTALLATION](1-INSTALLATION/index.md)**
-- Multiple installation routes
-- Docker Compose (recommended)
-- From source (developers)
-- ~~Single container~~ (deprecated, see Docker Compose)
-
-### I want to understand how it works
-→ Read this: **[2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md)**
-- Mental models and architecture
-- How RAG (retrieval-augmented generation) works
-- Notebooks, sources, and notes explained
-- Chat vs. transformations vs. podcasts
-
-### I want to use it (tutorials)
-→ Follow this: **[3-USER-GUIDE](3-USER-GUIDE/index.md)**
-- How to add sources (PDFs, URLs, audio, video)
-- Creating and organizing notes
-- Chat effectively with your research
-- Creating podcasts from research
-- Search techniques
-
-### I need to configure it
-→ Check this: **[5-CONFIGURATION](5-CONFIGURATION/index.md)**
-- Choose and setup AI provider
-- API configuration
-- Database setup
-- Advanced tuning
-
-### I need provider-specific help
-→ Go here: **[4-AI-PROVIDERS](4-AI-PROVIDERS/index.md)**
-- OpenAI, Anthropic, Google, Groq, Ollama, Azure
-- Model comparisons
-- Cost estimates
-- Setup paths
-
-### Something's not working
-→ Troubleshoot: **[6-TROUBLESHOOTING](6-TROUBLESHOOTING/index.md)**
-- Quick fixes (top 10 issues)
-- Installation problems
-- Connection issues
-- AI/chat problems
-- Content processing issues
-- Podcast problems
-
-### I want to contribute/develop
-→ Read this: **[7-DEVELOPMENT](7-DEVELOPMENT/index.md)**
-- Architecture and tech stack
-- Contributing guidelines
-- API reference
-- Testing
-
----
-
-## 📊 Documentation Overview
-
-### By Section
-
-**[0-START-HERE](0-START-HERE/index.md)** — Entry point
-- What is Open Notebook?
-- Quick start guides (3 routes)
-- First 5 minutes
-
-**[1-INSTALLATION](1-INSTALLATION/index.md)** — Getting it running
-- Multiple installation routes
-- Docker Compose (recommended), from-source
-- Requirements and setup
-
-**[2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md)** — Understanding the system
-- Notebooks, sources, notes hierarchy
-- RAG (retrieval-augmented generation)
-- Chat, transformations, podcasts
-- Context management
-
-**[3-USER-GUIDE](3-USER-GUIDE/index.md)** — Using features
-- Adding sources (all types)
-- Working with notes
-- Chat effectively
-- Creating podcasts
-- Searching (text and semantic)
-
-**[4-AI-PROVIDERS](4-AI-PROVIDERS/index.md)** — AI configuration
-- Provider comparison
-- Setup for each provider
-- Model recommendations
-- Cost estimates
-
-**[5-CONFIGURATION](5-CONFIGURATION/index.md)** — Complete reference
-- AI provider setup (detailed)
-- Database configuration
-- Server/API settings
-- Advanced tuning
-- Environment variables (complete reference)
-
-**[6-TROUBLESHOOTING](6-TROUBLESHOOTING/index.md)** — Problem solving
-- Quick fixes (top 10)
-- Installation issues
-- Connection problems
-- AI/chat issues
-- Content processing
-- Podcast generation
-- Getting help
-
-**[7-DEVELOPMENT](7-DEVELOPMENT/index.md)** — For contributors
-- Architecture
-- Contributing guidelines
-- API reference
-- Testing & development
-
----
-
-## 🔍 Find What You Need
-
-### By Problem Type
-
-**Installation & Setup**
-- Fresh install? → [0-START-HERE](0-START-HERE/index.md)
-- Detailed installation routes? → [1-INSTALLATION](1-INSTALLATION/index.md)
-- Configuration reference? → [5-CONFIGURATION](5-CONFIGURATION/index.md)
-- Provider setup? → [4-AI-PROVIDERS](4-AI-PROVIDERS/index.md)
-
-**Using Open Notebook**
-- How to use features? → [3-USER-GUIDE](3-USER-GUIDE/index.md)
-- Understanding concepts? → [2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md)
-- Chat not working? → [6-TROUBLESHOOTING - AI Issues](6-TROUBLESHOOTING/ai-chat-issues.md)
-- Files won't upload? → [6-TROUBLESHOOTING - Quick Fixes](6-TROUBLESHOOTING/quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-
-**Troubleshooting**
-- Quick fix? → [6-TROUBLESHOOTING - Quick Fixes](6-TROUBLESHOOTING/quick-fixes.md)
-- Can't connect? → [6-TROUBLESHOOTING - Connection](6-TROUBLESHOOTING/connection-issues.md)
-- Chat issues? → [6-TROUBLESHOOTING - AI Issues](6-TROUBLESHOOTING/ai-chat-issues.md)
-- Podcast problems? → [6-TROUBLESHOOTING - Quick Fixes](6-TROUBLESHOOTING/quick-fixes.md#8-podcast-generation-failed)
-
-**Development**
-- Architecture? → [7-DEVELOPMENT - Architecture](7-DEVELOPMENT/architecture.md)
-- Contributing? → [7-DEVELOPMENT - Contributing](7-DEVELOPMENT/contributing.md)
-- API reference? → [7-DEVELOPMENT - API Reference](7-DEVELOPMENT/api-reference.md)
-
----
-
-## 📚 Reading Paths
-
-### Path 1: Complete Beginner (1-2 hours)
-1. [0-START-HERE/index.md](0-START-HERE/index.md) — Understand what it is
-2. [0-START-HERE Quick Start](0-START-HERE/index.md) — Set it up
-3. [2-CORE-CONCEPTS/index.md](2-CORE-CONCEPTS/index.md) — Understand concepts
-4. [3-USER-GUIDE/index.md](3-USER-GUIDE/index.md) — Learn features
-
-**Result:** Fully understand how to use Open Notebook
-
-### Path 2: Get Running Fast (15 minutes)
-1. [0-START-HERE](0-START-HERE/index.md) — Pick your path
-2. Follow quick-start guide for your setup
-3. Start using!
-
-**Result:** Running in 15 minutes, learn details later
-
-### Path 3: DevOps/Deployment (1-2 hours)
-1. [1-INSTALLATION](1-INSTALLATION/index.md) — Understand routes
-2. [5-CONFIGURATION](5-CONFIGURATION/index.md) — Reference setup
-3. [7-DEVELOPMENT - Architecture](7-DEVELOPMENT/architecture.md) — Understand system
-
-**Result:** Ready to deploy to production
-
-### Path 4: Troubleshooting (5-30 minutes)
-1. [6-TROUBLESHOOTING/index.md](6-TROUBLESHOOTING/index.md) — Identify problem
-2. Find specific guide
-3. Follow solutions
-
-**Result:** Problem solved!
-
----
-
-## ❓ Common Questions
-
-**Q: Where do I start?**
-A: → [0-START-HERE](0-START-HERE/index.md) — Choose your setup path
-
-**Q: How do I install it?**
-A: → [1-INSTALLATION](1-INSTALLATION/index.md) — Multiple routes available
-
-**Q: How do I use [feature]?**
-A: → [3-USER-GUIDE](3-USER-GUIDE/index.md) — Step-by-step tutorials
-
-**Q: Why does [feature] work like that?**
-A: → [2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md) — Understand the mental model
-
-**Q: How do I configure [provider]?**
-A: → [4-AI-PROVIDERS](4-AI-PROVIDERS/index.md) or [5-CONFIGURATION](5-CONFIGURATION/index.md)
-
-**Q: Something's broken, what do I do?**
-A: → [6-TROUBLESHOOTING](6-TROUBLESHOOTING/index.md) — Problem solver
-
-**Q: How does the system work?**
-A: → [2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md) — Architecture and concepts
-
-**Q: Can I contribute?**
-A: → [7-DEVELOPMENT](7-DEVELOPMENT/index.md) — Contributing guide
-
----
-
-## 📖 How This Documentation is Organized
-
-### Principles
-- **Progressive Disclosure**: Start simple, go deeper if needed
-- **Multiple Entry Routes**: Different paths for different users
-- **High Signal-to-Noise**: Focused content, no fluff
-- **Step-by-Step**: Clear instructions you can follow
-- **Decision Trees**: Help you pick the right path
-- **Symptom-Based**: Troubleshooting by what's broken
-
-### Structure
-- **0-START-HERE** — Entry point (everyone starts here)
-- **1-INSTALLATION** — Multiple setup routes
-- **2-CORE-CONCEPTS** — Mental models (understand why)
-- **3-USER-GUIDE** — How to use (step-by-step)
-- **4-AI-PROVIDERS** — Provider guides
-- **5-CONFIGURATION** — Reference material
-- **6-TROUBLESHOOTING** — Problem solving
-- **7-DEVELOPMENT** — For contributors
-
----
-
-## 🚀 Quick Navigation
-
-### First Time?
-→ **[START HERE](0-START-HERE/index.md)**
-
-### Just Want to Use It?
-→ **[QUICK START](0-START-HERE/index.md)** (5 minutes)
-
-### Something Broken?
-→ **[TROUBLESHOOTING](6-TROUBLESHOOTING/index.md)**
-
-### Full Reference?
-→ **[CONFIGURATION](5-CONFIGURATION/index.md)**
-
-### Developer?
-→ **[DEVELOPMENT](7-DEVELOPMENT/index.md)**
-
----
-
-## 📞 Getting Help
-
-- **Discord Community** — https://discord.gg/37XJPXfz2w
-- **GitHub Issues** — https://github.com/lfnovo/open-notebook/issues
-- **Documentation** — You're reading it!
-
----
-
-## 📈 Documentation Stats
-
-- **8 major sections**
-- **35+ focused guides**
-- **~80,000 words**
-- **Covers all features**
-- **Multiple entry paths**
-- **Progressive difficulty**
-
----
-
-## 🎯 Start Here
-
-**First time using Open Notebook?**
-→ Go to **[0-START-HERE](0-START-HERE/index.md)**
-
-**Experienced, looking for specific help?**
-→ Use the navigation above to find your section
-
-**Something not working?**
-→ Go to **[TROUBLESHOOTING](6-TROUBLESHOOTING/index.md)**
-
----
-
-Last updated: January 2026 | Open Notebook v1.2.4+
+Open Notebook is a self-hosted, privacy-focused AI research assistant. New here? Start with **[0-START-HERE](0-START-HERE/index.md)**: pick a quick start and you'll have a working chat in a few minutes.
+
+| Section | Read it when you want to… |
+|---|---|
+| **[0-START-HERE](0-START-HERE/index.md)** | Install for the first time with a cloud provider or local Ollama |
+| **[1-INSTALLATION](1-INSTALLATION/index.md)** | Choose an install route: Docker Compose (recommended), from source, Windows native, single container (deprecated) |
+| **[2-CORE-CONCEPTS](2-CORE-CONCEPTS/index.md)** | Understand notebooks, sources, notes, context, chat vs. transformations, podcasts |
+| **[3-USER-GUIDE](3-USER-GUIDE/index.md)** | Add sources, chat, take notes, search, create podcasts |
+| **[4-AI-PROVIDERS](4-AI-PROVIDERS/index.md)** | Connect a provider, set default models, compare what each provider supports |
+| **[5-CONFIGURATION](5-CONFIGURATION/index.md)** | Look up provider details, environment variables, security, reverse proxy, local TTS/STT |
+| **[6-TROUBLESHOOTING](6-TROUBLESHOOTING/index.md)** | Fix something that isn't working |
+| **[7-DEVELOPMENT](7-DEVELOPMENT/index.md)** | Contribute: architecture, development setup, API reference, decision records |
+
+## Common questions
+
+- **Chat doesn't work after installing.** Set the default models: [Connect a provider](4-AI-PROVIDERS/index.md#connect-a-provider), step 4.
+- **Which provider should I use?** [Choosing providers](4-AI-PROVIDERS/index.md#choosing-providers)
+- **How do I change a setting in Docker?** [Changing settings](1-INSTALLATION/docker-compose.md#changing-settings)
+- **How do I reach it from another machine?** [Access from another machine](1-INSTALLATION/docker-compose.md#access-from-another-machine)
+- **Something's broken.** [Quick Fixes](6-TROUBLESHOOTING/quick-fixes.md) · [AI & Chat Issues](6-TROUBLESHOOTING/ai-chat-issues.md) · [Connection Issues](6-TROUBLESHOOTING/connection-issues.md)
+
+## Getting help
+
+- **Discord**: https://discord.gg/37XJPXfz2w
+- **GitHub Issues** (reproducible bugs): https://github.com/lfnovo/open-notebook/issues
+- **GitHub Discussions** (questions and ideas): https://github.com/lfnovo/open-notebook/discussions

From 61cd010afffb3e27afa77dd6bc40a6f556a11f46 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 23:16:37 -0300
Subject: [PATCH 343/345] docs: rewrite user guide and core concepts around the
 current product (#1460)

* docs: rewrite user guide and core concepts around the current product

Rewrites docs/2-CORE-CONCEPTS and docs/3-USER-GUIDE against the code at
v1.15.0: current UI labels from the en-US locale, insights as a
first-class concept ("Insights only" context, Summary in podcasts),
context levels scoped to notebook Chat, Ask's three stages and notebook
scope, the real Add Source wizard, statuses and failure messages, real
transformation and podcast presets and fields, and Default Model
Assignments. Removes invented features (tags, export/share, batch
transformations, page-number citations, podcast bitrate/progress/share,
one-notebook-per-source, permissions) and generic filler.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review (model needs per feature, privacy scope, insight embeddings, upload limit, data storage, retry, UI details)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review (generated encryption key, when speech-to-text is needed)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: point provider setup to the canonical flow, fix Add (N) and Auto-assign scope

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 docs/2-CORE-CONCEPTS/ai-context-rag.md        | 486 +++---------
 .../chat-vs-transformations.md                | 377 ++-------
 docs/2-CORE-CONCEPTS/index.md                 |  62 +-
 .../notebooks-sources-notes.md                | 326 ++------
 docs/2-CORE-CONCEPTS/podcasts-explained.md    | 448 ++---------
 docs/3-USER-GUIDE/adding-sources.md           | 471 ++---------
 docs/3-USER-GUIDE/api-configuration.md        | 393 ++--------
 docs/3-USER-GUIDE/chat-effectively.md         | 564 ++------------
 docs/3-USER-GUIDE/citations.md                | 312 +-------
 .../content-processing-engines.md             |  67 +-
 docs/3-USER-GUIDE/creating-podcasts.md        | 731 ++----------------
 docs/3-USER-GUIDE/index.md                    | 231 ++----
 docs/3-USER-GUIDE/interface-overview.md       | 451 +++--------
 docs/3-USER-GUIDE/search.md                   | 547 ++-----------
 docs/3-USER-GUIDE/transformations.md          | 419 ++--------
 docs/3-USER-GUIDE/working-with-notes.md       | 594 +-------------
 16 files changed, 882 insertions(+), 5597 deletions(-)

diff --git a/docs/2-CORE-CONCEPTS/ai-context-rag.md b/docs/2-CORE-CONCEPTS/ai-context-rag.md
index 5a2cec35..fd213565 100644
--- a/docs/2-CORE-CONCEPTS/ai-context-rag.md
+++ b/docs/2-CORE-CONCEPTS/ai-context-rag.md
@@ -1,450 +1,144 @@
 # AI Context & RAG - How Open Notebook Uses Your Research
 
-Open Notebook uses different approaches to make AI models aware of your research depending on the feature. This section explains **RAG** (used in Ask) and **full-content context** (used in Chat).
+An AI model only knows what is sent to it in the prompt. Open Notebook has two ways of getting your research into that prompt:
+
+- **Chat** sends the content you selected, as it is. Nothing is searched.
+- **Ask** searches your knowledge base and sends only the matching pieces. This is retrieval-augmented generation (RAG).
+
+This page explains both, the context levels that control Chat, and the search that powers Ask.
 
 ---
 
-## The Problem: Making AI Aware of Your Data
+## Context Levels in Notebook Chat
 
-### Traditional Approaches (and their problems)
+In a notebook, every source and note has a context level that decides what notebook Chat sends to the model.
 
-**Option 1: Fine-Tuning**
-- Train the model on your data
-- Pro: Model becomes specialized
-- Con: Expensive, slow, permanent (can't unlearn)
+| Level | Applies to | What is sent |
+|-------|-----------|--------------|
+| **Not included in chat** | Sources and notes | Nothing |
+| **Insights only** | Sources that have insights | The source title and its [insights](notebooks-sources-notes.md#insights) |
+| **Full content** | Sources and notes | Sources: title, insights and the full extracted text. Notes: title and content |
 
-**Option 2: Send Everything to Cloud**
-- Upload all your data to ChatGPT/Claude API
-- Pro: Works well, fast
-- Con: Privacy nightmare, data leaves your control, expensive
+How it behaves:
 
-**Option 3: Ignore Your Data**
-- Just use the base model without your research
-- Pro: Private, free
-- Con: AI doesn't know anything about your specific topic
+- **Insights only needs insights.** It is offered only for sources that already have at least one insight. Run a transformation on a source to make it available.
+- **Defaults when you open a notebook:** sources with insights start as *Insights only*, sources without insights start as *Full content*, and all notes are included.
+- **Selections are not saved.** They live in the page and reset when you reload it.
+- **The chat shows the total.** Above the message box, the chat panel shows how many sources and notes are in context and an estimated token and character count.
 
-### Open Notebook's Dual Approach
+How to change it is described in [Chat Effectively](../3-USER-GUIDE/chat-effectively.md#choosing-what-the-ai-sees).
 
-**For Chat**: Sends the entire selected content to the LLM
-- Simple and transparent: You select sources, they're sent in full
-- Maximum context: AI sees everything you choose
-- You control which sources are included
+**Why it matters:**
 
-**For Ask (RAG)**: Retrieval-Augmented Generation
-- RAG = Retrieval-Augmented Generation
-- The insight: *Search your content, find relevant pieces, send only those*
-- Automatic: AI decides what's relevant based on your question
+- **Cost and speed.** Everything in context is sent with every message. *Insights only* is usually a fraction of the size of the full text.
+- **Focus.** Leaving out unrelated sources gives the model less to get confused by.
+- **What a cloud provider receives.** A source set to *Not included in chat* is not sent by Chat.
+
+> **Context levels only apply to notebook Chat.** Ask, Search and podcast generation have their own selection (described below). A source excluded from Chat can still reach the model through Ask if it is embedded and Ask is not limited to other notebooks.
 
 ---
 
-## How RAG Works: Three Stages
+## Chat: Full Content, No Retrieval
 
-### Stage 1: Content Preparation
+When you send a message in notebook Chat, Open Notebook builds one prompt from:
 
-When you upload a source, Open Notebook prepares it for retrieval:
+1. the notebook's name and description,
+2. every source and note in context, at its context level,
+3. the conversation so far, and your new message.
 
-```
-1. EXTRACT TEXT
-   PDF → text
-   URL → webpage text
-   Audio → transcribed text
-   Video → subtitles + transcription
+There is no search step: the model sees all of the selected content every time. This is why Chat is good for reading closely and comparing a few sources, and why large selections get expensive.
 
-2. CHUNK INTO PIECES
-   Long documents → break into ~500-word chunks
-   Why? AI context has limits; smaller pieces are more precise
+The model is your **Chat Model** default, or the model you picked for that chat session. If the prompt is larger than about 105,000 tokens, Open Notebook switches to the **Large Context Model** default instead (or the Chat Model if none is set), even if you picked a model for the session.
 
-3. CREATE EMBEDDINGS
-   Each chunk → semantic vector (numbers representing meaning)
-   Why? Allows finding chunks by similarity, not just keywords
+### Source Chat
 
-4. STORE IN DATABASE
-   Chunks + embeddings + metadata → searchable storage
-```
-
-**Example:**
-```
-Source: "AI Safety Research 2026" (50-page PDF)
-↓
-Extracted: 50 pages of text
-↓
-Chunked: 150 chunks (~500 words each)
-↓
-Embedded: Each chunk gets a vector (1536 numbers for OpenAI)
-↓
-Stored: Ready for search
-```
+Opening a source and using its chat (**Chat with Sources** on the source view) is a separate chat about that single source. It sends the source's full text and its insights, trimmed to fit a budget of about 50,000 tokens. Longer sources are truncated, with a notice to the model that the text was cut.
 
 ---
 
-### Stage 2: Query Time (What You Search For)
+## Ask: Retrieval Over Your Knowledge Base
 
-When you ask a question, the system finds relevant content:
+Ask (on the **Ask and Search** page) answers one question in three stages:
 
 ```
-1. YOU ASK A QUESTION
-   "What does the paper say about alignment?"
-
-2. SYSTEM CONVERTS QUESTION TO EMBEDDING
-   Your question → vector (same way chunks are vectorized)
-
-3. SIMILARITY SEARCH
-   Find chunks most similar to your question
-   (using vector math, not keyword matching)
-
-4. RETURN TOP RESULTS
-   Usually top 5-10 most similar chunks
-
-5. YOU GET BACK
-   ✓ The relevant chunks
-   ✓ Where they came from (sources + page numbers)
-   ✓ Relevance scores
+Your question
+    │
+    ▼
+1. STRATEGY      a model plans up to 5 searches
+    │
+    ▼
+2. ANSWERS       each search runs a vector search (top 10 matches)
+    │            and a model writes a partial answer from those matches
+    ▼
+3. FINAL ANSWER  a model combines the partial answers, with citations
 ```
 
-**Example:**
-```
-Q: "What does the paper say about alignment?"
-↓
-Q vector: [0.23, -0.51, 0.88, ..., 0.12]
-↓
-Search: Compare to all chunk vectors
-↓
-Results:
-  - Chunk 47 (alignment section): similarity 0.94
-  - Chunk 63 (safety approaches): similarity 0.88
-  - Chunk 12 (related work): similarity 0.71
-```
+Things to know:
+
+- **Ask needs an embedding model.** Without a default Embedding Model the page tells you to set one up and Ask is unavailable.
+- **Ask only sees embedded content.** It searches embedded source chunks, insights and notes. Insights are embedded on their own, so a source added with embedding turned off can still be found through its insights, but not through its full text until you embed it.
+- **Ask searches everything by default.** Leave the **Notebooks** selector empty to search your whole knowledge base, or pick notebooks to limit it. Chat context levels don't apply.
+- **Three model slots.** Strategy, Answer and Final Answer use your Chat Model default unless you change them under **Advanced** on the Ask tab.
+- **Ask is single-turn.** There are no follow-ups. Save a useful answer with **Save to Notebooks**, or take the topic to Chat.
 
 ---
 
-### Stage 3: Augmentation (How AI Uses It)
+## Search: Text vs. Vector
 
-Now you have the relevant pieces. The AI uses them:
+The **Search** tab lets you find content yourself, without an AI answer. Both modes cover sources, insights and notes; you can turn sources or notes off and limit the search to specific notebooks.
 
-```
-SYSTEM BUILDS A PROMPT:
-  "You are an AI research assistant.
+### Text search (keywords)
 
-   The user has the following research materials:
-   [CHUNK 47 CONTENT]
-   [CHUNK 63 CONTENT]
+- Full-text search with BM25 ranking.
+- Matches source titles and content, insights, and note titles and content.
+- Works on every source, embedded or not, and needs no AI model.
+- Words are stemmed with an English stemmer (so "running" also matches "run"). Matching in other languages is less forgiving.
 
-   User question: 'What does the paper say about alignment?'
+Use it for exact names, terms and phrases you remember.
 
-   Answer based on the above materials."
+### Vector search (meaning)
 
-AI RESPONDS:
-  "Based on the research materials, the paper approaches
-   alignment through [pulls from chunks] and emphasizes
-   [pulls from chunks]..."
+- Your query is turned into a vector with the embedding model and compared with the stored chunk vectors.
+- Matches source content, insights and note content by similarity. Titles are not matched.
+- Needs an embedding model, and only finds embedded content. Insights are embedded separately from source text, so a source whose text wasn't embedded can still match through its insights.
 
-SYSTEM ADDS CITATIONS:
-  "- See research materials page 15 for approach details
-   - See research materials page 23 for emphasis on X"
-```
+Use it when you know the idea but not the wording.
+
+### How embedding works
+
+When a source is embedded, its text is split into chunks of about 400 tokens with a 15% overlap (configurable with `OPEN_NOTEBOOK_CHUNK_SIZE` and `OPEN_NOTEBOOK_CHUNK_OVERLAP`), and each chunk is stored with its vector. Whether new sources are embedded is set by **Settings → Embedding and Search → Default Embedding Option** (Ask, Always or Never) and the checkbox in the Add Source wizard. If you change the embedding model, rebuild the embeddings from **Advanced → Rebuild Embeddings**; vectors from different models can't be compared.
 
 ---
 
-## Two Search Modes: Exact vs. Semantic
+## Citations
 
-Open Notebook provides two different search strategies for different goals.
-
-### 1. Text Search (Keyword Matching)
-
-**How it works:**
-- Uses BM25 ranking (the same algorithm Google uses)
-- Finds chunks containing your keywords
-- Ranks by relevance (how often keywords appear, position, etc.)
-
-**When to use:**
-- "I remember the exact phrase 'X' and want to find it"
-- "I'm looking for a specific name or number"
-- "I need the exact quote"
-
-**Example:**
-```
-Search: "transformer architecture"
-Results:
-  1. Chunk with "transformer architecture" 3 times
-  2. Chunk with "transformer" and "architecture" separately
-  3. Chunk with "transformer-based models"
-```
-
-### 2. Vector Search (Semantic Similarity)
-
-**How it works:**
-- Converts your question to a vector (number embedding)
-- Finds chunks with similar vectors
-- No keywords needed—finds conceptually similar content
-
-**When to use:**
-- "Find content about X (without saying exact words)"
-- "I'm exploring a concept"
-- "Find similar ideas even if worded differently"
-
-**Example:**
-```
-Search: "what's the mechanism for model understanding?"
-Results (no "understanding" in any chunk):
-  1. Chunk about interpretability and mechanistic analysis
-  2. Chunk about feature analysis
-  3. Chunk about attention mechanisms
-
-Why? The vectors are semantically similar to your concept.
-```
+Chat and Ask answers cite the items they used by record ID, for example `[source:abc123]`, `[note:def456]` or `[insight:ghi789]`. The app shows these as clickable references that open the cited source, note or insight. Citations point to the whole item, not to a page or passage. See [Citations](../3-USER-GUIDE/citations.md).
 
 ---
 
-## Context Management: Your Control Panel
+## Privacy: What Leaves Your Machine
 
-Here's where Open Notebook is different: **You decide what the AI sees.**
+Content is sent to whichever provider runs the model for that feature. If all your models are local (for example Ollama), no prompt content goes to a cloud AI provider. Other outbound requests still happen: adding a URL source fetches that site, and the Firecrawl and Jina URL engines (when configured) send the URL to those services, which fetch the page and return its content. With a cloud AI provider:
 
-### The Three Levels
+| Feature | What the provider receives |
+|---------|----------------------------|
+| Notebook Chat | Notebook name and description, the sources and notes in context, the conversation |
+| Source Chat | That source's text (up to the budget) and insights, the conversation |
+| Ask | Your question, then the matching chunks, insights and notes from each search |
+| Embedding | The text of every chunk, note and insight being embedded |
+| Transformations | The full text of the source being transformed |
+| Podcasts | See [Podcasts Explained](podcasts-explained.md#privacy-what-each-model-sees) |
 
-| Level | What's Shared | Example Cost | Privacy | Use Case |
-|-------|---------------|--------------|---------|----------|
-| **Full Content** | Complete source text | 10,000 tokens | Low | Detailed analysis, close reading |
-| **Summary Only** | AI-generated summary | 2,000 tokens | High | Background material, references |
-| **Not in Context** | Nothing | 0 tokens | Max | Confidential, irrelevant, or archived |
-
-### How It Works
-
-**Full Content:**
-```
-You: "What's the methodology in paper A?"
-System:
-  - Searches paper A
-  - Retrieves full paper content (or large chunks)
-  - Sends to AI: "Here's paper A. Answer about methodology."
-  - AI analyzes complete content
-  - Result: Detailed, precise answer
-```
-
-**Summary Only:**
-```
-You: "I want to chat using paper A and B"
-System:
-  - For Paper A: Sends AI-generated summary (not full text)
-  - For Paper B: Sends full content (detailed analysis)
-  - AI sees 2 sources but in different detail levels
-  - Result: Uses summaries for context, details for focused content
-```
-
-**Not in Context:**
-```
-You: "I have 10 sources but only want 5 in context"
-System:
-  - Paper A-E: In context (sent to AI)
-  - Paper F-J: Not in context (AI can't see them, doesn't search them)
-  - AI never knows these 5 sources exist
-  - Result: Tight, focused context
-```
-
-### Why This Matters
-
-**Privacy**: You control what leaves your system
-```
-Scenario: Confidential company docs + public research
-Control: Public research in context → Confidential docs excluded
-Result: AI never sees confidential content
-```
-
-**Cost**: You control token usage
-```
-Scenario: 100 sources for background + 5 for detailed analysis
-Control: Full content for 5 detailed, summaries for 95 background
-Result: 80% lower token cost than sending everything
-```
-
-**Quality**: You control what the AI focuses on
-```
-Scenario: 20 sources, question requires deep analysis
-Control: Full content for relevant source, exclude others
-Result: AI doesn't get distracted; gives better answer
-```
-
----
-
-## The Difference: Chat vs. Ask
-
-**IMPORTANT**: These use completely different approaches!
-
-### Chat: Full-Content Context (NO RAG)
-
-**How it works:**
-```
-YOU:
-  1. Select which sources to include in context
-  2. Set context level (full/summary/excluded)
-  3. Ask question
-
-SYSTEM:
-  - Takes ALL selected sources (respecting context levels)
-  - Sends the ENTIRE content to the LLM at once
-  - NO search, NO retrieval, NO chunking
-  - AI sees everything you selected
-
-AI:
-  - Responds based on the full content you provided
-  - Can reference any part of selected sources
-  - Conversational: context stays for follow-ups
-```
-
-**Use this when**:
-- You know which sources are relevant
-- You want conversational back-and-forth
-- You want AI to see the complete context
-- You're doing close reading or analysis
-
-**Advantages:**
-- Simple and transparent
-- AI sees everything (no missed content)
-- Conversational flow
-
-**Limitations:**
-- Limited by LLM context window
-- You must manually select relevant sources
-- Sends more tokens (higher cost with many sources)
-
----
-
-### Ask: RAG - Automatic Retrieval
-
-**How it works:**
-```
-YOU:
-  Ask one complex question
-
-SYSTEM:
-  1. Analyzes your question
-  2. Searches across ALL your sources automatically
-  3. Finds relevant chunks using vector similarity
-  4. Retrieves only the most relevant pieces
-  5. Sends ONLY those chunks to the LLM
-  6. Synthesizes into comprehensive answer
-
-AI:
-  - Sees ONLY the retrieved chunks (not full sources)
-  - Answers based on what was found to be relevant
-  - One-shot answer (not conversational)
-```
-
-**Use this when**:
-- You have many sources and don't know which are relevant
-- You want the AI to search automatically
-- You need a comprehensive answer to a complex question
-- You want to minimize tokens sent to LLM
-
-**Advantages:**
-- Automatic search (you don't pick sources)
-- Works across many sources at once
-- Cost-effective (sends only relevant chunks)
-
-**Limitations:**
-- Not conversational (single question/answer)
-- AI only sees retrieved chunks (might miss context)
-- Search quality depends on how well question matches content
-
----
-
-## What This Means: Privacy by Design
-
-Open Notebook's RAG approach gives you something you don't get with ChatGPT or Claude directly:
-
-**You control the boundary between:**
-- What stays private (on your system)
-- What goes to AI (explicitly chosen)
-- What the AI can see (context levels)
-
-### The Audit Trail
-
-Because everything is retrieved explicitly, you can ask:
-- "Which sources did the AI use for this answer?" → See citations
-- "What exactly did the AI see?" → See chunks in context level
-- "Is the AI's claim actually in my sources?" → Verify citation
-
-This prevents hallucinations or misrepresentation better than most systems.
-
----
-
-## How Embeddings Work (Simplified)
-
-The magic of semantic search comes from embeddings. Here's the intuition:
-
-### The Idea
-Instead of storing text, store it as a list of numbers (vectors) that represent "meaning."
-
-```
-Chunk: "The transformer uses attention mechanisms"
-Vector: [0.23, -0.51, 0.88, 0.12, ..., 0.34]
-        (1536 numbers for OpenAI)
-
-Another chunk: "Attention allows models to focus on relevant parts"
-Vector: [0.24, -0.48, 0.87, 0.15, ..., 0.35]
-        (similar numbers = similar meaning!)
-```
-
-### Why This Works
-Words that are semantically similar produce similar vectors. So:
-- "alignment" and "interpretability" have similar vectors
-- "transformer" and "attention" have related vectors
-- "cat" and "dog" are more similar than "cat" and "radiator"
-
-### How Search Works
-```
-Your question: "How do models understand their decisions?"
-Question vector: [0.25, -0.50, 0.86, 0.14, ..., 0.33]
-
-Compare to all stored vectors. Find the most similar:
-- Chunk about interpretability: similarity 0.94
-- Chunk about explainability: similarity 0.91
-- Chunk about feature attribution: similarity 0.88
-
-Return the top matches.
-```
-
-This is why semantic search finds conceptually similar content even when words are different.
-
----
-
-## Key Design Decisions
-
-### 1. Search, Don't Train
-**Why?** Fine-tuning is slow and permanent. Search is flexible and reversible.
-
-### 2. Explicit Retrieval, Not Implicit Knowledge
-**Why?** You can verify what the AI saw. You have audit trails. You control what leaves your system.
-
-### 3. Multiple Search Types
-**Why?** Different questions need different search (keyword vs. semantic). Giving you both is more powerful.
-
-### 4. Context as a Permission System
-**Why?** Not everything you save needs to reach AI. You control granularly.
+You can mix providers, for example a local embedding model with a cloud chat model.
 
 ---
 
 ## Summary
 
-Open Notebook gives you **two ways** to work with AI:
-
-### Chat (Full-Content)
-- Sends entire selected sources to LLM
-- Manual control: you pick sources
-- Conversational: back-and-forth dialog
-- Transparent: you know exactly what AI sees
-- Best for: focused analysis, close reading
-
-### Ask (RAG)
-- Searches and retrieves relevant chunks automatically
-- Automatic: AI finds what's relevant
-- One-shot: single comprehensive answer
-- Efficient: sends only relevant pieces
-- Best for: broad questions across many sources
-
-**Both approaches:**
-1. Keep your data private (doesn't leave your system by default)
-2. Give you control (you choose which features to use)
-3. Create audit trails (citations show what was used)
-4. Support multiple AI providers
-
-**Coming Soon**: The community is working on adding RAG capabilities to Chat as well, giving you the best of both worlds.
+| | Chat | Ask |
+|---|---|---|
+| **How content is chosen** | You set context levels per source and note | Vector search picks matching chunks |
+| **Scope** | The current notebook | Whole knowledge base, or the notebooks you pick |
+| **Needs embeddings** | No | Yes |
+| **Conversation** | Multi-turn, saved in sessions | One question, one answer |
+| **Best for** | Close reading and comparison of chosen sources | Questions across a lot of material |
diff --git a/docs/2-CORE-CONCEPTS/chat-vs-transformations.md b/docs/2-CORE-CONCEPTS/chat-vs-transformations.md
index 0cf401c4..836f8c0b 100644
--- a/docs/2-CORE-CONCEPTS/chat-vs-transformations.md
+++ b/docs/2-CORE-CONCEPTS/chat-vs-transformations.md
@@ -1,353 +1,74 @@
 # Chat vs. Ask vs. Transformations - Which Tool for Which Job?
 
-Open Notebook offers different ways to work with your research. Understanding when to use each is key to using the system effectively.
+Open Notebook has several ways to put AI to work on your content. They differ in what content they use, whether you can follow up, and where the result goes.
+
+| | Notebook Chat | Source Chat | Ask | Transformations |
+|---|---|---|---|---|
+| **Where** | Notebook page, Chat column | Source page | Ask and Search → Ask (beta) | Add Source wizard, or a source's Insights tab |
+| **Input** | Sources and notes you put in context | One source (text + insights) | Vector search over embedded content | One source's full text |
+| **Follow-ups** | Yes, in saved sessions | Yes, in saved sessions | No | No |
+| **Output** | Chat answer with citations | Chat answer with citations | Answer with citations | An insight attached to the source |
+| **Save it** | **Save to note** | Copy to clipboard | **Save to Notebooks** | Already saved as an insight |
+| **Needs embeddings** | No | No | Yes | No |
+| **Default model** | Chat Model | Chat Model | Chat Model (three stages) | Transformation Model, or the transformation's own model |
+
+How each one gets its content is explained in [AI Context & RAG](ai-context-rag.md).
 
 ---
 
-## The Three Interaction Modes
+## Notebook Chat - Explore With Follow-Ups
 
-### 1. CHAT - Conversational Exploration with Manual Context
+Use Chat when you want a conversation about specific material: understanding a paper, comparing two reports, drafting from your sources. You decide what is in context with the per-source and per-note [context levels](ai-context-rag.md#context-levels-in-notebook-chat), and every message sends that content again.
 
-**What it is:** Have a conversation with AI about selected sources.
+Good for: close reading, comparing a handful of sources, iterating on an answer.
+Not good for: questions across hundreds of sources (context gets too large) or finding which source mentions something (use Search or Ask).
 
-**The flow:**
-```
-1. You select which sources to include ("in context")
-2. You ask a question
-3. AI responds using ONLY those sources
-4. You ask follow-up questions (context stays same)
-5. You change sources or context level, then continue
-```
+→ [Chat Effectively](../3-USER-GUIDE/chat-effectively.md)
 
-**Context management:** You explicitly choose which sources the AI can see.
+## Source Chat - Talk to One Source
 
-**Conversational:** Multiple questions with shared history.
+Each source has its own chat on its page. It always uses that source's text and insights, so there is nothing to configure. Long sources are truncated to fit about 50,000 tokens.
 
-**Example:**
-```
-You: [Select sources: "paper1.pdf", "research_notes.txt"]
-     [Set context: Full content for paper1, Summary for notes]
+## Ask - One Question Across Everything
 
-You: "What's the main argument in these sources?"
-AI:  "Paper 1 argues X [citation]. Your notes emphasize Y [citation]."
+Use Ask when you don't know which sources hold the answer. A strategy model plans searches, each search retrieves matching chunks, and a final model writes one answer with citations. It searches your whole knowledge base unless you limit it to specific notebooks, and it only sees embedded content.
 
-You: "How do they differ?"
-AI:  "Paper 1 focuses on X [citation], while your notes highlight Y [citation]..."
+Good for: questions across many sources, "what do my sources say about X".
+Not good for: follow-up conversations, or content that isn't embedded.
 
-You: [Now select different sources]
+→ [Search and Ask](../3-USER-GUIDE/search.md)
 
-You: "Compare to this other perspective"
-AI:  "This new source takes a different approach..."
-```
+## Transformations - The Same Prompt, Saved as an Insight
 
-**Best for:**
-- Exploring a focused topic with specific sources
-- Having a dialogue (multiple back-and-forth questions)
-- When you know which sources matter
-- When you want tight control over what goes to AI
+A transformation is a saved prompt (for example "Dense Summary" or "Table of Contents") that runs on one source and stores the result as an **insight** on that source. You pick transformations when you add sources, or run one later from the source's Insights tab. Insights then feed Chat's *Insights only* level and the *Summary* option in podcasts.
+
+There is no batch action for existing sources in the UI: to apply a transformation to many sources, select it in the Add Source wizard when you add them (batch uploads apply the same transformations to every item), or run it on each source.
+
+Good for: consistent summaries or extractions across sources, making sources cheaper to chat with.
+Not good for: one-off questions (use Chat or Ask).
+
+→ [Transformations](../3-USER-GUIDE/transformations.md)
 
 ---
 
-### 2. ASK - Automated Comprehensive Search
-
-**What it is:** Ask one complex question, system automatically finds relevant content.
-
-**The flow:**
-```
-1. You ask a comprehensive question
-2. System analyzes the question
-3. System automatically searches your sources
-4. System retrieves relevant chunks
-5. System synthesizes answer from all results
-6. You get one detailed answer (not conversational)
-```
-
-**Context management:** Automatic. System figures out what's relevant.
-
-**Non-conversational:** One question → one answer. No follow-ups.
-
-**Example:**
-```
-You: "How do these papers compare their approaches to alignment?
-      What does each one recommend?"
-
-System:
-  - Breaks down the question into search strategies
-  - Searches all sources for alignment approaches
-  - Searches all sources for recommendations
-  - Retrieves top 10 relevant chunks
-  - Synthesizes: "Paper A recommends X [citation].
-                  Paper B recommends Y [citation].
-                  They differ in Z."
-
-You: [Get back one comprehensive answer]
-     [If you want to follow up, use Chat instead]
-```
-
-**Best for:**
-- Comprehensive, one-time questions
-- Comparing multiple sources at once
-- When you want the system to decide what's relevant
-- Complex questions that need multiple search angles
-- When you don't need a back-and-forth conversation
-
----
-
-### 3. TRANSFORMATIONS - Template-Based Processing
-
-**What it is:** Apply a reusable template to a source and get structured output.
-
-**The flow:**
-```
-1. You define a transformation (or choose a preset)
-   "Extract: main argument, methodology, limitations"
-
-2. You apply it to ONE source at a time
-   (You can repeat for other sources)
-
-3. For the source:
-   - Source content + transformation prompt → AI
-   - Result stored as new insight/note
-
-4. You get back
-   - Structured output (main argument, methodology, limitations)
-   - Saved as a note in your notebook
-```
-
-**Context management:** Works on one source at a time.
-
-**Reusable:** Apply the same template to different sources (one by one).
-
-**Note**: Currently processes one source at a time. Batch processing (multiple sources at once) is planned for a future release.
-
-**Example:**
-```
-You: Define transformation
-     "For each academic paper, extract:
-      - Main research question
-      - Methodology used
-      - Key findings
-      - Limitations and gaps
-      - Recommended next research"
-
-You: Apply to paper 1
-
-System:
-  - Runs the transformation on paper 1
-  - Result stored as new note
-
-You: Apply same transformation to paper 2, 3, etc.
-
-After 10 papers:
-  - You have 10 structured notes with consistent format
-  - Perfect for writing a literature review or comparison
-```
-
-**Best for:**
-- Extracting the same information from each source (run repeatedly)
-- Creating structured summaries with consistent format
-- Building a knowledge base of categorized insights
-- When you want reusable templates you can apply to each source
-
----
-
-## Decision Tree: Which Tool to Use?
+## Decision Guide
 
 ```
-What are you trying to do?
-
-│
-├─→ "I want to have a conversation about this topic"
-│   └─→ Is the conversation exploratory or fixed?
-│       ├─→ Exploratory (I'll ask follow-ups)
-│       │   └─→ USE: CHAT
-│       │
-│       └─→ Fixed (One question → done)
-│           └─→ Go to next question
-│
-├─→ "I need to compare these sources or get a comprehensive answer"
-│   └─→ USE: ASK
-│
-├─→ "I want to extract the same info from each source (one at a time)"
-│   └─→ USE: TRANSFORMATIONS (apply to each source)
-│
-└─→ "I just want to read and search"
-    └─→ USE: Search (text or vector)
-        OR read your notes
+Do you know which sources matter?
+├─ Yes → Do you want a conversation?
+│        ├─ Yes → Notebook Chat (or Source Chat for a single source)
+│        └─ No → a one-off question: Notebook Chat;
+│               the same extraction for each source: Transformation
+└─ No  → Do you want an AI answer?
+         ├─ Yes → Ask
+         └─ No, just find the passages → Search (text or vector)
 ```
 
----
+## Combining Them
 
-## Side-by-Side Comparison
+A common flow:
 
-| Aspect | CHAT | ASK | TRANSFORMATIONS |
-|--------|------|-----|-----------------|
-| **What's it for?** | Conversational exploration | Comprehensive Q&A | Template-based extraction |
-| **# of questions** | Multiple (conversational) | One | One template per source |
-| **Context control** | Manual (you choose) | Automatic (system searches) | One source at a time |
-| **Conversational?** | Yes (follow-ups work) | No (one question only) | No (single operation) |
-| **Output** | Natural conversation | Natural answer | Structured note |
-| **Time** | Quick (back-and-forth) | Longer (comprehensive) | Per source |
-| **Best when** | Exploring & uncertain | Need full picture | Want consistent format |
-| **Model speed** | Any | Fast preferred | Any |
-
----
-
-## Workflow Examples
-
-### Example 1: Academic Research
-
-```
-Goal: Write literature review from 15 papers
-
-Step 1: TRANSFORMATIONS
-  - Define: "Extract abstract, methodology, findings, relevance"
-  - Apply to paper 1 → get structured note
-  - Apply to paper 2 → get structured note
-  - ... repeat for all 15 papers
-  - Result: 15 structured notes with consistent format
-
-Step 2: Read the notes
-  - Now you have consistent summaries
-
-Step 3: CHAT or ASK
-  - Chat: "Help me organize these by theme"
-  - Ask: "What are the common methodologies across these papers?"
-
-Step 4: Write your review
-  - Use the transformations as foundation
-  - Use chat/ask insights for structure
-```
-
-### Example 2: Product Research
-
-```
-Goal: Understand customer feedback from interviews
-
-Step 1: Add sources (interview transcripts)
-
-Step 2: ASK
-  - "What are the top 10 pain points mentioned?"
-  - Get comprehensive answer with citations
-
-Step 3: CHAT
-  - "Can you help me group these by severity?"
-  - Continue conversation to prioritize
-
-Step 4: TRANSFORMATIONS (optional)
-  - Define: "Extract: pain point, frequency, who mentioned it"
-  - Apply to each interview (one by one)
-  - Get structured data for analysis
-```
-
-### Example 3: Policy Analysis
-
-```
-Goal: Compare policy documents
-
-Step 1: Add all policy documents as sources
-
-Step 2: ASK
-  - "How do these policies differ on climate measures?"
-  - System searches all docs, gives comprehensive comparison
-
-Step 3: CHAT (if needed)
-  - "Which policy is most aligned with X goals?"
-  - Have discussion about trade-offs
-
-Step 4: Export notes
-  - Save AI responses as notes for reports
-```
-
----
-
-## Context Management: The Control Panel
-
-All three modes let you control what the AI sees.
-
-### In CHAT and TRANSFORMATIONS
-```
-You choose:
-  - Which sources to include
-  - Context level for each:
-    ✓ Full Content (send complete text)
-    ✓ Summary Only (send AI summary, not full text)
-    ✓ Not in Context (exclude entirely)
-
-Example:
-  Paper A: Full Content (analyzing closely)
-  Paper B: Summary Only (background)
-  Paper C: Not in Context (confidential)
-```
-
-### In ASK
-```
-Context is automatic:
-  - System searches ALL your sources
-  - Retrieves most relevant chunks
-  - Sends those to AI
-
-But you can:
-  - Search in specific notebook
-  - Filter by source type
-  - Use the results to decide context for follow-up Chat
-```
-
----
-
-## Model Selection
-
-Each mode works with different models:
-
-### CHAT
-- **Any model** works fine
-- Fast models (GPT-4o mini, Claude Haiku): Quick responses, good for conversation
-- Powerful models (GPT-4o, Claude Sonnet): Better reasoning, better for complex topics
-
-### ASK
-- **Fast models preferred** (because it processes multiple searches)
-- Can use powerful models if you want deep synthesis
-- Example: GPT-4 for strategy planning, GPT-4o-mini for quick facts
-
-### TRANSFORMATIONS
-- **Any model** works
-- Fast models (cost-effective for batch processing)
-- Powerful models (better quality extractions)
-
----
-
-## Advanced: Chaining Modes Together
-
-You can combine these modes:
-
-```
-TRANSFORMATIONS → CHAT
-  1. Use transformations to extract structured data
-  2. Use chat to discuss the results
-
-ASK → TRANSFORMATIONS
-  1. Use Ask to understand what matters
-  2. Use Transformations to extract it from remaining sources
-
-CHAT → Save as Note → TRANSFORMATIONS
-  1. Have conversation (Chat)
-  2. Save good responses as notes
-  3. Use those notes as context for transformations
-```
-
----
-
-## Summary: When to Use Each
-
-| Situation | Use | Why |
-|-----------|-----|-----|
-| "I want to explore a topic with follow-up questions" | **CHAT** | Conversational, you control context |
-| "I need a comprehensive answer to one complex question" | **ASK** | Automatic search, synthesized answer |
-| "I want consistent summaries from each source" | **TRANSFORMATIONS** | Template reuse, apply to each source |
-| "I'm comparing two specific sources" | **CHAT** | Select just those 2, have discussion |
-| "I need to categorize each source by X criteria" | **TRANSFORMATIONS** | Extract category from each source |
-| "I want to understand the big picture across all sources" | **ASK** | Automatic comprehensive search |
-| "I want to build a knowledge base" | **TRANSFORMATIONS** | Create structured note from each source |
-| "I want to iterate on understanding" | **CHAT** | Multiple questions, refine thinking |
-
-The key insight: **Different questions need different tools.** Open Notebook gives you all three because research rarely fits one mode.
+1. Add sources with a summary transformation selected (Dense Summary is pre-selected on new installs).
+2. Use **Ask** to find which sources address your question.
+3. Open the notebook and **Chat** with those sources, using *Insights only* for background sources and *Full content* for the ones you are reading closely.
+4. **Save to note** the answers worth keeping.
diff --git a/docs/2-CORE-CONCEPTS/index.md b/docs/2-CORE-CONCEPTS/index.md
index 4f005b3e..9f4fd563 100644
--- a/docs/2-CORE-CONCEPTS/index.md
+++ b/docs/2-CORE-CONCEPTS/index.md
@@ -1,70 +1,44 @@
 # Core Concepts - Understand the Mental Model
 
-Before diving into how to use Open Notebook, it's important to understand **how it thinks**. These core concepts explain the "why" behind the design.
+These pages explain how Open Notebook is organized and how its AI features decide what content to use. Read them once and the rest of the app will make sense. For step-by-step instructions, go to the [User Guide](../3-USER-GUIDE/index.md).
 
-## The Five Mental Models
+## The Pages
 
-### 1. [Notebooks, Sources, and Notes](notebooks-sources-notes.md)
-How Open Notebook organizes your research. Understand the three-tier container structure and how information flows from raw materials to finished insights.
+### 1. [Notebooks, Sources, Insights, and Notes](notebooks-sources-notes.md)
+The four things you work with.
 
-**Key idea**: A notebook is a scoped research container. Sources are inputs (PDFs, URLs, etc.). Notes are outputs (your insights, AI-generated summaries, captured responses).
+**Key idea**: A notebook groups sources and notes for one project. Sources are your input material and can belong to several notebooks. Transformations turn a source into **insights**, which stay attached to the source. Notes are what you write or save from the AI.
 
 ---
 
 ### 2. [AI Context & RAG](ai-context-rag.md)
-How Open Notebook makes AI aware of your research - two different approaches.
+How each AI feature gets your content, and how you control it.
 
-**Key idea**: **Chat** sends entire selected sources to the LLM (full context, conversational). **Ask** uses RAG (retrieval-augmented generation) to automatically search and retrieve only relevant chunks. Different tools for different needs.
+**Key idea**: **Chat** sends the sources and notes you put in context, with no searching. **Ask** searches your knowledge base (vector search) and answers from what it finds. Each source in a notebook has three context levels for Chat: *Not included in chat*, *Insights only* and *Full content*.
 
 ---
 
-### 3. [Chat vs. Transformations](chat-vs-transformations.md)
-Why Open Notebook has different interaction modes and when to use each one.
+### 3. [Chat vs. Ask vs. Transformations](chat-vs-transformations.md)
+Which tool to use for which job.
 
-**Key idea**: Chat is conversational exploration (you control context). Transformations are insight extractions. They reduced content to smaller bits of concentrated/dense information, which is much more suitable for an AI to use. 
+**Key idea**: Chat is a conversation over content you pick. Ask is a one-shot question over everything (or the notebooks you pick). Transformations run a saved prompt over one source and save the result as an insight.
 
 ---
 
-### 4. [Context Management](chat-vs-transformations.md#context-management-the-control-panel)
-Your control panel for privacy and cost. Decide what data actually reaches AI.
+### 4. [Podcasts Explained](podcasts-explained.md)
+How a podcast episode is generated from your content.
 
-**Key idea**: You choose three levels—not in context (private), summary only (condensed), or full content (complete access). This gives you fine-grained control.
-
----
-
-### 5. [Podcasts Explained](podcasts-explained.md)
-Why Open Notebook can turn research into audio and why this matters.
-
-**Key idea**: Podcasts transform your research into a different consumption format. Instead of reading, someone can listen and absorb your insights passively.
-
----
-
-## Read This Section If:
-
-- **You're new to Open Notebook** — Start here to understand how the system works conceptually before learning the features
-- **You're confused about Chat vs Ask** — Section 2 explains the difference (full-content vs RAG)
-- **You're wondering when to use Chat vs Transformations** — Section 3 clarifies the differences
-- **You want to understand privacy controls** — Section 4 shows you what you can control
-- **You're curious about podcasts** — Section 5 explains the architecture and why it's different from competitors
+**Key idea**: An outline model and a transcript model write a script from the content you select, then a text-to-speech model voices it. Episode profiles and speaker profiles hold the settings.
 
 ---
 
 ## The Big Picture
 
-Open Notebook is built on a simple insight: **Your research deserves to stay yours**.
-
-That means:
-- **Privacy by default** — Your data doesn't leave your infrastructure unless you explicitly choose
-- **AI as a tool, not a gatekeeper** — You decide which sources the AI sees, not the AI deciding for you
-- **Flexible consumption** — Read, listen, search, chat, or transform your research however makes sense
-
-These core concepts explain how that works.
-
----
+- **You choose the providers.** Open Notebook works with cloud and local AI providers. A cloud AI provider receives the content each feature sends (described in the pages above); with local models, prompts stay on your machine. Adding a web link still fetches it from the internet, and the Firecrawl and Jina URL engines, when configured, fetch pages through those services.
+- **You choose what the AI sees.** In Chat you set the context per source and note. Ask and Search can be limited to specific notebooks.
+- **Your data stays in your deployment.** Sources, insights, notes and podcast records live in your SurrealDB database. Uploaded files, generated podcast audio and chat history (a checkpoint file) live in the app's data directory. Back up both.
 
 ## Next Steps
 
-1. **Just want to use it?** → Go to [User Guide](../3-USER-GUIDE/index.md)
-2. **Want to understand it first?** → Read the 5 sections above (15 min)
-3. **Setting up for the first time?** → Go to [Installation](../1-INSTALLATION/index.md)
-
+- **Ready to use it?** Go to the [User Guide](../3-USER-GUIDE/index.md)
+- **Not installed yet?** Go to [Installation](../1-INSTALLATION/index.md)
diff --git a/docs/2-CORE-CONCEPTS/notebooks-sources-notes.md b/docs/2-CORE-CONCEPTS/notebooks-sources-notes.md
index 7b3115cd..ab727278 100644
--- a/docs/2-CORE-CONCEPTS/notebooks-sources-notes.md
+++ b/docs/2-CORE-CONCEPTS/notebooks-sources-notes.md
@@ -1,284 +1,98 @@
-# Notebooks, Sources, and Notes - The Container Model
+# Notebooks, Sources, Insights, and Notes
 
-Open Notebook organizes research in three connected layers. Understanding this hierarchy is key to using the system effectively.
-
-## The Three-Layer Structure
+Open Notebook has four kinds of content. Knowing how they relate explains most of the app.
 
 ```
-┌─────────────────────────────────────┐
-│         NOTEBOOK (The Container)    │
-│     "My AI Safety Research 2026"   │
-├─────────────────────────────────────┤
-│                                     │
-│  SOURCES (The Raw Materials)        │
-│  ├─ safety_paper.pdf                │
-│  ├─ alignment_video.mp4             │
-│  └─ prompt_injection_article.html   │
-│                                     │
-│  NOTES (The Processed Insights)     │
-│  ├─ AI Summary (auto-generated)     │
-│  ├─ Key Concepts (transformation)   │
-│  ├─ My Research Notes (manual)      │
-│  └─ Chat Insights (from conversation)
-│                                     │
-└─────────────────────────────────────┘
-```
-
----
-
-## 1. NOTEBOOKS - The Research Container
-
-### What Is a Notebook?
-
-A **notebook** is a *scoped container* for a research project or topic. It's your research workspace.
-
-Think of it like a physical notebook: everything inside is about the same topic, shares the same context, and builds toward the same goals.
-
-### What Goes In?
-
-- **A description** — "This notebook collects research on X topic"
-- **Sources** — The raw materials you add
-- **Notes** — Your insights and outputs
-- **Conversation history** — Your chats and questions
-
-### Why This Matters
-
-**Isolation**: Each notebook is completely separate. Sources in Notebook A never appear in Notebook B. This lets you:
-- Keep different research topics completely isolated
-- Reuse source names across notebooks without conflicts
-- Control which AI context applies to which research
-
-**Shared Context**: All sources and notes in a notebook inherit the notebook's context. If your notebook is titled "AI Safety 2026" with description "Focusing on alignment and interpretability," that context applies to all AI interactions within that notebook.
-
-**Parallel Projects**: You can have 10 notebooks running simultaneously. Each one is its own isolated research environment.
-
-### Example
-
-```
-Notebook: "Customer Research - Product Launch"
-Description: "User interviews and feedback for Q1 2026 launch"
-
-→ All sources added to this notebook are about customer feedback
-→ All notes generated are in that context
-→ When you chat, the AI knows you're analyzing product launch feedback
-→ Different from your "Market Analysis - Competitors" notebook
-```
-
----
-
-## 2. SOURCES - The Raw Materials
-
-### What Is a Source?
-
-A **source** is a *single piece of input material* — the raw content you bring in. Sources never change; they're just processed and indexed.
-
-### What Can Be a Source?
-
-- **PDFs** — Research papers, reports, documents
-- **Web links** — Articles, blog posts, web pages
-- **Audio files** — Podcasts, interviews, lectures
-- **Video files** — Tutorials, presentations, recordings
-- **Plain text** — Notes, transcripts, passages
-- **Uploaded text** — Paste content directly
-
-### What Happens When You Add a Source?
-
-```
-1. EXTRACTION
-   File/URL → Extract text and metadata
-   (OCR for PDFs, web scraping for URLs, speech-to-text for audio)
-
-2. CHUNKING
-   Long text → Break into searchable chunks
-   (Prevents "too much context" in single query)
-
-3. EMBEDDING
-   Each chunk → Generate semantic vector
-   (Allows AI to find conceptually similar content)
-
-4. STORAGE
-   Chunks + vectors → Store in database
-   (Ready for search and retrieval)
-```
-
-### Key Properties
-
-**Immutable**: Once added, the source doesn't change. If you need a new version, add it as a new source.
-
-**Indexed**: Sources are automatically indexed for search (both text and semantic).
-
-**Scoped**: A source belongs to exactly one notebook.
-
-**Referenceable**: Other sources and notes can reference this source by citation.
-
-### Example
-
-```
-Source: "openai_charter.pdf"
-Type: PDF document
-
-What happens:
-→ PDF is uploaded
-→ Text is extracted (including images)
-→ Text is split into 50 chunks (paragraphs, sections)
-→ Each chunk gets an embedding vector
-→ Now searchable by: "OpenAI's approach to safety"
-```
-
----
-
-## 3. NOTES - The Processed Insights
-
-### What Is a Note?
-
-A **note** is a *processed output* — something you created or AI created based on your sources. Notes are the "results" of your research work.
-
-### Types of Notes
-
-#### Manual Notes
-You write them yourself. They're your original thinking, capturing:
-- What you learned from sources
-- Your analysis and interpretations
-- Your next steps and questions
-
-#### AI-Generated Notes
-Created by applying AI processing to sources:
-- **Transformations** — Structured extraction (main points, key concepts, methodology)
-- **Chat Responses** — Answers you saved from conversations
-- **Ask Results** — Comprehensive answers saved to your notebook
-
-#### Captured Insights
-Notes you explicitly saved from interactions:
-- "Save this response as a note"
-- "Save this transformation result"
-- Convert any AI output into a permanent note
-
-### What Can Notes Contain?
-
-- **Text** — Your writing or AI-generated content
-- **Citations** — References to specific sources
-- **Metadata** — When created, how created (manual/AI), which sources influenced it
-- **Tags** — Your categorization (optional but useful)
-
-### Why Notes Matter
-
-**Knowledge Accumulation**: Notes become your actual knowledge base. They're what you take away from the research.
-
-**Searchable**: Notes are searchable along with sources. "Find everything about X" includes your notes, not just sources.
-
-**Citable**: Notes can cite sources, creating an audit trail of where insights came from.
-
-**Shareable**: Notes are your outputs. You can share them, publish them, or build on them in other projects.
-
----
-
-## How They Connect: The Data Flow
-
-```
-YOU
+NOTEBOOK  "AI Safety Research"  (name + description)
  │
- ├─→ Create Notebook ("AI Research")
+ ├── SOURCES  (linked; a source can be linked to several notebooks)
+ │    ├── safety_paper.pdf
+ │    │     └── INSIGHTS  "Dense Summary", "Key Insights"   ← made by transformations
+ │    └── alignment_talk.mp4
+ │          └── INSIGHTS  "Simple Summary"
  │
- ├─→ Add Sources (papers, articles, videos)
- │    └─→ System: Extract, embed, index
- │
- ├─→ Search Sources (text or semantic)
- │    └─→ System: Find relevant chunks
- │
- ├─→ Apply Transformations (extract insights)
- │    └─→ Creates Notes
- │
- ├─→ Chat with Sources (explore with context control)
- │    ├─→ Can save responses as Notes
- │    └─→ Notes include citations
- │
- ├─→ Ask Questions (automated comprehensive search)
- │    ├─→ Can save results as Notes
- │    └─→ Notes include citations
- │
- └─→ Generate Podcast (transform notebook into audio)
-     └─→ Uses all sources + notes for content
+ └── NOTES  (belong to this notebook)
+      ├── My reading notes          (Human)
+      └── Answer saved from chat    (AI Generated)
 ```
 
 ---
 
-## Key Design Decisions
+## Notebooks
 
-### 1. One Notebook Per Source
+A **notebook** is a workspace for one project or topic. It has a name, an optional description, its linked sources, its notes and its chat sessions.
 
-Each source belongs to exactly one notebook. This creates clear boundaries:
-- No ambiguity about which research project a source is in
-- Easy to isolate or export a complete project
-- Clean permissions model (if someone gets access to notebook, they get access to all its sources)
-
-### 2. Immutable Sources, Mutable Notes
-
-Sources never change (once added, always the same). But notes can be edited or deleted. Why?
-- Sources are evidence → evidence shouldn't be altered
-- Notes are your thinking → thinking evolves as you learn
-
-### 3. Explicit Context Control
-
-Sources don't automatically go to AI. You decide which sources are "in context" for each interaction:
-- Chat: You manually select which sources to include
-- Ask: System automatically figures out which sources to search
-- Transformations: You choose which sources to transform
-
-This is different from systems that always send everything to AI.
+- The **name and description are sent to the AI in notebook Chat** as project information, so a good description helps Chat answers. Ask, Search and transformations don't use them.
+- Notebooks can be **archived** (hidden from the active list, nothing is deleted) and unarchived.
+- **Deleting** a notebook permanently deletes its notes. Sources that are linked only to this notebook can be deleted too or kept in your library; sources shared with other notebooks are just unlinked. The delete dialog shows the counts before you confirm.
 
 ---
 
-## Mental Models Explained
+## Sources
 
-### Notebook as Boundaries
-Think of a notebook like a Git repository:
-- Everything in it is about the same topic
-- You can clone/fork it (copy to new project)
-- It has clear entry/exit points
-- You know exactly what's included
+A **source** is one piece of input material: an uploaded file, a web link or pasted text. See [Adding Sources](../3-USER-GUIDE/adding-sources.md) for the supported types.
 
-### Sources as Evidence
-Think of sources like exhibits in a legal case:
-- Once filed, they don't change
-- They can be cited and referenced
-- They're the ground truth for what you're basing claims on
-- Multiple sources can be cross-referenced
+When you add a source, a background job:
 
-### Notes as Synthesis
-Think of notes like your case brief:
-- You write them based on evidence
-- They're your interpretation
-- You can cite which evidence supports each claim
-- They're what you actually share or act on
+1. **Extracts the text** (document parsing, web page fetching, or speech-to-text for audio and video; see [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md)).
+2. **Embeds it**, if embedding is enabled for that source: the text is split into chunks (about 400 tokens each by default) and each chunk gets a vector for semantic search.
+3. **Runs the transformations** you selected, producing insights.
+
+Things to know:
+
+- **Sources live in a shared library.** The **Sources** page lists every source. A source can be linked to any number of notebooks (use **Add Existing Source** in a notebook) or to none. Removing a source from a notebook only unlinks it; deleting a source removes it everywhere.
+- **The extracted text is not edited in the app.** To pick up a changed web page, use **Refresh content** on the source; to fix a bad upload, add the file again.
+- **Search coverage depends on embedding.** Text (keyword) search works on every source. Vector search and Ask search embedded source text and insights; insights are embedded on their own, so a source whose text wasn't embedded can still be found through its insights.
 
 ---
 
-## Common Questions
+## Insights
 
-### Can I move a source to a different notebook?
-Not directly. Each source is tied to one notebook. If you want it in multiple notebooks, add it again (uploads are fast if it's already processed).
+An **insight** is the output of running a [transformation](../3-USER-GUIDE/transformations.md) on a source, for example a summary, a list of key points or a table of contents. Insights are the piece most people miss, and several features depend on them:
 
-### Can a note reference sources from a different notebook?
-No. Notes stay within their notebook and reference sources within that notebook. This keeps boundaries clean.
+- **They are attached to the source**, not to a notebook. You see them on the source's **Insights** tab, labeled with the transformation's title.
+- **They are the "Insights only" context level.** In notebook Chat, a source set to *Insights only* sends its title and its insights instead of its full text. A source with no insights can only be *Full content* or *Not included in chat*. See [AI Context & RAG](ai-context-rag.md#context-levels-in-notebook-chat).
+- **They are the "Summary" option in podcasts.** When you pick content for an episode, *Summary* sends the source's insights.
+- **They are searchable.** Text search, vector search and Ask all include insights.
+- **They can be cited.** Chat answers can reference an insight, and clicking the reference opens it.
+- **They can become notes**, but only through the API today (`POST /api/insights/{insight_id}/save-as-note`). The UI has no button for this.
 
-### What if I want to group sources within a notebook?
-Use tags. You can tag sources ("primary research," "background," "methodology") and filter by tags.
-
-### Can I merge two notebooks?
-Not built-in, but you can manually copy sources from one notebook to another by re-uploading them.
+You create insights when you add a source (step 3 of the Add Source wizard) or later from the source's Insights tab with **Generate New Insight**.
 
 ---
 
+## Notes
+
+A **note** is text that belongs to a notebook. A note has a title and Markdown content, and is marked either **Human** (you wrote it) or **AI Generated** (saved from the AI).
+
+Ways to create one:
+
+- **Write Note** in the notebook's Notes column.
+- **Save to note** under a notebook Chat answer (one click; the title is generated for you).
+- **Save to Notebooks** after an Ask answer (the question becomes the title, and you can pick several notebooks).
+
+Notes are on or off in notebook Chat context (they have no insights level), are searchable, and are embedded for vector search when an embedding model is configured. See [Working with Notes](../3-USER-GUIDE/working-with-notes.md).
+
+---
+
+## How They Connect
+
+```
+Add source ──► extract text ──► embed (optional) ──► run transformations ──► insights
+                                      │                                       │
+                                      ▼                                       ▼
+                         vector search + Ask                    "Insights only" context in Chat
+                                                                "Summary" content in podcasts
+
+Chat / Ask answer ──► Save to note / Save to Notebooks ──► note (AI Generated)
+Write Note ──────────────────────────────────────────────► note (Human)
+```
+
 ## Summary
 
-| Concept | Purpose | Lifecycle | Scope |
-|---------|---------|-----------|-------|
-| **Notebook** | Container + context | Create once, configure | All its sources + notes |
-| **Source** | Raw material | Add → Process → Store | One notebook |
-| **Note** | Processed output | Create/capture → Edit → Share | One notebook |
-
-This three-layer model gives you:
-- **Clear organization** (everything scoped to projects)
-- **Privacy control** (isolated notebooks)
-- **Audit trails** (notes cite sources)
-- **Flexibility** (notes can be manual or AI-generated)
+| Concept | What it is | Belongs to |
+|---------|------------|------------|
+| **Notebook** | A project workspace with name and description | — |
+| **Source** | Input material (file, link, text) | The library; linked to zero or more notebooks |
+| **Insight** | A transformation's output for one source | One source |
+| **Note** | Text you wrote or saved from the AI | One notebook |
diff --git a/docs/2-CORE-CONCEPTS/podcasts-explained.md b/docs/2-CORE-CONCEPTS/podcasts-explained.md
index fe427579..26ff51a1 100644
--- a/docs/2-CORE-CONCEPTS/podcasts-explained.md
+++ b/docs/2-CORE-CONCEPTS/podcasts-explained.md
@@ -1,427 +1,83 @@
 # Podcasts Explained - Research as Audio Dialogue
 
-Podcasts are Open Notebook's highest-level transformation: converting your research into audio dialogue for a different consumption pattern.
+Open Notebook can turn sources and notes into a podcast episode: a scripted conversation (or monologue) between one to four speakers, voiced with text-to-speech. This page explains how generation works and what the settings mean. For the step-by-step, see [Creating Podcasts](../3-USER-GUIDE/creating-podcasts.md).
 
 ---
 
-## Why Podcasts Matter
+## The Building Blocks
 
-### The Problem
-Research naturally accumulates as text: PDFs, articles, web pages, notes. This creates a friction point:
+**Speaker profile**: who talks and how they sound.
+- A **voice model** (a text-to-speech model, selected in the speaker profile), required.
+- One to four **speakers**, each with a name, a **Voice ID** (a voice name of that TTS model), a backstory and a personality.
+- Optionally, a different voice model per speaker (*Per-speaker TTS override*), so speakers can come from different TTS providers.
 
-**To consume research, you must:**
-- Sit down at a desk
-- Focus intently
-- Read actively
-- Take notes
-- Set aside dedicated time
+**Episode profile**: how the episode is written.
+- The **speaker profile** to use.
+- An **outline model** and a **transcript model** (language models).
+- The number of **segments** (3 to 20).
+- A **default briefing**: free-text instructions for structure, tone and audience.
+- An optional **language** (a locale such as `en-US` or `pt-BR`) for the outline and transcript.
+- Optional **max output tokens** per generation step (default 8192).
 
-**But much of life is passive time:**
-- Commuting
-- Exercising
-- Doing dishes
-- Driving
-- Walking
-- Idle moments
+**Episode**: one generation run. You pick the content, an episode profile, a name and optional additional instructions.
 
-### The Solution
-Convert your research into audio dialogue so you can consume it passively.
-
-```
-Before (Text-based):
-  Research pile → Must schedule reading time → Requires focus
-
-After (Podcast):
-  Research pile → Podcast → Can listen while commuting
-                         → Absorb while exercising
-                         → Understand while walking
-                         → Engage without screen time
-```
+Open Notebook ships with three episode profiles (`tech_discussion`, `solo_expert`, `business_analysis`) and three speaker profiles (`tech_experts`, `solo_expert`, `business_panel`). On a new install **they have no models assigned**, so they show a *Setup required* badge until you edit them and pick an outline model, a transcript model and a voice model. (Installations upgraded from older versions may already have models on them, if matching models were registered.) Their Voice IDs are OpenAI voice names (`nova`, `alloy`, ...); change them if you use another TTS provider.
 
 ---
 
-## What Makes It Special: Open Notebook vs. Competitors
+## How Generation Works
 
-### Google Notebook LM Podcasts
-- **Fixed format**: 2 hosts, always conversational
-- **Limited customization**: You can't choose who the "hosts" are
-- **One TTS voice per speaker**: Can't customize voices
-- **Only uses cloud services**: No local options
+```
+Selected content (sources at Summary or Full content, notes)
+        │
+        ▼
+1. OUTLINE      outline model + briefing → a plan with N segments
+        │
+        ▼
+2. TRANSCRIPT   transcript model writes the dialogue, segment by segment,
+        │       using the speakers' names, backstories and personalities
+        ▼
+3. AUDIO        each line is voiced with its speaker's voice model and Voice ID,
+                then the clips are joined into one audio file
+```
 
-### Open Notebook Podcasts
-- **Customizable format**: 1-4 speakers, you design them
-- **Rich speaker profiles**: Create personas with backstories and expertise
-- **Multiple TTS options**:
-  - OpenAI (natural, fast)
-  - Google TTS (high quality)
-  - ElevenLabs (beautiful voices, accents)
-  - Local TTS (privacy-first, no API calls)
-- **Async generation**: Doesn't block your work
-- **Full control**: Choose outline structure, tone, depth
+- **Briefing**: the episode profile's default briefing, plus the episode's *Additional instructions* appended at the end.
+- **Language**: when set on the episode profile, the outline and transcript are written in that language. The TTS voice must support it too.
+- **Content**: for each source you choose *Summary* (its title and [insights](notebooks-sources-notes.md#insights)) or *Full content* (title, insights and full text). Notes are included in full. A source with no insights contributes almost nothing at *Summary*.
+- **Background job**: generation runs in the worker, so you can close the browser. If the worker isn't running, episodes stay pending.
 
 ---
 
-## How Podcast Generation Works
+## Privacy: What Each Model Sees
 
-### Stage 1: Content Selection
+| Step | Model | What it receives |
+|------|-------|------------------|
+| Outline | Outline model | All selected content, the briefing, speaker descriptions |
+| Transcript | Transcript model | The outline, the selected content, the briefing, speaker descriptions |
+| Audio | Voice model(s) | The transcript text, line by line |
 
-You choose what goes into the podcast:
-```
-Notebook content → Which sources? → Which notes?
-                → Which topics to focus on?
-                → Depth of coverage?
-```
+Local text-to-speech alone does not keep your content local: the outline and transcript models see the full selected content. For a fully local podcast, use local language models **and** a local TTS server (see [Local TTS](../5-CONFIGURATION/local-tts.md)).
 
-### Stage 2: Episode Profile
+---
 
-You define how you want the podcast structured:
-```
-Episode Profile
-├─ Topic: "AI Safety Approaches"
-├─ Length: 20 minutes
-├─ Tone: Academic but accessible
-├─ Format: Debate (2 speakers with opposing views)
-├─ Audience: Researchers new to the field
-└─ Focus areas: Main approaches, pros/cons, open questions
-```
+## Cost
 
-### Stage 3: Speaker Configuration
-
-You create speaker personas (1-4 speakers):
-
-```
-Speaker 1: "Expert Alex"
-├─ Expertise: "Deep knowledge of alignment research"
-├─ Personality: "Rigorous, academic, patient with explanation"
-├─ Accent: (Optional) "British English"
-└─ Voice Model: Selected from model registry (e.g., OpenAI TTS)
-   └─ Optional per-speaker override of the episode's default voice model
-
-Speaker 2: "Researcher Sam"
-├─ Expertise: "Field observer, pragmatic perspective"
-├─ Personality: "Curious, asks clarifying questions"
-├─ Accent: "American English"
-└─ Voice Model: Selected from model registry (e.g., ElevenLabs TTS)
-```
-
-### Stage 4: Outline Generation
-
-System generates episode outline:
-```
-EPISODE: "AI Safety Approaches"
-
-1. Introduction (2 min)
-   Alex: Introduces topic and speakers
-   Sam: What will we cover today?
-
-2. Main Approaches (8 min)
-   Alex: Explains top 3 approaches
-   Sam: Asks about tradeoffs
-
-3. Debate: Best approach? (6 min)
-   Alex: Advocates for approach A
-   Sam: Argues for approach B
-
-4. Open Questions (3 min)
-   Both: What's unsolved?
-
-5. Conclusion (1 min)
-   Recap and where to learn more
-```
-
-### Stage 5: Dialogue Generation
-
-System generates dialogue based on outline:
-```
-Alex: "Today we're exploring three major approaches to AI alignment..."
-
-Sam: "That's a great start. Can you break down what we mean by alignment?"
-
-Alex: "Good question. Alignment means ensuring AI systems pursue the goals
-       we actually want them to pursue, not just what we literally asked for.
-       There's a classic example of a paperclip maximizer..."
-
-Sam: "Interesting. So it's about solving the intention problem?"
-
-Alex: "Exactly. And that's where the three approaches come in..."
-```
-
-### Stage 6: Text-to-Speech
-
-System converts dialogue to audio using the voice models configured in the model registry. Credentials are automatically resolved from each model's configuration.
-```
-Alex's text → Voice model (from registry) → Alex's voice (audio file)
-Sam's text → Voice model (from registry) → Sam's voice (audio file)
-Audio files → Mix together → Final podcast MP3
-```
+An episode costs the outline and transcript language-model calls (which include all selected content) plus text-to-speech for the whole script. More content, more segments and longer briefings all increase it. Check your providers' current pricing; local models cost nothing per call.
 
 ---
 
 ## When Things Go Wrong: Failures & Retry
 
-Podcast generation involves multiple steps (outline, transcript, TTS) and depends on external AI providers. Sometimes things fail.
+When generation fails, the episode moves to **Failed Episodes** and its card shows the error message. For common failures the message ends with a **NOTE** explaining the likely cause. Failed jobs are not retried automatically.
 
-### What Happens on Failure
+To try again, click **Retry** on the failed episode. The failed episode is deleted and a new job is submitted with the same settings.
 
-When podcast generation fails (e.g., wrong model configured, API key expired, provider outage):
-
-- The episode is marked as **Failed** with a red badge
-- The **error message** from the AI provider is displayed so you can understand what went wrong
-- No duplicate episodes are created — automatic retries are disabled to prevent confusion
-
-### How to Retry a Failed Episode
-
-1. Go to the podcast's **Episodes** tab
-2. Find the failed episode — it shows a red "FAILED" badge and an error details box
-3. Click the **Retry** button
-4. The failed episode is deleted and a new generation job is submitted
-5. The new episode appears with "pending" status
-
-### Common Failure Causes
-
-| Error | What to Do |
+| Error | What to do |
 |-------|-----------|
-| Invalid API key | Check Settings -> Credentials for the TTS and language model providers |
-| Model not found | Verify the model exists in the model registry and has valid credentials configured |
-| Rate limit exceeded | Wait a few minutes and retry |
-| Output limit / `max_tokens` too large | Set the episode profile's Max output tokens below the model's limit (the default is 8192) |
-| Provider unavailable | Check provider status page; retry later |
+| `... has no outline model configured` / `no transcript model configured` / `no voice model configured` | Edit the episode or speaker profile and pick the model. The seeded profiles ship without models. |
+| `Invalid speaker name` | The transcript model used a name that isn't in the speaker profile. Retrying usually works. |
+| `Voice name ... not supported` or `Requested entity was not found` (Google) | The Voice ID doesn't exist for that voice model. Use a voice name your TTS model provides. |
+| `Invalid json output` / `Expecting value` | The model's output was cut off or empty. Lower **Max output tokens** to the model's real limit, use fewer segments, or avoid models that put all output in thinking blocks. |
+| Invalid API key, model not found, rate limit | Check the credential and models under **Manage → Models**, then retry. |
 
----
-
-## Key Architecture Decisions
-
-### 1. Asynchronous Processing
-Podcasts are generated in the background. You upload → system processes → you download when ready.
-
-**Why?** Podcast generation takes time (10+ minutes for a 30-minute episode). Blocking would lock up your interface.
-
-### 2. Multi-Speaker Support
-Unlike Google Notebook LM (always 2 hosts), you choose 1-4 speakers.
-
-**Why?** Different discussions work better with different formats:
-- Expert monologue (1 speaker)
-- Interview (2 speakers: host + expert)
-- Debate (2 speakers: opposing views)
-- Panel discussion (3-4 speakers: different expertise)
-
-### 3. Speaker Customization
-You create rich speaker profiles, not just "Host A" and "Host B".
-
-**Why?** Makes podcasts more engaging and authentic. Different speakers bring different perspectives.
-
-### 4. Multiple TTS Providers
-You're not locked into one voice provider.
-
-**Why?**
-- Cost optimization (some providers cheaper)
-- Quality preferences (some voices more natural)
-- Privacy options (local TTS for sensitive content)
-- Accessibility (different accents, genders, styles)
-
-### 5. Local TTS Option
-Can generate podcasts entirely offline with local text-to-speech.
-
-**Why?** For sensitive research, never send audio to external APIs.
-
----
-
-## Use Cases Show Why This Matters
-
-### Academic Publishing
-```
-Traditional: Academic paper → PDF
-Problem: Hard to consume, linear reading required
-
-Open Notebook:
-Research materials → Podcast (expert explaining methodology)
-                  → Podcast (debate format: different interpretations)
-                  → Different consumption for different audiences
-```
-
-### Content Creation
-```
-Blog creator: Has research pile on a topic
-Problem: Doesn't have time to write the article
-
-Solution:
-Add research → Create podcast → Transcribe → Becomes article
-OR: Podcast BECOMES the content (upload to podcast platforms)
-```
-
-### Educational Content
-```
-Educator: Has reading materials for a course
-Problem: Students don't read the papers
-
-Solution:
-Create podcast with expert explaining papers
-Students listen → Better engagement → Discussions can reference podcast
-```
-
-### Market Research
-```
-Product manager: Has interviews with customers
-Problem: Too many hours of audio to review
-
-Solution:
-Create podcast with debate format (customer perspective vs. team perspective)
-Much more engaging than raw transcripts
-```
-
-### Knowledge Transfer
-```
-Domain expert: Leaving the organization
-Problem: How to preserve expertise?
-
-Solution:
-Create expert-mode podcast explaining frameworks, decision-making, context
-New team member listens, gets context faster than reading 100 documents
-```
-
----
-
-## The Difference: Active vs. Passive Learning
-
-### Text-Based Research (Active)
-- **Effort**: High (must focus, read, synthesize)
-- **When**: Dedicated study time
-- **Cost**: Time is expensive (can't multitask)
-- **Best for**: Deep dives, precise information
-- **Format**: Whatever you write (notes, articles, books)
-
-### Audio Podcast (Passive)
-- **Effort**: Low (just listen)
-- **When**: Anywhere, anytime
-- **Cost**: Low (can multitask)
-- **Best for**: Overview, context, exploration
-- **Format**: Dialogue (more engaging than narration)
-
-**They complement each other:**
-1. **First encounter**: Listen to podcast (passive, get context)
-2. **Deep dive**: Read source materials (active, precise)
-3. **Mastery**: Both together (understand big picture + details)
-
----
-
-## How Podcasts Fit Into Your Workflow
-
-```
-1. Build notebook (add sources)
-   ↓
-2. Apply transformations (extract insights)
-   ↓
-3. Chat/Ask (explore content)
-   ↓
-4. Decide on podcast
-   ├─→ Create speaker profiles
-   ├─→ Define episode profile
-   ├─→ Configure voice models (from model registry)
-   └─→ Generate podcast
-   ↓
-5. Listen while commuting/exercising
-   ↓
-6. Reference sources for deep dive
-   ↓
-7. Repeat for different formats/speakers/focus
-```
-
----
-
-## Advanced: Multiple Podcasts from Same Research
-
-You can create different podcasts from the same sources:
-
-### Example: AI Safety Research
-```
-Podcast 1: "Expert Monologue"
-  Speaker: Researcher explaining field
-  Format: Educational, comprehensive
-  Audience: Students new to field
-
-Podcast 2: "Debate Format"
-  Speakers: Optimist vs. skeptic
-  Format: Discussion of tradeoffs
-  Audience: Advanced researchers
-
-Podcast 3: "Interview Format"
-  Speakers: Journalist + expert
-  Format: Q&A about practical applications
-  Audience: Industry practitioners
-```
-
-Each tells the same story from different angles.
-
----
-
-## Privacy & Data Considerations
-
-### Where Your Data Goes
-
-**Option 1: Cloud TTS (Faster, Higher Quality)**
-```
-Your outline → API call to TTS provider
-            → Audio returned
-            → Stored in your notebook
-
-Provider sees: Your outlined script (not raw sources)
-Privacy level: Medium (outline is shared, sources aren't)
-```
-
-**Option 2: Local TTS (Slower, Maximum Privacy)**
-```
-Your outline → Local TTS engine (runs on your machine)
-            → Audio generated locally
-            → Stored in your notebook
-
-Provider sees: Nothing
-Privacy level: Maximum (everything local)
-```
-
-### Recommendation
-- **Sensitive research**: Use local TTS, no API calls
-- **Less sensitive**: Use ElevenLabs or Google (both handle audio data professionally)
-- **Mixed**: Use local TTS for speakers reading sensitive content
-
----
-
-## Cost Considerations
-
-### Cloud TTS Costs
-| Provider | Cost | Quality | Speed |
-|----------|------|---------|-------|
-| OpenAI | ~$0.015 per minute | Good | Fast |
-| Google | ~$0.004 per minute | Excellent | Fast |
-| ElevenLabs | ~$0.10 per minute | Exceptional | Medium |
-| Local TTS | Free | Basic | Slow |
-
-A 30-minute podcast costs:
-- OpenAI: ~$0.45
-- Google: ~$0.12
-- ElevenLabs: ~$3.00
-- Local: Free (but slow)
-
----
-
-## Summary: Why Podcasts Are Special
-
-**Podcasts transform your research consumption:**
-
-| Aspect | Text | Podcast |
-|--------|------|---------|
-| **How consumed?** | Active reading | Passive listening |
-| **Where consumed?** | Desk | Anywhere |
-| **Multitasking** | Hard | Easy |
-| **Time commitment** | Scheduled | Flexible |
-| **Format** | Whatever | Natural dialogue |
-| **Engagement** | Academic | Conversational |
-| **Accessibility** | Text-based | Audio-based |
-
-**In Open Notebook specifically:**
-- **Full customization** — you create speakers and format
-- **Privacy options** — local TTS for sensitive content
-- **Cost control** — choose TTS provider based on budget
-- **Non-blocking** — generates in background
-- **Multiple versions** — create different podcasts from same research
-
-This is why podcasts matter: they change *when* and *how* you can consume your research.
+Unconfigured profiles you are *not* using don't block generation; they are skipped.
diff --git a/docs/3-USER-GUIDE/adding-sources.md b/docs/3-USER-GUIDE/adding-sources.md
index f8c9c0b0..570bead9 100644
--- a/docs/3-USER-GUIDE/adding-sources.md
+++ b/docs/3-USER-GUIDE/adding-sources.md
@@ -1,441 +1,106 @@
 # Adding Sources - Getting Content Into Your Notebook
 
-Sources are the raw materials of your research. This guide covers how to add different types of content.
+Sources are the material the AI works with: files, web pages and pasted text. Every source goes through the same three-step **Add Source** wizard and is processed in the background.
 
 ---
 
-## Quick-Start: Add Your First Source
+## The Add Source Wizard
 
-### Option 1: Upload a File (PDF, Word, etc.)
+Open it from a notebook (**Add Source → Add Source**), from the **Sources** page (**New Source**), or from the sidebar (**New → Source**).
 
-```
-1. In your notebook, click "Add Source"
-2. Select "Upload File"
-3. Choose a file from your computer
-4. Click "Upload"
-5. Wait 30-60 seconds for processing
-6. Done! Source appears in your notebook
-```
+### Step 1: Add Source
 
-### Option 2: Add a Web Link
+Choose a tab:
 
-```
-1. Click "Add Source"
-2. Select "Web Link"
-3. Paste URL: https://example.com/article
-4. Click "Add"
-5. Wait for processing (usually faster than files)
-6. Done!
-```
+- **Add URL**: paste a link. Paste several links, one per line, to import them in one go.
+- **Upload File**: pick one file, or several to import them in one go.
+- **Enter Text**: paste or type text. A **Title** is required for text.
 
-### Option 3: Paste Text
+For a single URL or file, the **Title** is optional; if you leave it empty, one is generated from the content. In batch mode (more than one URL or file) titles are always generated, and the same notebooks and transformations apply to every item. A batch can hold up to **50** URLs or files.
 
-```
-1. Click "Add Source"
-2. Select "Text"
-3. Paste or type your content
-4. Click "Save"
-5. Done! Immediately available
-```
+### Step 2: Notebooks
+
+Pick the notebooks to link the source to (optional). Opened from a notebook, that notebook is already selected. A source can be linked to more notebooks later.
+
+### Step 3: Process
+
+- **Transformations (optional)**: transformations to run on the source after extraction. Each one produces an [insight](../2-CORE-CONCEPTS/notebooks-sources-notes.md#insights). Transformations marked *Suggest by default on new sources* are pre-selected (on a new install, that's **Dense Summary**). See [Transformations](transformations.md).
+- **Enable embedding for search**: embeds the source so vector search and Ask can find it. Its default comes from **Settings → Embedding and Search → Default Embedding Option**: *Ask* shows this checkbox (checked), *Always* embeds without asking, *Never* skips embedding.
+
+Click **Done**. You can click **Done** on any step to submit with the current choices.
 
 ---
 
-## Supported File Types
+## Supported Content
 
-### Documents
-- **PDF** (.pdf) — Best support, including scanned PDFs with OCR
-- **Word** (.docx, .doc) — Full support
-- **PowerPoint** (.pptx) — Slides converted to text
-- **Excel** (.xlsx, .xls) — Spreadsheet data
-- **EPUB** (.epub) — eBook files
-- **OpenDocument** (.odt, .ods, .odp) — LibreOffice / OpenOffice text documents, spreadsheets (one table per sheet) and presentations (one block per slide)
-- **Markdown** (.md, .txt) — Plain text formats
-- **HTML** (.html, .htm) — Web page files
-- **Images** (.png, .jpg, .jpeg, .tiff, .bmp) — Text read via OCR (**requires Docling enabled** — see below)
+### Files
 
-**File size limits:** Up to ~100MB (varies by system)
+| Kind | Extensions |
+|------|------------|
+| Documents | PDF, DOC, DOCX, PPT, PPTX, XLS, XLSX, ODT, ODS, ODP, EPUB, TXT, MD, HTML, HTM |
+| Audio | MP3, WAV, M4A, AAC |
+| Video | MP4, AVI, MOV, WMV |
+| Images | JPG, JPEG, PNG, TIFF (only when Docling is enabled; see [Content Processing Engines](content-processing-engines.md)) |
 
-**Processing time:** 10 seconds - 2 minutes (depending on length and file type)
+- **Audio and video are transcribed** with your **Speech-to-Text Model** (set in **Manage → Models → Default Model Assignments**). Without one, they can't be processed. For a local option, see [Local Speech-to-Text](../5-CONFIGURATION/local-stt.md).
+- **Upload size** is limited to 100 MB by default; `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` changes the API's limit. By default the browser sends uploads straight to the API (port 5055), so that is the only limit in the app. If your setup routes API calls through the frontend's `/api` path instead (for example `API_URL` set to the frontend's own address), the frontend also caps request bodies at 100 MB. A reverse proxy in front may add its own limit.
+- **Scanned PDFs** need Docling with OCR to give usable text.
 
-**OCR (scanned PDFs & images):** Text is read off scanned PDFs and image files using OCR. OCR runs through the **Docling** engine, which is **optional** and installed on first startup when you set `OPEN_NOTEBOOK_ENABLE_DOCLING=true`. Once enabled, OCR is on by default; you can turn it off (or force a more accurate extraction engine) in **Settings → Content Processing** — see [Content Processing Engines](content-processing-engines.md).
+### Web links
 
-### Audio & Video
-- **Audio**: MP3, WAV, M4A, OGG, FLAC (~30 seconds - 3 minutes per hour)
-- **Video**: MP4, AVI, MOV, MKV, WebM (~3-10 minutes per hour)
-- **YouTube**: Direct URL support
-- **Podcasts**: RSS feed URL
+- **Articles and web pages**: fetched with the URL engine chosen in **Settings → Content Processing**. Pages that render with JavaScript may need Firecrawl, Jina or Crawl4AI; see [Content Processing Engines](content-processing-engines.md).
+- **YouTube videos**: the transcript is imported. The preferred transcript languages are a setting reachable through the API (`youtube_preferred_languages` in `GET`/`PUT /api/settings`). If YouTube blocks your server, set `CCORE_YOUTUBE_PROXY` or `CCORE_YOUTUBE_COOKIES_FILE` for the worker ([Environment Reference](../5-CONFIGURATION/environment-reference.md)).
+- **Pages behind a login or paywall** generally can't be fetched. Copy the text and use **Enter Text** instead.
 
-**Automatic transcription**: Audio/video is transcribed to text automatically. This requires enabling speech-to-text in settings.
+### Text
 
-### Web Content
-- **Articles**: Blog posts, news articles, Medium
-- **YouTube**: Full videos, playlists, plus `/live/` and `/shorts/` URLs
-- **Reddit**: Public post URLs (fetched via Reddit's public JSON)
-- **PDFs online**: Direct PDF links
-- **News**: News site articles
-
-**Just paste the URL** in "Web Link" section.
-
-**JavaScript-heavy sites:** How well a URL extracts depends on the URL processing engine. The default (`auto`) tries several engines; enabling Crawl4AI lets it render JavaScript pages locally. If a link comes back empty, see [Content Processing Engines](content-processing-engines.md).
-
-### What Doesn't Work
-- Paywalled content (WSJ, FT, etc.) — Can't extract
-- Password-protected PDFs — Can't open
-- Unsupported formats — Rejected immediately with a clear "unsupported file type" message (no long wait)
-- Very large files (>100MB) — Timeout
+Pasted text is processed like any other source (also in the background). Pasted HTML is converted to Markdown.
 
 ---
 
-## What Happens When You Add a Source
+## Processing Status
 
-The system automatically does four things:
+A background job extracts the text, embeds it (if enabled) and runs the selected transformations. The source card shows:
 
-```
-1. EXTRACT TEXT
-   File/URL → Readable text
-   (PDFs get OCR if scanned)
-   (Videos get transcribed if enabled)
+| Status | Meaning |
+|--------|---------|
+| **Queued** | Waiting for the worker |
+| **Processing** | Being processed (a progress bar may show) |
+| **Completed** | Done; the status badge disappears and the card shows the number of insights, if any |
+| **Failed** | Processing stopped; the card shows **Retry Processing** |
 
-2. BREAK INTO CHUNKS
-   Long text → ~500-word pieces
-   (So search finds specific parts, not whole document)
+Sources are processed by the background worker. If sources stay **Queued** forever, the worker isn't running (`make worker-start` for source installs; it runs inside the Docker image automatically).
 
-3. CREATE EMBEDDINGS
-   Each chunk → Vector representation
-   (Enables semantic/concept search)
-
-4. INDEX & STORE
-   Everything → Database
-   (Ready to search and retrieve)
-```
-
-**Time to use:** After the progress bar completes, the source is ready immediately. Embeddings are created in the background.
+Transformations and embedding finish after the text is saved, so insights can appear a little after the source shows **Completed**.
 
 ---
 
-## Step-by-Step for Different Types
+## When a Source Fails
 
-### PDFs
+A failed source fails once: it is not retried automatically. The card shows *Source processing failed* and a **Retry Processing** button (also in the card's ⋮ menu).
 
-**Best practices:**
-```
-Clean PDFs:
-  1. Upload → Done
-  2. Processing time: ~30-60 seconds
+The specific reason is stored with the job. You can read it in the worker log (which also has the underlying error) or from the API at `GET /api/sources/{source_id}/status` (the `processing_info.error` field). The UI does not show it yet. The reasons are:
 
-Scanned/Image PDFs:
-  1. Upload same way
-  2. System auto-detects and uses OCR
-  3. Processing time: ~2-3 minutes
-  4. (Higher, due to OCR overhead)
-
-Large PDFs (50+ pages):
-  1. Consider splitting into smaller files
-  2. Or upload as-is (system handles it)
-  3. Processing time scales with size
-```
-
-**Common issues:**
-- "Can't extract text" → PDF is corrupted or has copy protection
-- Solution: Try opening in Adobe. If it won't, the PDF is likely protected.
-
-### Web Links / Articles
-
-**Best practices:**
-```
-1. Copy full URL from browser: https://example.com/article-title
-2. Paste in "Web Link"
-3. Click Add
-4. Wait for extraction
-
-Processing time: Usually 5-15 seconds
-```
-
-**What works:**
-- Standard web articles
-- Blog posts
-- News articles
-- Wikipedia pages
-- Medium posts
-- Substack articles
-
-**What doesn't work:**
-- Twitter threads (unreliable)
-- Paywalled articles (can't access)
-- JavaScript-heavy sites (content not extracted)
-
-**Pro tip:** If it doesn't work, copy the article text and paste as "Text" instead.
-
-### Audio Files
-
-**Best practices:**
-```
-1. Ensure speech-to-text is enabled in Settings
-2. Upload MP3, WAV, or M4A file
-3. System automatically transcribes to text
-4. Processing time: ~1 minute per 5 minutes of audio
-
-Example:
-  - 1-hour podcast → 12 minutes processing
-  - 10-minute recording → 2 minutes processing
-```
-
-**Quality matters:**
-- Clear audio: Fast transcription
-- Muffled/noisy audio: Slower, less accurate transcription
-- Background noise: Try to minimize before uploading
-
-**Tip:** If audio quality is poor, the AI might misinterpret content. You can manually correct transcription if needed.
-
-### YouTube Videos
-
-**Best practices:**
-```
-Two ways to add:
-
-Method 1: Direct URL
-  1. Copy YouTube URL: https://www.youtube.com/watch?v=...
-     (regular watch, /live/, and /shorts/ URLs all work)
-  2. Paste in "Web Link"
-  3. Click Add
-  4. System extracts captions (if available) + transcript
-
-Method 2: Playlist
-  1. Paste playlist URL
-  2. System adds all videos as separate sources
-  3. Each video processed separately
-  4. Takes longer (multiple videos)
-```
-
-**What's extracted:**
-- Captions/subtitles (if available)
-- Transcription (if captions aren't available)
-- Basic metadata (title, channel, length)
-
-**"YouTube blocked or failed the transcript request":** YouTube blocks transcript requests from many server and cloud IPs. Give the worker a residential proxy (`CCORE_YOUTUBE_PROXY`) or a browser cookies file (`CCORE_YOUTUBE_COOKIES_FILE`) — see [Content Extraction variables](../5-CONFIGURATION/environment-reference.md#content-extraction). Datacenter proxies are usually blocked too.
-
-**Processing:**
-- 10-minute video: ~2-3 minutes
-- 1-hour video: ~10-15 minutes
-
-### Text / Paste Content
-
-**Best practices:**
-```
-1. Select "Text" when adding source
-2. Paste or type content
-3. System processes immediately
-4. No wait time needed
-
-Good for:
-  - Notes you want to reference
-  - Quotes from books
-  - Transcripts you have handy
-  - Quick research snippets
-```
+| Message | What to do |
+|---------|-----------|
+| *The page was not found (it may have been removed or moved). Check the URL.* | Fix the link |
+| *Could not reach this address (connection, timeout or DNS error). Check the URL and try again.* | Check the URL and your server's network access, then retry |
+| *This URL or input is not valid.* | Fix the URL |
+| *This file type is not supported.* | Convert the file to a supported format |
+| *The file could not be read. It may be corrupted or in an unsupported format.* | Re-export or re-download the file |
+| *Could not extract content from this YouTube video. No transcript or subtitles are available. ...* | The video has no transcript |
+| *YouTube blocked or failed the transcript request. ...* | Set `CCORE_YOUTUBE_PROXY` or `CCORE_YOUTUBE_COOKIES_FILE` |
+| *Content extraction is not configured correctly. ...* | Check the engine in **Settings → Content Processing** and your Speech-to-Text Model; the worker log has details |
+| *The content extraction service failed.* / *Could not extract content from this source.* | Try another engine, or paste the text with **Enter Text** |
 
 ---
 
-## Managing Your Sources
+## Managing Sources
 
-### Viewing Source Details
-
-```
-Click on source → See:
-  - Original file name/title
-  - When it was added
-  - Size and format
-  - Processing status
-  - Number of chunks
-```
-
-### Organizing with Metadata
-
-You can add to each source:
-- **Title**: Better name than original filename
-- **Tags**: Category labels ("primary research", "background", "competitor analysis")
-- **Description**: A few notes about what it contains
-
-**Why this matters:**
-- Makes sources easier to find
-- Helps when contextualizing for Chat
-- Useful for organizing large notebooks
-
-### Searching Within Sources
-
-```
-After sources are added, you can:
-
-Text search: "Find exact phrase"
-Vector search: "Find conceptually similar"
-
-Both search across all sources in notebook.
-Results show:
-  - Which source
-  - Which section
-  - Relevance score
-```
-
----
-
-## Context Management: How Sources Get Used
-
-You control how AI accesses sources:
-
-### Three Levels (for Chat)
-
-**Full Content:**
-```
-AI sees: Complete source text
-Cost: 100% of tokens
-Use when: Analyzing in detail, need precise citations
-Example: "Analyze this methodology paper closely"
-```
-
-**Summary Only:**
-```
-AI sees: AI-generated summary (not full text)
-Cost: ~10-20% of tokens
-Use when: Background material, reference context
-Example: "Use this as context but focus on the main source"
-```
-
-**Not in Context:**
-```
-AI sees: Nothing (excluded)
-Cost: 0 tokens
-Use when: Confidential, not relevant, or archived
-Example: "Keep this in notebook but don't use in this conversation"
-```
-
-### How to Set Context (in Chat)
-
-```
-1. Go to Chat
-2. Click "Select Context Sources"
-3. For each source:
-   - Toggle ON/OFF (include/exclude)
-   - Choose level (Full/Summary/Excluded)
-4. Click "Save"
-5. Now chat uses these settings
-```
-
----
-
-## Common Mistakes
-
-| Mistake | What Happens | How to Fix |
-|---------|--------------|-----------|
-| Upload 200 sources at once | System gets slow, processing stalls | Add 10-20 at a time, wait for processing |
-| Use full content for all sources | Token usage skyrockets, expensive | Use "Summary" or "Excluded" for background material |
-| Add huge PDFs without splitting | Processing is slow, search results less precise | Consider splitting large PDFs into chapters |
-| Forget source titles | Can't distinguish between similar sources | Rename sources with descriptive titles right after uploading |
-| Don't tag sources | Hard to find and organize later | Add tags immediately: "primary", "background", etc. |
-| Mix languages in one source | Transcription/embedding quality drops | Keep each language in separate sources |
-| Use same source multiple times | Takes up space, creates confusion | Add once; reuse in multiple chats/notebooks |
-
----
-
-## Processing Status & Troubleshooting
-
-### What the Status Indicators Mean
-
-```
-🟡 Processing
-  → Source is being extracted and embedded
-  → Wait 30 seconds - 3 minutes depending on size
-  → Don't use in Chat yet
-
-🟢 Ready
-  → Source is processed and searchable
-  → Can use immediately in Chat
-  → Can apply transformations
-
-🔴 Error
-  → Something went wrong
-  → Common reasons:
-    - Unsupported file format
-    - File too large or corrupted
-    - Network timeout
-
-⚪ Not in Context
-  → Source added but excluded from Chat
-  → Still searchable, not sent to AI
-```
-
-### Common Errors & Solutions
-
-**"Unsupported file type"**
-- You tried to upload a format not in the list (e.g., `.webp` image)
-- The upload is rejected **immediately** with a message naming the detected type — no long wait or stuck "Processing" state
-- Note: image formats (PNG/JPEG/TIFF/BMP) are only supported when **Docling is enabled** (`OPEN_NOTEBOOK_ENABLE_DOCLING=true`)
-- Solution: Convert to a supported format (PDF for documents, MP3 for audio), or enable Docling for images
-
-**"Processing timeout"**
-- Very large file (>100MB) or very long audio
-- Solution: Split into smaller pieces or try uploading again
-
-**"Transcription failed"**
-- Audio quality too poor or language not detected
-- Solution: Re-record with better quality, or paste text transcript manually
-
-**"Web link won't extract"**
-- Website blocks automated access or uses JavaScript for content
-- Solution: Try a different URL processing engine (see [Content Processing Engines](content-processing-engines.md)) — enabling Crawl4AI renders JavaScript pages — or copy the article text and paste as "Text" instead
-
----
-
-## Tips for Best Results
-
-### For PDFs
-- Clean, digital PDFs work best
-- Remove copy protection if present (legally)
-- Scanned PDFs work but take longer
-
-### For Web Articles
-- Use full URL including domain
-- Avoid cookie/popup-laden sites
-- If extraction fails, copy-paste text instead
-
-### For Audio
-- Clear, well-recorded audio transcribes better
-- Remove background noise if possible
-- YouTube videos usually have good transcriptions built-in
-
-### For Large Documents
-- Consider splitting into smaller sources
-- Gives more precise search results
-- Processing is faster for smaller pieces
-
-### For Organization
-- Name sources clearly (not "document_2.pdf")
-- Add tags immediately after uploading
-- Use descriptions for complex documents
-
----
-
-## What Comes After: Using Your Sources
-
-Once you've added sources, you can:
-
-- **Chat** → Ask questions (see [Chat Effectively](chat-effectively.md))
-- **Search** → Find specific content (see [Search Effectively](search.md))
-- **Transformations** → Extract structured insights (see [Working with Notes](working-with-notes.md))
-- **Ask** → Get comprehensive answers (see [Search Effectively](search.md))
-- **Podcasts** → Turn into audio (see [Creating Podcasts](creating-podcasts.md))
-
----
-
-## Summary Checklist
-
-Before adding sources, confirm:
-
-- [ ] File is in supported format
-- [ ] File is under 100MB (or splitting large ones)
-- [ ] Web links are full URLs (not shortened)
-- [ ] Audio files have clear speech (if transcription-dependent)
-- [ ] You've named source clearly
-- [ ] You've added tags for organization
-- [ ] You understand context levels (Full/Summary/Excluded)
-
-Done! Sources are now ready for Chat, Search, Transformations, and more.
+- **Open a source**: click its card for the Content, Insights and Details tabs. See [Interface Overview](interface-overview.md#the-source-view).
+- **Add it to another notebook**: in that notebook, **Add Source → Add Existing Sources**, or from the source's Details tab, **Manage Notebooks**.
+- **Remove from Notebook** (⋮ menu): unlinks the source from this notebook only.
+- **Delete Source** (⋮ menu): deletes the source everywhere, with its insights, embeddings and uploaded file. This can't be undone.
+- **Refresh content** (⋮ menu, completed links): fetches the page again and reprocesses it.
+- **Embed Content** (source view ⋮ menu): embeds a source that was added without embedding.
+- **Control what Chat sees**: the context icon on each card. See [Chat Effectively](chat-effectively.md#choosing-what-the-ai-sees).
diff --git a/docs/3-USER-GUIDE/api-configuration.md b/docs/3-USER-GUIDE/api-configuration.md
index a3fdc1bc..2d522cf7 100644
--- a/docs/3-USER-GUIDE/api-configuration.md
+++ b/docs/3-USER-GUIDE/api-configuration.md
@@ -1,396 +1,109 @@
 # API Configuration
 
-Configure AI provider credentials through the Settings UI. No file editing required.
+Connect AI providers and choose your default models in **Manage → Models**. API keys are stored encrypted in the database; no file editing is needed after the encryption key is set.
 
-> **Credential System**: Open Notebook uses encrypted credentials stored in the database. Each credential connects to a provider and allows you to discover, register, and test models.
+The page has three parts, top to bottom:
 
----
-
-## Overview
-
-Open Notebook manages AI provider access through a **credential-based system**:
-
-1. You create a **credential** for each provider (API key + settings)
-2. Credentials are **encrypted** and stored in the database
-3. You **test connections** to verify credentials work
-4. You **discover and register models** from each credential
-5. Models are linked to credentials for direct configuration
+1. **Environment Variables Detected** banner (only if you have provider keys in environment variables; see [Migrating from Environment Variables](#migrating-from-environment-variables)).
+2. **Default Model Assignments**: which model each feature uses.
+3. **Provider sections**: one per provider, each showing *Configured* or *Not configured*, its configurations and their models.
 
 ---
 
 ## Encryption Setup
 
-Before storing credentials, you must configure an encryption key.
+Storing API keys requires `OPEN_NOTEBOOK_ENCRYPTION_KEY`. Until it is set, the Models page shows **Encryption key not configured** and configurations can't be saved.
 
-### Setting the Encryption Key
-
-Add `OPEN_NOTEBOOK_ENCRYPTION_KEY` to your docker-compose.yml:
+Set it on the `open_notebook` service in your `docker-compose.yml`:
 
 ```yaml
-environment:
-  - OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-passphrase
-```
-
-Any string works as a key — it will be securely derived via SHA-256 internally.
-
-> **Warning**: If you change or lose the encryption key, **all stored credentials become unreadable**. Back up your encryption key securely and separately from your database backups.
-
-### Docker Secrets Support
-
-Both password and encryption key support Docker secrets:
-
-```yaml
-# docker-compose.yml
 services:
   open_notebook:
     environment:
-      - OPEN_NOTEBOOK_PASSWORD_FILE=/run/secrets/app_password
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE=/run/secrets/encryption_key
-    secrets:
-      - app_password
-      - encryption_key
-
-secrets:
-  app_password:
-    file: ./secrets/password.txt
-  encryption_key:
-    file: ./secrets/encryption_key.txt
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<your-generated-secret>
 ```
 
-### Encryption Details
+Replace `<your-generated-secret>` with a long random secret that you generate yourself. Don't copy an example value from any guide. Either of these prints a suitable value:
 
-API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-SHA256).
-
-| Configuration | Behavior |
-|---------------|----------|
-| Encryption key set | Keys encrypted with your key |
-| No encryption key set | Storing credentials is disabled |
-
----
-
-## Accessing Credential Configuration
-
-1. In the sidebar, find the **Manage** section
-2. Click **Models**
-3. You'll see existing credentials and an **Add Credential** button
-
-```
-Navigation: Manage → Models
+```bash
+openssl rand -hex 32                                   # macOS, Linux
 ```
 
----
+```powershell
+[guid]::NewGuid().ToString("N") + [guid]::NewGuid().ToString("N")   # Windows PowerShell
+```
 
-## Supported Providers
+Apply the change by recreating the container (`docker compose up -d`).
 
-### Cloud Providers
+> **Keep this value safe and stable.** If it changes, stored API keys can't be decrypted and their cards show **Decryption Error** until you restore the original value. If the original value is lost, the stored keys can't be recovered: delete those configurations and add them again.
 
-| Provider | Required Fields | Optional Fields |
-|----------|-----------------|-----------------|
-| OpenAI | API Key | — |
-| Anthropic | API Key | — |
-| Google Gemini | API Key | — |
-| Groq | API Key | — |
-| Mistral | API Key | — |
-| DeepSeek | API Key | — |
-| xAI | API Key | — |
-| OpenRouter | API Key | — |
-| Voyage AI | API Key | — |
-| ElevenLabs | API Key | — |
-
-### Local/Self-Hosted
-
-| Provider | Required Fields | Notes |
-|----------|-----------------|-------|
-| Ollama | Base URL | Typically `http://localhost:11434` or `http://ollama:11434` |
-| oMLX | Base URL | Default `http://localhost:11435/v1` (avoids SurrealDB on 8000); API key optional |
-
-### Enterprise
-
-| Provider | Required Fields | Optional Fields |
-|----------|-----------------|-----------------|
-| Azure OpenAI | API Key, URL Base (Azure endpoint) | Service-specific endpoints (LLM, Embedding, STT, TTS) |
-| OpenAI-Compatible | Base URL | API Key, Service-specific configs |
-| Vertex AI | Project ID, Location, Credentials Path | — |
+Both `OPEN_NOTEBOOK_ENCRYPTION_KEY` and `OPEN_NOTEBOOK_PASSWORD` also accept a `_FILE` variant (for example `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE=/run/secrets/encryption_key`) for Docker secrets. For the encryption scheme, upgrading stored keys and backups, see [Security](../5-CONFIGURATION/security.md).
 
 ---
 
-## Creating a Credential
+## Connect a Provider
 
-### Step 1: Add Credential
+The step-by-step setup (**Add Configuration** → **Test Connection** → **Discover Models** dialog → **Add (N)** → **Auto-assign Defaults** → a first chat) is in [AI Providers → Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider). In short: add a configuration for the provider, test it, open its **Discover Models** dialog (the *Sync Models* button), pick a **Model Type**, tick the models (or type a name that isn't listed) and click **Add (N)**. Repeat per model type you need.
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select your provider
-4. Give it a descriptive name (e.g., "My OpenAI Key", "Work Anthropic")
-5. Fill in the required fields (API key, base URL, etc.)
-6. Click **Save**
+The models then appear under the configuration, each with a **Test Model** icon (sends a small request to that model) and a delete icon.
 
-### Step 2: Test Connection
+Which providers offer which model types (language, embedding, speech) is listed in [AI Providers](../4-AI-PROVIDERS/index.md); provider-specific setup notes are in [AI Providers configuration](../5-CONFIGURATION/ai-providers.md), [Ollama](../5-CONFIGURATION/ollama.md), [OpenAI-compatible](../5-CONFIGURATION/openai-compatible.md) and [oMLX](../5-CONFIGURATION/omlx.md).
 
-1. On your new credential card, click **Test Connection**
-2. Wait for the result:
+> Several providers only offer language models. Ask and vector search also need an embedding model; podcasts need a text-to-speech model; uploaded audio and video files, and YouTube videos without a transcript, need a speech-to-text model. These can come from a different provider.
 
-| Result | Meaning |
-|--------|---------|
-| Success | Key is valid, provider accessible |
-| Invalid API key | Check key format and value |
-| Connection failed | Check URL, network, firewall |
+### Multiple configurations per provider
 
-### Step 3: Discover Models
-
-1. Click **Discover Models** on the credential card
-2. The system queries the provider for available models
-3. Review the discovered models
-
-### Step 4: Register Models
-
-1. Select the models you want to use
-2. Click **Register Models**
-3. The models are now available throughout Open Notebook
+A provider can have several configurations, for example two API keys or two Ollama servers. Each model is linked to the configuration it was added from and uses that configuration's key and URL.
 
 ---
 
-## Multi-Credential Support
+## Default Model Assignments
 
-Each provider can have **multiple credentials**. This is useful when:
-- You have different API keys for different projects
-- You want to test with different endpoints
-- Multiple team members need separate credentials
+This section decides which model each feature uses. Fields marked with an asterisk are required.
 
-### Creating Multiple Credentials
+| Assignment | Used for | If not set |
+|------------|----------|-----------|
+| **Chat Model** * | Notebook chat, source chat; the default for all three Ask stages on the Ask page | Chat and Ask fail |
+| **Embedding Model** * | Embedding sources, notes and insights; vector search; Ask | Ask and vector search are unavailable |
+| **Transformation Model** | Transformations (insights), titles for AI-generated notes | Uses the Chat Model |
+| **Tools Model** | Ask, when called through the API without explicit models | Uses the Chat Model |
+| **Large Context Model** | Any prompt over about 105,000 tokens | Uses the Chat Model |
+| **Text-to-Speech Model** | Nothing at the moment: podcasts take their voice model from the speaker profile | — |
+| **Speech-to-Text Model** | Transcribing uploaded audio and video files, and YouTube videos without a transcript | Those sources can't be transcribed (YouTube videos with a transcript still work) |
 
-1. Click **Add Credential** again
-2. Select the same provider
-3. Fill in different credentials
-4. Each credential can discover and register its own models
+While the Chat Model or Embedding Model is missing, a notice offers **Auto-assign Defaults**, which fills those two from the models you have added (the other slots stay as they are). If it says *No models available to assign*, add some models first.
 
-### How Models Link to Credentials
+Podcasts use the models set in their episode and speaker profiles, not these defaults (see [Creating Podcasts](creating-podcasts.md)).
 
-When you register models from a credential, those models are linked to that specific credential. This means:
-- Each model knows which API key to use
-- You can have models from different credentials for the same provider
-- Deleting a credential removes its linked models
-
----
-
-## Testing Connections
-
-Click **Test Connection** to verify your credential:
-
-| Result | Meaning |
-|--------|---------|
-| Success | Key is valid, provider accessible |
-| Invalid API key | Check key format and value |
-| Connection failed | Check URL, network, firewall |
-| Model not available | Key valid but model access restricted |
-
-Test uses inexpensive models (e.g., `gpt-3.5-turbo`, `claude-3-haiku`) to minimize cost.
-
----
-
-## Configuring Specific Providers
-
-### Simple Providers (API Key Only)
-
-For OpenAI, Anthropic, Google, Groq, Mistral, DeepSeek, xAI, OpenRouter:
-
-1. Add credential with your API key
-2. Test connection
-3. Discover and register models
-
-### Ollama (URL-Based)
-
-1. Add credential with provider **Ollama**
-2. Enter the base URL (e.g., `http://ollama:11434`)
-3. Test connection
-4. Discover and register models
-
-Ollama allows localhost and private IPs since it runs locally.
-
-### oMLX (Apple Silicon)
-
-1. Add credential with provider **oMLX**
-2. Base URL defaults to `http://localhost:11435/v1` (do not use port `8000` — that conflicts with SurrealDB)
-3. API key is optional
-4. Test connection → discover and register language/embedding models
-
-See [oMLX Setup](../5-CONFIGURATION/omlx.md) for install and Docker host networking notes.
-
-### Azure OpenAI
-
-1. Add credential with provider **Azure OpenAI**
-2. Enter your API key
-3. Enter your Azure endpoint in the **URL Base** field (e.g., `https://myresource.openai.azure.com`)
-4. Test connection
-5. Discover and register models
-
-The URL Base field is automatically mapped to the Azure endpoint. The API version defaults to `2024-10-21` if not set via environment variable.
-
-### OpenAI-Compatible
-
-For custom OpenAI-compatible servers (LM Studio, vLLM, etc.):
-
-1. Add credential with provider **OpenAI-Compatible**
-2. Enter the base URL
-3. Enter API key (if required)
-4. Optionally configure per-service URLs
-
-Supports separate configurations for:
-- LLM (language models)
-- Embedding
-- STT (speech-to-text)
-- TTS (text-to-speech)
-
-### Vertex AI
-
-Google Cloud's enterprise AI platform:
-
-| Field | Example |
-|-------|---------|
-| Project ID | `my-gcp-project` |
-| Location | `us-central1` |
-| Credentials Path | `/path/to/service-account.json` |
+**Changing the Embedding Model** opens a confirmation: existing embeddings were made by the old model and won't match new queries. Choose **Change & Go to Rebuild** to go to **Advanced → Rebuild Embeddings**, or **Change Model Only** to rebuild later.
 
 ---
 
 ## Migrating from Environment Variables
 
-If you have existing API keys in environment variables (from a previous version):
+If provider API keys are set as environment variables (the older way), the Models page shows **Environment Variables Detected**.
 
-1. Open **Manage → Models**
-2. A banner appears: "Environment variables detected"
-3. Click **Migrate to Database**
-4. Keys are copied to the database (encrypted)
-5. Original environment variables remain unchanged
-
-### Migration Behavior
-
-| Scenario | Action |
-|----------|--------|
-| Key in env only | Migrated to database |
-| Key in database only | No change |
-| Key in both | Database version kept (skipped) |
-
-### After Migration
-
-- Database credentials are used for all operations
-- You can remove the API key environment variables from your docker-compose.yml
-- Keep `OPEN_NOTEBOOK_ENCRYPTION_KEY` — it's still required
-
-### Migration Banner Visibility
-
-The migration banner only appears when:
-- You have environment variables configured
-- Those providers are **not** already in the database
-- If all env providers are already migrated, the banner won't show
+1. Click **Migrate to Database**.
+2. For each provider that has keys in the environment and **no** configuration in the database yet, a configuration is created from those keys (encrypted). Providers that already have a configuration are skipped.
+3. The environment variables are not changed. Once the migrated configurations work, you can remove the keys from your environment. Keep `OPEN_NOTEBOOK_ENCRYPTION_KEY`.
 
 ---
 
-## Migrating from ProviderConfig (v1.1 → v1.2)
+## Edit or Delete a Configuration
 
-If you're upgrading from an older version that used the ProviderConfig system:
-
-- The migration happens automatically on first startup
-- Your existing configurations are converted to credentials
-- Check **Manage → Models** to verify the migration succeeded
-- If you see issues, check the API logs for migration messages
-
----
-
-## Key Storage Security
-
-### Encryption
-
-API keys stored in the database are encrypted using Fernet (AES-128-CBC + HMAC-SHA256).
-
-| Configuration | Behavior |
-|---------------|----------|
-| Encryption key set | Keys encrypted with your key |
-| No encryption key set | Storing API keys in database is disabled |
-
-### Default Credentials
-
-| Setting | Default Value | Production Recommendation |
-|---------|---------------|---------------------------|
-| Password | None - auth is fully disabled until set | Set `OPEN_NOTEBOOK_PASSWORD` |
-| Encryption Key | None (must be set) | Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` to any secret string |
-
-**For production deployments, always set custom credentials.**
-
----
-
-## Deleting Credentials
-
-1. Click the **Delete** button on the credential card
-2. Confirm deletion
-3. Credential and all its linked models are removed from the database
+- **Edit** (pencil icon): change the name, URL or other fields. Leave **API Key** blank to keep the stored key.
+- **Delete** (trash icon): if the configuration has models, you can pick another configuration of the same provider under **Migrate models to** and click **Migrate & Delete**, or click **Delete with Models** to remove the models too. Check **Default Model Assignments** afterwards if any of them used the deleted models.
 
 ---
 
 ## Troubleshooting
 
-### Credential Not Saving
+| Symptom | What to check |
+|---------|---------------|
+| Can't save a configuration, *Encryption key not configured* | Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` and recreate the container |
+| **Decryption Error** on a configuration | The encryption key changed. Restore the original value; if it's lost, delete the configuration and add it again |
+| Test Connection fails | The key, the Base URL (from Docker, `localhost` means the container itself), firewall or proxy |
+| A model isn't in Discover Models | Type its exact name in the search box and add it |
+| *Missing required models* warning | Set the Chat Model and Embedding Model, or click **Auto-assign Defaults** |
 
-| Symptom | Cause | Solution |
-|---------|-------|----------|
-| Save button disabled | Empty or invalid input | Enter a valid key |
-| Error on save | Encryption key not set | Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in docker-compose.yml |
-| Error on save | Database connection issue | Check database status |
-
-### Test Connection Fails
-
-| Error | Cause | Solution |
-|-------|-------|----------|
-| Invalid API key | Wrong key or format | Verify key from provider dashboard |
-| Connection refused | Wrong URL | Check base URL format |
-| Timeout | Network issue | Check firewall, proxy settings |
-| 403 Forbidden | IP restriction | Whitelist your server IP |
-
-### Migration Issues
-
-| Problem | Solution |
-|---------|----------|
-| No migration banner | No env vars detected, or already migrated |
-| Partial migration | Check error list, fix and retry |
-| Keys not working after migration | Clear browser cache, restart services |
-
-### Provider Shows "Not Configured"
-
-1. Check if a credential exists for this provider (Manage → Models)
-2. Test the credential connection
-3. Verify key format matches provider requirements
-4. Re-discover and register models if needed
-
----
-
-## Provider-Specific Notes
-
-### OpenAI
-- Keys start with `sk-proj-` (project keys) or `sk-` (legacy)
-- Requires billing enabled on account
-
-### Anthropic
-- Keys start with `sk-ant-`
-- Check account has API access enabled
-
-### Google Gemini
-- Keys start with `AIzaSy`
-- Free tier has rate limits
-
-### Ollama
-- No API key required
-- Default URL: `http://localhost:11434` (local) or `http://ollama:11434` (Docker)
-- Ensure Ollama server is running
-
-### Azure OpenAI
-- Enter your Azure endpoint in the **URL Base** field (format: `https://{resource-name}.openai.azure.com`)
-- API version defaults to `2024-10-21`; override via `AZURE_OPENAI_API_VERSION` environment variable if needed
-- Deployment names configured separately when registering models via the credential's Discover Models dialog
-
----
-
-## Related
-
-- **[AI Providers](../5-CONFIGURATION/ai-providers.md)** — Provider setup instructions and recommendations
-- **[Security](../5-CONFIGURATION/security.md)** — Password and encryption configuration
-- **[Environment Reference](../5-CONFIGURATION/environment-reference.md)** — All configuration options
+More in [Troubleshooting](../6-TROUBLESHOOTING/index.md).
diff --git a/docs/3-USER-GUIDE/chat-effectively.md b/docs/3-USER-GUIDE/chat-effectively.md
index d0775eba..c56c0ead 100644
--- a/docs/3-USER-GUIDE/chat-effectively.md
+++ b/docs/3-USER-GUIDE/chat-effectively.md
@@ -1,554 +1,98 @@
 # Chat Effectively - Conversations with Your Research
 
-Chat is your main tool for exploratory questions and back-and-forth dialogue. This guide covers how to use it effectively.
+Notebook chat is a conversation with an AI model about the sources and notes you put in context. This page covers how to use it. How the context is built, and how Chat differs from Ask, is explained in [AI Context & RAG](../2-CORE-CONCEPTS/ai-context-rag.md).
 
 ---
 
-## Quick-Start: Your First Chat
+## Quick Start
 
-```
-1. Go to your notebook
-2. Click "Chat"
-3. Select which sources to include (context)
-4. Type your question
-5. Click "Send"
-6. Read the response
-7. Ask a follow-up (context stays same)
-8. Repeat until satisfied
-```
+1. Open a notebook. The **Chat with Notebook** column is on the right (on a phone, the **Chat** tab).
+2. Check what's in context: the panel above the message box shows how many sources and notes are included and an estimated token count.
+3. Type your question in **Ask anything about your sources...** and press **Ctrl+Enter** (**⌘+Enter** on Mac). Plain **Enter** adds a new line.
+4. Click a numbered reference in the answer to open the source, note or insight it cites.
 
-That's it! But doing it *well* requires understanding how context works.
+The first message creates a chat session automatically.
 
 ---
 
-## Context Management: The Key to Good Chat
+## Choosing What the AI Sees
 
-Context controls **what the AI is allowed to see**. This is your most important control.
+Every source and note in the notebook has a context level. Chat sends the selected content with **every** message, so this is where you control quality, cost and what a cloud provider receives.
 
-### The Three Levels Explained
+**Per item:** click the **context icon** on a source or note card to cycle through its levels. Hover it to see the current one.
 
-**FULL CONTENT**
-- AI sees: Complete source text
-- Cost: 100 tokens per 1K tokens of source
-- Best for: Detailed analysis, precise citations
-- Example: "Analyze this research paper closely"
+| Level | Sources | Notes |
+|-------|---------|-------|
+| **Not included in chat** | Not sent | Not sent |
+| **Insights only** | Title and insights (only offered when the source has insights) | — |
+| **Full content** | Title, insights and full text | Title and content |
 
-```
-You set: Paper A → Full Content
-AI sees: Every word of Paper A
-AI can: Cite specific sentences, notice nuances
-Result: Precise, detailed answers (higher cost)
-```
+**All at once:** the **Context** menu in each column header.
+- Sources: **Include all (insights only)** (sources without insights are left out), **Include all (full content)**, **Exclude all from context**.
+- Notes: **Include all in context**, **Exclude all from context**.
 
-**SUMMARY ONLY**
-- AI sees: AI-generated 200-word summary (not full text)
-- Cost: ~10-20% of full content cost
-- Best for: Background material, reference context
-- Example: "Use this for background, focus on the main paper"
+Things to know:
 
-```
-You set: Paper B → Summary Only
-AI sees: Condensed summary, key points
-AI can: Reference main ideas but not details
-Result: Faster, cheaper answers (loses precision)
-```
+- When you open a notebook, sources with insights start at *Insights only*, other sources at *Full content*, and notes are included.
+- Your choices are **not saved**. Reloading the page resets them to the defaults.
+- To make *Insights only* available for a source, generate an insight for it ([Transformations](transformations.md)).
 
-**NOT IN CONTEXT**
-- AI sees: Nothing
-- Cost: 0 tokens
-- Best for: Confidential, irrelevant, archived content
-- Example: "Keep this in notebook but don't use now"
+**Choosing levels:**
 
-```
-You set: Paper C → Not in Context
-AI sees: Nothing (completely excluded)
-AI can: Never reference it
-Result: No cost, no privacy risk for that source
-```
-
-### Setting Context (Step by Step)
-
-```
-1. Click "Select Sources"
-   (Shows list of all sources in notebook)
-
-2. For each source:
-   □ Checkbox: Include or exclude
-
-   Level dropdown:
-   ├─ Full Content
-   ├─ Summary Only
-   └─ Excluded
-
-3. Check your selections
-   Example:
-   ✓ Paper A (Full Content) - "Main focus"
-   ✓ Paper B (Summary Only) - "Background"
-   ✓ Paper C (Excluded) - "Keep private"
-   □ Paper D (Not included) - "Not relevant"
-
-4. Click "Save Context"
-
-5. Now chat uses these settings
-```
-
-### Context Strategies
-
-**Strategy 1: Minimalist**
-- Main source: Full Content
-- Everything else: Excluded
-- Result: Focused, cheap, precise
-
-```
-Use when:
-  - Analyzing one source deeply
-  - Budget-conscious
-  - Want focused answers
-```
-
-**Strategy 2: Comprehensive**
-- All sources: Full Content
-- Result: All context considered, expensive
-
-```
-Use when:
-  - Comprehensive analysis
-  - Unlimited budget
-  - Want AI to see everything
-```
-
-**Strategy 3: Tiered**
-- Primary sources: Full Content
-- Secondary sources: Summary Only
-- Background/reference: Excluded
-- Result: Balanced cost/quality
-
-```
-Use when:
-  - Mix of important and reference material
-  - Want thorough but not expensive
-  - Most common strategy
-```
-
-**Strategy 4: Privacy-First**
-- Sensitive docs: Excluded
-- Public research: Full Content
-- Result: Never send confidential data
-
-```
-Use when:
-  - Company confidential materials
-  - Personal sensitive data
-  - Complying with data protection
-```
+- Use *Full content* for the few sources you are reading closely or quoting.
+- Use *Insights only* for background sources. It's much smaller and usually enough for orientation.
+- Exclude anything unrelated to the current question. Less noise gives better answers.
+- If the context is very large (over about 105,000 tokens), Open Notebook switches to your **Large Context Model**.
 
 ---
 
-## Asking Effective Questions
+## Sessions
 
-### Good Questions vs. Poor Questions
+A session is one conversation; its messages are saved and reloaded when you come back. Click **Sessions** to open **Chat Sessions**, where you can create a session (give it a title), switch to another one, rename it or delete it. Each session remembers the conversation, not the context selection.
 
-**Poor Question**
-```
-"What do you think?"
+## Choosing the Model
 
-Problems:
-- Too vague (about what?)
-- No context (what am I analyzing?)
-- Can't verify answer (citing what?)
-
-Result: Generic, shallow answer
-```
-
-**Good Question**
-```
-"Based on the paper's methodology section,
-what are the three main limitations the authors acknowledge?
-Please cite which pages mention each one."
-
-Strengths:
-- Specific about what you want
-- Clear scope (methodology section)
-- Asks for citations
-- Requires deep reading
-
-Result: Precise, verifiable, useful answer
-```
-
-### Question Patterns That Work
-
-**Factual Questions**
-```
-"What does the paper say about X?"
-"Who are the authors?"
-"What year was this published?"
-
-Result: Simple, factual answers with citations
-```
-
-**Analysis Questions**
-```
-"How does this approach differ from the traditional method?"
-"What are the main assumptions underlying this argument?"
-"Why do you think the author chose this methodology?"
-
-Result: Deeper thinking, comparison, critique
-```
-
-**Synthesis Questions**
-```
-"How do these two sources approach the problem differently?"
-"What's the common theme across all three papers?"
-"If we combine these approaches, what would we get?"
-
-Result: Cross-source insights, connections
-```
-
-**Actionable Questions**
-```
-"What are the practical implications of this research?"
-"How could we apply these findings to our situation?"
-"What's the next logical research direction?"
-
-Result: Practical, forward-looking answers
-```
-
-### The SPECIFIC Formula
-
-Good questions have:
-
-1. **SCOPE** - What are you analyzing?
-   "In this research paper..."
-   "Looking at these three articles..."
-   "Based on your experience..."
-
-2. **SPECIFICITY** - Exactly what do you want?
-   "...the methodology..."
-   "...main findings..."
-   "...recommended next steps..."
-
-3. **CONSTRAINT** - Any limits?
-   "...in 3 bullet points..."
-   "...with citations to page numbers..."
-   "...comparing these two approaches..."
-
-4. **VERIFICATION** - How can you check it?
-   "...with specific quotes..."
-   "...cite your sources..."
-   "...link to the relevant section..."
-
-**Example:**
-```
-Poor: "What about transformers?"
-Good: "In this research paper on machine learning,
-      explain the transformer architecture in 2-3 sentences,
-      then cite which page describes the attention mechanism."
-```
+The model button next to the message box opens **Model Configuration**. Pick a model to use for this session instead of your **Chat Model** default, or click **Reset to Default**. Only language models you have added in **Manage → Models** are listed.
 
 ---
 
-## Follow-Up Questions (The Real Power of Chat)
+## Working With Answers
 
-Chat's strength is dialogue. You ask, get an answer, ask more.
+Under each AI answer:
 
-### Building on Responses
+- **Copy to clipboard** copies the answer text.
+- **Save to note** saves it as an **AI Generated** note in this notebook, with a generated title. There is no dialog; the note appears in the Notes column.
 
-```
-First question:
-"What's the main finding?"
-
-AI: "The study shows X [citation]"
-
-Follow-up question:
-"How does that compare to Y research?"
-
-AI: "The key difference is Z [citation]"
-
-Next question:
-"Why do you think that difference matters?"
-
-AI: "Because it affects A, B, C [explained]"
-```
-
-### Iterating Toward Understanding
-
-```
-Round 1: Get overview
-"What's this source about?"
-
-Round 2: Get details
-"What's the most important part?"
-
-Round 3: Compare
-"How does it relate to my notes on X?"
-
-Round 4: Apply
-"What should I do with this information?"
-```
-
-### Changing Direction
-
-```
-Context stays same, but you ask new questions:
-
-Question 1: "What's the methodology?"
-Question 2: "What are the limitations?"
-Question 3: "What about the ethical implications?"
-Question 4: "Who else has done similar work?"
-
-All in one conversation, reusing context.
-```
-
-### Adjusting Context Between Rounds
-
-```
-After question 3, you realize:
-"I need more context from another source"
-
-1. Click "Adjust Context"
-2. Add new source or change context level
-3. Your conversation history stays
-4. Continue asking with new context
-```
+**References** are the numbered links in the answer. They point to whole items (a source, note or insight), not to pages or passages. See [Citations](citations.md) for how to check them.
 
 ---
 
-## Citations and Verification
+## Asking Good Questions
 
-Citations are how you verify that the AI's answer is accurate.
-
-### Understanding Citations
-
-```
-AI Response with Citation:
-"The paper reports a 95% accuracy rate [see page 12]"
-
-What this means:
-✓ The claim "95% accuracy rate" is from page 12
-✓ You can verify by reading page 12
-✓ If page 12 doesn't say that, the AI hallucinated
-```
-
-### Requesting Better Citations
-
-```
-If you get a response without citations:
-
-Ask: "Please cite the page number for that claim"
-or: "Show me where you found that information"
-
-AI will:
-- Find the citation
-- Provide page numbers
-- Show you the source
-```
-
-### Verification Workflow
-
-```
-1. Get answer from Chat
-2. Check citation (which source? which page?)
-3. Click citation link (if available)
-4. See the actual text in source
-5. Does it really say what AI claimed?
-
-If YES: Great, you can use this answer
-If NO: The AI hallucinated, ask for correction
-```
+- **Be specific.** "What sample size and method did the 2024 survey use?" gets a better answer than "Tell me about the survey."
+- **Name the sources** when several are in context: "Compare how the Smith paper and the OECD report define productivity."
+- **Ask for the format you want:** a table, a bullet list, a short paragraph.
+- **Ask for references** when you plan to verify: "Cite the source for each claim."
+- **Follow up.** The model sees the whole session, so "Expand on the second point" works.
 
 ---
 
-## Common Chat Patterns
+## Source Chat
 
-### Pattern 1: Deep Dive into One Source
+Each source also has its own chat. Open the source and click **Chat with Sources**: the source page shows the content on the left and the chat on the right, with its own sessions and model choice.
 
-```
-1. Set context: One source (Full Content)
-2. Question 1: Overview
-3. Question 2: Main argument
-4. Question 3: Evidence for argument
-5. Question 4: Limitations
-6. Question 5: Next steps
-
-Result: Complete understanding of one source
-```
-
-### Pattern 2: Comparative Analysis
-
-```
-1. Set context: 2-3 sources (all Full Content)
-2. Question 1: What does each source say about X?
-3. Question 2: How do they agree?
-4. Question 3: How do they disagree?
-5. Question 4: Which approach is stronger?
-
-Result: Understanding differences and trade-offs
-```
-
-### Pattern 3: Research Exploration
-
-```
-1. Set context: Many sources (mix of Full/Summary)
-2. Question 1: What are the main perspectives?
-3. Question 2: What's missing from these views?
-4. Question 3: What questions does this raise?
-5. Question 4: What should I research next?
-
-Result: Understanding landscape and gaps
-```
-
-### Pattern 4: Problem Solving
-
-```
-1. Set context: Relevant sources (Full Content)
-2. Question 1: What's the problem?
-3. Question 2: What approaches exist?
-4. Question 3: Pros and cons of each?
-5. Question 4: Which would work best for [my situation]?
-
-Result: Decision-making informed by research
-```
+Source chat always uses that source's full text and insights; there are no context levels. Long sources are truncated to fit about 50,000 tokens, so questions about the later parts of a very long document may not be answerable there; use notebook chat with the source at *Full content* instead (large contexts switch to your Large Context Model). **Save to note** is not available in source chat (the source isn't tied to one notebook); use **Copy to clipboard**.
 
 ---
 
-## Optimizing for Cost
+## When Something Goes Wrong
 
-Chat uses tokens for every response. Here's how to use efficiently:
+| Symptom | What to do |
+|---------|-----------|
+| *The model returned an empty response...* | Retry, or pick another model. Reasoning models with a small output limit can spend everything on thinking. The failed question is not kept in the session, so retrying doesn't duplicate it |
+| Answers ignore a source | Check its context icon; it may be excluded or at *Insights only* with thin insights |
+| Slow or expensive | Reduce context: exclude sources, use *Insights only*, or start a new session (the whole session history is sent too) |
+| *The AI provider took too long to respond...* | The request hit the backend timeout (`ESPERANTO_LLM_TIMEOUT`, 180 seconds by default). Retry, use a faster model, reduce context, or raise the timeout |
+| *No model configured...* | Set the Chat Model in **Manage → Models → Default Model Assignments** |
 
-### Reduce Token Usage
-
-**Minimize context**
-```
-Option A: All sources, Full Content
-  Cost per response: 5,000 tokens
-
-Option B: Only relevant sources, Summary Only
-  Cost per response: 1,000 tokens
-
-Savings: 80% cheaper, same conversation
-```
-
-**Shorter questions**
-```
-Verbose: "Could you please analyze the methodology
-         section of this paper and explain in detail
-         what the authors did?"
-
-Concise: "Summarize the methodology in 2-3 points."
-
-Savings: 20-30% per response
-```
-
-**Use cheaper models**
-```
-GPT-4o: $0.15 per 1M input tokens
-GPT-4o-mini: $0.03 per 1M input tokens
-Claude Sonnet: $0.90 per 1M input tokens
-
-For chat: Mini/Haiku models are usually fine
-For deep analysis: Sonnet/Opus worth the cost
-```
-
-### Budget Strategies
-
-**Exploration budget**
-- Use cheap model
-- Broad context (understand landscape)
-- Short questions
-- Result: Low cost, good overview
-
-**Analysis budget**
-- Use powerful model
-- Focused context (main source only)
-- Detailed questions
-- Result: Higher cost, deep insights
-
-**Synthesis budget**
-- Use powerful model for final synthesis
-- Multiple sources (Full Content)
-- Complex comparative questions
-- Result: Expensive but valuable output
-
----
-
-## Troubleshooting Chat Issues
-
-### Poor Responses
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| Generic answers | Vague question | Be specific (see question patterns) |
-| Missing context | Not enough in context | Add sources or change to Full Content |
-| Incorrect info | Source not in context | Add the relevant source |
-| Hallucinating | Model confused | Ask for citations, verify claims |
-| Shallow analysis | Wrong model | Switch to more powerful model |
-
-### High Costs
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| Expensive per response | Too much context | Use Summary Only or exclude sources |
-| Many follow-ups | Exploratory chat | Use Ask instead for single comprehensive answer |
-| Long conversations | Keeping history | Archive old chats, start fresh |
-| Large sources | Full text in context | Use Summary Only for large documents |
-
----
-
-## Best Practices
-
-### Before You Chat
-
-- [ ] Add sources you'll need
-- [ ] Decide context strategy (Tiered is usually best)
-- [ ] Choose model (cheaper for exploration, powerful for analysis)
-- [ ] Have a question in mind
-
-### During Chat
-
-- [ ] Ask specific questions (use SPECIFIC formula)
-- [ ] Check citations for factual claims
-- [ ] Follow up on unclear points
-- [ ] Adjust context if you need different sources
-
-### After Chat
-
-- [ ] Save good responses as notes
-- [ ] Archive conversation if you're done
-- [ ] Organize notes for future reference
-- [ ] Use insights in other features (Ask, Transformations, Podcasts)
-
----
-
-## When to Use Chat vs. Ask
-
-**Use CHAT when:**
-- You want a dialogue
-- You're exploring a topic
-- You'll ask multiple related questions
-- You want to adjust context during conversation
-- You're not sure exactly what you need
-
-**Use ASK when:**
-- You have one specific question
-- You want a comprehensive answer
-- You want the system to auto-search
-- You want one response, not dialogue
-- You want maximum tokens spent on search
-
----
-
-## Summary: Chat as Conversation
-
-Chat is fundamentally different from asking ChatGPT directly:
-
-| Aspect | ChatGPT | Open Notebook Chat |
-|--------|---------|-------------------|
-| **Source control** | None (uses training) | You control which sources are visible |
-| **Cost control** | Per token | Per token, but context is your choice |
-| **Iteration** | Works | Works, with your sources changing dynamically |
-| **Citations** | Made up often | Tied to your sources (verifiable) |
-| **Privacy** | Your data to OpenAI | Your data stays local (unless you choose) |
-
-The key insight: **Chat is retrieval-augmented generation.** AI sees only what you put in context. You control the conversation and the information flow.
-
-That's why Chat is powerful for research. You're not just talking to an AI; you're having a conversation with your research itself.
+More in [AI & Chat Issues](../6-TROUBLESHOOTING/ai-chat-issues.md).
diff --git a/docs/3-USER-GUIDE/citations.md b/docs/3-USER-GUIDE/citations.md
index 4995f394..94be1690 100644
--- a/docs/3-USER-GUIDE/citations.md
+++ b/docs/3-USER-GUIDE/citations.md
@@ -1,299 +1,49 @@
-# Citations - Verify and Trust AI Responses
+# Citations - Verify AI Answers
 
-Citations connect AI responses to your source materials. This guide covers how to use and verify them.
+Chat and Ask answers include references to the items they are based on, so you can check a claim against your own material.
 
 ---
 
-## Why Citations Matter
+## What a Citation Points To
 
-Every AI-generated response in Open Notebook includes citations to your sources. This lets you:
+The model is told to cite items by their record ID, such as `source:abc123`, `note:def456` or `insight:ghi789`. A citation always points to a **whole item**:
 
-- **Verify claims** - Check that AI actually read what it claims
-- **Find original context** - See the full passage around a quote
-- **Catch hallucinations** - Spot when AI makes things up
-- **Build credibility** - Your notes have traceable sources
+- a **source** (its full extracted text),
+- a **note**, or
+- an **insight** (a transformation's output for a source).
+
+Citations don't carry page numbers, sections or highlighted passages. To find the exact place, open the item and look for the claim (your browser's find-in-page helps).
+
+## Where You See Them
+
+- **Notebook chat and source chat**: inline numbers like **[1]**, with a **References** list at the end of the answer. Click a number or a reference to open the item in a dialog.
+- **Ask**: inline links in the answer; click one to open the item.
+
+If a cited item was deleted after the answer was written, the dialog says *This content no longer exists*.
+
+Transformations don't produce citations; an insight is the transformation's output for one known source.
 
 ---
 
-## Quick Start: Using Citations
+## Checking a Claim
 
-### Reading Citations
+1. Click the citation next to the claim.
+2. Read the opened item and find the supporting text.
+3. If you can't find it, ask a follow-up in notebook chat (or the source's own chat): "Where exactly in that source does it say this? Quote the passage." Ask answers can't be followed up; take the question to chat with the cited source in context.
 
-```
-AI Response:
-"The study found a 95% accuracy rate [1] using the proposed method."
+Things that make citations more reliable:
 
-[1] = Click to see source
+- **Ask for them.** "Cite the source for each claim" in your question.
+- **Put the right content in context.** In notebook chat, a source at *Insights only* can only be cited through its title and insights. If you need claims backed by the full text, set it to *Full content*.
+- **Prefer specific questions.** Broad summaries tend to cite less.
 
-What happens when you click:
-→ Opens the source document
-→ Highlights the relevant section
-→ You can verify the claim
-```
-
-### Requesting Better Citations
-
-If a response lacks citations, ask:
-
-```
-"Please cite the specific page or section for that claim."
-"Where in the document does it say that?"
-"Can you quote the exact text?"
-```
+The model chooses what to cite, so a citation can be missing or point to the wrong item. Treat citations as a pointer to check, not as proof.
 
 ---
 
-## How Citations Work
+## Keeping Cited Answers
 
-### Automatic Generation
+- **Save to note** (notebook chat) and **Save to Notebooks** (Ask) save the answer text, including its references. See [Working with Notes](working-with-notes.md).
+- **Copy to clipboard** copies the answer text.
 
-When AI references your sources, citations are generated automatically:
-
-```
-1. AI analyzes your question
-2. Retrieves relevant source chunks
-3. Generates response with inline citations
-4. Links citations to original source locations
-```
-
-### Citation Format
-
-```
-Inline format:
-"The researchers concluded X [1] and Y [2]."
-
-Reference list:
-[1] Paper Title - Section 3.2
-[2] Report Name - Page 15
-
-Clickable: Each [number] links to the source
-```
-
----
-
-## Verifying Citations
-
-### The Verification Workflow
-
-```
-Step 1: Read AI response
-        "The model achieved 95% accuracy [1]"
-
-Step 2: Click citation [1]
-        → Opens source document
-        → Shows relevant passage
-
-Step 3: Verify the claim
-        Does source actually say 95%?
-        Is context correct?
-        Any nuance missed?
-
-Step 4: Trust or correct
-        ✓ Accurate → Use the insight
-        ✗ Wrong → Ask AI to correct
-```
-
-### What to Check
-
-| Check | Why |
-|-------|-----|
-| **Exact numbers** | AI sometimes rounds or misremembers |
-| **Context** | Quote might mean something different in context |
-| **Attribution** | Is this the source's claim or someone they cited? |
-| **Completeness** | Did AI miss important caveats? |
-
----
-
-## Citations in Different Features
-
-### Chat Citations
-
-```
-Context: Sources you selected
-Citations: Reference chunks used in response
-Verification: Click to see original text
-Save: Citations preserved when saving as note
-```
-
-### Ask Feature Citations
-
-```
-Context: Auto-searched across all sources
-Citations: Multiple sources synthesized
-Verification: Each source linked separately
-Quality: Often more comprehensive than Chat
-```
-
-### Transformation Citations
-
-```
-Context: Single source being transformed
-Citations: Points back to original document
-Verification: Compare output to source
-Use: When you need structured extraction
-```
-
----
-
-## Saving Citations
-
-### In Notes
-
-When you save an AI response as a note, citations are preserved:
-
-```
-Original response:
-"According to the paper [1], the method works by..."
-
-Saved note includes:
-- The text
-- The citation link
-- Reference to source document
-```
-
-### Exporting
-
-Citations work in exports:
-
-| Format | Citation Behavior |
-|--------|-------------------|
-| **Markdown** | Links preserved as `[text](link)` |
-| **Copy/Paste** | Plain text with reference numbers |
-| **PDF** | Clickable references (if supported) |
-
----
-
-## Citation Quality Tips
-
-### Get Better Citations
-
-**Be specific in questions:**
-```
-Poor: "What does it say about X?"
-Good: "What does page 15 say about X? Please quote directly."
-```
-
-**Request citation format:**
-```
-"Include page numbers for each claim."
-"Cite specific sections, not just document names."
-```
-
-**Use Full Content context:**
-```
-Summary Only → Less precise citations
-Full Content → Exact quotes possible
-```
-
-### When Citations Are Missing
-
-| Situation | Cause | Solution |
-|-----------|-------|----------|
-| No citations | AI used general knowledge | Ask: "Base your answer only on my sources" |
-| Vague citations | Source not in Full Content | Change context level |
-| Wrong citations | AI confused sources | Ask to verify with quotes |
-
----
-
-## Common Issues
-
-### "Citation doesn't match claim"
-
-```
-Problem: AI says X, but source says Y
-
-What happened:
-- AI paraphrased incorrectly
-- AI combined multiple sources confusingly
-- Source was taken out of context
-
-Solution:
-1. Click citation to see original
-2. Note the discrepancy
-3. Ask AI: "The source says Y, not X. Please correct."
-```
-
-### "Can't find cited section"
-
-```
-Problem: Citation link doesn't show relevant text
-
-What happened:
-- Source was chunked differently than expected
-- Information spread across multiple sections
-- Processing missed some content
-
-Solution:
-1. Search within source for key terms
-2. Ask AI for more specific location
-3. Re-process source if needed
-```
-
-### "No citations at all"
-
-```
-Problem: AI response has no source references
-
-What happened:
-- Sources not in context
-- Question asked for opinion/general knowledge
-- Model didn't find relevant content
-
-Solution:
-1. Check context settings
-2. Rephrase: "Based on my sources, what..."
-3. Add more relevant sources
-```
-
----
-
-## Best Practices
-
-### For Research Integrity
-
-1. **Always verify important claims** - Don't trust AI blindly
-2. **Check context** - Quotes can be misleading out of context
-3. **Note limitations** - AI might miss nuance
-4. **Keep source access** - Don't delete sources you cite
-
-### For Academic Work
-
-1. **Use Full Content** for documents you'll cite
-2. **Request specific page numbers**
-3. **Cross-check with original sources**
-4. **Document your verification process**
-
-### For Professional Use
-
-1. **Verify before sharing** - Check claims clients will see
-2. **Keep citation trail** - Save notes with sources linked
-3. **Be transparent** - Note when insights are AI-assisted
-
----
-
-## Summary
-
-```
-Citations = Your verification system
-
-How to use:
-1. Read AI response
-2. Note citation markers [1], [2], etc.
-3. Click to see original source
-4. Verify claim matches source
-5. Trust verified insights
-
-When citations fail:
-- Ask for specific quotes
-- Change to Full Content
-- Request page numbers
-- Verify manually
-
-Why it matters:
-- AI can hallucinate
-- Context can change meaning
-- Trust requires verification
-- Good research needs sources
-```
-
-Citations aren't just references — they're your quality control. Use them to build research you can trust.
+There is no export or share feature for citations.
diff --git a/docs/3-USER-GUIDE/content-processing-engines.md b/docs/3-USER-GUIDE/content-processing-engines.md
index df7d562f..d41a6003 100644
--- a/docs/3-USER-GUIDE/content-processing-engines.md
+++ b/docs/3-USER-GUIDE/content-processing-engines.md
@@ -16,12 +16,14 @@ Configure everything here in **Settings → Content Processing**.
 
 ```
 Settings → Content Processing:
-  - Document Processing Engine   (for uploaded files)
-  - URL Processing Engine        (for web links)
-  - Enable OCR                   (scanned PDFs and images)
+  - Document Processing Engine   (uploaded files)
+  - URL Processing Engine        (web links)
+  - Enable OCR                   (scanned PDFs and images, Docling only)
+  - Extract formulas             (Docling only)
+  - Describe images and charts   (Docling only)
 ```
 
-Changes apply to sources you add **after** saving. Re-add a source if you want it re-extracted with a different engine.
+Click **Save** after changing them. Changes apply to sources processed **after** saving. To re-extract an existing web link with the new settings, use **Refresh content** in its card menu; for a file, add it again (a failed source can also be reprocessed with **Retry Processing**).
 
 ---
 
@@ -31,15 +33,15 @@ Controls how uploaded files (PDF, Word, PowerPoint, EPUB, etc.) are turned into
 
 | Engine | What it does | Trade-off |
 |--------|--------------|-----------|
-| **auto** (default) | Picks the best engine for the file type. Uses Docling for complex documents when it's enabled, simple extraction for the rest. | Balanced. Good default for almost everyone. |
-| **docling** | Layout-aware extraction: understands columns, tables, headings, and reading order. Runs OCR on scanned pages when OCR is enabled. **Optional — must be enabled** (see below). | Most accurate, but slower and heavier. |
-| **simple** | Fast, lightweight text extraction. Skips Docling entirely. | Fastest, but loses table structure and layout; no OCR. |
+| **Auto (Recommended)** (default) | Tries Docling (when it's enabled) and falls back to simple extraction. | Balanced. Good default for almost everyone. |
+| **Docling** | Layout-aware extraction: understands columns, tables, headings, and reading order. Runs OCR on scanned pages when OCR is enabled. **Optional — must be enabled** (see below). | Most accurate, but slower and heavier. |
+| **Simple** | Fast, lightweight text extraction. Skips Docling entirely. | Fastest, but loses table structure and layout; no OCR. |
 
 **When to pick each:**
 
-- **auto** — leave it here unless you have a reason not to.
-- **docling** — force it when tables, multi-column layouts, or scanned PDFs matter and `auto` isn't giving you clean results. Requires Docling to be enabled.
-- **simple** — choose it for large batches of clean, text-native documents where speed matters more than layout fidelity.
+- **Auto** — leave it here unless you have a reason not to.
+- **Docling** — force it when tables, multi-column layouts, or scanned PDFs matter and Auto isn't giving you clean results. Requires Docling to be enabled.
+- **Simple** — choose it for large batches of clean, text-native documents where speed matters more than layout fidelity.
 
 ---
 
@@ -49,15 +51,15 @@ Controls how web links are fetched and converted to text. Sites differ wildly 
 
 | Engine | What it does | Needs |
 |--------|--------------|-------|
-| **auto** (default) | Tries each engine in order until one succeeds (see chain below). | Nothing; uses whatever is configured. |
-| **firecrawl** | Managed scraping service. Handles JavaScript, anti-bot, and proxies well. | `FIRECRAWL_API_KEY` (or a self-hosted instance). |
-| **jina** | Jina AI Reader. Good at turning articles into clean text. | `JINA_API_KEY`. |
-| **crawl4ai** | Renders JavaScript pages in a local Chromium browser. No API key needed. **Optional — must be enabled** (see below). | `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` (installs on first startup), or point at a remote server with `CRAWL4AI_API_URL`. |
-| **simple** | Basic HTTP fetch parsed with BeautifulSoup. | Nothing. |
+| **Auto (Recommended)** (default) | Tries each engine in order until one succeeds (see chain below). | Nothing; uses whatever is configured. |
+| **Firecrawl** | Managed scraping service. Handles JavaScript, anti-bot, and proxies well. | `FIRECRAWL_API_KEY` (or a self-hosted instance). |
+| **Jina** | Jina AI Reader. Good at turning articles into clean text. | `JINA_API_KEY`. |
+| **Crawl4AI** | Renders JavaScript pages in a local Chromium browser. No API key needed. **Optional — must be enabled** (see below). | `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` (installs on first startup), or point at a remote server with `CRAWL4AI_API_URL`. |
+| **Simple** | Basic HTTP fetch parsed with BeautifulSoup. | Nothing. |
 
-### How the `auto` fallback chain works
+### How the Auto fallback chain works
 
-In `auto` mode, Open Notebook tries engines in order and stops at the first that returns usable content:
+In Auto mode, Open Notebook tries engines in order and stops at the first that returns usable content:
 
 ```
 Firecrawl  →  Jina  →  Crawl4AI  →  simple (bs4)
@@ -70,9 +72,9 @@ Firecrawl  →  Jina  →  Crawl4AI  →  simple (bs4)
 
 **When to force a specific engine:**
 
-- **firecrawl** / **jina** — you have a key and want consistent, high-quality extraction without paying the local-rendering cost.
-- **crawl4ai** — a site needs a real browser (JavaScript-rendered content) but you'd rather not use a paid API. Requires Crawl4AI to be enabled.
-- **simple** — the site is plain HTML and you want the fastest, dependency-free path.
+- **Firecrawl** / **Jina** — you have a key and want consistent, high-quality extraction without paying the local-rendering cost.
+- **Crawl4AI** — a site needs a real browser (JavaScript-rendered content) but you'd rather not use a paid API. Requires Crawl4AI to be enabled.
+- **Simple** — the site is plain HTML and you want the fastest, dependency-free path.
 
 See the [Environment Reference](../5-CONFIGURATION/environment-reference.md#content-extraction) for the API keys and tuning variables (`FIRECRAWL_API_URL`, `CCORE_FIRECRAWL_PROXY`, `CCORE_FIRECRAWL_WAIT_FOR`, `CRAWL4AI_API_URL`, `CRAWL4AI_API_TOKEN`).
 
@@ -85,7 +87,7 @@ See the [Environment Reference](../5-CONFIGURATION/environment-reference.md#cont
 OCR reads text off images. It applies when the Docling engine handles:
 
 - **Scanned PDFs** — pages that are images of text rather than real text.
-- **Image sources** — PNG, JPEG, TIFF, BMP.
+- **Image sources** — PNG, JPEG, TIFF.
 
 OCR only runs through Docling, so it does nothing until **Docling is enabled** (see below). With Docling off, the toggle is disabled in Settings and scanned PDFs fall back to plain text extraction (which yields little for image-only pages), while image sources are rejected as unsupported.
 
@@ -93,13 +95,24 @@ OCR only runs through Docling, so it does nothing until **Docling is enabled** (
 
 ---
 
+## Formulas and Image Descriptions
+
+Two more Docling options in **Settings → Content Processing**, both off by default:
+
+- **Extract formulas** — keeps mathematical formulas as structured markup instead of garbled text. Adds processing time. Useful for math-heavy papers.
+- **Describe images and charts** — uses a vision model to describe images and pull data out of charts, so that content becomes searchable text. Significantly slower, and may call a vision model.
+
+Like OCR, both only take effect when Docling handles the document.
+
+---
+
 ## Optional engines (Docling & Crawl4AI)
 
 Docling and local Crawl4AI are heavy: Docling pulls a multi-hundred-MB to multi-GB machine-learning stack, and Crawl4AI bundles a Chromium browser. To keep the default image small, they are **not installed by default**. You opt in with an environment variable; the runtime is then installed automatically the **first time the container starts**, and the downloads are cached on your data volume so later restarts are fast.
 
 | Enable this | To unlock |
 |-------------|-----------|
-| `OPEN_NOTEBOOK_ENABLE_DOCLING=true` | The `docling` document engine, the OCR toggle, and image sources (PNG/JPEG/TIFF/BMP). |
+| `OPEN_NOTEBOOK_ENABLE_DOCLING=true` | The Docling document engine, the OCR, formula and image-description toggles, and image sources (PNG/JPEG/TIFF). |
 | `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` | The local `crawl4ai` URL engine (JavaScript rendering via Chromium). |
 | `CRAWL4AI_API_URL=…` | The `crawl4ai` engine against a **remote** Crawl4AI server — no local install needed. Add `CRAWL4AI_API_TOKEN=…` if the server requires a bearer token (Crawl4AI Docker ≥ 0.9.0 does by default). |
 
@@ -118,18 +131,18 @@ Set the variables the same way as any other Open Notebook environment variable (
 
 ```
 Document extracts poorly (tables, columns garbled)
-  → Enable Docling, then set Document Engine to "docling"
+  → Enable Docling, then set Document Processing Engine to "Docling"
 
 Scanned PDF or image comes out blank
-  → Enable Docling and Enable OCR (engine auto or docling)
+  → Enable Docling and Enable OCR (engine Auto or Docling)
 
 Web link comes back empty or half-extracted
   → The site is likely JavaScript-heavy
-  → In auto mode, add a Firecrawl or Jina key, or enable Crawl4AI
-  → Or force "crawl4ai" / "firecrawl"
+  → In Auto mode, add a Firecrawl or Jina key, or enable Crawl4AI
+  → Or choose "Crawl4AI" / "Firecrawl" as the URL Processing Engine
 
 Processing feels slow on clean documents
-  → Set Document Engine to "simple" and/or disable OCR
+  → Set Document Processing Engine to "Simple" and/or disable OCR
 ```
 
 ---
diff --git a/docs/3-USER-GUIDE/creating-podcasts.md b/docs/3-USER-GUIDE/creating-podcasts.md
index dab0c294..7a892736 100644
--- a/docs/3-USER-GUIDE/creating-podcasts.md
+++ b/docs/3-USER-GUIDE/creating-podcasts.md
@@ -1,686 +1,91 @@
 # Creating Podcasts - Turn Research into Audio
 
-Podcasts let you consume your research passively. This guide covers the complete workflow from setup to download.
+Generate an audio episode from your sources and notes. How generation works, and what each setting means, is explained in [Podcasts Explained](../2-CORE-CONCEPTS/podcasts-explained.md).
+
+Podcasts live on the **Podcasts** page (sidebar, under **Create**), which has two tabs: **Episodes** and **Profiles**.
 
 ---
 
-## Quick-Start: Your First Podcast (5 Minutes)
+## Before Your First Episode: Set Up Profiles
 
-```
-1. Go to your notebook
-2. Click "Generate Podcast"
-3. Select sources to include
-4. Choose a speaker profile (or use default)
-5. Click "Generate"
-6. Wait 3-10 minutes (non-blocking)
-7. Download MP3 when ready
-8. Done!
-```
+You need at least one **speaker profile** with a voice model and one **episode profile** with an outline and transcript model.
 
-That's the minimum. Let's make it better.
+Open **Podcasts → Profiles**. A new install already has three speaker profiles and three episode profiles, but **none of them has models assigned**; they show a **Setup required** badge (upgraded installations may already have models on them). Either edit them or create your own. Create speakers first: episode profiles reference a speaker profile.
+
+You'll need these models added in **Manage → Models** (**Sync Models** → **Discover Models** on a provider configuration); you then select them in the profile fields below:
+- a **text-to-speech** model (for voices). Which providers offer TTS is listed in [AI Providers](../4-AI-PROVIDERS/index.md); for a local option see [Local TTS](../5-CONFIGURATION/local-tts.md).
+- a **language** model for the outline and transcript.
+
+### Speaker profile
+
+Click **Create speaker** (or **Edit** on an existing one) and fill in:
+
+| Field | Notes |
+|-------|-------|
+| **Profile name**, **Description** | For you |
+| **Voice model** | Required. The TTS model all speakers use by default |
+| **Speakers** | One to four. **Add speaker** for more |
+| → **Name** | The name used in the script |
+| → **Voice ID** | A voice name of the voice model, typed exactly (for example `nova` for OpenAI). Check your TTS provider's voice list |
+| → **Backstory**, **Personality** | Who they are and how they talk; the transcript model uses both |
+| → **Per-speaker TTS override (optional)** | A different voice model for this speaker, or **Use profile default** |
+
+The seeded profiles use OpenAI voice names (`nova`, `alloy`, ...). If your voice model is from another provider, change the Voice IDs, or generation fails with a voice error.
+
+### Episode profile
+
+Click **Create profile** (or **Edit**) and fill in:
+
+| Field | Notes |
+|-------|-------|
+| **Profile name**, **Description** | For you |
+| **Speaker profile** | Which speakers to use |
+| **Outline model**, **Transcript model** | Language models; they can be the same |
+| **Segments** | 3 to 20. More segments make a longer episode |
+| **Default briefing** | Required. Structure, tone, audience and goals for this format, in plain words. This is where "keep it casual", "aimed at beginners" or "end with open questions" goes |
+| **Language** | Optional. The language of the outline and transcript (for example Portuguese (Brazil)). Pick voices that can speak it |
+| **Max output tokens** | Optional cap on each generation step (outline, transcript). Blank uses 8192. Set it lower only if your model's output limit is below 8192 |
+
+Profiles can also be **Duplicated** and **Deleted**. A speaker profile that an episode profile uses can't be deleted until you change that episode profile.
 
 ---
 
-## Step-by-Step: The Complete Workflow
+## Generate an Episode
 
-### Step 1: Prepare Your Notebook
+1. Click **Generate Podcast** on the **Episodes** tab (or use sidebar **New → Podcast**, or **New Podcast** in Quick actions).
+2. In **Generate Podcast Episode**, under **Content**, pick what to include. Expand a notebook and select it as a whole, or individual sources and notes. For each source choose:
+   - **Summary**: the source's title and insights (small; a source without insights adds almost nothing).
+   - **Full content**: title, insights and full text.
 
-```
-Before generating, make sure:
+   The dialog shows the number of selected items and an estimated token and character count. You can mix content from several notebooks.
+3. Under **Episode Settings**:
+   - **Episode profile**: required.
+   - **Episode name**: required.
+   - **Additional instructions**: optional; appended to the profile's briefing for this episode only (for example "focus on the methodology section").
+4. Click **Generate**. You'll see *Podcast task started*.
 
-✓ You have sources added
-  (At least 1-2 sources)
-
-✓ Sources have been processed
-  (Green "Ready" status)
-
-✓ Notes are organized
-  (If you want notes included)
-
-✓ You know your message
-  (What's the main story?)
-
-Typical preparation: 5-10 minutes
-```
-
-### Step 2: Choose Content
-
-```
-Click "Generate Podcast"
-
-You'll see:
-- List of all sources in notebook
-- List of all notes
-
-Select which to include:
-☑ Paper A (primary source)
-☑ Paper B (supporting source)
-☐ Old note (not relevant)
-✓ Analysis note (important)
-
-What to include:
-- Primary sources: Always include
-- Supporting sources: Usually include
-- Notes: Include your analysis/insights
-- Everything: Can overload podcast
-
-Recommended: 3-5 sources per podcast
-```
-
-### Step 3: Choose Episode Profile
-
-An episode profile defines the structure and tone.
-
-**Option A: Use Preset Profile**
-
-```
-Open Notebook provides preset profiles:
-
-Academic Presentation (Monologue)
-├─ 1 speaker
-├─ Tone: Educational
-└─ Format: Expert explaining topic
-
-Expert Interview (2-speaker)
-├─ 2 speakers: Host + Expert
-├─ Tone: Q&A, conversational
-└─ Format: Interview with expert
-
-Debate Format (2-speaker)
-├─ 2 speakers: Pro vs. Con
-├─ Tone: Discussion, disagreement
-└─ Format: Debate about the topic
-
-Panel Discussion (3-4 speaker)
-├─ 3-4 speakers: Different perspectives
-├─ Tone: Thoughtful discussion
-└─ Format: Each brings different expertise
-
-Solo Explanation (Monologue)
-├─ 1 speaker
-├─ Tone: Conversational, friendly
-└─ Format: Personal explanation
-```
-
-**Pick based on your content:**
-- One main idea → Academic Presentation
-- You want to explain → Solo Explanation
-- Two competing views → Debate Format
-- Multiple perspectives → Panel Discussion
-- Want to explore → Expert Interview
-
-### Step 4: Customize Episode Profile (Optional)
-
-If presets don't fit, customize:
-
-```
-Episode Profile
-├─ Title: "AI Safety in 2026"
-├─ Description: "Exploring current approaches"
-├─ Length target: 20 minutes
-├─ Tone: "Academic but accessible"
-├─ Focus areas:
-│  ├─ Main approaches to alignment
-│  ├─ Pros and cons comparison
-│  └─ Open questions
-├─ Audience: "Researchers new to field"
-└─ Format: "Debate between two perspectives"
-
-How to set:
-1. Click "Customize"
-2. Edit each field
-3. Click "Save Profile"
-4. System uses your profile for outline generation
-```
-
-**Max output tokens:** leave it blank to use the default of 8192 tokens for the outline and for each transcript generation step. Set it lower if your outline or transcript model has a smaller output limit (some older or local models stop at 4096); the provider rejects requests above its limit.
-
-**Pacing:** generated episodes have a short pause (about 400 ms) between speaker turns, so the dialogue sounds less rushed.
-
-### Step 5: Create or Select Speakers
-
-Speakers are the "voice" of your podcast.
-
-**Option A: Use Preset Speakers**
-
-```
-Open Notebook provides preset profiles:
-
-"Expert Alex"
-- Expertise: Deep knowledge
-- Personality: Rigorous, patient
-- Voice Model: Selected from model registry
-
-"Curious Sam"
-- Expertise: Curious newcomer
-- Personality: Asks questions
-- Voice Model: Selected from model registry
-
-"Skeptic Jordan"
-- Expertise: Critical perspective
-- Personality: Challenges assumptions
-- Voice Model: Selected from model registry
-
-For your first podcast: Use presets
-For custom podcast: Create your own
-```
-
-**Option B: Create Custom Speakers**
-
-```
-Click "Add Speaker"
-
-Fill in:
-
-Name: "Dr. Research Expert"
-
-Expertise:
-"20 years in AI safety research,
- deep knowledge of alignment approaches"
-
-Personality:
-"Rigorous, academic style,
- explains clearly, asks good questions"
-
-Voice Configuration:
-- Voice Model: Select from model registry (e.g., OpenAI TTS, Google TTS, ElevenLabs)
-- Voice: Choose from available voices for the selected model
-- Per-speaker override: Each speaker can optionally use a different voice model
-
-Credentials are automatically resolved from the model configuration.
-
-Example:
-Name: Dr. Research Expert
-Expertise: AI safety alignment research
-Personality: Rigorous, academic but accessible
-Voice Model: ElevenLabs TTS (from registry), Voice: professional male
-```
-
-### Step 6: Generate Podcast
-
-```
-1. Review your setup:
-   Sources: ✓ Selected
-   Profile: ✓ Episode profile chosen
-   Speakers: ✓ Speakers configured
-
-2. Click "Generate Podcast"
-
-3. System begins:
-   - Analyzing your content
-   - Creating outline
-   - Writing dialogue
-   - Generating audio
-   - Mixing speakers
-
-4. Status shows progress:
-   20% Outline generation
-   40% Dialogue writing
-   60% Audio synthesis
-   80% Mixing
-   100% Complete
-
-Processing time:
-- 5 minutes of content: 3-5 minutes
-- 15 minutes of content: 5-10 minutes
-- 30 minutes of content: 10-20 minutes
-```
-
-### Step 7: Review and Download
-
-```
-When complete:
-
-Preview:
-- Play audio sample
-- Review transcript
-- Check duration
-
-Options:
-✓ Download as MP3 - Save to computer
-✓ Stream directly - Listen in browser
-✓ Share link - Get shareable URL (if public)
-✓ Regenerate - Try different speakers/profile
-
-Download:
-1. Click "Download as MP3"
-2. Choose quality: 128kbps / 192kbps / 320kbps
-3. Save file: podcast_[notebook]_[date].mp3
-4. Listen!
-```
+Generation runs in the background worker, so you can close the page. It takes several minutes, depending on the amount of content, the number of segments and your providers. If episodes stay pending, the worker isn't running.
 
 ---
 
-## Understanding What Happens Behind the Scenes
+## Episodes
 
-### The Generation Pipeline
+The **Episodes** tab groups episodes into **Currently Processing**, **Queued / Pending**, **Completed Episodes** and **Failed Episodes**, with totals at the top.
 
-```
-Stage 1: CONTENT ANALYSIS (1 minute)
-  Your sources → What's the main story?
-               → Key themes?
-               → Debate points?
+Each episode card has:
+- an **audio player** (completed episodes),
+- **Details**, with the episode's **Summary** (profiles and models used), **Outline** and **Transcript**,
+- **Delete** (removes the episode and its audio file),
+- **Retry** (failed episodes): deletes the failed episode and submits a new job with the same name, content, episode profile and speaker profile, using the profiles' current settings (so you can fix a profile, then retry). The episode's **Additional instructions** are not kept.
 
-Stage 2: OUTLINE CREATION (2-3 minutes)
-  Themes → Episode structure
-        → Section breakdown
-        → Talking points
-
-Stage 3: DIALOGUE WRITING (2-3 minutes)
-  Outline → Convert to natural dialogue
-         → Add speaker personalities
-         → Create flow and transitions
-
-Stage 4: AUDIO SYNTHESIS (3-5 minutes per speaker)
-  Script + Speaker → Text-to-speech
-                  → Individual audio files
-                  → High quality audio
-
-Stage 5: MIXING & MASTERING (1-2 minutes)
-  Multiple audio → Combine speakers
-               → Level audio
-               → Add polish
-               → Final MP3
-
-Total: 10-20 minutes for typical podcast
-```
+Failed episodes show the error. Common errors and fixes are listed in [Podcasts Explained → When Things Go Wrong](../2-CORE-CONCEPTS/podcasts-explained.md#when-things-go-wrong-failures--retry).
 
 ---
 
-## Text-to-Speech Providers
+## Tips for Better Episodes
 
-Different providers, different qualities.
-
-### OpenAI (Recommended)
-
-```
-Voices: 5 options (Alloy, Echo, Fable, Onyx, Shimmer)
-Quality: Good, natural sounding
-Speed: Fast
-Cost: ~$0.015 per minute
-Best for: General purpose, natural speech
-Example: "I have to say, the research shows..."
-```
-
-### Google TTS
-
-```
-Voices: Many options, various accents
-Quality: Excellent, very natural
-Speed: Fast
-Cost: ~$0.004 per minute
-Best for: High quality output, accents
-Example: "The research demonstrates that..."
-```
-
-### ElevenLabs
-
-```
-Voices: 100+ voices, highly customizable
-Quality: Exceptional, very expressive
-Speed: Slower (5-10 seconds per phrase)
-Cost: ~$0.10 per minute
-Best for: Premium quality, emotional range
-Example: [Can convey emotion and tone]
-```
-
-### Local TTS (Free)
-
-```
-Voices: Limited, basic options
-Quality: Basic, robotic
-Speed: Depends on hardware (slow)
-Cost: Free (local processing)
-Best for: Privacy, testing, offline use
-Example: "The research shows..."
-Privacy: Everything stays on your computer
-```
-
-### Which Provider to Choose?
-
-```
-For your first podcast: Google (quality/cost balance)
-For privacy-sensitive: Local TTS (free, private)
-For premium quality: ElevenLabs (best voices)
-For budget: Google (cheapest quality option)
-For speed: OpenAI (fast generation)
-```
-
----
-
-## Tips for Better Podcasts
-
-### Choose Right Profile
-
-```
-Single source analysis → Academic Presentation
-  "Explaining one paper to someone new"
-
-Comparing two approaches → Debate Format
-  "Pros and cons of different methods"
-
-Multiple sources + insights → Panel Discussion
-  "Different experts discussing topic"
-
-Narrative exploration → Expert Interview
-  "Host interviewing research expert"
-
-Personal take → Solo Explanation
-  "You explaining your analysis"
-```
-
-### Create Good Speakers
-
-```
-Good Speaker:
-✓ Clear expertise (know what they're talking about)
-✓ Distinct personality (not generic)
-✓ Good voice choice (matches personality)
-✓ Realistic backstory (feels like real person)
-
-Bad Speaker:
-✗ Generic expertise ("good at research")
-✗ No personality ("just reads")
-✗ Mismatched voice (deep voice for young person)
-✗ Contradicts personality (serious person uses casual voice)
-```
-
-### Focus Content
-
-```
-Better: Podcast on ONE specific topic
-  "How transformers work" (15 minutes, focused)
-
-Worse: Podcast on everything
-  "All of AI 2025" (2 hours, unfocused)
-
-Guideline:
-- 5-10 minutes: One narrow topic
-- 15-20 minutes: One broad topic
-- 30+ minutes: Multiple related subtopics
-
-Shorter is usually better for podcasts.
-```
-
-### Optimize Source Selection
-
-```
-Too much content:
-  "Here are all 20 papers"
-  → Podcast becomes 2+ hours
-  → Unfocused
-  → Low quality
-
-Right amount:
-  "Here are 3 key papers"
-  → Podcast is 15-20 minutes
-  → Focused
-  → High quality
-
-Rule: 3-5 sources per podcast
-     Remove long background papers
-     Keep focused on main topic
-```
-
----
-
-## Quality Troubleshooting
-
-### Audio Sounds Robotic
-
-**Problem**: TTS voice sounds unnatural
-
-**Solutions**:
-```
-1. Switch provider: Try Google or ElevenLabs instead
-2. Choose different voice: Some voices more natural
-3. Shorter sentences: Very long sentences sound robotic
-4. Adjust pacing: Ask for "natural, conversational pacing"
-```
-
-### Audio Sounds Unclear
-
-**Problem**: Hard to understand what's being said
-
-**Solutions**:
-```
-1. Re-generate with different speaker
-2. Try different TTS provider
-3. Use speakers with clear accents
-4. Lower background noise (if any)
-5. Increase speech rate (if too slow)
-```
-
-### Missing Content
-
-**Problem**: Important information isn't in podcast
-
-**Solutions**:
-```
-1. Include that source in content selection
-2. Review generated outline (check before generating)
-3. Regenerate with clearer profile instructions
-4. Try different model (more thorough model)
-```
-
-### Speakers Don't Match
-
-**Problem**: Speakers sound like same person
-
-**Solutions**:
-```
-1. Choose different voice models from the registry for each speaker
-2. Choose very different voice options
-3. Increase personality differences in profile
-4. Try different speaker count (2 vs 3 vs 4)
-```
-
-### Generation Failed
-
-**Problem**: "Podcast generation failed"
-
-**Solutions**:
-```
-1. Check internet connection (especially TTS)
-2. Try again (might be temporary issue)
-3. Use local TTS (doesn't need internet)
-4. Reduce source count (less to process)
-5. "max_tokens" or output-limit error: set the episode profile's
-   Max output tokens below your model's limit (e.g. 4096)
-6. Contact support if persistent
-```
-
-Outlines and transcripts are requested as schema-validated JSON. Models or endpoints that don't support JSON schema output (some OpenAI-compatible servers) automatically fall back to plain JSON mode; the worker log notes the fallback.
-
----
-
-## Advanced: Multiple Podcasts from Same Research
-
-You can generate different podcasts from one notebook:
-
-```
-Podcast 1: Overview
-  Profile: Academic Presentation
-  Sources: Papers A, B, C
-  Speakers: One expert
-  Length: 15 minutes
-
-→ Use for "What's this about?" understanding
-
-Podcast 2: Deep Dive
-  Profile: Expert Interview
-  Sources: Paper A (Full) + B, C (Summary)
-  Speakers: Expert + Interviewer
-  Length: 30 minutes
-
-→ Use for detailed exploration
-
-Podcast 3: Debate
-  Profile: Debate Format
-  Sources: Papers A vs B (different approaches)
-  Speakers: Pro-A speaker + Pro-B speaker
-  Length: 20 minutes
-
-→ Use for comparing approaches
-```
-
-Each tells the same story from different angles.
-
----
-
-## Exporting and Sharing
-
-### Download MP3
-
-```
-1. Generation complete
-2. Click "Download"
-3. Choose quality:
-   - 128 kbps: Smallest file, lower quality
-   - 192 kbps: Balanced (recommended)
-   - 320 kbps: Highest quality, largest file
-4. Save to computer
-5. Use in podcast app, upload to platform, etc.
-```
-
-### Export Transcript
-
-```
-1. Click "Export Transcript"
-2. Get full dialogue as text
-3. Useful for:
-   - Blog post content
-   - Show notes
-   - Searchable text version
-   - Accessibility
-```
-
-### Share Link
-
-```
-If podcast is public:
-1. Click "Share"
-2. Get shareable link
-3. Others can listen/download
-4. Useful for:
-   - Sharing with team
-   - Public distribution
-   - Embedding on website
-```
-
-### Publish to Podcast Platforms
-
-```
-If you want to distribute (future feature):
-1. Download MP3
-2. Upload to platform (Spotify, Apple Podcasts, etc.)
-3. Add metadata (title, description, episode notes)
-4. Your research becomes a published podcast!
-```
-
----
-
-## Best Practices
-
-### Before Generation
-- [ ] Sources are processed and ready
-- [ ] You've chosen content to include
-- [ ] You have a clear episode profile
-- [ ] Speakers are well-defined
-- [ ] Content is focused (3-5 sources max)
-
-### During Generation
-- Don't close the browser (use background processing)
-- Check back in 5-15 minutes
-- Review transcript when complete
-- Listen to sample before downloading
-
-### After Generation
-- [ ] Download MP3 to computer
-- [ ] Save in organized folder
-- [ ] Add metadata (title, description, date)
-- [ ] Test listening in podcast app
-- [ ] Share with colleagues for feedback
-
----
-
-## Use Cases
-
-### Academic Researcher
-```
-Podcast: Explaining your dissertation
-Speakers: You + colleague
-Content: Your papers + supporting research
-Use: Share with advisors, test explanations
-```
-
-### Content Creator
-```
-Podcast: Research-to-podcast article
-Speakers: Narrator + expert
-Content: Articles you've researched
-Use: Transform article into podcast version
-```
-
-### Team Research
-```
-Podcast: Weekly research updates
-Speakers: Multiple team members
-Content: This week's papers
-Use: Team updates, knowledge sharing
-```
-
-### Learning/Teaching
-```
-Podcast: Teaching material
-Speakers: Teacher + inquisitive student
-Content: Textbook + examples
-Use: Students learn while commuting
-```
-
----
-
-## Cost Breakdown Example
-
-### Generate 15-minute podcast with ElevenLabs
-
-```
-Generation (outline + dialogue):
-  No charge (included in service)
-
-Text-to-speech:
-  2 speakers × 15 minutes = 30 minutes TTS
-  ElevenLabs: $0.10 per minute
-  Cost: 30 × $0.10 = $3.00
-
-Processing:
-  Included (no additional cost)
-
-Total: $3.00 per podcast
-
-Cheaper options:
-  With Google TTS: ~$0.12
-  With OpenAI: ~$0.45
-  With Local TTS: ~$0.00
-```
-
----
-
-## Summary: Podcasts as Research Tool
-
-Podcasts transform how you consume research:
-
-```
-Before: Reading papers takes time, focus
-After: Listen while commuting, exercising, doing chores
-
-Before: Can't share complex research easily
-After: Share audio of your analysis
-
-Before: Different consumption styles isolated
-After: Same research, multiple formats (read/listen)
-```
-
-Podcasts aren't just for entertainment—they're a tool for making research more accessible, shareable, and consumable.
-
-That's why they're important for Open Notebook.
+- **Select less content.** The outline and transcript models read everything you select, every time. *Summary* for background sources and *Full content* for the main ones keeps cost down and focus up.
+- **Put the direction in the briefing.** Tone, audience, structure and what to emphasize all come from the default briefing plus the additional instructions; the more concrete, the better.
+- **Give speakers distinct personalities and voices.** Two speakers with the same voice and similar personalities are hard to follow.
+- **Retry once on odd failures.** Some failures (such as *Invalid speaker name*) come from a single bad model response and succeed on retry.
+- **Cost** is the outline and transcript language-model calls (which include all selected content) plus text-to-speech for the full script. Check your providers' pricing.
diff --git a/docs/3-USER-GUIDE/index.md b/docs/3-USER-GUIDE/index.md
index 9d7c911c..11a1db07 100644
--- a/docs/3-USER-GUIDE/index.md
+++ b/docs/3-USER-GUIDE/index.md
@@ -1,210 +1,69 @@
 # User Guide - How to Use Open Notebook
 
-This guide covers practical, step-by-step usage of Open Notebook features. You already understand the concepts; now learn how to actually use them.
-
-> **Prerequisite**: Review [2-CORE-CONCEPTS](../2-CORE-CONCEPTS/index.md) first to understand the mental models (notebooks, sources, notes, chat, transformations, podcasts).
+Step-by-step instructions for each feature. If you want to understand how things work first (notebooks, sources, insights, context levels), read [Core Concepts](../2-CORE-CONCEPTS/index.md).
 
 ---
 
-## Start Here
+## Before You Start
 
-### [Interface Overview](interface-overview.md)
-Learn the layout before diving in. Understand the three-panel design and where everything is.
+Open Notebook needs at least one AI provider and default models. Follow [AI Providers → Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) to add a provider in **Manage → Models**, add its models and set the **Default Model Assignments**. [API Configuration](api-configuration.md) covers the rest of the Models page.
+
+What each feature needs:
+
+| Feature | Models needed |
+|---------|---------------|
+| Notebook chat, source chat | Chat Model |
+| Transformations (insights) | Transformation Model, or the Chat Model if none is set |
+| Ask | Chat Model and Embedding Model |
+| Vector search | Embedding Model |
+| Text search | None |
+| Uploaded audio and video files, YouTube videos without a transcript | Speech-to-Text Model (YouTube videos with a transcript don't need one) |
+| Podcasts | The language and text-to-speech models chosen in the episode and speaker profiles |
 
 ---
 
-## Eight Core Features
+## The Guides
 
-### 1. [Adding Sources](adding-sources.md)
-How to bring content into your notebook. Supports PDFs, web links, audio, video, text, and more.
-
-**Quick links:**
-- Upload a PDF or document
-- Add a web link or article
-- Transcribe audio or video
-- Paste text directly
-- Common mistakes + fixes
-
-**Related:** [Content Processing Engines](content-processing-engines.md) — choose how documents and URLs are extracted (Docling, Firecrawl, Jina, Crawl4AI) and control OCR.
+| Guide | What it covers |
+|-------|----------------|
+| [Interface Overview](interface-overview.md) | The sidebar, the notebook page, the source view, keyboard shortcuts |
+| [API Configuration](api-configuration.md) | Connecting AI providers, syncing models, default model assignments |
+| [Adding Sources](adding-sources.md) | The Add Source wizard, file types, processing status, failures |
+| [Content Processing Engines](content-processing-engines.md) | How files and URLs are extracted (Docling, Firecrawl, Jina, Crawl4AI, OCR) |
+| [Transformations](transformations.md) | Generating insights from sources, built-in and custom transformations |
+| [Chat Effectively](chat-effectively.md) | Notebook chat, context levels, sessions, model choice, source chat |
+| [Citations](citations.md) | Reading and checking the references in AI answers |
+| [Working with Notes](working-with-notes.md) | Writing notes and saving AI answers |
+| [Search and Ask](search.md) | Text and vector search, and Ask across your knowledge base |
+| [Creating Podcasts](creating-podcasts.md) | Generating episodes, episode and speaker profiles |
 
 ---
 
-### 2. [Working with Notes](working-with-notes.md)
-Creating, organizing, and using notes (both manual and AI-generated).
+## Your First 15 Minutes
 
-**Quick links:**
-- Create a manual note
-- Save AI responses as notes
-- Apply transformations to generate insights
-- Organize with tags and naming
-- Use notes across your notebook
-
----
-
-### 3. [Chat Effectively](chat-effectively.md)
-Have conversations with AI about your sources. Manage context to control what AI sees.
-
-**Quick links:**
-- Start your first chat
-- Select which sources go in context
-- Ask effective questions
-- Use follow-ups productively
-- Understand citations and verify claims
-
----
-
-### 4. [Creating Podcasts](creating-podcasts.md)
-Convert your research into audio dialogue for passive consumption.
-
-**Quick links:**
-- Create your first podcast
-- Choose or customize speakers
-- Select TTS provider
-- Generate and download
-- Common audio quality fixes
-
----
-
-### 5. [Search Effectively](search.md)
-Two search modes: text-based (keyword) and vector-based (semantic). Know when to use each.
-
-**Quick links:**
-- Text search vs vector search (when to use)
-- Running effective searches
-- Using the Ask feature for comprehensive answers
-- Saving search results as notes
-- Troubleshooting poor results
-
----
-
-### 6. [Transformations](transformations.md)
-Batch-process sources with predefined templates. Extract the same insights from multiple documents.
-
-**Quick links:**
-- Built-in transformation templates
-- Creating custom transformations
-- Applying to single or multiple sources
-- Managing transformation output
-
----
-
-### 7. [Citations](citations.md)
-Verify AI claims by tracing them back to source material. Understand the citation system.
-
-**Quick links:**
-- Reading and clicking citations
-- Verifying claims against sources
-- Requesting better citations
-- Saving cited content as notes
-
----
-
-### 8. [API Configuration](api-configuration.md)
-Configure AI provider API keys directly through the Settings UI.
-
-**Quick links:**
-- Add API keys without editing files
-- Test provider connections
-- Migrate from environment variables
-- Manage Azure and OpenAI-compatible providers
-- Understand key storage and encryption
+1. **Create a notebook.** Sidebar **New → Notebook** (or **Notebooks → New Notebook**). Give it a name and a short description; the description is sent to the AI in notebook Chat.
+2. **Add a source.** In the notebook, **Add Source → Add Source**, then choose **Add URL**, **Upload File** or **Enter Text**. On the Process step, keep the pre-selected transformation and embedding, and click **Done**. Processing runs in the background; the card shows **Queued**, **Processing**, then **Completed**. See [Adding Sources](adding-sources.md).
+3. **Chat.** In the Chat column, type a question and press **Ctrl+Enter** (**⌘+Enter** on Mac). Click a numbered reference in the answer to open what it cites.
+4. **Keep the answer.** Click the **Save to note** icon under the answer. It appears in the Notes column.
+5. **Ask across everything.** Open **Ask and Search**, stay on **Ask (beta)**, type a question and click **Ask**. Save the answer with **Save to Notebooks**.
 
 ---
 
 ## Which Feature for Which Task?
 
-```
-Task: "I want to explore a topic with follow-ups"
-→ Use: Chat (add sources, select context, have conversation)
-
-Task: "I want one comprehensive answer"
-→ Use: Search / Ask (system finds relevant content)
-
-Task: "I want to extract the same info from many sources"
-→ Use: Transformations (define template, apply to all)
-
-Task: "I want summaries of all my sources"
-→ Use: Transformations (with built-in summary template)
-
-Task: "I want to share my research in audio form"
-→ Use: Podcasts (create speakers, generate episode)
-
-Task: "I want to find that quote I remember"
-→ Use: Search / Text Search (keyword matching)
-
-Task: "I'm exploring a concept without knowing exact words"
-→ Use: Search / Vector Search (semantic similarity)
-
-Task: "I need to add or change my AI provider API keys"
-→ Use: Manage → Models (configure providers without editing files)
-```
-
----
-
-## Quick-Start Checklist: First 15 Minutes
-
-**Step 1: Create a Notebook (1 min)**
-- Name: Something descriptive ("Q1 Market Research", "AI Safety Papers", etc.)
-- Description: 1-2 sentences about what you're researching
-- This is your research container
-
-**Step 2: Add Your First Source (3 min)**
-- Pick one: PDF, web link, or text
-- Follow [Adding Sources](adding-sources.md)
-- Wait for processing (usually 30-60 seconds)
-
-**Step 3: Chat About It (3 min)**
-- Go to Chat
-- Select your source (set context to "Full Content")
-- Ask a simple question: "What are the main points?"
-- See AI respond with citations
-
-**Step 4: Save Insight as Note (2 min)**
-- Good response? Click "Save as Note"
-- Name it something useful ("Main points from source X")
-- Now you have a captured insight
-
-**Step 5: Explore More (6 min)**
-- Add another source
-- Chat about both together
-- Ask a question that compares them
-- Follow up with clarifying questions
-
-**Done!** You've used the core workflow: notebook → sources → chat → notes
-
----
-
-## Common Mistakes to Avoid
-
-| Mistake | Problem | Fix |
-|---------|---------|-----|
-| Adding everything to one notebook | No isolation between projects | Create separate notebooks for different topics |
-| Expecting AI to know your context | Questions get generic answers | Describe your research focus in chat context |
-| Forgetting to cite sources | You can't verify claims | Click citations to check source chunks |
-| Using Chat for one-time questions | Slower than Ask | Use Ask for comprehensive Q&A, Chat for exploration |
-| Adding huge PDFs without chunking | Slow processing, poor search | Break into multiple smaller sources if possible |
-| Using same context for all chats | Expensive, unfocused | Adjust context level for each chat |
-| Ignoring vector search | Only finding exact keywords | Use vector search to explore conceptually |
-
----
-
-## Next Steps
-
-1. **Follow each guide** in order (sources → notes → chat → podcasts → search)
-2. **Create your first notebook** with real content
-3. **Practice each feature** with your own research
-4. **Return to CORE-CONCEPTS** if you need to understand the "why"
+| Task | Use |
+|------|-----|
+| Explore a few sources with follow-up questions | [Notebook Chat](chat-effectively.md) |
+| Ask one question across everything | [Ask](search.md#ask) |
+| Find a passage or term you remember | [Text search](search.md#search) |
+| Find content about an idea, whatever the wording | [Vector search](search.md#search) |
+| Get the same summary or extraction for each source | [Transformations](transformations.md) |
+| Listen to your research | [Podcasts](creating-podcasts.md) |
 
 ---
 
 ## Getting Help
 
-- **Feature not working?** → Check the feature's guide (look for "Troubleshooting" section)
-- **Error message?** → Check [6-TROUBLESHOOTING](../6-TROUBLESHOOTING/index.md)
-- **Understanding how something works?** → Check [2-CORE-CONCEPTS](../2-CORE-CONCEPTS/index.md)
-- **Setting up for the first time?** → Go back to [1-INSTALLATION](../1-INSTALLATION/index.md)
-- **For developers** → See [7-DEVELOPMENT](../7-DEVELOPMENT/index.md)
-
----
-
-**Ready to start?** Pick the guide for what you want to do first!
+- **Something fails or shows an error?** → [Troubleshooting](../6-TROUBLESHOOTING/index.md)
+- **How does it work?** → [Core Concepts](../2-CORE-CONCEPTS/index.md)
+- **Not installed yet?** → [Installation](../1-INSTALLATION/index.md)
diff --git a/docs/3-USER-GUIDE/interface-overview.md b/docs/3-USER-GUIDE/interface-overview.md
index 1ce92388..5b23069a 100644
--- a/docs/3-USER-GUIDE/interface-overview.md
+++ b/docs/3-USER-GUIDE/interface-overview.md
@@ -1,377 +1,118 @@
 # Interface Overview - Finding Your Way Around
 
-Open Notebook uses a clean three-panel layout. This guide shows you where everything is.
+## The Sidebar
+
+The workspace pages have a sidebar on the left (it can be collapsed to icons). The exception is a source's own page (opened with **Chat with Sources**), which shows only the source and its chat.
+
+```
+┌──────────────────────┐
+│ Open Notebook        │
+│ [+ New]              │  → Source, Notebook, Podcast
+│                      │
+│ COLLECT              │
+│   Sources            │
+│ PROCESS              │
+│   Notebooks          │
+│   Ask and Search     │
+│ CREATE               │
+│   Podcasts           │
+│ MANAGE               │
+│   Models             │
+│   Transformations    │
+│   Settings           │
+│   Advanced           │
+│                      │
+│ Quick actions   ⌘K   │
+│ Theme · Language ·   │
+│ Sign Out             │
+└──────────────────────┘
+```
+
+| Item | What it's for |
+|------|---------------|
+| **New** | Create a source, notebook or podcast episode from anywhere |
+| **Sources** | Your source library: every source, whichever notebooks it is in |
+| **Notebooks** | Your notebooks: recently viewed, active and archived, in tile or list view |
+| **Ask and Search** | Ask questions across your knowledge base, or search it ([Search and Ask](search.md)) |
+| **Podcasts** | Generated episodes and the episode/speaker profiles ([Creating Podcasts](creating-podcasts.md)) |
+| **Models** | AI provider configurations and default models ([API Configuration](api-configuration.md)) |
+| **Transformations** | Your transformation prompts and the Playground ([Transformations](transformations.md)) |
+| **Settings** | Content Processing, Embedding and Search, File Management |
+| **Advanced** | System Info (version and update check) and Rebuild Embeddings |
+| **Quick actions** | The command palette: jump to pages and notebooks, search or ask, create items, change theme |
+| **Theme / Language** | Light, dark or system theme; interface language |
 
 ---
 
-## The Main Layout
+## The Notebook Page
+
+Opening a notebook shows its header and three columns.
 
 ```
-┌─────────────────────────────────────────────────────────────┐
-│  [Logo]  Notebooks  Search  Podcasts  Models  Settings      │
-├──────────────┬──────────────┬───────────────────────────────┤
-│              │              │                               │
-│   SOURCES    │    NOTES     │           CHAT                │
-│              │              │                               │
-│  Your docs   │  Your        │   Talk to AI about            │
-│  PDFs, URLs  │  insights    │   your sources                │
-│  Videos      │  summaries   │                               │
-│              │              │                               │
-│  [+Add]      │  [+Write]    │   [Type here...]              │
-│              │              │                               │
-└──────────────┴──────────────┴───────────────────────────────┘
+┌────────────────────────────────────────────────────────────────────┐
+│ Notebook name   (click to edit)            [Archive]   [Delete]    │
+│ Description     (click to edit)                                    │
+├──────────────────┬──────────────────┬──────────────────────────────┤
+│ SOURCES          │ NOTES            │ CHAT WITH NOTEBOOK           │
+│ [Context] [Add   │ [Context]        │ [Sessions]                   │
+│           Source]│ [Write Note]     │                              │
+│                  │                  │  messages, with numbered     │
+│ ┌──────────────┐ │ ┌──────────────┐ │  references                  │
+│ │ paper.pdf    │ │ │ My notes     │ │                              │
+│ │ File · 2     │ │ │ Human        │ │  2 sources · 1 note          │
+│ │ insights  ◐ ⋮│ │ │            ◐ │ │  ~12,400 tokens              │
+│ └──────────────┘ │ └──────────────┘ │ [Model] [Ask anything...]    │
+└──────────────────┴──────────────────┴──────────────────────────────┘
 ```
 
+On desktop the Sources and Notes columns can be collapsed. On small screens the columns become three tabs, **Sources**, **Notes** and **Chat**, with Chat selected first.
+
+### Sources column
+
+- **Add Source** opens a menu: **Add Source** (the wizard for new content) or **Add Existing Sources** (link sources from your library). See [Adding Sources](adding-sources.md).
+- **Context** sets every source at once: **Include all (insights only)**, **Include all (full content)** or **Exclude all from context**.
+- Each **source card** shows the title, the type (Add URL, Upload File or Enter Text), the processing status while it isn't finished, and the insight count (when there are any). The **context icon** cycles the source's [context level](../2-CORE-CONCEPTS/ai-context-rag.md#context-levels-in-notebook-chat) when you click it. The **⋮ menu** has **Remove from Notebook**, **Retry Processing** (failed sources), **Refresh content** (completed links) and **Delete Source**.
+- Click a card to open the source view.
+
+### Notes column
+
+- **Write Note** creates a note.
+- **Context** has **Include all in context** and **Exclude all from context**.
+- Each **note card** shows the title, an **AI Generated** or **Human** badge and a context icon (on or off). Click a card to edit the note. See [Working with Notes](working-with-notes.md).
+
+### Chat column
+
+Notebook chat with the sources and notes in context. **Sessions** opens your saved chat sessions, the model button picks a model for the session, and the panel shows how much content is in context. Send with **Ctrl+Enter** (**⌘+Enter** on Mac). See [Chat Effectively](chat-effectively.md).
+
 ---
 
-## Navigation Bar
+## The Source View
 
-The top navigation takes you to main sections:
+Clicking a source opens it with three tabs:
 
-| Icon | Page | What It Does |
-|------|------|--------------|
-| **Notebooks** | Main workspace | Your research projects |
-| **Search** | Ask & Search | Query across all notebooks |
-| **Podcasts** | Audio generation | Manage podcast profiles |
-| **Models** | AI configuration | Set up providers and models |
-| **Settings** | Preferences | App configuration |
+- **Content**: the extracted text and, for YouTube links, the embedded video.
+- **Insights**: the insights generated by transformations, and **Generate New Insight** to run another one. See [Transformations](transformations.md).
+- **Details**: topics, embedding status, created and updated dates, and the notebooks the source belongs to (**Manage Notebooks**).
+
+**Chat with Sources** opens the source's own page, with the source on the left and a chat about it on the right. The **⋮ menu** has **Download File** (uploaded files, while the file is still stored), **Embed Content** (if the source isn't embedded yet) and **Delete Source**.
 
 ---
 
-## Left Panel: Sources
+## Other Pages
 
-Your research materials live here.
-
-### What You'll See
-
-```
-┌─────────────────────────┐
-│  Sources (5)            │
-│  [+ Add Source]         │
-├─────────────────────────┤
-│  ┌─────────────────┐    │
-│  │ 📄 Paper.pdf    │    │
-│  │ 🟢 Full Content │    │
-│  │ [⋮ Menu]        │    │
-│  └─────────────────┘    │
-│                         │
-│  ┌─────────────────┐    │
-│  │ 🔗 Article URL  │    │
-│  │ 🟡 Summary Only │    │
-│  │ [⋮ Menu]        │    │
-│  └─────────────────┘    │
-└─────────────────────────┘
-```
-
-### Source Card Elements
-
-- **Icon** - File type (PDF, URL, video, etc.)
-- **Title** - Document name
-- **Context indicator** - What AI can see:
-  - 🟢 Full Content
-  - 🟡 Summary Only
-  - ⛔ Not in Context
-- **Menu (⋮)** - Edit, transform, delete
-
-### Add Source Button
-
-Click to add:
-- File upload (PDF, DOCX, etc.)
-- Web URL
-- YouTube video
-- Plain text
-
----
-
-## Middle Panel: Notes
-
-Your insights and AI-generated content.
-
-### What You'll See
-
-```
-┌─────────────────────────┐
-│  Notes (3)              │
-│  [+ Write Note]         │
-├─────────────────────────┤
-│  ┌─────────────────┐    │
-│  │ 📝 My Analysis  │    │
-│  │ Manual note     │    │
-│  │ Jan 3, 2026     │    │
-│  └─────────────────┘    │
-│                         │
-│  ┌─────────────────┐    │
-│  │ 🤖 Summary      │    │
-│  │ From transform  │    │
-│  │ Jan 2, 2026     │    │
-│  └─────────────────┘    │
-└─────────────────────────┘
-```
-
-### Note Card Elements
-
-- **Icon** - Note type (manual 📝 or AI 🤖)
-- **Title** - Note name
-- **Origin** - How it was created
-- **Date** - When created
-
-### Write Note Button
-
-Click to:
-- Create manual note
-- Add your own insights
-- Markdown supported
-
----
-
-## Right Panel: Chat
-
-Your AI conversation space.
-
-### What You'll See
-
-```
-┌───────────────────────────────┐
-│  Chat                         │
-│  Session: Research Discussion │
-│  [+ New Session] [Sessions ▼] │
-├───────────────────────────────┤
-│                               │
-│  You: What's the main         │
-│       finding?                │
-│                               │
-│  AI: Based on the paper [1],  │
-│      the main finding is...   │
-│      [Save as Note]           │
-│                               │
-│  You: Tell me more about      │
-│       the methodology.        │
-│                               │
-├───────────────────────────────┤
-│  Context: 3 sources (12K tok) │
-├───────────────────────────────┤
-│  [Type your message...]  [↑]  │
-└───────────────────────────────┘
-```
-
-### Chat Elements
-
-- **Session selector** - Switch between conversations
-- **Message history** - Your conversation
-- **Save as Note** - Keep good responses
-- **Context indicator** - What AI can see
-- **Input field** - Type your questions
-
----
-
-## Context Indicators
-
-These show what AI can access:
-
-### Token Counter
-
-```
-Context: 3 sources (12,450 tokens)
-         ↑          ↑
-         Sources    Approximate cost indicator
-         included
-```
-
-### Per-Source Indicators
-
-| Indicator | Meaning | AI Access |
-|-----------|---------|-----------|
-| 🟢 Full Content | Complete text | Everything |
-| 🟡 Summary Only | AI summary | Key points only |
-| ⛔ Not in Context | Excluded | Nothing |
-
-Click any source to change its context level.
-
----
-
-## Podcasts Tab
-
-Inside a notebook, switch to Podcasts:
-
-```
-┌───────────────────────────────┐
-│  [Chat]  [Podcasts]           │
-├───────────────────────────────┤
-│  Episode Profile: [Select ▼]  │
-│                               │
-│  Speakers:                    │
-│  ├─ Host: Alex (voice model)  │
-│  └─ Guest: Sam (voice model)  │
-│                               │
-│  Include:                     │
-│  ☑ Paper.pdf                  │
-│  ☑ My Analysis (note)         │
-│  ☐ Background article         │
-│                               │
-│  [Generate Podcast]           │
-└───────────────────────────────┘
-```
-
----
-
-## Settings Page
-
-Access via navigation bar → Settings:
-
-### Key Sections
-
-| Section | What It Controls |
-|---------|------------------|
-| **Processing** | Document and URL extraction engines |
-| **Embedding** | Auto-embed settings |
-| **Files** | Auto-delete uploads after processing |
-| **YouTube** | Preferred transcript languages |
-
----
-
-## Models Page
-
-Configure AI providers:
-
-```
-┌───────────────────────────────────────┐
-│  Models                               │
-├───────────────────────────────────────┤
-│  Language Models                      │
-│  ┌─────────────────────────────────┐  │
-│  │ GPT-4o (OpenAI)         [Edit]  │  │
-│  │ Claude Sonnet (Anthropic)       │  │
-│  │ Llama 3.3 (Ollama)      [⭐]    │  │
-│  └─────────────────────────────────┘  │
-│  [+ Add Model]                        │
-│                                       │
-│  Embedding Models                     │
-│  ┌─────────────────────────────────┐  │
-│  │ text-embedding-3-small  [⭐]    │  │
-│  └─────────────────────────────────┘  │
-│                                       │
-│  Text-to-Speech                       │
-│  ┌─────────────────────────────────┐  │
-│  │ OpenAI TTS             [⭐]     │  │
-│  │ Google TTS                      │  │
-│  └─────────────────────────────────┘  │
-└───────────────────────────────────────┘
-```
-
-- **⭐** = Default model for that category
-- **[Edit]** = Modify configuration
-- **[+ Add]** = Add new model
-
----
-
-## Search Page
-
-Query across all notebooks:
-
-```
-┌───────────────────────────────────────┐
-│  Search                               │
-├───────────────────────────────────────┤
-│  [What are you looking for?    ] [🔍] │
-│                                       │
-│  Search type: [Text ▼] [Vector ▼]     │
-│  Search in:   [Sources] [Notes]       │
-├───────────────────────────────────────┤
-│  Results (15)                         │
-│                                       │
-│  📄 Paper.pdf - Notebook: Research    │
-│     "...the transformer model..."     │
-│                                       │
-│  📝 My Analysis - Notebook: Research  │
-│     "...key findings include..."      │
-└───────────────────────────────────────┘
-```
-
----
-
-## Common Actions
-
-### Create a Notebook
-
-```
-Notebooks page → [+ New Notebook] → Enter name → Create
-```
-
-### Add a Source
-
-```
-Inside notebook → [+ Add Source] → Choose type → Upload/paste → Wait for processing
-```
-
-### Ask a Question
-
-```
-Inside notebook → Chat panel → Type question → Enter → Read response
-```
-
-### Save AI Response
-
-```
-Get good response → Click [Save as Note] → Edit title → Save
-```
-
-### Change Context Level
-
-```
-Click source → Context dropdown → Select level → Changes apply immediately
-```
-
-### Generate Podcast
-
-```
-Podcasts tab → Select profile → Choose sources → [Generate] → Wait → Download
-```
+- **Sources** (library): a table of all sources with type, insight count and embedding status. **New Source** adds a source without opening a notebook.
+- **Notebooks**: **New Notebook**, a search box, **Recently Viewed**, and the **Active Notebooks** and **Archived Notebooks** lists.
+- **Settings**: Content Processing (document and URL engines, OCR and other Docling options; see [Content Processing Engines](content-processing-engines.md)), Embedding and Search (**Default Embedding Option**: Ask, Always or Never), and File Management (**Auto Delete Files**: whether uploaded files are deleted after processing).
+- **Advanced**: **System Info** shows your version and whether an update is available. **Rebuild Embeddings** re-embeds content after you change the embedding model (mode *Existing* or *All*); it runs in the background.
 
 ---
 
 ## Keyboard Shortcuts
 
-| Key | Action |
-|-----|--------|
-| `Enter` | Send chat message |
-| `Shift + Enter` | New line in chat |
-| `Escape` | Close dialogs |
-| `Ctrl/Cmd + F` | Browser find |
-
----
-
-## Mobile View
-
-On smaller screens, the three-panel layout stacks vertically:
-
-```
-┌─────────────────┐
-│    SOURCES      │
-│    (tap to expand)
-├─────────────────┤
-│    NOTES        │
-│    (tap to expand)
-├─────────────────┤
-│    CHAT         │
-│    (always visible)
-└─────────────────┘
-```
-
-- Panels collapse to save space
-- Tap headers to expand/collapse
-- Chat remains accessible
-- Full functionality preserved
-
----
-
-## Tips for Efficient Navigation
-
-1. **Use keyboard** - Enter sends messages, Escape closes dialogs
-2. **Context first** - Set source context before chatting
-3. **Sessions** - Create new sessions for different topics
-4. **Search globally** - Use Search page to find across all notebooks
-5. **Models page** - Bookmark your preferred models
-
----
-
-Now you know where everything is. Start with [Adding Sources](adding-sources.md) to begin your research!
+| Shortcut | Where | Action |
+|----------|-------|--------|
+| **Ctrl+K** / **⌘K** | Anywhere | Open Quick actions (command palette) |
+| **Ctrl+Enter** / **⌘+Enter** | Chat message box | Send |
+| **Enter** | Chat message box | New line |
+| **Ctrl+Enter** / **⌘+Enter** | Ask question box | Ask |
+| **Enter** | Search box | Search |
diff --git a/docs/3-USER-GUIDE/search.md b/docs/3-USER-GUIDE/search.md
index 22e66454..21543fd6 100644
--- a/docs/3-USER-GUIDE/search.md
+++ b/docs/3-USER-GUIDE/search.md
@@ -1,507 +1,86 @@
-# Search Effectively - Finding What You Need
+# Search and Ask - Finding What You Need
 
-Search is your gateway into your research. This guide covers two search modes and when to use each.
+Search and Ask live on the **Ask and Search** page (sidebar, under **Process**). Both work across your whole knowledge base, or only the notebooks you pick. There is no separate search box inside a notebook.
+
+You can also start either from **Quick actions** (**Ctrl+K** / **⌘K**): type a query and choose *Search results for "..."* or *Ask about "..."*.
+
+| | Search | Ask (beta) |
+|---|---|---|
+| **Gives you** | A list of matching sources, insights and notes | One written answer with citations |
+| **Uses an AI model** | Vector search uses the embedding model; text search uses none | Embedding model plus a language model for each stage |
+| **Best for** | Finding a passage, term or document | Questions whose answer is spread across sources |
+
+How both work under the hood is explained in [AI Context & RAG](../2-CORE-CONCEPTS/ai-context-rag.md#search-text-vs-vector).
 
 ---
 
-## Quick-Start: Find Something
+## Search
 
-### Simple Search
+1. Open **Ask and Search** and choose the **Search** tab.
+2. Type your query and press **Enter**.
+3. Adjust if needed:
+   - **Search Type**: **Text Search** or **Vector Search**.
+   - **Search In**: **Search Sources** and/or **Search Notes**.
+   - **Notebooks**: pick notebooks to limit the search, or leave all unchecked to search everything.
 
-```
-1. Go to your notebook
-2. Type in search box
-3. See results (both sources and notes)
-4. Click result to view source/note
-5. Done!
+Results show how many were found; click a result to open the source, note or insight. Where available, a result also lists its **Matches** (the matching passages).
 
-That works for basic searches.
-But you can do much better...
-```
+### Text Search vs. Vector Search
+
+| | Text Search | Vector Search |
+|---|---|---|
+| **Matches** | Exact words (with English stemming) | Meaning, by similarity |
+| **Covers** | Source titles and content, insights, note titles and content | Source content, insights, note content (not titles) |
+| **Needs** | Nothing | An Embedding Model, and only finds embedded content |
+| **Use when** | You know the term, name or phrase | You know the idea but not the wording |
+
+If no Embedding Model is set, the page says *Vector search requires an embedding model. Only text search is available.*
+
+**Tips:**
+- Text search works best with distinctive words: names, acronyms, technical terms.
+- Vector search works best with a descriptive phrase ("risks of relying on a single supplier") rather than one word.
+- A source you can find with text search but not vector search probably isn't embedded. Open it and use **Embed Content**.
 
 ---
 
-## Two Search Modes Explained
+## Ask
 
-Open Notebook has two fundamentally different search approaches.
+1. Open **Ask and Search** and stay on the **Ask (beta)** tab.
+2. Type your question.
+3. Optionally limit it to some **Notebooks** (leave all unchecked for your whole knowledge base).
+4. Press **Cmd/Ctrl+Enter** or click **Ask**.
 
-### Search Type 1: TEXT SEARCH (Keyword Matching)
+While it runs, you'll see the stages as they finish:
 
-**How it works:**
-- You search for words: "transformer"
-- System finds chunks containing "transformer"
-- Ranked by relevance: frequency, position, context
+- **Strategy**: the model's reasoning and the **Search Terms** it chose (up to five searches).
+- **Individual Answers**: one partial answer per search, based on the top matches.
+- **Final Answer**: the combined answer, with links to the cited items.
 
-**Speed:** Very fast (instant)
+Click **Save to Notebooks** to keep the answer as a note (titled with your question) in one or more notebooks.
 
-**When to use:**
-- You remember exact words or phrases
-- You're looking for specific terms
-- You want precise keyword matches
-- You need exact quotes
+### Requirements
 
-**Example:**
-```
-Search: "attention mechanism"
-Results:
-  1. "The attention mechanism allows..." (perfect match)
-  2. "Attention and other mechanisms..." (partial match)
-  3. "How mechanisms work in attention..." (includes words separately)
+- **An Embedding Model** must be set. Without one, the Ask tab says *You can't use this feature because you have no embedding model selected.*
+- **A Chat Model** must be set; it is used for all three stages by default.
+- Ask only sees **embedded** content (sources added with embedding enabled, notes and insights).
 
-All contain "attention" AND "mechanism"
-Ranked by how close together they are
-```
+### Choosing models
 
-**What it finds:**
-- Exact phrases: "transformer model"
-- Individual words: transformer OR model (too broad)
-- Names: "Vaswani et al."
-- Numbers: "1994", "GPT-4"
-- Technical terms: "LSTM", "convolution"
+The tab shows **Using Default Models** or **Using Custom Models**. Click **Advanced** to open **Advanced Model Selection** and choose a **Strategy Model**, **Answer Model** and **Final Answer Model**, then **Save Changes**. The strategy step needs a model that reliably returns structured output; if it fails with *The strategy model returned no search terms for this question...*, pick a different Strategy Model or rephrase.
 
-**What it doesn't find:**
-- Similar words: searching "attention" won't find "focus"
-- Synonyms: searching "large" won't find "big"
-- Concepts: searching "similarity" won't find "likeness"
+### When to use Ask
 
-**Content searched:**
-Text search looks through:
-- **Source titles** — matching keywords in source names
-- **Source content** — the full text and its chunks
-- **Insights** — content generated from sources (e.g., dense summaries)
-- **Note titles** — matching keywords in note names
-- **Note content** — the body of your notes
+- Use Ask when you don't know which sources contain the answer.
+- Ask is single-turn. To follow up, open a notebook and use [Chat](chat-effectively.md) with the sources Ask cited.
+- Answers come only from matched chunks, so they can miss context that is spread thinly across a document. For close reading, use Chat with *Full content*.
 
 ---
 
-### Search Type 2: VECTOR SEARCH (Semantic/Concept Matching)
-
-**How it works:**
-- Your search converted to embedding (vector)
-- All chunks converted to embeddings
-- System finds most similar embeddings
-- Ranked by semantic similarity
-
-**Speed:** A bit slower (1-2 seconds)
-
-**When to use:**
-- You're exploring a concept
-- You don't know exact words
-- You want semantically similar content
-- You're discovering, not searching
-
-**Example:**
-```
-Search: "What's the mechanism for understanding in models?"
-(Notice: No chunk likely says exactly that)
-
-Results:
-  1. "Mechanistic interpretability allows understanding..." (semantic match)
-  2. "Feature attribution reveals how models work..." (conceptually similar)
-  3. "Attention visualization shows model decisions..." (same topic)
-
-None contain your exact words
-But all are semantically related
-```
-
-**What it finds:**
-- Similar concepts: "understanding" + "interpretation" + "explainability" (all related)
-- Paraphrases: "big" and "large" (same meaning)
-- Related ideas: "safety" relates to "alignment" (connected concepts)
-- Analogies: content about biological learning when searching "learning"
-
-**What it doesn't find:**
-- Exact keywords: if you search a rare word, vector search might miss it
-- Specific numbers: "1994" vs "1993" are semantically different
-- Technical jargon: "LSTM" and "RNN" are different even if related
-
-**Content searched:**
-Vector search compares your query against embeddings of:
-- **Source content** — source chunks (embeddings)
-- **Insights** — content generated from sources (embeddings)
-- **Note content** — the body of your notes (embeddings)
-
-Vector search works on embedded content only, so source and note *titles* are not matched semantically.
-
----
-
-## Decision: Text Search vs. Vector Search?
-
-```
-Question: "Do I remember the exact words?"
-
-→ YES: Use TEXT SEARCH
-   Example: "I remember the paper said 'attention is all you need'"
-
-→ NO: Use VECTOR SEARCH
-   Example: "I'm looking for content about how models process information"
-
-→ UNSURE: Try TEXT SEARCH first (faster)
-         If no results, try VECTOR SEARCH
-
-Text search: "I know what I'm looking for"
-Vector search: "I'm exploring an idea"
-```
-
----
-
-## Step-by-Step: Using Each Search
-
-### Text Search
-
-```
-1. Go to search box
-2. Type your keywords: "transformer", "attention", "2017"
-3. Press Enter
-4. Results appear (usually instant)
-5. Click result to see context
-
-Results show:
-  - Which source contains it
-  - How many times it appears
-  - Relevance score
-  - Preview of surrounding text
-```
-
-### Vector Search
-
-```
-1. Go to search box
-2. Type your concept: "How do models understand language?"
-3. Choose "Vector Search" from dropdown
-4. Press Enter
-5. Results appear (1-2 seconds)
-6. Click result to see context
-
-Results show:
-  - Semantically related chunks
-  - Similarity score (higher = more related)
-  - Preview of surrounding text
-  - Different sources mixed together
-```
-
-### Scoping to Notebooks
-
-By default Search and Ask look at your **whole knowledge base** — every source and note in every notebook. To narrow the scope, open the **Notebooks** selector above the search options and check one or more notebooks:
-
-```
-1. Open the Notebooks selector (it reads "All notebooks" until you pick one)
-2. Check the notebook(s) you want to search
-3. Run your Search or Ask as usual
-4. Click "Clear" to go back to the whole knowledge base
-```
-
-The scope is shared by the Search and Ask tabs, so a question asked right after a scoped search uses the same notebooks. Only sources and notes linked to the selected notebooks are considered; a source that lives in several notebooks matches when any of them is selected.
-
-For API clients, pass `notebook_ids` (a list) or `notebook_id` (a single id) to `POST /api/search` and `POST /api/search/ask`. Omitting both keeps the global behavior. An id that does not name an existing notebook returns `404`.
-
----
-
-## The Ask Feature (Automated Search)
-
-Ask is different from simple search. It automatically searches, synthesizes, and answers.
-
-### How Ask Works
-
-```
-Stage 1: QUESTION UNDERSTANDING
-  "Compare the approaches in my papers"
-  → System: "This asks for comparison"
-
-Stage 2: SEARCH STRATEGY
-  → System: "I should search for each approach separately"
-
-Stage 3: PARALLEL SEARCHES
-  → Search 1: "Approach in paper A"
-  → Search 2: "Approach in paper B"
-  (Multiple searches happen at once)
-
-Stage 4: ANALYSIS & SYNTHESIS
-  → Per-result analysis: "Based on paper A, the approach is..."
-  → Per-result analysis: "Based on paper B, the approach is..."
-  → Final synthesis: "Comparing A and B: A differs from B in..."
-
-Result: Comprehensive answer, not just search results
-```
-
-### When to Use Ask vs. Simple Search
-
-| Task | Use | Why |
-|------|-----|-----|
-| "Find the quote about X" | **TEXT SEARCH** | Need exact words |
-| "What does source A say about X?" | **TEXT SEARCH** | Direct, fast answer |
-| "Find content about X" | **VECTOR SEARCH** | Semantic discovery |
-| "Compare A and B" | **ASK** | Comprehensive synthesis |
-| "What's the big picture?" | **ASK** | Full analysis needed |
-| "How do these sources relate?" | **ASK** | Cross-source synthesis |
-| "I remember something about X" | **TEXT SEARCH** | Recall memory |
-| "I'm exploring the topic of X" | **VECTOR SEARCH** | Discovery mode |
-
----
-
-## Advanced Search Strategies
-
-### Strategy 1: Simple Search with Follow-Up
-
-```
-1. Text search: "attention mechanism"
-   Results: 50 matches
-
-2. Too many. Follow up with vector search:
-   "Why is attention useful?" (concept search)
-   Results: Most relevant papers/notes
-
-3. Better results with less noise
-```
-
-### Strategy 2: Ask for Comprehensive, Then Search for Details
-
-```
-1. Ask: "What are the main approaches to X?"
-   Result: Comprehensive answer about A, B, C
-
-2. Use that to identify specific sources
-
-3. Text search in those specific sources:
-   "Why did they choose method X?"
-   Result: Detailed information
-```
-
-### Strategy 3: Vector Search for Discovery, Text for Verification
-
-```
-1. Vector search: "How do transformers generalize?"
-   Results: Related conceptual papers
-
-2. Skim to understand landscape
-
-3. Text search in promising sources:
-   "generalization", "extrapolation", "transfer"
-   Results: Specific passages to read carefully
-```
-
-### Strategy 4: Combine Search with Chat
-
-```
-1. Vector search: "What's new in AI 2026?"
-   Results: Latest papers
-
-2. Go to Chat
-3. Add those papers to context
-4. Ask detailed follow-up questions
-5. Get deep analysis of results
-```
-
----
-
-## Search Quality Issues & Fixes
-
-### Getting No Results
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| Text search: no results | Word doesn't appear | Try vector search instead |
-| Vector search: no results | Concept not in content | Try broader search term |
-| Both empty | Content not in notebook | Add sources to notebook |
-| | Sources not processed | Wait for processing to complete |
-
-### Getting Too Many Results
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| 1000+ results | Search too broad | Be more specific |
-| | All notebooks | Scope the search to one or a few notebooks |
-| | All sources | Filter by source |
-| | Keyword matches rare words | Use vector search instead |
-
-### Getting Wrong Results
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| Results irrelevant | Search term has multiple meanings | Provide more context |
-| | Using text search for concepts | Try vector search |
-| Different meaning | Homonym (word means multiple things) | Add context (e.g., "attention mechanism") |
-
-### Getting Low Quality Results
-
-| Problem | Cause | Solution |
-|---------|-------|----------|
-| Results don't match intent | Vague search term | Be specific ("Who invented X?" vs "X") |
-| | Concept not well-represented | Add more sources on that topic |
-| | Vector embedding not trained on domain | Use text search as fallback |
-
----
-
-## Tips for Better Searches
-
-### For Text Search
-1. **Be specific** — "attention mechanism" not just "attention"
-2. **Use exact phrases** — Put quotes around: "attention is all you need"
-3. **Include context** — "LSTM vs attention" not just "attention"
-4. **Use technical terms** — These are usually more precise
-5. **Try synonyms** — If first search fails, try related terms
-
-### For Vector Search
-1. **Ask a question** — "What's the best way to X?" is better than "best way"
-2. **Use natural language** — Explain what you're looking for
-3. **Be specific about intent** — "Compare X and Y" not "X and Y"
-4. **Include context** — "In machine learning, how..." vs just "how..."
-5. **Think conceptually** — What idea are you exploring?
-
-### General Tips
-1. **Start broad, then narrow** — "AI papers" → "transformers" → "attention mechanism"
-2. **Try both search types** — Each finds different things
-3. **Use Ask for complex questions** — Don't just search
-4. **Save good results as notes** — Create knowledge base
-5. **Filter by source if needed** — "Search in Paper A only"
-
----
-
-## Search Examples
-
-### Example 1: Finding a Specific Fact
-
-**Goal:** "Find the date the transformer was introduced"
-
-```
-Step 1: Text search
-  "transformer 2017" (or year you remember)
-
-If that works: Done!
-
-If no results: Try
-  "attention is all you need" (famous paper title)
-
-Check result for exact date
-```
-
-### Example 2: Exploring a Concept
-
-**Goal:** "Find content about alignment interpretability"
-
-```
-Step 1: Vector search
-  "How do we make AI interpretable?"
-
-Results: Papers on interpretability, transparency, alignment
-
-Step 2: Review results
-  See which papers are most relevant
-
-Step 3: Deep dive
-  Go to Chat, add top 2-3 papers
-  Ask detailed questions about alignment
-```
-
-### Example 3: Comprehensive Answer
-
-**Goal:** "How do different approaches to AI safety compare?"
-
-```
-Step 1: Ask
-  "Compare the main approaches to AI safety in my sources"
-
-Result: Comprehensive analysis comparing approaches
-
-Step 2: Identify sources
-  From answer, see which papers were most relevant
-
-Step 3: Deep dive
-  Text search in those papers:
-  "limitations", "critiques", "open problems"
-
-Step 4: Save as notes
-  Create comparison note from Ask result
-```
-
-### Example 4: Finding Pattern
-
-**Goal:** "Find all papers mentioning transformers"
-
-```
-Step 1: Text search
-  "transformer"
-
-Results: All papers mentioning "transformer"
-
-Step 2: Vector search
-  "neural network architecture for sequence processing"
-
-Results: Papers that don't say "transformer" but discuss similar concept
-
-Step 3: Combine
-  Union of text + vector results shows full landscape
-
-Step 4: Analyze
-  Go to Chat with all results
-  Ask: "What's common across all these?"
-```
-
----
-
-## Search in the Workflow
-
-How search fits with other features:
-
-```
-SOURCES
-  ↓
-SEARCH (find what matters)
-  ├─ Text search (precise)
-  ├─ Vector search (exploration)
-  └─ Ask (comprehensive)
-  ↓
-CHAT (explore with follow-ups)
-  ↓
-TRANSFORMATIONS (batch extract)
-  ↓
-NOTES (save insights)
-```
-
-### Workflow Example
-
-```
-1. Add 10 papers to notebook
-
-2. Search: "What's the state of the art?"
-   (Vector search explores landscape)
-
-3. Ask: "Compare these 3 approaches"
-   (Comprehensive synthesis)
-
-4. Chat: Deep questions about winner
-   (Follow-up exploration)
-
-5. Save best insights as notes
-   (Knowledge capture)
-
-6. Transform remaining papers
-   (Batch extraction for later)
-
-7. Create podcast from notes + sources
-   (Share findings)
-```
-
----
-
-## Summary: Know Your Search
-
-**TEXT SEARCH** — "I know what I'm looking for"
-- Fast, precise, keyword-based
-- Use when you remember exact words/phrases
-- Best for: Finding specific facts, quotes, technical terms
-- Speed: Instant
-
-**VECTOR SEARCH** — "I'm exploring an idea"
-- Slow-ish, concept-based, semantic
-- Use when you're discovering connections
-- Best for: Concept exploration, related ideas, synonyms
-- Speed: 1-2 seconds
-
-**ASK** — "I want a comprehensive answer"
-- Auto-searches, auto-analyzes, synthesizes
-- Use for complex questions needing multiple sources
-- Best for: Comparisons, big-picture questions, synthesis
-- Speed: 10-30 seconds
-
-Pick the right tool for your search goal, and you'll find what you need faster.
+## Troubleshooting
+
+| Problem | Try |
+|---------|-----|
+| No results in vector search or Ask | Check that an Embedding Model is set and the sources are embedded; rebuild from **Advanced → Rebuild Embeddings** if you changed the embedding model |
+| Text search misses a word | Try another form of the word or a synonym; stemming is English-only |
+| Too many results | Limit to specific notebooks, or turn off **Search Sources** or **Search Notes** |
+| Ask answer is empty or fails | Pick other models under **Advanced**; reasoning models with small output limits can return nothing |
diff --git a/docs/3-USER-GUIDE/transformations.md b/docs/3-USER-GUIDE/transformations.md
index beac2576..49cce38c 100644
--- a/docs/3-USER-GUIDE/transformations.md
+++ b/docs/3-USER-GUIDE/transformations.md
@@ -1,402 +1,87 @@
-# Transformations - Batch Processing Your Sources
+# Transformations - Generating Insights from Sources
 
-Transformations apply the same analysis to multiple sources at once. Instead of asking the same question repeatedly, define a template and run it across your content.
+A **transformation** is a saved prompt that runs on one source. Its output is saved as an **insight** on that source, titled with the transformation's title. Insights show on the source's **Insights** tab, can be sent to Chat on their own (the *Insights only* context level), are used by the *Summary* option in podcasts, and are searchable. See [Notebooks, Sources, Insights, and Notes](../2-CORE-CONCEPTS/notebooks-sources-notes.md#insights).
 
 ---
 
-## When to Use Transformations
+## Running a Transformation
 
-| Use Transformations When | Use Chat Instead When |
-|-------------------------|----------------------|
-| Same analysis on many sources | One-off questions |
-| Consistent output format needed | Exploratory conversation |
-| Batch processing | Follow-up questions needed |
-| Creating structured notes | Context changes between questions |
+There are two places to run one.
 
-**Example**: You have 10 papers and want a summary of each. Transformation does it in one operation.
+**When you add a source.** Step 3 of the Add Source wizard (**Process**) lists your transformations under **Transformations (optional)**. Tick the ones you want; they run after the text is extracted. In a batch upload, the selection applies to every item. This is the way to apply a transformation to many sources at once.
 
----
+**On an existing source.**
 
-## Quick Start: Your First Transformation
+1. Open the source (click its card) and go to the **Insights** tab.
+2. Under **Generate New Insight**, choose a transformation in **Select a transformation...**.
+3. Click **New**. You'll see *Insight generation started. It will appear shortly.*
 
-```
-1. Go to your notebook
-2. Click "Transformations" in navigation
-3. Select a built-in template (e.g., "Summary")
-4. Select sources to transform
-5. Click "Apply"
-6. Wait for processing
-7. New notes appear automatically
-```
+The transformation runs in the background and the insight appears on the tab when it's done. Running the same transformation again adds another insight; delete the ones you don't want (**View Insight** → **Delete**, or the delete icon on the insight).
+
+There is no action to run a transformation on several existing sources at once.
 
 ---
 
 ## Built-in Transformations
 
-Open Notebook includes ready-to-use templates:
+A new install comes with six:
 
-### Summary
+| Title | What it produces |
+|-------|------------------|
+| **Paper Analysis** | An analysis of a technical or scientific paper |
+| **Key Insights** | Important insights and actionable items |
+| **Dense Summary** | A rich, dense summary. Pre-selected for new sources |
+| **Reflection Questions** | Questions to help explore the document further |
+| **Table of Contents** | The topics the document covers |
+| **Simple Summary** | A short summary |
 
-```
-What it does: Creates a 200-300 word overview
-Output: Key points, main arguments, conclusions
-Best for: Quick reference, getting the gist
-```
-
-### Key Concepts
-
-```
-What it does: Extracts main ideas and terminology
-Output: List of concepts with explanations
-Best for: Learning new topics, building vocabulary
-```
-
-### Methodology
-
-```
-What it does: Extracts research approach
-Output: How the study was conducted
-Best for: Academic papers, research review
-```
-
-### Takeaways
-
-```
-What it does: Extracts actionable insights
-Output: What you should do with this information
-Best for: Business documents, practical guides
-```
-
-### Questions
-
-```
-What it does: Generates questions the source raises
-Output: Open questions, gaps, follow-up research
-Best for: Literature review, research planning
-```
-
----
-
-## Creating Custom Transformations
-
-### Step-by-Step
-
-```
-1. Go to "Transformations" page
-2. Click "Create New"
-3. Enter a name: "Academic Paper Analysis"
-4. Write your prompt template:
-
-   "Analyze this academic paper and extract:
-
-   1. **Research Question**: What problem does this address?
-   2. **Hypothesis**: What did they predict?
-   3. **Methodology**: How did they test it?
-   4. **Key Findings**: What did they discover? (numbered list)
-   5. **Limitations**: What caveats do the authors mention?
-   6. **Future Work**: What do they suggest next?
-
-   Be specific and cite page numbers where possible."
-
-5. Click "Save"
-6. Your transformation appears in the list
-```
-
-### Prompt Template Tips
-
-**Be specific about format:**
-```
-Good: "List 5 key points as bullet points"
-Bad: "What are the key points?"
-```
-
-**Request structure:**
-```
-Good: "Create sections for: Summary, Methods, Results"
-Bad: "Tell me about this paper"
-```
-
-**Ask for citations:**
-```
-Good: "Cite page numbers for each claim"
-Bad: (no citation request)
-```
-
-**Set length expectations:**
-```
-Good: "In 200-300 words, summarize..."
-Bad: "Summarize this"
-```
-
----
-
-## Applying Transformations
-
-### To a Single Source
-
-```
-1. In Sources panel, click source menu (⋮)
-2. Select "Transform"
-3. Choose transformation template
-4. Click "Apply"
-5. Note appears when done
-```
-
-### To Multiple Sources (Batch)
-
-```
-1. Go to Transformations page
-2. Select your template
-3. Check multiple sources
-4. Click "Apply to Selected"
-5. Processing runs in parallel
-6. One note per source created
-```
-
-### Processing Time
-
-| Sources | Typical Time |
-|---------|--------------|
-| 1 source | 30 seconds - 1 minute |
-| 5 sources | 2-3 minutes |
-| 10 sources | 4-5 minutes |
-| 20+ sources | 8-10 minutes |
-
-Processing runs in background. You can continue working.
-
----
-
-## Transformation Examples
-
-### Literature Review Template
-
-```
-Name: Literature Review Entry
-
-Prompt:
-"For this research paper, create a literature review entry:
-
-**Citation**: [Author(s), Year, Title, Journal]
-**Research Question**: What problem is addressed?
-**Methodology**: What approach was used?
-**Sample**: What population/data was studied?
-**Key Findings**:
-1. [Finding with page citation]
-2. [Finding with page citation]
-3. [Finding with page citation]
-**Strengths**: What did this study do well?
-**Limitations**: What are the gaps?
-**Relevance**: How does this connect to my research?
-
-Keep each section to 2-3 sentences."
-```
-
-### Meeting Notes Template
-
-```
-Name: Meeting Summary
-
-Prompt:
-"From this meeting transcript, extract:
-
-**Attendees**: Who was present
-**Date/Time**: When it occurred
-**Key Decisions**: What was decided (numbered)
-**Action Items**:
-- [ ] Task (Owner, Due Date)
-**Open Questions**: Unresolved issues
-**Next Steps**: What happens next
-
-Format as clear, scannable notes."
-```
-
-### Competitor Analysis Template
-
-```
-Name: Competitor Analysis
-
-Prompt:
-"Analyze this company/product document:
-
-**Company**: Name and overview
-**Products/Services**: What they offer
-**Target Market**: Who they serve
-**Pricing**: If available
-**Strengths**: Competitive advantages
-**Weaknesses**: Gaps or limitations
-**Opportunities**: How we compare
-**Threats**: What they do better
-
-Be objective and cite specific details."
-```
-
-### Technical Documentation Template
-
-```
-Name: API Documentation Summary
-
-Prompt:
-"Extract from this technical document:
-
-**Overview**: What does this do? (1-2 sentences)
-**Authentication**: How to authenticate
-**Key Endpoints**:
-- Endpoint 1: [method] [path] - [purpose]
-- Endpoint 2: ...
-**Common Parameters**: Frequently used params
-**Rate Limits**: If mentioned
-**Error Codes**: Key error responses
-**Example Usage**: Simple code example if possible
-
-Keep technical but concise."
-```
+You can edit or delete any of them.
 
 ---
 
 ## Managing Transformations
 
-### Edit a Transformation
+Go to **Manage → Transformations**. The **Transformations** tab lists them under **Custom Transformations**; a **Default** badge marks the ones suggested for new sources.
 
-```
-1. Go to Transformations page
-2. Find your template
-3. Click "Edit"
-4. Modify the prompt
-5. Click "Save"
-```
+### Create or edit
 
-### Delete a Transformation
+Click **Create New** (or **Edit** on a card) and fill in:
 
-```
-1. Go to Transformations page
-2. Find the template
-3. Click "Delete"
-4. Confirm
-```
+| Field | Meaning |
+|-------|---------|
+| **Name** | Unique identifier, for example `key_topics` |
+| **Title** | The name shown in the UI and given to the insights it creates (defaults to the name) |
+| **Description** | What it does |
+| **System Prompt** | The instructions. The source's full text is sent after them |
+| **Model** | The model to use. **System Default** uses your **Transformation Model** default (or the Chat Model) |
+| **Suggest by default on new sources** | Pre-selects it in the Add Source wizard |
 
-### Reorder/Organize
+Write the prompt with the source in mind: ask for a summary, a list, a table, or any structured output. The output is saved as Markdown.
 
-Built-in transformations appear first, then custom ones alphabetically.
+### Test in the Playground
+
+The **Playground** tab (or **Playground** on a card) lets you pick a transformation and a model, paste **Input Text**, and click **Run Transformation**. The output is shown but not saved anywhere, so it's a safe place to tune a prompt.
+
+### Default Transformation Prompt
+
+The **Default Transformation Prompt** box at the top of the Transformations tab is meant to be added to every transformation prompt. In v1.15.0 the text is saved but not applied when transformations run, so put shared instructions in each transformation's prompt instead.
 
 ---
 
-## Transformation Output
+## Errors
 
-### Where Results Go
+| Message | Cause |
+|---------|-------|
+| *This source has no text content to transform* / *Source has no text content* | Extraction produced no text (for example a failed link). Fix the source first |
+| *The model reached its generation limit before completing the transformation...* | The output was cut off. Use a shorter prompt or a model with a larger output limit |
+| *The model returned no usable text for the transformation...* | The model returned nothing, or only thinking content. Try another model |
 
-- Each source produces one note
-- Notes appear in your notebook's Notes panel
-- Notes are tagged with transformation name
-- Original source is linked
-
-### Note Naming
-
-```
-Default: "[Transformation Name] - [Source Title]"
-Example: "Summary - Research Paper 2025.pdf"
-```
-
-### Editing Output
-
-```
-1. Click the generated note
-2. Click "Edit"
-3. Refine the content
-4. Save
-```
+When you run a transformation from the Insights tab and it fails, an error toast shows the reason and no insight is saved. If a transformation selected in the Add Source wizard fails, the source's processing job fails with it and the source shows **Failed** (see [When a Source Fails](adding-sources.md#when-a-source-fails)). Provider and model problems are covered in [Troubleshooting](../6-TROUBLESHOOTING/index.md).
 
 ---
 
-## Best Practices
+## Tips
 
-### Template Design
-
-1. **Start specific** - Vague prompts give vague results
-2. **Use formatting** - Headings, bullets, numbered lists
-3. **Request citations** - Make results verifiable
-4. **Set length** - Prevent overly long or short output
-5. **Test first** - Run on one source before batch
-
-### Source Selection
-
-1. **Similar content** - Same transformation on similar sources
-2. **Reasonable size** - Very long sources may need splitting
-3. **Processed status** - Ensure sources are fully processed
-
-### Quality Control
-
-1. **Review samples** - Check first few outputs before trusting batch
-2. **Edit as needed** - Transformations are starting points
-3. **Iterate prompts** - Refine based on results
-
----
-
-## Common Issues
-
-### Generic Output
-
-**Problem**: Results are too vague
-**Solution**: Make prompt more specific, add format requirements
-
-### Missing Information
-
-**Problem**: Key details not extracted
-**Solution**: Explicitly ask for what you need in prompt
-
-### Inconsistent Format
-
-**Problem**: Each note looks different
-**Solution**: Add clear formatting instructions to prompt
-
-### Too Long/Short
-
-**Problem**: Output doesn't match expectations
-**Solution**: Specify word count or section lengths
-
-### Processing Fails
-
-**Problem**: Transformation doesn't complete
-**Solution**:
-- Check source is processed
-- Try shorter/simpler prompt
-- Process sources individually
-
----
-
-## Transformations vs. Chat vs. Ask
-
-| Feature | Transformations | Chat | Ask |
-|---------|----------------|------|-----|
-| **Input** | Predefined template | Your questions | Your question |
-| **Scope** | One source at a time | Selected sources | Auto-searched |
-| **Output** | Structured note | Conversation | Comprehensive answer |
-| **Best for** | Batch processing | Exploration | One-shot answers |
-| **Follow-up** | Run again | Ask more | New query |
-
----
-
-## Summary
-
-```
-Transformations = Batch AI Processing
-
-How to use:
-1. Define template (or use built-in)
-2. Select sources
-3. Apply transformation
-4. Get structured notes
-
-When to use:
-- Same analysis on many sources
-- Consistent output needed
-- Building structured knowledge base
-- Saving time on repetitive tasks
-
-Tips:
-- Be specific in prompts
-- Request formatting
-- Test before batch
-- Edit output as needed
-```
-
-Transformations turn repetitive analysis into one-click operations. Define once, apply many times.
+- **Keep summaries short if you chat with insights.** A source set to *Insights only* sends all its insights with every chat message.
+- **One job per transformation.** "Key arguments" and "Open questions" as two transformations give cleaner insights than one prompt asking for both.
+- **Large sources** over about 105,000 tokens are sent to your **Large Context Model**, regardless of the transformation's model.
diff --git a/docs/3-USER-GUIDE/working-with-notes.md b/docs/3-USER-GUIDE/working-with-notes.md
index 02f56230..63868aae 100644
--- a/docs/3-USER-GUIDE/working-with-notes.md
+++ b/docs/3-USER-GUIDE/working-with-notes.md
@@ -1,581 +1,53 @@
-# Working with Notes - Capturing and Organizing Insights
+# Working with Notes - Capturing What You Learn
 
-Notes are your processed knowledge. This guide covers how to create, organize, and use them effectively.
+A note is a piece of Markdown text in a notebook: something you wrote, or an AI answer you kept. Each note has a title, content, and a badge showing whether it is **Human** or **AI Generated**.
+
+Notes are different from **insights**: insights are generated by transformations and attached to a source, while notes belong to a notebook. See [Notebooks, Sources, Insights, and Notes](../2-CORE-CONCEPTS/notebooks-sources-notes.md).
 
 ---
 
-## What Are Notes?
+## Creating Notes
 
-Notes are your **research output** — the insights you capture from analyzing sources. They can be:
+### Write one yourself
 
-- **Manual** — You write them yourself
-- **AI-Generated** — From Chat responses, Ask results, or Transformations
-- **Hybrid** — AI insight + your edits and additions
+1. In the notebook's **Notes** column, click **Write Note**.
+2. Add a title (optional) and write the content in the Markdown editor.
+3. Click **Create Note**.
 
-Unlike sources (which never change), notes are mutable — you edit, refine, and organize them.
+### Save a chat answer
+
+Under any notebook chat answer, click the **Save to note** icon. The note is created immediately as **AI Generated**, with a title generated from the content by your Transformation Model (or Chat Model). There is no dialog; edit the note afterwards if you want a different title.
+
+### Save an Ask answer
+
+After an Ask answer finishes on the **Ask and Search** page, click **Save to Notebooks**, pick one or more notebooks and click **Save to Notebook**. Each selected notebook gets an **AI Generated** note with the question as its title and the answer as its content.
+
+### Turn an insight into a note
+
+Insights can be copied into a notebook as notes through the API (`POST /api/insights/{insight_id}/save-as-note` with a `notebook_id`). There's no button for this in the UI yet.
 
 ---
 
-## Quick-Start: Create Your First Note
+## Editing and Deleting
 
-### Method 1: Manual Note (Write Yourself)
-
-```
-1. In your notebook, go to "Notes" section
-2. Click "Create New Note"
-3. Give it a title: "Key insights from source X"
-4. Write your content (markdown supported)
-5. Click "Save"
-6. Done! Note appears in your notebook
-```
-
-### Method 2: Save from Chat
-
-```
-1. Have a Chat conversation
-2. Get a good response from AI
-3. Click "Save as Note" button under response
-4. Give the note a title
-5. Add any additional context
-6. Click "Save"
-7. Done! Note appears in your notebook
-```
-
-### Method 3: Apply Transformation
-
-```
-1. Go to "Transformations"
-2. Select a template (or create custom)
-3. Click "Apply to sources"
-4. Select which sources to transform
-5. Wait for processing
-6. New notes automatically appear
-7. Done! Each source produces one note
-```
+- **Edit**: click a note card to open it, change the title or content, and click **Save Note**.
+- **Delete**: open the note card's ⋮ menu, choose **Delete Note** and confirm. This can't be undone.
+- Deleting a notebook deletes its notes.
 
 ---
 
-## Creating Manual Notes
+## Using Notes
 
-### Basic Structure
+- **In notebook chat**: each note has a context icon that switches it between included (full content) and **Not included in chat**. The Notes column's **Context** menu includes or excludes all of them. See [Chat Effectively](chat-effectively.md#choosing-what-the-ai-sees).
+- **In search and Ask**: notes are covered by text search (titles and content) and, once embedded, by vector search and Ask. Notes are embedded automatically when saved, if an Embedding Model is set.
+- **In podcasts**: notes can be selected as episode content. See [Creating Podcasts](creating-podcasts.md).
 
-```
-Title: "What you're capturing"
-       (Make it descriptive)
-
-Content:
-  - Main points
-  - Your analysis
-  - Questions raised
-  - Next steps
-
-Metadata:
-  - Tags: How to categorize
-  - Related sources: Which documents influenced this
-  - Date: Auto-added when created
-```
-
-### Markdown Support
-
-You can format notes with markdown:
-
-```markdown
-# Heading
-## Subheading
-### Sub-subheading
-
-**Bold text** for emphasis
-*Italic text* for secondary emphasis
-
-- Bullet lists
-- Like this
-
-1. Numbered lists
-2. Like this
-
-> Quotes and important callouts
-
-[Links work](https://example.com)
-```
-
-### Example Note Structure
-
-```markdown
-# Key Findings from "AI Safety Paper 2025"
-
-## Main Argument
-The paper argues that X approach is better than Y because...
-
-## Methodology
-The authors use [methodology] to test this hypothesis.
-
-## Key Results
-- Result 1: [specific finding with citation]
-- Result 2: [specific finding with citation]
-- Result 3: [specific finding with citation]
-
-## Gaps & Limitations
-1. The paper assumes X, which might not hold in Y scenario
-2. Limited to Z population/domain
-3. Future work needed on A, B, C
-
-## My Thoughts
-- This connects to previous research on...
-- Potential application in...
-
-## Next Steps
-- [ ] Read the referenced paper on X
-- [ ] Find similar studies on Y
-- [ ] Discuss implications with team
-```
+Notes can't be used as input to transformations; transformations only run on sources. To work with a long note that way, add its text as a source with **Enter Text**.
 
 ---
 
-## AI-Generated Notes: Three Sources
+## Tips
 
-### 1. Save from Chat
-
-```
-Workflow:
-  Chat → Good response → "Save as Note"
-         → Edit if needed → Save
-
-When to use:
-  - AI response answers your question well
-  - You want to keep the answer for reference
-  - You're building a knowledge base from conversations
-
-Quality:
-  - Quality = quality of your Chat question
-  - Better context = better responses = better notes
-  - Ask specific questions for useful notes
-```
-
-### 2. Save from Ask
-
-```
-Workflow:
-  Ask → Comprehensive answer → "Save as Note"
-      → Edit if needed → Save
-
-When to use:
-  - You need a one-time comprehensive answer
-  - You want to save the synthesized result
-  - Building a knowledge base of comprehensive answers
-
-Quality:
-  - System automatically found relevant sources
-  - Results already have citations
-  - Often higher quality than Chat (more thorough)
-```
-
-### 3. Transformations (Batch Processing)
-
-```
-Workflow:
-  Define transformation → Apply to sources → Notes auto-created
-                      → Review & edit → Organize
-
-Example Transformation:
-  Template: "Extract: main argument, methodology, key findings"
-  Apply to: 5 sources
-  Result: 5 new notes with consistent structure
-
-When to use:
-  - Same extraction from many sources
-  - Building structured knowledge base
-  - Creating consistent summaries
-```
-
----
-
-## Using Transformations for Batch Insights
-
-### Built-in Transformations
-
-Open Notebook comes with presets:
-
-**Summary**
-```
-Extracts: Main points, key arguments, conclusions
-Output: 200-300 word summary of source
-Best for: Quick reference summaries
-```
-
-**Key Concepts**
-```
-Extracts: Main ideas, concepts, terminology
-Output: List of concepts with explanations
-Best for: Learning and terminology
-```
-
-**Methodology**
-```
-Extracts: Research approach, methods, data
-Output: How the research was conducted
-Best for: Academic sources, methodology review
-```
-
-**Takeaways**
-```
-Extracts: Actionable insights, recommendations
-Output: What you should do with this information
-Best for: Practical/business sources
-```
-
-### How to Apply Transformation
-
-```
-1. Go to "Transformations"
-2. Select a template
-3. Click "Apply"
-4. Select which sources (one or many)
-5. Wait for processing (usually 30 seconds - 2 minutes)
-6. New notes appear in your notebook
-7. Edit if needed
-```
-
-### Create Custom Transformation
-
-```
-1. Click "Create Custom Transformation"
-2. Write your extraction template:
-
-   Example:
-   "For this academic paper, extract:
-    - Central research question
-    - Hypothesis tested
-    - Methodology used
-    - Key findings (numbered)
-    - Limitations acknowledged
-    - Recommendations for future work"
-
-3. Click "Save Template"
-4. Apply to one or many sources
-5. System generates notes with consistent structure
-```
-
----
-
-## Organizing Notes
-
-### Naming Conventions
-
-**Option 1: Date-based**
-```
-2026-01-03 - Key points from X source
-2026-01-04 - Comparison between A and B
-Benefit: Easy to see what you did when
-```
-
-**Option 2: Topic-based**
-```
-AI Safety - Alignment approaches
-AI Safety - Interpretability research
-Benefit: Groups by subject matter
-```
-
-**Option 3: Type-based**
-```
-SUMMARY: Paper on X
-QUESTION: What about Y?
-INSIGHT: Connection between Z and W
-Benefit: Easy to filter by type
-```
-
-**Option 4: Source-based**
-```
-From: Paper A - Main insights
-From: Video B - Interesting implications
-Benefit: Easy to trace back to sources
-```
-
-**Best practice:** Combine approaches
-```
-[Date] [Source] - [Topic] - [Type]
-2026-01-03 - Paper A - AI Safety - Takeaways
-```
-
-### Using Tags
-
-Tags are labels for categorization. Add them when creating notes:
-
-```
-Example tags:
-  - "primary-research" (direct source analysis)
-  - "background" (supporting material)
-  - "methodology" (about research methods)
-  - "insights" (your original thinking)
-  - "questions" (open questions raised)
-  - "follow-up" (needs more work)
-  - "published" (ready to share/use)
-```
-
-**Benefits of tags:**
-- Filter notes by tag
-- Find all notes of a type
-- Organize workflow (e.g., find all "follow-up" notes)
-
-### Note Linking & References
-
-You can reference sources within notes:
-
-```markdown
-# Analysis of Paper A
-
-As shown in Paper A (see "main argument" section),
-the authors argue that...
-
-## Related Sources
-- Paper B discusses similar approach
-- Video C shows practical application
-- My note on "Comparative analysis" has more
-```
-
----
-
-## Editing and Refining Notes
-
-### Improving AI-Generated Notes
-
-```
-AI Note:
-  "The paper discusses machine learning"
-
-What you might change:
-  "The paper proposes a supervised learning approach
-   to classification problems, using neural networks
-   with attention mechanisms (see pp. 15-18)."
-
-How to edit:
-  1. Click note
-  2. Click "Edit"
-  3. Refine the content
-  4. Click "Save"
-```
-
-### Adding Citations
-
-```
-When saving from Chat/Ask:
-  - Citations auto-added
-  - Shows which sources informed answer
-  - You can verify by clicking
-
-When manual notes:
-  - Add manually: "From Paper A, page 15: ..."
-  - Or reference: "As discussed in [source]"
-```
-
----
-
-## Searching Your Notes
-
-Notes are fully searchable:
-
-### Text Search
-```
-Find exact phrase: "attention mechanism"
-Results: All notes containing that phrase
-Use when: Looking for specific terms or quotes
-```
-
-### Vector/Semantic Search
-```
-Find concept: "How do models understand?"
-Results: Notes about interpretability, mechanistic understanding, etc.
-Use when: Exploring conceptually (words not exact)
-```
-
-### Combined Search
-```
-Text search notes → Find keyword matches
-Vector search notes → Find conceptual matches
-Both work across sources + notes together
-```
-
----
-
-## Exporting and Sharing Notes
-
-### Options
-
-**Copy to clipboard**
-```
-Click "Share" → "Copy" → Paste anywhere
-Good for: Sharing one note via email/chat
-```
-
-**Export as Markdown**
-```
-Click "Share" → "Export as MD" → Saves as .md file
-Good for: Sharing with others, version control
-```
-
-**Create note collection**
-```
-Select multiple notes → "Export collection"
-→ Creates organized markdown document
-Good for: Sharing a topic overview
-```
-
-**Publish to web**
-```
-Click "Publish" → Get shareable link
-Good for: Publishing publicly (if desired)
-```
-
----
-
-## Organizing Your Notebook's Notes
-
-### By Research Phase
-
-**Phase 1: Discovery**
-- Initial summaries
-- Questions raised
-- Interesting findings
-
-**Phase 2: Deep Dive**
-- Detailed analysis
-- Comparative insights
-- Methodology reviews
-
-**Phase 3: Synthesis**
-- Connections across sources
-- Original thinking
-- Conclusions
-
-### By Content Type
-
-**Summaries**
-- High-level overviews
-- Generated by transformations
-- Quick reference
-
-**Questions**
-- Open questions
-- Things to research more
-- Gaps to fill
-
-**Insights**
-- Your original analysis
-- Connections made
-- Conclusions reached
-
-**Tasks**
-- Follow-up research
-- Sources to add
-- People to contact
-
----
-
-## Using Notes in Other Features
-
-### In Chat
-
-```
-You can reference notes:
-"Based on my note 'Key findings from A',
-how does this compare to B?"
-
-Notes become part of context.
-Treated like sources but smaller/more focused.
-```
-
-### In Transformations
-
-```
-Notes can be transformed:
-1. Select notes as input
-2. Apply transformation
-3. Get new derived notes
-
-Example: Transform 5 analysis notes → Create synthesis
-```
-
-### In Podcasts
-
-```
-Notes are used to create podcast content:
-1. Generate podcast for notebook
-2. System includes notes in content selection
-3. Notes become part of episode outline
-```
-
----
-
-## Best Practices
-
-### For Manual Notes
-1. **Write clearly** — Future you will appreciate it
-2. **Add context** — Why this matters, not just what it says
-3. **Link to sources** — You can verify later
-4. **Date them** — Track your thinking over time
-5. **Tag immediately** — Don't defer organization
-
-### For AI-Generated Notes
-1. **Review before saving** — Verify quality
-2. **Edit for clarity** — AI might miss nuance
-3. **Add your thoughts** — Make it your own
-4. **Include citations** — Understand sources
-5. **Organize right away** — While context is fresh
-
-### For Organization
-1. **Consistent naming** — Your future self will thank you
-2. **Tag everything** — Makes filtering later much easier
-3. **Link related notes** — Create knowledge network
-4. **Review periodically** — Refactor as understanding evolves
-5. **Archive old notes** — Keep working space clean
-
----
-
-## Common Mistakes
-
-| Mistake | Problem | Solution |
-|---------|---------|----------|
-| Save every Chat response | Notebook becomes cluttered with low-quality notes | Only save good responses that answer your questions |
-| Don't add tags | Can't find notes later | Tag immediately when creating |
-| Poor note titles | Can't remember what's in them | Use descriptive titles, include key concept |
-| Never link notes together | Miss connections between ideas | Add references to related notes |
-| Forget the source | Can't verify claims later | Always link back to source |
-| Never edit AI notes | Keep generic AI responses | Refine for clarity and context |
-| Create one giant note | Too long to be useful | Split into focused notes by subtopic |
-
----
-
-## Summary: Note Lifecycle
-
-```
-1. CREATE
-   ├─ Manual: Write from scratch
-   ├─ From Chat: Save good response
-   ├─ From Ask: Save synthesis
-   └─ From Transform: Batch process
-
-2. EDIT & REFINE
-   ├─ Improve clarity
-   ├─ Add context
-   ├─ Fix AI mistakes
-   └─ Add citations
-
-3. ORGANIZE
-   ├─ Name clearly
-   ├─ Add tags
-   ├─ Link related
-   └─ Categorize
-
-4. USE
-   ├─ Reference in Chat
-   ├─ Transform for synthesis
-   ├─ Export for sharing
-   └─ Build on with new questions
-
-5. MAINTAIN
-   ├─ Periodically review
-   ├─ Update as understanding grows
-   ├─ Archive when done
-   └─ Learn from organized knowledge
-```
-
-Your notes become your actual knowledge base. The more you invest in organizing them, the more valuable they become.
+- **Write a short summary at the top** of long notes. It helps you and the model.
+- **Clean up saved answers.** AI answers often include filler; trimming them keeps chat context small when the note is included.
+- **Keep the notebook description current.** It is sent to the model in every notebook chat, which helps the AI understand what your notes are about.

From 95f76e5a59fbff0ffb451de7c9f1b150fc616496 Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 23:28:50 -0300
Subject: [PATCH 344/345] docs: complete env reference; troubleshooting keyed
 on real error messages (#1461)

* docs: complete env reference; troubleshooting keyed on real error messages

Configuration (docs/5-CONFIGURATION):
- environment-reference.md is now the single complete list, checked
  against the code and the content-core, esperanto, surreal-commands and
  langsmith libraries: adds the undocumented variables, a "Read by"
  column, correct defaults (SURREAL_COMMANDS_RETRY_ENABLED=false,
  WAIT_MAX=60, LANGCHAIN_PROJECT=default, SurrealDB defaults), which
  legacy provider vars Migrate to Database copies, and a table of
  variables nothing reads.
- security.md: PBKDF2 derivation, POST /api/credentials/migrate-encryption
  with the back-up-first / no-downgrade warning, password stored in
  localStorage, full list of unauthenticated paths, real upload endpoint.
- reverse-proxy.md: drop v1.0 legacy sections and the non-existent
  multi-container images; real /api/config output; how API_URL
  auto-detection works; the 100 MB Next.js proxy cap.
- ai-providers.md, ollama.md, openai-compatible.md: one shared setup
  procedure with current UI labels, provider/modality table from
  provider_registry.py, no stale model lists or prices; Ollama
  num_ctx and 180 s ESPERANTO_LLM_TIMEOUT; Azure form limits.
- local-tts.md is the shared Speaches page; local-stt.md keeps only
  STT specifics (Whisper models, CCORE_AUDIO_SEGMENT_MINUTES).
- advanced.md, index.md, database.md: link to the reference instead of
  re-listing variables; fix service names, port changes, backups.

Troubleshooting (docs/6-TROUBLESHOOTING):
- Entries start with the exact message from the code or the en-US
  locale. New processing-issues.md covers queued/failed sources (the
  content-core failure reasons), uploads, search, podcasts (profile
  errors and NOTE hints). ai-chat-issues.md covers timeouts, error
  classifier messages, empty responses, Ollama context, encryption
  key and decryption errors.
- Removed invented entries ("too many connections", "Model is not a
  LanguageModel: None", soft delete, retry vars as a connection fix).

SECURITY_REVIEW.md is marked as a historical January 2026 snapshot of
the credentials UI, with the SSRF and security-warning rows corrected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address review on configuration and troubleshooting pages

- No predictable keys or passwords: placeholders plus the openssl /
  PowerShell generation commands used by the install docs.
- Every 0.0.0.0 bind and firewall rule (Ollama, OpenAI-compatible
  servers, Speaches, LAN access) restricted to the host and Docker
  networks or the LAN, with an explicit exposure warning.
- Diagnostic commands no longer print secrets.
- systemd drop-in includes [Service]; Traefik middleware attached to
  the router.
- Provider pages link to Connect a provider (#1459) instead of
  repeating steps; Vertex and keyless local providers called out;
  "Add Selected" (a select-all toggle) no longer described as the add
  button; "Manage -> Models" instead of "the Models page".
- Startup database failure described correctly (API down, not the
  Database Connection Failed overlay); worker crash causes, Test
  timeout/404 meanings, .env overrides when moving servers, frontend
  restart from source, privacy claims scoped to self-hosted servers.
- Drop claims about bugs fixed in #1457; restore the ollama.md
  GPU acceleration anchor used by quick-start-local.md.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: address second review round on configuration pages

- Anthropic Compatible always needs an API key and a Base URL
  (enforced in api/models.py), noted in the provider differences.
- Speaches firewall guidance covers a separate Open Notebook host.
- The password check mirrors get_secret_from_env: a readable,
  non-empty _FILE wins, otherwise the variable; never prints values.
- From source, frontend variables go in frontend/.env.local or the
  shell: `make frontend` runs `next dev` in frontend/, which doesn't
  read the root .env.
- The env listing prints every variable name, without values.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: correct the default API path for the frontend; deduplicate

Without API_URL the browser calls <host>:5055 directly (the /config
route auto-detects it); INTERNAL_API_URL only serves requests that hit
the Next.js /api forwarding. Full explanation stays in the environment
reference; the configuration index links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* docs: upload limit depends on whether API calls go through the frontend proxy

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 docs/5-CONFIGURATION/advanced.md              | 583 +++--------
 docs/5-CONFIGURATION/ai-providers.md          | 751 ++------------
 docs/5-CONFIGURATION/database.md              |  80 +-
 docs/5-CONFIGURATION/environment-reference.md | 503 ++++------
 docs/5-CONFIGURATION/index.md                 | 374 ++-----
 docs/5-CONFIGURATION/local-stt.md             | 379 +------
 docs/5-CONFIGURATION/local-tts.md             | 344 ++-----
 docs/5-CONFIGURATION/mcp-integration.md       |   8 +-
 docs/5-CONFIGURATION/ollama.md                | 765 ++------------
 docs/5-CONFIGURATION/omlx.md                  |  18 +-
 docs/5-CONFIGURATION/openai-compatible.md     | 400 ++------
 docs/5-CONFIGURATION/reverse-proxy.md         | 940 ++++--------------
 docs/5-CONFIGURATION/security.md              | 469 +++------
 docs/6-TROUBLESHOOTING/ai-chat-issues.md      | 530 +++-------
 docs/6-TROUBLESHOOTING/connection-issues.md   | 559 +++--------
 docs/6-TROUBLESHOOTING/faq.md                 | 256 ++---
 docs/6-TROUBLESHOOTING/index.md               | 284 ++----
 docs/6-TROUBLESHOOTING/processing-issues.md   | 157 +++
 docs/6-TROUBLESHOOTING/quick-fixes.md         | 365 ++-----
 docs/SECURITY_REVIEW.md                       |  81 +-
 20 files changed, 1832 insertions(+), 6014 deletions(-)
 create mode 100644 docs/6-TROUBLESHOOTING/processing-issues.md

diff --git a/docs/5-CONFIGURATION/advanced.md b/docs/5-CONFIGURATION/advanced.md
index 95e13df9..d2ffd06e 100644
--- a/docs/5-CONFIGURATION/advanced.md
+++ b/docs/5-CONFIGURATION/advanced.md
@@ -1,565 +1,260 @@
 # Advanced Configuration
 
-Performance tuning, debugging, and advanced features.
+Performance tuning, ports, logging, backups and container management. Every variable mentioned here is described in the [Environment Reference](environment-reference.md); this page explains when to change them.
+
+With Docker Compose, variables go under the `open_notebook` service's `environment:` block and take effect with `docker compose up -d` (`docker compose restart` keeps the old environment).
 
 ---
 
 ## Performance Tuning
 
-### Concurrency Control
+### Worker concurrency
 
-```env
-# Max background tasks the worker runs at once (default: 5)
-# Increase: faster bulk processing, more load on your models and database
-# Decrease: slower, gentler on local models and rate limits
-OPEN_NOTEBOOK_WORKER_MAX_TASKS=5
-```
+`OPEN_NOTEBOOK_WORKER_MAX_TASKS` (default `5`) is how many background jobs run at once: source processing, embeddings, insights, transformations and podcasts.
 
-**Guidelines:**
-- Local LLM on a single GPU → 1 (sequential)
-- Cloud providers with rate limits → 2-3
-- Cloud providers, plenty of quota → 5 (default) or more
+| Setup | Value |
+|-------|-------|
+| Local model on a single GPU (Ollama, LM Studio) | `1` |
+| Cloud provider with tight rate limits | `2`–`3` |
+| Cloud provider with plenty of quota | `5` (default) or more |
 
-It is read when the worker starts, so restart the worker (or recreate the container) after changing it. Higher concurrency = more throughput but more database conflicts (retries handle this).
+Higher values process bulk uploads faster but send more parallel requests to your models and cause more SurrealDB transaction conflicts. Conflicts are retried automatically (source processing up to 15 times).
 
-### Retry Strategy
+The value is read when the worker starts. In Docker, recreate the container (`docker compose up -d`). From source, `export` it in your shell before `make worker-start`.
 
-```env
-# How to wait between retries
-SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
+### Model call timeout
 
-# Options:
-# - exponential_jitter (recommended)
-# - exponential
-# - fixed
-# - random
-```
+`ESPERANTO_LLM_TIMEOUT` (default `180` seconds) limits each language-model call and applies to every provider, Ollama included. When a call runs out of time, the user sees an error and the job or chat message fails.
 
-For high-concurrency deployments, use `exponential_jitter` to prevent thundering herd.
+- Slow local models (large models on CPU, first load of a model): raise it, for example `ESPERANTO_LLM_TIMEOUT=420`.
+- Keep it **below 600**. The web UI waits 10 minutes for a response (`NEXT_PUBLIC_API_TIMEOUT_MS`), and that value is compiled into the published images. Reverse proxies need read timeouts of at least 600 seconds too (see [Reverse Proxy → Timeouts](reverse-proxy.md#timeouts)).
 
-### Timeout Tuning
+Speech has its own timeouts: `ESPERANTO_TTS_TIMEOUT` (300 s, podcast audio) and `CCORE_STT_TIMEOUT` (3600 s, transcription of audio and video sources).
 
-```env
-# Timeout for each model call (default: 180 seconds)
-ESPERANTO_LLM_TIMEOUT=180
-```
+### Podcast audio
 
-`ESPERANTO_LLM_TIMEOUT` limits each model call (chat, Ask, transformations, podcast outline and transcript) and applies to every provider, including Ollama. Open Notebook sets it to 180 seconds when you don't; set it yourself to change it. Speech-to-text and text-to-speech have their own, longer timeouts.
+`TTS_BATCH_SIZE` (default `5`) is how many text-to-speech requests a podcast sends in parallel. Lower it to `1` or `2` for self-hosted TTS servers and providers with strict concurrency limits; generation gets slower but stops failing on rate limits.
 
-The web UI waits up to 10 minutes for a response (`NEXT_PUBLIC_API_TIMEOUT_MS`, default `600000`; `0` disables it). For requests that wait for a complete answer, such as notebook chat, that is a total budget. Ask streams its answer and only gives up after 10 minutes without new output. The value is compiled into the frontend at build time, so in the published Docker images it is fixed at 10 minutes, and changing it means building the frontend yourself.
+### Embeddings
 
-**Guideline:** keep `ESPERANTO_LLM_TIMEOUT` below 600 seconds, so a slow model fails with a clear error before the UI gives up.
-
-```
-Example (slow local models):
-  ESPERANTO_LLM_TIMEOUT=420
-```
+For CPU-only or strict OpenAI-compatible embedding servers, lower `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` (default `50`). Chunking is controlled by `OPEN_NOTEBOOK_CHUNK_SIZE` (400 tokens) and `OPEN_NOTEBOOK_CHUNK_OVERLAP` (15%). After changing chunking or the embedding model, rebuild embeddings from the **Advanced** page.
 
 ---
 
-## Batching
+## Ports
 
-### TTS Batch Size
+| Service | Port | Notes |
+|---------|------|-------|
+| Web UI | 8502 (Docker), 3000 (`npm run dev` from source) | |
+| API | 5055 | |
+| SurrealDB | 8000 | Published on `127.0.0.1` only in the shipped compose file |
 
-For podcast generation, control concurrent TTS requests:
+### Changing the web UI port
 
-```env
-# Default: 5
-TTS_BATCH_SIZE=2
-```
-
-**Providers and recommendations:**
-- OpenAI: 5 (can handle many concurrent)
-- Google: 4 (good concurrency)
-- ElevenLabs: 2 (limited concurrent requests)
-- Local TTS: 1 (single-threaded)
-
-Lower = slower but more stable. Higher = faster but more load on provider.
-
----
-
-## Logging & Debugging
-
-### Enable Detailed Logging
-
-```bash
-# Start with debug logging
-RUST_LOG=debug  # For Rust components
-LOGLEVEL=DEBUG  # For Python components
-```
-
-### Debug Specific Components
-
-```bash
-# Only surreal operations
-RUST_LOG=surrealdb=debug
-
-# Only langchain
-LOGLEVEL=langchain:debug
-
-# Only specific module
-RUST_LOG=open_notebook::database=debug
-```
-
-### LangSmith Tracing
-
-For debugging LLM workflows:
-
-```env
-LANGCHAIN_TRACING_V2=true
-LANGCHAIN_ENDPOINT="https://api.smith.langchain.com"
-LANGCHAIN_API_KEY=your-key
-LANGCHAIN_PROJECT="Open Notebook"
-```
-
-Then visit https://smith.langchain.com to see traces.
-
----
-
-## Port Configuration
-
-### Default Ports
-
-```
-Frontend: 8502 (Docker deployment)
-Frontend: 3000 (Development from source)
-API: 5055
-SurrealDB: 8000
-```
-
-### Changing Frontend Port
-
-Edit `docker-compose.yml`:
+Change the host side of the mapping:
 
 ```yaml
 services:
-  open-notebook:
+  open_notebook:
     ports:
-      - "8001:8502"  # Change from 8502 to 8001
+      - "8001:8502"   # UI now at http://localhost:8001
+      - "5055:5055"
 ```
 
-Access at: `http://localhost:8001`
+The API address is still auto-detected as `<host>:5055`, so nothing else changes.
 
-API auto-detects to: `http://localhost:5055` ✓
-
-### Changing API Port
+### Changing the API port
 
 ```yaml
 services:
-  open-notebook:
+  open_notebook:
     ports:
-      - "127.0.0.1:8502:8502"  # Frontend
-      - "5056:5055"            # Change API from 5055 to 5056
+      - "8502:8502"
+      - "5056:5055"   # API published on 5056
     environment:
-      - API_URL=http://localhost:5056  # Update API_URL
+      - API_URL=http://localhost:5056   # the address the browser uses
 ```
 
-Access API directly: `http://localhost:5056/docs`
+Auto-detection assumes port 5055, so set `API_URL` whenever the API is published elsewhere. Inside the container the API always listens on 5055.
 
-**Note:** When changing API port, you must set `API_URL` explicitly since auto-detection assumes port 5055.
+### Changing the SurrealDB port
 
-### Changing SurrealDB Port
+Only the host side of the mapping changes. Containers talk to each other on the compose network, where SurrealDB stays on 8000, so `SURREAL_URL=ws://surrealdb:8000/rpc` stays as it is:
 
 ```yaml
 services:
   surrealdb:
     ports:
-      - "127.0.0.1:8001:8000"  # Change from 8000 to 8001 (localhost only)
+      - "127.0.0.1:8001:8000"   # host tools (Surrealist, surreal sql) now use 8001
+```
+
+---
+
+## SSL for Self-Signed Providers
+
+If a provider endpoint (Ollama behind a proxy, an internal OpenAI-compatible server) uses a certificate your container doesn't trust, mount the CA bundle and point `ESPERANTO_SSL_CA_BUNDLE` at it:
+
+```yaml
+services:
+  open_notebook:
     environment:
-      - SURREAL_URL=ws://surrealdb:8001/rpc  # Update connection URL
+      - ESPERANTO_SSL_CA_BUNDLE=/certs/ca-bundle.pem
+    volumes:
+      - /path/to/ca-bundle.pem:/certs/ca-bundle.pem:ro
 ```
 
-**Important:** Internal Docker network uses container name (`surrealdb`), not `localhost`.
+This covers model calls and the credential **Test Connection** and model discovery. `ESPERANTO_SSL_VERIFY=false` turns verification off entirely; use it only for short tests on a trusted network.
 
 ---
 
-## SSL/TLS Configuration
+## Logging & Debugging
 
-### Custom CA Certificate
+### Application logs
 
-For self-signed certs on local providers:
-
-```env
-ESPERANTO_SSL_CA_BUNDLE=/path/to/ca-bundle.pem
-```
-
-### Disable Verification (Development Only)
-
-```env
-# WARNING: Only for testing/development
-# Vulnerable to MITM attacks
-ESPERANTO_SSL_VERIFY=false
-```
-
----
-
-## Multi-Provider Setup
-
-### Use Different Providers for Different Tasks
-
-Configure multiple AI providers via **Manage → Models**. Each provider gets its own credential:
-
-1. Add a credential for your main language model provider (e.g., OpenAI, Anthropic)
-2. Add a credential for embeddings (e.g., Voyage AI, or use the same provider)
-3. Add a credential for TTS (e.g., ElevenLabs, or OpenAI-Compatible for local Speaches)
-4. Each credential's models are registered and available independently
-
-### Multiple Endpoints for OpenAI-Compatible
-
-When using OpenAI-Compatible providers, you can configure per-service URLs in a single credential:
-
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **OpenAI-Compatible**
-3. Configure separate URLs for LLM, Embedding, TTS, and STT
-4. Click **Save**, then **Test Connection**
-
----
-
-## Security Hardening
-
-### Change Default Credentials
-
-```env
-# Don't use defaults in production
-SURREAL_USER=your_secure_username
-SURREAL_PASSWORD=$(openssl rand -base64 32)  # Generate secure password
-```
-
-### Add Password Protection
-
-```env
-# Protect your Open Notebook instance
-OPEN_NOTEBOOK_PASSWORD=your_secure_password
-```
-
-### Use HTTPS
-
-```env
-# Always use HTTPS in production
-API_URL=https://mynotebook.example.com
-```
-
-### Firewall Rules
-
-Restrict access to your Open Notebook:
-- Port 8502 (frontend): Only from your IP
-- Port 5055 (API): Only from frontend
-- Port 8000 (SurrealDB): Never expose to internet
-
----
-
-## Web Scraping & Content Extraction
-
-Open Notebook uses multiple engines for content extraction. Which one runs is chosen in **Settings → Content Processing** (see the user-guide page on [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md)); the variables below configure them.
-
-### Firecrawl
-
-For advanced web scraping:
-
-```env
-FIRECRAWL_API_KEY=your-key
-
-# Optional: self-hosted Firecrawl instance
-FIRECRAWL_API_URL=https://firecrawl.internal.example.com
-
-# Optional: bypass anti-bot protection (basic | stealth | auto)
-CCORE_FIRECRAWL_PROXY=auto
-
-# Optional: ms to wait for JavaScript to render (default 3000)
-CCORE_FIRECRAWL_WAIT_FOR=3000
-```
-
-Get key from: https://firecrawl.dev/
-
-### Jina AI
-
-Alternative web extraction:
-
-```env
-JINA_API_KEY=your-key
-```
-
-Get key from: https://jina.ai/
-
-### Crawl4AI
-
-Renders JavaScript pages in a local Chromium browser — no API key required. Crawl4AI is **optional**: enable it with `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` and it installs on first startup (the Chromium download is cached on your data volume). To offload rendering to a remote Crawl4AI server instead — no local install needed:
-
-```env
-CRAWL4AI_API_URL=http://crawl4ai.example.com:11235
-# Required by Crawl4AI Docker >= 0.9.0 (bearer token for external connections)
-CRAWL4AI_API_TOKEN=your-crawl4ai-token
-```
-
-See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai) for details.
-
----
-
-## Environment Variable Groups
-
-### Credential Storage (Required)
-```env
-OPEN_NOTEBOOK_ENCRYPTION_KEY    # Required for storing credentials
-```
-
-AI provider API keys are configured via **Manage → Models** (not environment variables).
-
-### Database
-```env
-SURREAL_URL
-SURREAL_USER
-SURREAL_PASSWORD
-SURREAL_NAMESPACE
-SURREAL_DATABASE
-```
-
-### Performance
-```env
-OPEN_NOTEBOOK_WORKER_MAX_TASKS
-SURREAL_COMMANDS_RETRY_ENABLED
-SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS
-SURREAL_COMMANDS_RETRY_WAIT_STRATEGY
-SURREAL_COMMANDS_RETRY_WAIT_MIN
-SURREAL_COMMANDS_RETRY_WAIT_MAX
-```
-
-### API Settings
-```env
-API_URL
-INTERNAL_API_URL
-ESPERANTO_LLM_TIMEOUT
-NEXT_PUBLIC_API_TIMEOUT_MS  # build time only
-```
-
-### Audio/TTS
-```env
-TTS_BATCH_SIZE
-```
-
-> **Note:** `ELEVENLABS_API_KEY` is deprecated. Configure ElevenLabs via **Manage → Models**.
-
-### Debugging
-```env
-LANGCHAIN_TRACING_V2
-LANGCHAIN_ENDPOINT
-LANGCHAIN_API_KEY
-LANGCHAIN_PROJECT
-```
-
----
-
-## Testing Configuration
-
-### Quick Test
+All three processes (API, worker, frontend) log to the container output:
 
 ```bash
-# Test API health
-curl http://localhost:5055/health
-
-# Test with sample (requires configured credential and registered models)
-curl -X POST http://localhost:5055/api/chat \
-  -H "Content-Type: application/json" \
-  -d '{"message":"Hello"}'
+docker compose logs -f open_notebook
+docker compose logs --since 10m open_notebook | grep -iE "error|warning"
 ```
 
-### Validate Config
+Set `LOGURU_LEVEL=INFO` (or `WARNING`) to hide debug lines from the API and worker. The worker log includes content-core's extraction messages, which is where the full reason for a failed source appears.
+
+### SurrealDB logs
+
+The database log level is the `--log` argument in the `surrealdb` service's `command:` (`info` in the shipped compose file; `debug` and `trace` are more verbose).
 
 ```bash
-# Check environment variables are set
-env | grep OPEN_NOTEBOOK_ENCRYPTION_KEY
-
-# Verify database connection
-python -c "import os; print(os.getenv('SURREAL_URL'))"
+docker compose logs -f surrealdb
 ```
 
+### LangSmith tracing
+
+To inspect the LangGraph workflows (chat, Ask, transformations):
+
+```yaml
+environment:
+  - LANGSMITH_TRACING=true
+  - LANGSMITH_API_KEY=your-key
+  - LANGSMITH_PROJECT=open-notebook   # optional; default "default"
+```
+
+Traces include your prompts and source content. The older `LANGCHAIN_*` names also work.
+
 ---
 
-## Troubleshooting Performance
+## Content Extraction Engines
 
-### High Memory Usage
+Which engine extracts URLs and documents is chosen in **Settings → Content Processing** (see [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md)). Engines that need configuration:
 
-```env
-# Reduce concurrency
-OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
+- **Firecrawl:** `FIRECRAWL_API_KEY`, optionally `FIRECRAWL_API_URL` for a self-hosted instance.
+- **Jina:** `JINA_API_KEY` (optional).
+- **Crawl4AI:** `OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true` installs it in the container on first start; or point `CRAWL4AI_API_URL` (and `CRAWL4AI_API_TOKEN`) at a remote Crawl4AI server.
+- **Docling:** `OPEN_NOTEBOOK_ENABLE_DOCLING=true` installs it on first start.
+- **YouTube blocked:** `CCORE_YOUTUBE_PROXY` or `CCORE_YOUTUBE_COOKIES_FILE`.
 
-# Reduce TTS batch size
-TTS_BATCH_SIZE=1
-```
+Details and defaults: [Environment Reference → Content extraction](environment-reference.md#content-extraction).
 
-### High CPU Usage
+---
 
-```env
-# Check worker concurrency
-OPEN_NOTEBOOK_WORKER_MAX_TASKS
+## Using Several Providers
 
-# Reduce if maxed out:
-OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
-```
+Each provider gets its own credential in **Manage → Models**, and every registered model is tied to the credential it came from. A common split:
 
-### Slow Responses
+- Chat and transformations from one provider (for example Anthropic, which has no embedding models)
+- Embeddings from another (OpenAI, Google, Voyage AI, Mistral, Ollama…)
+- Text-to-speech from a third (ElevenLabs, or a local Speaches server through OpenAI Compatible)
 
-```env
-# Give slow models more time per call (keep below 600)
-ESPERANTO_LLM_TIMEOUT=420
+Then pick a model for each role under **Default Model Assignments** on the same page.
 
-# Check retry config
-SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=3
-```
-
-### Database Conflicts
-
-```env
-# Reduce concurrency
-OPEN_NOTEBOOK_WORKER_MAX_TASKS=3
-
-# Use jitter strategy
-SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
-```
+To use several OpenAI-compatible servers (say, LM Studio for chat and Speaches for speech), add one **OpenAI Compatible** credential per server, each with its own **Base URL**. See [OpenAI-Compatible Providers](openai-compatible.md).
 
 ---
 
 ## Backup & Restore
 
-### Data Locations
+### What to back up
 
-| Path | Contents |
-|------|----------|
-| `./data` or `/app/data` | Uploads, podcasts, checkpoints |
-| `./surreal_data` or `/mydata` | SurrealDB database files |
+With the shipped compose file, everything lives in two directories next to `docker-compose.yml`:
 
-### Quick Backup
+| Host directory | Container path | Contents |
+|----------------|----------------|----------|
+| `./notebook_data` | `/app/data` (open_notebook) | Uploaded files, podcast audio, chat checkpoints, caches |
+| `./surreal_data` | `/mydata` (surrealdb) | The SurrealDB database |
+
+The single-container image keeps the database in `./surreal_single_data` instead (see `examples/docker-compose-single.yml`). Also keep `OPEN_NOTEBOOK_ENCRYPTION_KEY` somewhere safe and separate: without it, the stored provider keys in a restored database can't be decrypted.
+
+### Backup
 
 ```bash
-# Stop services (recommended for consistency)
+# Stop for a consistent copy of the database
 docker compose down
-
-# Create timestamped backup
-tar -czf backup-$(date +%Y%m%d-%H%M%S).tar.gz \
-  notebook_data/ surreal_data/
-
-# Restart services
+tar -czf open-notebook-$(date +%Y%m%d-%H%M%S).tar.gz notebook_data/ surreal_data/
 docker compose up -d
 ```
 
-### Automated Backup Script
+Take a backup before every upgrade. Some upgrades change data in ways older versions can't read (for example the v1.15.0 credential encryption, see [Security](security.md#upgrading-to-pbkdf2-v1150)), and restoring a backup is the only way back.
+
+A daily cron job:
 
 ```bash
 #!/bin/bash
-# backup.sh - Run daily via cron
-
-BACKUP_DIR="/path/to/backups"
+# backup.sh
+cd /path/to/open-notebook            # the directory with docker-compose.yml
+BACKUP_DIR=/path/to/backups
 DATE=$(date +%Y%m%d-%H%M%S)
 
-# Create backup
-tar -czf "$BACKUP_DIR/open-notebook-$DATE.tar.gz" \
-  /path/to/notebook_data \
-  /path/to/surreal_data
+docker compose down
+tar -czf "$BACKUP_DIR/open-notebook-$DATE.tar.gz" notebook_data/ surreal_data/
+docker compose up -d
 
-# Keep only last 7 days
+# Keep the last 7 days
 find "$BACKUP_DIR" -name "open-notebook-*.tar.gz" -mtime +7 -delete
-
-echo "Backup complete: open-notebook-$DATE.tar.gz"
 ```
 
-Add to cron:
 ```bash
-# Daily backup at 2 AM
 0 2 * * * /path/to/backup.sh >> /var/log/open-notebook-backup.log 2>&1
 ```
 
 ### Restore
 
 ```bash
-# Stop services
 docker compose down
-
-# Remove old data (careful!)
-rm -rf notebook_data/ surreal_data/
-
-# Extract backup
-tar -xzf backup-20240115-120000.tar.gz
-
-# Restart services
+mv notebook_data notebook_data.old && mv surreal_data surreal_data.old
+tar -xzf open-notebook-20260115-020000.tar.gz
 docker compose up -d
 ```
 
-### Migration Between Servers
+Restore with the same image version you backed up from, or a newer one. Database migrations run automatically on startup and only move forward.
 
-```bash
-# On source server
-docker compose down
-tar -czf open-notebook-migration.tar.gz notebook_data/ surreal_data/
+### Moving to another server
 
-# Transfer to new server
-scp open-notebook-migration.tar.gz user@newserver:/path/
-
-# On new server
-tar -xzf open-notebook-migration.tar.gz
-docker compose up -d
-```
+Copy the backup archive, your `docker-compose.yml` (with the same `OPEN_NOTEBOOK_ENCRYPTION_KEY`), and the `.env` file next to it or any other environment overrides (custom `SURREAL_USER`/`SURREAL_PASSWORD` live there; without them the stack falls back to `root`/`root` and can't sign in to your database). Extract the archive next to them and run `docker compose up -d`.
 
 ---
 
 ## Container Management
 
-### Common Commands
+The shipped compose file has two services: `surrealdb` and `open_notebook`. The API, worker and frontend are processes inside `open_notebook`, so they are started, stopped and logged together.
 
 ```bash
-# Start services
-docker compose up -d
-
-# Stop services
-docker compose down
-
-# View logs (all services)
-docker compose logs -f
-
-# View logs (specific service)
-docker compose logs -f api
-
-# Restart specific service
-docker compose restart api
-
-# Update to latest version
-docker compose down
-docker compose pull
-docker compose up -d
-
-# Check resource usage
-docker stats
-
-# Check service health
-docker compose ps
+docker compose up -d                    # start, or apply changes to docker-compose.yml
+docker compose ps                       # status
+docker compose logs -f open_notebook    # app logs (API, worker, frontend)
+docker compose logs -f surrealdb        # database logs
+docker compose restart open_notebook    # restart without changing configuration
+docker compose down                     # stop (data in ./notebook_data and ./surreal_data stays)
+docker compose pull && docker compose up -d   # update to the latest image (back up first)
+docker stats                            # CPU and memory per container
 ```
 
-### Clean Up
-
-```bash
-# Remove stopped containers
-docker compose rm
-
-# Remove unused images
-docker image prune
-
-# Full cleanup (careful!)
-docker system prune -a
-```
+`docker compose down -v` does not delete your data either: the shipped file uses bind mounts, not named volumes. To start from scratch, stop the stack and delete `./notebook_data` and `./surreal_data` yourself.
 
 ---
 
-## Summary
+## Related
 
-**Most deployments need:**
-- One AI provider API key
-- Default database settings
-- Default timeouts
-
-**Tune performance only if:**
-- You have specific bottlenecks
-- High-concurrency workload
-- Custom hardware (very fast or very slow)
-
-**Advanced features:**
-- Firecrawl for better web scraping
-- LangSmith for debugging workflows
-- Custom CA bundles for self-signed certs
+- [Environment Reference](environment-reference.md) — every variable, default and consumer
+- [Security](security.md) — password, encryption key, CORS
+- [Reverse Proxy](reverse-proxy.md) — HTTPS and custom domains
+- [Troubleshooting](../6-TROUBLESHOOTING/index.md)
diff --git a/docs/5-CONFIGURATION/ai-providers.md b/docs/5-CONFIGURATION/ai-providers.md
index 58adf077..4c55c8a1 100644
--- a/docs/5-CONFIGURATION/ai-providers.md
+++ b/docs/5-CONFIGURATION/ai-providers.md
@@ -1,494 +1,147 @@
 # AI Providers - Configuration Guide
 
-Complete setup instructions for each AI provider via the **Settings UI**.
+Open Notebook supports 24 AI providers. You connect them in the web UI under **Manage → Models**; their keys are stored encrypted in the database.
 
-> **New in v1.2**: All AI provider credentials are now managed through the Settings UI. Environment variables for API keys are deprecated.
+> **Prerequisite:** `OPEN_NOTEBOOK_ENCRYPTION_KEY` must be set before you can save a provider key. See [Security](security.md#api-key-encryption).
 
 ---
 
-## How Provider Setup Works
+## Setting up any provider
 
-Open Notebook uses a **credential-based system** for managing AI providers:
+The step-by-step procedure (Add Configuration → Test → Models → Default Model Assignments) is in [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider). What differs between providers is the form:
 
-1. **Get your API key** from the provider's website
-2. Open **Manage** → **Models** → **Add Credential**
-3. **Test the connection** to verify it works
-4. **Discover & Register Models** to make them available
-5. **Start using** the provider in your notebooks
+- **API-key providers** (most cloud providers): get a key from the link in the table below (the form also shows a **Get API Key** link). Leave **Base URL** empty unless you need a regional or self-hosted endpoint.
+- **Google Vertex AI**: no API key; the form asks for a project, a region and an optional service-account file. See [Google Vertex AI](#google-vertex-ai).
+- **Anthropic Compatible**: needs both an **API Key** and a **Base URL** (the service's API root); there is no default endpoint. See [Anthropic Compatible](#anthropic-compatible).
+- **Ollama, oMLX and OpenAI Compatible**: the API key is optional; **Base URL** is what matters. See [Ollama](ollama.md), [oMLX](omlx.md) and [OpenAI-Compatible](openai-compatible.md).
 
-> **Prerequisite**: You must set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your docker-compose.yml before storing credentials. See [API Configuration](../3-USER-GUIDE/api-configuration.md#encryption-setup) for details.
+When **Test** fails, it shows the reason, for example "Invalid API key" or "Cannot connect to server. Check the URL is correct." (see [AI & Chat Issues → Test fails](../6-TROUBLESHOOTING/ai-chat-issues.md#test-fails)). In the **Discover Models** dialog, a model that isn't listed can be added by typing its exact id in the search box and clicking **Add "…"**.
+
+Chat fails until a **Chat Model** is assigned, and search, Ask and embedding need an **Embedding Model**. Podcasts need a text-to-speech model on each speaker profile.
+
+You can add several configurations per provider (for example separate keys for work and personal use). Each registered model belongs to the configuration it was discovered from.
 
 ---
 
-## Cloud Providers (Recommended for Most)
+## Providers and what they offer
+
+The modalities are what a new configuration offers by default. If your main provider has no embedding or speech models, add a second provider for those.
+
+| Provider (as shown in the UI) | Language | Embedding | Speech-to-text | Text-to-speech | Get a key |
+|-------------------------------|:-:|:-:|:-:|:-:|-----------|
+| OpenAI | ✓ | ✓ | ✓ | ✓ | [platform.openai.com](https://platform.openai.com/api-keys) |
+| Anthropic | ✓ | | | | [console.anthropic.com](https://console.anthropic.com/settings/keys) |
+| Google AI (Gemini) | ✓ | ✓ | ✓ | ✓ | [aistudio.google.com](https://aistudio.google.com/app/apikey) |
+| Google Vertex AI | ✓ | ✓ | | ✓ | [Google Cloud](https://cloud.google.com/vertex-ai/docs/start/cloud-environment) |
+| Azure OpenAI | ✓ | ✓ | ✓ | ✓ | [Azure portal](https://portal.azure.com/#view/Microsoft_Azure_ProjectOxford/CognitiveServicesHub/~/OpenAI) |
+| Groq | ✓ | | ✓ | | [console.groq.com](https://console.groq.com/keys) |
+| Mistral AI | ✓ | ✓ | ✓ | ✓ | [console.mistral.ai](https://console.mistral.ai/api-keys/) |
+| DeepSeek | ✓ | | | | [platform.deepseek.com](https://platform.deepseek.com/api_keys) |
+| xAI (Grok) | ✓ | | | ✓ | [console.x.ai](https://console.x.ai/) |
+| OpenRouter | ✓ | ✓ | ✓ | ✓ | [openrouter.ai](https://openrouter.ai/keys) |
+| DashScope (Qwen) | ✓ | | | | [Alibaba Model Studio](https://help.aliyun.com/zh/model-studio/getting-started/) |
+| MiniMax | ✓ | | | ✓ | [platform.minimaxi.com](https://platform.minimaxi.com/document/Guides) |
+| Novita | ✓ | | | | [novita.ai](https://novita.ai/settings/key-management) |
+| SiliconFlow | ✓ | | | | [cloud.siliconflow.com](https://cloud.siliconflow.com/account/ak) |
+| Z.ai | ✓ | | | | [z.ai](https://z.ai/manage-apikey/apikey-list) |
+| PayPerQ | ✓ | ✓ | ✓ | ✓ | [ppq.ai](https://ppq.ai) |
+| Cohere | ✓ | ✓ | | | [dashboard.cohere.com](https://dashboard.cohere.com/api-keys) |
+| Voyage AI | | ✓ | | | [dash.voyageai.com](https://dash.voyageai.com/api-keys) |
+| ElevenLabs | | | ✓ | ✓ | [elevenlabs.io](https://elevenlabs.io/app/settings/api-keys) |
+| Deepgram | | | ✓ | ✓ | [console.deepgram.com](https://console.deepgram.com/) |
+| Ollama | ✓ | ✓ | | | local, see [Ollama](ollama.md) |
+| oMLX | ✓ | ✓ | | | local, see [oMLX](omlx.md) |
+| OpenAI Compatible | ✓ | ✓ | ✓ | ✓ | your server, see [OpenAI-Compatible](openai-compatible.md) |
+| Anthropic Compatible | ✓ | | | | your server |
+
+This page doesn't list models or prices: they change faster than the docs. **Discover Models** shows what your key can access, and each provider's site has current pricing.
+
+---
+
+## Cloud Providers
 
 ### OpenAI
 
-**Cost:** ~$0.03-0.15 per 1K tokens (varies by model)
-
-**Get Your API Key:**
-1. Go to https://platform.openai.com/api-keys
-2. Create account (if needed)
-3. Create new API key (starts with "sk-proj-")
-4. Add $5+ credits to account
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **OpenAI**
-4. Give it a name (e.g., "My OpenAI Key")
-5. Paste your API key
-6. Click **Save**, then **Test Connection**
-7. Click **Discover Models** to find available models
-8. Click **Register Models** to make them available
-
-**Available Models (in Open Notebook):**
-- `gpt-4o` — Best quality, fast (latest version)
-- `gpt-4o-mini` — Fast, cheap, good for testing
-- `o1` — Advanced reasoning model (slower, more expensive)
-- `o1-mini` — Faster reasoning model
-
-**Recommended:**
-- For general use: `gpt-4o` (best balance)
-- For testing/cheap: `gpt-4o-mini` (90% cheaper)
-- For complex reasoning: `o1` (best for hard problems)
-
-**Cost Estimate:**
-```
-Light use: $1-5/month
-Medium use: $10-30/month
-Heavy use: $50-100+/month
-```
-
-**Troubleshooting:**
-- "Invalid API key" → Check key starts with "sk-proj-" and test the connection in Manage → Models
-- "Rate limit exceeded" → Wait or upgrade account
-- "Model not available" → Try gpt-4o-mini instead, or re-discover models
-
----
+Covers every modality with one key, which makes it the simplest single-provider setup: chat, embeddings, podcast voices and transcription. Keys are created at [platform.openai.com](https://platform.openai.com/api-keys); the account needs credit.
 
 ### Anthropic (Claude)
 
-**Cost:** ~$0.80-3.00 per 1M tokens (cheaper than OpenAI for long context)
-
-**Get Your API Key:**
-1. Go to https://console.anthropic.com/
-2. Create account or login
-3. Go to API keys section
-4. Create new API key (starts with "sk-ant-")
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Anthropic**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models:**
-- `claude-sonnet-4-5-20250929` — Latest, best quality (recommended)
-- `claude-3-5-sonnet-20241022` — Previous generation, still excellent
-- `claude-3-5-haiku-20241022` — Fast, cheap
-- `claude-opus-4-5-20251101` — Most powerful, expensive
-
-**Recommended:**
-- For general use: `claude-sonnet-4-5` (best overall, latest)
-- For cheap: `claude-3-5-haiku` (80% cheaper)
-- For complex: `claude-opus-4-5` (most capable)
-
-**Cost Estimate:**
-```
-Sonnet: $3-20/month (typical use)
-Haiku: $0.50-3/month
-Opus: $10-50+/month
-```
-
-**Advantages:**
-- Great long-context support (200K tokens)
-- Excellent reasoning
-- Fast processing
-
-**Troubleshooting:**
-- "Invalid API key" → Check it starts with "sk-ant-" and test in Manage → Models
-- "Overloaded" → Anthropic is busy, retry later
-- "Model unavailable" → Re-discover models from the credential
-
----
+Language models only. Pair it with another provider for embeddings (and for speech if you want podcasts or transcription).
 
 ### Anthropic Compatible
 
-Use this provider for services that implement the Anthropic Messages API at a custom URL.
-
-1. Go to **Manage** → **Models**
-2. Add an **Anthropic Compatible** credential
-3. Enter the provider's API key and base URL (the API root, with or without a trailing `/v1`)
-4. Save and test the connection
-5. Discover models, or search for and manually register a model if the endpoint does not list them
-
-Only language models are supported for Anthropic-compatible credentials.
-
----
+For services that implement the Anthropic Messages API at their own URL. Enter the API key and the **Base URL** (the API root, with or without a trailing `/v1`). Language models only. If the endpoint doesn't list models, add the model id by hand in the Discover Models dialog.
 
 ### Google Gemini
 
-**Cost:** ~$0.075-0.30 per 1K tokens (competitive with OpenAI)
+Shown as **Google AI** in the UI. Uses a Gemini API key from Google AI Studio and offers all four modalities.
 
-**Get Your API Key:**
-1. Go to https://aistudio.google.com/app/apikey
-2. Create account or login
-3. Create new API key
+### Google Vertex AI
 
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Google Gemini**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models:**
-- `gemini-2.5-pro` — Strongest, best for long context (1M tokens)
-- `gemini-3.5-flash` — Fast, good for general use
-- `gemini-3.1-flash-lite` — Fastest and cheapest
-- `gemini-2.5-flash` — Previous-gen stable, cheaper
-
-**Recommended:**
-- For general use: `gemini-3.5-flash` (best value, latest)
-- For cheap: `gemini-3.1-flash-lite` (very cheap)
-- For complex/long context: `gemini-2.5-pro` (1M token context)
-
-**Advantages:**
-- Very long context (1M tokens)
-- Multimodal (images, audio, video)
-- Good for podcasts
-
-**Troubleshooting:**
-- "API key invalid" → Get fresh key from aistudio.google.com
-- "Quota exceeded" → Free tier limited, upgrade account
-- "Model not found" → Re-discover models from the credential
-
----
+Uses Google Cloud instead of an API key. The form asks for **GCP Project ID**, **Region** and **Service Account JSON Path**, the path to the service-account file **inside the container** (mount it as a volume).
 
 ### Groq
 
-**Cost:** ~$0.05 per 1M tokens (cheapest, but limited models)
+Fast hosted inference of open-weight models; language and speech-to-text.
 
-**Get Your API Key:**
-1. Go to https://console.groq.com/keys
-2. Create account or login
-3. Create new API key
+### Mistral AI
 
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Groq**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
+Language, embedding and speech models from one key.
 
-**Available Models:**
-- `llama-3.3-70b-versatile` — Best on Groq (recommended)
-- `llama-3.1-70b-versatile` — Fast, capable
-- `mixtral-8x7b-32768` — Good alternative
-- `gemma2-9b-it` — Small, very fast
+### DeepSeek
 
-**Recommended:**
-- For quality: `llama-3.3-70b-versatile` (best overall)
-- For speed: `gemma2-9b-it` (ultra-fast)
-- For balance: `llama-3.1-70b-versatile`
+Language models only.
 
-**Advantages:**
-- Ultra-fast inference
-- Very cheap
-- Great for transformations/batch work
+### xAI (Grok)
 
-**Disadvantages:**
-- Limited model selection
-- Smaller models than OpenAI/Anthropic
-
-**Troubleshooting:**
-- "Rate limited" → Free tier has limits, upgrade
-- "Model not available" → Re-discover models from the credential
-
----
+Language and text-to-speech.
 
 ### OpenRouter
 
-**Cost:** Varies by model ($0.05-15 per 1M tokens)
-
-**Get Your API Key:**
-1. Go to https://openrouter.ai/keys
-2. Create account or login
-3. Add credits to your account
-4. Create new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **OpenRouter**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models (100+ options):**
-- OpenAI: `openai/gpt-4o`, `openai/o1`
-- Anthropic: `anthropic/claude-sonnet-4.5`, `anthropic/claude-3.5-haiku`
-- Google: `google/gemini-3.5-flash`, `google/gemini-2.5-pro`
-- Meta: `meta-llama/llama-3.3-70b-instruct`, `meta-llama/llama-3.1-405b-instruct`
-- Mistral: `mistralai/mistral-large-2411`
-- DeepSeek: `deepseek/deepseek-chat`
-- And many more...
-
-**Speech Models (Text-to-Speech & Speech-to-Text):**
-OpenRouter also exposes audio models. Discovery seeds working defaults; add any
-other `vendor/model` id manually via the custom-model input.
-- Text-to-Speech: `microsoft/mai-voice-2` (uses Microsoft neural voice names such
-  as `en-US-AvaNeural`, not OpenAI's `alloy`/`nova` set)
-- Speech-to-Text: `openai/whisper-1`, `openai/whisper-large-v3`
-
-**Recommended:**
-- For quality: `anthropic/claude-sonnet-4.5` (best overall)
-- For speed/cost: `google/gemini-2.5-flash` (very fast, cheap)
-- For open-source: `meta-llama/llama-3.3-70b-instruct`
-- For reasoning: `openai/o1`
-
-**Advantages:**
-- One API key for 100+ models
-- Unified billing
-- Easy model comparison
-- Access to models that may have waitlists elsewhere
-
-**Cost Estimate:**
-```
-Light use: $1-5/month
-Medium use: $10-30/month
-Heavy use: Depends on models chosen
-```
-
-**Troubleshooting:**
-- "Invalid API key" → Check it starts with "sk-or-"
-- "Insufficient credits" → Add credits at openrouter.ai
-- "Model not available" → Check model ID spelling (use full path)
-
----
+One key for models from many vendors, with unified billing. Model ids include the vendor (`vendor/model`). OpenRouter also serves speech models; Discover Models suggests `microsoft/mai-voice-2` for text-to-speech (it uses Microsoft neural voice names such as `en-US-AvaNeural`, not OpenAI's `alloy`/`nova`) and `openai/whisper-1` / `openai/whisper-large-v3` for speech-to-text.
 
 ### DashScope (Qwen)
 
-**Cost:** ~$0.01-0.06 per 1K tokens (varies by model)
-
-**Get Your API Key:**
-1. Go to https://dashscope.console.aliyun.com/
-2. Create an Alibaba Cloud account (if needed)
-3. Navigate to API Keys section
-4. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **DashScope (Qwen)**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models:**
-- `qwen-max` — Most capable Qwen model
-- `qwen-plus` — Good balance of quality and speed
-- `qwen-turbo` — Fastest, cheapest
-
-**Recommended:**
-- For quality: `qwen-max` (best overall)
-- For general use: `qwen-plus` (good balance)
-- For speed/cost: `qwen-turbo` (cheapest)
-
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the DashScope console
-- "Model not available" → Re-discover models from the credential
-
----
+Alibaba Cloud's Qwen models; language only.
 
 ### MiniMax
 
-**Cost:** Varies by model
+Language models (`MiniMax-M3` with a 1M-token context, also used for the connection test) and text-to-speech (`speech-2.8-hd`, `speech-2.8-turbo`; Discover Models lists both).
 
-**Get Your API Key:**
-1. Go to https://platform.minimaxi.com/
-2. Create an account (if needed)
-3. Navigate to API Keys section
-4. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **MiniMax**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models:**
-- Language: `MiniMax-M3` (1M-token context), `MiniMax-M2.5` and `MiniMax-M2.5-highspeed` (204K)
-- Text-to-speech: `speech-2.8-hd` (quality) and `speech-2.8-turbo` (faster). Discover Models lists both
-
-**Recommended:**
-- Chat and transformations: `MiniMax-M3`
-- Podcasts: `speech-2.8-hd` as the speaker profile's voice model
-
-**Text-to-speech voices:**
-In a speaker profile, set the **Voice ID** to a MiniMax voice id, for example `English_Graceful_Lady`. System voices, and voices you cloned or generated in your MiniMax account, all work. The ids are listed in the MiniMax platform's voice library.
-
-**Region:**
-MiniMax API keys are region-specific. Mainland China keys need the credential's **Base URL** set to `https://api.minimax.cn/v1`. The default is the international `https://api.minimax.io/v1`, and the same Base URL is used for chat and text-to-speech. Env-based setups use `MINIMAX_BASE_URL` (migrated into the credential's Base URL).
-
-**Advantages:**
-- Very long context (1M tokens on M3)
-- Chat and podcast voices from one key
-- Competitive pricing
-
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the MiniMax platform, and that its region matches the Base URL
-- "Model not available" → Re-discover models from the credential
-- Podcast fails with a voice error → Check the speaker's Voice ID against your account's voices
-
----
-
-### Cohere
-
-**Cost:** Usage-based
-
-**Get Your API Key:**
-1. Go to https://dashboard.cohere.com/api-keys
-2. Create an account (if needed)
-3. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Cohere**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Available Models:**
-- `command-a-03-2025` — Latest Command language model
-- `embed-v4.0` — Latest embedding model (assign the **Embedding** type when registering)
-
-**Notes:**
-- Cohere uses its native v2 API (`/v2/chat`, `/v2/embed`), not an OpenAI-compatible endpoint.
-- Reranking is not yet available in Open Notebook (tracked separately).
-
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the Cohere dashboard
-- "Model not available" → Re-discover models from the credential
-
----
+- **Voices:** in a speaker profile, set **Voice ID** to a MiniMax voice id such as `English_Graceful_Lady`. System voices and voices you cloned or designed in your MiniMax account all work.
+- **Region:** MiniMax keys are region-specific. Mainland China keys need **Base URL** `https://api.minimax.cn/v1`; the default is the international `https://api.minimax.io/v1`. The same Base URL is used for chat and speech.
 
 ### Novita
 
-**Cost:** Pay-per-model (competitive)
-
-**Get Your API Key:**
-1. Go to https://novita.ai/settings/key-management
-2. Create an account (if needed)
-3. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Novita**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Notes:**
-- Novita is an OpenAI-compatible gateway (`https://api.novita.ai/openai`) for open-weight LLMs.
-
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the Novita console
-- "Model not available" → Re-discover models from the credential
-
----
+An OpenAI-compatible gateway for open-weight language models.
 
 ### SiliconFlow
 
-**Cost:** Pay-per-model (competitive; some small models are free)
-
-**Get Your API Key:**
-1. Go to https://cloud.siliconflow.com/account/ak (mainland China accounts: https://cloud.siliconflow.cn/account/ak)
-2. Create an account (if needed)
-3. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **SiliconFlow**
-4. Give it a name, paste your API key
-5. **Mainland China account?** Set **Base URL** to `https://api.siliconflow.cn/v1` (the default is the global `https://api.siliconflow.com/v1`)
-6. Click **Save**, then **Test Connection**
-7. Click **Discover Models** → **Register Models**
-
-**Notes:**
-- Hosted DeepSeek, Qwen, GLM and Kimi models behind one OpenAI-compatible key.
-- Language models only for now. Embedding, speech-to-text and text-to-speech through SiliconFlow need support in Esperanto first.
-- Env-based setup: `SILICONFLOW_API_KEY`, plus `SILICONFLOW_BASE_URL` for a mainland China account (migrated into the credential's Base URL).
-
-**Troubleshooting:**
-- "Invalid API key" → Check that the key matches the endpoint: keys from `siliconflow.cn` don't work against the global `.com` endpoint, and vice versa
-- "Model not available" → Re-discover models from the credential
-
----
+Hosted DeepSeek, Qwen, GLM and Kimi models; language only. Mainland China accounts need **Base URL** `https://api.siliconflow.cn/v1` (default: the global `https://api.siliconflow.com/v1`). Keys from one site don't work against the other.
 
 ### Z.ai
 
-**Cost:** Pay-per-token
-
-**Get Your API Key:**
-1. Go to https://z.ai/manage-apikey/apikey-list
-2. Create an account (if needed)
-3. Create a new API key
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Z.ai**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
-
-**Notes:**
-- Z.ai's GLM models (for example `glm-5.2`, also used for the connection test, and `glm-4.5-flash`) are available through an OpenAI-compatible API (`https://api.z.ai/api/paas/v4`). Register the models you want after **Discover Models**.
-- Language models only.
-- Env-based setup: `ZAI_API_KEY`, plus `ZAI_BASE_URL` to point at a different Z.ai endpoint (migrated into the credential's Base URL).
-
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the Z.ai console
-- A model is missing from Discover Models → Type its id (e.g. `glm-4.5-flash`) in the search box and use **Add**
-- "Model not available" → Re-discover models from the credential
-
----
+GLM language models through an OpenAI-compatible API. If a model is missing from Discover Models, type its id (for example `glm-4.5-flash`) and add it by hand.
 
 ### PayPerQ (PPQ)
 
-**Cost:** Pay-as-you-go across the providers it routes to
+A pay-as-you-go gateway offering language, embedding and speech models. Discovered models are classified by name; check the **Model Type** you add them under.
 
-**Get Your API Key:**
-1. Go to https://ppq.ai
-2. Create an account (if needed)
-3. Create a new API key
+### Cohere
 
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **PayPerQ**
-4. Give it a name, paste your API key
-5. Click **Save**, then **Test Connection**
-6. Click **Discover Models** → **Register Models**
+Language (`command-a-03-2025` is used for the connection test) and embedding models through Cohere's own v2 API. Reranking is not used by Open Notebook.
 
-**Notes:**
-- PPQ is a multi-modality OpenAI-compatible gateway (`https://api.ppq.ai/v1`) offering language, embedding, speech-to-text and text-to-speech models.
-- Discovered models are classified by name; adjust the model type when registering if a model lands in the wrong slot.
+### Voyage AI
 
-**Troubleshooting:**
-- "Invalid API key" → Check the key in the PPQ dashboard
-- "Model not available" → Re-discover models from the credential
+Embedding models only. A common choice next to a language-only provider such as Anthropic.
+
+### ElevenLabs
+
+Text-to-speech and speech-to-text. In speaker profiles, use ElevenLabs voice ids.
+
+### Deepgram
+
+Text-to-speech and speech-to-text.
 
 ---
 
@@ -496,156 +149,21 @@ MiniMax API keys are region-specific. Mainland China keys need the credential's
 
 ### Ollama (Recommended for Local)
 
-**Cost:** Free (electricity only)
+Free local language and embedding models. Enter the server address as **Base URL**, for example `http://host.docker.internal:11434` when Open Notebook runs in Docker and Ollama on the host. Ollama credentials also have a **Context Window (num_ctx)** field (default 8192 tokens).
 
-**Setup Ollama:**
-1. Install Ollama: https://ollama.ai
-2. Run Ollama in background: `ollama serve`
-3. Download a model: `ollama pull mistral`
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **Ollama**
-4. Give it a name (e.g., "Local Ollama")
-5. Enter the base URL:
-   - Same machine (non-Docker): `http://localhost:11434`
-   - Docker with Ollama on host: `http://host.docker.internal:11434`
-   - Docker with Ollama container: `http://ollama:11434`
-6. Click **Save**, then **Test Connection**
-7. Click **Discover Models** → **Register Models**
-
-See [Ollama Setup Guide](ollama.md) for detailed network configuration.
-
-**Context Window (`num_ctx`):**
-
-Ollama models default to a **8,192-token** context window. This default is intentionally
-conservative so models run reliably on consumer GPUs (≈8GB VRAM) without running out of memory.
-If your hardware can handle more, set an optional **Context Window (num_ctx)** value on the
-Ollama credential (Manage → Models → edit the Ollama credential). It applies to all models
-that use that credential. Leave it empty to keep the default.
-
-- Raise it (e.g. `32768`) when ingesting large documents or using long chat histories.
-- If you hit "out of memory" errors, lower it or leave it at the default.
-
-**Available Models:**
-- `llama3.3:70b` — Best quality (requires 40GB+ RAM)
-- `llama3.1:8b` — Recommended, balanced (8GB RAM)
-- `qwen2.5:7b` — Excellent for code and reasoning
-- `mistral:7b` — Good general purpose
-- `phi3:3.8b` — Small, fast (4GB RAM)
-- `gemma2:9b` — Google's model, balanced
-- Many more: `ollama list` to see available
-
-**Recommended:**
-- For quality (with GPU): `llama3.3:70b` (best)
-- For general use: `llama3.1:8b` (best balance)
-- For speed/low memory: `phi3:3.8b` (very fast)
-- For coding: `qwen2.5:7b` (excellent at code)
-
-**Hardware Requirements:**
-```
-GPU (NVIDIA/AMD):
-  8GB VRAM: Runs most models fine
-  6GB VRAM: Works, slower
-  4GB VRAM: Small models only
-
-CPU-only:
-  16GB+ RAM: Slow but works
-  8GB RAM: Very slow
-  4GB RAM: Not recommended
-```
-
-**Advantages:**
-- Completely private (runs locally)
-- Free (electricity only)
-- No API key needed
-- Works offline
-
-**Disadvantages:**
-- Slower than cloud (unless on GPU)
-- Smaller models than cloud
-- Requires local hardware
-
-**Troubleshooting:**
-- "Connection refused" → Ollama not running or wrong URL in credential
-- "Model not found" → Download it: `ollama pull modelname`
-- "Out of memory" → Use smaller model or add more RAM
-
----
+Networking, model names, context window and the 180-second timeout are covered in the [Ollama guide](ollama.md).
 
 ### oMLX (Apple Silicon)
 
-**Cost:** Free (electricity only)
-
-**Requirements:** Apple Silicon Mac. oMLX runs on the host (not in Linux containers).
-
-**Setup oMLX:**
-1. Install from [oMLX](https://omlx.ai/) / [jundot/omlx](https://github.com/jundot/omlx)
-2. Run on port **11435** (oMLX’s default `8000` conflicts with SurrealDB):
-   ```bash
-   OMLX_PORT=11435 omlx serve
-   ```
-3. Load models in the oMLX admin UI
-
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **oMLX**
-4. Base URL defaults to `http://localhost:11435/v1` (use `http://host.docker.internal:11435/v1` if Open Notebook is in Docker)
-5. API key is optional (only if you started oMLX with `--api-key`)
-6. Click **Save**, then **Test Connection** → **Discover Models** → **Register Models**
-
-See [oMLX Setup Guide](omlx.md) for port conflict details and troubleshooting.
-
----
+An MLX inference server for M-series Macs, for language and embedding models. Run it on port 11435 (its default 8000 collides with SurrealDB). See the [oMLX guide](omlx.md).
 
 ### LM Studio (Local Alternative)
 
-**Cost:** Free
+Use the **OpenAI Compatible** provider with **Base URL** `http://host.docker.internal:1234/v1` (Open Notebook in Docker) or `http://localhost:1234/v1` (from source). No API key is needed. See [OpenAI-Compatible](openai-compatible.md#lm-studio).
 
-**Setup LM Studio:**
-1. Download LM Studio: https://lmstudio.ai
-2. Open app
-3. Download a model from library
-4. Go to "Local Server" tab
-5. Start server (default port: 1234)
+### Other OpenAI-compatible servers
 
-**Configure in Open Notebook:**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **OpenAI-Compatible**
-4. Give it a name (e.g., "LM Studio")
-5. Enter the base URL: `http://host.docker.internal:1234/v1` (Docker) or `http://localhost:1234/v1` (local)
-6. API key: `lm-studio` (placeholder, LM Studio doesn't require one)
-7. Click **Save**, then **Test Connection**
-
-**Advantages:**
-- GUI interface (easier than Ollama CLI)
-- Good model selection
-- Privacy-focused
-- Works offline
-
-**Disadvantages:**
-- Desktop only (Mac/Windows/Linux)
-- Slower than cloud
-- Requires local GPU
-
----
-
-### Custom OpenAI-Compatible
-
-For Text Generation UI, vLLM, or other OpenAI-compatible endpoints:
-
-1. Go to **Manage** → **Models**
-2. Click **Add Credential**
-3. Select provider: **OpenAI-Compatible**
-4. Enter the base URL for your endpoint (e.g., `http://localhost:8000/v1`)
-5. Enter API key if required
-6. Optionally configure per-service URLs (LLM, Embedding, TTS, STT)
-7. Click **Save**, then **Test Connection**
-
-See [OpenAI-Compatible Setup](openai-compatible.md) for detailed instructions.
+vLLM, llama.cpp, LocalAI, Text Generation WebUI and Speaches all work through **OpenAI Compatible**. See [OpenAI-Compatible](openai-compatible.md) and, for speech, [Local speech with Speaches](local-tts.md).
 
 ---
 
@@ -653,95 +171,32 @@ See [OpenAI-Compatible Setup](openai-compatible.md) for detailed instructions.
 
 ### Azure OpenAI
 
-**Cost:** Same as OpenAI (usage-based)
+1. Create an Azure OpenAI resource and deploy the models you need.
+2. In Manage → Models, add an **Azure OpenAI** configuration with the **API Key**, and put the resource endpoint (`https://<resource>.openai.azure.com`) in **Base URL**.
+3. Register models by **deployment name**.
 
-**Configure in Open Notebook:**
-1. Create Azure OpenAI service in Azure portal
-2. Deploy GPT-4/3.5-turbo model
-3. Get your endpoint and key
-4. Go to **Manage** → **Models**
-5. Click **Add Credential**
-6. Select provider: **Azure OpenAI**
-7. Fill in: API Key, Endpoint, API Version
-8. Optionally configure service-specific endpoints (LLM, Embedding)
-9. Click **Save**, then **Test Connection**
-
-**Advantages:**
-- Enterprise support
-- VPC integration
-- Compliance (HIPAA, SOC2, etc.)
-
-**Disadvantages:**
-- More complex setup
-- Higher overhead
-- Requires Azure account
+The form has no field for the API version or for per-modality endpoints. Model calls fail with "Azure OpenAI API version not found" unless the API version is provided another way: set `AZURE_OPENAI_API_VERSION` in the container environment, or create the credential through the API (`POST /api/credentials` accepts `api_version`, `endpoint_llm`, `endpoint_embedding`, `endpoint_stt` and `endpoint_tts`). Credentials migrated from environment variables carry these values over.
 
 ---
 
-## Embeddings (For Search/Semantic Features)
+## Choosing a setup
 
-By default, Open Notebook uses the LLM provider's embeddings. Embedding models are discovered and registered through the same credential system — when you discover models from a credential, embedding models are included alongside language models.
-
----
-
-## Choosing Your Provider
-
-**1. Don't want to run locally and don't want to mess around with different providers:**
-
-Use OpenAI
-- Cloud-based
-- Good quality
-- Reasonable cost
-- Simplest setup, supports all modes (text, embedding, tts, stt, etc)
-
-**For budget-conscious:** Groq, OpenRouter or Ollama
-- Groq: Super cheap cloud
-- Ollama: Free, but local
-- OpenRouter: many open source models very accessible
-
-**For privacy-first:** Ollama or LM Studio and Speaches ([TTS](local-tts.md), [STT](local-stt.md))
-- Everything stays local
-- Works offline
-- No API keys sent anywhere
-
-**For enterprise:** Azure OpenAI
-- Compliance
-- VPC integration
-- Support
-
----
-
-## Next Steps
-
-1. **Choose your provider** from above
-2. **Get API key** (if cloud) or install locally (if Ollama)
-3. **Set `OPEN_NOTEBOOK_ENCRYPTION_KEY`** in your docker-compose.yml (required for storing credentials)
-4. Open **Manage** → **Models** → **Add Credential**
-5. **Test Connection** to verify it works
-6. **Discover & Register Models** to make them available
-7. **Verify it works** with a test chat
-
-> **Multiple providers**: You can add credentials for as many providers as you want. Create separate credentials for different projects or team members.
-
-Done!
+- **Simplest:** OpenAI alone covers chat, embeddings, podcasts and transcription.
+- **Many models, one bill:** OpenRouter, plus an embedding provider if you prefer a dedicated one.
+- **Fully local:** Ollama (or LM Studio, oMLX) for chat and embeddings, and [Speaches](local-tts.md) for speech.
+- **Language-only provider** (Anthropic, DeepSeek, DashScope, Novita, SiliconFlow, Z.ai): add Voyage AI, OpenAI, Google, Mistral or Ollama for embeddings, and a speech provider for podcasts.
 
 ---
 
 ## Legacy: Environment Variables (Deprecated)
 
-> **Deprecated**: Configuring AI provider API keys via environment variables is deprecated. Use the Settings UI instead. Environment variables may still work as a fallback but are no longer the recommended approach.
-
-If you are migrating from an older version that used environment variables, go to **Manage** → **Models** and click the **Migrate to Database** button to import your existing keys into the credential system.
+Provider keys in environment variables (`OPENAI_API_KEY` and so on) still work as a fallback: the database is checked first, then the environment. They are deprecated and may stop working. If any are set, **Manage → Models** shows **Environment Variables Detected** with a **Migrate to Database** button that copies them into configurations. Which variables are copied is listed in the [Environment Reference](environment-reference.md#legacy-ai-provider-variables-deprecated).
 
 ---
 
 ## Related
 
-- **[API Configuration](../3-USER-GUIDE/api-configuration.md)** — Detailed credential management guide
-- **[Environment Reference](environment-reference.md)** - Complete list of all environment variables
-- **[Advanced Configuration](advanced.md)** - Timeouts, SSL, performance tuning
-- **[Ollama Setup](ollama.md)** - Detailed Ollama configuration guide
-- **[OpenAI-Compatible](openai-compatible.md)** - LM Studio and other compatible providers
-- **[Local TTS Setup](local-tts.md)** - Text-to-speech with Speaches
-- **[Local STT Setup](local-stt.md)** - Speech-to-text with Speaches
-- **[Troubleshooting](../6-TROUBLESHOOTING/quick-fixes.md)** - Common issues and fixes
+- [API Configuration](../3-USER-GUIDE/api-configuration.md) — credentials in **Manage → Models** in detail
+- [Environment Reference](environment-reference.md) — all variables
+- [Ollama](ollama.md), [oMLX](omlx.md), [OpenAI-Compatible](openai-compatible.md), [Local speech](local-tts.md)
+- [AI & Chat Issues](../6-TROUBLESHOOTING/ai-chat-issues.md) — when provider calls fail
diff --git a/docs/5-CONFIGURATION/database.md b/docs/5-CONFIGURATION/database.md
index bc7d7e31..7688b5ce 100644
--- a/docs/5-CONFIGURATION/database.md
+++ b/docs/5-CONFIGURATION/database.md
@@ -1,52 +1,66 @@
 # Database - SurrealDB Configuration
 
-Open Notebook uses SurrealDB for its database needs. 
+Open Notebook stores everything except uploaded files and podcast audio in [SurrealDB](https://surrealdb.com). The API and the background worker both connect to it with the same five variables. Schema migrations run automatically when the API starts.
 
 ---
 
-## Default Configuration
-
-Open Notebook should work out of the box with SurrealDB as long as the environment variables are correctly setup. 
-
-
-### DB running in the same docker compose as Open Notebook (recommended)
-
-The example above is for when you are running SurrealDB as a separate docker container, which is the method described [here](../1-INSTALLATION/docker-compose.md) (and our recommended method). 
+## Connection settings
 
 ```env
-SURREAL_URL="ws://surrealdb:8000/rpc"
-SURREAL_USER="root"
-SURREAL_PASSWORD="root"
-SURREAL_NAMESPACE="open_notebook"
-SURREAL_DATABASE="open_notebook"
+SURREAL_URL=ws://surrealdb:8000/rpc
+SURREAL_USER=root
+SURREAL_PASSWORD=root
+SURREAL_NAMESPACE=open_notebook
+SURREAL_DATABASE=open_notebook
 ```
 
-### DB running in the host machine and Open Notebook running in Docker
+Set all five explicitly. The API and the job queue fall back to different defaults when a variable is missing (`open_notebook` versus `test` for namespace and database), and with mismatched values background jobs never get processed. Defaults and legacy names are in the [Environment Reference](environment-reference.md#database-surrealdb).
 
-If ON is running in docker and SurrealDB is on your host machine, you need to point to it. 
+`SURREAL_USER` and `SURREAL_PASSWORD` must match the `--user` and `--pass` that SurrealDB was started with.
+
+---
+
+## Which `SURREAL_URL` to use
+
+The host in `SURREAL_URL` is the database as seen **from wherever the API and worker run**.
+
+| Open Notebook | SurrealDB | `SURREAL_URL` |
+|---------------|-----------|---------------|
+| Docker Compose (shipped file) | `surrealdb` service in the same compose file | `ws://surrealdb:8000/rpc` |
+| Docker | On the host machine | `ws://host.docker.internal:8000/rpc` (on Linux, add `extra_hosts: ["host.docker.internal:host-gateway"]` to the service) |
+| From source | Docker (`make database`) or installed locally | `ws://localhost:8000/rpc` |
+| Single-container image | Inside the same container | `ws://localhost:8000/rpc` (see [Single Container](../1-INSTALLATION/single-container.md)) |
+| Anywhere | Another machine | `ws://<db-host>:8000/rpc` |
+
+`localhost` inside a container is the container itself, not your machine. Using `ws://localhost:8000/rpc` in the compose setup is the most common reason the API won't start.
+
+The shipped compose file publishes SurrealDB on `127.0.0.1:8000` only, so other machines can't reach it. To connect from elsewhere, re-publish the port deliberately (see `docker-compose.override.yml.example` in the repository root), with real credentials and a firewall or SSH tunnel.
+
+---
+
+## Changing the credentials
+
+With the shipped compose file, put the new values in a `.env` file next to `docker-compose.yml`:
 
 ```env
-SURREAL_URL="ws://your-machine-ip:8000/rpc" #or host.docker.internal
-SURREAL_USER="root"
-SURREAL_PASSWORD="root"
-SURREAL_NAMESPACE="open_notebook"
-SURREAL_DATABASE="open_notebook"
+SURREAL_USER=<your-db-user>
+SURREAL_PASSWORD=<generated-password>
 ```
 
-> **Note:** If SurrealDB runs in Docker with its port published on `127.0.0.1` only (the documented default), it won't be reachable at your machine's IP. Re-publish the port deliberately — see `docker-compose.override.yml.example` in the repo root — behind a firewall or SSH tunnel, with real credentials set.
+Generate the password yourself, for example with `openssl rand -hex 32`. Don't reuse an example value.
 
-### Open Notebook and Surreal are running on the same machine
+The compose file passes them to both the `surrealdb` command and the `open_notebook` environment, so they stay in sync. Apply with `docker compose up -d`.
 
-If you are running both services locally or if you are using the deprecated [single container setup](../1-INSTALLATION/single-container.md)
+---
 
-```env
-SURREAL_URL="ws://localhost:8000/rpc"
-SURREAL_USER="root"
-SURREAL_PASSWORD="root"
-SURREAL_NAMESPACE="open_notebook"
-SURREAL_DATABASE="open_notebook"
-```
+## Several instances on one SurrealDB
 
-## Multiple databases
+A SurrealDB server can hold many namespaces, and each namespace many databases. To run several independent Open Notebook instances against one server, give each instance its own `SURREAL_NAMESPACE` or `SURREAL_DATABASE`.
 
-You can have multiple namespaces in one SurrealDB instance and you can also have multiple databases in one instance. So, if you want to setup multiple open noteobok deployments for different users, you don't need to deploy multiple databases. 
+---
+
+## When the API can't reach the database
+
+While waiting for SurrealDB, the API logs `Database is not reachable yet (attempt n/12)` and retries. After the last attempt it logs `Database did not become reachable after 12 attempts` and `CRITICAL: Database migration failed`, and the API doesn't start, so the browser can't reach it (**Unable to Connect to API Server**, or the UI doesn't load at all in the Docker image, where the UI waits for the API). If the database goes away later, while the API is running, the UI shows **Database Connection Failed**. See [Connection Issues → Database Connection Failed](../6-TROUBLESHOOTING/connection-issues.md#database-connection-failed).
+
+Backups: [Advanced → Backup & Restore](advanced.md#backup--restore).
diff --git a/docs/5-CONFIGURATION/environment-reference.md b/docs/5-CONFIGURATION/environment-reference.md
index 3febc6fb..078b9834 100644
--- a/docs/5-CONFIGURATION/environment-reference.md
+++ b/docs/5-CONFIGURATION/environment-reference.md
@@ -1,137 +1,178 @@
-# Complete Environment Reference
+# Environment Variable Reference
 
-Comprehensive list of all environment variables available in Open Notebook.
+The complete list of environment variables Open Notebook and its libraries read. Other pages link here instead of keeping their own lists. AI provider keys are not configured here: add them in **Manage → Models** (see [AI Providers](ai-providers.md)).
 
 ---
 
-## API Configuration
+## How to set a variable
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `API_URL` | No | Auto-detected | URL where frontend reaches API (e.g., http://localhost:5055) |
-| `INTERNAL_API_URL` | No | http://localhost:5055 | Internal API URL for Next.js server-side proxying |
-| `OPEN_NOTEBOOK_PASSWORD` | No | None | Password to protect Open Notebook instance |
-| `OPEN_NOTEBOOK_ENCRYPTION_KEY` | **Yes** | None | Secret string to encrypt credentials stored in database (any string works). **Required** for the credential system. Supports Docker secrets via `_FILE` suffix. |
-| `FRONTEND_BIND_HOST` | No | `0.0.0.0` (in Docker) | Network interface for Next.js to bind to. Default `0.0.0.0` ensures accessibility from reverse proxies. (Replaces `HOSTNAME`, which container runtimes such as Podman override with the container/pod hostname, causing Next.js to bind to the wrong address) |
-| `API_HOST` | No | `0.0.0.0` (in Docker) | Network interface for the API (uvicorn) to bind to. Set to `::` for IPv6 dual-stack environments (listens on IPv6 and, on Linux defaults, IPv4 too) |
-| `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | No | 100 | Maximum request body size (in MB) the API will accept, enforced before auth/routing. Raise this if you need to upload larger audio/video files. A fronting reverse proxy's own limit (e.g. nginx `client_max_body_size`) still applies and should be raised to match. |
+**Docker Compose:** add it under the `open_notebook` service's `environment:` block in `docker-compose.yml`, then run `docker compose up -d`. `docker compose restart` keeps the old environment, so it does not apply changes.
 
-> **Important**: `OPEN_NOTEBOOK_ENCRYPTION_KEY` is required for storing AI provider credentials via the Settings UI. Without it, you cannot save credentials. If you change or lose this key, all stored credentials become unreadable.
+```yaml
+services:
+  open_notebook:
+    environment:
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
+      - ESPERANTO_LLM_TIMEOUT=300
+```
+
+Replace `<generated-key>` with a value you generate yourself, for example with `openssl rand -hex 32` (on Windows, see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
+
+The shipped `docker-compose.yml` does not load an env file into the container. A `.env` file next to it only fills the `${...}` placeholders in the compose file (`SURREAL_USER`, `SURREAL_PASSWORD`). If you prefer a file, add `env_file: .env` to the `open_notebook` service yourself.
+
+**From source:** put backend variables in `.env` in the project root and restart the API and the worker (`make api`, `make worker-start` both load `.env`). The exception is `OPEN_NOTEBOOK_WORKER_MAX_TASKS`: `make worker-start` reads it from your shell before `.env` is loaded, so `export` it.
+
+Variables read by the frontend (`API_URL`, `INTERNAL_API_URL`, `NEXT_PUBLIC_*`, `NEXT_ALLOWED_DEV_ORIGINS`) are different: `make frontend` runs `npm run dev` inside `frontend/`, and Next.js only loads env files from that directory (`frontend/.env.local`, `frontend/.env`), not the root `.env`. Put them in `frontend/.env.local` or export them in the shell before `make frontend`, then restart it. `NEXT_PUBLIC_*` values are compiled in, so they take effect on the next `npm run dev` or `npm run build`. Most local setups need none of them: without `API_URL`, the browser calls the API directly at `<the host you opened>:5055` (auto-detected, see [Reverse Proxy](reverse-proxy.md#how-the-browser-finds-the-api)). `INTERNAL_API_URL` (default `http://localhost:5055`) only matters for requests that reach the Next.js server's `/api/*` forwarding, for example when `API_URL` points at the frontend's own public URL behind a reverse proxy.
+
+### The "Read by" column
+
+| Value | Meaning |
+|-------|---------|
+| API | The FastAPI process (port 5055) |
+| Worker | The background worker that processes sources, embeddings, insights and podcasts |
+| API + Worker | Both. In the Docker image they share the container environment |
+| Frontend | The Next.js server, at runtime |
+| Frontend build | Compiled into the frontend when it is built. Setting it on the published image does nothing |
+| Container | The image's entrypoint or supervisord, at container start |
 
 ---
 
-## Database: SurrealDB
+## Security and access
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `SURREAL_URL` | Yes | ws://surrealdb:8000/rpc | SurrealDB WebSocket connection URL |
-| `SURREAL_USER` | Yes | root | SurrealDB username |
-| `SURREAL_PASSWORD` | Yes | root | SurrealDB password |
-| `SURREAL_NAMESPACE` | Yes | open_notebook | SurrealDB namespace |
-| `SURREAL_DATABASE` | Yes | open_notebook | SurrealDB database name |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `OPEN_NOTEBOOK_ENCRYPTION_KEY` | none | API + Worker | Secret used to encrypt AI provider keys in the database. Use a unique high-entropy value you generate, for example with `openssl rand -hex 32`; the PBKDF2 stretching can't protect a guessable one. **Required** to save credentials in Manage → Models. If you change or lose it, stored keys can no longer be decrypted. Do not keep the `change-me-to-a-secret-string` value from the shipped compose file. See [Security](security.md#api-key-encryption) |
+| `OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE` | none | API + Worker | Path to a file holding the encryption key (Docker secrets). Checked before `OPEN_NOTEBOOK_ENCRYPTION_KEY` |
+| `OPEN_NOTEBOOK_PASSWORD` | none | API | Password for the UI and the REST API. Unset means authentication is off. See [Security](security.md) |
+| `OPEN_NOTEBOOK_PASSWORD_FILE` | none | API | Path to a file holding the password (Docker secrets). Checked before `OPEN_NOTEBOOK_PASSWORD` |
+| `CORS_ORIGINS` | `*` | API | Comma-separated origins allowed to call the API, e.g. `https://notebook.example.com`. The API logs a warning at startup while it is unset. Restart the API after changing it. See [Security](security.md#cors-origins) |
 
 ---
 
-## Database: Retry Configuration
+## Database (SurrealDB)
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `SURREAL_COMMANDS_RETRY_ENABLED` | No | true | Enable retries on failure |
-| `SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS` | No | 3 | Maximum retry attempts |
-| `SURREAL_COMMANDS_RETRY_WAIT_STRATEGY` | No | exponential_jitter | Retry wait strategy (exponential_jitter/exponential/fixed/random) |
-| `SURREAL_COMMANDS_RETRY_WAIT_MIN` | No | 1 | Minimum wait time between retries (seconds) |
-| `SURREAL_COMMANDS_RETRY_WAIT_MAX` | No | 30 | Maximum wait time between retries (seconds) |
+Set all five `SURREAL_*` variables explicitly, as the shipped compose file does. The API and the job queue (the surreal-commands library) fall back to different defaults when they are missing: the API uses `open_notebook` for namespace and database, the job queue uses `test`. With mismatched defaults, jobs are written where the worker never looks.
+
+| Variable | Default when unset | Read by | Description |
+|----------|--------------------|---------|-------------|
+| `SURREAL_URL` | built from `SURREAL_ADDRESS`/`SURREAL_PORT` | API + Worker | WebSocket URL, e.g. `ws://surrealdb:8000/rpc` (compose) or `ws://localhost:8000/rpc` (from source). See [Database](database.md) |
+| `SURREAL_USER` | none in the API (sign-in fails); `test` in the job queue | API + Worker | SurrealDB user. Must match the `--user` the database was started with |
+| `SURREAL_PASSWORD` | `root` in the API; `test` in the job queue | API + Worker | SurrealDB password. Must match `--pass`. Change it before exposing the instance |
+| `SURREAL_NAMESPACE` | `open_notebook` in the API; `test` in the job queue | API + Worker | SurrealDB namespace |
+| `SURREAL_DATABASE` | `open_notebook` in the API; `test` in the job queue | API + Worker | SurrealDB database |
+| `SURREAL_ADDRESS`, `SURREAL_PORT` | `localhost`, `8000` | API + Worker | Legacy fallback used only when `SURREAL_URL` is unset. `SURREAL_ADDRESS` may already include the port. Prefer `SURREAL_URL` |
+| `SURREAL_PASS` | none | API + Worker | Legacy alias of `SURREAL_PASSWORD` |
+
+With Docker Compose, `SURREAL_USER` and `SURREAL_PASSWORD` are the two values you can keep in `.env`: the compose file passes them to both the `surrealdb` and `open_notebook` services.
 
 ---
 
-## Worker: Concurrency
+## Network, ports and URLs
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `OPEN_NOTEBOOK_WORKER_MAX_TASKS` | No | 5 | Maximum number of background tasks (source processing, embeddings, podcasts) the worker runs concurrently. Passed to the worker as `--max-tasks` at launch. Set to `1` for **sequential processing** on single-GPU or local-LLM setups, where parallel requests overload the model and trigger rate limits. |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `API_URL` | auto-detected | Frontend | The API address **as the browser reaches it**. When unset, the frontend uses the host the page was loaded from plus port 5055 (`http://<host>:5055`). Set it behind a reverse proxy (`https://notebook.example.com`, no `/api` suffix) or when the API is not on port 5055. See [Reverse Proxy](reverse-proxy.md#how-the-browser-finds-the-api) |
+| `NEXT_PUBLIC_API_URL` | none | Frontend, Frontend build | Older name for `API_URL`, used only when `API_URL` is unset |
+| `INTERNAL_API_URL` | `http://localhost:5055` | Frontend | Where the Next.js server forwards `/api/*` requests. Only change it if the API is not in the same container |
+| `API_HOST` | `0.0.0.0` in the image; `127.0.0.1` from source | API | Interface the API binds to. Set `::` for IPv6 dual-stack |
+| `API_PORT` | `5055` | API (from source only) | Port for `run_api.py` (`make api`). The Docker image always uses 5055; change the host side of the port mapping instead |
+| `API_RELOAD` | `true` | API (from source only) | Auto-reload on code changes when started with `run_api.py` |
+| `FRONTEND_BIND_HOST` | `0.0.0.0` | Container | Interface the Next.js server binds to inside the container. Replaces `HOSTNAME`, which runtimes such as Podman overwrite |
+| `NEXT_ALLOWED_DEV_ORIGINS` | none | Frontend (dev server only) | Comma-separated hostnames allowed to reach `npm run dev` from another machine (LAN IP, custom hostname) |
+| `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` | `100` | API | Largest request body the API accepts. Larger requests get `413 Request body exceeds the maximum allowed upload size`. By default the browser uploads straight to the API (port 5055), so this is the app's only limit. When `API_URL` points at the frontend's own URL, uploads go through the Next.js `/api/*` forwarding instead, which is capped at 100 MB in the build. A reverse proxy's own limit (nginx `client_max_body_size`) also applies |
 
-> **Read at worker launch, from the process environment.** In Docker this comes from the container environment — set it under `environment:` in `docker-compose.yml` (or your orchestrator). For local `make worker-start` / `dev-init.sh`, export it in your shell (e.g. `export OPEN_NOTEBOOK_WORKER_MAX_TASKS=1`) — it is consumed by the shell before the app loads `.env`, so a value placed only in `.env` will not apply to these local launch paths.
+### Outbound proxy
 
----
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `HTTP_PROXY` | none | API + Worker | Proxy for outbound HTTP (AI providers, URL extraction, podcast TTS) |
+| `HTTPS_PROXY` | none | API + Worker | Proxy for outbound HTTPS |
+| `NO_PROXY` | none | API + Worker | Hosts that bypass the proxy. Must include the SurrealDB host |
 
-## LLM Timeouts
-
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `ESPERANTO_LLM_TIMEOUT` | No | 180 | LLM inference timeout in seconds, applied to every provider including Ollama. Open Notebook sets 180 when unset (esperanto's own default is 60). Keep it below 600, the web UI's request timeout |
-| `NEXT_PUBLIC_API_TIMEOUT_MS` | No | 600000 | How long the web UI waits for an API response, in milliseconds (`0` disables it). **Build time only**: it is compiled into the frontend, so the published Docker images always use 10 minutes; set it when building the frontend yourself |
-| `ESPERANTO_SSL_VERIFY` | No | true | Verify SSL certificates (false = development only) |
-| `ESPERANTO_SSL_CA_BUNDLE` | No | None | Path to custom CA certificate bundle |
-
----
-
-## Embeddings
-
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | No | 50 | Number of texts sent per embedding batch. Lower this for CPU-only or stricter OpenAI-compatible embedding providers. |
-| `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` | No | 5 | Minimum chunk size in tokens. Chunks below this threshold are dropped before embedding to avoid degenerate single-character fragments that some providers (e.g. llama.cpp) return null embeddings for. Set to `0` to disable filtering. |
-
----
-
-## API / CORS
-
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `CORS_ORIGINS` | No | `*` | Comma-separated list of origins allowed to call the API (e.g. `https://app.example.com,https://www.example.com`). Default `*` accepts any origin; **for production, set this explicitly to your frontend origin(s)**. Changes require an API restart. The API logs a warning on startup when unset. |
-
-**When to change this**:
-- You access the UI at a custom domain (reverse proxy, HTTPS, public deployment).
-- The frontend runs on a different port than `3000`.
-- You serve the frontend from a different host than the API (e.g. CDN).
-
-Example for a production deployment behind a reverse proxy:
+`NO_PROXY` must list the internal database hosts (`surrealdb`, `host.docker.internal`, `localhost`). The SurrealDB client connects over a websocket, and `websockets` 15+ sends even `ws://` connections through a configured proxy, which then rejects the internal host with HTTP 403 and the API and worker fail to start. Open Notebook adds `host.docker.internal,surrealdb,localhost,127.0.0.1` and the host from `SURREAL_URL` to `NO_PROXY` at startup as a safety net, but set them explicitly too.
 
 ```bash
-CORS_ORIGINS=https://notebook.example.com
+HTTP_PROXY=http://user:password@proxy.corp.com:8080
+HTTPS_PROXY=http://user:password@proxy.corp.com:8080
+NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
 ```
 
 ---
 
-## Text-to-Speech (TTS)
+## Timeouts
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `TTS_BATCH_SIZE` | No | 5 | Concurrent TTS requests (1-5, depends on provider) |
-| `ESPERANTO_TTS_TIMEOUT` | No | 300 | Text-to-speech request timeout in seconds (passed through to Esperanto). Increase it for slow or self-hosted TTS providers that take longer than 5 minutes to synthesize a segment, otherwise long podcast segments can fail with a timeout. |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `ESPERANTO_LLM_TIMEOUT` | `180` | API + Worker | Seconds each language-model call may take: chat, Ask, transformations, insights, podcast outline and transcript. Applies to every provider, Ollama included. Open Notebook sets 180 when unset (the library default is 60). Keep it below 600 so the call fails with a clear error before the web UI gives up |
+| `NEXT_PUBLIC_API_TIMEOUT_MS` | `600000` | Frontend build | How long the web UI waits for an API response, in milliseconds. `0` disables it. Compiled into the frontend, so the published images always wait 10 minutes |
+| `ESPERANTO_EMBEDDING_TIMEOUT` | `60` | API + Worker | Seconds per embedding request |
+| `ESPERANTO_RERANKER_TIMEOUT` | `60` | API + Worker | Seconds per reranker request (library setting; Open Notebook does not use rerankers today) |
+| `ESPERANTO_TTS_TIMEOUT` | `300` | Worker | Seconds per text-to-speech request during podcast generation. Raise it for slow self-hosted TTS |
+| `ESPERANTO_STT_TIMEOUT` | `300` | API + Worker | Seconds per speech-to-text request made directly through Esperanto. Source transcription uses `CCORE_STT_TIMEOUT` instead |
+| `CCORE_STT_TIMEOUT` | `3600` | Worker | Seconds per speech-to-text request when transcribing audio and video sources |
 
 ---
 
-## Content Extraction
+## SSL for AI providers
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `FIRECRAWL_API_KEY` | No | None | Firecrawl API key for advanced web scraping |
-| `FIRECRAWL_API_URL` | No | None | Base URL of a self-hosted Firecrawl instance (use instead of the hosted service) |
-| `CCORE_FIRECRAWL_PROXY` | No | `auto` | Firecrawl proxy mode to bypass anti-bot protection: `basic`, `stealth`, or `auto` |
-| `CCORE_FIRECRAWL_WAIT_FOR` | No | `3000` | Milliseconds Firecrawl waits for JavaScript to render before capturing the page |
-| `JINA_API_KEY` | No | None | Jina AI API key for web extraction |
-| `CRAWL4AI_API_URL` | No | None | Base URL of a remote Crawl4AI server. Set this to use Crawl4AI without a local install |
-| `CRAWL4AI_API_TOKEN` | No | None | Bearer token sent as `Authorization: Bearer …` to the remote Crawl4AI server. Required by Crawl4AI Docker ≥ 0.9.0, which rejects unauthenticated external connections by default. Ignored when unset |
-| `CCORE_YOUTUBE_PROXY` | No | None | Proxy URL for YouTube transcript and title requests (e.g. `http://user:pass@proxy:port`). Use a **residential** proxy; datacenter IPs are blocked by YouTube. Unset: direct connection |
-| `CCORE_YOUTUBE_COOKIES_FILE` | No | None | Path (inside the container) to a Netscape-format `cookies.txt` exported from a browser signed in to YouTube. Unblocks IP-flagged networks. A missing or unreadable file fails YouTube sources with a configuration error |
-| `CCORE_AUDIO_SEGMENT_MINUTES` | No | `10` | Length of the segments long audio/video is split into before transcription. `0` sends the file whole (for self-hosted speech-to-text without an upload size limit) |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `ESPERANTO_SSL_CA_BUNDLE` | none | API + Worker | Path (inside the container) to a CA bundle that signs your provider's certificate. Applies to model calls and to Test Connection / model discovery |
+| `ESPERANTO_SSL_VERIFY` | `true` | API + Worker | `false` turns off certificate verification. Development only |
 
-### Optional heavy runtimes (installed on first startup)
+---
 
-These are **off by default** to keep the image lean. Setting one to `true` makes the container install that runtime the first time it starts (downloads are cached on the `/app/data` volume, so only the first boot is slow). See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai).
+## Worker and background jobs
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `OPEN_NOTEBOOK_ENABLE_DOCLING` | No | `false` | Install Docling on first startup: unlocks the `docling` document engine, the OCR toggle and image sources. Pulls a large ML stack. |
-| `OPEN_NOTEBOOK_ENABLE_CRAWL4AI` | No | `false` | Install the local Crawl4AI runtime + a Chromium browser on first startup: unlocks the `crawl4ai` URL engine. Not needed if `CRAWL4AI_API_URL` is set. |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `OPEN_NOTEBOOK_WORKER_MAX_TASKS` | `5` | Container / `make worker-start` | Jobs the worker runs at once. Set `1` for a local model on a single GPU. Passed to the worker as `--max-tasks` at launch |
+| `TTS_BATCH_SIZE` | `5` | Worker | Text-to-speech requests sent in parallel per podcast. Lower it (for example `1` or `2`) for rate-limited or single-threaded TTS servers |
+| `SURREAL_COMMANDS_RETRY_ENABLED` | `false` | Worker | Turns on the job queue's global retry policy. See the note below |
+| `SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS` | `3` | Worker | Global policy: attempts, including the first |
+| `SURREAL_COMMANDS_RETRY_WAIT_STRATEGY` | `exponential` | Worker | Global policy: `exponential`, `exponential_jitter`, `fixed` or `random` |
+| `SURREAL_COMMANDS_RETRY_WAIT_MIN` | `1` | Worker | Global policy: minimum wait between attempts, seconds |
+| `SURREAL_COMMANDS_RETRY_WAIT_MAX` | `60` | Worker | Global policy: maximum wait, seconds |
+| `SURREAL_COMMANDS_RETRY_WAIT_TIME` | `1` | Worker | Global policy: wait for the `fixed` strategy, seconds |
+| `SURREAL_COMMANDS_RETRY_WAIT_MULTIPLIER` | `2` | Worker | Global policy: exponential backoff multiplier |
+| `SURREAL_COMMANDS_RETRY_LOG_LEVEL` | `info` | Worker | Global policy: log level for retry messages (`debug`, `info`, `warning`, `error`, `none`) |
 
-**Setup:**
-- Firecrawl: https://firecrawl.dev/
-- Jina: https://jina.ai/
-- Crawl4AI: https://github.com/unclecode/crawl4ai
+> **The `SURREAL_COMMANDS_RETRY_*` variables rarely change anything.** Each Open Notebook job declares its own retry policy, and a job's own policy overrides the global one: source processing retries up to 15 times, embeddings, insights and transformations up to 5, and podcast generation runs once. Only jobs without a policy of their own (today, the "rebuild embeddings" coordinator) follow the global settings. Errors that can't succeed on retry, such as a failed extraction or a missing model, are never retried.
 
-The `CCORE_*` variables are passed straight through to the content-core library (its settings are prefixed with `CCORE_`); Open Notebook itself doesn't read them. Set them on the **worker**, which runs extraction (in the single-container image, the container).
+---
+
+## Embeddings and chunking
+
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `OPEN_NOTEBOOK_CHUNK_SIZE` | `400` | API + Worker | Tokens per chunk when splitting content for embedding. Minimum 100 |
+| `OPEN_NOTEBOOK_CHUNK_OVERLAP` | 15% of the chunk size | API + Worker | Tokens shared between consecutive chunks |
+| `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` | `5` | API + Worker | Chunks shorter than this (in tokens) are dropped before embedding. Some providers, such as llama.cpp, return null vectors for one-character chunks. `0` disables the filter |
+| `OPEN_NOTEBOOK_EMBEDDING_BATCH_SIZE` | `50` | API + Worker | Texts per embedding request. Lower it for CPU-only or strict OpenAI-compatible embedding servers |
+
+Changing chunk settings affects new embeddings only. Rebuild existing embeddings from the **Advanced** page afterwards.
+
+---
+
+## Content extraction
+
+Open Notebook passes these to the content-core library, which runs extraction in the worker. Which engine is used is chosen in **Settings → Content Processing** (see [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md)).
+
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `FIRECRAWL_API_KEY` | none | Worker | Firecrawl API key for the `firecrawl` URL engine |
+| `FIRECRAWL_API_URL` | `https://api.firecrawl.dev` | Worker | Base URL of a self-hosted Firecrawl |
+| `CCORE_FIRECRAWL_PROXY` | `auto` | Worker | Firecrawl proxy mode: `basic`, `stealth` or `auto` |
+| `CCORE_FIRECRAWL_WAIT_FOR` | `3000` | Worker | Milliseconds Firecrawl waits for JavaScript before capturing the page |
+| `JINA_API_KEY` | none | Worker | Jina Reader API key for the `jina` URL engine. Optional: without it, requests are sent unauthenticated |
+| `CRAWL4AI_API_URL` | none | Worker, API | Base URL of a remote Crawl4AI server. When set, the `crawl4ai` engine uses it and no local install is needed |
+| `CRAWL4AI_API_TOKEN` | none | Worker | Bearer token for that server. Crawl4AI Docker 0.9.0 and later reject unauthenticated connections |
+| `CCORE_YOUTUBE_PROXY` | none | Worker | Proxy for YouTube transcript requests, e.g. `http://user:pass@proxy:port`. Use a residential proxy; YouTube blocks datacenter IPs |
+| `CCORE_YOUTUBE_COOKIES_FILE` | none | Worker | Path inside the container to a Netscape-format `cookies.txt` exported from a browser signed in to YouTube. A missing or unreadable file fails YouTube sources with a configuration error |
+| `CCORE_AUDIO_SEGMENT_MINUTES` | `10` | Worker | Long audio and video is split into segments of this many minutes before transcription. `0` sends the file whole (for self-hosted speech-to-text without an upload limit) |
+| `CCORE_AUDIO_CONCURRENCY` | `3` | Worker | Segments transcribed in parallel (1 to 10) |
+
+The speech-to-text model, the URL and document engines and the preferred YouTube transcript languages come from Open Notebook's settings, so the matching `CCORE_*` variables (`CCORE_AUDIO_MODEL`, `CCORE_URL_ENGINE`, `CCORE_YOUTUBE_LANGUAGES` and so on) are overridden and have no effect.
 
 YouTube cookies with Docker Compose:
 
@@ -144,214 +185,110 @@ services:
       - ./notebook_data:/app/data   # put youtube-cookies.txt in ./notebook_data
 ```
 
-See [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md) for how these engines are selected in the UI.
+### Optional heavy runtimes
+
+Off by default to keep the image small. When set to `true`, the container installs the runtime on startup before the app starts; downloads are cached on the `/app/data` volume, so only the first start is slow. See [Content Processing Engines → Optional engines](../3-USER-GUIDE/content-processing-engines.md#optional-engines-docling--crawl4ai).
+
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `OPEN_NOTEBOOK_ENABLE_DOCLING` | `false` | Container | Install Docling: enables the `docling` document engine, OCR and image sources. Large download |
+| `OPEN_NOTEBOOK_ENABLE_CRAWL4AI` | `false` | Container | Install local Crawl4AI and a Chromium browser: enables the `crawl4ai` URL engine. Not needed when `CRAWL4AI_API_URL` is set |
+
+If an engine is selected in Settings but its runtime is missing, extraction falls back to `auto` and the worker logs `Configured ... engine '...' is selected in Content Settings but its runtime is not available in this container`.
+
+### Cache locations (set by the image)
+
+| Variable | Image value | Description |
+|----------|-------------|-------------|
+| `TIKTOKEN_CACHE_DIR` | `/app/tiktoken-cache` | Token-counting encoding cache. From source it defaults to `./data/tiktoken-cache` |
+| `UV_CACHE_DIR` | `/app/data/.cache/uv` | Package cache for the optional runtimes |
+| `PLAYWRIGHT_BROWSERS_PATH` | `/app/data/.cache/playwright` | Chromium download for local Crawl4AI |
+| `HF_HOME` | `/app/data/.cache/huggingface` | Model cache for Docling |
 
 ---
 
-## Network / Proxy
+## Logging and tracing
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `HTTP_PROXY` | No | None | HTTP proxy URL for outbound HTTP requests |
-| `HTTPS_PROXY` | No | None | HTTPS proxy URL for outbound HTTPS requests |
-| `NO_PROXY` | No | None | Comma-separated list of hosts to bypass proxy (must include the internal DB hosts — see below) |
+| Variable | Default | Read by | Description |
+|----------|---------|---------|-------------|
+| `LOGURU_LEVEL` | `DEBUG` | API + Worker | Minimum level of the API and worker logs (`INFO`, `WARNING`, ...) |
+| `LANGSMITH_TRACING` (or `LANGCHAIN_TRACING_V2`) | off | API + Worker | `true` sends LangChain/LangGraph traces to LangSmith |
+| `LANGSMITH_API_KEY` (or `LANGCHAIN_API_KEY`) | none | API + Worker | LangSmith API key |
+| `LANGSMITH_ENDPOINT` (or `LANGCHAIN_ENDPOINT`) | `https://api.smith.langchain.com` | API + Worker | LangSmith endpoint |
+| `LANGSMITH_PROJECT` (or `LANGCHAIN_PROJECT`) | `default` | API + Worker | LangSmith project name |
 
-Route all outbound HTTP requests through a proxy server. Useful for corporate/firewalled environments.
+Tracing sends prompts and source content to LangSmith. Setup: https://smith.langchain.com/
 
-> **Important:** `NO_PROXY` must list the internal SurrealDB hosts — `host.docker.internal` (Docker) and `surrealdb` (the compose service name). The SurrealDB SDK connects over a websocket, and `websockets` 15.0+ tunnels even `ws://` connections through a configured proxy, which then rejects the internal host with **HTTP 403** and prevents the API and worker from starting. Open Notebook injects `host.docker.internal,surrealdb,localhost,127.0.0.1` into `NO_PROXY` automatically at startup as a safety net, but you should still set them explicitly.
-
-The underlying libraries (esperanto, content-core, podcast-creator) automatically detect proxy settings from these standard environment variables.
-
-**Affects:**
-- AI provider API calls (OpenAI, Anthropic, Google, Groq, etc.)
-- Content extraction from URLs (web scraping, YouTube transcripts)
-- Podcast generation (LLM and TTS provider calls)
-
-**Format:** `http://[user:pass@]host:port` or `https://[user:pass@]host:port`
-
-**Examples:**
-```bash
-# Basic proxy
-HTTP_PROXY=http://proxy.corp.com:8080
-HTTPS_PROXY=http://proxy.corp.com:8080
-
-# Authenticated proxy
-HTTP_PROXY=http://user:password@proxy.corp.com:8080
-HTTPS_PROXY=http://user:password@proxy.corp.com:8080
-
-# Bypass proxy for local hosts (include the internal DB hosts!)
-NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
-```
+SurrealDB's own log level is the `--log` argument in the `surrealdb` service's `command:` (`info` in the shipped compose file).
 
 ---
 
-## Debugging & Monitoring
+## Legacy: AI provider variables (deprecated)
 
-| Variable | Required? | Default | Description |
-|----------|-----------|---------|-------------|
-| `LANGCHAIN_TRACING_V2` | No | false | Enable LangSmith tracing |
-| `LANGCHAIN_ENDPOINT` | No | https://api.smith.langchain.com | LangSmith endpoint |
-| `LANGCHAIN_API_KEY` | No | None | LangSmith API key |
-| `LANGCHAIN_PROJECT` | No | Open Notebook | LangSmith project name |
+> **Deprecated.** Configure providers in **Manage → Models**. These variables still work as a fallback (the database is read first, then the environment), but there is no guarantee they keep working, and new automation should not be built on them. A declarative provisioning contract for headless deployments is being discussed in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
 
-**Setup:** https://smith.langchain.com/
+If you have them set, **Manage → Models** shows **Environment Variables Detected** with a **Migrate to Database** button. Migration creates a credential named "Default (Migrated from env)" per provider. It copies only the variables marked "yes" below; the others keep working only as an environment fallback and must be re-entered by hand if you remove them.
+
+| Variable | Provider | Copied by Migrate to Database |
+|----------|----------|-------------------------------|
+| `OPENAI_API_KEY` | OpenAI | yes |
+| `ANTHROPIC_API_KEY` | Anthropic | yes |
+| `GOOGLE_API_KEY` or `GEMINI_API_KEY` | Google AI | yes (`GOOGLE_API_KEY` wins) |
+| `GEMINI_API_BASE_URL` | Google AI | no |
+| `GROQ_API_KEY` | Groq | yes |
+| `MISTRAL_API_KEY` | Mistral AI | yes |
+| `DEEPSEEK_API_KEY` | DeepSeek | yes |
+| `XAI_API_KEY` | xAI | yes |
+| `OPENROUTER_API_KEY` | OpenRouter | yes |
+| `OPENROUTER_BASE_URL` | OpenRouter | no |
+| `DASHSCOPE_API_KEY` | DashScope (Qwen) | yes |
+| `MINIMAX_API_KEY`, `MINIMAX_BASE_URL` | MiniMax | yes (base URL into the credential's Base URL) |
+| `NOVITA_API_KEY` | Novita | yes |
+| `SILICONFLOW_API_KEY`, `SILICONFLOW_BASE_URL` | SiliconFlow | yes (base URL into the credential's Base URL) |
+| `ZAI_API_KEY`, `ZAI_BASE_URL` | Z.ai | yes (base URL into the credential's Base URL) |
+| `PPQ_API_KEY` | PayPerQ | yes |
+| `COHERE_API_KEY` | Cohere | yes |
+| `VOYAGE_API_KEY` | Voyage AI | yes |
+| `ELEVENLABS_API_KEY` | ElevenLabs | yes |
+| `DEEPGRAM_API_KEY` | Deepgram | yes |
+| `OLLAMA_API_BASE` | Ollama | yes |
+| `OMLX_API_BASE`, `OMLX_API_KEY` | oMLX | yes |
+| `VERTEX_PROJECT`, `VERTEX_LOCATION`, `GOOGLE_APPLICATION_CREDENTIALS` | Google Vertex AI | yes |
+| `AZURE_OPENAI_API_KEY`, `AZURE_OPENAI_ENDPOINT`, `AZURE_OPENAI_API_VERSION` | Azure OpenAI | yes |
+| `AZURE_OPENAI_ENDPOINT_LLM`, `_EMBEDDING`, `_STT`, `_TTS` | Azure OpenAI | yes |
+| `AZURE_OPENAI_API_KEY_LLM`, `_EMBEDDING`, `_STT`, `_TTS` | Azure OpenAI | no |
+| `AZURE_OPENAI_API_VERSION_LLM`, `_EMBEDDING`, `_STT`, `_TTS` | Azure OpenAI | no |
+| `OPENAI_COMPATIBLE_BASE_URL`, `OPENAI_COMPATIBLE_API_KEY` | OpenAI Compatible | yes |
+| `OPENAI_COMPATIBLE_BASE_URL_LLM`, `_EMBEDDING`, `_STT`, `_TTS` | OpenAI Compatible | no |
+| `OPENAI_COMPATIBLE_API_KEY_LLM`, `_EMBEDDING`, `_STT`, `_TTS` | OpenAI Compatible | no |
+| `ANTHROPIC_COMPATIBLE_BASE_URL`, `ANTHROPIC_COMPATIBLE_API_KEY` | Anthropic Compatible | yes |
 
 ---
 
-## Environment Variables by Use Case
+## Variables that do nothing
 
-### Minimal Setup (New Installation)
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-SURREAL_URL=ws://surrealdb:8000/rpc
-SURREAL_USER=root
-SURREAL_PASSWORD=password
-SURREAL_NAMESPACE=open_notebook
-SURREAL_DATABASE=open_notebook
-```
-Then configure AI providers via **Manage → Models** in the browser.
+These appear in older guides, examples or forum posts. Nothing in Open Notebook or its libraries reads them:
 
-### Production Deployment
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-strong-secret-key
-OPEN_NOTEBOOK_PASSWORD=your-secure-password
-API_URL=https://mynotebook.example.com
-SURREAL_USER=production_user
-SURREAL_PASSWORD=secure_password
-```
-
-### Self-Hosted Behind Reverse Proxy
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-API_URL=https://mynotebook.example.com
-```
-
-### Corporate Environment (Behind Proxy)
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-HTTP_PROXY=http://proxy.corp.com:8080
-HTTPS_PROXY=http://proxy.corp.com:8080
-NO_PROXY=localhost,127.0.0.1,host.docker.internal,surrealdb,.local
-```
-
-### High-Performance Deployment
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-OPEN_NOTEBOOK_WORKER_MAX_TASKS=10
-TTS_BATCH_SIZE=5
-```
-
-### Debugging
-```
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-key
-LANGCHAIN_TRACING_V2=true
-LANGCHAIN_API_KEY=your-key
-```
+| Variable | Use instead |
+|----------|-------------|
+| `API_CLIENT_TIMEOUT` | `ESPERANTO_LLM_TIMEOUT` (backend) and, when building the frontend yourself, `NEXT_PUBLIC_API_TIMEOUT_MS` |
+| `SURREAL_COMMANDS_MAX_TASKS` | `OPEN_NOTEBOOK_WORKER_MAX_TASKS` |
+| `CHUNK_SIZE`, `CHUNK_OVERLAP` | `OPEN_NOTEBOOK_CHUNK_SIZE`, `OPEN_NOTEBOOK_CHUNK_OVERLAP` |
+| `LOGLEVEL`, `RUST_LOG` | `LOGURU_LEVEL` for the app; `--log` in the `surrealdb` command for the database |
+| `HOSTNAME` (to change the frontend bind address) | `FRONTEND_BIND_HOST` |
 
 ---
 
-## Validation
-
-Check if a variable is set:
+## Checking what the container sees
 
 ```bash
-# Check single variable
-echo $OPEN_NOTEBOOK_ENCRYPTION_KEY
+# One non-secret variable
+docker compose exec open_notebook printenv OPEN_NOTEBOOK_WORKER_MAX_TASKS
 
-# Check multiple
-env | grep -E "OPEN_NOTEBOOK|API_URL"
-
-# Print all config
-env | grep -E "^[A-Z_]+=" | sort
+# Every variable set in the container, names only (no values, so no secrets are printed)
+docker compose exec open_notebook sh -c 'printenv | cut -d= -f1 | sort'
 ```
 
----
+Don't print `OPEN_NOTEBOOK_ENCRYPTION_KEY`, `OPEN_NOTEBOOK_PASSWORD` or `SURREAL_PASSWORD` into output you share in an issue or a chat.
 
-## Notes
-
-- **Case-sensitive:** `OPEN_NOTEBOOK_ENCRYPTION_KEY` ≠ `open_notebook_encryption_key`
-- **No spaces:** `OPEN_NOTEBOOK_ENCRYPTION_KEY=my-key` not `OPEN_NOTEBOOK_ENCRYPTION_KEY = my-key`
-- **Quote values:** Use quotes for values with spaces: `API_URL="http://my server:5055"`
-- **Restart required:** Changes take effect after restarting services
-- **Secrets:** Don't commit encryption keys or passwords to git
-- **AI Providers:** Configure via **Manage → Models** in the browser. The provider env vars listed under [Legacy](#legacy-ai-provider-environment-variables-deprecated) are a deprecated fallback
-- **Migration:** Use Settings UI to migrate existing env vars to the credential system. See [API Configuration](../3-USER-GUIDE/api-configuration.md#migrating-from-environment-variables)
-
----
-
-## Quick Setup Checklist
-
-- [ ] Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in docker-compose.yml
-- [ ] Set database credentials (`SURREAL_*`)
-- [ ] Start services
-- [ ] Open browser → Go to **Manage → Models**
-- [ ] **Add Credential** for your AI provider
-- [ ] **Test Connection** to verify
-- [ ] **Discover & Register Models**
-- [ ] Set `API_URL` if behind reverse proxy
-- [ ] Change `SURREAL_PASSWORD` in production
-- [ ] Try a test chat
-
-Done!
-
----
-
-## Legacy: AI Provider Environment Variables (Deprecated)
-
-> **Deprecated**: The following AI provider environment variables are a deprecated fallback. They still work today (the runtime reads the database first and falls back to the environment), but there is no guarantee they keep working in future releases, and new automation should not be built on them. Configure providers via **Manage → Models** instead.
-
-Why the UI is the source of truth: credentials in the database are encrypted at rest (via `OPEN_NOTEBOOK_ENCRYPTION_KEY`), can be added or rotated at runtime without restarts, and support multiple credentials per provider — none of which a single env var can express.
-
-**Headless, CI/CD and Docker deployments:** a declarative provisioning contract over the credentials API (a file describing providers and credentials, with `${VAR}`-style references resolved from the environment) is being designed in [Discussion #765](https://github.com/lfnovo/open-notebook/discussions/765). Until it ships, the env fallback is the only unattended path — use it knowing it is deprecated.
-
-If you have these variables configured from a previous installation, click the **Migrate to Database** button in **Manage → Models** to import them into the credential system, then remove them from your configuration.
-
-| Variable | Provider | Replacement |
-|----------|----------|-------------|
-| `OPENAI_API_KEY` | OpenAI | Manage → Models → Add OpenAI Credential |
-| `ANTHROPIC_API_KEY` | Anthropic | Manage → Models → Add Anthropic Credential |
-| `GOOGLE_API_KEY` | Google Gemini | Manage → Models → Add Google Credential |
-| `GEMINI_API_BASE_URL` | Google Gemini | Configure in Google Gemini credential |
-| `VERTEX_PROJECT` | Vertex AI | Manage → Models → Add Vertex AI Credential |
-| `VERTEX_LOCATION` | Vertex AI | Configure in Vertex AI credential |
-| `GOOGLE_APPLICATION_CREDENTIALS` | Vertex AI | Configure in Vertex AI credential |
-| `GROQ_API_KEY` | Groq | Manage → Models → Add Groq Credential |
-| `MISTRAL_API_KEY` | Mistral | Manage → Models → Add Mistral Credential |
-| `DEEPSEEK_API_KEY` | DeepSeek | Manage → Models → Add DeepSeek Credential |
-| `XAI_API_KEY` | xAI | Manage → Models → Add xAI Credential |
-| `OLLAMA_API_BASE` | Ollama | Manage → Models → Add Ollama Credential |
-| `OMLX_API_BASE` | oMLX | Manage → Models → Add oMLX Credential |
-| `OMLX_API_KEY` | oMLX | Optional; only if oMLX was started with `--api-key` |
-| `OPENROUTER_API_KEY` | OpenRouter | Manage → Models → Add OpenRouter Credential |
-| `OPENROUTER_BASE_URL` | OpenRouter | Configure in OpenRouter credential |
-| `VOYAGE_API_KEY` | Voyage AI | Manage → Models → Add Voyage AI Credential |
-| `ELEVENLABS_API_KEY` | ElevenLabs | Manage → Models → Add ElevenLabs Credential |
-| `OPENAI_COMPATIBLE_BASE_URL` | OpenAI-Compatible | Manage → Models → Add OpenAI-Compatible Credential |
-| `OPENAI_COMPATIBLE_API_KEY` | OpenAI-Compatible | Configure in OpenAI-Compatible credential |
-| `OPENAI_COMPATIBLE_BASE_URL_LLM` | OpenAI-Compatible | Configure per-service URL in credential |
-| `OPENAI_COMPATIBLE_API_KEY_LLM` | OpenAI-Compatible | Configure per-service key in credential |
-| `OPENAI_COMPATIBLE_BASE_URL_EMBEDDING` | OpenAI-Compatible | Configure per-service URL in credential |
-| `OPENAI_COMPATIBLE_API_KEY_EMBEDDING` | OpenAI-Compatible | Configure per-service key in credential |
-| `OPENAI_COMPATIBLE_BASE_URL_STT` | OpenAI-Compatible | Configure per-service URL in credential |
-| `OPENAI_COMPATIBLE_API_KEY_STT` | OpenAI-Compatible | Configure per-service key in credential |
-| `OPENAI_COMPATIBLE_BASE_URL_TTS` | OpenAI-Compatible | Configure per-service URL in credential |
-| `OPENAI_COMPATIBLE_API_KEY_TTS` | OpenAI-Compatible | Configure per-service key in credential |
-| `DASHSCOPE_API_KEY` | DashScope (Qwen) | Manage → Models → Add DashScope Credential |
-| `MINIMAX_API_KEY` | MiniMax | Manage → Models → Add MiniMax Credential |
-| `MINIMAX_BASE_URL` | MiniMax | Endpoint override (`https://api.minimax.cn/v1` for mainland China keys); copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
-| `NOVITA_API_KEY` | Novita | Manage → Models → Add Novita Credential |
-| `SILICONFLOW_API_KEY` | SiliconFlow | Manage → Models → Add SiliconFlow Credential |
-| `SILICONFLOW_BASE_URL` | SiliconFlow | Endpoint override for env-based setup (`https://api.siliconflow.cn/v1` for mainland China accounts); copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
-| `ZAI_API_KEY` | Z.ai | Manage → Models → Add Z.ai Credential |
-| `ZAI_BASE_URL` | Z.ai | Endpoint override for env-based setup; copied into the credential's Base URL on migration. With credentials, set the Base URL in the Manage → Models credential form |
-| `PPQ_API_KEY` | PayPerQ (PPQ) | Manage → Models → Add PayPerQ Credential |
-| `COHERE_API_KEY` | Cohere | Manage → Models → Add Cohere Credential |
-| `AZURE_OPENAI_API_KEY` | Azure OpenAI | Manage → Models → Add Azure OpenAI Credential |
-| `AZURE_OPENAI_ENDPOINT` | Azure OpenAI | Configure in Azure OpenAI credential |
-| `AZURE_OPENAI_API_VERSION` | Azure OpenAI | Configure in Azure OpenAI credential |
-| `AZURE_OPENAI_API_KEY_LLM` | Azure OpenAI | Configure per-service in credential |
-| `AZURE_OPENAI_ENDPOINT_LLM` | Azure OpenAI | Configure per-service in credential |
-| `AZURE_OPENAI_API_VERSION_LLM` | Azure OpenAI | Configure per-service in credential |
-| `AZURE_OPENAI_API_KEY_EMBEDDING` | Azure OpenAI | Configure per-service in credential |
-| `AZURE_OPENAI_ENDPOINT_EMBEDDING` | Azure OpenAI | Configure per-service in credential |
-| `AZURE_OPENAI_API_VERSION_EMBEDDING` | Azure OpenAI | Configure per-service in credential |
+Variable names are case-sensitive. In `docker-compose.yml` list syntax, don't put spaces around `=` and don't quote the value unless the quotes should be part of it.
diff --git a/docs/5-CONFIGURATION/index.md b/docs/5-CONFIGURATION/index.md
index a2fc0a00..f9120567 100644
--- a/docs/5-CONFIGURATION/index.md
+++ b/docs/5-CONFIGURATION/index.md
@@ -1,323 +1,111 @@
-# Configuration - Essential Settings
+# Configuration
 
-Configuration is how you customize Open Notebook for your specific setup. This section covers what you need to know.
+Open Notebook is configured in two places:
+
+1. **Environment variables** for infrastructure: the encryption key, the database connection, the API URL, timeouts. The complete list is the [Environment Reference](environment-reference.md).
+2. **The web UI** for everything else: AI provider credentials and models in **Manage → Models**, content processing engines in **Settings**.
 
 ---
 
-## What Needs Configuration?
+## Where environment variables go
 
-Three things:
+### Docker Compose
 
-1. **AI Provider** — Which LLM/embedding service you're using (OpenAI, Anthropic, Ollama, etc.)
-2. **Database** — How to connect to SurrealDB (usually pre-configured)
-3. **Server** — API URL, ports, timeouts (usually auto-detected)
+Put them under the `open_notebook` service's `environment:` block in `docker-compose.yml`, then run:
 
----
-
-## Quick Decision: Which Provider?
-
-### Option 1: Cloud Provider (Fastest)
-- **OpenRouter (recommended)** (access to all models with one key)
-- **OpenAI** (GPT)
-- **Anthropic** (Claude)
-- **Google Gemini** (multi-modal, long context)
-- **Groq** (ultra-fast inference)
-
-Setup: Get API key → Add credential in Manage → Models → Done
-
-→ Go to **[AI Providers Guide](ai-providers.md)**
-
-### Option 2: Local (Free & Private)
-- **Ollama** (open-source models, on your machine)
-- **oMLX** (Apple Silicon / MLX inference server)
-
-→ Go to **[Ollama Setup](ollama.md)** or **[oMLX Setup](omlx.md)**
-
-### Option 3: OpenAI-Compatible
-- **LM Studio** (local)
-- **Custom endpoints**
-
-→ Go to **[OpenAI-Compatible Guide](openai-compatible.md)** (for oMLX, prefer the native [oMLX](omlx.md) provider)
-
----
-
-## Configuration File
-
-Use the right file depending on your setup.
-
-### Docker: the `environment:` block
-
-With Docker Compose, settings go in the `open_notebook` service's `environment:` block in `docker-compose.yml`. Apply changes with `docker compose up -d`; `docker compose restart` keeps the old environment.
-
-The shipped `docker-compose.yml` does not load any env file into the container. A `.env` file next to it is only used to fill `${...}` placeholders in the compose file (`SURREAL_USER`, `SURREAL_PASSWORD`). To keep settings in a file instead, add `env_file: .env` (or any file name) to the `open_notebook` service.
-
-### `.env` (Running from source)
-
-```
-Located in: project root
-Use for: running Open Notebook from source
-Format: KEY=value, one per line
+```bash
+docker compose up -d
 ```
 
----
-
-## Most Important Settings
-
-All of the settings below go in the `open_notebook` service's `environment:` block (Docker) or in `.env` (from source).
-
-
-###  Surreal Database
-
-This is the database used by the app.
-
-```
-SURREAL_URL=ws://surrealdb:8000/rpc
-SURREAL_USER=root
-SURREAL_PASSWORD=root  # Change in production!
-SURREAL_NAMESPACE=open_notebook
-SURREAL_DATABASE=open_notebook
-```
-
-> The only thing that is critical to not miss is the hostname in the `SURREAL_URL`. Check what URL to use based on your deployment, [here](database.md).
-
-
-### AI Provider (Credentials)
-
-We need access to LLMs in order for the app to work. AI provider credentials are configured via the **Settings UI**:
-
-1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment (required for storing credentials)
-2. Start services
-3. Go to **Manage → Models → Add Credential**
-4. Select your provider, paste your API key
-5. **Test Connection** → **Discover Models** → **Register Models**
-
-```
-# Required in your .env or docker-compose.yml:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-```
-
-> **Ollama users**: Add an Ollama credential in Manage → Models with the correct base URL. See [Ollama Setup](ollama.md) for network configuration help.
-
-> **LM Studio / OpenAI-Compatible**: Add an OpenAI-Compatible credential in Manage → Models. See [OpenAI-Compatible Guide](openai-compatible.md).
-
-
-### API URL (If Behind Reverse Proxy)
-You only need to worry about this if you are deploying on a proxy or if you are changing port information. Otherwise, skip this.
-
-```
-API_URL=https://your-domain.com
-# Usually auto-detected. Only set if needed.
-```
-
-Auto-detection works for most setups.
-
----
-
-## Configuration by Scenario
-
-### Scenario 1: Docker on Localhost (Default)
-```env
-# docker-compose.yml → open_notebook → environment:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Everything else uses defaults
-# Then configure AI provider in Manage → Models
-```
-
-### Scenario 2: Docker on Remote Server
-```env
-# docker-compose.yml → open_notebook → environment:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-API_URL=http://your-server-ip:5055
-```
-
-### Scenario 3: Behind Reverse Proxy (Nginx/Cloudflare)
-```env
-# docker-compose.yml → open_notebook → environment:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-API_URL=https://your-domain.com
-# The reverse proxy handles HTTPS
-```
-
-### Scenario 4: Using Ollama Locally
-```env
-# docker-compose.yml → open_notebook → environment:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Ollama credential in Manage → Models
-```
-
-### Scenario 5: Using Azure OpenAI
-```env
-# docker-compose.yml → open_notebook → environment:
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-# Then add Azure OpenAI credential in Manage → Models
-```
-
----
-
-## Configuration Sections
-
-### [AI Providers](ai-providers.md)
-- OpenAI configuration
-- Anthropic configuration
-- Google Gemini configuration
-- Groq configuration
-- Ollama configuration
-- Azure OpenAI configuration
-- OpenAI-compatible configuration
-
-### [Database](database.md)
-- SurrealDB setup
-- Connection strings
-- Database vs. namespace
-- Running your own SurrealDB
-
-### [Advanced](advanced.md)
-- Ports and networking
-- Timeouts and concurrency
-- SSL/security
-- Retry configuration
-- Worker concurrency
-- Language models & embeddings
-- Speech-to-text & text-to-speech
-- Debugging and logging
-
-### [Reverse Proxy](reverse-proxy.md)
-- Nginx, Caddy, Traefik configs
-- Custom domain setup
-- SSL/HTTPS configuration
-- Coolify and other platforms
-
-### [Security](security.md)
-- Password protection
-- API authentication
-- Production hardening
-- Firewall configuration
-
-### [Local TTS](local-tts.md)
-- Speaches setup for local text-to-speech
-- GPU acceleration
-- Voice options
-- Docker networking
-
-### [Local STT](local-stt.md)
-- Speaches setup for local speech-to-text
-- Whisper model options
-- GPU acceleration
-- Docker networking
-
-### [Ollama](ollama.md)
-- Setting up and pointing to an Ollama server
-
-### [oMLX](omlx.md)
-- Apple Silicon MLX server (default `http://localhost:11435/v1`, SurrealDB port note)
-- Downloading models
-- Using embedding
-
-### [OpenAI-Compatible Providers](openai-compatible.md)
-- LM Studio, vLLM, Text Generation WebUI
-- Connection configuration
-- Docker networking
-- Troubleshooting
-
-### [Complete Reference](environment-reference.md)
-- All environment variables
-- Grouped by category
-- What each one does
-- Default values
-
----
-
-## How to Add Configuration
-
-### Method 1: Settings UI (For AI Provider Credentials)
-
-The recommended way to configure AI providers:
-
-```
-1. Open Open Notebook in your browser
-2. Go to Manage → Models
-3. Click "Add Credential"
-4. Select provider, enter API key
-5. Click Save, then Test Connection
-6. Click Discover Models → Register Models
-```
-
-No file editing, no restarts. Credentials stored securely (encrypted) in database.
-
-→ **[Full Guide: API Configuration](../3-USER-GUIDE/api-configuration.md)**
-
-### Method 2: Environment Variables (Infrastructure Settings)
-
-For database, network, encryption key and tuning settings.
-
-**Docker:** add them under the `open_notebook` service's `environment:` block, then run `docker compose up -d` (`docker compose restart` does not pick up environment changes):
+`docker compose restart` keeps the old environment, so it does not apply changes.
 
 ```yaml
-# In docker-compose.yml:
 services:
   open_notebook:
     environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-key
-      - API_URL=https://your-domain.com
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
+      - API_URL=https://notebook.example.com
 ```
 
-The shipped `docker-compose.yml` does not load a `.env` file into the container. Docker Compose only reads `.env` to fill `${...}` placeholders in the compose file (that's how `SURREAL_USER` / `SURREAL_PASSWORD` work), so a variable that exists only in `.env` never reaches Open Notebook. If you prefer keeping settings in a file, add `env_file: .env` to the `open_notebook` service yourself.
+Replace `<generated-key>` with a value you generate yourself, for example with `openssl rand -hex 32` (on Windows, see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
 
-**From source:** put them in `.env` and restart the API and worker. The exception is `OPEN_NOTEBOOK_WORKER_MAX_TASKS`: the worker's launch command reads it from your shell before `.env` is loaded, so `export` it before `make worker-start`.
+The shipped `docker-compose.yml` doesn't load an env file into the container. A `.env` file next to it only fills the `${...}` placeholders in the compose file (`SURREAL_USER`, `SURREAL_PASSWORD`), so a variable that exists only in `.env` never reaches Open Notebook. To keep settings in a file, add `env_file: .env` to the `open_notebook` service.
+
+### From source
+
+Put backend variables in `.env` in the project root (start from `.env.example`) and restart the API and the worker (`make api` and `make worker-start` load it). The exception is `OPEN_NOTEBOOK_WORKER_MAX_TASKS`, which `make worker-start` reads from your shell: `export` it first.
+
+Frontend variables (`API_URL`, `INTERNAL_API_URL`, `NEXT_PUBLIC_*`) are not read from the root `.env`; see [Environment Reference → How to set a variable](environment-reference.md#how-to-set-a-variable).
 
 ---
 
-## Verification
+## The settings that matter
 
-After configuration, verify it works:
+### Encryption key (required)
 
+```yaml
+- OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
 ```
-1. Open your notebook
-2. Go to Manage → Models
-3. You should see your configured provider
-4. Try a simple Chat question
-5. If it responds, configuration is correct!
+
+Encrypts the provider API keys you save in Manage → Models. Generate the value yourself, for example with `openssl rand -hex 32`. Without it you can't save credentials. Replace the `change-me-to-a-secret-string` placeholder from the shipped file, and don't change the value later: credentials saved with the old key become unreadable. See [Security](security.md#api-key-encryption).
+
+### Database
+
+```yaml
+- SURREAL_URL=ws://surrealdb:8000/rpc
+- SURREAL_USER=root
+- SURREAL_PASSWORD=root
+- SURREAL_NAMESPACE=open_notebook
+- SURREAL_DATABASE=open_notebook
 ```
 
+The shipped compose file already sets these. The hostname in `SURREAL_URL` depends on where SurrealDB runs; see [Database](database.md). Change the user and password before exposing the instance (set `SURREAL_USER`/`SURREAL_PASSWORD` in `.env`; the compose file applies them to both services).
+
+### AI providers (in the UI)
+
+Providers are connected in **Manage → Models**: add a configuration, test it, add models and set the default models. Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) for the steps.
+
+Details for each provider: [AI Providers](ai-providers.md). Local options: [Ollama](ollama.md), [oMLX](omlx.md), [OpenAI-Compatible](openai-compatible.md) (LM Studio, vLLM, llama.cpp…), [Local speech with Speaches](local-tts.md).
+
+### API URL (usually not needed)
+
+The browser finds the API automatically at `<the host you opened>:5055`. Set `API_URL` only when that's wrong: behind a reverse proxy (`API_URL=https://notebook.example.com`) or when the API is published on another port. See [Reverse Proxy](reverse-proxy.md#how-the-browser-finds-the-api).
+
+### Password
+
+Set `OPEN_NOTEBOOK_PASSWORD` for anything reachable beyond your own machine. Without it, authentication is off. See [Security](security.md).
+
 ---
 
-## Common Mistakes
+## Configuration pages
 
-| Mistake | Problem | Fix |
+| Page | Covers |
+|------|--------|
+| [Environment Reference](environment-reference.md) | Every environment variable: default, which process reads it, what it does |
+| [AI Providers](ai-providers.md) | Supported providers, what each one offers, setup notes |
+| [Ollama](ollama.md) | Local models with Ollama: networking, context window, timeouts |
+| [oMLX](omlx.md) | Apple Silicon MLX server |
+| [OpenAI-Compatible](openai-compatible.md) | LM Studio, vLLM, llama.cpp and other OpenAI-style servers |
+| [Local speech (Speaches)](local-tts.md) | Local text-to-speech and speech-to-text |
+| [Local speech-to-text](local-stt.md) | Whisper model choice and long audio |
+| [Database](database.md) | SurrealDB connection settings |
+| [Security](security.md) | Password, credential encryption, CORS, hardening |
+| [Reverse Proxy](reverse-proxy.md) | nginx, Caddy, Traefik, custom domains, HTTPS |
+| [Advanced](advanced.md) | Concurrency, timeouts, ports, logging, backups |
+| [MCP Integration](mcp-integration.md) | Using Open Notebook from MCP clients |
+
+---
+
+## Common mistakes
+
+| Mistake | Symptom | Fix |
 |---------|---------|-----|
-| No credential configured | Models not available | Add credential in Manage → Models |
-| Missing encryption key | Can't save credentials | Set OPEN_NOTEBOOK_ENCRYPTION_KEY |
-| Wrong database URL | Can't start API | Check SURREAL_URL format |
-| Expose port 5055 | "Can't connect to server" | Expose 5055 in docker-compose |
-| Typo in env var | Settings ignored | Check spelling (case-sensitive!) |
-| Using `docker compose restart` | Old config still used | Run `docker compose up -d` after env changes (from source: restart the API and worker) |
+| Variable added to `.env` only (Docker) | Setting has no effect | Put it under `open_notebook` → `environment:` |
+| `docker compose restart` after editing | Old values still used | `docker compose up -d` |
+| No encryption key | "Encryption key not configured" in **Manage → Models** | Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` |
+| Encryption key changed | "Decryption Error" on saved credentials | Restore the old key, or delete and re-create the credentials |
+| No default chat model | Chat fails with "No model configured for default for type=chat" | Manage → Models → Default Model Assignments |
+| Port 5055 not reachable from the browser | "Unable to Connect to API Server" | Publish 5055, or set `API_URL` behind a proxy |
+| `SURREAL_URL` uses `localhost` inside Docker | API won't start, "Database is not reachable yet" in the log | Use the service name: `ws://surrealdb:8000/rpc` |
 
----
-
-## What Comes After Configuration
-
-Once configured:
-
-1. **[Quick Start](../0-START-HERE/index.md)** — Run your first notebook
-2. **[Installation](../1-INSTALLATION/index.md)** — Multi-route deployment guides
-3. **[User Guide](../3-USER-GUIDE/index.md)** — How to use each feature
-
----
-
-## Getting Help
-
-- **Configuration error?** → Check [Troubleshooting](../6-TROUBLESHOOTING/quick-fixes.md)
-- **Provider-specific issue?** → Check [AI Providers](ai-providers.md)
-- **Need complete reference?** → See [Environment Reference](environment-reference.md)
-
----
-
-## Summary
-
-**Minimal configuration to run:**
-1. Set `OPEN_NOTEBOOK_ENCRYPTION_KEY` in your environment
-2. Start services
-3. Add AI provider credential in Manage → Models
-4. Done!
-
-Everything else is optional optimization.
+More in [Troubleshooting](../6-TROUBLESHOOTING/index.md).
diff --git a/docs/5-CONFIGURATION/local-stt.md b/docs/5-CONFIGURATION/local-stt.md
index e9233b47..95908e43 100644
--- a/docs/5-CONFIGURATION/local-stt.md
+++ b/docs/5-CONFIGURATION/local-stt.md
@@ -1,366 +1,73 @@
-# Local Speech-to-Text Setup
+# Local Speech-to-Text
 
-Run speech-to-text locally for free, private audio/video transcription using OpenAI-compatible STT servers.
+Transcribe audio and video sources (and YouTube videos without subtitles) on your own hardware.
+
+Setup is shared with local text-to-speech: run [Speaches](https://github.com/speaches-ai/speaches), add it as an **OpenAI Compatible** configuration in Manage → Models, add a model with **Model Type** **STT**, and choose it as the **Speech-to-Text Model** under Default Model Assignments. Follow [Local Speech with Speaches](local-tts.md) for those steps; this page covers what is specific to transcription.
 
 ---
 
-## Why Local STT?
+## Choosing a Whisper model
 
-| Benefit | Description |
-|---------|-------------|
-| **Free** | No per-minute costs after setup |
-| **Private** | Audio never leaves your machine |
-| **Unlimited** | No rate limits or quotas |
-| **Offline** | Works without internet |
-
----
-
-## Quick Start with Speaches
-
-[Speaches](https://github.com/speaches-ai/speaches) is an open-source, OpenAI-compatible server that supports both TTS and STT. It uses [faster-whisper](https://github.com/SYSTRAN/faster-whisper) for transcription.
-
-> **💡 Ready-made Docker Compose files available:**
-> - **[docker-compose-speaches.yml](../../examples/docker-compose-speaches.yml)** - Speaches + Open Notebook
-> - **[docker-compose-full-local.yml](../../examples/docker-compose-full-local.yml)** - Speaches + Ollama (100% local setup)
->
-> These include complete setup instructions and configuration examples. Just copy and run!
-
-### Step 1: Create Docker Compose File
-
-Create a folder and add `docker-compose.yml`:
-
-```yaml
-services:
-  speaches:
-    image: ghcr.io/speaches-ai/speaches:latest-cpu
-    container_name: speaches
-    ports:
-      - "8969:8000"
-    volumes:
-      - hf-hub-cache:/home/ubuntu/.cache/huggingface/hub
-    restart: unless-stopped
-
-volumes:
-  hf-hub-cache:
-```
-
-### Step 2: Start and Download Model
+Speaches transcribes with [faster-whisper](https://github.com/SYSTRAN/faster-whisper). Download the model you want before using it:
 
 ```bash
-# Start Speaches
-docker compose up -d
-
-# Wait for startup
-sleep 10
-
-# Download Whisper model (~500MB for small)
 docker compose exec speaches uv tool run speaches-cli model download Systran/faster-whisper-small
 ```
 
-Models can also be downloaded automatically on first use, but pre-downloading avoids delays.
+| Model id | Notes |
+|----------|-------|
+| `Systran/faster-whisper-tiny`, `Systran/faster-whisper-base` | Fastest, least accurate |
+| `Systran/faster-whisper-small` | A reasonable default on CPU |
+| `Systran/faster-whisper-medium` | More accurate, much slower on CPU |
+| `Systran/faster-whisper-large-v3` | Most accurate; use a GPU |
 
-### Step 3: Test
+`speaches-cli registry ls --task automatic-speech-recognition` lists everything Speaches can download. Register the model in Open Notebook under the exact same id.
+
+Test it:
 
 ```bash
-# Create a test audio file (or use your own)
-# Then transcribe it:
-curl "http://localhost:8969/v1/audio/transcriptions" \
-  -F "file=@test.mp3" \
-  -F "model=Systran/faster-whisper-small"
+curl http://localhost:8969/v1/audio/transcriptions \
+  -F "file=@test.mp3" -F "model=Systran/faster-whisper-small"
 ```
 
-You should see the transcribed text in the response.
+---
 
-### Step 4: Configure Open Notebook
+## Long recordings
 
-**Via Settings UI (Recommended):**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **OpenAI-Compatible**
-3. Enter base URL for STT: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
-4. Click **Save**, then **Test Connection**
+Before transcription, Open Notebook (through content-core) splits long audio and video into 10-minute segments and transcribes up to 3 at a time. Cloud APIs need this because of their upload limits; a local server usually doesn't. These variables go in the `open_notebook` environment (apply with `docker compose up -d`):
 
-**Legacy (Deprecated) — Environment variables:**
-```yaml
-# In your Open Notebook docker-compose.yml
-environment:
-  - OPENAI_COMPATIBLE_BASE_URL_STT=http://host.docker.internal:8969/v1
-```
+| Variable | Default | Use |
+|----------|---------|-----|
+| `CCORE_AUDIO_SEGMENT_MINUTES` | `10` | `0` sends each file whole, so Whisper sees the full context |
+| `CCORE_AUDIO_CONCURRENCY` | `3` | Segments sent in parallel (1–10). Use `1` for a single CPU or GPU server |
+| `CCORE_STT_TIMEOUT` | `3600` | Seconds allowed per transcription request. Raise it if a whole file on CPU takes longer than an hour |
+
+See the [Environment Reference](environment-reference.md#content-extraction).
+
+---
+
+## When transcription fails
+
+The source shows **Failed**. The reason is in the worker log:
 
 ```bash
-# Local development
-export OPENAI_COMPATIBLE_BASE_URL_STT=http://localhost:8969/v1
+docker compose logs open_notebook | grep -i "content-core extraction failed"
 ```
 
-### Step 5: Add Model in Open Notebook
+Common causes:
 
-1. Go to **Manage** → **Models**
-2. Click **Add Model** in Speech-to-Text section
-3. Configure:
-   - **Provider**: `openai_compatible`
-   - **Model Name**: `Systran/faster-whisper-small`
-   - **Display Name**: `Local Whisper`
-4. Click **Save**
-5. Set as default if desired
+- No **Speech-to-Text Model** assigned, or the Speaches configuration's Base URL is wrong.
+- The model id isn't downloaded in Speaches. Download it (see above).
+- The request timed out on a long file. Raise `CCORE_STT_TIMEOUT` or keep segmenting on.
 
----
+Depending on the error, the failure reason reads "Content extraction is not configured correctly. Check the content processing engine and speech-to-text settings; the worker log has the details." or "The content extraction service failed."
 
-## Available Models
-
-Speaches supports various Whisper model sizes. Larger models are more accurate but slower:
-
-| Model | Size | Speed | Accuracy | VRAM (GPU) |
-|-------|------|-------|----------|------------|
-| `Systran/faster-whisper-tiny` | ~75 MB | Fastest | Basic | ~1 GB |
-| `Systran/faster-whisper-base` | ~150 MB | Fast | Good | ~1 GB |
-| `Systran/faster-whisper-small` | ~500 MB | Medium | Better | ~2 GB |
-| `Systran/faster-whisper-medium` | ~1.5 GB | Slow | Great | ~5 GB |
-| `Systran/faster-whisper-large-v3` | ~3 GB | Slowest | Best | ~10 GB |
-| `Systran/faster-distil-whisper-small.en` | ~400 MB | Fast | Good (English only) | ~2 GB |
-
-### List Available Models
-
-```bash
-docker compose exec speaches uv tool run speaches-cli registry ls --task automatic-speech-recognition
-```
-
-### Recommended Models
-
-- **For speed**: `Systran/faster-whisper-tiny` or `Systran/faster-whisper-base`
-- **For balance**: `Systran/faster-whisper-small` (recommended)
-- **For accuracy**: `Systran/faster-whisper-large-v3`
-
----
-
-## GPU Acceleration
-
-For faster transcription with NVIDIA GPUs:
-
-```yaml
-services:
-  speaches:
-    image: ghcr.io/speaches-ai/speaches:latest-cuda
-    container_name: speaches
-    ports:
-      - "8969:8000"
-    volumes:
-      - hf-hub-cache:/home/ubuntu/.cache/huggingface/hub
-    environment:
-      - WHISPER__TTL=-1  # Keep model in VRAM (recommended if you have enough memory)
-    restart: unless-stopped
-    deploy:
-      resources:
-        reservations:
-          devices:
-            - driver: nvidia
-              count: 1
-              capabilities: [gpu]
-
-volumes:
-  hf-hub-cache:
-```
-
-### Keep Model in Memory
-
-By default, Speaches unloads models after some time. To keep the Whisper model loaded for instant transcription:
-
-```yaml
-environment:
-  - WHISPER__TTL=-1  # Never unload
-```
-
-This is recommended if you have enough RAM/VRAM, as loading the model can take a few seconds.
-
----
-
-## Docker Networking
-
-When configuring your OpenAI-Compatible credential in **Manage → Models**, use the appropriate STT base URL for your setup:
-
-### Open Notebook in Docker (macOS/Windows)
-
-**STT Base URL:** `http://host.docker.internal:8969/v1`
-
-### Open Notebook in Docker (Linux)
-
-**STT Base URL (Option 1 — Docker bridge IP):** `http://172.17.0.1:8969/v1`
-
-**Option 2:** Use host networking mode (`docker run --network host ...`), then use: `http://localhost:8969/v1`
-
-### Remote Server
-
-Run Speaches on a different machine:
-
-**STT Base URL:** `http://server-ip:8969/v1` (replace with your server's IP)
-
----
-
-## Language Support
-
-Whisper supports 99+ languages. Specify the language for better accuracy:
-
-```bash
-curl "http://localhost:8969/v1/audio/transcriptions" \
-  -F "file=@audio.mp3" \
-  -F "model=Systran/faster-whisper-small" \
-  -F "language=ru"
-```
-
-Common language codes:
-- `en` - English
-- `ru` - Russian
-- `es` - Spanish
-- `fr` - French
-- `de` - German
-- `zh` - Chinese
-- `ja` - Japanese
-
----
-
-## Troubleshooting
-
-### Service Won't Start
-
-```bash
-# Check logs
-docker compose logs speaches
-
-# Verify port available
-lsof -i :8969
-
-# Restart
-docker compose down && docker compose up -d
-```
-
-### Connection Refused
-
-```bash
-# Test Speaches is running
-curl http://localhost:8969/v1/models
-
-# From inside Open Notebook container
-docker exec -it open-notebook curl http://host.docker.internal:8969/v1/models
-```
-
-### Model Download Fails
-
-Models are downloaded automatically on first use. If download fails:
-
-```bash
-# Check available disk space
-df -h
-
-# Check Docker logs for errors
-docker compose logs speaches
-
-# Restart and try again
-docker compose restart speaches
-```
-
-### Poor Transcription Quality
-
-- Use a larger model (`faster-whisper-medium` or `large-v3`)
-- Specify the correct language
-- Ensure audio quality is good (clear speech, minimal background noise)
-- Try different audio formats (WAV often works better than MP3)
-
-### Slow Transcription
-
-| Solution | How |
-|----------|-----|
-| Use GPU | Switch to `latest-cuda` image |
-| Smaller model | Use `faster-whisper-tiny` or `base` |
-| More CPU | Allocate more cores in Docker |
-| SSD storage | Move Docker volumes to SSD |
-
----
-
-## Performance Tips
-
-### Recommended Specs
-
-| Component | Minimum | Recommended |
-|-----------|---------|-------------|
-| CPU | 2 cores | 4+ cores |
-| RAM | 2 GB | 8+ GB |
-| Storage | 5 GB | 10 GB (for multiple models) |
-| GPU | None | NVIDIA (optional, much faster) |
-
-### Resource Limits
-
-```yaml
-services:
-  speaches:
-    # ... other config
-    mem_limit: 4g
-    cpus: 2
-```
-
-### Monitor Usage
-
-```bash
-docker stats speaches
-```
-
----
-
-## Comparison: Local vs Cloud
-
-| Aspect | Local (Speaches) | Cloud (OpenAI Whisper) |
-|--------|------------------|------------------------|
-| **Cost** | Free | $0.006/min |
-| **Privacy** | Complete | Data sent to provider |
-| **Speed** | Depends on hardware | Usually faster |
-| **Quality** | Excellent (same Whisper) | Excellent |
-| **Setup** | Moderate | Simple API key |
-| **Offline** | Yes | No |
-| **Languages** | 99+ | 99+ |
-
-### When to Use Local
-
-- Privacy-sensitive content
-- High-volume transcription
-- Development/testing
-- Offline environments
-- Cost control
-
-### When to Use Cloud
-
-- Limited hardware
-- Time-sensitive projects
-- No GPU available
-- Simple setup preferred
-
----
-
-## Using Both TTS and STT
-
-Speaches supports both TTS and STT in one server. In **Manage → Models**, add a single **OpenAI-Compatible** credential and configure both the TTS and STT base URLs to point to the same Speaches server (e.g., `http://localhost:8969/v1`).
-
-See **[Local TTS Setup](local-tts.md)** for TTS configuration.
-
----
-
-## Other Local STT Options
-
-Any OpenAI-compatible STT server works:
-
-| Server | Description |
-|--------|-------------|
-| [Speaches](https://github.com/speaches-ai/speaches) | TTS + STT in one (recommended) |
-| [faster-whisper-server](https://github.com/fedirz/faster-whisper-server) | Lightweight STT only |
-| [whisper.cpp](https://github.com/ggerganov/whisper.cpp) | C++ implementation with server mode |
-| [LocalAI](https://github.com/mudler/LocalAI) | Multi-model local AI server |
-
-The key requirements:
-
-1. Server implements `/v1/audio/transcriptions` endpoint
-2. Add an OpenAI-Compatible credential in **Manage → Models** with the STT base URL
-3. Add model with provider `openai_compatible`
+More failure messages: [Processing Issues → Failed sources](../6-TROUBLESHOOTING/processing-issues.md#failed-sources).
 
 ---
 
 ## Related
 
-- **[Local TTS Setup](local-tts.md)** - Text-to-speech with Speaches
-- **[OpenAI-Compatible Providers](openai-compatible.md)** - General compatible provider setup
-- **[AI Providers](ai-providers.md)** - All provider configuration
\ No newline at end of file
+- [Local Speech with Speaches](local-tts.md) — shared setup, text-to-speech
+- [OpenAI-Compatible Providers](openai-compatible.md)
+- [Adding Sources](../3-USER-GUIDE/adding-sources.md)
diff --git a/docs/5-CONFIGURATION/local-tts.md b/docs/5-CONFIGURATION/local-tts.md
index bc0dd569..4c2675b1 100644
--- a/docs/5-CONFIGURATION/local-tts.md
+++ b/docs/5-CONFIGURATION/local-tts.md
@@ -1,39 +1,23 @@
-# Local Text-to-Speech Setup
+# Local Speech with Speaches (TTS and STT)
 
-Run text-to-speech locally for free, private podcast generation using OpenAI-compatible TTS servers.
+Run text-to-speech (podcast voices) and speech-to-text (transcribing audio and video sources) yourself. When Speaches runs on your own hardware, there is no per-minute provider fee and the audio stays on that machine. A Speaches server or other endpoint run by someone else receives the audio you send it, like any provider, and may charge for it.
+
+[Speaches](https://github.com/speaches-ai/speaches) is an open-source server with an OpenAI-compatible speech API. One Speaches instance serves both directions; Open Notebook connects to it through the **OpenAI Compatible** provider. Any other server that implements `/v1/audio/speech` (TTS) or `/v1/audio/transcriptions` (STT) works the same way.
+
+This page covers the shared setup and text-to-speech. Speech-to-text specifics (Whisper models, long recordings) are in [Local Speech-to-Text](local-stt.md).
+
+> **Ready-made compose files:** [docker-compose-speaches.yml](../../examples/docker-compose-speaches.yml) (Speaches + Open Notebook) and [docker-compose-full-local.yml](../../examples/docker-compose-full-local.yml) (Speaches + Ollama + Open Notebook, fully local).
 
 ---
 
-## Why Local TTS?
+## 1. Run Speaches
 
-| Benefit | Description |
-|---------|-------------|
-| **Free** | No per-character costs after setup |
-| **Private** | Audio never leaves your machine |
-| **Unlimited** | No rate limits or quotas |
-| **Offline** | Works without internet |
-
----
-
-## Quick Start with Speaches
-
-[Speaches](https://github.com/speaches-ai/speaches) is an open-source, OpenAI-compatible TTS server.
-
-> **💡 Ready-made Docker Compose files available:**
-> - **[docker-compose-speaches.yml](../../examples/docker-compose-speaches.yml)** - Speaches + Open Notebook
-> - **[docker-compose-full-local.yml](../../examples/docker-compose-full-local.yml)** - Speaches + Ollama (100% local setup)
->
-> These include complete setup instructions and configuration examples. Just copy and run!
-
-### Step 1: Create Docker Compose File
-
-Create a folder and add `docker-compose.yml`:
+Standalone:
 
 ```yaml
 services:
   speaches:
     image: ghcr.io/speaches-ai/speaches:latest-cpu
-    container_name: speaches
     ports:
       - "8969:8000"
     volumes:
@@ -44,121 +28,9 @@ volumes:
   hf-hub-cache:
 ```
 
-### Step 2: Start and Download Model
-
-```bash
-# Start Speaches
-docker compose up -d
-
-# Wait for startup
-sleep 10
-
-# Download voice model (~500MB)
-docker compose exec speaches uv tool run speaches-cli model download speaches-ai/Kokoro-82M-v1.0-ONNX
-```
-
-### Step 3: Test
-
-```bash
-curl "http://localhost:8969/v1/audio/speech" -s \
-  -H "Content-Type: application/json" \
-  --output test.mp3 \
-  --data '{
-    "input": "Hello! Local TTS is working.",
-    "model": "speaches-ai/Kokoro-82M-v1.0-ONNX",
-    "voice": "af_bella"
-  }'
-```
-
-Play `test.mp3` to verify.
-
-### Step 4: Configure Open Notebook
-
-**Via Settings UI (Recommended):**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **OpenAI-Compatible**
-3. Enter base URL for TTS: `http://host.docker.internal:8969/v1` (Docker) or `http://localhost:8969/v1` (local)
-4. Click **Save**, then **Test Connection**
-
-**Legacy (Deprecated) — Environment variables:**
-```yaml
-# In your Open Notebook docker-compose.yml
-environment:
-  - OPENAI_COMPATIBLE_BASE_URL_TTS=http://host.docker.internal:8969/v1
-```
-
-```bash
-# Local development
-export OPENAI_COMPATIBLE_BASE_URL_TTS=http://localhost:8969/v1
-```
-
-### Step 5: Add Model in Open Notebook
-
-1. Go to **Manage** → **Models**
-2. Click **Add Model** in Text-to-Speech section
-3. Configure:
-   - **Provider**: `openai_compatible`
-   - **Model Name**: `speaches-ai/Kokoro-82M-v1.0-ONNX`
-   - **Display Name**: `Local TTS`
-4. Click **Save**
-5. Set as default if desired
-
----
-
-## Available Voices
-
-The Kokoro model includes multiple voices:
-
-### Female Voices
-| Voice ID | Description |
-|----------|-------------|
-| `af_bella` | Clear, professional |
-| `af_sarah` | Warm, friendly |
-| `af_nicole` | Energetic, expressive |
-
-### Male Voices
-| Voice ID | Description |
-|----------|-------------|
-| `am_adam` | Deep, authoritative |
-| `am_michael` | Friendly, conversational |
-
-### British Accents
-| Voice ID | Description |
-|----------|-------------|
-| `bf_emma` | British female, professional |
-| `bm_george` | British male, formal |
-
-### Test Different Voices
-
-```bash
-for voice in af_bella af_sarah am_adam am_michael; do
-  curl "http://localhost:8969/v1/audio/speech" -s \
-    -H "Content-Type: application/json" \
-    --output "test_${voice}.mp3" \
-    --data "{
-      \"input\": \"Hello, this is the ${voice} voice.\",
-      \"model\": \"speaches-ai/Kokoro-82M-v1.0-ONNX\",
-      \"voice\": \"${voice}\"
-    }"
-done
-```
-
----
-
-## GPU Acceleration
-
-For faster generation with NVIDIA GPUs:
+For an NVIDIA GPU, use the `latest-cuda` image and add a GPU reservation:
 
 ```yaml
-services:
-  speaches:
-    image: ghcr.io/speaches-ai/speaches:latest-cuda
-    container_name: speaches
-    ports:
-      - "8969:8000"
-    volumes:
-      - hf-hub-cache:/home/ubuntu/.cache/huggingface/hub
-    restart: unless-stopped
     deploy:
       resources:
         reservations:
@@ -166,179 +38,83 @@ services:
             - driver: nvidia
               count: 1
               capabilities: [gpu]
-
-volumes:
-  hf-hub-cache:
 ```
 
----
+`"8969:8000"` publishes Speaches, which has no authentication, on every network interface of the host. Allow port 8969 only from the clients that need it: this host and its Docker networks when Open Notebook runs on the same machine, or the Open Notebook host's address (or its trusted network) when Speaches runs on a separate server. Never open it to untrusted networks.
 
-## Docker Networking
+If you add the `speaches` service to Open Notebook's own `docker-compose.yml` instead, Open Notebook reaches it at `http://speaches:8000/v1` and you don't need to publish a port at all. That's the safer option.
 
-When configuring your OpenAI-Compatible credential in **Manage → Models**, use the appropriate TTS base URL for your setup:
+## 2. Download models
 
-### Open Notebook in Docker (macOS/Windows)
+```bash
+docker compose up -d
 
-**TTS Base URL:** `http://host.docker.internal:8969/v1`
-
-### Open Notebook in Docker (Linux)
-
-**TTS Base URL (Option 1 — Docker bridge IP):** `http://172.17.0.1:8969/v1`
-
-**Option 2:** Use host networking mode (`docker run --network host ...`), then use: `http://localhost:8969/v1`
-
-### Remote Server
-
-Run Speaches on a different machine:
-
-**TTS Base URL:** `http://server-ip:8969/v1` (replace with your server's IP)
-
----
-
-## Multi-Speaker Podcasts
-
-Configure different voices for each speaker:
+# Text-to-speech voice model
+docker compose exec speaches uv tool run speaches-cli model download speaches-ai/Kokoro-82M-v1.0-ONNX
 
+# Speech-to-text model (see local-stt.md for other sizes)
+docker compose exec speaches uv tool run speaches-cli model download Systran/faster-whisper-small
 ```
-Speaker 1 (Host):
-  Model: speaches-ai/Kokoro-82M-v1.0-ONNX
-  Voice: af_bella
 
-Speaker 2 (Guest):
-  Model: speaches-ai/Kokoro-82M-v1.0-ONNX
-  Voice: am_adam
+Test text-to-speech:
 
-Speaker 3 (Narrator):
-  Model: speaches-ai/Kokoro-82M-v1.0-ONNX
-  Voice: bf_emma
+```bash
+curl http://localhost:8969/v1/audio/speech -s -H "Content-Type: application/json" \
+  --output test.mp3 \
+  --data '{"input": "Local speech is working.", "model": "speaches-ai/Kokoro-82M-v1.0-ONNX", "voice": "af_bella"}'
 ```
 
+## 3. Connect Open Notebook
+
+Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) and pick **OpenAI Compatible**, with these values:
+
+1. **Configuration Name** "Speaches", no API key.
+2. **Base URL**:
+
+   | Open Notebook runs | Base URL |
+   |--------------------|----------|
+   | In Docker, Speaches published on the host (macOS/Windows) | `http://host.docker.internal:8969/v1` |
+   | In Docker on Linux | `http://host.docker.internal:8969/v1` with `extra_hosts: ["host.docker.internal:host-gateway"]` on the `open_notebook` service, or `http://172.17.0.1:8969/v1` |
+   | In the same compose file as Speaches | `http://speaches:8000/v1` |
+   | From source | `http://localhost:8969/v1` |
+   | Speaches on another machine | `http://<server-ip>:8969/v1` |
+
+3. In **Discover Models**, set **Model Type** to **TTS** and add `speaches-ai/Kokoro-82M-v1.0-ONNX`; then set it to **STT** and add your Whisper model. If a model isn't listed, type its id and click **Add "…"**.
+4. Under **Default Model Assignments**, choose the **Text-to-Speech Model** and **Speech-to-Text Model**.
+
+If you also use another OpenAI-compatible server (LM Studio, vLLM) for chat, keep it as a separate configuration: each configuration has one Base URL.
+
+## 4. Use it for podcasts
+
+Podcast voices come from **speaker profiles** (Podcasts → Profiles). In each speaker profile, select the Speaches model as the voice model and set **Voice ID** to a Kokoro voice, for example `af_bella` or `am_adam`. The voice list is in the Speaches and Kokoro documentation. The speaker profiles that ship with Open Notebook use OpenAI voice names and have no voice model set, so edit them before generating.
+
+Local TTS servers usually handle one request at a time. If podcast audio fails or stalls, lower `TTS_BATCH_SIZE` (default 5) to `1` or `2`, and raise `ESPERANTO_TTS_TIMEOUT` (default 300 seconds) for long segments on CPU. Both go in the `open_notebook` environment; see the [Environment Reference](environment-reference.md#worker-and-background-jobs).
+
 ---
 
 ## Troubleshooting
 
-### Service Won't Start
+**Test shows "Cannot connect to server. Check the URL is correct."** Check that Speaches runs (`curl http://localhost:8969/v1/models` on the Speaches host), then test the exact **Base URL** you configured from inside the Open Notebook container, adding `/models`:
 
 ```bash
-# Check logs
-docker compose logs speaches
-
-# Verify port available
-lsof -i :8969
-
-# Restart
-docker compose down && docker compose up -d
+# Replace with your Base URL from the table above, e.g. http://speaches:8000/v1
+docker compose exec open_notebook curl -s <Base URL>/models
 ```
 
-### Connection Refused
+**Model not found.** List what Speaches has downloaded and download the missing model:
 
 ```bash
-# Test Speaches is running
-curl http://localhost:8969/v1/models
-
-# From inside Open Notebook container
-docker exec -it open-notebook curl http://host.docker.internal:8969/v1/models
-```
-
-### Model Not Found
-
-```bash
-# List downloaded models
 docker compose exec speaches uv tool run speaches-cli model list
-
-# Download if missing
-docker compose exec speaches uv tool run speaches-cli model download speaches-ai/Kokoro-82M-v1.0-ONNX
 ```
 
-### Poor Audio Quality
+**Podcast fails with a voice error.** The speaker profile's Voice ID isn't a voice the model provides. See [Processing Issues → Podcasts](../6-TROUBLESHOOTING/processing-issues.md#podcast-failures).
 
-- Try different voices
-- Adjust speed: `"speed": 0.9` to `1.2`
-- Check model downloaded completely
-- Allocate more memory
-
-### Slow Generation
-
-| Solution | How |
-|----------|-----|
-| Use GPU | Switch to `latest-cuda` image |
-| More CPU | Allocate more cores in Docker |
-| Faster model | Use smaller/quantized models |
-| SSD storage | Move Docker volumes to SSD |
-
----
-
-## Performance Tips
-
-### Recommended Specs
-
-| Component | Minimum | Recommended |
-|-----------|---------|-------------|
-| CPU | 2 cores | 4+ cores |
-| RAM | 2 GB | 4+ GB |
-| Storage | 5 GB | 10 GB (for multiple models) |
-| GPU | None | NVIDIA (optional) |
-
-### Resource Limits
-
-```yaml
-services:
-  speaches:
-    # ... other config
-    mem_limit: 4g
-    cpus: 2
-```
-
-### Monitor Usage
-
-```bash
-docker stats speaches
-```
-
----
-
-## Comparison: Local vs Cloud
-
-| Aspect | Local (Speaches) | Cloud (OpenAI/ElevenLabs) |
-|--------|------------------|---------------------------|
-| **Cost** | Free | $0.015-0.10/min |
-| **Privacy** | Complete | Data sent to provider |
-| **Speed** | Depends on hardware | Usually faster |
-| **Quality** | Good | Excellent |
-| **Setup** | Moderate | Simple API key |
-| **Offline** | Yes | No |
-| **Voices** | Limited | Many options |
-
-### When to Use Local
-
-- Privacy-sensitive content
-- High-volume generation
-- Development/testing
-- Offline environments
-- Cost control
-
-### When to Use Cloud
-
-- Premium quality needs
-- Multiple languages
-- Time-sensitive projects
-- Limited hardware
-
----
-
-## Other Local TTS Options
-
-Any OpenAI-compatible TTS server works. The key is:
-
-1. Server implements `/v1/audio/speech` endpoint
-2. Add an OpenAI-Compatible credential in **Manage → Models** with the TTS base URL
-3. Add model with provider `openai_compatible`
+**Slow generation.** Use the `latest-cuda` image on a GPU, give the container more CPU, and keep `TTS_BATCH_SIZE` low.
 
 ---
 
 ## Related
 
-- **[Local STT Setup](local-stt.md)** - Speech-to-text with Speaches
-- **[OpenAI-Compatible Providers](openai-compatible.md)** - General compatible provider setup
-- **[AI Providers](ai-providers.md)** - All provider configuration
-- **[Creating Podcasts](../3-USER-GUIDE/creating-podcasts.md)** - Using TTS for podcasts
+- [Local Speech-to-Text](local-stt.md) — Whisper models, long audio
+- [OpenAI-Compatible Providers](openai-compatible.md)
+- [Creating Podcasts](../3-USER-GUIDE/creating-podcasts.md)
diff --git a/docs/5-CONFIGURATION/mcp-integration.md b/docs/5-CONFIGURATION/mcp-integration.md
index 39de33f7..f9a1dfa2 100644
--- a/docs/5-CONFIGURATION/mcp-integration.md
+++ b/docs/5-CONFIGURATION/mcp-integration.md
@@ -24,7 +24,7 @@ The [Model Context Protocol](https://modelcontextprotocol.io) is an open standar
 
 2. **Configure Claude Desktop**:
 
-   **macOS/Linux**: Edit `~/Library/Application Support/Claude/claude_desktop_config.json`
+   **macOS**: Edit `~/Library/Application Support/Claude/claude_desktop_config.json`
 
    ```json
    {
@@ -92,12 +92,6 @@ If your Open Notebook instance is running on a remote server, update the URL acc
 "OPEN_NOTEBOOK_URL": "http://192.168.1.100:5055"
 ```
 
-Or with a domain:
-
-```json
-"OPEN_NOTEBOOK_URL": "https://notebook.yourdomain.com/api"
-```
-
 ## What You Can Do
 
 Once connected, you can ask Claude or your AI assistant to:
diff --git a/docs/5-CONFIGURATION/ollama.md b/docs/5-CONFIGURATION/ollama.md
index 43272713..0c945d50 100644
--- a/docs/5-CONFIGURATION/ollama.md
+++ b/docs/5-CONFIGURATION/ollama.md
@@ -1,146 +1,81 @@
 # Ollama Setup Guide
 
-Ollama provides free, local AI models that run on your own hardware. This guide covers everything you need to know about setting up Ollama with Open Notebook, including different deployment scenarios and network configurations.
+[Ollama](https://ollama.com) runs open-weight models on your own hardware. Open Notebook can use it for chat, transformations, podcast scripts and embeddings. It doesn't provide speech models; for local podcasts and transcription, add [Speaches](local-tts.md).
 
-## Why Choose Ollama?
-
-- **🆓 Completely Free**: No API costs after initial setup
-- **🔒 Full Privacy**: Your data never leaves your local network
-- **📱 Offline Capable**: Works without internet connection
-- **🚀 Fast**: Local inference with no network latency
-- **🧠 Reasoning Models**: Support for advanced reasoning models like DeepSeek-R1
-- **💾 Model Variety**: Access to hundreds of open-source models
+---
 
 ## Quick Start
 
-### 1. Install Ollama
-
-**Linux/macOS:**
-```bash
-curl -fsSL https://ollama.ai/install.sh | sh
-```
-
-**Windows:**
-Download and install from [ollama.ai](https://ollama.ai/download)
-
-### 2. Pull Required Models
+### 1. Install Ollama and pull models
 
 ```bash
-# Language models (choose one or more)
-ollama pull qwen3              # Excellent general purpose, 7B parameters
-ollama pull gemma3            # Google's model, good performance
-ollama pull deepseek-r1       # Advanced reasoning model
-ollama pull phi4              # Microsoft's efficient model
+# Linux / macOS
+curl -fsSL https://ollama.com/install.sh | sh
+# Windows: download the installer from https://ollama.com/download
 
-# Embedding model (required for search)
-ollama pull mxbai-embed-large  # Best embedding model for Ollama
+# A language model (pick one that fits your hardware)
+ollama pull qwen3
+
+# An embedding model (needed for search, Ask and embeddings)
+ollama pull mxbai-embed-large
 ```
 
-### 3. Configure Open Notebook
+Open Notebook doesn't download Ollama models for you. Pull every model you plan to use, including the embedding model.
 
-**Via Settings UI (Recommended):**
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **Ollama**
-3. Enter the base URL (see [Network Configuration](#network-configuration-guide) below for correct URL)
-4. Click **Save**, then **Test Connection**
-5. Click **Discover Models** → **Register Models**
+### 2. Let Open Notebook reach Ollama
+
+If Open Notebook runs in Docker or on another machine, Ollama must listen on more than localhost:
 
-**Environment variable fallback (Deprecated):**
 ```bash
-# For local installation:
-export OLLAMA_API_BASE=http://localhost:11434
-# For Docker installation:
-export OLLAMA_API_BASE=http://host.docker.internal:11434
+OLLAMA_HOST=0.0.0.0:11434 ollama serve
 ```
 
-> **Deprecated**: `OLLAMA_API_BASE` is a deprecated fallback. It still works today, but there is no guarantee it keeps working in future releases, and new automation should not be built on it. Configure Ollama via **Manage → Models** instead. For headless/CI/Docker setups, see the [environment reference](environment-reference.md#legacy-ai-provider-environment-variables-deprecated) and the provisioning discussion in [#765](https://github.com/lfnovo/open-notebook/discussions/765).
+For the systemd service on Linux, run `sudo systemctl edit ollama`, add these lines, save, then run `sudo systemctl restart ollama`:
 
-## Network Configuration Guide
-
-When adding an Ollama credential in **Manage → Models**, you need to enter the correct base URL. The correct URL depends on your deployment scenario:
-
-### Scenario 1: Local Installation (Same Machine)
-
-When both Open Notebook and Ollama run directly on your machine:
-
-**Base URL to enter in Manage → Models:** `http://localhost:11434`
-
-Alternative: `http://127.0.0.1:11434` (use if you have DNS resolution issues with localhost)
-
-### Scenario 2: Open Notebook in Docker, Ollama on Host
-
-When Open Notebook runs in Docker but Ollama runs on your host machine:
-
-**Base URL to enter in Manage → Models:** `http://host.docker.internal:11434`
-
-**⚠️ CRITICAL: Ollama must accept external connections:**
-```bash
-# Start Ollama with external access enabled
-export OLLAMA_HOST=0.0.0.0:11434
-ollama serve
+```ini
+[Service]
+Environment="OLLAMA_HOST=0.0.0.0:11434"
 ```
 
-**⚠️ LINUX USERS: Extra configuration required!**
+`OLLAMA_HOST=0.0.0.0` exposes Ollama's API, which has no authentication, on every network interface. Allow port 11434 only from this host and its Docker networks (for example with your firewall), never from untrusted networks. On macOS and Windows with Docker Desktop, try without this first: `host.docker.internal` usually reaches Ollama's default setup. See [Docker Compose installation](../1-INSTALLATION/docker-compose.md) for the per-platform steps.
 
-On Linux, `host.docker.internal` doesn't resolve automatically like it does on macOS/Windows. You must add `extra_hosts` to your docker-compose.yml:
+### 3. Add the credential
+
+Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) and pick **Ollama**. No API key is needed; set **Base URL** from the table below. In **Discover Models**, add your chat model with **Model Type** `Language` and your embedding model with `Embedding`.
+
+---
+
+## Which Base URL to use
+
+| Open Notebook runs | Ollama runs | Base URL |
+|--------------------|-------------|----------|
+| From source on the same machine | Same machine | `http://localhost:11434` |
+| In Docker | On the host | `http://host.docker.internal:11434` |
+| In Docker | In the same compose file (service `ollama`) | `http://ollama:11434` |
+| Anywhere | Another machine | `http://<ollama-ip>:11434` |
+
+**Linux with Docker:** `host.docker.internal` doesn't exist by default. Add it to the `open_notebook` service, then `docker compose up -d`:
 
 ```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
 services:
   open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    # ... other settings ...
     extra_hosts:
       - "host.docker.internal:host-gateway"
 ```
 
-Without this, you'll get connection errors like:
-```
-httpcore.ConnectError: [Errno -2] Name or service not known
-```
+Without it, Test shows "Cannot connect to Ollama. Check if Ollama server is running." and the log shows `Name or service not known`.
 
-**Why `host.docker.internal`?**
-- Docker containers can't reach `localhost` on the host
-- `host.docker.internal` is Docker's special hostname for the host machine
-- Available on Docker Desktop for Mac/Windows; **requires `extra_hosts` on Linux**
+### Ollama in the same compose file
 
-**Why `OLLAMA_HOST=0.0.0.0:11434`?**
-- By default, Ollama only binds to localhost and rejects external connections
-- Docker containers are considered "external" even when running on the same machine
-- Setting `OLLAMA_HOST=0.0.0.0:11434` allows connections from Docker containers
-
-### Scenario 3: Both in Docker (Same Compose)
-
-When both Open Notebook and Ollama run in the same Docker Compose stack:
-
-**Base URL to enter in Manage → Models:** `http://ollama:11434`
-
-**Docker Compose Example:**
+Add a service next to `surrealdb` and `open_notebook` in the shipped `docker-compose.yml`:
 
 ```yaml
-# Requires surrealdb service — see full base setup:
-# https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml
 services:
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    ports:
-      - "8502:8502"
-      - "5055:5055"
-    environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-    volumes:
-      - ./notebook_data:/app/data
-    depends_on:
-      - ollama
-
   ollama:
     image: ollama/ollama:latest
-    ports:
-      - "11434:11434"
     volumes:
-      - ollama_data:/root/.ollama
-    # Optional: GPU support
+      - ./ollama_data:/root/.ollama
+    # GPU (NVIDIA Container Toolkit required)
     deploy:
       resources:
         reservations:
@@ -148,597 +83,113 @@ services:
             - driver: nvidia
               count: 1
               capabilities: [gpu]
-
-volumes:
-  ollama_data:
 ```
 
-### Scenario 4: Remote Ollama Server
+Use Base URL `http://ollama:11434`, and pull models inside the container: `docker compose exec ollama ollama pull qwen3`. The repository's `examples/docker-compose-ollama.yml` is a complete version of this setup.
 
-When Ollama runs on a different machine in your network:
+---
 
-**Base URL to enter in Manage → Models:** `http://192.168.1.100:11434` (replace with your Ollama server's IP)
+## GPU acceleration
 
-**Security Note:** Only use this in trusted networks. Ollama doesn't have built-in authentication.
+- **Ollama in Docker with an NVIDIA GPU:** install the [NVIDIA Container Toolkit](https://docs.nvidia.com/datacenter/cloud-native/container-toolkit/latest/install-guide.html) on the host and add the `deploy.resources.reservations.devices` block shown in [Ollama in the same compose file](#ollama-in-the-same-compose-file). Without it, the container runs on CPU only.
+- **Ollama installed on the host:** it uses a supported GPU (NVIDIA CUDA, Apple Silicon Metal, AMD ROCm) on its own; nothing to configure in Open Notebook.
 
-### Scenario 5: Ollama with Custom Port
+`ollama ps` shows whether a loaded model runs on the GPU or the CPU.
 
-If you've configured Ollama to use a different port:
+## Model names
 
-```bash
-# Start Ollama on custom port
-OLLAMA_HOST=0.0.0.0:8080 ollama serve
+Discover Models lists the models Ollama has installed, so the names come out right. If you type a name by hand, it must match `ollama list` exactly, tag included:
+
+```
+$ ollama list
+NAME                        SIZE
+mxbai-embed-large:latest    669 MB
+gemma3:12b                  8.1 GB
 ```
 
-**Base URL to enter in Manage → Models:** `http://localhost:8080`
+Use `gemma3:12b`, not `gemma3`. If you remove a model from Ollama, remove it from Manage → Models too and pick new defaults.
 
-## Model Recommendations
+---
 
-### Language Models
+## Context window (`num_ctx`)
 
-| Model | Size | Best For | Quality | Speed |
-|-------|------|----------|---------|-------|
-| **qwen3** | 7B | General purpose, coding | Excellent | Fast |
-| **deepseek-r1** | 7B | Reasoning, problem-solving | Exceptional | Medium |
-| **gemma3** | 7B | Balanced performance | Very Good | Fast |
-| **phi4** | 14B | Efficiency on small hardware | Good | Very Fast |
-| **llama3** | 8B | General purpose | Very Good | Medium |
+Ollama credentials have a **Context Window (num_ctx)** field. Empty means 8192 tokens, which runs on GPUs with about 8 GB of VRAM. It applies to every model used through that credential.
 
-### Embedding Models
+Ollama doesn't return an error when a prompt is longer than the window: it drops the start of the prompt and answers anyway (its server log shows a `truncating input prompt` warning). Symptoms in Open Notebook are answers that ignore your sources, chats that forget earlier messages, and transformations of long documents that only cover the end.
 
-| Model | Best For | Performance |
-|-------|----------|-------------|
-| **mxbai-embed-large** | General search | Excellent |
-| **nomic-embed-text** | Document similarity | Good |
-| **all-minilm** | Lightweight option | Fair |
+To fix it, edit the Ollama credential in Manage → Models and raise **Context Window (num_ctx)**, for example to `32768`, if your hardware has the memory for it. If Ollama then runs out of memory or becomes very slow, lower it again or use a smaller model. Including fewer sources in chat context ("Insights only" instead of "Full content") also helps.
 
-### Installation Commands
+---
 
-```bash
-# Essential models
-ollama pull qwen3                 # Primary language model
-ollama pull mxbai-embed-large     # Search embeddings
+## Timeouts with slow models
 
-# Optional reasoning model
-ollama pull deepseek-r1           # Advanced reasoning
+Every model call is limited by `ESPERANTO_LLM_TIMEOUT`, **180 seconds** by default. Before v1.15.0 Ollama calls had no time limit; now a large model on CPU, or the first request while a model loads into memory, can run out of time. When that happens, the error says:
 
-# Alternative language models
-ollama pull gemma3                # Google's model
-ollama pull phi4                  # Microsoft's efficient model
+> The AI provider took too long to respond. Try again, use a faster model, or raise ESPERANTO_LLM_TIMEOUT (180 seconds by default).
+
+(v1.15.0 shows "Could not connect to the AI provider. Please check your network connection and provider URL." for the same timeout.)
+
+Raise the limit in the `open_notebook` service, keeping it below 600 seconds (the web UI's own limit), and apply with `docker compose up -d`:
+
+```yaml
+services:
+  open_notebook:
+    environment:
+      - ESPERANTO_LLM_TIMEOUT=420
+      - OPEN_NOTEBOOK_WORKER_MAX_TASKS=1   # one job at a time on a single GPU
 ```
 
-## Hardware Requirements
+`OPEN_NOTEBOOK_WORKER_MAX_TASKS=1` stops background jobs (source processing, embeddings, insights, podcasts) from sending several requests to Ollama at once, which makes each of them slower and more likely to time out. To keep a model loaded between requests, set `OLLAMA_KEEP_ALIVE` on the Ollama server (for example `30m`).
 
-### Minimum Requirements
-- **RAM**: 8GB (for 7B models)
-- **Storage**: 10GB free space per model
-- **CPU**: Modern multi-core processor
-
-### Recommended Setup
-- **RAM**: 16GB+ (for multiple models)
-- **Storage**: SSD with 50GB+ free space
-- **GPU**: NVIDIA GPU with 8GB+ VRAM (optional but faster)
-
-### GPU Acceleration
-
-**NVIDIA GPU (CUDA):**
-```bash
-# Install NVIDIA Container Toolkit for Docker
-# Then use the Docker Compose example above with GPU support
-
-# For local installation, Ollama auto-detects CUDA
-ollama pull qwen3
-```
-
-**Apple Silicon (M1/M2/M3):**
-```bash
-# Ollama automatically uses Metal acceleration
-# No additional setup required
-ollama pull qwen3
-```
-
-**AMD GPUs:**
-```bash
-# ROCm support varies by model and system
-# Check Ollama documentation for latest compatibility
-```
+---
 
 ## Troubleshooting
 
-### Model Name Configuration (Critical)
+### Test shows "Cannot connect to Ollama. Check if Ollama server is running."
 
-**⚠️ IMPORTANT: Model names must exactly match the output of `ollama list`**
+1. Is Ollama running? `curl http://localhost:11434/api/tags` on the Ollama machine.
+2. Is it listening beyond localhost? See [step 2](#2-let-open-notebook-reach-ollama) (and its exposure warning).
+3. Can the container reach it?
+   ```bash
+   docker compose exec open_notebook curl -s http://host.docker.internal:11434/api/tags
+   ```
+   On Linux, add the `extra_hosts` entry shown above. If a firewall blocks the container, allow port 11434 only from the Docker networks, for example `sudo ufw allow from 172.16.0.0/12 to any port 11434 proto tcp` (check your Docker subnets with `docker network inspect`), never from everywhere.
 
-This is the most common cause of "Failed to send message" errors. Open Notebook requires the **exact model name** as it appears in Ollama.
+### "Connection timed out. Check if Ollama server is accessible."
 
-**Step 1: Get the exact model name**
-```bash
-ollama list
-```
+The address resolves but nothing answers: wrong IP, a firewall dropping packets, or a VPN between the machines.
 
-Example output:
-```
-NAME                        ID              SIZE      MODIFIED
-mxbai-embed-large:latest    468836162de7    669 MB    7 minutes ago
-gemma3:12b                  f4031aab637d    8.1 GB    2 months ago
-qwen3:32b                   030ee887880f    20 GB     9 days ago
-```
+### "No model configured for default for type=chat"
 
-**Step 2: Use the exact name when adding the model in Open Notebook**
+No Chat Model is assigned. Go to **Manage → Models → Default Model Assignments**.
 
-| ✅ Correct | ❌ Wrong |
-|-----------|----------|
-| `gemma3:12b` | `gemma3` (missing tag) |
-| `qwen3:32b` | `qwen3-32b` (wrong format) |
-| `mxbai-embed-large:latest` | `mxbai-embed-large` (missing tag) |
+### "Model is not a LanguageModel: …"
 
-**Note:** Some models use `:latest` as the default tag. If `ollama list` shows `model:latest`, you must use `model:latest` in Open Notebook, not just `model`.
+An embedding model is assigned to a language role (Chat, Transformation, Tools or Large Context Model). Assign a language model there; embedding models belong only in Embedding Model.
 
-**Step 3: Configure in Open Notebook**
+### Answers ignore the sources, or long documents are cut short
 
-1. Go to **Manage → Models**
-2. Click **Add Model**
-3. Enter the **exact name** from `ollama list`
-4. Select provider: `ollama`
-5. Select type: `language` (for chat) or `embedding` (for search)
-6. Save the model
-7. Set it as the default for the appropriate task (chat, transformation, etc.)
+The prompt is bigger than the context window. See [Context window](#context-window-num_ctx).
 
-### Common Issues
+### Chat or transformations fail after a few minutes
 
-**1. "Ollama unavailable" in Open Notebook**
+Timeout. See [Timeouts with slow models](#timeouts-with-slow-models).
 
-**Check Ollama is running:**
-```bash
-curl http://localhost:11434/api/tags
-```
+### Self-signed certificate on an HTTPS Ollama endpoint
 
-**Verify credential is configured:**
-Check **Manage → Models** for an Ollama credential with the correct base URL.
+`[SSL: CERTIFICATE_VERIFY_FAILED]`: mount your CA bundle and set `ESPERANTO_SSL_CA_BUNDLE`, as described in [Advanced → SSL](advanced.md#ssl-for-self-signed-providers).
 
-**⚠️ IMPORTANT: Enable external connections (most common fix):**
-```bash
-# If Open Notebook runs in Docker or on a different machine,
-# Ollama must bind to all interfaces, not just localhost
-export OLLAMA_HOST=0.0.0.0:11434
-ollama serve
-```
-> **Why this is needed:** By default, Ollama only accepts connections from `localhost` (127.0.0.1). When Open Notebook runs in Docker or on a different machine, it can't reach Ollama unless you configure `OLLAMA_HOST=0.0.0.0:11434` to accept external connections.
+---
 
-**Restart Ollama:**
-```bash
-# Linux/macOS
-sudo systemctl restart ollama
-# or
-ollama serve
+## Legacy environment variable
 
-# Windows
-# Restart from system tray or Services
-```
+`OLLAMA_API_BASE` still works as a deprecated fallback when no Ollama credential exists. Use the credential instead; **Migrate to Database** in **Manage → Models** converts it. See the [Environment Reference](environment-reference.md#legacy-ai-provider-variables-deprecated).
 
-**2. Docker networking issues**
+---
 
-**From inside Open Notebook container, test Ollama:**
-```bash
-# Get into container
-docker exec -it open-notebook bash
+## Related
 
-# Test connection
-curl http://host.docker.internal:11434/api/tags
-```
-
-**If this fails on Linux** with "Name or service not known", you need to add `extra_hosts` to your docker-compose.yml. See the [Docker-Specific Troubleshooting](#docker-specific-troubleshooting) section below.
-
-**3. Models not downloading**
-
-**Check disk space:**
-```bash
-df -h
-```
-
-**Manual model pull:**
-```bash
-ollama pull qwen3 --verbose
-```
-
-**Clear failed downloads:**
-```bash
-ollama rm qwen3
-ollama pull qwen3
-```
-
-**4. Slow performance**
-
-**Check model size vs available RAM:**
-```bash
-ollama ps  # Show running models
-free -h    # Check available memory
-```
-
-**Use smaller models:**
-```bash
-ollama pull phi4         # Instead of larger models
-ollama pull gemma3:2b   # 2B parameter variant
-```
-
-**5. Port conflicts**
-
-**Check what's using port 11434:**
-```bash
-lsof -i :11434
-netstat -tulpn | grep 11434
-```
-
-**Use custom port:**
-```bash
-OLLAMA_HOST=0.0.0.0:8080 ollama serve
-```
-Then update the base URL in **Manage → Models** to `http://localhost:8080`
-
-**6. "Failed to send message" in Chat**
-
-**Symptom:** Chat shows "Failed to send message" toast notification. Logs may show:
-```
-Error executing chat: Model is not a LanguageModel: None
-```
-
-**Causes (in order of likelihood):**
-
-1. **Model name mismatch**: The model name in Open Notebook doesn't exactly match `ollama list`
-2. **No default model configured**: You haven't set a default chat model in Manage → Models
-3. **Model was deleted**: You removed the model from Ollama but didn't update Open Notebook's defaults
-4. **Model record deleted**: The model was removed from Open Notebook but is still set as default
-
-**Solutions:**
-
-**Check 1: Verify model names match exactly**
-```bash
-# Get exact model names from Ollama
-ollama list
-
-# Compare with what's configured in Open Notebook
-# Go to Manage → Models and verify the names match EXACTLY
-```
-
-**Check 2: Verify default models are set**
-1. Go to **Manage → Models**
-2. Scroll to **Default Models** section
-3. Ensure **Default Chat Model** has a value selected
-4. If empty, select an available language model
-
-**Check 3: Refresh after changes**
-If you've added/removed models in Ollama:
-1. Refresh the Open Notebook page
-2. Go to Manage → Models
-3. Re-add any missing models with exact names from `ollama list`
-4. Re-select default models if needed
-
-**Check 4: Test the model directly**
-```bash
-# Verify Ollama can use the model
-ollama run gemma3:12b "Hello, world"
-```
-
-### Docker-Specific Troubleshooting
-
-**1. Linux: `host.docker.internal` not resolving (Most Common)**
-
-If you see `Name or service not known` errors on Linux, add `extra_hosts` to your docker-compose.yml:
-
-```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
-services:
-  open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    environment:
-    # ... rest of your config
-```
-
-Then in **Manage → Models**, use base URL: `http://host.docker.internal:11434`
-
-This maps `host.docker.internal` to your host machine's IP. macOS/Windows Docker Desktop does this automatically, but Linux requires explicit configuration.
-
-**2. Host networking on Linux (alternative):**
-```bash
-# Use host networking if host.docker.internal doesn't work
-docker run --network host lfnovo/open_notebook:v1-latest  # for quick testing only
-```
-Then in **Manage → Models**, use base URL: `http://localhost:11434`
-
-**3. Custom bridge network:**
-```yaml
-version: '3.8'
-networks:
-  ollama_network:
-    driver: bridge
-
-services:
-  open-notebook:
-    networks:
-      - ollama_network
-    environment:
-  ollama:
-    networks:
-      - ollama_network
-```
-
-Then in **Manage → Models**, use base URL: `http://ollama:11434`
-
-**4. Firewall issues:**
-```bash
-# Allow Ollama port through firewall
-sudo ufw allow 11434
-# or
-sudo firewall-cmd --add-port=11434/tcp --permanent
-```
-
-## Performance Optimization
-
-### Model Management
-
-**List installed models:**
-```bash
-ollama list
-```
-
-**Remove unused models:**
-```bash
-ollama rm model_name
-```
-
-**Show running models:**
-```bash
-ollama ps
-```
-
-**Preload models for faster startup:**
-```bash
-# Keep model in memory
-curl http://localhost:11434/api/generate -d '{
-  "model": "qwen3",
-  "prompt": "test",
-  "keep_alive": -1
-}'
-```
-
-### System Optimization
-
-**Linux: Increase file limits:**
-```bash
-echo "* soft nofile 65536" >> /etc/security/limits.conf
-echo "* hard nofile 65536" >> /etc/security/limits.conf
-```
-
-**macOS: Increase memory limits:**
-```bash
-# Add to ~/.zshrc or ~/.bash_profile
-export OLLAMA_MAX_LOADED_MODELS=2
-export OLLAMA_NUM_PARALLEL=4
-```
-
-**Docker: Resource allocation:**
-```yaml
-services:
-  ollama:
-    deploy:
-      resources:
-        limits:
-          memory: 8G
-          cpus: '4'
-```
-
-## Advanced Configuration
-
-### Environment Variables
-
-```bash
-# Ollama server configuration
-export OLLAMA_HOST=0.0.0.0:11434      # Bind to all interfaces
-export OLLAMA_KEEP_ALIVE=5m            # Keep models in memory
-export OLLAMA_MAX_LOADED_MODELS=3      # Max concurrent models
-export OLLAMA_MAX_QUEUE=512            # Request queue size
-export OLLAMA_NUM_PARALLEL=4           # Parallel request handling
-export OLLAMA_FLASH_ATTENTION=1        # Enable flash attention (if supported)
-
-# Open Notebook configuration (configure via Manage → Models instead)
-# OLLAMA_API_BASE=http://localhost:11434  # Deprecated fallback — works today, no guarantee
-```
-
-### SSL Configuration (Self-Signed Certificates)
-
-If you're running Ollama behind a reverse proxy with self-signed SSL certificates (e.g., Caddy, nginx with custom certs), you may encounter SSL verification errors:
-
-```
-[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate
-```
-
-**Solutions:**
-
-**Option 1: Use a custom CA bundle (recommended)**
-```bash
-# Point to your CA certificate file
-export ESPERANTO_SSL_CA_BUNDLE=/path/to/your/ca-bundle.pem
-```
-
-**Option 2: Disable SSL verification (development only)**
-```bash
-# WARNING: Only use in trusted development environments
-export ESPERANTO_SSL_VERIFY=false
-```
-
-**Docker Compose example with SSL configuration:**
-```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
-services:
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=change-me-to-a-secret-string
-      # Option 1: Custom CA bundle (if Ollama uses self-signed SSL)
-      - ESPERANTO_SSL_CA_BUNDLE=/certs/ca-bundle.pem
-      # Option 2: Disable verification (dev only)
-      # - ESPERANTO_SSL_VERIFY=false
-    volumes:
-      - /path/to/your/ca-bundle.pem:/certs/ca-bundle.pem:ro
-```
-
-> **Security Note:** Disabling SSL verification exposes you to man-in-the-middle attacks. Always prefer using a custom CA bundle in production environments.
-
-### Custom Model Imports
-
-**Import custom models:**
-```bash
-# Create Modelfile
-cat > Modelfile << EOF
-FROM qwen3
-PARAMETER temperature 0.7
-PARAMETER top_p 0.9
-SYSTEM "You are a helpful research assistant."
-EOF
-
-# Create custom model
-ollama create my-research-model -f Modelfile
-```
-
-**Use in Open Notebook:**
-1. Go to Models
-2. Add new model: `my-research-model`
-3. Set as default for specific tasks
-
-### Monitoring and Logging
-
-**Monitor Ollama logs:**
-```bash
-# Linux (systemd)
-journalctl -u ollama -f
-
-# Docker
-docker logs -f ollama
-
-# Manual run with verbose logging
-OLLAMA_DEBUG=1 ollama serve
-```
-
-**Resource monitoring:**
-```bash
-# CPU and memory usage
-htop
-
-# GPU usage (NVIDIA)
-nvidia-smi -l 1
-
-# Model-specific metrics
-ollama ps
-```
-
-## Integration Examples
-
-### Python Script Integration
-
-```python
-import requests
-import os
-
-# Test Ollama connection
-ollama_base = os.environ.get('OLLAMA_API_BASE', 'http://localhost:11434')
-response = requests.get(f'{ollama_base}/api/tags')
-print(f"Available models: {response.json()}")
-
-# Generate text
-payload = {
-    "model": "qwen3",
-    "prompt": "Explain quantum computing",
-    "stream": False
-}
-response = requests.post(f'{ollama_base}/api/generate', json=payload)
-print(response.json()['response'])
-```
-
-### Health Check Script
-
-```bash
-#!/bin/bash
-# ollama-health-check.sh
-
-OLLAMA_API_BASE=${OLLAMA_API_BASE:-"http://localhost:11434"}
-
-echo "Checking Ollama health..."
-if curl -s "${OLLAMA_API_BASE}/api/tags" > /dev/null; then
-    echo "✅ Ollama is running"
-    echo "Available models:"
-    curl -s "${OLLAMA_API_BASE}/api/tags" | jq -r '.models[].name'
-else
-    echo "❌ Ollama is not accessible at ${OLLAMA_API_BASE}"
-    exit 1
-fi
-```
-
-## Migration from Other Providers
-
-### Coming from OpenAI
-
-**Similar performance models:**
-- GPT-4 → `qwen3` or `deepseek-r1`
-- GPT-3.5 → `gemma3` or `phi4`
-- text-embedding-ada-002 → `mxbai-embed-large`
-
-**Cost comparison:**
-- OpenAI: $0.01-0.06 per 1K tokens
-- Ollama: $0 after hardware investment
-
-### Coming from Anthropic
-
-**Claude replacement suggestions:**
-- Claude 3.5 Sonnet → `deepseek-r1` (reasoning)
-- Claude 3 Haiku → `phi4` (speed)
-
-## Best Practices
-
-### Security
-
-1. **Network Security:**
-   - Run Ollama only on trusted networks
-   - Use firewall rules to limit access
-   - Consider VPN for remote access
-
-2. **Model Verification:**
-   - Only pull models from trusted sources
-   - Verify model checksums when possible
-
-3. **Resource Limits:**
-   - Set memory and CPU limits in production
-   - Monitor resource usage regularly
-
-### Performance
-
-1. **Model Selection:**
-   - Use appropriate model size for your hardware
-   - Smaller models for simple tasks
-   - Reasoning models only when needed
-
-2. **Resource Management:**
-   - Preload frequently used models
-   - Remove unused models regularly
-   - Monitor system resources
-
-3. **Network Optimization:**
-   - Use local networks for better latency
-   - Consider SSD storage for faster model loading
-
-## Getting Help
-
-**Community Resources:**
-- [Ollama GitHub](https://github.com/jmorganca/ollama) - Official repository
-- [Ollama Discord](https://discord.gg/ollama) - Community support
-- [Open Notebook Discord](https://discord.gg/37XJPXfz2w) - Integration help
-
-**Debugging Resources:**
-- Check Ollama logs for error messages
-- Test connection with curl commands
-- Verify environment variables
-- Monitor system resources
-
-This comprehensive guide should help you successfully deploy and optimize Ollama with Open Notebook. Start with the Quick Start section and refer to specific scenarios as needed.
\ No newline at end of file
+- [AI Providers](ai-providers.md) — other providers, including embedding providers to pair with Ollama
+- [Local speech with Speaches](local-tts.md) — local TTS and STT
+- [OpenAI-Compatible](openai-compatible.md) — LM Studio, vLLM, llama.cpp
+- [AI & Chat Issues](../6-TROUBLESHOOTING/ai-chat-issues.md)
diff --git a/docs/5-CONFIGURATION/omlx.md b/docs/5-CONFIGURATION/omlx.md
index a64cc54c..71af9fae 100644
--- a/docs/5-CONFIGURATION/omlx.md
+++ b/docs/5-CONFIGURATION/omlx.md
@@ -61,16 +61,18 @@ http://localhost:11435/v1
 
 ## Configure Open Notebook
 
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → select **oMLX**
-3. Set **Base URL** to `http://localhost:11435/v1` (prefilled by default)
-4. Optionally set an **API key** if you started oMLX with `--api-key`
-5. **Save** → **Test Connection** → **Discover Models** → register language and embedding models
+Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) and pick **oMLX**. In the form:
 
-### Legacy env vars (optional fallback)
+- **Configuration Name** (required), e.g. "oMLX"
+- **Base URL**: keep `http://localhost:11435/v1` (prefilled), or use `http://host.docker.internal:11435/v1` if Open Notebook runs in Docker
+- **API Key**: only if you started oMLX with `--api-key`
+
+In **Discover Models**, add your models with **Model Type** `Language`, then again with `Embedding`.
+
+### Legacy env vars (deprecated fallback)
 
 ```bash
-# Prefer Settings UI; env is for migration / headless setups
+# Prefer Manage → Models; env is for migration / headless setups
 export OMLX_API_BASE=http://localhost:11435/v1
 # Optional, only if oMLX was started with --api-key
 # export OMLX_API_KEY=your-key
@@ -98,7 +100,7 @@ Ensure oMLX listens on an interface Docker can reach.
 | Speech-to-text | ❌ |
 | Text-to-speech | ❌ |
 
-For local STT/TTS, see [Local STT](local-stt.md) and [Local TTS](local-tts.md) (e.g. Speaches via OpenAI-Compatible).
+For local STT/TTS, see [Local speech with Speaches](local-tts.md) (through the OpenAI Compatible provider).
 
 ## Troubleshooting
 
diff --git a/docs/5-CONFIGURATION/openai-compatible.md b/docs/5-CONFIGURATION/openai-compatible.md
index 14d14d72..5aa10e1f 100644
--- a/docs/5-CONFIGURATION/openai-compatible.md
+++ b/docs/5-CONFIGURATION/openai-compatible.md
@@ -1,213 +1,66 @@
 # OpenAI-Compatible Providers
 
-Use any server that implements the OpenAI API format with Open Notebook. This includes LM Studio, Text Generation WebUI, vLLM, and many others.
+The **OpenAI Compatible** provider connects Open Notebook to any server that speaks the OpenAI API: LM Studio, vLLM, llama.cpp's server, LocalAI, Text Generation WebUI, Speaches and many hosted gateways. It supports language, embedding, speech-to-text and text-to-speech models.
+
+For Ollama and oMLX, prefer their native providers: [Ollama](ollama.md), [oMLX](omlx.md).
 
 ---
 
-## What is OpenAI-Compatible?
+## Setup
 
-Many AI tools implement the same API format as OpenAI:
+1. Start your server and note its address, including the API path (usually `/v1`).
+2. Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) and pick **OpenAI Compatible**. In the form:
+   - **Configuration Name**, e.g. "LM Studio"
+   - **API Key**: optional. Leave it empty if the server doesn't check keys; some servers want any non-empty value
+   - **Base URL**: the server's API root, e.g. `http://host.docker.internal:1234/v1`
+3. **Test** asks the server for its model list (`GET <Base URL>/models`). If the server doesn't list a model, type its exact id in the **Discover Models** search box and click **Add "…"**.
 
-```
-POST /v1/chat/completions
-POST /v1/embeddings
-POST /v1/audio/speech
-```
-
-Open Notebook can connect to any server using this format.
+One configuration has one Base URL. To use different servers for different jobs (LM Studio for chat, Speaches for speech), add one OpenAI Compatible configuration per server. Each model you register remembers which configuration it came from.
 
 ---
 
-## Common Compatible Servers
+## Base URL from inside Docker
 
-| Server | Use Case | URL |
-|--------|----------|-----|
-| **LM Studio** | Desktop GUI for local models | https://lmstudio.ai |
-| **Text Generation WebUI** | Full-featured local inference | https://github.com/oobabooga/text-generation-webui |
-| **vLLM** | High-performance serving | https://github.com/vllm-project/vllm |
-| **Ollama** | Simple local models | (Use native Ollama provider instead) |
-| **oMLX** | Apple Silicon / MLX | (Use native [oMLX](omlx.md) provider instead) |
-| **LocalAI** | Local AI inference | https://github.com/mudler/LocalAI |
-| **llama.cpp server** | Lightweight inference | https://github.com/ggerganov/llama.cpp |
+`localhost` inside the Open Notebook container is the container itself.
 
----
+| Your server runs | Base URL |
+|------------------|----------|
+| On the host, Docker Desktop (macOS/Windows) | `http://host.docker.internal:<port>/v1` |
+| On the host, Linux | `http://host.docker.internal:<port>/v1` after adding `extra_hosts: ["host.docker.internal:host-gateway"]` to the `open_notebook` service, or the bridge IP `http://172.17.0.1:<port>/v1` |
+| In the same compose file | `http://<service-name>:<container-port>/v1` |
+| On another machine | `http://<server-ip>:<port>/v1` |
+| Open Notebook from source, server on the same machine | `http://localhost:<port>/v1` |
 
-## Quick Setup: LM Studio
+The server must listen on an address the container can reach, often `0.0.0.0` rather than `127.0.0.1`. Binding to `0.0.0.0` exposes the server, usually without authentication, on every network interface: allow its port only from this host and its Docker networks (for example with your firewall), never from untrusted networks.
 
-### Step 1: Install and Start LM Studio
-
-1. Download from https://lmstudio.ai
-2. Install and launch
-3. Download a model (e.g., Llama 3)
-4. Start the local server (default: port 1234)
-
-### Step 2: Configure in Manage → Models (Recommended)
-
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **OpenAI-Compatible**
-3. Enter base URL: `http://host.docker.internal:1234/v1` (Docker) or `http://localhost:1234/v1` (local)
-4. API key: `lm-studio` (placeholder, LM Studio doesn't require one)
-5. Click **Save**, then **Test Connection**
-
-**Legacy (Deprecated) — Environment variables:**
-```bash
-export OPENAI_COMPATIBLE_BASE_URL=http://localhost:1234/v1
-export OPENAI_COMPATIBLE_API_KEY=not-needed
-```
-
-### Step 3: Add Model in Open Notebook
-
-1. Go to **Manage** → **Models**
-2. Click **Add Model**
-3. Configure:
-   - **Provider**: `openai_compatible`
-   - **Model Name**: Your model name from LM Studio
-   - **Display Name**: `LM Studio - Llama 3`
-4. Click **Save**
-
----
-
-## Configuration via Settings UI
-
-The recommended way to configure OpenAI-compatible providers is through the Settings UI:
-
-1. Go to **Manage** → **Models**
-2. Click **Add Credential** → Select **OpenAI-Compatible**
-3. Enter your base URL and API key (if needed)
-4. Optionally configure per-service URLs for LLM, Embedding, TTS, and STT
-5. Click **Save**, then **Test Connection**
-
-## Legacy: Environment Variables (Deprecated)
-
-> **Deprecated**: These environment variables are deprecated. Use the Settings UI instead.
-
-### Language Models (Chat)
+Check from inside the container:
 
 ```bash
-OPENAI_COMPATIBLE_BASE_URL=http://localhost:1234/v1
-OPENAI_COMPATIBLE_API_KEY=optional-api-key
-```
-
-### Embeddings
-
-```bash
-OPENAI_COMPATIBLE_BASE_URL_EMBEDDING=http://localhost:1234/v1
-OPENAI_COMPATIBLE_API_KEY_EMBEDDING=optional-api-key
-```
-
-### Text-to-Speech
-
-```bash
-OPENAI_COMPATIBLE_BASE_URL_TTS=http://localhost:8969/v1
-OPENAI_COMPATIBLE_API_KEY_TTS=optional-api-key
-```
-
-### Speech-to-Text
-
-```bash
-OPENAI_COMPATIBLE_BASE_URL_STT=http://localhost:9000/v1
-OPENAI_COMPATIBLE_API_KEY_STT=optional-api-key
+docker compose exec open_notebook curl -s http://host.docker.internal:1234/v1/models
 ```
 
 ---
 
-## Docker Networking
+## LM Studio
 
-When Open Notebook runs in Docker and your compatible server runs on the host, use the appropriate base URL when adding your credential in **Manage → Models**:
+1. In LM Studio, load a model and start the local server (default port 1234). Enable "Serve on Local Network" if Open Notebook runs in Docker on Linux or on another machine.
+2. Base URL: `http://host.docker.internal:1234/v1` (Open Notebook in Docker) or `http://localhost:1234/v1` (from source). No API key.
 
-### macOS / Windows
+## vLLM
 
-**Base URL:** `http://host.docker.internal:1234/v1`
+```bash
+vllm serve meta-llama/Llama-3.1-8B-Instruct --port 8001
+```
 
-### Linux
+Base URL `http://host.docker.internal:8001/v1`. The model id is the Hugging Face path you served. Avoid port 8000 on the host if SurrealDB already uses it.
 
-**Base URL (Option 1 — Docker bridge IP):** `http://172.17.0.1:1234/v1`
-
-**Option 2:** Use host networking mode: `docker run --network host ...`
-Then use base URL: `http://localhost:1234/v1`
-
-### Same Docker Network
+In the same compose file:
 
 ```yaml
-# docker-compose.yml
-services:
-  open-notebook:
-    # ...
-
-  lm-studio:
-    # your LM Studio container
-    ports:
-      - "1234:1234"
-```
-
-**Base URL in Manage → Models:** `http://lm-studio:1234/v1`
-
----
-
-## Text Generation WebUI Setup
-
-### Start with API Enabled
-
-```bash
-python server.py --api --listen
-```
-
-### Configure Open Notebook
-
-In **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:5000/v1`
-
-### Docker Compose Example
-
-```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
-services:
-  text-gen:
-    image: atinoda/text-generation-webui:default
-    ports:
-      - "5000:5000"
-      - "7860:7860"
-    volumes:
-      - ./models:/app/models
-    command: --api --listen
-
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    depends_on:
-      - text-gen
-```
-
-Then in **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://text-gen:5000/v1`
-
----
-
-## vLLM Setup
-
-### Start vLLM Server
-
-```bash
-python -m vllm.entrypoints.openai.api_server \
-  --model meta-llama/Llama-3.1-8B-Instruct \
-  --port 8000
-```
-
-### Configure Open Notebook
-
-In **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://localhost:8000/v1`
-
-### Docker Compose with GPU
-
-```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
 services:
   vllm:
     image: vllm/vllm-openai:latest
     command: --model meta-llama/Llama-3.1-8B-Instruct
-    ports:
-      # Localhost only (vLLM has no authentication by default), on host port
-      # 8001 because SurrealDB already publishes 8000. Open Notebook reaches
-      # vLLM over the compose network at http://vllm:8000/v1 regardless.
-      - "127.0.0.1:8001:8000"
     volumes:
       - ~/.cache/huggingface:/root/.cache/huggingface
     deploy:
@@ -217,191 +70,52 @@ services:
             - driver: nvidia
               count: 1
               capabilities: [gpu]
-
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    depends_on:
-      - vllm
 ```
 
-Then in **Manage → Models**, add an **OpenAI-Compatible** credential with base URL: `http://vllm:8000/v1`
+Base URL `http://vllm:8000/v1` (the container port; no host port needs to be published).
 
----
-
-## Adding Models in Open Notebook
-
-### Via Settings UI
-
-1. Go to **Manage** → **Models**
-2. Click **Add Model** in appropriate section
-3. Select **Provider**: `openai_compatible`
-4. Enter **Model Name**: exactly as the server expects
-5. Enter **Display Name**: your preferred name
-6. Click **Save**
-
-### Model Name Format
-
-The model name must match what your server expects:
-
-| Server | Model Name Format |
-|--------|-------------------|
-| LM Studio | As shown in LM Studio UI |
-| vLLM | HuggingFace model path |
-| Text Gen WebUI | As loaded in UI |
-| llama.cpp | Model file name |
-
----
-
-## Testing Connection
-
-### Test API Endpoint
+## llama.cpp server
 
 ```bash
-# Test chat completions
-curl http://localhost:1234/v1/chat/completions \
-  -H "Content-Type: application/json" \
-  -d '{
-    "model": "your-model-name",
-    "messages": [{"role": "user", "content": "Hello"}]
-  }'
+llama-server -m model.gguf --host 0.0.0.0 --port 8080   # restrict port 8080 as described above
 ```
 
-### Test from Inside Docker
+Base URL `http://host.docker.internal:8080/v1`. If embeddings fail with null values on very short chunks, see `OPEN_NOTEBOOK_MIN_CHUNK_SIZE` in the [Environment Reference](environment-reference.md#embeddings-and-chunking).
 
-```bash
-docker exec -it open-notebook curl http://host.docker.internal:1234/v1/models
-```
+## Text Generation WebUI
+
+Start it with `--api --listen`; its OpenAI-compatible API listens on port 5000. Base URL `http://host.docker.internal:5000/v1`.
+
+## Speech servers
+
+For local text-to-speech and speech-to-text with Speaches, see [Local speech with Speaches](local-tts.md).
 
 ---
 
 ## Troubleshooting
 
-### Connection Refused
+| Message from **Test** | Cause | Fix |
+|-----------------------|-------|-----|
+| "Cannot connect to server. Check the URL is correct." | Nothing answers at that address, or TLS verification failed | Check the Base URL from inside the container (curl above). For HTTPS with a private CA, set `ESPERANTO_SSL_CA_BUNDLE` ([Advanced → SSL](advanced.md#ssl-for-self-signed-providers)) |
+| "Connection timed out. Check if server is accessible." | The `/models` request got no answer within 10 seconds: firewall dropping packets, wrong IP, or an unresponsive server | Check reachability from the container and the server's logs |
+| "Invalid API key" | The server checks keys and the one saved doesn't match | Edit the configuration and set the key |
+| "Server returned status 404" | `<Base URL>/models` doesn't exist: the API path (usually `/v1`) is missing, or the server doesn't support listing models | Check the API path. If the server can't list models, the test can't pass, but you can still add models by id |
 
-```
-Problem: Cannot connect to server
+During use:
 
-Solutions:
-1. Verify server is running
-2. Check port is correct
-3. Test with curl directly
-4. Check Docker networking (use host.docker.internal)
-5. Verify firewall allows connection
-```
-
-### Model Not Found
-
-```
-Problem: Server returns "model not found"
-
-Solutions:
-1. Check model is loaded in server
-2. Verify exact model name spelling
-3. List available models: curl http://localhost:1234/v1/models
-4. Update model name in Open Notebook
-```
-
-### Slow Responses
-
-```
-Problem: Requests take very long
-
-Solutions:
-1. Check server resources (RAM, GPU)
-2. Use smaller/quantized model
-3. Reduce context length
-4. Enable GPU acceleration if available
-```
-
-### Authentication Errors
-
-```
-Problem: 401 or authentication failed
-
-Solutions:
-1. Check if server requires API key
-2. Set the API key in your credential (Manage → Models)
-3. Some servers need any non-empty key (use a placeholder like "not-needed")
-```
-
-### Timeout Errors
-
-```
-Problem: Request times out
-
-Solutions:
-1. Model may be loading (first request slow)
-2. Increase timeout settings
-3. Check server logs for errors
-4. Reduce request size
-```
+- **Model not found:** the id you registered doesn't match what the server serves. Compare with `curl <base-url>/models` and re-add the model with the exact id.
+- **Slow answers fail after three minutes:** model calls are limited by `ESPERANTO_LLM_TIMEOUT` (180 s). The error reads "The AI provider took too long to respond. Try again, use a faster model, or raise ESPERANTO_LLM_TIMEOUT (180 seconds by default)." Raise it in the `open_notebook` environment, below 600, and set `OPEN_NOTEBOOK_WORKER_MAX_TASKS=1` if one GPU serves everything. Details in [Advanced → Model call timeout](advanced.md#model-call-timeout).
 
 ---
 
-## Multiple Compatible Endpoints
+## Legacy environment variables
 
-You can use different compatible servers for different purposes. When adding an **OpenAI-Compatible** credential in **Manage → Models**, you can configure per-service URLs:
-
-- **LLM URL**: e.g., `http://localhost:1234/v1` (LM Studio)
-- **Embedding URL**: e.g., `http://localhost:8080/v1` (different server)
-- **TTS URL**: e.g., `http://localhost:8969/v1` (Speaches)
-- **STT URL**: e.g., `http://localhost:9000/v1` (Speaches)
-
-Alternatively, add each as a separate credential with its own base URL.
-
----
-
-## Performance Tips
-
-### Model Selection
-
-| Model Size | RAM Needed | Speed |
-|------------|------------|-------|
-| 7B | 8GB | Fast |
-| 13B | 16GB | Medium |
-| 70B | 64GB+ | Slow |
-
-### Quantization
-
-Use quantized models (Q4, Q5) for faster inference with less RAM:
-
-```
-llama-3-8b-q4_k_m.gguf  → ~4GB RAM, fast
-llama-3-8b-f16.gguf     → ~16GB RAM, slower
-```
-
-### GPU Acceleration
-
-Enable GPU in your server for much faster inference:
-- LM Studio: Settings → GPU layers
-- vLLM: Automatic with CUDA
-- llama.cpp: `--n-gpu-layers 35`
-
----
-
-## Comparison: Native vs Compatible
-
-| Aspect | Native Provider | OpenAI Compatible |
-|--------|-----------------|-------------------|
-| **Setup** | API key only | Server + configuration |
-| **Models** | Provider's models | Any compatible model |
-| **Cost** | Pay per token | Free (local) |
-| **Speed** | Usually fast | Depends on hardware |
-| **Features** | Full support | Basic features |
-
-Use OpenAI-compatible when:
-- Running local models
-- Using custom/fine-tuned models
-- Privacy requirements
-- Cost control
+`OPENAI_COMPATIBLE_BASE_URL` / `OPENAI_COMPATIBLE_API_KEY` and their per-modality variants (`_LLM`, `_EMBEDDING`, `_STT`, `_TTS`) are a deprecated fallback. **Migrate to Database** copies only the generic pair. See the [Environment Reference](environment-reference.md#legacy-ai-provider-variables-deprecated).
 
 ---
 
 ## Related
 
-- **[Local TTS Setup](local-tts.md)** - Text-to-speech with Speaches
-- **[Local STT Setup](local-stt.md)** - Speech-to-text with Speaches
-- **[AI Providers](ai-providers.md)** - All provider options
-- **[Ollama Setup](ollama.md)** - Native Ollama integration
-- **[oMLX Setup](omlx.md)** - Native oMLX (Apple Silicon) integration
+- [AI Providers](ai-providers.md)
+- [Local speech with Speaches](local-tts.md)
+- [Ollama](ollama.md), [oMLX](omlx.md)
diff --git a/docs/5-CONFIGURATION/reverse-proxy.md b/docs/5-CONFIGURATION/reverse-proxy.md
index d369fae8..3c5904a6 100644
--- a/docs/5-CONFIGURATION/reverse-proxy.md
+++ b/docs/5-CONFIGURATION/reverse-proxy.md
@@ -1,43 +1,58 @@
 # Reverse Proxy Configuration
 
-Deploy Open Notebook behind nginx, Caddy, Traefik, or other reverse proxies with custom domains and HTTPS.
+Run Open Notebook behind nginx, Caddy, Traefik or a hosting platform, with your own domain and HTTPS.
 
 ---
 
-## Simplified Setup (v1.1+)
+## How It Works
 
-Starting with v1.1, Open Notebook uses Next.js rewrites to simplify configuration. **You only need to proxy to one port** - Next.js handles internal API routing automatically.
+The `lfnovo/open_notebook` image runs three processes in one container: the Next.js frontend on port 8502, the API on port 5055 and the background worker. The Next.js server forwards every `/api/*` request it receives to the API (`INTERNAL_API_URL`, default `http://localhost:5055`).
 
-### How It Works
+So a reverse proxy only needs to reach **port 8502**:
 
 ```
-Browser → Reverse Proxy → Port 8502 (Next.js)
-                             ↓ (internal proxy)
-                          Port 5055 (FastAPI)
+Browser ──HTTPS──> Reverse proxy ──> :8502 Next.js ──/api/*──> :5055 API
 ```
 
-Next.js automatically forwards `/api/*` requests to the FastAPI backend, so your reverse proxy only needs one port!
+For this to work, the browser must send its API calls to your public URL too. That is what `API_URL` does.
+
+### How the browser finds the API
+
+When the UI loads, it asks the Next.js server (`GET /config`) where the API is:
+
+1. If `API_URL` is set, that value is used. (`NEXT_PUBLIC_API_URL` is accepted as an older name.)
+2. Otherwise the server builds it from the request: the `X-Forwarded-Proto` header (or the request's own scheme), the hostname from the `Host` header, and **port 5055**. A page loaded from `http://192.168.1.50:8502` calls the API at `http://192.168.1.50:5055`.
+
+Auto-detection is fine when the browser can reach port 5055 directly (localhost, a LAN). Behind a reverse proxy it produces `https://notebook.example.com:5055`, which usually doesn't exist. **Behind a reverse proxy, set `API_URL` to your public URL**, without `/api`:
+
+```yaml
+services:
+  open_notebook:
+    environment:
+      - API_URL=https://notebook.example.com
+```
+
+Apply it with `docker compose up -d`. When auto-detection is used, the container log shows `[runtime-config] Auto-detected API URL: ...`, which tells you what the browser was given.
+
+All variables mentioned here are listed in the [Environment Reference](environment-reference.md#network-ports-and-urls).
 
 ---
 
-## Quick Configuration Examples
-
-### Nginx (Recommended)
+## Nginx
 
 ```nginx
 server {
     listen 443 ssl http2;
     server_name notebook.example.com;
 
-    ssl_certificate /etc/nginx/ssl/fullchain.pem;
+    ssl_certificate     /etc/nginx/ssl/fullchain.pem;
     ssl_certificate_key /etc/nginx/ssl/privkey.pem;
 
-    # Allow file uploads up to 100MB
+    # Uploads: match OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB (default 100)
     client_max_body_size 100M;
 
-    # Single location block - that's it!
     location / {
-        proxy_pass http://open-notebook:8502;
+        proxy_pass http://open_notebook:8502;
         proxy_http_version 1.1;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
@@ -45,11 +60,13 @@ server {
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection 'upgrade';
-        proxy_cache_bypass $http_upgrade;
+
+        # Long-running requests (chat with slow models, transformations)
+        proxy_read_timeout 600s;
+        proxy_send_timeout 600s;
     }
 }
 
-# HTTP to HTTPS redirect
 server {
     listen 80;
     server_name notebook.example.com;
@@ -57,11 +74,50 @@ server {
 }
 ```
 
-### Caddy
+`open_notebook` is the compose service name; use `127.0.0.1` if nginx runs on the host instead of in the same compose project.
+
+### Compose example with nginx
+
+Add an `nginx` service next to the `surrealdb` and `open_notebook` services of the [shipped docker-compose.yml](https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml), and stop publishing the app ports to the outside:
+
+```yaml
+services:
+  open_notebook:
+    image: lfnovo/open_notebook:v1-latest
+    environment:
+      - API_URL=https://notebook.example.com
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
+      - OPEN_NOTEBOOK_PASSWORD=<generated-password>
+      # plus the SURREAL_* variables from the shipped file
+    ports:
+      - "127.0.0.1:8502:8502"   # local access only; nginx uses the compose network
+    volumes:
+      - ./notebook_data:/app/data
+
+  nginx:
+    image: nginx:alpine
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./ssl:/etc/nginx/ssl:ro
+    depends_on:
+      - open_notebook
+```
+
+Replace `<generated-key>` and `<generated-password>` with values you generate yourself, for example with `openssl rand -hex 32` (on Windows, see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
+
+---
+
+## Caddy
 
 ```caddy
 notebook.example.com {
-    reverse_proxy open-notebook:8502 {
+    request_body {
+        max_size 100MB
+    }
+    reverse_proxy open_notebook:8502 {
         transport http {
             read_timeout 600s
             write_timeout 600s
@@ -70,835 +126,191 @@ notebook.example.com {
 }
 ```
 
-Caddy handles HTTPS automatically. The timeout settings ensure long-running operations (transformations, podcast generation) don't fail.
+Caddy obtains and renews certificates automatically.
 
-### Traefik
+---
+
+## Traefik
 
 ```yaml
-# Add this to your docker-compose.yml alongside the surrealdb service
-# See full base setup: https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml
 services:
-  open-notebook:
+  open_notebook:
     image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
     environment:
       - API_URL=https://notebook.example.com
+      # plus the variables from the shipped docker-compose.yml
     labels:
       - "traefik.enable=true"
       - "traefik.http.routers.notebook.rule=Host(`notebook.example.com`)"
       - "traefik.http.routers.notebook.entrypoints=websecure"
       - "traefik.http.routers.notebook.tls.certresolver=myresolver"
       - "traefik.http.services.notebook.loadbalancer.server.port=8502"
-      # Timeout for long-running operations (transformations, podcasts)
-      - "traefik.http.services.notebook.loadbalancer.responseforwarding.flushinterval=100ms"
     networks:
       - traefik-network
 ```
 
-**Note**: For Traefik v2+, you may also need to configure `serversTransport` timeouts in your static configuration:
+Raise the response timeout in Traefik's static configuration so long requests aren't cut off:
 
 ```yaml
-# traefik.yml (static configuration)
+# traefik.yml
 serversTransport:
   forwardingTimeouts:
-    dialTimeout: 30s
     responseHeaderTimeout: 600s
-    idleConnTimeout: 90s
-```
-
-### Coolify
-
-1. Create new service using [Docker Compose](../1-INSTALLATION/docker-compose.md)
-2. Set port to **8502**
-3. Add environment: `API_URL=https://your-domain.com`
-4. Enable HTTPS in Coolify
-5. Done!
-
----
-
-## Environment Variables
-
-```bash
-# Required for reverse proxy setups
-API_URL=https://your-domain.com
-
-# Optional: For multi-container deployments
-# INTERNAL_API_URL=http://api-service:5055
-```
-
-**Important**: Set `API_URL` to your public URL (with https://).
-
-**Note on the bind address**: The Docker images bind Next.js to `0.0.0.0` by default, which ensures it listens on all interfaces and is accessible from reverse proxies. You typically don't need to change this; if you do, set `FRONTEND_BIND_HOST` (the `HOSTNAME` variable is unreliable because container runtimes such as Podman override it with the container/pod hostname).
-
----
-
-## Understanding API_URL
-
-The frontend uses a three-tier priority system to determine the API URL:
-
-1. **Runtime Configuration** (Highest Priority): `API_URL` environment variable set at container runtime
-2. **Build-time Configuration**: `NEXT_PUBLIC_API_URL` baked into the Docker image
-3. **Auto-detection** (Fallback): Infers from the incoming HTTP request headers
-
-### Auto-Detection Details
-
-When `API_URL` is not set, the Next.js frontend:
-- Analyzes the incoming HTTP request
-- Extracts the hostname from the `host` header
-- Respects the `X-Forwarded-Proto` header (for HTTPS behind reverse proxies)
-- Constructs the API URL as `{protocol}://{hostname}:5055`
-- Example: Request to `http://10.20.30.20:8502` → API URL becomes `http://10.20.30.20:5055`
-
-**Why set API_URL explicitly?**
-- **Reliability**: Auto-detection can fail with complex proxy setups
-- **HTTPS**: Ensures frontend uses `https://` when behind SSL-terminating proxy
-- **Custom domains**: Works correctly with domain names instead of IP addresses
-- **Port mapping**: Avoids exposing port 5055 in the URL when using reverse proxy
-
-**Important**: Don't include `/api` at the end - the system adds this automatically!
-
----
-
-## Complete Docker Compose Example
-
-> **Note:** This example only shows the open-notebook and nginx services. You also need a `surrealdb` service. See the [full base docker-compose.yml](https://github.com/lfnovo/open-notebook/blob/main/docker-compose.yml) for the complete setup.
-
-```yaml
-services:
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    container_name: open-notebook
-    environment:
-      - API_URL=https://notebook.example.com
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=${OPEN_NOTEBOOK_ENCRYPTION_KEY}
-      - OPEN_NOTEBOOK_PASSWORD=${OPEN_NOTEBOOK_PASSWORD}
-    volumes:
-      - ./notebook_data:/app/data
-    # Only expose to localhost (nginx handles public access)
-    ports:
-      - "127.0.0.1:8502:8502"
-    restart: unless-stopped
-
-  nginx:
-    image: nginx:alpine
-    container_name: nginx-proxy
-    ports:
-      - "80:80"
-      - "443:443"
-    volumes:
-      - ./nginx.conf:/etc/nginx/nginx.conf:ro
-      - ./ssl:/etc/nginx/ssl:ro
-    depends_on:
-      - open-notebook
-    restart: unless-stopped
 ```
 
 ---
 
-## Full Nginx Configuration
+## Coolify and similar platforms
+
+1. Deploy the [Docker Compose](../1-INSTALLATION/docker-compose.md) setup.
+2. Point the platform's domain at port **8502** of the `open_notebook` service.
+3. Add `API_URL=https://your-domain.com` to the service's environment.
+4. Enable HTTPS in the platform.
+
+---
+
+## Exposing the API to other clients
+
+Browser traffic only needs port 8502. Scripts and integrations can use the same public URL (`https://notebook.example.com/api/...`), which goes through Next.js. To route API calls straight to the API instead, add a location for `/api/`:
 
 ```nginx
-events {
-    worker_connections 1024;
-}
-
-http {
-    upstream notebook {
-        server open-notebook:8502;
-    }
-
-    # HTTP redirect
-    server {
-        listen 80;
-        server_name notebook.example.com;
-        return 301 https://$server_name$request_uri;
-    }
-
-    # HTTPS server
-    server {
-        listen 443 ssl http2;
-        server_name notebook.example.com;
-
-        ssl_certificate /etc/nginx/ssl/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/privkey.pem;
-        ssl_protocols TLSv1.2 TLSv1.3;
-        ssl_ciphers HIGH:!aNULL:!MD5;
-
-        # Allow file uploads up to 100MB
-        client_max_body_size 100M;
-
-        # Security headers
-        add_header X-Frame-Options DENY;
-        add_header X-Content-Type-Options nosniff;
-        add_header X-XSS-Protection "1; mode=block";
-        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
-
-        # Proxy settings
-        location / {
-            proxy_pass http://notebook;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection 'upgrade';
-            proxy_cache_bypass $http_upgrade;
-
-            # Timeouts for long-running operations (transformations, podcasts, etc.)
-            # 600s matches the frontend timeout for slow LLM operations
-            proxy_read_timeout 600s;
-            proxy_connect_timeout 60s;
-            proxy_send_timeout 600s;
-        }
-    }
-}
-```
-
----
-
-## Direct API Access (Optional)
-
-If external scripts or integrations need direct API access, route `/api/*` directly:
-
-```nginx
-# Direct API access (for external integrations)
 location /api/ {
-    proxy_pass http://open-notebook:5055/api/;
+    proxy_pass http://open_notebook:5055/api/;
     proxy_http_version 1.1;
     proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_read_timeout 600s;
 }
 
-# Frontend (handles all other traffic)
 location / {
-    proxy_pass http://open-notebook:8502;
+    proxy_pass http://open_notebook:8502;
     # ... same headers as above
 }
 ```
 
-**Note**: This is only needed for external API integrations. Browser traffic works fine with single-port setup.
+Routing `/api/` directly also avoids the 100 MB upload cap of the Next.js proxy (see [Upload size](#upload-size-413-errors)).
+
+### API on its own subdomain
+
+Serve the UI at `notebook.example.com` and the API at `api.notebook.example.com`: proxy the first to port 8502 and the second to port 5055, and set `API_URL=https://api.notebook.example.com`. The browser then calls a different origin, so if you restrict `CORS_ORIGINS`, include `https://notebook.example.com`.
 
 ---
 
-## Advanced Scenarios
+## Access from other machines without a proxy
 
-### Remote Server Access (LAN/VPS)
+On a LAN you can skip the proxy. Publish both ports (the shipped compose file does) and open `http://<server-ip>:8502`. Auto-detection sends API calls to `http://<server-ip>:5055`, so port 5055 must be reachable from the client:
 
-Accessing Open Notebook from a different machine on your network:
-
-**Step 1: Get your server IP**
 ```bash
-# On the server running Open Notebook:
-hostname -I
-# or
-ifconfig | grep "inet "
-# Note the IP (e.g., 192.168.1.100)
+# On the server, if a firewall is active: allow only your LAN (adjust the subnet)
+sudo ufw allow from 192.168.1.0/24 to any port 8502 proto tcp
+sudo ufw allow from 192.168.1.0/24 to any port 5055 proto tcp
 ```
 
-**Step 2: Configure API_URL**
-```bash
-# In docker-compose.yml or .env:
-API_URL=http://192.168.1.100:5055
-```
+Without a reverse proxy, traffic is plain HTTP, including the password header. Only do this on a network you trust, set `OPEN_NOTEBOOK_PASSWORD`, and never open these ports to the internet. Docker publishes ports through its own iptables rules, which can bypass UFW; to keep a port private, bind it to `127.0.0.1` in `docker-compose.yml` instead.
+
+If you changed the host side of the API port mapping (for example `"5056:5055"`), auto-detection still assumes 5055: set `API_URL=http://<server-ip>:5056`.
+
+---
+
+## Timeouts
+
+The web UI waits up to 10 minutes for an API response, and each model call is limited by `ESPERANTO_LLM_TIMEOUT` (180 seconds by default). Set proxy read timeouts to at least 600 seconds so the proxy is never the first to give up. Common proxy defaults (60 seconds for nginx) cut off slow chat answers and transformations with `502`/`504` errors or `socket hang up` in the browser.
+
+For slow models, raise `ESPERANTO_LLM_TIMEOUT` (keep it below 600). See [Environment Reference → Timeouts](environment-reference.md#timeouts).
+
+---
+
+## Upload size (413 errors)
+
+Three limits apply to uploads from the UI, and the smallest wins:
+
+| Limit | Default | Where to change it |
+|-------|---------|--------------------|
+| Your reverse proxy | nginx: 1 MB | `client_max_body_size`, Caddy `request_body max_size`, Traefik buffering middleware |
+| Next.js proxy for `/api/*` | 100 MB | Fixed in the frontend build |
+| API | 100 MB | `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` |
+
+When the proxy rejects a file, the response doesn't come from Open Notebook, so it has no CORS headers and the browser reports a CORS error with status 413. When the API rejects it, the message is `Request body exceeds the maximum allowed upload size`. To upload files larger than 100 MB, raise `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` and send them to the API directly (port 5055, or a `/api/` location routed to 5055 as above).
+
+Traefik example (dynamic file configuration):
 
-**Step 3: Expose ports**
 ```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
-services:
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    environment:
-      - API_URL=http://192.168.1.100:5055
-    ports:
-      - "8502:8502"
-      - "5055:5055"
+http:
+  middlewares:
+    large-body:
+      buffering:
+        maxRequestBodyBytes: 104857600  # 100 MB
 ```
 
-**Step 4: Access from client machine**
-```bash
-# In browser on other machine:
-http://192.168.1.100:8502
-```
+A middleware does nothing until a router uses it. Attach it to the router from the [Traefik](#traefik) example:
 
-**Troubleshooting**:
-- Check firewall: `sudo ufw allow 8502 && sudo ufw allow 5055`
-- Verify connectivity: `ping 192.168.1.100` from client machine
-- Test port: `telnet 192.168.1.100 8502` from client machine
-
----
-
-### API on Separate Subdomain
-
-Host the API and frontend on different subdomains:
-
-**docker-compose.yml:**
 ```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
-services:
-  open-notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
-    environment:
-      - API_URL=https://api.notebook.example.com
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=${OPEN_NOTEBOOK_ENCRYPTION_KEY}
-    # Don't expose ports (nginx handles routing)
+    labels:
+      - "traefik.http.routers.notebook.middlewares=large-body@file"
 ```
 
-**nginx.conf:**
-```nginx
-# Frontend server
-server {
-    listen 443 ssl http2;
-    server_name notebook.example.com;
+(Or define it with labels too: `traefik.http.middlewares.large-body.buffering.maxRequestBodyBytes=104857600` plus `traefik.http.routers.notebook.middlewares=large-body`.)
 
-    ssl_certificate /etc/nginx/ssl/fullchain.pem;
-    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
-
-    location / {
-        proxy_pass http://open-notebook:8502;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection 'upgrade';
-        proxy_cache_bypass $http_upgrade;
-    }
-}
-
-# API server (separate subdomain)
-server {
-    listen 443 ssl http2;
-    server_name api.notebook.example.com;
-
-    ssl_certificate /etc/nginx/ssl/fullchain.pem;
-    ssl_certificate_key /etc/nginx/ssl/privkey.pem;
-
-    location / {
-        proxy_pass http://open-notebook:5055;
-        proxy_http_version 1.1;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-}
-```
-
-**Use case**: Separate DNS records, different rate limiting, or isolated API access control.
-
----
-
-### Multi-Container Deployment (Advanced)
-
-For complex deployments with separate frontend and API containers:
-
-**docker-compose.yml:**
-```yaml
-services:
-  frontend:
-    image: lfnovo/open_notebook_frontend:v1-latest
-    pull_policy: always
-    environment:
-      - API_URL=https://notebook.example.com
-    ports:
-      - "8502:8502"
-
-  api:
-    image: lfnovo/open_notebook_api:v1-latest
-    pull_policy: always
-    environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=${OPEN_NOTEBOOK_ENCRYPTION_KEY}
-    ports:
-      - "5055:5055"
-    depends_on:
-      - surrealdb
-
-  surrealdb:
-    image: surrealdb/surrealdb:latest
-    command: start --log trace --user root --pass root file:/mydata/database.db
-    ports:
-      # Localhost only — the database uses default credentials, so never
-      # publish this port on 0.0.0.0
-      - "127.0.0.1:8000:8000"
-    volumes:
-      - ./surreal_data:/mydata
-```
-
-**nginx.conf:**
-```nginx
-http {
-    upstream frontend {
-        server frontend:8502;
-    }
-
-    upstream api {
-        server api:5055;
-    }
-
-    server {
-        listen 443 ssl http2;
-        server_name notebook.example.com;
-
-        # API routes
-        location /api/ {
-            proxy_pass http://api/api/;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-        }
-
-        # Frontend (catch-all)
-        location / {
-            proxy_pass http://frontend;
-            proxy_http_version 1.1;
-            proxy_set_header Host $host;
-            proxy_set_header X-Real-IP $remote_addr;
-            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-            proxy_set_header X-Forwarded-Proto $scheme;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection 'upgrade';
-            proxy_cache_bypass $http_upgrade;
-        }
-    }
-}
-```
-
-**Note**: Most users should use the [Docker Compose](../1-INSTALLATION/docker-compose.md) approach (`v1-latest`). Multi-container with separate nginx is only needed for custom scaling or isolation requirements.
-
----
-
-## SSL Certificates
-
-### Let's Encrypt with Certbot
-
-```bash
-# Install certbot
-sudo apt install certbot python3-certbot-nginx
-
-# Get certificate
-sudo certbot --nginx -d notebook.example.com
-
-# Auto-renewal (usually configured automatically)
-sudo certbot renew --dry-run
-```
-
-### Let's Encrypt with Caddy
-
-Caddy handles SSL automatically - no configuration needed!
-
-### Self-Signed (Development Only)
-
-```bash
-openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-  -keyout ssl/privkey.pem \
-  -out ssl/fullchain.pem \
-  -subj "/CN=localhost"
-```
+Kubernetes ingress-nginx: annotation `nginx.ingress.kubernetes.io/proxy-body-size: "100m"`.
 
 ---
 
 ## Troubleshooting
 
-### "Unable to connect to server"
+### "Unable to Connect to API Server"
 
-1. **Check API_URL is set**:
-   ```bash
-   docker exec open-notebook env | grep API_URL
-   ```
+The UI loaded but its first API call failed. The overlay's **Show Technical Details** shows the **Attempted URL**.
 
-2. **Verify reverse proxy reaches container**:
-   ```bash
-   curl -I http://localhost:8502
-   ```
+- Attempted URL ends in `:5055` behind a proxy → `API_URL` isn't set (or the container wasn't recreated after setting it). Check with `docker compose exec open_notebook printenv API_URL`, then `docker compose up -d`.
+- Attempted URL is `http://...` on an HTTPS page → the browser blocks it as mixed content. Set `API_URL` with `https://`, or make sure the proxy sends `X-Forwarded-Proto`.
+- Attempted URL looks right → test it: `curl https://notebook.example.com/api/config`. A healthy instance answers without a password:
 
-3. **Check browser console** (F12):
-   - Look for connection errors
-   - Check what URL it's trying to reach
-
-### Mixed Content Errors
-
-Frontend using HTTPS but trying to reach HTTP API:
-
-```bash
-# Ensure API_URL uses https://
-API_URL=https://notebook.example.com  # Not http://
+```json
+{"version": "1.15.0", "latestVersion": "1.15.0", "hasUpdate": false, "dbStatus": "online"}
 ```
 
-### WebSocket Issues
+If that fails, the proxy isn't reaching port 8502, or the container isn't running (`docker compose ps`, `docker compose logs open_notebook`).
 
-Ensure your proxy supports WebSocket upgrades:
+### "Database Connection Failed"
 
-```nginx
-proxy_http_version 1.1;
-proxy_set_header Upgrade $http_upgrade;
-proxy_set_header Connection 'upgrade';
-```
+The proxy and API are fine; the API can't reach SurrealDB. See [Connection Issues](../6-TROUBLESHOOTING/connection-issues.md#database-connection-failed).
 
 ### 502 Bad Gateway
 
-1. Check container is running: `docker ps`
-2. Check container logs: `docker logs open-notebook`
-3. Verify nginx can reach container (same network)
+- The container isn't running or is still starting: `docker compose ps`, `docker compose logs open_notebook`.
+- The proxy can't resolve `open_notebook`: it must be on the same Docker network, or use `127.0.0.1:8502` from the host.
 
-### Timeout Errors
+### CORS errors in the browser console
 
-**Symptoms:**
-- `socket hang up` or `ECONNRESET` errors
-- `Timeout after 30000ms` errors
-- Operations fail after exactly 30 seconds
+- Status 413 alongside the CORS error → an upload hit a size limit; see [Upload size](#upload-size-413-errors).
+- You set `CORS_ORIGINS` → the origin in your address bar must be in it, exactly (scheme, host and port).
+- `API_URL` points at a different origin than the page (another port or subdomain) and the request fails for another reason (502, timeout) → the error page from the proxy has no CORS headers. Fix the underlying error.
 
-**Cause:** Your reverse proxy has a default timeout (often 30s) that's shorter than Open Notebook's operations.
+### `{"detail": "Missing authorization header"}`
 
-**Solutions by proxy:**
+`OPEN_NOTEBOOK_PASSWORD` is set and the request had no `Authorization: Bearer <password>` header. Expected when you open an API URL such as `/api/notebooks` in the browser. Log in through the UI, or send the header from scripts. (`/api/config` and `/health` never require it.)
 
-**Nginx:**
-```nginx
-proxy_read_timeout 600s;
-proxy_send_timeout 600s;
-```
+### Browser console logs
 
-**Caddy:**
-```caddy
-reverse_proxy open-notebook:8502 {
-    transport http {
-        read_timeout 600s
-        write_timeout 600s
-    }
-}
-```
-
-**Traefik (static config):**
-```yaml
-serversTransport:
-  forwardingTimeouts:
-    responseHeaderTimeout: 600s
-```
-
-**Application-level timeouts:**
-
-If you still experience timeouts after configuring your proxy, you can also adjust the application timeouts:
-
-```yaml
-# docker-compose.yml → open_notebook → environment:
-- ESPERANTO_LLM_TIMEOUT=420   # per model call (default: 180s); keep below 600
-```
-
-The web UI itself waits up to 10 minutes per request, so set your proxy timeouts to at least 600 seconds.
-
-See [Advanced Configuration](advanced.md) for more timeout options.
+The `[Config]` messages in the browser console only appear in development builds (`npm run dev`). On the Docker image, use the container log line `[runtime-config] Auto-detected API URL` and the **Attempted URL** in the error overlay instead.
 
 ---
 
-### How to Debug Configuration Issues
+## Checklist
 
-**Step 1: Check browser console** (F12 → Console tab)
-```
-Look for messages starting with 🔧 [Config]
-These show the configuration detection process
-You'll see which API URL is being used
-```
-
-**Example good output:**
-```
-✅ [Config] Runtime API URL from server: https://your-domain.com
-```
-
-**Example bad output:**
-```
-❌ [Config] Failed to fetch runtime config
-⚠️  [Config] Using auto-detected URL: http://localhost:5055
-```
-
-**Step 2: Test API directly**
-```bash
-# Should return JSON config
-curl https://your-domain.com/api/config
-
-# Expected output:
-{"status":"ok","credentials_configured":true,...}
-```
-
-**Step 3: Check Docker logs**
-```bash
-docker logs open-notebook
-
-# Look for:
-# - Frontend startup: "▲ Next.js ready on http://0.0.0.0:8502"
-# - API startup: "INFO:     Uvicorn running on http://0.0.0.0:5055"
-# - Connection errors or CORS issues
-```
-
-**Step 4: Verify environment variable**
-```bash
-docker exec open-notebook env | grep API_URL
-
-# Should show:
-# API_URL=https://your-domain.com
-```
-
----
-
-### Frontend Adds `:5055` to URL (Versions ≤ 1.0.10)
-
-**Symptoms** (only in older versions):
-- You set `API_URL=https://your-domain.com`
-- Browser console shows: "Attempted URL: https://your-domain.com:5055/api/config"
-- CORS errors with "Status code: (null)"
-
-**Root Cause:**
-In versions ≤ 1.0.10, the frontend's config endpoint was at `/api/runtime-config`, which got intercepted by reverse proxies routing all `/api/*` requests to the backend. This prevented the frontend from reading the `API_URL` environment variable.
-
-**Solution:**
-Upgrade to version 1.0.11 or later. The config endpoint has been moved to `/config` which avoids the `/api/*` routing conflict.
-
-**Verification:**
-Check browser console (F12) - should see: `✅ [Config] Runtime API URL from server: https://your-domain.com`
-
-**If you can't upgrade**, explicitly configure the `/config` route:
-```nginx
-# Only needed for versions ≤ 1.0.10
-location = /config {
-    proxy_pass http://open-notebook:8502;
-    proxy_http_version 1.1;
-    proxy_set_header Host $host;
-    proxy_set_header X-Forwarded-Proto $scheme;
-}
-```
-
----
-
-### File Upload Errors (413 Payload Too Large)
-
-**Symptoms:**
-```
-CORS header 'Access-Control-Allow-Origin' missing. Status code: 413.
-Error creating source. Please try again.
-```
-
-**Root Cause:**
-When uploading files, your reverse proxy may reject the request due to body size limits *before* it reaches the application. Since the error happens at the proxy level, CORS headers are not included in the response.
-
-**Version Requirement:**
-- **Open Notebook v1.3.2+** is required for file uploads >10MB
-- Uses Next.js 16+ which supports the `proxyClientMaxBodySize` configuration option
-- Check your version: Settings → About (bottom of settings page)
-
-**Solutions:**
-
-1. **Nginx - Increase body size limit**:
-   ```nginx
-   server {
-       # Allow larger file uploads (default is 1MB)
-       client_max_body_size 100M;
-
-       # Add CORS headers to error responses
-       error_page 413 = @cors_error_413;
-
-       location @cors_error_413 {
-           add_header 'Access-Control-Allow-Origin' '*' always;
-           add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
-           add_header 'Access-Control-Allow-Headers' '*' always;
-           return 413 '{"detail": "File too large. Maximum size is 100MB."}';
-       }
-
-       location / {
-           # ... your existing proxy configuration
-       }
-   }
-   ```
-
-2. **Traefik - Increase buffer size**:
-   ```yaml
-   # In your traefik configuration
-   http:
-     middlewares:
-       large-body:
-         buffering:
-           maxRequestBodyBytes: 104857600  # 100MB
-   ```
-
-   Apply middleware to your router:
-   ```yaml
-   labels:
-     - "traefik.http.routers.notebook.middlewares=large-body"
-   ```
-
-3. **Kubernetes Ingress (nginx-ingress)**:
-   ```yaml
-   apiVersion: networking.k8s.io/v1
-   kind: Ingress
-   metadata:
-     name: open-notebook
-     annotations:
-       nginx.ingress.kubernetes.io/proxy-body-size: "100m"
-       # Add CORS headers for error responses
-       nginx.ingress.kubernetes.io/configuration-snippet: |
-         more_set_headers "Access-Control-Allow-Origin: *";
-   ```
-
-4. **Caddy**:
-   ```caddy
-   notebook.example.com {
-       request_body {
-           max_size 100MB
-       }
-       reverse_proxy open-notebook:8502 {
-           transport http {
-               read_timeout 600s
-               write_timeout 600s
-           }
-       }
-   }
-   ```
-
-**Note:** Open Notebook's API includes CORS headers in error responses, but this only works for errors that reach the application. Proxy-level errors (like 413 from nginx) need to be configured at the proxy level.
-
----
-
-### CORS Errors
-
-**Symptoms:**
-```
-Access-Control-Allow-Origin header is missing
-Cross-Origin Request Blocked
-Response to preflight request doesn't pass access control check
-```
-
-**Possible Causes:**
-
-1. **Missing proxy headers**:
-   ```nginx
-   # Make sure these are set:
-   proxy_set_header X-Forwarded-Proto $scheme;
-   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-   proxy_set_header Host $host;
-   ```
-
-2. **API_URL protocol mismatch**:
-   ```bash
-   # Frontend is HTTPS, but API_URL is HTTP:
-   API_URL=http://notebook.example.com  # ❌ Wrong
-   API_URL=https://notebook.example.com # ✅ Correct
-   ```
-
-3. **Reverse proxy not forwarding `/api/*` correctly**:
-   ```nginx
-   # Make sure this works:
-   location /api/ {
-       proxy_pass http://open-notebook:5055/api/;  # Note the trailing slash!
-   }
-   ```
-
----
-
-### Missing Authorization Header
-
-**Symptoms:**
-```json
-{"detail": "Missing authorization header"}
-```
-
-This happens when:
-- You have set `OPEN_NOTEBOOK_PASSWORD` for authentication
-- You're trying to access `/api/config` directly without logging in first
-
-**Solution:**
-This is **expected behavior**! The frontend handles authentication automatically. Just:
-1. Access the frontend URL (not `/api/` directly)
-2. Log in through the UI
-3. The frontend will handle authorization headers for all API calls
-
-**For API integrations:** Include the password in the Authorization header:
-```bash
-curl -H "Authorization: Bearer your-password-here" \
-  https://your-domain.com/api/config
-```
-
----
-
-### SSL/TLS Certificate Errors
-
-**Symptoms:**
-- Browser shows "Your connection is not private"
-- Certificate warnings
-- Mixed content errors
-
-**Solutions:**
-
-1. **Use Let's Encrypt** (recommended):
-   ```bash
-   sudo certbot --nginx -d notebook.example.com
-   ```
-
-2. **Check certificate paths** in nginx:
-   ```nginx
-   ssl_certificate /etc/nginx/ssl/fullchain.pem;      # Full chain
-   ssl_certificate_key /etc/nginx/ssl/privkey.pem;    # Private key
-   ```
-
-3. **Verify certificate is valid**:
-   ```bash
-   openssl x509 -in /etc/nginx/ssl/fullchain.pem -text -noout
-   ```
-
-4. **For development**, use self-signed (not for production):
-   ```bash
-   openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-     -keyout ssl/privkey.pem -out ssl/fullchain.pem \
-     -subj "/CN=localhost"
-   ```
-
----
-
-## Best Practices
-
-1. **Always use HTTPS** in production
-2. **Set API_URL explicitly** when using reverse proxies to avoid auto-detection issues
-3. **Bind to localhost** (`127.0.0.1:8502`) and let proxy handle public access for security
-4. **Enable security headers** (HSTS, X-Frame-Options, X-Content-Type-Options, X-XSS-Protection)
-5. **Set up certificate renewal** for Let's Encrypt (usually automatic with certbot)
-6. **Keep ports 5055 and 8502 accessible** from your reverse proxy container (use Docker networks)
-7. **Keep secrets out of version control**: if your `docker-compose.yml` is tracked in git, put secrets in an untracked `docker-compose.override.yml` (see `docker-compose.override.yml.example`) or an uncommitted `env_file:`
-8. **Test your configuration** before going live:
-   - Check browser console for config messages
-   - Test API: `curl https://your-domain.com/api/config`
-   - Verify authentication works
-   - Check long-running operations (podcast generation)
-9. **Monitor logs** regularly: `docker logs open-notebook`
-10. **Don't include `/api` in API_URL** - the system adds this automatically
-
----
-
-## Legacy Configurations (Pre-v1.1)
-
-If you're running Open Notebook **version 1.0.x or earlier**, you may need to use the legacy two-port configuration where you explicitly route `/api/*` to port 5055.
-
-**Check your version:**
-```bash
-docker exec open-notebook cat /app/package.json | grep version
-```
-
-**If version < 1.1.0**, you may need:
-- Explicit `/api/*` routing to port 5055 in reverse proxy
-- Explicit `/config` endpoint routing for versions ≤ 1.0.10
-- See the "Frontend Adds `:5055` to URL" troubleshooting section above
-
-**Recommendation:** Upgrade to v1.1+ for simplified configuration and better performance.
+1. HTTPS in front, app ports bound to `127.0.0.1` or not published.
+2. `API_URL` set to the public URL (no `/api`), applied with `docker compose up -d`.
+3. Proxy timeouts of at least 600 seconds.
+4. Proxy body limit matching `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB`.
+5. `OPEN_NOTEBOOK_PASSWORD` set, and `CORS_ORIGINS` set to your domain.
+6. Secrets kept out of version control: put them in an untracked `docker-compose.override.yml` (see `docker-compose.override.yml.example`) or an uncommitted `env_file:`.
 
 ---
 
 ## Related
 
-- **[Security Configuration](security.md)** - Password protection and hardening
-- **[Advanced Configuration](advanced.md)** - Ports, timeouts, and SSL settings
-- **[Troubleshooting](../6-TROUBLESHOOTING/connection-issues.md)** - Connection problems
-- **[Docker Deployment](../1-INSTALLATION/docker-compose.md)** - Complete deployment guide
+- [Security Configuration](security.md) — password, CORS, hardening
+- [Environment Reference](environment-reference.md) — all variables
+- [Connection Issues](../6-TROUBLESHOOTING/connection-issues.md) — when the UI can't reach the API
+- [Docker Compose installation](../1-INSTALLATION/docker-compose.md)
diff --git a/docs/5-CONFIGURATION/security.md b/docs/5-CONFIGURATION/security.md
index abd15134..517a9014 100644
--- a/docs/5-CONFIGURATION/security.md
+++ b/docs/5-CONFIGURATION/security.md
@@ -1,43 +1,45 @@
 # Security Configuration
 
-Protect your Open Notebook deployment with password authentication and production hardening.
+Password protection, credential encryption and production hardening.
+
+Open Notebook's built-in protection is basic: one shared password, no user accounts, CORS open to every origin by default. Treat it as a lock on the door, not as enterprise security. For anything reachable from the internet, put it behind HTTPS and a firewall (see [Production hardening](#production-hardening)).
+
+All variables on this page go in the `open_notebook` service's `environment:` block (apply with `docker compose up -d`) or in `.env` when running from source. Full list: [Environment Reference](environment-reference.md#security-and-access).
 
 ---
 
 ## API Key Encryption
 
-Open Notebook encrypts API keys stored in the database using Fernet symmetric encryption (AES-128-CBC with HMAC-SHA256).
+AI provider keys saved in **Manage → Models** are encrypted before they are stored in SurrealDB, using Fernet (AES-128-CBC with HMAC-SHA256). The Fernet key is derived from `OPEN_NOTEBOOK_ENCRYPTION_KEY` with PBKDF2-HMAC-SHA256 (600,000 iterations).
 
-### Configuration Methods
-
-| Method | Documentation |
-|--------|---------------|
-| **Settings UI** | [API Configuration Guide](../3-USER-GUIDE/api-configuration.md) |
-| **Environment Variables** | This page (below) |
-
-### Setup
-
-Set the encryption key to any secret string:
+Generate a unique value for each installation, then put it in place of `<generated-key>`:
 
 ```bash
-# docker-compose.yml → open_notebook → environment: (or .env when running from source)
-OPEN_NOTEBOOK_ENCRYPTION_KEY=my-secret-passphrase
+openssl rand -hex 32                                   # macOS, Linux
 ```
 
-Any string works: it is stretched into the encryption key with PBKDF2-HMAC-SHA256 (600k iterations). That slows brute force but can't save a guessable passphrase, so use a long, random one for production deployments.
+```powershell
+[guid]::NewGuid().ToString("N") + [guid]::NewGuid().ToString("N")   # Windows PowerShell
+```
 
-### Default Credentials
+```yaml
+services:
+  open_notebook:
+    environment:
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
+```
 
-| Setting | Default | Security Level |
-|---------|---------|----------------|
-| Password | None - auth is fully disabled until `OPEN_NOTEBOOK_PASSWORD` is set | Development only |
-| Encryption Key | **None** (must be configured) | Required for API key storage |
+Don't copy an example value from any guide, including this one.
 
-**The encryption key has no default.** You must set `OPEN_NOTEBOOK_ENCRYPTION_KEY` before using the API key configuration feature. Without it, encrypting/decrypting API keys will fail.
+- **The key has no default.** Without it you can't save credentials: **Manage → Models** shows "Encryption key not configured" and the API logs `OPEN_NOTEBOOK_ENCRYPTION_KEY not set. API key encryption will fail until this is configured.`
+- **Use a generated value.** Any string is accepted, but PBKDF2 only slows down guessing; it can't save a short, common or published passphrase.
+- **Replace the placeholder.** The shipped `docker-compose.yml` sets `change-me-to-a-secret-string`. That value is public, and Open Notebook does not warn about it.
+- **Don't change it once credentials are saved.** Keys encrypted with the old value can't be decrypted with the new one. Each affected credential shows **Decryption Error** in Manage → Models; delete and re-create it. There is no key-rotation command.
+- **Keep it apart from your backups.** A database backup plus the key gives access to every stored provider key.
 
-### Docker Secrets Support
+### Docker secrets
 
-Both settings support Docker secrets via `_FILE` suffix:
+Both secrets can be read from files. The `_FILE` variant is checked first:
 
 ```yaml
 environment:
@@ -45,378 +47,209 @@ environment:
   - OPEN_NOTEBOOK_ENCRYPTION_KEY_FILE=/run/secrets/encryption_key
 ```
 
-### Security Notes
+### Upgrading to PBKDF2 (v1.15.0)
 
-| Scenario | Behavior |
-|----------|----------|
-| Key configured | API keys encrypted with your key |
-| No key configured | Encryption/decryption will fail (key is required) |
-| Key changed | Old encrypted keys become unreadable |
-| Legacy data | Unencrypted keys still work (graceful fallback) |
+Before v1.15.0 the Fernet key was derived with a single unsalted SHA-256 hash. Since v1.15.0:
 
-### Key Management
+- New and edited credentials are written in the PBKDF2 format (values prefixed with `pbkdf2v1:`).
+- Credentials written by older versions keep working; they are decrypted with the old derivation.
+- A one-time call rewrites the old values into the new format:
 
-- **Keep secret**: Never commit the encryption key to version control
-- **Backup securely**: Store the key separately from database backups
-- **No rotation yet**: Changing the key requires re-saving all API keys
-- **Per-deployment**: Each instance should have its own encryption key
+```bash
+# Back up the database first (see below)
+curl -X POST http://localhost:5055/api/credentials/migrate-encryption \
+  -H "Authorization: Bearer your_password"   # omit the header if no password is set
+```
+
+The response lists the credentials that were `migrated`, `skipped` (already in the new format) and any `errors`. Running it again changes nothing. A credential that can't be decrypted (for example because the key changed) is left untouched and reported as an error. There is no button for this in the UI.
+
+> **Back up the database before migrating, and don't downgrade afterwards.** Versions older than 1.15.0 can't read `pbkdf2v1:` values. This already applies to any credential you add or edit on 1.15.0, migrated or not. To go back to an older version, restore a backup taken before the upgrade. Backup steps: [Advanced → Backup & Restore](advanced.md#backup--restore).
+
+Run the migration as a single admin, while nobody is editing credentials. When `OPEN_NOTEBOOK_PASSWORD` is unset, this endpoint is open to anyone who can reach the API, like every other endpoint.
+
+### Plaintext keys from very old versions
+
+Values that are not encrypted at all (from versions before credential encryption existed) are still read as-is. Saving the credential again encrypts it.
 
 ---
 
-## When to Use Password Protection
+## Password Protection
 
-### Use it for:
-- Public cloud deployments (PikaPods, Railway, DigitalOcean)
-- Shared network environments
-- Any deployment accessible beyond localhost
+### When to use it
 
-### You can skip it for:
-- Local development on your machine
-- Private, isolated networks
-- Single-user local setups
-
----
-
-## Quick Setup
-
-### Docker Deployment
+Set a password for any deployment reachable from something other than your own machine: a cloud host, a shared LAN, a reverse proxy on the internet. Without `OPEN_NOTEBOOK_PASSWORD`, authentication is off and anyone who can reach ports 8502 or 5055 can use the app and its stored provider keys. Open Notebook does not log a warning when the password is unset.
 
 ```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
 services:
   open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
     environment:
-      - OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-encryption-key
-      - OPEN_NOTEBOOK_PASSWORD=your_secure_password
-    # ... rest of config
+      - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
+      - OPEN_NOTEBOOK_PASSWORD=<generated-password>
 ```
 
-Or using an environment file (add `env_file: .env` to the `open_notebook` service; the shipped compose file doesn't load one):
+Generate the password the same way as the key (`openssl rand -hex 32`, or the PowerShell command above), and use a different value for each. Non-ASCII passwords work; API clients must send them UTF-8 encoded.
+
+### How the UI handles it
+
+1. The login page asks for the password on first visit.
+2. After a successful login the browser keeps the password in `localStorage` (key `auth-storage`), so it survives closing the browser.
+3. **Sign Out** in the UI clears it. Clearing site data for the app does the same.
+
+Anyone with access to that browser profile can read the stored password. Don't log in from shared machines.
+
+### How the API checks it
+
+Every request must send `Authorization: Bearer <password>`:
 
 ```bash
-# .env
-OPEN_NOTEBOOK_ENCRYPTION_KEY=your-secret-encryption-key
-OPEN_NOTEBOOK_PASSWORD=your_secure_password
+curl -H "Authorization: Bearer your_password" http://localhost:5055/api/notebooks
 ```
 
-> **Important**: The encryption key is **required** for credential storage. Without it, you cannot save AI provider credentials via the Settings UI. If you change or lose the encryption key, all stored credentials become unreadable.
+Without the header the API answers `401 {"detail": "Missing authorization header"}`. A wrong password gives `{"detail": "Invalid password"}`.
 
-### Development Setup
+These paths work without a password:
+
+| Path | Purpose |
+|------|---------|
+| `/` | API banner |
+| `/health` | Health check, returns `{"status": "healthy"}` |
+| `/docs`, `/redoc`, `/openapi.json` | API documentation |
+| `/api/auth/status` | Tells the UI whether a password is required |
+| `/api/config` | Version, update check and database status |
+
+### API client examples
 
 ```bash
-# .env
-OPEN_NOTEBOOK_PASSWORD=your_secure_password
-```
-
----
-
-## Password Requirements
-
-### Good Passwords
-
-```bash
-# Strong: 20+ characters, mixed case, numbers, symbols
-OPEN_NOTEBOOK_PASSWORD=MySecure2024!Research#Tool
-OPEN_NOTEBOOK_PASSWORD=Notebook$Dev$2024$Strong!
-
-# Generated (recommended)
-OPEN_NOTEBOOK_PASSWORD=$(openssl rand -base64 24)
-```
-
-### Bad Passwords
-
-```bash
-# DON'T use these
-OPEN_NOTEBOOK_PASSWORD=password123
-OPEN_NOTEBOOK_PASSWORD=opennotebook
-OPEN_NOTEBOOK_PASSWORD=admin
-```
-
----
-
-## How It Works
-
-### Frontend Protection
-
-1. Login form appears on first visit
-2. Password stored in browser session
-3. Session persists until browser closes
-4. Clear browser data to log out
-
-### API Protection
-
-All API endpoints require authentication:
-
-```bash
-# Authenticated request
-curl -H "Authorization: Bearer your_password" \
-  http://localhost:5055/api/notebooks
-
-# Unauthenticated (will fail)
-curl http://localhost:5055/api/notebooks
-# Returns: {"detail": "Missing authorization header"}
-```
-
-### Unprotected Endpoints
-
-These work without authentication:
-
-- `/health` - System health check
-- `/docs` - API documentation
-- `/openapi.json` - OpenAPI spec
-
----
-
-## API Authentication Examples
-
-### curl
-
-```bash
-# List notebooks
-curl -H "Authorization: Bearer your_password" \
-  http://localhost:5055/api/notebooks
-
-# Create notebook
-curl -X POST \
+# Create a notebook
+curl -X POST http://localhost:5055/api/notebooks \
   -H "Authorization: Bearer your_password" \
   -H "Content-Type: application/json" \
-  -d '{"name": "My Notebook", "description": "Research notes"}' \
-  http://localhost:5055/api/notebooks
+  -d '{"name": "My Notebook", "description": "Research notes"}'
 
-# Upload file
-curl -X POST \
+# Upload a file as a source (multipart form)
+curl -X POST http://localhost:5055/api/sources \
   -H "Authorization: Bearer your_password" \
-  -F "file=@document.pdf" \
-  http://localhost:5055/api/sources/upload
+  -F "type=upload" \
+  -F "file=@document.pdf"
 ```
 
-### Python
-
 ```python
 import requests
 
-class OpenNotebookClient:
-    def __init__(self, base_url: str, password: str):
-        self.base_url = base_url
-        self.headers = {"Authorization": f"Bearer {password}"}
-
-    def get_notebooks(self):
-        response = requests.get(
-            f"{self.base_url}/api/notebooks",
-            headers=self.headers
-        )
-        return response.json()
-
-    def create_notebook(self, name: str, description: str = None):
-        response = requests.post(
-            f"{self.base_url}/api/notebooks",
-            headers=self.headers,
-            json={"name": name, "description": description}
-        )
-        return response.json()
-
-# Usage
-client = OpenNotebookClient("http://localhost:5055", "your_password")
-notebooks = client.get_notebooks()
+headers = {"Authorization": "Bearer your_password"}
+notebooks = requests.get("http://localhost:5055/api/notebooks", headers=headers).json()
 ```
 
-### JavaScript/TypeScript
-
-```javascript
-const API_URL = 'http://localhost:5055';
-const PASSWORD = 'your_password';
-
-async function getNotebooks() {
-  const response = await fetch(`${API_URL}/api/notebooks`, {
-    headers: {
-      'Authorization': `Bearer ${PASSWORD}`
-    }
-  });
-  return response.json();
-}
-```
+Full API documentation: `http://localhost:5055/docs` on your instance, or [API Reference](../7-DEVELOPMENT/api-reference.md).
 
 ---
 
 ## Production Hardening
 
-### Docker Security
+### Network exposure
+
+- **Don't publish SurrealDB.** The shipped compose file binds it to `127.0.0.1:8000`. It uses `root`/`root` unless you set `SURREAL_USER` and `SURREAL_PASSWORD` (in `.env`, which the compose file passes to both services).
+- **Put a reverse proxy with HTTPS in front** and bind the app ports to localhost so only the proxy can reach them. The password travels in a header on every request, so plain HTTP exposes it. See [Reverse Proxy](reverse-proxy.md).
 
 ```yaml
-# Add to your docker-compose.yml (requires surrealdb service, see installation guide)
 services:
   open_notebook:
-    image: lfnovo/open_notebook:v1-latest
-    pull_policy: always
     ports:
-      - "127.0.0.1:8502:8502"  # Bind to localhost only
-    environment:
-      - OPEN_NOTEBOOK_PASSWORD=your_secure_password
+      - "127.0.0.1:8502:8502"
+      - "127.0.0.1:5055:5055"
+```
+
+```bash
+# UFW example: allow only SSH and the reverse proxy
+sudo ufw allow ssh
+sudo ufw allow 80/tcp
+sudo ufw allow 443/tcp
+sudo ufw enable
+```
+
+Docker publishes ports by editing iptables directly, which can bypass UFW rules. Binding to `127.0.0.1` as above is the reliable way to keep a port private.
+
+### CORS Origins
+
+The API accepts cross-origin requests from any origin by default (`*`) and logs a warning at startup while `CORS_ORIGINS` is unset. For internet-facing deployments, list the exact origins that load the UI:
+
+```bash
+CORS_ORIGINS=https://notebook.example.com
+# Several origins, comma-separated
+CORS_ORIGINS=https://notebook.example.com,http://192.168.1.10:8502
+```
+
+Include the scheme and any non-default port. Restart the API after changing it (`docker compose up -d`). With the default wildcard, the API does not allow credentialed cross-origin requests; once you list origins, it does, for those origins only. Error responses carry CORS headers only for allowed origins.
+
+Most installs never hit CORS at all: the browser loads the UI and the API from origins it is told about through `API_URL`. If you set `CORS_ORIGINS` and the UI starts failing with CORS errors, the origin you are browsing from is missing from the list.
+
+### Other measures
+
+```yaml
+services:
+  open_notebook:
     security_opt:
       - no-new-privileges:true
     deploy:
       resources:
         limits:
-          memory: 2G
-          cpus: "1.0"
-    restart: always
+          memory: 4G
 ```
 
-### Firewall Configuration
-
-```bash
-# UFW (Ubuntu)
-sudo ufw allow ssh
-sudo ufw allow 80/tcp
-sudo ufw allow 443/tcp
-sudo ufw deny 8502/tcp   # Block direct access
-sudo ufw deny 5055/tcp   # Block direct API access
-sudo ufw enable
-
-# iptables
-iptables -A INPUT -p tcp --dport 22 -j ACCEPT
-iptables -A INPUT -p tcp --dport 80 -j ACCEPT
-iptables -A INPUT -p tcp --dport 443 -j ACCEPT
-iptables -A INPUT -p tcp --dport 8502 -j DROP
-iptables -A INPUT -p tcp --dport 5055 -j DROP
-```
-
-### Reverse Proxy with SSL
-
-See [Reverse Proxy Configuration](reverse-proxy.md) for complete nginx/Caddy/Traefik setup with HTTPS.
-
-### CORS Origins
-
-The API accepts cross-origin requests from any origin by default (`*`). This is convenient for development and diverse self-hosted setups, but it's not recommended for internet-facing production deployments because any website the user visits can issue authenticated cross-origin requests to your API.
-
-When `CORS_ORIGINS` is not set, the API logs a startup warning prompting you to configure it.
-
-**For production, set `CORS_ORIGINS` to your frontend's actual origin(s):**
-
-```bash
-# Single origin
-CORS_ORIGINS=https://notebook.example.com
-
-# Multiple origins (comma-separated)
-CORS_ORIGINS=https://notebook.example.com,https://admin.example.com
-```
-
-**Guidelines:**
-
-- Always use HTTPS origins in production.
-- List only the exact origins that should be allowed to call the API.
-- Include the scheme and port (if non-default): `https://example.com`, `http://192.168.1.10:3000`.
-- Changes require an API restart to take effect.
-
-**Error responses** (401, 404, 500, etc.) also respect the configured origins — they only include `Access-Control-Allow-Origin` for allowed origins, so error bodies are not leaked cross-origin when `CORS_ORIGINS` is configured.
+- Keep the image current: `docker compose pull && docker compose up -d`.
+- Back up `./notebook_data` and `./surreal_data`, and encrypt the backups if your sources are sensitive.
 
 ---
 
-## Security Limitations
+## Limitations
 
-Open Notebook's password protection provides **basic access control**, not enterprise-grade security:
+| Area | Current behavior |
+|------|------------------|
+| Users | One shared password, no accounts or roles |
+| Password in transit | A plain bearer header: use HTTPS |
+| Password in the browser | Stored in `localStorage` until Sign Out |
+| Sessions | No expiry; the password is sent with every request |
+| Rate limiting, lockout | None |
+| Audit log | None |
 
-| Feature | Status |
-|---------|--------|
-| Password transmission | Plain text (use HTTPS!) |
-| Password storage | In memory |
-| User management | Single password for all |
-| Session timeout | None (until browser close) |
-| Rate limiting | None |
-| Audit logging | None |
-
-### Risk Mitigation
-
-1. **Always use HTTPS** - Encrypt traffic with TLS
-2. **Strong passwords** - 20+ characters, complex
-3. **Network security** - Firewall, VPN for sensitive deployments
-4. **Regular updates** - Keep containers and dependencies updated
-5. **Monitoring** - Check logs for suspicious activity
-6. **Backups** - Regular backups of data
-
----
-
-## Enterprise Considerations
-
-For deployments requiring advanced security:
-
-| Need | Solution |
-|------|----------|
-| SSO/OAuth | Implement OAuth2/SAML proxy |
-| Role-based access | Custom middleware |
-| Audit logging | Log aggregation service |
-| Rate limiting | API gateway or nginx |
-| Data encryption | Encrypt volumes at rest |
-| Network segmentation | Docker networks, VPC |
+For single sign-on, per-user access or rate limiting, put an authenticating proxy or API gateway in front of Open Notebook.
 
 ---
 
 ## Troubleshooting
 
-### Password Not Working
+### The login keeps failing
 
 ```bash
-# Check env var is set
-docker exec open-notebook env | grep OPEN_NOTEBOOK_PASSWORD
+# Which password source does the API use? (never prints the value)
+docker compose exec open_notebook sh -c 'f="$OPEN_NOTEBOOK_PASSWORD_FILE"; if [ -n "$f" ] && [ -r "$f" ] && grep -q "[^[:space:]]" "$f"; then echo "set from file"; elif [ -n "$OPEN_NOTEBOOK_PASSWORD" ]; then echo "set from variable"; else echo "unset (authentication off)"; fi'
 
-# Check logs
-docker logs open-notebook | grep -i auth
-
-# Test API directly
-curl -H "Authorization: Bearer your_password" \
-  http://localhost:5055/health
+# Does the API accept it?
+curl -i -H "Authorization: Bearer your_password" http://localhost:5055/api/notebooks
 ```
 
-### 401 Unauthorized Errors
+A `_FILE` path that doesn't exist or points to an empty file is ignored (the API log shows `OPEN_NOTEBOOK_PASSWORD_FILE path does not exist` or `points to empty file`), and the API falls back to `OPEN_NOTEBOOK_PASSWORD`.
 
-```bash
-# Check header format
-curl -v -H "Authorization: Bearer your_password" \
-  http://localhost:5055/api/notebooks
+If you changed the password in `docker-compose.yml`, apply it with `docker compose up -d` (`restart` keeps the old value), then sign out and log in again.
 
-# Verify password matches
-echo "Password length: $(echo -n $OPEN_NOTEBOOK_PASSWORD | wc -c)"
-```
+### "Unable to connect to server. Please check if the API is running."
 
-### Cannot Access After Setting Password
+This is the login page failing to reach the API, not a wrong password. See [Connection Issues](../6-TROUBLESHOOTING/connection-issues.md).
 
-1. Clear browser cache and cookies
-2. Try incognito/private mode
-3. Check browser console for errors
-4. Verify password is correct in environment
+### Credential problems
 
-### Security Testing
-
-```bash
-# Without password (should fail)
-curl http://localhost:5055/api/notebooks
-# Expected: {"detail": "Missing authorization header"}
-
-# With correct password (should succeed)
-curl -H "Authorization: Bearer your_password" \
-  http://localhost:5055/api/notebooks
-
-# Health check (should work without password)
-curl http://localhost:5055/health
-```
+"Encryption key not configured", "Decryption Error" and related messages are covered in [AI & Chat Issues → Credentials and encryption](../6-TROUBLESHOOTING/ai-chat-issues.md#credentials-and-encryption).
 
 ---
 
 ## Reporting Security Issues
 
-If you discover security vulnerabilities:
-
-1. **Do NOT open public issues**
-2. Contact maintainers directly
-3. Provide detailed information
-4. Allow time for fixes before disclosure
+Don't open a public issue. Use GitHub's private vulnerability reporting, as described in [SECURITY.md](../../SECURITY.md).
 
 ---
 
 ## Related
 
-- **[Reverse Proxy](reverse-proxy.md)** - HTTPS and SSL setup
-- **[Advanced Configuration](advanced.md)** - Ports, timeouts, and SSL settings
-- **[Environment Reference](environment-reference.md)** - All configuration options
+- [Reverse Proxy](reverse-proxy.md) — HTTPS setup
+- [Environment Reference](environment-reference.md) — all variables
+- [Developer security notes](../7-DEVELOPMENT/security.md) — threat model and implementation details
diff --git a/docs/6-TROUBLESHOOTING/ai-chat-issues.md b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
index 9dcafeb5..982baee6 100644
--- a/docs/6-TROUBLESHOOTING/ai-chat-issues.md
+++ b/docs/6-TROUBLESHOOTING/ai-chat-issues.md
@@ -1,444 +1,178 @@
-# AI & Chat Issues - Model Configuration & Quality
+# AI & Chat Issues - Models, Credentials & Errors
 
-Problems with AI models, chat, and response quality.
+Errors from AI providers, model setup and the credential system. Each entry starts with the message you see; in chat it appears as a red notification, in background jobs (insights, transformations, podcasts) in the job's error.
 
-> **Note:** Open Notebook now shows descriptive error messages for AI provider failures. Instead of a generic "An unexpected error occurred", you'll see specific messages like "Authentication failed. Please check your API key" or "Rate limit exceeded. Please wait a moment and try again." These messages help you diagnose and fix issues faster.
+Background jobs retry transient provider errors (rate limits, provider outages) a few times on their own; configuration errors, oversized content and empty answers are not retried. Chat and Ask don't retry: send the message again.
 
 ---
 
-## "Failed to send message" Error
+## Model setup
 
-**Symptom:** Chat shows "Failed to send message" toast. Logs show:
-```
-Error executing chat: Model is not a LanguageModel: None
-```
+### "No model configured for default for type=chat"
 
-**Cause:** No valid language model configured for chat
+Full message: `No model configured for default for type=chat. Please go to Manage → Models and configure a default model for 'chat'.` The type can also be `transformation`, `tools` or another role.
 
-**Solutions:**
+**Cause:** no model is assigned to that role. A fresh install has none.
 
-### Solution 1: Check Default Model Configuration
-```
-1. Go to Manage → Models
-2. Scroll to "Default Models" section
-3. Verify "Default Chat Model" has a model selected
-4. If empty, select an available language model
-5. Click Save
-```
+**Fix:** **Manage → Models → Default Model Assignments**: choose a model for each role, or click **Auto-assign Defaults**. If the lists are empty, you haven't registered models yet: follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider).
 
-### Solution 2: Verify Model Names (Ollama Users)
-```bash
-# Get exact model names
-ollama list
+### "Model is not a LanguageModel: …"
 
-# Example output:
-# NAME                   SIZE      MODIFIED
-# gemma3:12b            8.1 GB    2 months ago
+Full message: `Model is not a LanguageModel: <model>. Please check that the model configured for '<role>' is a language model, not an embedding or speech model.`
 
-# The model name in Open Notebook must be EXACTLY "gemma3:12b"
-# NOT "gemma3" or "gemma3-12b"
-```
+**Cause:** an embedding, text-to-speech or speech-to-text model is assigned to a language role (Chat, Transformation, Tools or Large Context Model). This happens when a model was registered under the wrong **Model Type**.
 
-### Solution 3: Re-add Missing Models
-```
-1. Note the exact model names from your provider
-2. Go to Manage → Models
-3. Delete any misconfigured models
-4. Add models with exact names
-5. Set new defaults
-```
+**Fix:** assign a language model to that role. If a model is registered with the wrong type, delete it in Manage → Models and add it again with the right Model Type.
 
-### Solution 4: Check Model Still Exists
-```bash
-# For Ollama: verify model is installed
-ollama list
+### A model that worked now fails with "model not found" or "does not exist"
 
-# For cloud providers: verify API key is valid
-# and you have access to the model
-```
-
-> **Tip:** This error often occurs when you delete a model from Ollama but forget to update the default models in Open Notebook. Always re-configure defaults after removing models.
+The model was removed from the provider (retired, or deleted from Ollama). Discover Models on the configuration to see what is available now, add a replacement, and re-assign the defaults that used the old one.
 
 ---
 
-## "Models not available" or "Models not showing"
+## Provider errors
 
-**Symptom:** Manage → Models shows empty, or "No models configured"
+### "The AI provider took too long to respond"
 
-**Cause:** No credential configured, or credential has invalid API key
+Full message: `The AI provider took too long to respond. Try again, use a faster model, or raise ESPERANTO_LLM_TIMEOUT (180 seconds by default).`
 
-**Solutions:**
+v1.15.0 shows `Could not connect to the AI provider. Please check your network connection and provider URL.` for this same timeout; if that message appears after a long wait rather than immediately, it is a timeout.
 
-### Solution 1: Add Credential via Settings UI
-```
-1. Go to Manage → Models
-2. Click "Add Credential"
-3. Select your provider (e.g., OpenAI, Anthropic, Google)
-4. Enter your API key
-5. Click Save, then Test Connection
-6. Click Discover Models → Register Models
-7. Go to Manage → Models to verify
-```
+**Cause:** one model call took longer than `ESPERANTO_LLM_TIMEOUT` (180 seconds by default, applied to every provider including Ollama). Typical with large local models on CPU, the first request while a model loads, very large contexts, or reasoning models that think for minutes.
 
-### Solution 2: Check Key is Valid
-```
-1. Go to Manage → Models
-2. Click "Test Connection" on your credential
-3. If it shows "Invalid API key":
-   - Get a fresh key from the provider's website
-   - Delete the credential and create a new one
-```
+**Fix:**
 
-### Solution 3: Switch Provider
-```
-1. Go to Manage → Models
-2. Add a credential for a different provider
-3. Test Connection → Discover Models → Register Models
-4. Go to Manage → Models to select the new provider's models
-```
+1. Try a faster model, or include less content (see [Content too large](#content-too-large-for-the-selected-model)).
+2. Raise the limit in the `open_notebook` service and apply with `docker compose up -d` (`restart` keeps the old value):
+   ```yaml
+   environment:
+     - ESPERANTO_LLM_TIMEOUT=420   # keep below 600
+   ```
+   Stay below 600 seconds: the web UI stops waiting after 10 minutes, and that limit can't be changed on the published image.
+3. With one local GPU, also set `OPEN_NOTEBOOK_WORKER_MAX_TASKS=1` so background jobs don't compete for it.
+
+More for Ollama: [Ollama → Timeouts](../5-CONFIGURATION/ollama.md#timeouts-with-slow-models).
+
+### "timeout of 600000ms exceeded"
+
+The browser gave up after 10 minutes. Something is slower than the UI allows, usually because `ESPERANTO_LLM_TIMEOUT` was raised above 600 or a reverse proxy holds the request. Lower `ESPERANTO_LLM_TIMEOUT` below 600 so the server fails first with a clear message, and check proxy timeouts ([Reverse Proxy → Timeouts](../5-CONFIGURATION/reverse-proxy.md#timeouts)).
+
+### "Could not connect to the AI provider. Please check your network connection and provider URL."
+
+Shown immediately (not after a long wait), the provider can't be reached at all.
+
+- Local servers (Ollama, LM Studio, Speaches): the configuration's **Base URL** must be reachable from inside the container. `localhost` there is the container itself; use `host.docker.internal` or the compose service name. See [Ollama](../5-CONFIGURATION/ollama.md#which-base-url-to-use) and [OpenAI-Compatible](../5-CONFIGURATION/openai-compatible.md#base-url-from-inside-docker).
+- Cloud providers: the server has no internet access, or needs `HTTP_PROXY`/`HTTPS_PROXY` ([Environment Reference](../5-CONFIGURATION/environment-reference.md#outbound-proxy)).
+- Self-signed HTTPS endpoint: set `ESPERANTO_SSL_CA_BUNDLE` ([Advanced → SSL](../5-CONFIGURATION/advanced.md#ssl-for-self-signed-providers)).
+
+The **Test** button on the configuration gives a more specific reason ("Cannot connect to server. Check the URL is correct.", "Connection timed out. Check if server is accessible.").
+
+### "Authentication failed. Please check your API key in Manage -> Models."
+
+**Cause:** the provider rejected the key (wrong, revoked, or for another region or project). v1.15.0 shows the same message with the outdated path "Settings -> Credentials".
+
+**Fix:** in Manage → Models, click **Test** on the provider's configuration. If it reports "Invalid API key", create a new key with the provider and edit the configuration (leave the key field blank to keep the old one; type a new one to replace it). For MiniMax and SiliconFlow, check that the key's region matches the **Base URL** ([AI Providers](../5-CONFIGURATION/ai-providers.md#minimax)).
+
+### "Rate limit exceeded. Please wait a moment and try again."
+
+The provider returned HTTP 429: too many requests, or the account is out of quota or credit. Wait and retry, check the account's billing, or lower `OPEN_NOTEBOOK_WORKER_MAX_TASKS` so bulk processing sends fewer requests at once.
+
+### "Content too large for the selected model"
+
+Full message: `Content too large for the selected model. Try using a smaller selection or a model with a larger context window.`
+
+**Cause:** the prompt (sources in context plus chat history) exceeds the model's context window.
+
+**Fix:**
+
+- In notebook chat, include fewer sources, or switch them from "Full content" to "Insights only".
+- Use a model with a larger window. Open Notebook switches to the **Large Context Model** automatically when the content exceeds about 105,000 tokens, so assign a model with a large window to that role under Default Model Assignments.
+- Start a new chat session to drop a long history.
+
+**Ollama doesn't report this error.** When a prompt exceeds the credential's **Context Window (num_ctx)** (8192 tokens by default), Ollama silently drops the start of the prompt. Answers then ignore your sources or earlier messages. Raise **Context Window (num_ctx)** on the Ollama configuration in Manage → Models if your hardware allows; see [Ollama → Context window](../5-CONFIGURATION/ollama.md#context-window-num_ctx).
+
+### "The request payload is too large for the AI provider"
+
+The provider rejected the request size (HTTP 413). Reduce the content, as above, or use a provider with larger limits.
+
+### "The AI provider is temporarily unavailable. Please try again in a few minutes."
+
+The provider returned a server error (500, 502, 503 or "overloaded"). Wait and retry, or switch to another model or provider. Check the provider's status page.
+
+### "AI service error: …"
+
+An error Open Notebook doesn't recognize; the rest of the message is the provider's own text (shortened). It usually names the problem (unsupported parameter, content policy, model access). The full error is in the log: `docker compose logs open_notebook | grep -i "Unclassified LLM error"`.
+
+### "The model returned an empty response. Try again, or pick a different model if this keeps happening."
+
+The model answered with no text. Common with reasoning models that use their whole output budget on thinking, or models with a small output limit. Retry, or choose a non-reasoning model for that role. In Ask, the same problem appears as "The strategy model returned no search terms for this question" or "The final answer model returned an empty response"; pick other models in the Ask page's advanced model options.
 
 ---
 
-## "Invalid API key" or "Unauthorized"
+## Credentials and encryption
 
-**Symptom:** Error when trying to chat: "Invalid API key"
+### "Encryption key not configured"
 
-**Cause:** Credential has wrong, expired, or revoked API key
+Shown in **Manage → Models** and as a banner: "Set the OPEN_NOTEBOOK_ENCRYPTION_KEY environment variable…". Saving a credential fails with `Encryption key not configured. Set OPEN_NOTEBOOK_ENCRYPTION_KEY to enable storing API keys.`, and the API log shows `OPEN_NOTEBOOK_ENCRYPTION_KEY not set. API key encryption will fail until this is configured.`
 
-**Solutions:**
+**Fix:** add the key to the `open_notebook` service and run `docker compose up -d`:
 
-### Step 1: Test Your Credential
-```
-1. Go to Manage → Models
-2. Click "Test Connection" on your credential
-3. If it fails, proceed to Step 2
+```yaml
+environment:
+  - OPEN_NOTEBOOK_ENCRYPTION_KEY=<generated-key>
 ```
 
-### Step 2: Get Fresh Key
-```
-Go to provider's dashboard:
-- OpenAI: https://platform.openai.com/api-keys (starts with sk-proj-)
-- Anthropic: https://console.anthropic.com/ (starts with sk-ant-)
-- Google: https://aistudio.google.com/app/apikey (starts with AIzaSy)
+Generate the value yourself, for example with `openssl rand -hex 32` (on Windows, see [Set your encryption key](../1-INSTALLATION/docker-compose.md#step-2-set-your-encryption-key)). Don't reuse an example value.
 
-Generate new key and copy exactly (no extra spaces)
-```
+If you set it only in `.env`, it never reaches the container: the shipped compose file doesn't load `.env` into it. Don't keep the `change-me-to-a-secret-string` placeholder. See [Security](../5-CONFIGURATION/security.md#api-key-encryption).
 
-### Step 3: Update Credential
-```
-1. Go to Manage → Models
-2. Delete the old credential
-3. Click "Add Credential" → select provider
-4. Paste the new key
-5. Click Save, then Test Connection
-6. Re-discover and register models if needed
-```
+### "Decryption Error"
 
-### Step 4: Verify in UI
-```
-1. Go to Manage → Models
-2. Verify models are available
-3. Try a test chat
-```
+On a credential in Manage → Models: "This credential's API key could not be decrypted. The encryption key may have changed. Delete this credential and re-create it with the correct key." The API log shows `Failed to decrypt credential <id>: Decryption failed: ...`.
+
+**Cause:** `OPEN_NOTEBOOK_ENCRYPTION_KEY` is not the value the credential was saved with. Common reasons: the key was changed, a new container was created without it (for example a different compose file or a typo), or the database was restored onto an instance with another key.
+
+**Fix:** if you still have the old key, put it back and run `docker compose up -d`; the credentials work again. Otherwise delete each affected credential and add it again. Test, Models and Edit are disabled on a credential in this state.
+
+Credentials saved by v1.15.0 or later can't be read by older versions either. After a downgrade, restore the backup taken before the upgrade ([Security → Upgrading to PBKDF2](../5-CONFIGURATION/security.md#upgrading-to-pbkdf2-v1150)).
+
+### "Environment Variables Detected"
+
+Provider keys are set as environment variables (`OPENAI_API_KEY` and so on). They still work as a fallback, but **Migrate to Database** turns them into regular credentials. Afterwards, remove the variables from your configuration. See [Environment Reference → Legacy](../5-CONFIGURATION/environment-reference.md#legacy-ai-provider-variables-deprecated).
+
+### Test fails
+
+| Message | Meaning |
+|---------|---------|
+| "Invalid API key" | The provider rejected the key |
+| "API key lacks required permissions" | The key is valid but can't list or use models (restricted key, project permissions) |
+| "Model not found on this provider" | The test model isn't available to this key; Discover Models still shows what is |
+| "Cannot connect to server. Check the URL is correct." | Nothing reachable at the Base URL, or TLS verification failed |
+| "Cannot connect to Ollama. Check if Ollama server is running." | See [Ollama troubleshooting](../5-CONFIGURATION/ollama.md#troubleshooting) |
+| "Connection timed out. Check if server is accessible." | Firewall, wrong address, or a busy server |
+
+### "No models found from this provider"
+
+Discover Models returned an empty list. Local servers: load or pull a model first. Gateways and compatible servers that don't list models: type the model id in the search box and click **Add "…"**.
 
 ---
 
-## Chat Returns Generic/Bad Responses
+## Answer quality
 
-**Symptom:** AI responses are shallow, generic, or wrong
+These aren't errors, but they are the most common complaints.
 
-**Cause:** Bad context, vague question, or wrong model
+- **Answers ignore my sources.** In notebook chat, each source card has a context setting that cycles between "Not included in chat", "Insights only" and "Full content". Check that the sources you care about are included. With Ollama, also check [the context window](../5-CONFIGURATION/ollama.md#context-window-num_ctx).
+- **"Insights only" gives shallow answers.** It sends the source's insights, not its text. Use "Full content" for the sources the question is about.
+- **Generic or wrong answers.** Ask specific questions that name the source or section, and use a stronger model for the Chat Model role. Check the citations: they show which sources the answer used.
+- **Ask can't find something that is there.** Ask searches the embeddings; sources without embeddings aren't found. See [Processing Issues → Search](processing-issues.md#search-and-ask).
 
-**Solutions:**
-
-### Solution 1: Check Context
-```
-1. In Chat, click "Select Sources"
-2. Verify sources you want are CHECKED
-3. Set them to "Full Content" (not "Summary Only")
-4. Click "Save"
-5. Try chat again
-```
-
-### Solution 2: Ask Better Question
-```
-Bad:     "What do you think?"
-Good:    "Based on the paper's methodology, what are 3 limitations?"
-
-Bad:     "Tell me about X"
-Good:    "Summarize X in 3 bullet points with page citations"
-```
-
-### Solution 3: Use Stronger Model
-```
-OpenAI:
-  Current: gpt-4o-mini → Switch to: gpt-4o
-
-Anthropic:
-  Current: claude-3-5-haiku → Switch to: claude-3-5-sonnet
-
-To change:
-1. Manage → Models
-2. Select model
-3. Try chat again
-```
-
-### Solution 4: Add More Sources
-```
-If:  "Response seems incomplete"
-Try: Add more relevant sources to provide context
-```
+More: [Chat Effectively](../3-USER-GUIDE/chat-effectively.md).
 
 ---
 
-## Chat is Very Slow
+## Related
 
-**Symptom:** Chat responses take minutes
-
-**Cause:** Large context, slow model, or overloaded API
-
-**Solutions:**
-
-### Solution 1: Use Faster Model
-```bash
-Fastest: Groq (any model)
-Fast: OpenAI gpt-4o-mini
-Medium: Anthropic claude-3-5-haiku
-Slow: Anthropic claude-3-5-sonnet
-
-Switch in: Manage → Models
-```
-
-### Solution 2: Reduce Context
-```
-1. Chat → Select Sources
-2. Uncheck sources you don't need
-3. Or switch to "Summary Only" for background sources
-4. Save and try again
-```
-
-### Solution 3: Increase Timeout
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - ESPERANTO_LLM_TIMEOUT=420  # per model call (default: 180); keep below 600
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Solution 4: Check System Load
-```bash
-# See if API is overloaded:
-docker stats
-
-# If CPU >80% or memory >90%:
-# Reduce: OPEN_NOTEBOOK_WORKER_MAX_TASKS=2 (under open_notebook → environment:)
-# Apply: docker compose up -d
-```
-
----
-
-## Chat Doesn't Remember History
-
-**Symptom:** Each message treated as separate, no context between questions
-
-**Cause:** Chat history not saved or new chat started
-
-**Solution:**
-
-```
-1. Make sure you're in same Chat (not new Chat)
-2. Check Chat title at top
-3. If it's blank, start new Chat with a title
-4. Each named Chat keeps its history
-5. If you start new Chat, history is separate
-```
-
----
-
-## "Rate limit exceeded"
-
-**Symptom:** Error: "Rate limit exceeded" or "Too many requests"
-
-**Cause:** Hit provider's API rate limit
-
-**Solutions:**
-
-### For Cloud Providers (OpenAI, Anthropic, etc.)
-
-**Immediate:**
-- Wait 1-2 minutes
-- Try again
-
-**Short term:**
-- Use cheaper/smaller model
-- Reduce concurrent operations
-- Space out requests
-
-**Long term:**
-- Upgrade your account
-- Switch to different provider
-- Use Ollama (local, no limits)
-
-### Check Account Status
-```
-OpenAI: https://platform.openai.com/account/usage/overview
-Anthropic: https://console.anthropic.com/account/billing/overview
-Google: Google Cloud Console
-```
-
-### For Ollama (Local)
-- No rate limits
-- Use `ollama pull mistral` for best model
-- Restart if hitting resource limits
-
----
-
-## "Context length exceeded" or "Token limit"
-
-**Symptom:** Error about too many tokens
-
-**Cause:** Sources too large for model
-
-**Solutions:**
-
-### Solution 1: Use Model with Longer Context
-```
-Current: GPT-4o (128K tokens) → Switch to: Claude (200K tokens)
-Current: Claude Haiku (200K) → Switch to: Gemini (1M tokens)
-
-To change: Manage → Models
-```
-
-### Solution 2: Reduce Context
-```
-1. Select fewer sources
-2. Or use "Summary Only" instead of "Full Content"
-3. Or split large documents into smaller pieces
-```
-
-### Solution 3: For Ollama (Local)
-```bash
-# Use smaller model:
-ollama pull phi  # Very small
-# Instead of: ollama pull neural-chat  # Large
-```
-
----
-
-## "API call failed" or Timeout
-
-**Symptom:** Generic API error, response times out
-
-**Cause:** Provider API down, network issue, or slow service
-
-**Solutions:**
-
-### Check Provider Status
-```
-OpenAI: https://status.openai.com/
-Anthropic: Check website
-Google: Google Cloud Status
-Groq: Check website
-```
-
-### Retry Operation
-```
-1. Wait 30 seconds
-2. Try again
-```
-
-### Use Different Model/Provider
-```
-1. Manage → Models
-2. Try different provider
-3. If OpenAI down, use Anthropic
-```
-
-### Check Network
-```bash
-# Verify internet working:
-ping google.com
-
-# Test API endpoint directly:
-curl https://api.openai.com/v1/models \
-  -H "Authorization: Bearer YOUR_KEY"
-```
-
----
-
-## Responses Include Hallucinations
-
-**Symptom:** AI makes up facts that aren't in sources
-
-**Cause:** Sources not in context, or model guessing
-
-**Solutions:**
-
-### Solution 1: Verify Context
-```
-1. Click citation in response
-2. Check source actually says that
-3. If not, sources weren't in context
-4. Add source to context and try again
-```
-
-### Solution 2: Request Citations
-```
-Ask: "Answer this with citations to specific pages"
-
-The AI will be more careful if asked for citations
-```
-
-### Solution 3: Use Stronger Model
-```
-Weaker models hallucinate more
-Switch to: GPT-4o or Claude Sonnet
-```
-
----
-
-## High API Costs
-
-**Symptom:** API bills are higher than expected
-
-**Cause:** Using expensive model, large context, many requests
-
-**Solutions:**
-
-### Use Cheaper Model
-```
-Expensive: gpt-4o
-Cheaper: gpt-4o-mini (10x cheaper)
-
-Expensive: Claude Sonnet
-Cheaper: Claude Haiku (5x cheaper)
-
-Groq: Ultra cheap but fewer models
-```
-
-### Reduce Context
-```
-In Chat:
-1. Select fewer sources
-2. Use "Summary Only" for background
-3. Ask more specific questions
-```
-
-### Switch to Ollama (Free)
-```bash
-# Install Ollama
-# Run: ollama serve
-# Download: ollama pull mistral
-# Set: OLLAMA_API_BASE=http://localhost:11434
-# Cost: Free!
-```
-
----
-
-## Still Having Chat Issues?
-
-- Try [Quick Fixes](quick-fixes.md)
-- Try [Chat Effectively Guide](../3-USER-GUIDE/chat-effectively.md)
-- Check logs: `docker compose logs api | grep -i "error"`
-- Ask for help: [Troubleshooting Index](index.md#getting-help)
+- [AI Providers](../5-CONFIGURATION/ai-providers.md) — setup for each provider
+- [Processing Issues](processing-issues.md) — sources, search, podcasts
+- [Connection Issues](connection-issues.md) — UI, API and database
+- [Environment Reference](../5-CONFIGURATION/environment-reference.md)
diff --git a/docs/6-TROUBLESHOOTING/connection-issues.md b/docs/6-TROUBLESHOOTING/connection-issues.md
index e094ba78..d6649bc9 100644
--- a/docs/6-TROUBLESHOOTING/connection-issues.md
+++ b/docs/6-TROUBLESHOOTING/connection-issues.md
@@ -1,457 +1,144 @@
-# Connection Issues - Network & API Problems
+# Connection Issues - UI, API & Database
 
-Frontend can't reach API or services won't communicate.
+When the pieces of Open Notebook can't reach each other. There are three hops:
+
+```
+Browser ──> Web UI (8502) ──> API (5055) ──> SurrealDB (8000)
+```
+
+With the shipped `docker-compose.yml` there are two services: `surrealdb`, and `open_notebook`, which runs the UI, the API and the background worker together. Commands on this page use those names.
 
 ---
 
-## "Cannot connect to server" (Most Common)
+## The page doesn't load at all
 
-**What it looks like:**
-- Browser shows error page
-- "Unable to reach API"
-- "Cannot connect to server"
-- UI loads but can't create notebooks
-
-**Diagnosis:**
+The browser shows its own error ("This site can't be reached", "connection refused") for `http://localhost:8502`.
 
 ```bash
-# Check if API is running
-docker ps | grep api
-# Should see "api" service running
+docker compose ps                      # is open_notebook "Up"?
+docker compose logs --tail 50 open_notebook
+```
 
-# Check if API is responding
+- **Not running or restarting:** read the log. The API waits for the database before the UI starts, so a database problem can keep the UI down too (see [Database Connection Failed](#database-connection-failed)).
+- **Running, but the port isn't published:** `docker compose ps` must show `0.0.0.0:8502->8502/tcp`. If you changed the mapping, use the host port you chose.
+- **"Bind for 0.0.0.0:8502 failed: port is already allocated"** when starting: another program uses the port. Find it with `lsof -i :8502` (or `sudo ss -ltnp | grep 8502`), or map a different host port (`"8503:8502"`) and run `docker compose up -d`.
+- **From another machine:** the server's firewall must allow 8502 (and 5055, see below).
+
+The first start after enabling `OPEN_NOTEBOOK_ENABLE_DOCLING` or `OPEN_NOTEBOOK_ENABLE_CRAWL4AI` installs large packages before anything else starts; the log shows `[entrypoint] Installing ...`. Wait for it to finish.
+
+---
+
+## "Unable to Connect to API Server"
+
+Full overlay text: **Unable to Connect to API Server** — "The Open Notebook API server could not be reached". On the login page the same problem reads "Unable to connect to server. Please check if the API is running."
+
+The UI loaded, but the browser can't reach the API. Click **Show Technical Details** in the overlay: **Attempted URL** is the API address the browser used.
+
+**1. Is the API up?**
+
+```bash
 curl http://localhost:5055/health
-# Should show: {"status":"ok"}
-
-# Check if frontend is running
-docker ps | grep frontend
-# Should see "frontend" or React service running
+# {"status":"healthy"}
 ```
 
-**Solutions:**
+No answer: check `docker compose logs open_notebook` for API errors. A database problem stops the API from starting (see below).
+
+**2. Can the browser reach the Attempted URL?**
+
+When `API_URL` is not set, the browser uses the host from the address bar plus port 5055. Opening `http://192.168.1.50:8502` makes it call `http://192.168.1.50:5055`. So:
+
+- Port 5055 must be published (`"5055:5055"` in the shipped file) and allowed by the server's firewall.
+- Behind a reverse proxy, the auto-detected `https://your-domain:5055` usually doesn't exist. Set `API_URL=https://your-domain` (no `/api`) in the `open_notebook` environment and run `docker compose up -d`. See [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md#how-the-browser-finds-the-api).
+- If you published the API on another host port, set `API_URL` to match (`http://<host>:<port>`).
+
+Check what the container received with `docker compose exec open_notebook printenv API_URL`. Changes need `docker compose up -d`; `docker compose restart` keeps the old environment.
+
+**3. HTTPS page, HTTP API?** The browser blocks it as mixed content. `API_URL` must start with `https://` when the UI is served over HTTPS.
+
+---
+
+## "Database Connection Failed"
+
+Full overlay text: **Database Connection Failed** — "The API server is running, but the database is not accessible". You see it when the database becomes unreachable while the API is running.
+
+If the database is unreachable when the API **starts**, the API doesn't come up at all: its log shows `Database is not reachable yet (attempt n/12)` while it waits, then `Database did not become reachable after 12 attempts` and `CRITICAL: Database migration failed`. The browser then can't reach the API (**Unable to Connect to API Server**), or in the Docker image the UI doesn't load at all, because it waits for the API. The causes and fixes are the same.
 
-### Solution 1: API Not Running
 ```bash
-# Start API
-docker compose up api -d
-
-# Wait 5 seconds
-sleep 5
-
-# Verify it's running
-docker compose logs api | tail -20
+docker compose ps surrealdb
+docker compose logs --tail 50 surrealdb
+docker compose exec open_notebook printenv SURREAL_URL SURREAL_USER SURREAL_NAMESPACE SURREAL_DATABASE   # no passwords
 ```
 
-### Solution 2: Port Not Exposed
+| Cause | Fix |
+|-------|-----|
+| `surrealdb` isn't running, or crashed (often a permissions error on `./surreal_data`) | Read its log. The shipped service runs as `user: root` so it can write the bind mount |
+| `SURREAL_URL` uses `localhost` inside Docker | Use the service name: `ws://surrealdb:8000/rpc` |
+| Wrong user or password | `SURREAL_USER`/`SURREAL_PASSWORD` must match the `--user`/`--pass` SurrealDB started with. With the shipped file, set both in `.env` so the two services agree |
+| Running from source with the Docker URL | Use `ws://localhost:8000/rpc` in `.env` |
+| Corporate proxy, API log shows HTTP 403 on the database websocket | Add `surrealdb` and `localhost` to `NO_PROXY` ([Environment Reference → Outbound proxy](../5-CONFIGURATION/environment-reference.md#outbound-proxy)) |
+
+More: [Database](../5-CONFIGURATION/database.md).
+
+---
+
+## Background jobs never run
+
+Sources stay **Queued**, podcasts stay **Pending**, embeddings never finish. The worker isn't running or uses a different database namespace. See [Processing Issues → Sources stay "Queued"](processing-issues.md#sources-stay-queued-waiting-to-be-processed).
+
+---
+
+## Slow pages, 502 or 504 behind a proxy
+
+- `502 Bad Gateway`: the proxy can't reach port 8502 (container down, or not on the proxy's network).
+- `504 Gateway Timeout` or `socket hang up` on long chats and transformations: the proxy's read timeout is shorter than the request. Set it to at least 600 seconds.
+
+See [Reverse Proxy → Troubleshooting](../5-CONFIGURATION/reverse-proxy.md#troubleshooting).
+
+---
+
+## CORS errors in the browser console
+
+`Cross-Origin Request Blocked` or `has been blocked by CORS policy`. With default settings the API accepts every origin, so on a default install a CORS error almost always hides another problem:
+
+- **Status 413:** an upload hit a size limit in your reverse proxy ([Upload size](../5-CONFIGURATION/reverse-proxy.md#upload-size-413-errors)).
+- **502/504 or no status:** the proxy returned its own error page, which has no CORS headers. Fix the underlying error.
+- **You set `CORS_ORIGINS`:** the origin in the browser's address bar (scheme, host and port) must be in the list exactly. See [Security → CORS Origins](../5-CONFIGURATION/security.md#cors-origins).
+
+---
+
+## Login problems
+
+- **"Invalid password"**: the password doesn't match `OPEN_NOTEBOOK_PASSWORD`. If you just changed it in `docker-compose.yml`, apply it with `docker compose up -d`.
+- **Logged out, or "Unauthorized access, please check your password"** after changing the password: the browser still holds the old one. Sign out and log in again.
+
+See [Security](../5-CONFIGURATION/security.md#password-protection).
+
+---
+
+## Provider connections (Test Connection)
+
+"Cannot connect to server. Check the URL is correct." and "Cannot connect to Ollama. Check if Ollama server is running." come from the **Test** button in Manage → Models. They are about the AI provider's address, not about Open Notebook's own API. See [AI & Chat Issues → Test fails](ai-chat-issues.md#test-fails).
+
+### SSL errors with a provider
+
+`[SSL: CERTIFICATE_VERIFY_FAILED]` in the log, or Test failing only on an `https://` Base URL: the provider uses a certificate the container doesn't trust. Mount the CA bundle and set `ESPERANTO_SSL_CA_BUNDLE`; this covers model calls, Test and model discovery. See [Advanced → SSL](../5-CONFIGURATION/advanced.md#ssl-for-self-signed-providers).
+
+---
+
+## Full check
+
 ```bash
-# Check docker-compose.yml has port mapping:
-# api:
-#   ports:
-#     - "5055:5055"
-
-# If missing, add it and restart:
-docker compose down
-docker compose up -d
-```
-
-### Solution 3: API_URL Mismatch
-```bash
-# Check the API_URL the container actually sees:
-docker compose exec open_notebook printenv API_URL
-
-# It should be the API address as your browser reaches it:
-# Frontend: http://localhost:8502
-# API_URL: http://localhost:5055
-
-# If wrong, fix it in docker-compose.yml → open_notebook → environment:
-#   - API_URL=http://localhost:5055
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Solution 4: Firewall Blocking
-```bash
-# Verify port 5055 is accessible
-netstat -tlnp | grep 5055
-# Should show port listening
-
-# If on different machine, try:
-# Instead of localhost, use your IP:
-API_URL=http://192.168.1.100:5055
-```
-
-### Solution 5: Services Not Started
-```bash
-# Restart everything
-docker compose restart
-
-# Wait 10 seconds
-sleep 10
-
-# Check all services
-docker compose ps
-# All should show "Up"
+docker compose ps                                  # both services Up
+curl -s http://localhost:5055/health               # {"status":"healthy"}
+curl -s http://localhost:5055/api/config           # "dbStatus": "online"
+docker compose logs --since 10m open_notebook | grep -iE "error|warning|critical"
 ```
 
 ---
 
-## Connection Refused
+## Related
 
-**What it looks like:**
-```
-Connection refused
-ECONNREFUSED
-Error: socket hang up
-```
-
-**Diagnosis:**
-- API port (5055) not open
-- API crashed
-- Wrong IP/hostname
-
-**Solution:**
-
-```bash
-# Step 1: Check if API is running
-docker ps | grep api
-
-# Step 2: Check if port is listening
-lsof -i :5055
-# or
-netstat -tlnp | grep 5055
-
-# Step 3: Check API logs
-docker compose logs api | tail -30
-# Look for errors
-
-# Step 4: Restart API
-docker compose restart api
-docker compose logs api | grep -i "error"
-```
-
----
-
-## Timeout / Slow Connection
-
-**What it looks like:**
-- Page loads slowly
-- Request times out
-- "Gateway timeout" error
-
-**Causes:**
-- API is overloaded
-- Network is slow
-- Reverse proxy issue
-
-**Solutions:**
-
-### Check API Performance
-```bash
-# See CPU/memory usage
-docker stats
-
-# Check logs for slow operations
-docker compose logs api | grep "slow\|timeout"
-```
-
-### Reduce Load
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
-#   - ESPERANTO_LLM_TIMEOUT=420
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Check Network
-```bash
-# Test latency
-ping localhost
-
-# Test API directly
-time curl http://localhost:5055/health
-
-# Should be < 100ms
-```
-
----
-
-## 502 Bad Gateway (Reverse Proxy)
-
-**What it looks like:**
-```
-502 Bad Gateway
-The server is temporarily unable to service the request
-```
-
-**Cause:** Reverse proxy can't reach API
-
-**Solutions:**
-
-### Check Backend is Running
-```bash
-# From the reverse proxy server
-curl http://localhost:5055/health
-
-# Should work
-```
-
-### Check Reverse Proxy Config
-```nginx
-# Nginx example (correct):
-location /api {
-    proxy_pass http://localhost:5055/api;
-    proxy_http_version 1.1;
-}
-
-# Common mistake (wrong):
-location /api {
-    proxy_pass http://localhost:5055;  # Missing /api
-}
-```
-
-### Set API_URL for HTTPS
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - API_URL=https://yourdomain.com
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
----
-
-## Intermittent Disconnects
-
-**What it looks like:**
-- Works sometimes, fails other times
-- Sporadic "cannot connect" errors
-- Works then stops working
-
-**Cause:** Transient network issue or database conflicts
-
-**Solutions:**
-
-### Enable Retry Logic
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - SURREAL_COMMANDS_RETRY_ENABLED=true
-#   - SURREAL_COMMANDS_RETRY_MAX_ATTEMPTS=5
-#   - SURREAL_COMMANDS_RETRY_WAIT_STRATEGY=exponential_jitter
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Reduce Concurrency
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Check Network Stability
-```bash
-# Monitor connection
-ping google.com
-
-# Long-running test
-ping -c 100 google.com | grep "packet loss"
-# Should be 0% loss
-```
-
----
-
-## Different Machine / Remote Access
-
-**You want to access Open Notebook from another computer**
-
-**Solution:**
-
-### Step 1: Get Your Machine IP
-```bash
-# On the server running Open Notebook:
-ifconfig | grep "inet "
-# or
-hostname -I
-# Note the IP (e.g., 192.168.1.100)
-```
-
-### Step 2: Update API_URL
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - API_URL=http://192.168.1.100:5055
-
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
-### Step 3: Access from Other Machine
-```bash
-# In browser on other machine:
-http://192.168.1.100:8502
-# (or your server IP)
-```
-
-### Step 4: Verify Port is Exposed
-```bash
-# On server:
-docker compose ps
-
-# Should show port mapping:
-# 0.0.0.0:8502->8502/tcp
-# 0.0.0.0:5055->5055/tcp
-```
-
-### If Still Doesn't Work
-```bash
-# Check firewall on server
-sudo ufw status
-# May need to open ports:
-sudo ufw allow 8502
-sudo ufw allow 5055
-
-# Check on different machine:
-telnet 192.168.1.100 5055
-# Should connect
-```
-
----
-
-## CORS Error (Browser Console)
-
-**What it looks like:**
-```
-Cross-Origin Request Blocked
-Access-Control-Allow-Origin
-```
-
-**In browser console (F12):**
-```
-CORS policy: Response to preflight request doesn't pass access control check
-```
-
-**Cause:** Frontend and API URLs don't match
-
-**Solution:**
-
-```bash
-# Check browser console error for what URLs are being used
-# The error shows:
-# - Requesting from: http://localhost:8502
-# - Trying to reach: http://localhost:5055
-
-# Make sure API_URL (docker-compose.yml → open_notebook → environment:) matches:
-#   - API_URL=http://localhost:5055
-
-# And protocol matches (http/https)
-# Apply (restart does not reload environment):
-docker compose up -d
-```
-
----
-
-## Testing Connection
-
-**Full diagnostic:**
-
-```bash
-# 1. Services running?
-docker compose ps
-# All should show "Up"
-
-# 2. Ports listening?
-netstat -tlnp | grep -E "8502|5055|8000"
-
-# 3. API responding?
-curl http://localhost:5055/health
-
-# 4. Frontend accessible?
-curl http://localhost:8502 | head
-
-# 5. Network OK?
-ping google.com
-
-# 6. No firewall?
-sudo ufw status | grep -E "5055|8502|8000"
-```
-
----
-
-## Checklist for Remote Access
-
-- [ ] Server IP noted (e.g., 192.168.1.100)
-- [ ] Ports 8502, 5055, 8000 exposed in docker-compose
-- [ ] API_URL set to server IP
-- [ ] Firewall allows ports 8502, 5055, 8000
-- [ ] Can reach server from client machine (ping IP)
-- [ ] All services running (docker compose ps)
-- [ ] Can curl API from client (curl http://IP:5055/health)
-
----
-
-## SSL Certificate Errors
-
-**What it looks like:**
-```
-[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
-Connection error when using HTTPS endpoints
-Works with HTTP but fails with HTTPS
-```
-
-**Cause:** Self-signed or privately issued certificates not trusted by Python's SSL verification inside the container. Chat via Esperanto may honor `ESPERANTO_SSL_*`, but **Test Connection** and **Discover Models** used raw httpx and historically ignored those settings (fixed so they share the same env vars).
-
-**Solutions:**
-
-### Solution 1: Use Custom CA Bundle (Recommended)
-```bash
-# From source, in .env:
-ESPERANTO_SSL_CA_BUNDLE=/path/to/your/ca-bundle.pem
-
-# For Docker, mount the certificate:
-# In docker-compose.yml:
-volumes:
-  - /path/to/your/ca-bundle.pem:/certs/ca-bundle.pem:ro
-environment:
-  - ESPERANTO_SSL_CA_BUNDLE=/certs/ca-bundle.pem
-```
-
-This applies to chat **and** to credential Test Connection / model discovery.
-
-### Solution 2: Disable SSL Verification (Development Only)
-```bash
-# WARNING: Only use in trusted development environments
-# Docker: docker-compose.yml → open_notebook → environment:
-#   - ESPERANTO_SSL_VERIFY=false
-# From source: ESPERANTO_SSL_VERIFY=false in .env
-```
-
-Same scope: Esperanto providers, Test Connection, and Discover Models.
-
-### Solution 3: Use HTTP Instead
-If services are on a trusted local network, HTTP is acceptable:
-```
-Change the base URL in your credential (Manage → Models) from https:// to http://
-Example: http://localhost:1234/v1
-```
-
-> **Security Note:** Disabling SSL verification exposes you to man-in-the-middle attacks. Always prefer custom CA bundle or HTTP on trusted networks.
-
-> **Note:** SSL failures on Test Connection are often reported as a generic
-> "Cannot connect to server" message (httpx wraps `CERTIFICATE_VERIFY_FAILED`
-> as `ConnectError`). If chat or `curl -k` works but Test Connection fails,
-> check `ESPERANTO_SSL_CA_BUNDLE` / `ESPERANTO_SSL_VERIFY` first.
-
----
-
-## Still Having Issues?
-
-- Check [Quick Fixes](quick-fixes.md)
-- Check [FAQ](faq.md)
-- Check logs: `docker compose logs`
-- Try restart: `docker compose restart`
-- Check firewall: `sudo ufw status`
-- Ask for help on [Discord](https://discord.gg/37XJPXfz2w)
+- [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md)
+- [Database](../5-CONFIGURATION/database.md)
+- [Processing Issues](processing-issues.md)
+- [AI & Chat Issues](ai-chat-issues.md)
diff --git a/docs/6-TROUBLESHOOTING/faq.md b/docs/6-TROUBLESHOOTING/faq.md
index 7c77d220..cdeb5ea7 100644
--- a/docs/6-TROUBLESHOOTING/faq.md
+++ b/docs/6-TROUBLESHOOTING/faq.md
@@ -1,261 +1,117 @@
 # Frequently Asked Questions
 
-Common questions about Open Notebook usage, configuration, and best practices.
+Questions that aren't about an error message. For errors, see the [Troubleshooting index](index.md).
 
 ---
 
-## General Usage
+## General
 
 ### What is Open Notebook?
 
-Open Notebook is an open-source, privacy-focused alternative to Google's Notebook LM. It allows you to:
-- Create and manage research notebooks
-- Chat with your documents using AI
-- Generate podcasts from your content
-- Search across all your sources with semantic search
-- Transform and analyze your content
+An open-source, self-hosted research assistant in the spirit of Google's NotebookLM: you collect sources into notebooks, chat with them, search them, run transformations that extract insights, and generate podcasts. You choose the AI providers, including fully local ones.
 
-### How is it different from Google Notebook LM?
+### How is it different from Google NotebookLM?
 
-**Privacy**: Your data stays local by default. Only your chosen AI providers receive queries.
-**Flexibility**: Support for 17+ AI providers (OpenAI, Anthropic, Google, local models, etc.)
-**Customization**: Open source, so you can modify and extend functionality
-**Control**: You control your data, models, and processing
+- **You host it.** Your notebooks, sources and notes stay in your own database.
+- **You choose the models.** 24 providers are supported, from OpenAI and Anthropic to Ollama on your own machine. See [AI Providers](../5-CONFIGURATION/ai-providers.md).
+- **It's open source.** You can read, change and extend it.
 
-### Can I use Open Notebook offline?
+What leaves your machine is what you send to the AI providers you configure: when you chat, transform or generate a podcast, the relevant source content goes to that provider. When Ollama, LM Studio or Speaches runs on your own hardware, that content stays there; a remote endpoint receives it like any other provider.
 
-**Partially**: The application runs locally, but requires internet for:
-- AI model API calls (unless using local models like Ollama)
-- Web content scraping
+### Can I use it offline?
 
-**Fully offline**: Possible with local models (Ollama) for basic functionality.
+Yes, with local models for everything: Ollama, LM Studio or oMLX for chat and embeddings, and [Speaches](../5-CONFIGURATION/local-tts.md) for speech. Adding web pages and YouTube videos still needs internet access, of course.
 
-### What file types are supported?
+### What can I add as a source?
 
-**Documents**: PDF, DOCX, TXT, Markdown
-**Web Content**: URLs, YouTube videos
-**Media**: MP3, WAV, M4A (audio), MP4, AVI, MOV (video)
-**Other**: Direct text input, CSV, code files
+Files (PDF, Word, PowerPoint, Excel, EPUB, OpenDocument, HTML, plain text and Markdown; audio and video such as MP3, WAV, M4A and MP4; ZIP archives), web pages, YouTube videos and pasted text. Images and scanned documents need the optional Docling engine (`OPEN_NOTEBOOK_ENABLE_DOCLING=true`). Audio, video and YouTube videos without captions need a speech-to-text model. See [Adding Sources](../3-USER-GUIDE/adding-sources.md).
 
 ### How much does it cost?
 
-**Software**: Free (open source)
-**AI API costs**: Pay-per-use to providers:
-- OpenAI: ~$0.50-5 per 1M tokens
-- Anthropic: ~$3-75 per 1M tokens
-- Google: Often free tier available
-- Local models: Free after initial setup
-
-**Typical monthly costs**: $5-50 for moderate usage.
+The software is free. AI usage is billed by your providers per token, character or minute, at their prices; local models cost nothing beyond your hardware. The biggest cost drivers are the size of the context you send (how many sources are included in chat, and as "Full content" or "Insights only"), embedding large libraries, and podcast audio.
 
 ---
 
-## AI Models and Providers
+## AI models
 
-### Which AI provider should I choose?
+### Which provider should I start with?
 
-**For beginners**: OpenAI (reliable, well-documented)
-**For privacy**: Local models (Ollama) or European providers (Mistral)
-**For cost optimization**: Groq, Google (free tier), or OpenRouter
-**For long context**: Anthropic (200K tokens) or Google Gemini (1M tokens)
+- **Simplest:** one provider that covers language, embeddings and speech, such as OpenAI or Google AI.
+- **Many models with one key:** OpenRouter.
+- **Private and free:** Ollama, plus Speaches for speech.
 
-### Can I use multiple providers?
+Providers like Anthropic only offer language models, so you'd add a second one for embeddings. The modality table is in [AI Providers](../5-CONFIGURATION/ai-providers.md#providers-and-what-they-offer).
 
-**Yes**: Configure different providers for different tasks:
-- OpenAI for chat
-- Google for embeddings
-- ElevenLabs for text-to-speech
-- Anthropic for complex reasoning
+### Can I mix providers?
 
-### What are the best model combinations?
+Yes. Every model role is assigned separately under **Manage → Models → Default Model Assignments**: Chat, Transformation, Tools, Large Context, Embedding, Text-to-Speech and Speech-to-Text. You can also override the model for a single chat session.
 
-**Budget-friendly**:
-- Language: `gpt-4o-mini` (OpenAI) or `deepseek-chat`
-- Embedding: `text-embedding-3-small` (OpenAI)
+### What happens if I change the embedding model?
 
-**High-quality**:
-- Language: `claude-3-5-sonnet` (Anthropic) or `gpt-4o` (OpenAI)
-- Embedding: `text-embedding-3-large` (OpenAI)
-
-**Privacy-focused**:
-- Language: Local Ollama models (mistral, llama3)
-- Embedding: Local embedding models
-
-### How do I optimize AI costs?
-
-**Model selection**:
-- Use smaller models for simple tasks (gpt-4o-mini, claude-3-5-haiku)
-- Use larger models only for complex reasoning
-- Leverage free tiers when available
-
-**Usage optimization**:
-- Use "Summary Only" context for background sources
-- Ask more specific questions
-- Use local models (Ollama) for frequent tasks
+Existing embeddings were made by the old model and won't match new searches. Open Notebook warns you and offers to go to the **Advanced** page to rebuild them. Rebuild before relying on search or Ask.
 
 ---
 
-## Data Management
+## Data
 
-### Where is my data stored?
+### Where is my data?
 
-**Local storage**: By default, all data is stored locally:
-- Database: SurrealDB files in `surreal_data/`
-- Uploads: Files in `data/uploads/`
-- Podcasts: Generated audio in `data/podcasts/`
-- No external data transmission (except to chosen AI providers)
+With the shipped `docker-compose.yml`, in two directories next to it:
 
-### How do I backup my data?
+- `./surreal_data`: the SurrealDB database (notebooks, sources' text, notes, chats, settings, encrypted credentials)
+- `./notebook_data`: uploaded files, podcast audio and caches
 
-```bash
-# Create backup
-tar -czf backup-$(date +%Y%m%d).tar.gz data/ surreal_data/
+The single-container setup uses `./surreal_single_data` for the database.
 
-# Restore backup
-tar -xzf backup-20240101.tar.gz
-```
+### How do I back up?
 
-### Can I sync data between devices?
+Stop the stack, archive both directories, start it again. Keep `OPEN_NOTEBOOK_ENCRYPTION_KEY` safe too: without it, the provider keys in a restored database can't be decrypted. Step-by-step: [Advanced → Backup & Restore](../5-CONFIGURATION/advanced.md#backup--restore).
 
-**Currently**: No built-in sync functionality.
-**Workarounds**:
-- Use shared network storage for data directories
-- Manual backup/restore between devices
+Always back up before upgrading. Some upgrades can't be undone without a backup, such as the credential encryption change in v1.15.0.
 
-### What happens if I delete a notebook?
+### Can I sync between devices?
 
-**Soft deletion**: Notebooks are marked as archived, not permanently deleted.
-**Recovery**: Archived notebooks can be restored from the database.
+There is no built-in sync. Run one instance that all your devices reach over the network, or move data with backup and restore.
+
+### What happens when I delete a notebook?
+
+Deletion is permanent ("This action cannot be undone."). The notebook's notes are always deleted; you can choose to also delete sources that belong only to that notebook. Sources shared with other notebooks are kept. To put a notebook away without losing it, use **Archive** instead.
 
 ---
 
-## Best Practices
+## Running it
 
-### How should I organize my notebooks?
+### Can I use the API directly?
 
-- **By topic**: Separate notebooks for different research areas
-- **By project**: One notebook per project or course
-- **By time period**: Monthly or quarterly notebooks
+Yes. Interactive documentation is at `http://localhost:5055/docs`. When a password is set, send it as `Authorization: Bearer <password>`. See [Security → API client examples](../5-CONFIGURATION/security.md#api-client-examples) and the [API Reference](../7-DEVELOPMENT/api-reference.md).
 
-**Recommended size**: 20-100 sources per notebook for best performance.
+### Is it ready for an internet-facing deployment?
 
-### How do I get the best search results?
+It can run on a server, but its built-in protection is basic: one shared password, no user accounts, no rate limiting, and CORS open to all origins by default. Put it behind HTTPS, set a password, restrict `CORS_ORIGINS`, and keep the database private. See [Security](../5-CONFIGURATION/security.md) and [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md).
 
-- Use descriptive queries ("data analysis methods" not just "data")
-- Combine multiple related terms
-- Use natural language (ask questions as you would to a human)
-- Try both text search (keywords) and vector search (concepts)
+### How do I change a setting?
 
-### How can I improve chat responses?
+Infrastructure settings are environment variables in the `open_notebook` service's `environment:` block, applied with `docker compose up -d`. Everything else is in the UI. See [Configuration](../5-CONFIGURATION/index.md).
 
-- Provide context: Reference specific sources or topics
-- Be specific: Ask detailed questions rather than general ones
-- Request citations: "Answer with page citations"
-- Use follow-up questions: Build on previous responses
+### How do I update?
 
-### What are the security best practices?
-
-- Never share API keys publicly
-- Use `OPEN_NOTEBOOK_PASSWORD` for public deployments
-- Use HTTPS for production (via reverse proxy)
-- Keep Docker images updated
-- Encrypt backups if they contain sensitive data
+Back up, then `docker compose pull && docker compose up -d`. Database migrations run automatically when the API starts.
 
 ---
 
-## Technical Questions
+## Getting help
 
-### Can I use Open Notebook programmatically?
+- **Discord:** https://discord.gg/37XJPXfz2w
+- **GitHub Discussions:** questions and ideas, https://github.com/lfnovo/open-notebook/discussions
+- **GitHub Issues:** reproducible bugs, https://github.com/lfnovo/open-notebook/issues
 
-**Yes**: Open Notebook provides a REST API:
-- Full API documentation at `http://localhost:5055/docs`
-- Support for all UI functionality
-- Authentication via password header
-
-### Can I run Open Notebook in production?
-
-**Yes**: Designed for production use with:
-- Docker deployment
-- Security features (password protection)
-- Monitoring and logging
-- Reverse proxy support (nginx, Caddy, Traefik)
-
-### What are the system requirements?
-
-**Minimum**:
-- 4GB RAM
-- 2 CPU cores
-- 10GB disk space
-
-**Recommended**:
-- 8GB+ RAM
-- 4+ CPU cores
-- SSD storage
-- For local models: 16GB+ RAM, GPU recommended
-
----
-
-## Timeout and Performance
-
-### Why do I get timeout errors?
-
-**Common causes**:
-- Large context (too many sources)
-- Slow AI provider
-- Local models on CPU (slow)
-- First request (model loading)
-
-**Solutions**:
-```yaml
-# docker-compose.yml → open_notebook → environment:
-- ESPERANTO_LLM_TIMEOUT=420  # 7 minutes per model call (default: 180)
-```
-
-Then apply it with `docker compose up -d` (`restart` does not reload environment variables).
-
-### Recommended timeouts by setup:
-
-| Setup | ESPERANTO_LLM_TIMEOUT |
-|-------|-------------------|
-| Cloud APIs (OpenAI, Anthropic) | 180 (default) |
-| Local Ollama with GPU | 300 |
-| Local Ollama with CPU, LM Studio | 420-540 |
-
-Stay below 600: the web UI gives up on a request after 10 minutes, and that limit is fixed in the published images.
-
----
-
-## Getting Help
-
-### My question isn't answered here
-
-1. Check the troubleshooting guides in this section
-2. Search existing GitHub issues
-3. Ask in [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/q-a) or the Discord community
-4. If you found a reproducible bug, create a GitHub Issue with detailed information
-
-### How do I report a bug?
-
-Include:
-- Steps to reproduce
-- Expected vs actual behavior
-- Error messages and logs
-- System information
-- Configuration details (without API keys)
-
-Submit to: [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
-
-### Where can I get help?
-
-- **Discord**: https://discord.gg/37XJPXfz2w (fastest)
-- **GitHub Discussions**: Questions, ideas, and feature requests
-- **GitHub Issues**: Reproducible bug reports
-- **Documentation**: This docs site
+When reporting a bug, include the exact error message, steps to reproduce, relevant logs (without keys or passwords), your version and how you run Open Notebook.
 
 ---
 
 ## Related
 
-- [Quick Fixes](quick-fixes.md) - Common issues with 1-minute solutions
-- [AI & Chat Issues](ai-chat-issues.md) - Model and chat problems
-- [Connection Issues](connection-issues.md) - Network and API problems
+- [Quick Fixes](quick-fixes.md)
+- [AI & Chat Issues](ai-chat-issues.md)
+- [Processing Issues](processing-issues.md)
+- [Connection Issues](connection-issues.md)
diff --git a/docs/6-TROUBLESHOOTING/index.md b/docs/6-TROUBLESHOOTING/index.md
index 80c2c849..8edae712 100644
--- a/docs/6-TROUBLESHOOTING/index.md
+++ b/docs/6-TROUBLESHOOTING/index.md
@@ -1,241 +1,97 @@
-# Troubleshooting - Problem Solving Guide
+# Troubleshooting
 
-Having issues? Use this guide to diagnose and fix problems.
+Find your problem by the message you see, then follow the link. If you don't have a message, start with [Quick Fixes](quick-fixes.md).
 
 ---
 
-## How to Use This Guide
+## By message
 
-**Step 1: Identify your problem**
-- What's the symptom? (error message, behavior, something not working?)
-- When did it happen? (during install, while using, after update?)
+### In the browser
 
-**Step 2: Find the right guide**
-- Look below for your symptom
-- Go to the specific troubleshooting guide
+| Message | Where to look |
+|---------|---------------|
+| "Unable to Connect to API Server" | [Connection Issues](connection-issues.md#unable-to-connect-to-api-server) |
+| "Unable to connect to server. Please check if the API is running." (login page) | [Connection Issues](connection-issues.md#unable-to-connect-to-api-server) |
+| "Database Connection Failed" | [Connection Issues](connection-issues.md#database-connection-failed) |
+| "Invalid password" | [Connection Issues → Login problems](connection-issues.md#login-problems) |
+| "Encryption key not configured" | [AI & Chat Issues](ai-chat-issues.md#encryption-key-not-configured) |
+| "Decryption Error" on a credential | [AI & Chat Issues](ai-chat-issues.md#decryption-error) |
+| "Environment Variables Detected" | [AI & Chat Issues](ai-chat-issues.md#environment-variables-detected) |
+| "No model configured for default for type=…" | [AI & Chat Issues](ai-chat-issues.md#no-model-configured-for-default-for-typechat) |
+| "Model is not a LanguageModel: …" | [AI & Chat Issues](ai-chat-issues.md#model-is-not-a-languagemodel-) |
+| "The AI provider took too long to respond…" | [AI & Chat Issues](ai-chat-issues.md#the-ai-provider-took-too-long-to-respond) |
+| "Could not connect to the AI provider…" | [AI & Chat Issues](ai-chat-issues.md#could-not-connect-to-the-ai-provider-please-check-your-network-connection-and-provider-url) (on v1.15.0 this can also be a timeout) |
+| "Authentication failed. Please check your API key…" | [AI & Chat Issues](ai-chat-issues.md#authentication-failed-please-check-your-api-key-in-manage---models) |
+| "Rate limit exceeded…" | [AI & Chat Issues](ai-chat-issues.md#rate-limit-exceeded-please-wait-a-moment-and-try-again) |
+| "Content too large for the selected model…" | [AI & Chat Issues](ai-chat-issues.md#content-too-large-for-the-selected-model) |
+| "The AI provider is temporarily unavailable…" | [AI & Chat Issues](ai-chat-issues.md#the-ai-provider-is-temporarily-unavailable-please-try-again-in-a-few-minutes) |
+| "The model returned an empty response…" | [AI & Chat Issues](ai-chat-issues.md#the-model-returned-an-empty-response-try-again-or-pick-a-different-model-if-this-keeps-happening) |
+| "AI service error: …" | [AI & Chat Issues](ai-chat-issues.md#ai-service-error-) |
+| "timeout of 600000ms exceeded" | [AI & Chat Issues](ai-chat-issues.md#timeout-of-600000ms-exceeded) |
+| "Cannot connect to server. Check the URL is correct." (Test button) | [AI & Chat Issues → Test fails](ai-chat-issues.md#test-fails) |
+| "Cannot connect to Ollama. Check if Ollama server is running." | [Ollama](../5-CONFIGURATION/ollama.md#troubleshooting) |
+| "No models found from this provider" | [AI & Chat Issues](ai-chat-issues.md#no-models-found-from-this-provider) |
+| Source stuck at "Queued" | [Processing Issues](processing-issues.md#sources-stay-queued-waiting-to-be-processed) |
+| Source shows "Failed" | [Processing Issues → Failed sources](processing-issues.md#failed-sources) |
+| "Request body exceeds the maximum allowed upload size" | [Processing Issues → Uploads](processing-issues.md#uploads-rejected) |
+| "… (detected type: …)" on upload | [Processing Issues → Uploads](processing-issues.md#uploads-rejected) |
+| "This feature requires an embedding model…" / "Vector search requires an embedding model…" | [Processing Issues → Search](processing-issues.md#search-and-ask) |
+| "The strategy model returned no search terms…" (Ask) | [Processing Issues → Search](processing-issues.md#ask-fails-with-the-strategy-model-returned-no-search-terms-for-this-question) |
+| "This source has no text content to transform" | [Processing Issues](processing-issues.md#this-source-has-no-text-content-to-transform) |
+| Podcast episode "Failed" | [Processing Issues → Podcast failures](processing-issues.md#podcast-failures) |
+| CORS error in the browser console | [Connection Issues](connection-issues.md#cors-errors-in-the-browser-console) |
+| `502 Bad Gateway` / `504 Gateway Timeout` | [Reverse Proxy](../5-CONFIGURATION/reverse-proxy.md#troubleshooting) |
 
-**Step 3: Follow the steps**
-- Guides are organized by symptom, not by root cause
-- Each has diagnostic steps and solutions
+### In the logs
 
----
+Read the logs with `docker compose logs open_notebook` (API, worker and frontend together) and `docker compose logs surrealdb`.
 
-## Quick Problem Map
-
-### During Installation
-
-- **Docker won't start** → [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error)
-- **Port already in use** → [Quick Fixes](quick-fixes.md#3-port-x-already-in-use)
-- **Permission denied** → [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error)
-- **Can't connect to database** → [Connection Issues](connection-issues.md)
-
-### When Starting
-
-- **API won't start** → [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error)
-- **Frontend won't load** → [Connection Issues](connection-issues.md)
-- **"Cannot connect to server" error** → [Connection Issues](connection-issues.md)
-
-### Settings / Configuration
-
-- **Models not showing** → [AI & Chat Issues](ai-chat-issues.md)
-- **"Invalid API key"** → [AI & Chat Issues](ai-chat-issues.md)
-- **Can't find Settings** → [Quick Fixes](quick-fixes.md)
-
-### Using Features
-
-- **Chat not working** → [AI & Chat Issues](ai-chat-issues.md)
-- **Chat responses are slow** → [AI & Chat Issues](ai-chat-issues.md)
-- **Chat gives bad answers** → [AI & Chat Issues](ai-chat-issues.md)
-
-### Adding Content
-
-- **Can't upload PDF** → [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-- **File won't process** → [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-- **Web link won't extract** → [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-
-### Search
-
-- **Search returns no results** → [Quick Fixes](quick-fixes.md#7-search-returns-nothing)
-- **Search returns wrong results** → [Quick Fixes](quick-fixes.md#7-search-returns-nothing)
-
-### Podcasts
-
-- **Can't generate podcast** → [Quick Fixes](quick-fixes.md#8-podcast-generation-failed)
-- **Podcast shows "FAILED" badge** → Check the error message displayed on the episode, then use the **Retry** button. See [Podcasts Explained](../2-CORE-CONCEPTS/podcasts-explained.md#when-things-go-wrong-failures--retry)
-- **Podcast audio is robotic** → [Quick Fixes](quick-fixes.md#8-podcast-generation-failed)
-- **Podcast generation times out** → [Quick Fixes](quick-fixes.md#8-podcast-generation-failed)
-
----
-
-## Troubleshooting by Error Message
-
-### "Cannot connect to server"
-→ [Connection Issues](connection-issues.md) — Frontend can't reach API
-
-### "Invalid API key"
-→ [AI & Chat Issues](ai-chat-issues.md) — Wrong or missing API key
-
-### "Models not available"
-→ [AI & Chat Issues](ai-chat-issues.md) — Model not configured
-
-### "Connection refused"
-→ [Connection Issues](connection-issues.md) — Service not running or port wrong
-
-### "Port already in use"
-→ [Quick Fixes](quick-fixes.md#3-port-x-already-in-use) — Port conflict
-
-### "Permission denied"
-→ [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error) — File permissions issue
-
-### "Unsupported file type"
-→ [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format) — File format not supported
-
-### "Processing timeout"
-→ [Quick Fixes](quick-fixes.md#5-chat-is-very-slow) — File too large or slow processing
-
----
-
-## Troubleshooting by Component
-
-### Frontend (Browser/UI)
-- Can't access UI → [Connection Issues](connection-issues.md)
-- UI is slow → [Quick Fixes](quick-fixes.md)
-- Button/feature missing → [Quick Fixes](quick-fixes.md)
-
-### API (Backend)
-- API won't start → [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error)
-- API errors in logs → [Quick Fixes](quick-fixes.md#9-services-wont-start-or-docker-error)
-- API is slow → [Quick Fixes](quick-fixes.md)
-
-### Database
-- Can't connect to database → [Connection Issues](connection-issues.md)
-- Data lost after restart → [FAQ](faq.md#how-do-i-backup-my-data)
-
-### AI / Chat
-- Chat not working → [AI & Chat Issues](ai-chat-issues.md)
-- Bad responses → [AI & Chat Issues](ai-chat-issues.md)
-- Cost too high → [AI & Chat Issues](ai-chat-issues.md#high-api-costs)
-
-### Sources
-- Can't upload file → [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-- File won't process → [Quick Fixes](quick-fixes.md#4-cannot-process-file-or-unsupported-format)
-
-### Podcasts
-- Won't generate → [Quick Fixes](quick-fixes.md#8-podcast-generation-failed)
-- Bad audio quality → [Quick Fixes](quick-fixes.md#8-podcast-generation-failed)
-
----
-
-## Diagnostic Checklist
-
-**When something isn't working:**
-
-- [ ] Check if services are running: `docker ps`
-- [ ] Check logs: `docker compose logs api` (or frontend, surrealdb)
-- [ ] Verify ports are exposed: `netstat -tlnp` or `lsof -i :5055`
-- [ ] Test connectivity: `curl http://localhost:5055/health`
-- [ ] Check environment variables: `docker inspect <container>`
-- [ ] Try restarting: `docker compose restart`
-- [ ] Check firewall/antivirus isn't blocking
-
----
-
-## Getting Help
-
-If you can't find the answer here:
-
-1. **Check the relevant guide** — Read completely, try all steps
-2. **Check the FAQ** — [Frequently Asked Questions](faq.md)
-3. **Search our Discord** — Others may have had same issue
-4. **Check logs** — Most issues show error messages in logs
-5. **Report on GitHub** — Include error message, steps to reproduce
-
-### How to Report an Issue
-
-Include:
-1. Error message (exact)
-2. Steps to reproduce
-3. Logs: `docker compose logs`
-4. Your setup: Docker/local, provider, OS
-5. What you've already tried
-
-→ [Report on GitHub](https://github.com/lfnovo/open-notebook/issues)
+| Log line | Where to look |
+|----------|---------------|
+| `Database is not reachable yet (attempt n/12)` | [Connection Issues](connection-issues.md#database-connection-failed) |
+| `OPEN_NOTEBOOK_ENCRYPTION_KEY not set. API key encryption will fail…` | [AI & Chat Issues](ai-chat-issues.md#encryption-key-not-configured) |
+| `Failed to decrypt credential …` | [AI & Chat Issues](ai-chat-issues.md#decryption-error) |
+| `content-core extraction failed (…)` | [Processing Issues → Failed sources](processing-issues.md#failed-sources) |
+| `Configured … engine '…' is selected in Content Settings but its runtime is not available` | [Processing Issues](processing-issues.md#the-selected-engine-isnt-used) |
+| `gave up: worker entered FATAL state` / `exited: worker` | [Processing Issues](processing-issues.md#sources-stay-queued-waiting-to-be-processed) |
+| `[entrypoint] WARNING: ... install FAILED` | [Quick Fixes #11](quick-fixes.md#11-slow-first-start-or-download-timeouts) |
+| `CORS_ORIGINS is not set — API accepts cross-origin requests from any origin` | A reminder, not an error. See [Security → CORS Origins](../5-CONFIGURATION/security.md#cors-origins) |
+| `[SSL: CERTIFICATE_VERIFY_FAILED]` | [Connection Issues → SSL errors](connection-issues.md#ssl-errors-with-a-provider) |
 
 ---
 
 ## Guides
 
-### [Quick Fixes](quick-fixes.md)
-Top 10 most common issues with 1-minute solutions.
-
-### [Connection Issues](connection-issues.md)
-Frontend can't reach API, network problems.
-
-### [AI & Chat Issues](ai-chat-issues.md)
-Chat not working, bad responses, slow performance.
-
-### [FAQ](faq.md)
-Frequently asked questions about usage, costs, and best practices.
+| Guide | Covers |
+|-------|--------|
+| [Quick Fixes](quick-fixes.md) | The most common problems, short answers |
+| [Connection Issues](connection-issues.md) | The UI can't reach the API, the API can't reach the database, login, CORS, proxies |
+| [AI & Chat Issues](ai-chat-issues.md) | Model setup, provider errors, timeouts, credentials and the encryption key, answer quality |
+| [Processing Issues](processing-issues.md) | Queued and failed sources, uploads, search and embeddings, transformations, podcasts |
+| [FAQ](faq.md) | Questions that aren't errors: data location, backups, costs, offline use |
 
 ---
 
-## Common Solutions
+## First checks
 
-**Service won't start?**
 ```bash
-# Check logs
-docker compose logs
-
-# Restart everything
-docker compose restart
-
-# Nuclear option: rebuild
-docker compose down
-docker compose up --build
+docker compose ps                                  # surrealdb and open_notebook both Up?
+curl -s http://localhost:5055/health               # {"status":"healthy"}
+curl -s http://localhost:5055/api/config           # "dbStatus": "online"
+docker compose logs --since 10m open_notebook | grep -iE "error|warning|critical"
+docker compose exec open_notebook sh -c 'printenv | cut -d= -f1 | grep -E "OPEN_NOTEBOOK|SURREAL|API_URL|ESPERANTO"'   # names only
 ```
 
-**Port conflict?**
-```bash
-# Find what's using port 5055
-lsof -i :5055
-# Kill it or use different port
-```
+When you share output in an issue or a chat, never include the values of `OPEN_NOTEBOOK_ENCRYPTION_KEY`, `OPEN_NOTEBOOK_PASSWORD` or `SURREAL_PASSWORD`.
 
-**Can't connect?**
-```bash
-# Test API directly
-curl http://localhost:5055/health
-# Should return: {"status":"ok"}
-```
-
-**Slow performance?**
-```bash
-# Check resource usage
-docker stats
-
-# Reduce concurrency: docker-compose.yml → open_notebook → environment:
-#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
-docker compose up -d
-```
-
-**High costs?**
-```bash
-# Switch to cheaper model
-# In Manage → Models → Choose gpt-4o-mini (OpenAI)
-# Or use Ollama (free)
-```
+Settings belong under the `open_notebook` service's `environment:` block and take effect with `docker compose up -d`; `docker compose restart` keeps the old environment, and a variable that is only in `.env` doesn't reach the container. All variables: [Environment Reference](../5-CONFIGURATION/environment-reference.md).
 
 ---
 
-## Still Stuck?
+## Getting help
 
-**Before asking for help:**
-1. Read the relevant guide completely
-2. Try all the steps
-3. Check the logs
-4. Restart services
-5. Search existing issues on GitHub
+1. Search [GitHub Issues](https://github.com/lfnovo/open-notebook/issues) for your exact message.
+2. Ask in [Discord](https://discord.gg/37XJPXfz2w) or [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/q-a).
+3. For a reproducible bug, open an issue with: the exact message, steps to reproduce, the relevant part of `docker compose logs open_notebook` (remove keys and passwords), your Open Notebook version, how you run it (Docker, single container, from source) and the provider you use.
 
-**Then:**
-- **Discord**: https://discord.gg/37XJPXfz2w (fastest response)
-- **GitHub Issues**: https://github.com/lfnovo/open-notebook/issues
+Security problems: don't open a public issue, see [SECURITY.md](../../SECURITY.md).
diff --git a/docs/6-TROUBLESHOOTING/processing-issues.md b/docs/6-TROUBLESHOOTING/processing-issues.md
new file mode 100644
index 00000000..4de10838
--- /dev/null
+++ b/docs/6-TROUBLESHOOTING/processing-issues.md
@@ -0,0 +1,157 @@
+# Processing Issues - Sources, Search & Podcasts
+
+Problems with background work: sources that don't finish, uploads that are rejected, search without results, podcasts that fail. Each entry starts with what you see.
+
+Source processing, embeddings, insights, transformations and podcasts run in the **worker**, a background process. Upload checks and searches run in the API. With Docker it runs inside the `open_notebook` container next to the API; from source you start it yourself with `make worker-start`.
+
+---
+
+## Sources stay "Queued" ("Waiting to be processed")
+
+**Cause:** the worker isn't running, or it can't reach the job queue. Jobs are stored in the database and wait there until a worker picks them up. Embeddings, insights and podcasts wait the same way.
+
+**From source:**
+
+```bash
+make status          # "Background Worker: ❌ Not running"?
+make worker-start
+```
+
+**Docker:** the worker is started and restarted by supervisord inside the container. Check its state in the log:
+
+```bash
+docker compose logs open_notebook | grep -E "spawned: 'worker'|worker entered|exited: worker"
+```
+
+- `success: worker entered RUNNING state` → it's running; see the next check.
+- `exited: worker` repeating, or `gave up: worker entered FATAL state` → it crashes on start. The lines just before show why; a wrong `SURREAL_*` setting is a common cause.
+
+**Running but still nothing happens:** the API and the worker must use the same database. Make sure all five `SURREAL_*` variables are set explicitly (the shipped compose file does): the job queue falls back to namespace and database `test` when they're missing, while the API uses `open_notebook`. See [Database](../5-CONFIGURATION/database.md).
+
+**Many sources at once:** the worker runs `OPEN_NOTEBOOK_WORKER_MAX_TASKS` jobs at a time (default 5); the rest stay Queued until a slot frees up. That's normal.
+
+---
+
+## Failed sources
+
+**What you see:** the source card shows **Failed** ("Processing failed"). Open the card's menu and use **Retry Processing** to queue it again; a failed source is not retried automatically.
+
+**Finding the reason:** the source card doesn't show why it failed. The reason is stored with the job and appears in two places:
+
+```bash
+# The worker log, with the full underlying error
+docker compose logs open_notebook | grep -iE "content-core extraction failed|Source processing|process_source"
+
+# The API: processing_info.error holds the reason shown in the table below
+curl -s http://localhost:5055/api/sources/<source_id>/status
+```
+
+(Add `-H "Authorization: Bearer <password>"` if a password is set.) The source id is in the browser address bar when you open the source.
+
+| Reason | Cause | Fix |
+|--------|-------|-----|
+| "Could not reach this address (connection, timeout or DNS error). Check the URL and try again." | The site is down, blocks the server, or the container has no internet access | Open the URL from the server (`docker compose exec open_notebook curl -I <url>`). Behind a corporate proxy, set `HTTP_PROXY`/`HTTPS_PROXY` |
+| "The page was not found (it may have been removed or moved). Check the URL." | HTTP 404 | Fix the URL |
+| "This URL or input is not valid." | Malformed URL or input | Check what you pasted |
+| "Could not extract content from this YouTube video. No transcript or subtitles are available. Try configuring a Speech-to-Text model in Settings to transcribe the audio instead." | The video has no captions | Assign a **Speech-to-Text Model** in Manage → Models, then retry |
+| "YouTube blocked or failed the transcript request. If this keeps happening, set CCORE_YOUTUBE_PROXY (a residential proxy) or CCORE_YOUTUBE_COOKIES_FILE for the worker." | YouTube blocks the server's IP (common on cloud hosts) | Set one of those variables in the `open_notebook` environment, `docker compose up -d`, retry. See [Environment Reference](../5-CONFIGURATION/environment-reference.md#content-extraction) |
+| "This file type is not supported." | content-core has no extractor for the file | Convert the file (to PDF, DOCX, plain text…). Images need `OPEN_NOTEBOOK_ENABLE_DOCLING=true` |
+| "The file could not be read. It may be corrupted or in an unsupported format." | Damaged, encrypted or mislabeled file | Re-export or re-download it |
+| "Content extraction is not configured correctly. Check the content processing engine and speech-to-text settings; the worker log has the details." | Engine or speech-to-text misconfigured: missing API key for the chosen engine (Firecrawl), unreadable `CCORE_YOUTUBE_COOKIES_FILE`, a speech-to-text model that doesn't work | Read the worker log, then fix **Settings → Content Processing** or the Speech-to-Text Model |
+| "The content extraction service failed." | An external service failed: Firecrawl, Jina, Crawl4AI or the speech-to-text provider | Check that service, or switch the engine to `auto` in **Settings → Content Processing** |
+| "Could not extract any text content from this source. The content may be empty, inaccessible, or in an unsupported format." | Extraction worked but produced no text: a scanned PDF without OCR, a page rendered by JavaScript, a login wall | Enable Docling (OCR) for scans; use the Crawl4AI or Firecrawl engine for JavaScript pages |
+| "Could not extract content from this source." | Any other extraction error | See the worker log |
+
+These failures are final: retrying without changing anything fails the same way.
+
+### The selected engine isn't used
+
+The worker log shows `Configured url engine 'crawl4ai' is selected in Content Settings but its runtime is not available in this container; falling back to 'auto'. Set OPEN_NOTEBOOK_ENABLE_CRAWL4AI=true to enable it`. The engine is selected in Settings but its optional runtime isn't installed (or the install failed on startup). Set the variable it names, run `docker compose up -d`, and check the log for `[entrypoint]` lines. See [Content Processing Engines](../3-USER-GUIDE/content-processing-engines.md).
+
+### Transcription of audio or video fails
+
+See [Local Speech-to-Text → When transcription fails](../5-CONFIGURATION/local-stt.md#when-transcription-fails) for local servers. For cloud speech-to-text, check that a **Speech-to-Text Model** is assigned and its provider key works (**Test** in Manage → Models).
+
+---
+
+## Uploads rejected
+
+### "Request body exceeds the maximum allowed upload size" (413)
+
+The file is larger than `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100). By default the browser uploads straight to the API, so raising that variable is enough. If `API_URL` points at the frontend's own address, uploads go through the frontend's proxy instead, which is capped at 100 MB whatever that variable says. Behind a reverse proxy, its own body limit applies first and the browser may report a CORS error with status 413. See [Reverse Proxy → Upload size](../5-CONFIGURATION/reverse-proxy.md#upload-size-413-errors).
+
+### "… (detected type: …)" (415)
+
+The upload was rejected before processing because content-core can't extract that file type. The message names the reason and the detected type. Convert the file, or enable Docling for images and scanned documents.
+
+---
+
+## Search and Ask
+
+### "This feature requires an embedding model. Please configure one in the Models section."
+
+Also shown on the search page as "Vector search requires an embedding model. Only text search is available." No **Embedding Model** is assigned. Add one in Manage → Models (Discover Models with **Model Type** Embedding) and assign it under Default Model Assignments. Language-only providers such as Anthropic have no embedding models; add a second provider.
+
+### Vector search finds nothing
+
+- Sources added before you assigned an embedding model, or with embedding turned off, have no embeddings. Rebuild them from the **Advanced** page.
+- After changing the embedding model, old and new vectors don't match. **Manage → Models** warns about this ("Important: Rebuild Required"); rebuild from the **Advanced** page.
+- Check that the sources are **Completed**, not Queued or Failed.
+
+### Ask fails with "The strategy model returned no search terms for this question."
+
+The model chosen for the strategy step returned nothing usable, usually because a reasoning model spent its output budget on thinking. Pick a different strategy model in the Ask page's advanced model options, or rephrase the question. "The final answer model returned an empty response." has the same cause for the last step.
+
+---
+
+## Transformations and insights
+
+### "This source has no text content to transform"
+
+The source has no extracted text (it failed or is still processing). Fix the source first; see [Failed sources](#failed-sources).
+
+### Insights never appear
+
+Insights are created by a background job. If the source is Completed but its insights don't show up, check that the worker is running ([above](#sources-stay-queued-waiting-to-be-processed)). Model errors are covered in [AI & Chat Issues](ai-chat-issues.md).
+
+---
+
+## Podcast failures
+
+A failed episode shows **Failed** with the error message on the episode card in **Podcasts → Episodes**, and a **Retry** button. Podcast generation is attempted once; use Retry after fixing the cause. When Open Notebook recognizes the error, the message ends with a `NOTE:` that explains it.
+
+### Profile errors (generation stops before any model is called)
+
+| Message | Fix |
+|---------|-----|
+| "Episode profile 'X' has no speaker profile configured. Please update the profile to select a speaker profile." | Edit the episode profile in **Podcasts → Profiles** and pick a speaker profile |
+| "Episode profile 'X' references a speaker profile that no longer exists. Please update the profile to select a speaker profile." | The speaker profile was deleted; pick another |
+| "Episode profile 'X' has no outline model configured. Please update the profile to select an outline model." (same for "transcript model") | Pick the models in the episode profile |
+| "Speaker profile 'X' has no voice model configured. Please update the profile to select a voice model." | Edit the speaker profile and choose a text-to-speech model. The speaker profiles that ship with Open Notebook have no voice model until you set one |
+
+If no text-to-speech model is assigned, **Manage → Models** shows "Not set — audio generation unavailable until configured" next to the Text-to-Speech Model. Add a provider with TTS (OpenAI, Google, ElevenLabs, MiniMax, a local [Speaches](../5-CONFIGURATION/local-tts.md) server…).
+
+### Errors with a NOTE
+
+| Error contains | What the NOTE explains | Fix |
+|----------------|------------------------|-----|
+| `Invalid speaker name` | The transcript model wrote a speaker name that isn't in the speaker profile, usually a placeholder such as `...` | Retry; each attempt is a fresh sample. If it repeats, use a stronger transcript model |
+| `Voice name ... not supported` | The speaker profile's **Voice ID** isn't valid for its TTS model. The seeded profiles use OpenAI voice names (`alloy`, `nova`…) | Set voice ids your TTS provider offers |
+| `Requested entity was not found` | Google's generic "not found": usually an OpenAI voice name sent to a Gemini voice model, otherwise a model id that doesn't exist | Fix the Voice ID, or the model in the episode profile. If the transcript finished and audio failed, it's the voice |
+| `Invalid json output` or `Expecting value` | The outline or transcript response wasn't valid JSON: either truncated (podcast generation asks for up to 8192 output tokens per step unless the episode profile sets max tokens), or a reasoning model put everything inside `<think>` tags | Set max tokens to the model's limit or use fewer, shorter segments; or use a non-reasoning model for outline and transcript |
+
+### Other podcast errors
+
+- Timeouts on the outline or transcript step: see [AI & Chat Issues → timeouts](ai-chat-issues.md#the-ai-provider-took-too-long-to-respond).
+- Audio fails part-way with a local or rate-limited TTS server: lower `TTS_BATCH_SIZE` and raise `ESPERANTO_TTS_TIMEOUT` ([Environment Reference](../5-CONFIGURATION/environment-reference.md#worker-and-background-jobs)).
+- Episode stays Pending: the worker isn't running ([above](#sources-stay-queued-waiting-to-be-processed)).
+
+More on podcast setup: [Creating Podcasts](../3-USER-GUIDE/creating-podcasts.md).
+
+---
+
+## Related
+
+- [AI & Chat Issues](ai-chat-issues.md) — model, credential and timeout errors
+- [Connection Issues](connection-issues.md) — UI, API and database connectivity
+- [Environment Reference](../5-CONFIGURATION/environment-reference.md)
diff --git a/docs/6-TROUBLESHOOTING/quick-fixes.md b/docs/6-TROUBLESHOOTING/quick-fixes.md
index 9bfa32f0..b007ce0d 100644
--- a/docs/6-TROUBLESHOOTING/quick-fixes.md
+++ b/docs/6-TROUBLESHOOTING/quick-fixes.md
@@ -1,372 +1,121 @@
-# Quick Fixes - Top 11 Issues & Solutions
+# Quick Fixes - The Most Common Problems
 
-Common problems with 1-minute solutions.
+The problems people hit most often, with the short fix and a link to the full entry. Commands assume the shipped `docker-compose.yml` (services `surrealdb` and `open_notebook`).
+
+Two rules apply to every fix that changes a setting:
+
+- Settings go under the `open_notebook` service's `environment:` block. A variable that is only in `.env` doesn't reach the container.
+- Apply changes with `docker compose up -d`. `docker compose restart` keeps the old environment.
 
 ---
 
-## #1: "Cannot connect to server"
+## #1: "Unable to Connect to API Server"
 
-**Symptom:** Browser shows error "Cannot connect to server" or "Unable to reach API"
-
-**Cause:** Frontend can't reach API
-
-**Solution (1 minute):**
+The UI loads but can't reach the API.
 
 ```bash
-# Step 1: Check if API is running
-docker ps | grep api
-
-# Step 2: Verify port 5055 is accessible
-curl http://localhost:5055/health
-
-# Expected output: {"status":"ok"}
-
-# If that doesn't work:
-# Step 3: Restart services
-docker compose restart
-
-# Step 4: Try again
-# Open http://localhost:8502 in browser
+curl http://localhost:5055/health     # expect {"status":"healthy"}
+docker compose ps                     # open_notebook must be Up
 ```
 
-**If still broken:**
-- Check `API_URL` in the `open_notebook` service's `environment:` (`docker compose exec open_notebook printenv API_URL`); it should be the API address as your browser reaches it
-- See [Connection Issues](connection-issues.md)
+If the API answers locally but not from the browser: port 5055 must be reachable from your machine, or, behind a reverse proxy, `API_URL` must be set to your public URL. → [Connection Issues](connection-issues.md#unable-to-connect-to-api-server)
 
 ---
 
-## #2: "Invalid API key" or "Models not showing"
+## #2: Chat fails with "No model configured for default for type=chat"
 
-**Symptom:** Manage → Models shows "No models available"
-
-**Cause:** No credential configured, or credential has invalid API key
-
-**Solution (1 minute):**
-
-```
-1. Go to Manage → Models
-2. If no credential exists, click "Add Credential" and add one
-3. If a credential exists, click "Test Connection"
-4. If test fails, delete and re-create with correct key
-5. After test passes, click "Discover Models" → "Register Models"
-6. Go to Manage → Models to verify models appear
-```
-
-**If still broken:**
-- Make sure key has no extra spaces
-- Generate a fresh key from provider dashboard
-- Check that `OPEN_NOTEBOOK_ENCRYPTION_KEY` is set in docker-compose.yml
-- See [AI & Chat Issues](ai-chat-issues.md)
+No models are assigned yet. Follow [Connect a provider](../4-AI-PROVIDERS/index.md#connect-a-provider) in **Manage → Models** through step 4 (**Auto-assign Defaults** under Default Model Assignments). → [AI & Chat Issues](ai-chat-issues.md#no-model-configured-for-default-for-typechat)
 
 ---
 
-## #3: "Port X already in use"
+## #3: "Encryption key not configured"
 
-**Symptom:** Docker error "Port 8502 is already allocated"
-
-**Cause:** Another service using that port
-
-**Solution (1 minute):**
-
-```bash
-# Option 1: Stop the other service
-# Find what's using port 8502
-lsof -i :8502
-# Kill it or close the app
-
-# Option 2: Use different port
-# Edit docker-compose.yml
-# Change: - "8502:8502"
-# To:     - "8503:8502"
-
-# Then recreate the container (restart keeps the old ports)
-docker compose up -d
-# Access at: http://localhost:8503
-```
+You can't save provider credentials until `OPEN_NOTEBOOK_ENCRYPTION_KEY` is set in the `open_notebook` environment. → [AI & Chat Issues](ai-chat-issues.md#encryption-key-not-configured)
 
 ---
 
 ## #4: "Cannot process file" or "Unsupported format"
 
-**Symptom:** Upload fails or says "File format not supported"
-
-**Cause:** File type not supported or too large
-
-**Solution (1 minute):**
-
-```bash
-# Check if file format is supported:
-# ✓ PDF, DOCX, PPTX, XLSX (documents)
-# ✓ MP3, WAV, M4A (audio)
-# ✓ MP4, AVI, MOV (video)
-# ✓ URLs/web links
-
-# ✗ Pure images (.jpg without OCR)
-# ✗ Files > 100MB
-
-# Try these:
-# - Convert to PDF if possible
-# - Split large files
-# - Try uploading again
-```
+- Rejected on upload with "… (detected type: …)": the file type can't be extracted. Convert it (PDF, DOCX, TXT…). Images and scanned PDFs need `OPEN_NOTEBOOK_ENABLE_DOCLING=true`.
+- Rejected with "Request body exceeds the maximum allowed upload size": the file is over `OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB` (default 100 MB). Raise it; if `API_URL` points at the frontend's own address, the frontend proxy also caps uploads at 100 MB.
+- Uploaded, then **Failed**: the reason is in the worker log and the source's status. → [Processing Issues → Failed sources](processing-issues.md#failed-sources)
 
 ---
 
-## #5: "Chat is very slow"
+## #5: Sources stay "Queued"
 
-**Symptom:** Chat responses take minutes or timeout
-
-**Cause:** Slow AI provider, large context, or overloaded system
-
-**Solution (1 minute):**
-
-```bash
-# Step 1: Check which model you're using
-# Manage → Models
-# Note the model name
-
-# Step 2: Try a cheaper/faster model
-# OpenAI: Switch to gpt-4o-mini (10x cheaper, slightly faster)
-# Anthropic: Switch to claude-3-5-haiku (fastest)
-# Groq: Use any model (ultra-fast)
-
-# Step 3: Reduce context
-# Chat: Select fewer sources
-# Use "Summary Only" instead of "Full Content"
-
-# Step 4: Check if API is overloaded
-docker stats
-# Look at CPU/memory usage
-```
-
-For deep dive: See [AI & Chat Issues](ai-chat-issues.md)
+The background worker isn't processing jobs. → [Processing Issues](processing-issues.md#sources-stay-queued-waiting-to-be-processed)
 
 ---
 
-## #6: "Chat gives bad responses"
+## #6: "The AI provider took too long to respond"
 
-**Symptom:** AI responses are generic, wrong, or irrelevant
+A model call took longer than `ESPERANTO_LLM_TIMEOUT` (180 seconds by default). Use a faster model or less context, or raise the timeout (below 600):
 
-**Cause:** Bad context, vague question, or wrong model
-
-**Solution (1 minute):**
-
-```bash
-# Step 1: Make sure sources are in context
-# Click "Select Sources" in Chat
-# Verify relevant sources are checked and set to "Full Content"
-
-# Step 2: Ask a specific question
-# Bad: "What do you think?"
-# Good: "Based on the paper's methodology section, what are the 3 main limitations?"
-
-# Step 3: Try a more powerful model
-# OpenAI: Use gpt-4o (better reasoning)
-# Anthropic: Use claude-3-5-sonnet (best reasoning)
-
-# Step 4: Check citations
-# Click citations to verify AI actually saw those sources
+```yaml
+services:
+  open_notebook:
+    environment:
+      - ESPERANTO_LLM_TIMEOUT=420
 ```
 
-For detailed help: See [Chat Effectively](../3-USER-GUIDE/chat-effectively.md)
+On v1.15.0 the same timeout shows as "Could not connect to the AI provider…" after a long wait. → [AI & Chat Issues](ai-chat-issues.md#the-ai-provider-took-too-long-to-respond)
 
 ---
 
-## #7: "Search returns nothing"
+## #7: Search returns nothing
 
-**Symptom:** Search shows 0 results even though content exists
+- "Vector search requires an embedding model. Only text search is available.": assign an **Embedding Model** in Manage → Models.
+- Embedding model assigned, still nothing: sources added before it was set (or after you changed it) have no matching embeddings. Rebuild them from the **Advanced** page.
 
-**Cause:** Wrong search type or poor query
-
-**Solution (1 minute):**
-
-```bash
-# Try a different search type:
-
-# If you searched with KEYWORDS:
-# Try VECTOR SEARCH instead
-# (Concept-based, not keyword-based)
-
-# If you searched for CONCEPTS:
-# Try TEXT SEARCH instead
-# (Look for specific words in your query)
-
-# Try simpler search:
-# Instead of: "How do transformers work in neural networks?"
-# Try: "transformers" or "neural networks"
-
-# Check sources are processed:
-# Go to notebook
-# All sources should show green "Ready" status
-```
-
-For detailed help: See [Search Effectively](../3-USER-GUIDE/search.md)
+→ [Processing Issues → Search](processing-issues.md#search-and-ask)
 
 ---
 
 ## #8: "Podcast generation failed"
 
-**Symptom:** "Podcast generation failed" error
+Open **Podcasts → Episodes**; the failed episode shows the error and a **Retry** button.
 
-**Cause:** Insufficient content, API quota, or network issue
+- "Speaker profile 'X' has no voice model configured": the speaker profiles that ship with Open Notebook have no text-to-speech model. Edit them in **Podcasts → Profiles** and pick one.
+- `Voice name ... not supported` or `Requested entity was not found`: the profile's Voice ID isn't valid for its TTS model (the seeded profiles use OpenAI voice names).
+- Messages with a `NOTE:` explain the cause.
 
-**Solution (1 minute):**
+→ [Processing Issues → Podcast failures](processing-issues.md#podcast-failures)
+
+---
+
+## #9: Settings changes have no effect
+
+You edited `.env` (not read by the container), or ran `docker compose restart` (keeps the old environment). Put the variable under `open_notebook` → `environment:` and run `docker compose up -d`. Check what the container sees:
 
 ```bash
-# Step 1: Make sure you have content
-# Select at least 1-2 sources
-# Avoid single-sentence sources
-
-# Step 2: Try again
-# Sometimes it's a temporary API issue
-# Wait 30 seconds and retry
-
-# Step 3: Check your TTS provider has quota
-# OpenAI: Check account has credits
-# ElevenLabs: Check monthly quota
-# Google: Check API quota
-
-# Step 4: Try different TTS provider
-# In podcast generation, choose "Google" or "Local"
-# instead of "ElevenLabs"
-```
-
-For detailed help: See [FAQ](faq.md)
-
----
-
-## #9: "Services won't start" or Docker error
-
-**Symptom:** Docker error when running `docker compose up`
-
-**Cause:** Corrupt configuration, permission issue, or resource issue
-
-**Solution (1 minute):**
-
-```bash
-# Step 1: Check logs
-docker compose logs
-
-# Step 2: Try restart
-docker compose restart
-
-# Step 3: If that fails, rebuild
-docker compose down
-docker compose up --build
-
-# Step 4: Check disk space
-df -h
-# Need at least 5GB free
-
-# Step 5: Check Docker has enough memory
-# Docker settings → Resources → Memory: 4GB+
+# Names only, so no secrets end up on screen
+docker compose exec open_notebook sh -c 'printenv | cut -d= -f1 | grep -E "OPEN_NOTEBOOK|API_URL|ESPERANTO"'
+docker compose exec open_notebook printenv API_URL ESPERANTO_LLM_TIMEOUT   # values of non-secret settings
 ```
 
 ---
 
-## #10: "Database says 'too many connections'"
+## #10: Ollama can't be reached
 
-**Symptom:** Error about database connections
-
-**Cause:** Too many concurrent operations
-
-**Solution (1 minute):**
-
-```bash
-# docker-compose.yml → open_notebook → environment:
-#   - OPEN_NOTEBOOK_WORKER_MAX_TASKS=2
-
-# Apply (restart does not reload environment):
-docker compose up -d
-
-# This makes it slower but more stable
-```
+Test shows "Cannot connect to Ollama. Check if Ollama server is running." From Docker, the Base URL must be `http://host.docker.internal:11434` (Linux also needs `extra_hosts`), and on Linux Ollama must listen on `0.0.0.0`. That exposes its unauthenticated API on every interface, so allow port 11434 only from this host and its Docker networks. → [Ollama](../5-CONFIGURATION/ollama.md#which-base-url-to-use)
 
 ---
 
-## #11: Slow Startup or Download Timeouts (China/Slow Networks)
+## #11: Slow first start or download timeouts
 
-**Symptom:** Container crashes on startup, worker enters FATAL state, or pip/uv downloads fail
-
-**Cause:** Slow network or restricted access to Python package repositories
-
-**Solution:**
-
-### Increase Download Timeout
-```yaml
-# In docker-compose.yml environment:
-environment:
-  - UV_HTTP_TIMEOUT=600  # 10 minutes (default is 30s)
-```
-
-### Use Chinese Mirrors (if in China)
-```yaml
-environment:
-  - UV_HTTP_TIMEOUT=600
-  - UV_INDEX_URL=https://pypi.tuna.tsinghua.edu.cn/simple
-  - PIP_INDEX_URL=https://pypi.tuna.tsinghua.edu.cn/simple
-```
-
-**Alternative Chinese mirrors:**
-- Tsinghua: `https://pypi.tuna.tsinghua.edu.cn/simple`
-- Aliyun: `https://mirrors.aliyun.com/pypi/simple/`
-- Huawei: `https://repo.huaweicloud.com/repository/pypi/simple`
-
-**Note:** First startup may take several minutes while dependencies download. Subsequent starts will be faster.
+The published image has its Python dependencies installed. Downloads at startup happen only when `OPEN_NOTEBOOK_ENABLE_DOCLING` or `OPEN_NOTEBOOK_ENABLE_CRAWL4AI` is set; the log shows `[entrypoint] Installing ...`. On slow networks that first start can take a long time. If the install fails, the log says `[entrypoint] WARNING: ... install FAILED` and the app starts without that engine; restart to try again. The Python packages are installed with `uv`, so its standard variables work in the `open_notebook` environment: `UV_HTTP_TIMEOUT` (seconds per download) for slow connections, and `UV_DEFAULT_INDEX` to use a PyPI mirror (for example `https://pypi.tuna.tsinghua.edu.cn/simple` in mainland China).
 
 ---
 
-## Quick Troubleshooting Checklist
+## Resetting
 
-When something breaks:
-
-- [ ] **Restart services:** `docker compose restart`
-- [ ] **Check logs:** `docker compose logs`
-- [ ] **Verify connectivity:** `curl http://localhost:5055/health`
-- [ ] **Check .env:** API keys set? API_URL correct?
-- [ ] **Check resources:** `docker stats` (CPU/memory)
-- [ ] **Clear cache:** `docker system prune` (free space)
-- [ ] **Rebuild if needed:** `docker compose up --build`
+- **Update:** `docker compose pull && docker compose up -d`. Back up first ([Advanced → Backup & Restore](../5-CONFIGURATION/advanced.md#backup--restore)).
+- **Start from scratch:** `docker compose down`, then delete `./notebook_data` and `./surreal_data`. `docker compose down -v` does not delete them: they are bind mounts, not volumes.
 
 ---
 
-## Nuclear Options (Last Resort)
+## Still stuck?
 
-**Completely reset (will lose all data in Docker):**
-
-```bash
-docker compose down -v
-docker compose up --build
-```
-
-**Reset to defaults:**
-```bash
-# Backup your .env first!
-cp .env .env.backup
-
-# Reset to example
-cp .env.example .env
-
-# Edit with your API keys
-# Restart
-docker compose up
-```
-
----
-
-## Prevention Tips
-
-1. **Keep backups** — Export your notebooks regularly
-2. **Monitor logs** — Check `docker compose logs` periodically
-3. **Update regularly** — Pull latest image: `docker pull lfnovo/open_notebook:latest`
-4. **Document changes** — Keep notes on what you configured
-5. **Test after updates** — Verify everything works
-
----
-
-## Still Stuck?
-
-- **Look up your exact error** in [Troubleshooting Index](index.md)
-- **Check the FAQ** in [FAQ](faq.md)
-- **Check logs:** `docker compose logs | head -50`
-- **Ask for help:** [Discord](https://discord.gg/37XJPXfz2w) or [GitHub Issues](https://github.com/lfnovo/open-notebook/issues)
+- Look up your exact message in the [Troubleshooting index](index.md).
+- Ask in [Discord](https://discord.gg/37XJPXfz2w) or [GitHub Discussions](https://github.com/lfnovo/open-notebook/discussions/categories/q-a).
diff --git a/docs/SECURITY_REVIEW.md b/docs/SECURITY_REVIEW.md
index 32862769..54765dd9 100644
--- a/docs/SECURITY_REVIEW.md
+++ b/docs/SECURITY_REVIEW.md
@@ -1,24 +1,26 @@
-# Security Review - API Configuration UI
+# Credentials UI Security Review (January 2026, historical)
 
-## Date: 2026-01-27 (Updated: 2026-01-28)
-## Reviewer: Security Audit
+> **Historical snapshot.** This is a point-in-time review of the API key management feature (the Manage → Models credentials UI), done on 2026-01-27/28. It is **not** a security assessment of Open Notebook as a whole, and it is not kept up to date. Rows that were wrong at the time or have since changed are annotated below (corrections verified against the code in October 2026, v1.15.0).
+>
+> For current guidance see [Security Configuration](5-CONFIGURATION/security.md) (operators) and [Developer security notes](7-DEVELOPMENT/security.md) plus the decision records in [docs/7-DEVELOPMENT/decisions/](7-DEVELOPMENT/decisions/) (contributors). To report a vulnerability, follow [SECURITY.md](../SECURITY.md).
 
 ---
 
-## Summary
+## Scope
 
-Security review of the API key management implementation for Open Notebook. The implementation uses a database-first approach with environment variable fallback.
+API key management: database-first credential storage with environment-variable fallback, the connection tester, and the frontend forms that create credentials. Authentication was reviewed only as far as it protects these endpoints.
 
 ---
 
 ## Encryption
 
-| Item | Status | Notes |
-|------|--------|-------|
-| Fernet encryption implemented | PASS | `open_notebook/utils/encryption.py` uses AES-128-CBC + HMAC-SHA256 |
+| Item | Status (Jan 2026) | Notes |
+|------|-------------------|-------|
+| Fernet encryption implemented | PASS | `open_notebook/utils/encryption.py`, AES-128-CBC + HMAC-SHA256 |
 | Keys encrypted before DB storage | PASS | `encrypt_value()` applied on save |
 | Keys decrypted only when needed | PASS | `decrypt_value()` called when reading |
-| Encryption key required | PASS | No default key; ValueError if not configured |
+| Encryption key required | PASS | No default key; `ValueError` if not configured. **Gap not noted at the time:** the shipped `docker-compose.yml` sets the public placeholder `change-me-to-a-secret-string`, which passes the "is set" check without any warning |
+| Key derivation | *(not reviewed)* | **Changed since.** In January the Fernet key was a bare SHA-256 of the passphrase. Since v1.15.0 it is PBKDF2-HMAC-SHA256 with 600k iterations and a fixed application salt, new values carry a `pbkdf2v1:` marker, and `POST /api/credentials/migrate-encryption` rewrites old values (#1317, ADR-009) |
 | Docker secrets support | PASS | `_FILE` suffix pattern supported |
 | Documented in .env.example | PASS | Encryption key documented |
 
@@ -26,71 +28,70 @@ Security review of the API key management implementation for Open Notebook. The
 
 ## API Security
 
-| Item | Status | Notes |
-|------|--------|-------|
+| Item | Status (Jan 2026) | Notes |
+|------|-------------------|-------|
 | Test endpoint implemented | PASS | `connection_tester.py` validates keys |
 | Test doesn't expose keys | PASS | Only returns success/failure |
 | Error messages don't leak info | PASS | Generic error messages |
-| URL validation for SSRF | PASS | Blocks private IPs (except Ollama) |
-| Rate limiting | NOT IMPL | Future enhancement |
+| URL validation for SSRF | **PARTIAL** (corrected) | The original note, "Blocks private IPs (except Ollama)", was wrong. `url_validation.py` deliberately **allows** private IPs and localhost for every provider (self-hosted servers need them). It blocks non-http(s) schemes, link-local addresses (169.254.0.0/16, fe80::/10, including IPv4-mapped forms) and the AWS IPv6 metadata address `fd00:ec2::254`. Outbound calls to user-supplied hosts are pinned to the vetted IP to close DNS-rebinding gaps (`prepare_pinned_http_target`) |
+| Rate limiting | NOT IMPL | Still not implemented |
 
 ---
 
 ## Frontend Security
 
-| Item | Status | Notes |
-|------|--------|-------|
-| No keys in localStorage | PASS | Keys only in React state during entry |
-| Keys masked in UI | PASS | Shows `************` placeholder |
+| Item | Status (Jan 2026) | Notes |
+|------|-------------------|-------|
+| No keys in localStorage | PASS | Provider API keys live only in component state while typed. (The **instance password** is stored in `localStorage` after login; see [Security Configuration](5-CONFIGURATION/security.md#how-the-ui-handles-it)) |
+| Keys masked in UI | PASS | Shows a placeholder; the API never returns stored keys |
 | No keys in console.log | PASS | No logging of sensitive data |
-| autocomplete attributes | PARTIAL | Some forms missing autocomplete="off" |
+| autocomplete attributes | PARTIAL | Only the API key input in `CredentialFormDialog.tsx` sets `autoComplete="off"`. The "Frontend forms … PASS" row in the files table below should be read with this caveat |
 
 ---
 
 ## Authentication
 
-| Item | Status | Notes |
-|------|--------|-------|
+| Item | Status (Jan 2026) | Notes |
+|------|-------------------|-------|
 | Password protection | PASS | Bearer token authentication |
-| Default password | PASS | Auth is fully disabled (not a hardcoded default password) when `OPEN_NOTEBOOK_PASSWORD` is unset |
+| Default password | PASS | No hardcoded default; auth is fully disabled when `OPEN_NOTEBOOK_PASSWORD` is unset |
 | Docker secrets support | PASS | `_FILE` suffix for password |
-| Security warnings | PASS | Logged when using defaults |
+| Security warnings | **PARTIAL** (corrected) | The original note, "Logged when using defaults", was wrong. The API warns only when the encryption key is missing and when `CORS_ORIGINS` is the default wildcard. Nothing is logged when `OPEN_NOTEBOOK_PASSWORD` is unset or when the placeholder encryption key is used |
+
+---
+
+## Not covered by this review
+
+Topics outside the credentials UI that a whole-application review would need, several of which changed after January 2026: CORS configuration (`CORS_ORIGINS`), request body limits (`OPEN_NOTEBOOK_MAX_UPLOAD_SIZE_MB`), the SurrealDB `root`/`root` default, source upload handling, and the password stored in browser `localStorage`.
 
 ---
 
 ## Files Reviewed
 
-| Component | Path | Status |
-|-----------|------|--------|
+| Component | Path | Status (Jan 2026) |
+|-----------|------|-------------------|
 | Encryption | `open_notebook/utils/encryption.py` | PASS |
 | Credential model | `open_notebook/domain/credential.py` | PASS |
 | Credentials router | `api/routers/credentials.py` | PASS |
 | Key provider | `open_notebook/ai/key_provider.py` | PASS |
 | Connection tester | `open_notebook/ai/connection_tester.py` | PASS |
 | Auth middleware | `api/auth.py` | PASS |
-| Frontend forms | `frontend/src/components/settings/*.tsx` | PASS |
+| Frontend forms | `frontend/src/components/settings/*.tsx` | PASS (see autocomplete caveat above) |
 | Environment example | `.env.example` | PASS |
 
 ---
 
-## Remaining Recommendations
+## Recommendations made at the time
 
-### Future Improvements
-
-1. **Rate limiting** - Add rate limiting on `/credentials/*` endpoints
-2. **Autocomplete attributes** - Add `autocomplete="new-password"` to all password inputs
-3. **Show last 4 characters** - Display `********xxxx` format for key identification
-4. **Audit logging** - Log API key changes with timestamps
+1. **Rate limiting** on `/api/credentials/*` endpoints — not implemented.
+2. **Autocomplete attributes** on all password inputs — partly done.
+3. **Show the last 4 characters** of stored keys — not implemented.
+4. **Audit logging** of API key changes — not implemented.
 
 ---
 
-## Conclusion
+## Original conclusion (January 2026)
 
-The API Configuration UI implementation meets security requirements:
+> The API Configuration UI implementation meets security requirements: API keys encrypted at rest using Fernet (key must be explicitly configured); keys never returned to frontend; URL validation prevents SSRF attacks; Docker secrets supported for production deployments. **Review Status: PASS**
 
-- API keys encrypted at rest using Fernet (key must be explicitly configured)
-- Keys never returned to frontend
-- URL validation prevents SSRF attacks
-- Docker secrets supported for production deployments
-
-**Review Status: PASS**
+With the corrections above, the accurate reading is: the credentials UI encrypts keys at rest and never returns them, SSRF protection targets cloud metadata endpoints only (private networks are intentionally reachable), and two rows were overstated. The verdict applied to that feature only.

From a0f6f3081ae06328f0a451b3a3ef2959ca25721d Mon Sep 17 00:00:00 2001
From: Luis Novo <lfnovo@gmail.com>
Date: Sun, 4 Oct 2026 23:29:29 -0300
Subject: [PATCH 345/345] docs: defaults table matches the code; CHANGELOG
 entry for the docs overhaul (#1462)

The Text-to-Speech default is read by nothing (podcasts use each speaker
profile's voice model) and the Tools Model only backs API Ask calls
without explicit models; the provider page now says so, matching the
user guide.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
---
 CHANGELOG.md                 | 7 +++++++
 docs/4-AI-PROVIDERS/index.md | 8 ++++----
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1ac2bba3..9d5f0214 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+- **Documentation rewritten against the code.** Every page under `docs/` was checked against v1.15.0 and rewritten where it described an older or imagined product (#1458, #1459, #1460, #1461):
+  - **Install:** one canonical path built on the shipped `docker-compose.yml`, with small override files for the Ollama and LM Studio variants. The network-exposure warning (bind ports to `127.0.0.1` or set a password) comes before the first `docker compose up -d`. Example encryption keys are generated, never copied. First-run setup lives in one place, [Connect a provider](docs/4-AI-PROVIDERS/index.md#connect-a-provider), and ends in a working chat via **Auto-assign Defaults**. The provider table is built from the provider registry: 24 providers, with the model types each one offers
+  - **User guide and concepts:** insights are a first-class concept and the context mode is *Insights only*. Ask is described as three stages. UI labels match the current app. Invented features are gone (tags, export/share, batch transformations, page-number citations and others). About 6,200 lines became about 1,450
+  - **Configuration and troubleshooting:** `environment-reference.md` is the one complete list of variables, each marked with which process reads it. Troubleshooting entries start from the exact error message the app shows; a new page covers source processing and podcast failures. Security docs cover PBKDF2 credential encryption and the back-up-before-migrating warning
+  - **Development:** `architecture.md`, `testing.md`, `api-reference.md` and `code-standards.md` are rewritten from the code. A new playbook covers adding an AI provider. Dev setup lives on one page. The AGENTS files agree with the docs. Contributor conventions (Conventional Commits, CHANGELOG sections, pre-PR checks that match CI) are documented
+
 ### Fixed
 - **Docs no longer recommend settings that do nothing.** `API_CLIENT_TIMEOUT` was never read by Open Notebook; the timeout guidance now covers what actually applies: `ESPERANTO_LLM_TIMEOUT` per model call (keep it below 600) and the web UI's 10-minute request limit (`NEXT_PUBLIC_API_TIMEOUT_MS`, build time only). Remaining `SURREAL_COMMANDS_MAX_TASKS` advice now uses `OPEN_NOTEBOOK_WORKER_MAX_TASKS`. Docker instructions no longer say to edit `.env` and `docker compose restart`: the shipped compose file doesn't load `.env` into the container and `restart` doesn't reload environment changes, so they now point to the `open_notebook` service's `environment:` block and `docker compose up -d`
 - **Timeouts no longer read as connection failures.** A model that doesn't answer within `ESPERANTO_LLM_TIMEOUT` used to report "Could not connect to the AI provider"; it now says the provider took too long and how to raise the limit. Connection failures (including connect timeouts) keep the old message
diff --git a/docs/4-AI-PROVIDERS/index.md b/docs/4-AI-PROVIDERS/index.md
index a617dbbe..2934a0af 100644
--- a/docs/4-AI-PROVIDERS/index.md
+++ b/docs/4-AI-PROVIDERS/index.md
@@ -1,6 +1,6 @@
 # AI Providers
 
-Open Notebook talks to AI models through providers. You connect a provider once in **Manage → Models**, pick which of its models to use, and choose a default model for each job (chat, embeddings, podcasts, transcription).
+Open Notebook talks to AI models through providers. You connect a provider once in **Manage → Models**, pick which of its models to use, and choose a default model for each job (chat, embeddings, transcription and more).
 
 This page has three parts:
 
@@ -51,13 +51,13 @@ Scroll down to **Default Model Assignments** on the same page.
 |---|---|---|
 | **Chat Model** | Yes | Notebook and source chat |
 | **Embedding Model** | Yes | Vector search and Ask |
-| **Text-to-Speech Model** | No | Podcasts |
+| **Text-to-Speech Model** | No | Not used yet: podcasts use the voice model set in each speaker profile |
 | **Speech-to-Text Model** | No | Transcribing audio and video sources |
 | **Transformation Model** | No (uses the chat model) | Transformations and insights |
-| **Tools Model** | No (uses the chat model) | Ask (search planning) |
+| **Tools Model** | No (uses the chat model) | Ask requests made through the API without explicit models (the Ask page uses the models picked there, which default to the chat model) |
 | **Large Context Model** | No (uses the chat model) | Any prompt over ~105K tokens is sent here automatically |
 
-**Auto-assign Defaults** only fills Chat Model and Embedding Model. Set Text-to-Speech and Speech-to-Text by hand if you want podcasts or audio/video transcription.
+**Auto-assign Defaults** only fills Chat Model and Embedding Model. Set Speech-to-Text by hand if you want audio/video transcription; for podcasts, pick a voice model in each speaker profile (**Podcasts → Profiles**).
 
 ### 5. Check that chat works